From 404ee3fec442838b068a79df338bb5074947b599 Mon Sep 17 00:00:00 2001
From: emily <emily@kitsunes.eu>
Date: Mon, 11 May 2026 09:15:08 +0200
Subject: [PATCH] a

---
 .gitignore                                    |   336 +
 ATAPAuditor/ATAPAuditor.psd1                  |    45 +
 ATAPAuditor/ATAPAuditor.psm1                  |   931 +
 ...Benchmark-FBPro-1.2.1#RegistrySettings.ps1 |  1852 ++
 .../AuditGroups/Debian Linux 11-CIS-1.0.0.ps1 |  5295 +++++
 .../AuditGroups/Debian Linux 12-CIS-1.0.1.ps1 |  4115 ++++
 ...security settings-FBPro-1.0#UserRights.ps1 |   184 +
 ...ogle Chrome-CIS-2.0.0#RegistrySettings.ps1 |  2402 ++
 ...gle Chrome-DISA-V1R15#RegistrySettings.ps1 |  1296 ++
 ...rosoft Edge-CIS-2.0.0#RegistrySettings.ps1 |  4854 ++++
 ...ft Edge-Microsoft-117#RegistrySettings.ps1 |   684 +
 ...Explorer 11-CIS-1.0.0#RegistrySettings.ps1 |  5650 +++++
 ...xplorer 11-DISA-V1R16#RegistrySettings.ps1 |  4968 ++++
 ...t Explorer 11-MS-2004#RegistrySettings.ps1 |  4860 ++++
 ... Enterprise-CIS-1.2.0#RegistrySettings.ps1 | 11884 ++++++++++
 ...s 10 GDPR-MS-16082019#RegistrySettings.ps1 |  4215 ++++
 ...10 SiSyPHuS HD-BSI-1.3#AccountPolicies.ps1 |   255 +
 ...s 10 SiSyPHuS HD-BSI-1.3#AuditPolicies.ps1 |    77 +
 ...0 SiSyPHuS HD-BSI-1.3#RegistrySettings.ps1 | 12419 ++++++++++
 ...10 SiSyPHuS HD-BSI-1.3#SecurityOptions.ps1 |   156 +
 ...dows 10 SiSyPHuS HD-BSI-1.3#UserRights.ps1 |  1479 ++
 ...SiSyPHuS Logging-BSI-1.3#AuditPolicies.ps1 |  1502 ++
 ...yPHuS Logging-BSI-1.3#RegistrySettings.ps1 |   711 +
 ...10 SiSyPHuS NE-BSI-1.3#AccountPolicies.ps1 |   171 +
 ...s 10 SiSyPHuS NE-BSI-1.3#AuditPolicies.ps1 |    77 +
 ...0 SiSyPHuS NE-BSI-1.3#RegistrySettings.ps1 |  8320 +++++++
 ...10 SiSyPHuS NE-BSI-1.3#SecurityOptions.ps1 |   130 +
 ...dows 10 SiSyPHuS NE-BSI-1.3#UserRights.ps1 |  1385 ++
 ...s-Telemetrie-BSI-V1.2#RegistrySettings.ps1 |   289 +
 ...t Windows 10-ACSC-21H1#AccountPolicies.ps1 |   199 +
 ...oft Windows 10-ACSC-21H1#AuditPolicies.ps1 |  1217 +
 ... Windows 10-ACSC-21H1#RegistrySettings.ps1 | 12743 +++++++++++
 ...t Windows 10-ACSC-21H1#SecurityOptions.ps1 |   110 +
 ...rosoft Windows 10-ACSC-21H1#UserRights.ps1 |   926 +
 ...t Windows 10-CIS-3.0.0#AccountPolicies.ps1 |   283 +
 ...oft Windows 10-CIS-3.0.0#AuditPolicies.ps1 |  1616 ++
 ... Windows 10-CIS-3.0.0#RegistrySettings.ps1 | 17452 ++++++++++++++
 ...t Windows 10-CIS-3.0.0#SecurityOptions.ps1 |   130 +
 ...rosoft Windows 10-CIS-3.0.0#UserRights.ps1 |  1488 ++
 ... Windows 10-DISA-V1R23#AccountPolicies.ps1 |   252 +
 ...ft Windows 10-DISA-V1R23#AuditPolicies.ps1 |  1559 ++
 ...Windows 10-DISA-V1R23#RegistrySettings.ps1 |  4142 ++++
 ... Windows 10-DISA-V1R23#SecurityOptions.ps1 |   130 +
 ...osoft Windows 10-DISA-V1R23#UserRights.ps1 |   956 +
 ...dows 10-Microsoft-21H1#AccountPolicies.ps1 |   196 +
 ...indows 10-Microsoft-21H1#AuditPolicies.ps1 |  1388 ++
 ...ows 10-Microsoft-21H1#RegistrySettings.ps1 | 10968 +++++++++
 ...dows 10-Microsoft-21H1#SecurityOptions.ps1 |    26 +
 ...t Windows 10-Microsoft-21H1#UserRights.ps1 |   882 +
 ...-Stand-alone-CIS-2.0.0#AccountPolicies.ps1 |   255 +
 ...10-Stand-alone-CIS-2.0.0#AuditPolicies.ps1 |  1616 ++
 ...Stand-alone-CIS-2.0.0#RegistrySettings.ps1 | 16305 +++++++++++++
 ...-Stand-alone-CIS-2.0.0#SecurityOptions.ps1 |   130 +
 ...ws 10-Stand-alone-CIS-2.0.0#UserRights.ps1 |  1312 ++
 ...t Windows 11-CIS-4.0.0#AccountPolicies.ps1 |   284 +
 ...oft Windows 11-CIS-4.0.0#AuditPolicies.ps1 |  1616 ++
 ... Windows 11-CIS-4.0.0#RegistrySettings.ps1 | 18823 ++++++++++++++++
 ...t Windows 11-CIS-4.0.0#SecurityOptions.ps1 |   130 +
 ...rosoft Windows 11-CIS-4.0.0#UserRights.ps1 |  1509 ++
 ...dows 11-Microsoft-22H2#AccountPolicies.ps1 |   196 +
 ...indows 11-Microsoft-22H2#AuditPolicies.ps1 |  1388 ++
 ...ows 11-Microsoft-22H2#RegistrySettings.ps1 | 12011 ++++++++++
 ...dows 11-Microsoft-22H2#SecurityOptions.ps1 |    26 +
 ...t Windows 11-Microsoft-22H2#UserRights.ps1 |   875 +
 ...-Stand-alone-CIS-2.0.0#AccountPolicies.ps1 |   255 +
 ...11-Stand-alone-CIS-2.0.0#AuditPolicies.ps1 |  1616 ++
 ...Stand-alone-CIS-2.0.0#RegistrySettings.ps1 | 16049 +++++++++++++
 ...-Stand-alone-CIS-2.0.0#SecurityOptions.ps1 |   130 +
 ...ws 11-Stand-alone-CIS-2.0.0#UserRights.ps1 |  1311 ++
 ...ft Windows 7-CIS-3.1.0#AccountPolicies.ps1 |   255 +
 ...soft Windows 7-CIS-3.1.0#AuditPolicies.ps1 |  1388 ++
 ...t Windows 7-CIS-3.1.0#RegistrySettings.ps1 | 10042 +++++++++
 ...ngs-FB Pro GmbH-1.2.1#RegistrySettings.ps1 |   144 +
 ... Settings-FB Pro GmbH-1.2.1#UserRights.ps1 |   102 +
 ...rver 2012 R2-CIS-3.0.0#AccountPolicies.ps1 |   255 +
 ...Server 2012 R2-CIS-3.0.0#AuditPolicies.ps1 |  1922 ++
 ...ver 2012 R2-CIS-3.0.0#RegistrySettings.ps1 | 12455 ++++++++++
 ...rver 2012 R2-CIS-3.0.0#SecurityOptions.ps1 |   133 +
 ...ws Server 2012 R2-CIS-3.0.0#UserRights.ps1 |  1937 ++
 ...ver 2012 R2-DISA-V2R19#AccountPolicies.ps1 |   252 +
 ...erver 2012 R2-DISA-V2R19#AuditPolicies.ps1 |  1217 +
 ...er 2012 R2-DISA-V2R19#RegistrySettings.ps1 |  6330 ++++++
 ... Server 2016-CIS-3.0.0#AccountPolicies.ps1 |   283 +
 ...ws Server 2016-CIS-3.0.0#AuditPolicies.ps1 |  2036 ++
 ...Server 2016-CIS-3.0.0#RegistrySettings.ps1 | 12380 ++++++++++
 ... Server 2016-CIS-3.0.0#SecurityOptions.ps1 |   133 +
 ...ndows Server 2016-CIS-3.0.0#UserRights.ps1 |  1984 ++
 ...ndows Server 2016-DISA-1.12#UserRights.ps1 |    71 +
 ...Server 2016-DISA-V1R12#AccountPolicies.ps1 |   252 +
 ...s Server 2016-DISA-V1R12#AuditPolicies.ps1 |  1502 ++
 ...erver 2016-DISA-V1R12#RegistrySettings.ps1 |  3437 +++
 ...Server 2016-DISA-V1R12#SecurityOptions.ps1 |   104 +
 ...r 2016-Microsoft-FINAL#AccountPolicies.ps1 |   252 +
 ...ver 2016-Microsoft-FINAL#AuditPolicies.ps1 |  1274 ++
 ... 2016-Microsoft-FINAL#RegistrySettings.ps1 |  3658 +++
 ...Server 2016-Microsoft-FINAL#UserRights.ps1 |  1031 +
 ... Server 2019-CIS-3.0.0#AccountPolicies.ps1 |   283 +
 ...ws Server 2019-CIS-3.0.0#AuditPolicies.ps1 |  2036 ++
 ...Server 2019-CIS-3.0.0#RegistrySettings.ps1 | 12919 +++++++++++
 ... Server 2019-CIS-3.0.0#SecurityOptions.ps1 |   133 +
 ...ndows Server 2019-CIS-3.0.0#UserRights.ps1 |  1979 ++
 ... Server 2019-DISA-V1R5#AccountPolicies.ps1 |   252 +
 ...ws Server 2019-DISA-V1R5#AuditPolicies.ps1 |  1502 ++
 ...Server 2019-DISA-V1R5#RegistrySettings.ps1 |  3482 +++
 ... Server 2019-DISA-V1R5#SecurityOptions.ps1 |   104 +
 ...r 2019-Microsoft-FINAL#AccountPolicies.ps1 |   252 +
 ...ver 2019-Microsoft-FINAL#AuditPolicies.ps1 |  1388 ++
 ... 2019-Microsoft-FINAL#RegistrySettings.ps1 |  9235 ++++++++
 ...r 2019-Microsoft-FINAL#SecurityOptions.ps1 |    52 +
 ...Server 2019-Microsoft-FINAL#UserRights.ps1 |   897 +
 ... Server 2022-CIS-3.0.0#AccountPolicies.ps1 |   283 +
 ...ws Server 2022-CIS-3.0.0#AuditPolicies.ps1 |  2036 ++
 ...Server 2022-CIS-3.0.0#RegistrySettings.ps1 | 13246 +++++++++++
 ... Server 2022-CIS-3.0.0#SecurityOptions.ps1 |   133 +
 ...ndows Server 2022-CIS-3.0.0#UserRights.ps1 |  1985 ++
 ... Server 2022-DISA-V1R1#AccountPolicies.ps1 |   252 +
 ...ws Server 2022-DISA-V1R1#AuditPolicies.ps1 |  1502 ++
 ...Server 2022-DISA-V1R1#RegistrySettings.ps1 |  3509 +++
 ... Server 2022-DISA-V1R1#SecurityOptions.ps1 |   104 +
 ...r 2022-Microsoft-FINAL#AccountPolicies.ps1 |   196 +
 ...ver 2022-Microsoft-FINAL#AuditPolicies.ps1 |  1730 ++
 ... 2022-Microsoft-FINAL#RegistrySettings.ps1 |  9699 ++++++++
 ...r 2022-Microsoft-FINAL#SecurityOptions.ps1 |    26 +
 ...Server 2022-Microsoft-FINAL#UserRights.ps1 |   925 +
 ... Server 2025-CIS-1.0.0#AccountPolicies.ps1 |   257 +
 ...ws Server 2025-CIS-1.0.0#AuditPolicies.ps1 |  2036 ++
 ...Server 2025-CIS-1.0.0#RegistrySettings.ps1 | 14316 ++++++++++++
 ... Server 2025-CIS-1.0.0#SecurityOptions.ps1 |   133 +
 ...ndows Server 2025-CIS-1.0.0#UserRights.ps1 |  1987 ++
 ATAPAuditor/AuditGroups/RSSeverityTests.ps1   |  2509 ++
 .../Red Hat Enterprise Linux 9-CIS-1.0.0.ps1  |  3832 ++++
 .../Red Hat Enterprise Linux 9-CIS-2.0.0.ps1  |  4148 ++++
 .../AuditGroups/SBD - Application Control.ps1 |    68 +
 .../SBD - Connectivity Security.ps1           |  1434 ++
 .../AuditGroups/SBD - Linux Base Security.ps1 |   462 +
 .../AuditGroups/SBD - Platform Security.ps1   |   569 +
 .../AuditGroups/SBD - PowerShell Security.ps1 |   204 +
 .../SBD - Windows Base Security.ps1           |   622 +
 .../SUSE Linux Enterprise 15-CIS-1.1.1.ps1    |  3541 +++
 .../Ubuntu Linux 20.04-CIS-1.1.0.ps1          |  5012 ++++
 .../Ubuntu Linux 22.04-CIS-2.0.0.ps1          |  4109 ++++
 ATAPAuditor/Helpers/AuditGroupFunctions.ps1   |   543 +
 ATAPAuditor/Helpers/Firewall.ps1              |    83 +
 ATAPAuditor/Helpers/HashHelper.ps1            |    58 +
 ATAPAuditor/Helpers/LinuxHelper.ps1           |   106 +
 ATAPAuditor/Helpers/LogFile.ps1               |    94 +
 ATAPAuditor/Helpers/Menu.ps1                  |   142 +
 ATAPAuditor/Helpers/ReportUnixOS.ps1          |    20 +
 ATAPAuditor/Helpers/ReportWindowsOS.ps1       |    41 +
 ATAPAuditor/Helpers/SecurityPolicy.psm1       |    36 +
 .../Debian_11/CIS-Debian-1.1.1.1.sh           |    32 +
 .../Debian_11/CIS-Debian-1.1.1.2.sh           |    31 +
 .../Debian_11/CIS-Debian-1.1.1.3.sh           |    31 +
 .../Debian_11/CIS-Debian-1.1.10.sh            |    35 +
 .../Debian_11/CIS-Debian-1.5.1.sh             |    18 +
 .../Debian_11/CIS-Debian-1.8.2.sh             |    73 +
 .../Debian_11/CIS-Debian-1.8.3.sh             |    43 +
 .../Debian_11/CIS-Debian-1.8.4.sh             |    70 +
 .../Debian_11/CIS-Debian-1.8.5.sh             |    65 +
 .../Debian_11/CIS-Debian-1.8.6.sh             |    75 +
 .../Debian_11/CIS-Debian-1.8.7.sh             |    65 +
 .../Debian_11/CIS-Debian-1.8.8.sh             |    76 +
 .../Debian_11/CIS-Debian-1.8.9.sh             |    43 +
 .../Debian_11/CIS-Debian-2.1.1.1.sh           |    37 +
 .../Debian_11/CIS-Debian-3.1.1.sh             |    15 +
 .../Debian_11/CIS-Debian-3.1.2.sh             |    29 +
 .../Debian_11/CIS-Debian-3.1.3.sh             |    40 +
 .../Debian_11/CIS-Debian-3.1.4.sh             |    39 +
 .../Debian_11/CIS-Debian-3.1.5.sh             |    42 +
 .../Debian_11/CIS-Debian-3.1.6.sh             |    38 +
 .../Debian_11/CIS-Debian-3.2.1.sh             |    33 +
 .../Debian_11/CIS-Debian-3.2.2.sh             |    54 +
 .../Debian_11/CIS-Debian-3.3.1.sh             |    56 +
 .../Debian_11/CIS-Debian-3.3.2.sh             |    56 +
 .../Debian_11/CIS-Debian-3.3.3.sh             |    35 +
 .../Debian_11/CIS-Debian-3.3.4.sh             |    35 +
 .../Debian_11/CIS-Debian-3.3.5.sh             |    34 +
 .../Debian_11/CIS-Debian-3.3.6.sh             |    34 +
 .../Debian_11/CIS-Debian-3.3.7.sh             |    33 +
 .../Debian_11/CIS-Debian-3.3.8.sh             |    33 +
 .../Debian_11/CIS-Debian-3.3.9.sh             |    56 +
 .../Debian_11/CIS-Debian-3.5.1.6.sh           |     5 +
 .../Debian_11/CIS-Debian-4.1.3.6-A.sh         |     7 +
 .../Debian_11/CIS-Debian-4.1.3.6-B.sh         |    10 +
 .../Debian_11/CIS-Debian-4.1.5.sh             |     2 +
 .../Debian_11/CIS-Debian-4.2.3.sh             |    68 +
 .../Debian_11/CIS-Debian-5.2.2.sh             |    24 +
 .../Debian_11/CIS-Debian-5.4.5.sh             |    12 +
 .../Debian_11/CIS-Debian-5.5.1.5.sh           |     9 +
 .../Debian_11/CIS-Debian-5.5.2.sh             |     4 +
 .../Debian_11/CIS-Debian-5.5.4.sh             |     7 +
 .../Debian_11/CIS-Debian-5.5.5.sh             |    13 +
 .../Debian_11/CIS-Debian-6.2.11.sh            |    13 +
 .../Debian_11/CIS-Debian-6.2.12.sh            |    13 +
 .../Debian_11/CIS-Debian-6.2.13.sh            |    20 +
 .../Debian_11/CIS-Debian-6.2.14.sh            |    29 +
 .../Debian_11/CIS-Debian-6.2.15.sh            |    16 +
 .../Debian_11/CIS-Debian-6.2.16.sh            |    16 +
 .../Debian_11/CIS-Debian-6.2.17.sh            |    20 +
 .../Debian_11/CIS-Debian-6.2.3.sh             |     9 +
 .../Debian_11/CIS-Debian-6.2.5.sh             |    10 +
 .../Debian_11/CIS-Debian-6.2.6.sh             |     4 +
 .../Debian_11/CIS-Debian-6.2.7.sh             |     4 +
 .../Debian_11/CIS-Debian-6.2.8.sh             |     4 +
 .../Debian_11/CIS-Debian-6.2.9.sh             |     9 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_1111.sh   |    33 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_1112.sh   |    32 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_119.sh    |    32 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_182.sh    |    52 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_183.sh    |    41 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_184.sh    |    55 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_185.sh    |    45 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_186.sh    |    61 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_187.sh    |    45 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_188.sh    |    53 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_189.sh    |    36 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_312.sh    |    40 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_313.sh    |    31 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_321.sh    |    34 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_322_1.sh  |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_322_2.sh  |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_331_11.sh |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_331_12.sh |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_331_21.sh |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_331_22.sh |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_332_11.sh |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_332_12.sh |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_332_21.sh |    14 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_332_22.sh |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_334_1.sh  |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_334_2.sh  |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_335.sh    |    17 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_336.sh    |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_337_1.sh  |    14 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_337_2.sh  |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_338.sh    |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_339_1.sh  |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_339_2.sh  |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_3412.sh   |    26 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_3421.sh   |    19 +
 .../RHEL9/CIS100_RHEL9_41310_1.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41310_2.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41313_1.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41313_2.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41314_1.sh             |     4 +
 .../RHEL9/CIS100_RHEL9_41314_2.sh             |     4 +
 .../RHEL9/CIS100_RHEL9_41315_1.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41315_2.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41316_1.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41316_2.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41317_1.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41317_2.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41318_1.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41318_2.sh             |     5 +
 .../RHEL9/CIS100_RHEL9_41319_1.sh             |     6 +
 .../RHEL9/CIS100_RHEL9_41319_2.sh             |     6 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4133_1.sh |     5 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4133_2.sh |     5 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4136_1.sh |     8 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4136_2.sh |     9 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4137_1.sh |     5 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4137_2.sh |     5 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4139_1.sh |     5 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4139_2.sh |     5 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4141.sh   |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4142.sh   |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4144.sh   |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_4145.sh   |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_522.sh    |    30 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_523.sh    |    30 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5611_1.sh |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5611_2.sh |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5612_1.sh |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5612_2.sh |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5613_1.sh |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5613_2.sh |     9 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5614_1.sh |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5614_2.sh |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_5615.sh   |     9 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_562_1.sh  |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_562_2.sh  |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_565_1.sh  |     6 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_565_2.sh  |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_621.sh    |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_6210.sh   |    14 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_6211.sh   |    14 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_6212.sh   |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_6213.sh   |    25 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_6214.sh   |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_6215.sh   |    15 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_6216.sh   |    19 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_622.sh    |     4 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_628.sh    |    16 +
 .../ShellScripts/RHEL9/CIS100_RHEL9_629.sh    |     4 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.2.1.2.sh    |    42 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.3.1.2.sh    |     7 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.3.1.3.sh    |    20 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.3.1.5.sh    |     7 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.5.3.sh      |    12 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.5.4.sh      |    12 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.6.1.sh      |     3 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.6.2.sh      |    13 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.7.1.sh      |    15 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.7.4.sh      |    11 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.10.sh     |    17 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.2.sh      |    52 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.3.sh      |    41 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.4.sh      |    55 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.5.sh      |    45 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.6.sh      |    61 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.7.sh      |    45 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.8.sh      |    53 +
 .../ShellScripts/RHEL9_CIS2.0.0/1.8.9.sh      |    36 +
 .../ShellScripts/RHEL9_CIS2.0.0/2.3.3.sh      |    18 +
 .../ShellScripts/RHEL9_CIS2.0.0/2.4.18.sh     |    44 +
 .../ShellScripts/RHEL9_CIS2.0.0/3.1.3.sh      |    31 +
 .../ShellScripts/RHEL9_CIS2.0.0/4.1.2.sh      |    26 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.10.sh     |    28 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.11.sh     |    28 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.12.sh     |    27 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.13.sh     |    28 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.14.sh     |    29 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.15.sh     |    28 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.17.sh     |    27 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.18.sh     |    29 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.1.9.sh      |    34 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.2.2.sh    |    39 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.2.3.sh    |    32 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.2.4.sh    |    45 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.2.5.sh    |    31 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.3.2.7.sh  |    30 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.1.sh  |    17 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.2.sh  |    15 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.2.sh  |    24 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.3.sh  |    29 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.4.1.6.sh    |     9 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.4.2.1.sh    |     4 +
 .../ShellScripts/RHEL9_CIS2.0.0/5.4.2.5.sh    |    16 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.2.2.1.4.sh  |    13 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.2.2.2.sh    |    16 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.2.2.3.sh    |    16 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.2.2.4.sh    |    16 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.2.3.4.sh    |    24 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.2.3.7.sh    |    23 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.3.1.2.sh    |    15 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.3.1.3.sh    |    15 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.3.4.1.sh    |    17 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.3.4.2.sh    |    29 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.3.4.3.sh    |    23 +
 .../ShellScripts/RHEL9_CIS2.0.0/6.3.4.4.sh    |    27 +
 .../ShellScripts/RHEL9_CIS2.0.0/7.2.1.sh      |     4 +
 .../ShellScripts/RHEL9_CIS2.0.0/7.2.2.sh      |     4 +
 .../ShellScripts/SLE_15/CIS-SEL15-1.8.1.3.sh  |     2 +
 .../ShellScripts/SLE_15/CIS-SEL15-5.4.2_1.sh  |     2 +
 .../ShellScripts/SLE_15/CIS-SEL15-5.4.2_2.sh  |     2 +
 .../ShellScripts/SLE_15/CIS-SEL15-5.4.4.sh    |     4 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.1.sh    |     2 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.10.sh   |    10 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.11.sh   |    30 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.12.sh   |    12 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.18_1.sh |     2 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.18_2.sh |     2 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.2.sh    |     2 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.5.sh    |     6 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.6.sh    |    20 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.7.sh    |    11 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.8.sh    |    18 +
 .../ShellScripts/SLE_15/CIS-SEL15-6.2.9.sh    |    10 +
 .../Ubuntu22.04_Debian12/1.1.2.2.1.sh         |     5 +
 .../Ubuntu22.04_Debian12/1.3.1.2.sh           |    15 +
 .../Ubuntu22.04_Debian12/1.3.1.4.sh           |    10 +
 .../Ubuntu22.04_Debian12/1.5.3.sh             |    23 +
 .../Ubuntu22.04_Debian12/1.6.1.sh             |    15 +
 .../Ubuntu22.04_Debian12/1.6.4.sh             |    11 +
 .../Ubuntu22.04_Debian12/1.7.10.sh            |    17 +
 .../Ubuntu22.04_Debian12/1.8.2.sh             |    32 +
 .../Ubuntu22.04_Debian12/1.8.3.sh             |    28 +
 .../Ubuntu22.04_Debian12/1.8.4.sh             |    17 +
 .../Ubuntu22.04_Debian12/1.8.5.sh             |    30 +
 .../Ubuntu22.04_Debian12/1.8.6.sh             |    10 +
 .../Ubuntu22.04_Debian12/1.8.7.sh             |    30 +
 .../Ubuntu22.04_Debian12/1.8.8.sh             |     7 +
 .../Ubuntu22.04_Debian12/1.8.9.sh             |    29 +
 .../Ubuntu22.04_Debian12/2.1.1.1.sh           |    30 +
 .../Ubuntu22.04_Debian12/2.3.3.2.sh           |    16 +
 .../Ubuntu22.04_Debian12/3.1.1.sh             |    22 +
 .../Ubuntu22.04_Debian12/3.5.1.6.sh           |     8 +
 .../Ubuntu22.04_Debian12/3.5.2.10_1.sh        |     2 +
 .../Ubuntu22.04_Debian12/3.5.2.10_2.sh        |     2 +
 .../Ubuntu22.04_Debian12/3.5.2.10_3.sh        |     2 +
 .../Ubuntu22.04_Debian12/4.1.3.11_1.sh        |    10 +
 .../Ubuntu22.04_Debian12/4.1.3.11_2.sh        |     9 +
 .../Ubuntu22.04_Debian12/4.2.3.sh             |    11 +
 .../Ubuntu22.04_Debian12/5.1.10.sh            |    27 +
 .../Ubuntu22.04_Debian12/5.1.11.sh            |    28 +
 .../Ubuntu22.04_Debian12/5.1.12.sh            |     9 +
 .../Ubuntu22.04_Debian12/5.1.13.sh            |    29 +
 .../Ubuntu22.04_Debian12/5.1.14.sh            |    28 +
 .../Ubuntu22.04_Debian12/5.1.15.sh            |    14 +
 .../Ubuntu22.04_Debian12/5.1.17.sh            |    29 +
 .../Ubuntu22.04_Debian12/5.1.18.sh            |    27 +
 .../Ubuntu22.04_Debian12/5.1.6.sh             |    15 +
 .../Ubuntu22.04_Debian12/5.1.7.sh             |    34 +
 .../Ubuntu22.04_Debian12/5.1.8.sh             |    28 +
 .../Ubuntu22.04_Debian12/5.1.9.sh             |    28 +
 .../Ubuntu22.04_Debian12/5.2.4.sh             |    16 +
 .../Ubuntu22.04_Debian12/5.2.5.sh             |    15 +
 .../Ubuntu22.04_Debian12/5.2.7.sh             |    12 +
 .../Ubuntu22.04_Debian12/5.3.2.1.sh           |    23 +
 .../Ubuntu22.04_Debian12/5.3.2.2.sh           |    40 +
 .../Ubuntu22.04_Debian12/5.3.2.3.sh           |    32 +
 .../Ubuntu22.04_Debian12/5.3.2.4.sh           |    30 +
 .../Ubuntu22.04_Debian12/5.3.3.2.7.sh         |    17 +
 .../Ubuntu22.04_Debian12/5.3.3.2.8.sh         |    30 +
 .../Ubuntu22.04_Debian12/5.3.3.3.1.sh         |    18 +
 .../Ubuntu22.04_Debian12/5.3.3.3.2.sh         |    15 +
 .../Ubuntu22.04_Debian12/5.3.3.4.2.sh         |     8 +
 .../Ubuntu22.04_Debian12/5.3.3.4.3.sh         |    14 +
 .../Ubuntu22.04_Debian12/5.4.2.4.sh           |    10 +
 .../Ubuntu22.04_Debian12/5.5.1.5.sh           |     9 +
 .../Ubuntu22.04_Debian12/6.2.1.1.4.sh         |    16 +
 .../Ubuntu22.04_Debian12/6.2.1.1.5.sh         |    16 +
 .../Ubuntu22.04_Debian12/6.2.1.1.6.sh         |    16 +
 .../Ubuntu22.04_Debian12/6.2.1.2.4.sh         |    13 +
 .../Ubuntu22.04_Debian12/6.2.3.sh             |     5 +
 .../Ubuntu22.04_Debian12/6.2.5.sh             |    10 +
 .../Ubuntu22.04_Debian12/6.2.6.sh             |     5 +
 .../Ubuntu22.04_Debian12/6.2.7.sh             |     5 +
 .../Ubuntu22.04_Debian12/6.2.8.sh             |     5 +
 .../Ubuntu22.04_Debian12/6.2.9.sh             |     9 +
 .../Ubuntu22.04_Debian12/6.3.1.3.sh           |    15 +
 .../Ubuntu22.04_Debian12/6.3.1.4.sh           |    15 +
 .../Ubuntu22.04_Debian12/6.3.4.1.sh           |    29 +
 .../Ubuntu22.04_Debian12/6.3.4.2.sh           |    23 +
 .../Ubuntu22.04_Debian12/6.3.4.3.sh           |    27 +
 .../Ubuntu22.04_Debian12/6.3.4.4.sh           |    17 +
 .../Helpers/ShellScripts/common/1.1.1.1.sh    |    58 +
 .../Helpers/ShellScripts/common/1.1.1.2.sh    |    59 +
 .../Helpers/ShellScripts/common/1.1.1.3.sh    |    58 +
 .../Helpers/ShellScripts/common/1.1.1.4.sh    |    58 +
 .../Helpers/ShellScripts/common/1.1.1.5.sh    |    58 +
 .../Helpers/ShellScripts/common/1.1.1.6.sh    |    63 +
 .../Helpers/ShellScripts/common/1.1.1.7.sh    |    58 +
 .../Helpers/ShellScripts/common/1.1.1.8.sh    |    59 +
 .../Helpers/ShellScripts/common/1.1.2.1.2.sh  |     9 +
 .../Helpers/ShellScripts/common/1.1.2.1.3.sh  |    11 +
 .../Helpers/ShellScripts/common/1.1.2.2.2.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.2.3.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.2.4.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.3.2.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.3.3.sh  |     9 +
 .../Helpers/ShellScripts/common/1.1.2.4.2.sh  |    11 +
 .../Helpers/ShellScripts/common/1.1.2.4.3.sh  |    11 +
 .../Helpers/ShellScripts/common/1.1.2.5.2.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.5.3.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.5.4.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.6.2.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.6.3.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.6.4.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.7.2.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.7.3.sh  |    18 +
 .../Helpers/ShellScripts/common/1.1.2.7.4.sh  |    18 +
 .../Helpers/ShellScripts/common/1.4.2.sh      |    31 +
 .../Helpers/ShellScripts/common/1.5.1.sh      |    19 +
 .../Helpers/ShellScripts/common/1.5.2.sh      |    18 +
 .../Helpers/ShellScripts/common/2.1.13.sh     |    15 +
 .../Helpers/ShellScripts/common/2.4.1.8.sh    |    44 +
 .../Helpers/ShellScripts/common/2.4.2.1.sh    |    43 +
 .../Helpers/ShellScripts/common/3.1.2.sh      |    43 +
 .../Helpers/ShellScripts/common/3.2.1.sh      |    58 +
 .../Helpers/ShellScripts/common/3.2.2.sh      |    58 +
 .../Helpers/ShellScripts/common/3.2.3.sh      |    58 +
 .../Helpers/ShellScripts/common/3.2.4.sh      |    58 +
 .../Helpers/ShellScripts/common/3.3.1.sh      |    23 +
 .../Helpers/ShellScripts/common/3.3.10.sh     |    18 +
 .../Helpers/ShellScripts/common/3.3.11.sh     |    24 +
 .../Helpers/ShellScripts/common/3.3.2.sh      |    24 +
 .../Helpers/ShellScripts/common/3.3.3.sh      |    18 +
 .../Helpers/ShellScripts/common/3.3.4.sh      |    19 +
 .../Helpers/ShellScripts/common/3.3.5.sh      |    24 +
 .../Helpers/ShellScripts/common/3.3.6.sh      |    24 +
 .../Helpers/ShellScripts/common/3.3.7.sh      |    24 +
 .../Helpers/ShellScripts/common/3.3.8.sh      |    24 +
 .../Helpers/ShellScripts/common/3.3.9.sh      |    24 +
 .../Helpers/ShellScripts/common/5.1.16.sh     |    28 +
 .../Helpers/ShellScripts/common/5.1.19.sh     |    27 +
 .../Helpers/ShellScripts/common/5.1.20.sh     |    28 +
 .../Helpers/ShellScripts/common/5.1.21.sh     |    26 +
 .../Helpers/ShellScripts/common/5.1.22.sh     |    28 +
 .../Helpers/ShellScripts/common/5.1.3.sh      |    13 +
 .../Helpers/ShellScripts/common/5.2.2.sh      |    11 +
 .../Helpers/ShellScripts/common/5.2.3.sh      |    10 +
 .../Helpers/ShellScripts/common/5.2.6.sh      |    23 +
 .../Helpers/ShellScripts/common/5.3.3.1.1.sh  |    16 +
 .../Helpers/ShellScripts/common/5.3.3.1.2.sh  |    23 +
 .../Helpers/ShellScripts/common/5.3.3.1.3.sh  |    24 +
 .../Helpers/ShellScripts/common/5.3.3.2.1.sh  |    49 +
 .../Helpers/ShellScripts/common/5.3.3.2.2.sh  |    49 +
 .../Helpers/ShellScripts/common/5.3.3.2.4.sh  |    48 +
 .../Helpers/ShellScripts/common/5.3.3.2.5.sh  |    49 +
 .../Helpers/ShellScripts/common/5.3.3.2.6.sh  |    48 +
 .../Helpers/ShellScripts/common/5.3.3.3.3.sh  |    15 +
 .../Helpers/ShellScripts/common/5.3.3.4.1.sh  |     8 +
 .../Helpers/ShellScripts/common/5.3.3.4.4.sh  |    15 +
 .../Helpers/ShellScripts/common/5.4.1.1.sh    |    49 +
 .../Helpers/ShellScripts/common/5.4.1.2.sh    |    48 +
 .../Helpers/ShellScripts/common/5.4.1.3.sh    |    48 +
 .../Helpers/ShellScripts/common/5.4.1.4.sh    |    55 +
 .../Helpers/ShellScripts/common/5.4.1.5.sh    |    22 +
 .../Helpers/ShellScripts/common/5.4.2.3.sh    |    17 +
 .../Helpers/ShellScripts/common/5.4.2.6.sh    |    10 +
 .../Helpers/ShellScripts/common/5.4.2.7.sh    |    20 +
 .../Helpers/ShellScripts/common/5.4.2.8.sh    |     8 +
 .../Helpers/ShellScripts/common/5.4.3.1.sh    |    23 +
 .../Helpers/ShellScripts/common/5.4.3.2.sh    |     8 +
 .../Helpers/ShellScripts/common/5.4.3.3.sh    |     9 +
 .../Helpers/ShellScripts/common/6.1.3.sh      |    15 +
 .../Helpers/ShellScripts/common/6.3.2.1.sh    |    17 +
 .../Helpers/ShellScripts/common/6.3.2.2.sh    |    17 +
 .../Helpers/ShellScripts/common/6.3.3.1.sh    |    10 +
 .../Helpers/ShellScripts/common/6.3.3.10.sh   |    16 +
 .../Helpers/ShellScripts/common/6.3.3.12.sh   |    10 +
 .../Helpers/ShellScripts/common/6.3.3.13.sh   |    16 +
 .../Helpers/ShellScripts/common/6.3.3.14.sh   |    10 +
 .../Helpers/ShellScripts/common/6.3.3.15.sh   |    16 +
 .../Helpers/ShellScripts/common/6.3.3.16.sh   |    16 +
 .../Helpers/ShellScripts/common/6.3.3.17.sh   |    16 +
 .../Helpers/ShellScripts/common/6.3.3.18.sh   |    16 +
 .../Helpers/ShellScripts/common/6.3.3.19.sh   |    17 +
 .../Helpers/ShellScripts/common/6.3.3.2.sh    |    10 +
 .../Helpers/ShellScripts/common/6.3.3.3.sh    |    18 +
 .../Helpers/ShellScripts/common/6.3.3.4.sh    |    11 +
 .../Helpers/ShellScripts/common/6.3.3.5.sh    |    11 +
 .../Helpers/ShellScripts/common/6.3.3.6.sh    |    38 +
 .../Helpers/ShellScripts/common/6.3.3.7.sh    |    15 +
 .../Helpers/ShellScripts/common/6.3.3.8.sh    |    12 +
 .../Helpers/ShellScripts/common/6.3.3.9.sh    |    16 +
 .../Helpers/ShellScripts/common/6.3.4.5.sh    |    28 +
 .../Helpers/ShellScripts/common/6.3.4.6.sh    |    10 +
 .../Helpers/ShellScripts/common/6.3.4.7.sh    |    11 +
 .../Helpers/ShellScripts/common/6.3.4.8.sh    |    20 +
 .../Helpers/ShellScripts/common/6.3.4.9.sh    |    24 +
 .../Helpers/ShellScripts/common/7.1.10.sh     |    13 +
 .../Helpers/ShellScripts/common/7.1.11.sh     |    31 +
 .../Helpers/ShellScripts/common/7.1.12.sh     |    21 +
 .../Helpers/ShellScripts/common/7.1.9.sh      |    18 +
 ATAPAuditor/Reports/Debian 10.ps1             |    19 +
 ATAPAuditor/Reports/Debian 11.ps1             |    19 +
 ATAPAuditor/Reports/Debian 12.ps1             |    19 +
 ATAPAuditor/Reports/Fedora 35.ps1             |    19 +
 ATAPAuditor/Reports/Google Chrome.ps1         |    30 +
 ATAPAuditor/Reports/Microsoft Edge.ps1        |    30 +
 ATAPAuditor/Reports/Microsoft IIS10.ps1       |  2915 +++
 .../Microsoft Internet Explorer 11.ps1        |    41 +
 ATAPAuditor/Reports/Microsoft Office.ps1      |    19 +
 .../Reports/Microsoft SQL Server 2016.ps1     |  2754 +++
 .../Reports/Microsoft Windows 10 BSI.ps1      |   114 +
 .../Reports/Microsoft Windows 10 GDPR.ps1     |    50 +
 .../Microsoft Windows 10 Stand-alone.ps1      |   103 +
 ATAPAuditor/Reports/Microsoft Windows 10.ps1  |   199 +
 .../Microsoft Windows 11 Stand-alone.ps1      |   103 +
 ATAPAuditor/Reports/Microsoft Windows 11.ps1  |   168 +
 ATAPAuditor/Reports/Microsoft Windows 7.ps1   |    47 +
 .../Reports/Microsoft Windows Server 2012.ps1 |    76 +
 .../Reports/Microsoft Windows Server 2016.ps1 |   102 +
 .../Reports/Microsoft Windows Server 2019.ps1 |   106 +
 .../Reports/Microsoft Windows Server 2022.ps1 |   106 +
 .../Reports/Microsoft Windows Server 2025.ps1 |    38 +
 ATAPAuditor/Reports/Mozilla Firefox.ps1       |   873 +
 .../Reports/Red Hat Enterprise Linux 9.ps1    |    19 +
 ATAPAuditor/Reports/SUSE 15.ps1               |    19 +
 ATAPAuditor/Reports/Ubuntu 20.04.ps1          |    19 +
 ATAPAuditor/Reports/Ubuntu 22.04.ps1          |    19 +
 ATAPAuditor/Resources/FirefoxPreferences.ps1  |   134 +
 .../Resources/WindowsSecurityPolicy.ps1       |    48 +
 ATAPHtmlReport/ATAPHtmlReport.Tests.ps1       |    91 +
 ATAPHtmlReport/ATAPHtmlReport.psd1            |   146 +
 ATAPHtmlReport/ATAPHtmlReport.psm1            |  2125 ++
 ATAPHtmlReport/README.md                      |   105 +
 ATAPHtmlReport/Settings.psd1                  |    57 +
 .../Tests/Compare-EqualCISVersions.Tests.ps1  |   224 +
 .../Tests/ConvertTo-HtmlTable.Tests.ps1       |    50 +
 ATAPHtmlReport/Tests/Get-ColorValue.Tests.ps1 |    55 +
 .../Get-MitigationsFromFailedTests.Tests.ps1  |   419 +
 .../Tests/Get-MitreTacticName.Tests.ps1       |    12 +
 .../Tests/Get-MitreTactics.Tests.ps1          |    13 +
 .../Tests/Get-MitreTechniqueName.Tests.ps1    |    17 +
 .../Tests/Get-TacticCounter.Tests.ps1         |    71 +
 .../Tests/Merge-CisAuditsToMitreMap.Tests.ps1 |    50 +
 ATAPHtmlReport/Tests/MitreMap.Tests.ps1       |   101 +
 ATAPHtmlReport/Tests/OrderTactics.Test.ps1    |    43 +
 .../Test-CompatibleMitreReport.Tests.ps1      |    24 +
 ATAPHtmlReport/Tests/get-MitreLink.Tests.ps1  |    20 +
 ATAPHtmlReport/Tests/readFromJson.Tests.ps1   |    73 +
 ATAPHtmlReport/Tests/updateATAP.ps1           |    16 +
 ATAPHtmlReport/report.css                     |  1203 +
 ATAPHtmlReport/report.js                      |   278 +
 .../resources/CISToAttackMappingData.json     |   Bin 0 -> 518728 bytes
 ATAPHtmlReport/runATAP.ps1                    |    42 +
 FAQ/images/FAQ_print backgrounds.PNG          |   Bin 0 -> 4521 bytes
 FAQ/images/readme.md                          |     1 +
 FAQ/readme.md                                 |    51 +
 Installer/.gitignore                          |     2 +
 Installer/LICENSE                             |    29 +
 Installer/icons/AT.ico                        |   Bin 0 -> 68249 bytes
 Installer/icons/AT1024.png                    |   Bin 0 -> 20808 bytes
 Installer/icons/AT1024_source.xcf             |   Bin 0 -> 66611 bytes
 Installer/icons/AT128.png                     |   Bin 0 -> 2620 bytes
 Installer/icons/AT16.png                      |   Bin 0 -> 904 bytes
 Installer/icons/AT256.png                     |   Bin 0 -> 4975 bytes
 Installer/icons/AT32.png                      |   Bin 0 -> 1136 bytes
 Installer/icons/AT512.png                     |   Bin 0 -> 10773 bytes
 Installer/icons/AT64.png                      |   Bin 0 -> 1552 bytes
 Installer/setup.exe                           |   Bin 0 -> 3056004 bytes
 LICENSE                                       |    29 +
 Samples/Google Chrome_20220902_134320.html    |    15 +
 Samples/Microsoft IIS10_20220905_052811.html  |    21 +
 Samples/Microsoft Windows 10 All.html         |    35 +
 .../Microsoft Windows 10 All_RiskScore.html   |    35 +
 ...rosoft Windows 10 BSI_20220905_134713.html |    30 +
 ...t Windows Server 2022_20220905_052544.html |    18 +
 Samples/Outdated/Debian 10.html               |    12 +
 Samples/Outdated/GoogleChrome.dark.html       |     1 +
 Samples/Outdated/GoogleChrome.html            |     1 +
 .../Microsoft Windows 10 BSI Dark.html        |    28 +
 .../Outdated/Microsoft Windows 10 BSI.html    |    28 +
 .../Outdated/Microsoft Windows 11 Dark.html   |    14 +
 Samples/Outdated/Microsoft Windows 11.html    |    14 +
 Samples/Outdated/MozillaFirefox.dark.html     |     1 +
 Samples/Outdated/MozillaFirefox.html          |     1 +
 Samples/Outdated/Office2016.dark.html         |     1 +
 Samples/Outdated/Office2016Excel.dark.html    |     1 +
 Samples/Outdated/Office2016Outlook.dark.html  |     1 +
 Samples/Outdated/Office2016Outlook.html       |     1 +
 .../Outdated/Office2016PowerPoint.dark.html   |     1 +
 Samples/Outdated/Office2016PowerPoint.html    |     1 +
 .../Office2016SkypeForBusiness.dark.html      |     1 +
 .../Outdated/Office2016SkypeForBusiness.html  |     1 +
 Samples/Outdated/Office2016Word.dark.html     |     1 +
 Samples/Outdated/Office2016Word.html          |     1 +
 Samples/Outdated/Windows10.html               |    14 +
 641 files changed, 416825 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 ATAPAuditor/ATAPAuditor.psd1
 create mode 100644 ATAPAuditor/ATAPAuditor.psm1
 create mode 100644 ATAPAuditor/AuditGroups/CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Debian Linux 11-CIS-1.0.0.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Debian Linux 12-CIS-1.0.1.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Enhanced security settings-FBPro-1.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Google Chrome-CIS-2.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Google Chrome-DISA-V1R15#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Edge-CIS-2.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Edge-Microsoft-117#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-CIS-1.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-DISA-V1R16#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-MS-2004#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Office Enterprise-CIS-1.2.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 GDPR-MS-16082019#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-1.12#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AccountPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AuditPolicies.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#RegistrySettings.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#SecurityOptions.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#UserRights.ps1
 create mode 100644 ATAPAuditor/AuditGroups/RSSeverityTests.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-1.0.0.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-2.0.0.ps1
 create mode 100644 ATAPAuditor/AuditGroups/SBD - Application Control.ps1
 create mode 100644 ATAPAuditor/AuditGroups/SBD - Connectivity Security.ps1
 create mode 100644 ATAPAuditor/AuditGroups/SBD - Linux Base Security.ps1
 create mode 100644 ATAPAuditor/AuditGroups/SBD - Platform Security.ps1
 create mode 100644 ATAPAuditor/AuditGroups/SBD - PowerShell Security.ps1
 create mode 100644 ATAPAuditor/AuditGroups/SBD - Windows Base Security.ps1
 create mode 100644 ATAPAuditor/AuditGroups/SUSE Linux Enterprise 15-CIS-1.1.1.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Ubuntu Linux 20.04-CIS-1.1.0.ps1
 create mode 100644 ATAPAuditor/AuditGroups/Ubuntu Linux 22.04-CIS-2.0.0.ps1
 create mode 100644 ATAPAuditor/Helpers/AuditGroupFunctions.ps1
 create mode 100644 ATAPAuditor/Helpers/Firewall.ps1
 create mode 100644 ATAPAuditor/Helpers/HashHelper.ps1
 create mode 100644 ATAPAuditor/Helpers/LinuxHelper.ps1
 create mode 100644 ATAPAuditor/Helpers/LogFile.ps1
 create mode 100644 ATAPAuditor/Helpers/Menu.ps1
 create mode 100644 ATAPAuditor/Helpers/ReportUnixOS.ps1
 create mode 100644 ATAPAuditor/Helpers/ReportWindowsOS.ps1
 create mode 100644 ATAPAuditor/Helpers/SecurityPolicy.psm1
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.5.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-2.1.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.5.1.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-A.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-B.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.4.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.13.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.14.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.15.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.16.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.17.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1111.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1112.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_119.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_182.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_183.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_184.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_185.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_186.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_187.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_188.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_189.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_312.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_313.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_321.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_21.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_22.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_21.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_22.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_335.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_336.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_338.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3412.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3421.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4141.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4142.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4144.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4145.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_522.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_523.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5615.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_621.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6210.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6211.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6212.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6213.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6214.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6215.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6216.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_622.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_628.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_629.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.2.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.3.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.4.18.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/3.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/4.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.13.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.14.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.15.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.17.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.18.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.2.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.1.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.1.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-1.8.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.1.2.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.5.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.7.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.1.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.3.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.1.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.13.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.14.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.15.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.17.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.18.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.4.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.5.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.1.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.4.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.5.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/1.5.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/2.1.13.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/2.4.1.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/2.4.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/3.3.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.1.16.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.1.19.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.1.20.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.1.21.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.1.22.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.2.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.3.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.1.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.1.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.1.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.1.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.2.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.2.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.2.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.2.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.3.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/5.4.3.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.1.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.2.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.2.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.1.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.13.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.14.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.15.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.16.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.17.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.18.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.19.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.2.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.3.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.4.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.3.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.4.5.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.4.6.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.4.7.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.4.8.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/6.3.4.9.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/7.1.10.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/7.1.11.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/7.1.12.sh
 create mode 100644 ATAPAuditor/Helpers/ShellScripts/common/7.1.9.sh
 create mode 100644 ATAPAuditor/Reports/Debian 10.ps1
 create mode 100644 ATAPAuditor/Reports/Debian 11.ps1
 create mode 100644 ATAPAuditor/Reports/Debian 12.ps1
 create mode 100644 ATAPAuditor/Reports/Fedora 35.ps1
 create mode 100644 ATAPAuditor/Reports/Google Chrome.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Edge.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft IIS10.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Internet Explorer 11.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Office.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft SQL Server 2016.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows 10 BSI.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows 10 GDPR.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows 10 Stand-alone.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows 10.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows 11 Stand-alone.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows 11.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows 7.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows Server 2012.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows Server 2016.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows Server 2019.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows Server 2022.ps1
 create mode 100644 ATAPAuditor/Reports/Microsoft Windows Server 2025.ps1
 create mode 100644 ATAPAuditor/Reports/Mozilla Firefox.ps1
 create mode 100644 ATAPAuditor/Reports/Red Hat Enterprise Linux 9.ps1
 create mode 100644 ATAPAuditor/Reports/SUSE 15.ps1
 create mode 100644 ATAPAuditor/Reports/Ubuntu 20.04.ps1
 create mode 100644 ATAPAuditor/Reports/Ubuntu 22.04.ps1
 create mode 100644 ATAPAuditor/Resources/FirefoxPreferences.ps1
 create mode 100644 ATAPAuditor/Resources/WindowsSecurityPolicy.ps1
 create mode 100644 ATAPHtmlReport/ATAPHtmlReport.Tests.ps1
 create mode 100644 ATAPHtmlReport/ATAPHtmlReport.psd1
 create mode 100644 ATAPHtmlReport/ATAPHtmlReport.psm1
 create mode 100644 ATAPHtmlReport/README.md
 create mode 100644 ATAPHtmlReport/Settings.psd1
 create mode 100644 ATAPHtmlReport/Tests/Compare-EqualCISVersions.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/ConvertTo-HtmlTable.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/Get-ColorValue.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/Get-MitigationsFromFailedTests.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/Get-MitreTacticName.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/Get-MitreTactics.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/Get-MitreTechniqueName.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/Get-TacticCounter.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/Merge-CisAuditsToMitreMap.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/MitreMap.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/OrderTactics.Test.ps1
 create mode 100644 ATAPHtmlReport/Tests/Test-CompatibleMitreReport.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/get-MitreLink.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/readFromJson.Tests.ps1
 create mode 100644 ATAPHtmlReport/Tests/updateATAP.ps1
 create mode 100644 ATAPHtmlReport/report.css
 create mode 100644 ATAPHtmlReport/report.js
 create mode 100644 ATAPHtmlReport/resources/CISToAttackMappingData.json
 create mode 100644 ATAPHtmlReport/runATAP.ps1
 create mode 100644 FAQ/images/FAQ_print backgrounds.PNG
 create mode 100644 FAQ/images/readme.md
 create mode 100644 FAQ/readme.md
 create mode 100644 Installer/.gitignore
 create mode 100644 Installer/LICENSE
 create mode 100644 Installer/icons/AT.ico
 create mode 100644 Installer/icons/AT1024.png
 create mode 100644 Installer/icons/AT1024_source.xcf
 create mode 100644 Installer/icons/AT128.png
 create mode 100644 Installer/icons/AT16.png
 create mode 100644 Installer/icons/AT256.png
 create mode 100644 Installer/icons/AT32.png
 create mode 100644 Installer/icons/AT512.png
 create mode 100644 Installer/icons/AT64.png
 create mode 100644 Installer/setup.exe
 create mode 100644 LICENSE
 create mode 100644 Samples/Google Chrome_20220902_134320.html
 create mode 100644 Samples/Microsoft IIS10_20220905_052811.html
 create mode 100644 Samples/Microsoft Windows 10 All.html
 create mode 100644 Samples/Microsoft Windows 10 All_RiskScore.html
 create mode 100644 Samples/Microsoft Windows 10 BSI_20220905_134713.html
 create mode 100644 Samples/Microsoft Windows Server 2022_20220905_052544.html
 create mode 100644 Samples/Outdated/Debian 10.html
 create mode 100644 Samples/Outdated/GoogleChrome.dark.html
 create mode 100644 Samples/Outdated/GoogleChrome.html
 create mode 100644 Samples/Outdated/Microsoft Windows 10 BSI Dark.html
 create mode 100644 Samples/Outdated/Microsoft Windows 10 BSI.html
 create mode 100644 Samples/Outdated/Microsoft Windows 11 Dark.html
 create mode 100644 Samples/Outdated/Microsoft Windows 11.html
 create mode 100644 Samples/Outdated/MozillaFirefox.dark.html
 create mode 100644 Samples/Outdated/MozillaFirefox.html
 create mode 100644 Samples/Outdated/Office2016.dark.html
 create mode 100644 Samples/Outdated/Office2016Excel.dark.html
 create mode 100644 Samples/Outdated/Office2016Outlook.dark.html
 create mode 100644 Samples/Outdated/Office2016Outlook.html
 create mode 100644 Samples/Outdated/Office2016PowerPoint.dark.html
 create mode 100644 Samples/Outdated/Office2016PowerPoint.html
 create mode 100644 Samples/Outdated/Office2016SkypeForBusiness.dark.html
 create mode 100644 Samples/Outdated/Office2016SkypeForBusiness.html
 create mode 100644 Samples/Outdated/Office2016Word.dark.html
 create mode 100644 Samples/Outdated/Office2016Word.html
 create mode 100644 Samples/Outdated/Windows10.html

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..307833f
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,336 @@
+## Ignore Visual Studio temporary files, build results, and
+## files generated by popular Visual Studio add-ons.
+##
+## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
+
+# User-specific files
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# User-specific files (MonoDevelop/Xamarin Studio)
+*.userprefs
+
+# Build results
+[Dd]ebug/
+[Dd]ebugPublic/
+[Rr]elease/
+[Rr]eleases/
+x64/
+x86/
+bld/
+[Bb]in/
+[Oo]bj/
+[Ll]og/
+
+# Visual Studio 2015/2017 cache/options directory
+.vs/
+# Uncomment if you have tasks that create the project's static files in wwwroot
+#wwwroot/
+
+# Visual Studio 2017 auto generated files
+Generated\ Files/
+
+# MSTest test Results
+[Tt]est[Rr]esult*/
+[Bb]uild[Ll]og.*
+
+# NUNIT
+*.VisualState.xml
+TestResult.xml
+
+# Build Results of an ATL Project
+[Dd]ebugPS/
+[Rr]eleasePS/
+dlldata.c
+
+# Benchmark Results
+BenchmarkDotNet.Artifacts/
+
+# .NET Core
+project.lock.json
+project.fragment.lock.json
+artifacts/
+**/Properties/launchSettings.json
+
+# StyleCop
+StyleCopReport.xml
+
+# Files built by Visual Studio
+*_i.c
+*_p.c
+*_i.h
+*.ilk
+*.meta
+*.obj
+*.iobj
+*.pch
+*.pdb
+*.ipdb
+*.pgc
+*.pgd
+*.rsp
+*.sbr
+*.tlb
+*.tli
+*.tlh
+*.tmp
+*.tmp_proj
+*.log
+*.vspscc
+*.vssscc
+.builds
+*.pidb
+*.svclog
+*.scc
+
+# Chutzpah Test files
+_Chutzpah*
+
+# Visual C++ cache files
+ipch/
+*.aps
+*.ncb
+*.opendb
+*.opensdf
+*.sdf
+*.cachefile
+*.VC.db
+*.VC.VC.opendb
+
+# Visual Studio profiler
+*.psess
+*.vsp
+*.vspx
+*.sap
+
+# Visual Studio Trace Files
+*.e2e
+
+# TFS 2012 Local Workspace
+$tf/
+
+# Guidance Automation Toolkit
+*.gpState
+
+# ReSharper is a .NET coding add-in
+_ReSharper*/
+*.[Rr]e[Ss]harper
+*.DotSettings.user
+
+# JustCode is a .NET coding add-in
+.JustCode
+
+# TeamCity is a build add-in
+_TeamCity*
+
+# DotCover is a Code Coverage Tool
+*.dotCover
+
+# AxoCover is a Code Coverage Tool
+.axoCover/*
+!.axoCover/settings.json
+
+# Visual Studio code coverage results
+*.coverage
+*.coveragexml
+
+# NCrunch
+_NCrunch_*
+.*crunch*.local.xml
+nCrunchTemp_*
+
+# MightyMoose
+*.mm.*
+AutoTest.Net/
+
+# Web workbench (sass)
+.sass-cache/
+
+# Installshield output folder
+[Ee]xpress/
+
+# DocProject is a documentation generator add-in
+DocProject/buildhelp/
+DocProject/Help/*.HxT
+DocProject/Help/*.HxC
+DocProject/Help/*.hhc
+DocProject/Help/*.hhk
+DocProject/Help/*.hhp
+DocProject/Help/Html2
+DocProject/Help/html
+
+# Click-Once directory
+publish/
+
+# Publish Web Output
+*.[Pp]ublish.xml
+*.azurePubxml
+# Note: Comment the next line if you want to checkin your web deploy settings,
+# but database connection strings (with potential passwords) will be unencrypted
+*.pubxml
+*.publishproj
+
+# Microsoft Azure Web App publish settings. Comment the next line if you want to
+# checkin your Azure Web App publish settings, but sensitive information contained
+# in these scripts will be unencrypted
+PublishScripts/
+
+# NuGet Packages
+*.nupkg
+# The packages folder can be ignored because of Package Restore
+**/[Pp]ackages/*
+# except build/, which is used as an MSBuild target.
+!**/[Pp]ackages/build/
+# Uncomment if necessary however generally it will be regenerated when needed
+#!**/[Pp]ackages/repositories.config
+# NuGet v3's project.json files produces more ignorable files
+*.nuget.props
+*.nuget.targets
+
+# Microsoft Azure Build Output
+csx/
+*.build.csdef
+
+# Microsoft Azure Emulator
+ecf/
+rcf/
+
+# Windows Store app package directories and files
+AppPackages/
+BundleArtifacts/
+Package.StoreAssociation.xml
+_pkginfo.txt
+*.appx
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/
+
+# Others
+ClientBin/
+~$*
+*~
+*.dbmdl
+*.dbproj.schemaview
+*.jfm
+*.pfx
+*.publishsettings
+orleans.codegen.cs
+
+# Including strong name files can present a security risk 
+# (https://github.com/github/gitignore/pull/2483#issue-259490424)
+#*.snk
+
+# Since there are multiple workflows, uncomment next line to ignore bower_components
+# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
+#bower_components/
+
+# RIA/Silverlight projects
+Generated_Code/
+
+# Backup & report files from converting an old project file
+# to a newer Visual Studio version. Backup files are not needed,
+# because we have git ;-)
+_UpgradeReport_Files/
+Backup*/
+UpgradeLog*.XML
+UpgradeLog*.htm
+ServiceFabricBackup/
+*.rptproj.bak
+
+# SQL Server files
+*.mdf
+*.ldf
+*.ndf
+
+# Business Intelligence projects
+*.rdl.data
+*.bim.layout
+*.bim_*.settings
+*.rptproj.rsuser
+
+# Microsoft Fakes
+FakesAssemblies/
+
+# GhostDoc plugin setting file
+*.GhostDoc.xml
+
+# Node.js Tools for Visual Studio
+.ntvs_analysis.dat
+node_modules/
+
+# Visual Studio 6 build log
+*.plg
+
+# Visual Studio 6 workspace options file
+*.opt
+
+# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
+*.vbw
+
+# Visual Studio LightSwitch build output
+**/*.HTMLClient/GeneratedArtifacts
+**/*.DesktopClient/GeneratedArtifacts
+**/*.DesktopClient/ModelManifest.xml
+**/*.Server/GeneratedArtifacts
+**/*.Server/ModelManifest.xml
+_Pvt_Extensions
+
+# Paket dependency manager
+.paket/paket.exe
+paket-files/
+
+# FAKE - F# Make
+.fake/
+
+# JetBrains Rider
+.idea/
+*.sln.iml
+
+# CodeRush
+.cr/
+
+# Python Tools for Visual Studio (PTVS)
+__pycache__/
+*.pyc
+
+# Cake - Uncomment if you are using it
+# tools/**
+# !tools/packages.config
+
+# Tabs Studio
+*.tss
+
+# Telerik's JustMock configuration file
+*.jmconfig
+
+# BizTalk build output
+*.btp.cs
+*.btm.cs
+*.odx.cs
+*.xsd.cs
+
+# OpenCover UI analysis results
+OpenCover/
+
+# Azure Stream Analytics local run output 
+ASALocalRun/
+
+# MSBuild Binary and Structured Log
+*.binlog
+
+# NVidia Nsight GPU debugger configuration file
+*.nvuser
+
+# MFractors (Xamarin productivity tool) working folder 
+.mfractor/
+
+# Visual Studio Code
+.vscode/
+
+# Custom
+*/testreport.html
\ No newline at end of file
diff --git a/ATAPAuditor/ATAPAuditor.psd1 b/ATAPAuditor/ATAPAuditor.psd1
new file mode 100644
index 0000000..1dc77cf
--- /dev/null
+++ b/ATAPAuditor/ATAPAuditor.psd1
@@ -0,0 +1,45 @@
+@{
+RootModule = 'ATAPAuditor.psm1'
+ModuleVersion = '5.12.1'
+GUID = '1662a599-4e3a-4f72-a844-9582077b589e'
+Author = 'Phan Quang Nguyen, Daniel Ströher, Robin Wernz'
+CompanyName = 'FB Pro GmbH'
+Copyright = '(c) 2025 FB Pro GmbH. All rights reserved.'
+Description = 'AuditTAP allows you to check operating systems and applications against industry approved standards for secure configuration and delivers the results in form of a HTML based report document.'
+PowerShellVersion = '5.0'
+RequiredModules = @(
+	'ATAPHtmlReport'
+)
+# RequiredAssemblies = @()
+# ScriptsToProcess = @()
+# TypesToProcess = @()
+# FormatsToProcess = @()
+# NestedModules = @()
+FunctionsToExport = @(
+	'Save-ATAPHtmlReport'
+	'Invoke-ATAPReport'
+	'Get-ATAPReport'
+	'Get-AuditResource'
+	'Test-AuditGroup'
+)
+CmdletsToExport = @()
+VariablesToExport = ''
+AliasesToExport = @(
+	'shr'
+)
+# ModuleList = @()
+# FileList = @()
+PrivateData = @{
+	PSData = @{
+		Tags = @('reporting', 'auditing', 'benchmarks', 'fb-pro', 'html')
+		LicenseUri = 'https://github.com/fbprogmbh/Audit-Test-Automation/blob/master/LICENSE'
+		ProjectUri = 'https://github.com/fbprogmbh/Audit-Test-Automation'
+		# IconUri = ''
+		# ReleaseNotes = ''
+
+	} # End of PSData hashtable
+
+} # End of PrivateData hashtable
+# HelpInfoURI = ''
+# DefaultCommandPrefix = 'ATAP'
+}
diff --git a/ATAPAuditor/ATAPAuditor.psm1 b/ATAPAuditor/ATAPAuditor.psm1
new file mode 100644
index 0000000..0a85d54
--- /dev/null
+++ b/ATAPAuditor/ATAPAuditor.psm1
@@ -0,0 +1,931 @@
+using namespace Microsoft.PowerShell.Commands
+
+#region Initialization
+
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+. "$RootPath\Helpers\HashHelper.ps1"
+
+$script:atapReportsPath = $env:ATAPReportPath
+if (-not $script:atapReportsPath) {
+	$script:atapReportsPath = [Environment]::GetFolderPath('MyDocuments') | Join-Path -ChildPath 'ATAPReports'
+}
+
+# for license status function. if called multiple times the cache will be used
+$LicenseStatusCache = $null
+#endregion
+
+#region Classes
+class AuditTest {
+	[string] $Id
+	[string] $Task
+	[hashtable[]] $Constraints
+	[scriptblock] $Test
+}
+
+enum AuditInfoStatus {
+	True
+	False
+	Warning
+	None
+	Error
+}
+
+class AuditInfo {
+	[string] $Id
+	[string] $Task
+	[AuditInfoStatus] $Status
+	[string] $Message
+}
+
+class ReportSection {
+	[string] $Title
+	[string] $Description
+	[AuditInfo[]] $AuditInfos
+	[ReportSection[]] $SubSections
+}
+
+class Report {
+	[string] $Title
+	[string] $ModuleName
+	[string] $AuditorVersion
+	[hashtable] $HostInformation
+	[string[]] $BasedOn
+	[ReportSection[]] $Sections
+	[RSFullReport] $RSReport
+	[FoundationReport] $FoundationReport
+}
+
+
+###################################################
+#######    SYSTEM INFORMATION Classes    ##########
+###################################################
+class SystemInformation {
+	[SoftwareInformation] $SoftwareInformation
+	[HardwareInformation] $HardwareInformation
+}
+
+class SoftwareInformation {
+	[string] $Hostname
+	[string] $SystemUptime
+	[string] $OperatingSystem
+	[string] $BuildNumber
+	[string] $OSArchitecture
+	[string] $LicenseStatus
+	[string] $InstallationLanguage
+	[string] $DomainRole
+	[string] $KernelVersion
+}
+
+class HardwareInformation {
+	[string] $SystemManufacturer
+	[string] $SystemSKU
+	[string] $SystemModel
+	[string] $SystemSerialnumber
+	[string] $BiosVersion
+	[string] $FreeDiskSpace
+	[string] $FreePhysicalMemory
+}
+### Begin Foundation Classes ###
+class FoundationReport {
+	[ReportSection[]] $Sections
+}
+### End Foundation Classes
+
+# RiskScore Classes
+enum RSEndResult {
+	Critical
+	High
+	Medium
+	Low
+	Unknown
+}
+
+class RSFullReport {
+	[RSSeverityReport] $RSSeverityReport
+	[RSQuantityReport] $RSQuantityReport
+}
+
+class RSSeverityReport {
+	[AuditInfo[]] $AuditInfos
+	[ResultTable[]] $ResultTable
+	[RSEndResult] $Endresult
+}
+
+class RSQuantityReport {
+
+}
+
+class ResultTable {
+	[int] $Success
+	[int] $Failed
+}
+
+#endregion
+
+#region helpers
+function IsIn-FullLanguageMode {
+	try {
+		$languageMode = $ExecutionContext.SessionState.LanguageMode
+		if ($languageMode -eq "FullLanguage") {
+			return $true
+		}
+	}
+ catch {
+		return $false
+	}
+	# returns alternate language modes if not FullLanguage
+	return $languageMode
+}
+
+function Start-ModuleTest {
+	$moduleList = @(Get-Module -ListAvailable).Name | Select-Object -Unique
+	$necessaryModules = @(
+		"Microsoft.PowerShell.LocalAccounts",
+		"Microsoft.PowerShell.Management",
+		"Microsoft.PowerShell.Security",
+		"Microsoft.PowerShell.Utility",
+		"TrustedPlatformModule",
+		"NetSecurity",
+		"CimCmdlets",
+		"SmbShare",
+		"Defender",
+		"DISM"
+		#Modules only necessary for specific server tests
+		#"IISAdministration",
+		#"SQLServer",
+	)
+	$missingModules = @()
+	foreach ($module in $necessaryModules) {
+		if ($moduleList -notcontains $module) {
+			$missingModules += $module
+		}
+	}
+	if ($missingModules.Count -gt 0) {
+		Write-Warning "Missing module(s) found. Missing modules can lead to errors. Following modules are missing:"
+		for ($i = 0; $i -lt $missingModules.Count; $i++) {
+			Write-Warning $missingModules[$i]
+		}
+		Write-Warning "Check out this link on how to install modules: https://learn.microsoft.com/en-us/powershell/module/powershellget/install-module?view=powershellget-3.x"
+	}
+
+}
+
+function Get-LicenseStatus {
+	param(
+		$SkipLicenseCheck
+	)
+	if ($LicenseStatusCache) {
+		return $LicenseStatusCache
+	}
+	
+	if ($SkipLicenseCheck -eq $true) {
+		$LicenseStatusCache = "License check has been skipped."
+		return $LicenseStatusCache
+	}
+
+	Write-Host "Checking operating system activation status. This may take a while..."
+	$license = Get-CimInstance SoftwareLicensingProduct -Filter "Name like 'Windows%'" | Where-Object { $_.PartialProductKey } | Select-Object -First 1
+	$LicenseStatusCache = switch ($license.LicenseStatus) {
+		"0" { "Unlicensed" }
+		"1" { "Licensed" }
+		"2" { "OOBGrace" }
+		"3" { "OOTGrace" }
+		"4" { "NonGenuineGrace" }
+		"5" { "Notification" }
+		"6" { "ExtendedGrace" }
+	}
+	return $LicenseStatusCache
+}
+
+function IsIIS10Executable {
+	if ((Get-Module -ListAvailable IISAdministration) -eq $null) {
+		return $false
+	}
+	return $true
+}
+
+function Test-ArrayEqual {
+	[OutputType([bool])]
+	[CmdletBinding()]
+	param (
+		[Parameter(Mandatory = $true)]
+		[AllowNull()]
+		[AllowEmptyCollection()]
+		[array]
+		$Array1,
+
+		[Parameter(Mandatory = $true)]
+		[AllowNull()]
+		[AllowEmptyCollection()]
+		[array]
+		$Array2
+	)
+
+	if ($null -eq $Array1) {
+		$Array1 = @()
+	}
+
+	if ($null -eq $Array2) {
+		$Array2 = @()
+	}
+
+	if ($Array1.Count -ne $Array2.Count) {
+		return $false
+	}
+
+	foreach ($a in $Array1) {
+		if ($a -notin $Array2) {
+			return $false
+		}
+	}
+	return $true
+}
+
+# Get domain role
+# 0 {"Standalone Workstation"}
+# 1 {"Member Workstation"}
+# 2 {"Standalone Server"}
+# 3 {"Member Server"}
+# 4 {"Backup Domain Controller"}
+# 5 {"Primary Domain Controller"}
+function Get-DomainRole {
+	$domainRole = (Get-CimInstance -Class Win32_ComputerSystem).DomainRole
+	switch ($domainRole) {
+		0 { $result = "Standalone Workstation" }
+		1 { $result = "Member Workstation" }
+		2 { $result = "Standalone Server" }
+		3 { $result = "Member Server" }
+		4 { $result = "Backup Domain Controller" }
+		5 { $result = "Primary Domain Controller" }
+	}
+	return $result
+}
+
+function checkReportNameWithOSSystem {
+	[CmdletBinding()]
+	param (
+		[Parameter()]
+		[string]
+		$ReportName
+	)
+	# helpers
+	function handleReportNameDiscrepancy {
+		param (
+			[Parameter()]
+			[string]
+			$ReportName,
+			[Parameter()]
+			[string]
+			$OsName,
+			[Parameter()]
+			[bool]
+			$ShouldBeStandAlone = $False
+		)
+		if ($ShouldBeStandAlone -eq $True) {
+			Write-Host "You chose the Reportname $ReportName but the operating system is domain-joined. Be aware that a different report type could affect the result."
+		} 
+		else {
+			Write-Host "You chose the Reportname $ReportName but the operating system is $OsName. Be aware that a different report type could affect the result."
+		}
+		Write-Host ""
+		Write-Host "Choose one of the following options:"
+		Write-Host "[1] Continue     [2] Exit Script" -ForegroundColor Yellow
+		$in = Read-Host
+		switch ($in) {
+			1 { 
+				Write-Host "You chose to continue" 
+				return $ReportName
+			}
+			2 { 
+				Write-Host "You chose to exit the script" 
+				return "Exit"
+			}
+			default { 
+				Write-Host "Your input was invalid, call Save-ATAPHtmlReport again with your desired report" 
+				return "Exit"
+			}
+		}
+	}
+	function returnSuitingReportName {
+		[CmdletBinding()]
+		param (
+			[Parameter()]
+			[string]
+			$ReportName,
+			[Parameter()]
+			[string]
+			$OsName,
+			[Parameter()]
+			[string]
+			$OsType,
+			[Parameter()]
+			[bool]
+			$ShouldBeStandAlone = $False
+		)
+
+		###
+		# similarity check
+		function isOsNameSimilarToType {
+			[CmdletBinding()]
+			param (
+				[Parameter()]
+				[string]
+				$OsName,
+				[Parameter()]
+				[string]
+				$OsType
+			)
+			if ($OsName -match $OsType) {
+				return $true
+			}
+			return $false
+		}
+		if (-not(isOsNameSimilarToType -OsName $osName -OsType $osType)) {
+			return handleReportNameDiscrepancy -ReportName $ReportName -OsName $osName
+		}
+
+		###
+		# should be standalone
+		if ($ShouldBeStandAlone -eq $True) {
+			function IsDomainedJoined {		
+				if ((Get-CimInstance win32_computersystem).partofdomain) {
+					return $true
+				} 
+				return $false
+			}
+			$isDomainJoined = IsDomainedJoined
+			if ($isDomainJoined -eq $True) {
+				return handleReportNameDiscrepancy -ReportName $ReportName -OsName $osName -ShouldBeStandAlone $True
+			}
+		}
+		return $ReportName
+	}
+	#helpers end
+	try {
+		$osName = (Get-ComputerInfo OsName).OsName
+		if ([string]::IsNullOrEmpty($osName)) {
+			return $ReportName # return initial ReportName and skip comparison
+		}
+		function Get-OsType {		
+			switch ($ReportName) {
+				"Microsoft Windows Server 2025" { return "Microsoft Windows Server 2025" }
+				"Microsoft Windows Server 2022" { return "Microsoft Windows Server 2022" }
+				"Microsoft Windows Server 2019" { return "Microsoft Windows Server 2019" }
+				"Microsoft Windows Server 2016" { return "Microsoft Windows Server 2016" }
+				"Microsoft Windows Server 2012" { return "Microsoft Windows Server 2012" }
+				"Microsoft Windows 11" { return "Microsoft Windows 11" }
+				"Microsoft Windows 11 Stand-alone" { return "Microsoft Windows 11" }
+				"Microsoft Windows 10" { return "Microsoft Windows 10" }
+				"Microsoft Windows 10 Stand-alone" { return "Microsoft Windows 10" }
+				"Microsoft Windows 10 GDPR" { return "Microsoft Windows 10" }
+				"Microsoft Windows 10 BSI" { return "Microsoft Windows 10" }
+				"Microsoft Windows 7" { return "Microsoft Windows 7" }
+			}
+		}
+		$osType = Get-OsType
+		switch ($ReportName) {
+			"Microsoft Windows Server 2025" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType
+			}
+			"Microsoft Windows Server 2022" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType
+			}
+			"Microsoft Windows Server 2019" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+			"Microsoft Windows Server 2016" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+			"Microsoft Windows Server 2012" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+			"Microsoft Windows 11" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+			"Microsoft Windows 11 Stand-alone" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType -ShouldBeStandAlone $True
+			}
+			"Microsoft Windows 10" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+			"Microsoft Windows 10 Stand-alone" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType -ShouldBeStandAlone $True
+			}
+			"Microsoft Windows 10 GDPR" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+			"Microsoft Windows 10 BSI" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+			"Microsoft Windows 7" { 
+				return returnSuitingReportName -ReportName $ReportName -OsName $osName -OsType $osType 
+			}
+		}
+		return $ReportName
+	}
+ catch {
+		return $ReportName
+	}
+	
+}
+
+### begin Foundation functions ###
+function Get-FoundationReport {
+	[CmdletBinding()]
+	[OutputType([FoundationReport])]
+	
+	$Sections = @(
+		[ReportSection] @{
+			Title       = "Security Base Data"
+			SubSections = @(
+				[ReportSection] @{
+					Title      = 'Platform Security'
+					AuditInfos = Test-AuditGroup "SBD - Platform Security"
+				}
+				[ReportSection] @{
+					Title      = 'Windows Base Security'
+					AuditInfos = Test-AuditGroup "SBD - Windows Base Security"
+				}
+				[ReportSection] @{
+					Title      = 'PowerShell Security'
+					AuditInfos = Test-AuditGroup "SBD - PowerShell Security"
+				}
+				[ReportSection] @{
+					Title      = 'Connectivity Security'
+					AuditInfos = Test-AuditGroup "SBD - Connectivity Security"
+				}
+				[ReportSection] @{
+					Title      = 'Application Control'
+					AuditInfos = Test-AuditGroup "SBD - Application Control"
+				}
+			)
+		}
+	)
+
+	return ([FoundationReport]@{
+			Sections = $Sections
+		})
+}
+
+
+# region for RiskScore functions
+# function that calls all RiskScore-Subfunctions and generates the RSFullReport
+function Get-RSFullReport {
+	[CmdletBinding()]
+	[OutputType([RSFullReport])]
+	
+	$severity = Get-RSSeverityReport
+
+	
+	return ([RSFullReport]@{
+			RSSeverityReport = $severity
+		})
+}
+# function to generate RiskSeverityReport
+function Get-RSSeverityReport {
+	[CmdletBinding()]
+	[OutputType([RSSeverityReport])]
+
+	# Initialization
+	[AuditInfo[]]$tests = Test-AuditGroup "RSSeverityTests"
+
+	# gather results of tests and save it in resultTable
+	$resultTable = [ResultTable]::new()
+	foreach ($test in $tests) {
+		if ($test.AuditInfoStatus -EQ "True") {
+			$resultTable.Success += 1
+		}
+		if ($test.AuditInfostatus -ne "True") {
+			$resultTable.Failed += 1
+		}
+	}
+
+	return ([RSSeverityReport]@{
+			AuditInfos  = $tests
+			ResultTable = $resultTable
+			Endresult   = Get-RSSeverityEndResult($resultTable)
+		})
+}
+
+# helper for EndResult of RiskScoreSeverity
+function Get-RSSeverityEndResult {
+	[CmdletBinding()]
+	[OutputType([RSEndResult])]
+
+	param (
+		[Parameter(Mandatory = $true)]
+		[ResultTable[]]
+		$resultTable
+	)
+
+	$result = "Unknown"
+
+	$f = $resultTable.Failed
+	if ($f -eq 0) {
+		$result = "Low"
+	}
+	if ($f -ge 1) {
+		$result = "Critical"
+	}
+	return $result
+}
+
+#endregion
+
+<#
+.SYNOPSIS
+	Tests a single AuditGroup.
+.DESCRIPTION
+	This cmdlet tests a single AuditGroup from folder "AuditGroups". All tests are printed on the console. Can be combined to create own report.
+.EXAMPLE
+	PS C:\> Test-AuditGroup "Google Chrome-CIS-2.0.0#RegistrySettings"
+	This runs tests defined in the AuditGroup file called 'Google Chrome-CIS-2.0.0#RegistrySettings'.
+.PARAMETER GroupName
+	The name of the AuditGroup.
+#>
+function Test-AuditGroup {
+	[CmdletBinding()]
+	[OutputType([AuditInfo[]])]
+	param(
+		[Parameter(Mandatory = $true)]
+		[string]
+		$GroupName
+	)
+
+	#Windows OS
+	if ([System.Environment]::OSVersion.Platform -ne 'Unix') {
+		$tests = . "$RootPath\AuditGroups\$($GroupName).ps1"
+	}
+	#Linux OS
+	else {
+		$tests = . "$RootPath/AuditGroups/$($GroupName).ps1"
+	}
+
+
+	$i = 1
+	foreach ($test in $tests) {
+		[int]$p = $i++ / $tests.Count * 100
+		Write-Progress -Activity "Testing Report for '$GroupName'" -Status "Progress:" -PercentComplete $p
+		Write-Verbose "Testing $($test.Id)"
+		$message = "Test not implemented yet."
+		$status = [AuditInfoStatus]::None
+		#if audit test contains datatype "Constraints", proceed
+		if ($test.Constraints) {
+			$DomainRoleConstraint = $test.Constraints | Where-Object Property -EQ "DomainRole"
+			#get domain role of system
+			$currentRole = Get-DomainRole
+			#get domain roles, which are listed in AuditTest
+			$domainRoles = $DomainRoleConstraint.Values
+			if ($currentRole -notin $domainRoles) {
+				$roleValue = (Get-CimInstance -Class Win32_ComputerSystem).DomainRole
+				switch ($roleValue) {
+					0 {	
+						$message = 'Not applicable. This audit does not apply to Standalone Workstation.'
+						$status = [AuditInfoStatus]::None
+					}
+					1 {	
+						$message = 'Not applicable. This audit does not apply to Member Workstation.'
+						$status = [AuditInfoStatus]::None
+					}
+					2 {	
+						$message = 'Not applicable. This audit does not apply to Standalone Server.'
+						$status = [AuditInfoStatus]::None
+					}
+					3 {	
+						$message = 'Not applicable. This audit does not apply to Member Server.'
+						$status = [AuditInfoStatus]::None
+					}
+					4 {	
+						$message = 'Not applicable. This audit does not apply to Backup Domain Controller.'
+						$status = [AuditInfoStatus]::None
+					}
+					5 {	
+						$message = 'Not applicable. This audit does not apply to Primary Domain Controller.'
+						$status = [AuditInfoStatus]::None
+					}
+				}
+				Write-Output ([AuditInfo]@{
+						Id      = $test.Id
+						Task    = $test.Task
+						Message = $message
+						Status  = $status
+					})
+				continue
+			}
+		}
+
+		#Windows OS
+		if ([System.Environment]::OSVersion.Platform -ne 'Unix') {
+			$role = Get-Wmiobject -Class 'Win32_computersystem' -ComputerName $env:computername | Select-Object domainrole
+			if ($test.Task -match "(DC only)") {
+				if ($role.domainRole -ne 4 -and $role.domainRole -ne 5) {
+					$message = 'Not applicable. This audit does not apply to Member Server systems.'
+					$status = [AuditInfoStatus]::None
+					Write-Output ([AuditInfo]@{
+							Id      = $test.Id
+							Task    = $test.Task
+							Message = $message
+							Status  = $status
+						})
+					continue
+				}
+			}
+		}
+		try {
+			$innerResult = & $test.Test
+
+			if ($null -ne $innerResult) {
+				$message = $innerResult.Message
+				$status = [AuditInfoStatus]$innerResult.Status
+			}
+		}
+		catch {
+			Write-Error $_
+			$message = "An error occured!"
+			$status = [AuditInfoStatus]::Error
+		}
+
+		Write-Output ([AuditInfo]@{
+				Id      = $test.Id
+				Task    = $test.Task
+				Message = $message
+				Status  = $status
+			})
+	}
+}
+
+<#
+.SYNOPSIS
+	Get an audit resource.
+.DESCRIPTION
+	A resource provides abstration over an existing system resource. It is used by AuditTests.
+.PARAMETER Name
+	The name of the resource.
+.EXAMPLE
+	PS C:\> Get-AuditResource -Name "WindowsSecurityPolicy"
+	Gets the WindowsSecurityPolicy resource.
+#>
+function Get-AuditResource {
+	[CmdletBinding()]
+	param (
+		[Parameter(Mandatory = $true)]
+		[string]
+		$Name
+	)
+	#Windows OS
+	if ([System.Environment]::OSVersion.Platform -ne 'Unix') {
+		if ($null -eq $script:loadedResources) {
+			return & "$RootPath\Resources\$($Name).ps1"
+		}
+		if (-not $script:loadedResources.ContainsKey($Name)) {
+			$script:loadedResources[$Name] = (& "$RootPath\Resources\$($Name).ps1")
+		}
+	}
+	#Linuxs OS
+	else {
+		if ($null -eq $script:loadedResources) {
+			return & "$RootPath/Resources/$($Name).ps1"
+		}
+		if (-not $script:loadedResources.ContainsKey($Name)) {
+			$script:loadedResources[$Name] = (& "$RootPath/Resources/$($Name).ps1")
+		}
+	}
+	return $script:loadedResources[$Name]
+}
+
+<#
+.SYNOPSIS
+	Get all reports.
+.DESCRIPTION
+	Find the reports installed on the system.
+.PARAMETER ReportName
+	The name of the report.
+.EXAMPLE
+	PS C:\> Get-ATAPReport
+	Gets all reports.
+#>
+function Get-ATAPReport {
+	[CmdletBinding()]
+	param (
+		[Parameter()]
+		[string]
+		$ReportName = "*"
+	)
+	#Windows OS
+	if ([System.Environment]::OSVersion.Platform -ne 'Unix') {
+		return Get-ChildItem "$RootPath\Reports\$ReportName.ps1" | Select-Object -Property BaseName
+	}
+	#Linux OS
+	return Get-ChildItem "$RootPath/Reports/$ReportName.ps1" | Select-Object -Property BaseName
+}
+
+<#
+.SYNOPSIS
+	Invokes an ATAPReport
+.DESCRIPTION
+	Long description
+.EXAMPLE
+	PS C:\> ATAPReport -ReportName "Google Chrome"
+	This runs the report and outputs the logical report data.
+.PARAMETER ReportName
+	The name of the report.
+.OUTPUTS
+	Logical report data.
+#>
+function Invoke-ATAPReport {
+	[CmdletBinding()]
+	param (
+		[Alias('RN')]
+		[Parameter(Mandatory = $true)]
+		[string]
+		$ReportName
+	)
+
+	$script:loadedResources = @{}
+	# Load the module manifest
+
+	#Windows OS
+	try {
+		if ([System.Environment]::OSVersion.Platform -ne 'Unix') {
+			$moduleInfo = Import-PowerShellDataFile -Path "$RootPath\ATAPAuditor.psd1"
+			[string]$ReportName = checkReportNameWithOSSystem -ReportName $ReportName
+			try {
+				if ($ReportName -eq "Exit") {
+					throw
+				}
+			}
+			catch {
+				Write-Host "Script halted: Exiting..."
+				break
+			}
+			[Report]$report = (& "$RootPath\Reports\$ReportName.ps1")
+			$report.RSReport = Get-RSFullReport
+			$report.FoundationReport = Get-FoundationReport
+		}
+		#Linux OS
+		else {
+			$moduleInfo = Import-PowerShellDataFile -Path "$RootPath/ATAPAuditor.psd1"
+			[Report]$report = (& "$RootPath/Reports/$ReportName.ps1")
+		}
+	}
+	catch [System.Management.Automation.CommandNotFoundException] {
+		Write-Host "Either your input for -Reportname is faulty or the report does not resolve due to a bug. Please report this bug with the following errormessage: 
+		1. ErrorException: $_
+		2. PositionMessage: $($_.InvocationInfo.PositionMessage)
+		3. ReportName: $ReportName"
+		break
+	}
+	$report.AuditorVersion = $moduleInfo.ModuleVersion
+	return $report
+}
+
+<#
+.SYNOPSIS
+	The Audit Test Automation Package creates transparents reports about hardening compliance status
+.DESCRIPTION
+	The Audit Test Automation Package gives you the ability to get an overview about the compliance status of several systems. 
+	You can easily create HTML-reports and have a transparent overview over compliance and non-compliance of explicit setttings 
+	and configurations in comparison to industry standards and hardening guides. 
+.EXAMPLE
+	PS C:\> Save-ATAPHtmlReport -ReportName "Microsoft Windows 10 Complete" -RiskScore -Path C:\Temp\report.html
+	This runs the 'Microsoft Windows 10 Complete' report, adding RiskScore to it and stores the resulting html file under C:\Temp using the file name report.html
+.EXAMPLE
+	PS C:\> Save-ATAPHtmlReport -ReportName "Microsoft Windows 10 BSI" -RiskScore -Path C:\Temp
+	This runs the 'Microsoft Windows 10 BSI' report, adding RiskScore to it and stores the resulting html file under C:\Temp using the standard naming convention for file names <ReportName_Date_Time>.html
+.EXAMPLE
+	PS C:\> Save-ATAPHtmlReport -ReportName "Microsoft Windows Server 2022" -Path C:\Temp
+	This runs the 'Microsoft Windows Server 2022' report, without adding RiskScore to it and stores the resulting html file under C:\Temp using the standard naming convention for file names <ReportName_Date_Time>.html
+.EXAMPLE
+	PS C:\> Save-ATAPHtmlReport -ReportName "Google Chrome"
+	This runs the 'Google Chrome' report and stores the resulting html file (by default) under ~\Documents\ATAPReports
+.EXAMPLE
+	PS C:\> Save-ATAPHtmlReport -ReportName "Ubuntu 20.04"
+	This runs the 'Ubuntu 20.04' report and stores the resulting html file (by default) under ~\Documents\ATAPReports
+.PARAMETER ReportName
+	Determine, which OS shall be tested.
+.PARAMETER Path
+	The path where the result html document should be stored.
+.PARAMETER RiskScore
+	Add a RiskScore-Matrix to report (works only on Windows OS)
+.PARAMETER MITRE
+	Add a MITRE ATT&CK headmap to report (works only on Windows OS)
+.PARAMETER Force
+	If the parent directory doesn't exist it will be created.
+.OUTPUTS
+	None.
+#>
+function Save-ATAPHtmlReport {
+	[CmdletBinding()]
+	param(
+		[Alias('RN')]
+		[Parameter(Mandatory = $true)]
+		[string]
+		$ReportName,
+
+		[Parameter(Mandatory = $false)]
+		[string]
+		$Path = ($script:atapReportsPath | Join-Path -ChildPath "$($ReportName)_$(Get-Date -UFormat %Y%m%d_%H%M%S).html"),
+
+		[Parameter(Mandatory = $false)]
+		[switch]
+		$RiskScore,
+
+		[Parameter(Mandatory = $false)]
+		[switch]
+		$SkipLicenseCheck,
+		# [Parameter(Mandatory = $false)]
+		# [switch]
+		# $MITRE,
+
+		[Parameter()]
+		[switch]
+		$Force
+	)
+
+	if ([Environment]::Is64BitProcess -eq $false) {
+		Write-Host "Please use 64-bit version of PowerShell in order to use AuditTAP. Closing..." -ForegroundColor red
+		return;
+	}
+
+	if (($languagemode = IsIn-FullLanguageMode) -ne $true) {
+		if ($languagemode -eq $false) {
+			Write-Host "The current language mode could not be determined. Ensure that AuditTAP is run in `"FullLanguage`" mode. For further information, contact your administrator. Closing..." -ForegroundColor red
+		}
+		else {
+			Write-Host "The current language mode is `"$languagemode`". Ensure that AuditTAP is run in `"FullLanguage`" mode. For further information, contact your administrator. Closing..." -ForegroundColor red
+		}
+		return
+	}
+
+	$parent = $path
+	if ($Path -match ".html") {
+		$parent = Split-Path -Path $Path
+	}
+
+	#if input path is not default one
+	if ($parent -ne $script:atapReportsPath) {
+		$pathCheck = Test-Path -Path $parent -PathType Container
+		#if path doesn't exist
+		if ($pathCheck -eq $False) {
+			if (-not [string]::IsNullOrEmpty($parent) -and -not (Test-Path $parent)) {
+				New-Item -ItemType Directory -Path $parent -Force | Out-Null
+				Write-Warning "Could not find Path. Path will be created: $parent"
+			}
+			else {
+				Write-Warning "Could not find Path. Report will be created inside default path: $($script:atapReportsPath)"
+				$Path = $($script:atapReportsPath)
+			}
+		}
+	}
+	Write-Verbose "OS-Check"
+	$isUnix = [System.Environment]::OSVersion.Platform -eq 'Unix'
+	if ($isUnix) {
+		[SystemInformation] $SystemInformation = (& "$PSScriptRoot\Helpers\ReportUnixOS.ps1")
+	}
+	else {
+		[SystemInformation] $SystemInformation = (& "$PSScriptRoot\Helpers\ReportWindowsOS.ps1")
+		Start-ModuleTest
+		if ($ReportName -eq "Microsoft IIS10") {
+			$isIIS10Executable = IsIIS10Executable
+			if ($isIIS10Executable -eq $false) {
+				Write-Warning "IIS10 Report not executable! IISAdministration module not available. Please install this module and try again. Exiting..."
+				return;
+			}
+		}
+		Write-Verbose "PS-Check"
+		$psVersion = $PSVersionTable.PSVersion
+		#PowerShell Major version not 5.*
+		if (($psVersion.Major -ne 5)) {
+			Write-Warning "ATAPAuditor is only compatible with PowerShell Version 5.1. Your version is $psVersion. Please open a PowerShell Version 5.1 session to continue!"
+			return;
+		}
+		#PowerShell version not 5.1
+		if (($psVersion.Major -eq 5) -and ($psVersion.Minor -eq 0)) {
+			Write-Warning "ATAPAuditor is only compatible with PowerShell Version 5.1. Your version is $psVersion. You need to upgrade to a higher Windows version!"
+			return;
+		}
+	}
+
+	$report = Invoke-ATAPReport -ReportName $ReportName 
+	#hashes for each recommendation
+	if (!$isUnix) {
+		$SystemInformation.SoftwareInformation.LicenseStatus = Get-LicenseStatus $SkipLicenseCheck
+	}
+	$hashtable_sha256 = GenerateHashTable $report
+	
+	$report | Get-ATAPHtmlReport -Path $Path -RiskScore:$RiskScore -MITRE:$MITRE -hashtable_sha256:$hashtable_sha256 -LicenseStatus:$LicenseStatus -SystemInformation:$SystemInformation
+}
+
+New-Alias -Name 'shr' -Value Save-ATAPHtmlReport
+
+$completer = {
+	param($commandName, $parameterName, $wordToComplete, $commandAst, $fakeBoundParameters)
+
+	Get-ChildItem "$RootPath\Reports\*.ps1" `
+	| Select-Object -ExpandProperty BaseName `
+	| ForEach-Object { "`"$_`"" } `
+	| Where-Object { $_ -like "*$wordToComplete*" }
+}.GetNewClosure()
+
+Register-ArgumentCompleter -CommandName Save-ATAPHtmlReport -ParameterName ReportName -ScriptBlock $completer
+Register-ArgumentCompleter -CommandName shr -ParameterName ReportName -ScriptBlock $completer
diff --git a/ATAPAuditor/AuditGroups/CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings.ps1
new file mode 100644
index 0000000..ac75b3a
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings.ps1
@@ -0,0 +1,1852 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$listOfWeakCipherSuites = getListOfWeakCipherSuites
+$listOfInsecureCipherSuites = getListOfInsecureCipherSuites
+[AuditTest] @{
+    Id = "1.1 A"
+    Task = "Disable SSLv2 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1 B"
+    Task = "Disable SSLv2 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1 C"
+    Task = "Disable SSLv2 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1 D"
+    Task = "Disable SSLv2 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2 A"
+    Task = "Disable SSLv3 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            $OS = Get-CimInstance Win32_OperatingSystem
+            if($OS.Caption -match "Server 2012 R2"){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2 B"
+    Task = "Disable SSLv3 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            $OS = Get-CimInstance Win32_OperatingSystem
+            if($OS.Caption -match "Server 2012 R2"){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2 C"
+    Task = "Disable SSLv3 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            $OS = Get-CimInstance Win32_OperatingSystem
+            if($OS.Caption -match "Server 2012 R2"){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2 D"
+    Task = "Disable SSLv3 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            $OS = Get-CimInstance Win32_OperatingSystem
+            if($OS.Caption -match "Server 2012 R2"){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3 A"
+    Task = "Disable TLS1.0 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3 B"
+    Task = "Disable TLS1.0 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3 C"
+    Task = "Disable TLS1.0 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3 D"
+    Task = "Disable TLS1.0 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4 A"
+    Task = "Disable TLS1.1 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4 B"
+    Task = "Disable TLS1.1 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4 C"
+    Task = "Disable TLS1.1 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4 D"
+    Task = "Disable TLS1.1 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5 A"
+    Task = "Enable TLS1.2 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -eq 4294967295) {
+                return @{
+                    Message = "The current registry value is '$regValue', which is no longer supported by Microsoft. For more information, please refer to this link:<br/>"`
+                    +'<a href="https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings">'`
+                    +'Learn.microsoft.com - TLS, DTLS, and SSL protocol version settings<a/>'
+                    Status = "False"
+                }
+            }
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5 B"
+    Task = "Enable TLS1.2 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5 C"
+    Task = "Enable TLS1.2 Protocol (Client)"
+    Test = {
+        $OS = Get-CimInstance Win32_OperatingSystem | Select-Object Caption
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -eq 4294967295) {
+                return @{
+                    Message = "The current registry value is '$regValue', which is no longer supported by Microsoft. For more information, please refer to this link:<br/>"`
+                    +'<a href="https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings">'`
+                    +'Learn.microsoft.com - TLS, DTLS, and SSL protocol version settings<a/>'
+                    Status = "False"
+                }
+            }
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5 D"
+    Task = "Enable TLS1.2 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6 A"
+    Task = "Enable TLS1.3 Protocol (Server)"
+    Test = {
+        try{
+            $OS = (Get-CimInstance Win32_OperatingSystem).Caption
+            if($OS -notmatch "Server 2022" -and $OS -notmatch "Windows 11"){
+                return @{
+                    Message = "OS currently not supported. For more information check out this link:  <a href='https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-#tls-protocol-version-support'>TLS protocol version support</a>"
+                    Status = "None"
+                }
+            }
+        }
+        catch{
+            return @{
+                Message = "Test not successful. Cmdlet not found 'Get-CimInstance'. "
+                Status = "None"
+            }
+        }
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "PowerShell cmdlet not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6 B"
+    Task = "Enable TLS1.3 Protocol (Server DisabledByDefault)"
+    Test = {
+        try{
+            $OS = (Get-CimInstance Win32_OperatingSystem).Caption
+            if($OS -notmatch "Server 2022" -and $OS -notmatch "Windows 11"){
+                return @{
+                    Message = "OS currently not supported. For more information check out this link:  <a href='https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-#tls-protocol-version-support'>TLS protocol version support</a>"
+                    Status = "None"
+                }
+            }
+        }
+        catch{
+            return @{
+                Message = "Test not successful. Cmdlet not found 'Get-CimInstance'. "
+                Status = "None"
+            }
+        }
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "PowerShell cmdlet not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6 C"
+    Task = "Enable TLS1.3 Protocol (Client)"
+    Test = {
+        try{
+            $OS = (Get-CimInstance Win32_OperatingSystem).Caption
+            if($OS -notmatch "Server 2022" -and $OS -notmatch "Windows 11"){
+                return @{
+                    Message = "OS currently not supported. For more information check out this link:  <a href='https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-#tls-protocol-version-support'>TLS protocol version support</a>"
+                    Status = "None"
+                }
+            }
+        }
+        catch{
+            return @{
+                Message = "Test not successful. Cmdlet not found 'Get-CimInstance'. "
+                Status = "None"
+            }
+        }
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "PowerShell cmdlet not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6 D"
+    Task = "Enable TLS1.3 Protocol (Client DisabledByDefault)"
+    Test = {
+        try{
+            $OS = (Get-CimInstance Win32_OperatingSystem).Caption
+            if($OS -notmatch "Server 2022" -and $OS -notmatch "Windows 11"){
+                return @{
+                    Message = "OS currently not supported. For more information check out this link:  <a href='https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-#tls-protocol-version-support'>TLS protocol version support</a>"
+                    Status = "None"
+                }
+            }
+        }
+        catch{
+            return @{
+                Message = "Test not successful. Cmdlet not found 'Get-CimInstance'. "
+                Status = "None"
+            }
+        }
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "PowerShell cmdlet not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1"
+    Task = "Disable NULL Cipher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2"
+    Task = "Disable DES Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4 A"
+    Task = "Disable RC4 Cipher Suite - 40/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4 B"
+    Task = "Disable RC4 Cipher Suite - 56/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4 C"
+    Task = "Disable RC4 Cipher Suite - 64/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4 D"
+    Task = "Disable RC4 Cipher Suite - 128/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.5"
+    Task = "Disable AES 128/128 Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.6"
+    Task = "Disable Triple DES Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.7"
+    Task = "Enable AES 256/256 Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -eq 4294967295) {
+                return @{
+                    Message = "The current registry value is '$regValue', which is no longer supported by Microsoft. For more information, please refer to this link:<br/>"`
+                    +'<a href="https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings">'`
+                    +'Learn.microsoft.com - TLS, DTLS, and SSL protocol version settings<a/>'
+                    Status = "False"
+                }
+            }
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1"
+    Task = "Configure Cipher Suite Ordering"
+    Test = {
+        #check if correct type 
+        $typeTable = @{
+            "String" = "String Value"
+            "Byte" = "Byte Value"
+            "Int32" = "DWORD (32-bit) Value"
+            "Int64" = "QWORD (64-bit) Value"
+            "String[]" = "Multi-String Value"
+        }
+        #Default status
+        $status = "Error"
+    
+        #Output
+        $verbInsecure = "rules have"
+        $verbWeak = "rules have"
+    
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+            -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002" `
+            -Name "Functions"
+            $reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+            $res = $regValue.Functions.GetType().Name
+    
+    
+            $currentType = $typeTable[$res]
+            if ($res -ne [String]) {
+                return @{  
+                    Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'String Value'"
+                    Status = "False"
+                }
+            }
+    
+            #check if insecure or weak cipher is inside value
+            $regValues = $regValue.Split(',')
+            $regValues = $regValues -replace ' ', ''
+            $weakRulesFound = @()
+            $insecureRulesFound = @()
+            foreach($element in $regValues){
+                if($listOfWeakCipherSuites.Contains($element)){
+                    $weakRulesFound += $element
+                }
+                if($listOfInsecureCipherSuites.Contains($element)){
+                    $insecureRulesFound += $element
+                }
+            }
+            if($insecureRulesFound.Count -eq 1){$verbInsecure = "rule has"}
+            if($weakRulesFound.Count -eq 1){$verbWeak = "rule has"}
+            $insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+            $weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+    
+            #Preparing message
+            foreach($member in $weakRulesFound){
+                $status = "Warning"
+                $weakMessage += "$($member)<br/>"
+            }          
+            foreach($member in $insecureRulesFound){
+                $status = "False"
+                $insecureMessage += "$($member)<br/>"
+            }          
+            #Combine or shorten message
+            if($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0){
+                $message = ""
+                if($weakRulesFound.Count -eq 0){ $weakMessage = "" }
+                if($insecureRulesFound.Count -eq 0){ $insecureMessage = "" }
+    
+                $message = $insecureMessage + $weakMessage
+                return @{
+                    Message = $message
+                    Status = $status
+                }
+            }
+    
+            if ($regValue -ne $reference) {
+                return @{                                                                               
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+            -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002" `
+            -Name "Functions"
+            $reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+            $res = $regValue.Functions.GetType().Name
+    
+            $currentType = $typeTable[$res]
+            if ($res -ne [String[]]) {
+                return @{  
+                    Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'Multi-String Value'"
+                    Status = "False"
+                }
+            }
+    
+            #check if insecure or weak cipher is inside value
+            $regValues = $regValue -replace ' ', ''
+            $weakRulesFound = @()
+            $insecureRulesFound = @()
+            foreach($element in $regValues){
+                if($listOfWeakCipherSuites.Contains($element)){
+                    $weakRulesFound += $element
+                }
+                if($listOfInsecureCipherSuites.Contains($element)){
+                    $insecureRulesFound += $element
+                }
+            }
+            if($insecureRulesFound.Count -eq 1){$verbInsecure = "rule has"}
+            if($weakRulesFound.Count -eq 1){$verbWeak = "rule has"}
+            $insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+            $weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+    
+            #Preparing message
+            foreach($member in $weakRulesFound){
+                $status = "Warning"
+                $weakMessage += "$($member)<br/>"
+            }          
+            foreach($member in $insecureRulesFound){
+                $status = "False"
+                $insecureMessage += "$($member)<br/>"
+            }          
+            #Combine or shorten message
+            if($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0){
+                $message = ""
+                if($weakRulesFound.Count -eq 0){ $weakMessage = "" }
+                if($insecureRulesFound.Count -eq 0){ $insecureMessage = "" }
+    
+                $message = $insecureMessage + $weakMessage
+                return @{
+                    Message = $message
+                    Status = $status
+                }
+            }
+    
+            if ($regValue -ne $reference) {
+                return @{                                                                               
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1"
+    Task = "Disable SHA-1 hash"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2"
+    Task = "Disable MD5 hash"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1 A"
+    Task = "Enable .Net Strong Crypto v2.0.50727 SystemDefaultTlsVersions 32 Bit on 64 Bit System"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727" `
+                -Name "SystemDefaultTlsVersions" `
+                | Select-Object -ExpandProperty "SystemDefaultTlsVersions"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1 B"
+    Task = "Enable .Net Strong Crypto v2.0.50727 SchUseStrongCrypto 32 Bit on 64 Bit System"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v2.0.50727" `
+                -Name "SchUseStrongCrypto" `
+                | Select-Object -ExpandProperty "SchUseStrongCrypto"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1 C"
+    Task = "Enable .Net Strong Crypto v2.0.50727 SystemDefaultTlsVersions"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727" `
+                -Name "SystemDefaultTlsVersions" `
+                | Select-Object -ExpandProperty "SystemDefaultTlsVersions"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1 D"
+    Task = "Enable .Net Strong Crypto v2.0.50727 SchUseStrongCrypto"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727" `
+                -Name "SchUseStrongCrypto" `
+                | Select-Object -ExpandProperty "SchUseStrongCrypto"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2 A"
+    Task = "Enable .Net Strong Crypto v4.0.30319 SystemDefaultTlsVersions 32 Bit on 64 Bit System"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319" `
+                -Name "SystemDefaultTlsVersions" `
+                | Select-Object -ExpandProperty "SystemDefaultTlsVersions"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2 B"
+    Task = "Enable .Net Strong Crypto v4.0.30319 SchUseStrongCrypto 32 Bit on 64 Bit System"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319" `
+                -Name "SchUseStrongCrypto" `
+                | Select-Object -ExpandProperty "SchUseStrongCrypto"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2 C"
+    Task = "Enable .Net Strong Crypto v4.0.30319 SystemDefaultTlsVersions"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319" `
+                -Name "SystemDefaultTlsVersions" `
+                | Select-Object -ExpandProperty "SystemDefaultTlsVersions"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2 D"
+    Task = "Enable .Net Strong Crypto v4.0.30319 SchUseStrongCrypto"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319" `
+                -Name "SchUseStrongCrypto" `
+                | Select-Object -ExpandProperty "SchUseStrongCrypto"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Debian Linux 11-CIS-1.0.0.ps1 b/ATAPAuditor/AuditGroups/Debian Linux 11-CIS-1.0.0.ps1
new file mode 100644
index 0000000..93cecca
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Debian Linux 11-CIS-1.0.0.ps1	
@@ -0,0 +1,5295 @@
+[AuditTest] @{
+    Id   = "1.1.1.1"
+    Task = "Ensure mounting of cramfs filesystems is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.1.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.2"
+    Task = "Ensure mounting of squashfs filesystems is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.2.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.3"
+    Task = "Ensure mounting of udf filesystems is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.3.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.1"
+    Task = "Ensure /tmp is a separate partition"
+    Test = {
+        $result = findmnt --kernel /tmp
+        if ($result -match "/tmp") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.2"
+    Task = "Ensure nodev option set on /tmp partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep nodev
+        if ($result -match "nodev") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.3"
+    Task = "Ensure noexec option set on /tmp partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep noexec
+        if ($result -match "noexec") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.4"
+    Task = "Ensure nosuid option set on /tmp partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep nosuid
+        if ($result -match "nosuid") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.3.1"
+    Task = "Ensure separate partition exists for /var"
+    Test = {
+        $result = findmnt --kernel /var
+        if ($result -match "/var") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.3.2"
+    Task = "Ensure nodev option set on /var partition"
+    Test = {
+        $result = findmnt --kernel /var
+        if ($result -match "nodev") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.3.3"
+    Task = "Ensure nosuid option set on /var partition"
+    Test = {
+        $result = findmnt --kernel /var
+        if ($result -match "nosuid") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1"
+    Task = "Ensure separate partition exists for /var/tmp"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+        if ($result -match "/var/tmp") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.2"
+    Task = "Ensure noexec option set on /var/tmp partition"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+        
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "noexec") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.3"
+    Task = "Ensure nosuid option set on /var/tmp partition"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "nosuid") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.4"
+    Task = "Ensure nodev option set on /var/tmp partition"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "nodev") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5.1"
+    Task = "Ensure separate partition exists for /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "/var/log") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5.2"
+    Task = "Ensure nodev option set on /var/log partition"
+    Test = {
+        $result = findmnt --kernel /var/log
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "nodev") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5.3"
+    Task = "Ensure noexec option set on /var/log partition"
+    Test = {
+        $result = findmnt --kernel /var/log
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "noexec") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5.4"
+    Task = "Ensure nosuid option set on /var/log partition"
+    Test = {
+        $result = findmnt --kernel /var/log
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "nosuid") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.6.1"
+    Task = "Ensure separate partition exists for /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+        if ($result -match "/var/log/audit") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.6.2"
+    Task = "Ensure noexec option set on /var/log/audit partition"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "noexec") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.6.3"
+    Task = "Ensure nodev option set on /var/log/audit partition"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+
+        if ($result -match "nodev") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.6.4"
+    Task = "Ensure nosuid option set on /var/log/audit partition"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+
+        # if no separate partition, at least the flag is set
+        if ($result -eq $null) {
+            $result = findmnt --kernel /var
+        }
+        
+        if ($result -match "nosuid") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.7.1"
+    Task = "Ensure separate partition exists for /home"
+    Test = {
+        $result = findmnt --kernel /home
+        if ($result -match "/home") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.7.2"
+    Task = "Ensure nodev option set on /home partition"
+    Test = {
+        $result = findmnt --kernel /home
+        if ($result -match "nodev") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.7.3"
+    Task = "Ensure nosuid option set on /home partition"
+    Test = {
+        $result = findmnt --kernel /home
+        if ($result -match "nosuid") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.8.1"
+    Task = "Ensure nodev option set on /dev/shm partition"
+    Test = {
+        $result = findmnt --kernel /dev/shm | grep nodev
+        if ($result -match "nodev") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.8.2"
+    Task = "Ensure noexec option set on /dev/shm partition"
+    Test = {
+        $result = findmnt --kernel /dev/shm | grep noexec
+        if ($result -match "noexec") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.8.3"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $result = findmnt --kernel /dev/shm | grep nosuid
+        if ($result -match "nosuid") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.9"
+    Task = "Disable Automounting"
+    Test = {
+        $result1 = systemctl is-enabled autofs
+        $status = $?
+        # error occurs when autofs is not installed, that is compliant, too
+        if ($status -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        if ($result1 -match "Failed" -and ($result1 -match "Failed" -or $result1 -match "disabled")) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.10"
+    Task = "Disable USB Storage"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.10.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.1"
+    Task = "Ensure package manager repositories are configured"
+    Test = {
+        $result = apt-cache policy
+        if ($result -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.2"
+    Task = "Ensure GPG keys are configured"
+    Test = {
+        $result = apt-key list
+        if ($result -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1"
+    Task = "Ensure AIDE is installed"
+    Test = {
+        $result = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' aide aide-common
+        if ($result -match "install ok installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2"
+    Task = "Ensure filesystem integrity is regularly checked"
+    Test = {
+        $result = grep -Prs '^([^#\n\r]+\h+)?(\/usr\/s?bin\/|^\h*)aide(\.wrapper)?\h+(--check|([^#\n\r]+\h+)?\$AIDEARGS)\b' /etc/cron.* /etc/crontab /var/spool/cron/
+        if ($result -match "install ok installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.4.1"
+    Task = "Ensure bootloader password is set"
+    Test = {
+        $result1 = grep "^set superusers" /boot/grub/grub.cfg
+        $result2 = grep "^password" /boot/grub/grub.cfg
+
+        if ($result1 -match "set superusers=" -and $result2 -match "password_pbkdf2") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.4.2"
+    Task = "Ensure permissions on bootloader config are configured"
+    Test = {
+        $test1 = stat /boot/grub/grub.cfg | grep 0400
+        if ($test1 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.4.3"
+    Task = "Ensure authentication required for single user mode"
+    Test = {
+        $command = @'
+grep -Eq '^root:\$(y|[0-9])' /etc/shadow || echo 'root is locked'
+'@
+        $result = bash -c $command
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.1"
+    Task = "Ensure address space layout randomization (ASLR) is enabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.5.1.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.2"
+    Task = "Ensure prelink is not installed"
+    Test = {
+        $result = dpkg -l | grep -o prelink
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.3"
+    Task = "Ensure Automatic Error Reporting is not enabled"
+    Test = {
+        $command = "dpkg-query -s apport > /dev/null 2>&1 && grep -Psi --'^\h*enabled\h*=\h*[^0]\b' /etc/default/apport"
+        $result1 = bash -c $command
+        $result2 = systemctl is-active apport.service | grep '^active'
+        if ($result1 -eq $null -and $result2 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.4"
+    Task = "Ensure core dumps are restricted"
+    Test = {
+        try {
+            $result1 = grep -Es '^(\*|\s).*hard.*core.*(\s+#.*)?$' /etc/security/limits.conf /etc/security/limits.d/*
+            $result2 = sysctl fs.suid_dumpable
+            $result3 = grep "fs.suid_dumpable" /etc/sysctl.conf /etc/sysctl.d/*
+            try {
+                $result4 = systemctl is-enabled coredump.service
+                $message = "Compliant"
+                if ($result4 -match "enabled" -or $result4 -match "masked" -or $result4 -match "disabled") {
+                    $message = "systemd-coredump is installed"
+                }
+            }
+            catch {
+                $message = "systemd-coredump not installed"
+            }
+            if ($result1 -match ".*\s*hard\s*core\s*0{1}?\s*" -and $result2 -match "fs.suid_dumpable = 0" -and $result3 -match "fs.suid_dumpable = 0") {
+                return @{
+                    Message = $message
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command not found!"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.6.1.1"
+    Task = "Ensure AppArmor is installed"
+    Test = {
+        $result = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' apparmor apparmor-utils
+        if ($result -match "apparmor\s+install ok installed\s+installed" -and $result -match "apparmor-utils\s+install ok installed\s+installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.6.1.2"
+    Task = "Ensure AppArmor is enabled in the bootloader configuration"
+    Test = {
+        $result1 = grep "^\s*linux" /boot/grub/grub.cfg | grep -v "apparmor=1"
+        $result2 = grep "^\s*linux" /boot/grub/grub.cfg | grep -v "security=apparmor"
+        if ($result1 -eq $null -and $result2 -eq $null ) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.6.1.3"
+    Task = "Ensure all AppArmor Profiles are in enforce or complain mode"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        $profileMode3 = apparmor_status | grep profiles | sed '3!d' | cut -d ' ' -f 1
+        $result = expr $profileMode3 + $profileMode2
+        
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+
+        if ($result -eq $profileMode1 -and $unconfinedProcesses -eq 0) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.6.1.4"
+    Task = "Ensure all AppArmor Profiles are enforcing"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+
+        if ($profileMode1 -eq $profileMode2 -and $unconfinedProcesses -eq 0) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.7.1"
+    Task = "Ensure message of the day is configured properly"
+    Test = {
+        $output = grep -Eis "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/motd
+
+        if ($output -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.7.2"
+    Task = "Ensure local login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue
+        
+        if ($output1 -ne $null -and $output2 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.7.3"
+    Task = "Ensure remote login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue.net
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net
+        
+        if ($output1 -ne $null -and $output2 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.7.4"
+    Task = "Ensure permissions on /etc/motd are configured"
+    Test = {
+        if (Test-Path /etc/motd) {
+            $test1 = stat /etc/motd | grep 0644
+            if ($test1 -ne $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        else {
+            return @{
+                Message = "motd not present"
+                Status  = "None"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.7.5"
+    Task = "Ensure permissions on /etc/issue are configured"
+    Test = {
+        $output = stat -L /etc/issue | grep "Access:\s*(0644/-rw-r--r--)\s*Uid:\s*(\s*0/\s*root)\s*Gid:\s*(\s*0/\s*root)"
+        
+        if ($output -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.1"
+    Task = "Ensure GNOME Display Manager is removed"
+    Test = {
+        $test = dpkg -l | grep "^ii" | grep -q "gdm3"
+        $output = $?
+        if ($output -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.2"
+    Task = "Ensure GDM login banner is configured"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.2.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.3"
+    Task = "Ensure GDM disable-user-list option is enabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.3.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.4"
+    Task = "Ensure GDM screen locks when the user is idle"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.4.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.5"
+    Task = "Ensure GDM screen locks cannot be overridden"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.5.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.6"
+    Task = "Ensure GDM automatic mounting of removable media is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.6.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.7"
+    Task = "Ensure GDM disabling automatic mounting of removable media is not overridden"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.7.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.8"
+    Task = "Ensure GDM autorun-never is enabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.8.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.9"
+    Task = "Ensure GDM autorun-never is not overridden"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.9.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.8.10"
+    Task = "Ensure XDCMP is not enabled"
+    Test = {
+        $output = grep -Eis '^\s*Enable\s*=\s*true' /etc/gdm3/custom.conf
+        if ($output -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.9"
+    Task = "Ensure updates, patches, and additional security software are installed"
+    Test = {
+        $output = apt -s upgrade
+        $output = $?
+        if ($output -match "True") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.1.1"
+    Task = "Ensure a single time synchronization daemon is in use"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-2.1.1.1.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.2.1"
+    Task = "Ensure chrony is configured with authorized timeserver"
+    Test = {
+        $output = apt -s upgrade
+        $output = $?
+        if ($output -match "True") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.2.2"
+    Task = "Ensure chrony is running as user _chrony"
+    Test = {
+        $testchr = dpkg-query -s chrony 
+        $statuschr = $?
+        if ($statuschr -match "True") {
+            $result = ps -ef | awk '(/[c]hronyd/ && $1!="_chrony") { print $1 }'
+            if ($result -eq $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "chrony not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.2.3"
+    Task = "Ensure chrony is enabled and running"
+    Test = {
+        $testchr = dpkg-query -s chrony 
+        $statuschr = $?
+        if ($statuschr -match "True") {
+            $result1 = systemctl is-enabled chrony.service
+            $result2 = systemctl is-active chrony.service
+            if ($result1 -match "enabled" -and $result2 -match "active") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "chrony not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.3.1"
+    Task = "Ensure systemd-timesyncd configured with authorized timeserver"
+    Test = {
+
+        $testtime = dpkg-query -s systemd-timesyncd 
+        $statustime = $?
+        if ($statustime -match "True") {
+            $command = @'
+find /etc/systemd -type f -name '*timesyncd*' -exec grep -Ehl '^NTP=|^FallbackNTP=' {} +
+'@
+            $test = bash -c $command
+            $status = $?
+
+            if ($status -match "True") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "systemd-timesyncd not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.3.2"
+    Task = "Ensure systemd-timesyncd is enabled and running"
+    Test = {
+        $result1 = systemctl is-enabled systemd-timesyncd.service
+        $result2 = systemctl is-active systemd-timesyncd.service
+        if ($result1 -match "enabled" -and $result2 -match "active") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.4.1"
+    Task = "Ensure ntp access control is configured"
+    Test = {
+        $testntp = dpkg-query -s ntp 
+        $statusntp = $?
+
+        if ($statusntp -match "True") {
+            $result = grep -P -- '^\h*restrict\h+((-4\h+)?|-6\h+)default\h+(?:[^#\n\r]+\h+)*(?!(?:\2|\3|\4|\5))(\h*\bkod\b\h*|\h*\bnomodify\b\h*|\h*\bnotrap\b\h*|\h*\bnopeer\b\h*|\h*\bnoquery\b\h*)\h+(?:[^#\n\r]+\h+)*(?!(?:\1|\3|\4|\5))(\h*\bkod\b\h*|\h*\bnomodify\b\h*|\h*\bnotrap\b\h*|\h*\bnopeer\b\h*|\h*\bnoquery\b\h*)\h+(?:[^#\n\r]+\h+)*(?!(?:\1|\2|\4|\5))(\h*\bkod\b\h*|\h*\bnomodify\b\h*|\h*\bnotrap\b\h*|\h*\bnopeer\b\h*|\h*\bnoquery\b\h*)\h+(?:[^#\n\r]+\h+)*(?!(?:\1|\2|\3|\5))(\h*\bkod\b\h*|\h*\bnomodify\b\h*|\h*\bnotrap\b\h*|\h*\bnopeer\b\h*|\h*\bnoquery\b\h*)\h+(?:[^#\n\r]+\h+)*(?!(?:\1|\2|\3|\4))(\h*\bkod\b\h*|\h*\bnomodify\b\h*|\h*\bnotrap\b\h*|\h*\bnopeer\b\h*|\h*\bnoquery\b\h*)\h*(?:\h+\H+\h*)*(?:\h+#.*)?$' /etc/ntp.conf
+            $wordsToCheck = "default", "kod", "nomodify", "notrap", "nopeer", "noquery"
+            $pattern = "\b(" + ($wordsToCheck -join "|") + ")\b"
+            if ($result.Count -eq 2 -and $result[0] -match $pattern -and $result[1] -match $pattern) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "ntp not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.4.2"
+    Task = "Ensure ntp is configured with authorized timeserver"
+    Test = {
+        $testntp = dpkg-query -s ntp 
+        $statusntp = $?
+        if ($statusntp -match "True") {
+            $result = grep -P -- '^\h*(server|pool)\h+\H+' /etc/ntp.conf
+            $wordsToCheck = "default", "kod", "nomodify", "notrap", "nopeer", "noquery"
+            $pattern = "\b(" + ($wordsToCheck -join "|") + ")\b"
+            if ($result.Count -eq 2 -and $result[0] -match $pattern -and $result[1] -match $pattern) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "ntp not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.4.3"
+    Task = "Ensure ntp is running as user ntp"
+    Test = {
+        $testntp = dpkg-query -s ntp 
+        $statusntp = $?
+        if ($statusntp -match "True") {
+            $result1 = ps -ef | awk '(/[n]tpd/ && $1!="ntp") { print $1 }'
+            $result2 = grep -P -- '^\h*RUNASUSER=' /etc/init.d/ntp
+            if ($result1 -eq $null -and $result2 -eq "RUNASUSER=ntp") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "ntp not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.4.4"
+    Task = "Ensure ntp is enabled and running"
+    Test = {
+        $testntp = dpkg-query -s ntp 
+        $statusntp = $?
+        if ($statusntp -match "True") {
+            $result1 = systemctl is-enabled ntp.service
+            $result2 = systemctl is-active ntp.service
+            if ($result1 -match "enabled" -and $result2 -match "active") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }  
+        }
+        return @{
+            Message = "ntp not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.1"
+    Task = "Ensure X Window System is not installed"
+    Test = {
+        $result = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' xserver-xorg* | grep -Pi '\h+installed\b'
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.2"
+    Task = "Ensure Avahi Server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep "^ii" | grep -q "avahi-daemon"
+        $test1 = $?
+        if ($test1 -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.3"
+    Task = "Ensure CUPS is not installed"
+    Test = {
+        $result = dpkg-query -s cups 
+        $status = $?
+        if ($status -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.4"
+    Task = "Ensure DHCP Server is not installed"
+    Test = {
+        $result = dpkg -l | grep -o isc-dhcp-server
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.5"
+    Task = "Ensure LDAP server is not installed"
+    Test = {
+        $result = dpkg -l | grep -o slapd
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.6"
+    Task = "Ensure NFS is not installed"
+    Test = {
+        $result = dpkg -l | grep -o  nfs-kernel-server
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.7"
+    Task = "Ensure DNS Server is not installed"
+    Test = {
+        $result = dpkg -l | grep -E -w "^ii\s+bind9\s"
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.8"
+    Task = "Ensure FTP Server is not installed"
+    Test = {
+        $result = dpkg -l | grep -o vsftpd
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.9"
+    Task = "Ensure HTTP server is not installed"
+    Test = {
+        $result = dpkg -l | grep -E 'apache2\s'
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.10"
+    Task = "Ensure IMAP and POP3 server are not installed"
+    Test = {
+        $result = dpkg -l | grep -o dovecot-
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.11"
+    Task = "Ensure Samba is not installed"
+    Test = {
+        $result = dpkg-query -s samba 
+        $status = $?
+        if ($status -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.12"
+    Task = "Ensure HTTP Proxy Server is not installed"
+    Test = {
+        $result = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' squid
+        if ($result -match "squid\s+unknown ok not-installed\s+not-installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.13"
+    Task = "Ensure SNMP Server is not installed"
+    Test = {
+        $result = dpkg -l | grep -E 'snmpd\s'
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.14"
+    Task = "Ensure NIS Server is not installed"
+    Test = {
+        $result = dpkg-query -s nis 
+        $status = $?
+        if ($status -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.15"
+    Task = "Ensure mail transfer agent is configured for local-only mode"
+    Test = {
+        $result = ss -lntu | grep -E ':25\s' | grep -E -v '\s(127.0.0.1|::1):25\s'
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.16"
+    Task = "Ensure rsync service is either not installed or masked"
+    Test = {
+        $result = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' rsync
+        if ($result -match "rsync\s+unknown ok not-installed\s+not-installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1"
+    Task = "Ensure NIS Client is not installed"
+    Test = {
+        $result = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' nis
+        if ($result -match "nis\s+unknown ok not-installed\s+not-installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2"
+    Task = "Ensure rsh client is not installed"
+    Test = {
+        $result = dpkg-query -s rsh-client 
+        $status = $?
+        if ($status -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.3"
+    Task = "Ensure talk client is not installed"
+    Test = {
+        $test1 = dpkg -l | grep "^ii" | grep -q "talk"
+        $test1 = $?
+        if ($test1 -match "False") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.4"
+    Task = "Ensure telnet client is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o telnet
+        if ($test1 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.5"
+    Task = "Ensure LDAP client is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o ldap-utils
+        if ($test1 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6"
+    Task = "Ensure RPC is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o rpcbind
+        if ($test1 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.4"
+    Task = "Ensure nonessential services are removed or masked"
+    Test = {
+        $test1 = lsof -i -P -n | grep -v "(ESTABLISHED)"
+        if ($test1 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.1"
+    Task = "Ensure system is checked to determine if IPv6 is enabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.1.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.2"
+    Task = "Ensure wireless interfaces are disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.2.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.3"
+    Task = "Ensure DCCP is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.3.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.4"
+    Task = "Ensure SCTP is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.4.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.5"
+    Task = "Ensure RDS is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.5.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.6"
+    Task = "Ensure TIPC is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.6.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.2.1"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.1.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.2.2"
+    Task = "Ensure IP forwarding is disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.2.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.1"
+    Task = "Ensure source routed packets are not accepted"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.1.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.2"
+    Task = "Ensure ICMP redirects are not accepted"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.2.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.3"
+    Task = "Ensure secure ICMP redirects are not accepted"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.3.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.4"
+    Task = "Ensure suspicious packets are logged"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.4.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.5"
+    Task = "Ensure broadcast ICMP requests are ignored"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.5.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.6"
+    Task = "Ensure bogus ICMP responses are ignored"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.6.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.7"
+    Task = "Ensure Reverse Path Filtering is enabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.7.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.8"
+    Task = "Ensure TCP SYN Cookies is enabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.8.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.9"
+    Task = "Ensure IPv6 router advertisements are not accepted"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.9.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.1.1"
+    Task = "Ensure ufw is installed"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "False") {
+            $result = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' ufw
+            if ($result -match "ufw\s+install ok installeds\+installed") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "nftables installed instead "
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.1.2"
+    Task = "Ensure iptables-persistent is not installed with ufw"
+    Test = {
+        $testufw = dpkg-query -s ufw 
+        $statusufw = $?
+        if ($statusufw -match "True") {
+            $test1 = dpkg -l | grep -o iptables-persistent
+            if ($test1 -eq $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.1.3"
+    Task = "Ensure ufw service is enabled"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            return @{
+                Message = "nftables installed instead "
+                Status  = "None"
+            }
+        }
+        $result1 = systemctl is-enabled ufw.service
+        $result2 = systemctl is-active ufw
+        $result3 = ufw status
+
+        if ($result1 -match "enabled" -and $result2 -match "active" -and $result3 -match "Status: active") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.1.4"
+    Task = "Ensure ufw loopback traffic is configured"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            return @{
+                Message = "nftables installed instead "
+                Status  = "None"
+            }
+        }
+        $test1 = ufw status verbose
+        $result1 = $test1 -match "^Anywhere on lo\s+ALLOW IN\s+Anywhere$"
+        $result2 = $test1 -match "^Anywhere\s+DENY IN\s+127.0.0.0/8$"
+        $result3 = $test1 -match "^Anywhere (v6) on lo\s+ALLOW IN\s+Anywhere (v6)$"
+        $result4 = $test1 -match "^Anywhere (v6)\s+DENY IN\s+::1$"
+        $result5 = $test1 -match "^Anywhere\s+ALLOW OUT\s+Anywhere on lo$"
+        $result6 = $test1 -match "^Anywhere (v6)\s+ALLOW OUT\s+Anywhere (v6) on lo$"
+        if ($result1 -ne $null -and $result2 -ne $null -and $result3 -ne $null -and $result4 -ne $null -and $result5 -ne $null -and $result6 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.1.5"
+    Task = "Ensure ufw outbound connections are configured"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            return @{
+                Message = "nftables installed instead "
+                Status  = "None"
+            }
+        }
+        return @{
+            Message = "Run the following command and verify all rules for new outbound connections match site policy: ufw status numbered"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.1.6"
+    Task = "Ensure ufw firewall rules exist for all open ports"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            return @{
+                Message = "nftables installed instead "
+                Status  = "None"
+            }
+        }
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-3.5.1.6.sh"
+        $result = bash $path
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.1.7"
+    Task = "Ensure ufw default deny firewall policy"
+    Test = {
+
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            return @{
+                Message = "nftables installed instead "
+                Status  = "None"
+            }
+        }
+
+        $result = ufw status verbose | grep Default:
+
+        if ($result -match "Default: (deny|reject|disabled) (incoming), (deny|reject|disabled) (outgoing), (deny|reject|disabled) (routed)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.1"
+    Task = "Ensure nftables is installed"
+    Test = {
+        $test = dpkg-query -s nftables | grep 'Status: install ok installed'
+        if ($test -match "Status: install ok installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.2"
+    Task = "Ensure ufw is uninstalled or disabled with nftables"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            $testufw = dpkg-query -s ufw | grep 'Status: install ok installed'
+            $statusufw = $?
+
+            if ($statusufw -match "True") {
+                $test2 = ufw status
+                if ($test2 -match "inactive") {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+                return @{
+                    Message = "Not-Compliant"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "nftables not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.3"
+    Task = "Ensure iptables are flushed with nftables"
+    Test = {
+        return @{
+            Message = "Run the following commands to ensure no iptables rules exist for iptables: iptables -L \nNo rules should be returned for ip6tables: ip6tables -L \nNo rules should be returned"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.4"
+    Task = "Ensure a nftables table exists"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            $test = nft list tables
+            if ($test -match "table") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "nftables not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.5"
+    Task = "Ensure nftables base chains exist"
+    Test = {
+        try {
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if ($test1 -match "type filter hook input" -and $test2 -match "type filter hook forward" -and $test3 -match "type filter hook output") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "nft not installed!"
+                Status  = "None"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.6"
+    Task = "Ensure nftables loopback traffic is configured"
+    Test = {
+        try {
+            if ($isIPv6Disabled -ne $true) {
+                $test1 = nft list ruleset | awk '/hook input/,/}/' | grep 'iif "lo" accept'
+                $test2 = nft list ruleset | awk '/hook input/,/}/' | grep 'ip saddr'
+                if ($test1 -match 'iif "lo" accept' -and $test2 -match "ip saddr 127.0.0.0/8 counter packets 0 bytes 0 drop") {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+            else {
+                $test = nft list ruleset | awk '/hook input/,/}/' | grep 'ip6 saddr'
+                if ($test -match 'ip6 saddr ::1 counter packets 0 bytes 0 drop') {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "nft not installed!"
+                Status  = "None"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.7"
+    Task = "Ensure nftables outbound and established connections are configured"
+    Test = {
+        try {
+            $test1 = nft list ruleset | awk '/hook input/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            $test2 = nft list ruleset | awk '/hook output/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            if ($test1 -match "ip protocol tcp ct state established accept" -and $test1 -match "p protocol udp ct state established accept" -and $test1 -match "ip protocol icmp ct state established accept" -and $test2 -match "ip protocol tcp ct state established,related,new accep" -and $test2 -match "ip protocol udp ct state established,related,new accept" -and $test2 -match "ip protocol icmp ct state established,related,new accept") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "nft not installed!"
+                Status  = "None"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.8"
+    Task = "Ensure nftables default deny firewall policy"
+    Test = {
+        try {
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if ($test1 -match "policy drop" -and $test2 -match "policy drop" -and $test3 -match "policy drop") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "nft not installed!"
+                Status  = "None"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.2.9"
+    Task = "Ensure nftables service is enabled"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "True") {
+            $test1 = systemctl is-enabled nftables
+            if ($test1 -match "enabled") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "nftables not installed"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.1.1"
+    Task = "Ensure iptables packages are installed"
+    Test = {
+        $testnft = dpkg-query -s nftables 
+        $statusnft = $?
+        if ($statusnft -match "False") {
+            $test1 = apt list iptables iptables-persistent
+            $test1 = $?
+            if ($test1 -match "True") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "nftables installed instead"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.1.2"
+    Task = "Ensure nftables is not installed with iptables"
+    Test = {
+
+        $testipt = dpkg-query -s iptables | grep 'Status: install ok installed'
+        $statusipt = $?
+        $testnft = dpkg-query -s nftables | grep 'Status: install ok installed'
+        $statusnft = $?
+
+        if ($statusipt -match "True") {
+            if ($statusnft -match "True") {
+                $test1 = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' nftables
+                if ($test1 -match "nftables\s+unknown ok not-installed\s+not-installed") {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+                return @{
+                    Message = "Not-Compliant"
+                    Status  = "False"
+                }
+            } return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "iptables not installed "
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.1.3"
+
+    Task = "Ensure ufw is uninstalled or disabled with iptables"
+    Test = {
+
+        $testipt = dpkg-query -s iptables | grep 'Status: install ok installed'
+        $statusipt = $?
+        $testufw = dpkg-query -s ufw | grep 'Status: install ok installed'
+        $statusufw = $?
+
+        if ($statusipt -match "True") {
+            if ($statusufw -match "True") {
+                $test1 = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' ufw
+                $test2 = ufw status
+                $test3 = systemctl is-enabled ufw
+                if ($test1 -match "ufw\s+unknown ok not-installed\s+not-installed" -and $test2 -match "Status: inactive" -and $test3 -match "masked") {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+                return @{
+                    Message = "Not-Compliant"
+                    Status  = "False"
+                }
+            } return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "iptables not installed "
+            Status  = "None"
+        }
+
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.2.1"
+    Task = "Ensure iptables default deny firewall policy"
+    Test = {
+        $test1 = iptables -L
+        if ($test1 -match "Chain INPUT (policy (DROP|REJCET))" -and $test1 -match "Chain FORWARD (policy (DROP|REJCET))" -and $test1 -match "Chain OUTPUT (policy (DROP|REJCET))") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.2.2"
+    Task = "Ensure iptables loopback traffic is configured"
+    Test = {
+        $test1 = iptables -L INPUT -v -n | grep "Chain\s*INPUT\s*(policy\s*DROP"
+        $test2 = iptables -L OUTPUT -v -n | grep "Chain\s*OUTPUT\s*(policy\s*DROP"
+        if ($test1 -ne $null -and $test2 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.2.4"
+    Task = "Ensure iptables firewall rules exist for all open ports"
+    Test = {
+        $test1 = ss -4tuln
+        if ($test1 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.3.1"
+    Task = "Ensure ip6tables default deny firewall policy"
+    Test = {
+        $test1 = ip6tables -L
+        if ($test1 -match "Chain INPUT (policy (DROP|REJCET))" -and $test1 -match "Chain FORWARD (policy (DROP|REJCET))" -and $test1 -match "Chain OUTPUT (policy (DROP|REJCET))") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.5.3.3.3"
+    Task = "Ensure ip6tables outbound and established connections are configured"
+    Test = {
+        return @{
+            Message = "Run the following command and verify all rules for new outbound, and established connections match site policy: ip6tables -L -v -n"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.1.1"
+    Task = "Ensure auditd is installed"
+    Test = {
+        $test = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' auditd audispd-plugins
+        if ($test -match "audispd-plugins\s+install ok installed\s+installed" -and $test -match "auditd\s+install ok installed\s+installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.1.2"
+    Task = "Ensure auditd service is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled auditd
+        $test2 = systemctl is-active auditd
+        if ($test1 -match "enabled" -and $test2 -match "active") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.1.3"
+    Task = "Ensure auditing for processes that start prior to auditd is enabled"
+    Test = {
+        $command = @'
+        find /boot -type f -name 'grub.cfg' -exec grep -Ph -- '^\h*linux' {} + | grep -v 'audit=1'
+'@
+        $test = bash -c $command
+        if ($test -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.1.4"
+    Task = "Ensure audit_backlog_limit is sufficient"
+    Test = {
+        $command = @'
+        find /boot -type f -name 'grub.cfg' -exec grep -Ph -- '^\h*linux' {} + | grep -Pv 'audit_backlog_limit=\d+\b'
+'@
+        $test = bash -c $command
+        if ($test -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.2.1"
+    Task = "Ensure audit log storage size is configured"
+    Test = {
+        $test = grep -Po -- '^\h*max_log_file\h*=\h*\d+\b' /etc/audit/auditd.conf
+        if ($test -match "max_log_file =") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.2.2"
+    Task = "Ensure audit logs are not automatically deleted"
+    Test = {
+        $test = grep max_log_file_action /etc/audit/auditd.conf
+        if ($test -match "max_log_file_action = keep_logs") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.2.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $test1 = grep space_left_action /etc/audit/auditd.conf
+        $test2 = grep action_mail_acct /etc/audit/auditd.conf
+        $test3 = grep -E 'admin_space_left_action\s*=\s*(halt|single)' /etc/audit/auditd.conf
+        if ($test1 -match "space_left_action = email" -and $test2 -match "action_mail_acct = root" -and $test3 -match "admin_space_left_action = (halt|single)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.1"
+    Task = "Ensure changes to system administration scope (sudoers) is collected"
+    Test = {
+        try {
+            $res1 = awk '/^ *-w/ &&/\/etc\/sudoers/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules | grep -- "-w /etc/sudoers -p wa -k scope"
+            $res2 = awk '/^ *-w/ &&/\/etc\/sudoers/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules | grep -- "-w /etc/sudoers.d -p wa -k scope"
+            $res3 = auditctl -l | awk '/^ *-w/ &&/\/etc\/sudoers/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' | grep -- "-w /etc/sudoers -p wa -k scope"
+            $res4 = auditctl -l | awk '/^ *-w/ &&/\/etc\/sudoers/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' | grep -- "-w /etc/sudoers.d -p wa -k scope"
+            if ($res1 -ne $null -and $res2 -ne $null -and $res3 -ne $null -and $res4 -ne $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command not found!"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.2"
+    Task = "Ensure actions as another user are always logged"
+    Test = {
+        $test1 = awk '/^ *-a *always,exit/  &&/ -F *arch=b[2346]{2}/  &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/)  &&(/ -C *euid!=uid/||/ -C *uid!=euid/)  &&/ -S *execve/  &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules 
+        try {
+            $test2 = auditctl -l | awk '/^ *-a *always,exit/  &&/ -F *arch=b[2346]{2}/  &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/)  &&(/ -C *euid!=uid/||/ -C *uid!=euid/)  &&/ -S *execve/  &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+        }
+        catch {
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        if ($test1 -match "-a always,exit -F arch=b64 -C euid!=uid -F auid!=unset -S execve -k user_emulation" -and $test1 -match "-a always,exit -F arch=b32 -C euid!=uid -F auid!=unset -S execve -k user_emulation" -and $test2 -match "-a always,exit -F arch=b64 -S execve -C uid!=euid -F auid!=-1 -F key=user_emulation" -and $test2 -match "-a always,exit -F arch=b32 -S execve -C uid!=euid -F auid!=-1 -F key=user_emulation") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.3"
+    Task = "Ensure events that modify the sudo log file are collected"
+    Test = {
+        $command1 = @'
+SUDO_LOG_FILE_ESCAPED=$(grep -r logfile /etc/sudoers* | sed -e 's/.*logfile=//;s/,? .*//' -e 's/"//g' -e 's|/|\\/|g') [ -n "${SUDO_LOG_FILE_ESCAPED}" ] && awk "/^ *-w/ \ &&/"${SUDO_LOG_FILE_ESCAPED}"/ \ &&/ +-p *wa/ \ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules \ || printf "ERROR: Variable 'SUDO_LOG_FILE_ESCAPED' is unset.\n"
+'@
+        $command2 = @'
+SUDO_LOG_FILE_ESCAPED=$(grep -r logfile /etc/sudoers* | sed -e 's/.*logfile=//;s/,? .*//' -e 's/"//g' -e 's|/|\\/|g') [ -n "${SUDO_LOG_FILE_ESCAPED}" ] && auditctl -l | awk "/^ *-w/ \ &&/"${SUDO_LOG_FILE_ESCAPED}"/ \ &&/ +-p *wa/ \ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" \ || printf "ERROR: Variable 'SUDO_LOG_FILE_ESCAPED' is unset.\n"
+'@
+        $test1 = bash -c $command1
+        $test2 = bash -c $command2
+        if ($test1 -match "-w /var/log/sudo.log -p wa -k sudo_log_file" -and $test2 -match "-w /var/log/sudo.log -p wa -k sudo_log_file") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.4"
+    Task = "Ensure events that modify date and time information are collected"
+    Test = {
+        $test1 = { awk '/^ *-a *always,exit/ \ &&/ -F *arch=b[2346]{2}/ \ &&/ -S/ \ &&(/adjtimex/ \ ||/settimeofday/ \ ||/clock_settime/ ) \ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules awk '/^ *-w/ \ &&/\/etc\/localtime/ \ &&/ +-p *wa/ \ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules }
+        $test2 = { auditctl -l | awk '/^ *-a *always,exit/ \ &&/ -F *arch=b[2346]{2}/ \ &&/ -S/ \ &&(/adjtimex/ \ ||/settimeofday/ \ ||/clock_settime/ ) \ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' auditctl -l | awk '/^ *-w/ \ &&/\/etc\/localtime/ \ &&/ +-p *wa/ \ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' }
+        if ($test1 -match "-a always,exit -F arch=b64 -S adjtimex,settimeofday clock_settime -k time-change" -and $test1 -match "-a always,exit -F arch=b32 -S adjtimex,settimeofday,clock_settime -k time-change" -and $test1 -match "-w /etc/localtime -p wa -k time-change" -and $test2 -match "-a always,exit -F arch=b64 -S adjtimex,settimeofday,clock_settime -F key=time-change" -and $test2 -match "-a always,exit -F arch=b32 -S adjtimex,settimeofday clock_settime -F key=time-change" -and $test3 -match "-w /etc/localtime -p wa -k time-change") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.5"
+    Task = "Ensure events that modify the system's network environment are collected"
+    Test = {
+        $test1 = awk '/^ *-a *always,exit/  &&/ -F *arch=b(32|64)/  &&/ -S/  &&(/sethostname/  ||/setdomainname/)  &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+        $test2 = awk "/^ *-w/  &&(/\/etc\/issue/ ||/\/etc\/issue.net/  ||/\/etc\/hosts/  ||/\/etc\/network/)  &&/ +-p *wa/  &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules
+        try {
+            $test3 = auditctl -l | awk '/^ *-a *always,exit/  &&/ -F *arch=b(32|64)/  &&/ -S/  &&(/sethostname/  ||/setdomainname/)  &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+            $test4 = auditctl -l | awk '/^ *-w/ &&(/\/etc\/issue/ ||/\/etc\/issue.net/ ||/\/etc\/hosts/ ||/\/etc\/network/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'        
+        }
+        catch {
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        if ($test1 -match "-a always,exit -F arch=b64 -S adjtimex,settimeofday clock_settime -k time-change" -and $test1 -match "-a always,exit -F arch=b32 -S adjtimex,settimeofday,clock_settime -k time-change" -and $test1 -match "-w /etc/localtime -p wa -k time-change" -and $test2 -match "-a always,exit -F arch=b64 -S adjtimex,settimeofday,clock_settime -F key=time-change" -and $test2 -match "-a always,exit -F arch=b32 -S adjtimex,settimeofday clock_settime -F key=time-change" -and $test3 -match "-w /etc/localtime -p wa -k time-change") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.6"
+    Task = "Ensure use of privileged commands are collected"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path1 = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-A.sh"
+        $result1 = bash $path1 | grep "Warning"
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path2 = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-B.sh"
+        $result2 = bash $path2 | grep "Warning"
+        if ($result1 -eq $null -and $result2 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.8"
+    Task = "Ensure events that modify user/group information are collected"
+    Test = {
+
+        try {
+            $dummy = auditctl -l 
+        }
+        catch {
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+
+        $output1 = awk '/^ *-w/ \
+        &&(/\/etc\/group/ \
+         ||/\/etc\/passwd/ \
+         ||/\/etc\/gshadow/ \
+         ||/\/etc\/shadow/ \
+         ||/\/etc\/security\/opasswd/) \
+        &&/ +-p *wa/ \
+        &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+        $result11 = $output1 | grep "\-w /etc/group -p wa -k identity"
+        $result12 = $output1 | grep "\-w /etc/passwd -p wa -k identity"
+        $result13 = $output1 | grep "\-w /etc/gshadow -p wa -k identity"
+        $result14 = $output1 | grep "\-w /etc/shadow -p wa -k identity"
+        $result15 = $output1 | grep "\-w /etc/security/opasswd -p wa -k identity"
+        $output2 = auditctl -l | awk '/^ *-w/ \
+        &&(/\/etc\/group/ \
+         ||/\/etc\/passwd/ \
+         ||/\/etc\/gshadow/ \
+         ||/\/etc\/shadow/ \
+         ||/\/etc\/security\/opasswd/) \
+        &&/ +-p *wa/ \
+        &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+        $result21 = $output2 | grep "\-w /etc/group -p wa -k identity"
+        $result22 = $output2 | grep "\-w /etc/passwd -p wa -k identity"
+        $result23 = $output2 | grep "\-w /etc/gshadow -p wa -k identity"
+        $result24 = $output2 | grep "\-w /etc/shadow -p wa -k identity"
+        $result25 = $output2 | grep "\-w /etc/security/opasswd -p wa -k identity"
+        if ($result11 -ne $null -and $result12 -ne $null -and $result13 -ne $null -and $result14 -and $result15 -ne $null -and $result21 -ne $null -and $result22 -ne $null -and $result23 -ne $null -and $result24 -ne $null -and $result25 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.11"
+    Task = "Ensure session initiation information is collected"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path1 = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-4.1.3.11_1.sh"
+        $result11 = bash $path1 | grep "\-w /var/run/utmp -p wa -k session"
+        $result12 = bash $path1 | grep "\-w /var/log/wtmp -p wa -k session"
+        $result13 = bash $path1 | grep "\-w /var/log/btmp -p wa -k session"
+        $path2 = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-4.1.3.11_2.sh"
+        $result21 = bash $path2 | grep "\-w /var/run/utmp -p wa -k session"
+        $result22 = bash $path2 | grep "\-w /var/log/wtmp -p wa -k session"
+        $result23 = bash $path2 | grep "\-w /var/log/btmp -p wa -k session"
+        if ($result11 -ne $null -and $result12 -ne $null -and $result13 -ne $null -and $result21 -ne $null -and $result22 -ne $null -and $result23 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.12"
+    Task = "Ensure login and logout events are collected"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path1 = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-4.1.3.12_1.sh"
+        $result11 = bash $path1 | grep "\-w /var/log/lastlog -p wa -k logins"
+        $result12 = bash $path1 | grep "\-w /var/run/faillock -p wa -k logins"
+        $path2 = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-4.1.3.12_2.sh"
+        $result21 = bash $path2 | grep "\-w /var/log/lastlog -p wa -k logins"
+        $result22 = bash $path2 | grep "\-w /var/run/faillock -p wa -k logins"
+        if ($result11 -ne $null -and $result12 -ne $null -and $result21 -ne $null -and $result22 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.14"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path1 = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-4.1.3.14_1.sh"
+        $result11 = bash $path1 | grep "\-w /etc/apparmor/ -p wa -k MAC-policy"
+        $result12 = bash $path1 | grep "\-w /etc/apparmor.d/ -p wa -k MAC-policy"
+        $path2 = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-4.1.3.14_2.sh"
+        $result21 = bash $path2 | grep "\-w /etc/apparmor/ -p wa -k MAC-policy"
+        $result22 = bash $path2 | grep "\-w /etc/apparmor.d/ -p wa -k MAC-policy"
+        if ($result11 -ne $null -and $result12 -ne $null -and $result21 -ne $null -and $result22 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.20"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        $test = grep -Ph -- '^\h*-e\h+2\b' /etc/audit/rules.d/*.rules | tail -1
+        if ($test -match "-e 2") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.3.21"
+    Task = "Ensure the running and on disk configuration is the same"
+    Test = {
+        return @{
+            Message = "Ensure that all rules in /etc/audit/rules.d have been merged into /etc/audit/audit.rules: augenrules --check \n/usr/sbin/augenrules: No change \nShould there be any drift, run augenrules --load to merge and load all rules."
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.1"
+    Task = "Ensure audit log files are mode 0640 or less permissive"
+    Test = {
+        $command = @'
+dir=$(awk -F= '/^log_file/ {print $2}' /etc/audit/auditd.conf | xargs dirname) && [ $(stat -c "%a" "$dir") -le 640 ] && echo "PASS: Directory permissions are 0640 or less permissive" || echo "FAIL: Directory permissions are more permissive"
+'@
+        $result = bash -c $command
+        if ($result -match " PASS ") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.2"
+    Task = "Ensure only authorized users own audit log files"
+    Test = {
+        $test1 = stat -Lc "%n %U" "$(dirname $(awk -F"=" '/^\s*log_file\s*=\s*/ {print $2}' /etc/audit/auditd.conf | xargs))"/* | grep -Pv -- '^\H+\h+root\b'
+        if ($test1 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.3"
+    Task = "Ensure only authorized groups are assigned ownership of audit log files"
+    Test = {
+        $test1 = grep -Piw -- '^\h*log_group\h*=\h*(adm|root)\b' /etc/audit/auditd.conf
+        $test2 = stat -c "%n %G" "$(dirname $(awk -F"=" '/^\s*log_file\s*=\s*/ {print $2}' /etc/audit/auditd.conf | xargs))"/* | grep -Pv '^\h*\H+\h+(adm|root)\b'
+        if ($test1 -match "(log_group = adm)|(log_group = root)" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.4"
+    Task = "Ensure the audit log directory is 0750 or more restrictive"
+    Test = {
+        $test1 = stat -Lc "%n %a" "$(dirname $( awk -F"=" '/^\s*log_file/ {print $2}' /etc/audit/auditd.conf))" | grep -Pv -- '^\h*\H+\h+([0,5,7][0,5]0)'
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.5"
+    Task = "Ensure audit configuration files are 640 or more restrictive"
+    Test = {
+        $command = @'
+        find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) -exec stat -Lc "%n %a" {} + | grep -Pv -- '^\h*\H+\h*([0,2,4,6][0,4]0)\h*$'
+'@
+        $test1 = bash -c $command
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.6"
+    Task = "Ensure audit configuration files are owned by root"
+    Test = {
+        $command = @'
+find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) ! -user root
+'@
+        $test1 = bash -c $command
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.7"
+    Task = "Ensure audit configuration files belong to group root"
+    Test = {
+        $command = @'
+find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) ! -group root
+'@
+        $test1 = bash -c $command
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.8"
+    Task = "Ensure audit tools are 755 or more restrictive"
+    Test = {
+        $test1 = stat -c "%n %a" /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | grep -Pv -- '^\h*\H+\h+([0-7][0,1,4,5][0,1,4,5])\h*$'
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.9"
+    Task = "Ensure audit tools are owned by root"
+    Test = {
+        $test1 = stat -c "%n %U" /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | grep -Pv -- '^\h*\H+\h+root\h*$'
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.10"
+    Task = "Ensure audit tools belong to group root"
+    Test = {
+        $test1 = stat -c "%n %a %U %G" /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | grep -Pv -- '^\h*\H+\h+([0-7][0,1,4,5][0,1,4,5])\h+root\h+root\h*$'
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.4.11"
+    Task = "Ensure cryptographic mechanisms are used to protect the integrity of audit tools"
+    Test = {
+        $test1 = grep -Ps -- '(\/sbin\/(audit|au)\H*\b)' /etc/aide/aide.conf.d/*.conf /etc/aide/aide.conf
+        if ($test1 -match "/sbin/auditctl p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+            $test1 -match "/sbin/auditd p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+            $test1 -match "/sbin/ausearch p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+            $test1 -match "/sbin/aureport p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+            $test1 -match "/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+            $test1 -match "/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.1.1"
+    Task = "Ensure systemd-journal-remote is installed"
+    Test = {
+        $test1 = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' systemd-journal-remote
+        if ($test1 -match "systemd-journal-remote\s+install ok installed\s+installed") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.1.2"
+    Task = "Ensure systemd-journal-remote is configured"
+    Test = {
+        return @{
+            Message = 'Verify systemd-journal-remote is configured. Run the following command: grep -P "^ *URL=|^ *ServerKeyFile=|^ *ServerCertificateFile=|^ *TrustedCertificateFile=" /etc/systemd journal-upload.conf'
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.1.3"
+    Task = "Ensure systemd-journal-remote is enabled"
+    Test = {
+        $test1 = systemctl is-enabled systemd-journal-upload.service
+        if ($test1 -match "enabled") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.1.4"
+    Task = "Ensure journald is not configured to recieve logs from a remote client"
+    Test = {
+        $test1 = systemctl is-enabled systemd-journal-remote.socket
+        if ($test1 -match "disabled") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.2"
+    Task = "Ensure journald service is enabled"
+    Test = {
+        $test1 = systemctl is-enabled systemd-journald.service
+        if ($test1 -match "static") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.3"
+    Task = "Ensure journald is configured to compress large log files"
+    Test = {
+        $test1 = grep ^\s*Compress /etc/systemd/journald.conf
+        if ($test1 -match "Compress=yes") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.4"
+    Task = "Ensure journald is configured to write logfiles to persistent disk"
+    Test = {
+        $test1 = grep ^\s*Storage /etc/systemd/journald.conf
+        if ($test1 -match "Storage=persistent") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.5"
+    Task = "Ensure journald is not configured to send logs to rsyslog"
+    Test = {
+        $test1 = grep ^\s*ForwardToSyslog /etc/systemd/journald.conf
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.6"
+    Task = "Ensure journald log rotation is configured per site policy"
+    Test = {
+        return @{
+            Message = "Review /etc/systemd/journald.conf and verify logs are rotated according to site policy. The specific parameters for log rotation are:\n
+            SystemMaxUse=\n
+            SystemKeepFree=\n
+            RuntimeMaxUse=\n
+            RuntimeKeepFree=\n
+            MaxFileSec="
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.1.7"
+    Task = "Ensure journald default file permissions configured"
+    Test = {
+        return @{
+            Message = "First see if there is an override file /etc/tmpfiles.d/systemd.conf. If so, this file will override all default settings as defined in /usr/lib/tmpfiles.d/systemd.conf and should be inspected. If there is no override file, inspect the default /usr/lib/tmpfiles.d/systemd.conf against the site specific requirements. Ensure that file permissions are 0640. Should a site policy dictate less restrictive permissions, ensure to follow said policy. NOTE: More restrictive permissions such as 0600 is implicitly sufficient."
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.2.1"
+    Task = "Ensure rsyslog is installed"
+    Test = {
+        $test1 = dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' rsyslog
+        if ($test1 -match "rsyslog\s+install ok installed\s+installed") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.2.2"
+    Task = "Ensure rsyslog service is enabled"
+    Test = {
+        $test1 = systemctl is-enabled rsyslog
+        if ($test1 -match "enabled") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.2.3"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        $test1 = grep ^\s*ForwardToSyslog /etc/systemd/journald.conf
+        if ($test1 -match "ForwardToSyslog=yes") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.2.4"
+    Task = "Ensure rsyslog default file permissions are configured"
+    Test = {
+        $test1 = grep ^\$FileCreateMode /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if ($test1 -match "$FileCreateMode 0640") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.2.6"
+    Task = "Ensure rsyslog is configured to send logs to a remote log host"
+    Test = {
+        return @{
+            Message = "Review the /etc/rsyslog.conf and /etc/rsyslog.d/*.conf files and verify that logs are sent to a central host (where loghost.example.com is the name of your central log host):"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.2.7"
+    Task = "Ensure rsyslog is not configured to receive logs from a remote client"
+    Test = {
+        $test1 = grep -s '$ModLoad imtcp' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        $test2 = grep -s '$InputTCPServerRun' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if ($test1 -eq $null -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.3"
+    Task = "Ensure all logfiles have appropriate permissions and ownership"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-4.2.3.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.2.2.7"
+    Task = "Ensure rsyslog is not configured to receive logs from a remote client"
+    Test = {
+        $test1 = grep '$ModLoad imtcp' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        $test2 = grep '$InputTCPServerRun' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if ($test1 -eq $null -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.1"
+    Task = "Ensure cron daemon is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if ($test1 -eq "enabled" -and $test2 -match "running") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $test1 = stat /etc/crontab | grep 0600
+        if ($test1 -ne $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.3"
+    Task = "Ensure permissions on /etc/cron.hourly are configured"
+    Test = {
+        $test1 = stat /etc/cron.hourly/
+        if ($test1 -eq "Access: (0700/drwx------)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $test1 = stat /etc/cron.daily/
+        if ($test1 -eq "Access: (0700/drwx------)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $test1 = stat /etc/cron.weekly/
+        if ($test1 -eq "Access: (0700/drwx------)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $test1 = stat /etc/cron.monthly/
+        if ($test1 -eq "Access: (0700/drwx------)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $test1 = stat /etc/cron.d/
+        if ($test1 -eq "Access: (0700/drwx------)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.8"
+    Task = "Ensure cron is restricted to authorized users"
+    Test = {
+        $test1 = stat /etc/cron.deny
+        $test1 = $?
+        $test2 = stat /etc/cron.allow
+        if ($test1 -match "False" -and $test2 -match "0640\s*.*Uid.*root.*Gid.*root") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.9"
+    Task = "Ensure at is restricted to authorized users"
+    Test = {
+        $test1 = stat /etc/at.deny
+        $test1 = $?
+        $test2 = stat /etc/at.allow | grep 0640
+        if ($test1 -match "False" -and $test2 -eq "Access: (0640/-rw-r-----)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.1"
+    Task = "Ensure permissions on /etc/ssh/sshd_config are configured"
+    Test = {
+        try {
+            try {
+                $test1 = stat /etc/ssh/sshd_config | grep 0600
+            }
+            catch {
+                return @{
+                    Message = "Path not found!"
+                    Status  = "False"
+                }
+            }
+
+            if ($test1 -eq "Access: (0600/-rw-------)  Uid: (    0/    root)   Gid: (    0/    root)") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Path not found!"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.2"
+    Task = "Ensure permissions on SSH private host key files are configured"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-5.2.2.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.3"
+    Task = "Ensure permissions on SSH public host key files are configured"
+    Test = {
+        $res = bash -c "find /etc/ssh -xdev -type f -name 'ssh_host_*_key.pub' -exec stat {} \;" | grep "Access:\s*(0644/-rw-r--r--)\s*Uid:\s*(\s*0/\s*root)\s*Gid:\s*(\s*0/\s*root)\s*"
+        if ($res.count -eq 3) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.4"
+    Task = "Ensure SSH access is limited"
+    Test = {
+        try {
+            $result = bash -c "sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Ei '^\s*(allow|deny)(users|groups)\s+\S+'"
+            if ($result -match "allowusers" -or $result -match "allowgroups" -or $result -match "denyusers" -or $result -match "denygroups") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command doesn't exist"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.5"
+    Task = "Ensure SSH LogLevel is appropriate"
+    Test = {
+        try {
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep loglevel
+            try {
+                $test2 = grep -is 'loglevel' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf | grep -Evi '(VERBOSE|INFO)'
+            }
+            catch {
+                return @{
+                    Message = "Path not found!"
+                    Status  = "False"
+                }
+            }
+            if (($test1 -match "loglevel VERBOSE" -or $test1 -match "loglevel INFO") -and $test2 -eq $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command doesn't exist"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.6"
+    Task = "Ensure SSH PAM is enabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i usepam
+        $test2 = grep -Ei '^\s*UsePAM\s+no' /etc/ssh/sshd_config
+        if ($test1 -match "usepam yes" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.7"
+    Task = "Ensure SSH root login is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permitrootlogin
+        $test2 = grep -Ei '^\s*PermitRootLogin\s+no' /etc/ssh/sshd_config
+        if ($test1 -match "permitrootlogin no" -and $test2 -match "PermitRootLogin no") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.8"
+    Task = "Ensure SSH HostbasedAuthentication is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep hostbasedauthentication
+        $test2 = grep -Ei '^\s*HostbasedAuthentication\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "hostbasedauthentication no" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.9"
+    Task = "Ensure SSH PermitEmptyPasswords is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permitemptypasswords
+        $test2 = grep -Ei '^\s*PermitEmptyPasswords\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "permitemptypasswords no" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.10"
+    Task = "Ensure SSH PermitUserEnvironment is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permituserenvironment
+        $test2 = grep -Ei '^\s*PermitUserEnvironment\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "permituserenvironment no" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.11"
+    Task = "Ensure SSH IgnoreRhosts is enabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep ignorerhosts
+        $test2 = grep -Ei '^\s*ignorerhosts\s+no\b' /etc/ssh/sshd_config
+        if ($test1 -match "ignorerhosts yes" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.12"
+    Task = "Ensure SSH X11 forwarding is disabled"
+    Test = {
+        try {
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i x11forwarding
+            try {
+                $test2 = grep -Eis '^\s*x11forwarding\s+yes' /etc/ssh/sshd_config/etc/ssh/sshd_config.d/*.conf
+            }
+            catch {
+                return @{
+                    Message = "Path not found!"
+                    Status  = "False"
+                }
+            }
+            if ($test1 -match "x11forwarding no" -and $test2 -eq $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command doesn't exist"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.13"
+    Task = "Ensure only strong Ciphers are used"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep ciphers
+        if ($test1 -notmatch "(3des-cbc|aes128-cbc|aes192-cbc|aes256-cbc)") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.14"
+    Task = "Ensure only strong MAC algorithms are used"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i "MACs"
+        if ($test1 -notmatch "(hmac-md5|hmac-md5-96|hmac-ripemd160|hmac-sha1|hmac-sha1-96|umac-64@openssh.com|umac-128@openssh.com|hmac-md5-etm@openssh.com|hmac-md5-96-etm@openssh.com|hmac-ripemd160-etm@openssh.com|hmac-sha1-etm@openssh.com|hmac-sha1-96-etm@openssh.com|umac-64-etm@openssh.com|umac-128-etm@openssh.com)") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.15"
+    Task = "Ensure only strong Key Exchange algorithms are used"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep kexalgorithms
+        if ($test1 -notmatch "(diffie-hellman-group1-sha1|diffie-hellman-group14-sha1|diffie-hellman-group-exchange-sha1)") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.16"
+    Task = "Ensure SSH AllowTcpForwarding is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i allowtcpforwarding
+        $test2 = grep -Ei '^\s*AllowTcpForwarding\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "allowtcpforwarding no" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.17"
+    Task = "Ensure SSH warning banner is configured"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep banner
+        if ($test1 -match "banner /etc/issue.net") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.18"
+    Task = "Ensure SSH MaxAuthTries is set to 4 or less"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep maxauthtries
+        $test2 = grep -Ei '^\s*maxauthtries\s+([5-9]|[1-9][0-9]+)' /etc/ssh/sshd_config
+        if ($test1 -match "maxauthtries 4" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.19"
+    Task = "Ensure SSH MaxStartups is configured"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i maxstartups
+        $test2 = grep -Ei '^\s*maxstartups\s+(((1[1-9]|[1-9][0-9][0-9]+):([0-9]+):([0-9]+))|(([0-9]+):(3[1-9]|[4-9][0-9]|[1-9][0-9][0-9]+):([0-9]+))|(([0-9]+):([0-9]+):(6[1-9]|[7-9][0-9]|[1-9][0-9][0-9]+)))' /etc/ssh/sshd_config
+        if ($test1 -match "maxstartups 10:30:60" -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.20"
+    Task = "Ensure SSH MaxSessions is set to 10 or less"
+    Test = {
+        try {
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i maxsessions | cut -d ' ' -f 2
+            
+            try {
+                $test2 = grep -Eis '^\s*MaxSessions\s+(1[1-9]|[2-9][0-9]|[1-9][0-9][0-9]+)'/etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch {
+                return @{
+                    Message = "Path not found!"
+                    Status  = "False"
+                }
+            }
+            if ($test1 -le 10 -and $test2 -eq $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command doesn't exist"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.21"
+    Task = "Ensure SSH LoginGraceTime is set to one minute or less"
+    Test = {
+        try {
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep logingracetime | cut -d ' ' -f 2
+            try {
+                $test2 = grep -Eis '^\s*LoginGraceTime\s+(0|6[1-9]|[7-9][0-9]|[1-9][0-9][0-9]+|[^1]m)' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch {
+                return @{
+                    Message = "Path not found!"
+                    Status  = "False"
+                }
+            }
+            if (($test1 -ge 1 -and $test1 -le 60) -and $test2 -eq $null) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command doesn't exist"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.22"
+    Task = "Ensure SSH Idle Timeout Interval is configured"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep clientaliveinterval
+        $test2 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep clientalivecountmax
+        if ($test1 -match "clientaliveinterval 15" -and $test2 -match "clientalivecountmax 3") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.1"
+    Task = "Ensure sudo is installed"
+    Test = {
+        $command = @'
+dpkg-query -W sudo sudo-ldap > /dev/null 2>&1 && dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' sudo sudo-ldap | awk '($4=="installed" && $NF=="installed") {print "\n""PASS:""\n""Package ""\""$1"\""" is installed""\n"}' || echo -e "\nFAIL:\nneither \"sudo\" or \"sudo-ldap\" package is installed\n"
+'@
+        $test1 = bash -c $command
+        if ($test1 -match "PASS:") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.2"
+    Task = "Ensure sudo commands use pty"
+    Test = {
+        $test1 = grep -rPi '^\h*Defaults\h+([^#\n\r]+,)?use_pty(,\h*\h+\h*)*\h*(#.*)?$' /etc/sudoers*
+        if ($test1 -match "/etc/sudoers:Defaults use_pty") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3"
+    Task = "Ensure sudo log file exists"
+    Test = {
+        $command = @'
+        grep -rPsi "^\h*Defaults\h+([^#]+,\h*)?logfile\h*=\h*(\"|\')?\H+(\"|\')?(,\h*\H+\h*)*\h* (#.*)?$" /etc/sudoers*
+'@
+        $test1 = bash -c $command
+
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+
+       
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.4"
+    Task = "Ensure users must provide password for privilege escalation"
+    Test = {
+        $test1 = grep -r "^[^#].*NOPASSWD" /etc/sudoers*
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.5"
+    Task = "Ensure re-authentication for privilege escalation is not disabled globally"
+    Test = {
+        $test1 = grep -r "^[^#].*\!authenticate" /etc/sudoers*
+        if ($test1 -match '!authenticate') { 
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.6"
+    Task = "Ensure sudo authentication timeout is configured correctly"
+    Test = {
+        #todo
+        $test1 = grep -roP "timestamp_timeout=\K[0-9]*" /etc/sudoers*
+        if ($test1 -match 'auth required pam_wheel.so use_uid group=') { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.7"
+    Task = "Ensure access to the su command is restricted"
+    Test = {
+        #todo
+        $test1 = grep -Pi '^\h*auth\h+(?:required|requisite)\h+pam_wheel\.so\h+(?:[^#\n\r]+\h+)?((?!\2)(use_uid\b|group=\H+\b))\h+(?:[^#\n\r]+\h+)?((?!\1)(use_uid\b|group=\H+\b))(\h+.*)?$' /etc/pam.d/su
+        if ($test1 -match 'auth required pam_wheel.so use_uid group=') { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.1"
+    Task = "Ensure password creation requirements are configured"
+    Test = {
+        $test1 = grep '^\s*minlen\s*' /etc/security/pwquality.confsu
+        if ($test1 -match 'minlen = 14') { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.4"
+    Task = "Ensure password hashing algorithm is up to date with the latest standards"
+    Test = {
+        $test1 = grep -i "^\s*ENCRYPT_METHOD\s*yescrypt\s*$" /etc/login.defs
+        if ($test1 -match 'ENCRYPT_METHOD yescrypt') { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.5"
+    Task = "Ensure all current passwords uses the configured hashing algorithm"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-5.4.5.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.1.1"
+    Task = "Ensure minimum days between password changes is configured"
+    Test = {
+        $test1 = grep -E '^[[:space:]]*PASS_MIN_DAYS[[:space:]]+' /etc/login.defs | grep -v '^#'
+        if ($test1 -ge 1) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.1.2"
+    Task = "Ensure password expiration is 365 days or less"
+    Test = {
+        $test1 = awk '/^PASS_MAX_DAYS/ && $2 <= 365 {print "true"; exit}' /etc/login.defs
+        $test2 = awk -F: '(/^[^:]+:[^!*]/ && ($5>365 || $5~/([0-1]|-1|\s*)/)){print $1 " " $5}' /etc/shadow
+        if ($test1 -match 'true' -and $test2 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.1.3"
+    Task = "Ensure password expiration warning days is 7 or more"
+    Test = {
+        $test1 = grep PASS_WARN_AGE /etc/login.defs | cut -d ' ' -f2
+        if ($test1 -ge 7) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.1.4"
+    Task = "Ensure inactive password lock is 30 days or less"
+    Test = {
+        $test1 = useradd -D | grep INACTIVE | cut -d '=' -f2
+        if ($test1 -le 30) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.1.5"
+    Task = "Ensure all users last password change date is in the past"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-5.5.1.5.sh"
+        $result = bash $path
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.2"
+    Task = "Ensure system accounts are secured"
+    Test = {
+        $test1 = awk -F: '$1!~/(root|sync|shutdown|halt|^\+)/ && $3<'"$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)"' && $7!~/((\/usr)?\/sbin\/nologin)/ && $7!~/(\/bin)?\/false/ {print}' /etc/passwd
+        $test2 = awk -F: '($1!~/(root|^\+)/ && $3<'"$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)"') {print $1}' /etc/passwd | xargs -I '{}' passwd -S '{}' | awk '($2!~/LK?/) {print $1}'
+        if ($test1 -eq $null -and $test2 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.3"
+    Task = "Ensure default group for the root account is GID 0"
+    Test = {
+        $test1 = grep "^root:" /etc/passwd | cut -f4 -d ':'
+        if ($test1 -eq 0) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.4"
+    Task = "Ensure default user umask is 027 or more restrictive"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/CIS-Ubuntu22.04_LTS-5.5.4.sh"
+        $result = bash $path
+        $test2 = grep -RPi '(^|^[^#]*)\s*umask\s+([0-7][0-7][01][0-7]\b|[0-7][0-7][0-7][0-6]\b|[0-7][01][0-7]\b|[0-7][0-7][0-6]\b|(u=[rwx]{0,3},)?(g=[rwx]{0,3},)?o=[rwx]+\b|(u=[rwx]{1,3},)?g=[^rx]{1,3}(,o=[rwx]{0,3})?\b)' /etc/login.defs /etc/profile* /etc/bash.bashrc*
+        if ($result -match "Default user umask is set" -and $test2 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5.5"
+    Task = "Ensure default user shell timeout is 900 seconds or less"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.5.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/passwd
+        if ($test1 -match "/etc/passwd\s+644\s+0/root\s+0/root") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.2"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat /etc/passwd-
+        if ($test1 -eq "Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.3"
+    Task = "Ensure permissions on /etc/group are configured"
+    Test = {
+        $test1 = stat /etc/group
+        if ($test1 -eq "Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.4"
+    Task = "Ensure permissions on /etc/group- are configured"
+    Test = {
+        $test1 = stat /etc/group- | grep 0644
+        if ($test1 -eq "Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.5"
+    Task = "Ensure permissions on /etc/shadow are configured"
+    Test = {
+        $test1 = stat /etc/shadow | grep 0640
+        if ($test1 -eq "Access: (0640/-rw-r-----)  Uid: (    0/    root)   Gid: (    0/    root)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.6"
+    Task = "Ensure permissions on /etc/shadow- are configured"
+    Test = {
+        $test1 = stat /etc/shadow- | grep 0640
+        if ($test1 -eq "Access: (0640/-rw-r-----)  Uid: (    0/    root)   Gid: (   42/  shadow)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.7"
+    Task = "Ensure permissions on /etc/gshadow are configured"
+    Test = {
+        $test1 = stat /etc/gshadow | grep 0640
+        if ($test1 -eq "Access: (0640/-rw-r-----)  Uid: (    0/    root)   Gid: (   42/  shadow)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.8"
+    Task = "Ensure permissions on /etc/gshadow- are configured"
+    Test = {
+        $test1 = stat /etc/gshadow- | grep 0640
+        if ($test1 -eq "Access: (0640/-rw-r-----)  Uid: (    0/    root)   Gid: (   42/  shadow)") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.9"
+    Task = "Ensure no world writable files exist"
+    Test = {
+        #$partitions = mapfile -t partitions < (sudo fdisk -l | grep -o '/dev/[^ ]*')
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        if ($test1 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.10"
+    Task = "Ensure no unowned files or directories exist"
+    Test = {
+        $command = @'
+df --local -P | awk {'if (NR!=1) print $6'} | xargs -I '{}' find '{}' -xdev -nouser
+'@
+        $test1 = bash -c $command
+            
+        if ($test1 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.11"
+    Task = "Ensure no ungrouped files or directories exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -nogroup
+        if ($test1 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.12"
+    Task = "Audit SUID executables"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -4000
+        $message = ""
+        foreach ($line in $test1) {
+            $message += "<br>$line"
+        }
+        return @{
+            Message = "Please review following list of files: $($message)"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.13"
+    Task = "Audit SGID executables"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -2000
+        $message = ""
+        foreach ($line in $test1) {
+            $message += "<br>$line"
+        }
+        return @{
+            Message = "Please review following list of files: $($message)"
+            Status  = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.1"
+    Task = "Ensure accounts in /etc/passwd use shadowed passwords"
+    Test = {
+        $test1 = awk -F: '($2 != "x" ) { print $1 " is not set to shadowed passwords "}' /etc/passwd
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.2"
+    Task = "Ensure /etc/shadow password fields are not empty"
+    Test = {
+        $test1 = awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow
+        if ($test1 -eq $null) { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.3"
+    Task = "Ensure all groups in /etc/passwd exist in /etc/group"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.3.sh"
+        $result = bash $path
+        $status = $?
+        
+        if ($status -match "True") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.4"
+    Task = "Ensure shadow group is empty"
+    Test = {
+        $test1 = awk -F: '($1=="shadow") {print $NF}' /etc/group
+        $test2 = awk -F: -v GID="$(awk -F: '($1=="shadow") {print $3}' /etc/group)" '($4==GID) {print $1}' /etc/passwd
+        if ($test1.Length -eq 0 -and $test2 -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.5"
+    Task = "Ensure no duplicate UIDs exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.5.sh"
+        $result = bash $path
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.6"
+    Task = "Ensure no duplicate GIDs exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.6.sh"
+        $result = bash $path
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.7"
+    Task = "Ensure no duplicate user names exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.7.sh"
+        $result = bash $path
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.8"
+    Task = "Ensure no duplicate group names exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.8.sh"
+        $result = bash $path
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.9"
+    Task = "Ensure root PATH Integrity"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.9.sh"
+        $result = bash $path
+        if ($result -eq $null) {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.10"
+    Task = "Ensure root is the only UID 0 account"
+    Test = {
+        $test1 = awk -F: '($3 == 0) { print $1 }' /etc/passwd
+        if ($test1 -eq "root") { 
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.11"
+    Task = "Ensure local interactive user home directories exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.11.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.12"
+    Task = "Ensure local interactive users own their home directories"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.12.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.13"
+    Task = "Ensure local interactive user home directories are mode 750 or more restrictive"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.13.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.14"
+    Task = "Ensure no local interactive user has .netrc files"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.14.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.15"
+    Task = "Ensure no local interactive user has .forward files"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.15.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.16"
+    Task = "Ensure no local interactive user has .rhosts files"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.16.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.17"
+    Task = "Ensure local interactive user dot files are not group or world writable"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath + "/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.17.sh"
+        $result = bash $path
+        foreach ($line in $result) {
+            if (!($line -match "PASS")) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Debian Linux 12-CIS-1.0.1.ps1 b/ATAPAuditor/AuditGroups/Debian Linux 12-CIS-1.0.1.ps1
new file mode 100644
index 0000000..bbb1770
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Debian Linux 12-CIS-1.0.1.ps1	
@@ -0,0 +1,4115 @@
+$rcTrue = "True"
+$rcCompliant = "Compliant"
+$rcFalse = "False"
+$rcNone = "None"
+$rcNonCompliant = "Non-Compliant"
+$rcNonCompliantManualReviewRequired = "Manual review required"
+$rcCompliantIPv6isDisabled = "IPv6 is disabled"
+$rcFirewallStatus1 = "Using nftables"
+$rcFirewallStatus2 = "Using ufw"
+$rcFirewallStatus3 = "Using iptables"
+
+$retCompliant = @{
+    Message = $rcCompliant
+    Status = $rcTrue
+}
+$retNonCompliant = @{
+    Message = $rcNonCompliant
+    Status = $rcFalse
+}
+$retCompliantIPv6Disabled = @{
+    Message = $rcCompliantIPv6isDisabled
+    Status = $rcTrue
+}
+$retNonCompliantManualReviewRequired = @{
+    Message = $rcNonCompliantManualReviewRequired
+    Status = $rcNone
+}
+$retUsingFW1 = @{
+    Message = $rcFirewallStatus1
+    Status = $rcNone
+}
+$retUsingFW2 = @{
+    Message = $rcFirewallStatus2
+    Status = $rcNone
+}
+$retUsingFW3 = @{
+    Message = $rcFirewallStatus3
+    Status = $rcNone
+}
+
+# Firewall evaluation
+function GetFirewallStatus {
+    # 0 - undefined
+	# 1 - using nftables
+	# 2 - using ufw
+	# 3 - using iptables
+
+	$t_UFW = dpkg-query -f='${db:Status-Abbrev}' -W ufw 2>/dev/null
+	$t_NFT = dpkg-query -f='${db:Status-Abbrev}' -W nftables 2>/dev/null
+	$t_IPT = dpkg-query -f='${db:Status-Abbrev}' -W iptables 2>/dev/null
+	$t_UFW_en = systemctl is-enabled ufw 2>/dev/null
+	if ($t_UFW -match "ii"){
+        $t_UFW_inac = ufw status 2>/dev/null | grep -iE "Status: Ina[ck]tive?"
+        $t_UFW_ac = ufw status 2>/dev/null | grep -iE "Status: A[ck]tive?"
+    } else {
+        $t_UFW_ac = $null
+        $t_UFW_inac = $null
+    }
+	$t_NFT_en = systemctl is-enabled nftables.service 2>/dev/null
+	
+	# Testing 1 - nftable installed, ufw not or inactive
+	if ($t_NFT -match "ii" -and $t_IPT -match "^(rc |un |)$" -and ($t_UFW -match "^(rc |un |)$" -or $t_UFW_inac -ne $null) -and $t_NFT_en -match "enabled"){
+        return 1
+    }
+	
+	# Testing 2 - ufw, iptables installed, nftables not 
+	if ( $t_UFW -match "ii" -and $t_UFW_ac -ne $null -and $t_UFW_en -match "enabled" -and $t_IPT -match "ii" -and $t_NFT -match "^(rc |un |)$"){
+        return 2
+    }
+	
+	# Testing 3 - only iptables
+	if ($t_NFT -match "^(rc |un |)$" -and $t_UFW -match "^(rc |un |)$" -and $t_IPT -match "ii"){
+        return 3
+    }
+
+    return 0
+}
+
+$FirewallStatus = GetFirewallStatus
+
+$parentPath = Split-Path -Parent -Path $PSScriptRoot
+$scriptPath = $parentPath + "/Helpers/ShellScripts/Ubuntu22.04_Debian12/"
+$commonPath = $parentPath + "/Helpers/ShellScripts/common/"
+
+[AuditTest] @{
+    Id = "1.1.1.1"
+    Task = "Ensure cramfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.2"
+    Task = "Ensure freevxfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.3"
+    Task = "Ensure hfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.4"
+    Task = "Ensure hfsplus kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.5"
+    Task = "Ensure jffs2 kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.6"
+    Task = "Ensure squashfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.7"
+    Task = "Ensure udf kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.8"
+    Task = "Ensure usb-storage kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.1"
+    Task = "Ensure /tmp is a separate partition"
+    Test = {
+        $result = findmnt --kernel /tmp
+        if($result -match "/tmp"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.2"
+    Task = "Ensure nodev option set on /tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.3"
+    Task = "Ensure nosuid option set on /tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.4"
+    Task = "Ensure noexec option set on /tmp partition"
+    Test = {
+        $result =  findmnt --kernel /tmp | grep noexec
+        if($result -match "noexec"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.2.1"
+    Task = "Ensure /dev/shm is a separate partition"
+    Test = {
+        $script = $scriptPath + "1.1.2.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.2.2"
+    Task = "Ensure nodev option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.2.3"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.2.4"
+    Task = "Ensure noexec option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.3.1"
+    Task = "Ensure separate partition exists for /home"
+    Test = {
+        $result = findmnt --kernel /home
+        if($result -match "/home"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.3.2"
+    Task = "Ensure nodev option set on /home partition"
+    Test = {
+        $script = $commonPath + "1.1.2.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.3.3"
+    Task = "Ensure nosuid option set on /home partition"
+    Test = {
+        $script = $commonPath + "1.1.2.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.4.1"
+    Task = "Ensure separate partition exists for /var"
+    Test = {
+        $result = findmnt --kernel /var
+        if($result -match !$null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.4.2"
+    Task = "Ensure nodev option set on /var partition"
+    Test = {
+        $script = $commonPath + "1.1.2.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.4.3"
+    Task = "Ensure nosuid option set on /var partition"
+    Test = {
+        $script = $commonPath + "1.1.2.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.1"
+    Task = "Ensure separate partition exists for /var/tmp"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+        if($result -match "/var/tmp"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.2"
+    Task = "Ensure nodev option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.3"
+    Task = "Ensure nosuid option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.4"
+    Task = "Ensure noexec option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.1"
+    Task = "Ensure separate partition exists for /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log
+        if($result -match !$null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.2"
+    Task = "Ensure nodev option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.3"
+    Task = "Ensure nosuid option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.4"
+    Task = "Ensure noexec option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.1"
+    Task = "Ensure separate partition exists for /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+        if($result -match "/var/log/audit"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.2"
+    Task = "Ensure nodev option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.3"
+    Task = "Ensure nosuid option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.4"
+    Task = "Ensure noexec option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1.1"
+    Task = "Ensure GPG keys are configured"
+    Test = {
+        $result = apt-key list
+        if($result -ne $null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1.2"
+    Task = "Ensure package manager repositories are configured"
+    Test = {
+        $result = apt-cache policy
+        if($result -ne $null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2.1"
+    Task = "Ensure updates, patches, and additional security software are installed"
+    Test = {
+        $output = apt -s upgrade
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.1"
+    Task = "Ensure AppArmor is installed"
+    Test = {
+        $result = dpkg-query -W -f='${db:Status-Abbrev}' apparmor 2>/dev/null
+        
+        if($result -match "ii"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.2"
+    Task = "Ensure AppArmor is enabled in the bootloader configuration"
+    Test = {
+        $script = $scriptPath + "1.3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.3"
+    Task = "Ensure all AppArmor Profiles are in enforce or complain mode"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        $profileMode3 = apparmor_status | grep profiles | sed '3!d' | cut -d ' ' -f 1
+        $result = expr $profileMode3 + $profileMode2
+        
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+
+        if($result -eq $profileMode1 -and $unconfinedProcesses -eq 0){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.4"
+    Task = "Ensure all AppArmor Profiles are enforcing"
+    Test = {
+        $script = $scriptPath + "1.3.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4.1"
+    Task = "Ensure bootloader password is set"
+    Test = {
+        $result1 = grep "^set superusers" /boot/grub/grub.cfg
+        $result2 = grep "^password" /boot/grub/grub.cfg
+        if($result1 -match "set superusers=" -and $result2 -match "password_pbkdf2"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.4.2"
+    Task = "Ensure access to bootloader config is configured"
+    Test = {
+        $script = $commonPath + "1.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.1"
+    Task = "Ensure address space layout randomization is enabled"
+    Test = {
+        $script = $commonPath + "1.5.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.2"
+    Task = "Ensure ptrace_scope is restricted"
+    Test = {
+        $script = $commonPath + "1.5.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id = "1.5.3"
+    Task = "Ensure core dumps are restricted"
+    Test = {
+        $script = $scriptPath + "1.5.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.4"
+    Task = "Ensure prelink is not installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W prelink 2>/dev/null
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.5"
+    Task = "Ensure Automatic Error Reporting is not enabled"
+    Test = {
+        $result1 = dpkg-query -s apport > /dev/null 2>&1 && grep -Psi -- '^\h*enabled\h*=\h*[^0]\b' /etc/default/apport
+        $result2 = systemctl is-active apport.service | grep '^active'
+        if($result1 -eq $null -and $result2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.1"
+    Task = "Ensure message of the day is configured properly"
+    Test = {
+        $script = $scriptPath + "1.6.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.2"
+    Task = "Ensure local login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue
+
+	if($output1 -eq $null){
+	    return $retCompliant
+	}
+
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue
+        
+        if($output1 -ne $null -and $output2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.3"
+    Task = "Ensure remote login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue.net
+
+	if($output1 -eq $null){
+	    return $retCompliant
+	}
+
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net
+        
+        if($output1 -ne $null -and $output2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.4"
+    Task = "Ensure access to /etc/motd is configured"
+    Test = {
+        $script = $scriptPath + "1.6.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.5"
+    Task = "Ensure access to /etc/issue is configured"
+    Test = {
+        $output = stat -c '%#a' /etc/issue | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.6"
+    Task = "Ensure access to /etc/issue.net is configured"
+    Test = {
+        $output = stat -c '%#a' /etc/issue.net | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.1"
+    Task = "Ensure GDM is removed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W gdm3 2>/dev/null
+        if($test1 -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.2"
+    Task = "Ensure GDM login banner is configured"
+    Test = {
+        $path = $scriptPath + "1.8.2.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.3"
+    Task = "Ensure GDM disable-user-list option is enabled"
+    Test = {
+        $path = $scriptPath + "1.8.3.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.4"
+    Task = "Ensure GDM screen locks when the user is idle"
+    Test = {
+        $path = $scriptPath + "1.8.4.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.5"
+    Task = "Ensure GDM screen locks cannot be overridden"
+    Test = {
+        $path = $scriptPath + "1.8.5.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.6"
+    Task = "Ensure GDM automatic mounting of removable media is disabled"
+    Test = {
+        $path = $scriptPath + "1.8.6.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.7"
+    Task = "Ensure GDM disabling automatic mounting of removable media is not overridden"
+    Test = {
+        $path = $scriptPath + "1.8.7.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.8"
+    Task = "Ensure GDM autorun-never is enabled"
+    Test = {
+        $path = $scriptPath + "1.8.8.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.9"
+    Task = "Ensure GDM autorun-never is not overridden"
+    Test = {
+        $path = $scriptPath + "1.8.9.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.10"
+    Task = "Ensure XDCMP is not enabled"
+    Test = {
+        $script = $scriptPath + "1.7.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.1"
+    Task = "Ensure autofs services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null autofs
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null autofs.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.2"
+    Task = "Ensure avahi daemon services are not in use"
+    Test = {
+        $status = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null avahi-daemon
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null avahi-daemon.socket
+            if(! $?){
+                $test3 = systemctl is-enabled 2>/dev/null avahi-daemon.service
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.3"
+    Task = "Ensure dhcp server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null isc-dhcp-server
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null isc-dhcp-server.service
+            if(! $?){
+                $test2 = systemctl is-enabled 2>/dev/null isc-dhcp-server6.service
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.4"
+    Task = "Ensure dns server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null bind9
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null bind9.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.5"
+    Task = "Ensure dnsmasq server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null dnsmasq
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null dnsmasq.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.6"
+    Task = "Ensure ftp server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null vsftpd
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null vsftpd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.7"
+    Task = "Ensure ldap server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null slapd
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null slapd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.8"
+    Task = "Ensure message access server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null dovecot-imapd
+        $test2 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null dovecot-pop3d
+        if("$test1" -match "^(rc |un |)$" -and "$test2" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test3 = systemctl is-enabled 2>/dev/null dovecot.socket
+            if(! $?){
+                $test4 = systemctl is-enabled 2>/dev/null dovecot.service
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.9"
+    Task = "Ensure network file system services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null nfs-kernel-server
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null nfs-kernel.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.10"
+    Task = "Ensure nis server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null ypserv
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null ypserv.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.11"
+    Task = "Ensure print server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null cups
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null cups.service
+            if(! $?){
+                $test3 = systemctl is-enabled 2>/dev/null cups.socket
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.12"
+    Task = "Ensure rpcbind services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null rpcbind
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null rpcbind.service
+            if(! $?){
+                $test3 = systemctl is-enabled 2>/dev/null rpcbind.socket
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.13"
+    Task = "Ensure rsync services are not in use"
+    Test = {
+        $script = $commonPath + "2.1.13.sh"
+        bash $script
+        if ($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.14"
+    Task = "Ensure samba file server services are not in use"
+    Test = {
+        $test1 = dpkg-query -W -f='${db:Status-Abbrev}' samba 2>/dev/null
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null samba.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.15"
+    Task = "Ensure snmp services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null snmpd
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null snmpd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.16"
+    Task = "Ensure tftp server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null tftpd-hpa
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null tftpd-hpa.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.17"
+    Task = "Ensure web proxy server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null squid
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null squid.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.18"
+    Task = "Ensure web server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null apache2
+        $test2 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null ginx
+        if("$test1" -match "^(rc |un |)$" -and "$test2" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $services = 'apache2.service', 'apache2.socket', 'nginx.service', 'nginx.socket'
+            $test3 = "disabled"
+            foreach ($service in $services){
+                $test4 = systemctl is-enabled $service 2>/dev/null
+                if($?){
+                    $test3 = "enabled"
+                }
+            }
+            if($test3 -match "disabled"){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.19"
+    Task = "Ensure xinetd services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null xinetd
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null xinetd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.20"
+    Task = "Ensure X window server services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null xserver-commen
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.21"
+    Task = "Ensure mail transfer agent is configured for local-only mode"
+    Test = {
+        $test1 = ss -lntu | grep -E ':25\s' | grep -E -v '\s(127.0.0.1|::1):25\s'
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.22"
+    Task = "Ensure only approved services are listening on a network interface"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "Ensure NIS Client is not installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W nis 2>/dev/null
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "Ensure rsh client is not installed"
+    Test = {
+        $status = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null rsh-client
+        if($status -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "Ensure talk client is not installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null talk
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "Ensure telnet client Server is not installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W telnet 2>/dev/null
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "Ensure ldap client is not installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W lapd-utils 2>/dev/null
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "Ensure ftp client is not installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W ftp 2>/dev/null
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "Ensure a single time synchronization daemon is in use"
+    Test = {
+        $path = $scriptPath + "2.1.1.1.sh"
+        $result=bash $path
+        if($result -match "PASS:"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "Ensure systemd-timesyncd configured with authorized timeserver"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "Ensure systemd-timesyncd is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled systemd-timesyncd.service
+        $time = timedatectl status
+        if($test1 -match "enabled" -and $time -ne $null){    
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.3.3.1"
+    Task = "Ensure chrony is configured with authorized timeserver"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "2.3.3.2"
+    Task = "Ensure chrony is running as user _chrony"
+    Test = {
+        $script = $scriptPath + "2.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.3.3"
+    Task = "Ensure chrony is enabled and running"
+    Test = {
+        $test1 = $(systemctl is-enabled cron.service 1>/dev/null 2>/dev/null; echo $?)
+        $test2 = $(systemctl is-active cron.service 1>/dev/null 2>/dev/null; echo $?)
+        if($test1 -and $test2 ){
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.1"
+    Task = "Ensure cron daemon is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if($test1 -eq "enabled" -and $test2 -match "running"){
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/crontab | grep -q "0600"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.3"
+    Task = "Ensure permissions on /etc/cron.hourly are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.hourly/ | grep -q 0700
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.daily/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.weekly/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.monthly/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.d/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.8"
+    Task = "Ensure crontab is restricted to authorized users"
+    Test = {
+        $script = $commonPath + "2.4.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4.2.1"
+    Task = "Ensure at is restricted to authorized users"
+    Test = {
+        $script = $commonPath + "2.4.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.1"
+    Task = "Ensure IPv6 status is identified"
+    Test = {
+        $path = $scriptPath + "3.1.1.sh"
+        $result=bash $path
+        if($result -match "IPv6 is enabled on the system"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.2"
+    Task = "Ensure wireless interfaces are disabled"
+    Test = {
+        $script = $commonPath + "3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.3"
+    Task = "Ensure bluetooth services are not in use"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null bluez
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null bluetooth.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "3.2.1"
+    Task = "Ensure dccp kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.2"
+    Task = "Ensure tipc kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.3"
+    Task = "Ensure rds kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.4"
+    Task = "Ensure sctp kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.1"
+    Task = "Ensure ip forwarding is disabled"
+    Test = {
+        $script = $commonPath + "3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.2"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $script = $commonPath + "3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.3"
+    Task = "Ensure bogus icmp responses are ignored"
+    Test = {
+        $script = $commonPath + "3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.4"
+    Task = "Ensure broadcast icmp requests are ignored"
+    Test = {
+        $script = $commonPath + "3.3.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.5"
+    Task = "Ensure icmp redirects are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.6"
+    Task = "Ensure secure icmp redirects are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.7"
+    Task = "Ensure reverse path filtering is enabled"
+    Test = {
+        $script = $commonPath + "3.3.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.8"
+    Task = "Ensure source routed packets are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.9"
+    Task = "Ensure suspicious packets are logged"
+    Test = {
+        $script = $commonPath + "3.3.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.10"
+    Task = "Ensure tcp syn cookies is enabled"
+    Test = {
+        $script = $commonPath + "3.3.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.11"
+    Task = "Ensure ipv6 router advertisements are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.11.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.1"
+    Task = "Ensure ufw is installed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W ufw 2>/dev/null
+        if($test1 -match "ii"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.2"
+    Task = "Ensure iptables-persistent is not installed with ufw"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null iptables-persistent
+        if("$test1" -match "^(rc |un |)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.3"
+    Task = "Ensure ufw service is enabled"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = systemctl is-enabled ufw 2>/dev/null
+        $test2 = systemctl is-active ufw 2>/dev/null
+        if($test1 -match "enabled" -and $test2 -match "active"){
+            $test3 = ufw status | grep -iE "Status: A[ck]tive?"
+            if($test3 -ne $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.4"
+    Task = "Ensure ufw loopback traffic is configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -W -f='${db:Status-Abbrev}' ufw
+        if($test1 -match "ii"){
+            $test2 = ufw status verbose | grep -iE "Status: A[ck]tive?"
+            if($test2 -eq $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.5"
+    Task = "Ensure ufw outbound connections are configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -W -f='${db:Status-Abbrev}' ufw
+        if($test1 -match "ii"){
+            $test2 = ufw status numbered | grep -iE "Status: Ina[ck]tive?"
+            if($test2 -eq $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.6"
+    Task = "Ensure ufw firewall rules exist for all open ports"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $path = $scriptPath + "3.5.1.6.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.7"
+    Task = "Ensure ufw default deny firewall policy"
+    Test = {
+        $test1 = dpkg-query -W -f='${db:Status-Abbrev}' ufw
+        if($test1 -match "ii"){
+            $test2 = ufw status verbose | grep -iE "allow"
+            if($test2 -eq $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1"
+    Task = "Ensure nftables is installed"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W nftables 2>/dev/null
+        if($test1 -match "ii"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2"
+    Task = "Ensure ufw is uninstalled or disabled with nftables"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W ufw 2>/dev/null
+        if($test1 -match "^(rc |un |)$"){
+            return $retCompliant
+        } else {
+            $test2 = ufw status | grep -iE "Status: Ina[ck]tive?"
+            if($test2 -ne $null) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+        Id = "4.2.3"
+        Task = "Ensure iptables are flushed with nftables"
+        Test = {
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+                $script = $scriptPath + "4.2.3.sh"
+            $result = bash $script
+            if ($?) {
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+}
+[AuditTest] @{
+    Id = "4.2.4"
+    Task = "Ensure a nftables table exists"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list tables
+            if($test1 -match "table"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.5"
+    Task = "Ensure nftables base chains exist"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if($test1 -match "type filter hook input" -and $test2 -match "type filter hook forward" -and $test3 -match "type filter hook output"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.6"
+    Task = "Ensure nftables loopback traffic is configured"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            if($isIPv6Disabled -ne $true){
+                $test1 = nft list ruleset | awk '/hook input/,/}/' | grep 'iif "lo" accept'
+                $test2 = nft list ruleset | awk '/hook input/,/}/' | grep 'ip saddr'
+                if($test1 -match 'iif "lo" accept' -and $test2 -match "ip saddr 127.0.0.0/8 counter packets 0 bytes 0 drop"){
+                    return $retCompliant
+                }
+            }
+            else{
+                $test = nft list ruleset | awk '/hook input/,/}/' | grep 'ip6 saddr'
+                if($test -match 'ip6 saddr ::1 counter packets 0 bytes 0 drop'){
+                    return $retCompliant
+                }
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.7"
+    Task = "Ensure nftables outbound and established connections are configured"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list ruleset | awk '/hook input/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            $test2 = nft list ruleset | awk '/hook output/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            if($test1 -match "ip protocol tcp ct state established accept" -and $test1 -match "p protocol udp ct state established accept" -and $test1 -match "ip protocol icmp ct state established accept" -and $test2 -match "ip protocol tcp ct state established,related,new accep" -and $test2 -match "ip protocol udp ct state established,related,new accept" -and $test2 -match "ip protocol icmp ct state established,related,new accept"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.8"
+    Task = "Ensure nftables default deny firewall policy"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if($test1 -match "policy drop" -and $test2 -match "policy drop" -and $test3 -match "policy drop"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.9"
+    Task = "Ensure nftables service is enabled"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = systemctl is-enabled nftables
+        if($test1 -match "enabled"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.2.10"
+    Task = "Ensure nftables rules are permanent"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $path1 = $scriptPath + "3.5.2.10_1.sh"
+        $path2 = $scriptPath + "3.5.2.10_2.sh"
+        $path3 = $scriptPath + "3.5.2.10_3.sh"
+        if($path1 -ne $null -and $path2 -ne $null -and $path3 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.1.1"
+    Task = "Ensure iptables packages are installed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null iptables-persistent
+        if($test1 -match "ii"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.1.2"
+    Task = "Ensure nftables is not installed with iptables"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null nftables
+        if("$test1" -match "^(rc |un |)$"){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.1.3"
+    Task = "Ensure ufw is uninstalled or disabled with iptables"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W ufw 2>/dev/null
+        if($test1 -match "^(rc |un |)$"){
+            return $retCompliant
+        } else {
+            $test2 = ufw status | grep -iE "Status: Ina[ck]tive?"
+            $test3 = systemctl is-enabled ufw
+            if($test2 -ne $null -and $test3 -match "masked") {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.1"
+    Task = "Ensure iptables default deny firewall policy"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $output = iptables -L
+        $test1 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $test2 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $test3 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.2"
+    Task = "Ensure iptables loopback traffic is configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = iptables -L INPUT -v -n | grep "Chain\s*INPUT\s*(policy\s*DROP"
+        $test2 = iptables -L OUTPUT -v -n | grep "Chain\s*OUTPUT\s*(policy\s*DROP"
+        if($test1 -ne $null -and $test2 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.3"
+    Task = "Ensure iptables outbound and established connections are configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = iptables -L -v -n
+        if($test1 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+# 3.5.3.2.4 ...
+
+[AuditTest] @{ # in CIS it's automated, but in Excelsheet it's manual
+    Id = "4.3.2.4"
+    Task = "Ensure iptables firewall rules exist for all open ports"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.1"
+    Task = "Ensure ip6tables default deny firewall policy"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $output = ip6tables -L
+        $test11 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $test12 = $output -match "REJECT" | grep "Chain INPUT (policy REJECT)"
+        $test21 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        $test22 = $output -match "REJECT" | grep "Chain OUTPUT (policy REJECT)"
+        $test31 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $test32 = $output -match "REJECT" | grep "Chain FORWARD (policy REJECT)"
+
+        if ($IPv6Status -eq $false) {
+            return @{
+                Message = "IPv6 is disabled"
+                Status = "True"
+            }
+        }
+        if(($test11 -ne $null -or $test12 -ne $null) -and ($test21 -ne $null -or $test22 -ne $null) -and ($test31 -ne $null -or $test32 -ne $null)){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.2"
+    Task = "Ensure ip6tables loopback traffic is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.3"
+    Task = "Ensure ip6tables outbound and established connections are configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.4"
+    Task = "Ensure ip6tables firewall rules exist for all open ports"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1"
+    Task = "Ensure cron daemon is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if($test1 -eq "enabled" -and $test2 -match "running"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/crontab | grep -q "0600"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.3"
+    Task = "Ensure permissions on SSH public host key files are configured"
+    Test = {
+        $script = $commonPath + "5.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.4"
+    Task = "Ensure sshd access is configured"
+    Test = {
+        if (sshd -T | grep -Piq -- "^\h*(allow|deny)(users|groups)\h+\H+") {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.5"
+    Task = "Ensure sshd Banner is configured"
+    Test = {
+        if (sshd -T | grep -Piq -- "^\h*banner\h+\H+") {
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.6"
+    Task = "Ensure sshd Ciphers are configured"
+    Test = {
+        $script = $scriptPath + "5.1.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.7"
+    Task = "Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured"
+    Test = {
+        $script = $scriptPath + "5.1.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.8"
+    Task = "Ensure sshd DisableForwarding is enabled"
+    Test = {
+        $script = $scriptPath + "5.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.9"
+    Task = "Ensure sshd GSSAPIAuthentication is disabled"
+    Test = {
+        $script = $scriptPath + "5.1.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.10"
+    Task = "Ensure sshd HostbasedAuthentication is disabled"
+    Test = {
+        $script = $scriptPath + "5.1.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.11"
+    Task = "Ensure sshd IgnoreRhosts is enabled"
+    Test = {
+        $script = $scriptPath + "5.1.11.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.12"
+    Task = "Ensure sshd KexAlgorithms is configured"
+    Test = {
+        $script = $scriptPath + "5.1.12.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.13"
+    Task = "Ensure sshd LoginGraceTime is configured"
+    Test = {
+        $script = $scriptPath + "5.1.13.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.14"
+    Task = "Ensure sshd LogLevel is configured"
+    Test = {
+        $script = $scriptPath + "5.1.14.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.15"
+    Task = "Ensure sshd MACs are configured"
+    Test = {
+        $script = $scriptPath + "5.1.15.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.16"
+    Task = "Ensure sshd MaxAuthTries is configured"
+    Test = {
+        $script = $commonPath + "5.1.16.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.17"
+    Task = "Ensure sshd MaxSessions is configured"
+    Test = {
+        $script = $scriptPath + "5.1.17.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.18"
+    Task = "Ensure sshd MaxStartups is configured"
+    Test = {
+        $script = $scriptPath + "5.1.18.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.19"
+    Task = "Ensure sshd PermitEmptyPasswords is disabled"
+    Test = {
+        $script = $commonPath + "5.1.19.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.20"
+    Task = "Ensure sshd PermitRootLogin is disabled"
+    Test = {
+        $script = $commonPath + "5.1.20.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.21"
+    Task = "Ensure sshd PermitUserEnvironment is disabled"
+    Test = {
+        $script = $commonPath + "5.1.21.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.22"
+    Task = "Ensure sshd UsePAM is enabled"
+    Test = {
+        $script = $commonPath + "5.1.22.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1"
+    Task = "Ensure sudo is installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null sudo
+        if($test1 -match "ii"){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.2.2"
+    Task = "Ensure sudo commands use pty"
+    Test = {
+        $script = $commonPath + "5.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.3"
+    Task = "Ensure sudo log file exists"
+    Test = {
+        $script = $commonPath + "5.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.4"
+    Task = "Ensure users must provide password for privilege escalation"
+    Test = {
+        $script = $scriptPath + "5.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.5"
+    Task = "Ensure re-authentication for privilege escalation is not disabled globally"
+    Test = {
+        $script = $scriptPath + "5.2.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.6"
+    Task = "Ensure sudo authentication timeout is configured correctly"
+    Test = {
+        $script = $commonPath + "5.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+} 
+[AuditTest] @{
+    Id = "5.2.7"
+    Task = "Ensure access to the su command is restricted"
+    Test = {
+        $script = $scriptPath + "5.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.1"
+    Task = "Ensure latest version of pam is installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null libpam-runtime
+        if($test1 -match "ii"){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+} 
+[AuditTest] @{
+    Id = "5.3.1.2"
+    Task = "Ensure libpam-modules is installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null libpam-modules
+        if($test1 -match "ii"){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.3"
+    Task = "Ensure libpam-pwquality is installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null libpam-pwquality
+        if($test1 -match "ii"){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.1"
+    Task = "Ensure pam_unix module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.2"
+    Task = "Ensure pam_faillock module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.3"
+    Task = "Ensure pam_pwquality module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.4"
+    Task = "Ensure pam_pwhistory module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.1.1"
+    Task = "Ensure password failed attempts lockout is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.1.2"
+    Task = "Ensure password unlock time is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.1.3"
+    Task = "Ensure password failed attempts lockout includes root account"
+    Test = {
+        $script = $commonPath + "5.3.3.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.1"
+    Task = "Ensure password number of changed characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.2"
+    Task = "Ensure minimum password length is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.3"
+    Task = "Ensure password complexity is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.4"
+    Task = "Ensure password same consecutive characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.5"
+    Task = "Ensure password maximum sequential characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.6"
+    Task = "Ensure password dictionary check is enabled"
+    Test = {
+        $script = $commonPath + "5.3.3.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.7"
+    Task = "Ensure password quality checking is enforced"
+    Test = {
+        $script = $scriptPath + "5.3.3.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.8"
+    Task = "Ensure password quality is enforced for the root user"
+    Test = {
+        $script = $scriptPath + "5.3.3.2.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.3.1"
+    Task = "Ensure password history remember is configured"
+    Test = {
+        $script = $scriptPath + "5.3.3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.3.2"
+    Task = "Ensure password history is enforced for the root user"
+    Test = {
+        $script = $scriptPath + "5.3.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.3.3"
+    Task = "Ensure pam_pwhistory includes use_authtok"
+    Test = {
+        $script = $commonPath + "5.3.3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.1"
+    Task = "Ensure pam_unix does not include nullok"
+    Test = {
+        $script = $commonPath + "5.3.3.4.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.2"
+    Task = "Ensure pam_unix does not include remember"
+    Test = {
+        $script = $scriptPath + "5.3.3.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.3"
+    Task = "Ensure pam_unix includes a strong password hashing algorithm"
+    Test = {
+        $script = $scriptPath + "5.3.3.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.4"
+    Task = "Ensure pam_unix includes use_authtok"
+    Test = {
+        $script = $commonPath + "5.3.3.4.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.1"
+    Task = "Ensure password expiration is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.2"
+    Task = "Ensure minimum password age is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.3"
+    Task = "Ensure password expiration warning days is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.4"
+    Task = "Ensure strong password hashing algorithm is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.5"
+    Task = "Ensure inactive password lock is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.6"
+    Task = "Ensure all users last password change date is in the past"
+    Test = {
+        $path = $scriptPath + "5.5.1.5.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.1"
+    Task = "Ensure root is the only UID 0 account"
+    Test = {
+        $test1 = awk -F: '($3 == 0) { print $1 }' /etc/passwd
+        if($test1 -match "root"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+     Id = "5.4.2.2"
+     Task = "Ensure root is the only GID 0 account"
+     Test = {
+         $test1 = grep "^root:" /etc/passwd | cut -f4 -d ':'
+         if($test1 -eq 0){
+             return $retCompliant
+         }
+         return $retNonCompliant
+     }
+ }
+ [AuditTest] @{
+    Id = "5.4.2.3"
+    Task = "Ensure group root is the only GID 0 group"
+    Test = {
+        $script = $commonPath + "5.4.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.4"
+    Task = "Ensure root password is set"
+    Test = {
+        $script = $scriptPath + "5.4.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.5"
+    Task = "Ensure root PATH Integrity"
+    Test = {
+        $path = $scriptPath + "6.2.9.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.6"
+    Task = "Ensure root user umask is configured"
+    Test = {
+        $script = $commonPath + "5.4.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.7"
+    Task = "Ensure system accounts do not have a valid login shell"
+    Test = {
+        $script = $commonPath + "5.4.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.8"
+    Task = "Ensure accounts without a valid login shell are locked"
+    Test = {            
+        $script = $commonPath + "5.4.2.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.4.3.1"
+    Task = "Ensure nologin is not listed in /etc/shells"
+    Test = {
+        $script = $commonPath + "5.4.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.3.2"
+    Task = "Ensure default user shell timeout is configured"
+    Test = {
+        $script = $commonPath + "5.4.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.3.3"
+    Task = "Ensure default user umask is configured"
+    Test = {
+        $script = $commonPath + "5.4.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.1.2"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd- | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.1.3"
+    Task = "Ensure cryptographic mechanisms are used to protect the integrity of audit tools"
+    Test = {
+        $script = $commonPath + "6.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.1"
+    Task = "Ensure journald service is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled rsyslog
+        if($test1 -match "enabled"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.2"
+    Task = "Ensure journald log file access is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.3"
+    Task = "Ensure journald log file rotation is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.4"
+    Task = "Ensure journald ForwardToSyslog is disabled"
+    Test = {
+        $script = $scriptPath + "6.2.1.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.5"
+    Task = "Ensure journald Storage is configured"
+    Test = {
+        $script = $scriptPath + "6.2.1.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.6"
+    Task = "Ensure journald Compress is configured"
+    Test = {
+        $script = $scriptPath + "6.2.1.1.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.2.1"
+    Task = "Ensure systemd-journal-remote is installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null systemd-journal-remote
+        if($test1 -match "ii"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.1.2.2"
+    Task = "Ensure systemd-journal-remote authentication is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.2.3"
+    Task = "Ensure systemd-journal-upload is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled systemd-journal-upload.service
+        $test2 = systemctl is-active systemd-journal-upload.service
+        if($test1 -eq "enabled" -and $test2 -match "active"){
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.2.4"
+    Task = "Ensure systemd-journal-remote service is not in use"
+    Test = {
+        $script = $scriptPath + "6.2.1.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.2.1"
+    Task = "Ensure access to all logfiles has been configured"
+    Test = {
+        $fileListAll = find /var/log -type f -ls
+        $fileListFiltered = find /var/log -type f -ls | grep "\-....\-\-\-\-\-"
+        if($fileListAll.Count -eq $fileListFiltered.Count){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.1"
+    Task = "Ensure auditd packages are installed"
+    Test = {
+        $test1 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null auditd
+        $test2 = dpkg-query -f='${db:Status-Abbrev}' -W 2>/dev/null audispd-plugins
+        if($test1 -match "ii" -and $test2 -match "ii"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.2"
+    Task = "Ensure auditd service is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled auditd
+        if($test1 -match "enabled"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.3"
+    Task = "Ensure auditing for processes that start prior to auditd is enabled"
+    Test = {
+        $script = $scriptPath + "6.3.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.4"
+    Task = "Ensure audit_backlog_limit is sufficient"
+    Test = {
+        $script = $scriptPath + "6.3.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.1"
+    Task = "Ensure audit log storage size is configured"
+    Test = {
+        $script = $commonPath + "6.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.2"
+    Task = "Ensure audit logs are not automatically deleted"
+    Test = {
+        $script = $commonPath + "6.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $test1 = grep -Pi -- '^\h*disk_full_action\h*=\h*(halt|single)\b' /etc/audit/auditd.conf
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.4"
+    Task = "Ensure system warns when audit logs are low on space"
+    Test = {
+        $test1 = grep -Pi -- '^\h*space_left_action\h*=\h*\w+\b' /etc/audit/auditd.conf | awk '{print $3}'
+        if($test1 -match "^(email|exec|single|halt)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.1"
+    Task = "Ensure changes to system administration scope is collected"
+    Test = {
+        $script = $commonPath + "6.3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.2"
+    Task = "Ensure actions as another user are always logged"
+    Test = {
+        $script = $commonPath + "6.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.3"
+    Task = "Ensure events that modify the sudo log file are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.4"
+    Task = "Ensure events that modify date and time information are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.5"
+    Task = "Ensure events that modify the system's network environment are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.6"
+    Task = "Ensure use of privileged commands are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.7"
+    Task = "Ensure unsuccessful file access attempts are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.8"
+    Task = "Ensure events that modify user/group information are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.9"
+    Task = "Ensure discretionary access control permission modification events are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.10"
+    Task = "Ensure successful file system mounts are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.11"
+    Task = "Ensure session initiation information is collected"
+    Test = {
+        $path1 = $scriptPath + "4.1.3.11_1.sh"
+        $result11 = bash $path1 | grep "\-w /var/run/utmp -p wa -k session"
+        $result12 = bash $path1 | grep "\-w /var/log/wtmp -p wa -k session"
+        $result13 = bash $path1 | grep "\-w /var/log/btmp -p wa -k session"
+        $path2 = $scriptPath + "4.1.3.11_2.sh"
+        $result21 = bash $path2 | grep "\-w /var/run/utmp -p wa -k session"
+        $result22 = bash $path2 | grep "\-w /var/log/wtmp -p wa -k session"
+        $result23 = bash $path2 | grep "\-w /var/log/btmp -p wa -k session"
+        if($result11 -ne $null -and $result12 -ne $null -and $result13 -ne $null -and $result21 -ne $null -and $result22 -ne $null -and $result23 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.12"
+    Task = "Ensure login and logout events are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.12.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.13"
+    Task = "Ensure file deletion events by users are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.13.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.14"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.14.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.15"
+    Task = "Ensure successful and unsuccessful attempts to use the chcon command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.15.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.16"
+    Task = "Ensure successful and unsuccessful attempts to use the setfacl command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.16.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.17"
+    Task = "Ensure successful and unsuccessful attempts to use the chacl command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.17.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.18"
+    Task = "Ensure successful and unsuccessful attempts to use the usermod command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.18.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.19"
+    Task = "Ensure kernel module loading unloading and modification is collected"
+    Test = {
+        $script = $commonPath + "6.3.3.19.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.20"
+    Task = "Ensure the audit configuration is immutable"
+    Test = {
+        $test1 = grep "^\s*[^#]" /etc/audit/rules.d/*.rules | tail -l
+        if($test1 -match "-e 2"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.21"
+    Task = "Ensure the running and on disk configuration is the same"
+    Test = {
+        $test1 = augenrules --check
+        if($test1 -match "/usr/sbin/augenrules: No change"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.1"
+    Task = "Ensure audit log files mode is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.2"
+    Task = "Ensure audit log files owner is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.3"
+    Task = "Ensure audit log files group owner is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.4"
+    Task = "Ensure the audit log file directory mode is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.5"
+    Task = "Ensure audit configuration files mode is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.6"
+    Task = "Ensure audit configuration files owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.7"
+    Task = "Ensure audit configuration files group owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.8"
+    Task = "Ensure audit tools mode is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.9"
+    Task = "Ensure audit tools owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.10"
+    Task = "Ensure audit tools group owner is configured"
+    Test = {
+        $test1 = stat -Lc '%G' /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | awk '$1 != "root" {print}'
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.2"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd- | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.3"
+    Task = "Ensure permissions on /etc/group are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/group | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.4"
+    Task = "Ensure permissions on /etc/group- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/group- | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.5"
+    Task = "Ensure permissions on /etc/shadow are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/shadow | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.6"
+    Task = "Ensure permissions on /etc/shadow- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/shadow- | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.7"
+    Task = "Ensure permissions on /etc/gshadow are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/gshadow | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.8"
+    Task = "Ensure permissions on /etc/gshadow- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/gshadow- | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.9"
+    Task = "Ensure permissions on /etc/shells are configured"
+    Test = {
+        $script = $commonPath + "7.1.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.1.10"
+    Task = "Ensure permissions on /etc/security/opasswd are configured"
+    Test = {
+        $script = $commonPath + "7.1.10.sh"
+        $result = bash $script
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.11"
+    Task = "Ensure world writable files and directories are secured"
+    Test = {
+        #$partitions = mapfile -t partitions < (sudo fdisk -l | grep -o '/dev/[^ ]*')
+        #$test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        $script = $commonPath + "7.1.11.sh"
+        $result = bash $script
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.12"
+    Task = "Ensure no files or directories without an owner and a group exist"
+    Test = {
+        $script = $commonPath + "7.1.12.sh"
+        $result = bash $script
+        if($?){
+                return $retCompliant
+            }
+            return $retNonCompliant
+    }
+} 
+[AuditTest] @{
+    Id = "7.1.13"
+    Task = "Ensure SUID and SGID files are reviewed"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -4000
+        $message = ""
+        foreach($line in $test1){
+            $message += "<br>$line"
+        }
+        return @{
+            Message = "Please review following list of files: $($message)"
+            Status = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.2.1"
+    Task = "Ensure accounts in /etc/passwd use shadowed passwords"
+    Test = {
+        $test1 = awk -F: '($2 != "x" ) { print $1 " is not set to shadowed passwords "}'/etc/passwd
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.2"
+    Task = "Ensure /etc/shadow password fields are not empty"
+    Test = {
+        $test1 = awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.3"
+    Task = "Ensure all groups in /etc/passwd exist in /etc/group"
+    Test = {
+        $path = $scriptPath + "6.2.3.sh"
+        $result=bash $path
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.4"
+    Task = "Ensure shadow group is empty"
+    Test = {
+        $test1 = awk -F: '($1=="shadow") {print $NF}' /etc/group
+        $test2 = awk -F: -v GID="$(awk -F: '($1=="shadow") {print $3}' /etc/group)" '($4==GID) {print $1}' /etc/passwd
+        if($test1.Length -eq 0 -and $test2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.5"
+    Task = "Ensure no duplicate UIDs exist"
+    Test = {
+        $path = $scriptPath + "6.2.5.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.6"
+    Task = "Ensure no duplicate GIDs exist"
+    Test = {
+        $path = $scriptPath + "6.2.6.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.7"
+    Task = "Ensure no duplicate user names exist"
+    Test = {
+        $path = $scriptPath + "6.2.7.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.8"
+    Task = "Ensure no duplicate group names exist"
+    Test = {
+        $path = $scriptPath + "6.2.8.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{ # in CIS it's automated, but in Excelsheet it's manual
+    Id = "7.2.9"
+    Task = "Ensure local interactive user home directories are configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{ # in CIS it's automated, but in Excelsheet it's manual
+    Id = "7.2.10"
+    Task = "Ensure local interactive user dot files access is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Enhanced security settings-FBPro-1.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Enhanced security settings-FBPro-1.0#UserRights.ps1
new file mode 100644
index 0000000..850ebb2
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Enhanced security settings-FBPro-1.0#UserRights.ps1	
@@ -0,0 +1,184 @@
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and
+                (Get-WindowsOptionalFeature -Online -FeatureName "Microsoft-Hyper-V").State -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "1.0"
+    Task = "Ensure 'Debug programs' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @() | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1"
+    Task = "Ensure 'Enable DCOM Hardening' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat" `
+                -Name "RequireIntegrityActivationAuthenticationLevel" `
+                | Select-Object -ExpandProperty "RequireIntegrityActivationAuthenticationLevel"
+        
+            if ($regValue -ne 0x00000001) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0x00000001"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2"
+    Task = "Ensure 'Raise Authentication Level' is set to 'Raise the authentication level for all non-anonymous activation requests from Windows-based DCOM clients'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat" `
+                -Name "RaiseActivationAuthenticationLevel" `
+                | Select-Object -ExpandProperty "RaiseActivationAuthenticationLevel"
+        
+            if ($regValue -ne 0x00000002) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0x00000002"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Google Chrome-CIS-2.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Google Chrome-CIS-2.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..804f2d9
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Google Chrome-CIS-2.0.0#RegistrySettings.ps1	
@@ -0,0 +1,2402 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enable curtaining of remote access hosts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RemoteAccessHostRequireCurtain" `
+                | Select-Object -ExpandProperty "RemoteAccessHostRequireCurtain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Allow gnubby authentication for remote access hosts' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RemoteAccessHostAllowGnubbyAuth" `
+                | Select-Object -ExpandProperty "RemoteAccessHostAllowGnubbyAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Allow remote users to interact with elevated windows in remote assistance sessions' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RemoteAccessHostAllowUiAccessForRemoteAssistance" `
+                | Select-Object -ExpandProperty "RemoteAccessHostAllowUiAccessForRemoteAssistance"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2"
+    Task = "(L1) Ensure 'Continue running background apps when Google Chrome is closed' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "BackgroundModeEnabled" `
+                | Select-Object -ExpandProperty "BackgroundModeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3"
+    Task = "(L1) Ensure 'Ask where to save each file before downloading' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "PromptForDownloadLocation" `
+                | Select-Object -ExpandProperty "PromptForDownloadLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4"
+    Task = "(L1) Ensure 'Disable saving browser history' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SavingBrowserHistoryDisabled" `
+                | Select-Object -ExpandProperty "SavingBrowserHistoryDisabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5"
+    Task = "(L1) Ensure 'Enable HTTP/0.9 support on non-default ports' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "Http09OnNonDefaultPortsEnabled" `
+                | Select-Object -ExpandProperty "Http09OnNonDefaultPortsEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6"
+    Task = "(L1) Ensure 'Enable component updates in Google Chrome' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "ComponentUpdatesEnabled" `
+                | Select-Object -ExpandProperty "ComponentUpdatesEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7"
+    Task = "(L1) Ensure 'Enable deprecated web platform features for a limited time' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\EnableDeprecatedWebPlatformFeatures" `
+                -Name "\d+" `
+                | Select-Object -ExpandProperty "\d+"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.8"
+    Task = "(L1) Ensure 'Enable third party software injection blocking' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "ThirdPartyBlockingEnabled" `
+                | Select-Object -ExpandProperty "ThirdPartyBlockingEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.9"
+    Task = "(L1) Ensure 'Extend Flash content setting to all content' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RunAllFlashInAllowMode" `
+                | Select-Object -ExpandProperty "RunAllFlashInAllowMode"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.10"
+    Task = "(L1) Ensure 'Suppress the unsupported OS warning' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SuppressUnsupportedOSWarning" `
+                | Select-Object -ExpandProperty "SuppressUnsupportedOSWarning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.11"
+    Task = "(L1) Ensure 'Whether online OCSP/CRL checks are performed' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "EnableOnlineRevocationChecks" `
+                | Select-Object -ExpandProperty "EnableOnlineRevocationChecks"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.12"
+    Task = "(L1) Ensure 'Allow WebDriver to Override Incompatible Policies' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "WebDriverOverridesIncompatiblePolicies" `
+                | Select-Object -ExpandProperty "WebDriverOverridesIncompatiblePolicies"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.13"
+    Task = "(L1) Ensure 'Control SafeSites adult content filtering' is set to 'Enabled' with value 'Do not filter sites for adult content' specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SafeSitesFilterBehavior" `
+                | Select-Object -ExpandProperty "SafeSitesFilterBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.14"
+    Task = "(L1) Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\OverrideSecurityRestrictionsOnInsecureOrigin" `
+                -Name "\d+" `
+                | Select-Object -ExpandProperty "\d+"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.15"
+    Task = "(L1) Ensure 'Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForLegacyCas" `
+                -Name "\d+" `
+                | Select-Object -ExpandProperty "\d+"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.16"
+    Task = "(L1) Ensure 'Disable Certificate Transparency enforcement for a list of URLs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForUrls" `
+                -Name "\d+" `
+                | Select-Object -ExpandProperty "\d+"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.17"
+    Task = "(L1) Ensure 'Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\CertificateTransparencyEnforcementDisabledForCas" `
+                -Name "\d+" `
+                | Select-Object -ExpandProperty "\d+"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1"
+    Task = "(L1) Ensure 'Default Flash Setting' is set to 'Enabled' (Click to Play)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DefaultPluginsSetting" `
+                | Select-Object -ExpandProperty "DefaultPluginsSetting"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2"
+    Task = "(L2) Ensure 'Default notification setting' is set to 'Enabled' with 'Do not allow any site to show desktop notifications'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DefaultNotificationsSetting" `
+                | Select-Object -ExpandProperty "DefaultNotificationsSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3"
+    Task = "(L2) Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled' with 'Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DefaultWebBluetoothGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultWebBluetoothGuardSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4"
+    Task = "(L2) Ensure 'Control use of the WebUSB API' is set to 'Enabled' with 'Do not allow any site to request access to USB devices via the WebUSB API'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DefaultWebUsbGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultWebUsbGuardSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.5"
+    Task = "(L1) Ensure 'Configure extension installation blacklist' is set to 'Enabled' (`"*`" for all extensions)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlacklist" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: *"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.6.1"
+    Task = "(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the values 'extension' specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionAllowedTypes" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "extension") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: extension"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.6.2"
+    Task = "(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the value 'hosted_app'specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionAllowedTypes" `
+                -Name "2" `
+                | Select-Object -ExpandProperty "2"
+        
+            if ($regValue -ne "hosted_app") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: hosted_app"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.6.3"
+    Task = "(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the value 'platform_app' specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionAllowedTypes" `
+                -Name "3" `
+                | Select-Object -ExpandProperty "3"
+        
+            if ($regValue -ne "platform_app") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: platform_app"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.6.4"
+    Task = "(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the value 'theme'specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionAllowedTypes" `
+                -Name "4" `
+                | Select-Object -ExpandProperty "4"
+        
+            if ($regValue -ne "theme") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: theme"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.7"
+    Task = "(L2) Ensure 'Configure native messaging blacklist' is set to 'Enabled' (`"*`" for all messaging applications)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\NativeMessagingBlacklist" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: *"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.8"
+    Task = "(L1) Ensure 'Enable saving passwords to the password manager' is Configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "PasswordManagerEnabled" `
+                | Select-Object -ExpandProperty "PasswordManagerEnabled"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.9"
+    Task = "(L1) Ensure 'Supported authentication schemes' is set to 'Enabled' (ntlm, negotiate)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "AuthSchemes" `
+                | Select-Object -ExpandProperty "AuthSchemes"
+        
+            if ($regValue -ne "ntlm, negotiate") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: ntlm, negotiate"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.10"
+    Task = "(L1) Ensure 'Choose how to specify proxy server settings' is not set to 'Enabled' with 'Auto detect proxy settings'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "ProxyMode" `
+                | Select-Object -ExpandProperty "ProxyMode"
+        
+            if ($regValue -ne "auto_detect") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: auto_detect"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.11"
+    Task = "(L1) Ensure 'Allow running plugins that are outdated' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "AllowOutdatedPlugins" `
+                | Select-Object -ExpandProperty "AllowOutdatedPlugins"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.12"
+    Task = "(L1) Ensure 'Enable Google Cloud Print Proxy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "CloudPrintProxyEnabled" `
+                | Select-Object -ExpandProperty "CloudPrintProxyEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.13"
+    Task = "(L1) Ensure 'Enable Site Isolation for every site' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SitePerProcess" `
+                | Select-Object -ExpandProperty "SitePerProcess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.14"
+    Task = "(L1) Ensure 'Allow download restrictions' is set to 'Enabled' with 'Block dangerous downloads' specified."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DownloadRestrictions" `
+                | Select-Object -ExpandProperty "DownloadRestrictions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.15"
+    Task = "(L1) Ensure 'Disable proceeding from the Safe Browsing warning page' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DisableSafeBrowsingProceedAnyway" `
+                | Select-Object -ExpandProperty "DisableSafeBrowsingProceedAnyway"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.16"
+    Task = "(L1) Ensure 'Notify a user that a browser relaunch or device restart is recommended or required' is set to 'Enabled' with 'Show a recurring prompt to the user indication that a relaunch is required' specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RelaunchNotification" `
+                | Select-Object -ExpandProperty "RelaunchNotification"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.17"
+    Task = "(L1) Ensure 'Set the time period for update notifications' is set to 'Enabled' with '86400000' (1 day) specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RelaunchNotificationPeriod" `
+                | Select-Object -ExpandProperty "RelaunchNotificationPeriod"
+        
+            if (($regValue -gt 86400000)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 86400000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.18"
+    Task = "(L2) Ensure 'Whether online OCSP/CRL checks are required for local trust anchors' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RequireOnlineRevocationChecksForLocalAnchors" `
+                | Select-Object -ExpandProperty "RequireOnlineRevocationChecksForLocalAnchors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.19"
+    Task = "(L1) Ensure 'Enable Chrome Cleanup on Windows' is Configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "ChromeCleanupEnabled" `
+                | Select-Object -ExpandProperty "ChromeCleanupEnabled"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.20"
+    Task = "(L2) Ensure 'Use built-in DNS client' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "BuiltInDnsClientEnabled" `
+                | Select-Object -ExpandProperty "BuiltInDnsClientEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.21"
+    Task = "(L1) Ensure 'Update policy override' is set to 'Enabled' with 'Always allow updates (recommended)' or 'Automatic silent updates' specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Update" `
+                -Name "Update{8A69D345-D564-463C-AFF1-A69D9E530F96}" `
+                | Select-Object -ExpandProperty "Update{8A69D345-D564-463C-AFF1-A69D9E530F96}"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1"
+    Task = "(L2) Ensure 'Default cookies setting' is set to 'Enabled' (Keep cookies for the duration of the session)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DefaultCookiesSetting" `
+                | Select-Object -ExpandProperty "DefaultCookiesSetting"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2"
+    Task = "(L1) Ensure 'Default geolocation setting' is set to 'Enabled' with 'Do not allow any site to track the users' physical location'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "DefaultGeolocationSetting" `
+                | Select-Object -ExpandProperty "DefaultGeolocationSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3"
+    Task = "(L1) Ensure 'Enable Google Cast' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "EnableMediaRouter" `
+                | Select-Object -ExpandProperty "EnableMediaRouter"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.4"
+    Task = "(L1) Ensure 'Block third party cookies' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "BlockThirdPartyCookies" `
+                | Select-Object -ExpandProperty "BlockThirdPartyCookies"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5"
+    Task = "(L1) Ensure 'Enable reporting of usage and crash-related data' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "MetricsReportingEnabled" `
+                | Select-Object -ExpandProperty "MetricsReportingEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.6"
+    Task = "(L1) Ensure 'Control how Chrome Cleanup reports data to Google' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "ChromeCleanupReportingEnabled" `
+                | Select-Object -ExpandProperty "ChromeCleanupReportingEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.7"
+    Task = "(L1) Ensure 'Browser sign in settings' is set to 'Enabled' with 'Disabled browser sign-in' specified"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "BrowserSignin" `
+                | Select-Object -ExpandProperty "BrowserSignin"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.8"
+    Task = "(L1) Ensure 'Enable Translate' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "TranslateEnabled" `
+                | Select-Object -ExpandProperty "TranslateEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.9"
+    Task = "(L1) Ensure 'Enable network prediction' is set to 'Enabled' with 'Do not predict actions on any network connection' selected"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "NetworkPredictionOptions" `
+                | Select-Object -ExpandProperty "NetworkPredictionOptions"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.10"
+    Task = "(L1) Ensure 'Enable search suggestions' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SearchSuggestEnabled" `
+                | Select-Object -ExpandProperty "SearchSuggestEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.11"
+    Task = "(L1) Ensure 'Enable or disable spell checking web service' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SpellCheckServiceEnabled" `
+                | Select-Object -ExpandProperty "SpellCheckServiceEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.12"
+    Task = "(L1) Ensure 'Enable alternate error pages' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "AlternateErrorPagesEnabled" `
+                | Select-Object -ExpandProperty "AlternateErrorPagesEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.13"
+    Task = "(L1) Ensure 'Disable synchronization of data with Google' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SyncDisabled" `
+                | Select-Object -ExpandProperty "SyncDisabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.14"
+    Task = "(L1) Ensure 'Enable Safe Browsing for trusted sources' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "SafeBrowsingForTrustedSourcesEnabled" `
+                | Select-Object -ExpandProperty "SafeBrowsingForTrustedSourcesEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.15"
+    Task = "(L1) Ensure 'Enable URL-keyed anonymized data collection' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "UrlKeyedAnonymizedDataCollectionEnabled" `
+                | Select-Object -ExpandProperty "UrlKeyedAnonymizedDataCollectionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.16"
+    Task = "(L1) Ensure 'Enable deleting browser and download history' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "AllowDeletingBrowserHistory" `
+                | Select-Object -ExpandProperty "AllowDeletingBrowserHistory"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.1"
+    Task = "(L1) Ensure 'Enable firewall traversal from remote access host' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RemoteAccessHostFirewallTraversal" `
+                | Select-Object -ExpandProperty "RemoteAccessHostFirewallTraversal"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.2"
+    Task = "(L1) Ensure 'Enable or disable PIN-less authentication for remote access hosts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RemoteAccessHostAllowClientPairing" `
+                | Select-Object -ExpandProperty "RemoteAccessHostAllowClientPairing"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.3"
+    Task = "(L1) Ensure 'Enable the use of relay servers by the remote access host' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "RemoteAccessHostAllowRelayedConnection" `
+                | Select-Object -ExpandProperty "RemoteAccessHostAllowRelayedConnection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.4"
+    Task = "(L1) Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled'  with a domain defined"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\RemoteAccessHostClientDomainList" `
+                -Name "\d+" `
+                | Select-Object -ExpandProperty "\d+"
+        
+            if ($regValue -notmatch ".*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.*'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L1) Ensure 'Enable submission of documents to Google Cloud print' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "CloudPrintSubmitEnabled" `
+                | Select-Object -ExpandProperty "CloudPrintSubmitEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L1) Ensure 'Import saved passwords from default browser on first run' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "ImportSavedPasswords" `
+                | Select-Object -ExpandProperty "ImportSavedPasswords"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3"
+    Task = "(L1) Ensure 'Enable AutoFill for credit cards' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "AutofillCreditCardEnabled" `
+                | Select-Object -ExpandProperty "AutofillCreditCardEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4"
+    Task = "(L1) Ensure 'Enable AutoFill for addresses' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" `
+                -Name "AutofillAddressEnabled" `
+                | Select-Object -ExpandProperty "AutofillAddressEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Google Chrome-DISA-V1R15#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Google Chrome-DISA-V1R15#RegistrySettings.ps1
new file mode 100644
index 0000000..a2ce833
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Google Chrome-DISA-V1R15#RegistrySettings.ps1	
@@ -0,0 +1,1296 @@
+[AuditTest] @{
+    Id = "DTBC-0001"
+    Task = "Firewall traversal from remote host must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "RemoteAccessHostFirewallTraversal" `
+                | Select-Object -ExpandProperty "RemoteAccessHostFirewallTraversal"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0003"
+    Task = "Sites ability for showing desktop notifications must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "DefaultNotificationsSetting" `
+                | Select-Object -ExpandProperty "DefaultNotificationsSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0004"
+    Task = "Sites ability to show pop-ups must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "DefaultPopupsSetting" `
+                | Select-Object -ExpandProperty "DefaultPopupsSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0002"
+    Task = "Site tracking users location must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "DefaultGeolocationSetting" `
+                | Select-Object -ExpandProperty "DefaultGeolocationSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0005"
+    Task = "Extensions installation must be blacklisted by default."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallBlacklist" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: *"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0006"
+    Task = "Extensions that are approved for use must be whitelisted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallWhitelist" `
+                -Name "ExtensionInstallWhitelist" `
+                | Select-Object -ExpandProperty "ExtensionInstallWhitelist"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0009"
+    Task = "Default search provider must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "DefaultSearchProviderEnabled" `
+                | Select-Object -ExpandProperty "DefaultSearchProviderEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0011"
+    Task = "The Password Manager must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "PasswordManagerEnabled" `
+                | Select-Object -ExpandProperty "PasswordManagerEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0013"
+    Task = "The running of outdated plugins must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome" `
+                -Name "AllowOutdatedPlugins" `
+                | Select-Object -ExpandProperty "AllowOutdatedPlugins"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0015"
+    Task = "Third party cookies must be blocked."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "BlockThirdPartyCookies" `
+                | Select-Object -ExpandProperty "BlockThirdPartyCookies"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0017"
+    Task = "Background processing must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "BackgroundModeEnabled" `
+                | Select-Object -ExpandProperty "BackgroundModeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0019"
+    Task = "3D Graphics APIs must be disabled. (Note: If 3D APIs are required by mission, this is not a finding.)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "Disable3DAPIs" `
+                | Select-Object -ExpandProperty "Disable3DAPIs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0020"
+    Task = "Google Data Synchronization must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "SyncDisabled" `
+                | Select-Object -ExpandProperty "SyncDisabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0021"
+    Task = "The URL protocol schema javascript must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\URLBlacklist" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "javascript://*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: javascript://*"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0023"
+    Task = "Cloud print sharing must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "CloudPrintProxyEnabled" `
+                | Select-Object -ExpandProperty "CloudPrintProxyEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0025"
+    Task = "Network prediction must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "NetworkPredictionOptions" `
+                | Select-Object -ExpandProperty "NetworkPredictionOptions"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0026"
+    Task = "Metrics reporting to Google must be disabled. (Note: This policy will only display in the chrome://policy tab on domain joined systems. On standalone systems, the policy will not display.)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "MetricsReportingEnabled" `
+                | Select-Object -ExpandProperty "MetricsReportingEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0027"
+    Task = "Search suggestions must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "SearchSuggestEnabled" `
+                | Select-Object -ExpandProperty "SearchSuggestEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0029"
+    Task = "Importing of saved passwords must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "ImportSavedPasswords" `
+                | Select-Object -ExpandProperty "ImportSavedPasswords"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0030"
+    Task = "Incognito mode must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "IncognitoModeAvailability" `
+                | Select-Object -ExpandProperty "IncognitoModeAvailability"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0037"
+    Task = "Online revocation checks must be done."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "EnableOnlineRevocationChecks" `
+                | Select-Object -ExpandProperty "EnableOnlineRevocationChecks"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0038"
+    Task = "Safe Browsing must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "SafeBrowsingEnabled" `
+                | Select-Object -ExpandProperty "SafeBrowsingEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0039"
+    Task = "Browser history must be saved."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "SavingBrowserHistoryDisabled" `
+                | Select-Object -ExpandProperty "SavingBrowserHistoryDisabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0040"
+    Task = "Default behavior must block webpages from automatically running plugins."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "DefaultPluginsSetting" `
+                | Select-Object -ExpandProperty "DefaultPluginsSetting"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0051"
+    Task = "URLs must be whitelisted for plugin use"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "PluginsAllowedForUrls" `
+                | Select-Object -ExpandProperty "PluginsAllowedForUrls"
+        
+            if ($regValue -ne "Suggested: the set or subset of [*.]mil and [*.]gov") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Suggested: the set or subset of [*.]mil and [*.]gov"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0052"
+    Task = "Deletion of browser history must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "AllowDeletingBrowserHistory" `
+                | Select-Object -ExpandProperty "AllowDeletingBrowserHistory"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0053"
+    Task = "Prompt for download location must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "PromptForDownloadLocation" `
+                | Select-Object -ExpandProperty "PromptForDownloadLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0064"
+    Task = "Autoplay must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "AutoplayAllowed" `
+                | Select-Object -ExpandProperty "AutoplayAllowed"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0056"
+    Task = "Chrome must be configured to allow only TLS."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "SSLVersionMin" `
+                | Select-Object -ExpandProperty "SSLVersionMin"
+        
+            if ($regValue -ne "tls1.1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: tls1.1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0057"
+    Task = "Safe Browsing Extended Reporting must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "SafeBrowsingExtendedReportingEnabled" `
+                | Select-Object -ExpandProperty "SafeBrowsingExtendedReportingEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0058"
+    Task = "WebUSB must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "DefaultWebUsbGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultWebUsbGuardSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0060"
+    Task = "Chrome Cleanup must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "ChromeCleanupEnabled" `
+                | Select-Object -ExpandProperty "ChromeCleanupEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0061"
+    Task = "Chrome Cleanup reporting must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "ChromeCleanupReportingEnabled" `
+                | Select-Object -ExpandProperty "ChromeCleanupReportingEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0063"
+    Task = "Google Cast must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "EnableMediaRouter" `
+                | Select-Object -ExpandProperty "EnableMediaRouter"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0066"
+    Task = "Anonymized data collection must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "UrlKeyedAnonymizedDataCollectionEnabled" `
+                | Select-Object -ExpandProperty "UrlKeyedAnonymizedDataCollectionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBC-0067"
+    Task = "Collection of WebRTC event logs must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\" `
+                -Name "WebRtcEventLogCollectionAllowed" `
+                | Select-Object -ExpandProperty "WebRtcEventLogCollectionAllowed"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Edge-CIS-2.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Edge-CIS-2.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..41af9a6
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Edge-CIS-2.0.0#RegistrySettings.ps1	
@@ -0,0 +1,4854 @@
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Enable Google Cast' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EnableMediaRouter" `
+                | Select-Object -ExpandProperty "EnableMediaRouter"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1"
+    Task = "(L2) Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "FileSystemReadAskForUrls" `
+                | Select-Object -ExpandProperty "FileSystemReadAskForUrls"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.2"
+    Task = "(L1) Ensure 'Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SpotlightExperiencesAndRecommendationsEnabled" `
+                | Select-Object -ExpandProperty "SpotlightExperiencesAndRecommendationsEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.3"
+    Task = "(L1) Ensure 'Control use of insecure content exceptions' is set to 'Enabled: Do not allow any site to load mixed content'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultinsecurecontentSetting" `
+                | Select-Object -ExpandProperty "DefaultinsecurecontentSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.4"
+    Task = "(L2) Ensure 'Control use of JavaScript JIT' is set to 'Enabled: Do not allow any site to run JavaScript JIT'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultJavaScriptJitSetting" `
+                | Select-Object -ExpandProperty "DefaultJavaScriptJitSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.5"
+    Task = "(L2) Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultFileSystemReadGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultFileSystemReadGuardSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.6"
+    Task = "(L1) Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultFileSystemWriteGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultFileSystemWriteGuardSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.7"
+    Task = "(L2) Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultWebBluetoothGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultWebBluetoothGuardSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.8"
+    Task = "(L2) Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultWebHidGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultWebHidGuardSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.9"
+    Task = "(L1) Ensure 'Default automatic downloads setting' is set to 'Enabled: Don´t allow any website to perform automatic downloads'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultAutomaticDownloadsSetting" `
+                | Select-Object -ExpandProperty "DefaultAutomaticDownloadsSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.10"
+    Task = "(L1) Ensure 'Default geolocation setting' is set to 'Enabled: Don't allow any site to track users physical location'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultGeolocationSetting" `
+                | Select-Object -ExpandProperty "DefaultGeolocationSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.1"
+    Task = "(L1) Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "FeatureFlagOverridesControl" `
+                | Select-Object -ExpandProperty "FeatureFlagOverridesControl"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.1"
+    Task = "(L2) Ensure 'Configure extension management settings' is set to 'Enabled: *'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ExtensionSettings" `
+                | Select-Object -ExpandProperty "ExtensionSettings"
+        
+            if ($regValue -ne "*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: *"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.1"
+    Task = "(L1) Ensure 'Allow Basic authentication for HTTP' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "BasicAuthOverHttpEnabled" `
+                | Select-Object -ExpandProperty "BasicAuthOverHttpEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.2"
+    Task = "(L1) Ensure 'Allow cross-origin HTTP Basic Auth prompts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AllowCrossOriginAuthPrompt" `
+                | Select-Object -ExpandProperty "AllowCrossOriginAuthPrompt"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.3"
+    Task = "(L2) Ensure 'Supported authentication schemes' is set to 'Enabled: ntlm, negotiate'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AuthSchemes" `
+                | Select-Object -ExpandProperty "AuthSchemes"
+        
+            if ($regValue -ne "ntlm, negotiate") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: ntlm, negotiate"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.8.1"
+    Task = "(L1) Ensure 'Enable the linked account feature' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "LinkedAccountEnabled" `
+                | Select-Object -ExpandProperty "LinkedAccountEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.8.2"
+    Task = "(L1) Ensure 'Guided Switch Enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "GuidedSwitchEnabled" `
+                | Select-Object -ExpandProperty "GuidedSwitchEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.13.1"
+    Task = "(L1) Ensure 'Enable saving passwords to the password manager' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "PasswordManagerEnabled" `
+                | Select-Object -ExpandProperty "PasswordManagerEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.14.1"
+    Task = "(L1) Ensure 'Enable startup boost' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "StartupBoostEnabled" `
+                | Select-Object -ExpandProperty "StartupBoostEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.17.1"
+    Task = "(L1) Ensure 'Specifies whether to allow websites to make requests to more-private network endpoints' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InsecurePrivateNetworkRequestsAllowed" `
+                | Select-Object -ExpandProperty "InsecurePrivateNetworkRequestsAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.20.1"
+    Task = "(L1) Ensure 'Configure Microsoft Defender SmartScreen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SmartScreenEnabled" `
+                | Select-Object -ExpandProperty "SmartScreenEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.20.2"
+    Task = "(L1) Ensure 'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "SmartScreenPuaEnabled" `
+                | Select-Object -ExpandProperty "SmartScreenPuaEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.20.3"
+    Task = "(L1) Ensure 'Enable Microsoft Defender SmartScreen DNS requests' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SmartScreenDnsRequestsEnabled" `
+                | Select-Object -ExpandProperty "SmartScreenDnsRequestsEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.20.4"
+    Task = "(L1) Ensure 'Force Microsoft Defender SmartScreen checks on downloads from trusted sources' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SmartScreenForTrustedDownloadsEnabled" `
+                | Select-Object -ExpandProperty "SmartScreenForTrustedDownloadsEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.20.5"
+    Task = "(L1) Ensure 'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "PreventSmartScreenPromptOverride" `
+                | Select-Object -ExpandProperty "PreventSmartScreenPromptOverride"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.20.6"
+    Task = "(L1) Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "PreventSmartScreenPromptOverrideForFiles" `
+                | Select-Object -ExpandProperty "PreventSmartScreenPromptOverrideForFiles"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.22.1"
+    Task = "(L1) Ensure 'Configure Edge TyposquattingChecker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "TyposquattingCheckerEnabled" `
+                | Select-Object -ExpandProperty "TyposquattingCheckerEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.23"
+    Task = "(L1) Ensure 'Ads setting for sites with intrusive ads' is set to 'Enabled: Block ads on sites with intrusive ads'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AdsSettingForIntrusiveAdsSites" `
+                | Select-Object -ExpandProperty "AdsSettingForIntrusiveAdsSites"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.24"
+    Task = "(L1) Ensure 'Allow download restrictions' is set to 'Enabled: Block potentially dangerous downloads'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DownloadRestrictions" `
+                | Select-Object -ExpandProperty "DownloadRestrictions"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.25"
+    Task = "(L2) Ensure 'Allow features to download assets from the Asset Delivery Service' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EdgeAssetDeliveryServiceEnabled" `
+                | Select-Object -ExpandProperty "EdgeAssetDeliveryServiceEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.26"
+    Task = "(L2) Ensure 'Allow file selection dialogs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AllowFileSelectionDialogs" `
+                | Select-Object -ExpandProperty "AllowFileSelectionDialogs"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.27"
+    Task = "(L1) Ensure 'Allow Google Cast to connect to Cast devices on all IP addresses' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "MediaRouterCastAllowAllIPs" `
+                | Select-Object -ExpandProperty "MediaRouterCastAllowAllIPs"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.28"
+    Task = "(L1) Ensure 'Allow import of data from other browsers on each Microsoft Edge launch' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ImportOnEachLaunch" `
+                | Select-Object -ExpandProperty "ImportOnEachLaunch"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.29"
+    Task = "(L1) Ensure 'Allow importing of autofill form data' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ImportAutofillFormData" `
+                | Select-Object -ExpandProperty "ImportAutofillFormData"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.30"
+    Task = "(L1) Ensure 'Allow importing of browser settings' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ImportBrowserSettings" `
+                | Select-Object -ExpandProperty "ImportBrowserSettings"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.31"
+    Task = "(L1) Ensure 'Allow importing of home page settings' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ImportHomepage" `
+                | Select-Object -ExpandProperty "ImportHomepage"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.32"
+    Task = "(L1) Ensure 'Allow importing of payment info' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ImportPaymentInfo" `
+                | Select-Object -ExpandProperty "ImportPaymentInfo"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.33"
+    Task = "(L1) Ensure 'Allow importing of saved passwords' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ImportSavedPasswords" `
+                | Select-Object -ExpandProperty "ImportSavedPasswords"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.34"
+    Task = "(L1) Ensure 'Allow importing of search engine settings' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ImportSearchEngine" `
+                | Select-Object -ExpandProperty "ImportSearchEngine"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.35"
+    Task = "(L1) Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EnterpriseHardwarePlatformAPIEnabled" `
+                | Select-Object -ExpandProperty "EnterpriseHardwarePlatformAPIEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.36"
+    Task = "(L2) Ensure 'Allow or block audio capture' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AudioCaptureAllowed" `
+                | Select-Object -ExpandProperty "AudioCaptureAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.37"
+    Task = "(L2) Ensure 'Allow or block video capture' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "VideoCaptureAllowed" `
+                | Select-Object -ExpandProperty "VideoCaptureAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.38"
+    Task = "(L2) Ensure 'Allow or deny screen capture' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ScreenCaptureAllowed" `
+                | Select-Object -ExpandProperty "ScreenCaptureAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.39"
+    Task = "(L1) Ensure 'Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "PersonalizationReportingEnabled" `
+                | Select-Object -ExpandProperty "PersonalizationReportingEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.40"
+    Task = "(L1) Ensure 'Allow queries to a Browser Network Time service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "BrowserNetworkTimeQueriesEnabled" `
+                | Select-Object -ExpandProperty "BrowserNetworkTimeQueriesEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.41"
+    Task = "(L1) Ensure 'Allow remote debugging' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "RemoteDebuggingAllowed" `
+                | Select-Object -ExpandProperty "RemoteDebuggingAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.42"
+    Task = "(L1) Ensure 'Allow the audio sandbox to run' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AudioSandboxEnabled" `
+                | Select-Object -ExpandProperty "AudioSandboxEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.43"
+    Task = "(L2) Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerIntegrationReloadInIEModeAllowed" `
+                | Select-Object -ExpandProperty "InternetExplorerIntegrationReloadInIEModeAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.44"
+    Task = "(L1) Ensure 'Allow user feedback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "UserFeedbackAllowed" `
+                | Select-Object -ExpandProperty "UserFeedbackAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.45"
+    Task = "(L2) Ensure 'Allow users to open files using the ClickOnce protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ClickOnceEnabled" `
+                | Select-Object -ExpandProperty "ClickOnceEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.46"
+    Task = "(L2) Ensure 'Allow users to open files using the DirectInvoke protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DirectInvokeEnabled" `
+                | Select-Object -ExpandProperty "DirectInvokeEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.47"
+    Task = "(L2) Ensure 'Allow users to proceed from the HTTPS warning page' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SSLErrorOverrideAllowed" `
+                | Select-Object -ExpandProperty "SSLErrorOverrideAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.48"
+    Task = "(L1) Ensure 'Allow websites to query for available payment methods' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "PaymentMethodQueryEnabled" `
+                | Select-Object -ExpandProperty "PaymentMethodQueryEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.49"
+    Task = "(L2) Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AutoLaunchProtocolsComponentEnabled" `
+                | Select-Object -ExpandProperty "AutoLaunchProtocolsComponentEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.50"
+    Task = "(L1) Ensure 'Automatically import another browser's data and settings at first run' is set to 'Enabled: Disables automatic import, and the import section of the first-run experience is skipped'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AutoImportAtFirstRun" `
+                | Select-Object -ExpandProperty "AutoImportAtFirstRun"
+        
+            if (($regValue -ne 4)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.51"
+    Task = "(L2) Ensure 'Block third party cookies' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "BlockThirdPartyCookies" `
+                | Select-Object -ExpandProperty "BlockThirdPartyCookies"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.52"
+    Task = "(L1) Ensure 'Block tracking of users' web-browsing activity' is set to 'Enabled: Balanced (Blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "TrackingPrevention" `
+                | Select-Object -ExpandProperty "TrackingPrevention"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.53"
+    Task = "(L2) Ensure 'Browser sign-in settings' is set to 'Enabled: Disable browser sign-in'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "BrowserSignin" `
+                | Select-Object -ExpandProperty "BrowserSignin"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.54"
+    Task = "(L1) Ensure 'Clear browsing data when Microsoft Edge closes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ClearBrowsingDataOnExit" `
+                | Select-Object -ExpandProperty "ClearBrowsingDataOnExit"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.55"
+    Task = "(L1) Ensure 'Clear cached images and files when Microsoft Edge closes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ClearCachedImagesAndFilesOnExit" `
+                | Select-Object -ExpandProperty "ClearCachedImagesAndFilesOnExit"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.56"
+    Task = "(L1) Ensure 'Clear history for IE and IE mode every time you exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerModeclearDataOnExitEnabled" `
+                | Select-Object -ExpandProperty "InternetExplorerModeclearDataOnExitEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.57"
+    Task = "(L1) Ensure 'Configure browser process code integrity guard setting' is set to 'Enabled: Enable code integrity guard enforcement in the browser process'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "browserCodeIntegritySetting" `
+                | Select-Object -ExpandProperty "browserCodeIntegritySetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.58"
+    Task = "(L1) Ensure 'Configure InPrivate mode availability' is set to 'Enabled: InPrivate mode disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InPrivateModeAvailability" `
+                | Select-Object -ExpandProperty "InPrivateModeAvailability"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.59"
+    Task = "(L2) Ensure 'Configure Online Text To Speech' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ConfigureOnlineTextToSpeech" `
+                | Select-Object -ExpandProperty "ConfigureOnlineTextToSpeech"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.60"
+    Task = "(L1) Ensure 'Configure Related Matches in Find on Page' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "RelatedMatchesCloudServiceEnabled" `
+                | Select-Object -ExpandProperty "RelatedMatchesCloudServiceEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.61"
+    Task = "(L2) Ensure 'Configure Speech Recognition' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SpeechRecognitionEnabled" `
+                | Select-Object -ExpandProperty "SpeechRecognitionEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.62"
+    Task = "(L1) Ensure 'Configure the list of names that will bypass the HSTS policy check' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "HSTSPolicyBypassList" `
+                | Select-Object -ExpandProperty "HSTSPolicyBypassList"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.63 A"
+    Task = "(L1) Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled' (passwords)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SyncTypesListDisabled" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "passwords") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: passwords"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.63 B"
+    Task = "(L2) Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled' (settings)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SyncTypesListDisabled" `
+                -Name "2" `
+                | Select-Object -ExpandProperty "2"
+        
+            if ($regValue -ne "settings") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: settings"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.63 C"
+    Task = " (L2) Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled' (favorites)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SyncTypesListDisabled" `
+                -Name "3" `
+                | Select-Object -ExpandProperty "3"
+        
+            if ($regValue -ne "favorites") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: favorites"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.63 D"
+    Task = "(L2) Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled' (addressesAndMore)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SyncTypesListDisabled" `
+                -Name "4" `
+                | Select-Object -ExpandProperty "4"
+        
+            if ($regValue -ne "addressesAndMore") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: addressesAndMore"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.63 E"
+    Task = "(L2) Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled' (extensions)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SyncTypesListDisabled" `
+                -Name "5" `
+                | Select-Object -ExpandProperty "5"
+        
+            if ($regValue -ne "extensions") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: extensions"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.63 F"
+    Task = "(L2) Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled' (collections)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SyncTypesListDisabled" `
+                -Name "6" `
+                | Select-Object -ExpandProperty "6"
+        
+            if ($regValue -ne "collections") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: collections"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.64"
+    Task = "(L1) Ensure 'Configure the Share experience' is set to 'Enabled: Don't allow using the Share experience'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ConfigureShare" `
+                | Select-Object -ExpandProperty "ConfigureShare"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.65"
+    Task = "(L1) Ensure 'Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode' is set to 'Enabled: Do not send form data or headers'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerIntegrationComplexNavDataTypes" `
+                | Select-Object -ExpandProperty "InternetExplorerIntegrationComplexNavDataTypes"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.66"
+    Task = "(L1) Ensure 'Continue running background apps after Microsoft Edge closes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "BackgroundModeEnabled" `
+                | Select-Object -ExpandProperty "BackgroundModeEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.67"
+    Task = "(L1) Ensure 'Control communication with the Experimentation and Configuration Service' is set to 'Enabled: Disable communication with the Experimentation and Configuration Service'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ExperimentationAndConfigurationServiceControl" `
+                | Select-Object -ExpandProperty "ExperimentationAndConfigurationServiceControl"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.68"
+    Task = "(L2) Ensure 'Control use of the Headless Mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "HeadlessModeEnabled" `
+                | Select-Object -ExpandProperty "HeadlessModeEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.69"
+    Task = "(L2) Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultSerialGuardSetting" `
+                | Select-Object -ExpandProperty "DefaultSerialGuardSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.70"
+    Task = "(L2) Ensure 'Control where security restrictions on insecure origins apply' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "OverrideSecurityRestrictionsOnInsecureOriginDesc" `
+                | Select-Object -ExpandProperty "OverrideSecurityRestrictionsOnInsecureOriginDesc"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.71"
+    Task = "(L2) Ensure 'Default sensor setting' is set to 'Enabled: Do not allow any site to access sensors'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DefaultSensorsSetting" `
+                | Select-Object -ExpandProperty "DefaultSensorsSetting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.72"
+    Task = "(L1) Ensure 'Delete old browser data on migration' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DeleteDataOnMigration" `
+                | Select-Object -ExpandProperty "DeleteDataOnMigration"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.73"
+    Task = "(L1) Ensure 'Disable saving browser history' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SavingBrowserHistoryDisabled" `
+                | Select-Object -ExpandProperty "SavingBrowserHistoryDisabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.74"
+    Task = "(L1) Ensure 'Disable synchronization of data using Microsoft sync services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SyncDisabled" `
+                | Select-Object -ExpandProperty "SyncDisabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.75"
+    Task = "(L1) Ensure 'DNS interception checks enabled' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DNSInterceptionChecksEnabled" `
+                | Select-Object -ExpandProperty "DNSInterceptionChecksEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.76"
+    Task = "(L1) Ensure 'Enable AutoFill for addresses' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AutofillAddressEnabled" `
+                | Select-Object -ExpandProperty "AutofillAddressEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.77"
+    Task = "(L1) Ensure 'Enable AutoFill for payment instructions' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AutofillCreditCardEnabled" `
+                | Select-Object -ExpandProperty "AutofillCreditCardEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.78"
+    Task = "(L1) Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "BrowserLegacyExtensionPointsBlockingEnabled" `
+                | Select-Object -ExpandProperty "BrowserLegacyExtensionPointsBlockingEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.79"
+    Task = "(L1) Ensure 'Enable component updates in Microsoft Edge' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ComponentUpdatesEnabled" `
+                | Select-Object -ExpandProperty "ComponentUpdatesEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.80"
+    Task = "(L1) Ensure 'Enable CryptoWallet feature' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "CryptoWalletEnabled" `
+                | Select-Object -ExpandProperty "CryptoWalletEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.81"
+    Task = "(L1) Ensure 'Enable deleting browser and download history' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AllowDeletingBrowserHistory" `
+                | Select-Object -ExpandProperty "AllowDeletingBrowserHistory"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.82"
+    Task = "(L1) Ensure 'Enable Discover access to page contents for AAD profiles' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DiscoverPageContextenabled" `
+                | Select-Object -ExpandProperty "DiscoverPageContextenabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.83"
+    Task = "(L2) Ensure 'Enable Drop feature in Microsoft Edge' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EdgeEdropenabled" `
+                | Select-Object -ExpandProperty "EdgeEdropenabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.84"
+    Task = "(L1) Ensure 'Enable Follow service in Microsoft Edge' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EdgeFollowEnabled" `
+                | Select-Object -ExpandProperty "EdgeFollowEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.85"
+    Task = "(L1) Ensure 'Enable globally scoped HTTP auth cache' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "GloballyScopeHTTPAuthCacheEnabled" `
+                | Select-Object -ExpandProperty "GloballyScopeHTTPAuthCacheEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.86"
+    Task = "(L2) Ensure 'Enable guest mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "BrowserGuestModeEnabled" `
+                | Select-Object -ExpandProperty "BrowserGuestModeEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.87"
+    Task = "(L1) Ensure 'Enable network prediction' is set to 'Enabled: Don't predict network actions on any network connection'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "NetworkPredictionOptions" `
+                | Select-Object -ExpandProperty "NetworkPredictionOptions"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.88"
+    Task = "(L1) Ensure 'Enable profile creation from the Identity flyout menu or the Settings page' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "BrowserAddProfileEnabled" `
+                | Select-Object -ExpandProperty "BrowserAddProfileEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.89"
+    Task = "(L1) Ensure 'Enable renderer code integrity' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "RendererCodeIntegrityEnabled" `
+                | Select-Object -ExpandProperty "RendererCodeIntegrityEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.90"
+    Task = "(L1) Ensure 'Enable resolution of navigation errors using a web service' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ResolveNavigationErrorsUseWebService" `
+                | Select-Object -ExpandProperty "ResolveNavigationErrorsUseWebService"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.91"
+    Task = "(L2) Ensure 'Enable Search suggestions' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SearchSuggestEnabled" `
+                | Select-Object -ExpandProperty "SearchSuggestEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.92"
+    Task = "(L1) Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "CommandLineFlagSecurityWarningsEnabled" `
+                | Select-Object -ExpandProperty "CommandLineFlagSecurityWarningsEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.93"
+    Task = "(L1) Ensure 'Enable site isolation for every site' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SitePerProcess" `
+                | Select-Object -ExpandProperty "SitePerProcess"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.94"
+    Task = "(L2) Ensure 'Enable Translate' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "TranslateEnabled" `
+                | Select-Object -ExpandProperty "TranslateEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.95"
+    Task = "(L1) Ensure 'Enable use of ephemeral profiles' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ForceEphemeralProfiles" `
+                | Select-Object -ExpandProperty "ForceEphemeralProfiles"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.96"
+    Task = "(L1) Ensure 'Enable warnings for insecure forms' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InsecureFormsWarningsEnabled" `
+                | Select-Object -ExpandProperty "InsecureFormsWarningsEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.97"
+    Task = "(L2) Ensure 'Enforce Bing SafeSearch' is set to 'Enabled: Configure moderate search restrictions in Bing'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ForceBingSafeSearch" `
+                | Select-Object -ExpandProperty "ForceBingSafeSearch"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.98"
+    Task = "(L2) Ensure 'Enforce Google SafeSearch' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ForceGoogleSafeSearch" `
+                | Select-Object -ExpandProperty "ForceGoogleSafeSearch"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.99"
+    Task = "(L1) Ensure 'Enhance the security state in Microsoft Edge' is set to 'Enabled: Balanced mode'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EnhanceSecurityMode" `
+                | Select-Object -ExpandProperty "EnhanceSecurityMode"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.100"
+    Task = "(L2) Ensure 'Enhanced Security Mode configuration for Intranet zone sites' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EnhanceSecurityModeBypassIntranet" `
+                | Select-Object -ExpandProperty "EnhanceSecurityModeBypassIntranet"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.101"
+    Task = "(L1) Ensure 'Hide the First-run experience and splash screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "HideFirstRunExperience" `
+                | Select-Object -ExpandProperty "HideFirstRunExperience"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.102"
+    Task = "(L1) Ensure 'In-app support Enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InAppSupportEnabled" `
+                | Select-Object -ExpandProperty "InAppSupportEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.103"
+    Task = "(L2) Ensure 'Let users snip a Math problem and get the solution with a step-by-step explanation in Microsoft Edge' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "MathSolverEnabled" `
+                | Select-Object -ExpandProperty "MathSolverEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.104"
+    Task = "(L2) Ensure 'Live captions allowed' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "LiveCaptionsAllowed" `
+                | Select-Object -ExpandProperty "LiveCaptionsAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.105"
+    Task = "(L1) Ensure 'Manage exposure of local IP addresses by WebRTC' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\WebRtcLocalIpsAllowedUrls" `
+                -Name "Default" `
+                | Select-Object -ExpandProperty "Default"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.106"
+    Task = "(L1) Ensure 'Notify a user that a browser restart is recommended or required for pending updates' is set to 'Enabled: Required - Show a recurring prompt to the user indicating that a restart is required'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "RelaunchNotification" `
+                | Select-Object -ExpandProperty "RelaunchNotification"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.107"
+    Task = "(L1) Ensure 'Restrict exposure of local IP address by WebRTC' is set to 'Enabled: Allow public interface over http default route. This doesn't expose the local IP address'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "WebRtcLocalhostIpHandling" `
+                | Select-Object -ExpandProperty "WebRtcLocalhostIpHandling"
+        
+            if ($regValue -ne "default_public_interface_only") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: default_public_interface_only"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.108"
+    Task = "(L1) Ensure 'Set disk cache size, in bytes' is set to 'Enabled: 250609664'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DiskCacheSize" `
+                | Select-Object -ExpandProperty "DiskCacheSize"
+        
+            if (($regValue -ne 250609664)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 250609664"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.109"
+    Task = "(L1) Ensure 'Set the time period for update notifications' is set to 'Enabled: 86400000'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "RelaunchNotificationPeriod" `
+                | Select-Object -ExpandProperty "RelaunchNotificationPeriod"
+        
+            if (($regValue -ne 86400000)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 86400000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.110"
+    Task = "(L1) Ensure 'Shopping in Microsoft Edge Enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "EdgeShoppingAssistantEnabled" `
+                | Select-Object -ExpandProperty "EdgeShoppingAssistantEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.111"
+    Task = "(L2) Ensure 'Show an `"Always open`" checkbox in external protocol dialog' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ExternalProtocolDialogShowAlwaysOpenCheckbox" `
+                | Select-Object -ExpandProperty "ExternalProtocolDialogShowAlwaysOpenCheckbox"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.112"
+    Task = "(L1) Ensure 'Show Microsoft Rewards experiences' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "ShowMicrosoftRewards" `
+                | Select-Object -ExpandProperty "ShowMicrosoftRewards"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.113"
+    Task = "(L1) Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerModeToolbarButtonEnabled" `
+                | Select-Object -ExpandProperty "InternetExplorerModeToolbarButtonEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.114"
+    Task = "(L1) Ensure 'Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "SharedArrayBufferUnrestrictedAccessAllowed" `
+                | Select-Object -ExpandProperty "SharedArrayBufferUnrestrictedAccessAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.115"
+    Task = "(L2) Ensure 'Specify if online OCSP/CRL checks are required for local trust anchors' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "RequireOnlineRevocationChecksForLocalAnchors" `
+                | Select-Object -ExpandProperty "RequireOnlineRevocationChecksForLocalAnchors"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.116"
+    Task = "(L2) Ensure 'Spell checking provided by Microsoft Editor' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "MicrosoftEditorProofingEnabled" `
+                | Select-Object -ExpandProperty "MicrosoftEditorProofingEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.117"
+    Task = "(L1) Ensure 'Standalone Sidebar Enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "StandaloneHubsSidebarEnabled" `
+                | Select-Object -ExpandProperty "StandaloneHubsSidebarEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.118"
+    Task = "(L1) Ensure 'Suggest similar pages when a webpage can’t be found' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "AlternateErrorPagesEnabled" `
+                | Select-Object -ExpandProperty "AlternateErrorPagesEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.119"
+    Task = "(L1) Ensure 'Suppress the unsupported OS warning' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SuppressUnsupportedOSWarning" `
+                | Select-Object -ExpandProperty "SuppressUnsupportedOSWarning"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.120"
+    Task = "(L2) Ensure 'Tab Services enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "TabservicesEnabled" `
+                | Select-Object -ExpandProperty "TabservicesEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.121"
+    Task = "(L2) Ensure 'Text prediction enabled by default' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "TextPredictionEnabled" `
+                | Select-Object -ExpandProperty "TextPredictionEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.122"
+    Task = "(L1) Ensure 'Wait for Internet Explorer mode tabs to completely unload before ending the browser session' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerIntegrationAlwayswaitForUnload" `
+                | Select-Object -ExpandProperty "InternetExplorerIntegrationAlwayswaitForUnload"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.1"
+    Task = "(L1) Ensure 'Update policy override default' is set to 'Enabled: Always allow updates (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate" `
+                -Name "UpdateDefault" `
+                | Select-Object -ExpandProperty "UpdateDefault"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.1"
+    Task = "(L1) Ensure 'Auto-update check period override' is set to any value except '0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate" `
+                -Name "AutoUpdateCheckPeriodMinutes" `
+                | Select-Object -ExpandProperty "AutoUpdateCheckPeriodMinutes"
+        
+            if (($regValue -lt 1 -and $regValue -gt 43200)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 43200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Edge-Microsoft-117#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Edge-Microsoft-117#RegistrySettings.ps1
new file mode 100644
index 0000000..cc37be1
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Edge-Microsoft-117#RegistrySettings.ps1	
@@ -0,0 +1,684 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "Ensure 'Enable site isolation for every site' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "SitePerProcess" `
+                | Select-Object -ExpandProperty "SitePerProcess"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "Ensure 'Supported authentication schemes' is set to 'ntlm, negotiate'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "AuthSchemes" `
+                | Select-Object -ExpandProperty "AuthSchemes"
+        
+            if ($regValue -notmatch "^(ntlm\s*,\s*negotiate|negotiate\s*,\s*ntlm)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: ntlm, negotiate"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "Ensure 'Allow user-level native messaging hosts (installed without admin permissions)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "NativeMessagingUserLevelHosts" `
+                | Select-Object -ExpandProperty "NativeMessagingUserLevelHosts"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "Ensure 'Configure Microsoft Defender SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "SmartScreenEnabled" `
+                | Select-Object -ExpandProperty "SmartScreenEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "Ensure 'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "PreventSmartScreenPromptOverride" `
+                | Select-Object -ExpandProperty "PreventSmartScreenPromptOverride"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "PreventSmartScreenPromptOverrideForFiles" `
+                | Select-Object -ExpandProperty "PreventSmartScreenPromptOverrideForFiles"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.7"
+    Task = "Ensure 'Allow users to proceed from the HTTPS warning page' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "SSLErrorOverrideAllowed" `
+                | Select-Object -ExpandProperty "SSLErrorOverrideAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.8"
+    Task = "Ensure 'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "SmartScreenPuaEnabled" `
+                | Select-Object -ExpandProperty "SmartScreenPuaEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.9"
+    Task = "Ensure 'Allow Basic authentication for HTTP' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "BasicAuthOverHttpEnabled" `
+                | Select-Object -ExpandProperty "BasicAuthOverHttpEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.10"
+    Task = "Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerIntegrationReloadInIEModeAllowed" `
+                | Select-Object -ExpandProperty "InternetExplorerIntegrationReloadInIEModeAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.11"
+    Task = "Ensure 'Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "SharedArrayBufferUnrestrictedAccessAllowed" `
+                | Select-Object -ExpandProperty "SharedArrayBufferUnrestrictedAccessAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.12"
+    Task = "Ensure 'Specifies whether to allow websites to make requests to more-private network endpoints' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "InsecurePrivateNetworkRequestsAllowed" `
+                | Select-Object -ExpandProperty "InsecurePrivateNetworkRequestsAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.13"
+    Task = "Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "BrowserLegacyExtensionPointsBlockingEnabled" `
+                | Select-Object -ExpandProperty "BrowserLegacyExtensionPointsBlockingEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.14"
+    Task = "Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerModeToolbarButtonEnabled" `
+                | Select-Object -ExpandProperty "InternetExplorerModeToolbarButtonEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.15"
+    Task = "Ensure 'Configure Edge TyposquattingChecker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "TyposquattingCheckerEnabled" `
+                | Select-Object -ExpandProperty "TyposquattingCheckerEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.16"
+    Task = "Ensure 'Enhance images enabled' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "EdgeEnhanceImagesEnabled" `
+                | Select-Object -ExpandProperty "EdgeEnhanceImagesEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.17"
+    Task = "Ensure 'Force WebSQL to be enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "WebSQLAccess" `
+                | Select-Object -ExpandProperty "WebSQLAccess"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.18"
+    Task = "Ensure 'Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "InternetExplorerIntegrationZoneIdentifierMhtFileAllowed" `
+                | Select-Object -ExpandProperty "InternetExplorerIntegrationZoneIdentifierMhtFileAllowed"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.20"
+    Task = "Block all extensions not on allow list"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: *"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-CIS-1.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-CIS-1.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..7962c4b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-CIS-1.0.0#RegistrySettings.ps1	
@@ -0,0 +1,5650 @@
+[AuditTest] @{
+    Id = "1.1"
+    Task = "Set 'Turn on Enhanced Protected Mode' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation" `
+                | Select-Object -ExpandProperty "Isolation"
+        
+            if ($regValue -ne "PMEM") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PMEM"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2"
+    Task = "Set 'Allow software to run or install even if the signature is invalid' to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "RunInvalidSignatures" `
+                | Select-Object -ExpandProperty "RunInvalidSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3"
+    Task = "Set 'Prevent Bypassing SmartScreen Filter Warnings' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4"
+    Task = "Set 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5"
+    Task = "Configure 'Do not allow users to enable or disable add-ons'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoExtensionManagement" `
+                | Select-Object -ExpandProperty "NoExtensionManagement"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6"
+    Task = "Set 'Disable Save this program to disk option' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoSelectDownloadDir" `
+                | Select-Object -ExpandProperty "NoSelectDownloadDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1"
+    Task = "Set 'Prevent per-user installation of ActiveX controls' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX" `
+                -Name "BlockNonAdminActiveXInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2"
+    Task = "Set 'Specify use of ActiveX Installer Service for installation of ActiveX controls' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AxInstaller" `
+                -Name "OnlyUseAXISForActiveXInstall" `
+                | Select-Object -ExpandProperty "OnlyUseAXISForActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3"
+    Task = "Set 'Turn on ActiveX Filtering' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Safety\ActiveXFiltering" `
+                -Name "IsEnabled" `
+                | Select-Object -ExpandProperty "IsEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4"
+    Task = "Set 'Turn off ActiveX opt-in prompt' to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "NoFirsttimeprompt" `
+                | Select-Object -ExpandProperty "NoFirsttimeprompt"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.5"
+    Task = "Set 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableEPMCompat" `
+                | Select-Object -ExpandProperty "DisableEPMCompat"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1"
+    Task = "Configure 'Prevent deleting websites that the user has visited'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "CleanHistory" `
+                | Select-Object -ExpandProperty "CleanHistory"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2"
+    Task = "Configure 'Prevent Deleting Cookies'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "CleanCookies" `
+                | Select-Object -ExpandProperty "CleanCookies"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3"
+    Task = "Set 'Disable `"Configuring History`"' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "History" `
+                | Select-Object -ExpandProperty "History"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.4"
+    Task = "Set 'Days to keep pages in History' to '40'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History" `
+                -Name "DaysToKeep" `
+                | Select-Object -ExpandProperty "DaysToKeep"
+        
+            if (($regValue -lt 40)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 40"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5"
+    Task = "Configure 'Prevent Deleting Temporary Internet Files'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "CleanTIF" `
+                | Select-Object -ExpandProperty "CleanTIF"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.6"
+    Task = "Configure 'Allow deleting browsing history on exit'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "CleanBrowsingHistoryOnExit" `
+                | Select-Object -ExpandProperty "CleanBrowsingHistoryOnExit"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.7"
+    Task = "Set 'Prevent access to Delete Browsing History' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "DisableDeleteBrowsingHistory" `
+                | Select-Object -ExpandProperty "DisableDeleteBrowsingHistory"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.8"
+    Task = "Configure 'Turn off InPrivate Browsing'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "EnableInPrivateBrowsing" `
+                | Select-Object -ExpandProperty "EnableInPrivateBrowsing"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1"
+    Task = "Configure 'URL to be displayed for updates:'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Update_Check_Page" `
+                | Select-Object -ExpandProperty "Update_Check_Page"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2"
+    Task = "Set 'Update check interval (in days):' to 'Enabled:30'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Update_Check_Interval" `
+                | Select-Object -ExpandProperty "Update_Check_Interval"
+        
+            if ($regValue -ne 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3"
+    Task = "Configure 'Automatically check for Internet Explorer updates'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "NoUpdateCheck" `
+                | Select-Object -ExpandProperty "NoUpdateCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.4"
+    Task = "Configure 'Install new versions of Internet Explorer automatically'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "EnableAutoUpgrade" `
+                | Select-Object -ExpandProperty "EnableAutoUpgrade"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "Set 'Turn off Encryption Support' to 'Use TLS 1.1 and TLS 1.2'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "SecureProtocols" `
+                | Select-Object -ExpandProperty "SecureProtocols"
+        
+            if ($regValue -ne 2560) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2560"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "Set 'Check for server certificate revocation' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "CertificateRevocation" `
+                | Select-Object -ExpandProperty "CertificateRevocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3"
+    Task = "Set 'Check for signatures on downloaded programs' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "CheckExeSignatures" `
+                | Select-Object -ExpandProperty "CheckExeSignatures"
+        
+            if ($regValue -ne "yes") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: yes"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4"
+    Task = "Set 'Turn on certificate address mismatch warning' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "WarnOnBadCertRecving" `
+                | Select-Object -ExpandProperty "WarnOnBadCertRecving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5"
+    Task = "Set 'Prevent ignoring certificate errors' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "PreventIgnoreCertErrors" `
+                | Select-Object -ExpandProperty "PreventIgnoreCertErrors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.6"
+    Task = "Set 'Disable changing certificate settings' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "Certificates" `
+                | Select-Object -ExpandProperty "Certificates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1"
+    Task = "Set 'Turn off browser geolocation' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Geolocation" `
+                -Name "PolicyDisableGeolocation" `
+                | Select-Object -ExpandProperty "PolicyDisableGeolocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2"
+    Task = "Configure 'Turn off URL Suggestions'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\DomainSuggestion" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3"
+    Task = "Configure 'Prevent participation in the Customer Experience Improvement Program'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\SQM" `
+                -Name "DisableCustomerImprovementProgram" `
+                | Select-Object -ExpandProperty "DisableCustomerImprovementProgram"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.4"
+    Task = "Configure 'Turn on Suggested Sites'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Suggested Sites" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.1"
+    Task = "Set 'Restrict ActiveX Install' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "iexplorer.exe" `
+                | Select-Object -ExpandProperty "iexplorer.exe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.2"
+    Task = "Set 'Scripted Window Security Restrictions' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.3"
+    Task = "Set 'Mime Sniffing Safety Feature' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.4"
+    Task = "Set 'Notification bar' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.5"
+    Task = "Set 'MK Protocol Security Restriction' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "iexplorer.exe" `
+                | Select-Object -ExpandProperty "iexplorer.exe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.6"
+    Task = "Set 'Consistent Mime Handling' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.7"
+    Task = "Set 'Restrict File Download' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "iexplorer.exe" `
+                | Select-Object -ExpandProperty "iexplorer.exe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.8"
+    Task = "Set 'Protection From Zone Elevation' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.1"
+    Task = "Set 'Java permissions' to 'Enabled:Disable Java'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.2"
+    Task = "Set 'Allow paste operations via script' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.3"
+    Task = "Set 'Protected Mode' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.4"
+    Task = "Set 'Turn on Cross-Site Scripting (XSS) Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.5"
+    Task = "Set 'Run .NET Framework-reliant components signed with Authenticode' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.6"
+    Task = "Set 'Use Pop-up Blocker' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.7"
+    Task = "Set 'Scriptlets' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.8"
+    Task = "Set 'Only allow approved domains to use ActiveX controls without prompt' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.9"
+    Task = "Set 'Allow drag and drop or copy and paste files' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.10"
+    Task = "Set 'Run .NET Framework-reliant components not signed with Authenticode' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.11"
+    Task = "Set 'Internet Explorer web browser control' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.12"
+    Task = "Set 'Download unsigned ActiveX controls' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.13"
+    Task = "Set 'Download signed ActiveX controls' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.14"
+    Task = "Set 'Allow font downloads' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1604" `
+                | Select-Object -ExpandProperty "1604"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.15"
+    Task = "Set 'Launching programs and unsafe files' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.16"
+    Task = "Set 'Automatic prompting for file downloads' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.17"
+    Task = "Set 'Allow installation of desktop items' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1800" `
+                | Select-Object -ExpandProperty "1800"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.18"
+    Task = "Set 'XAML Files' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.19"
+    Task = "Set 'Initialize and script ActiveX controls not marked as safe' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.20"
+    Task = "Set 'Enable MIME Sniffing' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2100" `
+                | Select-Object -ExpandProperty "2100"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.21"
+    Task = "Set 'Logon options' to 'Enabled:Prompt for user name and password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.22"
+    Task = "Set 'Access data sources across domains' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.23"
+    Task = "Set 'Status bar updates via script' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.24"
+    Task = "Set 'Include local directory path when uploading files to a server' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.25"
+    Task = "Set 'Userdata persistence' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.26"
+    Task = "Set 'Enable dragging of content from different domains within a window' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.27"
+    Task = "Set 'Navigate windows and frames across different domains' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.28"
+    Task = "Set 'Enable dragging of content from different domains across windows' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.29"
+    Task = "Set 'Allow script-initiated windows without size or position constraints' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.30"
+    Task = "Set 'Launching applications and files in an IFRAME' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.31"
+    Task = "Set 'Software channel permissions' to 'Enabled:High safety'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1E05" `
+                | Select-Object -ExpandProperty "1E05"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.32"
+    Task = "Configure 'First-Run Opt-In'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1208" `
+                | Select-Object -ExpandProperty "1208"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.33"
+    Task = "Set 'Web sites in less privileged Web content zones can navigate into this zone' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1.34"
+    Task = "Set 'Don't run antimalware programs against ActiveX controls' to 'Enabled:Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.2.1"
+    Task = "Set 'Java permissions' to 'Enabled:High safety'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.2.2"
+    Task = "Set 'Initialize and script ActiveX controls not marked as safe' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.2.3"
+    Task = "Set 'Intranet Sites: Include all network paths (UNCs)' to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" `
+                -Name "UNCAsIntranet" `
+                | Select-Object -ExpandProperty "UNCAsIntranet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.2.4"
+    Task = "Set 'Don't run antimalware programs against ActiveX controls' to 'Enabled:Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.1"
+    Task = "Set 'Java permissions' to 'Enabled:Disable Java'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.2"
+    Task = "Set 'Allow drag and drop or copy and paste files' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.3"
+    Task = "Set 'Download signed ActiveX controls' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.4"
+    Task = "Set 'Script ActiveX controls marked safe for scripting' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1405" `
+                | Select-Object -ExpandProperty "1405"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.5"
+    Task = "Set 'Allow active scripting' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1400" `
+                | Select-Object -ExpandProperty "1400"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.6"
+    Task = "Set 'Turn on Cross-Site Scripting (XSS) Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.7"
+    Task = "Set 'Initialize and script ActiveX controls not marked as safe' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.8"
+    Task = "Set 'Run .NET Framework-reliant components signed with Authenticode' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.9"
+    Task = "Set 'Allow paste operations via script' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.10"
+    Task = "Set 'Protected Mode' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.11"
+    Task = "Set 'Allow installation of desktop items' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1800" `
+                | Select-Object -ExpandProperty "1800"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.12"
+    Task = "Set 'Launching programs and unsafe files' to 'Enabled:Prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.13"
+    Task = "Set 'Automatic prompting for file downloads' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.14"
+    Task = "Set 'XAML Files' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.15"
+    Task = "Set 'Allow font downloads' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1604" `
+                | Select-Object -ExpandProperty "1604"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.16"
+    Task = "Set 'Enable MIME Sniffing' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2100" `
+                | Select-Object -ExpandProperty "2100"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.17"
+    Task = "Set 'Internet Explorer web browser control' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.18"
+    Task = "Set 'Allow Binary and Script Behaviors' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2000" `
+                | Select-Object -ExpandProperty "2000"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.19"
+    Task = "Set 'Scripting of Java applets' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1402" `
+                | Select-Object -ExpandProperty "1402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.20"
+    Task = "Set 'Use Pop-up Blocker' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.21"
+    Task = "Set 'Download unsigned ActiveX controls' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.22"
+    Task = "Set 'Scriptlets' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.23"
+    Task = "Set 'Allow file downloads' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1803" `
+                | Select-Object -ExpandProperty "1803"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.24"
+    Task = "Set 'Only allow approved domains to use ActiveX controls without prompt' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.25"
+    Task = "Set 'Use SmartScreen Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.26"
+    Task = "Set 'Run ActiveX controls and plugins' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1200" `
+                | Select-Object -ExpandProperty "1200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.27"
+    Task = "Set 'Run .NET Framework-reliant components not signed with Authenticode' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.28"
+    Task = "Set 'Logon options' to 'Enabled:Anonymous logon'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.29"
+    Task = "Set 'Allow script-initiated windows without size or position constraints' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.30"
+    Task = "Set 'Allow META REFRESH' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1608" `
+                | Select-Object -ExpandProperty "1608"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.31"
+    Task = "Set 'Userdata persistence' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.32"
+    Task = "Set 'Navigate windows and frames across different domains' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.33"
+    Task = "Set 'Software channel permissions' to 'Enabled:High safety'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1E05" `
+                | Select-Object -ExpandProperty "1E05"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.34"
+    Task = "Set 'Include local directory path when uploading files to a server' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.35"
+    Task = "Set 'Enable dragging of content from different domains within a window' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.36"
+    Task = "Set 'Status bar updates via script' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.37"
+    Task = "Set 'Access data sources across domains' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.38"
+    Task = "Set 'Web sites in less privileged Web content zones can navigate into this zone' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.39"
+    Task = "Configure 'First-Run Opt-In'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1208" `
+                | Select-Object -ExpandProperty "1208"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.40"
+    Task = "Set 'Enable dragging of content from different domains across windows' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.41"
+    Task = "Set 'Launching applications and files in an IFRAME' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.3.42"
+    Task = "Set 'Don't run antimalware programs against ActiveX controls' to 'Enabled:Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.4.1"
+    Task = "Set 'Java permissions' to 'Enabled:Disable Java'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.4.2"
+    Task = "Set 'Use SmartScreen Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.4.3"
+    Task = "Set 'Don't run antimalware programs against ActiveX controls' to 'Enabled:Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.5.1"
+    Task = "Set 'Java permissions' to 'Enabled:High safety'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.5.2"
+    Task = "Set 'Initialize and script ActiveX controls not marked as safe' to 'Enabled:Disable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.5.3"
+    Task = "Set 'Don't run antimalware programs against ActiveX controls' to 'Enabled:Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.6.1"
+    Task = "Set 'Use SmartScreen Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.6.2"
+    Task = "Set 'Only allow approved domains to use ActiveX controls without prompt' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.7.1"
+    Task = "Set 'Java permissions' to 'Enabled:Disable Java'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.7.2"
+    Task = "Set 'Use SmartScreen Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.8.1"
+    Task = "Set 'Java permissions' to 'Enabled:Disable Java'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.8.2"
+    Task = "Set 'Only allow approved domains to use ActiveX controls without prompt' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.8.3"
+    Task = "Set 'Use SmartScreen Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.9.1"
+    Task = "Set 'Java permissions' to 'Enabled:Disable Java'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.9.2"
+    Task = "Set 'Use SmartScreen Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.10.1"
+    Task = "Set 'Java permissions' to 'Enabled:Disable Java'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.10.2"
+    Task = "Set 'Use SmartScreen Filter' to 'Enabled:Enable'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.11"
+    Task = "Set 'Security Zones: Do not allow users to change policies' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_options_edit" `
+                | Select-Object -ExpandProperty "Security_options_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.12"
+    Task = "Set 'Security Zones: Do not allow users to add/delete sites' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_zones_map_edit" `
+                | Select-Object -ExpandProperty "Security_zones_map_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.13"
+    Task = "Set 'Security Zones: Use only machine settings' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_HKLM_only" `
+                | Select-Object -ExpandProperty "Security_HKLM_only"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1"
+    Task = "Set 'Disable the Security page' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "SecurityTab" `
+                | Select-Object -ExpandProperty "SecurityTab"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2"
+    Task = "Set 'Disable the Advanced page' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "AdvancedTab" `
+                | Select-Object -ExpandProperty "AdvancedTab"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3"
+    Task = "Set 'Prevent downloading of enclosures' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.4"
+    Task = "Set 'Turn on Basic feed authentication over HTTP' to 'Not Configured'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+                | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.5"
+    Task = "Configure 'Make proxy settings per-machine (rather than per-user)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "ProxySettingsPerUser" `
+                | Select-Object -ExpandProperty "ProxySettingsPerUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.6"
+    Task = "Configure 'Do not display the reveal password button'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.7"
+    Task = "Set 'Prevent changing proxy settings' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "Proxy" `
+                | Select-Object -ExpandProperty "Proxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.8"
+    Task = "Configure 'Disable changing Automatic Configuration settings'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "Autoconfig" `
+                | Select-Object -ExpandProperty "Autoconfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.9"
+    Task = "Set 'Prevent `"Fix settings`" functionality' to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableFixSecuritySettings" `
+                | Select-Object -ExpandProperty "DisableFixSecuritySettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.10"
+    Task = "Set 'Turn off the Security Settings Check feature' to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableSecuritySettingsCheck" `
+                | Select-Object -ExpandProperty "DisableSecuritySettingsCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.11_1"
+    Task = "Configure 'Disable changing connection settings'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "ProxySettingsPerUser" `
+                | Select-Object -ExpandProperty "ProxySettingsPerUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.11_2"
+    Task = "Configure 'Disable changing connection settings'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "Proxy" `
+                | Select-Object -ExpandProperty "Proxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.12"
+    Task = "Set 'Turn off Crash Detection' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoCrashDetection" `
+                | Select-Object -ExpandProperty "NoCrashDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.13"
+    Task = "Set 'Disable AutoComplete for forms' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "FormSuggest" `
+                | Select-Object -ExpandProperty "FormSuggest"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.14"
+    Task = "Set 'Turn on the auto-complete feature for user names and passwords on forms' to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.15"
+    Task = "Set 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation64Bit" `
+                | Select-Object -ExpandProperty "Isolation64Bit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-DISA-V1R16#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-DISA-V1R16#RegistrySettings.ps1
new file mode 100644
index 0000000..0f15a10
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-DISA-V1R16#RegistrySettings.ps1	
@@ -0,0 +1,4968 @@
+[AuditTest] @{
+    Id = "DTBI014-IE11"
+    Task = "Turn off Encryption Support must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "SecureProtocols" `
+                | Select-Object -ExpandProperty "SecureProtocols"
+        
+            if ($regValue -ne 2560) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2560"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI015-IE11"
+    Task = "The Internet Explorer warning about certificate address mismatch must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "WarnOnBadCertRecving" `
+                | Select-Object -ExpandProperty "WarnOnBadCertRecving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI018-IE11"
+    Task = "Check for publishers certificate revocation must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing" `
+                -Name "State" `
+                | Select-Object -ExpandProperty "State"
+        
+            if ($regValue -ne 146432) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 146432"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI022-IE11"
+    Task = "The Download signed ActiveX controls property must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI023-IE11"
+    Task = "The Download unsigned ActiveX controls property must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI024-IE11"
+    Task = "The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI030-IE11"
+    Task = "Font downloads must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1604" `
+                | Select-Object -ExpandProperty "1604"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI031-IE11"
+    Task = "The Java permissions must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI032-IE11"
+    Task = "Accessing data sources across domains must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI036-IE11"
+    Task = "Functionality to drag and drop or copy and paste files must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI038-IE11"
+    Task = "Launching programs and files in IFRAME must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI039-IE11"
+    Task = "Navigating windows and frames across different domains must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI042-IE11"
+    Task = "Userdata persistence must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI044-IE11"
+    Task = "Clipboard operations via script must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI046-IE11"
+    Task = "Logon options must be configured to prompt (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI061-IE11"
+    Task = "Java permissions must be configured with High Safety (Intranet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI091-IE11"
+    Task = "Java permissions must be configured with High Safety (Trusted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1000-IE11"
+    Task = "Dragging of content from different domains within a window must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1005-IE11"
+    Task = "Dragging of content from different domains across windows must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1010-IE11"
+    Task = "Internet Explorer Processes Restrict ActiveX Install must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1020-IE11"
+    Task = "Internet Explorer Processes Restrict ActiveX Install must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1025-IE11"
+    Task = "Dragging of content from different domains within a window must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI112-IE11"
+    Task = "The Download signed ActiveX controls property must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI113-IE11"
+    Task = "The Download unsigned ActiveX controls property must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI114-IE11"
+    Task = "The Initialize and script ActiveX controls not marked as safe property must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI115-IE11"
+    Task = "ActiveX controls and plug-ins must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1200" `
+                | Select-Object -ExpandProperty "1200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI116-IE11"
+    Task = "ActiveX controls marked safe for scripting must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1405" `
+                | Select-Object -ExpandProperty "1405"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI119-IE11"
+    Task = "File downloads must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1803" `
+                | Select-Object -ExpandProperty "1803"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI120-IE11"
+    Task = "Font downloads must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1604" `
+                | Select-Object -ExpandProperty "1604"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI121-IE11"
+    Task = "Java permissions must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI122-IE11"
+    Task = "Accessing data sources across domains must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI123-IE11"
+    Task = "The Allow META REFRESH property must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1608" `
+                | Select-Object -ExpandProperty "1608"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI126-IE11"
+    Task = "Functionality to drag and drop or copy and paste files must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI128-IE11"
+    Task = "Launching programs and files in IFRAME must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI129-IE11"
+    Task = "Navigating windows and frames across different domains must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI132-IE11"
+    Task = "Userdata persistence must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI133-IE11"
+    Task = "Active scripting must be disallowed (Restricted Sites Zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1400" `
+                | Select-Object -ExpandProperty "1400"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI134-IE11"
+    Task = "Clipboard operations via script must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI136-IE11"
+    Task = "Logon options must be configured and enforced (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI300-IE11"
+    Task = "Configuring History setting must be set to 40 days."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History" `
+                -Name "DaysToKeep" `
+                | Select-Object -ExpandProperty "DaysToKeep"
+        
+            if ($regValue -ne 40) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 40"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI318-IE11"
+    Task = "Internet Explorer must be set to disallow users to add/delete sites."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_zones_map_edit" `
+                | Select-Object -ExpandProperty "Security_zones_map_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI319-IE11"
+    Task = "Internet Explorer must be configured to disallow users to change policies."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_options_edit" `
+                | Select-Object -ExpandProperty "Security_options_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI320-IE11"
+    Task = "Internet Explorer must be configured to use machine settings."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_HKLM_only" `
+                | Select-Object -ExpandProperty "Security_HKLM_only"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI325-IE11"
+    Task = "Security checking features must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableSecuritySettingsCheck" `
+                | Select-Object -ExpandProperty "DisableSecuritySettingsCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI350-IE11"
+    Task = "Software must be disallowed to run or install with invalid signatures."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "RunInvalidSignatures" `
+                | Select-Object -ExpandProperty "RunInvalidSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI365-IE11"
+    Task = "Checking for server certificate revocation must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "CertificateRevocation" `
+                | Select-Object -ExpandProperty "CertificateRevocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI370-IE11"
+    Task = "Checking for signatures on downloaded programs must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "CheckExeSignatures" `
+                | Select-Object -ExpandProperty "CheckExeSignatures"
+        
+            if ($regValue -ne "yes") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: yes"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI375-IE11"
+    Task = "All network paths (UNCs) for Intranet sites must be disallowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" `
+                -Name "UNCAsIntranet" `
+                | Select-Object -ExpandProperty "UNCAsIntranet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI385-IE11"
+    Task = "Script-initiated windows without size or position constraints must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI390-IE11"
+    Task = "Script-initiated windows without size or position constraints must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI395-IE11"
+    Task = "Scriptlets must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI415-IE11"
+    Task = "Automatic prompting for file downloads must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI425-IE11"
+    Task = "Java permissions must be disallowed (Local Machine zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI430-IE11"
+    Task = "Java permissions must be disallowed (Locked Down Local Machine zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI435-IE11"
+    Task = "Java permissions must be disallowed (Locked Down Intranet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI440-IE11"
+    Task = "Java permissions must be disallowed (Locked Down Trusted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI450-IE11"
+    Task = "Java permissions must be disallowed (Locked Down Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI455-IE11"
+    Task = "XAML files must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI460-IE11"
+    Task = "XAML files must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI485-IE11"
+    Task = "Protected Mode must be enforced (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI490-IE11"
+    Task = "Protected Mode must be enforced (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI495-IE11"
+    Task = "Pop-up Blocker must be enforced (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI500-IE11"
+    Task = "Pop-up Blocker must be enforced (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI515-IE11"
+    Task = "Websites in less privileged web content zones must be prevented from navigating into the Internet zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI520-IE11"
+    Task = "Websites in less privileged web content zones must be prevented from navigating into the Restricted Sites zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI575-IE11"
+    Task = "Allow binary and script behaviors must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2000" `
+                | Select-Object -ExpandProperty "2000"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI580-IE11"
+    Task = "Automatic prompting for file downloads must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI590-IE11"
+    Task = "Internet Explorer Processes for MIME handling must be enforced. (Reserved)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI592-IE11"
+    Task = "Internet Explorer Processes for MIME handling must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI594-IE11"
+    Task = "Internet Explorer Processes for MIME handling must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI595-IE11"
+    Task = "Internet Explorer Processes for MIME sniffing must be enforced (Reserved)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI596-IE11"
+    Task = "Internet Explorer Processes for MIME sniffing must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI597-IE11"
+    Task = "Internet Explorer Processes for MIME sniffing must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI599-IE11"
+    Task = "Internet Explorer Processes for MK protocol must be enforced (Reserved)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI600-IE11"
+    Task = "Internet Explorer Processes for MK protocol must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI605-IE11"
+    Task = "Internet Explorer Processes for MK protocol must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI610-IE11"
+    Task = "Internet Explorer Processes for Zone Elevation must be enforced (Reserved)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI612-IE11"
+    Task = "Internet Explorer Processes for Zone Elevation must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI614-IE11"
+    Task = "Internet Explorer Processes for Zone Elevation must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI630-IE11"
+    Task = "Internet Explorer Processes for Restrict File Download must be enforced (Reserved)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI635-IE11"
+    Task = "Internet Explorer Processes for Restrict File Download must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI640-IE11"
+    Task = "Internet Explorer Processes for Restrict File Download must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI645-IE11"
+    Task = "Internet Explorer Processes for restricting pop-up windows must be enforced (Reserved)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI647-IE11"
+    Task = "Internet Explorer Processes for restricting pop-up windows must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI649-IE11"
+    Task = "Internet Explorer Processes for restricting pop-up windows must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI650-IE11"
+    Task = ".NET Framework-reliant components not signed with Authenticode must be disallowed to run (Restricted Sites Zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI655-IE11"
+    Task = ".NET Framework-reliant components signed with Authenticode must be disallowed to run (Restricted Sites Zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI670-IE11"
+    Task = "Scripting of Java applets must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1402" `
+                | Select-Object -ExpandProperty "1402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI690-IE11"
+    Task = "AutoComplete feature for forms must be disallowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Use FormSuggest" `
+                | Select-Object -ExpandProperty "Use FormSuggest"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI715-IE11"
+    Task = "Crash Detection management must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoCrashDetection" `
+                | Select-Object -ExpandProperty "NoCrashDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI725-IE11"
+    Task = "Turn on the auto-complete feature for user names and passwords on forms must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest PW Ask" `
+                | Select-Object -ExpandProperty "FormSuggest PW Ask"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI740-IE11"
+    Task = "Managing SmartScreen Filter use must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI760-IE11"
+    Task = "Browser must retain history on exit."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "ClearBrowsingHistoryOnExit" `
+                | Select-Object -ExpandProperty "ClearBrowsingHistoryOnExit"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI770-IE11"
+    Task = "Deleting websites that the user has visited must be disallowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "CleanHistory" `
+                | Select-Object -ExpandProperty "CleanHistory"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI780-IE11"
+    Task = "InPrivate Browsing must be disallowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Privacy" `
+                -Name "EnableInPrivateBrowsing" `
+                | Select-Object -ExpandProperty "EnableInPrivateBrowsing"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI800-IE11"
+    Task = "Scripting of Internet Explorer WebBrowser control property must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI810-IE11"
+    Task = "When uploading files to a server, the local directory path must be excluded (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI815-IE11"
+    Task = "Internet Explorer Processes for Notification Bars must be enforced (Reserved)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI820-IE11"
+    Task = "Security Warning for unsafe files must be set to prompt (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI825-IE11"
+    Task = "Internet Explorer Processes for Notification Bars must be enforced (Explorer)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI830-IE11"
+    Task = "ActiveX controls without prompt property must be used in approved domains only (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI835-IE11"
+    Task = "Internet Explorer Processes for Notification Bars must be enforced (iexplore)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI840-IE11"
+    Task = "Cross-Site Scripting Filter must be enforced (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI850-IE11"
+    Task = "Scripting of Internet Explorer WebBrowser Control must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI860-IE11"
+    Task = "When uploading files to a server, the local directory path must be excluded (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI870-IE11"
+    Task = "Security Warning for unsafe files must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI880-IE11"
+    Task = "ActiveX controls without prompt property must be used in approved domains only (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI890-IE11"
+    Task = "Cross-Site Scripting Filter property must be enforced (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI900-IE11"
+    Task = "Internet Explorer Processes Restrict ActiveX Install must be enforced (Reserved)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI910-IE11"
+    Task = "Status bar updates via script must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI920-IE11"
+    Task = ".NET Framework-reliant components not signed with Authenticode must be disallowed to run (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI930-IE11"
+    Task = ".NET Framework-reliant components signed with Authenticode must be disallowed to run (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI940-IE11"
+    Task = "Scriptlets must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI950-IE11"
+    Task = "Status bar updates via script must be disallowed (Restricted Sites zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI985-IE11"
+    Task = "When Enhanced Protected Mode is enabled, ActiveX controls must be disallowed to run in Protected Mode."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableEPMCompat" `
+                | Select-Object -ExpandProperty "DisableEPMCompat"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI990-IE11"
+    Task = "Dragging of content from different domains across windows must be disallowed (Internet zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI995-IE11"
+    Task = "Enhanced Protected Mode functionality must be enforced."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation" `
+                | Select-Object -ExpandProperty "Isolation"
+        
+            if ($regValue -ne "PMEM") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PMEM"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI356-IE11"
+    Task = "The 64-bit tab processes, when running in Enhanced Protected Mode on 64-bit versions of Windows, must be turned on."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation64Bit" `
+                | Select-Object -ExpandProperty "Isolation64Bit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1046-IE11"
+    Task = "Anti-Malware programs against ActiveX controls must be run for the Internet zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI062-IE11"
+    Task = "Anti-Malware programs against ActiveX controls must be run for the Intranet zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI426-IE11"
+    Task = "Anti-Malware programs against ActiveX controls must be run for the Local Machine zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1051-IE11"
+    Task = "Anti-Malware programs against ActiveX controls must be run for the Restricted Sites zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI092-IE11"
+    Task = "Anti-Malware programs against ActiveX controls must be run for the Trusted Sites zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1060-IE11"
+    Task = "Prevent bypassing SmartScreen Filter warnings must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1065-IE11"
+    Task = "Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1070-IE11"
+    Task = "Prevent per-user installation of ActiveX controls must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX" `
+                -Name "BlockNonAdminActiveXInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1075-IE11"
+    Task = "Prevent ignoring certificate errors option must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "PreventIgnoreCertErrors" `
+                | Select-Object -ExpandProperty "PreventIgnoreCertErrors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1080-IE11"
+    Task = "Turn on SmartScreen Filter scan option for the Internet Zone must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1085-IE11"
+    Task = "Turn on SmartScreen Filter scan option for the Restricted Sites Zone must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1090-IE11"
+    Task = "The Initialize and script ActiveX controls not marked as safe must be disallowed (Intranet Zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1095-IE11"
+    Task = "The Initialize and script ActiveX controls not marked as safe must be disallowed (Trusted Sites Zone)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1100-IE11"
+    Task = "Allow Fallback to SSL 3.0 (Internet Explorer) must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "EnableSSL3Fallback" `
+                | Select-Object -ExpandProperty "EnableSSL3Fallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1105-IE11"
+    Task = "Run once selection for running outdated ActiveX controls must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "RunThisTimeEnabled" `
+                | Select-Object -ExpandProperty "RunThisTimeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1110-IE11"
+    Task = "Enabling outdated ActiveX controls for Internet Explorer must be blocked."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "VersionCheckEnabled" `
+                | Select-Object -ExpandProperty "VersionCheckEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1115-IE11"
+    Task = "Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Internet Zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1120-IE11"
+    Task = "Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Restricted Sites Zone."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1125-IE11"
+    Task = "VBScript must not be allowed to run in Internet Explorer (Internet zone).(This policy setting will only exist on Windows 10 Redstone 2 or later)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "DTBI1130-IE11"
+    Task = "VBScript must not be allowed to run in Internet Explorer (Restricted Sites zone).(This policy setting will only exist on Windows 10 Redstone 2 or later)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-MS-2004#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-MS-2004#RegistrySettings.ps1
new file mode 100644
index 0000000..e25ac0f
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Internet Explorer 11-MS-2004#RegistrySettings.ps1	
@@ -0,0 +1,4860 @@
+[AuditTest] @{
+    Id = "REG-001"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-002"
+    Task = "Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest PW Ask" `
+                | Select-Object -ExpandProperty "FormSuggest PW Ask"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-003"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-001"
+    Task = "Ensure 'Remove `"Run this time`" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "RunThisTimeEnabled" `
+                | Select-Object -ExpandProperty "RunThisTimeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-002"
+    Task = "Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "VersionCheckEnabled" `
+                | Select-Object -ExpandProperty "VersionCheckEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-003"
+    Task = "Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "RunInvalidSignatures" `
+                | Select-Object -ExpandProperty "RunInvalidSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-004"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "CheckExeSignatures" `
+                | Select-Object -ExpandProperty "CheckExeSignatures"
+        
+            if ($regValue -ne "yes") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: yes"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-005"
+    Task = "Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation64Bit" `
+                | Select-Object -ExpandProperty "Isolation64Bit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-006"
+    Task = "Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableEPMCompat" `
+                | Select-Object -ExpandProperty "DisableEPMCompat"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-007"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation" `
+                | Select-Object -ExpandProperty "Isolation"
+        
+            if ($regValue -ne "PMEM") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PMEM"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-008"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-009"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-010"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-011"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-012"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-013"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-014"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-015"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-016"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-017"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-018"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-019"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-020"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-021"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-022"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-023"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-024"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-025"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-026"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-027"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-028"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-029"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-030"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-031"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-032"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-033"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-034"
+    Task = "Ensure 'Prevent managing SmartScreen Filter' is set to 'On'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-035"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoCrashDetection" `
+                | Select-Object -ExpandProperty "NoCrashDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-036"
+    Task = "Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableSecuritySettingsCheck" `
+                | Select-Object -ExpandProperty "DisableSecuritySettingsCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-037"
+    Task = "Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX" `
+                -Name "BlockNonAdminActiveXInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-038"
+    Task = "Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AxInstaller" `
+                -Name "OnlyUseAXISForActiveXInstall" `
+                | Select-Object -ExpandProperty "OnlyUseAXISForActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-039"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_zones_map_edit" `
+                | Select-Object -ExpandProperty "Security_zones_map_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-040"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_options_edit" `
+                | Select-Object -ExpandProperty "Security_options_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-041"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_HKLM_only" `
+                | Select-Object -ExpandProperty "Security_HKLM_only"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-042"
+    Task = "Ensure 'Check for server certificate revocation' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "CertificateRevocation" `
+                | Select-Object -ExpandProperty "CertificateRevocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-043"
+    Task = "Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "PreventIgnoreCertErrors" `
+                | Select-Object -ExpandProperty "PreventIgnoreCertErrors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-044"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "WarnOnBadCertRecving" `
+                | Select-Object -ExpandProperty "WarnOnBadCertRecving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-045"
+    Task = "Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "EnableSSL3Fallback" `
+                | Select-Object -ExpandProperty "EnableSSL3Fallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-046"
+    Task = "Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "SecureProtocols" `
+                | Select-Object -ExpandProperty "SecureProtocols"
+        
+            if ($regValue -ne 2560) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2560"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-047"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-048"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-049"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-050"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-051"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-052"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-053"
+    Task = "Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" `
+                -Name "UNCAsIntranet" `
+                | Select-Object -ExpandProperty "UNCAsIntranet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-054"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-055"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-056"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-057"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-058"
+    Task = "Ensure 'Java permissions' is set to 'High safety'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-059"
+    Task = "Ensure 'Java permissions' is set to 'High safety'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-060"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-061"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-062"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-063"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-064"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-065"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-066"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-067"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-068"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-069"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-070"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-071"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-072"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-073"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-074"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-075"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-076"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-077"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-078"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-079"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-080"
+    Task = "Ensure 'Logon options' is set to 'Prompt for user name and password'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-081"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-082"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-083"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-084"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-085"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-086"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-087"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-088"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-089"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-090"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-091"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-092"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-093"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-094"
+    Task = "Ensure 'Allow META REFRESH' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1608" `
+                | Select-Object -ExpandProperty "1608"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-095"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-096"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-097"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-098"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-099"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-100"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-101"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-102"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-103"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-104"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-105"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-106"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-107"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-108"
+    Task = "Ensure 'Allow binary and script behaviors' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2000" `
+                | Select-Object -ExpandProperty "2000"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-109"
+    Task = "Ensure 'Scripting of Java applets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1402" `
+                | Select-Object -ExpandProperty "1402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-110"
+    Task = "Ensure 'Allow file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1803" `
+                | Select-Object -ExpandProperty "1803"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-111"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-112"
+    Task = "Ensure 'Allow active scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1400" `
+                | Select-Object -ExpandProperty "1400"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-113"
+    Task = "Ensure 'Logon options' is set to 'Anonymous logon'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-114"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-115"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-116"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-117"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-118"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-119"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-120"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-121"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-122"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-123"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-124"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-125"
+    Task = "Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1405" `
+                | Select-Object -ExpandProperty "1405"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-126"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-127"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-128"
+    Task = "Ensure 'Run ActiveX controls and plugins' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1200" `
+                | Select-Object -ExpandProperty "1200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-129"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-130"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-131"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "REG-132"
+    Task = "Task unavailable"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Office Enterprise-CIS-1.2.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Office Enterprise-CIS-1.2.0#RegistrySettings.ps1
new file mode 100644
index 0000000..bf458e1
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Office Enterprise-CIS-1.2.0#RegistrySettings.ps1	
@@ -0,0 +1,11884 @@
+# Office root folder
+$officePaths = @(
+    # Office 365 / 2019 / 2021 (the standard install paths)
+    "C:\Program Files\Microsoft Office\root\Office16",
+    "C:\Program Files (x86)\Microsoft Office\root\Office16"
+    
+    # Office 2016 (MSI)
+    "C:\Program Files\Microsoft Office\Office16",
+    "C:\Program Files (x86)\Microsoft Office\Office16",
+
+    # Office 2016 (x32 MSI on x64 OS)
+    "C:\Program Files (x86)\Microsoft Office\root\Office16",
+    "C:\Program Files (x86)\Microsoft Office\Office16\",
+    
+    # Office 2016 (x64 MSI on x64 OS)
+    "C:\Program Files\Microsoft Office\Office16\"
+)
+
+# Mapping of applications to exe names
+$exeMap = @{
+    "Groove"              = "GROOVE.EXE"
+    "Excel"               = "EXCEL.EXE"
+    "Publisher"           = "MSPUB.EXE"
+    "PowerPoint"          = "POWERPNT.EXE"
+    "PowerPoint Viewer"   = "PPTVIEW.EXE"
+    "Project"             = "WINPROJ.EXE"
+    "Word"                = "WINWORD.EXE"
+    "Outlook"             = "OUTLOOK.EXE"
+    "SharePoint Designer" = "SPDESIGN.EXE"
+    "Expression Web"      = "EXPRWD.EXE"
+    "Access"              = "MSACCESS.EXE"
+    "OneNote"             = "ONENOTE.EXE"
+    "MS Script Editor"    = "MSE7.EXE"
+    "Visio"               = "VISIO.EXE"
+    
+}
+
+# Check if any Office installation path exists -> if not existend, then Office is not installed
+$OfficeInstalled = $false
+foreach ($path in $officePaths) {
+    if (Test-Path $path) {
+        $OfficeInstalled = $true
+        break
+    }
+}
+
+# Determine which Office apps are installed
+$installedOfficeApps = @{}
+
+if ($OfficeInstalled) {
+    foreach ($app in $exeMap.Keys) {
+        foreach ($path in $officePaths) {
+            $exePath = Join-Path $path $exeMap[$app]
+            if (Test-Path $exePath) {
+                $installedOfficeApps[$app] = $true
+                break
+            }
+        }
+        if (-not $installedOfficeApps.ContainsKey($app)) {
+            $installedOfficeApps[$app] = $false
+        }
+    }
+}
+else {
+    Write-Warning "Office could not be found on this system."
+    Write-Warning "If Office is installed, please leave a comment in Issue-718 (https://github.com/fbprogmbh/Hardening-Audit-Tool-AuditTAP/issues/718) and provide requested information from 'What happened?' section."
+}
+
+[AuditTest] @{
+    Id   = "1.1.4.1.1 A"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+            
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "1.1.4.1.1 B"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 C"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+                
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 D"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+                
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 E"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+            
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 F"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 G"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+                
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 H"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+                
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 I"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 J"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 K"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 L"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 M"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.1 N"
+    Task = "(L1) Ensure 'Add-on Management' is set to Enabled (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 A"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 B"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 C"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 D"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 E"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 F"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+            else {
+                try {
+                    $regValue = Get-ItemProperty -ErrorAction Stop `
+                        -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                        -Name "visio.exe" `
+                    | Select-Object -ExpandProperty "visio.exe"
+
+                    if (($regValue -ne 1)) {
+                        return @{
+                            Message = "Registry value is '$regValue'. Expected: x == 1"
+                            Status  = "False"
+                        }
+                    }
+                }
+                catch [System.Management.Automation.PSArgumentException] {
+                    return @{
+                        Message = "Registry value not found."
+                        Status  = "False"
+                    }
+                }
+                catch [System.Management.Automation.ItemNotFoundException] {
+                    return @{
+                        Message = "Registry key not found."
+                        Status  = "False"
+                    }
+                }
+
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 G"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 H"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 I"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 J"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 K"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 L"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 M"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.2 N"
+    Task = "(L1) Ensure 'Bind to object' is set to 'Enabled' (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 A"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled'"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 B"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 C"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 D"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 E"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 F"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 G"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 H"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 I"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 J"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 K"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 L"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 M"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.3 N"
+    Task = "(L1) Ensure 'Consistent Mime Handling' is set to 'Enabled' (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 A"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 B"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 C"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 D"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 E"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 F"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {        
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 G"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 H"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 I"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 J"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 K"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 L"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 M"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.4 N"
+    Task = "(L1) Ensure 'Disable user name and password' is set to 'Enabled' (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 A"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 B"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 C"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 D"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {    
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 E"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 F"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 G"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 H"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 I"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 J"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 K"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 L"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 M"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.5 N"
+    Task = "(L1) Ensure 'Information Bar' is set to 'Enabled' (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 A"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneDrive for Business"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 B"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 C"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 D"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 E"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 F"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 G"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 H"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 I"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 J"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "1.1.4.1.6 K"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 L"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 M"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.6 N"
+    Task = "(L1) Ensure 'Local Machine Zone Lockdown Security' is set to Enabled  (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 A"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 B"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 C"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 D"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 E"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 F"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 G"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 H"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 I"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 J"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 K"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 L"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 M"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.7 N"
+    Task = "(L1) Ensure 'Mime Sniffing Safety Feature' is set to Enabled (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 A"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 B"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 C"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 D"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 E"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 F"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 G"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 H"
+    Task = "(L1) Ensure 'Navigate URL' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 I"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 J"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 K"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 L"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 M"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.8 N"
+    Task = "(L1) Ensure 'Navigate URL' is set to Enabled  (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 A"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 B"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 C"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 D"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 E"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 F"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 G"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 H"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 I"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 J"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 K"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 L"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 M"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.9 N"
+    Task = "(L1) Ensure 'Object Caching Protection' is set to Enabled  (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 A"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 B"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 C"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 D"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 E"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 F"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 G"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 H"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 I"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 J"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 K"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 L"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 M"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.10 N"
+    Task = "(L1) Ensure 'Protection From Zone Elevation' is set to Enabled (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 A"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 B"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 C"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 D"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 E"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 F"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 G"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 H"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 I"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 J"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 K"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 L"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 M"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.11 N"
+    Task = "(L1) Ensure 'Restrict ActiveX Install' is set to Enabled  (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 A"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 B"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 C"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 D"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 E"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 F"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 G"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 H"
+    Task = "(L1) Ensure 'Restrict File Download' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 I"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 J"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 K"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 L"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 M"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.12 N"
+    Task = "(L1) Ensure 'Restrict File Download' is set to Enabled  (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 A"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 B"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 C"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 D"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 E"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 F"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 G"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 H"
+    Task = "(L1) Ensure 'Saved from URL' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 I"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 J"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 K"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 L"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 M"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.13 N"
+    Task = "(L1) Ensure 'Saved from URL' is set to Enabled  (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 A"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (groove.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Groove"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "groove.exe" `
+                | Select-Object -ExpandProperty "groove.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 B"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 C"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 D"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 E"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (pptview.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint Viewer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "pptview.exe" `
+                | Select-Object -ExpandProperty "pptview.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 F"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 G"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 H"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 I"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 J"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (spDesign.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["SharePoint Designer"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "spDesign.exe" `
+                | Select-Object -ExpandProperty "spDesign.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 K"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (exprwd.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Expression Web"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "exprwd.exe" `
+                | Select-Object -ExpandProperty "exprwd.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 L"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 M"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (onent.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "onent.exe" `
+                | Select-Object -ExpandProperty "onent.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4.1.14 N"
+    Task = "(L1) Ensure 'Scripted Window Security Restrictions' is set to Enabled  (mse7.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["MS Script Editor"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                    -Name "mse7.exe" `
+                | Select-Object -ExpandProperty "mse7.exe"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5.1"
+    Task = "(L1) Ensure 'Enable Automatic Updates' is set to Enabled"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\policies\microsoft\office\16.0\common\officeupdate" `
+                    -Name "enableautomaticupdates" `
+                | Select-Object -ExpandProperty "enableautomaticupdates"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5.2"
+    Task = "(L1) Ensure 'Hide Option to Enable or Disable Updates' is set to Enabled"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\software\policies\microsoft\office\16.0\common\officeupdate" `
+                    -Name "hideenabledisableupdates" `
+                | Select-Object -ExpandProperty "hideenabledisableupdates"
+
+                if (($regValue -ne 1)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 A"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation'"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\office\Common\COM Compatibility" `
+                    -Name "Comment" `
+                | Select-Object -ExpandProperty "Comment"
+
+                if ($regValue -ne "Block all Flash activation") {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: Block all Flash activation"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 B"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (ActivationFilterOverride)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}" `
+                    -Name "ActivationFilterOverride" `
+                | Select-Object -ExpandProperty "ActivationFilterOverride"
+
+                if (($regValue -ne 0)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 0"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 C"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (Compatibility Flags)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}" `
+                    -Name "Compatibility Flags" `
+                | Select-Object -ExpandProperty "Compatibility Flags"
+
+                if (($regValue -ne 1024)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1024"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 D"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (ActivationFilterOverride)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM Compatibility\{D27CDB70-AE6D-11CF-96B8-444553540000}" `
+                    -Name "ActivationFilterOverride" `
+                | Select-Object -ExpandProperty "ActivationFilterOverride"
+
+                if (($regValue -ne 0)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 0"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 E"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (Compatibility Flags)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM Compatibility\{D27CDB70-AE6D-11CF-96B8-444553540000}" `
+                    -Name "Compatibility Flags" `
+                | Select-Object -ExpandProperty "Compatibility Flags"
+
+                if (($regValue -ne 1024)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1024"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 F"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (ActivationFilterOverride, WOW6432)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\Common\COM Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}" `
+                    -Name "ActivationFilterOverride" `
+                | Select-Object -ExpandProperty "ActivationFilterOverride"
+
+                if (($regValue -ne 0)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 0"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 G"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (Compatibility Flags, WOW6432)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\Common\COM Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}" `
+                    -Name "Compatibility Flags" `
+                | Select-Object -ExpandProperty "Compatibility Flags"
+
+                if (($regValue -ne 1024)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1024"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 H"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (ActivationFilterOverride, WOW6432)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\Common\COM Compatibility\{D27CDB70-AE6D-11CF-96B8-444553540000}" `
+                    -Name "ActivationFilterOverride" `
+                | Select-Object -ExpandProperty "ActivationFilterOverride"
+
+                if (($regValue -ne 0)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 0"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1 I"
+    Task = "(L1) Ensure 'Block Flash activation in Office documents' is set to 'Enabled: Block all activation' (Compatibility Flags, WOW6432)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\Common\COM Compatibility\{D27CDB70-AE6D-11CF-96B8-444553540000}" `
+                    -Name "Compatibility Flags" `
+                | Select-Object -ExpandProperty "Compatibility Flags"
+
+                if (($regValue -ne 1024)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 1024"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 A"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (excel.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Excel"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "excel.exe" `
+                | Select-Object -ExpandProperty "excel.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 B"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (msaccess.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Access"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "msaccess.exe" `
+                | Select-Object -ExpandProperty "msaccess.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 C"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (mspub.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Publisher"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "mspub.exe" `
+                | Select-Object -ExpandProperty "mspub.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 D"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (onenote.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["OneNote"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {        
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "onenote.exe" `
+                | Select-Object -ExpandProperty "onenote.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 E"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (outlook.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Outlook"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "outlook.exe" `
+                | Select-Object -ExpandProperty "outlook.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 F"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (powerpnt.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["PowerPoint"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "powerpnt.exe" `
+                | Select-Object -ExpandProperty "powerpnt.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 G"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (visio.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Visio"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "visio.exe" `
+                | Select-Object -ExpandProperty "visio.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 H"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (winproj.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Project"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "winproj.exe" `
+                | Select-Object -ExpandProperty "winproj.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2 I"
+    Task = "(L1) Ensure 'Restrict legacy JScript execution for Office' is set to 'Enabled' (winword.exe)"
+    Test = {
+        # new logic: 
+        # - if no Office installed at all -> skip test 
+        # - if Office installed but app not installed -> skip test
+        # - else run test as normal
+
+        if (-not $OfficeInstalled) {
+            return @{
+                Message = "No Office installation detected, skipping test."
+                Status  = "None"
+            }
+        }
+        elseif (-not $installedOfficeApps["Word"]) {
+            return @{
+                Message = "Application not installed, skipping test."
+                Status  = "None"
+            }
+        }
+        else {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE" `
+                    -Name "winword.exe" `
+                | Select-Object -ExpandProperty "winword.exe"
+
+                if (($regValue -ne 69632)) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: x == 69632"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 GDPR-MS-16082019#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 GDPR-MS-16082019#RegistrySettings.ps1
new file mode 100644
index 0000000..606764a
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 GDPR-MS-16082019#RegistrySettings.ps1	
@@ -0,0 +1,4215 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+[AuditTest] @{
+    Id = "1"
+    Task = "Turn off Automatic Root Certificates Update"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot" `
+                -Name "DisableRootAutoUpdate" `
+                | Select-Object -ExpandProperty "DisableRootAutoUpdate"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.1"
+    Task = "Disable Allow Cortana"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortana" `
+                | Select-Object -ExpandProperty "AllowCortana"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.2"
+    Task = "Disable Allow search and Cortana to use location"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowSearchToUseLocation" `
+                | Select-Object -ExpandProperty "AllowSearchToUseLocation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.3"
+    Task = "Do not allow web search"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "DisableWebSearch" `
+                | Select-Object -ExpandProperty "DisableWebSearch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.4"
+    Task = "Don't search the web or display web results in Search"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "ConnectedSearchUseWeb" `
+                | Select-Object -ExpandProperty "ConnectedSearchUseWeb"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.5"
+    Task = "Set Set what information is shared in Search to Anonymous info"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "ConnectedSearchPrivacy" `
+                | Select-Object -ExpandProperty "ConnectedSearchPrivacy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1"
+    Task = "Prevent Windows from setting the time automatically"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters" `
+                -Name "Type" `
+                | Select-Object -ExpandProperty "Type"
+        
+            if ($regValue -ne "NoSync") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: NoSync"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2"
+    Task = "Disable Windows NTP Client"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4"
+    Task = "Prevent Windows from retrieving device metadata from the Internet"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5"
+    Task = "Turn off Find My Device"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FindMyDevice" `
+                -Name "AllowFindMyDevice" `
+                | Select-Object -ExpandProperty "AllowFindMyDevice"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6"
+    Task = "Disable Font Providers"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+                | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7"
+    Task = "Turn off Insider Preview builds for Windows 10"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+                | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.1"
+    Task = "Disable Suggested Sites"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Suggested Sites" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.2"
+    Task = "Disable Allow Microsoft services to provide enhanced suggestions as the user types in the Address Bar"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer" `
+                -Name "AllowServicePoweredQSA" `
+                | Select-Object -ExpandProperty "AllowServicePoweredQSA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.3"
+    Task = "Turn off the auto-complete feature for web addresses"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete" `
+                -Name "AutoSuggest" `
+                | Select-Object -ExpandProperty "AutoSuggest"
+        
+            if ($regValue -ne "No") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: No"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.4"
+    Task = "Turn off browser geolocation"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation" `
+                -Name "PolicyDisableGeolocation" `
+                | Select-Object -ExpandProperty "PolicyDisableGeolocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.5"
+    Task = "Prevent managing SmartScreen filter"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.6"
+    Task = "Turn off Compatibility View."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\BrowserEmulation" `
+                -Name "DisableSiteListEditing" `
+                | Select-Object -ExpandProperty "DisableSiteListEditing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.7"
+    Task = "Turn off the flip ahead with page prediction feature"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\FlipAhead" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.8"
+    Task = "Turn off background synchronization for feeds and Web Slices"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "BackgroundSyncStatus" `
+                | Select-Object -ExpandProperty "BackgroundSyncStatus"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.9"
+    Task = "Disable Allow Online Tips"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+                | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.10"
+    Task = "Set home page blank"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Start Page" `
+                | Select-Object -ExpandProperty "Start Page"
+        
+            if ($regValue -ne "about:blank") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: about:blank"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.11"
+    Task = "Disable changing home page settings"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "HomePage" `
+                | Select-Object -ExpandProperty "HomePage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.12"
+    Task = "Prevent running First Run wizard"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableFirstRunCustomize and set it to Go directly to home page" `
+                | Select-Object -ExpandProperty "DisableFirstRunCustomize and set it to Go directly to home page"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.0.13"
+    Task = "Specify default behavior for a new tab"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\TabbedBrowsing" `
+                -Name "NewTabPageShow" `
+                | Select-Object -ExpandProperty "NewTabPageShow"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "8.1"
+    Task = "Turn off Automatic download of the ActiveX VersionList"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\VersionManager" `
+                -Name "DownloadVersionList" `
+                | Select-Object -ExpandProperty "DownloadVersionList"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9"
+    Task = "Turn off License Manager related traffic"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LicenseManager" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "10"
+    Task = "Turn Off notifications network usage"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "11"
+    Task = "Turn off mail synchronization for Microsoft Accounts that are configured on the device"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Mail" `
+                -Name "ManualLaunchAllowed" `
+                | Select-Object -ExpandProperty "ManualLaunchAllowed"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "12"
+    Task = "Disable the Microsoft Account Sign-In Assistant"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wlidsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.1"
+    Task = "Disable Allow Address Bar drop-down list suggestions"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\ServiceUI" `
+                -Name "ShowOneBox" `
+                | Select-Object -ExpandProperty "ShowOneBox"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.2"
+    Task = "Disable Allow configuration updates for the Books Library"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\BooksLibrary" `
+                -Name "AllowConfigurationUpdateForBooksLibrary" `
+                | Select-Object -ExpandProperty "AllowConfigurationUpdateForBooksLibrary"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.3"
+    Task = "Disable Configure Autofill"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" `
+                -Name "Use FormSuggest" `
+                | Select-Object -ExpandProperty "Use FormSuggest"
+        
+            if ($regValue -ne "No") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: No"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.4"
+    Task = "Configure Do Not Track"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" `
+                -Name "DoNotTrack" `
+                | Select-Object -ExpandProperty "DoNotTrack"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.5"
+    Task = "Disable Configure Password Manager"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne "No") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: No"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.6"
+    Task = "Disable Configure search suggestions in Address Bar"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\SearchScopes" `
+                -Name "ShowSearchSuggestionsGlobal" `
+                | Select-Object -ExpandProperty "ShowSearchSuggestionsGlobal"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.7"
+    Task = "Disable Configure Windows Defender SmartScreen Filter (Windows 10, version 1703)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.8"
+    Task = "Disable Allow web content on New Tab page"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\ServiceUI" `
+                -Name "AllowWebContentOnNewTabPage" `
+                | Select-Object -ExpandProperty "AllowWebContentOnNewTabPage"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.9"
+    Task = "Configure corporate Home pages"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings" `
+                -Name "ProvisionedHomePages" `
+                | Select-Object -ExpandProperty "ProvisionedHomePages"
+        
+            if ($regValue -ne "about:blank") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: about:blank"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.10"
+    Task = "Prevent the First Run webpage from opening on Microsoft Edge"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" `
+                -Name "PreventFirstRunPage" `
+                | Select-Object -ExpandProperty "PreventFirstRunPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "13.11"
+    Task = "Disable Compatibility View."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\BrowserEmulation" `
+                -Name "MSCompatibilityMode" `
+                | Select-Object -ExpandProperty "MSCompatibilityMode"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "14"
+    Task = "Turn off Windows Network Connectivity Status Indicator active tests"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator" `
+                -Name "NoActiveProbe" `
+                | Select-Object -ExpandProperty "NoActiveProbe"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "15.1"
+    Task = "Turn off Automatic Download and Update of Map Data"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Maps" `
+                -Name "AutoDownloadAndUpdateMapData" `
+                | Select-Object -ExpandProperty "AutoDownloadAndUpdateMapData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "15.2"
+    Task = "Turn off unsolicited network traffic on the Offline Maps settings page"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Maps" `
+                -Name "AllowUntriggeredNetworkTrafficOnSettingsPage" `
+                | Select-Object -ExpandProperty "AllowUntriggeredNetworkTrafficOnSettingsPage"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "16.1"
+    Task = "Prevent the usage of OneDrive for file storage"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "16.2"
+    Task = "Prevent OneDrive from generating network traffic until the user signs in to OneDrive (Enable)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OneDrive" `
+                -Name "PreventNetworkTrafficPreUserSignIn" `
+                | Select-Object -ExpandProperty "PreventNetworkTrafficPreUserSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1"
+    Task = "Turn off Let apps use advertising ID to make ads more interesting to you based on your app usage (turning this off will reset your ID)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.2"
+    Task = "Turn off Let apps use advertising ID to make ads more interesting to you based on your app usage (turning this off will reset your ID)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+                | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.3"
+    Task = "Turn off Let websites provide locally relevant content by accessing my language list"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Control Panel\International\User Profile" `
+                -Name "HttpAcceptLanguageOptOut" `
+                | Select-Object -ExpandProperty "HttpAcceptLanguageOptOut"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.4"
+    Task = "Turn off Let Windows track app launches to improve Start and search results"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" `
+                -Name "Start_TrackProgs" `
+                | Select-Object -ExpandProperty "Start_TrackProgs"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.2.1"
+    Task = "Turn off Location for this device"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessLocation" `
+                | Select-Object -ExpandProperty "LetAppsAccessLocation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.2.2"
+    Task = "Turn off Location"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.1"
+    Task = "Turn off Let apps use my camera"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessCamera" `
+                | Select-Object -ExpandProperty "LetAppsAccessCamera"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "Turn off Let apps use my microphone"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessMicrophone" `
+                | Select-Object -ExpandProperty "LetAppsAccessMicrophone"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.1"
+    Task = "Turn off notifications network usage"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.2"
+    Task = "Turn off Let apps access my notifications"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessNotifications" `
+                | Select-Object -ExpandProperty "LetAppsAccessNotifications"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.1"
+    Task = "Turn off dictation of your voice, speaking to Cortana and other apps, and to prevent sending your voice input to Microsoft Speech services"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" `
+                -Name "HasAccepted" `
+                | Select-Object -ExpandProperty "HasAccepted"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.2"
+    Task = "Turn off updates to the speech recognition and speech synthesis models"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Speech" `
+                -Name "AllowSpeechModelUpdate" `
+                | Select-Object -ExpandProperty "AllowSpeechModelUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.1"
+    Task = "Turn off Let apps access my name, picture, and other account info"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessAccountInfo" `
+                | Select-Object -ExpandProperty "LetAppsAccessAccountInfo"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8"
+    Task = "Turn off Choose apps that can access contacts"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessContacts" `
+                | Select-Object -ExpandProperty "LetAppsAccessContacts"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.1"
+    Task = "Turn off Let apps access my calendar"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessCalendar" `
+                | Select-Object -ExpandProperty "LetAppsAccessCalendar"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10"
+    Task = "Turn off Let apps access my call history"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessCallHistory" `
+                | Select-Object -ExpandProperty "LetAppsAccessCallHistory"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.11"
+    Task = "Turn off Let apps access and send email"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessEmail" `
+                | Select-Object -ExpandProperty "LetAppsAccessEmail"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.12.1"
+    Task = "Turn off Let apps read or send messages (text or MMS)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessMessaging" `
+                | Select-Object -ExpandProperty "LetAppsAccessMessaging"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.12.3"
+    Task = "Turn off Message Sync"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+                | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.13.1"
+    Task = "Turn off Let apps make phone calls"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessPhone" `
+                | Select-Object -ExpandProperty "LetAppsAccessPhone"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.14.1"
+    Task = "Turn off Let apps control radios"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessRadios" `
+                | Select-Object -ExpandProperty "LetAppsAccessRadios"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.15.1"
+    Task = "Turn off Let apps automatically share and sync info with wireless devices that do not explicitly pair with your PC, tablet, or phone"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsSyncWithDevices" `
+                | Select-Object -ExpandProperty "LetAppsSyncWithDevices"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.15.2"
+    Task = "Turn off Let your apps use your trusted devices (hardware you've already connected, or comes with your PC, tablet, or phone)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessTrustedDevices" `
+                | Select-Object -ExpandProperty "LetAppsAccessTrustedDevices"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.16.1"
+    Task = "Do not show feedback notificationsk"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+                | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.16.2"
+    Task = "Set Send your device data to Microsoft to Basic"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+                | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            $allowedNames = @("Windows 10 Home", "Windows 11 Home", "Windows 10 Pro", "Windows 11 Pro")
+            $productname = Get-ComputerInfo | select -ExpandProperty OsName
+            if (($allowedNames -contains $productname) -and ($regValue -eq 1)){
+                return @{
+                    Message = "Registry value is '$regValue'. Your OS $productname does not support 'Diagnostic data off'."
+                    Status = "Warning"
+                }
+            }
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.16.3"
+    Task = "Turn off tailored experiences with relevant tips and recommendations by using your diagnostics data"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.16.4"
+    Task = "Turn off tailored experiences with relevant tips and recommendations by using your diagnostics data"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+                | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.17"
+    Task = "Turn off Let apps run in the background"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsRunInBackground" `
+                | Select-Object -ExpandProperty "LetAppsRunInBackground"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.18"
+    Task = "Turn off Let Windows and your apps use your motion data and collect motion history"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessMotion" `
+                | Select-Object -ExpandProperty "LetAppsAccessMotion"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.19"
+    Task = "Set Let Windows apps access Tasks to Force Deny"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsAccessTasks" `
+                | Select-Object -ExpandProperty "LetAppsAccessTasks"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.20"
+    Task = "Let Windows apps access diagnostic information about other apps"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsGetDiagnosticInfo" `
+                | Select-Object -ExpandProperty "LetAppsGetDiagnosticInfo"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.21"
+    Task = "Turn off Inking & Typing data collection"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InputPersonalization" `
+                -Name "RestrictImplicitTextCollection" `
+                | Select-Object -ExpandProperty "RestrictImplicitTextCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.22.1"
+    Task = "Disable Activity Feed"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnableActivityFeed" `
+                | Select-Object -ExpandProperty "EnableActivityFeed"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.22.2"
+    Task = "Disable Allow publishing of User Activities"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "PublishUserActivities" `
+                | Select-Object -ExpandProperty "PublishUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.22.3"
+    Task = "Disable Allow upload of User Activities"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+                | Select-Object -ExpandProperty "UploadUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.23.1"
+    Task = "Disable Let Windows apps activate with voice"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoice" `
+                | Select-Object -ExpandProperty "LetAppsActivateWithVoice"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.23.2"
+    Task = "Disable Allow publishing of User Activities"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "PublishUserActivities" `
+                | Select-Object -ExpandProperty "PublishUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19"
+    Task = "Turn off KMS Client Online AVS Validation"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+                | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "20"
+    Task = "Disable Allow downloading updates to the Disk Failure Prediction Model"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\StorageHealth" `
+                -Name "AllowDiskHealthModelUpdates" `
+                | Select-Object -ExpandProperty "AllowDiskHealthModelUpdates"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "21.1"
+    Task = "Enable Do not sync"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\SettingSync" `
+                -Name "DisableSettingSync" `
+                | Select-Object -ExpandProperty "DisableSettingSync"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "21.2"
+    Task = "Disable Allow users to turn syncing on"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\SettingSync" `
+                -Name "DisableSettingSyncUserOverride" `
+                | Select-Object -ExpandProperty "DisableSettingSyncUserOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "21.3"
+    Task = "Turn off Messaging cloud sync"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Messaging" `
+                -Name "CloudServiceSyncEnabled" `
+                | Select-Object -ExpandProperty "CloudServiceSyncEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "22"
+    Task = "Set Teredo State to disabled state"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition" `
+                -Name "Teredo_State" `
+                | Select-Object -ExpandProperty "Teredo_State"
+        
+            if ($regValue -ne "Disabled") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Disabled"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "23"
+    Task = "Turn off Connect to suggested open hotspots and Connect to networks shared by my contacts"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+                | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.0.1"
+    Task = "Disable Join Microsoft MAPS"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpyNetReporting" `
+                | Select-Object -ExpandProperty "SpyNetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.0.3"
+    Task = "Set Send file samples when further analysis is required to Never Send"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+                | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.0.4"
+    Task = "Set Define the order of sources for downloading definition updates to FileShares"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Signature Updates" `
+                -Name "FallbackOrder" `
+                | Select-Object -ExpandProperty "FallbackOrder"
+        
+            if ($regValue -ne "FileShares") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: FileShares"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.0.5"
+    Task = "Define Define file shares for downloading definition updates to Nothing"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Signature Updates" `
+                -Name "DefinitionUpdateFileSharesSources" `
+                | Select-Object -ExpandProperty "DefinitionUpdateFileSharesSources"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.0.6"
+    Task = "Turn off Malicious Software Reporting Tool diagnostic data"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MRT" `
+                -Name "DontReportInfectionInformation" `
+                | Select-Object -ExpandProperty "DontReportInfectionInformation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.0.7"
+    Task = "Turn off Enhanced Notifications as follows"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableEnhancedNotifications" `
+                | Select-Object -ExpandProperty "DisableEnhancedNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.1.1"
+    Task = "Disable Windows Defender Smartscreen"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.1.2"
+    Task = "Disable Windows Defender Smartscreen"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\SmartScreen" `
+                -Name "ConfigureAppInstallControlEnabled" `
+                | Select-Object -ExpandProperty "ConfigureAppInstallControlEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "24.1.3"
+    Task = "Disable Windows Defender Smartscreen"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\SmartScreen" `
+                -Name "ConfigureAppInstallControl" `
+                | Select-Object -ExpandProperty "ConfigureAppInstallControl"
+        
+            if ($regValue -ne "Anywhere") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Anywhere"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "25.1"
+    Task = "Turn off all Windows spotlight features"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "25.2"
+    Task = "Do not display the Lock Screen"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreen" `
+                | Select-Object -ExpandProperty "NoLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "25.3"
+    Task = "Force a specific default lock screen image and logon image"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "LockScreenImage" `
+                | Select-Object -ExpandProperty "LockScreenImage"
+        
+            if ($regValue -ne "C:\windows\web\screen\lockscreen.jpg") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: C:\windows\web\screen\lockscreen.jpg"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "25.4"
+    Task = "Turn off fun facts, tips, tricks, and more on lock screen"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "LockScreenOverlaysDisabled" `
+                | Select-Object -ExpandProperty "LockScreenOverlaysDisabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "25.5"
+    Task = "Do not show Windows tips"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSoftLanding" `
+                | Select-Object -ExpandProperty "DisableSoftLanding"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "25.6"
+    Task = "Turn off Microsoft consumer experiences"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "26.1"
+    Task = "Turn off the ability to launch apps from the Microsoft Store that were preinstalled or downloaded"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableStoreApps" `
+                | Select-Object -ExpandProperty "DisableStoreApps"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "26.2"
+    Task = "Turn off the ability to launch apps from the Microsoft Store that were preinstalled or downloaded"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+                | Select-Object -ExpandProperty "AutoDownload"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "27"
+    Task = "Turn off apps for websites, preventing customers who visit websites that are registered with their associated app from directly launching the app"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableAppUriHandlers" `
+                | Select-Object -ExpandProperty "EnableAppUriHandlers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "28.3"
+    Task = "Enable the Download Mode and set the Download Mode to `"Bypass`" to prevent traffic"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" `
+                -Name "DODownloadMode" `
+                | Select-Object -ExpandProperty "DODownloadMode"
+        
+            if ($regValue -ne 100) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 100"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "29.1"
+    Task = "Turn off Windows Update"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DoNotConnectToWindowsUpdateInternetLocations" `
+                | Select-Object -ExpandProperty "DoNotConnectToWindowsUpdateInternetLocations"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "29.2"
+    Task = "Turn off Windows Update"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DisableWindowsUpdateAccess" `
+                | Select-Object -ExpandProperty "DisableWindowsUpdateAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "29.3"
+    Task = "Turn off Windows Update"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "WUServer" `
+                | Select-Object -ExpandProperty "WUServer"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "29.4"
+    Task = "Turn off Windows Update"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "WUStatusServer" `
+                | Select-Object -ExpandProperty "WUStatusServer"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "29.5"
+    Task = "Turn off Windows Update"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "UpdateServiceUrlAlternate" `
+                | Select-Object -ExpandProperty "UpdateServiceUrlAlternate"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "29.6"
+    Task = "Turn off Windows Update"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "UseWUServer" `
+                | Select-Object -ExpandProperty "UseWUServer"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AccountPolicies.ps1
new file mode 100644
index 0000000..ee46aa7
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AccountPolicies.ps1	
@@ -0,0 +1,255 @@
+[AuditTest] @{
+    Id = "200"
+    Task = "(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "201"
+    Task = "(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "202"
+    Task = "(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "203"
+    Task = "(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "204"
+    Task = "(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "205"
+    Task = "(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' ."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "206"
+    Task = "(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "207"
+    Task = "(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 10 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 10 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "208"
+    Task = "(ND) Ensure 'Reset account lockout counter after' is set to '15 or`nmore minute(s)'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AuditPolicies.ps1
new file mode 100644
index 0000000..346e5c7
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AuditPolicies.ps1	
@@ -0,0 +1,77 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#RegistrySettings.ps1
new file mode 100644
index 0000000..dc5400c
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#RegistrySettings.ps1	
@@ -0,0 +1,12419 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id   = "1"
+    Task = "(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2"
+    Task = "(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3"
+    Task = "(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4"
+    Task = "(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+            | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5"
+    Task = "(ND, NE) Ensure 'WDigest Authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "7"
+    Task = "(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableDeadGWDetect" `
+            | Select-Object -ExpandProperty "EnableDeadGWDetect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "8"
+    Task = "(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+            | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9"
+    Task = "(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "10"
+    Task = "(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "11"
+    Task = "(HD) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\Parameters" `
+                -Name "disablesavepassword" `
+            | Select-Object -ExpandProperty "disablesavepassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "12"
+    Task = "(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+            | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "13"
+    Task = "(HD) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+            | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "14"
+    Task = "(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\netBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+            | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "15"
+    Task = "(HD) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+            | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "16"
+    Task = "(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+            | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17"
+    Task = "(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+            | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18"
+    Task = "(HD) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19"
+    Task = "(HD) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "20"
+    Task = "(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+            | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "21"
+    Task = "(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netbt\Parameters" `
+                -Name "NodeType" `
+            | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "22"
+    Task = "(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+            | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "23"
+    Task = "(HD) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "24 A"
+    Task = "(ND, NE) Ensure 'Hardened UNC Paths' is set to `"Require Mutual Authentication=1, `"Require Integrity=1`" for the value names `"\\*\NETLOGON`" und `"\\*\SYSVOL`". [\\*\NETLOGON]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+            | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "24 B"
+    Task = "(ND, NE) Ensure 'Hardened UNC Paths' is set to `"Require Mutual Authentication=1, `"Require Integrity=1`" for the value names `"\\*\NETLOGON`" und `"\\*\SYSVOL`". [\\*\SYSVOL]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+            | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "25"
+    Task = "(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+            | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "26"
+    Task = "(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+            | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "27"
+    Task = "(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+            | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "28"
+    Task = "(HD) Ensure 'Enable Font Providers' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+            | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "29"
+    Task = "(HD) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+            | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "30"
+    Task = "(HD) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+            | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "31"
+    Task = "(HD) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+            | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "32"
+    Task = "(HD) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+            | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "33"
+    Task = "(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+            | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($null -eq $regValue -or 0 -eq $regValue) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1-3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "34"
+    Task = "(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+            | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "35"
+    Task = "(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+            | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "36"
+    Task = "(HD) Ensure 'Turn off notifications network usage' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+            | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "37"
+    Task = "(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+            | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "38"
+    Task = "(HD) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+            | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "39"
+    Task = "(ND, NE) Ensure 'Turn off picture password sign-in' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+            | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "40"
+    Task = "(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+            | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "41"
+    Task = "(ND, NE) Ensure 'Block user from showing account details on signin' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+            | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "42"
+    Task = "(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+            | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "43"
+    Task = "(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+            | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "44"
+    Task = "(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+            | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "45"
+    Task = "(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+            | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "46"
+    Task = "(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+            | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "47"
+    Task = "(HD) Ensure 'Turn off the advertising ID' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+            | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "48"
+    Task = "(HD) Ensure 'Allow upload of User Activities' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+            | Select-Object -ExpandProperty "UploadUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "49"
+    Task = "(HD) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+            | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "50"
+    Task = "(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+            | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "51"
+    Task = "(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+            | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "52"
+    Task = "(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "53"
+    Task = "(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "54"
+    Task = "(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "55"
+    Task = "(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "56"
+    Task = "(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "57"
+    Task = "(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "58"
+    Task = "(HD) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+            | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "59 A"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDs" `
+            | Select-Object -ExpandProperty "DenyDeviceIDs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "59 B"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured. (PCI\CC_0C0A)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs"
+        
+            $expectedValue = "PCI\CC_0C0A"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "59 C"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured. (DenyDeviceIDsRetroactive)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDsRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceIDsRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 A"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+            | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 B"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (Blocking the SBP-2 driver and Thunderbolt controllers to reduce 1394 DMA and Thunderbolt DMA threats to BitLocker)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 C"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (IEEE 1394 Devices That Support the 61883 Protocol)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{7ebefbc0-3200-11d2-b4c2-00a0C9697d07}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 D"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (IEEE 1394 Devices That Support the AVC Protocol)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{c06ff265-ae09-48f0-812c-16753d7cba83}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 E"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (IEEE 1394 Host Bus Controller)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{6bdd1fc1-810f-11d0-bec7-08002be2092f}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 F"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (DenyDeviceClassesRetroactive)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "61"
+    Task = "(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+            | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "62"
+    Task = "(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+            | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "63"
+    Task = "(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "64"
+    Task = "(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+            | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "65"
+    Task = "(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "66"
+    Task = "(HD) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+            | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "67"
+    Task = "(HD) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+            | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "68"
+    Task = "(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+            | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "69"
+    Task = "(HD) Ensure 'Turn off printing over HTTP' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+            | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "70"
+    Task = "(HD) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "71"
+    Task = "(HD) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+            | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "72"
+    Task = "(HD) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+            | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "73"
+    Task = "(HD) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+            | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "74"
+    Task = "(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+            | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "75"
+    Task = "(HD) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+            | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "76"
+    Task = "(HD) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+            | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "77"
+    Task = "(HD) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+            | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "78"
+    Task = "(HD) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+            | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "79"
+    Task = "(HD) Ensure 'Turn off access to the Store' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoUseStoreOpenWith" `
+            | Select-Object -ExpandProperty "NoUseStoreOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "80"
+    Task = "(HD) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "DevicePKInitBehavior" `
+            | Select-Object -ExpandProperty "DevicePKInitBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "81"
+    Task = "(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+            | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "82"
+    Task = "(HD) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+            | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "83"
+    Task = "(HD) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+            | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "84"
+    Task = "(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+            | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "85"
+    Task = "(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+            | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "86"
+    Task = "(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+            | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "87"
+    Task = "(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+            | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "88"
+    Task = "(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\TPM\BlockedCommands" `
+                -Name "IgnoreDefaultList" `
+            | Select-Object -ExpandProperty "IgnoreDefaultList"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "89"
+    Task = "(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Tpm" `
+                -Name "StandardUserAuthorizationFailureDuration" `
+            | Select-Object -ExpandProperty "StandardUserAuthorizationFailureDuration"
+        
+            if ($regValue -ne 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 30"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "90"
+    Task = "(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Tpm" `
+                -Name "StandardUserAuthorizationFailureIndividualThreshold" `
+            | Select-Object -ExpandProperty "StandardUserAuthorizationFailureIndividualThreshold"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "91"
+    Task = "(HD) Ensure 'Enable Windows NTP Client' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "92"
+    Task = "(HD) Ensure 'Enable Windows NTP Server' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "93"
+    Task = "(HD) Ensure 'Allow Online Tips' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+            | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "94"
+    Task = "(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+            | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "95"
+    Task = "(ND, NE) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+            | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "96"
+    Task = "(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "SCRNSAVE.EXE" `
+            | Select-Object -ExpandProperty "SCRNSAVE.EXE"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "97"
+    Task = "(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveActive" `
+            | Select-Object -ExpandProperty "ScreenSaveActive"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "98"
+    Task = "(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaverIsSecure" `
+            | Select-Object -ExpandProperty "ScreenSaverIsSecure"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "99"
+    Task = "(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveTimeOut" `
+            | Select-Object -ExpandProperty "ScreenSaveTimeOut"
+        
+            if (($regValue -gt 900 -or $regValue -le 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x > 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "100 A"
+    Task = "(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "RestrictImplicitTextCollection" `
+            | Select-Object -ExpandProperty "RestrictImplicitTextCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "100 B"
+    Task = "(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "RestrictImplicitInkCollection" `
+            | Select-Object -ExpandProperty "RestrictImplicitInkCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "101"
+    Task = "(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+            | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "102"
+    Task = "(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+            | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "103"
+    Task = "(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+            | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "104"
+    Task = "(HD) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "BlockHostedAppAccessWinRT" `
+            | Select-Object -ExpandProperty "BlockHostedAppAccessWinRT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "105"
+    Task = "(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+            | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "106"
+    Task = "(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+            | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "107"
+    Task = "(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+            | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "108"
+    Task = "(HD) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+            | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "109"
+    Task = "(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+            | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "110"
+    Task = "(HD) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "111"
+    Task = "(HD) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+            | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "112"
+    Task = "(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+            | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "113"
+    Task = "(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "114"
+    Task = "(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+            | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "115"
+    Task = "(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+            | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "116"
+    Task = "(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+            | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "117"
+    Task = "(ND, NE) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+            | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "118"
+    Task = "(ND, NE) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+            | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "119"
+    Task = "(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+            | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "120"
+    Task = "(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only] or Enabled: 1 - Basic'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+            | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            $saferClients = @("*Server*", "*Education*", "*Enterprise*")
+            $productname = Get-ComputerInfo | select -ExpandProperty OsName
+            if (($productname -notcontains $saferClients) -and ($regValue -eq 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Your OS $productname does not support 'Diagnostic data off'."
+                    Status  = "Warning"
+                }
+            }
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "121"
+    Task = "(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowDeviceNameInTelemetry" `
+            | Select-Object -ExpandProperty "AllowDeviceNameInTelemetry"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "122"
+    Task = "(HD) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+            | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "123"
+    Task = "(HD) Ensure 'Allow Use of Camera' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+            | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+            | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "124"
+    Task = "(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+            | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "125"
+    Task = "(HD) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+            | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "126"
+    Task = "(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+            | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "127"
+    Task = "(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+            | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "128"
+    Task = "(HD) Ensure 'Turn off location' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+            | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "129"
+    Task = "(HD) Ensure 'Turn off Push To Install service' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+            | Select-Object -ExpandProperty "DisablePushToInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "130"
+    Task = "(HD) Ensure 'Do not allow COM port redirection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+            | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "131"
+    Task = "(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+            | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "132"
+    Task = "(HD) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+            | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "133"
+    Task = "(HD) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+            | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "134"
+    Task = "(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+            | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "135"
+    Task = "(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+            | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "136"
+    Task = "(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+            | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "137"
+    Task = "(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+            | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "138"
+    Task = "(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+            | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "139"
+    Task = "(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fResetBroken" `
+            | Select-Object -ExpandProperty "fResetBroken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "140"
+    Task = "(HD) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+            | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "141"
+    Task = "(HD) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+            | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "142"
+    Task = "(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+            | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "143"
+    Task = "(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+            | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "144"
+    Task = "(HD) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+            | Select-Object -ExpandProperty "fDenyTSConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "145"
+    Task = "(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+            | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "146"
+    Task = "(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+            | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "147"
+    Task = "(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+            | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "148"
+    Task = "(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+            | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "149"
+    Task = "(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+            | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "150"
+    Task = "(HD) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+            | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "151"
+    Task = "(HD) Ensure 'Disable all apps from Microsoft Store' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableStoreApps" `
+            | Select-Object -ExpandProperty "DisableStoreApps"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "152"
+    Task = "(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+            | Select-Object -ExpandProperty "AutoDownload"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "153"
+    Task = "(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableOSUpgrade" `
+            | Select-Object -ExpandProperty "DisableOSUpgrade"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "154"
+    Task = "(HD) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RequirePrivateStoreOnly" `
+            | Select-Object -ExpandProperty "RequirePrivateStoreOnly"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "155"
+    Task = "(HD) Ensure 'Turn off the Store application' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RemoveWindowsStore" `
+            | Select-Object -ExpandProperty "RemoveWindowsStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "156"
+    Task = "(HD) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+            | Select-Object -ExpandProperty "AllowCloudSearch"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "157"
+    Task = "(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowSearchToUseLocation" `
+            | Select-Object -ExpandProperty "AllowSearchToUseLocation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "158"
+    Task = "(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+            | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "159"
+    Task = "(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\TextInput" `
+                -Name "AllowLinguisticDataCollection" `
+            | Select-Object -ExpandProperty "AllowLinguisticDataCollection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "160"
+    Task = "(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" `
+                -Name "DODownloadMode" `
+            | Select-Object -ExpandProperty "DODownloadMode"
+        
+            if ($regValue -ne 99) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 99"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "161"
+    Task = "(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+            | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "162"
+    Task = "(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+            | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "163"
+    Task = "(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+            | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "164"
+    Task = "(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+            | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "165"
+    Task = "(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+            | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "166"
+    Task = "(HD) Ensure 'Join Microsoft MAPS' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+            | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "167"
+    Task = "(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+            | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "168"
+    Task = "(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+            | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "169"
+    Task = "(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+            | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "170"
+    Task = "(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+            | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "171"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }            
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+            
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 A"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application from creating child processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 B"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating executable content)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 C"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                   
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 D"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from injecting code into other processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 E"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Adobe Reader from creating child processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 F"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Win32 API calls from Office macro)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 G"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 H"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 I"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block executable content from email client and webmail)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 J"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "172 K"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "173"
+    Task = "(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "174"
+    Task = "(ND, NE) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverride" `
+            | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "175"
+    Task = "(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "EnabledV9" `
+            | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "176"
+    Task = "(HD) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "177"
+    Task = "(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "178"
+    Task = "(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+            | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "179"
+    Task = "(HD) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+            | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "180"
+    Task = "(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "181"
+    Task = "(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "182"
+    Task = "(HD) Ensure 'Prevent Codec Download' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+            | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "184"
+    Task = "(HD) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow only signed scripts'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\PowerShell" `
+                -Name "ExecutionPolicy" `
+            | Select-Object -ExpandProperty "ExecutionPolicy"
+        
+            if ($regValue -ne "AllSigned") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: AllSigned"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "185"
+    Task = "(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+            | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "186"
+    Task = "(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+            | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "187"
+    Task = "(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+            | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "188"
+    Task = "(ND, NE) Ensure 'Remove access to `"Pause updates`" feature' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "SetDisablePauseUXAccess" `
+            | Select-Object -ExpandProperty "SetDisablePauseUXAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "189"
+    Task = "(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+            | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "190"
+    Task = "(HD) Ensure 'Allow Remote Shell Access' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+            | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "191"
+    Task = "(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "192"
+    Task = "(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+            | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "193"
+    Task = "(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "194"
+    Task = "(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "195"
+    Task = "(HD) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+            | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "196"
+    Task = "(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+            | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "197"
+    Task = "(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "198"
+    Task = "(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+            | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "199"
+    Task = "(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+            | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "209"
+    Task = "(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+            | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "210"
+    Task = "(ND, NE) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+            | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "211"
+    Task = "(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+            | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "212"
+    Task = "(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+            | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "213"
+    Task = "(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+            | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "214"
+    Task = "(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+            | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "215"
+    Task = "(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+            | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "216"
+    Task = "(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+            | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "217"
+    Task = "(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "218"
+    Task = "(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "219"
+    Task = "(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+            | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "220"
+    Task = "(ND) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+            | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "221"
+    Task = "(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+            | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "222"
+    Task = "(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+            | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "223"
+    Task = "(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+            | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -le 0 -or $regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "224"
+    Task = "(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+            | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "225"
+    Task = "(HD) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+            | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "226"
+    Task = "(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AllocateDASD" `
+            | Select-Object -ExpandProperty "AllocateDASD"
+        
+            if ($regValue -ne "2") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "227"
+    Task = "(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+            | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "228"
+    Task = "(HD) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+            | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "229"
+    Task = " Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+            | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "230"
+    Task = "(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+            | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "231"
+    Task = "(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+            | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "232"
+    Task = "(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MaxDevicePasswordFailedAttempts" `
+            | Select-Object -ExpandProperty "MaxDevicePasswordFailedAttempts"
+        
+            if (($regValue -gt 10 -or $regValue -le 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 10 and x > 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "233"
+    Task = "(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+            | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "234"
+    Task = "(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+            | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "239"
+    Task = "(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+            | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "240"
+    Task = "(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+            | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "241"
+    Task = "(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "242"
+    Task = "(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "243"
+    Task = "(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+            | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "244"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+            | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "245"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "246"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. "
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "247"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+            | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "248"
+    Task = "(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+            | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if (($regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "250"
+    Task = "(HD) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 'Deny all'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictSendingNTLMTraffic" `
+            | Select-Object -ExpandProperty "RestrictSendingNTLMTraffic"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "251"
+    Task = "(HD) Ensure 'Network security: Restrict NTLM: Incoming NTLM traffic' is set to 'Deny all accounts'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictReceivingNTLMTraffic" `
+            | Select-Object -ExpandProperty "RestrictReceivingNTLMTraffic"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "252"
+    Task = "(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+            | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "253"
+    Task = "(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "254"
+    Task = "(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+            | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "255"
+    Task = "(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+            | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "256"
+    Task = "(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+            | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "257"
+    Task = "(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+            | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "258"
+    Task = "(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+            | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "259"
+    Task = "(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+            | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if (($regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "260"
+    Task = "(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+            | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "261"
+    Task = "(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+            | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "262"
+    Task = "(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+            | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "264"
+    Task = "(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+            | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "265"
+    Task = "(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+            | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "266"
+    Task = "(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+            | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "267"
+    Task = "(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+            | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "268"
+    Task = "(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+            | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "269"
+    Task = "(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+            | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "270"
+    Task = "(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "271"
+    Task = "(ND, NE) Configure 'Network access: Remotely accessible registry paths'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "272"
+    Task = "(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+            | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "273"
+    Task = "(HD) Ensure 'System settings: Optional subsystems' is set to 'None'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems" `
+                -Name "Optional" `
+            | Select-Object -ExpandProperty "Optional"
+        
+            if ($regValue -ne $null) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: (Blank)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "274"
+    Task = "(HD) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+            | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "275"
+    Task = "(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+            | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "276"
+    Task = "(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+            | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "316"
+    Task = "(HD) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "317"
+    Task = "(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'."
+    Test = {
+        try {
+            $status = Get-Service DiagTrack -ErrorAction Stop | select -property starttype
+            if ($status.StartType -ne "Disabled") {
+                return @{
+                    Message = "Service not compliant. Currently: $($status)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        catch [System.SystemException] {
+            return @{
+                Message = "Service not found!"
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "318"
+    Task = "(HD) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTAGService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "319"
+    Task = "(HD) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "320"
+    Task = "(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "321"
+    Task = "(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "322"
+    Task = "(HD) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "323"
+    Task = "(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "324"
+    Task = "(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\irmon" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "325"
+    Task = "(HD) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "326"
+    Task = "(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        $result = Get-WindowsOptionalFeature -online -FeatureName Microsoft-Windows-Subsystem-Linux
+        $state = $result.State            
+        if ($state -eq "Disabled" -or $state -eq "Not Installed") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        else {
+            return @{
+                Message = "Registry value is '$state'. Expected: 'Disabled' or 'Not Installed'"
+                Status  = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "327"
+    Task = "(HD) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "328"
+    Task = "(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FTPSVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "329"
+    Task = "(HD) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "330"
+    Task = "(HD) Ensure 'Microsoft Store Install Service (InstallService)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InstallService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "331"
+    Task = "(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshd" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "332"
+    Task = "(HD) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "333"
+    Task = "(HD) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "334"
+    Task = "(HD) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "335"
+    Task = "(HD) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "336"
+    Task = "(HD) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "337"
+    Task = "(HD) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "338"
+    Task = "(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "339"
+    Task = "(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "340"
+    Task = "(HD) Ensure 'Server (LanmanServer)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "341"
+    Task = "(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\simptcp" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "342"
+    Task = "(HD) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "343"
+    Task = "(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "344"
+    Task = "(HD) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "345"
+    Task = "(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "346"
+    Task = "(HD) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "347"
+    Task = "(HD) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "348"
+    Task = "(ND, NE) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "349"
+    Task = "(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "350"
+    Task = "(HD) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PushToInstall" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "351"
+    Task = "(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "352"
+    Task = "(HD) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "353"
+    Task = "(HD) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "354"
+    Task = "(HD) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "355"
+    Task = "(HD) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "356"
+    Task = "(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "357"
+    Task = "(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxGipSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "358"
+    Task = "(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "359"
+    Task = "(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "360"
+    Task = "(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "361"
+    Task        = "(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "362"
+    Task        = "(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "363"
+    Task        = "(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "364"
+    Task        = "(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType        
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "365"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' ."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "366"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "367"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "368"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "369"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "370"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "371"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "372"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "373"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "374"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#SecurityOptions.ps1
new file mode 100644
index 0000000..571931b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#SecurityOptions.ps1	
@@ -0,0 +1,156 @@
+[AuditTest] @{
+    Id = "235"
+    Task = "(ND, NE) Configure 'Accounts: Rename administrator account'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "236"
+    Task = "(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableAdminAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableAdminAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "237"
+    Task = "(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. "
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "238"
+    Task = "(ND, NE) Configure 'Accounts: Rename guest account'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "249"
+    Task = "(ND) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "263"
+    Task = "(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#UserRights.ps1
new file mode 100644
index 0000000..2ffd579
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#UserRights.ps1	
@@ -0,0 +1,1479 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "277"
+    Task = "(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "278"
+    Task = "(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "279"
+    Task = "(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.`n`n"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "280"
+    Task = "(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "281"
+        Task = "(HD) Configure 'Log on as a service'. [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }    
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "281"
+        Task = "(HD) Configure 'Log on as a service'. [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+            
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "282"
+    Task = "(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "283"
+    Task = "(HD) Ensure 'Log on as a batch job' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "284"
+    Task = "(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $missingUsers = @()
+    
+        #save all sids 
+        foreach($sid in $currentUserRights.sid){
+            $currentUserSIDs += $sid
+        }
+        #only these sids have to be in userRight 
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+            "S-1-2-0"
+        ) 
+
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "285"
+    Task = "(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "286"
+    Task = "(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "287"
+    Task = "(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.`n`n"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "288"
+    Task = "(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "289"
+    Task = "(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "290"
+    Task = "(ND, NE) Ensure 'Debug programs' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "291"
+    Task = "(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "292"
+    Task = "(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "293"
+    Task = "(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "294"
+    Task = "(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "295"
+    Task = "(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "296"
+    Task = "(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "297"
+    Task = "(ND, NE) Ensure 'Profile single process' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "298"
+    Task = "(ND, NE) Ensure 'Create a token object' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "299"
+    Task = "(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "300"
+    Task = "(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "301"
+    Task = "(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "302"
+    Task = "(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "303"
+    Task = "(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "304"
+    Task = "(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "305"
+    Task = "(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "306"
+    Task = "(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.`n"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "307"
+    Task = "(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "308"
+    Task = "(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "309"
+    Task = "(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "310"
+    Task = "(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' ."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "311"
+    Task = "(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "312"
+    Task = "(ND, NE) Ensure 'Modify an object label' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "313"
+    Task = "(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "314"
+    Task = "(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "315"
+    Task = "(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. `n`n"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies.ps1
new file mode 100644
index 0000000..b9e59ec
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies.ps1	
@@ -0,0 +1,1502 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "5.1.1.1"
+    Task = "Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1.2"
+    Task = "Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1.3"
+    Task = "Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1.4"
+    Task = "Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1.5"
+    Task = "Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1.6"
+    Task = "Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1.7"
+    Task = "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1.8"
+    Task = "Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.1"
+    Task = "Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.2"
+    Task = "Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.3"
+    Task = "Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.4"
+    Task = "Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.5"
+    Task = "Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.6"
+    Task = "Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.7"
+    Task = "Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.8"
+    Task = "Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1.9"
+    Task = "Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.1"
+    Task = "Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.2"
+    Task = "Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.3"
+    Task = "Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.4"
+    Task = "Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.5"
+    Task = "Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.6"
+    Task = "Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.1.1"
+    Task = "Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.1.2"
+    Task = "Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings.ps1
new file mode 100644
index 0000000..797ad37
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings.ps1	
@@ -0,0 +1,711 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "4.1.1"
+    Task = "Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.2"
+    Task = "Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.1"
+    Task = "Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SYSTEMROOT%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.2"
+    Task = "Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.3"
+    Task = "Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.4"
+    Task = "Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2.1"
+    Task = "Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PrivateProfile\Logging"    
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2.2"
+    Task = "Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2.3"
+    Task = "Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2.4"
+    Task = "Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.3.1"
+    Task = "Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.3.2"
+    Task = "Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.3.3"
+    Task = "Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.3.4"
+    Task = "Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.1.1"
+    Task = "Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.1.1"
+    Task = "Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.1.2"
+    Task = "Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.2.1"
+    Task = "Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.2.2"
+    Task = "Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.3.1"
+    Task = "Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.3.2"
+    Task = "Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.4.1"
+    Task = "Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.4.2"
+    Task = "Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.1"
+    Task = "Ensure 'Include command line in process creation events' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.4.2"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3.4.3"
+    Task = "Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies.ps1
new file mode 100644
index 0000000..b170726
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies.ps1	
@@ -0,0 +1,171 @@
+[AuditTest] @{
+    Id = "200"
+    Task = "(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "201"
+    Task = "(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "202"
+    Task = "(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "203"
+    Task = "(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "204"
+    Task = "(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "205"
+    Task = "(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' ."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AuditPolicies.ps1
new file mode 100644
index 0000000..346e5c7
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AuditPolicies.ps1	
@@ -0,0 +1,77 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings.ps1
new file mode 100644
index 0000000..e1bbaea
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings.ps1	
@@ -0,0 +1,8320 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id   = "1"
+    Task = "(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+            | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2"
+    Task = "(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3"
+    Task = "(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4"
+    Task = "(ND, NE) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+            | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5"
+    Task = "(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6"
+    Task = "(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+            | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "7"
+    Task = "(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableDeadGWDetect" `
+            | Select-Object -ExpandProperty "EnableDeadGWDetect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "8"
+    Task = "(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+            | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9"
+    Task = "(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "10"
+    Task = "(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "12"
+    Task = "(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+            | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "14"
+    Task = "(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+            | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "16"
+    Task = "(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+            | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17"
+    Task = "(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+            | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "20"
+    Task = "(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+            | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "21"
+    Task = "(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NodeType" `
+            | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "22"
+    Task = "(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+            | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "24 A"
+    Task = "(ND, NE) Ensure 'Hardened UNC Paths' is set to `"Require Mutual Authentication=1, `"Require Integrity=1`" for the value names `"\\*\NETLOGON`" und `"\\*\SYSVOL`". [\\*\NETLOGON]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+            | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "24 B"
+    Task = "(ND, NE) Ensure 'Hardened UNC Paths' is set to `"Require Mutual Authentication=1, `"Require Integrity=1`" for the value names `"\\*\NETLOGON`" und `"\\*\SYSVOL`". [\\*\SYSVOL]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+            | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "33"
+    Task = "(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+            | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($null -eq $regValue -or 0 -eq $regValue) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1-3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "34"
+    Task = "(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+            | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "35"
+    Task = "(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+            | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "37"
+    Task = "(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+            | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "39"
+    Task = "(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+            | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "40"
+    Task = "(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+            | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "41"
+    Task = "(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+            | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "44"
+    Task = "(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+            | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "46"
+    Task = "(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+            | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "50"
+    Task = "(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+            | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "52"
+    Task = "(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "53"
+    Task = "(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "54"
+    Task = "(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "55"
+    Task = "(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "56"
+    Task = "(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "57"
+    Task = "(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "59 A"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDs" `
+            | Select-Object -ExpandProperty "DenyDeviceIDs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "59 B"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured. (PCI\CC_0C0A)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs"
+        
+            $expectedValue = "PCI\CC_0C0A"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "59 C"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured. (DenyDeviceIDsRetroactive)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDsRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceIDsRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 A"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+            | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 B"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (Blocking the SBP-2 driver and Thunderbolt controllers to reduce 1394 DMA and Thunderbolt DMA threats to BitLocker)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 C"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (IEEE 1394 Devices That Support the 61883 Protocol)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{7ebefbc0-3200-11d2-b4c2-00a0C9697d07}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 D"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (IEEE 1394 Devices That Support the AVC Protocol)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{c06ff265-ae09-48f0-812c-16753d7cba83}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 E"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (IEEE 1394 Host Bus Controller)"
+    Test = {
+        try {
+            $valueNames = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses"
+        
+            $expectedValue = "{6bdd1fc1-810f-11d0-bec7-08002be2092f}"
+
+            foreach ($obj in $valueNames.PSObject.Properties) {
+                if ($obj.Value -eq $expectedValue) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Registry value is missing: $expectedValue"
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "60 F"
+    Task = "(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured. (DenyDeviceClassesRetroactive)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "61"
+    Task = "(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+            | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "68"
+    Task = "(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+            | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "74"
+    Task = "(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+            | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "81"
+    Task = "(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+            | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "84"
+    Task = "(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+            | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "85"
+    Task = "(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+            | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "86"
+    Task = "(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+            | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "87"
+    Task = "(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+            | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "88"
+    Task = "(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\TPM\BlockedCommands" `
+                -Name "IgnoreDefaultList" `
+            | Select-Object -ExpandProperty "IgnoreDefaultList"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "89"
+    Task = "(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Tpm" `
+                -Name "StandardUserAuthorizationFailureDuration" `
+            | Select-Object -ExpandProperty "StandardUserAuthorizationFailureDuration"
+        
+            if ($regValue -ne 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 30"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "90"
+    Task = "(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Tpm" `
+                -Name "StandardUserAuthorizationFailureIndividualThreshold" `
+            | Select-Object -ExpandProperty "StandardUserAuthorizationFailureIndividualThreshold"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "94"
+    Task = "(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+            | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "95"
+    Task = "(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+            | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "96"
+    Task = "(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "SCRNSAVE.EXE" `
+            | Select-Object -ExpandProperty "SCRNSAVE.EXE"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "97"
+    Task = "(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveActive" `
+            | Select-Object -ExpandProperty "ScreenSaveActive"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "98"
+    Task = "(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaverIsSecure" `
+            | Select-Object -ExpandProperty "ScreenSaverIsSecure"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "99"
+    Task = "(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveTimeOut" `
+            | Select-Object -ExpandProperty "ScreenSaveTimeOut"
+        
+            if (($regValue -gt 900 -or $regValue -le 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x > 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "100 A"
+    Task = "(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "RestrictImplicitTextCollection" `
+            | Select-Object -ExpandProperty "RestrictImplicitTextCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "100 B"
+    Task = "(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "RestrictImplicitInkCollection" `
+            | Select-Object -ExpandProperty "RestrictImplicitInkCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "101"
+    Task = "(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+            | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "102"
+    Task = "(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+            | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "103"
+    Task = "(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+            | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "106"
+    Task = "(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+            | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "107"
+    Task = "(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+            | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "109"
+    Task = "(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+            | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "112"
+    Task = "(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+            | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "113"
+    Task = "(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "114"
+    Task = "(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+            | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "115"
+    Task = "(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+            | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "116"
+    Task = "(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+            | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "117"
+    Task = "(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+            | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "118"
+    Task = "(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+            | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "119"
+    Task = "(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+            | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "120"
+    Task = "(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only] or Enabled: 1 - Basic'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+            | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            $saferClients = @("*Server*", "*Education*", "*Enterprise*")
+            $productname = Get-ComputerInfo | select -ExpandProperty OsName
+            if (($productname -notcontains $saferClients) -and ($regValue -eq 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Your OS $productname does not support 'Diagnostic data off'."
+                    Status  = "Warning"
+                }
+            }
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "121"
+    Task = "(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowDeviceNameInTelemetry" `
+            | Select-Object -ExpandProperty "AllowDeviceNameInTelemetry"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "124"
+    Task = "(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+            | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "126"
+    Task = "(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+            | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "127"
+    Task = "(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+            | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "131"
+    Task = "(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+            | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "134"
+    Task = "(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+            | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "135"
+    Task = "(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+            | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "136"
+    Task = "(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+            | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "137"
+    Task = "(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+            | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "138"
+    Task = "(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+            | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "139"
+    Task = "(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fResetBroken" `
+            | Select-Object -ExpandProperty "fResetBroken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "142"
+    Task = "(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+            | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "143"
+    Task = "(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+            | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "145"
+    Task = "(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+            | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "146"
+    Task = "(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+            | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "147"
+    Task = "(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+            | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "148"
+    Task = "(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+            | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "149"
+    Task = "(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+            | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "152"
+    Task = "(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+            | Select-Object -ExpandProperty "AutoDownload"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "153"
+    Task = "(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableOSUpgrade" `
+            | Select-Object -ExpandProperty "DisableOSUpgrade"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "157"
+    Task = "(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowSearchToUseLocation" `
+            | Select-Object -ExpandProperty "AllowSearchToUseLocation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "158"
+    Task = "(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+            | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "159"
+    Task = "(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\TextInput" `
+                -Name "AllowLinguisticDataCollection" `
+            | Select-Object -ExpandProperty "AllowLinguisticDataCollection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "160"
+    Task = "(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" `
+                -Name "DODownloadMode" `
+            | Select-Object -ExpandProperty "DODownloadMode"
+        
+            if ($regValue -ne 99) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 99"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "161"
+    Task = "(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+            | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "162"
+    Task = "(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+            | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "163"
+    Task = "(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+            | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "164"
+    Task = "(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+            | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "165"
+    Task = "(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+            | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "167"
+    Task = "(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+            | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "168"
+    Task = "(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+            | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "169"
+    Task = "(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+            | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "170"
+    Task = "(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+            | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "171"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 A"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 B"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 C"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 D"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 E"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 F"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 G"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 H"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 I"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 J"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "172 K"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "173"
+    Task = "(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "174"
+    Task = "(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverride" `
+            | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "175"
+    Task = "(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "EnabledV9" `
+            | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "177"
+    Task = "(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "178"
+    Task = "(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+            | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "180"
+    Task = "(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "181"
+    Task = "(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "183"
+    Task = "(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\PowerShell" `
+                -Name "ExecutionPolicy" `
+            | Select-Object -ExpandProperty "ExecutionPolicy"
+        
+            if ($regValue -ne "RemoteSigned") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: RemoteSigned"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "185"
+    Task = "(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+            | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "186"
+    Task = "(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+            | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "187"
+    Task = "(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+            | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "188"
+    Task = "(ND, NE) Ensure 'Remove access to `"Pause updates`" feature' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "SetDisablePauseUXAccess" `
+            | Select-Object -ExpandProperty "SetDisablePauseUXAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "189"
+    Task = "(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+            | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "191"
+    Task = "(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "192"
+    Task = "(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+            | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "193"
+    Task = "(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "194"
+    Task = "(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "196"
+    Task = "(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+            | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "197"
+    Task = "(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "198"
+    Task = "(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+            | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "199"
+    Task = "(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+            | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "209"
+    Task = "(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+            | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "210"
+    Task = "(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+            | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "211"
+    Task = "(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+            | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "212"
+    Task = "(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+            | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "213"
+    Task = "(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+            | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "214"
+    Task = "(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+            | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "215"
+    Task = "(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+            | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "216"
+    Task = "(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+            | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "217"
+    Task = "(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "218"
+    Task = "(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "226"
+    Task = "(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AllocateDASD" `
+            | Select-Object -ExpandProperty "AllocateDASD"
+        
+            if ($regValue -ne "2") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "227"
+    Task = "(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+            | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "229"
+    Task = " Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+            | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "230"
+    Task = "(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+            | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "231"
+    Task = "(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+            | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "234"
+    Task = "(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+            | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "239"
+    Task = "(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+            | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "240"
+    Task = "(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+            | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "241"
+    Task = "(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "242"
+    Task = "(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "243"
+    Task = "(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+            | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "244"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+            | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "245"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "246"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. "
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "247"
+    Task = "(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+            | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "252"
+    Task = "(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+            | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "253"
+    Task = "(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "254"
+    Task = "(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+            | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "255"
+    Task = "(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+            | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "256"
+    Task = "(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+            | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "257"
+    Task = "(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+            | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "258"
+    Task = "(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+            | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "259"
+    Task = "(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+            | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if (($regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "260"
+    Task = "(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+            | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "261"
+    Task = "(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+            | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "262"
+    Task = "(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+            | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "264"
+    Task = "(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+            | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "265"
+    Task = "(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+            | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "266"
+    Task = "(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+            | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "267"
+    Task = "(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+            | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "268"
+    Task = "(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+            | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "269"
+    Task = "(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+            | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "270"
+    Task = "(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "271"
+    Task = "(ND, NE) Configure 'Network access: Remotely accessible registry paths'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "272"
+    Task = "(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+            | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "275"
+    Task = "(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+            | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "276"
+    Task = "(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+            | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "317"
+    Task = "(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'."
+    Test = {
+        try {
+            $status = Get-Service DiagTrack -ErrorAction Stop | select -property starttype
+            if ($status.StartType -ne "Disabled") {
+                return @{
+                    Message = "Service not compliant. Currently: $($status)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        catch [System.SystemException] {
+            return @{
+                Message = "Service not found!"
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "320"
+    Task = "(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "321"
+    Task = "(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "323"
+    Task = "(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "324"
+    Task = "(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\irmon" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "326"
+    Task = "(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $result = Get-WindowsOptionalFeature -online -FeatureName Microsoft-Windows-Subsystem-Linux
+            $state = $result.State            
+            if ($state -eq "Disabled" -or $state -eq "Not Installed") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            else {
+                return @{
+                    Message = "Registry value is '$state'. Expected: 'Disabled' or 'Not Installed'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Value not found."
+                Status  = "Error"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "328"
+    Task = "(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FTPSVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "331"
+    Task = "(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshd" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "338"
+    Task = "(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "339"
+    Task = "(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "341"
+    Task = "(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\simptcp" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "343"
+    Task = "(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "345"
+    Task = "(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "348"
+    Task = "(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "349"
+    Task = "(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "351"
+    Task = "(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "356"
+    Task = "(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "357"
+    Task = "(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxGipSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "358"
+    Task = "(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "359"
+    Task = "(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "360"
+    Task = "(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "365"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' ."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "366"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "367"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "368"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "369"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "370"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "371"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "372"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "373"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "374"
+    Task = "(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions.ps1
new file mode 100644
index 0000000..0f51558
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions.ps1	
@@ -0,0 +1,130 @@
+[AuditTest] @{
+    Id = "235"
+    Task = "(ND, NE) Configure 'Accounts: Rename administrator account'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "236"
+    Task = "(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableAdminAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableAdminAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "237"
+    Task = "(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. "
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "238"
+    Task = "(ND, NE) Configure 'Accounts: Rename guest account'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "263"
+    Task = "(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights.ps1
new file mode 100644
index 0000000..b0a00fd
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights.ps1	
@@ -0,0 +1,1385 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "277"
+    Task = "(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "278"
+    Task = "(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "279"
+    Task = "(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "280"
+    Task = "(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "282"
+    Task = "(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "284"
+    Task = "(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $missingUsers = @()
+    
+        #save all sids 
+        foreach($sid in $currentUserRights.sid){
+            $currentUserSIDs += $sid
+        }
+        #only these sids have to be in userRight 
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+            "S-1-2-0"
+        ) 
+
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "285"
+    Task = "(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "286"
+    Task = "(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "287"
+    Task = "(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "288"
+    Task = "(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "289"
+    Task = "(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "290"
+    Task = "(ND, NE) Ensure 'Debug programs' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "291"
+    Task = "(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "292"
+    Task = "(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "294"
+    Task = "(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "295"
+    Task = "(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "296"
+    Task = "(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "297"
+    Task = "(ND, NE) Ensure 'Profile single process' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "298"
+    Task = "(ND, NE) Ensure 'Create a token object' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "299"
+    Task = "(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "300"
+        Task = "(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'. [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+            
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "300"
+        Task = "(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators,  NT Virtual Machine'. [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+            
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "301"
+    Task = "(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "302"
+    Task = "(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "303"
+    Task = "(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "304"
+    Task = "(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "305"
+    Task = "(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "306"
+    Task = "(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "307"
+    Task = "(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "308"
+    Task = "(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "309"
+    Task = "(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "310"
+    Task = "(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' ."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "311"
+    Task = "(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "312"
+    Task = "(ND, NE) Ensure 'Modify an object label' is set to 'No One'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "313"
+    Task = "(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "314"
+    Task = "(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "315"
+    Task = "(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. "
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-7"
+            "S-1-5-32-546"
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings.ps1
new file mode 100644
index 0000000..85c7f0d
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings.ps1	
@@ -0,0 +1,289 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+if((Get-WmiObject -class Win32_OperatingSystem).Caption -eq "Microsoft Windows 10 Enterprise Evaluation" -or 
+(Get-WmiObject -class Win32_OperatingSystem).Caption -eq "Microsoft Windows 10 Enterprise"){
+    [AuditTest] @{
+        Id = "3.1.1"
+        Task = "Configuration of the lowest possible telemetry-level (Enterprise Windows 10)"
+        Test = {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                    -Name "AllowTelemetry" `
+                    | Select-Object -ExpandProperty "AllowTelemetry"
+            
+                if ($regValue -ne 0) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 0"
+                        Status = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "3.1.1"
+        Task = "Configuration of the lowest possible telemetry-level (Non-Enterprise Windows 10)"
+        Test = {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                    -Name "AllowTelemetry" `
+                    | Select-Object -ExpandProperty "AllowTelemetry"
+            
+                $saferClients = @("*Server*","*Education*","*Enterprise*")
+                $productname = Get-ComputerInfo | select -ExpandProperty OsName
+                if (($productname -notcontains $saferClients) -and ($regValue -eq 1)){
+                    return @{
+                        Message = "Registry value is '$regValue'. Your OS $productname does not support 'Diagnostic data off'."
+                        Status = "Warning"
+                    }
+                }
+    
+                if ($regValue -ne 0) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 0"
+                        Status = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.2 A"
+    Task = "Deactivation of the telemetry service and ETW-sessions - disable service DiagTrack"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.2 B"
+    Task = "Deactivation of the telemetry service and ETW-sessions - disable service Autologger-Diagtrack-Listener"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\AutoLogger-Diagtrack-Listener" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.3 A"
+    Task = "Deactivation of telemetry according to Microsoft - Disable Windows Update Service"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.3 B"
+    Task = "Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: disable MAPS"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.3 C"
+    Task = "Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: never send sample files"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+                | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AccountPolicies.ps1
new file mode 100644
index 0000000..3819cd2
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AccountPolicies.ps1	
@@ -0,0 +1,199 @@
+[AuditTest] @{
+    Id = "Medium-001"
+    Task = "Ensure 'Account lockout duration' is set to 0"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -ne 0)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x == 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-002"
+    Task = "Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-003"
+    Task = " Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -ne 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x == 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-146"
+    Task = "Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-147"
+    Task = "Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-148"
+    Task = "Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-149"
+    Task = "Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AuditPolicies.ps1
new file mode 100644
index 0000000..b303f1b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#AuditPolicies.ps1	
@@ -0,0 +1,1217 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "Medium-041"
+    Task = "Ensure 'Audit Computer Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-042"
+    Task = "Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-043"
+    Task = "Ensure 'Audit Security Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-044"
+    Task = "Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-045"
+    Task = "Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-046"
+    Task = "Ensure 'Audit Process Termination' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Process Termination
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Termination"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Termination'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-047"
+    Task = "Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-048"
+    Task = "Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-049"
+    Task = "Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-050"
+    Task = "Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-051"
+    Task = "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-052"
+    Task = "Ensure 'Audit Special Logon' is set to 'Success and Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-053"
+    Task = "Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-054"
+    Task = "Ensure 'Audit File System' is set to 'Success and Failure'."
+    Test = {
+        # Get the audit policy for the subcategory File System
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File System"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File System'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-055"
+    Task = "Ensure 'Audit Kernel Object' is set to 'Success and Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Kernel Object
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kernel Object"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kernel Object'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-056"
+    Task = "Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-057"
+    Task = "Ensure 'Audit Registry' is set to 'Success and Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Registry
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Registry"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Registry'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-058"
+    Task = "Ensure 'Audit Audit Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-059"
+    Task = "Ensure 'Audit Other Policy Change Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-060"
+    Task = "Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#RegistrySettings.ps1
new file mode 100644
index 0000000..0bacceb
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#RegistrySettings.ps1	
@@ -0,0 +1,12743 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+[AuditTest] @{
+    Id   = "High-001 A"
+    Task = "Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }            
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+            
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 B"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 C"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 D"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 E"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 F"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 G"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                   
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 H"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 I"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block executable files from running unless they meet a prevalence, age, or trusted list criterion'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "01443614-CD74-433A-B99E-2ECDC07BFC25"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "01443614-CD74-433A-B99E-2ECDC07BFC25"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 J"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Use advanced protection against ransomware'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "c1db55ab-c21a-4637-bb3f-a12568109d35"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "c1db55ab-c21a-4637-bb3f-a12568109d35"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 K"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe))'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 L"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block process creations originating from PSExec and WMI commands)"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "D1E49AAC-8F56-4280-B9BA-993A6D77406C"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "D1E49AAC-8F56-4280-B9BA-993A6D77406C"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 M"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB' is configured"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 N"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 O"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-001 P"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-002"
+    Task = "Ensure 'Interactive logon' is configured 'Number of previous logons to cache (in case domain controller is not available)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+            | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-003"
+    Task = "Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+            | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-004"
+    Task = "Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-005 A"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+            | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-005 B"
+    Task = "Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot and DMA Protection'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+            | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-005 C"
+    Task = "Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+            | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-006"
+    Task = "Ensure 'Configure allowed applications' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" `
+                -Name "ExploitGuard_ControlledFolderAccess_AllowedApplications" `
+            | Select-Object -ExpandProperty "ExploitGuard_ControlledFolderAccess_AllowedApplications"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-007"
+    Task = "Ensure 'Configure Controlled folder access' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" `
+                -Name "EnableControlledFolderAccess" `
+            | Select-Object -ExpandProperty "EnableControlledFolderAccess"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-008 A"
+    Task = "Ensure 'Configure protected folders' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" `
+                -Name "ExploitGuard_ControlledFolderAccess_ProtectedFolders" `
+            | Select-Object -ExpandProperty "ExploitGuard_ControlledFolderAccess_ProtectedFolders"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-008 B"
+    Task = "Ensure 'Configure protected folders' is set to 'Enter the folders that should be guarded'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access\ProtectedFolders" `
+                -Name "2" `
+            | Select-Object -ExpandProperty "2"
+        
+            if ($regValue -ne "*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: *"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-009"
+    Task = "Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+            | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-010"
+    Task = "Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+            | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-011"
+    Task = "Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+            | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-012"
+    Task = "Ensure 'Enumerate administrator accounts on elevation' is set 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrator" `
+            | Select-Object -ExpandProperty "EnumerateAdministrator"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-013"
+    Task = "Ensure 'Require trusted path for credential entry' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnableSecureCredentialPrompting" `
+            | Select-Object -ExpandProperty "EnableSecureCredentialPrompting"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-014"
+    Task = "Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "NoLocalPasswordResetQuestions" `
+            | Select-Object -ExpandProperty "NoLocalPasswordResetQuestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-015"
+    Task = "Ensure 'Disable or enable software Secure Attention Sequence' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "SoftwareSASGeneration" `
+            | Select-Object -ExpandProperty "SoftwareSASGeneration"
+        
+            return @{
+                Message = "Registry value found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-016"
+    Task = "Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+            | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-017"
+    Task = "Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+            | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-018"
+    Task = "Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good and unknown'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+            | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-019"
+    Task = "Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+            | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-020"
+    Task = "Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+            | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-021"
+    Task = "Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-022"
+    Task = "Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-023"
+    Task = "Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+            | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-024"
+    Task = "Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+            | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-025"
+    Task = "Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+            | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-026"
+    Task = "Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+            | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-027"
+    Task = "Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+            | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-028 A"
+    Task = "Ensure 'Use a common set of exploit protection settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender ExploitGuard\Exploit Protection" `
+                -Name "ExploitProtectionSettings" `
+            | Select-Object -ExpandProperty "ExploitProtectionSettings"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-028 B"
+    Task = "Ensure 'Use a common set of exploit protection settings' is configured 'Type the location (local path, UNC path, or URL) of the mitigation settings configuration XML file'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender ExploitGuard\Exploit Protection" `
+                -Name "ExploitProtectionSettings" `
+            | Select-Object -ExpandProperty "ExploitProtectionSettings"
+        
+            if ($regValue -ne "*") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: *"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-029"
+    Task = "Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+            | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-030"
+    Task = "Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+            | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-031"
+    Task = "Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+            | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-033"
+    Task = "Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+            | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-034"
+    Task = "Ensure 'Allow download restrictions' is set to 'Enabled: Block potentially dangerous downloads'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "DownloadRestrictions" `
+            | Select-Object -ExpandProperty "DownloadRestrictions"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-035"
+    Task = "Ensure 'Configure Do Not Track' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main" `
+                -Name "DoNotTrack" `
+            | Select-Object -ExpandProperty "DoNotTrack"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-036"
+    Task = "Ensure 'Control the mode of DNS-over-HTTPS' is set to 'Enabled': 'Disable DNS-over-HTTPS'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "DnsOverHttpsMode" `
+            | Select-Object -ExpandProperty "DnsOverHttpsMode"
+        
+            if ($regValue -ne "off") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: off"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-037"
+    Task = "Ensure 'Control where developer tools can be used' is configured 'Control where developer tools can be used'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "DeveloperToolsAvailability" `
+            | Select-Object -ExpandProperty "DeveloperToolsAvailability"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-038"
+    Task = "Ensure 'DNS interception checks enabled' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "DNSInterceptionChecksEnabled" `
+            | Select-Object -ExpandProperty "DNSInterceptionChecksEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-039"
+    Task = "Ensure 'Default pop-up window setting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "DefaultPopupsSetting" `
+            | Select-Object -ExpandProperty "DefaultPopupsSetting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-040"
+    Task = "Ensure 'Enable saving passwords to the password manager' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge\Recommended" `
+                -Name "PasswordManagerEnabled" `
+            | Select-Object -ExpandProperty "PasswordManagerEnabled"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-041"
+    Task = "Ensure 'Configure Microsoft Defender SmartScreen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "SmartScreenEnabled" `
+            | Select-Object -ExpandProperty "SmartScreenEnabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-042"
+    Task = "Ensure 'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge" `
+                -Name "PreventSmartScreenPromptOverride" `
+            | Select-Object -ExpandProperty "PreventSmartScreenPromptOverride"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-043"
+    Task = "Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge" `
+                -Name "PreventSmartScreenPromptOverrideForFiles" `
+            | Select-Object -ExpandProperty "PreventSmartScreenPromptOverrideForFiles"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-044"
+    Task = "Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+            | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-045"
+    Task = "Ensure 'Turn on Windows Defender Application Guard in Enterprise Mode' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowAppHVSI_ProviderSet" `
+            | Select-Object -ExpandProperty "AllowAppHVSI_ProviderSet"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-046"
+    Task = "Ensure 'Use the Enterprise Mode IE website list' is set to 'Enabled': 'Type the location (URL) of your Enterprise Mode IE website list'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode" `
+                -Name "SiteList" `
+            | Select-Object -ExpandProperty "SiteList"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-047"
+    Task = "Ensure 'Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode" `
+                -Name "RestrictIE" `
+            | Select-Object -ExpandProperty "RestrictIE"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-048"
+    Task = "Ensure 'Allow Automatic Updates immediate installation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "AutoInstallMinorUpdates" `
+            | Select-Object -ExpandProperty "AutoInstallMinorUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-049 A"
+    Task = "Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+            | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-049 B"
+    Task = " Ensure 'Configure Automatic Updates' is set to '4 - Auto download and schedule the install'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "AUOptions" `
+            | Select-Object -ExpandProperty "AUOptions"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-049 C"
+    Task = "Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+            | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-049 D"
+    Task = "Ensure 'Configure Automatic Updates' is configured 'Install updates for other Microsoft products'"
+    Test = {
+        try {
+            $regValue1 = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services" `
+                -Name "DefaultService" `
+            | Select-Object -ExpandProperty "DefaultService"
+            $regValue2 = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\7971F918-A847-4430-9279-4A52D1EFE18D" `
+                -Name "RegisteredWithAU" `
+            | Select-Object -ExpandProperty "RegisteredWithAU"
+            if ($regValue1 -eq "7971f918-a847-4430-9279-4a52d1efe18d" -and $regValue2 -eq 1) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException], [System.Management.Automation.ItemNotFoundException] {
+            try {
+                $regValue3 = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                    -Name "AllowMUUpdateService" `
+                | Select-Object -ExpandProperty "AllowMUUpdateService"
+                $regValue4 = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                    -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+                if ($regValue3 -eq 1 -and $regValue4 -eq 0) {
+                    return @{
+                        Message = "Compliant"
+                        Status  = "True"
+                    }
+                }
+            }    
+            catch [System.Management.Automation.PSArgumentException], [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "At least one of the following ways aren't configured correctly. <br>
+                    Configure these to paths to get compliance: <br>
+                    HKEY_LOCAL_MACHINE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services:DefaultService = 7971f918-a847-4430-9279-4a52d1efe18d <br>
+                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\7971F918-A847-4430-9279-4A52D1EFE18D:RegisteredWithAU = 1 <br>
+                    OR configure these: <br>
+                    HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU:AllowMUUpdateService = 1 <br>
+                    HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU:NoAutoUpdate = 0
+                    "
+                    Status  = "False"
+                }
+            }        
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-050"
+    Task = "Ensure 'Do not include drivers with Windows Updates' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ExcludeWUDriversInQualityUpdate" `
+            | Select-Object -ExpandProperty "ExcludeWUDriversInQualityUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-051"
+    Task = "Ensure 'Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "AUPowerManagement" `
+            | Select-Object -ExpandProperty "AUPowerManagement"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-052"
+    Task = "Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+            | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-053"
+    Task = "Ensure 'Remove access to use all Windows Update features' is disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate" `
+                -Name "DisableWindowsUpdateAccess" `
+            | Select-Object -ExpandProperty "DisableWindowsUpdateAccess"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-054"
+    Task = "Ensure 'Turn on recommended updates via Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "IncludeRecommendedUpdates" `
+            | Select-Object -ExpandProperty "IncludeRecommendedUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "High-055"
+    Task = "Ensure 'Specify intranet Microsoft update service location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "UseWUServer" `
+            | Select-Object -ExpandProperty "UseWUServer"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-004"
+    Task = "Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+            | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-006"
+    Task = "Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+            | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-007"
+    Task = "Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+            | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-008"
+    Task = "Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+            | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-009"
+    Task = "Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+            | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-010"
+    Task = "Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+            | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-011"
+    Task = "Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+            | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-012"
+    Task = "Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+            | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-015"
+    Task = "Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+            | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-016"
+    Task = "Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+            | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-017"
+    Task = "Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "DisableBlockAtFirstSeen" `
+            | Select-Object -ExpandProperty "DisableBlockAtFirstSeen"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-018"
+    Task = "Ensure 'Join Microsoft MAPS' is set to 'Enabled': 'Advanced MAPS'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+            | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-019"
+    Task = "Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+            | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-020"
+    Task = "Ensure 'Configure extended cloud check' is set to 'Enabled' and set to '50'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "MpBafsExtendedTimeout" `
+            | Select-Object -ExpandProperty "MpBafsExtendedTimeout"
+        
+            if ($regValue -ne 50) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 50"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-021"
+    Task = "Ensure 'Select cloud protection level' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "MpCloudBlockLevel" `
+            | Select-Object -ExpandProperty "MpCloudBlockLevel"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-022"
+    Task = "Ensure 'Configure removal of items from Quarantine folder' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Quarantine" `
+                -Name "PurgeItemsAfterDelay" `
+            | Select-Object -ExpandProperty "PurgeItemsAfterDelay"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-023"
+    Task = "Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+            | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-024"
+    Task = "Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+            | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-025"
+    Task = "Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+            | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-026"
+    Task = " Ensure 'Turn on process scanning whenever real-time protection is enabled' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScanOnRealtimeEnable" `
+            | Select-Object -ExpandProperty "DisableScanOnRealtimeEnable"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-027"
+    Task = "Ensure 'Allow users to pause scan' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Microsoft Antimalware\Scan" `
+                -Name "AllowPause" `
+            | Select-Object -ExpandProperty "AllowPause"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-028"
+    Task = "Ensure 'Check for the latest virus and spyware definitions before running a scheduled scan' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Microsoft Antimalware\Scan" `
+                -Name "CheckForSignaturesBeforeRunningScan" `
+            | Select-Object -ExpandProperty "CheckForSignaturesBeforeRunningScan"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-029"
+    Task = "Ensure 'Scan archive files' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableArchiveScanning" `
+            | Select-Object -ExpandProperty "DisableArchiveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-030"
+    Task = "Ensure 'Scan packed executables' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Microsoft Antimalware\Scan" `
+                -Name "DisablePackedExeScanning" `
+            | Select-Object -ExpandProperty "DisablePackedExeScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-031"
+    Task = "Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+            | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-032"
+    Task = "Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+            | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-033"
+    Task = "Ensure 'Turn on heuristics' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableHeuristics" `
+            | Select-Object -ExpandProperty "DisableHeuristics"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-034"
+    Task = "Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+            | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-035"
+    Task = "Ensure 'Hide mechanisms to remove zone information' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "HideZoneInfoOnProperties" `
+            | Select-Object -ExpandProperty "HideZoneInfoOnProperties"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-036"
+    Task = "Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+            | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-037"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is configured 'Maximum Log Size (KB): 65536' (Application)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -ne 65536)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 65536"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-038"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '2097152' (Security)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 2097152) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2097152"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-039"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is configured 'Maximum Log Size (KB): 65536' (System)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -ne 65536)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 65536"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-061"
+    Task = "Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+            | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-062"
+    Task = "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+            | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-063"
+    Task = "Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+            | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-064"
+    Task = "Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+            | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-065"
+    Task = "Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+            | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-066"
+    Task = "Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+            | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-067"
+    Task = "Ensure 'Route all traffic through the internal network' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" `
+                -Name "Force_Tunneling" `
+            | Select-Object -ExpandProperty "Force_Tunneling"
+        
+            if ($regValue -ne "Enabled") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Enabled"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-068"
+    Task = "Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+            | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-070"
+    Task = "Ensure 'Remove CD Burning features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoCDBurning" `
+            | Select-Object -ExpandProperty "NoCDBurning"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-071"
+    Task = "Ensure 'Prevent access to the command prompt' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableCMD" `
+            | Select-Object -ExpandProperty "DisableCMD"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-072 A"
+    Task = "Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDs" `
+            | Select-Object -ExpandProperty "DenyDeviceIDs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-072 B"
+    Task = "Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Prevent installation of devices that match any of these Device IDs: PCI\CC_0C0010'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" `
+                -Name "3" `
+            | Select-Object -ExpandProperty "3"
+        
+            if ($regValue -ne "PCI\CC_0C0010") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PCI\CC_0C0010"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-072 C"
+    Task = "Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Prevent installation of devices that match any of these Device IDs: PCI\CC_0C0A'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" `
+                -Name "5" `
+            | Select-Object -ExpandProperty "5"
+        
+            if ($regValue -ne "PCI\CC_0C0A") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PCI\CC_0C0A"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-072 D"
+    Task = "Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Also apply to matching devices that are already installed'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDsRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceIDsRetroactive"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-073 A"
+    Task = "Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+            | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-073 B"
+    Task = "Prevent installation of devices using drivers that match these device setup classes: 'Prevent installation of devices using drivers for these device setup classes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "4" `
+            | Select-Object -ExpandProperty "4"
+        
+            if ($regValue -ne "{d48179be-ec20-11d1-b6b8-00c04fa372a7}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-073 C"
+    Task = "Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured 'Also apply to matching devices that are already installed.'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-074 A"
+    Task = "Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled': 'XTS-AES 128-bit'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EncryptionMethodWithXtsOs" `
+            | Select-Object -ExpandProperty "EncryptionMethodWithXtsOs"
+        
+            if (($regValue -ne 6)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 6"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-074 B"
+    Task = "Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'XTS-AES 128-bit'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EncryptionMethodWithXtsFdv" `
+            | Select-Object -ExpandProperty "EncryptionMethodWithXtsFdv"
+        
+            if (($regValue -ne 6)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 6"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-074 C"
+    Task = "Ensure 'Select the encryption method for removable data drives' is configured 'XTS-AES 128-bit'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EncryptionMethodWithXtsRdv" `
+            | Select-Object -ExpandProperty "EncryptionMethodWithXtsRdv"
+        
+            if (($regValue -ne 6)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 6"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-075"
+    Task = "Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "DisableExternalDMAUnderLock" `
+            | Select-Object -ExpandProperty "DisableExternalDMAUnderLock"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-076"
+    Task = "Ensure 'Prevent memory overwrite on restart' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "MorBehavior" `
+            | Select-Object -ExpandProperty "MorBehavior"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 A"
+    Task = "Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecovery" `
+            | Select-Object -ExpandProperty "FDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 B"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Allow data recovery agent'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVManageDRA" `
+            | Select-Object -ExpandProperty "FDVManageDRA"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 C"
+    Task = "Ensure 'Configure user storage of BitLocker recovery information' is set to 'Allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryPassword" `
+            | Select-Object -ExpandProperty "FDVRecoveryPassword"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 D"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryKey" `
+            | Select-Object -ExpandProperty "FDVRecoveryKey"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 E"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Omit recovery options from the BitLocker setup wizard'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHideRecoveryPage" `
+            | Select-Object -ExpandProperty "FDVHideRecoveryPage"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 F"
+    Task = "Ensure 'Configure storage of BitLocker recovery information to AD DS' is set to 'Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "FDVActiveDirectoryInfoToStore"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 G"
+    Task = "Ensure 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "FDVRequireActiveDirectoryBackup"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-077 H"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Save BitLocker recovery information to AD DS for fixed data drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "FDVActiveDirectoryBackup"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-078 A"
+    Task = "Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVPassphrase" `
+            | Select-Object -ExpandProperty "FDVPassphrase"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-078 B"
+    Task = "Ensure 'Require password for fixed data drive' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVEnforcePassphrase" `
+            | Select-Object -ExpandProperty "FDVEnforcePassphrase"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-078 C"
+    Task = "Ensure 'Configure password complexity for fixed data drives' is set to 'Require password complexity'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVPassphraseComplexity" `
+            | Select-Object -ExpandProperty "FDVPassphraseComplexity"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-078 D"
+    Task = "Ensure 'Minimum password length for fixed data drive' is set to 14."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVPassphraseLength" `
+            | Select-Object -ExpandProperty "FDVPassphraseLength"
+        
+            if (($regValue -ne 14)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 14"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-079"
+    Task = "Ensure 'Deny write access to fixed drives not protected by BitLocker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "FDVDenyWriteAccess" `
+            | Select-Object -ExpandProperty "FDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-080"
+    Task = "Ensure 'Enforce drive encryption type on fixed data drives' is set to 'Enabled' and 'Full encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVEncryptionType" `
+            | Select-Object -ExpandProperty "FDVEncryptionType"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-081"
+    Task = "Ensure 'Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSEnablePreBootPinExceptionOnDECapableDevice" `
+            | Select-Object -ExpandProperty "OSEnablePreBootPinExceptionOnDECapableDevice"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-082"
+    Task = "Ensure 'Allow enhanced PINs for startup' is set 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+            | Select-Object -ExpandProperty "UseEnhancedPin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-083"
+    Task = "Ensure 'Allow network unlock at startup' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSManageNKP" `
+            | Select-Object -ExpandProperty "OSManageNKP"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-084"
+    Task = "Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSAllowSecureBootForIntegrity" `
+            | Select-Object -ExpandProperty "OSAllowSecureBootForIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-085 A"
+    Task = "Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecovery" `
+            | Select-Object -ExpandProperty "OSRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-085 B"
+    Task = "Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Allow data recovery agent'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSManageDRA" `
+            | Select-Object -ExpandProperty "OSManageDRA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-085 C"
+    Task = "Ensure 'When using ‘BitLocker Management Solution', the `"Save BitLocker recovery information to AD DS for operating system drive`" option should be unchecked' is set to 'Omit recovery options from the BitLocker setup wizard'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHideRecoveryPage" `
+            | Select-Object -ExpandProperty "OSHideRecoveryPage"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-085 D"
+    Task = "Ensure 'Save BitLocker recovery information to AD DS for operating system drives' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "OSActiveDirectoryBackup"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-085 E"
+    Task = "Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives (Enabled)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "OSRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-086"
+    Task = "Ensure 'Configure minimum PIN length for startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "MinimumPIN" `
+            | Select-Object -ExpandProperty "MinimumPIN"
+        
+            if ($regValue -ne 14) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 14"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-087 A"
+    Task = "Ensure 'Configure use of passwords for operating system drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSPassphrase" `
+            | Select-Object -ExpandProperty "OSPassphrase"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-087 B"
+    Task = "Ensure 'Minimum password length for operating system drive' is set to 14."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSPassphraseLength" `
+            | Select-Object -ExpandProperty "OSPassphraseLength"
+        
+            if (($regValue -ne 14)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 14"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-087 C"
+    Task = "Ensure 'Configure use of passwords for operating system drives' is set to 'Require password complexity'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSPassphraseComplexity" `
+            | Select-Object -ExpandProperty "OSPassphraseComplexity"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-088"
+    Task = "Ensure 'Disallow standard users from changing the PIN or password' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "DisallowStandardUserPINReset" `
+            | Select-Object -ExpandProperty "DisallowStandardUserPINReset"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-089"
+    Task = "Ensure 'Enforce drive encryption type on operating system drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSEncryptionType" `
+            | Select-Object -ExpandProperty "OSEncryptionType"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-090 A"
+    Task = "Ensure 'Require additional authentication at startup' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseAdvancedStartup" `
+            | Select-Object -ExpandProperty "UseAdvancedStartup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-090 B"
+    Task = "Ensure 'Require additional authentication at startup' set to 'Allow BitLocker without a compatible TPM'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EnableBDEWithNoTPM" `
+            | Select-Object -ExpandProperty "EnableBDEWithNoTPM"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-090 C"
+    Task = "Ensure 'Require additional authentication at startup' set to 'Do not allow TPM'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPM" `
+            | Select-Object -ExpandProperty "UseTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-090 D"
+    Task = "Ensure 'Configure TPM startup PIN' is set to 'Allow startup PIN with TPM'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMPIN" `
+            | Select-Object -ExpandProperty "UseTPMPIN"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-090 E"
+    Task = "Ensure 'Configure TPM startup key' is set so 'Allow startup key with TPM'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKey" `
+            | Select-Object -ExpandProperty "UseTPMKey"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-090 F"
+    Task = "Ensure 'Configure TPM startup key and PIN' is set to 'Allow startup key and PIN with TPM'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKeyPIN" `
+            | Select-Object -ExpandProperty "UseTPMKeyPIN"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-091"
+    Task = "Ensure 'Reset platform validation data after BitLocker recovery' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "TPMAutoReseal" `
+            | Select-Object -ExpandProperty "TPMAutoReseal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 A"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecovery" `
+            | Select-Object -ExpandProperty "RDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 B"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Allow data recovery agent'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVManageDRA" `
+            | Select-Object -ExpandProperty "RDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 C"
+    Task = "Ensure 'Configure user storage of BitLocker recovery information' is set to 'Allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\HKEY_LOCAL_MACHINE" `
+                -Name "RDVRecoveryPassword" `
+            | Select-Object -ExpandProperty "RDVRecoveryPassword"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 D"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryKey" `
+            | Select-Object -ExpandProperty "RDVRecoveryKey"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 E"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (True)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHideRecoveryPage" `
+            | Select-Object -ExpandProperty "RDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 F"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Save BitLocker recovery information to AD DS for removable data drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "RDVActiveDirectoryBackup"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 G"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "RDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-092 H"
+    Task = "Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "RDVRequireActiveDirectoryBackup"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-093 A"
+    Task = "Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVPassphrase" `
+            | Select-Object -ExpandProperty "RDVPassphrase"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-093 B"
+    Task = "Ensure 'Configure use of passwords for removable data drives' is set to 'Require password for removable data drive'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVEnforcePassphrase" `
+            | Select-Object -ExpandProperty "RDVEnforcePassphrase"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-093 C"
+    Task = "Ensure 'Configure use of passwords for removable data drives' is set to 'Configure password complexity for removable data drives: Require password complexity'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVPassphraseComplexity" `
+            | Select-Object -ExpandProperty "RDVPassphraseComplexity"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-093 D"
+    Task = "Ensure 'Configure use of passwords for removable data drives' is set to 'Minimum password length for removable data drive: 14'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVPassphraseLength" `
+            | Select-Object -ExpandProperty "RDVPassphraseLength"
+        
+            if (($regValue -ne 14)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 14"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-094 A"
+    Task = "Ensure 'Control use of BitLocker on removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVConfigureBDE" `
+            | Select-Object -ExpandProperty "RDVConfigureBDE"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-094 B"
+    Task = "Ensure 'Control use of BitLocker on removable drives' is set to 'Allow users to suspend and decrypt BitLocker protection on removable data drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVDisableBDE" `
+            | Select-Object -ExpandProperty "RDVDisableBDE"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-095"
+    Task = "Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+            | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-096"
+    Task = "Ensure 'Enforce drive encryption type on removable data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVEncryptionType" `
+            | Select-Object -ExpandProperty "RDVEncryptionType"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-097"
+    Task = "Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MaxDevicePasswordFailedAttempts" `
+            | Select-Object -ExpandProperty "MaxDevicePasswordFailedAttempts"
+        
+            if (($regValue -gt 10 -or $regValue -le 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 10 and x > 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-098"
+    Task = "Ensure 'All Removable Storage classes: Deny all access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices" `
+                -Name "Deny_All" `
+            | Select-Object -ExpandProperty "Deny_All"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-099"
+    Task = "Ensure 'CD and DVD: Deny execute access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Execute" `
+            | Select-Object -ExpandProperty "Deny_Execute"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-100"
+    Task = "Ensure 'CD and DVD: Deny read access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Read" `
+            | Select-Object -ExpandProperty "Deny_Read"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-101"
+    Task = "Ensure 'CD and DVD: Deny write access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Write" `
+            | Select-Object -ExpandProperty "Deny_Write"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-102"
+    Task = "Ensure 'Custom Classes: Deny read access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read" `
+                -Name "Deny_Read" `
+            | Select-Object -ExpandProperty "Deny_Read"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-103"
+    Task = "Ensure 'Custom Classes: Deny write access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write" `
+                -Name "Deny_Write" `
+            | Select-Object -ExpandProperty "Deny_Write"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-104"
+    Task = " Ensure 'Floppy Drives: Deny execute access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Execute" `
+            | Select-Object -ExpandProperty "Deny_Execute"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-105"
+    Task = " Ensure 'Floppy Drives: Deny read access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Read" `
+            | Select-Object -ExpandProperty "Deny_Read"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-106"
+    Task = " Ensure 'Floppy Drives: Deny write access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Write" `
+            | Select-Object -ExpandProperty "Deny_Write"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-107"
+    Task = "Ensure 'Removable Disks: Deny execute access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Execute" `
+            | Select-Object -ExpandProperty "Deny_Execute"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-108"
+    Task = " Ensure 'Removable Disks: Deny read access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Read" `
+            | Select-Object -ExpandProperty "Deny_Read"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-109"
+    Task = " Ensure 'Removable Disks: Deny write access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Write" `
+            | Select-Object -ExpandProperty "Deny_Write"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-110"
+    Task = "Ensure 'Tape Drives: Deny execute access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Execute" `
+            | Select-Object -ExpandProperty "Deny_Execute"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-111"
+    Task = "Ensure 'Tape Drives: Deny read access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Read" `
+            | Select-Object -ExpandProperty "Deny_Read"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-112"
+    Task = " Ensure 'Tape Drives: Deny write access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}" `
+                -Name "Deny_Write" `
+            | Select-Object -ExpandProperty "Deny_Write"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-113 A"
+    Task = " Ensure 'WPD Devices: Deny read access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}" `
+                -Name "Deny_Read" `
+            | Select-Object -ExpandProperty "Deny_Read"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-113 B"
+    Task = " Ensure 'WPD Devices: Deny read access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}" `
+                -Name "Deny_Read" `
+            | Select-Object -ExpandProperty "Deny_Read"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-114 A"
+    Task = "Ensure 'WPD Devices: Deny write access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}" `
+                -Name "Deny_Write" `
+            | Select-Object -ExpandProperty "Deny_Write"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-114 B"
+    Task = "Ensure 'WPD Devices: Deny write access' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{F33FDC04-D1AC-4E8E-9A30-19BBD4B108AE}" `
+                -Name "Deny_Write" `
+            | Select-Object -ExpandProperty "Deny_Write"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-115"
+    Task = "Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HomeGroup" `
+                -Name "DisableHomeGroup" `
+            | Select-Object -ExpandProperty "DisableHomeGroup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-116"
+    Task = "Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+            | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-117 A"
+    Task = "Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`" and `"Require Integrity`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+            | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-117 B"
+    Task = "Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`" and `"Require Integrity`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+            | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-118"
+    Task = "Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{b973a728-3951-46bc-86fa-7877b6d5f1f1}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-119"
+    Task = "Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-120"
+    Task = "Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+            | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-121"
+    Task = "Ensure 'Turn off Local Group Policy Objects processing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLGPOProcessing" `
+            | Select-Object -ExpandProperty "DisableLGPOProcessing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-122 A"
+    Task = "Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+            | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-122 B"
+    Task = "Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-123"
+    Task = "Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-124"
+    Task = "Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+            | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-125"
+    Task = "Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-126"
+    Task = "Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+            | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-128"
+    Task = "Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-129"
+    Task = "Ensure 'Do not process the legacy run list' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "DisableLocalMachineRun" `
+            | Select-Object -ExpandProperty "DisableLocalMachineRun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-130"
+    Task = "Ensure 'Do not process the run once list' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "DisableLocalMachineRunOnce" `
+            | Select-Object -ExpandProperty "DisableLocalMachineRunOnce"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-131"
+    Task = "Ensure 'Run these programs at user logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run" `
+                -Name "23" `
+            | Select-Object -ExpandProperty "23"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-132"
+    Task = "Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+            | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-133"
+    Task = "Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+            | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-134"
+    Task = "Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+            | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-135"
+    Task = "Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-136"
+    Task = "Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-137"
+    Task = "Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+            | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-138"
+    Task = "Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+            | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-139"
+    Task = "Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+            | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if (($regValue -ne 2147483644) -and ($regValue -ne 2147483640)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2147483644 or x == 2147483640"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-140"
+    Task = "Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+            | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-141"
+    Task = "Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+            | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-142"
+    Task = "Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+            | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-143"
+    Task = "Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-144"
+    Task = "Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+            | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-145"
+    Task = "Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+            | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-150"
+    Task = "Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+            | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-151"
+    Task = "Ensure 'Allow Standby States (S1-S3) When Sleeping (On Battery)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-152"
+    Task = "Ensure 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-153"
+    Task = "Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\d72ad9cc-1704-43b0-95d7-bda7b5432eea" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-154"
+    Task = "Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-155"
+    Task = "Ensure 'Specify the system hibernate timeout (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-156"
+    Task = "Ensure 'Specify the system hibernate timeout (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-157"
+    Task = "Ensure 'Specify the system sleep timeout (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-158"
+    Task = " Ensure 'Specify the system sleep timeout (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-159"
+    Task = "Ensure 'Specify the unattended sleep timeout (on battery)' is set to 'Enabled: Unattended Sleep Timeout (seconds): 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-160"
+    Task = "Ensure 'Specify the unattended sleep timeout (plugged in)' is set to 'Enabled' and '0 seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-161"
+    Task = "Ensure 'Turn off hybrid sleep (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-162"
+    Task = " Ensure 'Turn off hybrid sleep (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-163"
+    Task = "Ensure 'Show hibernate in the power options menu' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "ShowHibernateOption" `
+            | Select-Object -ExpandProperty "ShowHibernateOption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-164"
+    Task = "Ensure 'Show sleep in the power options menu' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "ShowSleepOption" `
+            | Select-Object -ExpandProperty "ShowSleepOption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-165"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+            | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-166 A"
+    Task = "Ensure 'Turn on Script Execution' is set to 'Enabled: Allow only signed scripts'. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\PowerShell" `
+                -Name "ExecutionPolicy" `
+            | Select-Object -ExpandProperty "ExecutionPolicy"
+        
+            if ($regValue -ne "AllSigned") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: AllSigned"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-166 B"
+    Task = "Ensure 'Turn on Script Execution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell" `
+                -Name "EnableScripts" `
+            | Select-Object -ExpandProperty "EnableScripts"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-167"
+    Task = "Ensure 'Prevent access to registry editing tools' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableRegistryTools" `
+            | Select-Object -ExpandProperty "DisableRegistryTools"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-168"
+    Task = "Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+            | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-169"
+    Task = "Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+            | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-170"
+    Task = "Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+            | Select-Object -ExpandProperty "fDenyTSConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-172"
+    Task = "Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+            | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-173"
+    Task = "Ensure 'Configure server authentication for client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "AuthenticationLevel" `
+            | Select-Object -ExpandProperty "AuthenticationLevel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-174"
+    Task = "Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+            | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-175"
+    Task = "Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+            | Select-Object -ExpandProperty "fDenyTSConnections"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-176"
+    Task = "Ensure 'Deny logoff of an administrator logged in to the console session' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableForcibleLogoff" `
+            | Select-Object -ExpandProperty "fDisableForcibleLogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-177"
+    Task = "Ensure 'Do not allow Clipboard redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableClip" `
+            | Select-Object -ExpandProperty "fDisableClip"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-178"
+    Task = "Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+            | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-179"
+    Task = "Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+            | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-180"
+    Task = "Ensure 'Do not allow local administrators to customize permissions' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fWritableTSCCPermTab" `
+            | Select-Object -ExpandProperty "fWritableTSCCPermTab"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-181"
+    Task = "Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+            | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-182"
+    Task = "Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+            | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-183"
+    Task = "Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+            | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-184"
+    Task = "Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+            | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-187"
+    Task = "Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+            | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-188"
+    Task = "Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+            | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-189"
+    Task = "Ensure 'Turn off Inventory Collector' is set to 'Enabled'"
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableInventory" `
+            | Select-Object -ExpandProperty "DisableInventory"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-190"
+    Task = "Ensure 'Turn off Steps Recorder' is set to 'Enabled'"
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableUAR" `
+            | Select-Object -ExpandProperty "DisableUAR"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-191"
+    Task = "Ensure 'Allow Telemetry' is set to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+            | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            $saferClients = @("*Server*", "*Education*", "*Enterprise*")
+            $productname = Get-ComputerInfo | select -ExpandProperty OsName
+            if (($productname -notcontains $saferClients) -and ($regValue -eq 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Your OS $productname does not support 'Diagnostic data off'."
+                    Status  = "Warning"
+                }
+            }
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-192 A"
+    Task = "Ensure 'Configure Corporate Windows Error Reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "CorporateWerServer" `
+            | Select-Object -ExpandProperty "CorporateWerServer"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-192 B"
+    Task = "Ensure 'Configure Corporate Windows Error Reporting' is set to 'Connect using SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "CorporateWerUseSSL" `
+            | Select-Object -ExpandProperty "CorporateWerUseSSL"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-192 C"
+    Task = "Ensure 'Configure Corporate Windows Error Reporting' has configured Server Port"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "CorporateWerPortNumber" `
+            | Select-Object -ExpandProperty "CorporateWerPortNumber"
+        
+            if (($regValue -lt 0 -or $regValue -gt 65535)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 0 and x <= 65535"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-193"
+    Task = "Ensure 'SafeModeBlockNonAdmins' is set to 1"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "SafeModeBlockNonAdmins" `
+            | Select-Object -ExpandProperty "SafeModeBlockNonAdmins"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-194"
+    Task = "Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+            | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-195"
+    Task = "Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+            | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-196"
+    Task = "Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+            | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-197"
+    Task = "Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+            | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-198"
+    Task = "Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+            | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-199"
+    Task = "Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+            | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-200"
+    Task = "Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-201"
+    Task = "Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+            | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-202"
+    Task = "Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+            | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-203"
+    Task = "Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+            | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-204"
+    Task = "Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+            | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-205"
+    Task = "Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+            | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-206"
+    Task = "Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+            | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-207"
+    Task = "Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+            | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -le 0 -or $regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-209"
+    Task = "Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+            | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-210"
+    Task = "Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+            | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-211"
+    Task = "Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-212"
+    Task = "Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-213"
+    Task = "Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-214"
+    Task = "Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-215"
+    Task = "Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+            | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-216"
+    Task = "Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+            | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-217"
+    Task = "Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-218"
+    Task = "Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-219"
+    Task = "Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+            | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-220"
+    Task = "Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+            | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-221"
+    Task = "Ensure 'Allow users to select when a password is required when resuming from connected standby' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainDelayLock" `
+            | Select-Object -ExpandProperty "AllowDomainDelayLock"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-222"
+    Task = "Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+            | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-223"
+    Task = "Ensure 'Show lock in the user tile menu' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "ShowLockOption" `
+            | Select-Object -ExpandProperty "ShowLockOption"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-224"
+    Task = "Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-225"
+    Task = "Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+            | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-226"
+    Task = "Ensure 'Enable screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveActive" `
+            | Select-Object -ExpandProperty "ScreenSaveActive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-227"
+    Task = "Ensure 'Password protect the screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaverIsSecure" `
+            | Select-Object -ExpandProperty "ScreenSaverIsSecure"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-228"
+    Task = "Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveTimeOut" `
+            | Select-Object -ExpandProperty "ScreenSaveTimeOut"
+        
+            if (($regValue -lt 0 -or $regValue -gt 599940)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 0 and x <= 599940"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-229"
+    Task = "Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+            | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-230"
+    Task = "Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+            | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-231"
+    Task = "Ensure 'Do not allow Sound Recorder to run' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\SoundRecorder" `
+                -Name "Soundrec" `
+            | Select-Object -ExpandProperty "Soundrec"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-254"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-255"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-256"
+    Task = "Ensure 'Disallow Digest authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+            | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-257"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-258"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-259"
+    Task = "Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+            | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-260"
+    Task = "Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+            | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-261"
+    Task = "Ensure 'Allow Cortana' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortana" `
+            | Select-Object -ExpandProperty "AllowCortana"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-262"
+    Task = "Ensure 'Don’t search the web or display web results in Search' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "ConnectedSearchUseWeb" `
+            | Select-Object -ExpandProperty "ConnectedSearchUseWeb"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-263"
+    Task = "Ensure 'Use FIPS compliant algorithms for encryption, hashing and signing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Centrify\CentrifyDC\Settings\Fips" `
+                -Name "fips.mode.enable" `
+            | Select-Object -ExpandProperty "fips.mode.enable"
+        
+            if ($regValue -ne "true") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: true"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Low-001"
+    Task = "Ensure 'Remove Security tab' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoSecurityTab" `
+            | Select-Object -ExpandProperty "NoSecurityTab"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Low-002"
+    Task = "Ensure 'Turn off location' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+            | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Low-003"
+    Task = "Ensure 'Turn off location scripting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocationScripting" `
+            | Select-Object -ExpandProperty "DisableLocationScripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Low-004"
+    Task = "Ensure 'Turn off Windows Location Provider' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableWindowsLocationProvider" `
+            | Select-Object -ExpandProperty "DisableWindowsLocationProvider"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Low-005"
+    Task = "Ensure 'Turn off access to the Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoUseStoreOpenWith" `
+            | Select-Object -ExpandProperty "NoUseStoreOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Low-006"
+    Task = "Ensure 'Turn off the Store application' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RemoveWindowsStore" `
+            | Select-Object -ExpandProperty "RemoveWindowsStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Low-007"
+    Task = "Ensure 'Determine if interactive users can generate Resultant Set of Policy data' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DenyRsopToInteractiveUser" `
+            | Select-Object -ExpandProperty "DenyRsopToInteractiveUser"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#SecurityOptions.ps1
new file mode 100644
index 0000000..7f15ad4
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#SecurityOptions.ps1	
@@ -0,0 +1,110 @@
+[AuditTest] @{
+    Id = "High-032"
+    Task = "Ensure 'Accounts: Administrator account status' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableAdminAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableAdminAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Medium-005"
+    Task = "Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-069"
+    Task = "Ensure 'Accounts: Guest account status' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-208"
+    Task = "Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#UserRights.ps1
new file mode 100644
index 0000000..622ad50
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-ACSC-21H1#UserRights.ps1	
@@ -0,0 +1,926 @@
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and
+                (Get-WindowsOptionalFeature -Online -FeatureName "Microsoft-Hyper-V").State -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "Medium-013"
+    Task = "Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-014"
+    Task = "Ensure 'Deny access to this computer from the network' is set to 'NT AUTHORITY\Local Account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDenyNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-040"
+    Task = "Ensure 'Manage auditing and security log' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-171"
+    Task = "Ensure 'Deny log on through Remote Desktop Services' is set to 'Administrators, NT AUTHORITY\Local Account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-185"
+    Task = "Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-232"
+    Task = "Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-233"
+    Task = "Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-234"
+    Task = "Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-235"
+    Task = "Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-236"
+    Task = "Ensure 'Allow log on locally' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-240"
+    Task = "Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-241"
+    Task = "Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-242"
+    Task = "Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-243"
+    Task = "Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-244"
+    Task = "Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-245"
+    Task = "Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-246"
+    Task = "Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-247"
+    Task = "Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' [IIS Role installed] (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+            "S-1-5-32-568"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-248"
+    Task = "Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-249"
+    Task = "Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-250"
+    Task = "Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-251"
+    Task = "Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-252"
+    Task = "Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Medium-253"
+    Task = "Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..f6c9c43
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AccountPolicies.ps1	
@@ -0,0 +1,283 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -gt 365 -or $setPolicy -le 0) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 days and x > 0 days"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 1) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1 days"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.7"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15 -or $setPolicy -gt 99999)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 minutes and x <= 99999 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "(L1) Ensure 'Allow Administrator account lockout' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["AllowAdministratorLockout"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'AllowAdministratorLockout' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 99999 -or $setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x <= 99999 minutes and x >= 15 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..01bc89f
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#AuditPolicies.ps1	
@@ -0,0 +1,1616 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..734c19b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#RegistrySettings.ps1	
@@ -0,0 +1,17452 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SAM" `
+                -Name "RelaxMinimumPasswordLengthLimits" `
+                | Select-Object -ExpandProperty "RelaxMinimumPasswordLengthLimits"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+                | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.1"
+    Task = "(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -le 0 -or $regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.3"
+    Task = "(BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MaxDevicePasswordFailedAttempts" `
+                | Select-Object -ExpandProperty "MaxDevicePasswordFailedAttempts"
+        
+            if (($regValue -gt 10 -or $regValue -le 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 10 and x > 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.4"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.6"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.7"
+    Task = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+                | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.9"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+                | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+                | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.4"
+    Task = "(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+                | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.6"
+    Task = "(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.7"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.8"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+                | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+                | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+                | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if (($regValue -ne 537395200)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.11"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit Incoming NTLM Traffic' is set to 'Enable auditing for all accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AuditReceivingNTLMTraffic" `
+                | Select-Object -ExpandProperty "AuditReceivingNTLMTraffic"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.12"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 'Audit all' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictSendingNTLMTraffic" `
+                | Select-Object -ExpandProperty "RestrictSendingNTLMTraffic"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.14.1"
+    Task = "(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 1 - 'User is prompted when the key is first used' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+                | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 2 - 'Prompt for consent on the secure desktop' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTAGService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3"
+    Task = "(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4"
+    Task = "(L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5"
+    Task = "(L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.6"
+    Task = "(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.7"
+    Task = "(L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\irmon" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.8"
+    Task = "(L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.9"
+    Task = "(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.10"
+    Task = "(L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $result = Get-WindowsOptionalFeature -online -FeatureName Microsoft-Windows-Subsystem-Linux
+            $state = $result.State            
+            if($state -eq "Disabled" -or $state -eq "Not Installed"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            else{
+                return @{
+                    Message = "Registry value is '$state'. Expected: 'Disabled' or 'Not Installed'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException]{
+            return @{
+                Message = "Value not found."
+                Status = "Error"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.11"
+    Task = "(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FTPSVC" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.12"
+    Task = "(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.13"
+    Task = "(L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshd" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.14"
+    Task = "(L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.15"
+    Task = "(L2) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.16"
+    Task = "(L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.17"
+    Task = "(L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.18"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.19"
+    Task = "(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.20"
+    Task = "(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.21"
+    Task = "(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.22"
+    Task = "(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.23"
+    Task = "(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.24"
+    Task = "(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.25"
+    Task = "(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.26"
+    Task = "(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.27"
+    Task = "(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.28"
+    Task = "(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\simptcp" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.29"
+    Task = "(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.30"
+    Task = "(L1) Ensure 'Special Administration Console Helper (sacsvr)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sacsvr" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.31"
+    Task = "(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.32"
+    Task = "(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.33"
+    Task = "(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.34"
+    Task = "(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.35"
+    Task = "(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.36"
+    Task = "(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.37"
+    Task = "(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.38"
+    Task = "(L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.39"
+    Task = "(L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PushToInstall" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.40"
+    Task = "(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.41"
+    Task = "(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.42"
+    Task = "(L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxGipSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.43"
+    Task = "(L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.44"
+    Task = "(L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.45"
+    Task = "(L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.1"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.2"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.3"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.4"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SYSTEMROOT%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.5"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.6"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.7"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+                | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+                | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.2"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+                | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.4"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.5"
+    Task = "(L1) Ensure 'Enable Certificate Padding' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" `
+                -Name "EnableCertPaddingCheck" `
+                | Select-Object -ExpandProperty "EnableCertPaddingCheck"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.6"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.7"
+    Task = "(L1) Ensure 'LSA Protection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+                | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.8"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.9"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4"
+    Task = "(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\Parameters" `
+                -Name "disablesavepassword" `
+                | Select-Object -ExpandProperty "disablesavepassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.5"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.6"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.7"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+                | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.8"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.10"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+                | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.12"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.13"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' (or 0 - Disable NetBIOS name resolution)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+                | Select-Object -ExpandProperty "EnableNetBIOS"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.2"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+                | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.8.1"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+                | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+                | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+                | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+                | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.4"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+                | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+                | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+                | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+                | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+                | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+                | Select-Object -ExpandProperty "DisableWPDRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+                | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($null -eq $regValue -or 0 -eq $regValue -or $regValue -gt 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1-3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.2"
+    Task = "(L1) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+                | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.23.2.1"
+    Task = "(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+                | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+                | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+                | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+                | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+                | Select-Object -ExpandProperty "RpcAuthentication"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+                | Select-Object -ExpandProperty "RpcProtocols"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: 0 - Negotiate' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+                | Select-Object -ExpandProperty "ForceKerberosForRpc"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+                | Select-Object -ExpandProperty "RpcTcpPort"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.8"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+                | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.9"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+                | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.10"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+                | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.11"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+                | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.1"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.2"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 1 - 'Secure Boot' or 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.3"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.4"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.5"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.6"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.1"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDs" `
+                | Select-Object -ExpandProperty "DenyDeviceIDs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.2"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "PCI\CC_0C0A") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PCI\CC_0C0A"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.3"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDsRetroactive" `
+                | Select-Object -ExpandProperty "DenyDeviceIDsRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.4"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+                | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 A"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the SBP2 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "{d48179be-ec20-11d1-b6b8-00c04fa372a7}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 B"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the IEC-61883 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "2" `
+                | Select-Object -ExpandProperty "2"
+        
+            if ($regValue -ne "{7ebefbc0-3200-11d2-b4c2-00a0C9697d07}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {7ebefbc0-3200-11d2-b4c2-00a0C9697d07}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 C"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the AVC Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "3" `
+                | Select-Object -ExpandProperty "3"
+        
+            if ($regValue -ne "{c06ff265-ae09-48f0-812c-16753d7cba83}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {c06ff265-ae09-48f0-812c-16753d7cba83}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 D"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 Host Bus Controller Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "4" `
+                | Select-Object -ExpandProperty "4"
+        
+            if ($regValue -ne "{6bdd1fc1-810f-11d0-bec7-08002be2092f}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {6bdd1fc1-810f-11d0-bec7-08002be2092f}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.6"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+                | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.4"
+    Task = "(L1) Ensure 'Configure security policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.5"
+    Task = "(L1) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.6"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+                | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.7"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+                | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.1"
+    Task = "(L2) Ensure 'Turn off access to the Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoUseStoreOpenWith" `
+                | Select-Object -ExpandProperty "NoUseStoreOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.2"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+                | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.5"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+                | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.6"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+                | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+                | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+                | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+                | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+                | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.14 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.14 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+                | Select-Object -ExpandProperty "DoReport"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+                | Select-Object -ExpandProperty "DevicePKInitBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+                | Select-Object -ExpandProperty "DevicePKInitEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.1"
+    Task = "(BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.1"
+    Task = "(L1) Ensure 'Configure password backup directory' is set to 'Enabled: Active Directory' or 'Enabled: Azure Active Directory'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "BackupDirectory" `
+                | Select-Object -ExpandProperty "BackupDirectory"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PwdExpirationProtectionEnabled" `
+                | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.3"
+    Task = "(L1) Ensure 'Enable password encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "ADPasswordEncryptionEnabled" `
+                | Select-Object -ExpandProperty "ADPasswordEncryptionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordComplexity" `
+                | Select-Object -ExpandProperty "PasswordComplexity"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordLength" `
+                | Select-Object -ExpandProperty "PasswordLength"
+        
+            if (($regValue -lt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordAgeDays" `
+                | Select-Object -ExpandProperty "PasswordAgeDays"
+        
+            if (($regValue -gt 30 -or $regValue -lt 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x >= 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.7"
+    Task = "(L1) Ensure 'Post-authentication actions: Grace period (hours)' is set to 'Enabled: 8 or fewer hours, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationResetDelay" `
+                | Select-Object -ExpandProperty "PostAuthenticationResetDelay"
+        
+            if (($regValue -gt 8 -or $regValue -le 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 8 and x > 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.8"
+    Task = "(L1) Ensure 'Post-authentication actions: Actions' is set to 3 - 'Enabled: Reset the password and logoff the managed account' or 5 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationActions" `
+                | Select-Object -ExpandProperty "PostAuthenticationActions"
+        
+            if (($regValue -ne 3) -and ($regValue -ne 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 3 or x == 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.1"
+    Task = "(L1) Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCustomSSPsAPs" `
+                | Select-Object -ExpandProperty "AllowCustomSSPsAPs"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.2"
+    Task = "(NG) Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "ConfigureLsaProtectedProcess" `
+                | Select-Object -ExpandProperty "ConfigureLsaProtectedProcess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+                | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+                | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.3"
+    Task = "(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+                | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.4"
+    Task = "(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.5"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+                | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.6"
+    Task = "(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+                | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.7"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+                | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.31.1"
+    Task = "(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+                | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.31.2"
+    Task = "(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+                | Select-Object -ExpandProperty "UploadUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.1"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.2"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.3"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.4"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.5"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.6"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+                | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.2"
+    Task = "(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.49.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+                | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.1"
+    Task = "(L1) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.2"
+    Task = "(L1) Ensure 'Enable Windows NTP Server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.3.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+                | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.3.2"
+    Task = "(L1) Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx" `
+                -Name "BlockNonAdminUserInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminUserInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.4.1"
+    Task = "(L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoiceAboveLock" `
+                | Select-Object -ExpandProperty "LetAppsActivateWithVoiceAboveLock"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.2"
+    Task = "(L2) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "BlockHostedAppAccessWinRT" `
+                | Select-Object -ExpandProperty "BlockHostedAppAccessWinRT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.8.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVDiscoveryVolumeType" `
+                | Select-Object -ExpandProperty "FDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: This value should be empty."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecovery" `
+                | Select-Object -ExpandProperty "FDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVManageDRA" `
+                | Select-Object -ExpandProperty "FDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryPassword" `
+                | Select-Object -ExpandProperty "FDVRecoveryPassword"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryKey" `
+                | Select-Object -ExpandProperty "FDVRecoveryKey"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHideRecoveryPage" `
+                | Select-Object -ExpandProperty "FDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "FDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "FDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "FDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHardwareEncryption" `
+                | Select-Object -ExpandProperty "FDVHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.11"
+    Task = "(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVPassphrase" `
+                | Select-Object -ExpandProperty "FDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVAllowUserCert" `
+                | Select-Object -ExpandProperty "FDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVEnforceUserCert" `
+                | Select-Object -ExpandProperty "FDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.1"
+    Task = "(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+                | Select-Object -ExpandProperty "UseEnhancedPin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.2"
+    Task = "(BL) Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSAllowSecureBootForIntegrity" `
+                | Select-Object -ExpandProperty "OSAllowSecureBootForIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecovery" `
+                | Select-Object -ExpandProperty "OSRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSManageDRA" `
+                | Select-Object -ExpandProperty "OSManageDRA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryPassword" `
+                | Select-Object -ExpandProperty "OSRecoveryPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryKey" `
+                | Select-Object -ExpandProperty "OSRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHideRecoveryPage" `
+                | Select-Object -ExpandProperty "OSHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "OSActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "OSActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.10"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "OSRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.11"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHardwareEncryption" `
+                | Select-Object -ExpandProperty "OSHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.12"
+    Task = "(BL) Ensure 'Configure use of passwords for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSPassphrase" `
+                | Select-Object -ExpandProperty "OSPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.13"
+    Task = "(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseAdvancedStartup" `
+                | Select-Object -ExpandProperty "UseAdvancedStartup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.14"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EnableBDEWithNoTPM" `
+                | Select-Object -ExpandProperty "EnableBDEWithNoTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.15"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup:' is set to 'Enabled: Do not allow TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPM" `
+                | Select-Object -ExpandProperty "UseTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.16"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup PIN:' is set to 'Enabled: Require startup PIN with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMPIN" `
+                | Select-Object -ExpandProperty "UseTPMPIN"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.17"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key:' is set to 'Enabled: Do not allow startup key with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKey" `
+                | Select-Object -ExpandProperty "UseTPMKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.18"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key and PIN:' is set to 'Enabled: Do not allow startup key and PIN with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKeyPIN" `
+                | Select-Object -ExpandProperty "UseTPMKeyPIN"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVDiscoveryVolumeType" `
+                | Select-Object -ExpandProperty "RDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: This value should be empty."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecovery" `
+                | Select-Object -ExpandProperty "RDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVManageDRA" `
+                | Select-Object -ExpandProperty "RDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryPassword" `
+                | Select-Object -ExpandProperty "RDVRecoveryPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryKey" `
+                | Select-Object -ExpandProperty "RDVRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHideRecoveryPage" `
+                | Select-Object -ExpandProperty "RDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "RDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "RDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "RDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHardwareEncryption" `
+                | Select-Object -ExpandProperty "RDVHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.11"
+    Task = "(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVPassphrase" `
+                | Select-Object -ExpandProperty "RDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVAllowUserCert" `
+                | Select-Object -ExpandProperty "RDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVEnforceUserCert" `
+                | Select-Object -ExpandProperty "RDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.14"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+                | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.15"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVDenyCrossOrg" `
+                | Select-Object -ExpandProperty "RDVDenyCrossOrg"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.4"
+    Task = "(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "DisableExternalDMAUnderLock" `
+                | Select-Object -ExpandProperty "DisableExternalDMAUnderLock"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.10.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+                | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+                | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+                | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.2"
+    Task = "(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableCloudOptimizedContent" `
+                | Select-Object -ExpandProperty "DisableCloudOptimizedContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.3"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.13.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+                | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.3"
+    Task = "(L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "NoLocalPasswordResetQuestions" `
+                | Select-Object -ExpandProperty "NoLocalPasswordResetQuestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+                | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+                | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+                | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+                | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+                | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+                | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+                | Select-Object -ExpandProperty "LimitDumpCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.8"
+    Task = "(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+                | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.16.1"
+    Task = "(L1) Ensure 'Download Mode' is NOT set to 3 - 'Enabled: Internet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" `
+                -Name "DODownloadMode" `
+                | Select-Object -ExpandProperty "DODownloadMode"
+        
+            if ($regValue -notmatch "^(0|1|2|99|100)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(0|1|2|99|100)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.1"
+    Task = "(L1) Ensure 'Enable App Installer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableAppInstaller" `
+                | Select-Object -ExpandProperty "EnableAppInstaller"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.2"
+    Task = "(L1) Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableExperimentalFeatures" `
+                | Select-Object -ExpandProperty "EnableExperimentalFeatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.3"
+    Task = "(L1) Ensure 'Enable App Installer Hash Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableHashOverride" `
+                | Select-Object -ExpandProperty "EnableHashOverride"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.4"
+    Task = "(L1) Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableMSAppInstallerProtocol" `
+                | Select-Object -ExpandProperty "EnableMSAppInstallerProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.3"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.4"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.34.1"
+    Task = "(L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+            -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" `
+            -Name "NotifyDisableIEOptions" `
+            | Select-Object -ExpandProperty "NotifyDisableIEOptions"
+                
+            $idMapping = @{
+                0 = "Don't notify"
+                1 = "Always notify"
+                2 = "Notify once"
+            }
+            return @{
+                Message = "Compliant. Following setting is set: " + $idMapping[$regValue]
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.36.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.40.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+                | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.41.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+                | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+                | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 C"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 K"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 L"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 M"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.7.1"
+    Task = "(L1) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "EnableFileHashComputation" `
+                | Select-Object -ExpandProperty "EnableFileHashComputation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.1"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.2"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.3"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.4"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+                | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+                | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.1"
+    Task = "(L1) Ensure 'Scan packed executables' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisablePackedExeScanning" `
+                | Select-Object -ExpandProperty "DisablePackedExeScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.2"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.3"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.17"
+    Task = "(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.1"
+    Task = "(NG) Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AuditApplicationGuard" `
+                | Select-Object -ExpandProperty "AuditApplicationGuard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.2"
+    Task = "(NG) Ensure 'Allow camera and microphone access in Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowCameraMicrophoneRedirection" `
+                | Select-Object -ExpandProperty "AllowCameraMicrophoneRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.3"
+    Task = "(NG) Ensure 'Allow data persistence for Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowPersistence" `
+                | Select-Object -ExpandProperty "AllowPersistence"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.4"
+    Task = "(NG) Ensure 'Allow files to download and save to the host operating system from Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "SaveFilesToHost" `
+                | Select-Object -ExpandProperty "SaveFilesToHost"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.5"
+    Task = "(NG) Ensure 'Configure Microsoft Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AppHVSIClipboardSettings" `
+                | Select-Object -ExpandProperty "AppHVSIClipboardSettings"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6"
+    Task = "(NG) Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowAppHVSI_ProviderSet" `
+                | Select-Object -ExpandProperty "AllowAppHVSI_ProviderSet"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.49.1"
+    Task = "(L2) Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds" `
+                -Name "EnableFeeds" `
+                | Select-Object -ExpandProperty "EnableFeeds"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.50.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.55.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+                | Select-Object -ExpandProperty "DisablePushToInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.2.1"
+    Task = "(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+                | Select-Object -ExpandProperty "fDenyTSConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.1"
+    Task = "(L2) Ensure 'Allow UI Automation redirection' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "EnableUiaRedirection" `
+                | Select-Object -ExpandProperty "EnableUiaRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.2"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.3"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.4"
+    Task = "(L2) Ensure 'Do not allow location redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLocationRedir" `
+                | Select-Object -ExpandProperty "fDisableLocationRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.5"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.6"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.7"
+    Task = "(L2) Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableWebAuthn" `
+                | Select-Object -ExpandProperty "fDisableWebAuthn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+                | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+                | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+                | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+                | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+                | Select-Object -ExpandProperty "AllowCloudSearch"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.3"
+    Task = "(L1) Ensure 'Allow Cortana' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortana" `
+                | Select-Object -ExpandProperty "AllowCortana"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.4"
+    Task = "(L1) Ensure 'Allow Cortana above lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortanaAboveLock" `
+                | Select-Object -ExpandProperty "AllowCortanaAboveLock"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.5"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.6"
+    Task = "(L1) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowSearchToUseLocation" `
+                | Select-Object -ExpandProperty "AllowSearchToUseLocation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.7"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+                | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.62.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+                | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.65.1"
+    Task = "(L2) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableStoreApps" `
+                | Select-Object -ExpandProperty "DisableStoreApps"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.65.2"
+    Task = "(L1) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RequirePrivateStoreOnly" `
+                | Select-Object -ExpandProperty "RequirePrivateStoreOnly"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.65.3"
+    Task = "(L1) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+                | Select-Object -ExpandProperty "AutoDownload"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.65.4"
+    Task = "(L1) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableOSUpgrade" `
+                | Select-Object -ExpandProperty "DisableOSUpgrade"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.65.5"
+    Task = "(L2) Ensure 'Turn off the Store application' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RemoveWindowsStore" `
+                | Select-Object -ExpandProperty "RemoveWindowsStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.71.1"
+    Task = "(L1) Ensure 'Allow widgets' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh" `
+                -Name "AllowNewsAndInterests" `
+                | Select-Object -ExpandProperty "AllowNewsAndInterests"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.77.1"
+    Task = "(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+                | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.1"
+    Task = "(L1) Ensure 'Enable MPR notifications for the system' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableMPR" `
+                | Select-Object -ExpandProperty "EnableMPR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.2"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.1"
+    Task = "(L2) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.2"
+    Task = "(L2) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+                | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+                | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.90.1"
+    Task = "(L1) Ensure 'Allow clipboard sharing with Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowClipboardRedirection" `
+                | Select-Object -ExpandProperty "AllowClipboardRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.90.2"
+    Task = "(L1) Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowNetworking" `
+                | Select-Object -ExpandProperty "AllowNetworking"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.91.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+                | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+                | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+                | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.3"
+    Task = "(L1) Ensure 'Remove access to `"Pause updates`" feature' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "SetDisablePauseUXAccess" `
+                | Select-Object -ExpandProperty "SetDisablePauseUXAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+                | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+        
+            if (($regValue -lt 180 -or $regValue -gt 365)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+                | Select-Object -ExpandProperty "DeferQualityUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+                | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+                | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.1"
+    Task = "(L1) Ensure 'Configure Windows spotlight on lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+                | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.2"
+    Task = "(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+                | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.3"
+    Task = "(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+                | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.4"
+    Task = "(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.5"
+    Task = "(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSpotlightCollectionOnDesktop" `
+                | Select-Object -ExpandProperty "DisableSpotlightCollectionOnDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.26.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+                | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.42.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.44.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "PreventCodecDownload" `
+                | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..0cd9c29
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#SecurityOptions.ps1	
@@ -0,0 +1,130 @@
+[AuditTest] @{
+    Id = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.5"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#UserRights.ps1
new file mode 100644
index 0000000..cfee1ad
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-CIS-3.0.0#UserRights.ps1	
@@ -0,0 +1,1488 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.20"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.21"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.22"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.23"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.24"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-6"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.25"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.26"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.27"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.28"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }    
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+            
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.30"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.31"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.32"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.33"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.34"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.35"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.36"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.37"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.38"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.39"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AccountPolicies.ps1
new file mode 100644
index 0000000..ba3fa09
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AccountPolicies.ps1	
@@ -0,0 +1,252 @@
+[AuditTest] @{
+    Id = "V-63405"
+    Task = "Windows 10 account lockout duration must be configured to 15 minutes or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15) -and ($setPolicy -ne 0)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 or x == 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63409"
+    Task = "The number of allowed bad logon attempts must be configured to 3 or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 3 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x >= 3 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63413"
+    Task = "The period of time before the bad logon counter is reset must be configured to 15 minutes."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63415"
+    Task = "The password history must be configured to 24 passwords remembered."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63419"
+    Task = "The maximum password age must be configured to 60 days or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 60 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 60 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63421"
+    Task = "The minimum password age must be configured to at least 1 day."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63423"
+    Task = "Passwords must, at a minimum, be 14 characters."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63427"
+    Task = "The built-in Microsoft password complexity filter must be enabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63429"
+    Task = "Reversible password encryption must be disabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AuditPolicies.ps1
new file mode 100644
index 0000000..d326eb9
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#AuditPolicies.ps1	
@@ -0,0 +1,1559 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "V-63431 + V-63435"
+    Task = "The system must be configured to audit Account Logon - Credential Validation failures. The system must be configured to audit Account Logon - Credential Validation successes."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63445"
+    Task = "The system must be configured to audit Account Management - Security Group Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63447 + V-63449"
+    Task = "The system must be configured to audit Account Management - User Account Management failures. The system must be configured to audit Account Management - User Account Management successes."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63451"
+    Task = "The system must be configured to audit Detailed Tracking - PNP Activity successes."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63453"
+    Task = "The system must be configured to audit Detailed Tracking - Process Creation successes."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63457"
+    Task = "The system must be configured to audit Logon/Logoff - Group Membership successes."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63459"
+    Task = "The system must be configured to audit Logon/Logoff - Logoff successes."
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63463 + V-63467"
+    Task = "The system must be configured to audit Logon/Logoff - Logon failures. The system must be configured to audit Logon/Logoff - Logon successes."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63469"
+    Task = "The system must be configured to audit Logon/Logoff - Special Logon successes."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63471 + V-63473"
+    Task = "The system must be configured to audit Object Access - Removable Storage failures. The system must be configured to audit Object Access - Removable Storage successes."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63479"
+    Task = "The system must be configured to audit Policy Change - Audit Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63481"
+    Task = "The system must be configured to audit Policy Change - Authentication Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63483 + V-63487"
+    Task = "The system must be configured to audit Privilege Use - Sensitive Privilege Use failures. The system must be configured to audit Privilege Use - Sensitive Privilege Use successes."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63491"
+    Task = "The system must be configured to audit System - IPSec Driver failures."
+    Test = {
+        # Get the audit policy for the subcategory IPSec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "IPSec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'IPSec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63499 + V-63503"
+    Task = "The system must be configured to audit System - Other System Events successes. The system must be configured to audit System - Other System Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63507"
+    Task = "The system must be configured to audit System - Security State Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63513"
+    Task = "The system must be configured to audit System - Security System Extension successes."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63515 + V-63517"
+    Task = "The system must be configured to audit System - System Integrity failures. The system must be configured to audit System - System Integrity successes."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-71759"
+    Task = "The system must be configured to audit Logon/Logoff - Account Lockout failures."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-71761"
+    Task = "The system must be configured to audit Policy Change - Authorization Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-74409 + V-74411"
+    Task = "Windows 10 must be configured to audit Object Access - Other Object Access Events failures. Windows 10 must be configured to audit Object Access - Other Object Access Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-74721 + V-75027"
+    Task = "Windows 10 must be configured to audit Object Access - File Share successes. Windows 10 must be configured to audit Object Access - File Share failures."
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-99541 + V-99543"
+    Task = "Windows 10 must be configured to audit other Logon/Logoff Events Failures. Windows 10 must be configured to audit other Logon/Logoff Events Successes."
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-99545"
+    Task = "Windows 10 must be configured to audit Detailed File Share Failures."
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-99547 + V-99549"
+    Task = "Windows 10 must be configured to audit MPSSVC Rule-Level Policy Change Successes. Windows 10 must be configured to audit MPSSVC Rule-Level Policy Change Failures."
+    Test = {
+        # Get the audit policy for the subcategory MPSSVC Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "MPSSVC Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'MPSSVC Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-99551 + V-99553"
+    Task = "Windows 10 must be configured to audit Other Policy Change Events Successes. Windows 10 must be configured to audit Other Policy Change Events Failures."
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#RegistrySettings.ps1
new file mode 100644
index 0000000..d20d84c
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#RegistrySettings.ps1	
@@ -0,0 +1,4142 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+[AuditTest] @{
+    Id = "V-63321"
+    Task = "Users must be prevented from changing installation options."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63325"
+    Task = "The Windows Installer Always install with elevated privileges must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63329"
+    Task = "Users must be notified if a web-based program attempts to install software."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63333"
+    Task = "Automatically signing in the last interactive user after a system-initiated restart must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63335"
+    Task = "The Windows Remote Management (WinRM) client must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63339"
+    Task = "The Windows Remote Management (WinRM) client must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63341"
+    Task = "The Windows Remote Management (WinRM) client must not use Digest authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63347"
+    Task = "The Windows Remote Management (WinRM) service must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63369"
+    Task = "The Windows Remote Management (WinRM) service must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63375"
+    Task = "The Windows Remote Management (WinRM) service must not store RunAs credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63519"
+    Task = "The Application event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63523"
+    Task = "The Security event log size must be configured to 1024000 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 1024000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1024000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63527"
+    Task = "The System event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63545"
+    Task = "Camera access from the lock screen must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63549"
+    Task = "The display of slide shows on the lock screen must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63555"
+    Task = "IPv6 source routing must be configured to highest protection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIpSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIpSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63559"
+    Task = "The system must be configured to prevent IP source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63563"
+    Task = "The system must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF) generated routes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63567"
+    Task = "The system must be configured to ignore NetBIOS name release requests except from WINS servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63569"
+    Task = "Insecure logons to an SMB server must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63581"
+    Task = "Simultaneous connections to the Internet or a Windows domain must be limited."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+                | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($null -eq $regValue -or 0 -eq $regValue) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1-3"
+                        Status = "False"
+                    }
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63585"
+    Task = "Connections to non-domain networks when connected to a domain authenticated network must be blocked."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+                | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($null -eq $regValue -or 0 -eq $regValue) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1-3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63591"
+    Task = "Wi-Fi Sense must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+                | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63597"
+    Task = "Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63607"
+    Task = "Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3) -and ($regValue -ne 8)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 3 or x == 8"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63609"
+    Task = "Group Policy objects must be reprocessed even if they have not changed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63615"
+    Task = "Downloading print driver packages over HTTP must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63617"
+    Task = "Local accounts with blank passwords must be restricted to prevent access from the network."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63621"
+    Task = "Web publishing and online ordering wizards must be prevented from downloading a list of providers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63623"
+    Task = "Printing over HTTP must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63627"
+    Task = "Systems must at least attempt device authentication using certificates."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "DevicePKInitEnabled" `
+                | Select-Object -ExpandProperty "DevicePKInitEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63629"
+    Task = "The network selection user interface (UI) must not be displayed on the logon screen."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63633"
+    Task = "Local users on domain-joined computers must not be enumerated."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63635"
+    Task = "Audit policy using subcategories must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63639"
+    Task = "Outgoing secure channel traffic must be encrypted or signed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63643"
+    Task = "Outgoing secure channel traffic must be encrypted when possible."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63645"
+    Task = "Users must be prompted for a password on resume from sleep (on battery)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63647"
+    Task = "Outgoing secure channel traffic must be signed when possible."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63649"
+    Task = "The user must be prompted for a password on resume from sleep (plugged in)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63651"
+    Task = "Solicited Remote Assistance must not be allowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63653"
+    Task = "The computer account password must not be prevented from being reset."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63657"
+    Task = "Unauthenticated RPC clients must be restricted from connecting to the RPC server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63659"
+    Task = "The setting to allow Microsoft accounts to be optional for modern style apps must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63661"
+    Task = "The maximum age for machine account passwords must be configured to 30 days or less."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -gt 30 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63663 A"
+    Task = "The Application Compatibility Program service must be disabled in order to prefent sending inventory data."
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63663 B"
+    Task = "The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft."
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableInventory" `
+                | Select-Object -ExpandProperty "DisableInventory"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63665"
+    Task = "The system must be configured to require a strong session key."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63667"
+    Task = "Autoplay must be turned off for non-volume devices."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63669"
+    Task = "The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -ne 900) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 900"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63671"
+    Task = "The default autorun behavior must be configured to prevent autorun commands."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63673"
+    Task = "Autoplay must be disabled for all drives."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63677"
+    Task = "Enhanced anti-spoofing for facial recognition must be enabled on Window 10."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63679"
+    Task = "Administrator accounts must not be enumerated during elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63689"
+    Task = "Explorer Data Execution Prevention must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63691"
+    Task = "Turning off File Explorer heap termination on corruption must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63695"
+    Task = "File Explorer shell protocol must run in protected mode."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63699"
+    Task = "Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for malicious websites in Microsoft Edge."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63701"
+    Task = "Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for unverified files in Microsoft Edge."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63703"
+    Task = "The Windows SMB client must be configured to always perform SMB packet signing."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63709"
+    Task = "The password manager function in the Edge browser must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63711"
+    Task = "Unencrypted passwords must not be sent to third-party SMB Servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63713"
+    Task = "The Windows Defender SmartScreen filter for Microsoft Edge must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63717"
+    Task = "The use of a hardware security device with Windows Hello for Business must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork" `
+                -Name "RequireSecurityDevice" `
+                | Select-Object -ExpandProperty "RequireSecurityDevice"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63719"
+    Task = "The Windows SMB server must be configured to always perform SMB packet signing."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63721"
+    Task = "Windows 10 must be configured to require a minimum pin length of six characters or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity" `
+                -Name "MinimumPINLength" `
+                | Select-Object -ExpandProperty "MinimumPINLength"
+        
+            if (($regValue -lt 6)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 6"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63729"
+    Task = "Passwords must not be saved in the Remote Desktop Client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63731"
+    Task = "Local drives must be prevented from sharing with Remote Desktop Session Hosts."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63733"
+    Task = "Remote Desktop Services must always prompt a client for passwords upon connection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63737"
+    Task = "The Remote Desktop Session Host must require secure RPC communications."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63741"
+    Task = "Remote Desktop Services must be configured with the client connection encryption set to the required level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63743"
+    Task = "Attachments must be prevented from being downloaded from RSS feeds."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63745"
+    Task = "Anonymous enumeration of SAM accounts must not be allowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63747"
+    Task = "Basic authentication for RSS feeds over HTTP must not be used."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+                | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63749"
+    Task = "Anonymous enumeration of shares must be restricted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63751"
+    Task = "Indexing of encrypted files must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63755"
+    Task = "The system must be configured to prevent anonymous users from having the same rights as the Everyone group."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63759"
+    Task = "Anonymous access to Named Pipes and Shares must be restricted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63765"
+    Task = "NTLM must be prevented from falling back to a Null session."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63767"
+    Task = "PKU2U authentication using online identities must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63795"
+    Task = "Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63797"
+    Task = "The system must be configured to prevent the storage of the LAN Manager hash of passwords."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63801"
+    Task = "The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63803"
+    Task = "The system must be configured to the required LDAP client signing level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63805"
+    Task = "The system must be configured to meet the minimum session security requirement for NTLM SSP based clients."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63807"
+    Task = "The system must be configured to meet the minimum session security requirement for NTLM SSP based servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63811"
+    Task = "The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63815"
+    Task = "The default permissions of global system objects must be increased."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63817"
+    Task = "User Account Control approval mode for the built-in Administrator must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63821"
+    Task = "User Account Control must automatically deny elevation requests for standard users."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63825"
+    Task = "User Account Control must be configured to detect application installations and prompt for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63827"
+    Task = "User Account Control must only elevate UIAccess applications that are installed in secure locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63829"
+    Task = "User Account Control must run all administrators in Admin Approval Mode, enabling UAC."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63831"
+    Task = "User Account Control must virtualize file and registry write failures to per-user locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63839"
+    Task = "Toast notifications to the lock screen must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63841"
+    Task = "Zone information must be preserved when saving attachments."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-68817"
+    Task = "Command line data must be included in process creation events."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-68819"
+    Task = "PowerShell script block logging must be enabled on Windows 10."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-68849"
+    Task = "Structured Exception Handling Overwrite Protection (SEHOP) must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-71763"
+    Task = "WDigest Authentication must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-71765"
+    Task = "Internet connection sharing must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+                | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-71769"
+    Task = "Remote calls to the Security Account Manager (SAM) must be restricted to Administrators."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-71771"
+    Task = "Microsoft consumer experiences must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-74417"
+    Task = "Windows 10 must be configured to disable Windows Game Recording and Broadcasting."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+                | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-74699"
+    Task = "Windows 10 must be configured to enable Remote host allows delegation of non-exportable credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-74723"
+    Task = "The Server Message Block (SMB) v1 protocol must be disabled on the SMB server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-74725"
+    Task = "The Server Message Block (SMB) v1 protocol must be disabled on the SMB client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-82137"
+    Task = "The use of personal accounts for OneDrive synchronization must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\OneDrive" `
+                -Name "DisablePersonalSync" `
+                | Select-Object -ExpandProperty "DisablePersonalSync"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-82139"
+    Task = "Windows 10 must be configured to prevent certificate error overrides in Microsoft Edge."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Internet Settings" `
+                -Name "PreventCertErrorOverrides" `
+                | Select-Object -ExpandProperty "PreventCertErrorOverrides"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-82145"
+    Task = "If Enhanced diagnostic data is enabled it must be limited to the minimum required to support Windows Analytics."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitEnhancedDiagnosticDataWindowsAnalytics" `
+                | Select-Object -ExpandProperty "LimitEnhancedDiagnosticDataWindowsAnalytics"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-94719"
+    Task = "Windows 10 must be configured to prevent Windows apps from being activated by voice while the system is locked."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoiceAboveLock" `
+                | Select-Object -ExpandProperty "LetAppsActivateWithVoiceAboveLock"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-94859"
+    Task = "Windows 10 systems must use a BitLocker PIN for pre-boot authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseAdvancedStartup" `
+                | Select-Object -ExpandProperty "UseAdvancedStartup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-94861"
+    Task = "Windows 10 systems must use a BitLocker PIN with a minimum length of 6 digits for pre-boot authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "MinimumPIN" `
+                | Select-Object -ExpandProperty "MinimumPIN"
+        
+            if (($regValue -lt 6)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 6"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-99557"
+    Task = "Windows 10 Kernel (Direct Memory Access) DMA Protection must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-99563"
+    Task = "Windows 10 should be configured to prevent users from receiving suggestions for third-party or additional applications. "
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+                | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#SecurityOptions.ps1
new file mode 100644
index 0000000..2d8a345
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#SecurityOptions.ps1	
@@ -0,0 +1,130 @@
+[AuditTest] @{
+    Id = "V-63601"
+    Task = "The built-in administrator account must be disabled."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableAdminAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableAdminAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63611"
+    Task = "The built-in guest account must be disabled."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63619"
+    Task = "The built-in administrator account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63625"
+    Task = "The built-in guest account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63739"
+    Task = "Anonymous SID/Name translation must not be allowed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#UserRights.ps1
new file mode 100644
index 0000000..34ef58f
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-DISA-V1R23#UserRights.ps1	
@@ -0,0 +1,956 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "V-63843"
+    Task = "The Access Credential Manager as a trusted caller user right must not be assigned to any groups or accounts."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63845"
+    Task = "The Access this computer from the network user right must only be assigned to the Administrators and Remote Desktop Users groups."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "Administrators"
+            "Remote Desktop Users"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63847"
+    Task = "The Act as part of the operating system user right must not be assigned to any groups or accounts."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63851"
+    Task = "The Allow log on locally user right must only be assigned to the Administrators and Users groups."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "Administrators"
+            "Users"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63853"
+    Task = "The Back up files and directories user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63857"
+    Task = "The Create a pagefile user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63859"
+    Task = "The Create a token object user right must not be assigned to any groups or accounts."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63861"
+    Task = "The Create global objects user right must only be assigned to Administrators, Service, Local Service, and Network Service."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+            "LOCAL SERVICE"
+            "NETWORK SERVICE"
+            "SERVICE"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63863"
+    Task = "The Create permanent shared objects user right must not be assigned to any groups or accounts."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63865"
+    Task = "The Create symbolic links user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63869"
+    Task = "The Debug programs user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63871"
+    Task = "The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "Guests"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63877"
+    Task = "The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "Enterprise Admins"
+            "Domain Admins"
+            "Guests"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63879"
+    Task = "The Deny log on through Remote Desktop Services user right on Windows 10 workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "Enterprise Admins"
+            "Domain Admins"
+            "Local account"
+            "Guests"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63881"
+    Task = "The Enable computer and user accounts to be trusted for delegation user right must not be assigned to any groups or accounts."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63883"
+    Task = "The Force shutdown from a remote system user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63889"
+    Task = "The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+            "LOCAL SERVICE"
+            "NETWORK SERVICE"
+            "SERVICE"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63917"
+    Task = "The Load and unload device drivers user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63925"
+    Task = "The Lock pages in memory user right must not be assigned to any groups or accounts."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63927"
+    Task = "The Manage auditing and security log user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63931"
+    Task = "The Modify firmware environment values user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63933"
+    Task = "The Perform volume maintenance tasks user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63935"
+    Task = "The Profile single process user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63939"
+    Task = "The Restore files and directories user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-63941"
+    Task = "The Take ownership of files or other objects user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "Administrators"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AccountPolicies.ps1
new file mode 100644
index 0000000..35fa9a8
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AccountPolicies.ps1	
@@ -0,0 +1,196 @@
+[AuditTest] @{
+    Id = "AccountPolicy-216"
+    Task = "Ensure 'MinimumPasswordLength' is set to '14'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 14) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-217"
+    Task = "Ensure 'PasswordComplexity' is set to '1'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-218"
+    Task = "Ensure 'PasswordHistorySize' is set to '24'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-219"
+    Task = "Ensure 'LockoutBadCount' is set to '10'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 10 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 10 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-220"
+    Task = "Ensure 'ResetLockoutCount' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 15) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-221"
+    Task = "Ensure 'LockoutDuration' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 15) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-222"
+    Task = "Ensure 'ClearTextPassword' is set to '0'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AuditPolicies.ps1
new file mode 100644
index 0000000..b4a4804
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#AuditPolicies.ps1	
@@ -0,0 +1,1388 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "AuditPolicy-193"
+    Task = "Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-194"
+    Task = "Ensure 'Security Group Management' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-195"
+    Task = "Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-196"
+    Task = "Ensure 'Plug and Play Events' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-197"
+    Task = "Ensure 'Process Creation' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-198"
+    Task = "Ensure 'Account Lockout' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-199"
+    Task = "Ensure 'Group Membership' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-200"
+    Task = "Ensure 'Logon' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-201"
+    Task = "Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-202"
+    Task = "Ensure 'Special Logon' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-203"
+    Task = "Ensure 'Detailed File Share' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-204"
+    Task = "Ensure 'File Share' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-205"
+    Task = "Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-206"
+    Task = "Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-207"
+    Task = "Ensure 'Audit Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-208"
+    Task = "Ensure 'Authentication Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-209"
+    Task = "Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory MPSSVC Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "MPSSVC Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'MPSSVC Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-210"
+    Task = "Ensure 'Other Policy Change Events' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-211"
+    Task = "Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-212"
+    Task = "Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-213"
+    Task = "Ensure 'Security State Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-214"
+    Task = "Ensure 'Security System Extension' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-215"
+    Task = "Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#RegistrySettings.ps1
new file mode 100644
index 0000000..1a84a2e
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#RegistrySettings.ps1	
@@ -0,0 +1,10968 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+$hyperVStatus = CheckHyperVStatus
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "Registry-001"
+    Task = "Set registry value 'PUAProtection' to 1."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-002"
+    Task = "Set registry value 'MpCloudBlockLevel' to 2."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "MpCloudBlockLevel" `
+                | Select-Object -ExpandProperty "MpCloudBlockLevel"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-003"
+    Task = "Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-004"
+    Task = "Ensure 'Turn off real-time protection' is set to 'Disabled'."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-005"
+    Task = "Ensure 'Scan removable drives' is set to 'Enabled'."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-006"
+    Task = "Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+                | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-007"
+    Task = "Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-008"
+    Task = "Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "DisableBlockAtFirstSeen" `
+                | Select-Object -ExpandProperty "DisableBlockAtFirstSeen"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-009"
+    Task = "Set registry value 'ExploitGuard_ASR_Rules' to 1."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-010"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-011"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-012"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-013"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-014"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-015"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)"
+    Test = {
+       try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-016"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-017"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-018"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-019"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-020"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-021"
+    Task = "Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware)"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "c1db55ab-c21a-4637-bb3f-a12568109d35"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "c1db55ab-c21a-4637-bb3f-a12568109d35"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-022"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)"
+    Test = {
+            try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-023"
+    Task = "Set registry value 'EnableNetworkProtection' to 1."
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-024"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-025"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if ($regValue -eq 3) {
+                return @{
+                    Message = "Set to 'Secure Boot and DMA Protection' which is more secure."
+                    Status = "True"
+                }
+            }
+            
+            if ($regValue -ne 1 -and $regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or (better) 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-026"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-027"
+    Task = "Set registry value 'HVCIMATRequired' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-028"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-029"
+    Task = "Set registry value 'ConfigureSystemGuardLaunch' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-031"
+    Task = "Set registry value 'UseEnhancedPin' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+                | Select-Object -ExpandProperty "UseEnhancedPin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-032"
+    Task = "Set registry value 'RDVDenyCrossOrg' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVDenyCrossOrg" `
+                | Select-Object -ExpandProperty "RDVDenyCrossOrg"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-033"
+    Task = "Set registry value 'DisableExternalDMAUnderLock' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "DisableExternalDMAUnderLock" `
+                | Select-Object -ExpandProperty "DisableExternalDMAUnderLock"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-034"
+    Task = "Set registry value 'DCSettingIndex' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-035"
+    Task = "Set registry value 'ACSettingIndex' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-036"
+    Task = "Set registry value 'DenyDeviceClasses' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+                | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-037"
+    Task = "Set registry value 'DenyDeviceClassesRetroactive' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+                | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-038"
+    Task = "Set registry value '1' to {d48179be-ec20-11d1-b6b8-00c04fa372a7}."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "{d48179be-ec20-11d1-b6b8-00c04fa372a7}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-039"
+    Task = "Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+                | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-040"
+    Task = "Set registry value 'AutoConnectAllowedOEM' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+                | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-041"
+    Task = "Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-042"
+    Task = "Ensure 'Turn off Autoplay' is set to 'All drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-043"
+    Task = "Set registry value 'NoWebServices' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-044"
+    Task = "Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-045"
+    Task = "Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-046"
+    Task = "Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-047"
+    Task = "Set registry value 'LocalAccountTokenFilterPolicy' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-048"
+    Task = "Set registry value 'AllowEncryptionOracle' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-049"
+    Task = "Set registry value 'EnhancedAntiSpoofing' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-050"
+    Task = "Ensure 'Prevent downloading of enclosures' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-051"
+    Task = "Set registry value 'PreventCertErrorOverrides' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings" `
+                -Name "PreventCertErrorOverrides" `
+                | Select-Object -ExpandProperty "PreventCertErrorOverrides"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-052"
+    Task = "Set registry value 'FormSuggest Passwords' to no."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-053"
+    Task = "Set registry value 'EnabledV9' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-054"
+    Task = "Set registry value 'PreventOverride' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-055"
+    Task = "Set registry value 'PreventOverrideAppRepUnknown' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-056"
+    Task = "Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-057"
+    Task = "Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-058"
+    Task = "Set registry value 'LetAppsActivateWithVoiceAboveLock' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoiceAboveLock" `
+                | Select-Object -ExpandProperty "LetAppsActivateWithVoiceAboveLock"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-059"
+    Task = "Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-060"
+    Task = "Set registry value 'AllowProtectedCreds' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-061"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'. [Application\MaxSize]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-062"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '196608'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-063"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'. [System\MaxSize]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-064"
+    Task = "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-065"
+    Task = "Set registry value 'AllowGameDVR' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+                | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-066"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'. [NoGPOListChanges]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-067"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'. [NoBackgroundPolicy]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-068"
+    Task = "Set registry value 'AlwaysInstallElevated' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-069"
+    Task = "Ensure 'Allow user control over installs' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-070"
+    Task = "Set registry value 'DeviceEnumerationPolicy' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-071"
+    Task = "Ensure 'Enable insecure guest logons' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-072"
+    Task = "Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+                | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-073"
+    Task = "Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ($regValue -notmatch "^(?:RequireMutualAuthentication=1,\s*RequireIntegrity=1|RequireIntegrity=1,\s*RequireMutualAuthentication=1)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: RequireMutualAuthentication=1, RequireIntegrity=1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-074"
+    Task = "Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ($regValue -notmatch "^(?:RequireMutualAuthentication=1,\s*RequireIntegrity=1|RequireIntegrity=1,\s*RequireMutualAuthentication=1)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: RequireMutualAuthentication=1, RequireIntegrity=1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-075"
+    Task = "Set registry value 'NoLockScreenCamera' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-076"
+    Task = "Set registry value 'NoLockScreenSlideshow' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-077"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'. (EnableScriptBlockLogging)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-078"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is not set. (EnableScriptBlockInvocationLogging)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockInvocationLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockInvocationLogging"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-079"
+    Task = "Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+                | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-080"
+    Task = "Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-081"
+    Task = "Ensure 'Configure Windows SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-082"
+    Task = "Set registry value 'ShellSmartScreenLevel' to Block."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-083"
+    Task = "Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+                | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-084"
+    Task = "Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-085"
+    Task = "Ensure 'Disallow Digest authentication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-086"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-087"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-088"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-089"
+    Task = "Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-090"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-091"
+    Task = "Ensure 'Turn off multicast name resolution' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-092"
+    Task = "Set registry value 'DisableWebPnPDownload' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-093"
+    Task = "Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-094"
+    Task = "Solicited Remote Assistance - Set method for sending email invitations to 'Simple MAPI'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fUseMailto" `
+                | Select-Object -ExpandProperty "fUseMailto"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-095"
+    Task = "Configure Solicited Remote Assistance to disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-096"
+    Task = "Configure Solicited Remote Assistance - Allow helpers to only view the computer."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowFullControl" `
+                | Select-Object -ExpandProperty "fAllowFullControl"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-097"
+    Task = "Set registry value 'MaxTicketExpiry' to  ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxTicketExpiry" `
+                | Select-Object -ExpandProperty "MaxTicketExpiry"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-098"
+    Task = "Set registry value 'MaxTicketExpiryUnits' to  ."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxTicketExpiryUnits" `
+                | Select-Object -ExpandProperty "MaxTicketExpiryUnits"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-099"
+    Task = "Set registry value 'MinEncryptionLevel' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-100"
+    Task = "Set registry value 'fPromptForPassword' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-101"
+    Task = "Set registry value 'fDisableCdm' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-102"
+    Task = "Set registry value 'DisablePasswordSaving' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-103"
+    Task = "Set registry value 'fEncryptRPCTraffic' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-105"
+    Task = "Domain: Set registry value 'DefaultOutboundAction' to 0."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-106"
+    Task = "Domain: Set registry value 'DisableNotifications' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-107"
+    Task = "Domain: Set registry value 'EnableFirewall' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType        
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-108"
+    Task = "Domain: Set registry value 'DefaultInboundAction' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-109"
+    Task = "Domain: Set registry value 'LogDroppedPackets' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-110"
+    Task = "Domain: Set registry value 'LogFileSize' to 16384."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-111"
+    Task = "Domain: Set registry value 'LogSuccessfulConnections' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-112"
+    Task = "Private: Set registry value 'EnableFirewall' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-113"
+    Task = "Private: Set registry value 'DisableNotifications' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-114"
+    Task = "Private: Set registry value 'DefaultInboundAction' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-115"
+    Task = "Private: Set registry value 'DefaultOutboundAction' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-116"
+    Task = "Private: Set registry value 'LogSuccessfulConnections' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-117"
+    Task = "Private: Set registry value 'LogDroppedPackets' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-118"
+    Task = "Private: Set registry value 'LogFileSize' to 16384."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-119"
+    Task = "Public: Set registry value 'DefaultOutboundAction' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-120"
+    Task = "Public: Set registry value 'EnableFirewall' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-121"
+    Task = "Public: Set registry value 'DisableNotifications' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-122"
+    Task = "Public: Set registry value 'AllowLocalIPsecPolicyMerge' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-123"
+    Task = "Public: Set registry value 'AllowLocalPolicyMerge' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-124"
+    Task = "Public: Set registry value 'DefaultInboundAction' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-125"
+    Task = "Public: Set registry value 'LogFileSize' to 16384."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-126"
+    Task = "Public: Set registry value 'LogDroppedPackets' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-127"
+    Task = "Public: Set registry value 'LogSuccessfulConnections' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-128"
+    Task = "Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-129"
+    Task = "Set registry value 'AdmPwdEnabled' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+                | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-130"
+    Task = "Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-131"
+    Task = "Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-132"
+    Task = "Set registry value 'DriverLoadPolicy' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-133"
+    Task = "Ensure 'Configure SMB v1 server' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-134"
+    Task = "Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MrxSmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-135"
+    Task = "Set registry value 'NoNameReleaseOnDemand' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-136"
+    Task = "Set registry value 'NodeType' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-137"
+    Task = "Set registry value 'EnableICMPRedirect' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-138"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2. [Tcpip\Parameters\DisableIPSourceRouting]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-139"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2. [Tcpip6\Parameters\DisableIPSourceRouting]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-140"
+    Task = "Set registry value 'ScRemoveOption' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-141"
+    Task = "Set registry value 'InactivityTimeoutSecs' to 900."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -ne 900) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 900"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-142"
+    Task = "Set registry value 'NoLMHash' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-143"
+    Task = "Set registry value 'EnablePlainTextPassword' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-144"
+    Task = "Set registry value 'LimitBlankPasswordUse' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-145"
+    Task = "Set registry value 'RestrictAnonymousSAM' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-146"
+    Task = "Set registry value 'RestrictAnonymous' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-147"
+    Task = "Set registry value 'RestrictNullSessAccess' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-148"
+    Task = "Set registry value 'SCENoApplyLegacyAuditPolicy' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-149"
+    Task = "Set registry value 'NTLMMinClientSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-150"
+    Task = "Set registry value 'LmCompatibilityLevel' to 5."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-151"
+    Task = "Set registry value 'allownullsessionfallback' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-152"
+    Task = "Set registry value 'NTLMMinServerSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-153"
+    Task = "Set registry value 'requirestrongkey' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requirestrongkey" `
+                | Select-Object -ExpandProperty "requirestrongkey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-154"
+    Task = "Set registry value 'RequireSecuritySignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-155"
+    Task = "Set registry value 'sealsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "sealsecurechannel" `
+                | Select-Object -ExpandProperty "sealsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-156"
+    Task = "Set registry value 'requiresignorseal' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requiresignorseal" `
+                | Select-Object -ExpandProperty "requiresignorseal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-157"
+    Task = "Set registry value 'signsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "signsecurechannel" `
+                | Select-Object -ExpandProperty "signsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-158"
+    Task = "Set registry value 'requiresecuritysignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-159"
+    Task = "Set registry value 'ProtectionMode' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-160"
+    Task = "Set registry value 'ConsentPromptBehaviorAdmin' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-161"
+    Task = "Set registry value 'EnableSecureUIAPaths' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-162"
+    Task = "Set registry value 'EnableLUA' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-163"
+    Task = "Set registry value 'ConsentPromptBehaviorUser' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-164"
+    Task = "Set registry value 'EnableInstallerDetection' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-165"
+    Task = "Set registry value 'FilterAdministratorToken' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-166"
+    Task = "Set registry value 'EnableVirtualization' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-167"
+    Task = "Set registry value 'LDAPClientIntegrity' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-168"
+    Task = "Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-223"
+    Task = "Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+                | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-224"
+    Task = "Set registry value 'NoToastApplicationNotificationOnLockScreen' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-225"
+    Task = "Set registry value 'FormSuggest Passwords' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-226"
+    Task = "Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest PW Ask" `
+                | Select-Object -ExpandProperty "FormSuggest PW Ask"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-227"
+    Task = "Set registry value 'FormSuggest Passwords' to no."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-228"
+    Task = "Ensure 'Remove `"Run this time`" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "RunThisTimeEnabled" `
+                | Select-Object -ExpandProperty "RunThisTimeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-229"
+    Task = "Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "VersionCheckEnabled" `
+                | Select-Object -ExpandProperty "VersionCheckEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-230"
+    Task = "Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "RunInvalidSignatures" `
+                | Select-Object -ExpandProperty "RunInvalidSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-231"
+    Task = "Set registry value 'CheckExeSignatures' to yes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "CheckExeSignatures" `
+                | Select-Object -ExpandProperty "CheckExeSignatures"
+        
+            if ($regValue -ne "yes") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: yes"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-232"
+    Task = "Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation64Bit" `
+                | Select-Object -ExpandProperty "Isolation64Bit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-233"
+    Task = "Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableEPMCompat" `
+                | Select-Object -ExpandProperty "DisableEPMCompat"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-234"
+    Task = "Set registry value 'Isolation' to PMEM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation" `
+                | Select-Object -ExpandProperty "Isolation"
+        
+            if ($regValue -ne "PMEM") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PMEM"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-235"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_DISABLE_MK_PROTOCOL\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-236"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_DISABLE_MK_PROTOCOL\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-237"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_DISABLE_MK_PROTOCOL\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-238"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_MIME_HANDLING\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-239"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_MIME_HANDLING\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-240"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_MIME_HANDLING\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-241"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_MIME_SNIFFING\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-242"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_MIME_SNIFFING\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-243"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_MIME_SNIFFING\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-244"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_RESTRICT_ACTIVEXINSTALL\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-245"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_RESTRICT_ACTIVEXINSTALL\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-246"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_RESTRICT_ACTIVEXINSTALL\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-247"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_RESTRICT_FILEDOWNLOAD\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-248"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_RESTRICT_FILEDOWNLOAD\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-249"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_RESTRICT_FILEDOWNLOAD\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-250"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_SECURITYBAND\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-251"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_SECURITYBAND\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-252"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_SECURITYBAND\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-253"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_WINDOW_RESTRICTIONS\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-254"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_WINDOW_RESTRICTIONS\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-255"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_WINDOW_RESTRICTIONS\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-256"
+    Task = "Set registry value '(Reserved)' to 1. [FEATURE_ZONE_ELEVATION\(Reserved)]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-257"
+    Task = "Set registry value 'explorer.exe' to 1. [FEATURE_ZONE_ELEVATION\explorer.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-258"
+    Task = "Set registry value 'iexplore.exe' to 1. [FEATURE_ZONE_ELEVATION\iexplore.exe]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-259"
+    Task = "Set registry value 'PreventOverrideAppRepUnknown' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-260"
+    Task = "Set registry value 'PreventOverride' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-261"
+    Task = "Ensure 'Prevent managing SmartScreen Filter' is set to 'On'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-262"
+    Task = "Set registry value 'NoCrashDetection' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoCrashDetection" `
+                | Select-Object -ExpandProperty "NoCrashDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-263"
+    Task = "Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableSecuritySettingsCheck" `
+                | Select-Object -ExpandProperty "DisableSecuritySettingsCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-264"
+    Task = "Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX" `
+                -Name "BlockNonAdminActiveXInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-265"
+    Task = "Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AxInstaller" `
+                -Name "OnlyUseAXISForActiveXInstall" `
+                | Select-Object -ExpandProperty "OnlyUseAXISForActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-266"
+    Task = "Set registry value 'Security_zones_map_edit' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_zones_map_edit" `
+                | Select-Object -ExpandProperty "Security_zones_map_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-267"
+    Task = "Set registry value 'Security_options_edit' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_options_edit" `
+                | Select-Object -ExpandProperty "Security_options_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-268"
+    Task = "Set registry value 'Security_HKLM_only' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_HKLM_only" `
+                | Select-Object -ExpandProperty "Security_HKLM_only"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-269"
+    Task = "Ensure 'Check for server certificate revocation' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "CertificateRevocation" `
+                | Select-Object -ExpandProperty "CertificateRevocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-270"
+    Task = "Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "PreventIgnoreCertErrors" `
+                | Select-Object -ExpandProperty "PreventIgnoreCertErrors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-271"
+    Task = "Set registry value 'WarnOnBadCertRecving' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "WarnOnBadCertRecving" `
+                | Select-Object -ExpandProperty "WarnOnBadCertRecving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-272"
+    Task = "Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "EnableSSL3Fallback" `
+                | Select-Object -ExpandProperty "EnableSSL3Fallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-273"
+    Task = "Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "SecureProtocols" `
+                | Select-Object -ExpandProperty "SecureProtocols"
+        
+            if ($regValue -ne 2560) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2560"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-274"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-275"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-276"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-277"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-278"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-279"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-280"
+    Task = "Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" `
+                -Name "UNCAsIntranet" `
+                | Select-Object -ExpandProperty "UNCAsIntranet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-281"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-282"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-283"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-284"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-285"
+    Task = "Ensure 'Java permissions' is set to 'High safety'. [Zones\1\1C00]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-286"
+    Task = "Ensure 'Java permissions' is set to 'High safety'. [Zones\2\1C00]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-287"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-288"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-289"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-290"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-291"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-292"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-293"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-294"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-295"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-296"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-297"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-298"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-299"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-300"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-301"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-302"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-303"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-304"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-305"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-306"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-307"
+    Task = "Ensure 'Logon options' is set to 'Prompt for user name and password'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-308"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-309"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-310"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-311"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-312"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-313"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-314"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-315"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-316"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-317"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-318"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-319"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-320"
+    Task = "Set registry value '140C' to 3. (Zones\3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-321"
+    Task = "Ensure 'Allow META REFRESH' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1608" `
+                | Select-Object -ExpandProperty "1608"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-322"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-323"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-324"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-325"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-326"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-327"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-328"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-329"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-330"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-331"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-332"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-333"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-334"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-335"
+    Task = "Ensure 'Allow binary and script behaviors' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2000" `
+                | Select-Object -ExpandProperty "2000"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-336"
+    Task = "Ensure 'Scripting of Java applets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1402" `
+                | Select-Object -ExpandProperty "1402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-337"
+    Task = "Ensure 'Allow file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1803" `
+                | Select-Object -ExpandProperty "1803"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-338"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-339"
+    Task = "Ensure 'Allow active scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1400" `
+                | Select-Object -ExpandProperty "1400"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-340"
+    Task = "Ensure 'Logon options' is set to 'Anonymous logon'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-341"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-342"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-343"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-344"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-345"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-346"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-347"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-348"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-349"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-350"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-351"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-352"
+    Task = "Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1405" `
+                | Select-Object -ExpandProperty "1405"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-353"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-354"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-355"
+    Task = "Ensure 'Run ActiveX controls and plugins' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1200" `
+                | Select-Object -ExpandProperty "1200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-356"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-357"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-358"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-359"
+    Task = "Set registry value '140C' to 3. (Zones\4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#SecurityOptions.ps1
new file mode 100644
index 0000000..d8ce1e4
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#SecurityOptions.ps1	
@@ -0,0 +1,26 @@
+[AuditTest] @{
+    Id = "SecurityOption-169"
+    Task = "Ensure 'LSAAnonymousNameLookup' is set to '0'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#UserRights.ps1
new file mode 100644
index 0000000..371406d
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Microsoft-21H1#UserRights.ps1	
@@ -0,0 +1,882 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "UserRight-170"
+    Task = "Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-171"
+    Task = "Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-172"
+    Task = "Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-173"
+    Task = "Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-174"
+    Task = "Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-113'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-175"
+    Task = "Ensure 'SeCreatePermanentPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-176"
+    Task = "Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-177"
+    Task = "Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-178"
+    Task = "Ensure 'SeLockMemoryPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-179"
+    Task = "Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-113'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if ($missingUsers.Count -gt 0) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-180"
+    Task = "Ensure 'Access this computer from the network' is set to 'Administrator, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-181"
+    Task = "Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-6"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-182"
+    Task = "Ensure 'SeCreateTokenPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-183"
+    Task = "Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-6"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-184"
+    Task = "Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-185"
+    Task = "Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-186"
+    Task = "Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544, S-1-5-32-545'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-187"
+    Task = "Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-188"
+    Task = "Ensure 'Debug programs' is set to 'Administrators'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }        
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-189"
+    Task = "Ensure 'SeTrustedCredManAccessPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-190"
+    Task = "Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-191"
+    Task = "Ensure 'SeTcbPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-192"
+    Task = "Ensure 'SeEnableDelegationPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..7fa9cee
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AccountPolicies.ps1	
@@ -0,0 +1,255 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.7"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -gt 5 -or $setPolicy -le 0) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..01bc89f
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#AuditPolicies.ps1	
@@ -0,0 +1,1616 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..2f0430c
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#RegistrySettings.ps1	
@@ -0,0 +1,16305 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id   = "1.1.6"
+    Task = "(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SAM" `
+                -Name "RelaxMinimumPasswordLengthLimits" `
+            | Select-Object -ExpandProperty "RelaxMinimumPasswordLengthLimits"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+            | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+            | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+            | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+            | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.4.1"
+    Task = "(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+            | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+            | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+            | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.3"
+    Task = "(BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MaxDevicePasswordFailedAttempts" `
+            | Select-Object -ExpandProperty "MaxDevicePasswordFailedAttempts"
+        
+            if (($regValue -gt 10 -or $regValue -le 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 10 and x > 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.4"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+            | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+            | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.6"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+            | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+            | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -lt 5 -or $regValue -gt 14)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 5 and x <= 14"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+            | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+            | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+            | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+            | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+            | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if (($regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+            | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+            | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.4"
+    Task = "(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+            | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+            | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.6"
+    Task = "(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+            | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.7"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.8"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths and sub-paths'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.9"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+            | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+            | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+            | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+            | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+            | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+            | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+            | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+            | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+            | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+            | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if (($regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+            | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+            | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.14.1"
+    Task = "(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+            | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+            | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+            | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+            | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+            | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+            | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+            | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+            | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+            | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1"
+    Task = "(L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTAGService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2"
+    Task = "(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3"
+    Task = "(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4"
+    Task = "(L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5"
+    Task = "(L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.6"
+    Task = "(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.7"
+    Task = "(L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\irmon" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.8"
+    Task = "(L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.9"
+    Task = "(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.10"
+    Task = "(L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LxssManager" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.11"
+    Task = "(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FTPSVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.12"
+    Task = "(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.13"
+    Task = "(L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshd" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.14"
+    Task = "(L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.15"
+    Task = "(L2) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.16"
+    Task = "(L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.17"
+    Task = "(L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.18"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.19"
+    Task = "(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.20"
+    Task = "(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.21"
+    Task = "(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.22"
+    Task = "(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.23"
+    Task = "(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.24"
+    Task = "(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.25"
+    Task = "(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.26"
+    Task = "(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.27"
+    Task = "(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.28"
+    Task = "(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\simptcp" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.29"
+    Task = "(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.30"
+    Task = "(L1) Ensure 'Special Administration Console Helper (sacsvr)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sacsvr" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.31"
+    Task = "(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.32"
+    Task = "(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.33"
+    Task = "(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.34"
+    Task = "(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.35"
+    Task = "(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.36"
+    Task = "(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.37"
+    Task = "(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.38"
+    Task = "(L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.39"
+    Task = "(L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PushToInstall" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.40"
+    Task = "(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.41"
+    Task = "(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.42"
+    Task = "(L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxGipSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.43"
+    Task = "(L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.44"
+    Task = "(L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.45"
+    Task = "(L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile" `
+                -Name "EnableFirewall" `
+            | Select-Object -ExpandProperty "EnableFirewall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile" `
+                -Name "DefaultInboundAction" `
+            | Select-Object -ExpandProperty "DefaultInboundAction"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.8"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.10"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+            | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+            | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+            | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+            | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.1"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+            | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.2"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.4"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+            | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.5"
+    Task = "(L1) Ensure 'LSA Protection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+            | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.6"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+            | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.7"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+            | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.4"
+    Task = "(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\Parameters" `
+                -Name "disablesavepassword" `
+            | Select-Object -ExpandProperty "disablesavepassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.5"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+            | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.6"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+            | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.7"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+            | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.8"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+            | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+            | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.10"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+            | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.12"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.13"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+            | Select-Object -ExpandProperty "WarningLevel"
+        
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' (or 0 - Disable NetBIOS name resolution)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetbios" `
+            | Select-Object -ExpandProperty "EnableNetbios"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2 or x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.2"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+            | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+            | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.1"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+            | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+            | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+            | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+            | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+            | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+            | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+            | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+            | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+            | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+            | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+            | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`" and `"Require Integrity`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+            | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`" and `"Require Integrity`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+            | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+            | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if (($regValue -ne 255)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+            | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+            | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+            | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+            | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+            | Select-Object -ExpandProperty "DisableWPDRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+            | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+            | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.23.2.1"
+    Task = "(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+            | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+            | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+            | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+            | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+            | Select-Object -ExpandProperty "RpcAuthentication"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+            | Select-Object -ExpandProperty "RpcProtocols"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: Negotiate' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+            | Select-Object -ExpandProperty "ForceKerberosForRpc"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+            | Select-Object -ExpandProperty "RpcTcpPort"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.8"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+            | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.9"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+            | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.10"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+            | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.11"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+            | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+            | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+            | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+            | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+            | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.1"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+            | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.2"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+            | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.3"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+            | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.4"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+            | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.5"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+            | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.6"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+            | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.1"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDs" `
+            | Select-Object -ExpandProperty "DenyDeviceIDs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.2"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" `
+                -Name "1" `
+            | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "PCI\CC_0C0A") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PCI\CC_0C0A"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.3"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDsRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceIDsRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.4"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+            | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.5 A"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the SBP2 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "1" `
+            | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "{d48179be-ec20-11d1-b6b8-00c04fa372a7}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.5 B"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the IEC-61883 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "2" `
+            | Select-Object -ExpandProperty "2"
+        
+            if ($regValue -ne "{7ebefbc0-3200-11d2-b4c2-00a0C9697d07}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {7ebefbc0-3200-11d2-b4c2-00a0C9697d07}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.5 C"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the AVC Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "3" `
+            | Select-Object -ExpandProperty "3"
+        
+            if ($regValue -ne "{c06ff265-ae09-48f0-812c-16753d7cba83}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {c06ff265-ae09-48f0-812c-16753d7cba83}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.5 D"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 Host Bus Controller Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "4" `
+            | Select-Object -ExpandProperty "4"
+        
+            if ($regValue -ne "{6bdd1fc1-810f-11d0-bec7-08002be2092f}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {6bdd1fc1-810f-11d0-bec7-08002be2092f}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.6"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+            | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+            | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.2"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+            | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.1"
+    Task = "(L2) Ensure 'Turn off access to the Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoUseStoreOpenWith" `
+            | Select-Object -ExpandProperty "NoUseStoreOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.2"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+            | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+            | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+            | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.5"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+            | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.6"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+            | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+            | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+            | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+            | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+            | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+            | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+            | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.13"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+            | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.14 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.14 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+            | Select-Object -ExpandProperty "DoReport"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+            | Select-Object -ExpandProperty "DevicePKInitBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+            | Select-Object -ExpandProperty "DevicePKInitEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.24.1"
+    Task = "(BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+            | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.1"
+    Task = "(L1) Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "ConfigureLsaProtectedProcess" `
+            | Select-Object -ExpandProperty "ConfigureLsaProtectedProcess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.26.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+            | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.27.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+            | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.27.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+            | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.27.3"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+            | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.27.4"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+            | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.30.1"
+    Task = "(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+            | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.30.2"
+    Task = "(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+            | Select-Object -ExpandProperty "UploadUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.32.6.1"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.32.6.2"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.32.6.3"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.32.6.4"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.32.6.5"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.32.6.6"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.34.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+            | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.34.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+            | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.35.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+            | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.35.2"
+    Task = "(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+            | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.46.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+            | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.46.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+            | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.48.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+            | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.3.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+            | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.3.2"
+    Task = "(L1) Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx" `
+                -Name "BlockNonAdminUserInstall" `
+            | Select-Object -ExpandProperty "BlockNonAdminUserInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.4.1"
+    Task = "(L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoiceAboveLock" `
+            | Select-Object -ExpandProperty "LetAppsActivateWithVoiceAboveLock"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.5.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+            | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.5.2"
+    Task = "(L2) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "BlockHostedAppAccessWinRT" `
+            | Select-Object -ExpandProperty "BlockHostedAppAccessWinRT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.7.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+            | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.7.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+            | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.7.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+            | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.8.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+            | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVDiscoveryVolumeType" `
+            | Select-Object -ExpandProperty "FDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: This value should be empty."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecovery" `
+            | Select-Object -ExpandProperty "FDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVManageDRA" `
+            | Select-Object -ExpandProperty "FDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryPassword" `
+            | Select-Object -ExpandProperty "FDVRecoveryPassword"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryKey" `
+            | Select-Object -ExpandProperty "FDVRecoveryKey"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHideRecoveryPage" `
+            | Select-Object -ExpandProperty "FDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "FDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "FDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "FDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHardwareEncryption" `
+            | Select-Object -ExpandProperty "FDVHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.11"
+    Task = "(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVPassphrase" `
+            | Select-Object -ExpandProperty "FDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVAllowUserCert" `
+            | Select-Object -ExpandProperty "FDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVEnforceUserCert" `
+            | Select-Object -ExpandProperty "FDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.1"
+    Task = "(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+            | Select-Object -ExpandProperty "UseEnhancedPin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.2"
+    Task = "(BL) Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSAllowSecureBootForIntegrity" `
+            | Select-Object -ExpandProperty "OSAllowSecureBootForIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecovery" `
+            | Select-Object -ExpandProperty "OSRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSManageDRA" `
+            | Select-Object -ExpandProperty "OSManageDRA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryPassword" `
+            | Select-Object -ExpandProperty "OSRecoveryPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryKey" `
+            | Select-Object -ExpandProperty "OSRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHideRecoveryPage" `
+            | Select-Object -ExpandProperty "OSHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "OSActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "OSActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.10"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "OSRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.11"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHardwareEncryption" `
+            | Select-Object -ExpandProperty "OSHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.12"
+    Task = "(BL) Ensure 'Configure use of passwords for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSPassphrase" `
+            | Select-Object -ExpandProperty "OSPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.13"
+    Task = "(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseAdvancedStartup" `
+            | Select-Object -ExpandProperty "UseAdvancedStartup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.14"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EnableBDEWithNoTPM" `
+            | Select-Object -ExpandProperty "EnableBDEWithNoTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.15"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup:' is set to 'Enabled: Do not allow TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPM" `
+            | Select-Object -ExpandProperty "UseTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.16"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup PIN:' is set to 'Enabled: Require startup PIN with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMPIN" `
+            | Select-Object -ExpandProperty "UseTPMPIN"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.17"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key:' is set to 'Enabled: Do not allow startup key with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKey" `
+            | Select-Object -ExpandProperty "UseTPMKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.2.18"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key and PIN:' is set to 'Enabled: Do not allow startup key and PIN with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKeyPIN" `
+            | Select-Object -ExpandProperty "UseTPMKeyPIN"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVDiscoveryVolumeType" `
+            | Select-Object -ExpandProperty "RDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: ''"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecovery" `
+            | Select-Object -ExpandProperty "RDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVManageDRA" `
+            | Select-Object -ExpandProperty "RDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryPassword" `
+            | Select-Object -ExpandProperty "RDVRecoveryPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryKey" `
+            | Select-Object -ExpandProperty "RDVRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHideRecoveryPage" `
+            | Select-Object -ExpandProperty "RDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "RDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "RDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "RDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHardwareEncryption" `
+            | Select-Object -ExpandProperty "RDVHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.11"
+    Task = "(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVPassphrase" `
+            | Select-Object -ExpandProperty "RDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVAllowUserCert" `
+            | Select-Object -ExpandProperty "RDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVEnforceUserCert" `
+            | Select-Object -ExpandProperty "RDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.14"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+            | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.3.15"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVDenyCrossOrg" `
+            | Select-Object -ExpandProperty "RDVDenyCrossOrg"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.4"
+    Task = "(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "DisableExternalDMAUnderLock" `
+            | Select-Object -ExpandProperty "DisableExternalDMAUnderLock"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+            | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+            | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.12.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+            | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.12.2"
+    Task = "(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableCloudOptimizedContent" `
+            | Select-Object -ExpandProperty "DisableCloudOptimizedContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.12.3"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.13.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+            | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.14.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+            | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.14.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+            | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.14.3"
+    Task = "(L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "NoLocalPasswordResetQuestions" `
+            | Select-Object -ExpandProperty "NoLocalPasswordResetQuestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+            | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+            | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+            | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+            | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+            | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+            | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+            | Select-Object -ExpandProperty "LimitDumpCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.8"
+    Task = "(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+            | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.1"
+    Task = "(L1) Ensure 'Download Mode' is NOT set to 'Enabled: Internet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeliveryOptimization" `
+                -Name "DODownloadMode" `
+            | Select-Object -ExpandProperty "DODownloadMode"
+        
+            if (($regValue -eq 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x != 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.17.1"
+    Task = "(L1) Ensure 'Enable App Installer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableAppInstaller" `
+            | Select-Object -ExpandProperty "EnableAppInstaller"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.17.2"
+    Task = "(L1) Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableExperimentalFeatures" `
+            | Select-Object -ExpandProperty "EnableExperimentalFeatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.17.3"
+    Task = "(L1) Ensure 'Enable App Installer Hash Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableHashOverride" `
+            | Select-Object -ExpandProperty "EnableHashOverride"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.17.4"
+    Task = "(L1) Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableMSAppInstallerProtocol" `
+            | Select-Object -ExpandProperty "EnableMSAppInstallerProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+            | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.3"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+            | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.4"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+            | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.33.1"
+    Task = "(L1) Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HomeGroup" `
+                -Name "DisableHomeGroup" `
+            | Select-Object -ExpandProperty "DisableHomeGroup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.35.1"
+    Task = "(L1) 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "NotifyDisableIEOptions" `
+            | Select-Object -ExpandProperty "NotifyDisableIEOptions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.37.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+            | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.41.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+            | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.42.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+            | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+            | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+            | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }            
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+            
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                   
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 K"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 L"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 M"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+            | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.7.1"
+    Task = "(L2) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "EnableFileHashComputation" `
+            | Select-Object -ExpandProperty "EnableFileHashComputation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.1"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+            | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.2"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+            | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.3"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+            | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.4"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+            | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+            | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.1"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+            | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.2"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+            | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+            | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.17"
+    Task = "(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+            | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.1"
+    Task = "(NG) Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AuditApplicationGuard" `
+            | Select-Object -ExpandProperty "AuditApplicationGuard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.2"
+    Task = "(NG) Ensure 'Allow camera and microphone access in Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowCameraMicrophoneRedirection" `
+            | Select-Object -ExpandProperty "AllowCameraMicrophoneRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.3"
+    Task = "(NG) Ensure 'Allow data persistence for Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowPersistence" `
+            | Select-Object -ExpandProperty "AllowPersistence"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.4"
+    Task = "(NG) Ensure 'Allow files to download and save to the host operating system from Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "SaveFilesToHost" `
+            | Select-Object -ExpandProperty "SaveFilesToHost"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.5"
+    Task = "(NG) Ensure 'Configure Windows Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AppHVSIClipboardSettings" `
+            | Select-Object -ExpandProperty "AppHVSIClipboardSettings"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.6"
+    Task = "(NG) Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowAppHVSI_ProviderSet" `
+            | Select-Object -ExpandProperty "AllowAppHVSI_ProviderSet"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.50.1"
+    Task = "(L2) Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds" `
+                -Name "EnableFeeds" `
+            | Select-Object -ExpandProperty "EnableFeeds"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.51.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+            | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.56.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+            | Select-Object -ExpandProperty "DisablePushToInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+            | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.2.1"
+    Task = "(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+            | Select-Object -ExpandProperty "fDenyTSConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.1"
+    Task = "(L2) Ensure 'Allow UI Automation redirection' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "EnableUiaRedirection" `
+            | Select-Object -ExpandProperty "EnableUiaRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.2"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+            | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.3"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+            | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.4"
+    Task = "(L2) Ensure 'Do not allow location redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLocationRedir" `
+            | Select-Object -ExpandProperty "fDisableLocationRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.5"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+            | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.6"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+            | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.7"
+    Task = "(L2) Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableWebAuthn" `
+            | Select-Object -ExpandProperty "fDisableWebAuthn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+            | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+            | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+            | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+            | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+            | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+            | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+            | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+            | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.58.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+            | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+            | Select-Object -ExpandProperty "AllowCloudSearch"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.3"
+    Task = "(L1) Ensure 'Allow Cortana' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortana" `
+            | Select-Object -ExpandProperty "AllowCortana"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.4"
+    Task = "(L1) Ensure 'Allow Cortana above lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortanaAboveLock" `
+            | Select-Object -ExpandProperty "AllowCortanaAboveLock"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.5"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+            | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.6"
+    Task = "(L1) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowSearchToUseLocation" `
+            | Select-Object -ExpandProperty "AllowSearchToUseLocation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.7"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+            | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.63.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+            | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.1"
+    Task = "(L2) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableStoreApps" `
+            | Select-Object -ExpandProperty "DisableStoreApps"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.2"
+    Task = "(L1) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RequirePrivateStoreOnly" `
+            | Select-Object -ExpandProperty "RequirePrivateStoreOnly"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.3"
+    Task = "(L1) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+            | Select-Object -ExpandProperty "AutoDownload"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.4"
+    Task = "(L1) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableOSUpgrade" `
+            | Select-Object -ExpandProperty "DisableOSUpgrade"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.5"
+    Task = "(L2) Ensure 'Turn off the Store application' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RemoveWindowsStore" `
+            | Select-Object -ExpandProperty "RemoveWindowsStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.72.1"
+    Task = "(L1) Ensure 'Allow widgets' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh" `
+                -Name "AllowNewsAndInterests" `
+            | Select-Object -ExpandProperty "AllowNewsAndInterests"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+            | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.3.1"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "EnabledV9" `
+            | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.3.2"
+    Task = "(L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled' (PreventOverride)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverride" `
+            | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.78.1"
+    Task = "(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+            | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.80.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.80.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+            | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+            | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.82.1"
+    Task = "(L1) Ensure 'Enable MPR notifications for the system' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableMPR" `
+            | Select-Object -ExpandProperty "EnableMPR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.82.2"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+            | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.87.1"
+    Task = "(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+            | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.87.2"
+    Task = "(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+            | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+            | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+            | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+            | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.90.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+            | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.91.1"
+    Task = "(L1) Ensure 'Allow clipboard sharing with Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowClipboardRedirection" `
+            | Select-Object -ExpandProperty "AllowClipboardRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.91.2"
+    Task = "(L1) Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowNetworking" `
+            | Select-Object -ExpandProperty "AllowNetworking"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+            | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+            | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+            | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+            | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.3"
+    Task = "(L1) Ensure 'Remove access to `"Pause updates`" feature' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "SetDisablePauseUXAccess" `
+            | Select-Object -ExpandProperty "SetDisablePauseUXAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+            | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+            | Select-Object -ExpandProperty "DeferFeatureUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+            | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+        
+            if (($regValue -lt 180 -or $regValue -gt 365)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+            | Select-Object -ExpandProperty "DeferQualityUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+            | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.1.3.1"
+    Task = "(L1) Ensure 'Enable screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveActive" `
+            | Select-Object -ExpandProperty "ScreenSaveActive"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.1.3.2"
+    Task = "(L1) Ensure 'Password protect the screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaverIsSecure" `
+            | Select-Object -ExpandProperty "ScreenSaverIsSecure"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+            | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+            | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.4.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+            | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.4.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+            | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.7.1"
+    Task = "(L1) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+            | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.7.2"
+    Task = "(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+            | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.7.3"
+    Task = "(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+            | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.7.4"
+    Task = "(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.7.5"
+    Task = "(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSpotlightCollectionOnDesktop" `
+            | Select-Object -ExpandProperty "DisableSpotlightCollectionOnDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.25.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+            | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.40.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.42.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+            | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..55176b4
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#SecurityOptions.ps1	
@@ -0,0 +1,130 @@
+[AuditTest] @{
+    Id = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.5"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#UserRights.ps1
new file mode 100644
index 0000000..d425e62
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 10-Stand-alone-CIS-2.0.0#UserRights.ps1	
@@ -0,0 +1,1312 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+    
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.20"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.21"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @() | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.22"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.23"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.24"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.25"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.26"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.27"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.28"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @() | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.30"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.31"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.32"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.33"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.34"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.35"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.36"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.37"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.38"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.39"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..212808c
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AccountPolicies.ps1	
@@ -0,0 +1,284 @@
+[AuditTest] @{
+    Id   = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if ($setPolicy -eq -1) {
+                #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 days and x > 0 days"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1 days"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.7"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -lt 15 -or $setPolicy -gt 99999)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 minutes and x <= 99999 minutes"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.3"
+    Task = "(L1) Ensure 'Allow Administrator account lockout' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["AllowAdministratorLockout"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'AllowAdministratorLockout' currently set to: $setPolicy. Expected: 1"
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -gt 99999 -or $setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x <= 99999 minutes and x >= 15 minutes"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..25e8dd5
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#AuditPolicies.ps1	
@@ -0,0 +1,1616 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+    Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+        [string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id   = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.2.2"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.2.3"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..6e82451
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#RegistrySettings.ps1	
@@ -0,0 +1,18823 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id   = "1.1.6"
+    Task = "(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SAM" `
+                -Name "RelaxMinimumPasswordLengthLimits" `
+            | Select-Object -ExpandProperty "RelaxMinimumPasswordLengthLimits"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+            | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+            | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+            | Select-Object -ExpandProperty "CrashOnAuditFail"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.4.1"
+    Task = "(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+            | Select-Object -ExpandProperty "AddPrinterDrivers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+            | Select-Object -ExpandProperty "RequireSignOrSeal"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+            | Select-Object -ExpandProperty "SealSecureChannel"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+            | Select-Object -ExpandProperty "SignSecureChannel"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+            | Select-Object -ExpandProperty "DisablePasswordChange"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+            | Select-Object -ExpandProperty "MaximumPasswordAge"
+
+            if (($regValue -le 0 -or $regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+            | Select-Object -ExpandProperty "RequireStrongKey"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+            | Select-Object -ExpandProperty "DisableCAD"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+            | Select-Object -ExpandProperty "DontDisplayLastUserName"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.3"
+    Task = "(BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MaxDevicePasswordFailedAttempts" `
+            | Select-Object -ExpandProperty "MaxDevicePasswordFailedAttempts"
+
+            if (($regValue -gt 10 -or $regValue -le 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 10 and x > 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.4"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+            | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+            | Select-Object -ExpandProperty "LegalNoticeText"
+
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.6"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+            | Select-Object -ExpandProperty "LegalNoticeCaption"
+
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.7"
+    Task = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+            | Select-Object -ExpandProperty "CachedLogonsCount"
+
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+            | Select-Object -ExpandProperty "PasswordExpiryWarning"
+
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.9"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 1 - 'Lock Workstation' or 2 / 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+            | Select-Object -ExpandProperty "ScRemoveOption"
+
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+            | Select-Object -ExpandProperty "RequireSecuritySignature"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+            | Select-Object -ExpandProperty "EnableSecuritySignature"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+            | Select-Object -ExpandProperty "EnablePlainTextPassword"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+            | Select-Object -ExpandProperty "AutoDisconnect"
+
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+            | Select-Object -ExpandProperty "RequireSecuritySignature"
+
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+            | Select-Object -ExpandProperty "EnableSecuritySignature"
+
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+            | Select-Object -ExpandProperty "enableforcedlogoff"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+            | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+            | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+            | Select-Object -ExpandProperty "RestrictAnonymous"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.4"
+    Task = "(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+            | Select-Object -ExpandProperty "DisableDomainCreds"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+            | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.6"
+    Task = "(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+            | Select-Object -ExpandProperty "NullSessionPipes"
+
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.7"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.8"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.9"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+            | Select-Object -ExpandProperty "RestrictNullSessAccess"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+            | Select-Object -ExpandProperty "restrictremotesam"
+
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+            | Select-Object -ExpandProperty "NullSessionShares"
+
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+            | Select-Object -ExpandProperty "ForceGuest"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+            | Select-Object -ExpandProperty "UseMachineId"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+            | Select-Object -ExpandProperty "AllowNullSessionFallback"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+            | Select-Object -ExpandProperty "AllowOnlineID"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+            | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+            | Select-Object -ExpandProperty "LmCompatibilityLevel"
+
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client encryption requirements' is set to 1 - 'Negotiate sealing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "ldapclientconfidentiality" `
+            | Select-Object -ExpandProperty "ldapclientconfidentiality"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 1 - 'Negotiate signing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+            | Select-Object -ExpandProperty "LDAPClientIntegrity"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+            | Select-Object -ExpandProperty "NTLMMinClientSec"
+
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.11"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+            | Select-Object -ExpandProperty "NTLMMinServerSec"
+
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.12"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit Incoming NTLM Traffic' is set to 'Enable auditing for all accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AuditReceivingNTLMTraffic" `
+            | Select-Object -ExpandProperty "AuditReceivingNTLMTraffic"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.13"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 1 - 'Audit all' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictSendingNTLMTraffic" `
+            | Select-Object -ExpandProperty "RestrictSendingNTLMTraffic"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.14.1"
+    Task = "(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 1 - 'User is prompted when the key is first used' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+            | Select-Object -ExpandProperty "ForceKeyProtection"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+            | Select-Object -ExpandProperty "ObCaseInsensitive"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+            | Select-Object -ExpandProperty "ProtectionMode"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+            | Select-Object -ExpandProperty "FilterAdministratorToken"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 2 - 'Prompt for consent on the secure desktop' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+            | Select-Object -ExpandProperty "EnableInstallerDetection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+            | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+            | Select-Object -ExpandProperty "EnableLUA"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+            | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+            | Select-Object -ExpandProperty "EnableVirtualization"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1"
+    Task = "(L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTAGService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2"
+    Task = "(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3"
+    Task = "(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4"
+    Task = "(L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.5"
+    Task = "(L2) Ensure 'GameInput Service (GameInputSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GameInputSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.6"
+    Task = "(L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.7"
+    Task = "(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.8"
+    Task = "(L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\irmon" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.9"
+    Task = "(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.10"
+    Task = "(L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LxssManager" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.11"
+    Task = "(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FTPSVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.12"
+    Task = "(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.13"
+    Task = "(L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshd" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.14"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.15"
+    Task = "(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.16"
+    Task = "(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.17"
+    Task = "(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.18"
+    Task = "(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.19"
+    Task = "(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.20"
+    Task = "(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.21"
+    Task = "(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.22"
+    Task = "(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.23"
+    Task = "(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.24"
+    Task = "(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\simptcp" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.25"
+    Task = "(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.26"
+    Task = "(L1) Ensure 'Special Administration Console Helper (sacsvr)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sacsvr" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.27"
+    Task = "(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.28"
+    Task = "(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.29"
+    Task = "(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.30"
+    Task = "(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.31"
+    Task = "(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.32"
+    Task = "(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.33"
+    Task = "(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.34"
+    Task = "(L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.35"
+    Task = "(L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PushToInstall" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.36"
+    Task = "(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.37"
+    Task = "(L2) Ensure 'WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.38"
+    Task = "(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.39"
+    Task = "(L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxGipSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.40"
+    Task = "(L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.41"
+    Task = "(L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.42"
+    Task = "(L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.1.1"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.1.2"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.1.3"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.1.4"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.1.5"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.1.6"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.1.7"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+            | Select-Object -ExpandProperty "NoLockScreenCamera"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+            | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+            | Select-Object -ExpandProperty "AllowInputPersonalization"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+            | Select-Object -ExpandProperty "AllowOnlineTips"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.1"
+    Task = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+            | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.2"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.4"
+    Task = "(L1) Ensure 'Enable Certificate Padding' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" `
+                -Name "EnableCertPaddingCheck" `
+            | Select-Object -ExpandProperty "EnableCertPaddingCheck"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.5"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+            | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.6"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+            | Select-Object -ExpandProperty "NodeType"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.7"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+            | Select-Object -ExpandProperty "AutoAdminLogon"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.4"
+    Task = "(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters" `
+                -Name "disablesavepassword" `
+            | Select-Object -ExpandProperty "disablesavepassword"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.5"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+            | Select-Object -ExpandProperty "EnableICMPRedirect"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.6"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+            | Select-Object -ExpandProperty "KeepAliveTime"
+
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.7"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+            | Select-Object -ExpandProperty "nonamereleaseondemand"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.8"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+            | Select-Object -ExpandProperty "PerformRouterDiscovery"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+            | Select-Object -ExpandProperty "SafeDllSearchMode"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.10"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+            | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.12"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.13"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+            | Select-Object -ExpandProperty "WarningLevel"
+
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure multicast DNS (mDNS) protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMDNS" `
+            | Select-Object -ExpandProperty "EnableMDNS"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.2"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' or 0 - 'Enabled: Disable NetBIOS name resolution'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+            | Select-Object -ExpandProperty "EnableNetBIOS"
+
+            if (($regValue -ne 2) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.3"
+    Task = "(L2) Ensure 'Turn off default IPv6 DNS Servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "DisableIPv6DefaultDnsServers" `
+            | Select-Object -ExpandProperty "DisableIPv6DefaultDnsServers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.4"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+            | Select-Object -ExpandProperty "EnableMulticast"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+            | Select-Object -ExpandProperty "EnableFontProviders"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.1"
+    Task = "(L1) Ensure 'Audit client does not support encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "AuditClientDoesNotSupportEncryption" `
+            | Select-Object -ExpandProperty "AuditClientDoesNotSupportEncryption"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.2"
+    Task = "(L1) Ensure 'Audit client does not support signing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "AuditClientDoesNotSupportSigning" `
+            | Select-Object -ExpandProperty "AuditClientDoesNotSupportSigning"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.3"
+    Task = "(L1) Ensure 'Audit insecure guest logon' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "AuditInsecureGuestLogon" `
+            | Select-Object -ExpandProperty "AuditInsecureGuestLogon"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.4"
+    Task = "(L1) Ensure 'Enable authentication rate limiter' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "EnableAuthRateLimiter" `
+            | Select-Object -ExpandProperty "EnableAuthRateLimiter"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.5"
+    Task = "(L1) Ensure 'Enable remote mailslots' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Bowser" `
+                -Name "EnableMailslots" `
+            | Select-Object -ExpandProperty "EnableMailslots"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.6"
+    Task = "(L1) Ensure 'Mandate the minimum version of SMB' is set to 'Enabled: 3.1.1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "MinSmb2Dialect" `
+            | Select-Object -ExpandProperty "MinSmb2Dialect"
+
+            if (($regValue -ne 785)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 785"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.7"
+    Task = "(L1) Ensure 'Set authentication rate limiter delay (milliseconds)' is set to 'Enabled: 2000' or more"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "InvalidAuthenticationDelayTimeInMs" `
+            | Select-Object -ExpandProperty "InvalidAuthenticationDelayTimeInMs"
+
+            if (($regValue -lt 2000)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 2000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.1"
+    Task = "(L1) Ensure 'Audit insecure guest logon' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AuditInsecureGuestLogon" `
+            | Select-Object -ExpandProperty "AuditInsecureGuestLogon"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.2"
+    Task = "(L1) Ensure 'Audit server does not support encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AuditServerDoesNotSupportEncryption" `
+            | Select-Object -ExpandProperty "AuditServerDoesNotSupportEncryption"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.3"
+    Task = "(L1) Ensure 'Audit server does not support signing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AuditServerDoesNotSupportSigning" `
+            | Select-Object -ExpandProperty "AuditServerDoesNotSupportSigning"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.4"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+            | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.5"
+    Task = "(L1) Ensure 'Enable remote mailslots' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider" `
+                -Name "EnableMailslots" `
+            | Select-Object -ExpandProperty "EnableMailslots"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.6"
+    Task = "(L1) Ensure 'Mandate the minimum version of SMB' is set to 'Enabled: 3.1.1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "MinSmb2Dialect" `
+            | Select-Object -ExpandProperty "MinSmb2Dialect"
+
+            if (($regValue -ne 785)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 785"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.7"
+    Task = "(L1) Ensure 'Require Encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "RequireEncryption" `
+            | Select-Object -ExpandProperty "RequireEncryption"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+            | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+            | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+            | Select-Object -ExpandProperty "EnableLLTDIO"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+            | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+            | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+            | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+            | Select-Object -ExpandProperty "EnableRspndr"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+            | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+            | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+            | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.4"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+            | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+            | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+            | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+            | Select-Object -ExpandProperty "DisabledComponents"
+
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+            | Select-Object -ExpandProperty "EnableRegistrars"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+            | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+            | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+            | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+            | Select-Object -ExpandProperty "DisableWPDRegistrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+            | Select-Object -ExpandProperty "DisableWcnUi"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+            | Select-Object -ExpandProperty "fMinimizeConnections"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.21.2"
+    Task = "(L1) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+            | Select-Object -ExpandProperty "fBlockNonDomain"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.23.2.1"
+    Task = "(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+            | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+            | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+            | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+            | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+            | Select-Object -ExpandProperty "RpcAuthentication"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+            | Select-Object -ExpandProperty "RpcProtocols"
+
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: 0 - Negotiate' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+            | Select-Object -ExpandProperty "ForceKerberosForRpc"
+
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+            | Select-Object -ExpandProperty "RpcTcpPort"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.8"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+            | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.9"
+    Task = "(L2) Ensure 'Configure Windows protected print' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\WPP" `
+                -Name "WindowsProtectedPrintGroupPolicyState" `
+            | Select-Object -ExpandProperty "WindowsProtectedPrintGroupPolicyState"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.10"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+            | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.11"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+            | Select-Object -ExpandProperty "CopyFilesPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.12"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+            | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.13"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+            | Select-Object -ExpandProperty "UpdatePromptSettings"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+            | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.8.2"
+    Task = "(L2) Ensure 'Remove Personalized Website Recommendations from the Recommended section in the Start Menu' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "HideRecommendedPersonalizedSites" `
+            | Select-Object -ExpandProperty "HideRecommendedPersonalizedSites"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+            | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+            | Select-Object -ExpandProperty "AllowEncryptionOracle"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+            | Select-Object -ExpandProperty "AllowProtectedCreds"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.1"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+            | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.2"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 1 - 'Secure Boot' or 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+            | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+
+            if (($regValue -ne 1) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.3"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+            | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.4"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+            | Select-Object -ExpandProperty "HVCIMATRequired"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.5"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+            | Select-Object -ExpandProperty "LsaCfgFlags"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.6"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+            | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.7"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Kernel-mode Hardware-enforced Stack Protection' is set to 'Enabled: Enabled in enforcement mode'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureKernelShadowStacksLaunch" `
+            | Select-Object -ExpandProperty "ConfigureKernelShadowStacksLaunch"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.1"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+            | Select-Object -ExpandProperty "DenyDeviceClasses"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.2 A"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the SBP2 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "1" `
+            | Select-Object -ExpandProperty "1"
+
+            if ($regValue -ne "{d48179be-ec20-11d1-b6b8-00c04fa372a7}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.2 B"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the IEC-61883 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "2" `
+            | Select-Object -ExpandProperty "2"
+
+            if ($regValue -ne "{7ebefbc0-3200-11d2-b4c2-00a0C9697d07}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {7ebefbc0-3200-11d2-b4c2-00a0C9697d07}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.2 C"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the AVC Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "3" `
+            | Select-Object -ExpandProperty "3"
+
+            if ($regValue -ne "{c06ff265-ae09-48f0-812c-16753d7cba83}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {c06ff265-ae09-48f0-812c-16753d7cba83}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.2 D"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 Host Bus Controller Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "4" `
+            | Select-Object -ExpandProperty "4"
+
+            if ($regValue -ne "{6bdd1fc1-810f-11d0-bec7-08002be2092f}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {6bdd1fc1-810f-11d0-bec7-08002be2092f}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.1.3"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+            | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+            | Select-Object -ExpandProperty "DriverLoadPolicy"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+            | Select-Object -ExpandProperty "NoBackgroundPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.4"
+    Task = "(L1) Ensure 'Configure security policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoBackgroundPolicy" `
+            | Select-Object -ExpandProperty "NoBackgroundPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.5"
+    Task = "(L1) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.6"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+            | Select-Object -ExpandProperty "EnableCdp"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.7"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+            | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.1"
+    Task = "(L2) Ensure 'Turn off access to the Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoUseStoreOpenWith" `
+            | Select-Object -ExpandProperty "NoUseStoreOpenWith"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.2"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+            | Select-Object -ExpandProperty "DisableWebPnPDownload"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+            | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+            | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.5"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+            | Select-Object -ExpandProperty "ExitOnMSICW"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.6"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+            | Select-Object -ExpandProperty "NoWebServices"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+            | Select-Object -ExpandProperty "DisableHTTPPrinting"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+            | Select-Object -ExpandProperty "NoRegistration"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+            | Select-Object -ExpandProperty "DisableContentFileUpdates"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+            | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+            | Select-Object -ExpandProperty "NoPublishingWizard"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+            | Select-Object -ExpandProperty "CEIP"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.13"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+            | Select-Object -ExpandProperty "CEIPEnable"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.14 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.14 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+            | Select-Object -ExpandProperty "DoReport"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+            | Select-Object -ExpandProperty "DevicePKInitBehavior"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+            | Select-Object -ExpandProperty "DevicePKInitEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.24.1"
+    Task = "(BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+            | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.1"
+    Task = "(L1) Ensure 'Configure password backup directory' is set to 2 - 'Enabled: Active Directory' or 1 - 'Enabled: Azure Active Directory'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "BackupDirectory" `
+            | Select-Object -ExpandProperty "BackupDirectory"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PwdExpirationProtectionEnabled" `
+            | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.3"
+    Task = "(L1) Ensure 'Enable password encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "ADPasswordEncryptionEnabled" `
+            | Select-Object -ExpandProperty "ADPasswordEncryptionEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordComplexity" `
+            | Select-Object -ExpandProperty "PasswordComplexity"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordLength" `
+            | Select-Object -ExpandProperty "PasswordLength"
+
+            if (($regValue -lt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordAgeDays" `
+            | Select-Object -ExpandProperty "PasswordAgeDays"
+
+            if (($regValue -gt 30 -or $regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x >= 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.7"
+    Task = "(L1) Ensure 'Post-authentication actions: Grace period (hours)' is set to 'Enabled: 8 or fewer hours, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationResetDelay" `
+            | Select-Object -ExpandProperty "PostAuthenticationResetDelay"
+
+            if (($regValue -gt 8 -or $regValue -le 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 8 and x > 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.8"
+    Task = "(L1) Ensure 'Post-authentication actions: Actions' is set to 3 - 'Enabled: Reset the password and logoff the managed account' or 5 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationActions" `
+            | Select-Object -ExpandProperty "PostAuthenticationActions"
+
+            if (($regValue -ne 3) -and ($regValue -ne 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3 or 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.26.1"
+    Task = "(L1) Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCustomSSPsAPs" `
+            | Select-Object -ExpandProperty "AllowCustomSSPsAPs"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.26.2"
+    Task = "(L1) Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+            | Select-Object -ExpandProperty "RunAsPPL"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.27.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+            | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+            | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+            | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.3"
+    Task = "(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+            | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.4"
+    Task = "(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+            | Select-Object -ExpandProperty "EnumerateLocalUsers"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.5"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+            | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.6"
+    Task = "(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+            | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.7"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+            | Select-Object -ExpandProperty "AllowDomainPINLogon"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.30.1.1"
+    Task = "(L1) Ensure 'Block NetBIOS-based discovery for domain controller location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Netlogon\Parameters" `
+                -Name "BlockNetbiosDiscovery" `
+            | Select-Object -ExpandProperty "BlockNetbiosDiscovery"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.31.1"
+    Task = "(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+            | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.31.2"
+    Task = "(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+            | Select-Object -ExpandProperty "UploadUserActivities"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.1"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.2"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.3"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.4"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.5"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.6"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.35.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+            | Select-Object -ExpandProperty "fAllowUnsolicited"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.35.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+            | Select-Object -ExpandProperty "fAllowToGetHelp"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.36.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+            | Select-Object -ExpandProperty "EnableAuthEpResolution"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.36.2"
+    Task = "(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+            | Select-Object -ExpandProperty "RestrictRemoteClients"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.39.1"
+    Task = "(L1) Ensure 'Configure SAM change password RPC methods policy' is set to 'Enabled: Block all change password RPC methods'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM" `
+                -Name "SamrChangeUserPasswordApiPolicy" `
+            | Select-Object -ExpandProperty "SamrChangeUserPasswordApiPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+            | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+            | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.49.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+            | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.51.1.1"
+    Task = "(L1) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.51.1.2"
+    Task = "(L1) Ensure 'Enable Windows NTP Server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.52"
+    Task = "(L1) Ensure 'Configure the behavior of the sudo command' is set to 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sudo" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.3.1"
+    Task = "(L2) Ensure 'Turn off API Sampling' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableAPISamping" `
+            | Select-Object -ExpandProperty "DisableAPISamping"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.3.2"
+    Task = "(L2) Ensure 'Turn off Application Footprint' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableApplicationFootprint" `
+            | Select-Object -ExpandProperty "DisableApplicationFootprint"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.3.3"
+    Task = "(L2) Ensure 'Turn off Install Tracing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableInstallTracing" `
+            | Select-Object -ExpandProperty "DisableInstallTracing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.4.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+            | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.4.2"
+    Task = "(L1) Ensure 'Not allow per-user unsigned packages to install by default (requires explicitly allow per install)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx" `
+                -Name "DisablePerUserUnsignedPackagesByDefault" `
+            | Select-Object -ExpandProperty "DisablePerUserUnsignedPackagesByDefault"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.4.3"
+    Task = "(L1) Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx" `
+                -Name "BlockNonAdminUserInstall" `
+            | Select-Object -ExpandProperty "BlockNonAdminUserInstall"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.5.1"
+    Task = "(L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoiceAboveLock" `
+            | Select-Object -ExpandProperty "LetAppsActivateWithVoiceAboveLock"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.6.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+            | Select-Object -ExpandProperty "MSAOptional"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.6.2"
+    Task = "(L2) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "BlockHostedAppAccessWinRT" `
+            | Select-Object -ExpandProperty "BlockHostedAppAccessWinRT"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.8.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+            | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.8.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+            | Select-Object -ExpandProperty "NoAutorun"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.8.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+            | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+            | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVDiscoveryVolumeType" `
+            | Select-Object -ExpandProperty "FDVDiscoveryVolumeType"
+
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: This value should be empty."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecovery" `
+            | Select-Object -ExpandProperty "FDVRecovery"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVManageDRA" `
+            | Select-Object -ExpandProperty "FDVManageDRA"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 2 - 'Enabled: Allow 48-digit recovery password' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryPassword" `
+            | Select-Object -ExpandProperty "FDVRecoveryPassword"
+
+            if (($regValue -ne 2) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 2 - 'Enabled: Allow 256-bit recovery key' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryKey" `
+            | Select-Object -ExpandProperty "FDVRecoveryKey"
+
+            if (($regValue -ne 2) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHideRecoveryPage" `
+            | Select-Object -ExpandProperty "FDVHideRecoveryPage"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "FDVActiveDirectoryBackup"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "FDVActiveDirectoryInfoToStore"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "FDVRequireActiveDirectoryBackup"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHardwareEncryption" `
+            | Select-Object -ExpandProperty "FDVHardwareEncryption"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.11"
+    Task = "(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVPassphrase" `
+            | Select-Object -ExpandProperty "FDVPassphrase"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVAllowUserCert" `
+            | Select-Object -ExpandProperty "FDVAllowUserCert"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.1.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVEnforceUserCert" `
+            | Select-Object -ExpandProperty "FDVEnforceUserCert"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.1"
+    Task = "(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+            | Select-Object -ExpandProperty "UseEnhancedPin"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.2"
+    Task = "(BL) Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSAllowSecureBootForIntegrity" `
+            | Select-Object -ExpandProperty "OSAllowSecureBootForIntegrity"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecovery" `
+            | Select-Object -ExpandProperty "OSRecovery"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSManageDRA" `
+            | Select-Object -ExpandProperty "OSManageDRA"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryPassword" `
+            | Select-Object -ExpandProperty "OSRecoveryPassword"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryKey" `
+            | Select-Object -ExpandProperty "OSRecoveryKey"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHideRecoveryPage" `
+            | Select-Object -ExpandProperty "OSHideRecoveryPage"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "OSActiveDirectoryBackup"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "OSActiveDirectoryInfoToStore"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.10"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "OSRequireActiveDirectoryBackup"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.11"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHardwareEncryption" `
+            | Select-Object -ExpandProperty "OSHardwareEncryption"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.12"
+    Task = "(BL) Ensure 'Configure use of passwords for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSPassphrase" `
+            | Select-Object -ExpandProperty "OSPassphrase"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.13"
+    Task = "(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseAdvancedStartup" `
+            | Select-Object -ExpandProperty "UseAdvancedStartup"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.2.14"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EnableBDEWithNoTPM" `
+            | Select-Object -ExpandProperty "EnableBDEWithNoTPM"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVDiscoveryVolumeType" `
+            | Select-Object -ExpandProperty "RDVDiscoveryVolumeType"
+
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: This value should be empty."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecovery" `
+            | Select-Object -ExpandProperty "RDVRecovery"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVManageDRA" `
+            | Select-Object -ExpandProperty "RDVManageDRA"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryPassword" `
+            | Select-Object -ExpandProperty "RDVRecoveryPassword"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryKey" `
+            | Select-Object -ExpandProperty "RDVRecoveryKey"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHideRecoveryPage" `
+            | Select-Object -ExpandProperty "RDVHideRecoveryPage"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "RDVActiveDirectoryBackup"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryInfoToStore" `
+            | Select-Object -ExpandProperty "RDVActiveDirectoryInfoToStore"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRequireActiveDirectoryBackup" `
+            | Select-Object -ExpandProperty "RDVRequireActiveDirectoryBackup"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHardwareEncryption" `
+            | Select-Object -ExpandProperty "RDVHardwareEncryption"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.11"
+    Task = "(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVPassphrase" `
+            | Select-Object -ExpandProperty "RDVPassphrase"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVAllowUserCert" `
+            | Select-Object -ExpandProperty "RDVAllowUserCert"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVEnforceUserCert" `
+            | Select-Object -ExpandProperty "RDVEnforceUserCert"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.14"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+            | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.3.15"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVDenyCrossOrg" `
+            | Select-Object -ExpandProperty "RDVDenyCrossOrg"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.10.4"
+    Task = "(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "DisableExternalDMAUnderLock" `
+            | Select-Object -ExpandProperty "DisableExternalDMAUnderLock"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.11.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+            | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+            | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.13.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+            | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.13.2"
+    Task = "(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableCloudOptimizedContent" `
+            | Select-Object -ExpandProperty "DisableCloudOptimizedContent"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.13.3"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.14.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+            | Select-Object -ExpandProperty "RequirePinForPairing"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+            | Select-Object -ExpandProperty "DisablePasswordReveal"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+            | Select-Object -ExpandProperty "EnumerateAdministrators"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.3"
+    Task = "(L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "NoLocalPasswordResetQuestions" `
+            | Select-Object -ExpandProperty "NoLocalPasswordResetQuestions"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+            | Select-Object -ExpandProperty "AllowTelemetry"
+
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+            | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+            | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+            | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+            | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+            | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+            | Select-Object -ExpandProperty "LimitDumpCollection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.17.1"
+    Task = "(L1) Ensure 'Download Mode' is NOT set to 3 - 'Enabled: Internet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" `
+                -Name "DODownloadMode" `
+            | Select-Object -ExpandProperty "DODownloadMode"
+
+            if ($regValue -notmatch "^(0|1|2|99|100)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(0|1|2|99|100)$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.1"
+    Task = "(L2) Ensure 'Enable App Installer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableAppInstaller" `
+            | Select-Object -ExpandProperty "EnableAppInstaller"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.2"
+    Task = "(L1) Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableExperimentalFeatures" `
+            | Select-Object -ExpandProperty "EnableExperimentalFeatures"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.3"
+    Task = "(L1) Ensure 'Enable App Installer Hash Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableHashOverride" `
+            | Select-Object -ExpandProperty "EnableHashOverride"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.4"
+    Task = "(L1) Ensure 'Enable App Installer Local Archive Malware Scan Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableLocalArchiveMalwareScanOverride" `
+            | Select-Object -ExpandProperty "EnableLocalArchiveMalwareScanOverride"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.5"
+    Task = "(L1) Ensure 'Enable App Installer Microsoft Store Source Certificate Validation Bypass' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableBypassCertificatePinningForMicrosoftStore" `
+            | Select-Object -ExpandProperty "EnableBypassCertificatePinningForMicrosoftStore"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.6"
+    Task = "(L1) Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableMSAppInstallerProtocol" `
+            | Select-Object -ExpandProperty "EnableMSAppInstallerProtocol"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.7"
+    Task = "(L2) Ensure 'Enable Windows Package Manager command line interfaces' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableWindowsPackageManagerCommandLineInterfaces" `
+            | Select-Object -ExpandProperty "EnableWindowsPackageManagerCommandLineInterfaces"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.2"
+    Task = "(L2) Ensure 'Turn off account-based insights, recent, favorite, and recommended files in File Explorer' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "DisableGraphRecentItems" `
+            | Select-Object -ExpandProperty "DisableGraphRecentItems"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.3"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+            | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.4"
+    Task = "(L1) Ensure 'Do not apply the Mark of the Web tag to files copied from insecure sources' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "DisableMotWOnInsecurePathCopy" `
+            | Select-Object -ExpandProperty "DisableMotWOnInsecurePathCopy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.5"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+            | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.6"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+            | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.37.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+            | Select-Object -ExpandProperty "DisableLocation"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.41.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+            | Select-Object -ExpandProperty "AllowMessageSync"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.42.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+            | Select-Object -ExpandProperty "DisableUserAuth"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.4.1"
+    Task = "(L1) Ensure 'Enable EDR in block mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Features" `
+                -Name "PassiveRemediation" `
+            | Select-Object -ExpandProperty "PassiveRemediation"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+            | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+            | Select-Object -ExpandProperty "SpynetReporting"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules" `
+                -Name "26190899-1602-49e8-8b27-eb1d0a1ce869" `
+            | Select-Object -ExpandProperty "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+        Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 C"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 K"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 L"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 M"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+            | Select-Object -ExpandProperty "EnableNetworkProtection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.7.1"
+    Task = "(L1) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "EnableFileHashComputation" `
+            | Select-Object -ExpandProperty "EnableFileHashComputation"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.8.1"
+    Task = "(L2) Ensure 'Convert warn verdict to block' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\NIS" `
+                -Name "EnableConvertWarnToBlock" `
+            | Select-Object -ExpandProperty "EnableConvertWarnToBlock"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.1"
+    Task = "(L1) Ensure 'Configure real-time protection and Security Intelligence Updates during OOBE' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "OobeEnableRtpAndSigUpdate" `
+            | Select-Object -ExpandProperty "OobeEnableRtpAndSigUpdate"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.2"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+            | Select-Object -ExpandProperty "DisableIOAVProtection"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.3"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+            | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.4"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+            | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.5"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+            | Select-Object -ExpandProperty "DisableScriptScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.11.1.1.1"
+    Task = "(L2) Ensure 'Configure Brute-Force Protection aggressiveness' is set to 1 - 'Enabled: Medium' or 2 - higher"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection" `
+                -Name "BruteForceProtectionAggressiveness" `
+            | Select-Object -ExpandProperty "BruteForceProtectionAggressiveness"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.11.1.1.2"
+    Task = "(L1) Ensure 'Configure Remote Encryption Protection Mode' is set to 2 - 'Enabled: Audit' or 1 - higher"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection" `
+                -Name "BruteForceProtectionConfiguredState" `
+            | Select-Object -ExpandProperty "BruteForceProtectionConfiguredState"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.11.1.2.1"
+    Task = "(L2) Ensure 'Configure how aggressively Remote Encryption Protection blocks threats' is set to 1 - 'Enabled: Medium' or 2 - higher"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection" `
+                -Name "RemoteEncryptionProtectionAggressiveness" `
+            | Select-Object -ExpandProperty "RemoteEncryptionProtectionAggressiveness"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+            | Select-Object -ExpandProperty "DisableGenericReports"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.1"
+    Task = "(L1) Ensure 'Scan excluded files and directories during quick scans' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "QuickScanIncludeExclusions" `
+            | Select-Object -ExpandProperty "QuickScanIncludeExclusions"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.2"
+    Task = "(L1) Ensure 'Scan packed executables' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisablePackedExeScanning" `
+            | Select-Object -ExpandProperty "DisablePackedExeScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.3"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+            | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.4"
+    Task = "(L1) Ensure 'Trigger a quick scan after X days without any scans' is set to 'Enabled: 7'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DaysUntilAggressiveCatchupQuickScan" `
+            | Select-Object -ExpandProperty "DaysUntilAggressiveCatchupQuickScan"
+
+            if (($regValue -ne 7)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 7"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.5"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+            | Select-Object -ExpandProperty "DisableEmailScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+            | Select-Object -ExpandProperty "PUAProtection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.17"
+    Task = "(L1) Ensure 'Control whether exclusions are visible to local users' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "HideExclusionsFromLocalUsers" `
+            | Select-Object -ExpandProperty "HideExclusionsFromLocalUsers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.1"
+    Task = "(L1) Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AuditApplicationGuard" `
+            | Select-Object -ExpandProperty "AuditApplicationGuard"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.2"
+    Task = "(L1) Ensure 'Allow camera and microphone access in Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowCameraMicrophoneRedirection" `
+            | Select-Object -ExpandProperty "AllowCameraMicrophoneRedirection"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.3"
+    Task = "(L1) Ensure 'Allow data persistence for Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowPersistence" `
+            | Select-Object -ExpandProperty "AllowPersistence"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.4"
+    Task = "(L1) Ensure 'Allow files to download and save to the host operating system from Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "SaveFilesToHost" `
+            | Select-Object -ExpandProperty "SaveFilesToHost"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.5"
+    Task = "(L1) Ensure 'Configure Microsoft Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AppHVSIClipboardSettings" `
+            | Select-Object -ExpandProperty "AppHVSIClipboardSettings"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1. " + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found. " + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found. " + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.44.6"
+    Task = "(L1) Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowAppHVSI_ProviderSet" `
+            | Select-Object -ExpandProperty "AllowAppHVSI_ProviderSet"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 " + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found. " + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found. " + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.50.1"
+    Task = "(L2) Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds" `
+                -Name "EnableFeeds" `
+            | Select-Object -ExpandProperty "EnableFeeds"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.51.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+            | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.56.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+            | Select-Object -ExpandProperty "DisablePushToInstall"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.2.2"
+    Task = "(L2) Ensure 'Disable Cloud Clipboard integration for server-to-client data transfer' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client" `
+                -Name "DisableCloudClipboardIntegration" `
+            | Select-Object -ExpandProperty "DisableCloudClipboardIntegration"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.2.3"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+            | Select-Object -ExpandProperty "DisablePasswordSaving"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.2.1"
+    Task = "(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+            | Select-Object -ExpandProperty "fDenyTSConnections"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.1"
+    Task = "(L2) Ensure 'Allow UI Automation redirection' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "EnableUiaRedirection" `
+            | Select-Object -ExpandProperty "EnableUiaRedirection"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.2"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+            | Select-Object -ExpandProperty "fDisableCcm"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.3"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+            | Select-Object -ExpandProperty "fDisableCdm"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.4"
+    Task = "(L2) Ensure 'Do not allow location redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLocationRedir" `
+            | Select-Object -ExpandProperty "fDisableLocationRedir"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.5"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+            | Select-Object -ExpandProperty "fDisableLPT"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.6"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+            | Select-Object -ExpandProperty "fDisablePNPRedir"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.7"
+    Task = "(L2) Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableWebAuthn" `
+            | Select-Object -ExpandProperty "fDisableWebAuthn"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.8"
+    Task = "(L2) Ensure 'Restrict clipboard transfer from server to client' is set to 'Enabled: Disable clipboard transfers from server to client'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SCClipLevel" `
+            | Select-Object -ExpandProperty "SCClipLevel"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+            | Select-Object -ExpandProperty "fPromptForPassword"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+            | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+            | Select-Object -ExpandProperty "SecurityLayer"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+            | Select-Object -ExpandProperty "UserAuthentication"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+            | Select-Object -ExpandProperty "MinEncryptionLevel"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+            | Select-Object -ExpandProperty "MaxIdleTime"
+
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+            | Select-Object -ExpandProperty "MaxDisconnectionTime"
+
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+            | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.58.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+            | Select-Object -ExpandProperty "DisableEnclosureDownload"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.58.2"
+    Task = "(L1) Ensure 'Turn on Basic feed authentication over HTTP' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+            | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+            | Select-Object -ExpandProperty "AllowCloudSearch"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.3"
+    Task = "(L1) Ensure 'Allow Cortana' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortana" `
+            | Select-Object -ExpandProperty "AllowCortana"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.4"
+    Task = "(L1) Ensure 'Allow Cortana above lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortanaAboveLock" `
+            | Select-Object -ExpandProperty "AllowCortanaAboveLock"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.5"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+            | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.6"
+    Task = "(L1) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowSearchToUseLocation" `
+            | Select-Object -ExpandProperty "AllowSearchToUseLocation"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.7"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+            | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.63.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+            | Select-Object -ExpandProperty "NoGenTicket"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.1"
+    Task = "(L2) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableStoreApps" `
+            | Select-Object -ExpandProperty "DisableStoreApps"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.2"
+    Task = "(L1) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+            | Select-Object -ExpandProperty "AutoDownload"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.3"
+    Task = "(L1) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableOSUpgrade" `
+            | Select-Object -ExpandProperty "DisableOSUpgrade"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.66.4"
+    Task = "(L2) Ensure 'Turn off the Store application' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RemoveWindowsStore" `
+            | Select-Object -ExpandProperty "RemoveWindowsStore"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.72.1"
+    Task = "(L1) Ensure 'Allow widgets' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh" `
+                -Name "AllowNewsAndInterests" `
+            | Select-Object -ExpandProperty "AllowNewsAndInterests"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.1.1"
+    Task = "(L1) Ensure 'Automatic Data Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "CaptureThreatWindow" `
+            | Select-Object -ExpandProperty "CaptureThreatWindow"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.1.2"
+    Task = "(L1) Ensure 'Notify Malicious' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyMalicious" `
+            | Select-Object -ExpandProperty "NotifyMalicious"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.1.3"
+    Task = "(L1) Ensure 'Notify Password Reuse' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyPasswordReuse" `
+            | Select-Object -ExpandProperty "NotifyPasswordReuse"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.1.4"
+    Task = "(L1) Ensure 'Notify Unsafe App' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyUnsafeApp" `
+            | Select-Object -ExpandProperty "NotifyUnsafeApp"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.1.5"
+    Task = "(L1) Ensure 'Service Enabled' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "ServiceEnabled" `
+            | Select-Object -ExpandProperty "ServiceEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+            | Select-Object -ExpandProperty "EnableSmartScreen"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.78.1"
+    Task = "(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+            | Select-Object -ExpandProperty "AllowGameDVR"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.79.1"
+    Task = "(L1) Ensure 'Enable ESS with Supported Peripherals' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\PassportForWork\Biometrics" `
+                -Name "EnableESSwithSupportedPeripherals" `
+            | Select-Object -ExpandProperty "EnableESSwithSupportedPeripherals"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.80.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.80.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+            | Select-Object -ExpandProperty "EnableUserControl"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+            | Select-Object -ExpandProperty "SafeForScripting"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.82.1"
+    Task = "(L1) Ensure 'Configure the transmission of the user's password in the content of MPR notifications sent by winlogon.' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableMPR" `
+            | Select-Object -ExpandProperty "EnableMPR"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.82.2"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+            | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.87.1"
+    Task = "(L2) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+            | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.87.2"
+    Task = "(L2) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+            | Select-Object -ExpandProperty "EnableTranscripting"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+            | Select-Object -ExpandProperty "AllowDigest"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+            | Select-Object -ExpandProperty "AllowAutoConfig"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+            | Select-Object -ExpandProperty "DisableRunAs"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.90.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+            | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.91.1"
+    Task = "(L1) Ensure 'Allow clipboard sharing with Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowClipboardRedirection" `
+            | Select-Object -ExpandProperty "AllowClipboardRedirection"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.91.2"
+    Task = "(L2) Ensure 'Allow mapping folders into Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowWriteToMappedFolders" `
+            | Select-Object -ExpandProperty "AllowWriteToMappedFolders"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.91.3"
+    Task = "(L1) Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowNetworking" `
+            | Select-Object -ExpandProperty "AllowNetworking"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+            | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+            | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+            | Select-Object -ExpandProperty "NoAutoUpdate"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+            | Select-Object -ExpandProperty "ScheduledInstallDay"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.3"
+    Task = "(L1) Ensure 'Enable features introduced via servicing that are off by default' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "AllowTemporaryEnterpriseFeatureControl" `
+            | Select-Object -ExpandProperty "AllowTemporaryEnterpriseFeatureControl"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.4"
+    Task = "(L1) Ensure 'Remove access to `"Pause updates`" feature' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "SetDisablePauseUXAccess" `
+            | Select-Object -ExpandProperty "SetDisablePauseUXAccess"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+            | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+            | Select-Object -ExpandProperty "DeferFeatureUpdates"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+            | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+
+            if (($regValue -lt 180 -or $regValue -gt 365)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+            | Select-Object -ExpandProperty "DeferQualityUpdates"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+            | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.4"
+    Task = "(L1) Ensure 'Enable optional updates' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "AllowOptionalContent" `
+            | Select-Object -ExpandProperty "AllowOptionalContent"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+            | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+            | Select-Object -ExpandProperty "NoImplicitFeedback"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.5.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+            | Select-Object -ExpandProperty "SaveZoneInformation"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.5.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+            | Select-Object -ExpandProperty "ScanWithAntiVirus"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.1"
+    Task = "(L1) Ensure 'Configure Windows spotlight on lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+            | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.2"
+    Task = "(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+            | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.3"
+    Task = "(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+            | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.4"
+    Task = "(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.5"
+    Task = "(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSpotlightCollectionOnDesktop" `
+            | Select-Object -ExpandProperty "DisableSpotlightCollectionOnDesktop"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.26.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+            | Select-Object -ExpandProperty "NoInplaceSharing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.40.1"
+    Task = "(L1) Ensure 'Turn off Windows Copilot' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot" `
+                -Name "TurnOffWindowsCopilot" `
+            | Select-Object -ExpandProperty "TurnOffWindowsCopilot"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.44.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.46.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+            | Select-Object -ExpandProperty "PreventCodecDownload"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..a513d52
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#SecurityOptions.ps1	
@@ -0,0 +1,130 @@
+[AuditTest] @{
+    Id   = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.3"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption. Expected any other name than 'Administrator'"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption. Expected any other name than 'Guest' or 'Gast'"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#UserRights.ps1
new file mode 100644
index 0000000..2ef5593
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-CIS-4.0.0#UserRights.ps1	
@@ -0,0 +1,1509 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+    [CmdletBinding()]
+    [OutputType([hashtable])]
+    Param(
+        [Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+        [string] $Name
+    )
+
+    process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE") {
+                if ($name -eq "Enterprise Admins") {
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins") {
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators"                      = "S-1-5-32-544"
+                "Guests"                              = "S-1-5-32-546"
+                "Local account"                       = "S-1-5-113"
+                "Local Service"                       = "S-1-5-19"
+                "Network Service"                     = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users"    = "S-1-5-11"
+                "Remote Desktop Users"                = "S-1-5-32-555"
+                "Service"                             = "S-1-5-6"
+                "Users"                               = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid     = $sidAccount.Value
+                }
+            }
+            else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid     = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+    }
+}
+
+# Tests
+[AuditTest] @{
+    Id   = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.3"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.4"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.5"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.6"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.7"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.8"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.9"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.10"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.11"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.12"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.13"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ($hyperVStatus -ne "Enabled") {
+    [AuditTest] @{
+        Id   = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else {
+    [AuditTest] @{
+        Id   = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.15"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if ($null -eq $currentUserRights -and $identityAccounts.Count -gt 0) {
+            return @{
+                Status  = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if ($currentUserRights.Count -lt $identityAccounts.Count) {
+            $users = ""
+            foreach ($currentUser in $currentUserRights) {
+                $users += $currentUser.Values
+            }
+            return @{
+                Status  = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.16"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.17"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.18"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.19"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.20"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.21"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @() | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.22"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.23"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.24"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-6"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.25"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.26"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.27"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.28"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ($hyperVStatus -ne "Enabled") {
+    [AuditTest] @{
+        Id   = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }    
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else {
+    [AuditTest] @{
+        Id   = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+            
+            if ($missingUsers.Count -gt 0) {
+                $messages = @()
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+        
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+        
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.30"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.31"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.32"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.33"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.34"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.35"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.36"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.37"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.38"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.39"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AccountPolicies.ps1
new file mode 100644
index 0000000..da0ac0e
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AccountPolicies.ps1	
@@ -0,0 +1,196 @@
+[AuditTest] @{
+    Id = "AccountPolicy-361"
+    Task = "Ensure 'MinimumPasswordLength' is set to '14' character(s)."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 14) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-362"
+    Task = "The built-in Windows password complexity policy must be enabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-363"
+    Task = "The password history must be configured to 24 passwords remembered"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-364"
+    Task = "Ensure 'LockoutBadCount' is set to '10' invalid logon attempt(s)"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 10) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: 10"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-365"
+    Task = "Ensure 'Reset account lockout counter after' is set to '10 minutes'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 10) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: 10 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-366"
+    Task = "Ensure 'LockoutDuration' is set to '10 minutes'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 10) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: 10 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-367"
+    Task = "Reversible password encryption must be disabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AuditPolicies.ps1
new file mode 100644
index 0000000..76a02f4
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#AuditPolicies.ps1	
@@ -0,0 +1,1388 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "AuditPolicy-166"
+    Task = "Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-167"
+    Task = "Ensure 'Security Group Management' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-168"
+    Task = "Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-169"
+    Task = "Ensure 'Plug and Play Events' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-170"
+    Task = "Ensure 'Process Creation' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-171"
+    Task = "Ensure 'Account Lockout' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-172"
+    Task = "Ensure 'Group Membership' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-173"
+    Task = "Ensure 'Logon' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-174"
+    Task = "Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-175"
+    Task = "Ensure 'Special Logon' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-176"
+    Task = "Ensure 'Detailed File Share' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-177"
+    Task = "Ensure 'File Share' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-178"
+    Task = "Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-179"
+    Task = "Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-180"
+    Task = "Ensure 'Audit Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-181"
+    Task = "Ensure 'Authentication Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-182"
+    Task = "Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory MPSSVC Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "MPSSVC Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'MPSSVC Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-183"
+    Task = "Ensure 'Other Policy Change Events' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-184"
+    Task = "Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-185"
+    Task = "Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-186"
+    Task = "Ensure 'Security State Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-187"
+    Task = "Ensure 'Security System Extension' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-188"
+    Task = "Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#RegistrySettings.ps1
new file mode 100644
index 0000000..0ab0432
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#RegistrySettings.ps1	
@@ -0,0 +1,12011 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id   = "Registry-001"
+    Task = "Turn off Connect to suggested open hotspots and Connect to networks shared by my contacts"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+            | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-002"
+    Task = "Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+            | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-003"
+    Task = "Ensure 'Turn off Autoplay' is set to 'All drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+            | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-004"
+    Task = "Ensure 'Turn off Internet download for Web publishing and online ordering wizards' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+            | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-005"
+    Task = "Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+            | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-006"
+    Task = "Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+            | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-007"
+    Task = "Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+            | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-008"
+    Task = "Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+            | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-009"
+    Task = "Ensure 'Enable MPR notifications for the system' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableMPR" `
+            | Select-Object -ExpandProperty "EnableMPR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-010"
+    Task = "Ensure 'Encryption Oracle Remediation' is set to 'Force Updated Clients'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+            | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-011"
+    Task = "Ensure 'Configure enhanced anti-spoofing' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+            | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-012"
+    Task = "Ensure 'Prevent downloading of enclosures' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+            | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-013"
+    Task = "Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-014"
+    Task = "Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-015"
+    Task = "Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Force Deny'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoiceAboveLock" `
+            | Select-Object -ExpandProperty "LetAppsActivateWithVoiceAboveLock"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-016"
+    Task = "Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-017"
+    Task = "Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+            | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-018"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768' (Application)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-019"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '196608' (Security)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 196608"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-020"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768' (System)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-021"
+    Task = "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+            | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-022"
+    Task = "Ensure 'Windows Game Recording and Broadcasting' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+            | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-023"
+    Task = "Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-024"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'. (NoBackgroundPolicy)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+            | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-025"
+    Task = "Ensure 'Always install with elevated privileges' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-026"
+    Task = "Ensure 'Allow user control over installs' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+            | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-027"
+    Task = "Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Block all'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+            | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-028"
+    Task = "Ensure 'Enable insecure guest logons' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+            | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-029"
+    Task = "Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+            | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-030"
+    Task = "Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+            | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ( -not($regValue -match "RequireMutualAuthentication=1" -and $regValue -match "RequireIntegrity=1")) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: RequireMutualAuthentication=1, RequireIntegrity=1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-031"
+    Task = "Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+            | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ( -not($regValue -match "RequireMutualAuthentication=1" -and $regValue -match "RequireIntegrity=1")) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: RequireMutualAuthentication=1, RequireIntegrity=1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-032"
+    Task = "Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+            | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-033"
+    Task = "Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+            | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-034"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+            | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-035"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is not set."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockInvocationLogging" `
+            | Select-Object -ExpandProperty "EnableScriptBlockInvocationLogging"
+        
+            return @{
+                Message = "Registry value found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-036"
+    Task = "Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+            | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-037"
+    Task = "Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+            | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-038"
+    Task = "Ensure 'Configure Windows SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+            | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-039"
+    Task = "Ensure 'Configure Windows Defender SmartScreen' is set to 'Block'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-040"
+    Task = "Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowCustomSSPsAPs" `
+            | Select-Object -ExpandProperty "AllowCustomSSPsAPs"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-041"
+    Task = "Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+            | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-042"
+    Task = "Ensure 'Allow indexing of encrypted files' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+            | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-043"
+    Task = "Ensure 'Disallow Digest authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+            | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-044"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'. (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-045"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'. (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-046"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'. (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-047"
+    Task = "Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'. (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+            | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-048"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'. (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-049"
+    Task = "Ensure 'Notify Malicious' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyMalicious" `
+            | Select-Object -ExpandProperty "NotifyMalicious"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-050"
+    Task = "Ensure 'Notify Password Reuse' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyPasswordReuse" `
+            | Select-Object -ExpandProperty "NotifyPasswordReuse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-051"
+    Task = "Ensure 'Notify Unsafe App' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyUnsafeApp" `
+            | Select-Object -ExpandProperty "NotifyUnsafeApp"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-052"
+    Task = "Ensure 'Service Enabled' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "ServiceEnabled" `
+            | Select-Object -ExpandProperty "ServiceEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-053"
+    Task = "Ensure 'Turn off multicast name resolution' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+            | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-054"
+    Task = "Set registry value 'EnableNetBIOS' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+            | Select-Object -ExpandProperty "EnableNetBIOS"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-055"
+    Task = "Ensure 'Turn off downloading of print drivers over HTTP' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+            | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-056"
+    Task = "Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+            | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-057"
+    Task = "Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+            | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-058"
+    Task = "Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+            | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-059"
+    Task = "Set registry value 'RpcUseNamedPipeProtocol' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+            | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-060"
+    Task = "Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+            | Select-Object -ExpandProperty "RpcAuthentication"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-061"
+    Task = "Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+            | Select-Object -ExpandProperty "RpcProtocols"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-062"
+    Task = "Set registry value 'ForceKerberosForRpc' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+            | Select-Object -ExpandProperty "ForceKerberosForRpc"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-063"
+    Task = "Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+            | Select-Object -ExpandProperty "RpcTcpPort"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-064"
+    Task = "Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+            | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-065"
+    Task = "Solicited Remote Assistance - Set method for sending email invitations to 'Simple MAPI'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fUseMailto" `
+            | Select-Object -ExpandProperty "fUseMailto"
+        
+            return @{
+                Message = "Registry value found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-066"
+    Task = "Solicited Remote Assistance must not be allowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+            | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-067"
+    Task = "Ensure 'Configure Solicited Remote Assistance' is not set (fAllowFullControl)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowFullControl" `
+            | Select-Object -ExpandProperty "fAllowFullControl"
+        
+            return @{
+                Message = "Registry value found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-068"
+    Task = "Ensure 'Configure Solicited Remote Assistance' is not set (MaxTicketExpiry)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxTicketExpiry" `
+            | Select-Object -ExpandProperty "MaxTicketExpiry"
+        
+            return @{
+                Message = "Registry value found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-069"
+    Task = "Ensure 'Configure Solicited Remote Assistance' is not set (MaxTicketExpiryUnits)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxTicketExpiryUnits" `
+            | Select-Object -ExpandProperty "MaxTicketExpiryUnits"
+        
+            return @{
+                Message = "Registry value found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-070"
+    Task = "Ensure 'Set client connection encryption level' is set to 'High Level'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+            | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-071"
+    Task = "Ensure 'Always prompt for password upon connection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+            | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-072"
+    Task = "Ensure 'Do not allow drive redirection' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+            | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-073"
+    Task = "Ensure 'Do not allow passwords to be saved' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+            | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-074"
+    Task = "Ensure 'Require secure RPC communication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+            | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-076"
+    Task = "Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile" `
+                -Name "DefaultOutboundAction" `
+            | Select-Object -ExpandProperty "DefaultOutboundAction"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-077"
+    Task = "Ensure 'Windows Defender Firewall: Prohibit notifications' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile" `
+                -Name "DisableNotifications" `
+            | Select-Object -ExpandProperty "DisableNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-078"
+    Task = "Ensure 'Windows Defender Firewall: Protect all network connections' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile" `
+                -Name "EnableFirewall" `
+            | Select-Object -ExpandProperty "EnableFirewall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-079"
+    Task = "Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile" `
+                -Name "DefaultInboundAction" `
+            | Select-Object -ExpandProperty "DefaultInboundAction"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-080"
+    Task = "Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging" `
+                -Name "LogDroppedPackets" `
+            | Select-Object -ExpandProperty "LogDroppedPackets"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-081"
+    Task = "Ensure 'Windows Defender Firewall: Allow logging' is set to '16384' (LogFileSize)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging" `
+                -Name "LogFileSize" `
+            | Select-Object -ExpandProperty "LogFileSize"
+        
+            if ($regValue -ne 16384) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 16384"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-082"
+    Task = "Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging" `
+                -Name "LogSuccessfulConnections" `
+            | Select-Object -ExpandProperty "LogSuccessfulConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-083"
+    Task = "Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile" `
+                -Name "EnableFirewall" `
+            | Select-Object -ExpandProperty "EnableFirewall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-084"
+    Task = "Private: Set registry value 'DisableNotifications' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile" `
+                -Name "DisableNotifications" `
+            | Select-Object -ExpandProperty "DisableNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-085"
+    Task = "Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile" `
+                -Name "DefaultInboundAction" `
+            | Select-Object -ExpandProperty "DefaultInboundAction"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-086"
+    Task = "Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile" `
+                -Name "DefaultOutboundAction" `
+            | Select-Object -ExpandProperty "DefaultOutboundAction"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-087"
+    Task = "Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging" `
+                -Name "LogSuccessfulConnections" `
+            | Select-Object -ExpandProperty "LogSuccessfulConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-088"
+    Task = "Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging" `
+                -Name "LogDroppedPackets" `
+            | Select-Object -ExpandProperty "LogDroppedPackets"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-089"
+    Task = "Set registry value 'LogFileSize' to 16384."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging" `
+                -Name "LogFileSize" `
+            | Select-Object -ExpandProperty "LogFileSize"
+        
+            if ($regValue -ne 16384) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 16384"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-090"
+    Task = "Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile" `
+                -Name "DefaultOutboundAction" `
+            | Select-Object -ExpandProperty "DefaultOutboundAction"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-091"
+    Task = "Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile" `
+                -Name "EnableFirewall" `
+            | Select-Object -ExpandProperty "EnableFirewall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-092"
+    Task = "Public: Set registry value 'DisableNotifications' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile" `
+                -Name "DisableNotifications" `
+            | Select-Object -ExpandProperty "DisableNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-093"
+    Task = "Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile" `
+                -Name "AllowLocalIPsecPolicyMerge" `
+            | Select-Object -ExpandProperty "AllowLocalIPsecPolicyMerge"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-094"
+    Task = "Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile" `
+                -Name "AllowLocalPolicyMerge" `
+            | Select-Object -ExpandProperty "AllowLocalPolicyMerge"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-095"
+    Task = "Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile" `
+                -Name "DefaultInboundAction" `
+            | Select-Object -ExpandProperty "DefaultInboundAction"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-096"
+    Task = "Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' set to '16,384'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging" `
+                -Name "LogFileSize" `
+            | Select-Object -ExpandProperty "LogFileSize"
+        
+            if ($regValue -ne 16384) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 16384"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-097"
+    Task = "Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging" `
+                -Name "LogDroppedPackets" `
+            | Select-Object -ExpandProperty "LogDroppedPackets"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-098"
+    Task = "Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging" `
+                -Name "LogSuccessfulConnections" `
+            | Select-Object -ExpandProperty "LogSuccessfulConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-099"
+    Task = "Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-100"
+    Task = "Ensure 'Enable local admin password management' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+            | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-101"
+    Task = "Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+            | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-102"
+    Task = "Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+            | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-103"
+    Task = "Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-104"
+    Task = "Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+            | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-105"
+    Task = "Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+            | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-106"
+    Task = "Ensure 'Configure SMB v1 server' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-107"
+    Task = "Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MrxSmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-108"
+    Task = "Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+            | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-109"
+    Task = "Ensure 'NetBT NodeType configuration' is set to 'P-node (recommended)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NodeType" `
+            | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-110"
+    Task = "Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+            | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-111"
+    Task = "Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-112"
+    Task = "Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Highest protection, source routing is completely disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-113"
+    Task = "Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+            | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-114"
+    Task = "The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+            | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -ne 900)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 900"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-115"
+    Task = "Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-116"
+    Task = "Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+            | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-117"
+    Task = "Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+            | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-118"
+    Task = "Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+            | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-119"
+    Task = "Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+            | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-120"
+    Task = "Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+            | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-121"
+    Task = "Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+            | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-122"
+    Task = "The system must be configured to meet the minimum session security requirement for NTLM SSP-based clients."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+            | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if (($regValue -ne 537395200)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-123"
+    Task = "(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+            | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-124"
+    Task = "Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "allownullsessionfallback" `
+            | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-125"
+    Task = "Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+            | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if (($regValue -ne 537395200)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-126"
+    Task = "Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+            | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-127"
+    Task = "Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+            | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-128"
+    Task = "Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "sealsecurechannel" `
+            | Select-Object -ExpandProperty "sealsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-129"
+    Task = "Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+            | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-130"
+    Task = "Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+            | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-131"
+    Task = "Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+            | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-132"
+    Task = "Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+            | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-133"
+    Task = "Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-134"
+    Task = "Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+            | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-135"
+    Task = "User Account Control must run all administrators in Admin Approval Mode, enabling UAC."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+            | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-136"
+    Task = "Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-137"
+    Task = "User Account Control must be configured to detect application installations and prompt for elevation"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+            | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-138"
+    Task = "Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+            | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-139"
+    Task = "User Account Control must virtualize file and registry write failures to per-user locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+            | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-140"
+    Task = "Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+            | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-141"
+    Task = "Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+            | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-189"
+    Task = "Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+            | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-190"
+    Task = "Ensure 'Select cloud protection level' is set to 'Enabled:High blocking level'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "MpCloudBlockLevel" `
+            | Select-Object -ExpandProperty "MpCloudBlockLevel"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-191"
+    Task = "Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+            | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-192"
+    Task = "Ensure 'Turn off real-time protection' is set to 'Disabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+            | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-193"
+    Task = "Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+            | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-194"
+    Task = "Ensure 'Turn on behavior monitoring' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+            | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-195"
+    Task = "Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+            | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-196"
+    Task = "Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+            | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-197"
+    Task = "Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+            | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-198"
+    Task = "Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'."
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "DisableBlockAtFirstSeen" `
+            | Select-Object -ExpandProperty "DisableBlockAtFirstSeen"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-199"
+    Task = "Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-200"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-201"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-202"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-203"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-204"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-205"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-206"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-207"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe))'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-208"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB' is configured"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-209"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-210"
+    Task = "(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-211"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Use advanced protection against ransomware'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules" `
+                -Name "c1db55ab-c21a-4637-bb3f-a12568109d35" `
+            | Select-Object -ExpandProperty "c1db55ab-c21a-4637-bb3f-a12568109d35"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-212"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-213"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-214"
+    Task = "Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Block'"
+    Test = {
+        try {
+            if ($avstatus) {
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status  = "None"
+                    }
+                }
+            }
+
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+            | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-215"
+    Task = "Ensure 'Remove `"Run this time`" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "RunThisTimeEnabled" `
+            | Select-Object -ExpandProperty "RunThisTimeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-216"
+    Task = "Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "VersionCheckEnabled" `
+            | Select-Object -ExpandProperty "VersionCheckEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-217"
+    Task = "Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "RunInvalidSignatures" `
+            | Select-Object -ExpandProperty "RunInvalidSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-218"
+    Task = "Set registry value 'CheckExeSignatures' to yes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "CheckExeSignatures" `
+            | Select-Object -ExpandProperty "CheckExeSignatures"
+        
+            if ($regValue -ne "yes") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: yes"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-219"
+    Task = "Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation64Bit" `
+            | Select-Object -ExpandProperty "Isolation64Bit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-220"
+    Task = "Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableEPMCompat" `
+            | Select-Object -ExpandProperty "DisableEPMCompat"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-221"
+    Task = "Set registry value 'Isolation' to PMEM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation" `
+            | Select-Object -ExpandProperty "Isolation"
+        
+            if ($regValue -ne "PMEM") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PMEM"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-222"
+    Task = "Ensure 'Internet Explorer Processes for MK protocol' is not enabled (Reserved)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-223"
+    Task = "Ensure 'Internet Explorer Processes for MK protocol' is not enabled (iexplore.exe)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "iexplore.exe" `
+            | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-224"
+    Task = " Ensure 'Internet Explorer Processes for MK protocol' is not enabled (explorer.exe)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-225"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-226"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_MIME_HANDLING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "iexplore.exe" `
+            | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-227"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_MIME_HANDLING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-228"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_MIME_SNIFFING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-229"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_MIME_SNIFFING)"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-230"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_MIME_SNIFFING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-231"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_RESTRICT_ACTIVEXINSTALL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-232"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_RESTRICT_ACTIVEXINSTALL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-233"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_RESTRICT_ACTIVEXINSTALL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "iexplore.exe" `
+            | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-234"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_RESTRICT_FILEDOWNLOAD)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-235"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_RESTRICT_FILEDOWNLOAD)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "iexplore.exe" `
+            | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-236"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_RESTRICT_FILEDOWNLOAD)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-237"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_SECURITYBAND)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-238"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_SECURITYBAND)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "iexplore.exe" `
+            | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-239"
+    Task = "Set 'Notification bar' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-240"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_WINDOW_RESTRICTIONS)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "iexplore.exe" `
+            | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-241"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_WINDOW_RESTRICTIONS)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-242"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_WINDOW_RESTRICTIONS)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-243"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_ZONE_ELEVATION)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "(Reserved)" `
+            | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-244"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_ZONE_ELEVATION)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "explorer.exe" `
+            | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-245"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_ZONE_ELEVATION)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "iexplore.exe" `
+            | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-246"
+    Task = "Set 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+            | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-247"
+    Task = "Set 'Prevent Bypassing SmartScreen Filter Warnings' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverride" `
+            | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-248"
+    Task = "Ensure 'Prevent managing SmartScreen Filter' is set to 'On'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "EnabledV9" `
+            | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-249"
+    Task = "Set 'Turn off Crash Detection' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoCrashDetection" `
+            | Select-Object -ExpandProperty "NoCrashDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-250"
+    Task = "Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableSecuritySettingsCheck" `
+            | Select-Object -ExpandProperty "DisableSecuritySettingsCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-251"
+    Task = "Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX" `
+                -Name "BlockNonAdminActiveXInstall" `
+            | Select-Object -ExpandProperty "BlockNonAdminActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-252"
+    Task = "Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AxInstaller" `
+                -Name "OnlyUseAXISForActiveXInstall" `
+            | Select-Object -ExpandProperty "OnlyUseAXISForActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-253"
+    Task = "Set 'Security Zones: Do not allow users to add/delete sites' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_zones_map_edit" `
+            | Select-Object -ExpandProperty "Security_zones_map_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-254"
+    Task = "Set 'Security Zones: Do not allow users to change policies' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_options_edit" `
+            | Select-Object -ExpandProperty "Security_options_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-255"
+    Task = "Set 'Security Zones: Use only machine settings' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_HKLM_only" `
+            | Select-Object -ExpandProperty "Security_HKLM_only"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-256"
+    Task = "Ensure 'Check for server certificate revocation' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "CertificateRevocation" `
+            | Select-Object -ExpandProperty "CertificateRevocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-257"
+    Task = "Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "PreventIgnoreCertErrors" `
+            | Select-Object -ExpandProperty "PreventIgnoreCertErrors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-258"
+    Task = "Set 'Turn on certificate address mismatch warning' to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "WarnOnBadCertRecving" `
+            | Select-Object -ExpandProperty "WarnOnBadCertRecving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-259"
+    Task = "Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "EnableSSL3Fallback" `
+            | Select-Object -ExpandProperty "EnableSSL3Fallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-260"
+    Task = "Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "SecureProtocols" `
+            | Select-Object -ExpandProperty "SecureProtocols"
+        
+            if (($regValue -ne 2560)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2560"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-261"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/0)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-262"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-263"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-264"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. (Lockdown_Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3" `
+                -Name "2301" `
+            | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-265"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. (Lockdown_Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "2301" `
+            | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-266"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-267"
+    Task = "Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" `
+                -Name "UNCAsIntranet" `
+            | Select-Object -ExpandProperty "UNCAsIntranet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-268"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Zones/0)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-269"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/0)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "270C" `
+            | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-270"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "270C" `
+            | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-271"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'. (Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1201" `
+            | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-272"
+    Task = "Ensure 'Java permissions' is set to 'High safety'. (Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if (($regValue -ne 65536)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 65536"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-273"
+    Task = "Ensure 'Java permissions' is set to 'High safety'. (Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if (($regValue -ne 65536)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 65536"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-274"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "270C" `
+            | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-275"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'. (Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1201" `
+            | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-276"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2001" `
+            | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-277"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2102" `
+            | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-278"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1802" `
+            | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-279"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "160A" `
+            | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-280"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1201" `
+            | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-281"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1406" `
+            | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-282"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1804" `
+            | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-283"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2200" `
+            | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-284"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1209" `
+            | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-285"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1206" `
+            | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-286"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1809" `
+            | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-287"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2500" `
+            | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-288"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2103" `
+            | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-289"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1606" `
+            | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-290"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2402" `
+            | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-291"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2004" `
+            | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-292"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-293"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1001" `
+            | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-294"
+    Task = "Ensure 'Logon options' is set to 'Prompt for user name and password'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1A00" `
+            | Select-Object -ExpandProperty "1A00"
+        
+            if (($regValue -ne 65536)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 65536"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-295"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2708" `
+            | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-296"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1004" `
+            | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-297"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120b" `
+            | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-298"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1407" `
+            | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-299"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1409" `
+            | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-300"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "270C" `
+            | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-301"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1607" `
+            | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-302"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2709" `
+            | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-303"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2101" `
+            | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-304"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2301" `
+            | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-305"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1806" `
+            | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-306"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120c" `
+            | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-307"
+    Task = "Set registry value '140C' to 3. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "140C" `
+            | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-308"
+    Task = "Ensure 'Allow META REFRESH' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1608" `
+            | Select-Object -ExpandProperty "1608"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-309"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1201" `
+            | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-310"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1001" `
+            | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-311"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1607" `
+            | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-312"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120b" `
+            | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-313"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1809" `
+            | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-314"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1004" `
+            | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-315"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1606" `
+            | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-316"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1407" `
+            | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-317"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "160A" `
+            | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-318"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1406" `
+            | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-319"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2102" `
+            | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-320"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2004" `
+            | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-321"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2200" `
+            | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-322"
+    Task = "Ensure 'Allow binary and script behaviors' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2000" `
+            | Select-Object -ExpandProperty "2000"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-323"
+    Task = "Ensure 'Scripting of Java applets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1402" `
+            | Select-Object -ExpandProperty "1402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-324"
+    Task = "Ensure 'Allow file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1803" `
+            | Select-Object -ExpandProperty "1803"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-325"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2402" `
+            | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-326"
+    Task = "Ensure 'Allow active scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1400" `
+            | Select-Object -ExpandProperty "1400"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-327"
+    Task = "Ensure 'Logon options' is set to 'Anonymous logon'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1A00" `
+            | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 196608"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-328"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2001" `
+            | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-329"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2500" `
+            | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-330"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1409" `
+            | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-331"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1C00" `
+            | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-332"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1209" `
+            | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-333"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "270C" `
+            | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-334"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1206" `
+            | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-335"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2708" `
+            | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-336"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1802" `
+            | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-337"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2103" `
+            | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-338"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2709" `
+            | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-339"
+    Task = "Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1405" `
+            | Select-Object -ExpandProperty "1405"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-340"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2101" `
+            | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-341"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2301" `
+            | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-342"
+    Task = "Ensure 'Run ActiveX controls and plugins' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1200" `
+            | Select-Object -ExpandProperty "1200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-343"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1804" `
+            | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-344"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1806" `
+            | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-345"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120c" `
+            | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-346"
+    Task = "Set registry value '140C' to 3. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "140C" `
+            | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-347"
+    Task = "Set 'Turn on the auto-complete feature for user names and passwords on forms' to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "FormSuggest Passwords" `
+            | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-348"
+    Task = "Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest PW Ask" `
+            | Select-Object -ExpandProperty "FormSuggest PW Ask"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-349"
+    Task = "Set registry value 'FormSuggest Passwords' to no."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest Passwords" `
+            | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-351"
+    Task = "Ensure 'Allow enhanced PINs for startup' is set 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+            | Select-Object -ExpandProperty "UseEnhancedPin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-352"
+    Task = "Set registry value 'RDVDenyCrossOrg' to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVDenyCrossOrg" `
+            | Select-Object -ExpandProperty "RDVDenyCrossOrg"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-353"
+    Task = "Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "DisableExternalDMAUnderLock" `
+            | Select-Object -ExpandProperty "DisableExternalDMAUnderLock"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-354"
+    Task = "Ensure 'Allow Standby States (S1-S3) When Sleeping (On Battery)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-355"
+    Task = "Ensure 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-356"
+    Task = "Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+            | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-357"
+    Task = "Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Also apply to matching devices that are already installed. (True) '."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+            | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-358"
+    Task = "Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the SBP2 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "1" `
+            | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "{d48179be-ec20-11d1-b6b8-00c04fa372a7}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-359"
+    Task = "Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+            | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-368"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+            | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-369"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+            | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if ($regValue -eq 3) {
+                return @{
+                    Message = "Set to 'Secure Boot and DMA Protection' which is more secure."
+                    Status  = "True"
+                }
+            }
+                
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-370"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+            | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-371"
+    Task = "Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+            | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-372"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+            | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-373"
+    Task = "Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+            | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-374"
+    Task = "Ensure 'Turn On Virtualization Based Security: Kernel-mode Hardware-enforced Stack Protection' is set to 'Enabled: Enabled in enforcement mode'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureKernelShadowStacksLaunch" `
+            | Select-Object -ExpandProperty "ConfigureKernelShadowStacksLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-375"
+    Task = "Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+            | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "Registry-376"
+    Task = "Toast notifications to the lock screen must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+            | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#SecurityOptions.ps1
new file mode 100644
index 0000000..64418af
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#SecurityOptions.ps1	
@@ -0,0 +1,26 @@
+[AuditTest] @{
+    Id = "SecurityOption-142"
+    Task = "Anonymous SID/Name translation must not be allowed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#UserRights.ps1
new file mode 100644
index 0000000..60fbc6b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Microsoft-22H2#UserRights.ps1	
@@ -0,0 +1,875 @@
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and
+                (Get-WindowsOptionalFeature -Online -FeatureName "Microsoft-Hyper-V").State -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "UserRight-143"
+    Task = "Ensure 'Manage auditing and security log' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-144"
+    Task = "Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-145"
+    Task = "Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-146"
+    Task = "Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-147"
+    Task = "Ensure 'Deny log on through Remote Desktop Services' to include 'Local account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-148"
+    Task = "Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-149"
+    Task = "Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-150"
+    Task = "Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-151"
+    Task = "Ensure 'SeLockMemoryPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-152"
+    Task = "Ensure 'Deny access to this computer from the network' is set to 'Local account'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDenyNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-153"
+    Task = "Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-154"
+    Task = "Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-155"
+    Task = "Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-156"
+    Task = "Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-157"
+    Task = "Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-158"
+    Task = "The Create a pagefile user right must only be assigned to the Administrators group."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-159"
+    Task = "Ensure 'Allow log on locally' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-160"
+    Task = "Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-161"
+    Task = "Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDebugPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-162"
+    Task = "Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-163"
+    Task = "Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-164"
+    Task = "Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-165"
+    Task = "Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..01118ef
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AccountPolicies.ps1	
@@ -0,0 +1,255 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.7"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15 -or $setPolicy -gt 99999)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 minutes and x <= 99999 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 99999 -or $setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x <= 99999 minutes and x >= 15 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..01bc89f
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#AuditPolicies.ps1	
@@ -0,0 +1,1616 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..8daef46
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#RegistrySettings.ps1	
@@ -0,0 +1,16049 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SAM" `
+                -Name "RelaxMinimumPasswordLengthLimits" `
+                | Select-Object -ExpandProperty "RelaxMinimumPasswordLengthLimits"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+                | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.1"
+    Task = "(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.3"
+    Task = "(BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MaxDevicePasswordFailedAttempts" `
+                | Select-Object -ExpandProperty "MaxDevicePasswordFailedAttempts"
+        
+            if (($regValue -gt 10 -or $regValue -le 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 10 and x > 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.4"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.6"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+                | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+                | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.4"
+    Task = "(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+                | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.6"
+    Task = "(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.7"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.8"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+                | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+                | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+                | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.14.1"
+    Task = "(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 1 - 'User is prompted when the key is first used' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+                | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTAGService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3"
+    Task = "(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4"
+    Task = "(L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5"
+    Task = "(L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.6"
+    Task = "(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.7"
+    Task = "(L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\irmon" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.8"
+    Task = "(L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.9"
+    Task = "(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.10"
+    Task = "(L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LxssManager" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.11"
+    Task = "(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FTPSVC" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.12"
+    Task = "(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.13"
+    Task = "(L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshd" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.14"
+    Task = "(L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.15"
+    Task = "(L2) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.16"
+    Task = "(L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.17"
+    Task = "(L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.18"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.19"
+    Task = "(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.20"
+    Task = "(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.21"
+    Task = "(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.22"
+    Task = "(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.23"
+    Task = "(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.24"
+    Task = "(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.25"
+    Task = "(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.26"
+    Task = "(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.27"
+    Task = "(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.28"
+    Task = "(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\simptcp" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.29"
+    Task = "(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.30"
+    Task = "(L1) Ensure 'Special Administration Console Helper (sacsvr)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sacsvr" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.31"
+    Task = "(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.32"
+    Task = "(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.33"
+    Task = "(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.34"
+    Task = "(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.35"
+    Task = "(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.36"
+    Task = "(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.37"
+    Task = "(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.38"
+    Task = "(L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.39"
+    Task = "(L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PushToInstall" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.40"
+    Task = "(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.41"
+    Task = "(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.42"
+    Task = "(L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxGipSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.43"
+    Task = "(L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.44"
+    Task = "(L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.45"
+    Task = "(L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.8"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.10"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+                | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+                | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+                | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.2"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.4"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.5"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.6"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4"
+    Task = "(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\Parameters" `
+                -Name "disablesavepassword" `
+                | Select-Object -ExpandProperty "disablesavepassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.5"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.6"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.7"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+                | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.8"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.10"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+                | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.12"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.13"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure DNS over HTTPS (DoH) name resolution' is set to 'Enabled: Allow DoH' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "DoHPolicy" `
+                | Select-Object -ExpandProperty "DoHPolicy"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2 or x == 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.2"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' (or 0 - Disable NetBIOS name resolution)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+                | Select-Object -ExpandProperty "EnableNetBIOS"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2 or x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.3"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+                | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.8.1"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+                | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+                | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+                | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+                | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`" and `"Require Integrity`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if (($regValue -ne 255)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+                | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+                | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+                | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+                | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+                | Select-Object -ExpandProperty "DisableWPDRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+                | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.23.2.1"
+    Task = "(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" `
+                -Name "AutoConnectAllowedOEM" `
+                | Select-Object -ExpandProperty "AutoConnectAllowedOEM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+                | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionguardPolicy" `
+                | Select-Object -ExpandProperty "RedirectionguardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+                | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+                | Select-Object -ExpandProperty "RpcAuthentication"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+                | Select-Object -ExpandProperty "RpcProtocols"
+        
+            if (($regValue -ne 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: Negotiate' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+                | Select-Object -ExpandProperty "ForceKerberosForRpc"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+                | Select-Object -ExpandProperty "RpcTcpPort"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.8"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+                | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.9"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+                | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.10"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+                | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.11"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+                | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.1"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.2"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if (($regValue -ne 3) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 3 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.3"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.4"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.5"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.6"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.7"
+    Task = "(L1) Ensure 'Turn On Virtualization Based Security: Kernel-mode Hardware-enforced Stack Protection' is set to 'Enabled: Enabled in enforcement mode'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureKernelShadowStacksLaunch" `
+                | Select-Object -ExpandProperty "ConfigureKernelShadowStacksLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.1"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDs" `
+                | Select-Object -ExpandProperty "DenyDeviceIDs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.2"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "PCI\CC_0C0A") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PCI\CC_0C0A"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.3"
+    Task = "(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceIDsRetroactive" `
+                | Select-Object -ExpandProperty "DenyDeviceIDsRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.4"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+                | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 A"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the SBP2 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "1" `
+                | Select-Object -ExpandProperty "1"
+        
+            if ($regValue -ne "{d48179be-ec20-11d1-b6b8-00c04fa372a7}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {d48179be-ec20-11d1-b6b8-00c04fa372a7}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 B"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the IEC-61883 Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "2" `
+                | Select-Object -ExpandProperty "2"
+        
+            if ($regValue -ne "{7ebefbc0-3200-11d2-b4c2-00a0C9697d07}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {7ebefbc0-3200-11d2-b4c2-00a0C9697d07}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 C"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 devices that support the AVC Protocol Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "3" `
+                | Select-Object -ExpandProperty "3"
+        
+            if ($regValue -ne "{c06ff265-ae09-48f0-812c-16753d7cba83}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {c06ff265-ae09-48f0-812c-16753d7cba83}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.5 D"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' [IEEE 1394 Host Bus Controller Class]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses" `
+                -Name "4" `
+                | Select-Object -ExpandProperty "4"
+        
+            if ($regValue -ne "{6bdd1fc1-810f-11d0-bec7-08002be2092f}") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: {6bdd1fc1-810f-11d0-bec7-08002be2092f}"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.1.6"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+                | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.2"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+                | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.1"
+    Task = "(L2) Ensure 'Turn off access to the Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoUseStoreOpenWith" `
+                | Select-Object -ExpandProperty "NoUseStoreOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.2"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+                | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.5"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+                | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.6"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+                | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+                | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+                | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+                | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+                | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.14 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.14 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+                | Select-Object -ExpandProperty "DoReport"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+                | Select-Object -ExpandProperty "DevicePKInitBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+                | Select-Object -ExpandProperty "DevicePKInitEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.1"
+    Task = "(BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.1"
+    Task = "(L1) Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCustomSSPsAPs" `
+                | Select-Object -ExpandProperty "AllowCustomSSPsAPs"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.2"
+    Task = "(L1) Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+                | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+                | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+                | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.3"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+                | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.4"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+                | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.30.1"
+    Task = "(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+                | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.30.2"
+    Task = "(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+                | Select-Object -ExpandProperty "UploadUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.1"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.2"
+    Task = "(L1) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.3"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.4"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.5"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.6"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.34.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.34.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+                | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.2"
+    Task = "(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.46.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.46.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.48.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+                | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.50.1.1"
+    Task = "(L1) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.3.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+                | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.3.2"
+    Task = "(L1) Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx" `
+                -Name "BlockNonAdminUserInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminUserInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.4.1"
+    Task = "(L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" `
+                -Name "LetAppsActivateWithVoiceAboveLock" `
+                | Select-Object -ExpandProperty "LetAppsActivateWithVoiceAboveLock"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.2"
+    Task = "(L2) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "BlockHostedAppAccessWinRT" `
+                | Select-Object -ExpandProperty "BlockHostedAppAccessWinRT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.8.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVDiscoveryVolumeType" `
+                | Select-Object -ExpandProperty "FDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: This value should be empty."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecovery" `
+                | Select-Object -ExpandProperty "FDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVManageDRA" `
+                | Select-Object -ExpandProperty "FDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryPassword" `
+                | Select-Object -ExpandProperty "FDVRecoveryPassword"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryKey" `
+                | Select-Object -ExpandProperty "FDVRecoveryKey"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHideRecoveryPage" `
+                | Select-Object -ExpandProperty "FDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "FDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "FDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "FDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHardwareEncryption" `
+                | Select-Object -ExpandProperty "FDVHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.11"
+    Task = "(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVPassphrase" `
+                | Select-Object -ExpandProperty "FDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVAllowUserCert" `
+                | Select-Object -ExpandProperty "FDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.1.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVEnforceUserCert" `
+                | Select-Object -ExpandProperty "FDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.1"
+    Task = "(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+                | Select-Object -ExpandProperty "UseEnhancedPin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.2"
+    Task = "(BL) Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSAllowSecureBootForIntegrity" `
+                | Select-Object -ExpandProperty "OSAllowSecureBootForIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecovery" `
+                | Select-Object -ExpandProperty "OSRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSManageDRA" `
+                | Select-Object -ExpandProperty "OSManageDRA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryPassword" `
+                | Select-Object -ExpandProperty "OSRecoveryPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryKey" `
+                | Select-Object -ExpandProperty "OSRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHideRecoveryPage" `
+                | Select-Object -ExpandProperty "OSHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "OSActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "OSActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.10"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "OSRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.11"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHardwareEncryption" `
+                | Select-Object -ExpandProperty "OSHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.12"
+    Task = "(BL) Ensure 'Configure use of passwords for operating system drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "OSPassphrase" `
+                | Select-Object -ExpandProperty "OSPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.13"
+    Task = "(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseAdvancedStartup" `
+                | Select-Object -ExpandProperty "UseAdvancedStartup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.2.14"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EnableBDEWithNoTPM" `
+                | Select-Object -ExpandProperty "EnableBDEWithNoTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVDiscoveryVolumeType" `
+                | Select-Object -ExpandProperty "RDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecovery" `
+                | Select-Object -ExpandProperty "RDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVManageDRA" `
+                | Select-Object -ExpandProperty "RDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryPassword" `
+                | Select-Object -ExpandProperty "RDVRecoveryPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryKey" `
+                | Select-Object -ExpandProperty "RDVRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHideRecoveryPage" `
+                | Select-Object -ExpandProperty "RDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "RDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "RDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "RDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.10"
+    Task = "(BL) Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHardwareEncryption" `
+                | Select-Object -ExpandProperty "RDVHardwareEncryption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.11"
+    Task = "(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVPassphrase" `
+                | Select-Object -ExpandProperty "RDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVAllowUserCert" `
+                | Select-Object -ExpandProperty "RDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.13"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVEnforceUserCert" `
+                | Select-Object -ExpandProperty "RDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.14"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+                | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.3.15"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVDenyCrossOrg" `
+                | Select-Object -ExpandProperty "RDVDenyCrossOrg"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.9.4"
+    Task = "(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "DisableExternalDMAUnderLock" `
+                | Select-Object -ExpandProperty "DisableExternalDMAUnderLock"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.10.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+                | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+                | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+                | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.2"
+    Task = "(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableCloudOptimizedContent" `
+                | Select-Object -ExpandProperty "DisableCloudOptimizedContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.3"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.13.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+                | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.3"
+    Task = "(L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "NoLocalPasswordResetQuestions" `
+                | Select-Object -ExpandProperty "NoLocalPasswordResetQuestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+                | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+                | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+                | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+                | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+                | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+                | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+                | Select-Object -ExpandProperty "LimitDumpCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.8"
+    Task = "(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+                | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.16.1"
+    Task = "(L1) Ensure 'Download Mode' is NOT set to 'Enabled: Internet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeliveryOptimization" `
+                -Name "DODownloadMode" `
+                | Select-Object -ExpandProperty "DODownloadMode"
+        
+            if (($regValue -eq 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x != 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.1"
+    Task = "(L1) Ensure 'Enable App Installer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableAppInstaller" `
+                | Select-Object -ExpandProperty "EnableAppInstaller"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.2"
+    Task = "(L1) Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableExperimentalFeatures" `
+                | Select-Object -ExpandProperty "EnableExperimentalFeatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.3"
+    Task = "(L1) Ensure 'Enable App Installer Hash Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableHashOverride" `
+                | Select-Object -ExpandProperty "EnableHashOverride"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.4"
+    Task = "(L1) Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableMSAppInstallerProtocol" `
+                | Select-Object -ExpandProperty "EnableMSAppInstallerProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.29.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.29.3"
+    Task = "(L2) Ensure 'Turn off files from Office.com in Quick access view' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "DisableGraphRecentItems" `
+                | Select-Object -ExpandProperty "DisableGraphRecentItems"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.29.4"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.29.5"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.33.1"
+    Task = "(L1) Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HomeGroup" `
+                -Name "DisableHomeGroup" `
+                | Select-Object -ExpandProperty "DisableHomeGroup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.37.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.41.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+                | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+                | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+                | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }            
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+            
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                   
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 K"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 L"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 M"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }                  
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.7.1"
+    Task = "(L2) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "EnableFileHashComputation" `
+                | Select-Object -ExpandProperty "EnableFileHashComputation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.1"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.2"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.3"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.4"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+                | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+                | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.13.1"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.13.2"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.17"
+    Task = "(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            if($avstatus){
+
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.44.1"
+    Task = "(L1) Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AuditApplicationGuard" `
+                | Select-Object -ExpandProperty "AuditApplicationGuard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.44.2"
+    Task = "(L1) Ensure 'Allow camera and microphone access in Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowCameraMicrophoneRedirection" `
+                | Select-Object -ExpandProperty "AllowCameraMicrophoneRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.44.3"
+    Task = "(L1) Ensure 'Allow data persistence for Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowPersistence" `
+                | Select-Object -ExpandProperty "AllowPersistence"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.44.4"
+    Task = "(L1) Ensure 'Allow files to download and save to the host operating system from Microsoft Defender Application Guard' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "SaveFilesToHost" `
+                | Select-Object -ExpandProperty "SaveFilesToHost"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.44.5"
+    Task = "(L1) Ensure 'Configure Microsoft Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AppHVSIClipboardSettings" `
+                | Select-Object -ExpandProperty "AppHVSIClipboardSettings"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.44.6"
+    Task = "(L1) Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI" `
+                -Name "AllowAppHVSI_ProviderSet" `
+                | Select-Object -ExpandProperty "AllowAppHVSI_ProviderSet"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found." + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant" + "</br><strong>Warning</strong>: Defender Application Guard is deprecated. <a href='https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard\' target=\'_blank\'>More info</a>."
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.50.1"
+    Task = "(L2) Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds" `
+                -Name "EnableFeeds" `
+                | Select-Object -ExpandProperty "EnableFeeds"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.51.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+                | Select-Object -ExpandProperty "DisablePushToInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.2.2"
+    Task = "(L2) Ensure 'Disable Cloud Clipboard integration for server-to-client data transfer' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client" `
+                -Name "DisableCloudClipboardIntegration" `
+                | Select-Object -ExpandProperty "DisableCloudClipboardIntegration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.2.3"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.2.1"
+    Task = "(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+                | Select-Object -ExpandProperty "fDenyTSConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.1"
+    Task = "(L2) Ensure 'Allow UI Automation redirection' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "EnableUiaRedirection" `
+                | Select-Object -ExpandProperty "EnableUiaRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.2"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.3"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.4"
+    Task = "(L2) Ensure 'Do not allow location redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLocationRedir" `
+                | Select-Object -ExpandProperty "fDisableLocationRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.5"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.6"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.7"
+    Task = "(L2) Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableWebAuthn" `
+                | Select-Object -ExpandProperty "fDisableWebAuthn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+                | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+                | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+                | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+                | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+                | Select-Object -ExpandProperty "AllowCloudSearch"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.3"
+    Task = "(L1) Ensure 'Allow Cortana' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortana" `
+                | Select-Object -ExpandProperty "AllowCortana"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.4"
+    Task = "(L1) Ensure 'Allow Cortana above lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCortanaAboveLock" `
+                | Select-Object -ExpandProperty "AllowCortanaAboveLock"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.5"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.6"
+    Task = "(L1) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowSearchToUseLocation" `
+                | Select-Object -ExpandProperty "AllowSearchToUseLocation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.7"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+                | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.63.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+                | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.66.1"
+    Task = "(L2) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableStoreApps" `
+                | Select-Object -ExpandProperty "DisableStoreApps"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.66.2"
+    Task = "(L1) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RequirePrivateStoreOnly" `
+                | Select-Object -ExpandProperty "RequirePrivateStoreOnly"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.66.3"
+    Task = "(L1) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+                | Select-Object -ExpandProperty "AutoDownload"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.66.4"
+    Task = "(L1) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "DisableOSUpgrade" `
+                | Select-Object -ExpandProperty "DisableOSUpgrade"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.66.5"
+    Task = "(L2) Ensure 'Turn off the Store application' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RemoveWindowsStore" `
+                | Select-Object -ExpandProperty "RemoveWindowsStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.72.1"
+    Task = "(L1) Ensure 'Allow widgets' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh" `
+                -Name "AllowNewsAndInterests" `
+                | Select-Object -ExpandProperty "AllowNewsAndInterests"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.1.1"
+    Task = "(L1) Ensure 'Notify Malicious' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyMalicious" `
+                | Select-Object -ExpandProperty "NotifyMalicious"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.1.2"
+    Task = "(L1) Ensure 'Notify Password Reuse' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyPasswordReuse" `
+                | Select-Object -ExpandProperty "NotifyPasswordReuse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.1.3"
+    Task = "(L1) Ensure 'Notify Unsafe App' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "NotifyUnsafeApp" `
+                | Select-Object -ExpandProperty "NotifyUnsafeApp"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.1.4"
+    Task = "(L1) Ensure 'Service Enabled' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WTDS\Components" `
+                -Name "ServiceEnabled" `
+                | Select-Object -ExpandProperty "ServiceEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.3.1"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.3.2"
+    Task = "(L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.78.1"
+    Task = "(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR" `
+                -Name "AllowGameDVR" `
+                | Select-Object -ExpandProperty "AllowGameDVR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.1"
+    Task = "(L1) Ensure 'Enable ESS with Supported Peripherals' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\PassportForWork\Biometrics" `
+                -Name "EnableESSwithSupportedPeripherals" `
+                | Select-Object -ExpandProperty "EnableESSwithSupportedPeripherals"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.82.1"
+    Task = "(L1) Ensure 'Enable MPR notifications for the system' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableMPR" `
+                | Select-Object -ExpandProperty "EnableMPR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.82.2"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.87.1"
+    Task = "(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.87.2"
+    Task = "(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+                | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.90.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+                | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.91.1"
+    Task = "(L1) Ensure 'Allow clipboard sharing with Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowClipboardRedirection" `
+                | Select-Object -ExpandProperty "AllowClipboardRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.91.2"
+    Task = "(L1) Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Sandbox" `
+                -Name "AllowNetworking" `
+                | Select-Object -ExpandProperty "AllowNetworking"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+                | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+                | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+                | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.2.3"
+    Task = "(L1) Ensure 'Remove access to `"Pause updates`" feature' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "SetDisablePauseUXAccess" `
+                | Select-Object -ExpandProperty "SetDisablePauseUXAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+                | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+        
+            if (($regValue -lt 180 -or $regValue -gt 365)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.4.2 C"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days' (BranchReadinessLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "BranchReadinessLevel" `
+                | Select-Object -ExpandProperty "BranchReadinessLevel"
+        
+            if (($regValue -ne 32)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 32"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+                | Select-Object -ExpandProperty "DeferQualityUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.1.3.1"
+    Task = "(L1) Ensure 'Enable screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveActive" `
+                | Select-Object -ExpandProperty "ScreenSaveActive"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.1.3.2"
+    Task = "(L1) Ensure 'Password protect the screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaverIsSecure" `
+                | Select-Object -ExpandProperty "ScreenSaverIsSecure"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..55176b4
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#SecurityOptions.ps1	
@@ -0,0 +1,130 @@
+[AuditTest] @{
+    Id = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.5"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#UserRights.ps1
new file mode 100644
index 0000000..5e3fb5c
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 11-Stand-alone-CIS-2.0.0#UserRights.ps1	
@@ -0,0 +1,1311 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "2.2.14"
+        Task = "(L1) Configure 'Create symbolic links' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.20"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.21"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @() | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.22"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.23"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.24"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.25"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.26"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.27"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.28"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+    [AuditTest] @{
+        Id = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @() | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else{
+    [AuditTest] @{
+        Id = "2.2.29"
+        Task = "(L2) Configure 'Log on as a service' [Hyper-V-Feature installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeServiceLogonRight"]
+            $identityAccounts = @(
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages = @()
+                $messages += "The user right 'SeServiceLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.30"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.31"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.32"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.33"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.34"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.35"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.36"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.37"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.38"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators, Users'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-545"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.39"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AccountPolicies.ps1
new file mode 100644
index 0000000..d18b2b2
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AccountPolicies.ps1	
@@ -0,0 +1,255 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '60 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 60 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 60 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 10 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 10 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AuditPolicies.ps1
new file mode 100644
index 0000000..701ef72
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#AuditPolicies.ps1	
@@ -0,0 +1,1388 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Computer Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.4"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.5"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Logoff' is set to 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#RegistrySettings.ps1
new file mode 100644
index 0000000..3488536
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows 7-CIS-3.1.0#RegistrySettings.ps1	
@@ -0,0 +1,10042 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.1"
+    Task = "(L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AllocateDASD" `
+                | Select-Object -ExpandProperty "AllocateDASD"
+        
+            if ($regValue -ne "2") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.2"
+    Task = "(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -le 0 -or $regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not display last user name' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.3"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.4"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.5"
+    Task = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+                | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.6"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+                | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+                | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if (($regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.4"
+    Task = "(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+                | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.6"
+    Task = "(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            $reference = @(
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.7"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.8"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+                | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if (($regValue -ne 2147483644) -and ($regValue -ne 2147483640)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2147483644 or x == 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if (($regValue -lt 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.14.1"
+    Task = "(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used' or higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+                | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+                | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.9"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3"
+    Task = "(L1) Ensure 'HomeGroup Listener (HomeGroupListener)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HomeGroupListener" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4"
+    Task = "(L1) Ensure 'HomeGroup Provider (HomeGroupProvider)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HomeGroupProvider" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5"
+    Task = "(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IISADMIN" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.6"
+    Task = "(L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess) ' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.7"
+    Task = "(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.8"
+    Task = "(L1) Ensure 'Media Center Extender Service (Mcx2Svc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Mcx2Svc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.9"
+    Task = "(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FTPSVC" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.10"
+    Task = "(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.11"
+    Task = "(L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.12"
+    Task = "(L2) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.13"
+    Task = "(L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.14"
+    Task = "(L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.15"
+    Task = "(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.16"
+    Task = "(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.17"
+    Task = "(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.18"
+    Task = "(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.19"
+    Task = "(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.20"
+    Task = "(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.21"
+    Task = "(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.22"
+    Task = "(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.23"
+    Task = "(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.24"
+    Task = "(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\simptcp" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.25"
+    Task = "(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.26"
+    Task = "(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.27"
+    Task = "(L1) Ensure 'Telnet (TlntSvr)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.28"
+    Task = "(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.29"
+    Task = "(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.30"
+    Task = "(L1) Ensure 'Windows CardSpace (idsvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\idsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.31"
+    Task = "(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.32"
+    Task = "(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.33"
+    Task = "(L1) Ensure 'Windows Media Center Receiver Service (ehRecvr)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehRecvr" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.34"
+    Task = "(L1) Ensure 'Windows Media Center Scheduler Service (ehSched)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ehSched" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.35"
+    Task = "(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.36"
+    Task = "(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.37"
+    Task = "(L1) Ensure 'WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.38"
+    Task = "(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.1"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType        
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.2"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.3"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.4"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.5"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SYSTEMROOT%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SYSTEMROOT%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.6"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.7"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.8"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SYSTEMROOT%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.8"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SYSTEMROOT%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.10"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.2.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PwdExpirationProtectionEnabled" `
+                | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.2.3"
+    Task = "(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+                | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.2.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordComplexity" `
+                | Select-Object -ExpandProperty "PasswordComplexity"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.2.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordLength" `
+                | Select-Object -ExpandProperty "PasswordLength"
+        
+            if (($regValue -lt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.2.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordAgeDays" `
+                | Select-Object -ExpandProperty "PasswordAgeDays"
+        
+            if (($regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.1"
+    Task = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.3"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.4"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.5"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.6"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.4"
+    Task = "(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\Parameters" `
+                -Name "disablesavepassword" `
+                | Select-Object -ExpandProperty "disablesavepassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.5"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.6"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.7"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+                | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.8"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.9"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.10"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+                | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if (($regValue -gt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.12"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.13"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4.1"
+    Task = "(L1) Set 'NetBIOS node type' to 'P-node' (Ensure NetBT Parameter 'NodeType' is set to '0x2 (2)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4.2"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11.3"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+                | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.7.1.1"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClasses" `
+                | Select-Object -ExpandProperty "DenyDeviceClasses"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.7.1.3"
+    Task = "(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions" `
+                -Name "DenyDeviceClassesRetroactive" `
+                | Select-Object -ExpandProperty "DenyDeviceClassesRetroactive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.7.2"
+    Task = "(L1) Ensure 'Allow remote access to the Plug and Play interface' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings" `
+                -Name "AllowRemoteRPC" `
+                | Select-Object -ExpandProperty "AllowRemoteRPC"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.21.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.21.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.21.4"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+                | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.1"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.2"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+                | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.4"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+                | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.5"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.6"
+    Task = "(L2) Ensure 'Turn off Internet File Association service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInternetOpenWith" `
+                | Select-Object -ExpandProperty "NoInternetOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.7"
+    Task = "(L1) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.8"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+                | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.9"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+                | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+                | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.11"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+                | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.12"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+                | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.22.1.13"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.27.1"
+    Task = "(L1) Ensure 'Always use classic logon' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LogonType" `
+                | Select-Object -ExpandProperty "LogonType"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.33.6.1"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.33.6.2"
+    Task = "(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.33.6.3"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.33.6.4"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.35.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.35.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.36.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+                | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.36.2"
+    Task = "(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.44.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.44.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.49.1.1"
+    Task = "(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.49.1.2"
+    Task = "(L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.8.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.8.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.8.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVDiscoveryVolumeType" `
+                | Select-Object -ExpandProperty "FDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: This value should be empty."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecovery" `
+                | Select-Object -ExpandProperty "FDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVManageDRA" `
+                | Select-Object -ExpandProperty "FDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryPassword" `
+                | Select-Object -ExpandProperty "FDVRecoveryPassword"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRecoveryKey" `
+                | Select-Object -ExpandProperty "FDVRecoveryKey"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVHideRecoveryPage" `
+                | Select-Object -ExpandProperty "FDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "FDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "FDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "FDVRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "FDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.10"
+    Task = "(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVPassphrase" `
+                | Select-Object -ExpandProperty "FDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.11"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVAllowUserCert" `
+                | Select-Object -ExpandProperty "FDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.1.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "FDVEnforceUserCert" `
+                | Select-Object -ExpandProperty "FDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.1"
+    Task = "(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "UseEnhancedPin" `
+                | Select-Object -ExpandProperty "UseEnhancedPin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecovery" `
+                | Select-Object -ExpandProperty "OSRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSManageDRA" `
+                | Select-Object -ExpandProperty "OSManageDRA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryPassword" `
+                | Select-Object -ExpandProperty "OSRecoveryPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRecoveryKey" `
+                | Select-Object -ExpandProperty "OSRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSHideRecoveryPage" `
+                | Select-Object -ExpandProperty "OSHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "OSActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "OSActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "OSRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "OSRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.10"
+    Task = "(BL) Ensure 'Configure minimum PIN length for startup' is set to 'Enabled: 7 or more characters'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "MinimumPIN" `
+                | Select-Object -ExpandProperty "MinimumPIN"
+        
+            if (($regValue -lt 7)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 7"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.11"
+    Task = "(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseAdvancedStartup" `
+                | Select-Object -ExpandProperty "UseAdvancedStartup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.12"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EnableBDEWithNoTPM" `
+                | Select-Object -ExpandProperty "EnableBDEWithNoTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.13"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup:' is set to 'Enabled: Do not allow TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPM" `
+                | Select-Object -ExpandProperty "UseTPM"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.14"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup PIN:' is set to 'Enabled: Require startup PIN with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMPIN" `
+                | Select-Object -ExpandProperty "UseTPMPIN"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.15"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key:' is set to 'Enabled: Do not allow startup key with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKey" `
+                | Select-Object -ExpandProperty "UseTPMKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.2.16"
+    Task = "(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key and PIN:' is set to 'Enabled: Do not allow startup key and PIN with TPM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "UseTPMKeyPIN" `
+                | Select-Object -ExpandProperty "UseTPMKeyPIN"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.1"
+    Task = "(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVDiscoveryVolumeType" `
+                | Select-Object -ExpandProperty "RDVDiscoveryVolumeType"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: ''"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.2"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecovery" `
+                | Select-Object -ExpandProperty "RDVRecovery"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.3"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVManageDRA" `
+                | Select-Object -ExpandProperty "RDVManageDRA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.4"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryPassword" `
+                | Select-Object -ExpandProperty "RDVRecoveryPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.5"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRecoveryKey" `
+                | Select-Object -ExpandProperty "RDVRecoveryKey"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.6"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVHideRecoveryPage" `
+                | Select-Object -ExpandProperty "RDVHideRecoveryPage"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.7"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "RDVActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.8"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVActiveDirectoryInfoToStore" `
+                | Select-Object -ExpandProperty "RDVActiveDirectoryInfoToStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.9"
+    Task = "(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "RDVRequireActiveDirectoryBackup" `
+                | Select-Object -ExpandProperty "RDVRequireActiveDirectoryBackup"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.10"
+    Task = "(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVPassphrase" `
+                | Select-Object -ExpandProperty "RDVPassphrase"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.11"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVAllowUserCert" `
+                | Select-Object -ExpandProperty "RDVAllowUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.12"
+    Task = "(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVEnforceUserCert" `
+                | Select-Object -ExpandProperty "RDVEnforceUserCert"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.13"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\Microsoft\FVE" `
+                -Name "RDVDenyWriteAccess" `
+                | Select-Object -ExpandProperty "RDVDenyWriteAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.3.14"
+    Task = "(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE" `
+                -Name "RDVDenyCrossOrg" `
+                | Select-Object -ExpandProperty "RDVDenyCrossOrg"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.11.4"
+    Task = "(BL) Ensure 'Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)' is set to 'Enabled: AES 256-bit with Diffuser'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" `
+                -Name "EncryptionMethod" `
+                | Select-Object -ExpandProperty "EncryptionMethod"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.15.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.15.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.18.1"
+    Task = "(L1) Ensure 'Turn off desktop gadgets' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar" `
+                -Name "TurnOffSidebar" `
+                | Select-Object -ExpandProperty "TurnOffSidebar"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.18.2"
+    Task = "(L1) Ensure 'Turn Off user-installed desktop gadgets' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar" `
+                -Name "TurnOffUserInstalledGadgets" `
+                | Select-Object -ExpandProperty "TurnOffUserInstalledGadgets"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.1"
+    Task = "(L1) Ensure 'EMET 5.52' or higher is installed"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\EMET_Service" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.3"
+    Task = "(L1) Ensure 'Default Protections for Internet Explorer' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Internet Explorer\iexplore.exe" `
+                | Select-Object -ExpandProperty "*\Internet Explorer\iexplore.exe"
+        
+            if ($regValue -ne "+EAF+ eaf_modules:mshtml.dll;flash*.ocx;jscript*.dll;vbscript.dll;vgx.dll +ASR asr_modules:npjpi*.dll;jp2iexp.dll;vgx.dll;msxml4*.dll;wshom.ocx;scrrun.dll;vbscript.dll asr_zones:1;2") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +EAF+ eaf_modules:mshtml.dll;flash*.ocx;jscript*.dll;vbscript.dll;vgx.dll +ASR asr_modules:npjpi*.dll;jp2iexp.dll;vgx.dll;msxml4*.dll;wshom.ocx;scrrun.dll;vbscript.dll asr_zones:1;2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.4"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Mozilla Thunderbird\thunderbird.exe" `
+                | Select-Object -ExpandProperty "*\Mozilla Thunderbird\thunderbird.exe"
+        
+            if ($regValue -notmatch "^$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.5"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Java\jre*\bin\javaws.exe" `
+                | Select-Object -ExpandProperty "*\Java\jre*\bin\javaws.exe"
+        
+            if ($regValue -ne "-HeapSpray") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -HeapSpray"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.6"
+    Task = "(L1) Ensure 'System ASLR' is set to 'Enabled: Application Opt-In'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "ASLR" `
+                | Select-Object -ExpandProperty "ASLR"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.7"
+    Task = "(L1) Ensure 'System DEP' is set to 'Enabled: Application Opt-Out'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "DEP" `
+                | Select-Object -ExpandProperty "DEP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.8"
+    Task = "(L1) Ensure 'System SEHOP' is set to 'Enabled: Application Opt-Out'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "SEHOP" `
+                | Select-Object -ExpandProperty "SEHOP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.30.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.30.3"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.30.4"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.1"
+    Task = "(L1) Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HomeGroup" `
+                -Name "DisableHomeGroup" `
+                | Select-Object -ExpandProperty "DisableHomeGroup"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.39.2"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.52.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.52.2"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage on Windows 8.1' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSync" `
+                | Select-Object -ExpandProperty "DisableFileSync"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.2.1"
+    Task = "(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDenyTSConnections" `
+                | Select-Object -ExpandProperty "fDenyTSConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.3.1"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.3.2"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.3.3"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.3.4"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.9.3"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+                | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+                | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.58.3.11.2"
+    Task = "(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+                | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.59.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.60.2"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.76.3.1"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.76.14"
+    Task = "(L1) Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.81.2.1"
+    Task = "(L1) Ensure 'Configure Default consent' is set to 'Enabled: Always ask before sending data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent" `
+                -Name "DefaultConsent" `
+                | Select-Object -ExpandProperty "DefaultConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.85.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.85.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.85.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.95.1"
+    Task = "(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.95.2"
+    Task = "(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.97.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.97.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.97.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.97.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.97.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+                | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.97.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.97.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.98.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+                | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.101.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.101.3"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+                | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.101.4"
+    Task = "(L1) Ensure 'Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAUAsDefaultShutdownOption" `
+                | Select-Object -ExpandProperty "NoAUAsDefaultShutdownOption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.101.5"
+    Task = "(L1) Ensure 'Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAUShutdownOption" `
+                | Select-Object -ExpandProperty "NoAUShutdownOption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.101.6"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+                | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings.ps1
new file mode 100644
index 0000000..be968cb
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings.ps1	
@@ -0,0 +1,144 @@
+[AuditTest] @{
+    Id = "2.0"
+    Task = "Ensure 'Enable DCOM Hardening' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat" `
+                -Name "RequireIntegrityActivationAuthenticationLevel" `
+                | Select-Object -ExpandProperty "RequireIntegrityActivationAuthenticationLevel"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1"
+    Task = "Ensure 'Raise Authentication Level' is set to 'Raise the authentication level for all non-anonymous activation requests from Windows-based DCOM clients'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat" `
+                -Name "RaiseActivationAuthenticationLevel" `
+                | Select-Object -ExpandProperty "RaiseActivationAuthenticationLevel"
+        
+            if (($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.0"
+    Task = "IPv6 Configuration Policy: Prefer IPv4 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0x20 (32)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if (($regValue -ne 32)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 32"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.0"
+    Task = "Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights.ps1
new file mode 100644
index 0000000..701495e
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights.ps1	
@@ -0,0 +1,102 @@
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and
+                (Get-WindowsOptionalFeature -Online -FeatureName "Microsoft-Hyper-V").State -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "1.0"
+    Task = "Ensure 'Debug programs' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDebugPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..7dd897b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AccountPolicies.ps1	
@@ -0,0 +1,255 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -gt 365 -or $setPolicy -le 0) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365  and x > 0 "
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 1) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 15 -or $setPolicy -gt 99999) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 and x <= 99999"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -gt 99999 -or $setPolicy -lt 15) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x <= 99999 and x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..62e297d
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#AuditPolicies.ps1	
@@ -0,0 +1,1922 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.2"
+    Task = "(L1) Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Authentication Service
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Authentication Service"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Authentication Service'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.3"
+    Task = "(L1) Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Service Ticket Operations
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Service Ticket Operations"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Service Ticket Operations'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Distribution Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Distribution Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Distribution Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.4"
+    Task = "(L1) Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.5"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.6"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.1"
+    Task = "(L1) Ensure 'Audit Directory Service Access' is set to include 'Failure' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.2"
+    Task = "(L1) Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..fd7f09a
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#RegistrySettings.ps1	
@@ -0,0 +1,12455 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+                | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.1"
+    Task = "(L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AllocateDASD" `
+                | Select-Object -ExpandProperty "AllocateDASD"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.2"
+    Task = "(L1) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.1"
+    Task = "(L1) Ensure 'Domain controller: Allow server operators to schedule tasks' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SubmitControl" `
+                | Select-Object -ExpandProperty "SubmitControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.2"
+    Task = "(L1) Ensure 'Domain controller: Allow vulnerable Netlogon secure channel connections' is set to 'Not Configured' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "vulnerablechannelallowlist" `
+                | Select-Object -ExpandProperty "vulnerablechannelallowlist"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.3"
+    Task = "(L1) Ensure 'Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LdapEnforceChannelBinding" `
+                | Select-Object -ExpandProperty "LdapEnforceChannelBinding"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.4"
+    Task = "(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.5"
+    Task = "(L1) Ensure 'Domain controller: Refuse machine account password changes' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+                | Select-Object -ExpandProperty "RefusePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if ($regValue -le 0 -or $regValue -gt 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not display last user name' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.3"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -gt 900 -or $regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.4"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.6"
+    Task = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+                | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if ($regValue -gt 14 -or $regValue -lt 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ForceUnlockLogon" `
+                | Select-Object -ExpandProperty "ForceUnlockLogon"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.9"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 1 - 'Lock Workstation' or 2 / 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+                | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if ($regValue -gt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+                | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.4"
+    Task = "(L2) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+                | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.6"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            $reference = @(
+                "LSARPC"
+                "NETLOGON"
+                "SAMR"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: LSARPC NETLOGON SAMR"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.7"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.8"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+$CARoleStatus = $null
+$WINSStatus = $null
+try {
+    $CARoleStatus = (Get-WindowsFeature -Name ADCS-Cert-Authority -ErrorAction Stop).Installed
+    $WINSStatus = (Get-WindowsFeature -Name WINS -ErrorAction Stop).Installed
+} catch {
+    Write-Verbose "Get-WindowsFeature is not installed."
+}
+[AuditTest] @{
+    Id = "2.3.10.9 A"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths and sub-paths' [WINS Role Feature and CA Role Service NOT installed]"
+    Test = {
+        try {
+            if (($CARoleStatus -or $WINSStatus) -eq $true){
+                return @{
+                    Message = "WINS Role Feature or CA Role Service are installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 B"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [CA Role Service installed]"
+    Test = {
+        try {
+            if ($CARoleStatus -eq $false){
+                return @{
+                    Message = "CA Role Service NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\CertSvc"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\CertSvc"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 C"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [WINS Role Feature installed]"
+    Test = {
+        try {
+            if ($WINSStatus -eq $false){
+                return @{
+                    Message = "WINS Role Feature NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\WINS"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\WINS"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+                | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+                | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.13"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+                | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 1 - 'Negotiate signing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.13.1"
+    Task = "(L1) Ensure 'Shutdown: Allow system to be shut down without having to log on' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ShutdownWithoutLogon" `
+                | Select-Object -ExpandProperty "ShutdownWithoutLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 2 - 'Prompt for consent on the secure desktop' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.1"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.2"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.3"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.4"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.5"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.6"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.7"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.8"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.8"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.10"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PwdExpirationProtectionEnabled" `
+                | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.3"
+    Task = "(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+                | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordComplexity" `
+                | Select-Object -ExpandProperty "PasswordComplexity"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordLength" `
+                | Select-Object -ExpandProperty "PasswordLength"
+        
+            if ($regValue -lt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordAgeDays" `
+                | Select-Object -ExpandProperty "PasswordAgeDays"
+        
+            if ($regValue -gt 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.2"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.4"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.5"
+    Task = "(L1) Ensure 'LSA Protection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+                | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.6"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.7"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.5"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.6"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+                | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.7"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.8"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+                | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.10"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.12"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if ($regValue -gt 90) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' (or 0 - Disable NetBIOS name resolution)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+                | Select-Object -ExpandProperty "EnableNetBIOS"
+        
+            if ($regValue -ne 2 -and $regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.2"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+                | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+                | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+                | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.3"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+                | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`" and `"Require Integrity`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`" and `"Require Integrity`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+                | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+                | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+                | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+                | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+                | Select-Object -ExpandProperty "DisableWPDRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 1 = Minimize simultaneous connections'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+                | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.2"
+    Task = "(L2) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+                | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+                | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+                | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.3"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+                | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.4"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+                | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.5"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+                | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.6"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+                | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.4"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+                | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.1"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.2"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+                | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+                | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.5"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.6"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+                | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+                | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+                | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+                | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+                | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+                | Select-Object -ExpandProperty "DoReport"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+                | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.1"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.2"
+    Task = "(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+                | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.3"
+    Task = "(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.4"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+                | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.5"
+    Task = "(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+                | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.6"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+                | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.1"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.32.6.2"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.34.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.34.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+                | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.2"
+    Task = "(L2) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.46.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.46.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.48.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+                | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.50.1.1"
+    Task = "(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.50.1.2"
+    Task = "(L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.1"
+    Task = "(L1) Ensure 'EMET 5.52' or higher is installed"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\EMET_Service" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.2 A"
+    Task = "(L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "AntiDetours" `
+                | Select-Object -ExpandProperty "AntiDetours"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.2 B"
+    Task = "(L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "BannedFunctions" `
+                | Select-Object -ExpandProperty "BannedFunctions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.2 C"
+    Task = "(L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "DeepHooks" `
+                | Select-Object -ExpandProperty "DeepHooks"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.2 D"
+    Task = "(L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "ExploitAction" `
+                | Select-Object -ExpandProperty "ExploitAction"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.3"
+    Task = "(L1) Ensure 'Default Protections for Internet Explorer' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Internet Explorer\iexplore.exe" `
+                | Select-Object -ExpandProperty "*\Internet Explorer\iexplore.exe"
+        
+            if ($regValue -ne "+EAF+ eaf_modules:mshtml.dll;flash*.ocx;jscript*.dll;vbscript.dll;vgx.dll +ASR asr_modules:npjpi*.dll;jp2iexp.dll;vgx.dll;msxml4*.dll;wshom.ocx;scrrun.dll;vbscript.dll asr_zones:1;2") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +EAF+ eaf_modules:mshtml.dll;flash*.ocx;jscript*.dll;vbscript.dll;vgx.dll +ASR asr_modules:npjpi*.dll;jp2iexp.dll;vgx.dll;msxml4*.dll;wshom.ocx;scrrun.dll;vbscript.dll asr_zones:1;2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 A"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\7-Zip\7z.exe" `
+                | Select-Object -ExpandProperty "*\7-Zip\7z.exe"
+        
+            if ($regValue -ne "-EAF") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -EAF"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AA"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Windows Live\Photo Gallery\WLXPhotoGallery.exe" `
+                | Select-Object -ExpandProperty "*\Windows Live\Photo Gallery\WLXPhotoGallery.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AB"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Windows Live\Writer\WindowsLiveWriter.exe" `
+                | Select-Object -ExpandProperty "*\Windows Live\Writer\WindowsLiveWriter.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AC"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Windows Media Player\wmplayer.exe" `
+                | Select-Object -ExpandProperty "*\Windows Media Player\wmplayer.exe"
+        
+            if ($regValue -ne "-EAF -MandatoryASLR") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -EAF -MandatoryASLR"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AD"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\WinRAR\rar.exe" `
+                | Select-Object -ExpandProperty "*\WinRAR\rar.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AE"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\WinRAR\unrar.exe" `
+                | Select-Object -ExpandProperty "*\WinRAR\unrar.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AF"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\WinRAR\winrar.exe" `
+                | Select-Object -ExpandProperty "*\WinRAR\winrar.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AG"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\WinZip\winzip32.exe" `
+                | Select-Object -ExpandProperty "*\WinZip\winzip32.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 AH"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\WinZip\winzip64.exe" `
+                | Select-Object -ExpandProperty "*\WinZip\winzip64.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 B"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\7-Zip\7zG.exe" `
+                | Select-Object -ExpandProperty "*\7-Zip\7zG.exe"
+        
+            if ($regValue -ne "-EAF") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -EAF"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 C"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\7-Zip\7zFM.exe" `
+                | Select-Object -ExpandProperty "*\7-Zip\7zFM.exe"
+        
+            if ($regValue -ne "-EAF") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -EAF"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 D"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Adobe\Adobe Photoshop CS*\Photoshop.exe" `
+                | Select-Object -ExpandProperty "*\Adobe\Adobe Photoshop CS*\Photoshop.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 E"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Foxit Reader\Foxit Reader.exe" `
+                | Select-Object -ExpandProperty "*\Foxit Reader\Foxit Reader.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 F"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Google\Chrome\Application\chrome.exe" `
+                | Select-Object -ExpandProperty "*\Google\Chrome\Application\chrome.exe"
+        
+            if ($regValue -ne "+EAF+ eaf_modules:chrome_child.dll") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +EAF+ eaf_modules:chrome_child.dll"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 G"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Google\Google Talk\googletalk.exe" `
+                | Select-Object -ExpandProperty "*\Google\Google Talk\googletalk.exe"
+        
+            if ($regValue -ne "-DEP") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -DEP"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 H"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\iTunes\iTunes.exe" `
+                | Select-Object -ExpandProperty "*\iTunes\iTunes.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 I"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Microsoft Lync\communicator.exe" `
+                | Select-Object -ExpandProperty "*\Microsoft Lync\communicator.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 J"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\mIRC\mirc.exe" `
+                | Select-Object -ExpandProperty "*\mIRC\mirc.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 K"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Mozilla Firefox\firefox.exe" `
+                | Select-Object -ExpandProperty "*\Mozilla Firefox\firefox.exe"
+        
+            if ($regValue -ne "+EAF+ eaf_modules:mozjs.dll;xul.dll") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +EAF+ eaf_modules:mozjs.dll;xul.dll"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 L"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Mozilla Firefox\plugin-container.exe" `
+                | Select-Object -ExpandProperty "*\Mozilla Firefox\plugin-container.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 M"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Mozilla Thunderbird\plugin-container.exe" `
+                | Select-Object -ExpandProperty "*\Mozilla Thunderbird\plugin-container.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 N"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Mozilla Thunderbird\thunderbird.exe" `
+                | Select-Object -ExpandProperty "*\Mozilla Thunderbird\thunderbird.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 O"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Opera\*\opera.exe" `
+                | Select-Object -ExpandProperty "*\Opera\*\opera.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 P"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Opera\opera.exe" `
+                | Select-Object -ExpandProperty "*\Opera\opera.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 Q"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Pidgin\pidgin.exe" `
+                | Select-Object -ExpandProperty "*\Pidgin\pidgin.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 R"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\QuickTime\QuickTimePlayer.exe" `
+                | Select-Object -ExpandProperty "*\QuickTime\QuickTimePlayer.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 S"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Real\RealPlayer\realconverter.exe" `
+                | Select-Object -ExpandProperty "*\Real\RealPlayer\realconverter.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 T"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Real\RealPlayer\realplay.exe" `
+                | Select-Object -ExpandProperty "*\Real\RealPlayer\realplay.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 U"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Safari\Safari.exe" `
+                | Select-Object -ExpandProperty "*\Safari\Safari.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 V"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\SkyDrive\SkyDrive.exe" `
+                | Select-Object -ExpandProperty "*\SkyDrive\SkyDrive.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 W"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Skype\Phone\Skype.exe" `
+                | Select-Object -ExpandProperty "*\Skype\Phone\Skype.exe"
+        
+            if ($regValue -ne "-EAF") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -EAF"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 X"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\VideoLAN\VLC\vlc.exe" `
+                | Select-Object -ExpandProperty "*\VideoLAN\VLC\vlc.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 Y"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Winamp\winamp.exe" `
+                | Select-Object -ExpandProperty "*\Winamp\winamp.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.4 Z"
+    Task = "(L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Windows Live\Mail\wlmail.exe" `
+                | Select-Object -ExpandProperty "*\Windows Live\Mail\wlmail.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 A"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Adobe\*\Reader\AcroRd32.exe" `
+                | Select-Object -ExpandProperty "*\Adobe\*\Reader\AcroRd32.exe"
+        
+            if ($regValue -ne "+EAF+ eaf_modules:AcroRd32.dll;Acrofx32.dll;AcroForm.api") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +EAF+ eaf_modules:AcroRd32.dll;Acrofx32.dll;AcroForm.api"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 B"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Adobe\Acrobat*\Acrobat\Acrobat.exe" `
+                | Select-Object -ExpandProperty "*\Adobe\Acrobat*\Acrobat\Acrobat.exe"
+        
+            if ($regValue -ne "+EAF+ eaf_modules:AcroRd32.dll;Acrofx32.dll;AcroForm.api") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +EAF+ eaf_modules:AcroRd32.dll;Acrofx32.dll;AcroForm.api"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 C"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Java\jre*\bin\java.exe" `
+                | Select-Object -ExpandProperty "*\Java\jre*\bin\java.exe"
+        
+            if ($regValue -ne "-HeapSpray") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -HeapSpray"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 D"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Java\jre*\bin\javaw.exe" `
+                | Select-Object -ExpandProperty "*\Java\jre*\bin\javaw.exe"
+        
+            if ($regValue -ne "-HeapSpray") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -HeapSpray"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 E"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Java\jre*\bin\javaws.exe" `
+                | Select-Object -ExpandProperty "*\Java\jre*\bin\javaws.exe"
+        
+            if ($regValue -ne "-HeapSpray") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: -HeapSpray"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 F"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\EXCEL.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\EXCEL.exe"
+        
+            if ($regValue -ne "+ASR asr_modules:flash*.ocx") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +ASR asr_modules:flash*.ocx"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 G"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\INFOPATH.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\INFOPATH.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 H"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\LYNC.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\LYNC.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 I"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\MSACCESS.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\MSACCESS.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 J"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\MSPUB.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\MSPUB.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 K"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\OIS.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\OIS.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 L"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\OUTLOOK.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\OUTLOOK.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 M"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\POWERPNT.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\POWERPNT.exe"
+        
+            if ($regValue -ne "+ASR asr_modules:flash*.ocx") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +ASR asr_modules:flash*.ocx"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 N"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\PPTVIEW.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\PPTVIEW.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 O"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\VISIO.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\VISIO.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 P"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\VPREVIEW.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\VPREVIEW.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 Q"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\OFFICE1*\WINWORD.exe" `
+                | Select-Object -ExpandProperty "*\OFFICE1*\WINWORD.exe"
+        
+            if ($regValue -ne "+ASR asr_modules:flash*.ocx") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: +ASR asr_modules:flash*.ocx"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.5 R"
+    Task = "(L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\Defaults" `
+                -Name "*\Windows NT\Accessories\wordpad.exe" `
+                | Select-Object -ExpandProperty "*\Windows NT\Accessories\wordpad.exe"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.6"
+    Task = "(L1) Ensure 'System ASLR' is set to 'Enabled: Application Opt-In'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "ASLR" `
+                | Select-Object -ExpandProperty "ASLR"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.7"
+    Task = "(L1) Ensure 'System DEP' is set to 'Enabled: Application Opt-Out'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "DEP" `
+                | Select-Object -ExpandProperty "DEP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.24.8"
+    Task = "(L1) Ensure 'System SEHOP' is set to 'Enabled: Application Opt-Out'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EMET\SysSettings" `
+                -Name "SEHOP" `
+                | Select-Object -ExpandProperty "SEHOP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.26.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.29.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.29.3"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.29.4"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.37.1.1"
+    Task = "(L2) Ensure 'Turn off Windows Location Provider' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableWindowsLocationProvider" `
+                | Select-Object -ExpandProperty "DisableWindowsLocationProvider"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.37.2"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+                | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 C"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+             if ((-not $windefrunning)) {
+                 return @{
+                     Message = "This rule requires Windows Defender Antivirus to be enabled."
+                     Status = "None"
+                 }
+             }
+             $regValue = 0;
+             $regValueTwo = 0;
+             $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+             $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+ 
+             $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+             if($asrTest1){
+                 $regValue = Get-ItemProperty -ErrorAction Stop `
+                     -Path $Path `
+                     -Name $Value `
+                     | Select-Object -ExpandProperty $Value
+             }
+ 
+             $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+             $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+ 
+             $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+             if($asrTest2){
+                 $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                     -Path $Path2 `
+                     -Name $Value2 `
+                     | Select-Object -ExpandProperty $Value2
+             }
+ 
+             if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                 return @{
+                     Message = "Registry value is '$regValue'. Expected: 1"
+                     Status = "False"
+                 }
+             }
+         }
+         catch [System.Management.Automation.PSArgumentException] {
+             return @{
+                 Message = "Registry value not found."
+                 Status = "False"
+             }
+         }
+         catch [System.Management.Automation.ItemNotFoundException] {
+             return @{
+                 Message = "Registry key not found."
+                 Status = "False"
+             }
+         }
+         
+         return @{
+             Message = "Compliant"
+             Status = "True"
+         }
+     }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+                $regValue = 0;
+                $regValueTwo = 0;
+                $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+                $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+    
+                $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+                if($asrTest1){
+                    $regValue = Get-ItemProperty -ErrorAction Stop `
+                        -Path $Path `
+                        -Name $Value `
+                        | Select-Object -ExpandProperty $Value
+                }
+    
+                $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+                $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+    
+                $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+                if($asrTest2){
+                    $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                        -Path $Path2 `
+                        -Name $Value2 `
+                        | Select-Object -ExpandProperty $Value2
+                }
+    
+                if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.1"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.2"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.3"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.10.4"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+                | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+                | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.13.1"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.13.2"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.43.16"
+    Task = "(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.51.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.51.2"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage on Windows 8.1' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSync" `
+                | Select-Object -ExpandProperty "DisableFileSync"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.2.1"
+    Task = "(L2) Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fSingleSessionPerUser" `
+                | Select-Object -ExpandProperty "fSingleSessionPerUser"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.1"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.2"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.3"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.3.4"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+                | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+                | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+                | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if ($regValue -gt 900000 -or $regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+                | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.3.11.2"
+    Task = "(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+                | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.2"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.59.3"
+    Task = "(L2) Ensure 'Set what information is shared in Search' is set to 'Enabled: Anonymous info'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "ConnectedSearchPrivacy" `
+                | Select-Object -ExpandProperty "ConnectedSearchPrivacy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.76.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.77.2.1"
+    Task = "(L1) Ensure 'Configure Default consent' is set to 'Enabled: Always ask before sending data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent" `
+                -Name "DefaultConsent" `
+                | Select-Object -ExpandProperty "DefaultConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.77.3"
+    Task = "(L1) Ensure 'Automatically send memory dumps for OS-generated error reports' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "AutoApproveOSDumps" `
+                | Select-Object -ExpandProperty "AutoApproveOSDumps"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.82.1"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.87.1"
+    Task = "(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.87.2"
+    Task = "(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+                | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.90.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+                | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+                | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.93.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+                | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.1.3.1"
+    Task = "(L1) Ensure 'Enable screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveActive" `
+                | Select-Object -ExpandProperty "ScreenSaveActive"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.1.3.2"
+    Task = "(L1) Ensure 'Password protect the screen saver' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaverIsSecure" `
+                | Select-Object -ExpandProperty "ScreenSaverIsSecure"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.1.3.3"
+    Task = "(L1) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveTimeOut" `
+                | Select-Object -ExpandProperty "ScreenSaveTimeOut"
+        
+            if ($regValue -gt 900 -or $regValue -le 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x > 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+                | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.4.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.4.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+                | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.25.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+                | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.40.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.42.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+                | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..59b8d27
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#SecurityOptions.ps1	
@@ -0,0 +1,133 @@
+[AuditTest] @{
+    Id = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.5"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#UserRights.ps1
new file mode 100644
index 0000000..4b34271
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-CIS-3.0.0#UserRights.ps1	
@@ -0,0 +1,1937 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE") {
+                if ($name -eq "Enterprise Admins") {
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins") {
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators"                      = "S-1-5-32-544"
+                "Guests"                              = "S-1-5-32-546"
+                "Local account"                       = "S-1-5-113"
+                "Local Service"                       = "S-1-5-19"
+                "Network Service"                     = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users"    = "S-1-5-11"
+                "Remote Desktop Users"                = "S-1-5-32-555"
+                "Service"                             = "S-1-5-6"
+                "Users"                               = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "(L1) Ensure 'Add workstations to domain' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeMachineAccountPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeMachineAccountPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeMachineAccountPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.14"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ($hyperVStatus -ne "Enabled") {
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators [Hyper-V-Feature NOT installed] (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else {
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' [Hyper-V-Feature installed] (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-83-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if ($null -eq $currentUserRights -and $identityAccounts.Count -gt 0) {
+            return @{
+                Status  = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if ($currentUserRights.Count -lt $identityAccounts.Count) {
+            $users = ""
+            foreach ($currentUser in $currentUserRights) {
+                $users += $currentUser.Values
+            }
+            return @{
+                Status  = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.20"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.21"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-114"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.22"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.23"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.24"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.25"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.26"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.27"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.28"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.29"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ($null -eq (Get-Module -Name ADFS)) {
+[AuditTest] @{
+    Id = "2.2.30 A"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE NOT installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.30 B"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-80-1321940109-3370001082-3650459431-215109509-2472514016"
+            "S-1-5-80-2246541699-21809830-3603976364-117610243-975697593"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.31"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ((Get-WindowsFeature -Name web-server).installed -ne $true) {
+[AuditTest] @{
+    Id = "2.2.32 A"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed] (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else {
+[AuditTest] @{
+    Id = "2.2.32 B"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' [IIS Role installed] (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-32-568"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.33"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.34"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.35"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.36"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.37"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' and (when Exchange is running in the environment) 'Exchange Servers' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.38"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.39"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.40"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.41"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.42"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.43"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.44"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.45"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.46"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.47"
+    Task = "(L1) Ensure 'Synchronize directory service data' is set to 'No One' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSyncAgentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSyncAgentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSyncAgentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.48"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AccountPolicies.ps1
new file mode 100644
index 0000000..f69b0b9
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AccountPolicies.ps1	
@@ -0,0 +1,252 @@
+[AuditTest] @{
+    Id = "V-1097"
+    Task = "The number of allowed bad logon attempts must meet minimum requirements."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 3 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x >= 3 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1098"
+    Task = "The reset period for the account lockout counter must be configured to 15 minutes or greater on Windows 2012."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1099"
+    Task = "Windows 2012 account lockout duration must be configured to 15 minutes or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15) -and ($setPolicy -ne 0)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 or x == 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1104"
+    Task = "The maximum password age must meet requirements."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 60 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 60 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1105"
+    Task = "The minimum password age must meet requirements."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -eq 0)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1107"
+    Task = "The password history must be configured to 24 passwords remembered."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1150"
+    Task = "The built-in Windows password complexity policy must be enabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-2372"
+    Task = "Reversible password encryption must be disabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-6836"
+    Task = "Passwords must, at a minimum, be 14 characters."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AuditPolicies.ps1
new file mode 100644
index 0000000..b4363b3
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#AuditPolicies.ps1	
@@ -0,0 +1,1217 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "V-26529 + V-26530"
+    Task = "The system must be configured to audit Account Logon - Credential Validation successes. The system must be configured to audit Account Logon - Credential Validation failures."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26533"
+    Task = "The system must be configured to audit Account Management - Other Account Management Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26535"
+    Task = "The system must be configured to audit Account Management - Security Group Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26537 + V-26538"
+    Task = "The system must be configured to audit Account Management - User Account Management successes. The system must be configured to audit Account Management - User Account Management failures."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26539"
+    Task = "The system must be configured to audit Detailed Tracking - Process Creation successes."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26540"
+    Task = "The system must be configured to audit Logon/Logoff - Logoff successes."
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26541 + V-26542"
+    Task = "The system must be configured to audit Logon/Logoff - Logon successes. The system must be configured to audit Logon/Logoff - Logon failures."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26543"
+    Task = "The system must be configured to audit Logon/Logoff - Special Logon successes."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26546 + V-26547"
+    Task = "The system must be configured to audit Policy Change - Audit Policy Change successes. The system must be configured to audit Policy Change - Audit Policy Change failures."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26548"
+    Task = "The system must be configured to audit Policy Change - Authentication Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26549 + V-26550"
+    Task = "The system must be configured to audit Privilege Use - Sensitive Privilege Use successes. The system must be configured to audit Privilege Use - Sensitive Privilege Use failures."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26551 + V-26552"
+    Task = "The system must be configured to audit System - IPsec Driver successes. The system must be configured to audit System - IPsec Driver failures."
+    Test = {
+        # Get the audit policy for the subcategory IPsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "IPsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'IPsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26553"
+    Task = "The system must be configured to audit System - Security State Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26555"
+    Task = "The system must be configured to audit System - Security System Extension successes."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26557 + V-26558"
+    Task = "The system must be configured to audit System - System Integrity successes. The system must be configured to audit System - System Integrity failures."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36667 + V-36668"
+    Task = "The system must be configured to audit Object Access - Removable Storage failures. The system must be configured to audit Object Access - Removable Storage successes."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-40200 + V-40202"
+    Task = "The system must be configured to audit Object Access - Central Access Policy Staging failures. The system must be configured to audit Object Access - Central Access Policy Staging successes."
+    Test = {
+        # Get the audit policy for the subcategory Central Policy Staging
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Central Policy Staging"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Central Policy Staging'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-57633"
+    Task = "The system must be configured to audit Policy Change - Authorization Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-78057 + V-78059"
+    Task = "Windows Server 2012/2012 R2 must be configured to audit Logon/Logoff - Account Lockout successes. Windows Server 2012/2012 R2 must be configured to audit Logon/Logoff - Account Lockout failures."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-78061 + V-78063"
+    Task = "Windows Server 2012/2012 R2 must be configured to audit System - Other System Events successes. Windows Server 2012/2012 R2 must be configured to audit System - Other System Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#RegistrySettings.ps1
new file mode 100644
index 0000000..f7cb7c0
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2012 R2-DISA-V2R19#RegistrySettings.ps1	
@@ -0,0 +1,6330 @@
+[AuditTest] @{
+    Id = "V-1075"
+    Task = "The shutdown option must not be available from the logon dialog box."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ShutdownWithoutLogon" `
+                | Select-Object -ExpandProperty "ShutdownWithoutLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1089"
+    Task = "The required legal notice must be configured to display before console logon."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            if ($regValue -ne "See message text below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message text below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1093"
+    Task = "Anonymous enumeration of shares must be restricted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1136"
+    Task = "Users must be forcibly disconnected when their logon hours expire."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableForcedLogoff" `
+                | Select-Object -ExpandProperty "EnableForcedLogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1141"
+    Task = "Unencrypted passwords must not be sent to third-party SMB Servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1145"
+    Task = "Automatic logons must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1151"
+    Task = "The print driver installation privilege must be restricted to administrators."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1153"
+    Task = "The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1154"
+    Task = "The Ctrl+Alt+Del security attention sequence for logons must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1162"
+    Task = "The Windows SMB server must perform SMB packet signing when possible."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1163"
+    Task = "Outgoing secure channel traffic must be encrypted when possible."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1164"
+    Task = "Outgoing secure channel traffic must be signed when possible."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1165"
+    Task = "The computer account password must not be prevented from being reset."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1166"
+    Task = "The Windows SMB client must be enabled to perform SMB packet signing when possible."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1171"
+    Task = "Ejection of removable NTFS media must be restricted to Administrators."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AllocateDASD" `
+                | Select-Object -ExpandProperty "AllocateDASD"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1172"
+    Task = "Users must be warned in advance of their passwords expiring."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -lt 14)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 14"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1173"
+    Task = "The default permissions of global system objects must be increased."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-1174"
+    Task = "The amount of idle time required before suspending a session must be properly set."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "autodisconnect" `
+                | Select-Object -ExpandProperty "autodisconnect"
+        
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-11806"
+    Task = "The system must be configured to prevent the display of the last username on the logon screen."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14228"
+    Task = "Auditing the Access of Global System Objects must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "AuditBaseObjects" `
+                | Select-Object -ExpandProperty "AuditBaseObjects"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14230"
+    Task = "Audit policy using subcategories must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14232"
+    Task = "IPSec Exemptions must be limited."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPSEC" `
+                -Name "NoDefaultExempt" `
+                | Select-Object -ExpandProperty "NoDefaultExempt"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14234"
+    Task = "User Account Control approval mode for the built-in Administrator must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14236"
+    Task = "User Account Control must automatically deny standard user requests for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14237"
+    Task = "User Account Control must be configured to detect application installations and prompt for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14239"
+    Task = "User Account Control must only elevate UIAccess applications that are installed in secure locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14240"
+    Task = "User Account Control must run all administrators in Admin Approval Mode, enabling UAC."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14241"
+    Task = "User Account Control must switch to the secure desktop when prompting for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14242"
+    Task = "User Account Control must virtualize file and registry write failures to per-user locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14243"
+    Task = "Administrator accounts must not be enumerated during elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14247"
+    Task = "Passwords must not be saved in the Remote Desktop Client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14249"
+    Task = "Local drives must be prevented from sharing with Remote Desktop Session Hosts.  (Remote Desktop Services Role)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14253"
+    Task = "Unauthenticated RPC clients must be restricted from connecting to the RPC server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14259"
+    Task = "Printing over HTTP must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14260"
+    Task = "Downloading print driver packages over HTTP must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14261"
+    Task = "Windows must be prevented from using Windows Update to search for drivers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DriverSearching" `
+                -Name "DontSearchWindowsUpdate" `
+                | Select-Object -ExpandProperty "DontSearchWindowsUpdate"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14268"
+    Task = "Zone information must be preserved when saving attachments."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14269"
+    Task = "Mechanisms for removing zone information from file attachments must be hidden."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "HideZoneInfoOnProperties" `
+                | Select-Object -ExpandProperty "HideZoneInfoOnProperties"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-14270"
+    Task = "The system must notify antivirus when file attachments are opened."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+                | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15666"
+    Task = "Windows Peer-to-Peer networking services must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15667"
+    Task = "Network Bridges must be prohibited in Windows."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15672"
+    Task = "Event Viewer Events.asp links must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\EventViewer" `
+                -Name "MicrosoftEventVwrDisableLinks" `
+                | Select-Object -ExpandProperty "MicrosoftEventVwrDisableLinks"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15674"
+    Task = "The Internet File Association service must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInternetOpenWith" `
+                | Select-Object -ExpandProperty "NoInternetOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15682"
+    Task = "Attachments must be prevented from being downloaded from RSS feeds."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15683"
+    Task = "File Explorer shell protocol must run in protected mode."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15684"
+    Task = "Users must be notified if a web-based program attempts to install software."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15685"
+    Task = "Users must be prevented from changing installation options."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15686"
+    Task = "Nonadministrators must be prevented from applying vendor-signed updates."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "DisableLUAPatching" `
+                | Select-Object -ExpandProperty "DisableLUAPatching"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15687"
+    Task = "Users must not be presented with Privacy and Installation options on first use of Windows Media Player."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "GroupPrivacyAcceptance" `
+                | Select-Object -ExpandProperty "GroupPrivacyAcceptance"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15699"
+    Task = "The Windows Connect Now wizards must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15700"
+    Task = "Remote access to the Plug and Play interface must be disabled for device installation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Settings" `
+                -Name "AllowRemoteRPC" `
+                | Select-Object -ExpandProperty "AllowRemoteRPC"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15701"
+    Task = "A system restore point must be created when a new device driver is installed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Settings" `
+                -Name "DisableSystemRestore" `
+                | Select-Object -ExpandProperty "DisableSystemRestore"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15702"
+    Task = "An Error Report must not be sent when a generic device driver is installed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Settings" `
+                -Name "DisableSendGenericDriverNotFoundToWER" `
+                | Select-Object -ExpandProperty "DisableSendGenericDriverNotFoundToWER"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15703"
+    Task = "Users must not be prompted to search Windows Update for device drivers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DriverSearching" `
+                -Name "DontPromptForWindowsUpdate" `
+                | Select-Object -ExpandProperty "DontPromptForWindowsUpdate"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15704"
+    Task = "Errors in handwriting recognition on tablet PCs must not be reported to Microsoft."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15705"
+    Task = "Users must be prompted to authenticate on resume from sleep (on battery)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15706"
+    Task = "The user must be prompted to authenticate on resume from sleep (plugged in)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15707"
+    Task = "Remote Assistance log files must be generated."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "LoggingEnabled" `
+                | Select-Object -ExpandProperty "LoggingEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15718"
+    Task = "Turning off File Explorer heap termination on corruption must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15722"
+    Task = "Windows Media Digital Rights Management (DRM) must be prevented from accessing the Internet."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WMDRM" `
+                -Name "DisableOnline" `
+                | Select-Object -ExpandProperty "DisableOnline"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15727"
+    Task = "Users must be prevented from sharing files in their profiles."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInPlaceSharing" `
+                | Select-Object -ExpandProperty "NoInPlaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15991"
+    Task = "UIAccess applications must not be allowed to prompt for elevation without using the secure desktop."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+                | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15997"
+    Task = "Users must be prevented from mapping local COM ports and redirecting data from the Remote Desktop Session Host to local COM ports.  (Remote Desktop Services Role)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15998"
+    Task = "Users must be prevented from mapping local LPT ports and redirecting data from the Remote Desktop Session Host to local LPT ports.  (Remote Desktop Services Role)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-15999"
+    Task = "Users must be prevented from redirecting Plug and Play devices to the Remote Desktop Session Host.  (Remote Desktop Services Role)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-16000"
+    Task = "The system must be configured to ensure smart card devices can be redirected to the Remote Desktop session.  (Remote Desktop Services Role)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEnableSmartCard" `
+                | Select-Object -ExpandProperty "fEnableSmartCard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-16008"
+    Task = "Windows must elevate all applications in User Account Control, not just signed ones."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ValidateAdminCodeSignatures" `
+                | Select-Object -ExpandProperty "ValidateAdminCodeSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-16020"
+    Task = "The Windows Customer Experience Improvement Program must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-16021"
+    Task = "The Windows Help Experience Improvement Program must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+                | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-16048"
+    Task = "Windows Help Ratings feedback must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoExplicitFeedback" `
+                | Select-Object -ExpandProperty "NoExplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21950"
+    Task = "The service principal name (SPN) target name validation level must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SmbServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SmbServerNameHardeningLevel"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21951"
+    Task = "Services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21952"
+    Task = "NTLM must be prevented from falling back to a Null session."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21953"
+    Task = "PKU2U authentication using online identities must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21954"
+    Task = "Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21955"
+    Task = "IPv6 source routing must be configured to the highest protection level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21956"
+    Task = "IPv6 TCP data retransmissions must be configured to prevent resources from becoming exhausted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "TcpMaxDataRetransmissions" `
+                | Select-Object -ExpandProperty "TcpMaxDataRetransmissions"
+        
+            if (($regValue -gt 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21960"
+    Task = "Domain users must be required to elevate when setting a networks location."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+                | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21961"
+    Task = "All Direct Access traffic must be routed through the internal network."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" `
+                -Name "Force_Tunneling" `
+                | Select-Object -ExpandProperty "Force_Tunneling"
+        
+            if ($regValue -ne "Enabled") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Enabled"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21963"
+    Task = "Windows Update must be prevented from searching for point and print drivers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DoNotInstallCompatibleDriverFromWindowsUpdate" `
+                | Select-Object -ExpandProperty "DoNotInstallCompatibleDriverFromWindowsUpdate"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21964"
+    Task = "Device metadata retrieval from the Internet must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21965"
+    Task = "Device driver searches using Windows Update must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DriverSearching" `
+                -Name "SearchOrderConfig" `
+                | Select-Object -ExpandProperty "SearchOrderConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21967"
+    Task = "Microsoft Support Diagnostic Tool (MSDT) interactive communication with Microsoft must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21969"
+    Task = "Access to Windows Online Troubleshooting Service (WOTS) must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "EnableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "EnableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21970"
+    Task = "Responsiveness events must be prevented from being aggregated and sent to Microsoft."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21971"
+    Task = "The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft."
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableInventory" `
+                | Select-Object -ExpandProperty "DisableInventory"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21973"
+    Task = "Autoplay must be turned off for non-volume devices."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-21980"
+    Task = "Explorer Data Execution Prevention must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-22692"
+    Task = "The default Autorun behavior must be configured to prevent Autorun commands."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-2374"
+    Task = "Autoplay must be disabled for all drives."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26283"
+    Task = "Anonymous enumeration of SAM accounts must not be allowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26359"
+    Task = "The Windows dialog box title for the legal banner must be configured."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            if ($regValue -ne "See message title options below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message title options below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26575"
+    Task = "The 6to4 IPv6 transition technology must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" `
+                -Name "6to4_State" `
+                | Select-Object -ExpandProperty "6to4_State"
+        
+            if ($regValue -ne "Disabled") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Disabled"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26576"
+    Task = "The IP-HTTPS IPv6 transition technology must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface" `
+                -Name "IPHTTPS_ClientState" `
+                | Select-Object -ExpandProperty "IPHTTPS_ClientState"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26577"
+    Task = "The ISATAP IPv6 transition technology must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" `
+                -Name "ISATAP_State" `
+                | Select-Object -ExpandProperty "ISATAP_State"
+        
+            if ($regValue -ne "Disabled") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Disabled"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26578"
+    Task = "The Teredo IPv6 transition technology must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" `
+                -Name "Teredo_State" `
+                | Select-Object -ExpandProperty "Teredo_State"
+        
+            if ($regValue -ne "Disabled") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Disabled"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26579"
+    Task = "The Application event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26580"
+    Task = "The Security event log size must be configured to 196608 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26581"
+    Task = "The Setup event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-26582"
+    Task = "The System event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-28504"
+    Task = "Windows must be prevented from sending an error report when a device driver requests additional software during installation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Settings" `
+                -Name "DisableSendRequestAdditionalSoftwareToWER" `
+                | Select-Object -ExpandProperty "DisableSendRequestAdditionalSoftwareToWER"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3343"
+    Task = "Solicited Remote Assistance must not be allowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3344"
+    Task = "Local accounts with blank passwords must be restricted to prevent access from the network."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3373"
+    Task = "The maximum age for machine account passwords must be set to requirements."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -gt 30 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3374"
+    Task = "The system must be configured to require a strong session key."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3377"
+    Task = "The system must be configured to prevent anonymous users from having the same rights as the Everyone group."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3378"
+    Task = "The system must be configured to use the Classic security model."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3379"
+    Task = "The system must be configured to prevent the storage of the LAN Manager hash of passwords."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3381"
+    Task = "The system must be configured to the required LDAP client signing level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3382"
+    Task = "The system must be configured to meet the minimum session security requirement for NTLM SSP-based clients."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3383"
+    Task = "The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3385"
+    Task = "The system must be configured to require case insensitivity for non-Windows subsystems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3449"
+    Task = "Remote Desktop Services must limit users to one remote session."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fSingleSessionPerUser " `
+                | Select-Object -ExpandProperty "fSingleSessionPerUser "
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3453"
+    Task = "Remote Desktop Services must always prompt a client for passwords upon connection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3454"
+    Task = "Remote Desktop Services must be configured with the client connection encryption set to the required level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3455"
+    Task = "Remote Desktop Services must be configured to use session-specific temporary folders."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+                | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3456"
+    Task = "Remote Desktop Services must delete temporary folders when a session is terminated."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3470"
+    Task = "The system must be configured to prevent unsolicited remote assistance offers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3479"
+    Task = "The system must be configured to use Safe DLL Search Mode."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3480"
+    Task = "Windows Media Player must be configured to prevent automatic checking for updates."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "DisableAutoupdate" `
+                | Select-Object -ExpandProperty "DisableAutoupdate"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3481"
+    Task = "Media Player must be configured to prevent automatic Codec downloads."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+                | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-34974"
+    Task = "The Windows Installer Always install with elevated privileges option must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36439"
+    Task = "Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36656"
+    Task = "A screen saver must be enabled on the system."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaveActive" `
+                | Select-Object -ExpandProperty "ScreenSaveActive"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36657"
+    Task = "The screen saver must be password protected."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop" `
+                -Name "ScreenSaverIsSecure" `
+                | Select-Object -ExpandProperty "ScreenSaverIsSecure"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-3666"
+    Task = "The system must be configured to meet the minimum session security requirement for NTLM SSP-based servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36673"
+    Task = "IP stateless autoconfiguration limits state must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableIPAutoConfigurationLimits" `
+                | Select-Object -ExpandProperty "EnableIPAutoConfigurationLimits"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36677"
+    Task = "Optional component installation and component repair must be prevented from using Windows Update."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Servicing" `
+                -Name "UseWindowsUpdate" `
+                | Select-Object -ExpandProperty "UseWindowsUpdate"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36678"
+    Task = "Device driver updates must only search managed servers, not Windows Update."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DriverSearching" `
+                -Name "DriverServerSelection" `
+                | Select-Object -ExpandProperty "DriverServerSelection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36679"
+    Task = "Early Launch Antimalware, Boot-Start Driver Initialization Policy must be enabled and configured to only Good and Unknown."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36680"
+    Task = "Access to the Windows Store must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoUseStoreOpenWith" `
+                | Select-Object -ExpandProperty "NoUseStoreOpenWith"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36681"
+    Task = "Copying of user input methods to the system account for sign-in must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+                | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36684"
+    Task = "Local users on domain-joined computers must not be enumerated."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36687"
+    Task = "App notifications on the lock screen must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+                | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36696"
+    Task = "The detection of compatibility issues for applications and drivers must be turned off."
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisablePcaUI" `
+                | Select-Object -ExpandProperty "DisablePcaUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36697"
+    Task = "Trusted app installation must be enabled to allow for signed enterprise line of business apps."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Appx" `
+                -Name "AllowAllTrustedApps" `
+                | Select-Object -ExpandProperty "AllowAllTrustedApps"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36698"
+    Task = "The use of biometrics must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36700"
+    Task = "The password reveal button must not be displayed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36709"
+    Task = "Basic authentication for RSS feeds over HTTP must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+                | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36710"
+    Task = "Automatic download of updates from the Windows Store must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "AutoDownload" `
+                | Select-Object -ExpandProperty "AutoDownload"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36711"
+    Task = "The Windows Store application must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" `
+                -Name "RemoveWindowsStore" `
+                | Select-Object -ExpandProperty "RemoveWindowsStore"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36712"
+    Task = "The Windows Remote Management (WinRM) client must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36713"
+    Task = "The Windows Remote Management (WinRM) client must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36714"
+    Task = "The Windows Remote Management (WinRM) client must not use Digest authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36718"
+    Task = "The Windows Remote Management (WinRM) service must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36719"
+    Task = "The Windows Remote Management (WinRM) service must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36720"
+    Task = "The Windows Remote Management (WinRM) service must not store RunAs credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36773"
+    Task = "The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36776"
+    Task = "Notifications from Windows Push Network Service must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-36777"
+    Task = "Toast notifications to the lock screen must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-40204"
+    Task = "Only the default client printer must be redirected to the Remote Desktop Session Host.  (Remote Desktop Services Role)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "RedirectOnlyDefaultClientPrinter" `
+                | Select-Object -ExpandProperty "RedirectOnlyDefaultClientPrinter"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4108"
+    Task = "The system must generate an audit event when the audit log reaches a percentage of full threshold."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4110"
+    Task = "The system must be configured to prevent IP source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4111"
+    Task = "The system must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF) generated routes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4112"
+    Task = "The system must be configured to disable the Internet Router Discovery Protocol (IRDP)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4113"
+    Task = "The system must be configured to limit how often keep-alive packets are sent."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if (($regValue -gt 300000)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4116"
+    Task = "The system must be configured to ignore NetBIOS name release requests except from WINS servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-43238"
+    Task = "The display of slide shows on the lock screen must be disabled (Windows 2012 R2)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-43239"
+    Task = "Windows 2012 R2 must include command line data in process creation events."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-43240"
+    Task = "The network selection user interface (UI) must not be displayed on the logon screen (Windows 2012 R2)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-43241"
+    Task = "The setting to allow Microsoft accounts to be optional for modern style apps must be enabled (Windows 2012 R2)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-43245"
+    Task = "Automatically signing in the last interactive user after a system-initiated restart must be disabled (Windows 2012 R2)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4438"
+    Task = "The system must limit how many times unacknowledged TCP data is retransmitted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "TcpMaxDataRetransmissions" `
+                | Select-Object -ExpandProperty "TcpMaxDataRetransmissions"
+        
+            if (($regValue -gt 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4447"
+    Task = "The Remote Desktop Session Host must require secure RPC communications."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-4448"
+    Task = "Group Policy objects must be reprocessed even if they have not changed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-57639"
+    Task = "Users must be required to enter a password to access private keys stored on the computer."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+                | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-6831"
+    Task = "Outgoing secure channel traffic must be encrypted or signed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-6832"
+    Task = "The Windows SMB client must be configured to always perform SMB packet signing."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-6833"
+    Task = "The Windows SMB server must be configured to always perform SMB packet signing."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-6834"
+    Task = "Anonymous access to Named Pipes and Shares must be restricted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-72753"
+    Task = "WDigest Authentication must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73519"
+    Task = "The Server Message Block (SMB) v1 protocol must be disabled on the SMB server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73523"
+    Task = "The Server Message Block (SMB) v1 protocol must be disabled on the SMB client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-80475"
+    Task = "PowerShell script block logging must be enabled on Windows 2012/2012 R2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..422bbfd
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AccountPolicies.ps1	
@@ -0,0 +1,283 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 15) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "(L1) Ensure 'Allow Administrator account lockout' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["AllowAdministratorLockout"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'AllowAdministratorLockout' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 15) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..da2f9f0
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#AuditPolicies.ps1	
@@ -0,0 +1,2036 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.2"
+    Task = "(L1) Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Authentication Service
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Authentication Service"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Authentication Service'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.3"
+    Task = "(L1) Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Service Ticket Operations
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Service Ticket Operations"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Service Ticket Operations'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Distribution Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Distribution Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Distribution Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.4"
+    Task = "(L1) Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.5"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.6"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.1"
+    Task = "(L1) Ensure 'Audit Directory Service Access' is set to include 'Failure' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.2"
+    Task = "(L1) Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..1c8d782
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#RegistrySettings.ps1	
@@ -0,0 +1,12380 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$avstatus = CheckForActiveAV
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+                | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.1"
+    Task = "(L1) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.1"
+    Task = "(L1) Ensure 'Domain controller: Allow server operators to schedule tasks' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SubmitControl" `
+                | Select-Object -ExpandProperty "SubmitControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.2"
+    Task = "(L1) Ensure 'Domain controller: Allow vulnerable Netlogon secure channel connections' is set to 'Not Configured' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "vulnerablechannelallowlist" `
+                | Select-Object -ExpandProperty "vulnerablechannelallowlist"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.3"
+    Task = "(L1) Ensure 'Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LdapEnforceChannelBinding" `
+                | Select-Object -ExpandProperty "LdapEnforceChannelBinding"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.4"
+    Task = "(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.5"
+    Task = "(L1) Ensure 'Domain controller: Refuse machine account password changes' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+                | Select-Object -ExpandProperty "RefusePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if ($regValue -le 0 -or $regValue -gt 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not display last user name' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.3"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -gt 900 -or $regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.4"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.6"
+    Task = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+                | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if ($regValue -gt 14 -or $regValue -lt 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ForceUnlockLogon" `
+                | Select-Object -ExpandProperty "ForceUnlockLogon"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.9"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 1 - 'Lock Workstation' or 2 / 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+                | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if ($regValue -gt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+                | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.4"
+    Task = "(L2) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+                | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.6"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            $reference = @(
+                "LSARPC"
+                "NETLOGON"
+                "SAMR"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: LSARPC NETLOGON SAMR"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.7"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.8"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+$CARoleStatus = (Get-WindowsFeature -Name ADCS-Cert-Authority).Installed
+$WINSStatus = (Get-WindowsFeature -Name WINS).Installed
+[AuditTest] @{
+    Id = "2.3.10.9 A"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths and sub-paths' [WINS Role Feature and CA Role Service NOT installed]"
+    Test = {
+        try {
+            if (($CARoleStatus -or $WINSStatus) -eq $true){
+                return @{
+                    Message = "WINS Role Feature or CA Role Service are installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 B"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [CA Role Service installed]"
+    Test = {
+        try {
+            if ($CARoleStatus -eq $false){
+                return @{
+                    Message = "CA Role Service NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\CertSvc"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\CertSvc"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 C"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [WINS Role Feature installed]"
+    Test = {
+        try {
+            if ($WINSStatus -eq $false){
+                return @{
+                    Message = "WINS Role Feature NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\WINS"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\WINS"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+                | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+                | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.13"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+                | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 1 - 'Negotiate signing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.11"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit Incoming NTLM Traffic' is set to 'Enable auditing for all accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AuditReceivingNTLMTraffic" `
+                | Select-Object -ExpandProperty "AuditReceivingNTLMTraffic"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.12"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit NTLM authentication in this domain' is set to 'Enable all' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "AuditNTLMInDomain" `
+                | Select-Object -ExpandProperty "AuditNTLMInDomain"
+        
+            if ($regValue -ne 7) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 7"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.13"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 1 - 'Audit all' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictSendingNTLMTraffic" `
+                | Select-Object -ExpandProperty "RestrictSendingNTLMTraffic"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.13.1"
+    Task = "(L1) Ensure 'Shutdown: Allow system to be shut down without having to log on' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ShutdownWithoutLogon" `
+                | Select-Object -ExpandProperty "ShutdownWithoutLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 2 - 'Prompt for consent on the secure desktop' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.1"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.2"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.3"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.4"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.5"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.6"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.7"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+                | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+                | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PwdExpirationProtectionEnabled" `
+                | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.3"
+    Task = "(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+                | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordComplexity" `
+                | Select-Object -ExpandProperty "PasswordComplexity"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordLength" `
+                | Select-Object -ExpandProperty "PasswordLength"
+        
+            if ($regValue -lt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.3.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft Services\AdmPwd" `
+                -Name "PasswordAgeDays" `
+                | Select-Object -ExpandProperty "PasswordAgeDays"
+        
+            if ($regValue -gt 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.2"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+                | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.4"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.5"
+    Task = "(L1) Ensure 'Enable Certificate Padding' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" `
+                -Name "EnableCertPaddingCheck" `
+                | Select-Object -ExpandProperty "EnableCertPaddingCheck"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.6"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.7"
+    Task = "(L1) Ensure 'LSA Protection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+                | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.8"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.9"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.5"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.6"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+                | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.7"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.8"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+                | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.10"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.12"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if ($regValue -gt 90) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' (or 0 - Disable NetBIOS name resolution)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+                | Select-Object -ExpandProperty "EnableNetBIOS"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.2"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+                | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.8.1"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+                | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+                | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+                | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+                | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.4"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+                | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+                | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+                | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+                | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+                | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+                | Select-Object -ExpandProperty "DisableWPDRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 1 = Minimize simultaneous connections'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+                | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.2"
+    Task = "(L2) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+                | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+                | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+                | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+                | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+                | Select-Object -ExpandProperty "RpcAuthentication"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+                | Select-Object -ExpandProperty "RpcProtocols"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: 0 - Negotiate' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+                | Select-Object -ExpandProperty "ForceKerberosForRpc"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+                | Select-Object -ExpandProperty "RpcTcpPort"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.8"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+                | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.9"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+                | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.10"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+                | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.11"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+                | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.1"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.2"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 1 - 'Secure Boot' or 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.3"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.4"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.5"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock' (MS Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.6"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.7"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.4"
+    Task = "(L1) Ensure 'Configure security policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.5"
+    Task = "(L1) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.6"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+                | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.7"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+                | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.1"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.2"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+                | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+                | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.5"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.6"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+                | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+                | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+                | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+                | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+                | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+                | Select-Object -ExpandProperty "DoReport"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+                | Select-Object -ExpandProperty "DevicePKInitBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+                | Select-Object -ExpandProperty "DevicePKInitEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+                | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+                | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.3"
+    Task = "(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+                | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.4"
+    Task = "(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.5"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+                | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.6"
+    Task = "(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+                | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.7"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+                | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.1"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.2"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.3"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.4"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+                | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.2"
+    Task = "(L2) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.49.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+                | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.1"
+    Task = "(L1) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.2"
+    Task = "(L1) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.3.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+                | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.8.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.10.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+                | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+                | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+        return @{
+            Message = "Compliant"
+            Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+                | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.2"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.13.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+                | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+                | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+                | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+                | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+                | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+                | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+                | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+                | Select-Object -ExpandProperty "LimitDumpCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.8"
+    Task = "(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+                | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.3"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.4"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.36.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.40.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+                | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.41.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+                | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+                | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 C"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.7.1"
+    Task = "(L1) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "EnableFileHashComputation" `
+                | Select-Object -ExpandProperty "EnableFileHashComputation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.1"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.2"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.3"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.4"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+                | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+                | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.1"
+    Task = "(L1) Ensure 'Scan packed executables' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisablePackedExeScanning" `
+                | Select-Object -ExpandProperty "DisablePackedExeScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.2"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.3"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.17"
+    Task = "(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.50.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.55.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+                | Select-Object -ExpandProperty "DisablePushToInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.2.1"
+    Task = "(L2) Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fSingleSessionPerUser" `
+                | Select-Object -ExpandProperty "fSingleSessionPerUser"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.1"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.2"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.3"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.4"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+                | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+                | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+                | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if ($regValue -gt 900000 -or $regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+                | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.11.2"
+    Task = "(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+                | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+                | Select-Object -ExpandProperty "AllowCloudSearch"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.3"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.4"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+                | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.62.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+                | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.1"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.1"
+    Task = "(L2) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.2"
+    Task = "(L2) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+                | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+                | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.91.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+                | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+                | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+                | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+                | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+        
+            if ($regValue -lt 180 -or $regValue -gt 365) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+                | Select-Object -ExpandProperty "DeferQualityUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+                | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+                | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.1"
+    Task = "(L1) Ensure 'Configure Windows spotlight on lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+                | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.2"
+    Task = "(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+                | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.3"
+    Task = "(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+                | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.4"
+    Task = "(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.5"
+    Task = "(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSpotlightCollectionOnDesktop" `
+                | Select-Object -ExpandProperty "DisableSpotlightCollectionOnDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.26.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+                | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.42.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.44.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+                | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..59b8d27
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#SecurityOptions.ps1	
@@ -0,0 +1,133 @@
+[AuditTest] @{
+    Id = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.5"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#UserRights.ps1
new file mode 100644
index 0000000..94e1a2f
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-CIS-3.0.0#UserRights.ps1	
@@ -0,0 +1,1984 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "(L1) Ensure 'Add workstations to domain' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeMachineAccountPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeMachineAccountPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeMachineAccountPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators' (MS only)"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.14"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators [Hyper-V-Feature NOT installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' [Hyper-V-Feature installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-83-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            if ($null -eq (Get-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V)) {
+                return @{
+                    Status = "None"
+                    Message = "Hyper-V not installed."
+                }
+            }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.20"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.21"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.22"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-114"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.23"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.24"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.25"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.26"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.27"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.28"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.29"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.30"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ($null -eq (Get-Module -Name ADFS)) {
+[AuditTest] @{
+    Id = "2.2.31 A"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE NOT installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.31 B"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'  [ADFS-ROLE installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-80-1321940109-3370001082-3650459431-215109509-2472514016"
+            "S-1-5-80-2246541699-21809830-3603976364-117610243-975697593"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.32"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ((Get-WindowsFeature -Name web-server).installed -ne $true) {
+[AuditTest] @{
+    Id = "2.2.33 A"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.33 B"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' [IIS Role installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-32-568"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.34"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.35"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.36"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.37"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.38"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' and (when Exchange is running in the environment) 'Exchange Servers' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.39"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.40"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.41"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.42"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.43"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.44"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.45"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.46"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.47"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.48"
+    Task = "(L1) Ensure 'Synchronize directory service data' is set to 'No One' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSyncAgentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSyncAgentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSyncAgentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.49"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-1.12#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-1.12#UserRights.ps1
new file mode 100644
index 0000000..2af5d78
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-1.12#UserRights.ps1	
@@ -0,0 +1,71 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AccountPolicies.ps1
new file mode 100644
index 0000000..a500d49
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AccountPolicies.ps1	
@@ -0,0 +1,252 @@
+[AuditTest] @{
+    Id = "V-73309"
+    Task = "Windows 2016 account lockout duration must be configured to 15 minutes or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15) -and ($setPolicy -ne 0)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 or x == 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73311"
+    Task = "Windows Server 2016 must have the number of allowed bad logon attempts configured to three or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 3 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x >= 3 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73313"
+    Task = "Windows Server 2016 must have the period of time before the bad logon counter is reset configured to 15 minutes or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73315"
+    Task = "Windows Server 2016 password history must be configured to 24 passwords remembered."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73317"
+    Task = "Windows Server 2016 maximum password age must be configured to 60 days or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 60 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 60 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73319"
+    Task = "Windows Server 2016 minimum password age must be configured to at least one day."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -eq 0)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73321"
+    Task = "Windows Server 2016 minimum password length must be configured to 14 characters."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73323"
+    Task = "Windows Server 2016 must have the built-in Windows password complexity policy enabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73325"
+    Task = "Windows Server 2016 reversible password encryption must be disabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AuditPolicies.ps1
new file mode 100644
index 0000000..52d25bf
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#AuditPolicies.ps1	
@@ -0,0 +1,1502 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "V-73413 + V-73415"
+    Task = "Windows Server 2016 must be configured to audit Account Logon - Credential Validation successes. Windows Server 2016 must be configured to audit Account Logon - Credential Validation failures."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73417"
+    Task = "Windows Server 2016 must be configured to audit Account Management - Computer Account Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73419"
+    Task = "Windows Server 2016 must be configured to audit Account Management - Other Account Management Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73423"
+    Task = "Windows Server 2016 must be configured to audit Account Management - Security Group Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73427 + V-73429"
+    Task = "Windows Server 2016 must be configured to audit Account Management - User Account Management successes. Windows Server 2016 must be configured to audit Account Management - User Account Management failures."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73431"
+    Task = "Windows Server 2016 must be configured to audit Detailed Tracking - Plug and Play Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73433"
+    Task = "Windows Server 2016 must be configured to audit Detailed Tracking - Process Creation successes."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73435 + V-73437"
+    Task = "Windows Server 2016 must be configured to audit DS Access - Directory Service Access successes. Windows Server 2016 must be configured to audit DS Access - Directory Service Access failures."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73439 + V-73441"
+    Task = "Windows Server 2016 must be configured to audit DS Access - Directory Service Changes successes. Windows Server 2016 must be configured to audit DS Access - Directory Service Changes failures."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73443 + V-73445"
+    Task = "Windows Server 2016 must be configured to audit Logon/Logoff - Account Lockout successes. Windows Server 2016 must be configured to audit Logon/Logoff - Account Lockout failures."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73447"
+    Task = "Windows Server 2016 must be configured to audit Logon/Logoff - Group Membership successes."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73449"
+    Task = "Windows Server 2016 must be configured to audit Logon/Logoff - Logoff successes."
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73451 + V-73453"
+    Task = "Windows Server 2016 must be configured to audit Logon/Logoff - Logon successes. Windows Server 2016 must be configured to audit Logon/Logoff - Logon failures."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73455"
+    Task = "Windows Server 2016 must be configured to audit Logon/Logoff - Special Logon successes."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73457 + V-73459"
+    Task = "Windows Server 2016 must be configured to audit Object Access - Removable Storage successes. Windows Server 2016 must be configured to audit Object Access - Removable Storage failures."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73461 + V-73463"
+    Task = "Windows Server 2016 must be configured to audit Policy Change - Audit Policy Change successes. Windows Server 2016 must be configured to audit Policy Change - Audit Policy Change failures."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73465"
+    Task = "Windows Server 2016 must be configured to audit Policy Change - Authentication Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73467"
+    Task = "Windows Server 2016 must be configured to audit Policy Change - Authorization Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73469 + V-73471"
+    Task = "Windows Server 2016 must be configured to audit Privilege Use - Sensitive Privilege Use successes. Windows Server 2016 must be configured to audit Privilege Use - Sensitive Privilege Use failures."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73473 + V-73475"
+    Task = "Windows Server 2016 must be configured to audit System - IPsec Driver successes. Windows Server 2016 must be configured to audit System - IPsec Driver failures."
+    Test = {
+        # Get the audit policy for the subcategory IPsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "IPsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'IPsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73477 + V-73479"
+    Task = "Windows Server 2016 must be configured to audit System - Other System Events successes. Windows Server 2016 must be configured to audit System - Other System Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73481"
+    Task = "Windows Server 2016 must be configured to audit System - Security State Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73483"
+    Task = "Windows Server 2016 must be configured to audit System - Security System Extension successes."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73489 + V-73491"
+    Task = "Windows Server 2016 must be configured to audit System - System Integrity successes. Windows Server 2016 must be configured to audit System - System Integrity failures."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-90359 + V-90361"
+    Task = "Windows 2016 must be configured to audit Object Access - Other Object Access Events successes. Windows 2016 must be configured to audit Object Access - Other Object Access Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#RegistrySettings.ps1
new file mode 100644
index 0000000..db36dd7
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#RegistrySettings.ps1	
@@ -0,0 +1,3437 @@
+[AuditTest] @{
+    Id = "V-73487"
+    Task = "Administrator accounts must not be enumerated during elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73493"
+    Task = "The display of slide shows on the lock screen must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73495"
+    Task = "Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73497"
+    Task = "WDigest Authentication must be disabled on Windows Server 2016."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73499"
+    Task = "Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73501"
+    Task = "Source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73503"
+    Task = "Windows Server 2016 must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF)-generated routes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73505"
+    Task = "Windows Server 2016 must be configured to ignore NetBIOS name release requests except from WINS servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73507"
+    Task = "Insecure logons to an SMB server must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73511"
+    Task = "Command line data must be included in process creation events."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73521"
+    Task = "Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3) -and ($regValue -ne 8)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 3 or x == 8"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73525"
+    Task = "Group Policy objects must be reprocessed even if they have not changed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73527"
+    Task = "Downloading print driver packages over HTTP must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73529"
+    Task = "Printing over HTTP must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73531"
+    Task = "The network selection user interface (UI) must not be displayed on the logon screen."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73533"
+    Task = "Local users on domain-joined computers must not be enumerated."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73537"
+    Task = "Users must be prompted to authenticate when the system wakes from sleep (on battery)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73539"
+    Task = "Users must be prompted to authenticate when the system wakes from sleep (plugged in)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73541"
+    Task = "Unauthenticated Remote Procedure Call (RPC) clients must be restricted from connecting to the RPC server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73543"
+    Task = "The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft."
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableInventory" `
+                | Select-Object -ExpandProperty "DisableInventory"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73545"
+    Task = "AutoPlay must be turned off for non-volume devices."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73547"
+    Task = "The default AutoRun behavior must be configured to prevent AutoRun commands."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73549"
+    Task = "AutoPlay must be disabled for all drives."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73553"
+    Task = "The Application event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73555"
+    Task = "The Security event log size must be configured to 196608 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73557"
+    Task = "The System event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73559"
+    Task = "Windows Server 2016 Windows SmartScreen must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73561"
+    Task = "Explorer Data Execution Prevention must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73563"
+    Task = "Turning off File Explorer heap termination on corruption must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73565"
+    Task = "File Explorer shell protocol must run in protected mode."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73567"
+    Task = "Passwords must not be saved in the Remote Desktop Client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73569"
+    Task = "Local drives must be prevented from sharing with Remote Desktop Session Hosts."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73571"
+    Task = "Remote Desktop Services must always prompt a client for passwords upon connection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73573"
+    Task = "The Remote Desktop Session Host must require secure Remote Procedure Call (RPC) communications."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73575"
+    Task = "Remote Desktop Services must be configured with the client connection encryption set to High Level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73577"
+    Task = "Attachments must be prevented from being downloaded from RSS feeds."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73579"
+    Task = "Basic authentication for RSS feeds over HTTP must not be used."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+                | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73581"
+    Task = "Indexing of encrypted files must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73583"
+    Task = "Users must be prevented from changing installation options."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73585"
+    Task = "The Windows Installer Always install with elevated privileges option must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73587"
+    Task = "Users must be notified if a web-based program attempts to install software."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73589"
+    Task = "Automatically signing in the last interactive user after a system-initiated restart must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73591"
+    Task = "PowerShell script block logging must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\ Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73593"
+    Task = "The Windows Remote Management (WinRM) client must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73595"
+    Task = "The Windows Remote Management (WinRM) client must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73597"
+    Task = "The Windows Remote Management (WinRM) client must not use Digest authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73599"
+    Task = "The Windows Remote Management (WinRM) service must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73601"
+    Task = "The Windows Remote Management (WinRM) service must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73603"
+    Task = "The Windows Remote Management (WinRM) service must not store RunAs credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73621"
+    Task = "Local accounts with blank passwords must be restricted to prevent access from the network."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73627"
+    Task = "Audit policy using subcategories must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73629"
+    Task = "Domain controllers must require LDAP access signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73631"
+    Task = "Domain controllers must be configured to allow reset of machine account passwords."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+                | Select-Object -ExpandProperty "RefusePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73633"
+    Task = "The setting Domain member: Digitally encrypt or sign secure channel data (always) must be configured to Enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73635"
+    Task = "The setting Domain member: Digitally encrypt secure channel data (when possible) must be configured to enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73637"
+    Task = "The setting Domain member: Digitally sign secure channel data (when possible) must be configured to Enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73639"
+    Task = "The computer account password must not be prevented from being reset."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73641"
+    Task = "The maximum age for machine account passwords must be configured to 30 days or less."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -gt 30 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73643"
+    Task = "Windows Server 2016 must be configured to require a strong session key."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73645"
+    Task = "The machine inactivity limit must be set to 15 minutes, locking the system with the screen saver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73647"
+    Task = "The required legal notice must be configured to display before console logon."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            if ($regValue -ne "See message text below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message text below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73649"
+    Task = "The Windows dialog box title for the legal banner must be configured with the appropriate text."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            if ($regValue -ne "See message title options below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message title options below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73653"
+    Task = "The setting Microsoft network client: Digitally sign communications (always) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73655"
+    Task = "The setting Microsoft network client: Digitally sign communications (if server agrees) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73657"
+    Task = "Unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73661"
+    Task = "The setting Microsoft network server: Digitally sign communications (always) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73663"
+    Task = "The setting Microsoft network server: Digitally sign communications (if client agrees) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73667"
+    Task = "Anonymous enumeration of Security Account Manager (SAM) accounts must not be allowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73669"
+    Task = "Anonymous enumeration of shares must not be allowed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73673"
+    Task = "Windows Server 2016 must be configured to prevent anonymous users from having the same permissions as the Everyone group."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73675"
+    Task = "Anonymous access to Named Pipes and Shares must be restricted."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73677"
+    Task = "Remote calls to the Security Account Manager (SAM) must be restricted to Administrators."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73679"
+    Task = "Services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity instead of authenticating anonymously."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73681"
+    Task = "NTLM must be prevented from falling back to a Null session."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73683"
+    Task = "PKU2U authentication using online identities must be prevented."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73685"
+    Task = "Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73687"
+    Task = "Windows Server 2016 must be configured to prevent the storage of the LAN Manager hash of passwords."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73691"
+    Task = "The LAN Manager authentication level must be set to send NTLMv2 response only and to refuse LM and NTLM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73693"
+    Task = "Windows Server 2016 must be configured to at least negotiate signing for LDAP client signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73695"
+    Task = "Session security for NTLM SSP-based clients must be configured to require NTLMv2 session security and 128-bit encryption."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73697"
+    Task = "Session security for NTLM SSP-based servers must be configured to require NTLMv2 session security and 128-bit encryption."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73699"
+    Task = "Users must be required to enter a password to access private keys stored on the computer."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+                | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73701"
+    Task = "Windows Server 2016 must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73705"
+    Task = "The default permissions of global system objects must be strengthened."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73707"
+    Task = "User Account Control approval mode for the built-in Administrator must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73709"
+    Task = "UIAccess applications must not be allowed to prompt for elevation without using the secure desktop."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+                | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73713"
+    Task = "User Account Control must automatically deny standard user requests for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73715"
+    Task = "User Account Control must be configured to detect application installations and prompt for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73717"
+    Task = "User Account Control must only elevate UIAccess applications that are installed in secure locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73719"
+    Task = "User Account Control must run all administrators in Admin Approval Mode, enabling UAC."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73721"
+    Task = "User Account Control must virtualize file and registry write failures to per-user locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73727"
+    Task = "Zone information must be preserved when saving attachments."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-78123"
+    Task = "The Server Message Block (SMB) v1 protocol must be disabled on the SMB server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-78125"
+    Task = "The Server Message Block (SMB) v1 protocol must be disabled on the SMB client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#SecurityOptions.ps1
new file mode 100644
index 0000000..0fb03a1
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-DISA-V1R12#SecurityOptions.ps1	
@@ -0,0 +1,104 @@
+[AuditTest] @{
+    Id = "V-73623"
+    Task = "Windows Server 2016 built-in administrator account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73625"
+    Task = "Windows Server 2016 built-in guest account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73665"
+    Task = "Anonymous SID/Name translation must not be allowed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-73809"
+    Task = "Windows Server 2016 built-in guest account must be disabled."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AccountPolicies.ps1
new file mode 100644
index 0000000..dab2b4d
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AccountPolicies.ps1	
@@ -0,0 +1,252 @@
+[AuditTest] @{
+    Id = "AccountPolicy-001"
+    Task = "Ensure 'MinimumPasswordAge' is set to '1'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-002"
+    Task = "Ensure 'MaximumPasswordAge' is set to '60'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 60) {
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: 60"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-003"
+    Task = "Ensure 'MinimumPasswordLength' is set to '14'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 14) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-004"
+    Task = "Ensure 'PasswordComplexity' is set to '1'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-005"
+    Task = "Ensure 'PasswordHistorySize' is set to '24'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-006"
+    Task = "Ensure 'LockoutBadCount' is set to '10'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 10) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: 10"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-007"
+    Task = "Ensure 'ResetLockoutCount' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 15) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-008"
+    Task = "Ensure 'LockoutDuration' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 15) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-009"
+    Task = "Ensure 'ClearTextPassword' is set to '0'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AuditPolicies.ps1
new file mode 100644
index 0000000..6ef132e
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#AuditPolicies.ps1	
@@ -0,0 +1,1274 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "AuditPolicy-001"
+    Task = "Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-002"
+    Task = "Ensure 'Other Account Management Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-003"
+    Task = "Ensure 'Security Group Management' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-004"
+    Task = "Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-005"
+    Task = "Ensure 'PNP Activity' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-006"
+    Task = "Ensure 'Process Creation' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-007"
+    Task = "Ensure 'Account Lockout' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-008"
+    Task = "Ensure 'Group Membership' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-009"
+    Task = "Ensure 'Logoff' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-010"
+    Task = "Ensure 'Logon' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-011"
+    Task = "Ensure 'Special Logon' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-012"
+    Task = "Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-013"
+    Task = "Ensure 'Audit Policy Change' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-014"
+    Task = "Ensure 'Authentication Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-015"
+    Task = "Ensure 'Authorization Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-016"
+    Task = "Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-017"
+    Task = "Ensure 'IPsec Driver' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory IPsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "IPsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'IPsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-018"
+    Task = "Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-019"
+    Task = "Ensure 'Security State Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-020"
+    Task = "Ensure 'Security System Extension' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-021"
+    Task = "Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#RegistrySettings.ps1
new file mode 100644
index 0000000..b3ef92d
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#RegistrySettings.ps1	
@@ -0,0 +1,3658 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "Registry-001"
+    Task = "Ensure 'Turn off Autoplay' is set to 'All drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-002"
+    Task = "Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-003"
+    Task = "Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-004"
+    Task = "Set registry value 'LocalAccountTokenFilterPolicy' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-005"
+    Task = "Set registry value 'EnhancedAntiSpoofing' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-006"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-007"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '196608'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-008"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-009"
+    Task = "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-010"
+    Task = "Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-011"
+    Task = "Ensure 'Turn off heap termination on corruption' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-012"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-013"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-014"
+    Task = "Set registry value 'AlwaysInstallElevated' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-015"
+    Task = "Ensure 'Allow user control over installs' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-016"
+    Task = "Ensure 'Enable insecure guest logons' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-017"
+    Task = "Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if ($regValue -notmatch "^(?:RequireMutualAuthentication=1,\s*RequireIntegrity=1|RequireIntegrity=1,\s*RequireMutualAuthentication=1)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: RequireMutualAuthentication=1, RequireIntegrity=1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-018"
+    Task = "Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if ($regValue -notmatch "^(?:RequireMutualAuthentication=1,\s*RequireIntegrity=1|RequireIntegrity=1,\s*RequireMutualAuthentication=1)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: RequireMutualAuthentication=1, RequireIntegrity=1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-019"
+    Task = "Set registry value 'NoLockScreenCamera' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-020"
+    Task = "Set registry value 'NoLockScreenSlideshow' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-021"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-022"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is not set."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockInvocationLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockInvocationLogging"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-023"
+    Task = "Ensure 'Do not display network selection UI' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-024"
+    Task = "Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-025"
+    Task = "Ensure 'Configure Windows SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-026"
+    Task = "Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-027"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-028"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-029"
+    Task = "Ensure 'Disallow Digest authentication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-030"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-031"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-032"
+    Task = "Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-033"
+    Task = "Set registry value 'MitigationOptions_FontBocking' to 1000000000000."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\MitigationOptions" `
+                -Name "MitigationOptions_FontBocking" `
+                | Select-Object -ExpandProperty "MitigationOptions_FontBocking"
+        
+            if ($regValue -ne "1000000000000") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1000000000000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-034"
+    Task = "Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-035"
+    Task = "Set registry value 'DisablePasswordSaving' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-036"
+    Task = "Set registry value 'fDisableCdm' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-037"
+    Task = "Set registry value 'fPromptForPassword' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-038"
+    Task = "Set registry value 'fEncryptRPCTraffic' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-039"
+    Task = "Set registry value 'MinEncryptionLevel' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-041"
+    Task = "Domain: Set registry value 'DefaultOutboundAction' to 0."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-042"
+    Task = "Domain: Set registry value 'DefaultInboundAction' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-043"
+    Task = "Domain: Set registry value 'EnableFirewall' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType        
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-044"
+    Task = "Private: Set registry value 'EnableFirewall' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-045"
+    Task = "Private: Set registry value 'DefaultInboundAction' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-046"
+    Task = "Private: Set registry value 'DefaultOutboundAction' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-047"
+    Task = "Public: Set registry value 'EnableFirewall' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-048"
+    Task = "Public: Set registry value 'DefaultOutboundAction' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-049"
+    Task = "Public: Set registry value 'DefaultInboundAction' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-050"
+    Task = "Set registry value 'AdmPwdEnabled' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+                | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-051"
+    Task = "Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-052"
+    Task = "Set registry value 'DriverLoadPolicy' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-053"
+    Task = "Set registry value 'NoNameReleaseOnDemand' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-054"
+    Task = "Set registry value 'EnableICMPRedirect' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-055"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-056"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-057"
+    Task = "Set registry value 'allownullsessionfallback' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-058"
+    Task = "Set registry value 'UseMachineId' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-059"
+    Task = "Set registry value 'InactivityTimeoutSecs' to 900."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -ne 900) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 900"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-060"
+    Task = "Set registry value 'ScRemoveOption' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-061"
+    Task = "Set registry value 'autodisconnect' to 15."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "autodisconnect" `
+                | Select-Object -ExpandProperty "autodisconnect"
+        
+            if ($regValue -ne 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-062"
+    Task = "Set registry value 'SCENoApplyLegacyAuditPolicy' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-063"
+    Task = "Set registry value 'EnableVirtualization' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-064"
+    Task = "Set registry value 'FilterAdministratorToken' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-065"
+    Task = "Set registry value 'EnableLUA' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-066"
+    Task = "Set registry value 'EnableInstallerDetection' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-067"
+    Task = "Set registry value 'EnableUIADesktopToggle' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+                | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-068"
+    Task = "Set registry value 'ConsentPromptBehaviorAdmin' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-069"
+    Task = "Set registry value 'ConsentPromptBehaviorUser' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-070"
+    Task = "Set registry value 'EnableSecureUIAPaths' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-071"
+    Task = "Set registry value 'LDAPClientIntegrity' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-072"
+    Task = "Set registry value 'LmCompatibilityLevel' to 5."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-073"
+    Task = "Set registry value 'EveryoneIncludesAnonymous' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-074"
+    Task = "Set registry value 'enablesecuritysignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-075"
+    Task = "Set registry value 'NTLMMinClientSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-076"
+    Task = "Set registry value 'sealsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "sealsecurechannel" `
+                | Select-Object -ExpandProperty "sealsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-077"
+    Task = "Set registry value 'EnableSecuritySignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-078"
+    Task = "Set registry value 'NTLMMinServerSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-079"
+    Task = "Set registry value 'requiresignorseal' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requiresignorseal" `
+                | Select-Object -ExpandProperty "requiresignorseal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-080"
+    Task = "Set registry value 'signsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "signsecurechannel" `
+                | Select-Object -ExpandProperty "signsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-081"
+    Task = "Set registry value 'RequireSecuritySignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-082"
+    Task = "Set registry value 'requiresecuritysignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-083"
+    Task = "Set registry value 'requirestrongkey' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requirestrongkey" `
+                | Select-Object -ExpandProperty "requirestrongkey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-084"
+    Task = "Set registry value 'RestrictAnonymousSAM' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-085"
+    Task = "Set registry value 'RestrictNullSessAccess' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-086"
+    Task = "Set registry value 'ObCaseInsensitive' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-087"
+    Task = "Set registry value 'RestrictAnonymous' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-088"
+    Task = "Set registry value 'ProtectionMode' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-089"
+    Task = "Set registry value 'LimitBlankPasswordUse' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-090"
+    Task = "Set registry value 'maximumpasswordage' to 30."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "maximumpasswordage" `
+                | Select-Object -ExpandProperty "maximumpasswordage"
+        
+            if ($regValue -ne 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-091"
+    Task = "Set registry value 'disablepasswordchange' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "disablepasswordchange" `
+                | Select-Object -ExpandProperty "disablepasswordchange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-092"
+    Task = "Set registry value 'NoLMHash' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-093"
+    Task = "Set registry value 'EnablePlainTextPassword' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-094"
+    Task = "Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-095"
+    Task = "Ensure 'Turn off Windows Defender' is set to 'Disabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-096"
+    Task = "Ensure 'Turn on behavior monitoring' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-097"
+    Task = "Ensure 'Scan removable drives' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-098"
+    Task = "Ensure 'Turn on e-mail scanning' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-099"
+    Task = "Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+                | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-100"
+    Task = "Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+                | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-101"
+    Task = "Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-102"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-103"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot and DMA Protection'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-104"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-105"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#UserRights.ps1
new file mode 100644
index 0000000..21afa41
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2016-Microsoft-FINAL#UserRights.ps1	
@@ -0,0 +1,1031 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "UserRight-001"
+    Task = "Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-002"
+    Task = "Ensure 'SeCreateTokenPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-003"
+    Task = "Ensure 'SeTrustedCredManAccessPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-004"
+    Task = "Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-005"
+    Task = "Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-006"
+    Task = "Ensure 'SeDenyInteractiveLogonRight' is set to 'S-1-5-32-546'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-007"
+    Task = "Ensure 'SeIncreaseBasePriorityPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-008"
+    Task = "Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-009"
+    Task = "Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-010"
+    Task = "Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-20"
+            "S-1-5-19"
+            "S-1-5-6"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-011"
+    Task = "Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-012"
+    Task = "Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-013"
+    Task = "Ensure 'SeEnableDelegationPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-014"
+    Task = "Ensure 'SeCreatePermanentPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-015"
+    Task = "Ensure 'SeDebugPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-016"
+    Task = "Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-017"
+    Task = "Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-018"
+    Task = "Ensure 'SeNetworkLogonRight' is set to 'S-1-5-11, S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-019"
+    Task = "Ensure 'SeCreateSymbolicLinkPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-020"
+    Task = "Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-114, S-1-5-32-546'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-114"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-021"
+    Task = "Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-20"
+            "S-1-5-19"
+            "S-1-5-6"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-022"
+    Task = "Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-023"
+    Task = "Ensure 'SeLockMemoryPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-024"
+    Task = "Ensure 'SeTcbPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-025"
+    Task = "Ensure 'SeAuditPrivilege' is set to 'S-1-5-20, S-1-5-19'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-20"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-026"
+    Task = "Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-027"
+    Task = "Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-32-546, S-1-5-113'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..d00b68c
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AccountPolicies.ps1	
@@ -0,0 +1,283 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 days and x > 0 days"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 1) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1 days"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 14) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -lt 15 -or $setPolicy -gt 99999) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 minutes and x <= 99999 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -gt 5 -or $setPolicy -le 0) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "(L1) Ensure 'Allow Administrator account lockout' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["AllowAdministratorLockout"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'AllowAdministratorLockout' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -gt 99999 -or $setPolicy -lt 15) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x <= 99999 minutes and x >= 15 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..da2f9f0
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#AuditPolicies.ps1	
@@ -0,0 +1,2036 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.2"
+    Task = "(L1) Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Authentication Service
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Authentication Service"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Authentication Service'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.3"
+    Task = "(L1) Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Service Ticket Operations
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Service Ticket Operations"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Service Ticket Operations'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Distribution Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Distribution Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Distribution Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.4"
+    Task = "(L1) Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.5"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.6"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.1"
+    Task = "(L1) Ensure 'Audit Directory Service Access' is set to include 'Failure' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.2"
+    Task = "(L1) Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..eb0281c
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#RegistrySettings.ps1	
@@ -0,0 +1,12919 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+                | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.1"
+    Task = "(L1) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.1"
+    Task = "(L1) Ensure 'Domain controller: Allow server operators to schedule tasks' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SubmitControl" `
+                | Select-Object -ExpandProperty "SubmitControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.2"
+    Task = "(L1) Ensure 'Domain controller: Allow vulnerable Netlogon secure channel connections' is set to 'Not Configured' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "vulnerablechannelallowlist" `
+                | Select-Object -ExpandProperty "vulnerablechannelallowlist"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.3"
+    Task = "(L1) Ensure 'Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LdapEnforceChannelBinding" `
+                | Select-Object -ExpandProperty "LdapEnforceChannelBinding"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.4"
+    Task = "(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.5"
+    Task = "(L1) Ensure 'Domain controller: Refuse machine account password changes' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+                | Select-Object -ExpandProperty "RefusePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if ($regValue -le 0 -or $regValue -gt 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.3"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -gt 900 -or $regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.4"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+                $regValue = $regValue.Trim([char]0x0000)    
+                if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                        Status = "False"
+                    }
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.6"
+    Task = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+                | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if ($regValue -gt 14 -or $regValue -lt 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ForceUnlockLogon" `
+                | Select-Object -ExpandProperty "ForceUnlockLogon"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.9"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 1 - 'Lock Workstation' or 2 / 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+                | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if ($regValue -gt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+                | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.4"
+    Task = "(L2) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+                | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.6"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            $reference = @(
+                "LSARPC"
+                "NETLOGON"
+                "SAMR"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: LSARPC NETLOGON SAMR"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.7"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.8"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+$CARoleStatus = (Get-WindowsFeature -Name ADCS-Cert-Authority).Installed
+$WINSStatus = (Get-WindowsFeature -Name WINS).Installed
+[AuditTest] @{
+    Id = "2.3.10.9 A"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths and sub-paths' [WINS Role Feature and CA Role Service NOT installed]"
+    Test = {
+        try {
+            if (($CARoleStatus -or $WINSStatus) -eq $true){
+                return @{
+                    Message = "WINS Role Feature or CA Role Service are installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 B"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [CA Role Service installed]"
+    Test = {
+        try {
+            if ($CARoleStatus -eq $false){
+                return @{
+                    Message = "CA Role Service NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\CertSvc"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\CertSvc"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 C"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [WINS Role Feature installed]"
+    Test = {
+        try {
+            if ($WINSStatus -eq $false){
+                return @{
+                    Message = "WINS Role Feature NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\WINS"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\WINS"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+                | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+                | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.13"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+                | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 1 - 'Negotiate signing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.11"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit Incoming NTLM Traffic' is set to 'Enable auditing for all accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AuditReceivingNTLMTraffic" `
+                | Select-Object -ExpandProperty "AuditReceivingNTLMTraffic"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.12"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit NTLM authentication in this domain' is set to 'Enable all' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "AuditNTLMInDomain" `
+                | Select-Object -ExpandProperty "AuditNTLMInDomain"
+        
+            if ($regValue -ne 7) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 7"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.13"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 1 - 'Audit all' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictSendingNTLMTraffic" `
+                | Select-Object -ExpandProperty "RestrictSendingNTLMTraffic"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.13.1"
+    Task = "(L1) Ensure 'Shutdown: Allow system to be shut down without having to log on' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ShutdownWithoutLogon" `
+                | Select-Object -ExpandProperty "ShutdownWithoutLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 2 - 'Prompt for consent on the secure desktop' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.1"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.2"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.3"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.4"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.5"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.6"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.7"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"    
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+                | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+                | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.2"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+                | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.4"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.5"
+    Task = "(L1) Ensure 'Enable Certificate Padding' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" `
+                -Name "EnableCertPaddingCheck" `
+                | Select-Object -ExpandProperty "EnableCertPaddingCheck"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.6"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.7"
+    Task = "(L1) Ensure 'LSA Protection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+                | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.8"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.9"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.5"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.6"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+                | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.7"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.8"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+                | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.10"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.12"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if ($regValue -gt 90) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' or 0 - 'Enabled: Disable NetBIOS name resolution'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+                | Select-Object -ExpandProperty "EnableNetBIOS"
+        
+            if ($regValue -ne 2 -and $regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.2"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+                | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.8.1"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+                | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+                | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+                | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+                | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.4"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+                | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+                if($regValue -eq $null){
+                    return @{
+                        Message = "Registry key not found."
+                        Status = "False"
+                    }
+                }
+                $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+    
+                $missingElements = @()
+                $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "Require Privacy")
+                foreach ($element in $elementsToCheck) {
+                    if ($array -notcontains $element) {
+                        $missingElements += $element
+                    }
+                }
+    
+                if ($missingElements.Length -gt 0) {
+                    return @{
+                        Message = ($missingElements -join " and ") + " not configured correctly."
+                        Status = "False"
+                    }
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+                if($regValue -eq $null){
+                    return @{
+                        Message = "Registry key not found."
+                        Status = "False"
+                    }
+                }
+                $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+    
+                $missingElements = @()
+                $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "Require Privacy")
+                foreach ($element in $elementsToCheck) {
+                    if ($array -notcontains $element) {
+                        $missingElements += $element
+                    }
+                }
+    
+                if ($missingElements.Length -gt 0) {
+                    return @{
+                        Message = ($missingElements -join " and ") + " not configured correctly."
+                        Status = "False"
+                    }
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+                | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+                | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+                | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+                | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+                | Select-Object -ExpandProperty "DisableWPDRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+                | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($null -eq $regValue -or $regValue -gt 3 -or $regValue -lt 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1-3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.2"
+    Task = "(L2) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+                | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+                | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+                | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+                | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+                | Select-Object -ExpandProperty "RpcAuthentication"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+                | Select-Object -ExpandProperty "RpcProtocols"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: 0 - Negotiate' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+                | Select-Object -ExpandProperty "ForceKerberosForRpc"
+        
+            if ($regValue -ne 0 -and $regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+                | Select-Object -ExpandProperty "RpcTcpPort"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.8"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+                | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.9"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+                | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.10"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+                | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.11"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+                | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.1"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.2"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 1 - 'Secure Boot' or 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if ($regValue -ne 1 -and $regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.3"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.4"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.5"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock' (MS Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.6"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.7"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.4"
+    Task = "(L1) Ensure 'Configure security policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.5"
+    Task = "(L1) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.6"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+                | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.7"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+                | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.1"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.2"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+                | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+                | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.5"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.6"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+                | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+                | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+                | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+                | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+                | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+                | Select-Object -ExpandProperty "DoReport"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+                | Select-Object -ExpandProperty "DevicePKInitBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+                | Select-Object -ExpandProperty "DevicePKInitEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.1"
+    Task = "(L1) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.1"
+    Task = "(L1) Ensure 'Configure password backup directory' is set to 2 - 'Enabled: Active Directory' or 1 - 'Enabled: Azure Active Directory'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "BackupDirectory" `
+                | Select-Object -ExpandProperty "BackupDirectory"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PwdExpirationProtectionEnabled" `
+                | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.3"
+    Task = "(L1) Ensure 'Enable password encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "ADPasswordEncryptionEnabled" `
+                | Select-Object -ExpandProperty "ADPasswordEncryptionEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordComplexity" `
+                | Select-Object -ExpandProperty "PasswordComplexity"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordLength" `
+                | Select-Object -ExpandProperty "PasswordLength"
+        
+            if ($regValue -lt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordAgeDays" `
+                | Select-Object -ExpandProperty "PasswordAgeDays"
+        
+            if ($regValue -gt 30 -or $regValue -lt 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x >= 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.7"
+    Task = "(L1) Ensure 'Post-authentication actions: Grace period (hours)' is set to 'Enabled: 8 or fewer hours, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationResetDelay" `
+                | Select-Object -ExpandProperty "PostAuthenticationResetDelay"
+        
+            if ($regValue -gt 8 -or $regValue -le 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 8 and x > 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.8"
+    Task = "(L1) Ensure 'Post-authentication actions: Actions' is set to 3 - 'Enabled: Reset the password and logoff the managed account' or 5 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationActions" `
+                | Select-Object -ExpandProperty "PostAuthenticationActions"
+        
+            if ($regValue -ne 3 -and $regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3 or 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+                | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+                | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.3"
+    Task = "(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+                | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.4"
+    Task = "(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.5"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+                | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.6"
+    Task = "(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+                | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.7"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+                | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.31.1"
+    Task = "(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+                | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.31.2"
+    Task = "(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+                | Select-Object -ExpandProperty "UploadUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.1"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.2"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.3"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.4"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+                | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.2"
+    Task = "(L2) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.49.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+                | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.1"
+    Task = "(L1) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.2"
+    Task = "(L1) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.3.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+                | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.8.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.10.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+                | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+                | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+        return @{
+            Message = "Compliant"
+            Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+                | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.2"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.13.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+                | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if ($regValue -ne 1 -and $regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+                | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            if ($regValue -ne 0 -and $regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+                | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+                | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+                | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+                | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+                | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+                | Select-Object -ExpandProperty "LimitDumpCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.8"
+    Task = "(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+                | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.1"
+    Task = "(L1) Ensure 'Enable App Installer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableAppInstaller" `
+                | Select-Object -ExpandProperty "EnableAppInstaller"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.2"
+    Task = "(L1) Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableExperimentalFeatures" `
+                | Select-Object -ExpandProperty "EnableExperimentalFeatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.3"
+    Task = "(L1) Ensure 'Enable App Installer Hash Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableHashOverride" `
+                | Select-Object -ExpandProperty "EnableHashOverride"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.4"
+    Task = "(L1) Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableMSAppInstallerProtocol" `
+                | Select-Object -ExpandProperty "EnableMSAppInstallerProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -lt 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.3"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.4"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.36.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.40.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+                | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.41.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+                | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+                | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 C"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 K"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+             if (-not $windefrunning) {
+                 return @{
+                     Message = "This rule requires Windows Defender Antivirus to be enabled."
+                     Status = "None"
+                 }
+             }
+             $regValue = 0;
+             $regValueTwo = 0;
+             $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+             $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+ 
+             $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+             if($asrTest1){
+                 $regValue = Get-ItemProperty -ErrorAction Stop `
+                     -Path $Path `
+                     -Name $Value `
+                     | Select-Object -ExpandProperty $Value
+             }
+ 
+             $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+             $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+ 
+             $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+             if($asrTest2){
+                 $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                     -Path $Path2 `
+                     -Name $Value2 `
+                     | Select-Object -ExpandProperty $Value2
+             }
+ 
+             if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                 return @{
+                     Message = "Registry value is '$regValue'. Expected: 1"
+                     Status = "False"
+                 }
+             }
+         }
+         catch [System.Management.Automation.PSArgumentException] {
+             return @{
+                 Message = "Registry value not found."
+                 Status = "False"
+             }
+         }
+         catch [System.Management.Automation.ItemNotFoundException] {
+             return @{
+                 Message = "Registry key not found."
+                 Status = "False"
+             }
+         }
+         
+         return @{
+             Message = "Compliant"
+             Status = "True"
+         }
+     }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 L"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 M"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+        if (-not $windefrunning) {
+            return @{
+                Message = "This rule requires Windows Defender Antivirus to be enabled."
+                Status = "None"
+            }
+        }
+        $regValue = 0;
+        $regValueTwo = 0;
+        $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+        $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+        $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+        if($asrTest1){
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path $Path `
+                -Name $Value `
+                | Select-Object -ExpandProperty $Value
+        }
+
+        $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+        $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+        $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+        if($asrTest2){
+            $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                -Path $Path2 `
+                -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+        }
+
+        if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+            return @{
+                Message = "Registry value is '$regValue'. Expected: 1"
+                Status = "False"
+            }
+        }
+    }
+    catch [System.Management.Automation.PSArgumentException] {
+        return @{
+            Message = "Registry value not found."
+            Status = "False"
+        }
+    }
+    catch [System.Management.Automation.ItemNotFoundException] {
+        return @{
+            Message = "Registry key not found."
+            Status = "False"
+        }
+    }
+    
+    return @{
+        Message = "Compliant"
+        Status = "True"
+    }
+}
+}
+[AuditTest] @{
+    Id = "18.10.42.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.7.1"
+    Task = "(L1) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "EnableFileHashComputation" `
+                | Select-Object -ExpandProperty "EnableFileHashComputation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.1"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.2"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.3"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.4"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+                | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+                | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.1"
+    Task = "(L1) Ensure 'Scan packed executables' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisablePackedExeScanning" `
+                | Select-Object -ExpandProperty "DisablePackedExeScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.2"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.3"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.17"
+    Task = "(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.50.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.55.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+                | Select-Object -ExpandProperty "DisablePushToInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.2.1"
+    Task = "(L2) Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fSingleSessionPerUser" `
+                | Select-Object -ExpandProperty "fSingleSessionPerUser"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.1"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.2"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.3"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.4"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+                | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+                | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+                | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if ($regValue -gt 900000 -or $regValue -eq 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+                | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.11.2"
+    Task = "(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+                | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+                | Select-Object -ExpandProperty "AllowCloudSearch"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.3"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.4"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+                | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.62.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+                | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if ($regValue -ne 1 -and $regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.1"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.1"
+    Task = "(L2) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.2"
+    Task = "(L2) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+                | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+                | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.91.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+                | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+                | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+                | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+                | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+        
+            if ($regValue -lt 180 -or $regValue -gt 365) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+                | Select-Object -ExpandProperty "DeferQualityUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+                | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+                | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.1"
+    Task = "(L1) Ensure 'Configure Windows spotlight on lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+                | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.2"
+    Task = "(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+                | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.3"
+    Task = "(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+                | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.4"
+    Task = "(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.5"
+    Task = "(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSpotlightCollectionOnDesktop" `
+                | Select-Object -ExpandProperty "DisableSpotlightCollectionOnDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.26.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+                | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.42.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.44.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+                | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..59b8d27
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#SecurityOptions.ps1	
@@ -0,0 +1,133 @@
+[AuditTest] @{
+    Id = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.5"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#UserRights.ps1
new file mode 100644
index 0000000..1871ea1
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-CIS-3.0.0#UserRights.ps1	
@@ -0,0 +1,1979 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "(L1) Ensure 'Add workstations to domain' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeMachineAccountPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeMachineAccountPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeMachineAccountPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.14"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators [Hyper-V-Feature NOT installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' [Hyper-V-Feature installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-83-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.20"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.21"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.22"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-114"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.23"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.24"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.25"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.26"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.27"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.28"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.29"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.30"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+$adfsModule = Get-Module -Name ADFS
+if($null -eq $adfsModule){
+[AuditTest] @{
+    Id = "2.2.31 A"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE NOT installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.31 B"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-80-1321940109-3370001082-3650459431-215109509-2472514016"
+            "S-1-5-80-2246541699-21809830-3603976364-117610243-975697593"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.32"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if((Get-WindowsFeature -Name web-server).installed -ne $true){
+[AuditTest] @{
+    Id = "2.2.33 A"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.33 B"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' [IIS Role installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-32-568"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.34"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.35"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.36"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.37"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.38"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' and (when Exchange is running in the environment) 'Exchange Servers' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.39"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.40"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.41"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.42"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.43"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.44"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.45"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.46"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.47"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.48"
+    Task = "(L1) Ensure 'Synchronize directory service data' is set to 'No One' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSyncAgentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSyncAgentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSyncAgentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.49"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AccountPolicies.ps1
new file mode 100644
index 0000000..66c37d2
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AccountPolicies.ps1	
@@ -0,0 +1,252 @@
+[AuditTest] @{
+    Id = "V-93141"
+    Task = "Windows Server 2019 must have the number of allowed bad logon attempts configured to three or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 3 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x >= 3 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93143"
+    Task = "Windows Server 2019 must have the period of time before the bad logon counter is reset configured to 15 minutes or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93145"
+    Task = "Windows Server 2019 account lockout duration must be configured to 15 minutes or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15) -and ($setPolicy -ne 0)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 or x == 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93459"
+    Task = "Windows Server 2019 must have the built-in Windows password complexity policy enabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93463"
+    Task = "Windows Server 2019 minimum password length must be configured to 14 characters."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93465"
+    Task = "Windows Server 2019 reversible password encryption must be disabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93471"
+    Task = "Windows Server 2019 minimum password age must be configured to at least one day."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -eq 0)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93477"
+    Task = "Windows Server 2019 maximum password age must be configured to 60 days or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 60 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 60 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93479"
+    Task = "Windows Server 2019 password history must be configured to 24 passwords remembered."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AuditPolicies.ps1
new file mode 100644
index 0000000..40d639d
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#AuditPolicies.ps1	
@@ -0,0 +1,1502 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "V-92967 + V-92969"
+    Task = "Windows Server 2019 must be configured to audit logon successes. Windows Server 2019 must be configured to audit logon failures."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-92979"
+    Task = "Windows Server 2019 must be configured to audit Account Management - Security Group Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-92981 + V-92983"
+    Task = "Windows Server 2019 must be configured to audit Account Management - User Account Management successes. Windows Server 2019 must be configured to audit Account Management - User Account Management failures."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-92985"
+    Task = "Windows Server 2019 must be configured to audit Account Management - Computer Account Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-92987 + V-92989"
+    Task = "Windows Server 2019 must be configured to audit Logon/Logoff - Account Lockout successes. Windows Server 2019 must be configured to audit Logon/Logoff - Account Lockout failures."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93089"
+    Task = "Windows Server 2019 must be configured to audit Account Management - Other Account Management Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93091"
+    Task = "Windows Server 2019 must be configured to audit Detailed Tracking - Process Creation successes."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93093 + V-93095"
+    Task = "Windows Server 2019 must be configured to audit Policy Change - Audit Policy Change successes. Windows Server 2019 must be configured to audit Policy Change - Audit Policy Change failures."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93097"
+    Task = "Windows Server 2019 must be configured to audit Policy Change - Authentication Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93099"
+    Task = "Windows Server 2019 must be configured to audit Policy Change - Authorization Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93101 + V-93103"
+    Task = "Windows Server 2019 must be configured to audit Privilege Use - Sensitive Privilege Use successes. Windows Server 2019 must be configured to audit Privilege Use - Sensitive Privilege Use failures."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93105 + V-93107"
+    Task = "Windows Server 2019 must be configured to audit System - IPsec Driver successes. Windows Server 2019 must be configured to audit System - IPsec Driver failures."
+    Test = {
+        # Get the audit policy for the subcategory IPsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "IPsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'IPsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93109 + V-93111"
+    Task = "Windows Server 2019 must be configured to audit System - Other System Events successes. Windows Server 2019 must be configured to audit System - Other System Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93113"
+    Task = "Windows Server 2019 must be configured to audit System - Security State Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93115"
+    Task = "Windows Server 2019 must be configured to audit System - Security System Extension successes."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93117 + V-93119"
+    Task = "Windows Server 2019 must be configured to audit System - System Integrity successes. Windows Server 2019 must be configured to audit System - System Integrity failures."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93133 + V-93135"
+    Task = "Windows Server 2019 must be configured to audit DS Access - Directory Service Access successes. Windows Server 2019 must be configured to audit DS Access - Directory Service Access failures."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93137 + V-93139"
+    Task = "Windows Server 2019 must be configured to audit DS Access - Directory Service Changes successes. Windows Server 2019 must be configured to audit DS Access - Directory Service Changes failures."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93153 + V-93155"
+    Task = "Windows Server 2019 must be configured to audit Account Logon - Credential Validation successes. Windows Server 2019 must be configured to audit Account Logon - Credential Validation failures."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93157"
+    Task = "Windows Server 2019 must be configured to audit Detailed Tracking - Plug and Play Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93159"
+    Task = "Windows Server 2019 must be configured to audit Logon/Logoff - Group Membership successes."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93161"
+    Task = "Windows Server 2019 must be configured to audit Logon/Logoff - Special Logon successes."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93163 + V-93165"
+    Task = "Windows Server 2019 must be configured to audit Object Access - Other Object Access Events successes. Windows Server 2019 must be configured to audit Object Access - Other Object Access Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93167 + V-93169"
+    Task = "Windows Server 2019 must be configured to audit Object Access - Removable Storage successes. Windows Server 2019 must be configured to audit Object Access - Removable Storage failures."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93171"
+    Task = "Windows Server 2019 must be configured to audit logoff successes."
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#RegistrySettings.ps1
new file mode 100644
index 0000000..ae129c1
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#RegistrySettings.ps1	
@@ -0,0 +1,3482 @@
+[AuditTest] @{
+    Id = "V-92961"
+    Task = "Windows Server 2019 machine inactivity limit must be set to 15 minutes or less, locking the system with the screen saver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-92971"
+    Task = "Windows Server 2019 Remote Desktop Services must require secure Remote Procedure Call (RPC) communications."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-92973"
+    Task = "Windows Server 2019 Remote Desktop Services must be configured with the client connection encryption set to High Level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93045"
+    Task = "Windows Server 2019 must restrict remote calls to the Security Account Manager (SAM) to Administrators on domain-joined member servers and standalone systems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93147"
+    Task = "Windows Server 2019 required legal notice must be configured to display before console logon."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            if ($regValue -ne "See message text below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message text below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93149"
+    Task = "Windows Server 2019 title for legal banner dialog box must be configured with the appropriate text."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            if ($regValue -ne "See message title options below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message title options below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93151"
+    Task = "Windows Server 2019 must force audit policy subcategory settings to override audit policy category settings."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93173"
+    Task = "Windows Server 2019 command line data must be included in process creation events."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93175"
+    Task = "Windows Server 2019 PowerShell script block logging must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93177"
+    Task = "Windows Server 2019 Application event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93179"
+    Task = "Windows Server 2019 Security event log size must be configured to 196608 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93181"
+    Task = "Windows Server 2019 System event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93199"
+    Task = "Windows Server 2019 must prevent users from changing installation options."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93201"
+    Task = "Windows Server 2019 must disable the Windows Installer Always install with elevated privileges option."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93233"
+    Task = "Windows Server 2019 Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93235"
+    Task = "Windows Server 2019 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93237"
+    Task = "Windows Server 2019 must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF)-generated routes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93239"
+    Task = "Windows Server 2019 insecure logons to an SMB server must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93243"
+    Task = "Windows Server 2019 must be configured to enable Remote host allows delegation of non-exportable credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93249"
+    Task = "Windows Server 2019 Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3) -and ($regValue -ne 8)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 3 or x == 8"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93251"
+    Task = "Windows Server 2019 group policy objects must be reprocessed even if they have not changed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93253"
+    Task = "Windows Server 2019 users must be prompted to authenticate when the system wakes from sleep (on battery)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93255"
+    Task = "Windows Server 2019 users must be prompted to authenticate when the system wakes from sleep (plugged in)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93261"
+    Task = "Windows Server 2019 Turning off File Explorer heap termination on corruption must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93263"
+    Task = "Windows Server 2019 File Explorer shell protocol must run in protected mode."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93265"
+    Task = "Windows Server 2019 must prevent attachments from being downloaded from RSS feeds."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93267"
+    Task = "Windows Server 2019 users must be notified if a web-based program attempts to install software."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93269"
+    Task = "Windows Server 2019 must disable automatically signing in the last interactive user after a system-initiated restart."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93273"
+    Task = "Windows Server 2019 domain controllers must be configured to allow reset of machine account passwords."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+                | Select-Object -ExpandProperty "RefusePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93279"
+    Task = "Windows Server 2019 must prevent local accounts with blank passwords from being used from the network."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93285"
+    Task = "Windows Server 2019 maximum age for machine account passwords must be configured to 30 days or less."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -gt 30 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93291"
+    Task = "Windows Server 2019 must not allow anonymous enumeration of Security Account Manager (SAM) accounts."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93293"
+    Task = "Windows Server 2019 must be configured to prevent anonymous users from having the same permissions as the Everyone group."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93295"
+    Task = "Windows Server 2019 services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity instead of authenticating anonymously."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93297"
+    Task = "Windows Server 2019 must prevent NTLM from falling back to a Null session."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93299"
+    Task = "Windows Server 2019 must prevent PKU2U authentication using online identities."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93301"
+    Task = "Windows Server 2019 LAN Manager authentication level must be configured to send NTLMv2 response only and to refuse LM and NTLM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93303"
+    Task = "Windows Server 2019 must be configured to at least negotiate signing for LDAP client signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93305"
+    Task = "Windows Server 2019 session security for NTLM SSP-based clients must be configured to require NTLMv2 session security and 128-bit encryption."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93307"
+    Task = "Windows Server 2019 session security for NTLM SSP-based servers must be configured to require NTLMv2 session security and 128-bit encryption."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93309"
+    Task = "Windows Server 2019 default permissions of global system objects must be strengthened."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93311"
+    Task = "Windows Server 2019 must preserve zone information when saving attachments."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93373"
+    Task = "Windows Server 2019 Autoplay must be turned off for non-volume devices."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93375"
+    Task = "Windows Server 2019 default AutoRun behavior must be configured to prevent AutoRun commands."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93377"
+    Task = "Windows Server 2019 AutoPlay must be disabled for all drives."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93393"
+    Task = "Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93395"
+    Task = "Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93399"
+    Task = "Windows Server 2019 must prevent the display of slide shows on the lock screen."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93401"
+    Task = "Windows Server 2019 must have WDigest Authentication disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93403"
+    Task = "Windows Server 2019 downloading print driver packages over HTTP must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93405"
+    Task = "Windows Server 2019 printing over HTTP must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93407"
+    Task = "Windows Server 2019 network selection user interface (UI) must not be displayed on the logon screen."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93409"
+    Task = "Windows Server 2019 Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft."
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableInventory" `
+                | Select-Object -ExpandProperty "DisableInventory"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93411"
+    Task = "Windows Server 2019 Windows Defender SmartScreen must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93413"
+    Task = "Windows Server 2019 must disable Basic authentication for RSS feeds over HTTP."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+                | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93415"
+    Task = "Windows Server 2019 must prevent Indexing of encrypted files."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93419"
+    Task = "Windows Server 2019 local users on domain-joined member servers must not be enumerated."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93425"
+    Task = "Windows Server 2019 must not save passwords in the Remote Desktop Client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93427"
+    Task = "Windows Server 2019 Remote Desktop Services must always prompt a client for passwords upon connection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93429"
+    Task = "Windows Server 2019 Windows Remote Management (WinRM) service must not store RunAs credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93431"
+    Task = "Windows Server 2019 User Account Control approval mode for the built-in Administrator must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93433"
+    Task = "Windows Server 2019 User Account Control must automatically deny standard user requests for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93435"
+    Task = "Windows Server 2019 User Account Control must run all administrators in Admin Approval Mode, enabling UAC."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93453"
+    Task = "Windows Server 2019 must restrict unauthenticated Remote Procedure Call (RPC) clients from connecting to the RPC server on domain-joined member servers and standalone systems."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Standalone Workstation", "Member Workstation", "Standalone Server", "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93455"
+    Task = "Windows Server 2019 computer account password must not be prevented from being reset."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93467"
+    Task = "Windows Server 2019 must be configured to prevent the storage of the LAN Manager hash of passwords."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93469"
+    Task = "Windows Server 2019 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93493"
+    Task = "Windows Server 2019 users must be required to enter a password to access private keys stored on the computer."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+                | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93495"
+    Task = "Windows Server 2019 Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93499"
+    Task = "Windows Server 2019 Windows Remote Management (WinRM) client must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93501"
+    Task = "Windows Server 2019 Windows Remote Management (WinRM) service must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93503"
+    Task = "Windows Server 2019 Windows Remote Management (WinRM) client must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93505"
+    Task = "Windows Server 2019 Windows Remote Management (WinRM) client must not use Digest authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93507"
+    Task = "Windows Server 2019 Windows Remote Management (WinRM) service must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93511"
+    Task = "Windows Server 2019 must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93517"
+    Task = "Windows Server 2019 administrator accounts must not be enumerated during elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93519"
+    Task = "Windows Server 2019 local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain-joined member servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93521"
+    Task = "Windows Server 2019 UIAccess applications must not be allowed to prompt for elevation without using the secure desktop."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+                | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93525"
+    Task = "Windows Server 2019 User Account Control must be configured to detect application installations and prompt for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93527"
+    Task = "Windows Server 2019 User Account Control (UAC) must only elevate UIAccess applications that are installed in secure locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93529"
+    Task = "Windows Server 2019 User Account Control (UAC) must virtualize file and registry write failures to per-user locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93533"
+    Task = "Windows Server 2019 Remote Desktop Services must prevent drive redirection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93537"
+    Task = "Windows Server 2019 must not allow anonymous enumeration of shares."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93539"
+    Task = "Windows Server 2019 must restrict anonymous access to Named Pipes and Shares."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93541"
+    Task = "Windows Server 2019 must be configured to ignore NetBIOS name release requests except from WINS servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93545"
+    Task = "Windows Server 2019 domain controllers must require LDAP access signing."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93547"
+    Task = "Windows Server 2019 setting Domain member: Digitally encrypt or sign secure channel data (always) must be configured to Enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93549"
+    Task = "Windows Server 2019 setting Domain member: Digitally encrypt secure channel data (when possible) must be configured to enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93551"
+    Task = "Windows Server 2019 setting Domain member: Digitally sign secure channel data (when possible) must be configured to Enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93553"
+    Task = "Windows Server 2019 must be configured to require a strong session key."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93555"
+    Task = "Windows Server 2019 setting Microsoft network client: Digitally sign communications (always) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93557"
+    Task = "Windows Server 2019 setting Microsoft network client: Digitally sign communications (if server agrees) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93559"
+    Task = "Windows Server 2019 setting Microsoft network server: Digitally sign communications (always) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93561"
+    Task = "Windows Server 2019 setting Microsoft network server: Digitally sign communications (if client agrees) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93563"
+    Task = "Windows Server 2019 Explorer Data Execution Prevention must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#SecurityOptions.ps1
new file mode 100644
index 0000000..8212e96
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-DISA-V1R5#SecurityOptions.ps1	
@@ -0,0 +1,104 @@
+[AuditTest] @{
+    Id = "V-93281"
+    Task = "Windows Server 2019 built-in administrator account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93283"
+    Task = "Windows Server 2019 built-in guest account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93289"
+    Task = "Windows Server 2019 must not allow anonymous SID/Name translation."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-93497"
+    Task = "Windows Server 2019 must have the built-in guest account disabled."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AccountPolicies.ps1
new file mode 100644
index 0000000..dab2b4d
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AccountPolicies.ps1	
@@ -0,0 +1,252 @@
+[AuditTest] @{
+    Id = "AccountPolicy-001"
+    Task = "Ensure 'MinimumPasswordAge' is set to '1'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-002"
+    Task = "Ensure 'MaximumPasswordAge' is set to '60'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 60) {
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: 60"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-003"
+    Task = "Ensure 'MinimumPasswordLength' is set to '14'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 14) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-004"
+    Task = "Ensure 'PasswordComplexity' is set to '1'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-005"
+    Task = "Ensure 'PasswordHistorySize' is set to '24'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-006"
+    Task = "Ensure 'LockoutBadCount' is set to '10'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 10) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: 10"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-007"
+    Task = "Ensure 'ResetLockoutCount' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 15) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-008"
+    Task = "Ensure 'LockoutDuration' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 15) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: 15"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-009"
+    Task = "Ensure 'ClearTextPassword' is set to '0'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AuditPolicies.ps1
new file mode 100644
index 0000000..002cdb7
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#AuditPolicies.ps1	
@@ -0,0 +1,1388 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "AuditPolicy-001"
+    Task = "Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-002"
+    Task = "Ensure 'Security Group Management' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-003"
+    Task = "Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-004"
+    Task = "Ensure 'PNP Activity' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-005"
+    Task = "Ensure 'Process Creation' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-006"
+    Task = "Ensure 'Account Lockout' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-007"
+    Task = "Ensure 'Group Membership' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-008"
+    Task = "Ensure 'Logon' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-009"
+    Task = "Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-010"
+    Task = "Ensure 'Special Logon' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-011"
+    Task = "Ensure 'Detailed File Share' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-012"
+    Task = "Ensure 'File Share' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-013"
+    Task = "Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-014"
+    Task = "Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-015"
+    Task = "Ensure 'Audit Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-016"
+    Task = "Ensure 'Authentication Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-017"
+    Task = "Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory MPSSVC Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "MPSSVC Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'MPSSVC Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-018"
+    Task = "Ensure 'Other Policy Change Events' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-019"
+    Task = "Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-020"
+    Task = "Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-021"
+    Task = "Ensure 'Security State Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-022"
+    Task = "Ensure 'Security System Extension' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-023"
+    Task = "Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#RegistrySettings.ps1
new file mode 100644
index 0000000..749400a
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#RegistrySettings.ps1	
@@ -0,0 +1,9235 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "Registry-001"
+    Task = "Ensure 'Remove `"Run this time`" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "RunThisTimeEnabled" `
+                | Select-Object -ExpandProperty "RunThisTimeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-002"
+    Task = "Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "VersionCheckEnabled" `
+                | Select-Object -ExpandProperty "VersionCheckEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-003"
+    Task = "Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "RunInvalidSignatures" `
+                | Select-Object -ExpandProperty "RunInvalidSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-004"
+    Task = "Set registry value 'CheckExeSignatures' to yes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "CheckExeSignatures" `
+                | Select-Object -ExpandProperty "CheckExeSignatures"
+        
+            if ($regValue -ne "yes") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: yes"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-005"
+    Task = "Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation64Bit" `
+                | Select-Object -ExpandProperty "Isolation64Bit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-006"
+    Task = "Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableEPMCompat" `
+                | Select-Object -ExpandProperty "DisableEPMCompat"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-007"
+    Task = "Set registry value 'Isolation' to PMEM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation" `
+                | Select-Object -ExpandProperty "Isolation"
+        
+            if ($regValue -ne "PMEM") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PMEM"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-008"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_DISABLE_MK_PROTOCOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-009"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_DISABLE_MK_PROTOCOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-010"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_DISABLE_MK_PROTOCOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-011"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_MIME_HANDLING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-012"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_MIME_HANDLING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-013"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_MIME_HANDLING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-014"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_MIME_SNIFFING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-015"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_MIME_SNIFFING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-016"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_MIME_SNIFFING)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-017"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_RESTRICT_ACTIVEXINSTALL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-018"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_RESTRICT_ACTIVEXINSTALL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-019"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_RESTRICT_ACTIVEXINSTALL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-020"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_RESTRICT_FILEDOWNLOAD)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-021"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_RESTRICT_FILEDOWNLOAD)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-022"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_RESTRICT_FILEDOWNLOAD)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-023"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_SECURITYBAND)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-024"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_SECURITYBAND)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-025"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_SECURITYBAND)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-026"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_WINDOW_RESTRICTIONS)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-027"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_WINDOW_RESTRICTIONS)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-028"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_WINDOW_RESTRICTIONS)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-029"
+    Task = "Set registry value '(Reserved)' to 1. (FEATURE_ZONE_ELEVATION)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-030"
+    Task = "Set registry value 'explorer.exe' to 1. (FEATURE_ZONE_ELEVATION)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-031"
+    Task = "Set registry value 'iexplore.exe' to 1. (FEATURE_ZONE_ELEVATION)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-032"
+    Task = "Set registry value 'PreventOverrideAppRepUnknown' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-033"
+    Task = "Set registry value 'PreventOverride' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-034"
+    Task = "Ensure 'Prevent managing SmartScreen Filter' is set to 'On'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-035"
+    Task = "Set registry value 'NoCrashDetection' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoCrashDetection" `
+                | Select-Object -ExpandProperty "NoCrashDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-036"
+    Task = "Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableSecuritySettingsCheck" `
+                | Select-Object -ExpandProperty "DisableSecuritySettingsCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-037"
+    Task = "Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX" `
+                -Name "BlockNonAdminActiveXInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-038"
+    Task = "Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AxInstaller" `
+                -Name "OnlyUseAXISForActiveXInstall" `
+                | Select-Object -ExpandProperty "OnlyUseAXISForActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-039"
+    Task = "Set registry value 'Security_zones_map_edit' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_zones_map_edit" `
+                | Select-Object -ExpandProperty "Security_zones_map_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-040"
+    Task = "Set registry value 'Security_options_edit' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_options_edit" `
+                | Select-Object -ExpandProperty "Security_options_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-041"
+    Task = "Set registry value 'Security_HKLM_only' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_HKLM_only" `
+                | Select-Object -ExpandProperty "Security_HKLM_only"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-042"
+    Task = "Ensure 'Check for server certificate revocation' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "CertificateRevocation" `
+                | Select-Object -ExpandProperty "CertificateRevocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-043"
+    Task = "Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "PreventIgnoreCertErrors" `
+                | Select-Object -ExpandProperty "PreventIgnoreCertErrors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-044"
+    Task = "Set registry value 'WarnOnBadCertRecving' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "WarnOnBadCertRecving" `
+                | Select-Object -ExpandProperty "WarnOnBadCertRecving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-045"
+    Task = "Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "EnableSSL3Fallback" `
+                | Select-Object -ExpandProperty "EnableSSL3Fallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-046"
+    Task = "Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "SecureProtocols" `
+                | Select-Object -ExpandProperty "SecureProtocols"
+        
+            if ($regValue -ne 2560) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2560"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-047"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/0)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-048"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-049"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-050"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-051"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-052"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Lockdown_Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-053"
+    Task = "Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" `
+                -Name "UNCAsIntranet" `
+                | Select-Object -ExpandProperty "UNCAsIntranet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-054"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Zones/0)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-055"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/0)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-056"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-057"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'. (Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-058"
+    Task = "Ensure 'Java permissions' is set to 'High safety'. (Zones/1)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-059"
+    Task = "Ensure 'Java permissions' is set to 'High safety'. (Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-060"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-061"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'. (Zones/2)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-062"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-063"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-064"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-065"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-066"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-067"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-068"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-069"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-070"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-071"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-072"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-073"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-074"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-075"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-076"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-077"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-078"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-079"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-080"
+    Task = "Ensure 'Logon options' is set to 'Prompt for user name and password'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-081"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-082"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-083"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-084"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-085"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-086"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-087"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-088"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-089"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-090"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-091"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-092"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-093"
+    Task = "Set registry value '140C' to 3. (Zones/3)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-094"
+    Task = "Ensure 'Allow META REFRESH' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1608" `
+                | Select-Object -ExpandProperty "1608"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-095"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-096"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-097"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-098"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-099"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-100"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-101"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-102"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-103"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-104"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-105"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-106"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-107"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-108"
+    Task = "Ensure 'Allow binary and script behaviors' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2000" `
+                | Select-Object -ExpandProperty "2000"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-109"
+    Task = "Ensure 'Scripting of Java applets' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1402" `
+                | Select-Object -ExpandProperty "1402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-110"
+    Task = "Ensure 'Allow file downloads' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1803" `
+                | Select-Object -ExpandProperty "1803"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-111"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-112"
+    Task = "Ensure 'Allow active scripting' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1400" `
+                | Select-Object -ExpandProperty "1400"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-113"
+    Task = "Ensure 'Logon options' is set to 'Anonymous logon'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-114"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-115"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-116"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-117"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-118"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-119"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-120"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-121"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-122"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-123"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-124"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-125"
+    Task = "Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1405" `
+                | Select-Object -ExpandProperty "1405"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-126"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-127"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-128"
+    Task = "Ensure 'Run ActiveX controls and plugins' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1200" `
+                | Select-Object -ExpandProperty "1200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-129"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-130"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-131"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-132"
+    Task = "Set registry value '140C' to 3. (Zones/4)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-133"
+    Task = "Set registry value 'PUAProtection' to 1."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-134"
+    Task = "Ensure 'Turn on behavior monitoring' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-135"
+    Task = "Ensure 'Scan removable drives' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-136"
+    Task = "Ensure 'Turn on e-mail scanning' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-137"
+    Task = "Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+                | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-138"
+    Task = "Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-139"
+    Task = "Set registry value 'ExploitGuard_ASR_Rules' to 1."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-140"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from injecting code into other processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-141"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating executable content)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-142"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-143"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Win32 API calls from Office macro)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-144"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-145"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-146"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block executable content from email client and webmail)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-147"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-148"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-149"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-150"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Adobe Reader from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-151"
+    Task = "Set registry value 'EnableNetworkProtection' to 1."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-161"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-162"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if ($regValue -eq 3) {
+                return @{
+                    Message = "Set to 'Secure Boot and DMA Protection' which is more secure."
+                    Status = "True"
+                }
+            }
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-163"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'. (HypervisorEnforcedCodeIntegrity)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-164"
+    Task = "Set registry value 'HVCIMATRequired' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-165"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'. (LsaCfgFlags)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-166"
+    Task = "Set registry value 'ConfigureSystemGuardLaunch' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-167"
+    Task = "Ensure 'Turn off Autoplay' is set to 'All drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-168"
+    Task = "Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-169"
+    Task = "Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-170"
+    Task = "Set registry value 'LocalAccountTokenFilterPolicy' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-171"
+    Task = "Set registry value 'AllowEncryptionOracle' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-172"
+    Task = "Set registry value 'EnhancedAntiSpoofing' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-173"
+    Task = "Ensure 'Prevent downloading of enclosures' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-174"
+    Task = "Set registry value 'AllowProtectedCreds' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-175"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-176"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '196608'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-177"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-178"
+    Task = "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-179"
+    Task = "Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-180"
+    Task = "Ensure 'Turn off heap termination on corruption' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-181"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'. (NoBackgroundPolicy)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-182"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'. (NoGPOListChanges)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-183"
+    Task = "Set registry value 'AlwaysInstallElevated' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-184"
+    Task = "Ensure 'Allow user control over installs' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-185"
+    Task = "Set registry value 'DeviceEnumerationPolicy' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-186"
+    Task = "Ensure 'Enable insecure guest logons' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-187"
+    Task = "Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-188"
+    Task = "Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-189"
+    Task = "Set registry value 'NoLockScreenCamera' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-190"
+    Task = "Set registry value 'NoLockScreenSlideshow' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-191"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-192"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockInvocationLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockInvocationLogging"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-193"
+    Task = "Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-194"
+    Task = "Ensure 'Configure Windows SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-195"
+    Task = "Set registry value 'ShellSmartScreenLevel' to Block."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-196"
+    Task = "Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-197"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'. (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-198"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'. (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-199"
+    Task = "Ensure 'Disallow Digest authentication' is set to 'Enabled'. (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-200"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'. (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-201"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'. (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-202"
+    Task = "Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'. (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-203"
+    Task = "Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-204"
+    Task = "Set registry value 'DisablePasswordSaving' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-205"
+    Task = "Set registry value 'fDisableCdm' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-206"
+    Task = "Set registry value 'fPromptForPassword' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-207"
+    Task = "Set registry value 'fEncryptRPCTraffic' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-208"
+    Task = "Set registry value 'MinEncryptionLevel' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-210"
+    Task = "Set registry value 'DefaultOutboundAction' to 0. (DomainProfile)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-211"
+    Task = "Set registry value 'DefaultInboundAction' to 1. (DomainProfile)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-212"
+    Task = "Set registry value 'EnableFirewall' to 1. (DomainProfile)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType        
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-213"
+    Task = "Set registry value 'EnableFirewall' to 1. (PrivateProfile)"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-214"
+    Task = "Set registry value 'DefaultInboundAction' to 1. (PrivateProfile)"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-215"
+    Task = "Set registry value 'DefaultOutboundAction' to 0. (PrivateProfile)"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-216"
+    Task = "Set registry value 'EnableFirewall' to 1. (PublicProfile)"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-217"
+    Task = "Set registry value 'DefaultOutboundAction' to 0. (PublicProfile)"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-218"
+    Task = "Set registry value 'DefaultInboundAction' to 1. (PublicProfile)"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-219"
+    Task = "Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-220"
+    Task = "Set registry value 'AdmPwdEnabled' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+                | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-221"
+    Task = "Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-222"
+    Task = "Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-223"
+    Task = "Set registry value 'DriverLoadPolicy' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-224"
+    Task = "Ensure 'Configure SMB v1 server' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-225"
+    Task = "Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MrxSmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-226"
+    Task = "Set registry value 'NoNameReleaseOnDemand' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-227"
+    Task = "Set registry value 'EnableICMPRedirect' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-228"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2. (Tcpip)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-229"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2. (Tcpip6)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-230"
+    Task = "Set registry value 'allownullsessionfallback' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-231"
+    Task = "Set registry value 'InactivityTimeoutSecs' to 900."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -ne 900) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 900"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-232"
+    Task = "Set registry value 'ScRemoveOption' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-233"
+    Task = "Set registry value 'SCENoApplyLegacyAuditPolicy' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-234"
+    Task = "Set registry value 'EnableVirtualization' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-235"
+    Task = "Set registry value 'FilterAdministratorToken' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-236"
+    Task = "Set registry value 'EnableLUA' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-237"
+    Task = "Set registry value 'EnableInstallerDetection' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-238"
+    Task = "Set registry value 'ConsentPromptBehaviorAdmin' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-239"
+    Task = "Set registry value 'ConsentPromptBehaviorUser' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-240"
+    Task = "Set registry value 'EnableSecureUIAPaths' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-241"
+    Task = "Set registry value 'LDAPClientIntegrity' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-242"
+    Task = "Set registry value 'LmCompatibilityLevel' to 5."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-243"
+    Task = "Set registry value 'NTLMMinClientSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-244"
+    Task = "Set registry value 'sealsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "sealsecurechannel" `
+                | Select-Object -ExpandProperty "sealsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-245"
+    Task = "Set registry value 'NTLMMinServerSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-246"
+    Task = "Set registry value 'requiresignorseal' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requiresignorseal" `
+                | Select-Object -ExpandProperty "requiresignorseal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-247"
+    Task = "Set registry value 'signsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "signsecurechannel" `
+                | Select-Object -ExpandProperty "signsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-248"
+    Task = "Set registry value 'RequireSecuritySignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-249"
+    Task = "Set registry value 'requiresecuritysignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-250"
+    Task = "Set registry value 'requirestrongkey' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requirestrongkey" `
+                | Select-Object -ExpandProperty "requirestrongkey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-251"
+    Task = "Set registry value 'RestrictAnonymousSAM' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-252"
+    Task = "Set registry value 'RestrictNullSessAccess' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-253"
+    Task = "Set registry value 'RestrictAnonymous' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-254"
+    Task = "Set registry value 'ProtectionMode' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-255"
+    Task = "Set registry value 'LimitBlankPasswordUse' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-256"
+    Task = "Set registry value 'maximumpasswordage' to 30."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "maximumpasswordage" `
+                | Select-Object -ExpandProperty "maximumpasswordage"
+        
+            if ($regValue -ne 30) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-257"
+    Task = "Set registry value 'disablepasswordchange' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "disablepasswordchange" `
+                | Select-Object -ExpandProperty "disablepasswordchange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-258"
+    Task = "Set registry value 'NoLMHash' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-259"
+    Task = "Set registry value 'EnablePlainTextPassword' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-260"
+    Task = "Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#SecurityOptions.ps1
new file mode 100644
index 0000000..60a1b0e
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#SecurityOptions.ps1	
@@ -0,0 +1,52 @@
+[AuditTest] @{
+    Id = "SecurityOption-261"
+    Task = "Ensure 'LSAAnonymousNameLookup' is set to '0'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SecurityOption-262"
+    Task = "Ensure 'EnableGuestAccount' is set to '0'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#UserRights.ps1
new file mode 100644
index 0000000..9b251b5
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2019-Microsoft-FINAL#UserRights.ps1	
@@ -0,0 +1,897 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "UserRight-001"
+    Task = "Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-002"
+    Task = "Ensure 'SeCreateTokenPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-003"
+    Task = "Ensure 'SeTrustedCredManAccessPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-004"
+    Task = "Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-005"
+    Task = "Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-006"
+    Task = "Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-007"
+    Task = "Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-008"
+    Task = "Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-6"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-009"
+    Task = "Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-010"
+    Task = "Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-011"
+    Task = "Ensure 'SeEnableDelegationPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-012"
+    Task = "Ensure 'SeCreatePermanentPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-013"
+    Task = "Ensure 'SeDebugPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-014"
+    Task = "Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-015"
+    Task = "Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-016"
+    Task = "Ensure 'SeNetworkLogonRight' is set to 'S-1-5-32-544, S-1-5-11'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-11"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-017"
+    Task = "Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-114'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "MemberServer" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-114"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-018"
+    Task = "Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-6"
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-019"
+    Task = "Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-020"
+    Task = "Ensure 'SeLockMemoryPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-021"
+    Task = "Ensure 'SeTcbPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-022"
+    Task = "Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-023"
+    Task = "Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-113'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "MemberServer" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..f91cbf1
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AccountPolicies.ps1	
@@ -0,0 +1,283 @@
+[AuditTest] @{
+    Id = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 365 -or $setPolicy -le 0)) {
+            if($setPolicy -eq -1){ #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 days and x > 0 days"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 1)) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1 days"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.7"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "(L1) Ensure 'Allow Administrator account lockout' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["AllowAdministratorLockout"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'AllowAdministratorLockout' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..da2f9f0
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#AuditPolicies.ps1	
@@ -0,0 +1,2036 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.2"
+    Task = "(L1) Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Authentication Service
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Authentication Service"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Authentication Service'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.1.3"
+    Task = "(L1) Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Service Ticket Operations
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Service Ticket Operations"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Service Ticket Operations'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.2"
+    Task = "(L1) Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.3"
+    Task = "(L1) Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Distribution Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Distribution Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Distribution Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.4"
+    Task = "(L1) Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.5"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.2.6"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.1"
+    Task = "(L1) Ensure 'Audit Directory Service Access' is set to include 'Failure' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.4.2"
+    Task = "(L1) Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..137a206
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#RegistrySettings.ps1	
@@ -0,0 +1,13246 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SAM" `
+                -Name "RelaxMinimumPasswordLengthLimits" `
+                | Select-Object -ExpandProperty "RelaxMinimumPasswordLengthLimits"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "NoConnectedUser" `
+                | Select-Object -ExpandProperty "NoConnectedUser"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.3"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+                | Select-Object -ExpandProperty "CrashOnAuditFail"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.4.1"
+    Task = "(L1) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+                | Select-Object -ExpandProperty "AddPrinterDrivers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.1"
+    Task = "(L1) Ensure 'Domain controller: Allow server operators to schedule tasks' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SubmitControl" `
+                | Select-Object -ExpandProperty "SubmitControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.2"
+    Task = "(L1) Ensure 'Domain controller: Allow vulnerable Netlogon secure channel connections' is set to 'Not Configured' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "vulnerablechannelallowlist" `
+                | Select-Object -ExpandProperty "vulnerablechannelallowlist"
+        
+            return @{
+                Message = "Registry value found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.3"
+    Task = "(L1) Ensure 'Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LdapEnforceChannelBinding" `
+                | Select-Object -ExpandProperty "LdapEnforceChannelBinding"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.4"
+    Task = "(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.5.5"
+    Task = "(L1) Ensure 'Domain controller: Refuse machine account password changes' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+                | Select-Object -ExpandProperty "RefusePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -le 0 -or $regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+                | Select-Object -ExpandProperty "DisableCAD"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+                | Select-Object -ExpandProperty "DontDisplayLastUserName"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.3"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.4"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.6"
+    Task = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+                | Select-Object -ExpandProperty "CachedLogonsCount"
+        
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+                | Select-Object -ExpandProperty "PasswordExpiryWarning"
+        
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.8"
+    Task = "(L1) Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ForceUnlockLogon" `
+                | Select-Object -ExpandProperty "ForceUnlockLogon"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.7.9"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 1 - 'Lock Workstation' or 2 / 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+                | Select-Object -ExpandProperty "AutoDisconnect"
+        
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+        
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+                | Select-Object -ExpandProperty "enableforcedlogoff"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.9.5"
+    Task = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+                | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.2"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.3"
+    Task = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.4"
+    Task = "(L2) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+                | Select-Object -ExpandProperty "DisableDomainCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.6"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            $reference = @(
+                "LSARPC"
+                "NETLOGON"
+                "SAMR"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: LSARPC NETLOGON SAMR"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.7"
+    Task = "(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+                | Select-Object -ExpandProperty "NullSessionPipes"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.8"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+$CARoleStatus = (Get-WindowsFeature -Name ADCS-Cert-Authority).Installed
+$WINSStatus = (Get-WindowsFeature -Name WINS).Installed
+[AuditTest] @{
+    Id = "2.3.10.9 A"
+    Task = "(L1) Configure 'Network access: Remotely accessible registry paths and sub-paths' [WINS Role Feature and CA Role Service NOT installed]"
+    Test = {
+        try {
+            if (($CARoleStatus -or $WINSStatus) -eq $true){
+                return @{
+                    Message = "WINS Role Feature or CA Role Service are installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 B"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [CA Role Service installed]"
+    Test = {
+        try {
+            if ($CARoleStatus -eq $false){
+                return @{
+                    Message = "CA Role Service NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\CertSvc"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\CertSvc"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.9 C"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [WINS Role Feature installed]"
+    Test = {
+        try {
+            if ($WINSStatus -eq $false){
+                return @{
+                    Message = "WINS Role Feature NOT installed"
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+                | Select-Object -ExpandProperty "Machine"
+        
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\WINS"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\WINS"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.11"
+    Task = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+                | Select-Object -ExpandProperty "restrictremotesam"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+                | Select-Object -ExpandProperty "NullSessionShares"
+        
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.13"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+                | Select-Object -ExpandProperty "ForceGuest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+                | Select-Object -ExpandProperty "AllowNullSessionFallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 1 - 'Negotiate signing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.11"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit Incoming NTLM Traffic' is set to 'Enable auditing for all accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AuditReceivingNTLMTraffic" `
+                | Select-Object -ExpandProperty "AuditReceivingNTLMTraffic"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.12"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit NTLM authentication in this domain' is set to 'Enable all' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "AuditNTLMInDomain" `
+                | Select-Object -ExpandProperty "AuditNTLMInDomain"
+        
+            if ($regValue -ne 7) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 7"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.13"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 1 - 'Audit all' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictSendingNTLMTraffic" `
+                | Select-Object -ExpandProperty "RestrictSendingNTLMTraffic"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.13.1"
+    Task = "(L1) Ensure 'Shutdown: Allow system to be shut down without having to log on' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ShutdownWithoutLogon" `
+                | Select-Object -ExpandProperty "ShutdownWithoutLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+                | Select-Object -ExpandProperty "ObCaseInsensitive"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 2 - 'Prompt for consent on the secure desktop' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+                | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1"
+    Task = "(L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2"
+    Task = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.1"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.2"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.3"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.4"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.5"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.6"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.1.7"
+    Task = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+                | Select-Object -ExpandProperty "AllowInputPersonalization"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+                | Select-Object -ExpandProperty "AllowOnlineTips"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.1"
+    Task = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.2"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+                | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.4"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.5"
+    Task = "(L1) Ensure 'Enable Certificate Padding' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" `
+                -Name "EnableCertPaddingCheck" `
+                | Select-Object -ExpandProperty "EnableCertPaddingCheck"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.6"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.7"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.4.8"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+                | Select-Object -ExpandProperty "AutoAdminLogon"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.4"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.5"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+                | Select-Object -ExpandProperty "KeepAliveTime"
+        
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.6"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+                | Select-Object -ExpandProperty "nonamereleaseondemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.7"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+                | Select-Object -ExpandProperty "PerformRouterDiscovery"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.8"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+                | Select-Object -ExpandProperty "SafeDllSearchMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+                | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+        
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.10"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+                | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.5.12"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+                | Select-Object -ExpandProperty "WarningLevel"
+        
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure DNS over HTTPS (DoH) name resolution' is set to 2 - 'Enabled: Allow DoH' or 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "DoHPolicy" `
+                | Select-Object -ExpandProperty "DoHPolicy"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2 or x == 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.2"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' (or 0 - Disable NetBIOS name resolution)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetbios" `
+                | Select-Object -ExpandProperty "EnableNetbios"
+        
+            if (($regValue -ne 2) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.4.3"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+                | Select-Object -ExpandProperty "EnableFontProviders"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.8.1"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+                | Select-Object -ExpandProperty "EnableLLTDIO"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+                | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+                | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+                | Select-Object -ExpandProperty "EnableRspndr"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+                | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+                | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+                | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.11.4"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+                | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+                if($regValue -eq $null){
+                    return @{
+                        Message = "Registry key not found."
+                        Status = "False"
+                    }
+                }
+                $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+    
+                $missingElements = @()
+                $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+                foreach ($element in $elementsToCheck) {
+                    if ($array -notcontains $element) {
+                        $missingElements += $element
+                    }
+                }
+    
+                if ($missingElements.Length -gt 0) {
+                    return @{
+                        Message = ($missingElements -join " and ") + " not configured correctly."
+                        Status = "False"
+                    }
+                }
+            }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+                | Select-Object -ExpandProperty "DisabledComponents"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+                | Select-Object -ExpandProperty "EnableRegistrars"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+                | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+                | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+                | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+                | Select-Object -ExpandProperty "DisableWPDRegistrar"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+                | Select-Object -ExpandProperty "DisableWcnUi"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+                | Select-Object -ExpandProperty "fMinimizeConnections"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.6.21.2"
+    Task = "(L2) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+                | Select-Object -ExpandProperty "fBlockNonDomain"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+                | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+                | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+                | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+                | Select-Object -ExpandProperty "RpcAuthentication"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+                | Select-Object -ExpandProperty "RpcProtocols"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: 0 - Negotiate' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+                | Select-Object -ExpandProperty "ForceKerberosForRpc"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+                | Select-Object -ExpandProperty "RpcTcpPort"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.8"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+                | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.9"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+                | Select-Object -ExpandProperty "CopyFilesPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.10"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+                | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.7.11"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+                | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+                | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.1"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.2"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 1 - 'Secure Boot' or 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.3"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.4"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.5"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock' (MS Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.6"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.5.7"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+                | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.4"
+    Task = "(L1) Ensure 'Configure security policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.5"
+    Task = "(L1) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.6"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+                | Select-Object -ExpandProperty "EnableCdp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.19.7"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+                | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.1"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.2"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+                | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+                | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+                | Select-Object -ExpandProperty "ExitOnMSICW"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.5"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+                | Select-Object -ExpandProperty "NoWebServices"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.6"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+                | Select-Object -ExpandProperty "NoRegistration"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+                | Select-Object -ExpandProperty "DisableContentFileUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+                | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+                | Select-Object -ExpandProperty "NoPublishingWizard"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+                | Select-Object -ExpandProperty "CEIP"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+                | Select-Object -ExpandProperty "CEIPEnable"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+                | Select-Object -ExpandProperty "Disabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.20.1.13 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+                | Select-Object -ExpandProperty "DoReport"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+                | Select-Object -ExpandProperty "DevicePKInitBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+                | Select-Object -ExpandProperty "DevicePKInitEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.24.1"
+    Task = "(L1) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.1"
+    Task = "(L1) Ensure 'Configure password backup directory' is set to 'Enabled: Active Directory' or 'Enabled: Azure Active Directory'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "BackupDirectory" `
+                | Select-Object -ExpandProperty "BackupDirectory"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PwdExpirationProtectionEnabled" `
+                | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.3"
+    Task = "(L1) Ensure 'Enable password encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "ADPasswordEncryptionEnabled" `
+                | Select-Object -ExpandProperty "ADPasswordEncryptionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordComplexity" `
+                | Select-Object -ExpandProperty "PasswordComplexity"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordLength" `
+                | Select-Object -ExpandProperty "PasswordLength"
+        
+            if ($regValue -lt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordAgeDays" `
+                | Select-Object -ExpandProperty "PasswordAgeDays"
+        
+            if (($regValue -gt 30 -or $regValue -lt 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x >= 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.7"
+    Task = "(L1) Ensure 'Post-authentication actions: Grace period (hours)' is set to 'Enabled: 8 or fewer hours, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationResetDelay" `
+                | Select-Object -ExpandProperty "PostAuthenticationResetDelay"
+        
+            if (($regValue -gt 8 -or $regValue -le 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 8 and x > 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.25.8"
+    Task = "(L1) Ensure 'Post-authentication actions: Actions' is set to 3 - 'Enabled: Reset the password and logoff the managed account' or 5 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationActions" `
+                | Select-Object -ExpandProperty "PostAuthenticationActions"
+        
+            if (($regValue -ne 3) -and ($regValue -ne 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3 or 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.1"
+    Task = "(L1) Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowCustomSSPsAPs" `
+                | Select-Object -ExpandProperty "AllowCustomSSPsAPs"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.26.2"
+    Task = "(NG) Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+                | Select-Object -ExpandProperty "RunAsPPL"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.27.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+                | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+                | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.3"
+    Task = "(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+                | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.4"
+    Task = "(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.5"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+                | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.6"
+    Task = "(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+                | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.28.7"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+                | Select-Object -ExpandProperty "AllowDomainPINLogon"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.31.1"
+    Task = "(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+                | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.31.2"
+    Task = "(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+                | Select-Object -ExpandProperty "UploadUserActivities"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.1"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.2"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.3"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.33.6.4"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+                | Select-Object -ExpandProperty "fAllowUnsolicited"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.35.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+                | Select-Object -ExpandProperty "fAllowToGetHelp"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.1"
+    Task = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+                | Select-Object -ExpandProperty "EnableAuthEpResolution"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.36.2"
+    Task = "(L2) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.39.1"
+    Task = "(L1) Ensure 'Configure validation of ROCA-vulnerable WHfB keys during authentication' is set to 1 - 'Enabled: Audit' or 2 - higher (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM" `
+                -Name "SamNGCKeyROCAValidation" `
+                | Select-Object -ExpandProperty "SamNGCKeyROCAValidation"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+                | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.47.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+                | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.49.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+                | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.1"
+    Task = "(L1) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.9.51.1.2"
+    Task = "(L1) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.3.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+                | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.5.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+                | Select-Object -ExpandProperty "MSAOptional"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.7.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.8.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.10.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+                | Select-Object -ExpandProperty "AllowCamera"
+        
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+                | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+        return @{
+            Message = "Compliant"
+            Status = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+                | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.2"
+    Task = "(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableCloudOptimizedContent" `
+                | Select-Object -ExpandProperty "DisableCloudOptimizedContent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.12.3"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.13.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+                | Select-Object -ExpandProperty "RequirePinForPairing"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+                | Select-Object -ExpandProperty "DisablePasswordReveal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.14.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+                | Select-Object -ExpandProperty "AllowTelemetry"
+        
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0 or x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+                | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+                | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+                | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+                | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+                | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+                | Select-Object -ExpandProperty "LimitDumpCollection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.15.8"
+    Task = "(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+                | Select-Object -ExpandProperty "AllowBuildPreview"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.1"
+    Task = "(L1) Ensure 'Enable App Installer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableAppInstaller" `
+                | Select-Object -ExpandProperty "EnableAppInstaller"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.2"
+    Task = "(L1) Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableExperimentalFeatures" `
+                | Select-Object -ExpandProperty "EnableExperimentalFeatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.3"
+    Task = "(L1) Ensure 'Enable App Installer Hash Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableHashOverride" `
+                | Select-Object -ExpandProperty "EnableHashOverride"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.17.4"
+    Task = "(L1) Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableMSAppInstallerProtocol" `
+                | Select-Object -ExpandProperty "EnableMSAppInstallerProtocol"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+                | Select-Object -ExpandProperty "Retention"
+        
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.25.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.2"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.3"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.28.4"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.36.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+                | Select-Object -ExpandProperty "DisableLocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.40.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+                | Select-Object -ExpandProperty "AllowMessageSync"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.41.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+                | Select-Object -ExpandProperty "DisableUserAuth"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+                | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 C"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+             if ((-not $windefrunning)) {
+                 return @{
+                     Message = "This rule requires Windows Defender Antivirus to be enabled."
+                     Status = "None"
+                 }
+             }
+             $regValue = 0;
+             $regValueTwo = 0;
+             $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+             $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+ 
+             $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+             if($asrTest1){
+                 $regValue = Get-ItemProperty -ErrorAction Stop `
+                     -Path $Path `
+                     -Name $Value `
+                     | Select-Object -ExpandProperty $Value
+             }
+ 
+             $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+             $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+ 
+             $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+             if($asrTest2){
+                 $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                     -Path $Path2 `
+                     -Name $Value2 `
+                     | Select-Object -ExpandProperty $Value2
+             }
+ 
+             if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                 return @{
+                     Message = "Registry value is '$regValue'. Expected: 1"
+                     Status = "False"
+                 }
+             }
+         }
+         catch [System.Management.Automation.PSArgumentException] {
+             return @{
+                 Message = "Registry value not found."
+                 Status = "False"
+             }
+         }
+         catch [System.Management.Automation.ItemNotFoundException] {
+             return @{
+                 Message = "Registry key not found."
+                 Status = "False"
+             }
+         }
+         
+         return @{
+             Message = "Compliant"
+             Status = "True"
+         }
+     }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 G"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe)'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 K"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 L"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+                if ((-not $windefrunning)) {
+                    return @{
+                        Message = "This rule requires Windows Defender Antivirus to be enabled."
+                        Status = "None"
+                    }
+                }
+                $regValue = 0;
+                $regValueTwo = 0;
+                $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+                $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+    
+                $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+                if($asrTest1){
+                    $regValue = Get-ItemProperty -ErrorAction Stop `
+                        -Path $Path `
+                        -Name $Value `
+                        | Select-Object -ExpandProperty $Value
+                }
+    
+                $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+                $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+    
+                $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+                if($asrTest2){
+                    $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                        -Path $Path2 `
+                        -Name $Value2 `
+                        | Select-Object -ExpandProperty $Value2
+                }
+    
+                if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.1.2 M"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.7.1"
+    Task = "(L1) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "EnableFileHashComputation" `
+                | Select-Object -ExpandProperty "EnableFileHashComputation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.1"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.2"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.3"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+                | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.10.4"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+                | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+                | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.1"
+    Task = "(L1) Ensure 'Scan packed executables' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisablePackedExeScanning" `
+                | Select-Object -ExpandProperty "DisablePackedExeScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.2"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.13.3"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+                | Select-Object -ExpandProperty "DisableEmailScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.42.17"
+    Task = "(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "DisableAntiSpyware" `
+                | Select-Object -ExpandProperty "DisableAntiSpyware"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.50.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+                | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.55.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+                | Select-Object -ExpandProperty "DisablePushToInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.2.1"
+    Task = "(L2) Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fSingleSessionPerUser" `
+                | Select-Object -ExpandProperty "fSingleSessionPerUser"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.1"
+    Task = "(L2) Ensure 'Allow UI Automation redirection' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "EnableUiaRedirection" `
+                | Select-Object -ExpandProperty "EnableUiaRedirection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.2"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+                | Select-Object -ExpandProperty "fDisableCcm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.3"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.4"
+    Task = "(L2) Ensure 'Do not allow location redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLocationRedir" `
+                | Select-Object -ExpandProperty "fDisableLocationRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.5"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+                | Select-Object -ExpandProperty "fDisableLPT"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.6"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+                | Select-Object -ExpandProperty "fDisablePNPRedir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.3.7"
+    Task = "(L2) Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableWebAuthn" `
+                | Select-Object -ExpandProperty "fDisableWebAuthn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+                | Select-Object -ExpandProperty "SecurityLayer"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+                | Select-Object -ExpandProperty "UserAuthentication"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+                | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+                | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+                | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.56.3.11.2"
+    Task = "(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+                | Select-Object -ExpandProperty "PerSessionTempDir"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.57.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+                | Select-Object -ExpandProperty "AllowCloudSearch"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.3"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.58.4"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+                | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.62.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+                | Select-Object -ExpandProperty "NoGenTicket"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.75.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.79.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.80.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.1"
+    Task = "(L1) Ensure 'Enable MPR notifications for the system' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableMPR" `
+                | Select-Object -ExpandProperty "EnableMPR"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.81.2"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.1"
+    Task = "(L2) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.86.2"
+    Task = "(L2) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+                | Select-Object -ExpandProperty "AllowAutoConfig"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.88.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.89.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+                | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.91.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+                | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+                | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+                | Select-Object -ExpandProperty "NoAutoUpdate"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+                | Select-Object -ExpandProperty "ScheduledInstallDay"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+                | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+        
+            if (($regValue -lt 180 -or $regValue -gt 365)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+                | Select-Object -ExpandProperty "DeferQualityUpdates"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "18.10.92.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+                | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+                | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+                | Select-Object -ExpandProperty "NoImplicitFeedback"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.5.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+                | Select-Object -ExpandProperty "ScanWithAntiVirus"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.1"
+    Task = "(L1) Ensure 'Configure Windows spotlight on lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+                | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.2"
+    Task = "(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+                | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.3"
+    Task = "(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+                | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.4"
+    Task = "(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+                | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.8.5"
+    Task = "(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSpotlightCollectionOnDesktop" `
+                | Select-Object -ExpandProperty "DisableSpotlightCollectionOnDesktop"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.26.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+                | Select-Object -ExpandProperty "NoInplaceSharing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.42.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "19.7.44.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+                | Select-Object -ExpandProperty "PreventCodecDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..59b8d27
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#SecurityOptions.ps1	
@@ -0,0 +1,133 @@
+[AuditTest] @{
+    Id = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.1.5"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#UserRights.ps1
new file mode 100644
index 0000000..19b8054
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-CIS-3.0.0#UserRights.ps1	
@@ -0,0 +1,1985 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+           if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid = $sidAccount.Value
+                }
+            } else {
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "(L1) Ensure 'Add workstations to domain' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeMachineAccountPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeMachineAccountPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeMachineAccountPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "(L1) Ensure 'Allow log on locally' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.14"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if($hyperVStatus -ne "Enabled"){
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators [Hyper-V-Feature NOT installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' [Hyper-V-Feature installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-83-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.20"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.21"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.22"
+    Task = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-114"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.23"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.24"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.25"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.26"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.27"
+    Task = "(L1) Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.28"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.29"
+    Task = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.30"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+$adfsModule = Get-Module -Name ADFS
+if($null -eq $adfsModule){
+[AuditTest] @{
+    Id = "2.2.31 A"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE NOT installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.31 B"
+    Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE installed]"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-80-1321940109-3370001082-3650459431-215109509-2472514016"
+            "S-1-5-80-2246541699-21809830-3603976364-117610243-975697593"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.32"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if((Get-WindowsFeature -Name web-server).installed -ne $true){
+[AuditTest] @{
+    Id = "2.2.33 A"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed] (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+}
+else{
+[AuditTest] @{
+    Id = "2.2.33 B"
+    Task = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' [IIS Role installed] (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-32-568"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.34"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.35"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.36"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.37"
+    Task = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.38"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' and (when Exchange is running in the environment) 'Exchange Servers' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.39"
+    Task = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.40"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.41"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.42"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.43"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.44"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.45"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.46"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.47"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.48"
+    Task = "(L1) Ensure 'Synchronize directory service data' is set to 'No One' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSyncAgentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSyncAgentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSyncAgentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.49"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AccountPolicies.ps1
new file mode 100644
index 0000000..e75e12b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AccountPolicies.ps1	
@@ -0,0 +1,252 @@
+[AuditTest] @{
+    Id = "V-254285"
+    Task = "Windows Server 2022 account lockout duration must be configured to 15  or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15) -and ($setPolicy -ne 0 )) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15  or x == 0 "
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254286"
+    Task = "Windows Server 2022 must have the number of allowed bad logon attempts configured to three or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 3 -or $setPolicy -eq 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x >= 3 and x != 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254287"
+    Task = "Windows Server 2022 must have the period of time before the bad logon counter is reset configured to 15  or greater."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 15 )) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x >= 15 "
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254288"
+    Task = "Windows Server 2022 password history must be configured to 24 passwords remembered."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254289"
+    Task = "Windows Server 2022 maximum password age must be configured to 60  or less."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -gt 60  -or $setPolicy -eq 0 )) {
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 60  and x != 0 "
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254290"
+    Task = "Windows Server 2022 minimum password age must be configured to at least one day."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -eq 0 )) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x != 0 "
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254291"
+    Task = "Windows Server 2020 minimum password length must be configured to 14 characters."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254292"
+    Task = "Windows Server 2022 must have the built-in Windows password complexity policy enabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254293"
+    Task = "Windows Server 2022 reversible password encryption must be disabled."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AuditPolicies.ps1
new file mode 100644
index 0000000..03362a9
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#AuditPolicies.ps1	
@@ -0,0 +1,1502 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "V-254300 + V-254301"
+    Task = "Windows Server 2022 must be configured to audit Account Logon - Credential Validation successes. Windows Server 2022 must be configured to audit Account Logon - Credential Validation failures."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254302"
+    Task = "Windows Server 2022 must be configured to audit Account Management - Other Account Management Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254303"
+    Task = "Windows Server 2022 must be configured to audit Account Management - Security Group Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254304 + V-254305"
+    Task = "Windows Server 2022 must be configured to audit Account Management - User Account Management successes. Windows Server 2022 must be configured to audit Account Management - User Account Management failures."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254306"
+    Task = "Windows Server 2022 must be configured to audit Detailed Tracking - Plug and Play Events successes."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254307"
+    Task = "Windows Server 2022 must be configured to audit Detailed Tracking - Process Creation successes."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254308 + V-254309"
+    Task = "Windows Server 2022 must be configured to audit Logon/Logoff - Account Lockout successes. Windows Server 2022 must be configured to audit Logon/Logoff - Account Lockout failures."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254310"
+    Task = "Windows Server 2022 must be configured to audit Logon/Logoff - Group Membership successes."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254311"
+    Task = "Windows Server 2022 must be configured to audit logoff successes."
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254312 + V-254313"
+    Task = "Windows Server 2022 must be configured to audit logon successes. Windows Server 2022 must be configured to audit logon failures."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254314"
+    Task = "Windows Server 2022 must be configured to audit Logon/Logoff - Special Logon successes."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254315 + V-254316"
+    Task = "Windows Server 2022 must be configured to audit Object Access - Other Object Access Events successes. Windows Server 2022 must be configured to audit Object Access - Other Object Access Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254317 + V-254318"
+    Task = "Windows Server 2022 must be configured to audit Object Access - Removable Storage successes. Windows Server 2022 must be configured to audit Object Access - Removable Storage failures."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254319 + V-254320"
+    Task = "Windows Server 2022 must be configured to audit Policy Change - Audit Policy Change successes. Windows Server 2022 must be configured to audit Policy Change - Audit Policy Change failures."
+    Test = {
+        # Get the audit policy for the subcategory Audit Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254321"
+    Task = "Windows Server 2022 must be configured to audit Policy Change - Authentication Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254322"
+    Task = "Windows Server 2022 must be configured to audit Policy Change - Authorization Policy Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254323 + V-254324"
+    Task = "Windows Server 2022 must be configured to audit Privilege Use - Sensitive Privilege Use successes. Windows Server 2022 must be configured to audit Privilege Use - Sensitive Privilege Use failures."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254325 + V-254326"
+    Task = "Windows Server 2022 must be configured to audit System - IPsec Driver successes. Windows Server 2022 must be configured to audit System - IPsec Driver failures."
+    Test = {
+        # Get the audit policy for the subcategory IPsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "IPsec Driver"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'IPsec Driver'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254327 + V-254328"
+    Task = "Windows Server 2022 must be configured to audit System - Other System Events successes. Windows Server 2022 must be configured to audit System - Other System Events failures."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254329"
+    Task = "Windows Server 2022 must be configured to audit System - Security State Change successes."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254330"
+    Task = "Windows Server 2022 must be configured to audit System - Security System Extension successes."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254331 + V-254332"
+    Task = "Windows Server 2022 must be configured to audit System - System Integrity successes. Windows Server 2022 must be configured to audit System - System Integrity failures."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254407"
+    Task = "Windows Server 2022 must be configured to audit Account Management - Computer Account Management successes."
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254408 + V-254409"
+    Task = "Windows Server 2022 must be configured to audit DS Access - Directory Service Access successes. Windows Server 2022 must be configured to audit DS Access - Directory Service Access failures."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254410 + V-254411"
+    Task = "Windows Server 2022 must be configured to audit DS Access - Directory Service Changes successes. Windows Server 2022 must be configured to audit DS Access - Directory Service Changes failures."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#RegistrySettings.ps1
new file mode 100644
index 0000000..acf9f50
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#RegistrySettings.ps1	
@@ -0,0 +1,3509 @@
+[AuditTest] @{
+    Id = "V-254276"
+    Task = "Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254277"
+    Task = "Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254333"
+    Task = "Windows Server 2022 must prevent the display of slide shows on the lock screen."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254334"
+    Task = "Windows Server 2022 must have WDigest Authentication disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254335"
+    Task = "Windows Server 2022 Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254336"
+    Task = "Windows Server 2022 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254337"
+    Task = "Windows Server 2022 must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF)-generated routes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254338"
+    Task = "Windows Server 2022 must be configured to ignore NetBIOS name release requests except from WINS servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254339"
+    Task = "Windows Server 2022 insecure logons to an SMB server must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254341"
+    Task = "Windows Server 2022 command line data must be included in process creation events."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+                | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254342"
+    Task = "Windows Server 2022 must be configured to enable Remote host allows delegation of nonexportable credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254344"
+    Task = "Windows Server 2022 Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if (($regValue -ne 1) -and ($regValue -ne 3) -and ($regValue -ne 8)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1 or x == 3 or x == 8"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254345"
+    Task = "Windows Server 2022 group policy objects must be reprocessed even if they have not changed."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254346"
+    Task = "Windows Server 2022 downloading print driver packages over HTTP must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+                | Select-Object -ExpandProperty "DisableWebPnPDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254347"
+    Task = "Windows Server 2022 printing over HTTP must be turned off."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+                | Select-Object -ExpandProperty "DisableHTTPPrinting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254348"
+    Task = "Windows Server 2022 network selection user interface (UI) must not be displayed on the logon screen."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+                | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254349"
+    Task = "Windows Server 2022 users must be prompted to authenticate when the system wakes from sleep (on battery)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+                | Select-Object -ExpandProperty "DCSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254350"
+    Task = "Windows Server 2022 users must be prompted to authenticate when the system wakes from sleep (plugged in)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+                | Select-Object -ExpandProperty "ACSettingIndex"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254351"
+    Task = "Windows Server 2022 Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft."
+    Test = {
+        try {
+            $status = get-service -name pcasvc -ErrorAction Stop
+            if($status.Status -ne "Stopped"){
+                return @{
+                    Message = "Compliant - AppCompat Service is disabled (no inventory data will be collected)."
+                    Status = "True"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" `
+                -Name "DisableInventory" `
+                | Select-Object -ExpandProperty "DisableInventory"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254352"
+    Task = "Windows Server 2022 Autoplay must be turned off for nonvolume devices."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254353"
+    Task = "Windows Server 2022 default AutoRun behavior must be configured to prevent AutoRun commands."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254354"
+    Task = "Windows Server 2022 AutoPlay must be disabled for all drives."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254355"
+    Task = "Windows Server 2022 administrator accounts must not be enumerated during elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+                | Select-Object -ExpandProperty "EnumerateAdministrators"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254358"
+    Task = "Windows Server 2022 Application event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254359"
+    Task = "Windows Server 2022 Security event log size must be configured to 196608 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254360"
+    Task = "Windows Server 2022 System event log size must be configured to 32768 KB or greater."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254361"
+    Task = "Windows Server 2022 Microsoft Defender antivirus SmartScreen must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254362"
+    Task = "Windows Server 2022 Explorer Data Execution Prevention must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+                | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254363"
+    Task = "Windows Server 2022 Turning off File Explorer heap termination on corruption must be disabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+                | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254364"
+    Task = "Windows Server 2022 File Explorer shell protocol must run in protected mode."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+                | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254365"
+    Task = "Windows Server 2022 must not save passwords in the Remote Desktop Client."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254366"
+    Task = "Windows Server 2022 Remote Desktop Services must prevent drive redirection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254367"
+    Task = "Windows Server 2022 Remote Desktop Services must always prompt a client for passwords upon connection."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254368"
+    Task = "Windows Server 2022 Remote Desktop Services must require secure Remote Procedure Call (RPC) communications."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254369"
+    Task = "Windows Server 2022 Remote Desktop Services must be configured with the client connection encryption set to High Level."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254370"
+    Task = "Windows Server 2022 must prevent attachments from being downloaded from RSS feeds."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254371"
+    Task = "Windows Server 2022 must disable Basic authentication for RSS feeds over HTTP."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+                | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254372"
+    Task = "Windows Server 2022 must prevent Indexing of encrypted files."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254373"
+    Task = "Windows Server 2022 must prevent users from changing installation options."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254374"
+    Task = "Windows Server 2022 must disable the Windows Installer Always install with elevated privileges option."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254375"
+    Task = "Windows Server 2022 users must be notified if a web-based program attempts to install software."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+                | Select-Object -ExpandProperty "SafeForScripting"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254376"
+    Task = "Windows Server 2022 must disable automatically signing in the last interactive user after a system-initiated restart."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254377"
+    Task = "Windows Server 2022 PowerShell script block logging must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254378"
+    Task = "Windows Server 2022 Windows Remote Management (WinRM) client must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254379"
+    Task = "Windows Server 2022 Windows Remote Management (WinRM) client must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254380"
+    Task = "Windows Server 2022 Windows Remote Management (WinRM) client must not use Digest authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254381"
+    Task = "Windows Server 2022 Windows Remote Management (WinRM) service must not use Basic authentication."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254382"
+    Task = "Windows Server 2022 Windows Remote Management (WinRM) service must not allow unencrypted traffic."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254383"
+    Task = "Windows Server 2022 Windows Remote Management (WinRM) service must not store RunAs credentials."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254384"
+    Task = "Windows Server 2022 must have PowerShell Transcription enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+                | Select-Object -ExpandProperty "EnableTranscripting"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254416"
+    Task = "Windows Server 2022 domain controllers must require LDAP access signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254417"
+    Task = "Windows Server 2022 domain controllers must be configured to allow reset of machine account passwords."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+                | Select-Object -ExpandProperty "RefusePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254429"
+    Task = "Windows Server 2022 local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain-joined member servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254430"
+    Task = "Windows Server 2022 local users on domain-joined member servers must not be enumerated."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254431"
+    Task = "Windows Server 2022 must restrict unauthenticated Remote Procedure Call (RPC) clients from connecting to the RPC server on domain-joined member servers and standalone or nondomain-joined systems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254433"
+    Task = "Windows Server 2022 must restrict remote calls to the Security Account Manager (SAM) to Administrators on domain-joined member servers and standalone or nondomain-joined systems."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254446"
+    Task = "Windows Server 2022 must prevent local accounts with blank passwords from being used from the network."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254449"
+    Task = "Windows Server 2022 must force audit policy subcategory settings to override audit policy category settings."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254450"
+    Task = "Windows Server 2022 setting Domain member: Digitally encrypt or sign secure channel data (always) must be configured to Enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+                | Select-Object -ExpandProperty "RequireSignOrSeal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254451"
+    Task = "Windows Server 2022 setting Domain member: Digitally encrypt secure channel data (when possible) must be configured to Enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+                | Select-Object -ExpandProperty "SealSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254452"
+    Task = "Windows Server 2022 setting Domain member: Digitally sign secure channel data (when possible) must be configured to Enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+                | Select-Object -ExpandProperty "SignSecureChannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254453"
+    Task = "Windows Server 2022 computer account password must not be prevented from being reset."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+                | Select-Object -ExpandProperty "DisablePasswordChange"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254454"
+    Task = "Windows Server 2022 maximum age for machine account passwords must be configured to 30 days or less."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+                | Select-Object -ExpandProperty "MaximumPasswordAge"
+        
+            if (($regValue -gt 30 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254455"
+    Task = "Windows Server 2022 must be configured to require a strong session key."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+                | Select-Object -ExpandProperty "RequireStrongKey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254456"
+    Task = "Windows Server 2022 machine inactivity limit must be set to 15 minutes or less, locking the system with the screen saver."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254457"
+    Task = "Windows Server 2022 required legal notice must be configured to display before console logon."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+                | Select-Object -ExpandProperty "LegalNoticeText"
+        
+            if ($regValue -ne "See message text below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message text below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254458"
+    Task = "Windows Server 2022 title for legal banner dialog box must be configured with the appropriate text."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+                | Select-Object -ExpandProperty "LegalNoticeCaption"
+        
+            if ($regValue -ne "See message title options below") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: See message title options below"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254460"
+    Task = "Windows Server 2022 setting Microsoft network client: Digitally sign communications (always) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254461"
+    Task = "Windows Server 2022 setting Microsoft network client: Digitally sign communications (if server agrees) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254462"
+    Task = "Windows Server 2022 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254463"
+    Task = "Windows Server 2022 setting Microsoft network server: Digitally sign communications (always) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254464"
+    Task = "Windows Server 2022 setting Microsoft network server: Digitally sign communications (if client agrees) must be configured to Enabled."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True){
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254466"
+    Task = "Windows Server 2022 must not allow anonymous enumeration of Security Account Manager (SAM) accounts."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254467"
+    Task = "Windows Server 2022 must not allow anonymous enumeration of shares."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254468"
+    Task = "Windows Server 2022 must be configured to prevent anonymous users from having the same permissions as the Everyone group."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+                | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254469"
+    Task = "Windows Server 2022 must restrict anonymous access to Named Pipes and Shares."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254470"
+    Task = "Windows Server 2022 services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity instead of authenticating anonymously."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA" `
+                -Name "UseMachineId" `
+                | Select-Object -ExpandProperty "UseMachineId"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254471"
+    Task = "Windows Server 2022 must prevent NTLM from falling back to a Null session."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254472"
+    Task = "Windows Server 2022 must prevent PKU2U authentication using online identities."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\pku2u" `
+                -Name "AllowOnlineID" `
+                | Select-Object -ExpandProperty "AllowOnlineID"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254473"
+    Task = "Windows Server 2022 Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+                | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254474"
+    Task = "Windows Server 2022 must be configured to prevent the storage of the LAN Manager hash of passwords."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254475"
+    Task = "Windows Server 2022 LAN Manager authentication level must be configured to send NTLMv2 response only and to refuse LM and NTLM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254476"
+    Task = "Windows Server 2022 must be configured to at least negotiate signing for LDAP client signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254477"
+    Task = "Windows Server 2022 session security for NTLM SSP-based clients must be configured to require NTLMv2 session security and 128-bit encryption."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254478"
+    Task = "Windows Server 2022 session security for NTLM SSP-based servers must be configured to require NTLMv2 session security and 128-bit encryption."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254479"
+    Task = "Windows Server 2022 users must be required to enter a password to access private keys stored on the computer."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography" `
+                -Name "ForceKeyProtection" `
+                | Select-Object -ExpandProperty "ForceKeyProtection"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254480"
+    Task = "Windows Server 2022 must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254481"
+    Task = "Windows Server 2022 default permissions of global system objects must be strengthened."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254482"
+    Task = "Windows Server 2022 User Account Control (UAC) approval mode for the built-in Administrator must be enabled."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254483"
+    Task = "Windows Server 2022 UIAccess applications must not be allowed to prompt for elevation without using the secure desktop."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableUIADesktopToggle" `
+                | Select-Object -ExpandProperty "EnableUIADesktopToggle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254485"
+    Task = "Windows Server 2022 User Account Control (UAC) must automatically deny standard user requests for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254486"
+    Task = "Windows Server 2022 User Account Control (UAC) must be configured to detect application installations and prompt for elevation."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254487"
+    Task = "Windows Server 2022 User Account Control (UAC) must only elevate UIAccess applications that are installed in secure locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254488"
+    Task = "Windows Server 2022 User Account Control (UAC) must run all administrators in Admin Approval Mode, enabling UAC."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254489"
+    Task = "Windows Server 2022 User Account Control (UAC) must virtualize file and registry write failures to per-user locations."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254490"
+    Task = "Windows Server 2022 must preserve zone information when saving attachments."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+                | Select-Object -ExpandProperty "SaveZoneInformation"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status = "True"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#SecurityOptions.ps1
new file mode 100644
index 0000000..28caf72
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-DISA-V1R1#SecurityOptions.ps1	
@@ -0,0 +1,104 @@
+[AuditTest] @{
+    Id = "V-254445"
+    Task = "Windows Server 2022 must have the built-in guest account disabled."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254447"
+    Task = "Windows Server 2022 built-in administrator account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?!.*\bAdministrator\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254448"
+    Task = "Windows Server 2022 built-in guest account must be renamed."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "V-254465"
+    Task = "Windows Server 2022 must not allow anonymous SID/Name translation."
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AccountPolicies.ps1
new file mode 100644
index 0000000..e0b4a36
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AccountPolicies.ps1	
@@ -0,0 +1,196 @@
+[AuditTest] @{
+    Id = "AccountPolicy-309"
+    Task = "Ensure 'MinimumPasswordLength' is set to '14'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -ne 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x == 14"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-310"
+    Task = "Ensure 'PasswordComplexity' is set to '1'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-311"
+    Task = "Ensure 'PasswordHistorySize' is set to '24'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -ne 24)) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: x == 24"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-312"
+    Task = "Ensure 'LockoutBadCount' is set to '10'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -ne 10)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x == 10"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-313"
+    Task = "Ensure 'ResetLockoutCount' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -ne 15)) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x == 15 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-314"
+    Task = "Ensure 'LockoutDuration' is set to '15'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if (($setPolicy -ne 15)) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x == 15 minutes"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AccountPolicy-315"
+    Task = "Ensure 'ClearTextPassword' is set to '0'."
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AuditPolicies.ps1
new file mode 100644
index 0000000..85187c7
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#AuditPolicies.ps1	
@@ -0,0 +1,1730 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+	Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+		[string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id = "AuditPolicy-250"
+    Task = "Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-251"
+    Task = "Ensure 'Security Group Management' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-252"
+    Task = "Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-253"
+    Task = "Ensure 'Plug and Play Events' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-254"
+    Task = "Ensure 'Process Creation' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-255"
+    Task = "Ensure 'Account Lockout' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-256"
+    Task = "Ensure 'Group Membership' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-257"
+    Task = "Ensure 'Logon' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-258"
+    Task = "Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-259"
+    Task = "Ensure 'Special Logon' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-260"
+    Task = "Ensure 'Detailed File Share' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-261"
+    Task = "Ensure 'File Share' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-262"
+    Task = "Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-263"
+    Task = "Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-264"
+    Task = "Ensure 'Audit Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-265"
+    Task = "Ensure 'Authentication Policy Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-266"
+    Task = "Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory MPSSVC Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "MPSSVC Rule-Level Policy Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'MPSSVC Rule-Level Policy Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-267"
+    Task = "Ensure 'Other Policy Change Events' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-268"
+    Task = "Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-269"
+    Task = "Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-270"
+    Task = "Ensure 'Security State Change' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-271"
+    Task = "Ensure 'Security System Extension' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-272"
+    Task = "Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-449"
+    Task = "Ensure 'Kerberos Authentication Service' is set to 'Success' and is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Authentication Service
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Authentication Service"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Authentication Service'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-450"
+    Task = "Ensure 'Kerberos Service Ticket Operations' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Kerberos Service Ticket Operations
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Service Ticket Operations"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Service Ticket Operations'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-451"
+    Task = "Ensure 'Computer Account Management' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-452"
+    Task = "Ensure 'Other Account Management Events' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-457"
+    Task = "Ensure 'Directory Service Access' is set to 'Failure'."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "AuditPolicy-458"
+    Task = "Ensure 'Directory Service Changes' is set to 'Success'."
+    Test = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+        
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status = "None"
+            }
+        }
+        
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+        
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+        
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+        
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+            | Where-Object { $_ } `
+            | Select-Object -Skip 3
+        
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+        
+        $setting = $Matches[0]
+        
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status = "False"
+                Message = "Set to: $setting"
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#RegistrySettings.ps1
new file mode 100644
index 0000000..b73308f
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#RegistrySettings.ps1	
@@ -0,0 +1,9699 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+[AuditTest] @{
+    Id = "Registry-001"
+    Task = "Ensure 'Remove `"Run this time`" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "RunThisTimeEnabled" `
+                | Select-Object -ExpandProperty "RunThisTimeEnabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-002"
+    Task = "Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" `
+                -Name "VersionCheckEnabled" `
+                | Select-Object -ExpandProperty "VersionCheckEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-003"
+    Task = "Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "RunInvalidSignatures" `
+                | Select-Object -ExpandProperty "RunInvalidSignatures"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-004"
+    Task = "Set registry value 'CheckExeSignatures' to yes."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Download" `
+                -Name "CheckExeSignatures" `
+                | Select-Object -ExpandProperty "CheckExeSignatures"
+        
+            if ($regValue -ne "yes") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: yes"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-005"
+    Task = "Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation64Bit" `
+                | Select-Object -ExpandProperty "Isolation64Bit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-006"
+    Task = "Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "DisableEPMCompat" `
+                | Select-Object -ExpandProperty "DisableEPMCompat"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-007"
+    Task = "Set registry value 'Isolation' to PMEM."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "Isolation" `
+                | Select-Object -ExpandProperty "Isolation"
+        
+            if ($regValue -ne "PMEM") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: PMEM"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-008"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-009"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-010"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-011"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-012"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-013"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-014"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-015"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-016"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-017"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-018"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-019"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-020"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-021"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-022"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-023"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-024"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-025"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-026"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-027"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-028"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-029"
+    Task = "Set registry value '(Reserved)' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "(Reserved)" `
+                | Select-Object -ExpandProperty "(Reserved)"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-030"
+    Task = "Set registry value 'explorer.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "explorer.exe" `
+                | Select-Object -ExpandProperty "explorer.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-031"
+    Task = "Set registry value 'iexplore.exe' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION" `
+                -Name "iexplore.exe" `
+                | Select-Object -ExpandProperty "iexplore.exe"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-032"
+    Task = "Set registry value 'PreventOverrideAppRepUnknown' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverrideAppRepUnknown" `
+                | Select-Object -ExpandProperty "PreventOverrideAppRepUnknown"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-033"
+    Task = "Set registry value 'PreventOverride' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "PreventOverride" `
+                | Select-Object -ExpandProperty "PreventOverride"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-034"
+    Task = "Ensure 'Prevent managing SmartScreen Filter' is set to 'On'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter" `
+                -Name "EnabledV9" `
+                | Select-Object -ExpandProperty "EnabledV9"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-035"
+    Task = "Set registry value 'NoCrashDetection' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions" `
+                -Name "NoCrashDetection" `
+                | Select-Object -ExpandProperty "NoCrashDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-036"
+    Task = "Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security" `
+                -Name "DisableSecuritySettingsCheck" `
+                | Select-Object -ExpandProperty "DisableSecuritySettingsCheck"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-037"
+    Task = "Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX" `
+                -Name "BlockNonAdminActiveXInstall" `
+                | Select-Object -ExpandProperty "BlockNonAdminActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-038"
+    Task = "Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AxInstaller" `
+                -Name "OnlyUseAXISForActiveXInstall" `
+                | Select-Object -ExpandProperty "OnlyUseAXISForActiveXInstall"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-039"
+    Task = "Set registry value 'Security_zones_map_edit' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_zones_map_edit" `
+                | Select-Object -ExpandProperty "Security_zones_map_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-040"
+    Task = "Set registry value 'Security_options_edit' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_options_edit" `
+                | Select-Object -ExpandProperty "Security_options_edit"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-041"
+    Task = "Set registry value 'Security_HKLM_only' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "Security_HKLM_only" `
+                | Select-Object -ExpandProperty "Security_HKLM_only"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-042"
+    Task = "Ensure 'Check for server certificate revocation' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "CertificateRevocation" `
+                | Select-Object -ExpandProperty "CertificateRevocation"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-043"
+    Task = "Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "PreventIgnoreCertErrors" `
+                | Select-Object -ExpandProperty "PreventIgnoreCertErrors"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-044"
+    Task = "Set registry value 'WarnOnBadCertRecving' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "WarnOnBadCertRecving" `
+                | Select-Object -ExpandProperty "WarnOnBadCertRecving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-045"
+    Task = "Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "EnableSSL3Fallback" `
+                | Select-Object -ExpandProperty "EnableSSL3Fallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-046"
+    Task = "Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" `
+                -Name "SecureProtocols" `
+                | Select-Object -ExpandProperty "SecureProtocols"
+        
+            if ($regValue -ne 2560) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2560"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-047"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-048"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-049"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-050"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-051"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Lockdown_Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-052"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-053"
+    Task = "Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" `
+                -Name "UNCAsIntranet" `
+                | Select-Object -ExpandProperty "UNCAsIntranet"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-054"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-055"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-056"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-057"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-058"
+    Task = "Ensure 'Java permissions' is set to 'High safety'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-059"
+    Task = "Ensure 'Java permissions' is set to 'High safety'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-060"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-061"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-062"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-063"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-064"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-065"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-066"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-067"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-068"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-069"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-070"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-071"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-072"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-073"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-074"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-075"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-076"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-077"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-078"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-079"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-080"
+    Task = "Ensure 'Logon options' is set to 'Prompt for user name and password'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 65536) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 65536"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-081"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-082"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-083"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-084"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-085"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-086"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-087"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-088"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-089"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-090"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\3]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-091"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-092"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-093"
+    Task = "Set registry value '140C' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-094"
+    Task = "Ensure 'Allow META REFRESH' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1608" `
+                | Select-Object -ExpandProperty "1608"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-095"
+    Task = "Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1201" `
+                | Select-Object -ExpandProperty "1201"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-096"
+    Task = "Ensure 'Download signed ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1001" `
+                | Select-Object -ExpandProperty "1001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-097"
+    Task = "Ensure 'Navigate windows and frames across different domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1607" `
+                | Select-Object -ExpandProperty "1607"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-098"
+    Task = "Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120b" `
+                | Select-Object -ExpandProperty "120b"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-099"
+    Task = "Ensure 'Use Pop-up Blocker' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1809" `
+                | Select-Object -ExpandProperty "1809"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-100"
+    Task = "Ensure 'Download unsigned ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1004" `
+                | Select-Object -ExpandProperty "1004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-101"
+    Task = "Ensure 'Userdata persistence' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1606" `
+                | Select-Object -ExpandProperty "1606"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-102"
+    Task = "Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1407" `
+                | Select-Object -ExpandProperty "1407"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-103"
+    Task = "Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "160A" `
+                | Select-Object -ExpandProperty "160A"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-104"
+    Task = "Ensure 'Access data sources across domains' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1406" `
+                | Select-Object -ExpandProperty "1406"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-105"
+    Task = "Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2102" `
+                | Select-Object -ExpandProperty "2102"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-106"
+    Task = "Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2004" `
+                | Select-Object -ExpandProperty "2004"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-107"
+    Task = "Ensure 'Automatic prompting for file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2200" `
+                | Select-Object -ExpandProperty "2200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-108"
+    Task = "Ensure 'Allow binary and script behaviors' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2000" `
+                | Select-Object -ExpandProperty "2000"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-109"
+    Task = "Ensure 'Scripting of Java applets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1402" `
+                | Select-Object -ExpandProperty "1402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-110"
+    Task = "Ensure 'Allow file downloads' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1803" `
+                | Select-Object -ExpandProperty "1803"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-111"
+    Task = "Ensure 'Allow loading of XAML files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2402" `
+                | Select-Object -ExpandProperty "2402"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-112"
+    Task = "Ensure 'Allow active scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1400" `
+                | Select-Object -ExpandProperty "1400"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-113"
+    Task = "Ensure 'Logon options' is set to 'Anonymous logon'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1A00" `
+                | Select-Object -ExpandProperty "1A00"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-114"
+    Task = "Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2001" `
+                | Select-Object -ExpandProperty "2001"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-115"
+    Task = "Ensure 'Turn on Protected Mode' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2500" `
+                | Select-Object -ExpandProperty "2500"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-116"
+    Task = "Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1409" `
+                | Select-Object -ExpandProperty "1409"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-117"
+    Task = "Ensure 'Java permissions' is set to 'Disable Java'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1C00" `
+                | Select-Object -ExpandProperty "1C00"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-118"
+    Task = "Ensure 'Allow scriptlets' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1209" `
+                | Select-Object -ExpandProperty "1209"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-119"
+    Task = "Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "270C" `
+                | Select-Object -ExpandProperty "270C"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-120"
+    Task = "Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1206" `
+                | Select-Object -ExpandProperty "1206"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-121"
+    Task = "Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2708" `
+                | Select-Object -ExpandProperty "2708"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-122"
+    Task = "Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1802" `
+                | Select-Object -ExpandProperty "1802"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-123"
+    Task = "Ensure 'Allow updates to status bar via script' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2103" `
+                | Select-Object -ExpandProperty "2103"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-124"
+    Task = "Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2709" `
+                | Select-Object -ExpandProperty "2709"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-125"
+    Task = "Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1405" `
+                | Select-Object -ExpandProperty "1405"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-126"
+    Task = "Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2101" `
+                | Select-Object -ExpandProperty "2101"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-127"
+    Task = "Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'. [Zones\4]"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "2301" `
+                | Select-Object -ExpandProperty "2301"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-128"
+    Task = "Ensure 'Run ActiveX controls and plugins' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1200" `
+                | Select-Object -ExpandProperty "1200"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-129"
+    Task = "Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1804" `
+                | Select-Object -ExpandProperty "1804"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-130"
+    Task = "Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "1806" `
+                | Select-Object -ExpandProperty "1806"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-131"
+    Task = "Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "120c" `
+                | Select-Object -ExpandProperty "120c"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-132"
+    Task = "Set registry value '140C' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" `
+                -Name "140C" `
+                | Select-Object -ExpandProperty "140C"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-133"
+    Task = "Ensure 'Turn off Autoplay' is set to 'All drives'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+                | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+        
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-134"
+    Task = "Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+                | Select-Object -ExpandProperty "NoAutorun"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-135"
+    Task = "Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+                | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-136"
+    Task = "Set registry value 'LocalAccountTokenFilterPolicy' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+                | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-143"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-153"
+    Task = "Set registry value 'NoLockScreenCamera' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+                | Select-Object -ExpandProperty "NoLockScreenCamera"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-157"
+    Task = "Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+                | Select-Object -ExpandProperty "EnumerateLocalUsers"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-169"
+    Task = "Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+                | Select-Object -ExpandProperty "RestrictRemoteClients"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-186"
+    Task = "Set registry value 'AdmPwdEnabled' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd" `
+                -Name "AdmPwdEnabled" `
+                | Select-Object -ExpandProperty "AdmPwdEnabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-197"
+    Task = "Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA)."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictRemoteSAM" `
+                | Select-Object -ExpandProperty "RestrictRemoteSAM"
+        
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-198"
+    Task = "Set registry value 'EnablePlainTextPassword' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+                | Select-Object -ExpandProperty "EnablePlainTextPassword"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-199"
+    Task = "Set registry value 'NoLMHash' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+                | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-200"
+    Task = "Set registry value 'LimitBlankPasswordUse' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+                | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-201"
+    Task = "Set registry value 'ProtectionMode' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+                | Select-Object -ExpandProperty "ProtectionMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-202"
+    Task = "Set registry value 'RestrictAnonymous' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+                | Select-Object -ExpandProperty "RestrictAnonymous"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-203"
+    Task = "Set registry value 'RestrictNullSessAccess' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+                | Select-Object -ExpandProperty "RestrictNullSessAccess"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-204"
+    Task = "Set registry value 'RestrictAnonymousSAM' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+                | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-205"
+    Task = "Set registry value 'requirestrongkey' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requirestrongkey" `
+                | Select-Object -ExpandProperty "requirestrongkey"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-206"
+    Task = "Set registry value 'requiresecuritysignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+                       try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-207"
+    Task = "Set registry value 'RequireSecuritySignature' to 1."
+    Test = {
+        try {
+            if((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True){
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        catch {
+            try{
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+                
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-208"
+    Task = "Set registry value 'signsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "signsecurechannel" `
+                | Select-Object -ExpandProperty "signsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-277"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'. (Member Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-279"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+                | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-280"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+                | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+            
+            if ($regValue -eq 3) {
+                return @{
+                    Message = "Set to 'Secure Boot and DMA Protection' which is more secure."
+                    Status = "True"
+                }
+            }
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-281"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+                | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-282"
+    Task = "Set registry value 'HVCIMATRequired' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+                | Select-Object -ExpandProperty "HVCIMATRequired"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-283"
+    Task = "Ensure 'Turn On Virtualization Based Security' is set to 'Disabled'. (Domain Controller)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+                | Select-Object -ExpandProperty "LsaCfgFlags"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-284"
+    Task = "Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+                | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-285"
+    Task = "Set registry value 'PUAProtection' to 1."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+                | Select-Object -ExpandProperty "PUAProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-286"
+    Task = "Set registry value 'MpCloudBlockLevel' to 2."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine" `
+                -Name "MpCloudBlockLevel" `
+                | Select-Object -ExpandProperty "MpCloudBlockLevel"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-287"
+    Task = "Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+                | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-288"
+    Task = "Ensure 'Turn off real-time protection' is set to 'Disabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+                | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-289"
+    Task = "Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+                | Select-Object -ExpandProperty "DisableScriptScanning"
+        
+            if (($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-290"
+    Task = "Ensure 'Scan removable drives' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+                | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-291"
+    Task = "Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SubmitSamplesConsent" `
+                | Select-Object -ExpandProperty "SubmitSamplesConsent"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-292"
+    Task = "Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+                | Select-Object -ExpandProperty "SpynetReporting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-293"
+    Task = "Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "DisableBlockAtFirstSeen" `
+                | Select-Object -ExpandProperty "DisableBlockAtFirstSeen"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-294"
+    Task = "Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }       
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+            
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-295"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-296"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-297"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-298"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-299"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-300"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)"
+    Test = {
+       try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-301"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-302"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-303"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-304"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-305"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-306"
+    Task = "Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "c1db55ab-c21a-4637-bb3f-a12568109d35"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "c1db55ab-c21a-4637-bb3f-a12568109d35"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-307"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)"
+    Test = {
+            try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if($asrTest1){
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                    | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if($asrTest2){
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                    | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-308"
+    Task = "Set registry value 'EnableNetworkProtection' to 1."
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+                | Select-Object -ExpandProperty "EnableNetworkProtection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-316"
+    Task = "Set registry value 'FormSuggest Passwords' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-317"
+    Task = "Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest PW Ask" `
+                | Select-Object -ExpandProperty "FormSuggest PW Ask"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-318"
+    Task = "Set registry value 'FormSuggest Passwords' to no."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main" `
+                -Name "FormSuggest Passwords" `
+                | Select-Object -ExpandProperty "FormSuggest Passwords"
+        
+            if ($regValue -ne "no") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: no"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-322"
+    Task = "Set registry value 'AllowEncryptionOracle' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+                | Select-Object -ExpandProperty "AllowEncryptionOracle"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-323"
+    Task = "Set registry value 'EnhancedAntiSpoofing' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+                | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-324"
+    Task = "Ensure 'Prevent downloading of enclosures' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+                | Select-Object -ExpandProperty "DisableEnclosureDownload"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-325"
+    Task = "Set registry value 'AllowProtectedCreds' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+                | Select-Object -ExpandProperty "AllowProtectedCreds"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-326"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '32768'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 32768) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 32768"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-327"
+    Task = "Ensure 'Specify the maximum log file size (KB)' is set to '196608'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+                | Select-Object -ExpandProperty "MaxSize"
+        
+            if ($regValue -ne 196608) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 196608"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-329"
+    Task = "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+                | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-330"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+                | Select-Object -ExpandProperty "NoBackgroundPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-331"
+    Task = "Ensure 'Configure registry policy processing' is set to '0'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+                | Select-Object -ExpandProperty "NoGPOListChanges"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-332"
+    Task = "Set registry value 'AlwaysInstallElevated' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+                | Select-Object -ExpandProperty "AlwaysInstallElevated"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-333"
+    Task = "Ensure 'Allow user control over installs' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+                | Select-Object -ExpandProperty "EnableUserControl"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-334"
+    Task = "Set registry value 'DeviceEnumerationPolicy' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+                | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-335"
+    Task = "Ensure 'Enable insecure guest logons' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+                | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-336"
+    Task = "Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+                | Select-Object -ExpandProperty "\\*\NETLOGON"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-337"
+    Task = "Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1, RequireIntegrity=1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+                | Select-Object -ExpandProperty "\\*\SYSVOL"
+        
+            if($regValue -eq $null){
+                return @{
+                    Message = "Registry key not found."
+                    Status = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object{ $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-339"
+    Task = "Set registry value 'NoLockScreenSlideshow' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+                | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-340"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-341"
+    Task = "Ensure 'Turn on PowerShell Script Block Logging' is not set."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockInvocationLogging" `
+                | Select-Object -ExpandProperty "EnableScriptBlockInvocationLogging"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-343"
+    Task = "Set registry value 'EnforcementMode' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\SrpV2\Appx" `
+                -Name "EnforcementMode" `
+                | Select-Object -ExpandProperty "EnforcementMode"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-358"
+    Task = "Ensure 'Configure Windows SmartScreen' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+                | Select-Object -ExpandProperty "EnableSmartScreen"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-359"
+    Task = "Set registry value 'ShellSmartScreenLevel' to Block."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+                | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+        
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-360"
+    Task = "Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+                | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-361"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-362"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-363"
+    Task = "Ensure 'Disallow Digest authentication' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+                | Select-Object -ExpandProperty "AllowDigest"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-364"
+    Task = "Ensure 'Allow Basic authentication' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+                | Select-Object -ExpandProperty "AllowBasic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-365"
+    Task = "Ensure 'Allow unencrypted traffic' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+                | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-366"
+    Task = "Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+                | Select-Object -ExpandProperty "DisableRunAs"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-367"
+    Task = "Ensure 'Turn off multicast name resolution' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+                | Select-Object -ExpandProperty "EnableMulticast"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-368"
+    Task = "Ensure 'Limits print driver installation to Administrators' is set to 'Enabled' (Automated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+                | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+        
+            if (($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-369"
+    Task = "Set registry value 'DisablePasswordSaving' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+                | Select-Object -ExpandProperty "DisablePasswordSaving"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-370"
+    Task = "Set registry value 'fDisableCdm' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+                | Select-Object -ExpandProperty "fDisableCdm"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-371"
+    Task = "Set registry value 'fPromptForPassword' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+                | Select-Object -ExpandProperty "fPromptForPassword"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-372"
+    Task = "Set registry value 'fEncryptRPCTraffic' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+                | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-373"
+    Task = "Set registry value 'MinEncryptionLevel' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+                | Select-Object -ExpandProperty "MinEncryptionLevel"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-375"
+    Task = "Domain: Set registry value 'DefaultOutboundAction' to 0."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-376"
+    Task = "Domain: Set registry value 'DefaultInboundAction' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-377"
+    Task = "Domain: Set registry value 'EnableFirewall' to 1."
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller"}
+    )
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType        
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-378"
+    Task = "Private: Set registry value 'EnableFirewall' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-379"
+    Task = "Private: Set registry value 'DefaultInboundAction' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-380"
+    Task = "Private: Set registry value 'DefaultOutboundAction' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-381"
+    Task = "Public: Set registry value 'EnableFirewall' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-382"
+    Task = "Public: Set registry value 'DefaultOutboundAction' to 0."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultOutboundAction"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-383"
+    Task = "Public: Set registry value 'DefaultInboundAction' to 1."
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-384"
+    Task = "Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+                | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-385"
+    Task = "Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+                | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-386"
+    Task = "Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+                | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-387"
+    Task = "Set registry value 'DriverLoadPolicy' to 3."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+                | Select-Object -ExpandProperty "DriverLoadPolicy"
+        
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-388"
+    Task = "Ensure 'Configure SMB v1 server' is set to 'Disabled'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+                | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-389"
+    Task = "Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MrxSmb10" `
+                -Name "Start" `
+                | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-390"
+    Task = "Set registry value 'NoNameReleaseOnDemand' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NoNameReleaseOnDemand" `
+                | Select-Object -ExpandProperty "NoNameReleaseOnDemand"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-391"
+    Task = "Set registry value 'NodeType' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters" `
+                -Name "NodeType" `
+                | Select-Object -ExpandProperty "NodeType"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-392"
+    Task = "Set registry value 'EnableICMPRedirect' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+                | Select-Object -ExpandProperty "EnableICMPRedirect"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-393"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-394"
+    Task = "Set registry value 'DisableIPSourceRouting' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+                | Select-Object -ExpandProperty "DisableIPSourceRouting"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-395"
+    Task = "Set registry value 'allownullsessionfallback' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "allownullsessionfallback" `
+                | Select-Object -ExpandProperty "allownullsessionfallback"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-396"
+    Task = "Set registry value 'InactivityTimeoutSecs' to 900."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+                | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+        
+            if ($regValue -ne 900) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 900"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-397"
+    Task = "Set registry value 'ScRemoveOption' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+                | Select-Object -ExpandProperty "ScRemoveOption"
+        
+            if ($regValue -ne "1") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-398"
+    Task = "Set registry value 'SCENoApplyLegacyAuditPolicy' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+                | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-399"
+    Task = "Set registry value 'EnableVirtualization' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+                | Select-Object -ExpandProperty "EnableVirtualization"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-400"
+    Task = "Set registry value 'FilterAdministratorToken' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+                | Select-Object -ExpandProperty "FilterAdministratorToken"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-401"
+    Task = "Set registry value 'EnableLUA' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+                | Select-Object -ExpandProperty "EnableLUA"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-402"
+    Task = "Set registry value 'EnableInstallerDetection' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+                | Select-Object -ExpandProperty "EnableInstallerDetection"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-403"
+    Task = "Set registry value 'ConsentPromptBehaviorAdmin' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-404"
+    Task = "Set registry value 'ConsentPromptBehaviorUser' to 0."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+                | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-405"
+    Task = "Set registry value 'EnableSecureUIAPaths' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+                | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-406"
+    Task = "Set registry value 'LDAPClientIntegrity' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+                | Select-Object -ExpandProperty "LDAPClientIntegrity"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-407"
+    Task = "Set registry value 'LmCompatibilityLevel' to 5."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+                | Select-Object -ExpandProperty "LmCompatibilityLevel"
+        
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-408"
+    Task = "Set registry value 'NTLMMinClientSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+                | Select-Object -ExpandProperty "NTLMMinClientSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-409"
+    Task = "Set registry value 'sealsecurechannel' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "sealsecurechannel" `
+                | Select-Object -ExpandProperty "sealsecurechannel"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-410"
+    Task = "Set registry value 'NTLMMinServerSec' to 537395200."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+                | Select-Object -ExpandProperty "NTLMMinServerSec"
+        
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-411"
+    Task = "Set registry value 'requiresignorseal' to 1."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "requiresignorseal" `
+                | Select-Object -ExpandProperty "requiresignorseal"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-423"
+    Task = "Set registry value 'LDAPServerIntegrity' to 2."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "Registry-424"
+    Task = "Ensure 'Extended Protection for LDAP Authentication (Domain Controllers only)' is set to 'Enabled, always (recommended)'."
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LdapEnforceChannelBinding" `
+                | Select-Object -ExpandProperty "LdapEnforceChannelBinding"
+        
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#SecurityOptions.ps1
new file mode 100644
index 0000000..e074f0b
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#SecurityOptions.ps1	
@@ -0,0 +1,26 @@
+[AuditTest] @{
+    Id = "SecurityOption-226"
+    Task = "Ensure 'LSAAnonymousNameLookup' is set to '0'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+        
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#UserRights.ps1
new file mode 100644
index 0000000..54d4535
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2022-Microsoft-FINAL#UserRights.ps1	
@@ -0,0 +1,925 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE"){
+                if ($name -eq "Enterprise Admins"){
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins"){
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators" = "S-1-5-32-544"
+                "Guests" = "S-1-5-32-546"
+                "Local account" = "S-1-5-113"
+                "Local Service" = "S-1-5-19"
+                "Network Service" = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users" = "S-1-5-11"
+                "Remote Desktop Users" = "S-1-5-32-555"
+                "Service" = "S-1-5-6"
+                "Users" = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and $hyperVStatus -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            return @{
+                Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                Sid = $sidAccount.Value
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+	}
+}
+
+# Tests
+[AuditTest] @{
+    Id = "UserRight-227"
+    Task = "Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-228"
+    Task = "Ensure 'SeCreateTokenPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-230"
+    Task = "Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-231"
+    Task = "Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-232"
+    Task = "Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-233"
+    Task = "Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-234"
+    Task = "Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-20"
+            "S-1-5-19"
+            "S-1-5-6"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-235"
+    Task = "Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-236"
+    Task = "Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-237"
+    Task = "Ensure 'SeEnableDelegationPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-238"
+    Task = "Ensure 'SeCreatePermanentPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-239"
+    Task = "Ensure 'SeDebugPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        #No UserRights on System comparing to publisher recommendation
+        if($null -eq $currentUserRights -and $identityAccounts.Count -gt 0){
+            return @{
+                Status = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if($currentUserRights.Count -lt $identityAccounts.Count){
+            $users = ""
+            foreach($currentUser in $currentUserRights){
+                $users += $currentUser.Values
+            }
+            return @{
+                Status = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-240"
+    Task = "Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-241"
+    Task = "Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-242"
+    Task = "Ensure 'SeNetworkLogonRight' is set to 'S-1-5-11, S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-243"
+    Task = "Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-114'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-114"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDenyNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-244"
+    Task = "Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-20"
+            "S-1-5-19"
+            "S-1-5-6"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-245"
+    Task = "Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-246"
+    Task = "Ensure 'SeLockMemoryPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-247"
+    Task = "Ensure 'SeTcbPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-248"
+    Task = "Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-249"
+    Task = "Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-113'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-428"
+    Task = "Ensure 'SeTrustedCredManAccessPrivilege' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "UserRight-429"
+    Task = "Ensure 'SeRemoteInteractiveLogonRight' is set to 'S-1-5-32-544'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AccountPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AccountPolicies.ps1
new file mode 100644
index 0000000..57095cb
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AccountPolicies.ps1	
@@ -0,0 +1,257 @@
+[AuditTest] @{
+    Id   = "1.1.1"
+    Task = "(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordHistorySize"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -ne 24) {
+            return @{
+                Message = "'PasswordHistorySize' currently set to: $setPolicy. Expected: 24"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2"
+    Task = "(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MaximumPasswordAge"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -gt 365 -or $setPolicy -le 0){
+            if ($setPolicy -eq -1) {
+                #Setting 0 in GroupPolicy translates to -1 in AuditPolicy
+                $setPolicy = "Password never expires"
+            }
+            return @{
+                Message = "'MaximumPasswordAge' currently set to: $setPolicy. Expected: x <= 365 days and x > 0 days"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.3"
+    Task = "(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordAge"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -lt 1 ) {
+            return @{
+                Message = "'MinimumPasswordAge' currently set to: $setPolicy. Expected: x >= 1 days"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4"
+    Task = "(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["MinimumPasswordLength"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -lt 14)) {
+            return @{
+                Message = "'MinimumPasswordLength' currently set to: $setPolicy. Expected: x >= 14"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.5"
+    Task = "(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["PasswordComplexity"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -ne 1) {
+            return @{
+                Message = "'PasswordComplexity' currently set to: $setPolicy. Expected: 1"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.7"
+    Task = "(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.1"
+    Task = "(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutDuration"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if ($setPolicy -lt 15 -or $setPolicy -gt 99999 ) {
+            return @{
+                Message = "'LockoutDuration' currently set to: $setPolicy. Expected: x >= 15 minutes and x <= 99999 minutes"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.2"
+    Task = "(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["LockoutBadCount"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -gt 5 -or $setPolicy -le 0)) {
+            return @{
+                Message = "'LockoutBadCount' currently set to: $setPolicy. Expected: x <= 5 and x > 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.4"
+    Task = "(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ResetLockoutCount"]
+
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+
+        if (($setPolicy -gt 99999 -or $setPolicy -lt 15 )) {
+            return @{
+                Message = "'ResetLockoutCount' currently set to: $setPolicy. Expected: x <= 99999 minutes and x >= 15 minutes"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AuditPolicies.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AuditPolicies.ps1
new file mode 100644
index 0000000..3ae6c46
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#AuditPolicies.ps1	
@@ -0,0 +1,2036 @@
+# Common
+function Get-AuditPolicySubcategoryGUID {
+    Param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+        [string] $Subcategory
+    )
+
+    $map = @{
+        "Security State Change"                  = "{0CCE9210-69AE-11D9-BED3-505054503030}"
+        "Security System Extension"              = "{0CCE9211-69AE-11D9-BED3-505054503030}"
+        "System Integrity"                       = "{0CCE9212-69AE-11D9-BED3-505054503030}"
+        "IPsec Driver"                           = "{0CCE9213-69AE-11D9-BED3-505054503030}"
+        "Other System Events"                    = "{0CCE9214-69AE-11D9-BED3-505054503030}"
+        "Logon"                                  = "{0CCE9215-69AE-11D9-BED3-505054503030}"
+        "Logoff"                                 = "{0CCE9216-69AE-11D9-BED3-505054503030}"
+        "Account Lockout"                        = "{0CCE9217-69AE-11D9-BED3-505054503030}"
+        "IPsec Main Mode"                        = "{0CCE9218-69AE-11D9-BED3-505054503030}"
+        "IPsec Quick Mode"                       = "{0CCE9219-69AE-11D9-BED3-505054503030}"
+        "IPsec Extended Mode"                    = "{0CCE921A-69AE-11D9-BED3-505054503030}"
+        "Special Logon"                          = "{0CCE921B-69AE-11D9-BED3-505054503030}"
+        "Other Logon/Logoff Events"              = "{0CCE921C-69AE-11D9-BED3-505054503030}"
+        "Network Policy Server"                  = "{0CCE9243-69AE-11D9-BED3-505054503030}"
+        "User / Device Claims"                   = "{0CCE9247-69AE-11D9-BED3-505054503030}"
+        "Group Membership"                       = "{0CCE9249-69AE-11D9-BED3-505054503030}"
+        "File System"                            = "{0CCE921D-69AE-11D9-BED3-505054503030}"
+        "Registry"                               = "{0CCE921E-69AE-11D9-BED3-505054503030}"
+        "Kernel Object"                          = "{0CCE921F-69AE-11D9-BED3-505054503030}"
+        "SAM"                                    = "{0CCE9220-69AE-11D9-BED3-505054503030}"
+        "Certification Services"                 = "{0CCE9221-69AE-11D9-BED3-505054503030}"
+        "Application Generated"                  = "{0CCE9222-69AE-11D9-BED3-505054503030}"
+        "Handle Manipulation"                    = "{0CCE9223-69AE-11D9-BED3-505054503030}"
+        "File Share"                             = "{0CCE9224-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Packet Drop"         = "{0CCE9225-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Connection"          = "{0CCE9226-69AE-11D9-BED3-505054503030}"
+        "Other Object Access Events"             = "{0CCE9227-69AE-11D9-BED3-505054503030}"
+        "Detailed File Share"                    = "{0CCE9244-69AE-11D9-BED3-505054503030}"
+        "Removable Storage"                      = "{0CCE9245-69AE-11D9-BED3-505054503030}"
+        "Central Policy Staging"                 = "{0CCE9246-69AE-11D9-BED3-505054503030}"
+        "Sensitive Privilege Use"                = "{0CCE9228-69AE-11D9-BED3-505054503030}"
+        "Non Sensitive Privilege Use"            = "{0CCE9229-69AE-11D9-BED3-505054503030}"
+        "Other Privilege Use Events"             = "{0CCE922A-69AE-11D9-BED3-505054503030}"
+        "Process Creation"                       = "{0CCE922B-69AE-11D9-BED3-505054503030}"
+        "Process Termination"                    = "{0CCE922C-69AE-11D9-BED3-505054503030}"
+        "DPAPI Activity"                         = "{0CCE922D-69AE-11D9-BED3-505054503030}"
+        "RPC Events"                             = "{0CCE922E-69AE-11D9-BED3-505054503030}"
+        "Plug and Play Events"                   = "{0CCE9248-69AE-11D9-BED3-505054503030}"
+        "Token Right Adjusted Events"            = "{0CCE924A-69AE-11D9-BED3-505054503030}"
+        "Audit Policy Change"                    = "{0CCE922F-69AE-11D9-BED3-505054503030}"
+        "Authentication Policy Change"           = "{0CCE9230-69AE-11D9-BED3-505054503030}"
+        "Authorization Policy Change"            = "{0CCE9231-69AE-11D9-BED3-505054503030}"
+        "MPSSVC Rule-Level Policy Change"        = "{0CCE9232-69AE-11D9-BED3-505054503030}"
+        "Filtering Platform Policy Change"       = "{0CCE9233-69AE-11D9-BED3-505054503030}"
+        "Other Policy Change Events"             = "{0CCE9234-69AE-11D9-BED3-505054503030}"
+        "User Account Management"                = "{0CCE9235-69AE-11D9-BED3-505054503030}"
+        "Computer Account Management"            = "{0CCE9236-69AE-11D9-BED3-505054503030}"
+        "Security Group Management"              = "{0CCE9237-69AE-11D9-BED3-505054503030}"
+        "Distribution Group Management"          = "{0CCE9238-69AE-11D9-BED3-505054503030}"
+        "Application Group Management"           = "{0CCE9239-69AE-11D9-BED3-505054503030}"
+        "Other Account Management Events"        = "{0CCE923A-69AE-11D9-BED3-505054503030}"
+        "Directory Service Access"               = "{0CCE923B-69AE-11D9-BED3-505054503030}"
+        "Directory Service Changes"              = "{0CCE923C-69AE-11D9-BED3-505054503030}"
+        "Directory Service Replication"          = "{0CCE923D-69AE-11D9-BED3-505054503030}"
+        "Detailed Directory Service Replication" = "{0CCE923E-69AE-11D9-BED3-505054503030}"
+        "Credential Validation"                  = "{0CCE923F-69AE-11D9-BED3-505054503030}"
+        "Kerberos Service Ticket Operations"     = "{0CCE9240-69AE-11D9-BED3-505054503030}"
+        "Other Account Logon Events"             = "{0CCE9241-69AE-11D9-BED3-505054503030}"
+        "Kerberos Authentication Service"        = "{0CCE9242-69AE-11D9-BED3-505054503030}"
+    }
+
+    if ($map.ContainsKey($Subcategory)) {
+        return $map[$Subcategory]
+    }
+    return ""
+}
+
+# Tests
+[AuditTest] @{
+    Id   = "17.1.1"
+    Task = "(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Credential Validation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Credential Validation"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Credential Validation'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "17.1.2"
+    Task        = "(L1) Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        # Get the audit policy for the subcategory Kerberos Authentication Service
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Authentication Service"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Authentication Service'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "17.1.3"
+    Task        = "(L1) Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        # Get the audit policy for the subcategory Kerberos Service Ticket Operations
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Kerberos Service Ticket Operations"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Kerberos Service Ticket Operations'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.2.1"
+    Task = "(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Application Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Application Group Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Application Group Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "17.2.2"
+    Task        = "(L1) Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        # Get the audit policy for the subcategory Computer Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Computer Account Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Computer Account Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "17.2.3"
+    Task        = "(L1) Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        # Get the audit policy for the subcategory Distribution Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Distribution Group Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Distribution Group Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "17.2.4"
+    Task        = "(L1) Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        # Get the audit policy for the subcategory Other Account Management Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Account Management Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Account Management Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.2.5"
+    Task = "(L1) Ensure 'Audit Security Group Management' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security Group Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security Group Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security Group Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.2.6"
+    Task = "(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory User Account Management
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "User Account Management"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'User Account Management'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.3.1"
+    Task = "(L1) Ensure 'Audit PNP Activity' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Plug and Play Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Plug and Play Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Plug and Play Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.3.2"
+    Task = "(L1) Ensure 'Audit Process Creation' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Process Creation
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Process Creation"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Process Creation'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "17.4.1"
+    Task        = "(L1) Ensure 'Audit Directory Service Access' is set to include 'Failure' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        # Get the audit policy for the subcategory Directory Service Access
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Access"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Access'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "17.4.2"
+    Task        = "(L1) Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        # Get the audit policy for the subcategory Directory Service Changes
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Directory Service Changes"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Directory Service Changes'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.1"
+    Task = "(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Account Lockout
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Account Lockout"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Account Lockout'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.2"
+    Task = "(L1) Ensure 'Audit Group Membership' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Group Membership
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Group Membership"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Group Membership'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.3"
+    Task = "(L1) Ensure 'Audit Logoff' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Logoff
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logoff"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logoff'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.4"
+    Task = "(L1) Ensure 'Audit Logon' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Logon"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Logon'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.5"
+    Task = "(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Logon/Logoff Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Logon/Logoff Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Logon/Logoff Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.5.6"
+    Task = "(L1) Ensure 'Audit Special Logon' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Special Logon
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Special Logon"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Special Logon'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.1"
+    Task = "(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Detailed File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Detailed File Share"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Detailed File Share'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.2"
+    Task = "(L1) Ensure 'Audit File Share' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory File Share
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "File Share"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'File Share'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.3"
+    Task = "(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Object Access Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Object Access Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Object Access Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.6.4"
+    Task = "(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Removable Storage
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Removable Storage"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Removable Storage'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.1"
+    Task = "(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Audit Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Audit Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Audit Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.2"
+    Task = "(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authentication Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authentication Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authentication Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.3"
+    Task = "(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Authorization Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Authorization Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Authorization Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.4"
+    Task = "(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Mpssvc Rule-Level Policy Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Mpssvc Rule-Level Policy Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Mpssvc Rule-Level Policy Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.7.5"
+    Task = "(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other Policy Change Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other Policy Change Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other Policy Change Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Failure" -and $setting -ne "Success and Failure" -And $setting -ne "Fehler" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.8.1"
+    Task = "(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Sensitive Privilege Use
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Sensitive Privilege Use"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Sensitive Privilege Use'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.1"
+    Task = "(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Ipsec Driver
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Ipsec Driver"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Ipsec Driver'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.2"
+    Task = "(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory Other System Events
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Other System Events"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Other System Events'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.3"
+    Task = "(L1) Ensure 'Audit Security State Change' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security State Change
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security State Change"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security State Change'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.4"
+    Task = "(L1) Ensure 'Audit Security System Extension' is set to include 'Success'"
+    Test = {
+        # Get the audit policy for the subcategory Security System Extension
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "Security System Extension"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'Security System Extension'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success" -and $setting -ne "Success and Failure" -And $setting -ne "Erfolg" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "17.9.5"
+    Task = "(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'"
+    Test = {
+        # Get the audit policy for the subcategory System Integrity
+        $subCategoryGUID = Get-AuditPolicySubcategoryGUID -Subcategory "System Integrity"
+
+        if ([string]::IsNullOrEmpty($subCategoryGUID)) {
+            return @{
+                Message = "Cannot get Subcategory 'System Integrity'"
+                Status  = "None"
+            }
+        }
+
+        $auditPolicyString = auditpol /get /subcategory:"$subCategoryGUID"
+
+        # auditpol does not throw exceptions, so test the results and throw if needed
+        if ($LASTEXITCODE -ne 0) {
+            $errorString = "'auditpol /get /subcategory:'$subCategoryGUID' returned with exit code $LASTEXITCODE"
+            throw [System.ArgumentException] $errorString
+            Write-Error -Message $errorString
+        }
+
+        if ($null -eq $auditPolicyString) {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting. Auditpol returned nothing."
+            }
+        }
+
+        # Remove empty lines and headers
+        $line = $auditPolicyString `
+        | Where-Object { $_ } `
+        | Select-Object -Skip 3
+
+        if ($line -notmatch "(No Auditing|Success and Failure|Success|Failure|Keine Überwachung|Erfolg und Fehler|Erfolg|Fehler)$") {
+            return @{
+                Status  = "Warning"
+                Message = "Couldn't get setting."
+            }
+        }
+
+        $setting = $Matches[0]
+
+        if ($setting -ne "Success and Failure" -And $setting -ne "Erfolg und Fehler") {
+            return @{
+                Status  = "False"
+                Message = "Set to: $setting"
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#RegistrySettings.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#RegistrySettings.ps1
new file mode 100644
index 0000000..daa3744
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#RegistrySettings.ps1	
@@ -0,0 +1,14316 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+# 2025
+[AuditTest] @{
+    Id   = "1.1.6"
+    Task = "(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SAM" `
+                -Name "RelaxMinimumPasswordLengthLimits" `
+            | Select-Object -ExpandProperty "RelaxMinimumPasswordLengthLimits"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.2"
+    Task = "(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LimitBlankPasswordUse" `
+            | Select-Object -ExpandProperty "LimitBlankPasswordUse"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2.1"
+    Task = "(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "SCENoApplyLegacyAuditPolicy" `
+            | Select-Object -ExpandProperty "SCENoApplyLegacyAuditPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2.2"
+    Task = "(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "CrashOnAuditFail" `
+            | Select-Object -ExpandProperty "CrashOnAuditFail"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.4.1"
+    Task = "(L1) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers" `
+                -Name "AddPrinterDrivers" `
+            | Select-Object -ExpandProperty "AddPrinterDrivers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.5.1"
+    Task        = "(L1) Ensure 'Domain controller: Allow server operators to schedule tasks' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "SubmitControl" `
+            | Select-Object -ExpandProperty "SubmitControl"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.5.2"
+    Task        = "(L1) Ensure 'Domain controller: Allow vulnerable Netlogon secure channel connections' is set to 'Not Configured' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "vulnerablechannelallowlist" `
+            | Select-Object -ExpandProperty "vulnerablechannelallowlist"
+
+            return @{
+                Message = "Registry value found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.5.3"
+    Task        = "(L1) Ensure 'Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LdapEnforceChannelBinding" `
+            | Select-Object -ExpandProperty "LdapEnforceChannelBinding"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.5.4"
+    Task        = "(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerIntegrity" `
+            | Select-Object -ExpandProperty "LDAPServerIntegrity"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.5.5"
+    Task = "(L1) Ensure 'Domain controller: LDAP server signing requirements Enforcement' is set to 'Enabled' (DC only)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" `
+                -Name "LDAPServerEnforceIntegrity" `
+            | Select-Object -ExpandProperty "LDAPServerEnforceIntegrity"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.5.6"
+    Task = "(L1) Ensure 'Domain controller: Refuse machine account password changes' is set to 'Disabled' (DC only)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RefusePasswordChange" `
+            | Select-Object -ExpandProperty "RefusePasswordChange"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.1"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireSignOrSeal" `
+            | Select-Object -ExpandProperty "RequireSignOrSeal"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.2"
+    Task = "(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SealSecureChannel" `
+            | Select-Object -ExpandProperty "SealSecureChannel"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.3"
+    Task = "(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "SignSecureChannel" `
+            | Select-Object -ExpandProperty "SignSecureChannel"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.4"
+    Task = "(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "DisablePasswordChange" `
+            | Select-Object -ExpandProperty "DisablePasswordChange"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.5"
+    Task = "(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "MaximumPasswordAge" `
+            | Select-Object -ExpandProperty "MaximumPasswordAge"
+
+            if (($regValue -le 0 -or $regValue -gt 30)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x > 0 and x <= 30"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.6.6"
+    Task = "(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "RequireStrongKey" `
+            | Select-Object -ExpandProperty "RequireStrongKey"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.1"
+    Task = "(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableCAD" `
+            | Select-Object -ExpandProperty "DisableCAD"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.2"
+    Task = "(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DontDisplayLastUserName" `
+            | Select-Object -ExpandProperty "DontDisplayLastUserName"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.3"
+    Task = "(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "InactivityTimeoutSecs" `
+            | Select-Object -ExpandProperty "InactivityTimeoutSecs"
+
+            if (($regValue -gt 900 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.4"
+    Task = "(L1) Configure 'Interactive logon: Message text for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeText" `
+            | Select-Object -ExpandProperty "LegalNoticeText"
+
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.5"
+    Task = "(L1) Configure 'Interactive logon: Message title for users attempting to log on'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LegalNoticeCaption" `
+            | Select-Object -ExpandProperty "LegalNoticeCaption"
+
+            $regValue = $regValue.Trim([char]0x0000)    
+            if (($regValue -notmatch ".+") -or ([string]::IsNullOrEmpty($regValue)) -or ([string]::IsNullOrWhiteSpace($regValue))) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '.+'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.7.6"
+    Task        = "(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "CachedLogonsCount" `
+            | Select-Object -ExpandProperty "CachedLogonsCount"
+
+            if ($regValue -notmatch "^[43210]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[43210]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.7"
+    Task = "(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "PasswordExpiryWarning" `
+            | Select-Object -ExpandProperty "PasswordExpiryWarning"
+
+            if (($regValue -gt 14 -or $regValue -lt 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 14 and x >= 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.7.8"
+    Task        = "(L1) Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ForceUnlockLogon" `
+            | Select-Object -ExpandProperty "ForceUnlockLogon"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.7.9"
+    Task = "(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 1 - 'Lock Workstation' or 2 / 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScRemoveOption" `
+            | Select-Object -ExpandProperty "ScRemoveOption"
+
+            if ($regValue -notmatch "^(1|2|3)$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^(1|2|3)$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.1"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.2"
+    Task = "(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbClientConfiguration).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+
+                if ($regValue -ne 1) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 1"
+                        Status  = "False"
+                    }
+                }
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.8.3"
+    Task = "(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" `
+                -Name "EnablePlainTextPassword" `
+            | Select-Object -ExpandProperty "EnablePlainTextPassword"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.1"
+    Task = "(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "AutoDisconnect" `
+            | Select-Object -ExpandProperty "AutoDisconnect"
+
+            if (($regValue -gt 15)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 15"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.2"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).RequireSecuritySignature -ne $True) {
+                return @{
+                    Message = "RequireSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "RequireSecuritySignature" `
+                | Select-Object -ExpandProperty "RequireSecuritySignature"
+
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.3"
+    Task = "(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((Get-SmbServerConfiguration -ErrorAction Stop).EnableSecuritySignature -ne $True) {
+                return @{
+                    Message = "EnableSecuritySignature is not set to True"
+                    Status  = "False"
+                }
+            }
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                    -Name "EnableSecuritySignature" `
+                | Select-Object -ExpandProperty "EnableSecuritySignature"
+
+                return @{
+                    Message = "Registry value is '$regValue'. Get-SMBServerConfiguration failed, resorted to checking registry, which might not be 100% accurate. See <a href=`"https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/overview-server-message-block-signing#policy-locations-for-smb-signing`">here</a> and <a href=`"https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb-signing-required-by-default-in-windows-insider/ba-p/3831704`">here</a>"
+                    Status  = "Warning"
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.9.4"
+    Task = "(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "enableforcedlogoff" `
+            | Select-Object -ExpandProperty "enableforcedlogoff"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.9.5"
+    Task        = "(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 1 - 'Accept if provided by client' or 2 - higher (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "SMBServerNameHardeningLevel" `
+            | Select-Object -ExpandProperty "SMBServerNameHardeningLevel"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.10.2"
+    Task        = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymousSAM" `
+            | Select-Object -ExpandProperty "RestrictAnonymousSAM"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.10.3"
+    Task        = "(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RestrictAnonymous" `
+            | Select-Object -ExpandProperty "RestrictAnonymous"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.4"
+    Task = "(L2) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "DisableDomainCreds" `
+            | Select-Object -ExpandProperty "DisableDomainCreds"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.5"
+    Task = "(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "EveryoneIncludesAnonymous" `
+            | Select-Object -ExpandProperty "EveryoneIncludesAnonymous"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.10.6"
+    Task        = "(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is configured (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+            | Select-Object -ExpandProperty "NullSessionPipes"
+
+            $reference = @(
+                "LSARPC"
+                "NETLOGON"
+                "SAMR"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: LSARPC,NETLOGON,SAMR"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.10.7"
+    Task        = "(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is configured (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionPipes" `
+            | Select-Object -ExpandProperty "NullSessionPipes"
+
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.8"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths' is configured"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+
+            $reference = @(
+                "System\CurrentControlSet\Control\ProductOptions"
+                "System\CurrentControlSet\Control\Server Applications"
+                "Software\Microsoft\Windows NT\CurrentVersion"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+$CARoleStatus = (Get-WindowsFeature -Name ADCS-Cert-Authority).Installed
+$WINSStatus = (Get-WindowsFeature -Name WINS).Installed
+[AuditTest] @{
+    Id   = "2.3.10.9 A"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [WINS Role Feature and CA Role Service NOT installed]"
+    Test = {
+        try {
+            if (($CARoleStatus -or $WINSStatus) -eq $true) {
+                return @{
+                    Message = "WINS Role Feature or CA Role Service are installed"
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.9 B"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [CA Role Service installed]"
+    Test = {
+        try {
+            if ($CARoleStatus -eq $false) {
+                return @{
+                    Message = "CA Role Service NOT installed"
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\CertSvc"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\CertSvc"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.9 C"
+    Task = "(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured [WINS Role Feature installed]"
+    Test = {
+        try {
+            if ($WINSStatus -eq $false) {
+                return @{
+                    Message = "WINS Role Feature NOT installed"
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" `
+                -Name "Machine" `
+            | Select-Object -ExpandProperty "Machine"
+
+            $reference = @(
+                "System\CurrentControlSet\Control\Print\Printers"
+                "System\CurrentControlSet\Services\Eventlog"
+                "Software\Microsoft\OLAP Server"
+                "Software\Microsoft\Windows NT\CurrentVersion\Print"
+                "Software\Microsoft\Windows NT\CurrentVersion\Windows"
+                "System\CurrentControlSet\Control\ContentIndex"
+                "System\CurrentControlSet\Control\Terminal Server"
+                "System\CurrentControlSet\Control\Terminal Server\UserConfig"
+                "System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration"
+                "Software\Microsoft\Windows NT\CurrentVersion\Perflib"
+                "System\CurrentControlSet\Services\SysmonLog"
+                "System\CurrentControlSet\Services\WINS"
+            )
+            if (-not (Test-ArrayEqual $regValue $reference)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\WINS"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.10"
+    Task = "(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "RestrictNullSessAccess" `
+            | Select-Object -ExpandProperty "RestrictNullSessAccess"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.10.11"
+    Task        = "(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "restrictremotesam" `
+            | Select-Object -ExpandProperty "restrictremotesam"
+
+            if ($regValue -ne "O:BAG:BAD:(A;;RC;;;BA)") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: O:BAG:BAD:(A;;RC;;;BA)"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.12"
+    Task = "(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" `
+                -Name "NullSessionShares" `
+            | Select-Object -ExpandProperty "NullSessionShares"
+
+            if ($regValue -ne "") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: "
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.13"
+    Task = "(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "ForceGuest" `
+            | Select-Object -ExpandProperty "ForceGuest"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.1"
+    Task = "(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "UseMachineId" `
+            | Select-Object -ExpandProperty "UseMachineId"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.2"
+    Task = "(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AllowNullSessionFallback" `
+            | Select-Object -ExpandProperty "AllowNullSessionFallback"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.3"
+    Task = "(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\pku2u" `
+                -Name "AllowOnlineID" `
+            | Select-Object -ExpandProperty "AllowOnlineID"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.4"
+    Task = "(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+            | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+
+            if ($regValue -ne 2147483640) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2147483640"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.5"
+    Task = "(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.7"
+    Task = "(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM & NTLM'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "LmCompatibilityLevel" `
+            | Select-Object -ExpandProperty "LmCompatibilityLevel"
+
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.8"
+    Task = "(L1) Ensure 'Network security: LDAP client encryption requirements' is set to 1 - 'Negotiate sealing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "ldapclientconfidentiality" `
+            | Select-Object -ExpandProperty "ldapclientconfidentiality"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.9"
+    Task = "(L1) Ensure 'Network security: LDAP client signing requirements' is set to 1 - 'Negotiate signing' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LDAP" `
+                -Name "LDAPClientIntegrity" `
+            | Select-Object -ExpandProperty "LDAPClientIntegrity"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.10"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinClientSec" `
+            | Select-Object -ExpandProperty "NTLMMinClientSec"
+
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.11"
+    Task = "(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "NTLMMinServerSec" `
+            | Select-Object -ExpandProperty "NTLMMinServerSec"
+
+            if ($regValue -ne 537395200) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 537395200"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.12"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Audit Incoming NTLM Traffic' is set to 'Enable auditing for all accounts'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "AuditReceivingNTLMTraffic" `
+            | Select-Object -ExpandProperty "AuditReceivingNTLMTraffic"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.3.11.13"
+    Task        = "(L1) Ensure 'Network security: Restrict NTLM: Audit NTLM authentication in this domain' is set to 'Enable all' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" `
+                -Name "AuditNTLMInDomain" `
+            | Select-Object -ExpandProperty "AuditNTLMInDomain"
+
+            if ($regValue -ne 7) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 7"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.14"
+    Task = "(L1) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 1 - 'Audit all' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" `
+                -Name "RestrictSendingNTLMTraffic" `
+            | Select-Object -ExpandProperty "RestrictSendingNTLMTraffic"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.13.1"
+    Task = "(L1) Ensure 'Shutdown: Allow system to be shut down without having to log on' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ShutdownWithoutLogon" `
+            | Select-Object -ExpandProperty "ShutdownWithoutLogon"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.15.1"
+    Task = "(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel" `
+                -Name "ObCaseInsensitive" `
+            | Select-Object -ExpandProperty "ObCaseInsensitive"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.15.2"
+    Task = "(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "ProtectionMode" `
+            | Select-Object -ExpandProperty "ProtectionMode"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.1"
+    Task = "(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "FilterAdministratorToken" `
+            | Select-Object -ExpandProperty "FilterAdministratorToken"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.2"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 2 - 'Prompt for consent on the secure desktop' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorAdmin" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorAdmin"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.3"
+    Task = "(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "ConsentPromptBehaviorUser" `
+            | Select-Object -ExpandProperty "ConsentPromptBehaviorUser"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.4"
+    Task = "(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableInstallerDetection" `
+            | Select-Object -ExpandProperty "EnableInstallerDetection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.5"
+    Task = "(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableSecureUIAPaths" `
+            | Select-Object -ExpandProperty "EnableSecureUIAPaths"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.6"
+    Task = "(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableLUA" `
+            | Select-Object -ExpandProperty "EnableLUA"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.7"
+    Task = "(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "PromptOnSecureDesktop" `
+            | Select-Object -ExpandProperty "PromptOnSecureDesktop"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.17.8"
+    Task = "(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableVirtualization" `
+            | Select-Object -ExpandProperty "EnableVirtualization"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "5.1"
+    Task        = "(L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "5.2"
+    Task        = "(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.1"
+    Task        = "(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile";
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile";
+        $key = "EnableFirewall";
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.2"
+    Task        = "(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.3"
+    Task        = "(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.4"
+    Task        = "(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\domainfw.log";
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.5"
+    Task        = "(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.6"
+    Task        = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.7"
+    Task        = "(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.1"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.2"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.3"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.4"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\privatefw.log";
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.5"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.6"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.2.7"
+    Task = "(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging"         
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Private"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.1"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "EnableFirewall"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.2"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DefaultInboundAction"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.3"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "DisableNotifications"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.4"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.5"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"       
+        $key = "AllowLocalIPsecPolicyMerge"
+        $expectedValue = 0;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.6"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFilePath"
+        $expectedValue = "%SystemRoot%\System32\logfiles\firewall\publicfw.log";
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.7"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogFileSize"
+        $expectedValue = 16384;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.8"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging"       
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Public"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "9.3.9"
+    Task = "(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging" `
+                -Name "LogSuccessfulConnections" `
+            | Select-Object -ExpandProperty "LogSuccessfulConnections"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.1.1"
+    Task = "(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenCamera" `
+            | Select-Object -ExpandProperty "NoLockScreenCamera"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.1.2"
+    Task = "(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" `
+                -Name "NoLockScreenSlideshow" `
+            | Select-Object -ExpandProperty "NoLockScreenSlideshow"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.2.2"
+    Task = "(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\InputPersonalization" `
+                -Name "AllowInputPersonalization" `
+            | Select-Object -ExpandProperty "AllowInputPersonalization"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.1.3"
+    Task = "(L2) Ensure 'Allow Online Tips' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "AllowOnlineTips" `
+            | Select-Object -ExpandProperty "AllowOnlineTips"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.4.1"
+    Task        = "(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "LocalAccountTokenFilterPolicy" `
+            | Select-Object -ExpandProperty "LocalAccountTokenFilterPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.2"
+    Task = "(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.3"
+    Task = "(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.4"
+    Task = "(L1) Ensure 'Enable Certificate Padding' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" `
+                -Name "EnableCertPaddingCheck" `
+            | Select-Object -ExpandProperty "EnableCertPaddingCheck"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.5"
+    Task = "(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" `
+                -Name "DisableExceptionChainValidation" `
+            | Select-Object -ExpandProperty "DisableExceptionChainValidation"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.6"
+    Task = "(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "NodeType" `
+            | Select-Object -ExpandProperty "NodeType"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.4.7"
+    Task = "(L1) Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.1"
+    Task = "(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "AutoAdminLogon" `
+            | Select-Object -ExpandProperty "AutoAdminLogon"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.2"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.3"
+    Task = "(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level' is set to 'Enabled: Highest protection, source routing is completely disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "DisableIPSourceRouting" `
+            | Select-Object -ExpandProperty "DisableIPSourceRouting"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.4"
+    Task = "(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "EnableICMPRedirect" `
+            | Select-Object -ExpandProperty "EnableICMPRedirect"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.5"
+    Task = "(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "KeepAliveTime" `
+            | Select-Object -ExpandProperty "KeepAliveTime"
+
+            if ($regValue -ne 300000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 300000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.6"
+    Task = "(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" `
+                -Name "nonamereleaseondemand" `
+            | Select-Object -ExpandProperty "nonamereleaseondemand"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.7"
+    Task = "(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "PerformRouterDiscovery" `
+            | Select-Object -ExpandProperty "PerformRouterDiscovery"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.8"
+    Task = "(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" `
+                -Name "SafeDllSearchMode" `
+            | Select-Object -ExpandProperty "SafeDllSearchMode"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.9"
+    Task = "(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" `
+                -Name "ScreenSaverGracePeriod" `
+            | Select-Object -ExpandProperty "ScreenSaverGracePeriod"
+
+            if ($regValue -notmatch "^[0-5]$") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Matching expression '^[0-5]$'"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.10"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.11"
+    Task = "(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" `
+                -Name "tcpmaxdataretransmissions" `
+            | Select-Object -ExpandProperty "tcpmaxdataretransmissions"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.5.12"
+    Task = "(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Security" `
+                -Name "WarningLevel" `
+            | Select-Object -ExpandProperty "WarningLevel"
+
+            if (($regValue -gt 90)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 90"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.1"
+    Task = "(L1) Ensure 'Configure multicast DNS (mDNS) protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMDNS" `
+            | Select-Object -ExpandProperty "EnableMDNS"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.2"
+    Task = "(L1) Ensure 'Configure NetBIOS settings' is set to 2 - 'Enabled: Disable NetBIOS name resolution on public networks' or 0 - 'Enabled: Disable NetBIOS name resolution'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableNetBIOS" `
+            | Select-Object -ExpandProperty "EnableNetBIOS"
+
+            if (($regValue -ne 2) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2 or 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.3"
+    Task = "(L2) Ensure 'Turn off default IPv6 DNS Servers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "DisableIPv6DefaultDnsServers" `
+            | Select-Object -ExpandProperty "DisableIPv6DefaultDnsServers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.4.4"
+    Task = "(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" `
+                -Name "EnableMulticast" `
+            | Select-Object -ExpandProperty "EnableMulticast"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.5.1"
+    Task = "(L2) Ensure 'Enable Font Providers' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableFontProviders" `
+            | Select-Object -ExpandProperty "EnableFontProviders"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.1"
+    Task = "(L1) Ensure 'Audit client does not support encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "AuditClientDoesNotSupportEncryption" `
+            | Select-Object -ExpandProperty "AuditClientDoesNotSupportEncryption"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.2"
+    Task = "(L1) Ensure 'Audit client does not support signing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "AuditClientDoesNotSupportSigning" `
+            | Select-Object -ExpandProperty "AuditClientDoesNotSupportSigning"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.3"
+    Task = "(L1) Ensure 'Audit insecure guest logon' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "AuditInsecureGuestLogon" `
+            | Select-Object -ExpandProperty "AuditInsecureGuestLogon"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.4"
+    Task = "(L1) Ensure 'Enable remote mailslots' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Bowser" `
+                -Name "EnableMailslots" `
+            | Select-Object -ExpandProperty "EnableMailslots"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.5"
+    Task = "(L1) Ensure 'Mandate the minimum version of SMB' is set to 'Enabled: 3.1.1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "MinSmb2Dialect" `
+            | Select-Object -ExpandProperty "MinSmb2Dialect"
+
+            if ($regValue -ne 785) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 785"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.7.6"
+    Task = "(L1) Ensure 'Set authentication rate limiter delay (milliseconds)' is set to 'Enabled: 2000' or more"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "InvalidAuthenticationDelayTimeInMs" `
+            | Select-Object -ExpandProperty "InvalidAuthenticationDelayTimeInMs"
+
+            if (($regValue -lt 2000)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 2000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.1"
+    Task = "(L1) Ensure 'Audit insecure guest logon' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AuditInsecureGuestLogon" `
+            | Select-Object -ExpandProperty "AuditInsecureGuestLogon"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.2"
+    Task = "(L1) Ensure 'Audit server does not support encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AuditServerDoesNotSupportEncryption" `
+            | Select-Object -ExpandProperty "AuditServerDoesNotSupportEncryption"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.3"
+    Task = "(L1) Ensure 'Audit server does not support signing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AuditServerDoesNotSupportSigning" `
+            | Select-Object -ExpandProperty "AuditServerDoesNotSupportSigning"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.4"
+    Task = "(L1) Ensure 'Enable authentication rate limiter' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanServer" `
+                -Name "EnableAuthRateLimiter" `
+            | Select-Object -ExpandProperty "EnableAuthRateLimiter"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.5"
+    Task = "(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "AllowInsecureGuestAuth" `
+            | Select-Object -ExpandProperty "AllowInsecureGuestAuth"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.6"
+    Task = "(L1) Ensure 'Enable remote mailslots' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider" `
+                -Name "EnableMailslots" `
+            | Select-Object -ExpandProperty "EnableMailslots"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.7"
+    Task = "(L1) Ensure 'Mandate the minimum version of SMB' is set to 'Enabled: 3.1.1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "MinSmb2Dialect" `
+            | Select-Object -ExpandProperty "MinSmb2Dialect"
+
+            if ($regValue -ne 785) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 785"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.8.8"
+    Task = "(L1) Ensure 'Require Encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" `
+                -Name "RequireEncryption" `
+            | Select-Object -ExpandProperty "RequireEncryption"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 A"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnDomain" `
+            | Select-Object -ExpandProperty "AllowLLTDIOOnDomain"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 B"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowLLTDIOOnPublicNet" `
+            | Select-Object -ExpandProperty "AllowLLTDIOOnPublicNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 C"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableLLTDIO" `
+            | Select-Object -ExpandProperty "EnableLLTDIO"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.1 D"
+    Task = "(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitLLTDIOOnPrivateNet" `
+            | Select-Object -ExpandProperty "ProhibitLLTDIOOnPrivateNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 A"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Domain network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnDomain" `
+            | Select-Object -ExpandProperty "AllowRspndrOnDomain"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 B"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Public network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "AllowRspndrOnPublicNet" `
+            | Select-Object -ExpandProperty "AllowRspndrOnPublicNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 C"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "EnableRspndr" `
+            | Select-Object -ExpandProperty "EnableRspndr"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.9.2 D"
+    Task = "(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (Private network)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" `
+                -Name "ProhibitRspndrOnPrivateNet" `
+            | Select-Object -ExpandProperty "ProhibitRspndrOnPrivateNet"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.10.2"
+    Task = "(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Peernet" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.2"
+    Task = "(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_AllowNetBridge_NLA" `
+            | Select-Object -ExpandProperty "NC_AllowNetBridge_NLA"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.3"
+    Task = "(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_ShowSharedAccessUI" `
+            | Select-Object -ExpandProperty "NC_ShowSharedAccessUI"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.11.4"
+    Task = "(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections" `
+                -Name "NC_StdDomainUserSetLocation" `
+            | Select-Object -ExpandProperty "NC_StdDomainUserSetLocation"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.14.1 A"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\NETLOGON" `
+            | Select-Object -ExpandProperty "\\*\NETLOGON"
+
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.14.1 B"
+    Task = "(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with `"Require Mutual Authentication`", `"Require Integrity`", and `"Require Privacy`" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths" `
+                -Name "\\*\SYSVOL" `
+            | Select-Object -ExpandProperty "\\*\SYSVOL"
+
+            if ($regValue -eq $null) {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            $array = $regValue.Split(',') | ForEach-Object { $_.Trim() }
+    
+            $missingElements = @()
+            $elementsToCheck = @("RequireMutualAuthentication=1", "RequireIntegrity=1", "RequirePrivacy=1")
+            foreach ($element in $elementsToCheck) {
+                if ($array -notcontains $element) {
+                    $missingElements += $element
+                }
+            }
+    
+            if ($missingElements.Length -gt 0) {
+                return @{
+                    Message = ($missingElements -join " and ") + " not configured correctly."
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.19.2.1"
+    Task = "(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" `
+                -Name "DisabledComponents" `
+            | Select-Object -ExpandProperty "DisabledComponents"
+
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 A"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "EnableRegistrars" `
+            | Select-Object -ExpandProperty "EnableRegistrars"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 B"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableUPnPRegistrar" `
+            | Select-Object -ExpandProperty "DisableUPnPRegistrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 C"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableInBand802DOT11Registrar" `
+            | Select-Object -ExpandProperty "DisableInBand802DOT11Registrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 D"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableFlashConfigRegistrar" `
+            | Select-Object -ExpandProperty "DisableFlashConfigRegistrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.1 E"
+    Task = "(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars" `
+                -Name "DisableWPDRegistrar" `
+            | Select-Object -ExpandProperty "DisableWPDRegistrar"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.20.2"
+    Task = "(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WCN\UI" `
+                -Name "DisableWcnUi" `
+            | Select-Object -ExpandProperty "DisableWcnUi"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.21.1"
+    Task = "(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fMinimizeConnections" `
+            | Select-Object -ExpandProperty "fMinimizeConnections"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.6.21.2"
+    Task        = "(L2) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" `
+                -Name "fBlockNonDomain" `
+            | Select-Object -ExpandProperty "fBlockNonDomain"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.1"
+    Task = "(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RegisterSpoolerRemoteRpcEndPoint" `
+            | Select-Object -ExpandProperty "RegisterSpoolerRemoteRpcEndPoint"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.2"
+    Task = "(L1) Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "RedirectionGuardPolicy" `
+            | Select-Object -ExpandProperty "RedirectionGuardPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.3"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcUseNamedPipeProtocol" `
+            | Select-Object -ExpandProperty "RpcUseNamedPipeProtocol"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.4"
+    Task = "(L1) Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcAuthentication" `
+            | Select-Object -ExpandProperty "RpcAuthentication"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.5"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Protocols to allow for incoming RPC connections' is set to 'Enabled: RPC over TCP'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcProtocols" `
+            | Select-Object -ExpandProperty "RpcProtocols"
+
+            if ($regValue -ne 5) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.6"
+    Task = "(L1) Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: 0 - Negotiate' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "ForceKerberosForRpc" `
+            | Select-Object -ExpandProperty "ForceKerberosForRpc"
+
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.7"
+    Task = "(L1) Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC" `
+                -Name "RpcTcpPort" `
+            | Select-Object -ExpandProperty "RpcTcpPort"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.8"
+    Task = "(L1) Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print" `
+                -Name "RpcAuthnLevelPrivacyEnabled" `
+            | Select-Object -ExpandProperty "RpcAuthnLevelPrivacyEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.9"
+    Task = "(L2) Ensure 'Configure Windows protected print' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\WPP" `
+                -Name "WindowsProtectedPrintGroupPolicyState" `
+            | Select-Object -ExpandProperty "WindowsProtectedPrintGroupPolicyState"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.10"
+    Task = "(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "RestrictDriverInstallationToAdministrators" `
+            | Select-Object -ExpandProperty "RestrictDriverInstallationToAdministrators"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.11"
+    Task = "(L1) Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "CopyFilesPolicy" `
+            | Select-Object -ExpandProperty "CopyFilesPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.12"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+            | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.7.13"
+    Task = "(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+            | Select-Object -ExpandProperty "UpdatePromptSettings"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.8.1.1"
+    Task = "(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoCloudApplicationNotification" `
+            | Select-Object -ExpandProperty "NoCloudApplicationNotification"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.3.1"
+    Task = "(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit" `
+                -Name "ProcessCreationIncludeCmdLine_Enabled" `
+            | Select-Object -ExpandProperty "ProcessCreationIncludeCmdLine_Enabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.4.1"
+    Task = "(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" `
+                -Name "AllowEncryptionOracle" `
+            | Select-Object -ExpandProperty "AllowEncryptionOracle"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.4.2"
+    Task = "(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation" `
+                -Name "AllowProtectedCreds" `
+            | Select-Object -ExpandProperty "AllowProtectedCreds"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.1"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "EnableVirtualizationBasedSecurity" `
+            | Select-Object -ExpandProperty "EnableVirtualizationBasedSecurity"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.2"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 1 - 'Secure Boot' or 3 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "RequirePlatformSecurityFeatures" `
+            | Select-Object -ExpandProperty "RequirePlatformSecurityFeatures"
+
+            if (($regValue -ne 1) -and ($regValue -ne 3)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.3"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HypervisorEnforcedCodeIntegrity" `
+            | Select-Object -ExpandProperty "HypervisorEnforcedCodeIntegrity"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.4"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "HVCIMATRequired" `
+            | Select-Object -ExpandProperty "HVCIMATRequired"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.9.5.5"
+    Task        = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock' (MS Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+            | Select-Object -ExpandProperty "LsaCfgFlags"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.9.5.6"
+    Task        = "(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "LsaCfgFlags" `
+            | Select-Object -ExpandProperty "LsaCfgFlags"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.5.7"
+    Task = "(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" `
+                -Name "ConfigureSystemGuardLaunch" `
+            | Select-Object -ExpandProperty "ConfigureSystemGuardLaunch"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.7.2"
+    Task = "(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" `
+                -Name "PreventDeviceMetadataFromNetwork" `
+            | Select-Object -ExpandProperty "PreventDeviceMetadataFromNetwork"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.13.1"
+    Task = "(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" `
+                -Name "DriverLoadPolicy" `
+            | Select-Object -ExpandProperty "DriverLoadPolicy"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.2"
+    Task = "(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoBackgroundPolicy" `
+            | Select-Object -ExpandProperty "NoBackgroundPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.3"
+    Task = "(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.4"
+    Task = "(L1) Ensure 'Configure security policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoBackgroundPolicy" `
+            | Select-Object -ExpandProperty "NoBackgroundPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.5"
+    Task = "(L1) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" `
+                -Name "NoGPOListChanges" `
+            | Select-Object -ExpandProperty "NoGPOListChanges"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.6"
+    Task = "(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableCdp" `
+            | Select-Object -ExpandProperty "EnableCdp"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.19.7"
+    Task = "(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableBkGndGroupPolicy" `
+            | Select-Object -ExpandProperty "DisableBkGndGroupPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.1"
+    Task = "(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableWebPnPDownload" `
+            | Select-Object -ExpandProperty "DisableWebPnPDownload"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.2"
+    Task = "(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TabletPC" `
+                -Name "PreventHandwritingDataSharing" `
+            | Select-Object -ExpandProperty "PreventHandwritingDataSharing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.3"
+    Task = "(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports" `
+                -Name "PreventHandwritingErrorReports" `
+            | Select-Object -ExpandProperty "PreventHandwritingErrorReports"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.4"
+    Task = "(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Internet Connection Wizard" `
+                -Name "ExitOnMSICW" `
+            | Select-Object -ExpandProperty "ExitOnMSICW"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.5"
+    Task = "(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoWebServices" `
+            | Select-Object -ExpandProperty "NoWebServices"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.6"
+    Task = "(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers" `
+                -Name "DisableHTTPPrinting" `
+            | Select-Object -ExpandProperty "DisableHTTPPrinting"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.7"
+    Task = "(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Registration Wizard Control" `
+                -Name "NoRegistration" `
+            | Select-Object -ExpandProperty "NoRegistration"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.8"
+    Task = "(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SearchCompanion" `
+                -Name "DisableContentFileUpdates" `
+            | Select-Object -ExpandProperty "DisableContentFileUpdates"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.9"
+    Task = "(L2) Ensure 'Turn off the `"Order Prints`" picture task' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoOnlinePrintsWizard" `
+            | Select-Object -ExpandProperty "NoOnlinePrintsWizard"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.10"
+    Task = "(L2) Ensure 'Turn off the `"Publish to Web`" task for files and folders' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoPublishingWizard" `
+            | Select-Object -ExpandProperty "NoPublishingWizard"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.11"
+    Task = "(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Messenger\Client" `
+                -Name "CEIP" `
+            | Select-Object -ExpandProperty "CEIP"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.12"
+    Task = "(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient\Windows" `
+                -Name "CEIPEnable" `
+            | Select-Object -ExpandProperty "CEIPEnable"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.13 A"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" `
+                -Name "Disabled" `
+            | Select-Object -ExpandProperty "Disabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.20.1.13 B"
+    Task = "(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting" `
+                -Name "DoReport" `
+            | Select-Object -ExpandProperty "DoReport"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.23.1 A"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitBehavior" `
+            | Select-Object -ExpandProperty "DevicePKInitBehavior"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.23.1 B"
+    Task = "(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters" `
+                -Name "DevicePKInitEnabled" `
+            | Select-Object -ExpandProperty "DevicePKInitEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.24.1"
+    Task = "(L1) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection" `
+                -Name "DeviceEnumerationPolicy" `
+            | Select-Object -ExpandProperty "DeviceEnumerationPolicy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.1"
+    Task = "(L1) Ensure 'Configure password backup directory' is set to 2 - 'Enabled: Active Directory' or 1 - 'Enabled: Azure Active Directory'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "BackupDirectory" `
+            | Select-Object -ExpandProperty "BackupDirectory"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.2"
+    Task = "(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PwdExpirationProtectionEnabled" `
+            | Select-Object -ExpandProperty "PwdExpirationProtectionEnabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.3"
+    Task = "(L1) Ensure 'Enable password encryption' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "ADPasswordEncryptionEnabled" `
+            | Select-Object -ExpandProperty "ADPasswordEncryptionEnabled"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.4"
+    Task = "(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordComplexity" `
+            | Select-Object -ExpandProperty "PasswordComplexity"
+
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.5"
+    Task = "(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordLength" `
+            | Select-Object -ExpandProperty "PasswordLength"
+
+            if ($regValue -lt 15) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 15"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.6"
+    Task = "(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PasswordAgeDays" `
+            | Select-Object -ExpandProperty "PasswordAgeDays"
+
+            if ($regValue -gt 30 -or $regValue -lt 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 30 and x >= 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.7"
+    Task = "(L1) Ensure 'Post-authentication actions: Grace period (hours)' is set to 'Enabled: 8 or fewer hours, but not 0'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationResetDelay" `
+            | Select-Object -ExpandProperty "PostAuthenticationResetDelay"
+
+            if (($regValue -gt 8 -or $regValue -le 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 8 and x > 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.25.8"
+    Task = "(L1) Ensure 'Post-authentication actions: Actions' is set to 3 - 'Enabled: Reset the password and logoff the managed account' or 5 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" `
+                -Name "PostAuthenticationActions" `
+            | Select-Object -ExpandProperty "PostAuthenticationActions"
+
+            if (($regValue -ne 3) -and ($regValue -ne 5)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3 or 5"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.26.1"
+    Task = "(L1) Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCustomSSPsAPs" `
+            | Select-Object -ExpandProperty "AllowCustomSSPsAPs"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.26.2"
+    Task = "(NG) Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" `
+                -Name "RunAsPPL" `
+            | Select-Object -ExpandProperty "RunAsPPL"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.27.1"
+    Task = "(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Control Panel\International" `
+                -Name "BlockUserInputMethodsForSignIn" `
+            | Select-Object -ExpandProperty "BlockUserInputMethodsForSignIn"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.1"
+    Task = "(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockUserFromShowingAccountDetailsOnSignin" `
+            | Select-Object -ExpandProperty "BlockUserFromShowingAccountDetailsOnSignin"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.2"
+    Task = "(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontDisplayNetworkSelectionUI" `
+            | Select-Object -ExpandProperty "DontDisplayNetworkSelectionUI"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.3"
+    Task = "(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DontEnumerateConnectedUsers" `
+            | Select-Object -ExpandProperty "DontEnumerateConnectedUsers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.9.28.4"
+    Task        = "(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnumerateLocalUsers" `
+            | Select-Object -ExpandProperty "EnumerateLocalUsers"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.5"
+    Task = "(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "DisableLockScreenAppNotifications" `
+            | Select-Object -ExpandProperty "DisableLockScreenAppNotifications"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.6"
+    Task = "(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "BlockDomainPicturePassword" `
+            | Select-Object -ExpandProperty "BlockDomainPicturePassword"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.28.7"
+    Task = "(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowDomainPINLogon" `
+            | Select-Object -ExpandProperty "AllowDomainPINLogon"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.30.1.1"
+    Task = "(L1) Ensure 'Block NetBIOS-based discovery for domain controller location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Netlogon\Parameters" `
+                -Name "BlockNetbiosDiscovery" `
+            | Select-Object -ExpandProperty "BlockNetbiosDiscovery"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.31.1"
+    Task = "(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "AllowCrossDeviceClipboard" `
+            | Select-Object -ExpandProperty "AllowCrossDeviceClipboard"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.31.2"
+    Task = "(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "UploadUserActivities" `
+            | Select-Object -ExpandProperty "UploadUserActivities"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.1"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.2"
+    Task = "(L2) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.3"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "DCSettingIndex" `
+            | Select-Object -ExpandProperty "DCSettingIndex"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.33.6.4"
+    Task = "(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51" `
+                -Name "ACSettingIndex" `
+            | Select-Object -ExpandProperty "ACSettingIndex"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.35.1"
+    Task = "(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowUnsolicited" `
+            | Select-Object -ExpandProperty "fAllowUnsolicited"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.35.2"
+    Task = "(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fAllowToGetHelp" `
+            | Select-Object -ExpandProperty "fAllowToGetHelp"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.9.36.1"
+    Task        = "(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "EnableAuthEpResolution" `
+            | Select-Object -ExpandProperty "EnableAuthEpResolution"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.9.36.2"
+    Task        = "(L2) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Rpc" `
+                -Name "RestrictRemoteClients" `
+            | Select-Object -ExpandProperty "RestrictRemoteClients"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.9.39.1"
+    Task        = "(L1) Ensure 'Configure validation of ROCA-vulnerable WHfB keys during authentication' is set to 1 - 'Enabled: Audit' or 2 - higher (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM" `
+                -Name "SamNGCKeyROCAValidation" `
+            | Select-Object -ExpandProperty "SamNGCKeyROCAValidation"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.39.2"
+    Task = "(L1) Ensure 'Configure SAM change password RPC methods policy' is set to 'Enabled: Allow strong encryption change password RPC method only' (DC only)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM" `
+                -Name "SamrChangeUserPasswordApiPolicy" `
+            | Select-Object -ExpandProperty "SamrChangeUserPasswordApiPolicy"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.39.3"
+    Task = "(L1) Ensure 'Configure SAM change password RPC methods policy' is set to 'Enabled: Block all change password RPC methods' (MS only)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM" `
+                -Name "SamrChangeUserPasswordApiPolicy" `
+            | Select-Object -ExpandProperty "SamrChangeUserPasswordApiPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1"
+    Task = "(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" `
+                -Name "DisableQueryRemoteServer" `
+            | Select-Object -ExpandProperty "DisableQueryRemoteServer"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.11.1"
+    Task = "(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" `
+                -Name "ScenarioExecutionEnabled" `
+            | Select-Object -ExpandProperty "ScenarioExecutionEnabled"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.49.1"
+    Task = "(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" `
+                -Name "DisabledByGroupPolicy" `
+            | Select-Object -ExpandProperty "DisabledByGroupPolicy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.51.1.1"
+    Task = "(L1) Ensure 'Enable Windows NTP Client' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpClient" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "18.9.51.1.2"
+    Task        = "(L1) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32Time\TimeProviders\NtpServer" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.4.1"
+    Task = "(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager" `
+                -Name "AllowSharedLocalAppData" `
+            | Select-Object -ExpandProperty "AllowSharedLocalAppData"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.4.2"
+    Task = "(L1) Ensure 'Not allow per-user unsigned packages to install by default (requires explicitly allow per install)' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx" `
+                -Name "DisablePerUserUnsignedPackagesByDefault" `
+            | Select-Object -ExpandProperty "DisablePerUserUnsignedPackagesByDefault"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.6.1"
+    Task = "(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "MSAOptional" `
+            | Select-Object -ExpandProperty "MSAOptional"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.8.1"
+    Task = "(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoAutoplayfornonVolume" `
+            | Select-Object -ExpandProperty "NoAutoplayfornonVolume"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.8.2"
+    Task = "(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoAutorun" `
+            | Select-Object -ExpandProperty "NoAutorun"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.8.3"
+    Task = "(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoDriveTypeAutoRun" `
+            | Select-Object -ExpandProperty "NoDriveTypeAutoRun"
+
+            if ($regValue -ne 255) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 255"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.9.1.1"
+    Task = "(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures" `
+                -Name "EnhancedAntiSpoofing" `
+            | Select-Object -ExpandProperty "EnhancedAntiSpoofing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.11.1"
+    Task = "(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Camera" `
+                -Name "AllowCamera" `
+            | Select-Object -ExpandProperty "AllowCamera"
+
+            if ($regValue -eq 0) {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" `
+                -Name "Value" `
+            | Select-Object -ExpandProperty "Value"
+        
+            if ($regValue -match "Deny") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Camera is not deactivated."
+            Status  = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.13.1"
+    Task = "(L1) Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableConsumerAccountStateContent" `
+            | Select-Object -ExpandProperty "DisableConsumerAccountStateContent"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.13.2"
+    Task = "(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableCloudOptimizedContent" `
+            | Select-Object -ExpandProperty "DisableCloudOptimizedContent"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.13.3"
+    Task = "(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsConsumerFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsConsumerFeatures"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.14.1"
+    Task = "(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Connect" `
+                -Name "RequirePinForPairing" `
+            | Select-Object -ExpandProperty "RequirePinForPairing"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or x 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.1"
+    Task = "(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredUI" `
+                -Name "DisablePasswordReveal" `
+            | Select-Object -ExpandProperty "DisablePasswordReveal"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.15.2"
+    Task = "(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI" `
+                -Name "EnumerateAdministrators" `
+            | Select-Object -ExpandProperty "EnumerateAdministrators"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.1"
+    Task = "(L1) Ensure 'Allow Diagnostic Data' is set to '0 - Enabled: Diagnostic data off (not recommended)' or '1 - Enabled: Send required diagnostic data'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "AllowTelemetry" `
+            | Select-Object -ExpandProperty "AllowTelemetry"
+
+            if (($regValue -ne 0) -and ($regValue -ne 1)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0 or x 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.2"
+    Task = "(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableEnterpriseAuthProxy" `
+            | Select-Object -ExpandProperty "DisableEnterpriseAuthProxy"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.3"
+    Task = "(L1) Ensure 'Disable OneSettings Downloads' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DisableOneSettingsDownloads" `
+            | Select-Object -ExpandProperty "DisableOneSettingsDownloads"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.4"
+    Task = "(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "DoNotShowFeedbackNotifications" `
+            | Select-Object -ExpandProperty "DoNotShowFeedbackNotifications"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.5"
+    Task = "(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "EnableOneSettingsAuditing" `
+            | Select-Object -ExpandProperty "EnableOneSettingsAuditing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.6"
+    Task = "(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDiagnosticLogCollection" `
+            | Select-Object -ExpandProperty "LimitDiagnosticLogCollection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.7"
+    Task = "(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" `
+                -Name "LimitDumpCollection" `
+            | Select-Object -ExpandProperty "LimitDumpCollection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.16.8"
+    Task = "(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" `
+                -Name "AllowBuildPreview" `
+            | Select-Object -ExpandProperty "AllowBuildPreview"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.1"
+    Task = "(L2) Ensure 'Enable App Installer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableAppInstaller" `
+            | Select-Object -ExpandProperty "EnableAppInstaller"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.2"
+    Task = "(L1) Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableExperimentalFeatures" `
+            | Select-Object -ExpandProperty "EnableExperimentalFeatures"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.3"
+    Task = "(L1) Ensure 'Enable App Installer Hash Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableHashOverride" `
+            | Select-Object -ExpandProperty "EnableHashOverride"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.4"
+    Task = "(L1) Ensure 'Enable App Installer Local Archive Malware Scan Override' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableLocalArchiveMalwareScanOverride" `
+            | Select-Object -ExpandProperty "EnableLocalArchiveMalwareScanOverride"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.5"
+    Task = "(L1) Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableMSAppInstallerProtocol" `
+            | Select-Object -ExpandProperty "EnableMSAppInstallerProtocol"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.6"
+    Task = "(L1) Ensure 'Enable App Installer Microsoft Store Source Certificate Validation Bypass' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableBypassCertificatePinningForMicrosoftStore" `
+            | Select-Object -ExpandProperty "EnableBypassCertificatePinningForMicrosoftStore"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.18.7"
+    Task = "(L2) Ensure 'Enable Windows Package Manager command line interfaces' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppInstaller" `
+                -Name "EnableWindowsPackageManagerCommandLineInterfaces" `
+            | Select-Object -ExpandProperty "EnableWindowsPackageManagerCommandLineInterfaces"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.1.1"
+    Task = "(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.1.2"
+    Task = "(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.2.1"
+    Task = "(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.2.2"
+    Task = "(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 196608)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 196608"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.3.1"
+    Task = "(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.3.2"
+    Task = "(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\Setup" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.4.1"
+    Task = "(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "Retention" `
+            | Select-Object -ExpandProperty "Retention"
+
+            if ($regValue -ne "0") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.26.4.2"
+    Task = "(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EventLog\System" `
+                -Name "MaxSize" `
+            | Select-Object -ExpandProperty "MaxSize"
+
+            if (($regValue -lt 32768)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 32768"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.2"
+    Task = "(L1) Ensure 'Do not apply the Mark of the Web tag to files copied from insecure sources' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "DisableMotWOnInsecurePathCopy" `
+            | Select-Object -ExpandProperty "DisableMotWOnInsecurePathCopy"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.3"
+    Task = "(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoDataExecutionPrevention" `
+            | Select-Object -ExpandProperty "NoDataExecutionPrevention"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.4"
+    Task = "(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer" `
+                -Name "NoHeapTerminationOnCorruption" `
+            | Select-Object -ExpandProperty "NoHeapTerminationOnCorruption"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.29.5"
+    Task = "(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "PreXPSP2ShellProtocolBehavior" `
+            | Select-Object -ExpandProperty "PreXPSP2ShellProtocolBehavior"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.37.1"
+    Task = "(L2) Ensure 'Turn off location' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" `
+                -Name "DisableLocation" `
+            | Select-Object -ExpandProperty "DisableLocation"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.41.1"
+    Task = "(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Messaging" `
+                -Name "AllowMessageSync" `
+            | Select-Object -ExpandProperty "AllowMessageSync"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.42.1"
+    Task = "(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftAccount" `
+                -Name "DisableUserAuth" `
+            | Select-Object -ExpandProperty "DisableUserAuth"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.4.1"
+    Task = "(L1) Ensure 'Enable EDR in block mode' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Features" `
+                -Name "PassiveRemediation" `
+            | Select-Object -ExpandProperty "PassiveRemediation"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.5.1"
+    Task = "(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "LocalSettingOverrideSpynetReporting" `
+            | Select-Object -ExpandProperty "LocalSettingOverrideSpynetReporting"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.5.2"
+    Task = "(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" `
+                -Name "SpynetReporting" `
+            | Select-Object -ExpandProperty "SpynetReporting"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.1"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value = "ExploitGuard_ASR_Rules"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+            $Value2 = "ExploitGuard_ASR_Rules"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 A"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 B"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating executable content'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 C"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block abuse of exploited vulnerable signed drivers'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+ 
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+ 
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+ 
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 D"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 E"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 F"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 H"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 J"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 K"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 I"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 L"
+    Task = "(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.3.1"
+    Task = "(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            if (-not $windefrunning) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection" `
+                -Name "EnableNetworkProtection" `
+            | Select-Object -ExpandProperty "EnableNetworkProtection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.7.1"
+    Task = "(L1) Ensure 'Enable file hash computation feature' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\NIS" `
+                -Name "EnableConvertWarnToBlock" `
+            | Select-Object -ExpandProperty "EnableConvertWarnToBlock"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.1"
+    Task = "(L1) Ensure 'Configure real-time protection and Security Intelligence Updates during OOBE' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "OobeEnableRtpAndSigUpdate" `
+            | Select-Object -ExpandProperty "OobeEnableRtpAndSigUpdate"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.2"
+    Task = "(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableIOAVProtection" `
+            | Select-Object -ExpandProperty "DisableIOAVProtection"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.3"
+    Task = "(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+            | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.4"
+    Task = "(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableBehaviorMonitoring" `
+            | Select-Object -ExpandProperty "DisableBehaviorMonitoring"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.10.5"
+    Task = "(L1) Ensure 'Turn on script scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableScriptScanning" `
+            | Select-Object -ExpandProperty "DisableScriptScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.11.1.1.1"
+    Task = "(L2) Ensure 'Configure Brute-Force Protection aggressiveness' is set to 1 - 'Enabled: Medium' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection" `
+                -Name "BruteForceProtectionAggressiveness" `
+            | Select-Object -ExpandProperty "BruteForceProtectionAggressiveness"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.11.1.1.2"
+    Task = "(L1) Ensure 'Configure Remote Encryption Protection Mode' is set to 2 - 'Enabled: Audit' or 1 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection" `
+                -Name "BruteForceProtectionConfiguredState" `
+            | Select-Object -ExpandProperty "BruteForceProtectionConfiguredState"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.11.1.2.1"
+    Task = "(L2) Ensure 'Configure how aggressively Remote Encryption Protection blocks threats' is set to 1 - 'Enabled: Medium' or 2 - higher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection" `
+                -Name "RemoteEncryptionProtectionAggressiveness" `
+            | Select-Object -ExpandProperty "RemoteEncryptionProtectionAggressiveness"
+
+            if (($regValue -ne 1) -and ($regValue -ne 2)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or x == 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.12.1"
+    Task = "(L2) Ensure 'Configure Watson events' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" `
+                -Name "DisableGenericReports" `
+            | Select-Object -ExpandProperty "DisableGenericReports"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.1"
+    Task = "(L1) Ensure 'Scan excluded files and directories during quick scans' is set to 'Enabled: 1'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "QuickScanIncludeExclusions" `
+            | Select-Object -ExpandProperty "QuickScanIncludeExclusions"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.2"
+    Task = "(L1) Ensure 'Scan packed executables' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisablePackedExeScanning" `
+            | Select-Object -ExpandProperty "DisablePackedExeScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.3"
+    Task = "(L1) Ensure 'Scan removable drives' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableRemovableDriveScanning" `
+            | Select-Object -ExpandProperty "DisableRemovableDriveScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.4"
+    Task = "(L1) Ensure 'Trigger a quick scan after X days without any scans' is set to 'Enabled: 7'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DaysUntilAggressiveCatchupQuickScan" `
+            | Select-Object -ExpandProperty "DaysUntilAggressiveCatchupQuickScan"
+
+            if ($regValue -ne 7) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 7"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.13.5"
+    Task = "(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" `
+                -Name "DisableEmailScanning" `
+            | Select-Object -ExpandProperty "DisableEmailScanning"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.16"
+    Task = "(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "PUAProtection" `
+            | Select-Object -ExpandProperty "PUAProtection"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.17"
+    Task = "(L1) Ensure 'Control whether exclusions are visible to local users' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" `
+                -Name "HideExclusionsFromLocalUsers" `
+            | Select-Object -ExpandProperty "HideExclusionsFromLocalUsers"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.51.1"
+    Task = "(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive" `
+                -Name "DisableFileSyncNGSC" `
+            | Select-Object -ExpandProperty "DisableFileSyncNGSC"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.56.1"
+    Task = "(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall" `
+                -Name "DisablePushToInstall" `
+            | Select-Object -ExpandProperty "DisablePushToInstall"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.2.2"
+    Task = "(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DisablePasswordSaving" `
+            | Select-Object -ExpandProperty "DisablePasswordSaving"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.2.1"
+    Task = "(L2) Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fSingleSessionPerUser" `
+            | Select-Object -ExpandProperty "fSingleSessionPerUser"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.1"
+    Task = "(L2) Ensure 'Allow UI Automation redirection' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "EnableUiaRedirection" `
+            | Select-Object -ExpandProperty "EnableUiaRedirection"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.2"
+    Task = "(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCcm" `
+            | Select-Object -ExpandProperty "fDisableCcm"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.3"
+    Task = "(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableCdm" `
+            | Select-Object -ExpandProperty "fDisableCdm"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.4"
+    Task = "(L2) Ensure 'Do not allow location redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLocationRedir" `
+            | Select-Object -ExpandProperty "fDisableLocationRedir"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.5"
+    Task = "(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableLPT" `
+            | Select-Object -ExpandProperty "fDisableLPT"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.6"
+    Task = "(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisablePNPRedir" `
+            | Select-Object -ExpandProperty "fDisablePNPRedir"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.7"
+    Task = "(L2) Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fDisableWebAuthn" `
+            | Select-Object -ExpandProperty "fDisableWebAuthn"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.3.8"
+    Task = "(L2) Ensure 'Restrict clipboard transfer from server to client' is set to 'Enabled: Disable clipboard transfers from server to client'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SCClipLevel" `
+            | Select-Object -ExpandProperty "SCClipLevel"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.1"
+    Task = "(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fPromptForPassword" `
+            | Select-Object -ExpandProperty "fPromptForPassword"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.2"
+    Task = "(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "fEncryptRPCTraffic" `
+            | Select-Object -ExpandProperty "fEncryptRPCTraffic"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.3"
+    Task = "(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "SecurityLayer" `
+            | Select-Object -ExpandProperty "SecurityLayer"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.4"
+    Task = "(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "UserAuthentication" `
+            | Select-Object -ExpandProperty "UserAuthentication"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.9.5"
+    Task = "(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MinEncryptionLevel" `
+            | Select-Object -ExpandProperty "MinEncryptionLevel"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.10.1"
+    Task = "(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+            | Select-Object -ExpandProperty "MaxIdleTime"
+
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.10.2"
+    Task = "(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+            | Select-Object -ExpandProperty "MaxDisconnectionTime"
+
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.11.1"
+    Task = "(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "DeleteTempDirsOnExit" `
+            | Select-Object -ExpandProperty "DeleteTempDirsOnExit"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.57.3.11.2"
+    Task = "(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "PerSessionTempDir" `
+            | Select-Object -ExpandProperty "PerSessionTempDir"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.58.1"
+    Task = "(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "DisableEnclosureDownload" `
+            | Select-Object -ExpandProperty "DisableEnclosureDownload"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.58.2"
+    Task = "(L1) Ensure 'Turn on Basic feed authentication over HTTP' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" `
+                -Name "AllowBasicAuthInClear" `
+            | Select-Object -ExpandProperty "AllowBasicAuthInClear"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.2"
+    Task = "(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowCloudSearch" `
+            | Select-Object -ExpandProperty "AllowCloudSearch"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Compliant. Registry value not found."
+                Status  = "True"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Compliant. Registry key not found."
+                Status  = "True"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.3"
+    Task = "(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "AllowIndexingEncryptedStoresOrItems" `
+            | Select-Object -ExpandProperty "AllowIndexingEncryptedStoresOrItems"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.59.4"
+    Task = "(L2) Ensure 'Allow search highlights' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" `
+                -Name "EnableDynamicContentInWSB" `
+            | Select-Object -ExpandProperty "EnableDynamicContentInWSB"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.63.1"
+    Task = "(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" `
+                -Name "NoGenTicket" `
+            | Select-Object -ExpandProperty "NoGenTicket"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.2.1 A"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "EnableSmartScreen" `
+            | Select-Object -ExpandProperty "EnableSmartScreen"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.76.2.1 B"
+    Task = "(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" `
+                -Name "ShellSmartScreenLevel" `
+            | Select-Object -ExpandProperty "ShellSmartScreenLevel"
+
+            if ($regValue -ne "Block") {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: Block"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.80.1"
+    Task = "(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowSuggestedAppsInWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowSuggestedAppsInWindowsInkWorkspace"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.80.2"
+    Task = "(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" `
+                -Name "AllowWindowsInkWorkspace" `
+            | Select-Object -ExpandProperty "AllowWindowsInkWorkspace"
+
+            if (($regValue -ne 1) -and ($regValue -ne 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1 or x == 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.1"
+    Task = "(L1) Ensure 'Allow user control over installs' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "EnableUserControl" `
+            | Select-Object -ExpandProperty "EnableUserControl"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.2"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.81.3"
+    Task = "(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "SafeForScripting" `
+            | Select-Object -ExpandProperty "SafeForScripting"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.82.1"
+    Task = "(L1) Ensure 'Configure the transmission of the user's password in the content of MPR notifications sent by winlogon.' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "EnableMPR" `
+            | Select-Object -ExpandProperty "EnableMPR"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.82.2"
+    Task = "(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" `
+                -Name "DisableAutomaticRestartSignOn" `
+            | Select-Object -ExpandProperty "DisableAutomaticRestartSignOn"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.87.1"
+    Task = "(L2) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging" `
+                -Name "EnableScriptBlockLogging" `
+            | Select-Object -ExpandProperty "EnableScriptBlockLogging"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.87.2"
+    Task = "(L2) Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\PowerShell\Transcription" `
+                -Name "EnableTranscripting" `
+            | Select-Object -ExpandProperty "EnableTranscripting"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.2"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.1.3"
+    Task = "(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled' (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client" `
+                -Name "AllowDigest" `
+            | Select-Object -ExpandProperty "AllowDigest"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.1"
+    Task = "(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowBasic" `
+            | Select-Object -ExpandProperty "AllowBasic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.2"
+    Task = "(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowAutoConfig" `
+            | Select-Object -ExpandProperty "AllowAutoConfig"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.3"
+    Task = "(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "AllowUnencryptedTraffic" `
+            | Select-Object -ExpandProperty "AllowUnencryptedTraffic"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.89.2.4"
+    Task = "(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled' (Service)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service" `
+                -Name "DisableRunAs" `
+            | Select-Object -ExpandProperty "DisableRunAs"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.90.1"
+    Task = "(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service\WinRS" `
+                -Name "AllowRemoteShellAccess" `
+            | Select-Object -ExpandProperty "AllowRemoteShellAccess"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.92.2.1"
+    Task = "(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection" `
+                -Name "DisallowExploitProtectionOverride" `
+            | Select-Object -ExpandProperty "DisallowExploitProtectionOverride"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.1.1"
+    Task = "(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoRebootWithLoggedOnUsers" `
+            | Select-Object -ExpandProperty "NoAutoRebootWithLoggedOnUsers"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.1"
+    Task = "(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "NoAutoUpdate" `
+            | Select-Object -ExpandProperty "NoAutoUpdate"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.2.2"
+    Task = "(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" `
+                -Name "ScheduledInstallDay" `
+            | Select-Object -ExpandProperty "ScheduledInstallDay"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.1"
+    Task = "(L1) Ensure 'Manage preview builds' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "ManagePreviewBuildsPolicyValue" `
+            | Select-Object -ExpandProperty "ManagePreviewBuildsPolicyValue"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.2 A"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdates" `
+            | Select-Object -ExpandProperty "DeferFeatureUpdates"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.2 B"
+    Task = "(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or more days' (DeferFeatureUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferFeatureUpdatesPeriodInDays" `
+            | Select-Object -ExpandProperty "DeferFeatureUpdatesPeriodInDays"
+
+            if (($regValue -lt 180 -or $regValue -gt 365)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x >= 180 and x <= 365"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.3 A"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdates" `
+            | Select-Object -ExpandProperty "DeferQualityUpdates"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.93.4.3 B"
+    Task = "(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" `
+                -Name "DeferQualityUpdatesPeriodInDays" `
+            | Select-Object -ExpandProperty "DeferQualityUpdatesPeriodInDays"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.5.1.1"
+    Task = "(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" `
+                -Name "NoToastApplicationNotificationOnLockScreen" `
+            | Select-Object -ExpandProperty "NoToastApplicationNotificationOnLockScreen"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.6.6.1.1"
+    Task = "(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Assistance\Client\1.0" `
+                -Name "NoImplicitFeedback" `
+            | Select-Object -ExpandProperty "NoImplicitFeedback"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.5.1"
+    Task = "(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "SaveZoneInformation" `
+            | Select-Object -ExpandProperty "SaveZoneInformation"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.5.2"
+    Task = "(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" `
+                -Name "ScanWithAntiVirus" `
+            | Select-Object -ExpandProperty "ScanWithAntiVirus"
+
+            if ($regValue -ne 3) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 3"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.1"
+    Task = "(L1) Ensure 'Configure Windows spotlight on lock screen' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "ConfigureWindowsSpotlight" `
+            | Select-Object -ExpandProperty "ConfigureWindowsSpotlight"
+
+            if ($regValue -ne 2) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 2"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.2"
+    Task = "(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableThirdPartySuggestions" `
+            | Select-Object -ExpandProperty "DisableThirdPartySuggestions"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.3"
+    Task = "(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableTailoredExperiencesWithDiagnosticData" `
+            | Select-Object -ExpandProperty "DisableTailoredExperiencesWithDiagnosticData"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.4"
+    Task = "(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableWindowsSpotlightFeatures" `
+            | Select-Object -ExpandProperty "DisableWindowsSpotlightFeatures"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.8.5"
+    Task = "(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CloudContent" `
+                -Name "DisableSpotlightCollectionOnDesktop" `
+            | Select-Object -ExpandProperty "DisableSpotlightCollectionOnDesktop"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.26.1"
+    Task = "(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" `
+                -Name "NoInplaceSharing" `
+            | Select-Object -ExpandProperty "NoInplaceSharing"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.44.1"
+    Task = "(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Installer" `
+                -Name "AlwaysInstallElevated" `
+            | Select-Object -ExpandProperty "AlwaysInstallElevated"
+
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "19.7.46.2.1"
+    Task = "(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer" `
+                -Name "PreventCodecDownload" `
+            | Select-Object -ExpandProperty "PreventCodecDownload"
+
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#SecurityOptions.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#SecurityOptions.ps1
new file mode 100644
index 0000000..89e9339
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#SecurityOptions.ps1	
@@ -0,0 +1,133 @@
+[AuditTest] @{
+    Id          = "2.3.1.1"
+    Task        = "(L1) Ensure 'Accounts: Guest account status' is set to 'Disabled' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["EnableGuestAccount"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'EnableGuestAccount' currently set to: $setOption. Expected: 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.3"
+    Task = "(L1) Configure 'Accounts: Rename administrator account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewAdministratorName"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$") {
+            return @{
+                Message = "'NewAdministratorName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Administrator)\b).*$"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1.4"
+    Task = "(L1) Configure 'Accounts: Rename guest account'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["NewGuestName"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -notmatch "^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$") {
+            return @{
+                Message = "'NewGuestName' currently set to: $setOption. Expected: ^(?=.{1,20}$)(?i)(?!.*\b(?:Guest|Gast)\b).*$"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.10.1"
+    Task = "(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["LSAAnonymousNameLookup"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -ne 0) {
+            return @{
+                Message = "'LSAAnonymousNameLookup' currently set to: $setOption. Expected: 0"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.6"
+    Task = "(L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'"
+    Test = {
+        $securityOption = Get-AuditResource "WindowsSecurityPolicy"
+        $setOption = $securityOption['System Access']["ForceLogoffWhenHourExpire"]
+
+        if ($null -eq $setOption) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        if ($setOption -ne 1) {
+            return @{
+                Message = "'ForceLogoffWhenHourExpire' currently set to: $setOption. Expected: 1"
+                Status  = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#UserRights.ps1 b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#UserRights.ps1
new file mode 100644
index 0000000..4853eac
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Microsoft Windows Server 2025-CIS-1.0.0#UserRights.ps1	
@@ -0,0 +1,1987 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$hyperVStatus = CheckHyperVStatus
+# Common
+function ConvertTo-NTAccountUser {
+    [CmdletBinding()]
+    [OutputType([hashtable])]
+    Param(
+        [Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+        [string] $Name
+    )
+
+    process {
+        try {
+            # Convert Domaingroups to german
+            $language = Get-UICulture
+            if ($language.Name -match "de-DE") {
+                if ($name -eq "Enterprise Admins") {
+                    $name = "Organisations-Admins"
+                }
+                elseif ($name -eq "Domain Admins") {
+                    $name = "Domänen-Admins"
+                }
+            }
+
+            # Convert friendlynames to SID
+            $map = @{
+                "Administrators"                      = "S-1-5-32-544"
+                "Guests"                              = "S-1-5-32-546"
+                "Local account"                       = "S-1-5-113"
+                "Local Service"                       = "S-1-5-19"
+                "Network Service"                     = "S-1-5-20"
+                "NT AUTHORITY\Authenticated Users"    = "S-1-5-11"
+                "Remote Desktop Users"                = "S-1-5-32-555"
+                "Service"                             = "S-1-5-6"
+                "Users"                               = "S-1-5-32-545"
+                "NT VIRTUAL MACHINE\Virtual Machines" = "S-1-5-83-0"
+            }
+
+            if ($map.ContainsKey($name)) {
+                $name = $map[$name]
+            }
+
+            # Identity doesn't exist on when Hyper-V isn't installed
+            if ($Name -eq "S-1-5-83-0" -and
+                (Get-WindowsOptionalFeature -Online -FeatureName "Microsoft-Hyper-V").State -ne "Enabled") {
+                return $null
+            }
+
+            Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+            if ($Name -match "^(S-[0-9-]{3,})") {
+                $sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+            }
+            else {
+                $sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+            }
+            if ($sidAccount.Translate([System.Security.Principal.NTAccount]) -eq "NULL SID") {
+                return @{
+                    Account = $null
+                    Sid     = $sidAccount.Value
+                }
+            }
+            else {
+                return @{
+                    Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+                    Sid     = $sidAccount.Value
+                }
+            }
+        }
+        catch {
+            return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+        }
+    }
+}
+
+# Tests
+[AuditTest] @{
+    Id   = "2.2.1"
+    Task = "(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTrustedCredManAccessPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTrustedCredManAccessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.2"
+    Task        = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.3"
+    Task        = "(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-11"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeNetworkLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.4"
+    Task = "(L1) Ensure 'Act as part of the operating system' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTcbPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTcbPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTcbPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.5"
+    Task        = "(L1) Ensure 'Add workstations to domain' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeMachineAccountPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeMachineAccountPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeMachineAccountPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.6"
+    Task = "(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseQuotaPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseQuotaPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.7"
+    Task        = "(L1) Ensure 'Allow log on locally' is set to 'Administrators, ENTERPRISE DOMAIN CONTROLLERS' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-9"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.8"
+    Task        = "(L1) Ensure 'Allow log on locally' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.9"
+    Task        = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.10"
+    Task        = "(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-32-555"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.11"
+    Task = "(L1) Ensure 'Back up files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBackupPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBackupPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBackupPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.12"
+    Task = "(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemtimePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-19"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemtimePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemtimePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.13"
+    Task = "(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTimeZonePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTimeZonePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTimeZonePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.14"
+    Task = "(L1) Ensure 'Create a pagefile' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePagefilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePagefilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePagefilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.15"
+    Task = "(L1) Ensure 'Create a token object' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateTokenPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.16"
+    Task = "(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateGlobalPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateGlobalPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateGlobalPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.17"
+    Task = "(L1) Ensure 'Create permanent shared objects' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreatePermanentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreatePermanentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreatePermanentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.18"
+    Task        = "(L1) Ensure 'Create symbolic links' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ($hyperVStatus -ne "Enabled") {
+    [AuditTest] @{
+        Id          = "2.2.19"
+        Task        = "(L1) Ensure 'Create symbolic links' is set to 'Administrators [Hyper-V-Feature NOT installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+        Test        = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else {
+    [AuditTest] @{
+        Id          = "2.2.19"
+        Task        = "(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' [Hyper-V-Feature installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        ) 
+        Test        = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeCreateSymbolicLinkPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+                "S-1-5-83-0"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.20"
+    Task = "(L1) Ensure 'Debug programs' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDebugPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }        
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        
+        if ($unexpectedUsers.Count -gt 0) {
+            $messages = @()
+            $messages += "The user right 'SeDebugPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            $message = $messages -join [System.Environment]::NewLine
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        } 
+        #No UserRights on System comparing to publisher recommendation
+        if ($null -eq $currentUserRights -and $identityAccounts.Count -gt 0) {
+            return @{
+                Status  = "True"
+                Message = "Compliant - No UserRights are assigned to this policy. This configuration is even more secure than publisher recommendation."
+            }
+        }
+        #Less UserRights on System comparing to publisher recommendation
+        if ($currentUserRights.Count -lt $identityAccounts.Count) {
+            $users = ""
+            foreach ($currentUser in $currentUserRights) {
+                $users += $currentUser.Values
+            }
+            return @{
+                Status  = "True"
+                Message = "Compliant - Positive Deviation to publisher. Less UserRights are assigned to this policy than expected: $($users)"
+            }
+        }
+        #Same UserRights on System comparing to publisher recommendation
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.21"
+    Task        = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.22"
+    Task        = "(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyNetworkLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-114"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyNetworkLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.23"
+    Task = "(L1) Ensure 'Deny log on as a batch job' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.24"
+    Task = "(L1) Ensure 'Deny log on as a service' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyServiceLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyServiceLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.25"
+    Task = "(L1) Ensure 'Deny log on locally' to include 'Guests'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.26"
+    Task        = "(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.27"
+    Task        = "(L1) Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeDenyRemoteInteractiveLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-546"
+            "S-1-5-113"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+        
+        
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+        
+        if (($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+        
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+        
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.28"
+    Task        = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.29"
+    Task        = "(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeEnableDelegationPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeEnableDelegationPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeEnableDelegationPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.30"
+    Task = "(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRemoteShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRemoteShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRemoteShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+$adfsModule = Get-Module -Name ADFS
+if ($null -eq $adfsModule) {
+    [AuditTest] @{
+        Id   = "2.2.31 "
+        Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE NOT installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-19"
+                "S-1-5-20"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else {
+    [AuditTest] @{
+        Id   = "2.2.31"
+        Task = "(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE installed]"
+        Test = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeAuditPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-19"
+                "S-1-5-20"
+                "S-1-5-80-1321940109-3370001082-3650459431-215109509-2472514016"
+                "S-1-5-80-2246541699-21809830-3603976364-117610243-975697593"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeAuditPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeAuditPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.32"
+    Task        = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+            "S-1-5-32-544"
+            "S-1-5-6"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+if ((Get-WindowsFeature -Name web-server).installed -ne $true) {
+    [AuditTest] @{
+        Id          = "2.2.33 A"
+        Task        = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+        Test        = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+            $identityAccounts = @(
+                "S-1-5-19"
+                "S-1-5-20"
+                "S-1-5-32-544"
+                "S-1-5-6"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+    
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+    
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+    
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+    
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+else {
+    [AuditTest] @{
+        Id          = "2.2.33 B"
+        Task        = "(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' [IIS Role installed] (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+        Test        = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeImpersonatePrivilege"]
+            $identityAccounts = @(
+                "S-1-5-19"
+                "S-1-5-20"
+                "S-1-5-32-544"
+                "S-1-5-32-568"
+                "S-1-5-6"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+    
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+    
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeImpersonatePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeImpersonatePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+    
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+    
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.34"
+    Task = "(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeIncreaseBasePriorityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-90-0"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeIncreaseBasePriorityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.35"
+    Task = "(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLoadDriverPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLoadDriverPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLoadDriverPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.36"
+    Task = "(L1) Ensure 'Lock pages in memory' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeLockMemoryPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeLockMemoryPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeLockMemoryPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.37"
+    Task        = "(L2) Ensure 'Log on as a batch job' is set to 'Administrators' (DC Only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeBatchLogonRight"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeBatchLogonRight' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeBatchLogonRight' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.38"
+    Task        = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' and (when Exchange is running in the environment) 'Exchange Servers' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.39"
+    Task        = "(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.40"
+    Task = "(L1) Ensure 'Modify an object label' is set to 'No One'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRelabelPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRelabelPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRelabelPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.41"
+    Task = "(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemEnvironmentPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemEnvironmentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemEnvironmentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.42"
+    Task = "(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeManageVolumePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeManageVolumePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeManageVolumePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.43"
+    Task = "(L1) Ensure 'Profile single process' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeProfileSingleProcessPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeProfileSingleProcessPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeProfileSingleProcessPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.44"
+    Task = "(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSystemProfilePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+            "S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSystemProfilePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSystemProfilePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.45"
+    Task = "(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeAssignPrimaryTokenPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-19"
+            "S-1-5-20"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeAssignPrimaryTokenPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.46"
+    Task = "(L1) Ensure 'Restore files and directories' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeRestorePrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeRestorePrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeRestorePrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.47"
+    Task = "(L1) Ensure 'Shut down the system' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeShutdownPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeShutdownPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeShutdownPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "2.2.48"
+    Task        = "(L1) Ensure 'Synchronize directory service data' is set to 'No One' (DC only)"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeSyncAgentPrivilege"]
+        $identityAccounts = @(
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeSyncAgentPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeSyncAgentPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2.49"
+    Task = "(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $currentUserRights = $securityPolicy["Privilege Rights"]["SeTakeOwnershipPrivilege"]
+        $identityAccounts = @(
+            "S-1-5-32-544"
+        ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+
+        $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+        $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+
+        if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+            $messages = @()
+            if ($unexpectedUsers.Count -gt 0) {
+                $messages += "The user right 'SeTakeOwnershipPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+            }
+            if ($missingUsers.Count -gt 0) {
+                $messages += "The user 'SeTakeOwnershipPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+            }
+            $message = $messages -join [System.Environment]::NewLine
+
+            return @{
+                Status  = "False"
+                Message = $message
+            }
+        }
+
+        return @{
+            Status  = "True"
+            Message = "Compliant"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/RSSeverityTests.ps1 b/ATAPAuditor/AuditGroups/RSSeverityTests.ps1
new file mode 100644
index 0000000..d865c80
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/RSSeverityTests.ps1
@@ -0,0 +1,2509 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$windefrunning = CheckWindefRunning
+. "$RootPath\Helpers\Firewall.ps1"
+$domainRole = (Get-CimInstance -Class Win32_ComputerSystem).DomainRole
+$listOfWeakCipherSuites = getListOfWeakCipherSuites
+$listOfInsecureCipherSuites = getListOfInsecureCipherSuites
+[AuditTest] @{
+    Id   = "1.1.7"
+    Task = "Ensure 'Store passwords using reversible encryption' is set to 'Disabled'"
+    Test = {
+        $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+        $setPolicy = $securityPolicy['System Access']["ClearTextPassword"]
+        
+        if ($null -eq $setPolicy) {
+            return @{
+                Message = "Currently not set."
+                Status  = "False"
+            }
+        }
+        $setPolicy = [long]$setPolicy
+        
+        if ($setPolicy -ne 0) {
+            return @{
+                Message = "'ClearTextPassword' currently set to: $setPolicy. Expected: 0"
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+if ($domainRole -eq 3) {
+    [AuditTest] @{
+        Id          = "2.2.38"
+        Task        = "Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Member Server" }
+        )
+        Test        = {
+            $securityPolicy = Get-AuditResource "WindowsSecurityPolicy"
+            $currentUserRights = $securityPolicy["Privilege Rights"]["SeSecurityPrivilege"]
+            $identityAccounts = @(
+                "S-1-5-32-544"
+            ) | ConvertTo-NTAccountUser | Where-Object { $null -ne $_ }
+            
+            $unexpectedUsers = $currentUserRights.Account | Where-Object { $_ -notin $identityAccounts.Account }
+            $missingUsers = $identityAccounts.Account | Where-Object { $_ -notin $currentUserRights.Account }
+            
+            if (($unexpectedUsers.Count -gt 0) -or ($missingUsers.Count -gt 0)) {
+                $messages = @()
+                if ($unexpectedUsers.Count -gt 0) {
+                    $messages += "The user right 'SeSecurityPrivilege' contains following unexpected users: " + ($unexpectedUsers -join ", ")
+                }
+                if ($missingUsers.Count -gt 0) {
+                    $messages += "The user 'SeSecurityPrivilege' setting does not contain the following users: " + ($missingUsers -join ", ")
+                }
+                $message = $messages -join [System.Environment]::NewLine
+            
+                return @{
+                    Status  = "False"
+                    Message = $message
+                }
+            }
+            
+            return @{
+                Status  = "True"
+                Message = "Compliant"
+            }
+        }
+    }
+}
+if ($domainRole -ge 4) {
+    [AuditTest] @{
+        Id          = "2.3.5.2"
+        Task        = "Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)"
+        Constraints = @(
+            @{ "Property" = "DomainRole"; "Values" = "Primary Domain Controller", "Backup Domain Controller" }
+        )
+        Test        = {
+            try {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters" `
+                    -Name "LDAPServerIntegrity" `
+                | Select-Object -ExpandProperty "LDAPServerIntegrity"
+            
+                if ($regValue -ne 2) {
+                    return @{
+                        Message = "Registry value is '$regValue'. Expected: 2"
+                        Status  = "False"
+                    }
+                }
+            }
+            catch [System.Management.Automation.PSArgumentException] {
+                return @{
+                    Message = "Registry value not found."
+                    Status  = "False"
+                }
+            }
+            catch [System.Management.Automation.ItemNotFoundException] {
+                return @{
+                    Message = "Registry key not found."
+                    Status  = "False"
+                }
+            }
+            
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.4"
+    Task = "Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters" `
+                -Name "SupportedEncryptionTypes" `
+            | Select-Object -ExpandProperty "SupportedEncryptionTypes"
+        
+            if (($regValue -ne 2147483644) -and ($regValue -ne 2147483640)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x == 2147483644 or x == 2147483640"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.11.5"
+    Task = "Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa" `
+                -Name "NoLMHash" `
+            | Select-Object -ExpandProperty "NoLMHash"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.7"
+    Task        = "Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogDroppedPackets"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+[AuditTest] @{
+    Id          = "9.1.8"
+    Task        = "Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'"
+    Constraints = @(
+        @{ "Property" = "DomainRole"; "Values" = "Member Workstation", "Member Server", "Primary Domain Controller", "Backup Domain Controller" }
+    )
+    Test        = {
+        $path1 = "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging"
+        $path2 = "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging"      
+        $key = "LogSuccessfulConnections"
+        $expectedValue = 1;
+        $profileType = "Domain"
+        $result = $path1, $path2 | Test-FirewallPaths -Key $key -ExpectedValue $expectedValue -ProfileType $profileType
+        return @{
+            Message = $($result.Message)
+            Status  = $($result.Status)
+        }
+    }
+}
+
+
+
+[AuditTest] @{
+    Id   = "18.3.3"
+    Task = "Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mrxsmb10" `
+                -Name "Start" `
+            | Select-Object -ExpandProperty "Start"
+        
+            if ($regValue -ne 4) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 4"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.3.3"
+    Task = "Ensure 'Configure SMB v1 server' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" `
+                -Name "SMB1" `
+            | Select-Object -ExpandProperty "SMB1"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+
+
+
+[AuditTest] @{
+    Id   = "18.3.6"
+    Task = "Ensure 'WDigest Authentication' is set to 'Disabled'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest" `
+                -Name "UseLogonCredential" `
+            | Select-Object -ExpandProperty "UseLogonCredential"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "18.6.2"
+    Task = "Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "NoWarningNoElevationOnInstall" `
+            | Select-Object -ExpandProperty "NoWarningNoElevationOnInstall"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.6.3"
+    Task = "Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" `
+                -Name "UpdatePromptSettings" `
+            | Select-Object -ExpandProperty "UpdatePromptSettings"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.9.2"
+    Task = "Ensure 'Turn off real-time protection' is set to 'Disabled'"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" `
+                -Name "DisableRealtimeMonitoring" `
+            | Select-Object -ExpandProperty "DisableRealtimeMonitoring"
+        
+            if ($regValue -eq 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 A"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 B"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "3b576869-a4ec-4529-8536-b80a7769e899"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 C"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 D"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes' is configured"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 E"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 F"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 G"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 H"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 I"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 J"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d3e037e1-3eb8-44c8-a917-57927947596d"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 K"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "d4f940ab-401b-4efc-aadc-ad5f3c50688a"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.47.5.1.2 L"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "e6db77e5-3df2-4cf1-b95a-636979351e5b"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.10.43.6.1.2 M"
+    Task = "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block abuse of exploited vulnerable signed drivers)"
+    Test = {
+        try {
+            if ((-not $windefrunning)) {
+                return @{
+                    Message = "This rule requires Windows Defender Antivirus to be enabled."
+                    Status  = "None"
+                }
+            }
+            $regValue = 0;
+            $regValueTwo = 0;
+            $Path = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest1 = Test-ASRRules -Path $Path -Value $Value 
+            if ($asrTest1) {
+                $regValue = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path `
+                    -Name $Value `
+                | Select-Object -ExpandProperty $Value
+            }
+
+            $Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+            $Value2 = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+
+            $asrTest2 = Test-ASRRules -Path $Path2 -Value $Value2 
+            if ($asrTest2) {
+                $regValueTwo = Get-ItemProperty -ErrorAction Stop `
+                    -Path $Path2 `
+                    -Name $Value2 `
+                | Select-Object -ExpandProperty $Value2
+            }
+
+            if ($regValue -ne 1 -and $regValueTwo -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.58.3.10.1"
+    Task = "Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxIdleTime" `
+            | Select-Object -ExpandProperty "MaxIdleTime"
+        
+            if (($regValue -gt 900000 -or $regValue -eq 0)) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: x <= 900000 and x != 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "18.9.58.3.10.2"
+    Task = "Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" `
+                -Name "MaxDisconnectionTime" `
+            | Select-Object -ExpandProperty "MaxDisconnectionTime"
+        
+            if ($regValue -ne 60000) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 60000"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1"
+    Task = "Disable SSLv2 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2"
+    Task = "Disable SSLv2 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.3"
+    Task = "Disable SSLv2 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.4"
+    Task = "Disable SSLv2 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.1"
+    Task = "Disable SSLv3 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.2"
+    Task = "Disable SSLv3 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.3"
+    Task = "Disable SSLv3 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.4"
+    Task = "Disable SSLv3 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1"
+    Task = "Disable TLS1.0 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.2"
+    Task = "Disable TLS1.0 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.3"
+    Task = "Disable TLS1.0 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.4"
+    Task = "Disable TLS1.0 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.4.1"
+    Task = "Disable TLS1.1 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.4.2"
+    Task = "Disable TLS1.1 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.4.3"
+    Task = "Disable TLS1.1 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.4.4"
+    Task = "Disable TLS1.1 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.1"
+    Task = "Enable TLS1.2 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.2"
+    Task = "Enable TLS1.2 Protocol (Server Default)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" `
+                -Name "DisabledByDefault" `
+            | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1"
+    Task = "Disable NULL Cipher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.2"
+    Task = "Disable DES Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.1"
+    Task = "Disable RC4 Cipher Suite - 40/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.2"
+    Task = "Disable RC4 Cipher Suite - 56/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.3"
+    Task = "Disable RC4 Cipher Suite - 64/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.3.4"
+    Task = "Disable RC4 Cipher Suite - 128/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.4"
+    Task = "Disable AES 128/128 Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.5"
+    Task = "Enable AES 256/256 Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -eq 4294967295) {
+                return @{
+                    Message = "The current registry value is '$regValue', which is no longer supported by Microsoft. For more information, please refer to this link:<br/>"`
+                        + '<a href="https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings">'`
+                        + 'Learn.microsoft.com - TLS, DTLS, and SSL protocol version settings<a/>'
+                    Status  = "False"
+                }
+            }
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.6"
+    Task = "Disable Triple DES Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1"
+    Task = "Disable SHA-1 hash"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.2"
+    Task = "Disable MD5 hash"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5" `
+                -Name "Enabled" `
+            | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status  = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status  = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status  = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1"
+    Task = "Configure Cipher Suite Ordering"
+    Test = {
+        #check if correct type 
+        $typeTable = @{
+            "String"   = "String Value"
+            "Byte"     = "Byte Value"
+            "Int32"    = "DWORD (32-bit) Value"
+            "Int64"    = "QWORD (64-bit) Value"
+            "String[]" = "Multi-String Value"
+        }
+        #Default status
+        $status = "Error"
+    
+        #Output
+        $verbInsecure = "rules have"
+        $verbWeak = "rules have"
+    
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002" `
+                -Name "Functions"
+            $reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+            $res = $regValue.Functions.GetType().Name
+    
+    
+            $currentType = $typeTable[$res]
+            if ($res -ne [String]) {
+                return @{  
+                    Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'String Value'"
+                    Status  = "False"
+                }
+            }
+    
+            #check if insecure or weak cipher is inside value
+            $regValues = $regValue.Split(',')
+            $regValues = $regValues -replace ' ', ''
+            $weakRulesFound = @()
+            $insecureRulesFound = @()
+            foreach ($element in $regValues) {
+                if ($listOfWeakCipherSuites.Contains($element)) {
+                    $weakRulesFound += $element
+                }
+                if ($listOfInsecureCipherSuites.Contains($element)) {
+                    $insecureRulesFound += $element
+                }
+            }
+            if ($insecureRulesFound.Count -eq 1) { $verbInsecure = "rule has" }
+            if ($weakRulesFound.Count -eq 1) { $verbWeak = "rule has" }
+            $insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+            $weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+    
+            #Preparing message
+            foreach ($member in $weakRulesFound) {
+                $status = "Warning"
+                $weakMessage += "$($member)<br/>"
+            }          
+            foreach ($member in $insecureRulesFound) {
+                $status = "False"
+                $insecureMessage += "$($member)<br/>"
+            }          
+            #Combine or shorten message
+            if ($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0) {
+                $message = ""
+                if ($weakRulesFound.Count -eq 0) { $weakMessage = "" }
+                if ($insecureRulesFound.Count -eq 0) { $insecureMessage = "" }
+    
+                $message = $insecureMessage + $weakMessage
+                return @{
+                    Message = $message
+                    Status  = $status
+                }
+            }
+        }
+        catch {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002" `
+                -Name "Functions"
+            $reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+            $res = $regValue.Functions.GetType().Name
+    
+            $currentType = $typeTable[$res]
+            if ($res -ne [String[]]) {
+                return @{  
+                    Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'Multi-String Value'"
+                    Status  = "False"
+                }
+            }
+    
+            #check if insecure or weak cipher is inside value
+            $regValues = $regValue -replace ' ', ''
+            $weakRulesFound = @()
+            $insecureRulesFound = @()
+            foreach ($element in $regValues) {
+                if ($listOfWeakCipherSuites.Contains($element)) {
+                    $weakRulesFound += $element
+                }
+                if ($listOfInsecureCipherSuites.Contains($element)) {
+                    $insecureRulesFound += $element
+                }
+            }
+            if ($insecureRulesFound.Count -eq 1) { $verbInsecure = "rule has" }
+            if ($weakRulesFound.Count -eq 1) { $verbWeak = "rule has" }
+            $insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+            $weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+    
+            #Preparing message
+            foreach ($member in $weakRulesFound) {
+                $status = "Warning"
+                $weakMessage += "$($member)<br/>"
+            }          
+            foreach ($member in $insecureRulesFound) {
+                $status = "False"
+                $insecureMessage += "$($member)<br/>"
+            }          
+            #Combine or shorten message
+            if ($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0) {
+                $message = ""
+                if ($weakRulesFound.Count -eq 0) { $weakMessage = "" }
+                if ($insecureRulesFound.Count -eq 0) { $insecureMessage = "" }
+    
+                $message = $insecureMessage + $weakMessage
+                return @{
+                    Message = $message
+                    Status  = $status
+                }
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status  = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-1.0.0.ps1 b/ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-1.0.0.ps1
new file mode 100644
index 0000000..8bc1161
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-1.0.0.ps1	
@@ -0,0 +1,3832 @@
+$rcTrue = "True"
+$rcCompliant = "Compliant"
+$rcFalse = "False"
+$rcNone = "None"
+$rcNonCompliant = "Non-Compliant"
+$rcNonCompliantManualReviewRequired = "Manual review required"
+$rcCompliantIPv6isDisabled = "IPv6 is disabled"
+
+$retCompliant = @{
+    Message = $rcCompliant
+    Status = $rcTrue
+}
+$retNonCompliant = @{
+    Message = $rcNonCompliant
+    Status = $rcFalse
+}
+$retCompliantIPv6Disabled = @{
+    Message = $rcCompliantIPv6isDisabled
+    Status = $rcTrue
+}
+$retNonCompliantManualReviewRequired = @{
+    Message = $rcNonCompliantManualReviewRequired
+    Status = $rcNone
+}
+
+$IPv6Status_script = grep -Pqs '^\h*0\b' /sys/module/ipv6/parameters/disable && echo "IPv6 is enabled" || echo "IPv6 is not enabled"
+$IPv6Status = bash -c $IPv6Status_script
+if ($IPv6Status -match "is enabled") {
+    $IPv6Status = "enabled"
+} else {
+    $IPv6Status = "disabled"
+}
+
+$parentPath = Split-Path -Parent -Path $PSScriptRoot
+$scriptPath = $parentPath + "/Helpers/ShellScripts/RHEL9/"
+
+
+### Chapter 1 - Initial Setup
+
+
+[AuditTest] @{
+    Id = "1.1.1.1"
+    Task = "Ensure mounting of squashfs filesystems is disabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_1111.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.1.2"
+    Task = "Ensure mounting of udf filesystems is disabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_1112.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.1"
+    Task = "Ensure /tmp is a separate partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep -E '\s/tmp\s'
+        if ($result -match "/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.2"
+    Task = "Ensure nodev option set on /tmp partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep nodev
+        if ($result -match "/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.3"
+    Task = "Ensure noexec option set on /tmp partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep noexec
+        if ($result -match "/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.4"
+    Task = "Ensure nosuid option set on /tmp partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep nosuid
+        if ($result -match "/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.3.1"
+    Task = "Ensure separate partition exists for /var"
+    Test = {
+        $result = findmnt --kernel /var
+        if ($result -match "/var") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id = "1.1.3.2"
+    Task = "Ensure nodev option set on /var partition"
+    Test = {
+        $result = findmnt --kernel /var | grep nodev
+        if ($result -match "/var") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.3.3"
+    Task = "Ensure nosuid option set on /var partition"
+    Test = {
+        $result = findmnt --kernel /var | grep nosuid
+        if ($result -match "/var") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.4.1"
+    Task = "Ensure separate partition exists for /var/tmp"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+        if ($result -match "/var/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.4.2"
+    Task = "Ensure noexec option set on /var/tmp partition"
+    Test = {
+        $result = findmnt --kernel /var/tmp | grep noexec
+        if ($result -match "/var/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.4.3"
+    Task = "Ensure nosuid option set on /var/tmp partition"
+    Test = {
+        $result = findmnt --kernel /var/tmp | grep nosuid
+        if ($result -match "/var/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.4.4"
+    Task = "Ensure nodev option set on /var/tmp partition"
+    Test = {
+        $result = findmnt --kernel /var/tmp | grep nodev
+        if ($result -match "/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.5.1"
+    Task = "Ensure separate partition exists for /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log
+        if ($result -match "/var/log") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.5.2"
+    Task = "Ensure nodev option set on /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log | grep nodev
+        if ($result -match "/var/log") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.5.3"
+    Task = "Ensure noexec option set on /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log | grep noexec
+        if ($result -match "/var/log") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.5.4"
+    Task = "Ensure nosuid option set on /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log | grep nosuid
+        if ($result -match "/var/log") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.6.1"
+    Task = "Ensure separate partition exists for /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+        if ($result -match "/var/log/audit") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.6.2"
+    Task = "Ensure noexec option set on /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit | grep noexec
+        if ($result -match "/var/log/audit") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.6.3"
+    Task = "Ensure nodev option set on /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit | grep nodev
+        if ($result -match "/var/log/audit") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.6.4"
+    Task = "Ensure nosuid option set on /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit | grep nosuid
+        if ($result -match "/var/log/audit") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.7.1"
+    Task = "Ensure separate partition exists for /home"
+    Test = {
+        $result = findmnt --kernel /home
+        if ($result -match "/home") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.7.2"
+    Task = "Ensure nodev option set on /home"
+    Test = {
+        $result = findmnt --kernel /home | grep nodev
+        if ($result -match "/home") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.7.3"
+    Task = "Ensure nosuid option set on /home"
+    Test = {
+        $result = findmnt --kernel /home | grep nosuid
+        if ($result -match "/home") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.8.1"
+    Task = "Ensure /dev/shm is a separate partition"
+    Test = {
+        $result = findmnt --kernel /dev/shm
+        if ($result -match "/dev/shm") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.8.2"
+    Task = "Ensure nodev option set on /dev/shm partition"
+    Test = {
+        $result = mount | grep -E '\s/dev/shm\s' | grep nodev
+        if ($result -match "/dev/shm") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.8.3"
+    Task = "Ensure noexec option set on /dev/shm partition"
+    Test = {
+        $result = findmnt --kernel /dev/shm | grep noexec
+        if ($result -match "/dev/shm") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.8.4"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $result = findmnt --kernel /dev/shm | grep nosuid
+        if ($result -match "/dev/shm") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.9"
+    Task = "Disable USB Storage"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_119.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "Ensure GPG keys are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "Ensure gpgcheck is globally activated"
+    Test = {
+        $result = grep ^gpgcheck /etc/dnf/dnf.conf
+        if ($result -match "gpgcheck=1") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "Ensure package manager repositories are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.2.4"
+    Task = "Ensure repo_gpgcheck is globally activated"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.3.1"
+    Task = "Ensure aide is installed"
+    Test = {
+        $result = rpm -q aide
+        if ($result -match "aide-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.3.2"
+    Task = "Ensure filesystem integrity is regularly checked"
+    Test = {
+        $result1 = systemctl is-enabled aidecheck.service
+        $result2 = systemctl is-enabled aidecheck.timer
+        $result3 = systemctl status aidecheck.service
+        if ($result1 -match "enabled" -and $result2 -match "enabled" -and $result3 -match "Active:") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.3.3"
+    Task = "Ensure filesystem integrity is regularly checked"
+    Test = {
+        $result = grep -Ps -- '(\/sbin\/(audit|au)\H*\b)' /etc/aide.conf.d/*.conf /etc/aide.conf
+        if ($result -match "/sbin/auditctl p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+        $result -match "/sbin/auditd p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+        $result -match "/sbin/ausearch p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+        $result -match "/sbin/aureport p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+        $result -match "/sbin/autrace p+i+n+u+g+s+b+acl+xattrs+sha512" -and
+        $result -match "/sbin/augenrules p+i+n+u+g+s+b+acl+xattrs+sha512"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.4.1"
+    Task = "Ensure bootloader password is set"
+    Test = {
+        $result = awk -F. '/^\s*GRUB2_PASSWORD/ {print $1"."$2"."$3}' /boot/grub2/user.cfg
+        if ($result -match "GRUB2_PASSWORD=grub.pbkdf2.sha512") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.4.2"
+    Task = "Ensure permissions on bootloader config are configured"
+    Test = {
+        $result1 = stat -Lc "%n %#a %u/%U %g/%G" /boot/grub2/grub.cfg | grep '/boot/grub2/grub.cfg\s*0700\s*0/root\s*0/root'
+        $result2 = stat -Lc "%n %#a %u/%U %g/%G" /boot/grub2/grubenv | grep '/boot/grub2/grubenv\s*0600\s*0/root\s*0/root'
+        $result3 = stat -Lc "%n %#a %u/%U %g/%G" /boot/grub2/user.cfg | grep '/boot/grub2/user.cfg\s*0600\s*0/root\s*0/root'
+        if ($result1 -ne $null -and $result2 -ne $null -and $result3 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.1"
+    Task = "Ensure core dump storage is disabled"
+    Test = {
+        $result = grep -i '^\s*storage\s*=\s*none' /etc/systemd/coredump.conf
+        if ($result -match "Storage=none") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.2"
+    Task = "Ensure core dump backtraces are disabled"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    grep -Pi '^\h*ProcessSizeMax\h*=\h*0\b' /etc/systemd/coredump.conf || echo -e "\n- Audit results:\n FAIL\n - \"ProcessSizeMax\" is: \"$(grep -i 'ProcessSizeMax' /etc/systemd/coredump.conf)\""
+}
+'@
+        $result = bash -c $script_string
+        if ($result -match "FAIL") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.3"
+    Task = "Ensure address space layout randomization (ASLR) is enabled"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="kernel.randomize_va_space=2"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC()
+    {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc)"
+        l_fafile="$(grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}')"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<< "$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<< "$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n" [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
+'@
+        $script = bash -c $script_string
+        if ($script -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.1"
+    Task = "Ensure SELinux is installed"
+    Test = {
+        $result = rpm -q libselinux
+        if ($result -match "libselinux-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.2"
+    Task = "Ensure SELinux is not disabled in bootloader configuration"
+    Test = {
+        $result = grubby --info=ALL | grep -Po '(selinux|enforcing)=0\b'
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.3"
+    Task = "Ensure SELinux policy is configured"
+    Test = {
+        $result1 = grep -E '^\s*SELINUXTYPE=(targeted|mls)\b' /etc/selinux/config
+        $result2 = sestatus | grep Loaded
+        if (($result1 -match "targeted" -or $result1 -match "mls") -and ($result2 -match "targeted" -or $result2 -match "mls")) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.4"
+    Task = "Ensure the SELinux mode is not disabled"
+    Test = {
+        $result1 = getenforce
+        $result2 = grep -Ei '^\s*SELINUX=(enforcing|permissive)' /etc/selinux/config
+        if (($result1 -match "Enforcing" -or $result1 -match "Permissive") -and ($result2 -match "SELINUX=enforcing" -or $result2 -match "SELINUX=permissive")) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.5"
+    Task = "Ensure the SELinux mode is enforcing"
+    Test = {
+        $result1 = getenforce
+        $result2 = grep -i SELINUX=enforcing /etc/selinux/config
+        if ($result1 -match "Enforcing" -and $result2 -match "SELINUX=enforcing") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.6"
+    Task = "Ensure no uncofined services exist"
+    Test = {
+        $result = ps -eZ | grep unconfined_service_t
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.7"
+    Task = "Ensure SETroubleshoot is not installed"
+    Test = {
+        $result = rpm -q setroubleshoot
+        if ($result -match "is not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1.8"
+    Task = "Ensure the MCS Translation Service (mcstrans) is not installed"
+    Test = {
+        $result = rpm -q mcstrans
+        if ($result -match "is not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.1"
+    Task = "Ensure the MCS Translation Service (mcstrans) is not installed"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/motd
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.2"
+    Task = "Ensure local login warning banner is configured properly"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.3"
+    Task = "Ensure remote login warning banner is configured properly"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.4"
+    Task = "Ensure permissions on /etc/motd are configured"
+    Test = {
+        $result = stat  -c "%a" /etc/motd
+        if ($result -eq 644) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.5"
+    Task = "Ensure permissions on /etc/issue are configured"
+    Test = {
+        $result = stat -c "%a" /etc/issue
+        if ($result -eq 644) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.6"
+    Task = "Ensure permissions on /etc/issue.net are configured"
+    Test = {
+        $result = stat -c "%a" /etc/issue.net
+        if ($result -eq 644) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.1"
+    Task = "Ensure GNOME Display Manager is removed"
+    Test = {
+        $result = rpm -q gdm
+        if ($result -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.2"
+    Task = "Ensure GDM login banner is configured"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_182.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.3"
+    Task = "Ensure GDM disable-user-list option is enabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_183.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.4"
+    Task = "Ensure GDM screen locks then the user is idle"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_184.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.5"
+    Task = "Ensure GDM screen locks cannot be overridden"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_185.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.6"
+    Task = "Ensure GDM automatic mounting of removable media is disabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_186.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.7"
+    Task = "Ensure GDM disabling automatic mounting of removable media is not overridden"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_187.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.8"
+    Task = "Ensure GDM autorun-never is enabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_188.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.9"
+    Task = "Ensure GDM autorun-never is not overridden"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_189.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.10"
+    Task = "Ensure XDCMP is not enabled"
+    Test = {
+        $test = grep -Eis '^\s*Enable\s*=\s*true' /etc/gdm/custom.conf
+        if ($test -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.9"
+    Task = "Ensure updates, patches, and additional security software are installed"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.10"
+    Task = "Ensure system-wide crypto policy is not legacy"
+    Test = {
+        $test = grep -E -i '^\s*LEGACY\s*(\s+#.*)?$' /etc/crypto-policies/config
+        if ($test -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+### Chapter 2 - Services
+
+
+[AuditTest] @{
+    Id = "2.1.1"
+    Task = "Ensure time synchronization is in use"
+    Test = {
+        $test = rpm -q chrony
+        if ($test -match "chrony-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.1.2"
+    Task = "Ensure chrony is configured"
+    Test = {
+        $test = grep -E "^(server|pool)" /etc/chrony.conf | grep OPTIONS\s*-u\s*chrony
+        if ($test -match "OPTIONS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "Ensure xorg-x11-server-common is not installed"
+    Test = {
+        $test = rpm -q xorg-x11-server-common
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "Ensure Avahi Server is not installed"
+    Test = {
+        $test = rpm -q avahi
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "Ensure CUPS is not installed"
+    Test = {
+        $test = rpm -q cups
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "Ensure DHCP Server is not installed"
+    Test = {
+        $test = rpm -q dhcp-server
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "Ensure DNS Server is not installed"
+    Test = {
+        $test = rpm -q bind
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "Ensure VSFTP Server is not installed"
+    Test = {
+        $test = rpm -q vsftpd
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "Ensure VSFTP Server is not installed"
+    Test = {
+        $test = rpm -q vsftpd
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "Ensure a web server is not installed"
+    Test = {
+        $test = rpm -q httpd nginx
+        if ($test -match "httpd is not installed" -and $test -match "nginx is not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "Ensure IMAP and POP3 server is not installed"
+    Test = {
+        $test = rpm -q dovecot cyrus-imapd
+        if ($test -match "dovecot is not installed" -and $test -match "cyrus-imapd is not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "Ensure Samba is not installed"
+    Test = {
+        $test = rpm -q samba
+        if ($test -match "samba is not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "Ensure HTTP Proxy Server is not installed"
+    Test = {
+        $test = rpm -q squid
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "Ensure net-snmp is not installed"
+    Test = {
+        $test = rpm -q net-snmp
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "Ensure telnet-server is not installed"
+    Test = {
+        $test = rpm -q telnet-server
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.14"
+    Task = "Ensure dnsmasq is not installed"
+    Test = {
+        $test = rpm -q dnsmasq
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "Ensure mail transfer agent is configured for local-only mode"
+    Test = {
+        $test = ss -lntu | grep -E ':25\s' | grep -E -v '\s(127.0.0.1|\[?::1\]?):25\s'
+        if ($test -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "Ensure nfs-utils is not installed or the nfs-server service is masked"
+    Test = {
+        rpm -q nfs-utils
+        if ($?) {
+          return $retCompliant
+        } else {
+          return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "Ensure rpcbind is not installed or the rpcbind services are masked"
+    Test = {
+        $test1 = rpm -q rpcbind
+        $test21 = systemctl is-enabled rpcbind
+        $test22 = systemctl is-enabled rpcbind.socket
+        if ($test1 -match "not installed" -or ($test21 -match "masked" -and $test22 -match "masked")) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "Ensure rsync-daemon is not installed or the rsyncd service is masked"
+    Test = {
+        $test1 = rpm -q rsync-daemon
+        $test2 = systemctl is-enabled rsync-daemon
+        if ($test1 -match "not installed" -or $test2 -match "masked") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.1"
+    Task = "Ensure telnet client is not installed"
+    Test = {
+        $test = rpm -q telnet
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.2"
+    Task = "Ensure LDAP client is not installed"
+    Test = {
+        $test = rpm -q openldap-clients
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.3"
+    Task = "Ensure TFTP client is not installed"
+    Test = {
+        $test = rpm -q tftp
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.4"
+    Task = "Ensure FTP client is not installed"
+    Test = {
+        $test = rpm -q ftp
+        if ($test -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.4"
+    Task = "Ensure nonessential services listening on the system are removed or masked"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+### Chapter 3 - Network Configuration
+
+
+[AuditTest] @{
+    Id = "3.1.1"
+    Task = "Ensure IPv6 status is identified"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.1.2"
+    Task = "Ensure wireless interfaces are disabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_312.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.1.3"
+    Task = "Ensure TIPC is disabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_313.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.2.1"
+    Task = "Ensure IP forwarding is disabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_321.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.2.2"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_322_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_322_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "PASS" -and $result2 -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.1"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $resultScript11 = $scriptPath + "CIS100_RHEL9_331_11.sh"
+        $result11 = bash $resultScript11
+        $resultScript12 = $scriptPath + "CIS100_RHEL9_331_12.sh"
+        $result12 = bash $resultScript12
+        $resultScript21 = $scriptPath + "CIS100_RHEL9_331_21.sh"
+        $result21 = bash $resultScript21
+        $resultScript22 = $scriptPath + "CIS100_RHEL9_331_22.sh"
+        $result22 = bash $resultScript22
+        if ($IPv6Status -eq "enabled") {
+            if ($result21 -match "PASS" -and $result22 -match "PASS") {
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        } else {
+            if ($result11 -match "PASS" -and $result12 -match "PASS") {
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.2"
+    Task = "Ensure ICMP redirects are not accepted"
+    Test = {
+        $resultScript11 = $scriptPath + "CIS100_RHEL9_332_11.sh"
+        $result11 = bash $resultScript11
+        $resultScript12 = $scriptPath + "CIS100_RHEL9_332_12.sh"
+        $result12 = bash $resultScript12
+        $resultScript21 = $scriptPath + "CIS100_RHEL9_332_21.sh"
+        $result21 = bash $resultScript21
+        $resultScript22 = $scriptPath + "CIS100_RHEL9_332_22.sh"
+        $result22 = bash $resultScript22
+        if ($IPv6Status -eq "enabled") {
+            if ($result21 -match "PASS" -and $result22 -match "PASS") {
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        } else {
+            if ($result11 -match "PASS" -and $result12 -match "PASS") {
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        }
+    }
+}
+
+# 3.3.3 ist identisch mit 3.3.2 ... warum auch immer - wird hier weg gelassen
+
+[AuditTest] @{
+    Id = "3.3.4"
+    Task = "Ensure suspicious packets are logged"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_334_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_334_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "PASS" -and $result2 -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.5"
+    Task = "Ensure broadcast ICMP requests are ignored"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_335.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.6"
+    Task = "Ensure bogus ICMP responses are ignored"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_336.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.7"
+    Task = "Ensure Reverse Path Filtering is enabled"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_337_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_337_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "PASS" -and $result2 -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.8"
+    Task = "Ensure TCP SYN Cookies is enabled"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_338.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.9"
+    Task = "Ensure IPv6 router advertisements are not accepted"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_339_1.sh"
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_339_2.sh"
+        if ($IPv6Status -match "disabled") {
+            return $retCompliantIPv6Disabled
+        } else {
+            $script1 = bash $resultScript1
+            $script2 = bash $resultScript2
+            if ($script1 -match "PASS" -and $script2 -match "PASS") {
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.1.1"
+    Task = "Ensure nftables is installed"
+    Test = {
+        $result = rpm -q nftables
+        if ($result -match "nftables-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.1.2"
+    Task = "Ensure a single firewall configuration utility is in use"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_3412.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2.1"
+    Task = "Ensure firewalld default zone is set"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_3421.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2.2"
+    Task = "Ensure at least one nftables table exists"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2.3"
+    Task = "Ensure nftables base chains exist"
+    Test = {
+        try{
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if($test1 -match "type filter hook input" -and $test2 -match "type filter hook forward" -and $test3 -match "type filter hook output"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2.4"
+    Task = "Ensure host based firewall loopback traffic is configured"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    if nft list ruleset | awk '/hook\s+input\s+/,/\}\s*(#.*)?$/' | grep -Pq -- '\H+\h+"lo"\h+accept'; then
+        l_output="$l_output\n - Network traffic to the loopback address is correctly set to accept"
+    else
+        l_output2="$l_output2\n - Network traffic to the loopback address is not set to accept"
+    fi
+    l_ipsaddr="$(nft list ruleset | awk '/filter_IN_public_deny|hook\s+input\s+/,/\}\s*(#.*)?$/' | grep -P -- 'ip\h+saddr')"
+    if grep -Pq -- 'ip\h+saddr\h+127\.0\.0\.0\/8\h+(counter\h+packets\h+\d+\h+bytes\h+\d+\h+)?drop' <<< "$l_ipsaddr" || grep -Pq -- 'ip\h+daddr\h+\!\=\h+127\.0\.0\.1\h+ip\h+saddr\h+127\.0\.0\.1\h+drop' <<< "$l_ipsaddr"; then
+        l_output="$l_output\n - IPv4 network traffic from loopback address correctly set to drop"
+    else
+        l_output2="$l_output2\n - IPv4 network traffic from loopback address not set to drop"
+    fi
+    if grep -Pq -- '^\h*0\h*$' /sys/module/ipv6/parameters/disable; then
+        l_ip6saddr="$(nft list ruleset | awk '/filter_IN_public_deny|hook input/,/}/' | grep 'ip6 saddr')"
+        if grep -Pq 'ip6\h+saddr\h+::1\h+(counter\h+packets\h+\d+\h+bytes\h+\d+\h+)?drop' <<< "$l_ip6saddr" || grep -Pq -- 'ip6\h+daddr\h+\!=\h+::1\h+ip6\h+saddr\h+::1\h+drop' <<< "$l_ip6saddr"; then
+            l_output="$l_output\n - IPv6 network traffic from loopback address correctly set to drop"
+        else
+            l_output2="$l_output2\n - IPv6 network traffic from loopback address not set to drop"
+        fi
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n$l_output2\n\n - Correctly set:\n$l_output"
+    fi
+}
+'@
+        $script = bash -c $script_string
+        if ($script -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2.5"
+    Task = "Ensure firewalld drops unnecessary services and ports"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2.6"
+    Task = "Ensure nftables established connections are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2.7"
+    Task = "Ensure nftables default deny firewall policy"
+    Test = {
+        $result1 = systemctl --quiet is-enabled nftables.service && nft list ruleset | grep 'hook input' | grep -v 'policy drop'
+        $result2 = systemctl --quiet is-enabled nftables.service && nft list ruleset | grep 'hook forward' | grep -v 'policy drop'
+        if ($result1 -eq $null -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+### Chapter 4 - Logging and Auditing
+
+
+[AuditTest] @{
+    Id = "4.1.1.1"
+    Task = "Ensure auditd is installed"
+    Test = {
+        $result1 = rpm -q audit
+        if ($result1 -match "audit-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.1.2"
+    Task = "Ensure auditing for processes that start prior to auditd is enabled"
+    Test = {
+        $result1 = grubby --info=ALL | grep -Po '\baudit=1\b'
+        if ($result1 -match "audit=1") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.1.3"
+    Task = "Ensure audit_backlog_limit is sufficient"
+    Test = {
+        $result1 = grubby --info=ALL | grep -Po "\baudit_backlog_limit=\d+\b"
+        if ($result1 -match "audit_backlog_limit=") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.1.4"
+    Task = "Ensure auditd service is enabled"
+    Test = {
+        $result1 = systemctl is-enabled auditd
+        if ($result1 -match "enabled") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.2.1"
+    Task = "Ensure audit log storage size is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.2.2"
+    Task = "Ensure audit logs are not automatically deleted"
+    Test = {
+        $result1 = grep max_log_file_action /etc/audit/auditd.conf | grep max_log_file_action
+        if ($result1 -match "max_log_file_action = keep_logs") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.2.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $result1 = grep space_left_action /etc/audit/auditd.conf
+        $result2 = grep action_mail_acct /etc/audit/auditd.conf
+        $result3 = grep -E 'admin_space_left_action\s*=\s*(halt|single)' /etc/audit/auditd.conf
+        if ($result1 -match "space_left_action = email" -and $result2 -match "action_mail_acct = root" -and ($result3 -match "admin_space_left_action = halt" -or $result3 -match "admin_space_left_action = single")) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.1"
+    Task = "Ensure changes to system administration scope (sudoers) is collected"
+    Test = {
+        $result1 = awk '/^ *-w/ &&/\/etc\/sudoers/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+        $result2 = auditctl -l | awk '/^ *-w/ &&/\/etc\/sudoers/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+        if ($result1 -match "-w /etc/sudoers -p wa -k scope" -and $result1 -match "-w /etc/sudoers.d -p wa -k scope" -and $result2 -match "-w /etc/sudoers -p wa -k scope" -and $result2 -match "-w /etc/sudoers.d -p wa -k scope") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.2"
+    Task = "Ensure actions as another user are always logged"
+    Test = {
+        $result1 = awk '/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&(/ -C *euid!=uid/||/ -C *uid!=euid/) &&/ -S *execve/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+        $result2 = auditctl -l | awk '/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&(/ -C *euid!=uid/||/ -C *uid!=euid/) &&/ -S *execve/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+        if ($result1 -match "-a always,exit -F arch=b64 -C euid!=uid -F auid!=unset -S execve -k user_emulation" -and $result1 -match "-a always,exit -F arch=b32 -C euid!=uid -F auid!=unset -S execve -k user_emulation" -and $result2 -match "-a always,exit -F arch=b64 -S execve -C uid!=euid -F auid!=-1 -F key=user_emulation" -and $result2 -match "-a always,exit -F arch=b32 -S execve -C uid!=euid -F auid!=-1 -F key=user_emulation") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.3"
+    Task = "Ensure events that modify the sudo log file are collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_4133_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_4133_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "-w /var/log/sudo.log -p wa -k sudo_log_file" -and $result2 -match "-w /var/log/sudo.log -p wa -k sudo_log_file") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.4"
+    Task = "Ensure events that modify date and time information are collected"
+    Test = {
+        $script_string1 = @'
+    #!/usr/bin/env bash
+    {
+        awk '/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&/ -S/ &&(/adjtimex/ ||/settimeofday/ ||/clock_settime/ ) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+        awk '/^ *-w/ &&/\/etc\/localtime/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+    }
+'@
+        $script_string2 = @'
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&/ -S/ &&(/adjtimex/ ||/settimeofday/ ||/clock_settime/ ) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+    auditctl -l | awk '/^ *-w/ &&/\/etc\/localtime/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
+'@
+        $result1 = bash -c $script_string1
+        $result2 = bash -c $script_string2
+        if ($result1 -match "-a always,exit -F arch=b64 -S adjtimex,settimeofday,clock_settime -F key=time-change" -and $result1 -match "-a always,exit -F arch=b32 -S adjtimex,settimeofday,clock_settime -k time-change" -and $result1 -match "-w /etc/localtime -p wa -k time-change" -and
+            $result2 -match "-w /var/log/sudo.log -p wa -k sudo_log_file" -and $result2 -match "-a always,exit -F arch=b32 -S adjtimex,settimeofday,clock_settime -F key=time-change" -and $result2 -match "-w /etc/localtime -p wa -k time-change") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.5"
+    Task = "Ensure events that modify the system's network environment are collected"
+    Test = {
+        $script_string1 = @'
+    #!/usr/bin/env bash
+    {
+        awk '/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&/ -S/ &&(/sethostname/ ||/setdomainname/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+        awk '/^ *-w/ &&(/\/etc\/issue/ ||/\/etc\/issue.net/ ||/\/etc\/hosts/ ||/\/etc\/sysconfig\/network/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+    }
+'@
+        $script_string2 = @'
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&/ -S/ &&(/sethostname/ ||/setdomainname/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+    auditctl -l | awk '/^ *-w/ &&(/\/etc\/issue/ ||/\/etc\/issue.net/ ||/\/etc\/hosts/ ||/\/etc\/sysconfig\/network/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
+'@
+        $result1 = bash -c $script_string1
+        $result2 = bash -c $script_string2
+        if ($result1 -match "-a always,exit -F arch=b64 -S sethostname,setdomainname -k system-locale" -and $result1 -match "-a always,exit -F arch=b32 -S sethostname,setdomainname -k system-locale" -and $result1 -match "-w /etc/issue -p wa -k system-locale" -and $result1 -match "-w /etc/issue.net -p wa -k system-locale" -and $result1 -match "-w /etc/hosts -p wa -k system-locale" -and $result1 -match "-w /etc/sysconfig/network -p wa -k system-locale" -and $result1 -match "-w /etc/sysconfig/network-scripts/ -p wa -k system-locale" -and 
+            $result2 -match "-a always,exit -F arch=b64 -S sethostname,setdomainname -F key=system-locale" -and $result2 -match "-a always,exit -F arch=b32 -S sethostname,setdomainname -F key=system-locale" -and $result2 -match "-w /etc/issue -p wa -k system-locale" -and $result2 -match "-w /etc/issue.net -p wa -k system-locale" -and $result2 -match "-w /etc/hosts -p wa -k system-locale" -and $result2 -match "-w /etc/sysconfig/network -p wa -k system-locale" -and $result2 -match "-w /etc/sysconfig/network-scripts -p wa -k system-locale") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.6"
+    Task = "Ensure use of privileged commands are collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_4136_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_4136_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "Warning" -or $result2 -match "Warning") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.7"
+    Task = "Ensure unsuccessful file access attempts are collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_4137_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_4137_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F arch=b64 -S creat,open,openat,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access" -and $result1 -match "-a always,exit -F arch=b64 -S creat,open,openat,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access" -and $result1 -match "-a always,exit -F arch=b32 -S creat,open,openat,truncate,ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=unset -k access" -and $result1 -match "-a always,exit -F arch=b32 -S creat,open,openat,truncate,ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=unset -k access" -and
+            $result2 -match "-a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -F key=access" -and $result2 -match "-a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -F key=access" -and $result2 -match "-a always,exit -F arch=b32 -S open,truncate,ftruncate,creat,openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -F key=access" -and $result2 -match "-a always,exit -F arch=b32 -S open,truncate,ftruncate,creat,openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -F key=access") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.8"
+    Task = "Ensure events that modify user/group information are collected"
+    Test = {
+        $script_string1 = @'
+#!/usr/bin/env bash
+{
+    awk '/^ *-w/ &&(/\/etc\/group/ ||/\/etc\/passwd/ ||/\/etc\/gshadow/ ||/\/etc\/shadow/ ||/\/etc\/security\/opasswd/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+}
+'@
+        $script_string2 = @'
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-w/ &&(/\/etc\/group/ ||/\/etc\/passwd/ ||/\/etc\/gshadow/ ||/\/etc\/shadow/ ||/\/etc\/security\/opasswd/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
+'@
+        $result1 = bash -c $script_string1
+        $result2 = bash -c $script_string2
+        if ($result1 -match "-w /etc/group -p wa -k identity" -and $result1 -match "-w /etc/passwd -p wa -k identity" -and $result1 -match "-w /etc/gshadow -p wa -k identity" -and $result1 -match "-w /etc/shadow -p wa -k identity" -and $result1 -match "-w /etc/security/opasswd -p wa -k identity" -and
+            $result2 -match "-w /etc/group -p wa -k identity" -and $result2 -match "-w /etc/passwd -p wa -k identity" -and $result2 -match "-w /etc/gshadow -p wa -k identity" -and $result2 -match "-w /etc/shadow -p wa -k identity" -and $restul2 -match "-w /etc/security/opasswd -p wa -k identity") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.9"
+    Task = "Ensure discretionary access control permission modification events are collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_4139_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_4139_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -F key=perm_mod" -and $result1 -match "-a always,exit -F arch=b64 -S chown,fchown,lchown,fchownat -F auid>=1000 -F auid!=unset -F key=perm_mod" -and $result1 -match "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=unset -F key=perm_mod" -and
+            $result1 -match "-a always,exit -F arch=b32 -S lchown,fchown,chown,fchownat -F auid>=1000 -F auid!=unset -F key=perm_mod" -and $result1 -match "-a always,exit -F arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=unset -F key=perm_mod" -and $result1 -match "-a always,exit -F arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=unset -F key=perm_mod" -and
+            $result2 -match "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and $result2 -match "-a always,exit -F arch=b64 -S chown,fchown,lchown,fchownat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and $result2 -match "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and
+            $result2 -match "-a always,exit -F arch=b32 -S lchown,fchown,chown,fchownat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and $result2 -match "-a always,exit -F arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and $result2 -match "-a always,exit -F arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=-1 -F key=perm_mod") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.10"
+    Task = "Ensure successful file system mounts are collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41310_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41310_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=unset -k mounts" -and $result1 -match "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=unset -k mounts" -and
+            $result2 -match "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=-1 -F key=mounts" -and $result2 -match "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=-1 -F key=mounts") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.11"
+    Task = "Ensure session initiation information is collected"
+    Test = {
+        $script_string1 = @'
+#!/usr/bin/env bash
+{
+    awk '/^ *-w/ &&(/\/var\/run\/utmp/ ||/\/var\/log\/wtmp/ ||/\/var\/log\/btmp/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+}
+'@
+        $script_string2 = @'
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-w/ &&(/\/var\/run\/utmp/ ||/\/var\/log\/wtmp/ ||/\/var\/log\/btmp/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
+'@
+        $result1 = bash -c $script_string1
+        $result2 = bash -c $script_string2
+        if ($result1 -match "-w /var/run/utmp -p wa -k session" -and $result1 -match "-w /var/log/wtmp -p wa -k session" -and $result1 -match "-w /var/log/btmp -p wa -k session" -and
+            $result2 -match "-w /var/run/utmp -p wa -k session" -and $result2 -match "-w /var/log/wtmp -p wa -k session" -and $result2 -match "-w /var/log/btmp -p wa -k session") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id = "4.1.3.12"
+    Task = "Ensure login and logout events are collected"
+    Test = {
+        $script_string1 = @'
+#!/usr/bin/env bash
+{
+    awk '/^ *-w/ \
+    &&(/\/var\/log\/lastlog/ \
+    ||/\/var\/run\/faillock/) \
+    &&/ +-p *wa/ \
+    &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+}
+'@
+        $script_string2 = @'
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-w/ \
+    &&(/\/var\/log\/lastlog/ \
+    ||/\/var\/run\/faillock/) \
+    &&/ +-p *wa/ \
+    &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
+'@
+        $result1 = bash -c $script_string1
+        $result2 = bash -c $script_string2
+        if ($result1 -match "-w /var/log/lastlog -p wa -k logins" -and $result1 -match "-w /var/run/faillock -p wa -k logins" -and
+            $result2 -match "-w /var/log/lastlog -p wa -k logins" -and $result2 -match "-w /var/run/faillock -p wa -k logins") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.13"
+    Task = "Ensure file deletion events by users are collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41313_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41313_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F arch=b64 -S unlink,unlinkat,rename,renameat -F auid>=1000 -F auid!=unset -k delete" -and $result1 -match "-a always,exit -F arch=b32 -S unlink,unlinkat,rename,renameat -F auid>=1000 -F auid!=unset -k delete" -and
+            $result2 -match "-a always,exit -F arch=b64 -S rename,unlink,unlinkat,renameat -F auid>=1000 -F auid!=-1 -F key=delete" -and $result2 -match "-a always,exit -F arch=b32 -S unlink,rename,unlinkat,renameat -F auid>=1000 -F auid!=-1 -F key=delete") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.14"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41314_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41314_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "-w /etc/selinux -p wa -k MAC-policy" -and $result1 -match "-w /usr/share/selinux -p wa -k MAC-policy" -and
+            $result2 -match "-w /etc/selinux -p wa -k MAC-policy" -and $result2 -match "-w /usr/share/selinux -p wa -k MAC-policy") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.15"
+    Task = "Ensure successful and unsuccessful attempts to use the chcon command are recorded"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41315_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41315_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=unset -k perm_chng" -and
+            $result2 -match "-a always,exit -S all -F path=/usr/bin/chcon -F perm=x -F auid>=1000 -F auid!=-1 -F key=perm_chng") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.16"
+    Task = "Ensure successful and unsuccessful attempts to use the setfacl command are recorded"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41316_1.sh"
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41316_2.sh"
+        $result1 = bash $resultScript1
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=unset -k perm_chng" -and
+            $result2 -match "-a always,exit -S all -F path=/usr/bin/setfacl -F perm=x -F auid>=1000 -F auid!=-1 -F key=perm_chng") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.17"
+    Task = "Ensure successful and unsuccessful attempts to use the chacl command are recorded"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41317_1.sh"
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41317_2.sh"
+        $result1 = bash $resultScript1
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=unset -k perm_chng" -and
+            $result2 -match "-a always,exit -S all -F path=/usr/bin/chacl -F perm=x -F auid>=1000 -F auid!=-1 -F key=perm_chng") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.18"
+    Task = "Ensure successful and unsuccessful attempts to use the usermod command are recorded"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41318_1.sh"
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41318_2.sh"
+        $result1 = bash $resultScript1
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=unset -k usermod" -and
+            $result2 -match "-a always,exit -S all -F path=/usr/sbin/usermod -F perm=x -F auid>=1000 -F auid!=-1 -F key=usermod") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.19"
+    Task = "Ensure kernel module loading unloading and modification is collected"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_41319_1.sh"
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_41319_2.sh"
+        $result1 = bash $resultScript1
+        $result2 = bash $resultScript2
+        if ($result1 -match "-a always,exit -F arch=b64 -S init_module,finit_module,delete_module,create_module,query_module -F auid>=1000 -F auid!=unset -k kernel_modules" -and $result1 -match "-a always,exit -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=unset -k kernel_modules" -and
+            $result2 -match "-a always,exit -F arch=b64 -S create_module,init_module,delete_module,query_module,finit_module -F auid>=1000 -F auid!=-1 -F key=kernel_modules" -and $result2 -match "-a always,exit -S all -F path=/usr/bin/kmod -F perm=x -F auid>=1000 -F auid!=-1 -F key=kernel_modules" -and $result3 -match "OK") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.20"
+    Task = "Ensure the audit configuration is immutable"
+    Test = {
+        $result1 = grep -Ph -- '^\h*-e\h+2\b' /etc/audit/rules.d/*.rules | tail -1
+        if ($result1 -match "-e 2") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3.21"
+    Task = "Ensure the running and on disk configuration is the same"
+    Test = {
+        $result1 = augenrules --check
+        if ($result1 -match "/usr/sbin/augenrules: No change") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.1"
+    Task = "Ensure audit log files are mode 0640 or less permissive"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_4141.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.2"
+    Task = "Ensure only authorized users own audit log files"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_3412.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.3"
+    Task = "Ensure only authorized groups are assigned ownership of audit log files"
+    Test = {
+        $script_string1 = @'
+#!/usr/bin/env bash
+{
+    stat -c "%n %G" "$(dirname $(awk -F"=" '/^\s*log_file\s*=\s*/ {print $2}' /etc/audit/auditd.conf | xargs))"/* | grep -Pv '^\h*\H+\h+(adm|root)\b'
+}
+'@
+        $result1 = bash -c $script_string1
+        $result2 = grep -Piw -- '^\h*log_group\h*=\h*(adm|root)\b' /etc/audit/auditd.conf
+        if (($result1 -match "log_group = adm" -or $result1 -match "log_group = root") -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.4"
+    Task = "Ensure the audit log directory is 0750 or more restrictive"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_4144.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.5"
+    Task = "Ensure audit configuration files are 640 or more restrictive"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_4145.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.6"
+    Task = "Ensure audit configuration files are owned by root"
+    Test = {
+        $result1_string = @'
+#!/usr/bin/env bash
+{
+    find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) ! -user root
+}
+'@
+        $result1 = bash -c $result1_string
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.7"
+    Task = "Ensure audit configuration files belong to group root"
+    Test = {
+        $result1_string = @'
+#!/usr/bin/env bash
+{
+    find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) ! -group root
+}
+'@
+        $result1 = bash -c $result1_string
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.8"
+    Task = "Ensure audit tools are 755 or more restrictive"
+    Test = {
+        $result1 = stat -c "%n %a" /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | grep -Pv -- '^\h*\H+\h+([0-7][0,1,4,5][0,1,4,5])\h*$'
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.9"
+    Task = "Ensure audit tools are owned by root"
+    Test = {
+        $result1 = stat -c "%n %U" /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | grep -Pv -- '^\h*\H+\h+root\h*$'
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4.10"
+    Task = "Ensure audit tools belong to group root"
+    Test = {
+        $result1 = stat -c "%n %a %U %G" /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | grep -Pv -- '^\h*\H+\h+([0-7][0,1,4,5][0,1,4,5])\h+root\h+root\h*$'
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.1"
+    Task = "Ensure rsyslog is installed"
+    Test = {
+        $result1 = rpm -q rsyslog
+        if ($result1 -match "rsyslog-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.2"
+    Task = "Ensure rsyslog service is enabled"
+    Test = {
+        $result1 = systemctl is-enabled rsyslog
+        if ($result1 -match "enabled") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.3"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        $result1 = grep ^\s*ForwardToSyslog /etc/systemd/journald.conf
+        if ($result1 -match "ForwardToSyslog=yes") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.4"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        $result1 = grep -Ps '^\h*\$FileCreateMode\h+0[0,2,4,6][0,2,4]0\b' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if ($result1 -match "FileCreateMode 0640") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.5"
+    Task = "Ensure logging is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.6"
+    Task = "Ensure rsyslog is configured to send logs to a remote log host"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.7"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        $result1 = grep -Ps -- '^\h*module\(load="imtcp"\)' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        $result2 = grep -Ps -- '^\h*input\(type="imtcp" port="514"\)' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if ($result1 -eq $null -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.1.1"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        $result1 = rpm -q systemd-journal-remote
+        if ($result1 -eq "systemd-journal-remote-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.1.2"
+    Task = "Ensure systemd-journal-remote is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.1.3"
+    Task = "Ensure systemd-journal-remote is enabled"
+    Test = {
+        $result1 = systemctl is-enabled systemd-journal-upload.service
+        if ($result1 -match "enabled") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.1.4"
+    Task = "Ensure journald is not configured to receive logs from a remote client"
+    Test = {
+        $result1 = systemctl is-enabled systemd-journal-remote.socket
+        if ($result1 -match "masked") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.2"
+    Task = "Ensure journald service is enabled"
+    Test = {
+        $result1 = systemctl is-enabled systemd-journald.service
+        if ($result1 -match "static") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.3"
+    Task = "Ensure journald is configured to compress large log files"
+    Test = {
+        $result1 = grep ^\s*Compress /etc/systemd/journald.conf
+        if ($result1 -match "Compress=yes") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.4"
+    Task = "Ensure journald is configured to write logfiles to persistent disk"
+    Test = {
+        $result1 = grep ^\s*Storage /etc/systemd/journald.conf
+        if ($result1 -match "Storage=persistent") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.5"
+    Task = "Ensure journald is not configured to send logs to rsyslog"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.6"
+    Task = "Ensure journald log rotation is configured per site policy"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.7"
+    Task = "Ensure journald default file permissions configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.3"
+    Task = "Ensure all logfiles have appropriate permissions and ownership"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    echo -e "\n- Start check - logfiles have appropriate permissions and ownership"
+    output=""
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    find /var/log -type f | (while read -r fname; do
+        bname="$(basename "$fname")"
+        fugname="$(stat -Lc "%U %G" "$fname")"
+        funame="$(awk '{print $1}' <<< "$fugname")"
+        fugroup="$(awk '{print $2}' <<< "$fugname")"
+        fuid="$(stat -Lc "%u" "$fname")"
+        fmode="$(stat -Lc "%a" "$fname")"
+        case "$bname" in lastlog | lastlog.* | wtmp | wtmp.* | wtmp-* | btmp | btmp.* | btmp-*)
+            if ! grep -Pq -- '^\h*[0,2,4,6][0,2,4,6][0,4]\h*$' <<< "$fmode"; then
+                output="$output\n- File: \"$fname\" mode: \"$fmode\"\n"
+            fi
+            if ! grep -Pq -- '^\h*root\h+(utmp|root)\h*$' <<< "$fugname"; then
+                output="$output\n- File: \"$fname\" ownership: \"$fugname\"\n"
+            fi
+            ;;
+        secure | auth.log | syslog | messages)
+            if ! grep -Pq -- '^\h*[0,2,4,6][0,4]0\h*$' <<< "$fmode"; then
+                output="$output\n- File: \"$fname\" mode: \"$fmode\"\n"
+            fi
+            if ! grep -Pq -- '^\h*(syslog|root)\h+(adm|root)\h*$' <<< "$fugname"; then
+                output="$output\n- File: \"$fname\" ownership: \"$fugname\"\n"
+            fi
+            ;;
+        SSSD | sssd)
+            if ! grep -Pq -- '^\h*[0,2,4,6][0,2,4,6]0\h*$' <<< "$fmode"; then
+                output="$output\n- File: \"$fname\" mode: \"$fmode\"\n"
+            fi
+            if ! grep -Piq -- '^\h*(SSSD|root)\h+(SSSD|root)\h*$' <<< "$fugname"; then
+                output="$output\n- File: \"$fname\" ownership: \"$fugname\"\n"
+            fi
+            ;;
+        gdm | gdm3)
+            if ! grep -Pq -- '^\h*[0,2,4,6][0,2,4,6]0\h*$' <<< "$fmode"; then
+                output="$output\n- File: \"$fname\" mode: \"$fmode\"\n"
+            fi
+            if ! grep -Pq -- '^\h*(root)\h+(gdm3?|root)\h*$' <<< "$fugname"; then
+                output="$output\n- File: \"$fname\" ownership: \"$fugname\"\n"
+            fi
+            ;;
+        *.journal | *.journal~)
+            if ! grep -Pq -- '^\h*[0,2,4,6][0,4]0\h*$' <<< "$fmode"; then
+                output="$output\n- File: \"$fname\" mode: \"$fmode\"\n"
+            fi
+            if ! grep -Pq -- '^\h*(root)\h+(systemd-journal|root)\h*$' <<< "$fugname"; then
+                output="$output\n- File: \"$fname\" ownership: \"$fugname\"\n"
+            fi
+            ;;
+        *)  if ! grep -Pq -- '^\h*[0,2,4,6][0,4]0\h*$' <<< "$fmode"; then
+                output="$output\n- File: \"$fname\" mode: \"$fmode\"\n"
+            fi
+            if [ "$fuid" -ge "$UID_MIN" ] || ! grep -Pq -- '(adm|root|'"$(id -gn "$funame")"')' <<< "$fugroup"; then
+                if [ -n "$(awk -v grp="$fugroup" -F: '$1==grp {print $4}' /etc/group)" ] || ! grep -Pq '(syslog|root)' <<< "$funame"; then
+                    output="$output\n- File: \"$fname\" ownership: \"$fugname\"\n"
+                fi
+            fi
+            ;;
+        esac
+    done # If all files passed, then we pass
+    if [ -z "$output" ]; then
+        echo -e "\n- Audit Results:\n PASS\n- All files in \"/var/log/\" have appropriate permissions and ownership\n"
+    else # print the reason why we are failing
+        echo -e "\n- Audit Results:\n FAIL\n$output"
+    fi
+    echo -e "- End check - logfiles have appropriate permissions and ownership\n"
+    )
+}
+'@
+        $script = bash -c $script_string
+        if ($script -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.3"
+    Task = "Ensure logrotate is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+ 
+    }
+}
+
+
+### Chapter 5 - Access, Authentication and Authorization
+
+
+[AuditTest] @{
+    Id = "5.1.1"
+    Task = "Ensure cron daemon is enabled"
+    Test = {
+        $result1 = systemctl is-enabled crond
+        if ($result1 -match "enabled") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/crontab
+        if ($result1 -eq 600 ) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.3"
+    Task = "Ensure permissions on /etc/cron.hourly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.hourly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.daily
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.weekly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.monthly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.d
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.8"
+    Task = "Ensure cron is restricted to authorized users"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    if rpm -q cronie >/dev/null; then
+        [ -e /etc/cron.deny ] && echo "Fail: cron.deny exists"
+        if [ ! -e /etc/cron.allow ]; then
+            echo "Fail: cron.allow doesn't exist"
+        else
+            ! stat -Lc "%a" /etc/cron.allow | grep -Eq "[0,2,4,6]00" && echo "Fail: cron.allow mode too permissive"
+            ! stat -Lc "%u:%g" /etc/cron.allow | grep -Eq "^0:0$" && echo "Fail: cron.allow owner and/or group not root"
+        fi
+        if [ ! -e /etc/cron.deny ] && [ -e /etc/cron.allow ] && stat -Lc "%a" /etc/cron.allow | grep -Eq "[0,2,4,6]00" \ && stat -Lc "%u:%g" /etc/cron.allow | grep -Eq "^0:0$"; then
+            echo "Pass"
+        fi
+    else
+        echo "PASS: cron is not installed on the system"
+    fi
+}
+'@
+        $script = bash -c $script_string
+        if ($script -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.9"
+    Task = "Ensure at is restricted to authorized users"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    if rpm -q at >/dev/null; then
+        [ -e /etc/at.deny ] && echo "Fail: at.deny exists"
+        if [ ! -e /etc/at.allow ]; then
+            echo "Fail: at.allow doesn't exist"
+        else
+            ! stat -Lc "%a" /etc/at.allow | grep -Eq "[0,2,4,6]00" && echo "Fail: at.allow mode too permissive"
+            ! stat -Lc "%u:%g" /etc/at.allow | grep -Eq "^0:0$" && echo "Fail: at.allow owner and/or group not root"
+        fi
+        if [ ! -e /etc/at.deny ] && [ -e /etc/at.allow ] && stat -Lc "%a" /etc/at.allow | grep -Eq "[0,2,4,6]00" && stat -Lc "%u:%g" /etc/at.allow | grep -Eq "^0:0$"; then
+            echo "PASS"
+        fi
+    else
+        echo "PASS: at is not installed on the system"
+    fi
+}
+'@
+        $script = bash -c $script_string
+        if ($script -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.1"
+    Task = "Ensure permissions on /etc/ssh/sshd_config are configured"
+    Test = {
+        $result1 = stat -Lc "%n %a %u/%U %g/%G" /etc/ssh/sshd_config
+        if ($result1 -match "/etc/ssh/sshd_config 600 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.2"
+    Task = "Ensure permissions on SSH private host key files are configured"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_522.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.3"
+    Task = "Ensure permissions on SSH public host key files are configured"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_523.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.4"
+    Task = "Ensure SSH access is limited"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$'
+        $test2 = grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$' /etc/ssh/sshd_config
+        if ($test1 -match "allowusers " -or $test1 -match "allowgroups " -or $test1 -match "denyusers " -or $test1 -match "denygroups " -or
+            $test2 -match "allowusers " -or $test2 -match "allowgroups " -or $test2 -match "denyusers " -or $test2 -match "denygroups ") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.5"
+    Task = "Ensure SSH LogLevel is appropriate"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$'
+        $test2 = grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$' /etc/ssh/sshd_config
+        if (($test1 -match "allowusers " -or $test1 -match "allowgroups " -or $test1 -match "denyusers " -or $test1 -match "denygroups ") -and
+            ($test2 -match "allowusers " -or $test2 -match "allowgroups " -or $test2 -match "denyusers " -or $test2 -match "denygroups ")) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.6"
+    Task = "Ensure SSH PAM is enabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i usepam
+        $test2 = grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$' /etc/ssh/sshd_config
+        if ($test1 -match "usepam yes" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.7"
+    Task = "Ensure SSH root login is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permitrootlogin
+        $test2 = grep -Ei '^\s*PermitRootLogin\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "permitrootlogin no" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.8"
+    Task = "Ensure SSH HostbasedAuthentication is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep hostbasedauthentication
+        $test2 = grep -Ei '^\s*HostbasedAuthentication\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "permitrootlogin no" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.9"
+    Task = "Ensure SSH PermitEmptyPasswords is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permitemptypasswords
+        $test2 = grep -Ei '^\s*PermitEmptyPasswords\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "permitemptypasswords no" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.10"
+    Task = "Ensure SSH PermitUserEnvironment is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permituserenvironment
+        $test2 = grep -Ei '^\s*PermitUserEnvironment\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "permituserenvironment no" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.11"
+    Task = "Ensure SSH IgnoreRhosts is enabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep ignorerhosts
+        $test2 = grep -Ei '^\s*ignorerhosts\s+no\b' /etc/ssh/sshd_config
+        if ($test1 -match "ignorerhosts yes" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.12"
+    Task = "Ensure SSH X11 forwarding is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i x11forwarding
+        $test2 = grep -Ei '^\s*x11forwarding\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "x11forwarding no" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.13"
+    Task = "Ensure SSH AllowTcpForwarding is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i allowtcpforwarding
+        $test2 = grep -Ei '^\s*AllowTcpForwarding\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "allowtcpforwarding no" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.14"
+    Task = "Ensure system-wide crypto policy is not over-ridden"
+    Test = {
+        $test = grep -i '^\s*CRYPTO_POLICY=' /etc/sysconfig/sshd
+        if ($test -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.15"
+    Task = "Ensure SSH warning banner is configured"
+    Test = {
+        $test = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep banner
+        if ($test -match "banner /etc/issue.net") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.16"
+    Task = "Ensure SSH MaxAuthTries is set to 4 or less"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep maxauthtries
+        $test2 = grep -Ei '^\s*maxauthtries\s+([5-9]|[1-9][0-9]+)' /etc/ssh/sshd_config
+        if ($test1 -match "maxauthtries 4" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.17"
+    Task = "Ensure SSH MaxStartups is configured"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i maxstartups
+        $test2 = grep -Ei '^\s*maxstartups\s+(((1[1-9]|[1-9][0-9][0-9]+):([0-9]+):([0-9]+))|(([0-9]+):(3[1-9]|[4-9][0-9]|[1-9][0-9][0-9]+):([0-9]+))|(([0-9]+):([0-9]+):(6[1-9]|[7-9][0-9]|[1-9][0-9][0-9]+)))' /etc/ssh/sshd_config
+        if ($test1 -match "maxstartups 10:30:60" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.18"
+    Task = "Ensure SSH MaxSessions is set to 10 or less"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i maxsessions
+        $test2 = grep -Ei '^\s*MaxSessions\s+(1[1-9]|[2-9][0-9]|[1-9][0-9][0-9]+)' /etc/ssh/sshd_config
+        if ($test1 -match "maxsessions 10" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.19"
+    Task = "Ensure SSH LoginGraceTime is set to one minute or less"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep logingracetime
+        $test2 = grep -Ei '^\s*LoginGraceTime\s+(0|6[1-9]|[7-9][0-9]|[1-9][0-9][0-9]+|[^1]m)' /etc/ssh/sshd_config
+        if ($test1 -match "logingracetime 60" -and $test2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.20"
+    Task = "Ensure SSH Idle Timeout Interval is configured"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep clientaliveinterval | cut -d ' ' -f 2
+        $test2 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep clientalivecountmax | cut -d ' ' -f 2
+        if ($test1 -gt 0 -and $test2 -gt 0) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.1"
+    Task = "Ensure SUDO is installed"
+    Test = {
+        $test = dnf list sudo | grep sudo.x86_64
+        if ($test -match "sudo") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.2"
+    Task = "Ensure sudo commands use pty"
+    Test = {
+        $test = grep -rPi '^\h*Defaults\h+([^#\n\r]+,)?use_pty(,\h*\h+\h*)*\h*(#.*)?$' /etc/sudoers*
+        if ($test -match "/etc/sudoers:Defaults use_pty") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.3"
+    Task = "Ensure sudo log file exists"
+    Test = {
+        $test = grep -Ei '^\s*Defaults\s+logfile=\S+' /etc/sudoers /etc/sudoers.d/*
+        if ($test -match "/etc/sudoers:Defaults use_pty") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.4"
+    Task = "Ensure users must provide password for escalation"
+    Test = {
+        $test = grep -r "^[^#].*NOPASSWD" /etc/sudoers*
+        if ($test -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.5"
+    Task = "Ensure re-authentication for privilege escalation is not disabled globally"
+    Test = {
+        $test = grep -r "^[^#].*\!authenticate" /etc/sudoers*
+        if ($test -match "!authenticate") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.6"
+    Task = "Ensure sudo authentication timeout is configured correctly"
+    Test = {
+        $test = grep -roP "timestamp_timeout=\K[0-9]*" /etc/sudoers* | cut -d ' ' -f 2
+        if ($test -le 15) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.7"
+    Task = "Ensure access to the su command is restricted"
+    Test = {
+        $test1 = grep -Pi '^\h*auth\h+(?:required|requisite)\h+pam_wheel\.so\h+(?:[^#\n\r]+\h+)?((?!\2)(use_uid\b|group=\H+\b))\h+(?:[^#\n\r]+\h+)?((?!\1)(use_uid\b|group=\H+\b))(\h+.*)?$' /etc/pam.d/su
+        if ($test1 -match "auth required pam_wheel.so use_uid group=") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.1"
+    Task = "Ensure custom authselect profile is used"
+    Test = {
+        $test1 = authselect list | grep '^-\s*custom'
+        if ($test1 -eq $null) {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+# 5.4.2 ist leider schlecht beschrieben, die Pruefung ist mit ihren Parametern bestenfalls mangelhaft
+[AuditTest] @{
+    Id = "5.4.2"
+    Task = "Ensure authselect includes with-faillock"
+    Test = {
+        $test1 = grep pam_faillock.so /etc/pam.d/password-auth /etc/pam.d/system-auth
+        if ($test1 -match "/etc/authselect/password-auth:auth") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.5.1"
+    Task = "Ensure password creation requirements are configured"
+    Test = {
+        $test1 = grep ^minlen /etc/security/pwquality.conf | cut -d '=' -f 2
+        if ($test1 -ge 14) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.5.2"
+    Task = "Ensure lockout for failed password attempts is configured"
+    Test = {
+        $test1 = grep -E '^\s*deny\s*=\s*[1-5]\b' /etc/security/faillock.conf | cut -d '=' -f 2
+        $test2 = grep -E '^\s*unlock_time\s*=\s*(0|9[0-9][0-9]|[1-9][0-9][0-9][0-9]+)\b' /etc/security/faillock.conf | cut -d '=' -f 2
+        if ($test1 -le 5 -and ($test2 -eq 0 -or $test2 -ge 900)) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.5.3"
+    Task = "Ensure password reuse is limited"
+    Test = {
+        $test1 = grep -P '^\h*password\h+(requisite|sufficient)\h+(pam_pwhistory\.so|pam_unix\.so)\h+([^#\n\r]+\h+)?remember=([5-9]|[1-9][0-9]+)\h*(\h+.*)?$' /etc/pam.d/system-auth
+        if ($test1 -match "remember=5") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.5.4"
+    Task = "Ensure password hashing algorithm is SHA-512 or yescrypt"
+    Test = {
+        $test1 = grep -Ei '^\s*crypt_style\s*=\s*(sha512|yescrypt)\b' /etc/libuser.conf
+        $test2 = grep -Ei '^\s*ENCRYPT_METHOD\s+(SHA512|yescrypt)\b' /etc/login.defs
+        if (($test2 -match "ENCRYPT_METHOD SHA512" -or $test2 -match "ENCRYPT_METHOD YESCRYPT") -and ($test1 -match "crypt_style = sha512" -or $test1 -match "crypt_style = yescrypt")) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.1.1"
+    Task = "Ensure password expiration is 365 days or less"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_5611_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_5611_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -le 365 -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.1.2"
+    Task = "Ensure minimum days between password changes is configured"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_5612_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_5612_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -ge 1 -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.1.3"
+    Task = "Ensure password expiration warning days is 7 or more"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_5613_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_5613_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "PASS_WARN_AGE\s*7" -and !($result2 -match "FAIL")) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.1.4"
+    Task = "Ensure inactive password lock is 30 days or less"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_5614_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_5614_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -ge 2 -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.1.5"
+    Task = "Ensure all users last password change date is in the past"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_5615.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.2"
+    Task = "Ensure system accounts are secured"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_562_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_562_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -eq $null -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.3"
+    Task = "Ensure default user shell timeout is 900 seconds or less"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    output1="" output2=""
+    [ -f /etc/bashrc ] && BRC="/etc/bashrc"
+    for f in "$BRC" /etc/profile /etc/profile.d/*.sh ; do
+        grep -Pq '^\s*([^#]+\s+)?TMOUT=(900|[1-8][0-9][0-9]|[1-9][0-9]|[1-9])\b' "$f" && grep -Pq '^\s*([^#]+;\s*)?readonly\s+TMOUT(\s+|\s*;|\s*$|=(900|[1-8][0-9][0-9]|[1-9][0-9]|[1-9]))\b' "$f" && grep -Pq '^\s*([^#]+;\s*)?export\s+TMOUT(\s+|\s*;|\s*$|=(900|[1-8][0-9][0-9]|[1-9][0-9]|[1-9]))\b' "$f" && output1="$f"
+    done
+    grep -Pq '^\s*([^#]+\s+)?TMOUT=(9[0-9][1-9]|9[1-9][0-9]|0+|[1-9]\d{3,})\b' /etc/profile /etc/profile.d/*.sh "$BRC" && output2=$(grep -Ps '^\s*([^#]+\s+)?TMOUT=(9[0-9][1-9]|9[1-9][0-9]|0+|[1-9]\d{3,})\b' /etc/profile /etc/profile.d/*.sh $BRC)
+    if [ -n "$output1" ] && [ -z "$output2" ]; then
+        echo -e "\nPASSED\n\nTMOUT is configured in: \"$output1\"\n"
+    else
+        [ -z "$output1" ] && echo -e "\nFAILED\n\nTMOUT is not configured\n" [ -n "$output2" ] && echo -e "\nFAILED\n\nTMOUT is incorrectly configured in: \"$output2\"\n"
+    fi
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.4"
+    Task = "Ensure default group for the root account is GID 0"
+    Test = {
+        $test1 = grep "^root:" /etc/passwd | cut -f4 -d ':'
+        if ($test1 -eq 0) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.5"
+    Task = "Ensure default user shell timeout is 900 seconds or less"
+    Test = {
+        $resultScript1 = $scriptPath + "CIS100_RHEL9_565_1.sh"
+        $result1 = bash $resultScript1
+        $resultScript2 = $scriptPath + "CIS100_RHEL9_565_2.sh"
+        $result2 = bash $resultScript2
+        if ($result1 -match "umask is set" -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.6.6"
+    Task = "Ensure root password is set"
+    Test = {
+        $test1 = passwd -S root
+        if ($test1 -match "Password set") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+### Chapter 6 - System Maintenance
+
+
+[AuditTest] @{
+    Id = "6.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/passwd
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.2"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/passwd-
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.3"
+    Task = "Ensure permissions on /etc/group are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/group
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.4"
+    Task = "Ensure permissions on /etc/group- are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/group-
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.5"
+    Task = "Ensure permissions on /etc/shadow are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/shadow
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.6"
+    Task = "Ensure permissions on /etc/shadow- are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/shadow-
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.7"
+    Task = "Ensure permissions on /etc/gshadow are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/gshadow
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.7"
+    Task = "Ensure permissions on /etc/gshadow are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/gshadow
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.8"
+    Task = "Ensure permissions on /etc/gshadow- are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/gshadow-
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.9"
+    Task = "Ensure no world writable files exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        if ($test1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.10"
+    Task = "Ensure no unowned files or directories exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -nouser
+        if ($test1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.11"
+    Task = "Ensure no ungrouped files or directories exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -nogroup
+        if ($test1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.12"
+    Task = "Ensure sticky bit is set on all world-writable directories"
+    Test = {
+        $test_string = "df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type d \( -perm -0002 -a ! -perm -1000 \) 2>/dev/null"
+        $test = bash -c $test_string
+        if ($test -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.13"
+    Task = "Audit SUID executables"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.14"
+    Task = "Audit SGID executables"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.15"
+    Task = "Audit system file permissions"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.1"
+    Task = "Ensure accounts in /etc/passwd use shadowed passwords"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_621.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.2"
+    Task = "Ensure /etc/shadow password fields are not empty"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_622.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.3"
+    Task = "Ensure all groups in /etc/passwd exist in /etc/group"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    for i in $(cut -s -d: -f4 /etc/passwd | sort -u ); do
+        grep -q -P "^.*?:[^:]*:$i:" /etc/group
+        if [ $? -ne 0 ]; then
+            echo "Group $i is referenced by /etc/passwd but does not exist in /etc/group"
+        fi
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.4"
+    Task = "Ensure no duplicate UIDs exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -f3 -d":" /etc/passwd | sort -n | uniq -c | while read x ; do
+        [ -z "$x" ] && break
+        set - $x
+        if [ $1 -gt 1 ]; then
+            users=$(awk -F: '($3 == n) { print $1 }' n=$2 /etc/passwd | xargs)
+            echo "Duplicate UID ($2): $users"
+        fi
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.5"
+    Task = "Ensure no duplicate GIDs exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -d: -f3 /etc/group | sort | uniq -d | while read x ; do
+        echo "Duplicate GID ($x) in /etc/group"
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.6"
+    Task = "Ensure no duplicate user names exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -d: -f1 /etc/passwd | sort | uniq -d | while read -r x; do
+        echo "Duplicate login name $x in /etc/passwd"
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.7"
+    Task = "Ensure no duplicate group names exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -d: -f1 /etc/group | sort | uniq -d | while read -r x; do
+        echo "Duplicate group name $x in /etc/group"
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.8"
+    Task = "Ensure root PATH Integrity"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_628.sh"
+        $result = bash $resultScript
+        if ($result -match "is not a directory") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.9"
+    Task = "Ensure root is the only UID 0 account"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_629.sh"
+        $result = bash $resultScript
+        if ($result -eq "root") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.10"
+    Task = "Ensure local interactive user home directories exist"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_6210.sh"
+        $result = bash $resultScript
+        if ($result -match "FAILED") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.11"
+    Task = "Ensure local interactive users own their home directories"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_6210.sh"
+        $result = bash $resultScript
+        if ($result -match "FAILED") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.12"
+    Task = "Ensure local interactive user home directories are mode 750 or more restrictive"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_6212.sh"
+        $result = bash $resultScript
+        if ($result -match "FAILED") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.13"
+    Task = "Ensure no local interactive user has .netrc files"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_6213.sh"
+        $result = bash $resultScript
+        if ($result -match "FAILED") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.14"
+    Task = "Ensure no local interactive user has .forward files"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_6214.sh"
+        $result = bash $resultScript
+        if ($result -match "FAILED") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.15"
+    Task = "Ensure no local interactive user has .rhosts files"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_6215.sh"
+        $result = bash $resultScript
+        if ($result -match "FAILED") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.16"
+    Task = "Ensure local interactive user dot files are not group or world writable"
+    Test = {
+        $resultScript = $scriptPath + "CIS100_RHEL9_6216.sh"
+        $result = bash $resultScript
+        if ($result -match "Failed") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-2.0.0.ps1 b/ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-2.0.0.ps1
new file mode 100644
index 0000000..5718492
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Red Hat Enterprise Linux 9-CIS-2.0.0.ps1	
@@ -0,0 +1,4148 @@
+$rcTrue = "True"
+$rcCompliant = "Compliant"
+$rcFalse = "False"
+$rcNone = "None"
+$rcNonCompliant = "Non-Compliant"
+$rcNonCompliantManualReviewRequired = "Manual review required"
+$rcCompliantIPv6isDisabled = "IPv6 is disabled"
+
+$retCompliant = @{
+    Message = $rcCompliant
+    Status  = $rcTrue
+}
+$retNonCompliant = @{
+    Message = $rcNonCompliant
+    Status  = $rcFalse
+}
+$retCompliantIPv6Disabled = @{
+    Message = $rcCompliantIPv6isDisabled
+    Status  = $rcTrue
+}
+$retNonCompliantManualReviewRequired = @{
+    Message = $rcNonCompliantManualReviewRequired
+    Status  = $rcNone
+}
+
+$IPv6Status_script = grep -Pqs '^\h*0\b' /sys/module/ipv6/parameters/disable && echo "IPv6 is enabled" || echo "IPv6 is not enabled"
+$IPv6Status = bash -c $IPv6Status_script
+if ($IPv6Status -match "is enabled") {
+    $IPv6Status = "enabled"
+}
+else {
+    $IPv6Status = "disabled"
+}
+
+$parentPath = Split-Path -Parent -Path $PSScriptRoot
+$scriptPath = $parentPath + "/Helpers/ShellScripts/RHEL9_CIS2.0.0/"
+$commonPath = $parentPath + "/Helpers/ShellScripts/common/"
+
+[AuditTest] @{
+    Id   = "1.1.1.1"
+    Task = "Ensure cramfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.2"
+    Task = "Ensure freevxfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.3"
+    Task = "Ensure hfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.4"
+    Task = "Ensure hfsplus kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.5"
+    Task = "Ensure jffs2 kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.6"
+    Task = "Ensure squashfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.7"
+    Task = "Ensure udf kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.1.8"
+    Task = "Ensure usb-storage kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+# MISSING RULE: 1.1.1.9 - Ensure unused filesystems kernel modules are not available
+[AuditTest] @{
+    Id   = "1.1.2.1.1"
+    Task = "Ensure /tmp is a separate partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep -E '\s/tmp\s'
+        if ($result -match "/tmp") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.1.2.1.2"
+    Task = "Ensure nodev option set on /tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.1.3"
+    Task = "Ensure nosuid option set on /tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.1.4"
+    Task = "Ensure noexec option set on /tmp partition"
+    Test = {
+        $result = findmnt --kernel /tmp | grep noexec
+        if ($result -match "/tmp") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.1.2.2.1"
+    Task = "Ensure /dev/shm is a separate partition"
+    Test = {
+        $result = findmnt --kernel /dev/shm
+        if ($result -match "/dev/shm") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.1.2.2.2"
+    Task = "Ensure nodev option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.2.3"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.2.4"
+    Task = "Ensure noexec option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.3.1"
+    Task = "Ensure separate partition exists for /home"
+    Test = {
+        $result = findmnt --kernel /home
+        if ($result -match "/home") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.1.2.3.2"
+    Task = "Ensure nodev option set on /home partition"
+    Test = {
+        $script = $commonPath + "1.1.2.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.3.3"
+    Task = "Ensure nosuid option set on /home partition"
+    Test = {
+        $script = $commonPath + "1.1.2.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.4.1"
+    Task = "Ensure separate partition exists for /var"
+    Test = {
+        $result = findmnt --kernel /var
+        if ($result -match "/var") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+
+[AuditTest] @{
+    Id   = "1.1.2.4.2"
+    Task = "Ensure nodev option set on /var partition"
+    Test = {
+        $script = $commonPath + "1.1.2.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.4.3"
+    Task = "Ensure nosuid option set on /var partition"
+    Test = {
+        $script = $commonPath + "1.1.2.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.5.1"
+    Task = "Ensure separate partition exists for /var/tmp"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+        if ($result -match "/var/tmp") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.1.2.5.2"
+    Task = "Ensure nodev option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.5.3"
+    Task = "Ensure nosuid option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.5.4"
+    Task = "Ensure noexec option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.6.1"
+    Task = "Ensure separate partition exists for /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log
+        if ($result -match "/var/log") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.1.2.6.2"
+    Task = "Ensure nodev option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.6.3"
+    Task = "Ensure nosuid option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.6.4"
+    Task = "Ensure noexec option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.7.1"
+    Task = "Ensure separate partition exists for /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+        if ($result -match "/var/log/audit") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.1.2.7.2"
+    Task = "Ensure nodev option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.7.3"
+    Task = "Ensure nosuid option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.1.2.7.4"
+    Task = "Ensure noexec option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.1.1"
+    Task = "Ensure GPG keys are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.2.1.2"
+    Task = "Ensure gpgcheck is globally activated"
+    Test = {
+        $script = $scriptPath + "1.2.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.2.1.3"
+    Task = "Ensure repo_gpgcheck is globally activated"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.2.1.4"
+    Task = "Ensure package manager repositories are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.2.2.1"
+    Task = "Ensure updates, patches, and additional security software are installed"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.3.1.1"
+    Task = "Ensure SELinux is installed"
+    Test = {
+        rpm -q libselinux 2>&1 >/dev/null
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.3.1.2"
+    Task = "Ensure SELinux is not disabled in bootloader configuration"
+    Test = {
+        $script = $scriptPath + "1.3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1.3"
+    Task = "Ensure SELinux policy is configured"
+    Test = {
+        $script = $scriptPath + "1.3.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.3.1.4"
+    Task = "Ensure the SELinux mode is not disabled"
+    Test = {
+        $result1 = getenforce
+        $result2 = grep -Ei '^\s*SELINUX=(enforcing|permissive)' /etc/selinux/config
+        if (($result1 -match "Enforcing" -or $result1 -match "Permissive") -and ($result2 -match "SELINUX=enforcing" -or $result2 -match "SELINUX=permissive")) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.3.1.5"
+    Task = "Ensure the SELinux mode is enforcing"
+    Test = {
+        $script = $scriptPath + "1.3.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+# MISSING RULE: 1.3.1.6 - Ensure no unconfined services exist
+[AuditTest] @{
+    Id   = "1.3.1.7"
+    Task = "Ensure the MCS Translation Service (mcstrans) is not installed"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/motd
+        if ($result -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.3.1.8"
+    Task = "Ensure SETroubleshoot is not installed"
+    Test = {
+        rpm -q setroubleshoot 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.4.1"
+    Task = "Ensure bootloader password is set"
+    Test = {
+        $result = awk -F. '/^\s*GRUB2_PASSWORD/ {print $1"."$2"."$3}' /boot/grub2/user.cfg
+        if ($result -match "GRUB2_PASSWORD=grub.pbkdf2.sha512") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.4.2"
+    Task = "Ensure access to bootloader config is configured"
+    Test = {
+        $script = $commonPath + "1.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.1"
+    Task = "Ensure address space layout randomization is enabled"
+    Test = {
+        $script = $commonPath + "1.5.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.2"
+    Task = "Ensure ptrace_scope is restricted"
+    Test = {
+        $script = $commonPath + "1.5.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.3"
+    Task = "Ensure core dump backtraces are disabled"
+    Test = {
+        $script = $scriptPath + "1.5.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.5.4"
+    Task = "Ensure core dump storage is disabled"
+    Test = {
+        $script = $scriptPath + "1.5.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.6.1"
+    Task = "Ensure system wide crypto policy is not set to legacy"
+    Test = {
+        $script = $scriptPath + "1.6.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.6.2"
+    Task = "Ensure system wide crypto policy is not set in sshd configuration"
+    Test = {
+        $script = $scriptPath + "1.6.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+# MISSING RULE: 1.6.3 - Ensure system wide crypto policy disables sha1 hash and signature support
+# MISSING RULE: 1.6.4 - Ensure system wide crypto policy disables macs less than 128 bits
+# MISSING RULE: 1.6.5 - Ensure system wide crypto policy disables cbc for ssh
+# MISSING RULE: 1.6.6 - Ensure system wide crypto policy disables chacha20-poly1305 for ssh
+# MISSING RULE: 1.6.7 - Ensure system wide crypto policy disables EtM for ssh
+[AuditTest] @{
+    Id   = "1.7.1"
+    Task = "Ensure message of the day is configured properly"
+    Test = {
+        $script = $scriptPath + "1.7.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.7.2"
+    Task = "Ensure local login warning banner is configured properly"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue
+        if ($result -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.7.3"
+    Task = "Ensure remote login warning banner is configured properly"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net
+        if ($result -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.7.4"
+    Task = "Ensure access to /etc/motd is configured"
+    Test = {
+        $script = $scriptPath + "1.7.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "1.7.5"
+    Task = "Ensure permissions on /etc/issue are configured"
+    Test = {
+        $result = stat -c "%a" /etc/issue
+        if ($result -eq 644) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.7.6"
+    Task = "Ensure permissions on /etc/issue.net are configured"
+    Test = {
+        $result = stat -c "%a" /etc/issue.net
+        if ($result -eq 644) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.1"
+    Task = "Ensure GNOME Display Manager is removed"
+    Test = {
+        rpm -q gdm 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.2"
+    Task = "Ensure GDM login banner is configured"
+    Test = {
+        $resultScript = $scriptPath + "1.8.2.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.3"
+    Task = "Ensure GDM disable-user-list option is enabled"
+    Test = {
+        $resultScript = $scriptPath + "1.8.3.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.4"
+    Task = "Ensure GDM screen locks when the user is idle"
+    Test = {
+        $resultScript = $scriptPath + "1.8.4.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.5"
+    Task = "Ensure GDM screen locks cannot be overridden"
+    Test = {
+        $resultScript = $scriptPath + "1.8.5.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.6"
+    Task = "Ensure GDM automatic mounting of removable media is disabled"
+    Test = {
+        $resultScript = $scriptPath + "1.8.6.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.7"
+    Task = "Ensure GDM disabling automatic mounting of removable media is not overridden"
+    Test = {
+        $resultScript = $scriptPath + "1.8.7.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.8"
+    Task = "Ensure GDM autorun-never is enabled"
+    Test = {
+        $resultScript = $scriptPath + "1.8.8.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.9"
+    Task = "Ensure GDM autorun-never is not overridden"
+    Test = {
+        $resultScript = $scriptPath + "1.8.9.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "1.8.10"
+    Task = "Ensure XDMCP is not enabled"
+    Test = {
+        $script = $scriptPath + "1.8.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.1.1"
+    Task = "Ensure time synchronization is in use"
+    Test = {
+        rpm -q chrony 2>&1 >/dev/null
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.1.2"
+    Task = "Ensure chrony is configured"
+    Test = {
+        $test = grep -E "^(server|pool)" /etc/chrony.conf | grep OPTIONS\s*-u\s*chrony
+        if ($test -match "OPTIONS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.1.3"
+    Task = "Ensure dhcp server services are not in use"
+    Test = {
+        rpm -q isc-dhcp-server 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null isc-dhcp-server.service
+            if (! $?) {
+                $test2 = systemctl is-enabled 2>/dev/null isc-dhcp-server6.service
+                if (! $?) {
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.4"
+    Task = "Ensure dns server services are not in use"
+    Test = {
+        rpm -q bind9 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null bind9.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+# MISSING RULE: 2.1.5 - Ensure dnsmasq services are not in use
+[AuditTest] @{
+    Id   = "2.1.6"
+    Task = "Ensure samba file server services are not in use"
+    Test = {
+        rpm -q samba 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null samba.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.7"
+    Task = "Ensure ftp server services are not in use"
+    Test = {
+        rpm -q vsftpd 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null vsftpd.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.8"
+    Task = "Ensure message access server services are not in use"
+    Test = {
+        rpm -q dovecot-imapd 2>&1 >/dev/null
+        if ($?) {
+            return $retNonCompliant
+        }
+        rpm -q dovecot-pop3d 2>&1 >/dev/null
+        if ($?) {
+            return $retNonCompliant
+        }
+        $test3 = systemctl is-enabled 2>/dev/null dovecot.socket
+        if (! $?) {
+            $test4 = systemctl is-enabled 2>/dev/null dovecot.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.9"
+    Task = "Ensure network file system services are not in use"
+    Test = {
+        rpm -q nfs-kernel-server 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null nfs-kernel.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.10"
+    Task = "Ensure nis server services are not in use"
+    Test = {
+        rpm -q ypserv 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null ypserv.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.11"
+    Task = "Ensure print server services are not in use"
+    Test = {
+        rpm -q cups 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null cups.service
+            if (! $?) {
+                $test3 = systemctl is-enabled 2>/dev/null cups.socket
+                if (! $?) {
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.12"
+    Task = "Ensure rpcbind services are not in use"
+    Test = {
+        rpm -q rpcbind 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null rpcbind.service
+            if (! $?) {
+                $test3 = systemctl is-enabled 2>/dev/null rpcbind.socket
+                if (! $?) {
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.13"
+    Task = "Ensure rsync services are not in use"
+    Test = {
+        $script = $commonPath + "2.1.13.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.15"
+    Task = "Ensure snmp services are not in use"
+    Test = {
+        rpm -q snmpd 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null snmpd.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+# MISSING RULE: 2.1.15 - Ensure telnet server services are not in use
+[AuditTest] @{
+    Id   = "2.1.16"
+    Task = "Ensure tftp server services are not in use"
+    Test = {
+        rpm -q tftpd-hpa 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null tftpd-hpa.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.17"
+    Task = "Ensure web proxy server services are not in use"
+    Test = {
+        rpm -q squid 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null squid.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.18"
+    Task = "Ensure web server services are not in use"
+    Test = {
+        rpm -q apache2 2>&1 >/dev/null
+        if ($?) {
+            return $retNonCompliant
+        }
+        rpm -q ginx 2>&1 >/dev/null
+        if ($?) {
+            return $retNonCompliant
+        }
+        else {
+            $services = 'apache2.service', 'apache2.socket', 'nginx.service', 'nginx.socket'
+            $test3 = "disabled"
+            foreach ($service in $services) {
+                $test4 = systemctl is-enabled $service 2>/dev/null
+                if ($?) {
+                    $test3 = "enabled"
+                }
+            }
+            if ($test3 -match "disabled") {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.19"
+    Task = "Ensure xinetd services are not in use"
+    Test = {
+        rpm -q xinetd 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            $test2 = systemctl is-enabled 2>/dev/null xinetd.service
+            if (! $?) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.1.20"
+    Task = "Ensure X window server services are not in use"
+    Test = {
+        rpm -q xserver-commen 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+# MISSING RULE: 2.1.21 - Ensure mail transfer agents are configured for local-only mode
+[AuditTest] @{
+    Id   = "2.1.22"
+    Task = "Ensure only approved services are listening on a network interface"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.2.1"
+    Task = "Ensure xorg-x11-server-common is not installed"
+    Test = {
+        rpm -q xorg-x11-server-common 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.2.2"
+    Task = "Ensure Avahi Server is not installed"
+    Test = {
+        rpm -q avahi 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.2.3"
+    Task = "Ensure CUPS is not installed"
+    Test = {
+        rpm -q cups 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.2.4"
+    Task = "Ensure DHCP Server is not installed"
+    Test = {
+        rpm -q dhcp-server 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.2.5"
+    Task = "Ensure DNS Server is not installed"
+    Test = {
+        rpm -q bind 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.3.2"
+    Task = "Ensure LDAP client is not installed"
+    Test = {
+        rpm -q openldap-clients 2>&1 >/dev/null
+        if (! $?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.3.3"
+    Task = "Ensure chrony is not run as the root user"
+    Test = {
+        $script = $scriptPath + "2.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "2.4.1.1"
+    Task = "Ensure cron daemon is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if ($test1 -eq "enabled" -and $test2 -match "running") {
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.4.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/crontab
+        if ($result1 -eq 600 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.4.1.3"
+    Task = "Ensure permissions on /etc/cron.hourly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.hourly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.4.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.daily
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.4.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.weekly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.4.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.monthly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.4.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.d
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "2.4.1.8"
+    Task = "Ensure crontab is restricted to authorized users"
+    Test = {
+        $script = $commonPath + "2.4.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "2.4.2.1"
+    Task = "Ensure at is restricted to authorized users"
+    Test = {
+        $script = $commonPath + "2.4.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.1"
+    Task = "Ensure IPv6 status is identified"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "3.1.2"
+    Task = "Ensure wireless interfaces are disabled"
+    Test = {
+        $script = $commonPath + "3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.1.3"
+    Task = "Ensure TIPC is disabled"
+    Test = {
+        $resultScript = $scriptPath + "3.1.3.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "3.2.1"
+    Task = "Ensure dccp kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.2.2"
+    Task = "Ensure tipc kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.2.3"
+    Task = "Ensure rds kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.2.4"
+    Task = "Ensure sctp kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.1"
+    Task = "Ensure ip forwarding is disabled"
+    Test = {
+        $script = $commonPath + "3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.2"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $script = $commonPath + "3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.3"
+    Task = "Ensure bogus icmp responses are ignored"
+    Test = {
+        $script = $commonPath + "3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.4"
+    Task = "Ensure broadcast icmp requests are ignored"
+    Test = {
+        $script = $commonPath + "3.3.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.5"
+    Task = "Ensure icmp redirects are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.6"
+    Task = "Ensure secure icmp redirects are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.7"
+    Task = "Ensure reverse path filtering is enabled"
+    Test = {
+        $script = $commonPath + "3.3.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.8"
+    Task = "Ensure source routed packets are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.9"
+    Task = "Ensure suspicious packets are logged"
+    Test = {
+        $script = $commonPath + "3.3.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.10"
+    Task = "Ensure tcp syn cookies is enabled"
+    Test = {
+        $script = $commonPath + "3.3.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "3.3.11"
+    Task = "Ensure ipv6 router advertisements are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.11.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "4.1.1"
+    Task = "Ensure nftables is installed"
+    Test = {
+        rpm -q nftables 2>&1 >/dev/null
+        if ($result -match "nftables-") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "4.1.2"
+    Task = "Ensure a single firewall configuration utility is in use"
+    Test = {
+        $resultScript = $scriptPath + "4.1.2.sh"
+        $result = bash $resultScript
+        if ($result -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "4.2.1"
+    Task = "Ensure firewalld drops unnecessary services and ports"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+# MISSING RULE: 4.2.2 - Ensure firewalld loopback traffic is configured
+[AuditTest] @{
+    Id   = "4.3.1"
+    Task = "Ensure nftables base chains exist"
+    Test = {
+        try {
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if ($test1 -match "type filter hook input" -and $test2 -match "type filter hook forward" -and $test3 -match "type filter hook output") {
+                return @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status  = "False"
+            }
+        }
+        catch {
+            return @{
+                Message = "Command not found!"
+                Status  = "False"
+            }
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "4.3.2"
+    Task = "Ensure nftables established connections are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "4.3.3"
+    Task = "Ensure nftables default deny firewall policy"
+    Test = {
+        $result1 = systemctl --quiet is-enabled nftables.service && nft list ruleset | grep 'hook input' | grep -v 'policy drop'
+        $result2 = systemctl --quiet is-enabled nftables.service && nft list ruleset | grep 'hook forward' | grep -v 'policy drop'
+        if ($result1 -eq $null -and $result2 -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+### Chapter 4 - Logging and Auditing
+
+[AuditTest] @{
+    Id   = "4.3.4"
+    Task = "Ensure nftables loopback traffic is configured"
+    Test = {
+        try {
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            if ($isIPv6Disabled -ne $true) {
+                $test1 = nft list ruleset | awk '/hook input/,/}/' | grep 'iif "lo" accept'
+                $test2 = nft list ruleset | awk '/hook input/,/}/' | grep 'ip saddr'
+                if ($test1 -match 'iif "lo" accept' -and $test2 -match "ip saddr 127.0.0.0/8 counter packets 0 bytes 0 drop") {
+                    return $retCompliant
+                }
+            }
+            else {
+                $test = nft list ruleset | awk '/hook input/,/}/' | grep 'ip6 saddr'
+                if ($test -match 'ip6 saddr ::1 counter packets 0 bytes 0 drop') {
+                    return $retCompliant
+                }
+            }
+            return $retNonCompliant
+        }
+        catch {
+            return @{
+                Message = "Command not found!"
+                Status  = "False"
+            }
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "5.1.1"
+    Task = "Ensure cron daemon is enabled"
+    Test = {
+        $result1 = systemctl is-enabled crond
+        if ($result1 -match "enabled") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/crontab
+        if ($result1 -eq 600 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.1.3"
+    Task = "Ensure permissions on SSH public host key files are configured"
+    Test = {
+        $script = $commonPath + "5.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.daily
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.weekly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.monthly
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $result1 = stat -c "%a" /etc/cron.d
+        if ($result1 -eq 700 ) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.1.8"
+    Task = "Ensure cron is restricted to authorized users"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    if rpm -q cronie 2>&1 >/dev/null >/dev/null; then
+        [ -e /etc/cron.deny ] && echo "Fail: cron.deny exists"
+        if [ ! -e /etc/cron.allow ]; then
+            echo "Fail: cron.allow doesn't exist"
+        else
+            ! stat -Lc "%a" /etc/cron.allow | grep -Eq "[0,2,4,6]00" && echo "Fail: cron.allow mode too permissive"
+            ! stat -Lc "%u:%g" /etc/cron.allow | grep -Eq "^0:0$" && echo "Fail: cron.allow owner and/or group not root"
+        fi
+        if [ ! -e /etc/cron.deny ] && [ -e /etc/cron.allow ] && stat -Lc "%a" /etc/cron.allow | grep -Eq "[0,2,4,6]00" \ && stat -Lc "%u:%g" /etc/cron.allow | grep -Eq "^0:0$"; then
+            echo "Pass"
+        fi
+    else
+        echo "PASS: cron is not installed on the system"
+    fi
+}
+'@
+        $script = bash -c $script_string
+        if ($script -match "PASS") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.1.9"
+    Task = "Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured"
+    Test = {
+        $script = $scriptPath + "5.1.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.10"
+    Task = "Ensure sshd DisableForwarding is enabled"
+    Test = {
+        $script = $scriptPath + "5.1.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.11"
+    Task = "Ensure sshd GSSAPIAuthentication is disabled"
+    Test = {
+        $script = $scriptPath + "5.1.11.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.12"
+    Task = "Ensure sshd HostbasedAuthentication is disabled"
+    Test = {
+        $script = $scriptPath + "5.1.12.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.13"
+    Task = "Ensure sshd IgnoreRhosts is enabled"
+    Test = {
+        $script = $scriptPath + "5.1.13.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.14"
+    Task = "Ensure sshd LoginGraceTime is configured"
+    Test = {
+        $script = $scriptPath + "5.1.14.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.15"
+    Task = "Ensure sshd LogLevel is configured"
+    Test = {
+        $script = $scriptPath + "5.1.15.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.16"
+    Task = "Ensure sshd MaxAuthTries is configured"
+    Test = {
+        $script = $commonPath + "5.1.16.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.17"
+    Task = "Ensure sshd MaxStartups is configured"
+    Test = {
+        $script = $scriptPath + "5.1.17.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.18"
+    Task = "Ensure sshd MaxSessions is configured"
+    Test = {
+        $script = $scriptPath + "5.1.18.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.19"
+    Task = "Ensure sshd PermitEmptyPasswords is disabled"
+    Test = {
+        $script = $commonPath + "5.1.19.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.20"
+    Task = "Ensure sshd PermitRootLogin is disabled"
+    Test = {
+        $script = $commonPath + "5.1.20.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.21"
+    Task = "Ensure sshd PermitUserEnvironment is disabled"
+    Test = {
+        $script = $commonPath + "5.1.21.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.1.22"
+    Task = "Ensure sshd UsePAM is enabled"
+    Test = {
+        $script = $commonPath + "5.1.22.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.1"
+    Task = "Ensure permissions on /etc/ssh/sshd_config are configured"
+    Test = {
+        $result1 = stat -Lc "%n %a %u/%U %g/%G" /etc/ssh/sshd_config
+        if ($result1 -match "/etc/ssh/sshd_config 600 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.2.2"
+    Task = "Ensure sudo commands use pty"
+    Test = {
+        $script = $commonPath + "5.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.3"
+    Task = "Ensure sudo log file exists"
+    Test = {
+        $script = $commonPath + "5.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.4"
+    Task = "Ensure SSH access is limited"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$'
+        $test2 = grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$' /etc/ssh/sshd_config
+        if ($test1 -match "allowusers " -or $test1 -match "allowgroups " -or $test1 -match "denyusers " -or $test1 -match "denygroups " -or
+            $test2 -match "allowusers " -or $test2 -match "allowgroups " -or $test2 -match "denyusers " -or $test2 -match "denygroups ") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.2.5"
+    Task = "Ensure SSH LogLevel is appropriate"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$'
+        $test2 = grep -Pi '^\h*(allow|deny)(users|groups)\h+\H+(\h+.*)?$' /etc/ssh/sshd_config
+        if (($test1 -match "allowusers " -or $test1 -match "allowgroups " -or $test1 -match "denyusers " -or $test1 -match "denygroups ") -and
+            ($test2 -match "allowusers " -or $test2 -match "allowgroups " -or $test2 -match "denyusers " -or $test2 -match "denygroups ")) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.2.6"
+    Task = "Ensure sudo authentication timeout is configured correctly"
+    Test = {
+        $script = $commonPath + "5.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.2.7"
+    Task = "Ensure SSH root login is disabled"
+    Test = {
+        $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permitrootlogin
+        $test2 = grep -Ei '^\s*PermitRootLogin\s+yes' /etc/ssh/sshd_config
+        if ($test1 -match "permitrootlogin no" -and $test2 -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.3.1.1"
+    Task = "Ensure latest version of pam is installed"
+    Test = {
+        rpm -q libpam-runtime 2>&1 >/dev/null
+        if ($?) {
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+} 
+
+# MISSING RULE: 5.3.1.2 - Ensure latest version of authselect is installed
+# MISSING RULE: 5.3.1.3 - Ensure latest version of libpwquality is installed
+# MISSING RULE: 5.3.2.1 - Ensure active authselect profile includes pam modules
+[AuditTest] @{
+    Id   = "5.3.2.2"
+    Task = "Ensure pam_faillock module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.2.3"
+    Task = "Ensure pam_pwquality module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.2.4"
+    Task = "Ensure pam_pwhistory module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.2.5"
+    Task = "Ensure pam_unix module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.1.1"
+    Task = "Ensure password failed attempts lockout is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.1.2"
+    Task = "Ensure password unlock time is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.1.3"
+    Task = "Ensure password failed attempts lockout includes root account"
+    Test = {
+        $script = $commonPath + "5.3.3.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.2.1"
+    Task = "Ensure password number of changed characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.2.2"
+    Task = "Ensure password length is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.2.3"
+    Task = "Ensure password complexity is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id   = "5.3.3.2.4"
+    Task = "Ensure password same consecutive characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.2.5"
+    Task = "Ensure password maximum sequential characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.2.6"
+    Task = "Ensure password dictionary check is enabled"
+    Test = {
+        $script = $commonPath + "5.3.3.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.2.7"
+    Task = "Ensure password quality is enforced for the root user"
+    Test = {
+        $script = $scriptPath + "5.3.3.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.3.1"
+    Task = "Ensure password history remember is configured"
+    Test = {
+        $script = $scriptPath + "5.3.3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.3.2"
+    Task = "Ensure password history is enforced for the root user"
+    Test = {
+        $script = $scriptPath + "5.3.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.3.3"
+    Task = "Ensure pam_pwhistory includes use_authtok"
+    Test = {
+        $script = $commonPath + "5.3.3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "5.3.3.4.1"
+    Task = "Ensure pam_unix does not include nullok"
+    Test = {
+        $script = $commonPath + "5.3.3.4.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "5.3.3.4.2"
+    Task = "Ensure pam_unix does not include remember"
+    Test = {
+        $script = $scriptPath + "5.3.3.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.4.3"
+    Task = "Ensure pam_unix includes a strong password hashing algorithm"
+    Test = {
+        $script = $scriptPath + "5.3.3.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.3.3.4.4"
+    Task = "Ensure pam_unix includes use_authtok"
+    Test = {
+        $script = $commonPath + "5.3.3.4.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "5.4.1.1"
+    Task = "Ensure password expiration is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.1.2"
+    Task = "Ensure minimum password days is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.1.3"
+    Task = "Ensure password expiration warning days is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.1.4"
+    Task = "Ensure strong password hashing algorithm is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.1.5"
+    Task = "Ensure inactive password lock is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.1.6"
+    Task = "Ensure all users last password change date is in the past"
+    Test = {
+        $resultScript = $scriptPath + "5.4.1.6.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.4.2.1"
+    Task = "Ensure root is the only UID 0 account"
+    Test = {
+        $resultScript = $scriptPath + "5.4.2.1.sh"
+        $result = bash $resultScript
+        if ($result -eq "root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "5.4.2.2"
+    Task = "Ensure root is the only GID 0 account"
+    Test = {
+        $test1 = grep "^root:" /etc/passwd | cut -f4 -d ':'
+        if ($test1 -eq 0) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.2.3"
+    Task = "Ensure group root is the only GID 0 group"
+    Test = {
+        $script = $commonPath + "5.4.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+# MISSING RULE: 5.4.2.4 - Ensure root account access is controlled
+[AuditTest] @{
+    Id   = "5.4.2.5"
+    Task = "Ensure root PATH Integrity"
+    Test = {
+        $resultScript = $scriptPath + "5.4.2.5.sh"
+        $result = bash $resultScript
+        if ($result -match "is not a directory") {
+            return $retNonCompliant
+        }
+        else {
+            return $retCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "5.4.2.6"
+    Task = "Ensure root user umask is configured"
+    Test = {
+        $script = $commonPath + "5.4.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.2.7"
+    Task = "Ensure system accounts do not have a valid login shell"
+    Test = {
+        $script = $commonPath + "5.4.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.2.8"
+    Task = "Ensure accounts without a valid login shell are locked"
+    Test = {            
+        $script = $commonPath + "5.4.2.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "5.4.3.1"
+    Task = "Ensure nologin is not listed in /etc/shells"
+    Test = {
+        $script = $commonPath + "5.4.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.3.2"
+    Task = "Ensure default user shell timeout is configured"
+    Test = {
+        $script = $commonPath + "5.4.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "5.4.3.3"
+    Task = "Ensure default user umask is configured"
+    Test = {
+        $script = $commonPath + "5.4.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/passwd
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "6.1.2"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/passwd-
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "6.1.3"
+    Task = "Ensure cryptographic mechanisms are used to protect the integrity of audit tools"
+    Test = {
+        $script = $commonPath + "6.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.2.1.1"
+    Task = "Ensure journald service is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled rsyslog
+        if ($test1 -match "enabled") {
+            return @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status  = "False"
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.2.1.2"
+    Task = "Ensure journald log file access is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.2.1.3"
+    Task = "Ensure journald log file rotation is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+# MISSING RULE: 6.2.1.4 - Ensure only one logging system is in use
+
+[AuditTest] @{
+    Id   = "6.2.2.1.1"
+    Task = "Ensure systemd-journal-remote is installed"
+    Test = {
+        rpm -q systemd-journal-remote 2>&1 >/dev/null
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+
+# MISSING RULE: 6.2.2.1.2 - Ensure systemd-journal-upload authentication is configured
+
+[AuditTest] @{
+    Id   = "6.2.2.1.3"
+    Task = "Ensure systemd-journal-upload is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled systemd-journal-upload.service
+        $test2 = systemctl is-active systemd-journal-upload.service
+        if ($test1 -eq "enabled" -and $test2 -match "active") {
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.2.2.1.4"
+    Task = "Ensure systemd-journal-remote service is not in use"
+    Test = {
+        $script = $scriptPath + "6.2.2.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.2.2"
+    Task = "Ensure journald ForwardToSyslog is disabled"
+    Test = {
+        $script = $scriptPath + "6.2.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.2.3"
+    Task = "Ensure journald Compress is configured"
+    Test = {
+        $script = $scriptPath + "6.2.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.2.4"
+    Task = "Ensure journald Storage is configured"
+    Test = {
+        $script = $scriptPath + "6.2.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.2.3.1"
+    Task = "Ensure rsyslog is installed"
+    Test = {
+        rpm -q rsyslog 2>&1 >/dev/null
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+# MISSING RULE: 6.2.3.2 - Ensure rsyslog service is enabled and active
+[AuditTest] @{
+    Id   = "6.2.3.3"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        rpm -q systemd-journal-remote 2>&1 >/dev/null
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "6.2.3.4"
+    Task = "Ensure rsyslog log file creation mode is configured"
+    Test = {
+        $script = $scriptPath + "6.2.3.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+# MISSING RULE: 6.2.3.5 - Ensure rsyslog logging is configured
+[AuditTest] @{
+    Id   = "6.2.3.6"
+    Task = "Ensure rsyslog is configured to send logs to a remote log host"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "6.2.3.7"
+    Task = "Ensure rsyslog is not configured to receive logs from a remote client"
+    Test = {
+        $script = $scriptPath + "6.2.3.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+# MISSING RULE: 6.2.3.8 - Ensure rsyslog logrotate is configured
+
+[AuditTest] @{
+    Id   = "6.2.4.1"
+    Task = "Ensure access to all logfiles has been configured"
+    Test = {
+        $fileListAll = find /var/log -type f -ls
+        $fileListFiltered = find /var/log -type f -ls | grep "\-....\-\-\-\-\-"
+        if ($fileListAll.Count -eq $fileListFiltered.Count) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.3.1.1"
+    Task = "Ensure auditd packages are installed"
+    Test = {
+        rpm -q auditd 2>&1 >/dev/null
+        if (! $?) {
+            return $retNonCompliant
+        }
+        rpm -q audispd-plugins 2>&1 >/dev/null
+        if (! $?) {
+            return $retNonCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.3.1.2"
+    Task = "Ensure auditing for processes that start prior to auditd is enabled"
+    Test = {
+        $script = $scriptPath + "6.3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.1.3"
+    Task = "Ensure audit_backlog_limit is sufficient"
+    Test = {
+        $script = $scriptPath + "6.3.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.3.1.4"
+    Task = "Ensure auditd service is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled auditd
+        if ($test1 -match "enabled") {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.3.2.1"
+    Task = "Ensure audit log storage size is configured"
+    Test = {
+        $script = $commonPath + "6.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.2.2"
+    Task = "Ensure audit logs are not automatically deleted"
+    Test = {
+        $script = $commonPath + "6.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.2.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $result1 = grep space_left_action /etc/audit/auditd.conf
+        $result2 = grep action_mail_acct /etc/audit/auditd.conf
+        $result3 = grep -E 'admin_space_left_action\s*=\s*(halt|single)' /etc/audit/auditd.conf
+        if ($result1 -match "space_left_action = email" -and $result2 -match "action_mail_acct = root" -and ($result3 -match "admin_space_left_action = halt" -or $result3 -match "admin_space_left_action = single")) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "6.3.2.4"
+    Task = "Ensure system warns when audit logs are low on space"
+    Test = {
+        $test1 = grep -Pi -- '^\h*space_left_action\h*=\h*\w+\b' /etc/audit/auditd.conf | awk '{print $3}'
+        if ($test1 -match "^(email|exec|single|halt)$") {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.3.3.1"
+    Task = "Ensure changes to system administration scope (sudoers) is collected"
+    Test = {
+        $script = $commonPath + "6.3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.2"
+    Task = "Ensure actions as another user are always logged"
+    Test = {
+        $script = $commonPath + "6.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.3"
+    Task = "Ensure events that modify the sudo log file are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.4"
+    Task = "Ensure events that modify date and time information are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.5"
+    Task = "Ensure events that modify the system's network environment are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.6"
+    Task = "Ensure use of privileged commands are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.7"
+    Task = "Ensure unsuccessful file access attempts are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.8"
+    Task = "Ensure events that modify user/group information are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.9"
+    Task = "Ensure discretionary access control permission modification events are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.10"
+    Task = "Ensure successful file system mounts are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.11"
+    Task = "Ensure session initiation information is collected"
+    Test = {
+        $script_string1 = @'
+#!/usr/bin/env bash
+{
+    awk '/^ *-w/ &&(/\/var\/run\/utmp/ ||/\/var\/log\/wtmp/ ||/\/var\/log\/btmp/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+}
+'@
+        $script_string2 = @'
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-w/ &&(/\/var\/run\/utmp/ ||/\/var\/log\/wtmp/ ||/\/var\/log\/btmp/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
+'@
+        $result1 = bash -c $script_string1
+        $result2 = bash -c $script_string2
+        if ($result1 -match "-w /var/run/utmp -p wa -k session" -and $result1 -match "-w /var/log/wtmp -p wa -k session" -and $result1 -match "-w /var/log/btmp -p wa -k session" -and
+            $result2 -match "-w /var/run/utmp -p wa -k session" -and $result2 -match "-w /var/log/wtmp -p wa -k session" -and $result2 -match "-w /var/log/btmp -p wa -k session") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+
+[AuditTest] @{
+    Id   = "6.3.3.12"
+    Task = "Ensure login and logout events are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.12.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.13"
+    Task = "Ensure file deletion events by users are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.13.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.14"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.14.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.15"
+    Task = "Ensure successful and unsuccessful attempts to use the chcon command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.15.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.16"
+    Task = "Ensure successful and unsuccessful attempts to use the setfacl command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.16.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.17"
+    Task = "Ensure successful and unsuccessful attempts to use the chacl command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.17.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.18"
+    Task = "Ensure successful and unsuccessful attempts to use the usermod command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.18.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.19"
+    Task = "Ensure kernel module loading unloading and modification is collected"
+    Test = {
+        $script = $commonPath + "6.3.3.19.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.3.20"
+    Task = "Ensure the audit configuration is immutable"
+    Test = {
+        $result1 = grep -Ph -- '^\h*-e\h+2\b' /etc/audit/rules.d/*.rules | tail -1
+        if ($result1 -match "-e 2") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "6.3.3.21"
+    Task = "Ensure the running and on disk configuration is the same"
+    Test = {
+        $result1 = augenrules --check
+        if ($result1 -match "/usr/sbin/augenrules: No change") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "6.3.4.1"
+    Task = "Ensure the audit log file directory mode is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.2"
+    Task = "Ensure audit log files mode is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.3"
+    Task = "Ensure audit log files owner is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.4"
+    Task = "Ensure audit log files group owner is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.5"
+    Task = "Ensure audit configuration files mode is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.6"
+    Task = "Ensure audit configuration files owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.7"
+    Task = "Ensure audit configuration files group owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.8"
+    Task = "Ensure audit tools mode is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id   = "6.3.4.9"
+    Task = "Ensure audit tools owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "6.3.4.10"
+    Task = "Ensure audit tools group owner is configured"
+    Test = {
+        $test1 = stat -Lc '%G' /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | awk '$1 != "root" {print}'
+        if ($test1 -eq $null) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/passwd-
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.1.2"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd- | grep -q "0644"
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.1.3"
+    Task = "Ensure permissions on /etc/group are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/group
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.1.4"
+    Task = "Ensure permissions on /etc/group- are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/group-
+        if ($test1 -match "644 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.1.5"
+    Task = "Ensure permissions on /etc/shadow are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/shadow
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.1.6"
+    Task = "Ensure permissions on /etc/shadow- are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/shadow-
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.1.7"
+    Task = "Ensure permissions on /etc/gshadow are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/gshadow
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.1.8"
+    Task = "Ensure permissions on /etc/gshadow- are configured"
+    Test = {
+        $test1 = stat -Lc "%n %a %u/%U %g/%G" /etc/gshadow-
+        if ($test1 -match "0 0/root 0/root") {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.1.9"
+    Task = "Ensure permissions on /etc/shells are configured"
+    Test = {
+        $script = $commonPath + "7.1.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.1.10"
+    Task = "Ensure permissions on /etc/security/opasswd are configured"
+    Test = {
+        $script = $commonPath + "7.1.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.1.11"
+    Task = "Ensure world writable files and directories are secured"
+    Test = {
+        #$partitions = mapfile -t partitions < (sudo fdisk -l | grep -o '/dev/[^ ]*')
+        #$test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        $script = $commonPath + "7.1.11.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.1.12"
+    Task = "Ensure no files or directories without an owner and a group exist"
+    Test = {
+        $script = $commonPath + "7.1.12.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+} 
+
+[AuditTest] @{
+    Id   = "7.1.13"
+    Task = "Ensure SUID and SGID files are reviewed"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -4000
+        $message = ""
+        foreach ($line in $test1) {
+            $message += "<br>$line"
+        }
+        return @{
+            Message = "Please review following list of files: $($message)"
+            Status  = "None"
+        }
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.2.1"
+    Task = "Ensure accounts in /etc/passwd use shadowed passwords"
+    Test = {
+        $resultScript = $scriptPath + "7.2.1.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.2.2"
+    Task = "Ensure /etc/shadow password fields are not empty"
+    Test = {
+        $resultScript = $scriptPath + "7.2.2.sh"
+        $result = bash $resultScript
+        if ($result -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.2.3"
+    Task = "Ensure all groups in /etc/passwd exist in /etc/group"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    for i in $(cut -s -d: -f4 /etc/passwd | sort -u ); do
+        grep -q -P "^.*?:[^:]*:$i:" /etc/group
+        if [ $? -ne 0 ]; then
+            echo "Group $i is referenced by /etc/passwd but does not exist in /etc/group"
+        fi
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.2.4"
+    Task = "Ensure no duplicate UIDs exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -f3 -d":" /etc/passwd | sort -n | uniq -c | while read x ; do
+        [ -z "$x" ] && break
+        set - $x
+        if [ $1 -gt 1 ]; then
+            users=$(awk -F: '($3 == n) { print $1 }' n=$2 /etc/passwd | xargs)
+            echo "Duplicate UID ($2): $users"
+        fi
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.2.5"
+    Task = "Ensure no duplicate GIDs exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -d: -f3 /etc/group | sort | uniq -d | while read x ; do
+        echo "Duplicate GID ($x) in /etc/group"
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.2.6"
+    Task = "Ensure no duplicate user names exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -d: -f1 /etc/passwd | sort | uniq -d | while read -r x; do
+        echo "Duplicate login name $x in /etc/passwd"
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id   = "7.2.7"
+    Task = "Ensure no duplicate group names exist"
+    Test = {
+        $script_string = @'
+#!/usr/bin/env bash
+{
+    cut -d: -f1 /etc/group | sort | uniq -d | while read -r x; do
+        echo "Duplicate group name $x in /etc/group"
+    done
+}
+'@
+        $script = bash -c $script_string
+        if ($script -eq $null) {
+            return $retCompliant
+        }
+        else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{ # in CIS it's automated, but in Excelsheet it's manual
+    Id   = "7.2.8"
+    Task = "Ensure local interactive user home directories are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id   = "7.2.9"
+    Task = "Ensure local interactive user dot files access is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
diff --git a/ATAPAuditor/AuditGroups/SBD - Application Control.ps1 b/ATAPAuditor/AuditGroups/SBD - Application Control.ps1
new file mode 100644
index 0000000..0c0dcca
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/SBD - Application Control.ps1	
@@ -0,0 +1,68 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+[AuditTest] @{
+    Id = "SBD-501"
+	Task = "Ensure Windows Defender Application Control (WDAC) is available."
+	Test = {
+        # check newer than win10
+        $osVersion = (Get-CimInstance Win32_OperatingSystem).Version
+        # check whether system is server version 16 or newer
+        $windowsServerVersions = @(
+            "Windows Server 2016",
+            "Windows Server 2019",
+            "Windows Server 2022"
+        )
+        $isServer2016newer = $windowsServerVersions -contains $os
+        if( $osVersion -ge '10.0.0.0' -or $isServer2016newer -eq $true){
+            return @{
+                Message = "Your device supports WDAC."
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Only supported on Windows 10 and newer, as well as Windows Server 2016 and newer."
+            Status = "None"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-502"
+	Task = "Ensure Windows Defender Application ID Service is running."
+	Test = {
+        try{
+            if((Get-Service -Name APPIDSvc -ErrorAction Stop).Status -eq "Running"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "AppLocker is not running. Currently: $((Get-Service -Name APPIDSvc -ErrorAction Stop).Status)"
+                Status = "False"
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "False"
+            }
+        }
+	}
+}
+# [AuditTest] @{ Check for executable rules - windows installer rules - script rules - packaged app rules
+# 	Id = "SBD-042"
+# 	Task = "Ensure Windows Defender Application ID Service is running."
+# 	Test = {
+#         if((Get-Service -Name APPIDSvc).Status -eq "Running"){
+#             return @{
+#                 Message = "Compliant"
+#                 Status = "True"
+#             }
+#         }
+#         return @{
+#             Message = "AppLocker is not running. Currently: $((Get-Service -Name APPIDSvc).Status)"
+#             Status = "False"
+#         }
+# 	}
+# }
diff --git a/ATAPAuditor/AuditGroups/SBD - Connectivity Security.ps1 b/ATAPAuditor/AuditGroups/SBD - Connectivity Security.ps1
new file mode 100644
index 0000000..f56c520
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/SBD - Connectivity Security.ps1	
@@ -0,0 +1,1434 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$listOfWeakCipherSuites = getListOfWeakCipherSuites
+$listOfInsecureCipherSuites = getListOfInsecureCipherSuites
+[AuditTest] @{
+	Id = "SBD-401"
+	Task = "Ensure system is configured to deny remote access via Terminal Services."
+	Test = {
+		$value = (Get-ItemProperty -path "HKLM:\System\CurrentControlSet\Control\Terminal Server").fDenyTSConnections
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "System is not configured to deny remote access via Terminal Services."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-402"
+	Task = "Ensure system is configured to prevent RDP service."
+	Test = {
+		$value = (Get-ItemProperty -path "HKLM:\System\CurrentControlSet\Control\Terminal Server").AllowRemoteRPC
+        if($value -eq 0){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "System is not configured to prevent RDP service."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-403"
+	Task = "Ensure NTLM Session Server Security settings are configured."
+	Test = {
+		$value = (Get-ItemProperty -path 'HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0').NtlmMinServerSec
+        if($value -eq 537395200){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "NTLM Session Server Security settings are configured. Currently: $($value)"
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-404"
+	Task = "Ensure WinFW Service is running."
+	Test = {
+        try{
+            $value = (Get-Service WinRM -ErrorAction Stop).status
+            if($value -eq "Running"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        catch [System.SystemException]{
+            return @{
+                Message = "Service not found!"
+                Status = "False"
+            }
+        }
+        return @{
+            Message = "WinFW Service is not running. Currently: $($value)"
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+    Id = "SBD-405"
+    Task = "Ensure NetBIOS is set to 'Disabled' for all active Network cards."
+    Test = {
+        try{
+            $networkCards = Get-WmiObject win32_networkadapterconfiguration -filter 'IPEnabled=true' | select Description, TcpipNetBIOSOptions
+            $nonCompliantCards = @()
+            
+            for($i = 0; $i -lt $networkCards.Count; $i++){
+                 if($networkCards[$i].TcpipNetBIOSOptions -ne 0){
+                        $nonCompliantCards += $networkCards[$i]
+                 }
+            }
+            
+            if($nonCompliantCards.Count -eq 0){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            if($nonCompliantCards.Count -eq $networkCards.Count){
+                return @{
+                    Message = "All network cards have NETBIOS enabled."
+                    Status = "False"
+                }
+            }
+            $message = "Following network cards have NETBIOS enabled: " + $nonCompliantCards.Description
+            return @{
+                Message = $message
+                Status = "Warning"
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Value not found."
+                Status = "Error"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Value not found."
+                Status = "Error"
+            }
+        }
+    }
+}
+[AuditTest] @{
+	Id = "SBD-406"
+	Task = "Ensure SMBv1 is set to 'Disabled'."
+	Test = {
+		$value = (Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol).State
+        if($value -eq "Disabled"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "SMBv1 is Enabled."
+            Status = "False"
+        }
+	}
+}
+
+[AuditTest] @{
+    Id = "SBD-407"
+    Task = "Disable SSLv2 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-408"
+    Task = "Disable SSLv2 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-409"
+    Task = "Disable SSLv2 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-410"
+    Task = "Disable SSLv2 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-411"
+    Task = "Disable SSLv3 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-412"
+    Task = "Disable SSLv3 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-413"
+    Task = "Disable SSLv3 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-414"
+    Task = "Disable SSLv3 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-415"
+    Task = "Disable TLS1.0 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-416"
+    Task = "Disable TLS1.0 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-417"
+    Task = "Disable TLS1.0 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-418"
+    Task = "Disable TLS1.0 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-419"
+    Task = "Disable TLS1.1 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-420"
+    Task = "Disable TLS1.1 Protocol (Server DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-421"
+    Task = "Disable TLS1.1 Protocol (Client)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-422"
+    Task = "Disable TLS1.1 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-423"
+    Task = "Enable TLS1.2 Protocol (Server)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -eq 4294967295) {
+                return @{
+                    Message = "The current registry value is '$regValue', which is no longer supported by Microsoft. For more information, please refer to this link:<br/>"`
+                    +'<a href="https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings">'`
+                    +'Learn.microsoft.com - TLS, DTLS, and SSL protocol version settings<a/>'
+                    Status = "False"
+                }
+            }
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-424"
+    Task = "Enable TLS1.2 Protocol (Server Default)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-425"
+    Task = "Enable TLS1.2 Protocol (Client)"
+    Test = {
+        $OS = Get-CimInstance Win32_OperatingSystem | Select-Object Caption
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+
+            if ($regValue -eq 4294967295) {
+                return @{
+                    Message = "The current registry value is '$regValue', which is no longer supported by Microsoft. For more information, please refer to this link:<br/>"`
+                    +'<a href="https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings">'`
+                    +'Learn.microsoft.com - TLS, DTLS, and SSL protocol version settings<a/>'
+                    Status = "False"
+                }
+            }
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            if($OS -match "Server 2022" -or $OS -match "Windows 11"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-426"
+    Task = "Enable TLS1.2 Protocol (Client DisabledByDefault)"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" `
+                -Name "DisabledByDefault" `
+                | Select-Object -ExpandProperty "DisabledByDefault"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-427"
+    Task = "Disable NULL Cipher"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-428"
+    Task = "Disable DES Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-429"
+    Task = "Disable RC4 Cipher Suite - 40/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-430"
+    Task = "Disable RC4 Cipher Suite - 56/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-431"
+    Task = "Disable RC4 Cipher Suite - 64/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-432"
+    Task = "Disable RC4 Cipher Suite - 128/128"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-433"
+    Task = "Disable AES 128/128 Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-434"
+    Task = "Enable AES 256/256 Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -eq 4294967295) {
+                return @{
+                    Message = "The current registry value is '$regValue', which is no longer supported by Microsoft. For more information, please refer to this link:<br/>"`
+                    +'<a href="https://learn.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings?tabs=diffie-hellman#tls-dtls-and-ssl-protocol-version-settings">'`
+                    +'Learn.microsoft.com - TLS, DTLS, and SSL protocol version settings<a/>'
+                    Status = "False"
+                }
+            }
+            if ($regValue -ne 1) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 1"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-435"
+    Task = "Disable Triple DES Cipher Suite"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-436"
+    Task = "Disable SHA-1 hash"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-437"
+    Task = "Disable MD5 hash"
+    Test = {
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+                -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5" `
+                -Name "Enabled" `
+                | Select-Object -ExpandProperty "Enabled"
+        
+            if ($regValue -ne 0) {
+                return @{
+                    Message = "Registry value is '$regValue'. Expected: 0"
+                    Status = "False"
+                }
+            }
+        }
+        catch [System.Management.Automation.PSArgumentException] {
+            return @{
+                Message = "Registry value not found."
+                Status = "False"
+            }
+        }
+        catch [System.Management.Automation.ItemNotFoundException] {
+            return @{
+                Message = "Registry key not found."
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "SBD-438"
+    Task = "Configure Cipher Suite Ordering"
+    Test = {
+        #check if correct type 
+        $typeTable = @{
+            "String" = "String Value"
+            "Byte" = "Byte Value"
+            "Int32" = "DWORD (32-bit) Value"
+            "Int64" = "QWORD (64-bit) Value"
+            "String[]" = "Multi-String Value"
+        }
+        #Default status
+        $status = "Error"
+    
+        #Output
+        $verbInsecure = "rules have"
+        $verbWeak = "rules have"
+    
+        try {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+            -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002" `
+            -Name "Functions"
+            $reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+            $res = $regValue.Functions.GetType().Name
+    
+    
+            $currentType = $typeTable[$res]
+            if ($res -ne [String]) {
+                return @{  
+                    Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'String Value'"
+                    Status = "False"
+                }
+            }
+    
+            #check if insecure or weak cipher is inside value
+            $regValues = $regValue.Split(',')
+            $regValues = $regValues -replace ' ', ''
+            $weakRulesFound = @()
+            $insecureRulesFound = @()
+            foreach($element in $regValues){
+                if($listOfWeakCipherSuites.Contains($element)){
+                    $weakRulesFound += $element
+                }
+                if($listOfInsecureCipherSuites.Contains($element)){
+                    $insecureRulesFound += $element
+                }
+            }
+            if($insecureRulesFound.Count -eq 1){$verbInsecure = "rule has"}
+            if($weakRulesFound.Count -eq 1){$verbWeak = "rule has"}
+            $insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+            $weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+    
+            #Preparing message
+            foreach($member in $weakRulesFound){
+                $status = "Warning"
+                $weakMessage += "$($member)<br/>"
+            }          
+            foreach($member in $insecureRulesFound){
+                $status = "False"
+                $insecureMessage += "$($member)<br/>"
+            }          
+            #Combine or shorten message
+            if($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0){
+                $message = ""
+                if($weakRulesFound.Count -eq 0){ $weakMessage = "" }
+                if($insecureRulesFound.Count -eq 0){ $insecureMessage = "" }
+    
+                $message = $insecureMessage + $weakMessage
+                return @{
+                    Message = $message
+                    Status = $status
+                }
+            }
+        }
+        catch {
+            $regValue = Get-ItemProperty -ErrorAction Stop `
+            -Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002" `
+            -Name "Functions"
+            $reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+            $res = $regValue.Functions.GetType().Name
+    
+            $currentType = $typeTable[$res]
+            if ($res -ne [String[]]) {
+                return @{  
+                    Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'Multi-String Value'"
+                    Status = "False"
+                }
+            }
+    
+            #check if insecure or weak cipher is inside value
+            $regValues = $regValue -replace ' ', ''
+            $weakRulesFound = @()
+            $insecureRulesFound = @()
+            foreach($element in $regValues){
+                if($listOfWeakCipherSuites.Contains($element)){
+                    $weakRulesFound += $element
+                }
+                if($listOfInsecureCipherSuites.Contains($element)){
+                    $insecureRulesFound += $element
+                }
+            }
+            if($insecureRulesFound.Count -eq 1){$verbInsecure = "rule has"}
+            if($weakRulesFound.Count -eq 1){$verbWeak = "rule has"}
+            $insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+            $weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+    
+            #Preparing message
+            foreach($member in $weakRulesFound){
+                $status = "Warning"
+                $weakMessage += "$($member)<br/>"
+            }          
+            foreach($member in $insecureRulesFound){
+                $status = "False"
+                $insecureMessage += "$($member)<br/>"
+            }          
+            #Combine or shorten message
+            if($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0){
+                $message = ""
+                if($weakRulesFound.Count -eq 0){ $weakMessage = "" }
+                if($insecureRulesFound.Count -eq 0){ $insecureMessage = "" }
+    
+                $message = $insecureMessage + $weakMessage
+                return @{
+                    Message = $message
+                    Status = $status
+                }
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/SBD - Linux Base Security.ps1 b/ATAPAuditor/AuditGroups/SBD - Linux Base Security.ps1
new file mode 100644
index 0000000..8644305
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/SBD - Linux Base Security.ps1	
@@ -0,0 +1,462 @@
+function getKernelVersion {
+	$vsplit = $(uname -r).split('-')
+	if ($vsplit[1] -match '\.') { # Fedora
+		$vsplit[1] = $vsplit[1].split('.')[0]
+	}
+	return [version]($vsplit[0] + '.' + $vsplit[1])
+}
+function commandExists {
+	param (
+		$command
+	)
+    return [bool](Get-Command -Name $command -ErrorAction SilentlyContinue)
+}
+[AuditTest] @{
+	Id = "DSBD-001"
+	Task = "Ensure the system is booting in UEFI mode."
+	Test = {
+		if (Test-Path -Path /sys/firmware/efi) {
+			$status = @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			$status = @{
+				Message = "System is not booting using UEFI mode."
+				Status = "False"
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-002"
+	Task = "Ensure the system is using SecureBoot."
+	Test = {
+		if (Test-Path -Path /sys/firmware/efi) {
+			if ($(mokutil --sb-state) -eq "SecureBoot enabled") {
+				$status = @{
+							Message = "Compliant"
+							Status = "True"
+				}
+			} else {
+				$status = @{
+					Message = "System is not booting using UEFI mode."
+					Status = "False"
+				}
+			}
+		} else {
+			$status = @{
+				Message = "SecureBoot is only supported on UEFI."
+				Status= "False"
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-003"
+	Task = "Ensure the system has a TPM Chip."
+	Test = {
+		if (Test-Path -Path /dev/tpm0) { # /dev/tpmrm0 is _only_ for TPM 2.0
+			$status = @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			$status = @{
+				Message = "Could not detect a TPM chip"
+				Status = "False"
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-004"
+	Task = "Ensure the TPM Chip is implementing specification version 2.0 or higher."
+	Test = {
+		if ($(getKernelVersion) -ge [version]'5.6.0.0') { # For Ubuntu 20.04 e.g.
+			$spec = [float](Get-Content -Path '/sys/class/tpm/tpm0/tpm_version_major')
+		} else {
+		$tpm2toolsMajorVersion = [int]($(tpm2_getcap -v) | Select-String -Pattern '^.+version=\"(\d)\..+$').Matches.Groups[1].Value
+			if ($tpm2toolsMajorVersion -le 3) { # old versions up to 3.x had a different syntax (Debian 9)
+				$text = $(tpm2_getcap -c properties-fixed)
+				$match = [regex]::matches($text, '(?smi)TPM_PT_FAMILY_INDICATOR:   as UINT32: +0[xX][0-9a-fA-F]+   as string: +\"(\d\.\d)\"').Groups[1].Value
+			} else { # new versions 4.x (RHEL 8)
+				$text = $(tpm2_getcap properties-fixed)
+				$match = [regex]::matches($text, '(?smi)TPM2_PT_FAMILY_INDICATOR:   raw: +0[xX][0-9a-fA-F]+   value: +\"(\d\.\d)\"').Groups[1].Value
+			}
+			$spec = [float]$match
+		}
+
+		if ($spec -ge 2.0) {
+			return @{
+				Message = "Compliant"
+				Status = "True"
+			}
+		} elseif ($spec -gt 0) {
+			return @{
+				Message = "Specification version lower than 2.0 found."
+				Status = "Warning"
+			}
+		} else {
+			return @{
+				Message = "No implemented specification version found."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-005"
+	Task = "Report the count of local users on the system."
+	Test = {
+		# Linux native alternative: grep -c ^ /etc/passwd
+		$countUsers = (Get-Content /etc/passwd).Count
+		return  @{
+					Message = "System has $countUsers local users"
+					Status = "None"
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-006"
+	Task = "Report the count of local interactive users on the system."
+	Test = {
+		$countUsers = (Get-Content /etc/passwd | Where-Object {-not ($_ -match "/usr/sbin/nologin" -or $_ -match "/bin/false" -or $_ -match "/bin/sync")}).Count
+		$status = switch ($countUsers) {
+			{($PSItem -ge 0) -and ($PSItem -le 2)}{ # 0, 1, 2
+				@{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			{($PSItem -gt 2) -and ($PSItem -le 5)}{ # 3, 4, 5
+				@{
+					Message = "System has 3-5 local users."
+					Status = "Warning"
+				}
+			}
+			{$PSItem -gt 5}{ # 6, ...
+				@{
+					Message = "System has 6 or more local users."
+					Status = "False"
+				}
+			}
+			Default {
+				@{
+					Message = "Cannot determine the count of local users"
+					Status = "Error"
+				}
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-007"
+	Task = "Get the count of admin users on the system."
+	Test = {
+		$usersSudo = ($(getent group sudo) -split ":")[3]
+		$usersRoot = ($(getent group root) -split ":")[3]
+		$usersWheel = ($(getent group wheel) -split ":")[3]
+		$usersAdmin = ($(getent group admin) -split ":")[3]
+		$usersAdm = ($(getent group adm) -split ":")[3]
+		$userIdZero = ($(getent passwd 0) -split ":")[0]
+		$allUsersArr = @($usersSudo, $usersRoot, $usersWheel, $usersAdmin, $usersAdm, $userIdZero) | Where-Object {$_ -ne "" -and $_ -ne $null} | Sort-Object | Get-Unique
+		$status = switch ($allUsersArr.Count) {
+			{($PSItem -ge 0) -and ($PSItem -le 2)}{ # 0, 1, 2
+				@{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			{($PSItem -gt 2) -and ($PSItem -le 5)}{ # 3, 4, 5
+				@{
+					Message = "System has 3-5 admin users."
+					Status = "Warning"
+				}
+			}
+			{$PSItem -gt 5}{ # 6, ...
+				@{
+					Message = "System has 6 or more admin users."
+					Status = "False"
+				}
+			}
+			Default {
+				@{
+					Message = "Cannot determine the count of admin users"
+					Status = "Error"
+				}
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-008"
+	Task = "Ensure the NX bit is set."
+	Test = {
+		$query = (-split (Get-Content /proc/cpuinfo | Where-Object {$_ -match '^flags.*$'} | Get-Unique)) -Contains 'nx'
+		if ($query) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "The NX bit is not set."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-009"
+	Task = "Ensure the ASLR is enabled."
+	Test = {
+		$query = [int](Get-Content /proc/sys/kernel/randomize_va_space)
+		if ($query -ge 2) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} elseif ($query -eq 1) {
+			return @{
+				Message = "ASLR is partially enabled."
+				Status = "Warning"
+			}
+		} else {
+			return @{
+				Message = "ASLR is not enabled."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-010"
+	Task = "Ensure AppArmor or SELinux is enabled."
+	Test = {
+		if (commandExists 'aa-status') {
+			$AppArmorStatus = ($(aa-status) -match '^apparmor module is loaded.*$').Count -gt 0
+		}
+		if (commandExists 'getenforce') {
+			$SELinuxStatus = ($(getenforce) -match 'Enforcing$').Count -gt 0
+		}
+
+		if ($AppArmorStatus -or $SELinuxStatus) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "Neither AppArmor nor SELinux are enabled."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-011"
+	Task = "Ensure CPU has no known vulnerabilities."
+	Test = {
+		$query = ((Get-Content /sys/devices/system/cpu/vulnerabilities/*) -match '^Vulnerable.*$').Count
+		if ($query -eq 0) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "System has $query known CPU vulnerabilities."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-012"
+	Task = "Ensure root login using SSH is not permitted."
+	Test = {
+		$rootLoginDisabled = [bool](Get-Content /etc/ssh/sshd_config | Select-String -Pattern '^PermitRootLogin no').Matches.Length
+		if ($rootLoginDisabled) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "Login for root using SSH is permitted."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-013"
+	Task = "Ensure a firewall is installed (ufw, iptables, nftables)."
+	Test = {
+		if (commandExists dpkg) {
+			$ufwInstalled = [bool]($(dpkg -s ufw 2> /dev/zero) -match 'Status: install').Count
+			$iptablesInstalled = [bool]($(dpkg -s iptables 2> /dev/zero) -match 'Status: install').Count
+			$nftablesInstalled = [bool]($(dpkg -s nftables 2> /dev/zero) -match 'Status: install').Count
+		}
+		if (commandExists rpm) {
+			$ufwInstalled = [bool]($(rpm -qa) -match '^ufw.+$').Count
+			$iptablesInstalled = [bool]($(rpm -qa) -match '^iptables.+$').Count
+			$nftablesInstalled = [bool]($(rpm -qa) -match '^nftables.+$').Count
+		}
+		if ($ufwInstalled -or $iptablesInstalled -or $nftablesInstalled) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "Login for root using SSH is permitted."
+				Status = "False"
+			}
+		}
+	}
+}
+function getFilePermissionsRegex {
+	Param(
+		[Parameter(Mandatory=$true)][String][ValidateNotNullOrEmpty()]$filePath
+	)
+	$text = stat $filePath
+	$match = [regex]::matches($text, '\S+:\s+\((\d+)\/\S+\)\s+Uid:\s+\(\s*(\d+)\/\s+(\S+)\)\s+Gid:\s+\(\s+(\d+)\/\s+(\S+)\)')
+	return [ordered]@{
+		permissionsOct = $match.Groups[1].Value
+		ownerUserId = $match.Groups[2].Value
+		ownerUserName = $match.Groups[3].Value
+		ownerGroupId = $match.Groups[4].Value
+		ownerGroupName = $match.Groups[5].Value
+	}
+}
+function checkFilePermissions {
+	Param(
+		[Parameter(Mandatory=$true)][String][ValidateNotNullOrEmpty()]$filePath,
+		[Parameter(Mandatory=$true)][String][ValidateNotNullOrEmpty()]$permissionsOct,
+		[Parameter(Mandatory=$true)][String][ValidateNotNullOrEmpty()]$ownerUserName,
+		[Parameter(Mandatory=$true)][String][ValidateNotNullOrEmpty()]$ownerGroupName
+	)
+	# calculate mode
+	$item = Get-Item $filePath
+	$modeLowerBits = $item.UnixStat.Mode -band 4095 # 4095_(10) = 111111111111_(2) = 7777_(8) = FFF_(16)
+	$mode = [Convert]::ToString($modeLowerBits, 8) # Conversion not necessary in future: https://github.com/PowerShell/PowerShell/issues/16757 , alternative: stat -c '%a' /etc/passwd
+	# check for same or more restricted permissions
+	foreach ($i in 0..($mode.Length - 1)) {
+		if ($mode[$i] -gt $permissionsOct[$i]) {
+			return $false # = less restrictive
+		}
+	}
+	# check owning user and group
+	return $item.User -eq $ownerUserName -and $item.Group -eq $ownerGroupName
+}
+[AuditTest] @{
+	Id = "DSBD-014"
+	Task = "Ensure /etc/passwd and /etc/passwd- have proper file permissions."
+	Test = {
+		$result = checkFilePermissions '/etc/passwd' '644' 'root' 'root'
+		if (Test-Path -Path '/etc/passwd-' -PathType Leaf) {
+			$result = $result -and (checkFilePermissions '/etc/passwd-' '644' 'root' 'root')
+		}
+		if ($result) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "The file permissions are not set correctly."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-015"
+	Task = "Ensure /etc/shadow and /etc/shadow- have proper file permissions."
+	Test = {
+		$result = (checkFilePermissions '/etc/shadow' '640' 'root' 'root') -or (checkFilePermissions '/etc/shadow' '640' 'root' 'shadow')
+		if (Test-Path -Path '/etc/shadow-' -PathType Leaf) {
+			$resultDash = (checkFilePermissions '/etc/shadow-' '640' 'root' 'root') -or (checkFilePermissions '/etc/shadow-' '640' 'root' 'shadow')
+			$result = $result -and $resultDash
+		}
+		if ($result) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "The file permissions are not set correctly."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-016"
+	Task = "Ensure /etc/group and /etc/group- have proper file permissions."
+	Test = {
+		$result = checkFilePermissions '/etc/group' '644' 'root' 'root'
+		if (Test-Path -Path '/etc/group-' -PathType Leaf) {
+			$result = $result -and (checkFilePermissions '/etc/group-' '644' 'root' 'root')
+		}
+		if ($result) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "The file permissions are not set correctly."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-017"
+	Task = "Ensure /etc/gshadow and /etc/gshadow- have proper file permissions."
+	Test = {
+		$result = (checkFilePermissions '/etc/gshadow' '640' 'root' 'root') -or (checkFilePermissions '/etc/gshadow' '640' 'root' 'shadow')
+		if (Test-Path -Path '/etc/gshadow-' -PathType Leaf) {
+			$resultDash = (checkFilePermissions '/etc/gshadow-' '640' 'root' 'root') -or (checkFilePermissions '/etc/gshadow-' '640' 'root' 'shadow')
+			$result = $result -and $resultDash
+		}
+		if ($result) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "The file permissions are not set correctly."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "DSBD-018"
+	Task = "Ensure /etc/ssh/sshd_config has proper file permissions."
+	Test = {
+		$result = checkFilePermissions '/etc/ssh/sshd_config' '600' 'root' 'root'
+		if ($result) {
+			return @{
+						Message = "Compliant"
+						Status = "True"
+			}
+		} else {
+			return @{
+				Message = "The file permissions are not set correctly."
+				Status = "False"
+			}
+		}
+	}
+}
diff --git a/ATAPAuditor/AuditGroups/SBD - Platform Security.ps1 b/ATAPAuditor/AuditGroups/SBD - Platform Security.ps1
new file mode 100644
index 0000000..b0defa6
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/SBD - Platform Security.ps1	
@@ -0,0 +1,569 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+[AuditTest] @{
+	Id = "SBD-101"
+	Task = "Ensure the system is booting in 'UEFI' mode."
+	Test = {
+		if (isWindows8OrNewer) {
+			$status = switch ($env:firmware_type) {
+				"UEFI" {
+					@{
+						Message = "Compliant"
+						Status = "True"
+					}
+				}
+				"Legacy" {
+					@{
+						Message = "System is booting using 'Legacy' mode."
+						Status = "False"
+					}
+				}
+				Default {
+					@{
+						Message = "Unknown boot mode"
+						Status = "False"
+					}
+				}
+			}
+			return $status
+		}
+		else {
+			if ((bcdedit | findstr -i path | findstr -i winload.efi).Count -ge 1) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			elseif (((bcdedit | findstr -i path | findstr -i winload.exe).Count -ge 1)) {
+				return @{
+					Message = "System is booting using 'Legacy' mode."
+					Status = "False"
+				}
+			}
+			else {
+				return @{
+					Message = "Unknown boot mode"
+					Status = "False"
+				}
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-102"
+	Task = "Virtualization Based Security: Ensure the system is using SecureBoot."
+	Test = {
+		if (isWindows8OrNewer) {
+			try {
+				$status = switch ($env:firmware_type) {
+					"UEFI" {
+						$obj = Confirm-SecureBootUEFI
+					}
+					"Legacy" {
+						return @{
+							Message = "System is booting using 'Legacy' mode. SecureBoot not supported."
+							Status = "False"
+						}
+					}
+					Default {
+						return @{
+							Message = "Unknown boot mode"
+							Status = "False"
+						}
+					}
+				}
+			}
+			catch [UnauthorizedAccessException] {
+				return @{
+					Message = "Permission Denied"
+					Status = "Error"
+				}
+			}
+			$status = switch ($obj) {
+				$true {
+					@{
+						Message = "Compliant"
+						Status = "True"
+					}
+				}
+				$false {
+					@{
+						Message = "SecureBoot is supported but disabled."
+						Status = "False"
+					}
+				}
+				Default {
+					@{
+						Message = "SecureBoot is not supported or system is in non-UEFI mode."
+						Status = "False"
+					}
+				}
+			}
+			return $status
+		}
+		else {
+			return @{
+				Message = "System does not support this feature (Windows 8 or newer required)."
+				Status = "None"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-103"
+	Task = "Ensure the TPM Chip is 'present'."
+	Test = {
+		$hasTpm = hasTPM
+		if (($null -eq $hasTpm) -or ($false -eq $hasTpm)) {
+			return @{
+				Message = "No TPM Chip detected."
+				Status = "False"
+			}
+		}
+		if (isWindows8OrNewer) {
+			$obj = (Get-Tpm).TpmPresent
+			if ($obj -isnot [Boolean]) {
+				return @{
+					Message = "Cannot get 'present' status of TPM."
+					Status = "Error"
+				}
+			}
+			$status = switch ($obj) {
+				$true {
+					@{
+						Message = "Compliant"
+						Status = "True"
+					}
+				}
+				$false {
+					@{
+						Message = "The TPM Chip is not 'present'."
+						Status = "False"
+					}
+				}
+			}
+			return $status
+		}
+		else {
+			# Get any property to see if a TPM is present
+			if (win7NoTPMChipDetected) {
+				return @{
+					Message = "No TPM Chip detected."
+					Status = "False"
+				}
+			} else {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-104"
+	Task = "Ensure the TPM Chip is 'ready'."
+	Test = {
+		$hasTpm = hasTPM
+		if (($null -eq $hasTpm) -or ($false -eq $hasTpm)) {
+			return @{
+				Message = "No TPM Chip detected."
+				Status = "False"
+			}
+		}
+		if (isWindows8OrNewer) {
+			$obj = (Get-Tpm).TpmReady
+			if ($obj -isnot [Boolean]) {
+				return @{
+					Message = "Cannot get 'ready' status of TPM."
+					Status = "Error"
+				}
+			}
+			$status = switch ($obj) {
+				$true {
+					@{
+						Message = "Compliant"
+						Status = "True"
+					}
+				}
+				$false {
+					@{
+						Message = "The TPM Chip is not 'ready'."
+						Status = "False"
+					}
+				}
+			}
+			return $status
+		}
+		else {
+			if (win7NoTPMChipDetected) {
+				return @{
+					Message = "No TPM Chip detected."
+					Status = "False"
+				}
+			} else {
+				return @{
+					Message = "System does not expose a 'ready' status"
+					Status = "None"
+				}
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-105"
+	Task = "Ensure the TPM Chip is 'enabled'."
+	Test = {
+		$hasTpm = hasTPM
+		if (($null -eq $hasTpm) -or ($false -eq $hasTpm)) {
+			return @{
+				Message = "No TPM Chip detected."
+				Status = "False"
+			}
+		}
+		if (isWindows8OrNewer) {
+			
+			$state =  Get-WmiObject -class Win32_Tpm -namespace root\CIMV2\Security\MicrosoftTpm
+			if ($state.IsEnabled_InitialValue -eq $true) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			return @{
+				Message = "The TPM Chip is not 'enabled'."
+				Status = "False"
+			}
+		}
+		else {
+			if (win7NoTPMChipDetected) {
+				return @{
+					Message = "No TPM Chip detected."
+					Status = "False"
+				}
+			}
+			if (Get-CimInstance -ClassName Win32_Tpm -Namespace root\cimv2\security\microsofttpm | Select-Object -ExpandProperty IsEnabled_InitialValue) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			else {
+				return @{
+					Message = "The TPM Chip is not 'enabled'."
+					Status = "False"
+				}
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-106"
+	Task = "Ensure the TPM Chip is 'activated'."
+	Test = {
+		$hasTpm = hasTPM
+		if (($null -eq $hasTpm) -or ($false -eq $hasTpm)) {
+			return @{
+				Message = "No TPM Chip detected."
+				Status = "False"
+			}
+		}
+		if (isWindows8OrNewer) {
+			$state =  Get-WmiObject -class Win32_Tpm -namespace root\CIMV2\Security\MicrosoftTpm
+			if ($state.IsActivated_InitialValue -eq $true) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			return @{
+				Message = "The TPM Chip is not 'enabled'."
+				Status = "False"
+			}
+		}
+		else {
+			if (win7NoTPMChipDetected) {
+				return @{
+					Message = "No TPM Chip detected."
+					Status = "False"
+				}
+			}
+			if (Get-CimInstance -ClassName Win32_Tpm -Namespace root\cimv2\security\microsofttpm | Select-Object -ExpandProperty IsActivated_InitialValue) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			else {
+				return @{
+					Message = "The TPM Chip is not 'activated'."
+					Status = "False"
+				}
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-107"
+	Task = "Ensure the TPM Chip is 'owned'."
+	Test = {
+		$hasTpm = hasTPM
+		if (($null -eq $hasTpm) -or ($false -eq $hasTpm)) {
+			return @{
+				Message = "No TPM Chip detected."
+				Status = "False"
+			}
+		}
+		if (isWindows8OrNewer) {
+			$state =  Get-WmiObject -class Win32_Tpm -namespace root\CIMV2\Security\MicrosoftTpm
+			if ($state.IsOwned_InitialValue -eq $true) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			return @{
+				Message = "The TPM Chip is not 'enabled'."
+				Status = "False"
+			}
+		}
+		else {
+			if (win7NoTPMChipDetected) {
+				return @{
+					Message = "No TPM Chip detected."
+					Status = "False"
+				}
+			}
+			if (Get-CimInstance -ClassName Win32_Tpm -Namespace root\cimv2\security\microsofttpm | Select-Object -ExpandProperty IsOwned_InitialValue) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			else {
+				return @{
+					Message = "The TPM Chip is not 'owned'."
+					Status = "False"
+				}
+			}
+			
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-108"
+	Task = "Ensure the TPM Chip is implementing specification version 2.0 or higher."
+	Test = {
+		$hasTpm = hasTPM
+		if (($null -eq $hasTpm) -or ($false -eq $hasTpm)) {
+			return @{
+				Message = "No TPM Chip detected."
+				Status = "False"
+			}
+		}
+		# get array of implemented spec versions
+		$obj = (Get-CimInstance -Class Win32_Tpm -Namespace root\CIMV2\Security\MicrosoftTpm -ErrorAction SilentlyContinue | Select-Object -ExpandProperty SpecVersion)
+		if ($obj -eq $null) {
+			return @{
+				Message = "No TPM Chip detected."
+				Status = "False"
+			}
+		}
+		# get main spec version (first element)
+		$obj = $obj.split(', ')[0]
+
+		if ($obj -ge 2.0) {
+			return @{
+				Message = "Compliant"
+				Status = "True"
+			}
+		}
+		elseif ($obj -gt 0) {
+			return @{
+				Message = "Specification version lower than 2.0 found."
+				Status = "Warning"
+			}
+		} else {
+			return @{
+				Message = "No implemented specification version found."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-109"
+	Task = "Virtualization Based Security: Ensure Virtualization Based Security is enabled and running."
+	Test = {
+		$isWindows10OrNewer = isWindows10OrNewer
+		if($isWindows10OrNewer -eq $false){
+			return @{
+				Message = "System does not support this feature (Windows 10 or newer required)."
+				Status = "None"
+			}
+		}
+		$obj = (Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).VirtualizationBasedSecurityStatus
+		$status = switch ($obj) {
+			{$PSItem -eq 2} {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			{$PSItem -eq 1} {
+				return @{
+					Message = "VBS is activated but not running."
+					Status = "False"
+				}
+			}
+			{$PSItem -eq 0} {
+				return @{
+					Message = "VBS is not activated."
+					Status = "False"
+				}
+			}
+			default {
+				return @{
+					Message = "Cannot get the VBS status."
+					Status = "Error"
+				}
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id = "SBD-110"
+	Task = "Virtualization Based Security: Ensure Hypervisor-protected Code Integrity (HVCI) is running."
+	Test = {
+		$isWindows10OrNewer = isWindows10OrNewer
+		if($isWindows10OrNewer -eq $false){
+			return @{
+				Message = "System does not support this feature (Windows 10 or newer required)."
+				Status = "None"
+			}
+		}
+		if ((Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesRunning -contains 2) {
+			return @{
+				Message = "Compliant"
+				Status = "True"
+			}
+		}
+		else {
+			return @{
+				Message = "HVCI is not running."
+				Status = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-111"
+	Task = "Virtualization Based Security: Ensure Credential Guard is running."
+	Test = {
+		$value = isWindows10OrNewer
+		if($value -eq $false){
+			return @{
+				Message = "System does not support this feature (Windows 10 or newer required)."
+				Status = "None"
+			}
+		}
+		$systemSKU = (Get-CimInstance Win32_OperatingSystem).Caption
+		$supportedSKUs = @("Windows Enterprise", "Windows Education", "Windows Server")
+
+		$system = $systemSKU -replace "\d\s*", ""
+		$system = $system -replace "Microsoft ", ""
+		if($supportedSKUs.Contains($system)){
+			if ((Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesRunning -contains 1) {
+				return @{
+					Message = "Compliant"
+					Status = "True"
+				}
+			}
+			else {
+				return @{
+					Message = "Credential Guard is not running."
+					Status = "False"
+				}
+			}
+		}
+		else{
+			if ((Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesConfigured -contains 1) {
+				return @{
+					Message = "Credential Guard is configured but not running, due to incompatibility with $($systemSKU) <br/>See Microsoft documentation for further information: <a href='https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/#windows-edition-and-licensing-requirements'>Here</a>"
+					Status = "False"
+				}
+			}
+			else {
+				return @{
+					Message = "Credential Guard is not configured."
+					Status = "False"
+				}
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id = "SBD-112"
+	Task = "Virtualization Based Security: Ensure Security Services are running."
+	Test = {
+		$value = isWindows10OrNewer
+		if($value -eq $false){
+			return @{
+				Message = "System does not support this feature (Windows 10 or newer required)."
+				Status = "None"
+			}
+		}
+		$serviceRunningIDs = (Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesRunning
+		if ($serviceRunningIDs -contains 0) {
+			return @{
+				Message = "No Device Guard security services are running."
+				Status = "False"
+			}
+		} 
+		if ($serviceRunningIDs -contains 1) {
+			$message += "Credential Guard"
+		}
+		if ($serviceRunningIDs -contains 2) {
+			if (![string]::IsNullOrEmpty($message)) {
+				$message += ", "
+			}
+			$message += "Memory Integrity (HVCI)"
+		}
+		if ($serviceRunningIDs -contains 3) {
+			if (![string]::IsNullOrEmpty($message)) {
+				$message += ", "
+			}
+			$message += "System Guard Secure Launch"
+		}
+		if ($serviceRunningIDs -contains 4) {
+			if (![string]::IsNullOrEmpty($message)) {
+				$message += ", "
+			}
+			$message += "SMM Firmware Measurement"
+		}
+		if ($serviceRunningIDs -contains 5) {
+			if (![string]::IsNullOrEmpty($message)) {
+				$message += ", "
+			}
+			$message += "Kernel-mode Hardware-enforced Stack Protection"
+		}
+		if ($serviceRunningIDs -contains 6) {
+			if (![string]::IsNullOrEmpty($message)) {
+				$message += ", "
+			}
+			$message += "Kernel-mode Hardware-enforced Stack Protection is configured in Audit mode"
+		}
+		if ($serviceRunningIDs -contains 7) {
+			if (![string]::IsNullOrEmpty($message)) {
+				$message += ", "
+			}
+			$message += "Hypervisor-Enforced Paging Translation"
+		} 
+		return @{
+			Message = "$message are running on Device Guard as services."
+			Status = "True"
+		}
+	}
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/SBD - PowerShell Security.ps1 b/ATAPAuditor/AuditGroups/SBD - PowerShell Security.ps1
new file mode 100644
index 0000000..6aebf35
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/SBD - PowerShell Security.ps1	
@@ -0,0 +1,204 @@
+[AuditTest] @{
+	Id = "SBD-301"
+	Task = "Ensure PowerShell Version is set to version 5 or higher."
+	Test = {
+		if ($PSVersionTable.PSVersion.Major -ge 5) {
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+		}
+        return @{
+            Message = "PowerShell version is lower than 5. Current Version: $($PSVersionTable.PSVersion)"
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-302"
+	Task = "Ensure PowerShell Version 2 is uninstalled."
+	Test = {
+        $ps2Found = $false
+        $messages = "The following PS2-related features are enabled:"
+
+        $PSV2State = (Get-WindowsOptionalFeature -Online -FeatureName MicrosoftWindowsPowerShellV2).State
+        if ($PSV2State -eq "Enabled") {
+            $messages += "<br>Windows PowerShell 2.0 Engine"
+            $ps2Found = $true
+        }
+
+        $os = Get-CimInstance Win32_OperatingSystem
+        if ($os.ProductType -eq 1) {
+            $PSRootState = (Get-WindowsOptionalFeature -Online -FeatureName MicrosoftWindowsPowerShellV2Root).State
+            if ($PSRootState -eq "Enabled") {
+                $messages += "<br>Windows PowerShell 2.0"
+                $ps2Found = $true
+            }
+        }
+
+        if ($ps2Found -eq $true) {
+            return @{
+                Message = $messages
+                Status = "False"
+            }
+        }
+
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-303"
+	Task = "Ensure PowerShell is set to configured to use Constrained Language."
+	Test = {
+		$languageMode = $ExecutionContext.SessionState.LanguageMode
+        if($languageMode -eq "ConstrainedLanguage"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Language Mode is not set to 'Constrained Language'. Current configuration: $($languageMode)"
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-304"
+	Task = "Ensure Execution policy is set to AllSigned / RemoteSigned."
+	Test = {
+		$execPolicy = Get-ExecutionPolicy
+        if($execPolicy -eq "AllSigned" -or $execPolicy -eq "RemoteSigned"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Execution Policy is not set to AllSigned / Remote Signed. Current configuration: $($execPolicy)"
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-305"
+	Task = "Ensure PowerShell Commandline Audting is set to 'Enabled'."
+	Test = {
+		$value = (Get-ItemProperty -path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit' -ErrorAction SilentlyContinue).ProcessCreationIncludeCmdLine_Enabled
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "PowerShell Commandline Auditing is not set to 'Enabled'."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-306"
+	Task = "Ensure PowerShell Module Logging is set to 'Enabled'."
+	Test = {
+		$value = (Get-ItemProperty -path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ModuleLogging' -ErrorAction SilentlyContinue).EnableModuleLogging
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "PowerShell Module Logging is not set to 'Enabled'."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-307"
+	Task = "Ensure PowerShell ScriptBlockLogging is set to 'Enabled'."
+	Test = {
+		$value = (Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging' -ErrorAction SilentlyContinue).EnableScriptBlockLogging
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "PowerShell ScriptBlockLogging is not set to 'Enabled'."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-308"
+	Task = "Ensure PowerShell ScriptBlockInvocationLogging is set to 'Enabled'."
+	Test = {
+		$value = (Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging' -ErrorAction SilentlyContinue).EnableScriptBlockInvocationLogging
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "PowerShell ScriptBlockInvocationLogging is not set to 'Enabled'."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-309"
+	Task = "Ensure PowerShell Transcripting is set to 'Enabled'."
+	Test = {	
+		$value = (Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Windows\PowerShell\Transcription' -ErrorAction SilentlyContinue).EnableTranscripting
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "PowerShell Transcripting is not set to 'Enabled'."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-310"
+	Task = "Ensure PowerShell InvocationHeader is set to 'Enabled'."
+	Test = {	
+        $value = (Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Windows\PowerShell\Transcription' -ErrorAction SilentlyContinue).EnableInvocationHeader
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "PowerShell InvocationHeader is not set to 'Enabled'."
+            Status = "False"
+        }
+	}
+}
+[AuditTest] @{
+	Id = "SBD-311"
+	Task = "Ensure PowerShell ProtectedEventLogging is set to 'Enabled'."
+	Test = {
+		$value = (Get-ItemProperty -path 'HKLM:\Software\Policies\Microsoft\Windows\EventLog\ProtectedEventLogging' -ErrorAction SilentlyContinue).EnableProtectedEventLogging
+        if($value -eq 1){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "PowerShell ProtectedEventLogging is not set to 'Enabled'."
+            Status = "False"
+        }
+    }
+}
diff --git a/ATAPAuditor/AuditGroups/SBD - Windows Base Security.ps1 b/ATAPAuditor/AuditGroups/SBD - Windows Base Security.ps1
new file mode 100644
index 0000000..1a8f0e6
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/SBD - Windows Base Security.ps1	
@@ -0,0 +1,622 @@
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+
+[AuditTest] @{
+	Id   = "SBD-201"
+	Task = "Get License status."
+	Test = {
+		$lcStatus = Get-LicenseStatus $SkipLicenseCheck
+		if ($lcStatus -eq "Licensed") {
+			return @{
+				Message = "Compliant"
+				Status  = "True"
+			}
+		}
+		if ($lcStatus -eq "License check has been skipped.") {
+			return @{
+				Message = $lcStatus
+				Status  = "None"
+			}
+		}
+		return @{
+			Message = "System not licensed."
+			Status  = "False"
+		}
+	}
+}
+[AuditTest] @{
+	Id          = "SBD-202"
+	Task        = "Get amount of active local users on system. (0 - 2: True; 3 - 5: Warning; 6 or higher: False)"
+	Constraints = @(
+		@{ "Property" = "DomainRole"; "Values" = "Standalone Workstation", "Member Workstation", "Standalone Server", "Member Server" }
+	)
+	Test        = {	
+		$users = Get-LocalUser;
+		$amountOfActiveUser = 0;
+		foreach ($user in $users) {
+			if ($user.Enabled -eq $True) {
+				$amountOfActiveUser ++;
+			}
+		}
+		$status = switch ((Get-LocalUser).Count) {
+			{ ($amountOfActiveUser -ge 0) -and ($amountOfActiveUser -le 2) } {
+				# 0, 1, 2
+				@{
+					Message = "Compliant"
+					Status  = "True"
+				}
+			}
+			{ ($amountOfActiveUser -gt 2) -and ($amountOfActiveUser -le 5) } {
+				# 3, 4, 5
+				@{
+					Message = "System has $($amountOfActiveUser) local users."
+					Status  = "Warning"
+				}
+			}
+			{ $amountOfActiveUser -gt 5 } {
+				# 6, ...
+				@{
+					Message = "System has 6 or more local users. (Currently $($amountOfActiveUser) users.)"
+					Status  = "False"
+				}
+			}
+			Default {
+				@{
+					Message = "Cannot determine the count of local users"
+					Status  = "Error"
+				}
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id          = "SBD-203"
+	Task        = "Get amount of users and groups in administrators group on system. (0 - 2: True; 3 - 5: Warning; 6 or higher: False)"
+	Constraints = @(
+		@{ "Property" = "DomainRole"; "Values" = "Standalone Workstation", "Member Workstation", "Standalone Server", "Member Server" }
+	)
+	Test        = {	
+		try { 
+			#List all groups 
+			function Get-ADAdminCount($groupname) {
+				try {
+					$domain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
+					$root = $domain.GetDirectoryEntry()
+					$searcher = New-Object System.DirectoryServices.DirectorySearcher($root)
+					$searcher.Filter = "(&(objectCategory=group)(cn=$groupName))"
+					$group = $searcher.FindOne()
+					$groupDN = $group.Properties["distinguishedname"][0]
+					$searcher.Filter = "(&(objectCategory=user)(memberOf=$groupDN))"
+					$members = $searcher.FindAll()
+					return ($members | ForEach-Object { $_.Properties["distinguishedname"] }).Count
+				}
+				catch {
+					return 1
+				}
+			}
+
+			$allgroups = Get-LocalGroup -SID "S-1-5-32-544" | Get-LocalGroupMember 
+			[int]$ADCount = 0
+			[int]$localCount = 0
+			foreach ($entry in $allgroups) {
+				if ($entry.PrincipalSource -eq "ActiveDirectory") {
+					$group = $entry.Name -split '\\' | Select-Object -Last 1
+					$ADCount += Get-ADAdminCount $group
+					continue;
+				} 
+				# only applies to Local Groups
+				$group = $entry.Name -split '\\' | Select-Object -Last 1
+				try {
+					$localCount += (Get-LocalGroupMember $group -ErrorAction Stop).Count
+				}
+				catch [Microsoft.PowerShell.Commands.NotFoundException] {
+					$localCount++;
+				}
+			}
+			[int]$amountOfUserAndGroups = $ADCount + $localCount
+			$status = switch ($amountOfUserAndGroups) {
+				{ ($amountOfUserAndGroups -ge 0) -and ($amountOfUserAndGroups -le 2) } {
+					# 0, 1, 2
+					@{
+						Message = "Total amount of users: $amountOfUserAndGroups <br/> Amount of local users: $localCount <br/> Amount of domain users: $ADCount <br/>"
+						Status  = "True"
+					}
+				}
+				{ ($amountOfUserAndGroups -gt 2) -and ($amountOfUserAndGroups -le 5) } {
+					# 3, 4, 5
+					@{
+						Message = "Total amount of users: $amountOfUserAndGroups <br/> Amount of local users: $localCount <br/> Amount of domain users: $ADCount <br/>"
+						Status  = "Warning"
+					}
+				}
+				{ $amountOfUserAndGroups -gt 5 } {
+					# 6, ...
+					@{
+						Message = "Total amount of users: $amountOfUserAndGroups <br/> Amount of local users: $localCount <br/> Amount of domain users: $ADCount <br/>"
+						Status  = "False"
+					}
+				}
+				Default {
+					@{
+						Message = "Cannot determine the count of admin users. Please check manually."
+						Status  = "Error"
+					}
+				}
+			}
+			return $status
+		}
+		catch {
+			@{
+				Message = "Cannot determine the count of admin users. Please check manually."
+				Status  = "Error"
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-204"
+	Task = "Ensure the status of the Bitlocker service is 'Running'."
+	Test = {
+		if (isWindows8OrNewer) {
+			if ((Get-WindowsOptionalFeature -Online -FeatureName Bitlocker).State -eq 'Disabled') {
+				return @{
+					Message = "Bitlocker feature is not installed."
+					Status  = "False"
+				}
+			}
+		}
+		$status = switch ((Get-Service BDESVC -ErrorAction SilentlyContinue).Status) {
+			"Running" {
+				@{
+					Message = "Compliant"
+					Status  = "True"
+				}
+			}
+			Default {
+				@{
+					Message = "Bitlocker service is not 'Running'."
+					Status  = "False"
+				}
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-205"
+	Task = "Ensure that Bitlocker is activated on all volumes."
+	Test = {
+		try {
+			if (isWindows8OrNewer) {
+				if ((Get-WindowsOptionalFeature -Online -FeatureName Bitlocker).State -eq 'Disabled') {
+					return @{
+						Message = "Bitlocker feature is not installed."
+						Status  = "False"
+					}
+				}
+				$volumes = (Get-Bitlockervolume -ErrorAction Stop).Count
+				$volumes_fullenc = (Get-Bitlockervolume | Where-Object { $_.VolumeStatus -eq "FullyEncrypted" }).Count
+			}
+			else {
+				$volumes = (Get-CimInstance -Class Win32_EncryptableVolume -namespace Root\CIMV2\Security\MicrosoftVolumeEncryption | Measure-Object).Count
+				$volumes_fullenc = (Get-CimInstance -Class Win32_EncryptableVolume -namespace Root\CIMV2\Security\MicrosoftVolumeEncryption | Where-Object { $_.ProtectionStatus -eq 1 } | Measure-Object).Count
+			}
+		}
+		catch [System.Runtime.InteropServices.COMException] {
+			return @{
+				Message = "Bitlocker status is unknown."
+				Status  = "Error"
+			}
+		}
+		if ($volumes -lt 1) {
+			return @{
+				Message = "Bitlocker status is unknown."
+				Status  = "Error"
+			}
+		}
+		$enc_ratio = $volumes_fullenc / $volumes
+		$status = switch ($enc_ratio) {
+			{ $enc_ratio -ge 1 } {
+				@{
+					Message = "Compliant"
+					Status  = "True"
+				}
+			}
+			{ $enc_ratio -lt 1 } {
+				@{
+					Message = "Bitlocker is not activated on all volumes."
+					Status  = "False"
+				}
+			}
+			Default {
+				@{
+					Message = "Bitlocker status is unknown."
+					Status  = "Error"
+				}
+			}
+		}
+		return $status
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-206"
+	Task = "Ensure the status of the Windows Defender service is 'Running'."
+	Test = {
+		try {
+			$status = switch ((Get-Service WinDefend -ErrorAction Stop).Status) {
+				"Running" {
+					@{
+						Message = "Compliant"
+						Status  = "True"
+					}
+				}
+				default {
+					@{
+						Message = "Service is not 'Running'."
+						Status  = "False"
+					}
+				}
+			}
+			return $status
+		}
+		catch [Microsoft.PowerShell.Commands.ServiceCommandException] {
+			return @{
+				Message = "Current version is not supported."
+				Status  = "None"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-207"
+	Task = "Ensure Windows Defender Application Guard is enabled."
+	Test = {
+		$isWindows10OrNewer = isWindows10OrNewer
+		if ($isWindows10OrNewer -eq $false) {
+			return @{
+				Message = "System does not support this feature (Windows 10 or newer required)."
+				Status  = "None"
+			}
+		}
+		$state = (Get-WindowsOptionalFeature -Online -FeatureName Windows-Defender-ApplicationGuard).State
+		if ($state -eq 'Enabled') {
+			return @{
+				Message = "Compliant"
+				Status  = "True"
+			}
+		}
+		else {
+			return @{
+				Message = "Windows Defender Application Guard is not enabled."
+				Status  = "False"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-208"
+	Task = "Ensure the Windows Firewall is enabled on all profiles."
+	Test = {
+		if (isWindows8OrNewer) {
+			if ((Get-NetFirewallProfile | Where-Object { $_.Enabled -eq 'False' } | Measure-Object).Count -gt 0) {
+				return @{
+					Message = "Firewall is not enabled on all profiles"
+					Status  = "False"
+				}
+			}
+			else {
+				return @{
+					Message = "Compliant"
+					Status  = "True"
+				}
+			}
+		}
+		else {
+			$fw = New-Object -ComObject hnetcfg.fwpolicy2 
+			$domain = $fw.FireWallEnabled(1)
+			$private = $fw.FireWallEnabled(2)
+			$public = $fw.FireWallEnabled(4)
+			if ($domain -and $private -and $public) {
+				return @{
+					Message = "Compliant"
+					Status  = "True"
+				}
+			}
+			else {
+				return @{
+					Message = "Firewall is not enabled on all profiles"
+					Status  = "False"
+				}
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-209"
+	Task = "Check if the last successful search for updates was in the past 24 hours."
+	Test = {
+		try {
+			$startdate = (New-Object -com "Microsoft.Update.AutoUpdate").Results.LastSearchSuccessDate
+			if ($null -eq $startdate) {
+				return @{
+					Message = "There was no search found."
+					Status  = "False"
+				}
+			}
+			$tdiff = New-TimeSpan -ErrorAction Stop -Start $startdate -End (Get-Date)
+			$status = switch ($tdiff.Hours) {
+				{ ($PSItem -ge 0) -and ($PSItem -le 24) } {
+					@{
+						Message = "Compliant"
+						Status  = "True"
+					}
+				}
+				{ ($PSItem -gt 24) -and ($PSItem -le 24 * 5) } {
+					@{
+						Message = "Last search for updates was within 5 days."
+						Status  = "Warning"
+					}
+				}
+				Default {
+					@{
+						Message = "Last search for updates was more than 5 days ago."
+						Status  = "False"
+					}
+				}
+			}
+			return $status
+		}
+		catch {
+			return @{
+				Message = "Not supported on this system."
+				Status  = "None"
+			}
+		}
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-210"
+	Task = "Check if the last successful installation of updates was in the past 5 days." # Windows defender definitions do count as updates
+	Test = {
+		try {
+			$startdateObjects = get-wmiobject -class win32_quickfixengineering | Sort-Object -Property InstalledOn -Descending -ErrorAction Stop
+			$startdate = $startdateObjects[0].InstalledOn
+			if ($null -eq $startdate) {
+				$startdate = (New-Object -com "Microsoft.Update.AutoUpdate").Results.LastInstallationSuccessDate
+			}
+			if ($null -eq $startdate) {
+				return @{
+					Message = "There was no date found."
+					Status  = "False"
+				}
+			}
+			$tdiff = New-TimeSpan -Start $startdate -End (Get-Date)
+			if ($tdiff.Days -ge 5) {
+				return @{
+					Message = "Compliant"
+					Status  = "True"
+				}
+			}
+			else {
+				$status = switch ($tdiff.Hours) {
+					{ ($PSItem -ge 0) -and ($PSItem -le 24 * 5) } {
+						return @{
+							Message = "Compliant"
+							Status  = "True"
+						}
+					}
+					{ ($PSItem -gt 24 * 5) -and ($PSItem -le 24 * 31) } {
+						return @{
+							Message = "Last installation of updates was within the last month."
+							Status  = "Warning"
+						}
+					}
+					Default {
+						return @{
+							Message = "Last installation of updates was more than a month ago."
+							Status  = "False"
+						}
+					}
+				}
+			}
+			return $status
+		}
+		catch [System.Management.Automation.GetValueInvocationException] {
+			return @{
+				Message = "Your device needs to restart to install updates"
+				Status  = "None"
+			}
+		}
+		catch {
+			return @{
+				Message = "Not supported on this system."
+				Status  = "None"
+			}
+		}
+	}
+}
+### SBD - 211 Placeholder
+### SBD - 212 Placeholder
+### SBD - 213 Placeholder
+[AuditTest] @{
+	Id   = "SBD-214"
+	Task = "Ensure Attack Surface Reduction (ASR) rules are enabled."
+	Test = {
+		if (isWindows10OrNewer) {
+			$ruleids = (Get-MpPreference).AttackSurfaceReductionRules_Ids
+			$ruleactions = (Get-MpPreference).AttackSurfaceReductionRules_Actions
+			$RuleTable = for ($i = 0; $i -lt $ruleids.Count; $i++) {
+				[PSCustomObject]@{
+					RuleId     = $ruleids[$i]
+					RuleAction = $ruleactions[$i]
+				}
+			}
+			$countEnabled = ($RuleTable | Where-Object { $_.RuleAction -eq 1 } | Measure-Object).Count
+			
+			$status = switch ($countEnabled) {
+				{ $PSItem -ge 12 } {
+					@{
+						Message = "Compliant ($($countEnabled) rules enabled). For more information on ASR rules, check corresponding benchmarks."
+						Status  = "True"
+					}
+				}
+				{ ($PSItem -ge 1) -and ($PSItem -lt 12) } {
+					@{
+						Message = "$($countEnabled) ASR rules are activated. For more information on ASR rules, check corresponding benchmarks."
+						Status  = "Warning"
+					}
+				}
+				Default {
+					@{
+						Message = "ASR rules are not enabled."
+						Status  = "False"
+					}
+				}
+			}
+			return $status
+		}
+		else {
+			$windefrunning = CheckWindefRunning
+			if ((-not $windefrunning)) {
+				return @{
+					Message = "This rule requires Windows Defender Antivirus to be enabled."
+					Status  = "None"
+				}
+			}
+			$countEnabled = 0
+			$Rule1 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR"
+				Value = "ExploitGuard_ASR_Rules"
+			};
+			$bool = $($Rule1.Path1), $($Rule1.Path2) | Test-MultiplePaths -Key $($Rule1.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule2 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "26190899-1602-49e8-8b27-eb1d0a1ce869"
+			};
+			$bool = $($Rule2.Path1), $($Rule2.Path2) | Test-MultiplePaths -Key $($Rule2.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule3 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "3b576869-a4ec-4529-8536-b80a7769e899"
+			};
+			$bool = $($Rule3.Path1), $($Rule3.Path2) | Test-MultiplePaths -Key $($Rule3.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule4 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "5beb7efe-fd9a-4556-801d-275e5ffc04cc" 
+			};
+			$bool = $($Rule4.Path1), $($Rule4.Path2) | Test-MultiplePaths -Key $($Rule4.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule5 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84"
+			};
+			$bool = $($Rule5.Path1), $($Rule5.Path2) | Test-MultiplePaths -Key $($Rule5.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule6 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c"
+			};
+			$bool = $($Rule6.Path1), $($Rule6.Path2) | Test-MultiplePaths -Key $($Rule6.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule7 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2"
+			};
+			$bool = $($Rule7.Path1), $($Rule7.Path2) | Test-MultiplePaths -Key $($Rule7.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule8 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4"
+			};
+			$bool = $($Rule8.Path1), $($Rule8.Path2) | Test-MultiplePaths -Key $($Rule8.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule9 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550"
+			};
+			$bool = $($Rule9.Path1), $($Rule9.Path2) | Test-MultiplePaths -Key $($Rule9.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+			$Rule10 = @{
+				Path1 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Path2 = "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules"
+				Value = "56a863a9-875e-4185-98a7-b882c64b5ce5"
+			};
+			$bool = $($Rule10.Path1), $($Rule10.Path2) | Test-MultiplePaths -Key $($Rule10.Value) -ExpectedValue 1 
+			if ($bool.Status -eq "True") {
+				$countEnabled++;
+			}
+
+			$status = switch ($countEnabled) {
+				{ $PSItem -ge 10 } {
+					@{
+						Message = "Compliant ($($countEnabled) rules enabled). For more information on ASR rules, check corresponding benchmarks."
+						Status  = "True"
+					}
+				}
+				{ ($PSItem -ge 1) -and ($PSItem -lt 10) } {
+					@{
+						Message = "$($countEnabled) ASR rules are activated. For more information on ASR rules, check corresponding benchmarks."
+						Status  = "Warning"
+					}
+				}
+				Default {
+					@{
+						Message = "ASR rules are not enabled."
+						Status  = "False"
+					}
+				}
+			}
+
+			return $status
+		}
+	}
+}
+[AuditTest] @{
+	Id   = "SBD-215"
+	Task = "Ensure system is on 64-bit version"
+	Test = {	
+		$is64bit = [Environment]::Is64BitOperatingSystem
+		if ($is64bit -eq $True) {
+			return @{
+				Message = "Compliant"
+				Status  = "True"
+			}
+		}
+		return @{
+			Message = "System not 64bit."
+			Status  = "False"
+		}
+	}
+}
diff --git a/ATAPAuditor/AuditGroups/SUSE Linux Enterprise 15-CIS-1.1.1.ps1 b/ATAPAuditor/AuditGroups/SUSE Linux Enterprise 15-CIS-1.1.1.ps1
new file mode 100644
index 0000000..27929d7
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/SUSE Linux Enterprise 15-CIS-1.1.1.ps1	
@@ -0,0 +1,3541 @@
+$parentPath = Split-Path -Parent -Path $PSScriptRoot
+$scriptPath = $parentPath + "/Helpers/ShellScripts/SLE_15/"
+$rcTrue = "True"
+$rcCompliant = "Compliant"
+$rcFalse = "False"
+$rcNone = "None"
+$rcNonCompliant = "Non-Compliant"
+$rcNonCompliantManualReviewRequired = "Manual Review Required"
+$rcCompliantIPv6isDisabled = "IPv6 is disabled"
+$rcFirewallStatus1 = "Using firewalld with iptables"
+$rcFirewallStatus2 = "Using nftables"
+$rcFirewallStatus3 = "Using iptables"
+
+$retCompliant = @{
+    Message = $rcCompliant
+    Status = $rcTrue
+}
+$retNonCompliant = @{
+    Message = $rcNonCompliant
+    Status = $rcFalse
+}
+$retCompliantIPv6Disabled = @{
+    Message = $rcCompliantIPv6isDisabled
+    Status = $rcTrue
+}
+$retNonCompliantManualReviewRequired = @{
+    Message = $rcNonCompliantManualReviewRequired
+    Status = $rcNone
+}
+$retUsingFW1 = @{
+    Message = $rcFirewallStatus1
+    Status = $rcNone
+}
+$retUsingFW2 = @{
+    Message = $rcFirewallStatus2
+    Status = $rcNone
+}
+$retUsingFW3 = @{
+    Message = $rcFirewallStatus3
+    Status = $rcNone
+}
+
+
+$IPv6Status_script = @'
+#!/bin/bash
+[ -n "$passing" ] && passing=""
+[ -z "$(grep "^\s*linux" /boot/grub2/grub.cfg | grep -v ipv6.disabled=1)" ] && passing="true"
+grep -Eq "^\s*net\.ipv6\.conf\.all\.disable_ipv6\s*=\s*1\b(\s+#.*)?$" /etc/sysctl.conf /etc/sysctl.d/*.conf && grep -Eq "^\s*net\.ipv6\.conf\.default\.disable_ipv6\s*=\s*1\b(\s+#.*)?$" /etc/sysctl.conf /etc/sysctl.d/*.conf && sysctl net.ipv6.conf.all.disable_ipv6 | grep -Eq "^\s*net\.ipv6\.conf\.all\.disable_ipv6\s*=\s*1\b(\s+#.*)?$" && sysctl net.ipv6.conf.default.disable_ipv6 | grep -Eq "^\s*net\.ipv6\.conf\.default\.disable_ipv6\s*=\s*1\b(\s+#.*)?$" && passing="true"
+if [ "$passing" = true ] ; then
+    echo "IPv6 is disabled on the system"
+else
+    echo "IPv6 is enabled on the system"
+fi
+'@
+$IPv6Status = bash -c $IPv6Status_script
+if ($IPv6Status -match "enabled") {
+    $IPv6Status = "enabled"
+} else {
+    $IPv6Status = "disabled"
+}
+
+
+# Firewall evaluation
+function GetFirewallStatus {
+    # 0 = init. value, undefined
+    # 1 = using firewalld with iptabes as backend
+    # 2 = using nftables
+    # 3 = using iptables
+    $FirewallStatus = 0
+
+    # Testing for firewalld with iptables as backend
+    $test1 = rpm -q firewalld iptables
+    $test2 = rpm -q nftables
+    $test3 = systemctl status nftables | grep "active (running)"
+    $test4 = systemctl is-enabled nftables
+    $test5 = systemctl is-enabled firewalld
+    $test6 = firewall-cmd --state
+    if($test1 -match "firewalld-" -and $test1 -match "iptables-" -and (!($test2 -match "nftables-") -or !($test3 -match "active (running)")) -and !($test4 -match "enabled") -and $test5 -match "enabled" -and $test6 -match "running") {
+        return 1
+    }
+
+    # Testing for nftables
+    $test1 = rpm -q nftables
+    $test2 = rpm -q firewalld
+    $test3 = systemctl status firewalld | grep "active (running)"
+    $test4 = systemctl is-enabled firewalld
+    $test5 = systemctl is-enabled nftables
+    if($test1 -match "nftables-" -and !($test2 -match "firewalld-" -or $test3 -match "active (running)") -and !($test4 -match "enabled") -and $test5 -match "enabled") {
+        return 2
+    }
+
+    # Testing for iptables
+    $test1 = rpm -q iptables
+    $test2 = rpm -q nftables
+    $test3 = rpm -q firewalld
+    $test4 = systemctl status firewalld | grep "active (running)"
+    $test5 = systemctl is-enabled firewalld
+    if($test1 -match "iptables-" -and $test2 -match "not installed" -and $test3 -match "not installed" -and !($test4 -match "running (active)") -and !($test5 -match "enabled")) {
+        return 3
+    }
+
+    return $FirewallStatus
+}
+
+$FirewallStatus = GetFirewallStatus
+### Chapter 1 - Initial Setup
+
+[AuditTest] @{
+    Id = "1.1.1.1"
+    Task = "Ensure mounting of squashfs filesystems is disabled"
+    Test = {
+        $result1 = modprobe -n -v squashfs | grep -E '(suqashfs|install)'
+        $result2 = lsmod | grep squashfs
+        if ($result1 -match "install /bin/true" -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.1.2"
+    Task = "Ensure mounting of udf filesystems is disabled"
+    Test = {
+        $result1 = modprobe -n -v udf | grep -E '(udf|install)'
+        $result2 = lsmod | grep udf
+        if ($result1 -match "install /bin/true" -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.1.3"
+    Task = "Ensure mounting of FAT filesystems is disabled"
+    Test = {
+        $result1 = modprobe -n -v fat | grep -E '(fat|install)'
+        $result2 = lsmod | grep udf
+        $result3 = modprobe -n -v vfat | grep -E '(vfat|install)'
+        $result4 = lsmod | grep udf
+        $result5 = modprobe -n -v msdos | grep -E '(msdos|install)'
+        $result6 = lsmod | grep udf
+        if ($result1 -match "install /bin/true" -and $result2 -eq $null -and $result3 -match "install /bin/true" -and $result4 -eq $null -and $result5 -match "install /bin/true" -and $result6 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "Ensure /tmp is configured"
+    Test = {
+        $result1 = mount | grep -E '\s/tmp\s'
+        if ($result1 -match "/tmp") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "Ensure noexec option set on /tmp partition"
+    Test = {
+        $result1 = mount | grep -E '\s/tmp\s' | grep -v noexec
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "Ensure nodev option set on /tmp partition"
+    Test = {
+        $result1 = mount | grep -E '\s/tmp\s' | grep -v nodev
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "Ensure nosuid option set on /tmp partition"
+    Test = {
+        $result1 = mount | grep -E '\s/tmp\s' | grep -v nosuid
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "Ensure /dev/shm is configured"
+    Test = {
+        $result1 = mount | grep -E '\s/dev/shm\s'
+        $result2 = grep -E '\s/dev/shm\s' /etc/fstab
+        if ($result1 -ne $null -and $result2 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.7"
+    Task = "Ensure noexec option set on /dev/shm partition"
+    Test = {
+        $result1 = mount | grep -E '\s/dev/shm\s' | grep -v noexec
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.8"
+    Task = "Ensure nodev option set on /dev/shm partition"
+    Test = {
+        $result1 = mount | grep -E '\s/dev/shm\s' | grep -v nodev
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.9"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $result1 = mount | grep -E '\s/dev/shm\s' | grep -v nosuid
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.10"
+    Task = "Ensure separate partition exists for /var"
+    Test = {
+        $result1 = mount | grep -E '\s/var\s'
+        if ($result1 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.11"
+    Task = "Ensure separate partition exists for /var/tmp"
+    Test = {
+        $result1 = mount | grep /var/tmp
+        if ($result1 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.12"
+    Task = "Ensure noexec option set on /var/tmp partition"
+    Test = {
+        $result1 = mount | grep -E '\s/var/tmp\s' | grep -v noexec
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.13"
+    Task = "Ensure nodev option set on /var/tmp partition"
+    Test = {
+        $result1 = mount | grep -E '\s/var/tmp\s' | grep -v nodev
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.14"
+    Task = "Ensure nosuid option set on /var/tmp partition"
+    Test = {
+        $result1 = mount | grep -E '\s/var/tmp\s' | grep -v nosuid
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.15"
+    Task = "Ensure separate partition exists for /var/log"
+    Test = {
+        $result1 = mount | grep -E '\s/var/log\s'
+        if ($result1 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.16"
+    Task = "Ensure separate partition exists for /var/log/audit"
+    Test = {
+        $result1 = mount | grep /var/log/audit
+        if ($result1 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.17"
+    Task = "Ensure separate partition exists for /home"
+    Test = {
+        $result1 = mount | grep /home
+        if ($result1 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.18"
+    Task = "Ensure nodev option set on /home partition"
+    Test = {
+        $result1 = mount | grep -E '\s/home\s' | grep -v nodev
+        if ($result1 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.19"
+    Task = "Ensure noexec option set on removable media partitions"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.20"
+    Task = "Ensure nodev option set on removable media partitions"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.21"
+    Task = "Ensure nosuid option set on removable media partitions"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.22"
+    Task = "Ensure sticky bit is set on all world-writable directories"
+    Test = {
+        $result_script = @'
+#!/bin/bash
+df --local -P 2>/dev/null | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type d \( -perm -0002 -a ! -perm -1000 \) 2>/dev/null
+'@
+        $result = bash -c $result_script
+        if ($result -ne $null) {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.23"
+    Task = "Disable Automounting"
+    Test = {
+        $result = systemctl is-enabled autofs
+        if ($result -match "enabled") {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "Ensure GPG keys are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "Ensure package manager repositories are configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "1.2.3"
+    Task = "Ensure gpgcheck is globally activated"
+    Test = {
+        $result = grep ^\s*gpgcheck /etc/zypp/zypp.conf
+        if ($result -match "gpgcheck=1") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.3.1"
+    Task = "Ensure sudo is installed"
+    Test = {
+        $result = rpm -q sudo
+        if ($result -match "sudo-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.3.2"
+    Task = "Ensure sudo commands use pty"
+    Test = {
+        $result = grep -Ei '^\s*Defaults\s+([^#]\S+,\s*)?use_pty\b' /etc/sudoers /etc/sudoers.d/*
+        if ($result -match "Defaults user_pty") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.3.3"
+    Task = "Ensure sudo log file exists"
+    Test = {
+        $result = grep -Ei '^\s*Defaults\s+([^#;]+,\s*)?logfile\s*=\s*(")?[^#;]+(")?' /etc/sudoers /etc/sudoers.d/*
+        if ($result -match "Defaults logfile=") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.4.1"
+    Task = "Ensure aide is installed"
+    Test = {
+        $result = rpm -q aide
+        if ($result -match "aide-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.4.2"
+    Task = "Ensure filesystem integrity is regularly checked"
+    Test = {
+        $result1 = crontab -u root -l | grep aide
+        $result2 = grep -r aide /etc/cron.* /etc/crontab
+        if ($result1 -ne $null -or $result2 -ne $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.1"
+    Task = "Ensure bootloader password is set"
+    Test = {
+        $result1 = grep "^\s*set superusers" /boot/grub2/grub.cfg
+        $result2 = grep "^\s*password" /boot/grub2/grub.cfg
+        if ($result1 -match "set superusers=" -and $result2 -match "password_pbkdf2 ") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.2"
+    Task = "Ensure permissions on bootloader config are configured"
+    Test = {
+        $result = stat /boot/grub2/grub.cfg | grep "Uid: "
+        $result = $result | cut -d '(' -f 2
+        $result = $result | cut -d '/' -f 1
+        if($result -eq "0400" -or $result[1] -le 4){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.3"
+    Task = "Ensure authentication required for single user mode"
+    Test = {
+        $result1 = grep /systemd-sulogin-shell /usr/lib/systemdm/system/rescue.service
+        $result2 = grep /systemd-sulogin-shell /usr/lib/systemdm/system/rescue.service
+        if($result1 -ne $null -and $result2 -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.1"
+    Task = "Ensure core dumps are restricted"
+    Test = {
+        $result1 = grep -E "^\s*\*\s+hard\s+core" /etc/security/limits.conf
+        $result2 = sysctl fs.suid_dumpable
+        $result3 = grep "fs\.suid_dumpable" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "hard core 0" -and $result2 -match "fs.suid_dumpable = 0" -and $result3 -match "fs.suid_dumpable = 0") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+# 1.6.2 implemented for journalctl only
+[AuditTest] @{
+    Id = "1.6.2"
+    Task = "Ensure XD/NX support is enabled"
+    Test = {
+        $result1 = journalctl | grep 'protection: active'
+        if($result1 -match "protection: active") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.3"
+    Task = "Ensure address space layout randomization (ASLR) is enabled"
+    Test = {
+        $result1 = sysctl kernel.randomize_va_space
+        $result2 = grep "kernel\.randomize_va_space" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "kernel.randomize_va_space = 2" -and $result2 -match "kernel.randomize_va_space = 2") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.6.4"
+    Task = "Ensure prelink is disabled"
+    Test = {
+        $result1 = rpm -q prelink
+        if($result1 -match "package prelink is not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.1.1"
+    Task = "Ensure AppArmor is installed"
+    Test = {
+        $result1 = rpm -q apparmor-docs apparmor-parser apparmor-profiles apparmor-utils libapparmor1
+        if($result1 -ne $null -or $result2 -ne $null) {
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.1.2"
+    Task = "Ensure AppArmor is enabled in the bootloader configuration"
+    Test = {
+        $result1 = grep "^\s*linux" /boot/grub2/grub.cfg | grep -v "apparmor=1"
+        $result2 = grep "^\s*linux" /boot/grub2/grub.cfg | grep -v "security=apparmor"
+        if($result1 -eq $null -and $result2 -eq $null) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.1.3"
+    Task = "Ensure all AppArmor Profiles are in enforce or complain mode"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        $profileMode3 = apparmor_status | grep profiles | sed '3!d' | cut -d ' ' -f 1
+        $result = expr $profileMode3 + $profileMode2
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+        if ($result -eq $profileMode1 -and $unconfinedProcesses -eq 0) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.7.1.4"
+    Task = "Ensure all AppArmor Profiles are enforcing"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+
+        if($profileMode1 -eq $profileMode2 -and $unconfinedProcesses -eq 0){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.1.1"
+    Task = "Ensure message of the day is configured properly"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/motd 2>/dev/null
+        if($result -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.1.2"
+    Task = "Ensure local login warning is configured peoperly"
+    Test = {
+        $result = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue
+        if($result -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.1.3"
+    Task = "Ensure remote login warning banner is configured properly"
+    Test = {
+        $script = $scriptPath + "CIS-SEL15-1.8.1.3.sh"
+        $result = bash $script
+        if($result -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.1.4"
+    Task = "Ensure permissions on /etc/motd are configured"
+    Test = {
+        $result = stat -L /etc/motd | grep "0644"
+        if($result -eq $null -or $result -match "0644"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.8.1.5"
+    Task = "Ensure permissions on /etc/issue are configured"
+    Test = {
+        $result = stat -L /etc/issue | grep "0644"
+        if($result -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+if (Test-Path -Path '/etc/issue.net') {
+[AuditTest] @{
+    Id = "1.8.1.6"
+    Task = "Ensure permissions on /etc/issue.net are configured"
+    Test = {
+        $result = stat -L /etc/issue.net | grep "0644"
+        if($result -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+}
+
+[AuditTest] @{
+    Id = "1.9"
+    Task = "Ensure updates, patches, and additional security software are installed"
+    Test = {
+        $output = zypper list-updates
+        $output = $?
+        if($output -match "True"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.10"
+    Task = "Ensure GDM is removed or login is configured"
+    Test = {
+        $result = rpm -q gdm
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+### Chapter 2 - Services
+
+[AuditTest] @{
+    Id = "2.1.1"
+    Task = "Ensure xinetd is not installed"
+    Test = {
+        $result = rpm -q xinetd
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.1.1"
+    Task = "Ensure time synchronization is in use"
+    Test = {
+        $result = rpm -q chrony
+        if($result -match "chrony-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.1.2"
+    Task = "Ensure systemd-timesyncd is configured"
+    Test = {
+        $result = systemctl is-enabled systemd-timesyncd.service
+        if($result -match "enabled"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.1.3"
+    Task = "Ensure chrony is configured"
+    Test = {
+        $result1 = grep -E "^(server|pool)" /etc/chrony.conf
+        $result2 = grep ^OPTIONS /etc/sysconfig/chronyd
+        if($result1 -match "server " -and $result2 -match "-u chrony") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "Ensure X11 Server components are not installed"
+    Test = {
+        $result = rpm -qa xorg-x11-server*
+        if($result -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "Ensure CUPS is not installed"
+    Test = {
+        $result = rpm -q cups
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "Ensure DHCP Server is not installed"
+    Test = {
+        $result = rpm -q dhcp
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "Ensure LDAP server is not installed"
+    Test = {
+        $result = rpm -q openldap2
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.7"
+    Task = "Ensure nfs-utils is not installed or the nfs-server service is masked"
+    Test = {
+        $result1 = rpm -q nfs-utils
+        $result2 = rpm -q nfs-kernel-server
+        if($result1 -match "not installed" -and $result2 -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.8"
+    Task = "Ensure rpcbind is not installed or the rpcbind services are masked"
+    Test = {
+        $result = rpm -q rpcbind
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.9"
+    Task = "Ensure DNS Server is not installed"
+    Test = {
+        $result = rpm -q bind
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.10"
+    Task = "Ensure FTP Server is not installed"
+    Test = {
+        $result = rpm -q vsftpd
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.11"
+    Task = "Ensure HTTP Server is not installed"
+    Test = {
+        $result = rpm -q apache2
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.12"
+    Task = "Ensure HTTP Server is not installed"
+    Test = {
+        $result = rpm -q dovecot
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.13"
+    Task = "Ensure Samba is not installed"
+    Test = {
+        $result = rpm -q samba
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.14"
+    Task = "Ensure HTTP Proxy Server is not installed"
+    Test = {
+        $result = rpm -q squid
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.15"
+    Task = "Ensure net-snmp is not installed"
+    Test = {
+        $result = rpm -q net-snmp
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.16"
+    Task = "Ensure mail transfer agent is configured for local-only mode"
+    Test = {
+        $result = ss -lntu | grep -E ':25\s' | grep -E -v '\s(127.0.0.1|\[?::1\]?):25\s'
+        if($result -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.17"
+    Task = "Ensure rsync is not installed or the rsyncd service is masked"
+    Test = {
+        $result = rpm -q rsync
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.18"
+    Task = "Ensure NIS server is not installed"
+    Test = {
+        $result = rpm -q ypserv
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.19"
+    Task = "Ensure telnet-server is not installed"
+    Test = {
+        $result = rpm -q telnet-server
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.1"
+    Task = "Ensure NIS Client is not installed"
+    Test = {
+        $result = rpm -q ypbind
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.2"
+    Task = "Ensure rsh client is not installed"
+    Test = {
+        $result = rpm -q rsh
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.3"
+    Task = "Ensure talk client is not installed"
+    Test = {
+        $result = rpm -q talk
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.4"
+    Task = "Ensure telnet client is not installed"
+    Test = {
+        $result = rpm -q telnet
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.5"
+    Task = "Ensure LDAP client is not installed"
+    Test = {
+        $result = rpm -q openldap2-clients
+        if($result -match "not installed"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.4"
+    Task = "Ensure nonessential services are removed or masked"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+## Chapter 3 - Network Configuration
+
+# sysctl wird ignoriert
+[AuditTest] @{
+    Id = "3.1.1"
+    Task = "Disable IPv6"
+    Test = {
+        if ($IPv6Status -match "disable") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.1.2"
+    Task = "Ensure wireless interfaces are disabled"
+    Test = {
+        $result = ip link show up
+        if($result -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.2.1"
+    Task = "Ensure IP forwarding is disabled"
+    Test = {
+        if ($IPv6Status -match "disable") {
+            $result1 = sysctl net.ipv4.ip_forward
+            $result2 = grep -E -s "^\s*net\.ipv4\.ip_forward\s*=\s*1" /etc/sysctl.conf /etc/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /run/sysctl.d/*.conf
+            if($result1 -match "net.ipv4.ip_forward = 0" -and $result2 -eq $null){
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        } else {
+            $result1 = sysctl net.ipv4.ip_forward
+            $result2 = grep -E -s "^\s*net\.ipv4\.ip_forward\s*=\s*1" /etc/sysctl.conf /etc/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /run/sysctl.d/*.conf
+            $result3 = sysctl net.ipv6.conf.all.forwarding
+            $result4 = grep -E -s "^\s*net\.ipv6\.conf\.all\.forwarding\s*=\s*1" /etc/sysctl.conf /etc/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /run/sysctl.d/*.conf
+            if($result1 -match "net.ipv4.ip_forward = 0" -and $result2 -eq $null -and $result3 -match "net.ipv6.conf.all.forwarding = 0" -and $result4 -eq $null){
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        }
+        
+    }
+}
+
+[AuditTest] @{
+    Id = "3.2.2"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $result1 = sysctl net.ipv4.conf.all.send_redirects
+        $result2 = sysctl net.ipv4.conf.default.send_redirects
+        $result3 = grep "net\.ipv4\.conf\.all\.send_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        $result4 = grep "net\.ipv4\.conf\.default\.send_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.conf.all.send_redirects = 0" -and $result2 -match "net.ipv4.conf.default.send_redirects = 0" -and $result3 -match "net.ipv4.conf.all.send_redirects = 0" -and $result4 -match "net.ipv4.conf.default.send_redirects= 0"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.1"
+    Task = "Ensure source routed packets are not accepted"
+    Test = {
+        if ($IPv6Status -match "disable") {
+            $result1 = sysctl net.ipv4.conf.all.accept_source_route
+            $result2 = sysctl net.ipv4.conf.default.accept_source_route
+            $result3 = grep "net\.ipv4\.conf\.all\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+            $result4 = grep "net\.ipv4\.conf\.default\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+            if($result1 -match "net.ipv4.conf.all.accept_source_route = 0" -and $result2 -match "net.ipv4.conf.default.accept_source_route = 0" -and $result3 -match "net.ipv4.conf.all.accept_source_route= 0" -and $result4 -match "net.ipv4.conf.default.accept_source_route= 0"){
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        } else {
+            $result1 = sysctl net.ipv4.conf.all.accept_source_route
+            $result2 = sysctl net.ipv4.conf.default.accept_source_route
+            $result3 = grep "net\.ipv4\.conf\.all\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+            $result4 = grep "net\.ipv4\.conf\.default\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+            $result5 = sysctl net.ipv6.conf.all.accept_source_route
+            $result6 = sysctl net.ipv6.conf.default.accept_source_route
+            $result7 = grep "net\.ipv6\.conf\.all\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+            $result8 = grep "net\.ipv6\.conf\.default\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+            if($result1 -match "net.ipv4.conf.all.accept_source_route = 0" -and $result2 -match "net.ipv4.conf.default.accept_source_route = 0" -and $result3 -match "net.ipv4.conf.all.accept_source_route= 0" -and $result4 -match "net.ipv4.conf.default.accept_source_route= 0" -and $result5 -match "net.ipv6.conf.all.accept_source_route = 0" -and $result6 -match "net.ipv6.conf.default.accept_source_route = 0" -and $result7 -match "net.ipv4.conf.all.accept_source_route= 0" -and $result8 -match "net.ipv6.conf.default.accept_source_route= 0"){
+                return $retCompliant
+            } else {
+                return $retNonCompliant
+            }
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.2"
+    Task = "Ensure ICMP redirects are not accepted"
+    Test = {
+        $result1 = sysctl net.ipv4.conf.all.accept_redirects
+        $result2 = sysctl net.ipv4.conf.default.accept_redirects
+        $result3 = grep "net\.ipv4\.conf\.all\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        $result4 = grep "net\.ipv4\.conf\.default\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.conf.all.accept_redirects = 0" -and $result2 -match "net.ipv4.conf.default.accept_redirects = 0" -and $result3 -match "net.ipv4.conf.all.accept_redirects= 0" -and $result4 -match "net.ipv4.conf.default.accept_redirects= 0"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.3"
+    Task = "Ensure secure ICMP redirects are not accepted"
+    Test = {
+        $result1 = sysctl net.ipv4.conf.all.secure_redirects
+        $result2 = sysctl net.ipv4.conf.default.accept_redirects
+        $result3 = grep "net\.ipv4\.conf\.all\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        $result4 = grep "net\.ipv4\.conf\.default\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.conf.all.accept_redirects = 0" -and $result2 -match "net.ipv4.conf.default.accept_redirects = 0" -and $result3 -match "net.ipv4.conf.all.accept_redirects= 0" -and $result4 -match "net.ipv4.conf.default.accept_redirects= 0"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.4"
+    Task = "Ensure suspicious packets are logged"
+    Test = {
+        $result1 = sysctl net.ipv4.conf.all.log_martians
+        $result2 = sysctl net.ipv4.conf.default.log_martians
+        $result3 = grep "net\.ipv4\.conf\.all\.log_martians" /etc/sysctl.conf /etc/sysctl.d/*
+        $result4 = grep "net\.ipv4\.conf\.default\.log_martians" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.conf.all.log_martians = 1" -and $result2 -match "net.ipv4.conf.default.log_martians = 1" -and $result3 -match "net.ipv4.conf.all.log_martians = 1" -and $result4 -match "net.ipv4.conf.default.log_martians = 1"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.5"
+    Task = "Ensure broadcast ICMP requests are ignored"
+    Test = {
+        $result1 = sysctl net.ipv4.icmp_echo_ignore_broadcasts
+        $result2 = grep "net\.ipv4\.icmp_echo_ignore_broadcasts" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.icmp_echo_ignore_broadcasts = 1" -and $result2 -match "net.ipv4.icmp_echo_ignore_broadcasts = 1"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.6"
+    Task = "Ensure bogus ICMP responses are ignored"
+    Test = {
+        $result1 = sysctl net.ipv4.icmp_ignore_bogus_error_responses
+        $result2 = grep "net.ipv4.icmp_ignore_bogus_error_responses" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.icmp_ignore_bogus_error_responses = 1" -and $result2 -match "net.ipv4.icmp_ignore_bogus_error_responses = 1"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.7"
+    Task = "Ensure Reverse Path Filtering is enabled"
+    Test = {
+        $result1 = sysctl net.ipv4.conf.all.rp_filter
+        $result2 = sysctl net.ipv4.conf.default.rp_filter
+        $result3 = grep "net\.ipv4\.conf\.all\.rp_filter" /etc/sysctl.conf /etc/sysctl.d/*
+        $result4 = grep "net\.ipv4\.conf\.default\.rp_filter" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.conf.all.rp_filter = 1" -and $result2 -match "net.ipv4.conf.default.rp_filter = 1" -and $result3 -match "net.ipv4.conf.all.rp_filter = 1" -and $result4 -match "net.ipv4.conf.default.rp_filter = 1"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.8"
+    Task = "Ensure TCP SYN Cookies is enabled"
+    Test = {
+        $result1 = sysctl net.ipv4.tcp_syncookies
+        $result2 = grep "net\.ipv4\.tcp_syncookies" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv4.tcp_syncookies = 1" -and $result2 -match "net.ipv4.tcp_syncookies = 1"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.9"
+    Task = "Ensure IPv6 router advertisements are not accepted"
+    Test = {
+        if ($IPv6Status -match "disabled") {
+            return $retCompliantIPv6Disabled
+        }
+        $result1 = sysctl net.ipv6.conf.all.accept_ra
+        $result2 = sysctl net.ipv6.conf.default.accept_ra
+        $result3 = grep "net\.ipv6\.conf\.all\.accept_ra" /etc/sysctl.conf /etc/sysctl.d/*
+        $result4 = grep "net\.ipv6\.conf\.default\.accept_ra" /etc/sysctl.conf /etc/sysctl.d/*
+        if($result1 -match "net.ipv6.conf.all.accept_ra = 0" -and $result2 -match "net.ipv6.conf.default.accept_ra = 0" -and $result3 -match "net.ipv6.conf.all.accept_ra = 0" -and $result4 -match "net.ipv6.conf.default.accept_ra = 0"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.1"
+    Task = "Ensure TCP SYN Cookies is enabled"
+    Test = {
+        $result1 = modprobe -n -v dccp
+        $result2 = lsmod | grep dccp
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.4.2"
+    Task = "Ensure SCTP is disabled"
+    Test = {
+        $result1 = modprobe -n -v sctp
+        $result2 = lsmod | grep sctp
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+### Chapter 3.5.1.X firewalld
+if( ($FirewallStatus -eq 0) -or ($FirewallStatus -eq 1) ){
+[AuditTest] @{
+    Id = "3.5.1.1"
+    Task = "Ensure FirewallD is installed"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result = rpm -q firewalld iptables
+        if($result -match "firewalld-" -and $result -match "iptables-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.1.2"
+    Task = "Ensure nftables is not installed or stopped and masked"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result1 = rpm -q nftables
+        $result21 = systemctl status nftables | grep "active (running)"
+        $result22 = systemctl is-enabled nftables
+        if($result1 -match "not installed" -or (!($result21 -match "active (running)") -and !($result22 -match "enabled"))){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.1.3"
+    Task = "Ensure firewalld service is enabled and running"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result1 = systemctl is-enabled firewalld
+        $result2 = firewall-cmd --state
+        if($result1 -match "enabled" -and $result2 -match "running"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.1.4"
+    Task = "Ensure default zone is set"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result = firewall-cmd --get-default-zone
+        if($result -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.1.5"
+    Task = "Ensure network interfaces are assigned to appropriate zone"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.1.6"
+    Task = "Ensure unnecessary services and ports are not accepted"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        return $retNonCompliantManualReviewRequired
+    }
+}
+}
+
+### Chapter 3.5.2.X nftables
+if( ($FirewallStatus -eq 0) -or ($FirewallStatus -eq 2) ){
+[AuditTest] @{
+    Id = "3.5.2.1"
+    Task = "Ensure nftables is installed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result = rpm -q nftables
+        if($result -match "nftables-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.2"
+    Task = "Ensure firewalld is not installed or stopped and masked"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result1 = rpm -q firewalld
+        $result21 = systemctl status firewalld | grep "Active: " | grep -v "active (running) "
+        $result22 = systemctl is-enabled firewalld
+        if($result1 -match "not installed" -or ($result21 -eq $null -and $result22 -match "masked")){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.3"
+    Task = "Ensure iptables are flushed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.4"
+    Task = "Ensure a table exists"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result = nft list tables
+        if($result -match "table inet filter") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.5"
+    Task = "Ensure base chain exist"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result1 = nft list ruleset | grep 'hook input'
+        $result2 = nft list ruleset | grep 'hook forward'
+        $result3 = nft list ruleset | grep 'hook output'
+        if($result1 -match "type filter hook input priority 0;" -and $result2 -match "type filter hook forward priority 0;" -and $result3 -match "type filter hook output priority 0;") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.6"
+    Task = "Ensure loopback traffic is configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result1 = nft list ruleset | awk '/hook input/,/}/' | grep 'iif "lo" accept'
+        $result2 = nft list ruleset | awk '/hook input/,/}/' | grep 'ip saddr'
+        if($result1 -match "iif ""lo"" accept" -and $result2 -match "ip saddr 127.0.0.0/8 counter packets 0 bytes 0 drop") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.7"
+    Task = "Ensure outbound and established connections are configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.8"
+    Task = "Ensure default deny firewall policy"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result1 = nft list ruleset | grep 'hook input'
+        $result2 = nft list ruleset | grep 'hook forward'
+        $result3 = nft list ruleset | grep 'hook output'
+        if($result1 -match "type filter hook input priority 0; policy drop;" -and $result2 -match "type filter hook forward priority 0; policy drop;" -and $result3 -match "type filter hook output priority 0; policy drop;") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.9"
+    Task = "Ensure nftables service is enabled"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $result = systemctl is-enabled nftables
+        if($result -match "enabled") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.2.10"
+    Task = "Ensure nftables rules are permanent"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $retNonCompliantManualReviewRequired
+    }
+}
+}
+
+### Chapter 3.5.3.X iptables
+if( ($FirewallStatus -eq 0) -or ($FirewallStatus -eq 3) ){
+[AuditTest] @{
+    Id = "3.5.3.1.1"
+    Task = "Ensure iptables package is installed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        $result = rpm -q iptables
+        if($result -match "iptables-") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.1.2"
+    Task = "Ensure nftables is not installed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        $result = rpm -q nftables
+        if($result -match "not installed") {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.1.3"
+    Task = "Ensure firewalld is not installed or stopped and masked"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        $result1 = rpm -q firewalld
+        $result21 = systemctl status firewalld | grep "Active: " | grep -v "active (running) "
+        $result22 = systemctl is-enabled firewalld
+        if($result1 -match "not installed" -or ($result21 -eq $null -and $result22 -match "masked")){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.2.1"
+    Task = "Ensure default deny firewall policy"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        $output = iptables -L
+        $test11 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $result11 = $?
+        $test12 = $output -match "REJECT" | grep "Chain INPUT (policy REJECT)"
+        $result12 = $?
+        $test21 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $result21 = $?
+        $test22 = $output -match "REJECT" | grep "Chain FORWARD (policy REJECT)"
+        $result22 = $?
+        $test31 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        $result31 = $?
+        $test32 = $output -match "REJECT" | grep "Chain OUTPUT (policy REJECT)"
+        $result32 = $?
+        if(($result11 -match "True" -or $result12 -match "True") -and ($result21 -match "True" -or $result22 -match "True") -and ($result31 -match "True" -or $result32 -match "True")){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.2.2"
+    Task = "Ensure iptables loopback traffic is configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        $test1 = iptables -L INPUT -v -n | grep "Chain\s*INPUT\s*(policy\s*DROP"
+        $test2 = iptables -L OUTPUT -v -n | grep "Chain\s*OUTPUT\s*(policy\s*DROP"
+        if($test1 -ne $null -and $test2 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.2.3"
+    Task = "Ensure outbound and established connections are configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.2.4"
+    Task = "Ensure firewall rules exist for all open ports"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.3.1"
+    Task = "Ensure IPv6 default deny firewall policy"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($IPv6Status -match "disabled") {
+            return $retCompliantIPv6Disabled
+        }
+        $output = ip6tables -L
+        $test11 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $result11 = $?
+        $test12 = $output -match "REJECT" | grep "Chain INPUT (policy REJECT)"
+        $result12 = $?
+        $test21 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $result21 = $?
+        $test22 = $output -match "REJECT" | grep "Chain FORWARD (policy REJECT)"
+        $result22 = $?
+        $test31 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        $result31 = $?
+        $test32 = $output -match "REJECT" | grep "Chain OUTPUT (policy REJECT)"
+        $result32 = $?
+        if(($result11 -match "True" -or $result12 -match "True") -and ($result21 -match "True" -or $result22 -match "True") -and ($result31 -match "True" -or $result32 -match "True")){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.3.2"
+    Task = "Ensure IPv6 loopback traffic is configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($IPv6Status -match "disabled") {
+            return $retCompliantIPv6Disabled
+        }
+        $output1 = ip6tables -L INPUT -v -n
+        $test1 = $output1 | grep "ACCEPT\s*all\s*lo\s**\s*::/0\s*::/0"
+        $test2 = $output1 | grep "DROP\s*all\s**\s**\s*::1\s*::/0"
+        $output2 = ip6tables -L OUTPUT -v -n
+        $test3 = $output2 | grep "ACCEPT\s*all\s*lo\s**\s*::/0\s*::/0"
+        if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.3.3"
+    Task = "Ensure IPv6 outbound and established connections are configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($IPv6Status -match "disabled") {
+            return $retCompliantIPv6Disabled
+        }
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "3.5.3.3.4"
+    Task = "Ensure IPv6 firewall rules exist for all open ports"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW2
+        }
+        if ($IPv6Status -match "disabled") {
+            return $retCompliantIPv6Disabled
+        }
+        return $retNonCompliantManualReviewRequired
+    }
+}
+}
+
+## Chapter 4 Logging and Auditing
+
+[AuditTest] @{
+    Id = "4.1.1.1"
+    Task = "Ensure auditd is installed"
+    Test = {
+        $test = rpm -q audit
+        if($test -match "audit-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.1.2"
+    Task = "Ensure auditd service is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled auditd
+        $test2 = systemctl status auditd | grep 'Active: active (running) '
+        if($test1 -match "enabled" -and $test2 -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.1.3"
+    Task = "Ensure auditing for processes that start prior to auditd is enabled"
+    Test = {
+        $test = grep "^\s*linux" /boot/grub2/grub.cfg | grep -v "audit=1"
+        if($test -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.2.1"
+    Task = "Ensure audit log storage size is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.2.2"
+    Task = "Ensure audit logs are not automatically deleted"
+    Test = {
+        $test = grep max_log_file_action /etc/audit/auditd.conf
+        if($test -match "max_log_file_action = keep_logs"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.2.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $test1 = grep space_left_action /etc/audit/auditd.conf
+        $test2 = grep action_mail_acct /etc/audit/auditd.conf
+        $test3 = grep admin_space_left_action /etc/audit/auditd.conf
+        if($test1 -match "space_left_action = email" -and $test2 -match "action_mail_acct = root" -and $test3 -match "admin_space_left_action = halt"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.2.4"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $test1 = grep time-change /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep time-change
+        if($test1 -match "/etc/audit/rules.d/time_change.rules:-a always,exit -F arch=b64 -S adjtimex -S settimeofday -k time-change" -and
+        $test1 -match "/etc/audit/rules.d/time_change.rules:-a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change" -and
+        $test1 -match "/etc/audit/rules.d/time_change.rules:-a always,exit -F arch=b64 -S clock_settime -k time-change" -and
+        $test1 -match "/etc/audit/rules.d/time_change.rules:-a always,exit -F arch=b32 -S clock_settime -k time-change" -and
+        $test1 -match "/etc/audit/rules.d/time_change.rules:-w /etc/localtime -p wa -k time-change" -and
+        $test2 -match "-a always,exit -F arch=b64 -S adjtimex,settimeofday -F key=time-change" -and
+        $test2 -match "-a always,exit -F arch=b32 -S stime,settimeofday,adjtimex -F key=time-change" -and
+        $test2 -match "-a always,exit -F arch=b64 -S clock_settime -F key=time-change" -and
+        $test2 -match "-a always,exit -F arch=b32 -S clock_settime -F key=time-change" -and
+        $test2 -match "-w /etc/localtime -p wa -k time-change"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.4"
+    Task = "Ensure events that modify user/group information are collected"
+    Test = {
+        $test1 = grep identity /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep identity
+        if($test1 -match "/etc/audit/rules.d/identity.rules:-w /etc/group -p wa -k identity" -and
+        $test1 -match "/etc/audit/rules.d/identity.rules:-w /etc/passwd -p wa -k identity" -and
+        $test1 -match "/etc/audit/rules.d/identity.rules:-w /etc/shadow -p wa -k identity" -and
+        $test1 -match "/etc/audit/rules.d/identity.rules:-w /etc/security/opasswd -p wa -k identity" -and
+        $test2 -match "-w /etc/group -p wa -k identity" -and
+        $test2 -match "-w /etc/passwd -p wa -k identity" -and
+        $test2 -match "-w /etc/shadow -p wa -k identity" -and
+        $test2 -match "-w /etc/security/opasswd -p wa -k identity"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.5"
+    Task = "Ensure events that modify the system's network environment are collected"
+    Test = {
+        $test1 = grep system-locale /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep system-locale
+        if($test1 -match "/etc/audit/rules.d/system-locale.rules:-a always,exit -F arch=b64 -S sethostname -S setdomainname -k system-locale" -and
+        $test1 -match "/etc/audit/rules.d/system-locale.rules:-a always,exit -F arch=b32 -S sethostname -S setdomainname -k system-locale" -and
+        $test1 -match "/etc/audit/rules.d/system-locale.rules:-w /etc/issue -p wa -k system-locale" -and
+        $test1 -match "/etc/audit/rules.d/system-locale.rules:-w /etc/issue.net -p wa -k system-locale" -and
+        $test1 -match "/etc/audit/rules.d/system-locale.rules:-w /etc/hosts -p wa -k system-locale" -and
+        $test1 -match "/etc/audit/rules.d/system-locale.rules:-w /etc/sysconfig/network -p wa -k system-locale" -and
+        $test2 -match "-a always,exit -F arch=b64 -S sethostname,setdomainname -F key=system-locale" -and
+        $test2 -match "-a always,exit -F arch=b32 -S sethostname,setdomainname -F key=system-locale" -and
+        $test2 -match "-w /etc/issue -p wa -k system-locale" -and
+        $test2 -match "-w /etc/issue.net -p wa -k system-locale" -and
+        $test2 -match "-w /etc/hosts -p wa -k system-locale" -and
+        $test2 -match "-w /etc/sysconfig/network -p wa -k system-locale"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.6"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        $test1 = grep MAC-policy /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep MAC-policy
+        if($test1 -match "/etc/audit/rules.d/MAC_policy.rules:-w /etc/selinux/ -p wa -k MAC-policy" -and $test1 -match "/etc/audit/rules.d/MAC_policy.rules:-w /usr/share/selinux/ -p wa -k MAC-policy" -and $test2 -match "-w /etc/selinux/ -p wa -k MAC-policy" -and $test2 -match "-w /usr/share/selinux/ -p wa -k MAC-policy"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.7"
+    Task = "Ensure login and logout events are collected"
+    Test = {
+        $test1 = grep logins /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep logins
+        if($test1 -match "/etc/audit/rules.d/logins.rules:-w /var/log/faillog -p wa -k logins" -and
+        $test1 -match "/etc/audit/rules.d/logins.rules:-w /var/log/lastlog -p wa -k logins" -and
+        $test1 -match "/etc/audit/rules.d/logins.rules:-w /var/log/tallylog -p wa -k logins" -and
+        $test2 -match "-w /var/log/faillog -p wa -k logins" -and
+        $test2 -match "-w /var/log/lastlog -p wa -k logins" -and
+        $test2 -match "-w /var/log/tallylog -p wa -k logins"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.8"
+    Task = "Ensure session initiation information is collected"
+    Test = {
+        $test1 = grep -E '(session|logins)' /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep -E '(session|logins)'
+        if($test1 -match "/etc/audit/rules.d/session.rules:-w /var/run/utmp -p wa -k session" -and
+        $test1 -match "/etc/audit/rules.d/session.rules:-w /var/log/wtmp -p wa -k logins" -and
+        $test1 -match "/etc/audit/rules.d/session.rules:-w /var/log/btmp -p wa -k logins" -and
+        $test2 -match "-w /var/run/utmp -p wa -k session" -and
+        $test2 -match "-w /var/log/wtmp -p wa -k logins" -and
+        $test2 -match "-w /var/log/btmp -p wa -k logins"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.9"
+    Task = "Ensure discretionary access control permission modification events are collected"
+    Test = {
+        $test1 = grep perm_mod /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep perm_mod
+        if($test1 -match "/etc/audit/rules.d/perm_mod.rules:-a always,exit -F arch=b64 -S chmod -S fchmod -S fchmodat -F auid>=1000 -F auid!=4294967295 -k perm_mod" -and
+        $test1 -match "/etc/audit/rules.d/perm_mod.rules:-a always,exit -F arch=b32 -S chmod -S fchmod -S fchmodat -F auid>=1000 -F auid!=4294967295 -k perm_mod" -and
+        $test1 -match "/etc/audit/rules.d/perm_mod.rules:-a always,exit -F arch=b64 -S chown -S fchown -S fchownat -S lchown -F auid>=1000 -F auid!=4294967295 -k perm_mod" -and
+        $test1 -match "/etc/audit/rules.d/perm_mod.rules:-a always,exit -F arch=b32 -S chown -S fchown -S fchownat -S lchown -F auid>=1000 -F auid!=4294967295 -k perm_mod" -and
+        $test1 -match "/etc/audit/rules.d/perm_mod.rules:-a always,exit -F arch=b64 -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=1000 -F auid!=4294967295 -k perm_mod" -and
+        $test1 -match "/etc/audit/rules.d/perm_mod.rules:-a always,exit -F arch=b32 -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=1000 -F auid!=4294967295 -k perm_mod" -and
+        $test2 -match "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and
+        $test2 -match "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and
+        $test2 -match "-a always,exit -F arch=b64 -S chown,fchown,lchown,fchownat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and
+        $test2 -match "-a always,exit -F arch=b32 -S lchown,fchown,chown,fchownat -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and
+        $test2 -match "-a always,exit -F arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=-1 -F key=perm_mod" -and
+        $test2 -match "-a always,exit -F arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=-1 -F key=perm_mod"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.10"
+    Task = "Ensure discretionary access control permission modification events are collected"
+    Test = {
+        $test1 = grep access /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep access
+        if($test1 -match "/etc/audit/rules.d/access.rules:-a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=4294967295 -k access" -and
+        $test1 -match "/etc/audit/rules.d/access.rules:-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=4294967295 -k access" -and
+        $test1 -match "/etc/audit/rules.d/access.rules:-a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access" -and
+        $test1 -match "/etc/audit/rules.d/access.rules:-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access" -and
+        $test2 -match "/etc/audit/rules.d/access.rules:-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access" -and
+        $test2 -match "-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -F key=access" -and
+        $test2 -match "-a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -F key=access" -and
+        $test2 -match "-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -F key=access"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.11"
+    Task = "Ensure use of privileged commands is collected"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.12"
+    Task = "Ensure successful file system mounts are collected"
+    Test = {
+        $test1 = grep mounts /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep mounts
+        if($test1 -match "/etc/audit/rules.d/mounts.rules:-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=4294967295 -k mounts" -and
+        $test1 -match "/etc/audit/rules.d/mounts.rules:-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=4294967295 -k mounts" -and
+        $test2 -match "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=-1 -F key=mounts" -and
+        $test2 -match "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=-1 -F key=mounts"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.13"
+    Task = "Ensure file deletion events by users are collected"
+    Test = {
+        $test1 = grep delete /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep delete
+        if($test1 -match "/etc/audit/rules.d/deletion.rules:-a always,exit -F arch=b64 -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=4294967295 -k delete" -and
+        $test1 -match "/etc/audit/rules.d/deletion.rules:-a always,exit -F arch=b32 -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=4294967295 -k delete" -and
+        $test2 -match "-a always,exit -F arch=b64 -S rename,unlink,unlinkat,renameat -F auid>=1000 -F auid!=-1 -F key=delete" -and
+        $test2 -match "-a always,exit -F arch=b32 -S unlink,rename,unlinkat,renameat -F auid>=1000 -F auid!=-1 -F key=delete"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.14"
+    Task = "Ensure changes to system administration scope (sudoers) is collected"
+    Test = {
+        $test1 = grep scope /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep scope
+        if($test1 -match "/etc/audit/rules.d/scope.rules:-w /etc/sudoers -p wa -k scope" -and
+        $test1 -match "/etc/audit/rules.d/scope.rules:-w /etc/sudoers.d/ -p wa -k scope" -and
+        $test2 -match "-w /etc/sudoers -p wa -k scope" -and
+        $test2 -match "-w /etc/sudoers.d -p wa -k scope"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.15"
+    Task = "Ensure system administrator actions (sudolog) are collected"
+    Test = {
+        $test1 = grep -E "^\s*-w\s+$(grep -r logfile /etc/sudoers* | sed -e 's/.*logfile=//;s/,? .*//')\s+-p\s+wa\s+-k\s+actions" /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep actions
+        $test3 = echo "-w $(grep -r logfile /etc/sudoers* | sed -e 's/.*logfile=//;s/,? .*//') -p wa -k actions"
+        if($test1 -match $test3 -and $test2 -match $test3){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.16"
+    Task = "Ensure kernel module loading and unloading is collected"
+    Test = {
+        $test1 = grep modules /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep modules
+        if($test1 -match "/etc/audit/rules.d/modules.rules:-w /sbin/insmod -p x -k modules" -and
+        $test1 -match "/etc/audit/rules.d/modules.rules:-w /sbin/rmmod -p x -k modules" -and
+        $test1 -match "/etc/audit/rules.d/modules.rules:-w /sbin/modprobe -p x -k modules" -and
+        $test1 -match "/etc/audit/rules.d/modules.rules:-a always,exit -F arch=b64 -S init_module -S delete_module -k modules" -and
+        $test2 -match "-w /sbin/insmod -p x -k modules" -and
+        $test2 -match "-w /sbin/rmmod -p x -k modules" -and
+        $test2 -match "-w /sbin/modprobe -p x -k modules" -and
+        $test2 -match "-a always,exit -F arch=b64 -S init_module,delete_module -F key=modules"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.17"
+    Task = "Ensure the audit configuration is immutable"
+    Test = {
+        $test = grep "^\s*[^#]" /etc/audit/rules.d/*.rules | tail -1
+        if($test -match "-e 2"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.1"
+    Task = "Ensure rsyslog is installed"
+    Test = {
+        $test = rpm -q rsyslog
+        if($test -match "rsyslog-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.2"
+    Task = "Ensure rsyslog Service is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled rsyslog
+        $test2 = systemctl status rsyslog | grep 'active (running) '
+        if($test1 -match "enabled" -and $test2 -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.3"
+    Task = "Ensure rsyslog default file permissions configured"
+    Test = {
+        $test = grep ^\$FileCreateMode /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if($test -match "FileCreateMode"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.4"
+    Task = "Ensure logging is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.5"
+    Task = "Ensure rsyslog is configured to send logs to a remote log host"
+    Test = {
+        $test = grep "^*.*[^I][^I]*@" /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if($test -ne $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.1.6"
+    Task = "Ensure remote rsyslog messages are only accepted on designated log hosts"
+    Test = {
+        $test1 = grep '$ModLoad imtcp' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        $test2 = grep '$InputTCPServerRun' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if($test1 -match "ModLoad imtcp" -and $test2 -match "InputTCPServerRun 514"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.1"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        $test = grep -E ^\s*ForwardToSyslog /etc/systemd/journald.conf
+        if($test -match "ForwardToSyslog=yes"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.2"
+    Task = "Ensure journald is configured to compress large log files"
+    Test = {
+        $test = grep -E ^\s*Compress /etc/systemd/journald.conf
+        if($test -match "Compress=yes"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.2.3"
+    Task = "Ensure journald is configured to write logfiles to persistent disk"
+    Test = {
+        $test = grep -E ^\s*Storage /etc/systemd/journald.conf
+        if($test -match "Storage=persistent"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.3"
+    Task = "Ensure permissions on all logfiles are configured"
+    Test = {
+        $test = find /var/log -type f -perm /g+wx,o+rwx -exec ls -l '{}' \;
+        if($test -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.2.4"
+    Task = "Ensure logrotate is configured"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.1"
+    Task = "Ensure cron daemon is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if($test1 -eq $null -and $test2 -match "active (running)"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $test = stat /etc/crontab
+        if($test -match "0600/-rw-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.3"
+    Task = "Ensure permissions on /etc/cron.hourly are configured"
+    Test = {
+        $test = stat /etc/cron.hourly/
+        if($test -match "0700/drwx"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $test = stat /etc/cron.daily
+        if($test -match "0700/drwx"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $test = stat /etc/cron.weekly
+        if($test -match "0700/drwx"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $test = stat /etc/cron.weekly
+        if($test -match "0700/drwx"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $test = stat /etc/cron.weekly
+        if($test -match "0700/drwx"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.8"
+    Task = "Ensure cron is restricted to authorized users"
+    Test = {
+        $test = stat /etc/cron.deny
+        if($test -match "cannot stat"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.1.9"
+    Task = "Ensure cron is restricted to authorized users"
+    Test = {
+        $test1 = stat /etc/at.deny
+        $test2 = stat /etc/at.allow
+        if($test1 -match "cannot stat" -and $test2 -match "0600/-rw-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.1"
+    Task = "Ensure permissions on /etc/ssh/sshd_config are configured"
+    Test = {
+        $test1 = stat /etc/ssh/sshd_config
+        if($test1 -match "0600/-rw-"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+### TODO ...
+[AuditTest] @{
+    Id = "5.2.2"
+    Task = "Ensure permissions on SSH private host key files are configured"
+    Test = {
+        return $retCompliant
+    }
+}
+
+### TODO...
+[AuditTest] @{
+    Id = "5.2.3"
+    Task = "Ensure permissions on SSH public host key files are configured"
+    Test = {
+        return $retCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.4"
+    Task = "Ensure SSH access is limited"
+    Test = {
+        $test = sshd -T | grep -E '^\s*(allow|deny)(users|groups)\s+\S+'
+        if($test -match "allowusers " -or $test -match "allowgroups " -or $test -match "denyusers " -or $test -match "denygroups "){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.5"
+    Task = "Ensure SSH LogLevel is appropriate"
+    Test = {
+        $test = sshd -T | grep loglevel
+        if($test -match "loglevel\s+VERBOSE" -or $test -match "loglevel\s+INFO"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.6"
+    Task = "Ensure SSH X11 forwarding is disabled"
+    Test = {
+        $test = sshd -T | grep -i x11forwarding
+        if($test -match "x11forwarding no"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+### TODO
+[AuditTest] @{
+    Id = "5.2.7"
+    Task = "Ensure SSH MaxAuthTries is set to 4 or less"
+    Test = {
+        $test = sshd -T | grep maxauthtries | grep maxauthtries | cut -d ' ' -f 2
+        if($test -le 4){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.8"
+    Task = "Ensure SSH IgnoreRhosts is enabled"
+    Test = {
+        $test = sshd -T | grep ignorerhosts
+        if($test -match "ignorehosts yes"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.9"
+    Task = "Ensure SSH HostbasedAuthentication is disabled"
+    Test = {
+        $test = sshd -T | grep hostbasedauthentication
+        if($test -match "hostbasedauthentication no"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.10"
+    Task = "Ensure SSH root login is disabled"
+    Test = {
+        $test = sshd -T | grep permitrootlogin
+        if($test -match "permitrootlogin no"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.11"
+    Task = "Ensure SSH PermitEmptyPasswords is disabled"
+    Test = {
+        $test = sshd -T | grep permitemptypasswords
+        if($test -match "permitemptypasswords no"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.12"
+    Task = "Ensure SSH PermitUserEnvironment is disabled"
+    Test = {
+        $test = sshd -T | grep permituserenvironment
+        if($test -match "permituserenvironment no"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.13"
+    Task = "Ensure only strong Ciphers are used"
+    Test = {
+        $test = sshd -T | grep ciphers
+        if($test -match "3des-cbc" -or $test -match "aes128-cbc" -or $test -match "aes192-cbc" -or $test -match "aes256-cbc"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.14"
+    Task = "Ensure only strong MAC algorithms are used"
+    Test = {
+        $test = sshd -T | grep -i "MACs"
+        if($test -match "hmac-md5" -or
+        $test -match "hmac-md5-96" -or
+        $test -match "hmac-ripemd160" -or
+        $test -match "hmac-sha1" -or
+        $test -match "hmac-sha1-96" -or
+        $test -match "umac-64@openssh.com" -or
+        $test -match "umac-128@openssh.com" -or
+        $test -match "hmac-md5-etm@openssh.com" -or
+        $test -match "hmac-md5-96-etm@openssh.com" -or
+        $test -match "hmac-ripemd160-etm@openssh.com" -or
+        $test -match "hmac-sha1-etm@openssh.com" -or
+        $test -match "hmac-sha1-96-etm@openssh.com" -or
+        $test -match "umac-64-etm@openssh.com" -or
+        $test -match "umac-128-etm@openssh.com"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.15"
+    Task = "Ensure only strong Key Exchange algorithms are used"
+    Test = {
+        $test = sshd -T | grep kexalgorithms
+        if($test -match "diffie-hellman-group1-sha1" -or
+        $test -match "diffie-hellman-group14-sha1" -or
+        $test -match "diffie-hellman-group-exchange-sha1"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.16"
+    Task = "Ensure SSH Idle Timeout Interval is configured"
+    Test = {
+        $test1 = sshd -T | grep clientaliveinterval | cut -d ' ' -f 2
+        $test2 = sshd -T | grep clientaliveinterval | cut -d ' ' -f 2
+        if($test1 -ge 1 -and $test1 -le 300 -and $test2 -ge 1 -and $test2 -le 3){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.17"
+    Task = "Ensure SSH LoginGraceTime is set to one minute or less"
+    Test = {
+        $test = sshd -T | grep logingracetime | cut -d ' ' -f 2
+        if($test -ge 1 -and $test1 -le 60){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+if (Test-Path -Path '/etc/issue.net') {
+[AuditTest] @{
+    Id = "5.2.18"
+    Task = "Ensure SSH warning banner is configured"
+    Test = {
+        $test = sshd -T | grep banner
+        if($test -match "banner /etc/issue.net"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+}
+
+[AuditTest] @{
+    Id = "5.2.19"
+    Task = "Ensure SSH PAM is enabled"
+    Test = {
+        $test = sshd -T | grep -i usepam
+        if($test -match "usepam yes"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.20"
+    Task = "Ensure SSH AllowTcpForwarding is disabled"
+    Test = {
+        $test = sshd -T | grep -i allowtcpforwarding
+        if($test -match "allowtcpforwarding no"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.21"
+    Task = "Ensure SSH MaxStartups is configured"
+    Test = {
+        $test = sshd -T | grep -i maxstartups
+        if($test -match "maxstartups 10:30:60"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.2.22"
+    Task = "Ensure SSH MaxSessions is limited"
+    Test = {
+        $test = sshd -T | grep -i maxsessions | cut -d ' ' -f 2
+        if($test -le 10){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+# unfertig; nochmal drüber gehen TODO
+[AuditTest] @{
+    Id = "5.3.1"
+    Task = "Ensure password creation requirements are configured"
+    Test = {
+        $test1 = grep -P '^\s*password\s+(requisite|required)\s+pam_cracklib.so\s+([^#]+\s+)*minlen=(1[4-9]|[1-9][0-9]+)\b' /etc/pam.d/common-password
+        $test2 = grep -P '^\s*password\s+(?:requisite|required)\s+pam_cracklib\.so\s+(?:[^#]+\s+)*(?:(?!\2|\3|\4))(dcredit=-[1-9]|ucredit=-[1-9]|ocredit=-[1-9]|lcredit=-[1-9])\s+(?:[^#]+\s+)*(?:(?!\1|\3|\4))(dcredit=-[1-9]|ucredit=-[1-9]|ocredit=-[1-9]|lcredit=-[1-9])\s+(?:[^#]+\s+)*(?:(?!\1|\2|\4))(dcredit=-[1-9]|ucredit=-[1-9]|ocredit=-[1-9]|lcredit=-[1-9])\s+(?:[^#]+\s+)*(?!\1|\2|\3)(dcredit=-[1-9]|ucredit=-[1-9]|ocredit=-[1-9]|lcredit=-[1-9])' /etc/pam.d/common-password
+        if($test2 -match "dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1" -and $test1 -match "minlen=14"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+# unfertig; nochmal drüber gehen TODO
+[AuditTest] @{
+    Id = "5.3.2"
+    Task = "Ensure lockout for failed password attempts is configured"
+    Test = {
+        $test = grep -E '^\s*auth\s+\S+\s+pam_(tally2|unix)\.so' /etc/pam.d/login
+        if($test -match "deny=5"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.3.3"
+    Task = "Ensure password reuse is limited"
+    Test = {
+        $test = grep -P '^\s*password\s+(requisite|required)\s+pam_pwhistory\.so\s+([^#]+\s+)*remember=([5-9]|[1-9][0-9]+)\b' /etc/pam.d/common-password | cut -d= -f2
+        if($test -ge 5){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.1.1"
+    Task = "Ensure password hashing algorithm is SHA-512"
+    Test = {
+        $test = grep -Ei '^\s*^\s*ENCRYPT_METHOD\s+SHA512' /etc/login.defs
+        if($test -match "SHA512"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.1.2"
+    Task = "Ensure password expiration is 365 days or less"
+    Test = {
+        $test1 = grep ^\s*PASS_MAX_DAYS /etc/login.defs | cut -f2
+        $test2_script = @'
+#!/bin/bash
+for line in $(grep -E ^[^:]+:[^\*] /etc/shadow | cut -d: -f5)
+do
+        if [ $line -gt 365 ]
+        then
+            echo "FAIL"
+        fi
+done
+'@
+        $test2 = bash -c $test2_script
+        if($test1 -gt 365 -or $test2 -match "FAIL"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.1.3"
+    Task = "Ensure minimum days between password changes is configured"
+    Test = {
+        $test1 = grep ^\s*PASS_MIN_DAYS /etc/login.defs | cut -f2
+        $test2_script = @'
+#!/bin/bash
+for line in $(grep -E ^[^:]+:[^\*] /etc/shadow | cut -d: -f4)
+do
+        if [ $line -lt 1 ]
+        then
+            echo "FAIL"
+        fi
+done
+'@
+        $test2 = bash -c $test2_script
+        if($test1 -lt 1 -or $test2 -match "FAIL"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.1.4"
+    Task = "Ensure password expiration warning days is 7 or more"
+    Test = {
+        $test1 = grep ^\s*PASS_WARN_AGE /etc/login.defs | cut -f2
+        $test2_script = @'
+#!/bin/bash
+for line in $(grep -E ^[^:]+:[^\*] /etc/shadow | cut -d: -f6)
+do
+        if [ $line -lt 7 ]
+        then
+            echo "FAIL"
+        fi
+done
+'@
+        $test2 = bash -c $test2_script
+        if($test1 -lt 7 -or $test2 -match "FAIL"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.1.5"
+    Task = "Ensure inactive password lock is 30 days or less"
+    Test = {
+        $test1 = useradd -D | grep INACTIVE | cut -d= -f2
+        $test2_script = @'
+#!/bin/bash
+for line in $(grep -E ^[^:]+:[^\*] /etc/shadow | cut -d: -f7)
+do
+        if [ $line -ge 30 ]
+        then
+            echo "FAIL"
+        fi
+done
+'@
+        $test2 = bash -c $test2_script
+        if($test1 -gt 30 -or $test1 -eq -1 -or $test2 -match "FAIL"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.1.6"
+    Task = "Ensure all users last password change date is in the past"
+    Test = {
+        $test_script = @'
+#!/bin/bash
+for usr in $(cut -d: -f1 /etc/shadow); do
+    [[ $(chage --list $usr | grep '^Last password change' | cut -d: -f2) > $(date) ]] && echo "$usr :$(chage --list $usr | grep '^Last password change' | cut -d: -f2)"; done
+'@
+        $test = bash -c $test_script
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.2"
+    Task = "Ensure system accounts are secured"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-5.4.2_1.sh"
+        $test1 = bash $script1
+        $script2 = $scriptPath + "CIS-SEL15-5.4.2_2.sh"
+        $test2 = bash $script2
+        if($test1 -eq $null -and $test2 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.3"
+    Task = "Ensure default group for the root account is GID 0"
+    Test = {
+        $test = grep "^root:" /etc/passwd | cut -f4
+        if($test -eq 0){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.4"
+    Task = "Ensure default user shell timeout is configured"
+    Test = {
+        $script = $scriptPath + "CIS-SEL15-5.4.4.sh"
+        $test1 = bash $script
+        $test2 = grep -PR '^\s*([^$#;]+\s+)*TMOUT=(9[0-9][1-9]|0+|[1-9]\d{3,})\b\s*(\S+\s*)*(\s+#.*)?$' /etc/profile* /etc/bashrc.bashrc*
+        if($test1 -match "configured in file: /etc/profile.d/" -and $test2 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.4.5"
+    Task = "Ensure default user umask is configured"
+    Test = {
+        $test1 = grep -RPi '(^|^[^#]*)\s*umask\s+([0-7][0-7][01][0-7]\b|[0-7][0-7][0-7][0-6]\b|[0-7][01][0-7]\b|[0-7][0-7][0-6]\b|(u=[rwx]{0,3},)?(g=[rwx]{0,3},)?o=[rwx]+\b|(u=[rwx]{1,3},)?g=[^rx]{1,3}(,o=[rwx]{0,3})?\b)' /etc/login.defs /etc/default/login /etc/profile* /etc/bash.bashrc*
+        $test2 = grep -REi '^\s*UMASK\s+\s*(0[0-7][2-7]7|[0-7][2-7]7|u=(r?|w?|x?)(r?|w?|x?)(r?|w?|x?),g=(r?x?|x?r?),o=)\b' /etc/login.defs /etc/default/login /etc/profile* /etc/bash.bashrc*
+        if(($test1 -eq $null -or $test1 -match "No such file or directory") -and $test2 -match "UMASK\s*027"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "5.5"
+    Task = "Ensure root login is restricted to system console"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+#TODO
+[AuditTest] @{
+    Id = "5.6"
+    Task = "Ensure access to the su command is restricted"
+    Test = {
+        $test1 = grep -RPi '(^|^[^#]*)\s*umask\s+([0-7][0-7][01][0-7]\b|[0-7][0-7][0-7][0-6]\b|[0-7][01][0-7]\b|[0-7][0-7][0-6]\b|(u=[rwx]{0,3},)?(g=[rwx]{0,3},)?o=[rwx]+\b|(u=[rwx]{1,3},)?g=[^rx]{1,3}(,o=[rwx]{0,3})?\b)' /etc/login.defs /etc/default/login /etc/profile* /etc/bash.bashrc*
+        $test2 = grep -REi '^\s*UMASK\s+\s*(0[0-7][2-7]7|[0-7][2-7]7|u=(r?|w?|x?)(r?|w?|x?)(r?|w?|x?),g=(r?x?|x?r?),o=)\b' /etc/login.defs /etc/default/login /etc/profile* /etc/bash.bashrc*
+        if(($test1 -eq $null -or $test1 -match "No such file or directory") -and $test2 -match "UMASK\s*027"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+### Chapter 6 - System Maintenance
+
+[AuditTest] @{
+    Id = "6.1.1"
+    Task = "Audit system file permissions"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.2"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat /etc/passwd
+        if($test1 -match "0644"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.3"
+    Task = "Ensure permissions on /etc/shadow are configured"
+    Test = {
+        $test1 = stat /etc/shadow
+        if($test1 -match "0640"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.4"
+    Task = "Ensure permissions on /etc/group are configured"
+    Test = {
+        $test1 = stat /etc/group
+        if($test1 -match "0644"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.5"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat /etc/passwd-
+        if($test1 -match "0644"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.6"
+    Task = "Ensure permissions on /etc/shadow- are configured"
+    Test = {
+        $test1 = stat /etc/shadow-
+        if($test1 -match "0640"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.7"
+    Task = "Ensure permissions on /etc/group- are configured"
+    Test = {
+        $test1 = stat /etc/group-
+        if($test1 -match "0644"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.8"
+    Task = "Ensure no world writable files exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        if($test1 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.9"
+    Task = "Ensure no unowned files or directories exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        if($test1 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.10"
+    Task = "Ensure no ungrouped files or directories exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -nogroup
+        if($test1 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.11"
+    Task = "Audit SUID executables"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "6.1.12"
+    Task = "Audit SGID executables"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.1"
+    Task = "Ensure accounts in /etc/passwd use shadowed passwords"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.1.sh"
+        $test1 = bash $script1
+        if($test1 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.2"
+    Task = "Ensure /etc/shadow password fields are not empty"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.2.sh"
+        $test1 = bash $script1
+        if($test1 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.3"
+    Task = "Ensure root is the only UID 0 account"
+    Test = {
+        $test1_script = @'
+#!/bin/bash
+awk -F: '($3 == 0) { print $1 }' /etc/passwd
+'@
+        $test1 = bash -c $test1_script
+        if($test1 -match "root"){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.4"
+    Task = "Ensure root PATH Integrity"
+    Test = {
+        $test_script = @'
+#!/bin/bash
+if echo "$PATH" | grep -q "::" ; then
+    echo "Empty Directory in PATH (::)"
+fi
+if echo "$PATH" | grep -q ":$" ; then
+    echo "Trailing : in PATH"
+fi
+for x in $(echo "$PATH" | tr ":" " ") ; do
+    if [ -d "$x" ] ; then
+        ls -ldH "$x" | awk '
+        $9 == "." {print "PATH contains current working directory (.)"}
+        $3 != "root" {print $9, "is not owned by root"}
+        substr($1,6,1) != "-" {print $9, "is group writable"}
+        substr($1,9,1) != "-" {print $9, "is world writable"}'
+    else
+        echo "$x is not a directory"
+    fi
+done
+'@
+        $test = bash -c $test_script
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.5"
+    Task = "Ensure all users' home directories exist"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.5.sh"
+        $test = bash $script1
+        if($test -match "does not exist"){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.6"
+    Task = "Ensure users' home directories permissions are 750 or more restrictive"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.6.sh"
+        $test = bash $script1
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.7"
+    Task = "Ensure users own their home directories"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.7.sh"
+        $test = bash $script1
+        if($test -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.8"
+    Task = "Ensure users' dot files are not group or world writable"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.8.sh"
+        $test = bash $script1
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.9"
+    Task = "Ensure no users have .forward files"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.9.sh"
+        $test = bash $script1
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.10"
+    Task = "Ensure no users have .netrc files"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.10.sh"
+        $test = bash $script1
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.11"
+    Task = "Ensure users' .netrc Files are not group or world accessible"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.11.sh"
+        $test = bash $script1
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.12"
+    Task = "Ensure no users have .rhosts files"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.12.sh"
+        $test = bash $script1
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.13"
+    Task = "Ensure all groups in /etc/passwd exist in /etc/group"
+    Test = {
+        $test_script = @'
+#!/bin/bash
+for i in $(cut -s -d: -f4 /etc/passwd | sort -u ); do
+    grep -q -P "^.*?:[^:]*:$i:" /etc/group
+    if [ $? -ne 0 ]; then
+        echo "Group $i is referenced by /etc/passwd but does not exist in /etc/group"
+    fi
+done
+'@
+        $test = bash -c $test_script
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.14"
+    Task = "Ensure no duplicate UIDs exist"
+    Test = {
+        $test_script = @'
+#!/bin/bash
+cut -f3 -d":" /etc/passwd | sort -n | uniq -c | while read x ; do
+    [ -z "$x" ] && break
+    set - $x
+    if (( $1 > 1 )); then
+        users=$(awk -F: '($3 == n) { print $1 }' n=$2 /etc/passwd | xargs)
+        echo "Duplicate UID ($2): $users"
+    fi
+done
+'@
+        $test = bash -c $test_script
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.15"
+    Task = "Ensure no duplicate GIDs exist"
+    Test = {
+        $test_script = @'
+#!/bin/bash
+cut -d: -f3 /etc/group | sort | uniq -d | while read x ; do
+    echo "Duplicate GID ($x) in /etc/group"
+done
+'@
+        $test = bash -c $test_script
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.16"
+    Task = "Ensure no duplicate user names exist"
+    Test = {
+        $test_script = @'
+#!/bin/bash
+cut -d: -f1 /etc/passwd | sort | uniq -d | while read x ; do
+    echo "Duplicate login name ${x} in /etc/passwd"
+done
+'@
+        $test = bash -c $test_script
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.17"
+    Task = "Ensure no duplicate group names exist"
+    Test = {
+        $test_script = @'
+#!/bin/bash
+cut -d: -f1 /etc/group | sort | uniq -d | while read x ; do
+    echo "Duplicate group name ${x} in /etc/group"
+done
+'@
+        $test = bash -c $test_script
+        if($test -ne $null){
+            return $retNonCompliant
+        } else {
+            return $retCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.18"
+    Task = "Ensure shadow group is empty"
+    Test = {
+        $script1 = $scriptPath + "CIS-SEL15-6.2.18_1.sh"
+        $test1 = bash $script1
+        $script2 = $scriptPath + "CIS-SEL15-6.2.18_2.sh"
+        $test2 = bash $script2
+        if($test1 -eq $null -and $test2 -eq $null){
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Ubuntu Linux 20.04-CIS-1.1.0.ps1 b/ATAPAuditor/AuditGroups/Ubuntu Linux 20.04-CIS-1.1.0.ps1
new file mode 100644
index 0000000..a227dfc
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Ubuntu Linux 20.04-CIS-1.1.0.ps1	
@@ -0,0 +1,5012 @@
+function Get-IPv6Disabled{
+    $test1 = sysctl net.ipv6.conf.all.disable_ipv6
+    $test2 = sysctl net.ipv6.conf.default.disable_ipv6
+    $grep = grep -E '^\s*net\.ipv6\.conf\.(all|default)\.disable_ipv6\s*=\s*1\b(\s+#.*)?$'/etc/sysctl.conf /etc/sysctl.d/*.conf | cut -d: -f2
+    if($test1 -match "net.ipv6.conf.all.disable_ipv6 = 1" -and $test2 -match "net.ipv6.conf.default.disable_ipv6 = 1" -and $grep -match "net.ipv6.conf.all.disable_ipv6 = 1" -and $grep -match "net.ipv6.conf.default.disable_ipv6 = 1"){
+        return $true
+    }
+    return $false
+}
+$isIPv6Disabled = Get-IPv6Disabled
+
+[AuditTest] @{
+    Id = "1.1.1.1"
+    Task = "Ensure mounting of cramfs filesystems is disabled"
+    Test = {
+        $result1 = modprobe -n -v cramfs | grep -E '(cramfs|install)'
+        $result2 = lsmod | grep cramfs
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.2"
+    Task = "Ensure mounting of freevxfs filesystems is disabled"
+    Test = {
+        $result1 = modprobe -n -v freevxfs | grep -E '(freevxfs|install)'
+        $result2 = lsmod | grep freevxfs
+        
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.3"
+    Task = "Ensure mounting of jffs2 filesystetms is disabled"
+    Test = {
+        $result1 = modprobe -n -v jffs2 | grep -E '(jffs2|install)'
+        $result2 = lsmod | grep jffs2
+        
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.4"
+    Task = "Ensure mounting of hfs filesystetms is disabled"
+    Test = {
+        $result1 = modprobe -n -v hfs | grep -E '(hfs|install)'
+        $result2 = lsmod | grep hfs
+        
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.5"
+    Task = "Ensure mounting of hfsplus filesystetms is disabled"
+    Test = {
+        $result1 = modprobe -n -v hfsplus | grep -E '(hfsplus|install)'
+        $result2 = lsmod | grep hfsplus
+        
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.6"
+    Task = "Ensure mounting of squashfs filesystems is disabled"
+    Test = {
+        $result1 = modprobe -n -v squashfs | grep -E '(squashfs|install)'
+        $result2 = lsmod | grep squashfs
+        
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.7"
+    Task = "Ensure mounting of udf filesystetms is disabled"
+    Test = {
+        $result1 = modprobe -n -v udf | grep -E '(udf|install)'
+        $result2 = lsmod | grep udf
+        
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2"
+    Task = "Ensure /tmp is configured"
+    Test = {
+        $result = findmnt -n /tmp
+        if($result -match "/tmp"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.3"
+    Task = "Ensure nodev option set on /tmp partition"
+    Test = {
+        $result = findmnt -n /tmp
+        if($result -match "nodev"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.4"
+    Task = "Ensure nosuid option set on /tmp partition"
+    Test = {
+        $result = findmnt -n /tmp
+        if($result -match "nosuid"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.5"
+    Task = "Ensure noexec option set on /tmp partition"
+    Test = {
+        $result = findmnt -n /tmp
+        if($result -match "noexec"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.6"
+    Task = "Ensure /dev/shm is configured"
+    Test = {
+        $result = findmnt -n /dev/shm
+        if($result -match "/dev/shm"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.7"
+    Task = "Ensure nodev option set on /dev/shm partition"
+    Test = {
+        $result = findmnt -n /dev/shm
+        if($result -match "nodev"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.8"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $result = findmnt -n /dev/shm
+        if($result -match "nosuid"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.9"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $result = findmnt -n /dev/shm | grep -v noexec
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.10"
+    Task = "Ensure separate partition exists for /var"
+    Test = {
+        $result = findmnt /var
+        if($result -match "/var"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.11"
+    Task = "Ensure separate partition exists for /var/tmp"
+    Test = {
+        $result = findmnt /var/tmp
+        if($result -match "/var/tmp"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.12"
+    Task = "Ensure /var/tmp partition includes the nodev option"
+    Test = {
+        $result = findmnt /var/tmp
+        if($result -match "nodev"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.13"
+    Task = "Ensure /var/tmp partition includes the nosuid option"
+    Test = {
+        $result = findmnt /var/tmp
+        if($result -match "nosuid"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.14"
+    Task = "Ensure /var/tmp partition includes the noexec option"
+    Test = {
+        $result = findmnt /var/tmp
+        if($result -match "noexec"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.15"
+    Task = "Ensure separate partition exists for /var/log"
+    Test = {
+        $result = findmnt /var/log
+        if($result -match "/var/log"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.16"
+    Task = "Ensure separate partition exists for /var/log/audit"
+    Test = {
+        $result = findmnt /var/log/audit
+        if($result -match "/var/log/audit"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.17"
+    Task = "Ensure separate partition exists for /home"
+    Test = {
+        $result = findmnt /home
+        if($result -match "/home"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.18"
+    Task = "Ensure /home partition includes the nodev option"
+    Test = {
+        $result = findmnt /home
+        if($result -match "nodev"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.19"
+    Task = "Ensure nodev option set on removable media partitions"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-1.1.19-1.1.21.sh"
+        $result=bash $path
+        foreach($line in $result){
+            if(!($line -match "nodev")){
+                return @{
+                    Message = "Not-Compliant"
+                    Status = "False"
+                }
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.20"
+    Task = "Ensure nosuid option set on removable media partitions"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-1.1.19-1.1.21.sh"
+        $result=bash $path
+        foreach($line in $result){
+            if(!($line -match "nosuid")){
+                return @{
+                    Message = "Not-Compliant"
+                    Status = "False"
+                }
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.21"
+    Task = "Ensure noexec option set on removable media partitions"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-1.1.19-1.1.21.sh"
+        $result=bash $path
+        foreach($line in $result){
+            if(!($line -match "noexec")){
+                return @{
+                    Message = "Not-Compliant"
+                    Status = "False"
+                }
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.22"
+    Task = "Ensure sticky bit is set on all world-writable directories"
+    Test = {
+        try{
+            $result = bash -c "df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type d \( -perm -0002 -a ! -perm -1000 \) 2> /dev/null"
+            if($result -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.23"
+    Task = "Disable Automounting"
+    Test = {
+        $result = dpkg -l | grep -o autofs
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        else{
+            $result = systemctl is-enabled autofs
+            if($result -match "No such file or directory"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.24"
+    Task = "Disable USB Storage"
+    Test = {
+        $result1 = modprobe -n -v usb-storage
+        $result2 = lsmod | grep usb-storage
+        if($result1 -match "install /bin/true" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1"
+    Task = "Ensure package manager repositories are configured"
+    Test = {
+        $result = apt-cache policy
+        if($result -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2"
+    Task = "Ensure GPG keys are configured"
+    Test = {
+        $result = apt-key list
+        if($result -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1"
+    Task = "Ensure AIDE is installed"
+    Test = {
+        $result1 = dpkg -l aide | grep '^ii'
+        $result2 = dpkg -l aide-common | grep '^ii'
+        if($result1 -eq $null -or $result2 -eq $null){
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.2"
+    Task = "Ensure filesystem integrity is regularly checked"
+    Test = {
+        $result = grep -Ers '^([^#]+\s+)?(\/usr\/s?bin\/|^\s*)aide(\.wrapper)?\s(--check|\$AIDEARGS)\b' /etc/cron.* /etc/crontab /var/spool/cron/
+        if($result -eq $null){
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4.1"
+    Task = "Ensure permissions on bootloader config are not overridden"
+    Test = {
+        $output = grep -E '^\s*chmod\s+[0-7][0-7][0-7]\s+\$\{grub_cfg\}\.new' -A 1 -B1 /usr/sbin/grub-mkconfig
+        if($output -match 'hmod 400 ${grub_cfg}.new || true'){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4.2"
+    Task = "Ensure bootloader password is set"
+    Test = {
+        $result1 = grep "^set superusers" /boot/grub/grub.cfg
+        $result2 = grep "^password" /boot/grub/grub.cfg
+        if($result1 -match "set superusers=" -and $result2 -match "password_pbkdf2"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4.3"
+    Task = "Ensure permissions on bootloader config are configured"
+    Test = {
+        $result = stat /boot/grub/grub.cfg | grep "Uid: (    0/    root)   Gid: (    0/    root)"
+        $result = $result | cut -d '(' -f 2
+        $result = $result | cut -d '/' -f 1
+
+        if($result -eq "0400" -or $result[1] -le 4){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4.4"
+    Task = "Ensure authentication required for single user mode"
+    Test = {
+        $result = grep -Eq '^root:\$[0-9]' /etc/shadow || echo "root is locked"
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.1"
+    Task = "Ensure XD/NX support is enabled"
+    Test = {
+        $result = bash -c '[[ -n $(grep noexec[0-9]*=off /proc/cmdline) || -z $(grep -E -i " (pae|nx)" /proc/cpuinfo) || -n $(grep "\\sNX\\s.*\\sprotection:\\s" /var/log/dmesg | grep -v active) ]] && echo "NX Protection is not active"'
+        
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.2"
+    Task = "Ensure address space layout randomization (ASLR) is enabled"
+    Test = {
+        $result1 = sysctl kernel.randomize_va_space
+        $result2 = grep -Es "^\s*kernel\.randomize_va_space\s*=\s*([0-1]|[3-9]|[1-9][0-9]+)" /etc/sysctl.conf /etc/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /run/sysctl.d/*.conf
+        if($result1 -match "kernel.randomize_va_space = 2" -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.3"
+    Task = "Ensure prelink is not installed"
+    Test = {
+        $result = dpkg -l | grep -o prelink
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.4"
+    Task = "Ensure core dumps are restricted"
+    Test = {
+        try{
+            $result1 = grep -Es '^(\*|\s).*hard.*core.*(\s+#.*)?$' /etc/security/limits.conf /etc/security/limits.d/*
+            $result2 = sysctl fs.suid_dumpable
+            $result3 = grep "fs.suid_dumpable" /etc/sysctl.conf /etc/sysctl.d/*
+            try{
+                $result4 = systemctl is-enabled coredump.service
+                $message = "Compliant"
+                if($result4 -match "enabled" -or $result4 -match "masked" -or $result4 -match "disabled"){
+                    $message = "systemd-coredump is installed"
+                }
+            }
+            catch{
+                $message = "systemd-coredump not installed"
+            }
+            if($result1 -match ".*\s*hard\s*core\s*0{1}?\s*" -and $result2 -match "fs.suid_dumpable = 0" -and $result3 -match "fs.suid_dumpable = 0"){
+                return @{
+                    Message = $message
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.1.1"
+    Task = "Ensure AppArmor is installed"
+    Test = {
+        $result = dpkg -s apparmor | grep -E '(Status:|not installed)'
+        
+        if($result -match "Status: install ok installed"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.1.2"
+    Task = "Ensure AppArmor is enabled in the bootloader configuration"
+    Test = {
+        $result1 = grep "^\s*linux" /boot/grub/grub.cfg | grep -v "apparmor=1"
+        $result2 = grep "^\s*linux" /boot/grub/grub.cfg | grep -v "security=apparmor"
+        if($result1 -eq $null -and $result2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.1.3"
+    Task = "Ensure all AppArmor Profiles are in enforce or complain mode"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        $profileMode3 = apparmor_status | grep profiles | sed '3!d' | cut -d ' ' -f 1
+        $result = expr $profileMode3 + $profileMode2
+        
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+
+        if($result -eq $profileMode1 -and $unconfinedProcesses -eq 0){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.1.4"
+    Task = "Ensure all AppArmor Profiles are enforcing"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+
+        if($profileMode1 -eq $profileMode2 -and $unconfinedProcesses -eq 0){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.1"
+    Task = "Ensure message of the day is configured properly"
+    Test = {
+        $output = grep -Eis "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/motd
+
+        if($output -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.2"
+    Task = "Ensure local login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue
+        
+        if($output1 -ne $null -and $output2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.3"
+    Task = "Ensure remote login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue.net
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net
+        
+        if($output1 -ne $null -and $output2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.4"
+    Task = "Ensure permissions on /etc/motd are configured"
+    Test = {
+        $output = stat -L /etc/motd | grep "Access:\s*(0644/-rw-r--r--)\s*Uid:\s*(\s*0/\s*root)\s*Gid:\s*(\s*0/\s*root)"
+        
+        if($output -eq $null -or $output -match "Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.5"
+    Task = "Ensure permissions on /etc/issue are configured"
+    Test = {
+        $output = stat -L /etc/issue | grep "Access:\s*(0644/-rw-r--r--)\s*Uid:\s*(\s*0/\s*root)\s*Gid:\s*(\s*0/\s*root)"
+        
+        if($output -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.7.6"
+    Task = "Ensure permissions on /etc/issue.net are configured"
+    Test = {
+        $output = stat -L /etc/issue.net | grep "Access:\s*(0644/-rw-r--r--)\s*Uid:\s*(\s*0/\s*root)\s*Gid:\s*(\s*0/\s*root)"
+        
+        if($output -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.8.1"
+    Task = "Ensure GNOME Display Manager is removed"
+    Test = {
+        $test1 = dpkg -l | grep -o gdm3
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.8.2"
+    Task = "Ensure GNOME Display Manager is removed"
+    Test = {
+        if(Test-Path "/etc/gdm3/greeter.dconf-defaults"){
+            $content = cat /etc/gdm3/greeter.dconf-defaults
+            $line1 = $content | grep "banner-message-enable=true"
+            $line2 = $content | grep "banner-message-text="
+            if($line1 -ne $null -and $line1[0] -ne '#' -and $line2 -ne $null -and $line2[0] -ne '#'){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.8.3"
+    Task = "Ensure disable-user-list is enabled"
+    Test = {
+        if(Test-Path "/etc/gdm3/greeter.dconf-defaults"){
+            $content = cat /etc/gdm3/greeter.dconf-defaults
+            $line = $content | grep "disable-user-list=true"
+            if($line -ne $null -and $line[0] -ne '#'){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.8.4"
+    Task = "Ensure XDCMP is not enabled"
+    Test = {
+        $output = grep -Eis '^\s*Enable\s*=\s*true' /etc/gdm3/custom.conf
+        if($output -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.9"
+    Task = "Ensure updates, patches, and additional security software are installed"
+    Test = {
+        $output = apt -s upgrade
+        $output = $?
+        if($output -match "True"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "2.1.1.1"
+    Task = "Ensure time synchronization is in use"
+    Test = {
+        $test1 = systemctl is-enabled systemd-timesyncd    
+        $test2 = dpkg -s ntp
+        $test3 = dpkg -s chrony
+        if($test1 -match "enabled" -or $test2 -match "Status: install ok installed" -or $test3 -match "Status: install ok installed"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+$ntp = dpkg -s ntp
+$ntp = $?
+$chrony = dpkg -s chrony
+$chrony = $?
+$timesyncd = systemctl is-enabled systemd-timesyncd
+
+if($ntp -match "False" -and $chrony -match "False"){
+    [AuditTest] @{
+        Id = "2.1.1.2"
+        Task = "Ensure systemd-timesyncd is configured"
+        Test = {
+            $test1 = systemctl is-enabled systemd-timesyncd.service
+            $time = timedatectl status
+            if($test1 -match "enabled" -and $time -ne $null){    
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+    }
+}
+elseif($ntp -match "False" -and $timesyncd -notmatch "enabled"){
+    [AuditTest] @{
+        Id = "2.1.1.3"
+        Task = "Ensure chrony is configured"
+        Test = {
+            $test1 = dpkg -s ntp | grep -E '(Status:|not installed)'
+            $test2 = systemctl is-enabled systemd-timesyncd
+            $test3 = grep -E "^(server|pool)" /etc/chrony/chrony.conf
+            $test4 = ps -ef | grep chronyd | grep "_chrony"
+            if($test1 -match "package 'ntp' is not installed" -and $test2 -match "masked" -and $test3 -ne $null -and $test4 -ne $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+    }
+}
+elseif($chrony -match "False" -and $timesyncd -notmatch "enabled"){
+    [AuditTest] @{
+        Id = "2.1.1.4"
+        Task = "Ensure ntp is configured"
+        Test = {
+            $test1 = grep "^restrict" /etc/ntp.conf
+            $test2 = grep -E "^(server|pool)" /etc/ntp.conf
+            $test3 = grep "RUNASUSER=ntp" /etc/init.d/ntp
+            if($test1 -match "restrict -4 default kod notrap nomodify nopeer noquery limited" -and $test1 -match "restrict -6 default kod notrap nomodify nopeer noquery limited" -and $test2 -ne $null -and $test3 -match "RUNASUSER=ntp"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.2"
+    Task = "Ensure X Window System is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o xserver-xorg*
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.3"
+    Task = "Ensure Avahi Server is not installed"
+    Test = {
+        $status = dpkg -l | grep -o avahi-daemon
+        if($status -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.4"
+    Task = "Ensure CUPS is not installed"
+    Test = {
+        $test1 = dpkg -s cups
+        $test1 = $?
+        if($test1 -match "False"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.5"
+    Task = "Ensure DHCP Server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o isc-dhcp-server
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.6"
+    Task = "Ensure LDAP server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o slapd
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.7"
+    Task = "Ensure NFS is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o nfs-kernel-server
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.8"
+    Task = "Ensure DNS Server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o bind9
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.9"
+    Task = "Ensure FTP Server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o vsftpd
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.10"
+    Task = "Ensure HTTP server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o apache2
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.11"
+    Task = "Ensure IMAP and POP3 server are not installed"
+    Test = {
+        $test1 =  dpkg -l | grep -o dovecot-imapd
+        $test2 = dpkg -l | grep -o dovecot-pop3d
+        if($test1 -eq $null -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.12"
+    Task = "Ensure Samba is not installed"
+    Test = {
+        dpkg -s samba | grep -E '(Status:|not installed)'
+        $test1 = $?
+        if($test1 -match "False"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.13"
+    Task = "Ensure HTTP Proxy Server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o squid
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.14"
+    Task = "Ensure SNMP Server is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o snmpd
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.15"
+    Task = "Ensure mail transfer agent is configured for local-only mode"
+    Test = {
+        $test1 = ss -lntu | grep -E ':25\s' | grep -E -v '\s(127.0.0.1|::1):25\s'
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.16"
+    Task = "Ensure rsync service is not installed"
+    Test = {
+        dpkg -s rsync | grep -E '(Status:|not installed)'
+        $test1 = $?
+        if($test1 -match "False"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.17"
+    Task = "Ensure NIS Server is not installed"
+    Test = {
+        $test1 = dpkg -s nis
+        $test1 = $?
+        if($test1 -match "False"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "Ensure NIS Client is not installed"
+    Test = {
+        $test1 = dpkg -s nis
+        $test1 = $?
+        if($test1 -match "False"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "Ensure rsh client is not installed"
+    Test = {
+        $test1 = dpkg -s rsh-client
+        $test1 = $?
+        if($test1 -match "False"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "Ensure talk client is not installed"
+    Test = {
+        $test1 = dpkg -s talk
+        $test1 = $?
+        if($test1 -match "False"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "Ensure telnet client is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o telnet
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "Ensure LDAP client is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o ldap-utils
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "Ensure RPC is not installed"
+    Test = {
+        $test1 = dpkg -l | grep -o rpcbind
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3"
+    Task = "Ensure nonessential services are removed or masked"
+    Test = {
+        $test1 = lsof -i -P -n | grep -v "(ESTABLISHED)"
+        if($test1 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.1"
+    Task = "Disable IPv6"
+    Test = {
+        if($isIPv6Disabled -eq $true){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.2"
+    Task = "Ensure wireless interfaces are disabled"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-3.1.2.sh"
+        $result=bash $path
+        if($result -match "Wireless is not enabled"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Wireless interfaces are active"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.1"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $test1 = sysctl net.ipv4.conf.all.send_redirects
+        $test2 = sysctl net.ipv4.conf.default.send_redirects
+        $test3 = grep -E "^\s*net\.ipv4\.conf\.all\.send_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        $test4 = grep -E "^\s*net\.ipv4\.conf\.default\.send_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.conf.all.send_redirects = 0" -and $test2 -match "net.ipv4.conf.default.send_redirects = 0" -and $test3 -match "net.ipv4.conf.all.send_redirects = 0" -and $test4 -match "net.ipv4.conf.default.send_redirects = 0"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.2"
+    Task = "Ensure IP forwarding is disabled"
+    Test = {
+        $test1 = sysctl net.ipv4.ip_forward
+        $test2 = grep -E -s "^\s*net\.ipv4\.ip_forward\s*=\s*1" /etc/sysctl.conf /etc/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /run/sysctl.d/*.conf
+        if($test1 -match "net.ipv4.ip_forward = 0" -and $test2 -eq $null){
+            if($isIPv6Disabled -ne $true){
+                $test1 = sysctl net.ipv6.conf.all.forwarding
+                $test2 = grep -E -s "^\s*net\.ipv6\.conf\.all\.forwarding\s*=\s*1" /etc/sysctl.conf /etc/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /run/sysctl.d/*.conf
+                if($test1 -match "net.ipv6.conf.all.forwarding = 0" -and $test2 -eq $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            else{
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.1"
+    Task = "Ensure source routed packets are not accepted"
+    Test = {
+        $test1 = sysctl net.ipv4.conf.all.accept_source_route
+        $test2 = sysctl net.ipv4.conf.default.accept_source_route
+        $test3 = grep "net\.ipv4\.conf\.all\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+        $test4 = grep "net\.ipv4\.conf\.default\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.conf.all.accept_source_route = 0" -and $test2 -match "net.ipv4.conf.default.accept_source_route = 0" -and $test3 -match "net.ipv4.conf.all.accept_source_route = 0" -and $test4 -match "net.ipv4.conf.default.accept_source_route = 0"){
+            if($isIPv6Disabled -eq $false){
+                $test1 = sysctl net.ipv6.conf.all.accept_source_route
+                $test2 = sysctl net.ipv6.conf.default.accept_source_route
+                $test3 = grep "net\.ipv6\.conf\.all\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+                $test4 = grep "net\.ipv6\.conf\.default\.accept_source_route" /etc/sysctl.conf /etc/sysctl.d/*
+                if($test1 -match "net.ipv6.conf.all.accept_source_route = 0" -and $test2 -match "net.ipv6.conf.default.accept_source_route = 0" -and $test3 -match "net.ipv4.conf.all.accept_source_route = 0" -and $test4 -match "net.ipv6.conf.default.accept_source_route = 0"){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            else{
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.2"
+    Task = "Ensure ICMP redirects are not accepted"
+    Test = {
+        $test1 = sysctl net.ipv4.conf.all.accept_redirects
+        $test2 = sysctl net.ipv4.conf.default.accept_redirects
+        $test3 = grep "net\.ipv4\.conf\.all\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        $test4 = grep "net\.ipv4\.conf\.default\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.conf.all.accept_redirects = 0" -and $test2 -match "net.ipv4.conf.default.accept_redirects = 0" -and $test3 -match "net.ipv4.conf.all.accept_redirects = 0" -and $test4 -match "net.ipv4.conf.default.accept_redirects = 0"){
+            if($isIPv6Disabled -eq $false){
+                $test1 = sysctl net.ipv6.conf.all.accept_redirects
+                $test2 = sysctl net.ipv6.conf.default.accept_redirects
+                $test3 = grep "net\.ipv6\.conf\.all\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+                $test4 = grep "net\.ipv6\.conf\.default\.accept_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+                if($test1 -match "net.ipv6.conf.all.accept_redirects = 0" -and $test2 -match "net.ipv6.conf.default.accept_redirects = 0" -and $test3 -match "net.ipv6.conf.all.accept_redirects = 0" -and $test4 -match "net.ipv6.conf.default.accept_redirects = 0"){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            else{
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.3"
+    Task = "Ensure secure ICMP redirects are not accepted"
+    Test = {
+        $test1 = sysctl net.ipv4.conf.all.secure_redirects
+        $test2 = sysctl net.ipv4.conf.default.secure_redirects
+        $test3 = grep "net\.ipv4\.conf\.all\.secure_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        $test4 = grep "net\.ipv4\.conf\.default\.secure_redirects" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.conf.all.secure_redirects = 0" -and $test2 -match "net.ipv4.conf.default.secure_redirects = 0" -and $test3 -match "net.ipv4.conf.all.secure_redirects = 0" -and $test4 -match "net.ipv4.conf.default.secure_redirects = 0"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.4"
+    Task = "Ensure suspicious packets are logged"
+    Test = {
+        $test1 = sysctl net.ipv4.conf.all.log_martians
+        $test2 = sysctl net.ipv4.conf.default.log_martians
+        $test3 = grep "net\.ipv4\.conf\.all\.log_martians" /etc/sysctl.conf /etc/sysctl.d/*
+        $test4 = grep "net\.ipv4\.conf\.default\.log_martians" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.conf.all.log_martians = 1" -and $test2 -match "net.ipv4.conf.default.log_martians = 1" -and $test3 -match "net.ipv4.conf.all.log_martians = 1" -and $test4 -match "net.ipv4.conf.default.log_martians = 1"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "3.3.5"
+    Task = "Ensure broadcast ICMP requests are ignored"
+    Test = {
+        $test1 = sysctl net.ipv4.icmp_echo_ignore_broadcasts
+        $test2 = grep "net\.ipv4\.icmp_echo_ignore_broadcasts" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.icmp_echo_ignore_broadcasts = 1" -and $test2 -match "net.ipv4.icmp_echo_ignore_broadcasts = 1"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.6"
+    Task = "Ensure bogus ICMP responses are ignored"
+    Test = {
+        $test1 = sysctl net.ipv4.icmp_ignore_bogus_error_responses
+        $test2 = grep "net.ipv4.icmp_ignore_bogus_error_responses" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.icmp_ignore_bogus_error_responses = 1" -and $test2 -match "net.ipv4.icmp_ignore_bogus_error_responses = 1"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.7"
+    Task = "Ensure Reverse Path Filtering is enabled"
+    Test = {
+        $test1 = sysctl net.ipv4.conf.all.rp_filter
+        $test2 = sysctl net.ipv4.conf.default.rp_filter
+        $test3 = grep "net\.ipv4\.conf\.all\.rp_filter" /etc/sysctl.conf /etc/sysctl.d/*
+        $test4 = grep "net\.ipv4\.conf\.default\.rp_filter" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.conf.all.rp_filter = 1" -and $test2 -match "net.ipv4.conf.default.rp_filter = 1" -and $test3 -match "net.ipv4.conf.all.rp_filter=1" -and $test4 -match "net.ipv4.conf.default.rp_filter=1"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.8"
+    Task = "Ensure TCP SYN Cookies is enabled"
+    Test = {
+        $test1 = sysctl net.ipv4.tcp_syncookies
+        $test2 = grep "net\.ipv4\.tcp_syncookies" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv4.tcp_syncookies = 1" -and $test2 -match "net.ipv4.tcp_syncookies = 1"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.9"
+    Task = "Ensure IPv6 router advertisements are not accepted"
+    Test = {
+        $test1 = sysctl net.ipv6.conf.all.accept_ra
+        $test2 = sysctl net.ipv6.conf.default.accept_ra
+        $test3 = grep "net\.ipv6\.conf\.all\.accept_ra" /etc/sysctl.conf /etc/sysctl.d/*
+        $test4 = grep "net\.ipv6\.conf\.default\.accept_ra" /etc/sysctl.conf /etc/sysctl.d/*
+        if($test1 -match "net.ipv6.conf.all.accept_ra = 0" -and $test2 -match "net.ipv6.conf.default.accept_ra = 0" -and $test3 -match "net.ipv6.conf.all.accept_ra = 0" -and $test4 -match "net.ipv6.conf.default.accept_ra = 0"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.4.1"
+    Task = "Ensure DCCP is disabled"
+    Test = {
+        $test1 = modprobe -n -v dccp
+        $test2 = lsmod | grep dccp
+        if($test1 -match "install /bin/true" -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.4.2"
+    Task = "Ensure SCTP is disabled"
+    Test = {
+        $test1 = modprobe -n -v sctp | grep -E '(sctp|install)'
+        $test2 = lsmod | grep sctp
+        if($test1 -match "install /bin/true" -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.4.3"
+    Task = "Ensure RDS is disabled"
+    Test = {
+        $test1 = modprobe -n -v rds
+        $test2 = lsmod | grep rds
+        if($test1 -match "install /bin/true" -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.4.4"
+    Task = "Ensure TIPC is disabled"
+    Test = {
+        $test1 = modprobe -n -v tipc | grep -E '(tipc|install)'
+        $test2 = lsmod | grep tipc
+        if($test1 -match "install /bin/true" -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.1.1"
+    Task = "Ensure ufw is installed"
+    Test = {
+        $test1 = dpkg -s ufw | grep 'Status: install'
+        if($test1 -match "Status: install ok installed"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.1.2"
+    Task = "Ensure iptables-persistent is not installed with ufw"
+    Test = {
+        $test1 = dpkg -l | grep -o iptables-persistent
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.1.3"
+    Task = "Ensure ufw service is enabled"
+    Test = {
+        $test1 = systemctl is-enabled ufw
+        $test1 = $?
+        $test2 = ufw status | grep Status
+        if($test1 -match "True" -and $test2 -match "Status: active"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.1.4"
+    Task = "Ensure ufw loopback traffic is configured"
+    Test = {
+        $test1 = ufw status verbose
+        $result1 = $test1 -match "^Anywhere on lo\s+ALLOW IN\s+Anywhere$"
+        $result2 = $test1 -match "^Anywhere\s+DENY IN\s+127.0.0.0/8$"
+        $result3 = $test1 -match "^Anywhere (v6) on lo\s+ALLOW IN\s+Anywhere (v6)$"
+        $result4 = $test1 -match "^Anywhere (v6)\s+DENY IN\s+::1$"
+        $result5 = $test1 -match "^Anywhere\s+ALLOW OUT\s+Anywhere on lo$"
+        $result6 = $test1 -match "^Anywhere (v6)\s+ALLOW OUT\s+Anywhere (v6) on lo$"
+        if($result1 -ne $null -and $result2 -ne $null -and $result3 -ne $null -and $result4 -ne $null -and $result5 -ne $null -and $result6 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.1.5"
+    Task = "Ensure ufw outbound connections are configured"
+    Test = {
+        $test1 = ufw status numbered
+        if($test1 -notmatch "Status: inactive"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.1.7"
+    Task = "Ensure ufw default deny firewall policy"
+    Test = {
+        $test1 = ufw status verbose
+        if($test1 -match "deny" -or $test1 -match "reject"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.1"
+    Task = "Ensure nftables is installed"
+    Test = {
+        $test1 = dpkg -l | grep -o nftables
+        if($test1 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.2"
+    Task = "Ensure ufw is uninstalled or disabled with nftables"
+    Test = {
+        $test1 = dpkg-query -s ufw
+        $test1 = $?
+        $test2 = dpkg-query -s nftables
+        $test2 = $?
+        if($test1 -match "True" -and $test2 -match "True"){
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.3"
+    Task = "Ensure iptables are flushed with nftables"
+    Test = {
+        $test1 = iptables -L
+        $test2 = ip6tables -L
+        if($test1 -notmatch "target" -and $test2 -notmatch "target"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.4"
+    Task = "Ensure a nftables table exists"
+    Test = {
+        try{
+            $test1 = nft list tables
+            if($test1 -match "table"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.5"
+    Task = "Ensure nftables base chains exist"
+    Test = {
+        try{
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if($test1 -match "type filter hook input" -and $test2 -match "type filter hook forward" -and $test3 -match "type filter hook output"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.6"
+    Task = "Ensure nftables loopback traffic is configured"
+    Test = {
+        try{
+            if($isIPv6Disabled -ne $true){
+                $test1 = nft list ruleset | awk '/hook input/,/}/' | grep 'iif "lo" accept'
+                $test2 = nft list ruleset | awk '/hook input/,/}/' | grep 'ip saddr'
+                if($test1 -match 'iif "lo" accept' -and $test2 -match "ip saddr 127.0.0.0/8 counter packets 0 bytes 0 drop"){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            else{
+                $test = nft list ruleset | awk '/hook input/,/}/' | grep 'ip6 saddr'
+                if($test -match 'ip6 saddr ::1 counter packets 0 bytes 0 drop'){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.7"
+    Task = "Ensure nftables outbound and established connections are configured"
+    Test = {
+        try{
+            $test1 = nft list ruleset | awk '/hook input/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            $test2 = nft list ruleset | awk '/hook output/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            if($test1 -match "ip protocol tcp ct state established accept" -and $test1 -match "p protocol udp ct state established accept" -and $test1 -match "ip protocol icmp ct state established accept" -and $test2 -match "ip protocol tcp ct state established,related,new accep" -and $test2 -match "ip protocol udp ct state established,related,new accept" -and $test2 -match "ip protocol icmp ct state established,related,new accept"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.8"
+    Task = "Ensure nftables default deny firewall policy"
+    Test = {
+        try{
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if($test1 -match "policy drop" -and $test2 -match "policy drop" -and $test3 -match "policy drop"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.2.9"
+    Task = "Ensure nftables service is enabled"
+    Test = {
+        $test1 = systemctl is-enabled nftables
+        if($test1 -match "enabled"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.3.1.1"
+    Task = "Ensure iptables packages are installed"
+    Test = {
+        $test1 = apt list iptables iptables-persistent
+        $test1 = $?
+        if($test1 -match "True"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.3.1.2"
+    Task = "Ensure nftables is not installed with iptables"
+    Test = {
+        $test1 = dpkg -s nftables
+        if($test1 -match "package 'nftables' is not installed"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.3.1.3"
+    Task = "Ensure ufw is uninstalled or disabled with iptables"
+    Test = {
+        $test1 = dpkg -l | grep -o ufw
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.3.2.1"
+    Task = "Ensure iptables loopback traffic is configured"
+    Test = {
+        $test1 = iptables -L INPUT -v -n | grep "Chain\s*INPUT\s*(policy\s*DROP"
+        $test2 = iptables -L OUTPUT -v -n | grep "Chain\s*OUTPUT\s*(policy\s*DROP"
+        if($test1 -ne $null -and $test2 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.3.2.2"
+    Task = "Ensure iptables outbound and established connections are configured"
+    Test = {
+        $test1 = iptables -L -v -n
+        if($test1 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.3.2.3"
+    Task = "Ensure iptables default deny firewall policy"
+    Test = {
+        $output = iptables -L
+        $test1 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $res1 = $?
+        $test2 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $res2 = $?
+        $test3 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        $res3 = $?
+        if($res1 -match "True" -and $res2 -match "True" -and $res3 -match "True"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.5.3.3.3"
+    Task = "Ensure ip6tables default deny firewall policy"
+    Test = {
+        $output = ip6tables -L
+        $test1 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $res1 = $?
+        $test2 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $res2 = $?
+        $test3 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        $res3 = $?
+        if($isIPv6Disabled -eq $true){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        if($res1 -match "True" -and $res2 -match "True" -and $res3 -match "True"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.1.1"
+    Task = "Ensure auditd is installed"
+    Test = {
+        $test1 = dpkg -l | grep -o auditd
+        $test2 = dpkg -l | grep -o audispd-plugins
+        if($test1 -ne $null -and $test2 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.1.2"
+    Task = "Ensure auditd service is enabled"
+    Test = {
+        $test1 = systemctl is-enabled auditd
+        if($test1 -match "enabled"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.1.3"
+    Task = "Ensure auditing for processes that start prior to auditd is enabled"
+    Test = {
+        $test1 = grep "^\s*linux" /boot/grub/grub.cfg | grep -v "audit=1"
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.1.4"
+    Task = "Ensure audit_backlog_limit is sufficient"
+    Test = {
+        $test1 = grep "^\s*linux" /boot/grub/grub.cfg | grep -v "audit_backlog_limit="
+        $test2 = grep "^\s*linux" /boot/grub/grub.cfg | grep "audit_backlog_limit=" | sed 's/^.*\(audit_backlog_limit=[\/a-z]*\).*$/\1/' | cut -f2 -d'='
+        $test2 = [int] $test2
+        if($test1 -eq $null -and $test2 -ge 8192){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.2.1"
+    Task = "Ensure audit log storage size is configured"
+    Test = {
+        $test1 = grep max_log_file /etc/audit/auditd.conf
+        if($test1 -match "max_log_file"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.2.2"
+    Task = "Ensure audit logs are not automatically deleted"
+    Test = {
+        $test1 = grep max_log_file_action /etc/audit/auditd.conf
+        if($test1 -match "max_log_file_action = keep_logs"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.2.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $test1 = grep space_left_action /etc/audit/auditd.conf
+        $test2 = grep action_mail_acct /etc/audit/auditd.conf
+        $test3 = grep admin_space_left_action /etc/audit/auditd.conf
+        if($test1 -match "space_left_action = email" -and $test2 -match "action_mail_acct = root" -and $test3 -match "admin_space_left_action = halt"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "4.1.3"
+    Task = "Ensure events that modify date and time information are collected"
+    Test = {
+        try{
+            $bitVersion = uname -a
+            #if 32 bit
+            if($bitVersion -match "i386"){
+                $output = grep time-change /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change"
+                $test2 = $output -match "-a always,exit -F arch=b32 -S clock_settime -k time-change"
+                $test3 = $output -match "-w /etc/localtime -p wa -k time-change"
+                
+                $output2 = auditctl -l | grep time-change
+                $test4 = $output2 -match "-a always,exit -F arch=b32 -S stime,settimeofday,adjtimex -F key=time-change"
+                $test5 = $output2 -match "-a always,exit -F arch=b32 -S clock_settime -F key=time-change"
+                $test6 = $output2 -match "-w /etc/localtime -p wa -k time-change"
+               
+                if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            #64 bit
+            elseif($bitVersion -match "x86_64"){
+                $output = grep time-change /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b64 -S adjtimex -S settimeofday -k time-change"
+                $test2 = $output -match "-a always,exit -F arch=b32 -S adjtimex -S settimeofday -S stime -k time-change"
+                $test3 = $output -match "-a always,exit -F arch=b64 -S clock_settime -k time-change"
+                $test4 = $output -match "-a always,exit -F arch=b32 -S clock_settime -k time-change"
+                $test5 = $output -match "-w /etc/localtime -p wa -k time-change"
+                $output2 = auditctl -l | grep time-change
+                $test6 = $output2 -match "-a always,exit -F arch=b64 -S adjtimex,settimeofday -F key=time-change"
+                $test7 = $output2 -match "-a always,exit -F arch=b32 -S stime,settimeofday,adjtimex -F key=time-change"
+                $test8 = $output2 -match "-a always,exit -F arch=b64 -S clock_settime -F key=time-change"
+                $test9 = $output2 -match "-a always,exit -F arch=b32 -S clock_settime -F key=time-change"
+                $test10 = $output2 -match "-w /etc/localtime -p wa -k time-change"
+                if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null -and $test7 -ne $null -and $test8 -ne $null -and $test9 -ne $null -and $test10 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.4"
+    Task = "Ensure events that modify user/group information are collected"
+    Test = {
+        try{
+            $output = grep identity /etc/audit/rules.d/*.rules
+            $test1 = $output -match "-w /etc/group -p wa -k identity"
+            $test2 = $output -match "-w /etc/passwd -p wa -k identity"
+            $test3 = $output -match "-w /etc/gshadow -p wa -k identity"
+            $test4 = $output -match "-w /etc/shadow -p wa -k identity"
+            $test5 = $output -match "-w /etc/security/opasswd -p wa -k identity"
+            $output2 = auditctl -l | grep identity
+            $test6 = $output2 -match "-w /etc/group -p wa -k identity"
+            $test7 = $output2 -match "-w /etc/passwd -p wa -k identity"
+            $test8 = $output2 -match "-w /etc/gshadow -p wa -k identity"
+            $test9 = $output2 -match "-w /etc/shadow -p wa -k identity"
+            $test10 = $output2 -match "-w /etc/security/opasswd -p wa -k identity"
+            if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null -and $test7 -ne $null -and $test8 -ne $null -and $test9 -ne $null -and $test10 -ne $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.5"
+    Task = "Ensure events that modify the system's network environment are collected"
+    Test = {
+        try{
+            $bitVersion = uname -a
+            #if 32 bit
+            if($bitVersion -match "i386"){
+                $output = grep system-locale /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b32 -S sethostname -S setdomainname -k system-locale"
+                $test2 = $output -match "-w /etc/issue -p wa -k system-locale"
+                $test3 = $output -match "-w /etc/issue.net -p wa -k system-locale"
+                $test4 = $output -match "-w /etc/hosts -p wa -k system-locale"
+                $test5 = $output -match "-w /etc/network -p wa -k system-locale"
+                $output2 = auditctl -l | grep system-locale
+                $test6 = $output2 -match "-a always,exit -F arch=b32 -S sethostname,setdomainname -F key=system-locale"
+                $test7 = $output2 -match "-w /etc/issue -p wa -k system-locale"
+                $test8 = $output2 -match "-w /etc/issue.net -p wa -k system-locale"
+                $test9 = $output2 -match "-w /etc/hosts -p wa -k system-locale"
+                $test10 = $output2 -match "-w /etc/network -p wa -k system-locale"
+                if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null -and $test7 -ne $null -and $test8 -ne $null -and $test9 -ne $null -and $test10 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            #64 bit
+            elseif($bitVersion -match "x86_64"){
+                $output = grep system-locale /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b64 -S sethostname -S setdomainname -k system-locale"
+                $test1_2 = $output -match "-a always,exit -F arch=b32 -S sethostname -S setdomainname -k system-locale"
+                $test2 = $output -match "-w /etc/issue -p wa -k system-locale"
+                $test3 = $output -match "-w /etc/issue.net -p wa -k system-locale"
+                $test4 = $output -match "-w /etc/hosts -p wa -k system-locale"
+                $test5 = $output -match "-w /etc/network -p wa -k system-locale"
+                $output2 = auditctl -l | grep system-locale
+                $test6 = $output2 -match "-a always,exit -F arch=b64 -S sethostname,setdomainname -F key=system-locale"
+                $test6_2 = $output2 -match "-a always,exit -F arch=b32 -S sethostname,setdomainname -F key=system-locale"
+                $test7 = $output2 -match "-w /etc/issue -p wa -k system-locale"
+                $test8 = $output2 -match "-w /etc/issue.net -p wa -k system-locale"
+                $test9 = $output2 -match "-w /etc/hosts -p wa -k system-locale"
+                $test10 = $output2 -match "-w /etc/network -p wa -k system-locale"
+                if($test1 -ne $null -and $test1_2 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null -and $test6_2 -ne $null -and $test7 -ne $null -and $test8 -ne $null -and $test9 -ne $null -and $test10 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.6"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        try{
+            $output = grep MAC-policy /etc/audit/rules.d/*.rules
+            $test1 = $output -match "-w /etc/apparmor/ -p wa -k MAC-policy"
+            $test2 = $output -match "-w /etc/apparmor.d/ -p wa -k MAC-policy"
+            $output2 = auditctl -l | grep MAC-policy
+            $test3 = $output2 -match "-w /etc/apparmor -p wa -k MAC-policy"
+            $test4 = $output2 -match "-w /etc/apparmor.d -p wa -k MAC-policy"
+            if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.7"
+    Task = "Ensure login and logout events are collected"
+    Test = {
+        try{
+            $output = grep logins /etc/audit/rules.d/*.rules
+            $test1 = $output -match "-w /var/log/faillog -p wa -k logins"
+            $test2 = $output -match "-w /var/log/lastlog -p wa -k logins"
+            $test3 = $output -match "-w /var/log/tallylog -p wa -k logins"
+            $output2 = auditctl -l | grep logins
+            $test4 = $output2 -match "-w /var/log/faillog -p wa -k logins"
+            $test5 = $output2 -match "-w /var/log/lastlog -p wa -k logins"
+            $test6 = $output2 -match "-w /var/log/tallylog -p wa -k logins"
+            if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.8"
+    Task = "Ensure session initiation information is collected"
+    Test = {
+        try{
+            $output = grep -E '(session|logins)' /etc/audit/rules.d/*.rules
+            $test1 = $output -match "-w /var/run/utmp -p wa -k session"
+            $test2 = $output -match "-w /var/log/wtmp -p wa -k logins"
+            $test3 = $output -match "-w /var/log/btmp -p wa -k logins"
+            $output2 = auditctl -l | grep -E '(session|logins)'
+            $test4 = $output2 -match "-w /var/run/utmp -p wa -k session"
+            $test5 = $output2 -match "-w /var/log/wtmp -p wa -k logins"
+            $test6 = $output2 -match "-w /var/log/btmp -p wa -k logins"
+            if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.9"
+    Task = "Ensure discretionary access control permission modification events are collected"
+    Test = {
+        try{
+            $bitVersion = uname -a
+            #if 32 bit
+            if($bitVersion -match "i386"){
+                $output = grep perm_mod /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b32 -S chmod -S fchmod -S fchmodat -F auid>=1000 -F auid!=4294967295 -k perm_mod"
+                $test2 = $output -match "-a always,exit -F arch=b32 -S chown -S fchown -S fchownat -S lchown -F auid>=1000 -F auid!=4294967295 -k perm_mod"
+                $test3 = $output -match "-a always,exit -F arch=b32 -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=1000 -F auid!=4294967295"
+                $test4 = $output -match "-k perm_mod"
+                $output2 = auditctl -l | grep perm_mod
+                $test5 = $output2 -match "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1"
+                $test6 = $output2 -match "-F key=perm_mod"
+                $test7 = $output2 -match "-a always,exit -F arch=b32 -S lchown,fchown,chown,fchownat -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                $test8 = $output2 -match "-a always,exit -F arch=b32 -S"
+                $test9 = $output2 -match "setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                if($test1 -ne $null -and $test1_2 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null -and $test6_2 -ne $null -and $test7 -ne $null -and $test8 -ne $null -and $test9 -ne $null){
+                    
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            #64 Bit
+            elseif($bitVersion -match "x86_64"){
+                $output = grep perm_mod /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b64 -S chmod -S fchmod -S fchmodat -F auid>=1000 -F auid!=4294967295 -k perm_mod"
+                $test2 = $output -match "-a always,exit -F arch=b32 -S chmod -S fchmod -S fchmodat -F auid>=1000 -F auid!=4294967295 -k perm_mod"
+                $test3 = $output -match "-a always,exit -F arch=b64 -S chown -S fchown -S fchownat -S lchown -F auid>=1000 -F auid!=4294967295 -k perm_mod"
+                $test4 = $output -match "-a always,exit -F arch=b32 -S chown -S fchown -S fchownat -S lchown -F auid>=1000 -F auid!=4294967295 -k perm_mod"
+                $test5 = $output -match "-a always,exit -F arch=b64 -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=1000 -F auid!=4294967295"
+                $test6 = $output -match "-k perm_mod"
+                $test7 = $output -match "-a always,exit -F arch=b32 -S setxattr -S lsetxattr -S fsetxattr -S removexattr -S lremovexattr -S fremovexattr -F auid>=1000 -F auid!=4294967295"
+                $test8 = $output -match "-k perm_mod"
+                $output2 = auditctl -l | grep perm_mod
+                $test9 = $output2 -match "-a always,exit -F arch=b64 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                $test10 = $output2 -match "-a always,exit -F arch=b32 -S chmod,fchmod,fchmodat -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                $test11 = $output2 -match "-a always,exit -F arch=b64 -S chown,fchown,lchown,fchownat -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                $test12 = $output2 -match "-a always,exit -F arch=b32 -S lchown,fchown,chown,fchownat -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                $test13 = $output2 -match "-a always,exit -F arch=b64 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                $test14 = $output2 -match "-a always,exit -F arch=b32 -S setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr -F auid>=1000 -F auid!=-1 -F key=perm_mod"
+                if($test1 -ne $null  -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null  -and $test7 -ne $null -and $test8 -ne $null -and $test9 -ne $null -and $test10 -ne $null -and $test11 -ne $null -and $test12 -ne $null -and $test13 -ne $null -and $test14 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.10"
+    Task = "Ensure unsuccessful unauthorized file access attempts are collected"
+    Test = {
+        try{
+            $bitVersion = uname -a
+            if($bitVersion -match "i386"){
+                $output = grep access /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=4294967295 -k access"
+                $test2 = $output -match "-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access"
+                $output2 = auditctl -l | grep access
+                $test3 = $output2 -match "-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -F key=access"
+                $test4 = $output2 -match "-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -F key=access"
+                if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            elseif($bitVersion -match "x86_64"){
+                $output = grep access /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=4294967295 -k access"
+                $test2 = $output -match "-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=4294967295 -k access"
+                $test3 = $output -match "-a always,exit -F arch=b64 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access"
+                $test4 = $output -match "-a always,exit -F arch=b32 -S creat -S open -S openat -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=4294967295 -k access"
+                $output2 = auditctl -l | grep access
+                $test5 = $output2 -match "-a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -F key=access"
+                $test6 = $output2 -match "-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat -F exit=-EACCES -F auid>=1000 -F auid!=-1 -F key=access"
+                $test7 = $output2 -match "-a always,exit -F arch=b64 -S open,truncate,ftruncate,creat,openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -F key=access"
+                $test8 = $output2 -match "-a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat -F exit=-EPERM -F auid>=1000 -F auid!=-1 -F key=access"
+                if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null -and $test5 -ne $null -and $test6 -ne $null -and $test7 -ne $null -and $test8 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.11"
+    Task = "Ensure use of privileged commands is collected"
+    Test = {
+        $results = @()
+        $mountPoints = mount | grep -v "/var/lib/snapd" | grep -v "cgroup on " | grep -v "noexec" | grep -v " fuse" | cut -f 3 -d ' '
+        foreach($mountPoint in $mountPoints){                                  
+            $res=bash -c "find $($mountPoint) -xdev \( -perm -4000 -o -perm -2000 \) -type f" 
+            $results += $res | awk '{print "-a always,exit -F path=" $1 " -F perm=x -F auid>=1000 -F auid!=4294967295 \ -k privileged" }'
+        }
+        $viablePaths = @()
+        $paths = @()
+        foreach($element in $results){
+            $viablePaths += $element | cut -d ' ' -f 4 | cut -d '=' -f 2 | grep "/etc/audit/rules.d/*.rules"
+            $paths += $element | cut -d ' ' -f 4 | cut -d '=' -f 2 | grep -v "/etc/audit/rules.d/*.rules"
+        }
+        $message = ""
+        foreach($line in $paths){
+            $message += "<br>$line"
+        }
+        if($viablePaths.Count -ne $results.Count){
+            return @{
+                Message = "Not all results are in path /etc/audit/rules.d/ and are .rules files. Non compliant files: <br>$($message)"
+                Status = "False"
+            }
+        }
+        return @{
+            Message = "Compliant"
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.12"
+    Task = "Ensure successful file system mounts are collected"
+    Test = {
+        try{
+            $bitVersion = uname -a
+            if($bitVersion -match "i386"){
+                $output = grep mounts /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=4294967295 -k mounts"
+                $output2 = auditctl -l | grep mounts
+                $test2 = $output2 -match "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=-1 -F key=mounts"
+                if($test1 -ne $null -and $test2 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            elseif($bitVersion -match "x86_64"){
+                $output = grep mounts /etc/audit/rules.d/*.rules
+                $test1 = $output -match "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=4294967295 -k mounts"
+                $test2 = $output -match "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=4294967295 -k mounts"
+                $output2 = auditctl -l | grep mounts
+                $test3 = $output2 -match "-a always,exit -F arch=b64 -S mount -F auid>=1000 -F auid!=-1 -F key=mounts"
+                $test4 = $output2 -match "-a always,exit -F arch=b32 -S mount -F auid>=1000 -F auid!=-1 -F key=mounts"
+                if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null -and $test4 -ne $null){
+                    return @{
+                        Message = "Compliant"
+                        Status = "True"
+                    }
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.13"
+    Task = "Ensure file deletion events by users are collected"
+    Test = {
+        try{
+            $test1 = grep delete /etc/audit/rules.d/*.rules
+            $test2 = auditctl -l | grep delete
+            if($test1 -match "-a always,exit -F arch=b32 -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=4294967295 -k delete" -and $test2 -match "-a always,exit -F arch=b32 -S unlink,rename,unlinkat,renameat -F auid>=1000 -F auid!=-1 -F key=delete"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.14"
+    Task = "Ensure changes to system administration scope (sudoers) is collected"
+    Test = {
+        try{
+            $test1 = grep scope /etc/audit/rules.d/*.rules
+            $test2 = auditctl -l | grep scope
+            if($test1 -match "-w /etc/sudoers -p wa -k scope" -and $test1 -match "-w /etc/sudoers.d/ -p wa -k scope" -and $test2 -match "-w /etc/sudoers -p wa -k scope" -and $test2 -match "-w /etc/sudoers.d -p wa -k scope" ){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.15"
+    Task = "Ensure system administrator command executions (sudo) are collected"
+    Test = {
+        try{
+            $test1 = grep actions /etc/audit/rules.d/*.rules
+            $test2 = auditctl -l | grep actions
+            $res1 = "-a always,exit -F arch=b64 -C euid!=uid -F euid=0 -Fauid>=1000 -F auid!=4294967295 -S execve -k actions"
+            $res2 = "-a always,exit -F arch=b32 -C euid!=uid -F euid=0 -Fauid>=1000 -F auid!=4294967295 -S execve -k actions"
+            $res3 = "-a always,exit -F arch=b64 -S execve -C uid!=euid -F euid=0 -F auid>=1000 -F auid!=-1 -F key=actions"
+            $res4 = "-a always,exit -F arch=b32 -S execve -C uid!=euid -F euid=0 -F auid>=1000 -F auid!=-1 -F key=actions"
+            if($test1 -match $res1 -and $test1 -match $res2 -and $test2 -match $res3 -and $test2 -match $res4){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.16"
+    Task = "Ensure kernel module loading and unloading is collected"
+    Test = {
+        $test1 = grep modules /etc/audit/rules.d/*.rules
+        $test2 = auditctl -l | grep modules
+        $res1 = "-w /sbin/insmod -p x -k modules"
+        $res2 = "-w /sbin/rmmod -p x -k modules"
+        $res3 = "-w /sbin/modprobe -p x -k modules"
+        $res4 = "-a always,exit -F arch=b64 -S init_module -S delete_module -k modules"
+        $res5 = "-w /sbin/insmod -p x -k modules"
+        $res6 = "-w /sbin/rmmod -p x -k modules"
+        $res7 = "-w /sbin/modprobe -p x -k modules"
+        $res8 = "-a always,exit -F arch=b64 -S init_module,delete_module -F key=modules"
+
+        if($test1 -match $res1 -and $test1 -match $res2 -and $test1 -match $res3 -and $test1 -match $res4 -and $test2 -match $res5 -and $test2 -match $res6 -and $test2 -match $res7 -and $test2 -match $res8){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        else{
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.17"
+    Task = "Ensure the audit configuration is immutable"
+    Test = {
+        $test1 = grep "^\s*[^#]" /etc/audit/rules.d/*.rules | tail -l
+        if($test1 -match "-e 2"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.1"
+    Task = "Ensure rsyslog is installed"
+    Test = {
+        $test1 = dpkg -s rsyslog
+        if($test1 -match "Status: install ok installed"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.2"
+    Task = "Ensure rsyslog Service is enabled"
+    Test = {
+        $test1 = systemctl is-enabled rsyslog
+        if($test1 -match "enabled"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.3"
+    Task = "Ensure logging is configured"
+    Test = {
+        $logginTypes = 0
+        $fileContent = cat /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+        if($fileContent -match "^*.emerg\s*:omusrmsg:*") {$logginTypes++}
+        if($fileContent -match "^auth,authpriv.*\s*/var/log/auth.log") {$logginTypes++}
+        if($fileContent -match "^mail.*\s*-/var/log/mail") {$logginTypes++}
+        if($fileContent -match "^mail.info\s*-/var/log/mail.info") {$logginTypes++}
+        if($fileContent -match "^mail.warning\s*-/var/log/mail.warn") {$logginTypes++}
+        if($fileContent -match "^mail.err\s*/var/log/mail.err") {$logginTypes++}
+        if($fileContent -match "^news.crit\s*-/var/log/news/news.crit") {$logginTypes++}
+        if($fileContent -match "^news.err\s*-/var/log/news/news.err") {$logginTypes++}
+        if($fileContent -match "^news.notice\s*-/var/log/news/news.notice") {$logginTypes++}
+        if($fileContent -match "^*.=warning;*.=err\s*-/var/log/warn") {$logginTypes++}
+        if($fileContent -match "^*.crit\s*/var/log/warn") {$logginTypes++}
+        if($fileContent -match "^*.*;mail.none;news.none\s*-/var/log/messages") {$logginTypes++}
+        if($fileContent -match "^local0,local1.*\s*-/var/log/localmessages") {$logginTypes++}
+        if($fileContent -match "^local2,local3.*\s*-/var/log/localmessages") {$logginTypes++}
+        if($fileContent -match "^local4,local5.*\s*-/var/log/localmessages") {$logginTypes++}
+        if($fileContent -match "^local6,local7.*\s*-/var/log/localmessages") {$logginTypes++}
+
+        if($logginTypes -le 5){
+            return @{
+                Message = "Not enough logging types supported! Currently: " + $logginTypes
+                Status = "False"
+            }
+        }
+        if($logginTypes -le 12){
+            return @{
+                Message = "Currently configured: " + $logginTypes
+                Status = "Warning"
+            }
+        }
+        return @{
+            Message = "Compliant. Currently: " + $logginTypes
+            Status = "True"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1.4"
+    Task = "Ensure rsyslog default file permissions configured"
+    Test = {
+        $test1 = cat /etc/rsyslog.conf /etc/rsyslog.d/*.conf | grep "^\s*\`$FileCreateMode"
+        if($test1 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+# [AuditTest] @{
+#     Id = "4.2.1.5"
+#     Task = "Ensure rsyslog is configured to send logs to a remote log host"
+#     Test = {
+#         $test1 = grep -E '^\s*([^#]+\s+)?action\(([^#]+\s+)?\btarget=\"?[^#"]+\"?\b' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+#         grep -E '^\s*([^#]+\s+)?action\(([^#]+\s+)?\btarget=\"?[^#"]+\"?\b' /etc/rsyslog.conf /etc/rsyslog.d/*.conf
+#         if($test1 -match "target"){
+#             return @{
+#                 Message = "Compliant"
+#                 Status = "True"
+#             }
+#         }
+#         return @{
+#             Message = "Not-Compliant"
+#             Status = "False"
+#         }
+#     }
+# }
+[AuditTest] @{
+    Id = "4.2.2.1"
+    Task = "Ensure journald is configured to send logs to rsyslog"
+    Test = {
+        $test1 = grep -e ForwardToSyslog /etc/systemd/journald.conf
+        if($test1 -match "ForwardToSyslog=yes"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2.2"
+    Task = "Ensure journald is configured to compress large log files"
+    Test = {
+        $test1 = grep -e Compress /etc/systemd/journald.conf
+        if($test1 -match "Compress=yes"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2.3"
+    Task = "Ensure journald is configured to write logfiles to persistent disk"
+    Test = {
+        $test1 = grep -e Storage /etc/systemd/journald.conf
+        if($test1 -match "Storage=persistent"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.3"
+    Task = "Ensure permissions on all logfiles are configured"
+    Test = {
+        $fileListAll = find /var/log -type f -ls
+        $fileListFiltered = find /var/log -type f -ls | grep "\-....\-\-\-\-\-"
+        if($fileListAll.Count -eq $fileListFiltered.Count){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "$($fileListAll.Count - $fileListFiltered.Count) files grant too many permissions"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.3"
+    Task = "Ensure logrotate is configured"
+    Test = {
+        return @{
+            Message = "Review /etc/logrotate.conf and /etc/logrotate.d/rsyslog and verify logs are rotated according to site policy."
+            Status = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.4"
+    Task = "Ensure logrotate assigns appropriate permissions"
+    Test = {
+        $test1 = grep -Es "^\s*create\s+\S+" /etc/logrotate.conf /etc/logrotate.d/* | grep -E -v "\s(0)?[0-6][04]0\s"
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1"
+    Task = "Ensure cron daemon is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if($test1 -eq "enabled" -and $test2 -match "running"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $test1 = stat /etc/crontab
+        if($test1 -eq "Access: (0600/-rw-------)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.3"
+    Task = "Ensure permissions on /etc/cron.hourly are configured"
+    Test = {
+        $test1 = stat /etc/cron.hourly/
+        if($test1 -eq "Access: (0700/drwx------)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $test1 = stat /etc/cron.daily/
+        if($test1 -eq "Access: (0700/drwx------)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $test1 = stat /etc/cron.weekly/
+        if($test1 -eq "Access: (0700/drwx------)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $test1 = stat /etc/cron.monthly/
+        if($test1 -eq "Access: (0700/drwx------)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $test1 = stat /etc/cron.d/
+        if($test1 -eq "Access: (0700/drwx------)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.8"
+    Task = "Ensure cron is restricted to authorized users"
+    Test = {
+        $test1 = stat /etc/cron.deny
+        $test1 = $?
+        $test2 = stat /etc/cron.allow
+        if($test1 -match "False" -and $test2 -match "Access: (0640/-rw-r-----)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.9"
+    Task = "Ensure at is restricted to authorized users"
+    Test = {
+        $test1 = stat /etc/at.deny
+        $test1 = $?
+        $test2 = stat /etc/at.allow | grep 0640
+        if($test1 -match "False" -and $test2 -eq "Access: (0640/-rw-r-----)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1"
+    Task = "Ensure sudo is installed"
+    Test = {
+        $test1 = dpkg -s sudo
+        if($test1 -match "Status: install ok installed"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.2"
+    Task = "Ensure sudo commands use pty"
+    Test = {
+        $test1 = grep -Ei '^\s*Defaults\s+([^#]+,\s*)?use_pty(,\s+\S+\s*)*(\s+#.*)?$' /etc/sudoers /etc/sudoers.d/*
+        if($test1 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.3"
+    Task = "Ensure sudo log file exists"
+    Test = {
+        $test1 = grep -Ei '^\s*Defaults\s+logfile=\S+' /etc/sudoers /etc/sudoers.d/*
+        if($test1 -ne $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1"
+    Task = "Ensure permissions on /etc/ssh/sshd_config are configured"
+    Test = {
+        try{
+            try{
+                $test1 = stat /etc/ssh/sshd_config | grep 0600
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+
+            if($test1 -eq "Access: (0600/-rw-------)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Path not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2"
+    Task = "Ensure permissions on SSH private host key files are configured"
+    Test = {
+        $res = bash -c "find /etc/ssh -xdev -type f -name 'ssh_host_*_key' -exec stat {} \;" | grep "Access:\s*(0600/-rw-------)\s*Uid:\s*(\s*0/\s*root)\s*Gid:\s*(\s*0/\s*root)\s*"
+        if($res.count -eq 3){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3"
+    Task = "Ensure permissions on SSH public host key files are configured"
+    Test = {
+        $res = bash -c "find /etc/ssh -xdev -type f -name 'ssh_host_*_key.pub' -exec stat {} \;" | grep "Access:\s*(0644/-rw-r--r--)\s*Uid:\s*(\s*0/\s*root)\s*Gid:\s*(\s*0/\s*root)\s*"
+        if($res.count -eq 3){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.4"
+    Task = "Ensure SSH access is limited"
+    Test = {
+        try{
+            $result = bash -c "sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Ei '^\s*(allow|deny)(users|groups)\s+\S+'"
+            if($result -match "allowusers" -or $result -match "allowgroups" -or $result -match "denyusers" -or $result -match "denygroups"){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.5"
+    Task = "Ensure SSH LogLevel is appropriate"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep loglevel
+            try{
+                $test2 = grep -is 'loglevel' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf | grep -Evi '(VERBOSE|INFO)'
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if(($test1 -match "loglevel VERBOSE" -or $test1 -match "loglevel INFO") -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.6"
+    Task = "Ensure SSH X11 forwarding is disabled"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i x11forwarding
+            try{
+                $test2 = grep -Eis '^\s*x11forwarding\s+yes' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "x11forwarding no" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.7"
+    Task = "Ensure SSH MaxAuthTries is set to 4 or less"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep maxauthtries | cut -d ' ' -f 2
+            try{
+                $test2 = grep -Eis '^\s*maxauthtries\s+([5-9]|[1-9][0-9]+)' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -le 4 -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.8"
+    Task = "Ensure SSH IgnoreRhosts is enabled"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep ignorerhosts
+            try{
+                $test2 = grep -Eis '^\s*ignorerhosts\s+no\b' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "ignorerhosts yes" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.10"
+    Task = "Ensure SSH root login is disabled"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permitrootlogin
+            try{
+                $test2 = grep -Eis '^\s*PermitRootLogin\s+yes' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "permitrootlogin no" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.11"
+    Task = "Ensure SSH PermitEmptyPasswords is disabled"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permitemptypasswords
+            try{
+                $test2 = grep -Eis '^\s*PermitEmptyPasswords\s+yes' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "permitemptypasswords no" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.12"
+    Task = "Ensure SSH PermitUserEnvironment is disabled"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep permituserenvironment
+            try{
+                $test2 = grep -Eis '^\s*PermitUserEnvironment\s+yes' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "permituserenvironment no" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.13"
+    Task = "Ensure only strong Ciphers are used"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Ei '^\s*ciphers\s+([^#]+,)?(3des-cbc|aes128-cbc|aes192-cbc|aes256-cbc|arcfour|arcfour128|arcfour256|blowfish-cbc|cast128-cbc|rijndael-cbc@lysator.liu.se)\b'
+            try{
+                $test2 = grep -Eis '^\s*ciphers\s+([^#]+,)?(3des-cbc|aes128-cbc|aes192-cbc|aes256-cbc|arcfour|arcfour128|arcfour256|blowfish-cbc|cast128-cbc|rijndael-cbc@lysator.liu.se)\b' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -eq $null -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.14"
+    Task = "Ensure only strong MAC algorithms are used"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Ei '^\s*macs\s+([^#]+,)?(hmac-md5|hmac-md5-96|hmac-ripemd160|hmac-sha1|hmac-sha1-96|umac-64@openssh\.com|hmac-md5-etm@openssh\.com|hmac-md5-96-etm@openssh\.com|hmac-ripemd160-etm@openssh\.com|hmac-sha1-etm@openssh\.com|hmac-sha1-96-etm@openssh\.com|umac-64-etm@openssh\.com|umac-128-etm@openssh\.com)\b'
+            try{
+                $test2 = grep -Eis '^\s*macs\s+([^#]+,)?(hmac-md5|hmac-md5-96|hmac-ripemd160|hmac-sha1|hmac-sha1-96|umac-64@openssh\.com|hmac-md5-etm@openssh\.com|hmac-md5-96-etm@openssh\.com|hmac-ripemd160-etm@openssh\.com|hmac-sha1-etm@openssh\.com|hmac-sha1-96-etm@openssh\.com|umac-64-etm@openssh\.com|umac-128-etm@openssh\.com)\b' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -eq $null -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.15"
+    Task = "Ensure only strong Key Exchange algorithms are used"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -Ei'^\s*kexalgorithms\s+([^#]+,)?(diffie-hellman-group1-sha1|diffie-hellman-group14-sha1|diffie-hellman-group-exchange-sha1)\b'
+            try{
+                $test2 = grep -Ei '^\s*kexalgorithms\s+([^#]+,)?(diffie-hellman-group1-sha1|diffie-hellman-group14-sha1|diffie-hellman-group-exchange-sha1)\b' /etc/ssh/sshd_config
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -eq $null -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.16"
+    Task = "Ensure SSH Idle Timeout Interval is configured"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep clientaliveinterval | cut -d ' ' -f 2
+            $test2 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep clientalivecountmax | cut -d ' ' -f 2
+            try{
+                $test3 = grep -Eis '^\s*clientaliveinterval\s+(0|3[0-9][1-9]|[4-9][0-9][0-9]|[1-9][0-9][0-9][0-9]+|[6-9]m|[1-9][0-9]+m)\b' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+                $test4 = grep -Eis '^\s*ClientAliveCountMax\s+(0|[4-9]|[1-9][0-9]+)\b' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if(($test1 -ge 1 -and $test1 -le 300) -and ($test2 -ge 1 -and $test2 -le 3) -and $test3 -eq $null -and $test4 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.17"
+    Task = "Ensure SSH LoginGraceTime is set to one minute or less"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep logingracetime | cut -d ' ' -f 2
+            try{
+                $test2 = grep -Eis '^\s*LoginGraceTime\s+(0|6[1-9]|[7-9][0-9]|[1-9][0-9][0-9]+|[^1]m)' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if(($test1 -ge 1 -and $test1 -le 60) -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.18"
+    Task = "Ensure SSH warning banner is configured"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep banner
+            try{
+                $test2 = grep -Eis '^\s*Banner\s+"?none\b' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "banner /etc/issue.net" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.19"
+    Task = "Ensure SSH PAM is enabled"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i usepam
+            try{
+                $test2 = grep -Eis '^\s*UsePAM\s+no' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "usepam yes" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.20"
+    Task = "Ensure SSH AllowTcpForwarding is disabled"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i allowtcpforwarding
+            try{
+                $test2 = grep -Eis '^\s*AllowTcpForwarding\s+yes\b' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -match "allowtcpforwarding no" -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.21"
+    Task = "Ensure SSH MaxStartups is configured"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i maxstartups        
+            try{
+                $test2 = grep -Eis '^\s*maxstartups\s+(((1[1-9]|[1-9][0-9][0-9]+):([0-9]+):([0-9]+))|(([0-9]+):(3[1-9]|[4-9][0-9]|[1-9][0-9][0-9]+):([0-9]+))|(([0-9]+):([0-9]+):(6[1-9]|[7-9][0-9]|[1-9][0-9][0-9]+)))' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            $value1 = $test1 | cut -d ':' -f 1
+            $value2 = $test1 | cut -d ':' -f 2
+            $value3 = $test1 | cut -d ':' -f 3
+            if($value1 -ge 10 -and $value2 -ge 30 -and $value3 -ge 60 -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.22"
+    Task = "Ensure SSH MaxSessions is limited"
+    Test = {
+        try{
+            $test1 = sshd -T -C user=root -C host="$(hostname)" -C addr="$(grep $(hostname) /etc/hosts | awk '{print $1}')" | grep -i maxsessions | cut -d ' ' -f 2
+            
+            try{
+                $test2 = grep -Eis '^\s*MaxSessions\s+(1[1-9]|[2-9][0-9]|[1-9][0-9][0-9]+)' /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf
+            }
+            catch{
+                return @{
+                    Message = "Path not found!"
+                    Status = "False"
+                }
+            }
+            if($test1 -le 10 -and $test2 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command doesn't exist"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1"
+    Task = "Ensure password creation requirements are configured"
+    Test = {
+        $test1 = grep '^\s*minlen\s*' /etc/security/pwquality.conf | cut -d ' ' -f 3
+        $test2 = grep '^\s*minclass\s*' /etc/security/pwquality.conf | cut -d ' ' -f 3
+        $test3 = grep -E '^\s*password\s+(requisite|required)\s+pam_pwquality\.so\s+(\S+\s+)*retry=[1-3]\s*(\s+\S+\s*)*(\s+#.*)?$' /etc/pam.d/common-password | cut -d '=' -f 2
+        if($test1 -ge 14 -and $test2 -eq 4 -and $test3 -le 3){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2"
+    Task = "Ensure lockout for failed password attempts is configured"
+    Test = {
+        $test1 = grep "pam_tally2" /etc/pam.d/common-auth
+        $test2 = grep -E "pam_(tally2|deny)\.so" /etc/pam.d/common-account
+        if($test1 -ne $null -and $test2 -match "pam_deny.so" -and $test2 -match "pam_tally2.so"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.3"
+    Task = "Ensure password reuse is limited"
+    Test = {
+        $test1 = grep -E '^\s*password\s+required\s+pam_pwhistory\.so\s+([^#]+\s+)?remember=([5-9]|[1-9][0-9]+)\b' /etc/pam.d/common-password | cut -d '=' -f 2
+        if($test1 -ge 5){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.4"
+    Task = "Ensure password hashing algorithm is SHA-512"
+    Test = {
+        $test1 = grep -E '^\s*password\s+(\[success=1\s+default=ignore\]|required)\s+pam_unix\.so\s+([^#]+\s+)?sha512\b' /etc/pam.d/common-password
+        if($test1 -match "password" -and $test1 -match "success=1" -and $test1 -match "default=ignore" -and $test1 -match "sha512"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.1.1"
+    Task = "Ensure minimum days between password changes is configured"
+    Test = {
+        $test1 = grep PASS_MIN_DAYS /etc/login.defs | cut -d ' ' -f 2
+        $test2 = awk -F : '(/^[^:]+:[^!*]/ && $4 < 1){print $1 " " $4}' /etc/shadow
+        if($test1 -ge 1 -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.1.2"
+    Task = "Ensure password expiration is 365 days or less"
+    Test = {
+        try{
+            $res=grep PASS_MAX_DAYS /etc/login.defs | tail -1 | cut -d ' ' -f 1
+            $res=$res.substring($res.Length -3)
+
+            $min=grep PASS_MIN_DAYS /etc/login.defs | tail -1 | cut -d ' ' -f 2
+            $min=$min.substring($min.Length -1)
+
+            $test1 = awk -F: '(/^[^:]+:[^!*]/ && ($5>365 || $5~/([0-1]|-1|\s*)/)){print $1 " " $5}' /etc/shadow
+            if($res -le 365 -and $res -gt $min -and $test1 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.1.3"
+    Task = "Ensure password expiration warning days is 7 or more"
+    Test = {
+        $test1 = grep PASS_WARN_AGE /etc/login.defs | cut -d ' ' -f 2
+        $test2 = bash -c "awk -F: '(/^[^:]+:[^!*]/ && `$6<7){print `$1 " " `$6}' /etc/shadow"
+        if($test1 -ge 7 -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.1.4"
+    Task = "Ensure inactive password lock is 30 days or less"
+    Test = {
+        $test1 = useradd -D | grep INACTIVE | cut -d '=' -2
+        if($test1 -le 30){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.1.5"
+    Task = "Ensure all users last password change date is in the past"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-5.5.1.5.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.2"
+    Task = "Ensure system accounts are secured"
+    Test = {
+        $test1 = awk -F: '$1!~/(root|sync|shutdown|halt|^\+)/ && $3<'"$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)"' && $7!~/((\/usr)?\/sbin\/nologin)/ && $7!~/(\/bin)?\/false/ {print}' /etc/passwd
+        $test2 = awk -F: '($1!~/(root|^\+)/ && $3<'"$(awk '/^\s*UID_MIN/{print $2}'/etc/login.defs)"') {print $1}' /etc/passwd | xargs -I '{}' passwd -S '{}' | awk '($2!~/LK?/) {print $1}'
+        if($test1 -eq $null -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.5.3"
+    Task = "Ensure default group for the root account is GID 0"
+    Test = {
+        $test1 = grep "^root:" /etc/passwd | cut -f4 -d ':'
+        if($test1 -eq 0){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.7"
+    Task = "Ensure access to the su command is restricted"
+    Test = {
+        $test1 = grep pam_wheel.so /etc/pam.d/su
+
+        if($test1 -match "^\s*auth\s+required\s+pam_wheel.so\s+use_uid\s+group="){
+            $test2 = $test1 | cut -d '=' -f 2
+            $test3 = grep $test2 /etc/group | cut -d ':' -f 4
+            if($test3 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.1"
+    Task = "Audit system file permissions"
+    Test = {
+        $test1 = dpkg --verify $(dpkg --get-selections | awk '{print $1}')
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.2"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat /etc/passwd
+        if($test1 -eq "Access: (0644/-rw-r--r--)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.3"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat /etc/passwd-
+        if($test1 -eq "Access: (0644/-rw-r--r--)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.4"
+    Task = "Ensure permissions on /etc/group are configured"
+    Test = {
+        $test1 = stat /etc/group
+        if($test1 -eq "Access: (0644/-rw-r--r--)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.5"
+    Task = "Ensure permissions on /etc/group- are configured"
+    Test = {
+        $test1 = stat /etc/group- | grep 0644
+        if($test1 -eq "Access: (0644/-rw-r--r--)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.6"
+    Task = "Ensure permissions on /etc/shadow are configured"
+    Test = {
+        $test1 = stat /etc/shadow | grep 0640
+        if($test1 -eq "Access: (0640/-rw-r-----)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+0/\s+root)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.7"
+    Task = "Ensure permissions on /etc/shadow- are configured"
+    Test = {
+        $test1 = stat /etc/shadow- | grep 0640
+        if($test1 -eq "Access: (0640/-rw-r-----)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+42/\s+shadow)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.8"
+    Task = "Ensure permissions on /etc/gshadow are configured"
+    Test = {
+        $test1 = stat /etc/gshadow | grep 0640
+        if($test1 -eq "Access: (0640/-rw-r-----)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+42/\s+shadow)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.9"
+    Task = "Ensure permissions on /etc/gshadow- are configured"
+    Test = {
+        $test1 = stat /etc/gshadow- | grep 0640
+        if($test1 -eq "Access: (0640/-rw-r-----)\s+Uid: (\s+0/\s+root)\s+Gid: (\s+42/\s+shadow)"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.10"
+    Task = "Ensure no world writable files exist"
+    Test = {
+        #$partitions = mapfile -t partitions < (sudo fdisk -l | grep -o '/dev/[^ ]*')
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.11"
+    Task = "Ensure no unowned files or directories exist"
+    Test = {
+        try{
+            $test1 = df --local -P | awk "{if (NR -ne 1) { print `$6 }}" | xargs -I '{}' find '{}' -xdev -nouser
+            if($test1 -eq $null){
+                return @{
+                    Message = "Compliant"
+                    Status = "True"
+                }
+            }
+            return @{
+                Message = "Not-Compliant"
+                Status = "False"
+            }
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }  
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.12"
+    Task = "Ensure no ungrouped files or directories exist"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -nogroup
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.13"
+    Task = "Audit SUID executables"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -4000
+        $message = ""
+        foreach($line in $test1){
+            $message += "<br>$line"
+        }
+        return @{
+            Message = "Please review following list of files: $($message)"
+            Status = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.14"
+    Task = "Audit SGID executables"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -2000
+        $message = ""
+        foreach($line in $test1){
+            $message += "<br>$line"
+        }
+        return @{
+            Message = "Please review following list of files: $($message)"
+            Status = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1"
+    Task = "Ensure accounts in /etc/passwd use shadowed passwords"
+    Test = {
+        $test1 = awk -F: '($2 != "x" ) { print $1 " is not set to shadowed passwords "}'/etc/passwd
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.2"
+    Task = "Ensure password fields are not empty"
+    Test = {
+        $test1 = awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow
+        if($test1 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.3"
+    Task = "Ensure all groups in /etc/passwd exist in /etc/group"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.3.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.4"
+    Task = "Ensure all users' home directories exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.4.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+# [AuditTest] @{
+#     Id = "6.2.5"
+#     Task = "Ensure users own their home directories"
+#     Test = {
+#         Write-Error "Test"
+#         $parentPath = Split-Path -Parent -Path $PSScriptRoot
+#         $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.5.sh"
+#         $result=bash $path
+#         Write-Error "Test"
+#         if($result -eq $null){
+#             return @{
+#                 Message = "Compliant"
+#                 Status = "True"
+#             }
+#         }
+#         return @{
+#             Message = "Not-Compliant"
+#             Status = "False"
+#         }
+#     }
+# }
+[AuditTest] @{
+    Id = "6.2.6"
+    Task = "Ensure users' home directories permissions are 750 or more restrictive"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.6.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.7"
+    Task = "Ensure users' dot files are not group or world writable"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.7.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.8"
+    Task = "Ensure no users have .netrc files"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.8.sh"
+        $result=bash $path
+        if($result -match "FAILED"){
+            return @{
+                Message = "Not-Compliant. Permissions need to get updated."
+                Status = "False"
+            }
+        }
+        if($result -match "WARNING" -and $result -notmatch "FAILED"){
+            return @{
+                Message = "Some changed should be made."
+                Status = "Warning"
+            }
+        }
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.9"
+    Task = "Ensure no users have .forward files"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.9.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.10"
+    Task = "Ensure no users have .rhosts files"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.10.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.11"
+    Task = "Ensure root is the only UID 0 account"
+    Test = {
+        $test1 = awk -F: '($3 == 0) { print $1 }' /etc/passwd
+        if($test1 -match "root"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.12"
+    Task = "Ensure root PATH Integrity"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.12.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.13"
+    Task = "Ensure no duplicate UIDs exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.13.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.14"
+    Task = "Ensure no duplicate GIDs exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.14.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.15"
+    Task = "Ensure no duplicate user names exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.15.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.16"
+    Task = "Ensure no duplicate group names exist"
+    Test = {
+        $parentPath = Split-Path -Parent -Path $PSScriptRoot
+        $path = $parentPath+"/Helpers/ShellScripts/CIS-Ubuntu-6.2.16.sh"
+        $result=bash $path
+        if($result -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.17"
+    Task = "Ensure shadow group is empty"
+    Test = {
+        $test1 = awk -F: '($1=="shadow") {print $NF}' /etc/group
+        $test2 = awk -F: -v GID="$(awk -F: '($1=="shadow") {print $3}' /etc/group)" '($4==GID) {print $1}' /etc/passwd
+        if($test1.Length -eq 0 -and $test2 -eq $null){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPAuditor/AuditGroups/Ubuntu Linux 22.04-CIS-2.0.0.ps1 b/ATAPAuditor/AuditGroups/Ubuntu Linux 22.04-CIS-2.0.0.ps1
new file mode 100644
index 0000000..a150f34
--- /dev/null
+++ b/ATAPAuditor/AuditGroups/Ubuntu Linux 22.04-CIS-2.0.0.ps1	
@@ -0,0 +1,4109 @@
+. "$RootPath\Helpers\LinuxHelper.ps1"
+
+$rcFirewallStatus1 = "Using nftables"
+$rcFirewallStatus2 = "Using ufw"
+$rcFirewallStatus3 = "Using iptables"
+
+$retCompliant = @{
+    Message = $rcCompliant
+    Status = $rcTrue
+}
+$retNonCompliant = @{
+    Message = $rcNonCompliant
+    Status = $rcFalse
+}
+$retCompliantIPv6Disabled = @{
+    Message = $rcCompliantIPv6isDisabled
+    Status = $rcTrue
+}
+$retNonCompliantManualReviewRequired = @{
+    Message = $rcNonCompliantManualReviewRequired
+    Status = $rcNone
+}
+$retUsingFW1 = @{
+    Message = $rcFirewallStatus1
+    Status = $rcNone
+}
+$retUsingFW2 = @{
+    Message = $rcFirewallStatus2
+    Status = $rcNone
+}
+$retUsingFW3 = @{
+    Message = $rcFirewallStatus3
+    Status = $rcNone
+}
+
+# Firewall evaluation
+function GetFirewallStatus {
+    # 0 - undefined
+	# 1 - using nftables
+	# 2 - using ufw
+	# 3 - using iptables
+
+	$t_UFW = Test-PackageInstalled -PackageName ufw
+	$t_NFT = Test-PackageInstalled -PackageName nftables
+	$t_IPT = Test-PackageInstalled -PackageName iptables
+	$t_UFW_en = systemctl is-enabled ufw 2>/dev/null
+	if ($t_UFW){
+        $t_UFW_inac = ufw status 2>/dev/null | grep -iE "Status: Ina[ck]tive?"
+        $t_UFW_ac = ufw status 2>/dev/null | grep -iE "Status: A[ck]tive?"
+    } else {
+        $t_UFW_ac = $null
+        $t_UFW_inac = $null
+    }
+	$t_NFT_en = systemctl is-enabled nftables.service 2>/dev/null
+	
+	# Testing 1 - nftable installed, ufw not or inactive
+	if ($t_NFT -and ! $t_IPT -and (! $t_UFW -or $t_UFW_inac -ne $null) -and $t_NFT_en -match "enabled"){
+        return 1
+    }
+	
+	# Testing 2 - ufw, iptables installed, nftables not 
+	if ( $t_UFW -and $t_UFW_ac -ne $null -and $t_UFW_en -match "enabled" -and $t_IPT -and ! $t_NFT){
+        return 2
+    }
+	
+	# Testing 3 - only iptables
+	if (! $t_NFT -and ! $t_UFW -and $t_IPT){
+        return 3
+    }
+
+    return 0
+}
+
+$FirewallStatus = GetFirewallStatus
+
+$parentPath = Split-Path -Parent -Path $PSScriptRoot
+$scriptPath = $parentPath + "/Helpers/ShellScripts/Ubuntu22.04_Debian12/"
+$commonPath = $parentPath + "/Helpers/ShellScripts/common/"
+
+[AuditTest] @{
+    Id = "1.1.1.1"
+    Task = "Ensure cramfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.2"
+    Task = "Ensure freevxfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.3"
+    Task = "Ensure hfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.4"
+    Task = "Ensure hfsplus kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.5"
+    Task = "Ensure jffs2 kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.6"
+    Task = "Ensure squashfs kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.7"
+    Task = "Ensure udf kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.1.8"
+    Task = "Ensure usb-storage kernel module is not available"
+    Test = {
+        $script = $commonPath + "1.1.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.1"
+    Task = "Ensure /tmp is a separate partition"
+    Test = {
+        $result = findmnt --kernel /tmp
+        if($result -match "/tmp"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.2"
+    Task = "Ensure nodev option set on /tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.3"
+    Task = "Ensure nosuid option set on /tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.1.4"
+    Task = "Ensure noexec option set on /tmp partition"
+    Test = {
+        $result =  findmnt --kernel /tmp | grep noexec
+        if($result -match "noexec"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.2.1"
+    Task = "Ensure /dev/shm is a separate partition"
+    Test = {
+        $script = $scriptPath + "1.1.2.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+[AuditTest] @{
+    Id = "1.1.2.2.2"
+    Task = "Ensure nodev option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.2.3"
+    Task = "Ensure nosuid option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.2.4"
+    Task = "Ensure noexec option set on /dev/shm partition"
+    Test = {
+        $script = $commonPath + "1.1.2.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.3.1"
+    Task = "Ensure separate partition exists for /home"
+    Test = {
+        $result = findmnt --kernel /home
+        if($result -match "/home"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.3.2"
+    Task = "Ensure nodev option set on /home partition"
+    Test = {
+        $script = $commonPath + "1.1.2.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.3.3"
+    Task = "Ensure nosuid option set on /home partition"
+    Test = {
+        $script = $commonPath + "1.1.2.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.4.1"
+    Task = "Ensure separate partition exists for /var"
+    Test = {
+        $result = findmnt --kernel /var
+        if($result -match !$null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.4.2"
+    Task = "Ensure nodev option set on /var partition"
+    Test = {
+        $script = $commonPath + "1.1.2.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.4.3"
+    Task = "Ensure nosuid option set on /var partition"
+    Test = {
+        $script = $commonPath + "1.1.2.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.1"
+    Task = "Ensure separate partition exists for /var/tmp"
+    Test = {
+        $result = findmnt --kernel /var/tmp
+        if($result -match "/var/tmp"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.2"
+    Task = "Ensure nodev option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.3"
+    Task = "Ensure nosuid option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.5.4"
+    Task = "Ensure noexec option set on /var/tmp partition"
+    Test = {
+        $script = $commonPath + "1.1.2.5.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.1"
+    Task = "Ensure separate partition exists for /var/log"
+    Test = {
+        $result = findmnt --kernel /var/log
+        if($result -match !$null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.2"
+    Task = "Ensure nodev option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.3"
+    Task = "Ensure nosuid option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.6.4"
+    Task = "Ensure noexec option set on /var/log partition"
+    Test = {
+        $script = $commonPath + "1.1.2.6.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.1"
+    Task = "Ensure separate partition exists for /var/log/audit"
+    Test = {
+        $result = findmnt --kernel /var/log/audit
+        if($result -match "/var/log/audit"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.2"
+    Task = "Ensure nodev option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.3"
+    Task = "Ensure nosuid option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.1.2.7.4"
+    Task = "Ensure noexec option set on /var/log/audit partition"
+    Test = {
+        $script = $commonPath + "1.1.2.7.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1.1"
+    Task = "Ensure GPG keys are configured"
+    Test = {
+        $result = apt-key list
+        if($result -ne $null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.2.1.2"
+    Task = "Ensure package manager repositories are configured"
+    Test = {
+        $result = apt-cache policy
+        if($result -ne $null){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.2.2.1"
+    Task = "Ensure updates, patches, and additional security software are installed"
+    Test = {
+        $output = apt -s upgrade
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.1"
+    Task = "Ensure AppArmor is installed"
+    Test = {
+        $result = Test-PackageInstalled -PackageName apparmor 2>/dev/null
+        if($result){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.2"
+    Task = "Ensure AppArmor is enabled in the bootloader configuration"
+    Test = {
+        $script = $scriptPath + "1.3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.3"
+    Task = "Ensure all AppArmor Profiles are in enforce or complain mode"
+    Test = {
+        $profileMode1 = apparmor_status | grep profiles | sed '1!d' | cut -d ' ' -f 1
+        $profileMode2 = apparmor_status | grep profiles | sed '2!d' | cut -d ' ' -f 1
+        $profileMode3 = apparmor_status | grep profiles | sed '3!d' | cut -d ' ' -f 1
+        $result = expr $profileMode3 + $profileMode2
+        
+        $unconfinedProcesses = apparmor_status | grep processes | sed '4!d' | cut -d ' ' -f 1
+
+        if($result -eq $profileMode1 -and $unconfinedProcesses -eq 0){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.3.1.4"
+    Task = "Ensure all AppArmor Profiles are enforcing"
+    Test = {
+        $script = $scriptPath + "1.3.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.4.1"
+    Task = "Ensure bootloader password is set"
+    Test = {
+        $result1 = grep "^set superusers" /boot/grub/grub.cfg
+        $result2 = grep "^password" /boot/grub/grub.cfg
+        if($result1 -match "set superusers=" -and $result2 -match "password_pbkdf2"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.4.2"
+    Task = "Ensure access to bootloader config is configured"
+    Test = {
+        $script = $commonPath + "1.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.1"
+    Task = "Ensure address space layout randomization is enabled"
+    Test = {
+        $script = $commonPath + "1.5.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.2"
+    Task = "Ensure ptrace_scope is restricted"
+    Test = {
+        $script = $commonPath + "1.5.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+
+
+[AuditTest] @{
+    Id = "1.5.3"
+    Task = "Ensure core dumps are restricted"
+    Test = {
+        $script = $scriptPath + "1.5.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.5.4"
+    Task = "Ensure prelink is not installed"
+    Test = {
+        $test = Test-PackageInstalled -PackageName prelink
+        if(! $test){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "1.5.5"
+    Task = "Ensure Automatic Error Reporting is not enabled"
+    Test = {
+        $result1 = dpkg-query -s apport > /dev/null 2>&1 && grep -Psi -- '^\h*enabled\h*=\h*[^0]\b' /etc/default/apport
+        $result2 = systemctl is-active apport.service | grep '^active'
+        if($result1 -eq $null -and $result2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.1"
+    Task = "Ensure message of the day is configured properly"
+    Test = {
+        $script = $scriptPath + "1.6.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.2"
+    Task = "Ensure local login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue
+
+	if($output1 -eq $null){
+	    return $retCompliant
+	}
+
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue
+        
+        if($output1 -ne $null -and $output2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.3"
+    Task = "Ensure remote login warning banner is configured properly"
+    Test = {
+        $output1 = cat /etc/issue.net
+
+	if($output1 -eq $null){
+	    return $retCompliant
+	}
+
+        $output2 = grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net
+        
+        if($output1 -ne $null -and $output2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.4"
+    Task = "Ensure access to /etc/motd is configured"
+    Test = {
+        $script = $scriptPath + "1.6.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "1.6.5"
+    Task = "Ensure access to /etc/issue is configured"
+    Test = {
+        $output = stat -c '%#a' /etc/issue | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.6.6"
+    Task = "Ensure access to /etc/issue.net is configured"
+    Test = {
+        $output = stat -c '%#a' /etc/issue.net | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.1"
+    Task = "Ensure GDM is removed"
+    Test = {
+        $test = Test-PackageInstalled -PackageName gdm3
+        if(! $test){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.2"
+    Task = "Ensure GDM login banner is configured"
+    Test = {
+        $path = $scriptPath + "1.8.2.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.3"
+    Task = "Ensure GDM disable-user-list option is enabled"
+    Test = {
+        $path = $scriptPath + "1.8.3.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.4"
+    Task = "Ensure GDM screen locks when the user is idle"
+    Test = {
+        $path = $scriptPath + "1.8.4.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.5"
+    Task = "Ensure GDM screen locks cannot be overridden"
+    Test = {
+        $path = $scriptPath + "1.8.5.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.6"
+    Task = "Ensure GDM automatic mounting of removable media is disabled"
+    Test = {
+        $path = $scriptPath + "1.8.6.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.7"
+    Task = "Ensure GDM disabling automatic mounting of removable media is not overridden"
+    Test = {
+        $path = $scriptPath + "1.8.7.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.8"
+    Task = "Ensure GDM autorun-never is enabled"
+    Test = {
+        $path = $scriptPath + "1.8.8.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.9"
+    Task = "Ensure GDM autorun-never is not overridden"
+    Test = {
+        $path = $scriptPath + "1.8.9.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "1.7.10"
+    Task = "Ensure XDCMP is not enabled"
+    Test = {
+        $script = $scriptPath + "1.7.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.1.1"
+    Task = "Ensure autofs services are not in use"
+    Test = {
+        $test = Test-PackageInstalled -PackageName autofs
+        if(! $test){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null autofs.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.2"
+    Task = "Ensure avahi daemon services are not in use"
+    Test = {
+        $status = Test-PackageInstalled -PackageName avahi-daemon
+        if(! $status){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null avahi-daemon.socket
+            if(! $?){
+                $test3 = systemctl is-enabled 2>/dev/null avahi-daemon.service
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.3"
+    Task = "Ensure dhcp server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName isc-dhcp-server
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null isc-dhcp-server.service
+            if(! $?){
+                $test2 = systemctl is-enabled 2>/dev/null isc-dhcp-server6.service
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.4"
+    Task = "Ensure dns server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName bind9
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null bind9.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.5"
+    Task = "Ensure dnsmasq server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName dnsmasq
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null dnsmasq.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.6"
+    Task = "Ensure ftp server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName vsftpd
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null vsftpd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.7"
+    Task = "Ensure ldap server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName slapd
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null slapd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.8"
+    Task = "Ensure message access server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName dovecot-imapd
+        $test2 = Test-PackageInstalled -PackageName dovecot-pop3d
+        if(! $test1 -and ! $test2){
+            return $retCompliant
+        }
+        else{
+            $test3 = systemctl is-enabled 2>/dev/null dovecot.socket
+            if(! $?){
+                $test4 = systemctl is-enabled 2>/dev/null dovecot.service
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.9"
+    Task = "Ensure network file system services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName nfs-kernel-server
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null nfs-kernel.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.10"
+    Task = "Ensure nis server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName ypserv
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null ypserv.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.11"
+    Task = "Ensure print server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName cups
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null cups.service
+            if(! $?){
+                $test3 = systemctl is-enabled 2>/dev/null cups.socket
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.12"
+    Task = "Ensure rpcbind services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName rpcbind
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null rpcbind.service
+            if(! $?){
+                $test3 = systemctl is-enabled 2>/dev/null rpcbind.socket
+                if(! $?){
+                    return $retCompliant
+                }
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.13"
+    Task = "Ensure rsync services are not in use"
+    Test = {
+        $script = $commonPath + "2.1.13.sh"
+        bash $script
+        if ($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.14"
+    Task = "Ensure samba file server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName samba 2>/dev/null
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null samba.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.15"
+    Task = "Ensure snmp services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName snmpd
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null snmpd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.16"
+    Task = "Ensure tftp server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName tftpd-hpa
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null tftpd-hpa.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.17"
+    Task = "Ensure web proxy server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName squid
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null squid.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.18"
+    Task = "Ensure web server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName apache2
+        $test2 = Test-PackageInstalled -PackageName ginx
+        if(! $test1 -and ! $test2){
+            return $retCompliant
+        }
+        else{
+            $services = 'apache2.service', 'apache2.socket', 'nginx.service', 'nginx.socket'
+            $test3 = "disabled"
+            foreach ($service in $services){
+                $test4 = systemctl is-enabled $service 2>/dev/null
+                if($?){
+                    $test3 = "enabled"
+                }
+            }
+            if($test3 -match "disabled"){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.19"
+    Task = "Ensure xinetd services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName xinetd
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null xinetd.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.20"
+    Task = "Ensure X window server services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName xserver-common
+        if(! $test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.21"
+    Task = "Ensure mail transfer agent is configured for local-only mode"
+    Test = {
+        $test1 = ss -lntu | grep -E ':25\s' | grep -E -v '\s(127.0.0.1|::1):25\s'
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.1.22"
+    Task = "Ensure only approved services are listening on a network interface"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "2.2.1"
+    Task = "Ensure NIS Client is not installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName nis
+        if(! $test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.2.2"
+    Task = "Ensure rsh client is not installed"
+    Test = {
+        $status = Test-PackageInstalled -PackageName rsh-client
+        if(! $status){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.3"
+    Task = "Ensure talk client is not installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName talk
+        if(! $test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.4"
+    Task = "Ensure telnet client Server is not installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName telnet
+        if(! $test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.5"
+    Task = "Ensure ldap client is not installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName lapd-utils
+        if(! $test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.2.6"
+    Task = "Ensure ftp client is not installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName ftp
+        if(! $test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "2.3.1.1"
+    Task = "Ensure a single time synchronization daemon is in use"
+    Test = {
+        $path = $scriptPath + "2.1.1.1.sh"
+        $result = bash $path
+        if($result -match "PASS:"){
+            return $retCompliant
+        }
+
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.1"
+    Task = "Ensure systemd-timesyncd configured with authorized timeserver"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "2.3.2.2"
+    Task = "Ensure systemd-timesyncd is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled systemd-timesyncd.service
+        $time = timedatectl status
+        if($test1 -match "enabled" -and $time -ne $null){    
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.3.3.1"
+    Task = "Ensure chrony is configured with authorized timeserver"
+    Test = {
+        return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "2.3.3.2"
+    Task = "Ensure chrony is running as user _chrony"
+    Test = {
+        $script = $scriptPath + "2.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.3.3.3"
+    Task = "Ensure chrony is enabled and running"
+    Test = {
+        $test1 = $(systemctl is-enabled cron.service 1>/dev/null 2>/dev/null; echo $?)
+        $test2 = $(systemctl is-active cron.service 1>/dev/null 2>/dev/null; echo $?)
+        if($test1 -and $test2 ){
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.1"
+    Task = "Ensure cron daemon is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if($test1 -eq "enabled" -and $test2 -match "running"){
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/crontab | grep -q "0600"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.3"
+    Task = "Ensure permissions on /etc/cron.hourly are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.hourly/ | grep -q 0700
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.4"
+    Task = "Ensure permissions on /etc/cron.daily are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.daily/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.5"
+    Task = "Ensure permissions on /etc/cron.weekly are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.weekly/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.6"
+    Task = "Ensure permissions on /etc/cron.monthly are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.monthly/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.7"
+    Task = "Ensure permissions on /etc/cron.d are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/cron.d/ | grep -q "0700"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "2.4.1.8"
+    Task = "Ensure crontab is restricted to authorized users"
+    Test = {
+        $script = $commonPath + "2.4.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "2.4.2.1"
+    Task = "Ensure at is restricted to authorized users"
+    Test = {
+        $script = $commonPath + "2.4.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.1"
+    Task = "Ensure IPv6 status is identified"
+    Test = {
+        $path = $scriptPath + "3.1.1.sh"
+        $result = bash $path
+        if($result -match "IPv6 is enabled on the system"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.2"
+    Task = "Ensure wireless interfaces are disabled"
+    Test = {
+        $script = $commonPath + "3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.1.3"
+    Task = "Ensure bluetooth services are not in use"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName bluez
+        if(! $test1){
+            return $retCompliant
+        }
+        else{
+            $test2 = systemctl is-enabled 2>/dev/null bluetooth.service
+            if(! $?){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "3.2.1"
+    Task = "Ensure dccp kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.2"
+    Task = "Ensure tipc kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.3"
+    Task = "Ensure rds kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.2.4"
+    Task = "Ensure sctp kernel module is not available"
+    Test = {
+        $script = $commonPath + "3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.1"
+    Task = "Ensure ip forwarding is disabled"
+    Test = {
+        $script = $commonPath + "3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.2"
+    Task = "Ensure packet redirect sending is disabled"
+    Test = {
+        $script = $commonPath + "3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.3"
+    Task = "Ensure bogus icmp responses are ignored"
+    Test = {
+        $script = $commonPath + "3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.4"
+    Task = "Ensure broadcast icmp requests are ignored"
+    Test = {
+        $script = $commonPath + "3.3.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.5"
+    Task = "Ensure icmp redirects are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.6"
+    Task = "Ensure secure icmp redirects are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.7"
+    Task = "Ensure reverse path filtering is enabled"
+    Test = {
+        $script = $commonPath + "3.3.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.8"
+    Task = "Ensure source routed packets are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.9"
+    Task = "Ensure suspicious packets are logged"
+    Test = {
+        $script = $commonPath + "3.3.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.10"
+    Task = "Ensure tcp syn cookies is enabled"
+    Test = {
+        $script = $commonPath + "3.3.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "3.3.11"
+    Task = "Ensure ipv6 router advertisements are not accepted"
+    Test = {
+        $script = $commonPath + "3.3.11.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.1.1"
+    Task = "Ensure ufw is installed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName ufw
+        if($test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.2"
+    Task = "Ensure iptables-persistent is not installed with ufw"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName iptables-persistent
+        if(! $test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.3"
+    Task = "Ensure ufw service is enabled"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = systemctl is-enabled ufw 2>/dev/null
+        $test2 = systemctl is-active ufw 2>/dev/null
+        if($test1 -match "enabled" -and $test2 -match "active"){
+            $test3 = ufw status | grep -iE "Status: A[ck]tive?"
+            if($test3 -ne $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.4"
+    Task = "Ensure ufw loopback traffic is configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName ufw
+        if($test1){
+            $test2 = ufw status verbose | grep -iE "Status: A[ck]tive?"
+            if($test2 -eq $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.5"
+    Task = "Ensure ufw outbound connections are configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName ufw
+        if($test1){
+            $test2 = ufw status numbered | grep -iE "Status: Ina[ck]tive?"
+            if($test2 -eq $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.6"
+    Task = "Ensure ufw firewall rules exist for all open ports"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $path = $scriptPath + "3.5.1.6.sh"
+        $result = bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.1.7"
+    Task = "Ensure ufw default deny firewall policy"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName ufw
+        if($test1){
+            $test2 = ufw status verbose | grep -iE "allow"
+            if($test2 -eq $null){
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.2.1"
+    Task = "Ensure nftables is installed"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName nftables
+        if($test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.2.2"
+    Task = "Ensure ufw is uninstalled or disabled with nftables"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName ufw
+        if(! $test1){
+            return $retCompliant
+        } else {
+            $test2 = ufw status | grep -iE "Status: Ina[ck]tive?"
+            if($test2 -ne $null) {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+        Id = "4.2.3"
+        Task = "Ensure iptables are flushed with nftables"
+        Test = {
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+                $script = $scriptPath + "4.2.3.sh"
+            $result = bash $script
+            if ($?) {
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+}
+[AuditTest] @{
+    Id = "4.2.4"
+    Task = "Ensure a nftables table exists"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list tables
+            if($test1 -match "table"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.5"
+    Task = "Ensure nftables base chains exist"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if($test1 -match "type filter hook input" -and $test2 -match "type filter hook forward" -and $test3 -match "type filter hook output"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.6"
+    Task = "Ensure nftables loopback traffic is configured"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            if($isIPv6Disabled -ne $true){
+                $test1 = nft list ruleset | awk '/hook input/,/}/' | grep 'iif "lo" accept'
+                $test2 = nft list ruleset | awk '/hook input/,/}/' | grep 'ip saddr'
+                if($test1 -match 'iif "lo" accept' -and $test2 -match "ip saddr 127.0.0.0/8 counter packets 0 bytes 0 drop"){
+                    return $retCompliant
+                }
+            }
+            else{
+                $test = nft list ruleset | awk '/hook input/,/}/' | grep 'ip6 saddr'
+                if($test -match 'ip6 saddr ::1 counter packets 0 bytes 0 drop'){
+                    return $retCompliant
+                }
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.7"
+    Task = "Ensure nftables outbound and established connections are configured"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list ruleset | awk '/hook input/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            $test2 = nft list ruleset | awk '/hook output/,/}/' | grep -E 'ip protocol (tcp|udp|icmp) ct state'
+            if($test1 -match "ip protocol tcp ct state established accept" -and $test1 -match "p protocol udp ct state established accept" -and $test1 -match "ip protocol icmp ct state established accept" -and $test2 -match "ip protocol tcp ct state established,related,new accep" -and $test2 -match "ip protocol udp ct state established,related,new accept" -and $test2 -match "ip protocol icmp ct state established,related,new accept"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.8"
+    Task = "Ensure nftables default deny firewall policy"
+    Test = {
+        try{
+            if ($FirewallStatus -match 2) {
+                return $retUsingFW1
+            }
+            if ($FirewallStatus -match 3) {
+                return $retUsingFW3
+            }
+            $test1 = nft list ruleset | grep 'hook input'
+            $test2 = nft list ruleset | grep 'hook forward'
+            $test3 = nft list ruleset | grep 'hook output'
+            if($test1 -match "policy drop" -and $test2 -match "policy drop" -and $test3 -match "policy drop"){
+                return $retCompliant
+            }
+            return $retNonCompliant
+        }
+        catch{
+            return @{
+                Message = "Command not found!"
+                Status = "False"
+            }
+        }
+    }
+}
+[AuditTest] @{
+    Id = "4.2.9"
+    Task = "Ensure nftables service is enabled"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $test1 = systemctl is-enabled nftables
+        if($test1 -match "enabled"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.2.10"
+    Task = "Ensure nftables rules are permanent"
+    Test = {
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 3) {
+            return $retUsingFW3
+        }
+        $path1 = $scriptPath + "3.5.2.10_1.sh"
+        $path2 = $scriptPath + "3.5.2.10_2.sh"
+        $path3 = $scriptPath + "3.5.2.10_3.sh"
+        if($path1 -ne $null -and $path2 -ne $null -and $path3 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.1.1"
+    Task = "Ensure iptables packages are installed"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName iptables-persistent
+        if($test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.1.2"
+    Task = "Ensure nftables is not installed with iptables"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName nftables
+        if(! $test1){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.1.3"
+    Task = "Ensure ufw is uninstalled or disabled with iptables"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = Test-PackageInstalled -PackageName ufw
+        if(! $test1){
+            return $retCompliant
+        } else {
+            $test2 = ufw status | grep -iE "Status: Ina[ck]tive?"
+            $test3 = systemctl is-enabled ufw
+            if($test2 -ne $null -and $test3 -match "masked") {
+                return $retCompliant
+            }
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.1"
+    Task = "Ensure iptables default deny firewall policy"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $output = iptables -L
+        $test1 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $test2 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $test3 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        if($test1 -ne $null -and $test2 -ne $null -and $test3 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.2"
+    Task = "Ensure iptables loopback traffic is configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = iptables -L INPUT -v -n | grep "Chain\s*INPUT\s*(policy\s*DROP"
+        $test2 = iptables -L OUTPUT -v -n | grep "Chain\s*OUTPUT\s*(policy\s*DROP"
+        if($test1 -ne $null -and $test2 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.2.3"
+    Task = "Ensure iptables outbound and established connections are configured"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $test1 = iptables -L -v -n
+        if($test1 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+# 3.5.3.2.4 ...
+
+[AuditTest] @{ # in CIS it's automated, but in Excelsheet it's manual
+    Id = "4.3.2.4"
+    Task = "Ensure iptables firewall rules exist for all open ports"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.1"
+    Task = "Ensure ip6tables default deny firewall policy"
+    Test = {
+        if ($FirewallStatus -match 1) {
+            return $retUsingFW1
+        }
+        if ($FirewallStatus -match 2) {
+            return $retUsingFW3
+        }
+        $output = ip6tables -L
+        $test11 = $output -match "DROP" | grep "Chain INPUT (policy DROP)"
+        $test12 = $output -match "REJECT" | grep "Chain INPUT (policy REJECT)"
+        $test21 = $output -match "DROP" | grep "Chain OUTPUT (policy DROP)"
+        $test22 = $output -match "REJECT" | grep "Chain OUTPUT (policy REJECT)"
+        $test31 = $output -match "DROP" | grep "Chain FORWARD (policy DROP)"
+        $test32 = $output -match "REJECT" | grep "Chain FORWARD (policy REJECT)"
+
+        if ($IPv6Status -eq $false) {
+            return @{
+                Message = "IPv6 is disabled"
+                Status = "True"
+            }
+        }
+        if(($test11 -ne $null -or $test12 -ne $null) -and ($test21 -ne $null -or $test22 -ne $null) -and ($test31 -ne $null -or $test32 -ne $null)){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.2"
+    Task = "Ensure ip6tables loopback traffic is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.3"
+    Task = "Ensure ip6tables outbound and established connections are configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "4.3.3.4"
+    Task = "Ensure ip6tables firewall rules exist for all open ports"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "5.1.1"
+    Task = "Ensure cron daemon is enabled and running"
+    Test = {
+        $test1 = systemctl is-enabled cron
+        $test2 = systemctl status cron | grep 'Active: active (running) '
+        if($test1 -eq "enabled" -and $test2 -match "running"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.2"
+    Task = "Ensure permissions on /etc/crontab are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/crontab | grep -q "0600"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.3"
+    Task = "Ensure permissions on SSH public host key files are configured"
+    Test = {
+        $script = $commonPath + "5.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.4"
+    Task = "Ensure sshd access is configured"
+    Test = {
+        if (sshd -T | grep -Piq -- "^\h*(allow|deny)(users|groups)\h+\H+") {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.5"
+    Task = "Ensure sshd Banner is configured"
+    Test = {
+        if (sshd -T | grep -Piq -- "^\h*banner\h+\H+") {
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.1.6"
+    Task = "Ensure sshd Ciphers are configured"
+    Test = {
+        $script = $scriptPath + "5.1.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.7"
+    Task = "Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured"
+    Test = {
+        $script = $scriptPath + "5.1.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.8"
+    Task = "Ensure sshd DisableForwarding is enabled"
+    Test = {
+        $script = $scriptPath + "5.1.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.9"
+    Task = "Ensure sshd GSSAPIAuthentication is disabled"
+    Test = {
+        $script = $scriptPath + "5.1.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.10"
+    Task = "Ensure sshd HostbasedAuthentication is disabled"
+    Test = {
+        $script = $scriptPath + "5.1.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.11"
+    Task = "Ensure sshd IgnoreRhosts is enabled"
+    Test = {
+        $script = $scriptPath + "5.1.11.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.12"
+    Task = "Ensure sshd KexAlgorithms is configured"
+    Test = {
+        $script = $scriptPath + "5.1.12.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.13"
+    Task = "Ensure sshd LoginGraceTime is configured"
+    Test = {
+        $script = $scriptPath + "5.1.13.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.14"
+    Task = "Ensure sshd LogLevel is configured"
+    Test = {
+        $script = $scriptPath + "5.1.14.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.15"
+    Task = "Ensure sshd MACs are configured"
+    Test = {
+        $script = $scriptPath + "5.1.15.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.16"
+    Task = "Ensure sshd MaxAuthTries is configured"
+    Test = {
+        $script = $commonPath + "5.1.16.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.17"
+    Task = "Ensure sshd MaxSessions is configured"
+    Test = {
+        $script = $scriptPath + "5.1.17.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.18"
+    Task = "Ensure sshd MaxStartups is configured"
+    Test = {
+        $script = $scriptPath + "5.1.18.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.19"
+    Task = "Ensure sshd PermitEmptyPasswords is disabled"
+    Test = {
+        $script = $commonPath + "5.1.19.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.20"
+    Task = "Ensure sshd PermitRootLogin is disabled"
+    Test = {
+        $script = $commonPath + "5.1.20.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.21"
+    Task = "Ensure sshd PermitUserEnvironment is disabled"
+    Test = {
+        $script = $commonPath + "5.1.21.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.1.22"
+    Task = "Ensure sshd UsePAM is enabled"
+    Test = {
+        $script = $commonPath + "5.1.22.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.1"
+    Task = "Ensure sudo is installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName sudo
+        if($test1){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.2.2"
+    Task = "Ensure sudo commands use pty"
+    Test = {
+        $script = $commonPath + "5.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.3"
+    Task = "Ensure sudo log file exists"
+    Test = {
+        $script = $commonPath + "5.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.4"
+    Task = "Ensure users must provide password for privilege escalation"
+    Test = {
+        $script = $scriptPath + "5.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.5"
+    Task = "Ensure re-authentication for privilege escalation is not disabled globally"
+    Test = {
+        $script = $scriptPath + "5.2.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.2.6"
+    Task = "Ensure sudo authentication timeout is configured correctly"
+    Test = {
+        $script = $commonPath + "5.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+} 
+[AuditTest] @{
+    Id = "5.2.7"
+    Task = "Ensure access to the su command is restricted"
+    Test = {
+        $script = $scriptPath + "5.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.1"
+    Task = "Ensure latest version of pam is installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName libpam-runtime
+        if($test1){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+} 
+[AuditTest] @{
+    Id = "5.3.1.2"
+    Task = "Ensure libpam-modules is installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName libpam-modules
+        if($test1){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.3.1.3"
+    Task = "Ensure libpam-pwquality is installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName libpam-pwquality
+        if($test1){
+            return $retNonCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.1"
+    Task = "Ensure pam_unix module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.2"
+    Task = "Ensure pam_faillock module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.3"
+    Task = "Ensure pam_pwquality module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.2.4"
+    Task = "Ensure pam_pwhistory module is enabled"
+    Test = {
+        $script = $scriptPath + "5.3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.1.1"
+    Task = "Ensure password failed attempts lockout is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.1.2"
+    Task = "Ensure password unlock time is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.1.3"
+    Task = "Ensure password failed attempts lockout includes root account"
+    Test = {
+        $script = $commonPath + "5.3.3.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.1"
+    Task = "Ensure password number of changed characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.2"
+    Task = "Ensure minimum password length is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.3"
+    Task = "Ensure password complexity is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.4"
+    Task = "Ensure password same consecutive characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.5"
+    Task = "Ensure password maximum sequential characters is configured"
+    Test = {
+        $script = $commonPath + "5.3.3.2.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.6"
+    Task = "Ensure password dictionary check is enabled"
+    Test = {
+        $script = $commonPath + "5.3.3.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.7"
+    Task = "Ensure password quality checking is enforced"
+    Test = {
+        $script = $scriptPath + "5.3.3.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.2.8"
+    Task = "Ensure password quality is enforced for the root user"
+    Test = {
+        $script = $scriptPath + "5.3.3.2.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.3.1"
+    Task = "Ensure password history remember is configured"
+    Test = {
+        $script = $scriptPath + "5.3.3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.3.2"
+    Task = "Ensure password history is enforced for the root user"
+    Test = {
+        $script = $scriptPath + "5.3.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.3.3"
+    Task = "Ensure pam_pwhistory includes use_authtok"
+    Test = {
+        $script = $commonPath + "5.3.3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.1"
+    Task = "Ensure pam_unix does not include nullok"
+    Test = {
+        $script = $commonPath + "5.3.3.4.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.2"
+    Task = "Ensure pam_unix does not include remember"
+    Test = {
+        $script = $scriptPath + "5.3.3.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.3"
+    Task = "Ensure pam_unix includes a strong password hashing algorithm"
+    Test = {
+        $script = $scriptPath + "5.3.3.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.3.3.4.4"
+    Task = "Ensure pam_unix includes use_authtok"
+    Test = {
+        $script = $commonPath + "5.3.3.4.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.1"
+    Task = "Ensure password expiration is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.2"
+    Task = "Ensure minimum password age is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.3"
+    Task = "Ensure password expiration warning days is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.4"
+    Task = "Ensure strong password hashing algorithm is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.5"
+    Task = "Ensure inactive password lock is configured"
+    Test = {
+        $script = $commonPath + "5.4.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.1.6"
+    Task = "Ensure all users last password change date is in the past"
+    Test = {
+        $path = $scriptPath + "5.5.1.5.sh"
+        $result = bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.1"
+    Task = "Ensure root is the only UID 0 account"
+    Test = {
+        $test1 = awk -F: '($3 == 0) { print $1 }' /etc/passwd
+        if($test1 -match "root"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+     Id = "5.4.2.2"
+     Task = "Ensure root is the only GID 0 account"
+     Test = {
+         $test1 = grep "^root:" /etc/passwd | cut -f4 -d ':'
+         if($test1 -eq 0){
+             return $retCompliant
+         }
+         return $retNonCompliant
+     }
+ }
+ [AuditTest] @{
+    Id = "5.4.2.3"
+    Task = "Ensure group root is the only GID 0 group"
+    Test = {
+        $script = $commonPath + "5.4.2.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.4"
+    Task = "Ensure root password is set"
+    Test = {
+        $script = $scriptPath + "5.4.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.5"
+    Task = "Ensure root PATH Integrity"
+    Test = {
+        $path = $scriptPath + "6.2.9.sh"
+        $result = bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.6"
+    Task = "Ensure root user umask is configured"
+    Test = {
+        $script = $commonPath + "5.4.2.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.7"
+    Task = "Ensure system accounts do not have a valid login shell"
+    Test = {
+        $script = $commonPath + "5.4.2.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.2.8"
+    Task = "Ensure accounts without a valid login shell are locked"
+    Test = {            
+        $script = $commonPath + "5.4.2.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "5.4.3.1"
+    Task = "Ensure nologin is not listed in /etc/shells"
+    Test = {
+        $script = $commonPath + "5.4.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.3.2"
+    Task = "Ensure default user shell timeout is configured"
+    Test = {
+        $script = $commonPath + "5.4.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "5.4.3.3"
+    Task = "Ensure default user umask is configured"
+    Test = {
+        $script = $commonPath + "5.4.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.1.2"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd- | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.1.3"
+    Task = "Ensure cryptographic mechanisms are used to protect the integrity of audit tools"
+    Test = {
+        $script = $commonPath + "6.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.1"
+    Task = "Ensure journald service is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled rsyslog
+        if($test1 -match "enabled"){
+            return @{
+                Message = "Compliant"
+                Status = "True"
+            }
+        }
+        return @{
+            Message = "Not-Compliant"
+            Status = "False"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.2"
+    Task = "Ensure journald log file access is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.3"
+    Task = "Ensure journald log file rotation is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.4"
+    Task = "Ensure journald ForwardToSyslog is disabled"
+    Test = {
+        $script = $scriptPath + "6.2.1.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.5"
+    Task = "Ensure journald Storage is configured"
+    Test = {
+        $script = $scriptPath + "6.2.1.1.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.1.6"
+    Task = "Ensure journald Compress is configured"
+    Test = {
+        $script = $scriptPath + "6.2.1.1.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.2.1"
+    Task = "Ensure systemd-journal-remote is installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName systemd-journal-remote
+        if($test1){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{
+    Id = "6.2.1.2.2"
+    Task = "Ensure systemd-journal-remote authentication is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.2.3"
+    Task = "Ensure systemd-journal-upload is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled systemd-journal-upload.service
+        $test2 = systemctl is-active systemd-journal-upload.service
+        if($test1 -eq "enabled" -and $test2 -match "active"){
+            return $retCompliant
+        }
+        return $retCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.2.1.2.4"
+    Task = "Ensure systemd-journal-remote service is not in use"
+    Test = {
+        $script = $scriptPath + "6.2.1.2.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.2.2.1"
+    Task = "Ensure access to all logfiles has been configured"
+    Test = {
+        $fileListAll = find /var/log -type f -ls
+        $fileListFiltered = find /var/log -type f -ls | grep "\-....\-\-\-\-\-"
+        if($fileListAll.Count -eq $fileListFiltered.Count){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.1"
+    Task = "Ensure auditd packages are installed"
+    Test = {
+        $test1 = Test-PackageInstalled -PackageName auditd
+        $test2 = Test-PackageInstalled -PackageName audispd-plugins
+        if($test1 -and $test2){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.2"
+    Task = "Ensure auditd service is enabled and active"
+    Test = {
+        $test1 = systemctl is-enabled auditd
+        if($test1 -match "enabled"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.3"
+    Task = "Ensure auditing for processes that start prior to auditd is enabled"
+    Test = {
+        $script = $scriptPath + "6.3.1.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.1.4"
+    Task = "Ensure audit_backlog_limit is sufficient"
+    Test = {
+        $script = $scriptPath + "6.3.1.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.1"
+    Task = "Ensure audit log storage size is configured"
+    Test = {
+        $script = $commonPath + "6.3.2.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.2"
+    Task = "Ensure audit logs are not automatically deleted"
+    Test = {
+        $script = $commonPath + "6.3.2.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.3"
+    Task = "Ensure system is disabled when audit logs are full"
+    Test = {
+        $test1 = grep -Pi -- '^\h*disk_full_action\h*=\h*(halt|single)\b' /etc/audit/auditd.conf
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.2.4"
+    Task = "Ensure system warns when audit logs are low on space"
+    Test = {
+        $test1 = grep -Pi -- '^\h*space_left_action\h*=\h*\w+\b' /etc/audit/auditd.conf | awk '{print $3}'
+        if($test1 -match "^(email|exec|single|halt)$"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.1"
+    Task = "Ensure changes to system administration scope is collected"
+    Test = {
+        $script = $commonPath + "6.3.3.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.2"
+    Task = "Ensure actions as another user are always logged"
+    Test = {
+        $script = $commonPath + "6.3.3.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.3"
+    Task = "Ensure events that modify the sudo log file are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.4"
+    Task = "Ensure events that modify date and time information are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.5"
+    Task = "Ensure events that modify the system's network environment are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.6"
+    Task = "Ensure use of privileged commands are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.7"
+    Task = "Ensure unsuccessful file access attempts are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.8"
+    Task = "Ensure events that modify user/group information are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.9"
+    Task = "Ensure discretionary access control permission modification events are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.10"
+    Task = "Ensure successful file system mounts are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.10.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.11"
+    Task = "Ensure session initiation information is collected"
+    Test = {
+        $path1 = $scriptPath + "4.1.3.11_1.sh"
+        $result11 = bash $path1 | grep "\-w /var/run/utmp -p wa -k session"
+        $result12 = bash $path1 | grep "\-w /var/log/wtmp -p wa -k session"
+        $result13 = bash $path1 | grep "\-w /var/log/btmp -p wa -k session"
+        $path2 = $scriptPath + "4.1.3.11_2.sh"
+        $result21 = bash $path2 | grep "\-w /var/run/utmp -p wa -k session"
+        $result22 = bash $path2 | grep "\-w /var/log/wtmp -p wa -k session"
+        $result23 = bash $path2 | grep "\-w /var/log/btmp -p wa -k session"
+        if($result11 -ne $null -and $result12 -ne $null -and $result13 -ne $null -and $result21 -ne $null -and $result22 -ne $null -and $result23 -ne $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.12"
+    Task = "Ensure login and logout events are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.12.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.13"
+    Task = "Ensure file deletion events by users are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.13.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.14"
+    Task = "Ensure events that modify the system's Mandatory Access Controls are collected"
+    Test = {
+        $script = $commonPath + "6.3.3.14.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.15"
+    Task = "Ensure successful and unsuccessful attempts to use the chcon command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.15.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.16"
+    Task = "Ensure successful and unsuccessful attempts to use the setfacl command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.16.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.17"
+    Task = "Ensure successful and unsuccessful attempts to use the chacl command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.17.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.18"
+    Task = "Ensure successful and unsuccessful attempts to use the usermod command are recorded"
+    Test = {
+        $script = $commonPath + "6.3.3.18.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.19"
+    Task = "Ensure kernel module loading unloading and modification is collected"
+    Test = {
+        $script = $commonPath + "6.3.3.19.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.20"
+    Task = "Ensure the audit configuration is immutable"
+    Test = {
+        $test1 = grep "^\s*[^#]" /etc/audit/rules.d/*.rules | tail -l
+        if($test1 -match "-e 2"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.3.21"
+    Task = "Ensure the running and on disk configuration is the same"
+    Test = {
+        $test1 = augenrules --check
+        if($test1 -match "/usr/sbin/augenrules: No change"){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.1"
+    Task = "Ensure audit log files mode is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.1.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.2"
+    Task = "Ensure audit log files owner is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.2.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.3"
+    Task = "Ensure audit log files group owner is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.3.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.4"
+    Task = "Ensure the audit log file directory mode is configured"
+    Test = {
+        $script = $scriptPath + "6.3.4.4.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.5"
+    Task = "Ensure audit configuration files mode is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.5.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.6"
+    Task = "Ensure audit configuration files owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.6.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.7"
+    Task = "Ensure audit configuration files group owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.7.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.8"
+    Task = "Ensure audit tools mode is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.8.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.9"
+    Task = "Ensure audit tools owner is configured"
+    Test = {
+        $script = $commonPath + "6.3.4.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "6.3.4.10"
+    Task = "Ensure audit tools group owner is configured"
+    Test = {
+        $test1 = stat -Lc '%G' /sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules | awk '$1 != "root" {print}'
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.1"
+    Task = "Ensure permissions on /etc/passwd are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.2"
+    Task = "Ensure permissions on /etc/passwd- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/passwd- | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.3"
+    Task = "Ensure permissions on /etc/group are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/group | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.4"
+    Task = "Ensure permissions on /etc/group- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/group- | grep -q "0644"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.5"
+    Task = "Ensure permissions on /etc/shadow are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/shadow | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.6"
+    Task = "Ensure permissions on /etc/shadow- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/shadow- | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.7"
+    Task = "Ensure permissions on /etc/gshadow are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/gshadow | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.8"
+    Task = "Ensure permissions on /etc/gshadow- are configured"
+    Test = {
+        $test1 = stat -c '%#a' /etc/gshadow- | grep -q "0640"
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.9"
+    Task = "Ensure permissions on /etc/shells are configured"
+    Test = {
+        $script = $commonPath + "7.1.9.sh"
+        bash $script
+        if ($?) {
+            return $retCompliant
+        } else {
+            return $retNonCompliant
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.1.10"
+    Task = "Ensure permissions on /etc/security/opasswd are configured"
+    Test = {
+        $script = $commonPath + "7.1.10.sh"
+        $result = bash $script
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.11"
+    Task = "Ensure world writable files and directories are secured"
+    Test = {
+        #$partitions = mapfile -t partitions < (sudo fdisk -l | grep -o '/dev/[^ ]*')
+        #$test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -0002
+        $script = $commonPath + "7.1.11.sh"
+        $result = bash $script
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.1.12"
+    Task = "Ensure no files or directories without an owner and a group exist"
+    Test = {
+        $script = $commonPath + "7.1.12.sh"
+        $result = bash $script
+        if($?){
+                return $retCompliant
+            }
+            return $retNonCompliant
+    }
+} 
+[AuditTest] @{
+    Id = "7.1.13"
+    Task = "Ensure SUID and SGID files are reviewed"
+    Test = {
+        $test1 = df --local -P | awk '{if (NR!=1) print $6}' | xargs -I '{}' find '{}' -xdev -type f -perm -4000
+        $message = ""
+        foreach($line in $test1){
+            $message += "<br>$line"
+        }
+        return @{
+            Message = "Please review following list of files: $($message)"
+            Status = "None"
+        }
+    }
+}
+[AuditTest] @{
+    Id = "7.2.1"
+    Task = "Ensure accounts in /etc/passwd use shadowed passwords"
+    Test = {
+        $test1 = awk -F: '($2 != "x" ) { print $1 " is not set to shadowed passwords "}'/etc/passwd
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.2"
+    Task = "Ensure /etc/shadow password fields are not empty"
+    Test = {
+        $test1 = awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow
+        if($test1 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.3"
+    Task = "Ensure all groups in /etc/passwd exist in /etc/group"
+    Test = {
+        $path = $scriptPath + "6.2.3.sh"
+        $result = bash $path
+        if($?){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.4"
+    Task = "Ensure shadow group is empty"
+    Test = {
+        $test1 = awk -F: '($1=="shadow") {print $NF}' /etc/group
+        $test2 = awk -F: -v GID="$(awk -F: '($1=="shadow") {print $3}' /etc/group)" '($4==GID) {print $1}' /etc/passwd
+        if($test1.Length -eq 0 -and $test2 -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.5"
+    Task = "Ensure no duplicate UIDs exist"
+    Test = {
+        $path = $scriptPath + "6.2.5.sh"
+        $result = bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.6"
+    Task = "Ensure no duplicate GIDs exist"
+    Test = {
+        $path = $scriptPath + "6.2.6.sh"
+        $result = bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.7"
+    Task = "Ensure no duplicate user names exist"
+    Test = {
+        $path = $scriptPath + "6.2.7.sh"
+        $result = bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+[AuditTest] @{
+    Id = "7.2.8"
+    Task = "Ensure no duplicate group names exist"
+    Test = {
+        $path = $scriptPath + "6.2.8.sh"
+        $result = bash $path
+        if($result -eq $null){
+            return $retCompliant
+        }
+        return $retNonCompliant
+    }
+}
+
+[AuditTest] @{ # in CIS it's automated, but in Excelsheet it's manual
+    Id = "7.2.9"
+    Task = "Ensure local interactive user home directories are configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
+[AuditTest] @{ # in CIS it's automated, but in Excelsheet it's manual
+    Id = "7.2.10"
+    Task = "Ensure local interactive user dot files access is configured"
+    Test = {
+        	return $retNonCompliantManualReviewRequired
+    }
+}
diff --git a/ATAPAuditor/Helpers/AuditGroupFunctions.ps1 b/ATAPAuditor/Helpers/AuditGroupFunctions.ps1
new file mode 100644
index 0000000..c01eef9
--- /dev/null
+++ b/ATAPAuditor/Helpers/AuditGroupFunctions.ps1
@@ -0,0 +1,543 @@
+# Begin Helper for version control
+function isWindows8OrNewer {
+    return ([Environment]::OSVersion.Version -ge (New-Object 'Version' 6, 2))
+}
+function isWindows81OrNewer {
+    return ([Environment]::OSVersion.Version -ge (New-Object 'Version' 6, 3))
+}
+function isWindows10OrNewer {
+    return ([Environment]::OSVersion.Version -ge (New-Object 'Version' 10, 0))
+}
+function win7NoTPMChipDetected {
+    return (Get-CimInstance -ClassName Win32_Tpm -Namespace root\cimv2\security\microsofttpm | Select-Object -ExpandProperty IsActivated_InitialValue) -eq $null
+}
+
+$sbdIndex = 1
+function IncrementSecurityBaseDataCounter {
+    return $sbdIndex++
+}
+
+
+function hasTPM {
+    try {
+        $obj = (Get-Tpm).TpmPresent
+    }
+    catch {
+        return $null
+    }
+    return $obj
+}
+# End Helper for version control
+function isWindows10Enterprise {
+    $os = Get-ComputerInfo OsName
+    if ($os -match "Windows 10 Enterprise" -or $os -match "Windows 11 Enterprise") {
+        return $true
+    }
+    return $false
+}
+
+#Helper function for 'Test-ASRRules'
+Function Test-RegistryValue ($regkey, $name) {
+    if (Get-ItemProperty -Path $regkey -Name $name -ErrorAction Ignore) {
+        $true
+    }
+    else {
+        $false
+    }
+}
+
+#This function is needed in AuditGroups, which check both paths of ASR-Rules.
+function Test-ASRRules {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)]
+        [String] $Path,
+        [Parameter(Mandatory = $true)]
+        [String] $Value
+    )
+
+    process {
+        try {
+            if (Test-Path -Path $Path) {
+                return Test-RegistryValue $Path $Value
+            }
+            else {
+                return $false
+            }
+        }
+        catch {
+
+        }
+    }
+
+}
+
+function Test-MultiplePaths {
+    [CmdletBinding()]
+    [OutputType([Object])]
+    param (
+        [Parameter(Mandatory = $True, ValueFromPipeline)]
+        [String]
+        $Path,
+        [Parameter(Mandatory = $True)]
+        [String]
+        $Key,
+        [Parameter(Mandatory = $True)]
+        [Object]
+        $ExpectedValue,
+        [PSCustomObject]
+        $Result = @{
+            Message = "Registry value not found."
+            Status  = "False"
+        }
+    )
+    PROCESS {
+        $regValue = Get-ItemProperty -ErrorAction SilentlyContinue `
+            -Path $Path `
+            -Name $Key `
+        | Select-Object -ExpandProperty "$($Key)"
+        # if regValue == expectedValue
+        if (($regValue -eq $ExpectedValue)) {
+            $Result = @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        # if regValue isnot empty AND regValue isnot expectedValue AND result is not True (yet)
+        # This result is ranked #2 below "Compliant" and above "Registry value not found"
+        if (($null -ne $regValue) -and ($regValue -ne $ExpectedValue) -and ($Result.Status -ne "True")) {
+            $Result = @{
+                Message = "Registry value is '$regValue'. Expected: $ExpectedValue"
+                Status  = "False"
+            }
+        }
+    }
+    END {
+        return $Result
+    }
+}
+
+#Returns Hyper-V status
+function CheckHyperVStatus {
+    return (Get-WindowsOptionalFeature -Online -FeatureName "Microsoft-Hyper-V").State
+}
+
+function CheckWindefRunning {
+    # for systems, won't work if server 
+    try {
+        $defStatus = (Get-MpComputerStatus -ErrorAction Ignore | Select-Object AMRunningMode)
+        if ($defStatus.AMRunningMode -eq "Normal") {
+            return $true
+        }   
+    }
+    catch {
+        <#Do this if a terminating exception happens#>
+    }
+
+    # for standalone systems, won't work if server 
+    try {
+        $defStatus = (Get-MpComputerStatus -ErrorAction Ignore)
+        if ($defStatus.AMServiceEnabled -eq $true -and $defStatus.AntispywareEnabled -eq $true -and $defStatus.AntivirusEnabled -eq $true -and $defStatus.NISEnabled -eq $true -and $defStatus.RealTimeProtectionEnabled -eq $true) {
+            return $true
+        }    
+    }
+    catch {
+        <#Do this if a terminating exception happens#>
+    }
+
+    # for servers, won't work if standalone system
+    try {
+        if ((Get-WindowsFeature -Name Windows-Defender -ErrorAction Ignore).installed) {
+            if ((Get-Service -Name windefend -ErrorAction Ignore).Status -eq "Running") {
+                return $true
+            }
+        }
+    }
+    catch {
+        <#Do this if a terminating exception happens#>
+    }
+    
+    return $false
+}
+
+function CheckForActiveAV {
+    $result = $false
+    $av = Get-AntiVirusStatus
+    foreach ($a in $av) {
+        if (($a.'Definition Status') -eq "Enabled") {
+            $result = $true;
+        }
+    }
+    return $result
+}
+
+# only works for desktop workstations, not servers (except Windows XP and older)
+function Get-AntiVirusStatus {
+    try {
+        $AntiVirusProducts = Get-WmiObject -Namespace "root\SecurityCenter2" -Class AntiVirusProduct -ComputerName $env:computername -ErrorAction Stop
+    }
+    catch [System.Management.ManagementException] {
+        <#Do this if a terminating exception happens#>
+    }
+
+    $result = @()
+    foreach ($AntiVirusProduct in $AntiVirusProducts) {
+
+        $hex = '0x{0:x}' -f $AntiVirusProduct.productState
+        $avstatus = $hex.Substring(3, 2)
+        $defstatus = "Unknown"
+        if (($avstatus -eq "00") -or ($avstatus -eq "01")) {
+            $defstatus = "Disabled"
+        }
+        if (($avstatus -eq "10") -or ($avstatus -eq "11")) {
+            $defstatus = "Enabled"
+        }
+
+        $avupdated = $hex.Substring(5, 2)
+        $avupdatestatus = "Unknown"
+        if ($avupdated -eq ("10")) {
+            $avupdatestatus = "Not Up-to-date"
+        }
+        if ($avupdated -eq ("00")) {
+            $avupdatestatus = "Up-to-date"
+        }
+
+        # hashtable for av status
+        $ht = @{}
+        $ht.Name = $AntiVirusProduct.displayName
+        $ht.'Definition Status' = $defstatus
+        $ht.'Update Status' = $avupdatestatus
+
+        # add new hashtable to result
+        $result += New-Object -TypeName PSObject -Property $ht 
+    }
+    return $result
+} 
+
+function getListOfWeakCipherSuites {
+    $listOfWeakCipherSuites = @(
+        "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA",
+        "TLS_DH_DSS_WITH_AES_128_CBC_SHA",
+        "TLS_DH_DSS_WITH_AES_128_CBC_SHA256",
+        "TLS_DH_DSS_WITH_AES_128_GCM_SHA256",
+        "TLS_DH_DSS_WITH_AES_256_CBC_SHA",
+        "TLS_DH_DSS_WITH_AES_256_CBC_SHA256",
+        "TLS_DH_DSS_WITH_AES_256_GCM_SHA384",
+        "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256",
+        "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256",
+        "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384",
+        "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384",
+        "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA",
+        "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA",
+        "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+        "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_DH_DSS_WITH_SEED_CBC_SHA",
+        "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
+        "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
+        "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
+        "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
+        "TLS_DHE_DSS_WITH_AES_256_CBC_SHA",
+        "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256",
+        "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384",
+        "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256",
+        "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256",
+        "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384",
+        "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384",
+        "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA",
+        "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA",
+        "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+        "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_DHE_DSS_WITH_SEED_CBC_SHA",
+        "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA",
+        "TLS_DHE_PSK_WITH_AES_128_CBC_SHA",
+        "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256",
+        "TLS_DHE_PSK_WITH_AES_128_CCM",
+        "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256",
+        "TLS_DHE_PSK_WITH_AES_256_CBC_SHA",
+        "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384",
+        "TLS_DHE_PSK_WITH_AES_256_CCM",
+        "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384",
+        "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256",
+        "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256",
+        "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384",
+        "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384",
+        "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256",
+        "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
+        "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
+        "TLS_DHE_RSA_WITH_AES_128_CCM",
+        "TLS_DHE_RSA_WITH_AES_128_CCM_8",
+        "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
+        "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
+        "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256",
+        "TLS_DHE_RSA_WITH_AES_256_CCM",
+        "TLS_DHE_RSA_WITH_AES_256_CCM_8",
+        "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384",
+        "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256",
+        "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256",
+        "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384",
+        "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384",
+        "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA",
+        "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA",
+        "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+        "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+        "TLS_DHE_RSA_WITH_SEED_CBC_SHA",
+        "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_DH_RSA_WITH_AES_128_CBC_SHA",
+        "TLS_DH_RSA_WITH_AES_128_CBC_SHA256",
+        "TLS_DH_RSA_WITH_AES_128_GCM_SHA256",
+        "TLS_DH_RSA_WITH_AES_256_CBC_SHA",
+        "TLS_DH_RSA_WITH_AES_256_CBC_SHA256",
+        "TLS_DH_RSA_WITH_AES_256_GCM_SHA384",
+        "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256",
+        "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256",
+        "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384",
+        "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384",
+        "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA",
+        "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA",
+        "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+        "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_DH_RSA_WITH_SEED_CBC_SHA",
+        "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
+        "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
+        "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
+        "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
+        "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
+        "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
+        "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256",
+        "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256",
+        "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384",
+        "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384",
+        "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
+        "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
+        "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
+        "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
+        "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256",
+        "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384",
+        "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA",
+        "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA",
+        "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256",
+        "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA",
+        "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384",
+        "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256",
+        "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384",
+        "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
+        "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
+        "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
+        "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
+        "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256",
+        "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384",
+        "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
+        "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
+        "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
+        "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
+        "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384",
+        "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
+        "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256",
+        "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256",
+        "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384",
+        "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384",
+        "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_KRB5_WITH_3DES_EDE_CBC_SHA",
+        "TLS_KRB5_WITH_IDEA_CBC_SHA",
+        "TLS_PSK_DHE_WITH_AES_128_CCM_8",
+        "TLS_PSK_DHE_WITH_AES_256_CCM_8",
+        "TLS_PSK_WITH_3DES_EDE_CBC_SHA",
+        "TLS_PSK_WITH_AES_128_CBC_SHA",
+        "TLS_PSK_WITH_AES_128_CBC_SHA256",
+        "TLS_PSK_WITH_AES_128_CCM",
+        "TLS_PSK_WITH_AES_128_CCM_8",
+        "TLS_PSK_WITH_AES_128_GCM_SHA256",
+        "TLS_PSK_WITH_AES_256_CBC_SHA",
+        "TLS_PSK_WITH_AES_256_CBC_SHA384",
+        "TLS_PSK_WITH_AES_256_CCM",
+        "TLS_PSK_WITH_AES_256_CCM_8",
+        "TLS_PSK_WITH_AES_256_GCM_SHA384",
+        "TLS_PSK_WITH_ARIA_128_CBC_SHA256",
+        "TLS_PSK_WITH_ARIA_128_GCM_SHA256",
+        "TLS_PSK_WITH_ARIA_256_CBC_SHA384",
+        "TLS_PSK_WITH_ARIA_256_GCM_SHA384",
+        "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256",
+        "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA",
+        "TLS_RSA_PSK_WITH_AES_128_CBC_SHA",
+        "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256",
+        "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256",
+        "TLS_RSA_PSK_WITH_AES_256_CBC_SHA",
+        "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384",
+        "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384",
+        "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256",
+        "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256",
+        "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384",
+        "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384",
+        "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+        "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256",
+        "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_RSA_WITH_AES_128_CBC_SHA",
+        "TLS_RSA_WITH_AES_128_CBC_SHA256",
+        "TLS_RSA_WITH_AES_128_CCM",
+        "TLS_RSA_WITH_AES_128_CCM_8",
+        "TLS_RSA_WITH_AES_128_GCM_SHA256",
+        "TLS_RSA_WITH_AES_256_CBC_SHA",
+        "TLS_RSA_WITH_AES_256_CBC_SHA256",
+        "TLS_RSA_WITH_AES_256_CCM",
+        "TLS_RSA_WITH_AES_256_CCM_8",
+        "TLS_RSA_WITH_AES_256_GCM_SHA384",
+        "TLS_RSA_WITH_ARIA_128_CBC_SHA256",
+        "TLS_RSA_WITH_ARIA_128_GCM_SHA256",
+        "TLS_RSA_WITH_ARIA_256_CBC_SHA384",
+        "TLS_RSA_WITH_ARIA_256_GCM_SHA384",
+        "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA",
+        "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA",
+        "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+        "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_RSA_WITH_IDEA_CBC_SHA",
+        "TLS_RSA_WITH_SEED_CBC_SHA",
+        "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA",
+        "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA",
+        "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA",
+        "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA",
+        "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA",
+        "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA",
+        "TLS_SRP_SHA_WITH_AES_128_CBC_SHA",
+        "TLS_SRP_SHA_WITH_AES_256_CBC_SHA"
+    )
+    return $listOfWeakCipherSuites
+}
+
+function getListOfInsecureCipherSuites {
+    $listOfInsecureCipherSuites = @(
+        "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
+        "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5",
+        "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA",
+        "TLS_DH_anon_WITH_AES_128_CBC_SHA",
+        "TLS_DH_anon_WITH_AES_128_CBC_SHA256",
+        "TLS_DH_anon_WITH_AES_128_GCM_SHA256",
+        "TLS_DH_anon_WITH_AES_256_CBC_SHA",
+        "TLS_DH_anon_WITH_AES_256_CBC_SHA256",
+        "TLS_DH_anon_WITH_AES_256_GCM_SHA384",
+        "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256",
+        "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256",
+        "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384",
+        "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384",
+        "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA",
+        "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256",
+        "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256",
+        "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA",
+        "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256",
+        "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384",
+        "TLS_DH_anon_WITH_DES_CBC_SHA",
+        "TLS_DH_anon_WITH_RC4_128_MD5",
+        "TLS_DH_anon_WITH_SEED_CBC_SHA",
+        "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA",
+        "TLS_DH_DSS_WITH_DES_CBC_SHA",
+        "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
+        "TLS_DHE_DSS_WITH_DES_CBC_SHA",
+        "TLS_DHE_PSK_WITH_NULL_SHA",
+        "TLS_DHE_PSK_WITH_NULL_SHA256",
+        "TLS_DHE_PSK_WITH_NULL_SHA384",
+        "TLS_DHE_PSK_WITH_RC4_128_SHA",
+        "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
+        "TLS_DHE_RSA_WITH_DES_CBC_SHA",
+        "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA",
+        "TLS_DH_RSA_WITH_DES_CBC_SHA",
+        "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
+        "TLS_ECDH_anon_WITH_AES_128_CBC_SHA",
+        "TLS_ECDH_anon_WITH_AES_256_CBC_SHA",
+        "TLS_ECDH_anon_WITH_NULL_SHA",
+        "TLS_ECDH_anon_WITH_RC4_128_SHA",
+        "TLS_ECDH_ECDSA_WITH_NULL_SHA",
+        "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
+        "TLS_ECDHE_ECDSA_WITH_NULL_SHA",
+        "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
+        "TLS_ECDHE_PSK_WITH_NULL_SHA",
+        "TLS_ECDHE_PSK_WITH_NULL_SHA256",
+        "TLS_ECDHE_PSK_WITH_NULL_SHA384",
+        "TLS_ECDHE_PSK_WITH_RC4_128_SHA",
+        "TLS_ECDHE_RSA_WITH_NULL_SHA",
+        "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
+        "TLS_ECDH_RSA_WITH_NULL_SHA",
+        "TLS_ECDH_RSA_WITH_RC4_128_SHA",
+        "TLS_GOSTR341112_256_WITH_28147_CNT_IMIT",
+        "TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC",
+        "TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L",
+        "TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S",
+        "TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC",
+        "TLS_GOSTR341112_256_WITH_MAGMA_MGM_L",
+        "TLS_GOSTR341112_256_WITH_MAGMA_MGM_S",
+        "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
+        "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
+        "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5",
+        "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA",
+        "TLS_KRB5_EXPORT_WITH_RC4_40_MD5",
+        "TLS_KRB5_EXPORT_WITH_RC4_40_SHA",
+        "TLS_KRB5_WITH_3DES_EDE_CBC_MD5",
+        "TLS_KRB5_WITH_DES_CBC_MD5",
+        "TLS_KRB5_WITH_DES_CBC_SHA",
+        "TLS_KRB5_WITH_IDEA_CBC_MD5",
+        "TLS_KRB5_WITH_RC4_128_MD5",
+        "TLS_KRB5_WITH_RC4_128_SHA",
+        "TLS_NULL_WITH_NULL_NULL",
+        "TLS_PSK_WITH_NULL_SHA",
+        "TLS_PSK_WITH_NULL_SHA256",
+        "TLS_PSK_WITH_NULL_SHA384",
+        "TLS_PSK_WITH_RC4_128_SHA",
+        "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA",
+        "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5",
+        "TLS_RSA_EXPORT_WITH_RC4_40_MD5",
+        "TLS_RSA_PSK_WITH_NULL_SHA",
+        "TLS_RSA_PSK_WITH_NULL_SHA256",
+        "TLS_RSA_PSK_WITH_NULL_SHA384",
+        "TLS_RSA_PSK_WITH_RC4_128_SHA",
+        "TLS_RSA_WITH_DES_CBC_SHA",
+        "TLS_RSA_WITH_NULL_MD5",
+        "TLS_RSA_WITH_NULL_SHA",
+        "TLS_RSA_WITH_NULL_SHA256",
+        "TLS_RSA_WITH_RC4_128_MD5",
+        "TLS_RSA_WITH_RC4_128_SHA",
+        "TLS_SHA256_SHA256",
+        "TLS_SHA384_SHA384",
+        "TLS_SM4_CCM_SM3",
+        "TLS_SM4_GCM_SM3"
+    )
+    return $listOfInsecureCipherSuites
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/Firewall.ps1 b/ATAPAuditor/Helpers/Firewall.ps1
new file mode 100644
index 0000000..ac89d47
--- /dev/null
+++ b/ATAPAuditor/Helpers/Firewall.ps1
@@ -0,0 +1,83 @@
+function Test-FirewallPaths {
+    [CmdletBinding()]
+    [OutputType([Object])]
+    param (
+        [Parameter(Mandatory = $True, ValueFromPipeline)]
+        [String]
+        $Path,
+        [Parameter(Mandatory = $True)]
+        [String]
+        $Key,
+        [Parameter(Mandatory = $True)]
+        [Object]
+        $ExpectedValue,
+        [Parameter(Mandatory = $True)]
+        [String]
+        $ProfileType,
+        [PSCustomObject]
+        $Result = @{
+            Message = "Registry value not found."
+            Status  = "False"
+        }
+    )
+    BEGIN {
+        $FirewallProfiles = Get-NetFirewallProfile -ErrorAction SilentlyContinue
+    }
+    PROCESS {
+        $regValue = Get-ItemProperty -ErrorAction SilentlyContinue `
+            -Path $Path `
+            -Name $Key `
+        | Select-Object -ExpandProperty "$($Key)"
+        # if regValue == expectedValue OR if the LogFilePath ends with .log
+        if (($regValue -eq $ExpectedValue) -or (($Key -eq "LogFilePath") -and ($regValue -match "[a-z]*.log"))) {
+            $Result = @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        # if regValue isnot empty AND regValue isnot expectedValue AND result is not True (yet)
+        # This result is ranked #2 below "Compliant" and above "Registry value not found"
+        if (($null -ne $regValue) -and ($regValue -ne $ExpectedValue) -and ($Result.Status -ne "True")) {
+            $Result = @{
+                Message = "Registry value is '$regValue'. Expected: $ExpectedValue"
+                Status  = "False"
+            }
+        }
+    }
+    END {
+        $FirewallProfile = $FirewallProfiles | Where-Object {$_.Name -eq $ProfileType}
+        $FirewallProfileValue = $FirewallProfile.$Key
+        # check whether value is a number
+        if ($FirewallProfileValue -is [int32] -or $FirewallProfileValue -is [uint32] -or $FirewallProfileValue -is [int64] -or $FirewallProfileValue -is [uint64]) {
+            # if value is a number, the value may also be greater and equals to the expectedvalue
+            if ($FirewallProfileValue -ge $expectedValue) {
+                $Result = @{
+                    Message = "Compliant"
+                    Status  = "True"
+                }
+            }
+        }
+        if ($FirewallProfileValue -eq $expectedValue) {
+            $Result = @{
+                Message = "Compliant"
+                Status  = "True"
+            }
+        }
+        if ($Key -eq "LogFilePath") {
+            if ($FirewallProfiles -eq $null -or $FirewallProfiles.Count -lt 3) {
+                ### if profiles are empty, skip comparison and continue with other checks
+            } else {
+                if (($FirewallProfiles[0].LogFileName -eq $FirewallProfiles[1].LogFileName) -or
+                    ($FirewallProfiles[0].LogFileName -eq $FirewallProfiles[2].LogFileName) -or
+                    ($FirewallProfiles[1].LogFileName -eq $FirewallProfiles[2].LogFileName)) {
+                        $Result = @{
+                            Message = "For better organization and identification of specific issues within each profile consider using separate logfiles for each profile."
+                            Status  = "Warning"
+                        }
+                    }
+            }
+        }
+        return $Result
+    }
+}
+
diff --git a/ATAPAuditor/Helpers/HashHelper.ps1 b/ATAPAuditor/Helpers/HashHelper.ps1
new file mode 100644
index 0000000..fec6ba2
--- /dev/null
+++ b/ATAPAuditor/Helpers/HashHelper.ps1
@@ -0,0 +1,58 @@
+#Hash functions will be used for hashing results of report
+#Based on SHA-256 and SHA-512
+
+function Get-SHA256Hash { 
+	Param (
+		[Parameter(Mandatory=$true)]
+		[string]
+		$ClearString
+	)
+	
+	$hasher = [System.Security.Cryptography.HashAlgorithm]::Create('sha256')
+	$hash = $hasher.ComputeHash([System.Text.Encoding]::UTF8.GetBytes($ClearString))
+	
+	$hashString = [System.BitConverter]::ToString($hash)
+	$hashString.Replace('-', '')
+}
+
+function GenerateHashTable{
+	Param (
+		[Parameter(Mandatory=$true)]
+		[Report]
+		$report
+	)
+	
+	#hashes for each recommendation
+	$hashtable_sha256 = @{}
+	foreach($recommendation in $report.Sections){
+		$hash_sha256 = ""
+		foreach($section in $recommendation.SubSections){
+			foreach($test in $section.AuditInfos){
+				#hash each test status
+				$statusHash_sha256 = (Get-SHA256Hash $test.Status)
+				$hash_sha256 += $statusHash_sha256
+				#hash combination of tests
+				$hash_sha256 = (Get-SHA256Hash $hash_sha256)
+			}
+		}
+		#add final hash to hashlist
+		$hashtable_sha256.add($recommendation.Title, $hash_sha256)
+	}
+	
+	#checksum hash for overal check
+	$overallHash_sha256 = ""
+	foreach($hash in $hashtable_sha256.values){
+		#add recommendation hash to overall hash
+		$overallHash_sha256 += $hash
+		#hash this value again
+		try{
+			$overallHash_sha256 = Get-SHA256Hash $overallHash_sha256 -ErrorAction Stop
+		}
+		catch{
+			Write-Warning "Hash code for report section couldn't be created."
+		}
+	}
+
+	$hashtable_sha256.add($report.Title, $overallHash_sha256) 
+	return $hashtable_sha256
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/LinuxHelper.ps1 b/ATAPAuditor/Helpers/LinuxHelper.ps1
new file mode 100644
index 0000000..348ce23
--- /dev/null
+++ b/ATAPAuditor/Helpers/LinuxHelper.ps1
@@ -0,0 +1,106 @@
+$script:LinuxDistroId = $null
+
+
+$rcTrue = "True"
+$rcCompliant = "Compliant"
+$rcFalse = "False"
+$rcNone = "None"
+$rcNonCompliant = "Non-Compliant"
+$rcNonCompliantManualReviewRequired = "Manual review required"
+$rcCompliantIPv6isDisabled = "IPv6 is disabled"
+
+if (Test-Path "/etc/os-release") {
+    $osRelease = @{}
+    Get-Content "/etc/os-release" | ForEach-Object {
+        if ($_ -match "^(?<key>\w+)=(?<val>.+)$") {
+            $osRelease[$matches.key] = $matches.val.Trim('"')
+        }
+    }
+
+    $script:LinuxDistroId = $osRelease["ID"]
+
+    if (-not $script:LinuxDistroId) {
+        throw "Could not detect Linux distribution from /etc/os-release"
+    }
+
+    switch ($script:LinuxDistroId) {
+        "ubuntu" {}
+        "debian" {}
+        "rhel" {}
+        "centos" {}
+        "fedora" {}
+        "opensuse" {}
+        default {
+            throw "Unsupported Linux distribution: $script:LinuxDistroId"
+        }
+    }
+    Write-Verbose "Detected $script:LinuxDistroId"
+} else {
+    throw "/etc/os-release not found. Cannot detect Linux distribution."
+}
+
+function Test-PackageInstalled {
+    param (
+        [Parameter(Mandatory = $true)]
+        [string]$PackageName
+    )
+
+    switch ($script:LinuxDistroId) {
+        "ubuntu" 
+        { 
+            dpkg-query -W -f='${db:Status-Abbrev}' $PackageName 2>/dev/null | Out-Null
+            return ($LASTEXITCODE -eq 0)
+        }
+
+        "debian" 
+        { 
+            dpkg-query -W -f='${db:Status-Abbrev}' $PackageName 2>/dev/null | Out-Null
+            return ($LASTEXITCODE -eq 0)
+        }
+
+        "rhel" 
+        { 
+            rpm -q $PackageName >/dev/null 2>&1
+            return ($LASTEXITCODE -eq 0)
+        }
+
+        "centos" 
+        { 
+            rpm -q $PackageName >/dev/null 2>&1
+            return ($LASTEXITCODE -eq 0)
+        }
+
+        "fedora" 
+        { 
+            rpm -q $PackageName >/dev/null 2>&1
+            return ($LASTEXITCODE -eq 0)
+        }
+
+        "opensuse" 
+        { 
+            rpm -q $PackageName >/dev/null 2>&1
+            return ($LASTEXITCODE -eq 0)
+        }
+
+        default 
+        { throw "Unexpected distro in module runtime: $script:LinuxDistroId" }
+    }
+}
+
+function Test-ServiceActiveOrEnabled {
+    param (
+        [Parameter(Mandatory = $true)]
+        [string]$ServiceName
+    )
+
+    # Check if the service is active
+    systemctl is-active --quiet $ServiceName
+    $isActive = ($LASTEXITCODE -eq 0)
+
+    # Check if the service is enabled
+    systemctl is-enabled --quiet $ServiceName
+    $isEnabled = ($LASTEXITCODE -eq 0)
+
+    return ($isActive -or $isEnabled)
+}
+
diff --git a/ATAPAuditor/Helpers/LogFile.ps1 b/ATAPAuditor/Helpers/LogFile.ps1
new file mode 100644
index 0000000..3f6af1b
--- /dev/null
+++ b/ATAPAuditor/Helpers/LogFile.ps1
@@ -0,0 +1,94 @@
+function Set-LogFile {
+	[CmdletBinding(SupportsShouldProcess, ConfirmImpact = 'Medium')]
+	Param(
+		[Parameter(Mandatory = $true)]
+		[Alias('LogPath')]
+		[string]$Path,
+		[Parameter(Mandatory = $true)]
+		[Alias('Logname')]
+		[string]$Name
+	)
+
+	$FullPath = Get-FullPath $Path $Name
+
+	# Create file if it does not already exists
+	if (!(Test-Path -Path $FullPath)) {
+
+		# Create file and start logging
+		New-Item -Path $FullPath -ItemType File -Force | Out-Null
+
+		Add-Content -Path $FullPath -Value "***************************************************************************************************"
+		Add-Content -Path $FullPath -Value " Logfile created at [$([DateTime]::Now)]"
+		Add-Content -Path $FullPath -Value "***************************************************************************************************"
+		Add-Content -Path $FullPath -Value ""
+		Add-Content -Path $FullPath -Value ""
+	}
+}
+
+function Write-LogFile {
+	[CmdletBinding()]
+	Param(
+		[Parameter(Mandatory = $true)]
+		[Alias('LogMessage')]
+		[string]$Message,
+
+		[Parameter(Mandatory = $true)]
+		[Alias('LogPath')]
+		[string]$Path,
+
+		[Parameter(Mandatory = $true)]
+		[Alias('Logname')]
+		[string]$Name,
+
+		[ValidateSet("Error", "Warning", "Info")]
+		[string]$Level = "Info"
+	)
+
+
+	Set-LogFile $Path $Name
+	$FullPath = Get-FullPath $Path $Name
+
+	# Format date for log file
+	$FormattedDate = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
+
+	switch ($Level) {
+		'Error' {
+			# Write-Error $Message
+			$LevelText = '[ERROR]:'
+		}
+		'Warning' {
+			# Write-Warning $Message
+			$LevelText = '[WARNING]:'
+		}
+		'Info' {
+			# Write-Verbose $Message
+			$LevelText = '[INFO]:'
+		}
+	}
+	Add-Content $FullPath "$FormattedDate $LevelText"
+	Add-Content $FullPath "$Message"
+	Add-Content $FullPath "--------------------------"
+	Add-Content $FullPath ""
+}
+
+function Get-FullPath {
+	[CmdletBinding()]
+	Param(
+		[Parameter(Mandatory = $true)]
+		[string]$Path,
+		[Parameter(Mandatory = $true)]
+		[string]$File
+	)
+
+	$FullPath = ""
+	if ($Path.Length -gt 0) {
+		if ($Path[$Path.Length - 1] -ne "\") {
+			$FullPath = $Path + "\" + $File
+		}
+		else {
+			$FullPath = $Path + $File
+		}
+	}
+
+	return $FullPath
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/Menu.ps1 b/ATAPAuditor/Helpers/Menu.ps1
new file mode 100644
index 0000000..2558759
--- /dev/null
+++ b/ATAPAuditor/Helpers/Menu.ps1
@@ -0,0 +1,142 @@
+# Get the report names from the files in the Module folder
+function Get-Reports {
+    # Get the path to the module
+    $atapFile = (Get-Module -ListAvailable ATAPAuditor).Path
+    if ($atapFile.Count -gt 1) {
+        $atapFile = $atapFile[0] # use the first result if there are several
+    } elseif ($atapFile.Count -eq 0) {
+        Write-Host "The ATAP module could not be found."
+        pressAnyKeyToQuit
+        Exit
+    }
+
+    # find all *.ps1 report files
+    $atapDir = Split-Path -parent $atapFile
+    $reportsDir = Join-Path -Path $atapDir -ChildPath "Reports"
+    $reportFiles = Get-ChildItem -Path "$reportsDir\*.ps1" -Recurse
+
+    # Build a dictionary from the file names without the extension
+    $i = 1
+    $reports = [ordered]@{}
+    foreach ($reportName in $reportFiles) {
+        $reports.add([string]$i, $reportName.BaseName)
+        $i++
+    }
+    return $reports
+}
+
+# present a menu based on the dict given as argument
+function Show-Menu {
+    param (
+        [System.Collections.Specialized.OrderedDictionary]$reports
+    )
+    Clear-Host
+    Write-Host "============== AuditTAP Reports ==============`n"
+    $padCount = ([string]$reports.Count).Length
+    foreach ($item in $reports.GetEnumerator()) {
+        Write-Host (' {0}: {1}' -f $item.Key.PadLeft($padCount, ' '), $item.Value)
+    }
+    Write-Host ""
+}
+
+
+function askSelection {
+    param (
+        [System.Collections.Specialized.OrderedDictionary]$reports
+    )
+    $retry = $false
+    :loop while ($true) {
+        # show menu and ask the user for a selection (or multiple)
+        Show-Menu $reports
+        if ($retry) {
+            [string]$selection = Read-Host "Invalid selection. Please try again`nYou can select multiple reports by comma separating the numbers"
+        } else {
+            [string]$selection = Read-Host "Please choose a report to run`nYou can select multiple reports by comma separating the numbers"
+        }
+
+        # sanitize input data
+        $selection = $selection -replace '\s',''
+        $selection = $selection.Trim(',')
+        $selectionArray = $selection.Split(",")
+        $selectionArray = $selectionArray | Select-Object -Unique
+
+        # Check if requested reports are valid / actually present
+        $reportsValid = @()
+        foreach ($i in $selectionArray) {
+            if (!$reports.Contains($i)) {
+                Write-Host "Report $i does not exist"
+                $retry = $true
+                Continue loop
+            } else {
+                $reportsValid += $reports[$i]
+            }
+        }
+        
+        # return the list of valid reports as an array of strings
+        return $reportsValid
+    }
+}
+
+function runReports {
+    param (
+        [string[]]$report
+    )
+    Clear-Host
+    Import-Module -Name ATAPAuditor -Force
+    foreach ($i in $report) {
+        Write-Host "Running report: $i"
+        Save-ATAPHtmlReport -ReportName $i -Force
+        Write-Host ""
+    }
+}
+
+function isAdmin {
+    $unixOS = [System.Environment]::OSVersion.Platform -eq 'Unix'
+	if ($unixOS) {
+        return ($(id -u) -eq 0)
+    } else {
+        return ([Security.Principal.WindowsIdentity]::GetCurrent().Groups -contains 'S-1-5-32-544')
+    }
+}
+
+function pressAnyKeyToQuit {
+    if ($psISE) {
+        Return
+    }
+    Write-Host "Press any key to quit"
+    $null = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown')
+}
+
+if (!(isAdmin)) {
+    Write-Host "Please run as administrator`n"
+    pressAnyKeyToQuit
+} else {
+    $reports = Get-Reports
+    Show-Menu $reports
+    $sel = askSelection $reports
+    runReports $sel
+
+    if ([System.Environment]::OSVersion.Platform -eq 'Unix') {
+        if (($env:XDG_SESSION_TYPE -eq 'tty') -or ($null -eq $env:SUDO_USER)) {
+            # 1. reason to return: no graphical environment to open the file explorer
+            # 2. reason to return: we do not want to open the file explorer as root
+            Return
+        }
+    }
+
+    [string]$action = Read-Host "Do you want to open the output directory? (Y/N)"
+    if ($action -eq 'y' -or $action -eq 'Y') {
+        if ($null -eq $env:ATAPReportPath) {
+            $outPath = [Environment]::GetFolderPath('MyDocuments') | Join-Path -ChildPath 'ATAPReports'
+        } else {
+            $outPath = $env:ATAPReportPath
+        }
+        if (Test-Path -Path $outPath) {
+            if ([System.Environment]::OSVersion.Platform -eq 'Unix') {
+                su $env:SUDO_USER -c "xdg-open $outPath"
+            } else {
+                explorer.exe $outPath
+            }
+        }
+    }
+}
diff --git a/ATAPAuditor/Helpers/ReportUnixOS.ps1 b/ATAPAuditor/Helpers/ReportUnixOS.ps1
new file mode 100644
index 0000000..f543045
--- /dev/null
+++ b/ATAPAuditor/Helpers/ReportUnixOS.ps1
@@ -0,0 +1,20 @@
+[SystemInformation]@{
+    SoftwareInformation = [SoftwareInformation]@{
+        Hostname = hostname
+        OperatingSystem = (Get-Content /etc/os-release | Select-String -Pattern '^PRETTY_NAME=\"(.*)\"$').Matches.Groups[1].Value
+        BuildNumber = 'Version {0} (Build {1}.{2})' -f $v.DisplayVersion, $v.CurrentBuildNumber, $v.UBR
+        InstallationLanguage = (($(locale) | Where-Object { $_ -match "LANG=" }) -split '=')[1]
+        SystemUptime = uptime -p
+        OSArchitecture = lscpu | awk '/Architecture/ {print $2}'
+        KernelVersion = uname -r
+    }
+    HardwareInformation = [HardwareInformation]@{
+        BIOSVersion = dmidecode -s bios-version
+        SystemSKU = (dmidecode -t system)[12] | cut -d ':' -f 2 | xargs
+        SystemSerialnumber = (dmidecode -t system)[9] | cut -d ':' -f 2 | xargs
+        SystemManufacturer = (dmidecode -t system)[6] | cut -d ':' -f 2 | xargs
+        SystemModel = dmidecode -s system-product-name
+        FreeDiskSpace = "{0:N1} GB" -f ((Get-PSDrive | Where-Object { $_.Name -eq '/' }).Free / 1GB)
+        FreePhysicalMemory = "{0:N1} GB" -f (( -split (Get-Content /proc/meminfo | Where-Object { $_ -match 'MemFree:' }))[1] / 1MB)
+    }
+}
diff --git a/ATAPAuditor/Helpers/ReportWindowsOS.ps1 b/ATAPAuditor/Helpers/ReportWindowsOS.ps1
new file mode 100644
index 0000000..515f7fd
--- /dev/null
+++ b/ATAPAuditor/Helpers/ReportWindowsOS.ps1
@@ -0,0 +1,41 @@
+$infos = Get-CimInstance Win32_OperatingSystem
+$disk = Get-CimInstance Win32_LogicalDisk | Where-Object -Property DeviceID -eq "C:"
+$role = Switch ((Get-CimInstance -Class Win32_ComputerSystem).DomainRole) {
+    "0"	{ "Standalone Workstation" }
+    "1"	{ "Member Workstation" }
+    "2"	{ "Standalone Server" }
+    "3"	{ "Member Server" }
+    "4"	{ "Backup Domain Controller" }
+    "5"	{ "Primary Domain Controller" }
+}
+$freeMemory = ($infos.FreePhysicalMemory / 1024) / 1024;
+$totalMemory = ($infos.TotalVirtualMemorySize / 1024) / 1024;
+$uptime = (get-date) - (gcim Win32_OperatingSystem).LastBootUpTime
+$v = Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion'	
+
+
+[SystemInformation]@{
+    SoftwareInformation = [SoftwareInformation]@{
+        Hostname             = hostname
+        DomainRole           = $role
+        OperatingSystem      = $infos.Caption
+        LicenseStatus        = $lcStatus
+        BuildNumber          = 'Version {0} (Build {1}.{2})' -f $v.DisplayVersion, $v.CurrentBuildNumber, $v.UBR
+        InstallationLanguage = ((Get-UICulture).DisplayName)
+        SystemUptime         = '{0:d1}:{1:d2}:{2:d2}:{3:d2}' -f $uptime.Days, $uptime.Hours, $uptime.Minutes, $uptime.Seconds
+        OSArchitecture       = (Get-WmiObject win32_operatingsystem | select osarchitecture).osarchitecture
+    }
+    HardwareInformation = [HardwareInformation]@{
+        BIOSVersion        = (Get-WmiObject -Class Win32_BIOS).Version
+        SystemSKU          = (Get-WmiObject -Namespace root\wmi -Class MS_SystemInformation).SystemSKU
+        SystemSerialnumber = (Get-WmiObject win32_bios).Serialnumber
+        SystemManufacturer = (Get-WMIObject -class Win32_ComputerSystem).Manufacturer
+        SystemModel        = (Get-WMIObject -class Win32_ComputerSystem).Model
+        FreeDiskSpace      = "{0:N3}" -f "$([math]::Round(($disk.FreeSpace / $disk.Size)*100,1))% " + "{0:N3}" -f "($([math]::Round($disk.FreeSpace / 1GB,1)) GB / $([math]::Round($disk.Size / 1GB,1)) GB)"
+        FreePhysicalMemory = "{0:N3}" -f "$([math]::Round(($freeMemory/$totalMemory)*100,1))% ($([math]::Round($freeMemory,1)) GB / $([math]::Round($totalMemory,1)) GB)"
+    }
+}
+
+
+
+
diff --git a/ATAPAuditor/Helpers/SecurityPolicy.psm1 b/ATAPAuditor/Helpers/SecurityPolicy.psm1
new file mode 100644
index 0000000..5a3b787
--- /dev/null
+++ b/ATAPAuditor/Helpers/SecurityPolicy.psm1
@@ -0,0 +1,36 @@
+function ConvertTo-NTAccountUser {
+	[CmdletBinding()]
+	[OutputType([hashtable])]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[string] $Name
+	)
+
+	process {
+		try {
+			# Identity doesn't exist on when Hyper-V isn't installed
+			if ($Name -eq "NT VIRTUAL MACHINE\Virtual Machines" -and
+				(Get-WindowsOptionalFeature -Online -FeatureName "Microsoft-Hyper-V").State -ne "Enabled") {
+				return $null
+			}
+
+			Write-Verbose "[ConvertTo-NTAccountUser] Converting identity '$Name' to NTAccount"
+			if ($Name -match "^(S-[0-9-]{3,})") {
+				$sidAccount = [System.Security.Principal.SecurityIdentifier]$Name
+			}
+			else {
+				$sidAccount = ([System.Security.Principal.NTAccount]$Name).Translate([System.Security.Principal.SecurityIdentifier])
+			}
+			return @{
+				Account = $sidAccount.Translate([System.Security.Principal.NTAccount])
+				Sid     = $sidAccount.Value
+			}
+		}
+		catch{
+			return @{
+                Account = "Orphaned Account"
+                Sid     = $Name
+            }
+		}
+	}
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.1.sh
new file mode 100644
index 0000000..1ee773e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.1.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="cramfs" # set module name
+    # Check how module will be loaded
+    l_loadable="$(modprobe -n -v "$l_mname")"
+    if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+    fi
+    # Check is the module currently loaded
+    if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+    fi
+    # Check if the module is deny listed
+    if grep -Pq -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*; then
+        l_output="$l_output\n - module: \"$l_mname\" is deny listed in:
+        \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.2.sh
new file mode 100644
index 0000000..d3b73f2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.2.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="squashfs" # set module name
+    # Check how module will be loaded
+    l_loadable="$(modprobe -n -v "$l_mname")"
+    if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+    fi
+    # Check is the module currently loaded
+    if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+    fi
+    # Check if the module is deny listed
+    if grep -Pq -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*; then
+        l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.3.sh
new file mode 100644
index 0000000..18d958f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.1.3.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="udf" # set module name
+    # Check how module will be loaded
+    l_loadable="$(modprobe -n -v "$l_mname")"
+    if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+    fi
+    # Check is the module currently loaded
+    if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+    fi
+    # Check if the module is deny listed
+    if grep -Pq -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*; then
+        l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.10.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.10.sh
new file mode 100644
index 0000000..aa407a1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.1.10.sh
@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="usb-storage" # set module name
+    # Check how module will be loaded
+    l_loadable="$(modprobe -n -v "$l_mname")"
+    if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loadable:
+\"$l_loadable\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loadable:
+\"$l_loadable\""
+    fi
+    # Check is the module currently loaded
+    if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+        l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+    fi
+    # Check if the module is deny listed
+    if grep -Pq -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*; then
+        l_output="$l_output\n - module: \"$l_mname\" is deny listed in:
+\"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+    else
+        l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit
+failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.5.1.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.5.1.sh
new file mode 100644
index 0000000..b6121b8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.5.1.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="kernel.randomize_va_space"
+    kpvalue="2"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc )"
+    fafile="$( grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}' )"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: "
+        [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.2.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.2.sh
new file mode 100644
index 0000000..a031d2c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.2.sh
@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3" # Space seporated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -
+Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        echo -e "$l_pkgoutput"
+        # Look for existing settings and set variables if they exist
+        l_gdmfile="$(
+            grep -Prils '^\h*banner-message-enable\b'
+            /etc/dconf/db/*.d
+        )"
+        if [ -n "$l_gdmfile" ]; then
+            # Set profile name based on dconf db directory ({PROFILE_NAME}.d)
+            l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<<"$l_gdmfile")"
+            # Check if banner message is enabled
+            if grep -Pisq '^\h*banner-message-enable=true\b' "$l_gdmfile"; then
+                l_output="$l_output\n - The \"banner-message-enable\" option is
+enabled in \"$l_gdmfile\""
+            else
+                l_output2="$l_output2\n - The \"banner-message-enable\" option is
+not enabled"
+            fi
+            l_lsbt="$(grep -Pios '^\h*banner-message-text=.*$' "$l_gdmfile")"
+            if [ -n "$l_lsbt" ]; then
+                l_output="$l_output\n - The \"banner-message-text\" option is set
+in \"$l_gdmfile\"\n - banner-message-text is set to:\n - \"$l_lsbt\""
+            else
+                l_output2="$l_output2\n - The \"banner-message-text\" option is
+not set"
+            fi
+            if
+                grep -Pq "^\h*system-db:$l_gdmprofile"
+                /etc/dconf/profile/"$l_gdmprofile"
+            then
+                l_output="$l_output\n - The \"$l_gdmprofile\" profile exists"
+            else
+                l_output2="$l_output2\n - The \"$l_gdmprofile\" profile doesn't
+exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_gdmprofile" ]; then
+                l_output="$l_output\n - The \"$l_gdmprofile\" profile exists in
+the dconf database"
+            else
+                l_output2="$l_output2\n - The \"$l_gdmprofile\" profile doesn't
+exist in the dconf database"
+            fi
+        else
+            l_output2="$l_output2\n - The \"banner-message-enable\" option isn't
+configured"
+        fi
+    else
+        echo -e "\n\n - GNOME Desktop Manager isn't installed\n -
+Recommendation is Not Applicable\n- Audit result:\n *** PASS ***\n"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit
+failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.3.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.3.sh
new file mode 100644
index 0000000..c4e7589
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.3.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3" # Space seporated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        output="" output2="" 
+        l_gdmfile="$(grep -Pril '^\h*disable-user-list\h*=\h*true\b' /etc/dconf/db )"
+        if [ -n "$l_gdmfile" ]; then
+            output="$output\n - The \"disable-user-list\" option is enabled in \"$l_gdmfile\""
+            l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<<"$l_gdmfile")"
+            if
+                grep -Pq "^\h*system-db:$l_gdmprofile" /etc/dconf/profile/"$l_gdmprofile"
+            then
+                output="$output\n - The \"$l_gdmprofile\" exists"
+            else
+                output2="$output2\n - The \"$l_gdmprofile\" doesn't exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_gdmprofile" ]; then
+                output="$output\n - The \"$l_gdmprofile\" profile exists in the dconf database"
+            else
+                output2="$output2\n - The \"$l_gdmprofile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            output2="$output2\n - The \"disable-user-list\" option is not enabled"
+        fi
+        if [ -z "$output2" ]; then
+            echo -e "$l_pkgoutput\n- Audit result:\n *** PASS: ***\n$output\n"
+        else
+            echo -e "$l_pkgoutput\n- Audit Result:\n *** FAIL: ***\n$output2\n"
+            [ -n "$output" ] && echo -e "$output\n"
+        fi
+    else
+        echo -e "\n\n - GNOME Desktop Manager isn't installed\n - Recommendation is Not Applicable\n- Audit result:\n *** PASS ***\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.4.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.4.sh
new file mode 100644
index 0000000..8d711a9
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.4.sh
@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+{
+    # Check if GNMOE Desktop Manager is installed. If package isn't installed, recommendation is Not Applicable\n
+    # determine system's package manager
+    l_pkgoutput=""
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    # Check if GDM is installed
+    l_pcl="gdm gdm3" # Space seporated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    # Check configuration (If applicable)
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        l_idmv="900" # Set for max value for idle-delay in seconds
+        l_ldmv="5"   # Set for max value for lock-delay in seconds
+        # Look for idle-delay to determine profile in use, needed for remaining tests
+        l_kfile="$(grep -Psril '^\h*idle-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/ )" # Determine file containing idle-delay key
+        if [ -n "$l_kfile" ]; then
+            # set profile name (This is the name of a dconf database)
+            l_profile="$(awk -F'/' '{split($(NF-1),a,".");print a[1]}' <<<"$l_kfile")" #Set the key profile name
+            l_pdbdir="/etc/dconf/db/$l_profile.d"                                      # Set the key file dconf db directory
+            # Confirm that idle-delay exists, includes unit32, and value is   between 1 and max value for idle-delay
+            l_idv="$(awk -F 'uint32' '/idle-delay/{print $2}' "$l_kfile" |     xargs)"
+            if [ -n "$l_idv" ]; then
+                [ "$l_idv" -gt "0" -a "$l_idv" -le "$l_idmv" ] && l_output="$l_output\n - The \"idle-delay\" option is set to \"$l_idv\" seconds in \"$l_kfile\""
+                [ "$l_idv" = "0" ] && l_output2="$l_output2\n - The \"idle-delay\" option is set to \"$l_idv\" (disabled) in \"$l_kfile\""
+                [ "$l_idv" -gt "$l_idmv" ] && l_output2="$l_output2\n - The \"idle-delay\" option is set to \"$l_idv\" seconds (greater than $l_idmv) in \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - The \"idle-delay\" option is not set in \"$l_kfile\""
+            fi
+            # Confirm that lock-delay exists, includes unit32, and value is between 0 and max value for lock-delay
+            l_ldv="$(awk -F 'uint32' '/lock-delay/{print $2}' "$l_kfile" |xargs)"
+            if [ -n "$l_ldv" ]; then
+                [ "$l_ldv" -ge "0" -a "$l_ldv" -le "$l_ldmv" ] && l_output="$l_output\n - The \"lock-delay\" option is set to \"$l_ldv\" seconds in \"$l_kfile\""
+                [ "$l_ldv" -gt "$l_ldmv" ] && l_output2="$l_output2\n - The \"lock-delay\" option is set to \"$l_ldv\" seconds (greater than $l_ldmv) in \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - The \"lock-delay\" option is not set in \"$l_kfile\""
+            fi
+            # Confirm that dconf profile exists
+            if grep -Psq "^\h*system-db:$l_profile" /etc/dconf/profile/*; then 
+		l_output="$l_output\n - The \"$l_profile\" profile exists"
+            else
+                l_output2="$l_output2\n - The \"$l_profile\" doesn't exist"
+            fi
+            # Confirm that dconf profile database file exists
+            if [ -f "/etc/dconf/db/$l_profile" ]; then
+                l_output="$l_output\n - The \"$l_profile\" profile exists in the dconf database"
+            else
+                l_output2="$l_output2\n - The \"$l_profile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            l_output2="$l_output2\n - The \"idle-delay\" option doesn't exist, remaining tests skipped"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.5.sh
new file mode 100644
index 0000000..3581400
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.5.sh
@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+{
+    # Check if GNOME Desktop Manager is installed. If package isn't installed, recommendation is Not Applicable\n
+    # determine system's package manager
+    l_pkgoutput=""
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    # Check if GDM is installed
+    l_pcl="gdm gdm3" # Space seporated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    # Check configuration (If applicable)
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        # Look for idle-delay to determine profile in use, needed for remaining    tests
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*idle-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d" #set directory of key file to be locked
+        l_kfd2="/etc/dconf/db/$(grep -Psril '^\h*lock-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"       #set directory of key file to be locked
+        if [ -d "$l_kfd" ]; then # If key file directory doesn't exist, options can't be locked
+            if
+                grep -Prilq '\/org\/gnome\/desktop\/session\/idle-delay\b'
+                "$l_kfd"
+            then
+                l_output="$l_output\n - \"idle-delay\" is locked in \"$(
+                    grep -Pril '\/org\/gnome\/desktop\/session\/idle-delay\b' "$l_kfd"
+                )\""
+            else
+                l_output2="$l_output2\n - \"idle-delay\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"idle-delay\" is not set so it can not be locked"
+        fi
+        if [ -d "$l_kfd2" ]; then # If key file directory doesn't exist, options can't be locked
+            if
+                grep -Prilq '\/org\/gnome\/desktop\/screensaver\/lock-delay\b'
+                "$l_kfd2"
+            then
+                l_output="$l_output\n - \"lock-delay\" is locked in \"$(
+                    grep -
+                    Pril '\/org\/gnome\/desktop\/screensaver\/lock-delay\b' "$l_kfd2"
+                )\""
+            else
+                l_output2="$l_output2\n - \"lock-delay\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"lock-delay\" is not set so it can not be
+locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed
+on the system\n - Recommendation is not applicable"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit
+failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.6.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.6.sh
new file mode 100644
index 0000000..7632b13
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.6.sh
@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput="" l_output="" l_output2=""
+    # Check if GNOME Desktop Manager is installed. If package isn't installed, recommendation is Not Applicable\n
+    # determine system's package manager
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    # Check if GDM is installed
+    l_pcl="gdm gdm3" # Space seporated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    # Check configuration (If applicable)
+    if [ -n "$l_pkgoutput" ]; then
+        echo -e "$l_pkgoutput"
+        # Look for existing settings and set variables if they exist
+        l_kfile="$(grep -Prils -- '^\h*automount\b' /etc/dconf/db/*.d)"
+        l_kfile2="$(grep -Prils -- '^\h*automount-open\b' /etc/dconf/db/*.d)"
+        # Set profile name based on dconf db directory ({PROFILE_NAME}.d)
+        if [ -f "$l_kfile" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<<"$l_kfile")"
+        elif [ -f "$l_kfile2" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<<"$l_kfile2")"
+        fi
+        # If the profile name exist, continue checks
+        if [ -n "$l_gpname" ]; then
+            l_gpdir="/etc/dconf/db/$l_gpname.d"
+            # Check if profile file exists
+            if grep -Pq -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*; then
+                l_output="$l_output\n - dconf database profile file \"$(grep -Pl -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*)\" exists"
+            else
+                l_output2="$l_output2\n - dconf database profile isn't set"
+            fi
+            # Check if the dconf database file exists
+            if [ -f "/etc/dconf/db/$l_gpname" ]; then
+                l_output="$l_output\n - The dconf database \"$l_gpname\" exists"
+            else
+                l_output2="$l_output2\n - The dconf database \"$l_gpname\" doesn't exist"
+            fi
+            # check if the dconf database directory exists
+            if [ -d "$l_gpdir" ]; then
+                l_output="$l_output\n - The dconf directory \"$l_gpdir\" exitst"
+            else
+                l_output2="$l_output2\n - The dconf directory \"$l_gpdir\" doesn't exist"
+            fi
+            # check automount setting
+            if grep -Pqrs -- '^\h*automount\h*=\h*false\b' "$l_kfile"; then
+                l_output="$l_output\n - \"automount\" is set to false in: \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - \"automount\" is not set correctly"
+            fi
+            # check automount-open setting
+            if grep -Pqs -- '^\h*automount-open\h*=\h*false\b' "$l_kfile2"; then
+                l_output="$l_output\n - \"automount-open\" is set to false in: \"$l_kfile2\""
+            else
+                l_output2="$l_output2\n - \"automount-open\" is not set correctly"
+            fi
+        else
+            # Setings don't exist. Nothing further to check
+            l_output2="$l_output2\n - neither \"automount\" or \"automount-open\" is set"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.7.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.7.sh
new file mode 100644
index 0000000..b0ec907
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.7.sh
@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+{
+    # Check if GNOME Desktop Manager is installed. If package isn't installed, recommendation is Not Applicable\n
+    # determine system's package manager
+    l_pkgoutput=""
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    # Check if GDM is installed
+    l_pcl="gdm gdm3" # Space seporated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    # Check configuration (If applicable)
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        # Look for idle-delay to determine profile in use, needed for remaining tests
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*automount\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d" #set directory of key file to be locked
+        l_kfd2="/etc/dconf/db/$(grep -Psril '^\h*automount-open\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}' ).d" #set directory of key file to be locked
+        if [ -d "$l_kfd" ]; then # If key file directory doesn't exist, options can't be locked
+            if
+                grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/automount\b'
+                "$l_kfd"
+            then
+                l_output="$l_output\n - \"automount\" is locked in \"$(
+                    grep -Pil
+                    '^\h*\/org/gnome\/desktop\/media-handling\/automount\b' "$l_kfd"
+                )\""
+            else
+                l_output2="$l_output2\n - \"automount\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"automount\" is not set so it can not be
+locked"
+        fi
+        if [ -d "$l_kfd2" ]; then # If key file directory doesn't exist, options can't be locked
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/automount-
+open\b' "$l_kfd2"; then
+                l_output="$l_output\n - \"lautomount-open\" is locked in \"$(
+                    grep
+                    -Pril '^\h*\/org/gnome\/desktop\/media-handling\/automount-open\b' "$l_kfd2"
+                )\""
+            else
+                l_output2="$l_output2\n - \"automount-open\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"automount-open\" is not set so it can
+not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed
+on the system\n - Recommendation is not applicable"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit
+failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.8.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.8.sh
new file mode 100644
index 0000000..4fdd471
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.8.sh
@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput="" l_output="" l_output2=""
+    # Check if GNOME Desktop Manager is installed. If package isn't installed, recommendation is Not Applicable\n
+    # determine system's package manager
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    # Check if GDM is installed
+    l_pcl="gdm gdm3" # Space separated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -
+Package: \"$l_pn\" exists on the system\n - checking configuration"
+        echo -e "$l_pkgoutput"
+    done
+    # Check configuration (If applicable)
+    if [ -n "$l_pkgoutput" ]; then
+        echo -e "$l_pkgoutput"
+        # Look for existing settings and set variables if they exist
+        l_kfile="$(grep -Prils -- '^\h*autorun-never\b' /etc/dconf/db/*.d)"
+        # Set profile name based on dconf db directory ({PROFILE_NAME}.d)
+        if [ -f "$l_kfile" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<<"$l_kfile")"
+        fi
+        # If the profile name exist, continue checks
+        if [ -n "$l_gpname" ]; then
+            l_gpdir="/etc/dconf/db/$l_gpname.d"
+            # Check if profile file exists
+            if grep -Pq -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*; then
+                l_output="$l_output\n - dconf database profile file \"$(
+                    grep -Pl
+                    -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*
+                )\" exists"
+            else
+                l_output2="$l_output2\n - dconf database profile isn't set"
+            fi
+            # Check if the dconf database file exists
+            if [ -f "/etc/dconf/db/$l_gpname" ]; then
+                l_output="$l_output\n - The dconf database \"$l_gpname\" exists"
+            else
+                l_output2="$l_output2\n - The dconf database \"$l_gpname\"
+doesn't exist"
+            fi
+            # check if the dconf database directory exists
+            if [ -d "$l_gpdir" ]; then
+                l_output="$l_output\n - The dconf directory \"$l_gpdir\" exitst"
+            else
+                l_output2="$l_output2\n - The dconf directory \"$l_gpdir\"
+doesn't exist"
+            fi
+            # check autorun-never setting
+            if grep -Pqrs -- '^\h*autorun-never\h*=\h*true\b' "$l_kfile"; then
+                l_output="$l_output\n - \"autorun-never\" is set to true in:
+\"$l_kfile\""
+            else
+                l_output2="$l_output2\n - \"autorun-never\" is not set correctly"
+            fi
+        else
+            # Settings don't exist. Nothing further to check
+            l_output2="$l_output2\n - \"autorun-never\" is not set"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed
+on the system\n - Recommendation is not applicable"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit
+failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.9.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.9.sh
new file mode 100644
index 0000000..030120a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-1.8.9.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+{
+    # Check if GNOME Desktop Manager is installed. If package isn't installed, recommendation is Not Applicable\n
+    # determine system's package manager
+    l_pkgoutput=""
+    if command -v dpkg-query >/dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm >/dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    # Check if GDM is installed
+    l_pcl="gdm gdm3" # Space separated list of packages to check
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" >/dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n -Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    # Check configuration (If applicable)
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        # Look for idle-delay to determine profile in use, needed for remaining tests
+        l_kfd="/etc/dconf/db/$( grep -Psril '^\h*autorun-never\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d" #set directory of key file to be locked
+        if [ -d "$l_kfd" ]; then # If key file directory doesn't exist, options can't be locked
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/autorun-never\b' "$l_kfd"; then
+                l_output="$l_output\n - \"autorun-never\" is locked in \"$(
+                    grep -Pil '^\h*\/org/gnome\/desktop\/media-handling\/autorun-never\b' "$l_kfd"
+                )\""
+            else
+                l_output2="$l_output2\n - \"autorun-never\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"autorun-never\" is not set so it can not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-2.1.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-2.1.1.1.sh
new file mode 100644
index 0000000..02ca1a6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-2.1.1.1.sh
@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+{
+    output="" l_tsd="" l_sdtd="" chrony="" l_ntp=""
+    dpkg-query -W chrony >/dev/null 2>&1 && l_chrony="y"
+    dpkg-query -W ntp >/dev/null 2>&1 && l_ntp="y" || l_ntp=""
+    systemctl list-units --all --type=service | grep -q 'systemd-
+timesyncd.service' && systemctl is-enabled systemd-timesyncd.service | grep -q 'enabled' && l_sdtd="y"
+    # ! systemctl is-enabled systemd-timesyncd.service | grep -q 'enabled' &&
+    l_nsdtd="y" || l_nsdtd=""
+    if [[ "$l_chrony" = "y" && "$l_ntp" != "y" && "$l_sdtd" != "y" ]]; then
+        l_tsd="chrony"
+        output="$output\n- chrony is in use on the system"
+    elif [[ "$l_chrony" != "y" && "$l_ntp" = "y" && "$l_sdtd" != "y" ]]; then
+        l_tsd="ntp"
+        output="$output\n- ntp is in use on the system"
+    elif [[ "$l_chrony" != "y" && "$l_ntp" != "y" ]]; then
+        if
+            systemctl list-units --all --type=service | grep -q 'systemd-
+timesyncd.service' && systemctl is-enabled systemd-timesyncd.service | grep -Eq '(enabled|disabled|masked)'
+        then
+            l_tsd="sdtd"
+            output="$output\n- systemd-timesyncd is in use on the system"
+        fi
+    else
+        [[ "$l_chrony" = "y" && "$l_ntp" = "y" ]] && output="$output\n- both
+chrony and ntp are in use on the system"
+        [[ "$l_chrony" = "y" && "$l_sdtd" = "y" ]] && output="$output\n- both
+chrony and systemd-timesyncd are in use on the system"
+        [[ "$l_ntp" = "y" && "$l_sdtd" = "y" ]] && output="$output\n- both ntp
+and systemd-timesyncd are in use on the system"
+    fi
+    if [ -n "$l_tsd" ]; then
+        echo -e "\n- PASS:\n$output\n"
+    else
+        echo -e "\n- FAIL:\n$output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.1.sh
new file mode 100644
index 0000000..69033ff
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.1.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    output=""
+    grubfile=$(find /boot -type f \( -name 'grubenv' -o -name 'grub.conf' -o -name 'grub.cfg' \) -exec grep -Pl -- '^\h*(kernelopts=|linux|kernel)' {} \;    )
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    if [ -s "$grubfile" ]; then
+        ! grep -P -- "^\h*(kernelopts=|linux|kernel)" "$grubfile" | grep -vq -- ipv6.disable=1 && output="IPv6 Disabled in \"$grubfile\""
+    fi
+    if
+        grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" $searchloc && grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$" $searchloc && sysctl net.ipv6.conf.all.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" && sysctl net.ipv6.conf.default.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$"
+    then
+        [ -n "$output" ] && output="$output, and in sysctl config" || output="ipv6 disabled in sysctl config"
+    fi
+    [ -n "$output" ] && echo -e "\n$output\n" || echo -e "\nIPv6 is enabled on the system\n"
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.2.sh
new file mode 100644
index 0000000..725bc7a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.2.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+if command -v nmcli >/dev/null 2>&1; then
+    if nmcli radio all | grep -Eq '\s*\S+\s+disabled\s+\S+\s+disabled\b'; then
+        echo "Wireless is not enabled"
+    else
+        nmcli radio all
+    fi
+elif [ -n "$(find /sys/class/net/*/ -type d -name wireless)" ]; then
+    t=0
+    mname=$(for driverdir in $(find /sys/class/net/*/ -type d -name wireless |
+        xargs -0 dirname); do basename "$(
+            readlink -f
+            "$driverdir"/device/driver/module
+        )"; done | sort -u)
+    for dm in $mname; do
+        if
+            grep -Eq "^\s*install\s+$dm\s+/bin/(true|false)"
+            /etc/modprobe.d/*.conf
+        then
+            /bin/true
+        else
+            echo "$dm is not disabled"
+            t=1
+        fi
+    done
+    [ "$t" -eq 0 ] && echo "Wireless is not enabled"
+else
+    echo "Wireless is not enabled"
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.3.sh
new file mode 100644
index 0000000..ce129a5
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.3.sh
@@ -0,0 +1,40 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="dccp" # set module name
+    # Check if the module exists on the system
+    if
+        [ -z "$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory")" ]
+    then
+        # Check how module will be loaded
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        [ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(
+            grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable" )"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        # Check is the module currently loaded
+        if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        # Check if the module is deny listed
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$(tr '-' '_' <<<"$l_mname" )\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.4.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.4.sh
new file mode 100644
index 0000000..824c81c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.4.sh
@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="sctp" # set module name
+    # Check if the module exists on the system
+    if
+        [ -z "$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory" )" ]
+    then
+        # Check how module will be loaded
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        [ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$( grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable" )"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        # Check is the module currently loaded
+        if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        # Check if the module is deny listed
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed" 
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.5.sh
new file mode 100644
index 0000000..715a2a2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.5.sh
@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="rds" # set module name
+    # Check if the module exists on the system
+    if
+        [ -z "$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory" )" ]
+    then
+        # Check how module will be loaded
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        [ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(
+            grep -P --
+            "(^\h*install|\b$l_mname)\b" <<<"$l_loadable"
+        )"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        # Check is the module currently loaded
+        if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        # Check if the module is deny listed
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.6.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.6.sh
new file mode 100644
index 0000000..69aa653
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.1.6.sh
@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="tipc" # set module name
+    # Check if the module exists on the system
+    if
+        [ -z "$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory")" ]
+    then
+        # Check how module will be loaded
+        l_loadable="$(modprobe -n -v "$l_mname")" [ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable" )"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        # Check is the module currently loaded
+        if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        # Check if the module is deny listed
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    # Report results. If no failures output in l_output2, we pass
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.1.sh
new file mode 100644
index 0000000..2e5b79b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.1.sh
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.conf.all.send_redirects=0 net.ipv4.conf.default.send_redirects=0"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/{print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc )"
+        l_fafile="$(grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.2.sh
new file mode 100644
index 0000000..9014aa3
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.2.2.sh
@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.ip_forward=0 net.ipv6.conf.all.forwarding=0"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc)"
+        l_fafile="$(grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}'  )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    ipv6_chk() {
+        l_ipv6s=""
+        grubfile=$(find /boot -type f \( -name 'grubenv' -o -name 'grub.conf' -o -name 'grub.cfg' \) -exec grep -Pl -- '^\h*(kernelopts=|linux|kernel)' {} \; )
+        if [ -s "$grubfile" ]; then
+            ! grep -P -- "^\h*(kernelopts=|linux|kernel)" "$grubfile" | grep -vq -- ipv6.disable=1 && l_ipv6s="disabled"
+        fi
+        if
+            grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" $l_searchloc && grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$" $l_searchloc && sysctl net.ipv6.conf.all.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" && sysctl net.ipv6.conf.default.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$"
+        then
+            l_ipv6s="disabled"
+        fi
+        if [ -n "$l_ipv6s" ]; then
+            l_output="$l_output\n - IPv6 is disabled on the system, \"$l_kpname\" is not applicable"
+        else
+            KPC
+        fi
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        if grep -q '^net.ipv6.' <<<"$l_kpe"; then
+            ipv6_chk
+        else
+            KPC
+        fi
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.1.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.1.sh
new file mode 100644
index 0000000..bd038a7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.1.sh
@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.conf.all.accept_source_route=0 net.ipv4.conf.default.accept_source_route=0 net.ipv6.conf.all.accept_source_route=0 net.ipv6.conf.default.accept_source_route=0"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc )"
+        l_fafile="$(grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    ipv6_chk() {
+        l_ipv6s=""
+        grubfile=$(
+            find /boot -type f \( -name 'grubenv' -o -name 'grub.conf' -o -name 'grub.cfg' \) -exec grep -Pl -- '^\h*(kernelopts=|linux|kernel)' {}  \;
+        )
+        if [ -s "$grubfile" ]; then
+            ! grep -P -- "^\h*(kernelopts=|linux|kernel)" "$grubfile" | grep -vq -- ipv6.disable=1 && l_ipv6s="disabled"
+        fi
+        if
+            grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" $l_searchloc &&  grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$"             $l_searchloc && sysctl net.ipv6.conf.all.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" && sysctl  net.ipv6.conf.default.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$"
+        then
+            l_ipv6s="disabled"
+        fi
+        if [ -n "$l_ipv6s" ]; then
+            l_output="$l_output\n - IPv6 is disabled on the system, \"$l_kpname\" is not applicable"
+        else
+            KPC
+        fi
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        if grep -q '^net.ipv6.' <<<"$l_kpe"; then
+            ipv6_chk
+        else
+            KPC
+        fi
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.2.sh
new file mode 100644
index 0000000..24a149c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.2.sh
@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.conf.all.accept_redirects=0 net.ipv4.conf.default.accept_redirects=0 net.ipv6.conf.all.accept_redirects=0 net.ipv6.conf.default.accept_redirects=0" 
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc )"
+        l_fafile="$(grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    ipv6_chk() {
+        l_ipv6s=""
+        grubfile=$(
+            find /boot -type f \( -name 'grubenv' -o -name 'grub.conf' -o -name 'grub.cfg' \) -exec grep -Pl -- '^\h*(kernelopts=|linux|kernel)' {}             \;
+        )
+        if [ -s "$grubfile" ]; then
+            ! grep -P -- "^\h*(kernelopts=|linux|kernel)" "$grubfile" | grep -vq -- ipv6.disable=1 && l_ipv6s="disabled"
+        fi
+        if
+            grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" $l_searchloc && grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$" $l_searchloc && sysctl net.ipv6.conf.all.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" && sysctl             net.ipv6.conf.default.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$"
+        then
+            l_ipv6s="disabled"
+        fi
+        if [ -n "$l_ipv6s" ]; then
+            l_output="$l_output\n - IPv6 is disabled on the system, \"$l_kpname\" is not applicable"
+        else
+            KPC
+        fi
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        if grep -q '^net.ipv6.' <<<"$l_kpe"; then
+            ipv6_chk
+        else
+            KPC
+        fi
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.3.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.3.sh
new file mode 100644
index 0000000..6e77404
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.3.sh
@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.conf.default.secure_redirects=0 net.ipv4.conf.all.secure_redirects=0"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc )"
+        l_fafile="$(
+            grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}'
+        )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.4.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.4.sh
new file mode 100644
index 0000000..48faa27
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.4.sh
@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.conf.all.log_martians=1 net.ipv4.conf.default.log_martians=1"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(
+            grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc
+        )"
+        l_fafile="$(grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv --  "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.5.sh
new file mode 100644
index 0000000..8f1d931
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.5.sh
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.icmp_echo_ignore_broadcasts=1"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$( grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc )"
+        l_fafile="$(
+            grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.6.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.6.sh
new file mode 100644
index 0000000..cc54061
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.6.sh
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.icmp_ignore_bogus_error_responses=1"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc )"
+        l_fafile="$(
+            grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.7.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.7.sh
new file mode 100644
index 0000000..75a6536
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.7.sh
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.conf.all.rp_filter=1 net.ipv4.conf.default.rp_filter=1"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc )"
+        l_fafile="$(grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.8.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.8.sh
new file mode 100644
index 0000000..5d5bb06
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.8.sh
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv4.tcp_syncookies=1"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc)"
+        l_fafile="$( grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}' )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        KPC
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.9.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.9.sh
new file mode 100644
index 0000000..c7890d6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.3.9.sh
@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_parlist="net.ipv6.conf.all.accept_ra=0 net.ipv6.conf.default.accept_ra=0"
+    l_searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+    KPC() {
+        l_krp="$(sysctl "$l_kpname" | awk -F= '{print $2}' | xargs)"
+        l_pafile="$(grep -Psl -- "^\h*$l_kpname\h*=\h*$l_kpvalue\b\h*(#.*)?$" $l_searchloc)"
+        l_fafile="$(
+            grep -s -- "^\s*$l_kpname" $l_searchloc | grep -Pv -- "\h*=\h*$l_kpvalue\b\h*" | awk -F: '{print $1}'
+        )"
+        if [ "$l_krp" = "$l_kpvalue" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in the running configuration"
+        else
+            l_output2="$l_output2\n - \"$l_kpname\" is set to \"$l_krp\" in the running configuration"
+        fi
+        if [ -n "$l_pafile" ]; then
+            l_output="$l_output\n - \"$l_kpname\" is set to \"$l_kpvalue\" in \"$l_pafile\""
+        else
+            l_output2="$l_output2\n - \"$l_kpname = $l_kpvalue\" is not set in a kernel parameter configuration file"
+        fi
+        [ -n "$l_fafile" ] && l_output2="$l_output2\n - \"$l_kpname\" is set incorrectly in \"$l_fafile\""
+    }
+    ipv6_chk() {
+        l_ipv6s=""
+        grubfile=$(find /boot -type f \( -name 'grubenv' -o -name 'grub.conf' -o -name 'grub.cfg' \) -exec grep -Pl -- '^\h*(kernelopts=|linux|kernel)' {} \;         )
+        if [ -s "$grubfile" ]; then
+            ! grep -P -- "^\h*(kernelopts=|linux|kernel)" "$grubfile" | grep -vq -- ipv6.disable=1 && l_ipv6s="disabled"
+        fi
+        if
+            grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" $l_searchloc && grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$" $l_searchloc && sysctl net.ipv6.conf.all.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" && sysctl net.ipv6.conf.default.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$"
+        then
+            l_ipv6s="disabled"
+        fi
+        if [ -n "$l_ipv6s" ]; then
+            l_output="$l_output\n - IPv6 is disabled on the system, \"$l_kpname\" is not applicable"
+        else
+            KPC
+        fi
+    }
+    for l_kpe in $l_parlist; do
+        l_kpname="$(awk -F= '{print $1}' <<<"$l_kpe")"
+        l_kpvalue="$(awk -F= '{print $2}' <<<"$l_kpe")"
+        if grep -q '^net.ipv6.' <<<"$l_kpe"; then
+            ipv6_chk
+        else
+            KPC
+        fi
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.5.1.6.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.5.1.6.sh
new file mode 100644
index 0000000..5dbe49c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-3.5.1.6.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+ufw_out="$(ufw status verbose)"
+ss -tuln | awk '($5!~/%lo:/ && $5!~/127.0.0.1:/ && $5!~/::1/) {split($5, a, ":"); print a[2]}' | sort | uniq | while read -r lpn; do
+    ! grep -Pq "^\h*$lpn\b" <<<"$ufw_out" && echo "- Port: \"$lpn\" is missing a firewall rule"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-A.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-A.sh
new file mode 100644
index 0000000..7edd572
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-A.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+for PARTITION in $(findmnt -n -l -k -it $(
+    awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd, ) | grep -Pv "noexec|nosuid" | awk '{print $1}'); do
+    for PRIVILEGED in $(find "${PARTITION}" -xdev -perm /6000 -type f); do
+        grep -qr "${PRIVILEGED}" /etc/audit/rules.d && printf "OK:'${PRIVILEGED}' found in auditing rules.\n" || printf "Warning: '${PRIVILEGED}' not found in on disk configuration.\n"
+    done
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-B.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-B.sh
new file mode 100644
index 0000000..39e4b16
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.3.6-B.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+{
+    RUNNING=$(auditctl -l)
+    [ -n "${RUNNING}" ] && for PARTITION in $(findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,) | grep -Pv"noexec|nosuid" | awk '{print $1}'); do
+        for PRIVILEGED in $(find "${PARTITION}" -xdev -perm /6000 -type f); do
+            printf -- "${RUNNING}" | grep -q "${PRIVILEGED}" && printf "OK:'${PRIVILEGED}' found in auditing rules.\n" || printf "Warning:'${PRIVILEGED}' not found in running configuration.\n"
+        done
+    done ||
+        printf "ERROR: Variable 'RUNNING' is unset.\n"
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.5.sh
new file mode 100644
index 0000000..830c99e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.1.5.sh
@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+[ -f /etc/audit/auditd.conf ] && find "$(dirname $(awk -F "="'/^\s*log_file/ {print $2}' /etc/audit/auditd.conf | xargs))" -type f ! -user root -exec stat -Lc "%n %U" {} +
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.2.3.sh
new file mode 100644
index 0000000..33f3d7e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-4.2.3.sh
@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+
+{
+    echo -e "\n- Start check - logfiles have appropriate permissions and ownership"
+    output=""
+    find /var/log -type f | (
+        while read -r fname; do
+            bname="$(basename "$fname")"
+            case "$bname" in lastlog | lastlog.* | wtmp | wtmp.* | btmp | btmp.*)
+                if ! stat -Lc "%a" "$fname" | grep -Pq -- '^\h*[0,2,4,6][0,2,4,6][0,4]\h*$'; then
+                    output="$output\n- File: \"$fname\" mode: \"$(stat -Lc "%a" "$fname")\"\n"
+                fi
+                if ! stat -Lc "%U %G" "$fname" | grep -Pq -- '^\h*root\h+(utmp|root)\h*$'; then
+                    output="$output\n- File: \"$fname\" ownership: \"$(stat -Lc "%U:%G" "$fname")\"\n"
+                fi
+                ;;
+            secure | auth.log)
+                if ! stat -Lc "%a" "$fname" | grep -Pq -- '^\h*[0,2,4,6][0,4]0\h*$'; then
+                    output="$output\n- File: \"$fname\" mode: \"$(stat -Lc "%a" "$fname")\"\n"
+                fi
+                if ! stat -Lc "%U %G" "$fname" | grep -Pq -- '^\h*(syslog|root)\h+(adm|root)\h*$'; then
+                    output="$output\n- File: \"$fname\" ownership: \"$(stat -Lc "%U:%G" "$fname")\"\n"
+                fi
+                ;;
+            SSSD | sssd)
+                if ! stat -Lc "%a" "$fname" | grep -Pq -- '^\h*[0,2,4,6][0,2,4,6]0\h*$'; then
+                    output="$output\n- File: \"$fname\" mode: \"$(stat -Lc "%a" "$fname")\"\n"
+                fi
+                if ! stat -Lc "%U %G" "$fname" | grep -Piq -- '^\h*(SSSD|root)\h+(SSSD|root)\h*$'; then
+                    output="$output\n- File: \"$fname\" ownership: \"$(stat -Lc "%U:%G" "$fname")\"\n"
+                fi
+                ;;
+            gdm | gdm3)
+                if ! stat -Lc "%a" "$fname" | grep -Pq -- '^\h*[0,2,4,6][0,2,4,6]0\h*$'; then
+                    output="$output\n- File: \"$fname\" mode: \"$(stat -Lc "%a" "$fname")\"\n"
+                fi
+                if ! stat -Lc "%U %G" "$fname" | grep -Pq -- '^\h*(root)\h+(gdm3?|root)\h*$'; then
+                    output="$output\n- File: \"$fname\" ownership: \"$(stat -Lc "%U:%G" "$fname")\"\n"
+                fi
+                ;;
+            *.journal)
+                if ! stat -Lc "%a" "$fname" | grep -Pq -- '^\h*[0,2,4,6][0,4]0\h*$'; then
+                    output="$output\n- File: \"$fname\" mode: \"$(stat -Lc "%a" "$fname")\"\n"
+                fi
+                if ! stat -Lc "%U %G" "$fname" | grep -Pq -- '^\h*(root)\h+(systemd-journal|root)\h*$'; then
+                    output="$output\n- File: \"$fname\" ownership: \"$(stat -Lc "%U:%G" "$fname")\"\n"
+                fi
+                ;;
+            *)
+                if ! stat -Lc "%a" "$fname" | grep -Pq -- '^\h*[0,2,4,6][0,4]0\h*$'; then
+                    output="$output\n- File: \"$fname\" mode: \"$(stat -Lc "%a" "$fname")\"\n"
+                fi
+                if ! stat -Lc "%U %G" "$fname" | grep -Pq -- '^\h*(syslog|root)\h+(adm|root)\h*$'; then
+                    output="$output\n- File: \"$fname\" ownership: \"$(stat -Lc "%U:%G" "$fname")\"\n"
+                fi
+                ;;
+            esac
+        done
+        # If all files passed, then we pass
+        if [ -z "$output" ]; then
+            echo -e "\n- PASS\n- All files in \"/var/log/\" have appropriate permissions and ownership\n"
+        else
+            # print the reason why we are failing
+            echo -e "\n- FAIL:\n$output"
+        fi
+        echo -e "- End check - logfiles have appropriate permissions and ownership\n"
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.2.2.sh
new file mode 100644
index 0000000..a10698e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.2.2.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+{
+    l_output=""
+    l_skgn="ssh_keys" # Group designated to own openSSH keys
+    l_skgid="$(awk -F: '($1 == "'"$l_skgn"'"){print $3}' /etc/group)"
+    awk '{print}' <<<"$(find /etc/ssh -xdev -type f -name 'ssh_host_*_key' -exec stat -L -c "%n %#a %U %G %g" {} +)" | (
+        while read -r l_file l_mode l_owner l_group l_gid; do
+            [ -n "$l_skgid" ] && l_cga="$l_skgn" || l_cga="root"
+            [ "$l_gid" = "$l_skgid" ] && l_pmask="0137" || l_pmask="0177"
+            l_maxperm="$(printf '%o' $((0777 & ~$l_pmask)))"
+            [ $(($l_mode & $l_pmask)) -gt 0 ] && l_output="$l_output\n - File: \"$l_file\" is mode \"$l_mode\" should be mode: \"$l_maxperm\" or more restrictive"
+            [ "$l_owner" != "root" ] && l_output="$l_output\n - File: \"$l_file\" is owned by: \"$l_owner\" should be owned by \"root\""
+            if [ "$l_group" != "root" ] && [ "$l_gid" != "$l_skgid" ]; then
+                l_output="$l_output\n - File: \"$l_file\" is owned by group \"$l_group\" should belong to group \"$l_cga\""
+            fi
+        done
+        if [ -z "$l_output" ]; then
+            echo -e "\n- Audit Result:\n *** PASS ***\n"
+        else
+            echo -e "\n- Audit Result:\n *** FAIL ***$l_output\n"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.4.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.4.5.sh
new file mode 100644
index 0000000..4f0f6e7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.4.5.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+{
+    declare -A HASH_MAP=(["y"]="yescrypt" ["1"]="md5" ["2"]="blowfish"
+        ["5"]="SHA256" ["6"]="SHA512" ["g"]="gost-yescrypt")
+    CONFIGURED_HASH=$(sed -n "s/^\s*ENCRYPT_METHOD\s*\(.*\)\s*$/\1/p" /etc/login.defs )
+    for MY_USER in $(sed -n "s/^\(.*\):\\$.*/\1/p" /etc/shadow); do
+        CURRENT_HASH=$(sed -n "s/${MY_USER}:\\$\(.\).*/\1/p" /etc/shadow)
+        if [[ "${HASH_MAP["${CURRENT_HASH}"]^^}" != "${CONFIGURED_HASH^^}" ]]; then
+            echo "The password for '${MY_USER}' is using '${HASH_MAP["${CURRENT_HASH}"]}' instead of the configured '${CONFIGURED_HASH}'."
+        fi
+    done
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.1.5.sh
new file mode 100644
index 0000000..45b638f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.1.5.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+{
+    awk -F: '/^[^:]+:[^!*]/{print $1}' /etc/shadow | while read -r usr; do
+        change=$(date -d "$(chage --list $usr | grep '^Last password change' | cut -d: -f2 | grep -v 'never$')" +%s)
+        if [[ "$change" -gt "$(date +%s)" ]]; then
+            echo "User: \"$usr\" last password change was \"$(chage --list $usr | grep '^Last password change' | cut -d: -f2)\""
+        fi
+    done
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.2.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.2.sh
new file mode 100644
index 0000000..2e36e2a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.2.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+awk -F: '$1!~/(root|sync|shutdown|halt|^\+)/ && $3<'"$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)"' && $7!~/((\/usr)?\/sbin\/nologin)/ && $7!~/(\/bin)?\/false/ {print}' /etc/passwd
+
+awk -F: '($1!~/(root|^\+)/ && $3<'"$( awk '/^\s*UID_MIN/{print $2}' /etc/login.defs )"') {print $1}' /etc/passwd | xargs -I '{}' passwd -S '{}' | awk '($2!~/LK?/) {print $1}'
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.4.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.4.sh
new file mode 100644
index 0000000..baf7ed7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.4.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+{
+    passing=""
+    grep -Eiq '^\s*UMASK\s+(0[0-7][2-7]7|[0-7][2-7]7)\b' /etc/login.defs && grep -Eqi '^\s*USERGROUPS_ENAB\s*"?no"?\b' /etc/login.defs && grep -Eq '^\s*session\s+(optional|requisite|required)\s+pam_umask\.so\b' /etc/pam.d/common-session && passing=true
+    grep -REiq '^\s*UMASK\s+\s*(0[0-7][2-7]7|[0-7][2-7]7|u=(r?|w?|x?)(r?|w?|x?)(r?|w?|x?),g=(r?x?|x?r?),o=)\b' /etc/profile* /etc/bash.bashrc* && passing=true
+    [ "$passing" = true ] && echo "Default user umask is set"
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.5.sh
new file mode 100644
index 0000000..82f1c81
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-5.5.5.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+output1="" output2=""
+[ -f /etc/bash.bashrc ] && BRC="/etc/bash.bashrc"
+for f in "$BRC" /etc/profile /etc/profile.d/*.sh; do
+    grep -Pq '^\s*([^#]+\s+)?TMOUT=(900|[1-8][0-9][0-9]|[1-9][0-9]|[1-9])\b' "$f" && grep -Pq '^\s*([^#]+;\s*)?readonly\s+TMOUT(\s+|\s*;|\s*$|=(900|[1-8][0-9][0-9]|[1-9][0-9]|[1-9]))\b' "$f" && grep -Pq '^\s*([^#]+;\s*)?export\s+TMOUT(\s+|\s*;|\s*$|=(900|[1-8][0-9][0-9]|[1-9][0-9]|[1-9]))\b' "$f" && output1="$f"
+done
+grep -Pq '^\s*([^#]+\s+)?TMOUT=(9[0-9][1-9]|9[1-9][0-9]|0+|[1-9]\d{3,})\b'/etc/profile /etc/profile.d/*.sh "$BRC" && output2=$(grep -Ps '^\s*([^#]+\s+)?TMOUT=(9[0-9][1-9]|9[1-9][0-9]|0+|[1-9]\d{3,})\b' /etc/profile /etc/profile.d/*.sh $BRC)
+if [ -n "$output1" ] && [ -z "$output2" ]; then
+    echo -e "\nPASSED\n\nTMOUT is configured in: \"$output1\"\n"
+else
+    [ -z "$output1" ] && echo -e "\nFAILED\n\nTMOUT is not configured\n"
+    [ -n "$output2" ] && echo -e "\nFAILED\n\nTMOUT is incorrectly configured in: \"$output2\"\n"
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.11.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.11.sh
new file mode 100644
index 0000000..2ab903b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.11.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+{
+    output=""
+    valid_shells="^($(sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | ( while read -r user home; do [ ! -d "$home" ] && output="$output\n - User \"$user\" home directory \"$home\" doesn't exist"
+        done
+        if [ -z "$output" ]; then
+            echo -e "\n-PASSED: - All local interactive users have a home directory\n"
+        else
+            echo -e "\n- FAILED:\n$output\n"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.12.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.12.sh
new file mode 100644
index 0000000..341f7f5
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.12.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+{
+    output=""
+    valid_shells="^($(sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do  owner="$(stat -L -c "%U" "$home")"  [ "$owner" != "$user" ] && output="$output\n - User \"$user\" home directory \"$home\" is owned by user \"$owner\""
+        done
+        if [ -z "$output" ]; then
+            echo -e "\n-PASSED: - All local interactive users have a home directory\n"
+        else
+            echo -e "\n- FAILED:\n$output\n"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.13.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.13.sh
new file mode 100644
index 0000000..a1a97a8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.13.sh
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+{
+    output=""
+    perm_mask='0027'
+    maxperm="$(printf '%o' $((0777 & ~$perm_mask)))"
+    valid_shells="^($(sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (
+        while read -r user home; do
+            if [ -d "$home" ]; then
+                mode=$(stat -L -c '%#a' "$home")
+                [ $(($mode & $perm_mask)) -gt 0 ] && output="$output\n- User $user home directory: \"$home\" is too permissive: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+            fi
+        done
+        if [ -n "$output" ]; then
+            echo -e "\n- Failed:$output"
+        else
+            echo -e "\n- Passed:\n- All user home directories are mode:\"$maxperm\" or more restrictive"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.14.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.14.sh
new file mode 100644
index 0000000..c68b429
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.14.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+{
+    output="" output2=""
+    perm_mask='0177'
+    maxperm="$(printf '%o' $((0777 & ~$perm_mask)))"
+    valid_shells="^($(sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (
+        while read -r user home; do
+            if [ -f "$home/.netrc" ]; then
+                mode="$(stat -L -c '%#a' "$home/.netrc")"
+                if [ $(($mode & $perm_mask)) -gt 0 ]; then
+                    output="$output\n - User \"$user\" file: \"$home/.netrc\" is too permissive: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+                else
+                    output2="$output2\n - User \"$user\" file: \"$home/.netrc\" exists and has file mode: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+                fi
+            fi
+        done
+        if [ -z "$output" ]; then
+            if [ -z "$output2" ]; then
+                echo -e "\n-PASSED: - No local interactive users have \".netrc\" files in their home directory\n"
+            else
+                echo -e "\n- WARNING:\n$output2\n"
+            fi
+        else
+            echo -e "\n- FAILED:\n$output\n"
+            [ -n "$output2" ] && echo -e "\n- WARNING:\n$output2\n"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.15.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.15.sh
new file mode 100644
index 0000000..45d513a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.15.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    output=""
+    fname=".forward"
+    valid_shells="^($(sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (
+        while read -r user home; do
+            [ -f "$home/$fname" ] && output="$output\n - User \"$user\" file: \"$home/$fname\" exists"
+        done
+        if [ -z "$output" ]; then
+            echo -e "\n-PASSED: - No local interactive users have \"$fname\" files in their home directory\n"
+        else
+            echo -e "\n- FAILED:\n$output\n"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.16.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.16.sh
new file mode 100644
index 0000000..445a1a9
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.16.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    output=""
+    fname=".rhosts"
+    valid_shells="^($(sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (
+        while read -r user home; do
+            [ -f "$home/$fname" ] && output="$output\n - User \"$user\" file: \"$home/$fname\" exists"
+        done
+        if [ -z "$output" ]; then
+            echo -e "\n-PASSED: - No local interactive users have \"$fname\" files in their home directory\n"
+        else
+            echo -e "\n- FAILED:\n$output\n"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.17.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.17.sh
new file mode 100644
index 0000000..cc22adf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.17.sh
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+{
+    output=""
+    perm_mask='0022'
+    maxperm="$(printf '%o' $((0777 & ~$perm_mask)))"
+    valid_shells="^($(sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (
+        while read -r user home; do
+            for dfile in $(find "$home" -type f -name '.*'); do
+                mode=$(stat -L -c '%#a' "$dfile")
+                [ $(($mode & $perm_mask)) -gt 0 ] && output="$output\n- User $user file: \"$dfile\" is too permissive: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+            done
+        done
+        if [ -n "$output" ]; then
+            echo -e "\n- Failed:$output"
+        else
+            echo -e "\n- Passed:\n- All user home dot files are mode: \"$maxperm\" or more restrictive"
+        fi
+    )
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.3.sh
new file mode 100644
index 0000000..afad21f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.3.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+a_passwd_group_gid=("$(awk -F: '{print $4}' /etc/passwd | sort -u)")
+a_group_gid=("$(awk -F: '{print $3}' /etc/group | sort -u)")
+a_passwd_group_diff=("$(printf '%s\n' "${a_group_gid[@]}" "${a_passwd_group_gid[@]}" | sort | uniq -u)")
+while IFS= read -r l_gid; do
+	awk -F: '($4 == '"$l_gid"') {print " - User: \"" $1 "\" has GID: \"" $4 "\" which does not exist in /etc/group" }' /etc/passwd
+	exit 1
+done < <(printf '%s\n' "${a_passwd_group_gid[@]}" "${a_passwd_group_diff[@]}" | sort | uniq -D | uniq)
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.5.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.5.sh
new file mode 100644
index 0000000..7d12fdf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.5.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+cut -f3 -d":" /etc/passwd | sort -n | uniq -c | while read x; do
+    [ -z "$x" ] && break
+    set - $x
+    if [ $1 -gt 1 ]; then
+        users=$(awk -F: '($3 == n) { print $1 }' n=$2 /etc/passwd | xargs)
+        echo "Duplicate UID ($2): $users"
+    fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.6.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.6.sh
new file mode 100644
index 0000000..09eb62c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.6.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+cut -d: -f3 /etc/group | sort | uniq -d | while read x; do
+    echo "Duplicate GID ($x) in /etc/group"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.7.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.7.sh
new file mode 100644
index 0000000..f5efc10
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.7.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+cut -d: -f1 /etc/passwd | sort | uniq -d | while read -r x; do
+    echo "Duplicate login name $x in /etc/passwd"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.8.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.8.sh
new file mode 100644
index 0000000..43eaaa4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.8.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+cut -d: -f1 /etc/group | sort | uniq -d | while read -r x; do
+    echo "Duplicate group name $x in /etc/group"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.9.sh b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.9.sh
new file mode 100644
index 0000000..f5cc42e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Debian_11/CIS-Debian-6.2.9.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+awk -F: '($1!~/(root|halt|sync|shutdown)/ && $7!~/^(\/usr)?\/sbin\/nologin(\/)?$/ && $7!~/(\/usr)?\/bin\/false(\/)?$/) { print $1 " " $6 }' /etc/passwd | while read -r user dir; do
+    if [ -d "$dir" ]; then
+        file="$dir/.forward"
+        if [ ! -h "$file" ] && [ -f "$file" ]; then
+            echo "User: \"$user\" file: \"$file\" exists"
+        fi
+    fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1111.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1111.sh
new file mode 100644
index 0000000..caed61a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1111.sh
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="squashfs"
+    test1=$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory")
+    if [ -z "$test1" ]; then
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        [ "$(wc -l <<< "$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<< "$l_loadable")"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<< "$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        if ! lsmod | grep "$l_mname" > /dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1112.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1112.sh
new file mode 100644
index 0000000..ee59d6a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_1112.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="udf"
+    if [ -z "$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory")" ]; then
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        [ "$(wc -l <<< "$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<< "$l_loadable")"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<< "$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        if ! lsmod | grep "$l_mname" > /dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_119.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_119.sh
new file mode 100644
index 0000000..809efb6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_119.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    l_mname="usb-storage"
+    if [ -z '$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory")' ]; then
+        l_loadable='$(modprobe -n -v "$l_mname")'
+        [ "$(wc -l <<< "$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<< "$l_loadable")"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<< "$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        if ! lsmod | grep "$l_mname" > /dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$(tr '-' '_' <<< "$l_mname")\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_182.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_182.sh
new file mode 100644
index 0000000..3621d88
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_182.sh
@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        echo -e "$l_pkgoutput"
+        l_gdmfile="$(grep -Prils '^\h*banner-message-enable\b' /etc/dconf/db/*.d)"
+        if [ -n "$l_gdmfile" ]; then
+            l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_gdmfile")"
+            if grep -Pisq '^\h*banner-message-enable=true\b' "$l_gdmfile"; then
+                l_output="$l_output\n - The \"banner-message-enable\" option is enabled in \"$l_gdmfile\""
+            else
+                l_output2="$l_output2\n - The \"banner-message-enable\" option is not enabled"
+            fi
+            l_lsbt="$(grep -Pios '^\h*banner-message-text=.*$' "$l_gdmfile")"
+            if [ -n "$l_lsbt" ]; then
+                l_output="$l_output\n - The \"banner-message-text\" option is set in \"$l_gdmfile\"\n - banner-message-text is set to:\n - \"$l_lsbt\""
+            else
+                l_output2="$l_output2\n - The \"banner-message-text\" option is not set"
+            fi
+            if grep -Pq "^\h*system-db:$l_gdmprofile" /etc/dconf/profile/"$l_gdmprofile"; then
+                l_output="$l_output\n - The \"$l_gdmprofile\" profile exists"
+            else
+                l_output2="$l_output2\n - The \"$l_gdmprofile\" profile doesn't exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_gdmprofile" ]; then
+                l_output="$l_output\n - The \"$l_gdmprofile\" profile exists in the dconf database"
+            else
+                l_output2="$l_output2\n - The \"$l_gdmprofile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            l_output2="$l_output2\n - The \"banner-message-enable\" option isn't configured"
+        fi
+    else
+        echo -e "\n\n - GNOME Desktop Manager isn't installed\n - Recommendation is Not Applicable\n- Audit result:\n *PASS*\n"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_183.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_183.sh
new file mode 100644
index 0000000..eb44b86
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_183.sh
@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        output="" output2=""
+        l_gdmfile="$(grep -Pril '^\h*disable-user-list\h*=\h*true\b' /etc/dconf/db)"
+        if [ -n "$l_gdmfile" ]; then
+            output="$output\n - The \"disable-user-list\" option is enabled in \"$l_gdmfile\""
+            l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_gdmfile")"
+            if grep -Pq "^\h*system-db:$l_gdmprofile" /etc/dconf/profile/"$l_gdmprofile"; then
+                output="$output\n - The \"$l_gdmprofile\" exists"
+            else
+                output2="$output2\n - The \"$l_gdmprofile\" doesn't exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_gdmprofile" ]; then
+                output="$output\n - The \"$l_gdmprofile\" profile exists in the dconf database"
+            else
+                output2="$output2\n - The \"$l_gdmprofile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            output2="$output2\n - The \"disable-user-list\" option is not enabled"
+        fi
+        if [ -z "$output2" ]; then
+            echo -e "$l_pkgoutput\n- Audit result:\n PASS:\n$output\n"
+        else
+            echo -e "$l_pkgoutput\n- Audit Result:\n FAIL:\n$output2\n"
+            [ -n "$output" ] && echo -e "$output\n"
+        fi
+    else
+        echo -e "\n\n - GNOME Desktop Manager isn't installed\n - Recommendation is Not Applicable\n- Audit result:\n PASS\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_184.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_184.sh
new file mode 100644
index 0000000..874abc5
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_184.sh
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2="" l_idmv="900"
+        l_ldmv="5"
+        l_kfile="$(grep -Psril '^\h*idle-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/)"
+        if [ -n "$l_kfile" ]; then
+            l_profile="$(awk -F'/' '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile")"
+            l_pdbdir="/etc/dconf/db/$l_profile.d"
+            l_idv="$(awk -F 'uint32' '/idle-delay/{print $2}' "$l_kfile" | xargs)"
+            if [ -n "$l_idv" ]; then
+                [ "$l_idv" -gt "0" -a "$l_idv" -le "$l_idmv" ] && l_output="$l_output\n - The \"idle-delay\" option is set to \"$l_idv\" seconds in \"$l_kfile\"" [ "$l_idv" = "0" ] && l_output2="$l_output2\n - The \"idle-delay\" option is set to \"$l_idv\" (disabled) in \"$l_kfile\"" [ "$l_idv" -gt "$l_idmv" ] && l_output2="$l_output2\n - The \"idle-delay\" option is set to \"$l_idv\" seconds (greater than $l_idmv) in \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - The \"idle-delay\" option is not set in \"$l_kfile\""
+            fi
+            l_ldv="$(awk -F 'uint32' '/lock-delay/{print $2}' "$l_kfile" | xargs)"
+            if [ -n "$l_ldv" ]; then
+                [ "$l_ldv" -ge "0" -a "$l_ldv" -le "$l_ldmv" ] && l_output="$l_output\n - The \"lock-delay\" option is set to \"$l_ldv\"seconds in \"$l_kfile\"" [ "$l_ldv" -gt "$l_ldmv" ] && l_output2="$l_output2\n - The \"lock-delay\" option is set to \"$l_ldv\" seconds (greater than $l_ldmv) in \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - The \"lock-delay\" option is not set in \"$l_kfile\""
+            fi
+            if grep -Psq "^\h*system-db:$l_profile" /etc/dconf/profile/*; then
+                l_output="$l_output\n - The \"$l_profile\" profile exists"
+            else
+                l_output2="$l_output2\n - The \"$l_profile\" doesn't exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_profile" ]; then
+                l_output="$l_output\n - The \"$l_profile\" profile exists in the dconf database"
+            else
+                l_output2="$l_output2\n - The \"$l_profile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            l_output2="$l_output2\n - The \"idle-delay\" option doesn't exist, remaining tests skipped"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_185.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_185.sh
new file mode 100644
index 0000000..72282d3
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_185.sh
@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*idle-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        l_kfd2="/etc/dconf/db/$(grep -Psril '^\h*lock-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        if [ -d "$l_kfd" ]; then
+            if grep -Prilq '\/org\/gnome\/desktop\/session\/idle-delay\b' "$l_kfd"; then
+                l_output="$l_output\n - \"idle-delay\" is locked in \"$(grep -Pril '\/org\/gnome\/desktop\/session\/idle-delay\b' "$l_kfd")\""
+            else
+                l_output2="$l_output2\n - \"idle-delay\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"idle-delay\" is not set so it can not be locked"
+        fi
+        if [ -d "$l_kfd2" ]; then
+            if grep -Prilq '\/org\/gnome\/desktop\/screensaver\/lock-delay\b' "$l_kfd2"; then
+                l_output="$l_output\n - \"lock-delay\" is locked in \"$(grep -Pril '\/org\/gnome\/desktop\/screensaver\/lock-delay\b' "$l_kfd2")\""
+            else
+                l_output2="$l_output2\n - \"lock-delay\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"lock-delay\" is not set so it can not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_186.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_186.sh
new file mode 100644
index 0000000..3ed9317
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_186.sh
@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput="" l_output="" l_output2=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+            l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        echo -e "$l_pkgoutput"
+        l_kfile="$(grep -Prils -- '^\h*automount\b' /etc/dconf/db/*.d)"
+        l_kfile2="$(grep -Prils -- '^\h*automount-open\b' /etc/dconf/db/*.d)"
+        if [ -f "$l_kfile" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile")"
+        elif [ -f "$l_kfile2" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile2")"
+        fi
+        if [ -n "$l_gpname" ]; then
+            l_gpdir="/etc/dconf/db/$l_gpname.d"
+            if grep -Pq -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*; then
+                l_output="$l_output\n - dconf database profile file \"$(grep -Pl -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*)\" exists"
+            else
+                l_output2="$l_output2\n - dconf database profile isn't set"
+            fi
+            if [ -f "/etc/dconf/db/$l_gpname" ]; then
+                l_output="$l_output\n - The dconf database \"$l_gpname\" exists"
+            else
+                l_output2="$l_output2\n - The dconf database \"$l_gpname\" doesn't exist"
+            fi
+            if [ -d "$l_gpdir" ]; then
+                l_output="$l_output\n - The dconf directory \"$l_gpdir\" exitst"
+            else
+                l_output2="$l_output2\n - The dconf directory \"$l_gpdir\" doesn't exist"
+            fi
+            if grep -Pqrs -- '^\h*automount\h*=\h*false\b' "$l_kfile"; then
+                l_output="$l_output\n - \"automount\" is set to false in: \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - \"automount\" is not set correctly"
+            fi
+            if grep -Pqs -- '^\h*automount-open\h*=\h*false\b' "$l_kfile2"; then
+                l_output="$l_output\n - \"automount-open\" is set to false in: \"$l_kfile2\""
+            else
+                l_output2="$l_output2\n - \"automount-open\" is not set correctly"
+            fi
+        else
+            l_output2="$l_output2\n - neither \"automount\" or \"automount-open\" is set"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_187.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_187.sh
new file mode 100644
index 0000000..f6e7c9e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_187.sh
@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*automount\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        l_kfd2="/etc/dconf/db/$(grep -Psril '^\h*automount-open\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        if [ -d "$l_kfd" ]; then
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/automount\b' "$l_kfd"; then
+                l_output="$l_output\n - \"automount\" is locked in \"$(grep -Pil '^\h*\/org/gnome\/desktop\/media-handling\/automount\b' "$l_kfd")\""
+            else
+                l_output2="$l_output2\n - \"automount\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"automount\" is not set so it can not be locked"
+        fi
+        if [ -d "$l_kfd2" ]; then
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/automount-open\b' "$l_kfd2"; then
+                l_output="$l_output\n - \"lautomount-open\" is locked in \"$(grep -Pril '^\h*\/org/gnome\/desktop\/media-handling\/automount-open\b' "$l_kfd2")\""
+            else
+                l_output2="$l_output2\n - \"automount-open\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"automount-open\" is not set so it can not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_188.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_188.sh
new file mode 100644
index 0000000..f11261a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_188.sh
@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput="" l_output="" l_output2=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration" echo -e "$l_pkgoutput"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        echo -e "$l_pkgoutput"
+        l_kfile="$(grep -Prils -- '^\h*autorun-never\b' /etc/dconf/db/*.d)"
+        if [ -f "$l_kfile" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile")"
+        fi
+        if [ -n "$l_gpname" ]; then
+            l_gpdir="/etc/dconf/db/$l_gpname.d"
+            if grep -Pq -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*; then
+                l_output="$l_output\n - dconf database profile file \"$(grep -Pl -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*)\" exists"
+            else
+                l_output2="$l_output2\n - dconf database profile isn't set"
+            fi
+            if [ -f "/etc/dconf/db/$l_gpname" ]; then
+                l_output="$l_output\n - The dconf database \"$l_gpname\" exists"
+            else
+                l_output2="$l_output2\n - The dconf database \"$l_gpname\" doesn't exist"
+            fi
+            if [ -d "$l_gpdir" ]; then
+                l_output="$l_output\n - The dconf directory \"$l_gpdir\" exitst"
+            else
+                l_output2="$l_output2\n - The dconf directory \"$l_gpdir\" doesn't exist"
+            fi
+            if grep -Pqrs -- '^\h*autorun-never\h*=\h*true\b' "$l_kfile"; then
+                l_output="$l_output\n - \"autorun-never\" is set to true in: \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - \"autorun-never\" is not set correctly"
+            fi
+        else
+            l_output2="$l_output2\n - \"autorun-never\" is not set"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_189.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_189.sh
new file mode 100644
index 0000000..4fbf6d3
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_189.sh
@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif
+        command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*autorun-never\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        if [ -d "$l_kfd" ]; then
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/autorun-never\b' "$l_kfd"; then
+                l_output="$l_output\n - \"autorun-never\" is locked in \"$(grep -Pil '^\h*\/org/gnome\/desktop\/media-handling\/autorun-never\b' "$l_kfd")\""
+            else
+                l_output2="$l_output2\n - \"autorun-never\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"autorun-never\" is not set so it can not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_312.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_312.sh
new file mode 100644
index 0000000..0d270d1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_312.sh
@@ -0,0 +1,40 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2=""
+    module_chk() {
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<< "$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        if ! lsmod | grep "$l_mname" > /dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    }
+    if [ -n "$(find /sys/class/net/*/ -type d -name wireless)" ]; then
+        l_dname=$(for driverdir in $(find /sys/class/net/*/ -type d -name wireless | xargs -0 dirname); do
+            basename "$(readlink -f "$driverdir"/device/driver/module)";done | sort -u)
+        for l_mname in $l_dname; do
+            module_chk
+        done
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS"
+        if [ -z "$l_output" ]; then
+            echo -e "\n - System has no wireless NICs installed"
+        else
+            echo -e "\n$l_output\n"
+        fi
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_313.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_313.sh
new file mode 100644
index 0000000..4f2772c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_313.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2="" l_mname="tipc"
+    if [ -z "$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory")" ]; then
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        [ "$(wc -l <<< "$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<< "$l_loadable")"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<< "$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        if ! lsmod | grep "$l_mname" > /dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_321.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_321.sh
new file mode 100644
index 0000000..ed2523d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_321.sh
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+{
+        l_output="" l_output2="" l_kparameters="net.ipv4.ip_forward=0 net.ipv6.conf.all.forwarding=0"
+        searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf $([ -f /etc/default/ufw ] && awk -F= '/^\s*IPT_SYSCTL=/ {print $2}' /etc/default/ufw)"
+        kernel_par_chk()
+        {
+            krp="" pafile="" fafile=""
+            krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+            pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+            fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')" [ "$krp" = "$kpvalue" ] && l_output="$l_output\n - \"$kpname\" is set to \"$kpvalue\" in the running configuration"
+            [ -n "$pafile" ] && l_output="$l_output\n - \"$kpname\" is set to \"$kpvalue\" in \"$pafile\""
+            [ -z "$fafile" ] && l_output="$l_output\n - \"$kpname\" is not set incorectly in a kernel parameter configuration file" [ "$krp" != "$kpvalue" ] && l_output2="$l_output2\n - \"$kpname\" is incorrectly set to \"$krp\" in the running configuration"
+            [ -n "$fafile" ] && l_output2="$l_output2\n - \"$kpname\" is set incorrectly in \"$fafile\""
+            [ -z "$pafile" ] && l_output2="$l_output2\n - \"$kpname = $kpvalue\" is not set in a kernel parameter configuration file"
+        }
+        for l_kpar in $l_kparameters; do
+            kpname="$(awk -F"=" '{print $1}' <<< "$l_kpar" | xargs)" kpvalue="$(awk -F"=" '{print $2}' <<< "$l_kpar" | xargs)"
+            if grep -Pq '^\h*net\.ipv6\.' <<< "$l_kpname"; then
+                if grep -Pqs '^\h*0\b' /sys/module/ipv6/parameters/disable; then
+                    kernel_par_chk
+                else
+                    l_output="$l_output\n - IPv6 is not enabled, check for: \"$l_kpar\" is not applicable"
+                fi
+            else
+                kernel_par_chk
+            fi
+        done
+        if [ -z "$l_output2" ]; then
+            echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+        else
+            echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+            [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+        fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_1.sh
new file mode 100644
index 0000000..80d69a7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_1.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.all.send_redirects" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)" fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL "
+        [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_2.sh
new file mode 100644
index 0000000..ab47dbf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_322_2.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile="" kpname="net.ipv4.conf.default.send_redirects" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_11.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_11.sh
new file mode 100644
index 0000000..cdafddf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_11.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.all.accept_source_route" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_12.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_12.sh
new file mode 100644
index 0000000..2d8b016
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_12.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.default.accept_source_route" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_21.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_21.sh
new file mode 100644
index 0000000..c05f02c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_21.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv6.conf.all.accept_source_route"
+    kpvalue="0" searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)" pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_22.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_22.sh
new file mode 100644
index 0000000..2a7347a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_331_22.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.default.accept_source_route" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)" pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_11.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_11.sh
new file mode 100644
index 0000000..f413be4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_11.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.all.accept_redirects" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_12.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_12.sh
new file mode 100644
index 0000000..052c782
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_12.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.default.accept_redirects" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n" [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_21.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_21.sh
new file mode 100644
index 0000000..f99a9d7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_21.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile="" kpname="net.ipv6.conf.all.accept_redirects" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)" pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_22.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_22.sh
new file mode 100644
index 0000000..bb28ce6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_332_22.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv6.conf.default.accept_redirects"
+    kpvalue="0" searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)" pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_1.sh
new file mode 100644
index 0000000..d715c4d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_1.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.all.log_martians" kpvalue="1"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)" pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_2.sh
new file mode 100644
index 0000000..6552c98
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_334_2.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.default.accept_redirects" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_335.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_335.sh
new file mode 100644
index 0000000..9a81d92
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_335.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.icmp_echo_ignore_broadcasts"
+    kpvalue="1"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_336.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_336.sh
new file mode 100644
index 0000000..e634fb7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_336.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.icmp_ignore_bogus_error_responses" kpvalue="1"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)" pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_1.sh
new file mode 100644
index 0000000..5bdca20
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_1.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile="" kpname="net.ipv4.conf.all.rp_filter" kpvalue="1"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)" pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_2.sh
new file mode 100644
index 0000000..dfd03aa
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_337_2.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv4.conf.default.rp_filter"
+    kpvalue="1" searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_338.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_338.sh
new file mode 100644
index 0000000..ca201df
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_338.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile="" kpname="net.ipv4.tcp_syncookies" kpvalue="1"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_1.sh
new file mode 100644
index 0000000..c3b4451
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_1.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile="" kpname="net.ipv6.conf.all.accept_ra" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_2.sh
new file mode 100644
index 0000000..2e00244
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_339_2.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    krp="" pafile="" fafile=""
+    kpname="net.ipv6.conf.default.accept_ra" kpvalue="0"
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+    krp="$(sysctl "$kpname" | awk -F= '{print $2}' | xargs)"
+    pafile="$(grep -Psl -- "^\h*$kpname\h*=\h*$kpvalue\b\h*(#.*)?$" $searchloc)"
+    fafile="$(grep -s -- "^\s*$kpname" $searchloc | grep -Pv -- "\h*=\h*$kpvalue\b\h*" | awk -F: '{print $1}')"
+    if [ "$krp" = "$kpvalue" ] && [ -n "$pafile" ] && [ -z "$fafile" ]; then
+        echo -e "\nPASS:\n\"$kpname\" is set to \"$kpvalue\" in the running configuration and in \"$pafile\""
+    else
+        echo -e "\nFAIL: " [ "$krp" != "$kpvalue" ] && echo -e "\"$kpname\" is set to \"$krp\" in the running configuration\n"
+        [ -n "$fafile" ] && echo -e "\n\"$kpname\" is set incorrectly in \"$fafile\""
+        [ -z "$pafile" ] && echo -e "\n\"$kpname = $kpvalue\" is not set in a kernel parameter configuration file\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3412.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3412.sh
new file mode 100644
index 0000000..b8f0893
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3412.sh
@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2="" l_fwd_status="" l_nft_status="" l_fwutil_status=""
+    rpm -q firewalld > /dev/null 2>&1 && l_fwd_status="$(systemctl is-enabled firewalld.service):$(systemctl is-active firewalld.service)"
+    rpm -q nftables > /dev/null 2>&1 && l_nft_status="$(systemctl is-enabled nftables.service):$(systemctl is-active nftables.service)"
+    l_fwutil_status="$l_fwd_status:$l_nft_status"
+    case $l_fwutil_status in
+        enabled:active:masked:inactive|enabled:active:disabled:inactive)
+        l_output="\n - FirewallD utility is in use, enabled and active\n - NFTables utility is correctly disabled or masked and inactive" ;;
+        masked:inactive:enabled:active|disabled:inactive:enabled:active)
+        l_output="\n - NFTables utility is in use, enabled and active\n - FirewallD utility is correctly disabled or masked and inactive" ;;
+        enabled:active:enabled:active)
+        l_output2="\n - Both FirewallD and NFTables utilities are enabled and active" ;;
+        enabled:*:enabled:*) l_output2="\n - Both FirewallD and NFTables utilities are enabled" ;;
+        *:active:*:active) l_output2="\n - Both FirewallD and NFTables utilities are enabled" ;;
+        :enabled:active) l_output="\n - NFTables utility is in use, enabled, and active\n - FirewallD package is not installed" ;;
+        :) l_output2="\n - Neither FirewallD or NFTables is installed." ;;
+        *:*:) l_output2="\n - NFTables package is not installed on the system" ;;
+        *) l_output2="\n - Unable to determine firewall state" ;;
+    esac
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Results:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Results:\n FAIL\n$l_output2\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3421.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3421.sh
new file mode 100644
index 0000000..852d59c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_3421.sh
@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2="" l_zone=""
+    if systemctl is-enabled firewalld.service | grep -q 'enabled'; then
+        l_zone="$(firewall-cmd --get-default-zone)"
+        if [ -n "$l_zone" ]; then
+            l_output=" - The default zone is set to: \"$l_zone\""
+        else
+            l_output2=" - The default zone is not set"
+        fi
+    else
+        l_output=" - FirewallD is not in use on the system"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Results:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Results:\n FAIL\n$l_output2\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_1.sh
new file mode 100644
index 0000000..d6790ee
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -S/ &&/mount/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_2.sh
new file mode 100644
index 0000000..609985d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41310_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -S/ &&/mount/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_1.sh
new file mode 100644
index 0000000..54445dc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -S/ &&(/unlink/||/rename/||/unlinkat/||/renameat/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_2.sh
new file mode 100644
index 0000000..b33707d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41313_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -S/ &&(/unlink/||/rename/||/unlinkat/||/renameat/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_1.sh
new file mode 100644
index 0000000..eb8d1eb
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk '/^ *-w/ &&(/\/etc\/selinux/ ||/\/usr\/share\/selinux/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_2.sh
new file mode 100644
index 0000000..bdd6815
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41314_2.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-w/ &&(/\/etc\/selinux/ ||/\/usr\/share\/selinux/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_1.sh
new file mode 100644
index 0000000..1385dfa
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/chcon/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_2.sh
new file mode 100644
index 0000000..913e33e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41315_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/chcon/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_1.sh
new file mode 100644
index 0000000..e8ac36b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/setfacl/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_2.sh
new file mode 100644
index 0000000..7346f52
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41316_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/setfacl/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_1.sh
new file mode 100644
index 0000000..c48d60f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/chacl/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_2.sh
new file mode 100644
index 0000000..985ec73
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41317_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/chacl/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_1.sh
new file mode 100644
index 0000000..277666e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/sbin\/usermod/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_2.sh
new file mode 100644
index 0000000..c919b9a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41318_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/sbin\/usermod/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_1.sh
new file mode 100644
index 0000000..de470a3
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_1.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+{
+    awk '/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F auid!=unset/||/ -F auid!=-1/||/ -F auid!=4294967295/) &&/ -S/ &&(/init_module/ ||/finit_module/ ||/delete_module/ ||/create_module/ ||/query_module/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/kmod/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_2.sh
new file mode 100644
index 0000000..ea79b76
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_41319_2.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+{
+    auditctl -l | awk '/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F auid!=unset/||/ -F auid!=-1/||/ -F auid!=4294967295/) &&/ -S/ &&(/init_module/ ||/finit_module/ ||/delete_module/ ||/create_module/ ||/query_module/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/kmod/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_1.sh
new file mode 100644
index 0000000..3f96a98
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_1.sh
@@ -0,0 +1,5 @@
+    #!/usr/bin/env bash
+    {
+        SUDO_LOG_FILE_ESCAPED=$(grep -r logfile /etc/sudoers* | sed -e 's/.*logfile=//;s/,? .*//' -e 's/"//g' -e 's|/|\\/|g')
+        [ -n "${SUDO_LOG_FILE_ESCAPED}" ] && awk "/^ *-w/ \ &&/"${SUDO_LOG_FILE_ESCAPED}"/ &&/ +-p *wa/ \ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'SUDO_LOG_FILE_ESCAPED' is unset.\n"
+    }
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_2.sh
new file mode 100644
index 0000000..9ce4e29
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4133_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+        SUDO_LOG_FILE_ESCAPED=$(grep -r logfile /etc/sudoers* | sed -e 's/.*logfile=//;s/,? .*//' -e 's/"//g' -e 's|/|\\/|g')
+        [ -n "${SUDO_LOG_FILE_ESCAPED}" ] && auditctl -l | awk "/^ *-w/ &&/"${SUDO_LOG_FILE_ESCAPED}"/ \ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" \ || printf "ERROR: Variable 'SUDO_LOG_FILE_ESCAPED' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_1.sh
new file mode 100644
index 0000000..2cbbce2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_1.sh
@@ -0,0 +1,8 @@
+    #!/usr/bin/env bash
+    {
+        for PARTITION in $(findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,) | grep -Pv "noexec|nosuid" | awk '{print $1}'); do
+            for PRIVILEGED in $(find "${PARTITION}" -xdev -perm /6000 -type f); do
+                grep -qr "${PRIVILEGED}" /etc/audit/rules.d && printf "OK: '${PRIVILEGED}' found in auditing rules.\n" || printf "Warning: '${PRIVILEGED}' not found in on disk configuration.\n"
+            done
+        done
+    }
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_2.sh
new file mode 100644
index 0000000..84c0a97
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4136_2.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+{
+    RUNNING=$(auditctl -l)
+    [ -n "${RUNNING}" ] && for PARTITION in $(findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,) | grep -Pv "noexec|nosuid" | awk '{print $1}'); do
+        for PRIVILEGED in $(find "${PARTITION}" -xdev -perm /6000 -type f); do
+            printf -- "${RUNNING}" | grep -q "${PRIVILEGED}" && printf "OK: '${PRIVILEGED}' found in auditing rules.\n" || printf "Warning: '${PRIVILEGED}' not found in running configuration.\n"
+        done
+    done || printf "ERROR: Variable 'RUNNING' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_1.sh
new file mode 100644
index 0000000..a17f5a1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_1.sh
@@ -0,0 +1,5 @@
+    #!/usr/bin/env bash
+    {
+        UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+        [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&(/ -F *exit=-EACCES/||/ -F *exit=-EPERM/) &&/ -S/ &&/creat/ &&/open/ &&/truncate/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+    }
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_2.sh
new file mode 100644
index 0000000..5fd8402
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4137_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+        UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+        [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&(/ -F *exit=-EACCES/||/ -F *exit=-EPERM/) &&/ -S/ &&/creat/ &&/open/ &&/truncate/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_1.sh
new file mode 100644
index 0000000..b4e350b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -S/ &&/ -F *auid>=${UID_MIN}/ &&(/chmod/||/fchmod/||/fchmodat/ ||/chown/||/fchown/||/fchownat/||/lchown/ ||/setxattr/||/lsetxattr/||/fsetxattr/ ||/removexattr/||/lremovexattr/||/fremovexattr/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_2.sh
new file mode 100644
index 0000000..ae3b0be
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4139_2.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+{
+    UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+    [ -n "${UID_MIN}" ] && auditctl -l | awk "/^ *-a *always,exit/ &&/ -F *arch=b[2346]{2}/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -S/ &&/ -F *auid>=${UID_MIN}/ &&(/chmod/||/fchmod/||/fchmodat/ ||/chown/||/fchown/||/fchownat/||/lchown/ ||/setxattr/||/lsetxattr/||/fsetxattr/ ||/removexattr/||/lremovexattr/||/fremovexattr/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" || printf "ERROR: Variable 'UID_MIN' is unset.\n"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4141.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4141.sh
new file mode 100644
index 0000000..a09342a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4141.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    [ -f /etc/audit/auditd.conf ] && find "$(dirname $(awk -F "=" '/^\s*log_file/ {print $2}' /etc/audit/auditd.conf | xargs))" -type f \( ! -perm 600 -a ! -perm 0400 -a ! -perm 0200 -a ! -perm 0000 -a ! -perm 0640 -a ! -perm 0440 -a ! -perm 0040 \) -exec stat -Lc "%n %#a" {} +
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4142.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4142.sh
new file mode 100644
index 0000000..c5c9fd7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4142.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    [ -f /etc/audit/auditd.conf ] && find "$(dirname $(awk -F "=" '/^\s*log_file/ {print $2}' /etc/audit/auditd.conf | xargs))" -type f ! -user root -exec stat -Lc "%n %U" {} +
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4144.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4144.sh
new file mode 100644
index 0000000..f409d0a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4144.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    stat -Lc "%n %a" "$(dirname $( awk -F"=" '/^\s*log_file\s*=\s*/ {print $2}' /etc/audit/auditd.conf))" | grep -Pv -- '^\h*\H+\h+([0,5,7][0,5]0)'
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4145.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4145.sh
new file mode 100644
index 0000000..edabe95
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_4145.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) -exec stat -Lc "%n %a" {} + | grep -Pv -- '^\h*\H+\h*([0,2,4,6][0,4]0)\h*$'
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_522.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_522.sh
new file mode 100644
index 0000000..2c32e60
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_522.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2="" l_skgn="ssh_keys"
+    l_skgid="$(awk -F: '($1 == "'"$l_skgn"'"){print $3}' /etc/group)" [ -n "$l_skgid" ] && l_cga="$l_skgn" || l_cga="root" awk '{print}' <<< "$(find -L /etc/ssh -xdev -type f -exec stat -Lc "%n %#a %U %G %g" {} +)" | (while read -r l_file l_mode l_owner l_group l_gid; do
+        if file "$l_file" | grep -Pq ':\h+OpenSSH\h+private\h+key\b'; then
+            [ "$l_gid" = "$l_skgid" ] && l_pmask="0137" || l_pmask="0177" l_maxperm="$( printf '%o' $(( 0777 & ~$l_pmask )) )"
+                if [ $(( $l_mode & $l_pmask )) -gt 0 ]; then
+                    l_output2="$l_output2\n - File: \"$l_file\" is mode \"$l_mode\" should be mode: \"$l_maxperm\" or more restrictive"
+                else
+                    l_output="$l_output\n - File: \"$l_file\" is mode \"$l_mode\" should be mode: \"$l_maxperm\" or more restrictive"
+                fi
+                if [ "$l_owner" != "root" ]; then
+                    l_output2="$l_output2\n - File: \"$l_file\" is owned by: \"$l_owner\" should be owned by \"root\""
+                else
+                    l_output="$l_output\n - File: \"$l_file\" is owned by: \"$l_owner\" should be owned by \"root\""
+                fi
+                if [ "$l_group" != "root" ] && [ "$l_gid" != "$l_skgid" ]; then
+                    l_output2="$l_output2\n - File: \"$l_file\" is owned by group \"$l_group\" should belong to group \"$l_cga\""
+                else
+                    l_output="$l_output\n - File: \"$l_file\" is owned by group \"$l_group\" should belong to group \"$l_cga\""
+                fi
+        fi
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n *PASS*\n$l_output"
+    else
+        echo -e "\n- Audit Result:\n *FAIL*\n$l_output2\n\n - Correctly set:\n$l_output"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_523.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_523.sh
new file mode 100644
index 0000000..f07ec86
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_523.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2="" l_pmask="0133"
+    awk '{print}' <<< "$(find -L /etc/ssh -xdev -type f -exec stat -Lc "%n %#a %U %G" {} +)" | (while read -r l_file l_mode l_owner l_group; do
+        if file "$l_file" | grep -Pq ':\h+OpenSSH\h+(\H+\h+)?public\h+key\b'; then
+            l_maxperm="$( printf '%o' $(( 0777 & ~$l_pmask )) )"
+            if [ $(( $l_mode & $l_pmask )) -gt 0 ]; then
+                l_output2="$l_output2\n - Public key file: \"$l_file\" is mode \"$l_mode\" should be mode: \"$l_maxperm\" or more restrictive"
+            else
+                l_output="$l_output\n - Public key file: \"$l_file\" is mode \"$l_mode\" should be mode: \"$l_maxperm\" or more restrictive"
+            fi
+            if [ "$l_owner" != "root" ]; then
+                l_output2="$l_output2\n - Public key file: \"$l_file\" is owned by: \"$l_owner\" should be owned by \"root\""
+            else
+                l_output="$l_output\n - Public key file: \"$l_file\" is owned by: \"$l_owner\" should be owned by \"root\""
+            fi
+            if [ "$l_group" != "root" ]; then
+                l_output2="$l_output2\n - Public key file: \"$l_file\" is owned by group \"$l_group\" should belong to group \"root\"\n"
+            else
+                l_output="$l_output\n - Public key file: \"$l_file\" is owned by group \"$l_group\" should belong to group \"root\"\n"
+            fi
+        fi
+    done
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n *PASS*\n$l_output"
+    else
+        echo -e "\n- Audit Result:\n *FAIL*\n$l_output2\n\n - Correctly set:\n$l_output"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_1.sh
new file mode 100644
index 0000000..78f3c11
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    grep PASS_MAX_DAYS /etc/login.defs | cut -d ' ' -f 2
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_2.sh
new file mode 100644
index 0000000..e0f4638
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5611_2.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '(/^[^:]+:[^!*]/ && ($5>365 || $5~/([0-1]|-1|\s*)/)){print $1 " " $5}' /etc/shadow
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_1.sh
new file mode 100644
index 0000000..4928e93
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    grep PASS_MIN_DAYS /etc/login.defs | cut -d ' ' -f 2
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_2.sh
new file mode 100644
index 0000000..127acc2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5612_2.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F : '(/^[^:]+:[^!*]/ && $4 < 1){print $1 " " $4}' /etc/shadow
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_1.sh
new file mode 100644
index 0000000..a99e7ce
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    grep PASS_WARN_AGE /etc/login.defs | cut -d ' ' -f 2
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_2.sh
new file mode 100644
index 0000000..6953fe9
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5613_2.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+{
+    for var in $(grep -E ^[^:]+:[^\!*] /etc/shadow | cut -d: -f6)
+    do
+        if [ $var -le 7 ]; then
+            echo "FAIL"
+        fi
+    done
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_1.sh
new file mode 100644
index 0000000..4724df0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    useradd -D | grep INACTIVE | cut -d '=' -f 2
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_2.sh
new file mode 100644
index 0000000..191a5eb
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5614_2.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '/^[^#:]+:[^!\*:]*:[^:]*:[^:]*:[^:]*:[^:]*:(\s*|-1|3[1-9]|[4-9][0-9]|[1-9][0-9][0-9]+):[^:]*:[^:]*\s*$/ {print $1":"$7}' /etc/shadow
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5615.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5615.sh
new file mode 100644
index 0000000..5faf665
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_5615.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+{
+    awk -F: '/^[^:]+:[^!*]/{print $1}' /etc/shadow | while read -r usr; do
+        change=$(date -d "$(chage --list $usr | grep '^Last password change' | cut -d: -f2 | grep -v 'never$')" +%s);
+        if [[ "$change" -gt "$(date +%s)" ]]; then 
+            echo "User: \"$usr\" last password change was \"$(chage --list $usr | grep '^Last password change' | cut -d: -f2)\"";
+        fi;
+    done
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_1.sh
new file mode 100644
index 0000000..ed7fd6f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '($1!~/^(root|halt|sync|shutdown|nfsnobody)$/ && ($3<'"$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)"' || $3 == 65534) && $7!~/^(\/usr)?\/sbin\/nologin$/) { print $1 }' /etc/passwd
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_2.sh
new file mode 100644
index 0000000..7e58cb5
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_562_2.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '/nologin/ {print $1}' /etc/passwd | xargs -I '{}' passwd -S '{}' | awk '($2!="L" && $2!="LK") {print $1}'
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_1.sh
new file mode 100644
index 0000000..d74ebd9
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_1.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+{
+    passing=""
+    grep -Eiq '^\s*UMASK\s+(0[0-7][2-7]7|[0-7][2-7]7)\b' /etc/login.defs && grep -Eqi '^\s*USERGROUPS_ENAB\s*"?no"?\b' /etc/login.defs && grep -Eq '^\s*session\s+(optional|requisite|required)\s+pam_umask\.so\b' /etc/pam.d/common-session && passing=true grep -REiq '^\s*UMASK\s+\s*(0[0-7][2-7]7|[0-7][2-7]7|u=(r?|w?|x?)(r?|w?|x?)(r?|w?|x?),g=(r?x?|x?r?),o=)\b' /etc/profile* /etc/bashrc* && passing=true
+    [ "$passing" = true ] && echo "Default user umask is set"
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_2.sh
new file mode 100644
index 0000000..72f6a44
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_565_2.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    grep -RPi '(^|^[^#]*)\s*umask\s+([0-7][0-7][01][0-7]\b|[0-7][0-7][0-7][0-6]\b|[0-7][01][0-7]\b|[0-7][0-7][0-6]\b|(u=[rwx]{0,3},)?(g=[rwx]{0,3},)?o=[rwx]+\b|(u=[rwx]{1,3},)?g=[^rx]{1,3}(,o=[rwx]{0,3})?\b)' /etc/login.defs /etc/profile* /etc/bashrc*
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_621.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_621.sh
new file mode 100644
index 0000000..8a41221
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_621.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '($2 != "x" ) { print $1 " is not set to shadowed passwords "}' /etc/passwd
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6210.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6210.sh
new file mode 100644
index 0000000..f2d2f79
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6210.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+{
+    output=""
+    valid_shells="^($( sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do
+        [ ! -d "$home" ] && output="$output\n - User \"$user\" home directory \"$home\" doesn't exist"
+    done
+    if [ -z "$output" ]; then
+        echo -e "\n-PASSED: - All local interactive users have a home directory\n"
+    else
+        echo -e "\n- FAILED:\n$output\n"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6211.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6211.sh
new file mode 100644
index 0000000..ef63bd4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6211.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+{
+    output=""
+    valid_shells="^($( sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do
+        owner="$(stat -L -c "%U" "$home")" [ "$owner" != "$user" ] && output="$output\n - User \"$user\" home directory \"$home\" is owned by user \"$owner\""
+    done
+    if [ -z "$output" ]; then
+        echo -e "\n-PASSED: - All local interactive users have a home directory\n"
+    else
+        echo -e "\n- FAILED:\n$output\n"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6212.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6212.sh
new file mode 100644
index 0000000..cc2aa52
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6212.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    output=""
+    perm_mask='0027'
+    maxperm="$( printf '%o' $(( 0777 & ~$perm_mask)) )" valid_shells="^($( sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do
+        mode=$( stat -L -c '%#a' "$home" )
+        [ $(( $mode & $perm_mask )) -gt 0 ] && output="$output\n- User $user home directory: \"$home\" is too permissive: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+    done
+    if [ -n "$output" ]; then
+        echo -e "\n- Failed:$output"
+    else
+        echo -e "\n- Passed:\n- All user home directories are mode: \"$maxperm\" or more restrictive"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6213.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6213.sh
new file mode 100644
index 0000000..972848b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6213.sh
@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+{
+    output="" output2="" perm_mask='0177'
+    maxperm="$( printf '%o' $(( 0777 & ~$perm_mask)) )"
+    valid_shells="^($( sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do
+        if [ -f "$home/.netrc" ]; then mode="$( stat -L -c '%#a' "$home/.netrc" )"
+            if [ $(( $mode & $perm_mask )) -gt 0 ]; then
+                output="$output\n - User \"$user\" file: \"$home/.netrc\" is too permissive: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+            else
+                output2="$output2\n - User \"$user\" file: \"$home/.netrc\" exists and has file mode: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+            fi
+        fi
+    done
+    if [ -z "$output" ]; then
+        if [ -z "$output2" ]; then
+            echo -e "\n-PASSED: - No local interactive users have \".netrc\" files in their home directory\n"
+        else
+            echo -e "\n- WARNING:\n$output2\n"
+        fi
+    else
+        echo -e "\n- FAILED:\n$output\n" [ -n "$output2" ] && echo -e "\n- WARNING:\n$output2\n"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6214.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6214.sh
new file mode 100644
index 0000000..8bd3a99
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6214.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    output=""
+    fname=".forward"
+    valid_shells="^($( sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do
+        [ -f "$home/$fname" ] && output="$output\n - User \"$user\" file: \"$home/$fname\" exists"
+    done
+    if [ -z "$output" ]; then
+        echo -e "\n-PASSED: - No local interactive users have \"$fname\" files in their home directory\n"
+    else
+        echo -e "\n- FAILED:\n$output\n"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6215.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6215.sh
new file mode 100644
index 0000000..1bf982e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6215.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+{
+    output=""
+    fname=".rhosts"
+    valid_shells="^($( sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do
+        [ -f "$home/$fname" ] && output="$output\n - User \"$user\" file: \"$home/$fname\" exists"
+    done
+    if [ -z "$output" ]; then
+        echo -e "\n-PASSED: - No local interactive users have \"$fname\" files in their home directory\n"
+    else
+        echo -e "\n- FAILED:\n$output\n"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6216.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6216.sh
new file mode 100644
index 0000000..238eafe
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_6216.sh
@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+{
+    output=""
+    perm_mask='0022'
+    maxperm="$( printf '%o' $(( 0777 & ~$perm_mask)) )"
+    valid_shells="^($( sed -rn '/^\//{s,/,\\\\/,g;p}' /etc/shells | paste -s -d '|' - ))$"
+    awk -v pat="$valid_shells" -F: '$(NF) ~ pat { print $1 " " $(NF-1) }' /etc/passwd | (while read -r user home; do
+        for dfile in $(find "$home" -type f -name '.*'); do
+            mode=$( stat -L -c '%#a' "$dfile" )
+            [ $(( $mode & $perm_mask )) -gt 0 ] && output="$output\n- User $user file: \"$dfile\" is too permissive: \"$mode\" (should be: \"$maxperm\" or more restrictive)"
+        done
+    done
+    if [ -n "$output" ]; then
+        echo -e "\n- Failed:$output"
+    else
+        echo -e "\n- Passed:\n- All user home dot files are mode: \"$maxperm\" or more restrictive"
+    fi
+    )
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_622.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_622.sh
new file mode 100644
index 0000000..2e5e69e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_622.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_628.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_628.sh
new file mode 100644
index 0000000..3ef3663
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_628.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    RPCV="$(sudo -Hiu root env | grep '^PATH' | cut -d= -f2)"
+    echo "$RPCV" | grep -q "::" && echo "root's path contains a empty directory (::)"
+    echo "$RPCV" | grep -q ":$" && echo "root's path contains a trailing (:)"
+    for x in $(echo "$RPCV" | tr ":" " "); do
+        if [ -d "$x" ]; then
+            ls -ldH "$x" | awk '$9 == "." {print "PATH contains current working directory (.)"}
+            $3 != "root" {print $9, "is not owned by root"}
+            substr($1,6,1) != "-" {print $9, "is group writable"}
+            substr($1,9,1) != "-" {print $9, "is world writable"}'
+        else
+            echo "$x is not a directory"
+        fi
+    done
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_629.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_629.sh
new file mode 100644
index 0000000..14b6a5b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9/CIS100_RHEL9_629.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '($3 == 0) { print $1 }' /etc/passwd
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.2.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.2.1.2.sh
new file mode 100644
index 0000000..9eeadde
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.2.1.2.sh
@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# Configuration file to check
+FILE="/etc/dnf/dnf.conf"
+# Pattern to search for
+PATTERN="gpgcheck"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^[[:space:]]*#?[[:space:]]*$PATTERN\s*=" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^[[:space:]]*#[[:space:]]*$PATTERN\s*=" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of gpgcheck using grep and sed
+	VALUE=$(grep -E "^[[:space:]]*$PATTERN\s*=\s*(true|yes|[0-9]+)" "$FILE" | sed -E 's/.*=\s*(true|yes|[0-9]+).*/\1/')
+
+	# If the value was found and it's valid (true, yes, or 1)
+	if [[ "$VALUE" == "true" || "$VALUE" == "yes" || "$VALUE" == "1" ]]; then
+		echo "The value of $PATTERN ($VALUE) is valid."
+		exit 0
+	else
+		echo "The value of $PATTERN ($VALUE) is not valid."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.2.sh
new file mode 100644
index 0000000..4f6f2e0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.2.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+if grubby --info=ALL | grep -Pq '(selinux|enforcing)=0\b'; then
+	exit 1
+else
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.3.sh
new file mode 100644
index 0000000..c8153f8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.3.sh
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+if grep -Eq '^\s*SELINUXTYPE=(targeted|mls)\b' /etc/selinux/config; then
+	echo "SELinux-Type is configured correctly"
+	exit 0
+else
+	echo "ERROR: SELinux-Type not configured"
+	exit 1
+fi
+
+if sestatus | grep -q "Loaded policy name: targeted"; then
+	echo "Policy is'targeted'"
+	exit 0
+elif sestatus | grep -q "Loaded policy name: mls"; then
+	echo "ERROR: Policy is 'mls'"
+	exit 1
+else
+	echo "ERROR: policy should be 'targeted'"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.5.sh
new file mode 100644
index 0000000..d01b813
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.3.1.5.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+if grep -i SELINUX=enforcing /etc/selinux/config; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.3.sh
new file mode 100644
index 0000000..20b1d2c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.3.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+for file in /etc/systemd/coredump.conf /etc/systemd/coredump.conf.d/*.conf; do
+	[ -e "$file" ] || continue
+
+	if grep -Eq '^\s*ProcessSizeMax=0' "$file"; then
+		exit 0
+	fi
+
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.4.sh
new file mode 100644
index 0000000..633b85c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.5.4.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+for file in /etc/systemd/coredump.conf /etc/systemd/coredump.conf.d/*.conf; do
+	[ -e "$file" ] || continue
+
+	if grep -Eq '^\s*Storage=none' "$file"; then
+		exit 0
+	fi
+
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.1.sh
new file mode 100644
index 0000000..a778f03
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.1.sh
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+grep -q "^1$" /proc/sys/crypto/fips_enabled && exit 0
+grep -q "^LEGACY$" /etc/crypto-policies/config && exit 1 || exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.2.sh
new file mode 100644
index 0000000..b5f9bff
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.6.2.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+if [[ -f /etc/sysconfig/sshd ]]; then
+	if grep -Pi '^\s*CRYPTO_POLICY\s*=' /etc/sysconfig/sshd; then
+		echo "CRYPTO_POLICY ist set"
+		exit 1
+	else
+		echo "CRYPTO_POLICY is not set"
+	fi
+else
+	echo "file /etc/sysconfig/sshd does not exist"
+fi
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.1.sh
new file mode 100644
index 0000000..373e1cc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.1.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Extract the OS ID from /etc/os-release
+OS_ID=$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g')
+
+# Run the grep command with the OS ID incorporated
+grep -Eis "(\\v|\\r|\\m|\\s|$OS_ID)" /etc/motd
+
+# Check the exit code of the grep command
+if [ $? -ne 0 ]; then
+	# Grep did not find any matches, return 0
+	exit 0
+else
+	# Grep found matches, return 1
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.4.sh
new file mode 100644
index 0000000..a2766e2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.7.4.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+TEST_FILE="/etc/motd"
+if [ -e "$TEST_FILE" ]; then
+	DESIRED_PERM="644"
+	ACTUAL_PERM=$(stat -c "%a" "$TEST_FILE")
+	if [[ "$ACTUAL_PERM" == "$DESIRED_PERM" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.10.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.10.sh
new file mode 100644
index 0000000..d21b15d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.10.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+config_file="/etc/gdm/custom.conf"
+
+if [[ ! -f "$config_file" || ! -r "$config_file" ]]; then
+	exit 0
+fi
+
+value="Enable"
+
+if grep -Eq "^\s*$value\s*=\s*true\s*$" "$config_file"; then
+	echo -e " \"$value\" in $config_file is true"
+	exit 1
+else
+	echo -e "\"$value\" not found or not set "
+fi
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.2.sh
new file mode 100644
index 0000000..3621d88
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.2.sh
@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        echo -e "$l_pkgoutput"
+        l_gdmfile="$(grep -Prils '^\h*banner-message-enable\b' /etc/dconf/db/*.d)"
+        if [ -n "$l_gdmfile" ]; then
+            l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_gdmfile")"
+            if grep -Pisq '^\h*banner-message-enable=true\b' "$l_gdmfile"; then
+                l_output="$l_output\n - The \"banner-message-enable\" option is enabled in \"$l_gdmfile\""
+            else
+                l_output2="$l_output2\n - The \"banner-message-enable\" option is not enabled"
+            fi
+            l_lsbt="$(grep -Pios '^\h*banner-message-text=.*$' "$l_gdmfile")"
+            if [ -n "$l_lsbt" ]; then
+                l_output="$l_output\n - The \"banner-message-text\" option is set in \"$l_gdmfile\"\n - banner-message-text is set to:\n - \"$l_lsbt\""
+            else
+                l_output2="$l_output2\n - The \"banner-message-text\" option is not set"
+            fi
+            if grep -Pq "^\h*system-db:$l_gdmprofile" /etc/dconf/profile/"$l_gdmprofile"; then
+                l_output="$l_output\n - The \"$l_gdmprofile\" profile exists"
+            else
+                l_output2="$l_output2\n - The \"$l_gdmprofile\" profile doesn't exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_gdmprofile" ]; then
+                l_output="$l_output\n - The \"$l_gdmprofile\" profile exists in the dconf database"
+            else
+                l_output2="$l_output2\n - The \"$l_gdmprofile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            l_output2="$l_output2\n - The \"banner-message-enable\" option isn't configured"
+        fi
+    else
+        echo -e "\n\n - GNOME Desktop Manager isn't installed\n - Recommendation is Not Applicable\n- Audit result:\n *PASS*\n"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.3.sh
new file mode 100644
index 0000000..eb44b86
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.3.sh
@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        output="" output2=""
+        l_gdmfile="$(grep -Pril '^\h*disable-user-list\h*=\h*true\b' /etc/dconf/db)"
+        if [ -n "$l_gdmfile" ]; then
+            output="$output\n - The \"disable-user-list\" option is enabled in \"$l_gdmfile\""
+            l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_gdmfile")"
+            if grep -Pq "^\h*system-db:$l_gdmprofile" /etc/dconf/profile/"$l_gdmprofile"; then
+                output="$output\n - The \"$l_gdmprofile\" exists"
+            else
+                output2="$output2\n - The \"$l_gdmprofile\" doesn't exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_gdmprofile" ]; then
+                output="$output\n - The \"$l_gdmprofile\" profile exists in the dconf database"
+            else
+                output2="$output2\n - The \"$l_gdmprofile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            output2="$output2\n - The \"disable-user-list\" option is not enabled"
+        fi
+        if [ -z "$output2" ]; then
+            echo -e "$l_pkgoutput\n- Audit result:\n PASS:\n$output\n"
+        else
+            echo -e "$l_pkgoutput\n- Audit Result:\n FAIL:\n$output2\n"
+            [ -n "$output" ] && echo -e "$output\n"
+        fi
+    else
+        echo -e "\n\n - GNOME Desktop Manager isn't installed\n - Recommendation is Not Applicable\n- Audit result:\n PASS\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.4.sh
new file mode 100644
index 0000000..874abc5
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.4.sh
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2="" l_idmv="900"
+        l_ldmv="5"
+        l_kfile="$(grep -Psril '^\h*idle-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/)"
+        if [ -n "$l_kfile" ]; then
+            l_profile="$(awk -F'/' '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile")"
+            l_pdbdir="/etc/dconf/db/$l_profile.d"
+            l_idv="$(awk -F 'uint32' '/idle-delay/{print $2}' "$l_kfile" | xargs)"
+            if [ -n "$l_idv" ]; then
+                [ "$l_idv" -gt "0" -a "$l_idv" -le "$l_idmv" ] && l_output="$l_output\n - The \"idle-delay\" option is set to \"$l_idv\" seconds in \"$l_kfile\"" [ "$l_idv" = "0" ] && l_output2="$l_output2\n - The \"idle-delay\" option is set to \"$l_idv\" (disabled) in \"$l_kfile\"" [ "$l_idv" -gt "$l_idmv" ] && l_output2="$l_output2\n - The \"idle-delay\" option is set to \"$l_idv\" seconds (greater than $l_idmv) in \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - The \"idle-delay\" option is not set in \"$l_kfile\""
+            fi
+            l_ldv="$(awk -F 'uint32' '/lock-delay/{print $2}' "$l_kfile" | xargs)"
+            if [ -n "$l_ldv" ]; then
+                [ "$l_ldv" -ge "0" -a "$l_ldv" -le "$l_ldmv" ] && l_output="$l_output\n - The \"lock-delay\" option is set to \"$l_ldv\"seconds in \"$l_kfile\"" [ "$l_ldv" -gt "$l_ldmv" ] && l_output2="$l_output2\n - The \"lock-delay\" option is set to \"$l_ldv\" seconds (greater than $l_ldmv) in \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - The \"lock-delay\" option is not set in \"$l_kfile\""
+            fi
+            if grep -Psq "^\h*system-db:$l_profile" /etc/dconf/profile/*; then
+                l_output="$l_output\n - The \"$l_profile\" profile exists"
+            else
+                l_output2="$l_output2\n - The \"$l_profile\" doesn't exist"
+            fi
+            if [ -f "/etc/dconf/db/$l_profile" ]; then
+                l_output="$l_output\n - The \"$l_profile\" profile exists in the dconf database"
+            else
+                l_output2="$l_output2\n - The \"$l_profile\" profile doesn't exist in the dconf database"
+            fi
+        else
+            l_output2="$l_output2\n - The \"idle-delay\" option doesn't exist, remaining tests skipped"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.5.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.5.sh
new file mode 100644
index 0000000..72282d3
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.5.sh
@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*idle-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        l_kfd2="/etc/dconf/db/$(grep -Psril '^\h*lock-delay\h*=\h*uint32\h+\d+\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        if [ -d "$l_kfd" ]; then
+            if grep -Prilq '\/org\/gnome\/desktop\/session\/idle-delay\b' "$l_kfd"; then
+                l_output="$l_output\n - \"idle-delay\" is locked in \"$(grep -Pril '\/org\/gnome\/desktop\/session\/idle-delay\b' "$l_kfd")\""
+            else
+                l_output2="$l_output2\n - \"idle-delay\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"idle-delay\" is not set so it can not be locked"
+        fi
+        if [ -d "$l_kfd2" ]; then
+            if grep -Prilq '\/org\/gnome\/desktop\/screensaver\/lock-delay\b' "$l_kfd2"; then
+                l_output="$l_output\n - \"lock-delay\" is locked in \"$(grep -Pril '\/org\/gnome\/desktop\/screensaver\/lock-delay\b' "$l_kfd2")\""
+            else
+                l_output2="$l_output2\n - \"lock-delay\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"lock-delay\" is not set so it can not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.6.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.6.sh
new file mode 100644
index 0000000..3ed9317
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.6.sh
@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput="" l_output="" l_output2=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+            l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        echo -e "$l_pkgoutput"
+        l_kfile="$(grep -Prils -- '^\h*automount\b' /etc/dconf/db/*.d)"
+        l_kfile2="$(grep -Prils -- '^\h*automount-open\b' /etc/dconf/db/*.d)"
+        if [ -f "$l_kfile" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile")"
+        elif [ -f "$l_kfile2" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile2")"
+        fi
+        if [ -n "$l_gpname" ]; then
+            l_gpdir="/etc/dconf/db/$l_gpname.d"
+            if grep -Pq -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*; then
+                l_output="$l_output\n - dconf database profile file \"$(grep -Pl -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*)\" exists"
+            else
+                l_output2="$l_output2\n - dconf database profile isn't set"
+            fi
+            if [ -f "/etc/dconf/db/$l_gpname" ]; then
+                l_output="$l_output\n - The dconf database \"$l_gpname\" exists"
+            else
+                l_output2="$l_output2\n - The dconf database \"$l_gpname\" doesn't exist"
+            fi
+            if [ -d "$l_gpdir" ]; then
+                l_output="$l_output\n - The dconf directory \"$l_gpdir\" exitst"
+            else
+                l_output2="$l_output2\n - The dconf directory \"$l_gpdir\" doesn't exist"
+            fi
+            if grep -Pqrs -- '^\h*automount\h*=\h*false\b' "$l_kfile"; then
+                l_output="$l_output\n - \"automount\" is set to false in: \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - \"automount\" is not set correctly"
+            fi
+            if grep -Pqs -- '^\h*automount-open\h*=\h*false\b' "$l_kfile2"; then
+                l_output="$l_output\n - \"automount-open\" is set to false in: \"$l_kfile2\""
+            else
+                l_output2="$l_output2\n - \"automount-open\" is not set correctly"
+            fi
+        else
+            l_output2="$l_output2\n - neither \"automount\" or \"automount-open\" is set"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.7.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.7.sh
new file mode 100644
index 0000000..f6e7c9e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.7.sh
@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*automount\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        l_kfd2="/etc/dconf/db/$(grep -Psril '^\h*automount-open\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        if [ -d "$l_kfd" ]; then
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/automount\b' "$l_kfd"; then
+                l_output="$l_output\n - \"automount\" is locked in \"$(grep -Pil '^\h*\/org/gnome\/desktop\/media-handling\/automount\b' "$l_kfd")\""
+            else
+                l_output2="$l_output2\n - \"automount\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"automount\" is not set so it can not be locked"
+        fi
+        if [ -d "$l_kfd2" ]; then
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/automount-open\b' "$l_kfd2"; then
+                l_output="$l_output\n - \"lautomount-open\" is locked in \"$(grep -Pril '^\h*\/org/gnome\/desktop\/media-handling\/automount-open\b' "$l_kfd2")\""
+            else
+                l_output2="$l_output2\n - \"automount-open\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"automount-open\" is not set so it can not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.8.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.8.sh
new file mode 100644
index 0000000..f11261a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.8.sh
@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput="" l_output="" l_output2=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration" echo -e "$l_pkgoutput"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        echo -e "$l_pkgoutput"
+        l_kfile="$(grep -Prils -- '^\h*autorun-never\b' /etc/dconf/db/*.d)"
+        if [ -f "$l_kfile" ]; then
+            l_gpname="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<< "$l_kfile")"
+        fi
+        if [ -n "$l_gpname" ]; then
+            l_gpdir="/etc/dconf/db/$l_gpname.d"
+            if grep -Pq -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*; then
+                l_output="$l_output\n - dconf database profile file \"$(grep -Pl -- "^\h*system-db:$l_gpname\b" /etc/dconf/profile/*)\" exists"
+            else
+                l_output2="$l_output2\n - dconf database profile isn't set"
+            fi
+            if [ -f "/etc/dconf/db/$l_gpname" ]; then
+                l_output="$l_output\n - The dconf database \"$l_gpname\" exists"
+            else
+                l_output2="$l_output2\n - The dconf database \"$l_gpname\" doesn't exist"
+            fi
+            if [ -d "$l_gpdir" ]; then
+                l_output="$l_output\n - The dconf directory \"$l_gpdir\" exitst"
+            else
+                l_output2="$l_output2\n - The dconf directory \"$l_gpdir\" doesn't exist"
+            fi
+            if grep -Pqrs -- '^\h*autorun-never\h*=\h*true\b' "$l_kfile"; then
+                l_output="$l_output\n - \"autorun-never\" is set to true in: \"$l_kfile\""
+            else
+                l_output2="$l_output2\n - \"autorun-never\" is not set correctly"
+            fi
+        else
+            l_output2="$l_output2\n - \"autorun-never\" is not set"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.9.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.9.sh
new file mode 100644
index 0000000..4fbf6d3
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/1.8.9.sh
@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+{
+    l_pkgoutput=""
+    if command -v dpkg-query > /dev/null 2>&1; then
+        l_pq="dpkg-query -W"
+    elif
+        command -v rpm > /dev/null 2>&1; then
+        l_pq="rpm -q"
+    fi
+    l_pcl="gdm gdm3"
+    for l_pn in $l_pcl; do
+        $l_pq "$l_pn" > /dev/null 2>&1 && l_pkgoutput="$l_pkgoutput\n - Package: \"$l_pn\" exists on the system\n - checking configuration"
+    done
+    if [ -n "$l_pkgoutput" ]; then
+        l_output="" l_output2=""
+        l_kfd="/etc/dconf/db/$(grep -Psril '^\h*autorun-never\b' /etc/dconf/db/*/ | awk -F'/' '{split($(NF-1),a,".");print a[1]}').d"
+        if [ -d "$l_kfd" ]; then
+            if grep -Piq '^\h*\/org/gnome\/desktop\/media-handling\/autorun-never\b' "$l_kfd"; then
+                l_output="$l_output\n - \"autorun-never\" is locked in \"$(grep -Pil '^\h*\/org/gnome\/desktop\/media-handling\/autorun-never\b' "$l_kfd")\""
+            else
+                l_output2="$l_output2\n - \"autorun-never\" is not locked"
+            fi
+        else
+            l_output2="$l_output2\n - \"autorun-never\" is not set so it can not be locked"
+        fi
+    else
+        l_output="$l_output\n - GNOME Desktop Manager package is not installed on the system\n - Recommendation is not applicable"
+    fi
+    [ -n "$l_pkgoutput" ] && echo -e "\n$l_pkgoutput"
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.3.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.3.3.sh
new file mode 100644
index 0000000..00f5eaf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.3.3.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+config_file="/etc/sysconfig/chronyd"
+
+if [[ ! -f "$config_file" || ! -r "$config_file" ]]; then
+	echo "Configuration file '$config_file' is missing or not readable. Exiting."
+	exit 1
+fi
+
+regex_pattern="^\s*OPTIONS=\s*([^#\n\r]+\s+)?-u\s+root\b"
+value="-u\s+root\b"
+if grep -Eq "$regex_pattern" "$config_file"; then
+	echo " \"$value\" in $config_file is found"
+	exit 1
+else
+	echo "\"$value\" not found or not set "
+fi
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.4.18.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.4.18.sh
new file mode 100644
index 0000000..4692a30
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/2.4.18.sh
@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+
+# Define the files to check
+FILES=("/etc/cron.allow" "/etc/cron.deny")
+
+# Function to check a file
+check_file() {
+	local file=$1
+
+	# Check if the file exists
+	if [ ! -e "$file" ]; then
+		echo "File $file does not exist. Ignoring."
+		return 0
+	fi
+
+	# Get the file permissions in numeric format
+	local permissions=$(stat -c "%a" "$file")
+	local owner=$(stat -c "%U" "$file")
+	local group=$(stat -c "%G" "$file")
+
+	# Check if the file permissions are 0640 or more restrictive
+	if [ "$permissions" -gt 640 ]; then
+		echo "File $file permissions are not 0640 or more restrictive."
+		return 1
+	fi
+
+	# Check if the owner is root and group is root
+	if [ "$owner" != "root" ] || [ "$group" != "root" ]; then
+		echo "File $file owner or group is not root."
+		return 1
+	fi
+
+	return 0
+}
+
+# Check each file
+for file in "${FILES[@]}"; do
+	if ! check_file "$file"; then
+		exit 1
+	fi
+done
+
+# If all checks pass, exit with status 0
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/3.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/3.1.3.sh
new file mode 100644
index 0000000..4f2772c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/3.1.3.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2="" l_mname="tipc"
+    if [ -z "$(modprobe -n -v "$l_mname" 2>&1 | grep -Pi -- "\h*modprobe:\h+FATAL:\h+Module\h+$l_mname\h+not\h+found\h+in\h+directory")" ]; then
+        l_loadable="$(modprobe -n -v "$l_mname")"
+        [ "$(wc -l <<< "$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<< "$l_loadable")"
+        if grep -Pq -- '^\h*install \/bin\/(true|false)' <<< "$l_loadable"; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+        fi
+        if ! lsmod | grep "$l_mname" > /dev/null 2>&1; then
+            l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+        fi
+        if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+            l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+        else
+            l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+        fi
+    else
+        l_output="$l_output\n - Module \"$l_mname\" doesn't exist on the system"
+    fi
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Result:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Result:\n FAIL\n - Reason(s) for audit failure:\n$l_output2\n"
+        [ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/4.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/4.1.2.sh
new file mode 100644
index 0000000..b8f0893
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/4.1.2.sh
@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+{
+    l_output="" l_output2="" l_fwd_status="" l_nft_status="" l_fwutil_status=""
+    rpm -q firewalld > /dev/null 2>&1 && l_fwd_status="$(systemctl is-enabled firewalld.service):$(systemctl is-active firewalld.service)"
+    rpm -q nftables > /dev/null 2>&1 && l_nft_status="$(systemctl is-enabled nftables.service):$(systemctl is-active nftables.service)"
+    l_fwutil_status="$l_fwd_status:$l_nft_status"
+    case $l_fwutil_status in
+        enabled:active:masked:inactive|enabled:active:disabled:inactive)
+        l_output="\n - FirewallD utility is in use, enabled and active\n - NFTables utility is correctly disabled or masked and inactive" ;;
+        masked:inactive:enabled:active|disabled:inactive:enabled:active)
+        l_output="\n - NFTables utility is in use, enabled and active\n - FirewallD utility is correctly disabled or masked and inactive" ;;
+        enabled:active:enabled:active)
+        l_output2="\n - Both FirewallD and NFTables utilities are enabled and active" ;;
+        enabled:*:enabled:*) l_output2="\n - Both FirewallD and NFTables utilities are enabled" ;;
+        *:active:*:active) l_output2="\n - Both FirewallD and NFTables utilities are enabled" ;;
+        :enabled:active) l_output="\n - NFTables utility is in use, enabled, and active\n - FirewallD package is not installed" ;;
+        :) l_output2="\n - Neither FirewallD or NFTables is installed." ;;
+        *:*:) l_output2="\n - NFTables package is not installed on the system" ;;
+        *) l_output2="\n - Unable to determine firewall state" ;;
+    esac
+    if [ -z "$l_output2" ]; then
+        echo -e "\n- Audit Results:\n PASS\n$l_output\n"
+    else
+        echo -e "\n- Audit Results:\n FAIL\n$l_output2\n"
+    fi
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.10.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.10.sh
new file mode 100644
index 0000000..89ecb6c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.10.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=disableforwarding
+parameter_sshd_config=DisableForwarding
+desired_value=yes
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		exit 1
+
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.11.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.11.sh
new file mode 100644
index 0000000..49ee504
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.11.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=gssapiauthentication
+parameter_sshd_config=GSSAPIAuthentication
+desired_value=no
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.12.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.12.sh
new file mode 100644
index 0000000..40eb8e2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.12.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+parameter_sshd_t=hostbasedauthentication
+parameter_sshd_config=HostbasedAuthentication
+desired_value=no
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		exit 1
+
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.13.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.13.sh
new file mode 100644
index 0000000..44c53ba
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.13.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=ignorerhosts
+parameter_sshd_config=IgnoreRhosts
+desired_value=yes
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		actual_value=no
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.14.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.14.sh
new file mode 100644
index 0000000..55f58f2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.14.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+#test
+parameter_sshd_t=logingracetime
+parameter_sshd_config=LoginGraceTime
+desired_value=60
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		actual_value=120
+	fi
+fi
+
+if [ "$actual_value" -le "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.15.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.15.sh
new file mode 100644
index 0000000..90d49f0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.15.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+parameter_sshd_t=loglevel
+parameter_sshd_config=LogLevel
+desired_value=INFO
+desired_value1=VERBOSE
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		actual_value=INFO
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ] || [ "$actual_value" = "$desired_value1" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.17.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.17.sh
new file mode 100644
index 0000000..e1d2b8d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.17.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+parameter_sshd_t=maxstartups
+parameter_sshd_config=MaxStartups
+desired_value="10:30:60"
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -Ei "^$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep -E "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.18.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.18.sh
new file mode 100644
index 0000000..9d1ac4d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.18.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=maxsessions
+parameter_sshd_config=MaxSessions
+FILE="/etc/ssh/sshd_config"
+desired_value=10
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" -le "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.9.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.9.sh
new file mode 100644
index 0000000..c1284aa
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.1.9.sh
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+parameter_sshd_t=clientaliveinterval
+parameter_sshd_config=ClientAliveInterval
+desired_value=15
+
+parameter_sshd_t1=clientalivecountmax
+parameter_sshd_config1=ClientAliveCountMax
+desired_value1=3
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+actual_value1=$(sshd -T | grep -i "$parameter_sshd_t1" | awk '{print $2}')
+
+if [ -z "$actual_value" ] && [ -z "$actual_value1" ]; then
+	if (grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config) && (grep -iq '^$parameter_sshd_config1' /etc/ssh/sshd_config); then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+		actual_value1=$(grep -i '^$parameter_sshd_config1' /etc/ssh/sshd_config | awk '{print $2}')
+
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" -eq "$desired_value" ] && [ "$actual_value1" -eq "$desired_value1" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.2.sh
new file mode 100644
index 0000000..4fe362e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.2.sh
@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+
+# Check if authselect.conf exists
+if [[ ! -f /etc/authselect/authselect.conf ]]; then
+	echo "/etc/authselect/authselect.conf is missing."
+	exit 1
+fi
+
+l_module_name="faillock"
+l_pam_profile="$(head -1 /etc/authselect/authselect.conf)"
+
+if grep -Pq -- '^custom\/' <<<"$l_pam_profile"; then
+	l_pam_profile_path="/etc/authselect/$l_pam_profile"
+else
+	l_pam_profile_path="/usr/share/authselect/default/$l_pam_profile"
+fi
+
+for file in "$l_pam_profile_path/password-auth" "$l_pam_profile_path/system-auth"; do
+	if [[ ! -f "$file" ]]; then
+		echo "File $file does not exist. Test failed."
+		exit 1
+	fi
+
+	if ! grep -P -- "\bpam_$l_module_name\.so\b" "$file" >/dev/null; then
+		echo "pam_faillock.so entry not found in $file. Test failed."
+		exit 1
+	else
+		echo "pam_faillock.so entry found in $file."
+	fi
+
+	if ! grep -P -- "\{include if \"with-faillock\"\}" "$file" >/dev/null; then
+		echo "Entry '{include if \"with-faillock\"}' not found in $file. Test failed."
+		exit 1
+	else
+		echo "Entry '{include if \"with-faillock\"}' found in $file. Test passed."
+	fi
+done
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.3.sh
new file mode 100644
index 0000000..d2298f0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.3.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+# Check if /etc/authselect/authselect.conf exists
+if [[ ! -f /etc/authselect/authselect.conf ]]; then
+	echo "/etc/authselect/authselect.conf is missing."
+	exit 1
+fi
+
+l_module_name="unix"
+l_pam_profile="$(head -1 /etc/authselect/authselect.conf)"
+
+if grep -Pq -- '^custom\/' <<<"$l_pam_profile"; then
+	l_pam_profile_path="/etc/authselect/$l_pam_profile"
+else
+	l_pam_profile_path="/usr/share/authselect/default/$l_pam_profile"
+fi
+
+for file in "$l_pam_profile_path/password-auth" "$l_pam_profile_path/system-auth"; do
+	if [[ ! -f "$file" ]]; then
+		echo "File $file does not exist. Test failed."
+		exit 1
+	fi
+
+	if ! grep -P -- "\bpam_$l_module_name\.so\b" "$file" >/dev/null; then
+		echo "pam_unix.so entry not found in $file. Test failed."
+		exit 1
+	else
+		echo "pam_unix.so entry found in $file. Test passed."
+	fi
+done
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.4.sh
new file mode 100644
index 0000000..e9278ab
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.4.sh
@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+
+# Check if authselect.conf exists
+if [[ ! -f /etc/authselect/authselect.conf ]]; then
+	echo "/etc/authselect/authselect.conf is missing."
+	exit 1
+fi
+
+l_module_name="pwhistory"
+l_pam_profile="$(head -1 /etc/authselect/authselect.conf)"
+
+# Check if authselect.conf exists
+if [[ ! -f /etc/authselect/authselect.conf ]]; then
+	echo "/etc/authselect/authselect.conf is missing."
+	exit 0
+fi
+
+if grep -Pq -- '^custom\/' <<<"$l_pam_profile"; then
+	l_pam_profile_path="/etc/authselect/$l_pam_profile"
+else
+	l_pam_profile_path="/usr/share/authselect/default/$l_pam_profile"
+fi
+
+for file in "$l_pam_profile_path/password-auth" "$l_pam_profile_path/system-auth"; do
+	if [[ ! -f "$file" ]]; then
+		echo "File $file does not exist. Test failed."
+		exit 1
+	fi
+
+	if ! grep -P -- "\bpam_$l_module_name\.so\b" "$file" >/dev/null; then
+		echo "pam_pwhistory.so entry not found in $file. Test failed."
+		exit 1
+	else
+		echo "pam_pwhistory.so entry found in $file."
+	fi
+
+	if ! grep -P -- "\{include if \"with-pwhistory\"\}" "$file" >/dev/null; then
+		echo "Entry '{include if \"with-pwhistory\"}' not found in $file. Test failed."
+		exit 1
+	else
+		echo "Entry '{include if \"with-pwhistory\"}' found in $file. Test passed."
+	fi
+done
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.5.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.5.sh
new file mode 100644
index 0000000..d6b0db9
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.2.5.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+# Check if authselect.conf exists
+if [[ ! -f /etc/authselect/authselect.conf ]]; then
+	echo "/etc/authselect/authselect.conf is missing."
+	exit 1
+fi
+
+l_module_name="unix"
+l_pam_profile="$(head -1 /etc/authselect/authselect.conf)"
+
+if grep -Pq -- '^custom\/' <<<"$l_pam_profile"; then
+	l_pam_profile_path="/etc/authselect/$l_pam_profile"
+else
+	l_pam_profile_path="/usr/share/authselect/default/$l_pam_profile"
+fi
+
+for file in "$l_pam_profile_path/password-auth" "$l_pam_profile_path/system-auth"; do
+	if [[ ! -f "$file" ]]; then
+		echo "File $file does not exist. Test failed."
+		exit 1
+	fi
+	if ! grep -P -- "\bpam_$l_module_name\.so\b" "$file" >/dev/null; then
+		echo "pam_unix.so entry not found in $file. Test failed."
+		exit 1
+	else
+		echo "pam_unix.so entry found in $file. Test passed."
+	fi
+done
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.2.7.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.2.7.sh
new file mode 100644
index 0000000..ed6605d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.2.7.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# File configuration
+FILE="/etc/security/pwquality.conf"
+# what we look for
+PATTERN="enforce_for_root"
+
+# Check if the file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE wa not found."
+	exit 1
+fi
+
+# Search for the pattern, regardless of its case, even if it is commented out
+grep -Ei "^[[:space:]]*#?[[:space:]]*$PATTERN" "$FILE" >/dev/null
+FOUND=$?
+
+# if the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# check if it is commented
+	grep -Ei "^[[:space:]]*#[[:space:]]*$PATTERN" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		exit 1
+	fi
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.1.sh
new file mode 100644
index 0000000..ba6dc49
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.1.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+pw_file="/etc/security/pwhistory.conf"
+value="remember"
+regex_pattern="^\s*${value}\s*=\s*[0-9]+\s*$"
+expected_value=24
+if grep -Eq "$regex_pattern" "$pw_file"; then
+	current_value=$(grep -Eo "$regex_pattern" "$pw_file" | awk -F'=' '{print $2}' | tr -d ' ')
+	if ((current_value < expected_value)); then
+		echo "ERROR: $value = $current_value < $expected_value"
+		exit 1
+	else
+		echo "$value = $current_value > $expected_value"
+		exit 0
+	fi
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.2.sh
new file mode 100644
index 0000000..b90f820
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.3.2.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+pw_file="/etc/security/pwhistory.conf"
+
+value="enfore_for_root"
+
+regex_pattern="^\s*#*\s*${value}\s*"
+
+if grep -Eq "^\s*${value}\s*$" "$pw_file"; then
+	echo "$value is correctly set."
+	exit 0
+else
+	echo "ERROR: $value is either missing or commented out."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.2.sh
new file mode 100644
index 0000000..c634d6a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.2.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+if [[ ! -d "/etc/authselect" && ! -d "/usr/share/authselect" ]]; then
+	echo "Authselect is not installed. Exiting."
+	exit 1
+fi
+
+pam_profile="$(head -1 /etc/authselect/authselect.conf 2>/dev/null || echo "default")"
+
+if [[ "$pam_profile" =~ ^custom/ ]]; then
+	pam_profile_path="/etc/authselect/$pam_profile"
+else
+	pam_profile_path="/usr/share/authselect/default/$pam_profile"
+fi
+
+for auth_file in "$pam_profile_path"/{password-auth,system-auth}; do
+	if grep -Eq '^\s*password\s+([^#\n\r]+\s+)?pam_unix\.so\b' $auth_file | grep -Pv '\bremember=\d\b'; then
+		echo "- \"remember\" is set in $auth_file"
+		exit 1
+	else
+		echo "- \"remember\" is not set in $auth_file"
+	fi
+done
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.3.sh
new file mode 100644
index 0000000..87954a6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.3.3.4.3.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+config_file="/etc/authselect/authselect.conf"
+if [[ ! -f "$config_file" || ! -r "$config_file" ]]; then
+	echo "Configuration file '$config_file' is missing or not readable. Exiting."
+	exit 1
+fi
+
+if command -v authselect &>/dev/null; then
+	pam_profile="$(head -1 /etc/authselect/authselect.conf 2>/dev/null || echo "default")"
+
+	if [[ "$pam_profile" =~ ^custom/ ]]; then
+		pam_profile_path="/etc/authselect/$pam_profile"
+	else
+		pam_profile_path="/usr/share/authselect/default/$pam_profile"
+	fi
+else
+	pam_profile_path="/etc/pam.d"
+fi
+
+for auth_file in "$pam_profile_path"/{password-auth,system-auth}; do
+	if grep -Eq '^\s*password\s+[^#]*pam_unix\.so\s+.*(sha512|yescrypt)\b' $auth_file; then
+		echo "- strong password hashing algorithm is set in $auth_file"
+	else
+		echo "- strong password hashing algorithm is not set in $auth_file"
+		exit 1
+	fi
+done
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.1.6.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.1.6.sh
new file mode 100644
index 0000000..5faf665
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.1.6.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+{
+    awk -F: '/^[^:]+:[^!*]/{print $1}' /etc/shadow | while read -r usr; do
+        change=$(date -d "$(chage --list $usr | grep '^Last password change' | cut -d: -f2 | grep -v 'never$')" +%s);
+        if [[ "$change" -gt "$(date +%s)" ]]; then 
+            echo "User: \"$usr\" last password change was \"$(chage --list $usr | grep '^Last password change' | cut -d: -f2)\"";
+        fi;
+    done
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.1.sh
new file mode 100644
index 0000000..14b6a5b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '($3 == 0) { print $1 }' /etc/passwd
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.5.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.5.sh
new file mode 100644
index 0000000..3ef3663
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/5.4.2.5.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+{
+    RPCV="$(sudo -Hiu root env | grep '^PATH' | cut -d= -f2)"
+    echo "$RPCV" | grep -q "::" && echo "root's path contains a empty directory (::)"
+    echo "$RPCV" | grep -q ":$" && echo "root's path contains a trailing (:)"
+    for x in $(echo "$RPCV" | tr ":" " "); do
+        if [ -d "$x" ]; then
+            ls -ldH "$x" | awk '$9 == "." {print "PATH contains current working directory (.)"}
+            $3 != "root" {print $9, "is not owned by root"}
+            substr($1,6,1) != "-" {print $9, "is group writable"}
+            substr($1,9,1) != "-" {print $9, "is world writable"}'
+        else
+            echo "$x is not a directory"
+        fi
+    done
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.1.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.1.4.sh
new file mode 100644
index 0000000..527ebb6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.1.4.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+socket_installed=$(systemctl list-unit-files | grep -q 'systemd-journal-remote.socket' && echo true || echo false)
+service_installed=$(systemctl list-unit-files | grep -q 'systemd-journal-remote.service' && echo true || echo false)
+
+if [[ "$socket_installed" == "false" && "$service_installed" == "false" ]]; then
+	exit 0 # True if neither is installed
+elif [[ "$socket_installed" == "true" && "$(systemctl is-active systemd-journal-remote.socket)" =~ ^(inactive|failed)$ ]] &&
+	[[ "$service_installed" == "true" && "$(systemctl is-active systemd-journal-remote.service)" =~ ^(inactive|failed)$ ]]; then
+	exit 0 # True if both are not active (including failed)
+else
+	exit 1 # False otherwise
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.2.sh
new file mode 100644
index 0000000..375bb76
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.2.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+regex_pattern="^\s*ForwardToSyslog\s*=\s*no"
+config_files=("/etc/systemd/journald.conf" "/etc/systemd/journald.conf.d/*")
+
+for config_file in "${config_files[@]}"; do
+	for file in $config_file; do
+		if [[ -f "$file" ]]; then
+			if grep -qE "$regex_pattern" "$file"; then
+				exit 0
+			fi
+		fi
+	done
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.3.sh
new file mode 100644
index 0000000..ac47dad
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.3.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+regex_pattern="^\s*Compress\s*=\s*yes"
+config_files=("/etc/systemd/journald.conf" "/etc/systemd/journald.conf.d/*")
+
+for config_file in "${config_files[@]}"; do
+	for file in $config_file; do
+		if [[ -f "$file" ]]; then
+			if grep -qE "$regex_pattern" "$file"; then
+				exit 0
+			fi
+		fi
+	done
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.4.sh
new file mode 100644
index 0000000..d2f60bc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.2.4.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+regex_pattern="^\s*Storage\s*=\s*persistent"
+config_files=("/etc/systemd/journald.conf" "/etc/systemd/journald.conf.d/*")
+
+for config_file in "${config_files[@]}"; do
+	for file in $config_file; do
+		if [[ -f "$file" ]]; then
+			if grep -qE "$regex_pattern" "$file"; then
+				exit 0
+			fi
+		fi
+	done
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.4.sh
new file mode 100644
index 0000000..3fbba0a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.4.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+config_files=("/etc/rsyslog.conf" "/etc/rsyslog.d/*.conf")
+expected_value=0640
+
+for file in ${config_files[@]}; do
+	for i in $file; do
+		if grep -qE '^\s*\$FileCreateMode' "$i" 2>/dev/null; then
+			chosen_file=$i
+		fi
+	done
+done
+if [[ -n $chosen_file ]]; then
+	current_value=$(grep -E '^\s*\$FileCreateMode' "$chosen_file" | sed -E 's/^\s*\$FileCreateMode\s+//')
+	if [[ -n $current_value && $current_value -le $expected_value ]]; then
+		echo "FileCreateMode is restricted enough"
+		exit 0
+	else
+		echo "FileCreateMode is not restricted enough"
+		exit 1
+	fi
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.7.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.7.sh
new file mode 100644
index 0000000..31d3bee
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.2.3.7.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+config_files=("/etc/rsyslog.conf" "/etc/rsyslog.d/*.conf")
+
+for file in "${config_files[@]}"; do
+	for i in $file; do
+		if [[ -f $i ]]; then
+			if grep -qoE '^\s*module\(load="imtcp"\)' "$i" 2>/dev/null; then
+				exit 1
+			fi
+			if grep -qoE '^\s*input\(type="imtcp"\s+port="[0-9]+"\)' "$i" 2>/dev/null; then
+				exit 1
+			fi
+			if grep -qoE '^\s*\$ModLoad\s+imtcp' "$i" 2>/dev/null; then
+				exit 1
+			fi
+			if grep -qoE '^\s*\$InputTCPServerRun' "$i" 2>/dev/null; then
+				exit 1
+			fi
+		fi
+	done
+done
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.2.sh
new file mode 100644
index 0000000..7b3479d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.2.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+GRUB_CFG="/etc/default/grub"
+
+if [[ ! -f "$GRUB_CFG" ]]; then
+	echo "Error: $GRUB_CFG does not exist."
+	exit 1
+fi
+if grep -q "audit=1" "$GRUB_CFG"; then
+	echo "Found 'audit=1' in $GRUB_CFG."
+	exit 0
+else
+	echo "'audit=1' not found in $GRUB_CFG."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.3.sh
new file mode 100644
index 0000000..158b8cc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.1.3.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+GRUB_CFG="/etc/default/grub"
+
+if [[ ! -f "$GRUB_CFG" ]]; then
+	echo "Error: $GRUB_CFG does not exist."
+	exit 1
+fi
+if grep -q "audit_backlog_limit" "$GRUB_CFG"; then
+	echo "Found 'audit_backlog_limit=1' in $GRUB_CFG."
+	exit 0
+else
+	echo "'audit_backlog_limit=1' not found in $GRUB_CFG."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.1.sh
new file mode 100644
index 0000000..dc826da
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.1.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+perm_mask="0027"
+if [ -e "/etc/audit/auditd.conf" ]; then
+	log_dir="$(dirname "$(awk -F= '/^\s*log_file\s*/{print $2}' /etc/audit/auditd.conf | xargs)")"
+	if [ -d "$log_dir" ]; then
+		maxperm="$(printf '%o' $((0777 & ~$perm_mask)))"
+		log_dir_mode="$(stat -Lc '%#a' "$log_dir")"
+		if [ $(($log_dir_mode & $perm_mask)) -gt 0 ]; then
+			exit 1
+		fi
+	else
+		exit 1
+	fi
+else
+	exit 1
+fi
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.2.sh
new file mode 100644
index 0000000..a8027ab
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.2.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+l_perm_mask="0137"
+if [ -e "/etc/audit/auditd.conf" ]; then
+	# Extract the log directory from the configuration file
+	l_audit_log_directory="$(dirname "$(awk -F= '/^\s*log_file\s*/{print $2}' /etc/audit/auditd.conf | xargs)")"
+
+	if [ -d "$l_audit_log_directory" ]; then
+		l_maxperm="$(printf '%o' $((0777 & ~$l_perm_mask)))"
+
+		# Find files matching the permission mask and process them line by line
+		while IFS= read -r l_file; do
+			# Ensure the file exists and get its mode
+			if [ -e "$l_file" ]; then
+				l_file_mode="$(stat -Lc '%#a' "$l_file")"
+				exit 1
+			fi
+		done < <(find "$l_audit_log_directory" -maxdepth 1 -type f -perm /"$l_perm_mask")
+
+		# Check if any files were processed
+		if [ $? -eq 0 ]; then
+			exit 0
+		fi
+	else
+		exit 0
+	fi
+else
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.3.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.3.sh
new file mode 100644
index 0000000..9bf99dc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.3.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+l_output="" l_output2=""
+if [ -e "/etc/audit/auditd.conf" ]; then
+	l_audit_log_directory="$(dirname "$(awk -F= '/^\s*log_file\s*/{print $2}' /etc/audit/auditd.conf | xargs)")"
+	if [ -d "$l_audit_log_directory" ]; then
+		while IFS= read -r l_file; do
+			l_output2="$l_output2\n - File: \"$l_file\" is owned by user: \"$(stat -Lc '%U' "$l_file")\"\n (should be owned by user: \"root\")\n"
+		done < <(find "$l_audit_log_directory" -maxdepth 1 -type f ! -user root)
+	else
+		l_output2="$l_output2\n - Log file directory not set in \"/etc/audit/auditd.conf\" please set log file directory"
+	fi
+else
+	l_output2="$l_output2\n - File: \"/etc/audit/auditd.conf\" not found.\n - ** Verify auditd is installed **"
+fi
+if [ -z "$l_output2" ]; then
+	l_output="$l_output\n - All files in \"$l_audit_log_directory\" are owned by user: \"root\"\n"
+	echo -e "\n- Audit Result:\n ** PASS **\n - * Correctly configured * :$l_output"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - * Reasons for auditgfailure * :$l_output2\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.4.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.4.sh
new file mode 100644
index 0000000..b5e03bd
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/6.3.4.4.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+
+audit_conf="/etc/audit/auditd.conf"
+perm_mask="0177"
+if [ ! -f "$audit_conf" ]; then
+	exit 1
+fi
+audit_log_dir=$(grep -E '^\s*log_file\s*=' "$audit_conf" | cut -d= -f2 | xargs dirname 2>/dev/null)
+if [ -z "$audit_log_dir" ]; then
+	exit 1
+fi
+audit_log_group=$(grep -E '^\s*log_group\s*=' "$audit_conf" | cut -d= -f2 | xargs)
+if [ -z "$audit_log_group" ]; then
+	exit 1
+fi
+if [ ! -d "$audit_log_dir" ]; then
+	exit 1
+fi
+for file in "$audit_log_dir"/*; do
+	if [ -f "$file" ]; then
+		group=$(ls -l "$file" | awk '{print $4}')
+		if [[ "$group" != "root" && "$group" != "adm" ]]; then
+			exit 1
+		fi
+	fi
+done
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.1.sh
new file mode 100644
index 0000000..8a41221
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.1.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '($2 != "x" ) { print $1 " is not set to shadowed passwords "}' /etc/passwd
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.2.sh
new file mode 100644
index 0000000..2e5e69e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/RHEL9_CIS2.0.0/7.2.2.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+{
+    awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-1.8.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-1.8.1.3.sh
new file mode 100644
index 0000000..9e530cc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-1.8.1.3.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_1.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_1.sh
new file mode 100644
index 0000000..47785d8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_1.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+awk -F: '($1!="root" && $1!="sync" && $1!="shutdown" && $1!="halt" && $1!~/^\+/ && $3<'"$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)"' && $7!="'"$(which nologin)"'" && $7!="/bin/false") {print}' /etc/passwd
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_2.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_2.sh
new file mode 100644
index 0000000..af16149
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.2_2.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+awk -F: '($1!="root" && $1!~/^\+/ && $3<'"$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)"') {print $1}' /etc/passwd | xargs -I '{}' passwd -S '{}' | awk '($2!="L" && $2!="LK") {print $1}'
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.4.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.4.sh
new file mode 100644
index 0000000..21cdbfc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-5.4.4.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+for f in /etc/profile.d/*.sh ; do
+    grep -Eq '(^|^[^#]*;)\s*(readonly|export(\s+[^$#;]+\s*)*)?\s*TMOUT=(900|[1-8][0-9][0-9]|[1-9][0-9]|[1-9])\b' $f && grep -Eq '(^|^[^#]*;)\s*readonly\s+TMOUT\b' $f && grep -Eq '(^|^[^#]*;)\s*export\s+([^$#;]+\s+)*TMOUT\b' $f && echo "TMOUT correctly configured in file: $f";
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.1.sh
new file mode 100644
index 0000000..38c459d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.1.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+awk -F: '($2 != "x" ) { print $1 " is not set to shadowed passwords "}' /etc/passwd
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.10.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.10.sh
new file mode 100644
index 0000000..bbd8860
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.10.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+awk -F: '($1 !~ /^(root|halt|sync|shutdown)$/ && $7 != "'"$(which nologin)"'" && $7 != "/bin/false" && $7 != "/usr/bin/false") { print $1 " " $6 }' /etc/passwd | while read user dir; do
+    if [ ! -d "$dir" ]; then
+        echo "The home directory ($dir) of user $user does not exist."
+    else
+        if [ ! -h "$dir/.netrc" -a -f "$dir/.netrc" ]; then
+            echo ".netrc file $dir/.netrc exists"
+        fi
+    fi
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.11.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.11.sh
new file mode 100644
index 0000000..118123e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.11.sh
@@ -0,0 +1,30 @@
+#!/bin/bash
+awk -F: '($1 !~ /^(root|halt|sync|shutdown)$/ && $7 != "'"$(which nologin)"'" && $7 != "/bin/false" && $7 != "/usr/bin/false") { print $1 " " $6 }' /etc/passwd | while read user dir; do
+    if [ ! -d "$dir" ]; then
+        echo "The home directory ($dir) of user $user does not exist."
+    else
+        for file in $dir/.netrc; do
+            if [ ! -h "$file" -a -f "$file" ]; then
+                fileperm=$(ls -ld $file | cut -f1 -d" ")
+                if [ $(echo $fileperm | cut -c5) != "-" ]; then
+                    echo "Group Read set on $file"
+                fi
+                if [ $(echo $fileperm | cut -c6) != "-" ]; then
+                    echo "Group Write set on $file"
+                fi
+                if [ $(echo $fileperm | cut -c7) != "-" ]; then
+                    echo "Group Execute set on $file"
+                fi
+                if [ $(echo $fileperm | cut -c8) != "-" ]; then
+                    echo "Other Read set on $file"
+                fi
+                if [ $(echo $fileperm | cut -c9) != "-" ]; then
+                    echo "Other Write set on $file"
+                fi
+                if [ $(echo $fileperm | cut -c10) != "-" ]; then
+                    echo "Other Execute set on $file"
+                fi
+            fi
+        done
+    fi
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.12.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.12.sh
new file mode 100644
index 0000000..685a0d0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.12.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+awk -F: '($1 !~ /^(root|halt|sync|shutdown)$/ && $7 != "'"$(which nologin)"'" && $7 != "/bin/false" && $7 != "/usr/bin/false") { print $1 " " $6 }' /etc/passwd | while read user dir; do
+    if [ ! -d "$dir" ]; then
+        echo "The home directory ($dir) of user $user does not exist."
+    else
+        for file in $dir/.rhosts; do
+            if [ ! -h "$file" -a -e "$file" ]; then
+                echo ".rhosts file in $dir"
+            fi
+        done
+    fi
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_1.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_1.sh
new file mode 100644
index 0000000..810e325
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_1.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+grep ^shadow:[^:]*:[^:]*:[^:]+ /etc/group
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_2.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_2.sh
new file mode 100644
index 0000000..ab4d48a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.18_2.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+awk -F: '($4 == "<shadow-gid>") { print }' /etc/passwd
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.2.sh
new file mode 100644
index 0000000..5e6b3c3
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.2.sh
@@ -0,0 +1,2 @@
+#!/bin/bash
+awk -F: '($2 == "" ) { print $1 " does not have a password "}' /etc/shadow
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.5.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.5.sh
new file mode 100644
index 0000000..ef0dc08
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.5.sh
@@ -0,0 +1,6 @@
+#!/bin/bash
+grep -E -v '^(halt|sync|shutdown)' /etc/passwd | awk -F: '($7 != "'"$(which nologin)"'" && $7 != "/bin/false") { print $1 " " $6 }' | while read -r user dir; do
+    if [ ! -d "$dir" ]; then
+        echo "The home directory ($dir) of user $user does not exist."
+    fi
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.6.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.6.sh
new file mode 100644
index 0000000..9d14223
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.6.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+grep -E -v '^(halt|sync|shutdown)' /etc/passwd | awk -F: '($7 != "'"$(which nologin)"'" && $7 != "/bin/false") { print $1 " " $6 }' | while read user dir; do
+    if [ ! -d "$dir" ]; then
+        echo "The home directory ($dir) of user $user does not exist."
+    else
+        dirperm=$(ls -ld $dir | cut -f1 -d" ")
+        if [ $(echo $dirperm | cut -c6) != "-" ]; then
+            echo "Group Write permission set on the home directory ($dir) of user $user"
+        fi
+        if [ $(echo $dirperm | cut -c8) != "-" ]; then
+            echo "Other Read permission set on the home directory ($dir) of user $user"
+        fi
+        if [ $(echo $dirperm | cut -c9) != "-" ]; then
+            echo "Other Write permission set on the home directory ($dir) of user $user"
+        fi
+        if [ $(echo $dirperm | cut -c10) != "-" ]; then
+            echo "Other Execute permission set on the home directory ($dir) of user $user"
+        fi
+    fi
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.7.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.7.sh
new file mode 100644
index 0000000..4df7421
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.7.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+grep -E -v '^(halt|sync|shutdown)' /etc/passwd | awk -F: '($7 != "'"$(which nologin)"'" && $7 != "/bin/false") { print $1 " " $6 }' | while read user dir; do
+    if [ ! -d "$dir" ]; then
+        echo "The home directory ($dir) of user $user does not exist."
+    else
+        owner=$(stat -L -c "%U" "$dir")
+        if [ "$owner" != "$user" ]; then
+            echo "The home directory ($dir) of user $user is owned by $owner."
+        fi
+    fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.8.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.8.sh
new file mode 100644
index 0000000..01e4ddc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.8.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+grep -E -v '^(halt|sync|shutdown)' /etc/passwd | awk -F: '($7 != "'"$(which nologin)"'" && $7 != "/bin/false") { print $1 " " $6 }' | while read user dir; do
+    if [ ! -d "$dir" ]; then
+        echo "The home directory ($dir) of user $user does not exist."
+    else
+        for file in $dir/.[A-Za-z0-9]*; do
+            if [ ! -h "$file" -a -f "$file" ]; then
+                fileperm=$(ls -ld $file | cut -f1 -d" ")
+                if [ $(echo $fileperm | cut -c6) != "-" ]; then
+                    echo "Group Write permission set on file $file"
+                fi
+                if [ $(echo $fileperm | cut -c9) != "-" ]; then
+                    echo "Other Write permission set on file $file"
+                fi
+            fi
+        done
+    fi
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.9.sh b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.9.sh
new file mode 100644
index 0000000..113a2ce
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/SLE_15/CIS-SEL15-6.2.9.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+awk -F: '($1 !~ /^(root|halt|sync|shutdown)$/ && $7 != "'"$(which nologin)"'" && $7 != "/bin/false" && $7 != "/usr/bin/false") { print $1 " " $6 }' /etc/passwd | while read user dir; do
+    if [ ! -d "$dir" ] ; then
+        echo "The home directory ($dir) of user $user does not exist."
+    else
+        if [ ! -h "$dir/.forward" -a -f "$dir/.forward" ]; then
+            echo ".forward file $dir/.forward exists"
+        fi
+    fi
+done
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.1.2.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.1.2.2.1.sh
new file mode 100644
index 0000000..88fc6ec
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.1.2.2.1.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+CHECK_DIR="/dev/shm"
+findmnt -kn "$CHECK_DIR" &>/dev/null
+exit $?
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.2.sh
new file mode 100644
index 0000000..7d7d905
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.2.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+GRUB_CFG="/etc/default/grub"
+
+if [[ ! -f "$GRUB_CFG" ]]; then
+	echo "Error: $GRUB_CFG does not exist."
+	exit 1
+fi
+if grep -q "apparmor=1" "$GRUB_CFG"; then
+	echo "Found 'apparmor=1' in $GRUB_CFG."
+	exit 0
+else
+	echo "'apparmor=1' not found in $GRUB_CFG."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.4.sh
new file mode 100644
index 0000000..c4344c4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.3.1.4.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+unconfined_lines=$(apparmor_status | grep unconfined)
+
+while IFS= read -r line; do
+	if [[ ! "$line" =~ ^0 ]]; then
+		exit 1
+	fi
+done <<<"$unconfined_lines"
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.5.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.5.3.sh
new file mode 100644
index 0000000..5895ecc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.5.3.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+kernel_parameters=("fs.suid_dumpable")
+kernel_values=("0")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.1.sh
new file mode 100644
index 0000000..373e1cc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.1.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# Extract the OS ID from /etc/os-release
+OS_ID=$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g')
+
+# Run the grep command with the OS ID incorporated
+grep -Eis "(\\v|\\r|\\m|\\s|$OS_ID)" /etc/motd
+
+# Check the exit code of the grep command
+if [ $? -ne 0 ]; then
+	# Grep did not find any matches, return 0
+	exit 0
+else
+	# Grep found matches, return 1
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.4.sh
new file mode 100644
index 0000000..a2766e2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.6.4.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+TEST_FILE="/etc/motd"
+if [ -e "$TEST_FILE" ]; then
+	DESIRED_PERM="644"
+	ACTUAL_PERM=$(stat -c "%a" "$TEST_FILE")
+	if [[ "$ACTUAL_PERM" == "$DESIRED_PERM" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.7.10.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.7.10.sh
new file mode 100644
index 0000000..d21b15d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.7.10.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+config_file="/etc/gdm/custom.conf"
+
+if [[ ! -f "$config_file" || ! -r "$config_file" ]]; then
+	exit 0
+fi
+
+value="Enable"
+
+if grep -Eq "^\s*$value\s*=\s*true\s*$" "$config_file"; then
+	echo -e " \"$value\" in $config_file is true"
+	exit 1
+else
+	echo -e "\"$value\" not found or not set "
+fi
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.2.sh
new file mode 100644
index 0000000..9be133e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.2.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+if command -v dpkg-query >/dev/null 2>&1; then
+    l_pq="dpkg-query -W"
+elif command -v rpm >/dev/null 2>&1; then
+    l_pq="rpm -q"
+fi
+
+found=1
+for gdm in "gdm" "gdm3"; do # Space seporated list of packages to check
+    $l_pq $gdm &>/dev/null && found=0
+done
+
+if [[ $found -eq 0 ]]; then
+    l_gdmfile="$(grep -Prils '^\h*banner-message-enable\b' /etc/dconf/db/*.d)" # can be multipale
+    num_gdmfile=$(wc -l <<< $l_gdmfile)
+    if [[ -n "$l_gdmfile" ]]; then
+        # wc -l because all files need to be set to true; grep -q states min 1 file is set to true
+        [[ $(grep -Pisl '^\h*banner-message-enable\h*=\h*true\b' $l_gdmfile | wc -l) < $num_gdmfile ]] && exit 1
+        [[ $(grep -Pisl '^\h*banner-message-text\h*=\h*.*$' $l_gdmfile | wc -l) < $num_gdmfile ]] && exit 1
+        l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<<"$l_gdmfile")" # can be multipale
+        for prof in $l_gdmprofile; do
+            # -r because local db config rules etc. can be listet under /etc/dconf/profile/user or others
+            grep -Prq "^\h*system-db:$prof" /etc/dconf/profile/ || exit 1
+            [ -f "/etc/dconf/db/$prof" ] || exit 1
+        done
+    else
+        exit 1
+    fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.3.sh
new file mode 100644
index 0000000..4e9ecf2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.3.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+if command -v dpkg-query >/dev/null 2>&1; then
+    l_pq="dpkg-query -W"
+elif command -v rpm >/dev/null 2>&1; then
+    l_pq="rpm -q"
+fi
+
+found=1
+for gdm in "gdm" "gdm3"; do # Space seporated list of packages to check
+    $l_pq $gdm &>/dev/null && found=0
+done
+
+if [[ $found -eq 0 ]]; then
+    l_gdmfile="$(grep -Prils '^\h*disable-user-list\h*=\h*true\b' /etc/dconf/db/*.d)" # can be multipale
+    if [[ -n "$l_gdmfile" ]]; then
+        l_gdmprofile="$(awk -F\/ '{split($(NF-1),a,".");print a[1]}' <<<"$l_gdmfile")" # can be multipale
+        for prof in $l_gdmprofile; do
+            # -r because local db config rules etc. can be listet under /etc/dconf/profile/user or others
+            grep -Prq "^\h*system-db:$prof" /etc/dconf/profile/ || exit 1
+            [ -f "/etc/dconf/db/$prof" ] || exit 1
+        done
+    else
+        exit 1
+    fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.4.sh
new file mode 100644
index 0000000..aef3c5e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.4.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# untested - changed settings don't take effect?!
+
+max_lockdelay=5
+max_idledelay=900
+
+unit_lockdelay=$(gsettings get org.gnome.desktop.screensaver lock-delay 2>/dev/null)
+unit_idledelay=$(gsettings get org.gnome.desktop.session idle-delay 2>/dev/null)
+
+if [[ -n "$unit_lockdelay" && -n "$unit_idledelay"  ]]; then # is gnome installed
+    idledelay=$(cut -d ' ' -f 2 <<<"$unit_idledelay")
+
+    [[ $idledelay -gt $max_idledelay || $idledelay -le 0 ]] && exit 1
+    [[ $(cut -d ' ' -f 2 <<<"$unit_lockdelay") -gt $max_lockdelay ]] && exit 1
+fi
+
+exit 0
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.5.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.5.sh
new file mode 100644
index 0000000..1be9483
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.5.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+if command -v dpkg-query >/dev/null 2>&1; then
+    l_pq="dpkg-query -W"
+elif command -v rpm >/dev/null 2>&1; then
+    l_pq="rpm -q"
+fi
+
+found=1
+for gdm in "gdm" "gdm3"; do # Space seporated list of packages to check
+    $l_pq $gdm &>/dev/null && found=0
+done
+
+checkLock() {
+    l_gdmfile="$(grep -Prils "^\h*$1\h*=\h*\d+\b" /etc/dconf/db/*.d)" # can be multipale
+    if [[ -n "$l_gdmfile" ]]; then
+        for path in $(dirname $l_gdmfile); do
+            grep -Prisq "^\h*\/org\/gnome\/desktop\/$2\/$1\b" "$path/locks" || exit 1
+        done
+    else
+        exit 1
+    fi
+}
+
+if [[ $found -eq 0 ]]; then
+    checkLock "idle-delay" "session"
+    checkLock "lock-delay" "screensaver"
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.6.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.6.sh
new file mode 100644
index 0000000..1a65199
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.6.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+auto=$(gsettings get org.gnome.desktop.media-handling automount 2>/dev/null)
+# -n checks for gnome installed
+[[ -n "$auto" && "$auto" != "false" ]] && exit 1
+
+autOpen=$(gsettings get org.gnome.desktop.media-handling automoun-open 2>/dev/null)
+[[ -n "$autOpen" && "$autOpen" != "false" ]] && exit 1
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.7.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.7.sh
new file mode 100644
index 0000000..99cd926
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.7.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+if command -v dpkg-query >/dev/null 2>&1; then
+    l_pq="dpkg-query -W"
+elif command -v rpm >/dev/null 2>&1; then
+    l_pq="rpm -q"
+fi
+
+found=1
+for gdm in "gdm" "gdm3"; do # Space seporated list of packages to check
+    $l_pq $gdm &>/dev/null && found=0
+done
+
+checkLock() {
+    l_gdmfile="$(grep -Prils "^\h*$1\h*=\h*\w+\b" /etc/dconf/db/*.d)" # can be multipale
+    if [[ -n "$l_gdmfile" ]]; then
+        for path in $(dirname $l_gdmfile); do
+            grep -Prisq "^\h*\/org\/gnome\/desktop\/media-handling\/$1\b" "$path/locks" || exit 1
+        done
+    else
+        exit 1
+    fi
+}
+
+if [[ $found -eq 0 ]]; then
+    checkLock "automount"
+    checkLock "automount-open"
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.8.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.8.sh
new file mode 100644
index 0000000..6ff5147
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.8.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+auto=$(gsettings get org.gnome.desktop.media-handling autorun-never 2>/dev/null)
+# -n checks for gnome installed
+[[ -n "$auto" && "$auto" != "true" ]] && exit 1
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.9.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.9.sh
new file mode 100644
index 0000000..1eb2760
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/1.8.9.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+if command -v dpkg-query >/dev/null 2>&1; then
+    l_pq="dpkg-query -W"
+elif command -v rpm >/dev/null 2>&1; then
+    l_pq="rpm -q"
+fi
+
+found=1
+for gdm in "gdm" "gdm3"; do # Space seporated list of packages to check
+    $l_pq $gdm &>/dev/null && found=0
+done
+
+checkLock() {
+    l_gdmfile="$(grep -Prils "^\h*$1\h*=\h*\w+\b" /etc/dconf/db/*.d)" # can be multipale
+    if [[ -n "$l_gdmfile" ]]; then
+        for path in $(dirname $l_gdmfile); do
+            grep -Prisq "^\h*\/org\/gnome\/desktop\/media-handling\/$1\b" "$path/locks" || exit 1
+        done
+    else
+        exit 1
+    fi
+}
+
+if [[ $found -eq 0 ]]; then
+    checkLock "autorun-never"
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.1.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.1.1.1.sh
new file mode 100644
index 0000000..bee9019
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.1.1.1.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+{
+    output="" l_tsd="" l_sdtd="" chrony="" l_ntp=""
+    dpkg-query -W chrony >/dev/null 2>&1 && l_chrony="y"
+    dpkg-query -W ntp >/dev/null 2>&1 && l_ntp="y" || l_ntp=""
+    systemctl list-units --all --type=service | grep -q 'systemd-timesyncd.service' && systemctl is-enabled systemd-timesyncd.service | grep -q 'enabled' && l_sdtd="y"
+    # ! systemctl is-enabled systemd-timesyncd.service | grep -q 'enabled' && l_nsdtd="y" || l_nsdtd=""
+    if [[ "$l_chrony" = "y" && "$l_ntp" != "y" && "$l_sdtd" != "y" ]]; then
+        l_tsd="chrony"
+        output="$output\n- chrony is in use on the system"
+    elif [[ "$l_chrony" != "y" && "$l_ntp" = "y" && "$l_sdtd" != "y" ]]; then
+        l_tsd="ntp"
+        output="$output\n- ntp is in use on the system"
+    elif [[ "$l_chrony" != "y" && "$l_ntp" != "y" ]]; then
+        if systemctl list-units --all --type=service | grep -q 'systemd-timesyncd.service' && systemctl is-enabled systemd-timesyncd.service | grep -Eq '(enabled|disabled|masked)'; then
+            l_tsd="sdtd"
+            output="$output\n- systemd-timesyncd is in use on the system"
+        fi
+    else
+        [[ "$l_chrony" = "y" && "$l_ntp" = "y" ]] && output="$output\n- both chrony and ntp are in use on the system"
+        [[ "$l_chrony" = "y" && "$l_sdtd" = "y" ]] && output="$output\n- both chrony and systemd-timesyncd are in use on the system"
+        [[ "$l_ntp" = "y" && "$l_sdtd" = "y" ]] && output="$output\n- both ntp and systemd-timesyncd are in use on the system"
+    fi
+    if [ -n "$l_tsd" ]; then
+        echo -e "\n- PASS:\n$output\n"
+    else
+        echo -e "\n- FAIL:\n$output\n"
+    fi
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.3.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.3.3.2.sh
new file mode 100644
index 0000000..1175611
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/2.3.3.2.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+if ! command -v chronyd &>/dev/null; then
+	# chronyd is not installed
+	exit 0
+fi
+
+if ps -ef | grep -v grep | grep -q "chronyd"; then
+	if ps -ef | grep -v grep | grep "chronyd" | awk '{print $1}' | grep -q "^_chrony$"; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.1.1.sh
new file mode 100644
index 0000000..9470c77
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.1.1.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+{
+    output=""
+    grubfile=$(find /boot -type f \( -name 'grubenv' -o -name 'grub.conf' -o -name 'grub.cfg' \) -exec grep -Pl -- '^\h*(kernelopts=|linux|kernel)' {} \;)
+    searchloc="/run/sysctl.d/*.conf /etc/sysctl.d/*.conf /usr/local/lib/sysctl.d/*.conf /usr/lib/sysctl.d/*.conf /lib/sysctl.d/*.conf /etc/sysctl.conf"
+
+    if [ -s "$grubfile" ]; then
+        ! grep -P -- "^\h*(kernelopts=|linux|kernel)" "$grubfile" | grep -vq -- ipv6.disable=1 && output="IPv6 Disabled in \"$grubfile\""
+    fi
+
+    if
+        grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" $searchloc && \
+        grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$" $searchloc && \
+        sysctl net.ipv6.conf.all.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.all\.disable_ipv6\h*=\h*1\h*(#.*)?$" && \
+        sysctl net.ipv6.conf.default.disable_ipv6 | grep -Pqs -- "^\h*net\.ipv6\.conf\.default\.disable_ipv6\h*=\h*1\h*(#.*)?$"
+    then
+        [ -n "$output" ] && output="$output, and in sysctl config" || output="ipv6 disabled in sysctl config"
+    fi
+
+    [ -n "$output" ] && echo -e "\n$output\n" || echo -e "\nIPv6 is enabled on the system\n"
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.1.6.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.1.6.sh
new file mode 100644
index 0000000..082385c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.1.6.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+which ufw &>/dev/null || echo "no ufw" && exit 0
+
+ufw_out="$(ufw status verbose)"
+ss -tuln | awk '($5!~/%lo:/ && $5!~/127.0.0.1:/ && $5!~/::1/) {split($5, a, ":"); print a[2]}' | sort | uniq | while read -r lpn; do
+    ! grep -Pq "^\h*$lpn\b" <<<"$ufw_out" && echo "- Port: \"$lpn\" is missing a firewall rule"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_1.sh
new file mode 100644
index 0000000..33feb3a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_1.sh
@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+[ -n "$(grep -E '^\s*include' /etc/nftables.conf)" ] && awk '/hook input/,/}/' $(awk '$1 ~ /^\s*include/ { gsub("\"","",$2);print $2 }' /etc/nftables.conf)
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_2.sh
new file mode 100644
index 0000000..3ec71e2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_2.sh
@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+[ -n "$(grep -E '^\s*include' /etc/nftables.conf)" ] && awk '/hook forward/,/}/' $(awk '$1 ~ /^\s*include/ { gsub("\"","",$2);print $2 }' /etc/nftables.conf)
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_3.sh
new file mode 100644
index 0000000..46f6d37
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/3.5.2.10_3.sh
@@ -0,0 +1,2 @@
+#!/usr/bin/env bash
+[ -n "$(grep -E '^\s*include' /etc/nftables.conf)" ] && awk '/hook output/,/}/' $(awk '$1 ~ /^\s*include/ { gsub("\"","",$2);print $2 }' /etc/nftables.conf)
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_1.sh
new file mode 100644
index 0000000..5275e7c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_1.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+{
+  awk '/^ *-w/ \
+&&(/\/var\/run\/utmp/ \
+ ||/\/var\/log\/wtmp/ \
+ ||/\/var\/log\/btmp/) \
+&&/ +-p *wa/ \
+&&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_2.sh
new file mode 100644
index 0000000..57f840a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.1.3.11_2.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+{
+  auditctl -l | awk '/^ *-w/ \
+&&(/\/var\/run\/utmp/ \
+ ||/\/var\/log\/wtmp/ \
+ ||/\/var\/log\/btmp/) \
+&&/ +-p *wa/ \
+&&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)'
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.2.3.sh
new file mode 100644
index 0000000..e76eaa7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/4.2.3.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+checkForRules() {
+    # check if a Block states at least 1 reference (ufw blocks)
+    # and has more 2 lines (Input, Output, Forward blocks)
+    $1 -L | awk -v RS="\n\n" '$0 !~ /\(0 references\)/ && $0 ~ /.+\n.+\n.+/ {print $0}'
+}
+
+[[ -n "$(checkForRules ip6tables)" || -n "$(checkForRules iptables)" ]] && exit 1
+
+exit 0
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.10.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.10.sh
new file mode 100644
index 0000000..40eb8e2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.10.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+parameter_sshd_t=hostbasedauthentication
+parameter_sshd_config=HostbasedAuthentication
+desired_value=no
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		exit 1
+
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.11.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.11.sh
new file mode 100644
index 0000000..44c53ba
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.11.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=ignorerhosts
+parameter_sshd_config=IgnoreRhosts
+desired_value=yes
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		actual_value=no
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.12.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.12.sh
new file mode 100644
index 0000000..002502f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.12.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+output=$(sshd -T -C user=root -C host="$(hostname)" -C addr="$(hostname -I | cut -d ' ' -f1)" | grep -Ei "kexalgorithms\s+([^#\n\r]+,)?(diffie-hellman-group1-sha1|diffie-hellman-group14-sha1|diffie-hellman-group-exchange-sha1)\b")
+
+if [[ -n "$output" ]]; then
+	exit 1
+else
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.13.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.13.sh
new file mode 100644
index 0000000..55f58f2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.13.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+#test
+parameter_sshd_t=logingracetime
+parameter_sshd_config=LoginGraceTime
+desired_value=60
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		actual_value=120
+	fi
+fi
+
+if [ "$actual_value" -le "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.14.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.14.sh
new file mode 100644
index 0000000..90d49f0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.14.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+parameter_sshd_t=loglevel
+parameter_sshd_config=LogLevel
+desired_value=INFO
+desired_value1=VERBOSE
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		actual_value=INFO
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ] || [ "$actual_value" = "$desired_value1" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.15.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.15.sh
new file mode 100644
index 0000000..e4b9ba7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.15.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -Pi -- 'macs\h+([^#\n\r]+,)?(hmac-md5|hmac-md5-96|hmac-ripemd160|hmac-sha1-96|umac-64@openssh\.com|hmac-md5-etm@openssh\.com|hmac-md5-96-etm@openssh\.com|hmac-ripemd160-etm@openssh\.com|hmac-sha1-96-etm@openssh\.com|umac-64-etm@openssh\.com|umac-128-etm@openssh\.com)')
+
+if [ -z "$actual_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.17.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.17.sh
new file mode 100644
index 0000000..9d1ac4d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.17.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=maxsessions
+parameter_sshd_config=MaxSessions
+FILE="/etc/ssh/sshd_config"
+desired_value=10
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" -le "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.18.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.18.sh
new file mode 100644
index 0000000..e1d2b8d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.18.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+parameter_sshd_t=maxstartups
+parameter_sshd_config=MaxStartups
+desired_value="10:30:60"
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -Ei "^$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep -E "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.6.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.6.sh
new file mode 100644
index 0000000..f392ffc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.6.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -Pi -- '^ciphers\h+\"?([^#\n\r]+,)?((3des|blowfish|cast128|aes(128|192|256))-cbc|arcfour(128|256)?|rijndael-cbc@lysator\.liu\.se|chacha20-poly1305@openssh\.com)')
+
+if [ -z "$actual_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.7.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.7.sh
new file mode 100644
index 0000000..c1284aa
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.7.sh
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+parameter_sshd_t=clientaliveinterval
+parameter_sshd_config=ClientAliveInterval
+desired_value=15
+
+parameter_sshd_t1=clientalivecountmax
+parameter_sshd_config1=ClientAliveCountMax
+desired_value1=3
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+actual_value1=$(sshd -T | grep -i "$parameter_sshd_t1" | awk '{print $2}')
+
+if [ -z "$actual_value" ] && [ -z "$actual_value1" ]; then
+	if (grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config) && (grep -iq '^$parameter_sshd_config1' /etc/ssh/sshd_config); then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+		actual_value1=$(grep -i '^$parameter_sshd_config1' /etc/ssh/sshd_config | awk '{print $2}')
+
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" -eq "$desired_value" ] && [ "$actual_value1" -eq "$desired_value1" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.8.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.8.sh
new file mode 100644
index 0000000..89ecb6c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.8.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=disableforwarding
+parameter_sshd_config=DisableForwarding
+desired_value=yes
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		exit 1
+
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.9.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.9.sh
new file mode 100644
index 0000000..49ee504
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.1.9.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=gssapiauthentication
+parameter_sshd_config=GSSAPIAuthentication
+desired_value=no
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.4.sh
new file mode 100644
index 0000000..6e9b2a7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.4.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+sufile="/etc/sudoers"
+includes=$(awk '/^[^#]*(@|#)include(dir)?/{
+	if ($1 ~ /^(@|#)includedir/)
+		print $2"/*";
+	else print $2}' $sufile)
+
+for file in $sufile $includes; do
+    # exclude hardening file
+	if [[ ! $file =~ /\*$ ]] && grep -q "^[^#]*NOPASSWD" $file && [[ $file != "/etc/sudoers.d/DSC" ]]; then
+		exit 1
+	fi
+done
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.5.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.5.sh
new file mode 100644
index 0000000..c6c181c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.5.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+sufile="/etc/sudoers"
+includes=$(awk '/^[^#]*(@|#)include(dir)?/{
+	if ($1 ~ /^(@|#)includedir/)
+		print $2"/*";
+	else print $2}' $sufile)
+
+for file in $sufile $includes; do
+	if [[ ! $file =~ /\*$ ]] && grep -q "^[^#]*!authenticate" $file; then
+		exit 1
+	fi
+done
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.7.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.7.sh
new file mode 100644
index 0000000..282cb7a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.2.7.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+# multiple groups can be configured to switch to diffrent set of users
+while IFS='=' read -r _ confGroup; do
+    # options not in specific Order -> cut of
+    group="$(echo $confGroup | awk '{print $1}')"
+    membercount=$(grep -Pi "^$group:" /etc/group | awk -F ':' '{print $NF}' | awk -F ',' '{print NF}')
+    # groups should have no members
+    [[ $membercount -gt 0 ]] && exit 1
+done < <(grep -Pi '^\h*auth\h+(?:required|requisite)\h+pam_wheel\.so\h+(?:[^#\n\r]+\h+)?((?!\2)(use_uid\b|group=\H+\b))\h+(?:[^#\n\r]+\h+)?((?!\1)(use_uid\b|group=\H+\b))(\h+.*)?$' /etc/pam.d/su)
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.1.sh
new file mode 100644
index 0000000..843c699
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.1.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+pam_files=("/etc/pam.d/common-account" "/etc/pam.d/common-session" "/etc/pam.d/common-auth" "/etc/pam.d/common-password")
+pam_module="pam_unix.so"
+error_found=false
+
+for file in "${pam_files[@]}"; do
+	echo "Checking $file..."
+	if grep -q "$pam_module" "$file"; then
+		echo "OK: $pam_module is enabled in $file"
+	else
+		echo "Error: $pam_module is NOT enabled in $file"
+		error_found=true
+	fi
+done
+
+if [ "$error_found" = true ]; then
+	echo "Test Failed: pam_unix.so is NOT enabled in all PAM configuration files."
+	exit 1
+else
+	echo "Test Passed: pam_unix.so is enabled in all PAM configuration files."
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.2.sh
new file mode 100644
index 0000000..abca33b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.2.sh
@@ -0,0 +1,40 @@
+#!/usr/bin/env bash
+
+pam_path="/usr/share/pam-configs"
+pam_files=("faillock" "faillock_notify")
+
+expected_faillock=(
+	'Name: Enable pam_faillock to deny access'
+	'Default: yes'
+	'Priority: 0'
+	'Auth-Type: Primary'
+	'Auth:        [default=die] pam_faillock.so authfail'
+)
+expected_faillock_notify=(
+	'Name: Notify of failed login attempts and reset count upon success'
+	'Default: yes'
+	'Priority: 1024'
+	'Auth-Type: Primary'
+	'Auth:        requisite pam_faillock.so preauth'
+	'Account-Type: Primary'
+	'Account:     required pam_faillock.so'
+)
+check_profile() {
+	local profile_path="$pam_path/$1"
+	local expected_content=("${!2}")
+
+	if [[ ! -f "$profile_path" ]]; then
+		echo "ERROR: Profile $profile_path does not exist."
+		exit 1
+	fi
+	echo "Checking profile: $profile_path"
+	# Read the actual content of the profile file
+	for line in "${expected_content[@]}"; do
+		if ! grep -Fxq "$line" "$profile_path"; then
+			echo "ERROR: Expected line not found in $profile_path: $line"
+			exit 1
+		fi
+	done
+}
+check_profile "faillock" expected_faillock[@]
+check_profile "faillock_notify" expected_faillock_notify[@]
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.3.sh
new file mode 100644
index 0000000..82ab4ca
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.3.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+pam_path="/usr/share/pam-configs"
+profile_name="pwquality"
+
+expected_content=(
+	'Name: Pwquality password strength checking'
+	'Default: yes'
+	'Priority: 1024'
+	'Conflicts: cracklib'
+	'Password-Type: Primary'
+	'Password:' 'requisite pam_pwquality.so retry=3'
+	'Password-Initial:'
+	'requisite'
+)
+# check if the pwquality exists
+if [[ -f "$pam_path/$profile_name" ]]; then
+	echo "$profile_name profile found in $pam_path:"
+else
+	echo "ERROR: $profile_name profile not found in $pam_path."
+	exit 1
+fi
+
+# check content of pwquality
+for line in "${expected_pwquality[@]}"; do
+	if ! grep -Fxq "$line" "$pam_path/$profile_name"; then
+		echo "ERROR: Expected line not found in $profile_name: $line"
+		exit 1
+	fi
+done
+echo "pwquality profile content in $pam_path/$profile_name is correct."
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.4.sh
new file mode 100644
index 0000000..fe86ec2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.2.4.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+pam_path="/usr/share/pam-configs"
+profile_name="pwhistory"
+
+expected_content=(
+	'Name: pwhistory password history checking'
+	'Default: yes'
+	'Priority: 1024'
+	'Password-Type: Primary' 'Password:'
+	'requisite pam_pwhistory.so remember=24 enforce_for_root try_first_pass use_authtok'
+)
+
+# check content of pwhistory
+if [[ -f "$pam_path/$profile_name" ]]; then
+	echo "$profile_name profile found in $pam_path:"
+else
+	echo "ERROR: $profile_name profile not found in $pam_path."
+	exit 1
+fi
+
+# check content of pwhistory
+for line in "${expected_pwquality[@]}"; do
+	if ! grep -Fxq "$line" "$pam_path/$profile_name"; then
+		echo "ERROR: Expected line not found in $profile_name: $line"
+		exit 1
+	fi
+done
+echo "$profile_name profile content in $pam_path/$profile_name is correct."
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.7.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.7.sh
new file mode 100644
index 0000000..fb0b279
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.7.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# Parameter to search for
+parameter_config="enforcing"
+unwanted_value=0
+file="/etc/security/pwquality.conf"
+
+# Search for the line containing the parameter with '=' and the unwanted value, even if commented
+line=$(grep -E "^\s*$parameter_config\s*=\s*$unwanted_value\s*$" "$file")
+
+# Check if the unwanted line exists
+if [ -n "$line" ]; then
+	echo "Error: The line '$parameter_config=$unwanted_value' exists in $file (even if commented)."
+	exit 1
+else
+	echo "No unwanted or commented line '$parameter_config=$unwanted_value' found in $file."
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.8.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.8.sh
new file mode 100644
index 0000000..ed6605d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.2.8.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# File configuration
+FILE="/etc/security/pwquality.conf"
+# what we look for
+PATTERN="enforce_for_root"
+
+# Check if the file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE wa not found."
+	exit 1
+fi
+
+# Search for the pattern, regardless of its case, even if it is commented out
+grep -Ei "^[[:space:]]*#?[[:space:]]*$PATTERN" "$FILE" >/dev/null
+FOUND=$?
+
+# if the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# check if it is commented
+	grep -Ei "^[[:space:]]*#[[:space:]]*$PATTERN" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		exit 1
+	fi
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.1.sh
new file mode 100644
index 0000000..4405ee6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.1.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+files_to_check=$(awk '/Password-Type:/{ f = 1;next } /-Type:/{ f = 0 } f {if (/pam_pwhistory\.so/) print FILENAME}' /usr/share/pam-configs/*)
+if [[ -z $files_to_check ]]; then
+	echo "file was not  found"
+else
+	for file in "$files_to_check"; do
+		if grep -Eq "pam_pwhistory\.so.*remember=" "$file"; then
+			current_value=$(grep -Eo "remember=[0-9]+" "$file" | grep -Eo "[0-9]+")
+			if [ "$current_value" -lt 24 ]; then
+				exit 1
+			fi
+		else
+			exit 1
+		fi
+	done
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.2.sh
new file mode 100644
index 0000000..0812856
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.3.2.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+files_to_check=$(awk '/Password-Type:/{ f = 1;next } /-Type:/{ f = 0 } f {if (/pam_pwhistory\.so/) print FILENAME}' /usr/share/pam-configs/*)
+if [[ -z $files_to_check ]]; then
+	echo "file was not  found"
+else
+	for file in "$files_to_check"; do
+		if grep -Eq "pam_pwhistory\.so.*enforce_for_root" "$file"; then
+			exit 0
+		else
+			exit 1
+		fi
+	done
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.2.sh
new file mode 100644
index 0000000..eed187c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.2.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+files_to_check=$(grep -El 'pam_unix\.so.*remember=' /usr/share/pam-configs/*)
+if [[ -z "$files_to_check" ]]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.3.sh
new file mode 100644
index 0000000..990d02d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.3.3.4.3.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+files_to_check=$(grep -Elz "Password-Type:.*\n.*pam_unix\.so" /usr/share/pam-configs/*)
+if [ -z "$files_to_check" ]; then
+        echo "No relevant files found."
+        exit 0
+fi
+
+for file in $files_to_check; do
+	if ! grep -Eq "pam_unix\.so.*(yescrypt|sha512)" "$file"; then
+                exit 1
+        fi
+done
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.4.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.4.2.4.sh
new file mode 100644
index 0000000..aab585f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.4.2.4.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+root_password=$(getent shadow root | cut -d: -f2)
+
+if [[ "$root_password" == "*" || "$root_password" == "!" || -z "$root_password" ]]; then
+    exit 1
+fi
+
+exit 0
+
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.5.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.5.1.5.sh
new file mode 100644
index 0000000..45b638f
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/5.5.1.5.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+{
+    awk -F: '/^[^:]+:[^!*]/{print $1}' /etc/shadow | while read -r usr; do
+        change=$(date -d "$(chage --list $usr | grep '^Last password change' | cut -d: -f2 | grep -v 'never$')" +%s)
+        if [[ "$change" -gt "$(date +%s)" ]]; then
+            echo "User: \"$usr\" last password change was \"$(chage --list $usr | grep '^Last password change' | cut -d: -f2)\""
+        fi
+    done
+}
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.4.sh
new file mode 100644
index 0000000..375bb76
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.4.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+regex_pattern="^\s*ForwardToSyslog\s*=\s*no"
+config_files=("/etc/systemd/journald.conf" "/etc/systemd/journald.conf.d/*")
+
+for config_file in "${config_files[@]}"; do
+	for file in $config_file; do
+		if [[ -f "$file" ]]; then
+			if grep -qE "$regex_pattern" "$file"; then
+				exit 0
+			fi
+		fi
+	done
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.5.sh
new file mode 100644
index 0000000..d2f60bc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.5.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+regex_pattern="^\s*Storage\s*=\s*persistent"
+config_files=("/etc/systemd/journald.conf" "/etc/systemd/journald.conf.d/*")
+
+for config_file in "${config_files[@]}"; do
+	for file in $config_file; do
+		if [[ -f "$file" ]]; then
+			if grep -qE "$regex_pattern" "$file"; then
+				exit 0
+			fi
+		fi
+	done
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.6.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.6.sh
new file mode 100644
index 0000000..ac47dad
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.1.6.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+regex_pattern="^\s*Compress\s*=\s*yes"
+config_files=("/etc/systemd/journald.conf" "/etc/systemd/journald.conf.d/*")
+
+for config_file in "${config_files[@]}"; do
+	for file in $config_file; do
+		if [[ -f "$file" ]]; then
+			if grep -qE "$regex_pattern" "$file"; then
+				exit 0
+			fi
+		fi
+	done
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.2.4.sh
new file mode 100644
index 0000000..527ebb6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.1.2.4.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+socket_installed=$(systemctl list-unit-files | grep -q 'systemd-journal-remote.socket' && echo true || echo false)
+service_installed=$(systemctl list-unit-files | grep -q 'systemd-journal-remote.service' && echo true || echo false)
+
+if [[ "$socket_installed" == "false" && "$service_installed" == "false" ]]; then
+	exit 0 # True if neither is installed
+elif [[ "$socket_installed" == "true" && "$(systemctl is-active systemd-journal-remote.socket)" =~ ^(inactive|failed)$ ]] &&
+	[[ "$service_installed" == "true" && "$(systemctl is-active systemd-journal-remote.service)" =~ ^(inactive|failed)$ ]]; then
+	exit 0 # True if both are not active (including failed)
+else
+	exit 1 # False otherwise
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.3.sh
new file mode 100644
index 0000000..8478396
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.3.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+for i in $(cut -s -d: -f4 /etc/passwd | sort -u); do
+    grep -q -P "^.*?:[^:]*:$i:" /etc/group || exit 1
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.5.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.5.sh
new file mode 100644
index 0000000..7d12fdf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.5.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+cut -f3 -d":" /etc/passwd | sort -n | uniq -c | while read x; do
+    [ -z "$x" ] && break
+    set - $x
+    if [ $1 -gt 1 ]; then
+        users=$(awk -F: '($3 == n) { print $1 }' n=$2 /etc/passwd | xargs)
+        echo "Duplicate UID ($2): $users"
+    fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.6.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.6.sh
new file mode 100644
index 0000000..f7d6871
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.6.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+cut -d: -f3 /etc/group | sort | uniq -d | while read x; do
+    echo "Duplicate GID ($x) in /etc/group"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.7.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.7.sh
new file mode 100644
index 0000000..f36bb79
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.7.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+cut -d: -f1 /etc/passwd | sort | uniq -d | while read -r x; do
+    echo "Duplicate login name $x in /etc/passwd"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.8.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.8.sh
new file mode 100644
index 0000000..02ad855
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.8.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+cut -d: -f1 /etc/group | sort | uniq -d | while read -r x; do
+    echo "Duplicate group name $x in /etc/group"
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.9.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.9.sh
new file mode 100644
index 0000000..f5cc42e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.2.9.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+awk -F: '($1!~/(root|halt|sync|shutdown)/ && $7!~/^(\/usr)?\/sbin\/nologin(\/)?$/ && $7!~/(\/usr)?\/bin\/false(\/)?$/) { print $1 " " $6 }' /etc/passwd | while read -r user dir; do
+    if [ -d "$dir" ]; then
+        file="$dir/.forward"
+        if [ ! -h "$file" ] && [ -f "$file" ]; then
+            echo "User: \"$user\" file: \"$file\" exists"
+        fi
+    fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.3.sh
new file mode 100644
index 0000000..7b3479d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.3.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+GRUB_CFG="/etc/default/grub"
+
+if [[ ! -f "$GRUB_CFG" ]]; then
+	echo "Error: $GRUB_CFG does not exist."
+	exit 1
+fi
+if grep -q "audit=1" "$GRUB_CFG"; then
+	echo "Found 'audit=1' in $GRUB_CFG."
+	exit 0
+else
+	echo "'audit=1' not found in $GRUB_CFG."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.4.sh
new file mode 100644
index 0000000..158b8cc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.1.4.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+GRUB_CFG="/etc/default/grub"
+
+if [[ ! -f "$GRUB_CFG" ]]; then
+	echo "Error: $GRUB_CFG does not exist."
+	exit 1
+fi
+if grep -q "audit_backlog_limit" "$GRUB_CFG"; then
+	echo "Found 'audit_backlog_limit=1' in $GRUB_CFG."
+	exit 0
+else
+	echo "'audit_backlog_limit=1' not found in $GRUB_CFG."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.1.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.1.sh
new file mode 100644
index 0000000..a8027ab
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.1.sh
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+l_perm_mask="0137"
+if [ -e "/etc/audit/auditd.conf" ]; then
+	# Extract the log directory from the configuration file
+	l_audit_log_directory="$(dirname "$(awk -F= '/^\s*log_file\s*/{print $2}' /etc/audit/auditd.conf | xargs)")"
+
+	if [ -d "$l_audit_log_directory" ]; then
+		l_maxperm="$(printf '%o' $((0777 & ~$l_perm_mask)))"
+
+		# Find files matching the permission mask and process them line by line
+		while IFS= read -r l_file; do
+			# Ensure the file exists and get its mode
+			if [ -e "$l_file" ]; then
+				l_file_mode="$(stat -Lc '%#a' "$l_file")"
+				exit 1
+			fi
+		done < <(find "$l_audit_log_directory" -maxdepth 1 -type f -perm /"$l_perm_mask")
+
+		# Check if any files were processed
+		if [ $? -eq 0 ]; then
+			exit 0
+		fi
+	else
+		exit 0
+	fi
+else
+	exit 0
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.2.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.2.sh
new file mode 100644
index 0000000..9bf99dc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.2.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+l_output="" l_output2=""
+if [ -e "/etc/audit/auditd.conf" ]; then
+	l_audit_log_directory="$(dirname "$(awk -F= '/^\s*log_file\s*/{print $2}' /etc/audit/auditd.conf | xargs)")"
+	if [ -d "$l_audit_log_directory" ]; then
+		while IFS= read -r l_file; do
+			l_output2="$l_output2\n - File: \"$l_file\" is owned by user: \"$(stat -Lc '%U' "$l_file")\"\n (should be owned by user: \"root\")\n"
+		done < <(find "$l_audit_log_directory" -maxdepth 1 -type f ! -user root)
+	else
+		l_output2="$l_output2\n - Log file directory not set in \"/etc/audit/auditd.conf\" please set log file directory"
+	fi
+else
+	l_output2="$l_output2\n - File: \"/etc/audit/auditd.conf\" not found.\n - ** Verify auditd is installed **"
+fi
+if [ -z "$l_output2" ]; then
+	l_output="$l_output\n - All files in \"$l_audit_log_directory\" are owned by user: \"root\"\n"
+	echo -e "\n- Audit Result:\n ** PASS **\n - * Correctly configured * :$l_output"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - * Reasons for auditgfailure * :$l_output2\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.3.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.3.sh
new file mode 100644
index 0000000..b5e03bd
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.3.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+
+audit_conf="/etc/audit/auditd.conf"
+perm_mask="0177"
+if [ ! -f "$audit_conf" ]; then
+	exit 1
+fi
+audit_log_dir=$(grep -E '^\s*log_file\s*=' "$audit_conf" | cut -d= -f2 | xargs dirname 2>/dev/null)
+if [ -z "$audit_log_dir" ]; then
+	exit 1
+fi
+audit_log_group=$(grep -E '^\s*log_group\s*=' "$audit_conf" | cut -d= -f2 | xargs)
+if [ -z "$audit_log_group" ]; then
+	exit 1
+fi
+if [ ! -d "$audit_log_dir" ]; then
+	exit 1
+fi
+for file in "$audit_log_dir"/*; do
+	if [ -f "$file" ]; then
+		group=$(ls -l "$file" | awk '{print $4}')
+		if [[ "$group" != "root" && "$group" != "adm" ]]; then
+			exit 1
+		fi
+	fi
+done
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.4.sh b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.4.sh
new file mode 100644
index 0000000..dc826da
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/Ubuntu22.04_Debian12/6.3.4.4.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+perm_mask="0027"
+if [ -e "/etc/audit/auditd.conf" ]; then
+	log_dir="$(dirname "$(awk -F= '/^\s*log_file\s*/{print $2}' /etc/audit/auditd.conf | xargs)")"
+	if [ -d "$log_dir" ]; then
+		maxperm="$(printf '%o' $((0777 & ~$perm_mask)))"
+		log_dir_mode="$(stat -Lc '%#a' "$log_dir")"
+		if [ $(($log_dir_mode & $perm_mask)) -gt 0 ]; then
+			exit 1
+		fi
+	else
+		exit 1
+	fi
+else
+	exit 1
+fi
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.1.sh
new file mode 100644
index 0000000..efdde75
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.1.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="cramfs"                              # set module name
+l_mtype="fs"                                  # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+l_mpath="/lib/modules/**/kernel/$l_mtype"
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.2.sh
new file mode 100644
index 0000000..eb66ae8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.2.sh
@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="freevxfs"                            # set module name
+l_mtype="fs"                                  # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.3.sh
new file mode 100644
index 0000000..852aa83
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.3.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="hfs"                                 # set module name
+l_mtype="fs"                                  # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+l_mpath="/lib/modules/**/kernel/$l_mtype"
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.4.sh
new file mode 100644
index 0000000..1753ecf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.4.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="hfsplus"                             # set module name
+l_mtype="fs"                                  # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+l_mpath="/lib/modules/**/kernel/$l_mtype"
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.5.sh
new file mode 100644
index 0000000..1dca087
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.5.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="jffs2"                               # set module name
+l_mtype="fs"                                  # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+l_mpath="/lib/modules/**/kernel/$l_mtype"
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.6.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.6.sh
new file mode 100644
index 0000000..51bd145
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.6.sh
@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="squashfs"                            # set module name
+l_mtype="fs"                                  # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(
+		grep -P --
+		"(^\h*install|\b$l_mname)\b" <<<"$l_loadable"
+	)"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.7.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.7.sh
new file mode 100644
index 0000000..6bd152c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.7.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="udf"                                 # set module name
+l_mtype="fs"                                  # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.8.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.8.sh
new file mode 100644
index 0000000..bb1ec34
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.1.8.sh
@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="usb-storage"                         # set module name
+l_mtype="drivers"                             # set module type
+l_searchloc="/lib/modprobe.d/*.conf /usr/local/lib/modprobe.d/*.conf /run/modprobe.d/*.conf /etc/modprobe.d/*.conf"
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+	exit 0
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.2.sh
new file mode 100644
index 0000000..c087447
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.2.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+if grep -q -E '^[^#]*\s/tmp\s' /etc/fstab; then
+	if grep -E '^[^#]*\s/tmp\s' /etc/fstab | grep -vq 'nodev'; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.3.sh
new file mode 100644
index 0000000..c13380b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.1.3.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+if grep -q -E '^[^#]*\s/tmp\s' /etc/fstab; then
+	# If such a line exists, check if it contains the nosuid  flag
+	if grep -E '^[^#]*\s/tmp\s' /etc/fstab | grep -vq 'nosuid'; then
+		# If /var exists and does NOT contain nosuid, exit with 1 (error)
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.2.sh
new file mode 100644
index 0000000..08bf662
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.2.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/dev/shm"
+flag="nodev"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.3.sh
new file mode 100644
index 0000000..9febe98
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.3.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/dev/shm"
+flag="nosuid"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.4.sh
new file mode 100644
index 0000000..b6ca433
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.2.4.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/dev/shm"
+flag="noexec"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.2.sh
new file mode 100644
index 0000000..6b94c6e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.2.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/home"
+flag="nodev"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.3.sh
new file mode 100644
index 0000000..5c1a16b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.3.3.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+if grep -q -E '^[^#]*\s/home\s' /etc/fstab; then
+	if grep -E '^[^#]*\s/home\s' /etc/fstab | grep -vq 'nosuid'; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.2.sh
new file mode 100644
index 0000000..c385df1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.2.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+if grep -q -E '^[^#]*\s/var\s' /etc/fstab; then
+	# If such a line exists, check if it contains the nodev flag
+	if grep -E '^[^#]*\s/var\s' /etc/fstab | grep -vq 'nodev'; then
+		# If /var exists and does NOT contain nodev, exit with 1 (error)
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.3.sh
new file mode 100644
index 0000000..97dc6a0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.4.3.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+if grep -q -E '^[^#]*\s/var\s' /etc/fstab; then
+	# If such a line exists, check if it contains the nosuid  flag
+	if grep -E '^[^#]*\s/var\s' /etc/fstab | grep -vq 'nosuid'; then
+		# If /var exists and does NOT contain nosuid, exit with 1 (error)
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.2.sh
new file mode 100644
index 0000000..ae55f46
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.2.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/tmp"
+flag="nodev"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.3.sh
new file mode 100644
index 0000000..8ffc050
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.3.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/tmp"
+flag="nosuid"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.4.sh
new file mode 100644
index 0000000..c35e9eb
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.5.4.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/tmp"
+flag="noexec"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.2.sh
new file mode 100644
index 0000000..e341c1d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.2.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/log"
+flag="nodev"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.3.sh
new file mode 100644
index 0000000..3880665
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.3.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/log"
+flag="nosuid"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.4.sh
new file mode 100644
index 0000000..547b916
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.6.4.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/log"
+flag="noexec"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.2.sh
new file mode 100644
index 0000000..85b3d8b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.2.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/log/audit"
+flag="nodev"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.3.sh
new file mode 100644
index 0000000..2e33863
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.3.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/log/audit"
+flag="nosuid"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.4.sh
new file mode 100644
index 0000000..9d49387
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.1.2.7.4.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+directory="/var/log/audit"
+flag="noexec"
+FSTAB_FILE="/etc/fstab"
+
+if [[ ! -f "$FSTAB_FILE" ]]; then
+	echo "Error: $FSTAB_FILE does not exist."
+	exit 0
+fi
+
+if grep -q -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE"; then
+	if grep -E "^[^#]*[[:space:]]+$directory[[:space:]]+" "$FSTAB_FILE" | grep -vq "$flag"; then
+		exit 1
+	fi
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.4.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.4.2.sh
new file mode 100644
index 0000000..611a780
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.4.2.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+# Define the paths to check for grub.cfg
+UBUNTU_GRUB_PATH="/boot/grub/grub.cfg"
+REDHAT_GRUB_PATH="/boot/grub2/grub.cfg"
+
+# Function to check permissions
+check_permissions() {
+	local file_path="$1"
+	if [ -f "$file_path" ]; then
+		# Get the file's permissions in octal format
+		permissions=$(stat -c "%a" "$file_path")
+		if [ "$permissions" -eq 600 ]; then
+			echo "Permissions for $file_path are correct (600)."
+			exit 0
+		else
+			echo "Permissions for $file_path are incorrect ($permissions)."
+			exit 1
+		fi
+	fi
+}
+
+# Check for Ubuntu path
+check_permissions "$UBUNTU_GRUB_PATH"
+
+# Check for Red Hat path
+check_permissions "$REDHAT_GRUB_PATH"
+
+# If neither file is found, exit with an error
+echo "grub.cfg file not found in the expected locations."
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.5.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.5.1.sh
new file mode 100644
index 0000000..b4337a6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.5.1.sh
@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+kernel_parameter="kernel.randomize_va_space"
+kernel_value="2"
+
+current_value=$(sysctl -n "$kernel_parameter" 2>/dev/null)
+
+if [ $? -ne 0 ]; then
+	echo "Error: Kernel parameter $kernel_parameter does not exist or could not be retrieved."
+	exit 1
+fi
+
+if [ "$current_value" == "$kernel_value" ]; then
+	echo "Kernel parameter $kernel_parameter is set to $kernel_value"
+	exit 0
+else
+	echo "Kernel parameter $kernel_parameter is not set to $kernel_value (current value: $current_value)"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/1.5.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/1.5.2.sh
new file mode 100644
index 0000000..804715e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/1.5.2.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+kernel_parameter="kernel.yama.ptrace_scope"
+kernel_value="1"
+current_value=$(sysctl -n "$kernel_parameter" 2>/dev/null)
+
+if [ $? -ne 0 ]; then
+	echo "Error: Kernel parameter $kernel_parameter does not exist or could not be retrieved."
+	exit 1
+fi
+
+if [ "$current_value" == "$kernel_value" ]; then
+	echo "Kernel parameter $kernel_parameter is set to $kernel_value"
+	exit 0
+else
+	echo "Kernel parameter $kernel_parameter is not set to $kernel_value (current value: $current_value)"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/2.1.13.sh b/ATAPAuditor/Helpers/ShellScripts/common/2.1.13.sh
new file mode 100644
index 0000000..49e1858
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/2.1.13.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+PATTERN='rsyncd?\.service|rsyncd\.socket'
+
+# DebUntu rsync.service
+# rhel rsyncd.service und rsyncd.socket
+services=$(systemctl list-unit-files | grep -oE $PATTERN)
+for service in $services;
+do
+	if systemctl is-enabled $service 1>/dev/null 2>/dev/null; then
+		exit 1
+	fi
+done
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/2.4.1.8.sh b/ATAPAuditor/Helpers/ShellScripts/common/2.4.1.8.sh
new file mode 100644
index 0000000..4692a30
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/2.4.1.8.sh
@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+
+# Define the files to check
+FILES=("/etc/cron.allow" "/etc/cron.deny")
+
+# Function to check a file
+check_file() {
+	local file=$1
+
+	# Check if the file exists
+	if [ ! -e "$file" ]; then
+		echo "File $file does not exist. Ignoring."
+		return 0
+	fi
+
+	# Get the file permissions in numeric format
+	local permissions=$(stat -c "%a" "$file")
+	local owner=$(stat -c "%U" "$file")
+	local group=$(stat -c "%G" "$file")
+
+	# Check if the file permissions are 0640 or more restrictive
+	if [ "$permissions" -gt 640 ]; then
+		echo "File $file permissions are not 0640 or more restrictive."
+		return 1
+	fi
+
+	# Check if the owner is root and group is root
+	if [ "$owner" != "root" ] || [ "$group" != "root" ]; then
+		echo "File $file owner or group is not root."
+		return 1
+	fi
+
+	return 0
+}
+
+# Check each file
+for file in "${FILES[@]}"; do
+	if ! check_file "$file"; then
+		exit 1
+	fi
+done
+
+# If all checks pass, exit with status 0
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/2.4.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/2.4.2.1.sh
new file mode 100644
index 0000000..6fa5d37
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/2.4.2.1.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+# Define the files to check
+FILES=("/etc/at.allow" "/etc/at.deny")
+
+check_file() {
+	local file=$1
+
+	# Check if the file exists
+	if [ ! -e "$file" ]; then
+		echo "File $file does not exist. Ignoring."
+		return 0
+	fi
+
+	# Get the file permissions in numeric format
+	local permissions=$(stat -c "%a" "$file")
+	local owner=$(stat -c "%U" "$file")
+	local group=$(stat -c "%G" "$file")
+
+	# Check if the file permissions are 0640 or more restrictive
+	if [ "$permissions" -gt 640 ]; then
+		echo "File $file permissions are not 0640 or more restrictive."
+		return 1
+	fi
+
+	# Check if the owner is root and group is root
+	if [ "$owner" != "root" ] || [ "$group" != "root" ]; then
+		echo "File $file owner or group is not root."
+		return 1
+	fi
+
+	return 0
+}
+
+# Check each file
+for file in "${FILES[@]}"; do
+	if ! check_file "$file"; then
+		exit 1
+	fi
+done
+
+# If all checks pass, exit with status 0
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.1.2.sh
new file mode 100644
index 0000000..a508fc2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.1.2.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+l_output="" l_output2=""
+module_chk() {
+	# Check how module will be loaded
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+	# Check is the module currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+	# Check if the module is deny listed
+	if modprobe --showconfig | grep -Pq -- "^\h*blacklist\h+$l_mname\b"; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pl -- "^\h*blacklist\h+$l_mname\b" /etc/modprobe.d/*)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+if [ -n "$(find /sys/class/net/*/ -type d -name wireless)" ]; then
+	l_dname=$(for driverdir in $(find /sys/class/net/*/ -type d -name wireless | xargs -0 dirname); do basename "$(readlink -f "$driverdir"/device/driver/module)"; done | sort -u)
+	for l_mname in $l_dname; do
+		module_chk
+	done
+fi
+# Report results. If no failures output in l_output2, we pass
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **"
+	if [ -z "$l_output" ]; then
+		echo -e "\n - System has no wireless NICs installed"
+	else
+		echo -e "\n$l_output\n"
+	fi
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.2.1.sh
new file mode 100644
index 0000000..9d23af8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.2.1.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="dccp"                                # set module name
+l_mtype="net"                                 # set module type
+#replaced in original script to avoid wildcard
+l_searchloc=$(find $(for dir in /lib/modprobe.d /usr/local/lib/modprobe.d /run/modprobe.d /etc/modprobe.d; do [[ -d "$dir" ]] && echo "$dir"; done) -type f -name "*.conf" 2>/dev/null)
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.2.2.sh
new file mode 100644
index 0000000..de75e39
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.2.2.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="tipc"                                # set module name
+l_mtype="net"                                 # set module type
+#replaced in original script to avoid wildcard
+l_searchloc=$(find $(for dir in /lib/modprobe.d /usr/local/lib/modprobe.d /run/modprobe.d /etc/modprobe.d; do [[ -d "$dir" ]] && echo "$dir"; done) -type f -name "*.conf" 2>/dev/null)
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.2.3.sh
new file mode 100644
index 0000000..8542840
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.2.3.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="rds"                                 # set module name
+l_mtype="net"                                 # set module type
+#replaced in original script to avoid wildcard
+l_searchloc=$(find $(for dir in /lib/modprobe.d /usr/local/lib/modprobe.d /run/modprobe.d /etc/modprobe.d; do [[ -d "$dir" ]] && echo "$dir"; done) -type f -name "*.conf" 2>/dev/null)
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.2.4.sh
new file mode 100644
index 0000000..65814a1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.2.4.sh
@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+l_output="" l_output2="" l_output3="" l_dl="" # Unset output variables
+l_mname="sctp"                                # set module name
+l_mtype="net"                                 # set module type
+#replaced in original script to avoid wildcard
+l_searchloc=$(find $(for dir in /lib/modprobe.d /usr/local/lib/modprobe.d /run/modprobe.d /etc/modprobe.d; do [[ -d "$dir" ]] && echo "$dir"; done) -type f -name "*.conf" 2>/dev/null)
+#replaced in original script to avoid globstar operator
+l_mpath=$(find /lib/modules/ -type d -name $l_mtype)
+l_mpname="$(tr '-' '_' <<<"$l_mname")"
+l_mndir="$(tr '-' '/' <<<"$l_mname")"
+module_loadable_chk() {
+	# Check if the module is currently loadable
+	l_loadable="$(modprobe -n -v "$l_mname")"
+	[ "$(wc -l <<<"$l_loadable")" -gt "1" ] && l_loadable="$(grep -P -- "(^\h*install|\b$l_mname)\b" <<<"$l_loadable")"
+	if grep -Pq -- '^\h*install \/bin\/(true|false)' <<<"$l_loadable"; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loadable: \"$l_loadable\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loadable: \"$l_loadable\""
+	fi
+}
+module_loaded_chk() {
+	# Check if the module is currently loaded
+	if ! lsmod | grep "$l_mname" >/dev/null 2>&1; then
+		l_output="$l_output\n - module: \"$l_mname\" is not loaded"
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is loaded"
+	fi
+}
+module_deny_chk() {
+	# Check if the module is deny listed
+	l_dl="y"
+	if modprobe --showconfig | grep -Pq -- '^\h*blacklist\h+'"$l_mpname"'\b'; then
+		l_output="$l_output\n - module: \"$l_mname\" is deny listed in: \"$(grep -Pls -- "^\h*blacklist\h+$l_mname\b" $l_searchloc)\""
+	else
+		l_output2="$l_output2\n - module: \"$l_mname\" is not deny listed"
+	fi
+}
+# Check if the module exists on the system
+for l_mdir in $l_mpath; do
+	if [ -d "$l_mdir/$l_mndir" ] && [ -n "$(ls -A $l_mdir/$l_mndir)" ]; then
+		l_output3="$l_output3\n - \"$l_mdir\""
+		[ "$l_dl" != "y" ] && module_deny_chk
+		if [ "$l_mdir" = "/lib/modules/$(uname -r)/kernel/$l_mtype" ]; then
+			module_loadable_chk
+			module_loaded_chk
+		fi
+	else
+		l_output="$l_output\n - module: \"$l_mname\" doesn't exist in \"$l_mdir\""
+	fi
+done
+# Report results. If no failures output in l_output2, we pass
+[ -n "$l_output3" ] && echo -e "\n\n -- INFO --\n - module: \"$l_mname\" exists in:$l_output3"
+if [ -z "$l_output2" ]; then
+	echo -e "\n- Audit Result:\n ** PASS **\n$l_output\n"
+else
+	echo -e "\n- Audit Result:\n ** FAIL **\n - Reason(s) for audit failure:\n$l_output2\n"
+	[ -n "$l_output" ] && echo -e "\n- Correctly set:\n$l_output\n"
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.1.sh
new file mode 100644
index 0000000..166442a
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.1.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv4.ip_forward" "net.ipv6.conf.all.forwarding")
+kernel_values=("0" "0")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.10.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.10.sh
new file mode 100644
index 0000000..b0a3201
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.10.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+kernel_parameter="net.ipv4.tcp_syncookies"
+kernel_value="1"
+current_value=$(sysctl -n "$kernel_parameter" 2>/dev/null)
+
+if [ $? -ne 0 ]; then
+	echo "Error: Kernel parameter $kernel_parameter does not exist or could not be retrieved."
+	exit 1
+fi
+
+if [ "$current_value" == "$kernel_value" ]; then
+	echo "Kernel parameter $kernel_parameter is set to $kernel_value"
+	exit 0
+else
+	echo "Kernel parameter $kernel_parameter is not set to $kernel_value (current value: $current_value)"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.11.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.11.sh
new file mode 100644
index 0000000..c4bb189
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.11.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv6.conf.all.accept_ra" "net.ipv6.conf.default.accept_ra")
+kernel_values=("0" "0")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.2.sh
new file mode 100644
index 0000000..4a0b392
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.2.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv4.conf.all.send_redirects" "net.ipv4.conf.default.send_redirects")
+kernel_values=("0" "0")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.3.sh
new file mode 100644
index 0000000..1be5056
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.3.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+kernel_parameter="net.ipv4.icmp_ignore_bogus_error_responses"
+kernel_value="1"
+current_value=$(sysctl -n "$kernel_parameter" 2>/dev/null)
+
+if [ $? -ne 0 ]; then
+	echo "Error: Kernel parameter $kernel_parameter does not exist or could not be retrieved."
+	exit 1
+fi
+
+if [ "$current_value" == "$kernel_value" ]; then
+	echo "Kernel parameter $kernel_parameter is set to $kernel_value"
+	exit 0
+else
+	echo "Kernel parameter $kernel_parameter is not set to $kernel_value (current value: $current_value)"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.4.sh
new file mode 100644
index 0000000..fc0cdb4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.4.sh
@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+kernel_parameter="net.ipv4.icmp_echo_ignore_broadcasts"
+kernel_value="1"
+
+current_value=$(sysctl -n "$kernel_parameter" 2>/dev/null)
+
+if [ $? -ne 0 ]; then
+	echo "Error: Kernel parameter $kernel_parameter does not exist or could not be retrieved."
+	exit 1
+fi
+
+if [ "$current_value" == "$kernel_value" ]; then
+	echo "Kernel parameter $kernel_parameter is set to $kernel_value"
+	exit 0
+else
+	echo "Kernel parameter $kernel_parameter is not set to $kernel_value (current value: $current_value)"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.5.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.5.sh
new file mode 100644
index 0000000..f04bdbc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.5.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv4.conf.all.accept_redirects" "net.ipv4.conf.default.accept_redirects" "net.ipv6.conf.all.accept_redirects" "net.ipv6.conf.default.accept_redirects")
+kernel_values=("0" "0" "0" "0")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.6.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.6.sh
new file mode 100644
index 0000000..d9d1bec
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.6.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv4.conf.default.secure_redirects" "net.ipv4.conf.all.secure_redirects")
+kernel_values=("0" "0")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.7.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.7.sh
new file mode 100644
index 0000000..f7af3f9
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.7.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv4.conf.all.rp_filter" "net.ipv4.conf.default.rp_filter")
+kernel_values=("1" "1")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.8.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.8.sh
new file mode 100644
index 0000000..6850679
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.8.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv4.conf.all.accept_source_route" "net.ipv4.conf.default.accept_source_route" "net.ipv6.conf.all.accept_source_route" "net.ipv6.conf.default.accept_source_route")
+kernel_values=("0" "0" "0" "0")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/3.3.9.sh b/ATAPAuditor/Helpers/ShellScripts/common/3.3.9.sh
new file mode 100644
index 0000000..33c9968
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/3.3.9.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+kernel_parameters=("net.ipv4.conf.all.log_martians" "net.ipv4.conf.default.log_martians")
+kernel_values=("1" "1")
+len=${#kernel_parameters[@]}
+for ((i = 0; i < len; i++)); do
+	param=${kernel_parameters[$i]}
+	value=${kernel_values[$i]}
+	current_value=$(sysctl -n "$param" 2>/dev/null)
+
+	# Check if sysctl command was successful
+	if [ $? -ne 0 ]; then
+		echo "Error: Kernel parameter $param does not exist or could not be retrieved."
+		exit 1
+	fi
+
+	# Check if the current value matches the expected value
+	if [ "$current_value" == "$value" ]; then
+		echo "Kernel parameter $param is set correctly to $value."
+	else
+		echo "Kernel parameter $param is not set to $value (current value: $current_value)."
+		exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.1.16.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.1.16.sh
new file mode 100644
index 0000000..c745626
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.1.16.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=maxauthtries
+parameter_sshd_config=MaxAuthTries
+desired_value=4
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" -le "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.1.19.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.1.19.sh
new file mode 100644
index 0000000..164bac4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.1.19.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+parameter_sshd_t=permitemptypasswords
+parameter_sshd_config=PermitEmptyPasswords
+desired_value=no
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		echo "$parameter_sshd_config not set in sshd_config, using default"
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.1.20.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.1.20.sh
new file mode 100644
index 0000000..d525c6b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.1.20.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=permitrootlogin
+parameter_sshd_config=PermitRootLogin
+desired_value=no
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.1.21.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.1.21.sh
new file mode 100644
index 0000000..b8f5269
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.1.21.sh
@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+parameter_sshd_t=permituserenvironment
+parameter_sshd_config=PermitUserEnvironment
+desired_value=no
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq "^$parameter_sshd_config" /etc/ssh/sshd_config; then
+		actual_value=$(grep "^$parameter_sshd_config" /etc/ssh/sshd_config | awk '{print $2}')
+	else
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.1.22.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.1.22.sh
new file mode 100644
index 0000000..8c684c1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.1.22.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+parameter_sshd_t=usepam
+parameter_sshd_config=UsePAM
+desired_value=yes
+
+if ! command -v sshd &>/dev/null; then
+	echo "sshd command could not be found"
+	exit 0
+fi
+
+# Check using sshd -T output
+actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')
+
+if [ -z "$actual_value" ]; then
+	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
+		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
+	else
+
+		exit 1
+	fi
+fi
+
+if [ "$actual_value" = "$desired_value" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.1.3.sh
new file mode 100644
index 0000000..23be640
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.1.3.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+pmask="0133"
+maxperm="$(printf '%o' $((0777 & ~$pmask)))"
+
+find -L /etc/ssh -type f 2>/dev/null | while IFS= read -r file; do
+	if ssh-keygen -lf "$file" &>/dev/null && file "$file" | grep -qi 'OpenSSH.*public key'; then
+		read -r mode owner group < <(stat -Lc '%#a %U %G' "$file")
+		[ $((mode & pmask)) -gt 0 ] && exit 1
+		[ "$owner" != "root" ] && exit 1
+		[ "$group" != "root" ] && exit 1
+	fi
+done
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.2.2.sh
new file mode 100644
index 0000000..e41a341
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.2.2.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+# Simplified pattern
+pattern="Defaults use_pty"
+
+# Check if the pattern exists in /etc/sudoers
+if grep -E "^\s*Defaults\s+use_pty" /etc/sudoers >/dev/null; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.2.3.sh
new file mode 100644
index 0000000..9c958aa
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.2.3.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+PATTERN="^\h*Defaults\h+([^#]+,\h*)?logfile\h*=\h*(\"|\')?\H+(\"|\')?(,\h*\H+\h*)*\h*(#.*)?$"
+FILES='/etc/sudoers*'
+
+if grep -rPsi "$PATTERN" $FILES >/dev/null 2>&1; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.2.6.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.2.6.sh
new file mode 100644
index 0000000..510f285
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.2.6.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+timeout=$(grep -roP "timestamp_timeout=\K[0-9]*" /etc/sudoers* | grep -v "/etc/sudoers.bak")
+
+if [ -n "$timeout" ]; then
+	timeout=$(echo "$timeout" | grep -oP "[0-9]+$")
+fi
+
+if [ -z "$timeout" ]; then
+	timeout=$(sudo -V | grep -oP "(?<=Authentication timestamp timeout: )\d+")
+fi
+
+if [ -z "$timeout" ]; then
+	timeout=0
+fi
+
+timeout=${timeout:-0}
+
+if [ "$timeout" -le 15 ] && [ "$timeout" -gt 0 ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.1.sh
new file mode 100644
index 0000000..19eec99
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.1.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+faillock_conf="/etc/security/faillock.conf"
+expected_value=5
+if grep -Pq '^\s*#?\s*deny\s*=\s*([0-9]+)' "$faillock_conf"; then
+	current_value=$(grep -Eo '^\s*#?\s*deny\s*=\s*([0-9]+)' "$faillock_conf" | awk -F'=' '{print $2}' | tr -d ' ')
+else
+	echo "ERROR: deny is not set in $faillock_conf."
+	exit 1
+fi
+if ((current_value <= expected_value)); then
+	exit 0
+else
+	echo "ERROR: deny=$current_value is higher than $expected_value"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.2.sh
new file mode 100644
index 0000000..2c84f13
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.2.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+faillock_conf="/etc/security/faillock.conf"
+expected_value=900
+value="unlock_time"
+regex_pattern="^\s*#*\s*${value}\s*=\s*[0-9]+"
+
+if grep -Eq "$regex_pattern" "$faillock_conf"; then
+	current_value=$(grep -E "$regex_pattern" "$faillock_conf" | head -n 1 | sed -E "s/.*=\s*([0-9]+)/\1/" | tr -d ' ')
+	if [[ $current_value =~ ^# ]]; then
+		echo "ERROR: The line is commented out"
+		exit 1
+	fi
+	if ((current_value < expected_value)); then
+		echo "ERROR: unlock_time = $current_value < $expected_value"
+		exit 1
+	else
+		exit 0
+	fi
+else
+	echo "ERROR: No such line found for unlock_time in $faillock_conf"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.3.sh
new file mode 100644
index 0000000..0b03ba8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.1.3.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+faillock_conf="/etc/security/faillock.conf"
+limit_value=60
+
+if grep -Eq "^\s*even_deny_root\s*" "$faillock_conf"; then
+	echo "Test passed: even_deny_root is correctly enabled."
+else
+	echo "ERROR: even_deny_root is missing or commented out."
+	exit 1
+fi
+
+if grep -Eq "^\s*root_unlock_time\s*=\s*[0-9]+\s*" "$faillock_conf"; then
+	current_value=$(grep -Eo "^\s*root_unlock_time\s*=\s*[0-9]+" "$faillock_conf" | awk -F'=' '{print $2}' | tr -d ' ')
+	if ((current_value >= limit_value)); then
+		echo "Test passed: root_unlock_time=$current_value is correctly set."
+	else
+		echo "ERROR: root_unlock_time=$current_value is less than $limit_value."
+		exit 1
+	fi
+else
+	echo "ERROR: root_unlock_time is missing or commented out."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.1.sh
new file mode 100644
index 0000000..8596d69
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.1.sh
@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+
+# Configuration file to check
+FILE="/etc/security/pwquality.conf"
+# Pattern to search for
+PATTERN="difok"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^[[:space:]]*#?[[:space:]]*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^[[:space:]]*#[[:space:]]*$PATTERN\b" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of difok using grep and sed
+	VALUE=$(grep -E "^[[:space:]]*$PATTERN\s*=\s*[0-9]+" "$FILE" | sed -E 's/.*=\s*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 2
+		if [ "$VALUE" -lt 2 ]; then
+			echo "The value of $PATTERN ($VALUE) is less than 2."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (>= 2)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.2.sh
new file mode 100644
index 0000000..1c25ca4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.2.sh
@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+
+# Configuration file to check
+FILE="/etc/security/pwquality.conf"
+# Pattern to search for
+PATTERN="minlen"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^[[:space:]]*#?[[:space:]]*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^[[:space:]]*#[[:space:]]*$PATTERN\b" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of minlen using grep and sed
+	VALUE=$(grep -E "^[[:space:]]*$PATTERN\s*=\s*[0-9]+" "$FILE" | sed -E 's/.*=\s*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 14
+		if [ "$VALUE" -lt 14 ]; then
+			echo "The value of $PATTERN ($VALUE) is less than 14."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (>= 14)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.4.sh
new file mode 100644
index 0000000..e27b2ae
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.4.sh
@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# Configuration file to check
+FILE="/etc/security/pwquality.conf"
+# Pattern to search for
+PATTERN="maxrepeat"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^\s*#?\s*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^\s*#\s*$PATTERN\b" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of maxrepeat using grep and sed
+	VALUE=$(grep -E "^\s*$PATTERN\s*=\s*[0-9]+" "$FILE" | sed -E 's/.*=\s*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 3
+		if [ "$VALUE" -gt 3 ] || [ "$VALUE" -eq 0 ]; then
+			echo "The value of $PATTERN ($VALUE) is greather than 3 or equal to 0."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (<3 und >0)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.5.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.5.sh
new file mode 100644
index 0000000..f3f1dc8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.5.sh
@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+
+# Configuration file to check
+FILE="/etc/security/pwquality.conf"
+# Pattern to search for
+PATTERN="maxsequence"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^\s*#?\s*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^\s*#\s*$PATTERN\b" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of maxsequence using grep and sed
+	VALUE=$(grep -E "^\s*$PATTERN\s*=\s*[0-9]+" "$FILE" | sed -E 's/.*=\s*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 3
+		if [ "$VALUE" -gt 3 ] || [ "$VALUE" -eq 0 ]; then
+			echo "The value of $PATTERN ($VALUE) is greather than 3 or equal to 0."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (<3 und >0)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.6.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.6.sh
new file mode 100644
index 0000000..cae1141
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.2.6.sh
@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# Configuration file to check
+FILE="/etc/security/pwquality.conf"
+# Pattern to search for
+PATTERN="dictcheck"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^\s*#?\s*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^\s*#\s*$PATTERN\b" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of dictcheck using grep and sed
+	VALUE=$(grep -E "^\s*$PATTERN\s*=\s*[0-9]+" "$FILE" | sed -E 's/.*=\s*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 1
+		if [ "$VALUE" -ne 1 ] || [ "$VALUE" -eq 0 ]; then
+			echo "The value of $PATTERN ($VALUE) is not the best or egal to 0. Updating to $R_VALUE."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (dictcheck = 1)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.3.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.3.3.sh
new file mode 100644
index 0000000..5e0bb2c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.3.3.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+files_to_check=$(awk '/Password-Type:/{ f = 1;next } /-Type:/{ f = 0 } f {if (/pam_pwhistory\.so/) print FILENAME}' /usr/share/pam-configs/*)
+if [[ -z $files_to_check ]]; then
+	echo "file was not  found"
+else
+	for file in "$files_to_check"; do
+		if grep -Eq "pam_pwhistory\.so.*use_authtok" "$file"; then
+			exit 0
+		else
+			exit 1
+		fi
+	done
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.1.sh
new file mode 100644
index 0000000..b05ee3e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.1.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+files_to_check=$(grep -El 'pam_unix\.so\s+([^#\s]+\s+)?nullok\b' /usr/share/pam-configs/*)
+if [[ -z "$files_to_check" ]]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.4.sh
new file mode 100644
index 0000000..ba88210
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.3.3.4.4.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+files_to_check=$(grep -Elz "Password-Type:.*\n.*pam_unix\.so" /usr/share/pam-configs/*)
+if [ -z "$files_to_check" ]; then
+        echo "No relevant files found."
+        exit 0
+fi
+
+for file in $files_to_check; do
+        if ! grep -Eq "pam_unix\.so.*use_authtok" "$file"; then
+                exit 1
+        fi
+done
+exit 0
+
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.1.sh
new file mode 100644
index 0000000..e9d4f78
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.1.sh
@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+
+# Configuration file to check
+FILE="/etc/login.defs"
+# Pattern to search for
+PATTERN="PASS_MAX_DAYS"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^\s*#?\s*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^#\s*$PATTERN\s+[0-9]+" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of PASS_MAX_DAYS using grep and sed
+	VALUE=$(grep -E "^#?\s*$PATTERN\s+[0-9]+" "$FILE" | sed -E 's/[^0-9]*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 365
+		if [ "$VALUE" -gt 365 ] || [ "$VALUE" -eq 0 ]; then
+			echo "The value of $PATTERN ($VALUE) is greather than 365 or egal to 0."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (<=365)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.2.sh
new file mode 100644
index 0000000..1dfaa45
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.2.sh
@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# Configuration file to check
+FILE="/etc/login.defs"
+# Pattern to search for
+PATTERN="PASS_MIN_DAYS"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^\s*#?\s*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^#\s*$PATTERN\s+[0-9]+" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of PASS_MIN_DAYS using grep and sed
+	VALUE=$(grep -E "^[[:space:]]*$PATTERN\s*=?\s*[0-9]+" "$FILE" | sed -E 's/[^0-9]*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 0
+		if [ "$VALUE" -le 0 ]; then
+			echo "The value of $PATTERN ($VALUE) is less than 0 or egal to 0."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (>=0)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.3.sh
new file mode 100644
index 0000000..da7c69b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.3.sh
@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# Configuration file to check
+FILE="/etc/login.defs"
+# Pattern to search for
+PATTERN="PASS_WARN_AGE"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -E "^\s*#?\s*$PATTERN\b" "$FILE" >/dev/null
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+	grep -E "^#\s*$PATTERN\s+[0-9]+" "$FILE" >/dev/null
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	# Extract the value of PASS_WARN_AGE using grep and sed
+	VALUE=$(grep -E "^#?\s*$PATTERN\s+[0-9]+" "$FILE" | sed -E 's/[^0-9]*([0-9]+).*/\1/')
+
+	# If the value was found and it's a valid number
+	if [[ -n "$VALUE" ]]; then
+		# Compare the extracted value with 7
+		if [ "$VALUE" -lt 7 ]; then
+			echo "The value of $PATTERN ($VALUE) is less than 7 ."
+			exit 1
+		else
+			echo "The value of $PATTERN ($VALUE) is valid (>=7)."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+else
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.4.sh
new file mode 100644
index 0000000..448c3d7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.4.sh
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# Configuration file to check
+FILE="/etc/login.defs"
+# Pattern to search for
+PATTERN="ENCRYPT_METHOD"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+# Search for the pattern, whether it's commented or not
+grep -Eq "^#?\s*$PATTERN\s+\S+$" "$FILE"
+FOUND=$?
+
+# If the pattern is found
+if [ $FOUND -eq 0 ]; then
+	# Check if the pattern is commented
+
+	grep -Eq "^#\s*$PATTERN\s+\S+$" "$FILE"
+	COMMENTED=$?
+
+	if [ $COMMENTED -eq 0 ]; then
+		echo "Pattern $PATTERN is commented."
+		exit 1
+	fi
+
+	line=$(grep -E "^\s*$PATTERN\s+\S+$" "$FILE")
+	if [ -n "$line" ]; then
+		word=$(echo "$line" | awk '{print $2}')
+	fi
+
+	if [[ -n "$word" ]]; then
+		# Compare the extracted word with SHA512 UND YESCRYPT
+		VALUE1="SHA512"
+		VALUE2="YESCRYPT"
+
+		if [ "$word" != "$VALUE1" ] && [ "$word" != "$VALUE2" ]; then
+			echo "The value of $PATTERN ($word) is not good."
+			exit 1
+		else
+			echo "The value of $PATTERN ($word) is valid (equal to SHA512 or YESCRYPT). No changes needed."
+			exit 0
+		fi
+	else
+		echo "No valid value for $PATTERN found."
+		exit 1
+	fi
+
+else
+
+	echo "Pattern $PATTERN not found."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.5.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.5.sh
new file mode 100644
index 0000000..971500c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.1.5.sh
@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+expected_inactive_days=45
+
+if useradd -D | grep -Eq '^\s*INACTIVE\s*=\s*'$expected_inactive_days'\b'; then
+	echo "Default inactivity period is correct."
+else
+	echo "Default inactivity period is incorrect."
+	exit 1
+fi
+
+while IFS=: read -r username password lastchg min max warn inactive_days expire; do
+	if [[ -z "$inactive_days" || "$inactive_days" == " " ]]; then
+		continue
+	fi
+
+	if [[ "$inactive_days" -gt $expected_inactive_days ]]; then
+		echo "User $username exceeds policy."
+		exit 1
+	fi
+done </etc/shadow
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.3.sh
new file mode 100644
index 0000000..ecae66d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.3.sh
@@ -0,0 +1,17 @@
+#!/bin/bash
+
+root_gid=$(getent group root | cut -d: -f3)
+
+if [[ "$root_gid" != "0" ]]; then
+    echo "Error: The root group does not have GID 0."
+    exit 1
+fi
+
+other_groups=$(getent group | awk -F: '$3 == 0 && $1 != "root" {print $1}')
+
+if [[ -n "$other_groups" ]]; then
+    echo "Error: The following groups also have GID 0: $other_groups"
+    exit 1
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.6.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.6.sh
new file mode 100644
index 0000000..8d161cf
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.6.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+source /root/.bashrc
+current_umask=$(umask)
+
+if [[ "$current_umask" == "0027" ]]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.7.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.7.sh
new file mode 100644
index 0000000..99db3a1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.7.sh
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+l_valid_shells=$(grep -v "nologin" /etc/shells | sed -r '/^\//{s,/,\\\\/,g;p}' | paste -s -d '|')
+
+if grep -qE '^\s*UID_MIN\s+([0-9]+)' /etc/login.defs; then
+	uid_min=$(grep -oP '^\s*UID_MIN\s+\K[0-9]+' /etc/login.defs)
+else
+	printf "ERROR: UID_MIN not found in /etc/login.defs.\n"
+	exit 1
+fi
+while IFS=: read -r username _ uid _ _ _ shell; do
+	if [[ -n "$uid" && "$uid" =~ ^[0-9]+$ ]]; then
+		if echo "$username" | grep -qE "^(root|halt|sync|shutdown|nfsnobody)$" &&
+			{ [ "$uid" -lt "$uid_min" ] || [ "$uid" -eq 65534 ]; } &&
+			echo "$shell" | grep -qE "^($l_valid_shells)$"; then
+			exit 1
+		fi
+	fi
+done </etc/passwd
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.8.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.8.sh
new file mode 100644
index 0000000..752cdc7
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.2.8.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+valid_shells="^($(awk -F\/ '$NF != "nologin" {print}' /etc/shells | sed -rn '/^\//p' | paste -s -d '|' - ))$"
+while IFS= read -r user; do
+    passwd -S "$user" | awk '$2 !~ /^L/ {print "Account: \"" $1 "\" does not have a valid login shell and is not locked"}'
+done < <(awk -v pat="$valid_shells" -F: '($1 != "root" && $(NF) !~ pat) {print $1}' /etc/passwd)
+
+exit 0
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.1.sh
new file mode 100644
index 0000000..3a65d95
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.1.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# Define the word to search for
+PATTERN="nologin"
+FILE="/etc/shells"
+
+# Check if the configuration file exists
+if [ ! -f "$FILE" ]; then
+	echo "File $FILE not found."
+	exit 1
+fi
+
+grep -q -E "$PATTERN" "$FILE" >/dev/null
+FOUND=$?
+
+if [ $FOUND -eq 0 ]; then
+
+	echo "The line containing '$PATTERN' is in the File $FILE."
+	exit 1
+else
+	echo "$PATTERN is not in the File or not Found"
+	exit 0
+
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.2.sh
new file mode 100644
index 0000000..66f3e7c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.2.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+tmout=$(grep 'typeset -xr TMOUT=900' -- /etc/bashrc /etc/profile /etc/profile.d/*.sh 2>/dev/null)
+if [[ -n "$tmout" ]]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.3.sh
new file mode 100644
index 0000000..762b687
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/5.4.3.3.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+for file in /etc/profile.d/*.sh; do
+	if grep -P '^\s*umask\s+0027' "$file" &>/dev/null; then
+		exit 0
+	fi
+done
+
+exit 1
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.1.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.1.3.sh
new file mode 100644
index 0000000..ff0893c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.1.3.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+config_file="/etc/aide/aide.conf"
+pattern=("/sbin/auditctl" "/sbin/auditd" "/sbin/ausearch" "/sbin/aureport" "/sbin/autrace" "/sbin/augenrules")
+if [ ! -f "$config_file" ]; then
+	exit 0
+fi
+
+for line in "${pattern[@]}"; do
+	regex_pattern="^\s*#*\s*${line}\b"
+	if ! grep -Eq "$regex_pattern" "$config_file"; then
+		exit 1
+	fi
+done
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.2.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.2.1.sh
new file mode 100644
index 0000000..738e15e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.2.1.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+# Path to the auditd configuration file
+AUDITD_CONF="/etc/audit/auditd.conf"
+
+# Check if the file exists
+if [[ -f "$AUDITD_CONF" ]]; then
+	# Use grep to search for the pattern
+	if grep -qE "^max_log_file[[:space:]]*=[[:space:]]*[0-9]+" "$AUDITD_CONF"; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "File $AUDITD_CONF does not exist."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.2.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.2.2.sh
new file mode 100644
index 0000000..59310ea
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.2.2.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+# Path to the auditd configuration file
+AUDITD_CONF="/etc/audit/auditd.conf"
+
+# Check if the file exists
+if [[ -f "$AUDITD_CONF" ]]; then
+	# Use grep to search for the exact line
+	if grep -q "^max_log_file_action[[:space:]]*=[[:space:]]*keep_logs" "$AUDITD_CONF"; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "File $AUDITD_CONF does not exist."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.1.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.1.sh
new file mode 100644
index 0000000..82d7efc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.1.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+on_disk=$(awk '/^ *-w/ &&/\/etc\/sudoers/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+if [[ -n "$on_disk" ]]; then
+	exit 0
+else
+	echo "ERROR: Audit rules are NOT correctly set."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.10.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.10.sh
new file mode 100644
index 0000000..68d108c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.10.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -S/ &&/mount/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.12.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.12.sh
new file mode 100644
index 0000000..52f851b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.12.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+on_disk=$(awk '/^ *-w/ &&(/\/var\/log\/lastlog/  ||/\/var\/run\/faillock/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+if [[ -n "$on_disk" ]]; then
+	exit 0
+else
+	echo "ERROR: Audit rules are NOT correctly set."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.13.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.13.sh
new file mode 100644
index 0000000..546a654
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.13.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -S/ &&(/unlink/||/rename/||/unlinkat/||/renameat/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.14.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.14.sh
new file mode 100644
index 0000000..4b7b281
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.14.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+on_disk=$(awk '/^ *-w/ &&(/\/etc\/selinux/  ||/\/usr\/share\/selinux/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+if [[ -n "$on_disk" ]]; then
+	exit 0
+else
+	echo "ERROR: Audit rules are NOT correctly set."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.15.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.15.sh
new file mode 100644
index 0000000..1a955df
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.15.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/chcon/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.16.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.16.sh
new file mode 100644
index 0000000..7fc8af4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.16.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/setfacl/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.17.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.17.sh
new file mode 100644
index 0000000..60136b8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.17.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/bin\/chacl/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.18.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.18.sh
new file mode 100644
index 0000000..802d3e6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.18.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&/ -F *perm=x/ &&/ -F *path=\/usr\/sbin\/usermod/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.19.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.19.sh
new file mode 100644
index 0000000..444494e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.19.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk '/^ *-a *always,exit/  &&/ -F *arch=b(32|64)/  &&(/ -F auid!=unset/||/ -F auid!=-1/||/ -F auid!=4294967295/)  &&/ -S/  &&(/init_module/  ||/finit_module/  ||/delete_module/  ||/create_module/  ||/query_module/)  &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		echo "ERROR: on_disk != loaded"
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.2.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.2.sh
new file mode 100644
index 0000000..191d9bc
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.2.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+on_disk=$(awk '/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&(/ -C *euid!=uid/||/ -C *uid!=euid/) &&/ -S *execve/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+if [[ -n "$on_disk" ]]; then
+	exit 0
+else
+	echo "ERROR: Audit rules are NOT correctly set."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.3.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.3.sh
new file mode 100644
index 0000000..a949cf6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.3.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+SUDO_LOG_FILE=$(grep -r logfile /etc/sudoers* | grep -v "/etc/sudoers.bak" | sed -e 's/.*logfile=//;s/,? .*//' -e 's/"//g')
+
+if [ -n "$SUDO_LOG_FILE" ]; then
+	on_disk=$(grep -E "^\s*-w\s+$SUDO_LOG_FILE\s+-p\s+wa" /etc/audit/rules.d/*.rules)
+	loaded=$(auditctl -l | grep -E "^\s*-w\s+$SUDO_LOG_FILE\s+-p\s+wa")
+	if [[ -n "$on_disk" && -n "$loaded" ]]; then
+		echo "Audit rules are correctly set."
+		exit 0
+	else
+		echo "ERROR: Audit rules are NOT correctly set or loaded."
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'SUDO_LOG_FILE' is unset or empty."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.4.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.4.sh
new file mode 100644
index 0000000..008e93d
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.4.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+on_disk1=$(awk '/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&/ -S/ &&(/adjtimex/ ||/settimeofday/ ||/clock_settime/ ) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+on_disk2=$(awk '/^ *-w/ &&/\/etc\/localtime/ &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+if [[ -n "$on_disk1" && -n "$on_disk2" ]]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.5.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.5.sh
new file mode 100644
index 0000000..49fedb4
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.5.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+on_disk1=$(awk '/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&/ -S/ &&(/sethostname/ ||/setdomainname/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+on_disk2=$(awk '/^ *-w/ &&(/\/etc\/issue/ ||/\/etc\/issue.net/ ||/\/etc\/hosts/ ||/\/etc\/network/ ||/\/etc\/netplan/) &&/ +-p *wa/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)' /etc/audit/rules.d/*.rules)
+
+if [[ -n "$on_disk1" && -n "$on_disk2" ]]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.6.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.6.sh
new file mode 100644
index 0000000..7e721aa
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.6.sh
@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+
+test_failed=0
+for PARTITION in $(findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,) | grep -Pv "noexec|nosuid" | awk '{print $1}'); do
+	for PRIVILEGED in $(find "${PARTITION}" -xdev -perm /6000 -type f); do
+		if grep -qr "${PRIVILEGED}" /etc/audit/rules.d; then
+			printf "OK: '${PRIVILEGED}' found in on-disk configuration.\n"
+		else
+			printf "ERROR: '${PRIVILEGED}' not found in on-disk configuration.\n"
+			test_failed=1
+		fi
+	done
+done
+
+RUNNING=$(auditctl -l)
+if [ -n "${RUNNING}" ]; then
+	for PARTITION in $(findmnt -n -l -k -it $(awk '/nodev/ { print $2 }' /proc/filesystems | paste -sd,) | grep -Pv "noexec|nosuid" | awk '{print $1}'); do
+		for PRIVILEGED in $(find "${PARTITION}" -xdev -perm /6000 -type f); do
+			if printf -- "${RUNNING}" | grep -q "${PRIVILEGED}"; then
+				printf "OK: '${PRIVILEGED}' found in running configuration.\n"
+			else
+				printf "ERROR: '${PRIVILEGED}' not found in running configuration.\n"
+				test_failed=1
+			fi
+		done
+	done
+else
+	printf "ERROR: No rules found in running configuration.\n"
+	test_failed=1
+fi
+
+# Setze den Exit-Code basierend auf dem Test-Status
+if [ "$test_failed" -eq 0 ]; then
+	exit 0
+else
+	echo "Some checks failed."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.7.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.7.sh
new file mode 100644
index 0000000..930e44e
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.7.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "${UID_MIN}" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -F *auid>=${UID_MIN}/ &&(/ -F *exit=-EACCES/||/ -F *exit=-EPERM/) &&/ -S/ &&/creat/ &&/open/ &&/truncate/ &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.8.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.8.sh
new file mode 100644
index 0000000..e15858c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.8.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+rules_file="/etc/audit/rules.d/50-fbPro-hardening.rules"
+
+if grep -qE -- '^\s*-w\s+(\/etc\/group|\/etc\/passwd|\/etc\/gshadow|\/etc\/shadow|\/etc\/security\/opasswd|\/etc\/nsswitch\.conf|\/etc\/pam\.conf|\/etc\/pam\.d)' $rules_file &&
+	grep -qE -- '-p\s+wa' $rules_file &&
+	grep -qE -- '(\s*key=\s*[!-~]*\s*|-\s*k\s*[!-~]*\s*)' $rules_file; then
+	exit 0
+else
+	echo "ERROR: Audit rules are NOT correctly set."
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.9.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.9.sh
new file mode 100644
index 0000000..85f5de5
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.3.9.sh
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+UID_MIN=$(awk '/^\s*UID_MIN/{print $2}' /etc/login.defs)
+
+if [ -n "$UID_MIN" ]; then
+	on_disk=$(awk "/^ *-a *always,exit/ &&/ -F *arch=b(32|64)/ &&(/ -F *auid!=unset/||/ -F *auid!=-1/||/ -F *auid!=4294967295/) &&/ -S/ &&/ -F *auid>=${UID_MIN}/ &&(/chmod/||/fchmod/||/fchmodat/  ||/chown/||/fchown/||/fchownat/||/lchown/  ||/setxattr/||/lsetxattr/||/fsetxattr/  ||/removexattr/||/lremovexattr/||/fremovexattr/) &&(/ key= *[!-~]* *$/||/ -k *[!-~]* *$/)" /etc/audit/rules.d/*.rules)
+
+	if [[ -n "$on_disk" ]]; then
+		exit 0
+	else
+		exit 1
+	fi
+else
+	echo "ERROR: Variable 'UID_MIN' is unset.\n"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.5.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.5.sh
new file mode 100644
index 0000000..2ce94b1
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.5.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+l_output="" l_output2="" l_perm_mask="0137"
+l_maxperm="$(printf '%o' $((0777 & ~$l_perm_mask)))"
+
+# Capture the output of find into a variable
+l_files=$(find /etc/audit/ -type f \( -name "*.conf" -o -name '*.rules' \))
+
+# Loop through each file in the list
+while IFS= read -r l_fname; do
+	# Skip empty lines (in case of any)
+	[ -z "$l_fname" ] && continue
+
+	# Get the file mode
+	l_mode=$(stat -Lc '%#a' "$l_fname")
+
+	# Check if the file mode matches the permission mask
+	if [ $((l_mode & l_perm_mask)) -gt 0 ]; then
+		l_output2="$l_output2\n - file: \"$l_fname\" is mode: \"$l_mode\" (should be mode: \"$l_maxperm\" or more restrictive)"
+	fi
+done <<<"$l_files"
+
+# Output the results
+if [ -z "$l_output2" ]; then
+	exit 0
+else
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.6.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.6.sh
new file mode 100644
index 0000000..2c8adb8
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.6.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+result=$(find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) ! -user root)
+if [ -z "$result" ]; then
+	exit 0
+else
+	echo "Files found that do not belong to the root user:"
+	echo "$result"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.7.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.7.sh
new file mode 100644
index 0000000..1605d11
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.7.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+result=$(find /etc/audit/ -type f \( -name '*.conf' -o -name '*.rules' \) ! -group root)
+
+if [ -z "$result" ]; then
+	exit 0
+else
+	echo "Files found that do not belong to the root group:"
+	echo "$result"
+	exit 1
+fi
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.8.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.8.sh
new file mode 100644
index 0000000..b172fc0
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.8.sh
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+perm_mask="0022"
+maxperm="$(printf '%o' $((0777 & ~$perm_mask)))"
+audit_tools=("/sbin/auditctl" "/sbin/aureport" "/sbin/ausearch" "/sbin/autrace" "/sbin/auditd" "/sbin/augenrules")
+
+for a_tool in "${audit_tools[@]}"; do
+	if [ -e "$a_tool" ]; then
+		mode="$(stat -c '%#a' "$a_tool")"
+		if ((mode & perm_mask)); then
+			echo "Error: $a_tool has permissions that are too permissive."
+			exit 1
+		fi
+	else
+		echo "Warning: $a_tool does not exist."
+	fi
+done
+
+unset audit_tools
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.9.sh b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.9.sh
new file mode 100644
index 0000000..38475c6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/6.3.4.9.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# List of files to check
+files=(/sbin/auditctl /sbin/aureport /sbin/ausearch /sbin/autrace /sbin/auditd /sbin/augenrules)
+
+# Go through each file in the list and check if it exists,if a file does not exist print error
+for file in "${files[@]}"; do
+	if [ ! -e "$file" ]; then
+		echo "Error: at least one file does not exist  "
+		exit 1
+	fi
+done
+
+# Loop to check the owner of each file
+for file in "${files[@]}"; do
+	# Check if the file is owned by root
+	owner=$(stat -c "%U" "$file")
+	if [ "$owner" != "root" ]; then
+		echo "Error : $file not owned by root (current owner : $owner)"
+		exit 1
+	fi
+done
+
+echo "All files are owned by root."
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/7.1.10.sh b/ATAPAuditor/Helpers/ShellScripts/common/7.1.10.sh
new file mode 100644
index 0000000..8a895d6
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/7.1.10.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+pathOpass='/etc/security/opasswd'
+pathOpassOld='/etc/security/opasswd.old'
+
+for p in "$pathOpass" "$pathOpassOld"; do
+    if [[ -e $p ]]; then
+        read a u g < <(stat -c '%#a %u %g' $p)
+        [[ $((a & 0177)) -gt 0 || $u -ne 0 || $g -ne 0 ]] && exit 1
+    fi
+done
+
+exit 0
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/7.1.11.sh b/ATAPAuditor/Helpers/ShellScripts/common/7.1.11.sh
new file mode 100644
index 0000000..f583a1c
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/7.1.11.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+#####  NOT TESTED PROPERLY, THIS SCRIPT COULD BE CHANGED IN THE FUTURE #####
+smask="01000"
+
+ignored_paths=(
+	"/run/user/*"
+	"/proc/*"
+	"*/containerd/*"
+	"*/kubelet/pods/*"
+	"/sys/*"
+	"/snap/*"
+)
+
+while read -r path; do
+	ignored_paths+=("$path/*")
+done < <(findmnt -Dkerno fstype,target | awk '$1 ~ /^(nfs|proc|smb|vfat)$/ {print $2}')
+
+world_writable_files=$(find / \( ! -path "${ignored_paths[0]}" $(printf " -a ! -path %s" "${ignored_paths[@]:1}") \) \
+	-type f -perm -0002 2>/dev/null)
+
+world_writable_dirs=$(find / -type d -perm -0002 ! -perm -$smask $(printf " -a ! -path '%s' " "${ignored_paths[@]}") 2>/dev/null)
+
+if [ -n "$world_writable_files" ]; then
+	exit 1
+fi
+
+if [ -n "$world_writable_dirs" ]; then
+	exit 1
+fi
+
+exit 0
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/7.1.12.sh b/ATAPAuditor/Helpers/ShellScripts/common/7.1.12.sh
new file mode 100644
index 0000000..9a5b8f2
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/7.1.12.sh
@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+#####  NOT TESTED PROPERLY, THIS SCRIPT COULD BE CHANGED IN THE FUTURE #####
+
+ignored_paths=(
+	"/run/user/*"
+	"/proc/*"
+	"*/containerd/*"
+	"*/kubelet/pods/*"
+	"/sys/*"
+	"/snap/*"
+)
+
+while read -r path; do
+	ignored_paths+=("$path/*")
+done < <(findmnt -Dkerno fstype,target | awk '$1 ~ /^(nfs|proc|smb|vfat)$/ {print $2}')
+
+unowned=$(find / -xdev \( ! -path "${ignored_paths[@]}" \) -type f,d \( -nouser -o -nogroup \) 2>/dev/null)
+
+[[ -n $unowned ]] && exit 1
+
+exit 0
\ No newline at end of file
diff --git a/ATAPAuditor/Helpers/ShellScripts/common/7.1.9.sh b/ATAPAuditor/Helpers/ShellScripts/common/7.1.9.sh
new file mode 100644
index 0000000..ceb547b
--- /dev/null
+++ b/ATAPAuditor/Helpers/ShellScripts/common/7.1.9.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+file="/etc/shells"
+
+if [[ ! -e "$file" ]]; then
+    exit 0
+fi
+
+mode=$(stat -c "%a" "$file")
+uid=$(stat -c "%u" "$file")
+gid=$(stat -c "%g" "$file")
+
+if [[ "$mode" -le 644 && "$uid" -eq 0 && "$gid" -eq 0 ]]; then
+    exit 0
+else
+    exit 1
+fi
+
diff --git a/ATAPAuditor/Reports/Debian 10.ps1 b/ATAPAuditor/Reports/Debian 10.ps1
new file mode 100644
index 0000000..cf7539e
--- /dev/null
+++ b/ATAPAuditor/Reports/Debian 10.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "Debian 10 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"Security baseline for Debian"	
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "General Benchmarks"
+			Description = "This section contains the general benchmark results"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Security Base Data'
+					AuditInfos = Test-AuditGroup "SBD - Linux Base Security"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Debian 11.ps1 b/ATAPAuditor/Reports/Debian 11.ps1
new file mode 100644
index 0000000..621a891
--- /dev/null
+++ b/ATAPAuditor/Reports/Debian 11.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "Debian 11 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Debian 11, Version: 1.0.0, Date: 2022-09-22"
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains all benchmarks from CIS"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'CIS Recommendations'
+					AuditInfos = Test-AuditGroup "Debian Linux 11-CIS-1.0.0"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Debian 12.ps1 b/ATAPAuditor/Reports/Debian 12.ps1
new file mode 100644
index 0000000..056fc79
--- /dev/null
+++ b/ATAPAuditor/Reports/Debian 12.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "Debian 12 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Debian 12, Version: 1.0.1, Date: 2024-04-15"
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains the general benchmark results"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'CIS Recommendations'
+					AuditInfos = Test-AuditGroup "Debian Linux 12-CIS-1.0.1"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Fedora 35.ps1 b/ATAPAuditor/Reports/Fedora 35.ps1
new file mode 100644
index 0000000..4b868e7
--- /dev/null
+++ b/ATAPAuditor/Reports/Fedora 35.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "Fedora 35 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"Security baseline for Fedora"	
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "General Benchmarks"
+			Description = "This section contains the general benchmark results"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Security Base Data'
+					AuditInfos = Test-AuditGroup "SBD - Linux Base Security"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Google Chrome.ps1 b/ATAPAuditor/Reports/Google Chrome.ps1
new file mode 100644
index 0000000..dd2d506
--- /dev/null
+++ b/ATAPAuditor/Reports/Google Chrome.ps1	
@@ -0,0 +1,30 @@
+[Report] @{
+	Title = 'Google Chrome Audit Report'
+	ModuleName = 'ATAPAuditor'
+	BasedOn = @(
+		"CIS Google Chrome Benchmark, Version: 2.0.0, Date: 2019-05-17"
+		"DISA Google Chrome Security Technical Implementation Guide, Version: V1R15, Date: 2019-01-28"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Recommendations"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Google Chrome-CIS-2.0.0#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "DISA Recommendations"
+			Description = "This section contains all DISA recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Google Chrome-DISA-V1R15#RegistrySettings"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Edge.ps1 b/ATAPAuditor/Reports/Microsoft Edge.ps1
new file mode 100644
index 0000000..941775c
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Edge.ps1	
@@ -0,0 +1,30 @@
+[Report] @{
+	Title = 'Microsoft Edge Report'
+	ModuleName = 'ATAPAuditor'
+	BasedOn = @(
+		"CIS Microsoft Edge Benchmark, Version: 2.0.0, Date: 2023-09-21"
+		"Microsoft Edge v117 Security Baseline FINAL, Version: 117, Date: 2024-04-12"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = 'CIS Benchmarks'
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Edge-CIS-2.0.0#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "MS Baseline"
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Edge-Microsoft-117#RegistrySettings"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft IIS10.ps1 b/ATAPAuditor/Reports/Microsoft IIS10.ps1
new file mode 100644
index 0000000..b9ac0e1
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft IIS10.ps1	
@@ -0,0 +1,2915 @@
+using namespace Microsoft.Web.Administration
+using namespace Microsoft.Windows.ServerManager.Commands
+Import-Module IISAdministration -Force
+
+$RootPath = Split-Path $MyInvocation.MyCommand.Path -Parent
+$RootPath = Split-Path $RootPath -Parent
+. "$RootPath\Helpers\AuditGroupFunctions.ps1"
+$listOfWeakCipherSuites = getListOfWeakCipherSuites
+$listOfInsecureCipherSuites = getListOfInsecureCipherSuites
+#region Helper Functions
+$MESSAGE_ALLGOOD = "All Good"
+
+function Get-IISSiteVirtualPaths {
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site,
+
+		[switch] $AllVirtualDirectories
+	)
+
+	process {
+		foreach ($App in $Site.Applications) {
+			Write-Output ($App.Path)
+
+			if ($AllVirtualDirectories) {
+				foreach ($VirtualDirectory in $App.VirtualDirectories) {
+					if ($VirtualDirectory.Path -ne "/") {
+						$AppPath = if ($App.Path -ne "/") {
+							$App.Path
+						}
+						else {
+							""
+						}
+						Write-Output ($AppPath + $VirtualDirectory.Path)
+					}
+				}
+			}
+		}
+	}
+}
+
+function Get-IISModules {
+	(Get-IISConfigSection -SectionPath "system.webServer/modules").GetCollection() `
+		| Get-IISConfigAttributeValue -AttributeName "Name"
+}
+#endregion
+
+#region 1 Basic Configuration
+#
+# This section contains basic Web server-level recommendations
+
+# 1.1
+function Test-IISVirtualDirPartition {
+	<#
+	.Synopsis
+		Ensure web content is on non-system partition
+	.Description
+		Web resources published through IIS are mapped, via Virtual Directories, to physical locations on disk. It is recommended to map all Virtual Directories to a non-system disk volume.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		$SystemDrive = [system.environment]::getenvironmentvariable("SystemDrive")
+		$Path = $Site.Applications["/"].VirtualDirectories["/"].PhysicalPath
+
+		if ($Path.StartsWith("%SystemDrive%") -or $Path.StartsWith($SystemDrive)) {
+			$message = "Web content is on system partition"
+			$audit = "False"
+		}
+
+		@{
+			Id      = "1.1"
+			Task    = "Ensure web content is on non-system partition"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 1.2
+function Test-IISHostHeaders {
+	<#
+	.Synopsis
+		Ensure 'host headers' are on all sites
+	.DESCRIPTION
+ 		Host headers provide the ability to host multiple websites on the same IP address and port. It is recommended that host headers be configured for all sites. Wildcard host headers are now supported.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		[array]$Bindings = $Site.Bindings | Where-Object { [string]::IsNullOrEmpty($_.Host) }
+
+		if ($Bindings.Count -gt 0) {
+			$message = "The following bindings do no specify a host: " + ($Bindings.bindingInformation -join ", ")
+			$audit = "False"
+		}
+
+		@{
+			Id      = "1.2"
+			Task    = "Ensure 'host headers' is set"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 1.3
+function Test-IISDirectoryBrowsing {
+	<#
+	.Synopsis
+		Ensure 'directory browsing' is set to disabled
+	.Description
+		Directory browsing allows the contents of a directory to be displayed upon request from a web client. If directory browsing is enabled for a directory in Internet Information Services, users receive a page that lists the contents of the directory when the following two conditions are met:
+
+			1. No specific file is requested in the URL
+			2. The Default Documents feature is disabled in IIS, or if it is enabled, IIS is unable to locate a file in the directory that matches a name specified in the IIS default document list
+
+		It is recommended that directory browsing be disabled.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup){
+		# Ensure directory browsing is installed
+			if ((Get-WindowsFeature Web-Dir-Browsing).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/directoryBrowse"
+				$section = $Configuration.GetSection($path)
+
+				$Enabled = $section | Get-IISConfigAttributeValue -AttributeName "enabled"
+
+				if ($Enabled -eq $true) {
+					$message = "Directory Browsing is enabled"
+					$audit = "False"
+				}
+				elseif ($null -eq $Enabled) {
+					$message = "Directory Browsing not explicit set to false"
+					$audit = "Warning"
+				}
+			}
+		}
+		else{
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+		@{
+			Id      = "1.3"
+			Task    = "Ensure 'directory browsing' is set to disabled"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 1.4
+function Test-IISAppPoolIdentity {
+	<#
+	.Synopsis
+		Ensure 'application pool identity' is configured for all application pools
+	.Description
+		Application Pool Identities are the actual users/authorities that will run the worker process - w3wp.exe. Assigning the correct user authority will help ensure that applications can function properly, while not giving overly permissive permissions on the system. These identities can further be used in ACLs to protect system content. It is recommended that each Application Pool run under a unique identity.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[ApplicationPool] $AppPool
+	)
+
+	begin {
+		$AppPoolUsers = (Get-IISAppPool).ProcessModel.Username | Group-Object -NoElement
+	}
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		if ($AppPool.ProcessModel.IdentityType -eq [ProcessModelIdentityType]::SpecificUser) {
+			# Get the username of the specific application
+			$Username = $AppPool.ProcessModel.UserName
+
+			if (($AppPoolUsers | Where-Object Name -eq $Username).Count -gt 1) {
+				$message = "ApplicationPoolIdentity $Username is used for more than one ApplicationPool"
+				$audit = "False"
+			}
+			else {
+				$message = "Unique ApplicationPoolIdentity $Username is used."
+				$audit = "True"
+			}
+		}
+		elseif ($AppPool.ProcessModel.IdentityType -ne [ProcessModelIdentityType]::ApplicationPoolIdentity)	{
+			$message = "ApplicationPoolIdentity is not set"
+			$audit = "False"
+		}
+
+		@{
+			Id      = "1.4"
+			Task    = "Ensure 'application pool identity' is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 1.5
+function Test-IISUniqueSiteAppPool {
+	<#
+	.Synopsis
+		Ensure 'unique application pools' is set for sites
+	.Description
+		IIS introduced a new security feature called Application Pool Identities that allows Application Pools to be run under unique accounts without the need to create and manage local or domain accounts. It is recommended that all Sites run under unique, dedicated Application Pools.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$Apps = foreach ($Site in (Get-IISSite)) {
+		foreach ($App in $Site.Applications) {
+			New-Object -TypeName PSObject -Property @{
+				VirtualPath         = $Site.name + $App.path
+				ApplicationPoolName = $App.ApplicationPoolName
+			}
+		}
+	}
+
+	[array]$Findings = $Apps `
+		| Group-Object -Property ApplicationPoolName `
+		| Where-Object -Property Count -gt 1
+
+	if ($Findings.Count -gt 0) {
+		$message = "Following sites do not have unique Application Pools: " + ($findings.Group.VirtualPath -join ", ")
+		$audit = "False"
+	}
+
+	@{
+		Id      = "1.5"
+		Task    = "Ensure 'unique application pools' is set for sites"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 1.6
+function Test-IISAnonymouseUserIdentity {
+	<#
+	.Synopsis
+		Ensure 'application pool identity' is configured for anonymous user identity
+	.Description
+		To achieve isolation in IIS, application pools can be run as separate identities. IIS can be configured to automatically use the application pool identity if no anonymous user account is configured for a Web site. This can greatly reduce the number of accounts needed for Web sites and make management of the accounts easier. It is recommended the Application Pool Identity be set as the Anonymous User Identity.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup){
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.webServer/security/authentication/anonymousAuthentication"
+			$section = $Configuration.GetSection($path)
+
+			$username = $section | Get-IISConfigAttributeValue -AttributeName "userName"
+
+			if ($username -ne "") {
+				$message = "Username is set to: $username"
+				$audit = "False"
+			}
+		}
+		else{
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "1.6"
+			Task    = "Ensure 'application pool identity' is configured for anonymous user identity"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+#endregion
+
+#region 2 Configure Authentication and Authorization
+#
+# This section contains recommendations around the different layers of authentication in IIS.
+
+# 2.1
+function Test-IISGlobalAuthorization {
+	<#
+	.Synopsis
+		Ensure 'global authorization rule' is set to restrict access
+	.Description
+		IIS introduced URL Authorization, which allows the addition of Authorization rules to the actual URL, instead of the underlying file system resource, as a way to protect it. Authorization rules can be configured at the server, web site, folder (including Virtual Directories), or file level. The native URL Authorization module applies to all requests, whether they are .NET managed or other types of files (e.g. static files or ASP files). It is recommended that URL Authorization be configured to only grant access to the necessary security principals.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			# Ensure URL Authentication is installed
+			if ((Get-WindowsFeature Web-Url-Auth).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/authorization"
+				$section = $Configuration.GetSection($path)
+
+				[array]$elements = $section.GetCollection() `
+				| Where-Object {
+					$accessType = $_ | Get-IISConfigAttributeValue -AttributeName "accessType"
+					$users = $_ | Get-IISConfigAttributeValue -AttributeName "users"
+					$roles = $_ | Get-IISConfigAttributeValue -AttributeName "roles"
+					($accessType -eq "Allow") -and ($users -eq "*" -or $roles -eq "?")
+				}
+
+				if ($elements.Count -ne 0) {
+					$message = "Authorization rule to allow all or anonymous users is set"
+					$audit = "False"
+				}
+			}
+			else {
+				$message = "URL Authorization is not installed"
+				$audit = "Warning"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "2.1"
+			Task    = "Ensure 'global authorization rule' is set to restrict access"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 2.2
+function Test-IISAuthenticatedPricipals {
+	<#
+	.Synopsis
+		Ensure access to sensitive site features is restricted to authenticated principals only
+	.Description
+		IIS supports both challenge-based and login redirection-based authentication methods. Challenge-based authentication methods, such as Integrated Windows Authentication, require a client to respond correctly to a server-initiated challenge. A login redirection-based authentication method such as Forms Authentication relies on redirection to a login page to determine the identity of the principal. Challenge-based authentication and login redirection-based authentication methods cannot be used in conjunction with one another.
+
+		It is recommended that sites containing sensitive information, confidential data, or non-public web services be configured with a credentials-based authentication mechanism.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/authentication"
+			$section = $Configuration.GetSection($path)
+
+			$mode = $section | Get-IISConfigAttributeValue -AttributeName "mode"
+
+			if (($mode -ne "Windows") -and ($mode -ne "Forms")) {
+				$message = "Check authentication principals"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "2.2"
+			Task    = "Ensure access to sensitive site features is restricted to authenticated principals only"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+
+}
+
+# 2.3
+function Test-IISFormsAuthenticationSSL {
+	<#
+	.Synopsis
+		Ensure 'forms authentication' require SSL
+	.Description
+		Forms-based authentication can pass credentials across the network in clear text. It is therefore imperative that the traffic between client and server be encrypted using SSL, especially in cases where the site is publicly accessible. It is recommended that communications with any portion of a site using Forms Authentication be encrypted using SSL.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/authentication"
+			$section = $Configuration.GetSection($path)
+
+			$mode = $section | Get-IISConfigAttributeValue -AttributeName "mode"
+
+			if ((Get-IISModules) -contains "FormsAuthentication") {
+				# Ensure authentication mode is set to Forms
+				if ($mode -eq "Forms") {
+
+					$requireSSL = $section `
+					| Get-IISConfigElement -ChildElementName "forms" `
+					| Get-IISConfigAttributeValue -AttributeName "requireSSL"
+
+					if (-not $requireSSL) {
+						$message = "Forms authentication does not require SSL"
+						$audit = "False"
+					}
+				}
+			}
+			else {
+				$message = "Forms authentication is not installed"
+				$audit = "Warning"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "2.3"
+			Task    = "Ensure 'forms authentication' require SSL"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 2.4
+function Test-IISFormsAuthenticationCookies {
+	<#
+	.Synopsis
+		Ensure 'forms authentication' is set to use cookies
+	.Description
+		Forms Authentication can be configured to maintain the site visitor's session identifier in either a URI or cookie. It is recommended that Forms Authentication be set to use cookies.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/authentication"
+			$section = $Configuration.GetSection($path)
+
+			$mode = $section | Get-IISConfigAttributeValue -AttributeName "mode"
+
+			if ((Get-IISModules) -contains "FormsAuthentication") {
+				if ($mode -eq "Forms") {
+					$cookieless = $section | Get-IISConfigElement -ChildElementName "forms" `
+					| Get-IISConfigAttributeValue -AttributeName "cookieless"
+
+					if ($cookieless -ne "UseCookies") {
+						$message = "Forms authentication is not set to use cookies"
+						$audit = "False"
+					}
+				}
+			}
+			else {
+				$message = "Forms authentication is not installed"
+				$audit = "Warning"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "2.4"
+			Task    = "Ensure 'forms authentication' is set to use cookies"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 2.5
+function Test-IISFormsAuthenticationProtection {
+	<#
+	.Synopsis
+		Ensure 'cookie protection mode' is configured for forms authentication
+	.Description
+		The cookie protection mode defines the protection Forms Authentication cookies will be given within a configured application.
+
+		It is recommended that cookie protection mode always encrypt and validate Forms Authentication cookies.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/authentication"
+			$section = $Configuration.GetSection($path)
+
+			$mode = $section | Get-IISConfigAttributeValue -AttributeName "mode"
+
+			if ((Get-IISModules) -contains "FormsAuthentication") {
+				if ($mode -ieq "Forms") {
+					$protection = $section `
+					| Get-IISConfigElement -ChildElementName "forms" `
+					| Get-IISConfigAttributeValue -AttributeName "protection"
+
+					if ($protection -ne "All") {
+						$message = "Cookie Protection Mode is not set to ALL"
+						$audit = "False"
+					}
+				}
+			}
+			else {
+				$message = "Forms authentication is not installed"
+				$audit = "Warning"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "2.5"
+			Task    = "Ensure 'cookie protection mode' is configured for forms authentication"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 2.6
+function Test-IISTLSForBasicAuth {
+	<#
+	.Synopsis
+		Ensure transport layer security for 'basic authentication' is configured
+	.Description
+		Basic Authentication can pass credentials across the network in clear text. It is therefore imperative that the traffic between client and server be encrypted, especially in cases where the site is publicly accessible and is recommended that TLS be configured and required for any Site or Application using Basic Authentication.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		if ((Get-WindowsFeature Web-Basic-Auth).InstallState -eq [InstallState]::Installed) {
+			[array]$httpsBindings = $Site.Bindings | Where-Object -Property Protocol -eq "https"
+
+			$sslFlags = Get-IISConfigSection -Location $Site.Name `
+				-SectionPath "system.webServer/security/access" `
+				| Get-IISConfigAttributeValue -AttributeName "sslFlags"
+
+			# split the flags into an array
+			$sslValues = $sslFlags.Split("{,}")
+
+			# Ensure ssl-flag is set
+			if (-not ($sslValues -contains "ssl")) {
+				$message = "SSL is not required in configuration"
+				$audit = "False"
+			}
+			# Ensure site has https bindings
+			elseif ($httpsBindings.Count -eq 0) {
+				$message = "Site has no secure protocol binding"
+				$audit = "False"
+			}
+		}
+
+		@{
+			Id      = "2.6"
+			Task    = "Ensure transport layer security for 'basic authentication' is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 2.7
+function Test-IISPasswordFormatNotClear {
+	<#
+	.Synopsis
+		Ensure 'passwordFormat' is not set to clear
+	.Description
+		The <credentials> element of the <authentication> element allows optional definitions of name and password for IIS Manager User accounts within the configuration file. Forms based authentication also uses these elements to define the users. IIS Manager Users can use the administration interface to connect to sites and applications in which they've been granted authorization. Note that the <credentials> element only applies when the default provider, ConfigurationAuthenticationProvider, is configured as the authentication provider. It is recommended that passwordFormat be set to a value other than Clear, such as SHA1.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/authentication"
+			$section = $Configuration.GetSection($path)
+
+			$passwordFormat = $section `
+			| Get-IISConfigElement -ChildElementName "forms" `
+			| Get-IISConfigElement -ChildElementName "credentials" `
+			| Get-IISConfigAttributeValue -AttributeName "passwordFormat"
+
+			if ($passwordFormat -eq "Clear" ) {
+				$message = "Credentials passwordFormat set to 'Clear'"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+	
+		@{
+			Id      = "2.7"
+			Task    = "Ensure 'passwordFormat' is not set to clear"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 2.7
+function Test-IISPasswordFormatNotClearMachineLevel {
+	<#
+	.Synopsis
+		Ensure 'passwordFormat' is not set to clear
+	.Description
+		The <credentials> element of the <authentication> element allows optional definitions of name and password for IIS Manager User accounts within the configuration file. Forms based authentication also uses these elements to define the users. IIS Manager Users can use the administration interface to connect to sites and applications in which they've been granted authorization. Note that the <credentials> element only applies when the default provider, ConfigurationAuthenticationProvider, is configured as the authentication provider. It is recommended that passwordFormat be set to a value other than Clear, such as SHA1.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$machineConfig = [System.Configuration.ConfigurationManager]::OpenMachineConfiguration()
+	$passwordFormat = $machineConfig.GetSection("system.web/authentication").forms.credentials.passwordFormat
+
+	if ($passwordFormat -eq "Clear" ) {
+		$message = "Credentials passwordFormat set to 'Clear'"
+		$audit = "False"
+	}
+
+	@{
+		Id      = "2.7"
+		Task    = "Ensure 'passwordFormat' is not set to clear"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 2.8
+function Test-IISCredentialsNotStored {
+	<#
+	.Synopsis
+		Ensure 'credentials' are not stored in configuration files
+	.Description
+		The <credentials> element of the <authentication> element allows optional definitions of name and password for IIS Manager User accounts within the configuration file. Forms based authentication also uses these elements to define the users. IIS Manager Users can use the administration interface to connect to sites and applications in which they've been granted authorization. Note that the <credentials> element only applies when the default provider, ConfigurationAuthenticationProvider, is configured as the authentication provider. It is recommended to avoid storing passwords in the configuration file even in form of hash.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/authentication"
+			$section = $Configuration.GetSection($path)
+
+			$credentials = $section `
+			| Get-IISConfigElement -ChildElementName "forms" `
+			| Get-IISConfigElement -ChildElementName "credentials"
+
+			if ($credentials.IsLocallyStored) {
+				$message = "'credentials' is stored in configuration"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+	
+		@{
+			Id      = "2.8"
+			Task    = "Ensure 'credentials' are not stored in configuration files"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 2.8
+function Test-IISCredentialsNotStoredMachineLevel {
+	<#
+	.Synopsis
+		Ensure 'credentials' are not stored in configuration files
+	.Description
+		The <credentials> element of the <authentication> element allows optional definitions of name and password for IIS Manager User accounts within the configuration file. Forms based authentication also uses these elements to define the users. IIS Manager Users can use the administration interface to connect to sites and applications in which they've been granted authorization. Note that the <credentials> element only applies when the default provider, ConfigurationAuthenticationProvider, is configured as the authentication provider. It is recommended to avoid storing passwords in the configuration file even in form of hash.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$machineConfig = [System.Configuration.ConfigurationManager]::OpenMachineConfiguration()
+	$credentials = $machineConfig.GetSection("system.web/authentication").forms.credentials
+
+	if ($credentials.ElementInformation.IsPresent) {
+		$message = "'credentials' is stored in configuration"
+		$audit = "False"
+	}
+
+	@{
+		Id      = "2.8"
+		Task    = "Ensure 'credentials' are not stored in configuration files"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+#endregion
+
+#region 3 ASP.NET Configuration Recommendation
+#
+# This section contains recommendations specific to ASP.NET.
+
+# 3.1
+function Test-IISDeploymentMethodRetail {
+	<#
+	.Synopsis
+		Ensure 'deployment method retail' is set
+	.Description
+		The <deployment retail> switch is intended for use by production IIS servers. This switch is used to help applications run with the best possible performance and least possible security information leakages by disabling the application's ability to generate trace output on a page, disabling the ability to display detailed error messages to end users, and disabling the debug switch. Often times, switches and options that are developer-focused, such as failed request tracing and debugging, are enabled during active development. It is recommended that the deployment method on any production server be set to retail.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$machineConfig = [System.Configuration.ConfigurationManager]::OpenMachineConfiguration()
+	$deployment = $machineConfig.GetSection("system.web/deployment")
+
+	if (-not $deployment.retail) {
+		$message = "retail is not enabled in machine.config"
+		$audit = "False"
+	}
+
+	@{
+		Id      = "3.1"
+		Task    = "Ensure 'deployment method retail' is set"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 3.2
+function Test-IISDebugOff {
+	<#
+	.Synopsis
+		Ensure 'debug' is turned off
+	.Description
+		Developers often enable the debug mode during active ASP.NET development so that they do not have to continually clear their browsers cache every time they make a change to a resource handler. The problem would arise from this being left "on" or set to "true". Compilation debug output is displayed to the end user, allowing malicious persons to obtain detailed information about applications.
+
+		is recommended that debugging still be turned off.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/compilation"
+			$section = $Configuration.GetSection($path)
+
+			$debug = $section | Get-IISConfigAttributeValue -AttributeName "debug"
+
+			if ($debug) {
+				$message = "Debug is ON"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "3.2"
+			Task    = "Ensure 'debug' is turned off"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.3
+function Test-IISCustomErrorsNotOff {
+	<#
+	.Synopsis
+		Ensure custom error messages are not off
+	.Description
+		When an ASP.NET application fails and causes an HTTP/1.x 500 Internal Server Error, or a feature configuration (such as Request Filtering) prevents a page from being displayed, an error message will be generated. Administrators can choose whether or not the application should display a friendly message to the client, detailed error message to the client, or detailed error message to localhost only.
+
+		It is recommended that customErrors still be turned to On or RemoteOnly.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/customErrors"
+			$section = $Configuration.GetSection($path)
+
+			$mode = $section | Get-IISConfigAttributeValue -AttributeName "mode"
+
+			if ($mode -eq "Off") {
+				$message = "Custom errors are 'OFF'"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "3.3"
+			Task    = "Ensure custom error messages are not off"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.4
+function Test-IISHttpErrorsHidden {
+	<#
+	.Synopsis
+		Ensure IIS HTTP detailed errors are hidden from displaying remotely
+	.Description
+		A Web site's error pages are often set to show detailed error information for troubleshooting purposes during testing or initial deployment. To prevent unauthorized users from viewing this privileged information, detailed error pages must not be seen by remote users. This setting can be modified in the errorMode attribute setting for a Web site's error pages. By default, the errorMode attribute is set in the Web.config file for the Web site or application and is located in the <httpErrors> element of the <system.webServer> section. It is recommended that custom errors be prevented from displaying remotely.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.webServer/httpErrors"
+			$section = $Configuration.GetSection($path)
+
+			$errorMode = $section | Get-IISConfigAttributeValue -AttributeName "errorMode"
+
+			if (($errorMode -ne "Custom") -and ($errorMode -ne "DetailedLocalOnly")) {
+				$message = "HTTP detailed errors are set to 'Detailed'"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "3.4"
+			Task    = "Ensure IIS HTTP detailed errors are hidden from displaying remotely"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.5
+function Test-IISAspNetTracingDisabled {
+	<#
+	.Synopsis
+		Ensure ASP.NET stack tracing is not enabled
+	.Description
+		A Web site's error pages are often set to show detailed error information for troubleshooting purposes during testing or initial deployment. To prevent unauthorized users from viewing this privileged information, detailed error pages must not be seen by remote users. This setting can be modified in the errorMode attribute setting for a Web site's error pages. By default, the errorMode attribute is set in the Web.config file for the Web site or application and is located in the <httpErrors> element of the <system.webServer> section. It is recommended that custom errors be prevented from displaying remotely.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/trace"
+			$section = $Configuration.GetSection($path)
+
+			$traceEnabled = $section | Get-IISConfigAttributeValue -AttributeName "enabled"
+
+			if ($traceEnabled) {
+				$message = "trace is enabled"
+				$audit = "FALSE"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "3.5"
+			Task    = "Ensure ASP.NET stack tracing is not enabled"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.5
+function Test-IISAspNetTracingDisabledMachineLevel {
+	<#
+	.Synopsis
+		Ensure ASP.NET stack tracing is not enabled
+	.Description
+		A Web site's error pages are often set to show detailed error information for troubleshooting purposes during testing or initial deployment. To prevent unauthorized users from viewing this privileged information, detailed error pages must not be seen by remote users. This setting can be modified in the errorMode attribute setting for a Web site's error pages. By default, the errorMode attribute is set in the Web.config file for the Web site or application and is located in the <httpErrors> element of the <system.webServer> section. It is recommended that custom errors be prevented from displaying remotely.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$machineConfig = [System.Configuration.ConfigurationManager]::OpenMachineConfiguration()
+	$trace = $machineConfig.GetSection("system.web/trace")
+
+	if ($trace.enabled) {
+		$message = "trace is enabled in machine.config"
+		$audit = "FALSE"
+	}
+
+	@{
+		Id      = "3.5"
+		Task    = "Ensure ASP.NET stack tracing is not enabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 3.6
+function Test-IISCookielessSessionState {
+	<#
+	.Synopsis
+		Ensure 'httpcookie' mode is configured for session state
+	.Description
+		A session cookie associates session information with client information for that session, which can be the duration of a user's connection to a site. The cookie is passed in a HTTP header together with all requests between the client and server.
+
+		It is recommended that session state be configured to UseCookies.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/sessionState"
+			$section = $Configuration.GetSection($path)
+
+			$cookieless = $section | Get-IISConfigAttributeValue -AttributeName "cookieless"
+
+			if (($cookieless -ne "UseCookies") -and ($cookieless -ne "False")) {
+				$message = "sessionState set to $cookieless"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "3.6"
+			Task    = "Ensure 'httpcookie' mode is configured for session state"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.7
+function Test-IISCookiesHttpOnly {
+	<#
+	.Synopsis
+		Ensure 'cookies' are set with HttpOnly attribute
+	.Description
+		The httpOnlyCookies attribute of the httpCookies node determines if IIS will set the HttpOnly flag on HTTP cookies it sets. The HttpOnly flag indicates to the user agent that the cookie must not be accessible by client-side script (i.e document.cookie). It is recommended that the httpOnlyCookies attribute be set to true.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.web/httpCookies"
+			$section = $Configuration.GetSection($path)
+
+			$httpOnlyCookies = $section | Get-IISConfigAttributeValue -AttributeName "httpOnlyCookies"
+
+			if (-not $httpOnlyCookies) {
+				$message = "httpOnlyCookies set to $httpOnlyCookies"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "3.7"
+			Task    = "Ensure 'cookies' are set with HttpOnly attribute"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.8
+function Test-IISMachineKeyValidation {
+	<#
+	.Synopsis
+		Ensure 'MachineKey validation method - .Net 3.5' is configured
+	.Description
+		The machineKey element of the ASP.NET web.config specifies the algorithm and keys that ASP.NET will use for encryption. The Machine Key feature can be managed to specify hashing and encryption settings for application services such as view state, Forms authentication, membership and roles, and anonymous identification.
+
+		It is recommended that AES or SHA1 methods be configured for use at the global level.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		$siteAppPool = $Site.Applications["/"].ApplicationPoolName
+		$appPoolVersion = (Get-IISAppPool -Name $siteAppPool).managedRuntimeVersion
+
+		# Ensure  ApplicationPool running is .NET 3.5 (which is an extension of 2.0 so we look for 2.*)
+		if ($appPoolVersion -like "v2.*") {
+
+			$validation = Get-IISConfigSection -CommitPath $Site.Name `
+				-SectionPath "system.web/machineKey" `
+				| Get-IISConfigAttributeValue -AttributeName "Validation"
+
+			if ($validation -ne "SHA1") {
+				$message = "Validation set to $validation"
+				$audit = "False"
+			}
+		}
+
+		@{
+			Id      = "3.8"
+			Task    = "Ensure 'MachineKey validation method - .Net 3.5' is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.9
+function Test-IISMachineKeyValidationV45 {
+	<#
+	.Synopsis
+		Ensure 'MachineKey validation method - .Net 4.5' is configured
+	.Description
+		The machineKey element of the ASP.NET web.config specifies the algorithm and keys that ASP.NET will use for encryption. The Machine Key feature can be managed to specify hashing and encryption settings for application services such as view state, Forms authentication, membership and roles, and anonymous identification.
+
+		It is recommended that SHA-2 methods be configured for use at the global level.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		$siteAppPool = $site.Applications["/"].ApplicationPoolName
+		$appPoolVersion = (Get-IISAppPool -Name $siteAppPool).managedRuntimeVersion
+
+		# Ensure an ApplicationPool is running .NET 4.5
+		if ($appPoolVersion -like "v4.*") {
+			$validation = Get-IISConfigSection -CommitPath $Site.name `
+				-SectionPath "system.web/machineKey" `
+				| Get-IISConfigAttributeValue -AttributeName "Validation"
+
+			if (($validation -ne "HMACSHA256") -and ($validation -ne "HMACSHA512")) {
+				$message = "Validation set to $validation"
+				$audit = "False"
+			}
+		}
+
+		@{
+			Id      = "3.9"
+			Task    = "Ensure 'MachineKey validation method - .Net 4.5' is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 3.10
+function Test-IISDotNetTrustLevel {
+	<#
+	.Synopsis
+		Ensure global .NET trust level is configured
+	.Description
+		An application's trust level determines the permissions that are granted by the ASP.NET code access security (CAS) policy. CAS defines two trust categories: full trust and partial trust. An application that has full trust permissions may access all resource types on a server and perform privileged operations, while applications that run with partial trust have varying levels of operating permissions and access to resources.
+
+		It is recommended that the global .NET Trust Level be set to Medium or lower.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		$siteAppPool = $site.Applications["/"].ApplicationPoolName
+		$appPoolVersion = (Get-IISAppPool -Name $siteAppPool).managedRuntimeVersion
+
+		if ($appPoolVersion -like "v4.*") {
+			$message = "This only applies to .Net 2.0. Future versions have stopped supporting this feature."
+			$audit = "None"
+		}
+		else {
+			$level = Get-IISConfigSection -CommitPath $Site.name `
+				-SectionPath "system.web/trust" `
+			| Get-IISConfigAttributeValue -AttributeName "level"
+
+			# medium trust level should be set in .NET 2.*, but not in later versions
+			if (($appPoolVersion -like "v2.*" -and $level -ne "medium" -or $level -ne "low" -or $level -ne "minimal") `
+			-or ($appPoolVersion -notlike "v4.*" -and -not [string]::IsNullOrEmpty($appPoolVersion))) {
+				$message = "TrustLevel set to $level"
+				$audit = "False"
+			}
+		}
+
+		@{
+			Id      = "3.10"
+			Task    = "Ensure global .NET trust level is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+#endregion
+
+#region 4 Request Filtering and Other Restriction Modules
+#
+# Request Filtering is a powerful module that provides a configurable set of rules that enables administrators to allow or reject the types of requests that they determine should be allowed or rejected at the server, web site, or web application levels.
+
+
+# 4.1
+function Test-IISMaxAllowedContentLength {
+	<#
+	.Synopsis
+		Ensure 'maxAllowedContentLength' is configured
+	.Description
+		The maxAllowedContentLength Request Filter is the maximum size of the http request, measured in bytes, which can be sent from a client to the server. Configuring this value enables the total request size to be restricted to a configured value. It is recommended that the overall size of requests be restricted to a maximum value appropriate for the server, site, or application.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			# Ensure request filering is installed
+			if ((Get-WindowsFeature Web-Filtering).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/requestFiltering"
+				$section = $Configuration.GetSection($path)
+
+				$maxContentLength = $section `
+				| Get-IISConfigElement -ChildElementName "requestLimits" `
+				| Get-IISConfigAttributeValue -AttributeName "maxAllowedContentLength"
+
+				if ($maxContentLength -ge 0) {
+					$message += "`n maxContentLength: $maxContentLength"
+				}
+				else {
+					$message = "maxContentLength not configured"
+					$audit = "False"
+				}
+			}
+			else {
+				$message = "Request Filering is not installed"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "4.1"
+			Task    = "Ensure 'maxAllowedContentLength' is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.2
+function Test-IISMaxURLRequestFilter {
+	<#
+	.Synopsis
+		Ensure 'maxURL request filter' is configured
+	.Description
+		The maxURL attribute of the <requestLimits> property is the maximum length (in Bytes) in which a requested URL can be (excluding query string) in order for IIS to accept. Configuring this Request Filter enables administrators to restrict the length of the requests that the server will accept. It is recommended that a limit be put on the length of URL.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			# Ensure request filering is installed
+			if ((Get-WindowsFeature Web-Filtering).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/requestFiltering"
+				$section = $Configuration.GetSection($path)
+
+				$maxURLRequestFilter = $section `
+				| Get-IISConfigElement -ChildElementName "requestLimits" `
+				| Get-IISConfigAttributeValue -AttributeName "maxURL"
+
+				if ($maxURLRequestFilter -ge 1) {
+					$message += "`n maxURLRequestFilter: $maxURLRequestFilter"
+				}
+				else {
+					$message = "maxURLRequestFilter not configured"
+					$audit = "False"
+				}
+			}
+			else {
+				$message = "Request Filering is not installed"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+
+		@{
+			Id      = "4.2"
+			Task    = "Ensure 'maxURL request filter' is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.3
+function Test-IISMaxQueryStringRequestFilter {
+	<#
+	.Synopsis
+		Ensure 'MaxQueryString request filter' is configured
+	.Description
+		The MaxQueryString Request Filter describes the upper limit on the length of the query string that the configured IIS server will allow for websites or applications. It is recommended that values always be established to limit the amount of data will can be accepted in the query string.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			# Ensure request filering is installed
+			if ((Get-WindowsFeature Web-Filtering).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/requestFiltering"
+				$section = $Configuration.GetSection($path)
+
+				$maxQueryStringRequestFilter = $section `
+				| Get-IISConfigElement -ChildElementName "requestLimits" `
+				| Get-IISConfigAttributeValue -AttributeName "maxQueryString"
+
+				if ($maxQueryStringRequestFilter -ge 1) {
+					$message += "`n maxQueryStringRequestFilter: $maxQueryStringRequestFilter"
+				}
+				else {
+					$message = "maxQueryStringRequestFilter not configured"
+					$audit = "False"
+				}
+			}
+			else {
+				$message = "Request Filering is not installed"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "4.3"
+			Task    = "Ensure 'MaxQueryString request filter' is configured"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.4
+function Test-IISNonASCIICharURLForbidden {
+	<#
+	.Synopsis
+		Ensure non-ASCII characters in URLs are not allowed
+	.Description
+		This feature is used to allow or reject all requests to IIS that contain non-ASCII characters. When using this feature, Request Filtering will deny the request if high-bit characters are present in the URL. The UrlScan equivalent is AllowHighBitCharacters. It is recommended that requests containing non-ASCII characters be rejected, where possible.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			# Ensure request filering is installed
+			if ((Get-WindowsFeature Web-Filtering).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/requestFiltering"
+				$section = $Configuration.GetSection($path)
+
+				$allowHighBitCharacters = $section `
+				| Get-IISConfigAttributeValue -AttributeName "allowHighBitCharacters"
+
+				if ($allowHighBitCharacters) {
+					$message = "non-ASCII characters in URLs are allowed"
+					$audit = "False"
+				}
+			}
+			else {
+				$message = "Request Filering is not installed"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "4.4"
+			Task    = "Ensure non-ASCII characters in URLs are not allowed"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.5
+function Test-IISRejectDoubleEncodedRequests {
+	<#
+	.Synopsis
+		Ensure Double-Encoded requests will be rejected
+	.Description
+		This Request Filter feature prevents attacks that rely on double-encoded requests and applies if an attacker submits a double-encoded request to IIS. When the double-encoded requests filter is enabled, IIS will go through a two iteration process of normalizing the request. If the first normalization differs from the second, the request is rejected and the error code is logged as a 404.11. The double-encoded requests filter was the VerifyNormalization option in UrlScan. It is recommended that double-encoded requests be rejected.
+	#>
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			# Ensure request filering is installed
+			if ((Get-WindowsFeature Web-Filtering).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/requestFiltering"
+				$section = $Configuration.GetSection($path)
+
+				$allowDoubleEscaping = $section`
+				| Get-IISConfigAttributeValue -AttributeName "allowDoubleEscaping"
+
+				if ($allowDoubleEscaping) {
+					$message = "Rejecting Double-Encoded requests not set"
+					$audit = "False"
+				}
+			}
+			else {
+				$message = "Request Filering is not installed"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "4.5"
+			Task    = "Ensure Double-Encoded requests will be rejected"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.6
+function Test-IISHTTPTraceMethodeDisabled {
+	<#
+	.Synopsis
+		Ensure 'HTTP Trace Method' is disabled
+	.Description
+		The HTTP TRACE method returns the contents of client HTTP requests in the entity-body of the TRACE response. Attackers could leverage this behavior to access sensitive information, such as authentication data or cookies, contained in the HTTP headers of the request. One such way to mitigate this is by using the <verbs> element of the <requestFiltering> collection. The <verbs> element replaces the [AllowVerbs] and [DenyVerbs] features in UrlScan. It is recommended the HTTP TRACE method be denied.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = "HTTP Trace Method is not filtered"
+			$audit = "False"
+
+			# Ensure request filering is installed
+			if ((Get-WindowsFeature Web-Filtering).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/requestFiltering"
+				$section = $Configuration.GetSection($path)
+
+				[array]$httpTraceMethod = $section.GetCollection("verbs") `
+				| Where-Object {
+					$trace = $_ | Get-IISConfigAttributeValue -AttributeName "verb"
+					$allowed = $_ | Get-IISConfigAttributeValue -AttributeName "allowed"
+					($trace -eq "trace") -and (-not $allowed)
+				}
+
+				if ($httpTraceMethod.Count -eq 1) {
+					$message = $MESSAGE_ALLGOOD
+					$audit = "True"
+				}
+			}
+			else {
+				$message = "Request Filering is not installed"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "4.6"
+			Task    = "Ensure 'HTTP Trace Method' is disabled"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.7
+function Test-IISBlockUnlistedFileExtensions {
+	<#
+	.Synopsis
+		Ensure Unlisted File Extensions are not allowed
+	.Description
+		The FileExtensions Request Filter allows administrators to define specific extensions their web server(s) will allow and disallow. The property allowUnlisted will cover all other file extensions not explicitly allowed or denied. Often times, extensions such as .config, .bat, .exe, to name a few, should never be served. The AllowExtensions and DenyExtensions options are the UrlScan equivalents. It is recommended that all extensions be unallowed at the most global level possible, with only those necessary being allowed.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			if ((Get-WindowsFeature Web-Filtering).InstallState -eq [InstallState]::Installed) {
+				$path = "system.webServer/security/requestFiltering"
+
+				$section = $Configuration.GetSection($path)
+
+				$allowUnlisted = $section `
+				| Get-IISConfigElement -ChildElementName "fileExtensions" `
+				| Get-IISConfigAttributeValue -AttributeName "allowUnlisted"
+
+
+				if ($allowUnlisted) {
+					$message = "Unlisted file extensions allowed"
+					$audit = "False"
+				}
+			}
+			else {
+				$message = "Request Filering is not installed"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "4.7"
+			Task    = "Ensure Unlisted File Extensions are not allowed"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.8
+function Test-IISHandlerDenyWrite {
+	<#
+	.Synopsis
+		Ensure Handler is not granted Write and Script/Execute
+	.Description
+		Handler mappings can be configured to give permissions to Read, Write, Script, or Execute depending on what the use is for - reading static content, uploading files, executing scripts, etc. It is recommended to grant a handler either Execute/``Script or Write permissions, but not both.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+
+			$path = "system.webServer/handlers"
+			$section = $Configuration.GetSection($path)
+			$accessPolicy = ($section | Get-IISConfigAttributeValue -AttributeName "accessPolicy").Split(",")
+
+			if ((($accessPolicy -contains "Script") -or ($accessPolicy -contains "Execute")) `
+					-and ($accessPolicy -contains "Write")) {
+				$message = "Handler is granted write and script/execute"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "4.8"
+			Task    = "Ensure Handler is not granted Write and Script/Execute"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 4.9
+function Test-IISIsapisNotAllowed {
+	<#
+	.Synopsis
+		Ensure 'notListedIsapisAllowed' is set to false
+	.Description
+		The notListedIsapisAllowed attribute is a server-level setting that is located in the ApplicationHost.config file in the <isapiCgiRestriction> element of the <system.webServer> section under <security>. This element ensures that malicious users cannot copy unauthorized ISAPI binaries to the Web server and then run them. It is recommended that notListedIsapisAllowed be set to false.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	try {
+		$isapiCgiRestriction = Get-IISConfigSection `
+			-SectionPath "system.webServer/security/isapiCgiRestriction" `
+			| Get-IISConfigAttributeValue -AttributeName "notListedIsapisAllowed"
+
+		# Verify that the notListedIsapisAllowed attribute in the <isapiCgiRestriction> element is set to false
+		if ($isapiCgiRestriction) {
+			$message = "IsapiCgiRestriction 'notListedIsapisAllowed' not set to false"
+			$audit = "False"
+		}
+	}
+	catch {
+		$message = "Cannot get setting 'notListedIsapisAllowed' for IsapiCgiRestriction"
+		$audit = "False"
+	}
+
+	@{
+		Id      = "4.9"
+		Task    = "Ensure 'notListedIsapisAllowed' is set to false"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 4.10
+function Test-IISCgisNotAllowed {
+	<#
+	.Synopsis
+		Ensure 'notListedCgisAllowed' is set to false
+	.Description
+		The notListedCgisAllowed attribute is a server-level setting that is located in the ApplicationHost.config file in the <isapiCgiRestriction> element of the <system.webServer> section under <security>. This element ensures that malicious users cannot copy unauthorized CGI binaries to the Web server and then run them. It is recommended that notListedCgisAllowed be set to false.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	try {
+		$isapiCgiRestriction = Get-IISConfigSection `
+			-SectionPath "system.webServer/security/isapiCgiRestriction" `
+			| Get-IISConfigAttributeValue -AttributeName "notListedCgisAllowed"
+
+		# Verify that the notListedCgisAllowed attribute in the <isapiCgiRestriction> element is set to false
+		if ($isapiCgiRestriction) {
+			$message = "IsapiCgiRestriction 'notListedCgisAllowed' not set to false"
+			$audit = "False"
+		}
+	}
+	catch {
+		$message = "Cannot get setting 'notListedCgisAllowed' for IsapiCgiRestriction"
+		$audit = "False"
+	}
+
+	@{
+		Id      = "4.10"
+		Task    = "Ensure 'notListedCgisAllowed' is set to false"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 4.11
+function Test-IISDynamicIPRestrictionEnabled {
+	<#
+	.Synopsis
+		Ensure 'Dynamic IP Address Restrictions' is enabled
+	.Description
+		IIS Dynamic IP Address Restrictions capability can be used to thwart DDos attacks. This is complimentary to the IP Addresses and Domain names Restrictions lists that can be manually maintained within IIS. In contrast, Dynamic IP address filtering allows administrators to configure the server to block access for IPs that exceed the specified request threshold. The default action Deny action for restrictions is to return a Forbidden response to the client.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		# Ensure the windows feature is installed
+		if ((Get-WindowsFeature Web-Ip-Security).InstallState -ne [InstallState]::Installed) {
+			$message = "`"IP and Domain Restrictions`" must be installed to enabled `"Dynamic IP Address Restrictions`""
+			$audit = "False"
+		}
+		else {
+			$dynamicIpSecurity = Get-IISConfigSection -Location $Site.Name `
+				-SectionPath "system.webServer/security/dynamicIpSecurity"
+
+			$denyByConcurrentRequests = $dynamicIpSecurity `
+				| Get-IISConfigElement -ChildElementName "denyByConcurrentRequests" `
+				| Get-IISConfigAttributeValue -AttributeName "enabled"
+
+			$denyByRequestRate = $dynamicIpSecurity `
+				| Get-IISConfigElement -ChildElementName "denyByRequestRate" `
+				| Get-IISConfigAttributeValue -AttributeName "enabled"
+
+			if ($denyByConcurrentRequests -and -not $denyByRequestRate) {
+				$message = "Deny IP Address based on the number of requests over a period of time disabled"
+				$audit = "False"
+			}
+			elseif (-not $denyByConcurrentRequests -and $denyByRequestRate) {
+				$message = "Deny IP Address based on the number of concurrent requests disabled"
+				$audit = "False"
+			}
+			elseif (-not $denyByConcurrentRequests -and -not $denyByRequestRate) {
+				$message = "Dynamic IP Restriction disabled"
+				$audit = "False"
+			}
+		}
+
+		@{
+			Id      = "4.11"
+			Task    = "Ensure 'Dynamic IP Address Restrictions' is enabled"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+#endregion
+
+#region 5 IIS Logging Recommendations
+#
+# This section contains recommendations regarding IIS logging that have not been covered in the Basic Configurations section.
+
+# 5.1
+function Test-IISLogFileLocation {
+	<#
+	.Synopsis
+		Ensure Default IIS web log location is moved
+	.Description
+		IIS will log relatively detailed information on every request. These logs are usually the first item looked at in a security response, and can be the most valuable. Malicious users are aware of this, and will often try to remove evidence of their activities. It is therefore recommended that the default location for IIS log files be changed to a restricted, non-system drive.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$logFileLocation = ($Site.logFile.Directory).replace("%SystemDrive%", $env:SystemDrive)
+
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		if ($logFileLocation.StartsWith($env:SystemDrive)) {
+			$message = "Logfile location is on system drive: $logFileLocation"
+			$audit = "False"
+		}
+
+		@{
+			Id      = "5.1"
+			Task    = "Ensure Default IIS web log location is moved"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+# 5.2
+function Test-IISAdvancedLoggingEnabled {
+	<#
+	.Synopsis
+		Ensure Advanced IIS logging is enabled
+	.Description
+		IIS Advanced Logging is a module which provides flexibility in logging requests and client data. It provides controls that allow businesses to specify what fields are important, easily add additional fields, and provide policies pertaining to log file rollover and Request Filtering. HTTP request/response headers, server variables, and client-side fields can be easily logged with minor configuration in the IIS management console. It is recommended that Advanced Logging be enabled, and the fields which could be of value to the type of business or application in the event of a security incident, be identified and logged.
+	#>
+
+	# check site defaults
+
+	@{
+		Id      = "5.2"
+		Task    = "Ensure Advanced IIS logging is enabled"
+		Status  = "None"
+		Message = "Advanced Logging is not available for IIS 10. See enhanced logging instead."
+	} | Write-Output
+}
+
+# 5.3
+function Test-IISETWLoggingEnabled {
+	<#
+	.Synopsis
+		Ensure 'ETW Logging' is enabled
+	.Description
+		IIS introduces a new logging method. Administrators can now send logging information to Event Tracing for Windows (ETW)
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site] $Site
+	)
+
+	process {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+
+		if (-not ($Site.logFile.logTargetW3C -like "*ETW*")) {
+			$message = "ETW Logging disabled"
+			$audit = "False"
+		}
+
+		@{
+			Id      = "5.3"
+			Task    = "Ensure 'ETW Logging' is enabled"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+}
+
+#endregion
+
+#region 6 FTP Requests
+#
+# This section contains a crucial configuration setting for running file transfer protocol (FTP).
+
+# 6.1
+function Test-IISFtpRequestsEncrypted {
+	<#
+	.Synopsis
+		Ensure FTP requests are encrypted
+	.Description
+		The new FTP Publishing Service for IIS supports adding an SSL certificate to an FTP site. Using an SSL certificate with an FTP site is also known as FTP-S or FTP over Secure Socket Layers (SSL). FTP-S is an RFC standard (RFC 4217) where an SSL certificate is added to an FTP site and thereby making it possible to perform secure file transfers.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	if ((Get-WindowsFeature Web-Ftp-Server).InstallState -eq [InstallState]::Installed) {
+		try {
+			$sslConfigElement = Get-IISConfigSection `
+				-SectionPath "system.applicationHost/sites" `
+				| Get-IISConfigElement -ChildElementName "siteDefaults" `
+				| Get-IISConfigElement -ChildElementName "ftpServer" `
+				| Get-IISConfigElement -ChildElementName "security" `
+				| Get-IISConfigElement -ChildElementName "ssl"
+
+			$controlChannelPolicy = $sslConfigElement `
+				| Get-IISConfigAttributeValue -AttributeName "controlChannelPolicy"
+
+			$dataChannelPolicy = $sslConfigElement `
+				| Get-IISConfigAttributeValue -AttributeName "dataChannelPolicy"
+
+			if (($controlChannelPolicy -ne "SslRequire") -or ($dataChannelPolicy -ne "SslRequire")) {
+				$message = "Found following settings: `n controlChannelPolicy: $controlChannelPolicy `n dataChannelPolicy: $dataChannelPolicy"
+				$audit = "False"
+			}
+		}
+		catch {
+			$message = "Cannot get FTP security setting"
+			$audit = "False"
+		}
+	}
+	else {
+		$message = "Skipped this benchmark - right now Web-Ftp-Server is not installed"
+		$audit = "None"
+	}
+
+	@{
+		Id      = "6.1"
+		Task    = "Ensure FTP requests are encrypted"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 6.2
+function Test-IISFtpLogonAttemptRestriction {
+	<#
+	.Synopsis
+		Ensure FTP Logon attempt restrictions is enabled
+	.Description
+		IIS introduced a built-in network security feature to automatically block brute force FTP attacks. This can be used to mitigate a malicious client from attempting a brute-force attack on a discovered account, such as the local administrator account.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	if ((Get-WindowsFeature Web-Ftp-Server).InstallState -eq [InstallState]::Installed) {
+		try {
+			$denyByFailure = Get-IISConfigSection `
+				-SectionPath "system.ftpServer/security/authentication" `
+				| Get-IISConfigElement -ChildElementName "denyByFailure"
+
+			$enabled = $denyByFailure `
+				| Get-IISConfigAttributeValue -AttributeName "enabled"
+			$maxFailure = $denyByFailure `
+				| Get-IISConfigAttributeValue -AttributeName "maxFailure"
+			$entryExpiration = $denyByFailure `
+				| Get-IISConfigAttributeValue -AttributeName "entryExpiration"
+			$loggingOnlyMode = $denyByFailure `
+				| Get-IISConfigAttributeValue -AttributeName "loggingOnlyMode"
+
+			if (($enabled) -and ($maxFailure -gt 0) -and ($entryExpiration -gt 0) -and (-not $loggingOnlyMode)) {
+				# All good
+			}
+			elseif (-not $enabled ) {
+				$message = "Feature disabled"
+				$audit = "False"
+			}
+			else {
+				$message = "Feature enabled, but check settings. Found: `n maxFailure: " `
+					+ $maxFailure + "`n entryExpiration: " `
+					+ $entryExpiration + "`n Only logging mode: " `
+					+ $loggingOnlyMode
+				$audit = "False"
+			}
+		}
+		catch {
+			$audit = "False"
+			$message = "Cannot get FTP Logon attempt settings"
+		}
+	}
+	else {
+		$message = "Skipped this benchmark - right now Web-Ftp-Server is not installed"
+		$audit = "None"
+	}
+
+	@{
+		Id      = "6.2"
+		Task    = "Ensure FTP Logon attempt restrictions is enabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+#endregion
+
+#region 7 Transport Encryption
+#
+# This section contains recommendations for configuring IIS protocols and cipher suites.
+
+# 7.1
+function Test-IISHSTSHeaderSet {
+	<#
+	.Synopsis
+		Ensure HSTS Header is set
+	.Description
+		HTTP Strict Transport Security (HSTS) allows a site to inform the user agent to communicate with the site only over HTTPS. This header takes two parameters: max-age, "specifies the number of seconds, after the reception of the STS header field, during which the user agent regards the host (from whom the message was received) as a Known HSTS Host [speaks only HTTPS]"; and includeSubDomains. includeSubDomains is an optional directive that defines how this policy is applied to subdomains. If includeSubDomains is included in the header, it provides the following definition: this HSTS Policy also applies to any hosts whose domain names are subdomains of the Known HSTS Host's domain name.
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration] $Configuration
+	)
+
+	process {
+		#Ensure $Configuration is not empty
+		if ($Configuration.RootSectionGroup) {
+			$message = "HSTS Header not set"
+			$audit = "False"
+
+			$path = "system.webServer/httpProtocol"
+			$section = $Configuration.GetSection($path)
+
+			[array]$customHeaders = $section.GetCollection("customHeaders") `
+			| Where-Object {
+				$name = $_ | Get-IISConfigAttributeValue -AttributeName "name"
+				$name -eq "Strict-Transport-Security"
+			}
+
+			if ($customHeaders.Count -eq 1) {
+				$value = $customHeaders[0] | Get-IISConfigAttributeValue -AttributeName "value"
+				$pattern = [regex]::new("max-age=(?<maxage>[0-9]*)")
+				$match = $pattern.Match($value)
+
+				if ($match.Success) {
+					[int]$maxAge = $match.Groups["maxage"].Value
+					if ($maxAge -eq 0) {
+						$message = "Max-age should be at least be higher than 0. It is recommended to set max-age to at least 480 seconds. Max-age is set at $maxAge"
+						$audit = "False"
+					}
+					elseif ($maxAge -lt 480) {
+						$message = "It is recommended to set max-age to at least 480 seconds. Max-age is set at $maxAge"
+						$audit = "Warning"
+					}
+					else {
+						$message = $MESSAGE_ALLGOOD + ". Max-age is set at $maxAge"
+						$audit = "True"
+					}
+				}
+			}
+		}
+		else {
+			$message = "Cannot read configuration file, the reference to the directory may not be correct or present"
+			$audit = "Warning"
+		}
+
+		@{
+			Id      = "7.1"
+			Task    = "Ensure HSTS Header is set"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+	}
+
+}
+
+# 7.2
+function Test-IISSSL2Disabled {
+	<#
+	.Synopsis
+		Ensure SSLv2 is disabled
+	.Description
+		This protocol is not considered cryptographically secure. Disabling it is recommended. This protocol is disabled by default if the registry key is not present. A reboot is required for these changes to be reflected.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0"
+
+	# SSL is disabled by default
+	# if $path exists, $path/server should also exist
+	if ((Test-Path $path) -and (Test-Path "$path\Server")) {
+		# Ensure the following key exists
+		$Key = Get-Item "$path\Server"
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty "$path\Server" | Select-Object -ExpandProperty "Enabled"
+			# Ensure it is set to 0
+			if ($value -ne 0) {
+				$message = "SSL 2.0 is enabled"
+				$audit = "False"
+			}
+		}
+	}
+
+	@{
+		Id      = "7.2"
+		Task    = "Ensure SSLv2 is disabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.3
+function Test-IISSSL3Disabled {
+	<#
+	.Synopsis
+		Ensure SSLv3 is disabled
+	.Description
+		This protocol is not considered cryptographically secure. Disabling it is recommended.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0"
+
+	# SSL is disabled by default
+	# if $path exists, $path/server should also exist
+	if ((Test-Path $path) -and (Test-Path "$path\Server")) {
+		# Ensure the following key exists
+		$Key = Get-Item "$path\Server"
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty "$path\Server" | Select-Object -ExpandProperty "Enabled"
+			# Ensure it is set to 0
+			if ($value -ne 0) {
+				$message = "SSL 3.0 is enabled"
+				$audit = "False"
+			}
+		}
+	}
+
+	@{
+		Id      = "7.3"
+		Task    = "Ensure SSLv3 is disabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.4
+function Test-IISTLSDisabled {
+	<#
+	.Synopsis
+		Ensure TLS 1.0 is disabled
+	.Description
+		The PCI Data Security Standard 3.1 recommends disabling "early TLS" along with SSL:
+
+		SSL and early TLS are not considered strong cryptography and cannot be used as a security control after June 30, 2016.
+	#>
+
+	$message = "TLS 1.0 is enabled"
+	$audit = "False"
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server"
+
+	# TLS 1.0 is enabled by default
+	if (Test-Path $path) {
+		# Ensure the following key exists
+		$Key = Get-Item $path
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "Enabled"
+			# Ensure it is set to 0
+			if ($value -eq 0) {
+				$message = $MESSAGE_ALLGOOD
+				$audit = "True"
+			}
+		}
+		elseif ($null -ne $Key.GetValue("DisabledByDefault", $null)) {
+			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "DisabledByDefault"
+			# Ensure it is set to 1
+			if ($value -eq 1) {
+				$message = $MESSAGE_ALLGOOD
+				$audit = "True"
+			}
+		}
+	}
+
+	@{
+		Id      = "7.4"
+		Task    = "Ensure TLS 1.0 is disabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.5
+function Test-IISTLS1_1Disabled {
+	<#
+	.Synopsis
+		Ensure TLS 1.1 is disabled
+	.Description
+		TLS 1.1 is required for backward compatibility. Ensure you fully test your application to ensure that backwards compatibility is not needed. If it is, build in exceptions as necessary for backwards compatibility.
+	#>
+
+	$message = "TLS 1.1 is enabled"
+	$audit = "False"
+
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server"
+
+	# TLS is enabled by default
+	if (Test-Path $path) {
+		# Ensure the following key exists
+		$Key = Get-Item $path
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "Enabled"
+			# Ensure it is set to 0
+			if ($value -eq 0) {
+				$message = $MESSAGE_ALLGOOD
+				$audit = "True"
+			}
+		}
+		elseif ($null -ne $Key.GetValue("DisabledByDefault", $null)) {
+			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "DisabledByDefault"
+			# Ensure it is set to 1
+			if ($value -eq 1) {
+				$message = $MESSAGE_ALLGOOD
+				$audit = "True"
+			}
+		}
+	}
+
+	@{
+		Id      = "7.5"
+		Task    = "Ensure TLS 1.1 is disabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.6
+function Test-IISTLS1_2Enabled {
+	<#
+	.Synopsis
+		Ensure TLS 1.2 is enabled
+	.Description
+		TLS 1.2 is the most recent and mature protocol for protecting the confidentiality and integrity of HTTP traffic. Enabling TLS 1.2 is recommended. This protocol is enabled by default if the registry key is not present. As with any registry changes, a reboot is required for changes to take effect.
+	#>
+
+	$message = $MESSAGE_ALLGOOD
+	$audit = "True"
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2"
+
+	# if $path exists, $path/server should also exist
+	# TLS 1.2 is enabled by default
+	if ((Test-Path $path) -and (Test-Path "$path\Server")) {
+		# Ensure the following key exists
+		$Key = Get-Item "$path\Server"
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty "$path\Server" | Select-Object -ExpandProperty "Enabled"
+			if ($value -ne 1) {
+				$message = "TLS 1.2 is disabled"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "TLS 1.2 is disabled"
+			$audit = "False"
+		}
+
+		if ($null -ne $Key.GetValue("DisabledByDefault", $null)) {
+			# Get-ItemProperty returns a [UInt32]
+			$value = Get-ItemProperty "$path\Server" | Select-Object -ExpandProperty "DisabledByDefault"
+			if ($value -ne 0) {
+				$message = "TLS 1.2 is disabled by default"
+				$audit = "False"
+			}
+		}
+		else {
+			$message = "TLS 1.2 is disabled"
+			$audit = "False"
+		}
+	}
+
+	@{
+		Id      = "7.6"
+		Task    = "Ensure TLS 1.2 is enabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.7
+function Test-IISNullCipherDisabled {
+	<#
+	.Synopsis
+		Ensure NULL Cipher Suites is disabled
+	.Description
+		The NULL cipher does not provide data confidentiality or integrity. It is recommended that the NULL cipher be disabled.
+	#>
+
+	$message = "NULL cipher is enabled"
+	$audit = "False"
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL\"
+
+	if (Test-Path $path) {
+		$Key = Get-Item $path
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "Enabled"
+			if ($value -eq 0) {
+				$message = $MESSAGE_ALLGOOD
+				$audit = "True"
+			}
+		}
+	}
+	else {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+	}
+
+	@{
+		Id      = "7.7"
+		Task    = "Ensure NULL Cipher Suites is disabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.8
+function Test-IISDESCipherDisabled {
+	<#
+	.Synopsis
+		Ensure DES Cipher Suites is disabled
+	.Description
+		DES is a weak symmetric-key cipher. It is recommended that it be disabled.
+	#>
+
+	$message = "DES cipher is enabled"
+	$audit = "False"
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56\"
+
+	if (Test-Path $path) {
+		$Key = Get-Item $path
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "Enabled"
+			if ($value -eq 0) {
+				$message = $MESSAGE_ALLGOOD
+				$audit = "True"
+			}
+		}
+	}
+	else {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+	}
+
+	@{
+		Id      = "7.8"
+		Task    = "Ensure DES Cipher Suites is disabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.9
+function Test-IISRC4CipherDisabled {
+	<#
+	.Synopsis
+		Ensure RC4 Cipher Suites is disabled
+	.Description
+		RC4 is a stream cipher that has known practical attacks. It is recommended that RC4 be disabled. The only RC4 cipher enabled by default on Server 2012 and 2012 R2 is RC4 128/128.
+	#>
+
+	$rc4Ciphers = @("RC4 40/128", "RC4 56/128", "RC4 64/128", "RC4 128/128")
+
+	$index = 1
+	foreach ($rc4Cipher in $rc4Ciphers) {
+		$message = "$rc4Cipher cipher is enabled"
+		$audit = "False"
+
+		$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\$rc4Cipher\"
+
+		if (Test-Path $path) {
+			$Key = Get-Item $path
+			if ($null -ne $Key.GetValue("Enabled", $null)) {
+				$value = Get-ItemProperty $path | Select-Object -ExpandProperty "Enabled"
+				if ($value -eq 0) {
+					$message = $MESSAGE_ALLGOOD
+					$audit = "True"
+				}
+			}
+		}
+		else {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+		}
+
+		@{
+			Id      = "7.9.$index"
+			Task    = "Ensure RC4 Cipher Suites is disabled"
+			Status  = $audit
+			Message = $message
+		} | Write-Output
+
+		$index++
+	}
+}
+
+# 7.10
+function Test-IISAES128Disabled {
+	<#
+	.Synopsis
+		Ensure AES 128/128 Cipher Suite is configured
+	.Description
+		Enabling AES 128/128 may be required for client compatibility. Enable or disable this cipher suite accordingly.
+	#>
+
+	$message = "AES 128/128 Cipher Suite is still enabled"
+	$audit = "False"
+
+	try {
+		# Get-ItemProperty returns a [UInt32]
+		$enabled = Get-ItemProperty "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128\" `
+			-ErrorAction Stop `
+		| Select-Object `
+			-ExpandProperty Enabled
+
+		if ($enabled -eq 0) {
+			$message = $MESSAGE_ALLGOOD
+			$audit = "True"
+		}
+
+	}
+	catch {
+		# do anything here
+	}
+
+	# If the key/value is not present,Triple AES 128/128 Cipher is disabled
+
+	@{
+		Id      = "7.10"
+		Task    = "Ensure AES 128/128 Cipher Suite is disabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.11
+function Test-IISAES256Enabled {
+	<#
+	.Synopsis
+		Ensure AES 256/256 Cipher Suite is enabled
+	.Description
+		AES 256/256 is the most recent and mature cipher suite for protecting the confidentiality and integrity of HTTP traffic. Enabling AES 256/256 is recommended. This is enabled by default on Server 2012 and 2012 R2.
+	#>
+
+	$message = "AES 256/256 Cipher is disabled"
+	$audit = "False"
+
+	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256\"
+
+	if (Test-Path $path) {
+		$Key = Get-Item $path
+		if ($null -ne $Key.GetValue("Enabled", $null)) {
+			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "Enabled"
+			if ($value -eq 1) {
+				$message = $MESSAGE_ALLGOOD
+				$audit = "True"
+			}
+		}
+	}
+	else {
+		$message = $MESSAGE_ALLGOOD
+		$audit = "True"
+	}
+
+	@{
+		Id      = "7.11"
+		Task    = "Ensure AES 256/256 Cipher Suite is enabled"
+		Status  = $audit
+		Message = $message
+	} | Write-Output
+}
+
+# 7.12
+function Test-IISTLSCipherOrder {
+	<#
+	.Synopsis
+		Ensure TLS Cipher Suite ordering is configured
+	.Description
+		Cipher suites are a named combination of authentication, encryption, message authentication code, and key exchange algorithms used for the security settings of a network connection using TLS protocol. Clients send a cipher list and a list of ciphers that it supports in order of preference to a server. The server then replies with the cipher suite that it selects from the client cipher suite list.
+	#>
+	$task = "Ensure TLS Cipher Suite ordering is correctly configured"
+	$id = "7.12"
+	try {
+		$regValue = Get-ItemProperty -ErrorAction Stop `
+		-Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002" `
+		-Name "Functions"
+		$reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+		$res = $regValue.Functions.GetType().Name
+
+		#check if correct type 
+		$typeTable = @{
+			"String" = "String Value"
+			"Byte" = "Byte Value"
+			"Int32" = "DWORD (32-bit) Value"
+			"Int64" = "QWORD (64-bit) Value"
+			"String[]" = "Multi-String Value"
+		}
+
+		$currentType = $typeTable[$res]
+		if ($res -ne [String]) {
+			@{
+                Id      = $id
+                Task    = $task
+                Status = "False"
+				Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'String Value'"
+            } | Write-Output
+		}
+
+		#check if insecure or weak cipher is inside value
+		$regValues = $regValue.Split(',')
+		$regValues = $regValues -replace ' ', ''
+		$weakRulesFound = @()
+		$insecureRulesFound = @()
+		foreach($element in $regValues){
+			if($listOfWeakCipherSuites.Contains($element)){
+				$weakRulesFound += $element
+			}
+			if($listOfInsecureCipherSuites.Contains($element)){
+				$insecureRulesFound += $element
+			}
+		}
+		#Default status
+		$status = "Error"
+		
+		#Output
+		$verbInsecure = "rules have"
+		$verbWeak = "rules have"
+		if($insecureRulesFound.Count -eq 1){$verbInsecure = "rule has"}
+		if($weakRulesFound.Count -eq 1){$verbWeak = "rule has"}
+		$insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+		$weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+
+		#Preparing message
+		foreach($member in $weakRulesFound){
+			$status = "Warning"
+			$weakMessage += "$($member)<br/>"
+		}          
+		foreach($member in $insecureRulesFound){
+			$status = "False"
+			$insecureMessage += "$($member)<br/>"
+		}          
+		#Combine or shorten message
+		if($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0){
+			$message = ""
+			if($weakRulesFound.Count -eq 0){ $weakMessage = "" }
+			if($insecureRulesFound.Count -eq 0){ $insecureMessage = "" }
+
+			$message = $insecureMessage + $weakMessage
+			@{
+                Id      = $id
+                Task    = $task
+                Status  = $status
+                Message = $message
+            } | Write-Output
+		}
+
+		if ($regValue -ne $reference) {
+			@{
+				Id      = $id
+				Task    = $task
+				Status  = "True"
+				Message = "Compliant"
+			} | Write-Output
+		}
+	}
+	catch {
+		$regValue = Get-ItemProperty -ErrorAction Stop `
+		-Path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\SSL\00010002" `
+		-Name "Functions"
+		$reference = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+		$res = $regValue.Functions.GetType().Name
+
+		#check if correct type 
+		$typeTable = @{
+			"String" = "String Value"
+			"Byte" = "Byte Value"
+			"Int32" = "DWORD (32-bit) Value"
+			"Int64" = "QWORD (64-bit) Value"
+			"String[]" = "Multi-String Value"
+		}
+
+		$currentType = $typeTable[$res]
+		if ($res -ne [String[]]) {
+			@{
+                Id      = $id
+                Task    = $task
+                Status = "False"
+                Message = "Wrong Registry type! Registry type is '$currentType'. Expected: 'Multi-String Value'"
+            } | Write-Output
+		}
+
+		#check if insecure or weak cipher is inside value
+		$regValues = $regValue -replace ' ', ''
+		$weakRulesFound = @()
+		$insecureRulesFound = @()
+		foreach($element in $regValues){
+			if($listOfWeakCipherSuites.Contains($element)){
+				$weakRulesFound += $element
+			}
+			if($listOfInsecureCipherSuites.Contains($element)){
+				$insecureRulesFound += $element
+			}
+		}
+		#Default status
+		$status = "Error"
+		
+		#Output
+		$verbInsecure = "rules have"
+		$verbWeak = "rules have"
+		if($insecureRulesFound.Count -eq 1){$verbInsecure = "rule has"}
+		if($weakRulesFound.Count -eq 1){$verbWeak = "rule has"}
+		$insecureMessage = "$($insecureRulesFound.Count) insecure $($verbInsecure) been found! List of insecure rules: <br/>"
+		$weakMessage = "$($weakRulesFound.Count) weak $($verbWeak) been found! List of weak rules: <br/>"
+
+		#Preparing message
+		foreach($member in $weakRulesFound){
+			$status = "Warning"
+			$weakMessage += "$($member)<br/>"
+		}          
+		foreach($member in $insecureRulesFound){
+			$status = "False"
+			$insecureMessage += "$($member)<br/>"
+		}          
+		#Combine or shorten message
+		if($insecureRulesFound.Count -gt 0 -or $weakRulesFound.Count -gt 0){
+			$message = ""
+			if($weakRulesFound.Count -eq 0){ $weakMessage = "" }
+			if($insecureRulesFound.Count -eq 0){ $insecureMessage = "" }
+
+			$message = $insecureMessage + $weakMessage
+			@{
+                Id      = $id
+                Task    = $task
+                Status  = $status
+                Message = $message
+            } | Write-Output
+		}
+
+		if ($regValue -ne $reference) {
+			@{
+                Id      = $id
+                Task    = $task
+				Status = "True"
+				Message = "Compliant"
+            } | Write-Output
+		}
+	}
+	
+    @{
+		Id      = $id
+		Task    = $task
+		Status  = "True"
+		Message = "Compliant"
+	} | Write-Output
+}
+
+
+#endregion
+
+#region Report Generation
+
+function Get-IIS10SystemReport {
+	# Section 1
+	Test-IISUniqueSiteAppPool
+
+	# Section 2
+	Test-IISPasswordFormatNotClearMachineLevel
+	Test-IISCredentialsNotStoredMachineLevel
+
+	# Section 3
+	Test-IISDeploymentMethodRetail
+	Test-IISAspNetTracingDisabledMachineLevel
+
+	# Section 4
+	Test-IISIsapisNotAllowed
+	Test-IISCgisNotAllowed
+
+	# Section 5
+	Test-IISAdvancedLoggingEnabled
+
+	# Section 6
+	Test-IISFtpRequestsEncrypted
+	Test-IISFtpLogonAttemptRestriction
+
+	# Section 7
+	Test-IISSSL2Disabled
+	Test-IISSSL3Disabled
+	Test-IISTLSDisabled
+	Test-IISTLS1_1Disabled
+	Test-IISTLS1_2Enabled
+	Test-IISNullCipherDisabled
+	Test-IISDESCipherDisabled
+	Test-IISRC4CipherDisabled
+	Test-IISAES128Disabled
+	Test-IISAES256Enabled
+	Test-IISTLSCipherOrder
+}
+
+function Get-IIS10ApplicationHostReport {
+	$Configuration = (Get-IISServerManager).GetApplicationHostConfiguration()
+
+	# Section 1
+	$Configuration | Test-IISDirectoryBrowsing
+	$Configuration | Test-IISAnonymouseUserIdentity
+
+	# Section 2
+	$Configuration | Test-IISGlobalAuthorization
+	$Configuration | Test-IISAuthenticatedPricipals
+	$Configuration | Test-IISFormsAuthenticationSSL
+	$Configuration | Test-IISFormsAuthenticationCookies
+	$Configuration | Test-IISFormsAuthenticationProtection
+	$Configuration | Test-IISPasswordFormatNotClear
+	$Configuration | Test-IISCredentialsNotStored
+
+	# Section 3
+	$Configuration | Test-IISDebugOff
+	$Configuration | Test-IISCustomErrorsNotOff
+	$Configuration | Test-IISHttpErrorsHidden
+	$Configuration | Test-IISAspNetTracingDisabled
+	$Configuration | Test-IISCookielessSessionState
+
+	# Section 4
+	$Configuration | Test-IISMaxAllowedContentLength
+	$Configuration | Test-IISMaxURLRequestFilter
+	$Configuration | Test-IISMaxQueryStringRequestFilter
+	$Configuration | Test-IISNonASCIICharURLForbidden
+	$Configuration | Test-IISRejectDoubleEncodedRequests
+	$Configuration | Test-IISHTTPTraceMethodeDisabled
+	$Configuration | Test-IISBlockUnlistedFileExtensions
+	$Configuration | Test-IISHandlerDenyWrite
+
+	# Section 5
+
+	# Section 6
+
+	# Section 7
+	$Configuration | Test-IISHSTSHeaderSet
+
+}
+
+function Get-VirtualPathAudit {
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Configuration]
+		$Configuration
+	)
+
+	process {
+		# Section 1
+		$Configuration | Test-IISDirectoryBrowsing
+		$Configuration | Test-IISAnonymouseUserIdentity
+
+		# Section 2
+		$Configuration | Test-IISGlobalAuthorization
+		$Configuration | Test-IISAuthenticatedPricipals
+		$Configuration | Test-IISFormsAuthenticationSSL
+		$Configuration | Test-IISFormsAuthenticationCookies
+		$Configuration | Test-IISFormsAuthenticationProtection
+		$Configuration | Test-IISPasswordFormatNotClear
+		$Configuration | Test-IISCredentialsNotStored
+
+		# Section 3
+		$Configuration | Test-IISDebugOff
+		$Configuration | Test-IISCustomErrorsNotOff
+		$Configuration | Test-IISHttpErrorsHidden
+		$Configuration | Test-IISAspNetTracingDisabled
+		$Configuration | Test-IISCookielessSessionState
+		$Configuration | Test-IISCookiesHttpOnly
+
+		# Section 4
+		$Configuration | Test-IISMaxAllowedContentLength
+		$Configuration | Test-IISMaxURLRequestFilter
+		$Configuration | Test-IISMaxQueryStringRequestFilter
+		$Configuration | Test-IISNonASCIICharURLForbidden
+		$Configuration | Test-IISRejectDoubleEncodedRequests
+		$Configuration | Test-IISHTTPTraceMethodeDisabled
+		$Configuration | Test-IISBlockUnlistedFileExtensions
+		$Configuration | Test-IISHandlerDenyWrite
+
+		# Section 5
+
+		# Section 6
+
+		# Section 7
+		$Configuration | Test-IISHSTSHeaderSet
+	}
+}
+
+function Get-SiteAudit {
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[Site]
+		$Site
+	)
+
+	process {
+		$AppPools = $Site.Applications.ApplicationPoolName | Sort-Object | Get-Unique | Get-IISAppPool
+
+		# Section 1
+		$Site | Test-IISVirtualDirPartition
+		$Site | Test-IISHostHeaders
+		$AppPools | Test-IISAppPoolIdentity
+
+		# Section 2
+		$Site | Test-IISTLSForBasicAuth
+
+		# Section 3
+		$Site | Test-IISMachineKeyValidation
+		$Site | Test-IISMachineKeyValidationV45
+		$Site | Test-IISDotNetTrustLevel
+
+		# Section 4
+		$Site | Test-IISDynamicIPRestrictionEnabled
+
+		# Section 5
+		$Site | Test-IISLogFileLocation
+		$Site | Test-IISETWLoggingEnabled
+
+		# Section 6
+		
+
+		# Section 7
+
+	}
+}
+
+function Get-IISHostInformation {
+	$infos = Get-CimInstance Win32_OperatingSystem
+	$disk = Get-CimInstance Win32_LogicalDisk | Where-Object -Property DeviceID -eq "C:"
+
+	$IISinstallPath = (Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\InetStp").Installpath
+
+	return [ordered]@{
+		"Hostname" = [System.Net.Dns]::GetHostByName(($env:computerName)).HostName
+		"Operating System" = $infos.Caption
+		"Build Number" = $infos.BuildNumber
+		"IIS Version" = (Get-ItemProperty -Path ("$IISinstallPath\w3wp.exe")).VersionInfo.ProductVersion
+		"Free physical memory (GB)" = "{0:N3}" -f ($infos.FreePhysicalMemory / 1MB)
+		"Free disk space (GB)" = "{0:N1}" -f ($disk.FreeSpace / 1GB)
+	}
+}
+
+[Report] @{
+	Title = "IIS 10 Benchmarks"
+	ModuleName = "ATAPAuditor"
+	BasedOn = "CIS Microsoft IIS 10 Benchmark, Version: 1.1.0, Date: 12-11-2018"
+	HostInformation = Get-IISHostInformation
+	Sections = @(
+		[ReportSection] @{
+			Title = "System Report"
+			AuditInfos = Get-IIS10SystemReport
+		}
+		[ReportSection] @{
+			Title = "ApplicationHost"
+			AuditInfos = Get-IIS10ApplicationHostReport
+		}
+		foreach ($Site in Get-IISSite) {
+			$VirtualPaths = $Site | Get-IISSiteVirtualPaths -AllVirtualDirectories
+
+			[ReportSection] @{
+				Title = "Full site report for: $($Site.Name)"
+				AuditInfos = $Site | Get-SiteAudit
+				SubSections = @(
+					foreach ($VirtualPath in $VirtualPaths) {
+						$Configuration = (Get-IISServerManager).GetWebConfiguration($Site.Name, $VirtualPath)
+
+						[ReportSection]@{
+							Title = "Report for: $VirtualPath"
+							AuditInfos = $Configuration | Get-VirtualPathAudit
+						}
+					}
+				)
+			}
+		}
+	)
+}
+#endregion
diff --git a/ATAPAuditor/Reports/Microsoft Internet Explorer 11.ps1 b/ATAPAuditor/Reports/Microsoft Internet Explorer 11.ps1
new file mode 100644
index 0000000..3866b12
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Internet Explorer 11.ps1	
@@ -0,0 +1,41 @@
+[Report] @{
+	Title = 'Internet Explorer 11 Audit Report'
+	ModuleName = 'ATAPAuditor'
+	BasedOn = @(
+		'CIS Microsoft Internet Explorer 11 Benchmark, Version: 1.0.0, Date: 2014-12-01'
+		'Microsoft Windows 10 Windows Server v2004 Security Baseline FINAL, Version: 2004, Date: 2020-08-04'
+		'DISA Microsoft Internet Explorer 11 Security Technical Implementation Guide, Version: V1R16, Date: 2018-06-08'
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Recommendations"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Internet Explorer 11-CIS-1.0.0#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "MS Recommendations"
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Internet Explorer 11-MS-2004#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "DISA Recommendations"
+			Description = "This section contains all DISA recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Internet Explorer 11-DISA-V1R16#RegistrySettings"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Office.ps1 b/ATAPAuditor/Reports/Microsoft Office.ps1
new file mode 100644
index 0000000..5084a8e
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Office.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+    Title      = 'Microsoft Office Audit Report'
+    ModuleName = 'ATAPAuditor'
+    BasedOn    = @(
+        'CIS Microsoft Office Enterprise Benchmark, Version: 1.2.0, Date: 2024-07-19'
+    )
+    Sections   = @(
+        [ReportSection] @{
+            Title       = "CIS Benchmarks"
+            Description = "This section contains all CIS recommendations"
+            SubSections = @(
+                [ReportSection] @{
+                    Title      = 'Registry Settings/Group Policies'
+                    AuditInfos = Test-AuditGroup "Microsoft Office Enterprise-CIS-1.2.0#RegistrySettings"
+                }
+            )
+        }
+    )
+}
diff --git a/ATAPAuditor/Reports/Microsoft SQL Server 2016.ps1 b/ATAPAuditor/Reports/Microsoft SQL Server 2016.ps1
new file mode 100644
index 0000000..db3aab4
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft SQL Server 2016.ps1	
@@ -0,0 +1,2754 @@
+[CmdletBinding(DefaultParameterSetName = "Default")]
+param(
+    [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+    [string]
+    $SqlInstance,
+
+    [string]
+    $MachineName = $env:COMPUTERNAME,
+
+    [Parameter(Mandatory = $true, ParameterSetName = "ByAuditInfo")]
+    [Hashtable[]]
+    $InstanceAudits
+)
+
+if (get-module -ListAvailable SQLPS) {
+    Import-Module SQLPS -Force
+}
+elseif (get-module -ListAvailable SQLServer) {
+    Import-Module SQLServer -Force
+}
+
+# CIS Microsoft SQL Server 2016 Benchmark
+# v1.0.0 - 08-11-2017
+#
+#
+
+
+#
+#
+# CIS Microsoft SQL Server 2016 Benchmark - Audit section
+#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+#
+
+
+#
+# 1 Installation, Updates and Patches
+#
+# This section contains recommendations related to installing and patching SQL Server.
+#
+
+
+#region 2 Surface Area Reduction
+#
+# SQL Server offers various configuration options, some of them can be controlled by the
+# sp_configure stored procedure. This section contains the listing of the corresponding recommendations.
+
+function Test-SQLAdHocDistributedQueriesDisabled {
+    <#
+.Synopsis
+   Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'.
+.DESCRIPTION
+   CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+   2.1 - Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'.
+
+   Enabling Ad Hoc Distributed Queries allows users to query data and execute statements on external data sources. This functionality should be disabled.
+
+   This feature can be used to remotely access and exploit vulnerabilities on remote SQL Server instances and to run unsafe Visual Basic for Application functions.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.1")
+    $obj | Add-Member NoteProperty Task("Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'Ad Hoc Distributed Queries';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + ",`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLClrEnabled {
+    <#
+.Synopsis
+   Ensure 'CLR Enabled' Server Configuration Option is set to '0'.
+.DESCRIPTION
+   CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+   2.2 - Ensure 'CLR Enabled' Server Configuration Option is set to '0'.
+
+   The clr enabled option specifies whether user assemblies can be run by SQL Server.
+
+   Enabling use of CLR assemblies widens the attack surface of SQL Server and puts it at risk from both inadvertent and malicious assemblies.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.2")
+    $obj | Add-Member NoteProperty Task("Ensure 'CLR Enabled' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'clr enabled';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLCrossDBOwnershipDisabled {
+    <#
+.Synopsis
+   Ensure 'Cross DB Ownership Chaining' Server Configuration Option is set to '0'.
+.DESCRIPTION
+   CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+   2.3 - Ensure 'Cross DB Ownership Chaining' Server Configuration Option is set to '0'
+
+   The cross db ownership chaining option controls cross-database ownership chaining
+
+    across all databases at the instance (or server) level.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.3")
+    $obj | Add-Member NoteProperty Task("Ensure 'Cross DB Ownership Chaining' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'cross db ownership chaining';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLDatabaseMailXPsDisabled {
+    <#
+.Synopsis
+   Ensure 'Database Mail XPs' Server Configuration Option is set to '0'.
+.DESCRIPTION
+   CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+   2.4 - Ensure 'Database Mail XPs' Server Configuration Option is set to '0'.
+
+   The Database Mail XPs option controls the ability to generate and transmit email messages from SQL Server.
+
+   Disabling the Database Mail XPs option reduces the SQL Server surface, eliminates a DOS attack vector and channel to exfiltrate data from the database server to a remote host.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.4")
+    $obj | Add-Member NoteProperty Task("Ensure 'Database Mail XPs' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'Database Mail XPs';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+
+    Write-Output $obj
+}
+
+function Test-SQLOleAutomationProceduresDisabled {
+    <#
+.Synopsis
+   Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'.
+.DESCRIPTION
+   CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+   2.5 - Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'.
+
+   The Ole Automation Procedures option controls whether OLE Automation objects can be instantiated within Transact-SQL batches. These are extended stored procedures that allow SQL Server users to execute functions external to SQL Server.
+
+   Disabling the Database Mail XPs option reduces the SQL Server surface, eliminates a DOS attack vector and channel to exfiltrate data from the database server to a remote host.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.5")
+    $obj | Add-Member NoteProperty Task("Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'Ole Automation Procedures';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLRemoteAccessDisabled {
+    <#
+.Synopsis
+   Ensure 'Remote Access' Server Configuration Option is set to '0'.
+.DESCRIPTION
+   CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+   2.6 - Ensure 'Remote Access' Server Configuration Option is set to '0'.
+
+   The remote access option controls the execution of local stored procedures on remote servers or remote stored procedures on local server.
+
+   Functionality can be abused to launch a Denial-of-Service (DoS) attack on remote servers by off-loading query processing to a target.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.6")
+    $obj | Add-Member NoteProperty Task("Ensure 'Remote Access' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'remote access';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use: " + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLRemoteAdminConnectionsDisabled {
+    <#
+.Synopsis
+    Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.7 - Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'
+
+    The remote admin connections option controls whether a client application on a remote computer can use the Dedicated Administrator Connection (DAC).
+
+     The Dedicated Administrator Connection (DAC) lets an administrator access a running server to execute diagnostic functions or Transact-SQL statements, or to troubleshoot
+    problems on the server, even when the server is locked or running in an abnormal state and not responding to a SQL Server Database Engine connection. In a cluster scenario, the
+    administrator may not actually be logged on to the same node that is currently hosting the SQL Server instance and thus is considered "remote". Therefore, this setting should usually
+    be enabled (1) for SQL Server failover clusters; otherwise it should be disabled (0) which is the default.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.7")
+    $obj | Add-Member NoteProperty Task("Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'remote admin connections' AND SERVERPROPERTY('IsClustered') = 0;"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLScanForStartupProcsDisabled {
+    <#
+.Synopsis
+    Ensure 'Scan For Startup Procs' Server Configuration Option is set to '0'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.8 - Ensure 'Scan For Startup Procs' Server Configuration Option is set to '0'.
+
+    The scan for startup procs option, if enabled, causes SQL Server to scan for and automatically run all stored procedures that are set to execute upon service startup.
+
+    Enforcing this control reduces the threat of an entity leveraging these facilities for malicious purposes.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.8")
+    $obj | Add-Member NoteProperty Task("Ensure 'Scan For Startup Procs' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'scan for startup procs';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLTrustworthyDatabaseOff {
+    <#
+.Synopsis
+    Ensure 'Trustworthy' Database Property is set to 'Off'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.9 - Ensure 'Trustworthy' Database Property is set to 'Off'.
+
+    The TRUSTWORTHY database option allows database objects to access objects in other databases under certain circumstances.
+
+    Provides protection from malicious CLR assemblies or extended procedures.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.9")
+    $obj | Add-Member NoteProperty Task("Ensure 'Trustworthy' Database Property is set to 'Off'")
+
+    $query = "SELECT name FROM sys.databases WHERE is_trustworthy_on = 1 AND name != 'msdb';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found $sqlResult.name")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLServerProtocolsDisabled {
+    <#
+.Synopsis
+    Ensure Unnecessary SQL Server Protocols are set to 'Disabled'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.10 - Ensure Unnecessary SQL Server Protocols are set to 'Disabled'.
+
+    SQL Server supports Shared Memory, Named Pipes, and TCP/IP protocols. However, SQL Server should be configured to use the bare minimum required based on the organization's needs.
+
+    Using fewer protocols minimizes the attack surface of SQL Server and, in some cases, can protect it from remote attacks.
+#>
+    [CmdletBinding()]
+    param(
+        [string] $SqlInstance = "MSSQLSERVER",
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.10")
+    $obj | Add-Member NoteProperty Task("Ensure Unnecessary SQL Server Protocols are set to 'Disabled'")
+
+    $protocols = "np", "sm", "tcp"
+    $smo = 'Microsoft.SqlServer.Management.Smo.'
+    $wmi = New-Object ($smo + 'Wmi.ManagedComputer')
+
+    try {
+        $singleWmi = $wmi | Where-Object {$_.Name -eq $machineName}
+        $foundProtocols = @()
+        foreach ($protocol in $protocols) {
+            $uri = "ManagedComputer[@Name='$machineName']/ServerInstance[@Name='$sqlInstance']/ServerProtocol[@Name='$protocol']"
+            $p = $singleWmi.GetsmoObject($uri)
+            if ($p.isEnabled) {
+                $foundProtocols += $p.displayName
+            }
+        }
+        [string]$s = $null
+        $s = $foundProtocols -join ", "
+
+        if ($foundProtocols.Count -eq 0) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        elseif ($foundProtocols.Count -eq 1) {
+            $obj | Add-Member NoteProperty Status("Only one Protocol is enabled: " + $s)
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        elseif ($foundProtocols.Count -eq 2) {
+            $obj | Add-Member NoteProperty Status("Following protocols are enabled: " + $s)
+            $obj | Add-Member NoteProperty Audit("Warning")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Following protocols are enabled: " + $s)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Mangement.Automation.MethodInvocationException] {
+        $obj | Add-Member NoteProperty Status("MachineName not found or sqlInstance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLUseNonStandardPorts {
+    <#
+.Synopsis
+    Ensure SQL Server is configured to use non-standard ports.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.11 - Ensure SQL Server is configured to use non-standard ports.
+
+    The TRUSTWORTHY database option allows database objects to access objects in other databases under certain circumstances.
+
+    Provides protection from malicious CLR assemblies or extended procedures.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.11")
+    $obj | Add-Member NoteProperty Task("Ensure SQL Server is configured to use non-standard ports")
+
+    $query = "DECLARE @value nvarchar(256);
+                EXECUTE master.dbo.xp_instance_regread
+                    N'HKEY_LOCAL_MACHINE',
+                    N'SOFTWARE\Microsoft\Microsoft SQL Server\MSSQLServer\SuperSocketNetLib\Tcp\IPAll',
+                    N'TcpPort',
+                    @value OUTPUT,
+                    N'no_output';
+                SELECT @value AS TCP_Port WHERE @value = '1433';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("TCP port 1433 in use")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLHideInstanceEnabled {
+    <#
+.Synopsis
+    Ensure 'Hide Instance' option is set to 'Yes' for Production SQL Server instances.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.12 - Ensure 'Hide Instance' option is set to 'Yes' for Production SQL Server instances.
+
+    Non-clustered SQL Server instances within production environments should be designated as hidden to prevent advertisement by the SQL Server Browser service.
+
+    Designating production SQL Server instances as hidden leads to a more secure installation because they cannot be enumerated. However, clustered instances may break if this option is selected.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.12")
+    $obj | Add-Member NoteProperty Task("Ensure 'Hide Instance' option is set to 'Yes' for Production SQL Server instances")
+
+    $query = "DECLARE @getValue INT;
+                EXEC master..xp_instance_regread
+                @rootkey = N'HKEY_LOCAL_MACHINE',
+                @key = N'SOFTWARE\Microsoft\Microsoft SQL Server\MSSQLServer\SuperSocketNetLib',
+                @value_name = N'HideInstance',
+                @value = @getValue OUTPUT;
+                SELECT @getValue AS Hide_Instance;"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $sqlResult.Hide_Instance -eq 1 ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Instance not hidden")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLSaLoginAccountDisabled {
+    <#
+.Synopsis
+    Ensure the 'sa' Login Account is set to 'Disabled'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.13 - Ensure the 'sa' Login Account is set to 'Disabled'.
+
+    The sa account is a widely known and often widely used SQL Server account with sysadmin privileges. This is the original login created during installation and always has the principal_id=1 and sid=0x01.
+
+    Enforcing this control reduces the probability of an attacker executing brute force attacks against a well-known principal.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.13")
+    $obj | Add-Member NoteProperty Task("Ensure the 'sa' Login Account is set to 'Disabled'")
+
+    $query = "SELECT name, is_disabled FROM sys.server_principals WHERE sid = 0x01 AND is_disabled = 0;"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("SA Login Account enabled")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLSaLoginAccountRenamed {
+    <#
+.Synopsis
+    Ensure the 'sa' Login Account has been renamed.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.14 - Ensure the 'sa' Login Account has been renamed.
+
+    The sa account is a widely known and often widely used SQL Server account with sysadmin privileges. This is the original login created during installation and always has the principal_id=1 and sid=0x01.
+
+    It is more difficult to launch password-guessing and brute-force attacks against the sa login if the name is not known.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.14")
+    $obj | Add-Member NoteProperty Task(" Ensure the 'sa' Login Account has been renamed")
+
+    $query = "SELECT name FROM sys.server_principals WHERE sid = 0x01"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ($sqlResult.name -ne "sa") {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("SA Login Account not renamed")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLXpCommandShellDisabled {
+    <#
+.Synopsis
+    Ensure 'xp_cmdshell' Server Configuration Option is set to '0'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.15 - Ensure 'xp_cmdshell' Server Configuration Option is set to '0'.
+
+    The xp_cmdshell option controls whether the xp_cmdshell extended stored procedure can be used by an authenticated SQL Server user to execute operating-system command shell commands and return results as rows within the SQL client.
+
+    The xp_cmdshell procedure is commonly used by attackers to read or write data to/from the underlying Operating System of a database server.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.15")
+    $obj | Add-Member NoteProperty Task("Ensure 'xp_cmdshell' Server Configuration Option is set to '0'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use FROM sys.configurations WHERE name = 'xp_cmdshell';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( ($sqlResult.value_configured -eq 0) -and ($sqlResult.value_in_use -eq 0) ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Values do not match, found: `n value_configured: " + $sqlResult.value_configured + "`n value_in_use:" + $sqlResult.value_in_use)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLAutoCloseOff {
+    <#
+.Synopsis
+    Ensure 'AUTO_CLOSE' is set to 'OFF' on contained databases.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.16 - Ensure 'AUTO_CLOSE' is set to 'OFF' on contained databases.
+
+    AUTO_CLOSE determines if a given database is closed or not after a connection terminates. If enabled, subsequent connections to the given database will require the database to be
+    reopened and relevant procedure caches to be rebuilt.
+
+    Because authentication of users for contained databases occurs within the database not at the server\instance level, the database must be opened every time to authenticate a user.
+    The frequent opening/closing of the database consumes additional server resources and may contribute to a denial of service.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.16")
+    $obj | Add-Member NoteProperty Task(" Ensure 'AUTO_CLOSE' is set to 'OFF' on contained databases")
+
+    $query = "SELECT name, containment, containment_desc, is_auto_close_on FROM sys.databases WHERE containment <> 0 and is_auto_close_on = 1;"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult.name) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("AUTO_CLOSE not set to OFF")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLNoSaAccounnt {
+    <#
+.Synopsis
+    Ensure no login exists with the name 'sa'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 2 Surface Area Reduction
+
+    2.17 - Ensure no login exists with the name 'sa'.
+
+    The sa login (e.g. principal) is a widely known and often widely used SQL Server account.Therefore, there should not be a login called sa even when the original sa login (principal_id = 1) has been renamed.
+
+    Enforcing this control reduces the probability of an attacker executing brute force attacks against a well-known principal name.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("2.17")
+    $obj | Add-Member NoteProperty Task("Ensure no login exists with the name 'sa'")
+
+    $query = "SELECT principal_id, name FROM sys.server_principals WHERE name = 'sa';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult.name) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found login with name 'sa'")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+#endregion
+
+#region 3 Authentication and Authorization
+#
+# This section contains recommendations related to SQL Server's authentication and authorization mechanisms.
+#
+
+function Test-SQLServerAuthentication {
+    <#
+.Synopsis
+    Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode'.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.1 - Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode'.
+
+    Uses Windows Authentication to validate attempted connections.
+
+    Windows provides a more robust authentication mechanism than SQL Server authentication.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("3.1")
+    $obj | Add-Member NoteProperty Task("Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode'")
+
+    $query = "SELECT SERVERPROPERTY('IsIntegratedSecurityOnly') as [login_mode];"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $sqlResult.login_mode -eq 1 ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        elseif ( $sqlResult.login_mode -eq 0 ) {
+            $obj | Add-Member NoteProperty Status("Login mode set to Mixed Mode Authentication")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("An unknown error occured")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLGuestPermissionOnDatabases {
+    <#
+.Synopsis
+    Ensure CONNECT permissions on the 'guest' user is Revoked within all SQL Server databases excluding the master, msdb and tempdb.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.2 - Ensure CONNECT permissions on the 'guest' user is Revoked within all SQL Server databases excluding the master, msdb and tempdb.
+
+    Remove the right of the guest user to connect to SQL Server databases, except for master, msdb, and tempdb.
+
+    A login assumes the identity of the guest user when a login has access to SQL Server but does not have access to a database through its own account and the database has a guest
+    user account. Revoking the CONNECT permission for the guest user will ensure that a login is not able to access database information without explicit access to do so.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $databases = Get-SqlDatabase -ServerInstance $instanceName -ErrorAction Stop | Select-Object -ExpandProperty name
+        }
+        else {
+            $databases = Get-SqlDatabase -ServerInstance $MachineName -ErrorAction Stop | Select-Object -ExpandProperty name
+        }
+
+        $databases = {$databases}.Invoke()
+        if ($databases.Remove("master")) {
+        }
+        if ($databases.Remove("msdb")) {
+        }
+        if ($databases.Remove("tempdb")) {
+        }
+        $index = 1
+
+        foreach ($database in $databases) {
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("3.2.$index")
+            $obj | Add-Member NoteProperty Task("Ensure CONNECT permissions on the 'guest' user is revoked for database $database")
+            $query = "USE [$database]; " + `
+                "SELECT DB_NAME() AS DatabaseName, 'guest' AS Database_User, [permission_name], [state_desc]
+                        FROM sys.database_permissions
+                        WHERE [grantee_principal_id] = DATABASE_PRINCIPAL_ID('guest')
+                        AND [state_desc] LIKE 'GRANT%'
+                        AND [permission_name] = 'CONNECT'
+                        AND DB_NAME() NOT IN ('master','tempdb','msdb');"
+
+            try {
+                if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+                }
+                else {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+                }
+
+                if ( $null -eq $sqlResult ) {
+                    $obj | Add-Member NoteProperty Status("All good")
+                    $obj | Add-Member NoteProperty Audit("True")
+                }
+                else {
+                    $obj | Add-Member NoteProperty Status("Got $sqlResult")
+                    $obj | Add-Member NoteProperty Audit("False")
+                }
+            }
+            catch [System.Data.SqlClient.SqlException] {
+                $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+                $obj | Add-Member NoteProperty Audit("Warning")
+            }
+            Write-Output $obj
+
+            $index++
+        }
+    }
+    catch {
+        $obj = New-Object PSObject
+        $obj | Add-Member NoteProperty ID("3.2")
+        $obj | Add-Member NoteProperty Task("Ensure CONNECT permissions on the 'guest' user is revoked for database $database")
+        $obj | Add-Member NoteProperty Status("Failed to connect to server $instanceName")
+        $obj | Add-Member NoteProperty Audit("Warning")
+        Write-Output $obj
+    }
+}
+
+function Test-SQLDropOrphanedUsers {
+    <#
+.Synopsis
+    Ensure 'Orphaned Users' are Dropped From SQL Server Databases.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.3 - Ensure 'Orphaned Users' are Dropped From SQL Server Databases.
+
+    A database user for which the corresponding SQL Server login is undefined or is incorrectly defined on a server instance cannot log in to the instance and is referred to as orphaned and should be removed.
+
+    Orphan users should be removed to avoid potential misuse of those broken users in any way.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $databases = Get-SqlDatabase -ServerInstance $instanceName -ErrorAction Stop | Select-Object -ExpandProperty name
+        }
+        else {
+            $databases = Get-SqlDatabase -ServerInstance $MachineName -ErrorAction Stop | Select-Object -ExpandProperty name
+        }
+
+        $index = 1
+
+        foreach ($database in $databases) {
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("3.3.$index")
+            $obj | Add-Member NoteProperty Task("Ensure 'Orphaned Users' are dropped for database $database")
+
+            $query = "USE [$database];
+                        GO
+                        EXEC sp_change_users_login @Action='Report';"
+
+            try {
+                if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+                }
+                else {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+                }
+
+                if ( $null -eq $sqlResult ) {
+                    $obj | Add-Member NoteProperty Status("All good")
+                    $obj | Add-Member NoteProperty Audit("True")
+                }
+                else {
+                    $obj | Add-Member NoteProperty Status("Got $sqlResult")
+                    $obj | Add-Member NoteProperty Audit("False")
+                }
+            }
+            catch [System.Data.SqlClient.SqlException] {
+                $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+                $obj | Add-Member NoteProperty Audit("Warning")
+            }
+
+            Write-Output $obj
+
+            $index++
+        }
+    }
+    catch {
+        $obj = New-Object PSObject
+        $obj | Add-Member NoteProperty ID("3.3")
+        $obj | Add-Member NoteProperty Task("Ensure 'Orphaned Users' are dropped for database $database")
+        $obj | Add-Member NoteProperty Status("Failed to connect to server $instanceName")
+        $obj | Add-Member NoteProperty Audit("Warning")
+        Write-Output $obj
+    }
+}
+
+function Test-SQLAuthenticationDisabled {
+    <#
+.Synopsis
+    Ensure SQL Authentication is not used in contained databases.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.4 - Ensure SQL Authentication is not used in contained databases.
+
+    Contained databases do not enforce password complexity rules for SQL Authenticated users.
+
+    The absence of an enforced password policy may increase the likelihood of a weak credential being established in a contained database.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $databases = Get-SqlDatabase -ServerInstance $instanceName -ErrorAction Stop | Select-Object -ExpandProperty name
+        }
+        else {
+            $databases = Get-SqlDatabase -ServerInstance $MachineName -ErrorAction Stop | Select-Object -ExpandProperty name
+        }
+
+        if ($databases.Count -eq 0) {
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("7.1")
+            $obj | Add-Member NoteProperty Task("Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databases")
+            $obj | Add-Member NoteProperty Status("No databases found")
+            $obj | Add-Member NoteProperty Audit("Warning")
+            Write-Output $obj
+        }
+
+        $index = 1
+
+        foreach ($database in $databases) {
+
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("3.4.$index")
+            $obj | Add-Member NoteProperty Task("Ensure SQL Authentication is not used for database $database")
+
+            $query = "USE [$database];
+                            GO
+                            SELECT name AS DBUser
+                            FROM sys.database_principals
+                            WHERE name NOT IN ('dbo','Information_Schema','sys','guest')
+                            AND type IN ('U','S','G')
+                            AND authentication_type = 2;
+                            GO"
+
+            try {
+                if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+                }
+                else {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+                }
+
+                if ( $null -eq $sqlResult ) {
+                    $obj | Add-Member NoteProperty Status("All good")
+                    $obj | Add-Member NoteProperty Audit("True")
+                }
+                else {
+                    $obj | Add-Member NoteProperty Status("Got $sqlResult")
+                    $obj | Add-Member NoteProperty Audit("False")
+                }
+            }
+            catch [System.Data.SqlClient.SqlException] {
+                $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+                $obj | Add-Member NoteProperty Audit("Warning")
+            }
+
+            Write-Output $obj
+
+            $index++
+        }
+    }
+    catch {
+        $obj = New-Object PSObject
+        $obj | Add-Member NoteProperty ID("3.4")
+        $obj | Add-Member NoteProperty Task("Ensure CONNECT permissions on the 'guest' user is revoked for database $database")
+        $obj | Add-Member NoteProperty Status("Ensure SQL Authentication is not used for database $database")
+        $obj | Add-Member NoteProperty Audit("Warning")
+        Write-Output $obj
+    }
+}
+
+function Test-SQLServerServiceAccountIsNotAnAdministrator {
+    <#
+.Synopsis
+    Ensure the SQL Server’s MSSQL Service Account is Not an Administrator
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.5 - Ensure the SQL Server’s MSSQL Service Account is Not an Administrator
+
+    The service account and/or service SID used by the MSSQLSERVER service for a default instance or MSSQL$<InstanceName> service for a named instance should not be a member of the Windows Administrator group either directly or indirectly (via a group). This also means that the account known as LocalSystem (aka NT AUTHORITY\SYSTEM) should not be used for the MSSQL service as this account has higher privileges than the SQL Server service requires.
+
+    Following the principle of least privilege, the service account should have no more privileges than required to do its job. For SQL Server services, the SQL Server Setup will assign the required permissions directly to the service SID. No additional permissions or privileges should be necessary.
+#>
+    [CmdletBinding()]
+    param(
+        [string] $MachineName = $env:COMPUTERNAME
+    )
+    $obj = New-Object psobject
+    $obj | Add-Member NoteProperty ID("3.5")
+    $obj | Add-Member NoteProperty Task("Ensure the SQL Server’s MSSQL Service Account is Not an Administrator")
+
+
+    $smo = 'Microsoft.SqlServer.Management.Smo.'
+    $wmi = New-Object ($smo + 'Wmi.ManagedComputer')
+    $singleWmi = $wmi | Where-Object {$_.Name -eq $machineName}
+    $sqlServer = $singleWmi.Services | Where-Object {$_.Type -eq "SqlServer"}
+    $serviceAccountNames = @()
+    foreach ($sqlS in $sqlServer) {
+        $serviceAccountNames += $sqlS.ServiceAccount.Substring($sqlS.serviceAccount.IndexOf("\") + 1 )
+    }
+
+    $ADSIComputer = [ADSI]("WinNT://$machineName,computer")
+    try {
+        $group = $ADSIComputer.psbase.children.find('Administrators', 'Group')
+    }
+    catch {
+        try {
+            $group = $ADSIComputer.psbase.children.find('Administratoren', 'Group')
+        }
+        catch [System.Mangement.Automation.MethodInvocationException] {
+            $obj | Add-Member NoteProperty Status("MachineName not found")
+            $obj | Add-Member NoteProperty Audit("Warning")
+            return Write-Output $obj
+        }
+    }
+
+    $members = $group.psbase.invoke("members")  | ForEach-Object {
+        $_.GetType().InvokeMember("Name", 'GetProperty', $null, $_, $null)
+    }
+    $admins = @()
+
+    foreach ($member in $members) {
+        try {
+            # Try if $member is a AD group and get all members of this group including all nested groups
+            $admins += (Get-ADGroupMember $member -Recursive | Select-Object -ExpandProperty SamAccountName)
+        }
+        catch {
+            # TODO catch unterscheiden nach nicht gefunden oder active directory Fehler
+            # If it is not a AD group, it has to be a local account, so add it (we assume local groups are not used inside the company)
+            $admins += $member
+        }
+    }
+    foreach ($serviceAccountName in $serviceAccountNames) {
+        foreach ($admin in $admins) {
+            if ($admin -eq $serviceAccountName) {
+                $sqlAdmins += $serviceAccountName
+            }
+        }
+    }
+    if ($null -eq $sqlAdmins) {
+        $obj | Add-Member NoteProperty Status("All good")
+        $obj | Add-Member NoteProperty Audit("True")
+    }
+    else {
+        $obj | Add-Member NoteProperty Status("Following service accounts are administrator: " + $sqlAdmins)
+        $obj | Add-Member NoteProperty Audit("False")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLAgentServiceAccountIsNotAnAdministrator {
+    <#
+.Synopsis
+    Ensure the SQL Server’s SQLAgent Service Account is Not an Administrator
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.6 - Ensure the SQL Server’s SQLAgent Service Account is Not an Administrator
+
+    The service account and/or service SID used by the SQLSERVERAGENT service for a default instance or SQLAGENT$<InstanceName> service for a named instance should not be a member of the Windows Administrator group either directly or indirectly (via a group). This also means that the account known as LocalSystem (aka NT AUTHORITY\SYSTEM) should not be used for the SQLAGENT service as this account has higher privileges than the SQL Server service requires.
+
+    Following the principle of least privilege, the service account should have no more privileges than required to do its job. For SQL Server services, the SQL Server Setup will assign the required permissions directly to the service SID. No additional permissions or privileges should be necessary.
+#>
+    [CmdletBinding()]
+    param(
+        [string] $MachineName = $env:COMPUTERNAME
+    )
+    $obj = New-Object psobject
+    $obj | Add-Member NoteProperty ID("3.6")
+    $obj | Add-Member NoteProperty Task("Ensure the SQL Server’s SQLAgent Service Account is Not an Administrator")
+
+    $smo = 'Microsoft.SqlServer.Management.Smo.'
+    $wmi = New-Object ($smo + 'Wmi.ManagedComputer')
+    $singleWmi = $wmi | Where-Object {$_.Name -eq $machineName}
+    $sqlAgent = $singleWmi.Services | Where-Object {$_.Type -eq "SqlAgent"}
+    $sqlAgentNames = @()
+    foreach ($sqlS in $sqlAgent) {
+        $sqlAgentNames += $sqlS.ServiceAccount.Substring($sqlS.serviceAccount.IndexOf("\") + 1 )
+    }
+
+    $ADSIComputer = [ADSI]("WinNT://$machineName,computer")
+
+    try {
+        $group = $ADSIComputer.psbase.children.find('Administrators', 'Group')
+    }
+    catch {
+        try {
+            $group = $ADSIComputer.psbase.children.find('Administratoren', 'Group')
+        }
+        catch [System.Mangement.Automation.MethodInvocationException] {
+            $obj | Add-Member NoteProperty Status("MachineName not found")
+            $obj | Add-Member NoteProperty Audit("Warning")
+            return Write-Output $obj
+        }
+    }
+
+    $members = $group.psbase.invoke("members")  | ForEach-Object {
+        $_.GetType().InvokeMember("Name", 'GetProperty', $null, $_, $null)
+    }
+    $admins = @()
+
+    foreach ($member in $members) {
+        try {
+            # Try if $member is a AD group and get all members of this group including all nested groups
+            $admins += (Get-ADGroupMember $member -Recursive | Select-Object -ExpandProperty SamAccountName)
+        }
+        catch {
+            # TODO catch unterscheiden nach nicht gefunden oder active directory Fehler
+            # If it is not a AD group, it has to be a local account, so add it (we assume local groups are not used inside the company)
+            $admins += $member
+        }
+    }
+    foreach ($sqlAgentName in $sqlAgentNames) {
+        foreach ($admin in $admins) {
+            if ($admin -eq $sqlAgentName) {
+                $sqlAdmins += $sqlAgentName
+            }
+        }
+    }
+    if ($null -eq $sqlAdmins) {
+        $obj | Add-Member NoteProperty Status("All good")
+        $obj | Add-Member NoteProperty Audit("True")
+    }
+    else {
+        $obj | Add-Member NoteProperty Status("Following service accounts are administrator: " + $sqlAdmins)
+        $obj | Add-Member NoteProperty Audit("False")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLFullTextServiceAccountIsNotAnAdministrator {
+    <#
+.Synopsis
+    Ensure the SQL Server’s Full-Text Service Account is Not an Administrator
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.7 - Ensure the SQL Server’s Full-Text Service Account is Not an Administrator
+
+    The service account and/or service SID used by the MSSQLFDLauncher service for a default instance or MSSQLFDLauncher$<InstanceName> service for a named instance should not be a member of the Windows Administrator group either directly or indirectly (via a group). This also means that the account known as LocalSystem (aka NT AUTHORITY\SYSTEM) should not be used for the Full-Text service as this account has higher privileges than the SQL Server service requires.
+
+    Following the principle of least privilege, the service account should have no more privileges than required to do its job. For SQL Server services, the SQL Server Setup will assign the required permissions directly to the service SID. No additional permissions or privileges should be necessary.
+#>
+    [CmdletBinding()]
+    param(
+        [string] $MachineName = $env:COMPUTERNAME
+    )
+    $obj = New-Object psobject
+    $obj | Add-Member NoteProperty ID("3.7")
+    $obj | Add-Member NoteProperty Task("Ensure the SQL Server’s Full-Text Service Account is Not an Administrator")
+
+    $smo = 'Microsoft.SqlServer.Management.Smo.'
+    $wmi = New-Object ($smo + 'Wmi.ManagedComputer')
+    $singleWmi = $wmi | Where-Object {$_.Name -eq $machineName}
+    $sqlServices = $singleWmi.Services | Where-Object {$_.Type -eq "9"}
+    $sqlServiceNames = @()
+    foreach ($sqlS in $sqlServices) {
+        $sqlServiceNames += $sqlS.ServiceAccount.Substring($sqlS.serviceAccount.IndexOf("\") + 1 )
+    }
+
+    $ADSIComputer = [ADSI]("WinNT://$machineName,computer")
+
+    try {
+        $group = $ADSIComputer.psbase.children.find('Administrators', 'Group')
+    }
+    catch {
+        try {
+            $group = $ADSIComputer.psbase.children.find('Administratoren', 'Group')
+        }
+        catch [System.Mangement.Automation.MethodInvocationException] {
+            $obj | Add-Member NoteProperty Status("MachineName not found")
+            $obj | Add-Member NoteProperty Audit("Warning")
+            return Write-Output $obj
+        }
+    }
+
+    $members = $group.psbase.invoke("members")  | ForEach-Object {
+        $_.GetType().InvokeMember("Name", 'GetProperty', $null, $_, $null)
+    }
+    $admins = @()
+
+    foreach ($member in $members) {
+        try {
+            # Try if $member is a AD group and get all members of this group including all nested groups
+            $admins += (Get-ADGroupMember $member -Recursive | Select-Object -ExpandProperty SamAccountName)
+        }
+        catch {
+            # TODO catch unterscheiden nach nicht gefunden oder active directory Fehler
+            # If it is not a AD group, it has to be a local account, so add it (we assume local groups are not used inside the company)
+            $admins += $member
+        }
+    }
+    foreach ($sqlServiceName in $sqlServiceNames) {
+        foreach ($admin in $admins) {
+            if ($admin -eq $sqlServiceName) {
+                $sqlAdmins += $sqlServiceName
+            }
+        }
+    }
+    if ($null -eq $sqlAdmins) {
+        $obj | Add-Member NoteProperty Status("All good")
+        $obj | Add-Member NoteProperty Audit("True")
+    }
+    else {
+        $obj | Add-Member NoteProperty Status("Following service accounts are administrator: " + $sqlAdmins)
+        $obj | Add-Member NoteProperty Audit("False")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLPermissionsForRolePublic {
+    <#
+.Synopsis
+    Ensure only the default permissions specified by Microsoft are granted to the public server role.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.8 - Ensure only the default permissions specified by Microsoft are granted to the public server role.
+
+    public is a special fixed server role containing all logins. Unlike other fixed server roles, permissions can be changed for the public role. In keeping with the principle of least
+    privileges, the public server role should not be used to grant permissions at the server scope as these would be inherited by all users.
+
+    Every SQL Server login belongs to the public role and cannot be removed from this role. Therefore, any permissions granted to this role will be available to all logins unless they
+    have been explicitly denied to specific logins or user-defined server roles.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("3.8")
+    $obj | Add-Member NoteProperty Task("Ensure only the default permissions specified by Microsoft are granted to the public server role")
+
+    $query = "SELECT *
+                FROM master.sys.server_permissions
+                WHERE (grantee_principal_id = SUSER_SID(N'public') and state_desc LIKE
+                'GRANT%')
+                AND NOT (state_desc = 'GRANT' and [permission_name] = 'VIEW ANY DATABASE'
+                and class_desc = 'SERVER')
+                AND NOT (state_desc = 'GRANT' and [permission_name] = 'CONNECT' and
+                class_desc = 'ENDPOINT' and major_id = 2)
+                AND NOT (state_desc = 'GRANT' and [permission_name] = 'CONNECT' and
+                class_desc = 'ENDPOINT' and major_id = 3)
+                AND NOT (state_desc = 'GRANT' and [permission_name] = 'CONNECT' and
+                class_desc = 'ENDPOINT' and major_id = 4)
+                AND NOT (state_desc = 'GRANT' and [permission_name] = 'CONNECT' and
+                class_desc = 'ENDPOINT' and major_id = 5);"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found Permission:" + $sqlResult.permission_name)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLWindowsBuiltinNoSqlLogin {
+    <#
+.Synopsis
+    Ensure Windows BUILTIN groups are not SQL Logins.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.9 - Ensure Windows BUILTIN groups are not SQL Logins.
+
+    Prior to SQL Server 2008, the BUILTIN\Administrators group was added a SQL Server login with sysadmin privileges during installation by default. Best practices promote
+    creating an Active Directory level group containing approved DBA staff accounts and using this controlled AD group as the login with sysadmin privileges. The AD group should be
+    specified during SQL Server installation and the BUILTIN\Administrators group would therefore have no need to be a login.
+
+    The BUILTIN groups (Administrators, Everyone, Authenticated Users, Guests, etc.) generally contain very broad memberships which would not meet the best practice of ensuring only
+    necessary users have been granted access to a SQL Server instance. These groups should not be used for any level of access into a SQL Server Database Engine instance.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("3.9")
+    $obj | Add-Member NoteProperty Task("Ensure Windows BUILTIN groups are not SQL Logins")
+
+    $query = "SELECT pr.[name], pe.[permission_name], pe.[state_desc]
+                FROM sys.server_principals pr
+                JOIN sys.server_permissions pe
+                ON pr.principal_id = pe.grantee_principal_id
+                WHERE pr.name like 'BUILTIN%';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found Account(s):" + $sqlResult.name)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLWindowsLocalGroupsNoSqlLogin {
+    <#
+.Synopsis
+    Ensure Windows local groups are not SQL Logins.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.10 - Ensure Windows local groups are not SQL Logins.
+
+    Local Windows groups should not be used as logins for SQL Server instances.
+
+    Allowing local Windows groups as SQL Logins provides a loophole whereby anyone with OS level administrator rights (and no SQL Server rights) could add users to the local
+    Windows groups and thereby give themselves or others access to the SQL Server instance.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("3.10")
+    $obj | Add-Member NoteProperty Task("Ensure Windows local groups are not SQL Logins")
+
+    $query = "USE [master]
+                GO
+                SELECT pr.[name] AS LocalGroupName, pe.[permission_name], pe.[state_desc]
+                FROM sys.server_principals pr
+                JOIN sys.server_permissions pe
+                ON pr.[principal_id] = pe.[grantee_principal_id]
+                WHERE pr.[type_desc] = 'WINDOWS_GROUP'
+                AND pr.[name] like CAST(SERVERPROPERTY('MachineName') AS nvarchar) + '%';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found Group(s):" + $sqlResult.LocalGroupName)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLPublicRoleMsdbDatabase {
+    <#
+.Synopsis
+    Ensure the public role in the msdb database is not granted access to SQL Agent proxies.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 3  Authentication and Authorization
+
+    3.11 - Ensure the public role in the msdb database is not granted access to SQL Agent proxies.
+
+    Local Windows groups should not be used as logins for SQL Server instances.
+
+    Allowing local Windows groups as SQL Logins provides a loophole whereby anyone with OS level administrator rights (and no SQL Server rights) could add users to the local
+    Windows groups and thereby give themselves or others access to the SQL Server instance.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("3.11")
+    $obj | Add-Member NoteProperty Task("Ensure the public role in the msdb database is not granted access to SQL Agent proxies")
+
+    $query = "USE [msdb]
+                GO
+                SELECT sp.name AS proxyname
+                FROM dbo.sysproxylogin spl
+                JOIN sys.database_principals dp
+                ON dp.sid = spl.sid
+                JOIN sysproxies sp
+                ON sp.proxy_id = spl.proxy_id
+                WHERE principal_id = USER_ID('public');
+                GO"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found:" + $sqlResult.proxyname)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+#endregion
+
+#region 4 Password Policies
+#
+# This section contains recommendations related to SQL Server's password policies.
+#
+
+function Test-SQLMustChangeOptionIsOn {
+    <#
+.Synopsis
+    Ensure the public role in the msdb database is not granted access to SQL Agent proxies.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 4  Password Policies
+
+    4.1 - Ensure 'MUST_CHANGE' Option is set to 'ON' for All SQL Authenticated Logins.
+
+    Whenever this option is set to ON, SQL Server will prompt for an updated password the first time the new or altered login is used.
+
+    Enforcing a password change after a reset or new login creation will prevent the account administrators or anyone accessing the initial password from misuse of the SQL login created without being noticed.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("4.1")
+    $obj | Add-Member NoteProperty Task("Ensure 'MUST_CHANGE' Option is set to 'ON' for All SQL Authenticated Logins")
+
+    $query = "SELECT name, create_date
+                FROM sys.sql_logins"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlLogins = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlLogins = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        $mustChangeLogins = @()
+        foreach ($sqlLogin in $sqlLogins) {
+            $loginName = $sqlLogin.name
+            $query2 = "SELECT LOGINPROPERTY('$loginName', 'PasswordLastSetTime') AS 'PasswordLastSetTime'"
+
+            if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $SqlInstance -ne "MSSQLSERVER") {
+                $loginProperty = Invoke-Sqlcmd -Query $query2 -ServerInstance $instanceName -ErrorAction Stop
+            }
+            else {
+                $loginProperty = Invoke-Sqlcmd -Query $query2 -ServerInstance $MachineName -ErrorAction Stop
+            }
+
+            if ((Get-Date $sqlLogin.create_date) -gt (Get-Date $loginProperty.PasswordLastSetTime)) {
+                $mustChangeLogins += $sqlLogin
+            }
+        }
+        if ($mustChangeLogins.Count -gt 0) {
+            $obj | Add-Member NoteProperty Status("Following Logins Must Change their password: " + $mustChangeLogins.name)
+            $obj | Add-Member NoteProperty Audit("False")
+
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+
+    Write-Output $obj
+}
+
+function Test-SQLCheckExpirationOptionOn {
+    <#
+.Synopsis
+    Ensure the public role in the msdb database is not granted access to SQL Agent proxies.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 4  Password Policies
+
+    4.2 - Ensure 'CHECK_EXPIRATION' Option is set to 'ON' for All SQL Authenticated Logins Within the Sysadmin Role.
+
+    Applies the same password expiration policy used in Windows to passwords used inside SQL Server.
+
+    Ensuring SQL logins comply with the secure password policy applied by the Windows Server Benchmark will ensure the passwords for SQL logins with sysadmin privileges are
+    changed on a frequent basis to help prevent compromise via a brute force attack. CONTROL SERVER is an equivalent permission to sysadmin and logins with that permission should
+    also be required to have expiring passwords.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("4.2")
+    $obj | Add-Member NoteProperty Task("Ensure 'CHECK_EXPIRATION' Option is set to 'ON' for All SQL Authenticated Logins Within the Sysadmin Role")
+
+    $query = "SELECT l.[name], 'sysadmin membership' AS 'Access_Method'
+                FROM sys.sql_logins AS l
+                WHERE IS_SRVROLEMEMBER('sysadmin',name) = 1
+                AND l.is_expiration_checked <> 1
+                UNION ALL
+                SELECT l.[name], 'CONTROL SERVER' AS 'Access_Method'
+                FROM sys.sql_logins AS l
+                JOIN sys.server_permissions AS p
+                ON l.principal_id = p.grantee_principal_id
+                WHERE p.type = 'CL' AND p.state IN ('G', 'W')
+                AND l.is_expiration_checked <> 1;"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+        [string]$s = $null
+        $s = $sqlResult -join ", "
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found missmatching account(s): " + $s.name)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLCheckPolicyOptionOn {
+    <#
+.Synopsis
+    Ensure 'CHECK_POLICY' Option is set to 'ON' for All SQL Authenticated Logins.
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 4  Password Policies
+
+    4.3 - Ensure 'CHECK_POLICY' Option is set to 'ON' for All SQL Authenticated Logins.
+
+    Applies the same password complexity policy used in Windows to passwords used inside SQL Server.
+
+    Ensure SQL authenticated login passwords comply with the secure password policy applied by the Windows Server Benchmark so that they cannot be easily compromised via brute
+    force attack.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("4.3")
+    $obj | Add-Member NoteProperty Task("Ensure 'CHECK_POLICY' Option is set to 'ON' for All SQL Authenticated Logins")
+
+    $query = "SELECT name, is_disabled
+                FROM sys.sql_logins
+                WHERE is_policy_checked = 0;"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ( $null -eq $sqlResult ) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Found missmatching account(s):" + $sqlResult.name)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+#endregion
+
+#region 5 Auditing and Logging
+#
+#This section contains recommendations related to SQL Server's audit and logging mechanisms.
+#
+
+function Test-SQLMaximumNumberOfErrorLogFiles {
+    <#
+    .Synopsis
+        Ensure 'Maximum number of error log files' is set to greater than or equal to '12'
+    .DESCRIPTION
+        CIS SQL Server 2016 Benchmark - 5 Auditing and Logging
+
+        5.1 Ensure 'Maximum number of error log files' is set to greater than or equal to '12'
+
+        SQL Server error log files must be protected from loss. The log files must be backed up before they are overwritten. Retaining more error logs helps prevent loss from frequent recycling before backups can occur.
+
+        The SQL Server error log contains important information about major server events and login attempt information as well.
+    #>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("5.1")
+    $obj | Add-Member NoteProperty Task("Ensure 'Maximum number of error log files' is set to greater than or equal to '12'")
+
+    $query = "DECLARE @NumErrorLogs int;
+    EXEC master.sys.xp_instance_regread
+    N'HKEY_LOCAL_MACHINE',
+    N'Software\Microsoft\MSSQLServer\MSSQLServer',
+    N'NumErrorLogs', @NumErrorLogs OUTPUT;
+     SELECT ISNULL(@NumErrorLogs, -1) AS [NumberOfLogFiles];"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        $numberOfLogFiles = $sqlResult.NumberOfLogFiles
+
+        if ($numberOfLogFiles -ge 12) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Maximum number of error log files is set to $numberOfLogFiles")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLDefaultTraceEnabled {
+    <#
+    .Synopsis
+        Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'
+    .DESCRIPTION
+        CIS SQL Server 2016 Benchmark - 5 Auditing and Logging
+
+        5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'
+
+        The default trace provides audit logging of database activity including account creations, privilege elevation and execution of DBCC commands.
+
+        Default trace provides valuable audit information regarding security-related activities on the server.
+    #>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("5.2")
+    $obj | Add-Member NoteProperty Task("Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'")
+
+    $query = "SELECT name, CAST(value as int) as value_configured, CAST(value_in_use as int) as value_in_use
+    FROM sys.configurations
+    WHERE name = 'default trace enabled';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if (($sqlResult.value_configured -eq 1) -and ($sqlResult.value_in_use -eq 1)) {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("Maximum number of error log files too high")
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLLoginAuditingIsSetToFailedLogins {
+    <#
+    .Synopsis
+        Ensure 'Login Auditing' is set to 'failed logins'
+    .DESCRIPTION
+        CIS SQL Server 2016 Benchmark - 5 Auditing and Logging
+
+        5.3 Ensure 'Login Auditing' is set to 'failed logins'
+
+        This setting will record failed authentication attempts for SQL Server logins to the SQL Server Errorlog. This is the default setting for SQL Server.
+        Default trace provides valuable audit information regarding security-related activities on the server.
+        Historically, this setting has been available in all versions and editions of SQL Server. Prior to the availability of SQL Server Audit, this was the only provided mechanism for capturing logins (successful or failed).
+
+        Capturing failed logins provides key information that can be used to detect\confirm password guessing attacks. Capturing successful login attempts can be used to confirm server access during forensic investigations, but using this audit level setting to also capture successful logins creates excessive noise in the SQL Server Errorlog which can hamper a DBA trying to troubleshoot problems. Elsewhere in this benchmark, we recommend using the newer lightweight SQL Server Audit feature to capture both successful and failed logins.
+    #>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("5.3")
+    $obj | Add-Member NoteProperty Task("Ensure 'Login Auditing' is set to 'failed logins'")
+
+    $query = "EXEC xp_loginconfig 'audit level';"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        if ($sqlResult.config_value -eq "failure") {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("config_value is set to: " + $sqlResult.config_value)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+
+function Test-SQLLoginAuditingIsSetToFailedAndSuccessfulLogins {
+    <#
+    .Synopsis
+        Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins'
+    .DESCRIPTION
+        CIS SQL Server 2016 Benchmark - 5 Auditing and Logging
+
+        5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins'
+
+        SQL Server Audit is capable of capturing both failed and successful logins and writing them to one of three places: the application event log, the security event log, or the file system. We will use it to capture any login attempt to SQL Server, as well as any attempts to change audit policy. This will also serve to be a second source to record failed login attempts.
+
+        By utilizing Audit instead of the traditional setting under the Security tab to capture successful logins, we reduce the noise in the ERRORLOG. This keeps it smaller and easier to read for DBAs who are attempting to troubleshoot issues with the SQL Server. Also, the Audit object can write to the security event log, though this requires operating system configuration. This gives an additional option for where to store login events, especially in conjunction with an SIEM.
+    #>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("5.4")
+    $obj | Add-Member NoteProperty Task("Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins'")
+
+    $query = "SELECT
+    S.name AS 'Audit Name'
+    , CASE S.is_state_enabled
+    WHEN 1 THEN 'Y'
+    WHEN 0 THEN 'N' END AS 'Audit Enabled'
+    , S.type_desc AS 'Write Location'
+    , SA.name AS 'Audit Specification Name'
+    , CASE SA.is_state_enabled
+    WHEN 1 THEN 'Y'
+    WHEN 0 THEN 'N' END AS 'Audit Specification Enabled'
+    , SAD.audit_action_name
+    , SAD.audited_result
+    FROM sys.server_audit_specification_details AS SAD
+    JOIN sys.server_audit_specifications AS SA
+    ON SAD.server_specification_id = SA.server_specification_id
+    JOIN sys.server_audits AS S
+    ON SA.audit_guid = S.audit_guid
+    WHERE SAD.audit_action_id IN ('CNAU', 'LGFL', 'LGSD');
+    GO"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $sqlResults = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $sqlResults = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        $auditSpecifications = @()
+        foreach ($sqlResult in $sqlResults) {
+            switch ($sqlResult.audit_action_name) {
+                "AUDIT_CHANGE_GROUP" {
+                    $auditSpecifications += ($sqlResult)
+                }
+                "FAILED_LOGIN_GROUP" {
+                    $auditSpecifications += ($sqlResult)
+                }
+                "SUCCESSFUL_LOGIN_GROUP" {
+                    $auditSpecifications += ($sqlResult)
+                }
+                Default {}
+            }
+        }
+        $foundSpecifications = @()
+        foreach ($auditSpecification in $auditSpecifications) {
+            if ((($auditspecification | Select-Object -ExpandProperty "Audit Enabled") -ne "Y") -or `
+                (($auditspecification | Select-Object -ExpandProperty "Audit Specification Enabled") -ne "Y") -or `
+                ($auditspecification.audited_result -ne "SUCCESS AND FAILURE")) {
+                $foundSPecifications += $auditSpecification.audit_action_name
+            }
+        }
+        if ($null -eq $sqlResult) {
+            $obj | Add-Member NoteProperty Status("TrackLogins file not found")
+            $obj | Add-Member NoteProperty Audit("Warning")
+        }
+        else {
+            if ($foundSpecifications.count -eq 0) {
+                $obj | Add-Member NoteProperty Status("All good")
+                $obj | Add-Member NoteProperty Audit("True")
+            }
+            else {
+                [string]$s = $null
+                $s = $foundSpecifications -join ", "
+                $obj | Add-Member NoteProperty Status("Found following specifications: $s")
+                $obj | Add-Member NoteProperty Audit("False")
+            }
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+
+    Write-Output $obj
+}
+#endregion
+
+#region 6 Application Development
+#
+# This section contains recommendations related to developing applications that interface with SQL Server.
+#
+function Test-CLRAssemblyPermissionSet {
+    <#
+.Synopsis
+    Ensure 'CLR Assembly Permission Set' is set to 'SAFE_ACCESS' for All CLR Assemblies
+.DESCRIPTION
+    CIS SQL Server 2016 Benchmark - 6  Application Development
+
+    6.2 - Ensure 'CLR Assembly Permission Set' is set to 'SAFE_ACCESS' for All CLR Assemblies.
+
+    Setting CLR Assembly Permission Sets to SAFE_ACCESS will prevent assemblies from accessing external system resources such as files, the network, environment variables, or the registry.
+
+    Assemblies with EXTERNAL_ACCESS or UNSAFE permission sets can be used to access sensitive areas of the operating system, steal and/or transmit data and alter the state and other protection measures of the underlying Windows Operating System. Assemblies which are Microsoft-created (is_user_defined = 0) are excluded from this check as they are required for overall system functionality.
+#>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("6.2")
+    $obj | Add-Member NoteProperty Task("Ensure 'CLR Assembly Permission Set' is set to 'SAFE_ACCESS' for All CLR Assemblies")
+
+    $query = "SELECT name,
+                permission_set_desc
+                FROM sys.assemblies
+                where is_user_defined = 1;"
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $assemblies = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+        }
+        else {
+            $assemblies = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+        }
+
+        $unSafeAssemblies = @()
+        foreach ($assembly in $assemblies) {
+            if ($assembly.permission_set_desc -ne "SAFE_ACCESS") {
+                $unSafeAssemblies += $assembly
+            }
+        }
+        if ($unSafeAssemblies.Count -gt 0 ) {
+            $obj | Add-Member NoteProperty Status("Found unsafe assmblies: " + $unSafeAssemblies)
+            $obj | Add-Member NoteProperty Audit("False")
+        }
+        else {
+            $obj | Add-Member NoteProperty Status("All good")
+            $obj | Add-Member NoteProperty Audit("True")
+        }
+    }
+    catch [System.Data.SqlClient.SqlException] {
+        $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+
+    Write-Output $obj
+}
+#endregion
+
+#region 7 Encryption
+#
+# These recommendations pertain to encryption-related aspects of SQL Server.
+#
+function Test-SQLSymmetricKeyEncryptionAlgorithm {
+    <#
+    .Synopsis
+        Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databases
+    .DESCRIPTION
+        CIS SQL Server 2016 Benchmark - 7 Encryption
+
+        7.1 Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databases
+
+        Per the Microsoft Best Practices, only the SQL Server AES algorithm options, AES_128, AES_192, and AES_256, should be used for a symmetric key encryption algorithm.
+
+        The following algorithms (as referred to by SQL Server) are considered weak or deprecated and should no longer be used in SQL Server: DES, DESX, RC2, RC4, RC4_128.
+        Many organizations may accept the Triple DES algorithms (TDEA) which use keying options 1 (3 key aka 3TDEA) or keying option 2 (2 key aka 2TDEA). In SQL Server, these are referred to as TRIPLE_DES_3KEY and TRIPLE_DES respectively. Additionally, the SQL Server algorithm named DESX is actually the same implementation as the TRIPLE_DES_3KEY option. However, using the DESX identifier as the algorithm type has been deprecated and its usage is now discouraged.
+    #>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $databases = Get-SqlDatabase -ServerInstance $InstanceName -ErrorAction Stop | Where-Object {$_.IsSystemObject -ne "true"} | Select-Object -ExpandProperty name
+        }
+        else {
+            $databases = Get-SqlDatabase -ServerInstance $MachineName -ErrorAction Stop | Where-Object {$_.IsSystemObject -ne "true"} | Select-Object -ExpandProperty name
+        }
+
+        if ($databases.Count -eq 0) {
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("7.1")
+            $obj | Add-Member NoteProperty Task("Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databases")
+            $obj | Add-Member NoteProperty Status("No databases found")
+            $obj | Add-Member NoteProperty Audit("True")
+            return $obj
+        }
+        $index = 1
+
+        foreach ($database in $databases) {
+
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("7.1.$index")
+            $obj | Add-Member NoteProperty Task("Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher for database $database")
+
+
+            $query = "USE [$database]
+            GO
+            SELECT db_name() AS db_name, name AS Key_Name
+            FROM sys.symmetric_keys
+            WHERE algorithm_desc NOT IN ('AES_128','AES_192','AES_256')
+            AND db_id() > 4;
+            GO"
+
+            try {
+                if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+                }
+                else {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+                }
+
+                if ( $null -eq $sqlResult ) {
+                    $obj | Add-Member NoteProperty Status("All good")
+                    $obj | Add-Member NoteProperty Audit("True")
+                }
+                else {
+                    $obj | Add-Member NoteProperty Status("Got $sqlResult")
+                    $obj | Add-Member NoteProperty Audit("False")
+                }
+            }
+            catch [System.Data.SqlClient.SqlException] {
+                $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+                $obj | Add-Member NoteProperty Audit("Warning")
+            }
+
+
+            Write-Output $obj
+
+            $index++
+        }
+    }
+    catch {
+        $obj = New-Object PSObject
+        $obj | Add-Member NoteProperty ID("7.1")
+        $obj | Add-Member NoteProperty Task("Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databases")
+        $obj | Add-Member NoteProperty Status("Failed to connect to server $instanceName")
+        $obj | Add-Member NoteProperty Audit("Warning")
+        Write-Output $obj
+    }
+}
+
+function Test-SQLAsymmetricKeySize {
+    <#
+    .Synopsis
+        Ensure Asymmetric Key Size is set to 'greater than or equal to 2048' in non-system databases
+    .DESCRIPTION
+        CIS SQL Server 2016 Benchmark - 7 Encryption
+
+        7.2 Ensure Asymmetric Key Size is set to 'greater than or equal to 2048' in non-system databases
+
+        Microsoft Best Practices recommend to use at least a 2048-bit encryption algorithm for asymmetric keys.
+
+        The RSA_2048 encryption algorithm for asymmetric keys in SQL Server is the highest bitlevel provided and therefore the most secure available choice (other choices are RSA_512 and RSA_1024).
+    #>
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME,
+
+        [string] $InstanceName = "$machineName\$sqlInstance"
+    )
+
+    try {
+        if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+            $databases = Get-SqlDatabase -ServerInstance $InstanceName -ErrorAction Stop | Where-Object {$_.IsSystemObject -ne "true"} | Select-Object -ExpandProperty name
+        }
+        else {
+            $databases = Get-SqlDatabase -ServerInstance $MachineName -ErrorAction Stop | Where-Object {$_.IsSystemObject -ne "true"} | Select-Object -ExpandProperty name
+        }
+
+        if ($databases.Count -eq 0) {
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("7.2")
+            $obj | Add-Member NoteProperty Task("Ensure Asymmetric Key Size is set to 'greater than or equal to 2048' in non-system databases")
+            $obj | Add-Member NoteProperty Status("No databases found")
+            $obj | Add-Member NoteProperty Audit("True")
+            return $obj
+        }
+
+        $index = 1
+
+        foreach ($database in $databases) {
+            $obj = New-Object PSObject
+            $obj | Add-Member NoteProperty ID("7.2.$index")
+            $obj | Add-Member NoteProperty Task("Ensure CONNECT permissions on the 'guest' user is revoked for database $database")
+
+            $query = "USE [$database]
+            GO
+            SELECT db_name() AS db_name, name AS Key_Name
+            FROM sys.symmetric_keys
+            WHERE key_length < 2048
+            AND db_id() > 4;
+            GO"
+
+            try {
+                if ($PsCmdlet.ParameterSetName -eq "ByInstance" -and $sqlInstance -ne "MSSQLSERVER") {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $instanceName -ErrorAction Stop
+                }
+                else {
+                    $sqlResult = Invoke-Sqlcmd -Query $query -ServerInstance $MachineName -ErrorAction Stop
+                }
+                if ( $null -eq $sqlResult ) {
+                    $obj | Add-Member NoteProperty Status("All good")
+                    $obj | Add-Member NoteProperty Audit("True")
+                }
+                else {
+                    $obj | Add-Member NoteProperty Status("Got $sqlResult")
+                    $obj | Add-Member NoteProperty Audit("False")
+                }
+            }
+            catch [System.Data.SqlClient.SqlException] {
+                $obj | Add-Member NoteProperty Status("Server Instance not found or accessible")
+                $obj | Add-Member NoteProperty Audit("Warning")
+            }
+
+
+            Write-Output $obj
+
+            $index++
+        }
+
+    }
+    catch {
+        $obj = New-Object PSObject
+        $obj | Add-Member NoteProperty ID("7.2")
+        $obj | Add-Member NoteProperty Task("Ensure Asymmetric Key Size is set to 'greater than or equal to 2048' in non-system databases")
+        $obj | Add-Member NoteProperty Status("Failed to connect to server $instanceName")
+        $obj | Add-Member NoteProperty Audit("Warning")
+        Write-Output $obj
+    }
+}
+
+#endregion
+
+#region 8 Appendix: Additional Considerations
+#
+# This appendix discusses possible configuration options for which no recommendation is being given.
+#
+function Test-SQLServerBrowserService {
+    <#
+    .Synopsis
+        Ensure 'SQL Server Browser Service' is configured correctly
+    .DESCRIPTION
+        CIS SQL Server 2016 Benchmark - 8 Appendix: Additional Considerations
+
+        8.1 Ensure 'SQL Server Browser Service' is configured correctly
+
+        No recommendation is being given on disabling the SQL Server Browser service.
+    #>
+    [CmdletBinding()]
+
+    $obj = New-Object PSObject
+    $obj | Add-Member NoteProperty ID("8.1")
+    $obj | Add-Member NoteProperty Task("Ensure 'SQL Server Browser Service' is configured correctly")
+
+    try {
+        $sqlBrowserService = Get-Service -name 'sqlbrowser'
+
+        if ($sqlBrowserService.Status -eq 'stopped') {
+            if ($sqlBrowserService.StartType -eq 'Disabled') {
+                $obj | Add-Member NoteProperty Status("All good")
+                $obj | Add-Member NoteProperty Audit("True")
+            }
+            else {
+                $obj | Add-Member NoteProperty Status("StartType: Enabled")
+                $obj | Add-Member NoteProperty Audit("Warning")
+            }
+        }
+        else {
+            $obj | Add-Member NoteProperty Audit("False")
+            if ($sqlBrowserService.StartType -eq 'Disabled') {
+                $obj | Add-Member NoteProperty Status("SQL Server Browser is running")
+            }
+            else {
+                $obj | Add-Member NoteProperty Status("SQL Server Browser is running and StartType: Enabled")
+            }
+        }
+    }
+    catch [Microsoft.PowerShell.Commands.ServiceCommandException] {
+        $obj | Add-Member NoteProperty Status("Connot find any service with service name 'sqlbrowser'")
+        $obj | Add-Member NoteProperty Audit("Warning")
+    }
+    Write-Output $obj
+}
+#endregion
+
+#region Hyperfunctions
+function Convert-ToAuditInfo {
+    param (
+        [Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+        [Psobject] $auditObject
+    )
+
+    process {
+        Write-Output @{
+            Id      = $auditObject.ID
+            Task    = $auditObject.Task
+            Message = $auditObject.Status
+            Status   = $auditObject.Audit
+        }
+    }
+}
+#endregion
+
+#region Reportgeneration
+function Get-SQL2016AuditInfos {
+    [CmdletBinding(DefaultParameterSetName = "Default")]
+    param(
+        [Parameter(Mandatory = $true, ParameterSetName = "ByInstance")]
+        [string] $SqlInstance,
+
+        [string] $MachineName = $env:COMPUTERNAME
+    )
+
+    switch ($PsCmdlet.ParameterSetName) {
+        "ByInstance" {
+            $sqlInstances = $sqlInstance
+            break
+        }
+        "Default" {
+            $smo = 'Microsoft.SqlServer.Management.Smo.'
+            $wmi = New-Object ($smo + 'Wmi.ManagedComputer')
+            $singleWmi = $wmi | Where-Object { $_.Name -eq $machineName }
+            $sqlServer = $singleWmi.Services | Where-Object { $_.Type -eq "SqlServer" }
+            $sqlInstances = $sqlServer `
+                | Foreach-Object { $_.Name.Substring($_.Name.IndexOf('$') + 1) } `
+                #    | Where-Object { $_ -ne "MSSQLSERVER" }
+        }
+    }
+
+    $InstanceAudits = @()
+    foreach ($sqlInstance in $sqlInstances) {
+        $auditInfos = @()
+
+        # Section 2
+        $auditInfos += Test-SQLAdHocDistributedQueriesDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLClrEnabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLCrossDBOwnershipDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLDatabaseMailXPsDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLOleAutomationProceduresDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLRemoteAccessDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLRemoteAdminConnectionsDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLScanForStartupProcsDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLTrustworthyDatabaseOff -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLServerProtocolsDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLUseNonStandardPorts -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLHideInstanceEnabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLSaLoginAccountDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLSaLoginAccountRenamed -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLXpCommandShellDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLAutoCloseOff -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLNoSaAccounnt -MachineName $machineName -SqlInstance $sqlInstance
+
+        # Section 3
+        $auditInfos += Test-SQLServerAuthentication -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLGuestPermissionOnDatabases -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLDropOrphanedUsers -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLAuthenticationDisabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLServerServiceAccountIsNotAnAdministrator -MachineName $machineName
+        $auditInfos += Test-SQLAgentServiceAccountIsNotAnAdministrator -MachineName $machineName
+        $auditInfos += Test-SQLFullTextServiceAccountIsNotAnAdministrator -MachineName $machineName
+        $auditInfos += Test-SQLPermissionsForRolePublic -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLWindowsBuiltinNoSqlLogin -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLWindowsLocalGroupsNoSqlLogin -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLPublicRoleMsdbDatabase -MachineName $machineName -SqlInstance $sqlInstance
+
+        # Section 4
+        $auditInfos += Test-SQLMustChangeOptionIsOn -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLCheckExpirationOptionOn -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLCheckPolicyOptionOn -MachineName $machineName -SqlInstance $sqlInstance
+
+        # Section 5
+        $auditInfos += Test-SQLMaximumNumberOfErrorLogFiles -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLDefaultTraceEnabled -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLLoginAuditingIsSetToFailedLogins -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLLoginAuditingIsSetToFailedAndSuccessfulLogins -MachineName $machineName -SqlInstance $sqlInstance
+
+        # Section 6
+        $auditInfos += Test-CLRAssemblyPermissionSet -MachineName $machineName -SqlInstance $sqlInstance
+
+        # Section 7
+        $auditInfos += Test-SQLSymmetricKeyEncryptionAlgorithm -MachineName $machineName -SqlInstance $sqlInstance
+        $auditInfos += Test-SQLAsymmetricKeySize -MachineName $machineName -SqlInstance $sqlInstance
+
+        # Section 8
+        $auditInfos += Test-SQLServerBrowserService
+
+        $InstanceAudits += @{
+            InstanceName = $sqlInstance
+            AuditInfos   = $auditInfos | Convert-ToAuditInfo
+        }
+    }
+
+    return $InstanceAudits
+}
+
+switch ($PsCmdlet.ParameterSetName) {
+    "ByInstance" {
+        $InstanceAudits = (Get-SQL2016AuditInfos -SqlInstance $sqlInstance -MachineName $machineName)
+        break
+    }
+    "ByAuditInfo" {
+        break
+    }
+    "Default" {
+        $InstanceAudits = (Get-SQL2016AuditInfos)
+    }
+}
+
+[Report] @{
+    Title = "SQL 2016 Benchmarks"
+    ModuleName = "ATAPAuditor"
+    BasedOn = "CIS Microsoft SQL Server 2016 Benchmark, Version: 1.0.0, Date: 2017-11-08"
+    Sections = @(
+        foreach ($InstanceAudit in $InstanceAudits) {
+            [ReportSection] @{
+                Title = $InstanceAudit.InstanceName
+                Description = "This section contains the audits for the sqlInstance $($InstanceAudit.InstanceName)"
+                SubSections = @(
+                    [ReportSection] @{
+                        Title = "2 Surface Area Reduction"
+                        Description = "SQL Server offers various configuration options, some of them can be controlled by the sp_configure stored procedure. This section contains the listing of the corresponding recommendations."
+                        AuditInfos = $InstanceAudit.AuditInfos | Where-Object {$_.Id -like "2.*"}
+                    }
+                    [ReportSection] @{
+                        Title = "3 Authentication and Authorization"
+                        Description = "This section contains recommendations related to SQL Server's authentication and authorization mechanisms."
+                        AuditInfos = $InstanceAudit.AuditInfos | Where-Object {$_.Id -like "3.*"}
+                    }
+                    [ReportSection] @{
+                        Title = "4 Password Policies"
+                        Description = "This section contains recommendations related to SQL Server's password policies."
+                        AuditInfos = $InstanceAudit.AuditInfos | Where-Object {$_.Id -like "4.*"}
+                    }
+                    [ReportSection] @{
+                        Title = "5 Auditing and Logging"
+                        Description = "This section contains recommendations related to SQL Server's audit and logging mechanisms."
+                        AuditInfos = $InstanceAudit.AuditInfos | Where-Object {$_.Id -like "5.*"}
+                    }
+                    [ReportSection] @{
+                        Title = "6 Application Development"
+                        Description = "This section contains recommendations related to developing applications that interface with SQL Server."
+                        AuditInfos = $InstanceAudit.AuditInfos | Where-Object {$_.Id -like "6.*"}
+                    }
+                    [ReportSection] @{
+                        Title = "7 Encryption"
+                        Description = "These recommendations pertain to encryption-related aspects of SQL Server."
+                        AuditInfos = $InstanceAudit.AuditInfos | Where-Object {$_.Id -like "7.*"}
+                    }
+                    [ReportSection] @{
+                        Title = "8 Appendix: Additional Considerations"
+                        Description = "This appendix discusses possible configuration options for which no recommendation is being given."
+                        AuditInfos = $InstanceAudit.AuditInfos | Where-Object {$_.Id -like "8.*"}
+                    }
+                )
+            }
+        }
+    )
+}
+#endregion
diff --git a/ATAPAuditor/Reports/Microsoft Windows 10 BSI.ps1 b/ATAPAuditor/Reports/Microsoft Windows 10 BSI.ps1
new file mode 100644
index 0000000..a83242e
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows 10 BSI.ps1	
@@ -0,0 +1,114 @@
+[Report] @{
+	Title = "Windows 10 BSI Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+        "BSI Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+		"BSI SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2020-04-27"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHuS Logging'
+			Description = "This section contains all BSI logging recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies"
+				}
+			)
+		}
+		try {
+			# Get domain role
+			# 0 {"Standalone Workstation"}
+			# 1 {"Member Workstation"}
+			# 2 {"Standalone Server"}
+			# 3 {"Member Server"}
+			# 4 {"Backup Domain Controller"}
+			# 5 {"Primary Domain Controller"}
+			$domainRole = (Get-CimInstance -Class Win32_ComputerSystem).DomainRole
+		} catch {
+			$domainRole = 99
+		}
+		# if system is Member Workstation	
+		if ($domainRole -eq 1) {
+			[ReportSection] @{
+				Title = 'BSI Benchmarks SiSyPHuS HD'
+				Description = "This section contains all BSI HD recommendations"
+				SubSections = @(
+					[ReportSection] @{
+						Title = 'Registry Settings/Group Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#RegistrySettings"
+					}
+					[ReportSection] @{
+						Title = 'User Rights Assignment'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#UserRights"
+					}
+					[ReportSection] @{
+						Title = 'Account Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AccountPolicies"
+					}
+					[ReportSection] @{
+						Title = 'Security Options'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#SecurityOptions"
+					}
+				)
+			}
+		} else {
+			[ReportSection] @{
+				Title = 'BSI Benchmarks SiSyPHuS NE'
+				Description = "This section contains all BSI NE recommendations"
+				SubSections = @(
+					[ReportSection] @{
+						Title = 'Registry Settings/Group Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings"
+					}
+					[ReportSection] @{
+						Title = 'User Rights Assignment'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights"
+					}
+					[ReportSection] @{
+						Title = 'Account Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies"
+					}
+					[ReportSection] @{
+						Title = 'Security Options'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions"
+					}
+				)
+			}
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHus-BSI Telemetrie'
+			Description = "This section contains all BSI telemetry recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows 10 GDPR.ps1 b/ATAPAuditor/Reports/Microsoft Windows 10 GDPR.ps1
new file mode 100644
index 0000000..223b19f
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows 10 GDPR.ps1	
@@ -0,0 +1,50 @@
+[Report] @{
+	Title = "Windows 10 GDPR Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		'Bundesamt für Sicherheit in der Informationstechnik (BSI), Version: V1.2, Date: 2020-04-27'
+		'GDPR settings by Microsoft, Version: 16082019, Date: 2019-08-16'
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "BSI Recommendations"
+			Description = "This section contains the Telemetry-Recommendations of the Federal Office for Information Security (BSI)"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings"
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 GDPR-MS-16082019#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "Data Protection Microsoft"
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Telemetry"
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows 10 Stand-alone.ps1 b/ATAPAuditor/Reports/Microsoft Windows 10 Stand-alone.ps1
new file mode 100644
index 0000000..c0cf77d
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows 10 Stand-alone.ps1	
@@ -0,0 +1,103 @@
+[Report] @{
+	Title = "Windows 10 Stand-alone Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 2.0.0, Date: 2023-05-17"
+        "BSI Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+		"BSI SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2020-04-27"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = 'CIS Stand-alone Benchmarks'
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Stand-alone-CIS-2.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Stand-alone-CIS-2.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Stand-alone-CIS-2.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Stand-alone-CIS-2.0.0#SecurityOptions"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Stand-alone-CIS-2.0.0#UserRights"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHuS Logging'
+			Description = 'This section contains the BSI Benchmark results.'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHus-BSI Telemetrie'
+			Description = 'This section contains the BSI Benchmark results.'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHuS NE'
+			Description = 'This section contains the BSI Benchmark results.'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights"
+				}
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions"
+				}
+			)
+		}	
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows 10.ps1 b/ATAPAuditor/Reports/Microsoft Windows 10.ps1
new file mode 100644
index 0000000..65f9cfd
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows 10.ps1	
@@ -0,0 +1,199 @@
+[Report] @{
+	Title = "Windows 10 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows 10 Enterprise, Version: 3.0.0, Date: 2024-02-22"
+		"Microsoft Security baseline (FINAL) for Windows 10, Version: 21H1, Date: 2021-05-18"
+		"BSI Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+		"BSI SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2020-04-27"
+		"DISA Windows 10 Security Technical Implementation Guide, Version: V1R23, Date: 2019-10-25"
+		"ACSC Hardening Microsoft Windows 10 version 21H1 Workstations, Version: 10.2021, Date 2021-10-01"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = 'CIS Benchmarks'
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-CIS-3.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-CIS-3.0.0#UserRights"
+				}
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-CIS-3.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-CIS-3.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-CIS-3.0.0#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'Microsoft Benchmarks'
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Microsoft-21H1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Microsoft-21H1#UserRights"
+				}
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Microsoft-21H1#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Microsoft-21H1#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-Microsoft-21H1#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHuS Logging'
+			Description = 'This section contains all BSI logging recommendations'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies"
+				}
+			)
+		}
+		try {
+			# Get domain role
+			# 0 {"Standalone Workstation"}
+			# 1 {"Member Workstation"}
+			# 2 {"Standalone Server"}
+			# 3 {"Member Server"}
+			# 4 {"Backup Domain Controller"}
+			# 5 {"Primary Domain Controller"}
+			$domainRole = (Get-CimInstance -Class Win32_ComputerSystem).DomainRole
+		} catch {
+			$domainRole = 99
+		}
+		# if system is Member Workstation	
+		if ($domainRole -eq 1) {
+			[ReportSection] @{
+				Title = 'BSI Benchmarks SiSyPHuS HD'
+				Description = 'This section contains all BSI HD recommendations'
+				SubSections = @(
+					[ReportSection] @{
+						Title = 'Registry Settings/Group Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#RegistrySettings"
+					}
+					[ReportSection] @{
+						Title = 'User Rights Assignment'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#UserRights"
+					}
+					[ReportSection] @{
+						Title = 'Account Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AccountPolicies"
+					}
+					[ReportSection] @{
+						Title = 'Security Options'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#SecurityOptions"
+					}
+				)
+			}
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHus-BSI Telemetrie'
+			Description = 'This section contains all BSI telemetry recommendations'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "DISA Recommendations"
+			Description = "This section contains all DISA recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-DISA-V1R23#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-DISA-V1R23#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-DISA-V1R23#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-DISA-V1R23#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-DISA-V1R23#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'ACSC Benchmarks'
+			Description = "This section contains all ACSC recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-ACSC-21H1#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-ACSC-21H1#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-ACSC-21H1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-ACSC-21H1#SecurityOptions"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10-ACSC-21H1#UserRights"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows 11 Stand-alone.ps1 b/ATAPAuditor/Reports/Microsoft Windows 11 Stand-alone.ps1
new file mode 100644
index 0000000..c2f0a14
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows 11 Stand-alone.ps1	
@@ -0,0 +1,103 @@
+[Report] @{
+	Title = "Windows 11 Stand-alone Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 2.0.0, Date: 2023-05-04"
+        "BSI Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+		"BSI SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2019-07-31"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Stand-alone Benchmarks"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#SecurityOptions"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#UserRights"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHuS Logging'
+			Description = 'This section contains all BSI logging recommendations'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHus-BSI'
+			Description = 'This section contains all BSI telemetry recommendations'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHuS NE'
+			Description = 'This section contains all BSI NE recommendations'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights"
+				}
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions"
+				}
+			)
+		}	
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Reports/Microsoft Windows 11.ps1 b/ATAPAuditor/Reports/Microsoft Windows 11.ps1
new file mode 100644
index 0000000..dad6094
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows 11.ps1	
@@ -0,0 +1,168 @@
+[Report] @{
+	Title = "Windows 11 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows 11 Enterprise 4.0.0 Benchmark, Version: 4.0.0, Date: 2025-03-19"
+		"Microsoft Security baseline for Microsoft Windows 11, Version: 22H2, Date: 2022-09-20"
+		"BSI Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+		"BSI SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2019-07-31"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-CIS-4.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-CIS-4.0.0#UserRights"
+				}
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-CIS-4.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-CIS-4.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-CIS-4.0.0#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "Microsoft Benchmarks"
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Microsoft-22H2#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'User Rights Assignment'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Microsoft-22H2#UserRights"
+				}
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Microsoft-22H2#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Microsoft-22H2#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Security Options'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 11-Microsoft-22H2#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHuS Logging'
+			Description = 'This section contains all BSI logging recommendations'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies"
+				}
+			)
+		}
+		try {
+			# Get domain role
+			# 0 {"Standalone Workstation"}
+			# 1 {"Member Workstation"}
+			# 2 {"Standalone Server"}
+			# 3 {"Member Server"}
+			# 4 {"Backup Domain Controller"}
+			# 5 {"Primary Domain Controller"}
+			$domainRole = (Get-CimInstance -Class Win32_ComputerSystem).DomainRole
+		} catch {
+			$domainRole = 99
+		}
+		# if system is Member Workstation	
+		if ($domainRole -eq 1) {
+			[ReportSection] @{
+				Title = 'BSI Benchmarks SiSyPHuS HD'
+			Description = 'This section contains all BSI HD recommendations'
+				SubSections = @(
+					[ReportSection] @{
+						Title = 'Registry Settings/Group Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#RegistrySettings"
+					}
+					[ReportSection] @{
+						Title = 'User Rights Assignment'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#UserRights"
+					}
+					[ReportSection] @{
+						Title = 'Account Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#AccountPolicies"
+					}
+					[ReportSection] @{
+						Title = 'Security Options'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS HD-BSI-1.3#SecurityOptions"
+					}
+				)
+			}
+		} else {
+			[ReportSection] @{
+				Title = 'BSI Benchmarks SiSyPHuS NE'
+				Description = 'This section contains all BSI NE recommendations'
+				SubSections = @(
+					[ReportSection] @{
+						Title = 'Registry Settings/Group Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings"
+					}
+					[ReportSection] @{
+						Title = 'User Rights Assignment'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights"
+					}
+					[ReportSection] @{
+						Title = 'Account Policies'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies"
+					}
+					[ReportSection] @{
+						Title = 'Security Options'
+						AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions"
+					}
+				)
+			}
+		}
+		[ReportSection] @{
+			Title = 'BSI Benchmarks SiSyPHus-BSI'
+			Description = 'This section contains all BSI telemetry recommendations'
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows 7.ps1 b/ATAPAuditor/Reports/Microsoft Windows 7.ps1
new file mode 100644
index 0000000..43a1bc9
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows 7.ps1	
@@ -0,0 +1,47 @@
+[Report] @{
+	Title = "Windows 7 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows 7 Workstation Benchmark, Version: 3.1.0, Date: 2018-03-02"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = 'CIS Benchmarks'
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Registry Settings/Group Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 7-CIS-3.1.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Account Policies'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 7-CIS-3.1.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = 'Advanced Audit Policy Configuration'
+					AuditInfos = Test-AuditGroup "Microsoft Windows 7-CIS-3.1.0#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows Server 2012.ps1 b/ATAPAuditor/Reports/Microsoft Windows Server 2012.ps1
new file mode 100644
index 0000000..f05f961
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows Server 2012.ps1	
@@ -0,0 +1,76 @@
+
+[Report] @{
+	Title = "Windows Server 2012 Audit Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows Server 2012 R2 Benchmark, Version: 3.0.0, Date: 2023-10-20",
+		"DISA Microsoft Windows Server 2012 R2 Benchmark, Version: V2R19, Date: 2020-07-17",
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-CIS-3.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-CIS-3.0.0#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-CIS-3.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-CIS-3.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-CIS-3.0.0#SecurityOptions"
+				}
+			)
+		}
+
+		[ReportSection] @{
+			Title = "DISA Benchmarks"
+			Description = "This section contains all DISA recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-DISA-V2R19#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-DISA-V2R19#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2012 R2-DISA-V2R19#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows Server 2016.ps1 b/ATAPAuditor/Reports/Microsoft Windows Server 2016.ps1
new file mode 100644
index 0000000..56f83e5
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows Server 2016.ps1	
@@ -0,0 +1,102 @@
+
+[Report] @{
+	Title = "Windows Server 2016 Audit Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows Server 2016 Benchmark, Version: 3.0.0, Date: 2024-04-19"
+		"Microsoft Security baseline for Windows Server 2016, Version: FINAL, Date 2016-10-17"
+		"DISA Windows Server 2016 Security Technical Implementation Guide, Version: V1R12, Date: 2020-06-17"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-CIS-3.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-CIS-3.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-CIS-3.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-CIS-3.0.0#SecurityOptions"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-CIS-3.0.0#UserRights"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "Microsoft Benchmarks"
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-Microsoft-FINAL#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-Microsoft-FINAL#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-Microsoft-FINAL#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-Microsoft-FINAL#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "DISA Recommendations"
+			Description = "This section contains all DISA recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-DISA-V1R12#AccountPolicies"
+				},
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-DISA-V1R12#SecurityOptions"
+				},
+				[ReportSection] @{
+					Title = "Registry Permissions"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-DISA-V1R12#RegistrySettings"
+				},
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2016-DISA-V1R12#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows Server 2019.ps1 b/ATAPAuditor/Reports/Microsoft Windows Server 2019.ps1
new file mode 100644
index 0000000..e0b4f38
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows Server 2019.ps1	
@@ -0,0 +1,106 @@
+
+[Report] @{
+	Title = "Windows Server 2019 Audit Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows Server 2019 Benchmark, Version: 3.0.0, Date: 2024-03-19"
+		"Microsoft Security baseline for Windows Server 2019, Version: FINAL, Date 2019-06-18"
+        "DISA Windows Server 2019 Security Technical Implementation Guide, Version: V1R5, Date: 2020-06-17"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-CIS-3.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-CIS-3.0.0#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-CIS-3.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-CIS-3.0.0#SecurityOptions"
+				}
+				[ReportSection] @{
+					Title = " Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-CIS-3.0.0#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "Microsoft Benchmarks"
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-Microsoft-FINAL#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-Microsoft-FINAL#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-Microsoft-FINAL#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-Microsoft-FINAL#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-Microsoft-FINAL#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "DISA Recommendations"
+			Description = "This section contains all DISA recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-DISA-V1R5#RegistrySettings"
+				},
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-DISA-V1R5#AccountPolicies"
+				},
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-DISA-V1R5#SecurityOptions"
+				},
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2019-DISA-V1R5#AuditPolicies"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows Server 2022.ps1 b/ATAPAuditor/Reports/Microsoft Windows Server 2022.ps1
new file mode 100644
index 0000000..0d48f0e
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows Server 2022.ps1	
@@ -0,0 +1,106 @@
+
+[Report] @{
+	Title = "Windows Server 2022 Audit Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows Server 2022, Version: 3.0.0, Date 2023-04-14"
+		"Microsoft Security baseline for Microsoft Windows Server 2022, Version: FINAL, Date 2021-09-27"
+		"DISA Windows Server 2022, Version: V1R1, Date 2022-09-28"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-CIS-3.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-CIS-3.0.0#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-CIS-3.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-CIS-3.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-CIS-3.0.0#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "Microsoft Benchmarks"
+			Description = "This section contains all Microsoft recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-Microsoft-FINAL#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-Microsoft-FINAL#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-Microsoft-FINAL#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-Microsoft-FINAL#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-Microsoft-FINAL#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = "DISA Benchmarks"
+			Description = "This section contains all DISA recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-DISA-V1R1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-DISA-V1R1#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-DISA-V1R1#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2022-DISA-V1R1#SecurityOptions"
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'FB Pro recommendations'
+			Description = "This section contains all FB Pro recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'Ciphers Suites and Hashes'
+					AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - Registry Settings'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = 'Enhanced security settings - User Rights'
+					AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Microsoft Windows Server 2025.ps1 b/ATAPAuditor/Reports/Microsoft Windows Server 2025.ps1
new file mode 100644
index 0000000..cfbdcfe
--- /dev/null
+++ b/ATAPAuditor/Reports/Microsoft Windows Server 2025.ps1	
@@ -0,0 +1,38 @@
+
+[Report] @{
+	Title = "Windows Server 2025 Audit Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Microsoft Windows Server 2025, Version: 1.0.0, Date 2025-03-19"
+		"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
+		"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains all CIS recommendations"
+			SubSections = @(
+				[ReportSection] @{
+					Title = "Registry Settings/Group Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2025-CIS-1.0.0#RegistrySettings"
+				}
+				[ReportSection] @{
+					Title = "User Rights Assignment"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2025-CIS-1.0.0#UserRights"
+				}
+				[ReportSection] @{
+					Title = "Account Policies"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2025-CIS-1.0.0#AccountPolicies"
+				}
+				[ReportSection] @{
+					Title = "Advanced Audit Policy Configuration"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2025-CIS-1.0.0#AuditPolicies"
+				}
+				[ReportSection] @{
+					Title = "Security Options"
+					AuditInfos = Test-AuditGroup "Microsoft Windows Server 2025-CIS-1.0.0#SecurityOptions"
+				}
+			)
+		}
+	)
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Reports/Mozilla Firefox.ps1 b/ATAPAuditor/Reports/Mozilla Firefox.ps1
new file mode 100644
index 0000000..6cb74c6
--- /dev/null
+++ b/ATAPAuditor/Reports/Mozilla Firefox.ps1	
@@ -0,0 +1,873 @@
+<#
+BSD 3-Clause License
+
+Copyright (c) 2023, FB Pro GmbH
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#>
+
+#region Import tests configuration settings
+$CisBenchmarks = @{
+	FirefoxLockPrefSettings = @(
+		@{
+			Id   = "2.1"
+			Task = "Enable Automatic Updates"
+			LockPrefs = @(
+				@{ Name = "app.update.auto"; Value = $true }
+				@{ Name = "app.update.enabled"; Value = $true }
+				@{ Name = "app.update.staging.enabled"; Value = $true }
+			)
+		}
+		@{
+			Id   = "2.2"
+			Task = "Enable Auto-Notification of Outdated Plugins"
+			LockPrefs = @(
+				@{ Name = "plugins.update.notifyUser"; Value = $true }
+			)
+		}
+		@{
+			Id   = "2.3"
+			Task = "Enable Information Bar for Outdated Plugins"
+			LockPrefs = @(
+				@{ Name = "plugins.hide_infobar_for_outdated_plugin"; Value = $false }
+			)
+		}
+		@{
+			Id   = "2.4"
+			Task = "Set Update Interval Time Checks"
+			LockPrefs = @(
+				@{ Name = "app.update.interval"; Value = 43200 }
+			)
+		}
+		@{
+			Id   = "2.5"
+			Task = "Set Update Wait Time Prompt"
+			LockPrefs = @(
+				@{ Name = "app.update.promptWaitTime"; Value = 172800 }
+			)
+		}
+		@{
+			Id   = "2.6"
+			Task = "Ensure Update-related UI Components are Displayed"
+			LockPrefs = @(
+				@{ Name = "app.update.silent"; Value = $false }
+			)
+		}
+		@{
+			Id   = "2.7"
+			Task = "Set Search Provider Update Behavior"
+			LockPrefs = @(
+				@{ Name = "app.update.auto"; Value = $true }
+				@{ Name = "app.update.enabled"; Value = $true }
+			)
+		}
+		# @{
+		# 	Id   = "3.1"
+		# 	Task = "Validate Proxy Settings"
+		# }
+		@{
+			Id   = "3.2"
+			Task = "Do Not Send Cross SSLTLS Referrer Header"
+			LockPrefs = @(
+				@{ Name = "network.http.sendSecureXSiteReferrer"; Value = $false }
+			)
+		}
+		@{
+			Id   = "3.3"
+			Task = "Disable NTLM v1"
+			LockPrefs = @(
+				@{ Name = "network.auth.force-generic-ntlm-v1"; Value = $false }
+			)
+		}
+		@{
+			Id   = "3.4"
+			Task = "Enable Warning For Phishy URLs"
+			LockPrefs = @(
+				@{ Name = "network.http.phishy-userpass-length"; Value = 1 }
+			)
+		}
+		@{
+			Id   = "3.5"
+			Task = "Enable IDN Show Punycode"
+			LockPrefs = @(
+				@{ Name = "network.IDN_show_punycode"; Value = $true }
+			)
+		}
+		@{
+			Id   = "3.6"
+			Task = "Set File URI Origin Policy"
+			LockPrefs = @(
+				@{ Name = "security.fileuri.strict_origin_policy"; Value = $true }
+			)
+		}
+		@{
+			Id   = "3.7"
+			Task = "Disable Cloud Sync"
+			LockPrefs = @(
+				@{ Name = "services.sync.enabled"; Value = $false }
+			)
+		}
+		@{
+			Id   = "3.8"
+			Task = "Disable WebRTC"
+			LockPrefs = @(
+				@{ Name = "media.peerconnection.enabled"; Value = $false }
+				@{ Name = "media.peerconnection.use_document_iceservers"; Value = $false }
+			)
+		}
+		@{
+			Id   = "4.1"
+			Task = "Set SSL Override Behavior"
+			LockPrefs = @(
+				@{ Name  = "browser.ssl_override_behavior"; Value = 0 }
+			)
+		}
+		@{
+			Id   = "4.2"
+			Task = "Set Security TLS Version Maximum"
+			LockPrefs = @(
+				@{ Name  = "security.tls.version.max"; Value = 3 }
+			)
+		}
+		@{
+			Id   = "4.3"
+			Task = "Set Security TLS Version Minimum "
+			LockPrefs = @(
+				@{ Name  = "security.tls.version.min"; Value = 1 }
+			)
+		}
+		@{
+			Id   = "4.4"
+			Task = "Set OCSP Use Policy"
+			LockPrefs = @(
+				@{ Name  = "security.OCSP.enabled"; Value = 1 }
+			)
+		}
+		@{
+			Id   = "4.5"
+			Task = "Block Mixed Active Content"
+			LockPrefs = @(
+				@{ Name  = "security.mixed_content.block_active_content"; Value = $true }
+			)
+		}
+		@{
+			Id   = "4.6"
+			Task = "Set OCSP Response Policy"
+			LockPrefs = @(
+				@{ Name  = "security.OCSP.require"; Value = $true }
+			)
+		}
+		@{
+			Id   = "5.1"
+			Task = "Disallow JavaScripts Ability to Change the Status Bar Text"
+			LockPrefs = @(
+				@{ Name = "dom.disable_window_status_change"; Value = $true }
+			)
+		}
+		@{
+			Id   = "5.2"
+			Task = "Disable Scripting of Plugins by JavaScript"
+			LockPrefs = @(
+				@{ Name = "security.xpconnect.plugin.unrestricted"; Value = $false }
+			)
+		}
+		@{
+			Id   = "5.3"
+			Task = "Disallow JavaScripts Ability to Hide the Address Bar"
+			LockPrefs = @(
+				@{ Name = "dom.disable_window_open_feature.location"; Value = $true }
+			)
+		}
+		@{
+			Id   = "5.4"
+			Task = "Disallow JavaScripts Ability to Hide the Status Bar"
+			LockPrefs = @(
+				@{ Name = "dom.disable_window_open_feature.status"; Value = $true }
+			)
+		}
+		@{
+			Id   = "5.5"
+			Task = "Disable Closing of Windows via Scripts"
+			LockPrefs = @(
+				@{ Name = "dom.allow_scripts_to_close_windows"; Value = $false }
+			)
+		}
+		@{
+			Id   = "5.6"
+			Task = "Block Pop-up Windows"
+			LockPrefs = @(
+				@{ Name = "privacy.popups.policy"; Value = 1 }
+			)
+		}
+		@{
+			Id   = "5.7"
+			Task = "Disable Displaying JavaScript in History URLs"
+			LockPrefs = @(
+				@{ Name = "browser.urlbar.filter.javascript"; Value = $true }
+			)
+		}
+		@{
+			Id   = "6.1"
+			Task = "Disallow Credential Storage"
+			LockPrefs = @(
+				@{ Name = "signon.rememberSignons"; Value = $false }
+			)
+		}
+		@{
+			Id   = "6.2"
+			Task = "Do Not Accept Third Party Cookies"
+			LockPrefs = @(
+				@{ Name = "network.cookie.cookieBehavior"; Value = 1 }
+			)
+		}
+		@{
+			Id   = "6.3"
+			Task = "Tracking Protection"
+			LockPrefs = @(
+				@{ Name = "privacy.donottrackheader.enabled"; Value = $true }
+				@{ Name = "privacy.donottrackheader.value"; Value = 1 }
+				@{ Name = "privacy.trackingprotection.enabled"; Value = $true }
+				@{ Name = "privacy.trackingprotection.pbmode"; Value = $true }
+			)
+		}
+		@{
+			Id   = "6.4"
+			Task = "Set Delay for Enabling Security Sensitive Dialog Boxes"
+			LockPrefs = @(
+				@{ Name = "security.dialog_enable_delay"; Value = 2000 }
+			)
+		}
+		@{
+			Id   = "6.5"
+			Task = "Disable Geolocation Serivces"
+			LockPrefs = @(
+				@{ Name = "geo.enabled"; Value = $false }
+			)
+		}
+		@{
+			Id   = "7.1"
+			Task = "Secure Application Plug-ins"
+			LockPrefs = @(
+				@{ Name = "browser.helperApps.alwaysAsk.force"; Value = $true }
+			)
+		}
+		@{
+			Id   = "7.2"
+			Task = "Disabling Auto-Install of Add-ons"
+			LockPrefs = @(
+				@{ Name = "xpinstall.whitelist.required"; Value = $true }
+			)
+		}
+		@{
+			Id   = "7.3"
+			Task = "Enable Extension Block List"
+			LockPrefs = @(
+				@{ Name = "extensions.blocklist.enabled"; Value = $true }
+			)
+		}
+		@{
+			Id   = "7.4"
+			Task = "Set Extension Block List Interval"
+			LockPrefs = @(
+				@{ Name = "extensions.blocklist.interval"; Value = 86400 }
+			)
+		}
+		@{
+			Id   = "7.5"
+			Task = "Enable Warning for External Protocol Handler"
+			LockPrefs = @(
+				@{ Name = "network.protocol-handler.warn-external-default"; Value = $true }
+			)
+		}
+		@{
+			Id   = "7.6"
+			Task = "Disable Popups Initiated by Plugins"
+			LockPrefs = @(
+				@{ Name = "privacy.popups.disable_from_plugins"; Value = 2 }
+			)
+		}
+		@{
+			Id   = "7.7"
+			Task = "Enable Extension Auto Update"
+			LockPrefs = @(
+				@{ Name = "extensions.update.autoUpdateDefault"; Value = $true }
+			)
+		}
+		@{
+			Id   = "7.8"
+			Task = "Enable Extension Update"
+			LockPrefs = @(
+				@{ Name = "extensions.update.enabled"; Value = $true }
+			)
+		}
+		@{
+			Id   = "7.9"
+			Task = "Set Extension Update Interval Time Checks"
+			LockPrefs = @(
+				@{ Name = "extensions.update.interval"; Value = 86400 }
+			)
+		}
+		@{
+			Id   = "8.1"
+			Task = "Enable Virus Scanning for Downloads"
+			LockPrefs = @(
+				@{ Name = "browser.download.manager.scanWhenDone"; Value = $true }
+			)
+		}
+		@{
+			Id   = "8.2"
+			Task = "Disable JAR from Opening Unsafe File Types"
+			LockPrefs = @(
+				@{ Name = "network.jar.open-unsafe-types"; Value = $false }
+			)
+		}
+		@{
+			Id   = "8.3"
+			Task = "Block Reported Web Forgeries"
+			LockPrefs = @(
+				@{ Name = "browser.safebrowsing.enabled"; Value = $true }
+			)
+		}
+		@{
+			Id   = "8.4"
+			Task = "Block Reported Attack Sites"
+			LockPrefs = @(
+				@{ Name = "browser.safebrowsing.malware.enabled"; Value = $true }
+			)
+		}
+	)
+}
+
+$DisaRequirements = @{
+	# RegistrySettings = @(
+	# 	@{
+	# 		Id    = "DTBF003"
+	# 		Task  = "Installed version of Firefox unsupported."
+	# 		Path  = "HKLM\Software\Mozilla\Mozilla Firefox\CurrentVersion"
+	# 		Name  = "firefox.exe"
+	# 		Value = 0 # is equal to or greater than 50.1.x (or ESR 45.7.x)
+	# 	}
+	# )
+	FirefoxLockPrefSettings = @(
+		@{
+			Id   = "DTBF030"
+			Task = "Firewall traversal from remote host must be disabled."
+			LockPrefs = @(
+				@{ Name  = "security.enable_tls"; Value = $true }
+				@{ Name  = "security.tls.version.min"; Value = 2 }
+				@{ Name  = "security.tls.version.max"; Value = 3 }
+			)
+		}
+		@{
+			Id   = "DTBF050"
+			Task = "FireFox is configured to ask which certificate to present to a web site when a certificate is required."
+			LockPrefs = @(
+				@{ Name  = "security.default_personal_cert"; Value = "Ask Every Time" }
+			)
+		}
+		# @{ # Not set - in CIS Benchmarks
+		# 	Id = "DTBF080"
+		# 	Task = "Firefox application is set to auto-update."
+		# }
+		@{
+			Id   = "DTBF085"
+			Task = "Firefox automatically checks for updated version of installed Search plugins."
+			LockPrefs = @(
+				@{ Name  = "browser.search.update"; Value = $false }
+			)
+		}
+		@{
+			Id   = "DTBF090"
+			Task = "Firefox automatically updates installed add-ons and plugins."
+			LockPrefs = @(
+				@{ Name  = "extensions.update.enabled"; Value = $false }
+			)
+		}
+		@{
+			Id   = "DTBF105"
+			Task = "Network shell protocol is enabled in FireFox."
+			LockPrefs = @(
+				@{ Name  = "network.protocol-handler.external.shell"; Value = $false }
+			)
+		}
+		# @{ # no longer available 
+		# 	Id = "DTBF110"
+		# 	Task = "Firefox is not configured to prompt a user before downloading and opening required file types."
+		# }
+		# @{ # no longer available 
+		# 	Id = "DTBF130"
+		# 	Task = "Firefox is not configured to provide warnings when a user switches from a secure (SSL-enabled) to a non-secure page."
+		# }
+		@{
+			Id   = "DTBF140"
+			Task = "Firefox formfill assistance option is disabled."
+			LockPrefs = @(
+				@{ Name  = "browser.formfill.enable"; Value = $false }
+			)
+		}
+		@{
+			Id   = "DTBF150"
+			Task = "Firefox is configured to autofill passwords."
+			LockPrefs = @(
+				@{ Name  = "signon.autofillForms"; Value = $false }
+			)
+		}
+		# @{ # Not set - in CIS Benchmarks
+		# 	Id = "DTBF160"
+		# 	Task = "FireFox is configured to use a password store with or without a master password."
+		# }
+		# @{ # Not set - see CIS benchmark 5.4_L1_Disallow_JavaScripts_Ability_to_Hide_the_Status_Bar
+		# 	Id = "DTBF180"
+		# 	Task = "FireFox is not configured to block pop-up windows.
+		# }
+		@{
+			Id   = "DTBF181"
+			Task = "FireFox is configured to allow JavaScript to move or resize windows."
+			LockPrefs = @(
+				@{ Name  = "dom.disable_window_move_resize"; Value = $true }
+			)
+		}
+		@{
+			Id   = "DTBF183"
+			Task = " Firefox is configured to allow JavaScript to disable or replace context menus."
+			LockPrefs = @(
+				@{ Name  = "dom.event.contextmenu.enabled"; Value = $false }
+			)
+		}
+		# @{ # Not set - in CIS Benchmarks
+		# 	Id = "DTBF184"
+		# 	Task = "Firefox is configured to allow JavaScript to hide or change the status bar."
+		# }
+		# @{ # no longer available 
+		# 	Id = "DTBF186"
+		# 	Task = "Extensions install must be disabled."
+		# }
+		@{
+			Id   = "DTBF190"
+			Task = "Background submission of information to Mozilla must be disabled."
+			LockPrefs = @(
+				@{ Name  = "datareporting.policy.dataSubmissionEnabled"; Value = $false }
+				@{ Name  = "datareporting.healthreport.service.enabled"; Value = $false }
+				@{ Name  = "datareporting.healthreport.uploadEnabled"; Value = $false }
+			)
+		}
+	)
+}
+
+#endregion
+
+#region helper classes
+class LockPrefSetting {
+	[string] $Name
+	$Value
+}
+#endregion
+
+#region Helper functions
+function Get-FirefoxInstallDirectory {
+	if (Test-Path 'HKLM:\SOFTWARE\WOW6432Node\Mozilla\Mozilla Firefox\') {
+		$firefoxPath = 'HKLM:\SOFTWARE\WOW6432Node\Mozilla\Mozilla Firefox\'
+	}if (Test-Path 'HKLM:\SOFTWARE\Mozilla\Mozilla Firefox\') {
+		$firefoxPath = 'HKLM:\SOFTWARE\Mozilla\Mozilla Firefox\'
+	}
+	if(-not($null -eq $firefoxPath)){
+		$currentFirefox = Get-ChildItem -Path $firefoxPath | Select-Object -Last 1
+		$installDir = $currentFirefox | Get-ChildItem | Where-Object PSChildName -EQ "Main"
+		return $installDir | Get-ItemProperty | Select-Object -ExpandProperty "Install Directory"	
+	}
+	else{
+		Write-Output "Mozilla Firefox is not installed on OS"
+	}
+	# $firefoxPath = "HKLM:\SOFTWARE\WOW6432Node\Mozilla\Mozilla Firefox\"
+	# if (-not (Test-Path $firefoxPath)) {
+	# 	$firefoxPath = "HKLM:\SOFTWARE\Mozilla\Mozilla Firefox\"
+	# }
+}
+
+function Get-FirefoxLocalSettingsFile {
+	return "{0}\defaults\pref\local-settings.js" -f (Get-FirefoxInstallDirectory)
+}
+
+function Get-FirefoxMozillaCfgFileName {
+	$localSettingsFilePath = Get-FirefoxLocalSettingsFile
+	$content = if (Test-Path $localSettingsFilePath) { Get-Content $localSettingsFilePath } else { $null }
+	$filename = $content | ForEach-Object {
+		if ($_ -match "^pref\(`"general\.config\.filename`",\s?`"([\w\-. ]+\.cfg)`"\);") {
+			return $Matches[1]
+		}
+		return $null
+	} | Where-Object { $null -ne $_ } | Select-Object -Last 1
+
+	if ($null -eq $filename) {
+		return "mozilla.cfg"
+	}
+
+	return $filename
+}
+
+function Get-FirefoxMozillaCfgFile {
+	return "{0}\{1}" -f (Get-FirefoxInstallDirectory), (Get-FirefoxMozillaCfgFileName)
+}
+
+function Get-FirefoxLockPrefs {
+	if (-not (Test-Path (Get-FirefoxMozillaCfgFile))) {
+		return $null
+	}
+
+	$regex = "^lockPref\s*\(\s*`"([\w.-]+)`"\s*,\s*({0}|{1}|{2})\s*\);" -f @(
+		"(?<bool>true|false)"
+		"(?<number>\d+)"
+		"`"(?<string>(\\.|[^`"\\])*)`""
+	)
+
+	$currentLockPrefs = Get-Content (Get-FirefoxMozillaCfgFile) | ForEach-Object {
+		if ($_ -match $regex) {
+			$value = $null
+			if ($Matches.Keys -contains "bool") {
+				$value = [bool]::Parse($Matches["bool"])
+			}
+			elseif ($Matches.Keys -contains "number") {
+				$value = [int]::Parse($Matches["number"])
+			}
+			elseif ($Matches.Keys -contains "string") {
+				$value = $Matches["string"]
+			}
+
+			[LockPrefSetting]@{ Name = $Matches[1]; Value = $value }
+		}
+	} | Where-Object { $null -ne $_ }
+
+	return $currentLockPrefs
+}
+#endregion
+
+#region Audit functions
+function Get-RegistryAudit {
+	[CmdletBinding()]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Id,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Task,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Path,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Name,
+
+		[Parameter(ValueFromPipelineByPropertyName = $true)]
+		[AllowEmptyString()]
+		[object[]] $Value,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[ScriptBlock] $Predicate,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[String] $ExpectedValue,
+
+		[Parameter(ValueFromPipelineByPropertyName = $true)]
+		[bool] $DoesNotExist = $false
+	)
+
+	process {
+		try {
+			$regValues = Get-ItemProperty -ErrorAction Stop -Path $Path -Name $Name `
+				| Select-Object -ExpandProperty $Name
+
+			if (-not (& $Predicate $regValues)) {
+					$regValue = $regValues -join ", "
+
+				return @{
+					Id = $Id
+					Task = $Task
+					Message = "Registry value: $regValue. Differs from allowed value: $ExpectedValue."
+					Status = "False"
+				}
+			}
+		}
+		catch [System.Management.Automation.PSArgumentException] {
+			if ($DoesNotExist) {
+				return @{
+					Id = $Id
+					Task = $Task
+					Message = "Compliant. Registry value not set."
+					Status = "True"
+				}
+			}
+
+			return @{
+				Id = $Id
+				Task = $Task
+				Message = "Registry value not found."
+				Status = "False"
+			}
+		}
+		catch [System.Management.Automation.ItemNotFoundException] {
+			if ($DoesNotExist) {
+				return @{
+					Id = $Id
+					Task = $Task
+					Message = "Compliant. Registry value not set."
+					Status = "True"
+				}
+			}
+
+			return @{
+				Id = $Id
+				Task = $Task
+				Message = "Registry key not found."
+				Status = "False"
+			}
+		}
+
+		return @{
+			Id = $Id
+			Task = $Task
+			Message = "Compliant"
+			Status = "True"
+		}
+	}
+}
+
+function Get-FirefoxLocalSettingsFileAudit {
+	$Id = "1.1"
+	$Task = "Create local-settings.js file"
+
+	if (-not (Test-Path (Get-FirefoxLocalSettingsFile))){
+		return @{
+			Id      = $Id
+			Task    = $Task
+			Message = "local-settings.js file does not exist."
+			Status = "False"
+		}
+	}
+
+	$generalConfigFilename = Get-Content (Get-FirefoxLocalSettingsFile) | Where-Object {
+		$_ -match "^pref\s*\(\s*`"general\.config\.filename`"\s*,\s*`"([\w\-. ]+\.cfg)`"\s*\);"
+	}
+	
+	if ($generalConfigFilename.Count -eq 0) {
+		return @{
+			Id      = $Id
+			Task    = $Task
+			Message = "File does not set 'general.config.filename'"
+			Status = "False"
+		}
+	}
+
+	$generalConfigObscure = Get-Content (Get-FirefoxLocalSettingsFile) | Where-Object {
+		$_ -match "^pref\s*\(\s*`"general\.config\.obscure_value`"\s*,\s*0\s*\);"
+	}
+	
+	if ($generalConfigObscure.Count -eq 0) {
+		return @{
+			Id      = $Id
+			Task    = $Task
+			Message = "File does not set 'general.config.obscure' = 0"
+			Status = "False"
+		}
+	}
+
+	return @{
+		Id      = $Id
+		Task    = $Task
+		Message = "Compliant"
+		Status = "True"
+	}
+}
+
+function Get-FirefoxMozillaCfgFileAudit {
+	$name = Get-FirefoxMozillaCfgFileName
+
+	$Id = "1.3"
+	$Task = "Create $name file"
+
+	if (-not (Test-Path (Get-FirefoxMozillaCfgFile))){
+		return @{
+			Id      = $Id
+			Task    = $Task
+			Message = "$name file does not exist."
+			Status = "False"
+		}
+	}
+
+	return @{
+		Id      = $Id
+		Task    = $Task
+		Message = "Compliant"
+		Status = "True"
+	}
+}
+
+function Get-FileAudit {
+	[CmdletBinding()]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Id,
+	
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Task,
+	
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Path,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[scriptblock] $Predicate
+	)
+
+	process {
+		if (-not (Test-Path $Path)) {
+			return @{
+				Id = $Id
+				Task = $Task
+				Message = "File does not exist."
+				Status = "False"
+			}
+		}
+
+		if (-not (&$Predicate (Get-Content $Path))) {
+			return @{
+				Id = $Id
+				Task = $Task
+				Message = "File does not match predicate."
+				Status = "False"
+			}
+		}
+		
+		return @{
+			Id = $Id
+			Task = $Task
+			Message = "Compliant."
+			Status = "True"
+		}
+	}
+}
+
+function Get-LockPrefSettingAudit {
+	[CmdletBinding()]
+	Param(
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Id,
+	
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string] $Task,
+	
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[array] $LockPrefs,
+
+		[LockPrefSetting[]] $CurrentLockPrefs = (Get-FirefoxLockPrefs)
+	)
+	
+	process {
+		if ($null -eq $CurrentLockPrefs) {
+			return @{
+				Id = $Id
+				Task = $Task
+				Message = "general config does not exist."
+				Status = "None"
+			}
+		}
+
+		$missingLockPrefs = $LockPrefs | Where-Object {
+			$LockPref = $_
+			# LockPref not in currentLockPrefs
+			($currentLockPrefs | Where-Object {
+				($_.Name -eq $LockPref.Name) -and ($_.Value -is $LockPref.Value.GetType()) -and ($_.Value -eq $LockPref.Value)
+			}).Count -eq 0
+		}
+
+		if ($missingLockPrefs.Count -gt 0) {
+			$msg = ($missingLockPrefs | ForEach-Object { "lockPref(`"{0}`", {1})" -f $_.Name, $_.Value }) -join "; "
+
+			return @{
+				Id = $Id
+				Task = $Task
+				Message = "Missing lockprefs: $msg."
+				Status = "False"
+			}
+		}
+		
+		return @{
+			Id = $Id
+			Task = $Task
+			Message = "Compliant."
+			Status = "True"
+		}
+	}
+}
+#endregion
+
+$currentLockPrefs = Get-FirefoxLockPrefs
+
+[Report] @{
+	Title = 'Mozilla Firefox Audit Report'
+	ModuleName = 'ATAPAuditor'
+	BasedOn = @(
+		'CIS Mozilla Firefox 38 ESR Benchmark, Version: 1.0.0, Date: 2015-12-31'
+		'DISA Mozilla FireFox Security Technical Implementation Guide, Version: V4R24, Date: 2019-01-25'
+	)
+	Sections = @(
+		[ReportSection] @{
+			Title = 'CIS Benchmarks'
+			Description = 'This section contains all CIS benchmarks'
+			Subsections = @(
+				[ReportSection] @{
+					Title = "Configure Locked Preferences"
+					AuditInfos = @(
+						Get-FirefoxLocalSettingsFileAudit
+						# missing 1.2
+						Get-FirefoxMozillaCfgFileAudit
+						# missing 1.4
+						# missing 1.5
+					)
+				}
+				[ReportSection] @{
+					Title = "Preference Settings"
+					AuditInfos = foreach ($setting in $CisBenchmarks.FirefoxLockPrefSettings) {
+						$obj = New-Object -TypeName psobject -Property $setting
+						Write-Output ($obj | Get-LockPrefSettingAudit -CurrentLockPrefs $currentLockPrefs)
+					}
+				}
+			)
+		}
+		[ReportSection] @{
+			Title = 'DISA Recommendations'
+			Description = 'This section contains all DISA recommendations'
+			Subsections = @(
+				[ReportSection] @{
+					Title = "Preference Settings"
+					AuditInfos = foreach ($setting in $DisaRequirements.FirefoxLockPrefSettings) {
+						$obj = New-Object -TypeName psobject -Property $setting
+						Write-Output ($obj | Get-LockPrefSettingAudit -CurrentLockPrefs $currentLockPrefs)
+					}
+				}
+			)
+		}
+	)
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Reports/Red Hat Enterprise Linux 9.ps1 b/ATAPAuditor/Reports/Red Hat Enterprise Linux 9.ps1
new file mode 100644
index 0000000..d03730e
--- /dev/null
+++ b/ATAPAuditor/Reports/Red Hat Enterprise Linux 9.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "Red Hat Enterprise Linux 9"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Red Hat Enterprise Linux 9 version 2.0.0"
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains the general benchmark results"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'CIS Red Hat Enterprise Linux 9'
+					AuditInfos = Test-AuditGroup "Red Hat Enterprise Linux 9-CIS-2.0.0"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/SUSE 15.ps1 b/ATAPAuditor/Reports/SUSE 15.ps1
new file mode 100644
index 0000000..f4ec3f1
--- /dev/null
+++ b/ATAPAuditor/Reports/SUSE 15.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "SUSE Enterprise 15"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS SUSE Linux 15 version 1.1.1"
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains the general benchmark results"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'CIS SUSE Linux 15'
+					AuditInfos = Test-AuditGroup "SUSE Linux Enterprise 15-CIS-1.1.1"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Ubuntu 20.04.ps1 b/ATAPAuditor/Reports/Ubuntu 20.04.ps1
new file mode 100644
index 0000000..c2cc9f1
--- /dev/null
+++ b/ATAPAuditor/Reports/Ubuntu 20.04.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "Ubuntu 20.04 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Ubuntu Linux 20.04 version 1.1.0"
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains the general benchmark results"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'CIS Ubuntu Linux 20.04'
+					AuditInfos = Test-AuditGroup "Ubuntu Linux 20.04-CIS-1.1.0"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Reports/Ubuntu 22.04.ps1 b/ATAPAuditor/Reports/Ubuntu 22.04.ps1
new file mode 100644
index 0000000..c9ec961
--- /dev/null
+++ b/ATAPAuditor/Reports/Ubuntu 22.04.ps1	
@@ -0,0 +1,19 @@
+[Report] @{
+	Title = "Ubuntu 22.04 Report"
+	ModuleName = "ATAPAuditor"
+	BasedOn = @(
+		"CIS Ubuntu Linux 22.04 version 2.0.0"
+    )
+	Sections = @(
+		[ReportSection] @{
+			Title = "CIS Benchmarks"
+			Description = "This section contains the general benchmark results"
+			SubSections = @(
+				[ReportSection] @{
+					Title = 'CIS Ubuntu Linux 22.04'
+					AuditInfos = Test-AuditGroup "Ubuntu Linux 22.04-CIS-2.0.0"
+				}
+			)
+		}
+	)
+}
diff --git a/ATAPAuditor/Resources/FirefoxPreferences.ps1 b/ATAPAuditor/Resources/FirefoxPreferences.ps1
new file mode 100644
index 0000000..f6e1474
--- /dev/null
+++ b/ATAPAuditor/Resources/FirefoxPreferences.ps1
@@ -0,0 +1,134 @@
+function doFirefox {
+	param (
+		[Parameter(Mandatory = $true)]
+		[string]$path
+	)
+	$currentFirefoxRegKey = Get-ChildItem -Path $path | Select-Object -Last 1
+	$installDirRegKey = $currentFirefoxRegKey | Get-ChildItem | Where-Object PSChildName -EQ 'Main'
+	$InstallationPath = $installDirRegKey | Get-ItemProperty | Select-Object -ExpandProperty 'Install Directory'
+
+	# Calculate Firefox local-settings path
+	$LocalSettingsPath = "$InstallationPath\defaults\pref\local-settings.js"
+
+	# Calculate Firefox config path
+	$preferenceConfigFilename = 'mozilla.cfg'
+	if (Test-Path $LocalSettingsPath) {
+		foreach ($line in (Get-Content $LocalSettingsPath)) {
+			if ($_ -match "^pref\(`"general\.config\.filename`",\s?`"([\w\-. ]+\.cfg)`"\);") {
+				$preferenceConfigFilename = $Matches[1]
+			}
+		}
+	}
+	$PreferenceConfigPath = "$InstallationPath\$preferenceConfigFilename"
+
+	# Gather lines into lockPref list
+	# if (-not (Test-Path $LocalSettingsPath) -or
+	# 	-not (Test-Path $PreferenceConfigPath)) {
+	# 	return $null
+	# }
+
+	$boolRegex = '(?<bool>true|false)'
+	$numberRegex = '(?<number>\d+)'
+	$stringRegex = '"(?<string>(\\.|[^`"\\])*)"'
+	$lineRegex = "^lockPref\s*\(\s*`"([\w.-]+)`"\s*,\s*({0}|{1}|{2})\s*\);" -f $boolRegex, $numberRegex, $stringRegex
+
+	$LockedPreferences = @()
+	if (Test-Path $PreferenceConfigPath) {
+		foreach ($line in (Get-Content $PreferenceConfigPath)) {
+			if ($line -match $lineRegex) {
+				$value = $null
+				if ($Matches.Keys -contains "bool") {
+					$value = [bool]::Parse($Matches["bool"])
+				}
+				elseif ($Matches.Keys -contains "number") {
+					$value = [int]::Parse($Matches["number"])
+				}
+				elseif ($Matches.Keys -contains "string") {
+					$value = $Matches["string"]
+				}
+
+				$LockedPreferences += @{ Name = $Matches[1]; Value = $value }
+			}
+		}
+	}
+
+	return [PSCustomObject] @{
+		InstallationPath = $InstallationPath
+		LocalSettingsPath = $LocalSettingsPath
+		PreferenceConfigPath = $PreferenceConfigPath
+		LockedPreferences = $LockedPreferences
+	}
+
+
+	$currentFirefoxRegKey = Get-ChildItem -Path $path | Select-Object -Last 1
+	$installDirRegKey = $currentFirefoxRegKey | Get-ChildItem | Where-Object PSChildName -EQ 'Main'
+	$InstallationPath = $installDirRegKey | Get-ItemProperty | Select-Object -ExpandProperty 'Install Directory'
+
+	# Calculate Firefox local-settings path
+	$LocalSettingsPath = "$InstallationPath\defaults\pref\local-settings.js"
+
+	# Calculate Firefox config path
+	$preferenceConfigFilename = 'mozilla.cfg'
+	if (Test-Path $LocalSettingsPath) {
+		foreach ($line in (Get-Content $LocalSettingsPath)) {
+			if ($_ -match "^pref\(`"general\.config\.filename`",\s?`"([\w\-. ]+\.cfg)`"\);") {
+				$preferenceConfigFilename = $Matches[1]
+			}
+		}
+	}
+	$PreferenceConfigPath = "$InstallationPath\$preferenceConfigFilename"
+
+	# Gather lines into lockPref list
+	# if (-not (Test-Path $LocalSettingsPath) -or
+	# 	-not (Test-Path $PreferenceConfigPath)) {
+	# 	return $null
+	# }
+
+	$boolRegex = '(?<bool>true|false)'
+	$numberRegex = '(?<number>\d+)'
+	$stringRegex = '"(?<string>(\\.|[^`"\\])*)"'
+	$lineRegex = "^lockPref\s*\(\s*`"([\w.-]+)`"\s*,\s*({0}|{1}|{2})\s*\);" -f $boolRegex, $numberRegex, $stringRegex
+
+	$LockedPreferences = @()
+	if (Test-Path $PreferenceConfigPath) {
+		foreach ($line in (Get-Content $PreferenceConfigPath)) {
+			if ($line -match $lineRegex) {
+				$value = $null
+				if ($Matches.Keys -contains "bool") {
+					$value = [bool]::Parse($Matches["bool"])
+				}
+				elseif ($Matches.Keys -contains "number") {
+					$value = [int]::Parse($Matches["number"])
+				}
+				elseif ($Matches.Keys -contains "string") {
+					$value = $Matches["string"]
+				}
+
+				$LockedPreferences += @{ Name = $Matches[1]; Value = $value }
+			}
+		}
+	}
+
+	return [PSCustomObject] @{
+		InstallationPath = $InstallationPath
+		LocalSettingsPath = $LocalSettingsPath
+		PreferenceConfigPath = $PreferenceConfigPath
+		LockedPreferences = $LockedPreferences
+	}
+}
+
+# Calculate Firefox installation path
+if (Test-Path 'HKLM:\SOFTWARE\WOW6432Node\Mozilla\Mozilla Firefox\') {
+	$firefoxRegKeyPath = 'HKLM:\SOFTWARE\WOW6432Node\Mozilla\Mozilla Firefox\'
+	doFirefox -path $firefoxRegKeyPath
+}if (Test-Path 'HKLM:\SOFTWARE\Mozilla\Mozilla Firefox\') {
+	$firefoxRegKeyPath = 'HKLM:\SOFTWARE\Mozilla\Mozilla Firefox\'
+	doFirefox -path $firefoxRegKeyPath
+}else {
+	return [PSCustomObject] @{
+		InstallationPath = "Seems like Firefox is not installed on this system."
+		LocalSettingsPath = "Seems like Firefox is not installed on this system."
+		PreferenceConfigPath = "Seems like Firefox is not installed on this system."
+		LockedPreferences = "Seems like Firefox is not installed on this system."
+	}
+}
\ No newline at end of file
diff --git a/ATAPAuditor/Resources/WindowsSecurityPolicy.ps1 b/ATAPAuditor/Resources/WindowsSecurityPolicy.ps1
new file mode 100644
index 0000000..e33d565
--- /dev/null
+++ b/ATAPAuditor/Resources/WindowsSecurityPolicy.ps1
@@ -0,0 +1,48 @@
+using module .\..\Helpers\SecurityPolicy.psm1
+
+$currentPrincipal = New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())
+$isAdministrator = $currentPrincipal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+
+if(-not $isAdministrator){
+	throw "Administrator privileges are required!"
+}
+
+# get a temporary file to save and process the secedit settings
+$securityPolicyPath = Join-Path -Path $env:TEMP -ChildPath 'SecurityPolicy.inf'
+
+# export the secedit settings to this temporary file
+Write-Verbose "[WindowsSecurityPolicy] Exporting local security policies from secedit into tempory file: $securityPolicyPath"
+secedit.exe /export /cfg $securityPolicyPath | Out-Null
+
+$config = @{}
+switch -regex -file $securityPolicyPath {
+	"^\[(.+)\]" { # Section
+		$section = $matches[1]
+		$config[$section] = @{}
+	}
+	"(.+?)\s*=(.*)" { # Key
+		$name = $matches[1]
+		$value = $matches[2] -replace "\*"
+		$config[$section][$name] = $value
+	}
+}
+
+Write-Verbose "[WindowsSecurityPolicy] Converting identities in 'Privilege Rights' section"
+$privilegeRights = @{}
+foreach ($key in $config["Privilege Rights"].Keys) {
+	# Make all accounts SIDs
+	$accounts = $($config["Privilege Rights"][$key] -split ",").Trim() `
+		| ConvertTo-NTAccountUser -Verbose:$VerbosePreference `
+		| Where-Object { $null -ne $_ }
+	$privilegeRights[$key] = $accounts
+}
+$config["Privilege Rights"] = $privilegeRights
+
+# sanitize input
+$systemAccess = @{}
+foreach ($key in $config["System Access"].Keys) {
+	$systemAccess[$key] = $config["System Access"][$key].Trim()
+}
+$config["System Access"] = $systemAccess
+
+return $config
\ No newline at end of file
diff --git a/ATAPHtmlReport/ATAPHtmlReport.Tests.ps1 b/ATAPHtmlReport/ATAPHtmlReport.Tests.ps1
new file mode 100644
index 0000000..10c8841
--- /dev/null
+++ b/ATAPHtmlReport/ATAPHtmlReport.Tests.ps1
@@ -0,0 +1,91 @@
+<#
+BSD 3-Clause License
+
+Copyright (c) 2023, FB Pro GmbH
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#>
+
+Import-Module "./ATAPHtmlReport" -Force
+
+class MyAudit {
+	[string] $Id
+	[string] $Task
+	[string] $Status
+	[string] $Message
+}
+
+Describe "ATAPHtmlReport" {
+	InModuleScope ATAPHtmlReport {
+		$testPath = "$PSScriptRoot\testreport.html"
+		$args = @{
+			Path = $testPath
+			Title = "My Benchmark Report"
+			ModuleName = "MyAudit"
+			BasedOn = @(
+				"My Benchmark v1.0.0 - 10-05-2017"
+				"My Benchmark 2 v1.0.0 - 10-05-2017"
+				"My Benchmark 3 v1.0.0 - 10-05-2017"
+			)
+		}
+		Get-ATAPHtmlReport @args -Sections @(
+			[PSCustomObject]@{
+				Title = "Section 1"
+				AuditInfos = @(
+					[MyAudit]@{ Id = "1.1"; Task = "Ensure something"; Message = "All Good"; Status = 'True' }
+					[MyAudit]@{ Id = "1.2"; Task = "Ensure something"; Message = "All Good"; Status = 'True' }
+					[MyAudit]@{ Id = "1.3"; Task = "Ensure something"; Message = "All Good"; Status = 'True' }
+					[MyAudit]@{ Id = "1.4"; Task = "Ensure something"; Message = "Not run"; Status = 'None' }
+				)
+			},
+			[PSCustomObject]@{
+				Title = "Section 2"
+				SubSections = @(
+					[PSCustomObject]@{
+						Title = " Section 2.1"
+						AuditInfos = @(
+							[MyAudit]@{ Id = "2.1.1"; Task = "Ensure something else"; Message = "All Good"; Status = 'Warning' }
+							[MyAudit]@{ Id = "2.1.2"; Task = "Ensure something entirely different"; Message = "All good"; Status = 'True' }
+						)
+					},
+					[PSCustomObject]@{
+						Title = "Section 2.2"
+						AuditInfos = @(
+							[MyAudit]@{ Id = "2.2.1"; Task = "Ensure something entirely different"; Message = "Something went wrong"; Status = 'False' }
+							[MyAudit]@{ Id = "2.2.2"; Task = "Text overflow can only happen on block or inline-block level elements, because the element needs to have a width in order to be overflow-ed. The overflow happens in the direction as determined by the direction property or related attributes."; Message = "All Good"; Status = 'True' }
+							[MyAudit]@{ Id = "2.1.2"; Task = "Ensure something entirely different"; Message = "Not quite good"; Status = 'Warning' }
+						)
+					}
+				)
+			}
+		)
+
+		It "Get-ATAPHtmlReport" {
+			Test-Path $testPath | Should Be $true
+		}
+	}
+}
diff --git a/ATAPHtmlReport/ATAPHtmlReport.psd1 b/ATAPHtmlReport/ATAPHtmlReport.psd1
new file mode 100644
index 0000000..d7e4272
--- /dev/null
+++ b/ATAPHtmlReport/ATAPHtmlReport.psd1
@@ -0,0 +1,146 @@
+<#
+BSD 3-Clause License
+
+Copyright (c) 2023, FB Pro GmbH
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#>
+
+@{
+
+# Script module or binary module file associated with this manifest.
+RootModule = 'ATAPHtmlReport.psm1'
+
+# Version number of this module.
+ModuleVersion = '1.13.5'
+
+# Supported PSEditions
+# CompatiblePSEditions = @()
+
+# ID used to uniquely identify this module
+GUID = 'b732e8cd-6500-4da8-ac96-ab60087c739b'
+
+# Author of this module
+Author = 'Benedikt Böhme, Patrick Helbach, Steffen Winternheimer, Robin Wernz'
+
+# Company or vendor of this module
+CompanyName = 'FB Pro GmbH'
+
+# Copyright statement for this module
+Copyright = '(c) 2023 FB Pro GmbH. All rights reserved.'
+
+# Description of the functionality provided by this module
+Description = 'ATAPHtmlReport serves as the basis for HTML reports generated via ATAPAuditor.'
+
+# Minimum version of the Windows PowerShell engine required by this module
+PowerShellVersion = '5.0'
+
+# Name of the Windows PowerShell host required by this module
+# PowerShellHostName = ''
+
+# Minimum version of the Windows PowerShell host required by this module
+# PowerShellHostVersion = ''
+
+# Minimum version of Microsoft .NET Framework required by this module. This prerequisite is valid for the PowerShell Desktop edition only.
+# DotNetFrameworkVersion = ''
+
+# Minimum version of the common language runtime (CLR) required by this module. This prerequisite is valid for the PowerShell Desktop edition only.
+# CLRVersion = ''
+
+# Processor architecture (None, X86, Amd64) required by this module
+# ProcessorArchitecture = ''
+
+# Modules that must be imported into the global environment prior to importing this module
+# RequiredModules = @()
+
+# Assemblies that must be loaded prior to importing this module
+# RequiredAssemblies = @()
+
+# Script files (.ps1) that are run in the caller's environment prior to importing this module.
+# ScriptsToProcess = @()
+
+# Type files (.ps1xml) to be loaded when importing this module
+# TypesToProcess = @()
+
+# Format files (.ps1xml) to be loaded when importing this module
+# FormatsToProcess = @()
+
+# Modules to import as nested modules of the module specified in RootModule/ModuleToProcess
+# NestedModules = @()
+
+# Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.
+FunctionsToExport = @('Get-ATAPHtmlReport', 'Get-ATAPHostInformation')
+
+# Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.
+CmdletsToExport = @()
+
+# Variables to export from this module
+VariablesToExport = ''
+
+# Aliases to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no aliases to export.
+AliasesToExport = @()
+
+# DSC resources to export from this module
+# DscResourcesToExport = @()
+
+# List of all modules packaged with this module
+# ModuleList = @()
+
+# List of all files packaged with this module
+# FileList = @()
+
+# Private data to pass to the module specified in RootModule/ModuleToProcess. This may also contain a PSData hashtable with additional module metadata used by PowerShell.
+PrivateData = @{
+
+	PSData = @{
+
+		# Tags applied to this module. These help with module discovery in online galleries.
+		Tags = @('reporting', 'auditing', 'benchmarks', 'fb-pro', 'html')
+
+		# A URL to the license for this module.
+		LicenseUri = 'https://github.com/fbprogmbh/Audit-Test-Automation/blob/master/LICENSE'
+
+		# A URL to the main website for this project.
+		ProjectUri = 'https://github.com/fbprogmbh/Audit-Test-Automation'
+
+		# A URL to an icon representing this module.
+		# IconUri = ''
+
+		# ReleaseNotes of this module
+		# ReleaseNotes = ''
+
+	} # End of PSData hashtable
+
+} # End of PrivateData hashtable
+
+# HelpInfo URI of this module
+# HelpInfoURI = ''
+
+# Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix.
+# DefaultCommandPrefix = ''
+
+}
diff --git a/ATAPHtmlReport/ATAPHtmlReport.psm1 b/ATAPHtmlReport/ATAPHtmlReport.psm1
new file mode 100644
index 0000000..b69f49d
--- /dev/null
+++ b/ATAPHtmlReport/ATAPHtmlReport.psm1
@@ -0,0 +1,2125 @@
+<#
+BSD 3-Clause License
+Copyright (c) 2023, FB Pro GmbH
+All rights reserved.
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#>
+
+$webIcon = @"
+<svg width='20' height='20' viewBox='0 0 25 25'><path d='M10.4425 2.44429C10.0752 3.64002 9.32073 6.25569 8.89915 8.83258C9.99331 9.00921 11.0621 9.12209 12 9.12209C12.9379 9.12209 14.0067 9.00921 15.1009 8.83258C14.6793 6.25569 13.9248 3.64002 13.5575 2.44429C13.0509 2.3624 12.5307 2.31977 12 2.31977C11.4693 2.31977 10.9491 2.3624 10.4425 2.44429ZM15.3337 2.90893C15.737 4.305 16.2958 6.42828 16.6448 8.54737C18.1513 8.23703 19.5727 7.85824 20.605 7.56109C19.4986 5.42102 17.6172 3.74662 15.3337 2.90893ZM21.2129 9.01933C20.1222 9.33683 18.5423 9.76328 16.8594 10.1057C16.9295 10.7564 16.9709 11.3958 16.9709 12C16.9709 12.8816 16.8827 13.8411 16.7445 14.8058C18.759 14.3858 20.6068 13.849 21.5557 13.5575C21.6376 13.0509 21.6802 12.5307 21.6802 12C21.6802 10.959 21.5162 9.95751 21.2129 9.01933ZM21.0911 15.3337C19.9166 15.6729 18.229 16.1219 16.4634 16.4634C16.1219 18.229 15.6729 19.9166 15.3337 21.0911C17.9978 20.1138 20.1138 17.9978 21.0911 15.3337ZM13.5576 21.5557C13.849 20.6068 14.3858 18.759 14.8058 16.7445C13.8411 16.8827 12.8816 16.9709 12 16.9709C11.1184 16.9709 10.1589 16.8827 9.19423 16.7445C9.61421 18.759 10.151 20.6068 10.4425 21.5557C10.9491 21.6376 11.4693 21.6802 12 21.6802C12.5307 21.6802 13.0509 21.6376 13.5576 21.5557ZM8.66629 21.0911C8.32707 19.9166 7.8781 18.229 7.53658 16.4634C5.77099 16.1219 4.08335 15.6729 2.90891 15.3337C3.88622 17.9978 6.00216 20.1138 8.66629 21.0911ZM2.44429 13.5575C3.39316 13.849 5.24101 14.3858 7.25548 14.8058C7.1173 13.8411 7.02907 12.8816 7.02907 12C7.02907 11.3958 7.07048 10.7564 7.14056 10.1057C5.45769 9.76328 3.87779 9.33683 2.78712 9.01933C2.48383 9.95751 2.31977 10.959 2.31977 12C2.31977 12.5307 2.3624 13.0509 2.44429 13.5575ZM3.39504 7.56109C4.42731 7.85824 5.84865 8.23703 7.35522 8.54737C7.70416 6.42827 8.26303 4.305 8.66626 2.90893C6.38282 3.74662 4.50139 5.42102 3.39504 7.56109ZM8.68924 10.3888C8.63137 10.9544 8.59884 11.4968 8.59884 12C8.59884 12.9399 8.71224 14.012 8.88985 15.1102C9.98798 15.2878 11.0601 15.4012 12 15.4012C12.9399 15.4012 14.012 15.2878 15.1102 15.1102C15.2878 14.012 15.4012 12.9399 15.4012 12C15.4012 11.4968 15.3686 10.9544 15.3108 10.3888C14.1776 10.5703 13.0348 10.6919 12 10.6919C10.9652 10.6919 9.82236 10.5703 8.68924 10.3888ZM9.67273 0.991173C10.4243 0.833026 11.2029 0.75 12 0.75C12.7971 0.75 13.5757 0.833026 14.3273 0.991174C18.0108 1.76627 21.0281 4.34097 22.42 7.75174C22.9554 9.06356 23.25 10.4983 23.25 12C23.25 12.7971 23.167 13.5757 23.0088 14.3273C22.0943 18.6736 18.6736 22.0943 14.3273 23.0088C13.5757 23.167 12.7971 23.25 12 23.25C11.2029 23.25 10.4243 23.167 9.67273 23.0088C5.32644 22.0943 1.90572 18.6736 0.991173 14.3273C0.833026 13.5757 0.75 12.7971 0.75 12C0.75 10.4972 1.04509 9.06132 1.58123 7.74866C2.97369 4.33943 5.99026 1.76604 9.67273 0.991173Z' fill='#000000'></path></svg>
+"@
+
+$mailIcon = @"
+<svg width='20' height='20' viewBox='0 0 25 25'><path fill-rule='evenodd' clip-rule='evenodd' d='M2.54433 5.16792C3.0468 4.46923 3.86451 4 4.8 4H19.2C20.1355 4 20.9532 4.46923 21.4557 5.16792C21.7993 5.64567 22 6.235 22 6.86667V17.1333C22 18.682 20.7804 20 19.2 20H4.8C3.21964 20 2 18.682 2 17.1333V6.86667C2 6.23499 2.20074 5.64567 2.54433 5.16792ZM4.9327 6L11.2598 12.9647C11.6566 13.4015 12.3434 13.4015 12.7402 12.9647L19.0673 6H4.9327ZM20 7.94766L14.2205 14.3096C13.0301 15.6199 10.9699 15.6199 9.77948 14.3096L4 7.94766V17.1333C4 17.6466 4.39214 18 4.8 18H19.2C19.6079 18 20 17.6466 20 17.1333V7.94766Z' fill='#000000'></path></svg>
+"@
+
+$phoneIcon = @"
+<svg width='20' height='20' viewBox='0 0 25 25'><path d='M16.5562 12.9062L16.1007 13.359C16.1007 13.359 15.0181 14.4355 12.0631 11.4972C9.10812 8.55901 10.1907 7.48257 10.1907 7.48257L10.4775 7.19738C11.1841 6.49484 11.2507 5.36691 10.6342 4.54348L9.37326 2.85908C8.61028 1.83992 7.13596 1.70529 6.26145 2.57483L4.69185 4.13552C4.25823 4.56668 3.96765 5.12559 4.00289 5.74561C4.09304 7.33182 4.81071 10.7447 8.81536 14.7266C13.0621 18.9492 17.0468 19.117 18.6763 18.9651C19.1917 18.9171 19.6399 18.6546 20.0011 18.2954L21.4217 16.883C22.3806 15.9295 22.1102 14.2949 20.8833 13.628L18.9728 12.5894C18.1672 12.1515 17.1858 12.2801 16.5562 12.9062Z' fill='#000000'></path></svg>
+"@
+<#
+icons from https://www.svgrepo.com/
+
+#>
+enum AuditInfoStatus {
+	True
+	False
+	Warning
+	None
+	Error
+}
+
+$ScriptRoot = Split-Path -Parent $PSCommandPath
+
+$Settings = Import-PowerShellDataFile -Path "$ScriptRoot\Settings.psd1"
+$ModuleVersion = (Import-PowerShellDataFile -Path "$ScriptRoot\ATAPHtmlReport.psd1").ModuleVersion
+
+$StatusValues = 'True', 'False', 'Warning', 'None', 'Error'
+$AuditProperties = @{ Name = 'Id' }, @{ Name = 'Task' }, @{ Name = 'Message' }, @{ Name = 'Status' }
+
+#read in all information needed for Mitre Attack Mapping from json file
+$global:CISToAttackMappingData = Get-Content -Raw "$PSScriptRoot\resources\CISToAttackMappingData.json" | ConvertFrom-Json
+
+function Get-MitreMappingMetaData {
+	<#
+	.SYNOPSIS
+		Returns the specified metadata to the mapping data 
+	.EXAMPLE
+		Get-MitreMappingMetaData -Get BasedOn
+		Get-MitreMappingMetaData BasedOn
+	#>
+	param(
+		[Parameter(Mandatory)][ValidateSet('Version', 'BasedOn', 'Compatible')]
+		[string]$Get
+	)
+	return $CISToAttackMappingData.'MappingMetaData'.$Get
+}
+
+function Get-MitreTacticName {
+	<#
+	.SYNOPSIS
+		Returns the corresponding name for a given Mitre Tactic Id
+
+	.EXAMPLE
+		Get-MitreTacticName TacticId 'TA0043'
+	#>
+	param(
+		[Parameter(Mandatory = $true)]
+		[string]
+		$TacticId
+	)
+
+	# $CISToAttackMappingData[AttackTactics][$tacticId] cannot be used because CISToAttackMappingData is a customObject and not a map
+	return $CISToAttackMappingData.'AttackTactics'.$tacticId
+}
+
+function Get-MitreTactics {
+	<#
+	.SYNOPSIS
+		Returns a List of Mitre Tactic IDs for a given Mitre Technique Id
+
+	.EXAMPLE
+		Get-MitreTactics -TechniqueID 'T1133'
+	#>
+	param(
+		[Parameter(Mandatory = $true)]
+		$TechniqueID
+	)
+	return $CISToAttackMappingData.'TechniquesToTactis'.$TechniqueID
+}
+
+function Get-MitreTechniqueName {
+	<#
+	.SYNOPSIS
+		Returns the name of a Mitre technique for a given Mitre Technique Id
+
+	.EXAMPLE
+		Get-MitreTechniqueName -TechniqueID 'T1133'
+	#>
+	param(
+		[Parameter(Mandatory = $true)]
+		$TechniqueID
+	)
+	return $CISToAttackMappingData.'AttackTechniques'.$TechniqueID.'name'
+}
+
+function Test-CompatibleMitreReport {
+	<#
+	.SYNOPSIS
+		Returns if the report is compatible with the current mitre heatmap
+
+	.EXAMPLE
+		Test-CompatibleMitreReport -Title "Windows 10 Report" -os "Win32NT"
+	#>
+	param(
+		[Parameter(Mandatory = $true)]
+		$Title,
+		[Parameter(Mandatory = $true)]
+		$os
+	)
+	if (($Title -eq "Windows 10 Report" -or $Title -eq "Windows 11 Report" -or $Title -eq "Windows Server 2019 Audit Report" -or $Title -eq "Windows Server 2022 Audit Report") -and $os -match "Win32NT") {
+		return $true
+	}
+	else {
+		return $false
+	}
+}
+
+function Get-MitreTechniqueCategories {
+	<#
+	.SYNOPSIS
+		Returns the categories of a Mitre technique in order to apply filters to the report.
+		Will return a string that provides all categories stored in the JSON file.
+
+	.EXAMPLE
+		Get-MitreTechniqueCategories -TechniqueID 'T1133'
+	#>
+	param(
+		[Parameter(Mandatory = $true)]
+		$TechniqueID
+	)
+	return $CISToAttackMappingData.'AttackTechniques'.$TechniqueID.'categories'
+}
+
+
+class MitreMap {
+	[System.Collections.Generic.Dictionary[string, [System.Collections.Generic.Dictionary[string, [System.Collections.Generic.Dictionary[string, AuditInfoStatus]]]]]] $Map
+
+	MitreMap() {
+		$this.Map = @{}
+
+		#read in techniques from json-file
+		$techniques = $global:CISToAttackMappingData.'AttackTechniques'
+		$tactics = $global:CISToAttackMappingData.'AttackTactics'
+
+		foreach ($tacitc in $tactics.psobject.properties.name) {
+			$this.Map[$tacitc] = @{}
+		}
+
+		#add all techniques and tactics to map
+		foreach ($technique in $techniques.psobject.properties.name) {
+			$tactics = Get-MitreTactics -TechniqueID $techniques.$technique.'ID'
+			foreach ($tactic in $tactics) {
+				if ($null -eq $this.Map[$tactic][$techniques.$technique.'ID']) {
+					$this.Map[$tactic][$techniques.$technique.'ID'] = @{}
+				}
+			}
+		}
+	}
+
+	[void] Add($tactic, $technique, $id, $value) {
+		if ($tactic -and $technique -and $id -and $null -ne $value -and $tactic.GetType().Name -eq 'String' -and $technique.GetType().Name -eq 'String' -and $id.GetType().Name -eq 'String' -and $value.GetType().Name -eq 'AuditInfoStatus') {
+			if ($null -eq $this.Map[$tactic]) {
+				$this.Map[$tactic] = @{}
+			}
+			if ($null -eq $this.Map[$tactic][$technique]) {
+				$this.Map[$tactic][$technique] = @{}
+			}
+			$this.Map[$tactic][$technique][$id] = $value
+		}
+		else {
+			if (!$tactic) {
+				Write-Error -Message 'Could not add value to Map. $tactic is $null or empty' -Category InvalidType
+			}
+			elseif (!$technique) {
+				Write-Error -Message 'Could not add value to Map. $technique is $null or empty' -Category InvalidType
+			}
+			elseif (!$id) {
+				Write-Error -Message 'Could not add value to Map. $id is $null or empty' -Category InvalidType
+			}
+			elseif ($null -eq $value) {
+				Write-Error -Message 'Could not add value to Map. $value is $null' -Category InvalidType
+			}
+			else {
+				Write-Error -Message 'Could not add value to Map' -Category InvalidType
+			}
+		}
+	}
+
+	[void] Print() {
+		foreach ($tactic in $this.Map.Keys) {
+			Write-Host "$tactic = "
+			foreach ($technique in $this.Map[$tactic].Keys) {
+				Write-Host "    $technique = "
+				foreach ($id in $this.Map[$tactic][$technique].Keys) {
+					Write-Host "        $id = $($this.Map[$tactic][$technique][$id])"
+				}
+			}
+		}
+	}
+}
+
+function get-MitreLink {
+	<#
+	.SYNOPSIS
+		Creates a url which points to the documentation of mitre for a given tactic or technique
+
+    .PARAMETER id
+        id of the tactic or technique
+		
+    .PARAMETER type
+		one of 'tactic', 'technique' or 'mitigations'
+
+	.EXAMPLE
+		get-MitreLink -type technique -id 'T1548' | Should -Be 'https://attack.mitre.org/techniques/T1548/'
+	#>
+
+	param(
+		[string] $id,
+		[Parameter(Mandatory)][ValidateSet('tactics', 'techniques', 'mitigations')]
+		[string]$type
+	)
+
+	$url = 'https://attack.mitre.org/'
+	$url += "$type/$id/"
+	return $url
+}
+
+function Join-ATAPReportStatus {
+	[CmdletBinding()]
+	[OutputType([string])]
+	param(
+		[Parameter(Mandatory = $true)]
+		[string[]]
+		$Statuses
+	)
+
+	if ($Statuses -contains 'False') {
+		return 'False'
+	}
+	elseif ($Statuses -contains 'Error') {
+		return 'Warning'
+	}
+	elseif ($Statuses -contains 'Warning') {
+		return 'Warning'
+	}
+	elseif ($Statuses -contains 'True') {
+		return 'True'
+	}
+	else {
+		return 'None'
+	}
+}
+
+function htmlElement {
+	param(
+		[Parameter(Mandatory = $true, Position = 0)]
+		[string]
+		$ElementName,
+
+		[Parameter(Mandatory = $true, Position = 1)]
+		[hashtable]
+		$Attributes,
+
+		[Parameter(Mandatory = $true, Position = 2)]
+		[scriptblock]
+		$Children
+	)
+
+	$htmlAttributes = @()
+	foreach ($attribute in $Attributes.GetEnumerator()) {
+		$htmlAttributes += '{0}="{1}"' -f $attribute.Name, $attribute.Value
+	}
+
+	[string[]]$htmlChildren = & $Children
+
+	return '<{0} {1}>{2}</{0}>' -f $ElementName, ($htmlAttributes -join ' '), ($htmlChildren -join '')
+}
+
+function Get-SectionStatus {
+	param(
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[Alias('AuditInfos')]
+		[array]
+		$ConfigAudits,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[array]
+		$Subsections
+	)
+
+	process {
+		$allStatuses = @()
+		if ($null -ne $ConfigAudits) {
+			$allStatuses += $ConfigAudits.Status
+		}
+		if ($null -ne $Subsections) {
+			foreach ($subsection in $Subsections) {
+				$allStatuses += $subsection | Get-SectionStatus
+			}
+		}
+		return Join-ATAPReportStatus $allStatuses
+	}
+}
+
+function Get-HtmlClassFromStatus {
+	param(
+		[Parameter(Mandatory = $true)]
+		[string]
+		$Status
+	)
+
+	process {
+		switch ($Status) {
+			'True' { 'passed' }
+			'False' { 'failed' }
+			'Warning' { 'warning' }
+			'None' { 'none' }
+			'Error' { 'error' }
+			Default { "" }
+		}
+	}
+}
+
+function Convert-SectionTitleToHtmlId {
+	param(
+		[Parameter(Mandatory = $true)]
+		[string] $Title
+	)
+
+	$charMap = {
+		switch ($_) {
+			' ' { "-" }
+			'-' { "--" }
+			Default { $_ }
+		}
+	}
+
+	return ([char[]]$Title | ForEach-Object $charMap) -join ''
+}
+
+function CreateToc {
+	param(
+		[Parameter(Mandatory = $true)]
+		$title
+	)
+	htmlElement 'li' @{} {
+		htmlElement 'a' @{ href = "#$($title)" } { "$($title)" }
+	}
+}
+
+
+
+function CreateHashTable {
+	htmlElement 'div'@{id = "hashTableDiv" } {
+		htmlElement 'h2' @{style = "margin-top: 0;" } { "Overall integrity" }
+		htmlElement 'p' @{} { "This table outlines integrity checksums for each hardening recommendation. This allows for a quick comparison between reports by simply comparing provided hash values." }
+		htmlElement 'table'@{ id = "hashTable" } {
+			htmlElement 'thead' @{} {
+				htmlElement 'tr' @{} {
+					htmlElement 'th'  @{style = "border: 1px solid var(--color-dark-gray); border-collapse: collapse; background-color: var(--color-dark-gray);" } { "Integrity Check for following scopes" }
+					htmlElement 'th'  @{style = "border: 1px solid var(--color-dark-gray); border-collapse: collapse; background-color: var(--color-dark-gray);" } { "Checksum (SHA-256)" }
+				}
+			}
+			htmlElement 'tbody' @{id = "hashTableBody" } {
+				htmlElement 'tr' @{} {
+					#Scope
+					htmlElement 'td' @{style = "border: 1px solid var(--color-dark-gray); border-collapse: collapse;vertical-align: middle; " } { "Overall integrity check" }
+					#Checksum
+					htmlElement 'td' @{style = "border: 1px solid var(--color-dark-gray); border-collapse: collapse; " } {
+						htmlElement 'p' @{style = "padding-right: 20px;" } { "$($hashtable_sha256.Get_Item($Title))" }
+					}
+				}
+
+				# $index = 0
+				# $trColorSwitch = 0
+				# foreach ($section in $Sections) {
+				# 	if ($trColorSwitch -eq 0) {
+				# 		htmlElement 'tr'  @{style = "border: 1px solid #d2d2d2; border-collapse: collapse; background-color: #efefef;" } {
+				# 			#Scope
+				# 			htmlElement 'td'  @{style = "border: 1px solid #d2d2d2; border-collapse:; vertical-align: middle; " } { "$($section.Title)" }
+				# 			#Checksum
+				# 			htmlElement 'td'  @{style = "border: 1px solid #d2d2d2; border-collapse: collapse; " } {
+				# 				htmlElement 'p' @{style = "padding-right: 20px;" } { "$($hashtable_sha256.Get_Item($section.Title))" }
+				# 			}
+				# 		}
+				# 		$trColorSwitch = 1
+				# 	}
+				# 	else {
+				# 		htmlElement 'tr'  @{style = "border: 1px solid #d2d2d2; border-collapse: collapse;" } {
+				# 			#Scope
+				# 			htmlElement 'td'  @{style = "border: 1px solid #d2d2d2; border-collapse:; vertical-align: middle; " } { "$($section.Title)" }
+				# 			#Checksum
+				# 			htmlElement 'td'  @{style = "border: 1px solid #d2d2d2; border-collapse: collapse; " } {
+				# 				htmlElement 'p' @{style = "padding-right: 20px;" } { "$($hashtable_sha256.Get_Item($section.Title))" }
+				# 			}
+				# 		}
+				# 		$trColorSwitch = 0
+				# 	}
+				# 	$index += 1
+				# }
+
+				$index = 0
+				foreach ($section in $Sections) {
+					$trColorSwitch += 1
+					$background = ""
+					if ($index%2 -eq 0) {
+						$background = "background-color: var(--color-light-gray);"
+					}else{
+						$background = ""
+					}
+					htmlElement 'tr'  @{style = "border: 1px solid var(--color-dark-gray); border-collapse: collapse;$($background)" } {
+						#Scope
+						htmlElement 'td'  @{style = "border: 1px solid var(--color-dark-gray); border-collapse:; vertical-align: middle; " } { "$($section.Title)" }
+						#Checksum
+						htmlElement 'td'  @{style = "border: 1px solid var(--color-dark-gray); border-collapse: collapse; " } {
+							htmlElement 'p' @{style = "padding-right: 20px;" } { "$($hashtable_sha256.Get_Item($section.Title))" }
+						}
+					}
+					$index += 1
+				}
+			}
+		}
+	}
+}
+
+function CreateReportContent {
+	param(
+		[Parameter(Mandatory = $true)]
+		$tests,
+		[Parameter(Mandatory = $true)]
+		$title
+	)
+	$amountOfFailedTests = 0
+	foreach ($test in $tests) {
+		if ($test.Status -eq 'False') {
+			$amountOfFailedTests ++
+		}
+	}
+	#if at least one test is failed
+	if ($amountOfFailedTests -gt 0) {
+		htmlElement 'h2' @{ id = "$($title)"; class = "severityResultFalse" } { "$($title)" }
+	}
+	else {
+		htmlElement 'h2' @{ id = "$($title)"; class = "severityResultTrue" } { "$($title)" }
+	}
+	htmlElement 'table' @{class = 'audit-info'; style = 'margin-bottom: 50px; margin-top: 20px;' } {
+		htmlElement 'tbody' @{} {
+			htmlElement 'tr' @{} {
+				htmlElement 'th' @{} { "Id" }
+				htmlElement 'th' @{} { "Task" }
+				htmlElement 'th' @{} { "Message" }
+				htmlElement 'th' @{} { "Status" }
+			}
+			foreach ($test in $tests) {
+				htmlElement 'tr' @{} {
+					htmlElement 'td' @{} { "$($test.Id)" }
+					htmlElement 'td' @{} { "$($test.Task)" }
+					htmlElement 'td' @{} { "$($test.Message)" }
+					htmlElement 'td' @{} { 
+						if ($test.Status -eq 'False') {
+							htmlElement 'span' @{class = "severityResultFalse" } {
+								"$($test.Status)"
+							}
+						}
+						elseif ($test.Status -eq 'True') {
+							htmlElement 'span' @{class = "severityResultTrue" } {
+								"$($test.Status)"
+							}
+						}
+						elseif ($test.Status -eq 'None') {
+							htmlElement 'span' @{class = "severityResultNone" } {
+								"$($test.Status)"
+							}
+						}
+						elseif ($test.Status -eq 'Warning') {
+							htmlElement 'span' @{class = "severityResultWarning" } {
+								"$($test.Status)"
+							}
+						}
+						elseif ($test.Status -eq 'Error') {
+							htmlElement 'span' @{class = "severityResultError" } {
+								"$($test.Status)"
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}
+
+
+function Get-HtmlTableRow {
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		$Audit
+	)
+
+	process {
+		# $properties = $Audit | Get-Member -MemberType Property
+
+		htmlElement 'tr' @{} {
+			foreach ($property in $AuditProperties) {
+				$value = $Audit | Select-Object -ExpandProperty $property.Name
+				if ($Property.Name -eq 'Status') {
+					$class = Get-HtmlClassFromStatus $Audit.Status
+					$value = htmlElement 'span' @{ class = "auditstatus $class" } { $value }
+				}
+				htmlElement 'td' @{} { $value }
+			}
+		}
+	}
+}
+
+function Get-HtmlToc {
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$Title,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[array]
+		$Subsections,
+
+		[string]
+		$Prefix = ''
+	)
+
+	process {
+		$id = Convert-SectionTitleToHtmlId -Title ($Prefix + $Title)
+		htmlElement 'li' @{} {
+			htmlElement 'a' @{ href = "#$id" } { $Title }
+			if ($null -ne $Subsections) {
+				htmlElement 'ul' @{} {
+					foreach ($subsection in $Subsections) {
+						$subsection | Get-HtmlToc -Prefix ($Prefix + $Title)
+					}
+				}
+			}
+		}
+	}
+}
+
+function Merge-CisAuditsToMitreMap {
+	<#
+	.Synopsis
+		Merges the stati of multiple AuditInfos into a 2 dimensional map which can be indexd by the corresponding Mitre tactics an techniques. 
+		This allows to simply find out how many Audits where succesfull for a given Mitre technique.
+		The result is a MitreMap Object.
+
+    .PARAMETER Audit
+        An AuditTest Object containing the Audit results. Multiple can be passed from a pipeline
+		
+	.EXAMPLE
+		$mitreMap = $Sections | 
+			Where-Object { $_.Title -eq "CIS Benchmarks" } | 
+			ForEach-Object { return $_.SubSections } | 
+			ForEach-Object { return $_.AuditInfos } | 
+			Merge-CisAuditsToMitreMap
+		$mitreMap.Print()
+	#>
+    
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		$Audit
+	)
+	Begin {
+		$json = $global:CISToAttackMappingData.'CISAttackMapping'
+		$mitreMap = [MitreMap]::new()
+	}
+        
+	Process {
+		$id = $Audit.Id
+		$technique1 = $json.$id.'Technique1'
+		$technique2 = $json.$id.'Technique2'
+
+		if ($technique1) {
+			foreach ($tactic in Get-MitreTactics -TechniqueID $technique1) {
+				if ($tactic) {
+					$mitreMap.Add($tactic, $technique1, $id, $Audit.Status)
+				}
+			}
+		}
+
+		if ($technique2) {
+			foreach ($tactic in Get-MitreTactics -TechniqueID $technique2) {
+				if ($tactic) {
+					$mitreMap.Add($tactic, $technique2, $id, $Audit.Status)
+				}
+			}
+		}
+	}
+
+	End {
+		return [MitreMap] $mitreMap
+	}
+}
+
+function Get-MitigationsFromFailedTests {
+	<#
+	.Synopsis
+		Returns a map with a array with all Techniques which had a failed test and the Mitigation.
+
+    .PARAMETER Mappings
+        Is a mitre Mapping from Get-MitigationsFromFailedTests
+		
+	.EXAMPLE
+		$CISAMitigations = $Mappings.Map | Get-MitigationsFromFailedTests
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		$Mappings
+	)
+	Begin {
+		$json = $global:CISToAttackMappingData.'CISAttackMapping'
+		#mapping with Mitigation IDs as keys
+		#array with all techniques where the mititgation is in the cisa paper and a tests failed
+		#mitigation from the cisa paper
+		$CISAMitigationsFromPaper = [ordered]@{
+			'M1017' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Train users to be aware of access or manipulation attempts by an adversary to reduce the risk of successful spear-phishing and social engineering.'
+			}
+			'M1018' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Manage the creation, modification, use, and permissions associated to user accounts.'
+			}
+			'M1021' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Restrict or block certain websites.'
+			}
+			'M1027' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Set and enforce secure password policies for accounts.'
+			}
+			'M1028' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Make configuration changes related to the operating system or a common feature of the operating system that result in system hardening against techniques.'
+			}
+			'M1030' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Architect sections of the network to isolate critical systems, functions, or resources. Use physical and logical segmentation to prevent access to sensitive systems and information.'
+			}
+			'M1031' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Configure Network Intrusion Prevention systems to block malicious file signatures and file types at the network boundary.'
+			}
+			'M1038' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Block execution of code on a system.'
+			}
+			'M1041' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Use strong encryption mechanisms to protect sensitive data.'
+			}
+			'M1042' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Remove or deny access to unnecessary and potentially vulnerable software to prevent abuse by adversaries.'
+			}
+			'M1057' = @{
+				'MitreTechniqueIDs' = @()
+				'Mitigation'        = 'Use a data loss prevention (DLP) strategy to categorize sensitive data, identify data formats indicative of personally identifiable information (PII), and restrict exfiltration of sensitive data.'
+			}
+		}
+		$CISAMitigations = @()
+		$KeysToRemove = @()
+	}
+
+	Process {
+		foreach ($tactic in $Mappings.Keys) {
+			foreach ($technique in $Mappings[$tactic].Keys) {
+				$Mappings[$tactic][$technique].Keys | 
+				#checks for each technique if there is a failed test
+				Where-Object { $Mappings[$tactic][$technique][$_] -eq [AuditInfoStatus]::False } | 
+				ForEach-Object {
+					#if the mitigation from the failed test is in ihe mitigation from the cisa paper
+					if ($null -ne $json.$_.'Mitigation1' -and $CISAMitigationsFromPaper.Keys -contains $json.$_.'Mitigation1') {
+						#put the technique in the mapping (no doubles)
+						if ($CISAMitigationsFromPaper[$json.$_.'Mitigation1']['MitreTechniqueIDs'] -notcontains $technique) {
+							$CISAMitigationsFromPaper[$json.$_.'Mitigation1']['MitreTechniqueIDs'] += $technique
+						}
+						#put the mitigation in a separate array (no doubles)
+						if ($CISAMitigations -notcontains $json.$_.'Mitigation1') {
+							$CISAMitigations += $json.$_.'Mitigation1'
+						}
+					}
+					#if the mitigation from the failed test is in ihe mitigation from the cisa paper
+					if ($null -ne $json.$_.'Mitigation2' -and $CISAMitigationsFromPaper.Keys -contains $json.$_.'Mitigation2') {
+						#put the technique in the mapping (no doubles)
+						if ($CISAMitigationsFromPaper[$json.$_.'Mitigation2']['MitreTechniqueIDs'] -notcontains $technique) {
+							$CISAMitigationsFromPaper[$json.$_.'Mitigation2']['MitreTechniqueIDs'] += $technique
+						}
+						#put the mitigation in a separate array (no doubles)
+						if ($CISAMitigations -notcontains $json.$_.'Mitigation2') {
+							$CISAMitigations += $json.$_.'Mitigation2'
+						}
+					}
+				}
+			}
+		}
+		#write keys which where not in the sperat mitigation array in $KeysToRemove beacause you can't delete in a foreach over the object you want to delete from
+		$CISAMitigationsFromPaper.Keys | Where-Object { $CISAMitigations -notcontains $_ } | ForEach-Object { $KeysToRemove += $_ }
+		#delete the keys from $CISAMitigation from paper which were not in the sperate mitigation array
+		$KeysToRemove | ForEach-Object { $CISAMitigationsFromPaper.Remove($_) }
+	}
+	End {
+		return $CISAMitigationsFromPaper
+	}
+}
+
+function ConvertTo-HtmlTable {
+	<#
+	.Synopsis 
+		Generates a html table using the mapping keys of the tactics and techniques
+		It also adds the links to the table using the function "get-MitreLink"
+		and colours the cells
+	.Example
+		ConvertTo-HtmlTable $Mappings.map
+
+	#>
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		$Mappings
+	)
+
+	htmlElement 'table' @{id = 'MITRETable' } {
+		htmlElement 'thead' @{id = 'MITREthead' } {
+			htmlElement 'tr' @{} {
+				foreach ($tactic in $Mappings.Keys) {
+					$url = get-MitreLink -type tactics -id $tactic
+					$TacticCount = Get-TacticCounter $tactic $Mappings
+					htmlElement 'td' @{} {
+						$tacticName = Get-MitreTacticName -TacticId $tactic
+						$link = htmlElement 'a' @{href = $url; target = "blank" } { "$tacticName" }
+						htmlElement 'p' @{} { $link + "`n" + "$TacticCount/" + $Mappings[$tactic].Count }
+					}
+				}
+			}
+		}
+		htmlElement 'tbody' @{id = 'MITREtbody' } {
+			htmlElement 'tr' @{} {
+				foreach ($tactic in $Mappings.Keys) {
+					htmlElement 'td' @{} {
+						foreach ($technique in $Mappings[$tactic].Keys) {
+							$successCounter = 0
+							foreach ($id in $Mappings[$tactic][$technique].Keys) {
+								if ($Mappings[$tactic][$technique][$id] -eq [AuditInfoStatus]::True) {
+									$successCounter++
+								}
+							}
+							$url = get-MitreLink -type techniques -id $technique
+							$color = Get-ColorValue $successCounter $Mappings[$tactic][$technique].Count
+							$categories = Get-MitreTechniqueCategories -TechniqueID $technique
+							htmlElement 'div' @{class = "MITRETechnique $categories"; style = "background-color: $color; background-clip: border-box" } {
+								htmlElement 'a' @{href = $url; target = "_blank"; class = "tooltip" } { "$technique" 
+									htmlElement 'span' @{class = "tooltiptext" } { Get-MitreTechniqueName -TechniqueID $technique }
+								} 
+								htmlElement 'span' @{} { ": $successCounter/" + $Mappings[$tactic][$technique].Count }
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}
+
+function ConvertTo-HtmlCISA {
+	<#
+	.Synopsis 
+		Generates a html table using the CISA Mitigation, Mitre Mitigation id and failed techniques
+	.Example
+		ConvertTo-HtmlCISA $CISAMitigations
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		$CISAMitigations
+	)
+	#create CISA table
+	htmlElement 'table' @{id = 'CISATable' } {
+		#create table head with the column CISA Mitigation, MITRE Mitigation ID, MITRE Technique IDs
+		htmlElement 'thead' @{id = 'CISAthead' } {
+			htmlElement 'tr' @{} {
+				htmlElement 'th' @{class = 'CISAMitigationIDs' } {
+					'ID'
+				}
+				htmlElement 'th' @{class = 'CISAMitigations' } {
+					'Mitigation Description'
+				}
+				htmlElement 'th' @{class = 'CISAMitreTechniqueIDs' } {
+					'caused Audit failures'
+				}
+			}
+		}
+		#fill the columns with the information from the $CISAMitigation map
+		htmlElement 'tbody' @{id = 'CISAtbody' } {
+			$KeyOrder = $CISAMitigations.GetEnumerator() | Sort-Object { $_.Value.MitreTechniqueIDs.Count } -Descending
+			$KeyOrder | ForEach-Object {
+				htmlElement 'tr' @{} {
+					htmlElement 'td' @{class = 'CISAMitigationIDs' } {
+						htmlElement 'a' @{href = $(get-MitreLink -type mitigations -id $_.Key); target = "_blank" } {
+							$_.Key
+						}
+					}
+					htmlElement 'td' @{class = 'CISAMitigations' } {
+						htmlElement 'a' @{} {
+							$CISAMitigations[$_.Key]['Mitigation']
+						}	
+					}
+					htmlElement 'td' @{class = 'CISAMitreTechniqueIDs' } {
+						$mitigationsList = $CISAMitigations[$_.Key]['MitreTechniqueIDs']
+						for ($i = 0; $i -lt $mitigationsList.Length; $i++) {
+							htmlElement 'a' @{href = $(get-MitreLink -type techniques -id $mitigationsList[$i]); target = "_blank" } {
+								$mitigationsList[$i]
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}
+
+function Get-ColorValue {
+	<#
+	.Synopsis 
+		Compares two Integer variables returns true if equal, false if not
+	.Example 
+		$colorValue = Get-ColorValue $successCounter $Mappings[$tactic][$technique].Count
+	#>
+	param (
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[int]$FirstValue,
+
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[int]$SecondValue
+	)
+
+	if ($SecondValue -eq 0) {
+		$result = '#a7a7a7'
+	}
+	else {
+		$successPercentage = ($FirstValue / $SecondValue)
+
+		switch ($successPercentage) {
+			1 { $result = '#33cca6' }
+			{ $_ -le 0.99 } { $result = '#52CC8F' }
+			{ $_ -le 0.89 } { $result = '#70CC78' }
+			{ $_ -le 0.79 } { $result = '#8FCC61' }
+			{ $_ -le 0.69 } { $result = '#ADCC4A' }
+			{ $_ -le 0.59 } { $result = '#CCCC33' }
+			{ $_ -le 0.49 } { $result = '#CCA329' }
+			{ $_ -le 0.39 } { $result = '#CC7A1F' }
+			{ $_ -le 0.29 } { $result = '#CC5214' }
+			{ $_ -le 0.19 } { $result = '#CC290A' }
+			{ $_ -le 0.09 } { $result = '#cc0000' }
+		}
+	}
+
+	return $result
+}
+
+function Get-TacticCounter {
+	<#
+	.Synopsis 
+		Counts the amount of successful techniques per tactic
+	.Example 
+		$TacticCounter = Get-TacticCounter $tactic $Mappings
+	#>
+	param (
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[object]$tactic,
+
+		[Parameter(Mandatory = $true, ValueFromPipeline = $true)]
+		[object]$Mappings
+	)
+	$TacticCount = 0
+	foreach ($technique in $Mappings[$tactic].Keys) {
+		$successCounter = 0
+		foreach ($id in $Mappings[$tactic][$technique].Keys) {
+			if ($Mappings[$tactic][$technique][$id] -eq [AuditInfoStatus]::True) {
+				$successCounter++
+			}
+			if ($successCounter -eq $Mappings[$tactic][$technique].Count -And $successCounter -gt 0) {
+				$TacticCount++
+			}
+		}    
+	}     
+	return $TacticCount                      
+}
+
+#in the current state the function checks the cis version used for the mapping and used in the Save-ATAPHtmlReport
+#but the versions don't match so the function prints the status in the HTML but doesn't block Merge-CisAuditsToMitreMap
+function Compare-EqualCISVersions {
+	<#
+	.Synopsis 
+		Returns a boolean, if the $ReportBasedOn and $MitreMappingCompatible Versions can be used together or not.
+	.Parameter  $Title
+		The Title of the Report
+	.Parameter  $ReportBasedOn
+		The BasedOn information from the report
+	.Parameter  $MitreMappingCompatible
+		The Compatible CIS versions of the mitre mapping
+	.Example 
+		Compare-EqualCISVersions -Title:$Title -ReportBasedOn:$ReportBasedOn -MitreMappingCompatible:$MitreMappingCompatible
+	#>
+
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$Title,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string[]]
+		$ReportBasedOn,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string[]]
+		$MitreMappingCompatible
+	)
+	$os = [System.Environment]::OSVersion.Platform
+
+	if (Test-CompatibleMitreReport -Title $Title -os $os) {
+		$ReportBasedOn = $ReportBasedOn | Where-Object { $_ -match 'CIS' }
+		return $($null -ne $ReportBasedOn -and $null -ne $MitreMappingCompatible -and $($ReportBasedOn -in $MitreMappingCompatible))
+	}
+	return $false
+}
+
+function Get-HtmlReportSection {
+	param(
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$Title,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$Description,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[alias('AuditInfos')]
+		[array]
+		$ConfigAudits,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[alias('Sections')]
+		[array]
+		$Subsections,
+
+		[Parameter(Mandatory = $false)]
+		[string]
+		$Prefix
+	)
+
+	process {
+		$id = Convert-SectionTitleToHtmlId -Title ($Prefix + $Title)
+		$sectionStatus = Get-SectionStatus -ConfigAudits $ConfigAudits -Subsections $Subsections
+		$class = Get-HtmlClassFromStatus $sectionStatus
+		htmlElement 'section' @{} {
+			htmlElement 'h1' @{ id = $id } {
+				
+				
+				htmlElement 'span' @{ class = $class } { $Title }
+				htmlElement 'span' @{ class = 'sectionAction collapseButton' } { '-' }
+				htmlElement 'a' @{ href = '#toc'; class = 'sectionAction' } {
+					htmlElement 'span' @{ style = "font-size: 75%;" } { '&uarr;' }
+				}
+			}
+				
+			if ($null -ne $Description) {
+				htmlElement 'p' @{} { $Description }
+			}
+			if ($null -ne $ConfigAudits) {
+				htmlElement 'table' @{ class = 'audit-info' } {
+					htmlElement 'tbody' @{} {
+						htmlElement 'tr' @{} {
+							foreach ($columnName in $AuditProperties.Name) {
+								htmlElement 'th' @{} { $columnName }
+							}
+						}
+						foreach ($configAudit in $ConfigAudits) {
+							$configAudit | Get-HtmlTableRow
+						}
+					}
+				}
+			}
+			if ($null -ne $Subsections) {				
+				foreach ($subsection in $Subsections) {
+					$subsection | Get-HtmlReportSection -Prefix ($Prefix + $Title)
+				}
+			}
+		}
+	}
+}
+
+function Get-ATAPHostInformation {
+	$unixOS = [System.Environment]::OSVersion.Platform -eq 'Unix' # returns 'Unix' on Linux and MacOS and 'Win32NT' on Windows, PS v6+ has builtin environment variable for this
+	if ($unixOS) {
+		return @{
+			"Hostname"              = hostname
+			"Operating System"      = (Get-Content /etc/os-release | Select-String -Pattern '^PRETTY_NAME=\"(.*)\"$').Matches.Groups[1].Value
+			"Installation Language" = (($(locale) | Where-Object { $_ -match "LANG=" }) -split '=')[1]
+			"Kernel Version"        = uname -r
+			"Free physical memory"  = "{0:N1} GB" -f (( -split (Get-Content /proc/meminfo | Where-Object { $_ -match 'MemFree:' }))[1] / 1MB)
+			"Free disk space"       = "{0:N1} GB" -f ((Get-PSDrive | Where-Object { $_.Name -eq '/' }).Free / 1GB)
+			"System Uptime"         = Get-Uptime -p
+			"OS Architecture"       = lscpu | awk '/Architecture/ {print $2}'
+			"System Manufacturer"   = (dmidecode -t system)[6] | cut -d ':' -f 2 | xargs
+			"System SKU"            = (dmidecode -t system)[12] | cut -d ':' -f 2 | xargs
+			"System Serialnumber"   = (dmidecode -t system)[9] | cut -d ':' -f 2 | xargs
+			"BIOS Version"          = dmidecode -s bios-version
+		}
+	}
+}
+
+function Get-CompletionStatus {
+	param(
+		[string[]]
+		$Statuses,
+
+		[array]$Sections
+	)
+
+	$totalCount = $Statuses.Count
+	$status = @{
+		TotalCount = $totalCount
+	}
+
+	#Total completion status
+	foreach ($value in $StatusValues) {
+		$count = ($Statuses | Where-Object { $_ -eq $value }).Count
+		$status[$value] = @{
+			Count   = $count
+			Percent = (100 * ($count / $totalCount)).ToString("0.00", [cultureinfo]::InvariantCulture)
+		}
+	}
+
+	#Section Total Count
+	$sectionTotalCountHash = @{}
+	foreach ($section in $Sections) {
+		$sectionResult = $section | Select-ConfigAudit | Select-Object -ExpandProperty 'Status'
+		$totalSectionCount = 0
+		foreach ($value in $StatusValues) {
+			$count = ($sectionResult | Where-Object { $_ -eq $value }).Count
+			$totalSectionCount += $count
+		}
+		$sectionTotalCountHash.Add($section.Title, $totalSectionCount)
+	}
+	#Counts the completion status for each section and each value. Also calculates the percentage.
+	$sectionCountHash = @{}
+	foreach ($section in $Sections) {
+		$sectionResult = $section | Select-ConfigAudit | Select-Object -ExpandProperty 'Status'
+		foreach ($value in $StatusValues) {
+			$count = ($sectionResult | Where-Object { $_ -eq $value }).Count
+			$sectionCountHash.Add($section.Title + $value + "Count", $count)
+			$percent = (100 * ($count / $sectionTotalCountHash[$section.Title])).ToString("0.00", [cultureinfo]::InvariantCulture)
+			$sectionCountHash.Add($section.Title + $value + "Percent", $percent)
+		}
+	}
+	return $status, $sectionTotalCountHash, $sectionCountHash
+}
+
+function Get-OverallComplianceCSS {
+	[CmdletBinding()]
+	[OutputType([string])]
+	param(
+		$completionStatus
+	)
+
+	$css = ""
+	$percent = $completionStatus['True'].Percent / 1
+
+	if ($percent -gt 50) {
+		$degree = 180 + ((($percent - 50) / 1) * 3.6)
+		$css += ".donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}"
+		$css += ".donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate($($degree)deg); transform: rotate($($degree)deg);}"
+	}
+	else {
+		$degree = 90 + ($percent * 3.6)
+		$css += ".donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate($($degree)deg); transform: rotate($($degree)deg);}"
+		$css += ".donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(0deg); transform: rotate(0deg);}"
+	}
+
+	$css += ".donut-chart.chart .chart-center span:after {content: `"$percent %`";}"
+
+	return $css
+}
+
+function Select-ConfigAudit {
+	param(
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[Alias('AuditInfos')]
+		[array]
+		$ConfigAudits,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[array]
+		$Subsections
+	)
+
+	process {
+		$results = @()
+		if ($null -ne $ConfigAudits) {
+			$results += $ConfigAudits
+		}
+		if ($null -ne $Subsections) {
+			foreach ($subsection in $Subsections) {
+				$results += $subsection | Select-ConfigAudit
+			}
+		}
+		return $results
+	}
+}
+
+function Get-ATAPHtmlReport {
+	<#
+	.Synopsis
+		Generates an audit report in an html file.
+	.Description
+		The `Get-ATAPHtmlReport` cmdlet collects data from the current machine to generate an audit report.
+	.Parameter Path
+		Specifies the relative path to the file in which the report will be stored.
+	.Example
+		C:\PS> Get-ATAPHtmlReport -Path "MyReport.html"
+	#>
+
+	[CmdletBinding()]
+	[OutputType([string])]
+	param(
+		[Parameter(Mandatory = $true)]
+		[string]
+		$Path,
+
+		[Parameter(Mandatory = $false)]
+		[hashtable]
+		$HostInformation = (Get-ATAPHostInformation),
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$Title,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$ModuleName,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$AuditorVersion,
+
+		[Parameter(Mandatory = $true, ValueFromPipelineByPropertyName = $true)]
+		[string[]]
+		$BasedOn,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[array]
+		$Sections,
+
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[string]
+		$LicenseStatus,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[RSFullReport[]]
+		$RSReport,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[FoundationReport]
+		$FoundationReport,
+
+		[Parameter(Mandatory = $false)]
+		[switch] $RiskScore,
+
+		[Parameter(Mandatory = $false)]
+		[switch] $MITRE,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[hashtable]
+		$hashtable_sha256,
+
+		[switch] $ComplianceStatus,
+
+		[Parameter(Mandatory = $false, ValueFromPipelineByPropertyName = $true)]
+		[SystemInformation]
+		$SystemInformation
+	)
+
+	process {
+		Write-Progress -Activity "Creating HTML report head" -Status "Progress:" -PercentComplete 0
+		$allConfigResults = foreach ($section in $Sections) { $section | Select-ConfigAudit | Select-Object -ExpandProperty 'Status' }
+		$completionStatus, $sectionTotalCountHash, $sectionCountHash = Get-CompletionStatus -Statuses $allConfigResults -sections $Sections
+
+		# HTML <head> markup
+
+		$head = htmlElement 'head' @{} {
+			htmlElement 'meta' @{ charset = 'UTF-8' } { }
+			htmlElement 'meta' @{ name = 'viewport'; content = 'width=device-width, initial-scale=1.0' } { }
+			htmlElement 'meta' @{ 'http-equiv' = 'X-UA-Compatible'; content = 'ie=edge' } { }
+			htmlElement 'title' @{} { "$Title [$(Get-Date)]" }
+			htmlElement 'style' @{} {
+				$cssPath = $ScriptRoot | Join-path -ChildPath "/report.css"
+				Get-Content $cssPath
+				Get-OverallComplianceCSS $completionStatus
+			}
+			htmlElement 'script' @{} {
+				$jsPath = $ScriptRoot | Join-path -ChildPath "/report.js"
+				Get-Content $jsPath
+			}
+		}
+		#Handles Release Date from Releases; Compares Release with this ATAP Version
+		Write-Progress -Activity "Creating HTML report body" -Status "Progress:" -PercentComplete 13
+		$body = htmlElement 'body' @{onload = "startConditions()" } {
+			# Header
+			htmlElement 'div' @{ class = 'header content' } {
+				htmlElement 'div' @{ id = "logo" } {
+					htmlElement 'a' @{id = "companyLink"; href = "https://www.fb-pro.com/"; target = "_blank" } {
+						htmlElement 'h1' @{id = "companyName" } { "FB PRO GMBH" }
+						htmlElement 'p' @{id = "companySlogan" } { "System Hardening & Secure Configuration" }
+					}
+				}
+				htmlElement 'div' @{ id = "reportInformation" } {
+					htmlElement 'h1' @{} { $Title }
+					$datum = "{0:d}. {1} {2} {3:D2}:{4:D2}" -f (Get-Date).Day, (Get-Date).ToString("MMMM"), (Get-Date).Year, (Get-Date).Hour, (Get-Date).Minute					
+					htmlElement 'div' @{} { "Generated on $($datum)" }
+				}
+			}
+			# Main section
+			htmlElement 'div' @{ class = 'main content' } {
+				htmlElement 'div' @{ class = 'host-information' } {
+					# Show compliance status
+					if ($ComplianceStatus) {
+						$sliceColorClass = Get-HtmlClassFromStatus 'True'
+						htmlElement 'div' @{ class = 'card' } {
+							htmlElement 'h2' @{} { 'Compliance status' }
+							htmlElement 'div' @{ class = 'donut-chart chart' } {
+								htmlElement 'div' @{ class = "slice one $sliceColorClass" } { }
+								htmlElement 'div' @{ class = "slice two $sliceColorClass" } { }
+								htmlElement 'div' @{ class = 'chart-center' } { htmlElement 'span' @{} { } }
+							}
+						}
+					}
+
+					$os = [System.Environment]::OSVersion.Platform
+
+					###  Risk Checks ###
+					if ($RiskScore) {
+						# Quantity
+						$TotalAmountOfRules = $completionStatus.TotalCount;
+						$AmountOfCompliantRules = 0;
+						$AmountOfNonCompliantRules = 0;
+						$None_Rules = 0;
+						foreach ($value in $StatusValues) {
+							if ($value -eq 'True') {
+								$AmountOfCompliantRules = $completionStatus[$value].Count
+							}
+							#exclude Rules, which are set to None, to make an independent calculation between Compliant and non Compliant
+							if ($value -eq 'None') {
+								$None_Rules = $completionStatus[$value].Count
+							}
+							if ($value -eq 'False') {
+								$AmountOfNonCompliantRules = $completionStatus[$value].Count
+							}
+						}
+						$TotalAmountOfRules = $TotalAmountOfRules - $None_Rules
+						if ($os -match "Win32NT" -and $Title -match "Win") {
+							# percentage of compliance quantity
+							$QuantityCompliance = [math]::round(($AmountOfCompliantRules / $TotalAmountOfRules) * 100, 2);	
+							# Variables, which will be evaluated in report.js
+							htmlElement 'div' @{id = "AmountOfNonCompliantRules"; hidden="hidden"} { "$($AmountOfNonCompliantRules)" }
+							htmlElement 'div' @{id = "AmountOfCompliantRules"; hidden="hidden"} { "$($AmountOfCompliantRules)" }
+							htmlElement 'div' @{id = "TotalAmountOfRules"; hidden="hidden"} { "$($TotalAmountOfRules)" }
+							htmlElement 'div' @{id = "QuantityCompliance"; hidden="hidden"} { "$($QuantityCompliance)" }
+		
+							# Severity
+							htmlElement 'div' @{id = "TotalAmountOfSeverityRules"; hidden="hidden"} { "$($RSReport.RSSeverityReport.AuditInfos.Length)" }
+							$AmountOfFailedSeverityRules = 0;
+							foreach ($rule in $RSReport.RSSeverityReport.AuditInfos) {
+								if ($rule.Status -eq "False") {
+									$AmountOfFailedSeverityRules ++;
+								}
+							}
+							htmlElement 'div' @{id = "AmountOfFailedSeverityRules"; hidden="hidden"} { "$($AmountOfFailedSeverityRules)" }
+						}
+					}
+
+					htmlElement 'div' @{id = 'navigationButtons' } {
+						htmlElement 'button' @{type = 'button'; class = 'navButton selectedNavButton'; id = 'summaryBtn'; onclick = "clickButton('1')" } { "Benchmark Compliance" }
+						htmlElement 'button' @{type = 'button'; class = 'navButton'; id = 'foundationDataBtn'; onclick = "clickButton('5')" } { "Security Base Data" }
+						if ($RiskScore -and ($os -match "Win32NT" -and $Title -match "Win")) {
+							htmlElement 'button' @{type = 'button'; class = 'navButton'; id = 'riskScoreBtn'; onclick = "clickButton('2')" } { "Risk Score" }
+						}
+						if ($MITRE) {
+							if (Test-CompatibleMitreReport -Title $Title -os $os) {
+								htmlElement 'button' @{type = 'button'; class = 'navButton'; id = 'MITREBtn'; onclick = "clickButton('6')" } { "MITRE ATT&CK" }
+								htmlElement 'button' @{type = 'button'; class = 'navButton'; id = 'CISABtn'; onclick = "clickButton('7')" } { "CISA Recommendations" }
+							}
+						}
+						htmlElement 'button' @{type = 'button'; class = 'navButton'; id = 'settingsOverviewBtn'; onclick = "clickButton('4')" } { "Hardening Settings" }
+						htmlElement 'button' @{type = 'button'; class = 'navButton'; id = 'referenceBtn'; onclick = "clickButton('3')" } { "About Us" }
+					}
+
+					Write-Progress -Activity "Creating settings overview page" -Status "Progress:" -PercentComplete 25
+					htmlElement 'div' @{class = 'tabContent'; id = 'settingsOverview'; style = 'display:none' } {
+						# Table of Contents
+						htmlElement 'h1' @{ id = 'toc' } { 'Hardening Settings' }
+						CreateHashTable
+						htmlElement 'h2' @{} { "Table Of Contents" }
+						htmlElement 'p' @{} { 'Click the link(s) below for quick access to a report section.' }
+						htmlElement 'ul' @{} {
+							foreach ($section in $Sections) { $section | Get-HtmlToc }
+						}
+						htmlElement 'h2' @{} { "Benchmark Details" }
+
+						# Report Sections for hardening settings
+						foreach ($section in $Sections) {
+							$section | Get-HtmlReportSection
+						}
+					}
+
+					Write-Progress -Activity "Creating summary page" -Status "Progress:" -PercentComplete 38
+					#This div hides/reveals the whole summary section
+					htmlElement 'div' @{class = 'tabContent'; id = 'summary' } {
+						# Host information
+						htmlElement 'h1' @{} { 'Benchmark Compliance' }
+						htmlElement 'div' @{style = "float: left;" } {
+							htmlElement 'p' @{} {
+								"Modules:"
+								htmlElement 'ul' @{} {
+									htmlElement 'div' @{} { "ATAPAuditor version $AuditorVersion" }
+									htmlElement 'div' @{} { "ATAPHtmlReport version $ModuleVersion" }
+								}
+							}
+							htmlElement 'p' @{} {
+								"Test baseline:"
+								htmlElement 'ul' @{} {
+									foreach ($item in $BasedOn) {
+										htmlElement 'li' @{} { $item }
+									}
+								}
+								htmlElement 'div' @{} {
+									"Does your system show low benchmark compliance? Check out our <a href=`"$($Settings.SolutionsLink)`"target=`"blank`">hardening solutions</a>."
+								}
+							}
+						}
+						htmlElement 'div' @{id = 'riskMatrixSummaryArea' } {
+							if ($RiskScore -and ($os -match "Win32NT" -and $Title -match "Win")) {
+								htmlElement 'h2' @{id = 'CurrentRiskScore' } { "Current Risk Score of tested System: " }
+								htmlElement 'h3' @{} { 'For further information, please head to the tab "Risk Score".' }
+								htmlElement 'div' @{id = 'riskMatrixSummary' } {
+									htmlElement 'div' @{id = 'dotSummaryTab'; style = 'display:none'} {}
+									htmlElement 'div' @{id = 'severity' } {
+										htmlElement 'p' @{id = 'severityArea' } { 'Severity' }
+									}
+									htmlElement 'div' @{id = 'quantity' } {
+										htmlElement 'p' @{id = 'quantityArea' } { 'Quantity' }
+									}
+									htmlElement 'div' @{id = 'severityCritical' } { "Critical" }
+									htmlElement 'div' @{id = 'severityHigh' } { "High" }
+									htmlElement 'div' @{id = 'severityMedium' } { "Medium" }
+									htmlElement 'div' @{id = 'severityLow' } { "Low" }
+		
+									htmlElement 'div' @{id = 'quantityCritical' } { "Critical" }
+									htmlElement 'div' @{id = 'quantityHigh' } { "High" }
+									htmlElement 'div' @{id = 'quantityMedium' } { "Medium" }
+									htmlElement 'div' @{id = 'quantityLow' } { "Low" }
+		
+									#colored areas
+									htmlElement 'div' @{id = 'critical_low' } {}
+									htmlElement 'div' @{id = 'high_low' } {}
+									htmlElement 'div' @{id = 'medium_low' } {}
+									htmlElement 'div' @{id = 'low_low' } {}
+		
+									htmlElement 'div' @{id = 'critical_medium' } {}
+									htmlElement 'div' @{id = 'high_medium' } {}
+									htmlElement 'div' @{id = 'medium_medium' } {}
+									htmlElement 'div' @{id = 'low_medium' } {}
+		
+									htmlElement 'div' @{id = 'critical_high' } {}
+									htmlElement 'div' @{id = 'high_high' } {}
+									htmlElement 'div' @{id = 'medium_high' } {}
+									htmlElement 'div' @{id = 'low_high' } {}
+		
+									htmlElement 'div' @{id = 'critical_critical' } {}
+									htmlElement 'div' @{id = 'high_critical' } {}
+									htmlElement 'div' @{id = 'medium_critical' } {}
+									htmlElement 'div' @{id = 'low_critical' } {}
+								}
+							}
+							else {
+								if ($RiskScore) {
+									htmlElement 'h2' @{id = 'CurrentRiskScore' } { "Current Risk Score of tested System:" }
+									htmlElement 'h2' @{id = 'invalidOS' } { "N/A" }
+									htmlElement 'h3' @{} { 'Risk Score calculation implemented for Microsoft Windows OS for now.' }
+									htmlElement 'div' @{id = 'riskMatrixSummary' } {
+										htmlElement 'div' @{id = 'severity' } {
+											htmlElement 'p' @{id = 'severityArea' } { 'Severity' }
+										}
+										htmlElement 'div' @{id = 'quantity' } {
+											htmlElement 'p' @{id = 'quantityArea' } { 'Quantity' }
+										}
+										htmlElement 'div' @{id = 'severityCritical' } { "Critical" }
+										htmlElement 'div' @{id = 'severityHigh' } { "High" }
+										htmlElement 'div' @{id = 'severityMedium' } { "Medium" }
+										htmlElement 'div' @{id = 'severityLow' } { "Low" }
+			
+										htmlElement 'div' @{id = 'quantityCritical' } { "Critical" }
+										htmlElement 'div' @{id = 'quantityHigh' } { "High" }
+										htmlElement 'div' @{id = 'quantityMedium' } { "Medium" }
+										htmlElement 'div' @{id = 'quantityLow' } { "Low" }
+			
+										#colored areas
+										htmlElement 'div' @{id = 'critical_low' } {}
+										htmlElement 'div' @{id = 'high_low' } {}
+										htmlElement 'div' @{id = 'medium_low' } {}
+										htmlElement 'div' @{id = 'low_low' } {}
+			
+										htmlElement 'div' @{id = 'critical_medium' } {}
+										htmlElement 'div' @{id = 'high_medium' } {}
+										htmlElement 'div' @{id = 'medium_medium' } {}
+										htmlElement 'div' @{id = 'low_medium' } {}
+			
+										htmlElement 'div' @{id = 'critical_high' } {}
+										htmlElement 'div' @{id = 'high_high' } {}
+										htmlElement 'div' @{id = 'medium_high' } {}
+										htmlElement 'div' @{id = 'low_high' } {}
+			
+										htmlElement 'div' @{id = 'critical_critical' } {}
+										htmlElement 'div' @{id = 'high_critical' } {}
+										htmlElement 'div' @{id = 'medium_critical' } {}
+										htmlElement 'div' @{id = 'low_critical' } {}
+									}
+								}
+							}
+						}
+
+						# Benchmark compliance
+						htmlElement 'h1' @{ style = 'clear:both;' } {}
+						htmlElement 'p' @{} {
+							'A total of {0} tests have been executed.' -f @(
+								$completionStatus.TotalCount
+							)
+						}
+
+						# Status percentage gauge
+						htmlElement 'div' @{ class = 'gauge' } {
+							foreach ($value in $StatusValues) {
+								$count = $completionStatus[$value].Count
+								if($count -gt 0){
+									$htmlClass = Get-HtmlClassFromStatus $value
+									$percent = $completionStatus[$value].Percent
+									
+									htmlElement 'div' @{
+										class = "gauge-meter $htmlClass"
+										style = "--weight: $count;" #fills the gauge bar to some percent
+										title = "$value $count test(s), $($percent)%"
+									} { }
+								}
+							}
+						}
+						htmlElement 'ol' @{ class = 'gauge-info' } {
+							foreach ($value in $StatusValues) {
+								$count = $completionStatus[$value].Count
+								$htmlClass = Get-HtmlClassFromStatus $value
+								$percent = $completionStatus[$value].Percent
+
+								htmlElement 'li' @{ class = 'gauge-info-item' } {
+									htmlElement 'span' @{ class = "auditstatus $htmlClass" } { "$($percent)% $value" }
+									"<br> (Tests: $count)"
+								}
+							}
+
+						}
+						# Sections
+						foreach ($section in $Sections) {
+							htmlElement 'h2' @{ style = 'clear:both; margin-top: 0;' } { $section.Title }
+							htmlElement 'p' @{} {
+								'A total of {0} tests have been executed in section {1}.' -f @(
+									$sectionTotalCountHash[$section.Title]
+									$section.Title
+								)
+							}
+
+							# Status percentage gauge for sections
+							htmlElement 'div' @{ class = 'gauge' } {
+								foreach ($value in $StatusValues) {
+									$count = $sectionCountHash[$section.Title + $value + "Count"]
+									if ($count -gt 0) {
+										$htmlClass = Get-HtmlClassFromStatus $value
+										$percent = $sectionCountHash[$section.Title + $value + "Percent"]										
+										htmlElement 'div' @{
+											class = "gauge-meter $htmlClass"
+											style = "--weight: $count;" #fills the gauge bar to some percent
+											title = "$value $count test(s), $($percent)%"
+										} { }
+									}
+								}
+							}
+							htmlElement 'ol' @{ class = 'gauge-info' } {
+								foreach ($value in $StatusValues) {
+									$count = $sectionCountHash[$section.Title + $value + "Count"]
+									$htmlClass = Get-HtmlClassFromStatus $value
+									$percent = $sectionCountHash[$section.Title + $value + "Percent"]
+
+									htmlElement 'li' @{ class = 'gauge-info-item' } {
+										htmlElement 'span' @{ class = "auditstatus $htmlClass" } { "$($percent)% $value" }
+										"<br> (Tests: $count)"
+									}
+								}
+							}
+						}
+					}
+
+					Write-Progress -Activity "Creating foundation data page" -Status "Progress:" -PercentComplete 50
+					htmlElement 'div' @{class = 'tabContent'; id = 'foundationData'; style = 'display:none' } {
+						#Tab: Foundation Data (Only works for Windows OS!)
+						htmlElement 'h1' @{} { "Security Base Data" }
+						htmlElement 'div' @{id = "testGrid" } {
+							htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 1; grid-row-end: 2; font-size: 23px; font-weight: bold; border: 0; padding-top: 0px;" } { "System Information" }
+							htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 3; grid-row-start: 2; grid-row-end: 3; font-weight: bold; background-color: lightgray;" } { "Software Information" }
+							htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 6; grid-row-start: 2; grid-row-end: 3; font-weight: bold; background-color: lightgray;" } { "Hardware Information" }
+
+							$systeminfo_array = @(
+								@{  colStart = 1; rowstart = 3;
+									name =  "Hostname"
+									value = $($SystemInformation.SoftwareInformation.Hostname)}
+								@{  colStart = 1; rowstart = 4;
+									name =  "System Uptime"
+									value = $($SystemInformation.SoftwareInformation.SystemUptime)}
+								@{  colStart = 1; rowstart = 5;
+									name =  "Operating System"
+									value = $($SystemInformation.SoftwareInformation.OperatingSystem)}
+								@{  colStart = 1; rowstart = 6;
+									name =  "Build Number"
+									value = $($SystemInformation.SoftwareInformation.BuildNumber)}
+								@{  colStart = 1; rowstart = 7;
+									name =  "OS Architecture"
+									value = $($SystemInformation.SoftwareInformation.OSArchitecture)}
+								@{  colStart = 1; rowstart = 8;
+									name =  "License Status"
+									value = $($SystemInformation.SoftwareInformation.LicenseStatus)}
+								@{  colStart = 1; rowstart = 9;
+									name =  "Installation Language"
+									value = $($SystemInformation.SoftwareInformation.InstallationLanguage)}
+								@{  colStart = 1; rowstart = 10;
+									name =  "Domain role"
+									value = $($SystemInformation.SoftwareInformation.DomainRole)}
+
+								@{  colStart = 4; rowstart = 3;
+									name =  "System Manufacturer"
+									value = $($SystemInformation.HardwareInformation.SystemManufacturer)}
+								@{  colStart = 4; rowstart = 4;
+									name =  "System SKU"
+									value = $($SystemInformation.HardwareInformation.SystemSKU) }
+								@{  colStart = 4; rowstart = 5;
+									name =  "System Model"
+									value = $($SystemInformation.HardwareInformation.SystemModel)}
+								@{  colStart = 4; rowstart = 6;
+									name =  "System Serialnumber"
+									value = $($SystemInformation.HardwareInformation.SystemSerialnumber)}
+								@{  colStart = 4; rowstart = 7;
+									name =  "BIOS Version"
+									value = $($SystemInformation.HardwareInformation.BIOSVersion)}
+								@{  colStart = 4; rowstart = 8;
+									name =  "Free disk space (C:)"
+									value = $($SystemInformation.HardwareInformation.FreeDiskSpace)}
+								@{  colStart = 4; rowstart = 9;
+									name =  "Free physical memory"
+									value = $($SystemInformation.HardwareInformation.FreePhysicalMemory)}
+							)
+
+							for ($i = 0; $i -lt $systeminfo_array.Length; $i++) {
+								$grayBackground = ""
+								if($i%2 -eq 0){
+									$grayBackground =  "background-color: var(--color-light-gray);" 
+								}
+								htmlElement 'div' @{style = "grid-column-start: $($systeminfo_array[$i].colStart+0); grid-column-end: $($systeminfo_array[$i].colStart+1); grid-row-start: $($systeminfo_array[$i].rowStart); grid-row-end: $($systeminfo_array[$i].rowStart+1); $($grayBackground) font-weight: bold;" } { "$($systeminfo_array[$i].name)" }
+								htmlElement 'div' @{style = "grid-column-start: $($systeminfo_array[$i].colStart+1); grid-column-end: $($systeminfo_array[$i].colStart+2); grid-row-start: $($systeminfo_array[$i].rowStart); grid-row-end: $($systeminfo_array[$i].rowStart+1); $($grayBackground)" } { "$($systeminfo_array[$i].value)" }
+							}
+
+
+
+							# htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 5; grid-row-start: 3; grid-row-end: 4; background-color: #efefef; font-weight: bold;" } { "System Manufacturer" }
+							# htmlElement 'div' @{style = "grid-column-start: 5; grid-column-end: 6; grid-row-start: 3; grid-row-end: 4; background-color: #efefef;" } { $($SystemInformation.HardwareInformation.SystemManufacturer) }
+								
+							# htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 5; grid-row-start: 4; grid-row-end: 5; font-weight: bold;" } { "System SKU" }
+							# htmlElement 'div' @{style = "grid-column-start: 5; grid-column-end: 6; grid-row-start: 4; grid-row-end: 5;" } { $($SystemInformation.HardwareInformation.SystemSKU) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 5; grid-row-start: 5; grid-row-end: 6; background-color: #efefef; font-weight: bold;" } { "System Model" }
+							# htmlElement 'div' @{style = "grid-column-start: 5; grid-column-end: 6; grid-row-start: 5; grid-row-end: 6; background-color: #efefef;" } { $($SystemInformation.HardwareInformation.SystemModel) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 5; grid-row-start: 6; grid-row-end: 7; font-weight: bold;" } { "System Serialnumber" }
+							# htmlElement 'div' @{style = "grid-column-start: 5; grid-column-end: 6; grid-row-start: 6; grid-row-end: 7;" } { $($SystemInformation.HardwareInformation.SystemSerialnumber) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 5; grid-row-start: 7; grid-row-end: 8; background-color: #efefef; font-weight: bold;" } { "BIOS Version" }
+							# htmlElement 'div' @{style = "grid-column-start: 5; grid-column-end: 6; grid-row-start: 7; grid-row-end: 8; background-color: #efefef;" } { $($SystemInformation.HardwareInformation.BIOSVersion) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 5; grid-row-start: 8; grid-row-end: 9; font-weight: bold;" } { "Free disk space (C:)" }
+							# htmlElement 'div' @{style = "grid-column-start: 5; grid-column-end: 6; grid-row-start: 8; grid-row-end: 9;" } { $($SystemInformation.HardwareInformation.FreeDiskSpace) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 4; grid-column-end: 5; grid-row-start: 9; grid-row-end: 10; background-color: #efefef; font-weight: bold;" } { "Free physical memory" }
+							# htmlElement 'div' @{style = "grid-column-start: 5; grid-column-end: 6; grid-row-start: 9; grid-row-end: 10; background-color: #efefef;" } { $($SystemInformation.HardwareInformation.FreePhysicalMemory) }
+
+
+
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 3; grid-row-end: 4; background-color: #efefef; font-weight: bold;" } { "Hostname" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 3; grid-row-end: 4; background-color: #efefef;" } { $($SystemInformation.SoftwareInformation.Hostname) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 4; grid-row-end: 5; font-weight: bold;" } { "System Uptime" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 4; grid-row-end: 5;" } { $($SystemInformation.SoftwareInformation.SystemUptime) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 5; grid-row-end: 6; background-color: #efefef; font-weight: bold;" } { "Operating System" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 5; grid-row-end: 6; background-color: #efefef;" } { $($SystemInformation.SoftwareInformation.OperatingSystem) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 6; grid-row-end: 7; font-weight: bold;" } { "Build Number" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 6; grid-row-end: 7;" } { $($SystemInformation.SoftwareInformation.BuildNumber) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 7; grid-row-end: 8; background-color: #efefef; font-weight: bold;" } { "OS Architecture" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 7; grid-row-end: 8; background-color: #efefef;" } { $($SystemInformation.SoftwareInformation.OSArchitecture) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 8; grid-row-end: 9; font-weight: bold;" } { "License Status" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 8; grid-row-end: 9;" } { $($SystemInformation.SoftwareInformation.LicenseStatus) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 9; grid-row-end: 10; background-color: #efefef; font-weight: bold;" } { "Installation Language" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 9; grid-row-end: 10; background-color: #efefef;" } { $($SystemInformation.SoftwareInformation.InstallationLanguage) }
+
+							# htmlElement 'div' @{style = "grid-column-start: 1; grid-column-end: 2; grid-row-start: 10; grid-row-end: 11; font-weight: bold;" } { "Domain role" }
+							# htmlElement 'div' @{style = "grid-column-start: 2; grid-column-end: 3; grid-row-start: 10; grid-row-end: 11;" } { $($SystemInformation.SoftwareInformation.DomainRole) }
+						}
+						# htmlElement 'div' @{id="systemData"} {
+						# }
+						if ([System.Environment]::OSVersion.Platform -ne 'Unix') {
+							htmlElement 'h2' @{} { "Table Of Contents" }
+							htmlElement 'p' @{} { 'Use below links to jump to a specific report section.' }
+							htmlElement 'ul' @{} {
+								foreach ($section in $FoundationReport.Sections) { $section | Get-HtmlToc }
+							}
+							htmlElement 'h2' @{} { "Details" }
+							# Report Sections
+							foreach ($section in $FoundationReport.Sections) { $section | Get-HtmlReportSection }
+						}
+					}
+					
+					if ($RiskScore) {
+						Write-Progress -Activity "Creating risk score  page" -Status "Progress:" -PercentComplete 63
+						htmlElement 'div' @{class = 'tabContent'; id = 'riskScore' } {
+							htmlElement 'h1'@{} { "Risk Score" }
+							htmlElement 'p'@{} { "The risk score provides a quick overview of how secure the system is configured. This is made up of the areas `"Severity`" and `"Quantity`". The higher risk is used as the overall risk." }
+							htmlElement 'h2' @{id = 'CurrentRiskScoreRS' } { "Current Risk Score of tested System: " }
+	
+							htmlElement 'div' @{id = 'riskMatrixContainer' } {
+								htmlElement 'div' @{id = 'dotRiskScoreTab' } {}
+								htmlElement 'div' @{id = 'severity' } {
+									htmlElement 'p' @{id = 'severityArea' } { 'Severity' }
+								}
+								htmlElement 'div' @{id = 'quantity' } {
+									htmlElement 'p' @{id = 'quantityArea' } { 'Quantity' }
+								}
+								htmlElement 'div' @{id = 'severityCritical' } { "Critical" }
+								htmlElement 'div' @{id = 'severityHigh' } { "High" }
+								htmlElement 'div' @{id = 'severityMedium' } { "Medium" }
+								htmlElement 'div' @{id = 'severityLow' } { "Low" }
+	
+								htmlElement 'div' @{id = 'quantityCritical' } { "Critical" }
+								htmlElement 'div' @{id = 'quantityHigh' } { "High" }
+								htmlElement 'div' @{id = 'quantityMedium' } { "Medium" }
+								htmlElement 'div' @{id = 'quantityLow' } { "Low" }
+	
+								#colored areas
+								htmlElement 'div' @{id = 'critical_low' } {}
+								htmlElement 'div' @{id = 'high_low' } {}
+								htmlElement 'div' @{id = 'medium_low' } {}
+								htmlElement 'div' @{id = 'low_low' } {}
+	
+								htmlElement 'div' @{id = 'critical_medium' } {}
+								htmlElement 'div' @{id = 'high_medium' } {}
+								htmlElement 'div' @{id = 'medium_medium' } {}
+								htmlElement 'div' @{id = 'low_medium' } {}
+	
+								htmlElement 'div' @{id = 'critical_high' } {}
+								htmlElement 'div' @{id = 'high_high' } {}
+								htmlElement 'div' @{id = 'medium_high' } {}
+								htmlElement 'div' @{id = 'low_high' } {}
+	
+								htmlElement 'div' @{id = 'critical_critical' } {}
+								htmlElement 'div' @{id = 'high_critical' } {}
+								htmlElement 'div' @{id = 'medium_critical' } {}
+								htmlElement 'div' @{id = 'low_critical' } {}
+							}
+	
+							htmlElement 'div' @{id = 'calculationTables' } {
+								htmlElement 'h3' @{class = 'calculationTablesText' } { "Risk Score Calculation" }
+								htmlElement 'p' @{class = 'calculationTablesText' } { "Risk Score calculation is based on the quantitative amount of compliant rules and the severity of incompliant checks." }
+								htmlElement 'p' @{class = 'calculationTablesText' } { "Note: Quantity is calculated by dividing all compliant rules with the total number (minus none-compliant) of checks." }
+								htmlElement 'table' @{id = 'quantityTable' } {
+									htmlElement 'tr' @{} {
+										htmlElement 'th' @{} { 'Compliance to Benchmarks (Quantity)' }
+										htmlElement 'th' @{} { 'Risk Assessment' }
+									}
+									htmlElement 'tr' @{} {
+										htmlElement 'td' @{} { 'More than 80%' }
+										htmlElement 'td' @{} { 'Low' }
+									}
+									htmlElement 'tr' @{} {
+										htmlElement 'td' @{} { 'Between 65% and 80%' }
+										htmlElement 'td' @{} { 'Medium' }
+									}
+									htmlElement 'tr' @{} {
+										htmlElement 'td' @{} { 'Between 50% and 65%' }
+										htmlElement 'td' @{} { 'High' }
+									}
+									htmlElement 'tr' @{} {
+										htmlElement 'td' @{} { 'Less than 50%' }
+										htmlElement 'td' @{} { 'Critical' }
+									}
+								}
+		
+								htmlElement 'table' @{id = 'severityTable' } {
+									htmlElement 'tr' @{} {
+										htmlElement 'th' @{} { 'Compliance to Benchmarks (Severity)' }
+										htmlElement 'th' @{} { 'Risk Assessment' }
+									}
+									htmlElement 'tr' @{} {
+										htmlElement 'td' @{} { 'All critical settings compliant' }
+										htmlElement 'td' @{} { 'Low' }
+									}
+									htmlElement 'tr' @{} {
+										htmlElement 'td' @{} { '1 or more incompliant setting(s)' }
+										htmlElement 'td' @{} { 'Critical' }
+									}
+								}
+							}
+	
+	
+							htmlElement 'div' @{id = "severityCompliance" } {
+								htmlElement 'h2' @{} { 'Details' }
+								htmlElement 'p' @{id = "complianceStatus" } { 'Table Of Severity Rules' }
+								htmlElement 'span' @{class = "sectionAction collapseButton"; id = "severityComplianceCollapse" } { "-" }
+								htmlElement 'table' @{id = 'severityDetails' } {
+									htmlElement 'tr' @{} {
+										htmlElement 'th' @{} { 'Id' }
+										htmlElement 'th' @{} { 'Task' }
+										htmlElement 'th' @{} { 'Status' }
+										htmlElement 'th' @{} { 'Severity' }
+									}
+									foreach ($info in $RSReport.RSSeverityReport.AuditInfos) {
+										htmlElement 'tr' @{} {
+											htmlElement 'td' @{} { "$($info.Id)" }
+											htmlElement 'td' @{} { "$($info.Task)" }
+											htmlElement 'td' @{} {
+												if ($info.Status -eq 'False') {
+													htmlElement 'span' @{class = "severityResultFalse" } {
+														"$($info.Status)"
+													}
+												}
+												elseif ($info.Status -eq 'True') {
+													htmlElement 'span' @{class = "severityResultTrue" } {
+														"$($info.Status)"
+													}
+												}
+												elseif ($info.Status -eq 'None') {
+													htmlElement 'span' @{class = "severityResultNone" } {
+														"$($info.Status)"
+													}
+												}
+												elseif ($info.Status -eq 'Warning') {
+													htmlElement 'span' @{class = "severityResultWarning" } {
+														"$($info.Status)"
+													}
+												}
+												elseif ($info.Status -eq 'Error') {
+													htmlElement 'span' @{class = "severityResultError" } {
+														"$($info.Status)"
+													}
+												}
+											}
+											htmlElement 'td' @{} {
+												htmlElement 'p' @{style = "margin: 5px auto;" } { "Critical" }
+											}
+										}
+									}
+								}
+							}
+							# 'Test for AuditInfo: ' + $RSReport.RSSeverityReport.TestTable
+						}
+					}
+
+					if ($MITRE) {
+						if (Test-CompatibleMitreReport -Title $Title -os $os) {
+							Write-Progress -Activity "Creating mitre heatmap page" -Status "Progress:" -PercentComplete 75
+							
+							$Mappings = $Sections | 
+							Where-Object { $_.Title -eq "CIS Benchmarks" -or $_.Title -eq "CIS Stand-alone Benchmarks" } | 
+							ForEach-Object { return $_.SubSections } | 
+							ForEach-Object { return $_.AuditInfos } | 
+							Merge-CisAuditsToMitreMap
+							
+							htmlElement 'div' @{class = 'tabContent'; id = 'MITRE' } {
+								htmlElement 'h1'@{} { "MITRE ATT&CK" }
+								htmlElement 'p'@{} { 'To get a quick overview of how good your system is hardened in terms of the MITRE ATT&CK Framework we made a heatmap.' }
+								htmlElement 'p' @{id = 'Tip' } { 'Tip: Hover over the MITRE IDs to get a quick information to each Technique' }
+								htmlElement 'h2'@{} { "Version of CIS in MITRE Mapping and tests" }
+								htmlElement 'p'@{} { $(Get-MitreMappingMetaData Version) + "." }
+								htmlElement 'p'@{} { "Based on: " + $(Get-MitreMappingMetaData BasedOn) + "." }
+								$MitreMappingCompatible = Get-MitreMappingMetaData Compatible
+								if (-not $(Compare-EqualCISVersions -Title:$Title -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible)) {
+									Write-Warning "The CIS version used for the MITRE mapping doesn't match with the CIS version used for the tests. The Mitre heatmap will still be generated but might contain false information."
+									htmlElement 'p'@{style = "font-size: 1.2em; color: red;" } { "The CIS version used for the MITRE mapping doesn't match with the CIS version used for the tests." }
+								}
+								htmlElement 'h2' @{} { 'Explanation of the cell colors' }
+
+								htmlElement 'div' @{class = 'square-container' } {
+									$color_S = Get-ColorValue 1 1
+									htmlElement 'div' @{class = 'square'; style = "background: $color_S" } {} 
+									htmlElement 'div'@{} { '= 100% of the tests were successful, the system is protected in the best possible way' }
+								}
+								
+								htmlElement 'div' @{class = 'square-container' } {
+									$color_F = Get-ColorValue 0 1
+									htmlElement 'div' @{class = 'square'; style = "background: $color_F" } {}
+									htmlElement 'div'@{} { '= 0% of the tests were successful, consider looking into possibilities to harden your system regarding this tactic / technique' }
+								}
+								
+								htmlElement 'div' @{class = 'square-container' } {
+									$color_S = Get-ColorValue 1 1
+									$color_F = Get-ColorValue 0 1
+									htmlElement 'div' @{class = 'square'; style = "background: linear-gradient($color_S,$color_F)" } {}
+									htmlElement 'div'@{} { '= the color gradient moves in 10% steps. The greener the cell, the more tests were successful' }
+								}
+								
+								htmlElement 'div' @{class = 'square-container' } {
+									$color_E = Get-ColorValue 1 0
+									htmlElement 'div' @{class = 'square'; style = "background: $color_E" } {}
+									htmlElement 'div'@{} { '= No tests available yet' }
+								}
+								
+								htmlElement 'h2' @{} { "Filters" }
+
+								htmlElement 'label' @{} {
+									"Hide techniques that are performed outside of enterprise defenses and controls:"
+									htmlElement 'input' @{type = "checkbox"; id = "mitreFilterCheckbox"; onchange = "hideMitreTechniques(this, '.orgMeasure')" } {}
+								}
+
+								htmlElement 'p' @{} {
+									htmlElement 'label' @{} {
+										"Hide techniques that cannot be easily mitigated with preventive controls:"
+										htmlElement 'input' @{type = "checkbox"; id = "noEasyMitigationCheckbox"; onchange = "hideMitreTechniques(this, '.noEasyMitigation')" } {}
+									}
+								}
+
+								htmlElement 'p' @{} {
+									htmlElement 'label' @{} {
+										"Display only techniques related to the attack vector 'E-Mail'"
+										htmlElement 'input' @{type = "checkbox"; id = "mailFilterCheckbox"; onchange = "hideMitreTechniques(this, '.MITRETechnique:not(.mailVector)')" } {}
+									}
+								}
+
+								htmlElement 'h2' @{} { "Current ATT&CK heatmap on tested System" }
+
+								ConvertTo-HtmlTable $Mappings.map
+							}
+							htmlElement 'div' @{class = 'tabContent'; id = 'CISA' } {
+								htmlElement 'h1'@{} { "CISA Recommendations" }
+								htmlElement 'p' @{} {
+									"This table shows the top mitigations, that help against the most used attack techniques. 
+									Implementing these mitigations has the biggest impact on the overall security of the system. 
+									The table is based on the Information from CISAs " 
+									htmlElement 'a' @{href = "https://www.cisa.gov/sites/default/files/publications/RVA_INFOGRAPHIC_508c.pdf"; target = "_blank" } {
+										"Risk and Vulnerability Assessment (RVA) mapped to the MITRE ATT&CK Framework."
+									}
+									"Additionally, the table is sorted based on the number of audits that failed but could be prevented by a given mitigation."
+								}
+								htmlElement 'p'@{} { 'The table presents three columns: The first column lists the mitigations recommended by CISA, the second column contains the corresponding mitigation IDs from MITRE, and the third column shows the techniques that have at least one CISA-recommended mitigation and have experienced at least one test failure.' }
+								htmlElement 'h1'@{} { 'Mitigation for top techniques' }
+
+								$CISAMitigations = $Mappings.Map | Get-MitigationsFromFailedTests
+								ConvertTo-HtmlCISA $CISAMitigations
+							}
+						}
+						else {
+							Write-Warning "Mitre Heatmap can only be used on a Windows System together with `"Microsoft Windows 10`", `"Microsoft Windows 10 Stand-alone`", `"Microsoft Windows 11`", `"Microsoft Windows 11 Stand-alone`", `"Microsoft Windows Server 2019`" or `"Microsoft Windows Server 2022`". The Mitre Heatmap will not be generated"
+						}
+					}
+
+					Write-Progress -Activity "Creating references page" -Status "Progress:" -PercentComplete 83
+					htmlElement 'div' @{class = 'tabContent'; id = 'references'; style = 'display:none' } {
+
+						
+						htmlElement 'h1' @{} { "About us" }
+						
+						# Flex-Container
+						htmlElement 'div' @{class = 'columns-container' } {
+							
+							# LEFT COLUMN
+							htmlElement 'div' @{class = 'left-column' } {
+								htmlElement 'h2' @{} { "What makes FB Pro GmbH different" }
+
+								htmlElement 'h3' @{} { "What do we want?" }
+								htmlElement 'p' @{} {
+									"Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet."
+								}
+
+								htmlElement 'h3' @{} { "How do we achieve this?" }
+								htmlElement 'p' @{} {
+									"We implement in-depth IT security for our customers. Our approach always focuses on state-of-the-art technology that is highly efficient and automated."
+								}
+
+								htmlElement 'h3' @{} { "What is system hardening?" }
+								htmlElement 'p' @{} { "The following video provides concise answers to questions such as:" }
+								htmlElement 'ul' @{class = 'hardening-ul' } {
+									htmlElement 'li' @{} { "What does System Hardening mean?" }
+									htmlElement 'li' @{} { "How does System Hardening work?" }
+									htmlElement 'li' @{} { "Why is System Hardening so important?" }
+								}
+								htmlElement 'p' @{style = 'font-style: italic;' } {
+									"If you cannot see the video below, please check your browser settings to allow loading content from external sources.
+									Alternatively, you can watch the video "
+									htmlElement 'a' @{href = "https://www.youtube.com/watch?v=jbI19FwnBKY"; target = "_blank" } { "here"
+									}
+								}
+									
+								htmlElement 'div' @{class = 'video-wrapper' } {
+									htmlElement 'iframe' @{
+										src             = "https://www.youtube-nocookie.com/embed/jbI19FwnBKY?si=_p7JoaNAkxRB0HIL"
+										title           = "YouTube video player"
+										frameborder     = "0"
+										allow           = "accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
+										referrerpolicy  = "strict-origin-when-cross-origin"
+										allowfullscreen = ""
+									} {}
+								}
+							}
+
+							# RIGHT COLUMN
+							htmlElement 'div' @{class = 'right-column' } {
+
+								htmlElement 'h2' @{} { "Check out our solutions" }
+								# Flex-Container for the products
+								htmlElement 'div' @{class = 'product-block' } {
+									# Flex-Container for each product item (order in column and centered)
+									htmlElement 'div' @{class = 'product-item ' } {
+										htmlElement 'h3'@{} { "Enforce Administrator" }
+										htmlElement 'a' @{href = "https://www.fb-pro.com/enforce-administrator-product/"; target = "_blank" } {
+											htmlElement 'img' @{
+												src   = $Settings.EA
+												alt   = "Enforce Administrator"
+												style = "width: 125px; height: 200px;"
+											} {}
+										}
+									}
+									htmlElement 'div' @{class = 'product-item ' } {
+										htmlElement 'h3'@{} { "EnforceTAP" }
+										htmlElement 'a' @{href = "https://www.fb-pro.com/enforce-suite/"; target = "_blank" } {
+											htmlElement 'img' @{
+												src   = $Settings.EnforceTAP
+												alt   = "EnforceTAP"
+												style = "width: 125px; height: 200px;"
+											} {}
+										}
+									}
+									htmlElement 'div' @{ class = 'product-item' } {
+										htmlElement 'h3' @{} { " AuditTAP" }
+										htmlElement 'a' @{href = "https://www.fb-pro.com/audit-tap-product-information/"; target = "_blank" } {
+											htmlElement 'img' @{
+												src   = $Settings.ATAP 
+												alt   = "Audit Test Automation Package"
+												style = "width: 125px; height: 200px;"
+											} {}		
+										}
+									}		
+								}
+
+								htmlElement 'div' @{class = 'contact-block' } {
+									htmlElement 'div' @{class = 'contact-flex' } {
+										#Flex-Container for FB Pro Contact information (order in one column, centered)
+										htmlElement 'div' @{ class = 'contact-item'; style = 'white-space: nowrap;' } {
+											
+											htmlElement 'h3' @{} { "Contact information" }
+											htmlElement 'p' @{} { "FB Pro GmbH" }
+											htmlElement 'p' @{} { htmlElement 'span' @{style = "display:inline-block; vertical-align:middle; position:relative; top:2px; margin-right:5px;" } { $phoneIcon }; "+49 6727 7559039" }
+											htmlElement 'p' @{} {
+												htmlElement 'span' @{style = "display:inline-block; vertical-align:middle; position:relative; top:2px; margin-right:5px;" } { $webIcon }; htmlElement 'a' @{href = "https://www.fb-pro.com/" ; target = "_blank" } { "https://www.fb-pro.com/" }
+											}
+											htmlElement 'p' @{} {
+												htmlElement 'span' @{style = "display:inline-block; vertical-align:middle; position:relative; top:2px; margin-right:5px;" } { $mailIcon }; htmlElement 'a' @{href = "mailto:info@fb-pro.com" } { "info@fb-pro.com" }
+											}
+										}
+										htmlElement 'div' @{class = 'contact-item' } {
+											htmlElement 'h3' @{} { "Can we help you?" }
+											htmlElement 'p' @{} { "Do you need support with system hardening?" }
+											htmlElement 'p' @{} { "Our team of system hardening experts will be happy to assist you." }
+											htmlElement 'p' @{} { " Contact us for a no-obligation inquiry!" }
+										}
+									}
+
+									htmlElement 'div' @{ class = "contact-buttons" } {
+										htmlElement 'a' @{href = "mailto:info@fb-pro.com" } {
+											htmlElement 'button' @{id = "contactUsButton"; class = "button-base" } { "CONTACT US!" }
+										}
+										htmlElement 'a' @{href = "https://github.com/fbprogmbh/Hardening-Audit-Tool-AuditTAP-Audit-Test-Automation-Package"; target = "_blank" } {
+											htmlElement 'button' @{id = "githubButton"; class = "button-base" } {
+												"AuditTAP on GitHub"
+											}
+										}
+									}
+								}
+							}
+						}
+					}
+
+
+
+				}
+			}
+			htmlElement 'script' @{ type = 'text/javascript' } { @"
+						function collapseHandler(e) {
+							var targetSection = e.target.parentElement.parentElement;
+							if (targetSection.classList.toggle('collapsed')) {
+								e.target.innerText = '+';
+							} else {
+								e.target.innerText = '-';
+							}
+						}
+						var collapseButtons = document.getElementsByClassName("collapseButton");
+						for (var i = 0; i < collapseButtons.length; i++) {
+							collapseButtons[i].addEventListener('click', collapseHandler);
+						}
+"@
+			}
+		}
+
+		$html = "<!DOCTYPE html><html lang=`"en`">$($head)$($body)</body></html> "
+
+		$head = "
+		<head>
+			<title>A Meaningful Page Title</title>
+			<style>
+				body{
+					font-family: Cambria, Georgia, serif;
+				}
+				.header {
+					background-color: #c6c9cc;
+				}
+				.green{
+					height: 160px; width: 160px;background-color:#33cca6;
+				}
+				.red{
+					height: 160px; width: 160px;background-color:#cc0000;
+				}
+				td{
+					text-align: center;
+				}
+				table{
+					margin-left: auto;
+    				margin-right: auto;
+				}
+				.riskMatrix{
+					margin: auto;
+					width: 50%;
+				}
+				h1{
+					text-align: center;
+					margin-bottom: 25px;
+				}
+				h1 p{
+					text-align: center;
+				}
+				td {
+					border: 1px solid #d2d2d2;
+				}
+			</style>
+		</head>
+		"
+	
+		#If Path exists to a folder exists
+		if ($Path -match ".html") {
+			$name = Split-Path -Path $Path -Leaf
+			$Path = Split-Path -Path $Path -Parent
+			New-Item -Path $Path -Name $name -ItemType File -Value $html -Force 
+
+		}
+		else {
+			$Title = $Title -replace " Audit Report", ""
+			$auditReport += "$($Title)_$(Get-Date -UFormat %Y%m%d_%H%M%S).html"
+			New-Item -Path $Path -Name $auditReport -ItemType File -Value $html -Force 
+		}
+		if ([System.Environment]::OSVersion.Platform -eq 'Unix') {
+			# $shellPath = $Path"/"$name
+			# bash -c "chmod o+r $($shellPath)"
+			# Write-Host $shellPath
+		}
+		#Create Report file
+		#$html | Out-File -FilePath $auditReport -Encoding utf8
+	}
+}
diff --git a/ATAPHtmlReport/README.md b/ATAPHtmlReport/README.md
new file mode 100644
index 0000000..c539401
--- /dev/null
+++ b/ATAPHtmlReport/README.md
@@ -0,0 +1,105 @@
+# ATAP Html Report
+
+## Overview
+
+A module part of the *Audit Test Automation Package* that creates html reports with tables and sections for audit reporting.
+
+## Requirements
+
+Please make sure, that following requirements are fulfilled:
+
+* **PowerShell 5.1:** To find out the current version use `$PSVersionTable.PSVersion`.
+
+## Installation
+
+It is recommended that you install the module on your system. 
+
+1. Findout out where PowerShell stores modules with `$env:PSModulePath`. For example, this folder might be C:\Users\Administrator\Documents\WindowsPowerShell\Modules.
+2. Copy this folder into the modules folder
+3. Check with `Get-Module ATAPHtmlReport -ListAvailable` if PowerShell detects the module.
+
+## Usage
+
+To generate a report, use `Get-ATAPHtmlReport`. However, you will need to provide the *path* where the report will be stored, the report *title*, the audit *module name*, and what hardening standard it is *based on*. To give the report a little bit more context, about the computer the report was generated on, you can provide your own *host information* (a table at the beginning of the report).
+
+The main content of the report is structured into *sections*. A section must have a *title*, but can also include a *description*, a table of *AuditInfos*, and *SubSections*. AuditInfos represent a single audit test with an *Id*, *Task*, *Message*, and *Audit* that states whether the the system completed the test with True, False, Warning, or None.
+
+**Important**: To use the AuditInfos class defined in the modul, you need to add `using module ATAPHtmlReport` to the top of the file. This might not work if the module is not in a PSModulePath location.
+
+For example, a simple section could look like this:
+
+```powershell
+[hashtable[]]$reportSections = @()
+
+$reportSections += @{
+    Title = "Section 1"
+    Description = "All tests from section 1 of the my audit benchmark are here"
+    AuditInfos = @(
+        (New-Object -TypeName AuditInfo -Property @{
+            Id      = "1.1"
+            Task    = "Ensure something is set"
+            Message = "All Good"
+            Audit   = [AuditStatus]::True
+        }),
+        (New-Object -TypeName AuditInfo -Property @{
+            Id      = "1.2"
+            Task    = "Ensure something else is set"
+            Message = "Result could be better"
+            Audit   = [AuditStatus]::Warning
+        })
+    )
+}
+```
+
+A more complicated section could look like this.
+
+```powershell
+$reportSections += @{
+    Title = "Section 2"
+    SubSections = @(
+        @{
+            Title = "First subsection of section 2"
+            AuditInfos = @(
+                (New-Object -TypeName AuditInfo -Property @{
+                    Id      = "2.1.1"
+                    Task    = "Ensure something"
+                    Message = "Not entirely false"
+                    Audit   = [AuditStatus]::Warning
+                }),
+                (New-Object -TypeName AuditInfo -Property @{
+                    Id      = "2.1.2"
+                    Task    = "Ensure something entirely different"
+                    Message = "All good"
+                    Audit   = [AuditStatus]::True
+                })
+            )
+        },
+        @{
+            Title = "Second subsection of section 2"
+            AuditInfos = @(
+                (New-Object -TypeName AuditInfo -Property @{
+                    Id      = "2.2.1"
+                    Task    = "Ensure something way different"
+                    Message = "Oops, something went wrong!"
+                    Audit   = [AuditStatus]::False
+                })
+            )
+        }
+    )
+}
+```
+
+Tied up, the full usage of the `Get-ATAPHtmlReport` function could look like this:
+
+```powershell
+Get-ATAPHtmlReport `
+    -Path $Path `
+    -Title "My Audit Benchmark" `
+    -ModuleName "MyAuditBenchmark" `
+    -BasedOn "My Audit Benchmarks Benchmark vX.X.X.X" `
+    -HostInformation (Get-MyHostInformation) `
+    -Sections $reportSections
+```
+
+## Troubleshooting
+Using `Import-Module` instead of installing might not work. Please follow the outlined steps above.
diff --git a/ATAPHtmlReport/Settings.psd1 b/ATAPHtmlReport/Settings.psd1
new file mode 100644
index 0000000..58108ab
--- /dev/null
+++ b/ATAPHtmlReport/Settings.psd1
@@ -0,0 +1,57 @@
+<#
+BSD 3-Clause License
+
+Copyright (c) 2023, FB Pro GmbH
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#>
+
+<#
+	Author(s):   Benedikt Böhme, Dennis Esly
+	Date:        07/20/2018
+	Version:     1.0
+	Last Change: 07/20/2018
+#>
+
+@{
+	PackageLink   = "https://github.com/fbprogmbh/Audit-Test-Automation"
+	SolutionsLink = "https://www.fb-pro.com/enforce-suite"
+
+	Logo          = "data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QNvaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjMtYzAxMSA2Ni4xNDU2NjEsIDIwMTIvMDIvMDYtMTQ6NTY6MjcgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9InhtcC5kaWQ6QTcyNUZDMjEzNUVERTYxMUI1OUFCMjU2NDI2OUE3NUMiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6Q0I2NjA2RUZFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6Q0I2NjA2RUVFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQECAgICAgICAgICAgMDAwMDAwMDAwMBAQEBAQEBAgEBAgICAQICAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA//AABEIAGQB9AMBEQACEQEDEQH/xADgAAEAAAcBAQEBAAAAAAAAAAAABAUGBwgJCgMCCwEBAQABBAMBAAAAAAAAAAAAAAABAgMEBwYICQUQAAAGAgEBBAQGCQ4FDg8AAAECAwQFBgAHCBEhEhMJMRQVCkFRYXGBIpEyQlLEhRZGF6GxwdFy0iMkNFSUpGUm8GJDZBjhgpKiU2OjNUh4iLjIOfGywjNzg8OEtNQlRXe3GREAAgEDAQUDBQ8DAgQHAAAAAAECEQMEBSExEhMGQVIHUWGRoQhxgcEiYoKiwiNDY4MUJETRMkKxFTPDhcVykrJTFkYJ/9oADAMBAAIRAxEAPwDv4wBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBLnpQO4iiiPTo+Or0+Pw2D3oH0GMA/RgExwCUzR1PURaoGEjmRVTjkDl695MXPUF1yiHoM1aFUVD9xgEzSSIikmikUCJJEIkmQPQQiZQKQofIUodMA+8AYAwD4UTTVIKaqZFUzdO8RQpTkN0EDB1KYBKPQwAPz5KlKLrFtMhpNUe4hvZ0f/MWf9FQ/eZc517vy9LKeXDur0EKzjY8G5Ceos/4IyqP8mQ9CKp0g+4+ImRz73fl6WOXb7q9BFezo/wDmLP8AoqH7zJ517vy9LHLh3V6CDbR0cZZ6p6iz7XBUgH1ZD7VJBIBD/wA38ChjZHOvd+XpY5cO6vQRCsXHqJqJ+oMvrkOT+SofdFEPvPlyede78vSxy4d1eg+W7BgdBE4sWfUySZh/iqPpEgCP3Hx4597vy9LHLh3V6D29nR/8xZ/0VD95jnXu/L0scuHdXoIVlHR4tkzixZ9Ve+v/ACVD/LqGWD7j4APjn3u/L0scu33V6EfR46PBwgb1Bn0MVZP+SoekQIoH3H+9Dkc6935eljlw7q9BEezo/wDmLP8AoqH7zJ517vy9LHLh3V6CFWjo8y7QnqDIQA6q4/xVH0JpCmH3H364D9GRzr3fl6WOXb7q9B9uY2PFBX+IM+oJmMH8VR+2IHfL9x8YZPPvd+XpY5cO6vQewR8eIAPqLPtDr/JUP3mOfe78vSxy4d1egh3cew9XUKDFl1U7qIfxZD0rGKkH+T/x8h3r3fl6WOXDur0EQEbHAAADBkAB2AHqqHoD/WZPOvd+XpY5cO6vQf32dH/zFn/RUP3mOde78vSxy4d1egezo/8AmLP+iofvMc6935eljlw7q9A9nR/8xZ/0VD95jnXu/L0scuHdXoJP7PYe3+nqDLp7H6/yRv16+u9PT4fXpmTzr36OvHKvM8r7pa5cOf8A2r+zyLylSZgmQMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAJY4DvykaX4E0JBfp8pfVEAH7DkcAmeASfr61MiHQBSim32wgI/x5+HoAfQB27JPt+HuuMAnGAMAYAwBgDAIZv0AzkgB07rk30iomksIh8nVTAInAIVmIGQ74B2KquFfnBRdQwD/ALEQwCKwCHbdfBAB6dSHVT7P97VOQP1C4B/XRxTbLnD0lRUEv7ruD3Q+k3TAPRMnhpkJ94QpPi+1KAfsYB5r9ngG+8XT/wCEAyP/ALXAPfAIUv1nig/Ai3TKH7pY5zHD5+6kXAIkwd4BKPoEBD7IdMA8m49UEhH0+GQB+cCgA/qhgHyv0Mo2THr2qip2fEkmc3UfkA4l+nAIjAGAMAYBJvzg/E34bmT/AA/zfqlr7/5nwk5zGLowBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAlvQTS4D8CMaIfS5dB/wDKYBHqqkRSUWVMBEkiHVUOPoIRMomOYfkKUOuAS6HSUKzBwuUSOX6ikg4IPXvJnc9DJIG6/C1bAml/rMAmmAMAYAwBgDAIUn1Xbgv36TdX6eqqZv1CFwD1XVBFBZYfQkkoqPzJkEw/rYB8tUxSbN0x9KaCRB+cpCgP2RDAPfAIZv2Hck+9cCYPmUSSU/8AGMOAfD0f4NJPoA+M5bp9B+EoKlVU/wCCTNgEZgHg6ARQP09Je6oH/qzlU/8AJwD3wCFbdpnKn37k4B+5RKRD7HfSHAIrAPBv9oYo+kiyxfo8Uxi/7QwYB8/bO/g6JN/p7y6n7AIfq4BE4AwBgDAJN+cH4m/Dcyf4f5v1S19/8z4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAS9Ae9Ivx/3NBij9IetLdPsLhgHlKgK5W0eHofuCkX9PYyQ/jDvvdPuViJgiP/pcAmuAMAYAwBgDAGAQp+hXiI/7oguT5xIdE5Q+gBNgHxI9rQ6Yelc6Db5wcLpom/2pxwCNwBgEMT6rtcPv0UD/ADiUyxDfYDu4B5r9TvGRPgIDlyIfKmmVuX/4vAI3APFx3fAW75gKTwVO+YfQUvcN3jD8gBgFioLlHxwsDRy6it66ocoxzRy8klT3uutCsGrBA7h86e+uv2wtGzRFE51FFO6QhSiIiAAOAXnhHLZ7ERr9k7bv2cgybyDV80XSdNHjd+mV4k6aukDqIOWzgiwHTUIYxDlEBARAeuAUfe9ta51meKb3a2xkNJzyiqNer5fWZS1WRVDui4SrVSh0JCzWJRsU4GVKyaLikUe8boHbgGG20+Ym8qBLSkpS+Ee39uavSQZuWVsr9oodTtD1YzRIZBsTXewJmuWJRwi4KYqSaQHUVIAG7pTG7gCaFfceOYcTuSkJ3y/ak2pxtRnLLKw9ZjN0wKsQvLxMQolHpzUjJsUXMDU1XUqm5bgwknSLsp0O+AGIqmIiDMxNQipCKpHIomoQqiaiZgORQhwAxDkOURKYhij1AQ7BDAPvAGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBb+F2DQJOxWSvx15p0hYouVFlKwLC0Qbyai3LVmzRVayUU2fKvmDpJbqBk1UyHKI9BDMaObhzuysQu2nfi6OKlFyT8jSdU/Mz7d7pnqTGwLeq5OnZ1vS70eK3enj3Y2rke9C44KE4/Ki2vOVaiUy0m7cHAwEaJpsG4G6gAmUKm7drFAQDqVTvJE6/GkOZJ8QmeAMAYAwBgDAGAYvb85Z6c0AwB5Z5h1aJuPk2zaRouuUEbxsWPZu2jwykw5oUE5c2s8S1BMviqItFjlMcn1egiIB/qY1a482rg5t7ZFY1LW9ny8bfpZ/Je0IK0Ua31klPJDQElPC42LJy8S0i9eR8iVgKDBxMqs0X78SNUBUXOUggbKY6Sjpdi2k4l+ylI16kVdnIRzpB6xdoG+1WbO2x1UF0jdOwxDCA4BjVs7lrrKgXlxqKARmtsbrZwZbPLat1wSMfSlLq6pFDIW7almmZOFo2paksKfVN5YJNgd2UDeppOjFEmCK7adphBzH3zuCg0qtbft/LDSvBSrot3RGiU1X5zfbG3DJFaLsTSLVCJos0dRsVMfDVj2zhoJFhEDLfUOIn3TGfgj5kOzdrbKucHeeYXCTfyYx8DBapolONcNHWO7OVH8q6kLXHv9kVFtNDPyHjtowa+dmugJ2ZVmztQVVAKKVJS/taZnRyk8yuocaqjW2D3UezZbkHsq+wGp9TaQkog8Q1tl9tD1vFxjt7tNgnPa9j6FHvnRBkJFF45eNSCUh2QLnBIBLdPdZStzt40ldV3yx3FJbKnSQ5XkxTdVycpQ9URc84UMspTanSoWRbTE7BQ5fqKy9wlZp48U6eEzaFEUyRWgp5TQVt48lyf3811fXuJvlh1qjT0r49Lt1/hdg68uj6QRcAdOInL9WbZXTvp2TSKBDoHSO0kEzHR8FQTeGZVEScq7EqG2u/8yK1wgtFM0pyYvEVwuvFwpbp5qe4V2YsG3+HFySiWxGLqDSgLgg3sOp5StulURJGitFM3CIpAjKHKJkAkqSLM6M5J6w1fSZ1ovsyN5C8wHzyOuW9uQBLJGWdrtqGsirixaxcU2RiV1mjHQ41tZp7OqjQGDKKWbnbPWJXPrBl4bCSRro5lSUdy2tkbbtxRYXeSrThE8SzWm56DjTMGyniGgDN4KQZINYx2mIkMKKZVCCbvAbvBkVIlFSVGf3cfmH6X4icaoiU4Pa621x/5GVyxwqc1rCzSE9uDjxtCtOXBULdFXNCcsazdyUjIwrR79FrDzTJQpSIrimY5TSmU8cY7HsLoeWz7w062hyb1Bx/3RpyG1HV90vZmoKydXtEjLUau7KfLoOteuq1BTbUJOpRNlH1mMl2gO3DIz5Rm7bJtzmfA4kmNyM68PYdiICAgAgPUB7QEO0BAfQIDgqGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAIOQkGEQwfSsq+ZxkXGM3MhJSUg5RZMI9gyRO5ePnzxydJu0ZtG6RlFVVDFImQomMIAAjkNqKcpOkUV27dy7cjatRcrsmkklVtvYkktrbexJbzma5Ne8QVOVnrnQvL7qlY21F0WRWgbpyu2WeXLoWKn25erqv6rp9dcx113tPoEUKbxkHkHCEAxFCvXKSiYn131T4iad0+laspXcuSrFN0VN1X28PkfbTYmtp3O8AvYy618Y7k9R1Gc8DpvHnw3rkYcc1JJSduO1Rd1Jrigm1DiSnOE2oPS/tzzeuXkjCPbZe+W27Fn7cqjpvrzS8dr7WjrulMcCoN2lNb19VmQCCBwRd2WZXAvQpljqdQzVs/EPqrV8pWcfIjj2ZOnEocMF85xlJ+7wry7jvxZ9jX2f/DnQJ6nrek39Z1G1Di5E8vm5Fx9tLVq9Yx4Pt4ObNrcm3sNIFj35pPft0uN7kKfy9qW2L/Kv7BJborkhO2exvbK8Hx3VlscbFW1UZZ27dkMo7P6q4XWETGETKD3sZmLq1q68rPytOyZ1rKNzhi5V3/HcItN+XiT7SOnNd8PNQwIaF0noHWmiYqtqFm7g/qL8bKgmov9PDIuxlCC32+VcTS4aPZTp38rzzcp/iDx+1TpyVrrblHxtrQzEaw2TRJewk360l5iwyNlth5KK2JaZeOvk+2mZV4f8nF16rKtUhBuyTeCkm3HmOjeJMsK+tM1/G5EY0pKO1Ri/wC1tbnGm6cXw027EdbfEv2IbPVOlT668INd/wB2v3XNzs5CUJXb0a82EJ0jO3fU68ePkQjdUqxrKSodd3HzkVpflTqyv7o0HfobYuu7GLlBpMxJl0HMdKx6ngS9bskLIItJqrWuBd9UX8XIt2z9ksHcVSIPTNv42TYzLMcjGkp2ZKqaPN/W9D1bpzU7uj63YuY2o2ZOM4TTTTTae/zprzNNPamlevL58kYAwBgEmsVigqjX5u1WiWYQFbrUTITs/OSrlJnGQ8NEtFX0lJyDtYxUmzNizQOoocwgBSFERwDQPqTnBL+Zffdu3Bjbrpo7y8dNy5ahVy1d9IUnaPMe8Ji7GaGSu8W5a2yh6fgmiSQLx0KqwkpEXpCOnxSlWZlFKrLb2ETsHl3X9Pa7l9dceK5W9ZzC6bwjG7VSo1loSCXVXOq1cw9TfR8nBPHjEvcKLyUCRfujlFZdY6phEKeIr3bDDPhGpys3juF5aL75nFAYblgAmYFjW9qccNPSllslElVmjz2PATMlC14z6vyizFud8xjJBJdI6ACBSABVBmtdhbXFWjfqK3d+aVxjoW2Nv8d9j7Z/0EOW2vLQ8okntTVcAvaOLuzZCSI2j4bYB6a8JP10jcE5dJ5JMZ1shMQ5SqmaTixURRXkrovcLZ8OeTesOM+gNo6ojNu1naO3LXvTYli39vScn69YXW49hLywMW03DXQjhw1uVIJFxyHspz4yvYZT6qBjGSLDb7CFFRVEW43Fs+a2eeRJZpVafZSiSibltIq+0WbtsuAgZI6LgVUFkTkN8ICUQ9GQSS+A55JaN0Hd9GbG4m6g3dQ5eqS9fjpaHha3Qbadg4aqox6djWaQC0ZZ1YZZQp0XX8UfomKVTxFDgBglMobcOzYaRa55vnmBa/11L6k2FdGe4aWwiHrCmE2y1Wl79rmYZHRVo11qW1IxxGXYLbrZdv1iXL109L4KqzdcqrdUUgko/URclHymW1R80xDazGtrbJXj49/YPZ0cBvX3YWJ27OmZvKTi8R6gESaPaSiIkcCg5KcvfKqRHwzAUIaqXqmQ88aMsjNVq6BJy2ckAxTB3Dh1EO8mskYeod4OvUB+HKdu4NJ7GazuYGobRcVoV1M2a2WdnXmK6FYaTdkmpyNhmihyC5aQ7KUfPEYluqZMgnSRAhAEA7OgBlSflMeauR/tbMMeP1Q25DWvaNk14yMlE62palktbOQPJNIOUeqSLSHr0YJo13HuFZtZ/LCuiVFYioIILKCIFKOSVWXJ29u11NzHF2x7Y2hrRJ5aYhw8nYV4WJkHp1mwKOhFqk6RFcx1gFZwimp3Tn7RMAAJhEwiI0tF5Vpt3lzNkaFsV9r7hktAJg9AUxRUVdMyAYOvdMVQRUEBKBDCIfCHoxtKZRUl5zFbUnl6Wmo8g9X7en5OHbVzWtui70nXmS7heRlpyuO05WBaqLpIkbM40kq2SUciBzKGSIJCAAm7xaqlu3acJN9jP0NNKyUpM6f1bLTQnGXkte099ImUDodR26gGCy6pwHtA6pziYflHBeLm4AwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/MR1r70/wCe5yU2NJ0njXo7WG2bW7Tm7LG6v05xd2Nt23RVVZuyGWVLE1WyzVjfRUCk9QRWfKId0BMQyhgMcOoG2ny7/NZ95M3Vza436r5TcCNia/473fYzGF2/dp/gfvnU8TV6Uoxfryk062FbAa16tCyBAp01XJ+6qqBUSlOdQpDAXD94/wDPw5v+V5zJ0/x04tx+mUKpaOMtb3VY5jYlHkrhOP7Datp7aopY1sZKywrOPiomN1kkqmBUjKqrPVe+YSlTAAMMds+cR71nxe1u93/vLgzq+P05WmKE1ZLJJ6HkZ+qxMI5KiKcxaVtZ7rUnoCBKDgniPVlWjdLvB31C4B0g+Rr511I84rTuw5VzrwunN+aPkq9HbZ10zmz2OtOYu3py56jeKTMumrCRWgp09ffIrs3SPrMY7bCmZVwmdFwqBvPwDQp54vmRchPL9j+NDbQLeiFe7febdXssldK85sZ2zXXaOtU41jFtU5SObIFfq31ZRdQ4KH6tkwIJQE/e4F1x1LqHT0cZYCt8V53KuSb/ALOCiW1b+Pb7h249lXwP6P8AGS9rk+r55is6bHDVuNi5G3V5LyeKU24Tb4VjpRSovjNvcjVgh5rPntsNaxW9leM8VO6ffV9pcW1xR47W6TqTypP48ZJtY3UhW7Mm8aV00eILmeiqggmToJ1CgPbxddV9eRxVn/pYyw3FSUuVJxcWq8XxZVpTbXYjfUvZ+9kq7rt3pJdQX7PUlu9KzKzLULELsb0ZcErSV2xwu5xfFUPjSb2JM28eU95yEB5g8jOaj2NSY3WHIGs189pIwrzx47o1/rrRy3Zy0lViyqzqYhJKEcPURcxrpd2YW6pVkXKoFXIhy7pPrK11FKWJkQVrUIR4qJ1jNbm412pptVi67HVN7addfaF9mjO8GrVnqHR8qef0dkXuVxXIqN/HuNOUIXuFKE4zjGXDdgorii4yhCsHPeFnNzquMAYAwBgDAICRlIyIbg7lpFhFtRUKiDmReN2TcVTgYxEgWcqJJiocCCIF69RAB+LAItFZJwkkugqmugumRZFZE5VElklCgdNVJQgmIomoQwCUwCICA9QwD0wBgDALM775EaO4t63kdv8AIjaNP09rCIkImKk7xepVKFrzGRnXqcdDs3D9YBIRxIvlSpJF+6OIBgF32zlu8bN3jRZNw1dIJOWzhEwHSXbrplVRWSOXqU6aqZgMUQ7BAcA98AYAwBgDAGAMAYBxL+9OeZNcWtno/leaZtD2rsL3CxNz5T2KGcGbyb6qzKxnNT1ORyn3VW0dJRzI0tMEAf44gsxQMPgGdJK8E6r1qViNzFs7VagpT88pbYQfmSpJrtqvPXth7Pvhhb1e9ha/qa4ZahlStY8nvt2bb4cjIjXZxylxWbcv8HC46VcXHm0YW2Pq9OiKTUW6ELXIZt4LOOZACaYqn7XD1yYv13Ug9U6nWWUEyihh7R9AZ11uYl3LzJ5ua3cyJurcvUl5EtyS2I9oMLqLT+nemMbpXpi3DE0TFtqMLdtUq98pza2zuTbcpzk3KTbdS1cvKLPDnMoqYwmHr9uYfnEe3PsWLKtrca61TUbuXNynJtvzk0oXIzZei28hHw7KGudPeHcOi1izJmMVgut1O4WgpciSzqKVEwiYUhKq3OP1gIUwiOXMrQ9O1d8V2trKok5xSdexcUXSvupp+WpjaD4rdZ+GqlbwEs/QVOU44925O3wNvimrV2HE4Ve1wlCdt1bioSbbwaleQe5YLZWx71Spx9rwNjv3DucrsO4Te19x3k0kmzhxHvWyke5mGZ25V0X/AICbpFyHiJmIOc9xNG0t6VjadkxWRHHglGctkt9XRp1UXWnDVqmxnT/qPxP6/h4ga31nod2Wjy1nIlcu49lq5YbcVCMnCcXbleikpq+oRuK58aLW43u+Rz5yF90Hz4E+z1oGvaY5EsqnV92wsEm+j60+uMc6Z16K3UaNcO3rSOuzZtIp+0FW4JJvGLcyIl8QyZi5mmTfSLx5Y9y7c0uV/l3YzdeC3crwyjRbrU9td7hKddypxzrexb9o9avj6ziYOH19Z0p5eDex4OCyczDUVes3eJy+NqON8RRTUI5NjHcacdxT/T6AQEAEBAQEAEBAeoCA9oCAh2CAhm4DzgP7gDAGAaRfPwsmxTcG7BqjV5Xylg2y/MzlWcacSP5ioVYWczPQDXoJTKKS6qjYpkwEPGTIZLtA4gIpmm4tLec6HHbkXEaf46VGmyzk1LhqdBpISLCSQcRyzWQXOKj7x2KiRHR5B5IKm6l7gqKKG9Ajli9et49t3bslG1Ha2+wz9L07P1jMtaZplqd7Ouy4YQjvk6V7aLcm95cdhtiA2LDsbPXplvMQ0uiZdk/bHMKaxQOZNUpinAqiSySpTEOQ4AchiiAgA5VbnG7BSg6xe4t5eJkYOTPEy4uGRbdJJ02P3VVNeRptMtzdqtFXFmok4SSM57ggkqYO3r6SlE5R75DlN2kOUe8Q3aA5WYso1NMe79BLQ07NyrVk4WdGcuTvTrKrvF1lQMbvqKLLqKqqnMAdoiYRypbjDuKa3N0RR+udUblqGl5jdsSmEPGo7CbRdCiJyMReeLMtY9d1KWtrDS7deONBnapBHKKLJCm4WOHcA3hGEoy414U/MbX+Fye3LhRpaHsajJ65rjtmKS53iSaSBZUHax49oCJDJEatzoiZNMvQqRDd0oAXoAQypVpt3mY0hp+yTTBxHyTaMOi5SOmYDOxMACYglA5RKiIlMUR+DIDVdjMJrz5bDi/eIWQuDCuFWOALLxketJuypiYBOCRVzMm/iCX0CYRAB+Acnb7xZ5XxlLtTLYb64y1WC2brKhUSkqPkKfrerQqTpDxSIxhSKOWylgsD9Pw0lJSYO0O5cKqj3lTdQTL0ApQmvaXqV2m0anR+sAiYqO9moCtHxzFioqsZYFFzs2qTcy5iit2GWFPvfTkbAVw5qGs5AqXjwMO6BHr4frTUjgCd/p3ugLGUL290MbBRMoXaVMgnmsLJWK0xYxX5UKR0AU8UxbNwQ9dfIKvnoIoJETOqziWi6vUwCHUgdfTgULXa1g3OqoxvXq2DkI5JU6y3rC4ruHbpXugs8cq90nfWVAoAPQAKUpQKAAAYBknDW167AhHCJwMPTr1Ds69P1cAzW4tcdp/kHeWDAzJy2pMQ5bvLpP8AhnI1ax5DgqaIbOO6KZ5iXIApopgImIUwqmACEHrO8k6U2jRswaNWLJBNszZN0WjRsiUCJN2zZMqKCCRQ7CppJEApQ+AAwQRGAMAk35wfib8NzJ/h/m/VLX3/AMz4Sc5jF0YAwD8gX3bfmvxk4DeY8TfXLTZf6J9ThoXaNLG1/kbsC9f3lsb2orQ0b7C1rVLlZP44nGLj43qfq6fc+ucomL1A/R74wefZ5TXMrd9K44ccOWbbYO59iGnCUymuNK8iqN7dVrldlrXMIN7DsXUVSqrdy2r8G6cFTXfJKL+CJEgOoJSCBxEe+p/96ZoP/mA6s/6xPKnANv3Nj3szy77XwV3JpPQ9J3fsvcG0NC27SkJE3XXENWteRD+769k6Y7sdzfyFvXdSdbh/XzKHYs2y7iQECoD4Kah3CQE39zQ4Qyeo9D8geZdg2NrixL8jxodIqWv6FdqxdZug1nX7izy8g+2karzEujU7ha5Cyt/V6+8BtKRbRiKjtMqjsEW4HbDgHIr71J/yEv8ApP8A/Z4zUPir/A/P/wCSejn/AOf3/wBt/wCl/wDcTctwr5L8ddNeWhxYs22dyaxqEDVOL+qS2Qs9b6+m7QURo8UirD+xTPTyT+ZdrB6ujHpIqOnK5gSTTMcwFHmui6lp+F0ziXcu9ahbhi261ku4tlK1b7Et7exI6veJ/RXWHU3jl1Dp3T2m52Vm5Gv5vLVuzcdU8i4+PiUeGMEvjSuNqMYpycklU5cvIsqr7Z/mzttl6xhJCsaxo7PfOwpSGbN/V2ELRLfAWemU6pyXqC/s1H1SYu0YKLfvLEE7ATJlEEvEJq3oS1LK6t/VYkXDEgrs2uxQkpRjF02b5Ki2/wBuzdU79e1hqFvp/wBnVdP9QXbeT1DlS0/GjcbrKeRYnavX78OJcb4oWLilKkXS7ST+NwyyH5mebnzZ4u+ZzyEqVT2HKXXWdLnbLTqXpSUioNapjK2DVRYykrrIsYIthfkrV9mWUwZBB2i6kRaGamXIRc459HWur9b0rqjIsWbjniwbjG00uGsrdI7lxOk2pUTq6UrtOE+F/s4+FvX3gNo+q6lhwxNeyrcL1/OjcuK6rdrMcr6XFc5UXcxrc7KlKEoW+NXOBuCNjnlV6x83Sjci7TuPn5dNluNG3vSVqsryL2Btmuz0HU7unYag/g0A1iwn3KOspFOuKSix0I6NYtG6BDoufDVIREOSdKYvV9jUp5nUE7jwrliTpK4moz4o0+In8R8PFsikux7aI0p7QGv+zjqvRWP034P4uHDqnD1W1bU7GJdtzvY7tXlcf6qUE8qPNVlKV65O421K3WDlI143XzEfMh82DlXaOP8A5ftykdJ6hjEp9zEysJJq0OSSoEU8Shw2hs3ZLWMd3mvOJpw+Q9WjYUE1WhniKBEXLhI7o3Hb3UXUnVmqz07p6bsYaTo0+F8C2cc50c41qqKNGqpUbVTc+meC/gl7PPh/jdZeMuNHVeprkralbnFX4/qJJz/S42M5xx7qtpS47t9uM+CUuKEZxtlAb32B51vk82bXtw27yUe7w1/dZpwg3dWLYFx33rSflGDVu7f0madbVh4W+1N65jUxWR9QGOMqVNY7ZcwkcdMbOyOtujrlu9mZPPxpy7ZyuwbS2xbuJTjs2qlNzo959npPRvZc9pXEzdM6b0NaRreLZTpbx7OBkQhKTSvwjiXLmNeSk+GXMVynFFTiqwOv3iNyRqnLvjhqbkVTG6rCH2XWSyTiHXVKuvX7FGPnkBbq2suUCg5NX7TFPGYLd0oLkRBQCgBwDNwaTqVnV9Os6jY2W7sa08jWyUfekmvPQ83/ABE6J1Hw6611HovVWpZeBfcONKiuW5RVyzdS7FctThOnZxUe1GJ3nEeYcz8sHgTtzlO3ho6z36PPC0LTtVlzKFiJ/a94cqR9ZLMkRdMnTmBrzVF3NSKCCyThywjFkkjkUOU5fonCzTxxl93crvMmg1TlL52+298cwOV21oFrcX+t5La9ooepOPcfa2qEqjrmiVvX7mtuYmRjWyjdOWTYuWkKV42BJsyAEjuXQGyPhZ5MGvfLq5DROxeHfJPkXRuNr+t22D2Fwovt5lNp6Qk5OZIZ7XLhr89hfpTOv7LAWA6jl0uqMuvIpuFE/FblMoCoGRPIjzYeCXE3edv4+cjN1M9S3mi8dU+Udje2mEm0Km31W4u5ddx/s+wtmTlCdukxbVCNGEAwI5lnyhylboKHMUogWL44+e95dvJDdczx5aX3YWjttx1RsOwoircotU2/j8e5a/qkRIWKfuVVkL+zj41aKjqvEu5UyL1Vk/NFs3TorcUGjs6AFF1n3iDywbNuig6fDZmy63GbasytO1HvW76S2TTeOm0rInJEhQZ0fbFhg2EXKxq0uoRuSVMklDCZQhvWwTOQ5gMafe0/+5b3L/8AlzQH/wCyonALyXr3iTyydBkCrzV92zsGsaxUrFB21uzTOjth7Q0Dq66KRlfSUrFo27XIpaqyE01VmmyayEKrLKJOFPVzB6yAogBsi5AbT1/ufy99+7e1Fc4O+652BxH3HbqNd6rIJyELYIGV1NZ3cdKRj1AQHunIb6xTARVFUpiKFIoUxQA1V+6pmMPkgcVAEwiBLVyNKUBERApR5GbRN3SgPoDvGEegfCI4Bjp5r6qhfeGvIFKVQ5Sh/pE9AA5gAPGhBTV6AA9A8VMAKb74odB7MA6scAYAwBgDAPy7POoosxd/NL5bWaWfu2FogNuOI2NVcEMsg4rDaq1ltXGiyZhKoRAkGmgZA5B+qUw9ggPZ196h1W5i6/qGNfjxWZ3t25qkY8LXvU2M9iPB3oHC13wh6P1nSrvI1DF0x0klxQm53rsrsZpUaauudJJ1TbTT7NdiUJa2xAIqm2c90OneRddAMAfD3VipCHX6c428nEk6qqr5v6G7IaT1HYjwXI27iXbGfwSSZ9DGTo9ho9QPj6HQEPi9IK+jJV/HW6S9ZP8At+sP+6xL0x/qeSlelHaZkV48xk1A6GA6iIdOvZ1D+E7DB8GSsq1F1Utvvlu5ouoZVt2r1h8D8rj/AFLOzOjJmYFXu+pMyiY3dUXXE4gHUehu4gmqb0Z9qxr9ix3n5qf1NV6t4Q6nqjklyrSbdHKVaeTZFM8YvTyOtadcnyj/ANp2qYZM2jKQQQUQGMbtpePkxbRKQnMsLp24Zk8VYRAfDJ3ClKAmE0ZeuPU8i1CMeDDt8TabrxNwkqyfkSexeV18lLnT3hVZ6E0bPzJ31k9R5nJtwuRi1yoRyLV1wsxbb45yhHjm/wDBcKik5N/sW8dXM694+6KeWgVhszvTesXNiFx3vHGdXpMGrLiv3vreMMgdTvde3vdc3/pznLT7Ern/ABHZhX3eFV9Z5BdZQxrXV+q28On6SOpZKhTdwK9NRp5uGlC8mZhxsYAwDXB5lut31t1HWLkxbqOg13ZlHEummQTijA2RsnGu3xgDt8JpJN2ffH0FTOYw9AKI4Ko0rtOe/benaDtOnTFQu8AWViZVNEFlGpyMpVsq2VI4avGEmUgrNnLdYgGKId4o9oGAQEQyxk2rd+27N1NwfkdPWfW0jUcvSM+Go4EoxyrdaVSkmmqNNPemn7vkLe691DqrWlXiaNXKmRCFhSLEbqvnSjx+uq5XO5cuXrsRSFw4XWWMIiBSlD0AAAHTIx7du1bVq2nReXa/fZRquZk6pmzz8xx59yleFKMUkqJKK2JJL+pctGq0MoAYIhiQfT0MBz/L6BUEMv0ofNcaEtc1nXLVRV2MFBAuYwqHWNGs1FRN17TCoqmY3X5euKdhQ0jHPeNbabkjYHW0Z48dBrTq8rOS7FBJRVnEQkQ7KYjZNQAbgZzIyLVuTr2fXMIAPdHCJSqz+0GCY6dgUa1UWyqTQi5nDt08W9YkJN4YpUzO3y3dIAn7hAKUpSlTTKHQoB29ZezcVv4qoi6Lbar1IoFXKbr07enb9gR+fIKKk7r9guWw7FD06lw0hOWCwPkY+KjY5uo6eu3Dg4FKRBukUTmEvXqJh6EIUBMYQKAjggvNuHhJvnVD6alLlrqedjLHYru7DBNlLLBerx8egyjWftSHK7SQ9TQIYxgWBI3jKqCAdBDJ2FWymwxE/JSabvBTSjHpVhMJQImgv4om69ADwu53xER+TrgpMtNH8NOSe55JkjXqHYY6CXVIDi1Wpq6rVaaI94PEXF/JJJLPwTL2+GzScKm+AvbkUJN4tU8rzSTLWTKp2+Sn5e7Ac717eYZ6aLM2eLoETUYxcQ6K+jjRCIkDp6wmo4VHqYTkAQIWRWm4shK+T7CqPRViN0Ok2gm6lTk6Sgs6IXr6BXZ2BqkqYPj8MnzYFV5C7uuPKv1BVnjd9dbdZb0KBiKezG7dtVopY5RARI59UXkJVRI3ToIJukRH48A2RVSoViiwbKtU+CjK5Ax5O40i4lqm1apiIAB1TFIHeWcK90BOqcTKKD2mMI9uCCo8AYAwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/H393I4O8bPMG8xYnH7lXR32wdVjonZ93Gvx1uttJcflJW3tTRh3vtqlTUDNeG2TlVwFHx/CU731ij0DoB+jJxX9308qfhfvqg8mOPfHmcqO49Yrzzmk2WS3Tuq3NIhzZavN02WcGr1qv0vXpBRWvWJ2iT1lssCJ1AVIBVSJnKBxW++p/96ZoP/mA6s/6xPKnAO2qd8jryi9raSSq1p4EcZ620s1FjiyduoGt63rK8RCrmDROrOQ98pjSDsMNJNFTiuCxXHhicv8KU5O8UQOFz3W+83fSfnnSOg9G3ST2BoHYcPyR17sKcjX/SrW7W2q4K5WrVW130U0cOIZ0+Vt1aiW8c7J31GqFjcpIKgi6XKqB+pfgHIr71J/yEv+k//wBnjNQ+Kv8AA/P/AOSejn/5/f8A23/pf/cSmuI/u6mn9/cf9C74tvJDZUWntrV9K2HLVOuU6rtjxa1rgWUwtFR0/JvZUp0mZ3YkKqqxMJwL1EoZRpHhzg5+n4+feybq51qM3FRjs4knRN13V8hkeIvtp9VdI9Y6x0lpui6fP/btQyMaF27dvPiVm7K2pyhHg2yUatKap5TpO4c8FOOHBShvKLoCnqxRptRo5uF0sL0s5fbw9YJKJM3NmsAtmhFEmZVlBQZtEGkc2OsqZFumZVQTbJ0fQtN0LHePp8OHi/uk3WUmu2T/ANEqJbaJVOkXiV4r9beLGrx1frHK5rtJqzZtrgsWIydXG1bq6VouKcnO5NKPHOXCqcht/aNXvvITNu9bN3bceYuuVRQdIpuERVbQtXct1BSVKcgqIOEiKEHp1KcoGDoIAOajvpS8S0pJNfq4f+mJ6MaPcuWvYelO1KUZ/wDx7JVU2nR37qaquxptPyptPYdkPMuPsUtxA5WRVQFQLZJ8bd5x9XFEBFYLE81haG0IKQFTWMKgSSiXd6EOPX4B9Gbj1iN2ekZULH/GeNdUf/E4Sp6zzV8Nr2BjeIugZGqpPTLetYMrye7lRybTudq/wT7V7qOVr3XKfq7XcfK+sPHbNO5TWttczNeZqKJFfOq7XbNYWdsWaEMcFVG7WQskOC3dKIAKifUQ7OuqvCy5aWXl2pNc6VuDS7aJyUvQ5Rr7qPQH2+sPPudPdOZ9qM3plrMyoXJJPhVy5bsyspvcnKNq9w1e1RlTtNjfvLNhqzDgbSK9MHaqWSw8iaW4qDM5EVXhF4Sn39Wbl25TmBVBuyiXxmqqxAESmfppj2K5yPxLuWY6BC3OnMlkR4fdUZVfoqq+enaaT9h3D1G94v5GZi8SwrOjX+e6tJxndsKEH2Nu4ozUX/7bl/iX+8gSDnIbyxNMKzSblFGctO2pyBRdesFMSDcbHsTNBRJFwQgItnj5i4cJ+H1TUIqCoCPfHPodAQnDpexx1XFK417nHL/Xf6zh/tfZWLlePOrLFcZO1ZxITao/jxxbTabW9xTUXXanFxe41x+98wVhT8vjjhthrWlbfRtEc8tLbH2jCFVbA2/JI1N2jV2rqQQfd9ouzfWSwMoftTWMVWXJ1TFIVRLzM6ym/wB3tT7XzI4xRBeL/K218c1toRtB2HQuRGp4Kq3WWUpciWPtDQYaPtJHEA9i7jAuSEMqPUxUVu8QeuAc8HHnYfPjiz7wXpvy89weYPuLl9pG8cN7dvWYbbMo+tKkJrCv+kVhFsyNqjCFXISEc0RFwksR0mdQVzkOUSdQMBH7w07rDcXvbuhUNo0mv3tprryyWG06dH2VglKRsNsGr7X2e0rVqTjnIHZOJWvDMrLsTqkU9VeAm4TAq6KShAKc95i0RqPbXMHyEW+xKNCWlvsDzCKXoi8N5FATJWzUewNoaMJaaNPlSMmMnCPieKUiaomFuDtz4Qk9YW74GTPvV+vqQPkf7sTTqsC2Q1de+OUprtqzimTNnTHgbcp9CKpW2jZFJvDlTp1pfxxCIFTKVo6OmAAQRDALYe8zST6Z931cy8o5UeyUq+4hSUi8WEBWdvn1gqjp25VEoFKKi7hUxjdAAOo4BvsovFfjrC8K4jidHaxo1e45vtFk1vJ68CGjhqQ06aqAR037WaviKISTh6i5VcvHjwyjhy5MdwsqdUxlBA5dfdvLxdLZ7uFzCgbSg/Rg9YzHOCj63UeJvCN3VLf6JrmyXy8UZ0UEFmBdibCnkjGbdUQdJrFEfFKqAAY1+Q15MH+mB5YeiN+//wBKPM047flfP7kZ/om448kP0eairv5L7ivFY9ZrlU/JqR9nuZz2T68/N4xvHfOFVOzv9AAm22/L8/0BPP58lCu/6XHMDln+kab3LNe2OXW2v0rzNN9g1iSY+zaW89kRPseMlfaHiu0u6fxVUUzdQ7uAd4WAMAYAwBgHGH7x9wUslb2pE87KLDLyNCv0XXaNu07FAyv5IXmBbpwlMt0mRIn8BBW+BTbRSjg31EJBgiVQwGeJhmlPEvQbtvKjr1iNceaUbtP8ZLZGT80lSNexpV3o9QvYd8WcDP0O54RavdUNXxbly/g8TpzrFxud6zCu+5ZucV1R3yt3JtKlqRy3qfUAeztD4vkzVND0AuR4F5yBM6KHXqH+HxZc5fnMKWRFPajyF+kHTt/X/ayrlPzlp5cDyO9KIfV6D8wfD2/r5WoMtXMmLXxUbAPKy4JWrn7zBotJNHOjai19IxV+3hYgIckfFUiMflXLXfWu6ZP29fnTYYxkiHVQCKLuO74bZQQ5V0zo09a1CGFBP9NFqd6XkgnWnuza4V773JmgvHXxLxPC7ovJ6kv3I/73et3LGn2v8p5U4uPNpv5eNGXNuS3VULdeK5E/TgRRSbpJIIJJooIJkRRRSIVNJJJMoETSTTIAFImmQoAAAAAAB0zsckkqLceKUpSnJzm25N1be9t9rPTBAwBgEBKRcdNxr+Hl2TeRipRm5j5Fg7SKs1esniJ0HTVwkcBKoiuioJTAPpAcA0e8m+Cl8ozmRsWpYx9dqMoKrkkQyAz21VxIe8oZmqyKAuZuPbl7EnCAHXAgdFSdQ8Q73S6p+XeamLIg9jXbls9YuGb1A5iLtHCajZ0ioUehiKoLFTVTOU3YICUBDISS3FdalsH8k/8AreEKyQdezvG6B8Xp69BySiS8he3SXE3kLyTlmzKk1SUSriq5E5C8T6TqHp0Y3EweKqeVXSAZNZMnaDdmVdc33vTtyC3Q6AKT5ZHHevahjNdzce/l7UmBnkzsxg4NFWN7LuEy+ODUg+tskoJucoA3ZrJrFIUO8IioY5xkJ0MTbz5NxpB0qpTNzNSNDnMZNtZ6oqDlIgj2EO9iJXw1zFD7oG6fX4gwVcSaJZU/JYSB0mped2lFkU4CqzqdTMDpYgGARISRmpVRJuYwdfrC1U6fFgp2G0fj/wARdFcamhw1pUU0590h6vJXSdVCZt0il92ieWXTIDFof7pBom3QN0DqQRDrggyYwCBCMjQW9YCPYg4697xwaN/G73p6+L4ff6/TgEdgDAGAMAYAwBgDAJN+cH4m/Dcyf4f5v1S19/8AM+EnOYxdGAMA4x/In9295d+Vrz1nOT27N0ccL3rhrqzYutqxG6tl9mvrtMHtsrBqxkxPRFt1pU4KuFRj4MDroN5SVEiywpkUUKTxTgdnGAcfXvDPu83LXzYuWuouSXG3bvHSoRdQ46Qej7TVt4Tmy6s/Sf1bZezb7Gz8BJULWWzm8wzmG+zlW66DhKPOzPHlMUzkHIg3A1+q+7h+8ZbLj/0a7x84hhLaYn2asJcYBXmjzp2pHuK+ZkqgWO/Rrb9d1Oq2RmqIERM0dP2qAImMPU3dBMwHRB5MfkHcdPKFjrLeI22SO9uTt/gE6xb92z8C2rLODqh3LCSfUfWlRQkJk1YrklLxrdw+Xcvnz+RVaoidVJFMjcgG+fANG/nSeWJu3zHGXHNTSl11ZVJHTTra5J1rtKTtsOylWWxktci0cRL+p0+6L+tRi9DMVRFZsmRQjoDAqApiU/Butel83qSOM8KdqErLuV43JJqfBucYy3cG6nbv2Ha32YPHjpbwTva1HqjF1DIx9TjicEsWNmcoSxnk1U43r1hUmsiqkptpwpwviqto/FDUExx+4y6D0dYZSMnJ7UupaJr6ZmIUHRYiSk6rXWEQ9exgPkW7z1Fw4amMl4qaagkEO8Uo9QDlOlYc9P0zHwbjUp2bMINrc3GKTar2bDQPiB1Hj9Ydc6v1ViW52sXUdSyMmEJ0c4RvXZXIxlw1XElKjo2q7mZA59A4gc4Fh8nLkVL+bi055tth6WJptPdtb2otXl5i8l2aWPhIKNaLRSUGnQlKqo8XkY/uFOM2QgIn8QfrB4Q65udHajPq9a+rln9FzlOlZceyKVKcPDvXe3eg7q4ftJ9GY/s4S8IJ4epvqd6bcxlcULH6Ws70pqbuc9XUlGW7kN8SpufEuj05CKEOmoQp0zlMQ5DlAxDkMAlMQ5TAJTFMUeggPYIZsY6VptOq2NHJ1yD8g3kdqbkG+5DeWnvKD1qLmclp+Gp0vYp3X1j16acVdKv6zULJX4WXiZ6lAk4FqkxkSte4xEG65nYAY5tUah0DqOJqL1Lpm/G03JtRbcHCu+MWk049nDJLZsdT0H6O9rvovqHoyHRXjppN7UIRtQtyv27cMiGRy0lG7et3bkJ27+zid21KTc6zirdaFNMfI78w/mDtSr3PzHOVMVKVGrgmyKzgbTKXq5+xDOElpOGqEYetQFBpXtoGpPHfk9YUFQCqKtVzEAMtLofqLWcuF7qXLjKzDsi3KVO1RXDGEa9r2vyp0M657VXg14a9PZGl+CHT121qWRWTldtxs2eOjUJ3Zc27kX+Cr4bbcIpNqM48TOrrXev6jqmh07WdAhWtcpNCrcNUqrBsgEG8ZBQLBCOjmpTHEyixyNm5e+qcTKKnETnMYxhEdrY+PZxbEMbHio2LcVGKXYkqJHn3rGr6jr+q5Ot6vdlf1TLvzvXbkt87lyTlKT91t7FsS2JJFGchtAan5UaR2Zx33nU2t31Nt2qSFOu1adKrtRexb4CKJOmEgzURfRE3Dv0EXse+bKJumL5ui4RORVIhgvHzTmz1L5afnw+WhFKaX8uLm3xY5JcSI5RcutdW8/K5fGV403HrO3jokDWbHqyAeHmogfWuqpRlI2NSVIUWcQ28RcTgXu4S+VL5ganmSQXmreZdyc4/XLeFV0rYtG1HS3GLXlgZa7hKhMe1/ZRV73bm9Um3Joc1nlF1EFoh85WdOyh7SFugRM4GWkx5eO5ZDzy6r5mqNp1kXRMFwTccZHdRVl7UG2lNgrbCsloLKN4MtOPTjU0IqYSAXJp0j31gpiep9wAVEDw80zy6dx85N+eVftPV9t1nWa/wb5uULkttVnfZO0sJmx0ip2ygWR5D6+b16pWVlJ2pynTlUkkZJxFtO8sUxnIAAhgFf+dXwY2x5j/lz7s4i6Rseu6psrY01qeSgZvasrZYSjtkqJtimXmXTl5Oo1O7z7ZRxDV5wRt4MY4A7oyZDimQxlSAWt82/wAtvc/PvytUeDepbhrCrbPIrx/A9n2LJ2uNoYI6sla+5sihXtaqFqsJlXTSMWFiQY4AWU7hVTIFMY5AMKNi8GfeEarp6Y4H6E5rcNtg8UZyryOrYLlZv+t7diudtD01MJvoNSsSbqmt5vWd3utYorgsazsYtm8nKuEyuVF4xc3jpAbR+NflrUbhx5ZMp5eWiZs0gCuk9uUgb9c/EaKWzZu2oKyhYLzZU4tCSWjI19aLEY5Grcjo0fGJJN0/GFEDHAkPkqcGNseXB5c+k+Iu7rHru17K1zNbYkp6b1VK2Wbo7lK97Yud5iE4iTt1TpE+5Ubw1hbkc+NGNwI6KoQgqEKVU4Fqebflubt5Keah5YfOKj23VkRqjhZ+lf8ASpXbXMW1lsKe/LeN9WhP0fxcRSputy3hOBH1r2jLRPhE+sn4w/VwDdbgDAGAMAYBTVyplT2JVLDRb3XYe3U22RL2CstZsDBvKQs3DyKJm72PkWDoiiDls4SOICUwdg9odBABy1fsWcmzLHyIxnYnFqUWqpp700Z+l6pqOiajY1fSL93G1TGuRuWrtuThO3OLrGUZKjTT7UciXOr3bO2tJWavvA61x0xAPFlnv6BdlTQxsxCiqYDmYUTYj4VI+WjUzGMCDWcFsuimAFM/XHpmntd8M7sbjyNAmpWnt5M3RrzQm9jXkU6Nd5npH4U+3Lp+TiWtG8X8edrPjFR/3HFt8cLlP8sjGjSUJv8Aynj8UZParMDnm2h5fvOTTrxyz2LxM31C+rKnTPIsdcWC1QKvcOKYqNbHT2k/AOkhMHYZNyYBDp8ecAydB1vDfDk4eRGnbwSkv/NFOL9J270XxZ8Lep7au6J1Do1/iVVF5Vq1cVfLavO3ci/M4IoCn8PeV+w5BOMpHGLkFZn6qgJEQi9O7AUKBzCAACrhWASati9R7TKKEKUO0RAMt2NN1a/LgsY2ROXmtz/pQztT646A0ey8jVtd0bHtJVrPNxl6Erjb95Nm4niH7uXzF3VLRczyMUjeMOtTGRcv0ZN3FW3bMozE3U7SHqMK+eQ0A5VKHdFaWepqNxEDeqLdO7nMdI8PtczpKeoUxMbtrSVx+5FNpe7J7O6zrd4ie2L4YdK49zG6PdzX9cVVHgU7OHF+Wd+cYzuJd2zBqW7mx3naFxK4e6F4Tanj9P6Ap6VaryKpZCdmXqpZG3XafFEiDiy3OwHSScTUw4IQCl+qm3bJACTdJFEpUw3JpGj4GiYiw8CHDDe29spPvSfa/UtySWw80PEPxI6t8UeoJdR9XZHOy6cNu3FcNmxbrVWrFurUILe9rlJ/GnKUm5PJ/PqHBBgDAGAMAYBQlq1fra8iJrnQKbalBAA8awVqHlnAAX7UCuHrNZcoB8hgwKtFIxHG/j/AuivojSur2Lwhu+m5SpFdFZM/p7ySikecyZg+AS9BDBNWXkRRRbJJoN0kkEESFTSRRTKkkkmUOhSJpkApCEKAdAAAAAwQeuAMA/giAekQD58A8zLok+2VTL85y/t5FewUZCHlY9P7Z0l8wG65JNGQKthjyde6umPT5f2OwcirJUWQB7SzDr0XTD5ymH4fkyNpPD2MhTXBqX/Lt/mEDB8XyZO0UifSd0jzD0MdIf3Jh/ZxWu4ii8pNEbLGqh2KdPm9GKkUIsJuPH/LBiooexJRkfp0WL9kP28VIoRZF0VPtFCm+YcVQPXJBJvzg/E34bmT/D/N+qWvv/mfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAOoB6R6YBDKu0EQ+uoHZ8uQ3QlRbJYtPskuv1gN0/xyh+3gq4GSV1c2yAD3SEHp6BE/X9YcecngXaU262MQneAPCJ0/wAYA/VEcpb7GOFIpxzsIp+v8OQB+LvgIfr+nJ8/YTu9wp15ezG691yn8Pp/1BxuI4qFIPro8OI+Gsj84mH9vKauuwp4mSI1slxH+VNwAR9PeEfsfZyKirP4NpkunTximEfhKHp+bqIZVxLc9pB4GtEmbsABN8v6mU8VV5wRLewzBjB0IPb06dgftfDjia2gqpjJTS3dASqfZ9AfZ6YqwVgxRl1u6Jin7fhEw/rfLirBWLCLkTCAmEwfD29RDt9OTXt7QVswjV0wATmN19I+kenyY29gKkSIJA6CPX/AO305WlQglf5wfib8NzK/h/m/VLX3/wAz4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAhVXIpgP1B7Pi7cpcqbypRqSF7MCkBugqB0+IvT5vRlHFLs3lSiih5GzKkE311x9PoAcVKtxSji0qmEwAVyb09olN9jr6MqUtte0mpT7uxKCA94hw/denJqQUk+mPE697vh8wj8foyHLZsIbKWcOElRHqCw9fT9cfmynftKXuIQEQMP8ABpn6/GJjG6en4/kyOIhnmaMdq/ad8OvoAAHp09OG2Qf0lXklxASgp0EfiH4fg9GR/qCdM6HJKGL1Kp07PjwCsWOuXRhL3ynH0dQ6dv2enTJ3bAVqw1l9qJ0R+n6MeYFYM9dNkunVEnwen4P8AyaekFTtac1Q6fwZA6dPgDrkpOoKgbw7ZDp0IXs+QP2umVcNXt3EEzIimn07pQDp8gYUUvdB65UBgEm/OD8TfhuZP8P836pa+/8AmfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwDyP4vQe73fR8vXKXX3iVTtJM/9e8JT1bwPWOzuesd/wAH7Yvf7/h/X69zr06fD0+DKY8PEubXg82/zbyt14fi0r6ikHPt/t7/ALF69vXr67l39n+J9Eo+3+R6ynXXtbqPe9h/J/K/i+XJX6Sv3n0SP3HyPWU069o/W6+yOnb6PW+nT4enTJf6L8WvzR9v8mvvlLO/H6j3/ZP0etfT0+XIf6P8X6I+3+T6ynF/SPX2V6f86/Ux+y/FpT5JH2/yPWeSfqveDv8Asz0/516Pkx+z/E+iPtu3gr75P2fqXUP+Kvp9Z6dfl+jH7Om3mfRH2/yPWVYy9U7P+Jvg9PrPT/Drkr9F2831ELn1/wAPWVYz8DoHd9i9f/e8n9l+LT5o+2rs4PWVI373QO57E/rf7Hw5K/R/i0+aR+4+RT3yeN/XeoeF7D+Tr65+x8GF+g7ebX5pH7j5HrJkX250Du+xOnwdPXP/AA5cX6Ls5v0SPt/kes+/7wf2N/Xcfs/xfoj7f5HrH94P7G/ruP2f4v0R9v8AI9Y/vB/Y39dx+z/F+iPt/kesf3g/sb+u4/Z/i/RH2/yPWP7wf2N/Xcfs/wAX6I+3+R6x/eD+xv67j9n+L9Efb/I9ZKf/AK/7e/8AsvX2R/n/AHunrn+x6dfpzJ/afpPvacz5PdLX2/P/AMP7PP5T/9k="
+
+	LogoSvg       = "<svg width=`"169`" height=`"23`" viewBox=`"0 0 169 23`" version=`"1.1`" xmlns=`"http://www.w3.org/2000/svg`" xmlns:xlink=`"http://www.w3.org/1999/xlink`" xml:space=`"preserve`" xmlns:serif=`"http://www.serif.com/`" style=`"fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;`"><rect id=`"Artboard1`" x=`"-8.32`" y=`"-4.677`" width=`"186.148`" height=`"32.667`" style=`"fill:none;`"/><g><path d=`"M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z`" style=`"fill-rule:nonzero;`"/><path d=`"M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z`" style=`"fill-rule:nonzero;`"/><path d=`"M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z`" style=`"fill:#a91a1b;fill-rule:nonzero;`"/><path d=`"M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z`" style=`"fill:#a91a1b;fill-rule:nonzero;`"/><path d=`"M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z`" style=`"fill:#a91a1b;fill-rule:nonzero;`"/><path d=`"M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z`" style=`"fill-rule:nonzero;`"/><path d=`"M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z`" style=`"fill-rule:nonzero;`"/><path d=`"M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z`" style=`"fill-rule:nonzero;`"/><path d=`"M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z`" style=`"fill-rule:nonzero;`"/></g></svg>"
+
+	EA            = "data:image/jpeg;base64,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"
+
+	ATAP          = " data:image/jpeg;base64,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
+	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
+	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
+	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"
+
+	EnforceTap    = "data:image/png;base64,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"
+
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Compare-EqualCISVersions.Tests.ps1 b/ATAPHtmlReport/Tests/Compare-EqualCISVersions.Tests.ps1
new file mode 100644
index 0000000..eb0d0d6
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Compare-EqualCISVersions.Tests.ps1
@@ -0,0 +1,224 @@
+
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing Compare-EqualCISVersions' {
+
+        It 'Test Windows 7' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 7 Workstation Benchmark, Version: 3.1.0, Date: 2018-03-02"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            try {
+                Compare-EqualCISVersions -Title "Windows Server 2019 Audit Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $false   
+            }
+            
+            catch {
+                $false | Should -Be $true
+            }
+        }
+        It 'Test Windows 10' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15"
+                "DISA Windows 10 Security Technical Implementation Guide, Version: V1R16, Date: 2019-10-25"
+                "Microsoft Security baseline (FINAL) for Windows 10, Version: 21H1, Date: 2021-05-18"
+                "Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+                "SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2020-04-27"
+                "ACSC Hardening Microsoft Windows 10 version 21H1 Workstations, Version: 10.2021, Date 2021-10-01"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            try {
+                Compare-EqualCISVersions -Title "Windows Server 2019 Audit Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $true    
+            }
+            
+            catch {
+                $false | Should -Be $true
+            }
+        }
+        It 'Test Windows 10 stand-alone' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15"
+                "Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+                "SiSyPHuS Recommendations for Telemetry Components: Version 1.1, Date: 2019-07-31"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            try {
+                Compare-EqualCISVersions -Title "Windows Server 2019 Audit Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $true    
+            }
+            
+            catch {
+                $false | Should -Be $true
+            }
+        }
+        It 'Test Windows 11' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14"
+                "Security baseline for Microsoft Windows 11, Version: 20H2, Date: 2020-12-17"
+                "Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+                "SiSyPHuS Recommendations for Telemetry Components: Version 1.1, Date: 2019-07-31"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            try {
+                Compare-EqualCISVersions -Title "Windows Server 2019 Audit Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $true    
+            }
+            
+            catch {
+                $false | Should -Be $true
+            }
+        }
+        It 'Test Windows 11 stand-alone' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15"
+                "Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+                "SiSyPHuS Recommendations for Telemetry Components: Version 1.1, Date: 2019-07-31"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            try {
+                Compare-EqualCISVersions -Title "Windows Server 2019 Audit Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $true    
+            }
+            
+            catch {
+                $false | Should -Be $true
+            }
+        }
+        It 'Test Windows Server 2019' {
+            $BasedOn = @(
+                "Windows Server 2019 Security Technical Implementation Guide, Version: 1.5, Date: 2020-06-17"
+                "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18"
+                "Microsoft Security baseline for Windows Server 2019, Version: FINAL, Date 2019-06-18"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            try {
+                Compare-EqualCISVersions -Title "Windows Server 2019 Audit Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $true    
+            }
+            
+            catch {
+                $false | Should -Be $true
+            }
+        }
+        It 'Test Windows Server 2022' {
+            $BasedOn = @(
+                "Security baseline for Microsoft Windows Server 2022, Version: FINAL, Date 2021-09-27"
+                "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14"
+                "DISA Windows Server 2022, Version: V1R1, Date 2022-09-28"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08"
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15"
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15"
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14"
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18"
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            try {
+                Compare-EqualCISVersions -Title "Windows Server 2022 Audit Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $true   
+            }
+            
+            catch {
+                $false | Should -Be $true
+            }
+        }
+        It 'Test for unmatching versions of CIS and MITRE mapping' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.15.0, Date: 2023-02-15"
+                "DISA Windows 10 Security Technical Implementation Guide, Version: V1R16, Date: 2019-10-25"
+                "Microsoft Security baseline (FINAL) for Windows 10, Version: 21H1, Date: 2021-05-18"
+                "Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+                "SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2020-04-27"
+                "ACSC Hardening Microsoft Windows 10 version 21H1 Workstations, Version: 10.2021, Date 2021-10-01"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            Compare-EqualCISVersions -Title "Windows 10 Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $false
+        }
+        
+        It 'Test for matching versions of CIS and MITRE mapping' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15"
+                "DISA Windows 10 Security Technical Implementation Guide, Version: V1R16, Date: 2019-10-25"
+                "Microsoft Security baseline (FINAL) for Windows 10, Version: 21H1, Date: 2021-05-18"
+                "Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+                "SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2020-04-27"
+                "ACSC Hardening Microsoft Windows 10 version 21H1 Workstations, Version: 10.2021, Date 2021-10-01"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            Compare-EqualCISVersions -Title "Windows 10 Report" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $true
+        }
+
+        It 'Test for matching versions of CIS and MITRE mapping but wrong OS' {
+            $BasedOn = @(
+                "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15"
+                "DISA Windows 10 Security Technical Implementation Guide, Version: V1R16, Date: 2019-10-25"
+                "Microsoft Security baseline (FINAL) for Windows 10, Version: 21H1, Date: 2021-05-18"
+                "Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
+                "SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2020-04-27"
+                "ACSC Hardening Microsoft Windows 10 version 21H1 Workstations, Version: 10.2021, Date 2021-10-01"
+                "FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.1.0, Date: 2021-04-15"
+                "FB Pro recommendations 'Enhanced settings', Version 1.1.0, Date: 2023-02-24"
+            )
+            $MitreMappingCompatible =   @("CIS Microsoft Windows 10 Stand-alone Benchmark, Version: 1.0.1, Date: 2022-02-08",
+            "CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 1.0.0, Date: 2022-11-15",
+            "CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15",
+            "CIS Microsoft Windows 11 Enterprise Release 21H2 Benchmark, Version: 21H2, Date: 2022-02-14",
+            "CIS Microsoft Windows Server 2019 Benchmark, Version: 1.3.0, Date: 2022-03-18",
+            "CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14")
+            Compare-EqualCISVersions -Title "Debian 10" -ReportBasedOn:$BasedOn -MitreMappingCompatible:$MitreMappingCompatible | Should -Be $false
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/ConvertTo-HtmlTable.Tests.ps1 b/ATAPHtmlReport/Tests/ConvertTo-HtmlTable.Tests.ps1
new file mode 100644
index 0000000..7cc9a7a
--- /dev/null
+++ b/ATAPHtmlReport/Tests/ConvertTo-HtmlTable.Tests.ps1
@@ -0,0 +1,50 @@
+
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing ConvertTo-HtmlTable' {
+        It 'tests with an example Report' {
+
+            $AuditInfos = @{Id = "1.1.4"
+                Status         = [AuditInfoStatus]::False
+            },
+            @{Id       = "1.2.3"
+                Status = [AuditInfoStatus]::True
+            },
+            @{Id       = "1.2.4"
+            Status = [AuditInfoStatus]::True
+        },
+            @{Id       = "1.2.6"
+            Status = [AuditInfoStatus]::True
+        },
+            @{Id       = "1.2.5"
+                Status = [AuditInfoStatus]::False
+            }, 
+            @{Id       = "1.4.5"
+                Status = [AuditInfoStatus]::True
+            }
+
+            $Subsection = @{AuditInfos = $AuditInfos }
+
+            $Section1 = @{Title = "Cis Benchmarks"
+                SubSections     = $Subsection
+            }
+
+            $Section2 = @{Title = "DISA"
+                $Subsection     = $null
+            }
+
+            $Sections = $Section1, $Section2
+
+
+            $Mappings = $Sections | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+            
+            # call the function under test and split by opening and closing brackets. Result should be an array of tags.
+            $tags = (ConvertTo-HtmlTable $Mappings.map).Split("<").Split(">")
+            $tags | Should -Contain 'table id="MITRETable"'
+            $tags | Should -Contain 'a href="https://attack.mitre.org/tactics/TA0007/"'
+            $tags | Should -Contain 'Discovery'
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Get-ColorValue.Tests.ps1 b/ATAPHtmlReport/Tests/Get-ColorValue.Tests.ps1
new file mode 100644
index 0000000..96577f9
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Get-ColorValue.Tests.ps1
@@ -0,0 +1,55 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe "Testing Get-ColorValue" {
+            It "Should return hundred" {
+                $result = Get-ColorValue -FirstValue 10 -SecondValue 10
+                $result | Should -Be "#33cca6"
+            }
+            It "Should return ninety" {
+                $result = Get-ColorValue -FirstValue 9 -SecondValue 10
+                $result | Should -Be "#52CC8F"
+            }
+            It "Should return eighty" {
+                $result = Get-ColorValue -FirstValue 8 -SecondValue 10
+                $result | Should -Be "#70CC78"
+            }
+            It "Should return seventy" {
+                $result = Get-ColorValue -FirstValue 7 -SecondValue 10
+                $result | Should -Be "#8FCC61"
+            }
+            It "Should return sixty" {
+                $result = Get-ColorValue -FirstValue 6 -SecondValue 10
+                $result | Should -Be "#ADCC4A"
+            }
+            It "Should return fifty" {
+                $result = Get-ColorValue -FirstValue 5 -SecondValue 10
+                $result | Should -Be "#CCCC33"
+            }
+            It "Should return fourty" {
+                $result = Get-ColorValue -FirstValue 4 -SecondValue 10
+                $result | Should -Be "#CCA329"
+            }
+            It "Should return thirty" {
+                $result = Get-ColorValue -FirstValue 3 -SecondValue 10
+                $result | Should -Be "#CC7A1F"
+            }
+            It "Should return twenty" {
+                $result = Get-ColorValue -FirstValue 2 -SecondValue 10
+                $result | Should -Be "#CC5214"
+            }
+            It "Should return ten" {
+                $result = Get-ColorValue -FirstValue 1 -SecondValue 10
+                $result | Should -Be "#CC290A"
+            }
+            It "Should return zero" {
+                $result = Get-ColorValue -FirstValue 0 -SecondValue 10
+                $result | Should -Be "#cc0000"
+            }
+            It "Should return empty" {
+                $result = Get-ColorValue -FirstValue 0 -SecondValue 0
+                $result | Should -Be "#a7a7a7"
+            }
+    }
+}
diff --git a/ATAPHtmlReport/Tests/Get-MitigationsFromFailedTests.Tests.ps1 b/ATAPHtmlReport/Tests/Get-MitigationsFromFailedTests.Tests.ps1
new file mode 100644
index 0000000..e929ce1
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Get-MitigationsFromFailedTests.Tests.ps1
@@ -0,0 +1,419 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+$global:CISToAttackMappingData = Get-Content -Raw "$PSScriptRoot\..\resources\CISToAttackMappingData.json" | ConvertFrom-Json
+
+InModuleScope ATAPHtmlReport {
+    function global:Add-ToAuditInfos{
+        param(
+            [Parameter(Mandatory = $true)]
+            [string]
+            $Mitigation,
+            [Parameter(Mandatory = $true)]
+            [bool]
+            $AllIDsFalse
+        )
+        $json = $CISToAttackMappingData.'CISAttackMapping'
+        $json.psobject.properties.name | Where-Object {$json.$_.'Mitigation1' -eq $Mitigation -or $json.$_.'Mitigation2' -eq $Mitigation} | ForEach-Object {return $json.$_.'Recommendation'} | ForEach-Object {
+            if($AllIDsFalse) {
+                $global:AuditInfos += @{
+                    Id = $_
+                    Status = [AuditInfoStatus]::False
+                }
+            }
+            else {
+                $global:AuditInfos += @{
+                    Id = $_
+                    Status = [AuditInfoStatus]::True
+                }
+            }
+        }
+    }
+    Describe 'testing function Get-MitigationsFromFailedTests' {
+        It 'tests the amount of techniques in report' {
+            $global:AuditInfos = @()
+
+            $global:AuditInfos += @{
+                #T1489
+                Id = "18.8.5.3"
+                Status = [AuditInfoStatus]::False
+            }
+            $global:AuditInfos += @{
+                #T1555
+                Id = "18.9.65.2.2"
+                Status = [AuditInfoStatus]::False
+            }
+            $global:AuditInfos += @{
+                #T1569 #T1011
+                Id = "5.1"
+                Status = [AuditInfoStatus]::False
+            }
+            $global:AuditInfos += @{
+                #T1115
+                Id = "2.2.1"
+                Status = [AuditInfoStatus]::False
+            }
+            $global:AuditInfos += @{
+                #T1048
+                Id = "5.12"
+                Status = [AuditInfoStatus]::False
+            }
+            $global:AuditInfos += @{
+                #T1059
+                Id = "18.9.31.4"
+                Status = [AuditInfoStatus]::False
+            }
+            $global:AuditInfos += @{
+                #T1003
+                Id = "1.1.7"
+                Status = [AuditInfoStatus]::False
+            }
+            $global:AuditInfos += @{
+                #T1016
+                Id = "18.5.19.2.1"
+                Status = [AuditInfoStatus]::False
+            }
+
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+
+            $json = $CISToAttackMappingData.'CISAttackMapping'
+
+            foreach($Mitigation in $CISAMitigations.Keys) {
+                $Techniques = @()
+                $global:AuditInfos | Where-Object {$_.Status -eq [AuditInfoStatus]::False} | 
+                Where-Object {$json.($_.Id).'Mitigation1' -eq $Mitigation -or $json.($_.Id).'Mitigation2' -eq $Mitigation} |
+                ForEach-Object {
+                    if($null -ne $json.($_.Id).'Technique1' -and $Techniques -notcontains $json.($_.Id).'Technique1'){
+                        $Techniques += $json.($_.Id).'Technique1'
+                    }
+                    if($null -ne $json.($_.Id).'Technique2' -and $Techniques -notcontains $json.($_.Id).'Technique2'){
+                        $Techniques += $json.($_.Id).'Technique2'
+                    }
+                }
+                $Techniques = $Techniques | Sort-Object
+                $CISAMitigations[$Mitigation]['MitreTechniqueIDs'] = $CISAMitigations[$Mitigation]['MitreTechniqueIDs'] | Sort-Object
+                for($i = 0; $i -lt $CISAMitigations[$Mitigation]['MitreTechniqueIDs'].length; $i++) {
+                    $CISAMitigations[$Mitigation]['MitreTechniqueIDs'][$i] | Should -Be $Techniques[$i]
+                }
+            }
+        }
+        It 'tests with an example report where every status is [AuditInfoStatus]::False' {
+            $global:AuditInfos = @()
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $true
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Be @('M1017', 'M1018', 'M1021', 'M1027', 'M1028', 'M1030', 'M1031', 'M1038', 'M1041', 'M1042')
+        }
+        It 'tests with an example report where every status is [AuditInfoStatus]::True' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Be @()
+        }
+        It 'tests with an example report where just M1017 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1017')
+        }
+        It 'tests with an example report where just M1018 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1018')
+        }
+        It 'tests with an example report where just M1021 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1021')
+        }
+        It 'tests with an example report where just M1027 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1027')
+        }
+        It 'tests with an example report where just M1028 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1028')
+        }
+        It 'tests with an example report where just M1030 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1030')
+        }
+        It 'tests with an example report where just M1031 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1031')
+        }
+        It 'tests with an example report where just M1038 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1038')
+        }
+        It 'tests with an example report where just M1041 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $true
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $false
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1041')
+        }
+        It 'tests with an example report where just M1042 ids are [AuditInfoStatus]::False' {
+            $global:AuditInfos = @() 
+
+            Add-ToAuditInfos -Mitigation 'M1017' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1018' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1021' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1027' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1028' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1030' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1031' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1038' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1041' -AllIDsFalse $false
+            Add-ToAuditInfos -Mitigation 'M1042' -AllIDsFalse $true
+            
+            $Subsection = @{AuditInfos = $global:AuditInfos }
+            $Section1 = @{
+                Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+
+            #Tests
+            $CISAMitigations = $mitreMap.Map | Get-MitigationsFromFailedTests
+            $CISAMitigations.Keys | Should -Contain @('M1042')
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Get-MitreTacticName.Tests.ps1 b/ATAPHtmlReport/Tests/Get-MitreTacticName.Tests.ps1
new file mode 100644
index 0000000..e16354f
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Get-MitreTacticName.Tests.ps1
@@ -0,0 +1,12 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing Get-MitreTacticName' {
+        It 'tests with example Values' {
+            Get-MitreTacticName -TacticId 'TA0042' | Should -Be "Resource Development"
+            Get-MitreTacticName -TacticId 'TA0004' | Should -Be "Privilege Escalation"
+            Get-MitreTacticName -TacticId 'TA0008' | Should -Be "Lateral Movement"
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Get-MitreTactics.Tests.ps1 b/ATAPHtmlReport/Tests/Get-MitreTactics.Tests.ps1
new file mode 100644
index 0000000..b8c1fd2
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Get-MitreTactics.Tests.ps1
@@ -0,0 +1,13 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing Get-MitreTactics' {
+        It 'tests with example Values' {
+
+            Get-MitreTactics -TechniqueID "T1591" | Should -Be 'TA0043'
+
+            Get-MitreTactics -TechniqueID "T1056" | Should -Be 'TA0009', 'TA0006'
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Get-MitreTechniqueName.Tests.ps1 b/ATAPHtmlReport/Tests/Get-MitreTechniqueName.Tests.ps1
new file mode 100644
index 0000000..404c543
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Get-MitreTechniqueName.Tests.ps1
@@ -0,0 +1,17 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing Get-MitreTechniqueName' {
+        It 'tests with example values' {
+            Get-MitreTechniqueName -TechniqueID "T1591" | Should -Be 'Gather Victim Org Information'
+            Get-MitreTechniqueName -TechniqueID "T1056" | Should -Be 'Input Capture'
+            Get-MitreTechniqueName -TechniqueID "T1056" | Should -BeOfType String
+        }
+
+        It 'tests with wrong values' {
+            Get-MitreTechniqueName -TechniqueID "TXXXX" | Should -Be $null
+            Get-MitreTechniqueName -TechniqueID "TXXXX" | Should -Not -Be 'Input Capture'
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Get-TacticCounter.Tests.ps1 b/ATAPHtmlReport/Tests/Get-TacticCounter.Tests.ps1
new file mode 100644
index 0000000..f8bc8f1
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Get-TacticCounter.Tests.ps1
@@ -0,0 +1,71 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+
+    Describe "Testing Get-TacticCounter" {
+        Context "When counting for a tactic without mapped tests" {
+            It "Should return 0" {
+                $AuditInfos = @{Id = "1.1.4"
+                Status         = [AuditInfoStatus]::False
+                	},
+                @{Id       = "1.2.3"
+                    Status = [AuditInfoStatus]::True
+                },
+                @{Id       = "1.2.4"
+                Status = [AuditInfoStatus]::True
+                },
+                @{Id       = "1.2.6"
+                Status = [AuditInfoStatus]::True
+                },
+                @{Id       = "1.2.5"
+                    Status = [AuditInfoStatus]::False
+                }, 
+                @{Id       = "1.4.5"
+                    Status = [AuditInfoStatus]::True
+                }
+
+                $Subsection = @{AuditInfos = $AuditInfos }
+
+                $Section1 = @{Title = "Cis Benchmarks"
+                    SubSections     = $Subsection
+                }
+
+                $Sections = $Section1
+
+
+                $Mappings = $Sections | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+                
+                $result = Get-TacticCounter -tactic $Mappings.Map["TA0042"] $Mappings.Map
+                $result | Should -Be 0
+            }
+        }
+
+        Context "Counter should be 1 if a technique is a 100% fullfilled" {
+            It "Should be 1" {
+                $AuditInfos = @{Id = "18.9.48.13"
+                    Status = [AuditInfoStatus]::True
+                },
+                @{Id       = "18.9.87.1"
+                    Status = [AuditInfoStatus]::True
+                }
+
+                $Subsection = @{AuditInfos = $AuditInfos }
+
+                $Section1 = @{Title = "Cis Benchmarks"
+                    SubSections     = $Subsection
+                }
+
+                $Sections = $Section1
+
+
+                $Mappings = $Sections | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+                
+                $Mappings.Map["TA0043"]["T1592"]["18.9.87.1"] | Should -Be True
+                $Mappings.Map["TA0043"]["T1592"]["18.9.48.13"] | Should -Be True
+                $Mappings.Map["TA0043"]["T1592"].count | Should -Be 2
+                Get-TacticCounter "TA0043" $Mappings.Map | Should -Be 1
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Merge-CisAuditsToMitreMap.Tests.ps1 b/ATAPHtmlReport/Tests/Merge-CisAuditsToMitreMap.Tests.ps1
new file mode 100644
index 0000000..fdffa85
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Merge-CisAuditsToMitreMap.Tests.ps1
@@ -0,0 +1,50 @@
+
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing Merge-CisAuditsToMitreMap' {
+        It 'tests with an example Report' {
+
+            $AuditInfos = @{Id = "1.1.4"
+            Status = [AuditInfoStatus]::False
+            },
+            @{Id       = "1.2.3"
+            Status = [AuditInfoStatus]::True
+            },
+            @{Id       = "1.2.5"
+            Status = [AuditInfoStatus]::False
+            }, 
+            @{Id       = "1.4.5"
+            Status = [AuditInfoStatus]::True
+            }
+
+            $Subsection = @{AuditInfos = $AuditInfos }
+
+            $Section1 = @{Title = "Cis Benchmarks"
+                SubSections     = $Subsection
+            }
+
+            $Section2 = @{Title = "DISA"
+                $Subsection     = $null
+            }
+
+            $Sections = $Section1, $Section2
+
+            $mapping = $Sections | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+            foreach ($tactic in $mapping.Keys) {
+                Write-Host "$tactic = "
+                foreach ($technique in $($mapping[$tactic]).Keys) {
+                    Write-Host "    $technique = "
+                    foreach ($id in $($($mapping[$tactic])[$technique]).Keys) {
+                        Write-Host "        $id = $($($($mapping[$tactic])[$technique])[$id])"
+                    }
+                }
+            }
+
+            $mapping.GetType() | Should -Be "MitreMap"
+            $mapping.Map["TA0001"]["T1078"]["1.1.4"] | Should -Be False
+            $mapping.Map["TA0006"]["T1110"]["1.2.3"] | Should -Be True
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/MitreMap.Tests.ps1 b/ATAPHtmlReport/Tests/MitreMap.Tests.ps1
new file mode 100644
index 0000000..38216b6
--- /dev/null
+++ b/ATAPHtmlReport/Tests/MitreMap.Tests.ps1
@@ -0,0 +1,101 @@
+
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing MitreMap' {
+        It 'tests correct amount of techniques per tacitc' {
+            $mitreMap = [MitreMap]::new()
+            #$mitreMap.Print()
+
+            $mitreMap.map['TA0043'].count | Should -Be 10
+            $mitreMap.map['TA0042'].count | Should -Be 8
+            $mitreMap.map['TA0001'].count | Should -Be 9
+            $mitreMap.map['TA0002'].count | Should -Be 14
+            $mitreMap.map['TA0003'].count | Should -Be 19
+            $mitreMap.map['TA0004'].count | Should -Be 13
+            $mitreMap.map['TA0005'].count | Should -Be 42
+            $mitreMap.map['TA0006'].count | Should -Be 17
+            $mitreMap.map['TA0007'].count | Should -Be 31
+            $mitreMap.map['TA0008'].count | Should -Be 9
+            $mitreMap.map['TA0009'].count | Should -Be 17
+            $mitreMap.map['TA0011'].count | Should -Be 16
+            $mitreMap.map['TA0010'].count | Should -Be 9
+            $mitreMap.map['TA0040'].count | Should -Be 13
+        }
+
+        It 'tests some values' {
+            $mitreMap = [MitreMap]::new()
+
+            $mitreMap.map['TA0043'].ContainsKey('T1597') | Should -Be $true
+            $mitreMap.map['TA0001'].ContainsKey('T1200') | Should -Be $true
+            $mitreMap.map['TA0043'].ContainsKey('T1037') | Should -Be $false
+            $mitreMap.map['TA0006'].ContainsKey('T1612') | Should -Be $false
+        }
+    }
+}
+
+InModuleScope ATAPHtmlReport {
+    Describe 'testing functions of the class MitreMap' {
+        It 'tests with an example report' {
+            #Dummy-Data
+            $AuditInfos = 
+            @{
+                Id = "1.1.4"
+                Status = [AuditInfoStatus]::False
+            },
+            @{
+                Id = "1.2.3"
+                Status = [AuditInfoStatus]::True
+            },
+            @{
+                Id = "1.2.5"
+                Status = [AuditInfoStatus]::False
+            }, 
+            @{
+                Id = "1.4.5"
+                Status = [AuditInfoStatus]::True
+            }
+            $Subsection = @{AuditInfos = $AuditInfos }
+            $Section1 = @{Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+            #$mitreMap.Print()
+
+            #Tests
+            $mitreMap.GetType() | Should -Be "MitreMap"
+            $mitreMap.Map["TA0001"]["T1078"]["1.1.4"].GetType() | Should -Be 'AuditInfoStatus'
+            $mitreMap.Map["TA0001"]["T1078"]["1.1.4"] | Should -Be False
+            $mitreMap.Map["TA0006"]["T1110"]["1.2.3"] | Should -Be True
+
+            $failedIDs = @()
+            foreach ($tactic in $mitreMap.Map.Keys) {
+                foreach ($technique in $mitreMap.Map[$tactic].Keys) {
+                    $mitreMap.Map[$tactic][$technique].Keys | 
+                    Where-Object {$mitreMap.Map[$tactic][$technique][$_] -eq [AuditInfoStatus]::False} | 
+                    ForEach-Object {
+                        if($failedIDs -notcontains $_){
+                            $failedIDs += $_
+                        }
+                    }
+                }
+            }
+            $CISAMedigations = @()
+            $json = Get-Content -Raw "$PSScriptRoot\..\resources\CISToAttackMappingData.json" | ConvertFrom-Json
+            foreach($i in $failedIDs) {
+                if($null -ne $json.'CISAttackMapping'.$i.'Mitigation1' -and $CISAMedigations -notcontains $json.'CISAttackMapping'.$i.'Mitigation1'){
+                    $CISAMedigations += $json.'CISAttackMapping'.$i.'Mitigation1'
+                }
+                if($null -ne $json.'CISAttackMapping'.$i.'Mitigation2' -and $CISAMedigations -notcontains $json.'CISAttackMapping'.$i.'Mitigation2'){
+                    $CISAMedigations += $json.'CISAttackMapping'.$i.'Mitigation2'
+                }
+            }
+            foreach($i in $CISAMedigations) {
+                Write-Host $i
+            }
+        } 
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/OrderTactics.Test.ps1 b/ATAPHtmlReport/Tests/OrderTactics.Test.ps1
new file mode 100644
index 0000000..3025a3b
--- /dev/null
+++ b/ATAPHtmlReport/Tests/OrderTactics.Test.ps1
@@ -0,0 +1,43 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'testing tactic order in MitreMap' {
+        It 'tests with an example report' {
+            #Dummy-Data
+            $AuditInfos = 
+            @{
+                Id = "1.1.4"
+                Status = [AuditInfoStatus]::False
+            },
+            @{
+                Id = "1.2.3"
+                Status = [AuditInfoStatus]::True
+            },
+            @{
+                Id = "1.2.5"
+                Status = [AuditInfoStatus]::False
+            }, 
+            @{
+                Id = "1.4.5"
+                Status = [AuditInfoStatus]::True
+            }
+            $Subsection = @{AuditInfos = $AuditInfos }
+            $Section1 = @{Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+            $mitreMap.Print()
+
+            $tactics = (Get-Content -Raw "$PSScriptRoot\..\resources\MitreTactics.json" | ConvertFrom-Json).psobject.properties.name
+
+            #check order
+            $i = 0
+            foreach ($tactic in $mitreMap.Map.Keys) {
+                $tactic | Should -Be $tactics[$i]
+                $i++
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/Test-CompatibleMitreReport.Tests.ps1 b/ATAPHtmlReport/Tests/Test-CompatibleMitreReport.Tests.ps1
new file mode 100644
index 0000000..4f23de3
--- /dev/null
+++ b/ATAPHtmlReport/Tests/Test-CompatibleMitreReport.Tests.ps1
@@ -0,0 +1,24 @@
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing Check-CompatibleMitreReport' {
+        It 'Testing with diffrent Reports' {
+            $Title = "Windows 10 Report"
+            $os = [System.Environment]::OSVersion.Platform
+            Test-CompatibleMitreReport -Title $Title -os $os | Should -Be $true
+            
+            $Title = "Windows 11 Report"
+            Test-CompatibleMitreReport -Title $Title -os $os | Should -Be $true
+      
+            $Title = "Windows Server 2019 Audit Report"
+            Test-CompatibleMitreReport -Title $Title -os $os | Should -Be $true
+       
+            $Title = "Windows Server 2022 Audit Report"
+            Test-CompatibleMitreReport -Title $Title -os $os | Should -Be $true
+        
+            $Title = "Windows 7 Report"
+            Test-CompatibleMitreReport -Title $Title -os $os | Should -Be $false
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/get-MitreLink.Tests.ps1 b/ATAPHtmlReport/Tests/get-MitreLink.Tests.ps1
new file mode 100644
index 0000000..a82bad3
--- /dev/null
+++ b/ATAPHtmlReport/Tests/get-MitreLink.Tests.ps1
@@ -0,0 +1,20 @@
+
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing get-MitreLink' {
+        It 'tests for tactics' {
+            get-MitreLink -type tactics -id 'TA0001' | Should -Be 'https://attack.mitre.org/tactics/TA0001/'
+            get-MitreLink -type tactics -id 'TA0008' | Should -Be 'https://attack.mitre.org/tactics/TA0008/'
+        }
+        It 'tests for techniques' {
+            get-MitreLink -type techniques -id 'T1548' | Should -Be 'https://attack.mitre.org/techniques/T1548/'
+            get-MitreLink -type techniques -id 'T1119' | Should -Be 'https://attack.mitre.org/techniques/T1119/'
+        }
+        It 'tests for techniques' {
+            get-MitreLink -type mitigations -id 'M1047' | Should -Be 'https://attack.mitre.org/mitigations/M1047/'
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/readFromJson.Tests.ps1 b/ATAPHtmlReport/Tests/readFromJson.Tests.ps1
new file mode 100644
index 0000000..286f2b2
--- /dev/null
+++ b/ATAPHtmlReport/Tests/readFromJson.Tests.ps1
@@ -0,0 +1,73 @@
+
+#Import-Module
+& "$PSScriptRoot\updateATAP.ps1"
+
+InModuleScope ATAPHtmlReport {
+    Describe 'Testing MitreMap' {
+        It 'tests correct amount of techniques per tacitc' {
+            $mitreMap = [MitreMap]::new()
+            $mitreMap.Print()
+
+            $mitreMap.map['TA0043'].count | Should -Be 10
+            $mitreMap.map['TA0042'].count | Should -Be 8
+            $mitreMap.map['TA0001'].count | Should -Be 9
+            $mitreMap.map['TA0002'].count | Should -Be 14
+            $mitreMap.map['TA0003'].count | Should -Be 19
+            $mitreMap.map['TA0004'].count | Should -Be 13
+            $mitreMap.map['TA0005'].count | Should -Be 42
+            $mitreMap.map['TA0006'].count | Should -Be 17
+            $mitreMap.map['TA0007'].count | Should -Be 31
+            $mitreMap.map['TA0008'].count | Should -Be 9
+            $mitreMap.map['TA0009'].count | Should -Be 17
+            $mitreMap.map['TA0011'].count | Should -Be 16
+            $mitreMap.map['TA0010'].count | Should -Be 9
+            $mitreMap.map['TA0040'].count | Should -Be 13
+        }
+
+        It 'tests some values' {
+            $mitreMap = [MitreMap]::new()
+
+            $mitreMap.map['TA0043'].ContainsKey('T1597') | Should -Be $true
+            $mitreMap.map['TA0001'].ContainsKey('T1200') | Should -Be $true
+            $mitreMap.map['TA0043'].ContainsKey('T1037') | Should -Be $false
+            $mitreMap.map['TA0006'].ContainsKey('T1612') | Should -Be $false
+        }
+    }
+}
+
+InModuleScope ATAPHtmlReport {
+    Describe 'testing read from json' {
+        It 'tests if json file is read in correctly' {
+            $AuditInfos = 
+            @{
+                Id = "1.1.4"
+                Status = [AuditInfoStatus]::False
+            },
+            @{
+                Id = "1.2.3"
+                Status = [AuditInfoStatus]::True
+            },
+            @{
+                Id = "1.2.5"
+                Status = [AuditInfoStatus]::False
+            }, 
+            @{
+                Id = "1.4.5"
+                Status = [AuditInfoStatus]::True
+            }
+            $Subsection = @{AuditInfos = $AuditInfos }
+            $Section1 = @{Title = "Cis Benchmarks"
+                SubSections = $Subsection
+            }
+            
+            $mitreMap = $Section1 | Where-Object { $_.Title -eq "CIS Benchmarks" } | ForEach-Object { return $_.SubSections } | ForEach-Object { return $_.AuditInfos } | Merge-CisAuditsToMitreMap
+            $mitreMap.Print()
+
+            #Tests
+            $mitreMap.GetType() | Should -Be "MitreMap"
+            $mitreMap.Map["TA0001"]["T1078"]["1.1.4"].GetType() | Should -Be 'AuditInfoStatus'
+            $mitreMap.Map["TA0001"]["T1078"]["1.1.4"] | Should -Be False
+            $mitreMap.Map["TA0006"]["T1110"]["1.2.3"] | Should -Be True
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/Tests/updateATAP.ps1 b/ATAPHtmlReport/Tests/updateATAP.ps1
new file mode 100644
index 0000000..ba42701
--- /dev/null
+++ b/ATAPHtmlReport/Tests/updateATAP.ps1
@@ -0,0 +1,16 @@
+#set the directory where you are programming
+$dev_directory = "$PSScriptRoot\..\.."
+
+#deletes the old modules, if they exist
+if(Test-Path "C:\Program Files\WindowsPowerShell\Modules\ATAPAuditor") {
+        Remove-Item -Path "C:\Program Files\WindowsPowerShell\Modules\ATAPAuditor" -recurse
+}
+if(Test-Path "C:\Program Files\WindowsPowerShell\Modules\ATAPHtmlReport") {
+        Remove-Item -Path "C:\Program Files\WindowsPowerShell\Modules\ATAPHtmlReport" -recurse
+}
+#copys the new modules to the module path of powershell
+Copy-Item ($dev_directory + "\ATAPAuditor") -Destination "C:\Program Files\WindowsPowerShell\Modules" -recurse
+Copy-Item ($dev_directory + "\ATAPHtmlReport") -Destination "C:\Program Files\WindowsPowerShell\Modules" -recurse
+#imports ATAPAuditor and ATAPHtmlReport
+Import-Module ATAPAuditor -Force
+Import-Module ATAPHtmlReport -Force
\ No newline at end of file
diff --git a/ATAPHtmlReport/report.css b/ATAPHtmlReport/report.css
new file mode 100644
index 0000000..f65c09e
--- /dev/null
+++ b/ATAPHtmlReport/report.css
@@ -0,0 +1,1203 @@
+:root {
+    /* === Base colors === */
+    /* Raw color values without semantic meaning */
+    /* ! IMPORTANT " */
+    --company-red: #A81A1B;
+    --color-white: #ffffff;
+    --color-black: #000000;
+    --color-green: #27AE60;
+    --color-orange: #F39C12;
+    --color-grey: #95A5A6;
+    --color-purple: #8E44AD;
+    --color-blue: #1900ff;
+
+    --color-dark-gray: #d2d2d2; /* Dont ask, lightgray is darker than gray */
+    --color-light-gray: #efefef;
+
+    /* === Semantic colors === */
+    /* Use these variables in layouts and components */
+    /* status true in checks*/
+    --status-true: var(--color-green);
+    /* status false in checks*/
+    --status-false: var(--company-red);
+    /* warning in checks  */
+    --status-warning: var(--color-orange);
+    /* neutral / status none in checks */
+    --status-none: var(--color-grey);
+    /* critical error in checks */
+    --status-error: var(--color-black);
+    /* github grey color*/
+    --github-grey: #24292e;
+}
+
+body {
+    font-family: Cambria, Georgia, serif;
+    margin: 0;
+    color: default;
+    background-color: default;
+}
+
+.header {
+    background-color: #d2d2d2;
+}
+
+.header svg {
+	margin-left: 3px;
+	opacity: 0.8;
+}
+
+.content {
+    padding: 30px 40px;
+}
+
+a, a:visited {
+    color: default;
+}
+
+html body div.header.content {
+    display: flex;
+    justify-content: space-between;
+    align-items: flex-start;
+    padding-top: 10px;
+    padding-bottom: 0;
+    font-family: "Libre Franklin", "Helvetica Neue", helvetica, arial, sans-serif;
+}
+
+#companyName {
+    font-size: 2.5rem;
+    color: var(--company-red);
+    font-weight: 900;
+}
+
+#companySlogan {
+    font-size: 1rem;
+    color: var(--color-black);
+    font-weight: 600;
+    margin: 0;
+    margin-bottom: 1rem;
+}
+
+#summary > h1:nth-child(1) {
+    margin-bottom: 0;
+}
+
+#logo > p:nth-child(2) {
+    color: #666;
+    margin-top: 0;
+}
+
+#logo {
+    order: 2;
+    padding-top: px; /* No value is being set here */
+}
+
+#reportInformation > ul:nth-child(2) {
+    padding-left: 0;
+}
+
+
+
+#reportInformation > ul:nth-child(2) > li:nth-child(1) {
+    list-style-type: none;
+}
+
+.header svg {
+	margin-left: 3px;
+	opacity: 0.8;
+}
+.header svg g path:nth-child(1), /*F*/
+.header svg g path:nth-child(2), /*B*/
+.header svg g path:nth-child(6), /*G*/
+.header svg g path:nth-child(7), /*m*/
+.header svg g path:nth-child(8), /*b*/
+.header svg g path:nth-child(9) /*H*/
+{
+    fill: var(--color-black);
+}
+
+.header h1 {
+    margin: 0;
+}
+
+h1,
+h2,
+h3,
+h4,
+h5,
+h6 {
+    font-family: 'Calibri', 'Segoe UI', sans-serif;
+}
+
+li a {
+	/*display: block;*/
+    font-family: Arial, sans-serif;
+}
+
+li a:hover {
+    background-color: #f2f2f2;
+}
+
+.gauge {
+    height: 25px;
+    background: var(--status-none);
+    border-radius: 8px;
+    overflow: hidden;
+    display: flex;
+}
+
+.gauge .gauge-meter {
+    height: 100%;
+    flex-grow: var(--weight);
+    flex-shrink: 0;
+    flex-basis: 0;
+    transition: flex-grow 0.5s ease;
+}
+
+.gauge-info {
+    margin: 0;
+    padding: 20px 0px 10px 0px;
+    display: flex;
+    justify-content: space-between;
+    list-style: none;
+}
+
+.gauge-info .gauge-info-item {
+    flex: 1;
+    text-align: center;
+    line-height: 30px;
+}
+
+.gauge-info .gauge-info-item span.auditstatus {
+    display: inline;
+}
+
+section.collapsed > :not(:first-child) {
+    display: none;
+}
+
+table {
+    border-collapse: collapse;
+    font-family: Arial, sans-serif;
+}
+
+th,
+td {
+    padding: 5px 10px;
+    text-align: left;
+    vertical-align: top;
+}
+
+/* audit-info table */
+table.audit-info {
+    margin-left: 8%;
+    margin-right: 8%;
+    width: 90%;
+}
+
+table.audit-info th,
+table.audit-info td {
+    border: 1px solid #d2d2d2;
+}
+
+table.audit-info th {
+	border-bottom-width: 2px;
+    background-color: var(--color-dark-gray);
+}
+
+table.audit-info tr:nth-child(even) {
+    background-color: var(--color-light-gray);
+}
+
+/* First column in an audit-info table */
+table.audit-info th:nth-child(1),
+table.audit-info td:nth-child(1) {
+    text-align: left;
+    white-space: nowrap;
+    width: 40px;
+}
+
+/* First column in an audit-info table */
+table.audit-info th:nth-child(2),
+table.audit-info td:nth-child(2) {
+    text-align: left;
+    width: 50%;
+}
+
+/* Last column in an audit-info table */
+table.audit-info th:last-child,
+table.audit-info td:last-child {
+    text-align: center;
+    width: 70px;
+}
+
+.error,
+.passed,
+.green,
+.failed,
+.red {
+    color: var(--color-white);
+}
+
+.warning,
+.orange {
+    color: var(--color-black);
+}
+
+.passed,
+.green {
+	background-color: var(--status-true);
+}
+
+.failed,
+.red {
+	background-color: var(--status-false);
+}
+
+.warning,
+.orange {
+	background-color: var(--status-warning);
+}
+
+.none,
+.grey {
+	background-color: var(--status-none);
+}
+
+.error {
+	background-color: var(--status-error);
+}
+
+h1 span.passed,
+h1 span.failed,
+h1 span.warning,
+h2 span.passed,
+h2 span.failed,
+h2 span.warning,
+h3 span.passed,
+h3 span.failed,
+h3 span.warning {
+    padding: 5px 10px;
+    border-radius: 8px;
+}
+
+span.auditstatus {
+    display: block;
+    padding: 5px 10px;
+    border-radius: 8px;
+    font-weight: bold;
+    margin: auto;
+}
+
+.sectionAction {
+    display: inline-block;
+    text-align: center;
+    text-decoration: none;
+    margin: 0 0 0 15px;
+    padding: 0 8px;
+    color: var(--color-black);
+    background-color: var(--color-dark-gray);
+    border-radius: 8px;
+    font-weight: bold;
+    cursor: pointer;
+    transition-duration: 500ms;
+}
+
+.sectionAction:hover {
+    background-color: var(--color-light-gray);
+    /* color: var(--color-blue); */
+}
+
+#host-information {
+    float: left;
+}
+
+/* Overall compliance donut chart */
+
+.card {
+    float: right;
+    margin: 0 100px 0 0;
+    width: 250px;
+}
+
+.donut-chart {
+    position: relative;
+    border-radius: 50%;
+    overflow: hidden;
+}
+
+.donut-chart.chart {
+    width: 200px;
+    height: 200px;
+    background: #c6c9cc;
+}
+
+.donut-chart .slice {
+    position: absolute;
+    top: 0;
+    left: 0;
+    width: 100%;
+    height: 100%;
+}
+
+.donut-chart .chart-center {
+    position: absolute;
+    border-radius: 50%;
+    top: 25px;
+    left: 25px;
+    width: 150px;
+    height: 150px;
+    background: var(--color-white);
+}
+
+.donut-chart .chart-center span {
+    display: block;
+    text-align: center;
+    font-size: 40px;
+    line-height: 150px;
+    color: var(--color-black);
+}
+
+
+#navigationButtons {
+    margin-top: 15px;
+    display: grid;
+    grid-template-rows: 50px;
+    grid-template-columns: repeat(6, 160px);
+}
+
+.navButton{
+    transition-duration: 500ms;
+    background-color: transparent;
+}
+.navButton:hover{
+    transition-duration: 500ms;
+    background-color: var(--color-light-gray);
+}
+
+.selectedNavButton{
+    transition-duration: 500ms;
+    background-color: var(--color-orange) !important;
+}
+
+button {
+	margin-left: 10px;
+    border-radius: 8px;
+    font-weight: bold;
+}
+
+#riskScore {
+    font-family: Arial, sans-serif;
+    text-align: center;
+}
+
+#CISA, 
+#MITRE {
+    font-family: Arial, sans-serif;
+}
+
+#CISATable {
+    margin-right: 15%;
+    width: 85%;
+    border-collapse: collapse;
+    border: 1px solid var(--color-white);
+    font-family: Arial, sans-serif;
+}
+
+.CISAMitigations {
+    width: 60%;
+}
+
+.CISAMitreTechniqueIDs {
+    width: auto;
+    line-height: 1.5;
+}
+
+.CISAMitreTechniqueIDs a {
+    border-radius: 0.3em;
+    background-color: #cc0000;
+    color: var(--color-white);
+    padding: 0.2em;
+    margin: 0.2em;
+    text-decoration: none;
+}
+
+.CISAMitigationIDs {
+	width: auto;
+}
+
+.CISAMitigationIDs a {
+	color: #000000;
+	text-decoration: none;
+}
+
+#CISAthead {
+    border-bottom-width: 2px;
+    background-color: var(--color-dark-gray);
+    border: 1px solid #d2d2d2;
+}
+
+#CISAtbody tr:nth-child(even) {
+    background-color: var(--color-light-gray);
+    border: 1px solid #d2d2d2;
+}
+
+#CISAtbody tr td {
+    border: 1px solid #d2d2d2;
+}
+
+
+#MITRETable {
+    width: 100%;
+    border-collapse: collapse;
+    border: 1px solid var(--color-white);
+    font-family: Arial, sans-serif;
+	display: flex;
+    flex-direction: column;
+}
+
+#MITREthead a {
+    color: var(--color-black);
+    text-decoration: none;
+    font-weight: bold;
+}
+
+#MITREtbody a {
+    color: var(--color-black);
+    text-decoration: none;
+}
+
+#MITREtbody tr,
+#MITREthead tr {
+    display: flex;
+}
+
+#MITREtbody td,
+#MITREthead td {
+    min-width: 75px;
+    border: 1px solid #cccccc;
+    padding: 6px;
+    flex: 1;
+    flex-basis: 0;
+}
+
+#MITREthead td {
+    overflow: hidden;
+    overflow-wrap: break-word;
+}
+
+.MITRETechnique {
+    padding: 6px;
+    border: 1px solid var(--color-black);
+}
+
+.tooltip {
+    position: relative;
+    display: inline-block;
+    border-bottom: 1px dotted var(--color-black);
+}
+
+.tooltip .tooltiptext {
+    visibility: hidden;
+    width: 120px;
+    background-color: var(--color-black);
+	color: var(--color-white);
+	text-align: center;
+	border-radius: 6px;
+	padding: 5px 0;
+
+	/* Position the tooltip */
+    position: absolute;
+    z-index: 1;
+}
+
+.tooltip:hover .tooltiptext {
+    visibility: visible;
+}
+
+#Tip p {
+    font-weight: bold;
+    padding: 5px;
+}
+
+.square-container {
+	display: flex;
+	align-items: center;
+	gap: 10px;
+	margin-bottom: 10px;
+}
+
+.square {
+	width: 20px;
+	height: 20px;
+	border: 1px solid var(--color-black);
+}
+
+#riskMatrixContainer {
+    display: grid;
+    position: relative;
+    grid-template-columns: 100px repeat(5, 60px);
+    grid-template-rows: repeat(6, 60px);
+    left: 10%;
+    float: left;
+    margin-top: 50px;
+    text-align: center;
+}
+
+#riskMatrixContainer div {
+    border: 1px solid var(--color-black);
+}
+
+
+#severity {
+	grid-column-start: 1;
+	grid-column-end: 2;
+	grid-row-start: 1;
+	grid-row-end: 7;
+	position: relative;
+}
+
+#quantity {
+	grid-column-start: 2;
+	grid-column-end: 7;
+	grid-row-start: 6;
+	grid-row-end: 7;
+	position: relative;
+}
+
+#severityArea {
+    text-align: center;
+    position: absolute;
+    margin: 0;
+	top: 50%;
+	left: 20%;
+}
+
+#quantityArea {
+	text-align: center;
+	position: absolute;
+	margin: 0;
+	top: 35%;
+	left: 40%;
+}
+
+#severityCritical {
+	grid-column-start: 2;
+	grid-column-end: 3;
+	grid-row-start: 1;
+	grid-row-end: 2;
+	padding-top: 20px;
+}
+
+#severityHigh {
+	grid-column-start: 2;
+	grid-column-end: 3;
+	grid-row-start: 2;
+	grid-row-end: 3;
+	padding-top: 20px;
+}
+
+#severityMedium {
+	grid-column-start: 2;
+	grid-column-end: 3;
+	grid-row-start: 3;
+	grid-row-end: 4;
+	padding-top: 20px;
+}
+
+#severityLow {
+	grid-column-start: 2;
+	grid-column-end: 3;
+	grid-row-start: 4;
+	grid-row-end: 5;
+	padding-top: 20px;
+}
+
+#quantityCritical {
+	grid-column-start: 6;
+	grid-column-end: 7;
+	grid-row-start: 5;
+	grid-row-end: 6;
+	text-align: center;
+	padding-top: 20px;
+}
+
+#quantityHigh {
+	grid-column-start: 5;
+	grid-column-end: 6;
+	grid-row-start: 5;
+	grid-row-end: 6;
+	text-align: center;
+	padding-top: 20px;
+}
+
+#quantityMedium {
+	grid-column-start: 4;
+	grid-column-end: 5;
+	grid-row-start: 5;
+	grid-row-end: 6;
+	text-align: center;
+	padding-top: 20px;
+}
+
+#quantityLow {
+	grid-column-start: 3;
+	grid-column-end: 4;
+	grid-row-start: 5;
+	grid-row-end: 6;
+	text-align: center;
+	padding-top: 20px;
+}
+
+#riskMatrixContainer:nth-child(10) {
+	position: relative;
+}
+
+#riskMatrixSummary:nth-child(10) {
+	position: relative;
+}
+
+/* Color for each Risk */
+#medium_medium,
+#medium_low,
+#low_medium {
+	background-color: #ffc000;
+}
+
+#high_low,
+#high_medium,
+#high_high,
+#medium_high,
+#low_high {
+	background-color: red;
+}
+
+#critical_low,
+#critical_medium,
+#critical_high,
+#critical_critical,
+#high_critical,
+#medium_critical,
+#low_critical {
+	background-color: purple;
+}
+
+
+/* Low Risk */
+#low_low {
+	background-color: #548dd6;
+	grid-column-start: 3;
+	grid-column-end: 4;
+	grid-row-start: 4;
+	grid-row-end: 5;
+}
+
+/* Medium Risk */
+#medium_low {
+	grid-column-start: 3;
+	grid-column-end: 4;
+	grid-row-start: 3;
+	grid-row-end: 4;
+}
+
+#medium_medium {
+	grid-column-start: 4;
+	grid-column-end: 5;
+	grid-row-start: 3;
+	grid-row-end: 4;
+}
+
+#low_medium {
+	grid-column-start: 4;
+	grid-column-end: 5;
+	grid-row-start: 4;
+	grid-row-end: 5;
+}
+
+/* High Risk*/
+#high_low {
+	grid-column-start: 3;
+	grid-column-end: 4;
+	grid-row-start: 2;
+	grid-row-end: 3;
+}
+
+#high_medium {
+	grid-column-start: 4;
+	grid-column-end: 5;
+	grid-row-start: 2;
+	grid-row-end: 3;
+}
+
+#high_high {
+	grid-column-start: 5;
+	grid-column-end: 6;
+	grid-row-start: 2;
+	grid-row-end: 3;
+}
+
+#medium_high {
+	grid-column-start: 5;
+	grid-column-end: 6;
+	grid-row-start: 3;
+	grid-row-end: 4;
+}
+
+#low_high {
+	grid-column-start: 5;
+	grid-column-end: 6;
+	grid-row-start: 4;
+	grid-row-end: 5;
+}
+
+/* Critical Risk */
+#critical_low {
+	grid-column-start: 3;
+	grid-column-end: 4;
+	grid-row-start: 1;
+	grid-row-end: 2;
+}
+
+#critical_medium {
+	grid-column-start: 4;
+	grid-column-end: 5;
+	grid-row-start: 1;
+	grid-row-end: 2;
+}
+
+#critical_high {
+	grid-column-start: 5;
+	grid-column-end: 6;
+	grid-row-start: 1;
+	grid-row-end: 2;
+}
+
+#critical_critical {
+	grid-column-start: 6;
+	grid-column-end: 7;
+	grid-row-start: 1;
+	grid-row-end: 2;
+}
+
+#high_critical {
+	grid-column-start: 6;
+	grid-column-end: 7;
+	grid-row-start: 2;
+	grid-row-end: 3;
+}
+
+#medium_critical {
+	grid-column-start: 6;
+	grid-column-end: 7;
+	grid-row-start: 3;
+	grid-row-end: 4;
+}
+
+#low_critical {
+	grid-column-start: 6;
+	grid-column-end: 7;
+	grid-row-start: 4;
+	grid-row-end: 5;
+}
+
+#severityDetails {
+	margin-left: 8%;
+	margin-top: 30px;
+	border: 1px solid #d2d2d2;
+	margin-right: 8%;
+	float: right;
+	margin-bottom: 40px;
+}
+
+#severityDetails td {
+	border: 1px solid #d2d2d2;
+}
+
+#calculationTables {
+	float: right;
+	position: relative;
+}
+
+.calculationTablesText {
+	text-align: left;
+	font-family: Arial, sans-serif;
+}
+
+#riskScore th {
+	background-color: var(--color-dark-gray);
+}
+
+#riskScore tr:nth-child(2n) td {
+	background-color: var(--color-light-gray);
+}
+
+
+#riskMatrixSummary {
+	font-family: Arial, sans-serif;
+    display: grid;
+    position: relative;
+    grid-template-columns: 100px repeat(5, 60px);
+    grid-template-rows: repeat(6, 60px);
+    right: 10%;
+    float: right;
+}
+
+#riskMatrixSummary div {
+    border: 1px solid var(--color-black);
+}
+
+#riskMatrixSummaryArea {
+	float: right;
+	text-align: center;
+	margin-right: 10%;
+}
+
+/* System Information Content */
+.systemInformationContent>tr>th {
+    padding-left: 0;
+    padding-right: 0;
+}
+
+
+#testGrid {
+    display: grid;
+    grid-auto-rows: minmax(auto, auto);
+    row-gap: 2px;
+    column-gap: 2px;
+    font-family: 'Calibri', 'Segoe UI', sans-serif;
+    word-break: break-word;
+    white-space: normal;
+    align-items: start;
+}
+
+#testGrid div {
+    grid-auto-rows: minmax(auto, auto);
+    border: 1px solid #d2d2d2;
+    padding: 4px 6px;
+    font-size: 18px;
+    font-family: 'Calibri', 'Segoe UI', sans-serif;
+    box-sizing: border-box;
+    overflow-wrap: anywhere;
+    background-clip: padding-box;
+    height: 100%;
+    align-self: stretch;
+}
+
+
+#systemData {
+    display: grid;
+    grid-template-columns: repeat(4, 100px);
+    grid-template-rows: repeat(10, 5%);
+}
+
+#hardwareInformation td {
+	width: min-content;
+}
+
+#systemInformation {
+	grid-column-start: 1;
+	grid-column-end: 2;
+	grid-row-start: 0;
+	grid-row-end: 1;
+	margin-top: 0px;
+}
+
+#hardwareInformation {
+	grid-column-start: 1;
+	grid-column-end: 2;
+	grid-row-start: 1;
+	grid-row-end: 1;
+}
+
+#softwareInformation {
+	grid-column-start: 2;
+	grid-column-end: 3;
+	grid-row-start: 1;
+	grid-row-end: 2;
+}
+
+/* Dot Indicators (Positioning must be precise) */
+#dotRiskScoreTab, #dotSummaryTab {
+    height: 15px;
+    width: 15px;
+    background-color: var(--color-black);
+    border-radius: 50%;
+    border-style: dotted;
+    display: inline-block;
+    position: absolute;
+    left: 22px;
+    top: 22px; /* Using a single top/left definition for both */
+}
+
+
+
+/* Quantity and Severity Results Blocks */
+#quantityTable, #severityTable {
+    margin-right: auto;
+    margin-top: 30px;
+    border: 1px solid var(--color-black);
+}
+
+.severityResultFalse,
+.severityResultTrue,
+.severityResultNone,
+.severityResultError,
+.severityResultWarning{
+    display: block;
+	padding: 5px 10px;
+	border-radius: 8px;
+	font-weight: bold;
+	margin: auto;
+}
+
+.severityResultFalse {
+	background-color: var(--status-false);
+	color: var(--color-white);
+}
+
+
+.severityResultTrue {
+	background-color: var(--status-true);
+	color: var(--color-white);
+}
+
+.severityResultNone{
+	background-color: var(--status-none);
+	color: var(--color-black);
+}
+
+.severityResultError {
+	background-color: var(--status-error);
+	color: var(--color-light-gray);
+}
+
+.severityResultWarning {
+	background-color: var(--status-warning);
+	color: var(--color-black);
+}
+
+.tabContent#riskScore {
+	text-align: left;
+}
+
+#severityCompliance {
+	margin-top: 25%;
+	clear: both;
+}
+
+#complianceStatus {
+    padding: 5px 10px;
+	border-radius: 8px;
+    color: var(--color-white);
+	margin-left: 6%;
+	font-weight: bold;
+    display: inline;
+}
+
+#referencesContainer {
+    display: grid;
+    grid-template-rows: 280px;
+    grid-template-columns: repeat(2, 500px);
+}
+
+#referencesContainer div {
+    text-align: center;
+    margin-left: auto;
+    margin-right: auto;
+}
+
+
+#settingsOverview section {
+	margin-left: 2%;
+	margin-right: 5%;
+}
+
+#invalidOS {
+	display: inline;
+	padding: 5px 10px;
+	border-radius: 8px;
+	font-weight: bold;
+	margin: auto;
+	background-color: #777777;
+}
+
+#references p, #summary p, #settingsOverview p {
+    font-family: Arial, sans-serif;
+}
+
+#foundationData p {
+	font-family: Arial, sans-serif;
+}
+
+#foundationData section {
+    margin-left: 2%;
+    margin-right: 5%;
+}
+
+
+#hashTableDiv {
+	float: right;
+	width: 60%;
+	margin-bottom: 30px;
+}
+
+#hashTableBody td {
+	line-height: 0px;
+	vertical-align: middle;
+}
+
+#hashTable thead tr th {
+	vertical-align: middle;
+}
+
+#CurrentATTCKHeatmap {
+	display: grid;
+	grid-template-columns: 20% 20% 20% 20% 20%;
+	grid-template-rows: 20% 20% 20% 20% 20%;
+	margin-top: 30px;
+	border: 1px solid var(--color-black);
+	margin-right: auto;
+
+}
+
+@media only screen and (max-width: 1900px) {
+    #hashTableBody td {
+        line-height: 17px;
+        vertical-align: middle;
+    }
+}
+
+/* Two-column layout with flexible wrapping in the About Us section*/
+.columns-container {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 40px;
+    align-items: flex-start;
+    justify-content: space-around;
+    text-align: left;
+    overflow-wrap: break-word;
+}
+
+/* Left column takes about 2/3 of space */
+.left-column {
+	flex: 2;
+	min-width: 300px;
+}
+
+/* Right column takes about 1/3 of space */
+.right-column {
+	flex: 1;
+	min-width: 300px;
+}
+
+/* Responsive video container */
+.video-wrapper {
+    width: 100%;
+    max-width: 480px;
+    aspect-ratio: 16 / 9;
+    margin: 20px 0;
+}
+
+.video-wrapper iframe {
+    width: 100%;
+    height: 100%;
+    border: none;
+}
+
+/*bulletpoint list in the right column*/
+.hardening-ul {
+    font-family: "Libre Franklin", "Helvetica Neue", helvetica, arial, sans-serif;
+    line-height: 1.6;
+    margin: 0 auto;
+    padding: 0 20px;
+}
+
+/* Product section layout */
+.product-block {
+    display: flex;
+    flex-wrap: wrap;
+    justify-content: center;
+    padding: 20px 0;
+    margin-bottom: 20px;
+}
+
+.product-item {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    text-align: center;
+    min-width: 180px;
+}
+
+/* Contact section background and padding */
+.contact-block {
+    background-color: var(--color-white);
+    padding: 20px 0;
+}
+
+/* Flexbox for contact items */
+.contact-flex {
+    display: flex;
+    justify-content: space-between;
+    gap: 30px;
+    margin: 0 auto;
+    line-height: 1.2;
+    padding: 0 20px;
+    box-sizing: border-box;
+}
+
+/* Flexbox in columns for p elements in each contact-item*/
+.contact-item {
+    display: flex;
+    flex-direction: column;
+    align-items: flex-start;
+    text-align: left;
+    flex: 1;
+    margin: 5px 0;
+}
+
+/* Compact spacing between paragraphs only in this contact item context*/
+.contact-item p {
+    margin: 4px 0;
+}
+
+/* Button container aligned with contact section */
+.contact-buttons {
+    display: flex;
+    gap: 20px;
+    justify-content: flex-start;
+    margin-top: 20px;
+    max-width: 1200px;
+    margin-left: auto;
+    margin-right: auto;
+    padding: 0 20px;
+    box-sizing: border-box;
+}
+
+/* Base button style inside contact section */
+.contact-buttons .button-base {
+    border-radius: 4px;
+    padding: 15px 25px;
+    margin-left: 0px;
+    color: var(--color-white);
+    box-shadow: 2px 2px var(--color-black);
+    border: none;
+    cursor: pointer;
+    font-size: 16px;
+    height: auto;
+}
+
+/* Contact Us button, that uses the company red color */
+#contactUsButton {
+	background-color: var(--company-red);
+}
+
+/*GitHub button, that uses the dark color of the GitHSub website*/
+#githubButton {
+	background-color: var(--github-grey);
+}
+
+/*this is the link of the company logo in the top right corner*/
+#companyLink {
+    text-decoration: none;
+    cursor: pointer;
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/report.js b/ATAPHtmlReport/report.js
new file mode 100644
index 0000000..b73560a
--- /dev/null
+++ b/ATAPHtmlReport/report.js
@@ -0,0 +1,278 @@
+"use strict";
+
+let AmountOfNonCompliantRules;
+let AmountOfCompliantRules;
+let TotalAmountOfRules;
+let QuantityCompliance;
+
+let TotalAmountOfSeverityRules;
+let AmountOfFailedSeverityRules;
+let SeverityCompliance;
+
+
+const cssVars = getComputedStyle(document.documentElement);
+
+const COLORS = {
+    green: cssVars.getPropertyValue('--color-green').trim(),
+    red: cssVars.getPropertyValue('--company-red').trim(),
+    orange: cssVars.getPropertyValue('--color-orange').trim(),
+    purple: cssVars.getPropertyValue('--color-purple').trim(),
+    white: cssVars.getPropertyValue('--color-white').trim(),
+    blue: cssVars.getPropertyValue('--color-blue').trim(),
+    dark_gray: cssVars.getPropertyValue('--color-dark-gray').trim(),
+    light_gray: cssVars.getPropertyValue('--color-light-gray').trim()
+};
+
+function startConditions() {
+    let isRiskScoreValue = document.getElementById("riskScore");
+    let isMITREValue = document.getElementById("MITRE");
+
+    /* Default-Value: Display summary always at the beginning */
+    document.getElementById("summary").style.display = "block";
+
+    /* Default-Value: Disable all other tabs at the beginning */
+    document.getElementById("foundationData").style.display = "none";
+    document.getElementById("references").style.display = "none";
+    document.getElementById("settingsOverview").style.display = "none";
+
+
+    /* document.getElementById("summaryBtn").style.backgroundColor = COLORS.orange; 
+    document.getElementById("foundationDataBtn").style.backgroundColor = 'transparent';
+    document.getElementById("referenceBtn").style.backgroundColor = 'transparent';
+    document.getElementById("settingsOverviewBtn").style.backgroundColor = 'transparent'; */
+
+    if (isRiskScoreValue != null) {
+        document.getElementById("riskScore").style.display = "none";
+        /* document.getElementById("riskScoreBtn").style.backgroundColor = 'transparent'; */
+        /* Initialize necessary variables */
+
+        AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent;
+        AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent;
+        TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent;
+        QuantityCompliance = document.getElementById("QuantityCompliance").textContent;
+        TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent;
+        AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent;
+
+        calcDotPosition();
+        let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse");
+        severityComplianceCollapseBtn.addEventListener("click", () => {
+            if (document.getElementById("severityDetails").style.display == "none") {
+                document.getElementById("severityDetails").style.display = "block";
+            }
+            else {
+                document.getElementById("severityDetails").style.display = "none";
+            }
+        })
+    }
+
+    if (isMITREValue != null) {
+        document.getElementById("MITRE").style.display = "none";
+        document.getElementById("MITREBtn").style.backgroundColor = 'transparent';
+        document.getElementById("CISA").style.display = "none";
+        document.getElementById("CISABtn").style.backgroundColor = 'transparent';
+    }
+}
+
+
+let buttonNumber;
+
+function clickButton(value) {
+    buttonNumber = parseInt(value);
+
+    /* Disable all content */
+    let tabContents = document.getElementsByClassName('tabContent');
+    for (let i = 0; i < tabContents.length; i++) {
+        tabContents.item(i).style.display = "none";
+    }
+
+    /* Disable all buttons */
+    let buttons = document.getElementsByClassName('navButton');
+    for (let i = 0; i < buttons.length; i++) {
+        /* buttons.item(i).style.backgroundColor = 'transparent'; */
+        buttons.item(i).classList.remove("selectedNavButton");
+    }
+
+
+
+    /* Re-Enable fitting content / button */
+    switch (buttonNumber) {
+        case 1:
+            document.getElementById("summary").style.display = "block";
+            /* document.getElementById("summaryBtn").style.backgroundColor = COLORS.orange; */
+            document.getElementById("summaryBtn").classList.add("selectedNavButton");
+            break;
+        case 2:
+            document.getElementById("riskScore").style.display = "block";
+            /* document.getElementById("riskScoreBtn").style.backgroundColor = COLORS.orange; */
+            document.getElementById("riskScoreBtn").classList.add("selectedNavButton");
+            calcDotPosition();
+            break;
+        case 3:
+            document.getElementById("references").style.display = "block";
+            /* document.getElementById("referenceBtn").style.backgroundColor = COLORS.orange; */
+            document.getElementById("referenceBtn").classList.add("selectedNavButton");
+            break;
+        case 4:
+            document.getElementById("settingsOverview").style.display = "block";
+            /* document.getElementById("settingsOverviewBtn").style.backgroundColor = COLORS.orange; */
+            document.getElementById("settingsOverviewBtn").classList.add("selectedNavButton");
+            break;
+        case 5:
+            document.getElementById("foundationData").style.display = "block";
+            /* document.getElementById("foundationDataBtn").style.backgroundColor = COLORS.orange; */
+            document.getElementById("foundationDataBtn").classList.add("selectedNavButton");
+            break;
+        case 6:
+            document.getElementById("MITRE").style.display = "block";
+            /* document.getElementById("MITREBtn").style.backgroundColor = COLORS.orange; */
+            document.getElementById("MITREBtn").classList.add("selectedNavButton");
+            break;
+        case 7:
+            document.getElementById("CISA").style.display = "block";
+            /* document.getElementById("CISABtn").style.backgroundColor = COLORS.orange; */
+            document.getElementById("CISABtn").classList.add("selectedNavButton");
+            break;
+    }
+
+}
+
+
+
+/* 
+Calculate the position of the dot inside the risk matrix; 
+Will be calleed, after the user has clicked on Risk Score Button
+*/
+function calcDotPosition() {
+
+
+    let dotRiskScoreTab = document.getElementById("dotRiskScoreTab");
+    let dotSummaryTab = document.getElementById("dotSummaryTab");
+    QuantityCompliance = parseFloat(QuantityCompliance);
+
+    let complianceValueQuantity = 0;
+    let complianceValueSeverity = 0;
+
+    /*low quantity compliance*/
+    if (80 < QuantityCompliance) {
+        dotRiskScoreTab.style.gridColumnStart = 3;
+        dotSummaryTab.style.gridColumnStart = 3;
+        complianceValueQuantity = 1;
+    }
+    /*medium quantity compliance*/
+    else if (65 < QuantityCompliance && QuantityCompliance < 80) {
+        dotRiskScoreTab.style.gridColumnStart = 4;
+        dotSummaryTab.style.gridColumnStart = 4;
+        complianceValueQuantity = 2;
+    }
+    /*high quantity compliance*/
+    else if (50 < QuantityCompliance && QuantityCompliance < 65) {
+        dotRiskScoreTab.style.gridColumnStart = 5;
+        dotSummaryTab.style.gridColumnStart = 5;
+        complianceValueQuantity = 3;
+    }
+    /*critical quantity compliance*/
+    else {
+        dotRiskScoreTab.style.gridColumnStart = 6;
+        dotSummaryTab.style.gridColumnStart = 6;
+        complianceValueQuantity = 4;
+    }
+
+
+    SeverityCompliance = parseInt(AmountOfFailedSeverityRules);
+    /*low severity compliance*/
+    if (SeverityCompliance == 0) {
+        dotRiskScoreTab.style.gridRowStart = 4;
+        dotSummaryTab.style.gridRowStart = 4;
+        complianceValueSeverity = 1;
+
+
+        document.getElementById("complianceStatus").style.backgroundColor = COLORS.green;
+    }
+    /*critical severity compliance*/
+    else {
+        dotRiskScoreTab.style.gridRowStart = 1;
+        dotSummaryTab.style.gridRowStart = 1;
+        complianceValueSeverity = 4;
+        document.getElementById("complianceStatus").style.backgroundColor = COLORS.red;
+    }
+    /* Unhide the dot now that it has been positioned */
+    document.getElementById("dotSummaryTab").style.display = "inline-block";
+
+    let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity);
+
+    let summary = "Current Risk Score on tested System: ";
+    let riskResult = document.createElement("p");
+    riskResult.style.display = "contents";
+    if (totalComplianceValue == 1) {
+        riskResult.innerText = "Low";
+        riskResult.style.backgroundColor = "#548dd6";
+    }
+    else if (totalComplianceValue == 2) {
+        riskResult.innerText = "Medium";
+        riskResult.style.backgroundColor = "#ffc000";
+    }
+    else if (totalComplianceValue == 3) {
+        riskResult.innerText = "High";
+        riskResult.style.color = "white";
+        riskResult.style.backgroundColor = "#cc0000";
+    }
+    else {
+        riskResult.innerText = "Critical";
+        riskResult.style.color = "white";
+        riskResult.style.backgroundColor = "purple";
+    }
+    riskResult.style.display = "inline";
+    riskResult.style.padding = "5px 10px";
+    riskResult.style.borderRadius = "8px";
+    riskResult.style.fontWeight = "bold";
+    riskResult.style.margin = "auto";
+
+    let copyRiskResult = riskResult.cloneNode();
+    copyRiskResult.innerText = riskResult.innerText;
+
+    document.getElementById("CurrentRiskScore").textContent = summary;
+    document.getElementById("CurrentRiskScore").appendChild(riskResult);
+    document.getElementById("CurrentRiskScoreRS").textContent = summary;
+    document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);
+
+}
+
+/*
+techniques are hidden or shown based on the status of the provided checkboxes and classes 
+classes must be in a compatible format for document.querySelectorAll()
+examples with first all nodes in the 'orgMeasure' class and second all nodes that are in the 'MITRETechnique' but not in the 'mailVector' class:
+hideMitreTechniques(this, '.orgMeasure')
+hideMitreTechniques(this, '.MITRETechnique:not(.mailVector)')
+*/
+let activeFilter = new Array();
+function hideMitreTechniques(checkbox, classes) {
+    let classElements = document.querySelectorAll(classes);
+    if (checkbox.checked) {
+        /* push the current classes into the activeFilter array to determine which filters are currently active. */
+        activeFilter.push(classes);
+        for (let i = 0; i < classElements.length; i++) {
+            classElements[i].style.padding = '0.1em';
+
+            const children = classElements[i].querySelectorAll('*');
+            for (let j = 0; j < children.length; j++) {
+                children[j].style.display = 'none';
+            }
+        }
+    }
+    else {
+        activeFilter.splice(activeFilter.indexOf(classes), 1);
+        /* create an array from the classElements since it makes filtering easier. */
+        let elementsToHide = Array.from(classElements);
+        /* create an array that includes all elements from the remaining active filters */
+        let elementsNotToHide = (activeFilter.length === 0) ? new Array() : Array.from(document.querySelectorAll(activeFilter));
+        /* filter the elementsToHide array to retrieve and display only the elements that are not hidden by other filters */
+        elementsToHide = elementsToHide.filter(element => !elementsNotToHide.includes(element));
+        for (let i = 0; i < elementsToHide.length; i++) {
+            elementsToHide[i].style.removeProperty('padding');
+            const children = elementsToHide[i].querySelectorAll('*');
+            for (let j = 0; j < children.length; j++) {
+                children[j].style.removeProperty('display');
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/ATAPHtmlReport/resources/CISToAttackMappingData.json b/ATAPHtmlReport/resources/CISToAttackMappingData.json
new file mode 100644
index 0000000000000000000000000000000000000000..86c1c727b94ffed7f75b56ab69001089aeece563
GIT binary patch
literal 518728
zcmeFaeQz8`*5z4$53t{%AYc|Uo|YepqGa~~3qx<VHI^l<N!vTvUJNKwqSO{CHc46S
z9`sk=-TTYS>xg`*ipb1}Vq_^HP$Y|$QBhfO;@o@gOZ<QT@Bdo-Z;Su3SYG|RvG{Ru
zusD-{?-r+vWBKj%;!+-YEMI)TvG{ND%=$I%+F#_^=Zg!u_Jdrl&t=4?i~Yq<izjmB
z1Nmux@xLz~Eq;*S>aX<|d89tVa&c$z<>Ger#b0$6ud6xi$m2VUyNg@${VVzZj{JOM
z@t4}WaWi`;bH9+;9W7pXGkYX6+pFgBZgD6x{~*u#uy`Zybh-Gox&ue@`zLvnncSBD
zpUBmh)w?{C=fA7QT*`ZUy?8HQ`Wj1_*PX@p^0iz%lt)ix?6->(`Rn=OH<@AcU2;cx
zpLgUs-fj0g-KpLw|KC~MTk}pI$&63r^W*b+w|G^}OFxPKyYt?-d({7K>{V;xRPO36
zdA;}Y%BS*v`@L&E-8;eee0%Zr%J)3<9q{?2dI#%1wL9|u)_-b4-@z1C<k0uVr_%>*
zJ3ZE&;&Ugs>h3Id6R)~G!N>XH_v(N4iQBR^{@P>a>=So`y9B%9o#cpV&wWSU!Rr02
zy>II~<|=k=-OIScJ_Ff$`G0DU{##zhf7T6Q5cci|vID_OhqANQ*<?La>3+-3v+j8|
zmmBg*ujMt^QGI69QC6{zyBdBttoG#-`HB5fcjxw4I-~k~wQ=nGjm67~tKP_LU>)Px
zXVtq2UAt~B`!eEXZA=h&vG^#j$G-kI`RR7`$$eE}^NqZxb9ra{4aT{Uf1j$yj^vTI
zGTMcV$8-LuUAwIQvXsAKT`a5T)JNYD<SnZ!m%?U@(DfQOWrQzkBZohWeHjTpK9xEA
zL*CEpKi9wwu}on3ucDCC9%tw3lQ@-8-^;(yC-Gx-x8I4C<yM2ON3161vLmwzzo)K|
znzQlIV=JkNDtr8fyf!QGOL_g$@WG5iceVt4up9kTKH(Et4JV!WIFL{Nb#3*AadBVP
zgyG_iT>VMD&gBtyls^Ow?8dL;6+zXh;D+zFYp)T$d+n9&R^^Nk#fU=)UdL*m$RTQT
z46@n}a<eG|A^4c75rW+aU--PC=$P4p&mU%i<?Fm-`@C`2Ft)&!D+>!T_WLxjfTf2b
zb1AlqZ-<3B123kH32Yz~32bLoG|I$>T4ngqw<DOpYi&FBN@Y`-b*4VnFsz{Al!cYm
zs#00J@lw`o-P6Fv!qZ^Se=Yy`N&T&}%A3IsyA=CqS@{uI{qL%u)Em2$Yx^Mzujt@P
zTRW;<TY`19t%$i_9AcQ!6nqhU{`azC|5+g<WOeyWvy|(w(7?}(lDf@QCa<6ul*KDC
z3PuSw7_op=N)r(vI7Xvl$|I`c@|Z?hmX(D@9O(~H!%Qpe$1IO!w2O?~a(hjb%&~l1
z0ciRMp<OS=4%-!*F1&wsjnte?e+!IAo8h-Rn(6MwYR^4Ji(03*DpFNTuo;E!Yzatt
zAl4Q3)km>|u(gQ%p}_M9zaPnWJd0r%Aiml5SKuJLQ+$;io=U8Tu^DV!r|!#2G=!Cd
zjTo#=0UP-5L^Cer`v*Zz-G7Mj=DQVO(DA!q4ttI03z$5XuT%LMB!V0A0xqx6vk9em
z#uR#+#!-mdj<w8UFwlo@rlJ({o-9^~UbT*U+}|`Za!}>-@N+*)Y-XYBi#{p?jkVB>
z$3hlW3}XBlg~ls~g+L9S%cF{Mjs!*6Yws$S(Cj;OETWLaOHkGLpLqPaSXwA*WXz$Z
z!7JzjeNpsW7-(7L+|?tUVY|O=XPLe3^sN}hvOSL3HWup$eV$z&h?`3)P1$DC&zG@v
zY42&6y_N$hF<ez1Qn1eOz@2`q9tZe%Bded>O7QVkut0<ztywc(e(T9E4+L52(`c5A
z`b+2!8pUT<BJ%|dlKBdjf0N%nhz++~{4BqL#=0gq9#!`i_eUxOmPJF3U3fk**t)wW
z-_?2PT_YJP#>8t3VdJc~90;3=^@du2DxmyAp4fTyJDJuFORQ^Fw5kR~I>`?srv(I@
z^h8%a-nl2y)R<i4P4P}l3}PKN#_`U$h<^@LOeNya{{QzYD@)^+n&(KAk_aU`zamDn
zEY&hQ6NI3(sb$yCqX{w2GqKYiNk;86nZcgqcm5>R7*FMqCskJ2bNRk6RS_@bacVc}
z&+umw-u2tqaP|}#X1kIT9kZ_6<JgXGt9qPmr@KhIe#O1p`*MG@lBJzf6TT1ma5*l!
zAO|jEZ1pniK|CF*eoR9{i$+CLm0LZbzWK}{?B%lOO3P-BL3KV<@an^3qd8C!b3e*P
zh3eTvevZW}(ptFHehaZQ>R+h0gTvfT`juR(o|h?o_&W8ffDnqV$7jORiOEgN%~qyF
z#H^`&7#o*=kON~=$v>b*l_)Bi2Ke|^-=nG=RYOEpHFFJ*3a#K>Vifs!4BId56<xRE
zsPu}_f!gDwwc}DD!*m3FSHqM#e8;jlD8`#DfrB0izZ{4qhF<M-179QHQL@$QTJv~b
zS?w96#S7M2NlX%h-F!^)*W!@Ej6xn|xkxc=EEoT(Jetj+gj|E19?pyzwVQ~Taxco_
zmpJRV4BVUxcc4JSFhoL8tKl27#r*w#9IyBzg?E*<g;ck+V2&8&vpr5)OKZA{8M#X3
zA%{6lgK?V3!9V#;kb`peK{BNOE<fY7`0GB5pnP#0`URDM81+r!x^=9xwVZE)|3Az(
zp#xEQ7>Kb#%VUq@N-usT{PDhlfYhqjYVQQQYkk~?XXK3J5G{>~Q|IQTvQSoDF2TC)
zX)ed2Jd|n90KL`7#nEa6GONik(A+hjd-@_TAN$bHY#c5u&*rYgO2aln7ju}sb3^tB
zl=dmcIkiJqY5q=(U9mYVJ*vEYJeXrqmcd0ms-oGU=JlYbort|gZ30mm;-1tN{MLxp
zgx6eqPj@ShDF3}ee3n$)U^xdvZLjiT_Uk%Lmc<I>N7DC*tg$m$<J7*8OLo#&wPBBA
zU5wH9UB<6}tnHZCR2xTTrQ3=Nd5G(Ge_j7~qq5q%MrzJx==v`&I)5iB3u$vZIejO(
zyYaF9Ppb|WS|4MX{~AM2m({G}!3T%J3m+vO*<_RN<WXLoegSwF&jgEFKY*g<*Y2c6
z)12u-t(nt-%ZtO`iQ4VTLX%ceS_YV_kioCNl+{ee%im>%ziQ}O{cw^R3HL_&7AbjU
z=h}Ityoh_8+BXd(XdQ}WboncpXgq#pEL-^3j<>G1O?fg*4z;ezi>A~0I{Z18jDmF;
z!PmL=XIsd(h3K+gT2w>l6!P0jUi&HYe*0l%vtC799ph$v^f<dApO3EhqAayF?(-=D
zNqFzpHL|O|m>32*zEs|mCExUy$pcoTysEtJW|h9xiQ$t|tMB)f_id}N29_`Gv29WJ
zaaNh;5toLisl?mA74O1MpCIN(rM{lmM9zt;)+djPsE4ac@pFdzA!Bpu@IBFTV(jDG
z%ro8CAg6<sXZOWKeM?}g?*uW#)U_fXl^0ez6qHeQqTQ4a<Tol(`uBz%le6L@HtavP
z@zIPz-mkKrLbiB&oMzl3G(wkM=H^mH6q0jy%EL@q@$}VEn5V)qnvudef>?W(f*H*u
zCSF3dmgcCqu4Mcb=AxsFc4s15GOTmvI(Aa8X?TTy?o6?5vkX(@WA0R)Z%VTdr&7uP
zRPaPMW_K><MHR6jFN_nq(4{S3fOFl9*L;2n`${3q`R9l>d#?RWqDJffzFd4Kv!b^8
ztQKDy&w6u*4Z3&fIc>uf^_?m=pfqg8)P9#>U6K`WP^leG^*9ww+M{R~7E_|?8Ejg=
z^>q03M;ebQB2Fdb^Gw-eD=%vyE=Q{rOlkiBt6D=bgyrh}rTkSN=C^!W;LJheIjFqc
zhPZr>Rd|Wf9)A*Upv&`#{KIGRPt)C(^&WeIEgXdXXFbxj&j#mbuFvfm)1}78-gw5j
zE&f4_p0pY5BJPv#QbC$Z%211}yc~x(4R>>B2-O0t!o=z<pYf}B&eZX<748<8t)O!X
z>6@!oF&by++EjZwr!HGhb5+(<pEh6Lyp6V&jqh<>^RmOX(K_Eh?M_c$<`{0=%uavZ
zc?fq4tku^!h1Pi)82KPJ(>sZf(rXq()GPF<_##h%ECPQOhw+flSAZj8`czG2{ijfe
z?^ZiPSqhZSX?iH2I`UlniBGcfQH=F0KNKkR*V8LcgD&QJ#*)^!^h3wy*aFWwMy1~j
zT6UwVsPg#*cMHq|&^b*3CocsJ=fV}lM>zZ9cln9RFMMxwr31kTaZ5aLxP-p0<f&0B
z)2tZ|GsxyJf<+Z$nQjInaejPGjFcDmkL%A<f<;xI1DP`FZ;*v)^~mXa_WSG;_OROP
z*yWy3jgOWzM=!=i1ofPn((JJqJD|RPHUH;^RPM&?kEuNO`W)(Kzkng1g^Xu>1dQVr
zvRj_Z`4;VNNJQxImiDR{SWNPJVL@t~{Ta*{B#YuSLhZ@PW94-bxEp2v*4O{_U=S>y
zRo=f^aoPdXKXC?afXF=BfL0@Dk3Sy=VI-E5{W)iyxjrt|JK%0*2b9KRF}6u57=jt_
zm$3e<bL@1x_@lhVSP^Xtvl-V5`MX`b;H*^5kiLFTsl1qbT<@L|(6M(_r$bH`XDp#T
zYwmO1;_JsJ>r?|QyIj4;=Ng@{87$hpur#iTsk<rxP5Yv<VSf?70ZaHuRKmRzD~`uF
zU(@FwIElv<ar(3C%-pv-<~r2*_#N*TjXy`mof#byMUCO1xRY(VMlx1(F(9<J{y8sq
z7xep2aZ0+56#ksn`TFLuU`6^f3vqr4IO2p_GRi&*hNxv@KU%%IiJAJ(hq=(ZFXj5a
z7<w#Ny^w2PRese`Vm*PL_T$dRur9M-MMYn`R(sQa8=pJia5Jpaxvfsa;qWulbKxdt
zk17>64`n6O@sD%NSPxX-pq0T!dJ43UoxXT+mK+@v&;fm>(eaPOwuI&2H_htdH!RIh
zG9S3F|IEUBW83?2D_`~XI1IJNv2|)37N;l0U{PyWLOXQVNH(Y8H8h68@ip4HP#BY0
zTPg}&7tWcjOyR13heg;8=!)&?Z5?J))nlh(tMT#KTsWCZb#|AP_e?(jlWH9(S9Eu(
zwVpiYQ(>*aJ#ZYgHW%{mQ^hz(@{@Jx!J?#JFZmMqXv#&(MEw6=^6z~13hU-i<f>e@
z;%&($WA%sFU^PD(7lcOG4DM_;!~H5W&vD8`F2u#Cv72M2P)$J>?(ig8%bG=WAQl@a
zJe4neDeXC;7F^xe^6@fct-Adkn{4)vnw;o+@8ct>xz>MKRnFtrKj(62&-A9XHm`S9
zXt%9qK1d1+i*;{%!#F)4#&_?dquI<tth%}V9xJ5#6oLn`j<wzf-t_ykxlU17Om?;m
z^#_dfs`BM81p~*G6{U~A7AC+xr%MM`)y-P33?BLAiZ94hFn=Fg9v%D(c}%+{ez@u!
zKo0>uuVD3TwD-=sdH9IDUW=`)nxOG|_&AFVoY;;~9)e?bh4K*G6|MDqC$j#v3LDfb
z^6+YSoY)h3y7?=HMpNY46?hJneO1A{D*B8wt53zA+fBxlF}gt?rnH$&fhivgM_DeZ
z#hcz&3c)A&3;MNkm(^W>Ev?n#Z?FG6P1kicr7lUMNZRc~5!sKeR>!>j?4_rIYUNmb
zGZ>nDz&u$N@x5%QL^+dxYA+1&4UIjFheGRUy^fJ@=3TGbocl1<0|ePf<2W=2w#RU2
z%(d(Gnm&C++SrEKHER~+n3_nghTo@{m8+3tb^=|;T0O$ginwvTuyX2$Wu4|2ml2l_
zN%xbnWQ^9aZsj)fGHhm{-K_*`^s#t#R$*v8tf)&ruXI_gzGL|!_X5OVccLm1asES?
z0Hmo`NIllE`~`2*dKkl4oZp3xPv#W)?Al2PZ}Mg}Ce^@y$TeRSrPJ?@%;`wOZyF!l
zjfxrM#aSB0%7L>O*4Yl6#pCLeU=Eb34n*Ya-Id)sqYPV`$e<~arfimgvNU-bIZ!s0
zJdOTrHiWlkeEBi0?#Mxj_)3%Ckpo{bzT7le%w^hY=L+mUd@F3hdYrkP*Ws+iV|jjA
z3gvC-_fk%Gr0eVhi9(5olO}f~2b#*t-B=yVThCVX+54wp=R`Dqy29Y4^+VHvcx118
z`c?EHG@tH`T#Z&rmM?xAej2r2uVhAeey3td@%?t~HHPSdjx98gcgC8YGj3P|CFAp?
za$qfH%<`EFb>|<ls_8`rQ)z}2egfT#+fi}O7UiEIg<M4!6US3iuS+u#sUIsV4{_Ev
z9KOCvrX$AG&-c+0ZDv!@5uXZHx*}FCBbWUP#&f&@)_l}GlI}1+Nl%>rkjk)U^7DVl
z^Pk91{UU66Bh~b9irMq_<-Nhy<XiF{U;i2PNuv$M$G*Ch!7xX6U1chuy@O#9FjlpV
zG%f;`18-B&6XWsLuHPbVeIe>Stc9Y_cNh=eQx%{1_$~Rle(m+<V$CP6`#B<@D2-m2
z14YC2!iTcohj*uSEZQfI9ET!2v2~so97i=K)y<%Y`bW5pJ^|!m)@zQ#D59d+EKA=9
z1CQDpmn_SAwF~wq{LATx)K_o9PaB`xZ%h)haJtyY`HUJT8(y<%Y-F<;&TDBD#vF*8
zio!Syks!lmN)fMCUbD)xeir0kYrdV2K#jrS)g6gfNYpwv&f@Jn^r1OBYdnV2=$bh&
zT$ZjGs>z8(vT7x&Rl=RGMfHS5H7~QC$yH}LP>(*Nd7PH@3_5+hhpmaWujaUA#-AVS
z3s(w_$6p$)GY9@+{Qk{pow@J_dulcHjKFbrX}-Oq%N|Z=#e$vj(S{rdj2Uwk0%Me&
z&H9zk#a}#;XqraYw3pmj<vCKffHz6@vQtp`O}UO5Iy_Qh6*nuLMtk*OpK9MntU>sZ
z$6-V&zVSstHt{??VewQRgKG~ezw({@)hZnNW{T~~D4GfC+skh5YAvVZWsMWw9(gvS
z_WQXfnr@73)rC4|DX143cb09}Na^r9zI!Th#~7@w!%H(O8pSFmgJKnaxznNjc-?%`
z>q0tHRa~5%>M*LA&&1%na$Uf^GAw_`>ZP(q`!Z;bqK_6sEC^SPiAak7492^x;`N&Q
zc~AaM<~2&u9jPgEF?|23@I9Ta<9>d1UTlv)e>E4jr_#|i&M)1o@@>v5tiiVD6^>AK
zPlV@Gg(VZ_wXiVk31ZJ{cnl-<nOvh?{C=&j<}4@ea@mD{WmmH4jw|LrkJt}q?3RMv
zuZ8{0Ru~ucjN#CAJlN!An^}lkOW<Yp)@HX$a!cVo@Ikk*L$PAt$z#~Onsd;uVX`=<
zTF2DaQ%BF(C`^hztnG4Zl*mGeiL$kKfTo=p`rNzt%vQ2hPmJ$4J5D!Z4cq%F4_(YG
zbeBI*bZHL@Y}#|-Q1whvg5g<o;l5rdxwhuP)}yZBPoRwyx61K0XT<sW2Ous@{y`2t
zi`f~cinu*NhI(~y7C*acT<vSo?3ZaCDR~KanB?~G9IRX7q<hk*^`U(CaadOM#f&{4
zdw)%4OUC$YeQZga*|xBqj|gnZ2bK4yXBeP&(t(Lw9F3P?Icm2}_{(LsqQKPE9y+p-
zfu~5eI3};=^2U9YChSYXPhAS^iOdPx>Qcr|t-<DtZ?w7CtUI$4Ln~~()tYbSU9a1m
z`>^~Xuw^5SvvG5vew%FEChEJoV9Xw*JC|x47E^VBx1C`)y3*LQIncFD_H0^osR!w6
zK14lc4{{UdE{sQ9nta(Dh?`2jEcQl75$!_Ug<M5m03IYA2J5;h+NbMs;iC9U@gT`d
z(7tLeX4$vOIG0Y7&#s#-Qp*E$m6KScX|iQ=AUGzYV=5X@6Ty3eTBn%qEnY633u1{K
zo(uPBhJZW!!PSho=mvR3cFK4^PxFE77o1(L-QSdd&*XK9ifZ?7^><O0d|s}<O6q8)
zDztP+9HR7^UuBGz!lJ!9IH#yNn_(6$RYa*`j&Wxk_EC!5>_Ydt1dKkfFy&&5WZ!`S
z)Ed==th2D@+`z1VTxmsc>E7b0)H464pw!M|(GytcMykC7x+4CXqX+i8Gk)?`I?vTz
zzUHdy)sQ((f60ZWsc0}EG}XHVXy;K*U+%^h8Y+3TFrv?Is?P3-X8U7x<(M-ubJ?q~
z)_9!R39?^Dv0s-$=^~w}YAG!<Ks!~9VX!o+OfJk#MVTo9b1om1%4lp=7_@E|hBz-L
z5^qa>ayj<nb@zBv#!I8n<U-$6RGQ)FBO?@F$?7AmN~C=vrsaC029XB<FA|Z2Ke0ir
zn(I{l;^)h8CJdPY_Iy7Ft|V;EwH~U#IQ>Ntnnr=ih0v*}Fd>9Kt5CC)epH&L_D7|j
zYGntO=ZPTA#qPnIW*%$Le6897p-s<_JOHlm%Y%7+KbSDavRSQ)rngDU;KMZ4$+^&0
zR)sRQTK6f2A+(uJf|B@BkVU2pn1ZM9@lX~)ljhZcHK)gD4qO{+{m+6XngCn+EI346
zbl#PzlrehuYHX!cDR--!l8^@1<ujTVVzU|J<6(7=uQ<+ysu-VO3MwV~EY(Yw@?Ck!
z$Bms4q34}(>Wg+kMaL&w6ztVmYCIOuK4Mg>)mSi|i5sVD9XoVd1#gU3(KS*^M5L+V
z&4q}VobAsA5x%OyIlG!$J)_0q#i;1H(E^{A%O5dpKNYknCy;Z371p-0>b96w9;~wG
zxE>piQ*g`F1IKwmW*ZH$uN*JMXSH<UEX>kfSEb}KWubEM8OM^-M5v#Ep{j&Ms?|?Y
zWrA)obg6e|-C`rEm&Nnd_oCy3#?yR{C|sMc?#x?Og>RQqW8r)`{`x>(pA585iT$uS
z?&cVppPITN_orl5)%k^X)+wOYXTR;xIMC{2te(|=-OQYty=6RHX2waJ*F7Z+S}mSg
zrl|9WRmQV*6-GfJy2fd?7E^<tP$YRwH5Ia?iNDnqlQ364k})*4hmE}yZ&EwJ+2}4_
zz$<k{?%-`k(47RuhxhQlid)oY6SfT7_%u#X-DOwe1Thhw_Bgh#)8Jf{n|o0)i=5W(
zorD>e-02XzVL6e<PX`m?w|cs=<`Ophyug>54;mV^M7%a}Shoz9a%zA>;GX1O;-|9q
z%>z~3V9|27&MM>(chmY^i+yW7yrKHJoI&$Uw2OY$E>VwsJt*c3XWvd`McYm?mLc=t
zjoEEC-s)(3zW7-%^Gt9BVqHWWuGCD<SMr^%XZ=u>H{MNuiE?;sxAMF~t0p&(rOLa^
zgR2-_u0$T&s~DRKI<+U8Joa+&gCJ-}zE;_H%I>Pv=*ePmol|ItJZKhWo9k5VF)k#!
zO|LX!+)W;&gIe8M4BM`GF?vTl$`X7^vo&LO_S_gvm7SRfqcL&R5;59kYd#XY@l-gB
zUV@+(#9%eL-b;o{Y)H#jQN}~NRJGMC%OB+T^Q+F^A9~~Lfn=fWRgv?r7yondy;!IZ
z7LVkoJ^A^8JkFUk`kWnMwfifd^KE4X$G#h%ufsM?+v8)6vD>NVNXPA%C~|uov-eVZ
zj%6@zs!Yy2XpXUurh?{rg%SKojy0HmCdi?dmNVb*<EW;^OC&x?)xuJA6j05Hp7dKH
z2MzwzGi%zN*XYvENc~UZ&gn;Tc5#dawHkd6#Y1_}?FY)JWneH>erFyGPBp)?i&4L=
zFh>=wJLBSwFznoU!jH>=vr<kH?t8*qZtFKy)@UBAPBm+^3#+SGu{#1`mhjLH6ZpuQ
z7i0?T@8S`w$4l2lSeIEU|B}i2rTmN*{ziCN|AKDopO0~0ezVciTC%t0Y>nFyDqn6K
zm&Br}vRCsUGsf?jiY5C@`bs>I8i{(Z6?c-i#WS&PT}M)l7WI!#Qnzs|_|v+=%L;?m
z2~l6k$CmXYO?PI6)lbCit((Ey-KdJ;+)S7%|1}TZVpO}S;Ehj`lOi}Vg6JY_<3~C8
zy`C>%nvby$IdpVvqIL<NQk9{b)wpEqeUvD!q1KHC+x;Y0J(8aIb*%SQY2it?6F62>
zjt#vZw58?<WPyAwnF_CD-ed)L>0<uAkVZW!X%C3eMsn`~>9TC|>;luxvUMnQF`F{>
z0cK`>;O2e6_nZBn^ZU?hdtZOYx7~#KM={YGm>@p?$YvLcY_GBfVwA>pGup5C39r;5
z5ooO470UIj1{dY|AoefaIL<`Z{iBL!_&SzW$KaoGE;$+XT0Kd3M66}1X3RS_yTCH~
z?D<4;ogz(jjH=AUb+H1PQC*)|!!g>QD~rRO0DC6yMl+(AAFt;6zS=9=`_QN|F);cS
z!1Oxz`bj(atp0Mm>>Y`!g{_#JjDIg7(qpWbb+|G#?Z})sU6QjXrjuz{NBRe`V*h@H
zRPF89w06nFg?GW4>QMZTW$>=*fLhNX)Q%sw7Qa@{J`${bl4pZ(YDF((e*j6ErP~k5
zIpafR<wNaMIesD5$c;9OJCDsX%!9TVZd}EyW9|LnyxK<Fo}l4e@Bo7<{}5p%-=6%z
zkK!N0JLFe%_1v)&dC0uy8ANc&$@g&vKlvEvl*iYyUmeRAzBzqcU&(XGj5?G@o>j=@
zY}S%aqXQE$pZUJLH)7Ce7Md+)>o{fpMBH3*B9zm`S;u6Uj74aSve1tYZFZqOtOSHQ
z3sEaEt&(La+7p&2_yirAxp*XKfd|PrI+K6e2V7D2qdX7fx;h!NC?5)v-&I(?_2<<#
zlJy;-<A`<%uUFKR#FEs%gzdo1VDMhlevli3w!4&x!I&L$Y8ZSd2qVYH&LD^1$f7W;
zQTs)wf4?`f;*>fV*wj4H13{~zxrsq6RztZxXC31EVN~yUb2j+7W?wVQx)<y;IrbNJ
znG5l^*)h&)l?6l4X*^;%PBY5=nj5$*Rc$~Xrj5yL`+QN3zp2%&bX-C4F$Joxg8V?P
z1aagA;r(ijs&*Cwk(_}*G^oA*VB!0<3;upFBi1xR<5IKKhj!Qlv8gHr@*p-wYn~cn
zAIloY3$;#3SjXy9`b?}E5{RVBiTewTYc=TIY~99{kD{;=oL4`ZIkU-`=sx9or!lJ3
z)DZYW7)aU3#|rl1&vG7*dbgUr0oJ<k2@0{J!6nauw@mjn%xcs`t>d~?YF#00Kkv)0
zGeYZ8+}yrvs@(rP92paFni@iX5(^UTNZF6?=3Q>q1D%n!S)_rGa=9=Dzf(inp2QuA
zQ4$NVo+zde)mf{qrTF;(z8wnRk>g<6k<YN2;V@gHdLNvcWLZKnnsIKfOO>G?gO&cV
zl9)R*H3a@5_&XN_eyrH;-Qr)BElD;F`Uu>oH80qh_3rDR<T|j+vxtIng;s5=eM(<W
zjfmco$3ZjsJ+t+>s`GRyh_o!3;Y=9gwZ)*%W->HB8537oH;+CU1P`m#kGAqb{=s2H
zA~b6rBzz|b0V|*6JNn~Zg$JS|T5Ec9@la|iAIS6Sf9V_D&)e;U44jy{iPf=1jb7ZA
zs5t9A^vQPdO%o^MPvCK<Lb77|>6xriQ$&YF7gM4oX2q{!sF-VWqGeCeg4#iJ9bKc2
z1M*>BRk%_n`Mr1E%jbxUn9sBeW459lGO&I6BV$}dE+sOi5`80^rQQkhq2NLDGu48E
zDf~xLGK6JG`(6@#{=wr@u>>_rM@#^H(SKHWFK=^#+sU<pG99<XSn6Ht-pxq8qU*{a
zgH^`G#!_NuOdKp`2TH{%^w0Sus}vst%}zCNdgh$T%58Vgxmoqo;ctp4DhkfGj#n&B
zo5t3P`8>OjWsG98>CYvs=rVkg7;KebWql{>nVd-NL2U7!F3ak@c<>jJjdeJ${>o45
z*2u1t4aP-*Vpi<BU09KKqpF~pO2p@>SS)+8>$`Jax>mkE>w)yE_)(t!Jn8!125ah`
zbdiZ!JzaZ#dTYx3k=?4lMSl(%7vYJy53wkUQK(mO2=_I_=IiFsN7usYe<N0rW*Lx|
z$4L{^ZCD<>`QuK>LQ&Rd&Ay4*Jvnr*v9_3@NfosIXc`x-Nr|Qyf3FlYp#oC_hE{CV
zEBxkHVcXeD7SFsX-1JD;j4mrT<vY1Q=W@+aEng@l+QK``CjI%C9dEM?G!!%AdLpI7
zOpK1d3NtY~PbvnoO2=DL^GNJORj_?wA+%z=o8u~?qWUiN8NXN0A<Ck@zeXWJ4$9S~
zpk_OL9mg>-`{8ErGTh%E+c_vDR;JS>=$Z6<rt=po-|rNCQ_$1(mz10_ZGXpBYRIxK
zA2;TAU4J|>F3P)#Wnx%A70d9c(octT52#ecHv3j0@^r*&M<Vqvdy8MH&UbzsBwXRJ
zE)F?u1S$WpSH|qUo57L!ICrajgZ@5_o+Vj^?mX^X%T3yBU1)kIIKqc{Du_Z=(B3p;
z#b`Z!8)ZMrv)xrGnW`l3CaxxFDrhMu;(sUVEQu1h=Y@DO)TPpa_4|r%>^r`WdNX)0
z*mZBkdr66eZD1U-(qi&EHiIFvBZqKJIWhk`RsKQ97G8y(O>)gk!H#MI&&B7Vhq(3v
z#*QN+*~L9|w(t!q0UelbihcLI>R`N`ih!-f(C4@rWSA|sGuRfxt}MkCi?MM_!v~u4
zr^?>?O)M*|mHDpnddR)BM{df`JMuMSg1zHdb`{%0%(HeYIcBHpLKoMuk`19l*rJ@A
zfICs0N2h>>r&Zn<{lxH3Ohc|KX^IZI?av4)8zJSy`|m`Z$WaDD)FRU836+`f0#=o?
zuU?8>^-3%#?XF|HW0z89_LX(zL9aVb>cN!Y%iAtqhMi@z8Nw;$#Psh(bulahF;qgr
z86beDB;JMkBt+}|M^gIk<5oU-{b2m5sN6rv*}Y`S?aM!>X5SaR?gx3CPFhsvsC_u(
zRh!n%IGp60c`i$>oTxwNm4`pUQcy)tWRS#}Mlgp}hmp;1mC1V*+MJ)y->9N-Jz<yP
z<@0R10f5kYo!L$Ch`{QhjQ(CMI{&ZbpfzoU%vVuo19qVyy$58zl%BNPpR;zV_fm!`
zpmPcBZY7`#G?Al8HX1wsq5QM1Q)a6fj+)tN?c9Q&1YZ|2igsSyHq@9s75ZE^gBP34
z5TqD-uRk+DHNemvEe|R5Pjo$f4I%W)IF{8<p0x9Zu>BNMT2Dehr){lUE-MCOoT4Y<
z3_*%ntR)~NMq?}=DfRe1R@zPRHn6--Dx47M)Ea_q;}6TrjN9`z!y<+d^|FT`q?}0q
zPE_=FiU_e&FWi|GFU4ll{uo$rM}nAh`A+SCX3^Y~E}|#mD;<e9Q%BskqUx^&`Z9X{
z@(@&&lL4?ZDg$7Xxtn!gMsbceb5vPm_&1NlE+h9J&T;1zKNHN*9o}K*Cqd1jWJ>#w
zZ!2!@MeUlKWuu{0H9J+tX(<}OR5AnVxZ$^Yhd;35RD$N;w-Xm+tjE~fo5lsaFoaLa
z$q|S<ophCzwpl*mbTRyR&5$vr*+)ZDGpl38*VDEWCuuwQ4Mm)J>E_K0=Z|tS1$HKr
zDPaDEMLMa^JQeSQ|NXzs2*{r$GadouME(`UL$%>eG6nT1bnDYz$@}7Gyj=XJMAX|=
zW2$#?BD0<-N3<~|F18_$f7>{voT&fKWTO6il4bT|2Y&F}?Qb(~oZUlS0F_SV)V~-L
z?N)wNf1l-ULGgT@%QTpX8nQ#-7d_?Jbv^UXtkF26MJ=^L27T;%x%Ry<l38*WGRk3<
z-JG@`=C-iZHuTrfis&*lGo8ycaJDDC0<rJ9`pv*m`u9E2&VEU1;f1sIHr0^{h3s}j
z7U5<zvf=qKcPoY}1pzS{ND1oL&$9YYuMofq-q!c;dx@IR9~?`K9LiJqdVBR)N{emA
zLA@r;Y{4-&C?}R5XUUd;gI~p3dL^sf&xWM>*y;eVr5rkLE`F6~?#Ux*dn|8*MYUZ$
zX73i%xnJip)UJwQBw`{|)1Syc*8Y)r4weDAFWhihX=BzunhZ!X?9b)7ORv)8D?ta*
zmLnPIlRRT7^(g1^Pjgy$4a@wun2hPm#y;Q+#HB}AIec?lA_L{vUCz%(aUJ64ms8Du
zH>zXRD%QDPoX{UeIftqjJ)6bP2Ll)C%co_Y5^!NQPiTiL-xDb(PJee)E&nE?FHO$)
zQC2z`kq5#bF9iv%TkLcBi|c$r4VZRNUdJY=(Dm!mbIUeZZ@0zXDMt@8RvMatsn?aF
z2~6dbfHo4T+_W=fQ3fu>s>6oU8tJBQgcV13v((;E2^?kF|J#L<a<T>PM(sW&+HQ2w
zpraq1H9*EY={pM&oCk#`v?pC?(ABgGy36lDYpXxLoqF50F-<x70e2^pAJAkP!_dAU
z=xL=cTnc_P*T0Slbm`U4-d4nXRb)0Z-cEnTV7H*m0G&(7?<|pZ>RHU)>NRTG-r`oL
zwykH-C=P#;XKW{OsMRb{YeQ=qf*kzvGQ1k?^Dz`To7ET4pWln7u&nfHPL$;*jr+JB
zXxMP;l!Uv2rTL_Qk8<BER;fPGcEx=(->npk#c0y2*lCj(`@cjd_#h|K)az-$U9<P*
zy4b3X@}1z2y65fH5w<1wX1B^%Ed?zx*|TM#g;UXp{D2#3)ld<9Tkc$bzqtSx@Be&8
z{qNgpw{4e3uv<_rfzD+LcAK%mQY!fkCEtlE0E3{X9b6&D@L_+mzs$(kT)o=RIL&TB
z75_SysUo8u<6P~>7^?L755&&mY^H6rw6-Cu;IE4>MZw@}jNh-LgrjKdvcN3&%b(E{
zu+mhTzm@e)-rA=teHq*JvG^`0@;j*E_vUk!Rpf?v&g)vXTlkc~7cwFi9Isf<uOr8y
z&QRgcC#EtW#$#-cV;=oBVaDFmu-<<;Fcb6Hl;EEX!3<FwG=Put9i@%cek%W1_m)X|
z(Gxun#p|Jm({B}q(Cyv`N<Ye@mos*R5xVl>Y}Ff*`>D*fyN|0R$bp@y`1V7v^P=+o
zQ={jB-~{}9n$aV7p!qK+dd7AC%Yhzdw5`?}`2m*|$I$2LqO#z$s*{c$WRG&n0B3Y{
zXXm(+GQN^$QD=?4$Cyj`;&cuF8RYo*zlZN@+uAZ~-r^_sqoVumahiL5=o9YZ3pbY^
zt61qy)LgnoYR+aD^Ngz|$bp?PeE>HZgBij+^vFD}`UQd=d>=a<%3tGQRQy-b5L|xS
zPckZ4`>%qOzt#RituBwjOUG5796fii3;$OA=6hy5MkSGXW^aVazP!59pWTc=v#--2
za9j;T4g@lz(B3vxzp0Htx>5a0P_dM?PM;~N@6Zr_SUhZaJz-pOqT^pAM)$QuAePk#
zR;zGaX%ebwoD0%EN}kMZL1#>^dYg$Hi`WS_ti{l0)*h$1f<q&8@sOKK8H_frCt(ge
z#eBxwgC|AUQn-XlR8Bxcdt1tPy5sy-S$chyiT`oMS~F_col<r((DnXhRShsauOJ6%
zVydII4>i<zyHlm!RO(wAb#KNHnnW%gVkb$|D2ByjqeeEP5T{QCL(G%B1ht{&xDje&
z=(8=|USo}#4LUq-lo~ZL<4qSebL7ZkHQRum@sXpL)!v75wkdMd=A1cpgtAXecstl<
zeC#MSezqxg)W**oJ=!MpjE^3rM$a}ykJ{*ItJh`4kIrg7+8jZ0Sr9pOhw%}l)F|Ah
z2vQ6R=NQs<S%u?cNU0IEO);bxM9ono#~rJ6>yl!xXnEuMTM<P{jhk(XBK5(|97n3-
zM}O<K!b(EX-6V0O7!58~)3X_c)KXUGhd*=7tbXZPRZA7RcHLa|tBf4-)@;o9e%Q^*
zBBDmF1IgiBeY6!i9xD{y7?;108Z$9WHdV~bF{Eu#@xadb7*cBN#Edsp?936Q?a>NA
z&-e&Z%xYg}A(>r-|70@?SzJ>^&m2G6CgvF*KT3_A?TR0LtU6iI9UI%Y3p;cqp>B_=
zz4zk3(MS8e{7g^nbMd*XZ^Kf4BkHf!LoN?HToW-@@a4-oWw#$6{Yj0X?TY>k$52;K
z2Ca2H6fBX=dRgIaMwXtiT$&CyJ_?i?S=$u_sw1oX+y*z_IkUm3>)o2V>2YSQ_ODKd
z+s4O}QX_D?;z@2rV;{B=IOjENmsT<E>=e}(!ga=dv<halty)DJPx{DQ8*A**%^juL
zfqJGzS<$7qb2g@`@~uYBoY!F3@xPaiqdU^&B1K<S8z;;dF$`p*X}8xYa1cG~IjNQY
zB#$a}jvkGiV$A8SsCK_p-`~lz+-Z1zuaU4?w<oXR>d)!qrTrzpm7h47QcofG#|(cO
z?Y<*!hoAeGD2{JPo(w3ls_o%yW8;KBmw1%etfqz%Q@88qLoOHJ33}+AdM23h&v&rX
zQvCHjW2W76#NqdPd;Zv3ADjPU<D|ySRC0iPW+6&c*Qdv$g-+jx6?^DuU_QR;jN|_$
z{AtY0;;g`bukfRNW<d=rk6B_gx)MAYA0<CmJxe(+=s{&K!6sN@GoOTPgpzxbC=Z}K
z8^aCjN@C-Lcd&RH%w`q3zojANrSv#`d4&@^mES85=8swr#BLjFW(`!H>*^3}YdDQ<
z6|=|p!@?A8E5+tvl|@6}YxUy$`06tzt{)Tk67fS!u30=LY*tg_ho=36_Di2oEUL?q
zEHSHA&OgYLg{CaQ+OvrN7>g-ABBsa^b$|P{^rU_zjBzd=2PbBqjl{(4Z*LA0Dg5p9
zn252(O7kK#B1nDdn|b|<ic`K94JVANjWKRX=|$VDre-DC`ag|W{l11;-|gpkp1=3I
zpS$s77R|66Mq9mKjy!YM#z~EW7+xuj1zw0p@V2srEL)LN5C8Kjb5Yr0xp-2YRE-+j
z_nd(lE!V3yu{)2eXUT<@snoRiF^WC$6^P|oc1Rx%nRTY?*O~4o(wSn`ZoJN9vznR(
z^;ocQd6mVaC(_UzhKfciBj3tj&gEy{cIqFMnDr)SQ{~i~Sc7JrjnSLZBV&qs(=Z(P
zNSW=X>$RJ}Lkg`aJszg0HThn~3(;QxURhD(c4(}E8hE02v!CJb_V#nPFKzi0{Iv|r
zDup(c9xqer{_p!4*p4R>uj6c{SASYmoaKBjj~qu?RWqBAmsbWlv|3|)reI99dc5CZ
zvznUU;UndxV1iR-539Zpk1DT&lc2}?9d-N5$5L1|oO5W6xt5Di4y{&bl!%Ne`W+xc
z^<1rCqW2IPf@r$*X`Qj+R%ZRDDcD$GC52Cto<*kUlNeU8sW`8EMv6t{LiRxUk#dld
z!W&7Clqq^6KMHf~$-iGDyLP$wNjL_L_m;#6UsrKK>SV`oi*H@k?XEexUS}!$t(&b(
zzcn29>ky=IK9EBkdu&ZpdgM$!y1p7AeRZ#Ok;FM(Vi@6jKAe0lI57ooOuQtf`&GP0
zZ?g(9cxhQERLGu+0<3k>zsqkhik?oc5k)-u<w9!&eZJ_9DEiNs8RdE-DfGBXfs~lO
zR`E!&SxpToPX!kjf`vmt!{aN2kjd_^_!$$W_g7%`nYA{CJ<?-himI0%UEC8L_(C)<
z;wOFWDj!2LYg|8Tq|mz3BV>wNSGxnrUX{58PN<nBS8I-%sOQk_GnfU#U#~yf4u7Q3
zx6-3yiuzU;I_fO)&x%phLm`&pGex(xwa!PcbBjOL99y(#m03q)v@B4PLd!~zk|}Cg
zb<66hpaAwbu6z(qUGUd&HzxdN)G;vYyuNDXe(vU?vDi?RXnZU&R&9#&%Kcdl^~z(s
zmvyt*uM{Yv8>)cckc>ojeeKb?tgZ0}5(RlL5%o`ELA{V?k%e+v*;9;iCRh3EJ&cIQ
za@B>{VVduCRJ(c{FK}KEU9_Gq_9c4rM1FoCKka+3a9?b|ALQ{9d3{bV;+-7JJqUdc
z?M#>E+6;}bK9-no=3TGboO|E+iLKx}2^23kR`^p`x1wzw-;t9a(BbSWJZcFVF>}xu
zqjrKrC02y!3bhlqev`F(A(|M^<~d9G`9M}P%GiOo&cBksfHFNZi2P%6D(kog@i|aP
zU*0>S`owU5Ik@V=NqFsaU6m4DHr7z>%wZw?Uizbp*@gDKX`}0+Vms|TN)HuSupisa
zD5DRZ@opDh!fUAODnrIlzsZn6e`*_REXrc=&<|xcyD6Z|w-Y}K_h{cCV;;w7C~;^D
z&W^mOs*Q>Dyp_MfZJd91EYH#ShGuo@i1dKeE_nTLI9r{jI5>rGdRC`(lOL0{1M<@%
z)n-*HN}q`zL}nZQ(2-b+FNMX9<hSqSrx)`5$)c(IEu}LCdih@EMX4o;B}&AJ^CIvZ
zk0RK=ZQr@or{_1^i~20u<Jg{U`+w-(cX5cDi)r04*<4*CHD@!#qq4oeytN&JmJ;l|
z$CZzBD*xm0=sH#1;!J*{^751X?Yvt1uVu~S|Km5=&Inh%tGp@ow=_~jr*3Kuh#V<9
z{X=vTJ>wV@y{am5&SYe(&*{fZc`Za@IAIIxbHUfxNNXPMm`bG8U#Z$f$<F*%UV$OV
zXKP|@{5dK9E2mTpXAZJhu<B-T(Aaou9*j&S-r8RML|rc{W`R#Gs*LmYvmOb5oCqUf
zS^ZPkrGKQUjuEVgXM)6Yc}+Yn#$^`fmHmf2b|J5*EZO~cY%AA6cDc}N>YbtR*?5%$
z@ycv;pZ|t%kF(3b=WRLNDkgh)HHY1h7yz1N92a)kcWy?hEJe$&0CzVQL+!<}QQtgR
zjZuC}uov4XjKk_PK@nKSD)iTSU(Fqi-VvP~Jp?P0P6((U{+Kg<-pQSIHoAFQY4AfA
zj`IAinBE{$#?ON*PP!?X-3L`3>ld{(KLkg2g(nP0Zv;c1DyAz9N!z1V*qK6O(G%nQ
z#B1g@tB@L00($I($v<S>{w&JeBl*tmkH$tt5cZUIG$4+v@mumR%;&=5LMPYL!+4JB
z<m6^tUMU^Ki@D~w`di;jjk-md7E3#k)>zo8yIXlIp-(){s*BlqyGAlrGJFrQ=UBTo
z&X`D4dPGe{|HFqml`j8S43^2XC;31R1qHv$dLvr`jSlM#h484t8C7_F>x$~gU=OUv
zm+E6L7dI<pgVq!I$LkYQK3ddyFNLiKu7-?bD^Go;d*XA&=!RWbX!=TbWvuXwx<;}&
zjYU-o)h|7&Vn!^1r^2YR$ZUTc)lrjL*(38{Mgs~TC%NM5!!arJy_mJz&uW{BzUS}!
zbbrQH<J|kpE5;!rL_C!og)@27dQyEao({XdW<4CsvtCp^Mb5=i!`eeT(^_z%S7boA
zYj0L@*ze_vmkq|~>nWwS;ci!bnnJeMY8%dW_Rt7j?9k+ydxIG(70;wl<I*FmWHs&^
z(Wr^Ivi|X4&MGXltuxlSpMBu;AoGk|1d410P|0)9(=Ha@$jDvUu-^z${T$eDBJ7m*
zT6XIYm3c>2Va#XP9;dkqw*wO?6t<ZA*^g~v{Jauuujj%9m*T(d%L*o23$I~c6f<Hl
zcr$f>$DzXC=eyUw|BN~c@Md00*DLZUH1l<H-it;<LMuNvcH;Bmx_Ie&eI0zQ@-(>^
z53mHh{aX3)L`>lj^5s_d8TAnq##mlY=bl87Vt76`a#BS{%`P0GqwR{1W1KujM~m@D
z;#tRL724ZMK*5jVZ|qgO$jvJRe30*Cj$(zmv!K2Zg!tTHctPb-E;^KFxaXsTS#};u
zcSsK_0aaLKq0eknsEV;#x)`ZxSq?>&jZ+q?Vm_hLP*rCGdR^^_wS{JlZtzp}GyXqW
z21}`DeJNVOeewPEXEJx(vxyq%iRbqGv+9w{3Smw~AOi@kn=Ym|D^JTQ4ftN1w{Y;M
zpM@_*gy}cA0w$zJ<AeM|U1wHx<vNU1f1fz2_LlEuq+`jTFs|*I^<S!2UiV(ruhX4G
zv!{69@2i~LBYA~9mByBrG)`SKmJ97KU6?k8vpk5qQA%gmNQP>g&CuNeFKw*lnVxfF
ze8(y84)dPS-v8!3LGAGC-xE^A8q)6xF(a<p6Jo55bzZ@~aMGplQ%vU#-wv-^412=O
zaCtL>k==lq`@ID8oD3q;dYbDku`|x(dGLF^Cgx3LH_%V;m5gB41Psb+)uVHL8Q=Go
zhgj5(@8Dj%-Iz~ewPkK`?l`}>i#OejQhB|`<vW9Og7Gp_L?L1jvTl{vyK&g8LUzt7
z%*9w)>t-_)bH2^`RPwVpAAr{ZNnnf^9f<QQpY3^?%jG}QWpQ!d8L@KWeyXs(5c~h-
z;#(OD?THL7jbHFuj^D79eH?``Sl>132u_2-7-erY3eDyWt&AA_?MCegT_dHkfK$Xe
z(jzZMHCTnbm_0TJ@_rBm5I+Z5?<%x_VKS${+xOy!(v1pl6mO5JGyGJpxFu|5*VKJj
z^>M+icE!;sBP>VeJ>A#2j$9Uvs~q)4o4;SEk4skaZPAbT-{mKh@y{!=`k6m7+f<BY
zck$Pe)ifzFd%d|~@KTC+NqWr2?5e9UdtGcv)a<#S50tVeVB=z8zOK5)J(lmN!sNg-
zInyjuQ*jg(T6ay?Ds&=rW5uq;M4!sId-7Kz_`Ievu6tGeomy>Gm_Qk|b(Wd4l-&d6
z414!i(b%3>qxrdPec85-f1jzxb1k@y>Cd?tuDyQTQZ-ke+7wf#xC*z|#kDU573YEl
z@OAR1_RM2yJ%UQLSN~`s_o+Ppu~@E_g@ZK<qhT4lUZ={Z^}KBMgExX)&e-C)-^tHh
z`ANQ05pf{<1o_!u7fdQgG7?u{6)V#DNoynM{;(%A^l^9H7V^xtF836+Wd|z{wK4nZ
zD%4&V+oAwb=k{1|@LtwETub!mt$3-Lw*$-ij6}AoUPHCQGx?`>uwAG1r|OT!S)*Ze
z`LCba`@CJLKtq_d>F=fSK8MyzG-oq3{-V|G<)JIC>b^XDxh|`www?=1X{Q5}R~VA)
zZnbCkt4JnXWF3UmvxK{p|L`YOSyisZVl~UR-qY0-S1e%qjuVIF*<}6MYpN})9gK_}
z@i1XbUT<BUQD5A$rd*Y}tFG1k!@WD7d57TADXQ@qc=!}^Cuj4?hwmMB@5{>Vpl3&T
zC9T>!uFIm{7X+RO4<CrPNrgK-^YDl@E1f)c)F13xSKsUBc$mJW{xa6E?JDdb)ca~?
z20rnp$__rNbYpDcqpR05jI$rqUst=p)Y;gc&2EJ?9_kj&j&QeTX@@_hwr6T<PGd2%
zhg-LmsU;}UTGn}mY^LdB(pQ>iB)YRY>?cr*t?^d&qjw9{*=)rcAB9#)S2V`$3YNtX
zqlR{k)SS(5b}Tcu=}uIo(JCayFe|K8w<cYU$<V0kufkC0)tVuX@R_^<>eBm4TT-hU
zYnSK@8Hr{k!(-ZkUDY48p?wRQnUX=Nz0<Id8CRn`+5-bs33mG=YnJ{Rbenb-xPKDX
zC;2;mbvqu*7>wY*2jA`;!lZwd*wBBKQBmMj*TOdNM;*_u_auKb#va-XrmyeJMXI3h
z$royr?KER-UL7m^`K&`yJzK(`U1<NjE^L1z*%0;GGjRI&Du!ZuF_Bu%-_hRFbbI<B
zkHD+-m<`#??*+S9xr`cHuZb1v=U(XeT&+j~<(gr99^pl_SH7)}8&&Pye6o-+zjhSJ
z#kjWqjlIi6XUtxDUFh_gW541=avaE(cq89W<Pl;nFd*?+7;!xw{qg$pn}2P1mt2QI
z%lnJ52HWG<YT6#l6rAv7yVO{m#MBS=V=<fEP!@~9*t!|@u~7X;#Zofy;31Hq80ORw
zA|rGY@K<yg4S6&0?np!}=5yN&9`1;Z8OC@{-oUy`g@>3}{<_uIw(4wlL-D{n3thWz
zM#J$yEJGt1)>n-VYj|W}WO#?cyyzI;|0yL~#Pv4Fi4M*QPKAz`nEAT3*hYuVF0{f|
zSyh{43*V~3wnFPC3I#(@qxqkbn?_D2QTBcDd&pJ8?-|~4FgH@-_U_y~5+C>L!bx~{
z?7FIH84ghiv2<9!Hr7~MEDyS35K<z#*hjSfSo>yzv6~W6qh{i{pzEg@TXILJ9zy#>
z^KdGy?e~2&jIMF67hB|zq(fI+MoK^Sax<J7f2k_KXHLe;2SJ+FRp9$jQ*kae6~u#Y
z{rNk+sE8BmX<EO@mD;C(EVOe`-5CkQ_Vbi{53C-Y4zIm7FS&KEwfeh7RXtp1u9$k|
zoRFQ0t>UsY`r^rEI22Et^p=!0(VJh%7e0}COm<qL+mBagMf=YIflZVxr4O7|3~E#i
zg<>hW(%K!vsqaVf2=QvoKckk=A$3NiMi|`gU@_)05Sb#*Z1@iEnnMsdm3|s+MCzHu
zs)OUBq3^+0iV#ja1yTIw_uk!;C^4~K<G2}hL=WBvb*L^IvQ*Sjzc)5-Ixp&CDhyY7
zZkyymb`*CyDtd>{MO~+YQ^oUp<*yJyCNqPa4b3cer{-za#cD1iFA^1!h!!3YC@qKU
z?n$;mjGElGV$DKJsY7aaiI7#*h2Q3EhAJg@l4f5pT6(Ut{E*OnDgkx$mgiJskfR+V
zeijeykzj)UFl0E5^Tp`GMn)7PEd^IMs%&N-=Ra228z1G>$eCK-HT8x(L+gOM$1-N7
z@<DUCctzV0sM^)+4ql5_doEQ@`=YbHkm`&V@|zodZ}C4wBl<-ieO6tsOy2ZN!)vFF
zOUGn*m*nA<6NM`Q->QYCi#8DFRDU&u$G$eLKhx0ItFRuUtFD_@J1$pO`&|b}bWe1W
ziz=%F#@rX2zZ7fsrNmwp@6-!X53klO82eatpV*OJ2la7}Dw~&6XW>hB54!OC&kx79
zZ%d7XDo8g)PoSGpy#n`(h`l+4uiLW2$3&Lf;}~OUg~4q>YRouY+~*Ll9^>_Po59-T
zq=9q@W3=#2xNa4<BYJLz<shq$9)GPjGa8*GX+9$ycrG}>W+g+{I0=gr1yrkZsOnKY
z^w;VqY~WAT-|8NwcJ%+$6K_of`|lw9`Lz+^*0nNO+&XBFV@OM5sZKc#sH@)Y$Jj_<
z+~+X_mocohImTO!OPzzSt?J2_hC$UzEssAAb8652OPCV7xi9B2*8@>{*#}ZbD)a=I
zAxO3rHzSZ!-%>K;SOukv8Eu9`nQ`o#+BWBE1Y!?S<8>lm|B^NDs%BVgCsnslV)BYa
z_|I~T@$+8G<0wCNUJZ{pg_Xy(+SCwi{-0B3&EKO>6Eks)`dG%cSclJqVY{`CVXbFf
zF8&Xh4f~B>JH%_=l8n%I@;9eXsSf<4@`;^_?9X8chU;vMy&Cg5=VoK;ZyKXvb=l6%
zooT3Uq`0=x#xrZoz3t1a(~epm3ZB|A5XC3e=BI*$x~2=7U3?KVJB-vvQ)NoWs*gbz
zC`CUWsMaN1%DB|C*T?tq)feObwKF!k&wQSSCbJrbV^hzsPRYA=B6f%)`(o6eX=v<K
z7Vy};qYwZ3HEvA?R6HqylnV_(sH60bsH4!>76s{8{$WKM);?4jtVCbl%Gy8+LK)&a
z3b5@0O}tZ;iyf_aedWC-*$*(iUT>POj?;Vvt51SU&3~ptIdvE6XAjRT%Ih=FEbaPM
z+)re8$EbAisJB^74eRVZV1az1y$Xxe$$}6=qj|!dG~7JhzK(m{?fZJV`H&N@@L=E1
z9iGPUGwa`YevH+e9+k{$3aET3JZMNX9`n)3UIdSVSKqhAul!Z`@wK41nG<L%=huW_
zKfCy*TEBEU@4~Wg&-S&2nHQN&+DE<K&BDb`Rq5934BbEIL8m>F*>U_Cgg?i&m+HLT
zc{lKD>+{yvvm2zyGfcl5OeeQ6#cseUJld@-yc4i{(7T+jaoG17U)t_n!5A;Z5AA)$
zxGr{tF3rmJrZHnQ=P|^${;IO5(|FZ7R(Pk5x2*lyg+8ZMo^*^2ux>_uJZZmfQ?nLO
zwLlcz$^Gm>n7FPz(Rq>1toY16^Y!Ik|Jv|p(O%uQGW%3?%{DX^k70QT4yoNoH?q4w
z#*Wsp!k_)RRbP)O`Li2}L*7~F+I2JPgTtrtSsaQl`%xH>coIxT$6~XsIf)1Ksm*Lw
zr&g7LOzq9=XK1*HO<y0k9tlc^PU}|_v%j@b-sFzZC$o;j>|D9ssAy8xNX^*{MUZ9H
zg2u53N}Kfyf^2r7d%cRuHi;lsEhzXytVsAv<B>1q5i}uGqGgq(OD5ov{M}*2U*UbZ
zi_eYTIC@U?a`E$@Hms_@kK~o#$t$)q3B!9!8w0l2YW5z{zjCm2uLvv|F3ZGH%%@cX
zmSDA$$_@lIs3O|eMl;MUdk>}pSAKQ9<vdty6d#S4$+=+CGK7q+G(R7#GHyvM#o2T*
zzIPj;w*Jhr3hkU-+~QDfnYA%<=^Cjyo1rYFwOr$C!r+vcx`1_7Rol+9*@f<PH?p2f
zl|*<iUN@sYcAoRMUI-^Fr51w>+DozfzyR4qj+dx!*7M?s_|Z$i@8>&)wft+t@4das
z-3rB~o6+LpeY(QaL>Ka*WjGH_6)mdoD_;?hAgk?tg*A;XaOPnXVN0o!QZMR#PkqCU
z1b;ph{zFr7afHXxndU(?2Vw`86|&7{O^Zz`ElcPR8XwQ-;<4}^)pb=$_Dc~T$cN_`
z`(V4+4?M?nr@r?(&dgGMBnVW^1r3Jh_;r@9Qmn6M=vRpTEH!H1N==&8WdBy%Pr|D^
z#K2Tj$8<<*kJH3R$cE~|nX?AeUcKJFj>f<#dKlzGY>Za3eTc=1_N$~FE`F51;Blhg
zP%llV19AsmiDe8X(Kz>oueHX+=g2TF_hlq{vr;R{85h{moQ}>pb^b`>a2U^UbL@fL
z+dSkkJ}JH=V~tgN^7y1Nqi!F@9|_vPmTI1=?Qohg9xk<I)>p`#e(XG6AB|yL*W(m3
z-*zF%vS_+{VK&*nYlMHVh=JV@&mVp?z9svmTr9@q=4>Ap>wf4nK_F)(>N!u?y{A=_
zpU&k(NxD4Hz9{q&JdRIMmN)@1W*6OzT^rYPq02%}g)=|9Bn8&e=fAKU__GZ86Wy45
zD9THC^`z2dnS+a#v*PI|($%R_>p9^z*VC2EbLu_Ncd+a(ukc0W9$VJ0#=ej%=>g`h
zr<2L!qGBJ^*T;0e*bL_G${rA237f#2VR)>qnHO`+a>iU7=GZ}}hy9n*qv)ylt$&m6
zj~4$^u=+^89whW+VcvNcsK<1S(^Bccd3S-~dhqARyzBzhlhWm#2o050S|_S?nU2%3
z3yvH7jV|T*U#mVD<$YyS90=EA1Jo@FyyGuxcnw?GreXQ^b(fwM-u>IW?eyCj`RXtG
zzO5lYm7bgz`7zegHrU)`o;y6E6mzyQr_uR%blBBL(UIF0IFFHmaVFQ2DM-!*kCl{>
zH1lycAE#1)^P)0F!<bQ7_lsAfGKJl~ZvU`)Q|-XAe#fZuG1X|+1CbpEi^6}#Q;7rf
zZz&e`UD397<)_$p?T<6FylIu@m5+@k8Ox_qvGeXH!`19*+4t*E>a6auEI)eyvj<>t
zGW*{20BoO0q5j2abnCS3b_O)NP0Xm>HpVkyqcEean^B((=%(UU=RfV!jo*xtejxma
zHm|uLsOEUqbcE2J3ue`~Pp|RWGVEQ~Bgy`?;rp`ApPq9<3{UnwZyY+^IU2;VQlFz?
zV`|OpFqM9@ShdXMTap_M8mUy^Ts7x!EAsS|&8`Xt`ovJza40&MkE_0zgrmQcvB=e=
z_Zo5R-{gy0B<d)vPWF}jM2?B(jcKKk&W>94dLH*UY@?NtT^+OUw)Y6*6SG@GtD!5x
z<yhP5gktQ%u92Fv8JY)@t{*8_VYKjPw2qhBOzCDAy5l8qWiv+u?Fv3T7DN%D)@(`Y
z>kMPf%5c@lKo6aP$-1*j1gCQ!Rrw#Lrs<j8)X!2SdstzK3fkYQyl6TX({H%@b;ct6
zTT$Yl$zJoMwpWDLKpS5U8#4zR_uBWo9IOaS6(`HL2MmvqZI**m?g6@|xvmkG^#U7n
zzN#u-FfI1AD&jtalg;vK@psvQw2LXV!3UM{?sgWk%V1-=!qm?K7{dAcQnOE%xWBW^
z`vG?a74d=O#P56e=Dy?t{2-5`i1g_YncpTz6+O$h9}JJ2UB`Za{)z2~MW8kI+9#N-
zYsEKM#WDuds!RKxwvVSUF7tIg#fqk1a7-utHp@5d){srtwa$lF3SHxbccreYn(tto
z<((=TmJemaBVn6GnXA($mke&ivus<zSmUTsM2k5KQZvt1@n<Qhn{8sVh3$K8n|P<v
zlhSod+Y#?LPDkqNANw;6?We1JWOlXCwd>~9M^A1e)p~&IiF6u;HOm$qiz>spW8v5n
z%k%9ad3n;-w=wV7h)#Ya#-M2x62~fN<B-UyHt4gQM2;?N8k4f*nc$E|(3G1!zdu~%
zb1fI&S3b^5&&&Bro*&Az$Q991)%UBYs)XG3s;a(sqipBRU@D#JlbhYfs6R1y%*Sr3
zt{e%jK#%%?WF@O^OBOR{F}8b2xrnNrPorq;XOrf_RX#S!jlz60-wbBcDKoh-J4T@?
z6SLT%hl1E+!K`9gH5;@X6j;u+;W^epaYpP%+1WmK%Qc<KlN+&P)Sl}_?9<9F1&7-6
z-nv%sn>)`&&tJ7ulP!w!v#9gW1i2u)eRiZ;uAusje1UUCwdD)5>(j@Wo~zi&m*VF$
z(n%o}a6Z19ncAsQuD6EymtQVY<tE#R<20JC+zRupWAaeS^jO=tZ~CzAJgQ#>zppCG
z`=flv;>NNzG+RazdjNma?)`8&aTtgCPx3e0K}xAOnlWxjwC|hJhw0Txwodt~R7_XV
zRT#fsZg;wqVYO_v>0S{XTup6?Q4}}hxe_y;23BIC+ht+}9m{1Kx*k!ptxK1j9kI!V
zW!%iRu4C3NTbFLO)4+C2-`z5?y(icvr{DF1I}xP`yVXw5Q4jV~o~Kb7dN%4wI_|8-
za_Zz~tJN@N-#2BolEXC>yy{#-*$HJL*0LD>CU^VApPr<4vBH+U6c3cY5e-5`qN@c;
z6WS78E$V&8uP=%^Bh?UU-#3R;%Xci_!@Lt!|5H9vUkVDHK4dztsz-`eL#NZ0jA`j7
zVM-ExDc)bHN3&A&xkrKY?7wN)$Z_WsmW||Jg;A+|v(xW5u|WGoX{`&f+DC$P>hg%z
zpz$uHN`v$7RPVLid}?N~w2AT1wTkDeeXVzZ^G6Qmc#rILAuFv*XEJ`vc^Y)r>!N9b
zMyu!@p2=@f6nX?r$Eu!gMpYBpGm87vj?GGzv*EjxEbSsO6`r1Mj#U%IPlQD+hYA&Y
z&Y`OF)91;pc2;Z}JjUcVvGz27N9{b#!&QY<KM}vz)Q<ENiL2`=!CKxEdl#-Ct3k8)
z{gVwiZA29-tXuRbKYrx*cB5jI5vW49=Z&k-;q!e^y*{?MzV2ZygDRZ;(q=YiTWTG^
zy{O##_Bc&jaU2${`^)u5X769E-8ATm$s+2DE}LQKj(4MLv)vQPwf|UohyLk2XuE#D
z7wc9^6*!R^G8VN<nqTjYj)ecJI}uSH(59#9`6p-na5Vxa<<c`I?ws1bN;2!?p}fKe
zna^((QpxJ|D-p({bMBa2@0h%EbuLdTk1{6zr!P8VyQX%d^I23cu61+T7ff8rN_>6g
zci#~GhO>YyisG+O>xsb1MHA9|-!tiR=CX>Y8;9pWrQ+|b;v_nB(ADs*TzMpaH%-{$
zI~OtvIuhCt`tM<dTRJbnvW9p%pi?<;t9nI$Zhi6SUpo$Yb7aT7LHnLNvZGxEQ=vL0
zQ)wN7x-43o;V{nKY~Kf;l^k+izfm%LLAznRiA^|{XbyQ2;9Bc>N<=CaEdR<m>kEbo
z?>>38SM57kI+|kgXIF7#jF+$u;r%$$?>R{Q_k~!moUp;EI9gfrNicF=S%L5*-0RoZ
z{9K)NHT)Fzbj)TRU(6cal*bpd4)WtAU6djh`;3WATpwPD3i|#Zc|4ktXH{r)*mD-9
z;~S!ss2;G?E$P?yq54UmZ62VWtImlzK1Qz3as*$uMNcUQUprCiPJVo)tI*DcuQ5@B
zP2#JmsDLO{AyhFji*GYXG7nN!n0l|wupQLq815v>$_?q5GGht<tFEkL+oh|W&V{9z
zm_iA*U02^NVgc3(*4Oei+Tl=TI)_sLFNE37#rA{q%HX3}$uI@OzHdUwNLS;W3!gDj
zi8Aro%n2t7Kn9z7U|5o+>J-#k#n|v|PRtQ$E5$CvQce?T%Y~H~TfQ``&@)-REOIlc
zh2noA)YMr#T|6I&le|{ntmxIPzPn-xr|Y`PXkp8IoqA>#y2})EGaRaq$EZN-=F~^g
zdm#Rj#k(HKPw&LydnNh;b%e?we^h9BE5D<CYi|o;&8mc>muqhutigJOx}V*bA4f5k
zcy7jtw?eygi11qNx~j>ULo=CmW!q?D>y7eZF9tuWSSse)9M~i83LNTbSK3eYXR+Tj
z()>VB2IhX3FTVG$(andh_!Zsv6pM1O*mvf6QMfA%Xn9X5?8Up%{Z_kCg&1qy%I{)A
zf2N_aS0QpNLl0%cW;Cm=)EgFwd)3d|sy`2n{+8gF7&6sHuc}Dd%`5ig41!Df2g?6g
ze9==W$%kpx8?kA^j8hIuyHFRNf7eyUabs(L3|V@b>ol+$!+@U`R$=Ckl9{C^U}@gh
zj8&KW?cx;iwm=u^O2KNX__v`y{Jw_rYK(@~jn&O&KKou~lMD5CI1mr=rkoaeM;LQY
z^uaIW_fL|ag<gY}NiGR>KbEUC4Hli1PCsgAnE0|fabX&aI6NA@9VnXu|IH}tMp>%(
zxZyS*m&K@a-CVZWjAFR@A7T%_6Q7M3!hw9XBX5qk_<J))3tl^r97*Fm)l$cKgHMDd
z53VYJQs$n-+jM<Zl5#x9zBBK#Ueo)Gsbc5(u{)I*dJgQSV8<D|8c!PHNtT7(w7P5z
zuKN0pHp40Cv5zX9lp6A5VO-_g7g8^$Cv7a{Tn;MgK2!=S_2Fc{P?Ml)D>43(VvzI~
zj#0C7^P<+5$Emw{nU1w+yg5Fem<ugaQAE4YvM1;us(&b7Xe`9^XVh2*r2oA;8`3dS
zIjFI!>NM&}Oiou{j<Fd|fn$8z3v9fUu7C9TBU(pi2GmBXw0{)uihO8|$ZM|5>#M(M
zXA)H^iO>6;QTj2EKbw?ZoL0NtU&M4b-wglIYd@?e<mDgMX*&MNg`}zQ54!}m7iS@n
zud-bHTxk+rU4x8?6m5qUM=6@d)vvK9cB7G3^syLTdu<#zHkk3G-07>1yOJ+JMNYc>
zOdB!$S@mNm8+SULx!4CS(^5|nTuO|r-mQy#kb|m&2xko{4=ts3>_cS(f(*aLhnU)r
zGR9+hRAbuMhjb>gTr;arJrN&^UL|#2^ScbuQN`~Yb|&M{3-_I1jxl}Qg)36?<+aRO
zrf>1`bGOxNoH#cBMR7(Bd+I%bG4t#SZni_M*BHKDw_o+iSo7`0{}e2vepnQM`UcSV
zMi8#J?t5NDeY}+XIU{k?Nc?L;4Bm_CGP7=tx3fie#W$G_ANx#-9!bY9{6FG>M^zVi
z?SF|LNk4gd#6RxIgFd!r?7>y}c8#2V<~_+}Vr8e}KpQbN1KPOL!J&^4J-ypM)8V-=
z-%G)suh#UlMg8$pVi5n4Q#4|7i`sr@(>@DXDqXAF`Lgk->KZ4!2D`3mzJsAPNp8j3
zh-2djHe&dF_2V}iR~4twC$=in<+^Ok)!5?H!SgG|>xZp;*5!;YwXeqbZ&+j0@7O*u
z23I;(N<{gyn*x^n3}`aKnx`9RY{B}*(v^}5T(u`rRy2m^a_*@*;y1>6CC|H*j56)E
z;`a|L3y*iJZatw-D>vI|9PfI2KG^C_!CCpR6~i^FcxtRV(?<hg4xCf)`YIZCD%vA`
z^6<n?D*wyJ1pSs#C+WnDZ>HHIRKc64Mm8sX%+XRcPSK6laghoio8g_YjSAbBwL927
z*{e&a)++^FsiF{|D<(5J-WJpm$9Y(rMAtLH0I|GP7|?#^L>qn=#1KR9BLlw+(uf=A
zqi^MBs(74QQtyn8dTAZ}$d0aiT;a$;-CHB#@vXc*Ct~xOkLCYUsk2RsJiNG=I;=K=
zZTB}TEyRpnew5n<rs~Ck2g^wuo6(|Ug?H0_XtmjeKA#e}(6=*LFU^=C%tkeWo;?8C
zINefhNV=P!$?uwrdmu>lk<u4^{<Yyxq>YXtE4yzlaQjuS3zL0k-nADr=RQPJF*Mp(
zW4*qZ9H0JZWOhT*7<28q8TGMD{nH2Nk`C$)#kVs{ll&NX69t919cT2c=Gjm3T%ru^
z=lpbq=XYY&!gLR+&SrMf2w6EG-PygId4S!k)-C%1Ic{n{e_06XRl~U*l_i!N$7<Ey
zjk2(FBGXRZNWqga-oiQ@)FXK88#cS4$lRn=YucmherBi3p|$9F26irw`IFePbb?Tf
zjp=n(w^P$GC78J_anzVQxf#stR{52o6_Fb=sn{$JW?~qr1ltm&A5YLC-5}si#cJ=X
z$I&6tEy?@B>vAVs8Mc(C{Po_~s$}PTETdaj>ZQEqKjrICa0!FKdH8sI=Mm-s>sk#i
zb`}xBx^@$`CfaCm_UVkedM>DOL5e;qI#&4e>CaR#K6?qMYiF7mnvAK&;z@l*A_`<~
zV~x(}$d?z%iiV~6KV5XqMof(q8+ST-Wmgp(o(;^TeV?g;<7bo(dh=1`Lr%4NWn<9f
zUmN};)^SR_n%7r3XuqmiN1N6m`_4S4m8e<2DNg25e8*Ve{W#0bFl0@4v({#N5t)Cb
zXW{7CaGa@XClJ@YC%?}Z)}_V)&?Qa;op!R7*@||`$k_NmI<#T|&gT=mPVI())EsAw
z8A8AiWW|nM0=j&aUlo1R_*Bh*C<wY-JQMs7$3|VeB{(ALjgLfqk1Bs~9^Mm-=<-Q?
zJJ44RUkhuVivmLbX}mkrEj3<%!l-?#>k6iiGD9$Zt<{snlk=ZZ-#6;<zj2JJdg5+W
z=6X3C*~NL``_Oe&ljVm-2dq9OP35e=Q-t5wP+SjJST@U=kA(ZMMZw3i`Wem~hGyr>
zp?zTQT9ofxMu%G!zvZy#Z1ZleCdkL#msS2kikO1!4f&8fT($W;kj$s(TL+HS>!??S
zl>9dQV4s1*99@rI@QTzIew4BNal&h$&9Y8Yo%e$4+6z+pz;UY4P*#trohiXuzb;k>
znRaiL>p}fXu?7570)5O5!M?xSkb`<lJPG=>;ejk=U+`@WUccEZ)qnkY&)Anw?1|i^
z2ePN`d;95qsbTv;9xqQb!*5Q}W!Se!!t21+HN7d|Fy%S*MBAAOW|zd}^3Hok6SF_a
zJ+9}?j@>DCWX;@{z2eo%eFEL0{+i)cF<TT`N2HOA@cr71PCyReG`x$LY{k!gcX%N?
z?kaBg^M~shhn6$a)-pKR12vEiLRvZSuS#dEYkx!bo7pSbgg>>JJtW21$eXb+V!8l+
z?t93dARLdROWW-78Q?R`#>D=$3I(fOcpy<lB8z+SzvXO(BOAWoF=Ti7R%Y_P+PnOb
z!kjzXC?(n`WOh!&Mv2Km{oMDLt{foh9modNs$Pp#cG)9s%_4UH@ppnDd&)zZ9T8i#
zh1&CIYA4uOn$Nnd;=HD>xa#GUnS8S*dtI6=U7M$|JH_;u{@iz`X8yW6x2fA6(ppU_
zr~BAOnnPu~p5}OHcF1fm4YAUi`4gcWq%OZ`d;Br-f~T@4>0CpfR~fq!m6-MOZa!XR
zgJ^D*_60hs&X2=BKtUy*qxeP%r{en$(Ndh3l+q{4m!CCT7uRK75FMEgmYM5zV7beh
zPl;9E8_9=T&8v*tW82zCT2{60Lopg$7e6;=Gd@R>yzuE@i@9zGwl1njIX##)`|(^N
z#G0W@9%Np1(8pc)ezq}TyRmlmVt0<&^V;Ls%1cw%qu9E$C<$AsDoiauApB_!%{#ag
z)gx*eHt1MvSzeNVigMk`9s3GC0*B~u=_7~6k~5Myck;`tUjO6{?If*&)e-aH*k(Ef
zhV--Y@CxhIuP@~^g69<<n!TxAFyTwI=P~&4uMK|=ZPs$^H+zKF;SsXR&2kvq{Y!Z@
z#;P2`t2WcA;c-vY8v2!>-=O$X@q?XeSR~qXDStbbXOL+_REOT0RNnb{jy}@*vYdbI
zIF!O{oZS-BCAE!qTWKk6)ZM6_Vfp<()@ND^H7AljkIEV{)Tmz7ED}ALr{06MUi~^(
z&aqd$l^yBb0(<@SpWKiJvH3WDGx$zhEt3=9pGUP!YJB6X`nL3D>gnd(veQ3f5>q_&
z%VnBk1Ej5v$+<_w*l=ZNRAcJobL<i3zvQd4;}v|xY_7FyddK>EcjvZEs0y30IMP<r
z<lId@k7}CD>?Ua{@amaoC<^q_qQ}TwkLPxiZQnuC*3#tML1JQ!vpwQh>yihC&oWo(
z{U|Yx)YbI4^~<TNA!(~<a_%gjM-@#D+a!POUcXuUk&M1k5O&J+vHpB0p7$TK(r$=8
z)XpPFTPKrq|M@)XWcndF+@}z{URQ13e;bt*!OZt0mP-X9QD6RdJs7QS&+p4L*Y<rL
zdQR#}nw+~<T$cCjk@?s*kF2h}kdt*FwL5wmYF8EVCaV7W?a#BN#V$U_y@_dQPCECa
z{2Z~k{P{9=t(^6LInkc4zG(KQ%;&N1-TE}V@9$6JYL^t_Hs%yC9%J`R1LN!J0;h>#
ztA3znJd~}QTjMCJMo@7!oh;Gm)G;;lB@QGqLT6&DizoVNr$oLLZ(Pp<Bj3}W!C%SC
zo@*oO%o0LyS02Rn<X@2Op0c7hhPPPDs6~Cc9qZ0Am8{QPXvHG(^EbOZZ97-}gXA}Z
z_XGLTyA2bw8<?NIFWu9B9IXS+*`3>x-Fdh2gj4PYF;y5tb_1JfXzwn;LiX`G=5(`j
z*)>mO*Q9pJ5bW}|>vbM)M3HBI<vi*6l(S81TwNAJ*i-1b$~;zk2jje8P-7#e@qu&V
zJI0bI0pH`!L+M8KeA<~)hjM$+`4qX$AUdtLofFY9W6y}zj7Q&Ua4gSmQIE50|KIu4
zGvhU5%8+H)h0X2o>S6h`K79;shg$Jd@#wFc<?;OO9_Opdsz>$F6s@9SuFo=yr2f4-
zdbK?}N!n`9oIA<qQSCY2U+CUR=8CK{QAX*Y5%$z)kHq%CcHT19N7|asoO{OSQPY`b
z&zNhl<{B)+{Ze+xE)S~dg^kxM(^hxp+)F->>drKKN&c#<?s*dbBp&KVOUC8_&+*S~
zihri9`OLZBd>%EQ-8k+OAHm;wB+=03NhEfbP|g$7##dR*XQ<7c`kJ+&_*iLcLv!v^
zpGR$IntiISzm`!|)&0(9OKMhu%p2@hfl^n3=G>#ER0-O)Wa_6)j5$*+7uM%`D$By(
zp2$$@n#sKQ=Dvq=0?Noe3E_KPJ=OH^JJ(Vvi>~5OQ&h{(*VMD&wgY49Pi)GCvL~WZ
zSZ?=Gtu7<HceSli$25kqm_4vPj;+8nnN?+-yM`yNHGrr@Q@~gZOHPBwQen*U8T@Y2
zb&ELFD~*j5r0>l(BYQo2PA3mi>oBLlo{uF5`LsI4>626$QGrYcu&&CcZl3hD`%}^7
zsZl(u>XjJjuo~}39(z^2M!Ujs3<~{g$8+j!IST=H41H>w;ndxzxojqCe<$%N5izXy
z(^YPKpQ>Wz|EXjSUN`b!+PXsRX9$OOgCqHTewY2?P`=X*kUEBXOb*nOgU4>7I|H2z
z&gFOd3?5gHzFYiDzMGoj<9SH8)Eu#UIC<U~$Pn`5R$9NGs<t?0*X_F>*bGCvdAD`_
zENb^%H>drIOX;Aecj?9gfAHeZlNJ57?pFu>EYE>~KgfxTM7j^8?pM!*^REb_BcDdA
zRw`#QTt8RFSNnA_WqAHwS2aE8Az5*EuFe?VtvuFLIEtyhS+{0wr7F^!a~z7K7@cC>
ztU^foM!IBkUMWliYQW85Rq66kGQ*6SK%OGWtXn#2P-$m9bky=y9^+^J_Kp1YUBz#p
zlIPMTcPWq8)tzq!VZmuS@$2|Rc7!weH)pp~%`_H!hUM{EQ9kU&uww}<wjPD_hQrP~
zk*|LVmK-t-YyJ4Gjz9m}@UGtW;ASNL7unUi|K-aK_ZbGCFpX-P4~a2;>nbGXW<ehT
zZ6spH99F8#Ma7XYnKGTvi?0{|6qI6ZzN`38eLH{TZZ`CvG2`-`+~IA=p}v>YHjVKX
z)>(md+f>gmwHcObnfkckz4<W>wcwUwt)hmYnH~u0Kps_#{*`?($1eJ9H5NJ1oFN12
zzHW^9Lh8?#wa4nnWfc6<PcpAR!~*tbG&5}Kv%7NnnTnJ9Ns$~=W!V?WHp3|(xvrVg
zwe>>K`@X^n{vj%-;@LkjMNd_s*8?gm@euks;!U2`u+<msGcKol1~;odod=o=mt*|T
zO<KM1muWo26f}-`RC%1I6-qCKU-^qNuEsb`1tNw47U{8wYD-^6{MG*W%&WZKmXpO|
zYE#=juC26`nLj%+o3J&IpWV`VkGW7Z72gs6mDT@Ru%LRU@>w$nhuA)<D;Wcv5Qc3_
zB+xJep3JtT>kz%mwWs-E<$0?1TDL2&kNb#e+>^B&Q{A)~WZkR!ZiMWiyvX`0sofZ}
zYxT7oZHA%yRDvqwNBQ6gDpiS#D`pM_FOMtEIT&RRYE-{#bk}##q9iw~*9YZb9zDoq
zTcFT>(U^(yrf+e!ea5|N=Rn<MOy}{Y%z&MvB~7I^pGK=5BseqsVSKD4*G@3TQjNKG
z-R^|Sa#>l9rc{BA?s)&B%Bp-LR~%OyilzEMep25N-bJld8x|z#?)A@#XW?P1aW{T7
zpHs&@t+0&!%e9(MfWq{oL*3Qf9G(ZOVfUgGVJE}s#5~Xc%<}PZ-<PRvS7Pqg?Y#dx
z_Gb{bI@>%wM|rLz%HwvBbXIz<9i(I{{Ts0l(3%{AUdRsfT2Af-vFsTr$JpH{RG;KG
z>~2mLx|s7A#7ph6l{c{?biJ-|srlkV@)#Vh(&feH!c|O6wgel!uI*lkmJ5>bWM9j_
zBjGMoqu=BaEO#&mi~HwtmEzIPHu81Y$V54@b;`AoW8$#ag~WPR-Ey&t->@8syBO!q
zS$f;dZYZ*4V=6{7zCKJn6QrC}Xu&e<Qih%hmmSNlh5txarPgg}>|@5(He(BWuWW3^
zSfr(3i|FIoj3c=NUH`TjN9p>E#;o^sI;5$Oezg|rZA_f@x^U#{dixa@9ak*06gy8f
zNXu45nS`T=)$6$_%f(ai#V&-`s7OTTB(vt7JO|ywA33a9*7cQo#A3O)d8N@3B{6OG
z3)w$Iv8P#w>{qdpS1<WGX-qQ)RejNFGYqY(642UI8keH7eW;Mwg}mqD(d`RD!L;TU
zP)p@MvmH+a-NZ7e@8T-|+2gQB%>TaB_QvEWwK3dO@Is$f*Q$2vqxR9+jjE~a8mT#(
zp?czu<QCCGhp#l2p^X^+toq@^#?_gI?tTeac_6kSd7^c_5bImxc8=Sgc=<Qxo4u0N
zPcKMn?llhosme4ZW6k1!=>7O{Xp(qw8iPl%B!`E{0GbKkVX%M7ZzsZ)oGT1}QkCVS
zYaCyOKkqiCY|Y(}U4nd^`%zWc?QxoD2(6ATM7g;rHg}@t(lt_ZHsi5rBaT%W4MXA2
zYA80DY3S~kjm<s5EP4n^KQVE`S`$HS>=~x89Di6mY-Q7Q)fM~rYjfdUS%ZI(9s0gl
z^H{)GyT|fBIpxZc{`KKI-$ssG^)mw1hxPkjC|<0yL<-%+Mht&eLl9^)odN=hV*44T
zGcS^}u35D+Dw}#zH!9QeVhnc;MP<y`CGcVwDobKSD#-5(C*sG=oY+K(F<5@9R6DPw
z^cZ6@v4)_}W;zv4yc7@ZtcuahUgFG#-K)0EhOF|mY?u>|Q({Ah$C7w(_6)-wRDKpr
z+09Ko!<f9uAuMP!?cPt!j<|7Ed0={?#TK7MY3A$ZwJ*L+Y_-Im=q}VqQJXM(g|k<<
zT>N{5rr72|)_GbU%!$b9@L(O0GZTi{r>(Wxy0jXA&|cidUrre+B}#F(iXPf~8ylfu
zwD7%M$27)SE+59tFm%UDP+;1<+^kAiEBaJ5B@<e^S1@N+zi*FPrJ&XT606`@=Y_@l
z?k!@xjLjhFZdArp7bb1(8?J}O`*fXhM^Z!@@*yeaGb<BGM8(NXBB}=(P6S1q+2qiq
zm^!TRa$YGh_BTJ$cAb&(xz5MD75m<uXPOq3sVeUBp)$r!EfbYg-BF89mgkwEk~%y3
z$7tTCJ)$)VTH}5qe<S;|6igC3=gf$5y2+HlX4c~`4V%T(-1M~zZH7~@3&F0l^ITpE
zIH3xGZW5Xg{iebYSzdpazrk>PktcQ_UsSl#^MO1PdZC^5L{U9U#YbS+Zf{$1&Yzii
z&G^i|=jFBC%5Ss#Kh|$!wD9NO51(#^L-C0X5W05VocgGiZNCk#%dZsou@bf*bKwlG
zf~jIYuQpzrR#oWkcKJ)T=2+j#n=yNP*GSFT4E4Oo!%mk09hcR;Zr!yt3^&8j9baYR
zZ4wK9=d&M$Yv_w>J&edOaXp5}g$5^jatq4;sbHobQr1=Rgz?{A<8FP<oMc>N-*a=4
zS!5|}#$Cx03V;56acDCfio=+Fcio)&aMHsHTiU;bZk%{n*o)ey3@ea~Vs_T%SrPSK
zxqe;VL1k&;vH5+=RCnx$+nfw{Te7BOYPH(vZ*ofLbME4$Av;LdIN{aXbyf2n3};2H
z4N9eb>_+u5UbptUc+t%<^hvE^#!VvfQH8#GCqR^pOZnpL+@^kiCeP<@iZ#VBRS9&{
z<)j9!m7|}Z)?7BLjrvx^)-lO0?Dh~J-QktlMwUYbHt3EhCNY{-dz|L_4t?%j7;$q^
z8}$1163~GSnyRBvPPCQWQ^;SXZJ&&_(B!(uf-m}go&H%-{@@C4zsR$R0`x^uK8sYn
zx02#!*WVFdkz*N7X)H&u7_&PKVJn+yXx}Q8uT0m#n$*f}cuN&V>(W4<czDhAgg=+x
zV6*dz<@DL;{N48FkJ5YLrF6RV(Hz!H^5Jgw1kD4q@3}oeMPRyYF54x-mdj8~$0#hT
zFdcL4x_R~S3je#H4!q9D!{&Y~cf#uK(pr}J_KYrzwmJ84UZ3irDK$~>Y$|Jr`PQxU
zRX(6U<Iwo4P<Y**-~-{tOY!7XvDp*L^IR-beuqi9D@XE}?<ZoN()ppUg<ALXe3lLG
zk8O|4c~fSej*EnAKZqUihGI0FE;P6qseiXC-e&lnb&X`WvS@{RifPbgV~>x%Z3<n?
z_;W-TUImd0|AZuJ6toY6vvSEVgHt%)VXr!I(-7)o%q&^|G1X;#WvJedEPUT*T;3RT
zK0JNZ)jEVjtX?#oAE~2;Kfj@@XEUAxE@56ji^cl=(W3}8(<zxe;xbt@9-)y$^EEl&
z2tSf21`$NA_$0r*lAowH8q10~)lZl$1xL~|DJII*#cWNEyqAn4cdPd{jw3D3mJWw8
z_h|?QZKgx<7sILR=GDjd^X)#rZy24%$ivk5pyiYKnb9bu{Eki9H}lee)f}uAlabzL
zN3*^xZ$I?;#bGE$HS8LxIh%3l(X&F*R1zpR#_U$>R_Q9g&1M?9`z82ndt%$cIdGLm
z(~pFC{F8SyKiTSM>#SzJ-P<bvlE__2URzoD%gP|3HL)2S88Xv&X*qEe!z3l(s2!Js
zQ^3?MK?PkZ(L2s6yAC_fDIUJZWL}iUAjpVrc9+c;4=|mh9Ofw{4#$3;s)j8;^Td39
zr6C6XX?KUECI%%N6cByGGwO$y&&NtD2`eeHtG<l#DTi8VF_!IhVdWd?AdF`MHnfKG
zLRbSFoCzX`Q>*1>wJ`H3H{J1DrwL3sdUZ!42dQIMWUS@U@Z4-e_U?6|%jXg217Wkl
zI=_qMW@r2!RhZ+Xj<S54lImUVMr9V|_ic3DrS)!dqa+4{C7`6qMz6)Qp@TSm`rB;e
z<16gd<hIjdbkfbJX(gxtb~;N69Xd{7?`xmg42QBu45rr2sgM5rpwi9sjNJzk?SU^e
zs)J8+AipiE$3BSNc1wOzb!{nE(LG-+xsT%65cT1A&6n@XHTiUbd{$F##O0fLUM6Gp
zr{b`D_>95WD&C5@HWxlWR7%5g@vR_GBSihUDj(8N;O<msV}z~p+}N=ik{C59KN?c0
zZ~4#=bDv5>!&A`~nA5w;-$9k8Hj2!HPr^h)^tOE1$hVj0MpC|+=f_<-B`+rHaovvJ
z6>Ehjhbwr`7vGIkKZaU~ek@fZJZ2SAhjJh`qRSkj%K+Mg#e(eYCVJke^@v?bzK~`%
zXcfwZ*KgR*Iby}c)QWYT^0t)w^-*5sT;^92W0F&g#uxGxa^u{xa${C{e&nXBxr})~
zLy$YX;&QXd?W%81g(Gs4@B`1pCI$Imt670|an&)r{k(R>tX{j;52bYt25rE9q<g0I
zy+@-Ieug8l3%p$V-f3R3y+8V=SY^2Gfz6%GpZySYZ$kIay{Amsc0hAWp)l=6RZI-o
zfnrp_Zkv6xJ5W=3O}G1C<5M$72AFm;0-x*7KVF@g;_ntm)hB<aW+%)T-k0i$Cvtxu
zNMv{4yEpfxW7H4wIBGhUmwH~|`<35{_$m>G^ZDJ(Fl704WBA$V=w~1MzsrhvDZGd#
zOvg&UD+$)T&wke%KN+9bpE4U6Yd`#n=SK!saSC?Jhm07zy;NktGFZb}cXlBNX~#!E
z1?<%wbLoelS+}yd(<ZFu{OF_yXX*IVIZlDQ*d_c5H@|YNsY{VJL*?3~?2d0LukTnq
zJu;uITc+8ZZ6)f7c)vtJ`(d|kcly_cd7|yVx%IF4(9{qN8OP#xX}K@PW7!0{%8$p~
zi8_a+1paHHi>goc0G5kqf+ey%-&Z}(RquT&F&p&ZdZvM$j`OSF=au*w`{GmhSh!vr
zlJ3kgG2b>GbKr;y(=euU;^>}e8tJk*87=&N`Y9xChC>-D#!g>1r#{|Q6GNsYf+gdf
z55h;w#S5_+UoRdDqY?Eau42fss0{k6RvhS+C86kkRKL;9py>KNvHKGJONSyxON}Bo
z!=WgO*)>z4$k!R)RA_lAmYmj5?+X(x7f%H}pu=iK@zY%A^OBJARaE8wW{?thLQ+n?
zxnK3E+DVvKW+SFY4828crbAJ)N$z=EA>&m3Czn%^q1mALJjA&^$=`_V;Rk7~i^v^3
zqp|(I@$|eN&%L5No)~>MKXUXe`jlK_eR;<2@9n%8MW#RFp(q+Vw>}n}pG6Jlz$*?f
z+DQt_jk@Wj{7vh0F6H}s$#o&qT6>5)-w9TvmWSso#o{Bo`nL*ysO@|5yJN0$vaL}a
zu&iQwyKRQOcB4GE&0x^_LZwjN9Zq6$H`m!%>o90Do*D*!7F!Q(9VL&`)%?CWpzlch
zC%%`~#~@a3%Zr`ZS!@n9rlXAQ_^~<E#IR2Z`rT^#?~$ktKMIPhN4WCVSmfli{$}P`
ziU#1$S@&0ax*j0@sCoP+SVzCY<FCR{89tP&zMj#uzE8c2Tv;Y^%nrIa21->+usQU^
z=z*)y6Las^*_3^Jr_~H(=UP~Fzhn%>+DxCD<(4Xwe{;BriI|s-n`aVZ-JdNtxdY9A
zp&mPBa!;yU^vz)?CPG~{hRE6@n_16C(k`MeMXe*3&(*i_$U&vuakkR$qAKXg5Ggc<
z*;De-+l^e)1&n=%_ULuUu<o~MHM;aYM%yzUs?lxIQ$i=_l*~UWb^J^;IMg}q2xplL
z&A1b1Yl1_vW$Q|MX=mKd`ok*y0aO`Q(`k6QQ5E9_tzxlFq6$y!AA%Cqw6y~BP=1Gn
zIHl;NWYbw6`4f4Zo{Qw=nO{{-=EHad=}ARIfrrLk(<>2nQqgWz{gH;FQsuDvJQ7yh
z*7^MF;z-tmcnTcVM3csI>0(L--i2@xaie$g8z}P8Mz3GuxM~v;p>_FrV9~{MZwe|O
z3ogHqXLNB|--vGAR>XGMlYh@@Ike$Vx2;V$EX<KzwMM)3b=G%!g)le2jZp}%liw`E
z0zZrh?_0r^p2zO9+A8dI<E<+P<GGA`d6ob4n_%jh{7%*_9V0ci-2KYi#HZ$2g?8>P
zCEo2G<>@LQHoZ2P8?j@w$xR}b{3J4+v_FWVvzzIb^2}3t-nlR*exP;L;0#U0+88v!
zgx|}U$JI$n4!{1GCGg_sV6~DJmLmr-F57IV<?3b~+5uO2f-zp?y4m%Kr5WzPk)GK?
z-<=cr0*$7yPyxv^w1VVS#i3MK9SO6k$LQOtq1;2YfL%wN@wV$7*_r7lK^+<VPVOW2
zH}*6$<hA}HKikYLdl|mwJ@LGovf93w?O(~@;j?E4bpF06F~;rVJyJ!9jhjy4*#x#@
z@Hri9lb^-e8tA2#ajek`vXaxHw2slzIMr5nXy5KaNXeF~JDnnJj3TZN;X0;TrvSNG
zhdz&0SlguiTF*%#wg>OPMAX2*j%4A(r|*R|E!*G4DPAxBS?#+%Cc-t$`TBUIQE$vj
zjjJ`B3a;$5*feO0iG26Pkj-!k$N{}-g`voBc7UE3V7+0jH-M_C>ih9G;_X~H&U*Cm
zmcp;Q9aUA^)=kY4O36WYqw3_lP}iKzaC`5oq;b5M2u)wC*bIkaCB_<DH>W<{nqM{c
zNSK7qGjuS-i?jYw{)!GW$P=;o?CdA)Vp!*tr9=Y5uQLug`MQ4Q##z3Z=SO9_cwjD6
z#?+~mVEffksrg^pVYD9>>&UBDNzVwIQa4fhmZXgD<wDq0;(4nPMnsPeY^qGcREJXa
zjKWBS;I;fat!a8;Mx0TI`iC0iG>s|qT)LQDE)-5BM(3jtuM8an)k4qU@clE3&8d!P
zou>MFYWa|ex^Y|n#oYOFY{)K~Fl-leU6t0qOIK}>3t=%DOKFxQ>bv=Lu72Q=?9At)
zlc;@Z{dFwkO!?2nZA!5}!5cjhV-(rkc+<?1>+gy9Rn_&$ICg9VjM2h-!8#qHt;M?;
zPC*-KcXRteVwrnl3!-4Wt1LnEMLHt#JFzaZvVN(a^NS#gM~~#Y*+2czQ&&>_Yr~&Q
zd(GRrxUtA*d$nJ+$qS*+y^C8mG4rn1ZO(nDX8D!uROzx#7%lwy_r;~nF!cGX;<T}Q
zMIX(wZpFc5@8uugsg@&8!=0eS=h{54ZBOtB=k@KAU4PwKO`*~z-(Hd*k%sT_OqmOj
zF{oOF$Qa9L-7e7wk;;J79UKYXs86t(RO=&rCV2BtNwp5aFy<%u3(tc=u|LUZ<_x8D
z$eo#VJM<T2(o}JVd`vo(I78dQZT71>6eN;~@~N_Mn`f&&l}G(<#;VwmgQ8Y%|5*CW
zvF0mmht->^A}JqMrxLMfW7U`v)V&eTB<EPWBl`%n$L!g5jwrZYUgavglSCE4zgAqV
zc{6=A)|qR!iEFWJQ)H#(!*7i3y~;+8v9D9v$gA<|{895^(T)5%LSOp{#~Wt^ZU+Lt
z7IizFZp3J*bt5;!p}Nu7IfcB`Z$ytp9n$jz@HF*=v`evDzY+e!Th;0z*ihN?8?ktK
z+-0$S6LII-+UF)Lxb~}>s*xt|bDH|j*H?;bO7z4kr0e*i9TBO|v{V%N{6oC(RP0Ua
zxvalS-CoqQ0<cImqK{p=C-n-%9xvsmp?NfQUc)N+wHg!Ei0CDGtLRLA?l-3zST`sC
zU4(bSHnJR^wU%Md%=SA`=t}0?8M{wobyXWN{8<gboXvE`T$BHNoYXPr|0VpX%m{Mb
z1OL6^jP-5=8HbmTpcoHomG_m~_VZUOb6CX-mTxwc#guidi=f6IwNe~i<x*a^6b(hQ
zX6{9u?Ak`Jt;#f(rDe^;=x;e=fnQgd)#*4Zea4xa;S{*aXAH2QNYJ>Tc~m^!MB8^_
z!)d<=V{=Y?Gi;iD_fT-GQ3&)AG)#SlkM(Y^&VNSJzw`e#p4aBHdh0znzm`0`lvZK-
z4o7Z=LlG9kgSM_us&$UP;xfZRI)=YOeMN(s)noYw$G|lBKrRmkY_yT~R34?G;nxbA
zzsZ$&NOX<%U*$ScluvcY&1(5(o|gkbsPX%Ft1}luV^CItwdo_Y$#bdD=ku)A*^-6h
z_arjTb^0eL2j}!)VV`K%In{T77t$kiS=$xXF=x9Ql0RDaeEnyPW8QqooA(U!V|{P+
zuSt8UF<SWZU&o+rZPm?iD64PML-qFz*IiV*C|y=oFFCGSmx!VYx5N1dReYnbhq(^N
z;m@Is2=kw`Kg*7MnlXM|dmQ7Sls@M5cdgKsXzy(-zvjcrl=#)1;ZR3{%O|C;Cq0vX
z7mQrWcZ&~@hx)Gii`vaT2VJMttLn^dRF9R-Am?6G4Ny+YRFRV^<1-&}#$<fPpl%)W
z_3<5>Iw;mC*f^K(+AsHsRN#`otrZe54RwQhmIG=gS>9(AA2m-+>9TYkLur1RR?)wc
z5s1K-guI!v>Z%R3mFZNQxJu1+tGvs;vl&jozS|SdITn=Nsw_7bv34CM$jk&UYTGF)
z>wR*aU8r5>-MQkZq4;^A^FX5WdNn`miIs{&;_szkZuZyAtFrHT&ll7F1nCg1<Ar^N
zewg-WIR#YvS)FLDFNHThReZWv)iG&hqUO9P>n#@#D|XecGSB4s=(pIg$33xGS5$ml
zhd-6J{aE+lIK3#wE@_WrUQS96ZYRnn&S{6*y0mvU)`!cBo|sRr1f4VvJ^Ny9694mU
zN6ql{*ZlQ+ZZl$heUKHdIaX;oCpK@ZKkxXnodWmxis3^+2-zlwmHoH+M52-q!}^F(
zSXXn5b%RcK(%zlXOq1rMJs&+OIVV4QroufwdN_~rwS2iVfK)9+cgLI3bM|KJ)X(s6
z7Nh2Jm57~G%Avz!*tQ<dJY!VEn4NUp%=)N^7Cmy2Wgf9C6jX;)43yKynfb?*2mRh<
zy%}Gmr~x$$#W2LWmD*MU-N<Td&eq$GWVISfUy0rTpZWY1-o@Hhm)q}&RL$s#Lr-e!
zEiZavMqi~I#9X@$*L@hsx8BZWb-QzoiB_Fo^)=vhDD7(rH<4YeCxXxmfjnYzC*O+4
zq>-zir00;2k?U3z#v?4H1~=Ziv)K&oqv!APsqMP4Yj-^-O~tPBQ8oKSAuFOwZ+0A6
zrcZ=Dm#Qa^!(-T*Shw%5$4*Qh*(yf5UZ2RZir<lvNG!P(8u3|5hAl{YAnF~b6T@Y6
zLD#dy55#ion<X(7k13{a%VrUV&3t1qhMn#v%$NXOF}%?qSvJei{<aELW4UsuoyR+M
zcAg(!eIUrOy!NszIBLPdyJOqe;vVC3o6QvZtYVO|8x_&*8mT#(F&NoRjFA|A=#LSb
zW$3=I!booBsrR+fGw#o-dJej5km-6Mo((@6&wP@f@O#YLvF>j4=FsX&szLracg2xA
z)SZdrY`c89OPfHSp*ckkLq7DyuuK`~)6CgVl~woKpLhdzGuDU@g!a&`HNOp5qhnNR
z{anWkTNM2n&!27R6T2?l`L-Q%@H=`~ZY+M3>;I3vcqEv7Bbl+rgeZiU@=t#+$-m+Z
znV5ZVGxlN`ir?3jy_hzKNXN{9B7e41K#^K9mQ8-E!j#Ju_iL%hQ`b%dSeNvGTZ(d_
zYP(|2dfpt0m5GY+@ha|Q@nAn&oooFr;hOWVuMB6n&Io<+nJ?;<&+5yK=X^8o;%>7q
z&37H+ErO@i9I9jHLch&+3h3|Z<=Axsz|S?T`Yardk>%1O^R4L_jTYH%W`r0T4dE#~
z$oy!Gv8YP0XosN@m5}<9Cg)<^IzHuOo&&Lg`(gLCjD1VKo?OM#^@N}1IN_bNji^od
zckNfTb!*HN+M~PJZ4)!^dfn#SQ?P2vD0+Sz$3#O)z_G<C^aSyG&mHS9{!-AW)^pPm
zrYkwUld*uczj8m!&V0Ka-T#UIfhmhbq{_h5F~fUye+9{(ZD?mL0jEC-#!lsn+%VTU
zoO4}2$?vZOeRK&q>K%cfJy5hY6oPHwN}}ap(D*l%&6_83;?H&p7~B)Ik)3=fY=_!}
z6{~gBs_q&ZA9`p+PttDx-^#NcPc9dAKb7Y(igrLCKY-3Z%}nUN9xVGX$|$z6Dqd*J
z`Z{W3*A=VqPTRIqH-Ve>tJ(_x+^u87P-^QqFXE?S9j`+C|0xJ3-_3dqZ3@fac*gA}
zcAOkut#+3FQZnVnM~K{5;XOOfI(8#Yr!L9&AITzer}gmL!Ics;`=lZ3s%y1x1Io-w
z7-|PQOyocrvkQGPCHS7`KXhT%tRd@6`9Z8;vxV)v))|5C7XJ|2;Psy#*ym`UI@G{*
znj2gu0;gk#b~78NK)$PL1*s40+b_>&PwmQ1&rxhlG9|Q|Gm4V=jwrp_FU;@UekvX%
z{_yQuye7P}wSBrxFi!hbjUzr+r0Q9bX)ID5EBx8VTcrN%rofecmoR#<=sB&{D^syT
zhF|^6WW^X-k};|4wCQu|Y{`b!z_wYk_r+J_%eu#oiLAiOZoHHzb)$~+9b+uwb$dsj
zYOOX>zZZUcFWE!n5YShe+I%!!dM%;MJ{6`tlgIR216QH1Hu|yrg;T+1jDBty{Yr3^
zBJv47b*z-w^k*0PWJ>Th9}B*yB~+^tym1DQ^~qQ+{w05*ibb<<-^g$0f;yLjtB;eH
zpywtKSs{a-+=jQ6txUagJ?;^XtK^H5&gV0`j!q5%<71d^tQ=^HVX6|)MCK_zA~hu%
zi{v-X6gd}<5xWzFku9(6#Un1V`JrOLQ+YNWpVJ_z?sfWX8UCEw-kb9ot<O`;nWpV=
z(t3f~Ph&T#p1R9oZO*1|{+z9SvRv#AjZt9Wkgp@u%5}Dx>zvV?-4s}<E8n$wh6ra<
zf;QrU^lCyC(b|)t-dsM`VP9BE52>e%ed+4)M1FoCKka+g>;1)}#Sij0+<GSebPpJU
z(dKFnecoM&uvL6xk#FW*uiKpa7$n+QWg?N;g+7@Q7_Dv}*3Xnx{RD11l3Z|3iscj$
zm`~NrOR*cZs~W4hUGdyTu+L9nD=`<h<y-T)nK0kXbE7py<RTw$j)`2vAblN^_fc8u
zXtgZzBViMASx<$9sQb`f@Os8HrvRx}2bvG$Z?Gp`Ad$z{9m-5!Uv5U}v@>3P`;k1g
zv6^T;l*VMyt>V;8qO`4rlHJA`t}!-ly#i!L<LA{y#7852^2$YHOc%fFLgP2$dr?7!
zRr*2rkI3O(hd+rO3o<qHM)z^^G9SyM7mMG7HPLOT&3acUJgBGmqE^pU=fAMk-?kAq
z;f=Ll)%>T=HBt{xak^MKO(*WGvURp#Th(zhoPswA-ou@Fn*Hf4wxDXM_Nr5lQseh{
zpr)+abHDVom9JJ{)Au&(DE0p`4za3}ejU}Xvm6X|d3)je&~;UF7a6MP>?X_O2G@)h
zen0(?=w>(tB+}1&J|~?RCGnOVS)>}3h&%Z&FLIR0((%}C6*nL2F}1nO#+^=9OOwxt
zThOEXP#6a-=98>0^ppd6)aR6LThV_;PCoj)&NKHJ=id#@{f5M0EL-6>@d@lq?L)ET
z*ZEeQF8H9z-c=^S3%ena9n0gTb{ubjsu;~@TE#a0NXC^q(uJ%Wd=$-w!rP!imDP0i
zXI@2k)Z2eXByULciM<Z}550jHl<SQhGm@Jh8C$$pvY^!~in-o2-WzfjG8rbEN{Jr%
zI{F^n7Us5n1MF#R9sf)#^`FRidfvIqP>GqDdD1rowXek+WJdUL+TTXc&m^`OGuHh-
zXZT2F*zDQg|E?2Z*Y&0GNqkaP!ns6RV&+36S+9R4pF4M(+yg%UAFoET+`5?2=vl6#
zvDY<y<M0S~y!FTkCso8#YqqU+o5zV8kty*$;yuz2!)C?GR3AW3XpCQ<yWS|8d#JlX
zz3+c$2LTnnO%dKl?#OxCyH&iO`x=T?K9v<}?-k#|t_|6o>_~jhcI|_zi-oOm5cGSs
zI!xoJe+H}-eP?_|p!P&Y@^@D23)Z|p_PCzMdPnSTLvY`BYS;FEr*4;9%D(+UG#l{E
zd(wAvCi|G*S8~WZyC?6=beg{J%&r~w&R_|Rvikcur-$g72z;)qQRF@!_Dyz&W4S|`
ziEC^3hK&C~vKH6}|B$<;9CBPe-**50Yk?j%wzu`YV|MM>I~KpA#@#2fH;AD9QlSL}
z@O%(XZc8qc?c4qDjb1zU-mFGPXykP(Db*diFFT*@`hD+^T^o8I?LG6b@)XgVunl~?
ztzy2ob;CM2uJ%|kroFv1D>pUj?#a3`JFM@0vunrRH|$XQaBH0onUVB((RV%WKIYh`
zIH$$z!~S<nuN`v7uw1b7w1*>1WtpMl?$IXKnx4Ks%&v($xxJ0iqbute-wPZ0mfXiv
z`Cql-TNQsDi9e3bGlc1H3u_H!db_s&dLSo|Oh?^Y%}T?f|3lsf`nSf?;G9GG8q4^p
z_G$djq5HI5o9b@)(RK70>{#wq$eW7W!}IJt_XpoSP7L7A_rH5+4sZY5eeeXFpQm|2
zk7eDFEfgMo6Slw|iPH_`G`qI{UHT|{2sm6y<}NwA<uVvPxB2aT8O*L7a(~#1*hlax
z$R?|=B=a0XBX42_ah~q*T}rPFy^l6ip`O+6P+#@p`gSH()KKruuI+or9#;ADd$N-L
zyWF=|vU?BVZxoZEGq-E|&-{bTSSu9Z>SyvBel{wEb=B97++<K|MQohDdVMQ^Gbo4N
zN4qxVeXOh7@1$~(oyRPtJ>fJ|4fg3_>*kKUThn&?@1lBb|M!aq`blQ2HXi$f>g8zX
zte;`;Wk(oc=x1lwj(soc1>%h;N7yGd1-pzcpF@2@yLRmT+mkgxgvsvP_wv)<Wz8Ro
zzKO?kT#R)#+ylV+7-GXdlvM@0;yr&WIMFED5Vp84GqAW<U)0;R{Xc2zFRfh=tPi#F
z#rN`l;EEydhWj~u-RiY{-_4`SZ>^s|n#O;~;c=l24)yNs+97uc6(1Y<f&70`;a6j$
zsAP`Cu%KPUY@GMir2`FFQ>cPNZD+f7%pFr6=~ffFz5M>M3L-Q^^?18>%zI?7KNp<>
z{f9jb{E#KdxxA=cM}u|)a+8KyG<I#;cU8V3!=66Wm$qxi-7}3U87I7uHSl*?6WS%c
z%XaF&+HcDqIP^W*wf*0tzq4uY1olJUZda=YP9)w5BF^NCY<qqlvUd?@8_Mo>?a+5h
z)V8VT?hB@|_&<vE#(CU+4EL4rDA*?wkMe~2*8j6*#~qG&y>{3;=Ck562IIUBjh<Qb
z8b2m9?m8u?i_O9jG_AK!5wX1|m>HVcVAqD;e^WtHYoK{w)!rh*0VQEi?)e+}iCkZe
zT0WFdfRWba55=hp-S<3I<bahr{Eq6iY3}Gc3*$Og?GW4(3mCem+qFaPCaaK~2zp4N
zeD$+$`|odX>|NPQhQu80+7$28a@p9yo0*(#E2sba<XsNk$L-qw?~@%w_59}kJ!DO?
zV-EeS?AmeffgMcqAYoMP+O#JTRn1C0k-uqF6{{PqW!Sr9e;>9Yxsq##y-PCD!Jp>)
zQa$BPKW}##-;-x@KX|9%S6s)%sThE)$f0-6uI+p0OqsyP;!co7s`)9Zvkh4R;BBat
zY1a;aA5UZr9Lgul3RhLI|8B$G9J<@swPW7__6q8~#uBY(#p+C5vtia}q!J|`y2k9<
z;qUB6*-h~RQe>dgOMIwuW!DaWC-|Xn1Sy(-Z;I6rw2&h+)b6uuhrbVYLG`WCR6^sd
z+XX}FWIEr2XxdN(&aMr;)28p?_Q`$OAz8&2^7*Tcw<jz5U-C0?PWt7OFFcexhrcs)
zw;{0u_s$$!;!~MIYdoo|WZW7_#gtg+Lm9@d9liqm`$UX_`io=P3+mc6mM|Urh*+tm
z@rNL+KNk^y9BMV%wJF}KdWBd_e2TW?sb*7upLDezw*J|dhq9Aho8rBaufSeM)sSx=
zm$CZU!-o2{c5RBg^jtn?lor;+Z`GZ8EB6eG8YT0w{G=JZ<L=rfd1YtB>eFje+*fuE
zPST{3C5;MtUv|sk`=wsn|DC=5|GPWao;|9nkN2ZAzHf*WDEba6ASzTNpo#H?Z7C!o
zH5>vp;k&zkv+h50*n4Kp{?A;O_iadgpikE|d!3Ja?Q(i5yWCYI?|g5-NFDskN`+%-
z*{JJAl!A4r^rG;YjC;J7*zYBNSz<^xCK9Z3cIMKiaq#E&UK=vW$iRq+-Y-^wN<R5`
z)F0ZO<g)T`Ui3-T%%!wo9ZE9~|FYzSF;_aTGdj{vz1f|K60Cy<)8}BqOBj!f<g-Wh
z=^!I<&+d3V=6W83T-vv*`*vm2nFx1R$IiICEEcxa56yUVB&T!ajyTP&tq3;5sis-n
zVT-QuXGQwHDxL{@tGX^yceD<e$(=(jYA&u%60AclHoe7uMqa9MPEH-nt!oIj|Ku@W
zPUVkUHhe}?u$tWdkE-{)3+>|O>OHstdki<K5LBP&dA79Pi6Gv#vkGQB$w>NflJ$B}
ze1LqL-a%6D+~E+i?@urVY(F-yirlex011oCm|hsRM)|UX3sa1)CJD9|m-h-5aku+6
z-(%s<q+1&iY(Hh_FU+g+kIVE*+*l>Had=Gr;O6v#buf88)TpqRVM*wqX<rVL6x2V+
z-V|}<I=&T8NT!bN3&1D3UQw|9)QVa^{!rUakIW_$L%X#u!8$ll@29FjSDu-x|F^lM
zH|*$=9y^g~KUK+TLWA(jRD+}D5tXq0+oROO`$e%ZF?VpS?Ic7cZdNPUe!4BUYTdv0
zLGhI_;Y&50%7I%+=2YGk0$aC$b?|BJV!D6tNwJ@r2l}d5TK=6#fvAB0kLE7u6Hqz1
zJ-6B4u<a~V#719&ijPYKO<Xefy4jbubm}b6L{HlFOoGkuSZ23tw`iww_oT?$mp3xF
ztlMkCmW<emUFg}k*^po_f%6{=#>_TFz84$dVwTv&l&r$9nFZ`6F#Sv6?9-wV%UI3H
z0(qs~vzy!$0M@}Us+&{*v4!8?L@3Y79+UTroqSe!7;gl=Q{vTnGf4i;Yv?}r;@xaS
zu*YaO?aOLnXg(i(b}Vw1-K10P+7Q8Bf_Bl(oX!<0VphelU&lDF>mvkvKCam&(0)9r
z^ZGHESA#*mM_ba;2PRzi?NRN=81A^%Q?Tc8Hu86MlZiT)9>R;QnMZN$oM0U+$G90^
zem-7w7kqgQ*j~KwZfqNRI(Rv1?(?YD;}B<YIV9MAOrp;_-esdMjs2wSLg$zIZmU+E
zeQC>gU!v#2yo2wHylDw_$+xK&d!(Z-t~m<&>gV=0{QZAaBB^O*99?EGV9#9Hcx#Kh
zUf+~|zAx7NSnb^Ja?{ly+V97Pvop~VH{7ZIlY7P8gpg)`x}Nz(w|^>F52M&Qu3V$F
z?c1|f+`e`7O|ZQfeK1sClo5Yc<PR&w^zQw8s_Mqg+lZryb4NMMzIJVkMLpQ<9tbwW
zX{obY6#TGAzT`b#$i3S$KS-Gy*9rDa`YtOtm!K{->{>f|{kc1+>r@%Hr1!~y`Q6ce
zI$CZgNwEFW8Ta;?;+oG{+>Hp2Sl_F1QK@mNT)!<Igv}*mjKkgF=f&s9uejdxEqgkE
zdM1+vz1(N_78agb2pjykOG=e4?!9EccEmfLH^)i;-<_%uY=-I5XHIvPwYDBIEz4}=
z4}~ZF)d#rg$58>>i;?al62Ft(O<$97<=LOYrw`%eAAtpLVni1ge>$%=@Hcb=s-H95
z({t^OVEZ}4D>IsP!<&yalQZ7PIIr^S-{ry<Bk?Y6RGo+!r*YF*OE>ec9I<PTzEf*-
z{k~uw%6(B}DXQP`z6||p{%w9Q@)*6&k}fI|uI35Wp%MGUnQD)nG}8?W)Gg`p$3(y@
z%hJPlw+0|s2P^JvgVEz+3vcrVaJESJ`EbBG^a-EwV6jDGv@Z1yEJyFT>FY->0qbK&
zOcVDanS>*z{dcKu#WY!TX^&~Xmv^2U7rGXMxX{TBmM_(PQtZQ;Rdu2de|HWYZD%I#
zqaqpK-n=u5Umy~>Jv(}_53c<bY_A55HG29Wu?4+d71lJ^u`N80>|Pd9?99K-F`VuY
zpqkHAzjhQyy$ZRQZk*AJNc|E{Ki$oI1bd91c=ay^EBIZph@MxcI`7T}2=*8j)4T4|
zUCfS`g03z$g6+qKmkp^$Xl^JvkD0!W`5roVtm8x;?cy!iYvGO5##`WVljwu;-?6!F
z+U;=kaeTS9cZ)cgiBpsMs8|>Ao}DGy7<)!Poin-qLa@C&{kUL&B*%R4J0+(4(8?8v
zX8l+=VEfNL-wg3?vH!%r&kIg52f)U9YKYj(<8eVNW^`;88J{}=BG{v}qK0-C?%<%M
zu1*N{D6Qu6uI=d($9g?HP*(}q<Ctle%2`-Jb2qOM>~XA+>=)%9X?;I;*z4+6y#(8j
z2Ya3#l&HNmeazmkt#=9gaU=qFV+g^zIEL?(t!9FS{vKVPV|o2q6+OCd{%l*o_R{7_
znXIRZL)~+nY=}C@Z;EFlw~<6=zr9r@K95GP7YXwEn^e@Dsi);e#F&24TwA{V#nF<t
zZEwxgi<9Gmr8YdP4tnkVB~E0++^s7Sg3Tm*+3kFCW9iAM$iUjRGwcoag;~GbVPohk
zx%OAEz0|5V6z6jl{W?RP#Ek+3+m9Ld9ohOC^LDbE^F228mhkL5TbA?^bHU_*ZYCwz
z45y_IwI+VKC9CNh?CM>ZxS`(aW($Jtr`?%-iL-n&`M8^73ic=^*o+<%0aU)uo^U;j
zQp_f~K1;Cul#0y=bU78foI797mI1d`E!cjnh+H3(d+5ZmRAYFZ)rlkM9=kjdtaEzq
z#cSr^F4#M8^|RD~JxV8ZTW@9g_YL5;FRuaXVKQz*V7i3*A+>4r)7|S&{_jRVg7t9u
z(d-Ekhq}}kZ10KxRA^1aMxV0oYh}N7?Wl~NiOW;LW;iXQGN|&RNMhV=Q;nW3XH3Pi
zKl-em_a!1(I#g~XD_DnS{~G*GWP{Hp7Jd0@m*bg;65YCxV2|OntVZ+S*^9;f865Q)
zH#ZgRnRt3rzSt%=3Kr~9ET&U=cO$0o@5$i3kQ#?(^}Y@K@ugpGq@U(yjDmHroxff-
zo!D30k^SnmJs|$ijmZU@;Z%FTm!)@0oIw3yx^)#V$n-oF3U0O&N#t^OZJJ?2+!;#2
zIy58i;=TH#-IPm21>`KQ2Ni5DO?dB?s^Ie?OUMfSrcX-j#Qx#e?)|RF&{H!{ecg_5
z@RCGF=isuOitqRMOhdVR5v+p?H3Mc5)aRf=&!6R#Iik&HPV)ZBwu@BSu&MoYi<xMo
z8oF_t>)RW-Cd!3^QOU@E`v?`i2-^3!&<k&Uj9yPlk02!Olk$I|A@c&zfr)dyRK>0o
zXiDUneeZukLswU!A+Q-vOJ7W$!CY0y+(^UN)DZ7aK`mb97(F%A>$gRm(e;~xJ%-<O
zR|6HzABv2G-&o?CQ*ui>S~F$WePJ7)>h<v7ED<5F4yD=kOw7ivsO4MQn&T$ILr=XL
zGPQX(_Y>?9%;Gf~I%l_a8y@s=>obCNDTKWxs;4i{D=m(dpl0cwU$Fh>*Tft#WZXrF
zn9{R!<Wzp;)vJ5g8pkwf?6Z4Sri?=8h>+uckcZiu2Wl^Z?dQ(YmfVGk3%4qKOXY2Z
zo6oLu&+;zJ7jg66rIcX%Ws3Wj5gV>e7sYmabq>*+e-2ud`^K%<;H(Ze`L=5(1$%^Q
z+U2#ZRO9EN6fb!?_8%|p;w9K4c*ShP`vnJf7)8HfeG40T8WB(IG110^$S<4-nb|@&
zZVT9RasT~*-P7TJ$wu)XV2LL9FBSW>BD&jNp2J?~h)$W$VB>(^K$=$_J-<j#%#FAO
z+s`?s9`W$;`Vlb<b!KET?o3igJ@OI~-6B^W1>29+w72r^fRS$guz&Yu+0qNXt@yiN
z<M6Y7q~^WGwY(|WnxeWJlX+|ab2ECu9+MBc<>75(O66|QjV^%OpAzgbx_vy@@A3WR
zuz}pIsb3?%cC>w76_>k5ZY&|#OVF7LNbC%y8gf_WaJm12@BMYLzP&ed1$&H|s@Q!~
z>XDxox<#$&?#d@V(zOGEJw{P_Xfa<;RCEdd>i3tqt>yJmrV#}B$@m7{-S7|06uEXw
zut()$N;NMgCO7x7aQmop-hWx5{O?L<n7xQ!7puYa-P7`4F~gkEXe*DuL>Ha<r5jHP
zHp8jz08J@Ib{B6OU)!oWwF07dcYaf_z4T(jfGi7p`RCGQBsYm3lJZEuyTSf{cRo+B
z{rG%7+(Bi7B{i|wUA&zA&VF@EQ_iY*F>mDN*n-XQSZYUXCX8F>&jyYYA@jG6%#u^X
zaHp;W>tRB)`C{;hV^3T!l1{fS&0qF(bQ62z;wV@L$EfOrM$!SH=EEcf(*blQKP^(u
zYa_8cnM&Oy;vQ-`uJ04<QS9+`q1BNa^JXhIDIIQ7cXR6`g6+lU(;+t^Q;OLkdULIN
z^lo(GZ|Xn?ogO(DA)iPm84TJOH9V@#Sl_@AdHsI)cX-I2o5&Mg&bdAk&H>xcIdJ6O
z_WZ@tyqf;ejTa&(!NximW9!{0O0XWr*q5{FlKu`pvL>pwy*PY!<JFMCx&24OvR}JK
z1b|;~BLKl>cq}6TW`?+#^K!60^i;1i%jifx)h^fP3f7@dY+#6(=s$x7hsAoWM9Az#
ze?H_~KMvZ#{&2lNbxf)*k%7^*cdeyhdnrgK^&dCAW$ee-Lrvz@AZbCz+earh)4B10
zU>!O=EiyE(=s0?Ue{l6gu>GeeYm7<+F(;l5TSJd|oX+{M{Mom~!qA=6pB~$%NM7hl
zv|xL2{cGXT9|lg<)kWRKh8kb2`uAxk@27?D`9<m8juXDxLCJguxp~yp@mTA1YJMT6
z+a<&N$vcDY^XF^&7I2zH<@ZOpH-_4Hn^J;%^mF}ugxmAI@g2GmE;a#de~(&V(BW^*
zdENU31O6F*HFj0Df3@|u_e8;>Z0ygPa#p|i_XUUb=Rr5^5Sr6_Ya3U<5eKQ7GGdt1
zTOGFL_plgk%Eb4yM|TOgPNRThGlQ(rem)W5wofyqUdXgdd2C&ag6la!V1&hy%^4{V
zUDwVWaMX7c-(89l{JtZDkABvrDMk+yj5L=&mx<g~AiJ_n`zf&}>L0a{-|we{GNd_1
z5e>BEQ8F>kl1wR>X$LdOqQn#~(?;qQlBFqJ#xe2)Rc@wmoM8(;Bv-RCQ@Hh;E&MHB
zUt?-5tn?HvqYHeH)#!oalr7!N=*cbMnh&`(#d<??<Ym7kuUm@qtedu7&Lug=NH^i<
za9b0*!D;2?eU#|4^XpR6qT4m74Aw1qTR&+~3qDA0rt*z$Zs{RDOW)fsZ|hpxq8qx>
zZ#mJt8lyap)Bd-myk#1Tg{U=l>vm62e!8`1r2HPec&ljv*CjZ<_g1lit#fAhVR2g)
zew~-X?_u+t`S->xAtPOKz1O71l7E>7P-Sj;q6|OX;+cOhv|>wh)IprX<?_NN9Pw|z
z#;s$2p2ktrswE_+gzEdflz`JU$8ya93hCo}m!cq+r{88FOUT=t5;+Ami9d(i$}Xjw
z<K)X!$B?fr*~MnHqOWx+i|?uGc}dE{*?!7v>q_6r`Z56gzjLydAB$*oi$_>WN%@qw
zncc;YanhwMWpL`0&*7*(Zp#wds0d<u&h=<1WJ&XC^Y7(!!9K`-PQRDQ?(~M)2$#nb
z_}d!49FB9=aC>z6VG}No<XU{lttr)x+6tpj+k7XQsN=KT|B>UjzL)c_<t_He%i9gF
zwg<l!T+Vmm*4nn_aQF__`?fOTb=xNW8@J<*`jFQN@c}je_V~E*_QUjhnO#C}Tl${K
zC(%VqJ~KEprbW*T4#}_2ncGi%e=RS0g$V3wdCB!bFJCR~ZWbq_G4=Oy`=U*{eD8Ke
zYxt2Cr!$EJ=UM}Di-Lsk+e^x4-^0$<9zEAMB&3c;a}7uSTb?Vk(EPIS+t2Cse7BX^
zcyT#Zjus_y%7;H&a*R`K#cot7YhB4Xh9z()&+V|<_T;{pSW)NP&#`qms5!P}AL_py
zvgyUxExP4CFuu6tZ)OXLeOmO+;GlNPa`0PQ@`Nv|EkMp+&MCU==kGezS{y?f`Z<PI
zkaymHvTN81I3%4I<CHx;sFok!<Nw>;zjZBB{5I<Dc+T7lfnP1VIey4ezja@anp(1i
z{`AWd`L3jVN{QUMV>g%nc#oBCMb0@K)>bk<J!hu<=!(48?a~#zPOU4s3?jMx7+ph_
zkn&bcn0x$jWAMn^T&w8vN~=b=yh?yaXu)MNuX(Jc$IE1pET#3m%t}E|$K#>Xt*j`=
z?@^O~>#_sYBcgAeGp}NK8i3`I&DyWi>s)GCQ+U&FO_6_5e*ek(JhOK)WL`9z>dJb&
z61=4%Q|okIk-<jQGM{^NtYYh&ne0+oar_Y#5?RwJUHG%DsFJv&{@zx^E_zZ!So+O8
z8pZasbS$F_6tBHZeol0(<!`g^X^wMgBQsk^#lA(CJ>P4=W#5DEEqbn7iQpf(Y0dXN
z6{mI<lF1o*+rlq{gMY1auG^Zxk0`6wzg%z0>16qO^oU=s@yq3tcv^Ppl9sk@16m#f
zZE-wCJ08wrCZq!0=+!gmR`WNXEWqBi>|~~Az}0fGhri=)(NUiAm=LR6%hSHfZi_A%
zepuz2E_ptKe)8K({$=(~n=Sj{#+MC8dWH{c%XruW;+bpcnWH(cHz=QTn%KBy`LUK;
zl)z5aaJglK#-iYq@|k22K{=X(-`4joX&L)D2Ca0mkrMlCK}*LnUrnc>rDHj#TfQ^r
zG#qQ$5Ts^Xvf90dOhPzOO_w|tA*-y<xyQD;KBuKQxs4<iabi#?P~(^L4_jWt<>!Q+
twJ*-;iIlbEGnbcfdf-wTzOGy6#y++D?xEZ3O}T(>Q>*mT@LxaO`!9?_SHS=P

literal 0
HcmV?d00001

diff --git a/ATAPHtmlReport/runATAP.ps1 b/ATAPHtmlReport/runATAP.ps1
new file mode 100644
index 0000000..2c7712f
--- /dev/null
+++ b/ATAPHtmlReport/runATAP.ps1
@@ -0,0 +1,42 @@
+#set the directory where you want to save the reports
+$report_directory = "~\Documents\ATAPReports"
+#enter which report you want to execute
+$report_name = "Microsoft Windows 10"
+#saves old working directory
+$old_pwd = $pwd
+
+#to access the report file later, "Microsoft" has to be cut out of the String
+if($report_name.Contains("Microsoft")) {
+    $report = $report_name.Substring(10, ($report_name.Length-10))
+}
+else {
+    $report = $report_name
+}
+
+#starts generating the HTML report
+Save-ATAPHtmlReport $report_name -Path $report_directory -MITRE
+
+#enters the report_directory and searchs for the newest report of the kind set above
+Set-Location $report_directory
+if ($null -eq (Get-ChildItem -Name)) {
+    Write-Output 'Error no report could be generated.'
+}
+elseif((Get-ChildItem -Name).GetType().Name -eq 'String') {
+    $file = Get-ChildItem -Name
+    #opens the report with the standard appplication set in windows
+    Start-Process -FilePath $file
+    #goes back to the old working directory
+    Set-Location $old_pwd
+}
+elseif((Get-ChildItem -Name).GetType().Name -eq 'Object[]') {
+    $i = ((Get-ChildItem -Name).Length)-1
+    $file = $report_directory + "\" + (Get-ChildItem -Name)[$i]
+    while(!$file.Contains($report)) {
+        $i = $i - 1
+        $file = $report_directory + "\" + (Get-ChildItem -Name)[$i]
+    }
+    #opens the report with the standard appplication set in windows
+    Start-Process -FilePath $file
+    #goes back to the old working directory
+    Set-Location $old_pwd
+}
\ No newline at end of file
diff --git a/FAQ/images/FAQ_print backgrounds.PNG b/FAQ/images/FAQ_print backgrounds.PNG
new file mode 100644
index 0000000000000000000000000000000000000000..14e6aeddb4f59edb6f79a8dad5699aef1d6b9369
GIT binary patch
literal 4521
zcmb_gd03KZ*C%r!F~!U+H^e<j!<ux&AQe)}sk9m;O-(SJan~?QLB%DEMsjVL97jzj
zvr^D;NyVZPm(nbALq%;Sb3;u95|{6>=K9|2df#iV?|a|t{R4QOo9CSSoOA!qIluFy
zpE%~UU4EB52n5>h;*50%fwn+^>w2&(@Qs1(x(WPjiFS8#06pr|o&;{B1MR=F2Z5Lj
z$m%&6;C@?#Gd>ywQhc`g*}@IKM+AYC(Jol~Q?Wj?`N!{h|EbwhRb76*5EeG|=Jd3?
z2gx9)@T2?VAEXOw^5CkE&BNSh+F$4OVnRt}sLY)^-9jSAjP)&Yz<XR=e|R%^$bbJ;
zm#Im+=(%X}+|Q!;iTvn^m+{ff6LLz6Yp8_tA0(9M4?{ygZ_S4mnPuo<(7Urzp+707
z!&KTFXe~7C^>m^>mVkw~Vp-54BwU#Y$Ah~yGQn1vh?Jmf&eFG>)g1O8Hl(^5LiBeT
z?65cf8}Ykm@Qt58cn$Bd=GSBg7LX|ofyiU|wg>sT3<nz77;=?kF)x|hpq$ajN`|fh
z``tZ)KcoOnOZ5P20;*TivDaNlEK`>)I|`-uwop!wotB$!Rl#h$IHpzmeqGbtsE4U1
z95C0^MhzaOeYa`I>2@i|K8{bMUw4$Yj316;HBTOLs@9QlRA#=6(Laz6*dDT!E7Jj@
z4_tjNWa`ewWzM#Y5LJte0WVoh5n`1i^w256g}1d*=gqHTto0A112U(~Ac(`w_uOg=
zW@-dRiBbF_r(1M#<}5g)%v^!l_SJHbeDXrUhoEPt?R&an?4)w)KbnC{4dr^*>cL+h
zIfGXiQ?G%-o&Gg)*+1o`LjAS>{Sg1%37s;btB-uHZum2BV@A;~{(PaIR)~3usY*I5
zdy0rWyi=h@)gk9=d})T2&MDA<%>aZGBj=e_i%$C3TY%Ry5d7-r@EZ*YtCFckZ)(Ei
z)k%r!#cIp<9-}vy40P#`$mb)<a{YJYIxdEZ-jrWpC7N1zvqy$M|51ObDJ8#EjJn-%
zv#tb(`jh%g6hE$TuJN^CWB<6ukK~b`u|OCOoKf@H>AVfoorhdFBDopm-}g9Zr85{m
z;WfQDVhE^oFF}l~j4leUBs5kUB${TLUf)3}8nA6&b!>jXLwl!>W(L&kTYdjTt(u1s
z25;=P5x$B^>Bl&Ph<@NMddE`85{Ch_iMLCn>yjD&Vn|Q%gwl}-Tz?nxNkP@Y0ydi0
zvgp+t9sbuL)5ZsXuehArZ6beH+F0Ji%J|{hE-JbKJmZ=3?YH&fbe#!%J%-z$B3an~
zJj4E0_K;;en_QS5Q0=uvVNB$Ed7V5FurM2gs^+a1qMP-4nXjyVkx)zkV7{YlpHw;Q
z0{H3*(}GNqvm-LmNBJ?}_5&28mG<0RML!y)JI1z=jnGy<fxQso*O5rNJJ)Deqr<r8
z713!!DO18qn3|FyFZd?R`Bn2AjU6)XoMSM?T-7pe1wrQNo5sbX)ZkpDHaL}lSY4VJ
zH=tnb4$Mo=>6F>4DaU9}#t9w*NuE6w9^tML&ffU^D-g|YX*j#9SADWdA#?&Wxi`ID
zytk7vVK{Nuau(8$RJ(R|sXqq8u9#~?bffEZ2Hi{?$rMZ+`7ccYNryBv-C#y5#!#BE
z{&WdCeyXsu!}sV9D7&K0h&Y62&jKyNPECosf*Yu{M74x5uuD2Tfn5LP$wmZQCm^iW
zxgeowt)JP|WV8t&WtOL*1I-G^gR*04D>y6tQlrh_wK+5wSv;@a%rjd&`0L`|)SQ1#
z2tbcsd;}{_P>&%ch}RY&GCV)8ulPP?0zs@)1$L3tEq#1U`(=6Z`t86LL=wv;vS^wu
z_HTHj^k@fMlSmCs{hA-U@QsqNKAoF7QyHkog5UdUv<N_*`eI{wrpzN#L1Xk$jn;i#
zAs2^Qb6AzlmuUU`^VRd#nv#_&1VN8@OL9BwyKlSlfW&M2k+=m0ZXfUUY7ne`p3N9`
z-2*vBT($j%vOTUMN9_tx|3^c>buX4pJ+%OSNYQ$D>G!?53GodC>+&oa&z9#FvxHla
zz>{iYrFQ~50JHyi;=R+eQ8e_H<dkt?IQw|mpR=_M1M)*7Ygw@$3x_?_pKk9WwMhl6
zpHuA()!V3qbc6(oojedhq6F=<dC%^eRfGND8aY!*v`o-@&kb&%jUwYo2CgnV(YAJL
zO-9txs{N$6dl5Rl31_+U<qxLAn%AarGmE3iXGP<5uTO{OPyWR8i))x0JwI`un3Nvc
zoEE`SL8%2;9J8SKb1%K-5+dAigiurqZxN=QOlfY#i|DEW8+UAa3mAL0@;xrEcQ15*
zFfyHj0XtNwqPB8kr^+6h%X^=NT~Q<rKTU2>uiY-a__6q`=*`hGz4Xqfku&HBZEg>%
zk{OYu;^lj{Yg|$pTUS~4QRAB9iHt)H>f2hp#<mDLZWNPwi%fz&p8}e8<}WDc7%ZeO
z?*LL^;OZXGw#HBGdDsZX7T?p*1S4vk@^wf{-aHE|@Om)S&Usr4i`UFqL9iJfGC_`d
z_Nc-52ANrnK+HoV`+GdpCv@J%f3tNFYy6$4sf==YXU<67^Cqx&<f!?TD;VX%5ST8P
zk}ZS5BV|d6sn2jNF@mkL-M=BZen~t^b+mrexhUTng&9xX8>4kI&)&bLg!u9owhb0f
z81^~>6|$v+Lp6sE_0>&3swlCK94$3|<Z7xaE!zG13R0lkTG}Q>S0_o*kN0OdrO@U5
zB8#>&X#8frY(U1?fkcRwW|mC5_OxV%65C0ZFqhfyc`?|YO}%*rkdDa#LrxP|!l-;;
z7x9f$#B$PsA#<dw8GTJrtxT;{W3$p!y|dM?8y`LHCjMP|V~OXJG<yHpufB#_N{_&?
zFZ8i`K&IaMUJbO7v9)MkbYMOXF1|`NS5Btj$ViynSpgjfu!**6){~}f=HOLRAzM<z
zE+r-m?N0IB{Z({zQjRi}WJRIEQ#{STF4bLra&VjIv?KUSQ?Yu8NP)il?~{{%E)@R;
zw~_H~{M0O{(4#Q3RrJW3HN|WXpm+f!iFqEDn2h;+Pa-%uaq-iW@b!Ijs5O4@uysOw
zDJtUQl3jSgki_=|1K>5etWn6bJ9ZaI4T07{mdnSV?#`&6ny3yF$5&O%QsT%k5V(k;
z&i{O2{f=@Q=bXv2iVUAA_F6~6tB$zB58FO;g$_?Vo_cS2x$!o?1DQiisxaVR9-r~n
zsN-BmXrDy<a@(YTXV*o`2P<N_Zp8;tlmeOct7+_pl&{N$E{@w7JJXHP0mcO5A6>M+
zH(AJjKXyNj$BtTUZ+s;z*49z+yB5kVKB(x2;Y2%Xa{c4@=uB`z=e@<DExbg%4lB;$
zB+9rwMk`0+135ZLVg|6gXk`A3MnahIQeMVM6*5cQInz{Vn&-0F>;=JKeyl&Y=%vdG
z7uOjZ#vDOMQkk98zhHVJqpi*B_5-#K2|e*<@lXMI&!G#Q?Ck;7ID-8JbT_hik*GJV
z9OQ(Vub}VoT50Jg7e1`0SX!z0`Ar`b5_Z|bQ5V3@08Q(T+D0001y0Um&q8z7sEFCV
zuwWy(RnIrIO8%mB)=$1O+A8_`#xCWyd=i%s1|$9MDW0%wvZ!$#+e=ZPvQpt#U*WQ^
zH6HJGO@OyK5`O<{cP*I(VRFT0rw1*kTTiiCN4qphT6Dc&hOcd@j$GOlX!#lfnzOA&
zbJtcw`nfMyc=_b+xWiMz{$2|fF5?IF;A-C!gL3ndC3=%mTxY*-*INr)x{j6(#`gTA
zT~dWgwW!GgQCvXRSq@U@7*gjd^8y(J?sBe2I*}<SE<G$pds!}zsmPHM1{C)ezUETG
z0(r_Dimz-<SgnZ88Si?<s3HM9S3L3dVkd|&D`qp-<5x1$qxhGkd`(LFUgYURdYb;2
z(Ey&Q)LGKG!b@a-+Wqvn%{-wyjzVT@T<bpWxXbUXN;egkA=3l@rg7Z}w#ECK9F~Gx
z;upqmE(OWG@opMK56I{GT2E8ff;a0!){7LssPVVg@alF-;9{d6FRcZ?e^YX_`2RC8
zj2T5t^^|E1hV)x*&KEwimd&f5?AXI1moMW*isKc<VVDBnV)M`M!L3^1jmR5R)vdUs
zU-d#ayZ<@dQ_pX;(ebgrxn6>OSui?BNFBo^ZH^~ts)<VfdwnCZi%H;eV*Zcu249aj
z_RDHRk!h}pgNK>}Z6}}<o=VhDan=V|hdZG5KU+FwMkoB%Jfka~<qlg@mfS9mj_qrg
zPwvyMI5?7w=&SIZLrZ2B1#e1@H_+8B%~fURwvQMzdJq8aa`SH1^Oa-~%s{~v?cyIz
z75(^N@BM5U^t+<A@(1Wx%d{uIo!)PjdpTJYq5#k&57lMqxfjsK_xl@14{AA*STy5@
zEVhF3cZW;Xui3LsT-Ai%rX5++OePlY+=tz-oV&75w#~upJS_;mdpS@cE7koav>SVB
zs!PKVQgTzjDE(ef0n%CR2+|R&;#P(sTu0>ir_qdy+!I=0_`A`CsLQkEg4=CZDhiZZ
zUPXzs1<!&#8h%rfBWvXW!k#BHv_GG{*zu}%R(d&Th_yHpH`m3u!o8O;3|NranTLpx
zMyhi>hP%~QZG-{DNOs(cx4o?@5iqAWs{kz&$3GoB(B^Lr?E5B?<=O6V15w)kSiPLc
zlq%Zh<s{FF9c!NnZhI&Am|kARH6Jz*wo^S|72yXvn>lytDy!By`))@UT)4=Oc)1+7
zsTAsMKNL47;-IA=x5jKNA|&r*JWPht))a8_Q{@Q*@4~o8)KqqS*Ka#cWbUEWLq7z(
zRd4lol8r%~#k=O|<M(>^c+MlDQAZLXx&f4*?6s0(1WHl%{hgt~9U6x83t^2<>!X|f
zZ-CCHKSJ2Vc${V3-0jF3T~lajmkPMXBwc+r$Ms3wYxC$Y4_5o2Ds4rN#pP0377@K}
zBXk7Z%tg%{cDs^<WzlHH{(GLng%EAJmWS$kdCPT#XNz#gaYh(Y`+k8Y9JG>cgXfzO
zBTE}3q@kVfws)4fuRKnw<k#?0!>42ahymk9o3H+w&x>*m{qLN(=?ef#SO7|ew)l@2
z&HE-R$J2y?!dD4acQ@FTzkF=A94Z*F-XIsQ6aKKJiVkfcKdnPX%E^m*23uX-<L|rd
zDp&G}ZWL;|L0!@DXIyqIZ$iD8Sp+)W?f`bv`%m*t`m89Sc0KKWelGSK;Pnc~1$PYl
I$ia{LKe1Xq+W-In

literal 0
HcmV?d00001

diff --git a/FAQ/images/readme.md b/FAQ/images/readme.md
new file mode 100644
index 0000000..8373703
--- /dev/null
+++ b/FAQ/images/readme.md
@@ -0,0 +1 @@
+Folder to contain all images and screenshots for FAQ section.
diff --git a/FAQ/readme.md b/FAQ/readme.md
new file mode 100644
index 0000000..fcf64a2
--- /dev/null
+++ b/FAQ/readme.md
@@ -0,0 +1,51 @@
+# Frequently Asked Questions
+This section is dedicated to an ever-growing list of frequently asked questions
+
+### Table of contents
+
+  - [When printing html to PDF, color-scheme-formatting is lost](#when-printing-html-to-pdf-color-scheme-formatting-is-lost-back-to-toc)
+  - [Can we add specific exclusions to be more compliant?](#can-we-add-specific-exclusions-to-be-more-compliant-back-to-toc)
+  - [When downloading my anti virus scanner detects malicious behavior. What does that mean?](#when-downloading-my-anti-virus-scanner-detects-malicious-behavior-what-does-that-mean)
+  - [Why is PowerShell console stating commandlet "Save-ATAPHtmlReport" was not found in the module "ATAPAuditor"?](#why-is-powershell-console-stating-commandlet-save-ataphtmlreport-was-not-found-in-the-module-atapauditor-back-to-toc)
+  - [How long does it take to create a report from AuditTAP?](#how-long-does-it-take-to-create-a-report-from-audittap)
+
+
+#### When printing html to PDF, color-scheme-formatting is lost [[Back to TOC]](https://github.com/fbprogmbh/Audit-Test-Automation/blob/master/FAQ/readme.md#table-of-contents)
+
+It's not a bug, it's a feature of modern browsers to save ink. As per default, the option to print backgrounds is disabled.
+To enable this, expand the section "more settings" and enable "Print backgrounds" (Firefox) / "Background graphics" (Google Chrome).
+
+The following screenshot shows this for Firefox browser.  
+![image](https://github.com/fbprogmbh/Audit-Test-Automation/blob/master/FAQ/images/FAQ_print%20backgrounds.PNG)
+
+
+#### Can we add specific exclusions to be more compliant? [[Back to TOC]](https://github.com/fbprogmbh/Audit-Test-Automation/blob/master/FAQ/readme.md#table-of-contents)
+
+The scenario often described is as follows: Customer uses another antimalware tool than Microsoft Defender. So all Defender related rules will be non compliant as Microsoft Defender is not in "active mode". This leads to higher "non compliance value". 
+At this point of time it is not possible to add ecxlusions or rationals. AuditTAP was designed to be easy to handle and create fast, transparent reports. We are thinking about enhancing the product in this direction - but this is not a short term feature change.
+
+
+#### When downloading my anti virus scanner detects malicious behavior. What does that mean?
+
+For AuditTAP we are using an open source installer called 'Inno Setup' provided by Jordan Russell. This installer can be detected as a malicious file, which is not the case. This is a common problem which happened to other software providers as well. Here is a link to a stackoverflow question about this topic: 
+https://stackoverflow.com/questions/68834409/program-installed-with-inno-setup-seen-as-trojan-wacatac-bml   
+If you don't trust this installer at all, you can of course install our tool via PowerShell Gallery or by importing both modules via PowerShell.
+
+#### Why is PowerShell console stating commandlet "Save-ATAPHtmlReport" was not found in the module "ATAPAuditor"? [[Back to TOC]](https://github.com/fbprogmbh/Audit-Test-Automation/blob/master/FAQ/readme.md#table-of-contents)
+
+This  happens in case PowerShell "Constrained Language Mode" is activated and execution policy is set to "AllSigned". A simple change of execution policy will help here. We recommend to change it only for the single PowerShell session and not permanent for system or user. The following PowerShell will do the trick:
+
+```
+Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope Process
+```
+
+The following Screenshot shows error and solution: 
+![image](https://user-images.githubusercontent.com/23223285/216938169-b92200d4-645b-442c-8d00-de46328e75a0.png)
+
+
+
+#### How long does it take to create a report from AuditTAP?
+Depending on the size of the report you want to create, the time it takes to create varies. Here are some measurements:
+* ~ 50 seconds (Google Chrome) 
+* ~ 2 minutes 30 seconds (Microsoft Windows 10)
+Each Audit-Test takes some time and depending on the amount of tests, the final report needs some time to finalise.
diff --git a/Installer/.gitignore b/Installer/.gitignore
new file mode 100644
index 0000000..7152825
--- /dev/null
+++ b/Installer/.gitignore
@@ -0,0 +1,2 @@
+atap-packaged/
+*.iss
\ No newline at end of file
diff --git a/Installer/LICENSE b/Installer/LICENSE
new file mode 100644
index 0000000..f385a47
--- /dev/null
+++ b/Installer/LICENSE
@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2023, FB Pro GmbH
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/Installer/icons/AT.ico b/Installer/icons/AT.ico
new file mode 100644
index 0000000000000000000000000000000000000000..8bc8a540de158d46ae596ed70ca2af7efe75fdfa
GIT binary patch
literal 68249
zcmeFa2Ut`+vpAk*6_g?tPy{K8g`xt|l&(}89Z`@XNEbn+NZmyR6;QAs(h-$j1f)n;
zK$<jZ(ovA!d)@u#fcUZazTexvd++~uFL|DYlVmcJOeT}b<eUTm6d(aeK!FW__aFdP
zi?O9R|26=kU>X*?6lXaDz&B9<#KeBYw*x@x4geF=QapSE07pUq*t~fuZnz$RhR7v^
z2!2&H08YFC;J&=9GzBRwDa@fbDI=i>01<p70vm|ozww*Zvk)aXDREr+rvE^*k$clb
zK-Y+zrE05H%1GtlRqI9?x_ewG-P`f;$3AJ(6>fek^Tbe}$Cc;4z5#EsF<+GMtIDek
z{rb|hMwA1m5)~g;$_Do9zh1}bJrpZq@5J$jf>_tyLRGbON@WVe=y`wFn`V*7-nlsZ
z(1PuDP7SmCBMV=(YO=Ko$Ashn$YI@Aivl2cm<HDE=soy|y}kCh#)to32*HP1RAIKo
zkqC=DFQ)VED2}9NT&Wd^XgjfQA6rzkvYu(o2Wo1zL+nZ{R0(BlY(1A1BW_+yY;P~#
zyLD8kTwo&$+l$9ry;N1BB9qU3Ek5P-^qKD@Cm_0FrE@~ngI+26r8x5(B?~vFcEIJ>
zw^^EG$--eSrG7OD*IpWXA65y!Lvo4#iEBZP!?!!J{moI2n(dzMWJs1Ja#hREHL00?
zU}iW`7NC}@<6NJ8`ve2Gh$k_JX7xz+g8JFPdXs=}>R;#18P{kncx6qFmPAI!B$bW4
z&Z~YZJKt~Miu1-B2N123y_rucJR5|GR4EtIJwikSP(1b%k((AKwAgXDYkf~c-VDp(
z&eLJ$b!&L})WW7+y-Rz?;~Za?<0i7>Wl=;?ud+1d7DgG9`X5P?;v3duBs)}eY}LYW
z1^5m>yeZ9$C|*?>-;Vj*(H3m!8t0y`lQx<dbin{PJ)@_o@X5y8z1BA%!!?j&!HAHY
zHzob&!Z=6007Z+B)&rk=wB}Dl+-wra=hq37W1py(>?3Cy-Y+P?b2EMzQw!_*__=?z
zLH7J>OR37<h5B;K@7)T0<XXc*a=Be)kcRB=#{)d}BRcOf2`;G3O!0{Zyj3li0u(YH
zpVXNC&cQ1va#cg;@RL)l$N2OEP)BvG%w=>yo9typR?C#63kFn~5ep>MH)h{jx*X&1
z^YSh`Zve^)LmvyFasqr97;1CkFuDO-HmFYaEA015C<E9G9k5QKyr-)8dWD><yJQ2;
zb~jiHF-<N&#6;~8bzp0J*#`GBJds}_lxlYZPgU6H=iPl(g>+`;4c471e}8*kh6yXC
z3#g8jk5LIbUThh6w>%Ym#>&F*ZB&T>8jQN2<U14-6MO4Z$_1Fs6LOhdv!=2vi9rVi
zI=Jw`#mvYeYio6bb&6)MR7Q$U_K|}^GGehUV+j`|J?In5Hbh6r_({cHj7O@f4XEPt
z#^36gWt#?UxmffnO+YY)9WZgw0Ld$DRdT#`{lb0jVs!o8731CE2#H<jU>UtCBT0{4
zuoW3TW#Y6)QeTsS(FZ8`SNaF`S5GyV)b5n+c9rPROGH|yM2_84V>h_VI%!9txj|T{
zi%T>&U<!lySs=$7TCN6sb<c~a>J`Pbz@}YyMakcRFg()@eGpC0RZ|tdfMi%v|4V@C
z1r0x*y2;QkegEt%g2VtK*-!1kUR;V<?>*ZeqGNz`jaV5caQ!5q6(nUnkWgl>SpNRp
z>unnmCTxUEfYMbt)!Nl5%G^FMK<k!|;5h*C?Bx}V3e2>N;r93H8Bi%7X-De54c7gL
z{dd>>>NfaR#pooJqMd;`fW;9ekEHwIAD`@_3Ok#eZ2W4mTLx(%YxahQQrYz#>Lc&6
zsp58J5H=1#0c*&cy~Kwv%FjErU?y+llKDzy&%m1IXuw7}T@i@s{+e66b2=shO~Py6
z^B8iui5gb*IX$E5P#nfIz{$kI(gIGBunnoYkamULp#Nv@!|DcYwBi8)z6?8&o)r8D
zhL2svjfK@SOY`3RdJDnAMT{*!OF?1eS%A-~roPYOSA<ZdzXYZ)mPaTRZyF1)_mC10
z<UMxO5UJ)JRGTi;Ta~v-Vz|xGMcf88_)2NW2Xko}Ai~$u7*$!<`lc-BtOes0l_g1U
zghV4SX)_)#F$<>AF=w}BW+L#75Z=o-K&5=JxpwDs@!4LL3HxCuq(*$iSUC!<tmufz
zO?~7|x6YeHL0yVuY$wK2UK`W8w$seC<~$F=wG?MmoA~_**8CRxDgkr~i=fbGeitv%
zUS-7)c~-nFAl*l`iJgj+dYpG=+o1SDkYnVu50to6ip)p%wkpAqbxcX^T<EAXSqwKY
zP(Gx#mkTsKI~ztVY;msuFR4G8a~zHo<A6upFXUxTGh&(q(B>z?L)F|EZekCBSihZ&
zs;wq*7Yy30_C4tpvCm7}6ZTAW<W8@qLyZ7>Lq>k<T;Ma2Y3=t~-l#V2OoQ_4V_J`B
zyAA6;eR*yvRi<21W7M8Kmy*_H*XmVV5_1FF#>!FmZ3v?!H{UHys;W#i|6QEH+jmZC
zzn5Zx9468!2>(G~y|v+3EdN^}ZI7~TRaL#hcISkp9~yr9uwE}TwBvPE?S;^c=&=6r
zr&}3=x(3qJsWjtH=sloNG&=v{@duIK$tUthqd)f=mtuyG^O`kBhDtLi*r<4&JpH9Z
z<(h`l?c229MlcF}gWd8aE)?rA92`Mx#>N&yp=Z;qtM=<DvcCRy&89y3BHrvSoaM4^
zbd6WGE(AR8O5OHN>cdn_HChxG?^_$E`h9+e)GKwN?cJ+a5^yeab{JNEfNEn_xQb)9
z6(1Pz#U+YXW$Zg0tuz|)Hu}tKJ-ynUSqkYE5hq@F$}Y6s7225UWGT83F=#j2Blh51
zu(_S<j0_utDkU7-nbY^5^x`|V^^sG_kGW7pwqz6u<a)C)wgz`j^v!e*DUpL98jpOQ
z*^h_&$UDTW_l88b4?RkM1!q;25^r^bX~mjI6(O!sDEE}+V_I+AEi8<6v~vW|&Ra<%
zu8-*Sk!q1TPj7EGm>--5{P^{!d*^K?0>1B+_P+DM-k&u8E~*VJ?tR!O@+FkGV^pT5
zD!vB<fW13P`=DPDi|sgz2Oh28uO0PKmkSw-yNR(&x-;WafYYv$@yW=p4n*57W;n@-
z%zWeFS|@vOtHO1wTBzG%-B8*rezH;NiBAgfDBjA3$jVsQ4v>1782iE}o@)Z{@)C2q
zm@Y_uJaY=_rM5I0;9^_uuOJ|1UDzHq+t5H2^!yDR>T%kDrfBaI*W?s+1E%uO$-$~&
zFLpTYhN;N`^Ap(5whNY!g<{qR41~ZiBQf?7!&Tgkk79OrL#3xPiQ72H0U8<S3nbCp
z@=S?$DNVY+!8sL73&RXuVPV=u1x6*Wx_1wUUlJtP3iTA!z3+@tUy4Kg2q{5wEYa!G
zPvKq7)-l}j+V?3%l<_vQ_UqahVFq2A#mTC>o74?*#H>xCj`X~RBOFetRMk89@$~H@
z*)OG-x11fHfRiG2FR|G1eW790jnw^q_)b&I@jl!LrteV@{)~#8X>!?!*ZAv_-i0<a
zte)py=NR<G&-jr7r>vQ{E2Xr;Gf#pHM~b~3zp^_QtK2n}RbWF>*M0wO4{nF1`~|(&
zmZYFyWL>aWLeJZfyPMX}j$m@xG2xO^EpzGk%*!=wHJGV%tK%X(wGELY=Rd(7q5;lF
zxcNeHb+_!s&7dwQ33531LcZG?6Z1CXVkxwY&VLuJcS1>eFs76NKrHqmkH~RMtF*IJ
zEyK7*6=$2<ki@2*_%XOJ+m?9?Y!%czM<1f(0kj7zW%2}=<7hQ+9`_pS!hDZYt*MFl
z>K8{tHB)!lBuXkh4R-h<>=QJawk4@VfZ6O69bL_6$CJ7RyM15Zs3l)LWd0}{PAa`3
z*YgC>*mfFV(`lpGW`^_2wt2EW_WZTn?ChHp#ww=uiaC4meP$+A{nLnQy~_ng4+hAD
z8{i%L+%t?@-YI=`b)~~C6x)ndkAHSse{eLrr}mx;hXyoV+Bk{D0v|}eq_vx)hrq0M
z!zkVub?YjvZEUOxWBQPX39%11*#sH{pmG$*u|lH>^*OEcDcXJKpjlWp)3^PwR&0YR
z?hTO4*A0IuUX=^yHLxom6uzwPzXGeO9`BHT>eT73dCTuLHENR|$kwy4F(ekWRJA#i
zEknL97p)ur+UD4hJ~~37W=kj9p51@{099l}nXbY}kE_Jf(#r_1?x8#nXf@4S^Hg}?
zcbGMX`bxT8ovEuktP$zlIwQ;A=2|WzeRn?z@iOe<OtN9H6jLWSYkgSH%gfkt@ZG#5
z^^1;o9@SHe^W3gHQ1}El*5x(dp#)nW;W&Eo(1py|Wc<5O%Rc3XCjYx3->6L=K)VG>
zt~oiHi4saynxG(hVLJQT++-iaf}l67hB7`zbxdA4LyD52`leYN?1BPLFsiL@p}dfd
zdtfQm^0c}xYKB-EU-lX*$Wl4cfcB7Y&+bc63tAS#j@5-7yLoO{TrWfcR>CLyJL{pe
zsTM(8m$%5cXEEc9?cgmUrrO%j>i%e?cR9iJg8^sQ8fx_e9;qI>u?yBAGEIQj{<gSN
zEN`+|kd&P*!h$;}PhCW`9LLTg9h;7s@JA}}>aFr2^>@3v)mo<SgcLkP+O+}AbXTZc
zsl4b39A;+ktK_0$BYI-9%f6{ZDJKrROQ$6D%$l^yKX3q%?pr8N@g9j2m6>zV+@r=b
zhY%LHLcvPamEPofOBb1BHQ^+S%GpAW-9<YvSUZiF1U5?XI4)kHae3LSb1YPfW1(ji
zZER$-G@153=@qd5l17AOrUA#keJI784#eP+AL0T^giA{!=RTGko3lO6S<w>fQwc46
zut^(q$XvHNCv29f7x0MR`uh0L#p0-_r2d(%8<P{av_mt+#e*<cA$b%ezccNo0{2j+
z8HB8%<8P^~%)Vjd_-&(eukj6>rP~EnyL4nxhZf7>0@s=Rio)j#ABl<L%$l+^yprDG
zrG&GyG~M3q9-bmkN-{FO`DGcBi}!U4Xq{J8)WYYJOpY>LRCu9RF7(7ZP9u72n5;?L
zybY`=ssI!^WqF948~tDa+s};|>r5Aba(K3{mNi31vL(xrtM{SA)3b=mSVx0yJB*mv
zf`UX)vcBi1BNAIfw&S{Zo432f9^dXEsD3tUlVj6)gpY*a>NHcz3jGr1RHJ(03r1&Y
zUw?h$n*w2z6oWLBhw2e4oX8zz?ybY<82%{-3kC4tmo(l3u>19TeB&Z?931aT#rNEo
zcq+RWO3FGaNd5BTlalJ{P_9Mcs;%sGLh?BZjvFi$Nm5e-b&Dd6#p-}2=leKEilGLC
z_3wmW75BY<ZCw9>!l|x!6M1-79%6H&@<FP2U>B?Hw>udl8~dJSTu3nWGv3Z|_)Fg*
zwRehRn$x#$WomNWOG;ur#;qHGV#3k@YnA{RmNbr3e!R1BWYYY*uIsk2U)efKmD(o<
z*4t(3aK=NiPESWzwHe*E>4BA{kxscL6zih8%545z3MZ}aXUoIqkVPOs<$+YRCSO#y
z-FrA`e0AP2iU`Tzh2%3+8MCFgvSWiLQj%Cjwlt;qf-l;j$*H41Is^ql;ez&%4bnw=
zDk{be$)z1h3&zHH6f|D1z-ns4YHANBmh;%nr$UB)Y8-#Hy>q0y^&OAdm*B^eWTl#|
z9%%xUMT<r|>H|nUTYpBX65BdoH~P&Dx(s;i7Hm#GGaO0DHl3Vx<oVJPx+Kwypm5EW
ze{_~VE_L^Cl)lHVnkD5(bO&YbH!CtL6HzXTba+}=vf=v#Xk8iGcWiMUQa1|t%HBLM
zP^^Ch>F`@9b2>QjhS0-io8>?JfanEZyTQuOs!)X0#7#|oX=$Ot-@KU|+sMg%B*clI
z$bNh%O*+Y9K&_Abq~gh=(a*vV(0?rh7IEq@+Hdam!*3VGXLM2z!v-I;89uIZ)&7G(
zu4-Ci!_$+m5g7vLw(YN<oU|mF?i6)<iRn^QQIB%*)=VfH_Ns)7oXS=+$U`{YrWl6A
z$uXN{89@<J@eqxjor9u1EexF{NkS7(EnVVX#c8Va-=<u~c{4C9@W}zR!<bh4B>jFw
zf-5tpj9bd+p^drK?JX;{hq?h^xlWE%_mtgB)tuRgOryPhH3{{du&Ph%s>AQo5n;-|
z;2dZ@kfk5hG2)y<H1BLxw#`wVH|QwMIKc1AuwaKQ2@c7L6hTog+~mPBi<^Tib=`&5
z-lWMlm!EwFJ^NL(2nR7%^YZotnqf*{<85K%pZh|V%IDF58!}~|!Vlyy;@HzMNziCc
zDNBt=C_Z(l-6f}$JKj1-Dh-+Mskn%9b`gutok=_(t7gz~wiy}{71fsmxWe@M>YzuZ
zMIcx7@kvX@V>%kB;Co!)>IY{({Ij8^h{xt%1axJ`o*k@wY<7)jIElESfd@J<0#Ly+
z5NeOev4}5bj=GSi)O`#px#E-;44NLB+q`=wJQodldPcf|hpNpj0(9&^x9wk)s1jAE
zzV%0vO?^`?-?#jD$i#m7l9%u_7D6LS&k}t&)~I$9=TKb!Y-E{|LNYm$&FFy(I6ZM|
zz1nOsv^}$qP~A7Qy$lT#u`N(D<a`=_L#$=j4A~zEmkbN&{0Xh9B`YQg$^bO;X{X1P
z;P8~ZhcZVCGuj8k0&pDh3^w(YKzT{%a3WEjsMd#GoStR1NVStV$MV&alaiDS<o)gV
z$FsJ)W}{tDiAVU0YEcMUs~Joeo0~-KCxNS1un2r+eA2jMASDJit>p<_lHvDLeeQx#
zKWTZ*j^COs3xuYv{AC)T_01+Q<bdqD+0N|F06_-_s2`v?^`gNn;|d&7mC07G(X)A^
zVvd|3YcHai3_M^>?+mF&=!u9z{XosjYdn8j^bI204s$$}b<j8pz6XIXcN9~fO@cN$
z?Ad3B)ZSe2vHYlEQlF~u!q>QuytNQnFI+bFh$i;5BgdNDtd9;E$~<6Z`%z$@*}48N
z3RH;ZO^#O}%g%>#=qlOp)IR{J@m?BGw_&yvv)H$}ln}iHv~_(0?aH7Oew^yBU0gl~
z%W#5NF7vOq^yQ%cq|i^YTv$~Z88G#_9uaTjD+O}-GkSJPdSoKCg|Lq7-Anpbr!hGM
zQF~+CIXYc(IC@OnSVWE)L7)u?kO<d{mO9Nuh%j=ZFX>ewoSIJ?UGVV@viS(9@1N?g
zDO_BNxIzt(Vp|?SHeQOM5VQ)9+yKR;<a3gV3T_zc7p)!<`}2Wa(A*e4MvTo$o#CKu
z^TVIoen`2bQ#&w7OG7nmpP<!w*rQ_Ve)<I;;b58Gg%<lfUg1gH`URPAR6Il?o!QU9
zK`RMWm83~60(_=xH-%;f^kw99(SXM~sBCDzq*=1XZ5n)WY|PI$dYgS%dZvaZp9zF0
z@MlEq@@A;(<sNsYygh%QLnZaz5O1OP3mFL|ad9}}?LW<+I2qiG#sjS3@L;3&P=_!&
zds27sH%H`=Fh=4Rr*@IfaR6P7!UyDtXFEkt(jK*tx!+?1XQRT<s@`L^)o=wHVrp9a
zstUmvIZf%DO@>%Z)~!iph3WSfNG#?t3mh>sFGUqgKR81la-wXS37oK?gZ8ksMR*q@
z?!7>Pw+rR2iVjK)&ApN!&=FXL)}9{KJ8NkLwT9M_h(P>gYt2*?KCHK(mi3~Nu7*V&
zG)%v##<6W_d+9fHZuYZYzR0{M3a%*q>A~Tq`6)f07R|GhlWGRRSRGT-H2h4L%14rY
zDEs?~K`2CZ8K|0LCK)|nRSMfJ33Sd~SaQ+FLc*wK0BpSI85G8+ufY*4($N7Bam-1w
zZEW-+@0N1{sW)UdVe9X2oLK1OuiYtj+&z0NR_Y}(8;i7efNnv%a}iM*Fyj(5_e4Hi
z*a#ehZlIZ-$VLg~@Z(W+Rju1A4<6W0l<IN=t!-;4Bc9&!whWLO_vRd@&`P@u`%c=Q
z4hV<IkwAX8Nu^QJKkl+YnEN3D<te+rCKDs-f&cpIy^I7mGxLvhq#Li4GxU+?<n_l-
z@xXBbZRa3!eE?^a?vZw<>>0{bpTS8hJ?@=IHQPP`nSyrLtg(ld#M;K)Ime+F4G~t9
z0dY>n_Y&X5B^ald07lbc(Zf89IzWu|E{!aR_rqi9?k6X)mXcgTbsggZTcIDvrkw&3
z-XS$PP<I)V4GHVYl4G6ZL{;WLT|hF9RE9&xHk`RQw@;%yOD|Ii+dmIlAc?K4s{LW*
zi#ss_xSh~zhb-)KR6kDkSDrrzebqVgZ6snt?`|~Bli1(q7kSY=H-w;}>PC5<45NM^
zadV#XqO{iD5GYKLEVB~>K-@sKeWnnL_x=_eRb~w#dh|u=FQ_(~KplvsNqGwTA~yo}
zbyfiSzpvuZofVAt4fU_U<uTSNXA?F)km12VGaNwE4QK4`x`^PR-wf*{wh5GvRp&w}
zIMg%P?de?#WrXDoOoa%pHfx(ig-S~y6W)0yk|qAZVS#2Ly{{BjgTZB35@U(Tn!xa)
zf4Uv^DW3!srA1qqO1_O)3~nR{?^+;hdiE7f!n5eB48{`i17eXGiTgJgVZTW3gPQ^q
zfybZ$33GTsf{#0tif;yZC&3EHLyJ9^V1^jXfU0E4K`o|0Tc4=9&A|c62kBmUbnsOF
zh1V~Ip-?J7<CO)Pt4O6begcKBs(L$Nm14(}tyzxc%2j~F8$N;OyJ#vZ{LB#2ruOAm
z;ffi-!vw9-psTo&>k%8xRiSpZ%$^EF&}@L~N+{|r=^h1mu}$NWdtBwrJ%~43IMD#a
z+amg=6?zo!L}bqKT%U-91%%jVk^TsQ{n4SUY7iz=o>&Gvr6olHbe4u7o_f@}VzIp;
z7etiM>(nYKv0vemnVeCL=(_P_p#p{Dqz{6Gtryj%mxxrJi6gC{(Q9$p+;LKY5(}jP
z>FbVsdDt;`@51SFF&QT(qVTPK4Dx_!U%9_ZYXKvarNSp6^q}5C4Z8Qxqi~fOdWKC8
z+HRDtR^XGnM-<W`%?JIBaYarjIB;y_-=eW_2+W_>%8dNdgQ&dGU=|Xw{Q>8!P1rr~
zPDJ-CEm#(<w8Hq1UEs;W0<EK4E(Uvo#%9j+!4%X;0A|pEz^;g{aU(q&t*tB@%<NAH
z7a)e+VvY~=r67KK5H_Bi#LguQnZa}yZqKEd@X*#wzrS6(b3funnsOMjQ=890v&BU|
zKC!#+RS1+PUTEhAwinb)jA^lKd!Tk;rU9--X%}{gD(2Q@=?4%oNxK>&3V}fydMf4@
zhD@rmXXA~xA4-tj=x(Q`Ry{ruXY$@*s%M<ivGDFGv;98GQ;(R*0h5?(?;)UShGSPx
zl<LFJXpNSNQo^0VG_#WJybIq&6J<v-aWWEc{6cnIe-#c@NWPn|4c?*8{g%ni2|u-p
zrYiwk&VO|!6&`OMihPRqFf&f$4f%T78xENcnM!iN;ioblZnro;*Cgn<oycenQk{DH
z*09Gq%QWDtoyOfwMT;g{hgc;!(z~{rm{Nh4ZESVIq5Gm#;ZBeyoFnzrQ=o~|0tchM
zlr+-k2r%O9n4Q1TcWdTw3IJro$h!crR!#53y^@mP2242gC3}fx)C%N6=QU$pPFN7q
zLrx(yh)gsG1e6KmI3nUy$2v=Ecb0`~z7acZ)ekM9OhlDd89|A#j$k3qfj;qBts6s~
z*>Hj~f(|<f%d+uq&3v^Iv>f^0VzQTZg_>SNyqN}NECX#9I!ZaR!V@Cd`pCl$+O(lm
zqV3>BTBjJKDG${h<m2GuArfp9WQl6Dd{sM?j-z45?}-l8XEh7tPT4|nx9Tt7yO}48
z5x_xC>)53Mne8_<-LCfKvrfQQ|Hq#dTZmKFGpA1(CS=3mm!mN}fz0AuNY~@O$$CBW
zx?phBsAyp-3VNYnEuSH~LW}!#gSX<KK*PQtgz93w>SP-lS%CGC8>rOQ8W)jqKtn_`
zI#Z*l9_n^rU08?Kew(ho&2$T_fchIfH)A?FxXGlVs8;Nu)p9F7rM31ZqRHDf%~%1%
z20Yv{uc{gQy)h-~)!XW{JR>*N7{!{<12Nq8rG9}5Q}Mb;<2}tt#Guc7JSHWYn>6;@
z3tr>%iO>MEQL(g)#Nce8b=hZTrfPrvGi(|C@BpC6xTyda8RreCn!cGfDkt8Iw{#hU
zBC7VW5!~>-*`)#3&`_DBqO*1ZWTC2iwPikKzTV*7O!<NB&DKGY$yef$Ud@&6ut8K>
zV@C<f^LgO8e#@zcxS09bx}=Wx(Ci*oS4m1zo1N!dtblNM{Rm<qq!f9hgYoSi0U0xK
zm%7{{zjcbXwwYqpxvOks#CLE&fl57_MYkwW^z?{8U3e>BDmPO4(QJFOU0h_418mt;
znxMdv<FARhl>!SF%M=;$B~ZpA8STzM7A2JBcq>Ex_uR;!;Piffn*@$^9mrL_>8l`b
zSLTda{b`N}e?Pqa0V>i6o3Z_{f~W0=U(A*VL05`7ojor&67e*Ra+mpFXZGh#eYlSn
z53S2^7fN(l1T-0al%Z!X=g?@)(nf7yChU3sq5B0%<}=sfK9*Si{EXUc6O_v={tUCA
zP-4gn(6pzO9GMl{`%5t#Y!@}J1~}1ea6Vz&k_UNyQY$U`iw`&K%d3yfh;yJ{d?2}u
zB^7bvj8wwW$$8iA8An~lK-1=<-hs({aBBu(WDY-C`&HEGCj$eB<fYgo_WJrpLs;m_
zeLG&?70qpLHr{N#w7hQHKCOcYl<mcg8M)7+^n$4~aWr>M7<XFb9MiiiUESVB&mhJ%
znh#|1+k35s4e%w5GikK7u}Nh)hoDA^p5e&840TJUsp+Y*R7=kt^6vIr09mY#P|B)9
zISMfdszJ7SxXs<zy2|T5hXo}=34!ulX^3p!X>aO8Lnj*CGzq^Ujdy{L9Q#H-xJ7iN
zRBn_n#~=EaJQ$K<0Vl~A6eQp4qn+8VaB)yxijg#cPK`*1@03vD<2be|*nh|@9|!q)
z_F&v$K3>tA10nvIUQk&@)gZvBQJKq(!3^DW3vSW#z@1tsn|_>26BZoFCiMx<aIY`Y
zrd_J<PDq7Ax98$iYK{(thNXov8XA^oI29%enVaTS^B^ykr+TB1J~ST=Ueb|G*dEZm
zFf4um;<D}8r&3*g-k@z0{1^UpXAAN362z8V+-t?sanb=F3pEWmeCxi1cOD3Y8>Jd*
zlX=^=PVs+=NKaI%Kl2fakmYj<>`05|gTZEliBWxHhSuQ4MNHda=s!1p&mISrM@w6a
zgD(RE-1Ii5-;d526UvtjK=|{_TkBkE$Oi$mbwoy*8ijfaqG%R3ums^6u1(+!@uF4|
z96F!zHe%R;y(X^|<Mh4}r0j2~eDPM-Yyy>^a~ZfJZwH9qJ*e5BjJO++MJe(1SIIAq
zPuaT#!4?e<3j5OTg7)_CzV(a%u0z60ppwn4-C6i(G?I<?O0zK(3Lisd;V@aKFs2{h
zqQt`2Vi-sm@!p~t=O`#eufVM^_2f&pPw>`2R@T`~zggVj#hOsrgEQk3tb=WLZ*3PD
zbMLIHgS%G+#&on6<?O9*q3n$0-lY!mhosFPK&&Hy40;E`NEZ^4i%X#FjFEah*UH51
zVu!EWv{xa69BvGq;sij8b=vw>eWgOzCVa%rn=#K~XM8P*M_(B&*h0rHlpzl|uVGlb
z5#?U59O=o?Lw4FaD?D;NSv0rjfw8{6Bu{atPGz-o`T?H&7yB(8UYJK%5?u`mMl(T8
zVc(K*BJ0&Vd5svgWVpfW>7{Zm@=*|RY6MJyQjfUd%y}8tWd<h9jM?;66_DZt6N6vp
zM-;rSq2n`zvj?(4_bf&$j#FBwRlYRzEF0x8f051Ev$Y$uloO*b?0YS=emDxY7Ew0(
zRiP)cqaTc3kD09!{oW}`Qq9L>I75kR639&%ypSSGjdGk#F`O_C!{v59d+Kdclxt!`
z)TX;0AHW(F`Pr9oKIeW=z}4yZK_(N4<#1^S;7-d#MM~D|MNh^zLFjg9PB&E#&fan`
zZA$YHt_-ef?O$7UZGxV7PfOyfA3EeZTp!RS&9>t2<^;ZEh>WOBz|7P&OuuA|h>k24
zAX%@NX!wW^-*G@~`T*uiz&G|NT&LMvi&9#+*o9l#hRs^@&c=bQ`T^g_ygbY*Tp01s
z!-7P1z&D^0Z+<<)_ImKi0m~k!pK2>#RM#AKbNAoi<xG9mSh1!qE7Xp`MxunzRIxpm
zl6_Z&(`~=gXXMyzM_<8>JEQrIllkRA-u!*F9ywmMby0&pVU|NB946nD<c{4ycUD(;
zikO+IXc>fs$_6T?rPK*TXrJ0~NU?ObKsnno>YQ0?Y}!YuzP+E`Ujg$^ptPQ0+gGpO
zlqoL*9oBHc-7e1IIi6ow`bu#$;X>cj4`j~Dw3`IS9^loW;~F}A{EDdX*>zWypbcei
zV-wsuxN++kd^-`4diW5py`#AHt|s_@RS3HA=qM(ozRf9o8=yFYlajI$u_v@|{rb`{
zBJJ?CV&tXai`T>T0oaOLerdS=hLV9V@v!RSLpErg4D18F0=^e7{N6m-EOYnOha&+G
z1`qC~Pu{E4%nu!1mX<1q^$+XE&c;Ti=?ger7I;r4d!FbHpl32-GUDT>(ItO&`LyQc
z4$0&zMQUXiFT1=)pHHwTn+m*<)urm?hP7-7yE6afaoLo^c1Z;)BEWj#9U1^eDuB(C
zhjkK10U7f3fQjq>Ou|7oL9C&;2qQ)6MXHU&CodIi$E&fXyzz83Ha3(xxlzgWE*S;6
zCtixq`7Uw2h%_fJ*_LDar6I@2b|^Y3C^XbP3I$IkZu!#Dc6ZJVJ=sdz{!m;(;@P}V
zByPaWs6N^BX~2_Q`n&h;&GVam_MsPK9h|r>?L_sZxY%%DkTPO^q@c<+1NH>#sTRw@
zT@LtJx+X3L!?HMxr0BxJP|>se#)A7d{U1UvAeGSgdXr7h8440!kLxHYsfkLwx=F#r
z$8}s4KTI-6Ls>J$h(9@iSzxy&C-rb|^J~TKQS~({>^j{SuSg|^FZJVboZMyY&YH9^
z;z8y2T)T9$K_F$1n{%#_u&gW5u>Y}K`rQ%3&TbuMChZSVkGULB5+`<#I;Q#wN}Xy7
zlf5Plik@cyTXi*-ma1HO=6%9;eJoo^uN8p%F!^G^!)wwq7e2MWXnD4MkcMfC(hf00
zZS1_=)b)br+owj_o3@DU2|bJ*?9^9ux!uGS`g-VzoZ%J2dxFF=AKtDHW+8pIX;<4r
zF4JOjPkV2U8wKFx^JL&+XKOf|b9|7-Xk?f0smD#h8$X><2U%`A?vvZ<o({go_+WAh
zf^K}C0Je@Ceb?LfPWP3W&aJd8e4yZZnVhHVH=C!kBK8u^&XHY0GLVsi#LxX%$%6al
zZ3Z{&Bx4YHJV``}RrZMmI*&Hkh~S<Jy08h92Y!DD_8X)T4X313<?-HVI$Kv?EirQ5
z9TtAxLz;7=m&bZtjeC%=wDr~2&WEV|`jJHU+#fzRD`yy_i9GT_QJ?d$61CXSM4!ur
z8E-Z-2ef2WQ$LDnrxG=`uY}_rbNJzghEon9e5CQ`^FE;_Ue6?PpGDmvLXFndTq~%!
z17CpJeIwz<^}-`2p`I6l58F99s(C;Nnrq*+B5ix=SdIup&iMQ9<PM*-&aSfG6mEiu
zOJYFTTLu%?8z?Ht7Y`Rcs?T^wrq-Qq#;2aDF$wx?U+Zex7=C5u`e@4A3JFe`rUSRh
zHOyYT|LBmh8^>7S`dvBAXq(=#o8{NveDAF2pBXE9cYWW5=$?gx{E{egYwN0t7vfD^
zJl}D>&pnCWoR3k?y2<6mp&30Bt(>RJC14a^p)JmAO|@rFf{JoQsE251#)lJwERme~
zN`N_T{<I1{EJzW`gP@Cfa`Zvpx$&wdu0gi*nZ-P<^Ah`6uo6PD^!pt~hBQwZx@UMF
zzE+_9$jh&U{_A14nve9yRa`i**v7NEVc%0Pe7rHu$$EdCH96;&+#O<d#~gyDUxvPS
zks_U(fTFmK%L0|RXUp}WnR|jR@*1rU1@x#hc@^v1;OjjhF)>YCcSieLJszA8<8?U<
zJoc6^4Ds5|ucNTCx?TXDa9%-4NJ$sXy(eknI)4*4$v?P3d#lSKY~Zu)r=}NRnguUk
z0^`0-o!VcB%*ixoyj4^rA5xb%m)Spu!{!UiI^|1+L^KrZ3OTMfnxzK>Mm3%mjf#5N
zWZ9Qj8bI`LD+w=60+5KCXKzk=LK+}@y`xKMpp5=Qr|j$Wtib&r3*PBs-|vhCRFb>v
zx`N08E+k!JzJN2xb$0b)FM1qwzyfz$qR~tNid7R=P8+!@$c0MF;oA8xLh6$1OVyM6
z2l3_pg5C@^Ba)ZK!oD55c1w_m#{Vm64*SjTtr_%<Mc2x&vTt{DHg?3_fB>J>Rpq`0
zALBoc;v!c8aA;h#n<9lo9Tyxh=dvzuyx^u!RyxA8F+0e<v=mazfl$^L57W+ds$Uwr
zelF$})POBhT{h0n%Cnt*AFiLtcNjmtYu_d#Ze`TX^83PL<?k%n>k|?gr>$%J_{mB~
zIh`CHP?4@n)x{p)8H$XzccNR<N8^lLr{=p3s!3c>Q6Z`ldcKvGdB~Xz(hDY60uH98
zCsc8z_A~o@H7?9lWLra)Im-@iG-njL^WX&2As1Gx?0f0UDw(6FJ_np*94Fd+7rM6%
zzg#}B$BD*;1v^~0!A5jizDX=SfGz0eo}RnZb+x_v4q{z4@o^s5V>BVac0KHm`uKoR
zH`m9G7oRoDdR%SX&!liYFm(T^HkND8_lr|uySecU%^5R;G1)~&>!K@<o;Cg`8}tHO
zkV}symzrA7Y1_4F0y7)&#wI!8h;NF8Q8A-dw}s;Sj})}~PX%=OnWZvg-*;z$w784A
z_wnq%qB&DW-@(EnGt(Z!N2dbcF})O0Z9_-Ly8XU+0YFz;qUOyzTOD6;M+G`qHF!jv
zk3X@4eI2u^Z&54UqeqiV)UD_27^@uq%KV}8*tvt4Hdw7su-{2ju2eErj=#&s`NDp`
z7fY67{q<Ib7sksh>*NJ1J2j6OoA1<KRj<Mf%;+Ug>>i}i-kf%5ao`1!LRo%qrKJa7
z9&n?+#pQ7qDtV-vx|6}6g+)bb&On?&#xS>U!28Sv8xNrqH(DIk^Cfz2U?!-o*KuxW
z-oC`5gnd1*F3M&NuM~YhP1DgXsdpOeVKS!e_dN~D8LpuRtgeg9T>j|olW4wMuSPj)
zGYj|q9554m@#{krac~Jyclx#4A*TG!rR?=t4@h0zxU(J#b9nd*T19%Y+!)Ng8?Ufo
z@9PpcS&1C7(5wkP%i22YH?CGbuk6)#*;rd^+tPdxP^E#oBP~^!V(0P3ruMU9<oVbZ
z*Q{?1YQ;7>Nyc@j8}rs#I^cz^Nh^*uQ;U@+nIJ-DXHfU{>cZKN&jQYR;6}Y8H8{2n
zqDjo39zAo?dVQOS)tT-L3nc%YK81oWKUIWLN1+1k=nUl3!=6ZFSl>9Pe(J{dLy8M&
z&eYUAy18SKTKx0@w_0V_>sG3urq@A;tci0CDLC1Dog~Flleh@SW($kKM(Gj5r-H=Y
zPp^`SDNtQ^*gySAltOMcAnXbCt#*TQg`Dr-9-;(Z`w`KM+8RxFD_k1WpRek4hgGp%
z_^jx=&>Q8efe~oB)p~Ayd&ODQO(@V&v-uo_#)(D(FFU_`^JY3mW=v2}QQU?4Wm8WG
z*cwmsZe7;2v;^zGtY1VzzFU!+8k|oqL;YA?SNoA3Z6UK`y?NNn+aJqa?UK?unytfw
zUrCG|dzYwR*_1MIO%4kusKE`v;%O|Pk{w^2F~RTC`+&~*)5*}VET<35%uQTk24BdS
zXg57En7WGexo^r9pEuX?d3n>mu<RY2P=p*`f(ed`c@Q#?a;LOJE9G2`I_61HS<!Ak
zQg(`(w(a&=MBR*bD2qUWeHNP2QhpVsM{YSdP>tC-m-?N;=rTJK6C=F8d~FjY$?cB0
zHuMYbc41))`?|wy&2OBdX<Orho<9%HVwS$s(tMO!@2E`HX>Y^##16YI6V0C|3+`&*
zJ+&?mFX4JI?Tm)^VX~kol0lBF;DSJm<`=i%V6$jB6zo%U$a^#i>zBq7$dy|$Kx%F-
z0u%SeG~4No!iF;+&VdkB+<W|p{p3!l-S_CQ0ZE1M_Qdj|Qs^xY0*{`&Ens6nbTghR
zM_YBr`s}<hjBKD;Hnc4Saug9G#yNKW_M9azpCY*yx@RK?c<6;O&xSLJMc1V1AWhDh
zo2c>DtV0&x8HN1Shc%uDi+&&z8!r~UnL0RY>r2Df^$_KLXS*2Bu29)W2DtZ6AtS@%
zlDq_oIk&0-2mY%YG-gPO-kCp5t-iAzOHzK!GAu63>Emr^P31_ON8P!7ycahtuF%dT
z2~~WWpWi!Ou<g?N3Wo`{l44PrGKY>054U<heM6K}EV@9-!>houx$Pl}{0>!)3`TSU
zU#BJEev60YMLc7f9_ZP?3R=IHq)w=IHIYz0dMpDK*?S%iEMwVxZn0=4orpOWT5_<r
zw0(Ch^1|b5rap7G5GGKNXhWzC>Lwm%JwI!<87kc?RC{)wC1cv+_K1!hPp;cPzLWH(
z5EK@svt+^eNmE);e84kiF}*;utgjCNk&znEI6rA}RAXX-%1r_iVDhC#7*ggjX=rIv
zQJ5zh`#3u@K#+JtNd0@J%$S&HcKj7;>Zd9f^Y}!mPaTv}@IGyw&YTW)X7LUVXvz^8
z!agmZPggC?#*rPWPxI=ZnYpr4@x|V)JRK9CBdl9r8#bODJZe4BAM>)%Zs?JCSCD9-
z|9&~thxbgDZbGAT3=j2A8_gt}LIuy{mLJlGkLIH*jg1W1H<VpI`p)+G^8)eAx;SXF
zqIg(AnHQ!kMxC|ftF}+T;jZ4Arz$G>^txMjK*rzNzdpxiQ|66kf#mugXem@R@oRQH
z<T{DbeOaMf?R2+yJ?FP6CA^l1!dwDt5oYiLTWqYpPe4RuS77@?&XapM#hO)PVK+R8
z&;<VM_()9$FIbb3{xe>O&x>8)on_;w`<nZOC9gyI5ER<NiJ2~A&FgCZ@O>>lL8ZwI
zA-2XeFTsy{(R03rc|%arXcdzHv7li6Ih^olg9%SmhQD628hkCO>mg@--a0-~u45`>
zId)%(TI28>nKIDIfZ3-Q?c5U>{mNmJrf>^S?;!?`lrlT0^}<*Q9#f6&@QDfOZ@S1<
zS6_vF#4HV$DsbIFs}KX`Q?ACx%=?X%9WM40_R~vlU<<Nw5&YmFaLwP(DB>K@{D|4>
zMaM^jtHa|}j$lOe@P;UB_mcv2v@8q{pe08Ut_Uj4p9`J2>v;b3X``0UuMZ|Bc?LWY
zA8WC7gRN@s%6^G0$)`v21fN2UYi7&FZwkaPeNVS~{4yA;mwb*b$k7*)YceP^mtI5$
zImk9KS?fc3%GjhRYx+PF*Zz^(8YP}xP-NIjQUM%QqYE?T#+QAP`xy@fCqSp2Uh=bq
zU7I2+>eEq`wdY1tlAv|!rFRiDmzKUFAM-!l*Ob+4&W=}9iO7{a8@ufQG!lxB90ru_
zJ{a5i{R*cQ&QctE*3*|?+LCEW#jq33k8H)^Kx*Ex7k{U#GYA@$;jfaP=_PNtU?r%M
zF+vR6|4mr9`o;jQHMzWk)cUq`i~B>ht^Aq?OrGfr`u3do-jLL^Ww2eq_NgFIILiQ0
zo5)ysAyNTljkCw1#x32(0vzU`wz&UF1E2!}sD$h#N)NL7CFzk-pHqJGX?qcz7-a*5
zDdb&lcjQX#4t->W8rR5-)PHCcVcR2_aNgPfN?F-VwGt#!Wix-&dY$~qhE_>&dV1r|
z=g(YgqU!bC_|g*|U$5)#>nS^LC%9<D%R7B_bbppHb(orJ$Blx`$mHu4*JqL|-{`*c
z1O{DI#b=hBadB`%<f*x+^YhyR)m2Qi9P4>twI{k~CocQ&J`wz=k$<Z-;CaN$fI!!0
z2fscHj(kfNY}+irX0OyX5NRb?il4%~ELMriE3LjSU0h<6AB2;r-GdXRgo@y8oAZu4
zW&VkVTfFAS>`oYn+|$j!?wfs$*_vGC!c+2OhX;~-;G8J6?S-eW&!BE%qtUqwK3}Ki
zOO#nQ2ctah4vcF?l}btS@*b3X|E-c`qBTwO>(@)q0$dYsTo1pAvoH4H5}&?uNKY96
z?JF*JTQ-C0+eE;Vh7^eDu)r_NUjVSz<^N^^o}y#i_277Es?SQd8Dt8;A_>r2hJ1tn
zdx4HN9PDNa2mAI#09Murz{ME}c(|hgKVK9OI2H|rgrb3{Xbd=hJO)UJ!--oe7RboN
zf-`60fUN8rATR$0C@RJSW#xEqP9+{(xR3xYUQ7g9T5rLnOK*XWP7=6$ISJ_LB?AM4
zWMF8R42+FZfQd;8Ff)4x%+23{8`sl-rDZy>vPuUxZ)N~nn+#xQmkI3cGl7FcCOn5A
z8{E2;4es835ANUp09;)^05`W>@Zdonc=#|6czWi8r%wyOvu6ds+q)1ve_jZDd<ucD
zPZ99-Edu`j#ULP{7z75EfFR@-R04v7KY<r7K7o*sPvGUtQt<k983+wUe&rx6tQ<r{
zRDj6H3J?`l38JGbK}^hN5F7g$ym?av5)!IGVqy(QN~!_L$+aLQr4GD%hy1>Pw6rfE
zJ^c&F%&Z65*^S^m-1GYIp$X*WHG};87En;o3JMEbK~Yf~C@%gAN=m+hPoKVm($a6B
ztgIcBm$!q8iVjd&*#SO({tl|DzJu!OPEb?R32JM*KwTa3>jq!Gbc6c(9?;Ox0~#B9
zKyz~+XlX%y{h+nAAGEa%fUjQ%z_)LMpuHXW4S|l1A@KeC5a{e223=hvpu2kn^z@8^
z-riBr*Ea_G`;p%`7#J7_gM$-bXb8TAFgyuHMv&hW7#*DgV`I}`e0&;AOw54E$r&&;
zH4CPv=fKR&9GIP*2Xk}CZvo8DFMx#w9Khjl0FTH2p7^b${||G(XDzI8V2uN799ZMP
z8VA-mu*QKk4y<utjRR{OSmVGN2i7?7e}w~2OpX5)t~~sMX1n|gcJayV89{;PHwg1h
z{s^Cs4-bJGWb3~#V7HC{8b;0$(7(7kn~5O%w<0?Ti>Un;%+IvrgupN+@G}p2IK4U_
z?M0CP8xdZ@A_sm0<Y$r>1tBnuDgDeu9!{;!|6}?_ghf!d2@n!St`fo`v0DTXe}n#0
zazdnv1PBQuB7~qYwvQ0tZ_xKSL5Or0A;y)lr(}enFm_>O{@>!ikHspawuC5G#7tH}
z!V`2|S7gJ-ztjHb)P!hH5u#iX6CebHu|q3zk;lJ7-$#}Z?H2D<NSC9JHxdHE*rnyX
zAOHUreatGf=Btn{M^}v$SZclJa^63o@3Wh*0>Z11E=TzZ!C;JUIcxd<-)g^)Dk0*H
zkC)LA{C~7`Z1hT469NDj`Fr&5A%{V)2$xr*U5sB^0kQN*@r!c(d-Q$S2~kssivJo!
ze;xedztr<@($^-W|7T+s|0(*O@YwFZ9;l!Hr|A2vngst`UC#bO{%^{kkB{-6qeuwl
z@Smgq8xuPrt>1_-{!0FDx8FzdHwgSe5~1a_RGGgi|2{sJe?aWlY?RA?vi;BD!S;VG
zu>J=5zt4Xkc<}sR3m5;h^s#@9IzT`8&(il{{%aNB`YrPRfd4+{{~CS0|1^D9!by+;
zegX3{i2d>w$A;gYqyP5!gRMD8zyN)M_Wh!tg$S~LM*azX!ueh5Cr;#no}g|pVn&et
zGxAU9dm^8e{S2E{+7|XdlYcyHCS3OZN9g+y+IK5$tJACL%lxEB`0!8K?{kHK3eUeV
zd&65n2!r*%G6|mk5q+;sD~YW4_=)-2%5>y;=dYH>67WBw?;}M(NAoBBUzVNnKeJXn
z{4@I21oYXKaX%&{NQV*Za@Okq|BU`~<eHP80p<JyJN(X)Ffgws`!oK}==;F0CszdJ
zA85H&q%A(4|4DE4!#||&L_mpd3Ht;1Z6`rM-Cs@iXZ#=1_t{H8=;k6`b%Hb)VgE_)
zmxq5!{{jIm=|%j=`-B8R>ld;=6aFcEH-brUQ3u~4pbaDIRxi4LQvbW_&lLy`6Hr5R
zFubdXFmSH`U;X$`+wY@8K#LdRrz1##5u?>aSH%A@{YM0oAk@J(SCc1yx`N*7$A3)U
z=NJJ!O`nqlaTqzin&!&*Kc`RV;$-vMvYP(&mGo9W|8x4!C<zEM5X4}F>i4{3i&gpO
z^nGMjQzVR^S>0rU_<w-@F9JtM-=2Wp>d1e9{&QMFf`l=K)f5Ti{{i|w3WO91V=9F7
zR>yuBEr0C)UyZ`&7K)H0L2TJ3SS<AjyDB*DApk}q2CG1@_kJO`I${4WNPZ@;tb}!5
zwR7+j>fb;7`yC!gK<)R-tFNSQ`1^4GF6S4g?Mj@;vpc~gxDpkS`$|}Ym05rO`48#)
zaQq%J&XweS{>$iJ{yqA-|2_17!_&Q3Ba%n|J@kD9f13fv2+04}@!!Ynx9OYychP_L
z%dCr3h;rqU99HGOO#Xa+wK@>`gf5ByQu?+Cz16{nko`V?Q~w-Yh2}S-M^+ODs9)Ue
zcL{98UkdzQg2rzWT$Sj3O`k9rU{*oEs52qRpNm=jif1iljRR{OSmVGN2i7>S#(^~s
ztZ`tC18W>u<G>mR);RFLmjl1IK3_{;<G>mR);O@nfi(`Sao~S12axxA#NZDLe}DFz
zu$5<o{nq(lr%wI;*<kAGi9gQ=L(T?6&ILox1Y14_%-VYC3^3&UFGt5LaOX}AaCXjF
zJogJZ=j-v~eDLJS$De0>`S}(7JlkvKnO-Z;@Iub*ii@iP@$uC^&hA<|zw7PWn#Hrb
zme1_U&TarXIZNktA?I`<=X3qm*<8!#a{bnMT*z5mjg7r4&f!`*i);BDuH`ehzJDM7
zjdQpN&)`~l?$+{|TWjZSK|x&$|Lq(wSqp0%SmVI|We%KLdL@iXhmZ-&FJ==dETu2M
zxV4=S%)~_Mhtd)z$k5-gtjpw<(tm#CK>!9L`aiz>Wg^IsUM{}vNAmBMH(CC`Q)?vx
z!~j|h+<#bp`2!5W73B?nR$uuK%Nzgrv|-nZ@-oZhcPuCVe*I0BU&*?#3~OTY^IdWN
z<+OiOp7723Wy(wc)&4|zlT{yyufRaNT-@Z}&^O^*QG)PM;7^tR{m-*B|5SOCorF|>
z#u$GV|F`uwA$&3UXK^6(C(CR6C_+QO7?$7hBf9h_%bWao75K+kS^i#e_rHq&`}&&*
zEmeSXvB0_I28jLX@|TvXOlgdiSpFakt^23To9tPlc^WCP^#}cZD~kU?{Y_3Rm0^WN
z&MsG9@-LLXy!4ebiJpncp&#Wp>i>oECO`C>xQXHNo2P6mi~mvmO@54cW|N<<>7M#a
z<qelUK_|L&;79c-jQ&!2lOLb>aV@{Nb(o;|AJ*UG%re`5{FnWU<xL3R>s!{_%UJ%M
z{#b$`d@YS<DN$VHN7%evJ)s{7qOhw8g3>a?;(wLJyj7<k5I~$DC=DY!R%HLs+dqfW
zimc_w<EzUbUCx33f9UPMRDR_FH|k5s|5ACAT|X;8_oHrqt-Qpt;@Tknqr5ihPn4@4
z)+w%T|5|*F18W@ke~JUE2lZO~{}u<3WfBwoiNW8W^%EoaNi5$Tf!rH`+z+9ungEu4
zz{~eTEZ+@*+zEmBfss2Okoz50`g@W49guq+koy}DKQD4$1LETi4=-Q5qXD^-VfikG
z)YLk72SfdjI~W>%-oJqObeH|P%Xcgw_bMR%+NLJNXWO@UcLH*60&+h>Z|}eELqP67
zSibuJx%Xgla`xwa2W$5mK%rO*YaD<a5dOa&_;&5ub?^rh7~wNJd}f0G5B*3JgzHc8
zrRT-v^FH{DIJS2G$QMSwJmp%9EH0IguFglCK-4TqK-@`G2qZyyVFF8>?bm!JSZq10
z6Z|!w8)l-==*0sMb|TrU@C(EB+YVu2L1YbZ__y-m3K=CJ%m%Yb7PD8EN1P}JgpuP!
z7=ANfcsl@F7SBOB^4s~y3YG@`HZNtb#xE@NV`;nhM?T`CWBT#D`0vN(^nAj?%oH%d
zY_J~wr{wto#EGPUtuXd;HM*GcqdvmIi)(P!-_Pee0t13f0D1Tskd*)3VUbP$gMSb^
z1@Qnd!QUU*DTr-?++&5@U4`6Rh1ey?T~x@vGjh+=@?JA?mlU$kjNBuI*c{9EK_PcO
zE!z{wolMAmOo-ip+@ZAc-lS!F0l6D#`Cg<on*nyvT3F-2{}2b5{%Y7x1551Mz61Vt
z!Y6tZ8vdmO8=1BO5(F1H*s^u&da!jlPPNo9y5%@MYTZ^c2)-O=q5!lTAo$NXHKMn6
z{VUD@=T}mu9ox46;_cfJ3UIpL#zeA&mJ!BxY~4!FM74D>Ao+hO{8P5ymzR~MAf-iY
z4T_U867YPSb?|W=*nmvE7<%^GhzdR_aa{SPe}A*lQw?XEuD%o=W~a^EM5Q$3C~{(S
zJj!EpSo_iV=7AT&c}jxB{!RApruGXv$i#WQvU{!i*@$_!{u@0p?E-E0QlSm&PK;qU
z%Y=3+8Zn$wj8Lw6r`43jAjZ~H9Wmvf7}UkAJg}gC@S1X$)?9zHJe$|zUS)NXLOrr)
zDfWGF+b0+-I_%}aqIJLm77ZLKECK;YbCADay*Ba}OSCxui=hx31FRKWW67G7Kp9vY
zIFJczN&zxqO-~|B_zOxwHvx_P%3V>ngJf#(!EFtV%DQHHw1a~JElpvW&K-AJ?)@L#
z85!FToORu(6q<Kuo9sOo7nlBnq{eTuMK|>~Pz%E%b0u{zS-cVwLAW&q1($wPDh<Dp
z;x2x@Q)m2-?4y;M$(+Jp0$5tUFRhG?e5S5tHBq{a?5B0gUwTN5PwE>e?ECo1e`nad
zpQt<c;cOw<?BNebZDuVnC`E<2WK*}v@9ZIC-}B?!-;=zw2o@CFh`mL}ZD8d;5+RrW
zHY)C6;^B9DKhj%Yv{H<8Q7qa;nG`zJ_I^4)vHYVSfBA!!B$LD&;adtc94s^XqA=SN
z<1+ak`UxEqyesfIN$+&D#v3L9+zdu94CDyXa^KMR$1~#hw=9rgHtT-$C@(vSR6Nn9
zIqm#x5Kd{A+B-HuXIkFgr%&25@UvR&x8&^id_3#_JV5+`ok?ZL`D?ip3Jr~30YpIj
z`n)BhTNHk9NT>L%Q9Ubj834Q;6G1qhT8BB8e)8VD>C+tdrxu!9^WUE4D3yI7l{u2P
zExwbk^-~$ZzT~rQcspI;AbPK=?AQT8J&BzlSSlJ{B=;?e&aAjBcvHZfD9-NUtTRVm
zIM-FO+zQkBH@h`c2WR`q!BKtPRtL?C+2)u0%^MKPADe@NiFr6Kd@B{DPV9-p@87=Q
zf#2dFEL_i8eXr#<NqY@`R4aiS1Rr!TyXvlr!wu=e&K1<lqXEIimZtSvOEPA{J|vf=
z@6(*0%l2@Td!)UAPk2Ik{Gbi5AQ}`W&%M9<Ek@EUfm_NQ1tPz+<%k_z2*bF(H*HK%
zV!;krw@}BG`R%xU`*uC6ay(A_?zab+`2tu|8ooXpjxhvZ@uJ^-3uH7~?R+tN{20lU
zo`F2m0Df9jH&@pKKIijgPpXac^XVCYoHsp<Z*~jRMi-UQY#|2Wim(~+lZ?3Cg13om
z2VCfM=hV$$iPwA_8omJl<i-x<??~JxbqCf<x$3lAdquC#!AHtLdYCC|t~N)I@gT-S
zG!Oy2TCzZy2WxI6l@EDMN-;i>@A8h{z(8JmF7W0NK9PkpR>Ufu6}W}UM0-gqVnCkm
zR91HM%?*Pe1uUaA=!8#uL)zwj_(`*uVNvXYx7ogxqrpUfTcB|LMrs4t!0}o+$HxJH
ztD=R0F36q@LVQ;B6x@rJKa)v9seeG(AJ+2|j$Tlwk=|P0Kukj7%6tLFy=8E)pFC1x
ziwNCDv1=5Q6M9R4X9|kF>NgIvqXz~m(>@g_0MP4%lvk$|ei{I>FIAx_FT*!6ILXO@
zyrfl1Qhrv@f{-BEQM^u$;X$*hX+5+(pB4e2@@k+)HE~;;Y0{xZriuB$0{e(bh(mhj
zTFc9@DK&4kkCSiOq;CLcT4FR%zCVyXEjfNr>rnv8EXtrK;mb&^`XaLT5Lt-n$hZD=
zN2AYSq)@=v7gk6N|3bXdz7NtfKYz%&WhZ+5O_9SuEb|Buqwcm}n4mE<gH&>R&91l}
zqT{;^shGRN8mw0fbl?+2xxBKh4C#j^{KH2m@OYxXaR)trd1)DTw~-$|hi!U#B6JEK
zB_;+k$u_0F_uwVd<TQ^zx5R$QxT*oW2^8c2P(+KFt%7x8J0vIU1v@*3ixY^2EC^cV
zl?`zemSJBee1A4mnQ0)06p)4-x!>T;Q7((s{Ty$sVg(mFNZQF$uN8Sj#^tSucRdM}
zW-OHjpp9iGU@8hsPX01Ay$!bRj1`AHXIk>rQaIMzSZDy#$-byK{R3hb8oUpcEW*RI
z_fW`q9ER-bcgjBtbtZeM%m&38a7w@yym6=sJ^J?Z+3Il9xgdwbR!PYS%NMgMMn9jf
z-^h8e;n~3=h)Me%IpF*-OG)oqJCmYskn_e6*D|GJuFV9;BX&0@$l1_$F<XRKKroS8
z`}{7o%>Bt`4Nn75AZIfT(7ux-G<U^{h@73#2nE6^hyl%U;kil4f+m~#ot)8XX4%XT
zaWT?{4Uoz$fpc*Wy9Xf0FY!XLRoBD_BSe@HBF47;@%`(<?>*}ZTx=f#e`3<Kl|e8&
z8&-uaL>D)I^eqO1@bxYn;9EXt+1pqVDWB;Pv%aF4&W9k%MG&!govIwK5QjWbI4g>W
zAV1*Wq$lxC3Xfd2B37=ROdouR7KFnBfZ<J$5K)7s1Fs-TN@5Nf1^{G0zpyf*e0ZAe
z%&dsr?}grFEc^f3d+)a<v+aHOK@g4(wn3#TI*ft^0Rce}h$DicKok^3DT<U(1O$T8
z5*v!rlqwL2AXNeBN>>z=DkStO3_bK-^IbbQXFl(L@cwYlb)7Tk3OoB*dzE|LYpwlc
zkk)qrj(r9NY=3e&^?NmWTiV=D^_$x2>PRZv5@=aBEOtK!<wpNwCL8#|gGCpY=-!6b
zbZKK%*$!t?ASV~{w0Us=9cuN=un9FoT9I9i{^{#;6LlROv{%tr*o!_{Dc!umKYAoc
zFCF^Gto8npDJe~E70V3nGqrAw22xF(QOFjlQW);B<2%D$wXNY4wgZbDZG6`{-C$RY
zY-ECwHxgLdJyV}<aRDi$s1&w;Z@V<x^s$SpncqKYB=}l%YP=|GJ;c)byPFkMxkuY}
zP=*_jOO2lc%bLYrJRl(KCaK7t^jC)H4Gh!W#Ex-i7$hgBF%#o6q^SoTJ?8r4o9cr=
zA{;nJQ<nHuK&VTmQ%UtmtAL!I^(>`2fKqjX;-c>T!HMBy!D^B%+4d&WDFz_?CDZ-~
z!e0tUT9J-6)&QO+^djJ;9?X(3Limcm3&QLNu&yPxj)0ki!aU|nAgalqrD3B%w~;Kq
z0Y+stIVp2&LiDEdwQHbI+-rW!I8;Vuq?TkSZ<Bfig`AiSi2o4rl!f+i5I;$F1z{66
zLXGXgAnVDpq)W{k@G~yKN1pGpEkMV@Ux8<HYO1Udi0kN&g1<_bi>@s$r)N1?F>=RN
z8QcjQlAYW6*$WB~jy=AGk&oUhJkD)EGSRWV*W&}Ziu@O-m>*$)(m0ODNe>L}kE%fe
z{mG66-q1UDjzOCJ2>Tound(=!b#_Mb{{%ncwn@zgeagmX<{UbfigbnH<vB5VwTCM!
zwT?APpo@U8NVlVkY#7y!8;~#Crj4&4H5m{wEOVrxHQIF!z#kqj1+Zm#HB(HH%~GFr
zMv(I+MmG7;NaIP)=?JE<$tDlhs%L=HZ3IUwqdK(b^0j4)E3#X*jB*J-OA)^YIUd^x
z4qrxH7>ozw9LfA;96k_8gDWpLdaCau2*ew<^N9DwL<AUk=$goD>^h_eFxKA0WH_X~
zjok+xN8Jjt1`3cS10enn*_;bTnPxluG^g)hjSb0Zu0J2bK6+uJD~7*}Lsw$QgdWeD
zR;2S#N5N?XTjgvJ#w56caiT9KZrA*c7c!oKrTfHJ<QKV+F88)Hw+SI6RAe8zSdpA_
z8WIVzk5d(fo%&nN6n~tZLaF`e;ZEdK|KYz2vKbuwlqAs1s=2lR3Y$}M?{U2*-MkAX
zWoDun?yL81xg(0Ny8$~muF2i@?r2;l{(dmAr|+Y^1rvN=v&r(Cv*7c1sUBYy<zEZM
zCG!0#*i34U+_BWF0S2FLAWo}BxpM~$to!9nz%X-69!_@BNLxFz{mwZe=k~v7J$~k*
zc6>3V-d;47IdBS$kBImu`lezGJl>8YyfOLtCrVzrG<9osr<1c#(?@B=hb5sCwSFLI
z@%!*g{`XrU?fh7#>wq(hjUfHo@zErTPLvwWLW;xqlzU3QMr<L8<=s@}!@4AMfxU}6
z^qZRFUdt#g+Y#42kuqDJ|FCS!L?G)~wVpX8+%vDEUB#kJ^4^<^ydG`K`7aPYky=Tw
z=zc(22!XxDTKP$<$sY!^nKFtdKmxlY!*;vND6(x#bZ<^)aQJp9F-JQ~UB?RK1omrI
zYO#?`j;^FKJ3sW<uI^X!;SZo3y(s{JazJriQf-I$weE?E&JYUQW5>37y)seZ4=Ms`
z&53W@JF3D>+TG_)m#HvQ8QU?wmpv+rFFwqtt{#jt^0+4>BXg_YTZ|pce>mf(ERfo6
zX9B8iQ0Fb!8c%W1B66O}BmolUn`v4b=F4ZRET7@N-5N~cz>1CziU|8kD-#XQ7Y&um
zue6W(UWidQ7mWqLYK1g2L6dMlkZW`$kh1Qv(<q7g<OAc7(f8^uJ|H-ypOjpqfw;NM
zjrrX#EaVe{8t9L!1Ut#iPEKF5Wv!yYRki^{oTa~_6|QE<_r5&WJx{B7DpjUwx8v$3
z9|6T<rQU+PJX-R5_eVNj^bVIfpqO|N6llY+uzY5o@)2yY(T0&%^IThL;nr*A5U$hq
z#{Jb-7Td>4vs=f$X}#VY!K`6!@Ap{lk%DR<Lx(!_>T8!xX5sQ3;=1jIo#BEe!-BSe
zbvq;n19iF|G8a_J2%YmT#En_jZ67|&PDGXMi&~11V<OHlFODF_Z4Mv?r<$2Rf0MWl
zzc;4L*XIy(DD}kI2PVW?=4y!iaQAb-(KwJY$J)KeX8`E6BKy;)+1GA+6-GufxT$~n
zs?5+sXGlzyW_~)=lSj1dqwvxdfIuO3Y&kfX*YKMb=0ULQPZ_wL1Cg3Q9TdJxBCeAi
zn64oymufoB{6|O}R)#^P5i`<oEkl}YL|aBl61ScrW1@yuK059Iu&|#W>uPjNxyJiY
z(HRn0QQTCXT-m3T6ePp`^N~U(HST&uPFXXCeVM5!PV*>aP=d$gcLqn7jkRHxf+AZ2
z)r;3Kl!B`weA`S80}wYF>c|kyZab=?$bMH)Q^oZ#T9Xza3JCyVl}DmUZ#jH@7vuW)
z!=@Z}S0X29sMH6zj2H)qe6gp*4{+^CEsM2aI8A8`r^*;%cq^$aULbPX@o8>R+KwC@
z@X!pX;2$l)C`tJmck*bL0xd+i9cGGA$2A^4tj)B$LFAO=NKP$8g$X``8{6LD+t)YX
zaRauJ<f!^>C#(E`v;il>-?e$p3sRn<L$$%UJDkkg>J~=*!MV5?y)c>wT8#N&naPgH
z@8`re+6;%=s)2W~KE1QFtF{v{3JmW657DpqO#%*~o>&ySFZ*_r|39B!h9s3)MS*of
z4}aydgyXQ6)l{w%tA>ToXFoc`%oX2fJ^Us{eIFKi_YXxjd9_&f_B5!8|M}cM*Llp>
zhLwW?UpGJH!t8Y6!53Ls3im3zgXrow)<HoJmPViV_>m$g7&p7gZmjqRKPDDY5H431
zNs`5IN)~SOFA(~N-GFS^5{y{0=l4kA6|q?&5fMK+nC0<B0U_^F;Woe&?wHx$3Y76I
zAFz@CYObYk=i-&9uEsns&^|xDa4-lZyrf9@6Ty9<m%(8iy6f)fLQ`{F1d?S2WGTfN
z8D+NJGY7-7jjSaxT}V`q(`J0+qHSps>C)tl7P<YAEGU3vWeEz3>3z(b&O_cf=x*a~
z-TFZaSw9Jm@d(N^3#ds@2xNyCmIFCpt-mqVlC`E#T|7!+kSP#3s0S<mr%L<83ktAS
zoVmI6y_FfH&?In}QKzwvUDs^$fNArwiPtEHBag}A#^?pJI}T;=0FRb(Hk@X(f(kHv
z5c)h$eK&AjH4R%^Yr~BFdFwFhL4GX3%JrD7uM%^yhrw;kA*-@_7kDJ@5<IxEB?Nh@
zTGMRanAa~-t-FgIb9yTy&*wAO4*c{_3!^kJHbx!d!xFA33JCUeb$<mYc~C06G_VCL
zww1>4Ir>H(#}(Pm)XfB_n`pa2{J{470lTmuN$4n5<#a|;PJS%)dG5@dBR$RNoGav0
z^l)R`w()7S{kU&dW$8MRUzTdqoF01AMxUh<yY-k8p~7=hZD&&;<>adr_i0i4!G0BC
zg!$)R9TPVrb+Oy8B<GX{l9p^UXbEhZb1GY7KYd~;4t(ZF)(NH?ah+*ym(i+Tgj4P5
zqN$oP%?Q3CX4I<5mk;(EF412;e9l|uyZ_W4tQfjdz(sb;Zyk~AjG&z47to3j>UUr6
z8Ji!|J~34px*|tXdT^S4aBdwNHqQioD(<psRD;@u$Y~n7N*P1#FnLB}<>EJWwFFQ7
zhC6fZQa>75M%e*Iq4bGHe$%3!&rn|eDdJI;*dM{elae1jDMimLl#?rMkVCB=EMX%j
zHdKD!An#`Di1RITyr(^{0iSvPQoH(cE@ZAUh6L#z$Fl^dWEK&@@Mz~CaD#LnF&ZP)
zT^urQ3y+5Rb*D>@trEB(3I$Lr0b=D17)UQ{w}-sq{iB-9VlL0+ES)&b=ij52dp0)U
zw{SX-KC5mttN;<tm}Au2jKP7Y1zS{Jf*!Qy=Y_v~mo^ispQ~J`G(V_&N{Qexl!yY;
z5rkE1t&45m5J;%*SLTJQDe5yyv?E3Nf63AVfPs8v0X9a~g@vEHx{PIxT=54>#ubdY
ztFI^pXdU0DwbUnf5Pzy*@XANTdiMmek#pb2q)E91=ZB$(FO@bTrlJ%#Mp=16lCPAd
z$HbNGM)l<x2#q6<$u5G0!&cNuj+LFR4f{e=OWt^uTsfuG;?%j4X4}ewT^UZyvIA#p
zo7v$6!EI_GZ+|CZC2~$^YR)f8=0J7fVBC$v(S}(Pa|w8i`T<m$53L7Pp!>+Q#2z21
z+jVc!eWiv)g!$tHhOW}K2tQjR#QvW#T$Po_=tl-exr~r)M@@d$13qc<SxGv+234vI
zf)z`p;97CJ6zujW^i@?<Q@KqfKJ2MJ!CX%FlXhwQ5IQ5gS|Yjq!kE61QwazV3Ib$S
zSv9Es@~xFBTj=YVc=leAPAPP`;(N;7%JBUj=*S>IQ;T3Dhc!&k_aGaTE_JF{mnoQ5
zN63$|mpGpo(y5u;k=B!(^WT+Dz%ZIT`VE@-1AopBEAJGoi8yXuCMavETe;93;yH4c
zp4#yBIRa7E#`T4td-5&YBP87R3J3^z&V<rZ@^4=8Q+K!gxZ*o727Lgy;B*1Bdzl5}
zxL0vTQp>gt@e%IC^9z;nPgXwALso->n{scQf`~4D3Sbj3o0+2yJ*O(rL%he#Tl?k2
z_{)DcWiY38b{s!4^HoHZjT|in>rRxuovm8<B7BL_1RnM7W?7tvV`VsR0oP_!-g)z}
zW3uLUc9LN`4}XKLHU;c2y&7VupVp&&V(^W8PfgLKv>qK{4X#`hNMWc>5Ge&)HBUS@
zQmv^oh4bHNF<LeCj*>}??hl=r@Y9=~r$1rEC>#miIkMEM=nlz%uzI(J^r5?7epqSD
z3+RsC@(Fr&a!&j1_B>~EB*%Y1j@Y6cIp~xqDLy>v?LK$UzI34<*7fYy@*b3H*PWQc
zFDYD3MkxSwDJ{!`Hwi{V{)N?*i+yq?(@kk2cT!#nFaCHM@ua0;eq02V+9KdunuL3^
z&B(Q;hTf_(uA4`YJkb6kL}g3b|H*^UC?toWs%79qZ!m+q+zvIH1I(+1(x!ZND;_g*
zUl~SU(Oa7AMLR?9k!pq#11Kj$TC5}jm>F1CZ90OcKK_i|Qt#h%d9WOGX5q3tfrJ=&
zc1UeGBEC9o2an41r)??{S-r&$HD%R(eF$)$fo*v<GurrD$8r_nXc3b^5@j3WDaX3|
zZTMsl_PPE1O~k{{QoHr#K9&#=z56p$ue_k(UiG<61`ztIKTMKaXl^x1zd9m#WQ4zZ
zwvd3s@k4Flogwk@&yi(OEsB7s`)p?{C937eQp;i!v>i~k_zH>1C9kz5dN?f#`mUZC
zwz&sNg-LFfB@C5?0Q!`UpuUlt6iQ(?xiQ^>?AUY2xC}q{!-{*W3mNG<rL0Z=xeLJH
zu*40IIII3j&Zl8(%ZKdjwb1zlMBrN*o$B_Us;Q}d>IGAfSDhaZK<ifSM>9WVxDok;
z?jtsGQZ|HLG_*s(9+JbuMt-$WcABfIet9>XTBAkf%ser59_3%w-pLXLfuIMo>kgX4
z&#C7N2BP_#%D*@B>wc`tsq~9<UqbQgNr7GKJ6i?Co!edkH2N|J)Vl+(W~57dn6}xM
zeVrDxt*oZD%*>Yd)xXVvcZgYE$TD479Iz#PhY-mq8h>nIVezecev`Dy^lNlTTFr@j
z99V)1Czf=%!lA}g6dyOJcl`xrT(MeyET7N0_AwG-SLc!kqccqexQ+1@NPHSkX2<+y
z$2w4!)LJMH>3KxcuBo2ig=*ZZMoW;qWvMJKjgfDFnGZVs>S~?j?^~V_HW$s087yKh
zHE*DkONCb@!6a+DYN{+jug}yXR7R@0aJr7+?d(|o?yCK=I!Z%9!!8W-wD<zlZZvKJ
zgD5OHGoJ36>j(!SstYGd`AEwX&HQ5tuV3#qBdtzBbwXy@81&!+ilebuyJ^@ADyoHQ
zGY{sU+*=<%!KL!_(;8v80T?~RYU!>s<#Qd)>#povDqwhvgt?XS+fVWqLf#4*zB*~i
zu(n2tnr|oQtbFvJZg1d?2Du`BsHdQ$e%T!Lu0wFgMWr=91g8UW4<;i*iPUREp-A2`
zHzHnzT8G-3l6RAu3M>($TEm8=UC^+UKsl0szsJBs`yobiGyf@K+uz@%W+a$@fSWbu
z4DupAiaes+45M0FcV-@N2~I^A*zY#+y!OWre~P`XnSrwb+TWDbEhndg)dZ4J5rHHy
zd_}RN#~C_a@QzfFMSC7|zCFGBL@45qJK3>IuVDsb@o{7pK}mT?A)jc3hYPXvf}rA!
zzs@tK&_tzI!!<7&T1qJJ)8TX*!Sl;-i1L|+u6)-94QIS+Gz_QUHd%Nq4kD_+TE!x-
zxZ}V9Gb9RR^14GQ9v%0jR_o5CODEj9)>r*}w7?bh41Hg*ksbfrg=Qi3>GSeGA2Ga5
zj#*9*gs#-5nwjI-kEQCP2EJV-H}<AA-^EGQ7MhZ#p$ln#rlNs1i<k7kpV`B9qfQ^R
z%cL>?l!>%5U`i#S$1_ZZ*7M#n4;*>JFWvpfj|p*o>2@Rg7FFn1p=43^1;Zt+wC0qt
zW&#j9g)_-~O1G~Q)tUh+Z_b*lfZuHzxWXdEUGT4>J5!&Hn%Smd_A}5aEir3Z>Igx{
zcN_l%eFn6pdKHEXL#-{9WvKm3L+4*_DNW2UH#g@F=h0FWM}d?9YFLVLQ6T29di_GO
z>=<D-6Gk;<QOLdyt1Cr*o)>0jjvnpji2^donOU%Ci4J$+ZE93o;(`DA7+6@6QJp(o
z_f+9SJX=ux^vYNnxE9L67o;$MG#dyTEs#Snz5JCV98e=KqG-~j2`ZLfQj|jm-kf}W
z$FHWG{6S9aB673M$%X;onFy|7f+al_19J}~1L{YtZ5%y=`n+OgAMEXCV?)gJbSvq<
zNqE=N;?S1*qaUOfU0DY9tOPPJtl}u9f4e{&NwGo+zxnxZfV>^j(5VVt=<kHNX8BA`
z=9l0`qZ$-%N7*rv6o-{XR%aLtl9GqIcPz+6akS8nNDFIUE0)WZOPW<P<frC5B%sTt
z<=U8c^YhY?8rakcNW_!PLf_D)zr&_U=ADIW{rGapsqjv3sr7fycO=xtn9S-GBH%f+
zYrwb4su7WBZZ9_Sw)!*|r$^yt^_j2M=gN5e<7H8(7RHRvaAV#HaWK~fnteWZHcZ~B
zIs(R-4t3Lm_Me4U!eMgP2F;zPqwP?%gQI@~Jv2kF0rebErdWDz<n4Lkt4p(de?}Bb
zyQx=RAs<)$x_CBHccda1g)jkyuw-|f!KfNp=qgQQ3+iDDy#V2$%#EJ-1gIVO^Gyxu
zh!zws@OU}YAIeN6fvOMY^c#_cT$MVuV+nUSF|{wF4Gm4qz%pii`f<{vX!8bw8B=hM
zt?S!b_X3kY3@VCdjRcWdrAE>#(ht=|IDOw&D@nKsQIkUW`T3WJk9~tQylFGHDy?7+
z;?pzZcCHk(Y9c5v%$6t0%9`ccp^OU}h8_pQ`Zg5i*j;r_?BMOCI8A$tnJ`wOG!d@Q
zIwLnFBK)1@S(6&bvlM|^*e6RAA|ik;2k1!TiYbb;zv8{V)ugYo8f+@t>1xY8JBN~Q
zKD3v1)I%Fw9JL@$@|(F0UqiPL7~YO106hGi^JYluxvZHqo1RhxU^$SZq7@ob{n-3U
zlL*qO1^X3WTUO@x4MBz^zm3GmmS}-~<m^C^J`uGo2@ZX?%yoTqYL1KUUtYb0Qe*?z
zl+_@^$eoZ#Zo1^=-kf5t-bR5w6)T}uA|}DZEK9f$bF(_62=Zo--~huL21m#VJf1``
z5<`72y+wp%`cP`6R)PX8^}`>E_XU2i=0`B?DFMyOtWMVg53{T5R~7^o6h^t=6n8#+
zr>Mt}HUf@t+gHMXnb0f4mSHZt0~J3_Py`{WTOH*Ru%y-Jwn%H<pqtmxF>qz%pcqEY
z1?YatYMO}AnnMhNDfq1AoEu_cyHRfp>yqPxUNssS@g4zY!EL@$&)iX_3HH2@wV&d4
zCt@|3iLzqr!pizIQkgH(rI8dS$slHBep!ug$KD24<&Neu9wo^wZDC5H;}qUJjSQNK
zHfD_p@SXq;UjZa4s}o$z3;LC6?V{iQDW4w)T^=NY9yiAQ_S60Q7P(6>_y8v5X<HUL
z(UT#a)bYWK$E3wa4jipFclXj&1_9>A81@wSc!_musZT9%L-dWFFspPP%Ti$RQ2Gk|
z$aX~800(VyKC|TKJ0U}O_9&09%FjeNq)S_t^7lsxuXPqLrTj|{;0k6*JPg;+G!(IR
zD3xx~#Uy?^CF{ay3SFqOMM6NuDxfF`T{pl9j5`Xd>F01M0Ew`YbSQ(zvf6u#+a4ss
z;$#J4z?_(;_7qJU;@LAmd1<WsOGb5hb;9xZ>d0MaK7gF`Uv?k{V}+7#V?8}IphJ81
z>qM1nC7j(9qxLmI!d>eB%M8d5q%q0E3YSwVq2XX&G*{5PLDp(9NLk_2i>&<dzd!+a
zJ9zwQT8s){47Uz*Qlk3<k2cugDx%jq%2R^?RM%Vc@71=pqgLJaP&RV9lTEuo-tN15
zkOp#B7a5Pj<oaox*ydE$FzXuXbg<TCNn8ttNLAAg-)U~(c!8)^HMMP{XLN63d^!)@
zS%pSK@IMnCyyq(zF7QcvxWTIMyLD&n`+Ve}?a_<cw7GMP?_kl5P=j1$xs-VnDxM)g
zk14*sUAg#B1*Jg8cPtXHJrE?!EI@!^8fw?O!+t2QBZzWAF3!-+-dmyfZ*(473>v6l
z>rJt)&`q;*>NKS})M9a1WxSQL3=Fyd^XTY@o|}s~MHJ-K1>>IvT5{2y7O_1l3l5dp
zw||Y|sNA%a$>qhL$EHpRmxBZ!?j6MZKLNwAGJt^`;67BoCgoSnP0i^P>1q{~QbRjL
zFH#0yKZ#zO@2@uj38rVJRfqFo${zU1Vfc^<Jyc3+Nf2@!wS0uM_^PSCB@8Ll8wM(M
zA8#ALC^v}3beAU?k8)*KR>oLWL=h|h<0UyU-?KCwZRF00qzOvs-EOaDey3q54{p|}
zD<i<M%AM=@)wtaF1+ul`2WMOBSHqJ`{bR$6!x=n7`ln8vs$BTYi?|rf#=S<u(G?qP
z{Y|VZ!3ilDnG~D@fp5&HW?uI*R6$gnlQ2a(MXO|2|Aqt-c%yVvr*9h1{#)ksg74-L
z+eF=09sa>cxbFkZmHa>wy282H)?V$u2_tA(v#Dg?^7p7)qWE6UmR6IB;Zy|Y>u<ou
ztjQ#ffB*G+rz2)lU>vZ$w0X?kmPMdH_9L%?4JB`}rrT@&xlpcmlRi+}%>UTF%}cbD
zUNjF=qDv|N-atT?L_Mv|9UO$93A`4hZ_{};nm0H#f)aaKeS?-P;BDw4C0}~Bo*`r;
zZWI}zcV>Z<KbD^9er`e^j5h~w4ckpR0ceG;YM(j^14m6~h#E*eq#+pCJ(eMUeiVAI
zBnN?X>sbCFxG0AP(e&f6I^C(Klr>~|c=UW8Bc1W+bJ)bEEoQ)5S<wrZc%Zi5OSreX
zfRMk>`Svp}QA!}?!j<?aXG8D2fzK?z7V*0UHgKxOinq<|KEY=*)elm6Ha8kYQScTq
zYJR@WMobqt|LvNhRr%T5P`JV4rPwibI?J=Bo9X(pE<^NCmkH?UK9>8(xx^ukq07!%
zxI7K1Bk)FF4)a8*R;WMa!d=mt&~0T#V=u@;hEpqZ>M$6CP)X1MKzQp~6WMgs*$^c^
z`;n~X4XUav-)ieezQtwec7S+H4jI>}94o%@%ePp@C62<xdATn0PzsCP7P9g`KAsyB
z3eLOOnB8o&ddFKpNkQ?Uk;2bRT6drX36<WBFxL9jG@$Qg$Hpvd&CMAe15Z%qD@9en
z_%$<9HxHz~kA<5AZw{CGAiM55ijDiWwEN`7QRWj>d=4OzI(`jRo=@$2kf5ye073#s
zYlWNowe!X7tXyiY96%{<4VAoiC&H;`6U(!&**;&({?uwd?Cv$i@UZBm^+orSOle2*
z4lCYwmK;{_WB+@cGsounuP*Bl1a?k6D-{I(tQ53;%ChSx#ZZ@@kEOsC$gUOAH7vW9
zV#Q;8j4{8yyis7q+!@NN(2v<{QaL{%)#C|g#rGboDUt=sfkI0GBGDOLQy6fi?Mkq!
zPoQc0WgID#S9~ZEdap|MpZw1n3nYkeVjk+lXe5O9<d^H%Y9f06TXolev=rys_(;t_
z)f4V$`YExzU>iGD^g1U`QNO<$weB*M=RYwxJdGj9q?T${4<lwdwe;If<}6(3z;F~v
zY+O*m$W>g!)x9tCvQH7Cz`o^UznQtDs&q>3!GE~`UX&YK_Kaio#<?8|7wh?CT^wPc
zD`UDiE&p>%`}-FqR?D@1D8>~43iQx$DS65ki6HI4oXg;m-w0i2Da4i$axOL3n5^9w
z!E?dJ8my^P;EhSqRWaa7!IV!I6ow0Kb9{U8>vkKR4USdEYPkj8m}Oa3O8)0GO=%NZ
z#8Mx1S-BvglLgFSp7#fgol18{NhcG`A*m48l~JMBpj8A62W$mB#b1rqwZ+#B^@q`P
zUVh>obZF$&bUJ2ISZyU3n{2>vKGGPPR9F<Es|MwEi!+Vt5F$j*vVnQ&YL@TA9Ey8-
z1|hI)C5A&IV|Ix`;LrS85lV`XWxQ2Z=h24fQVLx6M6q{+6N?_{4M8;WOMrGY;1zUa
z0JhXJkLbf4K#VTQj{5|68Bb5OJA>E6aoX;&YJs*m;Apf>NB+RbC?e&Sfo#;S?7|7P
z>4J~ID~`^L!ej}@pX)pdY(gz?miV>LX&8B$fGH;Sfi>|p=40H2c@;<b`zk>N-@htQ
zA_BR~F}!g>dwcCMTY!QRsykf&f}{h7?CR<$sCAjDf+mf>ICQv1m0VdH-onJ*L#d@k
zu!YfX2^Dxna7~mjbl#c|2t9^A%@zByU8^d8ucae6&mMN%eOVZu6W5hkAhw-9-nn|s
z(Wdz&<?~j@v35ZTCQSvd6s$N9H_9fgU56nH{N3<#eSLwevvuAK3<o@$vlU0ZqdM))
zBW7n(ztVxD`KnA+^2ymp$8+dDym)}q#WlvYth#BoCD$TcvC($*xLF>rGM@oyrBQ0Z
zTRL3_6wz&P@?;h&)Nt!<ik2dqJXmA)^+1Gn7R{Bxd=ubyt1z2b!rEYt$_>|B)Dm^k
zjTg(OY*aEpvXJZQOc_K@;0<O*&DWHM24K@vPd;p8g3VwZG*CQGt~E|^o20Pq=K*X5
z#`0j0O}_DCxnS(xvM8iKPV$3)hn~iK|L39~{Xby%OqZ!Gcs+eXmjjTh61H)Y*YOVw
zKMzKjf*JE=b$F;x3oD>oK6DJ!x;Fivehy-I)<S3J*FciW2_n5&U{%`*<X<=aEXi!t
zJ#hIlW+fQiDoP;xE=={n<yZs+LDJavFMU~7F<?v(cca+9)%2xm48K*Ab>kMdUUp@<
z9|Z<lkDD89PaBz4M0-(3oZEMC5l2zaEh&_ZinZvygDVEc9GR)tQDLkr#g1c>QAU?s
zFcIqaVI|CtkCUvB6CWcoyV|tn5qA3hfA6(m_*ibtDP>KeYWSseQ`QrYV)Qg{E{oi;
zLO87&zQ_H)+3YXaDmx=hYIEVT1~gAZ24L!$7L$l({0Zo94Y_v#2(S$;hEl8Ru%ZeK
zACLTH!57JX=EuL+`*iu)ag>(HQo-8Jf#31uKZaZ#Osw6fs*sh-`LH2fR`(V2PgrZ%
zu|C6(-Dj^=c7_@fuAtujxDW0iq9{3d6H7St-_axH#TwnMMI`G_RcjjEVd2sD3LJ;}
z47RUiO%%~BVz^1GP~_?$#27-}m-L8@TFvUh!|mJVWoDLhzY(#~DY8r@sJzhMJ@wBW
z9P3_+ZN+incM9(Czr6MI1%11iysRZ}cP;IxSJJey!G+j<A@ew1;#U0ZX;rp;)@)M$
z`E##7#~IwkONkl>mkKXmbn1WdbNYt0|KXg%G1sD~vL1=MkpW5ckEu&5ZiUYcy|f?*
zK#W_LPs|%TuES*C^y>MkA^7-=;s3a%piq}>q%1^X!)<E5TSg%)EzZ<}TWylW0?#a+
zlQ=Dk;U6mOJp2^x0&e)Hi;GL$vsPQbYK+R6bz&R`JL1{7v3+SjM{;P9A${tgfrr^D
z$3$&zqea*QeoP~JBxfp`2k>)5LIEyNe3Zrli&s-pGADzD(ee`g(R`5^M`!r|*nQaQ
z{j85%-Rcf;kc0kSNuo+yu){-9fgSq~z}Ni-xFi8vvD-{V`hiUA__3k3j$Mj%Nmi*o
zAk*e|`MqU{d2bJ)^<YScx4aTsL6p2`aCP=2z05bV6~U+BIVX{$_BIyzYGG90Or@#w
zaE`5CFnk&Dc3Wse=N&5;y*j<=Ssd1BJfiK(hVzB>?@WGv9^k-+&YKQrXSz&u4{&39
zKqbD(ccGGj&+!#Ke(IoDHdt$UPF=lac3cFV;kA=oTPV?{1C)$yuLKvqTsVIdp66s;
zAAPzOV)7GwAt63bF{{m99X<D5@6RW2NHXYd=!a)cr<SW>m@rsqSF2m+3ZXSj7Fh^1
z<z&$d732mi5LfnKJ=zF;W=7J}v&<Xp1L-uVy&bMPu@}9-4jVxk(pGStc*NG~IVg&Q
zctT0eW>RiFmVN{NVxz6Hi-O_2GK<FlLMGkHj@#9oXQHm}w1WI0@JxlaN0>`)UJL}t
zI&k=JNqR<_YkC!Xk@EF9Z84|g8G4K{mLQT`wCV(#?8}_|*bjDRec_AmCc(Nz;BoNm
zM=iHMNR4#n$$^muOd-tEhI&Kbz+#DzAn6M&R_J^Z(iq(<XRJs?fsOpTRk)&@0^8c+
z_a6(CY?wh)Ol&&xlAck(>}b<A(CqXdAhHE%;wzY<Jmu}7WRIEpfsGiImmjmduI=m$
z6V+MJ$<ZH^O(sZJ5&%mdW{Q~ZEg8l)K<oThNEOM1erRl<hfBd9XYV1e{dVR_PBn%j
zz&1^*1+F^7o8;8YG5;6APj){82Xygbqk1O8Z4!EWEr@|r%T}I#o@rX21ka-K@?n-&
zhH2X175=XQw2@H_K|>c@vu(BCrWEd1U?+1Ye;6Ls9UMePN&@eQxePU@23)!2$8K57
z<=-QmI(H7l!-Jj#vbtZWBaxcQ`=gNeqxBDo)=mD$AiJP5Smn($&@)IR^o7&#1$vtC
zNwCDL)|}<4Ok#6766zT@CL4D#@y(98PH-wLab(R%2SFd9;v*x3B@+jTmOWWU&IT<x
z=GthheXv!=<X2vhe@|@S#hOyhM2GJ$(PkR3*&F1#%hT~7@wlyil*>V|RKoA<xJ_4?
z4c7=`70+S2u1?3*;d;VcwhdD64$#Y)R$G!FBp7D((CJiF2%Afwm~BgQqnd|Oi}r$N
ztWtv2g%Nrs6=Qf2#C4sViJ<!8qKt{^yt>($VdRV@x8PfA-iwXBHTm=a%-<ym#wv~+
zX{9Aur2s0B=j!h;R}wEKszT&H`2>J<85$XDIvy{~uDN%@hQI==%@5ho<Z#gfbmm44
zk|^W@0fji(aqmZl8{>U)I+3FZC(QUNUIdQ<&DcHV#y(w7;=mO&ffu!m&$hzxiuWGH
zIFfV^Cibo_frwq?<On$l(22Y%Cm9#s+De-}?gv;`%w`2)n%Vg^3&V$SWA|H(?(T(E
zo6A?Tvoiq#L2Kkw#@K)AXzdhzkI4W~x4eZ-%?TbP(>ivX{|sEXo-LfT1UZB<eXUZ?
z8Ynu0elV`@*w$OU4mGFYa_iniMqAKjiL1YZ;6i`0<H+u=vv0BmZ+nAQPBkc)Yr#qF
z{JG(GTK?7V-fONsnuNx_Ds+~Uk{E}D>rf)7Ro?pTPI2V(n;)=Ija{>C&b>{|QwB?I
zZhiK|V;d5S19;HCy0vS{US^mR-ip{@csXutz16+xTG%Hc%y<27;KpQj0Q4VVM_MUR
zL=Y&6@Nup~H&GXzoZT1`!<Q{DK&av`DfTM|9LvsT9S)qqUnBPA<u+#{IJmAs*>4ia
zd$`c&nuqk_c4?pBhr?cKywhrv2%ZV@&0|2_GM9)P<d;MGi~9O=ec|Y6T$0#!DhqaJ
zk#YxQM~YT#Kp*1(;OnozqC_he$PdWc0Dwc?#RK~;BVw1SG<O{qPA36gW%kW9B1csD
zjQyy9MFB0g`3K;kE(Wcvz{g0code|b;p@3FEdSj~WvVN`jAJ(U651+X5e7ckCo-ug
z6SYlD9CyAN8XP>^zBC(Kph$c(V%6}*3GOcfSk^MNb?d>GHC>^$+az@Cu)=!m?iNn6
zVZ$t4r*^~kcQ?Lu$qYxW9@w>#s2y9#&Z*j8%ryU&aDhOlClXo`<Kz6?X5J3gD~_EP
zXO62xXNWzA^t)KEM|%PNBZGBVK9@S?QaftXS~o;mXdK|)NN=JCR=Z5sI<_tJFO6$g
z2}(LzDD>uaYU(g6NWNOHRrQ5k4}-Vf6$U9XEo-9(I5rYn{A{&)e3cax*f(E+YAejW
zH;C|qz}&0w_~jMSu+1-UEq0Zx$|?xLFab{Vy8zg9bg=qvFD)ugeYJ$79bi`NT}^)2
zKpO9Ioa|(}J96%;OS8Ly%(9ysE4bC#l0~2y09U{VuCCA~c#VV%*q&I|y}L@NGh$wX
z)oI=RDhL}pAeKWM4`10z!QGEruG&)9^+F^@y6e5$^s_@3hdNah9{%1mTk(Vz?CT50
z@7ltLxtxr>cvgI_jfZmbeq8QE*zfW;m**Yd#9+E-mspNiEG&slKhU(XA(YV^Vx+~+
z^nCFmEZdizHpg8Ox;J~Zc0-_QMf=<v4Q+&)<3~U>KUVWPPmAKIiJc3?Avrr^M^4?Z
z2?Sc5zxLhe$0a$g9r>BBWA}l(+~sA*1<f!zqx5g*i7Px@r@8V)G@6HM3DeNJObOC)
zg@-S%EG$n!I27mcVM*5Q;kI!pv8kuc@&2pQe%d|0$03;{Sx$ZzRTsto4j0qHa_2@M
z*<u}#-qV9>lz5RIjO<Sj(Q<4-iu!K{bn1RMRQpy_IcCL4(#ZyeCy*FV*r?A~UYr6T
z{BWHtT+plCfOmo(0HFmgf0^TdKNRJD3|StnR0uhIR%y5aN%6Wrf}$oTr*4i*wFpyE
zRJi}rqUfh5J<Ap0Bp}SC`o+Hkz*j96V?*NLt=0kVfgK`YVRi3o+!VkT1I-@}I2|z%
zfDi+is%La$i#r**YdUhSx4d&fU|*x##8;%=VIFN1?cXuH>{~;R;|llJ`Q%Sm3_jh!
z6D>{E(^MFIGr*y7vr4uxuDvxIh#qbho}AttQsfN|Mw7^wRA6&ye|k2cZX0ieFy-V~
zzH+ubk!;kB*~tds$2wgBQr3sLb$h{)pY};y-%i1u{gn=G)c~{KHPsK=rB09*cnRZA
zx7G6FpMDqR&r9${4asa*oz2*zqnJ<}z>_{qe~}ec=Gq20#45M(?0@sqXx<I{vo;Or
z#yad)6=oL-m<D)N<5NxD<F4kX!DC+ateX6nEORhQ4U8zhr7a5jVxYcT6|k6<AMUTy
z{5X_EC;gxfaEk>hN+bl2IPBKG*3t?PwC5Tpx#S0Af6IcAY=~i*nM&yx9;#hQsn0o)
zBFD2RIDRE@wDSFIm7GpvU1KyjauI*on+a(%Rdd|az8d!<$an=kzI0mqF0jW{IFo0#
zd6W;RunH!l0!uT`tI1mf;Nm?j{6C4$e;<4CUc?zJp=pBz=*^@>^X#eoA!SmRP*ErV
z`hK^T3e#^vHhhbmM^Fwq&&l|x$kOvsyD4n1!)g>I(DPAlEMoEabQ4&dtbJk|c(Cts
zi)rF(KO^4BK0d5Iy(n2c8MWfLv2VWGGEa=*b^!s5uV#*?9*B?lor3-J^cDyzU2g8J
z<quSCZTkrE<G%}}yfQOcft>NnSKip40sA3>HA81#)u@8n-=-8Ca~f$wN#v>&CiEcq
ziLftn9u?-}0geQIUpBlr5Z}6?edi!g?K#9rewb-f6_&Zsu>_jL(-;8|wr1SBrT*|)
zX^;by@M<{j0NIYUlCDhha9p=uV2)xN|4Bq$4IcZ7I0{k)erXZ3)yRVj#E=KA`LNA@
zv9PE^5MdE%HUk{eVZZy|BCzsX(&^`DKS6l%`?M_Ck%*=9;I;(5qw<<zvQYR~R#ShL
z(B@T&4kFN)_#yG%)sqYTF+3pSTv62G7JlFavV@l7{pirwJZ3X8vofRs0@95!d7RSH
zTzms!>u~UDg+mH#mJO<9SVHvXxnT^qmmA}<7)duJbPC!6BKQ}oYiaZNDjkDIHx%C}
zsrxcUl0c8PuTfefUARGhY%{(!qXyg>pm6!JB?AB$UX`L})PQdPBq}Y1XTnk7=^8bd
z9hOTR(;AU$+lmfPv3GG?N6+_?Hjld{7NhZtC9#&V&}Yqo?#D;IEOi?=1tB@b$-OIV
z|2;wMQk@G>0CTvu2XEQPvKO;ixGzsYo|0J^Hqv%qoUbRd!#iX3by?F{nWI%;DvU~Z
zD__9!vaQcrr2w-*DBM&A=DdAA;<&UdH@^__V7JkaKw{8_T)(_%;OTGG+JI#MLAR%c
zPsnTLmP=ttCcT<+@j$nLbfW4(xtK+gz=iYwehH4Gs8e%78XSFKlyRPtTCfw`E!Gs9
z7s)0P<HS{#t|H_^ILbCu{iw%JdsB(u(`xFUEs-pGtx<uEt2<Uk2}4Mf8s0lCaMZ=o
zk&{kYeaIQRAMEt9zR@6R*18h{3X8o3Svn{(GP66<6?y2?z5dhidRf@ycWp4oP6GqN
z%%N0OJq&k%AL}UdY-q?FZteuLqWt=|pNCBDx}k<gJ-+7vp`L*R`f#TdogZR-$s!7f
zEkM%h>RcW9^{E&*|BRsg4>-J8iMFk_;xX%|;LdeYSpJhy_oa)&$vG%8`y8shw8*(~
zz24H%JYw5Yf37DFNyCz?ija8sicW7pLmy2|!sjO{P%%5%eoiZkEA`?*k+fsWiLF30
zV@-hl*wiQsqLk**-<mi^W&^{|EpF!Xk8@kP2C@DnTb&e??dXV<pU8);;u=#75?8{k
zKmk8w{KQYypFh4b4XNVIN^A&(2NhnSAQ{iR+?SZ{bPY7mZ&&9<VAQHZHY0dPNr}u*
zjzLlekM5@=#>a~yKP|z=x%B%g5ph9pip>zLfw$CIfMaVGOg<an*0@>on?#(?q021$
z^I;vPz^DoBsCoo&5@z0YTo<TCBg6wc_~TF%Nf}Zq+VcpDV^eV@FbR{nQyvH~Pq8l(
z3Rv9bu8Xn<u|ho2wX+bp^m_K<ym#{pH4xH2rq2}y0#yJHbOd-lr&BZmpr~=P^IDO%
zRfst70P;miEZ<~!sGd;qkdquC1Mk#<0G9)LWOXmJ+Ipa(BGwo#jIfx_c8lr8qF_&-
zU4j(0SlQ8m7#&Cu;1a)&G+qzLC5}L)k6sx(bKnx{1}Tn#U%*wzqCE<18p+z7g@iB@
z;7rgZp?`EFK>C8W5pf!*j%`u0HC)TE8vxK;07^BJwUznd*-kZ>fBsD|xq#Kh)Vg93
z->0BUL09^PL}q0Vvb=2L^>8B0$HAYS#FyBppaME^IJuU8yG2X9@(v1ib%53s8fV~f
z50sSNGVH?E_5PL$_Rb*t@W{1QGlY*3@=}@*#tQ7|DC+5x(42wVqA^_<Yk^naksGg6
z=jasOXOEHIBWMz*t<A2bAO%Kmg7-!VKs%viz~`jz25=hD7-=+QA+tv}PwfW(AY~t)
z#04uOKuguj;@45p=yYh9&3LB!>o0#ARGFHW8RZ+>_as_Vd4>*-ck8SBT&zYcs>_@X
z46{+;9uo_ifSg7Zx`POcCSl>UVjXQSh&kekiCZoCcTABkW39Q!2H|q?S#llQ0Uxic
zaY_j+PM@s`G1y5t3H=*ZYl*eW_pt<GEB_L+>@ckf4y>MbXKCbDWi+If&5o;(fKCST
z;sP0285!UJ*=m~M!JHHi7sMFmdQTHpuGu0k)&Bhs)|Bqz)H2ys14hBq5ZS~vAc{Jj
zdL7ccSEdTn4ag0ha+r(k8)AsI6_HrEqj2-{qXF)39k)&iU7{1G{Akeq0}oC()Vv8}
zAyW!8mcWVOE}Is1Q9~sD{Ml30%7>8hI~#%<@>f9;cn^cYN#1nm@|*UlKHv=0@1l{Q
z={HPgZtB8I$i-qWvdtr*UqH@%*^a%hd-ds^H?yMX%tLi=0HKbb%A1o2^;wN^1*{?&
z*Z$2C8|cW9$m(#^K`sgJ7}Rbk&f|_caeR}~oHlIdRbCCy*!>mRT`pY!YdCT(csA7n
z?C~#I!#ZMNMkPyvd!hV+XNDt=BbP#pVTy<7k`B~sGr}@r3heXj0p=*zsW!AbI<#cn
zb3iA0Y|Tkdp(yH<)$2h)LrpY~gjmRbvMpeL?2Y~?UQnpxVYlOe3`2h%V=qqn`dr5p
zUi{<USZ7-*MOgOcujMaZ3iYUkCL%QGkQL$Z{#96)x3OVZYW`8#*<oG^TfW~}Q3^0w
zFY9~b{RAs>bM)l=!<=MF__0_gxpqiu_v0dn`i|?y)w!c2_ikc-?gwkUm__!3m%~E7
zV(-@qJeh%M8ZC5?79&mG^26=tW7cB}=78@aH<lHD&Su<;_&J^`QbfFJIS}yG?-)Jn
zJB0b^yvP;JmdrH|&a5M8v=rD}Yq<;W&Orc|ABYD|&t=^7!JhDU$PrMmYQteeA&4T`
z<Z1Te(%@he8QtB_>&DLpL`##|Wkw!A|3K`8({DTBi#W|gOzgeeJ>XSgs|%<Zz;$EN
zOB8b3AA-W+J@7BenHSMe!K__YW?&z>OzW$g38JUUywAoIP6h!;M(4$djI^hT0H|AD
z9^@j67cCjUUi|;%Xc$-G!h<P5*%v7Wc_>+!1-W1YqeB`7=TOM+p{Xo24{&sCJ+JWd
z5lShj`wTzEaXFC-x-D}chrj3EhqO0WGeGuJlDFsyGK-U`sM#H82umU(BSEY>xIr4f
zddd@$#gl|)o)fxfO_-~-8*prkGRM?JaRvuxupa{|p4R6Thu^`oB;`4AS=^GGjj^01
zo469SiwXfxLo}4IX~7fn`$%|=)Ug*d+9MM`=zeW3>Dnez*JNwRPdQ1kijc3R89OCK
zk>oaCWZozNa&rWoh8C|a;IVqImVY`O_*t;J@@tMTm6gE(j-j@v+LQoRYLVx72v;4n
zsMXv8Qhxw1xd_q+UKD`lQ0<24bV8K8hyq)}gR`O${sNxD+bAb@39i(_q`~f~r&bvF
zABA6mXbn^@wr&f?qjf?`;l7~^V|l8sNyHDDKS{=2?{5$mJ6GcexQChs_<<V8tBS;(
zhy3a*b4)h&Mo$?eV}pY$nB;1ciB3@rA|oM{%cIUZr=seZe5a22F14*sghmK_pWYO+
zT#%|K60bGGv6aiZuJOp!PN*SbnSaxBNKD7dEgnEECHSVyL*nC_Gr*k>3V>`1qryx8
zd<B`=@<Vk%p<|@wRaZDSpVxs4Ua;vGx^#^<@Rm!9Y|sStJwDe)AN$Y~Eu9cuNQ;a0
zTdC@Nqg=T1q;6sSF>l;9UL!zf%5nIuix?jH^Xf)+(1&$09{5OlxxXp`Y73`B&$YEz
zxVC7CGPOI!f=-u=i`4PwEI0K^;4k{DEXGR1FE+@G-_oA9GgiCqb|H+ht~ggN_v3L{
zW)2gO)<<#Bmf6t5wBv(|-xoCqaFLx*%3QqQ$oV8OE%AW+<bAHXc`&~gn@g>KZ49kh
zt|Qbl(t+r>Q8uM!;KHB@{3MU^*1#`bo%3o6-Jfd!P-A?T`bk<mek#z?8`6jOLgq_^
z)zr6}!qw9FQD_!;LK&kY&mnT8P>gbKrk>z^jk)(XcF)b4IyFjiBSP|$Hm<AAwa4jH
z<rwu?>CxPZUedn0rc@)##lJ;qp2^qhM!%kmc1YMOyxK@Qi*8JyWD}1wuu9N97&P!S
z8mj*=!_`{9I$zO9Z>^u0_k1@m&AXy7EH3iSGuyj+bgV)ov{O6Xo%Nk*RkiSAN*9b4
zG!%Ndm{LA4yw`foI}P2Fjxa^Jg4H6X_K<$QyuuTlNYQfabgc?=N~Xg~`SrncAy5{|
zeW=}$Z1_Ra=K2T8k-NP?nPbVF>gJ|z!GGw^b#G*-ACGUkeOpT%N(ut~f_ki!`mP|)
z<HK9>P0Bns5!#{l=@GPjQ)Qd~f>@Y#cm)0(R6)tD(X;{66*Hj#&#FjDX@uj&Ft^F?
z1jYsRh5eH3?ZC4~CVL4Zb+H86%UD90U}}5{jCN1~9AEpJKzLYPag3iv3B0{1W7hCa
z<_7%NvPGt77=OBXGY0?h53oMM20zS0j)1%F@FER6{00h!eIv7>e;hSN|4Zg({ZQrq
z{`5a>Ab0qmZ~QMDkRSXH9R3HD;0FKy%nrrO_3d0<o=<Muz)vN?@4lVZQcd~G_`&}J
Dzj1@M

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT1024.png b/Installer/icons/AT1024.png
new file mode 100644
index 0000000000000000000000000000000000000000..f77d8fe3681f87a20f9b8c75c5fbfe4676abb937
GIT binary patch
literal 20808
zcmd6Pc{o-3{{J#0Q-z44u*r}jMU)K5HZ&O1PNt%anL=h;qRc}`nM1}Rk(o_qLgpz$
z=2>Po_Wpg=a?btU-*djtz4!capXb|o+BvJW*8B6GU+-b(tE#MUi24LI1VM+C6y?+*
zh#dS#4pCBoKd>hSUO*6um+AHEs!G?db67vMGBSPg7=rjh-9jZ5t7O<}^ff-5VLB+`
zBTk;Kd`u3_c9Y5f!TUU>`}XIH)@Y(cxcLQxJk2XBgKIKg_~&LF&hq5gA{m_?Po74d
zCJ6E8`7DnVvM()4E)J2%CVjh;YtEo5+N4-xXmF|E422#ihlk#l@EKtZm1O3NzuELR
ze=n~Ke#<Rw-MfsBC~bh^71<saKcu&!Yqh+8Wy)=oPC$uz`SP;YHD+%2@#6Uv)~UoQ
z(pK8z?>evA_}n}D?DNmckB`!-FIGQ9ck$`h7k{)K8vS_J?4!L3;oAc}Z6({-Ny^cC
zvZP8rA!^r;Gu`v~kr8TuLhlG4A$}fHd3}=yb3A~JCQa6Re5;Z;;!t4p(7Ew8b*;xD
z^8kT`jI=~1*K%OEE`RVU$!=>!ME3@Uwc;o5%zFMYDN>63=l*l~JWC{z5*0tf1dqSw
z+BT*3CjIR$KO9a*VfDORw4k6{N}1h**8Zz285<kv7`jn!)6qf2*oqiuy1q%q;`a1K
z;`byYpcV>)n+kFe5&kcsEHw;Vp|V!gvV|Z)F8DWz;|J+y;Nn3$rQ7I(lcWc!n5ZvW
z9Wn%$j@zN{*<H7?uy|}~2VH;q_@Uk7M;s2Ob|xGOO1D)p&kr+05C^0rckPa2|NNlo
z+i>sLr6v7bk)1>zACa45Qf4A2MCk*C&0fEof9GrS<(5GVx0z8(={B+T`#akf|I0lQ
zT3ImyxpJ4Tb^6elF)#&=kdk`NOL)>1J6k1~CPb&qWG!Y~5i;Vr7-qsOv3_T8v#EM9
z3xBowdRJtIbK}z@9YJtPkHl^TQt;<_@EdRoe^kI95DW5227f+4ex!vzJxJisfBNy?
zKli`C;(vdx0)G3yB>k7?{=*|9&+VW7FR%FDS$%+<<^Kk&|KXAUiNAmP@!xCpZ?XEn
zOY2|Jt3V|AA3pcDSp8etL2mx<vHEumabG3>Jy!pY&q2t||DksFRrz;V{a1#uPx>z^
z`CD53JFM=X{=dvBpWq(1$7txxVo=hjPd0g<&J{~sL3IqCEV?ECmZ2?GA2%)bK!%p(
z0yjkv+i|j2hy1^Mx$sb2;ESZB&3MK0=_ls?Yq;28ROC?#kB-cbXYmn{3fm!^!Y1SO
zELWdC3SVDd8lr&sULWk;dA8t}63A*eEFm!VV|SZ=Chz?29F_ZMHOu-=ysvPNKKqou
z)8iNk_fi~m`P1R00p@k{9(0G_L=Lgfn9CvgIwRDwIQG6FLU{6~zMmhz#^^WmEZ>!D
zFK!eoXbBnzy-HSMmpp;f%i|kzF)>RPvpVKwc)_GGyl`s(%Mej8bmGO!Bg|eJDHg49
zy;mJ9MRv!eeMw|~1(6)(t(_o_WsiPQaXW)Q!~*n7tv~kWTn;{)c%``8itfeHcH_<>
zn;9Zu*rvu<nswsEL7Hz$ePwp0A4`aY`mg!mH7MG$)u6X4N$fTCe$-@;YT=OE_C)W>
ziyiNga2D$Y(dAI~J-#zpWp`<n>w~;$3_Bc_j*@y*&uFXB7f7x@3MijOfu|hv%huGN
zxQ$%n6rT{>euWD*Un=6oudU{sXDg8$D5!favBUtLn#J~gu<0pv5`MBa{ko`C>JT+U
zg7d@;6~bkUXL}R+HSO4~SJR90j4updOF4_&-ODDPCWm~x_l8;=r>uyVfa)lqg!6d|
zeMil&Zcm8}NLV<Z-5J0Ip2CEVu*^H}txxL|-JpaRmPT@0YZgD;JOowrMK(V&SXXgp
z=yTht9?3Izf28~|>e9I{eIHp|6XLS6dY8x8X-H(+dRGdt%#ymg6wt_ghWk{kiPH){
zr?}xPb{A{7Bals5dC=@<v8Z!~x-6tBQe0pa{PK1*EmWa(mEQhY?IdnTf>V4fe~2g}
zvNUv#d`TMmsCSMOLZ@2xT_A(3H<E|+PU*6WQB`W?Oe#qG1+<clxXtT+mLZ4yTH;dU
zeV_0cLQqTTEeD4u@%RwB7|~bE<;Nt39W^Kk{#hFv(>f)}l#t)jvV(>Oo2jWV1R3j9
zO*Xd`IS10kXbuo2trBxT-KKP}S|WpL=BM9Z2V8s~*lWLuvhIF7J7+j$o=sC}Wfxh`
z%T1;l)vgeH0`j<+=|&{<itW&I@=;1)cgGYR>?p6v$tjhJF?cW#T(U|AASg!b&|Htd
zOl5s%kHW$UD+Ll5zNG$KoQga8-1E!aJ7YNn(4@9k78i@}W@5Y(67tGKqz`v@QISBv
z9F-%AH8bTB&SS+e*~ds=z!O8=cZ)||<tiun0e(>j%SX9doG{F(XfPwJXD8V%T;b$X
zjLqz+CJdH%Bk$(TwA_A5&u8-09Z-jFoSB*Rn|*hL=GwJPr}5DG@QQUC<S$G+))q@b
z)3cd9J-am`{D9Tb?4RLIb0QiQLizP(q#pvYl;x&=Rki*8afegUtJt&yHQ2^U4&yCx
zy};;8=;RLB5Xz$Ne3PGF(3B7eoYtiodhS}}3?C-fd(g;{>XLxuOq>j|=(ro>W-ca<
z{oveZA}2$?<Sscw`ok&;dW5T-`iZA%>pyK}Llo1uSO0i=R8?1(P4BZRCBw`}sd19U
zk{<H3jMUf6yS_4sUD;Y(r0{vBZ(j=Y?QC`DA@_X~B_{N=D25IOjw3Hbmin1==iGcw
zG<27n*s!I2Vj_h_>lzYOFnsKJqH4j@58&kB&b>7|d-OuUJ6To64D3d3z0n0(81#7z
zcjsAXKZ=U-O5n4z_{rE@@@!vS?%J@ZRCRD2L+zxn{s@^ZRj-mB&WdpIo%xz;q@aR{
z+&{yx=#!r;p~^JZ)EYW_>f#)R_m8k!(kYPbBcqm~ReBGUTx1X(y-i`!<@<4O1<29q
z4{HOa&8(P_!**ut3Xq}&9Fn<CfOv;oI!zeoi}dfbZKb-VcC!qhf$+d*anRg+?Dw}G
zuY@$wRwt35ygW)+tsd=~1!fVH;a>RlIYh29rj14yLY;SQIQgj3nf2%pYx|Jy)RQ&c
zU#LWRLw1fvsP_F!3Pjeb&SsJ4jy`{_jx!3}Cv$EvHdgK8>O)RGeoYn0lSNPNBFYaB
zO0gI~b#!u*pPrarnaGijU_j3LA!)K%44uH;1%l`P3l7CvShR_|y`&3Ip1o{~8tC9c
zjLJ{Hsx}a03~+gI^I7fC=Fm~(1vNtJjRGjucC$BvOvq7d7OZV;^S-;OQ{K2gxHi)^
z*vG&Bg2=gq>vH)MG9ngzsQoJ%f|33i#_>#~sKovV;E=SC>c_*K-SRtgR+J?4ZEGE`
zMoqM%5k>Jy*$ZI&AfnRP%Rm&Y`-H+r7vCvLZWPk}j!$-<@B=v-B)JPa&lUsLCYxm|
zu<aK%8^nM9JiAXyq4~>WRK-pjY}c?p8DA~7w4}K>zM=aqrQRwngcz#d^^WdOp{8aG
zq(gPT4$zD}(2YfiE0)iS>EMqzYZRD$MTDf7p9F*i&gbQ!mmC+v+ILGHkuo=?>g6Gn
z%&C8Ne3_>oV7C*e5N*Qvz<%rT$ZViQ?C{m~JUVMyv#F~L@9ggHKOH<5U6nJJexoMt
zq=Xmjp)y~_pB5=ft_ILqvzZM!-$ahi-Sj*v%0xf!9;Nu<^@~Pw#YxxqA6FQZSn`4D
z_<Q<~1xAY@LBr!w{l=QyY)+k*$I%ey1yRJCLue5xbz8_*`0j4M+qSl2yUK@%iCVw8
z{R65($)xx5wS6(=!(xiv{!C}hpuRfgkDUKoci!Whk2V*Mk}7|zG>-Srmvq@b?XL{?
zu|xDDjQ=C$6huxSLX9vgHb*lT>44}DOF!-<uyzlPWVg0aaaE0d3!_%)x+&xfrK%1#
zM(nHjbKb%r>%l2W0rD8x^g8UZKgG-#gcmiJ^Uye3=41<E2uQ6U%1~bi*3?<*BwJys
zTJq!_pablI_FPw2Te(RNo%M;%@2=v`#l^@;EBdBhG>)t_h=`&)@-1W;3olT?fu}}r
zpyOy)up|$8jJ&9S*|(Gtc9FFuU>oR6E2kn7$fvi&);PHU-=icRd*W2o3EhPSS;o&K
z*I)WTGHqwruXI9?T<2LW6lsj*jGc&OfAVz_R)E0Pj@xI^L5v?br;ZVaZ787nq>|i=
zvneXfq%9tuo(E8jD=%KU?~U%3EFB~DNW2ID6TofBB+w0AfPq3SE_0B_kTlz#3gkL>
z4v?dY-%X~37-N-AU$AC{ID%(;^qEOo65#N`_h2j=Cq<#N`H&OhJ2f#OynVFbIF!(7
zpO;@7m)_y!aglHR8x4x_vpX3@^*VM{42A$%TR7>U_fxUPkcWEDh(799fVtbR8u88_
z9C9SA*g<=n8fjuK9mGBKb_pw#g&$?UIY~GHB{0Kzz#})oz4-(^_0Ly?=_6xR!P2K5
zU#IW~SS*m(L_Afn+og|=ci+1)DHS;ZqW<+GxJ>)jxO>)n3SJ($4}OI6FK-*i1$~iv
zHtQ*kxpb-aO=_IqOYAPMFr?`9KE6~ki{Ov*Sq8B5@#Dv*?S~IRze)0&<Jq;Burie5
zH>HZ~lwj1x$&gr9boqpsg<tJNQ_{9KGgpaKJRiguz*&Gr)&8_G4#3USiW9#yC8`XU
zpYE%Kpe3%zrkbYVEqS}MT4yL?PDk$U4cFKY<KNIxg*O|G0oc*j*L`eeW24^ALE%yu
zeM%?Mve_sp^V7Kvi+;vKM{WlyrlNm^pKx1pFz6KRss6EACx^R6R_6DydVOYC8UXOR
ziicGOzb{Y80U(~p0utDQ%7@WrZA&K7mPA6N?g@S8g|Dxj^-qQS0j1{PQ>6pla*g~e
zl}dKmu?&%}_zq#mYD!^_Be^W4!Tn4Eavr%KcgkXO9O@2pCQu$aE_z0aAWbw5AS{*{
zSdTU~jddT$t`&6{UTBa8#Ht^;I49!UfX|bv<^oSpO~!95v5OIE^b22;^Uh~rx2Fn!
z&t`f9M~o>flXxb#xv?NCLy{IPC0Q&X;q8GET`OHRXeVwGX)0|5ScR_&7L6U|1pdLB
zYSh3$pCI!{`><Tcn{%=<^sHFG`bc3c@oP4E`$6_867Wi|wYDTRG20Y6Rhf)oR}FGL
zgQ;6@IY{d)ddC}3z)_Wz!Lx{2Gq%S!#Y-_N4D@>eqSjl#r?Cw+veqEfp5P`0jEvvG
zZA4M3dYlk@!bsxRJ0g(H_<ZaR4++epJ=+yVmy}jIQfk#%Otue%{z&}&3k4Fx$am9w
zI6ZPc)pNG-0aeY-vNAbR9Os0XNdN=J%3U-<e$auB?hE&kP-y-1est96k5;T8Ipb%L
zvC)E&`)Q3g%W~a}KB3~I-qwA#jLbhS@<cYvn+;v%<RCG_d}2V-9j_7A-X69ia&DRR
zpGBd~kM<+Xa;A2<4!NRF%hx#r;^H8JS4OrT6_+I8+Z4P#$kRppN#N5uF1Rg~O}ksA
z(uHt{!pP*xIV79~jrmr;K8=$3w$|BMJ+v@@fXIp*B?mjX!OnD98PcxO^*2b66TcLw
zoiCU5^){tq0zO@X%Wd2T$y)V7U#;I$hNu>Coop+7?2lZV)~&02kz+MkB`f2p$+`@u
z+z=HcXMJ06bG-YHL?CsqO9;zP%1B~(3XZK(s^*4<Y<O=H$nP2=K{$<VVhRB0P~|?n
zw>#C=50C|XCm~bk604?))M;|YQ2bYO1kqGrze-2=B{fCTkf6Cmt@Os9UPi#nZ+0`x
zM>-O}@1ZqT=$rOmkrQrV-YqVsIgQf;L+{Gg;YSiPp=;=*M50SiHZaa`=lPsJ0U$>r
zVvvd-3M~EIBpj$=K$S2a&t?aNlxGU;Gt*_q0#S5$acy%nS5H3=Ib%-LyCVt?#;FLo
z8(Qn%yiqctO(LQ-f1*E`^jUGo^BYoEZ&LD+i25J%g|lA5ovv(cA<}T4m+2jetG_{n
z1+oiI?DQA%fj*#OgKBR_+rcSY)$Fk7rP}xUyXusDoLw}>e2|AbJF`I<75;Wof!!Yt
z<1m8ZV=8)bDI?DLJ|*9^^||gpsLW?)?2GDj+HB+yo(v}as59#xCuw+Ee&l4`d%QCs
zO$c*mPz|^+IH)FR{)SEoqjxHD55%y-U{`MZ5f(ZaY7WkHB)PR2Skz})Hb=2&se#&{
z0=G;J`L)L_3?!wVIW6~X@Cxxm;fA@se;czdBbUIL#FfeDv8;C&4aeCD@5RR>obm7K
zALs5L)=1Q<?6mAR-Q`vyBeR};*V671sKV<Mh<L1Ac%;8vc95X{sU3}%GH`xJ3%HFd
zc1o{>&{5sJWZ<ZSpHab%5T!>wX%bhm3F>?+D_R_Ie)hWuioZ~ac1}6ZK;o|>h9jRJ
zmJ!6lEOEMgD;Z8}Z6N+4FeZUTQ%HwT_S<cIHSY>RY)aQojka`|B4=82(?!B?$z=(F
z{RzEnm#sNAnxoFic}D2lKMp9G|FX-QUGA2&5<ScqP-+%=mLB$5nVfX}0%b3+%-t4;
zL=~K2iR_G5v?W78>8w#p00>@yVG4+fj|WEIoWE*^T~~#P1wcFoTT{}!C(0W0*?dwy
zX#<C(g&0)N9u^gm1CX3L^g)%>Ub?u$H?J{#RD=GupY^!r9)1qB|FUEDnHc{N>#(JA
ziN?mppgHq1SvWoMmHvzN_t`AWL3jaRul;duUs{v|#>Xpjt6m{!$NXi$38ti_oh--k
zuFvjel(2ujw!~^`+GXjS1`-3&Ul>Gc<!N&P>DA*T4FWI{hsh}xM?JOz)FQCI5AyDQ
zW!AI39e(KeSyb7T-<=&cj>A&Gg2*6lO`h1G{>#CXp${H&y{s!d;x_GtbFToMqs7XD
z-rU*vuYyd}z)m@GHl7ThlGNnqWcWDx{9vMMeMlJo6s#o0l^c>ooqcx(?^9bJtwC}B
zOm|#yuVli=;Tj?g+B2(Y^!=~f+aoenjLPCtNPO5Y0^USq!c-rK)OT+mPPKA!x`pqM
zW(qGg!)#Zm!br@wqtH}iJjf25En?G648Jz#aHG7(i(iBMboOkKEmw2{D4xL4l+=NT
zg;*bz+Q`w^D3iY($M(XK@HTBN!*-##7w1wyhsbPH@#akt=?e-z<gCt9Cv6t1eNz{`
zx>Hqd5%6MOr?dMfnn0Wak&tnHPNzj+hG*DTB|IV`wtY#<X6(?n*O=yyeQjaNz!CvP
zstot-oAeBpyN6N<4fuMSF@teT`B}lT+4OYZGNe=owaJf@8QH<WTWLZcOu6k0AX;kL
z%-S7|B<B%|q&ol;g9OJST*IVy4yG=+V05st72{p!E$$}=v(Y2Q@V?O~HxxDoask#0
z;)10c{T&;72jgv(1GWj9UMZM=M0H>k)LjI9;*~3yY<g7X8NzO>Ay8uKy74XiTB<is
z_N+Gz!k%iH*_&)&&^&IVM^pEVb++CgLHGImGU&)GJJRYG^x`05(W)lS?K5eyqBniW
z=RlK7cygslWv7*&{i=Aa^j5+Mu*8Qi5KE+PM&d|{ybpP_-LP9*0hV}iC6{ODS@g)b
z=K42(#1i>L;P?p?lzQv3p|tt;iAV)vlOR*9-bws+Ytq+rB}!P^-ieuIk|zKlMpeEX
za#Dzquo*qR<K(up8LYH9ByiQK3$C%@lq1{r53>lvZG7bu5Rgccw%tAMT0_zh@n>rR
z7RV?G9sp}@oti^pG0X8zL&-|QTlvBMD%nA2-39Jv0PF))VBO6gQ;;XO8l&K?_*rcj
zZ$!%~i4P$D{37LMup+rB4vlLf9SHEkmVCVZoSb4|Lp*U;Yp2h6EaD)y%DQ1NIzLqb
zVZm6VYqixs<N?6Hb%o|xm(8WI)x9}3Ef`|`^90PyrvZcEmRQ6I#I-?J2|XZyV?b5b
zN^U)%Wx2BUap+~EkZa|0j_m%&O>)TD@;g82os<2hIb>6(g*!BsRnqdDg9x2Be`e?K
z4CFb09Bws%J^^AOe=4dKzW{f9b$(YJJW1yqVQS_FiheKTbtwzOWfJ=q!ZYY%wYD&f
zJ8#*f>u{N4Tyu3Y8c~*bhuN^ZwwG75b<?>6w%WCN_L^|%@<KNIL~5%KXrSy%EoCja
zL+v7Hw=q1K=Cuk|3*%w>zQE5e!dEN(+k@=-Qu~a_&qB3>uwsoH<17XeQ(+s)ES-u2
z`VvSR5LwP2U}IUivDX-(0LP&iVNri(5Us|n3g3@dcD%hQ6u6R^WoJFzMTnQAU)b41
z9B;&K&de$pA1}oXA|Jk6%&>QRig`#WTOap!Ep|y<=6^z@@($TjAS+k9DLCNDloaN3
zfyJ(Z^ehyLfmH-&-VwW-d$XGK3?HA=kFYo_d_CZ@BY!)J@w&8A2^l)OUvFEJEh8JW
zcg{l<GwtPA>^v59V;G+NBs)^=@%}o^#zsU$1bU*Ud{QP9GdSC|FFf7Zo-8KVyH>&u
zU|9vIf0I%3Uj<0$cpuz?0m4X~AlbBS^$mHjCsZUZxK%bRur+Ym_4`}#%{Ujf^UhsG
zPc`%IXo5@z4tPi69)|f9^I1kzCC{LPK2Vo5eZkk2)p*;A`pjoF)Bw`}!L1zZ2Tc(m
zxzt-q-z`o$4B8)Naq9a1?&!NkOC-d{oB>VBjHwnTR3*jm#<F<!mkYuL4nKbX65ePf
zet({X87y%>>EbX?hwz%-UTTi9%hKhQ^VD5i&sNaV(n_>kO_o@)8>!DUno-{;dgg0W
zB%-ZSVVeS{c})y@ILGkhRcB2xd$Z)=Q=oqa#MUqinwwFtjHyB&B$Y3(vpgeg`<4vu
z9XuScJWPxuQ_Oz)$)YU}2BpBcl<$Hf9Bz1m=p{|ut{&R(Ef|`GUSrl-tpI!i;&{|`
z_CB}lYfx7enrGjhZ<Z#u-!!cF+9MvcX4cwi+Sb;8h8&I$N4uQ1tVM3c^2m8=?rz7|
zfGX^@3u=Bq><n(t;^6C2P)LA&8aN-7biz=fFe>&KknfO<!st@fR<z|)js^iy;^Tcb
z(=sr6^qiIW+gSlQ7@g3q9h(*}D&hH#_@^>6UC)i<eDlj(_Whx>KRP;T!na74yEl2s
zO$h%cl9%8P@&|eXgPZkujj1ZO-?tDwd-EQkt)nTo_@j2zmqUZa6F{V#&kb#w*mu&8
zV8osrht&gl%5|V_thBK)u}Hc~J~#*jrxdcA+5P%huEX8k)Fg(FRBa$=e-{9j&%Kiw
znf_HY#{dWkBW?vJeN?fDmFEGS(!*z+x<1`MjRa3a%@WX0r4l35vidJd={hcarAPmM
zM-ii!&Ku|Rga<TXfCOE?yt|cr3ajHoF0na>Wvi+S;4j`0weJ1QvI&C91Lv-<?$`HQ
zF7VA!4hw!+fze)ypFv=BZ5t}^1<eVvTYB~acM-*L#KZAS@yp5z>}F_}&00OD$7`R`
ztYc<0o97i0d1FDx6sY4M+zSV=9OTO}cMuZUq)JVe^l>C)2BVv}DVdI)qK_#&8>Ks-
zjRNdNN)fgf(58c(!^ya9xQ?pe=cr5=rditxplBeE7k6;WFDa?It)4#C`R#(ktZmw^
z)iBpp1nVq;5!p-Aj>Nfodc;F^^Wny@4W1VG_o&+@8plw0OD`UVjM~FbD`qqo6%|A*
zhd>h%ushuS*~ZZ8Nb`*iNL5xSkR97``>?nZj7$;v4!?2UeoW8sr2bPuwNn^x<o7*E
z<J~Qmjf1$QijGWB-z$LH3rPW64zGa8JYEcw<-Rx3gFE%u?Z#Z5O&c(miZIMx@j7BI
zTg_zSqULDDLO)ikvt>K3Wk*Q4aY(rVIOIT~BAd`%xvN0*w&l+p0t!bwUzZGDmk;!7
z+jOrJg37L}`RmJPHbs*HJm@2SPn&fiyJT1Y^=-m8<{KO37(#g~2?wsYD-#W;2UWNQ
zt#nuK6jP5b=8FRn9_xMKe6e@xM<(c~{b`@!Sx<P5rq{7EqZ(8^*j+g&4zufh*~C`-
zcn>4SJ=BlPpwl;#J`{s)CIHzpW<y^EiZ59rTC!1S5PR#mv*1o&pSc+8fTXzaEW|iI
zyMyUpZ)Vn+?ZeDEHt4lzof&3NJxytXBWPnFei0rAHzD7FCM4CRUoOM`?h_NIhu`Z1
z)VQ_i=FT~-={%R;TVM+cIu8<$_6~R?pmRc?jc3T&pOQE<`i37B5{Z!{0fM-p-pnev
z7y0N#$}QivFkYHvtCo`KM3$|#Xs?7#k_X-M@XQXjNYyJ>2Kp11_1(|NdEO?}_9T4_
z?x?m>e(Q#>9=CGWp#1-mYk1JhL##ki%VI-(->k%neo+7};kG&~+VG%^$SD8}rhe{q
zu?Ro=NQZm;2#pTdYG?LNzyx*}!!sPjDEx+hx$TTrXs7@u2*XV)EgsC@UWr5}IDl5-
zleIH^uuQ4o&Z?IeD~R+clPV>}vK2oVi+PN`X_`oc8xsuk-*8)2!X{hRoKh7bwylAy
zxXo1AADM4>C*^ktd;5fX;QleT>fnRZeIU3qat1fHy2_KUWPqXw)QFJGa)x%1x)=Ez
zn2Z``m#X_*72N&tD)EUIM(IaMCuo(x)}A2#7;eAg(|}H92<&peSH0?!Tz`+GIgXG3
zl>mI>cYS?*pI~cwtOQq?eKf4UH`;RI@?lcTR6s^>iv><(HL1@)c42t(qnX`*Rj^pm
z$4~^o&LrY#W}0i+8F8)`z>pJB?kJch90&6oL_~zZ>5e+nU-#BQa^x9uh^GUne<H&q
zJp)WOfCjHd<y!{c(g*`Y2`Q{-apj|y<ywGC-5l9{F4N#<HN$*NHbE_*@V6{yP=`}Q
zgs@2?BRGC@%w;f-M}kv`E9g%p&ZHgzxhxE~cA8#UMk`)Qc$-xpn5q2|-hO^C2Q=V;
z+*U+C>I=z!3*7nr3N3zZ%xbNhY9&+aiyT63<-;WItgL6?-m0|!H7<Ed8&COwldN30
zmB)Y_XjX(SP9s@3M8^VzNswRwmggC?kEG-^U5PvdtqH<ieeHat>`}~u``?P6%bA#L
zeraN;Y+jdodm5^({!wkd<_EC>v4$rgd@}D*(9(@^ACj7iDI9se1FR0T&3uBcze0SA
zyY-J@f)Do*s9@;KH~tGV8u1LzOHW+dPn988?UzcqWIYd+F259C8uj-UN7w4P*&{ve
zwKJmFa>M{1HT*GVQ2gvq7$0a$4eqE&SC=wT4Iow?@k+peCO#|R3jwZ*L1hvS^3HRY
z;Chm$CtJD;E*dDuC#p0^fHC;0m)NCKQe9dR&<_e_*5j+@zl0bA6Nd6ywtB1N{ty9(
z``6s!d_ccxhnM2{o=?)ZdAr>A5?4w#sjp@C4?A82b0mZspX+VV9m}8a0Cup5pF@k^
zuEow9qCzlx8Jb9(rPiMX^H9alIoORVma7I{bg2z#N?``|3-NTGL#;`mr;UsqV1ifr
z`%k!}IB#QL-!7gLq*qS*^5x50*H%g3U?2-7I`s%5ImJ5@o|`g!T<Xmc-pI)G5^p|Z
zS$GYYo)glHB7?j$XFo&&{ZVZaIq*l=_^M4W!8mZr+yU6TnQ?PaT-G0NN(HMD;^IqM
zaCZ7s;Aj2v7Kq<+37B_yeDCUF3F2PVDtrB3QQW;104=pK>z}PYeqphS{n+zTvtvSF
zRt;R?9>5iM;3*Q-rETqDKPk5zYMYm|CxlV8guWxdAP#{k62_$jaj|c0>bfTtj^W@2
z18#<gzU8x$!w^4dS>wqWAJ9TWAP-|uvBMAmNAm6yO~OxqigUJn&cW!PbZe2;2a)kU
zybS=v^$;FCnYARrNiMRS`<vDe>`291M<Q$w&B5P&xegvitXX_#WAW$lK~Ot~J^=ZL
z_nX#*Ut{ddzy!Oqnc?$WZy>!+s%Mo)*aIr3Vz{cco)SJp%5Q68fU?zv%8~p#GJgXs
zpV(hCf_nxIgQvgsU2WS~V2uD3B>8?eG&f8_Sj<f|ZF*Cm?`UPFzJ5~T5-{hlbjE#K
z!EU#Jj<j>-;nP?2Y3$Xq0;yKByGkQE(t5TC0N|QnBsq8M_Qp&qS7b9{VB)J+4xjXs
z)JO&K;izSqrWdK|-Mhy?qeq+4+5S=A0FWo>=so~_X>%}D^CD+;96Kb8e|^)7kB&*~
zCkLrhS2;X-1yTHBYpOc0_JkPjxEp?hDNzQLqgUkJR#}00&4Rw+6O~}(_!m>Zrt=?`
z+AM{`X-c#l-}#96y^oY@87?~;U_iB>1}~-#rK<7v`v|!S%iq02srH~&*Tq84sR#r~
zIM%{Z*H|7IzaoJKJ0XB#On6@Ps?Ph!Pa*QMBhW?mpv4wt#GX_2Z=PW~d2^TM&TCB_
zhgix3X6><p2NjpT>};UHz!Wh;WgI-FQ2b1Ds!*CD-ZqHtfZ2QmMjn&~z`jJS%0V9&
zh+wS|n8bR_Wf&@}VDEd8c3V|=ytPJ5BJiS-yfHlO1(N76ZVfuwwil<8pghk$yV@E|
zlU;t_hg57CWRLxX*q;n{Mn~4tb-&1Ykw^co*lWX%$Z%5soW3dOOVZ<Z4;Z5J1QWt&
zszPxRmszSZsDgOhcE?cMzs3g&tnLsR;z2|KBYoBdFeQNdX3AxtugBFhE19Y!I#PV3
z4!nyV#mV#2E{t+q6K5HVXh{QUs{>CO7!HCxDU^<@E;#sM{POd_wXE4G>3x$mvuC@?
z;$r+AF5q0(l2F`=pqjcxm<5|9m{-_!Gq#WLOaa*TtjLpI4iH|6^X%1Nafy>*^4pOe
z4w;oq?XvrbA*O4<%@p86m~xaX=^+WCD~60CyAvKY7$M#mQ`()9B0lbx;`^+!3p5#J
zz_iSU5bFSZ0~GwednIrWl?4)a($kB2LYB2-jbu9pv+){ce;GZvnu9U3_+_{o9q)c0
zAb(<3N#e(kw|u-#Trmm&tgqH{{h1A|M>kT{ZGc$=75X&Z07)CbKM+k-G|zx8p&(-D
z)m@+Nams!>B(<qS|JoI`*rP%oq_hAA%ZQ9`rIbiyu)E#y@e)`iztD$0++j*D&ST$^
zf<^|}!1a~~N(>e3a0MDZUN_mLK+?3&%k!xaZupvy1_Mz<Q$hO8U^v3~d~c~-K-P0%
z)hlT1vK5X{jA&>qY;oELEW~*6k%IYnbzApcPKId{bMsCq(2!=!l?0%x?)~-s_vns+
z2DG`w(L~De`vV3G0ms1rr&=-O$tBh~qt=b7kg@JR`duD|k?{Q7PjL*lEAnPHo_N&4
zWy2>FI{E2S&M2?6@5}hzBo;Q}whO_P9`YEQOscxM-tgzJh4GzRF1s(rSehYeX-_$z
zY<rT$x$=OTl;h`2az;-b!3#5XcJo%gZrTO#aECAvfApF4P;T2sB=$I{!05?<q5LQT
z9Vj%PL36OwG4LDAF;<;io1?bMTHU}*edMhZjg0S&vMo<aNJ%QV^^Z|I5avO1izfls
zaa$kgAgce_vN;d^uAIFKR+$o5TBhK|3Sa?_*gxkH9w^nl-1wqhUf9Ku(Ir?Jk%bta
z|8thZWp;;QJrdPdHwF;J5;DQkSLgS4T;wwJ>9L{``?GdhX!jK|V$9N~AyJjPu)dx%
zHRyoY?e44Df*}SHFy=X{cNPf``X3~&B)a46I3YjPs(|BdT|<aLaU|NTPJ$&rDiT$%
zrwUiV{}~~1i9Y=RjU2=`xw@N~jc{;df4bHE1iauLXzPtB-b6YK3E^ON!%Hf|AG6f6
zpHjlVWWcL63FOH!O8|7p%v|aGLH7x_=0TUhm{<PWfX&PVL1W>GNQuP9xo+N#RJ1p4
zUy2Uw)KCFukp;7xD^K^4X+k(?-PE)(Em4B&`;!oU_>40A>AGMH=)rJjGiaF^s4+a?
z)|Hc8xyC>ko*7f$eg6pR35@f7Ib6;erR0nWjP|&KiyP&ead0S1VC;mYBg0RW{0v|b
ze5Ln8Fq<zJ^m#*k5A8cr_eWXa`diT_Lu{ZeEDMEye$w>Zq#xe<s(@6#XE2|oBk@Rc
zU%d^7Lz$c_Pe)|tqxZm+P_9FT-4Cp2z`o#Na0dx-yYl-hHt>aYe|;aQ!YbK)9jP<G
zfaQ<AHc5pQSn;`VSWFCwEq+Q!8|=3P+yjGCHlsiAAWe8X4#IJ*@2<iY;$e`3-CUg3
zDFeGQ?*Fr218NDD&eAd+axi5aJY#i~490*xVaf^%F$!ML2-$}}_iN5WA&*?ZzG7TP
zI347g(9&hTKUf9%f;&?W-qTvi&?*Pu9^7~btY);Gw}_$xJzR;Y(0Z^82j>-Tv!A7x
zfeCp*9NBRhcYw?RatF7|rDOD&NIVShu6Apq;2V=Kx3@EZoeL&Xa8cS&K3SslDJ`hx
zxaY3@gxfjRI&cH4&<QL?JOERO4EJRkdPv+dy+`jTyu-&`^B#{ki6(xbgV+k(Kq}qu
zu9HDZswJS(hGIU0iV+mS01665H^`YS>Tp8h5BE3gz%@%SFh*7)!Hq9krI<ma0Z54g
zqSjhinE=Gw_r**LF=oWsT`@Ci274o6|5&X90;OAU+8mrtPp1dh5vTv{08euGZXwgm
z3VscwuMKYeVfVE_0l1nhWZjs2im3JI;&DzGyK$QK=J6wf8VOgj8e-eutOF-dT8DkD
zf**sd*nl^v<}D4gBLN9Y)oK3zDk(MdCM;7`N(8=nbbzHZ#@hqHd0_@B!N%ndc42Tk
zvdbZMYI*ZR8mZr>-uG#V86l@>-a?#Lw7wf8@d$saG!YSwG7)(ey?D_%sKa>j`&z@=
zZo6&J#g0J=6y1U5IF>MzQ7R)&mP)#OuagF8OnxZFn<Qv8bXTnY{LHD_v`qzXTyVj4
z*oswKp-p#vd)%fUBvX)%6n`L?4jk_4scX|OBC>ld=1!F#uvzI9Mi{rs(1!tFF~-GZ
z-fiyONmv+GGqdvnvj^E3Nj)qvdtiYEwveHf#U(7e#auVox!uG~?mC*XSy_UDkrrBe
zi3hu)P(q!^R@ZSLi65)Vu~&}+$%8wC)7>YJ)59-S87Q#Ow!0)k2`*k<`JQXz*m?>%
zfl7uGj9aE{4uNhVoH3nm474TXfJ4ecKgOO(ub4b4fw!2*AjyYI+E(bi0{FcWIcAz{
zX<7RR@EUBD<Ryj5Qjh{05Oa`tHX<V;y%j<Stwr^JxS2H93BnWn7iRb1qTgAwu0^*k
z&+rv&&Iu)ta{GGs#=`);IWv8i+ptId&^_D(B*y#(5X;WQ5eXon0sun`*}W<TwJ4OJ
zGHoWsvcGml0Wn~cy84cHN$;ftg2zRLa3H?3K#Kh(R=AVAV3~u|Ln>+c;AV~Qn`6i^
zUYlWev;ohy8<t>U1op^q4PF)b!6VF6Br@?Dd%L##UMXTZcp^415FBhuM0!_|&23W`
zd7i;c-w90);Xl3vQyN$_QyB}>ZN0e<-UIqtU4J&=0o)SYDBU)agKM2NErm$p6~GmU
zU=&abdL14P$iyQ{4RGFja?)*c(8T>WCnq$$YIe$*ulR}t$Xft6S4Ey72@&Y;{uE3G
zN@H>uJZbd7;K@~;5_&2>2p5*XLN3~;l}iN)62V@>ctHQ@Bh~!+Iy5k;TYGcafRyrO
zO>NfO$jA^tPYlM`_zrQLR~8DfHPd&~gr#6zJmj{sAih1R4PQNR?5xkmSRHbP)TG6)
zJ#r8S@8jTt+99MYBZJtJlRlj@V?GC>L5yauYY`>P#*2T*EF?GTn2>KbQuvcWSmlK#
zA#jS8fn1v;<j%dkuX)u&J6Jw)=(5%3#a6`lhFasqh67B%va3go!&Z9gsE>9(Fq{gP
zOm~74Jyg$n2-#eqfC#;94#R<yuTBB#rD}UyWBc%w3?k}Pf$|gz!31SHibk26A*M?_
z6Wv_9$QwroZtnOE_bq_Hu=by`1cS=9UIT%}&OUBR%*@q*LkS(d+EO+bG@ib3PTP=}
zr7H{HoCR8fdK*VMp?d9g+}<acg9qU6+R9DCz~i6#(f&zEV3Qm?p1gaz%{<!|lF^%c
z@+81*KNNYa&6=3|<7;k$RIt=l4)@W1yjqV;a1piaV}MO8S+(tzG@GV=kz{SlTl(v@
zL4k?aUL@*Ydwzb+FDol+dVbm`tS+dg&27hk2)uA1v4(&}skt0G8<1bJ6!iT1D?eaX
z9&71tpeL-(bFom|h|nQj(;1At3KldtDBT)ILb(jbla<tLW<D(c5_01oa^CutMtDW!
zq-`*<3NEuMV+zYIl%;{DU;HHf5vZI8bc5Y~PRFmVdiNMcn&=vX-CGwV%&bz-9%rz{
zZ8yJN(<kJzaHmXqGs7+*gP-p!RPzcinpZed-3!nHhw-Be@7~%@#R^Y<A#zaoIy%gJ
z5g&s0V_Bf~5BQ=fImOTh;_u-kyINY#`pf8=8k>e;Vi_HG%ELWpIAn#KI(PfF&F@e!
zEp2AHqoyN{Ek8W|vHjh}q%|v|JS9WU&P*yArtB>8QJYuRFC4omp$0cp#`F9a3%L^0
z6e(M@nuOeszhXTB8-Wa=$tYKCuh&pExt@F2@%AZ}OO`sfo(Vuy>ByGud1xH>;_FwN
z`3NT2WVuREd@t^<dUFWfDxWl?SCm^%0@K(1Tr*yPAKp{;Vtlt2SdwTB%D{RWcwOUn
zgjCzNqJNHz+nIBn>1lfTw|qnnK^Q%LQYWsk2DuvMat?CeG^F4HM6>rwo}qW%d;&z<
z0%#29!6H!zhDYzIFC};4vzd0Fc>oP*q3v|o1r<XxBo=+#_jYKm=^a<oJ9Rw^z?&8=
zB%H#f_yefEO6-b-h1yOPS~gj+PeJ+&sS__uv{{Vi8fx}#79$K8wo?Jbo$kl!`-HPR
zT@V${_@Yj^qTUyC85QD#NBbx4Ra3!%E=1o<&soWfF}--=P5q+_vLTT-8XFC!d8IkY
zr#@zGKM=8mSF2f|l{()yZ%j(9U~`%DZ?CtF0K2;~C^J1*H8`$}2TQVE@(Dq4S#HbH
zvP$bwuH2uQ?*pXVXpYtX5tBpMpAkoyQOSy3fnt6#LjwHg0w0R$2$B1q4=3{=;SkCL
z3sdjw;^|Omo|dT7r0J^LebI6p^j*j<H4F4qANKm>`a&EblTVPJ-t*2|@qu3Sg~L)S
zCT#0BFT;X)3<phiFl%B=j}lWMS2yh4S{B~Tji>jN0~RC%r;Mi<+uOI<TpoMVnL2$7
zIC1=_Q46Ezo%G!%9OHAjJH+{hdZS!89B_zr!POtXy8Gs!nutjVU9#U&DF^>QMR<>&
z9rm+#I?rnJ$obtWo;^da82jF^uGXh@_$;h@IOzky#HHw#B)T=-<y23!#^<q!xfRnT
zt52j#pCk26bDDlXJqwQqXrZDH&n9lrx7(4}O~tCI-s2-rzvH}I0|c0FKQ~q(0jdDt
z`#;;-x{s}I4hzZoh3h|iN15Cm(w1a6{z;#~Q?3&k$^riBK=4k=+)kk57oJ{eGPKi-
zpi90#Vc+8mv=w=kF13FEj`uQ_X->;%di6&u76tMt@u@U3lb4{^Pc!l_ZCJoXHw%O>
z@8(i4820oAMz;O42o>V|LLn#sARJvv2DK6cZ#X_q?`*)m2EXv{IR2NBZ>UM=)s`Dn
z{A4a<f1qKO-&r1mC7EEANth5q1G{c@y-U7DRzMOGKEK@ETe6RJr%Uc{Ecjm!mgWRp
zHNQJYx_iw=Nhx3(-{ZwWFN*XMC_KtD;r&YWNAqHfexvkUULM#~gQ2UyXFEnuw>eJ(
z6ao(8@}=*|9ce-#FwymN6<-LOyasnItKqN(>tao^Sya@<wI&nzp^>#scuNdF`EKYn
z(4s1|8azkt+q?HY7X=@9DIIvO7bAZOSTHzo^&X|;5vCqJ0a9P_-A)ag<Qz3P2dtgc
zO;tuWw?CFmo*|u@%|v@_3RhY{+-a4YbMQNaO#5@VuH;)WqfX;hviz2(VtL6+gFzIp
z^>Qgki1ix&k<es@RpB`*=#!i42YV)>I7eC~RkDiY$r;*;SH#+M;B9sm$XS2K_oy1q
zBowe`Q!|08IQaIwp}g1o0IyD@O#uYp2GEiMX7w7Uy1~c?Tf?<iQrzUO9$=eXE?u9D
zgHyEW4Z0^?1JOz3aQH612X@9t9NQk=$*f`q?0zem4u28dK=$7OL6x~*RXIxpcIwa+
zny6q`IdbvaM~%Mwd>=93RFoTp6Ckk3p<H9onpS_*d#Fc2N$VY*b(Ei<f6|&I(DD!H
z^Z4^WQC*oK3;;q<VOC&fB7QwAtM~@sudkOSP`dzhJt;im9FlW{4@<9y1O6@<2T@wT
ztkrjX_~_-4qrkY!cfTO^<^)675R~C!DHlcXiPPjU@8KN!9mxIB(w=lcev$%W+^r4I
z>}wY5P8~&|&t#V<lZ)S+VBdL5$(>Xtxlz8Iau~Lj%LmQO6746fycGQt6W=<vp|4bE
zoxl>d+pIbj0e|b+?qJ9bq@WD9^^@zXUCK|Ay`-flZBhSK@!XP(L-?RO{sEhWwG3<x
zcDR<Hpfs)GJ0S9uZrrCIVT;hW@uuXiZT(FOj6p$U;pg#_5)M?M3<n-R7AAPoczM{0
z5K31QAABR{RIFZ%-@64{s2#39LI8M*(r}>woYcu<k_coJa@)FKG9;IGm6$31^9KiP
z48<xgp!+0rk3-Jy&Q|XQ?v&k?CNziex>YGBeCXm<5CphflF=aepLe+%@a~ExrDA;{
z*x$sWz3I3OHmi;(VBjw-0XdxNg10YFngzqB_Nb}7JiHiP)9F1S=m;hJ?*cF~)qsf}
z9iU!T&J*RZgp>mf=8|@N8$$Qb0*}RlR;0|gM!}L><O~`G&fwcD4<N;%xIi$z41FKJ
zD;K~g#7xR?=~;gsU(6LW2pv0P><Y#TNL`@Vy_gz*j1!$<NpO91;W#J9!vo&l!ZVrr
zOrCOfrF%Oj{rlB4_f-8*na$P|g@*`#w2Lq058YOwf}W6s{^4CD$a1IdM~BWxEC2U~
zwUi`-kLEkm)x_PR=(tx;ls&kXSCEg`m~G_3tl!`fX%rBfF7^fGk60nWy&VPb0Z4Jy
z9<O-w&urH+_<VL&JjX18j{ky9cMVEL%oaFDhSSVx7`9k1?pCW7hZ7cttHC;mmxtvg
zqsDN)D4X{{vLIfzIm7GH4<K=u*pnyK!01Uq*6)rh=n~7QlvXe@%GE3s&|EXvz!&KO
zjmP+>fIVcxDZyZ`aK5+aIeEUn<s@ID1KyK7t1ksgE*7XoZ=o^b)BzA4SRK&7_GD#_
z9M{!kA~R|QVV}))KF0+9ei6ta##v=wMQ51>*Z34WAnS<;K(M?X5S*|mpaKNJC=q$x
z&!OAVD3|1#B#zU5Mmj8psoT0wr%jIvmE9p{$ldYfMMcA72nvsj8UXPt$oSnEv{6`_
z8`h_sewZX6U<e|MHwS&4o-6<1F8I5Q;48vC&eN(Q=k!MDLr~=bw9X1C`na^x^}C#k
zxAvk$;fOl2Ci-!BWKH8y{nwuAw8k5p36bH=>r~KdjlGc<ZC&v9xmY0O)#j?)R`I=m
zU=bOi<63I;F9dNqlngdct7;uL7Ybnat~e-B>R`o2*zQo4MmGu;$&pW^-+`^9az}rF
zE#2V}a0Tc_o)~hhYDlg3(JrT}stsl)b?%e9&PJ8tHlkpYQKk!fZ7J>v1~czIuEraW
z(gdS+(lrvU#wNqxq8I?Al)JiX%aLU_vWgvv&n^xz_r5lQ_f>1<%6Uj}0Khc?11^I<
zORG}cl}*}|#y{Z+DV}n;?%L~(vpOui!R*Yiey|z2U~2H@tj#RHx~Nqg<&Rgi@#4ZS
zzwgk1c(dVXK0lZTwinMsyXn9tMmrbHQsdqn+)N7<emHrHGvP?XqYG-=Mc^xd24-)-
zmk+=TmzH@R)==}tp(Y%LPoiH?P?5NOufA+6$057}GX1AlhY|H)JKT32MSeQOA5{re
z!swnRUAuPr!w2Ct{G1nu@S!;|(1oP%z~&lvq|~3XvLEFKesez{T1uC4Iw`}lSP8iG
z-uy*Gi^GKq=XK94m0qN#rt$WW%COsbLa+G!SG@E|g%hku;H_SManO+X`e4kneT4Gk
z)gg9ish8M|i?Sha@nS<@SBe&*ce!L~*Uo?8Pk8d9PIJgHiIO`7zg)+K7@sLSG^^*@
zrj%MgJ^)7UICohYcCj`%yMll{ihPMKWRhe=4qn3D3JFsVT`96fd$66io9|^=-j4PL
z0=Q%WzD?176%xT<BqkX7-(fXqh0ZaNK9vItoIWxJ8*uv;N_K{Ni#qsI6}yb31W3n2
zd~=O_Wu9hl3!UARgdmv2NWO*gWpv|YVJgeh1_W&}<M_yZr=OU>#Tt;W=}G7?anV8f
z^66Ulu`Iq*!m^b0!Vv)1lKPrjS%B7MyEtT*U!VZsKe#7DYMq~+<6wlIYYrthzW)f6
zYz<9|JGE1#{sWPWCscAN)TRyKKph1<XWri4{_?MIzCW=@y;_7+<#kzVKR-DS5uIvA
zMjxO(Y3HLO(l0yH3h`$29IuKFc_h=Gr<h6(`1SH)nGgTG5cui~0qb2;L$9a0qDO4d
z6b7ls%Y*H%jyi*3`Lk5Im@rSOqpl~;Vuo`si?yh>fdLF49Zay<!`J+t%eHNFvTW}u
zU*w7pIe11IELw>3o@U2gy6`T5?y|{`G&Pj9QSiIh4D`V3Qfqab(=}RbnJ{{sq~p)q
z{e^<Q|9&WI-7T+c7fN~AOwlx*GN#Ya=sU~)-K|j*;j6trK>I=%Y|oH5JsA1%UTwXM
z$W3l64c&?tlnpw=FU0)3<1VOCuh#`0B?WF|_S0z!{i~B-`HD*O)}$C$M|M122yY8<
z?NI1(owMY|kH0f!Zx)$VCo4&jRGSKvE!@R{oh6UWZd@8)irbWg@|7cjgvJFmfHLSp
z6kY}#KRQJmlcuhGr@uSwq(FN@O2>yyQ{4K&E&N7-_edUs?E!0q6!3jR@2U8uyj4Y_
zpWjx!1CDiXcb$Eu<$%}_%js1s2G5HZ?7^_+=^m{Wn9fW62yw#Fe*oiS5<nbtM~5wP
zR|Tuq$o%eC)u<mku|5(f6L*I1Y=FRGnHYuM=uxSdxYyfaHFEmU+f{kZyYds*oow0P
z#?6GGP1jv^T8RBgd(36wJ*?ZX?-btqnwFO9ys@;u4M3I@<2jW{@-<-VwJyXwoBo9~
zQQoMteye_XFP6shs_<N<J}9-^?^6zSY!i1|g@1hm?rU2VSG+movUIyi`q@u!W_e>L
zC$@X#KO3eJ;6rF`4l*aX%}FPJ^WeO0&|d0f<2q7dqO~V+&9T*=C~(TDI+8fi!P@cd
z8{bZE-DpK<m5o7%(X}nC;8rEB`up}OD1&`SrZ~cyjdD$Q6vRLegteTwC%!Ry^At&u
z^)F&kYt5QAjxlVqWu5tyVtPufgyBF^a4q5V5g+hX`+(h1X2V4Xf?;@ggm37pV&z!B
z0?bDr3*rt@ZYSloXL7HPkgJp+zPrF6CVrcotm1OnXS-+e9WCG+ZF_hVJ)Bff*|rhD
z5H7(!L(UwB1%n76<RyH$;0H2T?<*-ru2itErIAvtx``*lTF+NJ@5LD^h*%AudX;Y#
zJT~AUr(kjWQE;A5*c5fDivN4t$?EC8T*J}Rk=1YcHFi&*KX7GWAjx#91<XWFAGRD~
zsLQwV-*6c6&6<2MI{x1C%NG`L`x~@nBc3dhwnhQ*moI{uxntG~5(xYfKk9z{5cu=|
z#=kLg9#Vu4MFD?Qz#kwL!@tPjj|cF_Uk>VluyG#wyMO!K1LU^<kk@}p`Y-3KKwkeJ
zKKCCUd7r=k@W}tf-#`8M??v<<9(kX?e=Fs`(EIPP`Y#OQFWT9+qW>DJf8lyxTK|gP
z-_q*eVfEjW{)<Zfj#mE`tAEQ7_iz5MvHBOT|CM%-oBw;P{#(+2F<_1Z1fju$zAwAY
S9AzQ!O9`zkmnHka^Zx-!=XhKI

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT1024_source.xcf b/Installer/icons/AT1024_source.xcf
new file mode 100644
index 0000000000000000000000000000000000000000..388a0b1c0158f52d4d11fbe4a57fcf847d97446d
GIT binary patch
literal 66611
zcmeIb3!Gh5dH#PUllwiBOlHpBXC{-${YEa6kb8n4^#T_Eq9Q`Y03nG$uml8(Wup8n
zDi$nM5wv1MGUuW~ks7q9L8+yRN-HV~^;Rrc5K%<AB(vZD_j%XaGba}dw$xb2%x69C
zI@i7Sd-hptop(L&vo>rx`>h=po_0pZ+ZHTbSSS<*#)2snK1dlyX=nh(Q-&VJT`K%d
zpy=6+l!>vf=QUG)MH#h$x1M*}IcJ}}e)D<UF6hCgqt0Ew?!5J<cU-XPyp0_%d&R3>
ztw+ZCQ#YNxZo~R{8_wNyy6)4nKQVL5c^93vzGKTdXKgxt*6^8UY&h+lv(7oUW2T#V
z=WaN4UB?3dUpR}0Pd&iH3p@N@4_~<Dt?N$Pw0T3v!Uf#AXs=uG#=P@4Z#u7I)8^AQ
zuHT|poO8w*Th^b~;m@zDhw9!>R-5bo8qN(je*X7$cgE^KT-JCzH*}7TFL|x*9w6Xv
zFhyQ9%4F5oZUyl?Mfd9^!(ts%=&Y-k>gvPm>K%3U5q0&Eb@fqo^)b|k8h_XmC`007
zdjDy$jwwu4Jw9(rUA_Lw;A&|2D367Y_`LNOo;UBTbr-F7?{F>+@0@w|x^vGw|E(RJ
zt3qYXDn5(N9cP@g`MlL9cOJXx)N|K&{L#7VHlKOcrp+C%JL|l2*UdZfoU=|pxida-
z%cehD&l49eU9_NUQQy61oOAB_4d<S7{^rwpY|6T23)d|?l?Pw)+Ew%Q_G|Vv@z|Yw
z=sI#o=ke<{Z<)7c{kfaY$nTq{BXu0UC_cq+hD+eBn=V{`madm|o6p;{?yODgwsc(N
z*Uwq&Hg7nei@Kw8{pNY6uh%=Bx^Bz*d8cnWcl~MSZ8~Rj2j|0``(D-IqSiJ0mh-oq
zx9N<FI!@y|v|dj=^_&amoqf*f>pRZip!!bejte%O&bMjdf<;T?9UIqg+OYAwj%7<0
z#ykAF?rZ19O*E7*g13?nr~YqX+JCF>Le-VW-#}dr{Qdm@Mf?6}KN4*vSYh95sgJlf
z+&|)>XrByrq^>OfMz%ydBig0WzAV}kqTLYf1<_s>?KRPsqrElSJEOff+J~ZjGT2c=
zqHT$GMzl+#eOa_8M7tr{3!=R&+H0aMM|*3ucSd_}v=2r5WU!-$MB5VWj9|yTIoiJn
zwkh@w6YdYUCp;2t%Y(tT>YL18>!N7i5bY(=ZjUw|H;uLwk6((%FU8}RmWJm~zAD;n
z(S9n}8T#h)H)C<IbN?vX*GGFsv~P<xp2yrUaunwFg!>oGj&?<~uZ;GM!7ho<UwU=8
zz5Ie`FAH|f_oIC@*tPNaYu_Gjzx3j0FAw$=mquHS_JLqu*%s}*Xje!3s$h@%O0?e#
z_H{o9_6_ko-tbT1_M6m8^Y^CKXlDj{T5gwx+Z%KH@_0LbUK=;Y+ZRUr?r1+0?Ah^i
zd+SBv_7;uU{9PCyzpxT+U!oqIze^@XJ3rV<bGtU&es^w<i?>gS_MB+DqrEcN_dOi!
zUw$jtD+fh8E7<p+811HD|N1|I{lLy>qo1zJ?RUcc*XQ=Zc>6cOer#~G6Qi9T><*16
z{O!0g*q*<N_OsFcI@t0Z(cTm6C)Y&#$H9Iow{Hr!Z_VxIc>9uQuZZ@e(e4cPbMbok
z{El$@OG&ixy8cqUuJ4Tf<DH)fkAHo9v>G+}`(|#t!tHx=dsMuAe6*)UyCvBBV!Q79
ze7OCC*iZbRDc;uXfWIHae&NSwhTA`m--n;<3b%i9cd!q|&-bUp!|g{j;`8^&+-O%t
zdu+5PM|)PZZ;$qU(S9V_Pel8<XulTizeW4AX!ivBvysu3qMaM<s%Vdm_T*^KiuUc%
zzAxI3MEi+oKNs!SqW!mMe-`bYU>_YBZ7JHh(XNX2*l16V_N-{%9_{<0{YbQ*i1u^Q
zel6O6i}q*H?g{qiBcm-vJ2%=@(H<M^$<dw_?c0Mb6uQU0$V=h&LU(;R<d6TEKZcxN
z*uAaNQ!WpxE-3WgQYnw999FQ}n996@RmWE56f&!h!&tScGP_{q@s(LTJfSiZYz8M*
zW)y6Pu%$A+VB3VPUZxeSr?moBTPsrwW<_CHm{g_|Y^P&2$4=fat$<}=sWQ1>+l6gj
zItuNT4&JG)GO1u&+l4j9a(ktn_nK7c=0qA=dW%UiC|yv<l5}Lkd9;p6IFI7kWG*-^
znNt{_%q~nwIECVbgj1N)3{Ffqg?3>}!YQ;k7KN<|&2M!~g~fzZC_1Lagp-(>fT?O6
zn8tUeV95(7kd_iozzdCUX-hZ_FEqckJ(*OPl+gI8lM*$4cS~ET<c+svRC-vUw>2$|
zN@;y*Y&y5ll=2ZIO(`EiX?*JKPiGdgImrZ!CC#ayg0M6(^^*{mS|V~9?X4*%;KffO
z<#R~=6oiTDY3ipSOjIwWG@oKgsBsc)Z7G-t+fz=X<e0Rlej=%#$cVWwf8%L`HZCaa
z9{#$I-IonBPNw;NzZ_-r3fakzjWMpNhAYNl?5~=P6WTo9W)-roXT}?6H27N+Fm`^k
z%_wB!ej#J;m}t`r*@#DF?2H!S*IJBon$s$LSF26sEq^RytBb;Gi#DZ@4f(l@y*d$o
zJh9F~Hs&cAJ1rG{A+^bctdz;v`6b~uOUC)lZ4<t`%_bGH0sk&zYukm_wOc#y`&hem
z4>_W+w%R>(D_0)1lo}u75ryudx8nuw*~mTqtgh;SN^h;abx>hNWp}lQp?OWk%H2Z?
z{>sJao+NE;9b8zMSURAvCb3o?^0)GbN<6e8%}RPK^~e0}yEZ<vVcqN2b_^I)SY}T@
z`OlXh$xpde*8A}LI@Xx&?jCZx@iv95+_Sncpt6dRm1`>sjhG$F3xg`QeOX~}#jagi
z7*bKO>fvBky?IGtSVhHZiwnamDz>dlSneu}sF*DhmUA4*TP!Sq)rEyo6&0&35SAV3
zQbzOo`Gql+P{z`^jN#G43aX8xlTjJVfw#`Zbu>7cNP`m^oMdTfMPXoK?X)+sCfb`=
z*HU3hixVpyUKpC#1R9$xDGW~*W35Po6KkQt)M;>{Vnv$kIFfgukx5>xnP&0`%}i9R
zg=Qvsu{IjZ(P%7v$vAqFu{@V1Q|oJMLu$0PF*P+d^~R>&*i?-jqNef~O-<EQutbA-
z4Gm3I)YuUz4dxNm)Yy@!ikb?lv8jq0JDR?Yni|V1=L<_TH&sz{$EvYjj7E;5`%v-5
zUe~g^&}+X~hifgnVHnqfW&bp8d10VsUmv}!Fvzmo2H{<^D`~RXE4dyldtel8HhZry
zd#W8Dn|(-_JvEUwoBf$E`#}R9He2m@jWBz35Un?Rl_OWiNXvdRlE$0;iQ}!pY|li_
z!R&0uJ2?xpDLCEi&mHgOY`ElbyxCt0vj+!oo$Nd24>_^0yH+WeE0e3u3=A_X<H6aL
zro!CHI0lrtm9gNw%9ujd<7R$kbir;CF6b+xc*=rGANHue@OdrWYGx@-i^a()%}i$|
z;|mSNSqaTdXl6P$p_%EtWK3Z`h089Xl^yeiMd1Q3w6JYK0+xgeRZIQ$?-_MARvN(d
zr?cU^IwQsF#o1{Sch5=373QU53x}ngNFtn{`pF1OsxR>3CzJZg2$Kci!soTP(}&GJ
z=1<O;ys^2kXTf{#?ww}i8EtmWvZg|I;hx!s@Bd=1;rrLlGcJ({Ka;WdA7-Nq+1TI6
z*ctPMw>bWMzIjuHOBV=_c0BfA;By~^p4(XU`+wH5>eH2KwbnN(9^s?nvUEVvk^%Hw
zVN_j~Hk7h9?qCcobq_tl$G~M9pFZQ{m(2(R-*3LKnfn=VxANUzQ)sBzO&ayAwvs{5
zs&vj3>+zAVMrX%8KK|9{@feQi@xmy$la9I)3S(kfV`3N?f8Xfm(YmJ4o1`5KF9~PC
zi09*B$;ZQz#zP+yJ86BA7n@3(8M8Dt=CyG9_mBBGFhp_=bQL-aK0hBQbr#h5EV!TZ
zU_!=cL7g)RgC=J(l=EQt<V;k1zKgf786Q7+<=9n)2Fw0q)k+PHPrcFy$0rW+!STDp
zG&owf50Sqb<3r?`j$aUFPY<DuX7e47b9}So#)E--{WjL`<bB7=XSv;8=->xcN2QGc
zQaIU5iNSGlCCAQ6%1=AtluA;_wpKeaR@IHEl_I~!9IH9D^80XFrL{2KOABAm>6Mnk
z3@;OTqZt*jI-|mvxOJwm$FV%KGNEAC&jM$A34{9h!W<3nWexAPV~(&a%!hgg9)|m@
zR?SC!Mj=Lit2tJMKK$R<Km5~$`_LbT`;mo3m60@PVP%BgM#g#;3CoKr!x;s-gk|C4
z%CLgnC|u%YC@or20n5U}^~<#AKk?E@2@dV(04J+f>_|$5&c1>>OPvYs^nx$bDG9zz
z@a0s;qHtP*C)*v1!s!WKjK$LF30^GC0B3p$GmPfKtOPH1IHtnc%sQ;(m<s1G|FB{|
zYA!ObuY?&1F4T;q<jA~4GZe<dv>$y2(%L@{S(xBPiWNg`M4>BD!DoF1-=&KaeCGwP
zwJb@%RCu_47?&pTtFj|?&k0MaPfocE6GvtqcrkVF_2HBh&rvLylDhwdrK!SXYU&;o
zmZk}lX(`uZGF?~_&Pd&heK?c3%`DB<N;A_5g{;HPY^qk8rTI>2HaN$NyOG(?+`bu*
zC3Afql+T6Ye5e%WLt#!7=0TbdaTT`q&wp@TvM|MoUby&@MJWzUx%85LT%6)Q3O^^j
zhWpx=q`1!uE_}@-ey`dmCs`YFnWts!^bX;!4l5P1woJw@m@NF}WW$w*bqe3pX?(K>
zJRoB)nIin~6f5%6_ZKpD{8ZtMQ>~RB=}*hp8PkMcoMtVBtUZ&l3#SY3nQl1suo=S3
zXBd;k0Y8zkBWDW#W~SlUp}&-|*Ub|C-7HPfnx2-i4YP%J%x1b~ljaEj%<<cEG;>=x
zSNJ~7-?GLBeHwSvJWb}V_sQI_$9*#Q`olD(`;<@V#y{gzx=lWr`$wP5b@<fnV#j+I
z7`|V$P<X{cqYr3&P{xj4B>dPS8(zqUKQ3b@bO~?ivSEd6{B9Y0%VOb|7aJc%=Mv$c
zJKnp*=!z?pgpyMByFHEx%3OXA^Mj?(RI!}|tBAXW!p|9MR?Tq&&ze<eCKjhMkvLp4
z_b3`?1Wdr1;&CdrE5zfdl~uD_hyoFn3x$u6Xxvn8Sy?sPF-2G<7DS9LrA3OxshCX`
zR`ZCQ)jEjHSvkk{irq{=i^yCk*3(YS$~kuM-uZAMYqgTFD$J_2w9v_uHKM54^@*^W
z<5XsIbbt&lp;)bz8i7S0R5X-K=hYfijH?W+(G4=JjAJH*Gl~8+B{p@Au;@rMZ9IV>
z#RBtUZL_###MYXL4>t2moSGv+wuwBZ2w`5Vbvn1`c!>%sGME=5uvX-L+)1=B;T>>k
zjta6dkIQ3(vR1^gj%|s}$s>faHer&GFxw=L71~6)LpsJuJX<v@h2ca)%4F`tm5yOx
zF}lPspjZcf<Pi-iD%PRFBrjINmmEa{ii#ESW{&C-c`OVnP55#gb2ddI-J8_$qkPHi
zjZ2f68r~#EIe}mVK9n!L$d?o4LrM!?oX9Kjqx?yY%MvfP^6F_36{bu)K#2$4%8RLo
zC}rirfF%!8T3ZNIwx#kQs3@z4DCNURc(9$<s3sqRB@HYp@*yY>`rsljcKWbVDol|F
zDV>Dh<U*e8C?_(dEecDxk+EeOHJm3WdXW=n_;}J%n2Gyl@Hm&F*^#)=>~DnGFNSa}
zn!U#Hlfvw&F}Ts}RL9Q?vtF*o31;Uyeglu1&Em>5yHuEczX5leEqA<Hm_0m@E7R;1
zjyDLiCx+u%vo|=>1GHMUdpy^v*(S$3@Uz(@u2i#&9Ph!;#%LgXk1+f91};>yHI5$=
zW{(cW+h%|4SQTc!8HKaW-sJdMVYa6QpPOxV{0d$-n}*lTE^+)WzBlXQ>NUGUm_68t
z)6I@@{HQSd<xpI2cD&<_!tCj>d;(^tJAOf!WjKGD*%rrd@L}L9u4a5C#8-S0_{#C>
ziTh2CpYMpzAI|&5*j8Uuizsbh<cpbHZN5*7HC1L{vU!Sw{hs4VFZd(2`0SXdU5Mnx
z*>k62ee)IhD~4J3^Bn;D!+SsCmzwOB`lr5Jft~XeDr9P`Nis9K(p){~pv2T(V8=bi
zr?p2q&J||EcKh7-PRDbF*_g+ChJ5;A#+CRXO`v-l-qAZ}zd0)N*8g%2`@24Vu)=FE
zq~q2FEPDu&5x(T?Oc=tN1Ut(f@+9y{5VW>D1_*!u0l^pW5sUacu{I%5L8i}+Elag@
zS;X&J&6Kgu<<EN@^ZAa8{!ibJh%F1ApxoiHT%5rzp~rjiL?d%*TtVRUpoB?ZV8`8n
zqnUF%zT9!j;fhT^+#q8g;xc4%JXgl9;WD)Bt3<U~0RHTl<$KeIo=eDha5r(zHH1hh
zmDO+zfCe}Qy}K&TG|;-sN+y-UM%5rdtRRTmC@c#HR<shMvW)4baIlx91f~YlZCN?T
z!+D<}bZJ%=4uzUvHDMqrEauiQND5XSR_WrMh6~HW5tT)S>{_a<q*Dx9)53z?JW^N{
zj;eI)JW8BHqQZHUfCev|OKZZi{(ywmH#-)EjR|KkQ8-Ywv@ux@4g?2z;cU`DNxm|}
zd8C8s4u&MOzuB=U9GY+z&5lLkFp&W$R#eT>VTo7^Dm1*yF%^!43Sbi)VK<4xu-7T1
zIt4)jG^CsZi_IWZ9zP2q3$|b~AocSQmKwo<DQ7^jQmAP?hI1(m0td%$u$2b02E%!P
z>LIK&B;`ChhJwRXONK&duw<Ci8bod2vq*#^pfhkDPHGUb!OsE=v<5$iX?z6Tl>2G^
zQUk6sT0Zb$;VVqI!)#??&&XfP*hvF~w+^rsg{)<djBRcdeznm!i|GS}?-*#ypatD8
zW6K5!uO4Je3)#SjW$c*2!k)nlmD$MO$k?9@5q@@vEh%KJy)yRJp~Aa{8s|1+nDEkJ
z*2VjNU&dAp7k*$kyqIjz&t&Y_5yI*STUf|O{YJ)487aJNqz&OpJiIcbu(UFmOV_bS
zxU4dWK%!$+xV$ou#~sVU6_rMA3s-s>P*_z_Y2XXv*dttB$qL&9<<%7v%V^srjQ!oi
zj3Zj{@B~bSOB0Srfk=~ZtXLSQ5{}xs99-drW0qDV9Mj7H9$U#0>?$uDxwtCfm`PS>
zS)Fh=Dk+tgOBnGurjFKjc*@bdaI|D;%5hW9H0j6XsUK6AsJ<fgqY4w%S3-QUHpfJ`
zD&@!}$7EHiV*{ntDGh)T<IBUt*K$N#e7L-Q<>5A%5bjT9?C7P!ZA)zsA>3cd*on)8
zpI&AI3t97S89Q^i@XqB%6Q-^ZUgCJ)3Zp4YRtm3LX$@RRKb5hUuM%#DeN`Co#45`Q
zZ(I%R1SalT4Y>tE)>m+db&q(svb$WVR;tVSSa{!_<@(smOJQTtu4=e2Xmo7}VOm1R
zWnW;bbrFUosBDWwlOo{EniQ88%T(4g(m5&%csqWz+%TWn-DsA#_$5`H$9>qFhgZ5s
zJd)6zrTP?Y;xfW{9JII;JD7DA)2E})YR=)TyFj2~HD)pQ4)+xsOBb<jqg5Ou7bUPw
z=JO~=n}luVXpyVJu_g>pI7L?KS?Fa7prb9<vD%h#BwYoTEFsjUW62KfTe{#_EN(2~
zK0g*LDvrf5R5%W?w$c15G>!z8{77l{i2t-_vcGx7%5xuFZuZ7TI)eL_nqA9ByEt1y
z(5Zw=Z(d@ylj9wSeZvsQg^zYw_V{ql^O`QR>v8HT?2&};8-BPDw$lK-`>us%@1`BI
zuya@h`1*XaZ_o~YDA}L#>#5i~k9Tk7H|uTl%sxYFPQktr=E$hu4BPJq(@X;JEFrP1
z8H(L9ftpqGMNPXgENIT=<5JCbGzqI(&{VM=EohFT#%Dj4s?{9Jiq+UoEoSD$w(GOE
zYK~kLwNWsfbZvyCP1~XCh4IgqIJ;QW48>}E0vt*!nkw>)Ry3(qRkIy@R@AkosbbsJ
zgXP6)e7ZcUUW~z9SXB?EV!H+ktLnj2Y+Iv{i$C;Z)|2;Svc2U3eVF>O2K8QE=+3HJ
z*Hj9%u&imVTGDK08B<G{c`;VtW^-9;Ia9@ocriz<$q_5BU)Ho%+(*#mFjfT=e#wh9
z>4G+KlRQjg&A1MV)dIid`4W`EvZj_c7x9(gqUDjWxY@t3X&vD!lrL>sJMN=3Ire|)
z^u^<g2*ope9n~r4-Epvt$gwlFme3Ke;GG&{C!BZ2y{(Wxlin2fg)TW2ku;V<t0K@d
z`Q|hWao#MD%g|AanPCAF$H{>(5W^y-7Bc7ZDlR_9dA^tl9T{qu$$2aS_%~ASbBdST
z*B{lf4jjiT^9Yojw~$xni<;J^1<m|>-^C+bd-OYt`M!r`O=|Q;^c8X-?-Uj`)sq~~
zBe+g|7o=E?D(YdFqEIu9XY@Ov$brkbPa}(52+}jH^pQmjBYG;0XFjsXjjI`7R;9fp
zXfT#=D=T?rO<E|;P-q<=5?XiME+n*$E6q-H)VEuqbuLFj>yCHeQ$p)pkc8G9@4>Hx
z*6}N$bs-%OPBmNWc%3l&`4D_-cAR5Pm_0d~tJCZh$A1uJy{-6|(7NMS@id`zyv$hR
zcptttTY`_FbqceG8u_Z59qo9%FnfF`m#f+99B&k6PmjalX6qey3A2ox!o$tZcf1?F
zo6W}OX73Wh02LA0Ryuw_h_CQGL{i5c!t99=d;s2CgP&GC+dYBL!0auKU*?mr-VSFn
zU+nm8J`v023*IYuV89wHtR>8}SMa`xv2qS15%?N2Sq#jstxc<Tk2#_M!>?3SH_=;4
zQgJ1$t1;<J!$YDePGBxEi*=g%`?ICHX0r;tXWl!%`ivH^cMqEJ(i2bZ+^AP|7q(X5
z$c0)0>)UI$N4wQveaC0DRkKQUl9Co`N@1{VT1K^=u&g?T0ooHEYL2EQ*cWEOVI&Jo
zW<AbYl?h=j%8syB<xKP!&YrbWBc~$N!pi9jrQTimD4k3P>ycTjXHwvV6eqN6L6bE_
zq32%+IqAB>`XaXu;qT@FE;?)5xaX{Qej!sLM>hK|<#uEvzM-s-Y)-G|gWTkJq9d#9
zq>D8C+H*&~@A$8dUps`qy9f4L1Soulsa>@)uo|Y4nq+F?sUI*x2B{Z#=`MUW$%@H9
zxNX)llwVd>93H2ROduzYV3KJfdNDT&HL&RQL-^nJKzHFYDZwwI3R#H>BooXM*Ik%!
z;&L(T>ZhamwDg5#y9>A4p1ZHR=&XSonb&=!bEqbP*-2b|J|pBu@17PeKeMm;gi${b
z`4R2-p+opT^T2bTEH1C^CVi<|>mKtGO)(YNN}6@!5+)A1(cw4D9$LO}_l7sWc4ez>
zH&hy`wsl2;zLi&go@liZ-Q|*>qg##CVcvVa!FnIuIDltXUq4un{jMzW1q7EyRY*GX
zLYkJR^BqP^YK*dltBz&Q8NPO`GKb4K&LuE5t^$^YO-dv#JCaT;a^q~~$BtD`EVc<s
zFD~ae6Eb;7GNx8-R;uxKPdKjTIGxw;pK|P}#v$Rjnx`Ez$?}xrFau}$byG+*7P*mm
zsV5slM~vylnzh3r+b7+4QcO06!=xJXd#JR|lecPM%jX>Vz?a{fDQ{avk<W?p_;k`J
z68Q+GDV;BwPnfMA$0Q-^(2AbH+%+}{d57cRGFp>kDr`#dXq#gyRDQFyI;O%r*BP&d
zjOVE#;~9Szn-l!m6!M<MYQ&eNko623FPX;s2m`Z`NvP*NE8jU}JuBmxdg^)49eLif
z6;sXf_s)DS{r1dfyyz5pQRB@C@*>BJ&)83pH-0~)wCz9?dG}%(5+g^a?n7{lYNgRB
z*Jd&X9Gh}Yb~z@(ajAO|6sOU1tJ{Qu%jh0-7NeMq?m4g-?xIa~B;8tEM)#gDQ9Vz!
z#*2ySO1BP4*Or9TYkb(|)A^*RDgRWT`1|zV6R$fQS+n7a+&}TU)TYF1#{(r^<432<
zTQUhABc2pGVP3yHo+D+xGzCu*;2deV_1sayua7cZIcv1=|BWV-J8SrXjIA6ayk?A&
zx(7WfV}CqWSRHF~3)$!=W$ex4gr8Hgcb4>e&i9rkWqyCdGrwn#SN`|AJpa4lM>4j0
zg76w8foDS=^<41dnz>;g_l)q-PkKi9sS}kK{&~*}PczR8Ki~7h|D`T3{IZZ2{_ma_
zzQ*UV*VX5RzsBeOpYXi!u^}(~bk7UlRi79Bwz|CVdHOkF@7X^u{KFwH{1-Bjbbn(#
z>3)5ONcUgt*pGC7PaWz0y@7Q9lRDD<N2cr-QHCdd%UDH*%j4)N6)VPGi`_~Tq&hq1
zzK*AFR>Yb3GdZ!~4dO);=qQUfjopUb*2*iCrUSpaTI4=B*R@1U>?+^49_ZOU*j>s2
zQeS6f_?jR*PWnX%-&IE^f<p)8*?jYR64ALKj7sAHwFj$VZxP$v%B}{{0~5W*ExK*k
zs=SFKeD%m;?{O}BZDs+Edlk|v&lbXk<<O4XXNw<Sg)qxKjyKQg<IOvRewUE1x#yPi
z^$%I+HRYa%!HcZ)?c^LYoP}KVku-XjZjh+Vn+n6i@dysT2=+8FIg(<OqziV1C^J4L
zrN&x_`4Lo|$>`h6Ju?!UG!d)xoWP^D7WmaItzuq76*f=iv6jHi#=k{a+a+<g)$8Hu
zR`}g*_!!PNze|g#4z$4xZ-!k<&#F?2u@hM3^dm{^qg#0wG174)_d7NV`&sO`k@s_?
zKg*f#@Zjm|#xr&_QFELi#Dzqrg`W4WUejw~TpG*xM813xcQSHOYZBr?-b087sW}#f
zo`J6wU}~LAYVarFWCF{<p9G#2h(p_=FdL=_9*s#i_%)S3r}Ip%TGDnHqlhA5@u*UI
z@F@M3!Dq*(u(g#OWF;)=LGD-eg!GEycv~A*zLj(ZaVh#td6(4s4*FbP$-VH(qYaGn
zJTxOtdf=$5e|KMduaA#;{S3wjldpM1m^0sJMOHlA_)_4;hcN~ZBM87{%l-H`qDCgX
z%{$FgLVt-1Hb?xeQEfDjIm+L7ItT)Uwe*pk8@`U~>_`dVYuMDk8a`GXh1tirbdSNl
zbR1pwBgCoyV*p*oUlY835AI)%olDwH!~HYN{)H>~9oQ|{=`g2zi(JxQg<Aa?oWB`+
zGEvrvdthNdF@lfbR;bzA_yA7AzLYGX5l?X3|7c{gvmH|R<$M?~#~zky$rL8|H~A#~
z3VR-Q2?X(8k{axL5Xo=j<G2KSGIk35@+U^p-F_Jc`gT5<w_uMZj5A?(Q511zaJRr;
ze;?h;3D^Y$aE3n)?fskdEg!?4k3AYTe6PmgMkw;1<C7wK&L?HruSd$*c0MYzm($l+
z_R~fgyMk{9@5bk5_AL?c?E<<R#lL0j^L%h-Z{~v&)m_Guc32XaD|v#S4wSJgrBxu^
zf-z>_b|r%g`MU5X?J~BD&(3V!d?_IOX0(i{Co(%`fpil7bD)g9pU={4@j@vp-0R8;
z7cY|7Le{>hK<X+zpjP+ub+R=q`|r@gnUw<-fLbk(1O{;5O6UT1eOPpBq&F9pfXvOn
zEf^S=qJ25q`3Eotot2<9J=Rfg%2)dWd%<>wb-<y#vFAIQRtv2fmaD@W;&5)~nUdW@
zZl|k&7m$+#vO+N|RME&(ECN>awF*PwCycNoa1Ll{8n_5y8O%z1FOShSR<dcO*bE)M
zj_nMG$aa|OYucVsXvL6cNIO02&|32aJ4=<9Xl-2yIvIRvwC)p%nwhd38H;EKG_4e9
z2;Rt)29^R%K?_VcvgCvYFf2gzQys!0m6b$-psBueHH7DjB0<)+XYAq7qVoCjLL+@a
zEG&%CMDpIZnmq`k;4di)*T6IQ4yz)Civ^Qbi-&NBvk^83NuhJL!rwW*R+tU_g_9XR
z;`kCFX@1Ulc#q>@%SDLzrqd$cCL~GFX%o8~PZwrmpK@}=CmjDjAzC}0=XR~*Y9Wd|
zo(%Uc$JvXOD|feN%xw`eA6#Tyz2)vPw>zg8pC{B)PV73$&%4L4p2Cl|HL%P=$tv5S
z234w}o2hVtM{yfj+d=j=--<vw8|XAMQO(471xfw~%Oagwp9BE)s>o+>ar*eOuxI-c
z{{y$ydeA@NnWCNXjTBZPI6*uchMvx~NTBeN9K(zupFc30sPR4KaZ%1xY)Ae(TGq<+
z1-zZ6CAL))6sv{_%UG88^C=8;4oz^j>lbuh>;}3bUaw!#b9{oNNm3}9GKJ(o)KCgI
zaVidUn%f%u-js91oa<)I<i7Lubc8QP6rm)hTVAY{Y<R}<z<CQiH}Ty(cc1%nwi{P=
zB)*CQEA@f?Vy!rk=ZfnVw0gvML!+k)uW^6Qce7@nCj`A7pDkD`K69>{thMAb49zwA
zm3lM_$#r_r=$Yy>7L<B&y&h}AYyN9lmNe2h*U_ve%zyIP5Hq9_zVi&gS@oVv@mz}M
z8q&N-)PMj>375%j)VTh*hH)IB7laPlM6APk+@~7+CMVeq;+cV9Cz2h+SUE07(FJ*?
zh_n5&2PE}6#ZEN4Vcairor>JImv)fc$2*B+ry}QpavxJMbc5RSAIh?EA`$h2q#DFz
zLtzKj^?edj3eyoLC%6xk1O4Z+9H?mwQy3hmgunjj4XJ-P5R?m<266EX;o>`vf-DDX
z*j#*eir_Zs5%so8dBM(c{3>o_0b3#r*6ny7j${E_dJJ}@t1>*)C{+eK+VNw;>~XlP
zgUnv<c(X8jx(T0}o#FUJVU~%FZ1y(Cf92|g-s9p%?{aaYA2qnR(Mrb;3bUULlDLr_
z<Jco)-rxiANsc>(*`8(}r_Xf!GHy2O^uhdM$M4{3dTJl>FBfJ%8Q?R5mpFb{m_0Vc
zCk(G~{J0QD;d3Slj<*S!g!$y-PaW^#BQTrpGn98Y-p{um-oMXZt`ho`X5XdqeQ&eg
z_<~)0evaq%f?Raw+@Irl{cdZk1hEdSNk6|HIJC%o5IwN(V)YAsDf-#Y@6gKg!S#Ta
zrC-d2<>x~S&j-;1`_2!a^>)1&_jAY|BT9IEt_((<<p<)2wf*(MtQu6ph&$HyQwT#F
zOoV#an|=CVtQBbK<3?Wq3CkcsBP^<e!MTM-FDiY#J{V~dBGQlHAdcnVq7Q~#!YCRW
zL_tUL?1g<AVXP0pWeO5u9`LFY2vZ1*fK!hL#yp!N2!rK;vpnOYE*+@qb#g+8!i0n%
zLUE$f6I<GrhwD5YXon+_Jlxo^k4#u;f0-~V2Ej0`P0VnKFsZs|#X@*MnJ^a!V|Bne
z^@NIBT_!9Q<}zVc47Hq3k0)IwEO6>a^X~hIgasJ{7nhJUSP%%?TP6$%Tmo`=c&=X}
zOniDg*X9^y!ib%<?w!~a0)hujZE87CYLk1<R}tz&!h$?l9}@I-k+2z}3L_LIIz4_w
z^Henv>Q%TLJA|Ut_v?a*Qt!S41EroY{9ejnMEg_G>D_n2KE>32GCfyc%U<eW#atas
zI$>OYzf~VBXoJ-$gthf6gyFrtQ?%OlNzp1PQOhHmEsh6B(IVVGbbnE>rg~AZFS#06
zyQ_g+<oIpZ1Y1zA3HBeZ33ilgf_*e-f<0cR33jt<f{hQFU>oZ+!8%+G>|)37xF*;l
z*97}ZiGk&sU@zTY6YPX~O|ac{nqXgcO|Z!>nDBPTpb6GhuL<^0ohI1d22HSE)oFtL
zy=#I^2%2DL)@g!G@%U)a1pD3+WvDIjAnN<;^VDAEq1GEhp4t<hr}oCWJhh2?JWuT`
zkJtXQ=c!HeaBlYsM89_tK_slYLkj~+o)PTylo}FjYLMzHy;dOo#>!Ccd7dz&<B*th
zV`E*q4v9NE2P&PXoG0~!1Rs)p%8>qft&mgz3Q0jX3dt4V_>Mb;q!SPUb+lo~x$YuP
zw+2mb(gs703YDpzwG#4I@?`+j&`Y!|AxD5$^do5m#3~)9(l+W`pCo+r=g&|h4J2gN
z&>~(fq%Azxaq3V{a8qwWyXa}UhZ><Vh5SkPNCdPf#{3oWS29~a=E);?iXay);ZaB0
zqp1Hf?iJDo9_dF~!6PAQB_y--AuUqGKcu@T;@>^A+w30+f^Q_Q|MWQElS+PgwX!1~
z9U}aoXGbjOgS0*Ov)>vi6kBN{(X#={u=uj)S!|+>yneil-AMBgo5E@6HVu)nYm}#<
zoDC8<zE1)N*&JJGFmFO;pxK=?naqqKO8<Cfyo~)FEk%V14=QLSW7pDfGIWP2mE=ba
z!}_G+iI)+v?ozP4oCnKomqO+Wqbs0J430v$eTOgv;0eXwM7WM@@DQ2@uXWjqY978<
zU_U7Of=JpE@-Gu5B+s1MO+uoG6qX0BUDdx@kgp-wj_x5=7j!24+(c7}sUjawR8;|L
z6~fgXw5Dm?@8}v2O6R752}?LpfS0Bc$QIH>E<Pbm<W-I>LYl?p=hy))kH=^v3Fg$g
zgfSwY$LOs^jqDHY66#eWJ?Kjl2?HY}uSODN7KV&$LdG<aP_i1xwdbg25@sgoOkO%j
zLkUHzkrDfX)M_Y!>%KrX4OL*95Vso2EAeJp3ej)A#0)u<cK4>)?Fx_D>3rM@UCL;Q
z1Uz;zkydhnWb7&$OE`Cl0<qu4r)C#BPI8$7kJH-eE>`f=SQjhMLJcDFE?Mx%AQ}5>
znr^mqxkAF<qseA(cbv?nV0H(MChm)m5mOs0W1pb)BvO$>ZjTP)9PF<ZeO|VjY;#WF
z5=y6g+d1hHd1W-+uAj-Q*~D4iNNEY=itu3?$Qm&US}fcMqka}cw@)CgM><-rrR5V$
ztA%-In19-?klM+lpe8L_*Ru^X)*V6Vmg$4$wzWKM)W~XLqIQcU4OOCMF7slhBXORL
z*cmfv70sqmq>BZG$2!s>EArO|iAC1rUBcJ4c1qZ{>hiu&ejuU5VznRz+|Hv;e7q?r
zJ5F-?kL_$%a#L9}$v~F0tzoa0$=qAQiCqbf4Ee)NAz?Bw+}YP432BuJlYD|0(k=5e
zO#C=8q-VlhKo<*a4(eD;om%Jm^ixw%JXp%9II_~U%~L}0U#n<2NDun-R#RL&R}52M
z$r|FjI3>n!34Tj`(hONANFyTQC{hU+gcE}*uXXehchY_ZUp!cH@=hAai=y&C5~V~1
z;11DwEY+qjh&KwSwo9b2FEL8Qo=`$oq=@R)lt%)B7%ZMkLpG(P^80fwS;^^}HcCUw
z{l}CtOf0RW=_MY7a1$n;Qr8NTQPyuXIVBTL(^Nc|XyPha+c1q~6^9z0^a(EBOf=mU
z#wl>(Q{w)~F*Upyi)cEzKBBC26GOp^X%JVO0y$BFi=yiU#CLm<7x5wV9WW3aJ4D`b
z0#Dd`W@@{Lk-j61=#fDPGVE9*#EZANa_gIg+34T+EUxPKDj~8BKFRxl<4Pgo4z7*$
zPRAMZB_4a1PZu`}k(}`9<YydD7G@)V?UT+Oj;|0RGvRa6s~iuXBNf~GecsybI88~0
zcBc#8o+U(oz$d?-c05stN`X(2|JLznVb=JN&!DexTr^#xyZ5^E?!}Iir%9RjA6=h!
zlQ0|qjO+K_?D#riHuP~<`TeNlkwP?iT?F`Y$HOLzu6R#}@IoPqzOE$vMaT6*^n`s&
zoKHHwM##oEZ6Zis=eSnL_Bqa<yv%W7X+JunSbw2Nv$l^92rE!LL1?sn`$<7vlzuH3
zwQGCobZg1qN|<;;*@AZn1+jdsD2P_h5q4sYO9OUyE@Erj#P1Fz@)^saYs<SmxQ<($
z@z|4hinf!BmF_YWHmr(V$xaT<<;?N8yj=!e)@nJkavHP&SFA0EE_#~ihR_3fnM7+<
z>=qF;tsHuI2%9(N<jp7?P=gf5<6&$-E}#}h4v3#<B7@}|`ze1A0g+h^bU+aUTevNX
zApIT$@BM^pTkC~u`;#-R3nwyT$wh0eSrkOc)`tGdT0%b-`ZFkYb)vQPa<%FYjc;}!
zI@;7+u68o_itNqiSy8Z7*4hyH<PjW6|C{&8!MfHeJ+^x7da2qV5r7Bj=>r`zpvHmv
zkpZayh=%<mN55PE^gT#?lBunis1><85dI?KyFdj5OI(jo%!>SkV9l*BcN6{bC|E21
zDc=)fp@e@S3*tZOj_UQHGD7a;9{d<YYw=;;%RyLV6bWLr?cOtX@J#iQ?m_CI|AbVD
z|3Iknp>LH3^Zs@!_t*EtF8a%Td0%a9xn3<~cB$3MgY@xvzYhr$^?*LzfKnJ8plSxf
zrUFDhg5=r(u<HKExpjXlWQE?jcdvK6S;z{#%hR6W_(dTr^e#_(fg?0NSbcL`o%Sz;
z{J3yo+LewU6tY5(TUnuZM5-E<+Fy^vuVyDX-YR61A=jrp+wo4E%qBxzq--+ecrVU|
ztOqL;R+SK5qzls?>G%;LTD`7M`x?hj3eoD7GOeBJ_<12jM%Sl3*YWGPA2n{5r+uf(
z)860U!n8{ruM)!bbA8&EIc^ie*K~c_6C6J!<kuIS0lx+vza)eOD5(Lv!10@W9>})3
z-oRzT?8gl*HL%+8nx?(7<qs6neU3}zFJ!8~b6hTeuFLBG*PeH1S^pq=;2<u7L+W^u
zADupNFJaqfTPA;@KYnl*!4Dlh|Ka~)wTEZ`2iF4!nj`*~_dOd8pb;XlL}Q)GPXKmr
z(b(Rqq+@%_70JcAaI8dQ71l@8^8muJD9ZIo$6752$Sx%fGMA0jV#49*{{_)lYSkeu
zIRxogD+dAD#k})=;<43SJl3w2ge*FX{pzvX>(yfy5arxAB_8cPrNf7$c(%}{9+Ki~
zc{;pk{3OJBN_<nLTTUtAlmjZzmY!XKR?4#n)}O^0UDBSdQ=pyT3bg4y3bg6|3bezM
zoR5zKTz^(sd#*d%RIfgZ3)&8t!JaCQeV+{WIs0d@Hzj=zkP{%*2mM-!*w*RSk`c{C
z(d^2#zeT^+lEySA*URSgdiO#qO1%n~!31GgFX3|N=+mw(?X6vFrD5bG?5kdjJY_0c
z{Xzn>!a%BbFT_l|y))3qK&h|GKc91;{B!ajQ}==taNj|>A1}B9?$!MYxUX~t+@5*`
z+>>1a_cQw|;NDfIfcws%fctN*fV<oka6jM*xPu<4Q@|~|0`91wfcqv_!2O4M1>8S%
z1>CQ>0`AOu1>7IF0`5vz!2MuQz<tyea9>rYfIE601zZx$lllbnZ`382zbhn||Iic6
zSJfq$53Wxzuhl1*uNy}OlP9;;gi3wOc2!qK5lLy`B8V#`$*fSNvP}s`o^&*7tyaC2
zYE}}4b!XD2TI)n@Jx$GJ6oaVksI{y|yA-YGfJx?*SF%!kAVJ!!kgU!XX-9P{Q7j0^
z9$qgX`=2f#`-*)9WKU8$*R6mH$ZlpK_$%F`)*2d}RY@mBy-ru{WVL{`7NnF=gx$Lq
zp2zaLt9jD*u~1JxTkRhC<%*WQQ6XZfS*tWE=nxSr518K<thI=Y<C=`VgzgLQY4^z6
z*@!OJY>cuxrT(=G)Li4Oyr%c*(pE}Z=|-22_M`(!v?fK6@ZCJd&OFkk$sR+a5P6!<
z(wrz;Xj{B~w&Ob;{n2dCWW6r?(oiizXJ6|=AriTp%TGUk;ITB&x*H3H?orI_v5582
z<aiI?Iqvc2uw1p(wfU;K9tg2qY4rsx*VX&(=QXvG7QU`+lR^kgtl-!mYpXQ$?efAN
zT-=f-1{ms&;c?ytH9X#>tBnPrtfkmS@^J$~QMB|&dKZOU>k3)T^|yGk9`|?A5=d8@
zvYOjh@D|-8|DF4@0gt(y!9O^@&vB#U@s7thzTWX|j(_jM2b1@pz{$GE7fOohckXJl
z^w{06dc#FK_jHf^;eG*plnAaRlbZ`Lr`PpM)FM|~)k3IkV`(o6)oR%knc6bTSJWg-
zi$rZzm{qqTxI?C%W0}=L2q@vI-b<%8d<Q_T?J_hDNG2+gd{TCWT9`FZQfh&m0##*K
z$Yc%F6=*ECh*FmqaU-Np3*n`#n(cr-L8H{OsPwDU_ClS3KvT_iYO|W?HRS;GD>rjp
zRZyGl!WU$=hhoiA53pj+k+YWmg-+CF+wccpzMwf9)n<$N0%<M_#usxc*FEpz$XAuG
zZ)ZJA&f546@IHap(#LiQoEK%6@)+(A1I3GEQv+*e@042R6XMu_A@Npfvq5t<FmVDi
zC-j%<H+ze?#1SgboI2fEn*h-#?H+JDWH&hkluKBJL_ZdnXs@3>C0Sg8o-EqVQArl3
z^sjK5){EoHr+yGE<e6egyG#1|8G0ie(%&aRr@<w8DlKFiT#={QD*YBZ4w|MR5jQBu
zDn&PtcXAC`rS$d}xgsdX%J!3jL=r+Xwk@c~!XKIwm_#v?c)}$-w|l_WbPmj$K@xnm
zS2;@8nGEoe_`&Q?9B&m8v3A+lvmNimDMYMY_4Usk@5MPptX=f=3Ssu(0GFyd((!ME
zM6A7^e2wELg+#2qmp#?-^WJmziUY;&a*p4?UC4$w$LCTZtRUwAEqA<H2$jPrLa%VV
zL5Kvd6N%p7$Ttgy(eCk1H`?TQ2Tnu+*EvZSIo^W<5d?6?(tCt^{v8q%yrwmdA98$j
zut-mTEP%zPe0v7MH&H%I+0#AX2<slTl}S9argA7*Wd~D7&kdGUelS=SB1!@^gfI9?
zMg(3pkymKiT~tP_SS_9mD;rZ`Nr)9gCx~kGy~HP~N(JR5S*q9gWL2*TS)gpz&2-hD
z-@@B(rhJ9x+cchUmk7Sgi`ehZSt(Zt5i@Ys%2B*-A7R@=Vfp`SVf5#_y$3lc{rqOS
z{a<{y7kOa(;4Tdu3d?I2++Pj_#t*IsUaaBx{JaltQ2Nl(_njX;>+NR=%M**Pj_Vg?
zb!k?YW9>PxD67O+gCwiuSg8k5)><ydD%Rd~;@kC-tgii6ZG}2wTV0H`_8cWyVG$GD
zaCDY&k5H1V2v>RBrK}tMnyitg98_6%1U*(U_n?*5gn_l!M|`e!iWnU<S$kZWwLC?+
zbe^6V=+pb9ChkyDqLuqn6U$0X6gitF%@9YM%tT4d%po)$<X9yzGn=sD0VP?}39!u&
z6&2@9wIIpbxtAnsx|bwt%U+VKtzpB2DZGb^vHlm5to{6ALPdKEvX;b0o&?LxraJZu
zvbMV{>+dAUiUUJ3qO+%+Q5}*Ion5UI#K5}Fxz{;cPZs}?j3|{E_n$BcvaEQpeS8`O
z^qxhMwbO-J`y^Rgkz%bAWNmX<)_y_OFe80Vf~=8KTngf>?#16llC}N6E6EClw*!U4
zK;N^{RLIrRK@8MA)!e0Ee|Dll%MJv-ke$fa{PXo1tmnA~>)o!wI;UQP^~ZG@tk(t&
z)}Olu>#OTDSjRk7r@{IK*I+HxYp{OPHCX4i8p3<;b`916L4$Q|y$0)Jl47;jxCZMd
zg9hu<GIqL$B6oQxvMrOb3+gmj4|8&H)L?x;Qml4_Q;_%4U_IW6$~U?O>$s<7><kf^
zqXuhx)`1kOUFdA*dJWdg>or)9bjtMKOc9HE=r3jLbxy4QyQ$E5QCE|(4bHm`IgXQ@
zmHlURIgSgRy8S*SH)aDK%yS&~o!54cx}VU*6#7x(6w}e}BIQHUr)6|}Q1wFkbcYb-
zA0Bb6%^}EeA8|MImz$yVc2194pC}g+cH`NQT!rd@cm=ogitnboONcWkogEX2!SkZP
zctx+tRhxJLHIxpCgYlvq!%J=VFRwpoVS8t5v-S2~K4!WkhMszrt0unD^%6f3loF@8
zQsQTLJ?uzVN_@IW$G*L?w$?pB5&7Gbwau}XuI-35TiY6Im6f$U+iT@={^XU-d(xzo
z<gZxSQGe4`w(cp-IO5FwwaR|%EtIRiEut$RT93lG(mYgfSB2ba&#FfJt<pWZkYt6n
z)yV*QA72of=sV>V`*jCHisABvhU1Ynsh;j3KVC9X0YPa1lAj&4|HzT$1r%xj@e<2!
ze0nu|112}SCST)D*Wqh<#8Wm;USYiOOG@R;7G<8~S#^Brvi&0M%5fv-?RwIkxC(Ma
z)b1wMJo|Q3?H9LG7M=3y$f+x9K|E{<ZMBehhoIfAkck&E^6VD!wRqo<t4HqMjjRH*
zlWNemL)C5va#uXg3aD%2S`RCru9r*P9;qv$ZH{G^wc9B{yS&(TRIYewj!4_p5V@jR
zLEsK)yB#Q8@eKNY#!p@7p;%3qz4i17+g%@o?f7a`RkI!Ni>deJ5Ny{BBrnPzAd8@?
zECP}mh1I_7fn8Ih$enfIN}_&2;EoKw4&2GYdMNwJ+=ZQ;18P~BFB=X`@}jIk<qrmd
zJDf>oVUV~BIKmg#NpWX;S7BIMw-V0mm$_@jhlz?!)k1n+tO*Ztyj+5poSwbpc_k&=
zr18@W>H7NGGm5GMs1vyBpi|-gT;|T&@gZ%=u|8h_Pm%|T7kU2vIRhbGkQF@~NVnlg
z>LZzjxG>}wYFF9)1n+QOSdm935a*G%$bQjbRo+T@ZetL->zBJzHe`Qs*RdKORBjQu
z!+`<As=SrB82Pf|M3xEAU89a0T^n9*l-yk?*1@I7>-)s+f*!9=Lo^k!HXMi(LuW|$
z$aGGUcXXLJQWAI664l(1yi-UZXh9vABm$*fP$Pi=H)=8xQVBx(Ku8>zrj*5xDg>PU
zawtwD!PfCcVfOS`Pk21t@e9H%gWy0~<QB(oKz1N#&)3}SQXxTmPpVw*c(stAy=Pv&
z!f}U?puOj3p6ICWzJm6i#ktAx4%|)9UK)3Hk>j_xS_#^_(A|54?8fFAcWWK56S8le
zOWhskSaZR<Cr3-<&Q5Xs2O;~`xzyce$FJggzMigh*X?*8jweslN02Lp>{~}ifb5^+
z^+NWolgORD&hbVesnSX}u=S3+gy{Bq(!u$Tck@B8Z=JFY>|H|kt@CVym5v_};;X5L
z;_&;c0w%0Qyok%8IQ&8Oz@a$&LG-}BzgOyG(l5sP!Hq&6I(i<DezDp^k?@1-foF}o
z@5AHRZ^N}Q5XmatLiP^s!|CMMM&%E*0Z_CHh;o4I+6A=`^cwclwBwgEiX&`)EMq-V
zwd2RNbnR~WFLmv9xUOB4HbL>kb?saM<-n?TzNJIH%>&AIduiH*O(6p1&Z>uN<A`0Z
zX4fN>ik)q9Jb<Dd!u*QS^l93Oc1Lu@_pR_q&aQk{3vqgD^_<=w=kpeJ5q@_SyOJY2
z^N<uPQIP+ZirxGq=jiP%QQ|sm(9ziC#zjo<S<!XuQsJT`kZC1*($CGaVizncZ8(v0
z^M<lKAQe05Qn`AaYuE)|9$t%ETHvpiWoSu>pNGyqT2t1iU}weUaFO}VEk?2zy!Bg{
z%*_z<wBd#`nJ2OhM|z1QQ6%iao;!Iecb>v6%O%z-d{(_WSE}1vuTEklBJbg&_W!10
z9lKuOuS6)VI(#Kef^J=|S%*Bn_>9_3BkZY>ELF^{MT&I<Z9E3&9_x$DX`c>7>cAxI
z+2KATl6PPxcQZ`BLP;Pd_e9uyrS8Hm>7QKh`gFsBKHckG!XxU_JtLVq+vEx#|2P|E
z2CLVnySGlC?uvSSx}#l6<YV)sE;9Ua84LP!w@8>S8z1!P-r{;BL7%SE<x2kCv0k6<
zN(s{;5>ls6x2;~E?nK{#<I}EB*IchpcjsdE?69CucZsXi-B+hi_gAh@H}I!2_Hx&!
z+wS^wBkJ|(c1oBI(z@%@o$dN`U)fuq4&UFu!tnUgdK&!0bu{=LumB4qpI8M0zK;gq
zvS&4$+{60&>LqagqQYH`?>)qRSGlW2R&L<t=0bN63!S^$J*u0F9yY4)LF3YMKxr@8
zx!#g!tRWGgdz2Bl;e#*vMlfDk4b5K#o~NG4MFRtr=kwlX_t3P9DDAKmza*;S25}jm
zZW7+?T*lWIL~?w5n2cTTyvL&l#E@qQe1bIvK|L_q!`4As3Xq9$)3|$C*fK=1)v$9}
zAA0nas0>k6$8Ew8tR-x_iwI6%Fqe?7DX^Q%vgLwoRwFXhFUxi_s$3pA2CE)Mz7|m~
z?ji2PJ&sl<&gT295VPVLj)=2GSvK}$fqLl#On8z(oNcFAneZViWuUrsbw~~C=^kJn
zzZ}OWhC5ic5aw}CkAD{Xk@ynNb8HiaxG5Wj5J6=FGPWL5RFztb5FhY}FeEq;kuBi|
zkI)hT<DG=~fLA&;3kjg{h~osIV!n6-k~iMqnZ(}`d_lyR*fHTwuvHl1$wZbF7}c&I
zK?SZe*MI9{noh+NFiD+;8dAX^jY1g45x78w%{M$M>5)pDkw-7tutU!9s3xaRtWuaq
zK8b(g2E{}B;-k1BL`*@p2~j*1Z8_Wl$`x_|H7*QlsLRP2+;;3hwvBp-)KZf(2!QwL
z&EbxEr8&iYaRY4-;sV~y(c{Ei5ZrdeAyH?JtyCI_)=Fni{t(BOuPwgF{Xv-UX1u{(
zAHLhx<HLNnt?NCCc(iugf=cU~Ze5`$qjmXiTleA<v_2fC_-0%G<nhWgeY36I&A!>z
zr*V?m8@1UMTblWvTifvu`+E7FTMrMEv8!+q+H<aQcYlMc+`U7QQ=9Jcc6Z??_A-&Y
z9T84fx%(_mg0w7sJNU~kbEmHo3~-mZdvuV?++E|5+?6hK_oD`vxqBC0BUI@!cX#7A
zc1x4M9kE~6x%&c6V|6X)+>LRayHAQsY_E~d-D5+fbN69<Xh#4K48W1^#fgXMqI$Nu
zD_cI*T!q-T{z8eE4WG6$or@E@nra!FA))mdQ1d>bwJ{CDYJD4km8FNgSW<8lR*t+D
z$ZS@1ZM`1lf2c%JJ#?0tJ5bmcN!Tx}SIy_KL0Hel^_bz3OhB=+#GToRt-_oomLRSd
zcf>>rnqj$?%j>bOdLV(ln_XNFB8NB~h{bIS(o8wygXN@LVy`N}YTGH6h?OO0?X_C2
z{bYepvP)8XXi#bP%LZk>Nm(h(@^GeSVT3uLHYdY}Xd34;MCLz5C27UY$-)+8V3=RZ
zT1&mC-l8a}7v`m`eju%v7i-C9vn(C?yf$Q_L}|UY{!A5oI5C&kW8p{wduTrQOC<$?
zJ?(nQ+%aIM#FhGm_H05BUkbDiYmv;JO4tt*`6NjW#bQ$>=hQE=M}1D8*j_Q0*_$HI
zG0RiYOiyz@=72u?6ZR){9PaZ)JXiAhW3hhkw8bf&i^bX$Hekg_h<b9s{uC3u7sd6g
zq`55qLsBm<n(c<<l_;#&=E8bN>ft@tb;gH%bLTLV4s+{$#q}hzXPvpk66;2qT27Gc
zQs8eyY!R;`FL*F#ek9_6;KRrak;Q)!%%W&d%pe41NhfpRtnoj6()K~eBZSZqTzdE_
z$5p<ITf+lB^Si=vnJ{bkk;@mq*RjiYar?f{A^*a0ei!pi`<_eez0+~-B2@M4+pe(J
z?KpEGqI&kPK35Hj%2O9Gt+lWFeD(sz$*!{Z&#tn!#j))$<5%oI`pozo7uicPm)HA}
z<C!k9*V60qdS7tdAk3Qg`0V>198VKwO}l-LzSHr|F19!3X_wjil;g=Rwm0fY=W5*O
z_y!l-8}VzWa?~7OE6j#H;e3y><Ew?)kjI@Ba)aZsF1k1PG3Sna)bZuQY~Z6Vw|8CV
zehd5Tl3UF)J=la-N_OR-WS263CCN`|g<jZJ+(qmpWY_L&I7F?KIERuI6D&tpu|uBI
z_b3lqcD5Z6E8etE$F7#M;bd(G;#D+(>xKR*@5B1^>v~+puB<-JYOZ2e%@F~+8rLSA
zxF}+Wd>tZo)zE(;V%O6zVrNJkB4AhL_a=SsEJ^gCR7In5M8mGu-+hx%xQ+BE9uHkS
zsf0WFyM9s%%Opqfc6>3B>GPDrY8X0-%((KkDz=10yAF>sPn*)0mKoA7trc}JW^8>r
zcG6ypnw;&-;lznkL8;S~Jf&raf?X4?<W+q-cFp_g*s=L+f9GYb2iCE31vcI%?+&%C
zZP2n)cUj+wqG8vH8+mT%X#17ytP9_9f8Ie`Gjd;?siV3e=Dm2YKM}Eo>@uDoy8nDo
z2sTeZM8^*Afm-V$e;MC#PoI`u;yQL<NKBOvrMVgO?4(||myR9V>$dYwc#&xx(rVQ4
zAzGej*x^U%e1>8jc#-4uY1!e!=b~ljN`SFLoX+d<VU8MjI35?Iqq^0ZEYU0Qkr!ha
zQzwj$9iEheT~M@}Lw+JY<el;mi2S%${$hI=0>V&0l7C(Hq6Uxo9CNe;>|W^tb~{|a
z?uii+t+O{eep;CAp5W4TZ*lxGUN!4*<+_U<zm0dz=DTp+dxcEpT(fSi<8?w-++Div
zILDe01!kA7d$Z$hLgu3`U3ZS-SMf6|?yg+d?RX#8EOR&)u6w_b&Es6T?r6u4xqjW_
z!(6%U^^P|Sk@0iox-%TVC`883mFwQ-_^)^!89x`UdzTB>{iwku>sC5`P>75lo=3*d
zu}6rEpDWj$<hWBvQluwMp6U2yu4^{h^PI_x9lygT!bW?ZGI_a>jrKfS@+FQR9=+eh
zH}7&^#P&tJpf57RL0;1SznBj9{I>ZZE@|`WzsQe%Xi>jEu}&n0L(A$1*8?xs#r*ud
z5AKrop`$-rV06F7_eriJz^VleLC~Ne6uT?ewfn8=b~S0-X;YhlQ24FpSQbjv&UQGK
zgTfsv4czA%cQ^Md-LVZ5B!9MK5~6^YKPy<<o~H&_PdG~0EJrGPG`1=|zMb8JZ!chT
z89LXsAOhcj{zY&4TV?2)8wu#6i2_Q9F7V}LX?M{v6>4=P6xugIqI6n6u@;x7YjZ@Z
zj@R@(JJhTxe@C0B)f62`t0>asP}^wm)Yxz>5V#HpXOyeQX-%Pbf9*IF<an!&Mo_B~
zK{<|noLH-1A16@iaWo&)YKE2kb`oy;38Y{$SlI5^=GdiY*B6?v_YChm(T`OUVZKrA
zLc58kCR*Ic&*2^1(QrSo%z!%ew`1zn-+m(zI1B1;pLO-O)?OKVYojozzs(qE9C@qb
zH(mT~l8e8++3_QecR4=pI&h-~8)wtz*y)%Evq70Z>HCgl$2SSH(ZBZhzDk(2{K^k~
zMx$ExQR&j{Y5cJ1Bu@MZ=Ql*3QTMO{5t}uYP(LDx_aRlaI*oPPbHa}A{d%S8<_fKS
zvXK?>9amzi3H$Y#>NX_{Ta(q$oFT{_)SbX>s)zLoRG@aDTf-6s8<U|81rpWF7c26m
zid<7IELEU8b@K=*QMm>c69e8uD3L0=c9bGcHAS4pu=pT>s}QA{O-PGhsxvS>-GjfA
zZ(dd>pOgzLA+OY?dZ2c&iCL>}U{(xE1c)-V(0-N&kZfudhD8D-ol3MkE)fK&r>Nsr
zM9U|!W??Q5g;dl8)qPq+h&u{PrJMsRmz)FdHo9;a(IU>mV?soWO5+qin#xJAJzL37
z0=9%QoK~>XC=7B)%UNmU1c)p52_|t0d+m9~DIl<<lOT*Dr0Lvt)M*f_U(6$7c(8RC
zkI;B-J9eP|Mm<FAsp&*G1(jR|Y5^e|PJ(A~5}*Pwd=S*e5yZ(#oWnF}sfDvxp@l);
z80`v9f`vif5$#@1frUZGDZU}vKS{gD&h!n@b~pQmXrGqCk-bqHqOmaO`=V{<bXXYl
zebF8s==-8w#Tl_M==-AG-{AYAy~8DyrfXj`yNlCeVbIm>dRyz%?cT&?riDQnt8#j5
zm^D&@PCp(fW1Bcf%l>uHD8)0LoHyFVp<XjavQbaHeypM*_b(ks2&MPF%|n`q={(*0
z>z~}U<4+IMN4MW_wJ#@apW7@|krEBo@-0q?HY<60YyFN;q)=|{-yo%(g+FbcVpXML
z8wuIU&<;hrLWO8`p2HoY*il%oM?1BsSTzyWlDN5mRXsm^yXTFUTPxFeEZ+r&a5LFm
zMxNwMBxI`-Dziv7pP&TxY7@+f-ku5)tm;7&f+ffmOW2$#Y&@dCZ3yUEI*FPv5A|{i
zY|cb#Z`u|E!K#G-u@y_yq}a!4^py}^W}6a%%tl^i9(d;0Wm-%~Hlq-v)P^AxBU6*+
zw<_6tVnW+V09Sg}JnkFoog(gMy(SNX<{KhevUl=u9z>N@aFuq4&5+s@f>j9{BDE{H
z9gDT)T7qm5f^wiR59@l{<JKi?6yh~)Y2s}sXUUVOn_I|ZqV4HSUaP#P=5!9j@VInd
zVRw6yq@|JGm2(C!^&N#8ANK6p4>}$p%mzH<Ik;Clt`f5EkZ0;%>9|aoHT>A~c`tWd
z+^!vkzTYOi%yB`R@i~0YQ-UvboLf@f@OM0KxZ9CPFX!}4PcDAD<5c>!f_=j?kl!ZE
zN_#v*xhl-&^|lzF&j*Fs$onVSj6yd1=Sq6c7Ctz^X7TjTjkh_4?A3RTvw4MQ=A3`y
zy}#Tu!bhv_VMpvUupJQxwIlp-292Fzm75w$hYTm%>wkIL4fJmeHev9|hooS&cV-x@
zB;d*5)x%)GU>1sPr7Pmy`i8o)-v;BJoCqNDxIZg@jlYY(7abJsapWjr2&5fVANuHw
z4y*K*t6RGVe?vpYR3A9dC8X}^glORU@Df&`ZBjn)gf(hOi)wHR#ryfbwQbW_z>pJ$
zwJ^My)^)>>SES7xqwlsx4~-lC3NR=d25iy&oB{Vb&JpIrAU!DGsk`AKdg~b*@-<$y
z9T7nW$1tv_^;#WftYHAvx^Wnb!V0ol&se4QGgjp*&WvV^W4fjF=)SQ|t!J#PyC;r*
zd%uoXtL?mB7zIJv9>&4YiqO7!(9Kdm3&w%RhTwiE9*!Ru66yCrW1Zt|!mL*kk!FAD
zco!!IJ;leLcR1e9he9SW2ZqlgB+^ey%#L)t((!A;?5P2qhWYS~+@RN2*I~Galjo^V
z^HkpB9)I=UI-cP;*$2bB{c!6w7-shm9wsru-K&PHwYyIoq4W68%8?9eyPx>>$6hr+
zSKPjX*Z+Qu-pU$w`UauCTec%?H%4E`U_@Uifs-%{?eJmfma<axdvC6m$9Xr<KLped
z2mjl3Yxkk1D18uC74re7RRa!+vXU6dlA^MJvk66%w;3b<@Z#V3_E}*JiqUx=k2pO>
zqfp{_)av6=QR5N6r%I9s$tIMVyzBh~4DSAu4?VXzZg<@3c$_dB7Y3tG`;c^0tHz>F
z`B>EaLm!JK-J`Lnclf2hlw8L%qfY+VzdX8o^m7`1{x|cp7|IwZJb3EAmcnh2Uryll
zLi#CgJ2DIg`Cq2%{Dxv4%j=o2^OK2j=AJ*G2yFb}ROAF0TO9T4gP%x_9YRiqG0D+K
z$NcA%wl3A8`>dpai}721zg_a*FwdvWrEv3+jCL_DInqW(zBuNEF)%Dki^&v!EzwFX
zj}P#6{y{|m|C)1PKQ_ldb3DayssB8BYN-D_`Yg^jd$a#Y`U!(0I=OG)Q!x7wKWZ)e
zVB;A5MEdTl$FVN`%u^42`O2dhT<+O#aM^dT+3)r~fxi77-{+Uq3;yv#{@D8(+SeZg
ziFmz;%d$fFFBAr#>fBH*_#f3m;aj0z*ou8itRI1066ymnD*iX($aSZkx#8S%&fk2x
zZV#sDF{4aYeeG7TP#8+l{d)glv5qNp*40Vb=zHJcb@h(A`iQ#v$h!Kdy80OEI$r)a
zgo=)>_n#K)7^YU-Z~S4W)YT`bPC*5!{_n9{`)}!Cl>$2y=<l&#xoH>}ZZ`~68#vp6
zX|yxkI`qAkTTjK;KNX%|cq%-<@Kk*MQ(fV8Ppysim}pOk_OxiviT2`XFN^l-Xs?g<
z<I%=*dFqaM`|fD(kM^Nx!+8~+l8^X%TK<=9iFQh~^P^oE?aQJ)KH5{FJu})1qP;ZQ
zE2I5zwB=}TiFQ}CcSU<|v=2o4ShTx?eP&3s<D;Dv?VM<rMtfAW$3=Tmv>T$`5^Z<1
zmq&X|v^PY1Q?$25duO!wMEk>NABpzKV0Sl0J0{vR+8NPyMY}fIW1>AF+S8&vC)$gn
zy)4?RqrE=bk4JlJw0A^%ceM9M`%tvMiq?YNGa}lSXs1LwKiZYizAW0~qdg_sGo!sA
z+DoIoGTIMETaNaYXm>?>SG4y=`#`jhMY}uL-XYPBk9JbDbD~`u?NQMl7wt*WZiseE
zwB6BO9_=;J-Vp6g(cTvAozdPC?GK}UB-$r~%^IT}6KxvpjA*-}T^sE&(Vh_PY0;h&
z?Zwev7VXv1ULWnpqrElSJEFZi+WVt@DB52|Yr#Sz_dht+!A^;GezYs2eOa`}M|(=N
zXGVKLw3kMEWwalTwjAv((e8@&u4wO#_JL?0i*~o$hQg3&$45IU+BwlKjrOQ$kBj!C
zXg5T=CED(2FOT+`Xm5!2rf6@A_ReVUiS~!lJ`(Md!8SBTJ0{vR+8NPyMY}fIW1>AF
z+S8&vC)$gny)4?RqrE=bk4JlJw0A^%ceM9M`%tvMiq?W1Fe2KPXs1LwKiZYizAW0~
zqdg_sGo!sA+DoIoGTIMETaNaYXm>?>SG4y=`#`jhMY}uL#v##;k9JbDbD~`u?NQMl
z7wt*WZiseEwB6BO9_=;J-Vp6g(cTvAozdPC?GK}UB-$t40{je7s==Xh$Onh6fkW58
wp=;pKHE`$}ICKphx&{ti1Bb4G7r`|U!i;&SQQ=V!!RqJ1)>u?OB9_Ac53bt2ZU6uP

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT128.png b/Installer/icons/AT128.png
new file mode 100644
index 0000000000000000000000000000000000000000..be44362dfd2f64704c53c2b157b350f810d391fa
GIT binary patch
literal 2620
zcmbtW_dDAQ7yl-<QZqH0qO}!`qRU><*sj_&uh~?@E{fQ>r1mI^TCI}W6}t(wsn)%?
zE*d*_QEJE4_j&(<_kGTD#`Afe^ULRRo^#G0CPuof%>2v%0I(t+YX5eTF~6LV{vvj%
zIt>B<D8^Gu%LJjNC4~0%cJqAd3IGzRVW}z)yVRlG4rXOi5C$deJ=%9hSG0AY`jAA&
zq6Uaf0IYfMQm%rCq-;_Yl0-`Gu82;ouew|nC3FayUs)_&xgkouCE0-8nQapMzNNDD
z4WwDp`KTVrX`(pzu={uCI|M0u`|Cm&`$IV?IWyx@9{Fvk!@>5>zHDcG+sN7d<IJ{x
zpztBowZ)0Un|%aj^MDdI&wdlZymNmiMuSHre6eL?_bR2h3p~QYm-Cmh57tULux6Ts
zcPalQ|H(;bOv0hB1&{tVkGFV&4=|>7I@;SJ{PLF>=dCos2yBX}79Ye4`=uh)`G(Gk
z9NT%#f^nL@m?a+$dZ}D9cJYvOJ{v@Ea|#(SWbVOi@k~*9X~3=O^{6RwZ{v(I=yZgb
zIsVh~DsftTb-(e7Dww`8GI708>^mr1iTEX5mM=~C$dfr1yd4fFXVB1lM|LO@2;-_o
zf*6*756@|!Q1F7zfc?R<AY*s$^8(NP0~+2i-{|6@61NLk=$-X-wSn_r_PYIT`US#-
zerW9n0J6fr9Q3SAE${+l@JATxFf4-^m^h)>W7+)+h|gcg%3sUd%gYtz4`}(iI{CZ0
z2nBiidkE<w3{5N}FY^EZBR4`@<I%H!HuE?A%*+LPKO+A0ml{>qx3SH8Q)EE`#|DTv
zx(B@U(GDudCdprdxQtz!j&KR4G@a0U#!mjW##oo>!(#*2;n8N!xN_{s;Ds1{Lp!>6
zBsmh~(6q23o$@Vot37z-;73-$+f&t7ep~k`1;`W;1lYQc_lU~`&;&8k32|fox1yBo
zjSII__X2Nw*wxgd;O<~v7J6kHD{Ncw4f8dHyQ)cu>boUTdB|EJGRjy5R0VxNJL15W
z;O=tg_ZjkeT*W^&MNgN-#lId82(k~tKmc)a*EmBd|D8OoK}h==tsv0pwAXRYW57s{
z8eJdmo29{gY*qTO3}{(al^0SD$d{53Iib4n;uAH0h>$=c>8xM8g0hZ6!Ik-!aI#~C
zU~qJ_m51d=2FAe0y(>hZBxeoGV%L(96>J7TuyLB(3eWNRfNs(aerCDicT&U|YPhzF
zz$WdFXXt}?LEf*AAVfcE+fUc$Co;mh3E&tvce&lKy1Ci%zANmS_4T+X6-+SSA7Z7=
z!NY^8%ga9Eq|V+jIbI1&R+Fu505YZWy<s4~K7wgzz2f$5;&??oVes|7d2M|p@L9Q)
zk1;*~xtCOck{%q%KFg?sDT<EMbT2d=lNflBR~$Bu!)$M6T|)Wi`1+<GYn4yE8!pEY
zO0*^}SRmAM8Mhx6ZwMlTor=(tu|{ue0D64^0o&Fq@bsUd0lAk!X(FVt(c(}7<w4j3
zPrIt?!^>Q`%&^sc=i?#knX8KXN1g`Xn!6;!>*#pL9Vy;lyNDl<IMi)AY_Bs~QBhJ4
zIk}&E2t&`)mOgvMVUz`w(9m3vn4Mp>az^uPwTmsawOjHL^)y1(acI*mCS8>HC5SAk
zNBO(s8a$n8DfB0HLSyeWBb^CcfjjDLheluve%_h8+JOzI@%kqHn9bOX%UM~X_#@EK
zp{nD)@iZcwZF%}JK-9})4gR1Mv&ONt8GSx31Gn}DWo(^J7DiABU8MEu#EGR&I=Hnl
zC`w+w$;{!FlHKR;cZzE2b_pt-@*`Nagz>vVoGiCTLoRe#h%3%l>+J|TC+s!jUjySo
zWR6hi{>j|>s#EDcCo#-oa=>9SOXh%QVJW+NeQ$pP*B}5M!X@268&Kzs?Kdyu8z#3-
zyhX>xU{<@I#LD8=YhfzG9!MF?g$kxEW8Q5$v(2PBR|yrgI^KB>21iXhHhkb#PZMb}
z%1<l&@)YhF)n5=cb!W$Ec8Cvds}B;3i<kQ|&?vB_IEb3Dy$%1GtJoL5hA29Iam~92
zM;^f<MTzLp)?)vp%_%PGi~gr^XPboX`117$J|7uctZqp{AT_*wFOSjI@C91MPDW<7
zcT|y`s0PEBxMy$pHy(UDb6vg5F+NtAdQ*ZlG-+YL!Y04=<Pyw(uDIC$Cy%|=9+@8p
zzZZCJ`kc2ZB-7N=4D%3%EfUssdD}`J_3jktTIEL7R5tVNSm9DF^?@>_h@|#V*TN7x
z)8D{@pYt{MS?$~7h_gb%)meZ*>>$2!9B-O|a^0ujxxUWHmT<ZoBf9s|Glah*IkSCt
z#>{~&!jN?lTAZX)vMrz{JMA&@Rrqf!0)tq64w%ufoO|mOq$W61aIAcva!^9BYnmV@
z_f}Tkr^SjGQI^a*^kgN7IC66B!m#HQ`ukiL<M6O4P{tGw**Yy_9{o#!EkOeEAG!++
zPI_8L@=E|c&KIG|FVA)>8@x~3BNUv&ouj~gThw0-&^cI}ogKIO<sA?1s-7O)5op@s
zxdzB3AWw~oMF%Y#6o{!R#Yz??gQc^I5_#mebhqCealJr+wWBmxkk6*v>(Kei%`R*S
zeVoLJsYEOKz-&LtN75l@Smxt#d(6qrrR4Bs)^*dy(7U+F$qI8-fj@|Tc&1cp_*`4u
zKU1c&XcG)WEle@CRX15mc4ab}!L-GvWR11P!hCMGQYrR_kDyZA+FkNrOKw#SP%ylu
zh5P%dtEFmWZ$Y?CI(-J-mccBFO<3j$;&m$nwJ>}hIvdGV7I9|lbKUji0NHqe8t9Mo
zIuAGB-F2DeN|FK_kXz$-jMdC#G0eIxf^qMc@0;&hCse21(gRX&PWTe;IlV9c(!eo3
zpyy(#di|C05GA_0IvIS*k4QtGd}8XRySKLH2zwGL{^4Q}y~wHoaiD7*$P^1Ou65?6
z()o+sE$i69f-B~q$KO{hE+9SB(M;`n1tyrH!EA_o!NC(5i;S$bQFf%OXx&5=<g;#W
zUT@!U9yf4!#9d|UNExX`W}{g9Z|69YPqL(fn{B5g0N~JjMzhIsuGE9$`&p&oDos^R
zs{ZR*j*Ep!XA&|c4p@;Zx=QHiTJH4Nn1X)9?N=-+j!q&#U@##pyAs`;zR~m2pk`w1
zUD`y$Xfncm^Z;xj`HDnQB|ysZ?ueFYR1&<RO=E9GSPcw9%53c)OF#aZa6XfbXJ9*X
zGm+-ha745F@J&=*#laV|GfAg?!if5iaA(bx4CAc+7;^{&=H}WTk&q&SYo5VMOG|91
wv-A<B0#42p&ONvhKLY;0Yx>_C{Eip_>I|-ujwR!oFP;bhp<|?7rRf;;F97b%761SM

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT16.png b/Installer/icons/AT16.png
new file mode 100644
index 0000000000000000000000000000000000000000..3c0a6b20a36fddbf8aec0ff6f5b501cce278c8f2
GIT binary patch
literal 904
zcmV;319$w1P)<h;3K|Lk000e1NJLTq000mG000mO1^@s6AM^iV0004mX+uL$Nkc;*
zaB^>EX>4Tx04R}tkv&MmKpe$iQ>7{u2Rn#31gTCIL`57+6^me@v=v%)FuC*#nlvOS
zE{=k0!NHHks)LKOt`4q(Aou~|=;Wm6A|?JWDYS_3;J6>}?mh0_0Yam~RI_UmP&La)
z#baVNw<-o+As~QW_%SLmQ%|H9Gw>W=_we!cF2b|C&;2?2mAuISpGX{Kx?vG-5YKK}
zI_G`j5GzRv@j3B?K^G)`<htzg8|R|K0?!N?nbbUSh*&Iku-w6{WT?b5#9>9%C|}6B
ztZ?4qtX68Qbx;1nU|w5EbDic0;#figNr;e9Lm3rVh|sE$Vj@NRF%SQ+<4=-HCRZ7Z
z91EyIh2;3b|KNAGW?_2DO$x?<?ibts7y|;kK(lV!-^aGyJOTXAz?IhaR~x|GC+YRJ
z7Cr(7wt<W5wkGcZmpj1FlP(#OBl&3xg#z$?M&FbJ25*7BHMh6cK29Hi40W}90~{Oz
z<3-9|_jq?tXK(+WY4!I57=3bsqRgXa00006VoOIv0RI600RN!9r;`8x010qNS#tmY
zE+YT{E+YYWr9XB6000McNliru<^l%^6bdSIJR$%902y>eSad^gZEa<4bO1wgWnpw>
zWFU8GbZ8()Nlj2!fese{00Cf0L_t(I%hi*=O9EjS$3LE4aCdP@w;V-nL9_@8fe!ru
z5ggn41DtKB|DjrIEgLMFwb7{*TeLPY&cHOtM27-7%Db*X(1b|AsRy3n;miBs{k#va
z%W)is2})qXni$~uIds}>+SMum^FAMLkB8TCnU7BA*Tai}z%anbWO&%!10ZyjX2I{L
zba_eh<n&j-LcKOn__A%P7Z?5TIiCk$H6ABgEZ{p!05H3~O|)1bS}foagaM%S_{hiI
zJuAmY0Mzym=$a;qrlIOOvZnQ%rxjFPN7eP=M|{d=0ayx$ncIm2@KP#`w*}j>s3()i
z>uWR(gDJ0fNMqy{T9pc2qu00BH~p}FaL8vY#*`%eeS@c54glX-f?zsDFr7l#+yJ04
zLPM}Ei|6xmq)?FMNQA{epx0YlV`;b?$8p{p4Ma&onwjYbUDL#Td&4b?D4N!vMOj8t
e)nUN@{!HKA1ccf6gr1=Q0000<MNUMnLSTYYmy(45

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT256.png b/Installer/icons/AT256.png
new file mode 100644
index 0000000000000000000000000000000000000000..600bc5797ee47890cc669790d11b3a2bfd68e65d
GIT binary patch
literal 4975
zcmcIo2Uinev)%wwVnY<9gHn`Ur6Zw92-1-vC5Qr2LkAH^07Z}{ND(QaBTZCFB$Oac
zgixf2Ql&Q~lprl6H+=Ue-0z+}dv<ruyfbI#nex1EoQaX%c`zp!0D$xQP#rS>08w8-
z03$v1VdwYGh5GT#O<UVUUt62s#}DD+=IIOoH&en>)S(>^?k>1_i6|?BYOE4nxe=R=
zF1G<|ykkKf>-|9KM&jAG@`56gNl_kOz9e^5M90^@zwkba{{S?<x>&q=U5G3tQWv}Z
z`!gS5Q+;y=q*c^zQR~5Ca;p#8_0UNHBTDaZjUVN3AR{VcZd`m-Zi^efzqP$5*<RZ`
zc%poi-uw+fL%E%?4=y2?2fgpBtc1@qi|K>6mA9X1UKNa3#QxdgS}E+H89c|4HLB(t
zYb_r1Vd_iOqj#Nhoey-!Zo+%8RX#KGRhI5mfyU%^M+aMd|J-H9d21~i{n%Hg+8nIb
zu|pLpPS<shWiC=aEEuO62wQO^aG!mr^?dQ*3*~n(#^ph1uOYY_wRv@t%uY+w1gZ6&
zoc-D`tp*|uwx$30XT{Yvbz^O>f$cU8eM4mYMuRW`l&RV_^jeZ5Rp8JK{G4Vh;?8Uu
zEj=Q#^%e&6<F*kW>Re!b7%ew9&4O;P!+uDxu`7a-=eD;`%O36*U5GED;sMY*8R+Q%
zl+!D}rR+6T!sG+B@dp4&fzullQlb$=6*2_q8|pGF(=afxfWsuSi>V@x0A1?<ZG@MX
zvv&ZX?dSX;!1)n>uv@@mem#9d6RXGzR{`LXp1zKzMaab8={0|g@vN`gWlbgCUa046
zuZEoT-$0^l5);431abJxCw87ya;a6P0>SqRR?;iw;(%}NZL%nFX?HUA^kNk7Y-5iF
zsiJrk&OBqL3B-(6m*{%9m6v$$`K_GcFjk`%tebl3y}xhXbrv$L9zNiY#A1%~{Kemv
zy3z29*sRf@00062`~biV0E_@Y2LLpunfYHA|DR2w+%i%<r9RJYq&t+Ew@0EL)7O7-
zs)vOJH7urO_9Zl{EgjwbIVsk<(a*9@kgH0TzH>e<_TdlltXiLfN6U-Mz{BtJzHaZz
zQ@98%H}3mbCu-vHuRhI^?qqmPi<Y~&!Ro#RFT~``v}!x?UUbc3`UwU<>d%`tJ6J8c
zT&Za|l6rkH*LAR0u?AQ0XmXjfp1HFydt&4%(!K1f#`d}hN3N&4eV8WKr^DTs(HkEa
zc=<>u^$G!`qo=pjOF-6m9%CuHxZ))#q)anU!52-Vh|6HO_p6ASV6EBgE1)6&g_wjK
z<;noAY|0ixTv8I}M9iBnU%v`Qe0#1%*Vgjc7;V{_Sg?DwbA0NqkhT>QA28==qSmzk
zrm*_`>l@`zX286>@}sF!Zf@yg4_D{(XVID!EOc!azP#%0dB;i^TP!D6IgF}x?KDWe
zF!TCffq&TVG0`}R2FT0DDlkjm%Wl#jnZz6)m)~UuUKhB%Rod9-AK#2bg-F>K%4!04
zyCJS+#4$d3=gDckBxtHyK6P<uh?E_(%v!Vrc_LhPbVNHa3V0J6A}&0z?!McK`fln*
zS>~#^OxN}-A{uMQLYglwhesd(){Oh=WO0)b#V{7JnX?Ah{yj9uWV{8WDgcFZA3kdw
z@LzK<n9P#<kII~fTgvy!xNUiRTl?J3Leq*XbZwsrxyE_0H{-H?%T-gYf$^eeK+?Q(
z1=qGWr?agiU82hI{6N}J;NQ1yF66|_GVGn}m+k(5pcQ~m#6O$%^CrdR`q;huH#?o?
z5~M4clI+{*AVY+!@O$^PlB$n8ne3BZzs(TNu#r>Fy4#bNl{E!&?9M_ijM>-=%oP;4
zX&6l;aF}gR&iW~2;d9_8W-eE+8m~UR>;wl4M~e3#;q4cE@CzwPIC#pZTgFDmA1ytn
zMbGqQ#@Bo_y+aF<33Yu%_DCGIYBDb0_NlU#JmgY@z3lke!tJ@{Ci|2eCgRX&CT{7m
zL*E9`dqG6*=xdcVZ|oLf=}=wn>Fr(dB|h6ux7wvR(=W5d6URnHzw_Ffrg)Nm(|+q2
zFp9;(Vr>DrK@wL@Uh?f!M+9QnerCeV?9ryVvB*eX)xBgP{5Lc+h&j2d_?G4@>3G1)
z$j4gks+91Ox;HEoE9>>q+KXunQ+g4=^$B&9r7k?+*e}p7>{_5<1}H-j|2&7!S;7sg
z>99@Z_nCp~!7k*+f30W>+8^Y-aSI7XAVt;IM(^$0RQI+ih6^7|7#V>}m-fpSvv0};
z{P|3*uQzRkZUT%K&&Rorzc1#N--lCROV=A|^J_nv&fkWcUAX_$t9s5hE*g+dGg!$&
zij<VhTYt2R8|PI)Mn2bi)eMqe+>bXNbjJM+deTr~7IFWc(3;11#U+%dP|~CGK#MDR
zi7<8TS6A134?gWB&*a!@^tw9-4@W^%iXAAQn$;R)>+y#f-aq*>km8?B>ikNqW#!Hh
zUO@W{*RVl};5&Y2+EC+SCurW`zab5U*RwF5zc5I&a`1aK;(R=e`26_5SCsu5E5MuU
zO75R*HRPt$O}y-KO4&i5+>L8pt*FQ_;fJsaDAVxs#>druGMnwA1a7qMBc2;%#NKjk
z*gl!tjl&c~ir(>~Yx62IkHL{(n1vGc2D4>xyMq?wV9!7XNy0X5_40Vi;7=I$w@W}?
z?a}6;Rr8bDpJwKSBc$`7MvV^oV1EoYL?}y5`3Yh^|DtQJwN;J+BkX2Ta&+SbOX^0q
zBECm;%qt`FV0WAtAi@5%@8u{it)x`Eq)6imMO9X=1e)SXW5=NJpnzF02&h|Y*0o#{
zt4U}aUZ0-fmv4uJx11CFnFQqrT3I={uMEDQKH?ej&P@Hv$G6+(CnlPf#WxhR$vu|P
zc@8B>4aJhztZ<gH^1}%Gm(!9L5z`eqe2p9Hf&-TG&`x0J=^*X}8cCkiLw+@D4y|Vi
zmk(R7JDBzs<&0wmv@r;SK|Q{;AT?XfNW3jJU<!`5w-dMF`cdi2y0w&PA<rTPs7S)u
zB$TQqx52@lSM@A^9H<Vty#CamoxUn&>{YGP@t}e;?h+9EkEEKvA!C4kvK)ykd)x&U
za$$^-QjD!Bd0uhHi4KAr7o&Y~VIxTG>&vC!aAL5y+{!@uAH(dlRk`u2aFa1;0<e{*
zQL}-^rApWec6p<R_A_uhFImEW*w_foIlk(RX{4p%s=uM9GDynq^n;&CzFpCI?#sJL
z3H!uE3k5t6fU&i8*7>?r<J!Dso~0h=dMw8q3SDmA%izR-&`2Zajww+7ejf57VnTko
z2=`EA^0R4N>+aZSj}KB~?7TlcM4p>%f2QR>(VoAN_lB5!I>L(6GC7dPiv(7}QlEt)
zo&%U3uQ4b-jPd^3H`#FSlb`<$v;YT(S#$Ucs+$)VKAJF6bvDh*0@NMWx)T>7h{1UD
z9x*w6wPPkc@U&Au@2~?gQ-LM$o=8%v4-d`i!q#1gOO_VUiG|7pLeKy9Zc*-KFlwOE
zDlqp@k?=S7B5{>q?O9&Fvn3T#(Cq~YSGSF$+WD;#YC%nNCbc8gjQO!jUEu@BcMDFn
zFrA|ohYIdx#?z`)&X7n~j%PDG9PF1AP371?n->~S29T9lsl(w(VBVn>X*v6H1aUt?
z+_Ewa_wOwy=mP@XdHs?ok2?dZ)NOvMW;YKx@_B@yrt89(l%p&bQT7`4VgfWo*zRdd
z5y0{wx{dSDqtu9!Nu;o>ll4j%vD#oI`JN`ACY?M$Ee<5v|Ko(`NNB=NCfu?JQRyMb
z0yh0?A_vTWf2R}}wri}@UB6Cv#47F}{(}_OajZBzDmdNWZ=pJR4mDX_E$ep&7hJhJ
z^ThVk&Q9rx(ps&{w<*kMh;Uo@Jl)uZTeJ{D7SjBX8lYYUPZOtnRjLDdC1{s+H4ytu
zYksCy4@W!kR~GS0cKSl5t;73Ht!pyLdMY&zCG!QAK!Bp6LGe;46;8V*7Z~3OkAeIB
zw?9iAOXn<n)|zoNj3}A<T($CzZLRU_Kznh4p=k-zWWBgAo8{H%jtHrH$%qp6CtD``
z{4@4V#Fi_Yf6^YR2E)ildrrB_D|-t?MZ@6-AKn`)&Lk@^GZVVvKRKR+it=?cKvu>o
zS@t(5Tq0rHsdez?v^3hyBcl0}#m1F@r<box(M&b5Q_*2aX+4T&SzRv_aP$Pu?Gd5I
z&O!qDifrIWFg2U;8YI4b@`<O=g#{YOh`if04n3o|zP@q5v}V5enn~~hK&;0Y{Fd9K
zoNoaitc$6Dy6I5+?Pu&=$#cgO9v(uy?94zY-%xB8@}PC-@T}kQ4+)hhV908)+7>%N
z>S$>UhyY)vLv6}Yd=NZiW3no;T6)aD5jC#Er7L;J&y<k5skF^f;nPKW`+FOwi+<*K
z3K;>bUH$51e%MNnM}o}x0*t6NRxn-h!+q~iI~iZJu?i>WDkGJ}1llz^_24xU`U4N7
zZR0KjBX*DQB=Zd1d!wib4IV1@N&b?@yLL#>7@2%I9Muv0&lvzo^E78lZm-s?V?YcV
zmn3-0sMbZue+%8_A1$MI=+`%#^J`xx@dKrn@TX05Njo;R9Cf*>dN-&XtZx^C^F2hc
zY+_Z|z}J9MBQ;Let8$dP4-ZD&wwtB{=s?o9LcOO`Q~cp0eJ)t=!H$7SB=Cmw@7?2D
zx&PMP<6=5ab(B*~pc6B*1{bsOtFtwyJuV5#GSVOewK9KQAV=}k)lE&!E(%!j`2J2O
z$7sn?FDQKb`4veA{4eSs*=0w{QF<wV;m+Td`<({y7OKF!@7jLI;-V@6N^LB%f7h$3
zQn#82FSWPH(S;bG00L1VPVF3{m8g}xWQ%zzAZ8%W7C(%vQpm<jN~8-BTFNX;b*8;f
z$7pRd@P=K$mCTBm5f{1eqMW`UWK2|FMB-kBp-}_N4L~^TqMPIPl^S~wtftQ+m)<Ew
z2dfH0_4<0OcTo}@6G{_p97-k?T$2*s{pBi%slunxnjZbBh1K8KB%~+xWh!e^+2g}S
zJZ{(u&RW^;(i_<W{{S)T9Ro|P6ljZI(E<|C)TTi?c(@=*L5H;0(LNaLc@;$+7w+bS
zRuvB7p^^b3YJ1JYL(X$~R=cJ}xE6fYP@TPG<45^e{&&+;Sh@%O$<4l*6seY*Z1G*A
z(J7Q3fz+d(u#$;I6(7j_M|M{*$OjoSK&qWA30Z=TT)g8RioGHl#3dba5KDa8k|RRb
zc5>)FBTw~^g9(Op|M|rv!!Km4QEit!@pB*%VBg)DZM!aFgPS2{QYc~wa+v<f7n*vS
z{L(v4DU7aXK|aA$gs14ejvn+6W<D{<6vm^9OG~~rE6!R}7z(Vkvf)O){n7%a?8oap
zSiEkPLcqbB%zBoVTIXTksB~{!czkUnM}n?RUGmcToI|U^2|ZVHUoI2VYyY}5%qk4?
zD%|6qY30b!wNaYX&e3%qmuYbLH<F^ym~D0N2~Xu0D{-3@|11NglnQU(QuOa;24=^;
z5Ajc+WSaWe5R)!gDk*OLWa?w~diTJ0fSu-d(-b|Gs5rG#<>}@Ql1a|)EsekK*$7eh
zI|H0FzmrZ;y)C~yhbGp02-Or`f50Hz<(*lmIAc;__;J8!tvNKkHU{|I@pQY;H<{eJ
zjkPv6V+r+v{ire}DE#iZL^aZOpiaT7?INZyAZO>)e{b$5E6vVelB+wJfRvdA1txA4
zPiT>=*M#6NU0o&(rG`-p5z9Xc5H7~p%;#E+s7*1ea~=U}22wA(+znrXL?d?emnKGo
z{;<0mePVzhJt`k0O5U#*b)$bAq#svYW4RIJ`ng26E+nV+Miy<`%_oFb0h`7~eL2Xf
z;V1UhXSBWKTvkKRln%=x8WI9%AUcBkdfjRj_qTWYnB;a5&Abj6Bk@`n(UCm6T#ei}
z<wG!IWrGYValY>CF%J93#=~b-Kj}<HlA6-g{#g&(m#SM>-xMPs=zUyf$1O)zzk{+h
zZ$-WTnp68YW$~o1DFzorr7p6_j+kc^67dRg&hVnS57gn&_gGq~Mb{P6R~1DwQgf(i
zqltruPJ4F*5$Y#AQ_UT`dnByISyJ+{6@}!b9eZG1)GcqSDzde>|BWU9KzD5a`+NWY
i&*Oyu*hUeK`4)*U#k>2rsOK^Ops#DB^Ipp_>VE*vf)(-r

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT32.png b/Installer/icons/AT32.png
new file mode 100644
index 0000000000000000000000000000000000000000..9357f807904202d76a9e3e458669b7f89cdd064e
GIT binary patch
literal 1136
zcmV-$1dscPP)<h;3K|Lk000e1NJLTq001BW001Be1^@s6b9#F80004mX+uL$Nkc;*
zaB^>EX>4Tx04R}tkv&MmKpe$iQ>7{u2Rn#31gTCIL`57+6^me@v=v%)FuC*#nlvOS
zE{=k0!NHHks)LKOt`4q(Aou~|=;Wm6A|?JWDYS_3;J6>}?mh0_0Yam~RI_UmP&La)
z#baVNw<-o+As~QW_%SLmQ%|H9Gw>W=_we!cF2b|C&;2?2mAuISpGX{Kx?vG-5YKK}
zI_G`j5GzRv@j3B?K^G)`<htzg8|R|K0?!N?nbbUSh*&Iku-w6{WT?b5#9>9%C|}6B
ztZ?4qtX68Qbx;1nU|w5EbDic0;#figNr;e9Lm3rVh|sE$Vj@NRF%SQ+<4=-HCRZ7Z
z91EyIh2;3b|KNAGW?_2DO$x?<?ibts7y|;kK(lV!-^aGyJOTXAz?IhaR~x|GC+YRJ
z7Cr(7wt<W5wkGcZmpj1FlP(#OBl&3xg#z$?M&FbJ25*7BHMh6cK29Hi40W}90~{Oz
z<3-9|_jq?tXK(+WY4!I57=3bsqRgXa00006VoOIv0RI600RN!9r;`8x010qNS#tmY
zE+YT{E+YYWr9XB6000McNliru<^l%^6CufoQ>6d^02y>eSad^gZEa<4bO1wgWnpw>
zWFU8GbZ8()Nlj2!fese{00Kx!L_t(o!|j(pY!Xo%$G@kAg4An*X}p9KO+jm#APHNY
zx`~i>(xgKtOxjTvweF3!lXiyM!LsPoA|{wflS<PjmAcqAsU?8agouW4X*tT3oP+UQ
z9~?v~$lzUa$@~6(_wIe}_vgJFBT15kHeP4Y=1T=o0oo4GQO{ZAd6WtT%EodWrA0x2
zkk2=~@bCB31$gK6;voE%vfT(Sq1WLcdM6aZ&OL9#0JmZvz;aye6#Pggs}=`<R3!3m
zQjlI>SG0e9`V7VKap+hU0H8A(!Ma`4GkoX`r8WImp|@IzX0%$I)o6Z=mA2yY@iCU%
zZj?T4DMB~`3%D{gRP(EXqoXLij}mR4^W&P+`R85mZFiSi+%h#q`4fwab;HVZR0Nh`
z8f(MU@-i9s-1WeA=Qicfy?g~elWEO9P!a^B9zP+v&*egAR~LF8+^1_~W1}?y`<t7x
z&}w0_+W`QVDsmowvCtZTWH?O5mnR=Wqt^ofxPbvMhI7Oxtga#(k2kjs53*Tg=bp<j
z(=$lT&Jryh(!1i9XcRpbOY<VIAB$BKL<v%!CwEn`&d;MPip>Mq3j`XPEPmcYW_!Ci
zDfpg9;4mV$pZU=wOoM|}6SjOl@WIz|6joM9q5c&>dTotz^pA|dXf{`$khvT_o&ZQs
z&)~@8L8rlR`V^E!5edJa7|%OzDlQHHrV}TjV(XqJ0-_+GZ(@QNFWPK1Cm4)IT=)BM
z#LGpg>+YtWv5t+QI6O@Bg*u(WsQ(2jfC}*61N;O5*v2mctsO`J0000<MNUMnLSTaD
CxBj32

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT512.png b/Installer/icons/AT512.png
new file mode 100644
index 0000000000000000000000000000000000000000..79fe26fe6dcb36172371fb3c17c45bf17118feed
GIT binary patch
literal 10773
zcmdUV_dnI||NpTgtBjBkA!I}d$H?AfR`x8r?0t-kj3k>RS=mKM#xYVxNLJ>F4zf8m
zhx5Ijr_b&E7rcJ?*6q}}T^_FMaXlXQ$GShC&-8WGs3=${U@#b!hPtu=3`PjP62i`r
zg8z2?M~-1If~QVOO8Oc~N*s?pJsh1}9bmBQ$sx(I>YWO#T~>xg{0w9=vA2m!bs3da
zShX19t@A%JJn#`|+&!Ot>l&ZX^9Yyr_N1<|$oSeS>Z%BiLxTCg=)%98+-JgkA7i(F
ze`4R<klmOiP%P*$s&%=jFW#r#WoIkVz)xy<l_SjZ@FxFFL%qUFVq2_M2V2{FLLIfu
zgQrr*Y0W*bJatxw&o&o4Xb0UNNH2xV(+X%%Y)frFy>sbWDEjjn=JL|pPQpP-=ByF;
zlh}JVeBV#ESJ=P%BKE~bW%RmL_vebov-1@u&J{j-XC2m-W*T0(i|6L=DH3YLzPPKz
z%y2LEM_IBhr^?Aq8r=IodM~wjOqml{&%aZQLLau{e)}~z+64CMP<##BxHNUfL`2x6
zQ0qR0`c^*!C%_K2rH$>IUT&M_UEZr_lp`dq50781=h-C4kZJpoBE<ZX>&S^Bif}7b
z6_rXv>Ji>5-q0{6r^_Bj=~EX>#L7zeN2S;Dz~4{rp$G1@)7}9QQ;28e+wTRAz%8V<
zT58HL9Q5~1OGye?A%CoX-wOs4;(|T|{zdY>V3EvQLq~;dk&uj>o`<PIza1<wd#l{@
zR`PIjb8z>DDS0~Bcstm0_&Iq$;!xAj(KijJz667Dz%-Qa82L}G&jh&U9ON!-({Qh(
zbDP!J=cZqg@nvm#{zt%f?RNbtmqrecpa_*CX(ZvWtuJGwkYnvHBBr(dq?rvE(OS5L
zHR&Un%w_o|i#Jc!zHGZCr=m|1l5V%UZU5AGM$b1Jyq{DknDVQb<_dbJ*$P+p#8x&B
zl{6AV(}Nm!WQx8DgIV*bC<C2Iz(*f^{);aV%-=wJ{Rdy@!8Qs6;Gh5C%XP3#7!-K_
z!I%HaR?t3gV6@<d|G@?SXQ=<+g8wtry|mnO--XlEuQMbGFjDX_$M<yG-^d8Be5cO6
zu)tqkn%q*M-NnsaGvVs`oOfES=brYEwf?fdd9)2J#n#h7rJ}U7vUfnL*<7Woiyo%^
z{L%Ho6JEXE@zJ8TIWA2a%6oDt^Iui_r)%!(td5t5tUnn2p2cN$L9&C58ypt0U$Joo
z{;uteNRx(!j$(_lH(k(p$FH>@O2)6Os=#jYb)+k)_-rbv$IQ<x<f&QWmD}n}G%m=&
z{_zOpu|Uh#m>E#=>I<^im`>@Fc&qLm)R~M8jP8_mWGFx5Y;~~Cdbrq$kANOV$I^<h
zl0}@3$K}c?F(u`1=$+kjK_RT_`um?IcXiu)&q*SO`Vl9a=ZG?|sU#)_?v3Lr#uoZY
z&Ng{MQ(A1}mA%gpryik4^5Jc`Bc$|p9xnbXDH%Ce-@Cz*Amky*9azeBF_AY~2;70D
zY5_eA-YFo_`D5la8%gNS<qm(vcG)2BIa8#8C?i*b@R5+YK4wuc0>(3O&oqP7L+8{k
zk<hx>6lZ7m`DoRO?u#J?H=ps@Z=U#0@O_?`YV)h-tohkI+FwL_%w%Ic#`Iy|cjMME
z4v9^l&&@k=U;MniY9+uz`9LntTeS4c-|InynVduISDz7vm4tNo%H$GnCv?OlbqCE6
zR;!CLGnd}F3<R?5BV=Iy(#dl+RM>r@h)mc4HLJdK*0po6VpReW^3AC8y^ntkK4tQ`
zExxjIffxil#!QqkWqgh!mi*<uKUxOynggVj7bwM$5Q?=~9a_5Xpxx_M<irXD3TL8}
zO0UHp+ADu0w<ApS@o_3_$iNHdy&QVi97BEK3vnMM8CuFG``;?z!KRBVDl{UKI8?2~
z*3OQYAdD~!Yiloxc?H*?O}V!AnE&x6+Z_;19LO(R7moHfxMO=>s=sS!%3+0cup+Ip
zGTlY<MPw>RT3Ey-B+%mZRpLo|xpep>BGdlQj4aFNE@e1~MD#NN(pHP6bG8(_(yXGQ
z%n=|7we9X$HFi|&^NCK+RBrvCg^scgEK1P`Fc*r*<lNr5G=f-X`L`Ms6MgH`s!~Lz
z;>Likg8|>a-`~D@<k6e>$(&+u4{xkuHDIim9)w}uNxvD!;<GX>NKKh+`K@w^YZFSe
z!)-wy4NLuBLH8G_qwIXKwClu!(@A;LS9CWo>E9}3D>9mkUv6ofoMK)}DdBf`(0Q=o
zRFQIkD@m!YHGKADqYY9u4jYQG;=IE&{HUVVFnrb$uhR$!3rq<1<{fRn3-JkkUI0#z
ztTW~Gr~F?|vxot*Q{9rc`Ts8K32qYb{0dhr{DPdPQK#Pq-h@1+x0q6K4M^@-_|K_P
z?oN?&grJI~d_ye68Tf5nRAysd*)X|A%W)1ER-2j!w@~tTn~tUVNhJOTQXNW4Ea-iN
z<%-YkRE-jH=y&M`gU*^oJExro)WSF16RD^#LayR50oGdjdpDxn@R?S|C}NKvuc|G{
zX=q~bryLGU=E<XypFP+9tzz9V>}t5hhPx$(SCM)6qi#aRIys<Ieyufw6yEHL$3y7Z
z&ESKojw+#u>#)`VU2eOZc)QfvV61G&eSMur{#=C=hv)d;zJXF>zn~o6O-a^z*c|=r
zS6rOEz~VANX3e)(GeSB2ss!&ppRJBFG<j!nP{g9<^x>=${d@Eosqa2kJ&z(OR#ypW
zQ6_kQSl(l#`T8}RJML2E2QD>+PY4veTGdse|9(q0kec5%F)lq;iT^}o?enMo&9Uz~
zXRKn1dUwd$r&1xOjcoC<kfkeQjG6Yes31KrM&Z{OWCr1jhu92Zv7>4QD(}Wya?;M(
ztEKNMM<;Pxo8qf2?3zVIH$+5+G_}M})Z~9==baht*VORgR^3RI`gc^Nvy8?E5mn(<
zXK^AFBge8$;^X!W1AmfZ!IphN*iVX*?$@tS_o)}%Xc<ubs?T%L1Y7IUY;lmecI67c
zll#lK^%{nW8#$5v?xs&1iX3lPR@5h69<2#()D++^eyH;+{fG;G``uM=-CKU98Iz`!
z*_Z<ikKujew8cuZl7Q7QzFcj7d{wdE8>cSyHxDtb`n!TU&An)vNxuEVN)%-Bw+ATG
zzTPzcyqik(oGvJTA%6asprGu-Kb5NzbaS!s;24^(W@shLpNJVt-pa%r$7yLAnHzK{
zB1#<xSSMU1a&g;wpXjz|1wzlfWDh1?iut>W`M8u{u)q9}*{ppg;Qyg^X#{t)L~L`_
zt=y#4^He&*KMXTkK2q<=jl}Z7{8QfymL$&vo$DZ;rj8M1L?lgX@;f^l-SiW>1HYa_
za{iN@GC^B`$kCuVp~VaZ6(#Lc<6o})d9pdIY)n*0+v_m@Ydp9tSJ`R{LzIKA=f@FY
zX&LqsLK2vs&EJ75QB9x8JCxzMxtdSZ$Up$lq-c~ZNIi*|!tsa&el)!EFWR@Px7C$f
zXPU@6?0<$Lo0kUgNrcVy_s$^lwhm?SAFtb~v8wn8vP#n^LT_v=?jtp#q-Df^PH91j
z;jnCb=<Xh(Z3yY;K&*s$C9Q&A<;N9iX=Xi&hPRduE*ssT=Y#+sd^K0S`;X^^r#(?L
zY(KYJg7Cp2oIpkG{I`>ayn}Fh=G8W6r^18-vak=CiK>KD2rI;46k!V>gaWA9ubzvK
zWs@n+H*0{>LEDOIi)CUc$TRoUt2?i9rQn0A+!m83PUYw0<ofsp6rmOTQgT9@ts%rV
zH@D;S%5W^aa)fVS_r`wY%Eaxma-BQx>F3Lzs|j5@Y&7`h(dM-VoS^fUIsJFl_;gso
z!}hGZ;oEcyuB^dhI1X{fD~MYVHrieZWR%rf8L&7Kwgjaspk0^Pumo2-s4aU`ZQpaT
z1yh^nw2wV{S$KbEsr;nn;Pxg*{P^6+&QyJAVe=~y*kiIb3enP3xU6h(>nUn?-_Kay
zV|Ekg*BL?LjGd#okG)Zln@e#V3|YvU;ZH%q3d&)&0O4kwmVI)(3K}CM4i~4THCpdP
z7oTTAOh$^9@`}dax8otE2VuNA?y?_2f@&6c?_H{ye#3^yep`k$PK^`4pKqzMB3n%7
z$oQ|1ZaKXVzaM_ZS=}`&FWzkF=jj$5n<!2Gm&rv=>CW21q7T+?uJ18ON|v9dnX)yv
zuld$_On38i+bVxukPF3E675ra52oTgtfbwk^r(+Fd^c~<@{>NpWr_F9HM=soaio#>
zb4@@b&UVJ=ge1Dj`1M+v?EgSmT3S@5OQNjB?4Nl{-wIx$hB9sD=(}$PLoIok`^TD$
z!UlbD3`tnA`nQ~Ql}q|>s#n)nUfM9>H<VE2u{-WTh)KE|xp{dF$eT*~RXNX|3FUD1
z>6>P7c6R=g>UlJ>n}U<B_b|Qt<Oz^^aKCiSZR!{O{kOb&PFr88pzJJ?(>~R}Amuo#
z7nD(LStO;mbp<yj?qXkFW^ZS|{J%QVcB3^D>(?>TfP3gM@wV*v_}kfzxYy#l4KjIa
zFMD!tfII6j$PeE+*{J&(rkYc5Y~H&bLZGj8o@&nOPv(BIP<C8p$qmIr?O&v?&a=Vl
zoc&{ds{j?M^Oxkdk>fSCQE^j~zc}v0bE!cm04aCfJIhFOW5eALb>=bKdKwOjkb$vP
z^;bWXO^Q9URG`tFf8~f`=CC{V7;zFFAgN<lFv;c#P6mCnbI`iDghu+uZ(OLO9mpj5
ze}nTv%RYXyn_SKLFlRhEm~$|KJ9~A>%4iwm@!@XGLBepU{Vh!>lB4+3K+Jk)AG1t(
zv7Y8=skl{Uw|3?$OsLXa`58No&jC@+uGR{j>>>7(s{#R`HUk9+FZa*$wsju%xAi5s
zm|iZS|J|aS_etlAgJ~&4y|bL7NtZG=r+`J=z#7SUqdEt%93HK_zM@~hm>>kuXB)wV
z2HTa2Tfa6Y1%O*PjE*|beu&gbaailVn>dZs!|UewW!>a4E_B$^YN9t|bay_U4ub-*
z;cV8R%P;8g2dm4OKWq1`n*c`g=EXfweLKf0^&oH5PEHz~<Tm_*-zPN}N=(AHZ3^wp
z{_&~{r-ydKmZ)Lqs!k3?4;tJZcI=r!I{CZrhW7-$QiHn_cEkysxiDF$=L2?ga~bP4
zG3zAl{kiH11{o+faiAQ2IyEM-OX7x*;&iz9KvlZ}N3pA0<qkiWjr{#HA%tKo;H>GW
zFDbY<mdnV)w%Kd%Gtx?ZhIu6J?uSYv?huVvK}kuWb+zd@>!PH4_WrSBg%wU4`2Ht=
z2&j~<g*V(|l(LNC@Vgm<rn97}4<K_2<zEk6P+C!Lr}%rEn3X!}_yo$}99AlX1bdsu
zKR%9|Vz7#J%~(v~*_AHerb!9Wt0HD#GB^^p;sL-63tl+cH7p_{)eZ^)vGwW&*e$CT
zO_Ej_oJEz^wfY#$ZFG3uG<Yv!ynVBe_i@TsfW-oI60>LL_20O1#ZU|UJ@_X>zIWi_
zKgb5Gs?2tp<Hf~zsXT;;j<D8&loTx+l#W;anGF->m8<|4lPEx{D+sKK+LE=+@;rH~
z(W%z{#ol=@=`<#GUc7F}ao-lC>}Pur^<|p<GtB{tNoV~<6`vpUPc_sw);y&Ku$<C?
z;BjPI*kGDZM5YrIlH#+w$)!a`M~G~XP3Q~x*O8*TQapLM2Kl`7&Rizz-3*?e^*flj
zlsmTU$V%K#4=pkLpdSlqS8T?~lJ@PNqekU4px`sOo1ZRd_RIc0m~S2(ZdgFj$aIgC
z^xzL%OmM2M4xAAv%lQJ#=44i<sj}ze`te4~jI1anzCSJ2;>k__hEBmvqWqOWVi-16
zU}3p+a)NqT>yV+FVfcrO3kp&Z3owyjp6qTG+A98*R7uMF@jLPIzaM}EVvN~$0~lN{
zzkI8<&Sw(wd~u=A0pTupStx#L!GI?h@5j<~-6Hg|=m8q}{EDF$fU0q=qtk$l_POs8
zXm5V_E&Om`=mw|#(dJIae%dt8-GBe{EqRIJnX3KqOxjGrC(AX*)%au;R=U{aKQxkp
zbM%-gTj7HrOJ+oO#T&Q!Qe75~pISD;PjK{Mr7tzFp(VD_$mQEWA}*Unyyb`|N4T#$
zxqxC14~RA+^1VI2ts%AIme#n@^3g-=&XKWZT-?anO1W$68fPG`HTaS+)Sb5(iBKxd
zdM!aUHQ?mAlN8wTIAF)9#fvOQBz|zt2n@9lA~X=A3`u>p2xNfd9gy|LtNZ%$DnFKK
z3TmIj#tn7G(C;2WF=<^xvVk)FyLADWZBM|ZWbZFZ?E^>_hy?~7V#gk6E)2oXg*++A
zJ;B@deM89M;`$<$+E$!U&dqq#vJspWZ`GccOzausU)aw;vde#9QuTc^??bbBC3M=4
zb|s44eZ2Da%*_FYL$ymFhU!2ycGS|E#l5N&FfDucA(`sv#4-ED$>9@E2se}_nOI4`
zC0&Mz^#GigiR7(!a~97@2PA%b^RrOm_fn2eOzb&mCj%y{VGu4|?z(h-{$X84dfDFI
z_(bY`PU@0qZFnXHxZ~umMN1iaCJ0DQnAN}goS$zUI=kr5XH?^V;j);PhiOKFHoi~b
z(UeYmIkhnV7X>$v@+w|zK9$H3>wD3eug;+W1rMD=u>ZZtCb?Vdd&U*!rC(K|_MAU=
zyPKYTO>`Z&0b1Kzk58qcRIN=9rXIkffFhRdxADCX0{y*@>I~IY4<j9)$guVn8bF}k
zsxWx=6t0$(y}ysR3%oQ|DbStQ68x1?e0{oyr(bk>qVz-i9Vm|cO|BxX!drqs*p60L
z7@uN~NRDbj?#y{P?(uFD<A9f8jJE0a+OH_(#nr7(XN^NKIX;x1z1iI5*gyZ|bE@ce
z00X#1iV#4C*Y7Z=>cO+=;JU@5A!K8!v2p3q6w0yIky*-H9Sp|!4IhLD9nkwWLf*P8
z@yOA|rQJ&HWU{Wt*to_9nYw?nAnW%WN(Qf^lY6?oR#FqXKRH!@u>1Br0s?yWqT^^w
z-_tf%xfsJ|k5ci1sS~`ov`T*soxb#}`3IW4eWNu2VmT68TWz6<fpEM{3Q66k^>?u(
z0FkGQ{UlH^sT4+5%r81hY-E5F;JkWJ4QNXdIYG;t85c>{yYjt*Qu}M!9P)6h;U(|u
z5)!JAyC5E|2kDXla*yqTruYrfagN;imlx~YCciB9i~9b4LwK-(-|7#>s?m0(2caY5
z`|d3aq)vx{pGEu@^{G^^x<b}6DLbK=I?Vhh=uLTEV@-{$O7`~_;qu6udJ`%c-}ldI
zDR1Y-J%0|tQb8y=|0>nSEa)Q2{g=5x<Cp10G__u4Rr6Hml|yrrT4aMezJv+MrGSdx
zXd9&|&>!?@AR(PmVtf3Pg%EQVC4?ZjHh=PqDUe^UIjIIUm5%?gZ1bYxfw1_0j0jx&
z$I@^&Z(e2-`ipIGYpehDFI-2fS>{-y(|<*>EfVm~n~h$@ud%!uM6$A=(JgMS*XHNm
zd`1U<$=>$I8{guGk=2+T%^Plif}iYXok=UjB>nv^kBv;n4zZV(Rq29GDavYAl)0<Z
zW(M?_2kf|HH4G6YyVTncdDt)Xoq53hJp1IB4U4FzrhY{Jv!~6tKZvqTNt|AqaP^Cp
zvR?XXtlhz;fctzwPF~~h*+v0WNgjAGqYrC6qxiX&f@>98KXCcJ`EcAUc5r!Q$E>03
zDUBxKAxmE<DaTDPro5J2gJn*3hZFrDo71+rYlW=()ulH<AX4}Ju>#<>piHJ9ibKnD
z<e(M|Ito#Q1R!KMhxFA$*n`_vIxj}#tqsS1!;>~48Nvbq$c)h#@oN`7*_SGaVT{7C
zWg|^@I=wR@wnEghekvUu!M#S9a&+{qk4s!8Z0Q&ON5ZT!!T=WsEJ_AXXev<y)GIM;
zl_AWC^XkD|=k!?&H<dIi3k~r(!mvFG1>m2*;Y1bEH~0cEsQ}afL}UCgC`K0(mU(dm
zN%OvqcqS&yheClLP%bHY_nzFF`~j*04Hdx1Dt%aflOKar=qrYpB5r7)O%os{Xk#I1
z>$XSN{X)zCwt?%G7zEQYg4u136EF$QO@6hLVTEn^oh+-Hyyw7_6iPH+E#SK>T27^|
z83e~zd;)olq-|Ps`6K+>^X(Y~7{Hc|L|M2YSxdkthp>lsYZBd8rD6T?Zcq)9ZN{2b
zi5$@!vOqoSu2TevtHo4ML7&|IbV>tP$m`7azpV`k26se8vK;#hms7$O{-%Ub?0Wi9
zg0Uq5bTK!NX#B4oe6V{8y#Ad#S6lRmraK=s_v7&I^*f;D-(lJd6c60u5TJy2d@9#c
zYVe=~#H9#XrwG~s!@hNI+QI@)4T8oysRz;a=knT`5yW$Wp8YU-W7Zh`h1}$lKjr_3
zLHe)`M?78G18hX@Z!Ux<2Cu_Nu+BUelQRks;k=^3=vas|24gRMRrsL1DYn<xgwda{
zC#M08^nS(x0@<dwaM<%;cWVamo6kR2w`l$eboVG;Y3VY+Sl%=K%|}elYJ{JNDHP_m
zty(Kmzx9<7>RlBR;TW8#B__~^QD}jBk^@w(O?zaTaq&-ZBq=!W#fNYLs*v5A0u=Db
z-{Ge$d;aGjHKI{EXMG|g#Qyc)4D8J}3`_p4dIM~=D@~t~@j$k|7c0dA8h2PiU<(DC
z)OTk>I*#D27l5*bEY|G-z}1PCw^rQq_3IO%g!DZU0F+OypRfSA_8Wp2rMq&5M4-!_
z*jk@rSyIw!dm6_kpWmJ%2^j*-%axK0X<PW$=N~Y^S{|U|*i&#}8aGEKO1rm2fWN}9
z!+^nwL--~d6Z71e|LL$7vd@fPe+kGC8w|ThDZnM3AOx~E*(l4Brf_YA6s*z};O2Ox
zBEczWh#W*koresCQ38f)s!aiM^jkhY;NiywaG%UjyVFyav&>FJSSjtVCR6-CN71$m
z2<_SPms00KG_0N3yxLzhKOCTi#4VSV6<<e^-IubaILa03;<^w4)Ba-lNPa8!Tfy(4
zf^_qWmG!CJ>7Y%g{kJOomG54-O89OWf?5nh7A@<g+JeNU{bZxbhbw~lDG^(qSGF8=
z=^PO#=du8bb$`*w3HjsXvD2IbV`Hnqs$7oR$*ECHrH9j^*WhwT5~3qUlbt&mYGEi~
z)|@1JjA6#0+TFPSHVuanK3b3`cU4gdbnhgs!!95>5?GI~P^(0O>V6$&=<#<<FfmWg
ztx?4}a49HzV(hDX?zR0I(U!wb_Oi?bcD|p>KelpZAX62mL$$UeFa_sooaT&re@9|=
zGtUTUBECe1;*Dhu3<|Wj7sX5Jf?4XI(<0sM4TeFu+-6SEcg0?w7El%L)9SQRlz?;%
zwtots-ZrufX6~M;2Ehh}ei^@a&Bf8V(j+XGgiV%fiio$*eHecDudxBGY%-qjs-IrR
zz5S|MS7|jUl*^eW_OQ(68+Al?`?@Dz3ZRXEFM|KkGc7#`PzHXi9qmjM8SYuXpBmj?
zDJM?u{4v*wPjZmtnN~(>&F}kYH;?B0mvI!n%k<8mS8@=r<cw8Qw?tmWL1_<EnG9gf
z2^r~;nm}<G?>OV{uS%oWr^q?Us{4xQ$#@Cq!+PjfR)@EEPi{1bjFy|0SGD9`kshUq
zowuDO^`{I!CA&3-0wXeswI?Wyc`CfP{t&woKw$pLAAU1;v}D{G$Z!X)IJuc|fDM4W
zlCpaZ@WCy(um#2<`)y8fVXJ|SS3C>i;?BS76FEG$8qGD83-FrF#!gkf7`ACt$!fHT
zbk5G1$Q|B$b6se0H6zK!d()C61hiA2d+Y;w`@=jM`O~0(rqu#GrCS?tx)sz;Xj~B#
z#lg16lnACU44~EN!=9xjbfJ$9?fL}OC*rk6KH8JZcx4-pjFmlEHHiSJbHTvXH39P6
z7v^Rkt)be7l?T0EeT>HaulomHIYO)uMnXY1UvK~4!yX{lT{w(+^>Go6Y^+8Oppo#q
zxM{DlU+=>?JRh^m2tm&hK+n<Se~l9rGbVG~fHgxIbk29J^}_GoH7t-aYoJx8KFw8Q
zpdy7bg?1ZV@58+No*1j)0ZF5FG_tvU3YPQ`bT@zqfZXpd0dX@`LaRDw<<*8$<=C1Y
z$-SM$Qp}zXadKo+xmK1pm?|jR#G132n1|XnWYf)Jdo!%Y0PXQBIiR??Sk+5nM?yg;
zQZ30Dj?eU4yTOdP*zx1V9DWCk)hsllm?58Yc*a`&U&8|qm0q?t*x*vTA$e5&sWPz#
z5l~T8pky4(B*L3G<f8#zA((^S1!(9i@)p$qIQZQYb$m>J`|%IYc>NZ~x|PKN2g$|K
z8fLLu4|g0Rx@``BT#X{bmk2mB6#r{zq@=yDAQ0lq=`XJLX{LICCp(2KI6*1evIits
z1IqKfKA;iAk-HaVZVvWm%b1Q%WzlBht1KAIfY>2nOACuv<BbLwn1IUbi=uKfmwL;~
z#h3Q_L0ojVhTum+a2vQP4_7q<FHR%7$&M@qM-kp%EKy9fn95Au?b6Q72K46x3~;01
z;SBEQ0?J_cXVF>*;mz7g9kJQK6aY_|T+IZ)NPx27wza6!C1m;D{BW-tS+x>P>T45z
z9Z>vUmO%i=Ofx6XRN-t8LX*<*ba+R03a;K2P($HPK~W6^o?v<f962lSR{>}PwRFz}
z%sv|>0yh7)n3<XJ&b}WxXN+8o5}p~LXybZ)UG7A?r^!$7686;<8Kb*qebhHT&YM{D
z1B_e^K8%gtoWWbd8eoJiUiZue^*($GM^fgt{y@>6a^p1{bMzg^Jvp3QTr9tKk{1-K
z@3p?_L6B5{!Lx3&SqbDWR@t)cWRTyl!%%44t|8FLC16J<&Di+E355}O<dH404d64B
zQgX}x4=EH;)tV&+D|I0F79Hy<?{^LeJg#&ZQ~&PK-7_;&sVxn-5t83D5ur#`YPK5l
z-^S&prBwxyxu(CJb8^IY)*HYL+aqJ>nb~+CACdq#$RK84LTp8#7Rb}Smf-@G6-L8f
zsfd%6Fq7hY7LAI~j^{x|+R&5xVE$`=X|X)22T=?K%D3UsqSUV06{71fnhT#0R(7(o
z>F1k#PXqg1-5kcVlywYK99#N;;hAR<3Ukl^SYZiE&{ky=&^xQ0n(*Pd``~VVapGm5
z6re9RA^P%O3#{-Wd4Qn*3DSGQKwQx5>vOTJG2?PT)n1Eb#eRE^FR9iGgtRNGhTkLD
zDaxikYKXC1o_NAzI6P8#-vg1v;du@`N5FH9CPJ_~)uve=-gjA^WjJr7SJp5veE6eX
zT-a>hUkw?yRK|~?1O^)uf(<2K=(}=eSnpc8cq1Tu#?e4fz_i!I4ESh^5oSF{Xw4KY
z+Ecio__}t73Z(2Fcd=6D#Kf{c`fpx=)T<rjM!6rTF0^l}_y&fZyJPUc!mW}_!7Xu8
zQuJu>J2W4D2X>I7286uG`rd@V5yxL5_RC_9TVuSyUyk(+W-Go<3uVU6{$~Nc**$et
z=6o`0aCxKA&p!O(+rm97>5Pm=cUEU7i{ILA5Q3S*2u#FfKC2bU?oOqQ*yTKM454#&
z_N{|&2whs5n=V}xX<3IGR;L|N!PIDiK?GG_x+fWMIT<$t!voA8cC-1WVIBE1FTvnb
zAKxqnHubKq!0j17<DJ}wbAMbwNzQI?h%ZH47#YkdnUFsuh|jf%^V`rLjtA@w$?tOM
zv8vGy++m(}(DTogWd@bF<LbKo5_w|{6_Td!oMkJkb!QLd4QKMOH*M_iZ%HBwq_omA
zk6G3o93E_6LgbfKn%#S>u~2U6G<ve>bs&a9m@-G(Xn(VMrOUG*=cntpzdj5)&6fv3
z=Ow>fY+4f(Ec2fu>3`5_Ub#9}8ZaR`!Ax(b0iJHX_F6(OFW=pomg=gqNV!lqX8Jqs
z@@3<uW%2%?Rl$D5o^hXc8zl|ZvhTx^<IhbDa(<S4NR+gTrB!uVnsE7(KdOS$trp;o
z4LGwtj7<={wUVo?IecQLt?*KUf#Fj5r^2T+Ex!-AC3CfV!D}ps-)#*)%((XqjYr!+
z@3*ArUOL;Eq~oudau60=2thzEFm+FLs1ieSA^1ZAKL5d&H_%@H!OKz5J_`TQ%Tdri
uVgJ#~QTToSBU|BZP64~{|L;xFSvZ<<4#U-x2xd{p@fs?+%2kTi5&sV|jd6bf

literal 0
HcmV?d00001

diff --git a/Installer/icons/AT64.png b/Installer/icons/AT64.png
new file mode 100644
index 0000000000000000000000000000000000000000..0f145879cf5bcb01e66f5373bed3ade0e9c6b9d9
GIT binary patch
literal 1552
zcmV+r2JiWaP)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF0004mX+uL$Nkc;*
zaB^>EX>4Tx04R}tkv&MmKpe$iQ>7{u2Rn#31gTCIL`57+6^me@v=v%)FuC*#nlvOS
zE{=k0!NHHks)LKOt`4q(Aou~|=;Wm6A|?JWDYS_3;J6>}?mh0_0Yam~RI_UmP&La)
z#baVNw<-o+As~QW_%SLmQ%|H9Gw>W=_we!cF2b|C&;2?2mAuISpGX{Kx?vG-5YKK}
zI_G`j5GzRv@j3B?K^G)`<htzg8|R|K0?!N?nbbUSh*&Iku-w6{WT?b5#9>9%C|}6B
ztZ?4qtX68Qbx;1nU|w5EbDic0;#figNr;e9Lm3rVh|sE$Vj@NRF%SQ+<4=-HCRZ7Z
z91EyIh2;3b|KNAGW?_2DO$x?<?ibts7y|;kK(lV!-^aGyJOTXAz?IhaR~x|GC+YRJ
z7Cr(7wt<W5wkGcZmpj1FlP(#OBl&3xg#z$?M&FbJ25*7BHMh6cK29Hi40W}90~{Oz
z<3-9|_jq?tXK(+WY4!I57=3bsqRgXa00006VoOIv0RI600RN!9r;`8x010qNS#tmY
zE+YT{E+YYWr9XB6000McNliru<^l%^6Au+%UTOdU02y>eSad^gZEa<4bO1wgWnpw>
zWFU8GbZ8()Nlj2!fese{00ZbrL_t(|+U=XqPZL2D$G@d5!J^ef2p|HL@=GEK1fwDv
zA%U2vCvJq0*n?N(Z_tyTObA7yi9!j2h*2=22T@T_kY5s{{(#a#DM&47YYQzc>&*!4
zPH9QoT|0B@zVF+&^Xa^qd9zs&!!QiOxJ4k$8wEfCPyiGF1wa8%02BZPKmkwy6hK%u
ziNB7f@o~H@D+6P9aB8HP87Ne%5to(4sd3uvcv@Bl*Z8M^cUGK`fRe|LurD!j=Of^A
zOAE2{0I>GuE5;idh#IHO7L?8dfM<Rlzs=^Ir+|HF3FbR@x265jsDa&L`M>4><M41m
z^}Gk5Yj5{W|M21e1K_901Zzj9Pd?U;PW+mmXE%yOLG7?;Q#_wnfw`d}zXHz<4Pozv
z3tO(s<Kl4oSr^<c7tw$8+I6h-_7XM6+aDl8DkXM4K0AA70Ce~6`2|4N+KOxz003|x
zC&#P*)Zr|z02C)q1U3aM)6;Og?(qwNz569B27|EYfZ6_jPTP?>H6*Er$g9D?fN%k<
zdpyu<H0-$*Ekk-q36fPR;yv`u&0yBog$cksISJ?JM^;->RTUy-GNhb3MZCxAzz3Lh
zI$;7Zym`ZEOF44}01%^8BI;;9IgR@Iga^Rwa$)AyZT5mEJ?(F?6CoBuQBgq#*{FfX
z?G_e*?^-Q9MkD*buTnw$&)R$N*fDZ}q}9Uw?VGRw7<#yuzU0Ef4Zrs*6o@V^@;jY)
z2f*cUz*tkmYTI?P05MACmg}kI<-~i=)ZK*J=@bS4)7Thi-Je=fv1M-!00;BQ6XE*e
zA{HhlgaN?t;svMeKwci}b$NU|<mb<kM?p^yF8~m0ffcJ23+g&f`{0cmkjmw(HruOL
z<XvHHEnJr_AyOveF92@`8O!(E{0_|69WafJ`BlIKEd}(QPXZd;(A~}7Il#8Kh^3a6
zfCgWvRb$m^<tKo-Af4kGM@IMwK-bn5ln2mvb@30t^6V^Z&z=Y60W6v({0`x<IqNE5
z92_J%ogW>+?%3FE1?aD@hyKb{qGoP*7@4J|{1^cY!(h6piPIrgb#dFB2LMG;kylM9
zkIlCL_%StwmG|67UnytL`V=5msf08$gQ&4~bmEuE#18;7@7@s|5_5BX3m}moxw6vx
zY7nBgM;icm+-?{e8oBrWm#Yx9XOGW8k_rmEYNlITLl3|_If*r`mV5XY7yA_?CN0ft
z8rZvEVkrd2<`J8RD<UIVg}X~jkg$yx7;H@}ks!0Wny3*)%ODbqIqlI&Nko5d)hB0M
z`n^DyHwu6Ppa3WU3V;Hj04M+ofC8WZC;$o|9NQm<hD*uHMAsDn0000<MNUMnLSTYm
CG`1W7

literal 0
HcmV?d00001

diff --git a/Installer/setup.exe b/Installer/setup.exe
new file mode 100644
index 0000000000000000000000000000000000000000..1ebeda2c79b717adbc3acf251c03c8b31b73d332
GIT binary patch
literal 3056004
zcmce93tUv!wfC8s0}R8+84wi>F__RKMq?zHL_`u4L41$AMAR4}5HJW7&Zud8Kn_$-
zb|<B|NpEkP-ZnSwy}4i0*7PQ79&HE4fUhWG8}X6U7}K0_Y(k<zG!y6huYJx8ptd*n
ze!t&$exBLq?7jBdYp=c5+H0@94=yTo3T8nNL_rdQK|$D!XS%Y4ar(nQ`ZWo{n+_rN
zme-=+ov_=q@ZAY*ZG~0Ujmh;5b&oZatxI0#YLt^7tw?Tg)h4@Y%PSg^msQuM-8;gT
z^1wer`~S1dnIi}bO)<hP$??^pc25gtQ;f+xR_L<{!c)W@L3rdUo*j5_#Na1Oe@0QH
z04CrHr9yoyF_T|rA*-1KX3;AuQ+@pjzjoo<^wJ$8+)4S)5kg+Pj*GIx*HpWZm2iXn
z5J0kBNDMs>Nl*2}2<1e2UySgJ8&sbnS8S9~Jn){;uU@1E-61r|==PLq9k6c<;Q|ab
zb_(f`E1BTR%j7cT&3p(y#G@>v7l*?k%QNNC#zvF~eGT|=5-)Ffd8SnB2sv-SBOxAe
z(}u%m5x#OAkoOUN<-(kM1GowuALluE&*Ac}gUgyC*KqncPaS}}@#UG)pyOLb<ro8w
zZ~hJNHB{8ptpPh|3^A6%Xrv3TgPT32p|JsAx(q-T1cHBbc>7sE1CYThOVXd6khvjO
z*0pd$%C3DB9a(}UYIa>+O+{HPniO<-Ms7rISxsYwSlHmIh%9)bQLb1=;xr8<X6vll
z#_H^<vIbrOR)hCmaH1?)q<jk@B6C7jgev5ltOZqd4f4ENS!fCdgIkf!%UblZb!9a*
zC^Lr&dD+jYEDG5bk5x2~Z1S3BVK?QAv!9SFhPU6%^Ow~%ln-xT<85S@HI!G^meoWM
zNgyG}+YsZjgoG$(T{T*1pc3RJBF_<lcJH4?Ik>1{y0-E<)2TeNXea<jNDu^2f^spk
zpt|<4nhL^KMeo*}jdBHSV7Zy&*u-Jx)VUt5sW2hud-N`5*R89!@bVXUoorV_Lq+YH
zCq$mN19=fKoR0-^1JI+jJ;+Olc7_IID!R&HPwDx~s>>^AKo*AbFCyP!CEn4Phx)d)
zk5J!ez*FK0o_I>|gqjaRGO}+7U&!GX*3~{n@Zmvo{yq2>6vRh1^6n7!=kOk5BeL}_
zQr^qRv)QPNdL9kZ+sLy=6_+(smyy^A2kG6mq^4ppOE`_Zk&%VjHD!&B<+tdJxrjVd
zR9=2gLD9m(FnMOdJ~B&)jVPR3G;fZBxIz~dp9SOSGMne5nuUXSqg=e*tG`9+Z)rrQ
zAXxRcX=YFuDa0g{f~ec;>R0D{+f`OmEkA)`8i;r+S`!ymRDyE;9FbrBSQTE(LQG=P
z0wI>_%&V>V#<ilURz%LadTN4@0~61S%x<VClPmO0UGl^^u+&5@D2bk3{a8+IIe18I
zUthyA`ZemYQG<99Gpj%@BRwv!*my%ERw5;8UZX(_wF1;aO#<Xpa*{GPRF<u&$f=bZ
zo@hZP%C;kkl?sQKC4oYI5x;qtkeV&?=FLG3NGpw!IkLF03<_ixUO+PmloK^?No8eY
z1$ar+k`*`G=B=x*nOh;FW$Gp7ylZITI2@z0s4xM^P+EA|o*W_q7uBYw=rY@QAF}IQ
zTmX^7B_oP*t1BAyri60B7ge~ZLawSSC-LAH;h|2@Wro(5qYL!TF&OOT5=6|rp#(hw
zydepq=WixK|4l84<ZdpPn1;ftvRY7w&YI)@n`)!4skWqn%lkL1&AYd-qOtLR(BepH
zF;wRpH#cWY7HAs0s$di73gwq3W^oOsyuhR2@0u)Opgc?H!|kYmfZ<NWZO7eKmL<H5
z`xI_LxK(%*b>|2dgWHkLM*518{uyaD-baqr^Jg3B<47t0XGYp<q?U1d{$wL9G1BLZ
z^stfIZqnhLM(RdN?RFWdDM^2yi<H`FHPW3%>NC=tZ_X0t3ttAEJnauY$<s^0-|%!G
z7(JfKF9&Dv^h)q?o_-bl1y2LPkB}}9z7EEMm-B_I!5K&wVKx+msKO<WuB})j-!8lj
z9vOzn0%k#-;SP{NhRPIF)KrqHqzLB$CFV9%RQz3-i2|uZ^qlI(`ntx7C6#{{@Ihe!
z$n5iKt6``b<+9o}KuQf-xdsynM#Eg|OoBB8Mx@*${OHjvLCPkN$W<RI`MZr7RPkA+
z@QHe~bP99K4Z1i@s0UTi9B^^jIsi6tKyC~MNy?&JlVE~ZU>4Ga7SxFe*O}J{I-rx+
zb;PXK5(zO?oWyyhS9F%aiIBr|QTK6$SwFM`^J**W&;m>mI-tW10#4>Q!B(B61=Zg{
zAIKcu0CuKu3R(l$s)~kcxiPn)Zr$IZoU_X$M9$)!B-%5CInb~Xy3L$bUfuxX5F+Xt
zX2rh(QcXg*+Zn=Z-?Zwr9Lp6>p{h-9b?Eq@X?_hCnJ9xWv%m+;Yz$Z?=TZDpn(r&C
zE6T$o_f1B7hHz&kn3h{zQB!_xzlST#wf&wUyzmWcUf*py%$yzbV|e}z4V2}YHfa_%
z3HlVAOe`@A7U(z)*@Hqou*40;!e>W|P=(3%I%(xjPY9J+Naai$R-4be7U3eVeVrtx
z39q3!YY`ND=tx~79K$qe8gC<-suZlLBQ^c+wJ(iN1Ce|-8&tgET;Xr%iou9UeAb8o
zBl5}`t7v8qtH|(rW+9DFF4n?2-Kz}~G#qYNCsy#eD6XKavLYKRrkssyD(dCxx>}3S
z$4$vKBWBQM*Wq+?Ogw_lm<5}jOL9gdn98TPxLK8Old|ie;tj4fI%*o}8<?|HJ|D)-
zuBfbQsF+jn-&aWIlc$x;cbUAVN>?k0#_;~~u{H@&i=gynk8xY}5T9{l=TuadxoW`I
z+VYwTeThku_1{*X#3$>R#T6SumMb(FTqjqP`J8U2S!fXU@AUr;KKDoQp4UAQ>dkc%
z8)}oE5fz#aL(T?5M*6Cn(CdPGmQRWFZd}P({2`Qoj?Z9%aDH^w|Ij}nG>*b-gyZVg
z&644tKI)=H0q{p%mrbqFTzNf#QvpA6)U{~1g$tkp@5IXn&D0`Y9^*Zf{~NrM8~i;~
z2t0}zAA0=Fd@RB?Vp&Dm<KYev?x^8e)C|#b9r0NcD0A>yX}pK>bMgMar%NiTZG=vS
zDH8<3A9ZauHFiVl1mUznPl&>R@gB<mE8hS2^u-m|)s)HAHG>oq{;2D-sks|c*mP@F
zh%}z2+@`;W@_%^i|CT<p@b9QgzVk^V6$B~I>71LhILy!cgz2T%`H*I7GAAPB$dElZ
z3lX#Q)v6gNORlYCM=WD_C30V=Qf^JzV=#mIoG^$(pngVOOAdAVhFlVaLck|jor~%)
z&(t*(rV#cj${SN?<V|rdE31|fy(z51N~?T33eC_5B(Z}qg~MRNVL*!@2<3pJ%PcNN
z2-nQlxqRIisUrk3?!Eycny}=ohx11ko?jQKo%k><g$4E1wF~RkJWd$+Wx{W0iHi^q
zl~HB0V0BbsnTc6lkCOomc{7nG=4`B{P%>S-l@jzi)*5OfNiPwEC_IEQ+c;*vc(w}z
zkUCl<=;fRgDL21jjjN#%lbf-^ru95uK##~>vY|H2KfSx0Lpn~Qztob0nzrRq9}OhL
zJc<(_mw2<(RpG)E(}&zdJ(uT%IvtJ0Mjf1^f(ki|gTT;F8=1(cS>ZXAnzPLcLlMJ_
zpv)k{OxIKbNW$77JS9=Q2854pRAKeHiaHk`#OR;b4CD9>aIOT&*20D-LPG_#H-Oq$
z4?M&J^yV8i{EOigEZ0!VUn6Geth=7<*Vdt<P8TA|oPRf>$X*M&ImoOU9+?zw0QK7K
zSen`9g?&}RMk32EkDlZjGphybP!dRu>cq^;sdcTZXrOq}4rE++8I??WrKCGhCwgAU
zS)m$OX6Q=f(d&kq5shYqgUXx~alrSVuL*+w)D?a@j;Di*fO8q{GTdRBfh&Zs2KijV
zkw*<)#QR3vq3hJ0dfrV)=}JdRB7P%(p!+0Z6Szb1iatCK#w(~cmY5{8A|9imY?asP
zq99m=1!#hn|C@MvCHQNkwA_b{8I0GJ>spX1P^16IgX~3ZVQ@W}$|?Lu9^^F@CJEGy
zZ{*1lucEG}kyv_-b7K<B(nM$;w_U`MJ!pe2V~CpY*c1#}LoC8T(&z?!^ZrX8=Ya3A
z@KZIO4&DcJ58<AN`$pqjh<su@T{O<8@cszy&^2H@Q$Ag1kdlGB(K!F(xD?fnD_mR`
zqFo;-!VlhDn@!DK!yDb8-+32|rrkMY<AGM)Sok8}W-BVpovyE7d|#V|LdqMFU$%j^
z81!tegf+;Iiz%FqXlePZhK8~yLJXiOjks>8A3c(my+Cb7I0*}dpt<7hpu9+mA>ThO
zfm0v|dnhm38QNSaH?oCOdVXjF<wv3Xi<ED58oLC$xyxXk#PdR%KpZp)d17=Se2EIO
zz6i!(`;PJ=cpiVx(%-}7PQ1s)76Lc#A@8dd_4vg*g`Uu5w&&DTti!Zy%t|3WG+P(e
zZQ#{(X$0smfOEvi;W#;VLQKN75CB}r%tALF!HZD)XYtDUrr{wrI*fzQbf}3P3J7b6
zB&^HU8RSqNRWwJCSA<A*n7$Z;ZVLVA*+hmpnykK2nVb(2R<jYt{y7>aBV~@{9Sg<9
zH%$gjHlhjhJa(6c@riKIWsY*{rJx2`Br@hG<WQ8#;LskzV<kM~_VEdyY9`|jcP*lr
z;&S?a4ewWUenn$N!}^Nyp<6oP%%M9w;Y@7sG=VL8cZ&<c`<28Ro@p(nISCt;&;iiO
z^P-CNO+d4-aWG5Y^D_%1k_Nhvl$wP^aEoU~6qD$gh29WUR53QUpinw1jEbS@2`&sI
znP)~8=QK3b0W3L`V=XqecZXE978lh%UR$>T`#$BN9z++1wrI@)>6}3asi4j~BZD>r
zb+^-?f_D3^$&4zd?a?%_k`&b-j4Q5Lm=?;>f$pC+gf4I_v=tbF5{qZmJ^=zkoQW*v
z@;{`Kwb)SIVR=O%OdBC0oPwz0urxtDxHLr;6Y&sAy66{MO4OC%Im7}Zhr>m|zJ*p9
z$jG|~d!*5YBxDP!Ys<Mdjz<0*<VVYo8=S_IAt90S<FqF`LVnzENhr<|B|n~9Q&%Qi
z<;QixBk)imBbzU<k*!B2k+F<w1KmO$5Kqg(Pf!Hf5e1ZPCFIBTKF8>-^Sw6|@}aQF
zkI#9cmctR5Iu2y=1~FwI(_k!WI~(fORFu0KDv-NK$7z^s&b)<Fp@&h1J`=b3m4IK;
z5W37mG=w}(BQGqQv~|t%B8sVhX2Elpkr7=SGVj<Y2xShJ6kc(N9C#o-JTJ1?sbkY;
zHZmZ^A*Y?<^ac>`vRPOdq9M9Cv~#YjAP2J*I|p;aHYx`48QPf!aEQL>;z6zM3uRi1
zjq%YX)xb((!3SnYZVV?t9}=_hN(ezDS(%W=@anP9<mxquGlpQp{I;zgV&?chE-IKq
z#*mL1wBTOMFE%c_Jmea{AqN~|xP`iBOe?~jfJv}9NxnIZfOo2%Mfnb=vuw@dh}2Or
z8RimRx)Q&!j>2oo97Hl*q<mpQqp7MfeWais*G!(tn;SaOQ1~_k37+tYhR1X%3=9?J
zz3K&yxRHfiuxIK)wkf2-5AqJ7<v85L5JP}N4u&J``g$Zh4;s9JpC1g8h#2+gk&5!D
z-ss`&8LIvu^@Xm#<K_r0s0-dMtbTM+UAe2K;zxKVoG&27{20z3wu){-Azjyn0EX;i
zg_g@^I|ZRb(M;WLbGF&Zf(_57;W5WRY6i1sf|sPlW@~7C_2D2V!VI5SpGS4ZJEsA5
z1g7jpT^3;_s*uIGSA&Px5rsp`tU$r95PRvx9I5kRNL<4<uN<xt?WVve5bSQ?vWzI?
z=CYu^Voh~f4If!T_!`P0D;rBI8tS4d8y8b*t8AQ8QCru5IXebfp=V?}>lzV>Szm$2
z#TAbsK(@Xjq7t321ct>(@UpmUaoEgFy$^keEesi>=~K}`8xc(xQ9#}&zhcS;fr#cP
zfgg*&8KC;QT6D$`egsfxN7I_yP{w2J28K}fA{g>&M8R?DiVz#wF-DhZJoNsCN}^`F
zs%y%N>UA1$jtKH;EvSC1)(CF#i8q84WO3gmL=ut751;V;c;wbpuc6?;WOUlZduA&8
zdoa{*lY>KY7!a`Xer_AWI~4kiAtM*g5Po4Bt|@csWD9(*Ch4WiJR%IGpOT;gZXaU9
z1%{Ja0<0tfW+_~vHwuvfeO%@p;i6gkwxTX(T<#r<UF#mLXuxJEObHCKG2tf=%7kz|
zvT%?jnz41fynNVR3bn@7<C=XJ65Y1ox6bw~5SS<Ut)!!RI{i<2>M+uaM*b^C`kaw=
z8)=pSH^+EyGSV6&ooSSd#(TMuI*hc%NT(TTijnR%>g_S!ryFUqk^ad@e_^B>jr5e!
zp9G`6-AGf6bijZsG2ZKqbfJ;%Fw#5@SC!niK+vxIhafC3-6p1Zo%u_vo<o-JBiLSd
zmJs|Fy|sal)BmjVEzw9P8|g};y}d^Ib0ghuq?*y*DI@)pkp_5ql|b!(XIT4f!`i1e
zYF{w$SwpFT=e+TLnx_TIp10p3Bhe+M%t2D9y?Hel?4Oe|*(66uyH=)5WnN{^oE2W)
zH;++wz~E_{@lG-#2(#!Eb;U+lJh`Ggd0oZ2x`ro`aZ2Iw<f^j9<hnJ8mo`+CPe}%-
zP*_zl6u6NVEXj}7V4cQmG$!Lrz>E<#4%dj)9O_pNtw3mbBjweub;;OrORgzvc&tK4
zq1Wc^BtJ^N@eKZKIJ%%S<PQnLFy{nxp-JS0JF!Ub#6q+t2rN%zj`SmHoH}2W&EB?V
z-=-A{1a*JA&m!%7Z#VcBJnESsJ|8GuAh=HRcl8KzA_kD*WuE49Q)2|7{hYP=ToCi^
z*nJcBH+RsJ+x}<5#FmQb`&Fyz6jif2OO!3%wrkrUD}MBJwBE*UdP57RqxBY)%!_D9
za8bP%`|#MG6)?HJrQ`*yY!nqu>~_z$sCfak&@s?_g@}=q$3QjU-|Rzrn=_ziH^gfa
z-Z_#`2^+yt>^1H8zu|2wC}zDH1I${niq_9neZi5!T0!gmIv8yA$cx#C(`b-&cbQKi
zeTiPcHPyuSH@6cg`&{`{?206t^M})TpL9XJkMK`Az}jCT+LZ%l)~%cq)o~B6@TPfQ
zqQW!}o|&g9bGZ}!lppfn)s*R8PF<dWrq`kAH;E-_o<3>Es7+5U5L!I)xV1K|;6^1b
zFUfR4@v<VOxnFl+5?QQtip_te!?(Os4xt!WqfnRiww{!yvai%St8z$GH`ui&h&wH4
zp)0Bhzv|8Otj-nH#Lft6SWvtU=3TX#(@SkAdrq-F<x_|D5Nfhc=1>z-7zVm9MPyEU
ze}~mIu1aVUz`|nf1vt6jp_mr*KcpNE`e(2Y*g56nzO>-lB=?*YM7p$hzX}Eo_yVnl
z!@D8~HkQdL2^pWRkDT<W>4N`oYtS{4AsWaMQd9>MQyAKVd>KTtE@e*&ClcdHG@fQ(
zumR+1A`{-?649&p6EZ%Kl+)lVJKBEEY&n|o-g=Rp^PAbH?3i-Sp`7lsbfY(%Hmeh@
zS)JP5ps#sT3ML<u;HqsdPl1S_-|tO2igHIrcVj90^Q5EA9aKKQ`3x^Sk>PDLvtHtT
zvLF-y(C*Z>0}*&JiH}G)w?WSxMWi~^daI?xt{kwcC3f}~|999s+7_ag25nvQ*OP6c
zu-*zQ#vyqPmStso*-_S|WsU`4m(~L%^v^ot&$!TFV}DUTbEq4v{#11E9W5<{>el9~
z1}dXb_AW<p1#>A-d><&tR3_{EbUQ8W=Pa3%VNMF39zpUdZOenSx9pR4KJ^@A)}8du
zCI{?9F)OgL*^V~`AQ$N;<T1+Z1k-I$(fJP58IbSnv<NGpo^7lkQQEb@Y--QQPS~)X
zfYb#J6aq*upKn!{+tmeDqrz@5R)8AZCjU(FCJ(;-VAz|Y__Hpwg_P(3#Qn}I!C)9#
zYFQ1cpg{4+^}kZQETnnqA&_sKhg!;a4dVDKaGbq7h(ia62986>^>;~sXf)k+9~nfs
zUV6LJJ?$OvS77#5GMduc``q?d-80|i)^LN!ibZvqsLn_~<{CrOQt)WUgai)hijw||
z8@)erDcuri4nATt2@N&s6=~O#krS`D#Rms%o%R&bUjzn<jN8cc!wt8y`^d~7FVg)3
zGKJ~K8qDh9iB~6b2$h%mCrG=pBh@Z#1O!g)Z1uPt|3*FDZXwNXDt|C=$-N{}T^vaD
z@O*W=n(OGw<=?}ojfw8uWEwPgf>kYWm@Z8`tUj4QV^$xa>TScBxL`OFe+GdV4saKk
zs3O<j1$lsE;ghIsBQVPD9~}h?n?IuEpW>a`vd{JJ?tkjO2!fBapBvHcv+hPg@aXB=
z^jSl;D<7Vg-u6Vd`yXy=3(ZoeZ{zHg$4GB?GaXQRd#~EvemVkx_q7?;|9HbVJ}FG>
z<wjcNa{^4YS`zR_slD3A805|fViCl)c-fGl%oWKzPEYT0jk#u~#88eRfd~zydS&7X
z`4+c0esBPdSxM4JP5f5$U+4V-Gk9;br}hz3SG0O0^$rYos>jQmf&PvtwY}i!o4EqE
zegr<XoMhu%Wy;zF6SPjA-0Fd*xwA~_tbiPq>e+6=xUdCQwbZUcqn6s$0@A2d4=EY!
z&`37h&QOqNRcF~#J?RCBE{mF-u-&3|v;2VGj;|HXgof@m`MJSyJ-0L;>hVs0Fj%@g
z3?Q}CVR%qt(|*NE{G{)pVqJe`58@yNQvf#{U;=8dLoSz%{*DN#^%D@Goat*hsU9s>
zJ6*rMG-rH(CP%h#e86>|vd^mGp+7fZb!9bwMKiGMbZ1-C+<>}r{D9i0p3oLu3Xf$f
zO}uRw66M1_(}Cv8q%RE}nx9&HtBoxln0P3h{i@oh^-#gf&0LcRw`(${J{C#(OwNrl
zV&MtzS6@PM2TWsmD{XD=f2BIw-DtlnJ3uZ%R|HM}l&juMT5BNC$!c5C-(itjen<*K
zlI~@Bf&TWW0(4ty{T_9BENP+Q6Vs10Jm5}xJ_~v22O31`lX_I`)|NnCFu0@D<7$WM
z1^u^=gk#mGy@k17?Io}__rmDpW$Lk1&%`52cW}a9Q@1u&uXTHKkk1Pib>o214zP5g
z`ssL%#YI>KxW>1&^|xbeaFRn%4}h0Y5G&|XK9bV+7fIVB(&owW>F+jJ^;rb|-<8SW
zb>pb!D+f_YdTI}7f0MG(kE}oG{y$vvKjxbM&QzscoahUg=-lA~a?cP6S_%=$f_(_f
zpe|(gr4XV!DIXH}mV}0GdpHp7S04_j2iP*GlF1dV?6<1R0{$^=>HvhxbkuarP|XPK
z1F|@)2S|wKObIl9#bw0i7N<az%oyOXn)0rx$H4bv7&6ZHcfhee^|JPxIL@(bI5eup
z;n>{3%O<JiZ=eQ_hI_I#{hYMzFL(>}bH(s}rVZ^UY1^_3L$yusX)M>aOkU#uW4N!p
zEqP0*oegp(??a3_uryx_a%gpLyJj}+O$|=$R*nTH47ghyGz8z`BjB0pE)pkpY=}`(
zrd(3q5&h%a+SI}+0rz(->ZZtm`i{Y?C{v%-2XxWztF?pH%NX$xo33fd)UCdw9?sW(
z0i`Gf&yE<5jYV}1phRb19lR{aok)|F&c3#XSM;|-Ic|nRl120sxJ!b{M*(dm@Q}*w
zb0;K5A87uHM7S~j(#hkWzMn8o@me<ysJ8b#$1jn;T~NFfeqnD@W(jw@%hn3;LPaO*
z)XX#Sk!11Oi`u)N1%poQ!sqZ7^uiZqI5*mv43zUnCxBk&K!*l_m{;=<L;(sJFMJh+
z{@5x<vLF-}VDx^C>AjQ`5dPW`tOi&-#LjYrb?~(Te{1b=nbSPv%Ny$-c^n%>Mk1rT
z!NIzlJ7~F)!E+i##pCb}nk6}kPiB6jKCNls9;xG)BV%@=%gRa}8Knv9$Fe^5f#Mh0
zP0B}omJg&|v(1xw)v=%oGf19lq6hG3nX>0RyTbOSon)Wye)r(PgO@&p2dExl?G}$)
zY?{=U&E9M3n7W$+GLyX96U5eiu0OK_?3h~=wbx^z`C^8$CxPq)Uzf1Y*$H-t9o7B?
zWz1{o)Z1YvF#7R|XD<_^oz^UrAA!wV;eD}+82;@UfQ4(TzwP2BZAI*S0T=;uB?#*)
zU@Tpaup%qVKg;%J9N92}t+HAQ`d~aVjx>%zLE1ibe&5<8JSiP#^PO55Muz2Bm5qI3
z!+1P2Z@fq=K36=R`?Ci6<!JtJ*@P8~#~-!Bv|<$&Z1|yei<f~Xz0E-l?(yad06O6$
zdtTP6K-zLF&+<cA-CB{6^$<aHGYUL-Ud~8#-O<`F-@(B;wNwLUB)z+rnOLOuLp{qy
zjYsY<(O`myt1u>LU)giEfF-7R)SSMev>wQt(Jn;hB=fFd9}`^2lw7l(yczu-vYvbn
z%Q|B{X}M8}%d2Fz(bCVAxYk$`)9MC7yyw$k@FglT0Ho(V-U2M2TR=H5PJEHdnx|iV
z2rNqCFHB&gC{tbel*luJg5I;v2qFW%6*0E&j|7u;Qh5k#VeNh$+x;wxIp(+aY`T4R
znukdla<k|f!^W_9Cb5JcFi9<J7TK7f?Y~TZF>Ai-eFG!&lHeIU>jic-C&2JeXx3<%
z(ym3cpSD6I+^=;Ac~^t(MW@_FrvadK!B+d$Vd7#rr?GDA7fe!XzW%B$<0MI~v-!KV
zvne?DY7hhiR9g*yo(;4HrPcu`1ag`;inL~t+z!1q7HMkEMHEQ8vdkDiWpkfNw&B+-
zwesm;^F={=hFm&MCqbcoMYI3QrOkaAITxj8x=_}c^NERSx)u<99=n=zp5<I@^=!FS
z&FO90{D~l2S<d;U>B)^GKjs~#?Kz(WbIu1B^}0T!VyUH>w*U~q^~75sP4G8_P-!}<
zln^Q?f>x;v!=>bCW<vHC-qv&-Kycmj7P&S4JKus@2pKa!kR@g22Z9`(-TW1lRM>J}
zPq#*>Ge3YtpA63VKn!=&lmpJ6&d50>eRmtUh=J4P81nAieFv&H?-5})oq4W))M?&x
z8nzxI>TW%??dxFLzBeh(pgl$wr<KN%au7<=ig?bcC_N_&Fxkj~?z9eI*g9Kj@JuX|
zLOH&t&<Ym4Ps670b#?=k6+wfkmpX|<uHs9bB2qb~2rBoV@PC&3vzvcUXvlJGen9yv
zVj-gX`g!C4;vPV>cwEVP8v^4EvgfH(eXf-#3hG&2?IIQ!)S~MdwpDBnQgBIXZGfCH
z9)j^dKvu({y$`7b#@j;}8|`|N<c4xo>T5&st`M8QqBxFhAEa{A>rKDs@+!6dI|i$>
z^%9X!?9lM=VhNdB^L=2$Uib6FSUqPB=SWv;A7CB;3%XiQ<7o?k-K~Ko=uhh@yfdCF
z?GnH=we>7=I$QhkEBuj0pXo4t?$(pRuY(!A(zeOqs`8*9eV4w@Z~8r_#5Li?l|;jq
zX+#4|K7ZT8`J)qSYWh7#>MHKEjL7b^*s>X?ohFTiI-DgL`FG<^&PFhUQ=+Bvq8G~v
z`GgR1{`Q!GoUoewSQt&#Ya$?GYKW32<jFJqh5FP(ag)J`XbP|BpYvi3Aw3u><8SeL
z*_|)eQ`wGC8Gq}CgUEXQc9t6e%{b?WH=?!EvQck264}ihXo>QvRSCkJbV6D}9UtA4
zc>)q5$RqT=DIW1<$z|7H^nq;V%%+_gg%3({&`o0}wUz*nqRZ@-tp?9!gj{q^hSC=w
zA*!$3YxI`CWpRSo>m=`sTl*Vk<)#Ipd{Lp%Zw<<Wywk@Tu{G@ts443W4f=+dxe6~6
z7rPGW-qdrUR=96<0^qtzvr!v~h$8rSVOvnVEX|YF|0W4uhzAk<X33Q#?V8d4nS~u{
z|InN<us&w{b_zyiWejZil6B=O9m&eo2VC#2e%OeO{()rpEt&zCSIxH5j}<DAozRs{
zW*Xs>Y;*f*vs=uH_zbThKbSktjS;)ae~##eDQMS5C<9UJBX&oTeD8ge#Qf-)?FFXx
z(<3S)rp8pN*&+frW@%R!+uQ!3=(f*mZYPY*A9B~aeJU26jaUdpyg><GfMGpekg#?|
zL!9Lp+n?5R>GMkIw*!^UU7rb+&7TOtN~LRRrTSzf+`7e5>vY%&?F`1XD}oFM-CYr6
z&*<q7v~Tw&k34m#f|?~N9oEIJ3tbUp80hYbpdc?j(NxKOv}HwqpsH_CCfg$V<5?Z1
z{w50JF4O+}SB&S^8CPBB-Xt#W=3LyX=Ghs3tX)~0fpE6+5)@DJeAij^es#V0CQ<PQ
zr=ne_qTM>*bpZiz3X$v%;0N{^EeP5#A+ttcoHbJ0TS9FYYs;zaOBokj=hU0j6{5bj
zP%?i6It4lYMM|BT<7_Yp1oYCB`8|rG%MscxD4F4>$YYJZa2Ld>i9iZ?aym2`72*M$
zQCo0S)tCkJWWM0tVe-v_V0baZjtq`kIW&JF@>4w*yc9=4okw_?i|Uwt6vy&1YwJEa
zy|rh{Sf{!-II0`~%cDJVvTE`!2aFG$cB&34qPo!@mv4Eh2Zd<!U6i4s!>M-bty0BL
zP^Mi#1VGu1V)RbZKE@ksq8GRq@KU`6T2D9&blt>CtZ6-})2d|N=_H0g<b$K=k!E3d
zjMQiCXW=Sdb(9F@&@%4?{a8QHGU=nON~VKXwz2o9I=!@<bdAs+qk2EW01JMp>8qp-
zHfg6<+W8|Hy}=WEPx}qHs>>GU@}=8zf~-iCcIE`N7g4aBd{yi>YRN#O>?SnWge-BH
zyr~}FL1R3~uM|+O@@C*CYG1HWquM8UMDN<Ds?itjBVR-<Xmw72elAw!6=w-mRrt~V
z^$acRevV&+)mnawYVMqiPPnwsW4jYstuG);bD~@s_>R>24B^!QHUYq?ZNaaaGmzF(
zR5cy=%7gcotG5ygmNVegoG8VE0!MEBluBizXm*X0b~>#YCu9*bd@MFbGKvE0Bax~_
z0mYN3th<;<&>MQvJf+K*m#dDdhk%xlfu?BQ<VgIM1W)@4#)Hcr!~fyVk$?{#7uG#i
zy{4>&9~5hBtZNvuRW1mR3l&0xP>bIheE4{;FhwZGQw=(V0DkeZ<~^riHrQnvU@U&I
zMtU;|BCAb^z!Z;ndRc2(n~d9p+q{<i{x<Lh>nBxDo<gFEDYWAw?eePF-H>*5B5_oz
zZ>LcGpqwJoz4kV=kl@sobGDjp@?<sdNkKVTowmw1OhP4AC6&7)1#JxtI`e3sAf<&w
zf5c7DVh7e2%IU2yJp!>y^JwEh_z?}E>j-E;mhjSZkT!2yd8NCF`i5nzH%s}*Gx6xe
z<B~&=9C;4O;Y^ksB~#tg65TV$UHF9*XO`mTJEXY$WGSw6Dv`lFq51{N<z(sm3NUS0
z(RA6dC7vT$Xzk;*7TWp{CckXmGWvqFMZmq#I#4OSXU4tIHb6z<rdXE9=2!#jICYK<
zdl^laO`GDRohz+DIT8+1rE1>3(uVbIn7BggY00tDXn@Enw4IjXR#HpK<*Y5o)T0x<
z^5OIY(o<(a)ujkx1Gon_@iF|WM>9sGIG}He8BCKL=xqt^aza{T?NfZoChTxtI__Q=
zmy9_1#3KfuLj9E-qE&J%v^u1TqD`8((B@FulQ;RKxRFxa3J`Ov6t~u~!uw9ZVZ{wv
z^RGt<+GZcWbTZ>+8VYIKM35C84^$FS6UYhg=PTX`#Kqu_e`jC=w>?JrB%@sV&4B;p
z&^{IbnR_KTa&6Dhq0_uW`ndmt{`iu&qCfE%YxL(fDeiIfXX#*v!idm~xyM7DNI|=m
zu#H3L2cFNDgLWHkj1lia+YtJxoYPM>weqDqF)Am|9KV}VZ`)eo_{@|NZyRFl5i2o*
za->uGO%ied%d8nTS0Z-fGv<pf2g|c&%(o(1lV#7CZI>-D>N`x{mLA!v?CH~*><Iby
z!15o)L;3fiuCSeZ>=c^_fvgIFyfO@ARfmXkFn~L`&U)OVoEJgR@l7e_pHwz4Ofd`6
z@tPF#@xV`xPfk(xh#&Y?b=U>arkuC`WmAgyljS9)UOeBR4lhP6g3#C7nKRKr^e{Mz
z9$@l!_kc?6Ma;yjsJ{i$t~{}_+4t%(S(;a=_{@!Vb|QEbj`2-tC;ekG=M;cHQJKlb
z*iICY6Y&;FI(9#!u(tA()2z>1%$cO^2+b3Sb*1&geG@A)Up>}vPi5wR9osOm@>{<<
zR+;&`V=mMT79_F0)_(mlg&r|Gc4|KXK7V}kS5-79w%yc{wvF1*<5T?+E|?&*Z0m|3
zH6w4vn=y)OoO>}*)gwK#7pb&!U-do{F6Bz{))CtmI)X>e1yi1%yb_`y)wWkk^&UZr
z!@oI>K6jxbh_D~lbqLK)>~4eVIq<USk~gpnf%d)XkqiH4HF)`RRQ@UMR@^_v{S@wh
z#=RBybGSF*{sHbMa6f~4J#L1(5%+f7^|;l%BsDJ)KAD>5fU8CuJ$a&P^{RQ})V$GZ
zUc8zYtLE9%yht_AT!{i2A4E$!oisy|9ZdD4p8O-ifA&f?Ug<PfDqkhb7he~U-Yu`k
z?<BbazbUee-;HuDeoN#k{7!X^4cFKx7xR2)B}VZMe*`7>RVx0e$c^4GDScqW9SA9!
zJf>cw3Z~1`SKpOmT0NVq{4r?OA9<;F%c_klR!scBzx?VuI+*{ve<Y(9t|Pw(d}R$H
zFeitwuaCu39P%SJcq<jJ4Q;*Eep(#b(*CROy3Ch)m#6k0`Bc4EpAUQ#$iNsBq@HZ`
zY+59>{21?<bTm_PH{((5P|n=qPI&g@D+ND-)%#!{B1-ZTlq<=0J^xUmo-fK}=-kOy
zvMa|@hQHuaFGsXF_gW;E3CXnUksx1`lZGI<?2moF_vEjZKb$4_#rJ!Uf4ag8n&@f@
zZuKrJSgIaYk4XQfMyabsbqTgO?8{fI_I5_>2L(dG3ngkh7W&D8^QSMAr0$iY^a7I+
z_hrWs;_Pe6<iJ>IBBTpF`44c~KN1cV3=$SM^ut$9cAZ~{&5cTerd;X(5oXz<>^1R6
zocdArn(2HE;>msdoJm^$TLK{2LDrep!_V9lyWu9VuYQT^;ar?FQLb8Dr<FYpLJfJ;
zeulPRBCDzW9^r^@d9X-&X)?4C<8$((pBN^Vd3K1t=dm&4-4Wq)Qwm$R7Q&3Mb6=XL
zsOp2&<graHSCidE0rcqeE%5HVS|m(8g1Fjyn781^1+*`3GamL(&RWxp+d-{U+uuuG
zp;>y)L(Zk)u6+!gZq)IO$Dg5tm-cH2i2qaOeRu`D+k)ceJpuwZ>_ipK*lu`A`O;2D
zeippDD&N;IH1`81>(fhHQbdGhoYGDUHZDzJkdXw^Ti`Z|i}`_>Fj4n~i9%DbP286O
zuW1COo#R;-*5Tj23;i6^dJ?|OPI3Iqrbb((I;ZsNg4UB;KSgddAKtT@b%zXfac*XS
zygE2{IAJ60OvJByqY39%MD10q3kdTVX;&oI%ef2mmzI<3Z>z+DV|?X*HU(XY{T)rN
zk(F;G3zaeZD}PUkR+;gxe2749<{;4oLNUsb3~iwaZ4n$he?-ekaCmtsU*VB0V!aHD
zFIN;I@Q8$ALG7q)?UAD@FLg8p<xdfv6kJvX5tVGKKXz@99Y}*Otv&oCPKg_9T5@r*
zZpq%OokauWbF!?xS^`9h+d33xAJlIC0$lEf6cj>yxgJov8V*m9h}?uy)C*0p0Wg}+
z!3!|`4w-{BhWD19EfLyXc;M^8sNb2GHMlfD@ontHVv~>+98BG(y@44<y+s{R&#(or
zV3lZE%2ss4C}LB_|F`r%$v3ZHF^X4YjSfsxk?hF?b=q{rn>5dbLf1#Y)Tw^LZej(m
zQMDfV4r!;Y>GEjTEz-{UCifhhjV-iAy6t<L(uMUgY?kRi$zhaD`7o>d)V}n9Y%kUR
z?Lk;EJi9KEn(6d);%LZkHc~#jpB2Bx))Vq5?SZMt>c!mY!;y$cggkVe-*%+=GVlf)
z<9K?tAxiq=K8rOtA^2hQhv2VZYDa(Le2-vKC0=KAU}&MUth@c3nAU+dm$Kt3&W%Am
zRSS-EVfSMp5JE;KGG_vsPGI{jhtwD_XcDtHnGke}{s}Nh&P3?%W;6lmNl4k92V0=+
zM7Rix2D6%`WC&O?&^8<GW2s)2{R&5EMYxRJn=uu>R)d&PPrg=zHKU$<tp<BWy<Hxu
zc);RQgG2ES-;w7gBx^Tt%!Z8YSK7_9rJZKWUiY_c2r_nR--C`fZ82rJ?qVacoIz+L
zu^d+GW0((=@8!oDpVhYDl}PexZ;#_o!VV}r`Vgcl*ykcs1zCj@j9?Zlo_~!j#C#+8
zDZw4IEe9ULrY+Us)Kvk1j$yRU?f@2m+Td&LuxWD;EQcZEHV9kBYKMCSaY#L_nJZzY
zN`1Qk4&E$#7Kh&A*?0CJfHy+gB`sCD%wJUgR<<u^`51WDN2#9G-V&2%;$AjqZeX?7
zxpW&A-`YE<t#)ktVtEN<(;WQka$gi!4}2LNatzDr2A?9C;Qt(6EA#Az7&P&5F!a!(
zRfAo8Y^Xn>JHL{}S4Q{9V=J4l2%g4x47RqC8fq`W=vzvIAC^Lq%K8W%vYNUtHTd*6
zkT0-$56FP4@gRB;4^QFg#gWsG%M&YEtm)7a*XNud*D?S70QWod-MNukIVO?ReJ!5S
z68W6}rq_k1SH?#6dz)Mz-kW5j^mx-pe{prsbA7^c&AM*DxPlhmgFj)w?}3W2KVc*(
zP>(VUAUf1mysSVyoO&{K-ymIMKnCb{fUb;Uvz!Q5#q_~E*9D!b<L>)LSJD(ND4mfw
zFmPqX>W6&~f;v85>U{(wSpD1RBI;5X;{d96ak5*EjauURLdVrx>Q8@q97_C}-peg8
zF-9*x@sADl@gt*;C#jEzsgIGRrfyxI`Fu6BpK~`D{j43<&-|qYEj^noLFdKP9{0i&
zM>!j(j#aCzU9-f$p*uK9RIb`qEHCx?&f&Nq=8ef%%Rnk(ne}(gPFTYdEgG_|bz?h*
z#*;aM`2&y<UAAebj;8B*kA<dd$TESPWvfu2PrUxIzGr|N))kX4=3Ja10y3=!KYZtp
z$Cg@pwwiFDo$6|(SbNc2Vo?TcTcefCa(EM_tz~%I6vg%`J{!ht@9xJcD=RPg+OJqx
zN4s{5rMvwM4!b?e+9!1=10!A0YfV}&cBlQ*4ZtH;3^)Ky+OJ#|0U~Ix6UZp-#9<_{
zK#JJ{XPmWMBtZ*o)8@!73uwnQL$bV-hpI5uj)cZZtb-enKIzq%jBad1@6qOh_5L%Z
zWXsZe`nEZcA{H5Op)Jq#mCiF|&qdfz#JQ5H5$BqTA8jYvc51uvOJ4jxp)n)Q_3Lgu
z&eeo0tqSFcbGg<d#--ilhqCFREfFZL32nJhFBICkQx9z=G;Oq+T(Q`vv|+@wZ6o0M
zqzw&f4SGp2K#1Df(Q|q%Yg-I?NnJUCERaE?i*0K>{XfOD5a`ra9|~f7NsihvR{I{h
zL(4=ZQ@}_IF1yx)*}rdF1ic!=zh#t?De9%WX+IyO^r}}$+G2l^V6`8=j{&glP9lyy
zgJ(91fK;c$tF1vL=1|UD#Z(o8$hVbs5FWm6ptBd5ffBS0tMsIuBCptQxQ}vz#UgCS
z6u54>P1o(Y0qu&~F-|)KMge3b;eSut4wPhHpdaL#fnPZkJ=8qdW=z{xRJCI*jaO>9
zI)QkZm4IPXHV<Gm3!XC}BWD0|1)V||I6*s2tWVY9aA><|fW@nhkXBXg0wx3b_ko-|
z+LKUKzaN;EbDh%t!#?saS*-)M@K+G;?P5yP%oK`9!4hH%yk#}g&N&G3wf;?d=2_z0
z*>@pc@E{?nh!nQ|ZA+;V49cUmgUFwRd~Dc6cZw;3k0OK0gQl%Bus`U!BhAB4EI=Pd
z!wF2(HX|;q=32XQMSuyYVDeqS13AUo&6rmfwf=4EzZ2$UtwC?m3j1Rn)&i|iCJnIh
zttX|H3}~0Tz|6eVLPoF4r)3y~qHA>Q6%+o=G-m8@nkQJ`fI2-VrceX7X>r#zu-+bO
zY|;SY>p^0QoXp1edrhu;*iq%2S=nz2xAh5e$mAc*#`B_Z{%1VDX%jdhwbXz>jz-d&
z4-D-)e0c<F9AQ7X7z5I&eF+`}7mLakQE*KKuXC-0eSR4C=a;-tgCHEMP7O;yLGN7J
zzO){6j${lra;PBYXj~AV2B`KgsA%}q_{L!14>SU7wH-d?TpdktB<rSc6<%Ft=Udt$
zJK>i|HQ3#pg&n~nii3|W)}F;MHebc3X~LE$j>rFdOTYh(&=&>{mVeMfA4{+feSR4J
zPJSa?w}TeibZ3z&jAv4c^3he`o~p%w0~j=Wit?c;W<S;ypeJ@1kbEZNC_+gc+ADve
z&KZ89_OGajNy<To>G_ZwT!C*qoF}OWPeVD^gB{!#3avAU|I4X$a^Y^qf@ByP6wWjX
zT^|{GKOFCI+T-$S;|cGtL%im5B0Djt^an7l)BeMAwIL&|D>Kvs`W{eA64aZpcP7B0
z){Q};o*UNjpP(YL$bkF`xJbt@VY%Y>(~^~J4EdL#1~(=^2Di~b>opcp>;2gMsH4{J
zFIR8ZTQPiNvp+V&>xyJn)rKWmH(ZxRfs9!Ru5(5@9;M?D?ri6@a*O1*A>N?VJuXb+
zLqKn|7-i5{z-iRi)$Bybf=6qg!A|vUD?v>6TG>@U=KMSa01cIm`4;<0)AwSU$hNwo
zg4rTYcX=@<yKWt{G$X;vk=jTAA;i&@%`J_7S}A0MHCin#3h03aHAlm!Z33Be7KfYs
z;4&Qb!J?+9s=S`~L@@`JEn<##7ikcLJD`IGVpN?)V!`WyORNa>g3Gv}$@vP0KlTT;
z?eGZoiVveACTkvlF(MF;qXk{iSWaKCz)s_N2W+zc95&j%f@7zjrMZ5NS&Q9LwEkOa
zy_+3+R+|8sgJANrfBMeQP)m?O;GJ3%z$sd?k*Xao)y{(=@*bNqr#j$Kt&gLfB7`^o
za^-Ka!BI(=DZTg}gUSSXjMJH4NP9_DXTzn+9xIQ57h<1Ds5(6)U*!2AywT2Jqv(4N
zB!=*r)<-!De0wMdeiWSSu~_IfrTb)iQ@Y<}m;T_HHOp^N+9OQu=u-&K&9vbNzbCj<
zZ}G!$i_5Y1IEXtQloCZ}!sVrKB|}&odN)2AEG$7AF#h7DEHM(YCbf=)d2F8k0U&6#
znwKEg2DBxA1Jgz&f++|aw|ow`U=KNHpOAtTrr6oS6tOw|(3Q_(<p(r=?jtjmIJbVH
z!NLv6@V7<hQtg*mgee0;iPZ8d)KxpEX_jaAPYpjd@v5fv<3m+PIccLWf2mWe(kr9C
za=nr#ni1nf)Tf-?Q~>6Hjyu;1&Z^fMvV{ELsALe!Hl^IDJy{ECcc3vr{W<-zIxAZ(
zcFh$}15oisXqAwJ;77g!7<FwifEl?h0*h1Icsk4KJCAdNd@+12uj<0Ql5YuU6VDTu
z5)3XCpp3ZWvib7x$g&b)RSHwA<cP5OB3mBe{&uwb4vT~d%2q#v8~+d!(g)-RSl+>m
zB?oa<Fl#Scwl{U()7BX_S9I2Ftr~~2<wUl%8+C%NZl%+@z~!NN)W^pGdzHh+ZB~$v
z7}`wI?u9MU87mB7EXE`OV-g2h)W_s!=rJFN1R9e&Zafr;G!*Z9c^w*xb*U$Z3;~S`
zKG$<r&6LCAu!0Z77d6)n1V*6>VB~yg2cVe2HKOkTXwW(Vd;K_+Lkw>;4lUnD9bFiT
zsvIt|TxsR%ZJ<gQVJ;q<Ql@G2A6X2Og(V`y0aQ>WXq@&85phJDdtLK55S(f(;fUk@
zWZ!K>=lJUY8RX?{2*OZ0Y1j?@l5fG-cg+^7&>)wDwN`3(G;fzMhw9-}g>82)wXr@*
z5K0S+mKCEL>gmF@QEN?Aq@MX~R0@|hIXzgP7_3hS);ogr_F%m=ST6>ru8j&#b>?fm
zAHcr1m-1i)n}<&e^vde#V2`qAD!wiU3ht}SNtxP}B~DtOC1`n%gZsMl+f-c}X4{oV
z#IJSvLYQZ^RXc`-iuMPJNO-`Ua^_eLk34R$3$Se(4xwL%$g2GmHA`7}%H&iJjt*E$
zR%s96pnUL*H?;?bg#2C+JSkVr!6VqqgU(@Yr*qQgOnBs;t&`=Ina|L}D0$i4m>)gz
z%DZW%moxL^#r{Vkz8wrcq-f@b`{k+r{LCK`WSpFNHx`o~c}ku<GEYwN&$t^=Y>#}8
zqGigr`zP<%>%VKqKL71I-u2(Q<FJ1`-pB1Y<{!P|kUxG$uRnIj3BPT}ahz)2kCUlE
zX{U$f+qI|P$F?Bfn;d38Rge-gT@oyp=+t(2xU$IKCcuDZBHt7uL0a<YhOm~fl`x_i
z-0&78u<S&*Vquee1vX0U)s60_cxDB5?RM~<jj)pl>_a%~2pQqs$I&`lnxH16_#Omr
z@TmdD!HIB3PG32*fu|}CJc&tYRjslv$H&cl?6bsFSSmRQAnAJ%RTKc|WzouI9FR*l
zxxR!~Mlmsr17!BaU*OykpbOZ|FXM@A#M-E+Dt}|hVL)hp+yYfElm8+j0u+TM5h#4G
z_2kyShFm3og0B^>hxRf?UfW8p4*5G!fUqwYZm5_|$B~~bxFI~g@`rFs8DDKlA~$YY
zZ?@jvkhU_u+In_KTVtuMnbg)uYU@$GEjW%{5u^d9AIQS7GMY0qJiSCc!~rYno;vCk
z>f~(kr7V>0egQAqD;R;!h&;UG%nfi755XJSvstD)AjFZiPlPx^+csWpaRr8^3ttix
z1+<3|?+H;?^=$ysUd$>C7<oYxpbh>{!3x8#<$FO0uoBYWUxV~=Igs*Qp|>1EQ0_5M
z+6<J3AS?b)IY!W``&4u$N_zwKb>AuV<g#Km)8dvbBFhz-XknvGC)i?ZC8R5Ap6r+>
zCmh_izx|v;i$j<FcI{D0BDCKkQ9A8QT>BngO}^|kct!)0CD*EoBRSA{0vZMrIkc6S
zd9rj++emJpU3;FA2rU;0ulpxn_f-eGS#V$|c+AV+e#LCWvMfCm^72mV5T{Bzk8FSH
z$k<^(C))kDSWe8tTI-!xlU}65VsA=NmfO0eozH#-P-*A!?f*n|uxB|B)AoleylNL)
zoyh7Ef*X>88<N=rZ`e`c!Y@}poa#Y51{f~&j`d{iBO}$eH1t)@s><ffJRAhT=6!;a
z>BJMZGIrC^034UYukl^Z+MBDWv9(`n<KCv2R}y|hMdsbFJqhdi>loU``%=6776E*P
z-%_}%_o7|FH4-k~0o2!#2-=9>Qz^(h3%4I5!vCHr{S5_(<R3_A|48&AY(%x?IPG<a
zu$Binh&kmcncV;q<O$kQw387rfHzmd?t>)m??WE-CqHU6ZMhSx4kfeDN$_J|q*TQT
zzL)4Bc+@CxeF8YM%Z5)PXd^()wexy6YYBW?5DU$CNZ&tUrK6dR9M`AXPtX$JOzR`)
zQ;G>J7t0BGoaS5vA<uO%rz68D$~LUbBlES#K_~qBETf9c5-d)kHn2kO)MkTFio=Xi
zGN*Goai)VFSd>$<QAPaqHg=Wug-6u42)uyGd0!$vaUWJ+Q_|VL9Fg;g9{@ZBI72TH
zzf>1pL?{Y|Ny(hX+ZhF5CtGxpAwZQA2#%s$tQ4`mF-ogAhK3O_q_wIRz(!M1>b@#6
z#pNt6p9jIL{4ZPJBezGfU??pK_N4Y;hO{kT6+Q!lI2sw5&-GT>W(OJu!2)8`*z87o
zc)@v;xZPIBf)@NUTI^NR)F<(m2I$jUgq`u>PY(Wa!S02dF)<)KMq9^D?ayxj(l}+J
zouz7>WPp~_X&QZfI-NIz@Att;JQiqgqRI+7Uz+YTdFt;`JhAn6X>L@-*Bzx@Sp#r-
z>8tq4F3~9nm0el=W_(Q3vU~xKk~uGWeG(Xe=?V3-om6+aa{4L`=`93;(&d$1a~xNp
z_P_)b1~Po770E_40fV}qa1c(D;Pt(8nq$H~y2-Z)i~~;DK?f11zp2NOu>#~anmHgk
zNnM}|@-%;7-X=$1aQ=YH=5)`#sC|Z@3f58o5az%Tm{=VTT&xel2)^bs?5YLrPe6=d
zB));cVM<|30v5x4Qo9o;nS%(HM`#N0V3!nU(p^U&bKkh$f@|wxL-jpI?b*91ev94y
zLJ&i!T^bO>)}zeEoCCAB;7gRO0sYMH(0AV7L?@dcIO2ogMW8x9Ym{1cK!e}}kgS3{
zmldQ&vipenY?U3JC@q%xIfzRS(+skz!zyrCe8dLFfZz%=xIICXh;$x{@aQ!mf;c{*
zp&GBn=Ofx<eh+6q2DDc&Gpm=?E==Vy^fl#?548!<8|>dcN)%;~j<)WTS~lX%34#l;
zQP=7zm0IwHMlg7<YS!|RW6&K&EA1+>YCjl69ZjgUy$}{4jt(IvQbDKj)sC_!V5nLE
z-$(UtjmCF2Zvut?F?X&hGYGGI^F76+Pwv*hXHb|$fj22riw7MPO4}0Wex4U}u>;yz
zWcsJLA2#um4gZYTG_Q(p#1J|;s(k<wsLp0O+)QU5T!27VVJ<*Zn4znIMUUnD0~#Ox
z1~k?h?G2;xm&hEX@d5N@7>zTorEwG>{t=D3tx^{a;LtGsn#n3F1@}1{|2cq`igB0<
ze?DRt7Zx%^IE@R_iFiK_LbRe22n=_n?ZZC8Yw!SC`?uhmM+1m+?LF-g0*Zo`RjP^p
zC=Aa-z-yQ-Ix`4uzg_vx06yl!X4>q4=EPi~c9i7fyL5=vekfCEi643~djNqy2mG7_
z<%t1dOKe|o-hj*Mo^??>f$bycOb@<y1D;L)5cW45Hr*lLMnRHZw8fQ5YN5XovlOQ7
z)z@`%RD^dgaNfyj8_#KzcI98x`rxG*^l6j70d+H}MP0`&EGytmBPTxEZ<^gS(;>Jn
zBM41<Z)5?GSE<Z&3a$ZU>NajVSwQ*T0vs~{YwqJsZ^Kyy&YRyHg-K(1Fp*$J9x)>e
z-xeeM#73@AyZM@dZ0QV+W15bGcj4|Kc(ke;Vc8bO(&lS~JcC9b`H+;Z(Nm}$&WYd~
z|J0tRBcC3VJ9lFD2D7OnAAj{mzMaLgThfoa=FFEzvBe@nIe2*hu@I#T-)EfhN8)b>
zDP3Zza>gPjJsmqka@{ju9{KcQ(~Ko1SIT_Z`t)M+j3s8*Sd+&;s&x8smt*?ZE_=Jr
z(e8KP%{={UvM>}&T&f;w|CAcEvT<l5XE7SYAD$|u2B#|?e3XmNQm8=>?7H}{@>h#|
zKabT+U5p0vOf%-=Z$2$XgL&o|^Kqh{AIW(5MlGVjHXMYR^{jS(4;ax_AnhDC<G^||
zJFwk4I}0Z?pVe+g0k`MDX(=ieda3)s{t5XrZ1NbiBgdfyIcCOuiyQ%3{Mzi<v(+P|
z6OZ`5#CUjz*10>sGQ%b(S7xBX82pNIEPf-Yp4ER==`id6c<m!T-+j=i!TL|zX8T?u
zjQG2BL+FU$g6@kZ*aFa%$V%ymM_l^xO=k7@c5BwN+A8cVukd#2XOsYvPv4kGE&ZrM
zqs^^<`XTm2fE5Q!SL&yvAChm9cFnt}?Z&KzQ$33VY^3RmHX3MXe0b4MX&Sevm;Gmb
z9q=K&ZRy?eq}FbEGGsVoe!z80fxFNaaIdrmE*)o<46|zlzO8=3#>AKm(I#J5fzLI_
zf03=2lMkjl1Ky0;0q;;B8jCde(z-v5M}CF;YrRZA2NNp8s=@lAFb>|d$4)weo)zI3
z3w7?@RLuNaO8H!!rfeKAx$Z`baz42T9V6;*Qt?5;X-&cQ5_W#*^H>Z1I8CQGRq)^A
z`<UjxZuOkj-H(SZj>Dl|K`+xk2ZKM?1lR%0W3w(H$<R-rwGAB~3&zLyxIS*%NN?dj
zPkt2~1C9CW8NPEL<a0Ye>s&fCU;F+5%p}f#e?x(z??S0QhyNc6TMC*A*BvSCnt##g
z1<_CYDZZz`0obo@j9BFE7q;UV4(u6czhN^V0u68-mg2xkA$_d4EN}zcF>9#pn06!E
z0cFAgm`Zj_C6s*vOvTL{6ZSlFfzU6NQhu~<HSkCxi9Y)_gzXoO+zh0h#H2L|tC5;7
zF|55T3bGafJ53*fY#Eu+x7m!pKepGh4`;2Sw3#>pz-Rsym}U)pT%N>1c?yk{=Eq25
zOv3MPfi3@oF?t2n!+ic9j**i_0DWENTuK%i$F6V$`ACVWy=1j-no-8b{@U?-35C9U
zsbyW345J|ot-}R%JmuirEzT#A$8ntX8Q)?@yoK|#0_y-9X}Zhk-HQEh@Q4m$-a?xM
zBHRBa9ZJ(0!El_wrh>?fUhvtw9bxt@G45g$JNN^wn|5*c&@Qe%ZiunNu>H_zms=yQ
zuGL)CW^;9&N$Oe#bv5<WPf|K!>u+~LVSBLIRuWQItaR$>7=b)v8H)Z3e^_KSwD%57
z<oFXSfBGV<yYWMG7k<cWPy_8%0I$2Z<Zn22`#1yqGVEi>HuBTS9@kxDA+^O2IKw&~
z`NVVu*e+tToy12=Ly=(}e{obFGvKWyt9uqb&2Y%o8CE$K@&7;LwY0?dT~wg9j;e>8
zEIVMy4g4qA?QzZ15;^Va6}6WwAkV3dHuT9RANi0K1dg16Vcv|a67>o?ZwW3L&`3{-
z3U$A410Ipw3GBX`h!95KaG;@lEYZ}XsX?~zxg_{r_H>+QR1dRRf%$%Os>jH6SY{by
zG^QVRnNx%FT_2;7@y2%1hJdz!galuDuqfEjBY(9#u)uHADnCb~FsYqv&I?KE7mye`
zcWg|Dw4?ij!38)zhEto67;L22!4?bFf!e!}8f@#8g7A_Ocgk}J#jWM@F^tMo%qzDV
z^Gb?opZ;x90ZX!GB-vb1m{&GlFlG}Gw&}fe?jz}IC)!oFuoVI2iU|_g<Byu3aRMTF
zv~?d|`w<+tFzJhoL&*7@EwWmAEZwa02bvEor&SeSJAqjUE8;Xb#XG=GzGp-#pnPT8
zbbp3-)4i?1EmIb-?ny@{9b*^-EF*%Gy4Yy9IGY`Yff?;iDAi8v!)|QCEx?foznMk{
zc;Tayx7vk~rd8h`kt&x>()V_frfm!?VGRLyQhLS(>3hFGjytJAMU>i|@Ey0f5iw?W
z;e31>X1(;63><}SoD4@|KrX@W6?qbV1M(95UX^bpk7F(#&GI;<!%nabe^Sm_`NK#4
z#W*iPM<y<{_HTBur234N4QAId96W68-_!?hhQQV*`|lV6CJ|UtgX>p1)aUS7SjQv`
zzeay`WI2r>*{DIjVF`vc=W~z>SYaF;Ur?z|D?vE=5<&8HtF#LXSFIBeoa;mK?uBB8
z^YFK2fYpe;<P1nVOH7ttRuJhfJZfv2KH8PoG{dxhr1G5z`qcddg@6hoe9K^ylqVzc
zX9E`DiJy6+pT4FU!ukpQvrT4v(9;;XSh*@R#4DRF*bp*PU44Ga3A#R|LlZe|6icR$
zHrbPrOK?)@ssF%m%uVZOb1v9u;Apo-bzNlGV!RM*DGI1X=W$|R>F8Ik*f-Q6#ChQR
zSpvT6=|zJ7G1h`8p@{-C;$&bxkIXM|N8&jdH~tU@!WRzzgRJO0JIt=6d47e9UH0FN
zuR=`_&<>Ut$+B!X%#w3nqraAp<ILUkd;-eokJ@3@-oc(??h>hWCDc9?==SIPo<-0H
z=KwNt`tUVrP9F{yU`?kpk$-)9dk~>BWX|z&<n$10$q8@|Mf)W-sQFi?C$z;BIQ%Jo
zFn;<u0pBk42DSw{hwn9L<PjsIWoJ$xOf>)VCB*pwbu*407FC&k5DL+!opg)0P-H$4
zJ+Q3mQ&$a8bmm-`_5$B~2s6<NcKw5(d?HR90>O+h0;0NTz|uiDJbaXm1D`hEPf=0p
zLlBB;Z|Kl|fJf~#ehlLI-~7Zp2bY14cD;*^u+H%4N!wmW21d}0wlIP}Mly5+Bc?r@
zCHxMV@8bRxw+-)i;D&K<MWVM+{w?@}p=ZprnAR@C2>5HM$j*)#<9fxviU33o&`SV|
z!Ys>+lzw|aAL=fx5QFJY4VP7!v4zm3{S`jE=`(zl0g+9>8F$KCACiOL<AgWu33~Yu
z`r?6s=JsW<gE7+1<tEE<mTiO7;>7<5`BO?pyKdDB+yyqaAhP{Ki{%I@RU|1D=K3DL
z`FEz49@j(ot4mFnW910?e&AlVSFc2BwmwByl7^(Pf<PGstrd;4Zd4U>mtX?u;JUA5
z+Ie6zDmaQBygM9PG-#%8a1{K_BIr6cm^!4Lc_zzVgfiHo0j1r>Rt>Nfk?kK@EC)#G
zZ)!?6uOF>E5iQ^p799!-7DVIBukQnR7?5w41?NNh?z?!yU%?UR+Xid@ER$J!KIaoU
zZbOHno(t<Y;EVd)o4RfM57ne8pIL*8`nd0S8`~gSTmd=^EbSB~ORi|x@;}Xm_ML#n
z6|`e;j!*;mGdnOfJ&+os@-0S1s-}4Ql>xi7?cY!wOldv&Pg#P5#uIVhg*y%RGTe{i
zUXS~6+!KsvdZ(Mp(Q*&YdipEy@Hcu`iH8^Hp#Ts6LBl^E9|Me(cIKNb9bC^ZlF@*c
zaJ$i|9RoZ3x3iG|ZzFK}rt#Q)$cyKB0sKK&Zb_a*6p{C6+ms=;#J3eX=F5Jc%n4`M
zoNk=vJ<oYo>US#Z&J){6MK6L{<0KP~In{Fx;vsP;6Tgo$&b+Z$G!|BQoA0Aj(A4|6
z%{osX?7XbAmOdUaT7c1`KWkM~_2u)|H<Kalj0*Al=Q_U^0BkGn?YMu8`z74(;O@qK
z7WZ-7KQNx@oo*@za~}19OKb43nI1~<Fqs~f;^6^I=>9y`CGA|sxsAVvq;YO*A#PWb
zk-nXOF?A~e6Su3Uac<K`a?d0h3>fjpVGKBP5)8PH8$QU?wkV8%*7FzqOh6t)oS#__
z?P(ZuV`xi+TXvc*)S^BJo_Jxhxj~#9<%)s%WMqoZ`=h#Y&Lg%*6OIX5v*;q3cj>#o
zLl*Hg;-3e3idh1(dqEk9-cTj&Z2IvJ$r!f&0tsd_`hpB!?_I>(Zrt6t-^cw4ZfcC=
z4o&hY1$(am^-t0_XtYr<UVa1?1KNr-WGCPWCEAuT20y<3{V;y?oIu~d1qKYKxRv~H
z!<xhI;I`u;*^V$TTmjy-7TOizj4|eB{0&9qz^s>}uRp^5GVZ;&&)}Z(qb%V?+%x|r
zOZXeo-N>Wo&`ss62oq*Ndjn@XeLo@O`um6U&IaGh=>19FctEov0IB2z90tQ(eqR|%
z$PV2KjJls;cs2_n$v$JA4`{cek1X3fI8d$+L#pDNfcn1Ij{_jI^`-eCX4=2MkDo8`
z<D;b;wXpTt7WhV)=0<d4IP&mG0pA`}^_2`m{tO|XN63Ff$jO+Iz#QVp`Kd(^tfoRu
za{^+xn;~-jE?@L8bPo}_E2Qj%(_c)uZU&=6c7w~r+EK&NX<>A?``$$SX|U^k5Gw6g
zgpP1>!}9uD0H7^3QWkwKd=HJ%TDaip`6h^p*Dd4ow@o&j?ZU~A(O8s>!9KjHm&NPe
z&u!=<LKRE4eq_vBj?lbC4>WHrMH}SP(-Mz|&3IIe$54w+Gi~x+Gh^iYX2#36&a}%j
zXO58P&Wx4IW=eA7%s6?=%+Yeu4*F`y$M;7q*hA8~;b1M<dcj|-;?FUP+7aV*HN85t
z??4`?)LEqdnH5g4slAq!Q_O7Plt>n@xp<+r%6~6P^%C_9{<rLxZ0%d+Pr~;sz_?<n
zAP@?CH%7196Zk9d-%>0ul*|O)#~3Wuf}`lUl=@lyCPh1R{~qx*J;Ijid3u(~y~$)_
zbpdiBZd&TLf7X<4Ss%ydjll8}<OPo`_k9n7ia%DvmJHy8e@i{yma0B?!eJGQ4BS>_
z(_wso5HZiy@3*?`hY@PEE@H^1MTk6FnSs4?+M2fF6j#O)af7&R6Ammb5hu29!ETkQ
z&vZg-d>bP@7k}E1#XpU28zre_FGel{a2uvJUAD<Hnl8u4tC}vy%X6A8+vW16%Om7^
zI5PTi<)+JVQp=mD0Ix=VVuyJ-7Nq1q`Q$f%HX+i~`+wQ{67Z;s?BCnB*Cd^EI_XYA
zzyTEnB``2BiUuShghdDh0thN<Bw-UmOu7LzKro=hHe*yA*HIM5aU30S83ETo5O8O4
ziHeF2<6I1A6h<Oj-tSjcx4RPp>YMNXzW2VzO}b94r%qL!syekB8&H+S*_=JA;7{5m
zh3#$&+m)Gijf-kTz`vrKU7HB^#yObrxY*JXh}H3P;LK%gC`S6(hF*D6W1et_y*{>j
zn{;3wJ*lyuh>nRVa~sPB;lv<Y-p136-}f^0Ufi@PqFa=ttgOQ@Bk#)dEPD<(CL^n2
zYkXE*y*dK?s*)#ULY&_<Ahok3urnSKFvnJuug-XB#eHb$-bF!RV@lVS9WOOOzJ;KP
z0es7jJ$}&K7p;eovi6}!Lq@1cjHZ(1Xv$GjVi~T6Q~NNoL3s{`M0VqP_|2-uzDXcL
z$=AnffzvXtabPVSW)3|vhcqUX$Kob`R|{+!t)c(qV!)M<*<9`mZRzn|$k)~S5s9#F
zHY&iBp^E(ox*zf^kh(#sbu&q}euNkkp>um)NRmS`&&~Z1H=6y+{*<NNhTmWD`wYK>
z_@zIXrS->eIes(otA`!+=8x{6DKV5{ynrf+?t2(S6fAn|`I?0<T>{c&ta5of;_@{{
z9tiUtdv%0iXDh<sybjtexa>JVm&85y&_z&PX0Zm4poxxgp^34fSXlauw~zqqBE2!#
z%F8HtLt>4dC~CT1l8MZl=Tk%#3<SnaMi&5xd6Lk>J%rs(0FVP2MOb4qo7=!D7Q7R`
zvCku&Ikuen0vZ==UG*#*f>_XNv{xQ`*OIx?#MlFE;sm+G5Src9cZ-MBa2TuMWLCp#
zSPid7HS{c9h7^mc_>j<`?mj0psFSY>O^RpfQfOA|qE7Dm2WFWXPz=9CmZAZ}(o<gW
z+dUkb3+twTMqAgK*2U4*jTO}mXc>90JueX0ln4xsGf@A=pf&U8bPSDgg<@Lf+l+ol
zx3#nN{Jfyim`fMj)ZC1Y6K&rxi}iA+ZVfo~yx_kYyNl=_J{NgrQq}0A9RmCtD;K8i
zUM2%`Oy;<mdrQLWwOsS}Ed2~rn*z&ERfjyDo7o*>INE6?C9u0P0CYT!izx*=o_#`9
z)a=_~Hw3>)_|3%cdi?&1A1}MJLIy?OoVNzu_7dXe1$ff#0@yW{(!wS!y3^uH*$!YT
zeFCaDW+r2?Acv9tW@7}hgEGTrDL7!fzWB37?EPZ10q<vHtR_9KMCP{f_)pO*cYa=o
zZQSO<_2O~HyU(I)!E7P635~>55cY%Q8>6u*G0E5p7xp=n?H0N)f@=x7j8*8u)f}C9
zmUvG+!kPIgWI%KLSmSmfZ`q!m#W72k1A=DFkPVnN;*8M(F=Nz#yy1+Im;(rp9A85|
zq1l>nfQROGK1{hp9GXM;OJlifXI@`1Q{6MvAD0?bZrES>jb3K2{Kko^fj`3ejqnW0
zVj#ku(k;0MMhD*si!W369LAcgn12}!S&72WS&u}7A7motVYUh>5aVCyw?yV-yqGf$
zBZ}SgED#y?_a(OZ&l-<m!q@l@6!4jxr-{tZd@N_t8av7f1tbrnL(kKb%t4}tc^YI?
zW&ilVXMzLeSmFS3(6j6&qy*lp>ae%!Kxmv}{a04&2Igd`$jMouQtmpFXIb`z6O%cm
zX<iDm_(L%e6|!t@6Kv;)Cwhb|x#t_M#&E2vADq*aj}Vvk*bu@n97BW7XdR7rw?jD%
z>1v!ONYgSB0=5iSa7H-N;#Fo2GSW_JxbZa@rft-bZK~()DLZkzf7y>HCo<kYLkZ{S
zSTF{rvauqDN#=1!u)J~eHe>GRh{o2H_Zqe9{u0De<-Xdxr^7Sg*l~O?Ch=g`uGQ<=
zqa7^j>b9(hAE9}3@?`Aqp=^mw%86*3ecY|H{#fTeO?`eir>Vma>svbaIo9WJpP$Y-
z+~KES@&%ui#Z==Cg+AL4?!W!u{^~ayhv5#UYD~yu_L$vo^?TdC+19Y_y=|X*UU|dw
z)M3w4TX%f3ZS%qXI1pF89ydoKTASt2IrY_BxFx*9wyFlL4>qj3%?R0Ufg;TJNuqr4
zmKO6y(1oM;zm54c(4+dDby?t%J}tN$XV<pv+dka((FNa?#m%=}@Ohd2oX<Oam-W@Z
zfrR^(4({)>y>UNqv7f*omigKA3c5EQ1x*y!%0W-a{h!)%7EBC!kTsimeqP(d+fQ<*
zRaKN6>k>HVSu>>M*tDwVo<SD_TXGwnF!cypq>tXXx?z*Ke)YQNA>4G_w+@#-Bzo5P
za0AhyNti6JI<z3rN#N@m@Ci66;1+NJE>%U0Lf;!Gb3JQDl^nyhn{`{KRT;5mxWDoz
zXdGp@58`W~@i$)US@ToXcfA{Z0%lijj%|z)+CpfnDv%^RCIER(D;w6RSLEQWAUB#-
z%q`KfWuC3E_u^im&G$<7Kv(SZJi5V#dx)&IuE~&XAiq^ZG(wrWbNha}=Ng2?0Z`mu
zw{$Bg1t+=KeIIP7+O8e^#Pqr6dANz3Qk0ip=~;vP1D&lX8Uc!ONfB>x3c8_lLH9O@
z`t9PL5d34wvZTql2=xjiZoao&vKsFcG+{v1K0Pv0yU2z>M`>c-xHQilb&Xcf19cZ7
zqJSk&<UH@_h;0bO<mQ0~s=H(3k*zDI%T44s4I!kCcKC@m6e8(iR%*>iNzsfXSntH#
z^qj@BW;{9VP}d;N0%Co71LnH7RIPsq_mZWTJ43j8_1|CM+SQgxxVr=#Mo)v_{X`sy
z2X<^FCqW?@)w7gBp+Ivy`=y%fml9?_F)^Sx5GU@ziRU+B#R%|{FsF%pZ}HsxBQVQy
za`86uf5V6w>FvLe^GeCJtbB^4JXMbYfyq{k?B09t?GSX4iJ-f;Z1nMV^XEZmM9a99
zOOt}T(!gDvj9rki&arjv0DhlzsbI5Z+kaXR!!cpdnu&IH()<CEa;_)#X~mh3A}oXS
z-QF&1?%^KnU&U6CL6-a8(JHVD*7nX3?9Y~CCtSzCQ{`Mhs6xUsPoon~6TV=lR~&S2
zEXNH^8S#PGV_O2r8Loh*@e0oiITmX@C&tnm-}SsuZn5sKT7>!Y+)#-F2huAB=Jsu=
zsyK#W(fOev$Kb0nGd}2xgwl)~K|StofkOi3_2j)GFuR831vh~l$ce}uC4+~WjPK3^
zWvf{Qf(gb~FyPWvwyBMsF)BEZS>Is11?y_z$EbsLx$wY?sl+-Ro^KN}s@isqo*9F!
z++Em)8A@CB>Ee#qLg`#>Glo6^TyiS!IV;-eMW|YRf2>-#3zrL2&A|ow2vUlR+%c=D
z7PRv9Y8-LRcc342hA=s~yHN-byF-UPPcJmkvK%~|nQP#R2Ai?xuaIvxgGohHpVCCc
zZr(=UAGhvvybpbK?#`-(yU`Mo5ktAVjh`@DK}{^p+`q_PJ!NmBwK}*LV(g`lV-%6Q
z6Kidrr$GWj)!|xGW6WxWH-Ndu{LqA5*q|jHLwUQ6JV+tHlg>EnT%jEdip8gQd%P8z
zu-ljmsSGYgN1$%(cVd6T;I9Tze`LhaXROp8{R>0yM7B200(~#S2tA0+oU(VJ6_hhs
zfu3Q4NdX9c5WDy!sYh@*kE9Efz6DAfQ$u-3U7lek1EpqM{I_r!c~CqEAv@ISNw%uo
zU9Qai3oi=o=<%V<6vOlMCTs34L~}l(5d?H$o<4(NF7g!XPCecYZ8|u|fG6ev?^A<B
zYgx3oD%Zssz_4JZKNTgIEdmm5h)0;F8e6TH!rN`EKyT6_<if?f!oux&dp_6*f~Pbs
z`?SKJgO%6ZT{X7VjB6~!fT1IU-_{UKv%yCejHk9hP&)!eaN(|MUI_;QSgz-fud?Av
zvR;S<br;e=GS1UCx<Z%P3dSOV+*yVli0ch5Gl+HUh|K(xT6v!0CO01ebG;;(3r7%|
zz>hZT7nlgaX#@keaN06AV^cvhb_INt`N<+3@0Ez{#b_b^Af;!_%4b<Dm>E~|@sPhU
zOO9C-)BsefCRqcTLiGpdK+tv>&-@w5!5)N2F>P|8avZQM#BRSuzvtQrjyIAO4`65b
z8%E7j*ia&*X5Ly?{{#3SG4vML-~gs>Fa{ifn!}2VJY$-nt>&e+%qEv6?x4=x40{Y&
zxGVR!Vpr}txRF{;PL0P*>2|EQ4L^d}y_ir^zOl@}Kn+PZx`I%iYlgerw|frv_~QK$
z?8Hc~x&g?1O)Vpvg9$iL`DRN_vvC{B`_f6(IE#P#9eZY>n#z6h*!Uy%{BqyClnr-R
zySs8D2AkR4qzq?FyqKbZ?GB>`SoXXN+mJ&R0OTE9m=e~DlZ{qNOLBI|^TGm)6|X#o
zu#hSm9$V-_-o61r!hLWbJW-@by!Rmbu1o_rf`3NNhYhBxAYm=E8*j75Ip7f&_jYvy
z`mhPgmmk_BW{lBw*^D>P{bXL=H7%&)-jEjTGoWn0k2^zjxVy$-d4Gq|9YfYe;t)<)
z--pQUdHNl+=Z~T8S8eR1<Qc(-yC`sr-6&Y`W!m#xXg_X8rtKL9&PNBREO!_cwEP_`
zGk;@Req?YGaL;M9yvVccD09oqA+*<cz<``9Mt(=ESf|GrEZ1cY5XG_<8|tR0hT4#9
z3bz9otBGet_TuFc?lC}~{q^riK<-{_J>Sb5yAMXT1iRoHZG27c?tIi*nO!&`z&ll|
z78-2aa43e&0-CHHhO0@`W1vU-#hjbaJdQ3O8Q*?~oI4kr*1^?uM3$957Udavnb$1b
z(9Y9g6ArQ(UBoDGSG5C~F7j`OF_u<lUP2#kE<~P-b!fSdzJZs-Efv#wR+(9%9k`Wq
z#+lgb@P}u}me^?E`2**nQ2Qqw>476k6U5ruLc5qp01=)SuD4hZVS1oUue#pBQ&Zy{
ziv1=aH6MoJYJ6UFi9L|5--eQrYGf@qs5^2FTj_p>+?!<q_h5%eu3>!rEy=g!8Wuj;
zvOBoD(Tld!^E3`SqG0wKSFq{GMTsKUn{XBtH!*}W{cOyygp<pCH+cS3@K|`44VPYV
zk0O`>_fla}0IzjOE;+z953jSjG8Z0LWDPBp%p$hr)Q3vLwF>vG;aElPfh<JMRtk)8
z`;#Py>{7$tHMcoT&fVB@2XqVPqp`?CAf%p`4T%gOlVwF)>_+XKaNyz|TPubSu14{1
zIwyDcIk^UM2K_L6?>64vhgKnP7joq6nqd|d7HqK@9U3R7Vrpy_WL1y%kXgq0k7D2A
zr-3xj)5k<Qt($=fb6sy4%YdeFA@3LM7}~skmsQZjvm+g<JL#dxw(84uTjP|fW454=
z?qpGP!f=nNcI%Bps*dSFJkn~dGwnTVVy4mM+^S<1j7gcPhzRr3%YFSD{bu|%zWyk+
z(7VQitJ;(in?oEuTIi~N9T&~MvCz3}A1(}<g9FEyio}eZ?ZJc7_0VE2X5nH3%j-E8
zytQbjd<#v^wTW{H9`38KY{3F8+HgJO#b#a{Ho|?#jj=;fl^T$B;!+xWWu`Z<Puy%=
zFcDkUDCuGw#0CS?B`uiBUo;wxAFk*LWN||%_OkQcTwY8DE#E4`)|#z&ifK`2S<1Fh
z*i&Xxz(GN^(Vcy9@as@V%q!c1FHmfqY~I6&okSuoo_7s3Ut+ed{u$?HX+|F~Z`DR@
zodFdUzsc(R28c+;-o9|m7hPQKyDii)dwB3)U~={&OEw;0WpAju0f#ht%&?;=6vxCd
zQI~H#1&KPe@mY&;D^^cJP1U?d69=zw2TM+3C?|2rMmIzyi3eTrX#=n(h8R0%mg8Jx
zX1Ob1&n$Q2j+%O71*nC;5G3N@mm=ph?fMx#$6t~Gb$DS(01)kiR$SgQx8TY^Sz%Gh
zY?@21?m2o)M#<F~C3CgF^qx7_mCf!s{$folyuRnC!azyS>`NiMEByrM=alr!8=V1_
zJ^_hiX0T^YVM%$<oNT;DT`0qi9;Rv6mX`M{#na*$#U){VVaBXNh5=PMqZMuCinfvx
zK}!i~DKC?FatZ`3f-cfhRDN~OA-Nd<88gbS7PJXBleW1fNW^GClc1k81+JeXkqx;t
zOvjvz!ZJn2@R4ou2yqLXj2m<o3~NJY`J7oK6d<D<hrH=0Z%i8;SC`8u2P1y^FUXDf
zH`6BF3MH;WiOY=JbQ9r}8*mD`q+5B<p(B8^JRDA>cN}OgNAU=^lCYZyC)`xN=H<el
zN+<O*d>A$w4=%>&bhAAJ`o)^Dr4pAIw;+L4%?{6<_C(lL4y39DM$af+i%a}!p%~vI
z5Z)k!y2=K}8Bc~?J`ye;)5S%Xx5F;42$$FB;)Y8-@6;PVqpY~FD8H<DS~1_NpD<!n
zVafDh;q>BikZ{s>B7P=p7<UAvO7EscQYPOXbWWq}*?2ZujTFzC4me@PyT38Tq2n4=
zv?Ytb!9HIX?wJt&F5`Z&u?6zBD`WX4N*NPoRA34+yoCTwj@Yu>Y^m_0sl}Lo@Ufmj
zd#GV#qZ5rsu(9u_=2&A!6$0``fRV35ki|A+4^~QfJ2P(tkZTZ_W56F8O9-QkYRrq_
zsCcjH5AUHFv8pI}+Cbb!7m7oyV~=G7iUto4{!oKPKiTN=27J~VUt(<2IIN{_OYlew
z4vE#jh*7g<6kw(qbi6nN*o_}Cn&EAX=q!wc7KGX&k;0ganQ-)jz-VlRFNz<*=fbI(
zh|mZqQ8pkVCTYNnh;WZw6^Oo1HUse@FPCh*2XZ2M8Qe}-vl80sng@hRYi{fmscv{F
zoNDCOX+S+K^Y<<sm?)b}O{bCC{QTFlfRVyObLPV4itNxA)+x=~4qs=j+M!L$?DrXc
zm)k>!$26X98s|B3u>BJf45G1p=7tC37R1_U2ZDvKp+kf`;#sx|XlLPC=S}&>q=oWe
zA6NKhO{fvOf%0cf_N@85z~}@w+C2&k`Lix9FydfQvy4fqxob4Caoq%jGM-{j_7B?5
zIDkaeEMsbG?qVqE;a1^+wli!m(*rXi8pAch18qU!i*_PifpbCOQusokrMoPMG4-+_
zp2M71<JVFEtH;tNrn5l`k5Onn@ryRIY`}8gKZ6<YML6G)HZ3z9hpJE|Ht1Y^+lSMd
z>(S|mx*+;-<hvEmhk}RlXZ3IKvpK+My+g=qtuwB^8>BWBOpJD9M-}GrD(=5T*NuxW
zAo^i{CPGicHJOuHHSPh893AY~oZCcRt;zjn+B%Om?aVhlYw)ytHLrBQvjCno+i_<z
zwgRH2LiB41eliVv&UhX@_ge;Pg8aWbf0nJq&jyJMJP3$|(2)s7M=12`r)MD&!~qeh
z3CAc4FlA2NW?MmqhIxYF*i5<!!-S`BkONieu|Ki~9N;_7K+kF#LC!a?AWY;Q;pLVP
zk(+V$2X~lqza;V{QAoyox5p)e0NW&BqnCWZs5P|cJ3;Pv)vN`w(f<BA)`Qd7Xa~E5
zHoe#j8p%Y%K%w;W0sM%iE@|8ZBgW{T)`3~U)Ajkr((B37fiY$SABQn}y|^o@F;i$S
z!DaztG<>m0y7Pt?H{yB{v={^4fm2^N;o=kHx7<{KnzYF{3)V8aF{H3sP>8Fu{Wv><
z>t;#ji%%ezjfz92$6oLl=HPpQn??V7P{}6br+<KR<)tR=@@YdOcJyy#${IXt`cA{K
zFvqm2W0&JnKh7q~c67<c6<8cbJ7W$uj)19VJX(iToGU`2(H}XZ4(0;mbXqi5AA?NW
zpT&w|%*RS%113MZ^R7xT&#O!dg=r(}O~Ic9C_A*6^tgvNf<cR`-!Bh>xu98~U+!5p
zKw9G%skk#Y1Qx>!gG<kXb<I#+p5sw=Uf4A{LfA~W$rk#&$CM+gA;Z1<11U#(Zu^d0
zy0vE6AGze6cSO7)xaSpE5|u&j!-PYRP1~B$0B+T+^;s(18hVkTcHj)khR{bnKHPQ)
zp0;a)A^(2^F&B;2QM6&wSH5w>d?t|Nsg^(mhEjN+7B)4@-liwxg9XqRU^A+WVDY8X
zHZPq*qAqV04cd;H8ish0<oDQdu~8{vl1OTSBn!tY4vHLEb^&T;O%0I<-^f8@9DE~(
zRqJ&!nLympTQWVrFfe0u;hf@2kY3r(>_Y4X6Vc6}GX9`C@XfEv4*bXlvu1IS9rR0K
zec4w`BJP*akl;p4!GaFX^lhmTE`m5??Ln}3)hqOh!u%6bCt5Mq@EIL&^bGg6xa%P?
z!J*Q)5{P(;<35%`TOSbkD~*A|N1!6wb$B>@XX$#yajqh)MY?81yH<q5{&SwF=y(k*
zLfPuD>+8bRvur0QqnyzY&XF4IJ`m|O{=pjFz;U#aN(49DDMAJ@ld{*Cf4is*a;VLB
z%g}rYPbKigIgtZK>1O2R$Ow`dO`t*exmY6lEfMuP9#O>O>0xAN0$I4(_yQ!0_SnUC
z)CCLz?LUL6|9b`ze-ZYLD#32xMdX}j^mtkNxs865umbx6ZLT&=3uyDTLcCR0tX;0<
zYIC%!g=s3(BG{F|&*j=EsI-|48%nM1h0TE<h8Tt)@f{!P`1l4ROc}5i;-$2rc0#ll
zPunm<5Z`RARGXpAY!`#5AJH;q-o|ik7?{`zQhzW>K1lLB8347QAJT_w{rz+_9)j!|
z&eib<%BK7J7iETCgvE{M`>61SGT!PV&Oq$LBKVet<P0UjiZ-@ePUx@|XJn0Y(6g+f
zC-f;FL*|nahTb!p?*LXz6bVPP3E?*WN!D>yw;MqMIXUfhGc`5K=+0K!xCQ9&&R!XM
z@a7iJUG+;p#d}xAa+t$O>5Onp%G2v)Qpzz2D`fMi{VhBr*7sAalteawBgD0cnVkgp
zuabfzVG78YR|21W)_6kol%_^YPAG_5M=)lXcO-Lv1vbq$LwKKbEF<_eHk1T<i@Nky
z56(I^5os-09*Zo%gwEDT!U%*~%{U@Ni(qO_XdxbX2D-&ZG7m5O6Jy-BHY!=xO-$Ba
zqXCu?{#R+d?e9qAm#URjXRP)Xu+2mYo6JjhjaqnT!rlcgIqsQd<A`CF)i@1V=vh;j
zZ@8gBQ&ThHz&ab)#dscKDAx$;N%m#nnUK}MTgY5h{5^!UW{p&ZecvQ}@0GrLO5c1}
z55D=vR>$ZReIQdLYjUAT))C{UHL}!Rd5S5D>`9U>mukNt;)cZm<0XV-22)OE;`VPg
z69@Kt0_enK>r!r`M7l7)X1w!~2odI8p3>x&FHwHIf_}ENp|`?=rw@^gMmx_>eTsCF
z3zwoki5APl+v2z^WBeH$+BnwuuoSsBVXtur%Uhg!eV1<4aN|P6nMzg*rW-E^e}=JL
z_%o!xLgkOIVItUh$hR<8A3~~Xa*Y=qER%jJlkUMJsoCs_F_{4jqOYvk3te>$&Ad-o
z48~sGVrER=PgO_x1KinBel!<kFJl;tO>e?MrI0W{mLP_jyXbEnB>>~k!co}f9l2E8
z`NOU^;N$hX%o|=Rly5u+gd7*ByM*fzwZtV$yZi+**%2cSkdoqiSZZwioMIm<X{`~5
zRAPO|I8#F0lP&MddhZsX^=DyH4bPiSvaO;{%-P|}RwFc!M%1BB*xsG_deHwc%^^+r
zLbLRD1a9me`T`Q;8KJ(Yy0|QW{yey7%z<02HygLoheJ%seJ++%qztO=$-zYHX(EPC
z1O0GtTOKgH{S7lyk@%JZoM;apD;)Ybr0jb+k39wF27_;-dh)7!;0*c2ydYM;@UlsA
zC<!waKT5mm#8q_SzA4OCphe`7jPu@P9O7^(Xvne|GazW05zQC~SHzuZXF!}9gcnU9
zY3%&4h^7t+O~m`4928;Y7w1OtiV7w)zPYsJt34B*K$7b~mbhmsd}mfjZ^@VUCu63x
z1NKMg<M2ezq>$@2TxN-fR6~}r@E{(dtxm+NEYir6%Flx~JT^B=8$Wg&u<(L7=jzlw
z6IgP*U;#Ts@!F1SQnm9+P6bP&tzO%RWcXt8N0gKYMg)rIxZc9HRg}KA6ZY{b<4yZs
z;|B+)UQ-;%E-Nd%t^)3z@q2VDP8rcNLbwqyAtvmf_QcZwG%f{~(kmM`&6`D4(_)4a
ze__egVqMEWGfO(!hmM*%^%^}KRC5iLahFRwfhJ*SUU6W?+@i3Ht~s@sUE6S2HwUw0
zfnuD{N7SIf_4xKI%{ipFJWw|GIuWa|T?<>=(6VB9)Doq~G<2PwamCYTmIsQ<E-5a&
zW?b<!832g^$<FMeqO#(0kO8dp?43|j_A9*mqj5{}e=dg9)-n8SAWd8GHp(GRl!MG0
zH<G|Y+J(YmNobrEU}lTY%<Kn{2cl>kLv!W^O9Fbtf2=4ZGKWaHQ*-V50H<k3l*|mw
zESx>_dgdTMW;GmKLuZz>u|5E68w*u>q|eJgL`h93!K8PT<=XeNv^Zq4$#l}Yu8}xL
z_K1?A;sxL-ma9FR^oWA!59Dsd85N2?;1NX@gHR@eb!mkLG`K)R!noo&bLSODVq{oZ
z+|glmZSOnq96z2MV|o_3DO0Yvjk#cxl<ig-s$0hwPA8%GdcTW0m3W~joZ*G#Gx7>c
zdtKOPK#Zon4%b?g91BYNy&QfM+|gbq!5`f-;Nqh{(I<f{@g)q6Cav79HJ_fPy<A9F
zk|Jo08wy%P@fMdwdtk<pO|)2nL@@w)B$2kPr8Dt5F)L*_@~BG5`jZdhPz({KC=!LE
zxt2Gyt$i|gU6F!8QM~`r2{@`24()K%@Q<@jP*r8QN2;n|gVvGt`y}gxRrePJXU#uZ
zRsMx2PF}TtArkk9a<fq>E<y>QB-+W|$G0NEspCc4J)qz^G;ecy<>$|xS%P-%B2nuR
z6#Ykwtp_Ta^gu0$&~`IyTAQ$D4QLgZHAe-O6;R%%b~eOeyrYAqX-p3<N~?N<S3cr$
z?-q1uvAFF5tCa^Jm9c;3;wex2hdPHgVXYQ>YtVnk7<(`x#oe7(axc)1&@5Zkg_dAE
z?p3Hao`cW~mu^O{In;z+H!lz3*@+$880It%FJljAAc~gEZx^OxR|WQkeSmZSn9TXG
z2Q}D|bEq1g>eU9GQX9?!RCgAVNNvGd=BQCDXfPJt4Z$u4n^(+xG$xF#wsl?0&Jc&5
z7-1|{Y^|XYM?&9Y=C`8bP%N;=hTQkUHm+|=^#!3=r~~fJ!9A3riz{0B?MlBFS4hvv
zp`ZHhtNtzW4p*^XTww<K0{4Cl58kKlvQp1E@R2qf-<9ZnkIYBYo|^%T=kA3i_S_<S
z>Wzz$3!HlvcbwqO7i=gMgE^d$HhRJB6{e(Sz6&D!Ac(=@;Ld(&xrY5N?D^J(w1>E7
z{OgYbA<p$}HhNO{tdHIkgL58{ksh`;eZ0Oge*GT1_2acUuG5zuY_#rJe+X~Fh^M&#
zzOwh&%3EJ3&vqfD5W)`ahzMcLA=_#-df>A1*;&Xitmpfltr~D2uKvYP0v<3hsP^4s
zY<UC%*3_KgL7tI_gyV=Ar$2I=u}AI2Sft3f88UVw-czDY2y=YKJc{E{sKOGT1>F-#
z`xA12((~;r5fbyPLUxASh<k4fer<Al@GcaiFNYjB!}0`TFdu#b(f6ptibeX0ZiDeA
zD<<RI_lDd{GV=}~8BF|r;1TzYM#IA(=FF^%gFD0YKBMT}hXj${FCQYkYHWwPCa>hi
zyEZBs$fll}9GA?NQjE14&x$x^=GcNM5o2g8u9ePl86!Bwkz>njs&Iu0T-5_^#G&y5
zSIzimZK07kDEdqfR^;1_d0f8Ff%|Ga(ZU%B?i=Gh!S1dgAA1XMgW$3^7V%z+pT=Y!
zt2n==)A`#P@p3j&%d@83c@>K3@g{au*lWryxK`!x7_=X_yh!=5h4yD2Tlhu@JI{MZ
z?>xsweDR<y<HN>)D{L4~RwU(MGZ|h|vaJ>GD-9bN{2rA8mwRK*9s2`nhPsSw%%(~@
zvGsQOov8KlnOsrt&H9A{jjVR-5Qb+!u+<oE;MR+GS9tm;a2|8U)^$-YK$KyouPgRd
z7J%ZeHNIPrKcN9#YeucJ^{{mvE^;Y<37CGQEwo8o)Pwt=#3M4?gQOXI?^10fPlHzD
zB!(egL_k}b>#nM^3}j=ycwE>HPh(oR@r@b64Rg6XdWnfX8vsvWa+4dj=BraH*y1M6
zBQ$w7=V{o!?GEnDgjMjv#^kCkY_AyyPsSLpBVTxYP_}=ePYg;3U>v)#;}9|_P1^Ig
zh=GO?ZK6rh;3$glP8p&P<@3mk8%Gaa*d&u7NlYYd&F#?T5oB!_WW5dl32bi#ZFqtK
zw7o74HHvl(ZymoX<dHz1*C<%kT;W5h97Zjus>glo`_YJ9ii|dX0>zjhX_D7z+l>x)
zs4|!9baGy-a;-q+S#~FzKdf;s!0wda7(q^#ViOx~-p6}XV-v+eBfdfPzL-bFa50gr
z@gPuga^yNlLE#l|g)(@?tE3LMMO4+3z&j*?qd{QqkxiA1))KDEl|TS%pf$b%H?le>
zJ%Ae8*lJx6?X5ZKWYWF#e#Y@u===5Gil+DbwWob`Zo$EC*B^4IhIi(6lF{RbYOHSu
zn``>v<kpdzA*+3c9|V#3E)cfD#M1?9dhu|>icpxoZtx@8&@2pgYlhtDGkA9Z$-L%%
zkhxn-+n|L$V3hyF<`p*w958yrOVrvOcn0*V<8Sa{<`dZVh%p0A<S$Idfl%;3R5C`R
ziDFNZ2(d3boM$p>Fuk_JC<jMlyBjw`VpR}??J&B6F0mRZ5{n&cO~yOq?kRi2=}iSP
zq^8CePVX2*!}Q*8AJdCT`D)xXl55oDgM0(+wpc5YsTF-iyJ__-edL!HSDSQBLqeF&
z?d_*C#1!BHD|2q><Kt3L0|ZRLI!FvGvAuZVshxBrp#Wt%j5ERBO`aFK%d-~PbAbsL
zTnvl-9B+sATQ_05*^in<%s_5Kg<IQDfq9{Ku|3p-!er|TnGf?E@$2Zo^LhV-J!BQ!
ztD)YD`%$+9;$Ecl9Y#7zh5ZIfW<NH22GS9ae{V{bW*Ezv@@n3-h4%{)li1hAb4FYx
zN7cd{Fy^s0DevpxJ+yU_I44`(7i2(8ItxA)lOEJs^Gfo1yiG%EOr+?B`#RbF8uvq<
z#8V*<3dQ>{C`;Vm?F!{3h9<ZXRr5_^$(mOz+Slq?S|yIsxp9UT{;*?LOl~Utme2;Z
z@0~a%!nNux#*J<M_1Nvm)39tK*CC=xJbZ`eM>e3T8Ewnl8vGaENp<1<+_AW6MqY>4
zmX6XB(}8AF?lnZ1Xg%MF!vrrbQtFE*cs)y(AZC>3R791JWhrb`;NtGPeYdX_Z=I*0
z$5~c4?+Wa$oj)08e_MjiN<1Q~1xCRpcvhojcvUl>tAgF)d8t1Rv9?s=Jl_lB0l%uN
zJX9C_qS2DI3Dz3d3SDZEEINkgk;!b|a5{kdUqK%yRmH{!G5J{r>Mp@4Ul0chC$cqG
zv^|25plxhsQ(2xM&4o$koMT#GP-aswophy4TSAMSW${AO^2L1HaL_Yt^AOl-IGCX*
zibBdu>J&NR44Zf}^K;O^TMP@pdPU$ptac8wyvWU92Je-CoQg{a>y|so?vz0=ys5<7
z54@sk8RbWuOvY#jjn4g;u`GZD(iuo<aLB#DVz|i4Tt;_u8GVznfb-6L#$hBvs``WX
zW<Oz1yMw(mn%Wk;EL$)!e=Wyu>N51<nB`pBRqKNNY1om8>;uW;ss;|hyd^g$VE;mk
zpN7VPOK!ku(4v)}JA)(t@a{`gG|gD`At#vqlbJ-kmAuKgf)ZyeXfLoCZ(=$VH-{n$
z%65tu#l7~SDT#nS{L%_|*>@)(K$Y-C?!L#p__#Tr{^)*Sl5ls^9fz968|91<l1$ac
zuB@NNWiX5UJ#*_>8uEEP29}5HK|2by+z#EmxXt$ExMqJbG61jGP#c3(F)Zj}e|GLJ
zvp;LG*TOkCVeO23tjty4fHsN`k{FAr>oO6#Aaq7^14M_`%W&COtM<$Y9fXg;<!1Bd
zpM>cd<HKj!b*fqTK8TO)Y9Zvr#vkQ77ksxV*WGlp&NCe?XLa3yma(qotS$;(^}aM4
z+a(;L%=rrTQ~vT5EK=}&1v_Dm0%!DRWf`l%5={HrH0B5R*7!kjRp30_BLjaecu?yr
zI2va`pg;?TB{D3!2i?*#ky3^`|6%&f7kArSRzD;0ORUg$g(BL}e4|PP!THa6ZT`%X
z;wz^Y2d<n~Tvk4FZV3=$EjEDF*xC5&rJ$zW5}$w5NKK$!`bO~VqL4oWK0~$}>kSle
zi;7Pdhy#}TheyFTw%>e@I)&lNr}b;QfFR>sgMET3TjKzH8{bj+hRVOF?4t5174UD1
z!G6ein+p2`@y@#O3Uye;YB8Rpf;GJs14nRLj7O<FL<N0%ivbC|#i*qcqJjpt#h}D)
zR8W~urHl&ZB3i^+fiac3E2uC{;+{Zb40Rlb8@W`nsAN((k4hgZ8C1GaIfKe+RMMy<
zQ%Rr_LxsJQ(SjT?_zsrwA1X~$_#Tb%HI*-^?4<G$6~38lyhCLR6}}y7yh>#qmFKBE
zP2~wHeD}cM);r^VDu1NH^DM@#RBonnBb9|z7Emdt!Z#F*nN*6XTuJ3pDif&WQ{mmT
z#!xERR0dEvpUUs3@QxItJC!r3{Dw*gDn2Td9gJ8ib}AYb%J#;ORKBOe1vTT}RJhH=
z_>4*el^s;X`=M`8w~@+gRQP^{@eeAisr-$~V^kid@&J{)sZd5YYN#xyQblDEmFuVk
zsLZ7@i%KySzQtf%Mr9%uo@X&eQ5i;MFqMH+`cvskh3DUlbEr@bH9AwF>?7oHBayl|
zDh?_ZDn}rC8V9NTKxH2lgUUatd`{(KD(_QykII`=UZ+w=<s~XFP<e*RlT`jf<q;}>
zqH+(FJE`z3K%<%p*JF*vRIaCjEwU{J=M9W&s7#|$Nab=WVqe@i>hh=zr;<bEA}SY9
z=|_e8;*4{toJFMzm5x;S7NFsUGG)VTQy#d4n}@{fXC1ya8+A%5|HpoiM<6g^d{S{Z
z(&F#oRN0<a(MtRuql0M<)57;MjJt0WG6I$uYccnS%^z&RvF3dDPuL~W53Q+q+u{+?
z3e&i%E8O9&y95~knBZB}574*`2w!A_i|*l{7~sl2zG~y+>$t7}v8HC>+YnGEzM2I;
z`~Q3e)^&5=4o$R;GnS$2om`!}6%VG3HI_@m`=O!kd?O?c4WWsN<BUH@!_LrX-&kXb
zH0%luP0Kd|(y%);u~W^$$8qp#;;UC7l672fKup!aC((~q=VICq_bERAWA59QVE0h`
zQh0%^Sd;rW*aMq!#)-FIFVW`I8Sgc-p!Os}KnhKGAAx)1HY}?PrDIQDoppUPj&t#L
zl~D8gf9uwTJAWKzt;9tERl6+Jxogq!ctfe<3~sEQj4gWAxi2@yg*;2X#9lT;_cBg}
z56nVVV%&t7A<(w?Y2-9(z`mz~GU=zDWiNwr(_ez{XHot*H;D}`&*vLwfJiY_InwYz
zTb;WF@|wUbLs%iP5i>({e|R}l%eRP;KL={^4&X6MY@=Jm)P4!+B$T^R+&55w^o}zY
z!v;H3`&KPV(*k{GxgaCl3M*_`MDot$rn9E%!8U9?d3XTP;+$1ewV&EXM}aYpKBr(}
zN+vU*ChzgFv-C(ZgCnaJ`Lw_VRf{?Sc_?RqwSGze{9J5_Iy;o_%A8;Xe-j$sFY_(W
ziuHKTd+8eiOuX*mH0FR><dNQpQP9iz1x8;|ja&;3H4+7FZIX{|$s+mma^}OgisWN6
z43fXMCU37y{$eKos~>@A;YPAZf0O7`9`)OTR8%kADCoB<`Zq(QmWOO>YbnEGpLJi1
zAuj=EgNrbq7c<eoT~69$-ub{i)~7LBc;s~lij;GF`QZ3FQOuKZ9?JNH8e}WZ8~g~S
z!sdqwO_>u8c$RTDBl36bB@>M|;RiF6*yFftDQqE_SA<5|s;)!Pl!tDxg@(EEjd2nW
zp8DJyimk@+$}wqUjVaP{cW4-@QWg!2@^8>!CUJ5;j$e<v#NhY|*l{FttZ~nO$Oz*8
zYQ*9xFkTaZ4qsyY5iXl^kHCn>gus8?HQ`y-6S4(bFO?<Y{im^53(>N)iB|gnfJ+c&
zk>;$dTDuz|v6u5EsG-_jP{$cJ3FHlp=R-Dx#pF;E(ke8lTu2jd4V#?V9Q5IB#R;x)
z#s-*0J_Pl~*s6Lyt_=}%Llwp&fj)TDbDS|mU<4W-KS5$yJ&$D`o0l-Lz$iuAizSK7
zWAlFy{eh%gjvLY9^?``Mz4wB8Yp%;YEAro(DZ_8L#gzs5^`{;ihEHJ}IM*#E0&?+;
zOE9Ky9iHuM)UyVU2smy@yD&ZQAKcc8!-PFHz+TJ=^xcm9XtZII^I$BG1rK6QK)ulw
zMij!0=eMLUPs<t{`k2dRp9a6@{DvAw<hj<0%885K#a0qq=9|F-nXaG>CmfMd^6^R2
z*<v4#hJ^FC%%xD>`+JXHE6gb@E8?Plc)1VlpIB8^%Y9s6M!nDy_aUsm^;#jeUCb<*
zE<#o&WoZ|~8=(qGt*#A6IBVSaA;HqwGpAzjMmc#=U>pLMn4)0mi0LJB%ZjPXo;tO-
zG~j|Rx2$Y#nOiMqj=!$77~2!D|ADw-#}AoVRy;L;@rOV~r4|nHL(AsQ8H_C(B_$xr
zNmFh~(Q!B$Bt4fD&J2tzE)UKQ2qfr;wD;i>JHM=8=5%C7aZ$|tvhg$L6weI?;^voS
zUtL&IG`FO<$T`1E(3UX2Y{ZzHxpPWq7n73XqS3Ox1+5*&=OKofj4XFvaY>-pcxsEw
zhR!aW9wvSOd^%}QvI(<i&psYsEqpmTodjRGg@}+%7VTwd61rS?oaZnx#bwx=z%+}G
zS<7t#{PftN$lW4At=ya;ZH0x}JV5_i;JYk>@HeU{OW18z_MZW!!IhJEN3O;mk*Qf)
zb5WMogkNGYb~)gehMyb1+Ctm`jGym6Sqh&`(~COGT`P8MS}Ea<1CmIQBxWdf)|jN+
ziln+>=@`m9<tCQ3u)zd}<{VlOC=3Jz<LKHUkTXO((9#8D=4tHHkI&1f>^WQGP5`yt
zh&4h()E3upgw`}$LGkQq+yc=}P;Bl$I-xg>dE-23e9TQI82c=unI2|QRRC&%Bca1_
zMM{1dQ8I0=*aKpEmt-QSbExDuS&}Sp-GO}^Vy}%TMNJ#<eHMd-zt#J*guYbSzY0j?
zzor~J9mvvlUHa>PC|m7a#FveN`Wlc075_t)_9lur7jQ7_=O}nLApO0spci!0JVn8H
z&C@2c(ps14lkkXyu@p(~@uf%)QH9-K1Q!)_=-e`^Xf9lu?rP;tw44^rsag&)Np}&>
zRZuLOfC!hg3aD%63V*R^lzz_VK<Sf33rf&hgo#O!I31$4lJjNj9ZgP~z$MrHn!ux4
z$7}|6Yu2_giw#-2W;Zu>$$d)Eg#2<`-I*%jQjL<@^AwE><wU-9wk>ip_erYNZiMl;
zM`V{@S29(02CL6znYZ~`RY?bUQpbE=!9-&OCI+!Cg4<z?bOd?!$Qe7JU4<#4rJpY1
zRPI(x8F9{(awdF*5?jV~$Jy7a!&*f*OzLjpB!320M0p!M+e#dVi!trH!dpvFys{<b
zRowo>!DvV`)?eS!vOM>2<-)^SpqQ&dI@-<f>Q_knG0Sbi)4;=B;aSQUco1Q$7Pz>=
zSwCM0fRuB&VIJ#sSgDUSnrCA^Fvj>ZTsP$&7W10bi($19uK*wBPKX-r<1xk}St8v-
zZN}>eq7wcDv?}2rT`Lk!|1I{*A%oP{hUY=;S5YSEST%4ZT39WR^e|z*u@f>WMyNE@
zSAbk!T>hvL1>>*G9X)>B<XTvOn^yoN#9bM&Z`JB8fGa=UK6LiX66|NAg=q8agQW$V
zyarhMlJm!nAC*&vE_Z6->;frFH2)~#Xr_BwJMKe@uMSR66P`LjP3U+fa9o))Zp8Qz
zIoYGGEXd6nKVr=2D~IF`o-nKn>EP$Y@9o4aYS9`~kh!u?e_dFS7~L;6w9YLXTsZZb
z@nwZmvHwss&hML~d)iQ`Ys?F#TTjd{n>!U-R=Ihvd=xge>Y`>O(k(W(Bv5vp>LgkB
ze6;nTCk;Rhfxx1iU@LlQ-Cj^yScaXtq)I!&^!eLOAK6rV4yXq}3O_wYWDfhGsGcT<
zgsFJUzFWth%&9>!c^pL?J8<1SW<CWsc>q2tDe**8P&}uwbOyvk=^#?$VpCZ*uUPCx
z#EJ%Z?X0dJVBn0o_I?U>SFnqMy%qE+*hxXRg8datQ!qoo8Cgvuaqk=EqbFZ_v#o1=
z%UQeC-2HGhCvU>>Y7T$4f?X8st^8#vbB2N|l>Oz(oTbb&6g1ZkcB=T&l)YQQjS9Z3
zU_il21&1rVP0D<gg1Z#HQe}Qz!BGkxQSSYexwpd8Rl)ws-dxjoUzjl-5of2SxG}8e
zYRp|fg(vRn*Bgn!IJ6$`aq!vD*ac@5LOZwssu}sWisr~zU4vz)iN;gHN4W8N07!VS
zVImf1xzzF_nm-;s63cZiS?-+_J>3O;`QygUxCceHCkNvm!51{uq7B-j{JpJUK&9t-
zWnQUZk+R>Z%###!DY#p~?xwx+|D-aHQf5P$w<?&X?C()#a}CIZ70TYG{2fr`kfH2n
zDEsls+@PSQ>^mvwQ}zQCT&v(-g|AkbA5d_%g1bzA3f3vutim-ZxLn!as$f4AuUo<X
z3f3xktAZ;Od{V*36|7V6Wd$ElaIJ!mD)_vD_b9kr!KDI%|FDjX+q{o(`PTUT734I|
zNnnl$zeN0SQ&=uu{?6@$Ul;tk;@2I&Bl(!Id7g}iV_8Py6lla_@KZK))xb9^WjyvG
z)t6N$^9*6;6l)WP6olU^_=AG`6+EEee-!*t!Gj7mEBKRwhZH=l;1LCnDtJsm4rLhc
zE(O0-@GAxXso-t}|E1v93jSL`LqR@TLVVvS*r?!M1@|fVt%BbvxK+Vz3T{_$hl1}b
z_<@2SD)^Ct4GMm&;3o=xs^CrqKU45?1;0?RPQmpGZcwmZ!Ho*OuHYsGH!HYB!8a6q
zQ^B_sd|SbH6ns~~_Y_>M;4=z7tKf4AKCj?E6nsI!H43g(aGio&24^|&{ZGP|6?{d(
zR~39s!IcU=tl%RGu2S$(1^=wzV+#I7!N(Q+tAbA`_%{WgRPZSU|E}QE3f3xkyMlKp
zc&CCZ6ue8pKPq^)g7+wRuY&g}c)x-VDEKD@9|UZ%&qmHrmMjINEJ>JeY!u4?t7xca
z-aVwkR4TYc!5bB<QgEq)%M`px!J8Fau3)u-w<s7=@KyzD6#RpNw<%bv;I#^tDOj#x
zK*6Ab^Awz~-~t7&Q}B8PZ&0v8!G#JgQgE??S1DMi;MEFFRj^3GVg;uuI9<UR3eHq;
zmV(zPI9tIv3YI81SHXM*$0|5Z!2$)xD>y;Hi3(n#;3NenD|o4bmnnF;f>RW{LcuE)
z%u+C0!NCgVC^!Ug?IBCHR^JI?NhhzSRh*@1k6wh|7)|Rs2{rKwIPfV+yTj><iH&o|
zCwLOQNy$F1KP5G-Lwd(fr~RgLm($NUv+G%Bck6!oIp_As=-KPHy}Nl&^z}KB!~eeh
z?+~=Fx8Lv2JHP)0zXHpJnd%#GqR%_<BJZHA?7=xha)%D{4j*yx$WeKt$K;P4S1^9U
z#7ibkzVx!or(AL6Rfx0j>ZwKMS4<kFwI*b`*E_>>KOWAMR$lL{Yl>#iDQO)vY?@15
z>9xlPZ(~#DEf0jPf?=K1%<DFP!FAW)P_b~);>vE_meBIXs-??{Zo0W>dG#$tMWI`3
zivDn0?d{#V-ErrNZg>5W9>Ns-U#+>jEp_+Y+tx;y?`zjqS>EsUKENc4&+Gk@g2x4U
zu#L?_D#$5tDhE#Gz^NQKl>?`8;8YHr%7Ifka4HA>pU;7n5C1=(g#Ri5CmJ69e`5d0
z|0n4@Q8FLll1&$_w}y*Bw5xEJ9>0~^YV5w)io5xmv=Tf2&aj^@px?dBdA+lT{SK$i
zeHv`y-O|0(>9QBXKmVqu6>6uYO!xdf_KuX*u?^1XzX{IwW1mU=Dz;EtpQ^=`*#8ro
zjhM1kNa8ATN{k&vd{SRxzs&<*sl?u_eFTi1d>i$nc(L<8)?jL*?<n*m;~JdjJB~nS
z{=JY;XLtEm_z%OT!TFifv_Gn+IBrY&oBgQnb$pp{RR4#4b<Caqqk3%0Kr8I5+l0@T
z(i)r{d=1W5g{fowSIHOH`Z(eoi|prlZm=XLjkdg_>;7EFge00{W3KWa@=wv<wlA>V
zXt}|1xuwBdo22`D+kS|ndzR&&aX+|pe~LfdbF;0#dy4J#glDW%^xF9Q^(y$!w)Krq
zhWj<K85Wwqb58L0as$7+F0RUQRR1ZyAOZIn`!7iBZ~ZIM<4SrzZkKC{KGU`ou1EE=
z<6cek+FTZw<u=<<-I{WabwS({2{acbl=^xlUzl70f10&hY)xusl*!w+>wWK}(Vd~+
za-Hq9`d)F*u%uarBy>(=i9DCW+@75l$+eT~HpVSR%t!T&aa7-q>*HA{a39tCcw|VI
z=M&2c?@|3hpDc5#m7d3yuaje!uBX9oZNitpFaL59)1XU5j43F`hZ5&oijt(uW_L>L
z6>)j`-QIX#p74Es3|$6UCxXhGl&_=ubFe$6Z+GuYj)Q%R{=D#O0UumsovIJ<4gtNB
zVB+6zl0Q$rDmhQj(@#%q@O|uL?zt?l2>!TDztUm#-IzKw?KPN>ILTc{_1mpI1aGdl
z{!TZnv^(8)rkm;hSIR`!7Tbf?zgU^eH>I2={^ocFISaL$h2E?+W(|nI->5n#ZJtP7
z;CUjI>O;;aQXlqQm&U)v`hnE1Q?Ia(wqKh1t$k$bKz)a0NkVbzB+q<Tmy~X)-BO*F
z>yp3r%}u#h{~_fk+d0mip4+|EG1W1P9QBTS9YefBy?=(9?;Za$fBS4hyzjuL{M!Z7
z2!tqydAK*IY#;QwEPul9b}#>uQ%&DD!({4P!++Tx7dS_?a?fpLY8`^6QSsNhZujm4
z4MV(Ff{IO^@jnw{$Z@HA!?O*c_%|KDNh<t!?@NN7B{1LNi;h|HGE1>gJKx?>wO+Dp
z{_gDMqWwiK$w67xVc@*=@ek|rk7ZnLEl)UVpPqnI7ot86@%|wS|D#d*=vb+L1UWjy
zJKc3@e0TkoMA;57o||2fI`yLKX;B{|uE+FGL_H;j2FFqG_`N<qN~GFbE7D5+5T&P1
zQhvNjH|hR+QL~Qs(Y}plmEj&1HRE(!CPL4QaaovSrS_YWOYDz?@m0m-p$AzPJKO$X
zjLgwtPFLK0F$wlGdzQTpq4KO-;oFD_#LC#3V*;W*amB_t^U&&db+Fcrf~(&#6{=>H
z?fKH!hhjfZ%Z)1$xsw-nTWmwjJ<#8!N-EFxhosK_=i`=GZ?!**(qbu2a9`_|<xG|F
zEpf}XrEN+##vj!kqSdfiZ+D;k?_u}J|DtiXAkN6&MOL;yk9)q=pL74t;zyj3zrAit
z+Fzo|?gCGwB+nP^aR;5D&-bF&L@!t3*l2mt(qLWOrZwK+EVi1m!4db&csDra3HUjt
zhwOLSze_k~T>#TUi#xsrttT-?XrOMOH71pH{%Z@{mg<<Ccvs^6zG?@3k`MkSbTpZN
zEF+1dHfeGET_O#Cg1S<qZ#C3A(AFQ-W32g!48!`jPDlo3%q?i4X?s4}(p4g@bt-TE
zp>I#!p1LLF#*`104NHoD>j9tB>*8IO`dGHbTVhRmDnwtA4w~*mykEoLG5rI(bUmsc
zMF02%c;;-;*V0zvJ1^mOZ-Pkq2MIbb#Cz`XPJq8Bkdjp{`fCBU5uQsFzojLjpTzGf
z{K{i?DEtw8?73u|vb`xyl$=-z|3~#drsnCjiP_rIuwCns{@PP-_ue7$^V7sl@%M{3
zR)DruuC-_pQXGxQ&!hTbk*i1bI4@1><5vm_eU5_Igw#h9VqEOsj_Pk(^HA>wS@ZOC
z`0D8Gp8Tk&NiTY(`|XxDy@uD5+5vLajh5w>%}FIGlA>nsJj+EQPvafu#pdZjAwR87
z`d89lZ2w6b5Nl5+{z=INj^~n#lg#|Q&5{=L=j2T&ADO?JvsY4{;J3Evr28_<=}C9^
zo6$a+{$EY1N6$SLIZyW;$;%-d98E3&hNJp0-|*xj-+JI~?~neMTkdJ)#xh|3_e$>Q
zZ;nd_PdF1^fSh55uM)j~_xKM$e@E1qqk2Ky@R&`a#Y=LmOgbyv!VR*H7u;Zmj6jAO
ziZtE;3YS?b<IafbmAt|`2XTGqoSQseq>a84VRKaft$#*Jp6-Qyq`%Z3p(KK@J>5~g
z(%;uh`Et9f*8iM8;-@z0c5ixWj`uM^Gh>MS$#%!|E9<pXZ;3fGoU(|2soQvh{5A3X
zau|*IplU0wN!{klRDD3S`_Jhq@yovxmw$pI1AKZS`ef)qz;jIhJS;6ALmNbS(xtF(
zN-K2N`wztLKz(Q*(<aojrz|Iq$K<)&y`M+54kmve)%W`2V%_*NT<NN&xh!`j?{u5#
zYaf~|V|%X8fzlX@+3vJY_0QS%P9f&k<9`D#@95fz)c?9aO5%~ffmY2r$eNY1DvDF3
zG;ty|Pss4cyFMDOKa{~f!SBM@*1k+1t!>+y9ue}{A|(s$cT7oXM!&XC^ld}DlzGh%
zZ;5s_l3%D_e*R4NA>N05w|nnFtK0f7TU&$P?eD42r7li+A~jq4Oxu|HYKjqCnIc^t
zOKE`nBPr*nzLWA8+&@OU6bVzP$uO;5mSZ&ipl7ePI(3DoQ2Q8|?(-Ph7b#m1_FIJh
zBW%5CN0a#{$00{8gagx-`?S=%l0H&nA5vPFw$k(5N&1{Fu|>(5emTDB49>hAZDRBv
zOINd2r`;>0-)NT;>5uAjRX>pE`0GhR9o5&Rowz=+<|H^iJ4tw#<=eDlQQQ~dL+XB)
zc%hIHST8?AzBxO5eo|aAH69@oRK@>3&P*L`mc-wAT)CU>m7udhf57HVKI-b`x!ZQV
z#bVv#v?ysHwFCL*fmWl0M}7DD?h$_+BP4}KTM<s1uVT{^hj{-i!am@8$hX|V5k=d-
zNT~L7J=5B=m3IGj-0!=;6=g%bMtGz+#QUJ{0Z4)-?JIo`3co9%&PR%tE6Ff||54w3
z@BO|;NV5Dp<XHd=54FKhm%F0u+LzDGl4M$?{-RdxjOi|6YpJ`nTl=O>qEBw$E!wtL
z$U&x!l%Lz?zvxAdE0u^ZGjyaUGi^==BjG1w6m?B%<S*hPb+Z1SNOf6GK6+Wj!vH7!
zPV@WysraQN`8)W%et&%U^ZPq==-~IqobXHWC#5B(*-!YTbV%xO(zxk(nm-j^x<4)5
z>FZ!gPfPFM@ub=P{xpv>+2iq?DEbbHsuM-tA?)Dy>Uw&5s@~>vy74)qzjVLT9UJR6
zt#qN$oq$TKyPdHNrR%Y={JGn>#l||FvGOyKNGQWc?BIuZ#0Q<9q<JIGLg#RxP;~tK
z-jpQ%i6VkAF)<Np2U@5P*~AY>(!(Edr>Dy(pix>8lgx+&Gd^k5(-X{(fk+@6%ozN>
zWNH(`yb-TL2@tWBG{i7ID0Y;QC<fh5ZHz0;p2k=qCW$x@3-VBXW*z~fw26wrk38bP
zX@%UUFO-ca9utK#B?<O2M&Toj-1H&CNs}N&lr53rAHD@$RA2^mCQS^$p!ggPM~vO+
zaM%?}kyRq2qAQUvS!5U#LU@l2)2?tb514$J6_OJ{0E{Xokw(VIh$K@<uA%DpTfhQd
z)K8t2m);_UAj3#ox`@wWv81O%*Sdn!NhJhC@<U@F{4+n~XSy>B+_Ypi2}=cpo`Fz#
zR9FI}FN~W-MQ^ZXj!S!KBdlpBKACFR#Y&#`D0`wK4@7-ncKRW&nO_G}!}>yfjQj)d
zff)r4639Ptq^TFsG|-lMGH=AMu(1pF3bS*XWHxXdk;SB?rM1QgPKo9sGp}1gnQoy*
zijbKixzQm~>;MpznYNKkR(XV05}!aJcMkf&b}2sol4aYW8ViR&8&M*;DeZv8iT02D
z6`_T=ozB!$8CiO&6ZMeIABr0_ge;6^Pk!JouQxH#j1v%TN{pQi3(6@frPQLZ<i9Ai
z4m3o6s4!sf4)mfRTxk@aEZ!)b%3eew^rEsr$4VwX5=y;E26{GG(4xUWwZ<oEwH+;&
zC{X$oj!+z?MwBoW2MQbQ0qlWDwzP3^vizlAvKRl^22v9?(Mp)?PT4-fgB~OQNRmto
z{gCi*?utCtb&Ex$Kqe}p3Z{yxSfaLyq%+afh<a<L9`%Wy5h`p$joZyc;bW<Ttz=4c
zX$KV>v*{B4gkLHYBhnqt1heeJtm#4Np<OmP1TmzgITRxzp=j}1Cr}0?1u6)EA1zaq
zkqx3qIlKv-4wh6OiNVL#2cKwd*x<-Nwmke7{((VuKO!~s9sWdItzu+v%rDG7D2T9k
zp^4NOMj$>0fJRbocCRMXS-{~Ih75r}R&=+UimdoLd?ELhYm7j~##c1JvK6KYX$24k
zP39qyj8w%hXrbB6BNL)VFgkw7u;>pyOrr=b72+Tl$&c9aiM*EWw)Ev!We=fC)p-Vz
z2nC5i9Yz`}kth}2D;m*OpXimSu<Mnd2#mItvLR~?|J6r+Wqyf_?SLFb7Q;yxRSwHW
zS|lSvbyVk1?4q#?)2K?&9mNnb2VzBDfOc|6suQV-W&)&IcbNIAAQ(<H-w~g(vY~KH
zwowejyrw`9X<x~^WG<@sK%mG-QB<r6qBg)XN^*f`=|9G0SN|eIWM;^Qh`A*`RriUA
zpNK)m145*oRLuZ@sLYTWq8j(G8;Vk5A!CYvKgA$ho6p+j3n$O%>>!dU_?kM|j4|uU
zz(S2CiUC`(PV~@(W04ezPN+;=#K?v~vAkqwWC5ZPg{JGG#*(RJ!<?ROHgXXiWb`Bs
zp`sftQmngGWiSC{7Kuhx4rf>pPY{WbL<#<iGK->!N-Vitet@u7Ns%HEqA)E?Y)l<K
z!6VE@k(p5<q6!ZnA_*shCXWZcRel49IS7*IU_^4FE3p@YNbv!Bh5XyW&k>9IPK!h(
zbh_DGc%o|roiH4epCz3fP39It2Y84sC>%j6{Wu&X!GW?%P3@4Do|>u)sR8nV8C$xk
z0b~)2uwnp52Oxr?YKjOG&QcXFNivTNCkhj>$wCz!oNTyM14W=pM>S2RAc6M0^%ohZ
zngK+jBL1aO%0MRHNhs~m$l;^(q~r#2mk1=;%&eKp1RxktWehy3a#0<enQk+2WLK31
z1n?|sgCY_Dmck(O!s9{mB9733IAxYTBBe}xXi`-%Do-+ZU|_Mjy&^-?IW~1T{bCSn
zrUzb#Kz{IzQNE~aA~_NnaZ{Ex`CRx_bkc_kOiw~Ul7O7<Y$cPVM)FSTRL+M%N>Y?o
z8d?X59+{gNWkN}7gd9l~WO`^oyv$vC5;QS2q!&#oKO|hp;H`Qd2=U>Dh;k1;QA`rE
zFsbN}XQFjw8K8EtO{JU|i8LHU^;)EZAET9SG&x}=41aJo-N_zNO|3b+jq)lIf_O<Z
z(<`Zk%5or0@`Fx#Vh(`B=nhGA2uy-(B!Gfi6%bK{lL71`hgR~BE&{Re9Mylz;z`G_
zE8WfdCJB+$i0}fZ9!()LLB$Dq)YJ(W7Z(>bdWAUacSPq{q*8!akvgQ0b3cp+pU4@h
z6>20kXqQFHEaMU-NJY>}uMxabhpfXV8fXNuv?9^%6{V))kv`d_NsFjBK@bv$f8{kg
z8Zi`2M@_|mNLB#_<kXZh&?RcFN_Y$-qsAYLLIDY3OVt&Kgh^6b(;nwW4o6vWenfus
zO;RIS0Sk;fWch|8fCjA**iRyXQFJf}DJ+CP88KCn$3o5`MRcSJpF#sWbc-U0U_It*
zI4y88NmCFbIyI(KK_a9I)KR3%9>=6Zc&9;yi(+$OB|{4m1h<>v1f7188`WP4Ef5i!
zqBdX@PBdb&H4UeQZ3c<wC$b5gYto{i=+#VFMHn!~!KVZ@N17unr71by>>?rA^MlGB
zh5Z6G5=B^5-KXp|gett+IsGW7h{;@FJCWDKXEwVE3f_alN$BWL;vxwOH*&@-w~n1e
zicgDt!Ys;B=#+v^LCme2aftp4S;!_9A9IWp@e3yinyAE38|_3_lOVd8dJ&#jgeCG8
z9+k-jlZ->Da58fZJ#&QD*lI*5O&0|u3stFMN92PkiJ;ew(C3V3?f&qDiA#M7izt2Y
zRaDF*%$XjcL=c*4ax0)53j={D0n(vZ(AhdrRIi6nU|oSplr%{*DWEN8PFsCAht5y8
zTFk@fU}=j*9Y}|Z&u_7$SS+dZm4+Wqr&IfX`0HfhiTMA4NIe!Fvj<|Hw3i3%yI}Xh
zZ+rLYZ0Yj5zLtKB^Y{Nv#OIlT&+l)!;6l^zKLTY2Wex!Hf#C=)>SF0K$YROrY_Vhy
zhHXyR<$oeS!^lr*PUXO<95|H&r*hy_4xGw?Q#o)d2TtX{sT??!1E+G}R1W;#lml|3
zCa=4W{<=gPezCqS7QA<I!m#bR@U{8qFBa$Hqrc<bqg^#E7N_Z>zgV2DkN#qD(mwiY
zjjt5pE2EuZj{e$G95L78<o?fn5#JGA+c2xOy0%s)HE-2+ozy*1<o}7|iw@j6t#oOM
zb`I+$&ag2`6CF>qUV1rkxF{5ujXOT1>7Homg1_G4#TV1AHO#W)TSi%~3i~LvREG7^
z=W|-EWn~+?);L<5R$J=ed#h#FuL#q0oZtIsqw_sAO%r;pi_n{KohZ${!@jb@Ix~z}
zw@wsRx<|W4>myiBu1nOO)$;YL^isW2uhm!TtM$5eC^-?1wc1wUdl%HE<HN~EJlYA|
zKBbB9-$jJ!9S)fVU4GaUL3NdNomOhCwAO~*Rtnu}sC8jGhK_t&Vd78IcD1sP_&8qI
zq<sD|?#4asd`Y3r_oS96Y`e5_+kG4jYqZ|2d=QP9Q^(g{x~<i+qC%K{W%P+!zU{*>
zr(PB1uMK%8F_zjYqr%nNRz{hQ4;G0(qKo#`+IF?APGH+=+huFAY4${W7kh7ewEt**
z>#)%-(fVj#(R%48%btHi{3e#;Lzylnyb7o3P5sH>RrX3df6;!{X|=7)(Qa+^y0+53
z+Wtt`|Ibs_76Z+m_AG_nv+cU9)h6nTt#$UT;dp7Y%ia_=9~X>IT>OeJaxJhK$SS!C
z?FTLj7M8dzI4&Od3d>JkA8eX%i?FF}1&J5`VLNrxum=CF5Jcj4hi@Sc2a48&uP;tA
zmrjy<M!O3=ZY^$O7r`$ZL{>q04YKsu=XV|Y_UkCF9rj$9IRJO<sD-Jdffsd89^~_7
zAr@zMEM-Xl(eAiX*ozp?infbIIMcp0DVB&sBtV3`q=;qfa8ahnDWh;pqJ@J+`GXd@
zq%7#6wHr-lE^0%EsXLL+7MCJxycM}y_*&%dGGsUsORK_*!jqAV>yrl+6;GS)n=x}%
z)-|{Sx#!%{YqQJB13`&Hs&Q`J(H-|OJCc~YSrYWj=7|z+P;?~mJG(o+<f{kqgP-nh
zcR$IA(U>f8G~ur5aLhF8z(^SWGECicsnM-TXC<3<5r`DR-WOphk>sSaln<Khj@BU&
zm5E7*E{fSzpn0Oa!sH#FF@wYRIQNh1Tj^fXFa82XL_#7(9idUvTPICJw5F>W&NK_Y
z2-8Pf=1j6LD!bfqefyy<fD@9VVq;RmNHmRWl*zsbn+ju;d&EWRB4$Zjv{@~AMumm|
zD)O1vl7}@WYi5v+8~s&FQ<kOPl$Mat!IPfY5xY;~Z;ZlVR##PPWz`O&5*n*bIl=_p
z&C4Z(9-kA-<}oqcXd*B%0CrBW?dsd_g1-Gcas9F3rEkA(-BqIzp%+bA&+1!3w?+{I
zZNxp&5CCb|6B~@M0h%5ej1pTxl%<)T2%gru!8Lyn0hnW=f!3`(2S*`nQ}ax8NmGkv
z^mO+JeNpHljY!jLQ7E8o8l=ow61o&rk3wlaWlmGDlY(6oJVU{)3ePSD4Fy*#Sf}6?
z1$(P-T@{=xVb*O~_ub3yx<L}&JE*VtRw?se6<nw6>y`Npg|}Hjo5Jf>FiF7_1=AJ$
zje@5uxa&1deEpR9A_a#iI6}eE5>}2?=JCorQNrc*%D#_+zf-Vp)*W3(;D5uQPMfdA
z|I33Wi0=ah|E1FNu}a@Rm3fbHe|^y3p5XV5N@s(DyA|B4;Mpp^?h<A#mT>uV63#Ld
zY?e?vSHTPgdnx#P1<zCPd<FX}c!7c!DwwI@00jpsI7q=P2`d%UvXxmuZLl&csO2cL
z3C(iIRrU&MLzP)UZJ07Es0~+U1+|&dTvsNccAYZcDB-SU%D!5{F1JdU^^k<6e^KVA
zm3fVXlU`ExuSvLKy@bnmNI2><W&Wo!?~^d~du6|0!k_+=CHZ2XEYDf4Yz<%Km?QzU
zS-8@U=B2+;_GbuKcllY$y}N)}^Lu1VJpWL9^NE6ADZZMiV720#S_M}s__%~u;95g|
zSELJAxwMynOFz1su*;Pz^}&FTtVo|jsBKM}D%`gwm1pC9!Iu``l@lZTPk6xF8nT95
zp=9fu)$tXu3=OwYTPd_IYL^PFo7&|<n@H`gLhGZpmfEZ|>xNY;pt}t31`lj$Nz~?9
zSL^kmt?R#Wg#>2L3qJ4quWX?$>-X5IzVukPg+wf#HNLS`yFAvd4>Kaq3${ei=UJ0h
zb$Ic7f7M%Esty;H*{cp;KhM^;t}$b^<+A!Ehg*=M`AKGgG~3|}yXTI&#ss{?v;<Ew
zDf4CZ1rtLJo;7`!91{ULnE`s!LzyeX8X(S2t1WnQ5icqZRYAipx^TgJU<yywvBmS<
zRhza}eH)AD5J({oQ_|bEKf@|1*<>8VTVl#A-gG1>)_kM;T`eulqZWGr>8-EjOOP8+
z8>wv^HB!@|e;NAzW2F9h=x66i{gcqIRDK?X{(WWt0Q8#DuYi8%Na_Dp=(~)T`lZkh
zQTht#D-@mp^m~<lHuR6Hutm`KRyZ$*zDViELtm%-kAnVfr5^(Q^9ug}=(i~Qe$cyB
zS~8$tt?+b(zE<fwLGM$3e9#*Tj~n`(3Xcu?mzDhyJovap>HWyB12Fdv3Fg+Cps&0|
z>i0swwp!{9=#MOy`rXh!db8B;g1-MvQoj@W<@2S!0s4leQvW{mTW^&5t<YC2k@~lx
z&rtSTpntzo+HZuutJ2p&zjcwce;N7(3#EQ7{Z~l+^U!A~{c7l!-XQItgudVPQvW#g
zw_Ydpk3zqDfz;#uGQOI(YDPAm^Xy$z-KE8T511+#ySCr7Y|U8b<rA5gPM%y;ojBtO
zc;ah#MjT$l`*BLWZKlM5EY#f4H<V;+odF+H_WfpMYkbuv`W@c~x(z<*d(4lXJy`1k
zKYIZah*-1WSBb7ZB86%8h>dG#9^RuYoQ_u-#e>o=_;wE+UOc;0JUqDoFH~ypgD%R*
z9=t<bQe2k1U@D&c#)FisE8Z+IEfmX_o2OnQpOeIFkbJ!|WoY))YlC>4x}9*^MMxc=
zcfMA^e<-+5!HjF9dr-mG6-=5f?MoHhpkT*2(teqO1|VM}_JI0}kqd(aJlIkO$XACS
zQBc=n!YS&jC7w07?Hkg%iy45~H1&owGZVMj<dsk7+nYnQQ3w(v9tABPIwxR-Pfmwf
zPZBC+I7B_SX3H)U&tGfuonnOpPh?6Qe5trq%<5@i`-mbu2+FtzX<H+4pCsHUNN&33
zhK~aA{5u}>WbhH<X<)Y`9gZiazD>++>Ce~PV7Fg{s9jRp;>(k77E8j&i!wv-W^wBb
z(W8q(v9CM374z!a6#`j&xPT(~e46bf_ykdjW+9yj`?zTA$ioQs<EU+ui6_E1`Bz|U
zH#bj&c$Pq%7+u^EYLCkctzF!|EK{cbx|rmP*Ct#4vM9P~Z0U}F0lZa((Xph*hA?qh
zabR#^d2zU&;{k0{X+96%#(!Up4XkVYTv<`9qUAiUB4&~AEF4Xu7WEd1O&(V`v%Gjr
zFc8%~n$_5h#gZH4ACKnFo&QVx<NagM>Wnl}>^9^J*&g-qJivs&%-Q9d=Fs%t&dml@
z`Xv%9l;AN5wn(r~0<=?1K01bDY_r%=;H%^hkGQwWF!dO43%ZAv*8bw6svEJPqoAnQ
z23tbw9)S6WXj}M;LWkDcsk$TjXhzYsK?NVNqNforFRR|Co%mwH-4PJXE@kr_`Bo@%
zK*8$)+0Q<S{`tt&ploWEV1uS2bZ*7y%J56W&y8PgVV3qde$o9bG3#1VE}HY;95l^g
zHiJFma<=0{nk4TXUx>uUuj{p~=^n4l84CUmkaYWi>wll_PGP#ijbo;bD=e8FsVExb
zbe_};sjLMBkPnVyN12knie9FPpSw(^>wvO91o+?Qe{3!v)Xps{n_H&ha7I~?hM&vt
z6^brFB$Stx`2htV0sQajOwJuqGOuv<%%U-+QH;X4ob5T0sGlKxRC#MYnW4<%6}%Mi
zzo*-gn|<}%vH<dh_?^ngxPOK`ZLgxk%-5>|kiTH(1?1NmunXWXt$zp5M6>>B-KCsM
z9J0ZI+?fV#O!n;AbLS5&E2dP7mZ%pZxL7;ZqH77c!;1?e`JSN>mzzFEl#~YwOQse_
z8tuykd8X6{M5No<1_RUfv*{OzfIxljpyGdJe+aM(+*SbBFR91vr61y5uBg9x#dGGC
zU8gY)XDh3{h(#vpMD=uqqKjlc0DbK|+%^ojQ`!Fj*cEQSw4B<uldZ=i<Vf|QyJ80;
zicVDEoVi6PIw9WCn=QXEFoQ*@YsWwXM-78O8=<bnp*|tyB3!oUiyczLktInn>{fU_
zf&9*X#$`sJW5AGx!QKC2?OFh%Dz5h3N0Lq0umOTbr5G_P5WqyJB0<fA<sFD7%RAN-
zvIgYUWEW5q2rgS$E^8^({<dg;X|c6Fez72rh`*ah6HuxlB8G<&mA12Nq!A*l5VQYx
zX71hWZUXq1qBnEz%$YN1&YU@O=FDRwE%9zRdNz(Yy&=eme=(ut5reNHEJ@1zSK*8_
z3*X6ja+LT<^o_)Sw+#edjij9g?<FzZ6jVZ(6)Y=VAch{A6q#4Sm|0r1n9~6JL;WTa
zuTl%_YEbAE<w=r3nJ+UX{)|!&4|w!LWIj@s2rrGfDpA2&AfC#?nA<IhXe!|4U#<s8
z((?+PD&0Gk@0XPDj|h{Icx`mYLS}`;5`OSj{iNcrMxr!U@k6LI&Qrd}DdA*<L}Mn9
z{rkL)Gml%iBKz?<#ih%Di^{-w8jK<uwgdm=M}0{;rO*Q){!g#?Qd*Vxvj~%sa&2_>
zG7FPM4E$6E`dn8O5pfklH!5@qD$%!;?`M_pw+OGDP9rt)^cBUWR*X%&4Cv>OD5B!Z
zgpN}DQYxJV%J*0$%tlCbUYl&jnRB6SRXd8xK)VN{h=!{P=m~`$mCg?3`;-!%Mo4s?
zK#i|OK7)1?a8VhcGZ;lQ<ni(@-`CeEK0lStZOZpXCESeg+Ue|NrY?kzvv5H%ew7+H
zA)j4QM8s7H9j5p!RXQgs-=map48m)tGuEsMC*g-qQa`Eqt5As54TTn!#x~`<SqVQ!
zc<nUCnJr5fC_M=4w7`ir4@MCUS0i+l;tN*kd_noHRKlMlBs#Cn7Bi`Wn73@<QjDUo
zr+_ymGMb3FvPmWlUX!Jg%EO7ucbXF3jquuSds0MvPLfkpW|OE4uA72UM8%bd{6>Wy
zmDo1ryIBc8M|kaY#+%`lh6)v9CzTNs9z|qanNSc|uB;8Hw7#T#uT#Pe2$PX`ZF)4p
zoHc(weCsn7E?Zng?sAFBiRl(i)LdDk4pY`URC=c>-=map48m)tH_n__3MI9;_)(}S
ziON9V3PuqPSEdrqB!wQ8PQUVfLJ7Y_c<prdHgn&Os+~|6m4kU%STxacHG0=Q72daA
zQoc7T;bw%_PH!y9tgUp};vB*cy{djv@mC{J8te$Caia2_ri6DR{7>|&8AYWFixiub
z%0RygjUqCx+OG~PG^y?1u6&<R!Y>j2Cuq$pUAFw8;-Ur9mo9#s$^fmQQAEa7X{}V&
z7FAleDc|dr@EL^HPHS&Y*v!&}wqha{g;6<>RiZZ-O|)E%;528r926+uqm}S}gx5|l
zlv7z5)GM^r_#&u+1rn7*Ix9SysJSx5Eec&KfAz{5FH_>rAiQ>Zd&4JHW-Be4AN2cC
zIpA+tG|_TpY9(otLZ3?SPUZV~CHx)2{{+1-_^mX^s`fRN1A4=viI%I;o2jgytMsnI
z_e4C!O8jF8laYAMegayYiFC|Rp<2mco}SOEL1o7TzlgFcQ{SP`NNDI^in1?2uY_?3
zubtO@&G|*v;`v337l--=s4Vyfx+M`!SEgE$b}IA<s$ugg-}{uX2H~~SZ7}C9Te{E&
zFE-%^UzJZP{mK*;xWaWrx$-?v34e-^=$i*j|NgwIze>>5W%C~kvX;t<={bqWI*1~#
z<SLL7HiXljseC6X;Xs7fPWz4KY0DIL=G&JqhdVo10gy*!##{k}XuMiQniYCg8R<~I
zTa@r02(Mj6OsI!#(vszii)p<HYFeUlFuw?oCStBEGSYfw-;PS}>&o{gCHytQ{{+3$
zf4Zo6zHQvXvgOOlh+ZlO^oB<hF;}7Y6hL|>6^vh2x}?aKUu?52T>5C)hyrtI5$!!8
zMWw+*US0kV3yi@JZ498M6)k~hnY_)Eq>V+?bgQ+j82c%PrIITckp@J<m@HM|5-2Vj
zaptA)jtc*%w0L8d6yI-5Bq3wc(*RAIWrzeK1sR^d4D4M!z}8&`b|f`IOgP@Q%fOE6
z0d{~J>n%Od`(t8R3z&+XcL53`-6a%<I?qG?-lmA^9z<R`nxL|qLbdJ*N_?UcQaO}P
zv{9IhumlxILHI1f0)!rf>kzggd<kI^3f+g0;P)exu2VkfUE4dyURqkbbpGRFtzIkb
zR9iKeBE&?bVAB(hMXGtm70+L|q-b%OR+@@j(UcZHuE<uLU%b4iv<TW)Byf3%FIc!F
zG9ixVpcTiE9BTcwru-7<7Q&}eKuHOl>Z!|?J{p-qOwt;un5<m2Hk5;yCgStL;)#h$
zA(Sb!kYq~gO@)M}sGL?ZK?mAOs4JlUD)U9A&=j>fwDC%H9#^uc?V~k{%Bb;bd-0wo
z_JR?2Jw#HUf|6zSvZAF6Lik0AHI$g3G)G9<L8R4D+6@IO;XQkFp>1|?QE3j;oxSw&
znG2ULShiBMYdrzQPb+?unl_XZBr)2=X{0F@FMOhS0miGM#l=DaXt4(_mX>;=#afXh
z&4R2!&|?qx4sHMwks7{lCtBpD{@*>HhOhj@g%`lVV#%+<XI8-y3@NvW9VyT#R3)K)
z#O^zRNUzd}3LM^qeybaE&yPu6kw{Ed!pMF~Y3Qf=Uvl`-KNKFnH_p30sVeG<<B;Ff
zdlF5r`1~aQ@ul;(-wsvw(8h!(fAOQ^Q(rhav*l+u-1k6a`Ffy1`RkBBu~!~;w*Ui)
z!1IVe{0j(r_bTX$r_R9t@rogp{%Q5oifPLs8J!fbH7FUz37yTmV|3Ph+rkyl;sizN
zM%x=pSN75}%vy4m*~Qj4!nR<uz)J7*Z~d>ZaRzZuDe<o$oQU|){gr;~`MA=)kAn|n
zb6jGa!7Gs&H-2JKSxG_BPZxtKirNRvwD<5UgxOf7ydEV}n5%@6)K6grml;lVap@fr
zVeh`DX&rI_tFrx28YN|BW=s0%%Zrz)i`7~~7>uS8{M1O%f_WsfcT2AzPxQFr#l^PZ
z68BYe{g|(YM&&HVnEiu`5`2#7se;7(%k5l3Goq5xL5JtCH|I@BqHu>2rv8ukK2G7d
z6#Zdu|A~QscpDjfGvn>x7vPl-&$oE0@f^T&2+vVGB;%1{EIpeg4WokbFB4pQ9^V7-
zsQ+I1wTPSZoQT_ma1;_>xFa)YL#r~=csx@&fk)jd)P{Fjw=Bt0Wd`y~rUwaa?D%}>
zvV}{F7o*-J$<!fwji-*6zwl8kyDHH%G#JN=z8D%$Lj&TA7TO^EkI(0lM`&nhNEGmq
zy+R@(Nk+QPMgt!&H3grs0=#q*dKr%#jL6;~WyM13Q&Wpqa3V2EzKz<`s{3(-B;Q(a
zhvYg{2_I6zawUXLDaf@iwk@P;!PH)CFGJ4_Di&;kTMErwdb`w4(iysJPkZyW0ZWM7
z-@zH#y?aD}4Z%iKY{<<nestkdDpnQT9`LOLU<|CfD}oJ`^x4@`9LL8g2SV_<2LcC6
z`v7SGLKP0=_W(yS74w4_L(<qhI1^|h)h+2C?FAqb7AdtnS}g!bF6Ia->A^m}ux6B2
z{a2T413-E~`L0yLpCcp@x)#3yZL={ioxf}WY;)DmLFK^D5f)9fT*cg%20tH8@4i1{
z4?W_xDe;4Ti}42Z{(p4%3G~U9IpNPnOSZHL&kJ}w4`xg2AIc7cAzq>5fVto_>HPTd
zlgjc@!NtYdkK3U3HOdxAbjsYKRXHU^rTGwT#8U?9@G;{pWyRUkbJ547JEdWudom3A
z2NC9=2klnEA8iree^kOdUl8B(5Yn#oUn${HCA{}V!efxuBcz^Kr-T6|9P>L7Z&$)2
zN_fwIi}<BV_<<5;y(HotO88eLjM*yUmnq?=N;u>9BK{L4?Dq%p{frV0+9tjWmGF5b
z{7wnyye!gRP{PlZaQq)d{QoH7@IQ&~*AWsQjw@mBSF)t{rC2GChjG$o9`=&<BP4$G
zg1k^@Q$nK@Tc8TzZM>yvcw36$Z4V%*vr-tMb*y|0j8WE|uyOb<YzU<j6#SnuD92GI
z47mBr?4|S3==>X7lg1U7LB;dcAFXs9%})}fD3TYb-%P@U0{JH5o=O4ezfp>o&>DL#
z#nnSy20#e^&AKE7OW~thf<#+$OKp>|M7s)7E=Ia2#Uu->Zcl_H{ab|a>Y_aqrv85k
z87?)Wv&Yj0KvgP&r!O?&e9=nxaQ5{@zsF9&1x2L`)GS>if)JkAEH#C+^LU=E5A8v>
zTdl>VYMPD{i_PV{4%oXbk}<&$(iD#6k*i?Q{QxXnwzX11*0^G85r$=z5~6ZCS9$T1
z$^;cNXosp=FI{A(z^NZiIL|>fH9^q+9?Qw?8J#u)9Z75#I<1t!^BRd^D#{?QBC^s9
z5?M*zqD%dMvR?P^XVn@<hL>7&If8L~B%I)gQk6auOZ10!8w0i=A}Ywu%NBq`MBxQQ
z(8dcu+gz;xA=*EP<uuX6*@t{$cj4tK-kq+lY(JEy6_-N}#TZfPt0RZr59O#BtWCn#
zLMI&*?rSkvkXyi@2p^PzP}7lJAY6L5a>H29b$O2%XbWlB$Pyt5Vd}9*42DPy5ltON
zLrG7yfSSA_4ZL9zx(iD<@4_hUv7GMh6W(DiCjeI{XH8^%r~#9t=&RQ!v3q@#DyqFJ
ze8A+yq5qNU2?|Az#V1A<AJHI}tLFc|`1_^pFh{Q{lU=<aOctK(iFe(J@5=q3Bm7w@
zB|nUC(QGl{&BncFLZw`;Xr&cHo2<){;+Y^kp-p!A4&F7o1Qo(%Mi*|d^*k_LEh`_4
zL$h{i@QAG4hX^tgyR!CBIUc2msLBzkNUAHqQ3mL(hyuE+;_&fSWqAnqdMuzzDNzAX
zjMS;StF>_IGYLpFa(l$kU9E+a$1$j?wM*TE(9m72h10-mgH9J&K}BK|4u(<MV>#W`
zS~#VbW8@Xe>C!7oeMoEvMCz3YIppOeb*~Tl2vt$34<BDZGDoaf<BD0)gIWtIzPo1l
zVbxSPtO}%%jw=>_Cs$0pAhN0<8k~jkI>LEE2SM`q>2$3$^77zZgTNoA;!z#wLgGv)
z0dw*ob1u`}d6}AUJ3%oA6b!^AUcakg2$n=P(%nI_^Gb`0mcU1>+7uCXFjv}8gWQP7
z;kjZ#xv){xlc*6^M1-EnBqgqPmW7fB&WuPD{~;-+g4BMUBel%vUeHxlLnsP~{5mmR
zQ*(0rT+UM*g(b09x#R0j5zG+5<05!T1em-jUez8Bw+7{kXn^}D5(KWzFj*onI9z)G
zGvrRnHIuk0exV*baK=zak>U;N0W4a$hd}p$*TQ{XhBx8!LfmUgeC+GOjoS$SnYxcd
z^+8|myej#;X3fr)mg9LA&ntNL<2i_jd|qh?+vZ{bnUgIg;z`1@XJ)q4foI&TY-K8p
z38Ct$jve3CH+dv^;Y{OmvkR8Zq<%7faS>f^z>~;VZ5q#`3zp?(t4UHX>3URUDn^m}
zco;9)dDvU}3?Vt1`@JE;xk~skLUNn=c^E5=`5*d@lgfG6OZp2B4Y+DDz92U{Ctp<v
zxAV$$^Dyhd*$`jPXkOh2D6Jt3O40H`38F4u!dVoSkB0TD<l~r(Qtxgo6Shn5NPelR
zB&-}dn;u>cNtjkrq=~4T$W=*LF6x`%xu{HR=?ZC6!ea=<vr1}#AcWzeq4#Qd2y?<^
zYKhuM)>3h<htPi;7tTmGU0AU+Z6nFOyrvHWzl^3Qxxc)o?-4_!rUwQZ&$?^+u-svq
zemd`WJ$p(bT1iU>-Xl!INXHB0ne;_Wxcrk!5!27^3kk}~8@6Ha-T(y3zofT>9%@wL
zI}s)$tqvOYKc#ot<_W!{FGLICA-%I0ab0>RN-}O2O5!erq!daJk`i$9Fjo4AhjF~q
zTMEYC)79w-Q<%V#gEx^^E4Z9`xAb~<C~Y_t7s{|sb(=(#M+#*GYOK<tN|zVPF!0L=
zB{AjlLfIpRFrh?yQ9D8&LRmviEkyDP@~};5e?=UmeLI9av?%cd|03jJERg-D<l%W#
z_mPLQrPmSe#Ipxa0-i2;h>?b&TpBbULP+wk9wEuY8$67a{>8&MDIN4q#vt=355=GW
zCXDWq55n9{KKAfxhR8=jcPN-{p-?@^2h}7}KEg7Q(xPf!UOvLWFC!nsq|3`kj~K$_
z<8IF4o|RTu?g*ttjdVGs6_)RZDJ_yMA)~?OA@LLPeFYhvxKqfaDx>;c;=5dl{|iF0
zO#Z*NQrb_lrO|i_@H~R263==(WGfAzcQ|DBBW%Reg6CPVgRWnxMR_EfUW6o@H@_`p
za~uz2rJwUKPTJ4IUf4dDP+(cQ5R0Y31&G@@vTkB2@tTE*WiyJ5fYKVmpn4KZB0f?q
z!!nUrQq3+emSNzR5liCB<;Ai`3=v{UT<uvb!*Yj-C2ToxDW)4sNlLCf{EbCEQ&a)Y
zW$^7znW{XgVWbFZX!nCecL*MQnqT*}4*|>G-x;XgggfE#T_3w@s!u0aFPxJL4OW-N
z>gqSQutqN-?Ln8hBVgCdxgCGeY+Z!|YwUWQu=f7te>(%S3v1n(1mmb{cjdObEPe&n
z?9Y?U?Rg=2Zl*k|kw^Y}A?`AC)cIWnDSDSaMMfa&Q&{vLfNu`r%bzh*z9=`#wN8&s
zCuerZZE}Nrgzf#fGvGYGdWdY2k2o%B%9C+9qTJ@Ff6wYTb7Ps_>e!zQ!X4FGN3C|U
zv&r7_6I`NrZ==oPY_t`acE?#W47M24ZfVGV-yQk#td8^psdGB=9ftz998I0rap;R7
z`-i+Q4={`z5N9_ys`abR&6-<l+IPI#r`H_U9DV#7({8;1S5L+bX`DOP_xE%Uk!L_T
z+dyJ%YIaAh^ML7@=g<K6Hk#JC5o-2p-gkTxaCrQV8o#4DHh)bH@Mi%3D)#^?!ts@E
z$k8<;l*sw=JcB-CUYy=O+fi*;bG;HhH5i?Z=+#Y*@APYWDQRhh<h$rK@uuAa3|7KC
zkm~<k%$iu!u30f-=ET_J_h>-M+*%&grhDerZURqwJ3aPzXOk^T&hEI-jObcaL{AmT
zx6F`BI^;PWLq5CVz%5?QQTM2cn)fyDUpQ)8A?v5f118_wY<tv-Klk4jz_f7fSM=B6
zFDf@U{7<aWIT+o)iH}S4;Y%LUY|j+=Zo__$z}m0qFLI|;vxI72!WA>dpfcqfT<qb(
zxk4`FvvMP-*2xcb$j9U(@&}vQ^$n1U<Evxy<>)*XogE0E(YXxu0PCv{fqg%#3wEYO
zJ}vt*zPHouo+IUx&f_R!ZioD>^E_Twbj*<d%IZJr4CLj@4eVWdS)?hUZ53?Z{n*&W
zw1p&VkXws<lrYKXX5eCW6(%zr27P6{5dD$IA^3`rqe1lBHNL@!fs9&R<5HsCc-XD4
z1p@0lcB9o%o)Y~Ne*Gve86Blr=P@~7M$1-~r|2b{r3;blcl=9h+W0imCj2iZv=YZS
zZh0r+Gytc8T`zDZ5>CTUY#g^?go=Be$2NWZbo+kagb1YNcXvk^2ZV8~{?#rb<AOv2
zQ8W-W?$F4!jyfZ;XcO`1LHWD&i79gP+Di#{NK$Fe+Dn<)CaHAj+Dp<G-$s@8LHPb}
zGfcnon0BFi$NI9@UaI`{^O717<4a$A>7}1*f)P<Zh};6o$1ven!F0Yj$E7&&HQuyq
zSc?3K?g*N%6wN0;U~PyQF3Eq@d31h9r)KqS@&|ivcKRN?@KyEcDA&i2)h<Zg?>M8C
z_3n$QQzVyuC4kl(hcv`k9Ur7wT{q9+EiQYw?mI;q>+E`Sz)@k8?ET~qO}i`s*=%6F
zu}R&#4UK>gm$^+g8(rr1wH58>=17t~W^F~Al=(zLsSPn_e}1bHBULXeos5_ryISG}
zjI`iSrOAlV-`cQ2iD9nNm>r2;YUCaLyp;%$zREmbqoi*rH2tc!vbK+}1o5lgIt6!S
z{WczN^5r3(A)A0tc=>Q?5@M2K)tHw`r*X)5-|dcycC7$A)vKViKR&M)pKQfM4%5r0
z-4SQn^|5JJML_o{uEjNd2o^`X%%^1YDQklSMmOj@8uO{jONsWIL|nS$FrU({UDAd=
z<XT(E>o%qGQlAyeDlhf3j}ky>k}r{iEcg>Zh#?dopt^=}r|cLZi^#K~5P66t!8~F7
z5qWm>k<D!`Gs9rzGPf>*X9N<6DB04^zWYaK0FCCdw1>wJLHrOiyTQ^b+nJD>e?V&F
z_aCcXklH5e-zJd(J9JGt%PGfcy-O>9Bf!2O;X2eanBj+k8387Qva5sym$uSpkaOEA
zFKJe!_E1=*Pixv$D_c&<qd0M{QP}`p`N_KDwm7TfKpJt#WkCPL*j!_vyNl1#@cWyQ
zHK{eu<E9sC<PTX+2UnM5D<I8mkS#`MQ$@^$W=E5B;n+iYT=Zid6_~bc_V{$B7d-OE
z>~my-8DWsn?>Wv7M>gTc<qMZWa0TqffZZT}JkrD7RKa<_qE2-bhCo}!$<<o<5|#NW
z+xY=R3vZJAY3j$$rqvkva*ZI~;n7aEpL6SHIWB2d4{$KO!>5&xn07VEiO+2qjxL-~
zeFkHaX3eQ7_C)ze<(DR;VKldFNS^|2o7aij6QNW;l=}^a7k_BEW2xL+gB&Y2q+;M-
z9cy)^V|1Emzu?x-miJSs!yUM#8l{?zrd=Lc@8rco`i!zA!Ss5g0oPi)pa3ihM8?NN
zhS`_`GCVLW%z}(8L57j|HS<B2F@>uC4h`UPeKpfNJu3`3JY4BtlqO?mai08vOg-*z
zxH)<bDOj$L{8WWtPTp1^Kwk}6H2Yna4qsx9Z1&5Rj<8rqMTcb9J1YFr$`;WmGp&2m
zB>7|D|2yyl{p{I7J}`tq2o9quTeg5NZH}=ilI;f9ycB&s#+N>B3~yU^;wI*i2iVDP
z0|B`n>R%a`9|UI)vp*vn&!m-W=g{5O`7<8m0zx=9BGDC1$);yLbCi4`>92o9>8=_2
z5RlOPCqQjv`quTZce{q#A&WG7C}uC`ZU4qiuxj7+fu=e=hpb}Ni0N0|8Q8k9TSkge
zGD^P$*g7R6#aBr+h&kqgT`j3+6=?fqfmABlrDD8E!Fbv(Hy#V2i={H2g0_1Q{e)!C
zVt|Q*mO>kCX7ert0*ZMs$a%hez<BBaFpK-K?5-4pqgFr7{`Zl%WE@sG+4PROwtV>*
z405*xBTol=`6h@_<GLnW-=k-aFKIjG-Ey+!eBC(HZ*{)8>;xJ(lt&hM|0KCTv1pH<
zYV-(3ve`U$RJ~5)8yd<M0ZX;tlTZuTQ9)Q;y-t#ANUhX{)cc3>L**Z}QCdiTGHQlP
z>G&&=uKGr9Mx}<a8&Cykv_5jZAYAUt9(u1c0Fw$4L>(fs5CMUb>(?DOJy+xSat+kO
z>(Bsfut-3^gB)U3QgskDk?YtiPB5+6dAvMvhC5%o7d2Z${f@0V0L*c~oS4E|F{>dl
z<pg0$hcH2T4-0skuza*0T2njHgLZkyZE45j$J6mp9@_=hk#_C4u*5&I3FDFrgN(U-
zWYa^KPBGci%3eQ7ddTR~xE|DFoC-<V%u^CXN-bCA3DPF3W3*)J3+-r?Nk>|p2khU%
zUach?d4}AkJFuDE@GGFKe^|B6yrel?qf%fhT@R+n%^AKjt^Aq%f$jh-?gn;xb7#QX
zpnn*A(WeMAh;Yr6+f2Kop$V)1+v@P%ScaKawAImuN!l3sBQ-LXreTh6lA$F(vS#eJ
zM_Iv%UZ&kpfrnCSe)4dwqh9N%(fZ!TtL!0Dk#u02d~sw`Mq)}?9&kE5z|U?h11gRm
zL(T4J({58p5qDZ0-zHQ1oz@H{%827-e3Dw@>rF*8XtRN@bUUs(haE?}@L~FNh%?Hx
z+dy1uvtpuwMj|@!YL8`aLB8ZR-%TUW1K4>W2%K@q-Ub!u(fYn2Hp-rvGxB3Sw#l(g
zw(+i7*QeHW56Mm7to6+chbGzXa((DJ*%dM5n-$5flkSHDt|Qhr0Ala!+CS5E^qloi
zKXFytPrD~{`m~s}J^T}DAFd+nF|huoR>(2*=1fQ39*mP`VfSCUc}3JaH$&#+k0(QE
zzqCY>#%k=EDRLc#i6hL23ZUiYA-xWBflTP?adFVqn4i776P*CsI=v0knYxKIl87-_
zE=<Um3ypXT`6c^sQ#_-yhZrg`MnRqtpNOXmhMj~7j^qUR8bo>zd0`JA4Z02kEh#zl
zFIyUn>tP`J5Bnf<{+Y5l0U~e2W5|;~lwrJduysHU`g1^ktq)B@0}>HJ<p9-p#2ro}
z&vZoo2xAFOut<O-R|YQ=edj@p<G+0R5F_==Z4>0r+e1oaZJi$V&zopJk1hxg1+cnu
zX~2~I?@*Tp5ps<(h};LKnN%?%_zg<Q=b=!X+u?S$p9}=50wx%^a9qHWY{#!nsJZ24
zS7EzcJ2AuDzNWx;zwS6X*4w*K^9D3-V+~&H9l^P0DB>7)KL#cERnWxjNr6}3SzU$9
zFk3exw=co{92Jk4+;-N!yORcQVcbF1Ilo38K$B+VbW|je!^iRD#e7?|GOiRF98Y2g
zx)}-b+;;aUZN}%TN4pEOuw^jrw5QgT56wiH<H<JI3vX$B1Nd;&YHiRagGB~McB__x
zMQt#TK9#G%{or^+45g{N-&N7>4A`!R%>h#bDvrHYg=)3=Vo-6k?Rm$g!0PCX&nvX@
zIk{fvf!zY|TL1`!Hr$>BO014mpt-kWiC;Ud!Q4iJgfD6&Alr~wxymQmZ@^2QjKQy-
z#iIYs#yD}@<oqW99TjaF`*0*XR-q0tJ2c)y6l-pW^@b{<Dl}<9awe*Rprnllt2zR<
z$@tD#-cgZ_P>?X%JzgUQ?9|5c)a=bv_a}%oJ2buuo<OXDAr;9Q)F=yB<jl4Vv){D2
z7K4|8zE`#RbaI6s@{5l=8UUEx4eoH#bZBIQD;u$fApq3EhajqpfiGCy8zC5|u3Rgc
zUG!zL2S`o3E81ShKeR$E%i0NLPTa5!+L{1^jYf+;@{j3NzMJfZ+Q1QC%=QE}b%QEH
zye-$(8NgAX8+qLIBE7m^H1fX*{BI)vo5cSPpudHuT)E9I%L$jcg?@hG`@`5S!GC^2
zHn*Td#mMGnj07<wk9$3sf;v7zWsR9Gb0d;5FOv(K*H)YWo;780viSswLz@rM3UqC<
zJyCaFcP`_c>E|nu)#}K&&E&k7kko1^vPg-v--BvOBsnc|VQXshp-U!L0fBuid8Z;I
zXQHLm>LTx<!`!NMENRnv2Oy!r+>Vk16Tq!IeoJl+)4H_~7FXe6pN^NYq8E~kJjs40
zqwuh8x%@$D?%_k<J+5;clHATg$SqqAvlsn=fZIvza6d<Jd$WLs^&*$3h_%$QZ&4P!
zJ@K-oS<X$wlxV<3=xj&E7(47ctz1#(>nEG*NSE~Du~8!fh{x-2du+Ygr@@C$j~5~j
zu|w@fkPl%XC|?=qT<{wzz*Z7UdmfJyv`_Du_Ag*)x}DUZp|nqbmuTm)P(1fW(*DSI
zoc0m+H7K3h;*%KOK%A-$m8yjioUD1Cv*1k6gv{cEkbH#_Qcr`1lgDD5*nW;<NN9lH
z8vlGT$_uLh$$wFjY26f1f)-be3CtpOWUN?S=8Ha9E;@Pv(eQP2nw;CvP8k)A<q4uy
zxF?l4(3%*eOuNSU^<b!eSc1J2-<9Qly=3o&H(3v7c)M?+cy+8obllp}pl8j>0Y2>-
z2qJ+XK0xs(qOz=yPg~K|^tXr-03=Jm1X`pDOfAj6QJVE;--W{V3BE4icJKwt6x43+
ziP}$)i~>WceFWbT)OK70wPm6Nh1!l#+NjOC@h?Y#PsI4TPcHE5T^3Kh`6D<^%pQlo
zkLl@$F+K-UoVR_HC9T1;1kbm4rZnQtg{Ca2{t)i&M@aE%T0Xw}eJo%WBBb~a5Vsxg
z_e13bdsY2;_~pKbq0Yx2K5BHBcAGE4vK(jYjlX?t{qa|48{iw_hTFuvkNxuuBuV`k
z@h^M~aOa+aI|FIcVKs!bMG3H5;8S70+KU<Gfq>)v0P8?w&R%c+$on)(g~q*@Z@;gy
z!lSkKcAHPZUAT|^9Kb#!eeK5ADtvJq(*+K)fA*+2a)2XPmy4KSd(#mEbUJ%<z4;x9
zRKPnL8VmPRQ4`2(S#i;9H=(+HSKNW_0INju4dkCm_$1?pKyvNSuLjeu%qUD7i6IWp
zI}U%W>FF;3fX4U>m@k3xx8ga5_l*c6pM{7Uk7p4E(2l%CIvSNsyK>)=E&GHnWaS_h
zq<Mb>q>Erw^b9paK>1cI(k|*tK;03IR6z0<=`IICzaEXUd})jHmjn44W+j1ib*4W-
zlgZ#+!#Xo5YDpqic31@YN`t0CetCoL0`rJ>dG_HDh$=ETNhUHNFT4Stf%T>2xd6f7
zd7eU^U;~og^e$Jh<l9G}92!NzFZLAj%KVE>5NJpawyS6|LeZRs*7FVtqDiu#P%>CS
z%NjL9Txf=B%HY?i;z;Gv7*6G8@1b((i+u#ERA6GGRW!B86eRx%Li1J-&7COFW!~wi
z*eThd26w_yafl(pBIoW@$Z3PbayC2}isvrEvoMI~KJ)}4C5BjFKIJlRcT{YbY_YO=
zJ5b`2GdG=V=G^VXmEWpZZwtkG;w-TC3t~kjpCfaHxZ*{1WG8*G({BeWnXjVxoElOc
zhMyxe2N835g>fTS7`OYz0e4`zK9GhAu)m##W_TbpCdP*tn4bIO1efI%IS+d8^?)7!
zzXC;r0Y9TPOqUEm!Mvsu1c{_ewnJcuf4=)k?(*$Jfz4&!=BU`l`9tfG_yohZsqL?3
z=o0a|ZvuhJijO4Q*e-+U@d+@7eA(Pif-$MuNsp&dbZSoq5(f3BHxL`UfOP;4{(_kP
zlPnlO#NsNNHnO{3?F<lG-v4uFfPPu*ng52)`&>0sF=^a1BmMlVl>y17OY^*HIBwUc
zH~HdXn<}EW55I8C7i~CY>$Scm2(URX-}RNlXUI=)y0GgYX0VktY3uvtOp5i`zm7ey
z#ye;BlnuI9E58@$?)})_HjC!xnEyEH4r7*%PTgSkgD~`1xRf!-BDBhtHHd))a8`VI
z#1~B~He~A8oBu^Gm2{2Edh?k*{Sa1uC)uyZaO&`DE28*J(&6vBI%-c}q`5GW-DA3g
z)N`V?6xz_3=QbZ<&r?sVART*Tcwi0W%C9Z^k*k_jAj_dI+&d>daU@I9+5LN=oTPKs
zmwm(C_M@g<g^6(7+Y%}-=~u>@-ZLM`Fej|m?vUIAUbGT?p<liUe*z!7{HbR2JGc$J
zgHh7&kl6cE42;TCi*S-O4c^CTIGsFAdfni$>$ay&OFLCtS<x)nqOE&|OV-zF8I)MS
z^j_|f^rnp5gf+K0zWcsB8Jrzt-IIp&%KIhT6sv4LYklp)QHnZeea)B5U8C7RX-iH!
zWqs|-Z|QYF+NtW61cH5yKI19H_pOo#o)Ue!$2X{!t)||%6o0I*3A}P{!X#G6Bfh+_
zGZoW!tbec2rXSdD-cWdSx5o6I<;Y}K|9v2U$qc}-EaAA=w=}AXcu$mrT7#h0HzNHw
zHG(b9wSVFc-T8Ctzsg}+j(U=<?-ctvlnAen$9CHK+76xX6sWqD6M-nL^|h~z0?lMw
ze3sqM;Qs@WlkMkg(~oZ`{1<O0&O5_~!ZUkK7<NW~utK~31Ig!pVaw2F-Z*>7<*-3F
zHq&;?gZX1qY;j|UDx5Gfx|hlq#m0i3xwCV=JX$+LwztCt5G_yZK>I&jn=&*rGjnJP
z{-h-1b!akP2d4}jk~y4GQiju?p~De3GzD=4ICMDuNkQCjf*wx!@G_hb&>v(OIvfdu
z@jYZPQihO=Ac6b?j=C1=AGNL{uns^OiMTC}r9+W=vF}#m&J*u>(yQ`#gRAB?l40Ax
z`zWvvvR)V;Emhk3IPRD1v1?a@7x>a;rZ?5+=p^so@Oga1@W2C-w9u1~D@oP<giK8E
zd3Q-Q`;UGBk5UKQu&y&O_h<(?$?-Qm=-bUlw|rJ{ev9>j`Mi{6i#@iRI()$FKWT4u
zKdGz2OikLdVO)RT`Z^EOSDrFiqteo-fqc*;m`&>{43Ed8d%P>b;EW0*dSZpq5$IcX
zM`iiVx*wO`RzL1$oiu$_d?!MRx_9N*zMHKLIl6Qz#FzLU36uhK0|BJjzOl+PFk$yw
zt52J(F5UWkZ7tN*8M<m~0Ulb6rUh;}TArbIRmUDOt=o<0*rvy0E*!(U*)b{ofLvjS
z4OD2;1CD^c{O0$FQ(422{ZDI;(F$kT*+~!?d^OP*CeJR*sgp}uTo?Bc<d8;N9N2Sg
z=hGh@&5{Hkw!|K=-?W#Qv0+@i;DvqQ`j!-v{pLybR^Pqr_v_PM4Npe|0U(%UKkf3n
zr{1U=vcEn?nqK)pn(YE;uReXV53EaXTAzc75w9l{OXynRx&tQXhbWUzshX`0|Adv-
zJ6hIMZ95L5`+dh3y3|9}U+8qzrax#+j+X&gwVhIG*<ZbUX(L&VT0RhqbkTB@jl%JI
zs~oioZ&ufM19nBMtlA^spX2bhges5tb_Vn3DftV6`Db<Izo+V;fVTwUA5q{J1mR1%
z;A3bRrI!Bzv4insE055ZlA=BFi{QaGT9Xhu6`-OIwNf9dcYV4(H_$cCbd4|Pw;Zi#
z-*WuRqr)2^%16(zUC8Ky=UE<TbzDk?7Is`3Zr8zK?fQnjhP3o1s~m03FrT-_lNY;M
z%V@jNg=6=AV|$oVZaXPi?=wsG1f)L1UO<}DGs~8vsbTQ>!bnATyxY}SSrO0xt4EJ+
z=4ZF!7is76g0x3lkR;jkCm-->k3WFbA?u%G;Y9=gum22-5^b)F=?6CC2ABb=k5(|!
zJw*JH_AS20t#4T2@{YFNmn_-NVdDgL6oJ?`ti#7h)~GnC%ycZCx+{D+$IPwSzP}Sl
zK46Yhl`!G@j@R}(QCq5tnz0{M^aIUfO>vr<wHMo=a7tSMKHRRoaLm;_w^k8Ey#&7|
z)^2FIfYz?{DS42tey_tiJOa1&Qcz4QG<=;g9OhrI5zJc}HaQ3b{kOKR9C|`5pDmIW
znZ#tqZ85l=lmL{wY5uz3{TzLws7=2I8>veOzj#D`Wik}ZkK$H_=g(8~!#BQ{``Mvo
z@ms&VM#dDDjAG_+`r*cNO-(VPn)LTDizWi#*|eo&xoUPP)}Jm8)0L(iAC~f2R3=24
zuk-zGWuMQYM&k?7B4PzRhsYF7a09o{2Au>j2x|<H`2PsL1o40Ovk?48qeg|`KN^*G
z8T>~>@T>K)5x0dcmY;syRsEUSfCXiUh@;hTa%{?$S#zK#`zU(y!j5L7Txj-1i?^sb
z&&5fuKCUc1U$f5#$#R0Tsk}FNSyme|`V)Bh5IKGnekE9*rFRWT!CHr2!j3}&UW{1(
zkQ=!h=a=k(Pie&?fy+kv@jUh>*f|S7Z=I<hPNiIUjc}399<m=A+ZUzTj|~qG<((Xs
z(!7JyTW3(#O0X!7G22*g4xp>~lgegT9T&%z<w07<mQA*<?PR*L94tdE^i-a?8=A7|
zv8J&Ln`n^G)nNIn>-C7P29_uk29@uI^LGKYu-Wig(iY&>z(EptIMkOf7AnN@2kc1$
z>`Safe1yfiT2_p#@F&J?9gW{kW_KP51U@tS;S{EYeBNjHSl=F8K5=879k3_BCr<_c
zgqq&m?#}JBRy}f>9sVQ`m?3|FGVncCVs-ciT__7t9o8zQV{ai!S!yuS+U$PQ?rKMi
z4%#BkwEL)hPV9rB?J|!wEl54<Ja7L|NMy{yrcLPK6mNr52J*;%PMgz6i!oMLZYQly
z!slJjeut`IjB)ET-HCrajGue9Vvm;TsaHwUt?e}3VS4(%xzYp2o+34Abp(v2r)B<D
zL6DVrHSKON?H-ri38mUuT8giU*xS)}FNi?WyvdzbO<`x&MEg0@?hhvk+P&2mqvV=u
zcC)T#;n5`kln*(Z;OVW=RbSNVj-@sS!D19J9e%~z+^K6`>*Hcu=s%9V7rZ%XV_dK?
zNH<|E&o3IXKxsg1mJ|(`gdebGOAn&~^(nLYRu5Xwa@4W>8Nr>mSd>v4kFno(pmlOv
zod?#Wz<Yuf4VvZnm9U+M)&@x5$R=+Ts<G!+DU&u|@ahhs8iMdf1Yhb>8|CWMnoNxQ
zldRZ@vi7^T#%QJTervrHTG!TY(uk;vuifUe5WO~Q)$7mvlD+aV`F<<f^!7MwAh*rB
z)_nH$XRMEz+ZI@L%^Wfp>&2KkRJ|R=o&+#H+NxW$k*P~Gtgt((B^s-)5Q`J+H!%F=
zM$@hu5`$4f4A8MnyCHZ}r(w$@m6ChbnvvU9igjiXG9>qGrtc&c(5$W-<Xk^?3=<id
zSSQ1)TqBmr_?qH_SRWVrVBF@;JV@L|bccue4j5$)=~t8eY!tRM0qIq^DE805xTbBG
zc`T+s)q846Z`1CA6f9BG-pmWA(P#5glD5$2by)G9nvz7x*U@((Gon>bj7v%SY(UBu
zNP?p-xpouOUjch3k#JE=LM@tl-YMLxsU4F}qX_+j7zOAKkjQ=E6i55QAxpIPgtm+9
zkw~g7hSaBqftHL~llvJUfW*SDpe%l3Ngkh-l#VSPwd9&}csh8uk^9d=(QG+(mSZyw
zCF~(EX*IkQgu$J-oL<)Rya(_a)q!O8Y$>^U47%+U-vvpV4zP7)g-FGgh)tC48-^Xf
zg9(b009xJ8W)m8|NdfTV1-#~Yg611yP`|FN!?}hB={L=3`#SGKjmpY8blD=k%idUT
zK8yvF=6dr9=-)={_1${{gMi!IQbqeZ*r^s0I()KvNW^R|GPH*PxM*{S!_z7!V0}f>
z%GfU+OUtVnQ%>9dB}=I_hx||#jZ!9G!#g#Xmyax!tG<%RjROW50?Uno<(O6&+!HU-
z-#obRfU}b=6r8Eg{7Tc6?@P&^9+A)CIZF-Vo=DydcOKTVk=@VwVkHT$^_gEHJL!(K
zbqpBuXN)}Ha?_hwnQf!>xu$;x*XL^4kDljEW7?gG{)ELiIEZ&=qWhT7h}VmFJ&S>(
zsuj7|9WQhSN@$AccD4d3DCuA_j2oziR&ba3`XZA36~8m@#5&CDBw4lY=LmE!$sM}{
z*l8x`uaK~HJN6r3E1&Il2a7j3D-o41>#6`HvFE2D<9_w)^vm!g&3D|l6B#u2Ir2zl
z?OfJj+ry!$<X+L+a{vu}C$WQ=b7Jeuc|oDB4aTV3NgM!hCW@E&M-_D)mL|%nMbaDK
zL(sEz6m=Du*!RCCr&b6179lyc_Ciniz7kRq-0MZi9>st3kMo{t%z4k(!#USKWg%Su
z6R-*XUV-b5PVE{KvAzvi+3UYW!SVE|_u}(Kd`7l}W@}eV6rm0BSO$E}=+$?Jw}KsT
z)9km%SQQ(chJ|#Mq51NMlfXvK8vC{oetZrBhzV`a2`226LCYDz1a%)5<$4_d(LXhg
z=CKr~#`FHTAB<^oS@ydu2O)4IkpJ_I${I&St7KX?18#P3$FXNH*r+wR$BXYkC4E~P
z%q_`Mz4<FVU*b6_d3z(>>aw4<uB|vNHJ6U1FmQ6^DBysEwz8KYBXZ-Ri|CzAK-|h&
z(OYKI%R5K`5dx<d(_)@X@Q5|-E<6p>S=o|=BPhOP`g{+r;2X=Zf^;d@j&<6KmWg(~
z^_^*;ps>ZX8vvg>{G&}zKMG`~U6s90<2LgY=L7__EF=CPjHeIrueS(#NyaE0?slgy
zJu>6yEY0*KP28j4&(lC~0#B?jOS&7+pYS}{imNBT&XPXC6MY6wKRi$1xv4EndInDo
zp7VGt>;Vj5vn^~f1&)eS+BHLnHyAQIg+W7mm&s;(U#=F-Uqc-7z71jopt-Y(8k4=s
z<6lI)g`K8%3%j0>5|qVlIY<j*t3|{?R?LBybKrLcFwdg^?<e5DVaP-7{cJP`&f&nD
z1TfD7po!SiR;srp`R-PT!OqE3>}H;!Zx@M(HOQOOsH=~ADw+Kg3)Hi{XW?S$%GH&g
z#~OHg6VfdLms(OE+pvkY*%M9co<fbi&*P7U-9?2dcrH@uTY2th73@e6nw?c+=7)Je
z7b)wWswBqE=I{%;!T+*5JWcJ{5Dq`83tq0|HOn-zUBoi)4c(Ix*cP7DiKeo!DTKko
zwo_1V{+uM+Wp4KF0CsH1;KxwRhtX9Iqst^wh%S?W6!ynSB>v4_R}j+SpSb3F(>f<2
z9Bhyc9U#h9gkE6l4ZX~YY%vZNV_W2#Sy}P9WPh+~ALNyLLkU}AGgm>ws`gVXsc4Gr
z#Ka7W>AI>$iY3vaSjJ=R$>`M@-;J0HeNL<4pF7OW*r5Z@(`d=$%*4<RqYk#6`AB8O
zNy&B-`rr}CZa^nKVw8M1?^1EZxFX8xSaQTjvc4KS1Wu85Qkw4wHQ$$D`)uzgAjiT6
z(aNiZJxxJR8O~FNw|ItaJi|BiZecSnm!X|9RPqdTf1`zY=pCpvbU=c15^NjMngbZ)
zVmt+K5lPAHZ#*fDqo@#Na=L*@$7_WYwN_`TOd~H7M*&gh9(qTcqwk<G!`q}1Q$@_$
zhJsaoW2qkeji$nR*Qa(k_$|?EZZ%Ltc;5uR@Yc)hmY;0FJU)0+{*6k0tW+caGRhy;
z&XUNV&C4&tW{EJKB(h=WQNHiGi1;LyNb#Tx>)^n9J>fkODnGAaf{J=&SlCkpspMCB
z<{elki|CoWr@f~T8||%!@lnM>#dKy6VS0CjN3f<Dfv^${!j`JF_u7Gwh;W-v3&W<2
z*6O?uBih1VBd~}n8re}HjI{1Qo7e*v9fI?cy)S}xY(7D77Gva%3hF&=pjRNjj*v$n
zOlIo|q1PuQMTi}CwnYQQr;79-i->o4q6MadsM%~U`Lly*$b-Wl>;BL^k3r;lp67A!
zbW$|FR0yBYGELAfP0%v^DTJ26L7!HZY375h57I~5@LKs^W}}iP!+hHA;Z?D;rdpbV
zLw7Svr(#s_B+Bc<{(%q{Cnx}>-Dy_md6V-i^aB6{)|2rNwD8^r*WBj)Vz7H0`|rrM
z`|K&0HD1NGqdUd#l=AQwUVHvVVXhKG@8Uls2j7zM&h5VeC<|r|w$IU<>&0aHTiD@x
zF@;{-yzd`_s{_VQ#W~gZ!9D~hO=&13VzF<wmj%;c+RrlEXSD3u2vD|%3u4G#Ran~3
zY(v5FG38*R?nT0q?{-pQ%CwCxz+!u`3zJXVf-}ASn1MY<U}VUjS%BnsDX+Bpc0{Pt
zK@Q+f%$D7hraRzv@=4u$0GD}%lyco}swVAD<|VVZ0uc2akE>@d{{p-nF7pcJVWS)%
z5fGx02dV-fpZ#|}fl~rz<0}9jY^-&tx5y&e>j2D8Q9HRmubBQFZlo)-)AOh%HD_-)
zzkLn7IdS$UN3@MN@5~P+!8Wg<HS~v)*#w&E(RN`mSH?V9O#W#rZq3Lhc1Kq_{5Tdz
zT`Rn_dVbEa0rPtFMXVmBB+#Ee^rtUvDuFL@Bzcb)!D^=c^CPSo|H2>&r43gUj?<c+
zei<4JHsW3F+(vu@0k`{r?Q;JNxLyeVxM7GZ#%SPF{`C@JAE}=%T8iT4rIuTkCR*E)
zG|Hic%cmbWpCx?{67=8V(sewy;u(r39nWYy58%ni<HGYEo{#bT6VD|)Cgi;p&pmkF
z!1E5C9eQsA7-QO{PZ<P`*kX1Vy}J;xBg*?G1<~GDDA0MgQeg1@mVy}XuMl9T=tcyU
zbnuAw@2(MXt0=A<9OjXW@P#9;My=hnLxWZ@;#=|-;O`C`h(l|@cEDe6w#bzra*gUS
z*T7(|K0H?+FJV*4kM)v#f(+VBpv1*-jf%KaU2(m<q)`#q*cE5=){3}&U2*Z=H$~hl
zU2(m=TSVNmYTRO8hd2n7y{M}00v6QjF_d$&ig`Zd<6O)RlcPS`x1g#qm<-{P*j6=}
zmWq7ls^(xa$qRc*P445U*ZXeAM&?0y2J)Kecl7lo;wwS<>gS8bmv)Dy@{-mTA0)|!
z7`c}ATGBSJVOrC=Um~Of$65AxwMTeg7jZ_7y{}xW?--^pi=%de&`Z9%c>!sam-^a!
z@m5?-JF1f_FZHs=PzTcZuo<E^HnpLJvARq7sBUyT2X_h>*3aA2p}w1TVXb8S)J@;3
z5ms0Erp^HRB@xZDqA{h)+HWd-x-$L90FG0B@6!VSwjwq;7{DcOAuMM#fBm>k9g?Fi
zk)Hy-+Bg6|B94{o130%We~5!4I(bq@MqGKEjI%K1(>jxFe}7o`p~w%f95`r$+lY3Z
z!BFggvfB%j7Wx*)9*?N!-!I}&QanyUHfCoWtI)g0>ZXru^7Yj<xf3_TX*j+Ur*P7&
zx<i>6{__4j!cpCbxVW+y>)MOY-%$DqG*^aZb$?P|&8augd4${!xIoEnhLPW{xbelg
z3Ah+JZ5?#Z1m{7BG(SHMbTd&FEq|(zh10Th2DCg8M-hlLi(z%F+^Dk{CL;y*_gOUT
zAh|L1x{PD1Z@^B+vns(8RD!K8%h^mi7eQXp37w7_P<=YC^n;A()v1&bmrP_7`d9Z0
zW~K~N5VhuOtRK_1Max-U16t<@Unc>7!Cvm<tT$i4UM|06dkp6rF|y5q`bO2&0j&*j
z>U%%kk;xe~<=K^}mn{j0QToxz-VVoU*d%@y<Drgb8%U}4fsv{Ae!#n7v}Pm<q@|k+
zf+l6XlKlNvT93q{h83q7lW{1Nj&r_`Ar700NwNI}a!KnQ3N;xqrj4|&A!C>FI5aYb
z5G{Fzwbl%M3O{nNnh+J0rcv<3${}>dUt3gq3lE=I37!)$KbV!6Vs)HNwr13ro~^}U
z|2npN5ifQuywh6ts`$85WI#E3MC;k3kAYE`8|qWK?kLDdoE47ZXFYtOP#cJmYiEl!
z3K|RPyoWDE#(}KGXyvuv!_G@Yz|FjVIQZhpfSsrFX#+a>g5tQ#7>V81$S@89;DG?J
zxU%<nU*rBErJwMIly&GNIOB)i`)K-dEaj{X2tzV}0(#5XFW<o)?kXX8t_DTi#&fx`
z{=@by<m)VZcq7O2cyKJcbA;_>v~r%@D>WBgv3+tjp?mU|<eT%eHL(0fX@VUEwBc;D
z<34g*_O)j^F3n#vjQxbs6abD4a(-v>Bh|Y7d-z=gAxlY*c^2rf#E$bQ9nxx=X<e8_
zZeL{4)xt~6Z4R&!Dix8-ab-cK=@(Cv7{J53Z#(VqH|>gX_+wU<z>_qq1KXqVyo+bA
z^86Oz6L>b@p?BX@WIbPb0Xg;ddqy7jVIQFKt+C&M?_v0c;Xwd{q8gFIw5$JN1Y;WQ
z1|-Mhi5>4~&^tP_><+$+RY>F5U_A7X+qj338B~*z+lE)yi>>t6eF}f&i!LWaNcL?X
zeYSEM#O?M|8dcl~n`#FPS<*CEy>fnu1o-e8oGt3h=jzJ|{!;HGT5&EM?pwUDpJQr_
zMO4!3?iUrbG_6Ut-B6i<dlGQwNt<kg236o^0N%7q=kOa$Pu~O22^hKcdsx%jY-ux|
zLwM$NW=XGVvZc2IS<<huC4}DJ2aI<h;Gs=2D{iaIkZj3|G;TLlIEZ^Z@6YxJV6}7r
zG#F3k<K0f;N}g<*#AitgHA%2;MT+}5LdDKK$Xi<$U*179HR@Pf(LqKCKRELTAg**1
z4-&kz<w~~0Prm|tNIH}41A-+khp&gO4w(lCP_q=7Xb!Y)D&_bv2v!6K9f8r$vI&ZU
z`Uk2#Mt+W1%sWW3$@wK%T=}FPOMR73(hQLHT$^^~==GN{>^t7&sfc%yUkO~&o1A~9
zxOb^h^!5iT-=)>5DEr-&@6t}uX!~%}uBa5q#2DV9_JO9|ywR;LCp9^~NEYx#lHi*j
zfhStU6UFfi4#z_Xl$>37DAGq~j~?NKM-4-s^}KAa85RW+CLjSpCW7-kL2o1YG<;V+
zsnMC9A~ylVmgH-MEt=xg+f?!*L?MH7mbch9Ku)0c-pK0kq_~{TL<wfN_$m-zL4p5Y
z5@eY}$m6zmC~}Ym!vO9K+(z&==SK8+M`yepez13WH?a=|l^akDnnMFhC^Fc_E=+ro
zmn!loQNm?M@6CqsB`Wm+N)*-A^6F**>W5X5`VzJsTxVh9$kR)bbP4pMr0*5%c9<B3
zsC6hosWtH+>ZRZ}>Mgo;&-I?PCs=O+^HIGGyxu$)uheELidRbOrG<J?6%DV-3ZyAK
zq1F%b#14(4@B}{?p=8&1M+CFu3Mtg$9;8Kfi-hoQL7hR5&Y(lq%8VHM1neA_?Bh{O
zxsoh>r9Vwvbw{@-tYvfOFoDVAYV;G)(|tx1>meSJK1BOyvBM4;$A*hn(9>W!m&W`r
z#1UsdOuNc7Gu&?KB*A*U2xpPphV2$a{o_DGD@Vr4481)@uqass1|P1<$<bgF#QiQO
zsc+NnDcT^GDUcX6YhMdnLM~&xCIQ`0pbNMO*nWt2qZ=r~?8k)!pfJnibU+#e^9}Ys
zY}yyR3le!=CkQ6KtiIl&bVs(EoKfhal<q4r?c&{SP*fWFBt{?#FaqT<1F(o;)wH{^
z4ro%l52{v-s#Xoh1Rh%*dk9Wi0n3rcW$a&#NdCG&kqvaD2Cif@YCp$~P{(~!WG9VT
zSPgLt4fGs!B$eXA&%j&SfR!S!Xl*wMczz0iHJwC#Gq^P4Jo)jU%OVL?5gJ~&EUv?8
zUh+viu^c{$e+2i$qfLi_>LGZbtNHlKZJ;iD9P8AV=*T3F(%^!UNx0nv9t9&B9PN{c
zjcZ5tE|1Qp&6a+6|LCY1rZ*!L;3N)wk|!v@>jdxz0yyeDBT97!%40bs`PLQ%+%Tf4
zkO}yrRa}~h!?r)q|F-kLu=7EUY4;=phwQ`2F|DftGRl9R$Hpl6ry_qS^jExW;8md8
zIrLE+g`m;~5;Skm8l+3M>v>ieeQ>y!MQzBSL7P+b2%Kp>V%<A}nDDen9oUsR%ytK*
z4x`kCqSn_Djb}Nw`AVrY6L$tG=7w?kkElQ-mpAjc9=QB?D6qoiVgVfF^3B|#YrCHU
z<H~z@V2=iG;aIS0a3+}8{yNTX(596<*rK#T*N!RAd0OybD~<*N>&=%i&$tw{O1sut
zp|s$KByVMSobX^OHX8{#pX!No@5<>{w=mksFdOg}4ZHDc$TXkK;cpvn@H6~xE4*Ad
zeM*zo2Brs{|C@=z+%IyIkB^UrWZQKi_E($$J&F@_-1x%5KL$Esd<~4jg`IKP(x<W6
zQs4^DV}RR-=PpCG^iw>W@zmhC5b}6`51hQkR~eGAoXyEAMwv7+l_PDW$6Mb80=4}p
zeJKLWp{GL*2zr`;=I1wp0w&o8ga{#rzgdAFsG?OQ@j4XFMX`Z(fIsTc7%Gke1oGIx
zjw&F{ka^HJ2*}Rkm@ft)kGDTQ7HLUNd4W|plgNiIkC(>U%3Pm@`^^AP!?(x#cf=BW
zn}FZY1^<D7*Lr`37r>Ks<MF<&z@HKDbGqQS2zcx=5b!i8dc018*NIUzw^d}S?#g5p
znGD=-7VJfw^q=sSu=j_uvUKcSj7CS*C-X>K9QT57zgbXc@k~R*GF6I9{Y54^^-Oxp
z`x5?uwT@MZq$fyx6LG(Xpshk6=!-AwUO3Mh*kd9$DnoP1M|s91H6wOmDH+FwX3V3E
zcZrNYR*LlvQwGr#+=0eNP)@N?<fA(V=LK?4+5hgN*9Yn19+Q)%0<?Tneg|K^;YT*l
z8dnem?lY-4YvgJGY84&5-KsI4Mc4`r;3o}m1{whFWAj;N`y{vlldOT@J`2do)%rg6
zuabX+u4icDvuf0zZt&z6K&{7s56x0paS0b2U`P0%E{}w++~j~GDULRal#lO7=9ehK
z*M*_xK4PI~0Gn|?erefb9|5<LiysJ8(Ym-bY)c5ihMU9aat}p~sqPZmm+U8xI&JT6
z(5FC{xTg=7gV1eL(25&)SAnLlRi`SrNm1aMt?vE48jkZ&ejxjbILNnu7?ccl;SNJT
z_bcm(8VJp}lw>?9a1svAb5Bhf0Ll!IjyB%zrgeV=7&#CDV^ESlI|JLHK_wXRrj1J#
zsEGh0qwfH4lZ#U_J@b^Pv@rvK6|2ZQ33NulC7^3eO&Ny4A9xc`WIPl!7(Q{4L=k)U
z#q%z80cQ&ldzT8Gq(Gk(@i!{ajRN|Bh$RDve7PuvD5Cdu$L)6u?`W69#+G6%=j1>L
zCSc0>h5Rq)*Kl<%>Bv}|VyuYf>@gx|Z=#uMVA_ZaMCrz+J9+h14^$H>;*@IXakU5l
zQLG+Ic<P%$eM89koT4yuG%XB~A(nUa%xBmmDK@&7CeS<fOeV|vl+Tj3`0nE03xeN+
z5D$lO61<)TDFa-2dS3#VIT$xPfsy+;PTC$njQgL|eM>)}Kk>V~_Tpz?B=|<7*B-#H
z6W|;GcwE?#zevh^=s~vfG?uUqSW5En8}17N=?h%9_%yTu8O~GqvI^kKa$HPa@iqRA
zu>BK5KfFk|4(v8;ZVXzHGm(|d0M-v)1Tr5ptS}$HR`)!vt&{k8j!Uu%4JEX}&h4g{
z2XWcdFHt(}cE(L#?&l~Ho#?>NkUJLF?Hpm(+31QPa-iz5<^_`=xHox`jy!>RGxFIq
zfdcn0=~Hm0Q-g5&!9L|DjHt4c?B5|PsTA_`jPI*@dKPJBu+csuz#hXs1sdE-;@}gW
z{z-0lT?%kA)a}?0foCr+Ln>WDXT#DLf4K>&jlX<}7q^+^$(?co776L%Y;hjK!cdul
zGFtOHl_xjseFOzp;r=s;{gWzc#=(8|v$vqqa`bL<OAulJLHw0Nv;bl{K{)CWDL0UT
zSVjA@*f&VGx*Q%QdW2L(i)ieah_1oA+k7I3@&-yni=ogHK-saK3XLLscS==1qC{-9
z1HK$EF(*0?;$d#f+q<0Ty&0*f_7_;nL!{f%%;r3R7)!G|$H-O!XD~-=-rkLrBU$8l
zljmr4<I<7AJjY>oP69I{2bDWUsv1b;4iV)VXp1XYw384Fri40@c}t@^Cz16*9=G`*
zrSGS7nuf4#JpG_MCy9Lnc>xu)xV}FREuh01B1rxmgRgAa@6JhPA9X?05d>}j1H?WK
zQRmJXz}^6a<H-RyU+8!;Su#1l1q6;Tu$Pxm+3oB_9(s5qi-x?7s2E68m_6X>D{pek
zhi`;D0V>%afKhCOY^Bd<@#!}23pUBEl>H>eTb!Fl_Jtz*18(!4AV?JI!S->GJpdUW
zETO$h>IalrN(ug|B>KEdse=8cfE}B{J4(_J8?d*ddSX*t(Gyh1WGM(RP6bF70GR-g
z>$#AT;leheYzRf1wZTz`@4GO(%$YrVfh(aT7gYkO{D3R_VzKD;=AWX*USadssyd2B
zr8GS1H}=6vOR!I20UmX~rJ6>CE>ZqV2E;HaIc#613P*ac2ypZ-G;VoB9F<)X0aL<b
zy7JL{Hkn%`Vg{n(qj+^6MREuZxSymkoW?F3R3{NP2Dd1d;fv2>#CjEWHs`hlPe+gf
z>Yu18AmLXk^slX5hb-=CQCHZy|6S_El5uxUkrqWm9$|4za?ix3>kifnrDIV5s>X{G
zW+jg(AZ-E!`?)(99hAitR3ztr1<ZJIiojF#i(qpO07dBC!UxdzG0~hW9tmkq+N({f
zbP*2J%;cAmQBB^7tVxHXHl^eg_Ng!G#SZ|1${FJ(V+bqeB=|vP4pEs%R02d)WX5O$
z$>tys*EDu>kji-b_8^rtoXU1V<>Ezx%0`?I3JM*V*a)CLH;yTowA5Byy0mDqxwL4~
zQtPsZisvsYT`*!ydJ<q-WNc)>KMEtyB2XO3S5p6MsrPj~qrn(TqnLCMWkLCi--4l^
z?BVYQ6si26n+l+fQOKa57E)vbXJ%$%JjBQ$_oqVH6OYr7YAMlOr;5kO^VqU70Z$ID
zQIc%9jY5STQ-Pl9AL-dkqId2!O8A(?VzAswMdnqVz)h2g#1X;uFLVaDm<8Dw2mD=_
z+R6nV*FOwCGPyoDWfx}&czeIs40J@=<`B~43AhRtwiWIGZJy$b0+n}7aqH*GGxd)0
z8r&yz20O9gL1bkZ03n1>V9r;u(2zJ+o(|*lkUpHK-*BQj*pEvDIo}n6oHLvpeo9Q7
zGdcmDQGYt&vb11U(^ZT6R|(#^Zcur*wFB3OVJD_NX8Vn--~HfB3o5}ZGoS-;eZ_%%
zWN5OK%;OpETHqRl1)?8OJ@fYv^OXHa#7#B?yWkyl7^5+unosTBhAdURNH-_*JzFQl
z#<D;C8M@prH#j`s<I<k8hZgB^f8eRSlI0L2ru_m05MGsKZPRdxYSQ?T$BAYADWw5U
zRuambX?EWtoyeO6uCV%+PH}sP+(0{wO^z7IUKsXmfcST@m-Lu7pC}tUmm_uHHmQL9
zJ}X#aMOCdh+Qg0=z)h`0^=I?^hAsT9VVoa4@dOYiV%0NCjpXwZRBAg~t7<2B$6V;T
z4dzzrLELeJJaoO;$?C8o%234d;T~l8-1}Lfe@i#X{-56{wdPkh(pC95_|g(Z_M6gr
z+=zSZS>Ae_oG|VW6?LR*L%1{CjXSP*OSls+%JIBQuEf?XkbablgxsG?!vokR6^iT+
zqH`z%<9yI7By9pDjBMdM=R%Tken0`(1OP}9n_5ivfZCrIq3;v0mVjH7Av8F)5vS7e
zsACi9oNQ?X_KJ<b8#d|hee|L)@6-BIu(P12=}t?ULSsE23MOB!$2E(eGTPG#EkbJ^
zxI?T%)^CE!_;nq>Q4d`V=TSY}r%PuX(H9Ck<nOS{fuo?Vzv@P{XQ5x?AR3MaTKsGv
zkYdVj%*%%ZAOW)jj5bezA}WY1_)l2@I&`q|Yk-6fXiQ%qs@rc4^>S2~&ZH@KX!4Vl
z(d-0<05n&s51R%q-eK2Op2Hcr1UR^?84q^aV=;$|!tud7C0u!mc)A?*Q}vEVF;1y}
zQ5}9{^DH)tP(`ADq*mk|;wzj3%rl?b0wZSq-V~%(#Zu?afmamg%|+*a|79?bcWl#B
z<ai363Nku8=lHgNxJZP%A<Ku`hy2(DFbnemY#Nwg8;HNjwj`WA0zXnvFWm7*#ePF`
z3bP?cw)@o`2j?nkeYmg)J{~{2@lk&JmVw`UJ=>d!VpYUqd%-va*j{iSW+AXt8*ap<
zE#hPs97hnXJZy2y#*sowoCe!a#(V^&J}FAo6}I#HCc!2xrs5w@-a86aC)nFzUt>l@
z+nTE;B92W`==8n>egR%D;O8mu=V7k{zCXd+2>u2E@2J)Je%6J4qXOO_z_BI5Q1udl
zpC*og4RmP{_%?19W}Iv`T|B^&u_Fs$I|-~-fcXYuHU;)zYC5Nr9f9eI9pwOGe^Ahb
za?|8~AM*=bU1VS{!BU?c6vTL71Ri1b-U7RoI-heUq*1Y7vB$EjzeV;x8pG9dRBE3j
zyO81@4arCSH1u4N3QO_D%71tb_G`i$X%kZ%!O}l9KhZ-m;r*3%6^SlSVt(sDRm??y
z<vL&)oIuo5jiRT%0vyy+<LGKzKl?L!WspNdk)OKiHdukgoDvM2!LBOq&Q<Q<&onR-
z=KHi-_z+Iy&CBZqzXLD}=&ygSIOm7Mjcq~y8r?1pFQ|ci3MDA=xyR-4<E?+k*gyv;
z=dhT2@n$w?W_76j+ELf6=%y1m7>Q1O7TdYxW_Jbe*Z)XXD@?bws+zu0*90U?3pr_^
zaTC)%HK`4^%1}(kJ*JJj@xpgA<<LR5e_#XnKd^siA%*B+Me_A9T&>sho#2G-W=?m9
zy8v~KagWRC#2IHcV>A)ms`NokjCT%@THNMl`FaRzekU73bu%}+EhpIT{)?2$3G6#(
zJ0PL6yUK>E7C(gGU=!&VQJ^-c8}zdG$+)Ltr>~dAx@W1xFeruQ_!2q31k@6{9#AL9
zZ_IpAftUbB7uul3tArz8X53l9Y#iuIM+K8sC*!Zi-rKTAe+&8-gkNmmPNJ_#^hKPZ
zQ|odJ{AoFzci87!6pZY9>Q2G<AsP4J*Gm93Hs=oefFMva0R_KkKUpw~jc9!<<DT--
z!Sq)t9h;~WnlsF2?eVDa7>RA-DZPV`mGlkb+(aeDvdO$nz}=wqehpy&=fzYZ3#KiJ
z@XHvHgZ-QOpxU3P?-pS!SsoHc>FWFsuQct!Z^oRK+l1e@QvNv^8mcTcPjOt5$|u8Q
z67i0)*wvRow%xC}KS^K1dSM{U!%z6=5Xz0S*rO09WKR$oWZd96(FF%qG%yA1yWkEK
z*O~()YB=5dEcRcmt$P7ZaM2B3q}PxGvomg0d%&UrZs&d^=H;`|M>_*+-)+VRA+ZlA
ziGozRou}aQ&Xb)735X?r%6(wBhNf*Dg$-nR?7JhNwwA4cVT$q77n}MbWpNey1qy4`
zJc+%09YmxNSEjq2XV5Zx$>L+9ejf<DQv!<Kqd#=}{p%%|<h+s98Gv(pkUU<`z9X%H
z`+?c0B0ko~b155Pi+XP{vIs|^^Au6IRZn+lWa{%cRqVuOu#(kdql)`E;(;8^{tOFW
zc5;R|UqV#9a~uBl5fr(cukfhX@iz{GjLS)<&FY;y@i)r#;vW97j}l$)diX~jeYiO$
zoEOHzBfd#dK_R~O2kN>VYz-8n+#Hm+LXhm{1hAjMh$DIX@q>^zU+5w_B!(<D8(`^N
zJov=_^}%2I`Sr-TD8*@oUADGv6($?XSzU71Hl$Evle?Dx29(=P>FgNzFSl*Y#61m_
zIEA+E7r?xABW6Nu!9AS;c58ZPK(&izxSf;*&b~z&HWU&dH|Im)E2i^ukjT<p+;pZK
zFs(cC!m?a|WRRoKkKdz0+M;$=_z5-3KZEg$v?VQ|5-B-6<!?ywja`(9f+0?MTW5i;
zu11adCFTAGFeM4eB%&NBNF+Onlpwc11YQs;_vduJ4mye9b<<G*<No5>Q;<TMPSN-o
zkHZKUE9v*+;*)U)34TJZy%fTD7-`;Rd7S}_QCm-8Hp7035B?hj_%R0q{5R}n$SeOb
z48MDV9u8?I=B082-1{c>C6X5W0!|AIqIE{O0cNb|qkPV+B3KYaK%??2x2au}kIEJ!
z3|crM-`h&!)qx^d3JM5T^G$%$Abj&|QNgdKp@L_W@_*XBeC2Ei)Pq|5-!p^s&(x!&
zm-hteAJjd+N`F`lejh|ZHF)Co&>G-ZBY-rIkkW6tP<7bZmx7g<IWMF#YmpP;B6RW_
zvqX*hP>sAwjW(gA2#$)&D&ULApTVk$5IFJO<BcpAUTb-L0<>eI<Gxp*s&HRmpg+A}
z{2QO}mySW?tPhNVwmH5!2Cu`AneG<C3PFvWho23yU%+pr(L$c%zHK~zZx}^634#9f
zMNL`HUcs11d6b(OY8g4h9rwM&!SNFxf&TO=H$sICM+$F$7)6y&Vxe~c`^PYlE41G3
zv0UqcH;8lP7`t%hBxJPNu0u6U5!G;&(N##a=0P-qn43ThoGc^gC_qx+?vmC!;N2}l
zn~M7c*1>q=zXg)7XDygk$#ad)<Mt-t=o;sEUl1pAq{>xTRE}bQhLwdqH0UUz?HzTv
zhl0=lPPqzOT!pQ!LI!P5_rYMx7e5bRDLFq_m4SQ+z}5n~6=v!#MF#MTF>Uqcb_o}^
z!~OL4-@z?@zG5U@yx_L5tp<Wk=CCZ!RY8z_IOHr=1yGt9)v{)CBxlg7iQCe$brY$t
zuiqy0EyzL_WAt&^#l;wwMy{`Bu?n8~6f$o?=3oc<9+YBjMcDcG&Y)?YpB=IY*?VpZ
ziunTFR$X6$j^L6ne({N<ec=$breM7hzmFp8*!`oCjo)yv4yo)N^i9|we36>A&F_Xy
z5-fi?AgBXBtQ0wjisTbsTG3MN57HrHrKQqB{0a{isfAtNmQS<raL;jjkR0eTK4YZ~
z;eHy9GSP(i^)0BjXMYCOb}z<v@3SZ^NXjKnN*nvQK-B)fCKD-Cck}}+tBpL)Mx~-E
zZ9Ywo<5KjR*o;x1mBUSI|AxN$%f`<t@df;2?ZAH&+v$8i!Y{Po5R6_bz@~}#0<@Ew
zybHy<mM5ue-srWBo$uR>coHU8p1!fPuP;OHPa4-ZM()ojyvww!QI6jR@sOt;YTZgN
zIL6Zm2gxcLCiG8X$Ik*3DmVIK*c7U4Bbp>GU#{`K@qg64dtj8s_3*z*He`Xo1`LXV
z8Z|14C<-VV(U1@>axoABqGClM0wU0mMNlrm5G5{Y@q(9nMXAMVD_Vt!RRh6*KrP}8
z1O=7WSvJ*FQ;ZVW_j6|E*?l$y{eFLa|M<Ou*=L?JXU<%onKNh3oS`IqDjU>F<1um!
zEi0r3>BKA-_8W^v(x%UMceQDMuKl8m*XGsHr*v<unBQ27xk*_-qo`82e?_Tu+1p^#
zgTwbzzMYFH{_*4_)JJOYY6wU#%@C|Xf+e>F{0zZ8hG17saF0Xq9T<$ze)!pFd#xs$
z2#U<ty#Ur#X1Fg0lccjm^@_c@V7n4i?@P+bS0edRPe7(7=;?Pq;<$z9m5l568}W21
zDd<5*t1c<*Axirtmk%x(94<`$btH172rzn;ToNAC?;*kLP|~Nz1A^IYaLI9lOO6j;
z(BrVYo>`{)m7E+tZFLg6J2k75YgV_aS)Ed|+E=r>b<OIwHLFu=R=2BJ-M(h^@r;?8
zvlG5iE+Xq>+jB##JsAV}-WF|K49fyv!(meK!K&$BS*}-<%O)Sgj<njN=R2*&$0kDO
z?DR5~P~5uYcsbOcfoa;prWHM56V-;7siW@ls>I&dU*xr`4wZpqrM$M2*UKezIj@%B
zHJxFbWgphkPt8|{{zhn^e$f%(ol8=ABKP-~@1XuHulzAN6sd5&`ukR4V*QI>BQQ#$
zqWnb=YRgyin_Q{OQ@LE?ye@3GdVu*cXrWSWmG}@H+g8D=I%XBW9isHQV}!c=uR5Tb
zUlMAnDBq~xMM<DT#S`1~%XWTAPZAgYb-7gMiW{Yiu3Sx$mGVy4%PghOTm=^x+!?+x
znn*?Y5`t^Xm-5R!grpz~u-ftm`6Y!%^vmNCSgA4PJ6SG`x1vF+G)Jc(?@kH|g=QD4
z{4`BjsasnOgx`YA2G{iShvc2n?0lZm-@nVFwLS>e7@khcI~W%+%ffw$x?3!~Al5CK
zR0@QoyRjHKTz0@$>?`Sc73a2Q^>I4jXgXj!J)orD=ZrS%>sBY+uY5X>Vb0_iL4<ot
z!aXUvw#QtH;-hR;!R;2-uh=t`GT!hKwWvqiCAU+BDLOJzlup&NdEMMwPxo>VtRlCw
z2wQ7{zDS4Yr+qh>X7pBr;a8=UsZz>sg8IHJdvEN{Aod2FMbjKZ4^9zLAB2P_QC}mU
zL=;aiI&-*u@9nNP<G_O@<Ur2lKP%&Fu-%J>;mue8_$vX+aJ!;`Qf%_vcrMcFRm9um
zd6hh^$j56~mWs3$k7)Sl^MJpoy{l-q6@S&<WnforCw8#YcIa0mR{fRXD%fc!WGfP-
z3}yW!c~8knnz63U?wp`K!L-OI#5Fo^W&I>8f+A0iA|5sFLKy~Q`J}zmbS||=@~AzM
zKkbp+X^&(@Jd%DS`Ehu&K(d-;cpG$0`fZ_}3ecQVqBVsu)PqtFYdX<|N;Ud7KJ;(A
znY^c=*Tdy6SUU?|&&x2Lf;&1hwcfvJxF-uw;4M)g3RIPC?9A1`1)`FrSiuXSG%@lh
zX4OFpPRsO_|4ZwmU1E}S(FV7%g#`SX{%e~4OTl*}g<ol&vDd*~JKm_Hl0<BGF8hDd
z0qXrPw?zQkr3_vFK$^3@Q#aHKujviW@`g{(DXa0J#uM0#_C0n)%|CTH7{U56>cP!C
zYw1<g+v^!nTvtyLSzNf<tGfOkE|o6Z;2RS7HeZF`k)BpvP}*-ZyZ}~Ok$ShOs=}|D
zV0&O=J7MXPCdl`$s|I?%sstR4rMLwGtTWZ=l46bKZ{e3MHD7_cmvF9$mbmJVnqr_$
zm55?h+G&*L8t*zu?0$7IVbnPZwuh5%(+iuKUvJ_gIteYO4%9_EnEdy(jaWY9WFzP&
zIm)N^1vh!NK}POMMk@I^e8efiUQ&Bl_P^6RR(U0tHR|;Y9)t$Il%*YU_4vd7ND$kQ
z^9BwK?o?~gq>;@j^(Q=gCN=KvvA9=`v37cJWAdH;Ue$X4fEGHAT<r?x%AP5AL_fp6
z3r#X2@TT7TfJb-l;nXHe^>TMc{XNOLatr9g`b}3%9&c6B3AA#KDv}PqY{jbpXqy#P
z=4sXq>K_DV?VNXl+M_*z)@rwS>KC|7TP~wOy|{;T7}ql|`VqNj1`ouZ9Mc>vpq~J>
z<q_F^yZ04NS--*(O5ax}bNp84Eb;rCvE?#Uc7#VYDOqWlyQoEG#s|-bQU0%mqO{pQ
zrfT>Os*$JyUZ~qAD?G28e{IRHNbm>=ayat{d1%Low@IA=JsL70H{#9A3eOkQx^Z_O
z%bt~UNm`VAaJ$}O*2Kf73`7zN?S7E%P}C2~ZRI|o59TM27z*924;Cb61)ApV;wNw#
zZzsplJ8JY)osr-1y$z<+$dH&Gd=;JP8ODq$IS}16tz#yI-E9l&h?_Z?stbGFXp}O2
z!9!Pbpruw_A&tT1*$bp*E?@!b+|9;8+Jz@`cs3!>!4302q4iRG(+a()I#GEhv2d%Q
z3zDcBs%4x$@k(FSJiSc1l9?R~2DpUcSsUiJjfugxn+(;cSNNu);G}ADFu%R)9Xgsm
zpMq?->0WWN=@rKpEt-?)*;CwJo>XlsZ5h0#N_v5OH&Og92A{Uo_^B4(iyi11x#|#u
z(23DCuND;046{tDovfQd1o7)f@m+q*`R5HVu4)EV$Pyf*nX;Z2@jwAPg#&IdvCh)5
zGN|gH#FG1vb*xKuENieO=>r|z=orYEmf-yKARDFQeGCn0?9E}IiPdsCzX>Jnr;bIh
zj~VJ<XdUI_%HhaDHc-@zVGK}tm~)RTY)x`E^2+VK-v_u%F17m);n`wWCD6dJ^{hi&
zD97#Y3vO6+sD7cxvmp5mc?4^cs@Z#BV@n&2`pG^;qgsqeeJ5G)FRw<)tsd8yAL-Pz
zgxOloQ}sD#d}{YYLLdQ_ML!zC%XPYP+Dc!*9;O`gQ}h=RPJT-y-cenTbXiCA+EFFC
zBx)loH#%0A$)o!sgDvGp9j+G1T*~?*k!Kr8vS#w*60}W%zSKc={5~tW*_12@zDsgE
zHMyP{Xi3dPu3pSuRe`63=M>hsw|K6`H&OfL)>-+x6^vrSCh^`2HM8>xpJu~G5px<l
z-EL}ydaZmju!+rRd$>npv}b^482`?<PYU(zQZ3(5Yt55!T;KaR-&eM&ZtPT#3cfAv
z89tX4=OwNDYp%Z}<=macC+2dQx)?f^+mT;L_F`E2NM7W~)<9Uyfgeeo-&Uiy8E{ET
zK-6Y1<mt>2bp>PJcoFtvQ&Ma85jN#|TT{wSx!M4Wnoeyo3nW$~74bN}Xk8?!=#1^y
zVy-CgVy9`nYEzNxds~uYewVrL`xk0++a=WIrY02X>m|nhO0U}We*NpB+9}gHI<6yS
zopkzT4nwS1+94qC&F>1yj0%0|yjO{F?_j%YM9KAm8(oXebBJA8E>SR2BcbnGIo%W_
zY2kl}uz)f$U3vO~nchCXaQc*z!4qap&YNCRJU1VheDkAuwr@W=E==^U^q=&y-XO?d
zqIblkIVFkuT{c`2z4^tHW+!?|du5BFvL~_iuqihUpD{5oZBnAAx<j^Hcj-y=3E>eF
zZUg2)LeA36lh}4ZVCJm;)27Y1ebU54&wjw7hnwgd7??Iq@@EvU0M$$0+Kx6vMKes&
z5iV*#mP?sS=*nMW>oF6iO_?~MM5sC#iS3+{^)D`-FxQYCO!N+Cjn<IM3+B!$nRMIv
zJPJ#uOq+Fnd{tcG)CJWXkveN-@J;nmzl=bIi#9g04$+I~1Qz{4RVb|-+{$+vVl}Q7
zKP%(QqKIs^%x)LllvJ($bpjx6V+=MFGK57juLX0Ank-$M8$MC(o_At4SB7m}|3&ip
zaF@1QgS-4|Q^)k$l`}YSAh;26q=-x36k0Xhut*(iopZTF;KJ%L>#LLRJ>_6cX`oB#
zA@1}oJ=A|5=1Z<!m{htoqvy_n;l1OoyP@Wq>uw13rEJny3W6suX5AU=!ccl@*_{ld
z#|2pvb*iJ>>Q24mENdi!178?<C-Z21u#=9|kvXAlR*shoNbm;!1K-Y^=<zS+d>=BQ
z%rb<S{>5LLm*6#><>0&6Zo$erA|)}Y;%#_@#B;qBu=85OpZlPM+vj#7dElrJ|I*(=
zLb!cjuY;AB&jw%i<M=w;1Pi>u^q(ry!Xp8q36<(88DxS}RY)ex%~iK8tM>fx1qQ0O
zydSDeZ?pbD>nS@9Gr)G=z;c1ucLj%fD^q{uhTe9D8mkF!MfxHk;}v5cI+4*odEuG|
zMqm#7dh5ef5fjT8v{NXnaMhj5Hl|r#G;-#$4=5S(;YAx8q^BSyHZlnc&Awmu8^qeo
z_2{)~ZVp?38&hdX=1Aoy0A)P++@j;vKC`j3Pl(7M^5hlHAVRD4M|xJ9r#zLz_XTT+
z`P|=0O@v%^wR!bO%^FxAcMxIi)Wl%BRN9(lzq*^T<K?fl^d{UX*lxcIe1ieY;`o}*
zvL}<*6gmJyA6*{*p41V<sB^N-^7vnUWO-~v0LbFs+6QyYMQNvSKByJ-)3Fo0G`C8C
zA-uz6@0IkdA?ql<T<M!OIfM5CH5kCN-56BM`pGX!4^?&CuB|~LBmcQMXb`hZ3A4!*
zbbD{*z9N~?WKNUW?Ph#=o;jYe)F<;w)nHP~N|q#8dy2AuFfSbeQ5w!%%Nyw=fpW!-
z<~O!PR;X1B&P&gg8YrB+f%xWD(s)vtd{5CDdKV-U?F%*(M1=4zB7$%o`&cq|j8qR{
z2~5m>DJ*+k|0c_{iUDtWsSQ7DU>CZ?=f}xrLg3$n$|7lj&-`oBGfTg0VsrXER#{^4
zh%J+M)Q@LzrMUk1`Hp4IR6#a+;6;uwD;~KhFOumubDpFrTjLPs<QMg>ZUQmb=wDM4
z9B{Xn5lMEsle6Y{1OH(e)C0W!)C}I!t7P<6UC2(w9PcI!Ps2V{Ao=|uxViqGVGnsL
zd=+_S03r{;M3g@VdwK9J`1HPvY#&b`l1P27FOwpk_Lk77zh{<@1q42B4Ehk6JS*XF
zD?QBY6>$>0qO(P|;Y{)>eESaa^`{IJMFysdnGeQWjv2!pbdu-;V+-qK{hq#QU}xxy
zkSq0mdiyM5Rt$vG)SH9vK-9IBC5vnMR@Gsf7)jkr$?ZPXSmLsqm9OrVosog*`D&5&
zWT@eU*d45?M1_phLpG>;sbXkqf7tO8(}CxA9;L$uy>9UIJK>ku_bv7Q^}eJnVoO(#
z)3l*1VANj{)JjRbF>8LNv6n?xxR-(k^SUuYdKpskGE{3B`(yy-NZ7-2Y4AB(76naM
z;A*U*R_3LylUh^{NL08~rj>WJ9)X0&-mIESNI$^|>>%iD-k{UAY;(j?iB!zbj8g3e
z)xiivyx0kf<aHI>KDuibjAV}dFqoU6W-|&#hIW-x9D&p6@wu5*LL6ebsmbD_t9&Zi
zu2F~zoZO@Qq+>r#>}$1*W$Z{~G9Ly9WvEOUSG}2$Y>^I8)C7vE?s@G<Bx_J+$v{*P
zb6A@`0Il%3nz1IS+f&PG6Qtu&suV(};H3+Vke!Q73XQ&qDc>M!2`+HKrs#StT8=-<
zi4Rg8Y*Y0F#+xi2CP4Wl`P|HsAy)LWerRghdaggvDWY<zZTE+}bK}C<RSBh@QgfSv
z-*uZpTKDbUw{W>U_K~!WCrT}SDvfW;$0o||lZ}jL%t-D<X9$r&)IWxql368~6p<}g
z5&NL*C<hwNnu+zdQ5oeX^+q#=yg9%b$B55fUX%K`oL;qg-8KS9`N31PjI;yxUd#qo
zP}(130R~W`W@!ZH9H&csyb%II?{4VH(D&X2GCjyg%}QKYQ~g(M9s{k+MzqG+nY5WZ
zC(p^85bCEhCfTS_bQH#~=s?>OL_s;prgf7|OD82|kKQ}awRou7o-B-Zff@@_rmv@W
zY$oXiW#`iQun#AS+J72acqgxdIPnpC1<7pqglNEv(STwCnDEDM5N_6-HQ>p3JF<xN
zcrQ4*xArp|25T<&-|j2hx3I|ntT%Jk`E<=RXF>M^dZ8@nPAWa*3mm7VQD&jH*T56o
zUXhD^z0yN%0<Q;6Z;ZC7XcX#gUnJO$V1hwgWEFlyAoK)L|A&8iP-GF^T{sI;^oJ`~
z`Nq%|B-8i9eds(FvZzf}eRN%$xe?`o&XwMLW=WYXn<~9CMXiMEDN5O(VVQ5lEa`gA
zWSK9E^Ynr-W2p61Q-u%mX-P$;8GRW?2f7gpM69_*a;^^N(g9nkyI_Y97)T<6MAc9|
zk>)5tqt~eCvVSulsLDGNw2Y?KL>p?N{T)-J@2IIn(ZkQOpr`-+>bC=rL<ZL&N9$Ss
z?!1%qY$r7{xcmBfsoD1xWu*@+Ny#1(I7s=UcRyPDVX~`E7E#HZ-xRzuD!i)f+CHmh
zVN6ygXTg(`{tdU4HN0W|nbaX?$b08-M_sT>QC9Dvuu<#79kRJhE30O~Kl+0-Z#SvY
zcVu(h=xdIYyCx}jG=I|fq_!2N)41?Ywxp%)kHW*kymVMw)jEbOXeCCf$PV;3CUO&@
zKi`Mo!JSHF*Gni0dswlAMU^Z$=?Gh`bcA&7y-6#X$cUZSkQHe3S3U)8jm?S9nFOW>
zk|Pwqvm2HcXe|fT5qk~Smr@71nku>6sglcQQ6;tEaoJhx7pQ^Io%dpRNNwKt9=!9j
z-K5e3t>I_B7Zcv!m(Kql9l4fCwU3dij#aJnH{_tm<M|3?{$LVC?C<6Cl*7BSg1M5>
zJX+^T)mi|Rwf%Oaojzp$UJ<r>Zs+9XyZ&d}&T6ag=kRksN4O3BK5P5zog_AnK{`5?
zpo;;oPm?WVK`5FB*y9NPUHyjLT|HLlePO3f81rZq&RKwuCKH0|tbrW2po%?o7HyeM
zly>?s)v+=>J}a+&UMsH5i3Hlpz4m#j94)Izqx!`_K!C5N-sw@Uc0W3eJXabtv2efS
z6P<646c0~V7m)fdr&b$H&GO0{_tVGF`#oq9jEya@p03`7CCTx=?w{w14M_jeG{)lc
z-TtK_e8I@rZ)CAgOm*iK@M}^;x}}=Vi=1rs(L9^U@Iks=YDqx)WSvCbN``Y;2ld)P
z-^i`(n&w~IbzD)__=D0l>%wU<NNRvCStl1nnBnet8x)*hUzF8#P#`IrTUj<sU3;_Y
z7rut$il(GIUwC?sm}7W4e6!dt!K~(W(e(Pps2>bqYH56!!w^gOogYSp2V&u$Poz4Q
zNNb(Q3$gC&i+;b`<@+7pu%z&i871WG6b<IXcJaTmJ!<exoI=WASu2x{t{3@Hd^v~8
z8k7C^d`JypFy-oDIi6c^E9~<fo=rG;md%GVI|)NUiNV5*Ae#M6!L91A!Wq?v&SiBf
zDi;M3M8NQ_>N4TJ>O*OS&?24lWvD>%8HaO+!I85>W%DyVfi6%_rpx-*TJlp2c`+^m
zY0g4GI#YdXpkiDkM%oqrg9%?QWZ#Q~DtQKLyVuZN<X+;1t(eFYO0oxK&97UKQ8_4s
zPJ-gM^l_^_scY=JUuo@0sX|ZXfU2f^1k<{=v2m>4ypl7^PTlo@K6Muyp5u8I_Yd5K
zBXT@NxOuq8aq!%n->CF1<JcSO2C^@`k2^i|UCaAKnvu6J_<7R!ea-6UAktjwaGQMX
zF$#N7Jr@c)%jBNj*65^b3Oj|u&RB&sqt#yc()v)Tp;eK`I^aX0vb}8nc1>lwrm|hA
zY<IQrr;QRXJhbwL1XmSLgJT8S2WTusS9pmD??kw}Js;J?7{yv=%}?_$En?Q!b!vH$
zXdBI&K=}OYb#uw^o;vuv#NytAI93<eMk8+cnKn9+K_T3;d6X_DO8A840f{ESPPrL|
z58<OSnnz;`Wi2TKb{aR)TUh|SZp|x6Y92MKM{e$IH2ZcEz(%}CZTaLxZUZ5iS;Y9r
zPcpa2N=)V#_5DQ*UA*zVmgI{^-G?k7*fmp&+~inXums$T?GYp4<mr%V-lYij3wTN8
zWrn<n!gaz}bpiXXFnP&p2j)A*>E#J&k2I;eCbD4th+ezPjzq9VD^PU*ugRF*#qrO~
znC%a4GC3Sc4#QXGW_^!sju`5<S>I!0W0T4~pU~4rI3Yy*er)i)?pyoI=OU#<{~z^9
zXPty_umU39Os&(0<T9VT4HIPR>Bl1rZ%<k64LwVR@s?0(fDwSnAylA5U>LVEujPT<
zQ;IogPOBBMB$9>AEe71tfZ6x_5!;r+@{Z6LtFct=z>>n3EfS+B7&;2L@FNSsZxueJ
z#V`b3t5aA#p<S%?6r^rtnZ+LIx+W;SF%Ribu-E!;m}1_``jKN;6m{C^Xv3{-oAkc=
z&m~79<fRqU@l}DHx>ADGy{c=LMUq#s@yjKP+aE?4!I;Utohz0BLRQjAo+=TZb;W}g
zB2QKC2lBLq$WwhTkd+o9Pqj@Tk6Va5)jEMZVj=QWtANNFvaFvZ<O!TF9bKLOoXn|+
zM>hVE9PNQS32tW-+yAo84j(KNpSn$mNh~XaK-c;wmYfF{9LFc{2_He{NP(}sdZAr%
z@|9>gO7vU!PCCO8*-m3ELRYU<&mu~Mz27RW-8pg`+6MF@=cE7dBBru&*P4&sF?l0j
z4WES8gf|2D$3W7Q@VMp!aCjZzKcYwZEvGv^J-F$I?XYUIGArgAL8-_>*<R^vHE*Or
ze!qjYyZ3amme<gI6B9<+{4}O3vVB6Z-4Ya7sHY4;%ofDmh~b2Vn2%k?21a}>ezjD4
zkBA{(Ey#ZcxqSEhOh-&>@lsu>pDlQIgBN3&y64qp?OgD4k-mGMNF#M5S@g?-h6#|N
zm!0x@Vg}-}wbGSbmBc*3B&Uu;dMnGVI#?@d7G~hSkrOaS(Ea1A4GSoJ6FNgq>2oCJ
zXCe*DOG~O{My>BIzm4i|GN#2-p=WsQVC(RQ4Fz%>hHcv&EmiG5wnMxW;$rPls+RJI
z@EXQLl)HlMy1B~GAjkzEo2re&b64#)!RszLMy5g~4Qc9*N%LJ&v&W3{h{XBfRN@S8
zN_w9<kxp*4kYUYgxbhcK#JT5)E{vTIYD9601GZ|L-k(KyQ>$8opuY!)*B^_-Mzi~}
z;zgX{TC=y%(>_LyuYOG~*chfYjnX!o%gt-zfZz=gJl)CS@Z2@ALGVtKQaR~%uQgrl
zm{EQ!QNB6l2$vi?Vj$WX*(1B-UCJW?ddGIxw~;C6Z-Xv8)hDWl^a<gv)Jx1T`OL?S
zmFYcA7o$c~ZRhZr^{Gooq@FuB`-@s$t*&_li1Ql<l}AW&ck?7)<`M!m%qIDPTGz`-
z@^VSCKu$qhGLoE81zA?sPX<a);0(HT{a^T~FA$?acJPxRJNV6PW5-s;G)^Hz;|zP5
zIJdh7ObN1aE|)m+ZpJ}Jh<&&{8AFJzN8VST=4G?Uv-#A<_O&AEix_I%B5Cq#)|ALf
z95QPlv!oCSSjEsZAq9<^V9&^yzQLMOxt80n>cDVO5viMd-#d2l<W|X%2vQm$vPq3b
zVvI6E8+8Jis~E)HlofJ~S8BzeblR|DkQ|TB4-P`GedH-HtEC~*Tti*AztIpiU8VZ#
zDhBxmv)W!V$Xh!oHNhSpDTvRQ9LF)D54~=7m2pQqTSjMBCR#}NGT)Ni)M!~f@g#Lw
zk$5Z<y{BB{RJkll*5tCSW53SmWGAvrWC0_k3gusLa9S|C^L_VhQNKr!DEBOkMB;<<
zX_Q#7$TZFUF0p`giMPCYJRL^|-4Tt0yr1!6(Z+qUDndpeYWca;=&Mgkjh1u_)?%cr
zvpJvFxhHIwj3PCevOAbzb_aviIsTXO5d))6uVuR?{|rc_NcscZj}h#o=g><>vmE@h
ztczq^>am*b#F7&R`xjR-XZGm(BkQWgh`>Fe1)#`6Q7h|ybgfJ5Y6;aBaEvSw8LM47
zY3gf7S+=~X)<c6g)n+FgL1mjYBYLhH<1o>pQrZL8X(_Fx_#{Ch7hZEBB~+3)yj9`k
zQ6QO(HMD0e>MWahqdW1-oWvVzJsf3jB=LxxbBZNidUWCr#nWu!mqrtBki<WBCEj2Y
zKS(-QG0SUkC;sM0Tk?il&$mqeB>skeB)(nA@->!+CSo_M0Eh4s1W5(F)>$eb+GKYF
z)`}w{<1~Dh?YKQ&qm@e1dK?(Wqjis~UgB{w7h|EJCh7w1vr8{qsEt5gfsVlUu%8#J
z;j*w44vm2}BYYMNTgDjO)9t75_jOup^Ygo;=efDJ*jRHFBbf|YuPgK!_y%j$Oo-MF
z^s?60duWS5a1AwP4^6(E7>!m!W0#CrdixIL=#f2_+<>^(j#gJ3MS{_4nSagTREFlu
zUt*Yjkxx~4&r0toQ9fHH{XRzjIYuo#too*UUKhO!ozJxReC`727xH<7(D|8sK6Dfb
zS3dQ0;N&xhjOzU6B*-|zc_s60`WG+edy9T*gKmiRc8*EvZ>Buobhx-rZP?YZPmK;I
zpBf#Ghjcji7Z)UUw8LEodA?ao_&kE7!won-uETW#EVIM1f?m~B;`>*X@0fR5j(-h$
zQx&PbhI*3LbGJikZ?@zcQ)TIOT}|#)fqi;A!M#6wy3e$MuKIRKM|2n2G|(p+47CFp
z|4nZx0IgXo#P^j?Q+~b;Ivz#9)dqSRciJGhKB-#T0Qv>NT}iu9Hs<K#Ry7)x9kiOY
zygj(y8UiqLtZZg5Ysf`rf~?Mop$4m~WcZZ%oLZ_`x9V5uFPwaaFn^TLIV0xBe<8YY
zJ^7cxziys*Ex2<C&q0z{4V|EK#dF!02}v8W<N8U-{AeGUc;nH1WWtCRhU0D=Feuw7
ziW<inj;9kX+BxPxH`Y1)1WD&OJ3X#*G(uB42X(k;;~tp4N^PAS<9uBij8u<9ha<Il
z2NR|yOfIElGPJ1SzY~dVBi6^TZikIK9b%&8t8N6AH70ba&c>QCcfg>jwk#|8RT!mt
z$C+oqm(@v>qZcHxUS6F*<u;Mg^p5$XCe11+DV{R@7Eu%%g5p-^2}X~tE6?^FM;{d~
zD}FNRDeY*~)I1`i5uG#nOKdY_;-u*%Q;MccDo*q?l7w_rN7K!Tl9-HQSpW?-S*bG~
z7mBJzW!Ht31D;4%J=uZ{UjIZItHa|_*tpIc>?B!YguLoX#?#$_1B19<hM0lBu@}|x
zyTcK)7bSGwl$^cgdmbUeDYSGeXru)X1+Nnuun#iU5xbuKzTts=CXV#sF>EK)ixNt~
zLp0;T!pS8!Nzb@=V#Qg(n)NE}Os4YExhaF&$%*RhN^iN44<}XT_=0KdZ?p=w$=VwD
zxAwOWZV8T(QxxmfSs+LI#GOzyX?*gq=?^D#q(9U-wmtHzq#_n=^wy&iH#l&RzJ|C<
zmfH+Mjf)mihn&1B%cF3H%&O(m;|eF&-RyK?u0H4)thL!iF3GXT#$Z>QS1N#-@MiTw
z17&yMf~r(>@YKqBzSo@<y{Om<CPz6eK@?LwbTE0TF!6&6y}?cERjZ^;XGX{Y%SPs8
zZb+ysDN79}1!sE^u6eVrfcC+_ToY6_uPogo8(~qrb4)8%N$*j&^`nXFO=xgHSz5(F
z(iYT;lCrePqSIJe-msUt7>k-%zWS6(3vRAlE+DE#JqIIPaRoO{%krb6`j!QX*bQn5
zj`684d5PBh5vs>j*so|?`3|2-lX@52v0nA@nR@Hf>UA2#Q$Vb0qQ9xtsOMFc(sJ0v
zVrk659?lnt51CS$`VCyBiIMuC6XR}T)acs*SF<fWk+qvN>ni-ct^aBKOCcffNAP!r
z#~1%H{I4Pj5dRYVB^IX?|4tkCJi?YTUu+{x{+8fRCrthp<KJlErTG79{d0)Fj5OpA
z3w0hv8uB+2zsJI-;jgyv$@qs^niKI4u>Knb-}<k||Dp9?gMXDxYc&4B7M_oPv4s!A
zf4NO-F#f*QFXkMpElxK6DjWB5{0~}xU;KZydFze8r;Xba|6m*UJp79-emDH*S$HP?
z$E`mDf422^#lO<xcgA03>8Imwu<$he+ihB@_~%%^4}Ynp<HdiY#rNRfZ0R&%0CJ|q
zZ^VBd$1>%w0l&}U*W+Jl@$2wEZSfWUd6vEyl5Di_D*XFx+*k2WwtmJh83wl8;tT_k
z<n0Xd{_-zK&{$$?&0J!%<sv`ft3yRy{Rdyw(#z@OhbCYcV+?w0YQ-n~ly2jv%Ln{)
zq<>d!J{jbvPoRHq6W{0J+b+J<;?ru>Mp1edXQ!){kTNIYmcdtc9>n`n{qDJscb~jx
zBHLA?B<4;Xk}kFZr%TLw$y8qnX%OG};;Umww!3dzP%x;PL$_Ax5|TfWc=t1aM!)m-
zDZhN(>r?r<4_ZAynEb}zf%1d1Gu~h<UYPa$ti<5w!H<y3Z&j<lJsj!&ebS+%aQVU8
z?Oc#LncEIhN9RtS!2gSS=9bLKrV>R%PbN18KISp`=?z}{v>4tDY;DddSu8>FC-a>T
z6!}X`y18UdqJGVm*VeaALN~g2(uCVIB~PgUeKTjwno=@l#&lpLv`AnnH_r%6FS)q4
znIWAuJew&pA?!rOpe&M6lK#4w#alOL3a1ejKPm?%L!VhWrA+xsPApSia4w3+IR%_e
zNt5QxoPc8f^obe0P|Uxm$4zrL<))TQ%DA<%0I@_9`|0cS-jc5(w<pT}fsU00y%89^
zu1D`%v2zpdE;dw8V2;i0U0Kjq!t|2oY6<gK=Jtk_(a1M3KZ|TglqF*PTu=N1uo`>4
zKHFf<L)^mK5Ohqh*P5oY&@;W+)5CL<C&2qO&N>)eIaM)3pO%=8R;pm<Vk~EZ{S^-J
ze65*k?9e*=qu7|~5B4ndRf~x?MbpUe6cJOX2eekJ)?sCRC1O;mWD${!fprxT$M7a~
zJ5^F!Rtl+X>V(rMOUk6NY~hv__}6S1sSgld*L`bn=Lg~7mJjx|MMcx-i9vU)5Jn^<
zDlbV1DZ!KrTLoLalBPD$KT+mw#dMayjfQN=Uzik3dL>n1R5OCL{ur)LaYVW$+!Qrm
z<C?10IuI~6p9Vj8J)115s=C9Gx8zdV%G{p$l|wV6nX&0b6q*V^W@SNoWv*9^){wqH
zx>Xi*uFUnR91Xb~$a$3oUB&Em&nN_(bjX~l0YVoPB6(Fi4H3emL?oX&Bs^}e5GJWK
zArk_^r3<2bgDB3dCp6QuWcVSYcl9w<p)Mx;b@>RTUOo<XPB^J-gPfQe5<p!ACHyOZ
zm(A%JnFYhr6v^%x&gUr_vORS`??`d_>vs};UGHgpCM)?-T{`fY2y*Z685*glAT5kX
zItZhnk$P&uCj7F~m;Qg;clG@dW9hqj>>8C^$6$dHTV+AESc+@Bx;#=mcu=o{rEio{
z)a>HU{xw1Azl76>3!<GH{bSw9W#f5`7j1>6i@X;hP+#J`=!gy&cy-_nD_=xfQLWc7
z^JpeIxEY|t@TTyaj1Ebh5KChedQ@t+{x+K6#_2S{BS>R|n=13Yqo%S0iw+OQ!Q~T6
zN48M8T!;bCIuKJcf;Dat(eGFT$Z9MpxV^Gm5OwEJpM+p$lPdGmD)U}6kavLCT>Ads
zXggu}t?g0y0J!8ejoRx>?X8m98!&^~dzBw`Es|NYj>Qz#*+7gbtf>^<5lTEvHRZDz
zP|HpM2D!v~fAl)lvJGjYroub>M#(nG@TU8buqILQ(dqPjNXAGFgOp6J6O)--l?*Uu
zF#mtxdoaq8Uo|0*Hg_mQ&fNAPY(;hC%<cBsV4t3k1TO2r;P}pq*q&q_FF}tp+fy3u
zj{2Y0%rs{h6uTmke#xH1(m;ozMPGS1Fnq|95lH5!c4Dd4Ruw%$9aV%OF~7F)YT;=D
zM}8&j+lMn9_H7Y5vO3{6bix_Z3RscufjpJ=3l^rUG5IJ_?_0>y?vXxnM$Q`6-3<wl
z)%S?^rLoo`Dbhw2Xe+ZnXww?_>tm#KmQ8Cta#KmG-7t7hNpae3Ev7geLXzSln_^yE
zie@~wX|DUFG>11&^O0#Srn%mx+0Lf<exkdSacQ1k{0rsW1uGd>&Xte0m}VacNjV>d
zx0IS4f9y1$`K2@`HBWP9%jJCDrg^4KGn8<2Ic2VtK|qW5&zN<L()JK>KRqanaFP{$
zWnn~3yxLt(M8ygJ=~7KY7gcbo+IFXNp+`)$vaKof<Y)%m{VAB&nQ2BW9;8V(e$15#
z`~BE%90{aqLqSa|q*JLIrZOPG$mVrcd&!sUM!sisx=rdln{K@)R`7K5eTvLCKHbYo
zVug=OchF~8E8X?a!;!L|P`xW_^aMIJ%gM5Z9A7xD8Sp89BtZ^Uc6|2wlalm>N(AfD
z7e>ZqFWUc5<964}E3W*-ecq>XtCUZKc9p}MF!1!35w=>=)#grd)$+Pcx06kGR|GCw
zOs448Al=BB`|LQ@WS@=pxzj%D>~p_;Znn>Q{nX<g+#-8&WpkT6C7s}+#LiH@YPFb-
zvmKR!L_#-Q$Jz?qk(0aK&OG#GnTRBt3fHAF`cw@N&|erD$35%&(@;<0y3qo?Mxak<
zXle|4qd@P`&@>IbQE(><RL<>=dp11=ohi`kG_-RJI!B;l3u4@}U1QKvfnK1Y88PS*
zfu5+LnK9@xfhK8aw;1#hf&PmbbKJA%#h_0M^b-y38H278=z0z9t)bJT6sraLf`<0h
z&^ZFF5-3tT=w7a&`vtmLpbIrLTSKp5gsa*q&?y=^Kts0)R0)&~HYg0%&}>GDsz!k#
zP6IkjLthoBZw}D2H8fvCd-GvcbrvYhFSw&M^hJSo6DUFgpx0>VFnU{6UxEHZL$3#l
zta=9Pq)Duo0<52!pHm+*p?J!K=_M?jr{6MZ^xT<~^5%GejhJ+cM?Ytj=x6_l6ZNwo
zaFc!x4@}d~0aIq{=a7kbh{yS4{oa4Nd0t%%0|fk<8F+Z+-Zs<V_a0b0<2J<C1Pgpr
z^Y^~-;R86z9EAv-xzRTrKWD~_X;BE_IV{%YJy)*GalH#2_q)Wy=FW{&RL!!{)Lc@B
z(L#R4Z8IknPeOtom{t-MAmkI?=H}vIlV;5tO?{=@T%7moz=Ub-ZY~~#WPp1+1nL+=
zg^E<{ERh$?&5>e8|Ax)a@$>~Y+QK*Rl!embbFw{6H)VUgH)neqCuV!<acPq{5{~PP
zOT{glknLH8ThbxdGy1q(&l22Z+)7+N?(&Yg$oF$SY54bDo2^|>-XG_EC(ms-^GC6^
zrJ0QY-#~IJjW3yP=lO{I4Dd8W4%uhc9XZ^58HwD)^D4NU2lX@A^Ra%m@|<_4z*9W4
zcy8eU{ImMm+Vg{kxABaaC*f^959w#B=NtWO=V|ZhI65~lt7OJ)wz4D(XL&kz9qMV7
zt7|k#XVvFP@C~NU5YZG&npPyD6)NOtti*UMUA#n3+Nept4ou=;`^0D=6Fq0^3QQRQ
zym-dkV<vNvuG5quvvQ|RnotayuCQk5bgVv4q)Z88Bx5<c1-!WvW|cTplj5`0!JvC3
z?L?1`oXAo78G+)P^}fm&-F~fv!sr=>26NB<iiT-dUw>DD2k9Qs+EBfE+NA%Fnd_<R
zJ=v)angrIl#k`s77_ITWxie<kO8(y##niZO$n=R*iYMJng(Y%iSvs^YXUg;m#dEKo
z`3qGvY*JCInv+LOxn;5tky~$k9^ch7Clya9nNcic2kUPnrO-{)=V`g|;^-hIbkn&;
ze`l@j5Tf%(Vn>zR_8Ra1IDgmbZ#Tu#Jw~a2mTH0wU_MXks7cc%h}d%0<S8?y<T4(m
zwD2j)xYfXzgjS5T3}L@hM05$B#0sKG^yoOkcAEs~zfyinBasx_1wGyc^8LpCdfN9?
z`|QZGE5Y0E>K`2gA3r<iXUD*mXXSV@z^UUYe~F&s^K1@>OrI?VFs`1NS6nPpk4Mr=
zIYzMLZ9rLnu#PULP?f)pHlO;1pE~=#%|3VV{O|MM$;rQrgz~NG>`PiHEeA=qektpo
z(uMJLzskNZvCrS|{J)s@t7lItF2bUT&by=)%X?gqWa}66etBtp-Y47l0rq(n&;LH}
zCph(P`%VAiTWrUX^iqx$ESdX-5;WO-I{l{GB2yl(eYWBGe=+|#6P#Jj=3ml_<-b|5
zWbPO8|5uw&C;$8H`$qfR!t=k+f3$OxL5BKCb9C+{tytfQ3zBU8Le4#&Id{ePot5^z
z)IRU#`QPWgv(tC94V_^#ZoYNWL{s^aUdl0pC3inxguZ3*`JZUtv+Z*r&;Q%`H++}L
zzogeJ|E^%k-OuO0(dN_XI~j{@dF-<l&;LIE=}!HRm{Bt1wwc_VCnLV3mC|C6<m%`1
zz1qpA&G;VsUS*$e@%-=e9qkxb2THCk8b0Z^8O3u=-X*<Qy*Ce*-2Ht1XO_qJo5$_@
z9Q$0r^S{r3bWkju&ZZ>1nbYk(l3r}gX%;M*`}yp9dfpwM|7+}fU;Dg*=YOC7=$JEL
z%B-0aN^YL4D__!zjX7~alC59JIedZ5qtoZR-ebzrVBtUUl)S$P^W?1c{`Y*&Nlu@)
z^VJB<g~fOsNi*eVP$ZA%X};xH{En8VqehQxa23R?{xQa<Ck{sn*m*3HB@ukBm<AP9
zj*v+0``6*vHpENB5oz10KOEN5wy)U441a?pLenji^Uz}0qOM}Nsu;fCvEG!oB$kqx
z(|;e)f@sa>Y5V3_;YZ);O$}2BPce3m^(KyeB#5!|)u?2s(lL@RF?O!=b&lj~usdJF
zNI|a866RTbdC+8Tpkyv&%rph7wOq;M)0W?rD=c;E^6PY@{L+f5{BbEiRH8!ImvlOm
z-zM=@*j;`@*HaNIZPSXGLbtlmsn-W-A=N|ZE^*UMA&%7RrvI3%2jl1-t6raQr6lz_
zH*j>lPSUWW>vgB(tDDZ3)N40bHue5v<g1>fqvc(x^JVMxUYogZ4!G-8@0mz{YINnM
zX+<6CFlzH?r`-FP6ICCfzsyZPV$1z^EQX2n_5mRs?N3^NK{PGpzHDQ~W%yF3a)UMf
z+OWB^@KXQc-_h!N^Jn47C1ZOeus`Hq+z714k+((f|9Vy~p*#5LA-h2(R}L<@DRis6
zw&m5o_%1LxE$3hSltfAJBok$yh7IvAM#I_@x&maiku9sx-T1^*`$mzOA3*YFzLu4+
zTWaj@DBUX*AatYPi*fSM7>(b!B2#K(oyKo;YWr-#zf16YYOID81BB{>8mj@UiLgQ{
zL9nhDtTq~}enpztl%KA#<aUJ&soC9Zl&FgZYd;yTEUa7ch_vruja3KM)69+PHNi>~
zthY3lS|KL7)#(~bfprZtkov7)9bl_A^oYjVzha(XiGIKN2KP%}nIc#l!3qcTZ3BX`
zOQY<AP-o@>HBeAi2+F7xJ7wnzJ;lwndD}WvjNi_k8Q5>z7!><$|K!%dVBSWKf7j;i
z;nUx&?>VSmQ7<&hHO*>h$^ufIFEockGulN*(<3VLs@ElwS@kulEtOoap%q^~<wZKx
z6^bnE(I*X%%d-uTte&EA7z@N+^LfFYi^8&VSdvl}PA+K|J|2bW_tE!d8zN16@1W(w
z$?8_(h&>H`|A~5Z6T91;md+(lQ$INz!Q6~k4*H-<`lMQk2pbIwRicqToCi{#K}w4u
zEd(iik;>ONa~6Vgnj1&5q-E^k_G*~mU{Y2UP!tG9zqx6Z&gUS#a+QpgqdBl)dgV@O
zg!K<oVO@z9t*}|dk+J5wf1Bz#_3P+2C+CQ2lzb{ho01YRm~8e>v<`?2=0uYV?$5zs
zo_ZCbHTzNWeww_m<elxT?s-kwMm>YL?4EN+S>wS$2^pBT8|z6aRr5jfuT2SVFIx0v
z#Lrclsey?HH)eD8c91XF4c*llKDN-jne4-0NAe<VAIRG20*cKSPgyu|-buM{NqeJx
z@{X<}|4SH2_ht?p8mJQ`p{|%aUeJzN<t32HYSV@Wz8|X|`+{5^p%JZ}F6>ERTcB4_
z*^%^F?F!U93EoR^_;xY)oDlF+2cn(hQ-!GIh9>|`bVIucbSTh-1i7#<(rNOaP(r?}
z=!aTQMu`}{Izmyy=LW^%;qJxS=1~VWY&ZqXp^yv;nd=Lu7AP<27N~>!$d^9<R`i2M
zy&Y)9U81Pqt1)zvnq~RwpFFRTb}wK*XwiBP`3#O;?@dZyk77sGgJq%!?SE>+V9w29
zCUX8)(S4zUF|Q;LC9-&tpx_HGUGJ6HyHI&bdc0OsLKFS*yCr<#sbWs4*N!mfVSN=#
z@6vJ5N*JtOCUl(iK~az<ALz*QS%?BvWh0)7<?>ol-o$UPT>J;KV~xHf3gv=9SJV5;
z7t+_H`HwS^xPy^VqPz}#EIMgAfD9n0!4Rk@uNQhx$nQ`LliZq%ruu8TAhi|c`*d3J
zi%L>{<)DOo6ER;E@27<i^IfCKOmJM-4HEVRVL?M+xnOk9_vV=QinKvxwZ5T&Co9V(
z9Y{*z`BPI>Cn9Q_$I0qDF$JM(KwTmqgZ9#nsTsywG1C{z^hvpu<<bt7%XJ<5D%xlz
zD$@AA&|=Yr*mI4HV{92#S*~=J%LO}HqU~Ri>+ZTl`(43f)LIGXsEZ@<Xt#1fh%A@3
zDunQtBn{!f16VQA)eKE(yL>h8bE1ColQsY$YS`KsKzgRiprx*rF;nj5sSrb=JBxlu
zQg7?7{t{8cSa265bxb7CNJV9h>9ab?3${PI3C%KShCZNIWAi*AaEg3gSd=FQpO`jG
zI?AUC7?VQs(H8aNTN9kbqi`PJy9))u5i=70wHM2G*}o)3KHC0#v}n(hsPr1XuUpLL
zc|sgizSWuXtqw8YYRA`?-iJ!L6sbm?M#Y4C>W}uUMf#&Xjzf#XIFJ8<rpxiNOy&hs
zuKdp^*9$*VmFC+m(3K_D;Inp?^x|PY=2J~YiG91frA=fIFd9*R*~l2uMyyiQsAp+w
ztSZUjhoVK7QAMf29G|KXrMG%;@QYnAbo9B83M$l%&r>nW$Dpw+w28KLcyKvB!Le)f
zCFKOGdVG(l5fx5;_yK3CU>BVbh0Z~QXQb0K>H^yia1D?SF|J0ZiYJL9sFO)gX3~az
zGF2FknlV7@JH*+st9K>RSji-lGlX{HGS?=x<XRWuA2eb3XqZ7E{Fo-Jjo7tF_o@eD
znHRcT<TdX~hw>lCxhRhWQxaYQn<JF_$0*x13OX8bd0yF!wz_|$L)qib^9z>p8J6<b
zOcvZ%B{u$A%yUz7y6+XXNH=M@$?>2*MuXwEzd(01_-5UPu9y_{H=`Z8^V~IYou&J2
zZ$tNz7~KNqzFlJEqn@4^HzcPQUnsq?)~F8e;VUbciZZX4z1A@+rfDWFvK<VuXN0XJ
zu9;!RTgOCx#s|#h>9fvq(D_1A^IM2gAyHB=ez)!4X2xR*p&yYQ`TpvI+&$o5dnFf1
zGpqXbH(5(UXUJDMgs*awS_WUhh}f|}f0SYv!z*V#JL{RYM*Z3Z%MB@9k4W((Fdgf>
zLS9J806NavDH)@`S6d1GwcE3{U=mr1uP$OhyY_~fqJF8_fpnq5#Izmw7Gj64;~NRS
zU-nbmg;)3&-^sXG_ET&BJy}2_naismVo&tp9M2rwV%+a=t8rU#|HLIcf}8;NI*uA!
z*vG&4X(6%U`?8-}`S1A;eyFqp^Bpi6tn1HnEbca3DX#25CzJG|17RA8H4yQx@-KeD
zJRac@`XfJNy{N2jLg2*Ge$Sws#-Z9?JBl!csD^W{DRjSJaMp+mm-NyG|BwH{FB~8-
z)q_|Z(Z$|M7Yj|a&=Igj8X779I>JJq&ZH0<n|5{0d<-)GlnA|S(3_`9P~&GN=vxWu
zY=iE)KnLx;T*u-Fp+^q2>csEq=8n}tg1(d>-98H#k@RFD+3a_s%}{4Sdeg?gGsQx`
zk!=3KLQiCApff*Ap!Zqmvra+B01Yn?qSMgL)`&L?=vD#sZ}0Jp%BOUD1aysn{@Kxj
z#tSIVWbR*NE_|u+Un(<W592>g;HMe?uf^Y~Xk9{r+VBltJqgsRZ%n^~ch+Ny(sxU#
zio!Zk9L}qkfjsnR?E9~m@Bi~$*i<-i`=O#irv`DDB7a4b^S#2=bJZG4oYpLB4lfLh
z3Qu5Imr?n1IdPU($8mD?+q1R3(?M9-l8}u$L{%34px)`GuV4_fRX-r031?y~g#n=G
z^(4l2we~x*-ysgP5>Rv!sVBeCT*v3Znh^aJ$@5t}Wq5w(QwGs5SU2e9S=q+A3U6km
zOs;A_Ct#)~Ic1X31bBLWvq4Dmp!$%Uj5lQ))2;nik#~r-F!dx<q|zSvU98e1M2&=5
z<7s9;0n8zL+AM(8xBDG21U{|7%zcf!WVjdgM04kW9=8-)!7>1SD8mo~srn8w!JV8I
zKZD$2E%X#!3K^=fbRg#4y<!2QGoCcD70yLUXzx1n2h23OgF6Z*KlGI3_M(Xur&BYK
zWoTldv~Zw*@p0551CRfn@n*C+|FIlTHEs*;0PaUz%HuhnZnz=1nYjCK1D;?s!mYq>
zN1Y&_pfl?D4Yhg1b}$8dHP~<C-ot$+F=f;#CZ03u`~g3sPPKVF&m**vAJ{r<sBd7L
zaE6_BMabs#!1G~PT13L1k#U6by$!F%>jUOhI5*zP&D$<6Wq<N5`sn8MKc1Skg{AxD
zHHSsREi};}d<Me&ID{@1A=e=6o$TA$r<w{?W8%;nHW)fxV|4n&A$(vF4pBE`Q{Bp^
zDG7(oyOZrb_Vq23@4wmCHRkm#`?}V=zGPl0V|n%5WHr+!@rVWIa}R(oR@9L;c&<CR
ze8=sq@QB>YhF%w?sa|E8lq?Q5AoZfna$oztia|%hyV>_g?0aYXUTyJxyt69vFa8IO
z$rT`HM&4#Q)!4~@&n5s^2K+spV-j^L?lAuLPv&?|!S%;Y#8u)};~bo7{Dl_ZfxQpx
zOWgN3FJUL)`r@c-YQg`ue2v;%hXIK6s3|m^^v(M&WJ6p$7^|%_)|&<$8b$ex`;+5P
zJQk%}6lHHW+c_?cL;R%L(2B_Xpz{N*<Ks|XwJ5?Pfue@7ypbGki$<|Ucq0aQOPAq~
zF~AxPcr*rJbqkFpQGl3frL6~<#KOh4F7mNL7c2QWHgvQrG}=v4ZQvy)P%SfU9>&~M
zqY9c#V;x;|e;d`=1hOjR<Zh#yVZxkoJbX&1{|=cfWI&RyS$$V$zhqVVu>>@kg9tTb
zKD(>fxz^{a7%;`iDhonx$4o2f$g@q!S^OrKoD=TZYj=2|Ym7)UW5j9%N`y?pny`P(
zb-wWRjz{a}k9s;fmNS!7lTAc;HKioG=#Vtn>|}Mq+h`cqlt%O3B~<>t&Z5qHnnztM
zdEc!zeFU^d^6l6R`uRM!vU#5E%5w*k=O#on<T;jAC(l>O{Bt-i&#5NQPHv|#?zpo0
z>GoJwJ8&0}44AuBS65b>*KJv22md{bC_45l2Cd*4=FIYOJQ5Na+sq#fyvLK=Y8}u3
zZXWI-+*7z!xR-Igc84AW$yKsMQ?k=d$?lK>t)(@7?RX}O=Pe+=a>~lJsfCmO12MZm
zp?xw~9!vXpN_G3tK(x>8Zyt^ah>}_T_HdWbmw%6yI}tnm2XwhJKa4fe(dF)Vdog9s
zdPbLd1djxUF8gN+?@fLRa1m}QZZWPB_YkgG-|J{f+nXEeoW3Wejc-ta=mvcc0<l77
ziRfo1-Om*75k?AE!CJct){%XHkS^HJ4`Kx~{9at&D{DN?f6rYMh4OWIR+sMr9xarw
z)o+0h#f`#E!v$~)aQEP7)iQ{<TJ<<n&S40yDCZPuy0<CSjZPb44c@f#2t1f62oID-
zT?egLc`u=EF|?4Z{`>}oh?=LT5l?<E)`-V>)O$*o^;a@-#J)2&v|yWjut;*J?N%7Q
z^cbUuP2B;RU1N+M5=pu1GQEOT*nrH=!f%D1ph#}!u!T77CC;Nns$k_8o-sA~XH)3-
z8Q7}#8isuvqn|lWbOL02YBwikIpV{y3LAPV>q(#Hfz#PnVYu4lW&OjQTI5citPNzv
zS+=ojREGYc=H)-EDBP)e`8`srzUQK~TDV8};*NcVm)|K2crGk5mT<Y^Ri$^8VcB0U
zGGTa9H>W@Tt9VWyV-lFcSC6t-;D}*pxsI{V9izLB@gVy{K@V$ru2Tr4eU`URUGkdD
zc@isp)1pKAEEU%zd?;C|+Amr8u(I%5^}5bVNqg1;-%=e0pR<U2Y-O+@c#iQRd}<u%
z0YI4imYT7)zMaowvY#p-8M8b%8zx(-A%&+b56b9GvOK8g<fC38IQz_4ypS7y)LZY;
zzo^LBu8Ncp^=k%ro(_M%Uo9qW*lX%On)G~~^nO)ACzaGXNouh89M92QzSyNI+jta@
z-~Kk*S9tt$4Uc~rd6=4hEFNEaF19orR$tC)m@}aiL3sUfFGv?Kygp{4UA+EbxD?In
zk6}zhCUDXpay&2M-o`21AzZsvIi53cm*NU>x8hEIKF2c!w*bH8_3sr@R>C069n>Zh
z+rbp<`@mj_tHN!Qn8NE95zpcEAI1-_zs5Ws=Mj37pH0}S)Xmx?kI*tk2G?MdZU&pZ
zd!_y35N`ny3nRit(^;imLZb}`?$3eb7>KL_9(hH&r^Y+aK!x?cD+WE@KsCR=j7n8S
zv9O;gGl@xz{1|k<fvWME?bW2;Hz0Se3=7}jhrxHU^@7EM$(L_H$9&kr;Pj)gG6SPP
zQ4o5$l9OP*56hUr{8TCT^)0{*3*SIgeJ6@d<RXKq-q5_6PWMy`GQ7M7rCLzAX7x1a
zM_P(x)myQm{u7X9@@4fF$K*c+02bn2dd2Bfq_{8f|A1@zNBSEs3pWn;Yn+3#7{A}*
zJFrKA{Ta6r_X#e9Yr;ttXeQsO(rZix0R}w|Y(NwSv;WBISo=reaOI^jczP5rY`yLS
zH^o8^(mhSG#JVa5|J=aU*jSxzjiSQCJGogC1HKgnu80BGh!q;s7xeCgDdE~EG(5+o
z9*jYXEF?|$1uuOe%t<<_8SFw!_t2nh15z8J&51yXwp;_#VG<0VEcO5a4K@6Gd+|RU
z4R!{+@Y$gSwK9^+I8(Hand<^JALGAE_39SEkRcGZSY#cP(DL(I4`nQ+EZk34wPjb#
z85T}H_s`BOR-5-Nb*vx{`?ByR|6&hKQr6hff6s0_^r_G3A7fvH7sI{sr(bpt90Tt;
z;OlT@ic#v%<gkYkgZ>S#R^~W`^m-h3B|Urbv%o^v@g6?|g@yrg4ONye>b<-9R24b{
zL@AXSs`R`nmpBN>jsO}a1E4Ov`P?;385k`pokN2@vLG1&>h%cF5LzEalZFRM!#9Lp
z0IEeLQpq<^TaMUYF-NimGWRTD2lmSheQ=Mo+J0dcQqm(4xjW=rr`ad3A*#%(m8^ke
zp6h`+LHHY?tWT=G5Kp;L-6u>4xnL2v?zonTHL9+b*gkqx_!}BNp>+PYo)WzR2*)TQ
zL2JVbpnS*tWVPsJhr@8PMvtsRTw}US(Yj8YOJu7szMZ(6JH|~<zL35q^ZOIqO<5-B
z<PC>lJFMjq>NUSbm5WtnsliUGqcv#008Fy@7w@E!i+VJAO4_m}O)R-J^o?!{`3Tqb
zCWbn0=ix}8HTO7pLgRF+>!1M=)QG}{4oc8ELew#Q3g*VtA2c5mCz5>?Q2vSmmhB3y
zj-@hMNF{$BP38Mo&_oG3@L4n!$!si@KD&ima-||Ui=`31T2RL~h^@5`)J}@wLN17A
zCESfnOZRxFhY)v>Yf=#+#RvwsFFK&b$ek7)&~oH{MP>7~iMu6vhr(B)v?pCLh)9?A
zs4P6BmUh(Qgfqo%g~*HBdaATq%i=w7i2fK<%>v-`iOF3lG_=$@*fGi1PdugD&X&#6
zf5Lbka>k|oUb(j|A|}wVGJ{nh`_BC5>47C4#~y+c?!4=8tQX3kTjo3yG1t_#v4z61
zWX^5Tt6`WZ63hH@Shx(qv*zofa_6(4Bz>;!%h5h3n{`U<V#MX?@TE$Xk_Ybfjh4P6
zF$A%Jy=5tNDc?u<8%iCK!C3a+TjELYxQVexc+zf$Cw=ZMDalbhspL3Ka=auad}i$_
zJNhD;#>H`<|EA(J2bxWd!81Ni-p+p|$8!m83~n-RF75%`pKzOSU*PWhOOEFw+;{jb
z2P%gx9S-z6{7^dpH3w6$Tj5T?b;DhT(;R3axDE$;4}Lh%XUs!*+K>pKYgu}Q?uPqw
z4d!hP-+2q-cO9&`O^R1kHitWSmU}Zpg~BcZi2?>#z^-p#H$M$Mws+sbjRX9@1NGc!
z2n=LgNLn-mwlgl|AT=iBcYV`5&K?`0#xPkgf&5krki6-(0k+n{N}cRJ*Br3i70Z-J
zbDQoG6<ZX!6fs~6S}iG#J63?Sv*em_M4=X@vv;0_sU7f+61$57SPsV|fHn?bu?1*u
z6Ef;+8%5Dfn%9)wfjD0C_W<Av4$|HazGmErS93f!;R3k(aDT$Ri~9%8!8wS(%;Gz+
zRNha;U4+ZU72s~g*#fZ-YU)W?0Sj|LgJU3?-xJr8=eff^ix1OmfT^!t-|X!c7q5X2
z+a^ONh>s`ZxP+-u%#Biova*lm)9D2-$DpM)^G_ZP(%h!Wgj2@w9q|PWPj%kscs+q6
zU2N$I;ZetcUuNN2CrS{{5rF!;Y2a`dv*V>^7=BZ4Y^hgFAQp-;$6Z^a{y^BlohMfR
zu+xr>!Z@;($#kqO<Q1=p4UKg&&L4la%s+bbagYf8@M?=E!ql9kw;%(3wPLtYNRWL_
zkt^k|aAX;1bE3Car>B}^k2>XJ8H0uElKJ0m>&+!q8D7W3R7j#v@RVWpL}akxe}2Xk
z#wZ&npStdKhSHyr9z`WVB>4j44He~<Rei=yok)Sqx_`eTw`c`XnIFzu8><8@w|Jd-
zB~ETpN`rqkzVWeW33?GlIG_)(4k$VQ6|&UuH=n_>|IGYw?e+98m(1esDk;=a^8<O8
zeaYrB3xpsduLF+E%O#=c#D}lvhbed%(f>-;MpWf^uE&+)mf@bpt;W^j_Taw5ef&Dx
zMeEr1;c4fG-}03?^Med9P;2AD6zr41z8H5kZZb~K54RA{nIHaypZQ^ndA!Ucw4ERN
z08%@;Z)gj{wQG_{Hj_lo-*rE+IM10O-M2T}CkhLphwS@q`z{lWR0NZR4xeq`Wkru_
z0xNptexVy3Dzf|7^RH~53azVJ#O-aN>LW%=jd!|*=siY+q`PrCptTbqyN&LEdNTz3
zWI+-a@QD*3JCN=eTC5?Bs^M6RAvAsOw9GV}(9<>=)0%!?X5T5Fjj-qd9kZ0e>PUN%
zdpm`k<e)N#z`K|d<y)Xy;gs<T2eOxOLZ@LT8lU=`13AgTdE1HQ1EMFAuV~n~iKGSq
z6UmiyltXVA_b~qFac|)MhWiKZFs_pg7re7^A=kUWa&Y5ub8rvfR^#5rNwZV>y{0ke
zlc0s{HjrCmkX;6%7YrsA3p?o^Ufn(V$1p`y5$z!7#NcuG9V}drvAVKkqsyi)`;6|E
z-R}xw$I%`1t}BSWM|Y4cq8)<lLb`(<hy}3=%McOYS;DiOis>d<3*Ta2DXc+1R#yr4
zvzY2J+v4Hw0#WmrNi?ahdY<t)`;zT+=nXbhkF1?*$ehS0<l*t`%a!}M$UK;-Y5-(+
zqgu54JjUQOI|id4DS8%WBU5i`kEV9%I(N{6ci{Hmns9C3WK$Zq=@_nC3-Bv|jmAyI
zmEzvOJ&cois3|1(>bb@ruNi+fpj2kU+etI$H8S+<8sGF-=m-Vkm61okersOk`-9dO
z=1mU~c@4Ys8Z^#U3)R{PQRr(Hs+AI=(5Ea^>n22@6$YwPVV-9C+<RM{&^DXT=KIg9
zvu#=^p?i|k-^%f5oDq`!$vVH`9GT$46yDi4YE*xL-4Q%zGGkM@?k_Ucn@wde>whe{
z>B>;us}4tY=}l!v3PsNL<?40T9^obSR21&h?8JUasN>twgbMe|%)aRqVJGDJAg#YB
z>_SguTlp(ya;`*geK^b6Hg-8%6rNR?w@=ovo3=`(_Qm**`-kb3Y(XU#6%zgj9lpm2
zSL%*aCA<W|8%sbWCme2T2(#|pubGh)yY5}eoiVcRb)f1_08U*@K9LeYe;q>{_V(Gf
zmr@*NCtGIux$Mq_zp(s?S!;4y15PGity?YHz<DZ}&O+B9^;A-ynqmtsIO3w3Q~tHb
z6}_I~QAf7HtO$1`qC>hAEQBnqv5yze|3E%UjL)k1UR#v^f#eH9@_)qtKveTT)v;DH
z{LhYG<bQ~w`5$_U=6}$7`DOkG^}IO#=OroB|D6BX$Cwhw|Fl~Or;$lhp_t{r=Vm;@
z|B$tT>lp!Xb8t&=kGR|)@mJ%vZ^-d<u3@yn{|0{HfzI(Smf520K$?H?*Yp6$|7ad<
z0rPe;kI+vV1(|079*6IF$slYqkH7E;?cj&c$nrE>VH;fIPKp_KuBz3an#K8pWi1@O
z=VANq@ICj~cYQ`iPeB0-iRXNN<=_=KbM|lxIf|Qc7$4bMkuf{U=5%plH0NeSp@IGd
z7uqaFhz5`V%bZYjH#cKf*goNAuFp(+EK-u0E{+&!O3p6m^8DVRaZDbk+dD9F*JpMX
z0$s&v0@ED=6CDC@KJPl5&(#*F{@|eXb08Nwd`@=<a;gJ4(Sf|<#7Y68IiD|S+BnW<
z0|2J4OX*Mz8;!dU|FgK)Ty7Koy*LNw-}t|@_zo<U_p@<1xbe98xMy&-YAxq8j|45m
zaz0ZnMDJ1P%GCQgra|I3nQRBMx1Gg9=f|iu=VXp^1vTSj8u>PC9{kNXna^B7%{ZA2
zv7nYXnb0$_@V(uR?kXbR(0s{!oAfbRoR)ja04IKw@p&em@sTq!Isu3AIiGM8vJB%h
z$%bmiC!>bE>OVUts%Go!dOEAKVW8L7Yfd<7LOc})J%7a>M^Cu<gxEKn$IKxU-Wp`D
zaSQSxCpw~Cv)*oHr?}@CRAh>Cpz0Al%GlNS59A4oYA<uU%x<T?Zf3W~{w%BSy|?Mr
zx0T;3XMXz>o7*kSZ>@fIerv`0pOoG6+uqw+oZs$*{8Wb+?Rw1l4U${mIck2}E4<}V
z>-)1HD)U?FrdT8B`E3{4E=R5J_s(~%?~fyj%x~Xws7L0vg@2Oyjm-bt`u>h#d=9Sl
z{d23NQ2)jJrnQX=7<2Uc{ttMV-ySDx=WoUm8tz8iY}``op5*x|t`^tuE;w6qJUj8*
z_5BJyWoLaq&QLo5H3w6$e*pV<V)ns}#_9FF$OW8vE{vavP}YDvzU3{{9)E0}%SHFb
zHP5v&^W05Z7GGiKxl_TBua|jlXS*fa7!z3_gj!oDvz-h2y`63p>|R9UePJQ-bDqqv
zLQ_5K;GvdoAQKqBbxdb|b<cvXq?XtS?zzwvJjDri&4{jGN3h_Y7hS>KZS13FM;A_t
z#c6Sl6y0Z2e(GCFdTcqsQmXXmIr3bGfFoESE2`Y7t)Qi<Zg$Y-IuJQCp;Nxaf%qLr
zp#xdu#L5Mt=g3p=#LbaM=q${U<LPFj$)LE`@c#|>59@y5>ED{;ISuFF^unKG@g3M`
zU;*4ixV5;?aEajPY7yyxt5RPfSqtCohRbOk-C>HI!Yqkl#?6;A9n8TF<_!*{71M#P
z8rjIUskmlPS2nu45MuMF3!#k*AvT-35JJo}P7<*>)rGJ*hR}Rwbzwad!)j@M_1Y4J
ze{p_oxtDEZc_}p#6D*u=Yt0H4lAHvb`Ss5LqVwxNY;--O>-p6sS76O$j>q4M0+F+*
zG-irdbh9hUB96@!tz({emLW%9yQb$d6R+3N@kZO-U=xq^)2(sw*qY=9HdbaF*2z~N
zJY%Mm;=egl%2X}^bk?>k@#<nrJf>{D@bqER1(I?Cvq8Pb5;D5joC_5>+F7~Y%rYnb
zL1vkljvY3gwV?x<#I{6J6gBZ$_3wJlq2jA~UHA`mgh@O~_kB&5bt?)sGJCCmPUva{
zYh4#^x~ISAl*G{eS3KS4+;q<YS2%{>Te?$@rfV#O+!-ZmZAcU8`gp>_-GuM5gojze
zX_~N@an^R?#kMv2t%Z|6Xn}5iJl+4m)kG`eQ%kquB~uYqzt<If6x}|5cPask_G$Ue
z3}4^fp4N+1^#kq{E+?i`$^ABkG0_xKV|KZ9-hUfSBUUHpG5ESDKZ@#WH17{t%B7Za
z)5@0f{&fp<Q{(COchmjG((PvHu8gPaoF^8IHB;$%+nvhM3QkSxpA7YKMS|^mU%9*V
zFp$w-P+MRorRxo})T6rnT7O9{-ax5VWFG8gsQ$Tn`@K{y6Gpm&O6jdnneS|4H0{Zv
z#S|RgfIT84RdW4sXZfP))Ji_-Xr*n{$?sQLY`shJn_vda#=X&_a?bSC73kvWZ#wd%
zNvrSsPC023`7B@Iv*c;i1Q6@^*AC{wSvjD+n5iwA=9R<~^i6M?Gz)Z^`YUF<8fj88
z=P%BTFc5IDrJN#@>9MSlQ)J!nFfEoqX88xkHQ;Z(gWVQfUt9rhDsB<Z!Fe7(=lexw
zAqE`E6f%pm@NnO5Z}Z48k9-~>k<4p7E!nHFdRj8AX+15GqKAYzB$x06{<q~8oOz7e
zp@*Wtpupq|dg!hwY!^bR29fO&^d~w+NQfI6pSgnWmmobqYVwhp-bhbk>=kgIXbcCO
zLEjCD=9nQwx*Nn?3|80QSD4Q5uN`t^WN_<!Y8d+cA+1kHH)ulPr>N{Q_Leu4eYvnQ
zeN<)o@;P#(eoedQIdU6Jzt;?tpCG3St(OVVl=Lkr)&0yrp%-JoH3IxdfDgxjYXvCh
zTtat6fx1p!1jccUxT4hyY<xVdH+9GHX`9(#N0Xsb=)K`y&7qeI^kiEB+cD7duIfOl
z98i^ENO9MtxkFXUAh{o<sABjL(N)}Ogt)PziaVu~$x+42;4E1@?4pC+`eBaecHBzb
zm$)t;<#>AIhU0F+-Hu!PagHbT6An(}w~L3Hg_KoauG3w1`PsyFFa`T>VAtW=5<3^C
z7Z2IsI*W%}@v~}p$~>m=2(93UBF+9I4O5NZwRG?#=);O<V?3V<>a>!EG?mr?adqec
zi5Ng;J)4$4QabN+F+Pznze}*j|Mthh^ySN5a?rn|HbWv8k^pQxppzNWd~2XFINK+2
zGbF0VGhc?3^w(lBS4qrsB_WA8RU&qkx4cGn9%Fs~Wq6iQk_kZ5Bo^?91RT(PxiK;`
zHG=Vx8uhgRKWYX%S9(^p0BOci+_fF;^ZvENO^3gZ88h^RpwNdJi^}d0C7Pe_?h0kU
zkd_Nc6#rWgc2~^15<JwQ=wH(;_>U5-H7{&6OD)Zk3SJvu!J<<bN`j6A)TrOdQFg6)
zp)1(b?X2c?J4_<IC*P99DUvwV`pb&d)bj!q1xzYDT77i_e8>P9tT-MnpT~DHn3M{X
z`m0gBsN-;nt|(CjEPavhX_CwvM5yOpPOj&KIm<i3eGURsWi+%<3cjZr)`EL!p`r74
z=!^?@XFXHW-h#T(Qsc1LqSNV4IIJt*rKI{M9VBXZiEq=*XO;7P7)g-fvo8GF@^9*U
z(vD6hOF<KUA_rDbCa_jdkQ>9gnYqhNbJsCxKINvl&(iz`u1aXW^7zp-%~XH>PA8Kw
z9%bb}os3@PCfWy7$>^h&=y*-kuxz4d5#`zLYJukCQJM$o1<}G+Sekj3X6s|o+!v+U
z62JDb*K$?r5jXX(E%mQq(WDw)cucB6a-8ak)~%_Bi+3Ge52fEbRNF9CMf2PbRH=tu
zmTF;?s?QTw5BIh}b7GX{n&(|K@3S<^EzN{xG>_)d_D6|Z9xX>xmQH!Sn{rrFZdBbZ
z<v;w+)PZ9^1>2F$c(dPM8sp7a-@u#weYxS6#((Nm61Qfxz?glt%2lL^Ad5ilnO6;y
zbiPhlG%6k2ka{k2^JTZ#bl#1oWBIa^(3^?!WriX96@zcINw({>>eR(HtqqUrLW=0l
zwDU1}vPQ-*&69bc2T$hP&0)XKj9Y^L3Ea!LZMd&-M{u3?#Bk2RZ+Wttg_Q7QvY!l3
z*2O$TxxjL0p~o}|`$#ebTb@j|!8K2&4JOXz&2lQ5CzG?|_V~3hYMTFeP+-?a5#2o5
zyD}(V84YstWPg^R%xI9qeElF`vjZ*(IN;vGleu{<t`|;aObvZ0Bkuo*|5B-}2tu#u
zaa%K)n)MPJSNb5KEv06?j+YXd<JTHfvt9|pKFzi)k?>-g$6`!(=d-6Ejf{uQ6j(ne
zlVtpi7w8V>xd1r==weAT3B>VQmDC7hgxDO68kUOFzj~amqFJm@b)Q*&IsN55+^4w2
z&pD-on}J(`TY+1H+lt$@7g5(fL|6DNizS?f!(uHp)b53fgDKc;iFGFKN?b8cvsfwM
zIxLpZfW_)>9^H9_#80U%SwREbfZxSpAu6fD5Y0v;<y44fvDD4duop|5-kDME>SV)R
z9q;C@)TM%%3Z`MK<cvY+u=J_knU=BYVi~LBpl%o|<&{XE2$szI9}7?QuDp3O<9Moe
z(lb_@fH<D2K~j-(aKwl*1y>5TUYNLm3j}zZV3K&I@B#U(M)fHa4fzEYN?l98(CQ)@
z+r>SpYzfgDV?x=*IH|KF<VWe{w(>O3B-Iw>nN*_S$O#m~E}bn^P-~)4ZI)ef)z}W<
zjejo)Qe%z6|LBE@tEiU<jk^TJ1)L2qJQIiv71FOS<um4-ICW8@UZWa0=;YMQ9Sqjt
z0nyiAkz}}!!MvGj44)$`P^tl}6F_I<uXPw8P4q_I#0pz8-e(aV*UkI%`P^YChCbt(
zBbI<BQ|Z7b%>>=%K{9bH-shuZ()@vb9-RyJSeoC#N6DnW=7FPWnmPa6FPu!qc%N0D
zIT?M%P4q%gC8JMRq7yXH7I>cpEzo>AN^^vpX1S#~#L{ecESh_wG+W|*KIKMPvq-Fe
z+Eoo-S?XapDyfE-?w4w4k@vai%cJXIF=hY^)r;Jd`lX;sJ$z=Vj*C)l#{1me0?o-$
znxDh#MjNcs(yXvFlbg{zn)lfkC2o12fts@LK8xLyzt)r+)diOF3-_5iI5zL|Jm*<B
z7UGgieX!K<KG%QcRMO-`8DQer9}!X2sO^l4(Nf(EzOX;fzF^p&3v}8s_Q&ugB5RJx
zrEally&Fx-;eXJZX~zHD>`rXEP7MCXCbnUjF6jS&|Ird5kx3;%Pxznx=m-DPxFz_X
zz`cyyhMV^fbc=B-aSqOF_$~kQ1A~#~e;&gF$Md{-tTm5!c!Zv$=Cn-eOWrL1Gg-qh
z1T9$!X(b0EsnPt;O5qHCEfubTn*R}7DxvXFn4A9*y^WAa!3?^a|M{Z?ogEGGYi=Y@
zNOg<>H8-+YfZ86K$%y7gMCU$a&J_y(p)+!wz&@lX@%)FJ2{!i7;#ifB1pHhSTaV9T
zQ6Y4H6y|VWH;`BCp~XdiQeaaVueIn4uI4lmw2pHCKQ9YYAMy#ru|PEfU}YaAw?l-O
zR@`(qX$cD?=bl>Tf%?#0G!OKd?l;S`=`%ZUpW|A64Yz`ug<FaXD)iBDb8-7{$A{Pk
z<Y{>zk%2fo&~FX3-$2E|6ztza<!#(9T&l#BQ}QAhad@B}#DfPKU>@i52#KGMGW;-8
z=>+^o^FY;4yLh0#u;L0`Dsg^^2dWTEKbVFGN)+zIV<H}#2O2GrK9!CpGx~cnd5hv$
za~>#J7#L9{BOs0ks*_ao{-x$WVsahz6YHu_sYGecne3Agu_fRXsRhpDuYw~VjNwcw
zBxAiylomOYrGl?N7%9iKg3jr`I40y#0e&le+Qpgd6yT=@=rAWtSC$QOc#>LSSYK@x
zb)*zsYt6doEfe6qf+=x-iLd)u)`OM}`Xe!2Y)~(fbg@A%3Z`X)u5Zo;{l&!wy#X05
z2hwa%A#cJ4ne!&@G5vwN&HV8)-Pq9!(t8a9;lQI~Iwv~o+Ld6gt(~yv3F=ICDCFC0
zP;c*ZO_fy;k&TBDzc-W0r}vUuvwg^XQXmHk#o*>n_Kf97VOe9lg=r-t#01nSCEYl8
zTapu=(IbKOD!HzQk5k$uIc3UQ(l2~1ZFvO==^Ax?C^|PD_3#st8`TvIOfuG>dg>M4
zI#b@Si@q}?bri@D9bTjUeT0g>JZ7YC_&M5y=t)r8fl<`p=5>!8U~s^k<8SAPDffW3
z?@P9&7StJ}IS#|TG_mtnZ9D_fBp(_4G>9?8Bn}UYd8-q6`bv5h_3&huTpZ3}vvj7I
zU7hYKN^7(3+4eX^sZ}E-_-ZVZ7WmY7@#ktkMYvkt`UF4pug${j>7(6jo@>=91d!*!
zVUy?Gx9dE&4Q?u0*V>~>psUTBN*=w82K-g)UytM$yWigh8;gEO!E$p7bpOMya%sO+
z#x|(`E!GO&yzRUdRiuQIi#DMZQgOSFgVkb}7z^+*OU8dCA~uNs4|VSX7*%z(4WGFr
znOtXp01;79qtb#3hFT<O14+1}fh2$zw2>r|8VDvcT$D?22r?dH@ls2xz1Y&Xes6s%
zS_?s~CIk~esu59wctLCRz@SE<5G6AI^Q?W&%;W+h?f?DnKX7vP*_XA~UVH7e*S@Wd
zaAkuS;h;q6u~-4zWIQI}vAwi4H;awpuIZPm^su_50CWw%Nrm^Z;6ty+N^B(m(JH(z
zx;&bC=BDTDBy-KZD=r>|i|1sxv^_3mfxRn*OV_+wR5-3X?w(iIxa$#DMFVx5n%r{U
zHBNOnjzSwTV;IwA-FF^U&Vuf7V^0=$aQC=zR@|;M=|G=T+8mpxRUhYV)1`rNtR}tQ
ze@IUJ<QY`}HVfv<V>IkHe0P@XQU6v~ba=iQ9@j0LTQKsB3^P1d!+whQ7hCDO*0UFQ
zU<X&W3q;Utv<3c_G394+&4D?G8QzC5{WD8)LG#z&QVTLW(XFcS0V+A7%U_SU93T7w
z3MfY%SFJ{Cvi2c##i31>d=(BZn*0Y2zr_fUa<psQtx<99CcfH9;;xH|n{2{eysu}t
z<xz3t&A3y{xZt1Yx%a})JJG?o3SEUF!G)nH65NDnB*Ak(RV28wCQO2!bpEPp)j#|#
z3>`2j<1hYwRR5snJo~^aJiyp0`5ZFFq68%MtE-rgEJ7n6(b`}?9vke$emu$|_K#?U
z`-m(Ya(BfGUsy%Lsz~X|kz#gPt(kE409zr^C7`>AYX9t*xHxpBds7oE%4^z+H213a
zk&C~+&2Km=&-Z3b@D?557)g2>_o^TQF&x-|*8#d^<%B!+V9OBw*a10xmD_$aE3w*}
zssdve_$C9B04FLz1N~$Za&EhvuTEUK*aa+CEV?XcU-5mE0=^+1eF37nG7Yy@m@p;7
zl}um9psW9z!WTBqxQ??ql^GT@kb{>fB=YEYkLicivPR=$PN^)eg}oT0L@#);u)z`b
zj|{n45*w-P{H7~Q_q{gnL|rNWk)U62l-^W&5v+G#?Y31Vnf_?D!3)$vQThea>A3Z&
z?J!!8HV0eU1925folK9LdwLsDbwI+%uT^aJ+TDuH%rRen>GL!X-dgHE-gn_yr7MqX
zHX7?c4*UMGrO&%GfGc~1y}G5d?9PWV@Io9&fxQGw`M<MFvE{Ze!yH0O3LhCirP3_S
z0#o7f@Ub>a90C8p>jqdA%QJpuCjUiLa%{xiZR8<2-lidj!rcG>>)`$3J6mJefMkqa
zie8nx{pCs)4(gDK{s}5K+IYij68$6Nhi3FfiO#XMG>6eJ>R<h}&F9=;<829z8|;uT
z)7GS>|HTG-;s;Z_y(f8Zoa8^~bl?2|YFbW(yEpdzEf}Qwpsg~|+vmg%@7V`<oXfZm
zbs!6r?v3ZXjR>Ncj<)+^t4F8Xz0QpKpnZc4HtXCQ*GX_S5=Fssd6NOFcd*>Z2B2UG
zpu7Vp!J7agfgo@VNE8SO%R>6cO<Yv^KEa`egXu4FZyY%FMFKb*08$iyzu1DwFfkba
z7dt9>)x)f0=uwafnJvp5D1K(kGUo<6@kGA@xuEBI^upB4!X#f@X0EHs6|^rS5(7H>
zFNFVcGu`Yh9&`OH634-`OxLfo-@<Nb-pz&KJ7u=v*9(~<6`$~wWBl+@xJB~#uJPZW
z=Xrl#C;0e;=gHvX=%RTy!BlL4QpeU|_~%~{#s}MV7+=D4JIrl!tJ5dq#9pQjWAK&}
zAzY^PIGQ^r70t$3g2agU9Q8nBdqB0&OILu251_@diSj;=Be*aE_6!41)=h=o$nD@g
zJ@w$8KcQB+^^?1$F1LKE=?l96JnZk@_=ei`@-h72VV7kr&Yxf!=QSV@!jpIuyFKt+
zibu!u4j#v`v086De}#K8p4;(c;M<t>U?{Y~b|4EN+#6+BvjrK;Jz44-Yvpnum+aNy
z#_Q+S^I8<THo$d*fx#ih!W7vkld%S;&0x5lr+t=*)3~4E`#}^5AN1F7cwccEn1eR=
z1TcL^J+@An2J8vsP~=-|E~`BOjJa!j=a^d}-^O!*8LW^D^%jXnMM<!_EAlO8rh^lB
zs!pPQ#8g+oiF=5iL#q8NR5>T8j~nFt5~jq>_@K;24i4jtJ`a$H{;f&SVyymtcYa_h
z40pi{fdPX?Hhs3?-h`<as}FGdb&#wS79o3O?Al;6reLB7rhN|l3tblEw+)@t)DDE$
zjd5nkK7>#u$i<OH%{X#4`wL%!@$<DH-%AXGJt4i&faM>M8Ybt{LVaM!auuiIOruYk
zx$WK+BC5Y!q$GV=yT$O>e*!~fuy(cEn1=2Olg_&ZRi=qCuJ|cCfQ~%eN>*FATS3ns
z1_DuUNiC$*b8pPCe}oc*+e6^ElIM@0%b`5KV5!J+1qE5163T&3(ToJu@g}PFuPjvc
zsUT%Mj&>5+^}mWB3!tT$cA)FO9~}<y#8$EnqXrD!6Jp;$ni8?VT?#SMwG<{$dp(1T
za14(1Ss}$h1UKxc3VFtk5U!~(WD-$??XE`SwgF~kB!Er_t`O9ZqB1@*E2E9Qxs$c=
z7pV=&DKqz|_bw@7@j_J_hr>lgZ5%ZV*!Y-PK*o<To~TtdQ9E_F&`?01W=$lS1zvY&
z*P1v5lmlGi)@K9dDDJH)6U6`IQ;7fa>qy-oBI-sM$pzFEyOw6=?gsKf%yp|`v0gq!
z<LRkhO3;0=UcOjDG?f+{bCyYAmj6HtsCW`~SH`};AR6*)Hwo-8@hkvKs`;2GcE9z}
zFoDVH<B8)LvihGMQkefxFgKxm8>^$k=6VA(7iDY<^REzq>Xw!OR`t}iF_?bgHgjr^
z{YzJVjh9EJToB<E<M-gmV42*Y(#P_}boDF7Gf<O*d58}sUv7v}({Pdq%`y}mVacPa
zf$EmHuAnCnbczM^6=M*j5vOQi{>D`~K&{Nm3^s<Zu=@I;F$ZvI0RUf?4KQl<x!OE!
zf#%hgMEP@^a;@gm%JGjsD?Ziue8ex3kTPvP(nW{I;bWrsmT0$WB^vLhx6;PKov$&?
zZAe|hWSzotv<l>SYqv1wnT?Q2{3}7~If7{<Epg2OM&2G^UMJA<5k^cRX$Uh1xKyF!
zOgRTf2%^IkU6^Bqq_oPw@?kdt{;>o_z$OBdVKd-Y3AhX)Wuns+!tZuG722Y1>2d&V
z4$>*gM$)14(9&VmZCn&ARR?ngGp|W)1c&n?Juti9jUM!$DXEGXJse-rmv|RT?XYg6
z!$}KOr&nqtqSCQG3p<72n`3nT<0Knq$~das9<rKt=}R009WV8V`Y!6HH@P?M!EVUK
zSK_|Lt$xgQQrnlIkuODWdhR16GoFNhaH$$7(UY8D{G6V+)a*FMH}o7#&%5b4og=nJ
zqY~ps*de%JhFXu*HDl1Nm>kG$-^{V8QUiBkpoS6NRP29mevYIu*4Ja@cIpwmuUymF
z8`F~4-1klBX!9T#G+;KPnavRK!e&JAnnkZPc!j&x7GRBWpvvQBsF)O&TfE5Y0Ok*=
zYKG~q+5<ULwF%%54oilc{89$4s6f4xpyfozwD^krF$VFX+b-db0n|!x;Sy~Sz9MiL
zM&6hXh^1y2>TDX0*FYu)9S}k?@8CU(<tC*sNmv7V1^1?1_v|oUMNg%|P{qn5lBmnZ
zUqM^Ft#)a;>ks(3H{FyDP{$z+2h-l3OY;tNZ-V}Y4m;i(i@(XfINIUUWR!M3#)9Wy
zZo1Lf*jwr@1vkaGAYge-q$h~J-Ml1*b1C|6V=ZFw9=>Tx3>zbnxtRTWxc&y>ZTSyU
z{x-MiPn26ZDQ~9JIw1}H(rJ9ku>;GIrpiH_p?bhDCcHEN3SKTshw>og;JGYW8YaE%
zGURd-Z{%V8t`AiAhk^RwTW)S#+coc1Rz^ZF$@>n=t8?Cc!+Fb4wz>sP27L!r9~DF_
zqJn-9h0g{@@L~&}-oQsjv~rmjG4#L(!%rKApLT^N`Z)KdG}IjWC0aQ$J|&4-gM&*0
z1CEZh4RZgi5e63f!I_0i57Cur0b4K;4!kgW4A`tWjFns4p|pcZxHq1&;`;Gp%}`i0
zZ*PBS#foI^{x!J22)c5N@jTXL#=jm~;_&a$0?XR<+3md4@`CKzpAiaH19s@c0(Us|
z1<oONIL8Hs`|Dl)Ex0H0liC_a;5OnsLd-J)cMxA_?=eOxfMOQf__Hp0#EH^mZ4j>X
zEDhK>H$96p`e>0`oU%_813(@!o7!Gmcoc2H_!sJeYP`C!^_4XQC8v+o+?~Y5VVJKO
zce}*(V*Z`SX~?eDybtw-w*%m-f_&6)k^waY*Gqo709Ph1CP-R|<NRvZc(+TuzcXH5
zR6IlzV1VT^#!H;18E2>!C#p>hmf&A9I2pmw?cy1m0ZkY!C|nj?nd*TsG|Tf9NQ&F6
z)RiR{X@hWC<sh&a3#HfN>Qeu~epS6OFs^lG>3vgiaK3u<-LR;~$sC*9-RRzQc;&~T
zmr%eaztOMCQ|nx4MqGNgO~cYsqwxdi{;c|pdJN4r*rLW~ALUCeoWQbxQ2|UMwUB#{
z)B<Rnnd|W;)bZ|WV;DR!5tV0b`iatcH^yX#b;;Q$N>~0P<aTe`=Rcn0y9lBgduUUI
zU5uYsfHYqUj~vlk0Kymp6&BaP;1FRr(yfg2cSI@;%*F@{XP;cg07MH*{J$YLrkxm2
z8s?kxA?%~h5atJ7$zC2C8gcK$C12+wW88<;4>eO;{1_K%EZ%zuWyUpQu)FUv?oyO7
zId2;BuARESw(w)p;}#Wm33&Zu<3Yuu14>se`xq07z4^A=Ko_wun<gcrz8ys@2Rw0q
z@MqCf$u`qNUNgOqP4i=eb}i9~UJPSACN*GXr+7Z7@lp+I0VaTw3=h=f1NVWIXk*B@
zvP@OL6>(Mtkm!97k(O+4LR`E9x$n@}F1?@zufVX(-`I}pj4NaOL5B}bsGTulF^Iq$
z*+epbe;zU)i_F8czX}-<^xwe(>}ao_*M;`D7r18MVo?7Vlb3vrkL>*Ed4>+Mg~_jJ
z<p9#FcfpLJ%Ce&Q-mw+F`Nd-@D~py;Dd3NN>|>rR&7Hrb%3Ct;GBaWo{p?t)!k!FT
zSJhoL+i|R6Vu!w$qN{Iq#&&&}fAsyDHx|JVj$<bKKEsrt<{cf5I??}?w)9dx%|BYl
zrGzlYl(Z&zu0HTy$hv{|Pc;2MSN^ex9P+)vxhC_TRj62BU~zeiF$z06^>)44QIC81
zHdDsxednT7MhteD`?qpZZ;0LxYYj<vXVvWU_SN6uwI!Hg)q79UQv#_g^|OQVdcS7p
z-C)d6mcGZaD|5@zzjMJ8eQEylgoxuX7gUez<vYi{G0$de(Pt(2k5BN$JkRMR|M5w1
zag71fBg@b8A5ZZP@E>=3`}&WkF7M09Zb<!P&UWJ+W2{&X{=rPQsb9bf6Yep=KU{D>
z?VhO}SZl)6cPnb2+T%+}7B6wROBHK6iUs~KzjE*eJ~6hDEgOxgC_*52_sV6vCEIv7
zn6EFsIk$zXZZH;?cm#4=^uy5bH0%VOu)H^Rf#kLteel7V02^w&c4`MF`&*4i$ShOa
z)JG9w=sxTG$_(HTP3@omUZ@Rg8z2@`sSdqmQq8WVea50Y0EDEKSg8plt<IX{YlEm&
z*n{1T+mTN9b=0U+F}TJ(Pk(C?hQTfDTAsm9joQL`7V!5J@^~M^z>k+^EE3X~mu8q*
z=Ih%gVq%_{Z^O9*p0#nWI)U<|(B`?v%kd?XlP|-8$;tABZ0-91#phpe$0cTKX?QNd
zb0wZ!Jh2EXz<UlJFCH4UAL3pmpp0bqDw;vWa+7;i8yr|&;+ha%tbqeJGe0BMy~+&-
zJkP?*+-$}p`Lfxb=5OREVr}kz_e=erK4Hw*56QxC_~`wf?l5xcF#sNWAshA^H++cC
zM0~z0pOg7X+w<>V#?Ynw{1l%m^iqEEiUR>=tj5LA2VS#20sFxF@OV*qxHt7HJ@)q5
zyN<nWy!rvW|7ga0%eW9y=D<2DnUP8;0W;By{hkgPzXO=yoyfzzvES1+;~{?D&d*K#
zp0*pS_<56H@U+ud$ggYlSbc_bIz-%lqZZ}EHu;E$haN*EzLAFl1P3X1J+KO<Dt9sc
zT}-~?ZZgLalMN>1)fVmtuV6f59DyKL>tn_=Oc8*?Yj&bn4GYobs9UntR_tr05KWy+
zAsP;DLNIvJScVLkkx$-jVBha&X+|^l>kzm!Otp%*0J~raXXkBz^RgQBv;asi`>5fk
zD^ocp+04O;DHlX6%nVFz4HWJ)1;aBQOEBoUJB{0pN~`yy)mtiC+6q!+r?Cw|Y%ax;
zKsA@$AbE$`c6S0dW8ZI7+x6|fw&v*4?~TjYS9_OD-^27jM*2MEycEtGhO~@D!wjUZ
z%f8n4HeBe_LFe82>{b|<e+B#aAcUU40V=#2KzfK8s56X%HOE%tT<nO2b_+4=&~NO(
zVe2E&BBa1XBe&fWA#KE`5AdP(>0F1l9dP~<IYWf74j|=G>&9TDi;_Eqt<xz7RGw|d
zi<FR1iQTI{K!b@0FjQxr{wm__#7c^hhx*rZTTCgzlguI|{tO4C#Dgi>+Et(+pR?WB
z+7LXW@JzyU1D>DYxe#G@;vK-V4v#4%c=E<iDe(a+RHVd5a6l3qP_NJMIxt=$K}vk3
zJh?5(loBx#ge|F*9C9+5eE4@L^`!yFffRW1`)~NhX9&sp`Sp`9vUv8Rvh$7K2l4$b
zzPUEe@02=N$;f=v5(CB#GyEll>y2nVM*2RqZ%$e=`sAMr^vBK5^#4+sbIL-+j`bt<
z-QmyBUNp>wOnDLTTH^@*gzmGH`)0b675>3#{5bRo!PC&xeq+D51NqM2mHZ4~5;Wl8
z=OvQUX5^t6{zkyZsRknYkDYKQDEGcM*-CK*!4abv^~uK0wUcmbz8zIWrrv|&X>6pI
z6nARun-R=R*P@Fi7}cyfRxo~ny(6mAWxIb3yX2)qme$i??wQ{^2hd(JCpxwQRxih>
z;a6CVK7`+dWn;T3QuMRS7%YFri);TfS@Z7*J^nD>M)LKTT0zrY){AXjnr^JsFj^=3
zk84YZL0~%9!SDRcn5|grfO@eZ58O^)<>QOfV__65bsge|e7L?^?^_SdjAY;(Cd(>h
zpt8L9MkT#cSd>FI-)P-yZtN}mCbXvTIL3Wp^ybe}=*9L9qsJi==1_ppP>hfCzAO$D
zulw%Spt#F`3PWb`)su;@84^Y$8K4v*zq&yoQiG|h;34<M!sFE+a+1cVzwR6Ch(E3^
zhpyaV94z=I#M{?p?bygdW8k2I>zVBV-u{hAxX7Nr>k$l{zMp$jwkwZzv7q>1Y|1r|
zG~7pyvn{CU>#1HU-3&l5fDb@?eGM=^S7~OI%PZR=#8#;hui$xRaBl>JrR<GRkp2uv
zU<9CMj&Y3j@ZpCVb7BpS8((S*L(@6whRqv5Vgxq{V1$m9)RkLyVU~kSS8thvbeV68
z6l$l;d^hqYVHe7jiamSjR+$<jCAwHjL{%1}Q|_f={isQR4K~58wAtp;Fm5$IsS1Ta
zN8^33dOx~E-aVx;_JEg7n(v0ww3C9n3rTSQ)vR{Sn}TT+%~r{c9-%l{TgNKDd7i<&
zss@;aS?R(VV5RMab8k&0D-ACWoc}msn9T0p^oG7;r7Y!UHn@Ldo`|?uqUfvElD7h}
z{%bUEf*xyfJ(YfyTbQ@X09*0a7%(nd|Mz~Zc#DTXEgs?-h#51vF$vdgV+@9y;tJ<Z
z?rU|nO}WP+SkFV7VEY^@!EB$=SnJYvO&XUGQiu+$L$CM4%yXojUe47chjGsoc3dzN
z3y}rxZZq!u{fSUbJtiAar@VnRkcJ#FdK!PNZ*#aL8OTqSWYJ7jl3Q+JNx~7PBLa7A
zEiF^QSq$d=A;(PN1pYSqES5UloPvrlc)#ap8~J{-hu^)!->Co1oC7yi5fJAkTDBlr
z4)?Rj@^~I*L3pFUDxON?28D^p+Om-J6HUTtZ&z74!rdt~3n37iQEKBBOb?5K)?pOD
ziT)h()<z)+fo4%V-f8?-IU~qb<rxwISCzLJE{V`qJ03Q~BtnPrCRDd@o}un}_ClVu
z<FUsHa-)hc<=Uk8;goBW3}gTAn5j`a-eU|Gm}2PnMTzhZ`<jO&!v5OvsfGs;UaSW5
zKfe~_s4Z;8c<P-$GJPu~$(Of(6B_4lbgI*IzWw2<`5H9C<&M~;3o4HW!X(x}yvdO3
zW}}`yh}02iPdZokx9A*-@gg%{zVRvsL5c<HCw&vDqiqV~erTL^tQ%1s^}f};QOh5!
zfG08BT#cGBJ$H&H8kpG`XxKj)#_%5GMr0C+%u$&KUkfjXtKhoI;({d$N&pA<$l|#V
z-f<P){IN^CC3qK_@BEn+mBsuv-}zH2=HJF|zEjL;1OS>izqG=x9U|<6f^p>)Mcy!U
z_L&9(T&3RpviY}_m%x!z;k&iGB%#!syVzSYzqq70w$z(lF>e81zRJpOfB|Ac8esP-
zm|8OL){@E@WmRRjmX()zmq-CPuaSfB_<0NSD$5oYc}o)Ms_>S~@s<?3;6`?3bLdG&
z)!dTeZdp7*_=$k;om){nxom#1Ku!SU^$1CvcRS$CDJk|<mL$x(eVlLp9B*00{N#DJ
zXIIRx@>crhcq=NC=G~rCVtsfJR9;k76;9?hJ*>37&F?4xy-cqN6hyjiK}ls1pkKGJ
zq!NTJ2Auq&(vmRT6!mR^?N%_9VAWYtFL_0kMf1j$7tyqirg2PCjewX1rI-hbTTm*9
z;4M=|@pu;(SC&*&B`zqPUQ$|8Su%f43F2Po^SbC$<tz90lvf)-#wHeo^Qy8j6X;#Y
zG-&|vh%cBp-&-0+gHt9h_{W!(PAIAx?<*^ImzCy}Re`0vC6%Q`b4n7_cae9_Toq}$
z*INcx;e20JN%8Qo>k7D7eZV&Cm(dNywa6<rA&f(njhQR-v?m#s5(yhyR8<lkz7ydw
zi3Ryf=G|IRer?gbl8{~755JUt1!Q+Nf^lUf<;7#>%mLvlDlK)9W!Kh0*_2<*xSS#{
z4i4Ehm*z?vI9ZF!FY(e#1>5Y5>9pb`GDgzH6$@_3y~9^TmPa(s*V*4e&dw<%rCxxd
zJ7#*>ZFBjdpe7U+j2k(nWd3d5xoXyr0mVbn5DO~uy_IN+sDFqRD}Efv&oU|SHao*&
z#?U7WvKLa$t*G=8vIXMFUJ($91r?MV!a$m~`-(`2v!JL9Yq3HDyOugo_#nHeyc|ro
zP}q^Q^1wf4&YbBbx5dqwlU-agr`$DXPF_*foTBphIdk&8#Y~X^7x<sfZj}od3jiZE
zK5vZITS*c=e2&yEwsq3KPu`4qUe&~N=X)!c5UY`cB*qgAPt7B5c8Rb!oe{PvxU6Tw
z?YPK<yI=XEIWC}o`S(r#cKRpe<ynl8WFq3h8~9n?=@x#2;Yf)O^AQJ)^5cjl=khG&
zc2Y0_7t}Vx?M|zD%sP+b_qg(6O(R2CHS4mF*0im_3f}mwQ~6nR5<mJA?oRL*e|87>
zhqaI2HsYO}C;XkeSg5z(!u=z{N-l^FqdqM^*6Xttycjn7D!X<BXh;F#h#DHKUHb@e
z*b&)duPZIBDghs}l<Znhx0F^<Fb{5)a_PCiIfZquP-B%p3_liV9o{J^1)aiTEu`6@
z5F!5TiIUjDinL*w?D47!i%S+OR4Gr-993=bdBC+-7+2{#3W{#cfw$0q0vsv5!uVR@
zc0q<&;|bSWOg85JK|=oc*Y1+|LTKfytz&-fF7081%I#U^<z`+{O`#KU!Z|4p(I5mQ
zpTz8n;u5pt_|9Z8g~X~bkB&yuOzG1F54Ksdh5X1dVeX2XQBqljUfC{!MEJ{|ovpY{
zuuD+g7Awv!#F9FTMPG&5wF@8@0NN9z_cCc{(rX)VQT1ceM74pBl=Og#LtLePI)xLS
z{K!%dgRcD9W2F5k9E6#yhEWaf5~Px5lvR2m?<Yb#0)r_erkpSQEb^5ChaFBa{1`eH
zZ}4-cFitngug6BnIus(sPcJDdHZ!6pQMD(`tSs}QOAGV2G|tl$INh6~=DGm*B^OLB
znqPEVNwGAkFl~rGMFM~Jh)CeFlxk`aX;%AV+ycM??}k+%sjhN(B5(ooaTjzB3loAx
z3-gOb^sqFF7eI<VD1H9TB5NJQvrh!i{Ic8T7kQyVrd=qw4#W%m9mX{rPNhhGJysmM
z$#3Is7E&0gCtiLS`KEfJ`Z@@j@{%V7sSU)*BRY^`WC<f4@+0}fjo%V8^k9HJo~l{r
zcB7&9?39<Vewy^D1M#<0UJ@o{V`eNPtAW4Ml&q!*S+7LMQo>J-DvQ9U03jd9uM<O<
z-D_w1l9E!m?v#9o@Xa<yuAu^uY>|r0Lk{N8?#wT{6EY{v(Q&!Zd_+W(`9$c%=9VkY
zV}?mg<jN_V7bVEKlgjRdA39JXq-i%n2?1@Vm(0N^jftgMc||o@jK835m#}cR%yK)y
zp8VNkBwdsMv|7f$-vw*h#lS=9HJ!+F2{NW~CJ4AJfuTgA@?%$$2Vr5C!KwJgnZs5^
zNofPFsb%wL6qWl->PnM!O)Xk%`jNb%M7XHTN1C<}(?xY@N?8?p%CJyKhBD4**Hx-2
z3kwGq2dD}FhqHoDe0ZoE1tA`}E4|yUy+Z{XKYP6Du%+iANReygsFL|!HF&1z7e<Ju
zXgBMf6~Hm5-Bmch%&W9Ljz<M%f@+{jCu9MHAf4D$;xWAvZK|y8R=vkj@<8a=r6vTW
zBzi?^gQ%*!s2D4B?b;K-N@B-bLpiV{e~S9_<Umd-0Da+achQeUfb!1)1O1XwbMU@$
zgjrP#5CSBFfYAYD6OW`2-w1Z$<`r8~9;q$C3_hx^7)PMSEi9^3UM!R}us9V7d+AAM
z$s#dl$@~bZ!x_Y(9d&8KZmTORFOF);QnI9pm=h?%cv<B~`~@kGrG-U`5GF8kDD4tG
zG0$5WiP;KaBhcfek7r||9Eew=y+n(ZyJ`Q4R&lzASe4Q(BqfRp-2z?YPiBu%2HC?L
zdn6K?;>apZTZ?YQ3P}Pq;H>1E+0&bem=S`kQifG`85cXp7f#H<>_DF^g2HbK23IM`
zqu5~z0+)>%PVexKkrpscd^n2YOZd|f?zp0x*aUOLW|wlQ7GkD)0YMn6F*~-=7Bi-{
zJCX<exs)$I@>#e-1)Qo;s>i|rapOz8Y+!(IF*^tU5ieoOgnUf*loTspvY>EgjH!#!
z1G|EuDCLxt7GV~~u2FQP(JP)@5T&!>$jEo>IqOg~p;g@wlsz$A_T0rg;Q_o`@Jhk_
zj!Bc;#bI5=fy}~U)apS9PsEZ_NjbI!B_*snH#;+HA20*QVZU!VcC?qkZTXXa1=tDf
z6W@qGfnSD4tyf?b$YFeuAxE;!GY)V2>j!YBA(w{&*v`5YYum43u9v$N)!LBS<NcNX
zB^LlHF69I*7XYe9a#Qvm%mueRa3XZzeq_QOLyi{z7P~$@UhnPRILYSN;cu|(uV=<^
zPR1MSztg5I8>cs8uZq~y#jfy=xGVh6SYCKsc4KSLtw9dPY;4`K76*RFz20%g!2oBR
zJ7C128nJ`t*WQqfjWoSr2BQU6A~~>D|29_8eV+rRMk5(z3{Uee1Vqj~&zh#@o(GQS
z8Uf~>u@Yj@k1Rb*Ta3TxcM%`Dcy4*gJaj)}%FBwX$hssYXMN<y_|}J|e3A8pk7G=c
z%}DrtM0oCk-1)wF0!-8_3*yMjl=Ks>;w%V%cA1k<EMY~k$4TOnuzI77M$%sCYD_b_
z^JMd7ov^=#nXLsDsMiqRu_`v5z;PAfTzoP(ov;>2`%OrEn~><V^K5GVjA#DJ(*XK5
z{qP%~>91CQ5W3>^EPuPx_o==GYjapsDdZ7gy*=Y7s`BqZh|z=B;8-QN;W5nAXO7<D
z?I-)^21h*oqqk_jw8(euh%FLjF&4voRap!eDyj81vE|L7Pw&WVS@9={k`Jz!?A{pE
zo&Q7dVXMUBX4EPlb6-X^$Y8v%Ol=QQA?B*wgiiSeuED<Fqk7W~v%x}aBP<hFVN=s_
zBK2%35!S!5^lYb@UT?pyCbabO@ko{J)Q7gga!#OJH94bdO@!0q8JyGR491PS&bQmY
z4UMpK9!K<pY@<Acnq_m~s^xmSo)xc4!_(UwU;3NuwKpg0<6=PYrMddc#_Pkr388hn
z;8jz<bY@ndDFdgR99DzRM3AqS{w7*Xf5gN}oKtTOjzSDaYc>|*b_dguY>*_ASYKQo
zj+GjY^-l!Bnhf_*<NT#yOdFnDAO#(qAU`*r_tKk8a$L==8}8q5;V%Y-4F04#6Gz%1
zNdEZK6WBQA-k5E3G@@w!#gG;`dS8kNgigFCLMbkKX6WY_2nh^K2R#w~y{K@3%aa`i
z1Q{>JpEd(Ou@$81Yd7jk5RCO>ucn~b8^!33V_e2Qu_4Jau0;7kJX}0%;)stVoEJ#K
zdf-zi6{Khqym-}Ks=qz~&OvYv!kd@p4a7SQZ}73^z$**iG`{1hon`0Cy=i1kXgLm-
z-##F-95v&v%^rZV8FyVKHgEE4s|L6?p6hro`#Rq~#82|`dUF@{;=_%tw)m@OsY__n
z@gYotAO@r(yTKqSV=8oOrh!qh*$B6P50xt8{??hpw+EW;onQ;>8D8(+G-Y_g;XmDb
zt*zEO+<x!12{>yoJQ3tMyLRbt>>R!&?cVDK_(%T|+ra~)e_6Zqs<S8f4(JP=!?!~$
zJM}ArFSB{*lah`#Q0{ootG?5HLZ9xbOjwlYerdbI73$R(dcAQaHo1kgdy`yiwnf@f
z9qUHZv+97a6ZkqoUhC3&cnQr&yiP>Lx6oY?H<jUXhh<bfxHqObZb~1N?cS8(Z?u=z
z99`(Hy$duw&+&ftwfJ20ML5L0TCS1JwgHS#Q}vTWLCm4>8m!9&Tf^`<Oofbub0k7W
z)FKq`(Rh!*I}84!b%?TD4I3G<^xmWFzP|2_Q^_k?FlYC&vCV%1P0zAGuqG!xr+R66
zj^;h9HakXdrL`r1N#fCvB)hj4n$p-#0Xzee<Y*=S?t3Ov{Gi}u4KH~OcSI_dFzHxR
zhi1T2HWQ@QQRir<?Pws)Mjk@sR<#S{lV?=WMEm-$ZbLKEV3QP)LVfvxJtB=#yY=}q
z^-=nd{^G3uQJgn^`1X6Rv)y~sRd#)nv--|BsqMr?$!2W_&k4OAJWJKLt>Io<^>KS;
zLaC0ov(hfFs`KDi<*7cdxnHdJ_P&U6;+7k6%K!w$Mc@*CD0v&$qyJF964_qEZ1>%J
zGqTOF>oYwozebvBpFOZcU*xJ@k$7T}yE5MW(ox5-P(L8>77)OCe@L^nt#K&?0(b*~
zfS7%<Z1Bv~q3@_uZT2gzC20t}6WhEAczO+u^CsiC4Yi+L5a7X!l?9O|xN(3=Z+>nd
zQW>96QAyNa6Y=xR(Wu>7@d&0$^6~_wk_4`as3c*Xjta+xc(67u`*XNegO|ln533Wb
zsE0+Au1cGGqX%X#67lq{J{afqz~Tuq$-5U=wGMeNc%?qO!`zRE4PJTrD--4T8sj{P
zZ7JNMoNmRXMMC3BY-=PHO!Epa3D)g~+r;{ftBJMVs4VfXtsWWc<<XD`MqAJppQ!dF
z@|3!>rX8Gv!1~gQR)kQejXlKo*T=Xwc^ph9dw8%XX-}70byly4>r|_KQLDXFtp>K(
zz6@+L60iLxbj!`M=LZ1Z(q}}o#d25ma<E0O$^`dIA;-v2e;nBg?ZKawp9o_#V@sJ9
zcon=n!FKNyoBhd=+bZpAw*B{-hQsR-i~P58D<zt~cP<&U7MrgO3R7sJyVah(OOQX}
zp#FqkPg)4UL0FSGyhR*@IrY?GD8&yZvlMFYQCJ68JXtZ);z@2_r$xYY3@=1GRv2ua
z8m<2#Hks|W<4pZ`bcET!TU}tk(hc@IC}kAvZ&120OYAaXcjPMA^_iVui|wPC8T$gW
zJM^!VnHz5NxZ^4df9!#QpjQe^tK)4-Wq+pTy+A)^?vjW2%Y$s1!o7YiC<QD&yufDV
zrhAVn?d`w_ObpWq++X(i)@#uAUc$sm7|X@Tj}*Am#BzXzB@a5OHgBC}{Q@W0+KJ=%
zQDGb%L{J+V<4wUc3hn<~wEw)|E$Zw*vvDJ8ngnVxW&_ROwcG~$29W-#__xEqg#Os&
zc?6A4-=i?>g<&dp@HZKkFf?t31Wm~T@^=GyY}0Ep{*V(z>uZ4#Kp4-$6YbY%k#~o&
z9&c`A$r%MO??En`XVOr&E4Ow)ibKew3VuZ=<Qh)sv3$KUdoJH(l<#{|zS*@k!smN7
zlh2Kpu^q9tR(#$7YQMu?wBV@P8iBgU_&GxLTKQmT7K$Dm2+_xn!`PS_bk9Wj-g;ch
z_vh%!NdqDZjBz4cmE_K=P?DfolC`jqq$lX{?v3%)2V%S){z*Nt-FsH`fjI9uK_0&U
z32=d~@rv<)<=AF9&PLt{YBZJuwrMY0aeTO@U88%Z1SS2Ipu~XS7^|jV2Q*dFe+173
zhgmhfS^QbkKc&A}ms`i6F2`DRc|H&bbEF%2q7K#Z;q%O5`$r-zj}M3Ud0K7Lth0N2
zz%&Uw=>nz$hsOCXkw#%0L+fWZMA{#VqP^hrVl?d^5HvcBtH&zB+lYZVG=>gOTRA+?
zDGk6J+q*Zy;*HaNPYrki+r=9I;Y~aT@O*=(*VWnDMR=sLbFx8zzav9lT@@@AzYRI?
zd%2(K$M*2n;{(UR@Adws-)Ql>Z#?|I!n}>79V~uFCcrNS(>AR?n1wtfBnA4fy6lu{
zl4~C?sHG7YpojYmrSCj4L-EfYHpdqjBDpuF_`gC4o{$pM`T^<Zc%H`dDxL#)Vj)8I
z&2#OY-SKG1*MT#seOZ(Tji0eHs}S<;>>~(i5BZKTkY#$%xDSO2&cJyd&opJ&oIxzw
zgT^mVwqPdGy}v9v9n1Kju>pk)o{PZN<e|tHeZ5%9L1LB{;b&>u&1loOJw?i7&gC@1
zY~PXs-h+ca;yd>-wbI8tjebk|nD5?Cwg+|?l`1*V8u%kMa{;IPTo7aYS^ifboU;&z
z`ekVyw_=`TPL|eQoTatl@swc74o@1MBs^=2va~1gyn~0cZPSo8TRRf^qxsgfb7g`J
zQ-jvD$Mm8_+*+e{-CQ$6OS%^O^~~8shnDw!E*WuZhCgS1Nja9YUB%~dNdQytYBCxV
zA)JjvfHiq%*Rq(>rP*wpg}XsZyADvz2}y^*IwPod1+~*G5$P58EyW@&iL|D5+1W!>
z%(<rZCf(`9-x`P@{w)9J5PqihunTEf4}$@dZ%ympwH~m&4?Cw&0qaPra0PIt?2Jg2
z#gvf>SfBTwsQ?8vx&lb2xRVu!#QPS)4;-uLEX2kiC&UGRmj4w9KU2D2i?pQodh@Mm
zXLqIh%(CJL^QTXXrv2J8rae<eXg_TFe}?u7YBcRhtGH7YiA4Ms`afpUTZoQ7UPxsA
zEdOT^ex~%_fwZJQ`hb)1z1q5a&17u@sTAh>0$Ijz2qxc2@KD<1<o{;~u8@c#IBC<J
z*Uci3VBbP(S8ius-*0|f{^#QROlf^3(vsFI&36wnM(vIUtzRI4!n9ue@6dWyL04LP
z&ZNJvD<q<5P1<y)wOIrb>|1E<h58Wv%Y(+ipXGlq!q1e}>yehU{@i?P+F4!YinRe9
z)P9E~3RAoI-=TJOVOMIWo)NVb5>eFFG}0&T<i#M_PD$~PO!`_he*qd8f0qB(2tQML
zdjN~{zR`SZTHmhp<|YczI&DTYt=IfJw0@SLI_WHD#@PyqPP8U%;(9Iu$#qIPPnp=6
zuLn<3-<JQa2tQLgFGX6?x!HX8z}GxRfgSrxK<kk+qiMbF-=Xzxg8C28S|QPi)}&8&
zz77|IWIH9jaob>*d9a(E)ypxFCUa2x9I#Z0aYX11{DB!2PLQ@@ZhDq8&?|7g6Q23{
z4X)}tF>lr%Q~04foT1^IR+V&27L}@(e!Vl`3CwcJ+?PxPPr|hYo<+%(xbL{jyuWRm
zo`>manS&vCeUfWY8guZ$nzV~qNP=L0Oda<zr;fMbP@g_E33*I#@;DyGspfR;O#M~;
zjmPhsf<dB&9ZVQVH%`-&`TYP4T73mCtah|v2_qR3rPT*hyh+suUEa8idUeZJ%UBwW
z!X&+u%MZM5EWxp3jQ=X<iY3(}Q?Np04_0zjAqms!T;-9~1wg{ubM08C?(x?<8$NV!
z^3s#FYS+S~jO|CAYiwRFevN`1<b{c{(C8n%M)M7-{@RXjD(&*^ss7rr(EXf4zSqK3
z7OXkNia}n7ABOzo%qJ&pR-!D*dSWPM9TqcvBkH(1CV<QnPjB;-)FF5pbFYAlOP-rK
z6^URja6XUV@GQg{faA<j!e9*haR3T(4nEPpom17f<^MIp&$M0k11z@7a`WAT9y<}c
zWYn=1j3H*tif)-3E<VFC!~~{{=&{AucWtC+G%`t0P@@|uY1LhijVcm}c*<5P^-R0S
zGi1s%FdH@~u?~^%)VExOS_xgvKfbdtCzI<^&D8Op-p5G%0gURQ@-%%5Za3Po@&iU&
z`4#@2fN8Ikm9QNF>oz-d8%|#aFk?~W!C^fvlT5(ei8}ZB0tU>AvAB|vdn5#l%W(9j
znW860M6paV26miEy?mIOF?#JH&KMDn%$mj`*o1>gP*_`0klGcbTf0MQH~xt=RWf0X
zK(Z`#VV>Pu_n3+D!d}oc+|?XKg}(aNYR2Ai9H%SaGGYNcIEEBh`Jt4bD?ulGiFzMd
zI&!q=cHqc~=rJDBu^M*?1HX<?VLQ&$w?K4=Tg|@V^zs?j#Xr#K{>{3WfKl$r>S7hZ
zhnw#&5RrAU;xa|S?DS4`@n8f_4|OrBJEV5w2PUMiE+nKgu8a4E|F5WvSAfR9Sr@x8
zmOfcslmmRYE-u2rk9CoGsj7=j7j&wNa}j*<c5y*>NbSZKLlvZX0_lwFq6rQ4Kie)i
zFMJ4sX|hvqh-#1?d{J|7Y{B}OGd)<OH((dg7b`!O)<}UvX><j9aY&;t^jLJEPV~60
zh&<}g1?vzx;Jr7cCq23s-R$0hm^ki_h8hX*Fu=orz1RV>H5I+Q*;Zl0K))V$MRY={
z(L$=w74QVdVU?~`ht0Y!NI~ZTQip*QWCR4CB_k4{hL}P^oHW%0i6K+;w0A&S?C(yC
z{t;Sus7&Ospw81Gi3>54I+G*`ByqiaQ@ZETcTw_pBP6i`(io7&09;<<-#Q2+iISgP
zX##5^(KLaHwm_aUIORK1CdHiNRua_u>O>#W&HP)pcBjvv9_dr6=fP$p%6eLaN<vIe
zXF_>EsHA;M(+54euRMK_EDtE&u>yuMU>E~ronZ7SdFR}o=v1l~dP)O%uHcOCNUuIH
zw&%&~L^OC6dZwFRohT>wr2pUJt@mM{_0jjs(>+{xFq@n376Q^3kj4O9Z1lg5xBl<6
zz5jpGNA#!fs!KNC@o)E;E@;>%>oey9e7MiN9ucL_geNsXKNf4Fbjj%vI6deu=XQsL
zK68PBbd^9l<34i>!2D<X%+WV=9#{R?{LV4olkgshKIzH1W5VlWk6kkMl<Q;bFCME6
zLYzZ*^Jmvma&bz1ZtmhaB@1YO0e;LUu8TKu**$*@LKDqh!%U?hU<|>1fQ2i!Zo_T?
zbmKa<S3bHHfjZpP55plNV1BGqA07#LOns#4BhvMazr~06u2;Tk^6`ZF7$_f4s*gc1
z|2z^No3rq3JlN3@dd>qE_RfveUHVrIpQq^u8vdD<_zhm4x>o*ELpPoHO~VH+4st?T
z;#Yx@7<Nzc?RsvQN(P&oFoy(l()c?VmXFdKJ~&HXir43HiLb#ixZ#r&y&SJkdnbOA
z@tQue;d4jEYhpoZ!U(*E;u(f?LmNJDBl^&W&wEL_VGW-oBi*ouPy0x^#UmO%PeA&`
z9S-bIbSxg^cr7qtG;wj)z?@L%ITonS^FtU+nSy<RQ_@H1uQYscu714Xb2|VYZ}_B-
z9&GqDS%BdyfnWXjCAhqD;S^{A$1j9nMkd(#r(6zfHbS^df3@L*0s4uC&tn1WM8hY2
z_0JkUO%z!8isRQ=>I>=8^v{mHd0~0_z>IH@evsoU$4C@#gySlmkOv0PU*esH_rQP`
zvAyZ3P|uJvd{UV=-ktz7GJP+0PrCfr*XUFQ{T>R6%CoJr7zEv~Z7rFEb&T%Www6qy
zK2mLK$s~-w;kRMmG}~G-iHb7Nww6qyJ_gy=l1Wx>9f{eC=zY*IIE~#M*p{%G*#@}B
zcD2cv>H2DuD+lYVO_m(0ul}uyH%wn`GUNz-waJYm_0=XTj@DOiQ1P<#)z2zdj=s81
zxhCkVUr??o`s#Y+%F|bGRjvYk^)}_2rLW$pTsPG|oW2H5SZb}t3wM@ugr4`nRePWE
z=ho66>tmdF6+^%MF}7iT-tcLf-rTT1Ez!Wsa9t$)ZZv%2TKS3a`{(-08N2kBjC#4?
zryTBfwvn84IGL>7bXrNR@BIM9_5$Ov8M_jl>4{KB{aaznJ21`ZZ*Wa^*TCj(==m&#
zo>V8%o2$?($J9Yi`U3UgMa9l-`0zXvhXwfbx}R*Zy?!tP7uXe~FK+lSO(LyIuLfNG
z;q+B_A*!q4peqtL!<n9;ut6%DKFx_3aSaFKBK{CVRG;-RbAiQTeM~uCOZjC2hQ}&_
ztujsSG1EQ`2m3@aMOLd+Ej*llAF*1$#nG_eA>QPr2IHJ)Iz@0nj4^ZdY2`pNw&7rG
zBmg)m)qPC6KCJ_r^ZNj0$C#`>({ix++J&#Az?j8>X-gHke+BXSd>(Sz>=_9e@q$98
zAbn87huGYXT)4-$AblwE8Q5@eU?<G2p!HkMZP<UV#2wLK*iVXZB>q_q`_HoC$MqcF
zA~u^<L3;XyNPHpih+qVtk?<KEDY}FWL+laV!%RYeI%%lGfrymV@L_MWguM4@3QCyL
za4@A)2@BFEG<=AiJp!4$RDf8$8xHo4#Ojj00=0fi|AzhjB~?L#5r2{rS~ZoEJ`134
zvZ_at2^<t74@E49WPhyX*e>|~7{0}koXx_aAt5GNx06SlJ~PS#6!3ro+@hWb_bj{%
z@V*J}33#)@r{G<HcNX3g@Xo<|3f?1u<!E5(0TZRdFAH#T;6DuRk$7{P`Dnbk?VLN(
zhvGc~??HIW?ti?waoqzrseqFPI6R9m2yoK<%`U}}u#^>2B2|BcO#l%GA!2$!iCOVe
z;#Gfyq7~tT5k54aM6UQLQL8^fF^lkF2p<tp;#d5X*wr7Q$VK=_gpUp=Q7nE+1nZAb
z{31LH;W+^%mc>trWBn0|VuVjX_>_PW(c-5>v;GLhGQ#r^UJzJakFS9EDKV`-LJ^Jd
zSqQ%=uv$d7_^sUPa+sZs%qgtgnhLRK?w_O+^M{y~4a`0gnB5kbeF)|fWi#c#QcLC4
zU$3o6Lqy{lTmoh~e}gm1dMgdPy`?A9?vL>|%)-+W+#d7$fAGz{pj*u2Cz-9wt_gqW
z+Y}ty`fP;_yV{=-6BG6v!mbeynwl2qj)~ud<|4`pSoX|=b#n2=RIHJL09c}JGfzB8
z<Q>?|?ceIueTU2)w~oWGcWv3sl_-BSqja%%JwVyJc5h6wU6H(Y6pjV>I@Tn`!tC_{
z9X9{0veeWszaV0=);yhs?TNKc8#c%l9(vGt^ve#MN-F$=S)|1*Qf`Myib&}@jJL6b
z1Cx1Xytz2Jjy>yEyteL$e}<EOEZeCNe}IV32I3AuJQB6Ay&JCW4;r6;(Fxa`f<sTZ
zUItug;ZkwK3$Cc`$QOcJYNgK13i}BNO!kn95*vg@pW$jGQ;~w9$S%xEa|0mkeaeL=
z(8>K&Et;H;YUT2`kF3nnTgLjo{?Ur$T4$doT>p~g|2oTe)V<MPi>O2Gm9ayem5D)K
z$uQsuHssO_=>N!}gn$4G#)jmr06sSoiH5Y)Ivp9?jdTCi5z_tay{UXO98A-<HGGhk
z_&Qz(sEJc4f4#xdF<JuoBXxf@VxLyr(LG_f7-nk)!$e@H`$Zu+jf@|Xh<=K%)5-fG
ziRc#{^>m<1L_dY!X+f8W{@<Q%bcyJv=sYdx64C#}=|-1`ehS{xg3gFI0?aw6x&V~<
zo>*={Wwx-~iWRu`L$Tb-ud9*JcetlIUH^qyr#}SyVa2E?u3LcA7S}xiv4CjV3;4(T
zo%nC@ci_LJJ>lBkX5y-Y5f%TT!*uDwT5xd<*v0AXhR@RU25R1Icv)I^TV#Oxh29jU
zu&2U}Hj{?ba5C98(`hBOzOBZzO>c<SVgk|>0#S?$WIVd?BwW-kJXQ`K3%)0e7@@=4
z91IBT@L*zK1UERXv~)(}CPC5Z6C;BOX-I*GB5V(g(sbcyxOiBPf<sE5X2DPE1RdVd
zu*10FWUZAFPAe^)(YQ%aboyxAehbbDJQQg(z-W*z?Ex;H@Ec_1Fvx;Gs1tN}N5c-|
zHZ+18oK{*oqj8g<==9OJv26w(lD6sJKsWU^Kb0W3sJRWca2ssFAKVE#yrW@<aT^iA
z4Nfa9ozb{SP;~le+ytM8h>Pww$HK#OKNT?GMlExgh1)O-{;*Ea;T;V-jN9l4Zg5&@
z>5Rrrf}+z$<0kk#L|k-#y}}4R&sOE4Mm*BOZKMT%WGCqGj)on^EhmB-oK{*oqj8g<
z==9OJ2|f=I7u~;2VU(r&sd$2J)ZVi!+_EhAS)HK6I~sNvw<!_a;Iz`x8I79+MW>I(
zP4Ib$xZoV9tbw>UR!3<Gu3%DK7D5~As`(dZ`s6%!0Q~^Zo>$)oUz}K-jN_sGp}|g`
ztUY6U{3A@)8rr54A>+|lXtNSA3T9G}$E%G@7^@Gu=z1K6eerG*Xtqdve|yZLi8xtu
zc15<9foBw+F?c56xem_^Jaq$sLGYrwL42KCH;k|Tf^yKK!s1n!9i|9c^TU_rh&tPf
zV~f-Z`ytPmwMdGCLup2b91h0{A`iSYWo&=01tCWIA!t60YgV%$IK>Fu-1l6IAp-Dw
z9(cTg=i&v~+7dhi@5t6(!gFh7w$?0Trq*A_G&IZ9RNR|OuWXiaQvY`s3~QFDsjIF}
zIo2#=qv475p=Ozy>eYAF+-4aM{qd(?6*tS&)cWhbei3z~K;HIo{7)3fnm^z6yaHKy
zc>ZVwa@4=B`-1|xVtUFn1@gYRF^?*cf7<ImPk}t^@B42IgN$G~`&ZAuqChHqA48$P
z|Gi({sz55tDL`+qUH^arsmegX)q3dizRfaHQ>CH6xb5PM+nQx`rpm>Jde5Y1?{8jR
z50@$-8%XkHN&A{*6vnbP%LLjv6aG3rjG}A%3x`#yRr#rhW&Ux;DphJliQmF+Nc+Pl
zRH+qBC|AF@@|;^#sTFl7&tAX#<Ns-vIX*=v%8~QRuNl%Tb9{<o_3*p>Z)1)(%N(Dg
z9ox;4^OyHgD0ZUa@1_=<rBK}V!>jL8RD5gqI{}4a=`TL0QdGSAvCtI?#XoQQ`W!{Y
z*M4*PEQMm~o4*3Zh~g7dci*K@EE_V<t*AIQu+^zhtg86OB1Oe*SDpigAQhje`PGjU
z6(4`_Ez}R2_y2s{yH}WsLyryVP$)ip{_qPFid%}OY*Q%y{+7buC={nXonN6)yuI$B
z3l)lgJD7F7$vcZiKB7?kN9g`16p9~SGZ=oP;)7SM&Q~a2bneZl%6j<ycU{d;g<{7q
zY@jiz_`9JmuT&_$bLplOposNqt~=oH6Ap@soT;v(n9;gQm|s5w33HVl66VW@%rHkc
z@xc@&1mZ<-$^Cq-IN9mqtf%3{P6$0I-L|qCV0%5V3V-pb2iDNh;6RjPhjpXoQ}_Kc
zENC3k5Wo%vWKx^z!fg^f=ljJ!AP(T^Xye}@?cFdirQBwm<5f~_@_|rjYR#w1ufhQ~
zYy@aB{tOU~!$XdrEa~!aQV)~*nh_D#TC5c;L6~ZBq^4s-(`x{C3o*i!dL6x^?1ea5
zGFujUVDKR0m9p&**)&^LX3HYzsJMd=>w-9Jme<VPhuYqc9({lRqrdj{-g{*4_I(5P
z8hiKe-M;smkp11gv-XXAl!wj`KOYGU&&S9L_6Wku*v6KBc7*nR_VxjQIJ!0FPFpr^
z`(g^LA=P2hUUUC$c>S?0aM-;L|2CUAopjodH87k`C+tH26FOaRYPdiYP7j^9GZfB2
zbXJQqi%tNGNv_8GSOZId4|URd?c;;46Vv?OWMdg-KlHx*4%iz*F^_G+$@8`KzHG#g
z{L&Vx@13Uq+jyrU*t;Y<yasnVXVmuJkfm7<%>*3;9PV>;Xzl`aB8}U+Vau-a5={(R
z!%Sb<{GxJ)mI@58GtorJJeVfcLfqoICYJ)-Nu<-vg}d=3^Ghnr=2Tr~8oR0@C<1uW
zEE~W1dv=j3Yn|!;7TzrDT;SSq>*=4zd-$j5h}ULov+!UFP5TURCc$+D;7>wHeDby<
zq(6=5vzQY*(;!D9j5w1d4l(-Zg3bL6f}uqNp3t&smi=yi*`q9YD;#3Q<ad<=jKU3`
z-wnhlDMBI+G;r~g#uP17>^-6qwb7Hb#F>tsi$}t<T2G^nIsnH#Xrg7f++q^zOrv?0
zj{8iz{Z3l{cAU><{m)tq*l830BQR|y%$@#v7>$5g7Uw<AbQtJSA1?WTG;BZc{2VA&
z;^O^4%C(QKdYpU5DSs>GkpmBy;YSWU6?Q!h*Um=Z{dYWj@cbV<8}WRK=NKLv+T{m$
zO9Sabk|cz=y7*b2gAkTvezb$;1%R;=e#7usKc_S+s4=GBdw8>btoq(}JFjZV0lxWj
z;H+x4ugY5iQ>97<bg5p%Vct0VdCF+S_Xuz~4Ytw>0MC8?N%<<TqKuoYuQ?;e+CbQ6
zb>piugQ*xRvVXtMgYp@FXzd6E($MAQxdMxm0t=kn$Irbi+i?4iwJ$fyU1!hIs?B~1
z6Ry(nw7DC`y8QL(-XHc~*vIUDB?RwTF5IXkmj+*te5Ai3O!tdh+%LX9WDE6>Q9E!e
z4fYg@owBW)U;fp=mCsQ|8-K(VjW;x|b-%R5{gN5CG*cq4omLt^?`}pWgBo{A<jft*
zoj|-XbH}nc!HhZyV5?-j*E*8S$z<7P9vg9tz|6zFX^VT4>CW7-(1cgj30~OdiX6{Z
z1E`ypW@}zNcj37kPXNzaJU_=%cLdYk!J&2Sd|g!6!PmKUS|(oo>zsUf>Rf!qZ*Us<
zpj5P77vuqjD*;b39#61u-2|0zib|MgB^;m<f~KegJ=dcbre+o<`5c+KE|7Tk77zVv
zb6twYY`;b}#)mxB(KSsR(p1F<?aRcp*Etbj3|N>Lv@eg)gMhoHXP#A(_N+)+dM@mi
zj^|0Xxi^lnVW()D{*~i>SS8W3U3z|!;~2~bWX^E<Vl!jSJd0V@n7YMynS8o8H)(IK
zOO&EtFO(en;~T!FS9E?>Iin&R-J0Wm6tr=v{qKkJ5e7R9+_Q+Al(2YXjK-As-p}^U
zYcmzEoIB(3vG;?0%i130;*KyZ)=)I#=)a%_wd${6ZQ(iLu74_zMsqbm*0|oy^}O2!
zUwp&22YfBMMn$mjmAd4eQV8pe?|sPh^za?m72h93<Lg2@1;0QQ-8V0FZ^OG(J537r
z*<1haLHUeO_ubZaTW4=cll$gW8jD^+-!zN9Q3|a|;C+~%K0SnghM1iQyh?c}0w+n{
z@6YqRKd&=C;2XZDpl?)!PW0{ER{A5eNL%@TFQ2C{2X5xmS<W~YU4w~`t<~9DE1vi9
ze2nK)JV)@<t!LY~sIG;tbL%?z>R&f_G+v&%0=_6*j=mwn1?{yb*n?JPYa{Sv;u(u)
zBAz@vbuTE`hJu|+XqW&}u*)sjzYN31yiRM)_T_zG!^^$#iXlxk^}hIt*<)+AulQ8%
zCD*f(9>f{3H!*HtUju7xNm!9|4Z$KN%}(ax#8_dxd?ny31z!n6wwN?A)7q{)5o*Nx
z90dBTBn-)<9m1OG9bcl?F!!j}VnHxBNnM}%`VUSBRXH9D*DI7+&G->gu&V=2^c@qu
zi4(mk6TSWMH<%^@yHNynqX_86y0s{6<K_kU`@lV~8&9GCK>yM$9VK*Q9R+k_9p!Ul
z-3yZLVKdz#m5%E@a`hgI(W*~Q!u~v`zSVevwu9Pu5^1a9Js0EXd?)tkIgPn=H_1(c
zvKKy_woSj*N^6Xu{W08si?kyde}+msl<r0=tq`tNuSzm|Q5@;{Ar_3ROhe}|Bh!8(
zZL?wZ^73t=5G>!&PEUV4=LIjTt4DEo3efl?`Vr_2SaEMOFegcO9cd(i_o_fu^Vsib
z!h65D8@v`P$;>EtzcJyFb^>oyCwN#kPQW>&*L7ED+U`bN79Nk25OnjNKGY5S7coA>
zv@jEeTRp|}CTv;`AikL`%ca{$&TNTN8rZw&^)<VEv31`ElQbd+PiT6pf(LJB#y%{V
zzU>b>^|STkHQP;(y~^X*ki#`cm)nP&0JFNEYJT8B;~@6Xfw_Cb+mxAcHAk0WybXge
zVyCq$%)?z_9?v}Cr6JB_f!PF@C$2alsaZxzz8xs-@E>sM@t9U!fSkY38&$h_%eek?
z({@d`-RlX@eFTyMH;8@cSz&X+3C|r7|6SrgW9Bsdi`u2>G~`qLm95hLv~7)h-1x)m
z^)G8jV|u!a=T@+=-Ef3DLaP7orz@W?PIQE#I{zC?J2;$yB6Oz!vIDxkEA(hj!g3ma
z0IX=}PUE4@(61+WwC5Q!JHvMXzN0JrXio({w;TM7p5cR+$y&4x)Qf3iQJ-WSdT5=K
z2tS<(E!`VkV~igH7<4!mt81B}$rG-TXiq7VK>6Yufg;pd+Z9eU8NzU)JtJ`bPc)ne
z4J40R6^7!1{%CuwfH1fy?twhxE=SZm*1GYw<oDBuXbqc<qKEWR#X4E~J5H58syHW0
zKfF`=X|-c*m>+d-91zvTq#%m2*X=)O_qrx|6DOgw=v|j~H3j`p`I{ww3-}l1=p3(H
z!dA)O$K>y`W;~N#UuVAN<2h+RBu`Dq7mp^LQ9r~MTnL#E=l|TP#|3Y9Z;W$qJZnfJ
zgvu>?v){nE?g_wDZ!n!8DK>{^defcDo!DdS9Ix*g1K~3iqX{eBCH@mO@7eB+V`0hi
zdYgbsg*kE95chv(uQ|G6H_AK&a8z~t@5HU99?c?(U(mO_XByqabnOT*Bf2zLW)t=@
z3J!+YKG(9pF!C>j20_^wZo}_lo*UpS-s=o&Bt#lvId)mlVih#hFLVl=BgRMv=h^h!
zRGjj~2$+|z<|YNO?<}_?GxtcPN4<T?*hQ6@+olBA`O0&V73fxhQIe87kvvKl2k6Y)
zBp#9TU??TM0s6Se_$#c}$k^^SOlX@rQ&bs$1(I}<Q}@9mDmxUu6HQE+(S;^)dUnU_
z2GoKkW28yr2wgrigvyF8)1ohVon~D)-x4U?%@g)--<NG3Uct@qxrSc2+enS$9oemV
zVT%zDrx=F}$HH}}h-SDJhC)Mal}X;Spom<ACnH#rvClf`B8N~h{}BHE3)<21oKpz<
zJdO_n>f@s_;7g+WJaK#7oni*>i~<y#X8{P#Ij|P9@kA~VK@Qc90z7p+3((F2tcR0#
zIKzr;y>SnBe1^@t1_vIv77*lCTtwA#cN<MInlXNQpd)15i$7Lob3Z^9BuU>o%*=}Q
z0pr#Lu}Y~d8cxO59iHfU`jd`O5GoC%Cyi3d_>Gn}qyH&ZAmTUFTC~S77CPLcF~oa6
zx~>Q4D%{V}@2|ab+xf#-l{U@N79km<MIrNMyxKiCocaHQ7HXNj)h>9~HI3<Z1PbNQ
z`j_E+X<GL=`J!oEY=eY7QDea@kVy!3XGbT34LWenM`(gLrLUA4Il5xdhO6Fc+<+D3
zFp6IZinzD8P0{5SSW2PgT+l_?dOX>@&PnHq&PFbni$X~XY10!DCd0k450<EJukT;$
zeEAS8o79eI(Z@ND#-c~i4Qw@S483_Y*5<te>qc)F_n^xNUILbN!jf@6h8k<R=Pp&8
zf1{J5vsq0ng|g``GUW(z)MqE*Kz_~9#c}%Rzg#<W$yb4rBz?B0W*<C8{9^KqC12?~
z)ve!@J3deCI2(>Bd}2qhP>(qv*H}L`+ka?xY%w-(1^uAP)4#>BC(sAee)+hyyFHN4
z%ZmdTZ@g8rYiX~sH0?S(08`sIt$^b`hnuz0cfnL*y|Y=HU^#xQ9LT^-lGG^)bf9Gh
zwz=xF+bF@3v{1}?tPA;iKmJ?1ka1tWjT?4#K=(vh$)ge8{2>-RB8S=<jo*Cl1UQlw
zKYs=nWM)l0t{uqgKxyD>?S0h`4`~a3WVS9(41XXVOt|`RCL|AujdD2jR~*}KFs5_R
z1H<_~yZ&C7f3899VRNBvpD89P0P_V8Smu{8=3^g{0c@lTGRuGxyv???sSEz^4+hp@
zbI?TLKzrBjWD`zBN94oY7X^t9!(-;Z8%vL-`DbZcI}z^aUyxl<UXGiEasKSu3U66y
z*_<M}WsxfeLT(#kx#rBrEr_rb7$=UB;-oqAVQQ+f2+8K(mKgphDNdL(Kc}R;gx>LU
z=1(t~SFy09`0TE$Uy&?%(^A0$*;?Q83V2t|gpzXH4}2N#I4h~dT9jb4gjdJhg-F&y
zf<tUU#*9&hA;mXl%tUX=JUEGN+?X*^9(-;f>_I)kHYfOb({QT^oHv5>2;97v7Ua-k
z$Cww>YDo`*eyIgHWs+G@<&x_bVRf%+ZrK7M9{;!yC84+i0acSrmQ*Dvr(8Eu^(|Dv
z<v~as+qWn9xaJpOD4q>`AM!c%<hi)z9D90pE*PU3Lm$HZF3lfygp{ph+9#oTlD2RY
zCx3Y!vf2mILr$B<n8{e_kAT&twprlLc@W?h16-K9`y(wy`=+2`?7Kc7V~NNHKHy*u
z_j6siilUceTjtc%MKDedt2>xVUKnFc!st2ku<vY0K<q^tj3r-WluEq4$jERbqnoiP
z?NN4uXzM->O*KZ8QoZjJyv==-=Jn|3(21e*TcJ1f*5KuOtN(b`@|0TVjjy*aarj%X
zfj^k+KkmZNywMYM;KK8oeam8u9Nc}Ad3Xhe@sO!;y_C@*^fS5(<Ng>K`C{rn)~M#h
zQq3-;=#3PV+Z=|#xC=F8{LgY`HbUjXc7%yZddnn8V<69keg9&Q2D1sV+&s`b;QVEf
zrzLewcdiRip$_|FgRV@~5LVLDF`;}9x9q+pu#=v);aetJm~Y!D^BoYCZy%Lczd$Od
zZvq9a&fs|EmD-B4BQ702cyqQ3C`Cn6*l?TI$*}Qn^-%9+Z}K&2x5}wI!qt-5<V&cX
zVFM8+5*bIWbA#UBxD-}yLfKCLUDy_ofL<zF6-#eICo1bhTcuwYTjLl5L-D0m8t6HN
zbD#a0#hj{3*L&-!zck)~#Tb2AyZ)nE=Wq1XO~y`sLrv0{AFSWM5N)mId4ND-<EQYX
zX0zu#@@TmKMmboatuQjfYH_eytDLxyXzAJGGFXqbsdcmz53ED^sVHe2u2(VquZ8sH
z@K|Ane{rhjjW;%cSM-+P+4>bY0-NQW0KQMk%Gi}T;sI~m*a^O4{v9FQr6aWa|02(6
z7<1TJzH9WGos<2?wWWP)Q-7oH)W;=-X0T}S@C^BaP*e3rYuqeFi#7hnW&mT%9+u1B
zt}RW>OuE|}4`;~tFRqh;j?<{mL^X>lx794b5KE6stI)MDv#?=IcV=$E4KmL3u||KY
zXk<HQW~=v{A&uB%`GK7tT5Z8PZsuY2t}_PLqq7^4u3rfrasIm2`D-xPPFTc2gb*&w
zQ0)#<0c~gx6QND94M}kzkU0A|mAu)88cx(3pN@f&S{#RcL`~MX<dl4U2aDm*`v+1t
zoRp=%t!-QyhS7$DW`Tk>=Se|f{6v(o2Wl}E!o_hT9BhB4zhU`joBpf^5l*1Mjf!qz
zl4myh5^M9hWz%?qH$;#=E?&bm!RB~fpJdm^+K&ZAVAVS9Fs;;NY<>~s?n2tp(c)<)
zj-?23(aEL$0%pYBqoO<6Q5jsm;*S&LynFgoy&c2tvi7oaYa6HprczfBP~Iv#Rcn4}
zNd#12znXnZd)GQMpt)s^b*_kmv!))R`g6>Q*X(oO|1$E_8yoh+fD}%9$@saQa@m``
z@;G<zEI$v2s;m=J9$;_y`lv0YxgCfdjIXUB8cc{YUY3NJ+GhOjZy*aK&<ZEA9MX=<
ze+E)}1TJ^$uaR%%BlQ_$2_ia<SxIrEtFX-oG$3(q`}bx!@mJ6pG#LdsI~&(b<sPX`
z-9X65OuB=ao^g|XM!3iQDT+@~*jKO(0$a*7$J>x;24orsOR$}bNL}k;gtf_nn<GZR
zSmLSbf#Kg$51z+PqaJR<^m=qXIC`juYT(nU9@YVS<I`T>Ru65^OpF09oU9(UupS&{
zJ$z|=@qAQ0w5fWqQIwpb9@<V(5B*VmsRzM!PH$BYcVXE)To2|sM3axD>&9RsnrS;a
zG3_X<4wG1O!I)&$_Av8hY%iSq{I5vw;l+XTp};{o6TZ26<+3*6<8wrDgZZQBSf*;1
zQ-a2a$<iyTStHdq!jJ)2^N8_}=YZ#hfMPa(+)37=kBx<NhnMuCpzSqIrbiTKZE6Nr
z(6AK}cN4_draqwFNl&9?aq;b8fKxFcwrPBh&EO3T6mbIWF$fThO)a>l?`n#b+zx31
zswmx>0Oq}rH#MRzO<)TsfiNM!5B$s8VU$s#iXe-WWGbk1#8~3MDLl-Cv7{LFJ!sT<
zR8_US1-$CaCZpyTR&G6{WX`wO)%}=XVO?E-y6T!agv}ulHd2Y4m^lA8tUFFj=*Qhp
zEyIQih5e|NAr0bjd2g&G&HXDj&!Ex6ij@*P#D#U&bZp)slc=ma{WasF%^)7@T7(bg
zzuNp@gXQ1X-*P{N<D06EdQFc`H?__E)YL;a7zgXn41D;&Xqr{xz<zmsk8zC6s8e;M
zQzD&5iKOyB0tQ*urAj^uOQpdmpj9YLDYhFMpH%~bpS%ew|I?&$Pr7qcwC>zw%;2Fd
zcJ;b*LxB1ix}FKri9s!BgIdrOr4~R?idK+=>5g6~7{8zbP~XNRQPSP`7AEP99lX&>
zwxv=FK3#O`F8DNIL02--Q`?{~LvL=g^yVJ$awvRK+tfR!&1Edv)CsR<=N5=NtvLsa
z#Q1f?&{VvEp;EI&hCo+@<|197ssU#v(L_C~AxD#O9?@idl5FTF!E-|&5Az%heSwB-
z0;C~2Dz?znXB4AMdD=Oo3GMg+<JFDA1SBD2C=!~S+6yF{-N9)Sf`KON3D<oFG7{g;
z?Jq2bj$yK!ebg;j(ht6+rp?gacrJy?KI%-WEwizcx;T}SDXiVF?$SkFG|UL!qAq@g
zW)(Ho>Y~YX8EA2l`dje&D~=bQ60f`-@G|+LpjE0D^0n0{B3>+Cr@_~^qsRFz;fI;H
zQjB9IOw*yoN!^lyCR0GmO(dowB^<PtX<SIeRK!;Ad9|tMnu6j1OVvi0XxL3?yEIc{
zXKbxDbsZb@)AY>kuq_}XNvpa*e=nl7w2Rha$p@P$veh6<?T3)@fvWJ#!|qk9759@R
zy9}T6vAS%sM3=^Rl^LSxqt|5~UVgsbWT8$%5>a{QtaBQ6pc_1A$a^&1V+|rUC}kL9
zMB^WSF{vLIy+M>$u2ZNp4CXzZyoS%c>OBj~2yfqsZGZttCM?=x*Ss@5bCz>iKfUqT
z=OT9?C12)_fh4R1d|-yo)(;15<M^?FQJcC)^?q<|=1o{#yF>@zNN^+8`#FM&=YjiI
zhrBYz{nTs5V4{wKXW0<9_GaqxBx0-kz6y>$Q`2!ZsB`&X9gExUr}n7islA546VNiY
zKWHSH5(yDtJ<vROpw}D6F)G45KX-E!z?`4bA$}e64JNDAL=H9?#27#O6q!U1_?N}&
zT%vxNnP)@3EKAn64S7}ket=FgP(>ru(%v~4Brv9(1jfo9U@ZAp&oGit0^{l)VECX|
z^@PWE%%t~JmajNI>{6C@p~*&IaP%G#T>;hv9-2FW!ED&ERKzQy0>$cyaL**W`zcN)
zsQDS=#-}^1`<nAl4`wo9BAe-Cm1xM&-q1V2uQzUrzWwVk+)&IDm>h4^HvE^|A6`&4
zuOxp#(R^z(K<zPnb-flluApqr?Q&7^`C0;xJj7;KmK1qQ5D7n<#Ecyij?_Jh+KV4E
zp~6?m8C}k!#!W4o@ALBdWA&L|GN)pGv1HOcy;I^ibBdN&@y{Gq%o)OxWJy!Y%FD~D
zBDl)c?GDU-<BSGqY3t3u_JVxgFeG8F9ABl(n5zhuckHz#w+RIq-|}?j`)-w4^OFKA
zs8FXbaDoOabx0S_>Tr##te8jQnCUd$TM;?oAaUXuM=IbHkrElnte9_$W>(lKqIndw
z2*FMfSI`p<vLdB+FGCml*zIXUFe1$v4q_|U6(qY9Hzu#BvI-0;m139UCsHShUImp)
z%y6DHv4_KlF?xh>i6m~)#T5%~;qrzu!6)@AwQQbd5qFF^>2KG1N+ZZcr_tzh8fm0h
zW<DOlt#dwZ;$|_8SO`2V^tvY#48JWmp@en31r491i!N19lt>|l6X%!Q;VUXH^Da5f
zRD$4mkujA8bBk#C@N_ck$IPOVT~{gCo@Qz(-jtH6s_&3vALeMK`EJ?uV$#C-SQipe
z5UxEXLb@<vayW8cxzB3mir(SN=_8ysao&RRvN>g5B_(<UsOoa@sp6sQF>V6wpp0XX
z<E*}V8@de5+ZT3Y-$`!a+Ul$SgVCvJ%ndynB3;ilZ1!0=ra9Mh3Fq02XVLi@!K2-y
za=udHs`>S7C%eq*yKrLgEaN<6Y+BzMlI=M=KecN<H#Q=vg_EnmI57o7`T=IH#$0@1
zdURS3xi<Q*-pYdbX8NzL7ss`8`8Kv94K_Pn+!P}PZH}RD^&{)F<`_u;jP@Gup2Lzq
z8XTZv+1|gDv0ATo{yAGS!!Xr`WNDL|@y4JoOU86fSuQwvAO<f^wrRM7qm_mAxs5A8
zp+L4Lke}L=?Xt=K80<JGpwiN4{8hbP#p}k#XOT_xukI=JU2pn-j5j;+?|Luah`(lQ
zS$J~r-~^NQFTmkBz=43zbAZ|Mwrh9cJyy;_rWE8anLlT4WyN*3{shazmuLhLH)hTq
zzOqW3z2gr@AzjZ3g4QuW?Gni)ZaUV0i>gi@ZKNO)H?yeBJFcSAq3!;ZCj#xAp~<|l
zO^c)QQsMJb^p8{rGEbdOnoZ|)8tE9<rAVZ;y57NUE>N??C@$I`yI%fsHgv9!olj#w
zJN(K`|Nq8&5aQhgSf_g~^I;HjC!YOyRDCcf9QkcOii4eSy2hdJWp6|r;<V?HM-J-b
z1H7l=Y@Z7_u<kCGw@sUYH|uP<`To86c4(f0>`HWNbBfAMfEQ~Mkg2KNMJjO{Qh+P0
z_4G^rALiZ$KC0sCAD`@Ql1;L(0R!TD)Cj1EC}>lInviVdB}gC%f-kL+1QSI<lZ}F+
z#)eeVOIm8N#fmK|eIDELv}h@!)ix3es60xQDi)~J()MDo(w1r}sr&zaXXftSyL&ez
z==1siF5H}Z=gyotbLPyMGiP2_ki_(oT5M@-Skgx{mLgFk60otLi6RjfZM3XfKYH#E
zC;yQvdIU;XT)gwdQJ_n;B9UEgk$M@athV}2n-IofVqK;uu!uFTggTj2%z1{~id{=L
zLXHsDrNdKxUMxo7^FU-`@h`D&0wlAIKJ|iyAHqNZrA(xjmNm?~T^rNX0E0>^!Z0w4
z7S>cOs;8vT=*DCaq=(G|3lVe}b<&{HNehs?wx+nDc_CU7#p)!GNwNB(hRqso1*DjD
z15&Jpp?HK>0!~G<@QNXr>bbQpd{-_1hVHCg7#=B>KJOw|i;=`8R}*Cw$4Q^Z?}()g
z0TGz85P}Q2Wf|G>XNb-5IRvm)qaSG{WBek6Y|_Q|Ku?k5i6ZX6=Mfi(t%#O6tG20D
z6%=BLixL+XbF|ovn11}4lw?TKc=@t=6E&X$or~r}u9UO%MBY;zlL@R>c(x%G82Et#
zgCJjIrxF*429AQG?vYmu{$k-nz%DCnh3il<Ue0K#Q<_j(O5JAH?=gnM55PHaI7s~T
z3Gm+FmFt~mR?J@ZMi~3gj+nP$P|UMja9Ykbvub^Bq@&a)m%;Xyo6nbE_`7Y{-f+--
z6wzwF$%RQc3n#$o+qqn)2>+eAOJiU{SS!A~a`W*?|A{=)dk%kC`5d5Jw)Z~%O7{#z
zq|*;{%*2v3EAlc#zMj4iTi6`r%rNZT7|QtE!{Ng_{Bc;}f<<WA(LJtsH_t%5Gl2d&
zzMpM>uL>Z@n4WF!1tUM&a~d`c%HIu;zP+QWtmdsK82tZS1@Y)6`f|tBwC8qk8WO+Z
zBfnvpgkDJb1R~H|hpC-4s8YIHk6_}lyBn@My?)a0z?14L5Y4G@>}GZu9=Ho$!tRct
zc!BTBIP&;zuBgdR3I3o9{7rvuZ4gKEcw1kN7{goN`_%ZP_4O2E%aP#IR~76EpV9X6
zy*cKei~j>gT2a%+zufKl=gKMFuNzz7_#=<BuTr@wLG~(IKWZ9x>9bam<P1(a&*nUh
z6E#@H(e4FkAAz7~0b3DW7O=<UnpzexC<`c8Vd{LaU{3MQz==PfqPTaGS7+%=Kf+R{
z&CK-jn)Z>L7xWZ_dcr4RN*tb(_RQ`K%y$a}HGjZAryzWo;V*cJtLH&;x1au2kOlXj
zX8Os%rfC|bX}SmVDBayrAGf5-1b2~^zfE$){AwZOw+i!qfneJoQHjKD5=kLecgux~
zT)b%Rz4||3lscgFIg3$nz#BJU63c|(K0y~%sCRpzA2|!-*bHO)$5_AEYwX|#YM=Kd
zd@MKD6(P3}cKc&hmw6Y2y46f+Jo%y&q-h?$E%dRd+lcmK{tMB%hu}S>JBy(p;60fV
zD3*W{mF0I;md4x2VX@Eq336zk<BxJ<6zG)sM6Oa3Yz>%k?f!uHu<!0;Jq2WRLYCV3
zyJ%(*i-J%`8E|5io3|i8sRv-{SLg;X9}%>)JQrnxnu0L#Ye#aeW%yL=?=3gaMRNTm
zM}KMlOO&)uNt#>{d>@2?!t(|vK)a>zKu%lpGw&Z{$$!|39n;wEg>bfNLb=w$d<$uD
zZq|Im+uD=4G~L+IdMLBoW9-;`>-_oiKR)!*CthRAOXgYLU6}an$a%<k>B23oJts8>
z<nD2E@oTA~J735B?I$`a;$8R(e$%`;1FO2L7-g6_n_#e!wVA#Bn+MEG@gDKE7KnS(
zwtKS>rv0gwzPtkZjQaAn%<(Tvop}aDLMh2R@y)3uqwSLGfh`mt|D-pveEO%$tGK4O
z8QKh^k-h)b8^MA+jxWsD@oe<8-{Uj3KQH$um%_i^a_^@ioW8x7Hb@KRwfzr#8VO=H
zbM$unb{HPEg?cbWezg2HVGQ!C)qQeR;v2VNb>AhZ0E^?znb=K|);i6f((TP?g8Q`P
z-iUyPe-2dHh}Ub;p;Rkon;+mC3ypQsW;H2Qy1f*STDLbL2GkJ5>pT)De>n_0GFX0w
zkwQK{$B!65t^m}$nMnzh;m`9U1l^=x0<aaUaPF(d1Abuf@!m3dXianahEvV=SA!hv
zYeav74$ge?r(7giRW}m`oKoCOQ|L3_LWHPX&cRn5K5K)TB)bCBn3T(#sFSf7yB+R-
zxXtNZHWyN|vBo-(_wjGfeI@I)j$%KC(SDrskKb2=Vh%zvXUUit-bT82qgS-+Vf2h#
zM8i26^RH;j%Q}N?8=wi=K5EX`7CM%4=)duT`Z93_9CeHN79wHN|H{@+BTZOU&}q(8
zGf3u()C7At`EzzL6YS^8EhNDDNH!2+6Nlyk+qC8bOkBjoyD)hJUDsZ9xb@z{qB-k<
zd$F}6a{pb!yFK?0<x!gjRfn5#B!GF>AcQE2h5?5WGO-dnk>iWMD>?q+&lJZmfrEk^
zU-&B<$6Gt0RSz0f2d$$eJUCfGmLEj~rFnRkaSj+&2e60@nhh}`q~BbInmDuy)lRHs
zPOR9Qv(Kp77l)M-r*D}zKLZKu45txEw~vgC)^`Q4SUEyj?}_C|m2@?xU%L-PBQH^r
zDKwWsni%5@#^@$uXw+kRvClrlv##u4<Ghs4VsS3uOx(O00BQIiJktO3P_kdb*cSI{
z;JO)bCGNGjH{g90U?<=@zzJK5#WKL9xXbX2Bd&3w(nJYjM5h?!5SnH!6<S)UG>c)S
zSaIyb6pSfaK`=)nKLX_FV;A65jAsUklPae-F9_FjP$O~B`887PMpkhni4?ydfwu9+
zD8V8n8u@Y2@?|L!O>##x7n7VkPj{n^m9zezg&-x_5K>G=+96{riy9lNmslsvR4!Rm
z+cY+=v|}q-@F@%DH(X_L77Zw}0`;1vycT@)$i3%-7EhO}sinRhSqpvp5)^jVvNteS
z41w}vX$f^5`ZXvKV;F0~{J{ska64g5gw-j$_d}&((Fq8QEX=Rt*vIx#pYB;sho-eD
zXRe+^+L>l0y9y{~t&snPrI}GP9JAdyc{D%GpRSGS=~t1Bw!x9pGH}dXjB=4a7z1Wm
zSE}Wg<XoEaJmMR4c!zHn_TLryVMTBQN7qWGVfpg0wvo@gVS~xtAkd;Tw&befk&snw
zPeZY&;;%j28@Vkdwi;0K<koIzm#v)g#x#94S5lYz<gaUzZG&W#9;Ayl+KYf#t_qW%
zrsEUaZ7oznx2eY`Dj7x=dWLn}ho~6PspeQQ?TDq{93M%3)*S>w^B0%HjN4Nux{5`G
zxfw4{?t>??^-BH~%@=G><%17HfbFRV@suN<Og!burvrGJfTtU}>hdLuW};xsx*GXj
z%Xh}FTP@$K_|8-}bm1gLQ7an7Li}AI#*0hESW$zg1rTW=rXajtgmG6Rq+Z;OSjD0N
zp*1?3&$IEhQO3Ciu`p93u0sg%4kT`o%(Xu$gs71D)QUy@$N@Z+Wr?KjL5aIoj@cU1
zr~FW^-zR8z1>orj|7^eaG$b@-VN>&b?6Ikb(_~gST+e*c6N5>P^CzDenS^oZj%%N$
zOTFRmZxsCpb@=;$pPk-p(0gZt+7J|KY;0(h`J^WVlbYn@F4weKw653hD>eKM;Af|G
zaOm2Gh2_n+U}A)d6qzv}{Fas@n6xCPREPuk9?YB~=Uhsv!_}^bZdpIW#X9k!ufm$y
zNUDD`_NHZTJ_2zvhK<{X2E27A+BoQ#fS18(l@cfYg6t{xAs_aO;w0RGGqmt!l#+BR
zdrvGzW@(ffkJy+^rzkFeX;D+vq$PBY?R11)*U(twk-b$cURlG!TOl|@blME0RbG8$
zGt`E#ctLd&+=exFgcT~27Dt%Mgub6>CKW1^N_!?1*ao%$6mq&+Mr6(<4X7jp)>wgA
z2*hr(+J!Z>pj`cMJxZ94VD8cK2=)8wRuFy)-XoVXM=@4myV&IuJaU;rG_XPk-aO2f
z_w?FuT>~<SvLX|i=)=%FVyMVHw@}Q%QE+M6jLEl6_r@mOSi325PT4k#x97<cHI*C}
zPr4s%@uE}C@$t9{zCZEE;r_&Pt`TsXJe1{-_0S)DtcCu>bI$80&v$|o-;pHzQ+xel
zlb{pVCE+tA*+ySYvUv1p+Ttax4>^S&%QtDfF`Vkx@p7aD<wJt}kfDn&&b@X<d2$X+
zJkgXxCy#@S&aQ5pRXdN~T)F5$uI)fref7ey5Ug9zP;U3OXp?GYkhC~sTE?DMACRfj
z%IFzIv8Z|#P?RIFRVNasJz0D%!$}S3UC_++KswJ%t{zckP-#=*i>21rOwqau?H@IV
z)G|2R3Pz6_u3k8g3SWO-ikkOZ8cxliSg8V2nymOU=BpGbQU#_JY2ByMr%!2;0Wqws
z|8!_1sz~T>FqTLUBd-jQqK;0D#m@a9!a;)-&PKuba}XZD9GC4A$xg{-g!CdzG+?Yl
z7Wpgxt3;$tY0`Ze;&>8j#KWY6Lw76+17Fd?C5$W6?nGK&adnd=2mMd^!rLX7aBW<o
z5);2SA@MlYrk&O#ROI}(<N^2c-dfwJW*k_u6)JpELjxv>_0kW9??8BFtSdmxX{O!y
z6o@K9%|XlSWow9j5TU4MrTo?A7GhcOqY{xNBiA<0uclncJ{(`x;tLYQEwGZ(gsO_R
z9JU!EVugd8V)Qq)3+G{F3l*UC0rH`x-jX`0AIP@K2D?yO36QZB%*M;$(LXK`gK?m(
zL{wJ0@YZl$j7dZnv_6Iw)ZPJuQ8yFSqf9|}xmeb=jEboki6<IW;PN=44wbF2DAs^i
zfdJq1>f70NaCv37m|ipq7HTc}*o2B7A`!%7G-J(A;t<dxNV9S{e)<vXOGJ<aTvv~N
zxj9_iu!t*&aKSc`4Wgg4$hMC<na=Izk|_s(da&N3KCAjJ+HwjrtS<*<R>c35h#Y6!
zYa3#;xTIKw6vI$EvueR9NJnjDLo5@Un4FOiC$5qZH^os&TJZeNg@7qT=X4Z_U=bEe
z+)*7yU2}uIRHaHsI%A{Wdv|G*lDzzFu{iQZu{as<3EaGP0n+A9wvJ?3SxAhi#e_2M
zmDPpfDcnb<g~V#y>+vn-^I3Kdm?v?{KdJbOLeaKOFP&Vyu!g3dEFmqkL8Y{rSs4}e
zck{!TT<Al5@RycX&%3?)*4lu0A-7Pxfb4J`2G!Ys>G%pZhaDfSjI&FN!r{jHTd>#^
z+{VN=(27*C4<)1{$qO7)#V3&ofSkq-Yq(K{r+`;kl_bhq=E71Yx{OGP&9iigAcKZX
zs-54^SS!~_G|L4WUPMA+Fg+ZXpioYI2iTx3V!fglbNgKN;)n~DP$n{q7%|!@>GU}J
z+LoTGr=RKbWvvae=ilTNg{Zp(1ceO6YLpbVBg##>ok0{VwP?mZ3SxuxeBn(ww>(FI
z`xRKL0NJ9%!ezoaP05KKPPjw}*ri4bg-f(FB_&#>Tq2}vA;Y?--K@{pwOqfC(eMgD
zwvTlvZtpFS=Xr&~ezyGa+6T{*-UAWgXm1*DO@(&#VLc8Da&7e;wKYoIE|-zgQLPMw
z^ynI0CdsfC<jB>nBDIKdSSh$jFV?Qap<}6(FgYs+QvPdvQfY||ZShm0fokK`!atFS
zj~NJ&|2rpdR=uO%SL*P=Zz<kvMb%oosVomgfBQNaZwjX?-BC9qBv#<|;|}1?#$Cqr
zxXbZ8=h~3y1Y8a{8gK%?<9QF@TEK&VJ-7pipNkuARxtuJO%)$Urb*}(4@j6HHc6N%
z-j^^-ob$GFD_2W6NIW9pV6k7qpvc+7@7dy735SSpN;p*Pl<*`G057IO-%XZqm>4cH
zWF^q_8ZXF&sOI*{CERRYD<uPUZ5FE9RL$#h$%w@Iccf6Omu>ZbnPgKY8nYVDq9q?h
zn@!A$p;k+tAo-esM5Xn$3u=&N^to<n7;2@-m-Rrcfg@OOFiW_;7U>qaremm;?rK?g
zIY=k1l-e45@(r%Z8EPfZm(@;ERr$Qa-^+=GI8G+;r9_H~3tzm>Du_#1NH%%2!ux_0
zHNV9suekBO{$zcHlurIUfiCJ2uc-WMe^M4nnI4+JD<Bw+8Ij|c`bya#h@hl)-U9TK
zH3N_eXf?DXnle^mdsQ93rYFi)IK-B||I&4hY`v%3(w>mC2<oTwSTm&hQu@=W1cwSw
z!SAIKyitK=3j9QY*A)1>0>k#onE49aq`+4d_%8)sQQ!jwviHdZ;}j@YV37ikC;&x8
zPv0V_FkUv@+Y*WBK9I_xPU<vA1Ssc0Gr7Wketm6?)Y9lEjwZ$fA`Ee3UeJ<@3q^@*
zG(R=gwEBfL>~+!8#din5B%{zyW3SZdN;QVQ)2kQ4Y^$Nh%5_IG2`hn_TW)HJFwqAj
z79PVaYgo>_*1P7F85_Hwo>3xtT`}3l+(5L`6;W)wzUt4gFJ0qcxCY+}T&bkzfP0iF
zwkStkqo^fvdBaLXp8I!<Mr*^&0#>d|4IusG(xUuRq=oJBeK5Z20UsI6s)U2tC1NlZ
zQ7(ZLr|)<6@ssuYI1Micr2S*><4?r?=^auk>pN9j+0$$9xP`s|=BMpS6-0vES}kmr
z2k;5t2?c<Tveu&!$F(A50hWxA;|3Q-WX`T{s=uXPZdJ+sgOdlV_4{HC?*k+c4#0H!
zf5XlZus2SU_6D377;!X1*|Xx|n*gnti>5v3{KP^kYr?4w=^Vh7_pXx%{sZd0Oo!hB
zDCGbu%;Ld`$^mWS_?u)jB9B+l(LF0+hRDS4Fj)q_5)O<-;SOP^ES(o#>D}Zn2>B$r
z+Om=(j1=LwREbBF(_vxt>{AsIG&qff<?ja)={E7i+!~T^<P(1H$w?-eSpq2)!pUo|
z@RT7wWVk_rRSF;?s|KTI7fJPVlq@SZX{&}toK;(0Q;q2q>JWD=j!4&G6M&2a=h+{f
z^?fs}n?i(rMTdVAFb{O?gxFa1ZRV67*S24OQmGtaTH_wJdmqyIaR+dZz+Hkn8@IZ^
zMiw6WN@SKwqk)A*sP2$3=$|ovep9Vnt?m`y17TB9UGGYmA<hTkH2AYbrmO{t0dfNT
zE^<O6E;@WauAGoiuH=rBlj9&sl#}s-taBL<I50T|1gwvATZvd-O30le1zB2+r~of0
zfZ}O(M#x{MTFi*@S2NcoPMYF2(&qokDI+)P_d*Rz0jU!PIySD{rN)1x&x1__Y&_a}
zkn}MhtZ$DGCOK|{T9o}!d;<8j0zgX^JcVp{^~Hj<u5q#?8BsnI9(3|yHLQiz2-~Q`
z-vG=-Mmx~tt+vwNaq!W7A>lR-zIlKD$H95PLF>Kq_trRA7kl*u(hh)AjU#~>^SKj5
zc*T35mt)s6QI4r%sJKDG6!a-dktu_Rt#G2m*_TyM%PHER3hiUYD+TH5b2#EmY#*fN
z3o<5|o64Ea?xqr~8?BFH#b5=lf+CC8$8d+dhWL;ieCox(GXM_qa*E6#yKpvPO~_xI
z@-PSEyB35!uEU=N%mo&^?(9!rxnqfH7k1rg?<Ysx9TFwDtuRt5X|?p{pi*nlsZ}Tn
z_8SmGeVGX&r-}@&q?0YniV0N-lrE~0qt<B69$!@wNusJe4w6JwNnWNqDI~kyR3B<@
z1!Ak(ORn<*R!L<a8Ze!8XX^Jd4Q~O=MY($*7gk%o@&4ocw5+;Y2|m1loBdudV9q`8
zUE#LsZX%v{E)9uA_|}5^FmBc-HQ{39&93Yx5_&Nf7$&RAvSX}*j2EQHr8_w&3*qix
zB2kI{B}a-lcL*DWAb--`$sj9L{W`lOc!0lnNY=|-1@2Mc2MPcwJ0DEoxfnaCa^%nN
z<6OVPAwRzwGovktk?$HKgQH@JW%C8aVxnstKRL<OHSqtw@05q-`h9|ilK`dNYx8lg
z3Lf7MvgSvuwj67-DPksYvYyk#VAT|>8$mNBEXE6>cB$B9k{Y*)CB4|s%Dxgq9)*Tw
zN-~7nice@T2Ngh796lx42r0F6LG`UoY*+4fX@<;?jVjQM^N$DNeB!1>)!}({bS6jz
z%DEpuzWHlz=k~q&d3cyD4bY65+e?-#tiGdu9-gLSCq6s}Sv9wFhFH$k+6BrZ763=^
zj7sIr;%b>%PJ+s_Hj1kkEVu;|Mx5F$M0SqLj>Y;d%+0_x_$*gkV=GG+G*n|M?^X=L
z)s+EIiRlVno(z1kFJy`a+7~j(z%0acE@YCy*!p^FY#~!DNG@dJtcVJ#TG-rFTZ6MM
ztobufx(dRf7uFIlD`>n&m?vXnB2s#MWW3UbLaaTEa-M%hl7dP`&#PS&E~Utfz2Xv?
zwe^P${{YjU*RSNGt#q8&+X(*h@_0(iRSC#UPZ~K=G)IMSmQaP1=nxwJDx?@8OM6tC
z^Y~cVDork93@UG|y|ccdxk-|(K5&rY0cXQFxdStPYd|*%^7x7x)x;>)|9yb6T#%$J
zrS*+XVTk9gP#TavGG!3b%PSp!xzLW6C$qe{sV+3B{L7bJrk3AP#yvsIG&3+%QU2vi
zzMTI>^$DaoKVACekWS_0r*z`_^5yxe2y7=R2m_7S(mqed)H@bo1O1mnz)F=!X`~b`
zsH|?hmE$31gKNd#&_<KgRe7{jl4twC9+|3>X_D}y+=VAkfrm_3_F<g9Jc70V2&>iM
z1|a8glg%gRU>-SsK6&+J)>sfM-H?x^1VDg&&Nv62S^C7!fs}g!-T~xPu0W=o!kq<J
z1SrI)B(*yWyPR=q0JRkLebY!$iOdrA3oHYosI9|I!6Yeh@;5HpEaAJnR0Po_)i11_
zv8Z;ToYPn9Wav+DM3*jK97X^?oi@%`rI_VMKy)|qIO&?m!aAZDHjd~qku1{-tR=F_
zqN;y6C{OQi=~+>3bG8sG6kqHHuB5tAYI|%wXXVN(4S%f#s~-D;RT3;kI;(Wj5-g06
zDUkt!Q;`O7iyP!xE!HjqiO7?MqYg0jAUk&z%*N-*ERAwPwE^lFPs}3#cZ|r~_=RYd
z;w!FHNm#066-&lUiX<)iEu+Xr0zYTrHw0|iGbppjmbFJ@?n5pCbsQG7O>-j`Ea6hC
zvE1|0YdAQ81#JZ8AwJZ6idc@;msX^;n2wdEVo9XH>WCs2+*s@PbbKxfic$#lDxuGr
zaOf`7slRA4Hs~XJ47TYAvk+xaKr^EP6<bD<24+Mt#*rdTb_;_?-1yI!KHzi9M_8i|
zSaDQ^w*$hI8<0L&eqpI?T}j>*YGsHjpX};TI~1_&Qg;8fjpYrCu$T*00BV=LA*C#%
zR4q@Ey^tkkek??RqkX}AL}cruFlF-ign75?Whho=a-m7}9UL%|gY3gHHAcxtvAeuP
z+J%{1ky3q!)>Ui|xrm#ExD*lH(z8!j&NN6q2!`n03A|)Jd#cRnT5mZ#PZK`@%c$)>
z0;IM(<6lbK6>0dQhDS9N;_M{akBjzimx>QtK)_Uo-s7nWOHo@<y(dT})?^mhh$QFy
z6d;RlRF15lMCItf<$?2X;w5nXRn%55@FEXbf>;a_7iXzha}n%a)L-)g9PgmwWs6j2
zJlTG!In`23u#Rl@U=<Xrk}S5C7kO%CQC6~wWS!8W2216XuOET-D)ERfL>J;%nhi7B
ztbR_kI_NB9s5K@1pm+hL55U-n=Ap>W5oyk3lFAg!)@vakE9pJ9>!ECNJEja7h2$sb
zA`IW1+DNvu^yAk%o1~k@N9XZ6>K@>q3ZQ~0kP~!QEbVt8S`ds0zznO;Y0?57$wfS8
z9Gs0|N&KRZDOKv?a|`UbRzMFRuMyh58;Ffid4*jk)WOP(c0|<o;st0_Wj0iVn{R=P
zP|>n|XOvbo)i%<HjzBA&YKR;-U{ZjU%?6%T8fz~ICfjJK21_fd=huc7&r?#?=vaFO
z4vs}>*jy_CrE!8$yW3D@q!c(u6O>ItGDQ#V*t%F!m)7NsCV7f+xm!kLxm%sXUy|}~
z);Z?e&sEzS3M9`i6D6Ut^2t+*%Ze&0a^+Z3;VsB@eyF}{c70<Q)6dqDXz+L$$mQjf
zhOFX-np#@q7~6>!<Z8bHz1TyFuy=L%8J{Svxz#qev?$Q`7<*i1X><*uHO8jT#TsW5
z)*wzD?tQp##=QXd9^6(OMH2|81aJuAlmIL@6z799R%$sQEzZX^{D+3c$5i-ZfUjWr
z(eD5`w9k%Cb8?@_C_!=)E0wERqUzTpW{LxdmZqdo&2421pWhKn?t*a4ZOJwD9-+rO
za;6J%B^T|@6qQ-WLnv3U_a7nW-}<I7n<hqo5neAFMUFD7oI`uB90$^lb}&F&P#HzB
zW}V4qZFO9#QCla3$t6pcUjz!C9RwA;17#sYEd@VbQ1o1UFwP_`Lutn;HdCIXbJ(nJ
z3cTC=UzYGJLtJRxA1Uyr0zC?x^&k1|8U+?A@Erx7Q{aFCflp;j2oL=;N#^@v3Yq;%
zo~tJ;h>qRzRB(W_ZbUM7Po`1{^fAz<lk18uVD|wr*Od@xUQX>W2t7G_Jx*O?FCpS>
zbd854EY_M@6%Cf8i_?(kxEn)JNObPbML!NIl76TbM1kq$f-0aDoOB@49)enMi8h2L
z5>{T*l!GgZM>;|kj&Y6aP=#UzYR-O*LEo_!VQ=g3{{W(@gk2ZDaAn`RkSmo}Kn-&}
z_U?(Lq6ha{q)`{TJ&LZ<Z=5DpY|_E>Z3ap?F<cuBN2f3}LOtdclL4vs9@X$4GW_F6
zs>so<X>2}-F6&!zxy(D!&CCUCF-51^PHY)#g;WA@QxMdAj%2#w+h+Cq(0tb^lrW@h
zbGHLVDaShg=y=J49nh=`7v<ofw9u{`P;S<7x+}jZ4Q`4eU3k8QL{JpZDDaK~pDK`-
zBEL;hV4(uYX!6;`V!3O7tXGxESrRQ7&L-)YC84~mfDrL=MuU}S2@oS~aE+8@6DPLD
zk^)y$&P5BA$s$D;EdW!#Yb31W(w+m1Gr<h&D)C^w71o;F3Yg(l;nx5{I}CWPcGrTC
z7;}gFTrJlum*HD~)-2Cy42f~LmoE;9O3e4E{S#hL#5I;|q?`t2tK>phY65-19b&~u
zlhb@0En0EY<ODB6=pfET5^NTRsb-z>XW<$I6F1sm89nbTH3)@4ObuFDElp?OfG*=E
z4b(R0O0@aR%DgE0f%?MwkS^weu~WrK;t>glink=p5kq|pA13AkQj@IH@UJqQlg?_U
z-<ss&Py@3+VA1gwqjDKxRH+o&mmOaz$mTw$o}G#9Q_mA+-Sjo*?M!Q*^S(ybX+Kx8
zI?>qIJx`O`D;EwPYcX!rG^(wMPLjZ!S+C6*Cn|<owh0tJEVdCqb;2m}rQj!<i+5)2
zn2TrI)9X0wwaX^zHXDz5!>=F(l-?=@Iu$S#KwUGhIy5w1PQB!})|OKBE=9YFivkmV
zh~g!B?J688$yq|~-CX60ZV+U<8f&Q0A|Q@*6|GOiiGgwY>^s78VXUZ0i|L&g@Vp?s
zM7$2@2jn#zkga*3YeY7lq55^VH6qkIFPvH0FTHd6S+EOidnID~wkZ45JNnXEg&}I$
zNCVI6k1oa<Qd-#%u3n&Q1xvl4GR{Z&xRzwN7^)2eJ(WiWUMZM;pY5?u^2wUvw6{m-
zJ$y@dK}((|5v1pl1cJ0*fnEi2{W1_GV{UuEIbKNw$$wIz5TH6Sitn1LDJ3gTEf!%{
z3>j#k^X1$rWpPDf99LOf2iojcE><@4@@bd}$X;QfYfw8MNWRx*^;i49#wdQTO&!uM
z#?5Pl-p`~rIkUzE>DT*`Y{4ugZ4eB#^-0T|xaOK9Pc0Il#vWAQ#|j|gij!f}=!~3I
zl@7#K^Ssg3^!DQy4y66Z7Ca|Ol<LJY3bGoV>8yh_`n^TNuK}J&9c%#kw9VbxaAoU>
z*8xaIdsCDD5W34JNY10Jf=<0AAR5fFxp5vW--Ay8#}oigZb4rLx_CKR9%U$_+?XUv
zl%b2Wocvrl2(1obSpgOPMZi4dVV7zDANyWwv;06v{9o-KbNYp#^f;(fiV#N7yo!3B
zokCv`g&^Knlq$+l9Quly0ACR&i*10kcydu}!a0ES4ULGZNO<SD9GBGwuR2PW=ptHy
zL{THhgTsnk9Wahqa@2y2qojF8BQ>>0^f6TGmkY*`LH}Ja`%tE2E*J;OI2R11z-5%>
zOyU@2QMRIegpIG1!6b6O3rQgN|55;4X1tA{n3q%TZO&~v1$MYba&ZbkTn0Paz>1)H
z->1X>0mwFx3p%a!W}SaNejD(=mt3cm{pG}UN+r@x{1bTq)_~Tj5abF8DY$BVsOtPF
zwKHYh1b^UiSxDWPYjO0`WkPB1Qy9k!7T%@m9Vp`l*yO2R^BE(Jj92pF>}ucz--7rk
z9m+^|*F=<<S6q!NOmugN!fa<9&KaWK*Xr<1fbn(MA3ZktuOYGVefNHWw%v*DgI(4g
z5<7sKb@(!9V;!Cfn)&+<mhz!;sI9@i5mk+ho=}aIvYaPUjrp=%$%YILypCPwINBL`
z>UQiPk#*o!oh&1-gSt-S3;xU*s_JN>hLZqKr0-sjPA*yB{aNaWbXr4SIrPRt304K^
z)?+4nFpHN&jeQp>AkDv00BAW%DqrR%)HqDPNuH6zoH+Vf>>ABE`Vpe=B&YoM>i4x8
z{uGeBErWGu>9GE+e-~}ZdHY#x)1$zf`!zBkMRb8ScD^ID!!oq6`HoukJ6&YLc;zR=
z@R$QajHm-2aN5x0?~!G*#v=^1M$}j-j&ItZ7l)3V;-18K`xZ*)3ptk3VLk2viM*Uj
zXK)p~GmQ(DV2n!QHY17s8jbyfys|YM4tOFmy>vwKF=gQ?@HIpC^v9PKKPDh;!*Qw+
zZF+cKSp-3v(;Y!9RT5FY1(6}j%M}1N#>)dmyqv7cirem3<{B%LXVyjcacl%$uj<0o
z*+0>hs`S5Yz}G=dw^!6PG-5qqBkCZ~bbHalChntCFW1%A)T)<Y)9r8~%)=a~dbf8m
z9<gY+v)&Hs_Z=F(26!U%w(M~7_Ok4Q6Ynp`U2E@$Dvzu>LArIn8VhFO+^P>Ee(K4V
zh?AE$f+AkdddpOpWWTx^@$Fak2=#tMhkpb}K8-+@1JNu0w|r8YD`SG8ctzUvzDwsP
z7V-cJ;Gz<yB8{>`=(P=_c6mAZ<>y3tIaa6Q%MQ&S84Z6XVm~miTn$G8o`_sMg_=s%
z$KCk1&nj1Hd@7e#D^^Lm_4qUz%(5jBtFNF~icMVHRR)51IoXsEMTAdBG(TiK{8@LZ
z;?raeX9J!HpB7<HRx&>2{^7ImDMi$RCJ*{4YdkNPl9FEqvWMb<K_yto3U$=5&?`B`
zUTUo@k?y6Wj}8ltq>G;nW4Se-qv*&RH$KAy^KVIl=e*M-yQe7tKKpniOlCB9cmwH9
z8HWP%a@NBT=^fO%S-J<AS)ps(colx5YplW1j3v6AAj^K0oUY#UG`s-tgz6TVC#&1f
zZs(~DG<wTJv@S@y-dhv@iN$oQCZF&;j8v%IUn=lN1v1Z&f#3}5=Eis3>c-+X9oEFX
zpwC#8J*uVUuCWHsSWsKk9OemkjL4z*n8b*#o=)`YAl81BoT=VT9sUvEiPRzeLYqN_
zo1g8o)ge|Nf<}&?hHGD^J}Z`m&zG4d8|)Oy!dZr-V}69?);>}jI&#OY>e0d8g9J(w
zGQyffhPU9@4|x<_^gMuGnSG4g<8tBcKdS@_#1zlJ3dmKc13BMe@zmJ)Z}ge*e5<Vp
zbNbI<Q}K7!=s%18W|?`1s@WhG;_^heO8ujP+SitgxPekm<>;kj4EKs}f<`*lHUYjO
zQpF(&)37{C8J7AmFZ`4jh)8sy@fa|h3oT~yv+`i_`xmJ-L5_HZ47E&tcma9rKq;I7
zOcT?;jwE{f+~6X|0WGS&1o^J*U`;M-Cdn?X+YlM)3<W?uj|A>S;dnU}uAbPZr!p6M
zIx#|)jh*<q88`<kwqfx~xOQ>ar*Uo=S;*8XgXqg3F4kwXN~|QtughVXmB`pQ1>OSd
zm!UTTBZB=eAkbIZSX-;GFebT{HLbRGk;W1GasZLDN-(n=|HZ!pU((Urk<n@ZfC8g*
z&W#W9w8Qvl9MQ&~-^x`bvYs)Wg&HNHj=I!Y$hvc>IT=}==7hDPu)><K$U>n(S$vo|
z8**x;)aTZ3H*oATwo=Y0Tt(66VmSUz1EKz%20lusMG4cN<xF2$+}spyxFdSF-&L$0
zUPQuk0yPpo63KGl2wqfK+PrX{MZ$3qUd6gCBue`g`+<t4s&M^+CTqW(=|ZC_BmXKV
znS(|y3(++4ku;7u7v((DNmdMp+-vVZ!BY`53O-6+Eh3Jyli`4?h^LY*aiHPeRE>s@
z*jPmzqm$vVt&B)O#pOL36(31a9&nwP43~YwxPzuSIH5oz;-g1QCZ6F=Ji0S*BxDoN
z3Hc~_vIlAHSN?hG{eTYt8z7fJ4`iM7zUo4o9>**KaMFL`5vNsJ&W?sgOVlh%^>23a
z)YWUDE1>$Ju(-N;f+R`zek7VSruT)4g;J}RPt#L`*VHboZLFWyG`6?_yFKLbnrMdT
z4!;guTD^iLxLj81rK@9m!@iMDUhUHF0Szwz94N2Wm8!MGI{?{Fl>!I*sXGA4v+n`Y
zX0Y)N{_l9+jS|F@*lq1ZYFoE;k?ezLWyGq%E688+IWF?0f;6R9Hb~v%6(v#<JkDr^
z47IvA@*`F+E@YB{{izqKSX{ZIAlGN&_d%P&@dX}R%^$mIm|y8*L|jyD6zV=JTnqhT
z;PsEJjETav4dMFvOXLp%#b<=2!`R70ms)zI{+R>clyL1G=~`^jSx9L*IUZfT`lSn1
zUSzyuWwH1tGL|I+!CtuvTjQn#B96q22#l-oGWzJzIJ4_4cRpYTiDJa*3U?*q22Y!!
z>(`|Y4vs7Y%D78w1+B1G6GyIlewFfsaCQ~0T|i&#x4HvScD}P6jkushR3hwt9sV$2
zHYjX?Y*{`V``H(6`#-63DyNo;Fm82$a|!!EIj~_1O;c;w$Xt(j7TIz0#bH3Drp``Q
zcJ26WXuM3UL`K?vfvUpAv2+ef5^Zmp%-(~|J8EN>2R5=a8xl2~Bbi5#AJ~`UD)%-8
zN;WFp*caEOmRkgjF)df3dE~SLEiDIKFH0c{C3^9^5#>1f!V<9^H?QdzmB_Vy>!CRM
zTR)qpU?UgqamYIdum`tVKg3F)7V!bDzgta=GZ$Q_D(ees46V*uMWpI5x^xIlhdX&3
z8%U{VC`5j_2N+E^Am*GMJq)`1TXKy$&V^EKA4IH2keaCH{(2mJ$uLb1x0}i^o(CO9
zOUsqn%~%*sjSY(Pz!u6;yM|jd?A7q{vFiH*K&tp}15Sg=e-p46=}x*>$zMprdo_Gc
z!+&Y`#c?X$LmKYW@PbQJ_+ky$X!u(V(=JutXKDDLhHq$i)_C>3O2ZBff2ZLY6V&%f
z8qU|y(C}#uO%2byOvS%l!yjt6Q^O+~j=EgMTdLtJ8eaGX75-xlcLTC3OoKSGosO5y
z>u982LmxIxxwV;*Vhn^WuC1o{**c?b)g!(rY7%34oUt+~4|0=8R2n?u3fZdT(8nia
z--`Xeu`Y+Lv0o|6p^Ot!UY?j|0P4q4B+Lxb#<TrW#wfv7m}n(9l6eG<aYeLL`5R4^
zYEv-AF12pLJH3g^S*TU9c}T6}WqPW)KGTb`35BRh_w<*_^j-|#y%IGQYaEFv8Jv`I
zghWQ>%M^a3m{q;-R=o!_A(><d#78EBCh_287pahslP;5004vs6dHqbwicd%j_X#+J
zxpM3(q@jz8dz2i7lts6DVr6Z{$~;%%$Wl0L#pVWuz7WNWg=TT8R;C^_F%p-En0tK(
zg4iRjO@iroWt9w1kognF=Gyl1ByB$WQLG9`PzjeM#)*@}%vDk}@M96uETT-QL}{~X
z@4!H&zXDt)bHWNCCSpftC5&Uav=U>IFIHks8TzQCzEO>7Yy_0lF2Lqxt88&}CkU5X
zEuN(k*`z61Rizc_83KukTau&lGhNj>c7!!n&kL)<P!%Ph>Q7;mqD$AvP#TFSt~7Co
zEParnQx&m^xur|s!emLhANzFc?0O`w5_B>&Uu=Wm5j#r%sdt>Og8{h`92$C71-Rqz
zV`S-Mr2pF5yL5<0oG0<5%A-`QG9*Z;mgF-0T1?V78c{KRBd5`#C;^e)TpU`w2!2(s
zG@dyubhLSE&pW0Rae7kyLbyKFF#UK{qAOAsZN_{{ypNYk%aTs@85@S`ZnMa!0g^FF
z)&mX*x)Y}XM5{D`HM%A$F!`U9$?C`epFK_-6Qq%mA~*G0CZ|VKDT#_D3&g8=mt<Nn
zt;sz3ik)cDmZ~&rU{d|U>c%BFWTA0homHK2;;LJi9-rnafzK>$XkLh|BxnT``f5p{
z3$_GOkB?0j#vjLn`;%qBV-w<}6wMuzjuaS=a3fb{piWM(m@L^7h)#VbaO(n@eP(52
z{T)yc*pr^LjxUv?oJ7xwgGPtv#N9E&VWCS4)J+Lq9J_LjlOjpJ-F(3Df#}xLv8G0+
zIuWA-M_IvY#(bljoy}pR@*(v-9>vDQFMLssN3U1lZUxpT@Jj{uD)6ZSH221ei%~mj
z6i5loo?I$U$L$=(`irX<RnMyrFJTmn6C;HQQB(_{-YUa4UQQHNcTShek!##y_*nit
z^!))>1gYixt_P1U^C{4tO6v4bGO{*-M!z+-1a+gYfFEqU)4!{H-^zC$-IXPevm0A!
z9Y%5$2gSVT9ODr*+Rej9bX#IK@Y=8P0`<O6hrbWVk@jct{hkY)%BhlXb6r?owtkf&
zsoSJX(i?LOlm7G*&W7CRk8={f*k2<fsyubD4?rJIV|<-B(aGo0SE~0C9exYoK>55I
zeiY7?_DEljS3C+FbSi8CB)>ldRDR<qLu}5#e(`;jU?z#f#XL!Vl<n@ii*-ZY6&LwZ
zNpMUxT8HI0qB#!B0sqLaSiKIk803C`>XoiQAyy%;Aq5Wo)-Ps79n$e_t}k7v8>0Uz
z_**ZZVkw0IHI5A<3qf_<H6ni2LvL-?GjfZOpT9WXVeRyP_p8u}&heqL&rNnVrlpuH
z=XRe?b25jH@X=SZv8gN0X)aGDb9b8Gh*UWfPoN&74)v9g1dmt;Ji&Yye|o<dbbM#K
zuMqgJJOMgC2S@yF<ZZt?i%P^kgrx)WIs=d{)TPjj{q^(G55M+W_;+!u3w6hX&U|=_
zp2w*BW~U$iMr23->9+t?mvPkz@x|t(&zX_n`1AN*kj2ybE0eVK%SrD@CIyoGO8<;B
zvJO-~)|aB7h2ptvlD*eisu>(-y6CA&u>p~-s}s+AP|Ur6MzIPX5>h_=gV59ct=l8h
zOT`4-b;!B|a2#OFhfh_`O7=m!aOIW0(6L!x{{QjeTl6@6_#iSD6lRoKb{1=N91gKk
zGI*PYPinYd!;?$Z_vwJ_Zo`1|;co<_5C142Wq0H?3Vun$?`im!hNn(e-<vdiQNye$
zDtxYn_iFfzhJV#?{8SaMPQ#yTm^Dp>mudJ-4d2%AtTOd|hKBcP_@ss}Ybd6xc$aI~
zs^N<o9@Nl(t%`TGhO0DuPs8FF>iZTA4+GLHITPYYK24LY?`UL&hCXrWz}x&tQ3Gj=
z^T4P0*|K9EYdHAVB*yYMV`WlU`sv_zpwFZMli;#U;^23tTr2yxIPY>22fribaAiK&
z{Mn-fn`olN=1ArdSa^$;+oywGuS0Wp(EndJ_#Gt5em&;qv>bXa4t_^6$&mgz_#Npo
zSp^AB`lJqiXIfT#LfRw_en-l<5xOihI-=;LMqdv8z7WNWMS>%vF9-iX5cloi?+cS;
zctUIG%fa6#HrKZ2>fm>vv3&K8Nq~5TAkaT!<?itv{0`I!0^Em#zpsP?aqv6v#0i%N
zos^u_adq&!rR>AOKS!Z*IQXfG=;w2wisOPyVak~f!$f(~V3G1rMScD1o3~G#5`p!j
zT<V+}yW8ItMI3J&D3Z<qI0~jQ40Hy-4aae20MudL)(n6uPMnBJ`mH5c7fT-c)MUW%
zqr1-wIOz0<xOoA7<;XrRmU3*n%nLZ;#fgMRB%2rLJ5^uv0)3@)5kYGj-hE!6FJwGu
zRr*vD<^>$7c#JWlIeh*}*yo57SI^Qm>DRn~BYT%*Qhd?XXxF`b?f1NZ1G%owJ{;}G
znHLx!Hd&Yf%?q4J2A|u!fFpB{xKxgu5}jX;Xb$I>yKjvnQI{5|^=EWmV8F^R*%X0;
zzBuhECBSaBz~tswGyMeYc#c_>Be3tWFeVTd&y-`~M-}*`0{a!{Rp9hlGRoBopc7A+
zK&ULknZCH4L+FGFgk=d)ViO1}@r{=gg=H?#g*3r6hMYi{1GBT-^|P8l&?DDAClJ&)
zHgX_=M%x5J9au2r9Jl!cI<cfvj^~_T#nC%2P8aakg7kC&AEm!z1M!SZh9`Qa9Jfk1
zaPg!pjf;;GS1)i4z6etl_3;bA$JkDF8Y}mKt97?m(M2vVi2yTvygc4%wM#tmH~mPy
z$FiS?M$e~CLtEhmBYjTH9VCPB3o~38;46|iGWo-RX+=>3T&%4?d1pGy>$Z@bGcNrv
zMzkDca}U^{S;I$<sH^0lHFo)`)cYbGejngK=L+K2<Nppgl!I-y%bd*TP{O1$HbRyr
zI(2|zvV7_PM`Vzf{qg+6xArZNp=NYg4Y>N6(Fx3U)=|!N>ODt?UkW(TI`WmP`JB;!
z+y~GO9CR>k0AyY52UPPpQD)gDLOzE&8zo3WqVFJE7A{(4?mZIgl|52i<VyvM6YKES
zph0n2o+DZzLoNGNke4xe_<W1Vdh3rosF@%k)`FJ7U&L>c$rb)sBVo<V=(YbzHPzTk
zPE%VmL8wi&Mu>9d@#D1YI&R2^7NhQASWJgeY@#}hdM<AcbkJ2NOoQCJVG%-wvj%1A
zt9Rvh=DP;@`Y-O!91;5vt)Ua=gEFOQm}OJr{hIrsCg$8v-dx>XfTFm$AE~X~=YG~B
zmHm3^daPkb*q?RyF~AeqUl5*KDwg9`7r4Z&sI0)O(wK}O*mZW}DiFchjU|9e`A#~a
zT18hC+q_dCR)U^5&!@+~4tYd9pP8i6gI@%()5y&TyOGqNxEaBbn4%!azx2<6TGmTH
zH!PfegQbtzNN(0lkF&C@xsEl6Y`=EiSR&RT?0<E5Hz3=<K=vzeKh@DWrDAflzLB|G
zeLH{3!z;!jbJlY`AnW-%fJ$+nFb87`j|)UEXiBK>9mwN&^?i}ZM^WPUezCHtxE&Zc
zQenAcird=z<%s53!9<>)xQxU~$hz#$A|mwJp_?ojVS_si#_)2=h_=*m{wpHK?~_$i
zxHkR8w#<u)QW}HG6y+lug6~UCIa{FL0~($RIM9AS-Zr}$IFx$GbFs}5C{Ai=)k&J7
z-L@dD>HR{<Que2pL=9|5RAn`hMY#I1ny{DW%TE5CezSTn)8V%P4wQduuUB@{RzTWK
z-vkcYO`8D8$3Fq8<`*rz&8SG==O{shiB`}ENotgx?p6?a&c+lM`BFjRVvVT|qDU*q
z5v`D+Q7Z_)DT@qa_0<>2<Z6HFOIbBLG|yREytY=Ch+POv0pxWuAp6GkAg90c!j$3g
zjp!S3t80LL<BiCaI`g}LO884osBe@*H%IRXiW0PCr!1<j%jCTylDhPcj>IS?`Ir8=
zP|KQ8t+p@wOs)jD`WAb;yIHf{srh2t`NRu|ZoiJqD-l}}_JI!1!aMuN!;s(p);XKW
z(Hqb|M(ezv{bM;YV_h47tn1Bys)2q6F2?!~^pKz`q0SE@mwxn+C`^10$qHwqc3_Y_
zBqAp^YDcuVMoqqd7Fmgvk~ON-$8lxl_8Lo8WG@Nk@N&wE?j;W*s{J}pTOtl4><mC&
z;{mA~vN5jiubfafjJpZzMR2QYfV$x>WJ-B?22kmS;uF#hbkW#VLm3E45R-kfq{mYY
zE0NSiH8>K}ULgO{KM!hU#Yor5ajX0K`Brt)k>S@|cUHHh8g?VDbsfa>VGI-^fLm@=
z;VpIQcTP4U>;Bev<?K?iuBuclgE_Vya4YWE8lhZ_Dt*YZ9Q!D(Q7K;0>04j=S|eno
za;)T`R8uGimtND@a93p=el4!9VF7-_TJF>3hTZ_y_+Zo&-Kx79MC8g8Gt|lM(JwS_
zN6RmWA8T#E#b!MQU$RSOALICjlW{kKQxwwQYj{$<dN0#(wT5qKc-C#|dzFUY2c*^V
z8$b%V?{)>hpyAyb{y@W*HOyY1;?33YQ4QbJFo+tZaxDTR-i2}~cr@~ahCVU=1R7J4
zUm@h^D5_(*p_a2=2~ErqOV32{=R(z@eOi<KNtj7lh+n8vCiX$v9655+;_-5nxZ)?3
zk}TbE;L4;QD`6Rfnw#vK3b&N5WF%P!<RD|X@*HEvUhR$Wh$)Gz&yHtAd@9%MM+vs)
zM041YzeijxRwA0(u?rDEdyeC}-tnXST+(x6pE6RXX+^h8DhwWHy*V&=xYiCiX6dy8
z)a_m&6<(h?mn%-G<p$@81=nE}RNS7pxRUj;=_fAcHKGJ6FRQX~2`1pAl7QP!Zb9jb
z7a3}7Y0X+#RW}G*l4mqJe|c<xOr4};0QAU>)W;_!p<2|gYW(z^+UW<CXqBk%x={<K
z23hGGyogIF^RzGYx>R-?F|*3@7(1Bl@EBht_JQy5RvY_bT5XPW9{g&ToUo5hk&^oy
zip52P%L$v)QDCYgwW=g><5coA37mvPvu{m55oOCxTKUWS?)x)^=ZS@~@BfVge^wy9
zK?Yu|K&1jr3anD#Sq1hhfTE`k!x@G4tycNat0lOdc7)&3+S=h6Vas(!iOrNQuW++G
zt(j8Yi@RVL<mlEJuMUJH<|G$T*7Io7CU)a%T-`xF)M*p@@)uk`>!p<1&Tt{dv2hEw
z1&#z45od|BY{rJRG$OePu?9Iz50oab2>z)voO6va??l3sD$j1z^M-u%h%%<nO_p9C
z7kCwIFJ5$T@!Ua;f{!qARszT1;g#i$^>^Zzv?teAFB)6PzwB4&mys6@+tn8os%IZ`
z3ywtL(Sk(n@u{CcXB=D;zCwc_cI|E~5%~yvLWl1H<Vx{@>@Qnpz<B$ng*P>J#!q_b
z^y$@$YH9eDx3lqcy8(|9)B!X%GfRsWENH;NOfnj&rsbG{pI^VVR{wZA1Nn>1>H2g@
z79~~e2c@*{yeI+fv<m>I;!8as?W#vLOu=cAHujAa*&x?p3Q#HSLTsC%G)k~giJfd*
zw5w&g)1bSi^Lzka>=GQYq$t9RR1UIP5}e9m)ySn{!wTd=j@Z(BoayD1luB<Y%M2oz
zF<+)3N~%joo{ltvb&NAAZA_pPDF2lGgmdY~NN<w52_+%secw>k>TFN?aLO@=I^+U3
z`L<;h6IaJ1`wGalmUKR{O2sbVvtK1)^}a`k{{@gTG!WU0_vH=;PBmn`IH@n!o%*D1
z-9kxb)DH=tDgx36ik^k<kIN7)-X8<Ma`BRNxcYGM<~2Kc>bq0DkI~^%0SC&{tr)>_
zpQ9;9vR-jFaIghF4oKd<2B_ReQ6?lfOWk=qN)UHqvlEi)D2v@)y{rc|<+#X~N;+fa
z%V;S@9%r;dhFY#(@+ek+{Un`??oa(Gm#?Tp9z)#LW4SXXx|NZ2#f!ZKYrii8#A;Z(
zkyr4dBzqa%^V=}8P-f%!bDS-VV&Yw>fGhelKkc3=G-uqoeroGtlJ2ixv)1GRXRUt^
z+N6>}iQ;Chhcb@)tTjdpi?L^MyvzO<_acmqZdI%S(~)60(g!b2x>wO1%Rx8pYi+4d
z?0brMC-k4L&tYq#ShU2cOUmyq5sMM_qz-=$ke&Bpw59&~rl_A6SC@*7xYb3b!C3I&
zt?#{wA0j&%0C^xosr1VR!VlY)#9hcd&LZ&m%YZg&5oD4ijE|3hZlEKX2VOPkk`tqg
z>{fkCUyWRL+AkoNSdVbC=B2aKwmghDtM#5(Jx<1RCCWAr@T8?G{E>T=V{IoCYJcl-
z_sym7ewT_e<UJZN2QcPiq;_S6?n0w*?nAV`^yOpZas!%*pZ{5c7CjE{Wj<6zuFTH4
z53vhup}ZZ^@SOY9`;8iYN5h?f><<44$bE?8?^pW}n*b@NKh$u)hNrZs@G1=-(eNJ{
zPJBRp|GI{IH0;&zlCP@o^EG@%!@p{HX{%1J;j0=BUZ%olYxsQ)U(@hE8lKap;!W1@
zehq)2q33Jr`$P@rY51UqztZre2UWak4Yz1mv|NSX4oI`%G5!7upa=ZQl1&c|SaE*8
z+xJK@8A2G>rc?ZE#nCoRuVzbPERQo*CS@evtC_?T=|G=JJ0!sq*{_skQ0@sSleirn
zc@9@yzGM3#TV|p~<w)ic7+|5n{=c>T&_SZ?r0rg*q~{Adl1Ya2Z~LJmT_&p_VGCi>
z?T5~^toVeqNwyz4QpT_2SG5^)ME14)urEaMVxd>VDMt|djlQ-Y4g_)E+YkG~BpIF{
z^L=eU>=T=7+jHH1=s=TX`=KLF<~k`FmY0m|OLD%TBUyp~_p$x3uY|7Kr8EKY=L<UU
z#0gj5+YjAR4siP+g_qk89jM~C;8K`!ro%AKb^D?E=Is-wM38*@p(~0w-Z)Ss-G1mO
zn8q;B?T2nS2DJT96(_FGlJr}nS;zLn<41Sje(0bxVf!J!a^xKsE9v$_N4z+ZNWT5B
z?^J4v4@acp=(`#7=^nKXH0)bkTtu+%?T3Ank!<^+BUO^^hjDRSk0o@(k+w;{wjUlZ
znH1j>-G1mmuB-FJw;v7=o8&?KOmUyb5}rr~pWF6BN9J6z!~s*HbIK9T;hb{!eR0(3
z(gNeR9}ZagCEI@Jpf65)N(r#fC3Ae4-hbO&4o_i1i9VfMm<|x0ZaFmY4E{RpWzSdz
z$`xo(;F}6OqX6u(ge`~pU&cflZs%}0VIr+AAxdl_EsSrxoG2_4fv%ttt}*16!vO4w
z39g^jmP0*A?Q7~w4_PBy6KITXIqWDDtygAmo+d=|`Ol<0z7M^uc`iscc8%{m5`20X
zKecr>r;YDy-_o6KY%$+^>saJ*hIUmMhg-MqtC+p)jj+FU>k)J9-eVEt_r?*RS#<%>
z^t_lN+Dm<SJpeH@Q-8--zxDdjZoUROLi@_i#)Z8RBXpp>G~3v=Y;QPd{tr;qd=pbf
zLbPrT7~8&dgYoB^x<G5i?CYvpxAvI(5Mg;vp0UR$_M0<6l2IHmuaVGa6#6H(buJAR
zwwL7j#(!XRnP*}S#^^Dcd`79i;5T;#j9pWW*NoqoZ>2>dMyb#6Jym|2xXvsF87OP2
z`RUXDiG(6$dA{Z?MzPQQ@OQx9l+*T6IA^vw+=}!LB7rN#Il)aic`fhtBA-o&*fKFs
z+?S4*KmPt$WbXAhefdi_bQzuCRmJ$1jViw}tJj$2Z{6ZEZt}NR^vIANW2lj{1p&ql
zJ;rI?$}WDC&jpoT{^pCLkt(+YjOl)3N{^9|Qu&h4j;`?O)Q8MdPl`mIPBC7(LGnu0
z&w+~es-x|pUQil3+#Wh&gnErRfyaBxris>k(VV{FRP*#5C|;LYec)K6^_7VEyZy%^
z<6o|-yP*S~>&PWF?PoJhA(%$06>ldLj^Ar!8i98TrXOuS*YFrQd)liG8<l%}?Nu_1
z!a!@M@99+IP4jC*Bav=j@#N;$$9G;ocWzC4cHJ$&tZ<r>-#r$Y6FG2b++UAHy1QHN
zJuI3}HU=G-HcdcI*4GsYbN1^0M9jbAv!vYbp!}BYlJfrs5>kGeru;R`PT45;gOv7A
zkId2Ey4Wwm0i%jMA6ig#^v>}eRfpTFOauR4LB#QIm?pRwjhqtv#<P&Zs_~s>{-=@1
z+(SQN;{Zd-{l+AJTjzZR#&lGNQT9>~c+qr`u|?uLXjB~pHuFG+g$tZ(?Mb=sj;dDE
zV}9@-pz5xMnBI5eFR2|gl6N2wM+;tQDwgjBIqx)mQBfk19x$p7NFu@3;wX`<l7c<=
z=TsS8lg(8`ysWeNpk(=vqAdR%SfVh=`X$R>{4-fD8<x>oG27VFdQXmM9)Fv-P1L~|
zBFwzo(JGI$eS`+_!A~jc&<AJ*o#EhYGaKJzQ+X3#jN%*!`AR8oJ1b_lPe0mT)dQI`
zLPuLW(_0VV`RMl05zbAJhB?kkeC#)}65m7Ru@YyaWmEiit#nqRv8$ue62FlYzu`vZ
z?|rDj#vCI}%Acv^?{ND~M`Y>ux88ds5^VdSuCT&vG;-u`W`mA$^QzlWx;^bTnQePf
zzyOOuG0#Rbkq>BHW_#7Xj;ejE$KC1CdYt2*)_P1Vy#%@X_7sH7JI_XjGKs%~N%k1{
zPf;?ej+kqPK>E{=AkzFg$!R{-7IU{zwVTL)3FNYAn(d(jU|M_VApWL=O#D4RbXc~E
zVJaP>qg4U%#X%spBim(E?P8|WkC?yql30k+f%fdE1iTG?DjepUU@;}&mw%!JFfdLd
zWNwvJGGm{rlCF19C2v&KUHL6m$)z>z=SW0>4rEZZ)2Q0XLVN^W8qKT(F;yIMzRv7g
znVC}LMyFY^Qiv`g<{)A)a|(WHv3da}uNz$_nCz3$dY%JW9zOIoT23o;{NY2@Q+p%o
z>Hg@`xA3&{Vc`D(?jPaqz^!{?h(zq#h;XhW;8ls|!iTWt9*`HGdvRCbz8^QQhXLuW
zUNfpN!4JM`FDA!vkEn%j8ut-AKZUuB(ci{;4Vju0^sczZzNQva8&-(Z-_2Q*w9@Er
z=Xk_gWKAFPc0l@!u}-2g%DYiAmqedlkEA;~OFB+005SFzfF8diiu|=JEULmzQ8{_Q
z@~7MKAy4*<E(C4%ioq+4Eod_6lIyC>g540I-=ouQ$e!Nz!P23j@gEu21PtE>^YPb?
zMM|eP|NWWXbKW$zn_tE2vc2drx0^qE^H@apm%w3s!rnaqed9F>d!-^e^)_Eeao{<r
zFo%(4=EhS{@mqb}xdlzx&8HdLyq)E7F&<JejN)vgBG5kZtC8YtcFC|Mps#Kd<2$SB
z&RRve9#_+z8)^1+RP{dIgZ{^S9P(pK??pefyQ^53gTM8k$f5c_q9s_}*hnPnfIfNZ
zebt;6pabpx+g#cAg6dTEuc_vDpl!NV^1UVB8%`bnhOwo~*cIF~HO2c%>q{P^C<EUH
zA#T`TkRA3J+1-Ca45>?xR*ZiGy*Ha)_QO`wGoJ>+f>bUN44+<*dIXao;hcih+@XMh
zg4A+C-}t@Vo}Z^I+uK|W<X0o(<|~4m%2T}P!ac2br-<eYTklRyX+Ez|_KVcjC`d=u
zQFG~cKZWWz`urH=XQuZYiv(A7MGJf~0y{!S&1Vm(0^fsvxBG8Km+V8ZyvOH}^Upp=
z!7ZWz{}xav$miA_k(;*oARBnz>?ss2H*E=k^<66~(24lQcizwy+?3tArKk0i!FSCM
zZhGiW<P^z!xD9~*iWIMh0Ju_KL(s#xAHn?-+#6E5zhEnxPXvF^*?nF##JJwywl|z*
zc+H2vHgt^0tUC>fJj~SSMD||L!Q4L?9(=G2c_81v0rB|nV%p(5vHR<I{uk~gxZlS8
zC*1u0p}sFd{IhTm!OgHkwr~6KoQm)){XI%vaFb_@r!f<E0QcbTp_^IAuFY&nU7N{B
zaKFo(y7tpZYfonI8$U(J$9q7ou1lnE?eX39#YkS;6Ubu|?iX-x!My|bYq%Ab&0HYR
zwK-G%RnPJ-u<HmiGaXGu=%wV^v-)_?WJm1iH^XBmO1^DocTeJ>4~#wNV|6WiTRV@n
z_6!L=_!vkDZfdz1ECKb60G?D-w#Vb~d7*a50q=(h{W|V%;C=}AbGQ%S-jH%b7w_Pv
z;uLRJYp2H$lVMghrcMs0bq_)fhhWb>4pXRmBC0w+X|yvD?QTXJhG;`*vwxqA_ECnU
zfUKM?^$uwN5;9A(Xn#`Ce)?)j`&fX~Gz7tFf_qY3-lq{d755FeAHdy)`}??`z#ZIF
zn&RCCx?A&QUUORBPYL^5wtU+1zNg8*>}4sX#qqH&1(9RjVxEEzss!82vm7P(lGbw=
zGC`xZPw$0c2A#a!$d1g)F^;H*Y}C(3%`h-}%y#sHMpdtQ-peWCP(EZaxG6RNdnMu=
zlz!MmJY2CWTx4uBtABxbdzhj)Lx_SsVHoXmu9ZgnuKQrLKfVG+`$U)zj50wZ-L(Tq
z{{;4Y)a3~;{-`Uvc{orF2ddzvD*w|d<~LzrFY657giwLdf>i!=ZgVyWBATa}d>xYG
z^B*@_`FBB96Z1ct`M&_mg9$gDqzY9I1l{u)@(m;c`P<A#fTv(j^GUQ-z?nhJ(0oet
zM!K)MEd}3~;Cneg4wGNrhe9-V0K@g>Pp%XK>ICHu%!rlyM+WjOLB8l>=FX+c!*w?Q
z;HqGU;2ZxkBrV(UPdWFuhTr)8$8VndYI`<@Y+V92jd|$H81xd()9||*K1m2$$2`<r
zq--7Y(6^&cKg83{2T(r-?uT(#<F3d372Hd3Q?0~bYY~n`vGUsYn_`jwD6|K{c=0*=
z`<SQ(?7+?IO~72hf!IAOeqgtIc3-NNaS|IYFV@nYp>`KJ=J2g(sio?7%H-mF2oZiD
za7q(TL8xIX^NaUD5NF;eu2Jyo8j8o1l{5;FR?;jDzop?@8e%7s`srq7!(V2&UKFCt
zj_G0kMppoV(dl8ihSGzBw<k5vpI^%#8RSCe09GAYb{fk>&m&g?Pgyv>fkxD|Vi%BP
zsUOjnKR|`T<Km_lCwgMD{YaDKP&~Ff#c1$#h{ASVeYmcnIb7VZh>QMl<%rZcoLni9
zKyr2*$pHt+lIMP&rl}duBlK9CiT0&~evi0N>_9aBh&I{EC8?IjJ;g~DH>2#PeCVwq
zv#Rf63RMWMU3DPVYgc1@_lS_lUJKLRnf%&@7$^FJ<T8;5B*Q@NtXkA(?ZSEZnfe$h
z;2a&O4pLC(Y#Zru(!(~>mt73oXC}0;<u3aQ-7f!LUWG9>+&vY>^Z;zbZRUK`AWW8=
zmV)8UL8CNVS-WqVXa3_@q%9I2jb3W|M^aB_Lq)-3_Nwu=S?__$8f47QhDM(rF#oX`
zsJFG;8xioORU;p}FO90{rY(NK@w$zi_vlOcyENHD{`PAE+pftGvpcTQ`43~8G)o6d
zYunf^opgRD;_X08jYqupa<)svEax8M-fSZjC^ue5NxRIYun>ZqLjL8&bgc!93V8pF
z*UigFe3vGE9TMA!?^47E;0H9{Azru}jnaVmi+@Ru3~#v)E{tqrcEDnsd233q8eVKO
z%aMS73JmgL6?0Gl`*XJO4>`;*8x@M7VCpnQi+K{#(tB5I#W&tEre%N2{PwdFkuf>D
z?PcJZLbri=9|9%ru9@v{Oy=aZdkkM5N5;MjFp%)&8N-$qO%v_qa5v_`u803f!NB#(
zKiIm}<f!NG9QSl!?60~U<8K^sRMq_hLaN3nWLbGE!feO|`lK%7E%W3ruv<gjoZot{
zDVk4#G@Xu8Ju-gFg<FhW#`f_qo4wD&WY09-MtU=V#Zyt+{@=hKLz)7l^bkCP5m~os
zknM25qH<BU?sWd?14ZXgAGhedEhUEU>Ay#bY`mNuXZXS>iA#<;Nt{a(&s8MWX9>|A
z*T;sIp^rTP!lJbQ0(r*r3L!7jzW)u<t|;$<4QhB%>uIg`_|OR};}IS0zgv3--*pe{
zP!l*{hkgu@qBIaRW~xZ@`Kq445;)wa;~s<iGTc|;F2mh=k6#2=b#@oPO-!3=1iE;>
zUub<e$9gyg0{^FUH0@4)&$5E0m5H&aAs{>1ZEt|U#UN0PNjxe{zgYvumuS;5Zu1$8
zi@{B~uRzL{jA#@}N&;OrM47Gs#^9z0nkBfY{SD9^$?G@-Act0|9$$Kj&zF&!>ht?>
zrKP^`Bsv$|g}5i<ei-+oxYyzSG42hxH{p&BVuPDf`Z0{b<iP{q{**%sT@)m<MlUx5
zT^RS>xLa_44fhJ%n|&a<>$szrXrUeP)i5TT7%&i7Ng3#R{>Zb_gf{ek{n4=q^Z|4L
z)ySKVv+Fgl!my{k$&Yql0jt^geLEWQ#5~cQfeL&c8moI8+p;hUH$$8P(7wALGVg@-
z-#r51?Xb{{S3CH37*~CpH{#3O>w!z=0W&)jXqteAdgaZ>_hGbd?mTAYDE+Y1M{hmO
z@xA#BzAXQeq=mGbmt(Agwj+m9hPNd@J$#DO{yhHyw2iI1AoyNPjG$~NLTr?_rL{9#
zQV9A`EYOQ_uXooZ!$Vi@_|Cb|M4(pAv&>Wx%r3A4cJ7(R>3PO!=$EpCo4k|9cpC?e
zNeyR=NrywD6UEz*!ZMOydyL&6^nCC<(K<F-K;1}Chn$VdJRcb&=X7Qo|Ipbj18b<l
zg3I;-#dbNW+FnW_5J+TRCaDRw{Yt$X5W(!JE$@39PilETH9WZG{q*3nRrq#DjV|q@
z<kaAU%kc$meCH2K#6jHu#O?jB5-}9_Ik?B+CQp7<=zpX=t$nty`+CWuLO;~Ce4onq
zUq?R|@b%f)=L_);Z@f-?hI+Ho4(4mQzkRq-9sq8m>w5M@F@5?DI-;JK7W=lT^yzaT
zO6mQI*vDHAOLe*(I{(~DsPm($uoKZ^@vcBTs=_z^*RIC(n2?=~%(TJ?`E_rT5kvgS
zIJYX?aUZI19$a?NtLzUdW=g?)>=P*^6^6GUm941R5Aj2lc9*y0r!-HDiXi<RDUF$*
z?g$6Rc)~f|rv`te;*AdeT0NYl6P~PLkn&^<l1=mee?vHYd61fwI^XkDzB$a7Ev7lM
zg&O%`<g63Qc2tUl!A&wH<*jw=QAzb*5ezA<XX+Xldd(wLrtmtpqlwH%$3Gtr{_fc=
z`M%~!ai#EwgD6K%_XY11`}a=Fd$fDpe*G{i2^vijvoe3)6N&5{lZV+&)dp1C=`t%6
zO*fLJ9MTkYAnTr0kUGI7xS$}F`?8t`BQ_)snh5Qy`#f@=evK-OtRJyLH5tTijsY1I
zOx+q+>NebEzKRdv&F4(V|3ZPq)4}4H>pqU7L)m3rX0f7U2-RH>+Vd^;wEoD<Y&=0O
zIA37iip12{R+^wnGtck_Hwoye!MMkvu1<lzD(Ef)KORRH4~uA<>4QU;s<_Mi27_RM
z%6U)~bdMD@7M@)d#9!T%v7X$cf+Q6!RO5eyRnADAT6G%e>%$jALA87`sCf{WY+g)e
z7y7R6YWZXc{4EGMh3FXX%vRH92<TsjJK_3!(Axg>%CU&l$<P(h(|)$r!rq&@&;#A1
z{KW9>v`_D8hnocRP?+}Vg+n3K!^t3N7MPEo1p_qHql``k18{1Xk@rCld~?BN@U~#k
zabF4S@E{x^ty}ys#a}glydHWc)Jra=2isOs=>jiiP=m`_`EpZ_af81K&edwD?YT(U
z?&-cmC73w0`LyR-VDN&YKY2EV+?FJngF#I9<cUFiUZXxQgVQtm`NK2u`TURfLMio@
z8?SM-!1v&a?)(Qx-39x|+xkAH#aK9VE22s_3w?}eKkb;Xm;JTD{%r*R#(3~uL}rL$
zf_?~~-ak1M!A$0T0e+;_UheN6eVebMqbyG@Rbb}Dj?5KWvlIx~fk~e>a)&yFe+|Yv
zM{}6WI0tyqfQDcS!FU@?n1v>I=o^xSz3p&Grh`LgJSREyCO-dilVU<IOZNU5U_upm
zbjEX%M~v{0W}=MnG9yetE)$W9^5K8Hr~JB#7{l&z&>WJfzKv91tCj-^17EfrRZ-i+
zYyQ<FOX7W7|GOB%ScfqmxHZ^#t7Dq~TW0%@RVzT7d`q@UGyrQ%<u!lcil>cua-DdJ
z;_%4%WNEXT*SjJqB$B-t(1DoL4w^ca1upf#-=W{P8E<Mk?``yI8&YK3ly>0k>t-6L
zfxA+?AGdDv1UH@8(w)+n_35kO?3QlbD;3J#>tuHJ?dVJfqgy9TQ_$FIw!#vD)dTji
z4L-275G{bsa2dywu^xCQG)G5hm+oGFCEqsdw+-@bt$uq#zAe{ptMJBQU+D&``!`Ms
zZkm+hg$)Oah3-X9K`%NQ4sP_KkF>Wf1`X{GFU8;P%h{hggU&_Q;0zg}ItyF6sLL5y
z&=3CL`EVS<WQzP0W1yeGp^f_i+#llp1@3qMhk3s9SQvjF?U-(MwDHLpR!N<HGptu5
zv<#Etx*le9AB!A%8%;nZ+y7XdO17(`jZem~#Y}d-m28(zHiF64Mw9J*v0NqF+|kA-
zSlUeX510Znx6L})A2BW0y+CEPXV4rl^4%9FtCVXy+W2G)Tg{Z4t(0qZ%Kv7{OI6Bu
zUu4aqY|A^^_+$)Q&NR!cG|P3GCZzd!O4JUUj_f)@x;CGK?^c+H{-TVr5GL0#$JeE%
z!tq5Eo?Z&=K?{IWp5yJ6pzApY^?YXc`Kq3E=RQhRv3@&6)~<dD*sTC#D;z|-VODHN
znQO^w>(&*>as1x)n^v^nw6guCUgO^!19f2efpR<K{DE@2L%*fTw+;HOhs$gro8NoJ
zl1)(TUmp4yh6b%YLxT^FfzV(`UGTIVQeO)om%yQ~!xXW!<*|ovE>h3Or^UFR!Tllb
zJcJpq!@==0tZ+FWEI#ySBr&=$O}Wkpt!ocGWrUtmW0v5vp7M^WpJCckI>^id5M{iM
zSET$a`q@K2LCTKMDoic>Y<YRgHj&a%wW=fZ1g06*!gtUy{QzE!Ve46$&$3_Mj@1lS
z{loU|Uf2;@$;9S<uKo(GY!9vJn7*SUw8j{=lHL7Rb)p?QQ6m$5u_LrXCaQd!iB`0S
zR(DL_&=Fc~43jp(be(8}PIM&`>Dk(->^u%G0FPO|lXbAtTq&XE{&VD_`Pe~z>NRKL
z6Ak>ozXUw5T7DYUCq1xrCAu6{&5!Z1{jpW@?`rvX4gboDmkP_O_|q_H6RY?^^3AIF
z2qrdI@vm=;R{XO!_^o-dLBR)SsfwTQb6N3|07z|0w9XeJ;q?f;9rug4)9`*ZZq)g+
zbYNZ1iW>qX#x_(rE4w|k-UzLSHu8qn7Y3gd<sEG#9F^?hVn6v}zReoi6%_@}zbH|7
z%iIT}?9i_%3T-Sl(!IjS5A&s?4b!TT=eU5<TnTKH2^pltVlC3z#bPBIaQB@ZZR8>l
z?S~i{@&(c<MPr>7jazj>OEj)y!Ye!4SP4itnH0#E_Rv}>9_Rz4c#PEvE%7*$3FF1%
zEig>sGRM9GswD~L?edYudY+RbW)t5-4xy=gk3qfW>G(vUdEwW<{)?#4px?f(YG!*N
z&v+kGgm?LkvtS*C-=!53o{q(m_3Clb&r|R+1}}Q?0Tv<1#Rph~AQvA5+CB<C+}V2I
ze&a}YIt)s0>uV7MSbqm2rV0h@9tFII|9~}Ez;h7r`hs2XiAl$0z=}AAoaj=kCuRS-
z9{nx)*N$}<K{&hEdaO>0b+I?dH>-=CF5j#!_G<ZNb+MQ5t!<Ii>2h{2R|d?91q5Y)
z()u#Sr!e|E+D6A>d>{j|V*&eQKo2WgDbiPEz=2r6^D<yZEZ|2nU_&fmwG5Ers&G6g
z16pD+?vw#_v4C0`P#z1YlmYp%fMOYt8w<Ep2KZwEXUl*i<gdy$TL$cj1w^3KI@&s8
z0e_PLPsIZEBY+y>#a~$(!fCcho1zGAP}md|&z6W=asO;{i8%B560!Q1n9F(5HaTwD
zAVXCAR>b`-?*GN@Lz)8IjkwX*wYRMW4buMLgSI~o&;)Lyz{E_DooEAxI^kBrpnd;i
ztMLt8JM0fWY5U_xwq%wG@-UONt7Lm$gd2;=V1MvQ+aHa#WR?l?B_^AtlD+#POjag?
z@xdo;NEFzTS@y>$COb_f+cRh<c=_&&i&SD*A$-!7%cp<Gqb{Lkh`f&x?V&%w;;@?$
zlJ74g5PW|XJbM@S>Ca)B829&a@5K%8#XFBJklA#wRdlrRMe}l1ET@NMlTlOU_cF7u
z0I#fsn;9RzleQW>bab#Kb+pMqW!cTJA(72YA;~9_F+f89$&2NR0=7EXcaj2W-wm}T
zmQ7M6J_bYi(1$Q8kQnxzO3W4t6Hg|V=GyO$L>cw4Y`!Wn?eRm;sKged3l$2sX;^#`
zg|reMvZ3Hd-Gkpl6b(R;!0zi22zFlq(Y_Y9fqMt;5fJk#+<R{ayC<s5s4qI&_@dc;
zo-H$}OccF?nHhUiB;NnnIF*>XrK626T7b<DV}+H9M<xC(R%;#l4LW35SGkPOy2`_Y
z@^rP0#$!hZRZ~Zs{H`qP)i!)mZz+5a5MML!ftYt+9D%ftc63mUb+qwC%l8eo#8Stp
z#3f9euM%6F&sHd?_&VD7qNRL<4Fx}H&ZiK?ztGtwaQ*-S!TF8g@($cXUnmhXaIe7q
zTioxG^XyL^eW#7!oyP(yXKL7vHooX;`2OGUsM^=V{HSw&5a#fqdyok*?SD+D#MH(e
zZG6$yP;E=hk2>*GCca7~-uvPalF`vY&E3()7p+b5Y>A~>S8N-^#9U(}>(FF;*5P41
zbadoPBr;G9Qr`Ul-!=LCs43V1Q~A&fu(CkD#rp$_j$Da?FPisjY$*6qqi7?FCDPi{
zE14{1U4uaIejF5e3GN4Rzk+)Zl-P7CGGuufHQGCm?NeF$WtM!=Oh4b2B|qvchce4F
zO|?X^|FK;P#St*Qqm3_`^?x~xM_q7!)F@tuHG8NF)=`v-y)Sku6ni8JzUT^g(uRT`
zHHsBP(PBsO?u(lhicX1wFIx0(wxQrhjbaK=bQj7B+`!1Jz>Rq5=wL_M(Ix}c$n;Db
z27c5S(t!b1m@HuXxahcHE7;o6CgaHt{JB$T2sWY@r?vOmFOcnl=&%!GPH9&i0f+Ta
zu($oDp7xuLs-Ylz@zY+4_Tp)%-vm$UR9JM^QBY}no6o(948DM%5(Z^6XgGuN5Ohg2
z=ua>{u>fkDd1f?dZ5NiA>Y-!1l&O|Ge=SE4?ErF_5JE8(3%Tc&`uENf@k4z25AIX&
zT!H%~+^^&AkPgu27|%S$6#}6ixK}yZAKX-t;(ZefV1t{67HqjMef-`-X8<pn9fho_
zM-2q7-i9=<>%ce7HE@w0ItpZ1_sWHFb3i`F7Dr*nxA5B@`HfCjmFI(wJST^l%_hVF
z9p<|dH&T`|<@XU9U6~kscHI02Ku7aAMsqKXX5-FYwOip6c*@A&9^*ChHcY&9UkDc-
zb_-xPfe2?9*wItS*Vza)UyH`YE`Tc$nWXk0!{5P8h>1%*KHknZuHo05nJgC!a}k`m
zf*4*$iYF1r=Fd0>qQIrUzF*PU?lJegNZ4zx2c&c@`Z*~3gL5ol95OyJi~j`X9tm!`
zCdIp5F4Q!JKV*L6N#yeXG50O-Q5Dz!vzrZBLLdPHL>n|}c&LB~sAy0Z!iG17M*tsK
zkcUAL5E4ZNi4Ccwm#t{QVyi8-)KZJTMr#34Y9xq=sQ9Qw!HSCQO+#(es41l6|NYL)
zy}Nh!?j}KhpWlD;xjFaFoyVCoXU?2CGxrQPDs(Vjlg802Xo;=~@BN+#Cj7#9$DCis
zg&Qqmu;>bc=`}s$46e$Sbb*l%cJwQdA&jk97_IYGdGu7`4cH{{?jzI$Qwdt?Xyb&P
z<(SO<pq=s5X`#i*q2;-0zrpYOHyB<0<Hrgv;+meXuzQ3Hu7|KAVSfm#B<Qzh^G1z+
zI-2MWx!U`#`L!&je0L@bS}Q+OYv5$+cqLYl@~)`r#r@eZGW+v}Air1Yyia+s(Q^=1
zUi?NE+q74AI#w43=AA6{J>{wEX1tre75h<kCA|dFp|Rwa^1rQmrKE>M1(})mlX7Xf
z5{bW>|N4je01V4YAf~D>zLzs4B9?8*Fpa%QpOwGlHG<ge>6=uT^t#-L?l&f;<)MnD
z9rLhMHa)$3A2_tmkGoJcIT(8Oh};ays}Z^Q=uNk%6#Q6R9gV&O!GB)O2r&#-8Lnx#
z9>R4it}VDw`;7EIS96Z{S96SsK9Gq-GV}!<I+&sKTgOlp@oWaw>7ewjI${Tg{>2L2
zrbE9%{pEB&ocv=3ZL#sk!X)uei^0DVQGkCf@bv5+Auh$0iE9k5-neGqLZ*Hj{~saW
zx@j`VLjDd0jbM<%{3bpRmQgIUr!eSj8D!x+j6t2ksV>5Em8X1nmh28#uat6nCR9!^
zZ{_$$oU>m!@3#%iGvut_n*ClapRC#MFg#JJKeES`>K)Rz4)Yk;{=X{eKjklbjTB=V
z*<t)DcYfFf5-EPzuIUL2C&)>gSAhqckPaFrlipxjk1>%MeOO-O1>4}m3&~gQC0{Ka
zUgx`Z`ih}OaJ4d7(@s{goccBm$jhi(ca@8RXMKuWnB8mxawk|$YLBsOrd`aKOiP=y
zoW;qIu5w}XlcPGVHHCW%AEeY)S$MCNc*8o_2E4D5c;kb-wUx?V9b8vgu|SrMsbFy!
z@0+Z$t$E;7l#QX03E7SY6V8zdH)4V$6H27}TM4b1U=JjWkix%4(}jY%L7&AuK$t(l
zb_xpMe?N&LU{!|n;is~aXI87Ry)u->A{^@ygCXa`Mw4Fh$zq!<`DC$8s(iAHCQTUL
z97dBm84zJKd0z$uWTm9h<P{mvCmgU{2FN*-GBo@a0p!djuf}j@MFZ;KV9pRj-1)N)
z6a>YeXId(9BO<e@E1Ga)3w%piEx`l?eg1=&M~KgHUA=dNcoJ8KSFm{+mr)^;uV>oI
z3R3gle}d*^mFw5w{=+93ayWSvuzv4RDiN66gMp<wp;ka{_!y;EkosXB9)oRZwI_&Q
zt8@S0QB&m(Lj~`&mMbE1x48V+o5=mqHsyY3=K+;Fn3#830shrTVcab~{xNgEs!h3n
zxO1<{9h}ZPts9Ss$lYT00nGg)jtH%$%)yRpK>ZJQR;w~#9pRmxyBs+Zu7PD8*^lm0
zyMkrVY9z>%<PINhVz^_f8qrRG6VmsAJ8<2PYd@~`EcHnyfA7)fW!c(f!UsK%nH4TR
z(quA*7@Pnbsq`N_TBXt}YY888^PU}%KEhg(%Jk3K=@0GPsL}_>W!ii#4JIFbXjgwd
zU+T%jzBeE!?oow*xO0O_%-*Rj<Z9};DI&4#x@!IzV&Y*cu|@l}Dhu{!ZQ@pwmst^6
z$j+{^7=tV#MB1I8Bxd_atgMdD@)IR<CngS*YN!7W<zdpIr5awz-;sR1W=3BCP&2V}
z3Txp9-feEir*8OSjr+%XvXMt})fV3!V#N2AUFj)ZAqD>HNqeOL@#GClzULBSm}k&i
za(qg`_;g2Bop)uXF$^E-*<njN)OlA>k>7>V|LBp_N2-VI2zPWxqSKHl9Au~Al0VYi
z2M}2}N65U1X{9N7!~C~jS?9gy^77@m*!k(FTDzoYop<@!auk(iBoVRB#xPq$W57~s
zrGx(Hsk<;7QP$veAk#G>G6R?TQ3bt{p!M$ESa8|-0q9<%y%fkXgAA<ZgOaf;A7zKC
zd~~<`&kl@_oiRz2Q^h9ZbA0t*8Qf3dUG$bEyhC&Wu;1vooy%mez74hr)|)2=ounq+
z`LQy19w@`tj-=;d3}N_^J9tbAWUL(C3)upJyzn*bx_D!R*r8#c*P&G6+K-Fjkr%`M
zhU*^@@9J^i5%H$s`U~!52?0+MzNMC{=jDx1Si7pS-bWc<;OdBYCjh$v`f#0vYu<Ai
zqV`{4q<PPIMeR{}lO$>n$(zoi_APnSMby3`Z%z}n)wn@v=FmM{H%VVrC0}$9wZBy_
z@{+SIz(k-M;^Zaw<!uLfI~2F2?dLt0B9wF@NgN1cEnb^e3?TMPT$^z{g=+_{8eH?9
z^NHGkEH7EqUTWR+mp7TBmK|c=bL~WJw!9IZ+SBBX*HfD+Z~UT`-&oFjE=|;OudqZc
ztG7a|J?f9JdCzr3{nbliD3!hy$6BHFrAzGzRqQHie<pJRP7mOQ%<~o+O6_u_p9+&f
z&)7lWCvK=1f6To73VfaVIv<LTnVv%tADlmj*xXTG(m}s{0hTgKkiTw%1o<>9aB7Ru
z?3T%-Hu+c3JPw&tABRl68ZXRoxSNNs70I16(h-yM4_L^BLhK%3XH1Zn3^>^wTCbnY
z4ZG+d;ach6qOM!*laI-KPyPn^egm4C4Y(V02s3BYE`1wj?~NT+4o_dT8TIFfo%hik
z2gbh%MVb0K?@joB!F3g`F}POZ`Vp@6xHjV2jH|ryw3WTnSDla4<z~n9Rqf?XQpu80
z>8p})4?vSy?F<>7nZC-e0vWF#=Tz!FzMV{8brB;D#y?|E<R<B#y@EQNjo^9ZD;hoD
zs}2nHq^}G9BNY4xs$%ru{>oZ>ohytUb9nm=GBtXX@m4D8J-BnT_9Gd}T_Lsa@-~va
z%Z7MMvpxtm9$InW=TJ#yt{lMBq^$?{gw#GJ)6))L`;fe4FRC@<Emz~ENzUj&X02Oh
z^r%Nr-D0B$C*5_$MvrHJL)}cH$9}@;Mh|Y4tSdBnQ0cB4W%L+K7ywpfLy}8#Llyhc
z%C<$Q-!oKs86;8Tj)A&NqetQSfN7{I%c5lMg5A++a4Yk+fp0739CVmZu7_|8RghWC
zJ<tDF3dBDHl0h#43q~mJYQ8t|*)-IRt~f@Q{%7KS<C`Foxmg#B;^D>l#m`fRw-)Db
z#1pyo)^{y##qzni`3)$`M^?&h8E+_o_bPDt$zMi@?r%e&;>y7NzW|rLqr%7GneTss
zXNFnfG7RB2;(8k4cLDMpizz}emLXt~DrO+E9D{2nuG?{~!SyR#+i<Z56>U!c^CbUM
z&E|i*pKPwZ9Eo)3R)l)Ye=syR9Qp!6PnvHsv{N{A8$!M2a|~?+52_sCU+1YN^Kk}#
z;t2Ga4>0g`1On-&J?6r-9<e(3n?1oz_*SJpRJ6&=IRg=%R1pk(fvTl-(Pmp(^Hxf0
z*vmG55bz_RdC%!cb%#o2j(%Oz0(;~;l$?oOr~PE_BbCbaSa>0$k5bV;ES5QBGw5PR
z&}asogP>5+MyBrZ7c%8WmUoh`QuqqnQ9wwL!TbVjY7{-f*B|n=$<BdfJ6=OFd~_rx
z74q@-@-fW__@!o{r{q1PaPH0s$ARReLS~agVm+p_xy}wQW$=$wFq{o_l{>5lzbW?#
zWHN`DZ=pn3EbGlPvrabG-N>*bU=Wq-B}iU3fnj|RCgY*C8oMHNNT_H7Uo@jEqi6$j
z2%su;ISl;luL#UA#&0&-^TlN76Lpl*KLI9r7w<(cEWI(b;>e)t-{Z%Q@L%w!8dE~S
zBN#)>EVQlMr*XvS%J}9B?;y*XP?5Dy;}6)GWeM@(3(${{(CqfC>Zd>c1^Ve{C>mQ*
zuxSIkQjD%r!?{!EVr|-(k6gmzO>v3LXM=h2OZL`B)b5PGY>w!<&w`(Yxv!c*_2%Q-
zRe5K!ygjz+%YExpC-MV5YP7!GysXkL*y4yU&6HaGC5-5>tHa*;64YRdA$%hxw<w0~
zp1WxVgc)EDv|;S3GJp9hVqy#z^pu6;PjdNn2yK+Gj>+#r?(!hkosqG)t2PU<G67)&
zl(B{<8}AOse)AmIGIId40khM$rY7whW=!-LUHGmK!ukMmr#Zel(eDu8S7`?zd;lK%
z0`|4vtF%K9HU#em0}i&{CFd>A^_QNJcK{!e*O+gzZ=iDTnss14*3Xl^75~e34^?(w
z=(d!m;Xi3hYmzeuY}d8F@Xp?*r099?S<J(^1czx%Ft)v-l)8uU7z!RWe-Fxpir}lK
zNjJj6UD%NNb;&Y>R1UztD0>q$yhlC$qlgW@?eTqG-9&p6G+wVXB3}O!pRm;p#3IRz
zov0UfXs_rw)p+%r_pIH}!=YV9?1q+`d$%GDCIfTf^rL<GRs7KWP~G&rOH0uuxdB;m
z$!jmlNCA9^#P>rUqlG4~9v>NSm-2(=ljz3CBnP+~-LXz`%Uj(;nd`T6pLX^S7zdx6
zG`}73y~zO338c_FM)p0cl&%|p4*VlO8|3#Il5uIRH-y>sJ_sw`VbCx#bDOayQw`|x
z%5OU`((QZOG+x~S2`AqEc+9!G<TnzG>#JxQJr<6Gj-uSiU*;h^zmM<Laq%}Fa4_Je
zGu?gFuNnszhI5sVp0%@-kDhmW76>1%EqJ%TSAjSPc(iwcNW<mFv--hgG<0A<<l@Qk
z(fX*9>Ojg41^n)N%AyIgZsmDKo4N<(X_Orb7%*iKU$Va^iQ9o9efc~JI0l~@9+0pd
z{1>K8nKXCS0(}rvZ$Z3bzq-y~jd5ns+y(Raf%zbXCO%_k2}_fNe=%J@di{=g0ft&0
zVDV)$YUPLjpgByFBzQbkOcE~@9FOQUY+@-~G|ihocaEx=SCHm7KPUoMwh9lZa`z0h
zL1K)T`nUbCYO7~-`1^o;@UAUwwrosLY#1AqZMG#>wb^cj)#H9ME;=%+MZR<skdE@k
zfK<aIOco^)lHi@DT)kv*@vMcK<h?`yNgZwg_zn0o5?`C*0|g6A0mVs>BtbfndX8uT
zMLp%Vc#uTPAKOOGB+fQsEnM2jktBW_k;eE=-BCTZL;P04cH|FKyReyfKl4K@u>wA!
z!%aYXV`$5HOX7@Rg#W8i;6fj>S3h(qE2K-oI2`%4v_!YWxcN&<&|8SDA8|VsI4XiS
zoLx{=?tp{AX5WId!KO-=3~19YfF)Z!>u;)?T?I&I5O-==rQs(Uo{m~7ms;(o@HDr=
zMT-{n61z_i#xlb7h#JxLdJEPrwueSVyIc%88_{&@hkKhNn)Y(wbRKc3nA3`s{FW3h
z?T6(rn6-4N5(zv((S_X{B|1ccI!u7R8#Fl~NZ2&wYiBBkh6RZ%C{~a-lEi0H5R*KX
z5+*#^&g~#F>>o#D{MI6Vr+!m-n&{BUcP@on=l+mk^tREzkiv|2ef5i_B}?Wnyh$E2
z#sP&rQZgU2qOT7Ayy^%^>z&tfuHQxEoEs3+uMLQHk^{MsJvHL6T$vc&ikOdYm^y}%
znY0@w&(dTwh@nUDIrT*6d1xc&E}Xk${_Lgw!^aaZ?cb*A$oi}S8DKhXCbW)C!!6E|
z`zYLpiQ`87oTlL!fb3Ci>BEOHP96azc##gbArJN#ubAp`X4-d9!?;JQJtAviOJZHW
zl>a3(NXyn7;RWYa{XUi+hk+1V1iu7Fu!+rx9QmvIL_JsO@Yey`+C~fJsx#Qu0#eE7
zi9D%fj02R?4^W-KW)myoAhYkF&3X%>5GxF~$jaGG=I*YV?aGlhD)K<V>V&;v4?%~b
zL~=w6Fw~Mrg0u|t!*^Rnwp(lX!4g(Ok3v>m=5ly<OA@R96#A>@@Mg&^vV;7lg5w^4
zUjL|BON;Xt&4E%WWe~%{vW)R<Sw?xc7r1o3@|1BIwq(hyJBiQ`<U_$jnCKWPzGu0C
zPqB!0!RX*^R3b}oVEe6$XDyi<Uv^(v)hmExQNOq+&C&57ixHbqj(<Snv*u#RekGhR
zMV&C`m5%D$+hYj?`s@-MSlc~1>-jjM6ycH~*Z@3K?!v#TN)w@|L*>*!!Da=zjH~k{
z@^g^P-!r;^JA=2+U07lba(XO_hj2Uf-pVy0wj8F2!3PPjmE)lswi*8bA4Q#E8%tLo
zDS#h2g~ZWA6mL=C&B!D2mtku8r^EjY*jD)$Jw_cx9%_v0=`u#eVjOqKNt4Lg@{72p
zv@T0lvo+!Z!^Z;TDpdwcFG)0f2vgI`qG5HdqF=oZ?}X>J(r@prYWz3`NJ%pod2sx=
z4v=(Q4XDNsyYdmjHI|;e1#^rY4xUFo5h}F%a6p=KIEaco5GQm;4hLzHPrS}(0fySc
zfgo+d?UfK^lC?GMWr=sO_@7QbUQh?aIKqCX!(RZ*Ky3?wQPYi3K4%9+;~e+~#+3mZ
zL?*6iTLk&|kwpcf3YYq!!_dUw!&8TX5%Z-qnzaPSp36B9+Zn!tdCCbz377~-aQbrv
zpy~j_Pf6-Sr48CgBIb$hz$a>A?DZF;47)K?iKSO`7#4}67Zdv?B=yso+=RKyxbX%f
z7#r7-n79klFXcPHmhGatZK4s1gRA#b6dCS#t2NO%>f%?%tGU@eC~@X7XM3;x*9cLJ
zum^Pb9{@Q<t_35tw!PU)vQg|}U9=qX-P$`%Jf9N~&x1YqOA=q8Ft&3)Ai;LN7EpE2
zQ>I{eN|GmXflo|(uR$3twRb-;6G=N_CK+a*B*DgJqdRioaVM;ISi!S;v?H3MN0a8K
z&LiO(vMrT(X^}_Te`fIrm9I?QP);7vM}NR`4kAbXj_T(%8vYEht+F|KZ2J@PP+j{B
zm$6N23ULRtBN7vPKm)SGF(pA(tW#?QBl^?D|F&pF4FbPJ16dU!NB)-AtLN=H{9VAd
z(n{Q>#<5&Lc9YMM2gk82<V~6d0aZ7#D;zN>XxhQBgXFP;*D{HqO*;3%i}WR{M@1ee
zh*AWr|4Ug79nk`52(<?<(j(k1v1pQht!Wo)z{>gDN$>10V0T5>H9C9|Ajhk|s6lJx
z7kM*lDdZO}^@AvPlV1pC_lX&=o<X6MWB&$JOg-Y1#w%%d35%ROoI30x!Lm^0mLymo
z@jQ~cj98Aus1NCv@||GImQnq(MQQX?6skrn_OQk!itJ8lWRF<z3Hzn9%||uh15kto
zb@*&Rj#<;eORa5lc8)bD_=qmN)nnFX6vnpx1dwf=0c2EX{1#LU%k(_44j9FZS|d<O
zOKsjy96-|OQHu@EuI$KxqZVr(+m#*BoLyOv?%#%2!nI_JDxuLLuhgJW#VhQ3t8{ZY
zc}0(0L%(wJ$&jznR0u28;RYaO!<Hkh=M&0?+>!z@1ef}?Q8v7RLdh?wKt{=i{8N$*
zv=&E-h5!(XVUxiqq$M`#BUT})i)e5pMlA*Dm-1a;%Z5>A&la2eX_Tp&n?}fbEs>qg
zZHb1y--O$HDDKBWd7lP&MxzQp2*`ERLfE`oD;JL3Tp$|e7l^$J3PclNCZ5&VC#1-3
zScH6lLt&|*#L+(t2-X|SV_+Y_5=O*GVfog!QaMiMCRdXwI~9yvvgnQ}#Y^TcEnc)>
z4l>w;LbC8Ct>Ef~n8{37R5E`ar%W?p^T?4Yu3jid4EqgL&OY)D;)i=1(y&|i#hZ)*
znZof-bQfv=QA|2e!&@}mq+z{==O0(`?$Gc_4ZjAYhSKANV)E-XykEn&H2g-xvzt`B
zVhx|t@JkIZ_^*0@6Cj1_!}@s-pckDfSx(b<eD<JI=uEvtU$kme=kfSC;@h2v2Wdwv
zm0-$;AMLh|ShA7jLE5tx&zcR}AX&FH2~)`n(I;?^6UEVZ(Zza8CCa>_Pm7FmCbuK6
zRNA0p&L<upTkjYw+)}!t5$Aw!2O8bj)9E!{_Z+Vn9g9LnG$Eo>xfb7Bus_Et!H)9j
z%02s*0ugztP!!dr<rAk0h1bX;&w?DJ(492*Ru~B4aEdbrkuQ^U(B9uE+mqy~i$A)W
zj&y~JQffiIrziu`$@vTB&O&0vo-s^(zAPto%98oF2A9pAyA(^Jabk`X(;@OYOj&X#
zroB=~AgWY$6Vbv$1ul{ns_8lon=|L?C6mJ$q0q!tlMAeo84XuN1wP2DHK@eoFhp!(
zjq(>QESWWb;Zn4nl}%JHcF@=>)QRXFt#l4rM5ko+BTsN2C<l(PT4k;FI2g{c+S5<u
zz<d&|wQ($_*5*h@Mx{*RGCccAl3?+P=^9WCq*z9AT?*PoC0DGFsC{FI$}u+ORD>=E
zYqjQ;SO-YOf^;+Gfw!juK?QD7;C=<3QQ&O_8WiY`Lluzj3I*6MT}3yMti=ik+SM4*
z*Wq&N6aIWHz4hd-nRIbR2_K6(0Lf$DTgRg6(cC46j*j7-@wU6>l*+Mr{!%Q<Eah;1
z1S}j|oDa;rRI2LWo!HmyB+o9@`i2WKerpX&>ln?@Gn$<>?hv7LXpN&eCni=$hYA8r
z7J&FsdmEHN!rIUfYi8$knq`wy<q!Ib{h-$a?d8F??rmVE*4_rWiW9N7A<Gjyg}n_e
zRY&e^C<Yn0a73sVj(F=8M^I+uZ@E`Jn>ze!KoaEJ>}?p2Jk?agUMDYEWG`2?yiVR?
z4ddG7mdV=K#wFB)^$V|Mf469mmaVZJ!KT+fNs0y_#Ad)Rkxg$EB1it#_|)?n9sUGh
zTifW7Qf1St2Bb~TgFLA*_W@*E6#*(Ug572j#<K6A&3X%>5UUEUmX))c%-tTycI9vs
z6?vdwb;6@vret2PGg^S5wmp!v4D-WxTSc~8Yxu#kC1xc<R=MqMXsH9l?rq?t5Ur|a
zeY}s{+aP5S!<7C=F+}!p>}}WtTwM1yv<?@0Z$l>Xq2M7*G|=)r<?P~iPF`P-5){i2
z_B$Q^0$>K>wbh<#t|$<Jd(_}0>CL^wq*ANa|9}K-CRYF|LFTp|)G}o-N=BMYMggC8
z>f9+dm732LqYQi2mr5+%*8kQZsf)?Pk(lHZq@U~BP8+dhyR_1p`YDQ3CKEE+UJ#x?
z=V)%3OvFsTv%S~04~k-hJ)pz?0C+04)ay}fl`dKq?$+Kh>whSW?c5JYu$`|3R6_8S
z+dFL8$P;sbPfUBSK^ZNzcR#TaNuzagHa3NzBL`YiS?{nA<njj%1&(MAODbu8>O2yz
zA=|Q*R@C;X7LQQ#oT3}b$s^(QKSYlFm30V;H3-|O!`}v^Ola$#fKe+8#Pzt;58cI$
zM-Z&laOa+YEFeK%nGC38f}6d)<z6OL<4CD62N=b0$#Rs^5|{K5n~~H-DmW6OKBS+k
z-Mr1%t^(y-xhvoV3RO~p<IP}Ac4v#*QbCAiY0fs^(lIE?5cWGA{xTrtLR<F*?1kXW
zw%Z)VyR~_=Tu4LVZ0nJLZ0iz0B^SO$n}_>No;ct(5^P2(Ewy<+k%r1dO9nPLC4(ae
zN(R<ELNZ_v4JCsknqy}G)+T_&x8ap=E!m>2+#S%nlf^6SdetBfe@<S}(qSW_M*bd2
z4~oqQdryb|8<4VLHI%;A+T6Lul2KM5a&f6&8)d^FAVGdv2&iO(+p0y&y)Al;r7sYQ
z5e*wqNK0(eM=VBC7t!EIj9LoP&vlKZt=O_*)buNn+Q(M)cFVAuo0Fl#2}Q$N#I=4K
zalaV~(sO|KbXMU*y9DJLOJC^Tt!?j&yV2Hn6^LWY3q)VQ5xBx@EE}PjQc-NYL!GXw
zONYj6y-BpjVx?;38VfBOZfh*Gi{zkWe6$n2#)84Sk9-5|GThtHmh9FE)>syUQe@JH
zG<-ut|7j|GiiSVd@Q{X`Gu8WR0Xbv57m!R|t>Kp%UeZ;CU#DS(hWj<_+D*Nmrs4e>
zz6wa;`d|HgzEpu5ns3n1eT}6h_Ut9DN2^A49*>{W-|jqdmr5M5+Oo#tNSI1qh+SjZ
z5RDgCHyjCFN|brEa*f52S1PB>tzBbjF{LXSan@KInRQdvr<T`P5~gx3zPDh1jx{Ve
za-!*a9HKebSe#Kfd$HG8sI){b2gF%pNsxo<8VkulgL(XPg^E(v8cP+Bj$UJNCKd_S
zSfXN%6ssZf+}Bu~Q6p*LiKa#3HJ11p$#srMqQ+TcX+sV}#9r3OS}Sp^u_VZ*g*6su
zN><;w#=?OktX5f8Cr2uW)v2Et;WD4&SWK<Wk<N?J%(=$G;;FScqeV85SF>8|!b*ZP
z(TxhR$g$ORZKWk)%RyS1<`R$nSX;RvOOE~bD)5*BH44-zkb%!eF>|<3fkFkAD)6uZ
zY>()*mF;&Hh~2oHYNNj`Yb!I6oIht4r?R$Uy5<zQwt`{Y=Q<6RYbzYfb6sESwH2*r
zBwAb1x<w0XD_YZNacxEV(6El*{$d<l5a7%s_*4iSg4d-R-~_9(0O#Jxv#tA%cbq%D
zhdzDbGNQ<wjTh?FX`l9<Y?$LK{<XYIa8R>R;4^&N&FYaSnn#W={oE+<o6q3>>85jd
zfZM~kU3KW56x{AX+0whKn2s-p)BD&T9QO}@dCO0q`;S;uw0I6ah|V35J9=TsysBOS
z5s=Lr@vnpa%#|N4d!XD<B^LY3s~c)B#BDjeU^LVYgWm^r_kH{BHr(z16Uu)9*DJW5
z#HHCLB6}g;K{)5F{7u3A%<sW30-*I<hiCp6&fh#hejolw??8+`d*Dz&9L8mR?@*8X
z&6vAz{-S=ZAO=3gnlyK|V7V!+j!x|2pUw{dAUGA2UX~i^fvk~-EG}-EQ1SKh{sr_<
zha(po4N*RHgTRry`pNKZFgN#y_nDEt^i}l8m_MQPFY+Z1Xv9H}mBEJc6%Eo$cZ2lO
z-C&e9FwbdLo;sq;_sYnm%zK>5yR>K23yoetC&qDpnH%bSD0~Y%bcxb4Dp$aDIGl4A
z4tfR5z2-eIcMyKRtYl3_k>8lqXml}fW@OqAka=^UNjq3vJJq-?#~7ZISATnQ`QGLm
zYVzurrr>x+A?k2a^$ii{)uPm*hRPy%!vVpHitjuN>jupO=2YgONIytz{%8a`3J$bw
zF#f8JZEQ48gOA$sD{{7v6{55=;&Fk_yb<w!&9KLs;299-XP2f_onfxN^hEPx3^n&%
zjYRvJ%`4II2EA2Oe61{L;GD{HjEh%IfMb$N9+N-}O3p<5%HT0cF3>+MFL<o<Y&c$*
z6>c&n`HYVIY~B3F+7r#@gVW*H3_e+e@i(@36TEkwU4A!?kMB~v8b#nZ!9w$LoFv6w
z-V7HiIQ+QuL-<mG7o|pd<e1S_W;XDC;J4cs&ZT#BE)DO?T-q1GQO!Dd@xMmq^`3>M
zEk_QHtvIwiD}T_}_8Y@jWiH7-(OfXLw9cjIZ9kSpm#=6N_snJ`>e&>>&$OC?=X3JR
z<|N~~rix}9#Psim$`vM@3>ihH`NQ9%ecm2J@(2U&;&;vR*naVfJ)i)c5sgM9Iw^ag
z2o7C7Q+VNkO87<t`zT`m4E5It!xv;>n(aVo7V?N`?ULbEYs<zRjYehu7cu|0?4)I~
z_y%*|6Y6yrS-j;0G$2NbxuQfAidkZ|xCQ@j!t-dcP|OpH#1uT=h&A-NQk=+s-8gyB
zD>xt(9%yj*B`9=Bj!mH&IPMQK#_J#`-Q@(*jINTYx(w<{rpnt@az+uH_nH62ISoAL
zlt<6X)_(*kY_zXHzKEq6;|jcD-HN8r8P0XrT!SN9t1UT0gqkXmQN2+RQ&?#RMiR?6
zKaYz?--GYWt{h*4QJ9lg)Od#<!bSSRlgvBlP*HKuvstS_b1Kgbp-y{D50<b7Ril3F
ze#WFGV_)5wp-j)4$L~xke+y@~HW}GJF|NzWo6&fO&)8MxHTD^AUT|Q{%0uBKc?a(4
zKmz%GfYNaIWdTdItJ@a^Ld@vuP6(;$&YLWK{{$P9BWjMhI3pUT)vJ@jD>HMaz>gEo
zzc%aP4sXyaM%N?n<O_4rc|ySXk383TIF44gqWkRVFGfZWsOW2vZxYV*G`g4%p}JB&
z-3&)rQj8ZBzjKb&&@qfyca_D6kz%LwAWQ5_9;?L8%cGRo`Gd@gVyFCyEU<(qxkc8U
z_hAMKt&t35X$JKa_E$(@4<c?b?}F7Mud%c@c?^#~1rCpqjS3%QHt1MNu)J-yN2ih^
zeNVHLYBtTc0*#ouoMqQVcB+QaswECjbabjiNE&XgUm7aXHbyehwZNX}F+<N)W4P=*
z_*bQ$t?)^Brfu?(HjM3ibD5`C%s^UNZ^{8_g%Kik3cajMS#-<Xg}uaK1jiUVwjeOV
z*n!VUky-3SIVzgMJ0&7};vawXx6bgjbi;QcrB)Z6fVhaE^&hWr<D2&eSbXz65TC=<
z{RPUA*e`*v8W=U-l=i^LXCB5dwD_y$=3lenUrx@(e>uvwYnJzRdq0lkF*sak;~?AH
z2NtEEIfjw4?k(_E*@_dQB;71VE#};x4El-k-8}G_A_)Ca$wc$v_?3Kps9Pl)F0?9n
z2})!op9rc-F6(JkvbiIxQho*hW0048ZT<n-4XTz^wJWv~Nn$EC)h<_7>;h=atk`L?
zVmMdxMA^qpsE0WL@mR@w=(){YHta+*tF{SQcIq@`<bp*v&RW3fG`=$>uadCToM{mS
z8{$JZSm^olb}ev3mYdA!Kgf#hJ<S<Ga;jPpQgpmoI*9#YFRS|KUuMr-&>KUtZ0Mut
zbmlL4bdNr~8X8fPnYu}jnU-oYzNtR_sZ{7GdBYni`Q$*QyvY`akUJCY#2F`~M)CwS
z^Jl29YDYu`5ez6kjZ*zf!5jsm@EUu(nXJ^G^lec1{N=-%yy@HCFRuMB6d&q=O*rQJ
z?Q0}Dp6N|IuOa9^Z+hc(Go&o#5zN$fc?3A3HxF-GjWg9dgeH4bu(=wHkF$I5&NCd5
zk^;CpZ#a|7J~i>#n?Pr$A5(o)d1)HFD{8-SkKaV!ht_Gc8|0Ja*Yrp7X@icrTt1cQ
zr-gjdCojme24*0DBm6rTSS@0lG(OZS5RMf0Yt2oZgZ{UyLaI;3%a*uqyt<+}eN9=C
z5F?@U`+i|$G*8MjM?+}Sg=+PQ^2YS^`?}yY4!6zfgH0m26@37F0zt{Lp8<M3*(f}K
z@PFZY;=G{fc79O&43}yqdEP_$&Y5T<QF<OueWO#@S$D&e;CkMMeAl6w;N#NwqW0N$
z`VzGFY#W`w_rw^IOw&i{d3NBN2!tz5D{b0~hB{V4n4kOrr;GHoBW{k4sLr1-pSc%)
zVsCBql?R)AwYQ^_xFefOWS_Z<$nw@M&_;H_Z9sOZReEK`^{A#H|I=G^Wrgx`pN6!B
zHcpwq31|5pQSp*wobqZf+yw4nNx>sed9F3bu3(`|7+dH!i_wr4@@(M<<U<t==zZbB
zev95&Xsjpsm2lee4YDlSYj%=l?PXaX;xLlXdZvpl%ZMy%JjyCU3D647*QpvJ6+ozB
z3hC7MI&kOsGWDd-lpR;b*F5bkj8Z01f+OEhQJHS?UMK_s#AWhw;=%;6xHK=q6y_Cl
zFyL?yG0aZ*ca0(MD=Vg;ilGpXB>@I(hOR@;$9!wwN(S(xvoHn^o+~lf5L(aZ8i~h{
zJ5DYp60b}4WSUqc?n1P>kyc}}%Vev=O$>R&$$8L+t)6rNig9u&#M<S+M@97noAR$t
zui(k*_Aqe>eMw=fyZlYE%gfqMfu^Zwso#y2@7QiC;8{w1^R`<UO;$`Di`I^z*CCYB
zbQ^}Ux<}R2VwYcyjV2UGrJ!Sm%qcE(-lF1~zLrd(d_G1c8<Sgq^Tb?u(##^u4c-8c
ztRO(&ykLE4a%JhUx&`^h3OV&MRyO6GSoyxxzm8J)ob?0B-1<NO8a-sU8Nyt^kzHeC
zcBaa%2eNDAOwP^@lMR{OfqN<V^oX$!n96wwUn%dh3vO1`-8&N1{REz_^<+wpA^TZh
z%;yhO7VWPL9u1#f-|0prPCNCts&2s7ClEG@j+T3U^h{dfHNI!Ot-8`_4W#@!52}}e
z`8&ss$k_0d+C`2+N6S549Cgm;%AzCb+x}{dKkDgh9Kf7lIXaF}uica0h=A_}1jzFa
zL^njle$W>LABy7z&|wY~rf+-0fZV7tAHebE*BEpjez-D-Vh>ByIPV=h8PzE?#ve3_
z-od13%?EVdYQp#P*Ep;?!jWlLR56583%bsk1oZDMBkv!8b7QvEQu$<RF8g$jBIOEb
zcy;@22fbQ{tOqSIuT!Hk4y=Yi#eiE459^rIWN^0KH6Ys`dDh*D!`_l;f%IJhHKA`2
zjWm+iUa|?ESK4%YAIv>*);CCVjjY#cID<hRvd~ao?K3Z%52yHzh<69-NG3A>fsAZs
z*pI9jcs`~!WcWSM+3G&i%`Xn(ZF<jfv+lZc+@e`?hLylo-i@Vjz}SEMtXt;hFIcp+
zbV-|yk7XAI(Zj+&Q$MfP@F74yUVoeY+0P*lwM`+{#rMIK{L-Z*i*B{6b7kD!)<-2y
z_SRiNTvJ+=C2QH5owC?0kUv1K2B6AKX9Y-?L_4R2s7Cb2--e6S^IjePcfhvN&wsDl
zJKYzMyKFlkPtL&x0+Np32UOdG?8--MERLaPZ@~;>=V9w4sx~>@cS4iqTr`S`JWvq1
z@R}662^WnV(E<#$cR~w6+JxIH5z3@$YuZaq5$cg|=iXCjgtuI8#So$YEP6v*G;a!r
z8U8SKHnW8jtswC|)T_dQ=y&Igw!R^WTLxz$F~7KO(3JUq3-b0~nAne4Ol7d38|4Bm
zRk}dSh>qDR-(svKeT!W-h@7u}QJ&CJ8Ald@2o6tZ3y>(YPYbj!w1|HUE#(y(ktRKN
zwBD4Mh!2jsQB;3lqUd*wd7aln`BQ?oE-tyVpmgDE*F~8`EMP6tY#!|F=VccMMHRvh
z>G011Ie+bg{?gigL0m`Kz6ySjaj74u+h;^jkVlgXv_D<f-J#hip5~c}fJ(HU-y#ic
z&rlbO29y|OzVZ5(BQM*0lS(|Wc0NpDL7z}uCU)84<wz#^hqOs)13sj!lI@9FLT=^y
z2wAH+Jvnl-CLE0h_?7XB@cnc>25RfK0QY@SrTYLcy;Ozo9HKTb6+_yzw#~9pWN|sZ
zssmgGcs*cvFBb(K8*dzXb+%PB_uUKYO`^SA0;iR5?atw<oMMoS<(K?$^^G^DiRowC
zPNfPT$d}7^DFyaN@mmnYEnfZtEwIog7C!B*FxXARW+0g(i@SQEomvbKhd~zdmiICR
z^E52g@DCb(3dmt8?ed@)i(zUUU_R2V0VGfUS;Mb29GIuV7i##lh8>2g@FER=t>Nby
zcD+KqAEV()4PVtzT&doV)o_D`uWQ)uD)oMXh7W1@oQ5B2=nJTL=W94i!=Gw+RKqie
zsdzyR=WDo8!>=^VAFkqU((v4T^*kPs!}m)4yamt;dVQ>+Pn?;!FZU8_!Ff^r*W+i8
zwfiskn(d8^<#onNC1XTy8H@8Ny(9Zn4)ihGyjqp=5jo7rtqF6bV?6ffID5JrWp-1;
zvEGotRJ{eeW2|Q5Nahs**-MjyOO`CMzZ_2jsra+hAHBb2{L-7yGbnQ5mU+ail36SU
zE8q})3Db*lgXLx}*YpErdbJfyN%QDtV9g@8{0vdT7GHu-nzitzh;Qs2HIoE^7jgCV
zD=}4{a{F6Im&zu9YwXC~oUKmFhL1^$O{JhvyU`1m&Rs%xf%tLPnFCu%Ra8>@J(Ma%
z<mRkvWF8$<9ud{f5Wa*NMYDx0$B#{Hi%J*5AH5fSjmX7j%zcoFFpSRFD<;Irsl~dw
z^86|1=GymiC2l^tg0~tVMkHJu8z-6*P01S879^5SC2D7RduSa4kCP>(szmDJdzCPX
z<dO@*oG;e?i#@OXi1|yxvOyy-V(x;uCGomK6mxkoAjw8oi6XcuUQ=PGsP@OHIzL?V
zTl}LOgjl{SRAty<W3p;ZWt5;x(T*^Z<Rp_5CkG=&W#kn~9<<k~hM|io1ftT#P+^p$
zf*-Cha9~DQjzl$rPKNFakE9pb@=rYvBoC;3d~^tEF_(KD{`}G<PD1)8%)LX0ctuZ%
zPjbQhB}?r(#BizR<Z-hS#L*c=IRkMJ(JOk%(%J==EuOUyE;aa;Q`x9kmns@rTRKrc
zNdK0bL^q_Y+ST)twA6`ekeG(lyrffo%Z{Oj+YTgD8`0=3>zp!a?(K7zEVY|7hBUe*
zCNByL^_Vz{e7?vy(L|t<;Suf8qm(0Ya#WGTAR<{>w3wH=i8GlbGR6$ePnzaoNv|Yo
z+VJ@c;cRy@{KU*Iwwg1FU3J6gDQ%AG^Qi^s@^f_NUTjUF2yw|R7F9KVC&*1!CVD^p
z%6J82igr#eZ5drzK!$_Jl00egsg+<KcT^V{D5pEI)*eSRhqcGun8c}~OApjt$@cQn
zI@yLZq0l_BdypMSNg5<jI^>)%r3HPP^GIdbN<2SJ5#H@`*6cl`zzGF<1m&c4r~=n3
zuu=i4ef`CS4zDdGKPV7oxSZ44n4QI&Vxs78)*!#C@Qy!c7S^y%Gt3m%7(Pz-i=hK7
zc72^($oG0SnP@Mto?ABiFa>eq;I}55a^I_2yArRt+tsWc{Sa0L<=sv8-JQ7G|0GDY
z4cCjfeuGPAC@X0F+mCS0dii??cJk>3_|gku{PF%MuBEu1!o}Y<z#PCwdbe%gYk00d
z<pJdrk28Bt(De@j$9mI#9t6>X`FF`vj;v_Ox6fKo%2UNQV1bW2Z++M^jA@4YwPfAb
zyJ@j40{Ex2E;g$le>;t}$AoJkTt}<dd)?$t(RQP)wWRWu*lmfEkQ<F@8AeA|#vG3o
zyxN6qzUXbDd1tt7NtxBr+LH3?o@z@<_j9pig>9m5k76-$o9M_)EWLcsQO>9Humf~$
ze-tK9JTAu(v=@X%X6Ut<a=gVF-$)#tXD!z(W`gfC!2wW}J9yAk=HsVhl}m5zI2Ib2
zW?qC<J+91*%rrmy6f0Rcxfr>sy4{8>xc+BXb|#BCRM(YDhrSJ1`N2WuMv+`nOv}g0
z5Ka<IGH!3m`*P(6a@|l;=pS<<aI>@ODlyi}fA6E}G4wl;WzkP=tvLWPaW!cB1y~IV
zZ@lb?#^L@@wMKO}$_kf!E1sC7f=S+wTt95o?c9h(J-G$-9=nY}DFI$Fm!o*&AQvUy
zwsr$2W682|X(o;o)Ip~C1s28Zg{umQOQZP`0$FZHmdk}J?rfPn6-PH_rEfdUlTm)$
zTbhccy+;v`XI;LF^}xBX#LIIp&A%STwm_qr8(C`1yATC?42}2AY6M%$me=ECQKYM$
zJgt0pBX&L4r@xpyfV-HgvH7=jq9GqDaav*WV1!meobZhH(jnU!3H!wlVG|?XVpC&%
z`pfC^Sk-JCxn9~`o#-xOm!ulIxmee@5_^@d{k}ZU5ID)L)#37R+@{f$g_tJdnYW-8
z^1FkH=CN$h4__-71zG0I?r4^RY+}SC6mf1MI$5eY8o~NggW>2w`cs4JknmcN0(}xY
z(oy&KK!>lf7I>Z7Kg2!n+#8Fdg_{g@5@sOFOupqL8ltFp{#dKChQ>D-IPn&HW3$am
zJ9-56qo#AgI^g#tnFVZ`!n}*Qle4tFkz`K%F_&?TJanMK$v8LiX^*j|IfE>obivEu
z@yg+TyPX%K44HA3`OwWLWmBJX9`eJE=LW@PyL?=ipEw!#RnBM%&1jlz21uG~X5fw5
zXEfQ`y7#^BaqFI3d-fYeX_b>RjEu_3zRIy_6|dlU<_u$4Hg-I{h>tytnz9wm+$R@6
zl8AkBHO$wq@-5$8Z{8+z<YqvLWg2!1O)p=TElMUCpwuC(zLHYcj|)?(o)K~6E~$l+
zcC*c`D9*0$Y{ax)WtqQ5dUE%LeNbgHVvpO+T_g9nt%LY8KE<x8!Zh@s9_4qT{O(4_
z-0@>6jD{{5Cd_{CH8q=ikqz5g_K$;dCwc}J%~gN?{Vc18<Y#gnJx%e2+DA5ds@(Fx
z^I=(^{^RZXV536~qjR$zKO(>)^B!~Qf+qBi^mR3My)H%yu2VmJk?OBAdb7V8HLAl}
zV*+HwphJ~28m;!a1tL_nS1DMcsQAxzxkfOpaO$A9z^>oprhpo=8Y9}!w9+$i`y1R=
zw&R|OJ?7^pC}<l)`I+X^%Om8+OA?<(vjTyn@N2ykKDyP%py0?>muSj%m$E|dV;I$q
zJw?k8qw6?7r2b%MnE45|FXuSJW@aK@niWP_b&zt2R4kNo>DeI@AQeBp#3T4!k$nI9
z4u+v}%P;i^L|QBRt0V0cnbwY9qT*jaM8$uW&*lx6$vi3VbRA}blUN7jXRaxLI3$0l
z_p&|#{a%O3`t)^%$@*mJFzmNpYh4-_UAIxHZkbmDj~^;Luoe41tlqR|87hTy_T?Ud
zj;&<)LF4ru@=cAoEKk*AGQ==sUBJg<iG4U|*hf*f8z&n7?eKpgJy{n<iHd-ukB?_i
zx`z4RqWL%{-L?>u8Z&FCrW>ElGp<l{d!KaU#u;<@4OZLBum$HLtk@aWhhbBkVO0zZ
z=rACezO~SkbfA2f*VrZ76k924)^6vL4*AN_zJ7_P?2nYo?2rvshy1wE>X10xIX?}@
z%nxavmQjACD7`2IrNQc<4d|hJf=!(<)E3?>jE>hU2{GU$FzLv@Ktep88_`E<ktsgW
zF+c66`pEB~7TB9Z*v7yG`{|WP7&6hqAcT{EB??*1lQX#2HGO?`#9o@K5RsDLex2)N
znX5s;T7znD#B1w!1ouZK1;v+umjm)w2uLRYeg2bguc0kYE3nVYaXY(rKx%;)TBOc_
z4O|aAaW!==5J#`Ww`;i1W*FiO0Xz)24sZeBL55Ak6cU%x!#NY+9-v&JqJGf7S7qnR
z)wkq=DYND;fb`)8%pAN<FPJp9q;$zb_+*raPU4l7It6EvE}11AS;IPU3u-k6OInXf
zm=68^4Efm~jMF8v7S5hKer`$eqB-*L&iS)1krhb6*>37=S<8NOSdz%Oz>qx5I*@mW
ztOh-+$bw<oTmomcM2EH~N7?{GBlc0S4RFQ;zaex*h;8O?%14DGKR4t~67PkR<y5p#
zfl>t!aot(@VhEaqKN1zcGG5Ki?MA_PwqP!4x(e;UpEE)#iL4@NI=f5^J2?ptZx<-q
z`ejVP1O?Z*xbDQo-+h4OtKGF>zFL=_n6K)goE*qdXF~4<KOM$(3|9lLFu!o6$C@dk
z0Q7AuBv~H&45m1Cx?-Sq1qBOc-9+c+JZ(7#u~QYBkbw}oA2V&TUi*S^i`3C_2n2b4
z0p!U(?L;@bmB=!7OJ5>!i)ER2WbNaz3~7`SCr8qA)jwm~96Or2qFrfnv+;FlAHP)r
z$UvoQ9-&Ob;D5v#{1<k{6kvR#HU1kb@by?x@rP3_Ia9d;AM+hEx>6FD4|l@%v(+W-
z84`dl$ybF_@e!lc5x&946h=3EwU@rlpY$faO)Rf&hrNv0fr!nOMi816&#JHNX0*!-
zHl(lm2B;hDD)Y0A05;}f6Qiii&oT0GY<&P54fAvLK5_OEvv8W+Ctf+@80IPpmyQaT
zBqErfU0&@ERJJqnb0asBFCRSe<zPLE5x^03*a&Ju9X5X`H%aozti$Zpn4F8R?<##i
z!jUvrm%bCuq@wzs0G<qMzbEfUY;WTJ(u~c4lHAC5S5J#V`O&EoWp1k8V;=Z|3epiO
zNDnNH5dMD$ow2*xoP$6rNLzY16r}Som_{l{S{L`r&#N%eGYWDec3DotV<geW0s{{6
zO7FXO_Z%qfy7`-+{uy6{Rvel5EVtr*`I~DhL(A~GvSK;@hrbFqitjqe56?k{t50Y`
z6}KWrVW?t(0-PWfhC&OOZ2cnqH)Iy(8P8ysCzM0^q;`zXz?3@Js2eD+hRU-K-<v{t
zUbP#{RsR}>Mgs&W+sS-Hi6_5oCkqp$o_uT}ZPIlU=YS!uDw5QNiJ+ncQ3w|U>ICT(
z7ektr?IeyOebvuV#n5_IpEc{qQ<}}KqlhZQRLanby@RS1F@Db)zdqfranW8wW^V2n
z+l((QDp=*A-jZ_-S#-#U4=$QQzFpYCuD5Of6I5%~cxi*cjn}ZDt<NiZUap#ZC+0PE
z_!{(x`AcMt4j{`3t*COKavjoY;v;4$Vup&U%#X$-My5(5Gb0`{ReCe+hRYN(10*s=
zX<7k4nY+9IAJacdp3pTebW}HO7Y#GM?a&Bwu0kYP+mYopSrba%up8kk&|Nn|Noi=s
z21l*VyVkB%(FRT6Ya;7Z+QU&I3A{nqsWK4JhklEUut{FmX5SE1n;S7(18G;3ISSnv
zE)=9ZAH`wEzxmK;yOu+}F2!2k1ayfl*7^))vM#m`Q<^$cb3Nol&dI%{r-vW=q`y#Y
ztS6@$**~c37=F=L8b?N7X7wMri633%l5mu4_IDqefnAjE2UEMmrtI{sA+jXD60I=@
zZo!A**H~TXVz!cC<V=^;{DR1ty5aXo{XKpx<dXGY@zS1Z?t(-J%ZVx2Yc99DOKH7l
zk~Uh&uDTshlx+uKf2!MWi?Fq7t^?F^SK(7r^Ycq-X|d-;I@~v?8gq>rO^#AL)_JQu
z;dtgk@EE^qp-qYQrN>E$$vJ8_eDX^=PZ|rLAlKOQ8V*fSGaKIlHM3Fkny3hv+2r`-
z%tqmDUdeLuv(+3?jbJJKavt9aQ^B4Q)`RdQM%;k!kq|aphu;fG6{D^C^(N%={P%-m
z`OKhLiz^5BLvd}vbpTf*uA{i>aV^ICOk6{8J%VfVO%_g&jnqWBl`S0yRz@nn)F+a}
zPk|mao!2Bx7s)7=dz&&uS6lN5E6l-Vmq=t{6`ugoMQ_H5)Rl=+JYCt5)}bp8ktAR`
zdv`f>Y?@}NV>{C^G(yK_JEXYRflcP7UPIL?Ln@_e?aqM;3EJ}K)R(nFt;X7k7-lU6
ztD_$p#^*}ES^@h_TH!R~b*V4Cd<-m9gA*#D2jPRLSMe1$RD5U)5Aub4FvliCJ%f6a
z;<s&OnaD6oDNxojX<Ixf^{;?Wesi)T8F`x*;<GAg!$b$6a<<qv@0&e7QPMYk+a4Kh
z&|78)#Odo<;x9=(xwj;>F0IO2H?%6LZb+5CZZNz~pbs)-z_;03;@j*g=}eVtS&k_6
zRr%^pt4gj*w*yoUMGE#uD0k?{S*pKU^K1md2;)PPwMJof`CZ6Hen7rU_VOB7>v)q(
zS-`pbwm>_Tmqb9-3)4YiPP<dpi~XJ{21AZ?)p*V;KaxDJywOu41qdYuZ9LBUcaN+;
z@*3*JhyK6{)bR>+t8wY;uxBXzX()hwNY*7y>sS+?Jp+j8Z!PZ|-vl;jjh1x}1`p~S
z51~6)S{5}EXj%M@6yQb)LbR!e*3ZL#H42!|JkeGy>qonxW%bPDC!-b2D7Au_N?nUZ
zy6IYPkF|9zj$G8Ws95c(xC#F~eB_s1Wjkg1^oo;^A!R$6H&m~mp_kn339V;>u=4c)
zq~~gxylf{k5hbZsHgy+L9a=k_dKt4V-^u@?B*ReOk3mObUUjfksyi!(yQ4L@wKv+-
zqz1=SX5%n9(vzG@gJXqUG`K!!k!Gok*#lme*^wID>;Y;}JAvsF)eNV`)&X&KLl#vj
z#LbIZDB9B3p2Se<TC}CFnHQ>}%T&?pN1zI5Ow!Q|ppcLZQ5qGiHXh2U^&xAaoq26H
zsUfrRMak`?c{b8g1tp=7UtAhNgO(rq`s}<y>-!>2mB)M$YXa)Qz4$jTvFcX)Q*@NF
zon&uOQW#o)J#NDMarzbHaE3*rGdrBIR=O>8O6|Psu4Hw_1DCc`=VCj3xtceW4AGrz
z<&zLL-P%J+AJA+xQE(nyiU~~G)p7!J;2v22FMJVQYaga;t~#{r!Vc^sbm+r_P*=%s
zwhk?OQ^{#zb+50Q>eS5*2SK|mX@~3Vx~sy0O2=d?(rJiP%<C?Scx~4rulYFW%jr{H
z=kR-7jMBZ$ZT%y9b|1+yx@UhW8&LJ$80Eg*yl@AAaxeSda&&r|uc&25^*u|u-!eEt
zxqku~g_Zk%^;N82fw_OIa({P3p=G+)JqJ!oRH&ueUm9DerP?pkg=WY?6J=(x;y<yr
z7ba+Sv>MM*2x_;Se1=tc@&{FT*&yaE8=;6#(_*ybLPbI&usxj4Qr?~E1~J`P4h7yB
zp$j6|GVM_eIH3x5Uj4N$)jzWa0)~B2eyVHUiG{_mYF}3nsoH;lC#v>erJ+5x+N!;6
zQ@4iYl5SW4o1AS-$~8L58G?y~7(cN%pa#>Sco<x4>8C&fzen_QiH3Ip<{<o;e}rv^
z*RO=GI|rXq;QV$sn>1~Q>&lc(dhK1%opI47-2|9<H(cQ2%EJ8!Ttjice>wDK+?U}x
zhN}r_`O6U54#l@{$)d&B6Md()6-!)G5=LR|j+(BPybtk8sh8W&&lhWTk?3pumGQFe
zwbSQ2Y4p5)-k{+x0CSL{tu*r8>!i_UJhzrc8xfbk4AI?{M!{u55YLo&uUV-$q&bdP
ziZst$0NUx2TuCEJZg$efcZ+)7sKfsUkaMo*kA(Th%xu~Ayr7%1J--9kh>QG_)g6AZ
zkv0ui7OoMv0tn-*U@ywy<f(%=-9e9n`EwV97Z;dQ?1V{3oa0%FF_psml=#__1lNBY
z%VZ$oSfm74pa2kEc4odP1`_<a5;P}ygcv336cYg!@3{+0kkFL)$~@%1k_C$9nHru0
zcq%lXj&iqPk=~b8Ao}2%gR2l%G|fjLjM!a@aum%oV`<L$DKm*B_hN}=d~yrcC&e{O
z*4&NMm@fVSi4@cB#tPLGcM__l6}hLvnkjzrpX1iPiL^qRX5=h!^btts8uKC4v%LCw
zLtr#%2YW+hejj^A=skYiF(XvFC)B!T+1-8N&JP(BVa_Die&>8BH|B6{JG?GB$)_wP
z7e1r*>P$7J<Ly#U(wF6Xyv9`hwlm)9744_LK28a)=V<o&s#p1}!Mq2b!TZaX!3R$|
zP4;r-_J3eMtGf;1^k%ayixC3+G{2_Mcv%~FWxN~VOsgFJ{8F^7*pP1dhA6ju<<<26
z=Ql>N0J?;vr?|ry$jm<+CU%XV!j_x~?2PV}zNg`~?^TRT+7}MzV=j1gYb9R$u52q_
z0`kl39>#0=SFU)`ULZHONPm*c{BVM^eB?;wg>X97dHs2N?npBZjDd|{kGbhwI2*|K
z8QE1_CYL36kS*3_GSobHXkM@h6LU{pyMn7rpC43>`eW6X>&VK#rrc`;I(%r<XaZx8
z6}G@Nf;~FQ1{jS7sHN2$w)p`eRAGA#{US7RSD$Y&RXe$>Z;#bJdq*QFR-4zK%{@I<
zsC2zX-<?H<@0XmQ4>dEOYFq=&ITIn+io{iOIQYV*tZ#asY?i(|={}*!+<=U1Eu{lW
zWMJLr$ECJ$9}IE!3c1{SWVLI2zLGlvQsK0#ZG1KOB$#R1`{XNm`}~)#?e}alXr-t9
z6S4Zw$^5xXEEO1(EnC)Cq*ru>oF$pLBPq+w4Px8UD@DZzZezrY=2X&8CL@-ln#*AJ
zsr@@LmC+;m>8|qXRJEF>R^RlRT2T}HQyew#ZK8jQqN8;AsakR+s*G1h%#-TX5pFG1
zuja^C;}2tpB%M=y0G};Ldl)5_S7+%s0mKOv9pp}ejt4=7qJ#2vrupi0neRL1J=hq8
zWbh7xWKi!Uq1z)F0`>&@!aSf?K>mtqB1~8Q!VzlE)pK5I@^+;2L9`HDjdYdS+%uHQ
z=0URng@uBLl@xgvatyv(dNK&RB+0MJze*Z{sEigf%N=s3mfqW8%Ru_?peAZnZx#xm
z8fwSur)1^tpa(0BwWHjIa+wuR%4@5yO6evy<f+XnZ{(rT?w5_`BH`@yE1Ba;tN@V}
zu|JIxJqetvq}(Li`6xV>&^_2)O-WK@xrsg63(f7=JE^UOJ<vlqhv)*y2kBV3tO@e(
zsc`?d`bk(WOJuqM@fPH=jJFRfMQ!Upo3XdR>@E?Mx6A8Y`;VLa8x>dnof#?rWVRk;
z3;9Q@B;^d8|AYnLbCv*Xo&1v(9gWtp<lmNGqY8r~<X>rg`PVtI{Og-Q{+;8Hf0+*X
zhZ3dyJEr9y=Iu`TH|Uj#>ZfJT$lD#VrypdGEli~B*&KlEfiUkOBT8XT+0&1*rwPW5
z+HFeqm}fP@1Xo=RLki?HJ?f>Jhxwl78_1Po=0BBOIVMGpBwiZ01g}ifP!a{}n-Dqj
z)#os)p(ffV4|WXBs~nzF6dHe2%b;tNFu|4q2$O7`=y{n4!lYkVnB)TQurT@fDkV%7
zo&;gS!ejy>K`N@PWKu+%W{#2(BN+1&B_qHWR=+T&1Gl8GHX`?yy#vFL?5fmO+O<I`
z$%Zy=p79QQC+8gI%6~;OKgVRd?6^9S#A1TRqV+n_T4<=|&)>F-7cs@_eY=)CqYP5I
zM}EA%*9ZGR!@7qop#ofqzL$o+7uoHqt!~#!y+c-#_QBeR!CKHevUULdA?OEM@3?DO
z{C?N<oEW{Mucdcj?{BwwTF1R-$zJzY>9ncIJOkO-L(#n`kG-z6R`t5hO%c5g?Pm8m
z>}A*8uHepyZf72CVAp}hZgrh>>T9x|zquF!cdG0^_oz;y`j33MA1`J9`7pBo$X8Fv
zS9W*#mDOF~3R%8?0PpPzj0ZN7{rO6<e{B!N{=pMu|La`G$bR3bG13~#uRxw^jI{QI
zhGz{@8yVr;AiDEuwT#Mj(z3htfQkXUIelAx&WlI9<>qF&?|t%AYu-}_4w4(|u{MTL
zi_@Mx<`Zv9G$740D+{vpkpQQIg(H@}a3lb?iDM4JP9*oZDh)UbDkkSVpKri8{sw0~
z2DVA|!9Xa-`iYfkxpKd+T36PQ;aFZ6c%ftW<(7SWje4jN$mAN5wbq2^47sL6qHt@m
z%xY+P^%>4(<#){|pCUb&*VKe@-^G^%=JTH(SCLsKJ69}$VF@k#Y-Fg(+7BM*0$4b_
ze3_4{+zvd;m-%%Vcy{8muwvVas#>7pY~Z-sUAhz2FSTr;tAi;bti}88{RpX=@BI(|
z!*Dw`>)wyiqeRkQja|k>AGUv)jW83}*5SR3bh5OA(H%P-k`5RH;ncbw&ABKG&8f_R
zS0GwhX(3jHY?Vmv6IgJOl(XD0^|G1N2kQa2gMOq|8y-3nL&tSlG@Yu=361crPhDq^
zd6fa1=WRE8qw>qP^4p92{@9!O?G5Kw!2A?K+)Z=0d|!q4Qu&n&9OuR_a{rGatf;#|
zHn@t^CRC}OmSOh^(9zE8wgMAsrmug4Zub{(Av+%B;>2f92QeJ$g_YyCusOo^*N$D(
z;@||BI-QNP7$;@)WSfwp&7~KBJV;h(Oom#y<tdN(^Yhf2%DYx`nU7wGX4;Ke2veNI
zXCf)-FT9(y%NPJEz6L27*+S_RTZvmVRrkO+jL|Suv<_6A(Th}F7p7``wrr)4+@li4
zq%$#DzZ^{CAn-24j$XCPxyP!eGGb%Xl-<x%D<i0$26}{dRK1NAO_KN)O#JK2o0Fn=
zAwy#=H-Q21O+ASamsrBM4<_!KBi4_@D|4QV#ajp39jr<Y#+z^@`;ukXGfc)Fpc(fA
zY^#c1A56B}(yC;YUCG;4$5hf<`TOiNRmmS>x*wtE6p<1YvS8(1le1Ctzun1#mKFbx
zNE&9yo_Y!K3TCuhGo(GHDZ>%xumfR>Ry<cc4!7Y=?#-nQ#S3Iey^)_Kzf5T^ML*x+
zW6{6DazG?2mCV3mt@8Wd$<9$nz|bk(cs82PTnSb3lHxMNXf8#+-XVL^RODq3X<b<)
z#^h(AzOl7eGywn4?AMpc*Y!K(D#lkj&NYlvtNNU%@_7XssF`ALu~>q$3KomGfF<Hi
zk%KVnJ#)BRhJ?dX5SAn6<BWqjNV817g@Clb;j)Ia?7v%Pyi&Q{Lw!J#3ip^0UK}7W
zIS=w10VuHcmRRdUs7sMJVuZt&JCGG>jAL1LdC}kS{1yX;wTG82cRNhwT3XoO@Z1Mo
zUZRj}eYbPjUWBOcc8-sVpz{i(#+r}$8Ujh@t}uJ>J0ktv&Vwk-i6p)Ul;7=ezzBHM
zIEf7-Th-JY`%8X5P43kIk6{pu`u?cys1x@qe-Mj%{;LvqTlEMHPcE<aS@pQ>WxE~&
zBkK`FPOL|=uE+Q<9QD|Tg5%c1F3K35Ou9!rdmPW{TfJ%wHvbOJf}3i?S22CeSV3LG
zwZ11lan|>O^4R)L-WOfp46CxM_SlsT!j-Je{R5E=E1QKtHrh-W10ovj1C;7k*|pp0
z$P&0xJ8@Lg&u@N)r%8ndclfvxANIt?^U7#GXEf+9u61wz*je}9t77Xu?Um@d+YP<?
zCA;pUv4m*Xy+5*H-Lv(A<Qy0TBI^DTN_DL}L|vqvyPMLh&VLl8C?~qFekje{4#IG^
zdNTL=$z4m>eQ14L<gKZA>z)qjTm4Bd2F6spwel-|UsZ2R@EI@Kk;?CCk6lxL^wgam
z5oio=k36vhK5s8R=Ua8Cv@>>kns=u+bC&^p(L;Nz^5CDEOGWpe-+!cNT91!2+4uja
zB9f+)r8-TI&dAe7BQ(5YWfDgH>%g*@y=BAN1yy@`p@P?6d%=O>_=dC}-XdC(aa#J;
zE=jurl}X&vU1NH7t7a(3G<S`NXof$bWH!Tk1d;_m_)Ip#9xXSn1)>qn0QEgWZrG?9
zliI6h`1Q~Acf-?t#@p#z$9R(VmA~jUMkgCJcI5KAJYq$%T0D3WJ<h?vo{H)fYCq=M
z9|pnX;a`(}-k{;*fb0g}#vkr$$U`}8?B(JQm!I|Ymupkj+Hri3xQ!AkYgvj|6W^3p
zX3M&^#>*;Js;;@uTB(|XMRoiVdBuGPkt2UwR;%a3I{Y|bTWPo@q<rEY0OZEgvymsA
z4~_yPElUBFPh7k55spP&Xxdva%UIuWn<cU~N!=ZpknVJ35*2x%AbMdxDKt5Ar>P@a
zfT8wIQ_?2fUWrjAU0c&$$}28huvNk@uG2TF3n5%R<Fb_#IXmHdsy<=?%78Cd%e9Z?
z8`q_rQ}K?APnM9s|DweHaa{_7Yd2R9xg8xHt5xoCSyj5co&F<s0riV^kIOi&?s3H$
zq{?*qLUlp6Ki0{$dt%g=rR+w!^j<DLa$Qol>?K!-Oau8{;P5Nyl2iY0?J4&F%8C4K
zUW0G@5S9eU-|2uEfJ4xOTI+L_esVWIP$2f=Qa?~=`p<)cbBM%#atlx#eVN`3s6=kx
zR?r~AQ|?ie8RcmcN2AKhXc>`8Oj_kB*O3fWAZ=3Ggb%5!WPYN~$$bvq4p@y<dke^%
z8#L)WihgAP*ejF*Z*6*i#%e^jej9LqJu3A_z}Y`m;kEax?=hD{2DP@`s@G!Q3$9ft
zJR48|s_!t#;S_^xz+!N`(^szb=Ksc5u7!`oSMFXQnFD0o<9zf;U%9Dk6@LxTaK47W
z*6;%jPkTTOSC<3QSMFVa^p(2<kbHSe!`uhe^GppN(eQ|dm;FS&FW2x*4bNJq!t*s;
zrs0zs{zt?9>s7ovHQb|NlZJyIQty{*xLd<o4Lkl+y&tIIbPey<@FfkqY*6vWX}DCw
zpKAEJhUY%4;@zg<TN+OMnF_xfki+_u`uTl8FX)va`&>h_Pvo@JpL>bH;Jv6m?D4bL
zhQBz0x7-D>vAoV$sbq~-ddqcWpGpOwwcc`_DXZnE6XmKkj<;M#%5G|ij&Kg!Td+gM
zYCMi)UJ;P}G@-X!Zy7#}#L?xh-fsUlyyZGjOl8f&K11mpa|k4hi`QF6GD(oudCPUA
zOJx(pc)X44Y1f&S4Ih&>j<;M#%4o-Rsx_0Pt6z%sYs5IzIo7Eyz2zp#D4H!~IZki6
z#jY9CTW(u2PV6l=QBIQJF})>`x7>uex%NF*Z@G?aEXTJFkGjzUAp_&FM_6w4*e-Fr
z<vOyCVc-PbauX$Ni?>`yK2gk-*juh!$~Jn-CG*l-t|O}`D!5iA+FP#5D7qD5<pDiI
zMtaM2O&3FjxZZLdc<W?s^_J_FN1MFmsyf6BTn=x!apLrpt}>JJ7r-SdZRPaN9g|U%
zw_M`u5-YB^Tu1$)+Sc;#o)Y7xHgT#%-f|PAbmgT)-f|OVMmO`)(`byhTt_OeaP^iO
z701<Et|N|AGMsL2<9N$$DVb!{Q}veX%v|-b1paMX@Rr-g+$0U!<SqA93i!^v<vI%Y
zih**%6Ke%>L~~ey+>K0}F1qx<Xm7c#lWq8V#noG`1F0y9D0?v&$W}TaI5;m%X;J6q
zY*HD$63<iNG54QRllOLfL{3-xDR8v{3l;dW0#7MG)i2s(Zr1$;A{Uo)dK=?0cT`N2
zu*cjfc*mbJ3u|ciLGy3?v0Du3F?ThsJgylikGXnI>E?LHvYhD|X7lD49Bq%eeIE_a
z(TVCh{XAI1;ec(mtJ1b|<XUyH@;4z5Whk-F7Ask_B-X5_JYdDQOs|zV*=AIUYxwN1
zL|L+yt+8^##_?}NRW=UwJ$^!~G%OCkaMEwYFV%C24u24^t@P{jpt4Jk1EgJg8}guC
z`fq@wV+WL>?9w(pU5&h&p1lP#jGdzeB&s$!-310|PJs~>d7vP2VR^(2meT)0WS#+r
z+E!`!p}@;<dnH1dRBcUrDXa7&$T#Y&wy+&i6T#IY%@$51O!yvVr6%O>a#mYR8K+{6
zp1u+EZQ-o8n1bS2qB}@Sw5oBd?9i+r?a)Vn1?^}2Mcbhn$K4K{`4}XW^PILARKr&2
z4WJ@UeLx!5bJ}83wrqi3$GqaLMOf|rt*y`SNBApeAMb-r+0zkLuEQS&r2Y9F3?{9$
zV^T)uK7?=gaH${Yf8eRs*q?W!ING281E|DmytRNZ4I-@1Gf`rc<;v^NMU`yJRVwjl
zmG#+?OfnE@6Ln5oOv_?Lz{ZEPRdPL1N0ip*N@N|D%$b^SQDduRefDh%w^=6c-$9iw
z1pH8k&wX6ko--k7TH9tr*B6M@>(E{(dIR8cJcn)16n3;dH-gWdwrA_j|Bdb0!pC8I
zo`Mda17xFZ&#OQd^41d?exhNI->UFw8ioKlBs~L2+j9dTZO?-@E1sOE;V(3NU&C&{
zQ}3_U@Q)h)SHrPSsP_+RxKqO~H0=F*^?s>_n>GAW!@w5x{&o%jN5ii*yz)u)ezu19
zX}Cqhw=``3KPui;8m`fBkB0x!u=5{OyipoHs$rdm<EqsAS2g?!kVAKGup|5K6xq`n
znt!BW^f_%YeW#bG0_R2bUyq+X*6zPNr_GFw<#onNC1bSG^6bbymAXKTEiKMDZO)V<
zAhBao#<4s*Qg%~AvBUDr?ij1pIFflqK=#uAzbwxV6jNC<r{(z>RLsTl>_{dF(mKnt
zBV8(+AjWze*YfO4%Z86h8^`kONEtl|RIM4F1YRTdqR#G?=R_GrvxO|jX?Z^CnlUZU
zZOJ&X<vCGKlHf5spUCo@FgMq}=W2O&WMdhTqb$#kIH_wTYgp6M1eRxKvS<cQV0liI
z(AB^e=bSc2K2gk-*z)X_vW=E!)|ZxNM^;hY*tIgzmS>ewv{;TNXY4s`uIXZ^5ZChT
zz*{G4tL51(k2YDJRUKjmE{EkgP8@g3vjd};bK3Zp)7Yq3aV^h|cu{Q|-}0O|RU*rC
zqLi+@l*sa&D6{yMXGf|ymglHAu9jy<9I0fq%JSS&GRdf?YI$~Mu6o$1Tb|pPo1{UT
zEYGJ>z;|YOb`(y_Gp9STmL5kmho#5eki@B?OAm~;Jhx7^#j`v+kcyIsvKKon&zuuR
zozoVhZ*v~0Y+s4zr?5KDd|J*=%N6*w0xv0WQ~}=~Wt83uQ0<GhI<Nalf!K)4IjxPc
zI`58&61F-Yz&rk&Sy;n5%`hddF{ITw13JK3*VoGGtY?#ntj>CF*_?|hh!Y3f>MX=2
zkRbAx_KbSoqQiFpw$*MLZFl|~@=yj6oC0859AfRx(l=6kv$J2KX4^?|^aBD?T9YL!
z*%~t@%+B+Wr!sCRzdnh~&POz@Ec!k3Cq+9`hquFXTWPlmot!rNz0$0bB+f@3oZwFc
zBn|HYR5oY3;;sf<Ma$lT`NdAos*p>>G}T>FklvIOQIQ8q+`@v09~RT(?1&a%sAX~{
zUBc~@09_KaHSMG~L8onny}4JMJz|OguI6U8Y$7Sb_cWp{K>q1xC)oe2$~YBsv)GHg
z{ry|J_gNJb&)l3U&CN1StE|neAFa(3wvpG>FWTD7IPTVFoWX*0nY|O!-QM)<M@3P{
zcBDx^H{qUVRmqmk&BC`GdBwALt6aYQW@nJ48s$X();${(dlB}f4sVZV+MCBgytLMK
zN!hsZX9c1fm->M?L-)4E-aH7!(I!|7sKjYJo4ZW|Ti9MK4x_**bCuV>7FpSHAeCse
z%G~To<`tw%O6zeUS(PkL)Cr}jxdAzcrSV!#Gv{Cy-srq|N4UMpa34T@ehxVHITilq
z^UBt|8e*ok?X~^k0^!589A#$$HsT7~nknVvK4&nw)7EUg`M<F>7i)YRw&vXk%t3QU
z+nWCkvXHO3?o@DshO0H)rC}o=hoZCotZdES2c)g}mw@EQH#Kbkf_e^Wc&~;pX?SL}
zdS9&JRt<eGs_;G<&d~5d4gaR$X}eUs8#MgAh97BodX0KNOT*u3__~H)XxM$Xig$&E
zB^o}V;Wrvy^pc7<UBl%X{!v5!9`$~zhTAl}<Yg5;6OcppgZlXeKriU^m4-giBcUwq
zCHjKtqWZ4K&)#bHU7DKb#K!VEW2KTWT4`!_WS`2xJ;rzz$JFdh`HUQ7TDQsBk+Pc_
zh8?D6_QqIk#*xe`0<x3-|7B`+pqR><IZe$2AYNQd&5mS}AgwbsJJO}H31ZB}aZSz6
zv~2j8v~f($j+D`}KGm9$rsff-v%9G|QAW{hA<J=^nrFIZOjC1PGEQu2PLz`*cua3e
zWNJ>Bn`_^5H8nf3iDPPZ#7Pwxi(9qH*_kYwffJaT6D4%DsKqfgJMxKQuEeHhx0G!(
zHM71nH9NA3>c*~>i8eK>jH1PIG&y5U&93QUs1VoG?7&+mYpbc*Esr*tnpGWQ1}=xG
zIZhmRQ?mo37*jLfa{3w-E3T>85ihE3<C~fjr%GgMPL$G>mlBzp6J-|P)a*zV$J87Z
z$JNyAh$EGZR+*YxN+ucgR87s!%vBFNbyIU2bCWb^ld1Vs3i!@U&5pupYUXSw*23e6
z=CJU%8<03nbm@W7rsmekws@vy2U1ZIQTAeosaehmQxfajoJJ~RR^s_7OwF&#8MF5@
z1v<SVXR8AgxLScl3OuL))xKy`bH)aILW|2et&K4?2V$axP0i!*jz4D>mZ_O0nEIc(
z#gL}vGN^}Xt{LbJ&T2B5$keQ-mdzVuaEvfDi;R8Y`8l!mzp9?IboiBkoJDUs5cbWV
z{aVXsJCy8K=N4c#Bt{|+PDU4M_$v+H030K}Y4!^L6!_klJ$e33y+sBxr$6}73+FAu
zw=+2LmF()1XxVn=!D9RCLDAki%s1j7Uq?j8;bi^9I;7#@WZ|=MljK3OE(Ht{tfYU+
zqRAyo<}bV{N$?9yT2!6+tM4*B9=-JrNT%3TA!U!fl@HoEPX&fS`%*+yNgB_|7mGnE
z{+x`Wk1eax?IB~}U$&0CSBJj~$o6ULxxFLaQ0<d(ASedos>gE^E~4=f@>Iv^rpk7K
z-Eh{em&j<bp8B&SLRQNtf`m_!llZ1YWW)NzIX8Daa#B<&1XThOnK)FD=d~;UUiD#j
zl|z4qV{_Drx%9Zh6Wu1OBXIYa4fnt?&K`3vDhSU#?cs5!GO0PK?qb}83fonl)|`a1
z3ftja*>jE4%6BDK!u57hJx<CsiW<_lrY7whR@ni*cD8l#oHnZT1H<y0a}G*$`pr>J
z!6bfVLz;QAq4YJSeUifKkmZu}N-(442Mqqaq_>~aG`R4&{i);4wbj5A_c!BSJ7Jp)
z_AuyuO*^Fqs&kE+9n+DGIp|OD(`mgJRZ+eCssMbM(Mx@k;j0RvE;!arx)ZN4U)YJb
z!6u!{sJ!|WD0D|Lv)P1K1<m6dN?%6Ea)vx8Bh&koQRr2^e||d|gsiXlx+JH0Q1Kc>
z3KboLZz2}ZTzU)%(P@Qw*`JSxeLw{nD|k$KfBU8iRiXn%dECs!N0h&~@sGnF(V-|`
zaO@C$a7Frl%M&>W35PMxc@fXFom>9lr2kEG34F1l$<=w4@Xl{l<ZqLtkIt#niY6NW
zq(@J4l!}>dyri-FDSS-T-2l&Q<c&h(C4Cfv#C+P{j!Wmm^c>d?j<%ZNh>H;yx8otL
z=i!jnDLe)qX9rFP%bQ#72HCo@mztf|qXmjYrEkZ`38n8}JA=+odFF%7&pZaY-f~)Z
z(@&j#x%Q%8SbURKs9e}}hXY6LKhDL49ov78`460<2bShR$D45~h3%m04de$u(B|C;
zq-Us_O%4ZL0Tds>;kMg5>CY*{*rm^zFbd%pc>7pkuAT_jQ1p>Xr)BRWR(W-@)A8!t
z=HTm{=Xp9Jz}ITwTKZa5emKLu`-X?YgkaZJRnG=p%iD#|U|fq>PJE>UJkpmWmQXus
z{h$!2X1u9{FW5%@Ht6S}8jb<X#hbRCP1AsMJSXMATS3u)Ya_1hxT4QV*^4j=x$6*L
zos*IwSB@sloxNzu9Jy$4iOe8Y@~)F8#+AH6ur4Vv*|Ek{?_9>EH}FbH;ORZ{MZL^F
zo&=7^uiMszn~6TpmZ5^t{Cf8=$TD`E_HHg06~A73ht02z@Xl)U>q_KDeti{z<k!=F
z<>1$~DBjurN+MGh$bRg%4%U3S9s57|Li59G6X?}U^GO8%wvXoDl53p&>xcmUT^o}8
zD;B)%<gJ<SfF}^PTZg|7NZxAeS+mbGAMlp>9`b)bC=UN6DAwS9IpAts>u_zrbvU&^
zYy#YZYcH-wT+5h7{vbK2%uspo6+rc(<n)STz=?c#4$2rK(y^A-If5V6M-!LGQezqN
zdZY<kzoS)wA+qdvhsrwAI`lRnNVk+&G)P`<iE&}%4M?FFSy$0TQErbqFPv3Ux@4}a
zKg54O;N;^eAYL>d|MGV5Xgf$a<A7EYI!)C=e>>(D=C)G2?<#Mz?}u)ZpG_})@a<PZ
z-fpBU&W58`o42n+8T8WkZ+J!}Z(sUL2X8+El$^Y+z4YO%Q@Yoqe@~oyYWm>Olrk6x
z9?R#&a2#&QY0C$wbf=r?YwGJ=;_r*2V|ki04`a1`R%iD0raxFcSf0<S`;PJ%s)q5B
zB-wkEAI&Ow`R1VIa(MlC_?O*n%t#A6ygk2$3V?Os`rhrVe^K#V@TDSeD7d{a6x@bu
zYhh^ov!S9LMsT+|=VBqsR_qWZ7a=F}vsX{jIijy`X6e~{zFa-ysGQyA&3QO^b^H;d
z5Op&D^Y+Q+J;CST3NpBTuqQRRBYo8#FbvZ?fiy!iORweq)3}G<$da@8@Ebh9IV7?=
z3t1W6j4pYFzVvm$Kh^p61pfpq{v=9s7;(8ybs8TQF_mB@D7UU14*7wDL*R&)d+9G*
zIm@1p%GZr#-Zhsa?|?5ac%&riw90!Y;Izu@Uyw>i%*=OBHdh9#LgV*JN7kZqK$y9z
zQXVoBhzr$gC_L6`jV`p*ledRi`o_rvFjwt{%F&-$zVhgCoVcjzP;y4W)F@ZX6@QT$
zO<nis7Yo!2x(a?ioIy|AZpB%xJ&fS<A)IEaPyO7hYr1mR@#bc{S?Zxagu{lKjTzNU
zQW%aOan5E*HI%R5^XibzgW*!nQKgig5l+SP=B-jrM=7KMTx9Yz$4m7+4{g_>`gC>m
z6h4@J{8qXsuQ4C#4;SUdlCwq_@Mx`*A)-9S(aJA<t4v_tis)r4o)aY(qgkK!m_2u)
z703IHq9f*y-#pn|ccyY1O=tPhNe3dS-P0F<-R(}GPRaQ@bZvBgt$JpI=3%$co$y3~
z(Cg=5pO=+eXv@F8baKz*8qEP;sq@3EvCj7K`*QP1o*|u9awd)>?a!-j08eCrcDBq5
zr>9`pbJ+PK!*G0br>bNK1uriDbu|<a)a&fCqN&-L^M9zkuvRlKJg>*It;bHQ1c?vg
z#E1i5K^X3;5rVT49IW&-1}%NC631lir8P7hUwzZ}GP+T)(Z@-~J(q$ag<7N@fzo2m
z!P%rnS9$wNB}8hlp6Wudp}g8>j@$X)W}^}8wo>|^$I(fXc1O_sS(M82l&-i>5%ax=
zDP6-pw##>8E;((`E0yExjpN!YcIIJAEO9Os;lnf<S<D|^Jd)(mzN1AmJxEvMPz4pD
zYjkk3eViKiBAEY=y!U~Ns!HR=FT)@sj)DeCg-J$Are*mj3$sxi#1uslwbYaZ1w&+U
z#<axHk=E%-=~lb8tGn9Tu3KidTV`(Uk{DXKg=uDKWo313$f(#PMd$rK=bU@z-a7*V
z+5Ud-=cUGT@44sCbDnd~bDrlp&vVWt@3I*;ru^vA>v6jfYb#Y_$JM}CHz1ZPt_5rf
zp~nwaVXTX*(+*WTPh)^KdKSk@?zs#$c7062hvyhM{phF;ZkDJ!@I-6NC-Z6T0m>RZ
zm9feOoCAxZ0t52|G6st4iQ;J7ZCeLaDP^UnC0Bbo9Q!4SwW|?}m^U+C8`YNsTg01P
zk5Vbyy_8MGusCxWI3^S~LbevY?TAM&dP?gg_gL*Ta#_PW7k`P!CDYJgiM0xU!zu)>
z7&?^$yjqDtD?97hbvAXl#}0^h)(h#4JPws7YBbE>$S_}r`O2=q!leswvEVF}GlZx(
z;?0zq7%@-;u-lt(Z_|OmJps74&Da`->r|~Bw|}JegRUJK_!IDzO>zeQH3IzM5V?E`
z)raoNr2faH1p2Wj^Sk_l&+AUXjL@Goep;(NATT{j1sY~uM{he2Lb^AI#%nvyqU^kf
zh6!U)mf#i;4dn9-<OXG|xbo;R$XmMeoI3-8P%H|`UD`w^_zmwP*!k&!?-OlYm`q6}
zj+|(V_APqH2=z{PHeU_0atdaMzWtU@RP5{8Uu0~*yxUV56D)>!c3Zt&xg_%JJVFJN
zoQr%qRJ2FwG}?zFl197taRVya0T?4HRNas!TWGD~K$z}p>6jtzYtgr#aL4Jpa_j5h
zIBGbiUc?pQL3chzzcj)o_`X0*U3iA$$Uxs1?_0-+o)?pu-vx00@c`a9iCG+=3GEJp
z#DIuTV2Swccs$W{EK#7Z7>&eLf}lI~%G?5mML~D2{#u8~sVFH>{<ilx&AA1V98CkP
z2#v~UTvV-%!4*hPh~FnJ0E(fMr`RmPeR0Z1ScBNDHE9XTgym=ae{bx05KQ;&7||<_
zE{nwDY`$uF7RQUD!g1-}JKwOerjKKI2gA(QJkR||9RpPt*IeEIAHMQo<&9T%ATzW$
z9G{#8;F*ZE-TJADO;$t{X1uZ%yqK>8(FA@;!!gW2&>KJQd%TLB<V^(6=65&b??Z0g
ztqaGWM#d|R_dV1Zle~%~8m|6<Z$LlS%H5AzX{3Jg8x*46yb#c(*+BvlaRW)BxPf7|
zl!qG?+_;4y4_^Z5I%w(U;A@dI8@DtR;Kqg`#Ix~KFXVxGRf+ZFN`q#Wu+sT+6)Q$P
zEloDVap+-m&N(hDAPsFLw4OcuIQ3k{Veak24~+0$qJM_!^MOy%zt2DiIW!FSo9fO-
z_k>&Z<${icf!sO5!sQgtZ5G!c&utPe!;Z|9)9muwLTLMQK2BLri$_+5aOKZ)Xbjg^
z;B@ueuYkgEPdJ!-agAa;8bkyAMtmV8-v?<8qf%8BpY|BYLAA!jiFI+kPKNSkY#}}I
zRtNy%uJ29HP@iV!Z~sEY8gA*y-iWI@I?jrNNbtccBoMi;Kn^TqTOs_&Rk&#8#;Wrq
zMIfb;@&+DhGHq4*;`%DAEka<Bv+W~NcAF)J#^I0{eupN=AEsuR1cm8uu*H)Wx%K8-
zV&<Mu0i>F?(c$(-*!4b}l{m2YWoMbdus(#qFm4A44C^&~7NI1KMOIdC<5*3CZV*(#
zZBHYy;zlM`Y@w=BQ5Bl5maG#kE`5PSi}hTzIAp%@B~HUAm2&PZ2Y9>e+^ppOn*mI+
zhgvMj9@~Y4v*AVEJWD_^+Eqi!$Io(T7eVR=v?zED3I@Wjr{{I75_-Cip6W0z#nnlW
z8r~wg#JN!k?`ga*o|4a`<oiT|&#u(*wlA^j)zLB&)dxh01N-!%L>1m>cpiNipzYU2
zA?EEo!Q9h0i~3USMxs$w3U2Vk$j9!(%Srg6y!(`{>75ZnH0@QeT~zXND)|(<+BQHl
zq8QCsAk6`FSs>kwtCjK?-9R*n!P@#ncXp`vUZ{GRDFfcc+Qe_d8uXP47=#rdG*Ujo
zt~`XeR;ApA5hOz_+hqL#T-%0`BycoRbI$3SL)Rqqp@bw^R4J#SEXkBRl8XcGV?Z<B
z#-=QVb8aX6qS1BH&u5`3cO>KLeAriNRDQZIfB;{&lOH~WiGt|Q5Um_Q`;|oWygV&I
z8_h!jcc4p#?d7PN3{4@%M-{pOsvNO?(4Ctq;VgJS<!Ay|uvIDV<N^FKhRZ8%kz7~G
z-$n0O78ZWqv)4j|jPE`$?bC;|LCCPusQ1LoL$P|^gzD$_!~o~Z_bkRr#L3YHdh~9<
z{(|2-qs%*FrFX_E?~K)4)k9?JdypxEdgt_CXtb&7os;ZMy(Z}>-l#j)f30?+j$T!R
zUak0-pjVp}d5=b~meTb&8odgs;K;ZY<Vsn6#&6bLY~RCZm3$sIH%G5d50fOiL2(91
zMgz9SNN*5}uDuBZ;b~Opb#7#umW{X{j5IB~UIP%;MHmDXdac8spT`#6cQkUfQet{W
zY(=Z0cf@T+a7&FVFYql^KIqL}k5MjXuTQZMrJXvC>1Jw{4aXkaP=MYKpaX_p42E?T
z8QUwI>jVsgjWDRxrw3s070Xp#=VSVsaOW4PtK9J#*z!R^ufD;~n{SvdvDdk#qMSMy
zbaRcmWcaa?R6I_xR6+(C{+h`DEb^y$s^Z5-m!q4|BU_bSKL)7UZakCPWvjB8o<dQz
z%}T%S!Bovl$vIWqtk{u2n>2q0DmjE=8GLXH4KBllZqIGi)4DI1auEU{ySVOsyb(qE
z7E+0Cheqo_IN2YgFJ|8NUY|NPF`=0>r{jI2-r~G(220dp-uIrn&_Ye-zUGqv?Z}^m
zl2DP%Z=U}9o1FI@MgXh4Z$^%e_g#kc#QW~Y_9HbdmQo7dHx#|hsnwdJ(aT5C`gydy
z91Vq0fL_kOO{16BXt@|Os+_4uLQXID;t^M(aa#H0a84_4f#SbOTKOM$puM1#+sZku
z+<|E2DS)rk;~zb(%t!43TG<6EK5A(n$WumIX;?R2vT(hV`3|1mAjx`}@WyX6glL<H
z56nXING6Uc`#QpvNdI&=|EBBevacguiN0&J#mTeV;_d3YRC^zRH!z|?e?{^lY4=N~
zQ*SfTdDusRrsv;`nn?rG8IjbWJD^q2iOz?Y7-_QU4j!p*gew-mD5&q+_l<OQ@Y%PA
zK|2S<T-Ek)=<Xp?LruLSs_dr-h$*`@u&|;!s&-n@=bF4{#!)z`*5l~PQ^7czHdEk8
zv=(jW&3$;9*4**Obj?jhA=KQSh@|GugV3dG?pKRLHy1LLp<hGX;Z+>C!)rnoR`^Zn
zAg82xkCC&ja(8-@FUO?vAKV_VOq+AYkHrnjN2w7I>HiA9<?mJzc0t%$-%zt(?X4(-
zJA(CT)~_}rrzmG`9^c??+PyZPL8fl;66^#s&Jb(PW!F$NwYeqko3Kjy4~iDMzn{~t
zT61o;QhJ>cmr398_e>FAgs`=^ob?CpXS)(1&f1fnKpEuRREdyq`VB(vXR9F~q~odq
z0lg(EHrPQWkpZlsHng=Q;h(I-Oo?&gER{KF!Em}oCR}QSGM9|Q49Of6tGe4tgr7ja
zT^MY_Z%g`3y?baS%J1B-37;hcLPEOVPDPJ5XIV+#X@gj*MLp5U&G_FM>S~i4u9W#b
zus*1zez=AT;SUh<9wNSbtWVk^uUu+2dF7q}M6CHVE^X8=q850RP@2$Qx$!^1C-=G*
z^@--1TL%16O_Pu}x=*vdx%$=&Yk`Zdw1vvNzD4l-?2{q$>y7kbB({Kx5%&iX|2#tS
z)7=dE)Kb4sqO~!9N|XBI$Nzw-#&9@;;;s36i9SPh<WJcRU~ux>zlC_vx$BNay(X7G
zi_L)&HKT_pf~H08x`u3M2H_{N)i4p3`5MvO<Rudx%QL7zN8JSqArH}C8T}0R6D9u`
z=)WQKY)zB05Qd-T@!kgRw_67a+0y=V{SiLa8`7j&gf$3XK-h_@XCt1-C3U2N8DR9=
zRlody<F~8A(>_f-IvU+I76c&?z?%Jbw*f6Q&JKyN<4^p3ln9rL@Fj$_w0(?_&WOC?
z4ENi;3n7iqH6q+6LhD%`?-1ci5q>1X-i`dbTZC02{7Qrg=lJ&tBHSRtcSYF!JpVpV
zgd0V8M1+Zc{ykrW6(W3Igoj1gD8d0!8f!;^2zQ9EPK4dU`1ceMmWXh#2;(gL`yvtk
zSA;z<zla5xfROOCjLo-t{|h3tN=Yr5*S(+}3YyDdHk!TKTqgJ3M2yg&8E;4xMZ=?o
z?z_f}#4H3kBsSr`Ys{GmIv$jhdvF+lwSy%w<m}3qafACVP0C>I$dJt<IoMqN|Cjr&
z0YtV68{K#5{QVH_yM}BGAuV&?HROw;E(mhLZPI<$n3p;}C~p()yM~-*Pa58vdiPyw
zb7=S7<_a<o3s#TOeK&N$<i6XQf}3~WZLTDS@Sri@ocnIGrG=b(A>DTk#Wdl*Ye*Bd
znGFrq&xe-WChjOQW~0v358!6pcbm%?(o3-k_gzCdroq*``);V5t#sd|_LBRqp(xWd
z4%ry9`z|lYMCnWg(Vb;9g!Ok6h0GU(g(ls14RDKWt##iGRYt4acX=Cv7A}MPZWC!j
zyYCtx3Uc42uOtqeQZ?zmYe*N=C88sP?kH+LS99*W&E*U^mYQ?lZLYAU-FFSSnsDDW
zr3vZ2Ye>VGj25}?UML$IsBLxMH5N|eDomAp6W7C05A->0fx9S|^(Ya(95(6fBMORg
zN|t2dGOXG8*qKL4J8sQuWoZltt#aROO9dCreb-Pqx$lzD6Ra^ZBr|A?LMx<5Yz#32
z&F;G`qis#O?;3zIQA9S2jqbZlHpJZ}V+$6#f)5ZhXemglq_tOSR@o#;aO3?A1Wt^h
z7kTg=4^H!-YXti?m<M<8fL2el8}I)0Y0?q=jACw(8*gJ!l7Jhp4T1vw8H-St_cAnQ
zD{=>?U~asz;05-D{LI~Wg=`tZJHe(3n?lm`PX`=E7&JHDZ0{GDS>A*4nB?*|+~I3{
zN#1?F$i3Di0&00Jsag8bKTB$_*(0YWc|TLWoq!FOa5>8=kFoi)8@=J)ENk??Qm=GS
z?#t6%9nxJL(_PV@+#loX_`$RopY0?36Mppmn1@mmVP%3u_VfGX)MQt<N3n+OnKpHX
zw)Zk+mDB%k660Y4Ej#w8HYRmst&yHK;An+)nw)KuC+@+9D(pX_cVyGXk}M5)LwR;B
zGwP4<?6vwX)u&UgT@Um8%5cx|#_)#JaqfT0WCBea=FD~mJJr~CtWqM7O0KI|7Vi0~
zah&Irr6j_0D$G3zU;h0EnEG2?qXCnrvQb&{=y|fmxFy{cmG0{5Q7qWxao}4;<~}68
z^DnUDzJa~&$Lkn+?a5wi@H&)UFTv|Ii!1T3oLPy;-iQQ5Dm=6c$|~y3E9%86il&OX
z_>%F>J9VEgk%jwx@hq&N%*d2qX+<DAD!uWD;r3+9_iTj04z=<FZ}uM8;LD}4*kK>=
z#;*RrvywLHj6WMd+=o5cJG{=F%S(4+;z-Ln%Fdli_pxLn{erK3ML89M#{utV=l6hP
zP_F;RTrb-7f}FiG99>bl@~FH0UT0$@%JfArQ-`v%R(Fqbzw2_caDN}(6wf?)9#uJQ
z%Ce`<`<2evBfbMx?xK(3r2y+5cl)x^7+BT$Gq%fBeZySstmpe$7Tzhlw~zCjm!eny
z1;w+iX+8k9V0YTNg?0b7M_BiF%ho<C-Kd(Usa?JpU9^p2P@LcWq7MLUCy&<&4j3Z9
zgqk+%dC{Ax=*_I?tl*+w*^Hvc2NnG+kaP!pV7IzoMC)CB<+m_G?ebn_(!&fo4HX+V
z2~;ekg4$6*)cSPR`VnYu#lS_tO@*}%HU$L9Mh3|nyqH*Ek-jN|DEB_9)YnmsyM|uN
z&W5?$RXde1ayn5kn_z5JtM=Bl^j1ebQ+Aux-IXBi9KB;ySomH~r3I#PtDGk(+esLF
z?StQhaun7()R~<;rTe5(7_jV9Do<eN-tUg0-jsfiF?|b_GDvH0ZUr+aODZcp>34O;
zZgGaK!g)k~U%3`zz}Jzz?!)W4jpqZ#hP^PZ_&`f>zTiSVFDN@l^WDF~dD#8?Tx`L|
zNNZrHIcNr`(1&Cw5RV}gp*%H3v(@|~tW$-p=1bF=ohA7)sXxs}DGB~H9bp4URvd6;
zvX;P;fx9s=8(H>&(sU4M;H{#iz}zyFqooNqq*3d{-a5DIRR7JI3?p{(y&!`YX9t>4
z{d2vT)pl4@*fJ}!Phczf@H#SLIYH+9RdT#PYlvprFcvu~oF{}`!!~RM(;jJB0qt=!
z^K!U%G+*b-P1L!q$vP_yb>1TCd^g`zCsCT8m{*C0z#bX`qaSNGG(7sTNJ2OK!(cqP
z%Hp$Ex09+PF-YyzAp9)XKsh^Rm4!dYgW|8U5P{rHCZ?J{cY8dWEl3k}-^pgI7}lo?
zU@4ZTS)x)3W@q{`Ei=>|quoD|&6MU^U)D+M4bbKiGB;?TF@mAs?m?EEcqQ{%Iinu_
z>g$nO34=k@$qKBmB58k&8uE*;p^vMVu_BZ$n3#y~1;_VV#52beUXtHkr+U8MMkTEU
zWGG4bJ<o9!a>Pbc4oqP+hvqBa5jlK!i;821+T4_U2urR6lEX@j8}WV&XnX_w14IT`
zrbRzi={f#@e_;7aY>d-z)9N^(X8Id41w0Ujnhp}6mQF>5%9EvNsd|ur+yI-YrPsq=
z3XV9GB%hKzfF$J42AdVwPXUcMSKv67pSg%n8}B}Z4`M-ptuEzSO1VZ;!Mqp9YL8I3
z8u4mWMfNda@C-v}-ptd;q0N?G6S|$pcG2RbyjV;YKd|v(e)vE9iBFvl*yr~h<pc(s
z{py(kU63Og_J%pqLf9zJ##sTOteX>&Dv+lgo@YyiEYCuur$4nk8o;xet@A=yJ(s}#
zc{aiYcuJ&XS~{|k&c&z=l}as(#{UA0@I2(s(Uqcp$8h{v=N}0A5wJwRJ0>tOXhOtn
zNpy9Rt9LC$ymAT?#dkBGu`ydL?89U9;XV40sD21zAGXtnSLg%T(^nPo(N)E#71@a@
zQ|?EPbJC0szuG@Ie;@LQ7_uCpp#uYVR1cX@QX-e?`nv#0VLQTIO<zapL>#ZlMRl-R
zC&o|1Gtqzr=mnPv|GW>$CY^d95vc-wLwObf<K{jC*QA{tq0!#J0R$gq3o99-_!~NF
zsMK3#R@?$(7%*@!1e8Ga{FYU4v!i$Xmu>S{m{*(2A`g}ib3cs6XtK;q<au7=i7a!x
zsY!$)tj)*wf~h5AqIf0aSA=CyFPn1N5VE<cCkNuAJ9T*545-KkeH$Xl_NLE#j=EEK
z19e|&=AZYVC3^Eub-|%Ek^A>m%USWtF-$amHbuO$@vmpWGlSBA=Z0xf0#1H_4^JZe
zl48gRX-&{rTh>KGP?d5RtRhAM29fd>Sr%f1Fapdhiq|2fQU((wHkR%!q*lU6SEL||
zst)+5(SmX$*T%-*kebFuM{1yXY|#9H(<S#ws3jv}oaj<3OoF>zqQd8Q!@R!^bW6Dj
zu)%E%-aysPhR#4F%(6kVHx<H_R@wFz26RR(tc#a=V757>OQZkfB2=pZb_Gh*jyZ`D
zfVpxAFz%ZI9C`Mb;rLSsIGzJL848YCST-rWG&qu10*-e&1CCRuMT6rndN@|y!x2<F
z%K%4UR7Yl^S;U0}hH<r04NSn(h4?D?Kk%nyZ(4#}z4E9lTDcZ^bmOO*R(6}j_%pIY
zqu);8y$oYTV<wpION6rd0gPu@BELiSrl|?x)ym}GGU18Ka-KaWki(mCg7}XLry}^H
zCz-i*cK-XZYNv_fvZ=VNczL&sEbUX$t#JCtN(etJJ5MO1!3cqFok1~~@)XEbCtzWm
z_#1F!D3=l`y^%sg+s7z7P-6lXOd41(%mm&Pv8-@;Oq}I20X&Dw{|)GBfNQbv|AT-_
zwBms{^(!#|>cFlguZpqAsH|LsE|`{3k--TbCQ0?vX9@rCMa*tg^6*)MvMVys%+3U-
zNJjVR2nkL*!TBZCTTlPgQN7U`R2A7^AJ~NQyOsP|R0h}t?s^0-qZ9cA2e}CmX;hY~
z@YFE^40r|$cyK6Ez4D&Uo-?1rQ>RpdizLdk6CuH~^ezsMaE`f!m4AYh`g)OODy0!_
zNa~tLYe6FR8xs+#aeBH8+d!^sfRB-CBtJ4UV7^Ghn4b*O6}%UWI_Y$t5QpMuv~VUe
z>&CKnzzxyDz!^5}%x8cU#~IH6F(kklAgdww&>1#N#!z~pHL@ca8kgvoCR*i@Yb@%a
zBgs+x90jyXmT0~(RR-+j`Pn3zFSWtXF>8FF!PL>mx~T&!(EM)XdUJs@Ru0~PG~BcC
zvA^pE+2<&ajEv_Zk~;G_$Y46t&AzBU6v}k?G8~DrM?R=HVvYDRBmlmqr*nJ}9vl(O
zKU6zYXkdHpt4O#ZD_za6{abhx;p`+vSIsu9*N-#e=uCVtj($Cm;Yc%;tr!soKXR{d
zfqk(*VTalA(wSV^6b!qRPr=cMB<!r6X24D-RBXhKIHkkj$0|=02PRFisXnesS@(15
zIUUModZsym%GAGocwTy0nsgLl0z&%hgOJY1YVG-NLwcmKGh`AHVNZph1HW|qxIGT7
zoOFImJXOK}FfrAbh_rDz^Ybt(YcEY@raJA?(h76tE<{XyLMofOQEBYZxJgTjDIFA-
z!vQBhQ?4sJPiAzHYYv?z!;<B>@=69XFoF-2S<D)$+G!F9(DM%G0HA2XM`RO467E8s
zHK*E4+Aj~_b}XK!CZtI-5&m1mzlV@iY^^<?XFBjm=kx5pGEJ((uMu3Cy(jt%za;z|
z_zlEw2!6AmGAYFG2!12+o|L5T1CnqOIsWNiQ0L7+Fj+@Mq)o~xC<Fr3Bpo=$36<0l
z_U@@t64G@@3!HX{XxgTs;nFc}azTm9ol_|GY6vA?pt;mVmjey_=$~jqS1rgL%$gJ2
zN0X2vU^ip#qamzOO&$DW$ZI_Khx#MZ3<Gsqs8fHiSMWH}BiO+MK-73usx%dyL4P!)
z@mEGazh9iLNZ8zm9-=>Ef+#|7dQMSpVII*J(l3B<BsSgAsC<RAU}s~*>k+)l#R)j@
zg`K!3;n)GJ+a3!YJWydB!1UdX-VqQ48X*`2K33l9hvwf^oW;xWRL1L%DEJW`WS%`%
z`7BA{V@C}*itMCXlG6nk<TDcY0>-~Gz8@$Re|#YgyaXxO8|8`dUhD69(Kt3iwyyIQ
zC#R*3cfSN~M%A6;{DLf6S~O4H2GHSE*=MP(Gi<cBjJZNjH?z3k$GGcJA(H4E_bNuj
zk)tjSN!-yTe7D0JPCDt`q!;DBvvaQ{Y6|J4k<OjCdaI70PDB;NJ2X7Q394f<BdE^C
zveL5>*v(e}la8V~8>ewk`Ye6@(L3&h&nrKpL|wNv!cPA6apoob*^Z(7>xF-OrA4ec
zljW&cau$Y#|KO>%$X&VA_9VW_arSmNNg~zBge0h+2pQ>N;rl$VS>)F$iX-GRPvLLo
zUBZ7H{2Un7j_mk}73f>DzqrcHEE**iF2eo~Ak#+0B02zmVton!Mln+ejL*HS35*G|
zF&3Eci2>1t_Y1~`*TN%(L<;FsNR@l8VO>O0Wx3vm{0xAg{+WtM;yn+6Z=;289d;gc
zQe_+f*L72s=p~W?m^P8gl&c^ysWRo*Cql@SnTZ_5w}q+eqQ(QUGp4kI5yxSqGp7~8
z)1NSjL*VIrAG9bH$I4*biQ`7#<P%;q!ka~6xtC_JM+%1^g444s>6sO&iDC*e-O|F<
zd<xQOKH@A#EGf!y!c%G@C_p%<fz0-{`jRKIDcw#=$IpE1o{Fx>O5|rgzAv;Oa8bXR
zbp==&s3s%v?3aAKX!@eJDgh>97>oh^0V=h~64MVrWV0zT$<$};aEb$4baU!2KnSsL
zn-NKURXfqZq!eJ(>idcdI1u7wM?#gx$C+o${ZV|zfH$To=CJA$fQkFvFvi58jIts8
zWCe(Vbbbe+7f+c<yl*3M9ueY6PK<uZkxcts+i^A{<Ky;$(h^157y3A{BVOk*cz?rh
zREUO0nRJw$-vtY&Is%T7<Qh+o=g^@r&EimK8byCqOb!cnckdVuC(JFtk$h&<6cWs6
zH4t8e^WoeJLQG;+4K`FzwQ}Esm}Jg<Ugv({&|Xs!H~~vN>#Ou$aPi2pEQ~1lz)^dh
zhiILV-E<m_nt}VNXCIQSYvjX9ksAclS>tye@>Iu<cfU{2Lu|<2FL#j#u7D=wwPMXB
zT`hqeQ`IV?P$lI-^GVH`q&~|H@+h;9d9||fbHCr$m2YTZED7K9YGoDTHE#D(;1#=#
z$~4F%0j!@RjUV*6TnD=V7-AY(=5?8aHyUzFAX)kL1V)yQ4kW_i8mx_SAChu97?9=`
zjX)cqkO02Z?DS8}-ZU!|Gk$1ZYM+B&_Xlgv(WwmcpkwQ}8PFlV{w7Szg8SjWsOczv
zjbd~o96E|B@IUZUB$@0(XqopTtMbzfc!x1Q+iHP1w%;FvG|5b#TP)>6M_440zBmV3
z-h1%xT<B`Ap-#l!5z3I`Y{h6rv6l*Ad(nE|?PrIp5(sE;e|fSMQ#so{F_Tg7++KkO
z*{DGf#?xXkui=dxpTGHPs7i4vfb!l!Afv(mzNgZLZ-@f5W(}`F3bo<I_o3mb37SZ|
z8WroB&b-S>LF14{0e+X1X=u-Av~dnvJPEOPL+hQ#+DEv;9^G0L#k50deU*rzcuq@J
z&ZTJkbjy;oeY$9*1diDpt^;-$x74UKf@iJ3J_|7meIW-<pUe(mj-uJraPlG4!al_-
z&ppCVuKGhSbskq_fWjeL0x2Di-$40X*e$Qa@n4594BotzwzeCTFCmTkMrz~rN#qwr
z=AuX%h;<oA;lm05zg3<Y36yHUE{b}97X=zYYnHlRS1Dgzg(QcSV_h4mX+)nOf|eh3
zV|yIC^MY+t%T(MbP_+R7c_faJpQwW=iDo3p{mBU8CKy48cO02EbRGHa^Uv%x%+*DE
z1<OWWjbWo;^RRykpc7Py4Z8Q?MoU!5Q23;v!r|}D>K29L{0Z?Y3cmuo&Vd+NQo3Oh
z+ySwd4!hb#H9v<L%xx{uB6VX>NrF5GCEjEx@sgD(BP9u`^!}yd%m$|a`ctynrJypj
zVgeTqkej`tJ@#)L(Es!H=u+4<hMO`>wb3zYJ?OA5$mG<2+Zm%HM^;$3D>vMU-KR0`
z6WTEN3+g0ZB^kUVTmQz;`X`!#^@fepL$ualAU0wgF~wPSenTHKtno^01%@WfCf;J-
zxY-1?!?U=r<cd=AFuYE_O)>!O`vS5C;(DpvTKeY%Wu32O#iSh)gCjJ0PatpW6L>xJ
zBWQ@?Kz_!zdq*S(kRZXfA$qk1g*&{?<9nS7P0qk)C`+K(v#t>bs70^bkIy(tEzE86
zJ8Mt=izTj;A*@8Nd>${P1Ft7|tQtHh_lWGIWfdE2U<8%lT5yUU#zc0lf8d(@*lW{p
z{7^km$#r+L^cwFDD1{iqDlmeC<X_)TNT$I9_3Pg!vY8GR3&)R(xSnV<y%XQX212qj
zcLYn;)ff%cr}DZ(!Z~`1KjV0GIW$1plH?nBavoSss-xs43Rz!NCVQQSWc&{_9>RH6
zQA##GDkIVF%A@#4)R=w3o7q<zCGVmEDk$;FK$+8vO6cx<ik8UFTG^m{1g$q)<=A+=
z-^1JdC?!6Qfkl)fptB_YLF_$D;G~d7i#sw~SpmJIX1j#-Lgo9Hfvn0O5Jy{wK{0g%
z21SRSY(-mjR}xOaw5>{Or=2GBHzd}Pc&u(Xzr!jKudRGU1u?q{oPRYK&!E|(5sGuL
zuEV3St(b<C0h&E|RfeB$`ztu%SAs?wwZ>%PA3Oa+W4kVT2hto?c4K>!&h<*QD!(f{
zhcZYYvrCv)L<2aHWR@1uJHkB;U88^P0zUjn<$e05Nx$otCOwEy{ng+(4RJ3cyb9qB
z;`?m~>9+<y4}R0}>x17A{M2uhK3n|gd-RUfu<$Bw1cQ@pqwwp9UyLtqCw0iQs-3j1
zA;7AHfUHFzP1(TKdK#?J57!{}^pTTqAkdeDZ}$!Z^a>zs#4j8*Md8;Ozj*vaY3$e<
zluc#}2*~?c3#cYF85FZ%7mVL`@<@HH4lM^j{BABYKZ@28$N+R&mG0H_va^oWLiKXK
zx<>HTMC(Xm>e@d*=o-ovx077gVI;=S3nPAz*0f_#wPDRsKE`<Ub>Z>y0mQ&m564un
zsQ}X`&d5Dq2HE52$z8xQ(T;)Z#O@KenQlDm^I@bqXi%^w!#;x2vHhi(E!OCje*>!M
zo39<wM4VR7cb=HkhJ7MH14-tO*!%~<6xn)4B%=X1Zly1RTWZKw$`|IlOv?&Gi&_XM
zDG}-Y9TE=j^<f12GPTV8^_g)?1CD!rK1^n&6UsN}ivSu(V@9yOkJytR5TGh_$F<T7
zptu0a(J<e&TDoH*-4;vq<FBD8XeAh9?yxGm^3VHMIge@yDDS~A-v}))qiCd9kgR9f
zQO%J!^w{PWTXHyb##lAxoX@g7Y?bpMntQOh=Aun>L^9?xxRD0sCs>H3%B794DGQe$
zXiPa9{m4M9VvO7|PMvIEJf$`XyZ@lK*t<if<OtnaE!~09K=K(#PAh_YB#}~19l?Q0
z(v|qp-z@xypPDQmDZAe)xg!5XQ_|N*4p&~Kv!-zPYbj0^25ASr97&obq4o5~z6h39
z4u^yjQ8vWN4qQg7sT_A_`S9(YugUiFYe?6Sst2JEGWz^O0W<pKwwRr`E#`GtpHpqV
z-g{GRL>_!s;DHE)FV0gP?)j4RY}XWncLfynNJti*oCmB<wbJpxRBkFSw>Pu#6y^5e
z<zA(hdzmPgxI^U1uLt@>nTX=^6O<boModkntiX&+lFas)z&WC=?i4(D7AH!s8}T4#
zCRR8rv9mcDlZW23E4`TzH1>EiW9969IGz<8UIWg!RA5s__L`8}6BzqNv39|NCEbGM
zX65}t-Jzm9ii|g-J--D?L_Tm~p0hCH9146f6Ws=RqP=413i@1}Ag9?<s_wPRHMipk
zy(;CgS?6$w&@^Ha?JH<cckBwQH$y>S^JZXzp728Dp?F6D8@1k1Fc;)gBN7B=Qy!yt
z9kOA1=_Pi`*Pb4U?%V+g{O%PeUk*T3Yy)Q<z51_+VGJ;*XPr?X@MUq^%8y2`T!D{f
zh#d(;ZScQ?;O<CpL*}Sbj?UzO!zuu~bp-nn4*M|<`*C8J0Q)fp`*9QOU*ra0{|^Do
zVedqbspF!{r=uTOTc;+G&7})RzEP(n4tQ5NHJfD}ND*qkF2ls2_a^(bfYs4Y%LDY?
z-c%kW0uPu8F^b_RdgXGCMTV!vRD>hJv)CprE2QVecKUZ}f}CnAujKvu7R-QOxeFX(
zD(+42LNSqP^=8+|nKmzU7|#8Kl^TYXLnf@e!<)u>^d-<zft3bKb{dobAPm+e;1gGk
zz<8)XeFTr*5i}@(8qD;*nCb4`h%CD=$?Cd7Q|;n-8<r^oDfc?!A(lw6BXKrVJ0b|n
zP?8J157*NTQf<&_;L4L$*vj8s+UfMWwADV^?wz#U=8Hyg^ev<Q^ao)Wst|$RMnP=C
z^<X8!Ty<&G=^6%Lysv`_ZP*AxD-ft0?F+7pV>*G;zJN@56sKKz7bcQC2|melf3oC`
zCPDrbL|QT$^QI<4q~dyPjW@je2F}u939VK#P&#rv)(2De`AdjHv<kb7N0H3P6{23;
zZ=<}4536F6WY`m0<;6DAM<ug!&>+6qQmRGQqU=v`H4AkuM5^=MnL!_x2dff=Dx-JA
zCY62GD8H`MUVFx0HZ)1XS*ouq-B7f+!v?f*`JNLPjkKk(fgZdY6#5qz17y@|NBI32
z${Mbz+u0ipR+gY5nun;C8R)=Bf==^ZmP2w#U9|*5_PT0E80mueX?`}X0LnAfR#8E<
zsJ03Zd0{*8IK@<y*W%xo$-6??Pt5z{^o~V}NQb02p*W~0Cop$ScZ`vEWPdG^OfO3C
zCO=L|P!`A#FKY;5HR&K4z@SLwbBH9g;(4G;fDA;eayr(Cx{6FoMfo?#t1L-mqe6M=
zuJisU2JF6e_v!h#UaHPJ0!u0xR(LZZ`qz0Xd$33nh^ifzQ4yZXt60?KEFDhV?m-W6
z#F=<Auaaj#RVK_Vo+e;elawsLQ&CQ6P?7{_3KTd#*lIFSh0DO+m{sXu0${6~89|or
zt1{amu&v6BBr;(mre3aOi7=m}YDc@UYDXlAk(stCY3vZbb4J*tze6{JOGn)OBK`@4
zLlM7p&d3&@5iw~p?kvg1zU@?S{y3zf5<mWj6(|2Uscb{GL)!Rzi?Gj`Ur<bYo!GNH
zh^pw^g+zcr;d~KVrJE;>zk6QZY}d$w*{*^G<cOyFC}l1vD8g=O->fAIU3v4bo9J>C
zT*o#%d4^#bQXMKcdDMs7YEZPc*~vhH-<ts*>KNv!mQ$QFyTG-CT;aIeV(SZw%Dj*K
zWZMr{{eh^kS<=vrCdgvoQP(oa>{OTrS;+FyKI+TJw&RY5hBAL73Tpmf622ABWkzL9
zCNw$+m7IxW)j@HSmCpS*;e+OrxIN`PterxRozq*BV;=>10zn18&wfm|L+8xv@6qak
zH2O2nVp3Ep6tJ0jCk87s*~~<Q*fA2Pf&Zx!((nzJS&!)GKsS^}8!iJ7Np#@;n;9KY
zPuy$(&D4=*&CCce|0sp=d*bjsXZd36d(kV}&)>tfceIPnXobouJKr%h06ytIl!dUd
z6n2&A1C9>x`+AcgX2mIzTc$(Zv^W{qs&sWuISadX((W|MvA_4m?i`g0TX5Xw7A`Mp
zO!?sfup(5N28oNd$#?{IY9Jw@$Q7!d3d>y}F~Bq?4mTza9ECaxpfgE<ZG{df;rJRe
zL`VwQn&z~L=}oYYejm==#-<n^5+pZdf&g@G8}LOHL#^@&afv)Hw-e&1<oCWYYr#lx
zc25!Sl^W0Qxk)8-BfFXg#Z#K)EKLH^sQbt?AWVm|7k}Fb`>ttKd>_n|zzX}XtGGRr
z=risnvi4T3)2fuqI4Bs_?b&{fe8ksJUYLNsfbB0VsL5Op+g6P#`+~TUD;k+(jHDLy
zu}byVq1b@v^%<;oX#k#qo`=p$WSjlOYhYxnwo@dhOUib*#fg23mm$ijz7+6mftlhF
z8fBv$D!}=<cqF4i)r{~&{z}AvbLV=&bXYwR?$8Tfr{XD9r0A7@L7B|yKry%Fh{tCU
zmtLR*e}6VqaZ%xMN(ig)<N1&23->|83hnM8;sBWP;-z6KT=I;@@}n5N(;%z?LF*c6
z&yNa0xnR(gnz6L#LJ=!gNbhZgs|F>;!Lf8`5TB-s4=bgB+#N^F+5!lawLJUD6q0w)
z1F#%5bqksj9;zv9+YwDUW^78Lt|_q8%+6l{fW*F~sVNP#Ew44DUWo|VlzPQ^8*fT`
z-V}holR!Vrl%5c?6m>f=QGKq+KEew|=&V(?@{~TNvu2i~-B3VipnzX-n<U}4PATSj
zHT+(IoJ0n<V=I_Op=%)FSNojFJ|E$BrnN{D7`J_}rARqOP!9DfNX-V6d?mOq5cijG
zNlT<e#Hlu-G@z&H-ia;f%TgHA%+RGFSz(5-_-AVd(~$)(C!y{+JY2=Z$tomgV*u`|
zguby*c$FcJ2Hwzh@?JvoP%cn<DlfxW0=k*g9xM+|K-y)I7?;PO$%mad^zPVCWlHNK
z!e8K!+~pRF8*Cnnfb4UKH05|v3KpHE^W6jbowCw{xM@oM#5c@9z@s0*^%fkdg*Z=3
zd9RT1oB$ZWC6dGf<BtaHDn*yW_7f^Qt!F+$Ls@6Ad>fFDI^)F~IS~<3j5w?QI4wfh
zN;r-Se#DIY=Li)~d{Mvx>M5<4T=y}Iv2mO^;3yqG%#bw-HW?V2VDxbXAR$LZ7w(F{
zjXuYfn6Dc#Z;#Uy-hf>NH#N1tp{WnNz`$i!r<}Tnnpw{pDQb2<sB7GAKu7!bmw^Kg
z<l2c`)W{l$FvJ&&Mv^{;+jygyoDM#c8q_)}=AaS=GQ!$<7qc~B?Zom+4#N!?6f{}(
z(pW)Xg2iuC4q&%HYfD35-K}Ap>1;vl8KNyu>e}*Kz(O-@9F+HgT($F9%akFAr8YJ8
zN1Nakt!tBK&sKi-PCafo@@DUZCo#+aLLvr=1M`?1JmdOTLlC`@y;X|0B)rjFSmji)
zQ0;svjHu|Y2-=p(&c8+bBEvm7Ue4M{U$^5cL^e-pBNl^mG<$%v?48OQi2v}`^^|T!
z{F`i6K?}2$@MOiDTF2&89T}|QsAoFunT~EzcJyEz%u;#AcF+A#MCM`VNzQ^VGN=et
zT=fd%MW_<6KkK@z0t%b#SFl#W=Q0t^Qcm7Yiq@BWH?fqL6R*Hh_MV4USK^+ztt`C~
zS5330Qh8aVkA#NZii}Dbjge^>fOPdOXO^NLnat)IL@`HCps=8T#zLb6cT=>J=9}91
zaxfVIiE%iPMd&GqRReX^gzHgsfJ8pRJ`3FQtHIuyK%Jx36NY+d*DV7aW}pM_!NNkN
zg;Qz&hWhs<z9q$ZDe9!~G`0Ku5q8|w>K?W!5dkK09EHl&31|E}$F4<7uEpNgrWo;!
zLZv-@>yIZnZsXNpC(mIm(nv=X3Z|-8U5BcF)SU$&JY**WA41PKG6}^e%w>AU0Y9?!
zoEbxP5oF|14Mrb?Ve;DS0^1d!Q}Pbop2lOKk~;!t_2XLozegrdX#@6R{|<4PE&q)K
zPXmMp-<OyHDqlERd5vUn?2QQ-qUYtB3^5*GbbDd^?lP)5j={VdFbjaWik4j405w~~
z_l{CAd-6dxc!?4L@Dz8$1M@a*f!7Z0<HyR~=@Ca0XE#8@?>`7OZh-u;=d5E{Cuk-Q
zG%N}C)JTZz=s9a!7U8MFnG2pOYx&XA2xZepP--|E94SYZz9au&M(A6445189MB|69
z!Tn=`9%A(VP*(Z_2tF<i2=v+80GSakhBHRD7|!<eC7hwEOjD=L<#nj^Bw*8Ll{+T%
zMz3z0!w`t^2JH>WVS;gmo{QQ4r7X0SMq$Sg+lMbf%fz3az!OPsm89|6h!^7hNdXC6
zAPg+J&;-WibNIfeVUA~UPbvEG-7DX9cVp~$j6BiijZNAWJ338DiA`dkTpe~zN>77c
zBo^Kmq^F>e&jB)h%)}aK_hu$3TY(I+iGdAi0;*|G71>EA$6zi0(cM{TKNV|xO$9F2
zyLUN|0@xD(`#pFD3FxqMCsmUg59l!<Sjdi2uTKUpmVq5XSqx%V#|hxQ-;`_Q)Fe<N
zR)@Oh`w&!LG#uG^>eb5SG<dj+)joXD$%|yZ1lY8DAtq49?~oPhT<FDbiN}PcUhs~x
zdmo5F%zltK`7j<}cI%h-GPf<4u}nHd1NuSbSpkG+8T7tU6=_x|qT{BahuG8UJI|>S
z_bZ^=V(0iu<YE2B_@+ACx(-%=RyH!EsH=9?(-H;mIe5O4s`6KGRO^LP2u?b$1>D#u
zUo!z6C&wmHx4(?KSRc{0k^`p8P(Q9<<6sZ8;DIQ;2xd(}w?gYIr(5OGw$UjEqSs?w
z;8IfLXLnNTa7A=YhpSHApl-a^x_1;DFErHLfiyaFGt>az%38`BpcmhF)#ybJd;tbn
z`xVs2?mA@jg6*YDpWO_-Xg^k?7k^;OA6P}2f}Jl!Fd9HG&U^ffU_77_j0O-4KM{<*
zL@@SR%l#l2#UBWQ(Ex&RT1PM#bidCL1fzl5En)^_C|>&t_&0j7NrPPw1TZ1dhzL>K
z=yF{B9-tsGXhbLqvI3e0GX-IlUd=1TsG|{pIccCFYi`B7na8bzTS7x_!zIj|hGb9G
z(U4?B8)*oqAkEQ_kr@X1u?`Ju9sLNV9i@|0+L2NkpdHuad1nI^AD|aY9ccHvoL<nR
z;4~w8f;=_}>zqn8plKl64wY_9yp#{iV7jpeUvvZ6OgAp2i~+h~i3Qyt%xiSxkV-dT
z;jhw-p~f;*y5SZ;=;_Aarl@q|-;*`E@j`%ZoCKk2CEYl67<8i}lznEpu^e?Vx{(DF
zeGm>B%D5CKVY&A*dHQmz7yba#m)pE|vh@SH9L1b$dXk+boSqcJQch2bl}9Goz1AcI
zF@oI0BDBfYBnVDW0eP`Gg?H}=n`aNSNU&{g84cP5qNBt6LtR49p!bkQ*L9o*d1Jik
zSWPQAoh3TMPaUZ!t=CQJ^;sB1ug}o2RoKSl3<{Iye;BV49N*<Ktcpp5$Mz`LDqJWU
zTL<r0@1!~__$!!Z`2~N41Am0h<P37t{hXY?V&XsJ71kxuOxMq6C5PG>pqINlYxMG4
zkWQ6eV%uLwFB$NC?=sL!a+78J6*M>5`PWZS!DlCHFmLVJi%TyZhnk?547z#K4Gb31
zM|%x+2)$!#tc*(5YIut-pP{Fcg8{myv{vAbfS$l`Hy!#xGnHgj`KPg}1XhV30XkFe
zvVo>24L|3H^{Jih0$zoM1NdY{MLtV-rCf91>y!^me+0#-R@(88obL(TYm03-tkd;i
z8i3U2CaOq<ZMfjoQk?bCD_=!sBJ8NK&%v`0F&fExx?|#0jIlR>2&`2w1yhYtS@i83
zXn6(}4Ast_@3(eL+e^Za-&18D2QxzK^+P|$%PQq%9e@Qu4AgiSj;gAYc~sn-=1K9p
z`pF&WoU*;jy@2X;4Og$wOb19EXvG?1Wh>Sg8?9KZmVMg5-GL@D35kH@qEs0SQb;y9
zb|vsH&Lg7r0*ppE_y_n+g}+<=t~-KjsOX*}#&-dS-m#eXlRyGM9`L`$--15aJxi19
zP#*siFqZiy${;Lbu9}_%iZl&84j7sW81E1Bkf!<cLEnujOOtHwu4EQL<=7deAL5^4
zhk~bTs;AnXg8WP0ftfI?My~V0NX@e+217#SPstnQFpZ^{tAX1G9PD34S5@8_^a8ep
zL@bWLT>`k})Um?492BJ(y#QX==1;Z3>gh1%T7Um!dV~QglbP+zo)F$3obHgmhZ`{}
zb-+k@WvQ^=z8>pVMXZC)HyUl-Yh6n{&0plPYhmQkAYLY|g_S^^Tq9DF^#?eO45lZB
z`WrSOqcJv>6sO|Gg^Cq+2aShmFujnmag4F(cP-^5krheC32(-6Pw8=qavo<nkIOTT
zkGX0_eaeT+tSMEc>r!eE9$dPHg;k}iDq<({{1pifI{RjkRUZ0B@6fgK(mz_gOV?Tv
z+7Q~n?%OBwy7yXTYR$>f_@}}uvhTIh=74A-wwJKX&@RVBn5fb41DgHmw&)!*Y;=tu
zbQ+BevGl@(SmF~fLHOL>Z6$ljz&K*#OxRz3NtG@OOWBJi!dpoB5mpk^{c<I?^I`I>
z4OaR4aVSAPRsPM=cqizB&GQp>L#}!|<p9jaVcs($!|jvz&VUmd>QV+k<4Jr3c#O*=
zom`UO&%$EXq`bn%k|uk+7ei|q-%BgCq0%a4R|gV`KrogM1&Q)Qc-lCIGeCCb78hrL
z>^Lp#Iy}>O<M#=wdt=8?pl;z4{t8y`he~HGAVdI(reUm+DeE%SCBq$I5keuxqtU8h
zvI=GKc`{{!*Pg`i2@{9Zn5DF}14DjZ|BLj{00VXcCIK%n>A<~gbz|7QY)oD`^Y&T4
z^7s|FQclLKpD6D;eSr1FlSqB1n2S@gaiE8Ml0is!%-*FIOE0gZ(=b&ollQ=Y@t|@e
z-C_qm0{49pBjL3AuA3JQ2q@`qk<Uwf##j&y&=VvNr{u(qu=FuV@7WWJjzm8(UVz=P
z3LPx`&xo22!hSi|*b}`5Y2h^X(kY~;@ut}z%*k<#R_~sSD6%8j1gz1w7>rX@U5nej
z>#^O3S3JP>eCaR;X=eDbjg6k6EBvlr%!;ZJwlmh}Bd|>c%EbsBAb~lJ8f8!QXEeA2
zq<ARcBgi-m!vF(O;mHu9RP#VS{`tXU)GJ-c3~(Rop!?xS1rzoSB;r9;!q~i#VC^D(
zP>93iXg8l5LY{aVT0!K06NWax7RJ45XVY1J3&QBgX;{ZbgHn4_xup%a!+~)&|DJm{
zzF&ix;!W)<r}hQDnOwg*7twdau8N;c;ILJ#QEo#iG@k-;`O6(?ZeTocx%^2R<MV|4
zU5}5tan2Y#2(W-@(j5XO)lTSbvTOlsS*1Kz%bI}~B4Ttp0-YaWW$hxxLY49<hy`Di
zASEcHf?&GZ2vaA(B!pjx!2+~9LV&i$7f<3eubAX)xT~y%eJJ_#K`g)BDjyI_rkrlO
zJ>|`%2jE=A#wPQ9;e4u&NzI>uMkc}zhul^|=>8tLQys#-mh1k0i%g+(e~l1MOuE0<
z?VOefqR}f-<4v>h1w)0wUT5G<8O&<{bCbHis%a|JCx0Q`-&1ciq5EUNy#w7a5K3!}
z)I#0gn*ceK<h~EWnVBbLb=<@2z${}j7#oF6jQ=R(_>VA*e|!u*{)=ZdIsTu4Rv&$1
z8vpEG^Q;z*e<Mtt08{Yz4*^=6#(x&(LWO-aiJIVF#>!T2l!y^icNK(3E9u?X(nN&r
z4a{F^VP%N9ThQKs&xzI$ux~&bGg{jQ`($Mk)fbT8ET~Ut{I16rb&eS2x8#NByuwVw
z95Kpo-`=Iok+mRCzl8i&R^5dB#-Mu|)(N^v(hB+QM}Qtmep??GJXcs%xACgfxnj_9
z<t_rI9vsgQiFN6Mdh&x#Rmb%!Jh3rC3e#8cLiAtd^|OSQyg40L@+^anYw66Nuj86O
zg0pxD%9MFPhR~0X!Sl{zRD3|k6~6@Se!7)9uA+8)C<g1ew&II!z?*ekgD7KQ4Zb1_
zIxfO|vpTM+#xhkM*IEIDUdMIoNL9ymG*#1aRf2;PGbI9fSYPq=q$RrXs6EheT?1vD
zS;w^jb?J3nOu_XUDY#xE1sAhXs^fYs@d;ul`$)<y(o{i)BrXyxr>s+AL7ZeXwI%xV
zFF*uz_<Y;{Q?UO0QV>;LmvG$`#-l1QlQMG;{ORdZ<-GLsbTk&*(}BX1fd)>UAmqEx
zBY6Vib9Y)CQW;sH;u(eo%x<YJ`n61}XLp#qn_S*75AcnAaXoMO@oB2nQ$<>mUWh4M
zY=`0n56obdEVbdXVN+tkb>dM;`0gjzEaB`rtF(scQ5Y}B=rYc#uqnr|<BX2PIfpni
zgW#>Skv;VU`HWn*lN`mBztjO2z%c$l;!VM}5GH|5?y5YAoO0EjAOeg}qdY$mS>?Hk
zwOrmItESqKEkf=Jaa>LROSOC59Nz9E)ZbjYS0P>V?cVln=ys2z8k%hPVl7wbc5{0>
z;4`aY5=Jo%h>rbXORJnsA-4!O1T_2jz{S~jyaoZS9`auF4kRUGJU$kfz6*K->PV*j
zS^Wvf&&)m~31#Qsm8Y&nU`^}Aw)BwWNKu}yV@-|v)0?$SzAKrbhftu_%kU|Iy$V!X
ztdfUdf@RdAf+rSQR0qlkrA3_>O)H6(EDy;7P(R*}3rhVc5kDB3<Rs-M5H;O8eP`oO
zD)sp_zM%6kh9H_UUbbG3hN;(ZH2gS6MFUBEaSQ=lfB??tLZl@79K8<qB`w3r$JrVV
zjfT*{)`i~WuH&2BE#I?x<zKXh*Ev$uJu5@^e3>TJa3GxwaIH9uL&bZSfppXc6fSx_
z>>c2%G_?K;;D=hr4?*xDp0^JB-G=J!<<)5goI?SDemRGIOcG!pr|jzSka}J1;%hIa
zu6Am^)>}qh?JjhM(A6%3-<+ze-E#utx%()Z?s{D<i~ggN<FTc>T9)Ymuz|9g($x-T
zy4pUfu67}yGU{q8U^R?;=!Xzod9W#Cidy&*iMcTo?PJKL%DAHTeHfDvh6g}4(-gI|
z-x5ksOXo~6{lWjGdRn%tb3`uHDQX8U_jdIzvsR?RciyH<fH=#wwRCupSzC*B2JYXs
zmg^HILa3s}>1XN_d$&!W7}&>r2y~0c7<n8som6*>9AN=bjc+=Zg19_R-}Ps#jHUvN
zy2$HJ|HO5X|LrYwk;+Y~E^^yU3?{76q>FqK&rG`nr7ae%vQj^tHI`|tRj-RI7r;Vw
z_Ar47UF7#aqI&2ezeXt33Mf@2#f@iwV(TdJ48gj{8_@@>{sZ)&>LQ2WC0G|(v<pjJ
zd&sCJUF5%znsE&wb%LV{RjQ%t1le4UNTnq})d{kwZ8$84;s0hR-Tr4f!A!u%bb<_q
zK7fHH{0Qi$G?I$7Zb~*gbVLEJURR!?z9OaI>q;kjgf(9DhALRMTq5tSh+QOSSmjA;
zZAwpUHo^;VuW}7GTIDLHHYGisCUehF%fVT@OidfTp_0u9kw)kcx1DC9ImVq)hiIz>
z9qR`h<0f>7uY8a1rLd_t>JU%VBf1Ox*o6)^w4TiV6;d_arej9vG;FpT%8lRWtKHfP
zJ=wpIDU_b<P&;7CXd}1bCq5~~fIk0&##>yAFDh?g)RQro^I;6zq@K)Iq(c2m>B&lW
zG@&PB!2K0wqMkji(vy7;kVEOoHbU4j>&aLhsk{zQ)(h#$)`CdsWUBkVXEK#g#_q>Q
z9p%&MiQ~V<&>-Elsy_<oi9_qjTB9dEN5m{3H-8D~C`eCsLkQ5?q-$dQDfTePM~k+l
zX=W08{#~&;Ou(M2d(7;>l`n_tW&|$o;4^~RU%snl@?Eako0I!DvFF>#?z%JR02p&-
zA<oT51Lh4MAa|&4emR`FS>sU}kPOsHISiJM=+y7&^C{ldL|c?R!e2mlRt+gjXas)v
zuW{aBw=kno^M`eps7)q_<5*+6->Oa}G>|sEMRVC+&rmJH$wx32Sc{oJlH#rp&5GBz
zmKDF@A2gTh1FX2AE9l%9HkW{4IIdRU>^k81S%_kO+Bgarkwllz)HC6!06dfkG~U7|
zR6Uq*Lq*@;!uwq16PKa@>Vt`33aJmeQbsz}=|c1E%6h}tjv`4^+x(c0kD=$=zB<ge
zCqmA*6fC`<g#rB@+n<5`(P+K|{Rt8qr<LTh$A`D@U(Q{qb~trim9i5!qNgt4Eb@^}
z8*=v`AvJe4wmPY~y&>Dtkb|3B2wm~5Ak@0~+v`+_`THxRF*mhM^H;Pxm04ZEKm$fY
zBXPPzJKAT=GNIzJPF$ZL@{rE^RWzBcw;|f$1~JsN<F0Q)wBv6`b5YvC=n&R2y}lq{
za!Shemr+M#=RfRLJ4>f8hz&!EY<MhU76^&iFhdKpOik(wSS5E}-L$@-7-fW-EIpxr
z(~+gek&KB>tiZhPe59N^k3>3s!5gIN3ecuLwHj@jf-mZtZqygB0+S(l5E^>jtD=FZ
zXdFYpVj!SNeZg0Y)C|9vzF_sXCiDdix*dZBkuvHFSgSsR^;Prwf>QuLl)hl|Il{hC
zU%;vx#jDfiZa*L_&@cbFocBu}We=q<NWc7I>I+saR*`SA?b7KB#yuO*7i^5cc>V@0
zK<DagyI6D)bXr90TdFT$nKtpVey+YCmf#xH69AC;SU_L!2-?SxOO<hb!CzsiK{PTP
zQriEk`T`=p?<-f+9v%)3P80TB&1npv+g5G=xcvp#Fpy`n{n16z7hL{x^#yl=ZZ)MZ
z_$|KamW0syf=j6YqrTw$mqK6gdN-jj*pFjL$nnFjEE|snSLh4aSs=7_8T18-##;6I
zf@}e-PG7Jab&<Yc7s6nD!G7Px(iaTFeJ#odkk(qIFIcivr5YralMNA@%kM#77tj~5
zsAUvIHbnnZeL)%EBgo<y3}<fO6TVA>j--;lK%7xZUG<lMm>-SDmfH|f=7K=xcbm}>
z>}pC!U<2)H#?C0wj_;3SQ`D#<NbiK`520FU*3M|cNgBtP3c~;Agr1*WjgPvSpqC%p
zq43cB>^<K%$In`ocd!fC1V1})nKo{M_}O*Hrmcx7NJ#wbqZ04BDUg_&=4a<ChBi+A
zJOm%O32DqtZ4*D+j7`fIUm4(d`!hYR6GH&NZMynKiT+n*gn+E>|AuqFMw_nI*tASA
z!gLE@+RGi90%A=$(p(hWG$G?ym48C~!U0lbk*A6PSaz%!CYXnsuB|y<-%A8BFpf(;
z4bhHQk>=vGV*>UTamNqL%)7ufZFeRNwPEs$sebB8N#gs5q4ppfdteXp-X5X$Am7^z
zLR(D2<w(8-2|d6JYEyvM{?~Dh*Y<r8;I)nVGv+{?jLp6#^=H?vP$$_hr9Zp%&rRsh
z7;tm3<HcnDmfM-#2#`Z5R%StXGwaV-9pSu=nL?fqj5{nvwKrfo-QJfGA?RZ-XgibD
zQ?;ELgeN9zlI_e;yclg~TIOTA*kiDt*@>pL&POb?kLmM?oYhEBF2Qb{YC{u=XXay?
zfLcTNm}U+HE?Vki+6#1(hGVcDO)kFZCYITb<{J<d-P}C<(NF$O)C-y&O(-AJ7-N~L
z9nEL~gx-$k`9#%@=21Kec1Y)A`YP&Y{l;bVme|qk-UvIIPszN&<YStB<uB`F`WgtA
z4p&bfV{3#U$wICBU!>8Yo7>1}`}9H)O2_2U0p0JF({!h^#-aUVYJiDc&*x`%=wNrA
zNvE*a#xb|B*RGXIYw1|O%jsA@@JI<zd(yT6d_>5vq#Lg0g_9}M%;8u9R-${G?o^3m
zsE_eh>^zM>Ci4Y)2XshuhLD(%eE)6vo?>Wkz-R&F4fM#*_mj^EAO5c&R4El?MqD0@
z^B6qmdpr>7UH_sBsneLI1c#B(N%~*Xm-gT;SF&%D0fI2e=)VPL*nHnhl|5NGw^lq(
z^~qKK_htS>el6SOjtuC206LA8C-a(o?e$ev>5dA5amc~jfhNU?4M&YV`3`_rl(QP*
zSc$*uO(!gX;bg#g@kSEnCMcwQ?+cWm|1N}&GrztV_$VWMd<K0Hm&KdM$96jVr90ql
zEj~WL-C`O(!d3<F!Akr!x`W|^0kZ^egpak5bM*M&b|<Fs{1nRiUykRk1Uq#d1N?2^
zjX?bp5?0W74he6z_kRoTbkxV-JwZo_Tp{2c92(x^eDWEO)qLY2ZJ6O$wm4SK;UsVr
z;3>Q_*o==}c~aXiQ0d5V;Yo$Fc8HD~$Dupy&Vi?q622cNv^xiIbPK;~fX>z8wm(E#
zT#HlAKaj5-a&d`z$OW$1k@vDQE^d@RY0()Mul^niskAU0aZw|m#dQ}pK?zt(6jB1w
z_8l(0l5vS|?DjN2-3@Rex;%$Sf|0aEm(w*CP}myE*v!k&#&-=c7Qp$_&<WBQ*$wGQ
zRnckog%_IRAIlo@e+JDvMsxi9l`Wg&3@tYU=+@5hCoa{^@h<?lO7mEWe+H5mQW!9g
z<BgE=EW{lB9KR4gPOZKe_~`#P;NuhyW@!n{W9L>~19)4DkA8Z5{1<?$_+TYIitb?e
zV8E2)jqtGnvXvemA!*1H75`frvJv$$P#NGK0&fKB_Yg;nG!HV$%O7y2P;gzB9nxf!
zQTW2;eC{_KIM;%ex)P-}DWkmeu-fatl#KGkZ<~-&7;sh40k={{ISi0P$tbTtR5Qyc
ztd5zy4zc{JaxUzJA)~;n4>rL)S}dbHhf9R{85V2tq{%4j@X{6;C1H(0Mw$M|MUqjv
zsxry~Y{#lH%4|F{8Ksh{2|fpBu?$?i$!-2Gcn;2r!+baf%P5ujqGOuPGRkPm7|<Ww
zcmOgA^+K~UN};h#RYrMA0HK#rI^x=5Xw`8d&bOC@l2I;2o>s~zS3Cw8<yI){G#O<A
zdHTUZUg?1~7k5U3r<_2Z+ZnbA@LKjjYVFb)7w@q<)^*>8(^uskEOg@T7u}gUd4T(u
zJX7ZY2!;;tyWR;Q??k+3=sGU%fcD&qc%6RakH{<RB;G=)p=l3WnryJ!Z<6+mdGwd2
zJ>7rP1nptKjlzC$D{0R}fE<eUI3OsRX%DO8b8N<<j*zrx-JdYu`e2(82yBUdWB`T~
zr#*3a(r8ZtUfM!?);(sRJx9>Ai=iJG-9@E6KhWu>!pG<<JTuxe6t#w+Jq?>$L3`T0
z%ZFny?HP$L&Cs6zfY|8fz>fW(J=6=$(w;hG(v_*wo@)dUdfKx#TBSV;@f55d*?^*2
zNqe4r1hnV1PXM>7AGt8?`K`T`wC5zC{UvEnc8vk=!`=!(d%Q?vMl;rG<u%G1(9QNl
zUO{`t<4b7T!&CvQaj;F3v}f<{erejXsiFzm!+?7$uGO^XZGaq#_UwV?%1nD$9dmgd
zGehZSZ96dEwsmbW?Rg19N}T_PCyn-O#7kRfPwW#0+B0e0#i2c)c2sH4z1V70Y0o`)
zX0&G~RTIqj<nL?+?Rn@wd^iTvo_+YD8^C71X98sm@IANe1MQ(+XqNW4jAg2{=UD-S
zp7z9bP-)L;T#gn@d#*&DR??ncGH8$UDBx~6?YYd>O4>6YaQ~9D=K~N79o~0WhoC(j
zu@LCGPVhZ&hQy_)2H!U34cQ|i)V@;bL)ce}{}7dp)b^DkP_B-4%|YFQc0CHHLes8B
zQUun(__aye<yrqr)2=U8H9@-=aM7JxO}icf$f0PL?MN`~Vs$(N%haa$rn2uaU%v+s
zKwwMwrn8YM?fM8$8tpoPm$uNZnhgfp6@%A{!8hI9UZq|C#Fm*#yPm@{qg^hlCYW}`
z)B_hS-B)@WG$-`FlKl<C1TfRC$0=igb}g#{?V?_2mUit#CiA4idj6dNLQlKyXs6Py
z6g&mft~}&vCGDE`AZVAD<U^HqiL*=3p@v_Q-W2RL;A-OT5cFmP(wI>LUT1>*0iCg0
zhtsDJ;QXW=et+572zRF+)B1<G=tx6l0E)YlkNe>Cr(O)CxA64gf%GJY2K=~)4$|$R
z;H;o?#ksF^Pbf1G!v3b}(Dh#=(!q&gA>>wLS&NKi$r=2-yL$o7k4}G>>*`HJH?fD0
zyZ<6xCZAwuIq2qbh>=KYLDJfHQ=3Y986|xYNpV)Te^pw4;dVAY6qGjUWt{wj!>_4o
z+<<mF?udkq139=uZYMM!@l?goIZ;5X{}O1$>7@S7BI0E`@+!lQ^BY6pD*(-!+}*{_
zg03LX_(Pj&>QW{DK@Tp~a$Pr1+6#~U`i)TLA*4fexdVSZ(#G$ivRHEE1_0sf!U~t;
zr~m-=d~G8r9en#YQSo%@bUUR28iFcgvWJkYYK^W<+ryMaEUv|EqRSkWd7m`Xrq#F`
z-Popmn?kpV%GyN9l^Fm6ZK4P{j$+WJk9<wF$&hRZl4)(ScTbhjrYH4rWw_83aSyXN
zj5(p-WH*zs)9vgjPFr+E7wD`oh_7|pJq=;*F|?VAWAW^3*n?e;#X~(iEgIHj4}U>`
zQVKh6VWy+tGHi0}Lv+^M47)e>2_ECMK6LUGN;tzVyKM)QaHpL<SXW>p))$sa`D54N
zOcE-X&H;q~-`BpdaV&njA^w4{Q+`-_MamC!4?4Tt2gStx9o6x=yw<;`j!XHW^jWzY
z-~;Sy52oy1);(p0t@IK)At94;Veb={Dm21l*6X(UE>CgWmtDfHKni@MyL7w&*2yrk
z`V?MgGQOYtn2K>jW-;iVVYsP**^c5YG#rR2rUQ1NhbCb^I(8K8!Kz0qeh+2Vc=xxH
zF{0I-875pr!DJN+^nh=8rZJ<~<(}bm@en-xmJO1_y~v>+4@uLkizxE;iSwlF$<Us~
z%I*EGq<GxnI8_-B^SSU-I6Hm3dxvL_ow@&EZ6{yCHo?gD5a+-z@gl<L$1uB?Ffs+v
z?#PP@<8v1oMy5c&;^M+MGc=51j86KBk;UJCrK1hDMi%#=K5qJFEUrW!H}!KCcNdFe
z^n%XZ<2M-+y(qQO$(l1_;Irh&#9m{pBXbJ8p=cVtrPx5o<ab{C6xXfPSHx~dWQBE|
zvS|BH>P(7}0zSJfEb|3WuHZ6z{;V=*g)H;!=Y9^H_K;=Xr!P|)h^@}f{U!}BDal!)
zUdU&B3*5(-R*+YiJ8T%Oz(g&uocXE0+VP9~D9R$Or1EYumSB7flsCF4H*axXZf41X
z;=B^q5?(URaVj}k8mX2{QJ^H!aVq;dV`;{>K-n32uKWc8SelYlBn>zLEJaa~(m-r&
zcJ6O1#rPH|(+DU{A}W=JwkVaNEYg})C^Njnq^!KWd&ZX(%q=Lw)ZiEFt;ClO3m1&Y
zLu64w(cJb67o@sNO7e<a5epYMi*h@OI}lR~a~3YlqdOH3A&1RAY1{%=!JH+|MMx=y
z+1h300d*yj;z~s+7b}1t30aF!RhW%pL@J9^_;eZpp#7~D?=BJEhY<EA($@Up+WnC0
zdykOnavf4ko<oYoFCITTers|Z(iZ$S_ZlH3B26tq`m;!OXO^oZFK529q+~&fM0G?O
zq6msZMZ=NS)JmQm|HeLJgma*HPY_{Ggal_SN@~2@Az5cTq}IdP!I@T2m{-EVl&FqK
zeG~z)3KcXBru2${2Wi;fG4Z}fgl{4wIA8f$a7H;N=H=uHFeR!ZQWr%q^k?-og-uDy
z-D<?=O7UJO!V-i(AI=WWDJ2E2JOL=x0el9c2#5;+YJb)UXMgb?E5geV{(Lw)IoYhj
zOiEkeF3Ls!P(6{RXoBSe;7YFuxOne_E{XR&B774e!Ta;(Q?!$=8eLF?DKBtK^+cMZ
z37F=ml~lORh~G8h-6g{N5dM64J3B`gEy^h@$Q=)Ao<n!MQazEu(F9Jj5br~R&h|;-
zUf8h(3thD2&>zuT68+3$9#KU5o=cPBVkS|BtOX@5aZ_tNV(BB@28$3$BSzz%*&8TM
zeYufdBnMJP$C~q}xr=6R@8ysjltlk$0wN61Vf{lH;T>5S!xt_rm|HZym{EVa*Rc%W
z+7;%cE+}3SQJ6ElDA!t;Grk0mQx}wUD9p(!nVnr!@GEzoy)b8F-a;3DG1WqV;sz!?
z98%)*xZf9Xb47ePLOK?$wyQ&<lMT6!X6gAc&~*NX8VFT{@^)!#iAKz-omhqt6Ol&P
zB_P73$59R4@%tvi5eVx=C`r+*{mvryd>RQ0N(M=EbC}`MU7KXFB>-;i245RhVUZ$+
z^9n3dA4%DlE=7&XbBQGqPHX5d8&)?%MvIipinnDfSd=#|Z?OyM0Dp*dgr`U|Y=k&k
zEkn@zFv)TUvd~Sx_(R<U5dE<pMStS4%<qpB@JWYQdnkb<oxt;IwCFU#oBq!GE8-t%
zQY^l;re7LR<@PtzCCC1BY3dv4(jojhu^I@7J(wx#+`ubZuEuB`#V<jozDxz#qpqVE
z(q6Pr3tT@eNta3;0A2<L@r?+nKW8Jn9c^DF-d{yH26dc6n2PVWzQEI!i|`o{9v5NX
z7y0)IB3vfIe~8d8!Vx=ox;Y};Cc@7|*zYA#jtCzV;lD-L6=?1Wc+y2^l_J>q>n#!T
zB55j>ELZ~E;EzTH4K!`oS)?1Jc;GaAcy4YuLk*2gLlV~YVUm@o291TQSw}>q7Ut!Y
zG+F8(sTifU8<|&_=gL!4nG2?#2m?7HKA1{&u<ngu<X+9g!vMUbJqeS-GZxMjU1^c5
zBXe9iJii@7rP=(_*nv&wPv;ZKxp;PdPSIQq>~Ir4IN0qN*hEI@-6HXKP*RK3i_drG
z;^LelV3n{L0`Z(GL^>C{N^)k?tYx#?j3bKGA%83@x`W6>U7}_*Lutq;t@(yvY(KJ~
z1b2{QZQ>nCWGN!8pk$#|ebDge$13ayG8CX^;Sy1xrklhtGk#7B$CGH1$i$mOD78tg
zZ&E79{OF>Ekf^jF6te%+VaM=}L8K1vBvyoVY)&&s;RD4=6u0?GY@m%|c#C0T8<%&l
zh_OfmIk*$^=ChJ`t1mDD#;`n5JkQU=mS}2b&g^^CW(4&=AEj1eDAY7&02@Jt!=y;T
zZ_voPnZanIOthRekuhp07y@I)DI6i3b>P|TxKZ9fkJuZ?29-P<(~sB+4DI2Z?^;k|
zkyr{FPceevxlvjP!Vr!@j50$`Gd`!)F+rp#_ATVdbZfwy2ct2Ec@)vw7s=@`EsIU8
zuvW?P5fT!JFS8(#2P1d@<V19n;yJ?xX_%_S%H=NxXvQ_zrY>cC2uc2}K}jOm`bVt6
z7T|*Zj73C_Ug(@(>{=pLP=9a=D`6bb`G79E)9BGfuDp^tIkWR9nmEL;hrXVXoVW8p
z=coTFRgQoDz7iAf)|qjLlC*{L#~AZF7v~~2ta!se&b^%X_~^$5&sw>4<BWfpO5i-^
z&|RFLAPDI%{h#3f5LYbXA4YhQ`M<i?IRDoP9HFk&7=2&}{)+mD5&QxnF%Fjj9ttHX
zev%=1fPxN_MuMRU;s{3~r?%ADs8Wm6X}F;b8Y_dORmg2%4GI6WavMrWXT2hYg;Ay^
zxkN)2Y7yZxvPsYh(@hL#FpLi&FV%+It^pB&Nq?r1CK$&3p31tDk6dDb6J_1WnO%7J
zjtH+3@w4N2`~zKi__+vEI`j8uM0iy<{vIy!j}rO!itx5r{{0^!^oVk^M7}8$!pNcS
z<jXLe=1=cyPbcxT|JGO1q*3@y!0$!0^Huy_$L~M*y@%gN_<e!jH~9S*zjOFSAZ<td
z;_&N^-_`i_!*39N&*D2_$~@?&;~R}%`ZG@{{kP4SF*Iw&zM3X&M;`UB9^;1M^6;a-
z@PDO&h=5P&9V`#k9Cb*?@Kg0$b$BNI)(O#btnV`2qZr4mG1bx~QWq3TgMJ7?;+kh7
zq(Q$@gfELQ?B6`Tw+N?*aJ2}Jh_HPnPd8SC_lxj35uOp@6=)pQGg5@VLf8}U+e8RC
z#yIJENgIQwS{R#L+ElYhy;+NcnPr-Tx@1>N$^QX|Y2tlNi3Uj<ktm4wHKby+T+jQa
zONj^5C0j7>87f=Lc~8nsjGCboi_~ATy^VGV)=woKhC~M9F-V&94rGZS#?Fu<ijy0S
zlNu{cN2U%T8M|gOhU8UmkdC1&qm<H285T%r(`(QPW=_zM$J7Z7ejO)xy>tXc2u|?A
zI2tHzKY$v|%$%V{Gm6GYJCP?OGuKSMkQhpmR$%~H$1cz_bB01lFnJ7V+GQ6NHkYcO
zG!nQrv;4G7gcwP;N(mTAoVDUO3O5cm6O!4mvWPXwAq_$Eja-%iWK(8y4@nZyx=7QE
zC)#%;*@1a$Vjm=0njE{?3N@Pt#A0=px)@lj$IzhZ?>5U~)gj5gpd^CDI)<Y4e><!A
zyMp+3c#g%7lu518gKR{<tv{45ZN_guo{8^BL^(uyM<FCdMJd9G(s_S4p8fvw{*mvc
zOIwh>!=%i-l7(Q>pi1p6QAxpc?gix4(Ye8_l6HDNoVW`^D)ttJZI%V@lG%B*=nv-A
zfz2M5Ge0jg$CV#0k-Q$1)xo8B&X`DqpGZBBguo_P4C+Gqt3{qmVss5-%58$rB2C|8
z#DC@MX;K;DcH;Ljezo|~`nnR;sQV}lxy|bb_Z>FkKl6RafJf4$bo?Cnt-<$3{P-VW
zob?~Bn(6?(Q(++&y6w``D;?4+SYGibICUvJZS+WLlT~U2Tw|q3X)xfWew~5vb|7yh
zLh9G{qF-ZCUoPs8o)jpW1i@Pv6hTboE6A>Ot&QNaNKt{D)N#EfYG3fEFl41<)Wpb%
zQ0n9?)Fj_9n<?2~23?1c!@!W#I1D7}C+H^wpi!f!Gx@L!n#_=%I#sjDJb(w8JSgS?
z8ZA1(kKR6S<Uw@^P(>!BH!-S~(Ie?&5^xQ@rKtoiE7CxQNOm6lmHs<=ufxcKg~f$A
zOK2*fw*k{7v8J}MF-sV+NHKejW7f70V-#`2Mf^;JG-g{vGcKUhCgczq(vMIYh~bhO
zl@V{Z9U<{rABs?t;&d$tNHZy1YEQ-Xr(W4-MH|cmufy;__tMDgBQ3>fHi$BW5L##q
z*_)AHOzEKHM7@!rAtjVHL0KTYj6y~N3R{<efdHdF<G|6h-Ox3&_OUclEuM3MP(Q*2
zZ-Dp5uiKk^U#T^8W;H5R>3jp8Z6BvgcKl-Slkl_RxBr85Df2_U9-KxYY1YLbHe1$V
zypd)+Dvc%)8)#_PVtEwna%^lMb|GSDe3LTVo|avli{8^K$!WYrrqPxHqflxk?bFB*
zfQB_;s<U(znn|N&Izl2_9)vV%wuta8gtR<`y~W8{Uxf61f(Xk*_#*q>Uiw(P$L;6o
z#)xn+LL!6P#QWz6iSxe{Xs0j=4L;{@^q<AjHy!Aih2K*A4&m29H*UFdDu_(dbkIgC
z!ylANI^+@gquvRol7^h5A7^US@%I+xK|fBki$=34(N)qBl*Rd3b-<gF43=mB1g*h_
zRKaWTwQP8FU?vv4OQG_@UkDhkmX2d2nS~ic`4;JV)|zN0@nFktV&1|$42LGm6kA<p
zy}zMQ6H{lAu3^KuJq$oD0P#%>7?U#6P<GU;C8IE7+k?!^FU~2+gEo-(66%qtw1T2s
z>QDlo<J@BG76BN@KIICn`6g-;0+)mNFblcn82~h_c>-IikkTAb0oCMSX*))AB&wpu
zG~bj!E+@l5WR{wXkBRV*2vBpeg&lj6lXD8)jKPCV1!f6&wEz((BG~l${7)nYE<fhM
zc^)Lb&B-jbHKMVovF&KkA|geFXxYAx(oHnipxs=LB=lz_%K`1?=8)f2?WUlMA+(!;
zxt<RA!aGmm<~*cWy}O{Wz_o-`NdJt)_sbT#W@lo(D}*EkvN^ukRWQHcKDO=O37^Ji
zu}!SeMROLI*cQ;tEy&;Q5_9<lc?-j+WF$Z(iSHQsf!KQfK2^jIKFAmE*75`EuzqBI
zk}fU&GF=*aJY8Ca-$wkVe+GhyU*_lO(jNTk@vA$LF6DokF4f{EN%u>`Q0MJZJ83x!
zBc<0_Xp`a(QG9!;5Fruv=S27ei;t4h-=psxq(360?_Y?p?_vI)E5c_)__+xCywAVi
zEyBNv@KX^cAK~9;iSVx?{6vJkKH%T)65&%K{78gJAM)?hMfhhC9u;BFqx}1wBHSdx
z4@8)FjDMdh!as@deGy*q5&u3}gd0Tog$Vn7%)ieO;WiO|CBo}J;otK`xLt%NMR>z;
z{(YVZ|1LtG2nT%1zZZ(|1rdHD!a<+$??ocqA;ND(c+=<nd$9<2itsxT-h6_8FA?D`
z5&j^;lrQ*qmk3`Gq2)^&4|XYyg&n1b5Yo7KTZG-d;_tIW__7F3i*TgEzpoJCJ0k3O
zlE>dE!gV72LWEa+&A%6maGMCvituJ1|Nfu|_lU4_Esq~B!u2BjP=vj|;otK__;(T3
ziSX7_{QLbP+$X|z-}3k@5v~>C$0AIw<KIg}xL<^qeaGY7B78xFKZ<bh_x$@qBK$~%
zBY)uWe-PoPBJ3nZs>F!V0V^5ashhXqwwQVyV<d=RyAkd=b7*m8R2xf#;2SOA1c{79
zFax+I${@B8G_L6~vKSfCfkAtK1~8;UH#$NT(Qf>lIp9wOST-G4lNeRggB4V!rL|@9
z&1M~#Htbj%zzhprq#j$0S8Ntr7b+v05o_ojb8-g{43}cDzZri)d{L?xDS$6}*W+t4
zqyCW$uqI0l!q|mM9mSXs8-YqT8%>N4wwK!6_-I)%LC_I{p&zP4LPKLQ^&xGU>Y%Ym
zEvr7vlrLzew6J=*d9p3loAR}_`mt@S-juJc)#tXcdQ-l(R{ug9t2gCqYxQMqtlpHb
zt<~>uWA&zdZLOZ>Yg<OXDPLQwKhehOP5IhdJ<-y(wBD4jt<?`~WA&zdZLNM%8>=_v
zYisq3+gQCRUt6osZDaMOd~K}0bKgO28hYk@LDh4!x%P~yXlDJt;KJR~a<~a((|jh^
z1O~%n;sBtXH{qkj02ng{A*7`MnAUQO)KUOU8QTniX*F*-0H%y>2EeqQw;TXd#x?_B
zTG3k$fGJ~}0WhuUEeF7qvCROOR`r$xV9MBL08Hz8%K<QDY%>6+mA&Nvm@>8yfEet!
z8^lRVEY<~EKyYpffEcqJYR<?2faQZGwTC7|!2r<e-X;J{8CwW|JqQD|zPA7Xdk_Xp
z8CwWIFa~IaZvg<oU0}-CLI7feFhFa33jl}>!hk7b3jrY84Z|Sp62u*}a4|AxWB};p
zaabvmn-uvC54e#lGJ-TJ7BQDKMGv_Y!})?c8q>DTNT##4QYlU87tCc4fijgrI&V?N
z|6%TH;Hx~U^d~ogTrL3ur4%hzv=nGdE2Xqj!5RvLgwmFlV5x1jDY=x`kYGL#6jv;$
zVCsr%T~Sf%THU(V6>C-ei!N)?Rz+o3R;yM;MNPM;SW!{Y`+uG}=lz)X>)s3OZ}<K2
za&qULIdkUBnKLtI&diJl!{gP-P*j6M2ZrlmI#`;jaHygTaI{*Ez&)(JLkw=-x?9xF
zRL-JSF`{zDrdyIJiW$>VEMEb?SO;N))72L7=%A=FKxDyUA{aHT<go5cW~Zc%F{{j|
ztSV9>BdjV(iKLD-iK<9h>XxfYQX;8OkCe!$t4dNLsZWoT$oQ*DQX;8OkCezrtV&WM
zsZWm-RW+U&ze-XfsZWoT$mpy}QX;8OkCezbtx8fNsZWm-_Aie4rz#Z}Nqu^x%swqr
zBB@W0l(y3%C6fB|NQszws+5&T>eC}7V)m($lt}8+A|+}9s*aRs>KG|Y%tJqiGnX|W
zWe$kSE-@~#1BOa4l^YSg%rwB4B919GBuX)Br4Na&w=|9kl{P#kijHc^DZ*PVwmeT?
zXzuNS-_UrprN-z&VS!_P=pE0g+r|pUX<8!%VgB;Y*I2ipmsr%JICk^T?5H(QET^+!
zWcE;CXpPCk<*C2DTinL4vB?{q<nS}A0s~e&IsCJn3Q>?acub<8&88pgrne*riU_ZB
zo8fPXjjM<uZjcry_ML`HwcO&A+QT0FRXnn&JG7hBnN-Dz@=(qPllpLm1gAE4S(M`}
znE^_l&bY*tr_*MWH~DZjvI+Mrn+=d#_x={tE!`O_<HuwQBitvOJ2wohqZ1UVm+9SE
zHY^!!L{_Y@!I#g$qF#9v79erSs&QwkR08yys`uO*=v0;B{fj*l%MlfHt{3o50Yrgz
zl81}bbiCI60b7m{ycq{-E$iv)<ZgOKp%?hQu_$$HBM-o>E051e6~WNpyO+WJYy9tB
zpRa>|Xg13b_I3^bEFisn9|yWh_bt!|Jk9588}wG1&(|S*oA^udw4+P7U6ZFnaeec3
z*sb2X(f6_7p(vsVY<<z07#_mP7*;`@`8o)v;~0*71sr8=vT(Hddq6t=j4@}mEf|25
zuNB<td1pvq#J%DGlK5V_6*!}?9FaM=gTk|nrO)H%Sw1u@Z(m<*>k-PlW{}G}xUBS1
zciMBnDDp@Py;P92Ja#K3r7Dy>qliW!<5>UoNt~gei28^)7gD@(qy8xFmB0Y8M4cr#
zI}R5{8?z0O!_S^SHJbwndrHHnoshkwd(j*!mARRa8&Bp=4vC-PE`;sI%PL)mup~c2
zPv-g&?-*WrP|4ILbVheiY^gU_fH-=b-v&rIdV|7$Q}|cFC1#kp0)<)vPOP=C9zN@%
z+QO1H&5-1{WA`J7?+Y6pyKh6ZsK0b1lFrzd_Oy4fn~e&L6FV+2lDff5?TU<(Hc4dW
zSQgXAmkm;6jTTHdq19)m9_LVa{r4Qh>T%QAJzL@Ot2Pd&TWG5?>{La2otqmgF*J{{
zSi(j>e5TCRyEQ_wl(rR<aM=NN6lwA!+Ta9j_ckz#`S!2ao-i}?D7Iez**eye7(``=
zMrS*_7azmV;lJSQB7}WT!+#7&@vFwycHvS_ev!l84=!dqgzjA2+cU6^`z}ZVx&$6e
z#Ip`bMx8l|jJT7c2?S8C?*gP;e@G#=X|&ns^kgsg%BaQJ$UwXIlZfq0t<4CwO<@kR
zL0ih3@i<gqRo6gAaXwCiSzq+X;vNT59&ZW`QYyA}h?e)*U#sQGxtXhs79?{|v5DW4
z-SQ*HJO+a5<YI<c$EFUuO;%Bv8rDm_!vWS(N{0?bIN_wH2$kCjig2W`(sH#4@oNih
z*4w>p<GP~lUd{%~=HbKe_3hUWbaesnxC;QB$}p$ig3GQHc=@ct`gWYm!;xM`etkRI
zKF+x0H;()Oo7=nkib&elJ5a>;YdX8zdp8b4#A5#l;Fb9JeSK$F!+M;P=It9KE@0{^
z0>7M{uxcaFU^Y-hx|@T1y8Ex3jg%|en&(I$QZDQnxU;JmX+{(TGxM*uy!JTA=C1a;
zY<c-*20n~jy}Gq~O_4_%b`(~xUa+RKs{_4yp21z6-AM>HBiZngZ9cxf8X^Khs&M?3
zAKAuXTd|iliY+nLWs%2tN~k$Jak2S|q#${S!4Qqb`WGB_T<YVHU-fMQ&G?HKo5J5h
zjXlqh;qnzYrr;as0C$S*Ydt#Tmp4kZUF-D@4tBPFw{F(p+n7ng`6d30<EA2fVv88C
z+l}xmCl3DfO-FB8^tNx@eZxKTZ~RrH3gj%4d@0a96Y=+hHH*!~fKO}qv*2ww1H7n4
z_jEngV(!Cx_+?H08=RTO`7AY$KDeNPr4#iei~yUwNcGL0h0q_|<rx$j@KH0`Xpj!1
zWM9oestv-99t3g9$MYwKHQ&_JL+4xu@W929%}aZF?jBgD!Q4hN8Nnl(gV~7HS5pu;
zrn&X5?w;PF6+|!@Xwb7y279P6?*gR8{CmK!QQpADuR-)SSXhhV4Hvn@loXta>C6WZ
z&)1o@TZYc`xxq5!O}$@ks!1|At|lEkIn!&$f1?)`SEI#n*BsCJ6?KPGee!N>nXJ|6
z#=4yl_D18o%A&YWQv6NetwIifu$-xHY44+DfJ$<M&2hZsC<>;!d?!P=-Fz8RHs6bF
zz9XBv2Kv^B$aq8Dnn*FR{{_sh*ZQFRr)Y3&@BI~GqErnz3oaATCIF>Z!J=9ZZ@$IM
ztd1h3VwRxw3xV9J(3K`*oD8|)vzaeucb*iI%Mig5UpLBVS0<5eD~LObdzkg;QroeR
z5Y*QF_?B;k9Cmle@yv3baa~jq<_hwek}$l_b|N+PIG?Y#*w<IDr-IhVDR=eP^z>je
zcDL1?6d(@yN$==dn<XfMSi5@E_R66wurrgXyd3xw2n0W6%&Y{i{3x8~Y`66b(X~;c
z^CSE+7lPu~SaH@uSR%;_68eb{fweAydBzFQfgmRE8V1Hrq~|R38meu{C!s1Ar7E63
zQC(aYFem5c9nNYQqU9&Fd1Bz5oSRl_qkIO0D$b1dL#-&phNmNff`<6!*C$6VWXF#}
zBq!CUn>nhD2_t#KAQR=RnLSK-88Y4VX}_3E8Bug0l@$$0M@_7{wh?E8_UdwWZ%kZr
z_18g~+wTelyai_^b`?9~5)EN|GL&CLSgbUA$W(Tr5G^i{IDR;2nP}UbTM;Q@oEu@Q
zDO7_s5iUj>w_jD8(Y)V?>^#OK5gK5pR3kwIxlQ{xX~zC_3{kit+dBl=9)2EUWE4Y`
zye#=b{;bUx)u$3|5^0Q!k=X<s%4bnto+&h~wS*Lqs)w=l^Cf9LCg(i8K268nadwl{
zanFS4PHGdOEOKTnQ+YYWb=<r>=s(w$6SoL4&ga6qt;V<gdK%i73o6(50ezNSsB*K4
z*vG^K(?@V%B2OFsK7tYPU4S(sCHxZ&i_Lxbyc?Z#rS_R4g;qO0Y#P~W?!~)nOsm=1
z&}!CQ+G_R!&KT8dnqJUqrsF++UTf&QT`JGbN)14xbivc{=kR8`-yI}VqBvr$Z(fG|
z*Y?C+&VOgxAZyCyFmcD8#W?+vv1scka+tUa;y4FEqndB%4*E!Z*noO&!iTe+4_@sc
zLK`{+PPYq)puH4Ak05jzLK_k4^cDEF6zX&(zMX|{QT>k3TcL06z~?+ZTLp%&MzqQ`
z2=l1$8>Uqlh_D|K)*-?;B#N|Me4PUc*nqDS@s*|XlZVRTvDZ0afpg-mNLb&@WOmOT
z`{!*48jBN*yG7UG+_2)herrd#!h9A&!O`%K0BJuMHA-MJ;1YE2do08$V524c7KLw8
z_-Vi;F!~<W-y_CIyrl|1pzx;(r#H&?ZiSC1{IkNQvGV;*3J)k8H%`J=Dty1fBML7%
zOTMpD_!)&iQ8;3}e7{2Bs}+7$;rO%V`->IcrSR<vzo78v3ZFGW;xAOVR^fXTei?9y
zDVVY6NW5hVU#IXB3Xdp!4jL=@->h(x!cQw4iH(;s_r>vZXq55!1Si1$yu?3@!5;45
zi!>I>`0!AINc5}BBsA~Bf;GiecU!B57gGj3K4NR&fIFza&%f7DH>A#6+-xYd*vii?
z6LNma^A>8NGV_+Kd{1%Sa-rD@jmM)WZdgsj4mgCymB33~cS6Jp82<u08ycfaT{=un
zucwQx3QnFpxn;&t83!6cFArtW8l`b6f!+n?7$WNGiO7cxNc>v2Q<*H&>~gbktb>9J
zj1E0jZ^K<+j<_gkFs=k;;HoUkh**1V?|5l&0C@yUO*zN9%CMC4iK`4tId`_ou$1#e
zs|?F#NOxA9SB9mW|5s&LXjVCWTFQA{RYnUJMNXfV*=Gbx+Zn-9&cmoOzLawgst8M2
zzaF(7u}!N%BUKMiH}{Wg6}#AiHEjQEqY3(NhE>50M0s;(M=>+*H5dq@yJOtI=$_J7
z7I>OZP4oag9ISgzt4Z^KaTJ`LF2k$A9{|#9ce|xlDbNX@_7`-~aS*7l$ng0(;#N<Q
z`uYBNdnPB~!NSRfX7{=1Gg!RluAX-Eak3R4HeR^M%$S7n0wc<LL#?4KCU6&*lK`cS
zDeDWhM)o(vaLzF6fYa84w{%f!b|zz;ZVn=@XY<4Y=ERE=bDwRdJVy&;msWyPCLKmO
zM=f1!7Gf$hl4aw0+IP{JMeMpUlEE)TwfsU<@AQKNE`)qhICikZGEZz`SVJ<-$QVeZ
zMqO&BU6#8zV`z2f1}|o`m)iuBFve|Myur}FhUMW&_}*d-B};s>#<JYBiTY9(cvm?*
zQ{l4qQzj1;aXD`DY40EC^_>`EMVw`trehRq<)<I~<;alh$W9JUtz2O?A%#esHFQ>z
zNH#0k#=@ozGd&i^DoJ>uS$L6FZ1&*kN^|%!6&8#!I@{^DwI{JK46V`AY;_YAJ?yeZ
z+Xb#jp|A1Qq<H?>){8;c^1D0NISFG7#-tV#0{AnL#l>D42V@N)vbKbUVw1b`S+qIi
z?h)`I0bda?Bw)<5ZIr78+$rE*0iP4_a{=SewJ|Y}<oq5peq2x(wT2I~3Q6bxCD;HW
z*7D(^peUt}U~IY)b>W)ReSa#Qf0yov;i%UMxf%;fFc?H~X$V^n)O1j4ibWeAj^@q5
z)sRqXiA5jbTNc!;P+As?GbUnZP$NSLhK2}@<Kk8awH}n##UhW5nG@6$QCbs=tEKW=
zxwTEG>7fMkLxhfVQfv`0kf6Tv<E%Z*vyX@+Z&+Rh*IRN;HvBuru@U}KO31`LqJjFz
zLmv8I*KjFCR3C(Ve`Mv4^B64qxof&H`?EC(>wMIjD*f!$0`BCTGjk@Ptm8xLGQolZ
zjDGF{bE9WM^o^7uE2Fp0!3IuqBMa~@Ajh=WKD934jS-V1qld8BRMVdm*#DaF_e7vx
z4tT+N68?_oE;hFTc{TRGq06xy><ZZTX1AJUcn{${@FLg(0fTj7QbRkQK6$_8!$23V
zIgsf^6}uJBeMTTHd^3@Fl)swGZVw;W{%QJa@IM4A$7s&<@=|95L~cR7Hz9D0n$0|U
z!Kc~aEE+1TVBw~$W(dyWm*L~M<`sR#8wYSN-|Eg{2R~XH*(K(^U>t2^Ujn2}Z1!Zr
zoO#H?TJv2%+HTH$p1>Z3pHlc|h4Y^;-?u6Jmcj|=OZe>yA5i$T!dX+~`$mQP6xLrL
z;nypCr^15@M^BaSHz<6w!bcUJHBG)RRrn@_`xKs3ID5LpTdVLvg+Eg`_CopoVugRF
z@QVtMDm?!piT84aI~9IM;c(cvqzO$k6uh{Ni><{sN^s4ba+zv-a${5S&VcQSt)PtU
zDJ$Pov^`yHTVAr+$IT8t4l~hUJx@EZ3*#!$CLzutG;0dmW~N{1;-Edp$*5|3&O-CZ
z3tgNsx>9fk1|29hILYR%kT@0{hqPQdi%x}T%9(U3L{rYDQz4piMx6@Ll(Xtoh^Cxb
zr$RJT@L7UbA)0cAokTR;sO`!PEjyw8^0xa4AAL|E8k%;hMniW@ml~N*yGPQT0yQ$(
zt`ZH81aPSlJ3y6aVlBMv#(p^;zQMNez`kRZSk9%$THnJf5m%dzIju%^(InYsobsq`
zCRoRqZ#G<ozQktikBPm>bR_FUyUZNZi0sAZN=!(idn0MB5h_f!IR1~a83*R4%F-^A
z#RHo**yZC<9jQWhzOJUA5%Ys#5-;Q1aW&@H7N6RGNC;1saJZKfX$ZLYBJ&6m%FZ^=
z9>kP9mBURbQXNi7l`bhg`w&yo8Qo1Of*horXP!Ww!nnX*l$=(qNI}{;rr{-CWzjcQ
zSQgJytV%(;t4tHp34_$0#0+V<aEX=C#xNU)#*w*ZP7`cfmb1Q5DKV+1b?o$Bl0KB2
zG)Ats1J6%-sn`l_t_fx*mt+j#SrtNK%<dG4JKrpw?=?2{8pO6FPx2z%DA02*vXf8t
z;mHQIh_xw^Ew1$DOt@$X=B5a_avHo09AE@Wp)>b@9U}(SJ=f%4;nkXYN~a~&3inz6
zBD3vwzeT9oDY0Pc`5t5{8#_dgg^gB~rJifrZt+O=4N{3o$B98I$QZFWXN1kj3QR92
zlqoi&VJ25ZREXy`0iO`?gn-%^o(YH@{3Z;UpTwJD!Qq^JI_wR6-6+oFTc>vk_L<Q#
zsq++>PWBQkGmX*NpHBS}3^Ze7b3wBWg$h3p=<gj0{}J%??}o2m)V8J<COcz@zux=F
z%rkF-ha)zk!1q#;i(3@PJ&I7wfb}_nUt=0I4t@8E9k9~U2ffLQ;=zcWP<+tmT(a2I
zj`7oX_Q2_1PP-qDbhGhwc>lUqIOpa2*DdXNHMXPH%OAZ6xW1=%ZF?8~Xz9EQ+XY7G
zAAS9!``5K~t}QMAvd&fQU6Gtg{cd0${cO$m(zfLryH~C0?ditWrJIVYdU`u1BMxQf
zILg-u2!C%}Kw$4G$0nfqW?@Rs93+qM2|>c4oS!6D;AJJkkep3R-}Kzs&7sW1b;jO_
z%(3D`MwrmNXhU(;K!0)mYFzipa$vji+I7_2*yj7->#;1}+TGcYsEnN_QT6jZdU7Pl
zvlH0_RKXbu3M^q^euz?Axd$%=f5wOSgB!foT3ROCeDPl$UXD!p<npW|e#gbacC^Yc
zh`gm=!pO#4;o4$vcd;voX^Wh{zH^nPR?&Lk1#a8ebJb$=2*R$oOv0DXO5dCCz#Cdk
z<2|r56`M>0-W}~t_FhSY@cjsX0x$O`?7?q&M!~oZy}}ZW(5ki9&M=U*Ti-06P9zRN
z4FLJ(<^Aow*r1|eKml(r@x59;(6_G0jX3&^hOLp!ZN=WT*mZ*>)6C@aas3=fI2U)n
zukY!?-3?vE$#=q^dU7b5&1($O7Mi0N$;-y(=H6oQhHf9P<~A1JM$loavu{nY;{rdg
zXPI-Nd3llS5P{O!(0o%7%Pig6>zIQ$;fgiX06SMW9}3-MgpX-%hVy?{NQ^DfQ|u>h
zN9yfv@A72Re!2jkMl>&9Gtl4B^J=@3;(T)}Dw8`Y-k@-w!e?JDcCz_^^YMKX;1ctv
z(#I|QbLmHbw3F4%7I>k;WePVcydRM1|6SoRg%@5S;j0xsr0{8l7hNge*D8Eip?RT%
z-=y%(3im2(m?PhBQ}`Bz4=ent!oMk;4dEtzH!18@SO@!+FmI|INey>zxvI%Of`}m_
z%uCEVXopBFY{3l2vXziCV`7q;GcPkwMw4?ASy^)1fbs^5eQ5OSiydektM2wTc}_EI
zdvWudgPLPnDyy@FwE5jV-5b~T4D<;HaGMc|frZe*oX^Zhp$igBy+t*5nPICRYgOig
z9vtw{J7Djc_eNJSUR`EY#Mo<!t9yEjnCg^GFx5=o4(6hK18YOekdY$j1x!{qq~<-%
z?AZo(XroSzhO3E?;|RaqrAC})HXvgC&F!82%{>^4irR`5`FWPTW2{S_kCZFHqUAgn
zztM1G4QT;CSF0q@5&9$2tIWZzFu>h7P#g&6I|X4#&?9LV8Sax_YzYY`#C#`~FwdT;
z#*Eay&8ung`WPoyo!Y!R?COy3vJl6VK!Pkyk3>CTgiw76USitbjKO%QCl@wh1{Etu
zLhf>VLp*sEY>+#Z#!3NBl@2-Or2wH>g@uYxHP*&TVFwo2h^Bt>=xfx}HXrwGwc|*J
z94<&>^NnGH%_fG;jyj@sYcX=au#fQy^ElX?TG!MDQE}r9<s>6DQ6pqZMr}b^a#*in
zq6u825yb+YEG*tRaMxXSeIE*kb8<VMLtm~Usp~yrEF7VMa)DQc_&CX{2;Ze<7gR=m
z`MS<-HuGqsEZ{n>UV8%+mY8^7;e&`hY<X9)xGoyCo@1|`0j!4QFd*2?c(-&GyL^uj
z1Pcd8V~6$fjsCa~c&whNnRx(XLl7PMMqF~y8E@WPux!N&Zm;p3T*gX@F>okZA4zqd
z<$D8CwRNt#+nx#Q=`Y}%Y#xDzAtC-(y2R)RGlx!-wKk%)Ps`-dn6oMnoy2^rh-I{?
z0-K*7Vu0be67y53a}GLFHUt(-Zu*Pt9P~y3uMzNofX4(32^cxo#=JzpjRN`wfOF&{
zMo0;J14p|<CLLuZMRbQ<#E2nbX(G5)!yK?K%C}S+6B#2iCI*NJC~*LYj2Ly$n-FEV
zjDk5UduU6mIf~cKEx)W+W^l{~qvQk}^|nTe9gKmoZD}h6&_y!BAMBD6jL8$Q<fXz|
z7wQ1Dgh6U#u0Jv~V#PcT+z&rP^A_8%DS&*g0py^%n!V0t?l`3xf|G{=ZsAq8I*!n5
z&CSS*!`-(7a`^grg|LeTyBC8SPG4k&JT|I3f>i$4&l-?%wXVH-u&3K@ec=VC^WFmE
zBAetuFZaWEj#o8#Cw0aJr;&Jue5+3+lN?TIJU9<w>We)C4%tGo__!7CU2nP+acc{0
zH(<xIRcSUB|7*dAd=CzF!Vt3`f5;dhHoL!<>2Y?A$949RMc!9v5fy-F8)A%D)yM5W
zQ1AGQK27o$EmiodVO5_U6!vVykCFBVT+r}$VO5`J7s8+R&PasjSM|yEqH*{Gvoh@0
z#G*fL=fl(<-{jbWMh}hW@)M&RMZ6jokI+6kOM5Nph3w$p8hm%lwy`TH8+CmLVvJ&z
z_5g);oWFp4?U)ZEsCDz#w|91pUe&jJ;7*@EC|+A{dv{+aBqV_(^JI)B<XOXfKoEF(
z5`X1K^E?z-Lj9u+3N_1}Qw^rP#Ks4ONF+zSEr<ULLb2ZvY0>HT^VkX?=<_#7F6T5F
zr!?Gf=PPlIwYZf=a;oumT>85=DTOCM6IIN6Lb=vjTM5p1)~!s8qbGdWZO0xWw$g)0
zH*RzwL!N8L5W>ft3wrD<r?>CYHf)2^UzY01O<!hq6L6gu#^s^KhU=n?YO6qJo&Y}Y
zIf=h_EL?2PnZMYq#>;0vASe0N=(syR0^c0GjUR0_y8$2hIQ(_+4t)%NKZJdI{{mkg
zd=uXta_$Ig6mTXeprJ$`h~~=g$x$@eD(A5e3B35Y3fku+g1zLU{m7On%weSY7D_@5
z`g=e+(oDLBh5=)4varVNv@mCWY+<dLzJTBBOs|E*%ttL8Zl1BQ-dqh%@wW33m{$6<
zO*NBH;E3L>$={2(zTV|&3}jJ!Y8#1mrR8EFD55`9i6E3wwO#{@;}F2xktn%G6<aum
zqP6MC3X~ZfbA)4d`d4#gw%FEO91AD+4w(}q^V-&h7)4q%IDOGaBb5)=*R?(Ci>E`+
z5-UN8h^i#%g;ownw)P1*P{b9nRYZ4mTkpn%lo6ijq3^arrbjuu)XM+a)O^UhtGJ-O
zuRq`nV`tV>i{PuNVJ%&2+tGO7x^AGWztct4@i}g^${?+UG2n)6Q9(l3_Ul8!Ox=*u
zJ0tV2BR0S@0+3uAWeE*AGOU7&YaqnhNJ|{*+0Hc>ci!M>#a`QP`xgbei4wd^e{WKF
z58&yqb&Ol&ao@K{YF_mTpGZ@gB@puj;=n(1ejgSHd>grRPc?;+^EvURMX0O4q1DEb
zALj7yny^_n+~F}K93P5oHX`6G37f8YpxfH31a&SQ^>k~2>gxCVL?UL*ZVhFZE5x&#
z&PbX#XLd91^CWL;FPq=n+rBYU!VEGd(4iVVbv=%(>cx_YEio&0<l>;zNn}iDnF%r^
zF?cWs(euxV(&2KWwsLMHk|lC)%tu0`)t2RuOXy*w9iwvK@{4V_i6sv|kztgqb(My-
z?YY(r6!t6w7#e-gpGuFK16%ez{?u73b7srJDRqwz;=e&tx?_(0_0;EY*6^qPL;u?E
z#MuATyS?zIK7qdu960demc`~;yesftf%g@7*W!IOUiO{QgQ2z}d`_5h{Jl?pH{XYE
z^YmK>_V}};^I8|1`w`A(GyZ-Oqxp9LetOAb^Ra88bC$Aa#xC|Rxn~0G{s6`h#U?Xp
zFupFc6SIL`hg!_a9T;1DyTuIQchlRk#QU~ZvlQ^y`*9Wk-h=OJHS^xxY90r!+YsJ{
z_aOdWiujM<d*DBOK*u1KOsrmr|8O0C24@9$afUVP*p8ha2P}2XZS8k~S9Bugln?_G
zZze(iT?TU$HOel($UxsZ_A))!N=7zg=77n9oIPt6Vw6eEHYPx02lcECtdva#7}fmJ
z1xt~MjB@dTz48=%a7RkBQL5<(<tG2gfEk+q3FI>qU!8m~P*;*?<I~vY<vm=oa>`@Q
zGviQcOEDX70pxJ12XKk`bLoCSPEh}-@cQfI_oo$3x?X;7QTTm@6K|04mn(dm!p{NT
zWPVrrgZ`eiOyaFqxKH7)6h8Y##($=?)WW}&?y>N<rH=uUu3sy>>?ZlW0dR>qQTn!p
zjb;pllkr*=z8f%y-(ykMzm`sx{!%KH{#^P~=|t&|r9YH@Upij;UFn(9-%7tN9fv5M
z#A_g86Y(y4Ppg>(I0f%?ytDBR;XQ$O14M5!U>)9LNE6ylaHW;a$PhATC+q$YQm5|z
zmO2h8*&^aYO3s}9WL)xKW6D~=h$N7+l}FmGVy)fld+vsXj{O8(ah<4ki3KiYc2yW7
zK`KxzJ;S(w-D?|QIc#AvSYPdEBMmJ#4?1XbhuE3AXyL>YLF)}-?y_c&IJM)k2g5;I
zcoMofpw{YbSdqOh#!}x9%f_QVEgPPZ=46w52wi5QPrc0so~CC!o7pH0vtb{YGgW3&
zd0oup0Km`2GAX?-#Dj<@6?k$3K}7P1DBC`jR{daD#F4G6*o;MLuV44DP_WXmaLgs+
zDPp<IEd6_kyIN%e73R%|<SeLA`?$zFfdqxXjFTGk#kLKP^4u=Gg+u7`7;*Vcx7rPK
zJiD|9%hx=P^znDWYmf(|_(XYjwg`Vb&#d{<<M6(yooK?1QHzmBXe7CnM{NIfjeJYY
zKJ=3lWLkDwm~_9TSd4Ef;%v9R&_bu%7`)Ay=!XJJB`o(a529s7T8^1z734TXMstCc
zDaNQ+iYu);<!S<X#ce&oCQFBsrp@D;(E3FcU1$~X2%JeM`FOLz82Sa~wztCDP%Mcd
zYLdm88OHd&z>J4@jS;?|8VYg$9)tDPusJTJ_N_Uq#*A)tY<HBvTMb87W0$wD#ssu0
zaK@-L$G{s-8y${WD_D(bkSUTs=HOrix?VytXS1jN&$9!o25aWD=k@k<dpwN_XRKj}
z-Fi%GU+da+UB$Ji_MYAwR;MJl)&^8#D+?rxXIR10(@W^z+Pk`a6{XQO%1DVqiLH$o
zTkU+~u{6<@=)bwh6sjlkB-XtBMa@>&2sbb-9*%J_m-f?g3`_^qoQVwcF#?x?CtVNi
ziTg;snJA!^D91X)jLw%KT(uZ;jx@Osw{e7$`>KFv1f09V1}+q^R=__9cv!&qEU2xu
z32L7&>43KGIT+3re9AF?<skk9Ml5{XDLYRE5NRNpJHWAcoY0YRJp<kSj5rAq@5k#R
z3nE%h>L55_B`1hzN5wjdEfW#LS{-dCEc{U8>+qX(j8T6AHrX$%1Mq|cI2*zvavhE*
z+@UbSvp4jCS1VuY+BhD%8OLrR>|qUm0+2I-YV5DO?#KCPcn{)j_$T<SeGvTxU>kl9
z;hl)T<$<VjF^s0y5ttxg$3XX89Q?CgavD?LEPYmkS^2ysv$ws;CaW_~fvTl&Z=4Kj
zIrv`;$O{whv9KNp8{4jF@9SJ8$(MF^-~B?HeQa3!AX51KuhlX*9~S3tb6tT=X_{ea
z;^SH;9ld~9uzKx{y(XW_JJFK+LbyqRAHzjmc`0k$l-OnoI_qPFV(oD}Vxp~@>n^!p
zAq~Ljl@=h9vXxCaa{lXZVU$)zf(b3})eg|y3xwWt6n}3<ZIuAudCOw+1H3=O+l2^6
zFy}sbXOpR0h34DQWHo+cF?l|{89YduPcQpWW%KEINYDB7^alWuCXcrP?*_b$cz5Cr
z=GvQnfDOl95ir5VnR&mJeY1I-FVDK?teGuwA!0SE6#6R35l8Z@1+g3fX5cae@`ODV
z3YGPh8dd6>vaYniITM{B`VWLbfRBNRoZn7;nTYsxfJ@9-X1#^u&8I9p+x*7D31$W=
z;U;sev>b2=oFpbfxg9HQLa`gdP2oyIPQ{u5B_n7CEI55y^uQFh0@hEw6*$RwE(6&f
ztc3^C9Etd1TQ{R*X}+(mz4xvn-9vQn>O|I_f4D?qlbmNORr_~8tz}xy4t0Zqux((z
z6Qq5y6$WqATxH^EhU|<s@)|eKoSABcE!Lo&Qn8M0yTSSVAw|WOCCrcX(p-Yi?MEen
z0lyY7?l!MktDKhZgY3IK+8AlpzTm1@a#uh^0pPp_l~cxnkS3hM039Gw3)<%)_p#4v
zvliHS;vaKqaKii5=)i2RO%G%C-oqsd|HOa;X~WOV+vWEm4gV=1yM$``9QrkQ=eKi^
zPy?JaqvXtaZNXqafzs)A%AUUt>q9&w&XdBL{0vJK?!xJ^3sRtmbk>(a$Fhk=K3BQ2
zxY&(b0ao>08f?cy#|!s@Hv%2ySvUlc&{uoz1;)JG<=H{~omV&&uv(tY__X+xF9W22
zEdmbqrd@#K-May~)jz~Ttjs6yaGD{ixOzAM1b$=m&&I)!HmH$WLq2o*6^T5{kgWQ)
z9xGzCW{wpK+#nRj*~Cz9B4x;vpnj4`B_AuPA9kR8rn~}j{=7Es1WPFRrR`jS=vmzs
zmG`X5mqq~Gn}HkmBCvI0hS{5dpHXAa#He85@cMSF=Jbih9{m>Z<}bw9-@6aP8hkg}
zWtxOcFxOK50&jh$P)E;`LeQSk7g*cDIZ>qQE@D|qVjthJz}#{N<yxMI`+}YHSmcPn
zxQaJt?nR>U&rjturpChP$tW9<??wDE=e4RJCD-+lB<`su@_1F(4m{_l=G(St?YjPr
zGy$=6O<F1+WL2}|um||V&$c@kn|%m-TElDbn<L$R2y%F=bPVGqj+MsaorpKQCxp6g
z%IC1AfL9)HWX-F@QDInf=-3cygyGFPFQiCMMRs&TxD`;;<CKiDcf)HO?o2(sSC}Kn
zD>iD_3M_v6E|3B);Y<D*{#i~kkWQY|S40Q7DSA1J^H#h53`hg*TBodXyT?Ggnmbmp
zDDtes-(4uoAmH2%3IF$^?A>_~+N#oe+OP+EcRmXPJK!O}J%EAF2~}4eGTa1-<_t?8
zRGIe$HHT)%ktipQQkT}-6d{}ia^VMCe{l1TF56JCQJC^p1~4yn2CB>64)YJb);Ehj
z0G5Xk#N{81dPNB#%%ca#%BW&O;2{t>84)?i^;2W%=KEj^<;koTc$LCFg&$Y=GeCAN
zg}boShpuJ`-~yz33n1liufpRBXReX(E`_@lj_8!|<qAKj@HYz2dZm1CQTRHAUsd=w
zg{^l>ybmh;slp4oBz&#HPb>Vn!trb6`&9~Gq3|CS9#HtKZi%;C;cFDWU*Uf#yr@Uw
zZBY0<g)7%d_&tE^f*;Y}KLN~vU(dH~4ZDcU#I*K1)f|P)McQmlo~_hxv)t@H1yUJ_
zm2+biC=&LZJYOJkCdI?kL0@2J4f|Zs6R|~BlyZ;lL?S80UE3j+d+VJ%CrI}?-0t{5
z+u`Je4KY4CagyZ>_SPYqT;qXJARbsDEezNtcH7$P`ncB0Mwv5p-c2&l)9~xgOmCLX
z=6obM{Vbcl7FJBp2R%|UwHO9_S>$4{JW||5yNO41B$;IhCP4v1<gkTu=?biZ*uk9@
zre(#)(k`?m94-cIkJ?(d`qY>?O#3WbW^^k4{+(Maj*)^RRBSHXITac~6cr0qsl!yC
z=FrMmeR0I}?y3fH&d3IpI3^mkvoKkP$6CuNV@qs%Q*0^gmSLZpR{=4VAUi3XI1!O5
z81%!q&$qSD4v*N#BoSP7=xA4|057%F;517nVqfPaj4&!9`DVwj*z!g!?CgbutuARP
z0r1EzdM8=XQl7<d`mfnamqa0HN~@~ja4fVoc5VE)CXgm&GGL{k!e)rx_Er5-7^)&J
zR69hJFN}4u^VWK0y9kU97H_ScO~=TK;B<WSWZ%{ZMKB*TT#^+-5os?D3S4cAwvop&
zi#5=Ck`t*V#ent=7G35mNclaBJQ6&0oNH&}$iw&F<#Zm`Z)yncVX*WJYwqmj0rXOw
zNL5?<y_w+)Z2Y>V@N}#sy6%TufW<`rkc?O>(cP_!Hmt+lIkk59%~`Bd)j9J*;T)Y1
z+B>_s-A`>?PP|C<dHa&;ZGpM`B;&tG5o4*YvzbBhfd4nFKF#(dz4S=(tV%MbSu*Nx
zDy}c~h8JU<BIn>MM4_sqcaJ9wDeQCNM47;`2~LN$>&u))Q_faIQO6r$Jef9Wujf&o
z2OWec;s&`RZaG9_6_$6sr9G!?S}{7$oh;)7Y%v_5D}q%YIn!=QOu!Z=mGX^MG1ez`
zmnC4c<1;vdJ3M%OS_b3Ia92vplWQ|*bTY8)X)vkWy2xf<XzT4<%hlOF-RYXpL}uCf
zQQXkuu+%a1=$e1Tj>K7I0(#Y-h#ctTs+6B>TIFTGf<Q-xE)Oj`;LoG=Ygrl|w%GY(
zed<`9vrjQ>WzTEt;qPom{<*VzIkL`OA>d{K>jnIyfX@kl><qiqya2SxWRe1O@H6mK
z#OqFn^SoSr70xmdb%P~HOd#AS(i|xD4fw{#{q7A3Xr|eX4B|2BXdc*xq2+<Z&%>7S
zyUsxq)<E;#q*Q05r8{CY!b~kw)Y*N(oSuZV4d4zXgbir;=K-tTTe9g9&*p;0PZ8x5
z-nY4M0?v6l0(w^6jV^E@Mk<`9!@qK1T^Froa-M45d>@(HnRCC)jHdx|CcIMN>lA)i
z;rA3yK_M8=z_2YF3dyhpv))uQ1++SoB{q*`NFPjSFgaq0;*+CDw99OBmdOc{qmVfl
zldD8{_cyhB^zQEn*6HRXGS8D&EJV<YM&ix3$o#=&MFhyu&KX-uy4ozl6Ni?n%T{!E
z`Gg9p7&k@6V1v%A8OmTKHfUJhKZ@F7kLF8K)D2@ZY$}0h!BB$)W2d_7GWJmGBDa0{
z7GdfFyGX-=z@xOZ_shJo*Y2F=pUlzpuXo$e5&gYM;adPH?WeO&^BLfvIOoj83F|az
zl&3D*9JZu|7Hvp#eKn|A=n5;R`PE+KkY#u>7I5|<Zur@?L4H53;lBW^mY382pRC_3
z1?2k8IN+p_?J7X>bTuH2M<L#Z4CQIOoo0wPt`T-xihb55cf#a9wM-=PEJGTDKK>x2
zlq$rD*2GY6$WHzQ^;QAdWN;<*rVBeKfq(3!j_oXsA<iNX>(Fa2S$(zFh&nc6ec{5`
z8c$kY9P7oNatl6>Bai%*q1K(S-jkLgY!Zo!KitmiEgw-?cq=uTD?ltXS9NZE4I73$
z(G?)ZNn8QKE(IhT|ANZu#9t6Pfr><42atBm#R=;{X$7xfacJ^ufpcbM^qlrW5x8{(
z`Guc-n--g+2s;Om&n18~?@vM_t8@**?)U!!oc;0217>X)jEq}!z~`<Ny#m>BgmNFC
zsOZZo<wa=WXdW_-3_^1Gy|zTEO9~{XqJ<+TS<a9@_0`ivHcLN|)qw3H()8DbHT<!?
zNdwwo5$OTM_MS)Z_a>C<TY#_sI|(1QS=Nx&Kvh**e;vqk9^NPMF2(x*-e3)h8j}Oi
zJD>sFH6-uL|IQkcM~}0Hv>!xH2C>mKq>I58%Gr$y-=c88!oMk;{RZjYZUy8T(t829
zhV%nK%IBzi1TIqe28CZxShGdGzf9o+3ZGHfv{k-$D15iVZz_ED8|C{A3g4sfmkOWr
zCi%WX;rkT+Tw&qO^8HeU%N1@^xLe^b6kfhf;;&VBpTa!~f1_~Wc8T{73V)}t_bn2>
z3y{NrZ|d*A0Or82%WSjb8qx(7wQIF_MbC3%>kUmP<Wiqli+5rbC?6FrD7gtaV2GK>
zQx=rml#km!sj>wnC*=g`%0ufX(+pc>e1zmA%b6zISTh%dbaO@Wg3$lOf|5gGfhB`=
zz+YTRT~Kn8S%y@$pyZ@0unJ;}La7T%Zdz7+EN#kyl9MuOnUUHI%AB>Jl!YiN7B(Mj
zPVyH7vKEx8L7csyl!eJMJl0yW7L+ovCAPi91tkZKw>A`6P;%lFCZSKRXhF$M78T%(
z1*NQniL?Hc1tkYhM7XjSl#)_rEGVfp-&s&%d1<_KP(_+?Vqs+EJXl2%M7c~vIOxXO
zUBXL8iRofoNL?>-=+<P_t`{ZYD6?Lq#wcAck}}k|W%t)3WRWN(PO??Yp@{y!G<^;C
zR)+YMQ{qUh)RiG8UZif*SBA1vWvvWlrA(Bitd*fGWc0)!XW}bEPAb19+?An79ARH%
zWypzR2N@Nu43$e}1r-w%HSXJ=VNIX8GUOtsTxG81lvx?75}V~gRVzcMlEE2U8FDhu
zVFxB>J#nj%6V0(2B^#wUZA@r^suTT{p~`ey+H#OXR74}%R_rVX*|}kTW#ev6E7|uN
zlRaOpH@PwQa(JAZCEz9j{Q}-0;8Oy=BLKn}TO7LY^Vl4R*In6(Ee`FEMUk-&7l#hw
z8y^>iw>WeHh3QX>VHbz)#V~P4;%8YL(#d7k;*d@?OH&{}E)D+T5XpNhY=9G7TRD!>
z;;C(pZJcIBwT<&nYuVa?wBhHN{@$tZBY@S~bEA70z62a%csV!0HttcHY70MVN%0M~
z#*oJPEL1F1B{o!;l&|@FD`{YXB*?OT??v43v+Zs2d%uSN6tG%eZH8Hi`#m18cCA|T
zH{hV{`vTx5&u#(~+qYlfkP+GA9riULeS9Xj)l%rQE?KRRzf>!c$g?a>fz~>SmPT8*
z6RnA%o~@hw2<jz)Ofs;NdQsc<6Tmn2JZDbt6*$qBP1ISch2JUkGk3rq`mC5O+rxcI
zw(G6HnV%XmHYeDwy$sT9)!w#+ifq&@3~kgUWNce93Kq3dGfs+)diL94qke8OZ+)Be
zAyfcx-+{Pe&P}jMdj+b%2K@kWOis@4OxT=P{)5{#r@R9@BM~;J;U5H~&3O)ly;7Sc
z_1MgR#{o2W<pDGHey|do^P|X)w!jmBqWavuHy-CM4JpJcOcyeWS)3-LB)(m$!0aos
zF+0gH76q32@-&c*qHnVrlC>#s0!CTVrI<}t9=W|#U{gL}OCem$-?!N8Lpja|{5D=b
zxBR2nlsljzDy^UU_Ca_48#aa_?_+?6@H?<6Q!~+~JOd5HwJCdF{&#H39zBjtc{7Nd
z3}T};<sPtwa`aAx-&B}?mxN!Va04K_jSm3Qru<_-+LWKWQ{?YPh1(T=Sz*n)<@+Lq
z?^iga@XGhd_pJ&aRQN-M<K8RZU#{>S3V)>V;$8B+UE#YG{zT!0@00J>E9_PHE`?uE
zcwFH{@0a+mR`^MUPbfU8@bV8xylo1<qwt0IOZaCL9tLFhIu7E<cKQ<AypER!6xNxu
z6Lr>9lZUWH+G<Unt<!I-+?3E1kA+pEaI6C5p+Xz7n~)uG%qo^*Lv~Z%24x&enX)Ot
zNjX8fP{)SMRu~_7ILUIR$u`daTQ+2eL_LHlu&1Wlkey_fA(h#Xopc3OLCg-EYD0F@
zvf^WDQ*6ji%II`XYBMNvmJK-zQB*8qmW3=Eay5vvZOB=eEW=|mpJhYN#Fp6h5^cy1
zniLzd6Q^*$6%B8a$u2f!Q-Yg}l^I?H$*>`3B}_DxrPz=iJQ3l_wjn2_tkQ<e^3sOv
zpo%o(#KJ^v$bu-UmZR*9+mI8}#ki1aLw4xaWYyY`lW<gJLzXhcIxdxDu_33#Nwy(7
z6vb@F{K~0jBvz^o*@+ja+jJXpcB(8Ja#qSjS<12@XCX_sAv>v3Y{-!~i8f>>jvZuF
zWJ4~O%nItM+K^r3(!w(K1C+5LSBcH?peh^ksbp}*Y{*XLv>|hr6Su}V(Hv_`vayHL
z!h{wWwINrg+tO^v4p9+}Xj`#sL*`ttK6#wYX`>jNvgf1qCb!_9IH=977Vstk4+?lp
zz%K<9K4fFEw~THmIQm7LD~s2i#>Q;MlQ7$KqXahN>G;OS{qA+=G^rdw2JslyW;_#p
z|4`y*u^H>+G0SGGQ_0e%7>!|@@oew_=Ycrq-h^BX_0Al}e9Yr{)O;*w`y2p{@H6KD
z`F%*ke+pQwJv3@N9s!(UK$#jcm3Z3(5-3hJBhR+f`L<9HPI~JrM9Z?WQIuP}fJynC
zKr4n3vI$RyJGE*2u*<_C{XJ3Pm4Maqa5ppsZOVtNO{Uh|4jeQNYy~7QKM5!{Wxwzt
zV{HOYrx~J*Px6icQE0lGtZ~S9YMe;qS(dy&q0O|yl5?XqG1N0J8}cTouWXXZ*GlS3
zP0eQEN6;QFbmsaAj7T&)vzD{8lQb4E>Otf&W=hQNoRH5cnV?PnpTX(NvTe`_nWdSd
zL#J+5WRYe$X_0<A$VjtDGftvKdOs44zo;z#ebaOkc*#soBHfs&3AX8kf>vOrHcKA_
zzKhG!aoQ&9{72n(e;B_T@y^xo8~GdM>qi5q)E-LRx%JENt;H)3IK(6KoxNR&KGJ`O
z>}Y5F6riZv85Qs#<Q}~bc}C1(x%`v1FrIrfDXGYG?Ic4H$ea4A=plDS-)A*UYsOyi
zFJW!nudIu7-g<=_n7R+qz2_kQz7K_Z8t}azlkn$#T<q9;p!F)PxBdHZwj<s<kojc5
zI>5k=O%=!rd;k*f+OfSa|2uYUj~>U4U5Dm48N^2I*w=t9l&>`kKdA5r3eWym`F<@R
zyQ*G5+OZ!7q#gSiK+5HmPYAqC;ZB8z6i(bN-(RKh^9o0NQo?Um_*#X#75-e|We-cd
z)e1kU@NWude@ec0DSSlXNrlgQM7}Rl_)3L46h5Z#uL_rZTH<e2_%VgwQaJoG^8HqY
zA5~cRtb}h@_$fek=|9)s<7`_yUTRTTXWX^71noH0%z^Ah+Hg&ttv1xhUuD+CW98gf
z1&T(6CT$0Ofn$W2kuJrg?WR0oJDtkhqMeizq<eNu+H8>V(T<ZWXPRs~{l8_>c1SF+
zWMPY7s!7{PW*JhMN!v+RU=_s7(y1nGH!UkZmNvzt?WBy(E~PdrGihfbii(BJC+sYj
zWzwz&akfc23zKDdthHpBv@@|Kw!K7?wu8pAPDk9Loj8RSjH)Vfi*}Pm1vtZ`os}@r
za+hM#cJM@mE8C=<l(I^bHp@$swu36tj1vnJHE9c?s9KJ)Gj7sOOc&!qs!7|STa#65
z(oVurl}TI55bL-clXgm+WRtc-QOu;xubkdSVx^k2op_PDO*d(0r^+&EXQfP(r7V+n
z7P54cwv#Hwq#cR#LNgD8;D}qa6UPoRDl%!8OJ)W2R8870a%o|wZqlw2o8>`OChb$n
z;Eb8Hoy=*{=7cA10dk@_7NBGU6Q_#_Eih`*u1vS3nY10EA{x=QV%MZ?=Y{oU$K0Gv
zid`&wo?35m&;OjAr!Epu6!2yN9}(~s0Z$3w&@XD<p7bbg7QpLHZ)4`|rLic1d3z<k
z@o`aj=53l~PJSsVhBa^R!w_*|A_6gQ>zp#nysb0L(nB#Cee-tX|66QEU*5K?y)!tA
z8n@WoRqUN1Cxcw-O@D%up?Pl0)ikuST)fYfQ*LWvqP@iaU3+bDW6uAU^TwFt%;fW%
z%u3i>heHhcU?6LE&d3f^8)S0!F59~K7Ds^@44?1sS45Qkpn2@gu01~K#Pv&0p;)$D
z4ak58J`k!EpMTPZcHid%n+B<!y;pwk((r!)tkwn{wd2<Vrx=!QOR(dgv67}*|7Y4V
z1=fF-vHpLQ6mqo^3p7>?9s@D5V!$fFleJ=iBXqvt)>qpX<@Ztze<fhG^)>VrSu<#O
zjE%R}JO&&z#QYkN^>!}ukTnCJX(0pr8LPi(hJ?iD-pgze{pw5Z2w2DL2qKZObc#X+
z{mee_*q-|o#@WPBf29HEAK_ylAO90YWi3`BAEJehfS%DWX<OK74+?GX-RLcW@qVuI
zn(fjy9)7|TygdD8RTa+uvV9o<Jo|BV+nNPE9k{rNI*$r47wA03_jMk%29DqOH|VT|
zr%97tfh1vvQ9>#x!mQqq-*e_T@*eZN)<v%xXz#*FZ{BHY5w2Wa-9kzZ1fXck_CY|(
z`0^{;uZ}OC<m~VdXI|QRsc7Yd?B>eJ*O9TXHs;GO-3KcX5g6CMaR99QchGx9W$QkX
z9xqP5+?g=ijpyZ-d1?+jHM{-;a#BiRJHEvApNU^`b=n5~Jz3$UfYs`>Xdko$IHV8q
z_tM}_fT+l%b|L+i6ki8H{t*!DcS%6SLRHel(FJ@BQKbve@kT}$u<%irSB?8s|7-Xw
z0juTJ;e(?8>;6OZ|C@k=`v2pA<k|NDMgRM}3n@jfHB2+a6Ib62mO`I($?BW@rTUIU
zo@Gc=puQJgPQSmL8?A|<p86&~f_h0HlMJk+UPSepN0h(Rd3+xE@?x_WVZYMwTKwi(
z-989@rE5Nv%}4$dcVFO@2Tf+>_hhLDr!4w<9>J6d)+g3^^wegE%2H&?6_qywicq(l
zh9<_aG`P!Vt~m&*A}ay8{BGpruLKlGYYx}VhAHJ;8RNf=lMv&#5IKoaCi1ZUj8V)Q
zlIEG!bFlNvUH+ADL%UzuADPVr>wUWsJ^Tzkw%F`J*iSUP1jyd&D1^7tx@Q}ijf}VX
zb&u?m>b}A3o!sPK7g%drkU8so3n1%!H=s1i)8u4uM%r96FRAX2Ag6M5e~H<Eq@yCo
z*|Or<svQiR{Im4&R_#P{TD39c{prd~P*T>csG71ebJycxnVF&0=E{uDkncs*u@|`W
zxRlu@2UzSgdAFFI5X$6~f1)9M)s?%Q`g^9rs{yOk@zMUU6F5Y5T$C^;OQAZod%Vw5
z=IeMAiZs_(gBtNGQOjt>e?nC0F3B!D8QrDn|C-CoWnY)yn>74AfYtJH;vwlT=K*rQ
z^kv{+e|Z#;Jbf1Okf!M~Ak-11@D}Gv0A0NMTxtpSS)1H_lK*UIk;t<QNemj=HV7!Y
zPbXRvL%r_PkUv4al_#70t)$+xJ2iC&-1^9W11%9@FV^tofb35Xf~ZP$DrI}-cc4@8
z%2Q>3`hH|e-TFO1X%tINqd&E#op6u319ZiD)H)QroK~G~4k2kmkLn~wVR4u-(AA$o
zs##Ccs>^D~?Z`T4kBwRhu7>nCgVuf1t^ax7Lj5D`3JqTl$Ub!v<f_v8XTy2mzu>%!
zSDp&{)b}GZTkn9Z_u(K$8t!RxGU#jOnukDFtp4X9uX6Q&i5WuDXs^o3XJdCTuvcaI
z<Bi>k<}`Nl{`6%gC@Je!R7+Wz`2w;IraZf};#`^0UKPH&2VI$&^B=h97GbZ_@HYce
zXUv1utx}nx&Y1UI?C-`aPnA03KaeS9rvb!>&S*Uiok4qbSY@mPSuv5BjjYOv%yhF0
zNfT6tlNiTh0ayK*qnK4BX4bM*zXv%>)zjdaSN^+I@2d-pm4muph`(>c)Z-O^&;PcB
z9|oKat{jE^uhP2T_YLe9KY%{`TR4*x@HpPU=dK^tB@WMy0a6p`gF%A#CClf|OXYaR
zaS}%X9o@XRx98P7SG{jdPge&dZYiujyu7XfchX@V=3h&965*3=iW|CZf8u}PAbGm|
zg7`t(11>i78TiuJY*RSjaGCP64~f7wDcq>=VTFHFIOo44-WwHuUSZvLWR!C;AO-%F
z3g4&ju)<;AmG3W5xL)DEDXe)yzF(zq0FX-epY``4z#Q<OWha?D+ViSYZdg-I1L```
zkZSUrZ}|<0TeU+=HZ+T(JH;r;iDf6^)~`+Pm!Jq&lCVIDh&seAH7!xPct=;c94)Ts
zns17WoP(=Cvv|y1=(>2hV^k!iOe8~=Tpd>PUOR`339{-0&luP;?Y(xbaS|G%jEJU6
z%zm0-tBwz!o&0m=CFUfeh3|lfaNXKkalKuzRu^8}z1-aKO~{jXLs+7uI2dy9V5M-4
z)FTk7=WC5se9>Y$>6QtnYHBEE7nr@sby(ysr%1{4f`_EbY9cW)u!G_o+19%e({-yV
zAoJGDl*Nk?GB@>BK66H@ZWM0ryP+2s%Xo-v<H<r~?Z9ECUL!I9dhES{<w=QQ5ND>5
z-VIf#JFi3$0d#oGTi97Qqr7xp5iBnvDQ%u%hss&D`v`_x-pZ20Y-eTZ5)5SGqdE4=
z9L+iDD5xZ@-apul+^2h(8;u={C#)?}K_W6Db@2;-(v!!SYHVLyf9lGYUAHX9WseC8
zCO7f>c1$o=z^wvaC*Z>Zz9!%)0fisf1eXX{E&!|;cD9+|+!C|~eS1G%cYKkL-4X<`
zb)y7c4-b7!hKTNW&+9?^_7Zi08)KBy*)!fw5E74P9hW=%I(xeN*twrT<BUhDgHZRe
zho1-;ihouYW*vPb5aZuDq$7?JMja)W-jSgph>kx>lVh<)IRg^28LS_BezMK0?V9$!
z&Q)^jwzHdX)2+TA0{`R$_Hp8wRvypN&hEP%To2yt<KmyhwdToS%t%%}p}*HD{5!yE
zZ9Y-^*~frGhW#@#>}O#PSjtl^XooCqzM03;jD0V`oWNVE^2|pu)GT!+mKa#j=Kj#O
z9<YWi!;@t}GiDE>ho7B4lHdC@{6~P*^7A0Z{oJQ`+>ZZi%}C&+4Q&=6`T7b#nTq>N
zNH9jlm@v%{aeNqXpC#F6Z?YAQbwE`di9E{^8EE?b5LJ#3ooG!A^{r^Ie<H)6{wg7z
zT&|@4#FBOb_{XN)GZJccR_GFUF0$sc^s+XlJARC{_KVW@Ek^UIZqZ%tm*0;(@-M7x
z4Lerj=o1q!e`$=ytY{sZrRF;JEr&&wQ0${8>oHE^I`+LtG(P37l_;Ms^>;HKM@{C;
z<48MZM%G@&D2DPo8Yle(I8*KxiDJWHbZgi3Z)_guUd1YG3b%Luoh2$#i^d#Ae&J`|
zPqCpLVP^sIxe$=k;6}8wO6Tg-yPJQ2!(8#o0}a37w=zZd@2q3zN)6<!lHP{wXrXyK
zps4Cu$@>};coEv&xEDD)(;Bw@y|zfIPYR?5Bii|NB;<fSRm(fc*i{+wsQwh_BCn;-
z$f_B;>UrVM!rFeFGScn)eS^ybi0nO&;O|W++P45-e?-EE{X&ckcR*WJT8Brz-)d&!
zy$xA60Zsu7>@8HBw71*_E#U5P^uA=-Tg+IwoNz>Q+s1Xp*6!6kU@O%q1ufsq8o_C}
z4QA!@{KeE|Z(m@qOssGAjVcczh-R34vpN$2iARrP$=L@YCnI8XkK+umg|c>&!a;>!
zR#;Ma#V@6syA6<g9Crb7kK>bol+n>c0-F`yqwtFgb5F_lTNQp-;qMgA|8MzTRQMi+
z-%@z))AD_p!uKj1Qh44``TkOc?^pN>g(H6@-(R4xP2p=4ep2Bt70&*(#P3%4PKBRS
zcue7<-$=Z7C_JvP@0f(Y50JxwZ|U!ofI0AMmTh@75>2hFZBI2TA%T(hjDzig$FT_Q
zh{wWB1L0T&3P{wjlVXf<6LR1XGsaYua=-1CD%<Jk<T*jQb7!X`n`L~Y<Rr_PCfi#7
zZ|!t+NGz~q;fZ<bPDdx1Wk_W^9i4OqRzYmHV(LyuH!UkZmNsRlqm$BFA5lo}YF??$
zz!sBrcwZKxs931Gk<5MBlV$C6tOjxRPRA@vmf^A1lC{$@6I){2OWf(`ph?;3=)@^Z
zM4w#IPDeLcRDd&fI%XwI+|ZS>)6u~b5w7f=j!7x2-08^j+6!PDZR&C%u`tn{j)Ewv
zmR&?i7r-Q@i*cdFTHx}y`Fl-!_gzI;6!FC9)@0T0bWCDnRXZJ}46%;O+3A=PCwZr%
zLs4v}BfoNL9Ep{>)6t0+Q_)(HR-4_h8lxb!xMru4<%*G-ic1JyN?ayXtt@5jbj(7Q
zzSGf3m9o<@5-0KSJ|~VHWK^`%v0O6CWK2>#H&Wqwpy{(OfJtEQsqb`jNtO1Rfz9$D
zy6W|M+d3Pr>FmaSh~>rh-c@VF=0DyHPn3po8Jw}5j!x<5mceOH+<N3hbF4?n#wku6
z6Ix(&r(<QhEp4ZxLsUc~+EyH1x3P0WoXN#GR$1#L=auYxvn>h6)SF!6GaMf0E*G#|
zz<_}J1Uw?(y8<};i|%%u_q|rrg4dnq#_axGu_)3axCpfY-}tyFJiGsK6lPLl47=NL
z8-|H<5<kmsN1a_}S?YDJSvnA-(ckR|>VCJ_oISFwwWHYG-_`?P{Id{XEej|?&fd*9
z%zn(78aDY_MB(Q-n$D(T;%md{Y}HHDn$6>ypfwnU>GmU9_}To&#WrlpaS4A5AZOCm
z+^4>Eaf_ma9pH|ME!G@RXttJaF{#*48h8rL^Se6R`!uv^MvHaP7)8H|fpuycCz&WI
z4FL7cTzy!NT}^PYF!zBrPSU>yNL%x70Xg|z@_U(N-lOn~3jd(+l0V4zS1SCx!rv>L
z4IXgv4zobpO~tz`EmxXJC{<*hnagiNRDYgnh90H6@9_DSa1OVp8S)}NDRYwLj12cj
zTvP1px0%%%Mrg2n1A6S8FLtfY8JipCI5y5@`WyM#-?P9I=ARGeAIzOBN#2+ziEiKx
z=$>cxf$lt3D>a>9j-=C@LJN}a`u4S`7jJx4@X{9hB-ch**_>jVp+Aw@x@EmRtC&tY
zPwcf)7Rb7BED?(6kosa-^F=*DZ54Z~E9Z?i@i-^36-bX$wNaWQ*|RaxQb-|YA!Ha*
z@DLU|q!XiwF;e&lB3&RJv!c8Alu82Y9ct{HAo+DY9RpoO%MPy!;#3?#y8<^QF6lRH
z|Mh{`Q$5Hc#%OoDwY5Zk3XyFpuYs1(NF%F|c5mDI;*1lno>_Vlc1MK0Lc@Ou$QE9W
zo|$*8r)NO;ea)h0>P2^;Hncg=8B4T=Wd_2{7&C<Is5(afNmR!bfNb(>6@F6TuM|%I
zvwUB#@I4B@t8n^X<olfpcPadm!WtA;R7$~DDScDTz9li8Qj>2%T))jzhp?P+9TJJ=
zHFfI8_I`hQgPovZbe1Ph`w??R9<CZr)2WT5V_$=n#@2<(S4YjwGiyL%g1T_>PF5Fl
zZ4(@68-20k=FWbM`#f#qB#)CWL);NIsU!s7pi-i=6J4mx77@2Q*@P+-{s4bz&#Jq<
z)*q{jY-Ll1+zOOUHijycO*SG=O)c+l@AY~dVO?2q(ThY^ba!R(NxWUsm020`u*?K`
zDzD63G%;mH9aA4_Z`3#G%4{=Yi!u}OGYMn4ks(E5%tJ^qdbV?jLtlSyXZKyvqbb^!
z6?^;GJ#|Ze>K{(Q8nq9#lJ`S5YLg1Cqxc)OD?OZoc=T|J9FaJOQ{3@atTV54{W8k$
z_^+^7wp<T_E8P1{sE1SVPn2-x-`qanp#Gktuo;kp!fN_}s2|4zz(GZuGq)!=Tb#L)
zrY;E{u!ZqG6IjOj|5;MV)=C@=puRgwo{Y0f@MJoQ97gQ$bIeG8JEY;m@w?jkI`U+z
z^%Keekdv`m(*YbDyAJ}g-u3{BpNP-2kh8^^tG{W6l*D`0qsTwh`6kcZS;w5aM<UNM
zELC6{xD9QMV=gCJ6GH>X67n>VkN=UPvKlLq4{=06>9^Ljn9)rMPTCc!0r!9ktBxo}
z>{U68;1fQe!ix~ndz30)?@>3JiMbXtcG2n5<R4J68AYU$BFtKF=Xaa`PUK&)PfJwY
zV?+}1X_12^8lxQpbhSMbB=c+r>U8?FTvDsFfjtqQ7OVFYeOewtqVV%bU5nX^uwQ9-
zEq-$xKI7L5EA|JV4$l7^XCC8~2Q2gE{gv#0zYdvlG`<Z`ly}ljmWrhhu9bnG-CVN<
zWW^@#yOEXO&I=?qX#@O2NSd(s#z~wr<YD68n^U8hRdg8aFK1eVKA$~|bW=dth=z_N
z8o2xo@VgN^{0t3mF?$g96Ado`a)->y-&9`r=2gvR6Y@Q%d0X>ZQr$=QzqcZD*7;UI
z*7+v^Me(0*-3J?G=9;Y_D^~YMkX5<5zr^fA(&$z_Ry-BIgMl_-7C%t@4ZlKzfR1yb
zH8Ipz{N(*<%S=#GR_%sk70Jw+dQWDkjQh3TT%)KMP47j_R3F}`j^j|354EZtb&9=!
ze^NeY<Xzd@rN3t@yaq6jc&9V=>j4f?AHI)i=pYw0h2YS&$Y4BmD7Vwn<`3lzX%2iq
zD?!atSJL&ODVGp6n0|m0nL{(PX@twq+Y0h~tA_s*V72_*@CzB6?E++X{Vm|&*z6C0
z<m>s!Lz<}1-_U?1mA}&r5yyvGD=o=Bdy|J+tOK^VNaR_DL<TKx8$^{Y&WYB<P`|~&
z0}L4k^;Ze$<Z>nTCqt*kk#3!gZ@`)}!df-_6@ctp4}q*oeeKw{E*(POidUX0`__*k
zQ|j4Y07~Py_H;&3c2AAdyMnNohHXU2%W2r@<{>0a=v|$})E(qw{h6ei6(x;3YwTxD
zod1ZtgJwBLYr)l)p0j1+D7XHXjz;|>Y`%uS0+9Xd6i8L2_0Ohr;Fq{d!moeiT}l7?
zF=S@z9gy{Y7Ko9?d-|LV`klGv5QvM_e+x1zSO1roMwBVq!?N<(-W?3=Vab4adv~Hm
z+dKJx2IM9vEh|_wOj)`4Ch``!VK2KMOyc9pjV?`^mN5~zX>2je5cUQQe-|M2#uJ!1
zRw_5t8{?nC39)$PsZwwJ6q!<fo&#b;ZzP?eQ1J*ix*>ih=!%OC@+v1b(@j5;Ca8^;
zaAK+rvlJnT=OLUT)vPBm@06|nZy;-_ei~X1XQ~a;GB&9HmH4{@vync)E5}LraX{{g
z--d~NrS;$T(^k{<6Wphc@m)XQy?6s3?eRHTEIIM&1y&=GTX^!&wfZH?N83x~cv4f$
zDWvf|@pt?JYYg}j-4lNwvYKpDI9t$AbsRTOw_h-o3z{Fku)SyOiGRUaBD5<M{=LG-
z6rMF+zF(*CJqiyheAd}A;%Ne;(7#^c!wP?|@YxgO`$C0-3J)oqaE^SxUg28+seJe9
z@23EBY+QEUNq6TLoqDINCV4rbm_`;>WKEu(gx{D__qIE+)Td~~d~Z7?MffW70AwfD
zR-J?eibT|RdZ~FbnvmPkorDQFT3k{0pcHRv2Umf1wwPzBc$qom$EZk3nMg*;rg(>p
z31aOozbQU5Rbuwj44ZX)B<*10UgI5z=5C62qtII5?K8HvqOc#(<#t6bwkbXXL*k}*
zvVm)H>FJgUr@T$^$3b*-Q@oqlWNeC$#Kg^<KTF#b??w&tqDH2xfg^VIrucM3F{Y+$
zimw7g)~5IjG-Wo$yD3@xu<t#NTXqZ^o<-Y9<yf>YF&#(|9o4aKPS8oSt)vB;;+cIO
zvp5I6E*r}U4&M0-@tyD)X`+?N{<Z!z6fXN~vFT@z1F#YPdC#)rfQ14&1iVSWzY6%a
zfM*1p^=zBqN&&YCV4Xxa!W-z;2E6W&GVf__cE{+>OY9BYD1k%VgNKtwrJh5acIXKh
z;v3;-f{=Jl;f?U<(WfMun(Rh+cIyihKkE(`9daZP<8Or5VMdva@H*%yyAggHIG?s3
zH)=pi+>cA4%MuR}N^=bPWbMa|=5;Fjaof&qN!`a9#UJcr-D+iT2hwKmV~t`czmN3@
zai;8Jjbb|!`&b{G#F0?&Y<o_N*^RItX!vgdPsJ{?^JuHtgI6AmPU*i$J81Sk)+xxI
zGpkzwWoDJKUo?Rip?$1}kh3$aq2}BQoc^G%Kzit%ChnCP`&gZ1cJ4$TrR`(QqKmw)
z(6sVfWD%HFwkacBW#ySxOxJlq9d5$k3sJOp0WN;7gnwhQObn{At*m>x)$ILm%#V=u
z0l?k(9n6tvJY;1aMLTf!v3g&!=1Bi@`&d1CoY|K*mx}IVJr1@|)}H-5fy))XRpDa_
z{|ZP`@091a*nO-WfOMsO0FW~J9fhOMm)}bizDeQN6rMjtzOPmId4(e`knl?s-l_0i
z3V)_>;#7&ZO5tvWzfgGIH2J<-;lC>Uw!%LuoHSkHU88WL!cQnXsqo4RCEo1{-=J`h
z!ciB=_gfY2RXF!z2`>V2V)riny&sShyFV*T-NzbjLsQKWNMNKr*W}rP{r1ec*d)kk
zBv#IiRiJ=G=VB@ICkK6jrmfigsiKtkLZio0rc9QcJSRvu=<H)<vy9JioMbuEWLxY1
zt$nO6i7Z)oEbTdHc68hn-hURUJ<AX{D_T3dbtz8Wi|S-oU=_snqE?ue6(370j-l8H
z*H`TA_sj~luB_SVI|`|rkYcl*tbMEw`4L1>v9O;jy|J?z#M%2;voKkP$7DWhA8RJI
z#I`rZ452MJw{gZ)g6s%&;zUHMaM+55H?C)wtJ_GubMIub5J_e$Gc3Rv`&gZ#MG_`%
z{Y=@%>fnjUMD{+`q?A?eV`YP-!NNgRNnv!)mL3ThxG!fR^7cuL&{Xr$#DsuIHN?1p
zH6@%Rm#~l3$xf41yN@*qM^*b+r3^7Cb@s8Q#7W-A>QEHh$I7oXEJR|Z?qhZ1k&v*2
zYemNPv1X?d3uE#=)~u9?4MV!ykxSeA`l}=Z2hQ_^!JCTf;oso<|HoLPHL<)WQ0lQb
ziThZcqS!%3Mf+IGC9{HxNy;hhV|9>gQ_a{InltT|NeSCbvDqpjL?Rp+*enmChU(0H
ztW}b0GdN@WSl!IAqRMGcd_~oX=B%hDJ7{p~n9u^XDf#DJN}DgI+tT*2Iz&Y^B2kC!
z*LH50wvRPB?&iF*k|o`GlY7F>rgMK0aPB1>^5$MF;5Gr91bjdMbxU*~>*H9wJcQSs
z=Elr+Ct^_ovt1n~3Vd7?UiVJ3&4WlCk74(*F2h)0f8uA^$Evf-EJK@TLR$$sTpB|A
zSRV%q#!hzk8TcMT*dAy1-Z%$8a(|re7vP_;Lfmm_Fz07+9@pP%6s`x%Bm8uH#&!XR
z7-23**e?*LIMrEfza`4|W+JWim7!!YD{(S{lh~9OSfN9iWjA5Ali2-;9ey^<l;00(
z_*Vd{<=@0#iI3PkK>COs1r8bx&H`@ou?dh9Vw`g9@iWQM%9jB2TEG;a?)6(*eRd}6
z9`c;JClVRgq!4FYk9GI1HTxlpc^Jo>XiW?aoWsbQpuRFmCR;11FW;a35O9y3p1iN#
zXGEeAnYEl{M3#m!`!d*5&rd(o(a+;ljK`?u`+z?`v%>Qn{md|ujyS!`b%ep@(u%y@
zSwwofpF4}9FHgkVy}&q$-tNXML$dJ~mgBvDc;i7-mDoR#Zp;N)=QsKVEpPA!)lU%L
zMdj!?{X-k?yWDN_U9(%vE`&X%;XeeVtvipVbMnq6Q@5(goaksW$M7~5;WLDHBHjkP
zJK#g~AYS?sJ$|g!4B?drEE>O{5?l8OWKa9!)qtXAFD}o6kdeFYw+ZI1H9+PY#R?>(
zA|tnxjFn8@)K^0fnJaoet5LFN&V3WO#kfu3+@qXxyGzfw-Eu`xXDjjdM3krx@cb(!
z{G%@v+ja{SPo;G>137N^4erqa+y>YM7}&O{`)J#qiI(l!w!JU^JGO0)9>=!514K>+
zu~FOhSHTv_)^8L}pCiBTRJcpwe*&_L`V%0}XuRqwv2AYzq)dKH;m;I4_eBzZtHKW`
zJfZNKx$=F7!XGKj&6DsKD(q6YN8zs&&UvxKd!xe7EBu|pxmU~gEeao0ctGKA6`u1F
ziFduitqT7`;m9WWK1<<C6~0yBPZiFbFY(^4u<;uC{UShi<z4#w-GDjp>st!z%yY}M
z<*DX=h+f28U6W^v_1iCv+E2t|<=j{WN=Ai7Z3lgUoqo(rmtxd*Q*O0AP9f}nmNO|v
zZ71af>6Sw_+-ZjGF+R$1lI2X3ZKnUXjM@%~wx<nSOj3>7PBP1o%8c4hx&o^pW|&Sj
zYP)G!@v*ciMr|i$WPWMO9G+ih8MU(zMa9DAQ>jtA8pPQ~?JP`|;jz||Wz^2Zme}^x
z0JW?=e9nS{#<NdHjM`3|!XYaf-mEvnsO=_W(+mr6hEY2!VWRCW#i;Gzi3nG=Q9CJR
zl}2rrmqu*|Riqgw7A9)c7DQ3C9A&5IgRoIMF<p!csYY#wZcSFLQ9B7oRYq+oL#*R+
zjM^!2l8xF9MKPl`zj9g|iIr;9cH%|q*6Xowu2M&FL-=sU>{MAs?W~lEvXo`i&O(-c
zIHQxwKfA>>YDeNE8nvA`c92n#QM+6+E2yVx)OL|e3(GJ=moaKriOuq$Dx>zPWN^le
z+D_)&CdBzp-16f@b1Xl}h9yoF6Ix)@s9l+EOEYRaL`5`WY|z0uVSTyrHYbwobIa`<
zhcWxZz=uxraREaD3JY!Eg#uaybO~Uu88v2a{dKF^f!CeZ#*EpI#G(Yo?0xvg$3@|F
z>omu7B*w7D?4=k3Y)<?v#%!HVW*M_}a#<RWDTqr$V9Xu@2g1+J<`#1TVG|cgcrzgP
z=NyC7R60LD2E&FoKX1X`oS(}>D&V|39RNFKUftb?`woh$`gx$48D_eW7bm^{pzxat
zp97j0z7~*^-8$G`C1K)mp1$#Fs_BoLSa4+y(1fOF^UOo>Shz7K9LrLjGY#_{nsep`
zyX59f0=WUhNt-aev*_}1bjvD1moV^5!#B;aD&kW!hrXO)ox?s{2}>z1(zeT5iH-xS
zSc$aCOQ`n90eT}t{2bi3V({pe{U?^c^yaPq*`MFC|Jcwwo_nG+_@`|vN`p^a{-1-7
z4!!o-CrS_3d~p1EEoSIlAF45f$F}!141Q(%>rT9N#fdHZ>V|rk{iQVc=;qgzO#hgn
zk0W)*+lHa8&6fQQgO9%A<+t8)%k7U2?pyxSp`Q@*_Xm$XeDe9<9{kGCH9$PrTsO4D
z!o2=&7<v(YZ~ejF)g#KyNb&MpA6@>^8wZ~OIs3NPO&MHJ_r`twBL)u)erM>|duz;=
zc~i{5xGk^EoBjp_F32PN34{;UO?erT?y%+CgYpf2fBT~2Z(Vd^@NDi989Lg0qICJb
z6>C1Z1R9|<vt#?@H~wJE)~nDcw%>kqaM982i-v}}c7wtvo*pr{XsCA4euTVo(pwkp
zS%#m>mJdDl@QKov6O#t=gNydgU39en`<MS<aMAI>riQ@{`5U&B%%*Gkb6vw=bAIk)
zuWlGTxMc8~gO3eOS^{o0*A3R~89X?5#nIm9&RsFo_iRad`G0O-@#I@qJPEE2erxDO
z*Z!sSsT!av4Sag*5Bf(+oS}1A2aAqx*-&T3Z2bcGJUD92o@>n;zuI5B<*5^>sbh_(
zsgLihG20g%1Ird2u?g#jUIwn<7YqHWR<F=cPe&~dE;=%_=L0}{`^mxI%^f(}J8bU2
zQ19r$>rM{x<FTP@-_1Oa3{AVg#%$d;aNzQNFT3TIj_r+WHUQC<*Bvqag@<bpVK861
z@#M<V;isN`@rlyYzaW|W>b5U>Vi5n#;EE?M|LXR_(90%*t6<HFW80V2*^=Z@lBd&3
z^0RmOB{^(Mk{{af9tIs|N#^?1rzJT&^y~L$l;jQI%iyBJL${;2PD!o-qAjmGtR*?@
zmt@&Reo6A%7abbJKa}K<Ey<2^f|BH)o?)qLV3YXGb*N+t17&sC&^ntbe&+4ZcKq}?
zxCi+LQh80wi4ytu{R@%n5E{?m&u>>5MjQ2-=&^H8l!6BO{Ry^#?tqpUdecY1nFV!&
zqqcsj*+3S$aNOq5vrghTtYc_6+XuWh`^BYyDSf56vBqz=zX!^2yOn19)+U2?d*LJ$
z6YZ9b^?l4t+V4I1Q`_k$klMD>n^!=YY#%>ma0rsOa0;roj?LkXrA;drqkRn2u{AvE
zwT4HBMlaUZuygZ<M$<n%9^+`U7h`bzl%Z$-QYsPemQ7RY%s}0O8wNf$h@ZE->~`=9
zdgA64ga18vVsLTY;L7~9TmE7;Ef{=tG|%@a#@Rau{|h?i2S7R4+^}Us-VBUEO4Q#c
zhYfyv=#Mx3r34hEfiEcTq35BL9v|L$w$F#x;7{elKSOna4y$vHgPQFtPHbOvl8x~A
zmammQ*nxIBwB<QaJpZ|3&9Lj(24{6_fBxX2laLhU)76VF{{sV7)<Kue{fe;a>!9;z
zi@*p}ZQX7(%Au$J3`PL!>yDfL`k~iTTrOz7Vc^TYTr~i_WcYq4QOeYtrXdnk+i?}E
z!F_{Gdq?c+uN`d4sf-<8P8D>Vs&>ViH(3Iy8Mohl;wy_zj)j;md!>2nisK*Lbv+95
zqPK$`*BytHJ@Qbq8T#3G|5O^vO{Z2><?vP@c<Z9$L-Q{a0)~-*Ut5v3{mzZc2cPiS
z(gh)7u0Qs39sIV?|B=74sNkZa{e@q${pShdho(x&PTq>H1~Lo&hf$AJ)Gxf=(|R82
zuLHG@_iB8W9J>^6o5g$U?T<n??ZVga({%&Z!4URK4gWphctohycR+B~nq0$k7T6^e
z_<i*k?<)54x+-+#Cvk*%9+3*c3El{ujdsnG9}0+!Q@y>zw{g)L$l$PzM@{1!Zm#X?
zUmYLeG{QS+4NBk-$qcjSV9UwfF!u(WY#PqoF!MYELwR#BX~+|t_3PzJ_Q<++?5tl|
z%HD<esXiSZ7RRT9G^<Ys|3t2{m$~(_OMlN(xCD^=tF~Tv_atA=B-R0kEH?T+2uX+a
z_!LjK3{N;xV5cR@cS0bofsa5YN*1#c9|5cso<LL?14<2N`*if*=<;vrP4at_hQ9}}
zTK-M?o%nP#0n(>qA8>FE@k>DRaXj*<z^B9K=QKl%@ga4KrPXI=^3<C==hQnAd6pq{
z!OVUq#3>J-4kua@Lj#`<@+PRSB%cnSWU{rA`tp4`9t7?*pAH{uqE82FIcs7d4JE%E
z{sI|39ey6C=+m(V_$&75@H4}_Eybt9i&BwK2a8Cbj^BU?tBELfdGcSeV+n$BQhYk5
zw59uWcywGHY-D@@Rb_Lz4e7FdI{efX`E)!)d?`L1KBhCUfpN_Wx6L=bw8gAL*n2hn
zlYsQ;coHnD)c!!9jst&aHAnHv0~QT+RN~X|LuAK3YaGZBHJjo?5#~Y2rz8Kz*qU%I
zKM%<K-mO4FD)Q-YlChG>n>3$}M0&_v(eqi2()x7#6L1HbdarWMwHkRo9g}Vj>TCx7
zK8g}82K=LjzwQ?C>6iq?Q)!*eM2?$&-)bHNyccjCVBph1-AA8}Iy5TRr^Ea5zvI*4
z(c}1Zbb!doAU5jL@jkGHvh}FKlM1hVnS`%X_z^&MQQrWhPsgZR#i!#sK+5Fn6@FIX
z?-ah^Hu>JC@PNVzw@Y}3!iN=pN8!kq%l9UQ_bU8%g$=Ke@3$y?o5IHwj=4j=->h(x
z!uu6|S>e+PpWiO=S1SCl!XGOfey4oDNMXCe&nT>0CEtq*k0=}sF=SWX1V}!uwGHif
z=|c)reLDQMGu1o*(R0js?5^2j{q{?rjwj=>a&D{wC8I*04hMaKoqlYUI>o2MO}P>(
zJC-uVr^87(LAqtfr-SV=KFV>D<xG=prvJBmIvf&hPa9qmPxa|=l39jS=F{P%E3gV;
zei^Ag9d24yd@OB>PluB-y1XK_8JzQy<<pUcC@K~<pGti?szIFX(~*VAGCU^pSw0<^
z*b>`bqECl|CdH@2iBovciiWrN!>%@EqoSLPl^GV`44;mygo#VnDLx$zo``T|`*b9w
ztkS20<)u%DgDTRD6AKgd=@3LwwH#$<+@~WkU5pE<J{=C-nygx%jwBpa`E*DbVjY*`
z(~%M<*{8#yDCX0_uL=ERs!xZ5EmF7XJ{{SqvV1zSQYOk$mQP0(vUHygCsm41M<h<7
zPlpr74l*k8=_r@X3hJr)bhyZ+g`K)jN0rzt532I%IF$^}m`{h3Iej`f--%m(oM?{a
zC)u#XsbWG4jQVs`rrXkdIvk=R8qv1mup=qwglRq<{&<@cN%pxF_;hS6+WF}&0ec1f
zNWfnOJZH6y(j<VrX4I!++woRhtQd2Kh@LC9Cl)2}>DZ5Nd?GXB*1kn+*Y$6tIc7~_
z4C~V|8DoI0iJ!%%L#LClm`5}4PXg1)WoaU&ATAAoPsd(xAp9IzgL^O#_E!yGa98!~
z16|K}wv^fgTMErvd1Q&hp>TB;Y!wS}9{?8xa6`txx~|SuxV6nXdE`weGUqJ#ZGfER
zeg=@UwO=Z10I~c%Tj3gopHgVx{L!|ix7gm1==|Z!)>JbdB**4*hk+(Emz!o-u=qqL
z674c;MGv1knaev-v=>vghYf-@LG;8&Ckc<NI*QEmWEsnXLlU$jjl`3q1Y?I*I<cYz
zTx$uyWsPfl))(deX^I4gRvGCMdqX{#Qm#c4LIqWgi;5;HLs^4ex{?~ANLFH(#yUb%
zr)}E6uYy&Aa7BDc3W21_x|{VS(KXK#AME0S=PS2k$^96YJdXmSE_uFOmS<;2)`R~x
z-CylpRyTLW$$?RDsMx;f#L)X1u*7$fU5^dC4}J%HHV>?<4}CT#i-8{~Am&qpi%!TA
zw&&mC()68e9!;BHS&pVxCeQ>|fD=O_l4yD}@cA^IuQZKxX|n6o$Np^{xO4fwEiW<s
zR}P*t_%h+h#e?-IjkiWV1`as?Jq<iTVBO%1or7N~{ns1!4Gg!8_%FLKjry5$cSQH#
zH^Yh={#roVbE{bc+xM>?PKX$9!jp68S~{)c*wCBV_d&FqZ&<y$uPDxBIkN*9QO|q^
zka`BY`r4X1i(MUk3))w$DPF2SrkXBbkE;nwuD_f!&5(u!HQ`1B6-N+KpO_Q5AmW~~
z1Zn!aymA5&p8MCr<q={3s^NzKtL5F^Pk1=NyW<}hGiqM$E4C_G57RW`ny+i$pnJkw
zyDg8{pzF*}kSiHk4{FHBO982%mn(!TUzo8|O$V}!F?1JVJ9?Ld#Tgojc7ZvDXi+s9
ziL}^k`&5hJrM$T4v$xpCOL@n#KdQ|;F$?5=4XzJ_qZ{Vmo5wX_5<YCccek(byWS}b
zxt~&J&`RGynZ#!9ok$8f^tDn4%3CUpjd2x{+KoHNrexi%*xuWL%i_DP20q)%lUDn%
zO1vL>r<m6u{5!=?<t{}caqd!l2sDmuanCrY`i45M7`7aBz{m@92zA|@f1*TPJ)Vq8
zAy4Y>eueh{k`vYF46Xr%*Ub+C2c<S=uJiWphZea{y=1BD>nAMnz6N2L>d$P}WLt&(
z=jL^uq>|-$GB4mciP+)i<g4U&ox<k>R$Cu4Psloa8z9%=*8vB$$-4kqFZ%&y9o}bB
zXi@vr>t~u_&T&O^0{MmXQS!8kb;xN|B=Ri7QUtTM2f@=k*6W>UO$-gz>&e5Q{?AC!
zSWT7GzrU`(xfgn8X8FVTy=HrQcO6otP)dBgMBQcT`k+^?sFnu*Zo^F|0+k41)|w{2
z+x+^GUw&Gd^BuebqsNH20LWd2`2`xIA`bu-oE`wbMb?%E6g%Ppkh4mg!*WDmT)i7H
zXEyXpTO+UdtQo*I0EB%~!yg0W7@*oa440vGJ&0Ex<jP?a$5EBsVORqqI0TpnC`$CI
zYHBcYXW?#;5g8xk@*P0!x5omBOS-f0IFcs#GC7HJmS^>+P9dwH!aE9|0M#-AV5dA&
z`RmThy;XB#+Sa>uyXn;}<~D@AQNuq3$VqdxcNFd~;V6H<ZjpOZ-A3;y{2?-9olXQ1
ztkXq+qJXRAT(F6Jt~mfwVs*O#sLR#uCD0X1VrT2KVyS=~3^bduxPb!p?j&@gxpxwh
z*Hz0zP%>6sg?A7hMNYw}a4#6b$CU}OCv|La<zc`6?o#*~z&z5P&ba4Yz#&a`Qo^{$
z(`#3!4rBINTKr**A&vE!s935>x+M&t&)Mj)iuw>w=CH)vhv?y_<2CYomxlj8z-sxm
zuV#rICmsRhxa7OQ!Ewpo0LizDk%u%3ztEx1+vgu9h(Hh@X53*(^x2m@%pi{`<&ns<
z42cS){NPb`sJKBQjI)WM!7#&+CqexrkxDLBQa>_m$iLR*`APh4#5-TZZ{}}st^sAJ
z)Ype&^ZRPiAK{g!%Kqpb$dtP4n}8zRbF1l(V)y**1|c!6b;6cVt1i7qLehjD$w|yX
z0QpvbI#jYEq%mfVd#Gq~-J8PAYO`|L)j(daG=#X}XZ+u_m}3Zg*8gYjYv7|Qu6S>f
zg)AYs0RjR>i5dk35d}Yk7zqgh3<SdRp@5=7Q4x{sDk_2Cf)cN>Xlbj}TCv(%wG~kj
z@GBAwsE82|QLsi!?Zic0HI)TY_Wl1ebMNlmY(i*#zxSfc?9RuTGiT16IdkUBOu34`
z03qk3A>f*}_AiG*CTg9nYnIZlEpt*CDr3L?4I%q=4?;Egj-7H**_~@-0g-0?n}L=d
zeO8)`qVX@juyZ+H9S}GxvBAy9t0P<dcqP663%-c9jvc5Z!cqC+ZqyZ>nbLLdIQc^F
zbQs2BCtoz;w;P{}bo^L^9QT=6BDIw-IPRyqMj7+)QGdrc?(apV<d3%zs&U_jmu@WO
z9*^VBxPE@@^PUTUM>Dnv$p#*6*uRFN35LC+Fo(TCy0zs!o|dp=KPXeeQM-3$h1I=W
z<oDG?c6P5d?2US4w*Er+z8@NQ$0bF^HhlPZ-(Bk5?~_<$wzYpB{}0{_X&PxvfX-8m
za5p|tA5H_yAuc$q7xrW|Foq%2DXsZ%TBRJGmiif=V|bTu9;(VljmH(nzspD6v9C;t
zf0vKrw?9%c3gyHR9eV8G<BeB9DKh0}I_w@$zsKtE5gmS{!&8>3^vOD0g^(J@7KCK#
z)MYBXScm00d_sp?b=dW8m2avJAJgG39d<#FQg{wWNVvDiHC1EeDIL0uGuu9Cw(t%g
zg}N<6=^4punwt$NM=tGZ5dRKe2)xpI!4}@(>kFoH6yyQyqt%%31-h1;EMwc4MjKBv
zhco4T(mEE2N+v|3C6CQmG`cIxDSWG7LXa;hsK?wKC}hMFBED3@>iZZR#?3WZ2TA!3
zAG<nsM>LM=&Zo_&-^aQKwD1m}vl6bU?U(!#zQac{NN=%N;y7w9QIxXY;oFP0#cwA#
zD>Yhqhc7PY2;-$AExp6%%o^L0q<C7i{tjQufTR&AmZ%uzz^DC$`L|;u1e+kz0C!B?
zqTJy+;;5c)#`SZ{APFrnaHMOI#>q!{htFA(&5!kHgf$iOMO1CFtf`Jt4r}UJ#&akU
zua$A`rB>!BmyF9R<kj)^W!<daja8I0TWkll{0?6$W#T)P^J(fa2w2X?%6{DXJdbzx
z9$qfz`PWpiR|Q8@aC)Uo8?AyHRA8#$Zz|ZS0`@`tyL*>I2v5exsWZ6a{bL~V<FZ8k
zV;T=9vUgZ+uX@6cG>6dq-MxiCq<OwHPQTZeU5~@0oU!L5G_S~a_c(3emoQm7y8mqN
z?rEjssPFC>_rm^up<~}~g4}WKUwV5P1o;5_O6~+3)kCQ$$v>(cdm$S6r}qHsvA0a!
z%C@z)bq|nmT$f>-V@@Lw#~$En;M;lXvF-sLLzC<_(WKu5zSR4I{EAjCHK|=h|N7pi
ze&46#e}|A%`Csf~O@N`65;GFm$Bw@5bS$lH(a4q~8)jRH*v{1d`{<CoZ7~GFqEHQt
z)XI@vgTGb{bwjG0{Z?|n`aN97UxV;i`)y@AWv5$*kaoIFfI+P}h>-o)19d1<flas=
z<JZsIk9`bc(_BTmT(;Bh#>B=x_BE%exXkAoY*};`d=6vJjcLk}EswELV;|`n<&*zw
z&1HACg-?{h5WORS*KxxWEG~{=utfJB$!_RyTzi0-n}0YMJ)>-P{>|6nP68>v7^j}l
zr3fQu*>X^>!591za%|+!fsefpNjxaD_Mxe*P1sDAI5YtVPxi=yTl_QTT<^of?>Ehx
zF@NU#AzJb)$_zcW1JB7ofxsuPK&ww{eUDRDfF(h~9nSVD-P(sdJ|5Wh@ZiLpEBSyl
z=bq(<s8+TOD8%n?%6>_-zv+4axaP)#zrEnrnR9&>F<PAlo3}t+y`RwMs!i=7)380O
zfLaUfk#l3h6WcpcsB<^x9I0u|37LQ76VgLZZv2{TT>YR^Mpo<JvvqhY!ef<@@jfpP
z0EU{|dL@|KG?pz+O0P*wY-xsu5XaP3K(S425fqqEI{%8aCbdZp{Ixcr+=tAuf0I|L
z-z#<e8idD6tLo$Qz7Il*m-hjK^GPE@((Gi^q2?32!7&0>(+;~nDBgS`m>?0fNtbvc
zAbmLz#AU{=4`JF5eAIEkK;}8J<uTTt2uP1;zcfda^lMAMKyFGhH);CXH2)2>%U>56
z=i$S@(FijTy3vBR+6LvGPX_jU@KJxLOZ=tnJ_rw^QkvOzB2-LW{J%={c)tXo<}jd;
z>`k)Gx+~L&a6-QX6ir|bb`(Z?K}Yxi4Zr?c%F-G0Z?^=VVy8B(0tQTQV9l;l1GTkT
zh|9I)rKmkR<SKMOIG1|1dDt+1>l|}K9s(O8?i?LI79sbA27|ZS$^#rMnW%TRu3N4m
z6Y)U2ufp$98T)=WLiT+-AfpE7&q2+oK^HqkK&=@MT!`vyD`yKlaF#I{MdNJ}WB`tF
z2L!oOgv`yyxFef$jFbL93-3f*%Pv+@<*2+<joM>&j&%Pyc}Lj*_918Ie$M%@)%iSj
zmXs?{r4jKfrP1<-oqX7&f3MKtV+h^I_rI(GKL89RQU)fNCtJn7#o03~@w2A@gLtPN
zGkCVXEs`6<``X`GT}0C1ueBM~FzS&#_HWZ8>bKDG?eY6q=~~@c&#4GGr(OUUoKvSG
zBz;YUYS`L@h?%Tfr88z)0Bt_gRs*CxG?R_QGcEgqqcAQrW?I6uXWDwOt{WoXku8t0
z_DpLSq*JsX+loG^-Ijh-Gw{Mkoqe<P_c%6&xR-VOdk8uI4n(`!DtqPp+ZFRKKI-on
z=id{61ZD6<gle#i{a<IY=6)DJu9@_$K!tV}w;+A{8jUELU<P&+raU1nQ-5yE*<otH
zA61g3Jr+AmD|Bx-C8;$FFGb$izfFIDMH6u^>-ZfAIR`HXceRxdIE*q;>ug<fo9EzD
zQ91j6Izl;^5vsxb^H4K7FJTr2a?SXl8WkRm4=@X(X#6ZpCXnMl7J{6GkvYNmkImL>
z{3G#a;-6@X+0jbs9F>1YJ#O(2%^~T!7oGfL`EYDP-q^pbtBQ=Ri2IL@?~31)BmK>`
z^AF`nN#-cyI(*dMG0Kr^P$~K7_Xw378S}r&k$At3Il!$M`)omdM`NG9#%dHzAVwU8
zDMk#^GWBQ1oc*Ot!AE6-aZgxmK!a>w-5E|cu*8V56`8HSz4*Q#tC#}_H~dk>FL+Y<
zdhCN~vaNDtU&m3#V0@}OjWUKHoPbZ%*TV;Em-O{ONC~C?+=gMLwCd}jOSRG0V*>0@
zJx~K~l%I>m(U_Zk*U!R!hGAfhoQ<HluLt$)zA^>*qr(toC}djm^#G;Fyr1c?`%~)o
zSRFp1!;f@$%AZvFWF4+TD1AK;lKE5rtip?RSgyk-bhuTAU7uF@rt0u99q!U$7xXBF
z@o<EMdkey3giq<vWeok_23bq~AAoNUs+RpfVso|N|B={nB(`8$7;F)LrPk%f959|^
zuuK1s*n$aal(6D&jcCdLBNkQ~?eT5)|2SI7glM$n{}BtUyV@aZga1csr4m-($KcRz
zu4!|f9@EvA8rkWi;{87yS!md^yf>u%G}cvNkg*iSn;mI)RuT)r+LZ5Du)sHe#<f1m
z{1k&^kp3Sn)?A_}W%++Rjar-ee>e)a>i^-)Il`!b^y>(J3wReuW!CbRfYXH|Yivt8
zsHJW6ey*eVf3ygw8BvER_p4_9A8m)ws{coeV2<kl5nEDX?ezcP91>N-ter0h1sywI
zSmnWz6tCrRj;5C9DA(NogVc9pmFLVB+d&qqrIyb0Id4vAxlFUZ;2fL!KMGyW+iL%>
zb$tLnA%A^_Vkx;!1tAr5c~(YVtb(glut)`eP{BqO2o+$wHuDMDk~YfNiH}paa370L
zNRJLmS9F5-Z+t?+K!krzNHIPkoY{ASotkHoJ|Udm!wHiupAe;bM4FekZ(z~tMg%H{
zebyV<D<YAOG5UvAK91@WGW$7-)#zXNuQ+IgxZmpdmk|y@vJbrQ-{@xhpc-a&vvhUP
zZT5rtIH<;Re|URk=KQkR*UytTv!ob@P!*M%5kP_AN*%h4;reZu|H*P)Yzzk;&8BMJ
zNnp<_5<5(<4%E2Nk#qHoc{8rX-YE@{#mzlUIqx48Si&jqYGXw_X1tXCsKBIRk#5Ag
zvL=MjK27~uXh?2RLa23#pzKJ|S2{+mJ0PEnz$-en;=C8}BkrM=<rM&2G6pYp6uQk?
zJn`ZYb5SPd8ID>!CZXQocuE7qeJP?RVCgqFj;uLgy*<$nIgmYYi4WI`;2D!u48`~8
zXDiNsHr{H;nuAKmBG#-MR2}lX(2d#Ti#i)cHJ}C4*6sfrvaIYGj<D`Xy9LPL&ywKq
zI)uzGeuJDUpHJtDwtM_5G3~wt8E-H=YdfubzK9Q!WRRGvXR^(%&4upkh=^)>8H&X<
zo$Cp_Kk^q15M(@s`SA=%cYxI-IQ)W5g1*QI67bERak%egRnz68jlhM5KXr945qc6>
z6*P&#uOEou(FyVNh6D1wiIJ;eC6w>~sAo9DZBt`jXDLA{OI`8W0r`f;uuY)Qw|Hej
zy(_d8H@V;?nBuMKc_Q!ZF)vuq(AN4J(ANFx^$Nb+f#-B~i4|8S84VA}W(TTYGx3g1
zI8Yuod^ecW!hxFhxVOgh%7uI|Wy*-kX#!6T1*+TQtsA^qBVY2_hev&?@V|GfxcAOO
z5!1WX#KS;%Kg2E4$Vt=ongw`22u1i*je2^gvVad7dDiwwnYJG<raWyH)>RhN1<LCT
zA098NBMx<@zi!!2zVzJl_7#mVJj<@a_PPBqh8K;hD%dJ+e_s*dk{S{Lwd#jN6fNrb
z-bq2z=7JFS-udPUu;;@j;@6-ke(`mWJvM!UJ@JqTnkVkLhA;Aj@!(1Bv`|?}<+KoE
z4<Z)t^X##a_!1=p<wC#DBkcEiR&N9{cxfnvMzGSIpWjrs=d6V<78!qkN4)s-0X!W7
zfK7Yy+&cE4_&s9r3RTjoov&~#kQod1^M0ZmQA*uUL`ZlyNus|CJ*MAHs$OGtZ}3uy
z{ywo~hC)Bjm0J+H?F>AxQdz(^oIr8D1myiEItlL|$roPo+@^PbzhUm&P<c9^Q_570
zeA#Z~X24JMoYH%5v5`co-Ynh^%m=Rp<_9I_@)@MdCFXpqCD=DI0=-%f!pq*r7u34j
z9Pcs*-=*=`CFV{6*5&mkvQBcD<K3fjH+mkeS-Qu+(Z;0|AQL@^bg9Ngzs52j+0a(8
z^lyqevYGs?<_xg;`&;GTeUVEIzRQ9a#=s}$_vRt+3eb_y?sPVH;bp8JFs3mY8g_GV
z^aeL(Y<T=70Iw0%f5i~5_N9>k;f8fccMR=rtJKh*vR)1C_t&bS9YAR{w5y82YO)J<
zh?~)LaMtNDebSUW%)JmqYZB*Tw3<8kEenq(;ej3WCtli$lwn{tM)F)$#bBmJl6052
zVw41wDzOT-Pbm-KO*ET)_Y!r$$%a_w>pSjhHE6<`G^<_oB#Q7(En|XlnK2Ll%`vVw
zt~F*DK7=<LbCCk$2;g)+(eW<2c7#ay7zB0d)}|?@Q>+?2UWRW}kC8u%PZXY=kv>s#
z05kKXgt(T>m_L8U?KjVw@EY1f1Ri4jy+-PzVKI9;x^-=NFkvrYINz|eXfr`x4Or-(
zdoA6&^4Q|ozt%{kT5}&pSnS_q$cmMSdsD}MgfIgcj@2LIp&p}*b@-@1P$KlUGTY%A
zKio%$2&H-%2CQ{_Vwc29Hhw~N)DQas4Q0X2PDtmNz0~uJov6p5`*9660T686FO9YH
zLMBx=ug9ZND1kNBQ4Bbd9;rvgfmCdxtHkpF7<H9cu1VxvblBEa*w5ER`)3HgH=-ev
z5T>qI@l_j?QSn%OC7O;OWfbA#L*<hZ4nY{TuhRX8_SH;qo%1~eE2TC2DsRW)Snp8C
zhn+^wopm#a$n8nVM6&O3MOL~o`Q$v~HQ4*{SMor<d{Qd4&^E6=hbWp|ahaHMW&{um
zABW|Z3#M#jjDHW|36O<+v_*$Wud3g<I`r%CS%fs2Zb!)X5W2jk-a{CVko>n)hp*`{
zti!>ttMmmr{7{D{yrJT+*WoKV+@r&cH&uFp4j<5Atqwa^tMutQT&csYI?Q}arBBu2
z5*<FJ!*_KU(qW&CD*rScKBL2ZI_y}Z($Ci6EFHe8!w#EN`VBg4&|z1wA=m8%2uY{;
za(p#Lp4OoYH{x-uIlYjEo^H$ozr~H!BsWK=JyvPzeY$zBWM{54vO~PZwgoGz1AH3Y
zQkq#=+f;I;tWsJ8@USf0tT>KaFsVA~?5?IG$0G<Fgv~9Xj$+A1o*bM1e?5ZWL{S;H
zq6SB0<#XeZ*!UT9e=!qAOZ>SZj~&G%LE82Rf}>m-yP(-a1}#2<;4I6IZ&tR2M-Ut(
z<x~apm7b@PRc}Vy+}a}utpSQ>3q2*OEmrc@C^<{vrM$A4^L;V&q&ebP0Jr`KLTivD
z!JCbi)*eA<6<Wfvm+%n;2N>%;16Rq6Yj13UrP6jw*03ypBwq`UAUHwCGjJ=9AhcF6
z;qA69Jc8hW6VF_jhNzl!96oc-OyA6yPUl`kqLRn>2m;&N43uQ)sNp<eWAugJdXFSU
zI#)Lv*l~c84J8jc=u(&AB4UL=oIq$s1#G)gK`U5r?d(`N(gF$O$UFy10+q^SLp_Rc
zE_pz~aTVjHVvBJS!#Ji#5L6qQO<ayg5L(ES`1WQ;$2NNefvMbnh|AUDBM8oXL?qg`
z){K=ZX*PCNik3QY9n!2Ll~ok72)g>%S!(Y>sqk_1j4PRtm(+CI@$wmEzGFnAkK~Kg
z@iT9QecA5PW~9+QQF`-yaGaWgn&nCO2!exjQpsr3BM3(;rWw<kLNv{zl3q#F^kKM}
zb^h(8GiS`db~f;q#_7c5{qG+^aG<I?s}*RH2Jze3i)Ak)KsVE9AIGJN`;Jz@&-Ms{
zvvs&Phl`x(2B3A~!I9134V~D{lgq*cBT&mk`vABa^KnB-c6N;VV6^lIf&;1eQUo2l
z%MGUHS`ha^C(yIGYUEtohQ|+Xt))7g{ICkvt6+}`4ymBmW|`#@6;PJMKYlQw`zYgT
ze4NYJW*d1+n`P1NWMK3aNaLRqgf*ShoH96J4*B@OY|Q;736s_12YT&zw5_*nY`g7i
zhNFAzT(vNzy}fjz`HA_%Y_5>aEwE75W#Q#<^JD|2(<W(AgT=Np3}Tg&vuFr@6ExFi
z_gyrTy*|&tUFh1TSc^nP4*Z?6oo#)Nwlm!4ZrR=WwzheYM)%r+h+(GWw)ZRxfkv<u
zKGy{cXY3R_iSUZtI?pni6M@gb19+qQ`G=*6kqB(xVk7VY@e7OdVU4pg-YqjWGUJQU
zjKwhf!TcxEk&`CtjL7)(@g+0}@>}kN9G5>O*Oha{WPfif+1$cpzH=X@DSYU6cq_cx
z?;2DcOkSO|ydY|1-+*cedkAW#y>R!lY_m<0Ph@gfoT!u6%Vf{mf{3ywZgd%V&l~l?
zG>MzyT`Tmy(M^x3%^0(mIJ)&a<&odZjS^Dv5UkT>?%c9;e|xhAdAjhO_#vw!`R-*A
zUpJ7p-NF|N4PVDW@0cGWLyt(Q%dAD65<VUZ-wv7=LBWt;Qt$=)FNBM}S@zSycDZHl
zg`Lb&_b8KZn5SHQP`+Uf_@mu?-#k>_vtO;b<*hH0QEgS`YW_QXwM%?mbs*xb|Al0`
ze%7w`972`F;Yx2)1n<fh;HC9YZ9yY;DncbU7}#t<U#`66GDD2I@?fOldeF=Kr^P?}
zO9$<#oVH(;W+&hJuEh-rU{!gsf6^pIW%9jqTHhtuAFlw|E&yxyQ8|EA!4y93CDn!9
zo?#d2_s%gsK$5sO-G7{}=;2z8CYjYVhI>|4^BsFWVxMl_<}Nh5J&niK0~Z^<4D&>O
zHBT^iMRu6GgJ<LQ^uu|Jj;nHA`C<6>lt7(<$WDR7?nUhaH5tK_K#gnJp7M4g8Hnco
zxOfM+e6yH=(IDw(kD%tgG|k2;H|!f=mVzJFm|b(bNk%vcdxag*8FgTWfsu(W^inKu
zXxMBky1v|Fc3WNyoKwtg;;ti+2>8s`YhqQtYdyu8*=^I`Fe?A@1?={lT$N?%paSs1
z8xo3rSUik9JXt(n7I*t@1dK%;Fc53RN{&Nv(W36=u6}iIeVJ^Ic2&8S40=br|4Y#R
z5*zD5Ma;0c|ENj~(n?p3WIvagnS+rM)1V6@lU$MXoXBvD<h_+;?kQKu_NcKmY3X*K
z8~YdH7KkP6V0>zZ!StKO6~8_Z**wApTq2dXxy{XTBljufiP_EE977j#8%PSY#S+j!
z_Iq^iv^zn6%GWY5T9N=5+_rZ<B<Zw&L6R1x>%GzuPUzewE}b||ROr$udk)B3RhW*Z
zn)u&9OR-OxCjP$C-Z!nmS1k@g5Gq#yhLYpl#RI?N;SEq`s(2MOv!&kI54_Joa_)7N
zr<hl{M=#s6uuJ}+pUe@U_-gS<(}76gX#e+BBV3}xdxxTf;vp1L(6~q0<qv9T9QqTw
zM}R00>1MT_KR&f97KN--z8TVFR|*LvcV?iOqiL=e+L=4V-P>cTO4$}$)t@2xC`f-P
ztCBV8F}O|1Do`leX3Qor)o=dFs{S6pRBc9k+vQGoFFeki2x*4B+!`?$lEvI?P6Q+U
zPJDMbMikudKqX6~;)-dt+zW%u(xes>P$h}{g<T=!I65H3%xl7~mn~$31M)@)ayIgr
zr$|o-!726}83Q}~PX+t@53I(ZFJggSf`n)%-K2qfV}Z&^ecyTv*B`JmR<i<Qj6;|_
zBlq+;`$t=Ix32MByT(d?Blbffqp``@N$#D7M1Ad{NU)>+k-Pa2xBu*he(1pIlSfrU
z-@-P&Z0K|?SMB;^YImb{PEFp~qwA~|bC<3Wf(IDr3cuVWE9B0+H(cdffi1m$hhqA0
zJjzCiGFc;#=R`owLzX@gCBU+M77Fh=PzXyD8mo%K)C+crn?M3idal*x$KttzG1Y(Q
zsQ!~jbo>9P2M#AQJ#J!Jew<zHnIBp$r@R5jVg}2=?xs!ObC4n0yxTSW84|u@TvF4D
z85__3!x|fZw5v!kHhN6P*eFE99zw%*gku`^jH6;hS1g{0N`!dcn&f1zGl+qdNTaq}
zjRbo^^f=jT2|Czjuf3|b;cF3DbOMBy>T_{2FhfBI6K_~txGhGSj05Z_eWpOPa-dx%
z(ZoQ5?6UL;>b^03aPOB^*RQwH<6M}Au1Al54w0q4T@)+4svXsRt<}8k*xC*X*&XVA
zrE#UPebF0Lk<GjAu;_p>2C;Z&EaYBDj5cJ2hP*&Rw&kyUw~3Qll!Z5bp@1)l1&$F)
zRdyRH`TDIGYAtqD(oa{?)j}Uq3HW155pw`lf9Hgdgq)bW#M{5J^i(nId?@Tqr|iHi
z*86^Yj=CHfAg)&|+wN=sAlDK#gSHFI1csVF0-HqXM7rXLN{D7?AJppZ*h#X`D}uf)
zRo*7Ey|@~hWw29KLDPnnNEM&KZ2`oA14wN_sB@K9m?`2CWPuL~<V9^kxHB}mk{goD
zPMOeSFdHve43+YgaR(!!I~r$?rX>JY1-}(9bUpwV#R$nSogYVaUnyQOtUZ6CJr{fY
za}Yi#hC*?uk@`Bu^9^u#l1e%8KkXw6f9Sp`;;H+9SIw+9A`$Tw)Ei6=gY?gj@e|FP
z^~RBicn{wL<xPgKd&J)~I}act7nqwjuugF)9HeZN`y+{{KJgcY>MYF7(sKiyW!Sh<
z$Pd70P_@*#HFnVYu!gBjh5GY(BT(7nyH2BWIjT29%YO3rhl1FR-bCVI_F}bf*iZRc
z8NMMX@*Ikk%&tTIrDjT`<icPdJMT>@Z+n?H19>Zu7s_U>SPU{@&=I#(am)HY{o}*V
z&%9t%kA30h*FZNlwWFJfR(oVGQfT#*fVv{$0$FL+E~`=nDiJKz2bj+wWY7x%6wz)Z
zpjPNdiO**79rRI2=X5M>xQ6B0D8r`iy(mTMRwF+d!3`b2qHa{*JADP9LEke!!~)G7
z8JD3Iyjh5kQ6HmzfWOxT0*hRRFIBDTvh`?r856VC=uSd5j24VJ=sJX3V-~rVz2iGR
zaC^Gp?+i`WHE4T~TKro~&Z=2KrMtw1(RBjcfuJ^44RcjO4K{b0_*ZOv<4|PE6*Yk^
z{1@vxjxaPjMRdMbRwQ+}z$SEq^oQHeWhH6%ua7O-1?~jGLnd)8mG6>_dWsxo`_;0o
zGt{ZusX-TnYYUo;DsM=x5Z1YNV~|#0)g0^~$H1z}7!Ljx(7E8Mhh9Y*KZ!Xy*7wL7
zZ|%Xqrx|6&mH78MV;X)zLg%?4cVs*AUAZA&4-BVNNVUv%h5<I}09~_I{1(;>kP(vR
zb@aBCzeaq3U(2c&o`iC}sLYRd2R6FQZ4Zh!-aQ1B9c`&X4wU4Y+>K<e$>D+Jx{I>z
z6Yw}YeRE+tM^|8xTXv;555HbW0$FRtt@J~JtLFeTSNHD6hwR?X0|3gx(s5i-y3F_1
zBt=THsO#^<Ktg|}L+QUl>hpn3)J-bAN*fHD-R5k83YThfM0%D!N<x5hVH(KhJhJ8!
zb{94L;Bn@Un7+;7>zc%0mIGhpn(Q|3gjHbiKRE-?&fqQr5r*VJP!3`SF$Wz8UPdai
zVqLcRwsf<OEC0>nwDnTYF*DaGMt6^h6gT?cwTH_l)T}YdVOM^F`4&EgUd%R4!i}b5
z=*#&wl9yf+SO6wYRh*q=uOIAni<|4{MdLNNZ1Uk{pIUqv+pxNO;u>b7Q-u7n=!}x+
z00+5Vi4>)a1!$`rUyzHX&`)Z_70?XP<I(`56?cUj*z9{bTxyj6s@E<12m**!8%fBT
z6$q{6zZzePgtZn4YsHtZC=yCz0rk!s499G7{T{20a-`gLHyWpAi*?{4U^HC+{0n|s
zv&HZ6T}rV&RiJf^m_ml6KkD(EJ(dDw#2>b%4+E~YHi_mTt*Rir0VW?qyaBb5-F6D5
z^I!w%#7V>&f7ToVoR$9{C+d)5O7>3eUK?}p4yNhxnW70}8a*IqyD%A$dIz0(VR7)g
zRwqFoqy`qOqrC*2ylgW$8IL5c^Q<jNGIytZ8mLKLw#T#ddBo2O+zGqN(kJoN^Jc#L
zt@>o~#BDSLHj?KbmX*s@Ez6tUMloUHp@`?rGWQtRMury-+Cx<xdaPj@6&I%Z2k>X+
zLtyHwCm)LB7Bu;@R0aqw(V+yL<fX@HpgL1rfJWqx@xN&k?Qv9w%wj0&C%u07tz>h%
z)$LKh&ip<y!<r?MpmQ?w+cL8r2pHAlr1YwV021eelVMlvVs?88YRaH@R?$`?GQN@a
zk;=gk40J}_vH>fe>99Ryz~elUpFtxES+R$dIyENDADQ5R-(w!ZVw)D0Z^My@vVovJ
zFXspdc5RA-^(PaiLx?F3@~?B>zO4iF!nei6FM|YyuG}F{`@3P~VQ!><DXM>=o%kbE
z#$XSKhRPv1Tn$Dim<~V<GdDExB-;6e9~C3$0#v44A>X;gT!w-4safR4WI3KQRf;*j
zDR&1ZtnaZdhk6ZhwL^rlpi<vH#Wytva-7C~##LtK9C^o=TG5c=>lo||sY#i6MGfsi
z_?Cfh(k202nC3ufO1$n_5Hv6XHoue54N9K{KQq14b1=(6HI!MdW|qUhIS^5{MwvcY
zsgCK-0Yo0t_t@zi!x+VCwjB7mJq~D!9q)cR+1E!5?FGBzZm3vUTs3ksa-EH}RdJX~
zY!Qlxdf3NN5!SV<h>CbTLM5~jBT3wZB(u2D!Y;WGwNFFsHj`Zd0LZKK!voqpb0sWK
z!3HUCtuf4DezB2_f2AL<18<QK@4Im_z=`+e18lsFdf?qRiZ@9l#1R|smuat+cuT5{
zDgfS30V^Bt?_%-3RO9`}m963p{w3a+pwY{NF<;UeNc$K9>NT=I(<6Sjnpy@=+vqk*
zA+gNex|kd-gTc0LluVbA$!Z8$&?3H^bbbIqW!B&Wn=-DfArIPhu!A#MgXA@HOQ0Mz
zcU)5L27xQ)A0JF!*cDNRjKW;A_|_AG$%~FRJH4iu?Y`Tw4*797)*<(!(PjY#q0;3t
zY?zq)rPYHXcIp=vYf0+|Chz^GAxbM)6dvnTy0Fp-({kRaQPq(74A}L3*3cg{*o40p
zkianFMr|cJ8w)ec)V6KCzI0Y)@mG~zte^H*O{<4*IG2=|=LXBQBdV=T33h@>H?IzJ
zQZj!Aa^cp`t%fbz3Jw20{Pd@K#l>j#l*(z1%!;zqE8t?!lx(J8h4%3H63<#Mod5UB
z4wd{W=a{gR6rulyq>tyL!MSLYB&laDwk@dG4}2KdW2=G6jkih8Z|FMoC)Y*x+K6RB
z%idWC!(F*+&`-fr%ug|HQ_L%y`hAjHv#6`NQ7Z;!sNeU?ekxCf{S>-A^?(?>3uv1&
z3-Io7Q=mN4@Vf)$8OHofa72dW2>f;%W%ym5vAH130l66}GyZ~;p|ov-nxA5hY%<?^
zxL-lW3Es?HZ@ND<x4>O?F-n}@JY6-6N&ssL8)aRP?>Hyq*k)%CSK2(jCp~s!suSjW
zWDw|&|FF0WlqkV$fDAR_3+Te!2WzUz9Eec?YWASK)0=(kQ3jIC?6&jVJVU(ouA1vU
z!2$+$z8Y#=a&HTDVhU25eiHZxa)MeWVOM1iRe-ZFJKFiBu3_W&FF+=apYF48jQBGn
z{)~v9BVJ*88=zH!{N8jNV^M@{l!U#&EXY8Xl)Cl!nT@(I`So}>r6APRi_rsBrg2F@
z29pBbOk>GS9K+dxY3Wd<^ay4|*#;1HZL|w-JryImw*}e6?xG@&1FlV{FMxNHP7lAM
z==1`X+q8#<ptnd3d1Hp5Y?2rQau?3gO3vvI$`eVdkq+)T52#dSwzrxHZ6FJ%gu8la
zfCe4g(!|%$#C0)EJQ+<qQNgtv=!B|ROR0=N9#~V&I7rdV6%8fy2Na@Un=DQz<!=6h
z@O0%KUewq8px=AUld^-c=#?xQ9~P%sd4kC)f6qO<c=r^k#VGkJ*F=@Yjn=9NoQm@y
za;d>ua&#?fU4&Cf?((z1as6tTE#*C(5mn{rs&qzK)in3Q9jYH(#){gFhPe^CL}iJq
zvdAs>MX7pV%-ord6JF;)Qk+E%s<z+eWz~yLF+WcEF!zT=F7tb=%tKh%rEI1~vQ6xr
zcOa5fmL8PiLN-LNx5MU^im#LAyM4zUdDqt^*b``0UX~7xrof$qu!DJ-J4HsBm!&%d
z7}RslZBV8lEz)uJ3R>C@Q33YnniXr*^EflmFi|Udfp_&9^p|(o_PEy;>oq8bvYzXP
zV7AG3^PhC=N9mU86=@!(Cv5rFh!6)XX5Rb^EKt!OuxCOx)IgMD`r?$R_IAm<*qBZ?
z(cRp4#)Lhj@=lQIVN0Cd+8M0X$uS4Z!S6P>F8&mg2xiN!xg~CFoOWHZG1A*GmV9Z{
zV}N&sp@ZE}l9AihH;S{32kUe3%#9Qf;JM)W%eMQ|Vcb}V82;{Hb~QJNC-5sUB**Y$
z60VP#BIjO$8KVP@8FJChHYpy)At$t9bUM0u9##@_%(qf%AJ$q&U}27n@)q!JEk#4d
zLMeV&dJv?-gP^PrhS90e(_^BJLsT01K@mgJ&<))`r8FITP}{^Sb0r2KzF7-Ssa71n
z!n3xWtD(rK;TlZIZF?W{FXbq4aJiQU)TGW+Bko^-7T?LOSZva|^(L(p%r2aK3~X|l
zH5KI%11D8Cp>T|as)hrYk{7&lkZ{2}RahA)sUAdOZJAn%MA|MYOM29VfSC2yi0@AZ
zah~UEyuFGK{~klglNQH%&*0Umv2P$%bWw*a7-mYi@}G7_@=G;^@<c}moU|$P&6s;F
zF1JqJT{;3DO@`6QjvRmU%{Z5nyzb0=eS)K8{>}5$2@d(}2?c+LLgv!Xnp-usD^wA@
zm+voV3lCnLfj07Bz*K~E?1AI;1i~x4et~~ph4FOzxR-T$z;Wzx<h73hxQTVL;f|v0
zCd!#cx)r1FHHdG9;f_N#-EhZY>NZ@~bL@j)TODb1EuL}X%n@^LzGlXp@iS-5oIewU
zf%#ZE-6c7Z;k6B<cE<RbWjD{cb!KdSpiDPd2lDcfcsLH)`RIx&`#m*=4CD)SbKh~!
zM;ZW<`T5s>f0TFld!_z8P=`Yil6M{gthS!v=RI5V&>HqiG0Lm{IZpP^$hp2*vXAm*
zmR1_PLSmqAp-k9d;+h%<mhDlbYPro@k*D*?E!^{IGtp2OE#)7y<Oo6PJFxjR*|_c-
zC*A7w?>RcW10mV}SjSxKyYH(2Lmg5(J?1=`b>zjqb25r?i>J=EO01$cdKw1tO>HAs
zwzVxcK;kCPv%ZzCd}z4pgjR3zd>WZ!|0=#yzgO${Z3vH*hN73c$20u|a$Sn?Z@}OI
ztSrDLEk`1xA0d38Et<w0noK~`J_bQHKS{GtB5RX0v0EqUPPfju%;y?JFX}bA1q{hC
z?#PzMSo`))(k9wpt)oo3wxz!;A+Q&)JD=h3^Gra9gy&@0%dH&(Rf7dRkr%?8l+)~-
zY=U}@?HvK@%<SWU?>?uEck@R_49+~ny(yq><d2b}ZMuh_?c_cDXM9ioSATKu3ZyYl
z!h86qqEP0UN2R}g_IEe>i<PWIInU_{&i*E#YFo|$?<2f^N5$iRJ`?=-56*GF;Kw54
zX~gZ&@eK&645VZ99Lt=u>7-G{K77<4DAYH3q*P2=KNH*?)l;PyjZlf({%xSaT>nio
z=g;unJpVky=-uqhVY1r?XtuJEMoijtKG;zVO(1Pjj|m@ASIPU<1}5j`<UIf`H3uoJ
zU(%$bii^Jrej<^Wv%-@bqy07;-}|Fc0fdA8t>V}Jq|OSLK>oC~-}<6b--)A)#}O_?
zI2&Q~tT06&r{N(O-PA(#pW863l>awpg)Mv>XN4aHlG(s8{;cq)APf1+IH1CdbXcat
zzv}QG2su@yh1FT%Q3&%<?p}oC%hz<+sKbE=Rs0+suGV3PLn^*hhpTk>oesMmR_R4L
zEZ5;XIy|DokxeS!Z*;g-hpzvq_{(*;Qitnx_?ZrqkEncob$FEyf33qWb(j@V`SNx6
z3mrbD!yk2cnK4q*;Rzj{oTPq_M#w3>T>pLsVKV4duS1vNJYSzcI-YJk3f^mWZkVIi
z9>Y90yt8?(WVa(%8d;-_=Z2jHIr%p`3E9HAVQ0w|a?(kQy$sYkh2>~cI#dit$?j@;
zcAOjLfNZYqIEp13d2*co|8;KIfufvjV-KaZcy8EHOcJDR=Y}2S(%1#f&i=M|ZrE9t
z9p9|%aCrg>2Mu{N7pq46@l>UwWZV%R+2+_IJguD@ZVga8TQoaO*4nw@V*%Xyx#89z
zNrE>UEv=m!ZWUU>v8T`Y#hwXHa&~}q1UT;8u%oK9ddV8rK_gDLEu0&67UR&2W#CrM
z4YyV>;qk~8&J8=@#4%TLtLKIjl|06C!)$Le4v!ng2^$lCZdd_|lXP)_5}g}PSgsir
zT0A$LkOcDZY1_{YCxUTI=Y~}qnsKS-WFCi2k*b~>Yf?vL$#Ci7f#~@AW#cmGtCR~C
z%$qS6uk<oC0jL(w4LhJU>k{3O%?|9gUaGZo!>yG}$V;uA8*U9)veDAHVMnQCL-&O9
z+;Ci;gy)7Gd8CrjrgOtbD<=6HbA}{3mK*BCbsNtOJAsq;lB@-8wmK-ER(P|2?sXb?
zGOpwzk0m(Pn~p0hj}e-rftwdt>gNb4SzA3f{NGgYvz;4uRL=JsxZr7S0diz>Sb!26
zn7CX_FaqPx4Yy6UwRCRSfmEDCY^HQTQQ^8U?oO)&IyYC7oOj!BhIj)2qI*A6!GBcH
zJ4HqgRl#%>EKvbx&Sqzbvv7tOALsJ6`5EG7Sz^u*BaMGf5Z2UAv&`UxIpi7Q$<PBz
z5+<uN#ClB`X<mVSeXm|&M)ozs(LO`m1OmkV<zOR(ahJGMd;lSLZ;r(-J+G%_Q-LB%
zX5f<CwyDt4hy^(#Zoc+L$dKXRs4KcU77q8%n{z#0-<&CL>2({=pmMH+>kx9KdjKI<
zwtd^FuvmwF9sWg!jXE@7w4E?}{>&NI#hyt|z+0H7fU{%q!%>nAV#KWH`WS3k^TkeF
zwsVXSvZbhZ=~3Q|Wt1a}p2@UrucfKfQG_?dt%F_JO`5SW(aAI}pLzqn*=_TVT=58~
zD_+vZ&%6oOk~pscZ>3zq8SzXhveUeC=h%pX1XAWWK%w6a@)~T^ZR#QNWLs?1uu?4n
zSY@TsoW;u?<F2nxi?W*B(~lkv=y<i-MXelz!_AqzBDer<o9R`Ba70NLpWO*pxx!4-
z>lWMbRUaET8)afPWu<Eo{6VlE?ZsJ!J?4l^aot_W9WuYg`QW#cJ+BlPv*41{epWyX
z@P9iiP>!2}&oDph_xBGE<3#Ze!+fu51l&YL_uEnGz00abWNx4g5vRks_(k}+OV7*|
zI9q_DJrCUTuGo0iA)IBAzD(9x0Q)o!wk%`LQ9Qj7KFL4%hML%~hGQ+=c2nvC8<WkA
z6RYO6t193B6#l031jQocG`H~JK&_ZN<RJZA-He~bcx-;ln{|aRKjt)2Dym|Zd}N{L
ztT~51YS^Nto0|5WfL}b_kelEIqP#B;+4#{53jXDL8lFO1>47#4ewRE@4T5!@1<%tC
zfsH$61-?!$+dqr$16^_p!Z_3jKM))uGvOl<%rxKYx8=iwpy7u&%h2?o_y`Wa^f7|t
z-1)zRt1?f>^xV*+!$`WBiw~X;!$DiRGQ)Sv-w48>O90tr{ylgqz76oRc6>R@`Z830
z!Lhf78QA8ty@Zkgku87UuUh^9oEG4n2R|w{9nG=)IdROv7;D^yb4W9d`S>pTEP7TT
zaLGbmBkfuGEYeo-yO`S<cgD&yx%*IwJ_tPBJvwmMSa==0fOBh<ulhE4d7NJ<eSpm&
z4@u{8H!hl`qx1!mvh?2WZjQ)+12(*t;Qu2&_*=C7U9GddxBeP1Hj93f4@6K$#Q&(>
z$RO&MIKgRNym^gk>7Q>vOX+%U_c46bcqYJZ$`ZRNf6TC&vMepWDHq2z<;LY!Q*dgK
zjj$2?Xr)B(-bot4S{uRp0M$nDB#mHu3qg5?VAVQ$y#8hfP7$ntk12StGApMR4$++_
z&<8UQ$KEZc-H|82!Q^R_o&uMdQZc3<s>RX&h`*g!i@rB&w9n3xso*jC>=b77E6k)v
zO`%Ksx@!NOtNw1EA!)i&`|r@Fnr=QP^oE1)Zl5PI28WPDaW+QzWI(5{hV~ng?kq1>
zfQprVuzC|Zr~6-{9oGxuql@9|%2V2z5pPCSfLTR;*#REjfOAL&{Us%zh2TACotS(`
z0>rJ)@S3j`Z$D=P^enALc?s0B^ksbINb#Qpqk5VTE@e%Tq726T5qKl4tyqpMN#aTP
z7lCl{x{qqFeci|GbX)j%8`o10VA&n`f+0C*J8$s_i>r5nn!GBQN1>ShqD;47OV2O1
z%<ku#0hI;sK}D1^r_Pq6t)Qu01!@pQ^GRdyBmLUoWK$#7o`~1*IM5@b;SXFouGW=<
z7B0BP@O7Gi4DZ5AD*w7j>D8XKmM@VtF4bKX(o+ZL8HO3Sm;v&}pv3tQBLrvOaEh_e
z6&Q*W5d{Y(Ruvq8yIL51kv}|Aniq7{792>bC_iA}P7j%piS*8tesz`Y6`Jr_bNDW$
zLiCprx+{mCN}iSAPt?xKC?-_F3z{yTs9{K?^uh`{H2K<z9G+Zq<;42iVH{!@Dj{-4
zCu`(&JT89Z6~>Lc@0Y5Phocwhj^d`=aV{LSC`p%J)BT-A#sp4+>L!4q2M#GQvBB=0
zE~vpCg%3?vT~slPVuJh_J5Ozgdn242=^t9<u{ec%kT(!=dFen*dORyKSEk9cBJ%K)
z=e`5zXB>bE@sLQ^oHsD82?KN!20z5vVPdAZ$p@4<4}|H`mV@l*1##m+`kgig${P(o
zSUU`sxC0{zZq_Acd6<_CV3HcKFfwTY3oaN)ajK>52jHqL0T2pDnq3dcb7vCF7z`#C
z4pHFXWqv}`e#JsKGLiX^>Y2@H=o#5!-16_;kNK8oiQf}1q6zSTgP`UK#m@PW;*e*V
zCw9*9gDNN~yr2a~!HF|D3hZuJiDXVm7vHRU;K+4M)`A*mr#LQ-1A!^9@?GM#I(d71
zK1Nw(KD+^yKOOWJa|HUrcZoUMUA*j@g?$U)JAKta9y5zMBlX5zXcQCz+(_}`INV54
z?1$1bQ2Yzu0dB-VrLRyQf^%@?<;unM%-|I`w({K&FfOKL-#MN)PvY$sXXI}Ni=$13
ziO?K=cd~h*bVuDR&IUZFAtksd#68+yk4y9`hv%fjr!Sq3?Dz_=cK$mjCq4J9r5oYY
z{usuDS+Nwr(1uO~BX;GY!f>!7^1H-0tQ`lfa85wu2)ck8BR@cVX=cCDjD8!fJ9j{@
zxjmstQiOnhpNhxfqKU|t!9_N`#=(Ua&Vr#q-z<wP$~C8F_M4uuY>)rA7n0zvSu4%}
z!4aAJ`NCxLb8uk_)XL19l#kHia|_{ZIz1yL*zYh7`@OAB-$Z?iwIB-7GZVeK;`hp}
zdPiq#*r2}rX7$mjI9i|7l&Uf_FjJXh+*Ph5RC}O6R+}^}EbD#U=ATainWIO!5<af)
zVOWP*Rox&W-468}72}hB02w)+&+TF%27OP8JTWkqdoMzI6#Qix{1gdZiV6C|N>A#g
z@A$Ho{j`YZmn=8_Qg_P6ezowvya?DM-VEbpbc(sSso#-FJo^Mz+{R;7*<j_so$%#v
zCpNzqfirI=xjO@cK%WV*&j5vNbSWlk#B1F^xPm5KVbP*?Vj~XwAjb1b51T{>R2#&{
z(Dpb2ADO`+2F1WWr$iYHc=Xn%m#sV$`E*x{GN@-Nn1?LQK7Fn>5(yR}@|O_it|R?Z
z%2M&;P@2R<-2FD{$MXq@dK0KXHqfhlHP$u=x=AoTJg0ykj}y}xk)-0DmvQ$Y&c^$B
zV4yLQr#}CI^^3mfYaNn0cf5GQcr2P{&L42`Ih?ckhrWx@;W5rlj#0_#EDg^l;2=hx
zMKp6ahjSlZR>SBJj+0>Bgu`QI<{A(Mbmrl>XCV)9gUw#u=UV6C*%eS^)ZJ)Zi01*X
z<9R@N56zKfhVfJ0K$ovr)n@noh)IYDR5xk&*_Y4~@%BT?eOBUS=Tv}R1|Wq{<?szn
zI4}4IsV~`j*R0BdBRH{*2|u<`5}P7<I+4*(wXvEzGONRgEI<eb6Xos|pZh@FtdnJa
zd1O=G(SUZNo}co*OY(PMGZx^<4V<Z;R<k<EN(Xr{--)k=g5|qCH=Fk%jG;XA<)T1|
z*nke2f?uh)ZDH=^Qt(1KA>na!?cnjyi=JaiYFM&2c;b$e01xErHSi=3+y}ec?1_ve
z`&4%ETZlgLF%D@}mV{L#=F9m84g!+wVX&~<oEPH1B_SL>F7!nv&STO7tm<wtYa%6B
zcDO5tu`Jr@@*U5td6;yIvXb=IB}G{Ve5k#%XE~4n?-cb_S@4DoRVVnot8*;D;~Q>)
zN{vK`mzaIkfrxko|HJ^d^PbvJpz;z|pe+6btrawbco@iXi}4S5z)6q6$H&qGsFd{A
zu-^zr#Li+_RaFtxS2SD`hA3vMTtDUE_63|aK~o#W9i<qVUU%-WFdW@g>vfZLYff$W
z;}sI1g`vyF@P24g;xqgsF$BLrJd#v99r)S(^)K`|PyYZZi5d_GQnXyCE+FOK_#q;?
zvH|Q@FiPd*{+O$}s2^rt4>>wQmBaeSP%y=b-*pgGih|!x1Adpp;1}4mg(zaNzmKOr
zxa7y-v=DJF>SfWis<^(&`yCI`0K2|bUa(t8q`;d?-xd`1pczQb>yP(c<d-bGuOcsB
zkuaoE$V)@yb3Xp=KNWnJ<m=!Sdr7w-4y~O^1iAk8ES;v+$q#z6c9!%~f2ur;9QYy`
z(Yq$e^Gds^fGz&bc*5h^H@+t%!T7sa#1Iu|al<*B(F?*q<(-&}+Y5LgC|p^RrNJdD
za90!DpJX*WqbzmM9x}_-S^x14+Kw7!7A!7hjmcasu+3(1J>boH0}Ig`M<0ktWKfB!
zZMe(>nTkU~JZFrTc&fZRp%e*o;UU;H%7@G5U4v8nXdb|+tXuJj5e4tLi=behEVEo1
zmjzazEzIIU7OS<vQySb@l6b{<A_+MIH6$$B6`|7`F{ng7R>4-@*}c$UNsGOe94#Qq
zZV-i2<N~lyaG#xVEHYN%NuFOrIpyibDj7oQkkY#!4nVR{J_~_It=oSv9f9hYcl6l`
z>-wC)f`NvA9G0Pv{|fh?EQ1*dibv(Jfn>S2P?Ns-QcfcmpfIPHn}3X%7`IEjn?&-z
zBeLRmr*L9a(*<v{;KUxaV@;Cv2Gdmf=`igO;Jx2V?f+{`yZDufXPFR6{)KSBm%g;W
z;DUg|5%JrR7<<GJ1I#=7@e^zek=zs!3z*D8l?(df^gTER#W5&Rpl>iu!C%=V;fqX1
zt&e>d)2KfKE{l>e(HZ#CSXt7SbPb|IgZm&)l<fxgkVei3;vRU^4Qc1kFn6wp@<ILL
zWDq2H98_O??}Vs5LvkM3(?2J$2}h1-N5NTLq>N>`Zn7K|c*Ha`qFgUk?)T^~sORzw
z@8@%J+@EFTJn|V<xICgu7^?1$gyE4esCod#Q!y~6C>SmrQ*#4`>l48EgfKK7LgKL*
zC=SW+pIn7p>oq1<0SXrsl~@p9jQ~Vk!EA*Xo&+Ld8339Ipc%V6ZOs~Ke2yl5&L;M_
zk_NoItU}<Z;QxZ~J3HY=z(?`$b;F+ov&O==8xF{&6PIkFZYA#&0Br#|P`@}3?&P^=
zC2IAotr&OWNF$Q7>?#D{F#aVa)4|8}F=B4R=MVV&6`xn}c?Tc#8b=2xcO!7}tWD1W
z9jG==C5pRnq-ygp^!p`d?S@8V7ah26JR85#Pr|RmTqd53Upf5s4S(SppA8rC*XR7z
zPORG>i2!R<0zDcv#o9Itv1vO8cfQPwiDy4ffVI;vW25=m3hO>53kLI!LC!hymL|MI
zCv9{<{>P5oDD<Tr+2YH_=ltMsv`XJ+StFMGfR?_2K1KHi&qhl7^^^`M_Y0=HIXtI5
zQ@VjRnybbl9&Onl1Wjl+Q9KBHAj)`<Hl!;KoYjbhs1}7Z6ZK*t529zH%d9hHD9(i?
zL8vv0x*@kcYkwQVGAA@7<nM_e0|6_?v%LLJ?KxG{$n(^dsTh8iOxasX8vvFI6bGT+
zmN?)l-e;*akd5+or&otd-4Cb7F`%VZJ>D(uzE)i;;?I!A4$SGWRf&C<QKf*PWp8ak
zedkrHd9|m3r`2i;1dl926VUf?nY^b@-@diC<c1Wp(>itFPF}HaQF}~755eSSOYZ|f
zk;r|FS)cOc5g3N_&8teEl{ybvy=pn&i0n5axSm1F&wW}q;0ae$$`;Q&#cDC<_ipkR
zXK7xMg1O<FRAmkN_GD&b!mE<c3&Pg25OXVF?MG&9mc*-e!KD1$9~a`WKFse6Cm$K$
zN2bPh6=04MY!={MF>h$pFivH6VY4FlN6&raXdZ1Rg^<-;!Mu1j4wsaO-(|qgfwiW8
zh6Myt6>rgzzPe6KIncM{$#|C?3H`P)u#SKXA4qNkZ4@uXNNS6&4KS1AfIDCEOI3HD
zbi!dwT)6a$uDm)?;0V6ijphxp76TdTEA*55sPD+z)Ar{#w4*>_6Nt-$td_`s=26J|
zJUH3QyLB7I{TL*{AvT)Fh<o_k=qwXFv7sBRGwcv9O(N(cujoUiNt^+$u$mUUu;JU1
zXtvYQ$CWjxzhd2Tl*9o?Uh4$<aB(8_@`p;HTl@?ESP*8<K^a_`Ag+PJL8d!>Jef{U
zVo`eukF0YQ*&YMn<`JL=ukz?cR@xld0rka0ODyjX6U(|l5o#yC{Fl7#h&Sk1_Hv%(
z=Dl`@V5#Rg!Cg!P^_RRJC6lmWP|yThEEEnNcM~uDLtdnXI&jgT*zP+d4e&O+LGO&i
z9~phxsTQN-?ivM9Jdb%#K67U)>|t@~2~quP_H`)4YiZWPYRPsF0J+r#5EyGbj|*D{
zfuEjZ0oRZ(!*w)6I{EQNBAXzdfg-~}`xx%LVU%7T(A+8h)CZ&(qcS?$Dx(^4O@(!h
zMUxl?^8&i6gh@qV&|oJVdc^84V`;FhET#cx0Ws=$e}Ohf1Wp73Y{*P7MDVMa{iF4q
z=h&W+{)6N0DQ<!d#X2?42F~vjZ6IC=bQ}K5$TIqxpnh`vg+(rhsuGneE>)sZr<{xw
z8W8+xtNKzbRj!u}0e~K!wJCvc7tcMv#kjzn`!+E4qPEVbA;f1MJ|E!oEj~r30}Fh%
z<HIz@rQ`bm<YyUv#^7^-{(dIX$ZaoT!Wok4KZ$o9;%5_WHN`@sHWUM<p%*G=674rw
z!KtmfdJNtMYP?LzM~`}5v69|q(myfs<mw6ch7lwdQqadbf(D_$5!@Pxy}#aw`DpH8
zS`4~)*5)Ur)C8)N0}GN2&!e~&eGu+*@^yjPOw~7!Kvw{$cy}Lgx*OkE^C!>)p{Y^*
z(;3T-N5)^s+UuDkKpeSjffNjjahXURDO0g}YZ5r=i`2b3br4hg$<*CU9U)V9>(p*c
z#lD51^y>lqX0`dl<B-Njc3JG|uOpHEoqX+~7GzPHHHliN7PLA_9G+s{w{_m<kfP&z
zA|4w*$X*JCrs0ps;gt(0>~a6ZUfHQLhPdKs2xtgDG|1u9iv_0x+WMzQVLnw={q0nY
zpJ}|hvdSwVpC|$Gt63uTcdT-I1j_dtz6+{~_v=y%SgMa#>}EZ|lL+`0^dao>3hFwh
zL&j%9*Pmj`!P~)DRRwh$Fe@73Wo(9WEcL`{p4%)`=%cbwZn$%?B6nH__O-^(pm)5p
zljN^+uB$wm{Z)k?7}62@Njou)%^jY#!;(@qf=$f4By-@PJ!%U@T#G8@1~beFO|WWz
zj?95@@7wA<&(;L(w_{<N*~JwMz}^6`;(g#IvS6~Zn{WZ@rX=|7M1}p8Fk8`n3Smw$
z?9h#ErS><%q14`kpHiv);erEEt(0wFvMG#7QL7oYJH+5K?bc(44P#6^494o;-m~<5
zw2C1;s`|J0b%3^ct>)dZr8V|sZ3W?!>Js1`drp7qQe|i?4yR~q_m{{jM)K;VusN+s
z-$z5|2hwb__(OkOtrS94m@X{nuVM-U^my2Y4Vy)4#BxGDwMEDUg!~%~8EvB;Is=fa
zeti)1;IvmG#^JYkvM-R^JrOY@by|(+d)C27aB2)reG=m|Ct$T#;nYZgr39F;wJ-Do
z*mh!3eN<zZor|6T74-(grD!BMc+x2F0Iw)lYtnIgH6#A;6}uhVv)p@m7i#)jdgJPi
zmkASAeg1=uE2&@FcKx+>cPqR8(~z+8&K=mH^i4RgD?CJJ=qbeDBQPzrSbN?sHK(})
zHBG@(Tut#;k~2m8=?l5W|JF=_ZS@>9%CZ^ap5WcK>MgrfeDzNd-P`1O9%ctQ0l$S6
zh_w$2o2~+WDWE=toZ9T4BJyQT%I)WuC?Tu=k}@zw^s%ZR1S3GLSp7L_z@4BfcCAF}
zQN+=biE)4x6qgnHVsh~em_RNuyLs-p5AZP0{k7jn<J_}G8fpDU8r|{fi_gXQT#nCl
z{b4#kkKp%n_^ic;zc(R#AD_MW1o1h9j~nsF<8vB54Si9ESG+|1v>^-MWs@l5)<bwU
zVE5CIcNsF~&y3;SI2+_54KcrF%vX$&h6uz27_$>GRFI`STZtO=MX_8cG>J`+qjv8S
zN2-g1peC|+4~$^%de@;|yip;s!X|^9M>c^sf(v!h*-Q$~^@@q|%S;<3F1~{kH^>zs
zD*F+lEjYsdxsN|D^sYl-h#&w?37%;uZf4>Mx`J&ov6G$n3=%2zV)+*eEH$2mXoJ;4
z3V?sWUWXtXnAz<N$aXe~(NGK7PLFJ-#b>-DR=Hi_<&J{JrQ1DAR{%rIK~>%#sXfv9
zN{Y(*P8|?iA5^yasL-ajD<)Mg%qGZGJ(@ZqmGrKGR!2PU!M0}1uJpMwxk)^!lV{6h
zU?AGdMN6X?^>;b8xRr(2oqN$IY1s9`_rW?xUzI~z*c!ze<cOK?;NvohuZ%RQJF7^(
z<IlF6197uUTrC$Q6#iw{Sj4t)Eykzlem$%-+KfCL-WFHD+hP*$W}_bfye+0iN+(M{
zsy^T`*s<~G2^Qb-(UVS(#<&f2Ie=|}ThJ`KYfeJ_oaR=KRV49Y(-PC1ZO$ykKFW9l
z_W@C?!4qXdq_o7cCE#jsq~gqLr-_iP?;&}_<&jB6W_P%dV3E`pf)ewjx{?z2d(jE(
z*N{grcE~$(P7K_cg-b=v{H)yk9$Z~z$t?3#7PRsP!`E>F;?Tf3k<!^L1T9eN&9G~T
zZs(~5CZx>x6Tx(lziRK)o}1ytv~16!vzHvEJqQni>|D<;$p0<sSQ6w9TsyZDsMm@;
zh#ItK*`CE8+U6rEpY|!chwT#h);U&(DUrD*O>F&CaUkE1mrh1ko<k=iX*c+to!v?t
zDiiVI0Ca3O7ClN5Pet|W`Z{vc*U$5pdL)Q>poNQzkwd+uB=111bHj{0bRAbT`^iXU
zc12Rg?-#hy5pE?y&EHs{AEG3d7v#a{Etbm~uweu*8X&S?>_M_t(kJ|b9+kcmI8-um
zd#kx+Lmi;=dHSTT(%G_|$owmz?en~n=blxWf-Zu!0!)jcnr`#f9kS4Vv2dW`tseP~
z;kHU9hr~1_v(a9i?R#1P@v^-hv|EsknB0r)QgUj0sA?R%@5*d)bU|92{&>e-!=|5k
z`Kw8nX8m&D6ZfO<)S4E{T6I4@iL`f+-FY?Q-`L-#NPZnd)|zyF3zop7bIQ3RjXUsJ
zgZ#fi_yRs#@!5w@0pb{6razVXH{-1`VdTrk@4@&?#pe$?Oh?EnH==Kbbn+}ci|mNI
zqrZe!bTYpq?N7A&)p_2)Zutul@!UEjwbx0eN_vw?N5lh63hMb`o=ie~lenGnJ9PXe
zDup$oas%St)N%c>N<f^SanI_wohsi9#{E{u6{&nxj0@<vl`3uu;)3&Ou>i*XvG9Ve
z2_VmX713A9b$FBLCZn;RAWmR3wuG9*J6LlJ>EKzp5wY*DN9+JEw^$zJ>Ve#cyjLNX
z%MsB5O~N{(M%1A}P|#LA6Emg!1C(UR;dpNa3wJq9i_zGJB5ORK2M+o|vIg#+Djx*?
zQVxyBVII?dkH3IwrthC}Ap<1Gig9r5qJxaQ829;W4@K1dpHQ3N=FuHqhiNnd)riKv
z=qYGS=@G9RR|{G`j4Iy=DjzS+-HLqrD#04j5q&5#!ww5k3M0&tXCsl6eER&UyTN{_
z8j|zWQ}SNuT9FM^6CzLw*D5$AQ3zfhDJ_CCAFd|b2B8U?KxU4}fHaw+?|&0#qYli`
z^rTc(oP;WJYZrGgOEXgHaE~0V#?)$XXPWY?IuRMr^nRhrvJ8ZFS-NlB^b&+iS(YVJ
zCwU$ILl>CS)0O{F8l<Q6#hjj=dw4N@hbFpHCT2h$r@Rd(o^wx$^&NW0={scZw!~te
z{*;+=ia&IoJxZ~rkYrwy284E>Ax8+ERd5kzIA$R*UCzE($3mKs569rQEkKgaSA*`~
z{S<dRFqC45t2o|wH&IfGjyYu+SOAIdAQ-8wlN^?<tqwh8xe+NBr@t=X9O|9@<OLS0
zm41!|ZSAefyr3vAw{8(`-?O5M`qk#)iq9jJ<&EZ%U^{9ojc|)9gNKkb3*$;u5h#ae
z1@=${L_U6+e$lTi16LQGh9;G=iOdVb@4m`{`apTT%v&$>)|>wN+#}`5<^kLghsLDH
zWjz*rZ^031bvAmyA5JRE=ywF}TUB%h^xR*;5lw(Fe(c4*b)bB=1h`uQ#Px5xqm}PE
zqASN1?oRCG2FmMX-a47L&h*#i`WqL~P2D^)7S|Y_FhXCJ32bm9CJ?H{MpmRCG}iwO
z&^QAR{{V-@6?Pvz3pz&ETOZu2dg@<8&{KN7wNc)ON<W_H9ix5VLC;=DzR>Cg+n;MV
zFt(w0KzbDVEgE{IgdX+n!MaQi976Qk5Ls@Qm;udIEha~wM)h9LO;Z(MF&`=w1<&~e
zsa_?tct_s3d5G3t{GXRi%??}+Kb36ObJ(tD&2fkq|2`ewfDzwC<_I?~%%_ji0Qe|T
z#e{teX|N`27NJ$>4Qax;3!1*#Ykduga8>$9{rVez*+?c|B>7+Nv1Sv?6}iCj8)#?E
z?8(GZ>Kl0j%>{1uWc~>4A|>t1PS48groc!Acebq6l8>bGFed75i*0{xfBV9*{%Uwf
zS!NSu_n{sv_owj^hufFN_c%Puqzx^GMrt>jM0)*Vt9xe!MrYx^L9y*>kRnX{a)=+L
zRRB@a_3AkJ(}$mQns5Pu&p|zIzxy)0KvZ<XNScDqtQ?k&1Zc3s3?JV@GUxG4n9k6+
zm1*|hXGqiR*-T=`g-{sgk5CE0Rrf71{Y}suA)yL~M<(Vmmp6oNm25)&ckryhwONOO
zT6S}6Kf20+Z7qJz3S6CanAqAKw+Zc*V6iz)RAF+{o8#LqLJwM-<BF!6)Y+9ymBn?H
z#ak<jw^SDIR10g8@TQ>_38fV=jE#pIPN&+n)7qcH{5{^SZ&2r|Vq`ijL;Xf)R82_k
zko&HZdLLjh1w2G9tiKRnwFP^CpK|!%!XvOC8&Al}n5=Bfl$z@8D~k6d1-s&37qo4i
z&BaLkklxfFKgc+KFmC27zZ72scVy$73(Uf2LO3JOyul!StWWRPxQ(BjhbOYUO}WFe
zJ-?=fm@t!>zvx2T0S)i#Ceah-dW01VN(|qna4w;aYKRy6K>zY@oxL1Xfjfzcyy7%Q
zZlT!{t7x2O!Ya^ImeP+;!9t-&m3NcMIS@Hb{($a?6h`7j5Bz#w{%R5@z{#5YVl_|l
zglZm~XB3_2oF9SP3;(^4+7rt2Y=IiU-zZ2_NVsPRG7aX0z%LidDF9!3U>1-u@Y>kR
zPVQ)TGNLJB2I`Qt@b`rXD;B_Mf7yFzA&YFj#NrDinUk|&3cL=hH#Gnn!66`PsY<e=
zKU2}^Kjp)%NS-m6+!wR>>}Rkb`Rs1cgF}l|m(0!_tT?!&FJa_m&wArO@WTT2K{LxM
z32Y7i2HPP20xhce6Rt(boPo^tfY=6XC7^+#Z;q0<o6g5b2--QifCS9p-LG12!mX=>
z&BvyLYQO2NSGAd5H~>jklM2FkM-kq4vSb)g7YDd}XW**T`vCIdf<1J?ZxWZ$X6_B)
zP+IOre@AHpZxZ(*(#F6?o+{Y1f%`;a0~Aq8+>=;?Hho8Z44{a~ca#`ny#lpxO*@E-
z@3U!mbzAN&cL6#S$8>pzGxJadeP8F1wx}90UFE@94P{fKhKWmlIoI&Y@HKRe`JF5h
zw%i5!v53-v5|`ogJF}c+4nU)i>P^rwH;79??^<!n?Y7AGrLW<gzWq@W8q@|OPi9Dp
z$<T2P9Sk}mLvZ|t9xDBd1yKMU(GxWy*c<8RZWyT2--=CN(+TPCF}=$gdLdWis}%ZY
z;|nUa{59AG$KvxrV#fM+Sa2u~EME|PhcRps6$`WR@8ZS1*5JN>F@!kS`vBYE&;yr?
zC9qgjL?R1M!I#Kl!&uyNO$zd6sJzJli(gM5Z}9jvoYoHDBolz>POVfxq|FT-iW{_J
z9s@WHSHGWZUnPziZSifmqkS=y2;TZ%BPJj!*kessd|d^o<R@tr#2O7?!B4ys8Mc}4
zmt(=R8*E;58Q9#FLzZ{tq=%Ld&q<<dj^(b?1pl0$Tsd?O;cWYFs8_VMpb3(9<-O`L
zZweXu*%f(y)AQyq@S;@tJohhSs|y<W;>y4-RQcuc!NaIsA0MQImXEH4#OEQb(EW|{
zvF=~U_k==b);fr&-duf!#Y;a(J4GkX!r=5K(Wkp%j2Pqp*dC0@!@zysM!o_Io5$YH
zYBa7m7o!o|noxG6yQ2%L5H0%DN<QI+I@JJF(+PJxr;5K}{eta&I6U)xW@OcNYvhJZ
zrGtpH^nQ)1lpQoUQ*A||8PEbQAG9Zk?QJ?^<4$HQU4{gzdnvD&z{XylweHKr)v#pX
zSm)=#^Yfuopz;*+)~4Ja7r!HQ);XsRH^l4k;wQF-^wg)sM2qCxH@_NWZ)(l{9ymnH
zRH6)p&nhetd2hZ}__UA9ZjJx$O2|RTM94>);Tvgo@-{*d=meYWsPxKF?#fZF$}|b~
zrEH*5i$yl4j$aP98eCiOBdXmk+}p7h_d@c(mNS;N6>Q)ug)%H2`i_0&S^7D;AF#y0
z_DvGX1RILfJYhjHOV=^OsmOr2kNc6HrT0pvq4u?3ECTCIu@*}(8ldL|3GD)*2araR
z(A{`Dhd382AIxCgfg!E5Rg>J})iLlCx`rGu3Dgcpsl5qCCbL`KDQMzY9ITWZp>WOF
zFDY(evg}rjE1SKp1oFi7#&%7T(igyj6=P5SjZEGx9v?*;g$4YF>!lqFZlt8<b=Y%c
zCpDdoqTBI!_m7$x)%wA<VU3gi6L%C?G<Og;2;xeKU$FqE`LO$I6Fww9Kw9o@952L6
z&@+%i4OScnjKsfb<Og-mW=!ALq+zdT6?BRnFd_~96LGHR`$ZSk9h6V|k^KQAOLi1y
z^UO=oD-}LhZVgWZs8pLYOMoe1bz9dZ&yfCZ;$^I%*woH!>OXK2g<}qL&-(U&qg^Uw
zD{m}J*vc<{IvCkgUjGQ{m+d^+(asvC-c<i-!y}*9|Fmhi=aHJ=EUUS_N20myb#wc(
zxfj7Ag+bi|C7|$$8~)7J!bLeGMt>k%yC>N9#iU@4YU`2(nX;*#Pri+*;!bj0@{37!
zo96>>LR(!#Xd&@5LN+*i02=(2Zm{atST_>c=4(eJZ1XuT=~acpcUG&h1s~J9ospjF
z-H$is3xsE7P4Gsm$^B8c=t{F1diWe-QwWnCnhZ4tqHq6r@WF0z>r=!OyMiH6x~+M;
z&7#aD2W87UVN27h2fgiV_YJ_E(AMD{Bi6JUA=};etXA8tSb9d0)$l5;I-+e0i%-6n
zGDP-uPE|4N9x)AnjfwQgZxUx=%Ytp6rrIvVK-4der^5o;j_wv>6ikim?y3U#P2g=3
z$=o|(9T!vI*Uj#Y?&fI`STwBeZZG`^;#)f#2m_9Iw~(#fCvJsq$2vC1-|)}CZ?^tS
z7_@?zD<zv-df7xQw=U$}2-DoTqxbvIf}B0W9HoBZATuAyo9|XfsVi~A04BN3H*3v^
zZZK-ePF<0QOM$Bz2^XsGmb68DNPHaBG69)Nm<~}4n=jYCpo%<wGnw?xo!kWB5Zxoj
z6%J84hs6qjfd(nJr9ED;M3u*ExF<M*vzqetd$*UAv**be=>ob=#bAs!Nq?puUQwXS
zs)ZpQIBZWoqH!R)pKW`J4I5>#1<(mBXu?5b_~O|uzD6?(Udq!`jBNC*B&-XWs|ly_
zQ34N3U&y_KF%_6Tw`?c@P;yMyLt#z}7zzXk>V&0DQO?Tn3*rP5^BT=alp>H0077Y>
zgpeIP@=VR%G^0%JVSah{{wW2&eE-I=cU?B_8}yNq-EwsI9&NSe#iV#PUt=6n&+TEq
zrBOV&SYkR51&HbO2Z^a4t83NMms)OkYF-TqpDZ0Re5Zk!pmw8d33L*#_$%9i!t^ht
zE1D0qwq@1nsDNX2FzREy{bkrBauBj{b71@k{#|n~L_mV}Veg(AQ>dyu472s8;I12K
zX)kcYqykHMH>?}oRrB2PU2AmHKAbF$beDHyKw%^0>!HrTMYR~L;?zyR-Y}2KZLKpd
zw<u@9Q7sRP$BrDthMh&2<Kqdl7|G_eQ0}y_FPmGVzV65h*QfpL%AsUMIm0)fxdx&}
z>KTtgM<6Ax=?hBm;H2fZ)NH=WD30P7V#{o;=hGMwc4}2|T})y~ypBY;VzC!CzQn;A
z<RL-G<$5s}4vfN!6&lBCHe;3}2l_Idx$9q)-#G?PgVd7qU{q?!EU!ni#LiI115?aU
zdRCTZj^5a4U^DN;Lff8|wT@U{%JWfL#igc>UJ?AKUiOc?hryQ#^nf(n%8G?_8Rc~d
zCLPFNuLy}hW4W=s-~h!63?D8ibBDlA@&~*laSoj~7Vr^8&$2I=AhmMQ^Isr{vO>)5
zPTAsF%C&}0J^a-{=_Tn|`ZooOAUtag=^yzBqHr`}Kbnf2ya)m#DGA3Cl3eYQQc|F6
zxKoXk+sBMFPQ_;cJ{RFL9G|iHT!GI_eCFZf6?d`+&@ZFC0^9QPYo1q}2kRGO&+`gA
z?JB>X=@t1@FA&=szH<6&rdM=^C5W*&_4PF;Bxq@pk+5l`X&ilztsZsiQ$SLLVVxjX
z@X*SeAa}5<CZ72WWTE4o8;<c}4%~9>0sSwO=0N@zv@7=KvoKOA7hKLgv~6RkQg2@{
z)=^Dk^qQSvNjS|eL9gj3Zp;91$Y%P^rFi~WTh@z$YX{8F#h||I2#Lh29>d5F9M1Od
zR7K%*^faPuycVN6O3kqvudWg=j(5wKS=rs`R{ym`jo$NOQ%@LL=oWnf7gM#;EjmNh
zz!|(8uIV%;5(Sv&XW=B1UE}w<#?PR3krJz5D$+)INpsu(>cNs2N|cD3C@+Dkng-1A
z{lyN50FtaMHX~{bRQDH)0bSR>Lv+FJsa^ja$gNV4kH`+!lB5R_`KO)lVdNua&eM1v
zJe7Dl=)%hH8yAD6C0at_05<8R&R-&4lKe(mpffQDI(Y7R0D}PB|23-cp?nv7&ctUT
zKK#v3QOx&?@Es^)CIk>UAo29m4ALVwife7z)1Sc0Etso*Ao*SX>@Q2fPmw4DPqJp^
zMx>v=CzegN!Y$Zt`L9qNTb>IAkv$Z_5?i%g=}ECdG$b0nrrsZVgjI<xRB3UlIb0I)
zH%541LgMy1yksr;%u_jt)j~KVz6n!>;aLs|;ch~}OSXK(Ruz5}X9YNi%W*=I-#FeP
zxpT4(i2}+c;*m!vsyw^+JRBskn>QcD*}SRH0NK23**wMXFC;+&?3h~zJ4zm&1oZzK
zK9_IVepMKw`kneEr4|ahl010HxUlt$w_V-h2Mnf$C!|2ctsj2uS!{R|1;nR}my6{)
z@g}ZsW?(U<{j2!at<OTXBnv~Bt60n|bi2ot*koci`c6)XeBk#b0E+MhGGzwu&8>!u
zks~tC9iNuMw38(G&fGz*UB8J~Tz4U&@esMV5<9LoRhA=(R4GIxsgiawa`9{g2otr5
z(q<QX2bE=mvuvf-Z>|{!IC5$`6wYr#Ub4TH15W3Ov4pglVqHC%A`~bO8GNf3Jvvv)
za>)^EI*B>x(1!O=D~(P{$^EBCO++tSu~O0fK*sv=kWVVQ7bu#7w?d*1N02(-TOkXf
zn$&1DRDNE9e|W>SDv`2`8%<DAVua8bhzAPC6<#)k!jUbM?-cj7qa>4HR|+!*)<oDJ
z7Fd#S##r#NWLSWX%<GRKGrKS7A#+oTsV*J@?_|51&IU}*BY%Jb$Zoo}H@gWXDi(Z)
z*9}<IQg48)nD;qHInH>6<#rkeBkbd%0lphH$ln5_s#4nJv+e3Ra{6c)aQGzD^NFOk
ze2@IL<K&WJv{f_K77}<KHs0cJ*#CFnP^Z(2(3`0L7BaY>GX%1SL_1R5MyLm905woK
zjda%yy@LoeP>5JOhF+2Oc_|m{l}XTMsCeNZ8V@S}U2OZKr%#k~zr|1|bb!73aw?y1
zl}QypEIXn}-2IJQjGSYyLUyw>eQ0XLS5jvnusW%KC=#Gs%VQ^;A7pbH#eS%8tl(-?
zz>zi?A-nML6VbB2OZ_#m9^WYSZRxLe-z00eIQ8w281SPOeOPYm<K|e&u}?5uE`f15
z*t@E@QQG5VN5K^gF8G$NvK2nqHvNBvO2}imK$r+dvdCkWJt%q>>Bkskq@=fp?-J@D
zq{}+0Xj1KDrQ&w<nO)5xSxrb}U!d#}56NoS!&>*+FAx5Qq?V<X({tre#E*F8v?mid
zg@nYyy{KF%ryq7yGU2e4#WHm|QYi^MOTS_yW~$jwUc~``5qNoIUJ*T16r6{k8uOv@
zH&i}(j|8?7dyo?_v~Gf{)$)Sxw1%uqvzC%;q6n1S4<}0{cOQZTO755`aCgS1Gd{iW
zITfG&_?(B&P<%$<;}s9GJA;>CZBKp;4)%&h`K6y%Jj+oNJjE+^$?3hPS4@*SL55eX
zlzDLQ<8wI?MrryI?aH`U;ibyrb(O`h$-QXoNOStt61n>{i^b41vH2M;W^k(G%cXL2
zxe_Ltf}NgMj9I5eJf2so1L4%g=X#cAgZzPTd(S;f@CBO9Cg9%fijhVRKG*9{1;R)1
zS%*&`oKfC2Al$x@0g>WaN>|T@Lc*vHA!7dZ0g>#vD-#iC1wl&R(1tVc9UDvF%3Cl8
zHPA_#JA#ek8vgtXesbXifwjv-?{i<cQCx}@R0Gc`Ruybz(yKBFo6L<Ohe^CDmTkQ8
z@`LnbL-aXNni{6+=$B?3jC?X}%OluzX4;87%#^3o9zvRRm<eg0;rL!dj!s)WhiPFR
z0%y4nEa%o~SEJl#)2ab;Q^a4*<dc}(fYuR{cdn4s_FxMRN%vr<sbL!%?&eRd&WwgP
zb<S5tbAsHB-GPW7|3fG>iZUDmXm|`6s3g5V)#^q${BZe@Atu6851n~BrO>By4@9so
ze2s(|b3cdcYa4RV^;5)3A&nZacdTRLvU^F;b*$i9z;4Kq6<`XpT*K1abDv0>175Q$
zwGzK;$3&q$WA`JvE(;scIaS<(hce)ueU)7XwMlPR>8F}OL#T2kgPHp!&OC<j0-DJm
z`@}Usqsm*a{b%=yL%YeJLi(81GeZL+Y*{l4l`wJz08pg$??I8Kw-2xfTMrL5G_V`k
zA_}xoJSBndw}3W^m9ao;Bv2u8i4{x|gEa6Djt6ktLpJDXNb82<ORHd<6O((!%;hJ7
z+*JiHsd;Vyv`}=17<LoGttzsoj0}sj5J|NCguGR6K_u|0jrEaQ7#+u@{i(8S6E{Ft
zA(3kY?-j6#6Oeeo{~szJYw@ra<tBx>RoRi$IWVpLhNoM+B|e4)j1%oHaS(FJEXVmI
z%VlMkc2`N+p1aXg^&-YGMy!=uw5)pJNqPFoYC5#|!xcl$S$r$5zYMmI6oiZXUt>UM
zP?!O5o6?zU=(Rat_Pc%VDdl5yyAs(o;*L)+0BB%XQXY;Vz~*mz6uDFvLBJi|x?OVb
zH6341a{^n76dTxC02Ul4HioSR_CN#IbU~@_2**b5!!YiQtuugQjK|{~Lb9{)>>;WC
zX)O0dKty(nx+Lw+v5NM;0;^b;q)C6zN$M<`-1m(5yFt0codJ3$8}|jWEtAa8u@dK-
z<)ygdu|vshww($QmJ)qn1vR$}+P<#gKX7<h5Az|)bH5u|7Nu@>$uHbf#*VVfOwYND
zS0i9;@a#vtsKE{TfZO1E%YA57t5|`gE7Tla3ZIn9UYHXrJDVl{hrD-ztFp=-{vY5V
zM?^uxva-gK%F4{ru4thM-i-w9qGluzn77~@(-cLKNqS;N8=JA)OindFYr5FotZ7UP
z?J}ilWp}&IW0+ByQZk<RyY_ybbDncJ5IXhyzyHrm9iQ92tiAT$Yp=ET+G}+;M<;R3
z=mo=B9jo@RjUHFC^tt}#*w20K>qT69^L^BrLz~6%x^EFtN*50|x)tK&o8Pkh3}ZDv
zgZCSGzk}ay@~`Dtyt<6xUR-{o#LCN><0~wkkv~m4h(6hPh;Pk&bo+Se^3g4@B}8VG
z20VGeP|`(sFXN5!A|p1r3{Edw>{cR_P)wQYveRPfvXf%^iPcJ-^%t=ls9W+rF?cgb
z5$^7}c3CYY?WLN|$F~qCR5v0lNT`5h2MLv1Ru{v#B|jY3d+p~H_Vuq^#mL}L{IN@X
zRd<}wI?B+2>v}pdEs0ClEKaBmaf?Ah8x%;vh?caU7YS`CQX1JtXWnD3ah!SU4s0zz
z=w{No|L&TipSRfW_i#N_+@+qN<Aa{hRpNtop-gc_e*ss)VG&n}5fEzx8y+p#rj5%}
z3@NX<2l<r>(jY3M$8HdOi&y%H#Ah1<TPQR{1EWw}&W9z-khe~7P{B*6pIQM|5Zac0
zvIB$erQFUZM~{VQBOq!}Q0dv$Vh=i#Bd=h%k$ghSF+uG*4l5w&8p`(eX=6N4yCULi
zMGXd;V7s($QzTGnoJ0ccS11Er|3yXul{8T!ff`0J*-}qw9p}M7pbc~ob=*as<esg?
z0ks?0h9IDpl+~;C`v2<ypkU>`qVTyr=i1@ML%e&(e*ZOBwCP5FCP~vZ8HQ&{hS6A%
zVKnedVckjP*NvZh4HCN8kT$|dIZ5WW{DGVvvm@eF=nyxCLFC981%-2@k7A9Zs9u(-
zQCu}CZ6O}6Gwxl4_8g-(6-F#%1OTO|;6j!tV6-g&s5@J%A$Un>J1l}$O~+fCfU+>h
z?x18HRzZg2PVgpw!jAD*AwPHU&%EMLe-&__Mtc@=J+nl=e`>1c8D>FZ+S*@v)Ok<O
z5yop=*Kl3ImF*e+q*H{#iB(??GdVo=r}O3io7kTYJYlgv9|Fi802>+ma~o)parL8p
zJ^MQSJk7rT&AxuXRhFT+X~PM$7H4E~mDrz^TxC2yWnaIxucuDe?+fkg1NJp`hJHWF
zzTRP9E&G}@Q-2?1UuWCb4fb`veH}bYr~AEqeaXK5$G&D=ufNyW*T?Pa+xGQ<eLbO6
zr@P#~{?5L>Z(qBX>F)#V>(%!4Pxf`UeZA19)7@!bkMZm0AzWp-o^3zh%QY5!y=z}R
z#&NCEvXhO?47`ZB8{?JP8l1Zl_|sr$Mx=@jPn9U+qK$z+!-`Log}qrQ!xjR6M&wj$
zOxpr~hUGj`FTr7fKV>#H=VZdN#TprElK$Tn_%jT|L}{5jZsPeWfQ^^vJ!A7{Tw54N
zzuF;u+<mMN(zd{#;nl6A3z`M*Y%%a>L|!_+S>6@`e}?6ZjKQUQGk$#jG(Qe`VvW`U
zf3{Xo<gjQK4z9JppNCR#>w!O8D=ASB-fXtC7WlLE(xT11sDVGjig99iMg;y0OOyDy
z8X8V?FzJ^T0)K{QiyXkM1paI-W7KF)Ed>4yD<@)bwI290TFyfZ{3-2~z@K47MNH$U
zjfo8WsSAoE%aQ2R^q@Vuh|>HizCi@uikhz(7FrDa83wnVjkvwAmTeFG8Lf;%3jC?t
z&}`uf3;fwan&^Q)!yt+^A_9NPR~1mrO+#ai76X5Vl@`&rPN?bxg|kbF;%ut(a~;`Q
z;Lq0Ti#nEC3;fwyVJ!##49nF*;LnIOQ3HR5rBO^qn*x9STsDQ|!wviyUbvoNwmjS8
z&;x%SVrdEo-a`rec{mmPVu3%yDwn{YBJDKS?t~=^)9yr99*J}rWd=qD{%jj<Ybo$&
z7*IB8b3(<cS?rEB4v!2qNNAnk7BNyQvRao<6O7nLDUC(*O?~-JUs7*SFZ=0BuD;CH
z7h(G%gML<=IKsGvU$|K7&CH*bKc&Ps*VY9D)-+2J3i|mx-{dd62xnOr70lI9Q>dVy
z1@Hj#qkh&wKW$-B6#o$w1cQFsqGccjK_wi9V9-x8?*#|$ziu}USMSc5qu<ZtDhDzS
zMbCWKZyY@eT(gV?5yuZF?&n{qT%_QaxQdj!o2y8*$IaE(!S;2kef_h2-DO`5l(Aaz
z5;g9pt&=&~7y`f%Qd*2R6->Bfxl;^jR&zloBH39+_a2c!Kf{vPtJu#3{S3<@K|epI
zR9DbX!KzH-h;%Ik{R~SL2|z1BKU>Kcbv0}y=x10_sA*)Jp?m)M-jM;?7Tq(NsZz?+
znyEGg{9MNVwG3;k+rRe(?p;ZYMcHPX8klNWi_7;1?w!b+%7OB)#0~0M+ZbS<Y?Y+5
zjwHt_`I2LuM^e3ihQAB~aWvc%e-|I@a~!^F#S-A-``I&6!73)rlg(B!EHmdRpARRA
zPlfOU_jB>2YN`YG)+1l;3*e^Uqu}mt0r@G>B=BPPxBJuvZ=WCcaVlG?sUWqs@dHi`
z-O=n3)^eaV*M7d8XDlJ(tq(9k6dyG9`}UGf?GKATZVtfO?QUO}6)<*vM2A^j5@<w*
z$LyMR$w(tT*4NuI^c%MR@gUCj=jZqZHaqSlu%Z|Y^u{uv(}Vaxn+|}u29txxrPNv<
zZ%yX1stI3dmFE-abImc<n>)a#!fYz7BDRaQbk9CziFelm2Vtw$;9pglwcIOrVx~7Q
z_))-Au2z<O2d!iGUyO>9e<$8>c>rB(Q77Mmk6Vcrx7%@;B2Jh0TAz#-^MyvS1Tre;
zbT|B*f$3(<?o}VVAZ=}hba#4RdW3!H_UV^)_a~+g>Q>faR}acczU3JHrEVNQOS&h%
z(Lg^_?f@-N4hTM}D)fnsMC^$(lLEQk`Xegmq~O*~eKRvsl$nIn-}M*ox^wS7HlG_S
zFc|SCTb<wGiDQ^ust2dmA6Ha4@K#VEK_3NpGsTQw!E>PNGXAxmZ3G&}d&&y{p%QV9
zHYE)A<0(>uzY_2T_eo#tk+ppvBkL8Xas?sd?o(2U(<rI1>qBSI%c&Ss^K4mfQ6X+k
z6;_W0t2m(vjNYAG^#?4Og55Abw|N&_H7dZc^qo~XP`cLecV+<1e+<Xw<)1M%<(*yX
zIV3c<sG(r}V}w(Ke{Haxiy0EqsXj7_`9q4dAruVnUOwx_CNRJx!8bpUU^j<BW$Fa&
z)nqO+g{`^QC?kvNWwNIr1};}El&<YtP~C$WSC^3_M=dJmbTa(s$k%r6uhNrV2eA6C
zyS9F}FJR?>BkTt-;Ixk3@9LjIa>~S>mCC=#PhXD3j6@0}1`oA#j<NDE{bJJ@+o2|F
z<)@TUXRSJ@TX2T7pw_I@Q=c=Bp*`$u=#=bXPZev8I_nY|Veefp;Y;M+HS-@*QO#iT
zRufANcLteBHJK^ae2%SPs*stwDYF|T7@IPcUR@alD4Kzf8F97P;B1}00U<KqT{;e@
z(}I<EDjb|CC?5D^A0Aw@)B49O%}%CG?J5@FY|uU&v^2Y;Jo;~}EXR=g`0>Ram=}Uf
z<~+MbdUhNLwfg>NUx0wj_1(r#^#nildy_9m>MxZGuqYg6Ex~aVN0m4wF}4PCmMn}9
z?VtwY!QAZl8eYF0N>y+_l&Y4wR-a-u-GE_5w%5J_nC*e+BibQnf*PnrhR&1U%h)pO
zD#`;mE5qI_5~U2M4JxLmRVWxy#snNjsZ(>DsDBLkB-Pq>Io3C`_XliuX{&dVIJ<|n
zhO6y1?O$K)3t+mTY$*fr!yq>PkwRPUT;xz1H7A(dU1hddezID{9G<Z-EelbBzmk0I
z5Fu5o3D_fTXkbv*@19g!F{h*9?<fvS{0Wc8SS8RkSvM-?okUG_nJ2|m&Lh6)g%$HU
z8~*+k^GMc5=s7Du#XNGhtC*K;_&V|GJYGTK*J3nYF^_nRKk%+h77AkNVcjQfsLMz(
zg8sg=KhoXidoogPUhIq%Y+x=F&)Bu}-U?HC52szq*CuB*>#~}pBXXw3m>oT?<>oK<
z(uoIYQLxLFQ=l9$8`z|~EJm8EtzWVAz}eiJ{!Z3JP_G<0Tn9ms_#cqyV<eKK^1|62
zPu&x0^{Wm!#cL?hnhHmYt%uAtYdk?OD%T2qF#IPmoHk>CYCZKKbZUpWZI$o>)=_t}
ze)b_<^-4)+_2ky9kXt9FWMXbdU%Eo>ISRRF)@3Feb(tN-YgmpofdN_B7~|_}c5HMt
z*Y{VNn@o#9YS@Pf@?jq<>4e(KfdYZy?+Ijg!Ae<AU{Ymnflo<(tgC!t3?`TxtRWxm
z3#j%eA8pimrXZzZ5tKWyF!?s+Ly&uHkDg?FrT6v6n;RIAg9#5+@l%3-&zd-%6z!2=
zp8RyJ>8X;G1VN^-4HQNLj(u}5RH%w_)L6bSC&d@HG$%#n!!m7EZ^aU{o1a!ZX9=LD
z3J5!jS8$(e{o4miwuKUNt=`<$C$4SyF~d-A0$t@jrcea#@wlR}T&H4dON8xdMn5Fz
zK1M+>p3G3*`iMqTVoWivW6Nx&;m7ZY&p6lUPq!Eb;6yLh;q~ZUwfe2?L2Bzi$BJd7
z@~Ahw${EA9KSBukHtQbDd#4(Y#X$R4iG7rHG1-E{G>1IaV;KIr7%YD$U4c;i$0=TB
z>tI=X-{uqtE=6p+YAbi?=mQx1Rt}VTZTL>9!Bm?(mFw+GN{)4zl$_(K8GT@tBvPJ3
zt-%r1UBnuA;KVGiUrrWlCZ!W@sWg|e>v{-+lnSqsyre)sINZvvJf17c4?qOh5{A;S
zYX1d+&e~hwj)M_g<&!^^0jRj`2j7Rf;azL6w_Yq^Az3*P^>M}BZgTJz#-2R$y2GCQ
z2n`kXWcuea!3m7>TPFj>;DqYH(i~4S24VoUX$C@kZ8TM<P_<?s77T_u{s*&gxTwD}
zeiRoa;UnOp?&CSo^&bA!uxsX}@?}iX6{Gk1E*Fj24;(iC2bGp?x)TPf9vfPF-S`bH
zQ{`|vSa?zEo%eLQGD-J^Qw7LPHGHIjy-&5ygFg{|gaw2(Ru3f$qH4JMekT-6Iet)V
z*zF0jOphyG8$_heB`LO9ziE^Kh&^n-m-PU|<5P%E{*yeRlG3rXmv(I14Sbe@!X9rT
z95jaY&r$TXZv7RsUi#->uqOh??4?fs*uCN#t1xfQ@{XxIXv`mCzO8%WYI*{ZgOgMK
z(>O_WvKg0tzQ2d_wa*~F#@Vdq1DN`<k}P<2Uw|?K{^x^8E~hpP#~F+dfxfFizZ<Sd
z&LCWvlk7`@KS{7o28S$AzvsgHs`U%vzh5@Ye}MZO>$FnDpk-D+x!Chd#eShnge%KP
zUYd14n%1t`X&UeAGLnT0q+@feZ?6~mD*5gWys++aExq+e@7iiH@TC|TsmWFy;8|T6
z0m8R&E=z0=MJS+@>nKG$<48HR);Nk8<M+slplPhE(!Qh2jsvu}X(eeD-v!B!qsY39
zPBFq?cv#2AS8m*4HYoOr<T<XT;{r*(y<YeXZ?yzK?oTCd;&XYw_mybKM{nhUSbrBK
z8zUcMl-fPVdJzbxW)xc}c+{(uoT;(aeFF9lf)~nqQD@!Fh^st6)I=DwRm8s{q~ufe
zNmEsHv>Yp$#CayA=UC5Uy&ha0t|b>VymDhNwMK}yx3MV#*;q*XV(}Z~aG50^06u=P
z%|=`*t+;u(v6Kka`#9|P4wZ}lb#s$4)4ZK@E>?FF_^wqNG5pp3OUhuuB1a$AbS^hA
zF1W0qWgMbctK-|&81<B99gnPJGijTK2}8a>j^6d95XxLOKKYqh-HZ0u!MK9%6pilG
zM-XFPxdU_;ezh+!wz%oB;m~~x<Nd%@^f_Tcy@=zFQGw%|mYDz@xU&8%9E=Y24igjM
zY;U?J?S@V`dmVv4TKsX3<7gY;;g#0(EMryKX7&w?Pc`SIGJo31NyLR4YBE!$XF;(C
zqQ=UI)pw#b@$G#<AGY99qU~V^Ze~hL<I}S}zDrb`<YcI|axypPe7vD&rkebJuzEn6
zgqM^8w@b0s>4_@7WOu$+&rkDWZA>&(kF`_6&1?fPcfvdrEgIR~h#@eapk0k|sjtpD
z{Z_tJXLjSQb_L42qx8FDc!#s=Zns)LJrQ6&a(~RN)*f|l`#7(hmx4I#0J)7Ij(Cy9
z0cv%BESm*}iNH`fufJjY(5hlxs=mr2ZnOjji9f!^{7M{8RA+g_jq5Bgp{1|GwK~o~
z-yV^^;f9XpmJw#%F!K#-7YEu1@18zwO_RTiq<wn?H9Qt?<w?M(Zc;1Z0mBfp4#b$5
z{lRIs>S+ooV6DI42fX#S?o^*s)WN6zHJSbSIE)X&R6h+<{q*GaeF0=IzKr6_DD`EO
z`f>+fDmUh+Fy)Fy>GS4H1EEX_zjG*)oJ!k(k5o9@P1Y5RR^?$u2dNYvPN~cj;!FMz
zu)2v-L5+X}7K&?R0zie3<T-&Z<EpRRSc_rXRMhE07}tG6iDuj3u^9Ej!wWmL97GF}
z<W9gMPz(SHA;?Quz@1a5vXCgj)Ew!Rv0@UXyRRC^>NXWgvDP|}3@9>?BtC;Pe#AF&
zLrr%7YUTz1i)Utqm&MyC{R;D{6!SXoXi=%XL?7ldVO}M={7Lxkp^4^z)%%7X7vn!F
z`I+qQMLpxU17Y$rUFA}gz6I|cLOSvpwM5mH+c$+r!tS1;D;F^0R%wsQU?>IpBIC&1
zA%0c;1H@Y@@y1i=^1f!VcXZX)^Lu6CMy-q>>)!NDHzdh$dY!WFi~|y8u4k?FJQWQc
z?SEf&rQ)4sTsDYXY-VICMV0GunXAX;p3$^P74#Cra;y|Il=;1;3F5%HWTxm_dSE_B
z&?e#s@gi06#CmYb{1kHFwT|@)Hd592J4VxqBt9gmQI@2z+5b%$Whn|Ydwz;9x+?%#
z^+*mkOeWSCXh`Eyyk-m7jTQ6LJTd+h6+R$QsM99v1<5j05R+}Y*}cfTL1Cqq4$>5@
z)>;z#6G{PbzAd;}DOrW0jU;FK<=*)TTy^g94Od(#Ljioj7m1!mALEAmMrNj#cFJ34
zQ*Lq6EyxYU{rNZfnaplQ;-%)c7uRiBh8jVQF;8xB50xZCCpm^B2PKK6lQ5RWTb(*G
z9gJ-$TN$H}9g2_@<j*<33jIc!m}$)7+HbvzxupF5$-ONXDY_>o%I`rk6Wp<?)ylVE
z8gqvXqYOo(<bF!`f4c4u%KfcYmujJjx5^Ywam9AhVJ=wzj*uh5o2&yT+rEtY$Jjx=
zE=<4519Q*UTI(!0NpK~;Zcu$9PZPqTQ7J|4(aToB!z^2uaPrW41WlTF4fY+WQ~)TZ
z5G<HVZ{VB|6!jGpA&{Ww7=LTg3ws0B%M6{Xq+PXwpj$!z(b!W@pEYwv;S67&%+kVq
zUtvaC-?ZT~d_`iTogvBGe-Vc>V%Yg%wt;sk>tt0{erZYB%o)v&Dg>*!C~Cpoa_5%$
z3a9rOS~#Pyv}8(IpCN@s`Tl9XGF=7XkO^aldy|_yX|<IsaC>(R8V+ls?j{HCuIKKx
zr-0?3{9fkw06!$4W`EmxFY=K5-S@Yl#?^lyssZnuztt=BeF5*~?^dp|*LK$_8O>~A
zx4fTWe88_;p|)La;9kzpIA=Q8U^AW}{~)%<w%XSi%9rPp?CWH%uTXxBk!B;Yu=#0^
z5DJemdYsCp(_|Y-jPTAGY&x;U(pTBWB~H$qIit*1>Ysu!jQ$prI83z<)57VqbRWrv
zj5a4>?@VDkP9cNct6_o^z=@GG+LEHZt4R6E0fuNrs+`U-h9L@?1YISDdU|s<&U>Fi
zuYH&zaYwG$_jyJY7Wps(lP5Nz$Cg}M%p;>q`XZrCXpvsr(JKSMTO3Y&lQQKm@3v5X
zU(WrgKMpsp<9d_*{%)?KRP|D7r2TVieLjn>(KgRA@&xOmPO|@a<-GA`+jtRpVvSd+
zPIgq|07EuuV~jKMh7?XKyp}mxV5e+tOq_4@r{ajc(pc{>iVN<Qst$`ayn})@$5N*N
z+`Ny%GyY5;3GNaO4PHUN9tUmcESdkiBzA<J@mX2U+@BJ>^K<vwW5DqoznAzuz%Sa|
z-@<!m?l&zTZcO~saAPO$oWBa5<xk$r-!)thXYQ-aMl=FDXo_!a;S{MSq2<p~y&lXF
zL|4j{A!82qnwNU5hkLO5Df|wLz2ckqRehbj<Sr5jC!W0IR(03k@Go?D@{4<unNSz~
z#fwUcIaWyq?<EQ2kz)J1&l<{+MKT&TmxPF;xNarkl>Nj><;?!(csa;urrul)^CAok
zybLd_yAB{gdD1TN*Gi(UIjFU)EmGxc=3A_99i>#Hx+^rp=J5Qxt4FE0;}Ra4eOK5=
zyn^F=KmFkRku}}V+gh(*!F8v=52c9M=~>B>=8kZH2LRS8R4Jxa^>ulCO<4?4pbuP9
z^|fCZdvA5O`V=BVJf-gYB3sxwD>tTwcs#+NumZ2a`vB<_VUG|2d^8XCN18{dk$5<?
zD@0n+{FRo`kW8$H*mLmBWSKux?WHWIU+}$gB63e1%T(t)+1KdrTEcI+g(bXRRBnpF
zCwi3Pw}soTR}aEyE9P5q+|?ok3!^90L^1a_@J4f7N}r&_#Ts^p-nQNqeTFLatjak^
zTBnQSbd<0YVd4<rl|U5YIsfNB(x1duu_XE+@}TD71RFUX4i}$Lc_Z7P$0F=gM$KRk
zxO2qJjr8>uSJqZ;mVY(hXZutZyeLsH$$S;n6C8Vw-_to05Cy}0*q@ABBB|W7M)6%a
zDOBiTXxGAeIb*{m2u~8t=7DD7?f~H6r1QlRn|LaUL`25&*na!c-(DDJem5q)&UX?F
z_y#1yTdfOhc_Sl53C4^%>DafeGuk1RZcI|6!RUS`{7mZb8700;t|==lon2U3cF1he
z)lteg>kwHh=w8FFg*M%5*flys)4hgW*9Gs&<!=4%U8C((yLX*pf7`t)D|mMqcdxzn
z+5^D!1iydqTgC4Ue(&=8jNc}H_R=UbKls<cd)EpUe6Mcq(zH?TCz7rkzlV62!q55p
zoO^k<(SG*|SJ|aJR9;G#M=ND55&~}X5BhyXXK4~^NZkohKM6#wlGkNsMv`#y-Ia_W
z53tldkPVP+)cJq4f%@Xz!|hFHsB0c&T7?^#d+2`IT9AYJm0vYldnBk&SrREKGT2|Z
z7fuZdn3+^PE3GCQ8C$2@ZPk&E*JcJ&G|740U_Hv~pya-p3Po~XY<tyu1+7si)(TqZ
zO4$JvfAD#Ve5KiYKgi}wq1FiYXx<WvD#vtBsgEzJEb9JEg#?s4g$cTljcn5r`S@s&
zk44Jv&nprAt>-8Vf%q#;w4parQsn}V;p<a5&?nm)sLCEmp@1=77KT;w$~w8LvK>gG
zMo)F$dXE@5XxbvO;ZNvM0|d%Y?!ZSWH${YX5tQffVEdaTtGHTMuP;~5yM^u^dfq&p
z*OBMc-uPY}D@0KjQPAA_7pE^P=k;Khx^m!3wiyg|_G<%O<yO5uOMDW=S!Zvco3r*t
zh-d|R-&%=i5B(PU-hu7`kK1t%kW+jQ6_}Yl5M%-=!4AEhm*NHJoR76`{6~~X(xGDT
zpocd9uGe?jxhl9wqM6Y{Mq~F0wbp4b$zCGuQF0zvy2hU(AxotV$D-I6CmtAnQ_F@m
zu|e=qow_zQ!>EuYCMyYXQG<gj-j1z+5Gj@T<00zkS~Ar49FG*QbXw8Bd-ZoUS3-K=
z{5o2%^uR1(o2(Hp@~Atrv#kOC6DcA!z#^aWLkIk_<Y%Cn*`lOKfJ*-bdB#@rcBeF3
z%{!cQ3@p|Qy*t*y%t;YNjaczG`Uvft9}NmlFj$+U!(UzHbhtS$r7GaZr0RgN>o#yL
z-rzP_Vz9(|eoEy6w7w^p*{QHg)#LWc`kB=r!vKqe4S2hfZ3Pvddui5BN(*V7513*E
z@HbV1GAheVDSDwHU}e)0YOBKDfqIw}vPB^>e`-bfPlhi+_T7fmbFsdK9*cVJ3*`3t
zcY{ObP4WnV={o;?$jRy?t;1U{i7eSFMDCZ-qj0GCla%xZ-?0jX+br?BL!2|Ej~5MI
zf1YLST@w@1jX+1FA#7I2#7wg9C#re5p3o98O26c&`)?GIM>i?H=LcL|LFq<)253Ks
z_BT7jHf;Gj$y|M1N2S8IUTS^H2Ri^mYFfpo;=<zqrBu$l8f=)ER}0-xJkTey#?8wx
zd}r04Y?fu1GrZ=1E=m6e&D&dAg||aoz>D&IEoGoPV7g_9E^XmfZmgeP*cT9L$JRit
z)s;#$H3LsV7aZE4b!t+%zuVN9n#`;1AkqriM<ue_ZbUDAb#*skpRYDMs`uBjFQ?l>
z?1b-B98if-H3x@`6>PL5rr$8cFVW714xw{wy%S@Vn4+CP^%he_6cx1g1HF126W!GQ
zCUH$e-<ab{x7JuQG>6HZp5uYs8|hhI-=*fz3~f+1zaN%dP4Ll^Ga~q{r}w~}`-!1}
zN>sQm>Eo2_!00BwIJm5)NQ{ey=4q-d!0PyLz)BE4+wMXl@J*<_w0baXc!nq!m0o`d
zp3%f#iR^7@J~}f4=2vr@4#W5dy#2zc9YL288!tD*X3FkEq)<$?Ys?ODjoDNj>6vxa
znM3R``~eQ61doc|UAAhPtTx@p(A~<E^R)YAUbk+_`N-D}-)VjJe1s|IS>#t`%8u~d
zO`0y}zrpm{rK@_39H3@Wt@ZcS2W3BU{AHJd2k_nTK0v8@ne}vTyt$RliX+og({AW&
zzFxJ@@2wsvU+d$l7sNvq->7=o|1JtsJx>X`ijU)GFJR1G_ie`--`R=jb^f@_`gX%B
ze+>9{n;G#Khwe0MX|=);`t9THp|pPcu*Vr~ren||g<Frys&6g&&xI7^Kf~O%XhT!7
zVT@qFU(T0eqe8X?bFB{JU^PC{KuIz6vDFuu-;0AA{}YM@mVR{R_Z{n9^SkOfHrirV
zeXy1J{W3eY)l4_-bmdi&HJjg7ybygw!#&nq$=h_IP@Su|wW&8-ZPJ;}ykn296N8q8
z0#+ailEb{=^O_j`p}(EoPJI<-;73J!py#izcIde*s8@^a<K}fcdCADOPGZxO!r1<6
z&_Y=EEL!mD0v72a3>k(JMlJc4o59-9>hj%$JgKAl&N@Rky_>5t+#wmxA%mGN{+MX|
zJJyI^h9SP08(BHlHQ4o)tNN0cbfide1hy3)Q-EVUpuzbg+q^8u=xmkO^#S4m?^9WM
zNcy+%q}QpW$xG-uTH+-4`()W*_NFQW+Q0FUId9npv=S&ltUa4VfJ`zm0G5JBhYG&j
zO4ShbbQKA5(liI7+WH9Yovh(l5h!a>%l}|~W_SX8o(HU6B&a`)A+h&)6w@Qp7=K$d
zN82Eb>bH2i5;TFVcdVr+(FD}oz(wbtU%3D?G>I>hon(&Qt3a)+^(e#C8xci=3*KAc
zRDulDP?mIUmAW=s<?7mG`MJtE`45Z_>fdH&YU>OU70zDM<A&mqk0pNg?>m?8-geaF
z3${EswrkcO?w@e#nQ;%!i$CQS>&p2>WA0ouq&)tuFEes4z0}cWux$p5<t2U*^Nn#=
zxp60hO^hk6>PfqaUX8U|_2>rp0nJQ|eb5<v4k|A0=|Y9@3SagRt4HxOi>Zs1%H&}L
z5S~MKqq#!@9bQJDL$R)VJJfgh6sPZ&lbP{zHPu{hUCyqxc$l;ME`@s>Q(LZF%I!EB
zb3ro^5g$^H-PCY_j<C4^=en~l>vPb$Q*AD69H}fWRlk2Xk8ZsbTn0Pf3Tnk-$m}Z0
zdmYE*Yb+WBt{;CReL_ETl|H!O75ZSC?t|Ln*WC4Dzb^4ZZtgqxrjL7{t7WHVGq{@e
z+AP^Ke|NAbp5E?OWj9#2$yFonZR>+HJ=>P5>EOoQ+)Qu)qYxbRmcra+<OXw_Df)8j
z_}dlcMq;EWj%Rb_o1RmG#Qrk6PSNRike*N0?v*MB-b__g0cNT=RK>A7F&;@-f8j{~
zQgNUwhT^<!uma*jHLcnohTrpDH00JB!SA;O0S@B#1?rOM84r<F>{#zp*S*$V>e^_n
zP*-BCaTO$Q-wcvpw~-7Uer{X`>88+28`aAna!@TkP8pMLTZ?+CAqfwls7$IJl7rNc
z+$)2t(IzK*L2Q$C5Ra-L_C5-_+<NIx4nb30BG~lcmcJc?Z-Xo1!b%bgk~ff7hR-^6
z#g2}vwCpFATZy<3YFp$S4z@+c5$&mla?m8YhZR)Gm`a#?xLND&JyEr;IJ|XNsMa;O
zTi2jk*TZfd1zm3a`;V%1z3j;<t?O=2QyuObpT0m~#gWNw^@FZf-%cSIySnGk!x*Xw
z0-nVkt040+u7ZFck!9+)xeyT9{$?~P#YLmUCQ4|OxPBHijDIAEhU;S_g4oDxR!g;X
z(U~Yw-?45vL7}C0h%OItND`!iNR4*7zCC1hYO=fl3Y8w?GVPy4E%NDW+Zgg3X@hcV
zt+pSLUrFHn?d5*sqv&P$ox@N5MsgJ$)8`G%_t#qT4b**ahEcGFy&3ZQxZcNaJHJ$Z
zukq{4?*o3*FzZ>#bs4`U+=upNhOEz&T{GtoIY>6B(5m7|DA&in3vZk>-t5crOK^54
z&P-90O{P-Wt*PQV0&P@B<A}V`>{pgZs;t>;rw*S!YZ~X*s5D|vCdRv-OhNTktZ}{q
zD?xH*&n%5Iwtp>~d9mTijL!irhGV8B(+g+%eflt!#$&Xa1>p~UpFuS(?H;T*JI>LJ
z&}*{>8P*0rG-(pb1mVMWm?J&rca>i*G+)FRxy+Nk+5a`%7d#=FEm*Uzf)(pbPC3AX
zJ6xjgX*jw!v9_<}Cd3EUvK$rzjkO*AQ`S<X1M7SqL?MmR9)+~%?zR3HhP%eIMfTst
z0zb~oXu^)c+!1Ehm~kJ>SFKeA4=y&1KRzo^P_C8!51=>KTbp1lxhguLnM$!GQWn5h
z(f|642*cHGMlojwkn^&dY&lQ2tx1e5JTeiE#4>ffry3(&lmcC(`5je~_2df@@Ind>
z71`B3hHwVLe!Zm(6-@9g*)GNUS5<`fS8dm=c#Fnd6$#j$cu6vK-wwixSqGDAGtw($
zr=2J%>OK4$3c2+mN$spDLPMTHIaR+$Q~|dAVjzALOuoPUs+}xDB2H`kIA>|LZh=#Q
z7)TV^RDY`3am(Wr*j4>Y%?~n+1fmVR)!37#zlJ>(2A?z_T^!WZpR}v=pY)hSKuU@A
zceJckJjpqm?$~-x07KS;{Np4qen6_$ERjdrvJ3gabxi1G{W-^~vK^McEZ<caXY^$<
zIiY|IF}9PG-AjX*9bx*i|DB!(It)kyl^Yn+3sMMN`i0&+0sksG(NRx2tqa6o4Yrc2
zzM!;K{eO#8wegOFfmN6DQgKjL6*iOVRLjnB9G9EVdvMxSuGSwPp+O(w&D~rnn}*h#
z-12dmJTPi+;Pa{iJA+)ULf(W_sMj4h=sfvO486|dwbrR#*mN+kcK0L0u))WL>8fJ8
zD7jk4P}Ew1(keJ|e_(9}Vyv|%l~l9rRC2ZUJ`9A<(E^?H0+I%ie>^x4r27!b>h~ew
zGOt2%;H{6-bB>;;oMM>T%5eO8?m3pjqjw5I)vaj15DRh5i9L@p^jt&E5J@ma^`m24
zG+JNqY3aBFVkE>+yB0Lb;QB1s88Q|!Jk~{2A@;eV9wOaucnm`Q6^T_cul4FPYN(0e
zo<tI9%W6hn{Z29EULb;p)tw5(s#npuGH)1d`TQ?rud`0YpSsYNyPx7Q(*v{$57q@X
z0&E%fj)#IW?54+*46EjHgRH@#XC#!QmJL=t?F=nhO}m~y5hQ&pX8`vJWm2(k8rbXO
zP#KCvX?}4q!>-?h5urTrs|ch7m|r+`)oO$^4ruyP&Ew?OJQjI^^BaL}W@CLn^I&Bl
zV?n1H&qCW}E-yP)2D}U6D>tRo$5n13CPsO@6;DJpIF^j`#`$lU`%wlr+VoFBcP1y`
z6#bL4gyZ(sc$P6`t&<o`0oY(*5j$oM>Aas@H5s}d?24HHu9)FOiPkP4U)m&{&=cZC
z@V_jqc)}~H+oviD7O<KEgq8T~5t<$P3Zkx93DIcEzJsuODBe6~#~zbG;~oIj{ez;Z
zmXQ)#H&oj6GH-cejpA+>qWaQz@1p!s>lt~hVqU9tNzSFNSkKw2E=ux~^$tRU=IcZQ
zvuVyF9i?_YWyc(4&${i;3^!2js87BQ>r#2F&Pin*W4fy=V}|hnTcyIGCspU9Sr36L
z*&xj|GrChvd#NaixuDyHI;OMr#q|)1Ej5|lt!KK(VH)n>%>T|k8ru$Q=SVfmHkYBJ
zuI6Uu-PQTvq6_4YvJ}L=j+cU{S46d#ruVHv^Y|6$gqp|NZ|<=|n)E#NKH7YqGMb$w
zez{}}>GN-V0AeP+P(3uMdSMFs&exFI;iNZNr_)ed#s4IkTytL;d86C^+6F>S1TIMA
zups*G4|mf;>h3)5>{+&iJt$jKlusVjZ+f0-fBF(MR^pt<5j2JlXU`0j4d7(O_3$-C
z(;5T2gjZ1GN3?Wo;!C%WW(=r3Yud+t(hjrCgVK}mEn`q0FSjo2tirK5e1x{-C0US_
zSof?mr{$Gmw(ktSqA+;-P-(kU6q7G9<0o<}oCH{Ui~Hcn|0}sgAXv>ynKBLQWaI}w
zzo<SpS=ILEt?Dykk~*P)Ek5BChkJ*oZ%w|7vFeKpU=y)H)2(3tZG~XD`fuI;K(=r2
zY#QpNx18>Zhipc67vs|!$a@(ycCY-Iymqg=N~!cpkoHN4A;dBGt1W&;rI(|dn$UqH
zsGURTRG^KK&pBA!^;;Q+O2+PDHm3U<qtm%YP3Lw%=RT@Dpy=ELhtBPQ&K(dsS1WX`
z)>HL9bndvRLgyMY(sw}TzK6~^e4YYs=yx`qlW<Q&{vEIkr|24rv7V(_-&d4>4<k?r
zdV(D>7LesYyHAn0y+IO}0V66Tt`QO!R>x;@aDJl`UOAkGHO>J;r(rqLMjF;{mqWw4
zau=jw-FY}18aC?rFdDXlrnQ-dDY|pZJmCM1o@<TnSTTRsW5+$$ODt!ukL1oCRV%RS
zwnvr!!9$+wHx@J3Z)fd}oa-GykDBWeVSss|53E3+Wv9aRO40WrFpkQA9a1i5T-q?N
z=0XTv^XeKTlxFklVbVmKS6@ip(7ehfuZ@8+zC@o_O}BvcH4UxIt9xJgwdd7KMJ>!L
z1>84#4tZWZ2*}aql?4+PIj>Y5rmkbM-t7#ZSKEINhTh~%W*g_#`(HTo>L1(%=ha3Y
z4rg99{4;D`_2se6^Qslz;KLG!H@K61NQXE0J@<+?SRvIk=M9Wo!Nmf$AzGWG&JzE~
z-}G>_ed@b-gWY^_4PeE?yLbb?WDM~JS0UxCl3r+)H&_{7ro$U-wSjQciwiz?=*6+z
z+4SQ15O0u09@TGc=M6>_Krc$31a9FiUA)1E)bMN4i{bZ&;p*&rqR@+S(zwvAP$TQ`
zQ<67CFODRyO)oO}5}jW3y_XSCfx^DUb$Hu`Uz=Xsc1;WPLIL+rPT<-4mbR|L?*Vc&
zda)K!ERtTRIwt5kCP$+e8CbMif92F=8|lU0KXK?q4R=9$v4V%gp%*<ihS7_wYkwJf
zF|g2~7uOLG!=V?GxmWaJqg2zJUaVOyxM(B2SnyXp9GlaN=lS9qz>)MKOEQM&MW4H&
z7t#x@(u?BoG97xc$_BzsFWM8@P|Fha1m|l`FS?TF5b4D+S3@r@SOeU)EIP}>#{SFb
zDTg;9bX@MuHS31o^on)l)ykp<{=!95s)6U%q$xi@2weF5=*}oK<y45Wt4lOZarkz7
zA4TMru1V_{0-v$TB+7{Q>Kxht_q^BE60DaL?f<Q2t)?pB8jPocnd(na(eRY|LO5%q
z#)I)xquEha(g}07Y_~$ezct8dKTjFalnHMmii83`6@Nmq5Y$J%rqw==Ng{Nwc3)ZL
zf}arG{OFD#-R!^@hi+m%cbVGK4HftSJ5qv%(#;MUq!nEi0(yf0yY(X5;1oqGaa5G9
ze!&d3O&Nm4Zmq;=h%VeT9I6s0W0DZnhL92`tb3+@VG~vHoiMHe&3Xv$e|%GI>kC97
zRgRn?3}XL6z*oV+m7F7hYgNwWh<id`8<2Ctsypzx9u1Cjg}D?ELgS)WbiW)e*{#XC
zW6*ohCFxgr5!9Mq#x&@Cf0D8yV<S?G($>mmOnq$JdUMOxuhQQu--kY<PWf8kqt>su
z?D~{GV6Q%HyZz;0Zw+;HLg_f8Sh9{1W!a#{*onlPLQcI5Ws>iojOSG#j7G_>u|3Sy
z>l1au%t>@$qpe>u8)P@FWA>&vk)11Rlg9Y>)^O%i2DZvHPM5XSs^)wo&N@O-s#MN%
zvn$gBzSGPOqRQH2l>ycMEhsU-YmFxZkZL@OQC4@{`2uk5+5%>!idTcZ^FHlU$d$_U
zj{JmwX$(Ju<W&EejbZj3lo5ZNIkqY8&8j#3@#_Sq)&?{+qIW`9-rzcVA-gd_9U9_L
zQsw-#B<zWwBTq&BSaV`p(#W0@IZ*DIfF1=ws;2*9^P);j$~^nG)t{ZtS#$r9axz59
zNiyZss2HHIXMSX6WnEG_`RBhuKy6ix*-&3gXzh(Dz$&mP-5&PO%JL`WB=EX0L;cHV
zbaA$R4tk~bEwBgJVU}at(j*8Q2_%cEkE~vR-zhITH)}52D}hWe*2^5GmJ_RTD<>?K
z&W#$CVVg6C#J8TUg0@75Ma=DT_Vc~gF%+|_zu55fpFmY0XOm}*bU7bUiHazh_qf;U
zKr;QAQ@@yp?lr$xLESUBmp+9ysJTSIL2S9$o!y;2X}3SN-}{0{U5sZjY9zws27EW@
zlCb6>(jGqiD$74NFoPzht>paNEdTtHp5=|{2N!tKKQ3RH{yo?I^OvdX$K^|FJhOF)
zjG&s-31WCN+*6af+#XAJzYe6|2NP}bESA>n8pA&|-Df*ZTq!U01M1AYm1-v}!&5V4
zrPoSe-;Ym$Vcz7YCvm(3{jj7I6w8Ab)fSJU+0<iDJmLh$lp1rYqlxP(buNfW-=sW4
z)LMIp^D09@?CHi~fgT*VoZ+AZa}TEJ-Ljw$UTorg2|Zs=-|CAQimm+M(f)dK6LxDt
z6RgQ>KTwA4D=MT1)$XF&pdWqkb{Ys>!Z(}NkRHeAw>6|+^3An`3Rk1Ykc>%3h$@i+
zz7;QPj8HEC*IHv%;A(LnM5pUZkhuVg-n5CDIZLu$XR}e5vm|!oH*n7csI@-9Es<Gk
zJ20CSUaMF~sGW7>f%|P>p^IM$nAyFoF4Sda_qGzb+KkTue0SJlLU%Ig`G(OVM*>8l
z&Y7Id6pnJ&TCdXws{ZMSR@kx1S>jr2J8v=D6yrH<C!}<%zq^b*<5N)tj+Y(WvF7Ie
zTV=9YSCUno1P`8-P$nn#9_*Ue9m+g49_pK;DhNomo7L?!atF!WGbEPnfIl42wC#Ol
z9Cyq_Z1^u@fHH&BzDd;^PT4}&Aw!xLzx=T*;p|Ys5Sm>Tc`lV#;(2c__OS9Tg+a@_
zRT71S1yys6fxQ>=y7?Dnh>F*qtd#>6;|j-~xOs~?Rm6q_R8A2^Ajw<obzUW921Ymf
zHwT+@3-AeK8iqX|=|;7aMmbBO(ByII$hequy<~kM<3KR;k~KzdmGhZecGZqBH`S!h
zHb+B%mV2$6f1->8R+18K%-Wz0r|RC<MH5|Xb%7%4@v6>=^un8?`6`O?%j;NU&S3MP
zI<uFV*-L1#oFnP&e1GU)d@qle@4d~;-h5ZOznyRJT6~W>dwD`bp*D23OU*i@A5(JY
z2QEgj(czMm()^7rPM6g~H^lA;^{)^Rqk6y^I74NLq_&#;JA-(9n@kc>T<c&PgS^S}
z_kx8lWp=Q^$Gl{IRQ(Zrg!sNMmj(I0BlrS39R3%+&(T{em~%dKc)KWi>$o=^sDCZJ
zbzyD`^0ET%_wU=RUEB56iGUnUUS5hI6e%yOI!@PhfKA0i3kA;b;)6;2qX~Tt(Yv`q
za6+=&HNRJ~hqM2~M;FCZLI+A!#@)n?3?MOuk-b<UL$8}`)S+_4t{O!!eZxad>R44X
z{xOz$RG-Sm7W9$DL+fcVf3oDXdN@p9{2>gc*MGM!U~hDwnzcbYItpmZ>buF-iLO|5
zzn;ng%LBeRjz@^9c!bB?D%P#AQ|2)5i1b(HBd_Q&B<G2g=@sU5ir|eaZol0bCd>$j
zr(C+3X21TfYet0ciF~!q$y9%=+WD0|hR!k*5S`Y@KJ49Wnld$%J))i(?*ymDx8#o2
z&8v`dTtZU{kO^VEkfLO_X|a5^j~z+hTB8Mjp?UL2O>o}4e{1->3E%6kdCP%bAnvLf
z8~>g&m7?r*=LIwTYJ1&B=g3@&ve&Jk%iLklrLev33-I0A`d;@00FNe~p7$3$q1=1j
zs-pMs=7W+e*i|biK>Fb6y}Az${#p8<4fC!2^02Y}o#~!$L--hdzCH9R1Ml{z^DSM^
zH+vqkzpmyTR$#;R@^U&LYFa5fp?Y}R>-qe*oer15T5GKpu8zAdEUtUm*$Otdl7!OS
zO}vyLm#msAoJ_R&dlH1&MN>M_#%A;P3erS2^|0ozBYUufXNW)sS3hL2r@Ec+3z4Yk
z0r;T8kynI0`Ug!GYPCKJ9hw9&bhRV<<|yr0PMTk+9oB79UufR$s}9cFo_x`LsAcBR
zdbd%|kzM_^GfAVYci-=DI{DXH@BE`$Snm{Yf7yP>>)lU)9E}jJL^Bq--l;m$bsdv~
zIwQ3vX<L)MAAzC8Zz%-ASNyE4iTSFdAD+&g8XIDC;NwBoFh`bctF1}Kdtv(Fig$k*
z{qR$lIQrp{4Iss~HMy93r62xWs%fqtUit~RXzPB`Rk!Hj*jzt+7hhb1K2kq?l4K0=
z6rFBDKP<h_s(yG_c$toVc##c+TR*%Db(7W)zsg;6{qPSE9Mx}a-%t8!IQrqEQ7lI8
zC)K?2>*{`ggs8Z1^=VZU-R~K+$A#{eb-$~d=-z)nE`%E+)DN6_@6!EF{0}KQZgnv*
z;kw_)f|**>{i;g3ywI}lcP(W^TU_7!lg!@Wn(`sZlp0JGc-+%^WqC>xxpcpa1V15~
z`00`$O-$yCLleVwzpB8Uk7+c__{c$na9v#$0{Vi07InX81~dF>y5Au~ThRR~=w`fO
z6U=bkuWHpDm_u=-s}<evxqu%{_dD^Ans&N%zpA<bS|vAY<EMa7zf?V``{g*v?g+Z9
zxpaxv{TfgHlDgk59|wD@Mcr?^?2zs^H5PN)`#~6;>(c$I*C*?SwORM8GF_p|`fqi=
z6*0i|^*S&cuKRt5_9^5_Wm@+;`5BGj=T?B>|3`Jd!mPbxeaIe{oMg`S{=D{gS=;oI
zV_}Zr3gGYlE4}3RVxIZm=q0;A*JaLJDvGOqFI&gJ%G+wmOZeoX?y{KLdU8i6`4&Vk
zLMORyp{<i#w8qv+E?wWm=}k0|)`hqba&(e?xL2yV;i40Cbdn!XpsPx^PO`HNC=$T$
z1V(g{3#dzUlC!zmi|rKDS+-7cDP;k&=)R)pB+mu^s{Xg+#?eU*;Gwxr@~6S*ByU4P
zjnGMMAazhDiEmwMa_J5K@tH$0L^~&XLp6_=zbfS4(Hp8)7s@Nq8xBNc`M;(&+z5OE
zSyu(a)34~s{yO4Mkemwcw5Lghst2X3v_ka=Zk6Y2h5}~cvR7gbS>&xwz$450YC;U?
zv2Dvhwyy9~EWPOw(V>YhFr+JthbD>6rUhN$+9bZul>-1_y26G|yncb5C*@nSB|Xwv
zi)D;5#2Z2JChM4Tw_H1okFN3N)+5DHcyzgTq}e3Ru-g_X*Lti+F+0$6rI}ot_eF3_
zG?Q!RkS)lAOdz4iwPh&QMXo&$Im^~jN0A3dFA8hpx$~pQgNsNL+0?_5YZdRR{G>P2
z%Pvg-X~WptmStO=LkQQ)Ui+of{6o;o&LC4Xy=)rVw+OxL*A?I)#FLGg7v#z2@kRGZ
zq@1c?UJJ}Nzzkp5F?-Kl*%ROSZwKmMOHTdQz!v0G1>F9ZY__ZIdfC4Max^)$0ih*Q
zPE~dMLDw<)=k>CmEC?HGugrDNr|wYV$U&y{vTG9=8i%5n^&Wy=c62yQ=K@nRz0M-i
zM1po$<G;mu{|s}LT`#w~2bMuj`m|NAQw4Ey(W)79qO{{#()_~hU};)%4BfMDqnadb
z(M1H-Il72XxTA^erK5|mcsLwg#A{!L=^~PN{3UE#2ePf8&%ONfV+Ovhi+F;2rHhy)
z)il>d<a7rYiETXh@+LG!NKSKIL<&^c)lreUh}$J&XkA)78(oC-LaVxn=gH(M)6qrz
zU<2XSMNE3u(M4R$oy{KY2(d>c<Wc?Bc3s4b3(!T>p!`$12=dvd<@G*k!ET34vJK<u
zHNvnS@skv{b&ZbSxkl@}k9c*kdR~%n9=4OZ2I~ZQyNLlL8xczhmJnPAucJ^3u>Sp_
zoNOnyB3D@tPg&|B{^oj@O`M<B{+c#%pFmt({q~A4ie9Aajm^6W8eom)y=#4XguFJh
z`aY#bU!OLf!D#IEVk_%Y`W^@Izt;M6#(6EQPYSrp{&~pj(_lc3wm#+jw)y&`>iGTz
zRfn@ag=jFeYfE1+bm96o)2_^?9olsgcR||Kn}@@pT}!_Sqg|V6+Al%7ZoAN-U2*S+
zXxIMtY}(bETBFde0sX*5TlJ_%-k^tLbJ~^17Z;t0q+K6EtXy-T?s{mK^g^q&%Lp&i
zp<Nf)K)7kwDpWUGk6OuHb3N+A)PIPy>+$~3uB{@kM%d+NJ@xC-i^qfrhUokqv!c+8
zFG%A;x7MSI?DejArNjVA{ATvXhOA;iFM}Y02jX$hw#iyRS<DEL|AT(D21|9UM~}rQ
ziPCk}q9VK!)u&pXcf|R2lGhI8DB`HZ!&rJ%uVBc-i<*_dHk;5jzg?-_QzrwdP1oZ1
z0)!#>{tC@g>!nmsGc$DFdlC2gy!XcOjNvPro%dc(P8X6K_{H_Z4}5BV-h1134qX(}
zj|`7BhALd=z0c$^xX`>uVwKEm2`#p7yOTtgo3#i}?(^Qgsj#K<-h1=OUT0kZt(WuO
z56k#=o%bGYBf!ShgEN9_z&m9vtpO`90VAo;wXz0Wyw_>#ueAo8dR7Z-fC4V}*+X6f
zvH>~T8ZZh`EmB5Nb$r7qJOoQdyqd#dYruVD!O*$u+Pnr_jCM+&+dhH2;2O}2hr?L|
zZuuc>4S0>F{Ss@y{r#OaAh12O27J%G;$QnxYm_x0W!xdG0bQWo(fQXLzC_M9Xp%!L
z-i7$M=-P(sSOcUNT3rL0$mA;1Sp&|ofpD(@cR%8+0Smcnz6Lx%QHQt&Jkp0X;9tmr
zk!!%9M}OTl;9<y!3s--f8f6Xmgfx+;(f%wNa>u*RQFvz1y?6deXxF&n6C0g*@7haS
zEh%1nO3fB~H_1_GD2vAb>~}J?xR<6Xsl$q^rE?S>Dvq|7_B*5=*IwGGBvac8s=%#x
zXmVO2iClYW=Lmj6dYeC%1ZiR|<dI%hGD`SfnksMwn?Hhvbw4^SQhR9%0iT0_7WdNT
z1vC6=duffQx3HI{pgZwNn_!0TrKwhpS@m;!X^R0r+Fn`;LY>e~_g<Q+?ujS#XmHL^
zyhs6|e!1Xw-7i~Nvx3TB=qp{K_tKtR`AhDlbw3d7trqvv)}0pGOEbzC&sTu3@Vzwk
z`aL$4Srpp5m!>jx)Mfp*duj7afos)Y03duXttahM$d$_UUfL0NX$;SVxA=d1FKsy@
z-v6C@Y2W;}dueshEtxY>_R``Y`7Y`%%&X?TgX?LvWDd9QpHX1%rJZw|y_YuNerGRj
z&ua`M+rIx(?wjwWEu%nJmF~T?mux^`Q%|$^($1zX*-JZ(tG(E|_R<EB0g&~26tT~B
z|3POqi%v)OxzrqcV2zMwXP-;G8Y{1a?_c%5xzF_w@CjsH6%4OGswd)?2qr;NhYaK1
z=jtR|f_k6phPLi=;d5Lce9#v5ugX@L-c@|bI$IZVmsr@J!C{v4aVhh=V0(X14k*ZB
zh?lHnl7#IpzGSVDB5Jieahun*_tCy=VIQr@4?SvSA8pxuzBk`TTfKnSKf8~%t4PKt
z!&~p8y@`|)GI~zCHf*dZzE11?d-y0k`aW9Rtk(C@u4Qvh&y!~RXm{Zt(e}C5Y#*&J
z*@9x-y(AR9;puRFBFKG%jMef!T6}mL_go!C|9$~!T+>R+>W6LL9ep2d%Wlp$7!T<s
zJIX%VqcKkN4`CneX);CINBf`@l!TvexWACT4)J5{z=JK%_v4GhkHMF^&NnESX907I
z`)HrVI#B;wGHTU{Ey$<}xJMt<tOB&4t^NSM0_12i>S_d*NEubtF;dqt`RDi1Zl4l1
zpB7)`o=@BP7&*xFd|Gp(J;$B>=bt;@a47p|@!>G-nG|jOM*;1Z-A9`#654;Yk2dg{
zFx;LTtsU2sCKAPm)ea?_sJWo`!)wa-x{fM6bTj>R&T7|G4!3KpjCUqQ{jsR|lzThQ
zWylacsyelSL%Y>^4W4i*EOapAW^zZ9!n_DnYEFx!EA|%St*xS#3eD-WCkE&AWWG3a
zTFY3@nI#4MT>$Tz)8XgQ|Jlv~f7fz2i5l?_Z=XkR-Pu;#oeHiw-k#KsQ$fcOmV)lR
zzlBX|6YuFsTX6hdJ!*?bx!rP~MW2LCeQ;^01N3Mz)N9k5&uvxJOkI^Tx83s53iFqg
zk1qB)NG0O0eKuU3GyexD7IMUq&pVC_$w$85GsZ6XANn`U)=<4(cfZC@o6ng`Szpsq
z%4$hIx<H*XKf^g^E-}=@&zYMYs*@ID5>!2Ev4;qBT)av|3LRR^rin^K5+JpR)POyQ
zEYYK;fq%!`kg*#&vg<x;{=)yy&zj4j#vLYMaDqq8J&USSs`36Iz8!5lL(YLTJ7sPk
zGFQHcb^HMPjClhXsajv2C<ZKzyUvv3<*6C^r1mDyaz=hYKbWJId+};uKjba<R5NL}
z*eS(r{^;G+qpiwvOU{Sm|9^NBkLg(!C(GB@BxQ)-fe8d<G|@>h76ZQdx}<8NLyZ2s
zdi2i9@|`N@PL*?~Icev}o|E>bzsHI4T27X4;ku2J<#Mg%WI0FiKn17CyJwjGCUZ7X
zyZ>B0V7WQ}&z|b}%ROAZT)k}LCymv0Z}OPZnq9;Br-mcKD*GnSB6+DFI5IbJk!&V&
z=!TPI3_sAU&z7s><PfRQ*>ZI-R8E$2woK1$!cxh&Yt#Aieem$)`fu$xKR!I!GeU;U
znjq_5*ctKD#@jOFx4*Sz$b#dwQaQ<b@C9a?Ekpj9dnH4jBtnT}k2#70U5lh!hFm0d
zv7R8#J#Nd8d&cn!8S+c6whYOkdWUsvyi&`MaE(#yF^?2!N6tMxB{z;eW_KQ%+ha~W
z8hgxmMA9&csn+@{skJ?3?)XdPpv}~HRpd2Nq?YG4amxu$iM6TL?Fd=+`i>6eb!1sZ
zM8*C$B+IH-zm-=a%l`1cdDeRl@F`hV!4L}!LNSj)`f5p*Et2lkZGQvfk3+WEBshdH
z2f{;y*=(-<BkM#f=ev9VneQE&o$sD@53jS^iOr_Me+%-@a#9(hSc`5)_-H4mn+`?(
zAyZWO2azUH{<&O_ZF>;6%MJ2M{rKXHoe23yV4elcE?z0zj_|W&2kKu<{^{D1{3F1L
zU8<-`4@Ld~<f!rwTB2t1kJK?z*P-cXt9H4!LzrCpgvFPJ$v=E_(H)mQ;l35rawv9$
zhjP9<J{+b!Inm^wD4-p_+z@^I?_5bE4OGT0jsMQhNII19Po}8jA3-Q`{0kuu$qMbj
zgCqa*CHnYRFwX+!mdAe=2kKvK{C8<#{43xdW%ub&$3GxP9sh_-k>g+0F;dsjmhlf!
zagYBoVdI~V(Z_$<U57aS4@v$HhiT8~XyZQ$XoofabMbXhlQi7C+#~$tDAQA&XulDs
z5F961>a8B^3EJ5UZ}2i49-}YnndsqT!|-`_G}y~Y6N%QtgB||jUGe)Z#yMQ-tif#A
ziCs>oec63u2=D4ivpyb0G)Q~xY?l5sSNd3;{?Sl+&DS|w?K7Z_OGj&NE6a;7^5myS
zYv!Yea9-NY`YIB++Qtrp^5&!D1pEj&Wt|vamN{DcMtkCiKww{1AjWsnst>wkNZ`=;
zit`hEIOj>aL<RBMvH-{D-zLL&-7<NfB#kBM&g+J?l(bHg=983&A%UgYeQhWYKuVfH
ziSK&tt3#iQe*Q^@_|%n((7<>6?78T&-#NA%<G54fLu`>J@^Cn|9G4$8!tH~9<&h(P
z5nGO!BQ)FH-Rk!Q#KX2lK81T_%h4p&G`B_W|1`L0t36-#C7NtEx93~JmvFSJb5YKq
z=qMROy8V5_vE`6nXw{aZZ+MxGEk}tBgxi*5>n)Bg#}nMyT-6F@fW4}G2=P<>rg*}J
zw)o)xGznXd7!-SvwjBPNU)Pr769|h7SFa3HbUWPNeOKD!Lbu){2+hGiOA#!uN`9!O
z01T#8%#(5{OvOAg_R{ZTINKB+^W=GQx(asNz<tZ7kPV!O|6&;N&e6`AD{LP&a3iR~
zWdnCQk3o&tM<iCsyw*EHO(lod>P8ZgGM+?!bKAi6qC&BOQ+;LyV+~nPLX#v;@k7T*
z)hc3YR#U~Cq!_<vO-%jq8V&*-GDkUSqx^X8wceQbV<3Y_83ZFb(n*0w&jy*u3(J2b
zA|7ukB-VeH{!IMv_mP?LXIGcC8=1(0ESeoH9T87?607I{1^O7EgYA0)h*WN`wI4Dl
zjr#Zs8da|h%Ai36YzU9t((6LdP-jgC8)D1%iHvQREnhhl+r=k+lpW-gI`D-Nt;ciN
zKFQ|Y^z5)dw8AHK=<f8{uf-=#YTp8%q=36=`62U3T>v>6pHzXk6v-#4I(q6lCP%a7
z+wqOi|6AKm|Ca{oKX)Pe&%@!+|0TzT(|?-wOW5*t?HHv054-3;_nQ7oHDUB$&NL)H
zjZ@3*$xn}sdGS+k+y-?U`{Ji5_HEpYpLUDeaHZ`#ZP<5*uvQ!cjaM|NS-h6Z`4UNE
z7{Sh3@d@O>P5&}kE2PJQYsEe2AyK<*vI26mNyTdNgqP{86$5P`+-t@C=&7{r_f6c{
zYsE6uHuhTa81*0GTJdx{){3`8wu`X+9)8oWyH-3kGz?dNhDmG|!(kU`T<DHmD@vsZ
zXRVk-0nS=+sT8Kxil%Fc$<=(VSQcKed#!khPtDhgxE>DO(InP7o+?~xMPQJNmL`(e
zrlo%uDyY|r-6RpRx->6*t!RQWwzgL6P*t~at+?0U@>-F5!(puzdGV|jPXKgqt@t?9
zzE?-;Mm>S#)5=;wXmnXC27wJ(E1r_E?OH1?1qH6P;_-~&TJdpKOKU~L)%0xlnpW0|
z^G<a7?AKZ=&WdYctx&*CFb{dHxCoG=trdAJvXN_rs$>7ns*b2@MZ**@bkQwsUMq$!
zcGikhxeKlpeR(*XwPH=ru(e_%P5UL*ivOS>)#nxy{wK6n9AH;Ytrfkf^}k#zMiqg#
zw#pTIpaap@ir!Fv7x7Xw#<f;FB^g6<#h(YVR!EPvx>oEUldDW;t>{cu0)%_5m|Nkj
z6%)8?zE)IG)FG}FHyf-K4<MyRt`)~E`gPZeYDlLGSEU1@tQG$tO(bgEdh|x~C)o`2
zd(BBn#Qi=t{o@6ms(lNOsPP;>EPd0$4tN(&;GSK=c<YmC;BIIPlKxSZ2V)j=$&LGd
z%y_XtXfj7PTBpOrGvT1w;%S-lMapm4ktY6xGrH?A=1J@&tXL0vk<mkZE<5jpyrPh-
zr1UIra!nTm5zIYL&q}InjPZ|@;_>F3v`pP3nW^0DHD&jW(tanwG3^g3IG{P&Yo^{T
zdwP?Ss#9;54ZYFcYR}EPo|lC9iS~Q9T5(xP@<Ci(H`K={580_Ju>+8T#ZNf<M_<*)
zjFECv*Mz-a_*MG%^N&ye-q%e&dR9s?sgF~guB+Pfc;=Y&@5>)H>i{3HPv4flVZm|f
zlf30e<kF@b$wi=O0<aN4Gf?gK)*qYhPg-yUZO;)C5c}iD@)2M)MsC@|qo!q`mcRa|
zj4+bV?~^yGq|A5qS$%Tyr(8GTtVwBo(}vIR6%ELpTjndA-Y0Wfepy*zS)aTd!UdC%
zV8H6tMG`zcLyB?#9c$+rS~#Pyv}8(IpUj!lrWH={mCT$`7Gneg2u_CaTIKqNT|EJ&
za!8t|VOJJ5(fV#m@XpWOYmWinbNpW7_W(aSwAtSl-b<`y`RmL5M2`RN<m&vb<yqeO
z_{ramT)T0->y+lPnYX;3VSK=^TVaNg#IJ$-)%m>Rr~iN;qxUc(BnJZ?>-XnpL?Us}
z6yMmwDL;!uL*Pp|?CjFA9lbIDqBX<|jDq-Q#aF)Bbw}<{By=mWkd;U5PaXbx5kykc
zftsNyL}`p)#k1z3U*J>Z^k;6G87XQ8VV`T4ErWuxA1RQs?RN#gQSa_>zmw3^YhtY5
zy5Ft7Ou<#^erMHYOL<qh-_75z(v5JxE52lyq&wIBPSlCiabn~<(sgpbyQf~|{b`B|
z<|i*ub$qGbX&O}ZzAp_;@U<KdOn!#=%;1th0G-XcXYV-;j&z$fC|}e3I_^)>yLE=K
z#uLl14+LcF;v(HxD>vwoiz*u@`r7mFnZ7t&?utKNiSf*tLV83T?>35^#!vcy`?;q(
zycTR;HeD$m{r#O}qGQBsZN^Hnz6VAvIp(Xw*GUB=>v;{mNBjm!WBrX3K?ZXmrIFZL
z4p%8G^EmiLC%!r1J}m_yP>j2DsnRpoIYA;CD+96f^OK)xXI(^#P?(HMekMECI!iwc
zdk)MP{k~2=F#r7IXNFvL(CVf?9Gg}7pV;!WOg<c|KZtw=?!K<?Kv0M}OJWqn?MOdR
zzS*oDRzIaO5HtTcsbz;s=IdNBAkFY4D9qJo^;=&*s4B1^-D&6FNo4Mj!h01}&cEv5
zh5jBY{gLSh7IaB|#&eamTo)5xlNnRr&aAD+n#8efzHA%_SFI$#Yn_z<z-D7L0hY~R
zqph0BG3oX5&(V-)xk2)n2kJ2sN%Lf~872++4PWDM=RAy96Q1<?@>k7GSLmu_t;|^~
zlW@^SPeUM(Gt9q_uCYhfKA-q5YRCS1PEA$Q$9ygpqQ+>u8)LZ~>)6-ezt%5E7$|S&
zd-}a!ANxcM;%%pz+a$I5`f_U`ooUu;rG~v`)>)6DYa+%-t+hb)gugwm-M3lQdM8cR
zR(!KJ^!qy0*hYnh&uNB6X?KOvKK^*KKGW_j@vW;m>vQv^pkH>0IV$!TFYr-~&Gty)
zXHk27@@3|$PFF2MDbM<Y{iupjN?o<q9I30}vYPQR&jRB@-b}Sq34M`a4r<tVskH}T
z&5+E4`rNVN3uJF*lDS{=TB<$YnU<?P&&gnBY#dXRKJBW5eh=N>S#^~Uxn4B`?~AG#
z@Dk}8%Hk@&iY3sfjhn9s5Gv#18!_W(3>CYhK4v7t^~jpktN8j7fD1)9Ra6D*{a*yr
zrPum9m@hFwk3znyPaYS-#BZ^=Rkg~vz{Xq$R&MI!Omppfcn$?KNUW8p5_7C}uh5x0
zg0nd8Ol6Q^y^3Z~X7TTl<?8pCwc>!7wpjO)xsvc3p4BOSo5D~H=(<^dNWM+bDl|vM
z9~sw#1F_Ei-mLFgRC(}3e|*JvG4)+5%bN^eNAqa2ys4)9<lG5G)%^l7mFr`ZpXpm9
z@&HMDB>$;4@jd@5!m>?r(J<vkTe?Ve!3lkX4I3>+{KUHl2r(y-N9!J#ULLGvpb6mv
z3$a?OK-w;`k@3s1L*z3;pi*yK5#yj8WV6TYZ-S`kMDdb;J<4xE#gZW!6^e`0Fa>cu
zF$jt^eKXZkyjXLoS+We3Y_QNNcA?kVg`TMjl}6fqHeOoxT&TF??c#n?v!~y_`i|MU
z8+WM}MV0A>|Lb7!8|>nf?Bcf|WYB%cF}nZgmqi=*GMyOI8khE3Fy$-<mjqZ&EA}wJ
zYpNt6YG|tqFqoTbZj)zb;84a!eSd4oCK)*jfJDL5O7!RTM`++iDd6bLxH0t~5;7Qk
zlrV3Da89K<$x}cc!EG-Er{*GMoCQu=vu&jC>5Dcts>!b*g8t=LI|Z@Z%#GIXSL_cg
z+USM+X?vb1X&VGaNjoJxEqG9Cq7$q5<#EM-I9o7qRzWqPxWq;GrOZ2Jdf1PTKG#QC
z{H)(&hSYC8E1~V@zUs{dzj;Beky(w<^jQZh*KaARv=WnVl`Q~I_6Yx%TvO2Llll0|
zWae#u$%T-4R3NKoF4`7B$WcgouE553sLxGSfBSPIf|EM-LAR<t{Xq38lkK(!?y7Iw
zEm%{BV;|_}^lb53Zi_ebk2S1LAQ-{FRqOrnYj^yZVbt8Vk33_G<7q`;i_pl~Ig1X+
zQ`xYZDk)E=cvfCn`$hX`zm*!Tk1!iEtK=5SbOJ_JW;+!p1=2N?Tay7%e^K?_0%u*-
zPX2|KfPm_%&(#}C-qcjd=bWiA&o%%giou79*`(e4?f!uEZyFpNJ!|-?L0TtkpS8eN
zXnl$fs{Tv8S{cUBLSJ6t^jSIizT&elBiVIEp;2ng;NNLRKjUnpk5RzgG`@uRsZ+Qg
zN(!Hm$G_8!S;i2fgj^RIJtE%c82O|s=6w-&C6rT0c|D9?#z}_X=*^v6Po+FH)^^H-
zga6uDJqhzuktw14le{w751!+6P+ivdu$ycF>FuAItli8$tT=Nnvu>!Bu1c;N9m4`n
zV5F=R-_h!t<m+7Ze)5uYcu%yX<f`7>U<K~+U%4sE63$%8s>%ACU#PTG?a~5#m&D0c
zKd3v4yL!npZYPnHtgou~!|ZXp*ZMmX74Twqy`~dN*b`pg2a~5>KgH`snAjS|tkQVv
zU*C|?Z)I=Y!z4FfhZrA07imbEtN_F*44gYQ><bM1ioD57{=+z7NS4@bB)k-DP4dM{
zB&a-!+`0$RR~8B85nRNqgNCnx79{xNc^Q)})xB+<4J)Ev9>L3Gp)<EoWzi<4rC<*U
zx5;{snIw=02UYyJG6Q#7ThYf$mY2E8Osu&`1{J&h-)r);Aql!fpN_96_rgEQIWwZK
z_1iZ!W@_wsD;fB&nuNivPJ==8fLMRKMX!sLDIzvvbV|;pW39iu2v<MJDNB6#sZ}&j
zSDrJ~Yn=g7a;(Xuqu-ZEY%v)c%7Nd&^PCZ*2$Zns;<;*S3`ohbx~nV%Ps*f(%ElXg
z3D(^g(}sDBB<tVZnRDz?stDW?g?lg4O=bIHy&?t))+|XpMuNl(s*D`#3H60oI<*AI
zvtDG`lmpq;C<ajwdqV(82E@ITuZsJKOoF~K$awW%s0~R+uR<KLx~zb)Zu^LlM)kPQ
z*)bifz?UZQU(VDXQ)3x^Io8>#;^ZYOL7vQ%qb_jTUEGV?;ynJb%4u$nbrb&z&GPlE
zp-D1lrW%25g1K}xA@;@`yFO!SR$!OR4||R^<V+2K=+~$v$2#~=)%<g;j+8X80inZ}
zXcf};yN)4;V1uN$tE8{$q={Cxd_JIhW?b?9^Bv%%_}zNC(H@!tvTo9Oj<z152<en$
z%S&!6PKsDd5e#%|#Ie#j%>Lc9Kz?ij>+HjH_GD`t=(JwvpIwzIlV$d0I+UK3O}scl
zp$*yLQH{3}R0dyH{nA^xGqtkO<8KGvW9mJbWBhLhd+s1`lgiq4jNPwkWR;#<kuE(K
zOm{rU7Q9+dzM#MR<onlR4x=e<Ce*Odm;#;6GiEAkJHr^QsOUBPTWXZ?y#$IXfBDeL
z+59_;H<7e>Z4ZdL^3`M8)HdV_MhOqsB!l3b3mrTc58<|W4*ytlfH}untQ*}<maqCr
z;66si`LioXv5pR{Kt#WmRUP_r>{O#>bkn+>e34mkhH&E2HiNd&*Qm_aHA%S}MbshM
z;JCfk?I+3zQ;L2<(go2nfMn#b?tqaKvT-X{!QOaw+R^^ks*!K69pk`(U}6aW%BtaK
z)$kePjN!&8o@N-=@+O~u3l)x9Td(?1MwXFn3?la^@IBGU1m`m-t(5CDqlY2ulV0m4
zQoelAtDme|B`R&cz4ndbX$q-j1(QFwZXu0l<UZ8YO#Zj6``KrM;biHFv!41c5GblV
zzt8L>vv%EpbdYs13^#I^JAWUYzrotyP0vq%vRSuog`~cMvPez2UDY!GST8n^*83!~
zVW!8r2_~<;J@;|e?vqr)AY5H2a{{fO1Js3#AfIuGaSe1s#-7g@NLyt!o<u5OU$hbZ
zH+uG|3_d7zO<tN8Vgqp~h66CHmCw^lF+?w$-8uQ0ydejRDu3!RyMcfE_`Wi?o3Adn
zuB1OH1kI+F4`CZc{;*`Z5|M0n`(bsSIIPBQ*bn{Bh3a%&y%yG0XweDP-P7veS&h7@
z#<Q~qgjkv%ELfV<3)n*xdpb&TaMqjqJR_HONI%Mm7_0iRfT!t-3mHsLml|_byM<Gk
z5tgDkH_{h8oy1Q#5yQCD+^9oa_7f(Wa|22yH5;tY<Qc)J-<xA|Oi|Z-Swx3z==Ub@
zX}T?>S?1r<1D*L-IZ#?^_-_!#b-`XWg+%h{`L&Y5)@>oBbs8%#3xahT>n-!^ABxHz
z`Rrc4ISk(4{|z?Uoxd+oJnW(ovfeyrCo164N%UJu^vQV?a+4?R@_VJ`;2iu1g#m+R
z2CpBaC*WJ>(zUx}la_Wn_)X;g8per(!Du{SFVeK$2if#Vh~x9oH$50}GkGf<U`yo>
z&Mcif%ZCbkZ2pXbnbU(Xop)IE36=0so77oAdkUc~WjxP>vh*-oA0>vd1I)%9nU`HM
ztuV8+FyB`=q@--t%(4>EsK)@0%oSrhi8>V(=mdkN-H<=Gtb_A7rtk(nT{5e1M%EnE
z_a!r~P127#U6-PQyi)&+DU|GdPsuILFD)$Sqv{mxzp(CCUkn@_6dZ%5Oeriwo6nzo
znaG!RMfqb3^9vG+@-Hhb@fCK^kLo^3X%9(RNvbTV3XoJ`5PoB|Dy(eG%o&C4ipq4E
zWp<hBv86KeGDZkM!N20c`nlMC|2M9(=^@r`P1j@?o+%kdV*xsTekthsQ~5c1|7H0h
zz5mWDGmOZeVI&xjQ(mUAH}H*pJ#Nql;}!66HP^wse?UFQ86VouM*+_(bXL64AurQk
z=9@WP&^yrBJamMSI5xketT3yzbY`jGzyMG|to(U$3#S$F@HzVO7^A&PlR2}XFqRa3
zjEZ6OyUIK&zswg_fWl~~fLMU-)_tVm5tPQM;=D$jw?JXZu0&;tG1?9G7Znwj+Lgu{
z@tHIIGkj9vaAO4(CQ1=HjRWnW7SvzEl3Q4Koh~B9hz*CuNbQ^f8roe_R8&@|D!)+W
zNml(oXhvB{u1^Mz13^Ug*!$4^#~3lW0yY~yw7i4L*(%%$>8&9Ee9E{=aCe~$JlWwe
zjAkR<Fyf5ZhsgjGZ|chr`a){y(G_&Q{MnsV!EHq#keHc2YgS=FZpn>>f(8B%h9VPr
zb8I3YNuU8yl6a(qX_?{kA}4!<v4nTe+V2yF=>4-MCSF_TMc?5gjEDGrz|S*cgfWEQ
zE&K|2)_?Zk5!#fHJq#*3jS&lmq)!c_ll@B5s{;Ab-slJ*Lzp;K_Vs1^+9hiQ%xNHS
z0awA~e07a8)^L@H_O5-6p<#eyv@_xrWtn3<&tPq*>(Ij_)rj|wB3W=+#a1v(VvY8L
zWG>FgpDsWOEln}H3~EMg`6i?;$w(NaDIhO|TzL)eAe)TIXd9x(sh!<FYg&oW*3dW&
z10YeJVvP=ia%cKWrxXepdZNjQ?WW7Pti)IBkY<g_77B}%Ar%XF4#H!NQw-^=gdv4x
zzS5cEe}zA<5fgz0XoGZP1Z@Zd^k->9e>DoAB<?94Rz&kDeX2rLd&!eGGiwHPsRj6Y
z8MA=T>nv0)rqjbP`b-alMTQ)+u4PhZ$UI5VBT1%^CX`WTc#ILdNcEu<DILI=7iCSv
zoNlN4#4wuF_>%<s?|evrhu?`dDd@$u2cLw~cIM+<rwnd&ox1Pj!A1|#?B=Tf=q`ap
zHo6nDU5kc%jWrUpWT2_nhSZ<ndLi&_pD~DZ(HlF1^fE+)6+~%lXqmz{J6w25V62Cu
zuhoQACIGv~@OM}=APqKl;q0XP*acn*vAFOG7+g;p|2n#dy}4TL{hqM0gP6*0uRE`Q
z&*lc36aHh6<Z`Mf?XAmdL>IQV-^*(!lGHkPA!@DBO|Yc*(H`sj4|v>CePuUugEjOF
zmoj7+iA5ItEi9<Wf+Kpvitf>pV2Bs(Olz}kKC%a^;F-uVJ>cU?`EMpa(I6I(2F;K)
zXANAmY`L9Bt8@$)_SAoZV}FN$u(c|(a(V;8Q{1|f$zr9D40V<0hFxc6_8mtl`Z%@P
zF8K(d4Ea4Nhkv~MGn)N*3L{8)YBfP-GsRa!Ji9$O=Z&-c6j_()Wp~Yvw{09BwtLSm
zA;vXH27CY3IeZeKv0?!#vi4>+TKm@@37(<8iE3@**C&ApFlFxpG4oyXI|Q=|8j$=n
z{Z`e8f(TJfpySDsCjpoH59FRrvh5d(RB;DoUo}B2dvax9>_G09odS_qXhe?n9oR$Y
zmsUI~8xz<dGia_LCazAOr&4(y6#-PGst!-3_U$g!fn!h{NZFT-S9ywc$wyVp^BVp{
zYb$_MHct0RO|qve5|(s>Y9DX`P{5xQz@ACKnh*l38;Ml|7^k8Ml+V3GpMOLxuJ<@N
zYpy%qhJ!s%NxLkR_Ftq;@1Lf|!f`SdJiJg)Q1%uGUZ>7^xrILetnp%bGjqm}d|!Sd
z>C~UlK$+t57n^ul$qYMDtV4v1*!E-cf-heqsVu#*9mh~+>Fkmzg<|fbXYzoN@Z-nn
zx<=*CxYnP4ZQ+nYpElbWUFa*GSpY#1%3&DilQwBu!MNd0LhrPKQ8TCHPb+LUtw7lJ
zj<)mwf99V8=f>Y%Qhur~KXc~vS*3^%u408tSV<D^l<B#?nMfY-Q>I^8GOOK`>4R@n
zmr+-a9+WU;x?IkVEWVM99gomuXU&)*f*YtBSva=`rONL~T5dz1HVT|}jZ6#BQwoJr
zsz1T2&2<^EsagQMd}e8`FTd31Fr#9;qL6t+@OySiX_+sVwO&{V{*w5`CXX$go?kKp
zHdUw7*oL+PN1WZah;#YZOrtZdEezs#HQ(D6%o^nP&GZz^8Z$G#VAd6dWsxm6jJ;A$
zH{G6`(vsN_^=k`}lCJlcfJIfDG^as|n^h{E(_vO=&deJMOUIQJmL|+99aJ#AWQKQE
z=_uZn`I=RbH=6Q$v{e2jvkOa0OA0jDQdthkJIyMcNf%Ft<r`Hpqp&@XLrU_e&Ac|U
z@HHfEcf!w=T^1vSg3_3s0*l>umzCU@Us^CEzx29X-`r^-ynR3#?+pcIqe`wV_9bv5
zNfPBc7v`>HN+b;Z$53X<g&K%qNHv9}eJ(sJ*bRO8+&;f(__Z@+P;xh<u!uGlB<C09
zlon3+PxF<)-4zx@7HixRt=zMN<u2v3ciQwpF!?hI;-^hVLhtZ@*!vprsEVuq$z~G*
z1U6v6s8Lf55`{oQ0)z%MA-hR{fGbG=EnguYY#<~tyQ^qHLzgIFiDHYDwzLJozO<zk
zThx&9+VEk5iV8w2tyEE{y_jfI<s;T;{=eVMy}O$bi2Zv0eV*5albJhb=FFKhXFl)T
zGiA#t&U?9dzKEPS(G$HSAHCy1hZYqnbwL{pDJtqwT}15dJ(M@uM<)j85N8?Enw@1c
zDngxQBzZAAq6`rSh6jo*9z-~taX!r-T{dgFY$<fvB<M!yZlvzA=`lQ7cVl!nR(Ioc
zmpg8Zm!P|_P%WQRba$fers=L#ce8ajM|bVIo2R>TbeE^INPnU37U`}-cgu9QQg>at
zyIgly=x(*{u7=BH=o;N!r@QNQcLQ881HerAGxdQ=%#f=P2ALVu4?*a}{h?tD4MFG>
zteY4uoB`no$f&5iuZo(l!Xu1uyL(Ytsnfv~J>y3*+=BSN@cfxM3dNd`s9bktWkr?C
z?m(BJP^=u&0Ho4UzBDlgBEPZ->l~*K5le*5K1VM_Cyt>5(U1zze5|Db1sh3BgpSFo
zs&EI0B7wN@$puciLQ)GgmL-|tgYwbCI$Z^2Wt`PIK~!Z$y)Z@kklZ&bE4a@uN$ShR
z_$h@3t7*iCp~%zSuHxm2rj=n==uGCL6P;3CQsF0=P4wVy=-aCntHe3P4(W!)V2u7z
zMX)mhh0Gn6W%_E6<;)|3vdpL`cNK6{WhfQb)L(`!TZUt~*r#JK^;lAwUQtw9av$HS
zE5t$~hNwlQPb@Qw7h|wg5sG9=ABy9WLO6)HGNY`*S&Z!DiWW8MguGpbT9q+MKRI0q
zkXI!`2WL1isVH{Z%I_(yswgL`imZ#+D|BqS(^*kiS|CpfD>NIHDKfpP(1BjD(B;Oo
zA-${&LzS-iY;dOQyWpoNMVL}PE_rgP3j)v!P%Wcgq5!t#g=OxdVqJWz8TE?X;(LnA
zF$u{jT~t+2rE87Rnoa$4FwmDfi}Q+?qbLks$5aEU4U>yYFkJXC>xmgaOnM2V<wtBF
zB7*ZFsBIB9^%Rb?i;ct$p5b0*%(86d*zO{W#BL(?N?_GS;&e=>Fn#C}Wiz8hA_`7z
zFDrGj0d~P}BYq(8dG}RzO}U+zD@Yuiq5YS;x+L7;OIYAs+6A+dm;p$L7T5)`iwG8G
zN^Wi`wXF-b-XJK~q=CiUL(EX5BZhNK>PDBejYe9w+Af#_#E_XO<)vK^2Z<mvP<(8M
zS9N9P5V4f3u1MD6GR%X!5ID>zS0Re8o%9gtn34TVcUQiS6Tve1QU}I3gh~Gi#^^Ua
zU_#H(_Zb>-dwJP?lZ(*=eDiv$LmP2})uf19eyDP2r)!Q<ma{!$?=%Tcm)eQ7bem9_
z1gAcq5;atzrYwVkrI%GY3NkCImK8whnepElBQhYyWGpFg;J*SrF!9`zG+m`LwhSG#
zB-1UD2~!8t^*s^MXKkFsDSDxd8hc54UE*^N-;eQ!+LpVj3efv6&8;jbEH-AxiXy)e
zF%6LOb|=KfSSG>w*-#=Pe3g__u~>B`oNHYvany3YP;t&KsNxjgB<I;t#0|c9GHwz(
zAnmJ&z2Rc4F_rfBZ=8$qID=_$uA|~!qZd$9X_H)pT|?}ZK1|o;nn^CGq8Vji*A<sZ
zaCLF5#OP}el!VI<g}F|W)iL&}ip5n0%j9URqEM{YGs;B+D>YB8eTEa?=XSXeLyx5b
zH{XdlqrOfvm}a}WF9}K#2H?=eA6>KV8sXu1W-l9|yOFvZrMuB^#Xx{T#ANml$|PnA
zH}dp{lQ^a#a&?l4an+Auc4!pEWrY<Og?%W41CyC6an<jWlOBcxGS>5OKvpjr4!Amx
zA)=qb<`k<^&>JKnKa)zzY+Rgfo38R>I6KPaIy}2rO#&I|7DkHdA=2#9B2Eh!hj0G7
zlvb}vpvDl@e<tbWRpb<xpxv`Ju?K_`oY)A-orRNfKctV}E6h7vJFl&F9&9+CuFcnU
z+mLf`E}c7g@6R`O@S1F=g79tcsk$0|7@-}#;!}R=TW5K0pQk<K-YK22HHW@2Rh$O2
z06qqM3J`O#PYI}}09%ID$I!X1K7r1a^=Wh>6t1trnQ-V6W-dE?r?IO)Fje)b{=i(-
zw`E|1OwhNXn(0hQZ=@bxIouZ!2WTa0Jbd=dP<*SF-=Xt*+u%>}iaZ<#cfxi<$?+}C
zu`y{vJ8Z{h670p{?8}L_Y~i&(<VRU=)$s4zpW=4rw<gB^K<m5`RuJ)}*+59J)^@Df
zcAONLrk&?jw@LZ%P%DGv;jxAD43TYNHaLiPR?pCb!!AqAcn;)Zs^Y?HJHA(o^5&mi
zg9AzMM$kJMC&%CqlYSGn=8j8Wa2-A(>x&oi-h55lhvQ<t7xjygw?DrtkRP{4M_h^R
zQB9ulA<qx`c*eOJ?n<75$aqSpe<&|f#Mvswx+@@7E6$~P2S}j>^T5u$)1DU7irkF4
z8Y+>WM4NUn1fqVNp`fiNp`3BtO8*kTdw6Qi8!I9wqn@X?S)L0I^153S!b8)hy8k-O
z{Y!6t_=x-y{@D0_4hQ?85!j)G4ek?lkr6<8U(ptSdag5Q-U(mH3&1YUb?K763R$w`
zi9=P%@4EBOqS^?@Lo!mE9_g%p1V6lMq@T-3?Ruow^+<miLQ0*s<DJuwS!z14<>$-#
zLne@t(9`??X|O%5Kh^0Jo+5=e<xwtdq;elpeouk#FAT{X4}L4x+Z?DI@i^Q86|H&e
zfdSq=*q?4f$(OaClUvWmd3OCG0=Cxm3k=oM)!nX+T7MfY7H34{S4Xrz>SO&0B=B>3
z3b|2gpGC5)*jJSwbFSZpNZhZgEXG8?Odhh}f(Dal&O+H7WcRWe(JaowLOYHg+*?sq
zl!v{kNIV+@S#i<ivWmi`&cvPq#|+W;AN`wwnK<5HqMXogabuS@{b#FtjoPWD@~~R#
zLZigL;V6@f!UW3iLmY~M{9tnnrHA;mgbU|7e-ne4qyRGcj%FVP?<cc(oK1d&*@0vD
zo1n$m{Kwa)Xd4&KpYx0DHKbwlQ~k&e{fzyAE4nD#Co+<u1rO_yek>zFw)k9lpP6Oz
z9MGr<fAb#4H?wsswcVj$?~|wI^JHOuYmzNIDL(>-7Hjic6Wwj{;BpkU-H);}V?ng^
z0qw@;q2Y>NyZWNm^4wmJChVSrop+7cC->^}!)Ef^vgsX<X&$HqKh`zleZr~(E-J_$
z_@)Ohe6atHPgQY{%ZrWpq?feqKtf!>ODM;qz=msI8`zFRTkDWL-<6=Rl!?P?k-&S%
zNGiW&NsW%hN57r};osPwwutX={l6mpIa_yUz~wOUue?JuiGeml;nbTlA(&5}Zo%Y5
ze_v)q$0}tMM`JQ5CqHdEUk1lfg^K@nJ^Tx}<X0>3zk~lr-}#xuU?0Dno)|ncuRcAX
z$kRfZzg&WHOa3Chx9fZwd>_-Fck1qQaQ}6_hx+)&XUD}=<ppI1@64~yCD7!pH~u4w
zu+cgs&svOmoP6m}QN^7V%xVjROhNj~U!fmx3CqBqaw&56d5qU9@{P(O&|+mWkV_WP
z?d7p?N@fk>T@j@p@d?aXel#6cBB>O2)!%T0h9m4|Jv<98Czk){S*7($@a^+m>bw#;
zlrNzpC<J)>W*TK@F@nW6kVy`F8{oc-Hze;$*96QJJ#arkka(!tJmO0QydTEy7|SDk
zhm=%SebfCJnQ(N2M;Wl=XVd{Ixk3@(0i-Sjq*yQaR(_Zy7BaIKXMzkGL0xIEaFl1C
zo=PE5M*XbLr5fudSt6EC{n{K;1;d<+Rh@kg?skk2|47{=ml^fl7i%35<C0`Rre7vp
zFbf_~U`2&wa=!xsR5dO|!ZW9oPreU(t7--g$*YwR!*LF<pbRT7Y>CPERGR^eFVAqz
zko!{-!4=6sA0qvpf>LZc${$;BUmu2npdXDQhLJ<QP(xUP14j%HHXt)_*k)w2*a?yF
z<W3Mo#gjU5aCtK4C%P-d&^$xj`q)hkDXzLh9Ph4F;n0azr1L42JgS02X!3{-@>?y{
zd2o85@MP2C(qy=xs4qV5(uJZ)JRmkA8g}bSU3v-8^(lP{7v`?{4?c?*j6oty7F+I=
z4vxVB+9a;<PcYco%eRQ&fs>aoapfiEIAk(IM3nmu+n}I`-mT2NwgV)hUiP_!T&b_U
zsQLO?N#}R(<niaG1}fe5AXncb+SnLR{f8~4BidB=N3}tjp1tN(U-0Fr`w#PZE(5a*
z{hhXF(hhl`_)2XT#`I=$EFWQxRDPq~_OQv@jPH438+bP4#-o<!!b*~kSe}2w8~Hf1
z+}jeCbkzID8EN={@dWOflJDL1Z<ddGU&Ay*<2=*T)~U`#U{)||&GgS|^E+_lBgFEp
zAAzc8S%;Zl&86BpES@?9U;z+X{iz1yp`V^{yVI&yga+fAA3B}x0!+Pv4}12RSG@<i
z_>$$U<+;dE%X2xQL3`f~>wknk)82O@`X8xY`I&GBkH|lJVIMXVgsVSM!RL>x!C&HB
z!NFKfMTUA`-g_ntfkAseh**;sYJ#!AmY_5;^DQT`nD3jD`Ask0*l|vovZ3krftWpF
z-UTaKm|xdshU+#;XCqF4nFV|d%A*pTpR2i@VX5KG&yYOec*t)tr>u2`;rkqAa-m5c
zGvRk6k#+f>><)o^Fyn_wk}xc>T|;-bFO|o&H)8zP-rSAj+GF~0q47xrV`_I}x|(Wh
z?-uWA#_NZ8pcK(LSWP6owoj7Y2(oE|@>^x_Omk{}tGf^GY;a!PVp`cXr)8vYu<!ZK
z>XjFS3&)FgEh8I{LuUj}vDiMT%?NMGi0~g=$wD~;<iSe-lw|#9b9iuqUsUi5K;vw+
z`o3?GJn7A^Tw-u`hbOKJ<!PNNe7nJK5f}>-{aHAOqK%?J`RzoeS$p!_Iox&~AzZh3
zQ9UfGI=bY|gu&V%bL=2YZaZBHRE(M7x&ffsNUEQgS^f8O>YD+z?m#BF%DAZac%6qm
zDHpp~kE?G~aU{RV!#+1i8ouFN8g_e+d%hVS;vBkrxs=luSzU4U5TYjx)o=_q70K$>
zHok?{vNYW6b%vw8g33K1FVLyWjYb^rYudetaI-TUbMK7ET4z*UMl?PVS&L6;Qq8fb
z=0N%fp9lRLLBIMp<VUy$&#Idi4N8h@t<uykO$!_6^#67F!_EW_?4T_}&fX7dI`6sF
z^FWkv5AZw?E?i^KSpLT4(>tm2qwWdz&X4kDM%GzFqrJbw3ih2(FLVaYkGy$)RB+3P
z&w`?3YdY`U$D=&z+j_Mc;@K;CK&rnyf(45|=9XdVG?uiBfYVq*cP~VjjMHLL#4kPv
z5ybRSwhI1T<=l)6244I1JRV{(=D8fhFbv{siK`d~4=8T=<Me<#bNrc1WmvrOiJ^F^
zR8MmE(p0%fo%fMDme|XbhIa72N^RkBc#f(-zE@o`TRZdMkGrRvz$1UAK^2t+ce{%h
zV5VGIT;-B4o&<J&$)PFSk6eW9U53kD&;fe5@Ax<noOPHYx*&2&m#IXYcldJhv#tsh
z6POcD&v1L1^PyOV_ty!kgYXQFV{oJ%?5Bk@(kj_V;tf8s$|@EWl=*N8UDM)CGR^~m
z%TmsJ@JlA%$Z}?JrT!Am%3wnlvI<qjWHa2zN*w^oDaPAx{y5(@4bj=;C(nLX)y}FA
z(RUkjMVUgZtC}j}5Vl(ne-o|?WAb*)gN*Z`y?w{va7~rd_j>nKvHTu`K6eKoI@W1_
zt_=zu#YH%TOHL8YGmjCO>QD?9OjsYvNoFMUNlh{XwU>!d-9>QvGEpU`L<nTvIDCQr
zR|M#qc{1FmDp+;=6$Rt$aVQGR8CRinxgNPvYHwmL-yj7}`-Te^?Bdzp8l?2iAGrcy
zxi7f_=@Prwnb$BW!0s!ME;LNC&iY)6YgVvY_1s`gin;J+zi@F8Q4YE4#JNU{Al~DF
zpQ%MU{ax0KU!ludX5wdR_)5*_vnC*QnYbTgV}VG-2uPRT(HCLt<5(CtX7U^>zn$-S
zEG<Gx7vRz(srsJ2NPfN6h1Ws+q^?o%YR95od-56Zx;LmBuUG#QybeQ|_>=p3?Cd`^
z431<#G4%7oI3J9&vajPr?$>g03K)ld=V6BC+qj&Hm^=Zz8Z#SiS!N6Dy?um<hO*b-
z#Yx+I7*GqN1?xQI1#2;|U!#5gu|8pF(#W|n{(tBn{}F-bNpVJ$!>+@dQH0&u!46R^
zumNe;<~+pR_S%dh#+k)UySj|BTD-KV4XyrWgm7O~ms_@*3wRj5>&y+S4fWhA+-A;>
zKvm7f@hv)rwqt5~Cu4DT*H6yDwL{oguFHr_dZ~e3y!O=l=Q_FJW|x1Kgeb?37<R3=
zALi2sqQG9idai=B^+>yFMJxvu^F96Q`!H+;!o057uwYkgc&gLk8V-TRK#)t!(p1r`
zCHTI(2D6g(+HV%sbh<+{=hGK3CuO;V<u+hOk;?6Y%nkFrK|!7a5fHSrLFPHos!q#R
ze{+z)$=?0iH6V_Kg&p-%J2%!0hVf1QY*hww{bO+DIS}bR?D-(5>SmXzCA?nFUXNm0
z({dFy5W}0Su@U@^G#sbGv(fEo$54h;lmX>r=cjE)RFEJKzBV%yh#bAm@atc;6SkL&
zzt`lMZ}qKaQ`#WWlolcOm(*1wxhT?IPpd08f0lPw>}mwgPU?hVsaS7jgm(t_H%H2P
zI(pJO!%TBgdHQ3vcRnBIcti2m>dmym!JH?>J0sa!9_Ph*Z)<FVH*+GKWN&5~oHSf~
z1t;5^nE)rwn;8u!2D4Q-(ca7$IF;VaSnoYi@VUIJW7mNjc$dSwk=~rxNJu!Pwk&oc
zHf|lYuGq5L6wha!mer4;>L;v-jdouLx!apTj~yh^#vtt)c-N-otO3UJ*%y|Yn}O4V
zVH0a4Vy7`STzSM0mx$J*GZ(=*vDTv}5t^W5BXyT^1yL7nE5lR-XpW=e2)?*C3-ggP
zpZxramk=1oz>-gXjt%8#*saQmjlrESZ;<o4c_B^Kuug%jSI82uBpYI@5g&zeA#EiT
zsx$TX?sSwThwY%u4t5#A?xh_S#Db*{h#q^)sHqio$q^)k<LH)V6_1RDceeCdYnn_!
zA$u3rkCx{e`yYf5U7nU8_m68jEj4SQT@!Xl(w3S^Jdj;73r17c&JF8qapIffeB>C7
zCKZ#qCw2oUI}^Mwj@X;JuP!{oGWp<IbE0=$?0ST+F^^hfhHZ=>P>4+WFe`PR#ilW@
zW+W~H5r?cj=oaNr^C9fQ>DkGwxcMHlc5YlJlE)^o&!L1=fl}AWoGqR-G@W0C-I5n;
zU6U6(*m6A;7HqqqRe7<=!GH6<h62yMF()<;&uQ>4M1gZy)*m4y&7IW3MNUzBPnv`G
zBCC;g6DeqieYQ3XTI4wp##qxJ!nHZEgKu;}!=WVjdSF#EEBvS?Ep;KG_2~P-O{I<a
zj!Oi$<8zUyK9+SgWQNjuafCHC(h!j>m>KVq+f0qn!YgEUdq3(^ml?G8WLWV2I&+p?
z+fF)fA^ZNvQ`_7FSAB*qRji!77V%qN)SsqUuCHc!C4su+YwFCm+O-PS+i@m*TSZ%O
zvL&WVjOiE0pp3n%Wwk+gaciQ3($V2WgCoc*){@bLwi8Fb*F?vmMqw-uRfX!L<XC%H
zvacKfU6pO&Of8y=r@i0GaE}&@gi&XfGeBd{5Ot;ue(&7aD6)jSM%wE<jVyyX6W?W{
zGQc_Po?2>bD6eAMbI8DdN8xK4CBl7w-NPpl%dUOX2)EQ6LtGZ2=DcO~FPIg?@A<3`
z3uyUaW1ZQCtxWa=QNB8fhT0yNbrKz{is#*-6gc|kqz}`j+NORCQRreg^CTvSb)Mq}
zQ(u^MHE~CRN&*(+?3i+56VM7HTc+t{IBi6K9nldZ8|8#1CDb$`(OioyCpOt)vr7F;
z(@Cs|P4<y7qfC)lz2|@&+CTcH5C;Y%*s20EX!zcC6tccQGT9x5KbD-mQrH_H9!91F
zklAhyiKGIg72)hzlj}i8CRl;K6xAwosC%dgT4L8$fxNdJK`y(e6W2?|X3L@0lGD8R
zWS@|Q5O8qQl2E($Q<mzm=RlPAW6$5smURP}@ynj~gN}UadCfHC==&6g=kEho4wLe@
z0}@E~HjUV~YVUm1U7b1Iu6<WlV)&UOU<b@r!rq7rozvb92w|aRHG6+lW*JgCyk)Tq
z>&(|2`70Ftm7vrMtiYxb&Ga;R+g5S=F36d`_b*|oFS~C;h8V&x>NeT&p~JMsu7Dtl
z>LSC?JM`FT2Bm`m$KLm4huP-&Fvz_c`A=jyAdgB`MnZ@c(n1lJFTtlWuTmE1A6YGs
z>E2W3;QhgEo~9tmz_OaB%TS0oPqQiYZ<dF{C@J<4`$p^yem%9>lKC?7i$jc9sAv;9
zjf)i&?T?+QSG8ESR?lCt5vq5KRn6c_4T~V62Rb7VyP8>}8$I(!Tx<vyWiRaAB!@&4
zqmnvOn-K%At2QGRPImC#+NE)|86)9`lK=-FZY9G>uFaSTC#^Ok4Ng>T2K6bWHX|E7
zlzmM`4sw%&^fyy#bGdg@8@6EnJXl2Z9B}RT<qY=FX{2y~JHxNP5JgTWR4mxBo+o{?
zkRW_Em<yjZTYD7pLfe^z@$G8njE)<-n8D3Ug6-Oksxd6Uu5XsfuJKb6J?iy()DSbm
zROIs#8}4ZYXZ!0OHY4qlFuV4S5sW$Bel;&bZysiMg-X`;;~^qs#V5J>P=d&{^F;M$
z?^cEBZ0{$h5wn{!*#?1$ufly4uhcKwJGAV=yGflRUOsXr7(1{bcrl$-z5l333vyqm
zeITqk6B@(#eXC*^f5IcDQW*cp2RK}0xn3ad1wF30Ig`^{e!f<VonTuKHes<Lhh5;X
z;Dfa@;Lpbu7ZJfnYG=W3Gw(f#>n;$--3JL#GJ$DZgPhI`Olmy(9<^*iU1UCovf4r3
zS>X(T)N2QEu5Qc+5om_|!fMka;DpzvM>nTuV{;1z;H$}uzka;4!nnoU-|~DP%hLxj
zmrLF2Osky{wi_=CV14#VDEYy?pN0g#TvBUUg-`d`POq7zad@>ncaR4aGQ%+j_TRg=
zBn-RE;R}))=kFh}cf=9+YiEU7p0|{E_m=F{LP|y)>`H>osAm$g+T?oxqdcs-a2Y(?
z`+3cW%Jvn*u%N-Hw;rXaiw3*q5vnjoNz(l#i5wA7l<*M&WqA;V>X8u`fVBk{C459+
zS-Q|jy%Y_}bnt$(c1z7HQ~;Qc!rt<$4XoOu?=2XykG3pXiZJic)LCZtXw2K|a$>{o
zn58C*7@F8E4Xwp)q`4oiN~(Fu-M=|Ais{2U=kH%@s+$^AJ8(Xh1pfNZg<-j*PMODq
zxv>$JM-C%476_1)<$5c03cW(z$ie=~H^=#Ee+rQSa*Lzf7^bU1cwB(&GEk&T$!^Ms
zBO~@g2hdkWQt6)$zom=(ZV90C8I-d}I#Pb#*XttVj-JfI%nH*q%eqO(b^g2su%x7H
zZemS`MLBKhbx3o@ZFuqGl}BYBUTrMTz3#KpV*CTJmD#FZUNmdg4^Sidtw%oK!rX$5
zSeS?tu1G#D!}1*GZ*W(1vvw_`NduwJe{rtU(`26JZh)meoN)>ycHs<<kl~CSC~5<P
z{lwa}xBy~@5sk#!wa`u<F<W@BEo|>e6AqX`*t}Whr-<g;J9q@e0BNlZd;MfC4KDW(
z%x&jjQ3}gSzN|3b-x#uJ_1hI}^RAS31-I1r#L=vMhVy8gbnS$0lr#*(iyLi68a6Iy
z3im1=O#8j2nIQzcacS1>359*JhY%B{<iF;9WyEVoKD{s4b3`7+`n{ITw;Ix<=M2R2
zexh4Yt+jn@dEWN1r}1^zz3l6}8CF$2S|SbvrtW(%+S_b-{tB37^=^1<BI;9%L`sPE
z%-w7y%?*uURTDDI1cRc(EH!h0@HCmu*x~vlvmMdEt2PRSp=54?OUZojQGjG*XKn0N
zvEdA3bKv*I`c4kEUF??U`F-)uJ=28t7%GojIob}WC8Vp)9Pyo`-1nJ{X@MEbec1TL
zStGueG`^+HomKL}RYAWY5o|1cAIIK2`^_btuetxG_EL7weMoMlN$Xb4Kf?CZ4Szk?
z>E9E`0$+L9$K);m?Si@F8zk-sDBD7Ow^ShCKK1mDX%w(_?79^r4pY<e&my^-RtlR?
zOc?{WSlkPjyA74F8D&@pqTNcS;Jd8~*qEw9>}B%AE`)^lCV%97)qYPTYI%rx#x$`z
z4XkRXKR?&$3ekqK$}V`Cut8u(pK{@i)P3&o)Z^~3RkvOhgf}}OS}<e0?b#m@{D8T3
zVyxF3J7WKlc4*LHOhSWcr?(hyOj9xJ^#iWNvm8boVKWlqFZtiAf?l9NaV!gFBpVQf
z*hzfH2|LNyZab>I3^`|cn}ZvJk3)e<I$w1k_1nVcfw`844YltKiQGF4AM<N7L8qQ%
zcauZ!km|u{Lc7Bfa4_{_B%&s5ZiObDpSQnrSlI7St&Px|J9cvh&hu$g+@C%?9mcig
zN#u?-wia{?-1++sUb`~q60ebSUH$<gUfu@&^AAu}e~m_rMKXE}+$8sP8IiXG$=l*O
zv_Vf{%L_Tw*-qG#8twGrA-|C)`+m0tL~M=P8FVXl?cTfjDZ6Dg_o>d?PJ~%jKMr4=
zZI^Zg=it1yU3K~O+LK69XRB{mgM74~V*l1_tFO!7qg{t=yzV`9`8&y71fOg>)p<l7
zKKu(hfNaYK+gsHuTZAh~-mM!C7HEZfD@fww`0MKOcaW(x$<z+)U6QGvRiHKFwJ^>q
zx0rSY^|QUTCb%WIDOgme3d`zeA#)b}EQ|i}TFOWk-FCKNGa1~7R!lsu56pKQ4Zyc)
z@9sb^u(A!W?QmSTp`NjqAa=tc_+XY#``xGulm@TabKgrEt*nPANh6`CHU^zVLn~7y
zBb6)_2(>oAtc=jUhM-ROSw|EeI^C^~6zR4(a^T{Oas!qOLd${heBICWpv&&(>9eZa
zaee@0`G_>;B8_96o)D`pp<RK5tj}Z8yyjVL1iF8__7t`XF*CkF+g{GT_H?ZY$JT}R
zMa#KP?Nk0ai$BuDYP0PiXOb+_VXy62t?f{q?I2EwcWCcoRI+PNEThPkQOi@+D^Jn-
zK(0X)3GCW0P$@pv|0r2+)6RaPSg$`r)_v$3AS0An`<;&do<!pqC-S>n<~O{D{7xZE
z7Q#m-UD9dS>U27Hbj@a&MDJ+eI#+uMao92n^ti(q_g&12Px)WR`}R+<_(Wf6!&?`-
z{1VaV-x+Sj8wR^bhXoD)`+KYwU`>NofBj*c&*qAFyt9ZGW2KwY1<y3JsK}o|pMyyz
zEbL{<&m#Tdq!ov_smNst-fm2Rk3S<Fbs$y#^M|1s$empyP6VF2(_sE8-DLP~Mht)Y
z%g4_Zck1!chu={f9?M?b3+HGFK4;Kc@MZ*^trxp$u3&Fk2kssEB51{J-gne;=G5K~
zurM*zMZPiOkDkx^IYT`A6KETKJkn^lqkk)@om=^Ziu)JDt$h<#N8NknP$=J%s4h$W
z)kj+WQw=v>S+G^kdBop4o~2@SY(oE&4^y-q+T%FkKvkF1xRJhyNpEF%J{$AEC`{s*
z;J2HZptWv#TS@&wq0OOT$LTPougpXjKY<ap@h@!D9S#?0)QfH357w@G8hzn(O`Sn`
z7Xv}3TT>Xb#GF=`W{Ek?6V@tVCe)ri-F33#v(!{^P{XXJUE7T2@6-4sWW>qZ4=_37
z0I~pYL;@Pt0*Ti1coT70+6p~x663zBCUpD#^-SI2$&z@ua{QqZQnDC-?vMizCo(uz
zLaDBN)F)N6-@k1Ild$fKJ3fA|6`@G8Y4$#!=FG>yJ~w*Fs#Po7p9ekHVSZduH~l2A
zCH1hf-H#@_Z6|AOr%`HJfy7v(Ju{l`wocF{Z9cwnXxDb2L&i5Bv~Qb#dN*54N&On3
z{Sa5*22{l#A4gS;Md{8grquA7i}v5q&V6EA4YuoS$7z*SXurj@i2XasX}^*W9okg5
z6zIS|LrBN;S+80DE`f712w*nWPG))U!ZDQ9n3r`9i;!bC77BSw;<P_II7D5Ezvy{6
zLgis^D9r8{xqd2Ss-0hqJHc@-oUIdX1es83jA#)Uin$uHYyX3SXdg==yj7#cf;cAa
zj-^H~>^TsLDn$QM3~*p3=fZoO3e3LB(Kl70KJU?Ib;`Oc>lMv}m$AT{C@uI-g#};F
zXF<5yfi|2c{^CMs%RoHe)0fj#Z6uyCG5<3rKXz?DSVmc*v_;^@({6GN)aFQEu#2XB
zcSBh6<UH1hG9MV8F+uO_4s(Qv!OYjLO^^k7AOv}#l^^WnYe{t;jQ7N-GhjGE6o!`|
z5lyx)1diQ}!u256Lj}AMm?_K~&T*Gl#e~&HA%f}5FHral&Sv&^z6mw^J^Jy^kwH~v
zSO1p5+Bi;4+FJT+KSjRqz*;shdRPIHFi_lHl3E$Vaw}RvEkyx@P9n|}#IZb|7E>~;
zGq|JyaO3YwFzHMzsi(gQ*EX2lForJUX#G%8cCcuIdsph=K)T@pba#NkFDNMWje+dL
z^nOcSE^+U-eGN;tpM5{#R0J1S+zO$=?(JyzSlM(Y3GJ;Ppm@^u^ep2p4z%)5G2@$E
zm#beuf&dKxxF$p{E$5;OKz$Zty6I~Z4<JW&4|W7n^CRCweE&ORc~%b<lHY+(E$}6r
zYX76ZW3Z{^l|Z=1S<#l~o4i9>r(*&uFA<|XSGMO??cEV<&#jn?)q%i%?N4&fh>z;p
zaW%2OIll(ezRJ#(T)XuDHkxw@xbd+%4!Pn}57lA?_$A*PF?S)~bKeEu@5(`(_NSE9
z*q{0NY;8o@hn%fKr}Mvu@n*ZxJ-T|*BhzR}_NFBfTO{ArE6^Una)<T;S{^(94=_Za
zHOltt<Kr30M~8N;p7pyYDKhnr9nGIZN(TzpWV;}mZ0CjcJq$URFFx`^P)8ruY-?k)
zm(e)+EO?y4<m6NhMhKeh3qnuIuaz+Cd>ym6h7CZFubHvFDX5G0K@V=&p<_}4FyT!h
zbtqxbnLi-EhQoS{p#d=l*GFNo!to^ytJyQpFkY)3@1q<2c?_<P*5gGnUM=HAd{^<(
z6cA7G5~pK!1Yr6$g{&hlE%t_qI=U_ZtrE`BG0p%CtcPC+YPq^$g^rsYfHOnBep~ue
zz&J<68qDda5>wt`z4)rlA<-RLiH^QSqC0JEozroH!7}vaXr1S8uw8KVX$qlc1Yyg=
zXIGlT;b`=-b~!@&$4xHNRCqdOelsLkVGo)=W6s4%{b;<2SJt+>;#7Lt&88*Yd(nGW
zp%3pGhx5(RA{#T&9OUn(%TZ&rxD9{(VVvcXAGMmN1#Ul%uYyL4Sr{#7iMZ!DJS)ZY
zJXh*Jg*qL)Eyh9k3fOd}&0mZ;xaS*}Bi@#J?dpBg#LDrh*RF@iT%(tMlC-57A$8V-
z2<<yKL*hLwpS^h2XMx|=`s3E9TA2Ww7T(6Bmr_F{m58N{N!|f6xjCrT^h}U<FZZ19
z$g?~*qzpvsTd4#CsI%IBUj2c2BF`w}?q;-k96yGExr3fFgIrTqovA^M;UvYdRVyPR
zhNG230XItpj7P{IhQxYpky|$)tmSHNek48ui+~ksjC)(wAS=7pP>7!Guy^0QeG$A9
z#&h7b_e4v0u4XDa-<hi&0Cq``8nbh?_wj_G={?VZXq*87FP;P2(Xq?@LjOsg$2S_?
zrei0(xsFEs#pJI;S;x-D6b}n%9CNWkz}gG@&viE2>glhuZAZ6MuP@P6rtAi${Y`aG
zS1y#<_bsVkE3{0$$Fc3OYeyEqYQGiYadhH*B5oa!be05Z3E&pXIM;jHO~B6fg1S}&
z64LVnr1G_yO<<7y;TTM-*rd+C#U^D;9u56wcXk87c&1+7AY$-W2-&lG>SH<Qa$V;g
zAUoPxJ{nW#8`hztUwHzXRJ)_T=ij^P&)^aU`{-tY#(&%1RpJ|MeIua5sBPT8wyPFj
z3c6wwFpCSfYhje>#MmX#ctvF`U=>+b{}5$3!}pe}a4Z{(EBD>!GlvAZmo{NGD7@v7
zp3j3^7ThuC>gV}90(KBTk8$(uYnXirw!ZMSHr}iLP1d#xXGAc8#7t#?H#B&^YzM*E
ziBFv$UiDEmO;fst%7mCoBAuT0S+aC%@B`tJsizgCaBQmK^t5HQ1M1*8kYn5-mb;{%
zWAO;iOtnAFLppBThG@5-r_4prElBKXPs1i!lpeAfs-s5=VUYGe{s4K46L!<(*zCK(
zs^|wsi#Q*$1g#EbXLDGAVC_6sRV`uEzFnuzbvkx!;*Lp2t|M$GwmqWp$G2*VMl)Cv
z;b=t|CS=-J3{f1k)4`xmlb3=d6Hqs`{UAtn9{vYpafZ_|Uq8={t<hKo=ipyH`av7k
z;kjaf=!eyIIeI?Y$aiCJ(*=JFF#a7>Ws#lxpp2zXC-RJ;+7~UtUMKxrW08is5#b)B
zS8)Q<EJHubb6TThzN4|y&j%MX!OINjzroeN%2PRV`B!=KxA`ag`rBrpRJ!i=a)-DO
z|I`f%lpyzr1Mh}V`^L-U`Ob1kfi~_bH??!jooVhGQ|cVWoVtuC3;zf?5~(;YGL-8g
zu85cycc3YMCGir3SIK;g{0(`lQJ$%J50eu)^7{*pdx{2mxk2_sirT%1#j~j0YjPC0
z<Bqu%ImKYat$^mlfET9X9ZpJPxKGY;nx%9jm)m6D$ue?Apl;@%eSeO<l%GqcRD0>X
z<7BZ+NzLNT4aRP}zYhGRngX3xI;12tOKSI>kdYtr<+X}=^BsbJrop^vL6%z08AeyE
z!N&~jUgbi1cS>%UAJ?kIG8N@ODf_wSn+d)zScXvQ4&}r<T$H?6-a<%?tw+V7?>=8`
z#Yw3Y;@J&dG9+ZYiCBbCa__>Nj=1i$cv84ZEJe7V>dn4ZnTwWa$3M2qT>P63$if`y
zcI?_Q<jYIa2|fa6TQO3@FRp!RgdxQo<dY@y$N-m=fYQ%E$r<`Z=~7~>FTSDStr3)*
z@y^HSr3|?!YE}3Ik#%A0fW}A(k``-$HGN+<ZYDu<4VvZ1i8_3P-U`(d^CwNthRHwm
zuo!x6^a$jH`mK6Tqum-UN0rA3S&@fQ<V780iI^*ArtB{&5yFy;zK9p2#i{Z!mC{$E
z+}-73$eJ3PfiYnQ{&Ei9v(6e+4Cw`GE^oRim!)JsVd!BI>W#ZJs@)pt`RpGJl%}hm
zTJ@!r6?G$!JEenp;BhAEt7rZKHN)Sg)OThauc{!m?z}i5Ve-OT>6E<4KkLPaN$FF6
zRj*FIO7L`XU+6Cf>s-mb0C816u4+;B1FXM5sj%;y(nTiZMBRl#`BAGWJLV80pYH|-
zl#%L7$YIw~8j|ZOH5=OP6i6=vwat5uCV|Fsl#^7Alhc%JZh-!k%6t^}UHhSn(*|-G
zSQlyxQMye&`9_vE26CieFHfJL8(r&zqat-)jZ2i1>XW;cmNASHXUKNPSxvg^yK+!s
zYIYvn+o9jNvPF)Dj~dT5dbzk?zK3JoC@tb>PkB;{ICd!A=bc=YvSqNPP!Fl`EEijo
z5zFXXRC$dWH>6;+ZY2ZusOn1(mfx>)Y(rhg8dbyo7Qr1<BS$CvhU_vSjhV6s=v^|*
zZ#3TD7%BeU@>D$+djh{K>Gx~QmzD6pLo%u_?_DZiUSD`ul7Gx%TT*joW9(9M9*$xE
zc!~Y}KIhn+11#3(P^4EWTVJKr&cN}uYhTfO>-lo=zq~}cx1g?V+|bucwWEJmEvKVr
zoPypV6TM?kW4+S*T=XcMTV5{amoGVc3U$YozZYaLX^d9v4g9UwAICpSU@y&?fzf}k
zzxIzj>__;XMD;|4vd`t0)+&ubk0U@&s}jFtjoAsQ8Do+fHx-8cjM10mKteMx|Cxk7
zuj?IrluJ(|jKK%_RAVM*SY;@cG1D?;{zlC1l#TvT%})$YSf4XxZ7#<f?YWQ>Z=N-1
zs@dD^vP8Tgq7-;F&opx3v;S7Xp5};t4vjpskmK!g_N=sscL$OV*AD-D&g>H}reoyE
z9++dD8s)yc_EFxfxl$?ZGCAY)>xh43<{GaYGiEiq1@>N?f8-)u&9GvyPT-i%m0(wn
z1F5Rjp20iUN_IIT;o63J?Uxfv@{iOH*9pd%FN2zq52eGi4wR8vC+14c@asP3dR)7+
zEbNg~8{v$Wvn@jdRebiL9Gj`Hetw<$ir^pNxhHz69R5DQC<EufxndfCy7iB8&RTNH
z6`!Gp2ERSEN!D!lvKth-&QZAD=jxyOY0T1k(kzyWI}Kc6QMN{@rlUS)qQ9_VruLsH
zUk>V!eV$*VM+fAkR#jd1UfA<>UAq~5Lf{I`=z9a@;@>Y(b2Y9Lt1t#DZ6cPG{G6z|
zHnb~{65~-1IS=s5SM}&DONFFF>T1`8Va!v_s=G^@IIbwW_Gv~P@U#!t`LoeJW?~$i
zB-;U3JjPp_-uiB~o51)z^~l(M^zC<ZuaYza!%FawiE^>8<US#L8pSc?qV{5_W7IA+
zOXQc*#*CVE#(B2?{3b^}&af#%2mZQ%cVZ+Mjeko(oikvLmG^=Q^BN`dTnwz*#iG7e
z$|vsDQ6EO(*#Wo>skpmW3T>VQI!3=!2)=m-Iyo$sWy|&9<k=IRFe!e<*cg^?D79x^
zJ=ZDUL2Ca)-yM7L)^dpBc5D;x$BW<kb=W)B>WJAypNGE9^xa3_Hu@^y^X&$gfjl>W
zZ^Ankp1c$y4V<h&=ujMhTl4FwD3K5+PfZoAZBs>KE3j~Pyu(=PcNWjqb7>;%Z&O7c
zT;msk=ZKCpaS(0{+}?i25pQ#+Ki)|^k1R<SZE!1bZ<f3~Eqa=W_;{)~aK~g31@~CO
zWDy6q^0{=e?$fDaPs!wqvT^-=s>ohGS*(U@zB0pyw|+KN#OC;)bMU;-ogwDJUH+)L
zSkcInZuegi;%)nhKfQt9i10)EGsG^qkxdyQx&yYxY?(g(4Vvo_KJn>nu^Dd8swrX*
z+?ebvUp(vQsMBYrh`Dghzvk(>|Lkw%7qEebbGSYI+VMgm2nd7sf2T`3i|Z?~j=0-j
z$6+{~P!BNjDRQQZxvq2(=0-i=;}19Rbo1^_7v|;ZVkcnEed$8npDwlo?B7fm?SRcI
zFlS$xE?NN_AAtWs_yL=$(?#~Gba582>01c*K<5CPS0il==sX0PfWW-ycRj4aV%DUK
zLxAPA>0;tq71j=SyI1*7!ktrhar*A`dV5ZLOwp)@yAiPZJLzKEcmH*|z2$4*H$H(n
z`6*=lbh?Oq2L4||HfVPSz9%=O7d+FfzCm5CNd2M>VTOe#!ARbR%5Tu6{gMPg4xk87
z4WI=bUIj%{+q6m|&DOwVNirZ0z_dkhm+SsDa5n;W=+BLCj|18OF@w{D9l+D+>j5+j
zUJp13FnH+ho&c^*$A?`3t0<9aVm06_AYzD0w@`O!yR8E-GA2#z0nGWD!nf;g%#B_1
zvE#W2utpDWgNx6!#m<}j@lG55;V4I(KRl4nvp2)Q&MiITjCd1)xAzi<aUH$H*%*M|
z5#TrS`Lb@Kp7uE0Hr;O?(X9;n^GLW8b$<@r&AQ*n>kyt#>tV}B`e`)6ZyoJ_Hsbf>
zW+!~Pcs-@<9wx@1J^&K|a{%4(#<LY|!0`XO+-lI=cp17m$<SfIE<jItjvRY&_?&TR
z!UgClz7cj9^9I8o=%&n7<6Zs2EOFSa{0HyP5*_RO<De0L?qgXZVXF#n|DP<;*pMaG
z9K=Zo^dBqU$`S_vjC<guKW!RtrvY&{T16RPC!hmhja7Y)J<cj(zpnh7Z?lS`nO3m_
zuqoFn9P_LqtkNp70R|5}xj_NrBK?8SJ;gV|dW!dtq&MjNJKW`%x2*^KJ7|4H1DE_l
z5C1R0G3d@&>d$%HzYh4nRQ9jR`hQE;zpC%A>ia7l_(})9(t)pZ;42;YN(a8ufv<Gn
zD;@Ys2fosQ{~jIq|Fw_y-=G8C_Z6*pkFvhoyOe(ipT|IR;zzh78<5=w7Z6By$0xY6
z3ecUOz&QVDe_-B${{M8om!nTU{vEuK#@xFueouX=ycvJ>PcMECeX00|^|)(()-_GS
z&ojkwK=qDHG4dB(aR#ju0paU@sp1@f+X0yPw0f?F8~seCSW~Z_i*{#<Z2;?UGDX{7
z6}D@CCeAe|KWXoIF;i@8$`s~<nPTCq{%|ATf5x@GhI|1LXD_CA=zONw_36do-Sg29
z=fr0yTL)zFd8Swa*a$cQi1{K@6alscWr=E&dN;8NZeDPfI1R`#<Gn^mmRJpl2*rC0
z!16v>A|)(KoQ%p6+1F%=<Y<*Ha)kfg26@;#QavArdlrx!uby}4?x9gxV%G%ZGZAzq
z;e83fdTW*_0vrdBMmyZ(+p@$VK=*R}qtB;7BOxtIth4%QZM6CQ-RT_zE+I2Z>;NQZ
zWr-7j?s0m0KAx-MZJ*sW{)%sOeP-H@k3svBi^F@O`_F{2U5%Uv`OVJ~F$=Q9F~AzU
z&k_Zw(?warad(!m<K5QDd$PpF<yoQ~aNs`32=BR~znLZWtU!Hxd*`pU4)h)ceL(ek
z$PMqqHUnb50~%XU#%-wQr?N!aPqKuW@5cby+ac4RW{LInSt1<o%M$j0mlwbb!1Y_`
zUL)SM0bKilKaeGMz6cu4Sz^OWz`X)GuR;%B2kj$SV$L6s_X*(MhOPk`-$6M~g70^c
z|9dFI-@29|d6-oky2&b{hg*dU5Q}$h8vv2F;5}T5Rpg{1Y?4*12e@vviaB`yCeo~8
zPr6kcvs*<w-ouG}tB9D5_i=!jIaaX|u<b6ZI5-#Y=jP+R+(N5pEU=2!LaR7YY!%wF
z%fGApN9*_Cdey($AIlIs0GCT2_U#Pe05A@9Vg>YIA?lgWBT--5P%mwe`CQ0t$Nd??
zj56Ed2GWeYM?LSnSGnzQ^Ooa`QMY)cZ{)KBXON6%JI*;}uf*9X<asF=`M_kM0k%Cj
zSrk=I7O|@)i<5xO-%{xodM1nL)sw|>z{Z-%BJUxc-oqEuHS+DA7sGQ7WQY#H_7^k6
z2>|0H;5-!F);BW5>SM~k{tp?#`lk%&6=ZS}=da$&5OYr9`Ohf(UsN2XIjteh2N@!)
z1#$-L0-R_C{SPz5nvXKX9suL5Zd2}IxGT;B+L5Ls1Gc`PLm|+cKG4a&(4~G>v2K7>
ztg%>eRs=8@I(G$hatQPjaB`?sghyFL%2ige`D&|3iw0b0#rX}Z*acu-|11Q`Z5_^}
zX#i`K;(Ht1>Z>wDD}eOFuFeqa0NVk4J_z>&AR<~lm%&{P*akQNI00b1vv9+&%@DBw
zgU=1{9{`*LEWZvi2E<;Eya7fW!`*<eoq&`Wqyd};7`W`OWr!jGpUpR92s@w*&<=>Y
zF+;2e>;QBCqGFL3z(^bD9!L0`VHv^&Fv2_FFS{i})B_F!7`|&nhByQ;;sm;ZvXpV3
z?l~TD2cNk#ZuzcD<GSY&nEzM)f4&|3r)Bq5z5Vyr&40S?zoP$D-G8M6|D8I(emM-6
zPxAt5`gy-{Z+-QlsZ-_npE7N#*a%?V@)~De+-%hIcKF)>_UZUW0dN999KVk+;?Ui6
zXV>RI+<%ilP$q_-?y*~^in+Jpygs04GQJ<cE#uw!PR{CGrle)iW%{1{Mx2F<@I3>r
z`a2Bho)@2aPrSUx8~0QP;(1NCL4)^9@>)gXnQnM~xwCX}d2vyuyS&hnd!N%)ylfPl
zd{=3iGgLiC>A}VwtD|ho3ne}venv&P)71wNc>{Qao*=_fP*qUqDy}jDX6EI{h|Ynt
zOUnx?OGm*es<_t~)%9_ded*%t;xgQmI#8#SKPB(J%3^1@{-_@GM0RJoeTqeY$j#2I
zD8mJ?#`BbA1&fQb%PK?dlc!lT$Mn|;OfPUb41ack(_!QzuRSkzUZY3LDlRXsDlK%5
z%BUzSE0#CGIt^*~aMt3I0(Y6qIap6*EiG7FUg2~hogtvS(q+ZDl?CO-^Q?lZ(t>iA
z507UlP=lqJE?23+63RNIyrjZNntNY);q8l-IE?~M$1S2LqEDjf;PRg0Ibo1J{*Or*
zl8Z_xE*j;(TAejLKo8AzRk;gYp}E=VW5$jftOw32u40aiha073>dexzVkw(JdI0X(
zTvk!eC}DQUlAbH{^3N_UDh6FypsR9=UGB=9qN?=rBIzA91$x5RLk$iXK`+D<tMlRn
zMgb!NulD3!s8<A1u$4=yHv~rN`TozSi&&at&vO(nEAF3LP*QBo$zgfcqiKBgg9KnF
zjo-nY!e?gc@=s6v`a988Sv=1ItNpGVcH7r1#h(i$_%pQt7Se<nh~#WMKHYq-vneDj
zVwx~DheX?_iId~gL~}?Cd>VXBA$P%N($2zA+SVd?n?u6z_xRQ{q1BV{>-baB98!kB
zoo~XEovV9dXVIfoWFes)SnXM4w>5`8FT<+AVspr9{M|`rE@UFiO6(7jmGA4j4^Sw6
zeYf4CzP|IsXFr6Z?f1mbrR(h195M%<G#sr(*g}cR^~4uR<TQr^pT=n&xJt!)+_4(|
zT<roLY8qXA9K2Gf^RQ#H41L!K4XT!*yJYAqD%89rsPphQ_RDWx`Mo>8V@wib@bx0U
zO)Qf-2!+-A7%Oh;Ev-UFR8fTsq=^JBx459H&_S)8j;pU#n0~#m)n>O>l$93VCp_^E
z$##e~8Mm_TU+;-8ljZTmyY%peDiyv_K1bFkm%v8tpB~0{i<OJvyJihcAbJ};@!KC(
zGTNl4`_ZHepa(r!bzmE;?dfJ`&%*MoC;kxQT0C!uz;<Mf#J<$P`!2Q8QW%w#A$(Lg
zyY?t#(iGB&M8aFM9mKZog5O)i%SpD@OYcs4cfyP7R_eDNP@aaZ2jQu+!GdQ)ECitS
z19^ETkh;IrQhouJc3piD!>)adn^sCZD;xXb<^<2l2QAN4uSlLIp4<Tno=MCv^ueoj
zkEP~}3D<N@V%9;HM^4~@#cQMWaK}}`gfCMaBimsH5Qu8+CEOqZ(~33EG8(Ms{`nl+
zjJoZi)vl~%I@TaM%;?&+tunUzcHF~bc29wQVp!JHWGsK22NB0>)1(x-#Mom{nWx7f
zhi8URlpv&M)n-IW(HT1j(I7jM<&hTne1?BtIBW0;`|_R-Oh^8X+e+R5r4H@=@6r@#
ztGs%l<Z)@v5JmP8ekYig4fV?{e(WQI%M|Pl5%?e!Byep^K|bv+pGCu<?R}W+c8|cL
z7az`2+S=Mf=k<C<V4B%Ggk{lO45iQ4T7LripzIyOPt&wxyOrt0)(6pcHD9C`Wuy+R
z?^=a^mFSNGgc1q1r2KCL?@Abd)`fAJMUh7MUz9b+J2bjUq+L4(DJY4wYk3<CiTJ3#
zikmNB9G>PMUw-90%{vzcWS(GT{u4xF<`38|%D@?r!6)A_GVrA=LrU)uHUQ=^19?cJ
z^`~W<@QL9N3P2OYrdlP2rUxhnAG#H2DTINb#vbq|#DCbZ2V}Rj;m#ZFd)m3qEvz1o
z7GhcbBor&#viczPM>AV$213KPuySzoo5h26AfUOjiMduyB5!BW4Xuc*C%uLu6k01?
z2XoDDf{enixSe>FUw97kyBYbNdESRFwE6KH$xmP6p8#H^S;4S#e?geXm!>V>pC%gS
zzqQ{HU+7CSmudDg>~@41>{ktPP0DsTP`XD^x--c@Rj+&@$gMNyAfa_kbhVGrND^Ak
zu+VO?qi+XhJ~6EzrdZ7(g{chVt(<|h55eTGmO#u4zSyk{i)Pr*5T^azA*HG_vy&Nj
z@@9cLUxIZEYe87c3SW`>xQ1rCVq2Cf2BOH+ON?=s3OGoP>KQOavJ)kHL-(Kn?DvTs
zvE)w8jaCAK!aD9SxqE;(i;BE~xi3QiO;p1s!R@dKkO#{IwEt#<6_@Gqt9#l_G``=T
z3oO65SN8)rMGS0w<RNB;w0FcW`)Q{`*@mV)0NU>0uPc7KC_vv!s{>tQ&H$BV(y~HT
z4{4b1KbEE|b@DOlBD#~2C+!^+5#5bXKdvihe%lIHAWe6P&<;VBZtErnbAbfFSj5xk
zVtM$K-k6IWMhim|{64Vt_9DDm8d;42dpmtg;H#dLfKghwEcLP1p(&OjrS>)kaxEUs
zRSTbR0VWG3BJRhpo$G`h<kq3+S(_GPvedd}8Vw`MfM*$?ZHL+G?As=bt#PEZ97ASO
zqxQy2oK9^$1}==)4>R^j1ZXc}VxYNhyWpR2eFOQkyBU8!R7jdT=wf3c0ahFM!(8hZ
zD3&us`{n)m+=6q^uj7+`quee=uz1$6+%a|Fst5t~bJxJ<fUhABzS<#W@NTUnCgRb_
z7;hF%pC)Qe^(h^EI1OdSL;bhqgTib($_IfK15Cu9_|Ty+k?->%0)17j$tdck5)^gA
zuTj+bSGW61nGQZ#$~*2;rNmroBO-BLx#@XTu8;0(mvgXfd`9?o86MXhvJ)QunnQLe
zUv+axJ$x{T+}RwmNBJI<^RVN12yzbA8k*WWx10oH-XW`B$Pl#=v~8U9(jD?gxebD8
z14C|M^-OdvE<ix-WpDcwgOyg_21?!md^@OZ`BA|9I0^|dDe(@GsP`}zV6pCBj$&zS
z@VY+M1kewc^lz)*oRJBB8qqz}nvz~hdSi<uk@^cLXU=1IQ@rXBE{vNLgV@47$dG4F
zG33cG-$1nvq?u<Z^Mt~1{<&Oc5uz>n)#p-%+46ai_QA?8I=37{j$W}f4PkOlx<uqs
z1SzoMV2B`3#?L~g<|n2I?ad<eUc5NMd$i^aSFq=Uc5NX{ba-E>c?nNv&LUpN2E-da
z66VYgt0-sd?I5D11e)@=4Owu?)E|LlIrm<${E@s{#1o$*^Bka8ljE0DSWU`4y9V>@
z;P6`5e=s;)$k-OoBUJ9Rr;vBXE3$c}ZNNNyK?Y`1Iv>aC=a7$`5GL5n!|Q7;48_^%
zKqvx^UC0vJXE~o^ais!^O0tD^>)9_lx0b1ZZNZ?Pcnzl1D-eLX*6cgmJL}xqZ>#aV
zn->Or^3;}`(V$aN^Mzl<W5F#8S$+@eWx;%EgS;<}Mac^&3h$uv-;D4LJ=u7fY#wdu
zLx(&E*3(8kCSN;iZ98gh>uYU$YHhn}ZS}P_1Rkih9jvc>20d3KCIK(RfFg6bF%-rH
zIypz<T>HHcK5?$SB^f=QcJBMQvF7Xs+<ugQ5SnfpgUZW4sO+=+3Cq1DCQOopyaQ;k
z1(J%)0Qpy^Ko08>K!P<sg4#;laI$qH!ng2`XL-2Eog%#r6Coe%yGuZO2vMn%C%UiO
zLJHo9&Y5QK02z2kq`OaQdW5rYi)m$u=K5Y|r%c>gIkK}d&KEnpVLQ^vy9Q;Lb|tu}
zXP9?LG#a<Mg>Zh2yoGQyh!}T!Dhg4ZxnbVl?@k0m0Rc@74A9P&;=(~&D=eg+-`Lq%
zeXGg+4bLQAq#@ixcc(#)kbu1F<oaRgvF~?thI`0fH!H|HW6&1H(}pfYhO>qs*gGR$
z+g>1VQyRMaWI)<exXwen6=_*H5kW@fY&lSg4Poy9N(I?iu|26(Lt<N75x}UOFp{O}
zk&F#q5>z*1NL~J+EyQa>%WyT|4NJ@oG_<oj9@8xq{_(dU#WM)o%KI9Y%3B+fw6>Yh
zecsyOm6t(G!@Us0GLp_OF)uMMZA!w;hd>1%-kn4tN%B7jnapYKw|)IhDEL;WwuP!0
zuX94fu?2G1op%=1MzmaW=99b6b%GDE5gW2!Lv-!QC!lJ5QE=_V<B;woUN0hC(fU;`
zt%$2Viu%GZxe=H%PXy!c!jR=)CCELqdJ->25$-8VV)ghjKx>~pjCp_E^aI`@EO$x$
zA)z@|^EQP8+DW382(1+t_<7nxU6$q$lEoApdoH+=MElKn_EUA!8|xi?z}=xbYJQ`#
zM|28P0$h=}g<7w@Jc1PK>!$B%kTKtg<MSSSUH+~u(t6RI49MRl4H(_2J&&b?v|!{N
zA}ty{0b05uM|W06`4yS1=X9{q98qiyxv{k^!5~8uNJe{`mkBl4fB>q&QJI3xSrYZ8
z#b^`mKy@;)3bDs*;R6<wBkxpNHpHK%2Q9lAw+Q&O%<PZKM(NE~#BeEyRD_$B23)k-
zA8}Q1%Y3B-52MbzD8WY+ekHgG(X}6<>NPWTWywX{K2oB$c&}aptq37Tj}ePjxe$qs
zQuDH+Effm7kZ|eKGzf}o`hf6mg^&r*2SgZ(>i8oIL3wEd?Wib5(4zI?)K{W7?-@~B
z;?7*J7iSw@WSm1nZ(5XH+jkzDZ}qi8Tlome7FPu-s&lLzLRWij9!neePj<af&fP9(
zUc)B*LD#z!_vdZh1Qm58JTX-)>DWTQUE9InHK0?6D?(&gt!+b-ZKK}FHpbQ3HZ|Ec
zM@YGN8WU=5+nQ|KBkJ-u$eWt#>#5vZ_u=X__m0l7RA`5WpgP-ntpJMM>0V!F+u4B4
zKcUs2$$0a3?q)mLB5iP;`Zn&Dn8YhrI$iy?(A9Q57N7x-qVt!9)y~Z2JcWsb>ng|J
zL2maL{An0~KZ@39FKMyC2v>w^I1^W+jcPN`F)2$cT>bS@4}?rTlh_a8P@cMvW&nFI
z?-0Hd(|+?9giNe<=L|WqreDr~P(f$VYodGM<uSsQrd_jEcEaP0+oMJ~67XUt-~uV_
zS&VabJ;23oXd462ckBdbzS_5(Imhi=JNgMN1B$U_2Qq+m;%}{Aoo+!-PuV_$i5P0E
z0sEUmGh>2F?i|>rl~?&`51||MuWhmssp~Dhffo5_;m)wscd<pfKzqwZtkIy>-S(Zb
ziQSV$)Shewa`ootkHdE!Y{V6VlZ!bpti1>FY*-Pb%{khVq+LJ70j-iMdx^Yhp=+sW
zGnl329SXFKS1wnPem<zBqd;jHxZrOJVvx4q9$gMrmsMTXiHyhF3zW@loKeKjxc4Rk
ze%_swBgRVWld-r3dO2)Q4+9nBZ(w{59yfr$%l#PVQa|YBgSTPas=oeGF@$(K_MO+Z
zRj;(JbGJNv?cT3_zGDJxCIQ6P(?l8|2apF?2&e?O0D>3OT=o}rS*+-#OuT{g^1p=3
zqeV(D__SW|Y$2EX*)N9#ZcZ=wg}vY%z2GZ*!7uLxU)>9SO)vQMz2G<Yg5TT=erGTE
z#$ND;d%>UV1>e>SUcRcoOq__I%OHV@=>?zA3qGwE{K8)F)xF?1_kwTi1%I*^yu8r#
zG9pU5T(^dFmA&9M_kus!3!bz6%l#^Q!8i7TkKxdAnO}7;__ki~3-My_a=(+k;48Vq
zaG763pUWVDYU~AH9d`Nj_P&?LCn%%0myGnU;p=b3H++*}FVPD7e_0q0r{WvFX=y^d
za_HboZ@zx;)z{uS{>MMOeBw`UzjN~4Q{wcWTUtN-s4Fkko$A^}9O5z|q5K^TF?@dy
z(|u{1!gZg0zeV@Oo*k@w)!*HSeP8}!_PlVF^2IIvC|dbGH9a09eQD2UG~6hC5l<b{
zZj!!R{<8Y9Tj;Ak8}t6N@$_v@{ON*I3G|tN`_eU!z?7X3FOJ&t<TH5TFVgP$`qKVy
ze;q!p)_i00S_nWa+VNt`@?WH<iR$~WeEz04k3$&ica)D={?NnOFoid}-)%!3KZQ`X
ze0b=!YxW(Tk+vBo9t-ZcbM?%$gHK(xe)m%qPvxh5-4b(l_@l49HYaU$-wo}{C)~Db
zZrY#w?;iJNpGUVWNPB0-V)Lsnef-j*wC~=q%9ggGqN6zNN6%J{*#3(be^{FKyPv$?
zIpzB0`;Mk<jr_rjLx2A3zfMX&x$aE$OIZ!y*`EHhE8l-`#FnAY4W7I-fB1yD3za8V
zOip-d;;GK>&RqMK$&bAK=?_0^dEjSvWUL##WbRcRH@)$jjC)QU`uOJ2t5@A*eWTy{
zx5V&mKVEOW@@MV8j5zh;fxlbt+_dvdpG|8&F0vi_<U-54Q}2KLb=#sRAMbPG_^tI5
zGO_Xd*ubCsa`RQEwq{-#?q2nf`<|Dwr=R|x?@UM?TmP#MbN@VV(u?y_y+8W)T|a5t
z64RLX)VlEn-n+cVhs~?~^sUA1pA7%)lLzPhsk;0JPsFS>&0Kh3n7i%H-<2;KH1?M-
ze^c11sw%3)On12pr;%cc`4q!nfh#6K|A~aeF-gf|$Bj>!kUlxXYReSu52cC7htq@^
zJ;8xz(?mbG$Kgi8)!@d#JqvdvT=86*$bcIT*A6!d?mW07;X2@^zzsr=V1@eyTsvGd
zTIfQ!k#JpbuZCL<cO=|(a7V%22sZ=ncDQ!9yWq})+X#07+(U3X(UOnDHHU*QxL3pN
z;By4dIzFE!QsG9!HAjLUxL3nXV>sL#K1bnuPCmnR@HtwD<$Q*_n$IypY~VB8&3ul<
ze4Ed3_wYFme9#>UKIkS0ahh(CN_VwG<#%<N9<NeQ50~jjx>R{n;gY_2xh@yDQZ8`G
z??||mb1Gc&l>t}E1+J7gT*}+LLdhYLF6!rMxa2nuF6(O)T*@^SF3X<*HyqD)xKh4w
zrF`L1z7Du4aQVZ0AFDhe+TTy3^Dq4%zJK{Q5%z{p1J=Rb@Cn!&UJYBrBVlLwFdz;#
zhF4VMc@@IHl`f9Kjq{|71lSfn37f_1VOzN4VXUHHKR5z*gO3B&z-F-VGbR|uKyD1U
zW<3JbSpJNG%ovcMmhxu|FvdXAUk`_R%HNlDx#7UyK;;OF?n15QZ;<W|)?L0=<S$Y=
zUH)D#qQ&*%IvoOi*Y+6RC2<cA6Cd--3roQV0aOwE{`#PFI{zy5B_L^a=Ys)HX!1&<
zd|{31`NuQ*iXYFg0In3;=hp(_#hK5O04d_>iVVOMfF1A+Krx^aPz_ioc2+zAcoMJ!
z@I0Uya8x`~@iyQL;1j?XfPq2JR9qeOtBPTO1i;q;Hb6e0An4Z>WdJvz8n71dIN&Kj
zebBCo{eYJNM*$}Qe*ydr&;bZH?W(xe^lU{OU=(01;5NWiz+HePrspc$fE9p;0gnMT
z0d@fX*YteFLBLVKp8y)59bgWwuZRF#1Got=29N=`J$QG;HvlDos^H&LJOHQ#YyfNy
z-czvy@H}82;8nmM03QVZZ^d~)kokWr!U0i$o6Rp&j0L0trU7OH9OiAoRe<GyZvh?#
zeA~P|_`85jfbD>%0rlo*gPQ@b0*(XT0cd~=fRK>qg8Km?07C)S1BL@e1IC5yG*1L%
z0;U6Ig*;<k5b~b64B!koWv&K19CF&c0q}#6KbyA$o(_56ya%v9<S*vKfHy-l^Jzd!
z$Qg4xpfltHb9m?n<|{(Kb;s4A2k#gLhzE=ZWQ8utpAkCpz+Hfn(8L2(fCoa84y+A5
z@$zGUCjdVWJ^Avl0QI3CzWiIji=iLAd<gIc;E$mPU;A_D#@~M!`fSiyKs(?IfThp7
zrXhX$1V;mI03`I889W}43P=a!_sI*M3s?v!0aWzK4|eyN9lQci4R{FfXrDWSzYF+2
zU^C#SeeMc=y3gF;=Ku|WM!-vb<^>-H90U9ja1wB)&-~yvz*)fG0RzGo1V;j*0M`MA
zhb;^q1xN-=3M&Y<0<r-!0JFmu1<wa80yqG7hZP4e2dn^m3$O<8SlE)_9|E=lehGLE
z@V|g2z%jskfVQwZLM{M44~rNc)Hh;ye?Vm4$l=%Z9Wp$w@6h3ieXkrosqfXpv-^H+
zcy8Ze!@totet22m1;g*{TQK}veHRUPJL3zSg{8RSM*b~yD%b5Qi61Wto$m6|LL6{R
zOhmwV!O#@`O%bKeiujb2u@mAGMPX%1;sjB;Xqj{nURo8On2^9IdJOm$T;%<F;)E1t
z0c2T$tF%1PPjig)N-{E3rj>z;OrW<r8I@M1Nb-{be>yiZP>~7rl1xefH!7_plk6jt
z=r5EERAd6Z-N~r5lFV39cwbd%8BT`!=p{?Ej`ay?Eb)r;*zWYYkdO(-37q#|1fm7b
zWfk$`6H-KR;j)7G#6*=fg*axsuk_>mv;)1}g{YGRAF7hai^WyN#Y@#+S@|+=Nmp?i
z=vCBwg&6<!F$oC)@=Otq;zd=(_xi+;<fkZoiejL*yBGopNJeD!O1(?=(~^OTR-l)(
zCIr;96t}L+vVJ9<v3{AUT33X+`ax>Km;h2zq&g|T;wDP3o<2a!6O~L@L*xDWsY3PG
z0aDZJv#_`fA369$Hz6QlfF7#II+0|uDaE3*rb>)_$Ea$NB1{ZWyRQE3$yF(te2ny}
z<N@lG*u~G<PZUl^X^CsWl2RwSiwQ|%)N?$aoiflVBhb5e(NY;_oVZtgs1iRRX&gew
zBqdVTx@W0#LE(b2;}R0%RX0*OAz6w-DZvD>w4$oGpj<3<s#x#@#Ao#b!{jpcqSD1^
zos|>DCJ1=r$I8DY_@sj#=@yp9t4L1ixC@=}WJd2EWygq8vwut+S5~Zh78U!7kT?dk
z3oE5#6bldRJf#y52D%Iz6PPwhg(U@sC9AOHz%Z5qX~zbJjZ<NMaUufxUB(+97!SQ4
z!%`r+(v*1I$+TzzMIN65#vP^Q#m-_w>kvnF+hbEyWgv!3<CYP|B#apozob${;RF2a
zNM!iZDt|cqzVJev!gm)k8624yZspRVl4Y(X1^9@Exif-_r^f~XgsH#ru6y}_zlBca
zI_{5OyeM93&EiFgDG5nv+>4eaCyf_`!b<tqSy`CE0j?6C^QhqQKqB7w@sy?fi#Tu>
z6{v=XVGdPEz_`c1Br!H&8NNm;Eh{Zw>@L9dMvOEDkyw}VFCr-q{-RM6KNfiAA^$q{
zAnA+;h8)Vj3Zov;h>>y}vIhXqzY-6R#3TYkor;(3O!^fb-40WNCje98FBu;<MvlEk
zf66#Xh(mpoe^qM5@i=N+3jeB5^f!!;asY_IUxh(eLd-Z|sD1LU!k}j$W&$v1gq87&
zp%1{z{#YT5mXI=DW{1C25_XcH<tlZ?j~kOf*YCs|&!f<4I3ZD3JS8Os;_xKfTM|UH
zq{30KNGvPBg;WKFrRA;)r-Qz#ie>0D;L!&__;k_0r-ndye1kCjGDRtFxGpGkFRdy-
zJE7O*C@7^{SX}O^Dkv*<S5;I>L@E03g7P96$6d9wRAmb)m;oW@1o<yfo<2>$Hz^4s
z888+w4lo{&0+=8eBT@bvgTG0DWWZR!IKX&73SfeMjx`Z3|M44_WWZR!IKX&73SffF
ziBuRPN&ZX5-?4ykfboD7zy!$+b0QVSNS6P`;_o;BS{C9ZBOW;>H_VAt7-OvbHx7Tt
z15yAJkcuTE*W`$~k<wTI|BVNv04Bi4(z9gbnjA4VQerIrO94Qu5RWBismL+8VNRsN
z7%B4K1jJNQq=Z;{mW*7JBj!d*Di&*`_xeb{JK+S}|DJ%e$O*8zl7N%g2{@PiW$P&s
z=@XGY5$O|=J`w2?kzSoc?!ErTApIDmAA|H`kbVr(k3o8B(3h##B&1J5`Xr=JLi!}6
zPeOWX-<PTHWTa0<`edX}M*3u=Pe%GLs|RC|ek{_DMf$NwKNji7BK?=uk8wyp4(Z1s
z{Wzo_hxFr+{>$pkc%&bX^y86!JkpOx`teBrW%Vfq=~IwC1?f|eJ_YGhkp9c+*#xAY
zfb<iPege`@K>7(tPpzV6uy$EPlrkm7(voB5%9QEy-(>vdjowxOZ~4vyMQSBAi`u~&
zW-U?Dlom@&u9<T>fd4W8R)7tVi6?3_wUU}e?O+YFmMCdTizO!4%$ceA&kC>sVA&4o
zsm;_#Y85quwaXf!lqo5emK-xzro>$}_-6xT;xAhgTLU$kT1m~KcCdz7OO!OF#S)Wi
z=FHUmmx+I>6|yC<HBh6emDDV12WyzML`hRxEHSxe&MGzA9{V}=N$fu;YnGFF;MIYM
z+mAW`M17tnVgTyrf9JwI$lI_nSpCYj95MH%kYPA=atqFc#C?Igy#OhIG(a}M4wwU2
z2yg%@0m}i^fHi>ifQ^97fbD>tfO<e9;2_{I;5gtUKm)V^+5rN042A(B08xM#KpY?e
zkOD{pWCQGg-u7IvwJv|fy1PVoFXe1coGik}Ko0>c0QCU=xQ7}8P<y>WGGDd7D>(?0
zd%4C&E8_kC`UQ3S_3ifS)5|X`%yijbzu<tMIXJj~XlQ6inEwZZT(J`u=7oocCuHM~
z|0kqZgwu_Z{wUq$gApPT0pYRXu?QmYuiq~Nq>ND^=Ad*D4u}Lq1N2H#RiG+NMTOtc
zmmsFoE2+ER*q3McrTj82@V>MN@cBWP{=mGXYJiw8j*c|;>UCCpd?I;|{y>@r|17V;
zXP`esn5s#{WKz`dH^>wmY&M64;Z=lu3xUe)+m~&gd+@=yztsdy?<WR{!T5`A0PIrN
zgG|1{kf5Yv4hik^|JZvMIGgJC?|Wm?VA7C;RHG&&X|27^$L%oA6BC0eDu)?Hh8bfV
za~M*NWs+(tl_E(hX_O?Vgiur}Nt$XZNunf`>Un?H>|spw|J~31+|P5r?&m)*m%aBo
z?RB`m*Wq)0uJ4YmR=oy?FZ-(zs#3X1%y}_Yg5@!l`KFkd*qE3aq4O%AC;np3JFiBl
zs#wmxV)^-E`}0eW6I;1VjcSCdRj$Uq)q>+xuUwt?)nlvkT{TYsQG=sLCm$(9Rw28Q
zBS_qzt(oH!>x}e8@{vNM2-$@kLSp}74n4$0QjsiVHnIqzej_ehJSri<Td8@QPzR(h
zQubH6uJk#J=OUhmkizR{w!SaP7{2q5^(&wLbme!wH}<rS);fCAqA8KNAKu#Vxx%IA
z@2S-L&f075k`v#Y5Z5E`mbJNmy|h37nX3C9%{%(&h7E%sExEh>+8;MRw&B7ZPsSx?
zH~;RsrBm}d?R$24pS{z68`bSbzi{YgdCAr$RhDm=bkn+@YZPy8f8R47-Z)@e)j`)>
zQ|GSguQo9oUE1R0(B?N>bb;ADbwu@y*Q?(?s>RzIC*RdPckYu1);-mEV1p$&vpR2F
zcw^R<`UmE|mss`TkM7cH9?My9dwksui|WT_8J8!I?$BiAn&s-taSg3bOZRl?x@~^%
zpR-$J9-cBMFMGh#W9p3AIyJWPmf64my|&={tdvE+F8ponPh*B}zVd~pAB%hNPR5T{
ziTiN9bHgEVFV=iIW3sp(=E@E~i+fUk*Lkmq`|@bl`Y(!mQ*ZLnz2g3~u3TlIxJPTV
zbJ~jgG<!u!7jdt?Ec*LHalf)>-0_pRXD>Zi*Ae$ktG(rFaqs3e9=ucBzxO*GeO%nb
zudeQDiu<_o!`ZXMz08=uY_zzaBP(BflenjMmMk77?(6P9TD>9e?aJ=8?iBa;xz7h4
z7WX(lTy&kd&yhxd6pDLYQuD{P;(l+Ov&0kk{OV__-!JZa_LM5c;@;;Bt65##|C86h
z-%dP(#&0+7Bc8(#%{JXEp2g=cKk%4%9{UHpI7>W}B`Zd|;<<eD!Vm4mvvIU3b;R>Y
zuW~e5Jflid>owvz-S^OmUE*0uYg4O==T)!Uj~|I=7XNHU5AocZB@FK+p53bVUJr}s
zw{_S1tHd+x{#>gY#dCc4`+GkZ&vHqJN52rybHL4Sza^gO_L;4|63=zSR|7_iXS;CK
zijTzeJ-On?Tf{T&d;KMC#B<Jl?#PqkSs${}8;IxK^zs2$iD&-Z8&md+=YH|n%`3#S
zzqWhsSK|54@7MU?yMB{x=Wkr!Xv?a*-@E+#;&(opu=n7Y_l6yw)OErytFtf3T{`GU
z)y0KdpL%P;fa)(?@Y~v$!bq)4+c&&Ot1<l2sS{$Z`epQ|P47?K((;bywuRTMef#3-
zYae%$FNmMNY0zbDUTN)bU%UIQ<Yp5yPR_q((oKhc|HytWd;4vdq_yufyM9uZ-X|1t
z?_l0UL_($_<v-UMf9B`q71k$ISii5r`sS>kXLk-QLW+=0$Zn(rDgQkM>{nP}-!**R
zRAJdMKA%M5oX(*HL`BLUr``nS*{rZEjb)h?mX&Z`Cz0_LmhWKOc@>t0CNh^IvZTWD
z@hn?kVcBw)ZAErhSl)aRb6{3j)|X{tkdS-kHSA+qy$Z|X^O^G#X<lJ@63db*EE~hJ
z0wgWEyaV^EFEVxVna{F-&-oR$S<kW^6}CIT=g<_czrwb&Stjm%+3~mXIp)qYm$jUF
z=I42Q-W^?5rgPF=%xUVKc@Ji@tYL*^hgc?6SeAS@*I!}Tc$Q^N<N7NsU(fPoEYGR1
zJeFmLkm(hcr?9N~^fsXd6_&@`d**#S620cK>zU6!<#qDd%rie{%{udQOojESd|t(O
zZbkMW2app;tk3*sNcm$o<XjRfoX;-Kr+I~YY|daVRiymBiQ+seoXerv+`D_u+%BH;
zX<FeNSMhldlEnF>Az4U1G7njTtU-jIZ-`Ea*CfW;**-5rPsQ?N?pfJ-K8BjJzxZoe
z?l|JJ6kV=HU(Iss#r_i4F8-QEmlrUe#qtokBmUgzeqz1&EB{)yzj#fJp7)aIc~|@#
z%a{<`<weh1tQUW~qsKiE{r<A$d!oztMPG}{try41kDm9g==uU|g;-uMdfp|`<z?&3
zzn1M^ePX}d+<s#xW)GYwPUZi1e@PF3IYcFe*YeV*Rp-zcB(;CLP+w#`vL4xr>_bYB
z<N@tMX-FQj3R#crM)n~~o=*yG`d=tp%N@Jk3;+IIneU&uzR&VAKcDS9%b)+&3fqg%
zWm56jWyh+xPucRa*W#l8`W()6?6PB2d@b01`j}%@o_=3(JMp>VvCHp!w(Z5TU29Jt
zv;6zAbz+&2ipMTHUd4UNmY?l)%}1xdtNi+N9lQKC|H=F28~%CxGmd?h_5aCn|DW7u
z*^1NWSpL2E4xyi7nUFKio8@KaP;sBK<>Iycvnc<*Y@Jvp<Xp$DxX=F^$1dK%yzCXE
z{P&h$mtR4D%C9TG&;Os^mw%ScH=fp$bKQfYa@#E1{O{YBKejmDm`(q_{kgvLY|ASi
z`)u1(TvlE`%fA=fiO*$nu47l+r{eMdXFq5DFSakjK9u)i|Fh>?e*gcK$1eXp=7;>Q
zL2ObWE%|MRt^6KC4!_H=st&*TQ7I`jzGmsV!b?h*i|vo_dkrm1_<e$^Nuj3v#>0+F
zOV^d~8xIASu`a%J{kiZpfw2j^Q{a~3Rfri!oP+$Qe@DSPnI<s!6Z?qo5;3RXOeaq5
z$p8G661Vet*AiKeoZ7Am@5T0FKk;6ili0lDuwmH=!R(>Y|C9RV^-E}~x6oTi*RcM-
z`YX48*`%goZ;ibZnvVQWj!=r_iVG9xR`%DDx=K?~?}_gmn$BzH$<q3asKJPu%5HG;
zzPz8uYae7E;xZfNdbV9e4Jn@eM9n3O<(tH3*6rZ6FUv%IW;gFUu>Wk<C$O!+;){?t
zdc;?8j6x*!dGL~HOqR*}e7=7N>u0lH79#39v52VgH0RhUtdD2A4!mY^-08fEn$;ok
zJsc;NWs4f}`${Z(O5;2DoW{OMO#j)OZA4wE4#(NVvSPL=<Z~RK>mi5q&Y`9pPt=_f
z`Fw!)C)lQ#*CR*)`-r+z8t)e%sdt0Ru)c(4DZJ(*)7iHn-*YmpGnjJA&{W<Ra6V($
z<`CDlgV#c28Sg`^Kgs$WK8qSy4xf+l-sIRFc)x&UDO}TfUX$2<9^0nzIgi(UNL)NK
z7qDG()*aw=4APf<OZY5_;~^oASBGuKuzVGg#Qw|KZVBrSu`VBpN4BzVJ#v!wacnPY
zCkNOjj@MK~)K66I$sYDCK$7_G-E3QjSCh}n*KkkSW)H`h&;AWr-jemnJZF{9^*Gja
zJ{K_gS4+0ZLAJ8r8usbKdX?9$Y?H}0M|eGfr15=eY$NfyhI`$Ib5CU35@ZqE$Fofm
z@7Ex)tV`qbF`nTVUdOXO#H-7B#ISxopHnz?I<HfaeY`hWe}ZSz{Bm+7w#j4p3C=5-
z_l3M3;aE%f{sP{QXIVbmi>YSCd}zshpUbiYmMvlZG2SP#e>$&C#rLwl9^W0y{zWX?
z#WsC;zns@(wsVm_981hByNvZI>?4V5W&IIe|4;ZEv#YFQ1w;8^jnKaLYlP|{Wq;%L
z)d-E>T_coGZrS53o655Ea?3V;RwJ~PWsAx!JF&k;D3)WM?XL^V(~x1vcw{>A2(k>>
zihP6|L{1{rKdKR`i!?^UNIRq((jOUxOhx7*k0Z;G^~guaH^_0M>c?CY(iAa~cF3(r
z7BU{W7g>O;KsF<LkweHyr1qW~p%#dbq#$WX4w8=)APbNc$X28Tsr(7&iZnxfqzlp)
z$wBgwLS!kj8rg;vBZrZ{kUD!gN5n>YBK?tEWHwTWynw7mb|J;cA>?-??$a8fD-j84
ziS$JJBRR-)<UwQ!vI^OZ>_tu>aXiNcNEm5{^h7cd@i#sCx|G*7$S&kd<QP(!XI&d<
zjF?C}q$iSz<RJyf<H!q$_}j(nH^?z02A!ybG(%b<-H=RVJTebiimXE3MM@CySM_u5
zC6a<<BKb%GvIuzr*@k?C97ICJToWSx{#(cXTgU!a>)4Qt++i76O1MRO7M-7=Q2UI$
zR&7$E@7j(ToYw}%Z*;b9v9wKA_K1uQ&@y3egED6i=$F-wb_d>fA3QE2dtkSW5!oYi
z2Z#lso`ZAqp!l+P9#evgB{z=D$Q_%KkvlLu7xL(U40atpGGiF?f1lbqdNj_X-N>vg
zF>832enT^QiM?4CJ(CU@{c^+-ae}8$PAqMem6bi9blWy5;#UINjtTbdmY3CInBdE@
zju2V=UO-AVWY&z_wsfQh$1dHz^nLfd^ivlpzL%NHM`lH@J2;*=&E&!TbNl6ra~I#7
zlrbVNH(Pw_meDU=d;xDmZJ^fYmEFLyt4QuQBCoXDnJrEoUF>q|S~<rvwra<zm)%=&
zn9}2>W^#CONg?sO0{jvJziR-my6k(z5yfK(E-^W~UwZV630uTjj>yPsI||mV_{3TC
z%+4A)G(+4o9!}oi>|x?CVtGdH2tGx(O3H=nFMi)btnJos@Cc4RAR|X?FSckG>>N!W
zg7fG;dT`!=%+&1D=gKk5H0#ttmbDp~o6FgpT7-6;I^*b5MBj##-G%7+oUvEO;9m3?
zmKi8$`l&PHM)0J?9#NeP6tUvxQcdWdm60Koi(hQW$ZeB5m==<LS=~#2Ttn<3&Z_)5
zbRRh)Cu3Opsnh04QU?zh(k7cmcCkI5yXW;|Bm_T`5xuA4$+XJjVf7!GmoXx^PvVD3
z2KUS2asBg4#W8}PKIv83=214u{@7qo@r{8Zq~s1};{80KgXqscma$#*Zk--8(fd(0
zY{c1$pU&X^CBx5-o^9!O3(Y9Kp45z?Ibvi6-=3V&Z`4^%SsY1xO{?_uTz&#X+zIX)
z3U=y7mD8=#$BUv39ym6tZsOa5<BPFXs_o(!$!%`vms3v5*_un`M_bald)dQo=r>{r
zTk+jVgGUSzgOr~&84z5D7(wj@=kn_w-21Zo)?-9QZuGYcdUQ<gCt4B)1>-i0!JL&5
z3;}U3+YU?bI#BE=&Y_|e3m$c#UgBJ%1}r3gW<>nJOltNGqTiwQ*gUbbIE%oB^8VEF
z)a<g2Sz1o(gR>OhUN%Zg??c%IaFu}p4#sTR6_q}#GZZ8#BP$~>qvBrTH(&U=P_KT2
z^BA?=u^U+#{BldFsqTdy1-r0?7_6tCTItdLsiUb`BRHX+{jx@i!-^+>;VU%<!MSxD
z!MeferDx0*Y|o{YZC`q2XPmY;M)Yb*f5GO=C)9S>$f0fM7Z{e_FZeka@g>2*%j<Hv
z=PRCW$0RmF4~J%t$~g18O20q2(PekN^pa1VFK2Vck^$L62jrFWoMQZnp_4rfZNw8~
zq4OhAuhYJ@^gBw2aH+<p=Jp#lg07N`sKFFxCv+w`dvr!_>yZNo2Is<6W|i(G29#JN
zw&{_>?+*p*Q)o9VZ*foEw;M9BFav_I$E_|sL~?f2KScLvogFyHsP`(}ru;XYJ`29H
zOU9Ty@s&4>7!*~TK!<b66i0lO(BIPoROn9WK}Q7Um0_9F4}Wm_e6zDM`i;yxeV4?q
z+_VyP*OZZYZL|2@o4|}lf00PsWWFQ%sSUdZRvk47#(LoWSbypmt!OJ5F+$*AV(His
z-7*60C_TUA4B@g)ZCm<y$}izYo<0NiKKH&ohKUB2)8BOJ8uD_x4(vEAJwpT;WoMn8
z6Ikf7ZTOZRt??Ft?>cohEKNSOv}{lO+MvMshWe$C;`gae-!*h@R7NhIM)-fc)kxt7
zc&Gz%2j}o>EUDT5To&j~SA18gTBl|Y3GPR$^xH>{$O}H<Pex($`1K~vJ~=yk$jF>i
zi-LhG4$&=RkT^)^jIpIUEj~p3OW7eq!NVCWE-<)-D1577>8BlD_h411?Qo*S=zESD
znAzZKqTZid5*)Eyh{6%eu6%Gh7g>7wgVTd+;~0Ud<<!{jzyJPEyaScEsMw?A)JMpv
zks@Rdas&~7V!g@wseGP?tU>l6$B?r1-B>@J&xOb)q!>AY{NMRYV9v+|COGJCEzh}o
zUA|BJB}HHRMqkglL%9{_I{sPmxa90XB6N+8#q7XIMkD)*p6RqNXcaokk-Cr$jLInW
z#nC9R+$sHU^VS7b7SCJMMuarwvxJz4dv}e{n6Jg$rE#HK5V0LTG5GDb78x{I-*#Ji
z{~@;x<c4M4HafSTaIPViv}?nHUZtN!D9djD{rA7q9f(f`15XasX~=I(CM2Iav$jL~
z^Q&Y1_@%|{1R~a)%)trdwF!hGN;rYgEeF4rn}Ev{scnKng)E_I*lHoQ&@@F4w+KtJ
z@t+mEPJQElzxn^<4$$0EM+|nUE_1{sOX*U+G+!!`c1R^Oqt=mCIaN-V$H>#=LV20I
zUfwD1k-wFX$mfR>!bUhHJSdzWE(k9QuL^Gs?+YIY9|^}Q2}%paRc=volu^nQ<vwMx
zvP@Z}Y*9W?K2;7VzbhB04b%j+xf)TsseRQ<b%HuoU97HDx2Sv7V`?=mUJGk|wQ<@^
z?Fns#wo2QieV`rC4r{+_)$}X$t94m#so$ax(6jZ4`hEIC`a*q$zC(Xs->)CiPwFv7
zoKeqcXe1bkMpL7?AsMP+8m`gO=wPH6X+~co)5tN#82QF@qrfOM78py6<;E&wy|LBU
zW$ZDEjRVFJ;{*+Ov1Ytk&rC3znv!XnEzJ&QikWVXHD{WSnJ<`|&5zB4H0fPzDOQq|
zYW1;(S`)1MttYLQt+%bc)*<UW`(nF=-O9e%9%|odKWHzt*W2&eU)z7!an5Cq;v_lU
zoFUF+XO8ofv(#DTyzT6BN}QjZDsEl(a<{qL(e3AscBi>dxU1YP?q}}z?jLR~?+UNE
zr+TfuZeF^V<xTKrd-J@fyyf0jZ<n{<JLc8!uk~HOk3ZC(>M!=+^uP9h_2VPgM%+lZ
zNP1*=WOihJWKm>Uq$si~vL>=VvMI7PvLmu9vOBUTvM*8`IT;Bh;PcUm+UP`cslAjU
z^_4QE9BGU+9_^SaO_yd%1=2jJ5KUPiEt1wqJEae#1JVgJCRUC|YwF1j<peoVZYnpI
zC3MJ?T{%r2Di06zXo0*$UM?5OtK>Ck)FyeWyhGk4??$us$tUCs!xx2{hRtxxa0m1&
zHJldi6Yd*M4`+t6!a3o*@R;!U@YL|^@RINw;qBqi!avb8c_BKdDVCC=+^VE2la=Yp
z3T30RTREa!tX_+rrK;KLUFr;Vj=EHRQ~gB!Q9Vyf&@8Qk)<+wrP10s*_h}2Xm$Z#&
z+L!3sZ(59AU9Yb<(>2}EJL$djOnsa_OJATb*Gu$Y^m;}UBMU9cGiIYf^U<MY=unZd
z#@K`w?Ld!qqe=VFr4qF15c>3|QOms8yuxf^UT@xD4mBs5kDD)=8_YfCkLJ(jdDey2
zMd(l(T9jwyTT`v+);w#zwa8j#Ew_rSRn{77y|u~OYVELgS-Y)0)-kJweW9Ib>$YpB
z*qQcSc7a`JFSM80tI)EY_8$9N`-uIQ9plt?>N(9F*GYDUI(In>oDI$n=Tr17<koSo
zc3t;Iv}}y~fV;$9?|$kYaw~aty=%ReUaB|98|TgO7I-hCTYJ63US<Chzo~EeUHpFj
z2>)*XVgFhGb$_S-m7f&p6A?Bf6v`(s=pgl%MoBZJN2TS`o6^V9chX6zrhJub$tiM%
zJXW3~FXq|5FCU=cwO%+etcKliH=gqySdyp1tHZm)zlCFzI7P;aBq>?SXeD1MPzsfm
z%3I1O%2A~n)<ad3)!VQgkEliJF15LKgEm+jqvdOJw1>3C+6&rxZL79VJEWb|YU+*j
zCVE(Jt9RDZ^kI4)7Gt@-P5)Z2WOzn*Bi9&bOfhB}bB#xgr;Me>3S+gg(b#6ZZ|pU`
zG!7a+8NVBq&FW@tvw?Y~*~|=^w%OY3WOg%eHv5~mo4MvVa|$-$K68<|!dz``G`E@W
zn|sYKu?|0(znhh<>Q*f)(F$9()!OQ0b+c}^?zJAY9=8@-kK0A|TlN9FGS8@q)55Ww
zj?P49wzJyV=xlKgIlnm7umz1=+f8-nyHD|qUUt*G&Hjh}K7U}OAhIB`G_oP`QRKVG
zadH1!@`FOWTqHG=x=DScJZYRXS6V84E&V7}mAlA8<k9j>`F{Bkd4arA-XQPCl3yKe
zAAT{sC0t3Vp<KzxS*v`k#HzK`da9ze;jRwUc4(LC*D?-L^sn@v^?Quh(D4?gVRkfo
zn0?J=OmH;N9&XRH7uhe^Z=-o%+dtXA+f|%e&gISk=T2v?cLf&dcC_U=f3trXmS|jL
zdgNu!duQac$oG-oB21?r+QWIblAe@al+KqgmK)0vxvkt^zDpLPzkhfjBmd6uwD3LQ
z`@&C#7c=gUhpRK{uT;7yJ(U5<V07ee<$gTPT4k^Dhf){)7{`czN_|z`q?V|8+F0#v
zEkVEDaExw7YctjS%xr8uWgWDBvSK*n!*-%`t@E(6!g<}<?EL67cO_SKO-4scH_7eb
zCc7y-fi$;|+t*EZGu<rr1Mhq9q*u?E{8s)A{zU&Fu5O=SHDX6PMtVf<z`E{?g!(e)
zDA(0d>Y;q2j8^0I&-G?_ojztibmbQ_*P3iivkI&ytf#H#8Qq7ikloNuwb2UaKKE&N
zkNd0pjQ1KNua@7@pW<)v8*}u2kuM@YM#N7E9N^gXr5mMQSmhU`z0zUnxD<!g4a@E1
zaq@%mQ}Qd=*AL_>OowBIhhRIO4KEMBAHIf>v`KkKIj;Pz$f~KPsn4qW)vnqD+8*s&
z?Ruk^ajP*3yY`Mz1Dlm#%4Qz={UkcQ-z+f?m_L}u0=+)ps*P6n<{DnG?y*<!>_4-=
zv1>V3IoCOc6LH!)-JN014Cj8Q&{>1s*@E5qg1dVh+f&P}?_TLPb6;~ey5G5fyNx`<
zOY<J_p7Az%?|GH{IKRC=!{-9?>Am2ks?<W7BwrQo9lnN9dA~W<nuzb(67^Xnkpn{i
z3z%z_mk*`7@)UUndj2@~V6nVZenH+F{wjPcy8Ws0x$>3rt@6F{qw=%zE4uQxQbj#q
zt)afACTQ)o&RSQkyVgtVt=*;#&<1Hkv}|pJHd?zw%hTuR59*8bCHgY#N0HvwNGFmg
z^#Wsz@x&8TdA75ODdrj97#+-~&7<aA>rrczJ;k2r-s|@AdV9Bd1F)(?yliiTH`=?y
zo8;Z;P4i}Xob-ay>#QZ!!{<tpDw&ciwUlPahvnCqJ8KRW<0Wgg^|s5l%R|90Nz~RJ
z)Q;j=E;8$zjm*ZTZaPFMDU8dTu}fc=DiO&O)}NMRKS1p9a^Mqwvu}51@hsZ9{oOm=
z<?a`*?+y1J^%i?8yw|;L-Y4GgUK78ApX&Gbhx>Q>Klp$8f<1SPul+^pE|0{1yhIfE
z0}<fx@FQ631K}#_g+z0{IzSzw7O0P@&#Uhd#dX(;wdO=-)r`f)=f;)9Oy8sPF;*Sx
zQfr_!8lBllob;*nn^oDaNu*TjwNBcx&K1}~6-#(C+H;Td2+`3h=S^q3^R08jsp~c&
zF1p#B=oYxox~~uyec~Q-FYpr4pJXDUTyHY*&?DY+T+J@;BkzD0>(}#}`<?tWKi8jx
z6?)8H=&$zI`kVZ{{*Qi@NJ2!7w2Ryp85Nluc@n$y9x>2Qk<c!Bl)2_Q(p8cs-9-E|
zPP#|BpJ?YDX^&JaRmVzA3_lp|izeNmKB^wqZq*x`gUqkY^R1=Uuhv}qHM=<@Al;ed
zyx^>6>^^|CemSx(vYA+GZ{#4~L8Jv=A@~=nA=ToW+DTocp3<$-Kxr5rbfR>(bg%TF
zw3gWF7wLD&#ww=CnRw9Y+EV=$eZBq`e(XJck6x@F)N2|ej0cT)Vhq!4&+{K^PBlL@
zzcGI`t6GDtG1i^L5}VP6!}c%sGRET$qRm6jo$eyHh%va!{mqT>;_&>6=X*)stzLom
zthXE6<N5>r+5U_ED*t=GQlw#|c|_ulxsjwuhe&cHC6XFR!~6Fow#<xVMRFn&BKJlX
zMpj0)M?Mf&c!c?di6v`ESEA7!q}#c&+0rU$JNd;i;({1C?wk>0OF2pIASV+wq;lPT
z<i2DgnR1q#Cy$q>%CqHp@_cy_SxFJm<7Y$@e-S%g7QQ;H;L~mmXNRYU9}X`KuLy4p
ze-!>U{A2j<@I^|Z(wwNGvvM2R$r$3qhsaGf5LXl{KPgMpx7Bu97p<puD}HYT@x%<R
zfLLOkwp;r_JEqmv>*?+En}`G-&|lKG=qL09Lo+&I2gVx@oFi_i_FqH|bInK0r_812
zj2voP4Xi7zW>zcfZuDveao{%VeX@%$1K;&KW2d@Z+iqZAX*aXOwr#hzJK5dHIQrYS
z+qw2QY|l)4uKkGp6c%8Gz1rSrZ?oUG_u60D2LnG{*{M#1*uc5cY376-+iC4|A}hJs
z>F?a`<T~S=Db7r1ZZHOyI@R6UZUd}#Q@o>zXY7DiOv58)x;aFU`R;VaWTCr&C}lYr
z%X)V!TD8Y5b`Q8m+!Jodi}m8YdR~Ip)RR1u2(yEig3a&iWqLW@7%$(Oj?NVlZ!RI5
zS>>${GMYVJF=P0Mcft$#v3@*bIe{2d@=d=bRw{*2-Ph0bbNn%WzCYbB@C*F~{t|yV
z+PdD~>hJRR_{IJK|A>FW4@F`l@sWCr_oisD8EJ|Brl7lh(c7HJm`FZRNkODA@)R-E
z3dZRsvZCE&L?w|!kz=J}71V1wLpDZ=lj;y-C1R;ntaK82b1Lyxx|BuCHJ%J<Hrdg9
zY{fD%={3?OvgzH@J~aN&DV?uFhLlKlq>>pWq2sCOclud%dkq=V4zi<ta*2FM{zd%a
zU*Ae_d_$q7>N<6s`k`8^ey<*9+L-#9r1|)(1>`R+bW?ZrB)tQ1TdLki?@I=gMeI99
z&)28wv-JYKP@f-oGvUkDU`w`=L+=i3NeOxM5wu(6(y>OoQ76czMJ_Ee>6S*4ksM^w
zeF6`d7v$1Y1J5UNp+!MHEpj1|QSS&cA(01(Ea-%B(ufK2>N;k_AhT|6szGj@WG3Ue
z(#$?&*qP>N^G+g;`Q|cnmAS@TZ*DSon7hf9_L;>&1aincLJV@kJW2i?W5rr^t)`Ys
z{*-Oq6^xSA_?B~zla_W5dw@N{o@GC5FScI|;+7xn^PP){z&kp<oPo}0bbf*J3K2`O
zbJ+RAse{J*ZfEx<Hy2Mn-+j*AgkB%UVqWICUMF;T7=C=QSLD4(^l}hgtrci#t3X2s
z`g#6?{vx8^-Q-H&`jsQq(8Nn3mq)ISTp#I$#atZZ;6Dg|kW(qN3sQQWQ`*%M{px^*
zrJ!SJXjxzMEE7%3AqQWAhV3||StqckAvuN|yrNA_k#pry*vnFD`OmDo7~ML6b{&yp
z$;cX#k0q0N_o<L|=aY9&C-W`{&kGlV_`DbXFnlb?)aob=$-onprdU@=Q56##+mhU^
zgOW^6o{p`}Q|2j)lqFc(B4v%Tp7?XCvP0QLj=o3PhxIK189GG1{wEo`q;^*Os5xq$
zI!|4sE+fNRqpl~8->U8)*W0b`QTL(qCF%k7ka|Ro)f#A*Yc9EbvX-KylF_GYnOc^X
zqvc`2$CDFI)uwB+vE=i#LUO}Z+B-xh2bg5(V*M&z(pzEC2k8?S6OZXnG7fe{N5O$$
z6dVi2LC6pzAubpT^%xD;7^%hpV-WFP8Gcj*f+RHlpZR}Gpy?tmOCw*(G_%Yc;^{Hw
zcrzalJ>8sb7MSzQLbQFkxz2nO{XT|X$5?SzJh4(etD%)Z_Sn>FZb{5LYNF>Y!3i?0
zENgZYAvha8u+J*CN~{B96t#%0R6EH|CbQ^c_qEeO3$pASJI@|tkGJ#fsrGbxHt4|;
zyu(_1pMA(aW}gH%h;`zec&84TX+tN$NpzZmB1pt#rjz3IC9aw3%yZ^Di=1W7a;Jz0
zZH=?u+2m{`uGr=5cJ>fm6cew-x^W;`E?HD^g$ydk&BJSq$8Su<b1ZOQa#y;$-4YOp
zW9~`3MGXET4v$d>pV1Jnk%-@Dj^{}7x_iCw7iHdJ5&mKs9-|1Ku?DZP3BR#}*l)LY
zhzu=+zbNw-$&AKSJVqaUMmk<23%`+v=NOOIc;0^rZ&BtePU0<M@E386(>nN!hIoxc
z{6=%4o}Q7L@fM}NVgX3n60o%8XF<~rMS|aM0T4-IJXc{nm-&i+j^w;3wl-f{A-#gH
zDDxC&AI$<&>kvdl<4;9FONfKcj;S4EOvi<rGp3V*QGGT%t#oA14?hPMuq#{~;J7Ek
zCqdR?lvt3Mc%_a~uiO|<QhF)9mGR1KM)myYxL(f4UiFW$eI&@Pnv!L<R6D3CAaQAo
z?Y?R{*iBY2#>c4R)qD`(1&s4mjO_!A=@WRf7%f(d0}HOB)zcb+)+K69wdQy@l~F!W
zyPYvzh^JekE!T<|(`!I{Hi7x<&~_26?E(8K)=C)Tb%@!_zze3~1JeU9m=pNH@qs6t
z9{9p}WOSSGfCr+Zz0~W8k^WB<Imx&Y+;56;H=eE(@!N40yzf}x>q7WA({%A_S&aGd
z6~_AlP=F=)xaDRMer`vQU!OGN81)VRG2)Y~4py?25@3X5K$#x`6Wj_GxF<T!4_QaR
z1W#Be8Syc8tQ}{^+jYPO#fZ-ju)zh4@MZRL5T{l48nUfT_Evj`z02NBUbxRbVP61Z
zBRMUd4vg<Kr%y1(Go36a$H{ZXIOCmsM*MWJsU^-E<d4NpRreydvFo^9iT`G}^BBGB
z$tDkxi`DZq&+~31wi^jPeV2ES_kj19_q6xCx6*sVd&_&r`_TK6v02v-`<)qy6BvIh
z{B8c1<eHa6!ekX0_{4(9^O3hBhl9MnQYfDs;(X#QOKL@ql!^}=E{&FEfiW(WR!i%p
zUD9XZT)*M}E+8|zMs7(&l`r2%)#4R-v%DAI7KdL;0Bvjz-e@u!S~4CwFd|N4%y)<H
zC8K*hycPuV>+p$iRi%DV$><8gG+ddgJf=L!^n5XDtQx1rt98K0B-KT)lcIVpY8hwh
z^mKJL8Sy;zN%a-=9rbJVPxUf%xK)r}4AVww6ScdwSJBzew4Xto8|v5TZHU$~^r2KX
z9w0h<m#W4O`mf{}QV@A{2qLdksu+E!W2B#fKNJQS^sXr8TpDYIOc8CxQOBr5B|}79
ziBvP1Q_m1lmkU~uL{&pXUa4SG<IK6}<8pLyy}8xgMZ8rE+H-_BD@2SHk1tBV4@vl-
zmS|%NUZ^jAD2LoKAH2H2Dzp|@OTepFfmN63<^lBb1UeauKGvfeA~KZjc0YTxJ<XnP
zKS!3l1=Q#V5YSrW{nt5dz>G49zh;qhEFl6DS?bXMtG>#W-CL=LOaiNZ9&LLIwEAZ%
zA~n3rJ;&>cPss4{yqVtPK^(RjB;yP3N06jCenY<*6_KufFF(T{?a%b*k|Vt6ZzMPP
z-v61LHa>Dy#6s&*BmKz)?u^WeJd9m`HS!KfzyX1*E~pgBLjNie^*52)fUVw41U6c_
zD~R%!O0P*<q>rTiME8G4)u??W$Sq`#taSkOj(jQ}56Vx2cW;+JA;vmFmU;ntsDxXC
zcn=~=oj^qO1X=2a@W<hA!iTZC=PMTnd8)0nRnn9p$~e&PCzNME?bcI6`$qW%gf>w%
zsB7E+2A&JjIUOAQd37bVjrY;AKh&C9UF@ZzwIdoDLMA(z=;v|md2OZkruIIT@ki}f
z?L2H_6Wzu(_R?=d<Hmz;J%t@yM`rsWRgPcv>PCIzdc!x`1<}qZV+PUA3qe%>nen6X
zD_BEgvjtkzji@GvipD&1F?F#u;NJrMK4SiDUSM5jT}^$gwbcVn8AT3zFEPt=Xvh|8
zyY-Fr12*dqa@aWgdb_7R)?R>BDz!%?#34tBL{1Qkgq(kiMqF%G5>_i2yOrwnb4EG$
zIWIb|I_rqucRC+CpMx9y==|#Z?bLT$xDld|{%Fx`_Yrp)QT*pb8<o9_y=G*joxEGX
zkMg~_-cnG=57D3RK*L1N*%<xl=HE=rFfqt67yCs)cDWyXEQUz_Qt%L=KYdQ2AbG?H
z<H;$f5-H5amdzuxoDTwY_ITlRo*7zByg+VO6EsMbI)d%q9w0$;q^G6lrPrnRq;Em<
z|CH*;P2_9I8_TlBF<>J3pd!<W2nvYw3&BPf5bvKmE-1|>kI5(H7~+FE)a=_3^A8S>
z4$lm%;EUn6!taDX4If1xFH|m56twXMy#8Qif^rvF`%`%P?aEGK_7D~^9&6Z;x=f<l
z6f95ze>bDHu>+Nwv-|yg^tM1P#Pcsv-=g;WJzl@2)=0Zf(*n&+*K+alj}x;OY1{DV
zCE8DT^tyTjJbD{FS09VEmgrA9yS+cWD}5cjGCeXm@@XWrzEXhQ#e#_smhX`72D2;#
z2`-Y?kx9QN--C@`7=A6hExa?_OUYF3R328Q>(A@o={Fj)sM8*|8<Ck^6S*!TM>H&h
z7ikq~3-W$L<VLXln<BS>!DmDUgArB=aM%}usBJYk-9~A%v`u<fdSBQBwUbs~@2C&d
zZ>Q>%tB=yZF&bNr)z03JR#(H`T}n)Cl5yVX^v33mr4l>~uX@nE*uRz7bgjR`zaY|t
zbLbhl6;$GlNT|3Hy^G+IQhWKDa2F*FZ<DWnpgyBLNbY`_(S;l&4(zWd*1L&S1!Snb
z-P!Jnz3pZ9wr?Zn9b^x&v&no%+jrQLs7e2dx4z1o<!|?EL<SJUa_}SgT3*tnN94qC
zS9GC$;QgAYEwC^zVPjrX-%vO3yxzv6y$Aa6iTauP1y<)f^#}E+`iuIT+L0)0n!ejP
zvtlCR{l!@B7-E4Zi3Xk}9(aj};5A}`4PHHPn0ey+VIHOOe^cdpm;xE<Ty?v4LTg}L
zZd_?JHkuhNjIf~_Hdd)McBvEB+|B4|+)Txyzi|;>X&{lvd0<0_{fi=lA~V2mI9Pn;
z&{ke9VLZ*G9wuR%Z<Dj-x$+9CU>{R+4u`XqXURt^sg~Lmi~0<irieo0h(1lNt#%U@
z^j_@e4y@;4Y-c0=8vRcF4bayQ^>6e)z_>3o8gOp6kP}We9yVS#-U9Rf)u;seXPB*c
zBDb55VjY*6uj5s}Hfs>$U5PIZTfWs9PnrdDAkiL-AFKf{peiVv?sjrB+_B_EKe@ZT
zI{sUt7LrhzUTyxQnrPS-`Qq?R;G6@gi9JQ+o<x>Cl`3hG@*Xvgi`1Ld(P+mC^>wo3
zpQ(4>u00GMKadRfZKfBliDkEmBBoKVSjjKBM9d*nr1zQ)@a{KT&sy(VUt9I<CV1?2
z_6_LEByhz0sZ1TVFULzKIoZ@HA8^(>Z#e_pVPME_gY<pt9(TX>e)Br|z5Q$|!zJMB
zC;aQMjh*qUkAi%^6Zx2$UkOp&&(!_?63<4eEFf?&wQACZ@C_PDjqtI}rLbg39>_<h
z01qD|jgZDllX-d%67em<622m>leRL-UX*L&OC#YP;mO>GW#J#fKZlc*xnw0vxf5?u
z<$Be)n5WQ;m`5|)nw`zA=GAzkc~sKBr22Qls&3aMKkh&keYic@z7IrbH7t!o_Ico<
zO}NtW&NSyXba$TnzPrzT$a{rqTxYyNe}Aw)hdAP0f4~17SNf}e(ocqCksX<Y#eXRB
zSmdS1E0Ivk%Je^nLd2u$Q1t~yNCRq2qw&XYXjgzJb#=SDz1-gJZSDZ~#-J87$GhKq
zh>FY;-Y<SrEKecz(aNG65xPfyl34Z~;)pNg@8zH6Kjrhn7ltnhHws_FJ#fOE!naW;
z%?}^Ms@+P>e46q+_uxbDmFj9OqSVgnL~5d+s$YVcTu3HmfRqf;4r)h1w(AoKv?2<~
z0~K7TUue{2T=g-A8WYHK3XCU>myAO52{YMh0eUbRyx;{gh_|Vn9>bDd>v&E(5aZ#_
z-FV&&&Nixizq(I&9}wmL>Ln26JKV1k<k?qI8~ByFXywp!d|XxOQl4>FP_1k%^_S8?
z7$ot;PbRhB-c+j>!V!oG*9yzw0kA(_46lLh5sxPtOck#f7QjX7W$IPxb*iJb4f0Bn
zRf_mqWRz0_-!e~~k9S$7E+?~G6Cg+eKN9GXz>bbZ^GuOt)+5Ih8K%fDU9Dw+CZ%d=
z@Q~62EJ+|q0!I=k()=LrTo&Y=BI^`6r^q-<K$VVACpd|hiq+$S+%rK>)SH7cng0W5
z?3?;deJ`HvFxlv(#?_2e%ZL~qjjqN`#%;!6>O5nOJB@pchm6OJXLvGi8nG}FB(pnw
zgjvMyZ-F6wXMRg{CyqMn?Nl3|^_GBetOMbwO{{X5m^K)DIh8{yacxy;3Kf~Rs2|sp
zo5==s_t{iVpOZg=pHVw}1$vbizB_z>cvJZIa2=(iGL*c31GUpQxHbLMh3aPYUG*a>
z$ls`k!J+?BHJAe(sQ=wWo--IcIuC};U9h<x&>rQ^JqOR`6>WpIh5Pm~na`KhR({6D
zSJA8KHPOQ>xMSDDH?RZ7MvC5B?}ybIu8$@{ou=QT&jqJjNEP;F{WX0pwrnSO-RH15
z4#La%1It#!sD<`6GCGmf<dDy-3J_$G&-@#Le0H?0)xYF8AH(qa)2eMJ*d87>J*c)!
zCwh1mMENap>L1{FRdectDYqjo?eC1F68@0$G)UQI@Uar-Hzz(|c{x;324Y|Cq;|4|
z%E?-H2bs+gw<^fjm7YwMq%U>NN!|=lt~H=rJ3zMfc>Ab}lu#KtL~Z04)e(Vo#ZVz>
zPE{nC=wUqUui5@QGVA$dJBz4^ETbw?L|tSJm61(EuLr1oo)4x~RtZV1P{%tR!7id2
z@+MY0sDk7(%QQM8Y9R6CL-nxO31C}I&!}3bW2^7NPM1|bc7bW_0jDko**ZX;bc8y{
zi2$umlv^>{(@)j(&K<iJ%YVp!%L#B9O1WX>Gxzi}*kKFE;5UL|9U+GgofW^5q8N2w
zWg-m41<G<_+4bi@q>m{ll#@zBRab4WtIWW@2)wE+w=WEA%pzh~VP}d!u#T(0tMvj~
zVq!^>P9f82WMjgfl%dmw<YTX4IfT_Xfz5~stVVobHyY}~ax@KWhYBW;t&h;>fe0*%
zR%--WwIhmE@1y=(0(NzXs!cs`0@ujEMob|N*$IQA0sM^&a|9fvhs`(4?fCekM27>c
zTx*84(t49>;&)a9`$>?Y_v~W(SGy|Q#OCDT-JHSTK69MMVa054-X|)#7$o;u_gx~A
zYpAxjBU^gK4;55qP8ojX8PAid45Om@n(~EG3!6MteSj$O2M~|8aI&^(YluAldDfMU
zsz!C9k=l$|5#{wTF0<NO?^q3~VrGF&hp0=opfagboAjwpwxd4Tg>&mkjj}u{RR9{j
z!@1G@XJq-7_cn;rd*pMUc%PBeeN9&PgLl;Xg-B(Xe?-I}3(#r&(dB6D`;sfSk#CZ3
zk^8|_8ys*JC(3JO3ASq&SZY1PHxqO9hl{unUvvpks-hT*qePT8N_!=hyy!e)$U#KI
zGW?N4T3An}x^PG@y}Gl-uxFw;`NjsLm3g-{lT3LooR3G~i9H2VY$<$+71k>-K-N;*
z+DvupU7p-WRD$<gZS5DGz0Q8;OXnNsAoZ%BVA%Zb{N+@3tGd<QnpAD;5>Z}G<+d@*
zr8;0G!@T(*<(K+BshKW>2XWZ17V*hx=9Kz{<&{GT+>ZisnG#0nxpT>H<b&{2ev*&N
zzk_R3hGp~<tfJqQzm&>qRkgZW6DC<**uIymSE`NGX5<jzU>x~sYqg!)N&Q-@j;-&l
zKaKT{F)ll24dsAQ6$V~SICyo@=gaYSx0*Z6BA6`^yUl-@<xHc}H;3r;i2b=U${h!H
zWQu#YJCjP@T=zk6fX89hEq0f>FSsk*SKQTD;EnEPcN?0%-+js3?y2NsGySFhaldEe
zX_y<K^`-g}BVC5yTm$;JiCA<88048&uBTkc??PFMr?et>?nw50qtZjU31)OZC4(qt
zD5&B{Wi0vhWHRa*%00?PwJrYgQSB2=*Y6^`DAE7a3j==XBC4v(0*>kFI@33>6A!~r
zJPt$gFF1<6IoO;8>#!P`MSE)qT!EYHTfo{f$Sj5u-HrrdnLvztmp#M2he-DU>YtA>
z@}I_MJ#W86M7PIoPbNA8Hu5g#N_^1)_cG6dvor@b&9~k~pdeZJluiC2|GY?Js^|Gs
zKlYFZR}P(I7*&&Wto};rs8j<4HV2!2c2r^mT=5TKa(;%T_*(f+`2kMnFUoJ!{wk^G
z5z#dvuDD)RK)4(*uCeNURR4ZgmxGjkf}L!n_td+>Pg@8_^O$i3_~i&{XDiM3sG2n)
zm%0Nk-G^2qy9-yjkXZiQ*ikDO3?}v4meiCwz#dA0^P1-M3H)uQcQ;t#y<kBP!X|ng
zhV?%D?B#xU5X0X=sb!FWyM*m1uFTv)p-^WjS9*f%|A=%c_55t`hL?!cPrz7922pvI
zTIppx{~5|cWwjDh4naN>GkJ&Fg$uhq2~;jQsNAOowfoY##Z3KPqMrx#NA$-*>K0@5
zPv}>|)_cj=4jy*}w*7tc7MN8}S=D&jyX~uq$R|0M_-*_vU^q=6CwW0Io5=Ai2RZ&>
z>1O$Pxeorcdw3|B{%he2sor)4;~7N;^{Dcya)H)KyGL8do!_qQgd6>__Nn%{_7yC_
z@4*m%CKLWc`^#tx-)xroEIj7f)=sL97u#(aaX;7+{HIaQRw~|q`*pxm#)5+hW{{Y5
zP4sg%;5XEkfFW4gGumqXD$wlNFsXg`N*7yK!B+Z$r+D^S<vh5~nK0uQFlKj9i9hCE
z!PCnG?@jdY1>b$pf5d;>e+vHlQvU^N3$Fx>uTXrIP)qDu4_F#^!Cqg?$o&v@@^R@e
zG*-s$-wXp|xcnH5!MEg3$+CXIu7#*+9Y8-rXr`s!sP+WYe_VYIM1Kd^$E8%JTt@6d
zctY=Lt@Wk)$9fIp65}f4I>P{?Nap$U0~Hv{wJn4TUJ1lKox0CjGv9ic2=Xs0mI!h-
z<8X=n1{Ilo<eir~*OO7D;NwJ2B^WplJ5Q2Xt)#vxIs}em+pD?p@Nlx+JE)#MM*h7P
zEb{~M)9<+#g2#0!_0pEylMI-Kcc97hsE}^*J|=1u+=N8Xvd;cZ@VEtYM#PCLL7Tq7
z!o^VYyp&p}L!~nlMCMs)oA1LoJt6cap-PaqT|nM;6?{w+rrL06lJtP|3>NTHd_}BW
zpA4cyfJ)v4?)@D2%0~fj<qtBs#Gqp&1K)Wsh<8!=Z4mFzLA+0dYf)YF(Y#xf5n$b-
zUt}j4-bqF9kR8y&Th)Q;aPqn*)E7aY_JA=}BVTJlem0Ek;vuSluW|Q92KF=AS3RPp
zmU?&m?j2y-3t_kHB0u<@toCX!k1o_r=D_q`P1Wu<;{q`32$lKUsm{%TiS-(FxNkwO
zFSS}&ZLQm^;nrAd7WFp4&=s7LPteMr!K`b78eD5DwhwZUMFssas%l%PrX3<;xyWe@
z-~I+FXd`)cg)m8;qeA``@yS8BBsIXDOWZ%*^Szo_ngW=LtEgBPdw+V>{mbDs4fKck
zV_`E14%3_9atW}NI!0~>O`aBc5PQpWkg6~r8IMD@<tM=u9>;3@tf~65#DHNq2KSQj
z{A8wB{fQrbvM#Wj+M^haf7|)aC(bdanL8M*dBfd61?6q`9rrzVFHDxou>PA-w<}|$
z3KZgLQ1H({z-#you=%^;H<w`fkNC$xbt+cK1*@t%xaepww@1;McOsuhj*4?_N%1?#
z7et1Te2OJC=B&LWOXwKb4H9qyeq}>6sSBLHTu|*Nsi15+#eq5^AH%YqBs+}>i`sTP
z=yg46Dov^7-5TVog>b~T(T{YP_`i{IHB6LLr4KxmtbmC!hRSt5SlM*)*a9lpg=7Fr
zK>zlFWmi@&LE}VSB}csn&$ArgvlZ6Ko-;Tn0y#Jt)Tm1lLQ!WKrrn7hdkssu5B}Ak
zT0^u@jb{D-wB<Pg6KgTi{5E}`epJ7hjuH!NF~rEmQp~5eyo~DdX<uKy#(V%KRc&f{
zI==4~bFz6qT;o;d2lOKy3wR@<ew=XD3bLr#O@ue{6g?$xQ+@f{szncph@iSUw>j6k
z1}vwJAX2wb(;Y{RWImQ<nOo$pa@SDZ-2|g=2b{j$V14_dyuNx~V?1b=fB`kvTLe0`
zHHfdLf;a2{6APtO5%m60JeAut=}u`rmbC<)<}UL$v!2xkZ*h#8bxgEgT@U_y0%z3J
zZf;AUawZk*mejCwV5@xU1bm9VRRTQiP316AX0qC!_+UPHMh|MKN4e`Y^!0FUMMdTc
zs(MZ6Hn=`Agj(L~K@PhGRw}&woGL-Qf2DGb(h-!RKN*?m9Vtb33Ilv+5jJI61#ZDE
z;`!gTI$*!ok&&ebe7ZAP1cjhy3(9fC*O2k-AS?SzuL_IqO89fFz;Sw!pN*!PcAxPC
z5#2k+dvFCVrvjTx?LWQ(=O>98YZf)uJgTfyd2*sFXaRjeOU}_56bkNM3K-ood%K-h
zu45s`9SPg!PU7DCKpNg8zJ1Sq1E0Xd$*;m(o=lQjE{^?#T>V=Rp<kqi<vO`E*otlB
zPV$X1KXyyB9|^Y&XV6(NoET>Uxa(kW*VmLdkhGhzLjz$wOo8EaFO|W2oR^&x_hs~`
z8h)uGEbTeoS6-^GM<Vbr$5FSLL2S)Q6jTXn99Kyhu-mqB1}SjP@5CoB0}b3O7sF<`
zmTZ429JEKNP#vUmC0Xgth@PhO*PhnmE!nz}yY;R$0(Mg&_2o~fAoj%W#^5bSc}>Z5
zLJRl~;(+<mdGca1>aE~MKk1c?i+MsaKD!4Vdl<;)z2KhD<0syxm+LUk=r5ysz_f3{
z$P-9%FRpNyIRUQXTs+4T^HuY0vXcE&K9AGU)ewYVhPT_^>S<*VjgO?;;~qT8<9L#n
ziOsi@xs^~I{~HXc9#2gHX-~G(sL@QIGBZbXfe^iJwm+ml=rA2M)##^5grN~}dQdMK
zL}Yb8alzAgmMzXZSoQ<td$II%T?Hqj6_`@Gdpq@m+2lA+GJ;pblmFTsN*wzf{ahQ#
zi9hf@2S56eJopc<4{?27fEi6E8YnmiZnTLJExf?5)TJ(m1Kt*k-<vwv1S;nD!<{b*
zSd52Cxw6Yk?{P>HNYS})qNIS?cvH|@m``6}0a4ik=?${*ui$c2NAqO4Jxr%TMAZ3I
zHJ_GWqg!yl{3W*kwAF78CUh=N$I$S^@IzEbwovO6(T3oG{~EqnX-3X2x&=q$10DhY
z*$hhlgHjdi-y*21_n@0$4E=)l<6l>T9d8b*TNh}xv`l>lybQ;<ow56uk<OSMY(0a%
zmDtT3nOgK;P9v(!Irz`-yzAkbO+9r#7ySc++W{iG8y><wm}ey*a{u(M4d9&l<Qlh-
zo!=FCB=Q`6Q}37Y64qA<@Y`5wCRbA{nJUeZ9-)V7D=}?%7zbP64F4_H3O5MrAQr>I
zW5bgI{^nfjyYs^f@R3WyFM+CW2=5?2*%y8nHf9Md%wt4eXYyRiXDP|tnL*%R0$UgC
zOo4f=;tu_jp?OlR4G%#I(DW2ywKLH#fvD$4xtU7>{+8(1tE*oYuribM8$o@?!&6?Q
zuhQSqzX08>20{=v+EeQrPOr_wa1q`#KBdlfn5g=Ekb!IHt@O<sgK;^QO!!`UmYy+R
ziH^#nK_^6g>k1;f(os1WzVJlrKDbnit=Ft|Ji{-nZ>{5GPZ!#k*^Tf(ZS0Og?ez9w
zOx{nX{2X!KPWubGD^Jj=QjamIfR&|!M%^A%a7DBy*azFlpapmMICdw_ZRjS_Pv%nX
z=>gU|f^j($%;9<L;U+xkLD1exFddr)toRgi(82WNOrjd}AepD&!f)|*GFrb4SnxId
zy8bo39Pr<7fzfh@KN$^M=D+5@4U+R6*=cpW-!*iib&3p(jEvk(6#q26Qty@Ke!HrK
zP7se(k*=W5)|u|HzEodE(r5A*=+|-(TY+c@#(G6G<1}VllX0oQJ-7{q%k2U0U>aRk
zFTk`~OMPlT(b;))Vd&wG;Tx$)jSA18GWSII6(X|tL1hnx|HNk3Q?5`NE7yUYr74q$
zzc!(J`vUDdg8m7__3Rob5u5c!1Bau5kC2D0gacn3WemoigD+?X6`gbAu;n#TRCgBP
z`HRp<QQ6rYWEF>ks!j~dgKOwMkLWjmSq-2jaVMDUd~&{3_>f&e|9J?Wa9ujjBj{-l
zIKm^0JMi?62GQI`JiXA?<8a{X23_SoHHyLJaCG&)pa*2V`EJlP8nS9yjnPw=e$k<L
zjyr=c!G)lI8(>!L1o!(4-|;=s{cmuq&JX&h8roOU10vf36BDdI!Rvj_e$jr{K1#>W
z#V`$A=N9-eQ>fA{2I1M}yzBe`w<;c=A)%cqba6b4KJG>%1q=5GndFIoVd5rvJ-nOf
z+!&27zYD*zm8wK>(5q3t9uY^+MjaS54dLM?!ijGV8&@UEanawTpjMG`7EbQGfRDQ)
znsJ;h-#E?4mGDF+HRhH<N0R91$cu8go{PLjuhsrYfbkYr39Sk8kour@s^mzm$wsna
zaIJ~zy6De1vo;ZP7AAf3Q~m56(f^V11bS5GljpunruzYi!3nu4xyZF)8-7;`4Eii^
z@oD6{h1l8uq#}`~WRnBWWY&a7;e4%A-UNFn9SwqGBRGfUZSjA?vKb$+Ys;z?PhzV@
zMpHum5~I}yy|CaTcGYgthSMWEjq2vJ@EkUgO}`J;CaRe6FlfuyB203cb0JhYQD*H7
z5Z&kDk$n`5iNEwX@DSN(1CMMF8O{_koFbU=qBmq;xgPm4&g_4}Srlygapnxh%@gMH
zuqxgJ|0^MHuR_06Bk<4bEz7zIEbs~XYIj@v7%gXK$ex*Tm{jsa=hPTRPa*uomx;hO
z*(F%|L~zkr#9H4FNygKIXuCJi`7{C?c|PMsRO(bJB57byqW^FSRfa#{x60^vFJi0d
z{>#+e4v{&RvdZg}W0aq%zdeYjhJ%z%1}EDFmnq1hk5mbzp}Uo-wk3eOMBu-Q4#BC?
zOQ5a0q{{LoFb)NJl>`6lQ8-_(;QRN2%%4wYEc)whYPh!$r;o$)F9LblK<CB*dZ=Sg
zF}oAb+PRU6bsk8c+&tJZZv@;!fyrD$uV*hZ<U!1;Fj}1iFK8nf@>k@<HMJ|4yQ7VE
zGa1!bZ7%unI`n8S6|Uo2Eh@V$bU*6X7wXSYy?u-7?FV#~|3Td<F*;j^8FUzRI1AHt
z9D4H@eRf-n{Q<kWDir~VNW3R`#(47~7&fB+eyv%_Iu8vngH8#-Q%xo7?L!`w9&}BV
z=2GLMvn<TUvd)9K`p>NDZR;y6tiXDz*fs2nKzmwIle&%gd?eh}2f&t>6ANqxGyet_
zL?x%1bBS{eea~&deKLv8XE;xg^SsWi9v`DMhn<u3LezIJ!_qo#YqIPVcptaI@ySAq
z#)0BJ3x0P39P=u#z1Nuv&4VzbioH0jWvQJ^Jxkw0KG9|Qi2Ye=yPwiyBzUcLB3DM5
zVHrEYSnCHXWir*B$B5B4($)4QwOn#7X5H@-^d{7h>QljOP5<dFFsp}vWsjw&e42D0
z*xm}bHlM(*{tG=zWJZsU@(uDZP?>qB_=QDhna88}R7cU-u$qPe6T2x~?9-8Z7iw#_
zVlAhT*)0vf8Quf)@B)~ymx140$Lt;+xb$dZg?q4!qK9Z3okK^kja9LVrCiwF>J)V*
ze8R=x0q?+b`3}DIdD=zTI74%^Ze;p>>F6G=jSM=01asp65oa9st+d)I@S6X`y5-YB
zSJpRBG2>sQZ>ERt5Ek#+pik~*Q0;u8)ki@bpCw~hZLBpuGrph?PV@#O!o3z9Z=yS3
z%vm~u&g>9a6Li9D1)<z^PA)@3IAywZ13KTEtaC8E`Ag{%D5eug@UTx3EySGa4mi{H
zm7y(3Aezarp;F03MI3QvzffV&L$HOYLUaxM0jih~?Ftf|1IYmgH|<}#2SlB=kiMY>
zbPg>!NAJ)V%zJU6dx?7mcJ_L=3z_UlDt0qLEtZkTZgsx`<^Ii$!{+MrDkpn4N8{z$
z;7?1ub>8Nn`$yDw6B#`&<LBI+KNUyN*|`#Bd79`Ciiy;U)CXCzBJIh`(&>2?^I1Gb
z{=15?wHd~EfR)F`gqp@M#H84N;YpO{zbXId?8`grTsxwlbbHW!epm|0H9<%vxKi!t
zbjZT;&py=+z3P8@Jf`9+vf=#PL+<=&z@|75<x<2~=me7f(d{REMjxdwXlv#<@mA3@
z^i~k@A7liJ8u4{OwXbiKT~QXTROD8iJ<lxb1U!w(icBC;(=}VWk-W1%{X)~}09;N~
zQx8ssU}ODP5zN1j@ihULp_rWXH$6V!Ewnr}w^UXzFVL6@GeVrZid!DpEeU1|iZib!
zmu<-$GhJXX<%6IV1pR^k<JKUCzKzqEq8W4$4Wgzo5|3Bbsj;cttU~+#wVUW%_97Xd
zC_2px;O~p>qMi0f^mP1Y|49Y%8mF_<l@6k*bPkDr!G9a~dxD<95|FGz&JijVC-9je
zHwIKIj%rsOw;p+P0)6L#Ejh}afX|#oFUZ60>+U)_kG^)RQ&BNbb(N<Ri)E3Y<k2fQ
z9#;QUItFJ`Z<$Ar`Fy&}g{@ddc3t$3zQH|FcGV%Tntz#pwXcw?^o0FCoLqYnT&kjg
zMJ3R%{|dc{r+csw9Zfexd(7{PJcE_k5}o<xcj1E*VnQ8)*e;&>h>s7xiHuy#k}!*0
z{9USQzcF`DO}UZm$UVrn2a|8lgyFwHeo=mvY<mZO_Bd#m=xZ|QX&N5Pj`eD|1dJ<z
ze%v(J+gW51OToAfQpG%}C`4~b@FWF0xQu;&ZWN~k4)mqkRj?v^;6L+W@hv-*8Sf!C
zE)H0ahXUT?iGcYiSWKlkLkIm<cuRLOZ<ffBS1@LF(9LvIZ%AyHMGxH<#@EJo#t+6H
zMm6S{Nn}Q$6msEt#BidHAvE{gm5gNKx?8MaWX7|=Zr&xrKMWi1JbK<l{yQ+J7|cT-
z7X@8!MQ7=FD<-Z#aH`9ss#B9L*D!qFn}VLV(NyjpCw|-Re88+VUpe19KNI;^acj`^
zb}1O^wXQ-O*9Hb}cl2?9JA^3i4$$>k?)~ng?m{}mUq&zAbhi`LeHwTy(W_L&tKnTl
zZT6~Qo(;!qLw$A}^S><cUI2;z1cc`=SQd@Qk8glOJ&fq?0smEMZy$oW#zZcrrqP6s
zg!c3UWWh3ikZzLK12hm$trWv=SA{}xQUmE4vfCcg0HU}l<hL)7;cllp=>&RoF*6Pb
ze=&ghf$o9h`4SxwAAqSJK!;+(^<ffUANHeNATwY%y+o$4JKB|0gG$=<;5BXO{TxJ=
zIzgF3rM3v<=3_ML1RUcl;B6@AR#&ovOgOmrfY3apzD#zojr!TafNfioXe^9f?!X*7
zL*a!^gBAJ=T<CYTFX-+#PrnF+#bw5|Td1yx+5H|SPgsfGe6D|swXH&B{kmW#zn)Za
z#~8Divuhb#`;UV81%8JI+Ymj{%r>C&H^FG1OilN3I@-2_%O5xYM5}5rXHk8sV+NfV
z5t#1%t#M$0BKm(F1n^Vp@m0a%2UBkvPgQ;%Ibf*<EkA4DWHA;_4dzyx>D)_wejU~M
zV^}SL`JJ{{iB#&Fmzz<l1F?S^ReOQ{?V*l#l=+X&rw1v~>+cQ3LVZRpI0l=O=huxi
z0BOIH3b0Qcp9cQB06ZhqGA5LS%?QzpHa<ERpO|f83GqQ0f>*wlvxm;e<1id9l5dqq
z$dl=Yc?yQZnxKAqEgTGsPP8%x<rw(mQ_FSv3!HcnbL}l-=BOfi{?`O3UJ1ElERnhJ
z{tk0+^(Qi)!(1w&OYKE?BkP#$aVL85IWsN&2vhiP<$UG{x&#er0<%X%>+J(AIh{jJ
z18aYX`u;Oi_+M4mF&E@c^<(vO^;_oZ`&Ip0J)e%C-Y~HzGsD}{+G;v|KL?Ym3}3hf
z`qGu2$x+N`@iepI?4j0w93HU1;hKWO-9V@0XyYzwsxQN>+Y{KE>gb6M6QjF1z#NH=
zJVs~6I`b1M|HtWBYhr24=-3<UG6@de0&1ljsFr>VPg2ac5^rB&Ys|8e22L=QxmBLB
zS5o;Gb6*`I8omJb##KQbpo?=WGfCtz1KNE-C*x*nG>72j#WA1Tb*_f(xRL5yIx|Y-
z(_8SgyMowuJGJ;PLEb6{Go>^RdeXX4Tg?Vxdx(yJ=ZS7V^u8got&V59mbu5oJWV69
z6Av;M-%BvO-=U81D}0*^z<{r(LL=rk83uPiFmF~cr^#oqzfTIklM)kZ7~o;G!4y<x
zF}XqNjm;QN-ghs$v_jfIB|eV1c?{Wyp_?ps2VdwHWpq6XH~)2P$7dj3q7L7XN??0*
zs1Td64Bzu3(V__-@@6V5L#egTrY`t579ySwv8Hr~ng7xomdA4!O!81rFPO&6j76uA
z*t2_^GK{Jzp5{sX%x3B{pW|tSy@(HH=$cPlbrLRY0`ZiHrD`){NCWF~=2Wn)cH~N>
z$UvU;Z>Yc<;7H$DN3GJ?L+%LX)maqyk4v0J&eeF1)Sz!V{VYAxr?Z~tnaOI4^B%hJ
zg(JCb@g76yXq`rGvluSZ8nT;sc;AlKmKtfM_b^e)f5Q5XM-x(**&s9EKD|K&{16Nc
z!R4uQ#_R=WVod@o?HehLNp^q=d`(x*A3`_!#su?!Rs(Mmm_SZ+)=yELn;*>hc{WS)
z3Ea2y=)NwsF%JiGe6E+PhihVCBJ>uf!^{{Hox8Ijm_g*9wq-pXhhI^nJIV}@m6UGy
znUUoCPl7(JhMm1j*-v#!@UZ(a(^xh<tod|zl+F-x?#$p9BA7<nHQ-VAg6$X40V^09
zSL0_=^qYxL#-GaNOXtH`Mpt1Gh<<5|zx523^<gYaEb)GG>iE6E_V1zpVzcos{%1dP
zz6oUiFPN$|LH92YdSi9!QSFH0d%{;0wc=4!qqZ}P%~6obi<#BQw7S5=9!_Qd5$i>(
zRKtE{X3s{<>zPF5DT}yzCQ-~QSeQ?!IUR$YeJL@uMO57#EPoi?Nd<7jRuiXu=6p?z
z5`yj9f=W|IqLNGy{fR^*kGU_pufq2EkeT*`uMu;|Hi7HYhMwu$h>$13b)1K$tp>yY
z5Cp#wF>f+V$D84YWzxwtiVpp${;VjU?k#4N{mwrh>!Jj6e~p0iGY^KvXYeXYW7$}G
zw^~!#9S6&9HVEZgF#k(A|0kL6EA}6=)0ATBt%yr9=+-PKS4;Xls3l!WY}*Rn^$>cz
z=7b*$KObHRKC~<RC6URWbf?xJ&P^vG5%YN!1Z<u~!AvvDiB48kn2}<iQZMj9E!B}Q
zM;0(2><*YcCDCr6QcjP^9^=oLcS52IuqE}%xd9h)9sNH0wQul0A^KD-m>^4n`cD<O
z_gka0zkUfv=Oo>jZ9#Y@!}r?{+odV?rnGxLsoZQ1XCjl6@i@<*3rC4V>e!9(G#+S-
zU@)%;V%XwS5o_pQW@vGPo@g<TR~CJG1wq%z8Z6I8Fwp*X%8(U<I(2($lD){M2D#Zm
zZ~ZiPj{6WZ4nGs<%sS@R+v$Exm-M&pkIY6X;*<-$O9K75o*sY*Sf%K^zl~W9v#A7$
zn&lj3c-YJAm?6I=6(5Uv9B-xfYjQBh%IkE?mH5BF&q*YX?FD)=k~nr+<N@-cwamBm
zdFec+`7!+dr|2=cls>?g^gw5!OEc*FTgiN~@52u}#(c63>3{a&1`MPMGaH>LlHUaL
z{sA6(Eqa!eVE*8qFh#}&TJw06Z}?rfic*V6R#n;&xAdXAeqz7?c#8aJ9o>ST!ASlY
z7Fax5qS05DhNT&+&I-E7iUOSbQ;_bXL?jo1FvwI-I*}LkgS9OplZS{+US+1y_lQmo
zGowRY{c>1felVxQ7<dCB4_Xi6{e^xE-*hqYi9{!BGIhdH#zfHVN2qCUGCrnCD6*mp
z;knDivVE8@_zqYmqSo;;wGJ^;NLhdVRd7sNk_$~D6I#j)k*kPeH`70{8|?Z=&}+d{
zY{ATM0?!kjzjK0F;P#UH{6eqkwRBZ<bawD;J9@WMbH1BSu{C~YB8E^w48I2)3auq`
zsKlKXvw#=DDOkgdqI;s)ZW*#08|7mB6V>fR1#B2Ix6YzNbrpQiPs8648N@Q9%pBz<
z7~ltCea8ox!UN13`81=j5*>-Tbc@Y^cYGhciHFGwj>Ee8i&(EJb28V|YX=?Rm+M#R
zjhUah1vC5V^osd<Yv$%F<wY;mUmyzTLH}Yd_jMe1R?OB?iy1IlFnh1g{JlOi__l)&
z5P}WRm`<1{U;unY{&<Of`Kg?-G~(X{$|*9%ve^jEJ?dKH{|7T;-hBaE_gUv9=Qa9f
z-VQpw&Ih|_3b!te>i;M>IReMrPF^T@m-W1B@b_)to{O6Q{V?b@QAs^UM^{`>GiCnG
z1u+4?z7?K$0+{?~(l>PKT`lWa%PI21MDw5VM1BqWqpF0@57(e8^f4GO?{c?)z?c4l
zHx)Ja^OS1J1!rJ$n_)eEp<J(ar(5SCs_7b)@~uHX<L>AjI+^-NIuRC8&D#&#{BOMp
zxYiSN41dN9r^7*}o*=XO&5S2z?nND?0h#wuGNmv*?W5^*JLaT<-7aCCj^AB}Im`30
z4@IzIynuZ?hz#csVpY+HRwHsDTs@Z=I7Tr0#!|Z7KcM4`SY&yOm=cY-U&Oqq8l1FW
zq$)(E5^-r4xtrXRsPtAk7I$+8s*%C^bm?R=;){csG^)Yyla$ts^-hfTZp;<@Ju|*0
zGCRR7T=6tG+_jlK>`LtV0{Gi&=u-NWiol=D8GS`CGgvpO{CQmegJhwr=r!D{f6uIV
z7tp74E!~*iVe<8+BXfW;iGIv!WTSJ8`;F&}b<9wE+^BC}2cD76Tz2=sL)jAKpn{|M
zDSB6v+EjO##RYWqyaVR;n-!18w_y{vh6UD%yEq}}UHI9q4!YhRJ3azDVtKiFwtgVT
zYzEJ35FUORIKxMb;i|#>SSneA=xOLkHaQl=>uI_McjDFm_G*(cv<~KlUjSd^s6Ql<
z3+wJ4BESc@=K{gzey@)S#d5z-N(W^xd^Pv)I_BXn?P58zSEB%ZS*ETgQ_IpO1Pts%
zyx}d(bufiET+AWz6<E*T;G>OT?TFfMKjV|2_EC!ZT*CcnMfNod9r}QN)jv%cu3T?x
zj`aXDgsfu@)j#0IRe{}5171TbvaQL?VYz`Q=r86NZsxRt2iMQJoEgE|VY`MgbH^yK
zl!@Mye{^mvW<HM>{xA041Fq`2{r^8IGE@)^H!9{#(az#<fWvTWF3g3w$SiTBWM-(S
zxG@){6^@h~Inu<Dd!RWB4NVgh6H{{=Zc~)s^Ln2HB66tv`@bLe@BaROao_ccgCOvE
zf8OuwdR?!9zwJi+V1L0Q|2I0Qt2moB3u@0yZ8DY3%%E8~IM3r`>c-wTUl9BhE1vR}
zwlDLr!RXIF)Q*JfKAx%ARCrd`P`Q+W2UCxyupwIIVf5A0bf2rvdYx{oZjbJJ#aDEs
z{w<3(dn#U}U-3--01xdam}sZrqDiHDjb7;vjI_tNlNK>ZEmP9)60SpfgUR3zCtlX>
zUDZ34qk3J#vzf-8Seo6>#HkW*I*YGjWjqEtn<p~)JkGP|f#=F3<qao1(N+1n$G?d4
zy0G*4;1$t@31^i54F82Fyf-rYJ_gt63aUVN971bRRfso~%r^(V;0yJv$H|`TY{n7p
zAUvpRRHdcVG)KDL*KzNSU>BTdnGRC6L2-&N=WtD&^KpE$uISfL=8T|D{f7IvlNrwu
z?xy4&xWG;q7jCP+&q!ROKMq=m=3_T}sFN!Fz}gMh1&0m6p=AKG&}m?>$AiyPZ72*j
z-9cla7j{9*S_f6bEGmt!z*4L{sN;5&t5V6jgQtuGkDagh=+*W0;e3R%|3s=z#~zZh
z0TgAgzBUt0K~DM`MxqP)80=&fzCI=BjmOa0B!GkLRsIvAM}HSiQe}MXrEBp;7v0_z
zZu&vZ&QF4N+~FxJK^@VO8ANuvMf7ui)VZe*8|YN-;Tm0nRTF?>d>|chg3b47yWI)n
zUFAt=VuH{^X(B#SZcpF9W4%PBQQpSbHpAAoKR+A`r(!i|i36(W+VEK0qHu{&yV_}b
zmn+Q2tq6aeTv%C?7u?t1qgxi-{|hjayReDN1-{DZ*^1TCU%B^8Q~KyE)`cr<BkT09
zW4^9`*4bYi2<v|8(sbqdSC6_hEXNUcf?fBX?aCka4*tegEY1bowE_CK<{+;<*fFA1
zuYAz9b}r{qJipih=}^q{p!eCRJfd!ar-%!uxZYdmZ`<K#rhvnyfvjAHKbL{)=EE1<
z`D!W^YD+YRT|xV$mc2-IRR{&9U@j(b*%`R0Y{4Vy0R4`2R_5?Rr{k?05X_1(*9NWf
zaO&Els@ExDssuCBh*RcR`ki$kZO3zT$9FjuHF-QTy>b{GM*5;==x)NP$Aq`J9=+N{
z-z+%q;ve;5k38Bu3GU`+Ah+TtwUK>oKfE|MG+{=+med*V`i<k{{0hYO5V-$sKPMb6
zy*VM;;czpYy=y+KH`%#<gQMw&tC)_p)*3YKeH?Z^4p@vDXN%I{Uq*vp8Z6((5(thT
z248v-NZgm;vPtYpKZDxeQ~gfm!1{p=IZwMVXO<pkI_?~60yohu%MNrMG|ow(ac1~z
zV}mAgwysBSwi}K8k3l~NouT8ohUcqea4}qk#7C$vOpIADF*Z}<oK#GVqGIiWKTROM
zVvE6WchTki3~Kw3e%S-=^M~v*lE70?a!NWC&~;rq<p>kSYDwipaZzs9O<>3uG?lgX
z%tee9Q0NAs%k5%(o9bvJ3U`^TdVsq|(ECoMMiQmE%yz80^n$0TV>z8xgWWseB32t5
zwk<wA5lX>&TFrf&ZH{zx@^zyNqw5K$dV0@1nF`@k5Za|og<Sl~!R%^`XHIv&{?zR;
zoO8$VK+J-(>&hAswMY}?bebP`Ax3c`KZU`t8}E{eN@dpxC)0tTDEr|<-eSU&72svt
zeL`N?c_QHIMB>yCg^pqhJ@R7ZL$|}?#ym&I`sl$lXBczFX(&dQ2i^|6A6Pl4HZ@lZ
z+wK#Q<2RZg>tHSG<qYSQk3#w*RbL#B^6p}=#=WRmO)=Xk%PwQi@dFOa<pn%6U&g>n
zaNNDDq{}#lmD9Zncjqm2UVTC~g3JJNS1P}u<-U#Hv9P`vt{)ZkFYD{-_4*;O7vn)(
zw!skpoqeYmyxsbE`*x;t9uC^F)UY0`{|xTw8vIyfpJ|4_=Mdv~)c=d&hVKE*y@)H6
z6OJ>Led>avw1#UqjJeMopD(Frwln#;3e&Ktsho03@i#Tck9PoW2V<H32#atV?C;aI
zTJj~|N?>pPXf))c8^&((F-j@n(>R+;g1S{^`csb{&yVSOb1=8wpl)NSzL&xeyhhTF
zsB2!uk1o{jebkqy{5mqVKCYN7>FgC&rEq!XfOTw~7AuaDo7WPD=h2>kjTTS3w&r+T
zb_1Q4zWEcd+ArzcuHX*zDjJGqJoBZ%$b8VZv<z;Ge(#XN-c?SES5ZwE_p>Ct{kjTu
zUx@Eb1+a|C+>xCq9FE~ibs2vj7kwFh6?jqI(br5sp*veSm+eA7eSv$Csl1o-XJmxn
zz1$1e<%zJRRw)eZK6j`XQy4FBjfQvub%ICT7mwu;FsWytb2!a?`h#<!C>>EPA8#hU
zA>_Yw;BNJ0?vlWrI>eo-zzOgnz4cpg@W+6EE}-A}0TrdkbH0*8a5b(<KX??rQ84=R
zX*_XPsoIC)B04`nFz~E^7T`=Pn0nlxH}nLLJVRA}myDqnOg;yo*gZ~X_;=h%rqL@3
zdQG>eEvj&9H*IOuW{ufPqd=}jRWjQya&2{HcO{+3$SEAkghO`QiLl#tQo~;-AEzk_
z?x9S;Y8&b)w}*yGAsu1(jG4xM*tzA<r-my(+eqa+6l2F5WD8SJnP*kOm$4zg*WNgC
zMJtWjNoJoHL5tjN&L39Cpn|w)!<dc6p#k4OPnyOld<k`{8ywpJ`m9#;rQNtc0~Ggs
zJYDH5*k_BmPwVj|`;NQy6RL^xzSn&3fH4&@7dO9Tu4Jyxb7P<$l*wrab2sK<1JKnA
z>NFL7;XLzV^VeWczoPMWV18QLFOVFgaJ1&rK(5z<I31@Bd;;2}1+Q$&^nDcPa6DLw
z_(Yw=C+eYpNqj|&;MQH~944Y&T0}Q{1jffTc3oGPUOsq4cd@+3G-L*q-7b`=Y2XHq
z)OX^|*cz_+n_!G%dD3Ke-GrydZ+PDnR_>nu%*%TP^;MIwxyt{4r_IgzevmU$^ZI!B
zh2n7c9?bA~rsk_yGY8>@p9{VxJ#R=+g*Q5CUjlLTW_sQjU4+cShSTlM(SEI6&onFr
z)a9Y#U3t;-H3xSXpc_rkw}>pI?@&2k1c8yA(+elXrc6}BLB68#O8*L7{cgIxGaxYz
z^ma9EO6RxXd5<-GimU85JfC|F$51~!q5~+$F4~$k^`Ua>n#Pkk7ynr6d_%Cu$6$|@
znP^yeKD(<4y7*5CUXx+tU&uVnL$S84=k$v!sW+a4(d@5_SUbh>u4{&-W)SoAaiAFS
zXx{cSPk+Eu?ayk6p%Pn89k!Wds{`blTqpadF7xxjem}vfmh_fV@C5t%-|>GL@BGRj
z%Cqp)*v@lZmGf{73bP{QhSlQ^y-8>GCAHB{I08HldWD^_E4$(;GN4d)h8EStvnRfU
zDrGb{?{*U9G`L8#0C@~k*&h)FI7%!j(C6|hGfG#~!9n_F_#BJ`kNlW9<tF_urcG(8
zjxJ}Y!hI1hmryFD5748m0uSEsm##qB8kLH8UIsGJew!@A1QcT%>D`W_O1Wz+?o)>9
zX$1OgM=;9PxHhDi>hNqvp*}x}4x}l{^Dj}I?;#tf0kg<<=mHCa{8y%u84l_{+y5h;
z6;c1!1xK^$a1Z9v;9kI^<FB<ETG;7=3bnN1^mE8rT7&Q6k7zKjsrt22P<5p#>c(?4
z4E6bhptH;nWfoXevz+^K6dc%ut8FB^qBnkQBRP+j>3@X>kfjemd%4x{8>w5JQB21h
zmxF%a0<*0QLh%j^pfB<3=*IerCS~nA82{Jt?Xc!Rl=xfD#M!lA1ifk`(_7(qpD>?g
zEoyRHiDj~4v~j-ePgkPyOn5ir6mkk?>?3#|p45*<DoFeNYZROiYYjOKuA6vJ2s`9^
z>W6d`ni@Kd>fq@O72{3tkvQ0H%js`7=j)AckLOn2;-{uEJ*YLsqh=|SnDrLHJ|@Bl
zKS$<Rb#SZU_ycUi%}wyq@v@6W7L}MLjUO2CNOr8_T5tBK0qjoO;P+fX2Ur>nzz}M=
zy|{c-q)Qym3f~6zvbXVls<nH@+W4w3gjw+is*n1hOM|JsHZw!_#>Zj?S$NktEyN>o
z55M_G_(Xcck{IOYLSJ<fzHV)1*%5T*3oL6vwI5qX(IXvVhc1r#$AAVR1|N<CcnAC$
zR0c+zF}M*Z%m{Fp-Jmd5pZua?eTxUvE2up$>R#o<J)!r+%d$Mv-hsxNd~cV1{*IIT
zd~lIpapiny5=DV{=0!7EnQcoZ$?Kt$&Av>BA&}u)oyzewHLLv)JZ(DX-g3pXc7Q9?
z3-!P!a3uwwZHp2h+<y?$*;x3FNlXXax$jZRA3aVvK4fEH8(z5k=kRB8vXrE|=)vrN
z6w`p&sO*1+`B4aVSV{2AY)2YV0(Pgqw9jN*1hTmuBrF{juQQoxFX2?|4-(dwsqKew
z6(@siehwP844=wPutN^ek)GtqzNGvrvzX$R#JyNpWv>SNvL81OZpT!v7ai(grn)kj
zn~7`8LZ)+TnDFjW%*B&T=~!rSMOAKW32IoqLOlj3=Ezdq*bi#YGNCIB+pHdX@t&;0
zXyqrk9lqibG^sby2fn1Qr4Q7%0_7M^hp|Avo-<M=x|wts6+oQ>a7ud1FogPbAug8N
z(VpA@xi4m{26it~xp$~rg){U8IGN~~ex`bTY;-3HM9V}jj6HWG6Qoa>*RErt@iX(<
z>&%ecm>tz%ZHs<yfZ~@eB*|$%F6)Bq-$$okk}Aro(tiV|MX7N`rN4}c#{tmmbNK8$
z_4Tm%Ubm$`{eT(B9N0r!;pCrZuJ1sOXHE8@5GMQG=`yU2*DG=Dk_zb$YNX=uhxDKo
z9hmNqVuzoF1JfG+?@;TfsZ1sfzN2;UJ8KHkIvTa!3U-i9%4szjE~3@n%M~xS`uL%X
zd*~pQNwe0n<!_~Dn87e4YblOt|4vj&e*}6krS(=kdHaeyYr4`FR!=$_rcA{ys*VRz
z2z|{UDypOCl)%grii(}9#tT0C5rts<Lg#s(mEg{#wh5|{I5<NOVH%2Ohd6fB;8f17
z0cn!s$p5D5JZI|ntC`_rRz+z%(FMgAqnxrNQFyz`kx70bL*}kcF_-PLR0Z!bGj3zu
zm1;DWRkMf_`Uh&MYdGURHWu+Ij!HyWuJx$R1JEzEqCW42f17xxkHptws?RLt@$<FM
zdY^5ILGlxmqVu>Q-N6B=h^aWdMM1~vnGEE`HYRDb11oHjX&&wZyV;M#ea6|hDl4lI
z`;nZ4Gkur(ZiJ0?kx5Z`_}(Tu))t`n5okfDgU4>d#WRg+yAZDX_2DYM#%dY{Ph^(g
zVqE)vME`jm)I%J4P5ASQCTW8IJgV(o;9lvu^hlEE6^gfq)rn>$4noK9iMywEpvtfk
z8!0a0J75~Iq<1Z_Br@?o0hjtAzWNnlsfJK_cchMsWYtW;x%nHMz`g@vwbl*AgDSvQ
zeHHY*16^A`yo6?`{H={(8Naf}6b^m~pD-hcMh|fJ(af3_!b00h?fr8wX-A1gH62+m
zqLC<zhoqTghc~tTl(YUE@b_(G?ftHOpjbtfs09Pzp><X%StC^4oyclRQC=`r*-h%B
za|=Lq*^<gz*o-oDUQCU$kGZqprVfVMRCujzJ}^UJi$v#fftgR;C(MyVyoZFf=xo%{
zD|ctFiM6?u+t<2V86=rTZ=Xi2oxbn^V&EHn25z5-YuOpj)DSTH2>gilnk+Vjn{Zeo
z!Rc3{hCG8Fr~!9BN~wT^@ju%x=l>|v{|7LLd{`A>;9$dXmWX3w_8pmUcTxF>n}pRt
zrC>Z>>KRFgTf(I0ApFG)*3DxO)0a`PwWF5rh0DZX=D1^UK%R+r>B4|zO56UTv%Z{X
z{~D|0mg?-h1O06tRUavKqm=_Kp8M5sEeoY%7>~C7OR`nhgQxx!bQR~J;))Mz<v>d}
z_Z3RX11b|$dD<ow)!e0yaD&z84+ly7^Cysk`z5;eV|bcK60Ueu1?pO%-yMiY-8khd
zv6?#Rdn%=Sq@|XD1s$kw!#Wy*VloyDjNo72fq<Q7R`(cGwG#8W5PF5Ta7vp167aR+
zyr$qwe4c5YGe~MJ<s;FSinxz)7>K|$y0}%wo%l!`XW#jgzThQ#ID=11w36@QUGp*Z
z&9~~Lx&j(j3>So&>?I9JEFPe+F!8b40vGML={Njj9N<CM0#$F1>v<%-#3bsQ<zTD3
zar`{Vo+7<lB|NV!=3aF2l1&`Xl=Ul=vKwr3=$kNI-QYq?)!dF*^k8b6xqmBD#*@`0
zm9jV^^rF*`p$7VlH6(SAIEY@xKVMR(%i<I68xX)L7C|i>m6IRy;+*hVjg$=2{uZdb
zl`rAVw6F~<Ssi=NE*v~BfT()nCcT>8{(4X)c9wo9yxBieifZa`&x^oy-%Rz9qBK(f
zikdrw`O5&sjh?O2V)v17`jf5#X$U*@9-KRMz|oD*WttU)r)RrLW$!27D(>P<v=<Ic
zV`^{~g&5niue?u>KZBj+9Cb@2TvFwZhv4WJOh4Y2JnA`U1y3@k8)ANyilP;I=F0x{
znQ;t)8*mbLy$;mgGnud!r4ASdZn6^0B-K(5W?vAAJC_4PQ4ib+8i8lXVXOB;dQp|L
zY=KX89iPIk)MfEH9d%b>n7Vz*8QDvs!zI>lpz(Fk!7Yk~>jK6Qt9G&<eXelYMc_iX
z02Y%MDQI)(V8w~5K3LHRaH6B+#S|g$x&ggGCwz+*;BnIl2g<=p9dw8;$;@hqr<yqu
z&>Am{6_)DYIHgfYk75ch%9`z{9g+*s)i_h7wj~iEf+v4IuEd8$-JelZ`Jh;}cIESR
zB(^H;Ix7FMdFZD1NJ4{3(kKcq-b-bS#&DjT1$QkA;&+V9&|m0puj6^`h~}*YPkRif
z!zuVm)|88aS<J&xq6(Y+0?)b=$&BJG9s=$?0@V9!aPO2H?TmQ;W)|rF+Xy{GcX$;s
zWCAUxqF7JG`itoglM~2IIjV}<IE4Eu$BA|@QhKp=2E%wC1C}!rk8r78*Z6LNm2yDs
z4rhHYsq~gCUnem0a<)u*UtI8-<Bi{i9iy*#Fszj^=qC1=e+D=I(_GR|^2=NL_2iz8
zXYwn4DL=wnDU4H!7o3%LbVHIi8pCNK{@35b8u&vw3D=|k=o0WY$nPY&;cv)}I!q#q
zJmF<6uP6?DIK0D;nWlULLp2qKY9>0aDoP*IkfgUhXt+jDc`SrCw1>Lmrs73a1*;Hd
zVP{s(2$Hem;HIu)=5`PVlw07&B{?H}f*YgH>`$)mXu6oWBxtPXoJeJ!aznY?I%=-7
zb+~HFsD$6fc%gJ<ZaWIj>MZRd_L1+^d2w5L8hWcdpPrl+lXahhHEq%zqK~=2yhMZl
zzRXEN;2rg5>OU2q^e^$M|Bm%@5nhLTj%ucZQq9B|W^i6CF>F+Rb640C#22?c9ZfIl
zjCaA~M>3`TjML&<;|`Us@qh}oESS7W@eEh{7KQ(!g#kPS1?}p9X)wu7!u_enIXaOX
zjSGPl*&%zvtXc}j`LiU2W4`97slonOo%$+6YakD$6qQnc)IDcd-$ih!eVa+aR6|$3
zgFV#6PmP`^rXx^EuR_27(5I@&fE(6f-!33k*UUz0j%+2pBtK0c`^mnFJ_-MYW4JHe
zV@m6VpH6%Ku2id03O(7tiLqCukR7+N?4IedGQm@<^BDJhGYGRMGr}Mk4$`vBmJod}
z;0X?kmFbNHMd^sw;k!9HLGku&!&x#OrIm%ulPmNxuh8$N$?wR^QIpK2H5{K5SY{=4
z73o&$fc%f8H{HtJbOWsw#-b?Bb^N9TpIwJG#h1k3ND>`dlAbU{dBHq24fOTo?2RLb
z<pOgMZ|e6oOeydAZS+44RuCFc3+`3}i=LDZe^`NyEX_#!XbUr@Gu)V-<P*KaEL!@y
zY`5avDBs$^V|X$S0RfsrSHCgn6sc(rqz#P;UVzUJ={MBVj+*&g3TcaJcj-dlQ`SRG
zwG*xC`&0^dRRU`XCN`c*fnLW>9#|Nz;bWM-&ID__N(NX7{LFmu#Oz9~Fo9}8_J9<>
zk~kx*#r+^MU>^Q~MoUe!mJ^wap9{Rh`7;PC{un2<A1KxI;3M+Ag*a;Bxj2LK269e+
zf^W+AJVnF70M@YIHdTC>ZH7arhc4jo*MrqqkB+_r8s2ES`88w*?4(W-SBVSEqcVMJ
zGck;2LimKNgj&=>i6D$me509L+-6=po-?yJl}KxLp%ox6Rp88RhkIEUU*m0ooq|U5
zTT}Nx)KU4)1;E~j2K7G$!?Fp}xZiYt>Kf=j<-6O@95RMed8w}#>fDv2T%9uq`Bi64
zM{yee>0gezc_@nZ)PNw%V<x{A_NO^`dpR)mPXIsRhYoktM00V&fo7rBPge`gOc*n`
zLFgD(P#gXV`}Jii!q@pZ6M6E^aVivtQ8ye<!DKkYS4}-Z;+BHN)q=s=-26JTl-YRs
zYzZ*JV7SQ~x+XlB0jLSH;P3~Nc|M;hng$mr{?bV6-`#?rZxo%?Z`uHS{08c#;?jDV
zDOY>gCO_-FL0!bv_9jjqI=+wLKI3rxmAtT0@F4?8UswTtooOnC24V))$q5|sI-_g&
z&^!*mi@os6uLShri7Oqb2W$R{y}BkCr6$ID&(mPd-PQ&(V;ci!Doy9XuK6ZR%|G;=
zQ3+i#j5UUm;&=!T$M#?|dzGV7C0K(q@QF!BUE#$OH3ys}gp+6-zFiuaf!$!LZNND<
z%fBf*;%3#~mZY*62ZQ4{S}G6b@zd#6i-MXq0EOHP8>1+xT(gAv73ZjOqDsN&tEub7
zlfDq=iA=o__4-(*r6sA{r*nFL=~K|^GUEUB8r{(raM0hl69dumY{6H$Ilc0}z+j$F
zO@gClJNxfIklAtC&*7G>W{1&}=H4DmL{bWu(S10AiPfZk?TDk|NOTU1^>++@WGjuO
zF8ti|HMwj*nY8L`9>GjzH?C&KK?p=4Tbn9g*bt+5E*J1j-eW4`#0<e&r&~D@`FlFV
zk_^58T|qKa@U-XjuzB}iE%>IS*$;&)AzE(xReY+_Z(BXjyx9@Vs8K?g?X@5QHuSj+
z*ci_JPhkM=#Z^>Xr_%AA%72>S4Gz(ST3{%<i|{M#tGLsYv;W`0w5H*Fzl>`0H&~yU
ztkQ}&?MhZrXI#zatF()UqLfQ?)XWB>5EsMz^DdgwV-A2HI+8oP3iLBsB~jj2sD&r~
zg+97=Do-FfC!1~lU*xi-gOF;-y{XPA-589tgT5ORmjU|s)$B?tjCrh%uQ`{bEBygJ
z>1jICYpOSOHB_fl34%4+kyCv*PEvxO?t<lg6BcPT)s;$5Iu!I&9Q;-rx4{TIN+!@<
z9HEMlgVO+YZe9%IThdy71jV@KQ%E7G1{})UksBC+!}1hRu0*o1_OU)MFfVw*L{V}B
z8!?A|2bFg$73gX@Q_<+&K^;{dRYP6UCtri%)89NC{B#!HJ!_dS?t<rahIA}Rn-u@r
zM${Qma9FoeKM1Z-kWXw=x>3>WPN4qW$$A!lJ`I{~Pc#k&w0XVJV#dIso)OR;-=;py
zDxPt9VyF;e!QtaT;^XmiN&t^v4y#%+zO!d*4l0e<<GCba>r72nW(&N~#ItWW^XVyp
zA1f}%3ewHCP>~&?bCoR0E3C{vL0ew|p%-N1gP=(;j#n_nIR>hl0Sn$8t==ott%2la
zbyXPrDDsjL@O<6~+wd3G<aH}wHOWzv%9<>$+@J!f>bioP4Q5~e2&5xHbvNI0w*F3b
zLrHoYA2i=@z>$Anxs{3fH<2k`3cXH-&H=9B%j8Fes5I2KNTeK~yj88*yl1N4B<4m3
zZ9K$Orl#p&YS$G9r34;QFO&G)60PSz(Akek(_6;ubRTE<WlnI1T&`u_e=`{{+Bk*o
zX))@o?MzaW!AyjS_7u%cH5f!~eR|>HGfCzD3TywU&k0Vb`|$Q1(1#e5Z+;}~vvtg`
ztopsw9HwFh%A1F|*oqZk@;5~z+=-4!^f&7iLn2MFBOK_Bs+$8jX<IRQv?6m8Sg+Fx
zz~&CV;Lda3?2OV>i{h&r^MH}cv0#?pJaF8v@qyh2YWD+^^wT!CDPg-yO;r;$Knwq#
ztm%m)HOzteE*=Jl;WTFW7lBF9fWE4Oa)*~pp-m)RrlbBV1PUkY*&uL}H>rKa!+ADN
zlZlocbXPxt>xv733l0Q2v|HlZ{2m#-Gx3`G0{!1MP?ql$KmIAa3NL(f`p}c_q^nA0
zg<iJf{O!rUSwm%GKd&xr4dbGtO2iz9BVROU?lg3Q^A-DIL$H-Udz{)!R`p%0COO4X
zqFB^k>p>S^11^RrlbhhwXYJev;@lq%o;OV;uZkZ|cEZqcG=>*IHSV(J9Z(p0pbx8o
z+kue@R1?(89dnX0qwy1;2IeQb@G3M-+i@08&hZw1mWS!7JT;6tx!K)8l?T!fMDu)1
zgNZdCUHmFkWy0l7wy|@qPlN;dCJ)lG#ZxWB&<c0r_sEzOef+m@<&NPqE}nkQ<e~^l
zXo2m~of>esaV(RGg=8%5z`yDzP{Mo0!alMi*I~`eOe-9Z@zJ2l2~@$GeD<;GFR|*M
z;$Y>84k{2{cn9X~AHdL^%AUL$1?yfWTNhdJnPj<&YE}3_?LnR2SFV(E-~?^;-2)Th
zJSigLo=~2h*$-7lJD79tu{Td<XI{b1EWVWIR1&Zw%IP}v0l|1oh0_Uq=r<9)#xis)
zJ4w_#iwnnn+`O}ui>+9}?=qVh&y;JaTEX8do%~($eoN!2X8<2;iCffw9B%G9w5$hl
z+_*}uuE9g$Wm_lr2CG@PK{Mg!Cc=Z*kDu{nl=4rhdc9zP`=Xc*Q|yLO)O!mRKX)H$
z)=MPNWd*vz&wZ7OxOq?~6s<DNnn6B9B5r91Vd!3ADqV<4XjLX!4Ponb0W}yAJPyr#
z0@I2;`0%B|Q9&7<4rZWm#!^f@4X}g+GZ?5=<R@ST8<cPAFWMWhEd^Do&d%Eux3q3l
zd86sNXS3oYjap`)e=w1E0%@*^YfE!-HhZ8MhyiQ<48G82cG?trp<8IST*w%zO@}VL
z?q1A8$8n;^Go#pw|JgC-6n6|ojK#s5U%|D$6*{grIoYjfv+SL+bN<FUD(d43!dTBI
z5Jq1o=32wpJw*+@ieBmmD*SWsH5^PO;b7K8!_z`dulmt<Or!E#$V%ElEq(>OsRBwK
zaXRX4TR$scl%=94_|vy6%u6Ghy0=(26Tk`9aGD=A-$XS~lK$6U&98>zMmE=PlixmA
z7nfKirP<{gp-c=1Ihsj=LL&RyY5!~Z232GND#-CW_~^y5zpaO#E68vm+*f3GYfpC^
z&EB>EkCj7Ij(@__E(asC8MCUsREVG8N4kM?_be>jlHB|H-23i9{XrRp9k!XQ@k>;F
z&U9u5g%S;+=9@**#ZG$Ebn6+L;izfNUQ`~2W)l*hd$aS*K>aSNkR$9fk5ocIJ$!H*
zQpJbE8Jvo*#+TgR!@3i?^GrF*P`{bsfxQEFa~gfcW}Gw5l1JbMgH}g<7QyUbGVCv5
z>Yt}Jb0^KP8h5dgu_gDh3;63W5Qb0HT}<IVic0x13Q1uVJ+!3{yr@*p&EK~=-gbq(
zIf_a67id#g`y7TRmd>8xuI80GCJd4-HVQW33ezUK%!}OTBEGKZQbX{sYoT1Ny2G{Y
z^IX=rINHT>UdAzZ$gM3&WRkVncRLx;dr?B4K*cIblcHu<{Cz~F)CO+F5IBVi@X2=5
zy<Al~`0DH@Z8#kVtJCpI6ibp0ecA6N|8lGlqm7Z%F&{TND;wuim7TJW)pG)bxd_R+
z)i@o)RDM|u72i_uX2}tkWULb4ju!euZ}y95@_pjrPb9&hNK^TFrPZm|0$i~V)mb8F
zbP^rHLGb9*0zA6iaankoDQENGH<*TxResCcnTh{F)}`XMXq;4Lo)ZbDFQbibibkX#
zI8&TTbUuW~(@kdNHPu?`fS!4T+9?t_n~t!S(pXJ5bR|f^?8pxBDd)~J?MGS87!!^>
z9aT2{QhX9NQFr|eaw2P~CT=_pIb9C256B8i#aH7l$thLAqQw(!DDK<eE2r0=!BTEh
z+q*Ms`jDD_44uBruJ^)K^JXo`+&YwMJ}Q@AtDF}VK|;(REi+XOzZ8b(F8cE{a^o-9
zlH)U}=AU;Vlgi$zgwM;@>PgPQI8Kx0R7J<>Vv94~Zsz|6S;cec@Q=YFEgIk&P=@NK
zCWwv?897Z!S?PqU@!J9KGT|NtuXH-8v|n(?SL4RBgUpq~0Vk9*!VPBLPneVlbE2}P
zrgC5jgtOF!wa^0>&UewNj#8R5tFmYdy7zQWmy)=0o2c(4M`tYR+^^tGoKc*);-t0c
z(Nn(0<oiQhIKP5nbChoKHV)jyaqY1%rx4%GF`&=ljlTz{rVG}+#ob9$hrPuaO>15B
z?QO}?iPTP_rdfj5W-?i*SE*u3Q@Lw(jg-QD7`@{Hs+H}m2tl0-<Lg?N-K7Pt2$4A4
z&%mW;BXx*)H3@^JB9%uYCKlnG7_s2ZU%{4;^Wr=_{YQr4<gwMlg{PxR&zP>5`deVo
zh$^Tkj_tMR0fS+Kg^}Jl0t9Fl3Eba+M;(DjbBWBSEFV{PkNTVx&B)>sk1uif+KA>e
zoy^iFrkALx4LD@H4%0z6;-A7kUQ3<vy*ev|b6kqb`c?LW79>aYhSN71j_DFO4?nVU
zZos0+c4?}uCP@|)AFq+>5QbaRIO^tQRL=X^A4;N^?G3kl3oF9|_sP9f4$0^ZkAuPe
zj`p}Hs>5m^5ED^rOjk38)nI=qIY>iBf&SK78)s5<haZrjw3zxhg*)%8+}Hi!JhX&|
zCmBlpaE2R>@<)`1bC_0(6VDc<KRgQhbB_ArmZ~sZlyhV?dORJ7s8ky5l{ag)<L?wS
zxa;Zk&arbm5zNlZNs~ssA-jf&N~146?UQl%|AraoDXNU(y2{`S!QczMNUfU4`Lh@<
zaxyLm!gzfNH!mId!5eTPqR<Y=RALu1Z1Med#DD!&^oMPzDP)2@n-#Ky+23hcRx+b}
z8J1NmV^?E8HH}D6I*wCt*B`KZc(FQySRH-o!6xE(unx@b7~EqyQ|f~ewm0=-4-p6G
z^<V;44R9H<u`MWoBG7Ea;)I&WYWNi%=u=fUn5Z{<Fmw8dDfLQbPCtPG6oyCDfGV>G
z$r&+zUxJ?}!Fjof!<+O*Au#a575i?k&4c$27_^7-;Rz-qvJG1NZtM#E*cW2qETrPx
zrUiwvI&axW01{C2tYwA#j<T>A_y2X=caGD$-&G2)Al&wcq3`+(+-M_H$~*AqDseAc
z)8&LKC(xnb@X^!~6YS^)cd!RsB>9?qt94SEo-*2c+E-zl_eEL!Il9wr@Sd;1QK+W#
zqq1m8ZP69Hv>*3(I11w_V1;w2GFIT+wgu$;5NY<327N_$3!J);-UZZ1T-;va&imn+
z(vrGz2uv8sL)wGt_@e$PoJu`emA#lojW#U6txJ-&?lIG-h<jT@=Dz*8=TqSEE`oFZ
z9p3u4jgCI$s2ycTh`^U&E_=a2I4w7PoZy&yvj=ox2bc*)y#a*$SLTw1l}e`}iti8b
zzF!GWd>+4MH}nN9IR8JOe@;+5gmlgb4IG4uIM%krg{dF8Es}9#b==xVH}N|eMR(DG
z7xs6-cT3zE>M%hPugN7i;#j9eg6{j^H!u`s$ttBL-TvH8kVa>m&9!|JP*U~BW=mI9
zLC#Y7MmrS#c!Ax%F!)X_^ad@^8pOh_Y=Q@lR063aWIhZMFE($^`B*yHI8OORRE*ov
zo+zJ!5GPF(dwNl=mR>c+=E^2%Ci!_KrQ}J9%uso_;`1olf;OZo4511TWpQq$)=}N>
zXbfCY1iebv(3E;W6b7;Sxpbj>P#B!!?v~)mu8Z?lCzQoQ4U?EQ&WD|n1Owq`7}|HK
zGRw2~>tP^tQz;6gY%WS$jk}rr-DdJ9${$MsskKqyE{XUk9S5f`2~S0f^V$gT`e}3u
ztJwXE`o6>*#;7X81pG{dladC@?PY2OD|!-V!%sFmS1a6Q#$>G)o;jA<uN6Ax>*@Uw
zPJZ9Og!++{ljT>IG=$gKCq`30Y*CuOqqr!Ep8Xc{8gc9{g%Y_Meo8v#sSW8w+cQyl
zlU?IImE|$T=H>AN=*mx^`=^;)pAWc%V&xC8mIq2LSOj0vSIEtJ4OH<x&X`5u+1trh
zI;A{{#qF^gjNV2}XM3Yhj>7-qb39fyDOB(*)9j~kovNT;HwQJNH+`E*VxnT~uBP@p
zLd|&>4qZi*>;9x9g|oAKj5o$M{6kN&kHEOZ$IVI8hjmwijGdQ3OFDoAMv>+5H4F#g
zHx$to2MO_Eel1yQ5%?5LP}s+6r8Umbx#8VrP&pkV^q;Vjmcw`vZ}<$>QYpol3k1RF
z1F|<lY017}a=jPl?aMfE72%v{46pL}>Ge2vkEP7B4&lLlTV)|vVl};s$HqE#4b5L_
zQ^Im3UP_+8Sll;+^{|l%rZ~G@Luu?rQj=LFY4swbUQ~c{;6Lr;R7qp6xxrpzgiqOo
z{iZb@935?1QmcMo=yOP3_FDXV-nxS2dD5)}fK6L<$a6TGR-k~|qC5hRvS(TK$aSbq
z+9|jADCHw5E`cfjzq0bgA+Q0Skxi&vdy^UyO^5OcJJ))UkG<3{H_;@Um8a++w5Agj
zg7*xQPGo&;W`!kzPFvI1QgIb69as_Xk5IbbkxXBg<7k_NIyr^2E7eX?cnNs<p5P%p
zn9+_S-Byrj@efQ^D4!PybO&a((M(5=2W!Helt*oI@Q!wBg$-uf5sOZFGpL)Wbi!@g
zoS2*$M?CmiLY_ItAu5wU*um;3=64T;rcKa)qhF^#rMxhlbG)VNC}&A?0gS5=AR$t<
zY^Hlor{B2-(p(zPrvHhvWJ%7qsy?-SUWN4#?9-eyj4mL|!r}Z->8r%oX(2A9g1V)F
zloVDtNdP!=PtdlHK$_RskhaJ8Ff;&VYfa@llK%KJ^pUI7ob)_9pm6f^xZHMOVmcm9
zUIKXq;^lM&hD~u;;|5k$C%WKKoPmpRgZqJW=Ud<;WjOUr>}0~Xd)I#q+LL(yuUJn%
z*mNg?mY7kUNFVe*jPXy=xQqMH0p_t*Khk0(57Y)XX^rFLU}mFn>{FYRJMAgUCGxx<
zS)5h=V}No`ep9i1C(#>!#SGJ`FSrc%u4qstkQ5)7nVnE*Mx!lAP`u2OHeRM=Rf&e6
z6H2=g%=<sZb8>C)J~#<Ct-fB7PMUD`DhKqLwNPlb(7wUkOxT%oIVCqL#?5(rRsPgE
z>B@rM`lJ5p!k#sWb8s!*Q@g;<4ujO5wk1xN(N|XPrCpeh4O7_`qO?o1IV6ZW))^$$
zJ!e%}d3;*syU~l;*jVMeF-Q3et|fiw7QSEQ6_VD{_y&mV7}$BA!QtADa`QC3QDI!+
zYN<MCD0zVkNlHn9*ZUIat0V_l?4<U}9u@_6Ycu`Pk90_-@cpvD@Qa|Ej-eVZ2t!F$
z2`L_+vH^;l6@i1`XzHhUroV?dFU_2S;W*~(^=k<WyuE)X*n#h%DiFQxLC!c&lG3Ny
zT(?){au0geCuLVh_sDk_U*k97oJ=4UdnuLhcBTanELG@$y<vf8Yf%RNrK7gEv!vp%
zlZh6(2AMyv(j|9h#f*pJH;bKSvEuV?Bi-}|IKA0<6_1&K6^AcgiQL9|;Bo;VbFvF{
zV>Jz6FB+**eP)p^x)?^|dQQRbNOSy&)pZ_pRykM3I4Mm^ecT5-p#B|3751fe4XMnh
zNkr42N2yMA)f%qn7$yK;u%41}&bq{&^n^spTJXo4<DM{(dRflFU3AmGfx#BR=e8bR
zJg>nVmtJWWyH1kf2%7i11~<}p>VepGf)6yDiRwJ#a(bnmpe^S}pLjs!><Nz|7#I2h
za4DvMxPAkFWiN>96<Z%&mHcyYbm;=WFIv@5;*)(0MX#iylu-OWEl6A^FxUR<DIdW=
zNnlEq1itn&nx#kNe!J66`zZFFbWs!OrB|RwIgHbk=ut|uvlvkpcJ+Hx?JcvFzo6_c
zXTeyUsjI8N=M7QGH$%w<Uw}Wt2LC;rR^od01oq5J)JO)Zqb}gFQS2?tU~irPPdg7v
ze+!rPlAyBXU^DqE29x+B%tG6}9!=A)u=#3$&i@@(_W7vie+oQ}pN1<5#b(w_A6RVB
zC=u-^5(<7V*qkP~EE*<RF&$CF^`{G)02gY7oLzBF%G<|5O_N$tncrZCxu^D+GIUv5
zT-CcX7foPq`Fojy{n%+{!U^98KlC!}P#63Jy{NcbfwhRD;9t>>mZt0S#&aVS<!BT>
zc;ne`RvLHZaX$W6&Zk{!QhyQ!<|SsLg4H-FT)(QRwpwYyu%+6OTs8@0f0bz~xW4!Y
z6@x`upH<cs?&t`1q%WC*rl58z!rH2)l;I6gh4-g&no81TB0At-(E%4hn^Fs=Z*#S>
zM*Gd6bK8nS?j$+{LHDbX-zqw}!Tyuf1ak)`)>+n+On*ESh8F;HMpBZ;b7rkk+|YC|
z+DAA6l>?y@fA#iwtBbSx6uhF=QT3$Y%5tBC>#{IJ#eXss2Zp!Ukz$#-%W1Vs`9cX(
z+yOmYMU+iJRMs7X-U6YK-ADAtl9P8M=xI<XCO$sY)t%vyM+JWb`m&ULWw)C4;OwK(
zBsi%VKp}A3>YP_Hh3pMdH$icDHfxW<qRLRd>K^3cXzAD6abCU6EMPh*OyaP8lC!EX
zUAa3f(JIV(yuo9d!{~U2&TSHyjQDDcC)g#WZ_=VC7(~}L0Y}Q&^ler(O12W&s&+aE
zZ#0GayErRHP#SR_m<oco*_KkAUci*V6URz#+w6R<&my!;yJ1_M1p9SIFCGH!I}fM7
zBd80q{p{wz9bV5~lR^JpgKBy>_ddzI7hYqEIW-68z0PFtS@$Ns{T1-G4Q5@$faZ!`
zX)m+EG~5A7`}@I{Yfh^BP*`)Krj5-}(k9T;FIVX@8^Cn7=Ws)RVdgEqx8>>cL#Uct
z!FnHpBIVzyM)@%xkJBbN4)j-UKZ~iS_k;T0W=2qs6(w#1Z?QLh#!0q;`QdrGw5LIi
zOaW>s?nX~sO~=DHUW;P#XU-;t_ar)LGQjejad0tmKDDP$dtW;p#AhXWrzi3HxeJ~r
zGk``QJ_Fg2;y`@YaYh|r25^aak_IQa%Jgb2@B@h;B`FTfcRjn%Vc0)c)m+Is4Y2x}
z4x(F|WmrtNCQQmJRL8}@^{O*(HsQVA4MnZYn?J!>V1;oLz1m5<DQ@5_PztVkZMep*
zeR`@1!6eSC)gXLF)r7zq+*kbhTfs_<q^g-j{^8fEFB4tLea<Ukqx&#r?!sv`9Pf!G
zC?~~p;uNfNL4G}Q*gxSaJ2wu0r>)GEFXPUV?a==+yGmV{rfqBqMpNOMt_1NF_w5qY
zId9<4FKcHe-s|EoAsxI?x$t*nmfQzMu&A$xa#ls>QJo|NxZp7+4nLnz<Lp4|cAXQ-
zA+Q9V+vV+YdqjsDPRD*0zX{n@#ChES{u>JCd?U<=`gG@QQMe6Nv*N4Pyul<VO?PVD
za_kygxWl_~LH<d5j?*VoJBB>t$;=Dq!24T|pK1z@s*=HQ9X`%o<s_$hF4<g|2(1+d
zY$)@eIr=0fiPypTtvrMBFb%wz1BpgO3-{|;*A$9cG93J0P`>X#chg`mi%(Ap(sp!k
z4hE98Gn7+j0{XUTWP!{^i(+-uUY?Wdx{tZzEi?>mnHs-G1rrbZAQ7y$FzdiT<q`%5
zY@k{TF$JVz?KYi+p?gtzvcHBx;a&Xr=Wxno*D)7-^(Y{Fz-}A>zh)Ctr0>~b1Ru=E
zL4{;ranF;EZ3G=2!AxK_JIq1UwSW5k9TmTI*Es+a;U*_hG3BUj^$3&ovdX5`PgZk;
z?D{xwB25{zlMQj%POyASA9b1x*W0Y4j;xe1Fu<lO*Y+eTn&bj{aOa>htfW^_GRQ0;
zA?RBw;?qi*?Myu*Sfg2Cjq73Z?`AHY0Z&F@J}FL`8mukRyVzqTTC^>3hx!0c*iTA>
z>&C30CTtj4dEY1>-?W?+m#J7_qRI6@mHVQLuV@=&&l$lS`%5^7KjA9tM0#rjW{<)&
zY>OLIPjUhWQ6G<1nB!-xxv%gw*=X2_N6rzjM^9E<BjqeMl9jf=xIyhXS8@3-gYMSf
zmOwd~-DV|eAjg<dXW*FO$wWcYR^MQajRj*Cwe}YJDC=(H<m;tUC0kLq$ZT>plZ7?l
zjYkyM@D{s`Or7i5dZ)KxDO)xDE6h8TvgLyEGI8=N<5!Qg$Y%6XpTo=AgR5K$HO#Mm
z7tz?>!5g9w`P`nU7Xn}#_oBO63dit!640*r-@u=>K0K^w`fWj-pHR8Dv%d%j%WRkT
zIuKk(x+}?Abqp*97b}4MMHIF%1!fdkSCcDDW+N_1!XXru|3uQd_rqwoi*r~fCK1!f
z`ekjTJ1H-uyqL{SI4bwywzpG$a)Qw;hYgtR?7SE6sbuz}<LpRj>`51xD-@=7sY+k;
zKK$re_&BeG@g)9(RZ;2JM^77Oa}*v(<zin`D^-lFg;e&SOhYMDaCJxmX@ov<09Ef)
zTyEyU_xswoUhz?Xfd3?3H~$`eb^{dI9o1B7I*vDqte-Tv^o3MTuP@xcp7i13WR--*
z<yYkc@zmGdT$`S%1!|~wL9OS}Q6-^+IFF{lLFGmSpvUW>*iX_=?FMoFm2OIMqrItc
zI-_wBZ;1J<l(lHGk5a>2g^}vS>{?G1^ExNg2-v7!C_U{ycABg7Q5uVzI-AVsLBhak
zMlrQappV)Ob59&nGcB&1QeLc=rh%QQdI!K@n95B0OA_6MXL=Hj>0{h>O2J|<sTI-_
z$GJ)1$tz)*3YvTy?z<?mB}3>9I;BXoQJ=yu73NDaI}Gk*8BUrI_7)dyDH5XVYa3GY
zzNPY^7s6H$|MjEPDmO@j6pr1?>?p4>q3%mAh<Nb)h!2u@QC|b0`BP`zPYke_JLtRU
zKS1L#n@Q9LmBXH?mu$yMoLWZs3vJ-Y347G4$d>9iKHvIRm@<EY^VLxqA|b{WbWUN^
zz!A3GxX)NYTVOl<hOWN|mCP&nv$s|!*94{DUqK~viq7aEdy5;p%d1o}UD;cN?eH}$
zrz0fRUNAi{mB9tVgnxK{l=|Z8yn-tDIQ-?yHt!mZ*}?2=E|JH*M%GLIzFFJwpZkHi
zrtn?dscw9gJH%kzA!gGvt!K~q9(~Xs>@+S+x$4?jQBk-<%vbZxQ~r<qovDE9!is9l
zl%fw@hp8%`YA>3D45phhgJ{93=?;Dq1AF-@$c-Zk{>orC!O9&~P?@9PGMA}h9xAqr
zIEJ|Alg?~`%kXW`4zOU!czA=!W-Mw;;UOm~*UIheFniJPC*z=XoNg(NmGg|n>8#GC
zcVNX$2Yp$g{6JEeMO@dmBSR(z2E%C(m#3&dgwsBiHBkvhRCQ(zKFlTCv6~DuM6#De
z(+9=U3B~2R8ulr??oUHI`kx_aE$2|lCQ`o^!DG+}Us4=E2BOP~%E_3IQ>mZxsb7}h
zR=rBiuy)h^oW^_YhR;2pR_OBwQPIw2k64du!y#&x3n<@w*&iZEk%{GG5j^fffos4U
zH%l`dI7#h`r;0g(uTz$}1_+FWOrh2Vq|wHr;g82L?-ES+5-=!h`WrZLT9PyL5ngJW
zl};{2c@162m0R|_PNNz)urOj)<58G`4&wnnd+uO*Z!<;s3|FqrIWq(MS_=;*R=z5M
zrVXt2)u=90STmVazGXOh>QSw<faUN7yr?5E*E7Ig9D<z{cilb{xGOu&L=fQ%)?Ucn
zS?P71*kKyLY-pj}`M$&L;VAudCP<ytTe&=wD=%>1I`DY4>@;S$ydki8TY%w(!szX-
z(&uMzhJDM<bBXzPC6&AVn*McI54}-1ihh3_eYQ-t<m6h1l5dYnu=)jT@2XyScwN+N
z%j#r#NF~f<8Oor^G~?$bYiklU@mesMWAGn@Nm&U*uaQqj7*vw^APx^3eD=eQNmH0!
zads8q#e}KVG*T(1HZdLe879Ov6nKul<$degSd@KORg!5uS1}@X`W{m*OMm(nLYFIu
zUSnog;Y<mZuy-6IohqGts++8*Or^1|2CnxCYf7}3lbCw0gGGLl>C=69b0)ZQ6a4qV
zi@6R49E$dK8XUNEl0QOi>W4^Bx@dNa3Hd4?wlKjw%VeMy>!2kFi#RJ!P)xZ?Hhqnk
zLU#YkH)beY+eyk3WF70}6sr9U(y5A3+Zz5=Y}d<KdCL^h7FRBP)!|JTlv7_Tu-<N*
zQC1Dkc(h!z=&Bbh*S>9>SCV`tI-FpTzW$t3GdZc&!JPP&ek%)>W-U7EP9QR|^j2Sy
za<&=InN&1sPtfklp41vt<~??zFPNim1%3G)+_wl`r!|>1wV{g|%)Ik+GKY64r&Do!
ztHLCy5p0P*woLUo)U?8q`H`LG5fg)oObZ&BUMI8cL&db4k5VBCrNYmq%V-m1y6MHP
z(-h1%Lh)?p!I#+%qw)kQxXW;DT}c-bw?@e?>t^nUOXC!k4YF39GN<U8o^r|vHYfQ)
zy-<dY_xnugXbz(@ketMl{x5UNm|@rTz`-F3d~P<_%TDT)Qz&Qd`MW6HOd$T;eHE{6
zDw!6-sM}Aal18nP$&AvAY~B#1qWK&i?o#wJ>(STlM#C*iuE$IzE0Gfuh;wpxs@rHd
z*~{pM?gthMat<m_g;Iy9w-KDzLegCm_LSCCv>kJNx(C9~Ud<`AmwxCD%!?Y}bdpvT
z!A@eIWwVO&X*<&<)f;KN)vT!ud5Ag?mr!jOsp&&eUM@!ATMQ2nEl5io9;>dfW`wP)
zV=mcRIoquP`*&da*cuL9N97n3VLO#xtZ<jo<@|s@RdIX)8o;Y)N0$@9dGrO!l_TsL
z897{CcewnX@TY3P=zo!?8>;pc@dOoyzj%QpGbi|+6;tv#?6!-km#Hs|8(BM(>4`q4
zD_X_`auW(cnJ}GHS&4s8#bo_$hkzegS+~$;$)qV5mTn)#{a*l|b2lo(tLDe%${;cU
zRJ{G+=uY&TPM@?|DZ4MC$||OiURg`x05B6jt8Mrzr*cX?f|vI)?20B}b^`-OsyX*o
zGEqdU;sC~56P0!|l+WE^<46kHr|@yM!n{0#qTK~XcWwM(#DAzaI+e+IT6_`sHLit+
z;q{-#@l5dDx@3ujqIZv^4-)p>N>#ZWfrojAlgXK+<~k}pF_g^AcUU=-R3-Bb9raJj
z2|(qYg*Yq!PghW0BVJ}<>?Om=cv!@QTk?i3;6aq7b=6hU>1}-ee&BPnR8G}))XTrp
zC24T}tcO-a&K`08lv8J(egztP;oMy!gT;Y4q#v`#J~$^2Vfq*Y`+Eld$t%$39R$-A
zMny5B8}rBdFu(_b%*5d(xkOErHZy}vVm&=$@}|Medd3GY#JUn}SC~74@T;25Y;qIR
z$&1Q&vZ~r|I<sabg4gXbeMk3m*VKf3Ay3Yfo90sFV6Mdb<+NW7>dmE`8h5yJvD}Tj
zFzZdY9Ean3z7R}f3+Vb!sL!3K8f#GtG_gIgeehw31QCs5Uh}-S^-_2&$M8Zf1fo#`
zoU9#B@Q2Lu;!#zcpmNO7{)9TKOiPCXFpUrrO~;Z070+Ec0B8E4)-y-plU);pDX-8z
zOpOQT;v~eOcT0sO_XOv;vP#$E&#wPI%={(jES_?2>T_Stppuk~lLv;P#!@`Z?dUDW
z^ZQT5pT+vrN)DI>9}g?DUY^)6l~UM8Rhz>}#}%G{HJQ>w`GHw*1$YmJz#^PKMbUhm
ze9AQH%ImoJJg-D^_w}GQ@MP~7-$E044x+Od3WIJw6Tf9Bb&kMo5e)TTaqP|RJWkWQ
zUc*o9F||W+xRsUss)KqMc&5coy#ws~x4_cgCkbf-`ix&-*FL3=kO@v3P>&%bkO|9v
zCpnk5@SiBjGaZCSl(3}+<EkI8ROl%IzrwOEVX25_rx{A$x8PLIB&T5&SjQ1M*!z~E
z^sjofyzR(2je&jt1uBgL^d#az>dMpnGG{`gTwY>};iP<rEBZD3V%^Z0)d@D?px=#o
z&3o{wKZaMm0$;*I^dC3H(<9v4dz50<r$@EXRr|K~UEE}+keRdye!&4)cWDZNb<mZj
zuGA}r!5cOgC{bYxr}9Vmln->y)RNxh7Pg^F8HVEPbEV4>t?fB#14ldxB@H(aRgU=P
zjH63gU|6Rz&3{)~4q;du6~57v3SpFSA_&J)u#H2krprcGpHi%(U@}eHu!g!(OAbe)
zF&6Y|33|pP+zNj~%~%L_T?lHNK8isQ4Zb=JoyKfd(|p*LOB5?AQDqhGqjtCiqT%9O
z3XM)RoOyJ<ez?rWz>HdkB14$hS5RWOfrp9LoTTISw<U^wOOKKc|D+@=%n-c9V(CQB
z__>034TMYZIUJJ=<}aeAbq**Ike?ezL+}jY%zeUScr&x%bS8LD13Yb+x0Zah-=e-9
z1z&C*`~4oO&GT@vU8ondsA)T~ItEcOd_+#S<n|=vC*c61(KzUJ7;@q=Hx*1{IXwHq
z!LCeQYA9Bw1vkPbR0&qyVVI4R8$nWXB-6cPu&S>JdK&4h38O9$Cetvc!Ao)!g!ywa
zr5ll)m+~+&V?pd!(`)QkYQd`@^{r5DMblFpu+3nCnFIHwdp!$IaS2Y+p9Uu?MK7D`
zRq%?|AQm0jSGwCg!>t&66e#=@c6;%BDMFP{3x>5Qwff)$v5ej#mF^-Fou4~%I!_!d
z?fE)~QB#U~V~R>nKFbbM7~Nk3c9Z5*lRcF0@Fp}{ztO{H;4I~dYRen0oEf*0+<dvP
z9L8KEjtk4x)bBU*?_}eaqmOM3SGRkP2h313+Ie$R6I8nVDG&_}ovbIWRRN%4?U@CS
zqt;Bc&Gw|5wWh0CnY^;fp7pa8@ZcAH$EN`+Syd@;FE4?S`QdcYM|q>f*>u{X2Hc*D
z4|m*Ffm*!;{zSp?5-3PbGCYLEA5Y@D;HaYExI-=K4u`)Jr`9AmaH0&`t~7xu_-5Es
z{FGuB3S<|W#_qEQN1>ldWX6Lk##xied{0XS(T#nlAN;s%*ZJjkQkm26qq_h)FKV*F
zplP+}aNB^TjbWXwSLsptXEONX5|OvZ-9p;iS#a6H@PF&$p4uKfeyGxyt%I#{lG@@C
zY?T^DKc;_gs2yoKc&m8Qrx~v*UVjzp2MgNj&Z=)2175a7<#MOvyL%sx%Q7Y%SbS?Z
zZ&pXT8SFvpU=SSSM7yq5ng^`Rx+?4C4Nk82eaCWkea`-~gZW=7olAMvTVr(p?ag7}
zs_%fT4yAV)#|rxb#o%@|Pkw5a*<UL>>H6a?Je9uoI2C4d5Y>Kg-=e85=P@I$2z$U=
zaVT5cQg_4io%_YH4~gQZ28ls4EgM-S7Zi>v6F+ymGrtzF3c^6k(gJU=LL^^GdX*qL
zl=WzQE(8To#q^|>{1Kgon#aUBE1p0Vu+m+sHu(X4#wG0?_Kum<iJ!v;Sb=BMcOdHz
zz|$q&#|!6EEsP^GHKSE~-<s^Gj_3uuQ$LE*I2&sht-TW*6QiLC{fKlU;nXVm_apIe
z2A0F<zi7B`oA>I}9q&jr8AUC*0iM8irKnF)da&oK$cL&^aix;<BcWg(2-!{)KZ1^B
z`m{q6IzmnOmcwM*uKLyNY9^g}=5n5jrWAAFdQ5@?>0=k73fu#>aT5-tlWitrRgG;_
zY=U&Ui#jOeL(s^F=F98OcA1hyiF9g{hklZ2*%h{1tV$VJ&Yto-Yak^j*F#uLciC6`
zs8_<3f5~*bii9DV6mXxDs)o&@q{$2ZB)J_Trqh{hp}VcD>KCihIEFst6i8|@l1?RQ
zO8VH=xq8@$7pme<VZN=gX@hFoINhR+pRQPKYh`ki;H)@oWwaGghP{S1O!UPuHqCpy
z-TdVf>>`D9F1Vu(XTrCT8Q(@`Ii9Su=CHdvp<9okiix!;*Awz&x+gv7?(jR=i5lg%
z>jy4BKzT4{&+&c*|G3HOdWvGi%~)0`$%IoNxk2J~*%Kz*Aoi6b@Ck%5S>C5Uj=Jp?
zmtZm)RKY<`;>G+3FXkF#=Qd}yC;HRr%HQ&PHJN!}av@>STPcRbBUN0OXTc=cK?N)b
z$bB{0)6uE6Mo%I+6=TVZ5;pBtm?^1D_3ok{^1!c35|*3M-Snoi9qTuR`Q9?ct4(DM
zd6QMq1%3M4)H&}ntr^Q&nu(L;Y9=<q)t0KKG=A<u_@KU}oR}Aas$K?9^<qEys|jBu
zGrqBKmKIySW^N;i%Lb6Np19e?;I{BJoz!7myYB`DQSVNnnz<QtpK7K=aAlmhgE(E<
zphBMzJk`3tBsy!7Ia@q&H0_T&t~XfLN4OT;rb;c(KGKpt^B8!h4|~HFkcbC{p*-c+
zK%zW+^mHcE=m$4YLp<>@+Bm8m^Kk5=;2u7k-+w`V>UZSJJtXO}61*@A%&?9sM|COl
zRhfjO|K%)1aB!(BB>g%Z&F=)|lAXwG|9h1pQcw>v@-I9x9{Ux+CF3RkO8(XT>nW7H
zv41Q0i{01{25>J&;y17a#mD!s&2FFvE>Ch{AT??@UbfQ$=7MB>2aa{0sfh;;Y>nwu
zdg8b?l=QDJxLZ5%KRyp5TJD*N$w^mo*d=#x5q>Va>3(l8V=D#+#5brZ&-wsxhgrA}
zZedz-26Xc&PD0|RE)zDvs|E#+LRl^jE(e2ulR6>ES<`}hsR6~T$$Tw<XFOaxh+1@l
z_A{KJzES$}i<})r;6T4Z%4tg+)I|?8UN-};E^&%VR+_KdO7B$;t(ULrQ+ny&W5PBW
z2Z2>+IQHALpssL3betTob7Dx&ps0a%C<d9}m{ujIwNDuc-+8jqf^MQJIK}#LP_y}Z
zoCeL68}?ANpdY~iS;;ee1UH}zd}`f5yDiLDUqkm71~O&U0?i@wVGHxL(_m4La8<9U
z&Vivk#fiAjdEgfs2&(-Z{%JemY`lyIKwo;xL;lT~Yt3bn{v=?hr8ynIcKjOxf`*W&
zmW*1z8j8sgxc#ck#uP9cevKv=4&TC^Dg*Ow2EP{{w2n)Z5-JGX_92-RO{uxx;@lG#
z#S!53U!hwHqN5t2ybDTzp)W>XruYAy6QUCym6b_d*aR==j-^RZI8OR8xacp3mvN2R
zsV8@I7X0HK!YpOR?yRwJFAvjK79m|rlv^uwUi#YlexSu)8C>!4IAVOAUMtHSOpP25
z2D_X@&P1@5B*j=shG}q|ek+Yr?E-t!b+Ra)lKfqsin$r<IT93q8rbaDRLn={#O^Z%
ztcatL)Wtp33@||{-j2ibzmDQHlNqvu#o1B<7J`Q@O;PqLZ_c=OO7Rw_yp0Zm&pJ{A
zc?Q;CK4`Qh#x{Zd-&(0i!g6v4BGJ9BL-U->%rG;sI{g1oek&26Jy9=UJ@etPEa7*x
z%I4$x0H63OO1mU}Mxup|=1Ew^#E{=zhO@$FUjoIqfXmJ&pRAIuDhzEw>RT~Wjs=_D
z4hNwWNR72Bl3dN9c9S*NDuv@&y|w;rqfpzS+=Z27NSvl46W)`%@*?tLeq68<(Gb!F
zromE4<PN4%A)iObR1A&CU+Y8u9{<)JhMPuWZecjzHPMiSGI#s{zIQx(?p|g?7r}l?
z;1M3csW*tad74T{T&1#5&cmH^1=A6a)-Ke|<8jAJU?P+Zl5>S8thkycHbNgTSg8XR
zqo@DD{}-?v2lVuHNE>)f`F+2O*LR#kbG{Aufj<5w>!~8^$4ow=sN~;AI}&gC3a?f{
zbbeJjSx367dd!L1+VYt`W2an+R$3BT&(dQ#z(=S6PAe>@b~&7t&uw}m$%DVou33VW
zV&vQl1KWv)i<_XBxRTK-2~94_-`N=lwkmi6HP&`UF+Y$@_!;!?o2a=D!|?xu9;y`U
z$D$lp-a;`uhT3}`s`;(T?dmuBbw_aiI<T2uXQzx|ubiR$6c*FL?_~9yK_4qQ*)olm
z<lUZ1A+ki}07*iVFmI2;U`bPoBf)Dk*h3$J7M4YM)DYCRJ(}q^QBA)GyK)tZ%41+X
z;`LpDsdNw=C*f3n$ay>$58%Cu<#Zo(-;1s)6g+>dX%Z-WEl$d7c)K^G7EZw_MdM$B
zlkPqLVIXkp{kQtx;oRzKnFJdCfG4s(%rP$#J4VYh<?f;x%4M{+59wtGKszfl-CD(N
zSPoCF4Lk=I45N+RQ6L1Mq<hD=BGpqoHIoYtEsy-FlYKJ+{{K4vS7Fy~wKNNC6W9xu
zNndy-gK<AtMCZJdeIST?^f}s#??F`f%e-7Po4FK6_Zox~UJp8)$GR$bigm`3t^(Y!
zVR-46WF|5mMe%N)C(#8SRnE3&P)S@wCvgLY;XQs&Pw>Ai>f?e}%_W>JKga2^8p)5B
z%#E3ARz(9f!GD?m3Qq5}Oro~H7T=A(!yz0Vj-p05h0DV^l_GlsO~O4KhM(XT(--Z3
z%fNT3woWoH@W7?vDq4JJv?Cg=izbfm+Yhuq0)ESGX3wuuJ&%XCeP4b5wQyKyfU~cO
znQ{;vcQbl!Svj4VE%#)){0{TwK}?v3>5~l8K<=*jG&jxUX+4bo@V;+VDxb;R$5nn+
zs73zpFACSoNmUfDgKm8m_$}X2UEBkjgNMhmD{4YqG*Ns%rRW%c*R^L>eF9|KhgBF0
zDqWsatdH>neuo>4;kYu)_vr`{*qZ*@-`o=HHUaKYJ$%6zg3>Jys7NPs-;!lnigI0Y
zzl#Jp1r-k}Njgk96kJuQSB`?6^@I6?TWqNH{y9*KbVGx_64$t^VC%P;n?8c&Q&{Jy
zD~2w46l<wFjN_yFim?8=Fu}NDXh5dyI_~J7#tLvP=2Kt#ll`4+Dvw+6QYyqobol$x
zp<G}hdHp$#_{bN|zeYIyEW^iaFDlz>0inzjFIpON=N1H>XKH+qGb26tvW)?mDeErW
zMH8wxkoivxjLiGqX4*Fe7D|Rza=MK<K49V8=V$YQXgDboY`VpGdZv@g7q0?b>n7Z9
zt1D9+yrud4^h*?DKM@YoW>|39UDI)u%<F;fIspDk7v=0T8s<v8VK<0yhM|t)DSgO}
zP|c?%oFwUpS}Jt!W2&j$Fsn<m19XQm&<8G(sKs(u<GJzPZ+UJ{!z8F+^Hb>I`!*AT
z#b7K)Kv>d9)yifi39?tmuCs4<YVtv7$zsiO$*z$ZUn;3ix6O{6AurAZ{vGwW<lM}|
zxBhE9dajZ(;T}*0&bDZZ2BH4=m{q%j6X#du+EJTor76$uP@dkID2bL*j~!vEED84>
zoHe4R?yK<OIdoF{sL6kWo9}>*+B+y9s4dlrxHQa%o4r?MMm%A5P>sH-F^+U$OaY@v
zz5kdbl5b!!oeI8W<)lQqX!cUey@a!uj@g0rgc-@?V4-#y73Kjr`e&IPWNAg2XjJ)s
z5oq*ha>6WzKPf!@R2T(MR0d#m_6?aZiT8&1v&1R($!2ikGfWR2=!@d&Ri87aJu3YV
z@P?a1-rQD{tZDStg^Vs_0M^78PA183lM*nQS#ly3tYk-Arj9Mfw9kjxK}Tj!{b4vs
zf45X6(;R}$bPLUo8)r&mdh0>xQ=?7e(Wri`RI2Nl5=++6ZMga}Z4!1<2Ru1OGh<ps
zZN5SA3=YC`N}<b>6_wrTWvJ;vRpk!X5(KZS`AwJy?}6KGL=AL?DWb;D&95q}r-_;-
z4W!?m$-cA&FQ*eEgo`I!AgM<Y%#!9YW86dqav0y_4D@BK;22DV3;8WN`<v|DWzniy
zaPMx<Ikz3e?iPDlcRFX`pnO6-dOFaXX+Q|mfPqW`;^+;o2Gx)~A%=U%MWbzox+0!C
zcTn3N_qBKMU;BtVRTnpmKFs$IgKuQ&TZ3)9%~XFhJM0`d$`1{%;FlDPp1lj`d~Yxe
z@j-USky#5rxi7!vg+4B(TA-kfQ0u*`&TC0f6qm`v^f?z`ZuG`^|6`uVRlY~T*dM4_
zT_t{J&G6Fh4~HiVHpXOhQmg3z`cTb3K@Gkspu1%t)%9GoNqp~dE}96|;fM4!)6vBy
zfE}-9eP!w@v7Uy~)uk%;&4<h^McrDS{;nXkbOh6gC}z#EAOi=%1}-SwekmN|YU2PD
ztQ_M8<7F=MsU?c9kZE+brGm>$**;TYs7ggT%%m!V^j^t7l5F}GYW|Ro4Bq8;;^6Dd
zWYd$WrnhpEGJ_{ry~SEn<9757gJU@lj4;FZEpsG{+VU`DyK@?3uopbc)zQ>|ZIbOE
z+(-Gh4z<f*`W6PtBm6uXQk6#1zck~db)_$_%MQ?mo_stwn~TcAc&ZJ@XJaGJ?;E&Z
zH!&Q*2dOL^FFo$pk>H<)`Puy8g`UURHq%rKG^7J5=3j8amo`^`gX0fdVwt%WsO36%
z5T&S6bog}&>#9E!u~@$Uruex3Le5159ENj&&Dou@=j5@h-Pu9$>{Qu(QzD&{bq28)
zWn*$aIT%la-0>O{_n<dPHkiyA{sn5-B=)g0D%C)f=%R7}i;||)7gcozJC=t+5nksh
zn9nYC6}Cco)MyP9TVWQQI9Wy2*^h*WD-8ZAI8`RVO4!8tb%-@{hFR7hAb#%5Guy*#
z*$*<%7Z1UBI0k!sJm~yKnLeT0w~#%%&i9aSWA=jpm`Bs_Y3c>8wh;HyOn)Qz%UJq}
zlISK5SvG;3KEP$PBkIo0FvG&|yFCIULz85!VSAy_yaYF=HaqDA&f3f9EMxh;p2E$W
zX?(?}JWhrFV27i~BH73NsmkgKV8Rtm>cuHs=RD!!_F%^Fi@BIzHNVb&i%=$h=XWze
zPaiUrCoM(!K1T)*mwh9}MS0RYqDl{hNj4r|gL3%qbb(>GfjzxEJ9s$z^r!qT9vM2Y
zH%wr5@(tRBKx(nkJ~w@uupc<#Z-OT~xJDW-5wFncZ=&||A=|BGfCoNQCfxmp!@=Cm
zw6hYLYG05g$s#xbqpm#2ao3>UXvrKw0AI&-VI$fxO*(r4-`;+9EN48u>VxgCHR$o^
z>Bl|rBr)c(PbE5sHKwDu?mVI%oWLGl*8HuXk!jmXG~fYL#t-qqYGY}~>YGV&?)AVL
zbnx$iRAmLd12*+Qe*O$=?fJ1*k7v*noW$<xJMi<)Vx}$COGhftyUZo~GogO$^QkEu
z{mwWzi~DeXbR~7WFLRvnWNh!nzpEO_z<pq{E@g7_GV0HM=!vhQvMC-QS-oXg@pDL|
z5p5iQucnx0ApdsL_F=DUOg4Eu-9rWNtVXbclhGLTG`Qh5H4u-=8%#gT!Qo#HgQ5{n
z;1paHYSImNrZ1IV^c*L|+ayRkg3L8Wofi+!umYKejqvG778KRJm?o0HtEZj6N7#8k
zQ^P-E>fVs)#*Zcw%76pDZ<<Xg(WbL{oS8n2$1gp}zbalay?DO2vqO2Ynv-BGnecwT
z6F5DnH_U`B!M_J<yo#y*!pJiy3iRvRR=Rg>Zu?%a%-%)8^;q8<{!dj-8ZCYi*(dH@
zlE8#r?tvStbv|oFQu9t|-^N4fHhq6>y8X|2(ssfByo6U$Nl;N=@X#o@e6<6TP`b{M
zpI=){6T{D6L)!-3;VL-%9r1#>g!1QYp08bSVt>SgV<;HmCx&q2C7(}BHBr@kgm>Fq
z-`doMPMqd*VTbI7CG>!GT?0I|cYuylx-ApdN~9@t0y7!_QaYB-bWz}O9M8J5LoKIM
zRP}mDF--#Jn)uXs!q2EfAFpLrY6krYq26kNPA-)BSr`dD;jD+}oqjja-`~<!g|nxJ
z`P*AJk_qY8^tj2?>Q8jV@w^fbn?6coAP$L(N$gq+CVo%<ucbFlXW!dF&3@Q$f?e+-
zZfN%mPv~B2;F#2u&VC5B*iz$q<&>lWU9U?e-;9~*KwE;>I{Xw*<D^&w=0*TDeHT&y
zrLSM2SQ_HTo1DV|dU0yziffX1ZuVg{{DNzy2W}xF;A718OQue8M5ktE${8Q9jdfRs
zDMSlS!R0WzGc4t(h{q_eGV!t0g0sZpQI^Ux;DsYc1YWiu1%IM4a8|1PJ@K?XhNJjz
z!B<I!Qg~`;F-;ThPhm1cN~2MI8D~O0^M*#?)34*x(VNM`5D=Gf%42*ke43RYFW)o4
zzNK|RM{i-bjKrU8Asm_$_*E98dwz{Rc@!+T?ewzOm`qoKQQ3)VWCqpl53nQ3f|-O<
zdwh)MeLrkACzPiRaXB8r?0Kzv=AEcxgG_J2%3la0|0GKFQaH=M25)*Aj)G|l4{MI*
zVhj`HAMjBr0p~RYCewVTJp23(Q+b|2#dU-3xG>t|x;TmU0s)&uF8LOiOjpRd(}SeW
z&*d8^dcXJCQGVpiz5x5J73{-E`t{{holWU2`Uky_?@2r?fn-$VWl1(1$($wu9smzl
zcrnEzw9q|_)~>_L?IgdS%SyZJT!6Z+2@_wzHRI_ng@2sgSEl4tdlxwWuH(scm-Xz8
z%2S*jt(9FgwcP|x#us%GDGHx*S1h*fpa)T$T8m(_ZDuwkiK!`eC%_Iq&LIEw=`jL*
zdXOFy18Tk=1@L+N1e{IPIC-0(rwXHEm3}oc-;Q-Ds^A~tBxQjHG$;M}Lt7rzI`-5P
zU;{;{p6YU5cH;Dy0K;S({Pyddn<bb74}@d7*zXniAMJ5*oy9~TF(4H_x)~))0Q0i>
z>UVz`+|UEgPY=}AGjPQ^KrSu%rAX_UQkK=*54PZ5o70+jgJ&q0wM?77paiTQ4|qME
zN@JiyRnP~N;}hKu-9B7qZsE>c9(S1z?2p5ln=WO>c9Z>NE^aZ!V0Inn<kiGj|E?8=
zNPeqtF&p{Crz$he5GEdxptjriS&#9v-uHclx?rnWJZ|4*3ONhEs9mHYomGjjF6`HJ
z$U!>qUk?<vIjc>)izPqi3zWqjd0tP-+KRL8-}iM9`Y*^X&(yy}z1EoyX0Tx%nz|=E
zO<K4eufsha0dsT_cUd%a_fT{jsAb3atfW)f&i->A=HX+Wqq5ZG9buS9)9IZBU7m!e
zOe)TcqA&Q}|2DlzDP|2-asCJm;O|c?rb%_wXtH2Vd+4gr12=%J(g-Dnq+*GudMutQ
zad?X**j%4BgWe}Gr4(KBL;4p@9!;~CE&Vl{{U8{B1iXjHTo}KgE_u<G{GN)3{5~`W
z2gQmI_k_57HACA~UhF};IBq600tcgW&YZy0mh|TRw^IvZ3e-}|b7!B!Yh_=^vsVJ2
zA&<Z0iihQ5o<`#38wGPb21nmmI@P#*v`(89vv9BCm8am|mugF(yH5Xh_b)T(%uM-0
z3UoM%&NV^KjajWiak;_98QE*gW3aMdUpxV&S1jS{{u~q5Uf0<Df9Oh`oKtB%!#3{X
zZ;@%MyYi~~vM1Sj>o393`jFT<5dYf$FP?JGBcu7L+_k93%<%3)z*brms3Dv1msxBF
znF+l(bF`+bX#5@gotZYcgVmH*isu^aOu~~e!UMM85!8fCiq=ePJEBVK4x6tJc+Nnk
zl-X_`6W~xx%W?Er0%Q0^R!%nK?|HUge!NmM3@>r~XhC{cXn{PhX$9mF?agz#Ur_l(
zdC`Tu^HQyi6%=BZy*ji&1y!PDLxH@+40vb{VTNb|9aOT6yInR~epA_joDxIn9;0EC
zOejz@o&?+RAXA%^0(}Td<f{X<r_Fhh*Hn;0lRYHkE{>|1HuYc$^n)Ix-`H0WhH?^y
zJ;&*_uL6=8b3sbg%cu@Al$QdXNm4OPSvcRc`Ogsw>QN%-QX-i#MA;Zxu{o}<^TF+w
z{0q*n`PU@&bdO;#XdI$*%`j%uMbFPUg%b<V_RGnfVaIVK`*hY8z){S5S_``@PHDXD
z&q@k9y#>#7f5ENKn9I?mwbEmS707{{ZAUx47yL8X&II@W&6EE!JiLF-{(sJXNml!J
zpZ)gSyi#)Ua`R*T|5FEe6yQYFIuASRKT!u*dChtCx&Mh8z=;2mr2tjW->U%jzTi~x
z-1(nUOmo@kug-r#D4)kC|0idED(bUzo8lusEW(OJ<URGRUI+i2`P~c9J^Xi^`J&Zb
zWlS_~01f)@?DhXMC;n!o5Ba;jet8tHb?nZD|EkMRKo_uFaThk{<WBuJboi+SxMRBK
zak2Zq)!+ZC-F@!f{{LU+`#)X&iw+$Bi4$H6=l9=n#^>ip_1q~BSHGC%IP<Olcl!KP
z9Q-c)*L3)T&Pyt4`4`+uLtx#susN-SDP?1%a{tP2rj=;pVkfCiUXxKw;|vGX2`x=y
zrInNUaZlzxgH^7;bQCp<n00SNQ}aEw*G)LBStvD%k<D32SDQ?f4!C#xqWcXc)gvb1
zrS%nI`o6CpgLlWL`UU!BWE@|CulEqXUNyL#p?qHxNmE;9*oMB_1CJ;_V-I6r7<!{{
zAe&`e!%Xd-u@=hh$xO^vz_UI9Z{arT$%-aD`K;pk)5Fx;Gz8YlI2d`K;R&&pT$6pK
z?@g!RZ)BO=$j+&w6ju#>J2N%w51(u@v(9-qK&(Rlwg;Z)PiVJq!Si%wf>y;mi<$h_
zI4mdOe|p&O9J9^`C`g?BU72@EdZIU8P;KCjPesYU7(8}0{BGgi?IAzuFum9><l$Vx
z2lXzT%t9#q-2%!fxA$fNZBdxKgS*3U_?gq0!7Wp|sUK0Ai2qMfvI1Vkb1sl6^y_di
z`jUP#8du##mNk}*q_ZA_ujydR<ZR0fH3GachUE5zFgCwM*Rvn}+exy9FT;Fu2r7%8
zZZNLOla+_dGJJK91f31~9hS;N*xIfjgLTl61mbTQj=TF%*zOZZUs@0A=^U(J*yox|
z9_>Qf$}kH|cow!m-7lHg!^ung7&oW{lvQh)S0|H-eG_d}1>8`@{h>8e>u}UnW8iRZ
zgZq0zcM<k?5uBDiU`V|J_q#C)|IW;3BUl$P`ic7KOr(~PS@JEMi32bUet}(ohZRzV
z3~U2yq&W=WHw^t?&x|olhp)5{1<GbP1qa{~+(Hpl26q=9qd#iNR?O;ppq3nh4|6>J
zQD4I<NKvkr_l%G58S_+$Bq2U66wk9aI=&%_Ww01s?rv7qL!90Dq1}sX(zs;vCZ6>r
zxhp5>?!{Bi)4v8Q!U&e%1RP%yHT!_yTXWMzXEYzK`YM&vyO#|0<EZnq)w2$GKX~8@
zRRi6%cr7;plefAp4^*1k2`KAkGf7{9f9?k5g)08JX*s$i2Q*2ZN_(`*@^`TD8p4It
z7T35J(P&oL97-?bIMx<4PyBm`Wiko7RxV}s%+5aR`o#&>1*LbMjrMpxTmqSMtSV4}
z{14J`9hS=f%M%aT$;6M!oxMzaY_!xpA-I(YBi-t17Dc*OEV**oPMe!ybsofFGh6up
zhbyGGCXyMv29G3nvO~RKQE6dNg|Od=yIFVkGJDE~f2IQQ`8vw}GZi?9&s<6_KEQtl
zBlw3Auo=e_YnDbbUiZff%+vU9K@7a8AM7y#WcHupzXT=EDy2!@Ocju1H;MCkZvQ{i
zcMm)<J#odXf!B<8fzFu!xxQSJQC#D}aTBMUjI4;Y#;b(Jo!7GaX!*~7-v0Oh1{~Cn
z;HaV8)`Xy>k}?BbFAPVGXs=`3xQ23-dyhUTraadeu3Xfc_48dd0<pyNx=1q<xysi&
z$W=a`&b27lhg{|ByBF5P$moSE^cbOF;5(0ki(ZDS{JoJ}i*t?TT7qi=S68l^xpGl&
z*1xxe=3Yr;9K3#?>t(JFxbnlqJmgxQ>z`b;Tpw|5!SylMaITqLqqsid8pri1*X3NZ
zxF&Ix#hxlx+nfA-h50F|!(uXceKc2R2Te@hdK!%v*W7<jeixtdadV#6=~Ve2zfU`_
zN96Om3xBctCEET1`99?9$m?;|choDnUr(^}dZL}zlkB{nV(0aAJFjQhd0itn-}Ywx
zBi8TV-OlS?c3#)oc|9bb*X6GZwexzoo!2AnydGoc^*B4PC)jyC(a!5hc3w}h^Lo0S
z*E8(Au91h%_Llwomv`OmyzZ6H>$2Xoc3uy$^LnVA*TZ>zd1qHm1P}WK+nRBIllOT&
z`~9fCuJSzRydU1*Re3>Ve>`>o@0We{@x-yNn&oU(*&h#!<9#-l?DsWu`1<^Qvfqzb
z;HtS;`q}%TYx#POp1mJ+htIG1?0v5aZkpxn3E7{2@D(==&uh;6+6HdQ3oiTP(ONgn
zh1}o2fp0F?pAYwS)1<ITX8(C@fSV>W*ZbbVZkpq{K3~(wP5CWk|M|_lKc9P;{eH*B
zZklPiK0m#gn<hTj`%$m){pNZ<y^Wh@Nv^LyA=FKs@7Z5(Ht*;DdR`sfG$FbEzHr{(
zp6h+jPHvhBxqiP1Z}9tKlh6Koj+!Q#&YH%W)|!U=Q(P0uwXvoZ|8A~ns%fcdt7)cb
z2O+NwugH5X`Di<?b@)5v?~UP~Lh=igH#s!&eT%XF!I&8J=jGr0C;!A~l9H16j4btk
zO;(ot7ys}-c}f2Dzy6J%!tR^=aCSe)2mbl^zxnr*=eM2r_nV<9`P}Wu`|)SD>qFjN
zxIY<u-1Y_X{Wzsl_Ro{w$1^le??l?ZKz<+BXokJhH~R~y@AJ9uPd@#foG<X=$NBW|
zcO0Ml0=Yk5K3&8AvcCiQ0`hU&8+*pEa6T?yATs;KT-QkXbUrR$fIpkh8=o#8moJdt
zn|!)_T)selZ}REt<N1F9_37&4`F{cR>DG_u_XVt<ZvA+EU%>k5wvXrY1%_F_W%>Sj
zv-2Zbzkll=$^YNB&(HsZy!y|_?fz=i2mbl}{CEF;3jXf$`Ka2)3iwx&^>d2+2d`9X
z8u|O2VyxGa{I|ScHQjo(a16-%QTRv6HN&E=h0?32YmvP()zxX*ff)ICNze01a;;*y
zm98n0m6aL&Q2o3QGc(7?f85G^8Z6iInORlkdLT1vrd(%cW*v}g)y%B(at+SRx+B-D
zO!e>oy;s|}Z@oyJspX$={>iR0V;p!V-?tcwN<KhcsV@AR|NQT$Go9o_&-=zn_k6)&
z``KAR|NCCgcy{BS`~GwND7jzfztt!3JITuZI`>cg?0H_#&~U`cC**mZvLig_Z+P}~
z_~Vl%<<v^gUe`E<J38ll0<T-&A~{(dHGD$eH^*>Z=M(b2anLwwUi<|9xV-Khk>}6z
z$K`d+q?qSEAb(uFp63(fkE_>T{2Oeq%OA+|CSO0lw|`!@{#O2P{T}kWCojBaeRi@J
z?6Yf<{7Funf8Q0PQ+>T6G1jY7lJ#0L-Fo%RuwKnk)@!82di{NYx)wU}qg=DH7F?44
zAS)|~Q-|x*(HvV`GoNy7asBft#}?N+PqWlD>nT6t|6%Vr0IBTWe`OYh7ExTIWo3^t
zGopo15}DV?%$_BqNF^<!Jr!vv4W*Pa8d5@qq9qa<X2$<H_r0&J)Hi<L_x-(f?s?yH
zp7X5poaa2}-1A=W{Ex|z#t}bwj^-H>BvnYnJOdlcLtMcysX!G>E|d&D;r6eYXK)6I
zPlDk;`<d|F1b&J~1;<Q%hCf0J6nmaATMK-C!s{Ct7#MI(f>Izb!Ymjti(ZRB2JmIQ
zN1p|HvY^1C4|u@;Q%fvx9|u|Y)w?w+{I@-K3qo{UFqqkp3BHa9rVXYEX2_%oX0f0N
z<~m0cEc=Y6tFFGQ>t%CS*NyL8UF$mVp@fFja1($cJ7<GLf<)MPFx(G*1%pvT4H!2i
zgHO2qB|E2vF%5&{U}HW|4nI8Ig#rM~+YLUzdKhrafp2v10-~>fHK$-BKET^y44LqI
zM-~{?b`!&zUSU`#nD<Z#=}8q*FeDmcV-qQkxWJ7<1?7StZNyftT#1>Rn`0Ih7MP!}
z50)3nhuzyIggx9Pi{<Z`i#>`}!XCvbV+9Fn*yDW~*pmYbvBE=3u%}1#v8Trju%ctj
zvEmaevEoECtoY<AtoYPw>{+rU*4EaBb#!zPR7dg=4UA~uAEE(pr~eR6{+Ddf{DBMc
z{Rf&;{4Wj7l;6B)M%q*K|C{QYGNM1+e*d}p!>}Lm_S61D;{5=@&)TEr{SnYpFNF3d
z?eXUQ5DdRPYR<udK6{HW?DnYPWCjK}%FqYFaNDD16Jc4zfDY{S;h=|`AIOgyO=e(X
zfdBnD7*2cCd?EuA2Fo(0p*a|mKHeOTenER|^pFUM_We9K><(bqcm{NG47CRYaGnDW
zS@Z)#kEpzVaj)ihdjbJ%e@MJN!qNZ2sZ;59bI>1Z$Y-KCmHw|H7|(!C$)SrPKe}PY
zb%1Vvda-sl?`aPR-~imPE>;F~HV?nL>BGWjm<Y!8YTk=JLV(U3{_N`0yifb#Az<xc
z9!T}#AD&o-tAcJO`?l{c9`?;h`(dkUP{0xW4XT!57mny}*s2;7a72HDs%6-P|7-m*
z_S!@qHq(DAAhDl2RGx`*L;E-8D1bur7=!VA<a`3&Ie*r<h(2A7_KC$ISwQOECq|(!
zaiJKO66azV+9!rTq=Pv-J5%<Eb0he$`_W?9gBS_y!47FGe>bsDtb!H9&xd_tO{^rz
z0xL~*f#imjUG%`p(!8+p%YN9)D}h*id_4B*S}^uHb2Ik(_EySXaeI3^L3tz}(ZGlX
z{s9^Qhw%^KqCX1*SJOk6ptdxVhJE4ddahw#Bk(^~)t{#yY*0c&;)iY@tie$56cg)d
zKu5XYc?ft4crOY+fd}xh^r#I%;m7b4aQZ$Ch=zmlgTNW+=~)MBFbF&a90T-hgEYY5
zdkrTPk}*Rpi`c;%jOtZ8=sp$#r@&Jiz|)VeF_cId7Z<1SBWMf<$MM4-S)@m=kN)7I
zf)nsRYe0Z^!($VFM4=nJ2OgVDQR@#_qEzAX{tT+8egwWp7lYl6=w~pk^pyR7(@&4&
zfAkJtG<6>@>ppjvi4cQ({PS{fz7%}4!FbM?iRY{pcs|tm#<$e-jSr~j8~0JqH!4!k
zH=<+tz&|Xo)}y=?9m|LOYdiIPBU)Y}`Ti+6(m3J=&(S)S1W6TA_d1mh9*7IgSt!AU
z)~V<Wlb@d-<s4JqmKoT?ozifA39U=jV4c~DwSWIUaxMv1*U0CH2L2Nopg4>_DoLNX
zcEAJp80H^b;DG*J^;lnF`tuLUqymhBi<!A!J>`vg9AL0|`2Ld)zCiCqqECCM#^}&V
z=pF!6PrYCcgevgx@Y(atdGFqZ3RI5(2D>Q5lo?`B0K5>NK?VV!EJtwsfSmd?kPO~_
zU^!7TQcq}N@cfVJX8=|_Ug+uy21^<;{cY#dnQ;EVth+CCPklylimIw=_j&7rg!$O>
z({|W*h)p^>JG+~V+>B^oL<9dF4WKxMnC7~3ral)9O`k`mA)Y}e07pwpt*6X|l!gc`
zy!}N_2is7TtvZVK=wZI>wJ!y?;D37+bkBF)y6*3v|Lo^(La^G!7&3?deoLg@(gkD3
zaG{@d8>^$Ou?%;rurfq*xvBd}TR6gZT1P|8(0AXb^6xuM$?=R0Ro}gv1%<gqliKqN
z7*}-B9o=_k?3pRs=>$#rx0526#>{$6um7Qtj{QmE*wkZIZ}~^rT9f#gUelMS7C)^E
zk=YcIdQs&1>5t)skv`M!JhZjVFYTyhb#P>#8Sj(+{TumZeO2PqxAB(`9`HHf>T^(`
zd_h=5-)k~6%Qc#NC6QYbo2Py3I(YVg=j}uOhaVeE^`_l*tpw`0%xs^HWqaHpjzuVD
zW27&fw86R7EEs>Z#7M#4t&iYXrq^%1)b?HXdlsbU6C&^D!8Y?Ow>R&bFq#7PJ9#Qh
zHfJ$iy0wxDwd?FHL*(NpR*c?IJNEV4w5&QiQ*lf~Fk<Hf`W9I_8jWqV4Mm4y_RX!m
zk-LO#X5y$8A&qUJBsL4z0_~+!z0Kcbe#e+z9~0q!wK3Px{L8x)5%*Sv$SXK&JI5T&
z=Lyo(Sp7NntlHbOBVRt{zkDL$I}KCYC&Cevfpxz35(vIIAtonOex+1Pey*mSD^GoG
zk$H7(^~-#oLVaIu?456o%&1!WhPI<cnDLm3^Q5KuoHnk~Hz5zMkiZs2FQ=_&90hEj
zDq%^zy!N#-7IE*hP@B-Ed&l{GrR@dn-oKonF#7e|#q5eg+mDXxGC%nt+3;<P+BcbP
z*T)9irhGBI=B)epQm6L~6V*Kt6^qma6dc(y9zUjE>pnSn&a~${tqU)8UMjzoD1G#v
zN9YIVsearTKmT_};e&;H_8S(xda!~yW;9b1-CFm2lK;`0lkVgxU`-LZcLLLr+PIyc
z=XIp*p4w^MFc;I%NRUfuk2$$C>BHG+_hw>>Q}5)ZmvJAxIsQ)GT#Pm9egp6G`+4t|
z2(RC@-tNuA?-(1qj^l3LsCz<2&+GM8kFr_OT72rOhwBy%jbnlLpSA|qj*oc~m?o5J
zZn*roe#;x0i?U6e*ffWUov{%><3?+;zNF^YiZ4ra&pf&*byM_aV_xG48=i?9?l;s=
zc$_B?pd-eK&56;f)YY`vy;*kJy{Nml?{LJH984FlzY&;rz4K}K-Pd<GG>^%frzA;h
zl8sEpuAduRJb5fb=KW(u4R-E=bjvn<v3k7Ad!OFH^jXlx<MxSDQBfx@s+(>!m!9<4
z$ief;BZh((M{Z+r>d;tBDB18^?6`N~ArhsbzBN0pfB&MXa3KAdp13(%%x#dQ?S8&v
z=Rwv(X_}j8+$Mq`uX8u3b%d+?(TF$4el&=EUtVIh;*74@8jCuP*vb_hnszN_O%d-i
zG5L+sV-9k}7zw@p@?lx9MDy;CdGGw1(~MCr{$6=4cjv*V+@yRS{a8-ytM*axNkx}W
zepvr#1v9%fi}H$Xi7)3xyqvt#U9oYsb%TO@`%>?w*P;#+)2AjLwzk0JwU4?Tj5xi_
zC|2M>c4pbMJ9)biZs_pi8?LS@+t`)p{x;@S<)budUWVYK7rE+U1^5~!Y;vcqI73?c
z@}Q6T8?lI;&9qk*0q9Kr)T9d>PZ?Q)>9vnGtl*bCbwtcAo+k4WX{qvdfE0?@$%;Lj
z!5?>ax#oHip`8vg?M0Z$R|Z;(4NqpZr=47!RKq&$9*u=#fwuCl0Bh?R08jHwNG$7Y
zo4S7d;-dxcI=C)kEWu*O^jo;u_Zu3;`XtbV%nQ+ScdpyIHS$o5DRad*P)F6=#OD0(
z+m@KfGpNQsIr(Lte!SshUin?LA-arP--1<guT>McIxa*vs<fd?Rbxis$uHO1=Y5?(
zdx+6Nv_0eGz9UJmd}cAy?G4p(4+6|50W<3@Tfkf&l{*`HPPr?;{Vw)FpDTR5UXg)O
zW5Bp~!H3wTcdP;6xI;09eD)Eg4eND{be9}$V5PNx=*SYRY+o$2zBVk=$E=3$B;#6l
z>z6@WH<OmSgdM6|mYnp;sK{V%+CAQ{by1vHP~mB#&SOcgMn!gJH8f=~fM$NFb9@#e
z-%1y}%5;rU<4U6-#|z6_4PFL4W(Uk`iiPH!tZ{HIvNNrr3FMEMkXXsNKy6>ysLa`K
zUnD(>sBw5`@-F=P_aj|7*oO<YDekI9x&}pw2sh`Qyc5^Ib6q?X<20(`o8$tcgUgEw
zpP0N;1=Qx&*jo$plrL6`E)+Qz&5rfQ^b54P{F-HEsR=l!vR!?8$tckzA?4+Y<m+)h
z=HD)JVhYdA=d~WXlq&P$N&S_l>TW>=zWyFBgWieS3-0A}Ycoi^^ljdYd&RY9_Xolt
zw0B_%p8BcO_sc<}+UlgXV~dnDlqcWG`{dWWI~EkPslr+eoXoM!N<pu(cXsXbG57Rj
z3En5;YTBy8@4hjqGjWkpuw$tFRe`EYZD50<*uJGc%Zs|$Vx;D(aC05;)4k{WhWphs
z9t{D3x<g4fK0UWP=;c3G1#oYhkXu6Xjan2`YFnDXy`rgo#*qo!y1X7;2hJXN`ZZLw
zwK(xof>kwFtjVMfAN`ekwJHz0xYmz#_03Y@vOd5Tv%>q@#yJQ4-p5<l%{fSO#qW4T
zp!MC&lV<u{Q?26YTs*1#<1*LH#~t_N7?j@IdmusX*rs=3Z4=?~pjl=^{iGPFfGM4m
zgqQDQso=g{S<lQ6EP&nDcpC{t?FN?}!TYS&v`N|Axpz?z`};K#cjw)2JQc&d!98dU
zRwr^>KInr^mGaq7?JVg}TA!;te$HG&%aAz=YYAX)ZQJ|u+X<ucGcn7vviRNiB(1xD
z{3W)6=1Rb>`G=(1eYh)xV*Mv|?1|V{bhX}0q59a)<&n81^8!?ZZezwIEN4>GUDq?K
zGumohO0<(JFRJG27p?cY{!p0Cy?$1h>Q!a>4Q0#~V`AI#gA`|`Y%DB)`M#zo`H|Sf
zF|X*{OfNeYlyPEaxv5UCD{h4b6rWyM*k}||xJEvOzbdIl&a`IigLhb+a7p6EOLp(t
zcG0*U+_1Lo!`J+vd6#1=RXV;EmP}Lhb<^EL{<?Zn+~jRE1=Ag!tM77{m!+-iX#1LO
zc63U(6o2YcqnmZhSS!jgo>?V3H`K4XdVmvS#e6R>3aV00SrlECbH?e}xytLbjN@uA
z73T+7>eY;cQC<9ES;7g{a_>@S4$o^^T;Uh^-47(KD>}}TIX&2EPD$eX3}3CAyFMDw
zt6rjYOK*?gyiQXi|6|$ZGfvM_--T2iT;Iv(`008H!?C)?Kpxc{f-i1*XBR(Uo^$<N
zXVKYpjV0-3ho;V)9#PBSc4kpVlJYVB`ZZdXAC0{-4lwF%+c`?3lRk6azP9llsYy=u
zT9)sZsl)<<r_C-oJ<sA#Jyt3c$iA^s!Y;0gh9!H)n`o7FpanBtPA4tP6GGgEjruV3
z>VtDRLj8A?N^LlFU?M5C(67aa_mfvkN}AoARhOKi-C7t!XbMy&WXF{kn<Or1xGL>v
zdEy91QjLIEBPPrA_OScDZygTqS7RpL%~i*WuRTq!5fE~>jLupw7F^DMn|2-TZS2F@
z(b%<Ak$`~9%+g0U8x=(vHd+GZDs`I`3QOC(51lU4UdZ;G{#L74V^Z6>q}5Ni%rE`q
zY`e0_8@m>krJ~0Y+$lW8nn%&|!}h|42gg??8&A4wY~*wGDXs534ewa)j7_R`Ek5cM
z6Rq}JvvbHf?mn}rtKhJD6}L6dM0TD}yy6V1$_p38ik17dG*~7kKJswTvRtG&N55!4
z$dDhNd%#_>s8PVaKzjx$mGN~T$vts%egNr<@i<=P>+7nY9G@4Sr81EvxP9Wx88f^W
z>*~&%rn+~LRMJJmx66#mE0?j}dXDjo=E@6EKlD{8TD8KHWMJfTGWYnylTR8Obai!a
zT3cCJZHj2n4N||2<*qnyDCB%FKK|;JQu+k_XUiYoH}tx;NQur-^WEb^G4i~ctgme%
zPb!YNWfJRe)De=jx_Ha&Gp~e{rKCL8o-%wPHnsDx754V5p2%e0xc&RR=0@6z0U<zB
zn$&y^G_v=kBKW!|t!w7Vm@_oU#->4e@`r$gw1p*ED)Z(A=$tnWRMlYcmYnc#D~&j3
z`253e>-UhCCO*zTKE=q;@T^|ZBS0f>rorPgD`;vaSFB80%0Z4I;ROBTA9vogwX=I=
zHfv%X$G9$S3yfu(M0VL;a(p4T!}}+vjSP*>uDRUE16`ZgcvMT{Sb1@P;kP8)l<$>~
zQft2ep|cImE;eog4EH&$>+(_`RHt0@P>>Av_gZw}THEty=ZzoMjendRFtt;7i$pWi
z`YNq4teGqafJ8hwe)jH#OQYY;DVcJIb(d>U(z~{`rsZo&ok}}-RQ8JBPfgw;Q3|Hw
zeuXc~a*M>lhpDwSt0z0Sn6~mcU%uRwd@8okJHYWQ@8SgV^P=pyM`PBPXpNU6`&w*y
zz9!{UHM?Spk@AtGpf1j}Mi~Nd|KvVb@e9W-607c3nk7n4WeKhv6)al(g0(qSn=8EJ
z)S6dfvyLQPPSp1`o8xHgsKR0q<<_!*E1HId7b|l~k-2Mi{^No#(qmM3q<8H3NWQvF
zOH(dU-}n=GtmCIN%w?wpXD4^kW4(ZOLjjljZ0nZ>GKh0w6|#;gh2*qtGg3AhP5RWv
ze^ls&cCr#{S57v$C6Y#bA$G_zCF5|c=94wX29N2@T}(CQju)LPzVE!s(G@FT8`t&B
z0^2efJGshnzgS9;w1dob9V3-$le0$-E>5mol2LXdO?H$X^qa9IwuOXUHgS||N(GN~
z(6GpFlZlb*!sNpq#t-hATw~8n$vCZ+bqnLv$6PKIzbw1Y<uK7@SrK=1Q&*C|HCH(E
zx~mP#ieK!dDT69$MV4T828*L<O?y@sLx{M%C@JFlH|f<zMQgai*UoVS=4c8Er6zHS
zF=R&2>N%#FG$J^+3rVZzESRrq)Yv9HMy@&4Hn}K?_Cxg{zOlTIXgOKsE}DoM%$k_q
zIl+u8{4(R(9bTQ~h1FRp%ai%|dF#nzxyG^tfBwAI(fP2kh_{k&#<&|15ot}b?5*}^
zKNi?mEDDwwRdKZV#f|-6uIUxOSkI7IX|BPESu<oVIFXomnWfD;5i;yUwGy+mKa`&|
z6bf?l_ivL5P0y&Vu70#@;c?b+HBI(zzAP4tcP~7iY-ek`CBpQAP2LVuv4Xi$Qnc*P
zmy1k(6`Rv09SEJ5z4`9z?^v0_ym_U~g|2pXb~F`Y<GNmFW1Jr0^D7s!Urjv7SFrNq
zf%%6E8tpiq_yU8PhxBG$Pb_!YD{}vg$nJ$^>sQ~5(B4DV(onYBa`m+Cr>z%tWnP=E
zRu;|Fd!=~S4vW&Tv#9^b;<jS$tAK-ZvUFL3HScnM6=U~1w3qEe;3L}oGPx6=ESvM|
zQmpiXh{ugDOZSlJvC^#)^$#w{aVbF^Q>G^7eI*R}O6-a~tkvu-F_C4MEcPs({9K>)
zo9)Wwbmt~yZd7a1IvPrIE`sI?mKo|14)DBmZnwn!k3P=CjNfAW7%f)pAs@dPD0)A2
ze6Sgo&u!}}9moQcr7@$$<+MvSDWWvKoSEsC&6-&`6E-N)R7^DrI`*|5R>zyPXlXMA
zrUv>e+@SkcZ*dr(FQLCJuA#!kcjVR^sUPgp@c-oE;_G6Re=lruZ|A3XuziK;XfD+_
zGv6XaPfY`zdr*ZG42cFK!6#hv@oeOCL<1ul7|}p)4ZwGbo&TRwZ`slP|0mgztV78U
zzq$3FzKDJvk-x772)+ELJ0FB2<m@Yb&-fpa|G%w)k^aZ$`4Ri?s{z6;{@d0+;{S+#
z?%Vq#{-4mxi2eUP8i3bn-k|jNQ0t*W^z;AH{z2~7kfu}9>mKg@`n&(N{2+5BoYNH~
z^pEaQ*<UX?PT_wkKgjtC<mD%1C-U##+xSu4@8|&D*XsOH0-Wu=@&2#m2l-xt?0kgG
zd7A|oawGY=-yrzj*2afmdh<G*`ya`U>i!AxgIwhxA1@($ZX`crZUpHfHFduv(bn3+
zi(rQ%Hv#icmmlOQh4%*GPaxq}&L%!4koyw+PI@Ow=sss7iF)84!&+Ngcu*TczMtj)
zWck6~U$nNiP9tOoSx4t=<h?@3PUNU8XA^JtuLrfZG*3fqe<u6y)c;-MANYUP($dV`
zBRk*doCw}@YM;L&WCxv4?sFnY>A9Oo-8yJ#Zkmd4{Em!2YV&u<4}6z2H#c#0%O1%;
z2IRa>kv)?17Vc;E$j>`77s{x5xej_jXR|3+Q`0vtgzHE0{A%4_Eq_Z(OHqA&{S-n5
z_^m5ukoN{vzBh0`9n}%?qkB{a=?xX;2IzqJAyw?_mxd`YhKhbw&Y|FcCO=XCJGqvY
zR@uRW2YQWnJ{FKGlOk&bsS@tH<DTB~Q*|Ji2QX9}WP%R5e-ZWg@uSlgELc$XJ3I~5
z2GQ(&4F&fL<%Jp=>XaWXMtFh$u^{hlsyr2N-zV<rFF$I7U?5dc+uVkG^k?QNmzI{s
zWZ<Rn7x?+%_c;XKzar1sM3MatMUF_)EAVUGaSuUnF!@m(wB-YT@QT{@4z%so0nzrK
zoCE*kpx?5oeOL}YpEMZ1L&=X|Q5(QfPQ{Upa1Ms!pH>DuvqH+D@?8dVdUxE@pVuGB
zk6=+-z*R=Ym6IF6`^&$A+@I!O`3$_WLCT}@TMGPl`@zBJ{!D(<2H^mlrBs}Gh{j;J
z{?}!|7dxc;IG?=Fvp4Zf{TWZgkssm6-pDf*a6hN&;69@DGu(e?J@7Lg(nBhL&vL?e
zyW^f8@iAQa5sqxY2{fKjX*@(Ue}wz*sslbIK+31^6-g=vU)>$|{EUZRksskgxM5x>
zrs^Oc(f%2Yzq%ggcr@nk17Agu|KzvC`f~HD@}t&>28C86>3&Y+Kf@OQPve0n%HNyl
zE8&lyen)<a4uBS-`D5(={Mz4@|DP|}@HiZiAK(8Op0@sbP$T_6(*MW?{(F`^Jc&l^
zf5iSr?0;nZ56@ft_n=1n--!Pk@qZ)!@4x5Sh9}X8{~PgtBmQs1{|(Pu{P&>#zxzMf
zGyjUxf3IgpB>FdLfcV|xq4G>z7~20q4!`8x=kGbP01t={P76F2hrd6Fo-N>uH<V|>
zfg#9gg5gjt<g|35l$?R(Rxo;InOXsbU0p4T4eOD#4S_8xD6eR5=SBIg_D)umhqiYy
zqMWh4D-^O$*7mMjDCceOszl`~?OpJfG2r^M{;uNRjfcWK@qvCPqUY~8lHdt`Gh#X=
z8~GT~z@MrCSy|cjkUIWlX&s>iID1FoKOrHZ110!7q?G(e_dlv5+7tP3V1EUMdRA}%
z|HRo)IA`AdZp2Xc2zIDCqMXQw1N$p5{rM;C2hsaCTvR*%&*-19f7FNQLVbYW4Shcx
zxZ&XW9hedO!F%Uty8BuEaQbjCnEv`7u^*)Azwi1x{0~U;2$C=K|M$Uc0F|K&NsZqP
z|Nd{VpL}?~WD=U+fjxWR@B8oYIh0)e`TvvWuLo@{O?}Qlf-E+`e;bnFXP2*!cgJ9<
zce}sJet^ck)}}8M-tTRh$qDEA%!n8Z-V?Nf`ZlCf#LG~+CEj~OGW5Pj&4{-B_5Wx1
zAJB1LOVek{`NQ1E=~ICBr?8LH4(C%{2^rejS}l+ae>VSr)P8{XoaV*`${F(9&4OIO
za|!U@K}nIMj+~7=9)t|=9-<lW--=}T-RsY^pSHHPyG>u~DZJ-xo{r9hBi`#ErBV2g
zARULi9o`f0B4mJf&{hHOt%N-cWlKYq|5^6a+}wQU+vi%!`wO|7r=v6d&mbY*<shwx
z1bx6u2l-L3r4D%i!-tUJ+qbVPL53F82Sf2WRC#~?3Hzb;%dpmAnwpw9hxW(eHWMj;
z-pMEh9%~_&MLa@I;UC?@`wF!1d<YV<DSuRkF88%=X246!uh8uU+dF<%K{B9mjMC5U
zq26CrNsjXVQ1&K1^iEAFq>rF$8Jsi9dwAXaqcW&NG91W*et<lPfK!l{(;hC}e!Qs=
zIDR+3i{6QX_kj@aU>lOX@xVTMAO2Atz#tj+K|(Tg>#ujazv~|8qj%a~L8=D(kmyer
z$_Ma|U;uU$)WxIm0C`CNc7Mk+&=rJ)c>e(W%o&X4VEQNEkPMJwskRhGl>Z$$@QmIm
ztw6kIhx3XKMHA`=)jt8B9nLcf-cR2RaHt<P66Jqo4s<3$Lhs7Hha~bNT0hc1(GL26
z2Jpn7@0`G%e2MbEG6#CTKuh>%G={@J!U2AX2Jo$e)cp?a&v5@8^&saD?dR{{;g8T5
zuKxcBjlZ((zn%XP`}r%a<L9{l?e_C;=YPche{Q3HCB%sR{FU1MIqrYE{{QX#kNBUT
z+vr~jF=9V|rFMUg8`e|vAa(Dz{k+BhPYC?H5Qg>7gONJm@6!MIIUuFrg}?Aj$?4!|
z7ox*tf#+=Ecn-h2Kq*&c!Sk?<l$?eo3*}v%Q{mJW<n4+Ll)NRdWj%UsXm3|Rd1ZSi
zFUr5RcTsZ6u`YQ2$K*)k7>3Sikszr;BL1FFFlAR33P!Fz8i4)RAO7~$UsX>qf$$T1
z@_$#3XpYdwH87(8-?KmXimBmu?e&k^AJD!E-%pN5`S0-XN9Y61%k`CcOvR^G)7HMY
z#)O`S;(_?CnaBZ-^1a;e(g&H-YD;f2-rp`E0kQb=ds~Gis-K)?MCF6=K+q-fKSCd9
zT&R6<gYkZ}m=w@{53wlvJ=*tqTV_jrcyfjjzKg#w7!QM${i^)%+o<Pio?T<OzkQAj
z(5!;Am`Z;!g@>)PW!@K@W@v3`IX4)+{$>5?qvxTLva<5|#GRgu_qK`1QfV(lo&(WG
zIg~9#<#|yvWzWXCF{%LkP`G-Rqqf7nGQ;@fskF6;HUxe248JX<jq0<)`Q(ZEKPv~k
za}jR%UPP-m&ffG<Ied?(MdfjBZ@52l5BL-*v^Vl<^vBbmKB|W^2^v%$6#K*f>hnea
zsiOfG`VM&hU~LDZkKhnItPx7#H@CWfpLekK!zsJyKdt-sZTrIyMIXUk3>dmye>}hY
z{3H6mi}P37jnMz!z7IK~{}KKF%6R>=VgJ|m2R^>#&z9-$#)t3Ebae&8Ho-5YQNc7_
z**RTZ+un3_@qF&;RBq|&TGs*Zy#dDICIChI6lhz51c}(EP^E*1epm0f>38q@$AH6q
zCg=?pzCYZL+QZu6Go+1>DCZ9Qw?)rGwMT86>fR_JReh^{WeCsBMEl<H{$TAPmjCj#
z_LcIJL%N*s_Y_hd?_bFIwdTbl!10a1LF7dHUinuSTNCwraa!m+EAbnv#Sh{%rue$7
z)&RJ#y<jPEb-(V!PW!=mQv6J&HyX!q?~R@>1Pc80_izD@8`5(~l=G*AA3)F4^6tN*
z(4Q`P2AHLg+=x1&J+;ma)f08Y$$PgS4t#%@k@mknkHS`M_tn6QVXvbx?ENDQ>x8|}
z!O{Y3Ddq}Z#shP}TrfM#2_wUkHD(DVo^a=iS-~9{bH}_XpCrr&AU!dAsMEnT;Bz`=
z1D`&W79{wzfq!I5nI{D^f<-t7VzP!ZCkjPtz~}%^E|?aTA7{)9YEbF_k{dzH0Mo|Q
zFiC7K@SzUUxxhbHie|hpH;~d2?vZqskZdVBv;@8#Fn_8J?4ia3G{B230f}&(B3&UJ
zBAvKU+M;`;`5vviP_U9IT6Y0h&3@ET4<X%=;E&Ohq2EyN=|J)ZoQ{;X1a1;$2yI<4
zXW$o=ks%>^s09h`@ZNEQ9(IL(Cj*ZjQ0@xSkSINgcy<Tgd-|x`!1~>=U@ItCZJ@Oe
z1&buS6OI0j8Bk-4>0uKFlo|m29!tYpOJS3T2}i<~K~D__s|3Ie2P=a66|Azuq^>Y5
zI7y&BdVuWm81o=yVwl7rT9z18_Ywd*1=AfcvK=UWM%cFp^tl_wX57I7(1>2#&jyig
zBd<UL+agA*8^w-??@y4e4c})V=)t^(G}w5LmstZmA!|kU>k9X%6(N-aWgMWf<_rlR
z3B(u}=%LUUL9)BUXt1P=4jIZQL%Ol0jCX6WcmmHd;KC5<kwo5*96%SApk>^r;@+^Y
zR`KzN>)jP}jVK|Hg8M>F7$cUH62vRc2QI%Cm2+o+^Z-dv8*9*jBGC7v;2~i%!83cn
zCmQL!HGsUcHH9;GxI@0XuO}ENGwMxTqc~rLcR)T5ae{oA9JU<%<T8rvE)=Y~m=SP;
zbm0#E$*Wu6h!<opxG(JCodkRjl-9Fb9x~<&^{8K+po|N2gFF_lGXynIVk953Em44T
zp|s*2Mk^n{izFiVYNrH}5q*oSgs?E&9(&IUR?rT~hswO*6ZvSw8`3)NNnPO?*Si&^
z#u8*eqs9Sb>*;&EpHVA*N<Wg|o6F_!<PKPfUYHJ8#VGTy2vC?0^pM4&9z`{%Y&s?b
zGnWT88$OXWkYGN;JuISzI7Jp_4KoIUl?Eu(dN4{7lsZHW&4oDjz7(ap%X_Gf!=wOS
z6f}m<cbd==-Qg09!(@TxP_>NxyxiD+&m_<XvTRR~U^qTs9Frf!o5~Gq9zbpJd4LmU
zVt0z=xkCwIVQ9?QQFQ1*(KFIDiWpGN4mw9OD6&Q8UTsK}o<KJ2j!hcGF7Z)IQ0TE?
z4hmK=N>7q0JvX#(Lv}XUNWpDkpm#)L4A<%Seq8sAir#!rfl*=Ktp#MWIKM;>_l70(
zF{xjh9(@uJ$O4fC&j#D*8*|}45P3Zp%2>f8FBHch&hc7QLyWo}evl?`Z%b%Yq#y2{
zsLYnqC&+XC9%jjYn0sP1WC_T}p}DCiK10zJiYo~#LKcC1F7lDczaf7*kbgF6yobk|
zNV@)>RucNq6|lHd$2yV+!D#?CG;Rnj68;3WNAr&#)b{q#gni+@jhHPx020kh;y}fX
zf(u2N#LR^5a4At7iLjy(LI!_D>J<s&7}2LEM2uwkhcqq@iQpC4!6cYj`pzLpdxPVj
z4AP;vrN^HlS$pPx+%`~riZqJB=;&)<C;~?w){epnn&I%Vg3sQ>Gm6Ghyn#HY0qDyG
z?$9_ueTv8aXe{8g@Sd}!)S~f^^hekr2@?eTz7${W1Lepoqm>mt_LoA8hGtMg<7iev
zebyJpc;E%a8F<`|b4&CXvSidFHb7-D1uN>4f#beME2wrb{mlYS#VNeb#sr{0@cF6#
zngWeIWE05Ba83|rLRvHr_IMZ%z&NuzN*NfZAYG#<3iTwyhvL4W=uI9l7Vz~<@8|%>
z<pmr}8U{3qMUdWq4Kt~imQnvBEGR<6<CDHNYt`L1$UX^=H?0o_y!Y^N)Z5;F-WJ&j
z@*2K?dpL9_Qbs1xYdzzYutjmG$779geIRj5MbWeyMM`0?+1{KYYj6e*+$pgRZsT}7
zjCe!(L3|RPuP-$6QMm0m!(4#d6TY7A8PCXf;9dhkqIEE8g<>4s3emVg-UO}Qb;0u>
zJ0eC413aS<i&pV|7$b}|WE~#VXSDJ{IM9ljC}X0`UC5&nB@D1*f#O9R2NQS$WH$%`
zFPS*N);uWv(c_Z|pF3p$B<jB(`)PiPA3}Z`kBpJrcs&0rea{12_smPbYB}Qv@Qp?)
zF%J-S%`*UMDCv6BCt9-)XpLwf4EU-6%`8j1caHFgny@KiHYdEO5%ehXvqXF3ar<kq
zx0mX_KEgGHD57!Mv+_l8tRKbpa9`DzJB|SoAe|%2LG$8#-~g?$bSTz{sB?plMY9TS
z0eD0}NYb;i8|de0!KRTl(_srKeL$w(p;ZV2;Pe7&_}XhU^g5X`YS9Qq<H#MxfG*HP
za~=N7MA0c);}Z}}l;{ERMU>D29@N{2G8#>^)Nw>h9Y5&V9w2C`BL%^uF~UG?hmR9l
z;1~G<1VskwxE$_~s{xNF$K^tBI5m_zQR<OQ2rH6?mMQ@)m2+Auzl>D;XibKE5fhaT
zioNg>dI|+JF6}XTDpj<e!mxp37|kW9?-0kx3W!xI2T<?7itq7Neb@fTw{XH58Tl9F
z3Go#+?zQ^kM}0%A6f^<4cchEYsi;Sg2PR^<=>WwBQlO{+weG1wI~hnWL<zS_92>F2
z@gshx!s^GDVwJsVAsa^VswM1*ASv)@0*wtcM(imgZ4zjvXWfi;JJD_<T6YpQjAAmR
z3mcdVaZ5t;W=|~KvloSST9FO(>`3-tLA>BAOgwVH_hC6Gy-j##<TVJY1NVdQ9$3<g
zcQl@HneaM1a!0ckiqBms8b%RH@0|fQ>U@Pfm<J`kLvaj}56!V?Z8Hvf2kosRFMxY*
zQm?h;BB-^7e`x%p8O$46qup{O1JTFm9?flN#~sagL<HytrFfs9nHR-#_>9}*H)cUO
z+P^}!fp8#enN6A35w}PZ6txeA8O;@FeSmBRMYEbf8MjOn*`rw&_pA6?4((5jg?&kc
z6(wGfsz;k>+@S9s&?q8-eHg&!z@F`GuNdrxEC=}BW3RWB_25QQ5Pdvw+|j{)4!$=;
z4_*pkL-LHKSU0j@6v5zH9yh>mqrM{gMX;Crh&Jj4yod1pfd1o{ux5OuAjyf@fA#>m
zhK3#P4A1+EIFZhXafvLQcYy5u<stkYk{yi-{5v9IhiYI%)4x5jf7fHx1LK6H;3F5q
zKYTUNyXObCp8ivg2e!duZ)Bfhu*-wS0dB7{6kA4P2aRpQmU_#HM$SNq(8%f03qJm5
zLm3*8xV;aoRRZhBb!SWI0Uv<x9V_>xiZG$wray-^+aOlbmzSUKG@x?|I+XtJS+C)e
z^d1e!SK?Yg9;W|1$qPOjS>I4CkiSJ<kgzTicu%yVL>?Y_AmrnJ)ZVq9hB<!%k7gJY
z!=b%@gx3eYGwCm5k3<M=FsTNvAA8mxJ$8cT7vxjL|B%;59{6Ye8^r`Y{%f##WgPfn
z6yxHvbAPRkrHl$>$w=o;lpQ(}%<;&BPNwW);=P1s926s?v4i>?pXYjii^x7`tc1QV
zL7or!V-yJt7H{A(BCIIJ=sm;XHOPXHCfxeXK4>Ol2l)rzZ||AOB)~Ed4`{yyVd|MT
z5luAeh&>71N25|SLeUx+w_f5qpPui^k*DwdEeJPtwbH*F&44&oJnzo~UmtFI&vO0u
zOAuE`i>McnZQ^{R6)r9j@!i4CcV5t3h-O*ThiHGtZIGE^pd5s+!`q@L71t6PQv+v~
zq1vO>0g|F``>|j<L+vuKz$l#q^{53Ao8U3mIOtbA^6l~GNXz(0AL!-K_xZ?<iCwJ;
zu#$0wf5_@k%!0fR?#GZN63`yl_+E5+M+^A3Kqx*%w$0HUgCI{v25k6V1THBaPolYm
zz&jdNGRXU(m>ES$Xpei~P8Rys3H244C#?YzS%DixS8SB_Kk}gLz!8!QSqz%di5<?~
zn#8r#+phY12n?H{q$__rMDEI0!TGctd*{N>$Fn^^M+L+o(Tp)5dwRJowsFVU4jK4)
zc#@sPRyf#@4LseAJRO`oFt+K`QgtUw4-YaFlv4|qSbExHY&O&<$kbh3JUlUM1KjGk
zIKW*FUWc(wr2-lHxd8?&kNOB1m52_tM90OG?CxUeB&O+WO|254R;k-tx?5U9HO5v=
zEm~%{m_pM7W4W`!!Nt<e0eE+@arFT%1N#<;={eeIlbzg9^E7I6BORO{Hb*L~o`;&A
z4#xJ7`e>l7<?3XET8L6hbet{i$l6YB7~3-{4h;uOI~P|EPX}wD$v`bMbZ{mcxLLYj
zY-6Y;%Prj<EL}VS=3`F@RX|&6$udt*haP=uTY7+YiS`S~E@XG0A*MmLwe)gAh&ZXu
zKn5KbTUY2)YJq{Di?y!R8c@n<D%(rQ9v;9rG|HmFbmLQZb#fwGdpbbZVN+|V@M=)t
zO*Y0bT_YC{2Rj$Cjh2^-HHP`>&0nOU1;5j_7div}OM(Td89={~ZNxNPtlj<G5F#9Q
z615x*$;%pSLB~K_O;QGaTThl+v7GFV_{O0hQwy~moX8YI!?3y3B6U}1X9B659@re-
z;tOH7YA!aETQME5KD_QNK^vJiRd^i@FudCX8g;7%lLta>?w~0UL2SOI2N}a$d*jh`
zp<?Ij4Y=53iJF9gv!#=h2HBd5z||ejc@3astY>IXb_T334J>WR8jBYrSul4ECp}Mt
zhwn=Qn1x2ccnmu%hK45A7Ry7)F?R**p5V22DkanKXK%{S{!#8%w}`-LG8$OXsj9L;
zPKVjUI~X*WxH$ER0mDXNBohAg0npQ8Y;5?`EE){pRaFr@6E<ry274^%4^N<{ljAVh
z4I+`KPfQr>LqRi2ojpAU5a^--pY#rXFLX2&3&id4_Q@D377})HItC|Wa4hfy?OCW;
zAU=VUvtzL^dTGG39O4^u_|yb%X8?1BF3iN{kS_(VtxKVlL01p&FVR4IAl@riq0}Nd
zP-)-mH5AfNA}8c|kq;&28Xb5-vkZpapupfKqR^)__<c|T_-avTs}3;E6yJ^JZFGPW
z?VBNw-xERMyAXJcf$u^P=kBb)$D`Q_#Vb8g2cnHuF8KHUXkQw|MCeMul)7o+yYPOX
z0sPw=RIdellIU~*it<R<0^rLEPQsD?@_&f-5ejdF{xo1V@_^Y0>9uFq3BjS=OtdOM
zG8<B$&>bp8u?HSG5ql+iARCHkEvd5`+AYNO@#``n+6!UsrRnbD<$$f{WCp620X?JB
zW9aio6cB73w5EX-E{fGq4<k!(gLnW*YzH;~-t31seuV#@R)^%>2B$)3V65Ttq0xe*
zCi=U_3jYq?5kL4?z-=AvmZ5#c9xncvo&6CR5O13)y6VeYe`_1At^HA6G=Lu(>TUti
zTRq+lgYR>ZXEcO<MNy;&^l6W$Lb71kIXXoZUuP$hH`yIcdrJHgV&eQHvWvB=jf0Dw
z62Fn5mZ&^G$-~pq#m3Uf)rG9Y???9FS5Y22MiE7W&Q?x-BtYQep~Uay?lRZI8m2f)
z4^d|aYj;-<S6fd}m=ot(dN_-DOYoDNEnOUJ$sV3C^Y>8ejY`Lc?BeO*={I%^2`(2)
zXP~!m8BFXhu40t=lpn8gb9c3diQ3g&&E4AG!4u*aFLwa-m6xRg^p;0V9Av`Vc|!Q9
z#P8$aA|=T`2NAX*dsw?WP@)!PM1@45qBy5_Io=d8G;;OU0H_Z_I}cA3#0}F1r1(MU
z2#2Bv+1kq;dYbx7DRU>U^#bc4+vvGFctacr0c)@7z95>ufB*%Xi^<+(Cz2ETRN}XU
zb%(dBBiWrFK@*pkgPJum7bSjMOD7L9rRRw{#W_P$Rh-j{OT{_e!Xm@5baQiZu(m`T
z{Icv|e`tvUrsfHQthbDcHf|1TJ`he5IPE<>-R91jLmgIP-NQ-@hSeN{B|38?#l>aj
zK-AtFA-^)PN(LjQA|rG@XCPt4IlTlya-k3wq_T2wg3ckh7<y#)0Y_t;pw$;`x3)dJ
z+}vE<p^J45NIEu3`~hT1aR~`&897l28EIKjX(?+NQA-(HvZ%PYybYO5ma>tu6%Xp$
zV*_wV$w)}aTPawI%Gf9X4qGc5QF*eYji{xhw6wUSq>QbCl;zKGNLxzUO3IU^L}jF`
z6hx(^r6okIEETLpZDbW}q%EZ_Wyw<VKf@tmD=Q~!Ehj4~FHV*am6nuJ5LJ+|vJ#b-
zvJtnHwGp?ml=~?Td9t{zoTY@MsFkgi6v#rB7X`^=M5X0zZDhnPC1flWddV`N`{wlN
z5Y(ZzFp#L86zZ%!ounkiY@D3<NlvboHd^kk&Px2$1^zNuSI_CD9+WKrDM?d)62(LI
zY7eWU-)-tb_Jqax?~{i1Fxs6wewV%{+1Jy<9$0X(`&|^&Ddl&Y!`MTE`Inl{A*NX9
zNIf+T4V|S6jE$)`BhUX1efT?BaZRoq6Sw|4{3#HNQR~}9Cr5vNS}ig;cJ>{`)Y`M{
zr><|15Q-5OD-VBkV#8i{*7&f?`%mh7zt&)&m9o(G%Gw|G>Hzoi#Vqfd8$+7X^sh9^
z9*Z7zKH<cwu$Mc&rc0JaXB^RZQxmyk-kp8SNxS9J=le3($$PWp)YbFHKb(-lvr|y$
zd8zL81sU|ZZ!EUgoy@JSt}_zWpV_EzXT4{L28~X%^jJZmSsQ))cHMuFeLTO>`qq&X
z>(1ZweU&7?V02r0>4B;0f-Xz<Z5y52?2>aXT*5Z)t%G9oXEQC)a_2QJ-T~&P__HGE
zgBR}Jnz1A+`nmUQv3B`~S6E-m7o_Ip+~={Ad!}-1{l+=jPnW1}{m6R1B)YmRc7IIL
z;s+YRY*V<!{OU)&)t>!D@68dW2V1i*FI~K9UFp5{Rm;E5kZRr$uOlEfLxQJltr+uJ
zC9Bp$7t3x>lbm-ha%xqe|JzSVUbmM%{J3+vXYE&ZhT`qlVy|BN_NeuEL+QS?iJ7A6
z7q;K@tqjagxKq`fm-%?+r%OkDPRo6pwJlI_{x!4hyqB)6yw(u9NBy39vrK6Cw3N<_
z<aO=l`fk%NuP;oE=04)gcbxa>#lkfCb>$7KH?V&^t<H7B_(7M9h+`bj$pumK!%8CM
zm$^=B7Fg+*FzPDJ`MLuIY@V0p9gfErvI!rMc{<^^?1jJ^Gvd^8-^&QB<lbJq|64tW
zmk=G3gv(C7vr2By{jZb4)hdNNJdF+87<c5fs7T)y@4A2D)~0REagVO$H}I}=<IHWT
z`8L|bFJGkDpK<vyM&0uCHMd_koY=qF;qgM=j>P$fzFl)ZTwZcKMa}H_RtKl6A-9q=
zS!=hfiOG1X)24pWQ!gn($Es3VM@_|d+Kw0ZbVQt{Ek1EuPwARim;>|EP_K2<bzf!L
z-X4ERc4>m`_N`hh?E5b~_I!8vh2&iN2@G{lLVWgXGM-`3SlSdO7VUIUZZB88{#IUP
zuZcd)p~-Rk<ZecO;WN6;-$q+~iE-W>`iS6#uKu4_>(ZwuYvfHmF<w?6ZO!qD$k=%D
zm!KtvGut;<q;JU9T|DiSx%4`X1^d#QR*)wM-C3wkYv}%j?Gn3$;OHp=+y!M~2?wod
zwwCf1zD;}SbF6dX#U13@wY#@BJ9@BV59)=T=PB%(Ixf#9>)aX9johD0t760*Qb+Hz
zd9dtrRHNz=&bDfSbO!npv!))Eu^7#Ez2%W|^uE{gc@IbNjb}QUxKvbgo9=Ue$DnKT
z!%63&GqM-2_!O|I@zB#*(xV%BUYu$<EE`dle@IyR$i<^8MN%hZe9pBeD+wshe0KCx
z*t6L0T|8&k?s~4O<X*0E|NFTqii{esQoSb>c^W+0^swdad<N~EZg<ufR&3+FaJ43W
zrLp-9iQL?s@AZxH4|DC1Y#6n%!Y!@o^scbI3+JD{FJj_i;THRL?MCHO?p|!0LToo(
zj<(r#W7I{hlLs>7I2LRadwJ;Y7ad<C?zD7nQS*sD8{%HpC&$<=O~4`?ru!dGncWy}
z>mMIbb<gTRfrhi@l!(0bQMQFsuFN%>ko#gv`jXD+w>$5}D(6bF8?8Lt5_Q~7sOq6z
z(OQjZVo95{*XVO9ac@}j?Nsxn!!rV9&ghy6^JxcOb^f^B@a6^b{?=0!&y2U{OVwM`
z_^x`epeSjY?&eEVcQI|%5^>I&6_@_#?uH!sIpQ~D%Tw}9lEdw@Tc%}A3T9PYm3Mw&
z%7N5f`|X$SE&uxET*Jh9w`LwW&23j0KCV$B%}ji)a_6TR%T<lYv(_=Fq>GIXx4T6X
zFT7i_Sz0=7Rp4E3e`Cet0U_<LRlG=z2Ne@s*!H}&bu2hHah!>gTS8V{dx`cg=h0U0
z1Z4R<4OmR-&3AE-T#s#MS2XryF_1BeXeBYJWeaZDOfx3`$@Z-6ZDk6k6PRt}@<LQn
zZ`!(&7hJ#1Y+|ANlx(<MM4h%vX#T-9jVjx2G&UNo9~;nYwY#XR{FeNcQ_L0{G-qqP
zaI|>0q{dLD@|7ybp|_Qft8)^SE^u9Zb#SXxOjFJAr#2Rk^d7H?5==kGlH<JV^9+`o
zD^`1Eok+ZNe)2u*bG%E$NY6@AB9~0qTo_+jY5FFb$@B5l0v63&uOnYL7ucuLCB^VY
zZ?d;pFm<V#-s4-&Yi|ipdAlm8ex<qFM~#3>?i)To;a#J_a_Z!E<@Xn4R!m#9S=X69
zQ+VTL;ZNVoA2rLmWPLa_#d}8hYgr*z{w+)Pf8JBP<J;cHNp*#tVXyRsgg@%>wmV&a
zqU$kPd(=lcwa>x9e0xu+@8rK$EK${Q<7Jr>PwKPJ0oeiK{9&49yc--2Kd-$Y$2YV6
zv(T41{`~^uFY-NN4V+MMEncDdkkfW4t<~$^Rzy$tewrH*!r)EsvXDPNmFG=K%we~A
zrnH(jmDO)PpMQH_ax8Dh$IKYMjAYvgMK+cBw~lURmfbMxlzqXid&?hQ{>*OF)_5VH
zby~)v2*(1m51}@S3;E;jH<2X2`LEQzJ!_9r%DJcsX>V2N9(h(&CzRY|HeJG%?4rU}
zBRg8GgTK&7e%q_^yV9x^J0+U-zoaXePycDAU9{_-g~@GQC&JqczDZeDSWTM!R>S-x
z|EWo-8P88$*nY%u_Fb>Y+IK+<bx3zh{n9fschej;t`9v^Ug*i`B_-$5>G{yI@oliB
zZc&>LSB>lH!<RTzs<)m<m-w*Wa2dntO(Nw}ze$(dGO!&oT~MVO<hMTSUixDml1Doh
zC%b!D>5PUND=&YwcC!l|5j)QaF@|5MDb<@&qh@{nfXouvN0-=cy{}!r>H4Sx9TTMP
z74LQl3i)s&<x>8^Cjx6X-7DKsS>#~qxp=blyqsAxu05=ICjWVjYY11QuJk1C6IFMX
zg$4MKH>~=wuru{t;)l@Fw=_T8xR{xDY`MiMMYEmi-*cTd?+6P|-k(r7PjC0e*?T&8
z%mXf0dyG4Au5bd!*<6<8NA|>IynL-CaUf%Z!n6_vA+qy?`#M)78{Ry1JHJNlvhub(
zk3AVvrL`>@-qfv8{CY$0frVj|T1e+|GtrMpqji@n1@3$O>E^ZQ7b`zcQuO-Nwd#l$
zt=kc?dgE#SVa;m6?)%vFl@>`kw8$51o#5|2>S<h6Old*%oG&JJ+?(sT?DOxIlm^_t
z7Obgh>05OmY+8<>%<eoMV~@1Tj1uExtzie7!&%po?q2`!=0kgxAKgKIZiQnFTXym(
zm*@JOxrKRDGQ}w*32oVO0c+#1-%&HcZ$XUziATQe(`v4o2N#MrtWnW?YsyqJZRZ;X
zlXe|#4UwCQn`$`U%rtmvu)BTq3ro7PS&O!9wOVz`-Y4vqsBk$`=*M*ng(5k+64Gi$
zjTK8-<esDyl)b+$kmg&9MMN+wpT`5bW!2WVKk3+Hh@4kCBKOwE;rK*sP1P!i*=g<B
zPNO7(BPC)ivsP=o7-M!fW4vID9AEhLmJZL*7dMhZZ}BiO&))0mVZ2^vQrt?H?dN^n
zW6v_NHEb-{+FEe+`7~i?&cM%>D>JK|b7&siv|k;cCKVQLyT+<vO);IVSi12l)os&X
zIle2{x;rL;@3G6|BR6F(tY0?zP_m%W=7vsoPXBMS9Ae&-k<FqCTFh;td__-)=k3Y6
zY&3Ph?1cMvI=5?#<6bgP64)T@={7p`R;ijt+)9y2EKCOHd5YI_$}TIKVf>-!Whh&b
zLNnjZ8r#>Ojs5r0$K3X<BQJRU>3x7+5=lhJb;>sG*7#$~Yz16g`Mr<MKGB4&c3)5>
z_da#p&Jb4Fq?w+QDr?eTjd@@<O>{j&%CV!jo_#HjaL*E5Jxl4_#OPFu55gMm?q)A%
zc>6kyTSLEpQFdY2atVu;?ea;xik9zAmwa=tcvJBqR_x?d-MqK@Lh4Q&XF85wi&0O%
zF!9!msj3TdUaXaNFO#z1;b4rqYQm>QGNzq6i;h9QLo}5;bx%n9WVOTAb++Ldw1y|k
z*ZQor5)=$xe==cT#FX(5KP#R7kiWcr^5Jdlx4b%LN?zf6pCZR_)K2_%bL(zH{Vhh@
zDl<o$i(JwFHqKe%=-jNhHjUEY)^E$W=F;oQmFb)v9Xt2^xqY=O%&RRP@7jDJIcW2>
z38TbX7qH2=(68G1&?S?$O*{SRTC0P6_cs`KZApyXb2?`0#47r04ZNX-bRh+C$#dTC
z&>1_4@AcA`_ewwJ=q^e<d^vTa2cNyRiRLyM+HEzAehk@SK{5HQksT4GjSG&q&9*VV
zyFyxh`KLU=$bgspVR4hr&-uD$8e_-QryEI$;iIFnm?G?>mX*Cx5PqV;dnM;xX^MxP
z%&csovI$-lJG#cqPkJ!^Ow5Nfx416|ne21lRM&Q*i<vFKd8#k7yvFvk%=e$SjMWzX
z9B!?VF8pR}7tN<YQ>_5)Rh?EVlgr|EykW4fT;ecRpRda1rQ*Yiy*nSAF*vqjcgM0L
z6XYhPd0HwYY<%)4&rD~6T)3PHk2p>9iS5hh+w6{Um1?*voB2ZZUHE9%)dF`4_&gpd
zKTn$?KK-#`?V?UEu6b|H`tM6V6>7uVyq4!_4tIU*hQd^>@&i(fCW>DoZ!J=PAhPqq
zGPZf2-qYsqI+h>6y;H|A^Tqb0>!w)Hr4DZ2Af-)43l6>b9AO>qIot5;(eEWMZj;BC
zzB8X95P$iA>X+?)SJeFHrs<@}@c5qyeW9=-;CVv);$4rvtU4%=(#-WxyogouLY}Zk
z7N=Fft<fZmz3$lx^Q!3T3(BXe&n6~+4z<cCbG@|8ID4~*IXSL|L+81Iwvp|wS)bQk
zYI?`xfBumB#pBkWbL2b{j~G@q-Ztmp<$85__N>h;9KvVZ*F_&Um(AzZUigJAZ4&2_
zliZ52XU0C-E1bfV#znifeHoXsn5W>KReSiD3-%QGtcX!|crKw(ad4T-iiDbo&r?Eu
zb|lYqs=k)A$tc-E#>wy6ahtFTmRZ*fb~U9f_%ix?`7M_E%f(C&>ZKds-BR((*HmK<
z-FvO(a6p5cp~M%a=&{MCpV1||FLrssD_k^p^F#i!uh%8#ntpijTAcPK*TshFw4@z#
zjhED4jGVjWUGob0V|SyR3ZK`}C%zC+-DCO9!%NEkhQr>1Qr;IDx4&rTu8&J_NoDrg
z8!gSNn`S93y)VMz`=^|<`fnTM&MlekHb%bl=Jkx1vre);3FweLyV&XY=y|f_1DSKr
zTB!O2r|*AzT`-BO>&BIBaoi6N6ermgo{xJX=xV;{_OVy0##kYvYd-y@PNC<iXZ%-~
zwDP({vLvLi*M-e3dBs>>YZ`4tyQXIGWb<!^JQdqsT-dy$_P%t}B=?Gjqf@v}PgmH{
zI_KSb6PmkQT{@ngoXH*7RhALNQlL<fqEhinW}1=2)S3XA2WlpTixbvLKPWit`!3G^
zz~V9Lk)vBz*SIxDcfiEK(WDW3%#uH0!y(di{_+#bS_ehcuahdb?GzSt=|~Z-i##9i
z)An++!s!pIqK>q+Xle;n2`$XBo&Ij?^MbbmoW-eb^{WIeN^MWMaCO{p)2Uafyel_j
z?u^sSp~?mpmnPE7x`--dd~AJiV^8&)h0j{{B%ENF!+hkl*qft_42u^Oh>agL%J7+&
z`vlW9K~KjYRh$0(RAJNc-C4<d7dEa9(RfzQ^tvGAb;qZS!_0S0mmFEwF!!OI#G^%H
zmEW%0J9&Q4335~fr~1Lu;^P^%rp~lAsl24bp{3#D(zYqHcGAnLti0_L_8o0n!kuw=
z5r2i__9x+{jwwk;-V1V8hF)`GGhyCUTa~f%fX^iI+6CXaolQ5)7J7W))#?pLgtvxv
zrH@@3;(cA#b>~fm>zxK#M%RqpRtN|ww#PDfzPq<Ye#sZkp!|SQNpl2QxKsCrX~}1$
zO}#kk!PE6p(`!5um;}?ue5}jd9^q0Il{S|h)10E#Bz}sawkFJ{%eN`7`NY+%>Lo1J
zLRK16%yxuw^G-bGv2(Kt<JPAp7jDcwyCCay>fER-Rcl2$c5QubiA5cBH!Qi^OvN7D
z;T828KaqP$t-ri%bJ5Z>*6}G^ZI8{eS(dVzvyRb7wOw>cWn3_w3v*WW73<KHIv$Vf
zrSlY<gO|-RI#&_5_4>EKIoXT>ZZ(<i??ZhinCkH?ALp`}bC+kLu43lo<tOUfPVMO$
zoBp0TSw?8ygEPT0X)g@J#AjxFb@fx{;_y$}{=v!gFloMn6U*HxC-z?7_BK4|MNsaG
zq-`ND-xpZCFLpdJqj=8}Ip1q}mQhp0oxa>Nxo~F7`&j`hQml%MmYA%iy?EO4i#w`z
zEjlSTUTfonQztF_89uWcMz!oO5;U8)VQ*k<+|7N3i}`n@3AbFh8P%|;^`u`UM{e7j
zD82ctW@Pa$vBp*hpO0s<69vx)ZLwQ3f0nag6-hbgl7iI%^QA^nN3UQ1bTu5i!@omV
z+tyq${O<EFft*#!3@g<ll-L}mdKLthip*HOXv4h2Ii9|+UM5FM>&rOmmr3$iE#}j!
zvYSy+z!A6M!J_+zJG=NaF0DE6xw-L6nES-<X@-WM<(^#6ZM&TKb^7da+xCkD&hTC9
z7xmIsR=VKOzHeKOsZM`qk*$1e?;4gJ&BC3*0!QXmJ2UKy(^)>QgL{g?iu!#I(p9gB
zhP$$K6*9Sgf3GGqeMPdG-m+Ec*I%%;@QvO2D4S!&@dobqXT8n8XIUt(s$#y({F%N&
z&&_MfQS&tmxj!ZEAsLq~k-wkSAnlgyrZFY@BKtb2(>nS^ooyFgT<mrj?uz`xqEaby
zxK_+|702Ae9goiW=*J3=4ID-4sG>Dmt8!&aAcy7ZTK$>oV}0W%^9igknAxtbeXPWC
zl+?^KT)g|HpUw8-cve?oV*9cArAngZv~djB&IO0nuWV>|JZ_bd%z*;)xU2bN&)7w(
zRuy<Uv1AAe3*Tr^`K};A<8;$dE=QGoIIB5z+}AX*z5CvuSTCnPb<$Mtw;j4BvzXrN
z*7{xj%(2LF|H8nPXHV*}EEX-k<l-Kr^2xS1)b$?y@#^bK7+UFdW7te|;+HnR*xc1N
zSLAdFf7cwJ(`Eq$Q<mpm<iA=kQ+!_aj@8&Q-?d983P*jN|E>LXn5lUs<2C06EvFRk
zE_XD!C}~s}-BfB=Q>ePIE}r?e;hGq_DaYf5!Ynp#YP_L*>g^5RQn99*F8`v!#R7-?
z7uMVvKUzelk|z0l^66v3)e#|PnWSufrZ=n}PYikFwmZ!1dL3eNQ`N+;L2z2t3=WyB
zgq%Wy&V*x6{opqx_8JA+ZTv1G*R^YJNkw$jjH7Yu!a{asRa<3ESoUC+*BFsee2J5I
zPfixRYEYeD#T9nO-t*$#f`co!&z4fD`lNj=V&CP9AD?N;+aHO4v)12EeWpudh0&8!
zZjbG%M+Hr0k`7sWDbQ$~c+2V3tq!eaA{sma8=on^d}^^#kh3+e_SyX+?v=})rzfW!
z_I6Mzd9*BImS9Gc-hMN#YGJ)rU;k)XY=ykL(x;hv(L!GSyxDoDqIPv;HiZaox~Y-A
zsBYSsEgLxxYwK@VR{Z|r28VfNrRt_h%`4N}BxC1UDBPSjQ(gFcMPzzc-R&&>eXNdg
z`}Ycjg})JyYue=<%G{MvH{Ze}ep;%5#N68Km<Q3Lm>d?j&)Zn`?Z`vs7cz#aD!bP@
zh~!Vo(D0SB7`K+$`lQD5bP*}l)`Wxi-Z?UMeNjw}UhE+(HQ_lXVLpaEy6A>-y32N6
z`N&1PDuaA|rxe@z3+@nOtW>>ZcY;PIK8bmD(g)ACg5fVGO*qB9?!#OGwlrhrDYI{T
zdUchz-XD*xl%fe+yp8wJgbQj?;$vLjPCno*SemY8rM>#LNzjK&G=XB<9+w4H$~;&+
zYFQ<#rK41e!JLMr?yY03CS{w{OK$FLoi*Nt|6={PMWvB<B)s=B+EnDedf)hRos#m>
z)AmWeqj{(7FBhgySZBJSCh)@v)7p}_TRP3;vu2NiHbvBJ{pLSy?bHwav&3im`Jb^Z
zG}`E_Sy<xOrS(!sac7mJsN6c=D~oe3dwgl!*jOp3F@3hdhHdg?F&jKh7Ix)v(|zKZ
zez7A#d*}0<+i|f0#pStf?mVW`x210uaSW5Tb8pXb7;meUR&##E{!eRK#e}pqugUL_
z%#{v$=34a4l=;hTm-)suhM_X$p+)-lJ<`>TR`FgupWHIzjMx0uPwWb_c6rpqMYt#F
zF*VURml`g9<GqHxq-}+fd*d!{{@oLo#(dJ1rqymcG-iGSsVty&t<eU7+PTFM4~52E
z|9X?Lq-dk9()eTJuYR0P&P`>gQaUZ8n6gmpSxVZT&-yGPVH;;%Izql*CbDnh)`ThL
zwJh=bPKjnIc})sfP`T*ixsz6cHG98G&Aa~c{=3PuUzu(0G@i~?do*jN(`5N}2F8@2
zY_6T>BWo6{Z=964#b?UuO)kPu>)6&@#tPWaU7UI>C9Fi~z>2m5RT?Va!gZO0udvf?
zl(OPju_8S*P=iZfdwfU86Mi;ruJhYJ<p!iav5MwbV!hm;`O4sZ^FhJ=3MyVwS3JgT
z5EN{lZ5SoSav+TM1@n`va26KJ8oitJDuM5VSLTc}n&+FFR6ah>c8OWYSB@wyVX@cZ
z+Y&T(7hR5d%B>%g*2aF2{rqbCiSZi8zwMcQ(qLKgx~kNzw}KnSEZh|(a71@rGUral
zz{6}C6IObcM8{fxBR!uqw@O#_May~vn)|#?JJU_=WHWT7?Lv++b;RG*<<Eb_n0-F4
zO+`KPd+7K4_9KhA0+K@AGvwy&h$yaECE*{d{?5|iW69_l2Tfva?G$v|Szprd%epc7
z+&RLscD7e1*R$j(zA>iWp$UbHf~{2(>u;7|2_NY;RhN#pdS@jmdFpY<4!^|C>7EZP
zW(J7Jzn0%K=Hz}lfrLfI6=p(3ZWHB7utln*$odF{s=^MP4Jw{qtS9E{>vkSs-+e<#
z`t?1%h#Sn|uf91uA5Y4U{wlfsQq#OQp;@0B=}nH(HDz92Iq$CA4w>*#vtE}jw0$aZ
zur>GnJ0At!UGrPcVP{gmpMP3sR2ci|X?)@s?kAd?iZ(t7;>zcn^L^anrozkTRqIb?
z&a*C>b3iDwn$9O;kDCRJ!HKcAjz8THEUW5MtzO#6u{PVeeeul1J+HeAnrhygme*uV
zPD@<5_Y=ea0VP1%zsumVw9Qo<ZvWFzS%+AeGGyrfcG1G2(AKy(<|h&mR+3MHQmi5_
zik_m(^yrV3C8mTqn31bduKKBMaY873Wsl!(b><Rnx|izz8sNV7h)u-eCV~?9ORmI*
z#-VpQE}Z6sf)Iw*de?i;F^P*=Hfy_T9u<-J{%o_;;-v&%xw{7X6f6@i_Y8RLRc~SY
zMz~x6tJmCT?3O!>b_LiJBNV6_CU{n%Mg|^0440NlEynamU#x#Yc0^6?>-eR?kN#=Z
z)yYyT6aXi7`<AsY*ECgeJ4?++0NZ8;B6n5=tr_4>ui!&c>Rt|vMjz^|?EJIHImEd|
z5z*iiD6wTX9+8_r_!<7OuxuHt3<cM9{@K@+9I*oXP>!#2|Mo#8EW~@BQuvgL<~iy{
z`SQUV+oqQ6>&05notj!ZIc5d?EP$abr^{@i1xG&TmYGM8CV|nc)746dXjkrKuZjp%
z;kI5#_3~=7exV5U%VRA)<0jO+@|O0EwQ=A{HlLg4WGSR=B9Gh^U!KoGs{FFgVs>=S
zUo`1*Z{0FR`d&y>8nC>^@>;YUdlAoot}ja|nbCr{Ex0RT_PuJm99Clwa$PO<-RZfh
z2M#_<n4n76Z%MI~Q`!+wvOH89=gP(*DR>l|SSVrJyha|#*U^d3n}^YceKR#bG_*oC
zP4^8*PWmiB3o$zWf|q;k==hZJe-iHF(<VpTtsHQsxB7I6P+WHy6-a`po5g%GYv+eY
zIo%9GyaU&zF+J;EwUi^8x6<b{EGU^rGjvA+`(20>Y&f#6y*yq@0<7LJvIK?tR%cwe
z<+PtkY_M8rC_0hd39qQ@aeS_?2`{qk4m<h!7U(5T>p5b|`B1@iJjH11r_Hv-tpd(;
zni}O%5J41p92fROIMQsQtw!VYUY;kf&FXGMw7s5GQ{5F~kX_H#<fpZ_NsWL!!t8dG
z_9{XSo(7fHNltxlzUWvkG$J7!zIsl|o76RI1$D!C4|53ts^|EHInJYbqgvjkzvqQ7
zfyM)POP-gb^wA-5(pK-WN;HSyRN+Rw6IHRaTp~%fUu|J>RJ%mS!!XKcNQpp*<J#U<
zE}_8E1ea5Ki+l?T=id2se)5XwYM1XOdKQnmw+dqbq-u~7L||a*eKRFyDSTTtu}t7b
zUm>7vMetA7U-^e6<OBHv&F~dGhtFH19`e`+*Tg*bW18Pi-NY(1IGukI)4Ipwb`x2B
zjF|TTzRkK(y2c@7%J^5Eb4A{0Cf@c~l-|e&&wjCjw1_m9DY5~Bo6b2bru5PDNFzrD
zXFf0Au}6P+_V-}-+$|ep<=z(mlnTj$W_T1*en1!tpOD*N_>xXu=aHbSAICy`0vM*a
z%o+IudjhU>w?GfdCN<QdXxXs@`g%7{9M^HrLw|MdpwW3(G$kr>%0YtRZn}Z^TF@x-
z(TT56Zski!DHfU5;j)>P$Vek;MGNb%yc5xS;og)5QYC`cdzTa?-F3xw28oB%Klq7n
zgV@qq>A|Mr|9KZ1gP!j|(dJKS9u*-th3(MfJq8F%ko<@hkx55p`ME;h0pl=9fJFl$
zBCQ$q)30~-hC6u>zwVwmGz~R?j33q3y(4vE^l;TJr?59`wD&yNdq#FvC15E6b-G)y
z*<?5&O$V5J;9fb@gqX`j&aKai@<Pa*s!%YFRYgF3VMC{=>YFDyxn~uabcJ3UboLf+
z$(s%D{T$eTV)rK1I1%-YW?En*@58udy+&MOENw)PrngBc#*49!QX3Bf^w!C`z4yKz
z$Abas%Nw#&@aJ2w;6a7NyWg$}GzHlqs#h8H&-|lZC(Ut&$yU7H$5Kz0v*4lzVk+5<
zMD$9caUcz?vVOWFU?Aa#G91L&_Li`QiI{7Q<?JXr=r8C~nToo<WJR$M%@qUvS-#>u
zXsq9usF7J3<fBOJVY<P~tbov$t9#FO;6kZ!eWE9R$sO(%iJdpNXCT>tQPpQdARmT0
z;%vizVnC#fimM;o*JN_jhL<ZO+mQ-ykkuhZRU099CvZ~W8RpJvmXuMunjC`L*-2%8
zriO#~UU^L%!3Wqot#NFx<OFyoyGrddfM{K2toz}FGrJ6x;i8_Ee_x28scJrt<2Z5K
zBq*nqFz@#EWe57b*Bp3<AUa1g`_qj}4oM#sx|)boXEsr8)sDwV#1bVnF$CtkRNbnr
z6$z7Q1h9H>&x^6kFQF^x>p!Ln-?5PM#~CswiTbZ`_5F-wPhmNY_7^c)C6fWflx?uY
z$hPL-R%)f_QeW8H`iyI2)kIK{61KsxGX-4UcCQV0Y5t)QfH9-V)WSV&ZanFJk}i`n
z&r4UxqZIn0y(Sj0z`2N;BQdx@$V+i0r-65xl?Qn;p0l)<!P&ohj);||R$Hc6%q(C6
z5ZzP8c&P{ZF0mf`HA71u$aD2!XB{rDN3y*^0?wxy0sUPZ|91wb2N?%bqiZ58YH_bD
z`9Ef26(2~j-E)xUWT**88*|@Uj2#2|Xu%_ggRafPCuvoT^4=`$PrLfbVI}r2WA_+q
zpMrc9TW(o`WEYm!jo5Qc%3M~dKltBE><78fy`fk0sgR2015!B*<=lPoc0BvyQXa5Z
zJ%(f0pR|{&gFf#~$EYNTS0=BZF*w2bs0^)T5AwFh^|U6DB7cgC;OwLhI48aLZK@8P
zty|qD>@w6zmx+vM074fmeG#dx#065L(;t{5W0S{!Kqik$sj=PpXwzA);jL#gT&ILk
zt4=U!<T6He_g$;<BNgF{tt1DQo~Kjk99nBNUE=v#4W3UD9Hoa;iKSnCM0IpdTUOl$
zC}Nv<lY*xNwF5BLa_XbBzq2~guZLWfK__Usg6l=M$EB{HI9e$w@wKWS>8s#1@azf5
z2qyIc3ks!lL_+0c)cJG1biL^Y(qjo7n&##BxBXMZo(Bz;Ny^(VKOV*PBMoq#?*6)|
z*j&P9x_t|`u4NohsrumYFLNndoCfBgUStl;If&j0u!BL@+h&0TbESM;#7#4A<#9R2
zy<ePsS!IUsK?~A-**K4bzEz$0ya{#zk{k6K)+7PY?m)?}C2cH?H+<%c?w~+6P*)XV
z2KyNDJR&5jX>>=x1)j7RM4TqZqQ7lrOyL=IIMhNlIT#4XAOHSd5~oTrM9Dfk*~~@z
zE?IV(SQoOcsGC#cB(kT(OKN{!#~isXejMxfi?1_WM&EHgW3~#uVO~*WxpB;g6m&}x
zHLB~X;80ub!Zm4vU~M5O*Og|@|Fwum=HYp4K21|q_iG1QCk-?>Zk-IzT-X?x_DsFH
zIt5^@W3gsyGFfQH7_$O&)&`Tt>NI3Rar@U5#4n9iFnw77hRhiVQR^nDl9q*)GF1D<
z_Z`K2=uU-n{VmV1OES2(kgwdus{kPB^}LnCddr$bfZ|=slz59!(8N1e64B`Thp#Cp
zWV`b(uxrq4c_>Jb^PKi}9A@?ztHDH4??uL@Shu-*;PB@@48rWhLUx1{xa&*|AGyE|
zIyw1Tw#&Bg-dUsrelFC<9cTlS0Qo#c|HD?42?OXY!lWJmF%cqfjc{9q-S8TxC^M8j
zbN>*V^zFKxunASt3oY0^YI1%~9M8nOklF<WGt?XRzrl%U5P|i2(nE&8c(G&!7@9=c
z^;U(VTucfBw}bT52d_AYDdXK*@x{_Xm~+guj~gL@ln=)v#(l?tOt;N&<JjQ{43ven
zPiy8j?&(D!<WJ<@5~<XUX1viVM9P9D@h|g)x1Oxu08E2pUSK+Y=0ooH<fua`B9^{U
z*rBj^F2Oj7-QwY3WerK2NfMRGj=a!d_*Xp>oDJAeE2bUYLNl_M&=vwUckf=Z&~|O_
z+XJ5p{3jJJl$(<igPpi(#FlU9AmlV8pSPy*MKri$7Ov73-Tf%L(EmB8U`%Oc5jFQv
zytH#w<i4ZUJ<oCKX+UnEC=$~E{D^G7C9MZ9{SCSvMh1mpWGKr`^90E10^$m37L)2j
zx7++hMlaoMcrV>yj&J2D$}72@MfnB#xes$~rnvto=>5#L##6UQT8$bZe?$<}t*DgU
zzc|Vnbf$M|kteIROC{fUmii^mvY@Rspo%P={0B@h4w_0)IBvr<v*`P>CmXhdA%+X!
zdO<mdyK@fe+QW0~<VFHoH18{O&S-iquXs6QMT35gK~Uo*`0oeQXWBh(w<2W6%I3Hq
z=7agMIC4YJayQPUThY~55?o>-@Tt%i$h}bu&?8AD?luD?Pmm>5IKNu7AqL`hDUB;V
zV>>B#<D|in4Kvpbl>QsuxYK3sq?uI)OGYmvtFkbDsb186>Q7=rdJr9KKX7%|mI|l_
z&Po}P`h3-FCUu5#XXA;g%%b*&eu^U#9!VFa26kB93{W75NV5>;jc7{hK~FqzB^GV0
z3F())plo;nn9j6~7?r+BGKCol04F4hmenM#sIjT$Vx-MWTPv`qZnvf?)ZLp3r*0AB
zR~JLKt@)VFPv-3(u!4by%daAuyd)vy>B#>^q8&;PzTYsi7z0M@rqP)0RK8Ak(Q6V?
z_R_ip88tB1Cj!-;wXWmeNBUTUGi7~;xg|cEB=+Fi?H(F}@Q@-8g(=PDI@B4XI2UO7
zEtRX`XfCMdj8Qi@oL94PJGT@3=zB4>O~+5W?Sz#?&odbwcW_i1k5>BQ(3D02pE>8k
zB()5%n-DU=hwlER&GwP7Dly5>TSGj`$mON%;U(Hq342oigRSzW25!A}e+efE@=<DI
zJ0cyh@w_}mlJ^>-gC#u2GArf$%QO_-g%ldv_w`++$lrf<O?oA+BFFDsfUrj~<uQu`
z{zKq?hF^ZpODWEf71h$4Y8>=ckOIkCHRmkyN4768B>*)lP+|2+x@exus^0fe8(o>j
z9mDjhSK1gKs7{W;a#;m^<+5T-Ls*?yRh*BvKCq@ZVY9ZcbI)yC10aGEziQl;F7BM<
zRCY_%q2!W_kM|cSrb-T1hnb?I=JhO_$-AS;647ksc<rk?{O0UIY+(+}#p?LUuF5#G
z!I52b+^Ez4M?3A?sRMQeM8ls_P|Da)TiZy6s@!jS41%vcaAL)tP&sx#gSW~h@|BQv
znSjh~iW44&4RVd0qkdIz&I->yc%Qkya2s<7TS0lnx_v%}fx(9au5)21na_|Ff+JP1
zSYLqw!WK0W9`9k5hg#Ba))BGXcy0=i(!CAu_Z{qtq)L&lWE1tnsi9z%B)K}DjlZoH
zs25z&OA8{{v(XDon!xs_fMuJ>0~x}~eQcZtYkod<)Zy4mk7&DQ)Ri%+$iJ2&%;=Q_
z|IFNT8jP<fqqnYiP=w_ld{L?u<s0=LZOv`3mAr`bvb<%FMP+p5wsd!Z{aTA<dINyh
zj76x!u+qhUz?y0d7QQU}f#K#A&Y%f>{aLu+=?fL|1*_%jiNf?olne+B;2MOvjWfWh
z5934HZ<giBB603#HBhz5-Eg6^bG@72$j;?}3dm&r%XcS21(};hC1Wyn5>VcYj`lB1
z@)3SRDVT>utIoGb%ZsVTcAbwGl)2}oLLZ-!nNiqsLThepoP^{SNEsgYx=*L3RJBFi
z>&wWi1lic#3Xr_m=l0Kte79NwX%tOPx6UOPJBi**mm`5G0*o#lN2g)JaL>T6U4&u~
zCI`LL`z_FXij6Dp9K|8;4ZtdmGSA4UNs@{`cN(yI7K^s>nnltVq6Ht}eWP5smy5Jy
zx~~8(Ft);!oMi%giKkno7!i)U!i~^qKS8a8CFKqc$t?g_h8t(3NqHamdG?iyFI}*E
z(N7||PyCY~8-W8j|75MTbbjPaiAJ+V3m(vmtROB+*1R6v;f&_a;=4qjxHT68-s~<Z
z#+E+J38?5!`tymu!r>>#M65-JiQVvlaVXQ`V8n0=={J9_MnpV|@e%to8`Wpl^z(HU
zon*K78l3GKSx8|!!>HtS8#VDZO`x|`pw<y<tn?jaxmKh?^6J2Vf1!WAx~-Gi8$|Rt
zflai+RqfdB&MzE85sk+#nvuB`QSS_Ad$*49NYF)9_PYlL9DC1x{#3und7{W?5n;{~
zu8om)Clpt8-40ugA6hKetv?6(?H&Ds$ju6WzCAc7#)SK5*9dP_TUe}nYhg&;kMSO5
zS=3&?sCXzCxBr!f8E=NsK-)VdqT3C+y{U4GXxh<fm^?7Do6%vNpEj=59Mx_CVP<W;
z|6m0UA>i-#`&xF>KtVV?jPeRPmS%6x25s8@-0Z^#X5guna3)&=xb^#@#|T<+1XLqS
zP`GOYT@iDv&HG`yd_u`i3(pwiu#Q!Lhn6-FRFQfvpW9AGVIw6uQODN0mYGC+SQ;e&
zHs%WfUI}GsSqMXu(R2Lz9V=k1a{AN3K|?0=FL2}A!B;51pw0^5#Ss6ac+Gcw8q<?n
z1W0Jb1{9cF9K~>}J)iZX9E+peE8;;qm$Yw<-BNnl+CkS@d)g?_#(rO8N!4I(CP4$E
zCV*L{(`vjGjvhJc?99AXz&I>A59)t=QJFmM4s1bkhXqT`Y@ruHZt3gKQn@nL0TZYT
znKW(bsMyLLir;0;^!xrT9X6dq#zt>e5M-?{R|0lw1xiVQz+%N&EhnQw72btW+w&?N
z9?wbnM*F?CT{&Yd{eHoD<P{xbO}otRSmxT~=LH=Jl4f;1WFl}x`}V!Oc4EhY&Z?%-
z#8ZwiOy{iBZefgvouU$<yx+ipu-0qj7#F2m%m{#qRM*R#6$jH!sA2=fQgFVK>3AFy
z9a^3HlIDhwLP6Q|oSJX9zzF`)pM?+q8oUsV!VTm-Yzr9T?uJYMwky)U%LSUPZ`eYL
z4<(q;p46s<A{tQ;l0lJVJI(^nI<kh(PW@1ML8v@r#Ti_XP(sd;VY-1)f9?2S(>d4r
z;Iv|0yHAK}fkL?KxwJN{Wk$E=^KhbtY*e5j$)_&?^*pLGIgD=gUN?rh#dPb{_vRfP
zMA2jH(cpzbq{&T(Q5Ch3_PFh@r8m&9ehbk!1#|K!P`mEXX9AVL6Pc(S>E?F6oni8S
zf&(+{T>PiqabN7YdJhLn0j@*p?IO1VHUY0#`GEqxEU^=3TeeF{H*rcyWr=o#OqCPo
z%kXoywo`UPFUjR7ALh^G$tz|O<>Sb<3a1{yzzb%ADr|rvFmEv>|9&F*>>2UQcVYul
zIrBPL+Dp$mc!=Ak`Zh$OZv7xvs|R!^-dvyD_cwfRAc8y|+a~q^UC{fbbP}78%gI<r
zjbZSs;aghhb`dpcy6yE^xZ@-9^QNUTv?33+=;rSK8xrqkd&x5+V!PuWCcrP(e`|P&
z>pm{1GXH+nTo(G!Q=C}#wN{GI2!WKRcmQ2kjv0GD>2$DOJzMD3iHES+SJT-I(8Fxp
zEo-cf$`*M8+@0fr&4jG+RYDFxZF8LjSRL9HGF-tgP58#}7;iC?)72Tq6lP{hiJt#n
z_NDLg^ya^d%?{&R3VOjq2A=?a3uP9xswNFU<c8ZvY|hifntKSz>F+N^zzQ;n{2-B*
z-d9v$fr<+;1efE_ywuWsY?v}GgkcJj;Ea_EqB~xGa`b<KTgrSv%)TEmImWusWJeXT
z%6II!FgrrCa`sxy&Rs)=3-H2T%^5GReX=d#y7M<oC7(Y^Hh=={Vv$W%wAj?Pd{5t*
zG5@xyNt0s+rFF?l9?WcSz{D|B>)OYMiusFQZ?OSEc_v{Hfe6qEJM#pUyT2g=8-i*t
z2wxHD!_vLI+UpdA;9tQSq)}d3I~Hm8yT$aC>4-gwt`m9I8nC4^l04*fA{p6}Kut7U
zne-U#1D}vc(e&b!oUKy6JMdGKKe;)za{o$c2UpKx6RmLL$q7ZnGx?W9WLRwrceX{h
z7ef&2#Q4l5C_SUgM40eLr;U#@5>)l(r-yGJT-B-xJx^Hx6KFjeJ`|9<BSvj$071z_
zTZig5NcEg<s7Y(&RNc<Fp^b>o2Ox_Fwd0)_kiMbQx}E~>eUciDg>bb5PMdI^7|1O%
z?vV8zk)MP6{Iz?YJuGe7ZP46`YpmWrTn?F;=MmnyEZD!}c!O+-;D9zc?i@oU<{e;P
zJ~p_>czTzRP0mjMom$WM?+wfxZb`YDP%-BF?u{EOEZfcGGV@{rpDHFZu)mY_1ih1T
zUh#`qar!ha3sVF60VH{UiNB-5M4GS=$J+(@<53|9m(~mW<Bc;AqtAqQshm(l<2eNE
z&4yHqH;|8L7`$FAabbAG`0<3o(J5p@laWiT+ZnN^t0Yo#=au+V<rX@c)1scnWaz+B
zqK}d+z?Oc_IK+=j<#n9E)lHHAf)LJjb<!7}lp7bY5#@VoUT*Y20t2S5dNYN5+b}_@
zFi@%X&O-M9B7B|O%D8oVQX}2&kmdF^vk8A=RMiVl&YbkX6U2t6b9l`EJd5GMvjX`}
zD%<^Bt_Wy4OyOdnTW;TRXuZO%5DN<aU=jFFAN}vVlJx-;6cgCnC|oaPKExXW#zO-!
zME(Y`OmqK5%I5PBbXXqH1CWltSWReH%9+++8~6+FK2r{2{AT>T{nS&-BreLisVsGC
zh*V-~k9c=hyZFEnd9CaA&X{@E@r8uTDlT_#jn?*cX!?tA=EvweX7~q6tpS9GM4<n+
z13}7ZSmEBVLWafoQY;eaa%s#h7?;XJGW%#i%nbb${rvwkQYM$BAS@#<m&$K*uYCWK
zK!<Oxgbon8qgOC?BBf1NTgU}SC8BWJ$6fgi95_Gpl}@)eTCvl!Tnv$D>(?suxFd@b
zjR4|uIeZ7dUbSr$N&Jl<cO|-yPPEipvFOj&L|;KLV2$iYuAH~#NwWXo<tegYL&=De
zUGkUmp+M<$L+i8TN_rZsVbyn=F-%~bQl#s2-tWdk)}0inL_DwJ-8#}O*kMDOS>+8p
zP<CXg8Ir=Y9VTY_TaxeqJK^?Kdt0;t@U3j4LP5l=k>SjynDe1Hj02TYj$F-igzlz<
zsAnr}fc^_zY{_ySAQuX`J>2Pcf@0S~N8di{?inT4)Xby1$l2!2iAw(;Re}%W0U6<u
z`>w6riZD+3HpX*ZKgzrge!?QdLq9<*c?&7cAZ?KV?(<q()<pI$GM}D`k)x7?3kk@O
zYgb|nIVnvR-`*3g+`KcUE=QlGonj%8qS+7U11W4&3r<wUxeU0ZwA`X%7QO?_RXe2X
z7jFPmpdL4|v5`KL>_rQaf-EYSPr1IUcvh8@by7j$&_2}>R10J0!xvDrUh=9I>N}GC
zpamn&C~rdWUJ5vbp$gZ^x(r-ym0jFwB1)@Wn$9|zD)qr`!-;No5gGZbiMlVt(R()c
z$8$l^z4{GpN~E0+s@QzpI;QY^Y<3b2`jflkDiyMT`n_9&KVgo1*$xke-KXs($VMk?
z?|kg@nm-LF??NHEP?vcJiUZHV8VdsraIj6H%ZtdnX66@$E97X5PM<1vu5wi3dE~(I
zkH0dPLNd5-EVC2}HRl99C8l@ebu-;dPCmrl+2!a4FF%lOZ~W#O+!pU@z|Hvmrh62m
z#<;1I{G(6i%N@tUU7qM|w*J^%4O6Ec<Gj#hz>n^7I?r(Ja@hF%YZTaGoS>BB(x6p$
z7Mu}o{5ItIX8{EJnAb^VVHjdmV|T<WHe~|Swtj3(1SGxbK)&3mn9^V2)BfA9BkK11
z|Hpr#^+-EJ^D{Kv33Z2mZ2IkR_5#fgFFU{H?r^KZhEHU2PKW`4xtE1!AVLO+_E2r?
zXjJZ~<oyZTo)24|kz62zSqwa0$QHJ{HP1b5hZFU4Tq*iJx3^dcK1V{2b=^y*({U}4
zdz&@VG%Ku@A}99sY9rA~H}mH;UQ;ksGuqviRafc!C2+*%n8QnTbpTBM_~0mO90#;7
zek_FmgAbqd#%Q)9zyBNH1!wyR*B0eyjM31Ov?nYKk3;D&60-LpP3pOLF2%7mI7InO
z1R-NJD33BRxPunq#Y;s6sl{AnB{+_PuMq|&biiO*>{wz6zdc=mxqI18ScDWA6{5FG
z&FsQ#b)C{Nh}-AS@MMf5FY;p*0;d8YzE<4J9mg_k?$slLnZq0b-uZ2*)VZ;%A8mln
z*Jb2=ueSBJUz;SRDD|4iN>PL~S^7l#1^HF{V8M%q5oU@9ZSeuMStvN%>&7M%7>2M$
zu)n8ed%X}W8u4;?!O=;TON{FjwQJJlum5Z111P{!T&-OX-Wj}lBKoqFR$e}sPc22c
z7N8Tl++2UIE0s{#_)5=tQL0j@kXck|m61i=s(-3l;d>2ET;X_;d%k)PN7XzOZQeS>
z-bOvO6P!<%dUVVxx;u-SW5>s<TZZc1PeAV-bA4E0X2<ziQLTbc^@sm@kiTlC<DI)a
zdG+1=S&O`rc{BQzZm>G@G`unBew#V41PAr9tLTN~eT1`F*Yq!U@yLwk5cBgQT*!Vl
zC@N}vj=z0<dfRJbIEPjPq=<qDx(bMDv2x>`pgO45ysuS{{P{Ha$6qqQ*~?-4BnX^F
z+KeaR(IHf=m;oGwkQtqCJpc4^%$Z#4&Q(xDvTjEoBVq7&&k9GZv9*LkQ;H8QAuZR;
z>7VzJDT}r_E2R*=R<kAqp^m#-f-qMUrd``-X1j963<ik>rAwAsD44IUUTLuRH9Tia
z>s3HHg5yhp5VHU@DuCAhA)<r7MRerB-Xd)TCn42yB|V*0TNZ7bHxZxN&V%&P@SNq0
zIl@Xs-IB}dxrbQL#1nb~dj0H@>*&L^MK=e?CVF%ZCcN(yA;EjY3>_zT48#9NNnSN%
z+_2H(VwT_<OMB3WOrsW|civ<*TZAn4jl^ua{<cXoWCb9+)E(|P&bNB9XW1ou06Fis
z$}39ythYBQDM>669F$x2H%~pLS>JaawSd$KV}|SL{)4kpG_PxAt+LT&!50DB6zbBx
zaD)N0V^~<dl-V3G)taA=2Qh&+3|kVi$|PbF=7Tq9soROA*AqS<2jzY|VoV@Z2U6BX
zzpq*pnUzRIR|I4u@ASu^SH+#SPK|&b--LY=JG7$so)X6#eqz?>dH`Nab*^{sK&XMD
z{gO=)-mFp$+>;k5klx@PP05)EqNkq-nKtq^I%T441}4)1^*ag<1cEI6N)!cbK{!HV
zV>z4r5&*U{C8BvTOO*M!*ttWDzt?6y-(t1h!Ie~;U8C02c)U>#sT!yF^9<Yywozl_
zZ!`!+qtO$`Ey5x*r}Us2Bj(>+Rd>>_(Sg(@%>*Ah-L2M{*s8&vjRB=~_+?;vfxY>u
zcnu*!O1Hn+ZPpkoTR{#?ah?TGK{Cj%A|YVVIE&o7QSZhtJ%Pt_)oQjq$B^L=iK!8h
zpcLTkHXg=3V5F5MO&>*bo3#;Ppu;*G6*mP)L=e~`gf;p!)vo|j1ICt>&zBd+CeY0{
za{=>8@JFoSg-lRA&(xOviOsvwNm$ZA_^qzSlh{jHD(v=p^V}c+BhzH_plf2WiZ%y1
zj*cjmSE;pV41^M7gs|8*HA*C;^X)d@_Y4_bC<-s9;`;I8+Ys4}L*sT>rrrB?k<#A`
z&aG#S0Bxq#Fmg^HGi|9?uYK>Ui@(5LhLf=c*VSc!>xdB?cmja}O{cNj-}0j$KY0<?
zih1NzPV0W*oJdqh`%lH)|Nbqa`{P@gM+`1;yJ6G_AP9?K7On{q{{w)$7_k)2ao?TE
ztI?QP))xf!aa@8?WYIP6BZUCI7&=Q~l{e&HT9Cy-;U~j)vinOKFBsS^ehP|@&7Y%|
zQ{wvEyMx#6zxI$n%SiZ2y|>~m$l8e*C(}gkW*Vw@SH7(#lKztIfR68(x1KB&@p~d2
zrIx>o<sC5QMkw_m&+7$~mW*~#hDtW>?N$6|Q=9&c@1~g5oTZj<)#eE`hCS9}!4&pj
z-zLtWuzBfs4IAnJM*T>+b<o+QYF=4qKups`GJ$RW21Kh|h4^iQBs-#NFOX?rrz{9u
zB*v*_&jUpGm->nh;5RrW@P;3Z$};VawG)1q3~zThq=?G)5!eq!Hd=6k8k?3?f^lCY
zcqI(MV4VvE-wfXPI=#Ua<y9j4D%A|mU*mnFBM;86!}hC73WsEVco?q}MnqDubTciL
zZ$f3^seD)cjPkl<i^7dM&(^>EP!p^XEGMvu`k%f)%2Uk8OOv-mGx5@<rWleiN<OO!
znfk7!(6y3_tgY_V=HX9~HP~e8FM8E(+nZ-hWv(GF0RQ;8kDx^KuqixD=(ZKz`I5w&
zJWP2{O|5wkd&Evh!y8bSxjkZf?U4uA=bG^sI69AeT7!Wdrjx6q9Bo(&Gm+SfjMgAd
z3U2~MsDm8qO+60cKts~L5r-&a!tv%Z_2?Uw{BFx-Fa6foU}R68){~^E$1~%{D^uUF
z)<*%vuhP0M4t|dPnXY?Fxn%3T;&?$UV%T2IT+UY^WceX2Ko+}H33!;k3%wVx8$l`2
z>wK$lsE?HWmM~vE?85vM153CeSerWy7d^vHE{4F&wT2h4oReO69$Cy)+)w?FcF8fr
zno^^WLsoT(W@{EQ2tdZNxwG=*y?WUH#UVO#iocAiY(SJ8m1?sS>^k7)=F_|qRnvq?
zO3L28Zt(*PDQ5-oyy3F=Cb%7;yYFTl*y<jnUaA-CKx>(wsh!Cr5AlY_Q%Q>`C1BIN
z3a`C|yOX|jLHI|GTPj<_h38}de(;KWz|uIdz<ru+DTkjT^_>D}@#N3t&&I&$?ycf&
zrY!#^`58|UcThA<i!QJjri40S==^+&0JdriZIaIG)Ae93ha6ihpQr>gOr<g^0rfmv
z3gO`=>g;1R65oO!5z4L%rerboEFtuHvSEm>+<3B$wHTbuio4pD)wk0;Mb=>@N2+VE
zy}Lfpoz%7o$OC_k#%Y&K<Y_V*GTyW`>xGkD-_8KDO68<y7dHE7MAlb^y@XapIS36y
zs88Akq2@R4ZycR2AHoTV%2T!>D?}gsMo7VDQRu-^{oRN0^@CQ-Hs!Dj!emFK?6SK_
zH<y_}_gN@vvOe$YXvhB+@%L{}4E}WxpqWE=ISXJDXl*FD*0fv%Z+=%E&7aHE7gL8E
zxC<j@SUIVE({J9qw|~`nUK}K@0${u&a2mpCr-iu*XlZ{1)G!wqP?Dq!&z6ar=5Z|G
zN-rH@7vVxls6T31SY6cs8PKtPBPk3$%^~=V@ACFLKke1ZkZy{}qHFP4B3pm>o8`xH
z3-tm_1A#nDi_|trS%a{0uCR3e7mA_qSE3;^A32)fm6$I0H0=5y#1$DDFWaW}BE<4*
z{{e+Kum_H01>WYJt{{F9j}_=XX>BGoQyq_oXi1>`^50s32F=Hyrb;=0tV>uBbmLIy
z5w;yZg>G9+)kxedA+M2PKuUy)m$*|`mks~4x3J?9^{L@h3ELO*%UWc^G6;LLi?s97
zlW1B7dWvzzcJYi?%i{9&UDAXsvYQY`+0wLun8E#B5L|HDdNi#avOiTj?5zU5I5<C<
zG{9AmkW3P)p3GWiBk<UcAN>N7NA?zmpLn7%ezLoLVQK!G^0@mZA+0J-v?Sa-0?yn4
zyTMm3sq6k59`R^UvEb$zrBF@h3@YAGSZx3r_k|`@3-<dQZ8vGDtN3F>+#pFg(n(L5
zJk_6~as2f>v%Xa<`$D|Ht%HaIMfT6oRSovn^ay#Q_3t#&&^r1Mwi;Npn%|94!&sT*
z^??GGvFCI*y!R|z{^(ib?h0n}2-lH=|Da*Bjku;b?i0i_ebcXJ=sj|(!^(bWzF}Ip
zJymt&M)~;M)D)QDtIw;~jfR^PqI)}(18My<A+KZlil?OB=dyAg=hbzx*`9Tt5AbUO
zKrG=dSNx_$y@tET2onhKLHia|4+Z@HqO;BIv+$jq^DQTuCCE#>I7{H3BXP|lgU*E_
zR9=!2KPWffOC#B92Q8EK`nB2IvWBtuo1#8DA29HB<ao9HS+k|sG^oLUI#hAUPq!zx
zk)Vo7BX}ALfFaYtzZ*Ek1`sGzu+Ros@00`f{JC4Z;D<&sz0Y|y#>`Xc1qgldhLBU@
z6yWmW=spNPOKXJRX1f5F4&m5DG)t`vlUhH2Oa;bDyaqI*<k<Q1{7ID&mJ9)xQ&^a{
zn(HjpfGdxx@n#rOF6iC6>5hB8zrx~!g1(IS#|lNRoB<R4>e+ZQnZ}<o$*H{&;g?b9
zP!h6xP6C8QZ_?A{UmcWP%K*@MV*r~ok;k~q!u2t4Ei5uFZ?pDMIV#(>@E@l*1pJu0
zav6NY40wctEi77=E@FZHeCl>nL>@IfA}ruoL1+1=-KJYZ42bS$0q!;M1H{==6tR(I
zR{Flo*yjVhC7sdldzQSfe3>)jV@n;lq^JkIZu@-i)4Z4!8r9XTL1j{=4&Dmd^6Nmr
z5o(!cQHGzhdTbTo!jyRrGH&Cl4iCwy_Yg(}ZTSEv#Z7rqL~Usb<S|J>2QspBDesA5
zHvhY(F+BHT{#>h?B}4G)>!jze(q0<5IUN6DWdOyqKqtnBhi7I?#ANr<q^c|7Dl8!g
zC88Xf=f_#3wc=NQjJ^}QdG0biXAdyU9F@YhZIr=f>c_!B9Cu5@qh4`KHsrCES+*8s
zh&)TC54dtn0J&(x@z`w-=vcX*r8!H1s+1z+@KM6x$cH8rd5co8fiu-UsslYJ#FQ{k
zGn4&_fQ2@I4N9*A@qx(OejX(6baxqk+@YET#(G)}OpNm7iipDoS+QM${lgh-Q2iPg
zI?@(huO`T4xr@1LXM^DWeb0O-!eLzV>`VhO_sDbplSw%d0QZoa6^U`M$W-79Ge&m(
zkjA7vVNtAwJkuW3lGEaJryZ<^Hy#_o5!CgZopt=5isYMYd|*L1I?5IeylPqLH)*z4
z{U0^Cdo`6W>K5lfFGG8idE)U&_D6li0|w3NBQF2~&f#Y^8F;>w+`;Jjv-CfGll^EL
zN|V(O;6MLAaEO5B+-ssaJ|a1wa0NQ}A%whbLrzCd{ZfxNFcGwo4a4SPIZKedDtOh}
z7Z&?DW8;;es`IH$<q3nim(DVDS|ZkQbNda<LWH1O=G&1yFPoumEx%I3(uOFzw??Zc
zluw`Og+~c2hk~7~pjfep>tQ9p<%wwW6vfrQF;zhF|1gjn=*bkAmBjzv$_;AG3mM$&
zfQ{6mz<H%2a(q7(W<-Qm$$wh)>7=vhld0#^|DnkbrouG3Lhp{clI3z@C7G)VkHYrG
z8JVH}IKH*>!J{{S+v5ujD-jxmSw?;JoMsk3GQ1n-c|X`0jhcK+qIUlU=gwl%vAgt{
zf>rF5J0o1nb%#9q9$52(SbG;b3M#VzWWb?%)54~?{>b_ieKGuPI5;V_-hwl$U1RWF
zfG%Q*XA&{5JgnUy$=$ci4(<AypmY{RVzL&CmrdYdYRo0=wxJ1{Z#xu>Ah|bV;a4c>
z97WJVzz~gt=b-Mv{tP%Nb_YXltjYY(Q}aEP&h7=Wh6YZy!MtsDcEHR$&yhv(Rqp4m
zg!BBE)_*Qz(;!`SMT^wd94Aio7p&2WedLehJ*SG8Vv^p9B7$xtGm`RM0mcLgHj-hg
zkM>^9$E{w>Ky{wb6dg`1dIKTw&$n+x+;0us*2N{$R~M*;B34=VC6U1^iixO|I*2>i
z8vs6t)0<3u&Oe$JZ^BD@j+krJOB>kWvC4A=W=tVE((d6Dd>|hzJ$e<|4d`ulOq-B)
zmpR{?g{iAU;S6TlM(pYt^k@Vuzqjvto2WpeK*td<2M^1PX;y0PlXW@lyTzh^I-<j$
ze`id0{6k4;MM&JhL;p2k*<#r%C97ZzvTqTJ2P!X;osM}$qVfvb`M}$})t3hB=y)<q
zNKE8wv%G&Q;pVM~MqI(3mKA<@D~us|WZTO5A&}U9!+$i0#qwF<-_2gG)%BO<o(k}5
za0(EWYB=e4UjOLp9YGT~(0G1%XoDyhi9S&=AnV9!6KV`>TxXGD)!O@#N0{n;4?pm@
zdc`_1Hu)aMJ6W)SlP;-tm;QjO!P;|zZ1^NjlV>C*@PAKcU_zGp1rQrk6{!s#J}5Pt
zRew}5J!?u%6Q6yEu>f4m?*qKkFMgulU;e(L$8EVj#j~}ro$jx)8wq1CRNlXfM)t1a
zVhu|lz-E=UPi@|V(H`h;XyKB8yID1%#uP#fA9pXG?%$g_Zx7)7s`<@&mjni3zl3`k
z>J4Zm2Gdi1q5wU{%Hn#`F%+2f)@K65F7SMt+wt)eT~k7VKjK{VXq??#D)x6W%E@#%
z_Lw1T8J-F71F>Fx;`ABix}bgB1H=rlgEd#?t4y~w3bik`a#b}O=DBgNE=wlrWJvbJ
z#j|3Q{>`cCh*Ogaz`PnzTQ~^=4q&=bhxKoI^ty~-ntCEScN)6m73A*j$o#=u5J6cl
zN{-Rn6oi$ZM7f@TEe$yTJcY>AQN5sfsV}gMCF_uALZaGti0Tk!Ubp$u_Wz84z^3Li
zQr=jI)83?#D~P+^AJoDBb$k2%>)r0yoKZ$V^+rYhM+Uos?G=V=v0p6rtV1AytZxoN
zMm?7^XAoIg!CHZnQ&{aHPnp@PrQ7mL+c{TE|2lIYXeGyCfXEFLC6SQ1jPT?$ywfYR
zX@~bQa*WY@*!9ScoVds8XHv@7k0Pr1KWq7gb&s&m;<8mN2pw2f|4)RC`le<5mi?V@
zP{mIin3BFF#8F`<;#xXTpB(+eY3G$pjbP6{;pyOkWRYNDuH!zwAjcc@SUpkpClr%D
z4ufwx7eWlH8vgCW@Y}vwG}7)2;Sjnj&OR6q5q<?`0izOb`I-SbR(`MqH4dp8VqMk0
z10XV3wW4;mKik(Lv0Us_GNVl~_+f>5%;BaSz^OJof{;18Xd?%6K_dkta-zxLZUIp4
zjH;5Ke}e9TO~j6DIbR?6vVfk_*+Ba4eQX^|7JqrXUUcgt-)wQW7x@|%#t1<1CrD_C
zBS0S!jF~n6E8A3XVG{R{MKkrU&zE@irlk`q7q<^5br0%IyM8qHd-eG+!#LSCH~8A7
zjgJszn5M%sBnOQ&*KZTO7mE-{^j{E<nzOMmRa<;&{%?+B4p{rtu0}B7&gkJ!nTuTt
znU}wD>Me%o@IatUtK!)PnU9s)2ZD1l)9LLHTR>mp9#P(xIrB4wke(e;0CqSd;J-?u
z4aME!BZ>XK)1s7jyBi!JXO)5mMJ!)3ZYLoN5p;AEfT2H(-qSTIKOV)hit|nyk|&;&
zp(o7@ygrrRs~F%5cM1+sy<fBs90@>RkA>yLVNE<Otidufx9Dm!Yh@;$54{<ZqUxi|
zhg;kBtS+s6k@dB?z554L<X6pg_$elQP<%WGi}Me4iVdKOB)7Zq2NNRg*b|*H{0a}4
zdTM@dX)f*slmLBDlslqNdCaTTM{d8?=oQ;A<@%<k(-UovF{}TSgsi5|3Bp8*tV*O`
z(?~Kq2ZF1s(fsLxoH+q}w-Iq4+UX+Rc!osLS9;W3%tm<!ogdwE>viS3O~|ASI{Vz!
zH_=8ERl{*NTgcnbFE@G&9(#zjy4ta3{)wq2!UpJBZ?~xQ^q*dHalP?XE!1zp&g&rX
zVf<xorr-xUoH9zi2}mD>R&)Nk#Y6g`LoYJ`Olwe$G5qtLv0G-M?$+WS0Mb<8-e?_d
z!zB`3Lw!WK5+nmX?KJ8U8}K$=D6ah>dU*F>e3tw&SvMJ7Jsau^^*O6FG9AJFM8uN6
z6}@MyP5bk0m%$F;X}+gf3pP$c37Q$4G%r!~kZF-!y*{o(PwFG$Jo)@9#bP~;B>`}H
zOTP`SUh*s}C%#4ek^E&U{ptp>R+X6tw5??^5mG}u=mjgMK!?F!EB#!HZnp|b`)c#4
z(s+&4Q%pqn7A*irvIPBgX()-zebsh>pr8zkMLFyD;yS*J8k5j>ZT!4}IDz8^a#?$|
z-z0TZIp}C|<5#|i*o{J3LrN;maY|8U-y`0O$P!vI$vyUi6(j%vfGOWiqjbw>ztFfr
zMhfr4lI!h>)7i^IHuk0ZdWC}7y+K_XTkb$zqkpB0yfB%~2S~QXZ+^uq9q$(vv`AY2
zeR}nYEQM6jUtV7Mt~Hr10>PM$h{aQ6a<AK&K9m!aNNuSAl}$k_m{e_lqxQG1lhr>Y
zV?3dp_826-jOC;Gs3YEk`FK2{qk3A=)_(ERe~B;><u^zO0sFR_@-`F~Dy+$=3M?__
z;XU|5iOms08W6P0$Y`$l+LU5_qmq%c3_93};XUu|CAPCva8X@|H5T}pY`T4x&gHha
zKxwehBO^bKRoB?QC{y4p9*AJvKX_r%)U9+n;$@$j4kBzE;+ia&*%ZByc9hd5D=esl
z7O+g5p$^8`)j_=-5N*Ifr^k0-h;Z!IIzkFi;f#(r-1@2Y+Ir5=I$g7Acd6qGZAp4C
zNcRn3AM{<fD3IH+WDS$RlW>{VWH{qNL(xNp*i;?F&Vnj!JVAnbQj>w0|IVWCz3+||
zFh$0$U8{*pOT<y4gTRT-Bq)JjBzuPZQ+0I6U=@K<HG|CK|Hjle2$`R`!t3CXGR#=}
z4HecZRm>X3W(Ju(7G*1baP)>BsYb^D9QBzCp{0{CopE`X=uz;CJa*^R2)`^QG#-2J
z#>CpuXYg3nHMVmO4^3)1Yf25LbVy}T=lOp56KRqY-HG3BX-8bwvy_Kg5vw-UH>zvo
zyG^w}=`99K3&^2>s-0sn6+GbQQY%)*M|qvs;;32J0#0wea`KUhEXjRYs~$@VbHScF
z6x4o?n9f6&Q7nXMZ+&U*4X$}B03c%;@&%RPGq#t?7KcEF_(k2P^B;uT;J-Y*ip}(i
z^dAwqh8rSnqFIA%YK~_D4Dci0mSCpcS|rXE2G8A}4a!*eBZJTkG_#~$<&js$4JoF9
zvmwOS7an^2={hlPRj9ilVr1n_n%d+ps|`3wZZnA#&)F;3?DpAP=*N=6Nl<LTFQ6pq
zO(!V>1o0FT<xe}HzfM!RX%mQxOYhCwD}1Nud6HaW|CO!1-pzO}NspPE(e%YlIEJ~z
znzAdaeD#fCtHVwPE+)!V41{iKgM|@iwKjOI=ipx*^XYn~<jgDpGvM$VE$U7&=k@sH
zz|A;j1r~eIQP`<DV3}&%CTFe!h9E?aPa$!CK}vWuzUlSt2P6n7JFoRFl9|B%OLl1~
zTiMEX2!oJSd6t?E`wn;mYn_YJx)a=O>hM#QD_0q!&hLXVkGB526myG&nh*p&k<w@?
z#5l&3(9qt6{~*`GWXKh~<ZZ1f-?!u>;LOo1+Le8YEgn;=`2$kH>SO^Qd#tws&lv3y
z?H12QoC3hzV_e(hY$I!&MHz8uxR2#qpe@2FJ7D}W{#=0U8pP-e(I<-_TwS+GP0K`)
zN9T)dU5doGr_nhlM`*nN_^u{+EG!Z>!@xjT`wRXG3<dC<HET2aF)gnOmL`NBD*b5!
zvPH{h$0eMA@A-h+HX;)FL1VkP=NKoao%JiSZQGdkRI7Y;^c;Lc(sAL-#)^hN6PtE$
zor9hDVkR{6#;ArzL$sa=#;ZO<_=6y#h&~%8mw0xJI1QXe(JP(_^ZB?nx^~iVZ0uZJ
z)JikI`XpYnhMlQm-r$r<WZ+JAGpbWz6*!~}A5JWbh^0y|!pVtSM}%YsxQDQLVQ~5$
zY7ZA2Iqt$ovCFibznnGMg@5nTKT;6;*KYd`63llrCXoPoN%*k)u$0X+QbAQscfPi`
zQ;yiSN=Ea?wvdw&N?O-e@?TpD2<6AU)of{+ivP-;2gM8~^^D7K5KUUsJFmqm)q+Wl
zt3C37GJmT<ZGPD1-lk&=TO2xyBK4ewVku@RDzy+>0?P3miBUHIQ!5%piJf+v(5>WL
z5pf|;kmV;!X;#+7{vS1FgHet^J|JNhN1C8_FSWPZ@@bzy_Cv+wa*p9@;;30O%=-2t
z*dex6dhO6@3VT%J0wgqnKlj|Cj3~_hL+UPryx*q5{G68Wt-}RYe0}+Vdha=OAJn!#
zMhFgq=mzO&`((Vu2;?u@-p-Iq^6sGLs0V@kKpXt{vG>UpQORiBS8_>3svT%c35XrF
zJ9`h!qeJLGucTkZipb*X<|!+8Ge?aIj^q!7{ObMRh`e2Su)A-^9b2A7oPti?U_-_g
zo;}XJ>Ed{(v|1U(Ai_Z+g`y(*w~@XRLMLh`0RIVSg1x8MzZ)>oIwy~)m0|3`5X#5_
zVatMhn2B~zaOpuiT$}ke66N#P#|RD?oF}|)e<T|W?ED#d0vI`|xgWM^vwDcA+b?2`
zRs!yEWv?Wx6xl#W-K&%cr3z;qH7cznbfbKtpna1<m9PNOua(%^CgYOWqP@DvlEG+r
z1!nXPp!aAB-(;@uytep2`i!PYLudcWJSh|!WUOi#lIr-<dItBx#R41LCrtdOs48{F
z{B)HM!zRi7e@oEDnzwP4@1XZ+0Jh`>{P4|w*|T@-8zbBmV5q)mzbyJVc6ApSLP7+2
z4u<{LKTJNO;Kf!w-JS_OOEkj(izj8aQK>cfeB5X28h*ko*vWL6q=jB#rhdN5A_Ud~
z>$ys7opQZ0zpwJR1$i)CLj9~EYO!-!4{BZCbxh`+ABa%fo863vds$27Jxkj?_o5At
zqL`sO?T*vQK>EJl39ZK+i=>G(R=W<y%;!t^Z~TAcC8HOFCl|^?ORoI)1F6HN*Ain&
zsrr?d#827a2hYG7KiC@?j1iNkvaJio=iSWii_rQ8`+j_7a-Hv9JL%xS1Ghr4AxL{c
z>j7#Zsc6XN$vk_Vj<z!q6RWr<<r7tq=7uFWKx>^h0L;!QYNZEBQ7A_B<x|si_9#Tc
z`6uo7p8vJi^syg^z!nDmDuuu&-(j&$&u*0y6Q-`Fihnz>uJv2mqJ=yeXGM6<n;LQ;
z@s=hpH+B9*1BxHX?G14!)l;-S*e*U4dtPrs)Z5Ub&iBzh>Lf}e_bE3EPDJV-O0a1%
zid5(U_zy{%DJh?D(ORC|>D1DW=ir}BBf^@rT;!Bs^Eb*SCUSL2x)S+aA^1|2p+@rR
z!e<-gHqEm+`LAzgMqmo&Mw$c8KQ*RZlz*&8EyIaD0k4w?5zm{EyX+h+=nE^aQZ+>o
z5ULnM`?yk?t?;OeF8&@2xI10pjTl;5>jwklltP#C*S0JmC+_QwK9GLV=kt!NHJBim
z6x}YvMV-*D{#N%B`?*O>Fo$&x-i?KKjH!m1AuTx}pN=M}{qyu~bPkM8PYWfM&%vEs
z23*Dkt<ja9rcu$QKkJ8V_-Q9*OJ`I8K|DfKvuWJx8jI<4=Dw&0CeTi3EcV+IKIju(
z;{ri9efcNIvIdR-KJQnqo)LNrq=SZ(jAocooOFkBGG(Jg*oOS;EmjFnPeo8n1i59l
zmCab<qdmfdM+UF)1v8$S6EAaQ%QMV^(r}Osh^Fc69K@I9ON7qu=mV?uL5YBX?!ebC
zcV)9ksb8EUn)Q#c&APfzaT7!t#h%Sj;=-qVE%nsJ-r0Ljrj~|bR|9&an<t>(Q+<4*
zoG(}tn{0|yNV>vfe|r8Yf;Ule;Rzb|NgJH!KVo3^^KP@-E#sE)ctMCyKt*N*&@{w-
zO#{SBmJ+DuEvYkPnU(S^`FJn0>`INkcu@KGo0;7J)6`s{T{<a%Hr=Ay@;=Gh^Nb@V
zvgdgRPEyM7Gvk<7MR+|{{qvjYn6ccYZp0;TJD1tw0NW5}_e_&0WED>ytNdz$@%9d`
zu8E;jy0Zz$BkWLw-0WPgVwqyleC2!F5SnWPWP~xM<w0vmELI9L{PwkKrM2iH?Z4p|
zK)fH?aAcD_cMhZ+Gf-S3l}KYOSL|?8!edlcWoY)nF+b*6$Hl0%z+^|KS8uLnN08?G
zV-f&2K*+yea+e(NGHJ=r-f57@hluaK_tN#ULoHWhRkQ;P*j8Jax^x<*{sL8&AU-(&
zGpwfdlf~+^Iiy`YA#7R~51h6KL=~QNsUN3eUXCm=AYj!u4!DUHF~NjvFzL@N<SV@O
zPcb<t0Qd=%!T;ZT^>Fg9FG`c&$d!c_{i~Ahvs#$idSnIeDrZNC`E{Bu#993Nsckp~
z@*D&D0}4U^T0V1DHUjEK1a1*kzP3)o-u4_S9U;MY*)kQh^=0|<1c82q9>{0up5l)e
zZEaug-8no}H!A~V_^$K^{Hz|_Ck9>>3awWxjU8gXCH|lNwtqS8<$b+^;7({0FU|uT
z4-X6+{H<Bs4YX}3LV&PL-4*&0qoR1nzhuR$l_27V;jgIEljP8q{{r7XS_q(6=(=uc
zC#MwqnG_HiuIB+PG0OAm`qd<;G1XF(!wTiLCXA7T^y8U?8!Ue?v(IR%f_dyd=WW^T
zfHmnNzCT6UtP?<+@(LoRsg1VCNyAbbz(vU=X1h(5A}^w%7yY~Dwr%Y_)PyH@L7@99
zDz%H=Sinysc5Tht5IR%QYIh&G+nI$3dE%+MG`&_oq|B&3W6I>NqWe4J5=5&z6dYjg
z%u-{sn^^2v7%0^K>EY;=DiL>^gD6>>HG?1GNth`Lko2_OOigPEU}yJlZK6dNK<Tb5
zKf|hmccgI1|7OFxL+aRj$<jVpRd4{eSw+2Qtov=~N{xd?yj9icGWGSy`+@bL7F<&Y
z5vFV8AkSA;4ls5%sBo2)71;NyTAWQ@p<4X8an*)=f<W^y1SXo~F5vA4&+FqdG!4(Z
z@7SrcK{fDX4X0Fsn)s`V3VLUOup~Mvv5_53bb+)BT3rAy;@I+?B;A?l&~W}Z0isPE
z(Ua*`I0{jayH$TyQ~;3{L~bYD^+7<n5{D-m?m_`l|7=n$nP}pLbA~D&oQTu3_(@|1
ziE>i;lPZW!dUXCXUv*Tau~whcJi1GJdCC7R#_Y(fQMwOEwobRP`&JRr<VHU_hPi(|
zlAx)mp!6?3?HM$POVqI3ScY|;3o8!gTI^&`j~`4lB1ci%Y8J#{MiR;L39dUw;4Z@x
z%~+|{x)nm}3vZNg3ZJ*-)Q@{3WJP_J-ZAk+kyNvW@|p~E82Ve+&T9u8vQ=`QYLB#A
zJ92?S?`?p2;Lc;NE#C3Y4DsOcAFju2%5t97Rv7*S39|{F&8>MrhG=-bY;>ViGL#QH
zv>!jqKstMMccnwQK)cV0a1GrI$xm5Wh=%*Ye%y%>_?YZEJj1)WmwYzf%CWG8W&K6z
zT3#(38dAX$7dc)UDefSQsuNNsZI4`<)f^2REZrAIU7+v1uUiGGssgMKyW}KXDmYvF
zjN(x|6MZjCQQoq)Gz4Knb4TV`PJcLr<f@7k`%6k_E5`o;4>WsO4pvS`EaG)&ztylV
zdIi;>s;I=o<bWmpiX_-t*d4R>eLXjax+XlZfB#y9f$v4`#Bn8=Syh5Yb|K-$z9F##
z^gN*h?dDmT3r^S=ZXg^5&Y+(?Ab*B+8lsQi5y{Sxh3*3Nm1KQ8-*-sB6H5xmXWqwE
zpWlVQ(}7dV4F8dIoLl%>(lH)bh$MY9o}bVA+Rb)2lV%O_RAOBbzw%e~N5DBz*tu@a
z5NXJ;9v69hINL5ZfMkw!#n!by_i=ak`p{-_>Z~U2+ttSHeYp*?2SJauHz-3RPW_E|
z<uOB(sX<)lmP?r$A>)W9yZyBkQ9W?by_!>Aqlt0|YQuXs8^~_ne^aP9PI3p1g;soS
z-bShcOHU9za_}Qc2mGTOaSLfM)(aSL#_OSa;Z&s#vdZ4%I9@~1!2dfi_NcY*_6^S@
z9$<JOCwUU)CbsOT1sb!^t7}w&%;|OKyYuW9573ByKZUA#lyBx{SXJXq4GG)xO@vVH
zZB%JyC^h7$#$a-!yKx&LgQ=;vuEQ)%$^DR`>k)OFf<VMe>8-W>vOePff)5}3CQBGa
zY|_+ySGtUpP-YuNZgEnRe{jp}?u}s8>S4!I+756L?frUH8r_`4>KAiI2~8m$$Q77E
zLi#gzSkz!uTLuA3S@i3Hj{r<7Lo=_|0O8t3T%EC){B#M4=3CiufNDl(t1CIZgd|uT
zSg4GO1hSt@aNVxnT@*=olq$-dRRd&&FLt<Oadg;Q)k}1Sgpyvtx9vpAT45DqUiQXm
z&?ExauqG9({;Jmko2CTn5QDS}nq=QMf~FQvPl)ChqiRm#_2+&~8~XS}{Q}1pR2=(x
zZTrm&3KY4W86T&#zVcY}wjMaxSp#!G>lhBN@n=yd6s09-eL<D9Noz}8>jv}2!#MlV
zkKF@1MiJQI$0Vi{FJP#hO_f2kXO)?F&b6!8fn6bXPoBQ96-+et)IM>F6tMralB5|y
z4+-vB)o@~i*4NfMpp~Zi^MWiaZCxQD@EY<ey-dJFGF3MJyT)S#`<-x<U)1crJ8SfC
z5p9rc=$!+GT6KL^b7=2joC#vx(|zY!L}sL!1r;8zdZjR*gmSzm&pRm#Lif(G0M9@)
zqnIQTfn%xh@(!yLARq}TcOq8^aPKg|jtZ=0kvHfXy=$^2ECFdy&T<<q62R-d_?ZCG
zeH400pBjbg0!F&_FqG2-xkP1X4tl#$_F88{RD7vYIc3BIo{DIoBr%gy*{4q$zKPLX
z$1fS6E|a1ZCV~>-`7JSQ%%DL>a=8CrjB%G8`5G8%O)9Xn$d;8@LS0hYKt8vlkK5?M
zUa&XEoC<Mz5X^dLQfnP`gyz7ivKV)&zS<Tug0FJDdGOk1D4W;MVp36rqJShp?XPUj
z><edQA;LgA`(7C)3QdPXI;PMaTbgp`xPkd(IRFpGFl>U`b#KT}P(bISaDnVwMSFLu
zh1(ny;-(?FK#&w5iAa4rO%Y3_h$O5!k!2H4h5`pGMvpyaxac|C1k_mhi3rVZEdo7G
zj3~dg($A<?fInH%@8nOgB8SG*^nwRT9E4^oirDu;O2@>Y@89jk0;w8jXW^C+#bgV>
z25LkkX2bd7V973&hIujT=^{NycG^ujo@-1PqCOPTu4dx`YJoA}G`lWzUNWVT5r)J)
z8TD(o2)KEl6ty(uYP-y?iholMTN<kPkWuZ0jyIe1{TwjeKreOAOfI9Oa}81sdSt27
zO!q!f!s0M-wG1tP6FK(+^3BMi>nnI(dp<;l(I!4ThveX}VrL}imIQK~7iO>+L^wT=
zYvD;*U!345*Eu%g)ibZjrKRh(jYqP_&ACU2LF1CH)8$fyx(n3On$;q2m(-zEX|a<9
z#6)TMnX5q#&J}LTok`1H57Pn))EA|fa_E`S@b<ii*+qyv7$mtWjnQ-|pLuk;P(dmO
zFsdiGdXD8zx<H+doh;5{IjE<8(SMQh5rTdGj_{?!W$jv0ymi*-8S>Y2*kCL4b59MG
z%Y%Klsy+<mg+Hjz-6;rx#b(`RiR(HP;5(`zbxlhke5ydFz3NxF(<4Iyh^m%Il(4<J
zxzd+})e6xN0lD#G?t<7T%eGvoGm;_7n_{o1FSBswzTL}Tp77?(x5XYn@~}hfsZw$o
zqFy1v<Dhw0asFP{l_vu8e2phdTT-FB{(IswOO0!gON)n_eD{jXugh49V2@pWKp2gL
zL>%HtPTM&gZ3i2gRFh^KtB&6~<S;{WaKQBH$+`uGk_vNwzyS9090#mdD1v0OrD3F4
zsXfFh1*;Jq+km2BEt*nS6wCpOOS^3f$?4@!c2>RB)e5I-4=3+Q5VX@Ou*R$q1D|R)
z4j9G{dNi@w$3YztoX*qiwNBmZ-%j5#$iN*0T|uE9CbeRg_0I4pBlsONRThb`o(hMh
zCiiQ(*4u!V1lK?=p<1JC7|Wv?IKm!K>RsjF?^Qhaw(r+vIAvrxgdDZwx`jeO5zljz
zdgz4H{puu_$PG1KN3|38yC~kd00W%d)o9K`HY+6q*z|3{@8;7o$E+q6EAN@DT>bQf
zHHKWIqH5C2cOek!z}h~OrS=)2&pEPk7gG~Y_rfw77&cO4eL1G7B8r4+AQEltV*7b^
zws(M2?a9yv9^eLLOP`_2nPo$I@jrdI`9{Qiq{$$yGTlS|it3DBM7uW?wNELpFbxIT
z$bENfg99KrbWrT!^RSF7MfXlyyN?9xgN9bgQOHaL`bum<wiav!1H7y~)ceNV(B4BG
zZVU1AOKI<<IMA@3^|fR$1fev)Y+S4`3mokQ$8P@TWd57X9I1vx0HmMCo5S!S?vj)c
z9b<NbYwq9{KCOjvC(AipZ8FplaR^|~MeV8p<3WUKisKP17TGY7$T#(PSN({D3>dyc
z&~f7Mz-VGK3YnNjc}k#(1%kB%vMxytp5EX*u1A?SLpma$cn80eS;l65YF<3PLEYH5
zP+dg6pUa}(S{u>Miq=c7jan%CXksc_C~tjT)Wi=FL)>R-Z+q40t?8oajMU^tcY8kX
zq@l`Leso8$Fz^8>p9Sm;FU!kuQ1vfz{=hSOnuE6KmB$lJ4lEVm@nvPXmHgMqPcUU`
z(@0yP6nl&I-M0p__zy4jE<yU49E>&{7VFyu^@U?)^|t-75-To!76C8eUOCZMV=t_`
znLCVgHaDd~_gQX~7&xZhf7T$dRbi;6F!S-T=xdFAiaw#0ROiTtFjZa)$HkxKdj<*w
z5n1p7E5w_ZU{W}IXdJLiIxVW29?WYYRqc=fY!^9J-$ho^GH#Duz+nF(3sKs9f)y4+
z$78g>j}8g^WH-So#M^g1|28qW$xKm-0yC4yW(wy#^tHZUif#HaOWS}IY9J3&o0M4g
zzh6yOb^1x@_0e{Zp0w}F2kSLde{Lypd30JE;eTjYGP~@!P{$)>3H;vNs`}99&V4V0
zlkXO0LI_U>v~M#d#@_;bL(usf->g)9e)wAKT}mW9t$>%J5jbFMwgKH;!3f5N;4r<?
zII$2A12T9mL(MJ{ClzVnaBf3biWq9)j>nW)WbXnQy@dK2uFJ_><cT7aY|m9<uuxfN
z9tkc<#LEsQpv@+ljr7EgpkfW*2Ld<Vv*P~Uhd_REmjK~14J0$ZICxLx{B}z&mhd|Y
z6{AsWe*o$Z6N)9F^BkdK7vouasO*{*k}mA6hoHFY*WJd%)QBqHT*#AR-Ce@Z%jm)e
z45me}&^PnXM!!ry2aQrST}T71QIdAbm>Yv1flVsZ(8#M-=KVJ?iK0NH%V&Q!p?S9(
zzL6B#A$0uMr*(oP=^0RJl&DD%gpz)RlOL>mY-6Xww~^gb-cR{7av`gcq!g8cIQGY#
zWf>eR?;>)~YWL!?97tQ$zg-{juR8<o_JxN!Xc)Mma8L#K2E2()EEr3aS=m+~^&M2=
zeX)+$gBKX_m&9I-TX2V9c|5Jj2cZ8?#p-at#ap_{c)YkB^As5CvR#)M(jo6wfv_d6
zOD-#}RxpCL3VvG>kMYvG-r1D>pL+c*XrypEQJtwl1Jdvh^+(U~nwHGee{I%rXGmGQ
zAj^Q^4)_QpO_st+>EkHiVMgJ)mOYp3Q-og_Kub4aZ>{0WC_EsyI1}@0;cLo4f8yQ8
zmUX5qRieALx!Q!7V^(6T<L2OH2PC{HTWY|BS<$GCSESaBcP3D2p%#5s<p-q&nT0(c
zW5T5I$d`D+6;}mHr>Dv4K56**sowE=zmP*Zm|ul@qvPq^h!6;ol-BuZqZgL=6P9^7
z^#)94TK*&WNQi#Npkyn|EKRnt1`nBr3g<~sc=dV}wMY8ibk``M6E1k$_l6W^=e&KH
z7tDz#+{l@*>AvHgp(!59DQ4<kG~|@aT(fO|=Jo(*^fk~(zXL-@6xT>q4B>R%Mh3rR
z;%%%_$)j^Ka~D!X30#8r*o|4WgVsff>vz`_i;K)aTBhkm-p!00eo9}iwMMN?Yf0IH
z5X8y<*P9T?(m}1zUIn&BAWSPr2l)W>6;E0b?5Z)5z;9iPKD&*Ii~J=4k?Eh`R6PtP
z`L}|H*a*7F^nmClWtmTh>3@q&$*g#?+`A;zwoK_xzkS<PN6`}1*X=WUq&dFcD1S`R
zI~WZIHOPWn*CMpFAimeF9oF&e-00l8ku<l0W<q|Ev(zdmhLZ8foG9ZE=51)MsL$R3
z)c%;iq!<y&#n=B}I~hY*lyz+m5kGzpyp4sAp}=baPedvut7%Ig0Gi<DV?|wAXwAd7
zy$ET%6W^o5f9pAwIa&yKoHuL++eVxTX%Z0CoWC8v-U)XkAyEnTmv8&`Kd8KJ<!_;G
zbxx_RA!ypk$6d}=a#A{Gju@<|j1E6GtE|a4MpR#*J>VHjOlEQuQ*0d@DVX-g1t-YN
zqTaC;X(V5ryK-eEtbqf;>~e4F905NkZ)ag@$F)Z7kYX{+A8?qxE<2kR)`tW=X@MR?
zm)Sk#rzRC{EOS0vGosU5Xy1p$1A?6Ps9Mkl$b6*osmQ5L5ep_77PC=k9YXXqQz$}d
z5qtGL9B!XP&xxlPX=$UHwTNp|s^f+oS;17*KL5}6r0Gs}h&DF_YMBUoXaO&(+9KM!
z!FJnieB_<{&hkFOpqW`m42t~#m>clPn>+34J|8{xx-&3L@c&!?d@x3l5Tb*S8=YY8
z;l&(yL0V3M_8ux0LJ6m(bsWFwRv#h_*le=eHBwh3yT^AM?Cs8^Yk22y?K-FfywMpx
zhK_aA|Dm}-`3!K_6-p*A3F-E5`ZyQrlIC+<#et7Af!^_Az4#y|vJ1Od(~)8HR6EPR
zWq#8Z2I(M#%V@4Ib;5JhIj&?s8j6o)Kx#JuF^LeBErpu;#r%~<!K&TJgSYCZf%mjo
zua`t7KVUK(1D$E+n3=S98qF7!;}c)|J2itn<$ukd6laEX#hVJVgtJ#0FWH(Sem--P
zo36)}__+0d8xHV@ivd);JlIVz*#uM}#aGu|WStaM*_lDL{bvEj0m_})woh>+Pq)+4
z^KEUq%qpY$le5woH~B?-Lo9JRfY^Hrd8QUsn7&erA>?ZguyuQ9@Q!RG2I0^0sMf_z
zb_Ko5-bTFFNubZuH2N2D65Tcq`vy(Mcr2S3hJFo6_XvZGK0X9Of}nEXDyE5e;v%ZB
z&*yH8jGW7xRI=rgJ<5ixk!Tgv#b^|2xoHltGiDrtFbN@OUKx*dcqwVW!VE|D{&K$C
z4shIdO#Vc2Ea2SwB3>fO|1&hnP~Og(_ATRz+{s#N9&1&pL^u%&eQQiIvoXAWmyT`O
zr}L2a5z71|Xr*uw%g}Gae4-LdQ%JF2Pvx1sE>nGT@&qe^^3QIMEFi4*<0#1J3^)ZG
z@s;Y*ERB23aIGJtY+*;l5ukShF$9{(CVw{oZ#IJZuyA<52?B)Vza5h<7O^V{+$m6>
zeA9+ojCqprm+vHrP%G;VvfY*xD=AXGqB?R;R-HM(c0~0w&2R*O;y~ulHU?&AOA$TF
zPIrcF_@OPkQdeI})~T{9u)&?P=E)~TZ5;GvcT2jWH4e0_WA~0feJOu?!E_@n$3|Ex
zP&-RK+oY`c2>qoxjsj<O6_RH!v5u5xBK80{zUnsh28N53IsXhm+TsqG(Y&*2ULB*z
z)!ceXG=0w|n!D4JvbsF><oP8s$kaj7{2Oz2Mtyu3{=PvGWEH0~+?W7=O!6Z!o`a6t
zzC9jGRg{+TSD)m^O2PL)KWt^o3+u&<joJ$KRKg$cdY3AikKx)}XkxZ=PGkS0*%OVN
z81NB747lMy6g*ghocF;+Uk(`x^ihVhC<#crbI249c&A%(bddprd1r?9kg%A-X)PKN
zxdjXOj)a*Yr83Pe;YXAXZphdMvvERz>u~cXf^~>dRhgU`F1*(KFFf%ntGs!Ir}DlZ
z&{a&2$QrBkfMtb{U4GihBC`WuT>xkV&2&TM%WRiYM)pGusGx)ccY_)<B+&Siux$y)
zvzv_vEW?!83$v&3jV&toeTSNaFNd9U#)nr%5{lF~O3fRF<8oXu?1!d<u(h&7hl^`!
zDuRI#nOkWJ(co;dg?eptu4GFv_?DictKjD-Hdqop<+9MmJs1@_Qg$?;B>s8I<?t+$
zq)Ok=eV&DBXvkRx43$f;9OB20p!z~>PPNV#Pm)ew&^Pq@vY2X`wvRF$$E^u~#8Y9T
zsx;FbM~MAx{ooB@a_dYrA1THEmx8zci$|L5LMcf(NA7$sVh&>uhuqWrQPMl4l^>uR
z*mbx9Tq6T6mQ$^Er;EA2v6c3YUks$~fhnLw@!~A%oL5z#Jqa4lsto|$6ecH7$-?eP
zI+g*re7m?neW;!8LZsTaGalg_)j}38lGq%70C0YE5!r$C>$OW`&g$Ii9cEV!P$h_I
zvc@^f9(oXTLRc>F?xN~&c5FzkDqTha3+^uP-s$4E0PEpdv0t5Lo)E7$jfi?DA=+CB
z1llFR=LQci;>bHgx??-^aRTy$w~@U<UJGQ?$+Qjz=F9z?3mJO;jS9b6EO2)j{s5g8
z>`+TK{qpI*gC-BlsWXv>nj$FnP4j#3UlSGWvkz|B?{o81t}EP)l8D_Uf)EG89ioD+
zOMkkv;~$U~fc-Z=<wgvj7(N_{;55<}57lRsdRxQ%t_g_sI`i&^9DshUp*<>HkUj7@
zO^7Nquop#rpR=iN;f)nfhQWWwDHkoo(y9YFHGd2h{q)V&qH8ANTiGV96CLyhv;w+P
z6c%XKJm)&7$7(`$qVNT3v+jKUQ83te9979$E|G(3>vT`Es*M_|N<w6XZ^S-Q@{Etc
z?k^FX|ENOkUFtv%rLRsdoQ6l`Q{T24{t}i$iIrky(Lyq%b~sj}o~HXrLjH0(iwR$q
zf}e#s39PADHxUr{Bi~-!<0kh=zicO(fHf7C7iCwP-*DkSD}19abfcJJcW>m0si2x?
zAcQi%{2Z9*N|R$cn^4yK^uUs$63>%hUJV|i!tn49u2bGA$Oug(mOKN(jKPU4m$9e>
zqX@ya``e+s<9ax*znBc3S&js`><aX^Ef3!ueNQ-C8)%;XzCP#fysa>vgpN<sD!!v1
z9*yv0unEAbemX3`0Et7H2kYmL7Qt{PzO3wA;9a7-%23heX7qld`$;lbS7+Y~)2M;*
zPsWF(r~yel<{m^;L23HW$b6Qq@OYWVo-5#hi(VAx;g!r+B%osL4^hq?<QYxD;;8*K
z1@j%+tQU?kwX^%HZnRAHb%eq?1PFvPO*1ZpGTeNatk16z9+07)&=8vihPKr}DYI-{
z;}KGLryZY43GI+B9Pz4st4^!<vryoe<Skch80RM2PI(Z90!#bHDDIZpK88$BG%UOx
zmQjivzun<Ni=;*_Np{Ye790A4@*PpDdF6bx)89k1>>v&lC7fATU`@Q4o%mvWoVzP0
zOT8~);waud$HUloK%}-V#9}~mY_`q*Hgj!0a7x|NmClrc4EpEG!<@0-yusfB>eQ-c
zZmAf(Nn(0g7Z3r%|9=Zwh>RwT3V7C&#{k=RA+R<-{h+fPl)_iLX0>?%o@JDy>$=gm
z`&umf6SG$PPOG6b?i2y3oiyjmSQSkAdb6=_0-6yd`^pA|cletlfzX`_AlOf{wqo#B
zIL(lsX1q{8w9{eD^AJu99x&FeNl*`x?*m(7Tx#0h@*QGq*vIS@W&z&?`iYI#H<m4k
zs}M(i_n#IQiXh}R9Thx>0`76`U>xv*=`E5g=pU{dsC><cT&Hfj2uo~mA+#k$@l#5C
zb13n+uE+6=nG<`@Iao|?lTlw^wHl;o1wxn;t*dT!_%DQ~>)}Y)#W=0)WwJ6#5u35H
ztUH#@w)WMTUqUo%#|Vj1`sIoG*peb*P8`?cGw&iTahZ*#R;#izL+yYhe)PdtIOtM3
z;g6V@gsBr2CvV*sx=F!|5Oi=n5^>EN_mRerXV^hptubm4&RdrlXc-A4egCr7U`d^9
zC~O|bbtA=4n^a#K7cMYo90x0T^UWJKTh;KJ7zl|nb$*Tx#-(<2L!`8VN&a68ewE`H
z3aYZ`^PLfcXxgLu+agwC@UIp`>H`ijz$jbq4qH-Y*J!x=X<Xl=&V(yQb0g@W^LCD4
zOv{gMi|(B2OwcZz>ICmF(O@A2Ua3fu`wki4(mt<9qsV(BZgpxiibm+Oc?MRqOP9V~
z0$O`vyw85l@*Jp?@ek=H-$O;p76Kld2Dog%q$lh8?~Fi2Di_b$>V)KN)+}|+fU=0G
z@Py2@`WE_*-z7-Tm6em@niez_WgPTl*BU*2zm|G#R!f%@EiYI<-35H?rE?M^b6_YF
zg+P9)-|9MGSbB{A;HfOoX-s6aM6uR!!K3Sg;TWmQl{$nZHxC5tY8eKUvBiZLF!2q*
zqojM|?{b}+u-;LEi*lg2$jj=sqGW63p8PAb56Z*HIpUNz?{p%R+q^!ng-@RcR;ecz
zNaQ-mNcVEZEqpf=(9#QVIDl$t2+~&V`#?7Ld$T61q)Fvb2<7}W5+1H2cvMw&OT(2t
ze#(_J1WJq0xLqD=oSEAW{dC6ZeE8z+z_bi^0@F1|tBx9#Ll5Icg*q1~4Ga9I^!&-?
z!tXR+Yrt0GJa{p$IdvJ3`lQ{9qD`np!R>E$EuSP{=ujsb#(lLLa!$lbST4Jff!|bD
zR6PE(-BLWuuehil)4!(rg8$m%zR~(gTVLvuDAxql#b?YkiA{f-qrDS=R%(Y${{=$9
zR!tIkQfa`7mbpnNW3ybg_^Op(aEJF~9S`rRc5Yt{&aJZd@9f(<S{kYz;;mZNL*=*`
z1IPH+@oCqUhMA9XAT;QnWI@?dlDa#^e8#*()pQLW$Rb{rRY53;4f_lh;)w^z>bfg4
z6sD{QEE6L?JBBM4kd+Idmo3@p8!C$=SHk!2im#VSd|-G7qw>bGL*w^Cz^b%~I+vQH
zX)3oXsDl`Q?^FeT11!-sSQ<L<j#2@)d$G2^zX%G3PXg&_+2xDVgG-9&pK3L}{g-y2
z_D%jCIoPc?F;`;ORx>-<ELO2c+2yfi+l9@$g8o8dIF5oMR#uD$l_5iUpX}n@HW6{f
zSGp-MIaPJ2FHlwp0PBZ3g4FB*jX*6C!w^c(UepxQfkHhm(+wpVzLT1?^GL1nMKTUJ
zy*fzNEwny+`LCqbcLNmKnx^a#wu}L``A7mFf?L@G3is3yz&(8$JX&ro5B>2R)1ID-
zY^4c_Vj%5typ|Tj5$b5GxH#EoV++w(8<QLb6a3Kmnv0%1AA157U^!x|4A^Md$j!b(
z-ILqE6^7XcO)U#ozFKKz`HKL>A2uRus#0UFQtL5PjNvgT42!8QVXxVkX!0WQG9lcd
z<&9U**b<NRnsqgGu1S@<8XjUV*bZXcVUCet<dJVf?FJ3mi0GSHP19;1a?_L{5@P4J
zAF-D^sKcO-%GL8?F6+qZX)$0CHSq)WeOj+z+(qY6NJhexvcWp;mB6-ijzf$yoT49;
zH4l_pL2}6y<$(n;K_ODGOjkwJygc#Tq+ieN+A#UWwlWf!RCeau)Ozo|+>20216|(K
z%ErKci|TWo&pTL6_Ak=Mr@$0=#Z6RH$JrQoBn%17cE;h(;Q0iqChwim(FK+!=rmOa
zu_1nb=uegnUiM*&Pn{B2c;LEmWdI4`CE+rOA{f8nt2QL*F3n}VZ_OM7)DnqK9ZLkB
z$DWbx3~cBeIo534iYkz()L2Vwdo9sNy9iZ3^^=XkUH-<9w%Z_VuMbGey~YaHGo>R0
zjCzqoy^L0J9<2BF;WRz%KPz&t5<_F)V;ZVcD-VzdW%a3vSk`+VD8(0=hYQ|A*3Man
zYu41K!%~`AzCYped=g<6mfvUy-;7zt;h4;5{FtASEMEnk{xVY2?<YznSuw2}KK8Xq
zy$z(~z;6w-Cq9yFV0X<b?-2NdL&)6{>Kba^eAMQ!B(fymp_{Syz?|KQ8K6!0{u92Q
zY`*FsamJVkUFhVYZiCu{74l&(1>ZWZ_TW8vIypft?rA3|>sqigG2{m{a^`XT!y<%u
zjW#BpD;Rkm?4=Z&73~@=^V`aJyE4MNA=&b|AIQ(LV<dGSk@WPC-z$C70zR_RistVn
z|9Jbhrwb;*3dSt&uYmG7U;fDtt=)zygCLM1WxG)q9TXg++5P&(LBafnix~=uPvjO%
z%@UDo>;f1?iu>>BeG<P(U=Qvh1~QWKDY|C2H}ggpoKH|w0KbIw=o~(jTkiu?`9jq4
zDFm=3TQIPswI6`}p{#VQ*6#*TCguap`=9~+mOkttBkaF3miQp|L1Y$Mr?99g<{w}?
zp;XrviHK=|46k7%<PhptlQ_JrAAyvsy;_Mn;=Rkf<HTkq{($bPbj8auGQii@Dc+$d
z{hL4QuLaq)B;Pu&AKS9@`wyG0^IA?dqU0r+&~HCgC{(&UzJ(W7CG}M5c7Ooco9p9z
z1-$=LhJNUzyPHxAM7#}kk&Dwc(fIwqp$<MZpge?+=n-#twB67FWove}4vk%9><5=y
zOyz~}f0FpmAa@gS6ri3ZpsND((MtSDxU1ab4!1jN4N>*w@m2b)<0ATJS=ob+8<Q=C
zQ(gb5d#CANVV_vZ4#?|OR+LF|Om4jV2Td!*K%dEbbEUQd6<?BkR7XuPUC`^Td2ro5
zbGn32)n5i9fPo-;1t%QG&#L#`3-FwbQ29i6VvBl?pd7q`N?_Qt<2kB-79I#!`zZw1
zd_PKzfikBV&hoSe%SKZ#fc{YGea>V7e*plx#Wyp=0D5d<8W!LMJp%4s0C%p_<Kx#q
zrcIuMS`5RJU#hs*GGEb4NXCAs(<Ma$6tk4Lv)#6{%76ys{Y4Ufk~E4rS7X_up)gOi
zIWyx_LaqwOlJN6^$G$NT#!K9SIPIi}u!heIquzBip=1&WV#CE_Jw?Jghv+#!u@eJ1
zQc-;llkNpW|5<U*PaK7jqA0#`2(fKxw4?&BKX<{_4bUy5yR&I)N#t9T$?Dr(iE*S>
zuix6$1yop$zU>PGj>xw?F+2R~@uT~p$bke3r(-Y5r{TlcJkoTE^(l6;A|c(_{iPIM
z)hG9!#+qy`jYT}<+ZJ%CUxVAYp(*Or65t7xoE3}QxOJr9z=&e4jK|5Q9V#&686M0P
zCY4F4FpGy75-4QVP$%?xgmb~6PkwFZ*#Z@Re{Kr<Zl>7p8)goSJ3b6^|A)*eodSS`
zrbhQZPPMpjXi3{)f}~EE?OH5~e3MW7BmWRKPQ19&Gf5O)qiJIt-{Sl}xFEPIy2_u-
zm4)eGTu(jR*F5IR;4BTK{q}>A!AIBObiw7VwMrbh!bfXnXw+jh=sEL5twYmHikz+V
ze!6r;>FHezl_hE*8-O3FpRe{*Bw?&B%7-n61{~V&@?{_c7j^FxHzh3DDbH&hK;~zg
zws&SHcgB0=NN=6_t|QyirA=H)kbf64`K2dAKBQmM+xYHs=a8aQNv{zc(H37%Oin4d
z2&@dKtQ*n(e`>eADG5C6W5<F^q#|IDl3C1OZ|pHS)cSNcWK`P9bpq9&loY~B^&9=E
z0w?)Q6<ITE+d_js7ij#`q?MRP^Ha6~@A@m8Q^Gq2G!Lj&a+fy_kx^;L*oBG<HzPM;
z(Ag=;!5SOOKmZO__K_9T!%DQn>f_NY?=s_C^m@66@yt@9N)7~!Rp0(#I|fGHY{o`%
z@PXI^Ed8(vNVA3UD{opZ9Zc0ry_ji@>Sit@<iRG0f*<5anyer<qV=n--X^0SHTw4s
z2kcCmErkG8rw5HV+E?xXdTe4E7T{>M8Q)z1I-JQ?i%$B-W4;dAh701`(FTIlBxYu>
zSG{*JLDtV&xFb!I6YZl0agq!y{=@n-jlIh7P-8G1X`bJKzKc@HDJ(!z;5;<bsF%-b
zj<jZOKjV%_sN<G~(>$<lSLsnJtcf@{h|L+svcT4Tr{0y%dwCIne6J*ef)Y-mR**~3
zLZ0y#8{}SnKil;)3tG~#`T)nOC>8I&D<rYrJ^(hj20X1X@o0g2S|m^S)YT9BzE}k?
z!VcL2s%%=+<qPk}=`6qhB;A-PvKU7QX-bC2F!Oek1u>o2%C5lp{M0rHYI4X`-Mm@Z
zcUG~u$R-2Byv%s!qm5n2D_ggCj19NMwC$|5nD;&DLr7n|2Z7@r9_6}kp^K^Ku_iD*
zap6K5HDEtk;r{Ea-N(}V&rl#o0yoAi>)<E;q0a~a2qmT8a-|NLE05dkYW(ig|Mov$
z0%Qp6!Wf|I7q}AKomClqj07Q9J%j5vCb`L*pkNO6RNCxX%d5ZW2@mvSc;OUl$1lRb
zIl865373)rLUhhT(Tc!xVc+*3;dBFkX)Sd_e=x+gdx!u))=$5c&?1NPmf&b^tlq(H
z8>_FB5d^eiVKTXgt~@k2lP;5eyO%;o{Dgp3!1#<YqV?PQt!3=rJS2+qvVYVg#REY)
znzXb^OS;Idyp{Q1d!V}oliR#Tbo&`izPFEkmyEfmVWVk1(4YX!izGM4{zgHo7~sE~
zQ`S1o`KHae32{Ds!One}FRO9sXrNt4vdnZ(A-j8%EHm}d%}x1l>O_;`)B}x(d^Uld
zm$Fz4C_{C1<B54?Vrkp3#7AEOwy%cG6Xu0IEb@z7B~TS@W@(Ks>6K@+h295*Yic}j
z*%3J35|HHP`Rm^o(wO*f*<MH&>MsUF5(I&MhUPoiK60p2Cf}N^a)0->5Zn6tC)NF?
z+RWmiN6VhLMdPCEa=Ig6@$tEkgX^D`X$G+agApd;2v>m&Y=~F*F6YiJ=gs8ry(GA~
zpIY$43M<fED5~30dN*e|L^D&2_QSyQV{bqEu&d0_Q6yZIQiK)uo?o>yzz>-q5|8)H
z(~AfiFu;g`;v#EnOxcovnx5csTqGo!GCxd`E(@-1{;D&5rUMB#F1<0d7(((&=82yX
zs&o}M?`EzSp+9}Xhs|kK06nleVqdKl$h|M-#lj_|y}q|8okdXvRl90;n?X%W1DF_{
zT-I>>Oa=#+$BSVFav0iV*l<g};}2gk!5TfPDW6s{93Bbj6=kR^pq3P@Q^cbJ0g+MB
z0iAATb}arsDkhN(GQX?Ru|iOg!#3Y(-V0O|P4;~d^dP%<8tV!t9dk;Nuf9ac#e{Sj
z7h?ovKp~JtMxPaN5sO0ipof+bU3ZJ$CeumusS)JmZ~Nx(-)u2sd5I)TOeFoG(8eh&
z_nHo?`n&S}aJA<fmsj-nn{k?fAtFK_$_`Ny+d39czwg^rM-7N~ID}=338W|on2DD?
z1o1SD#@R8{r!jQ_eNA9>SRzuHu}kq@_PQOm5`_vnKBZE?67zlWU1C<LCHdYfP1R3;
zn6mjFj#$2+Pwf-jh0<SV!}1<I9KYsxYN?4g`l<OocS_Z*r}yAjWw0mv>lHq;vT%qp
zdLY1KpwH+Z^0m+g18ACLkkxzFdids_lJKilYa%>9fgh8!3)0)Y=wLbp@5X0tLOw$i
z#cM(NCgA}I@jaLn61dev`=cVG-az?0FFi~)=0%B<9IV0@Sa%=slzYgj=I*MA_63j(
zrFAywA3Q4PF>c%!qz`hTcLSO#86)~gwreXVhhF(i&UFW&j4iSM8`L(<12q`~MVm22
zXJnbezae`zd<Yx!aJ&|zB+e2%_rhERK_7<i-vt-!4k7`xV0@kK!cI+wTW}YKZ8SN*
z+i)L^>=2{`He%)^tF<JKn07w5-hr<1)>!h$K2H!8#n-g1tMZamhso%>&y*eKaKGIL
zwxRKW%8;F3rx3zCwkBc|1sj_iTokR(qtMA{H>kh}pvbJo8axIDQ8UVBaYEQ1nz|yk
zv%H}!%S&%CrE=><yvYc5mOWY7=r1w~{D>+OfVZLGRcDA1nGcC>MRJV&5pYZU?SAWi
zwY~eW6Bx70W7X-cH&|~@xH@tQ5uNtAy2|aY(W-BgU40+;tjyKrmB@r%O4<-+Bycm?
zngHRJe4=7|q$`ahCUu_y#C8HZmU>z37*x*TYpx2xaMB&q-ZNrb@!zzK%6x!c8Qb0k
z^<({K6>`>r<I8k??4u5{KW-ediP<7;B?9V(#V%==ct*h_Br9Tj{tXa{V+w$b-`KIi
zJs0OZSWZ0Xvx+b=K0`!x^OZPdI3aRb!VLzq{*Xo<{kc)h)i=go*`bpglqYu+Zzo0w
zWL&>E)FVcV^X5@s0UPRD1n9-)1ES-q^}bB9ePrWo!#sxnh@`rV_-*PkRr{X)i-5Sk
zq*0c8jlE|X++GlZRGvb(?N8W(;j8cz4{O$3aN|iJ$_JJ#34`u3(pzq7Y2(b$Y_q37
zs!Aiw6tj<}_z*ORLt&>I9%`p>ZEh}%%fj<*{%s+!erHBBveI_qg@rT9#%3|%To%0P
z<KD)l^OEAvf`tfENWM~&v#@+VJ?mFc=3WE-HAhe0=M^b`>x-vgaE4yoGLdQcg@BU?
zQE5ha+<BA%Wn^cZJj-*pl*q_#Whce8GB@gTcyI5P2xJ5KgClm~pAndJ#HYEu{rAS<
zt(C4H0a8{Epa|GsK_wQnEfh5xh=7=3wQBabnOHzo8CBSHZ-FiyZgp4M;E|R_Pz^-Q
z20q$ikPRqnUUxFW54DSGSNDYl?P^mVId<Cot<H-N120YM7*h2EGntBIB)JSj+0uyJ
z6cPai=LLd7v-(nwJ#q+dM64|UiU#u@IIb*>?mFA@^J5_xxTuE`K2{a;KCa5mX<JdH
zg$Y;yC@R2F>*|sdo<YBS5*9<Qrpw2H55v##o>OVbEk-xj!tC)mPKV-Dg@AB6BPB=6
z+$6c8kE-I|AC1oG>;EKvcsja=FN)DwJ!9b=A~v@TzWR!(t#j0vT$a}F+a^~6GOOkc
zU$o2_>ssqGU>onPUjscL8MZR{@}s$LTp%=tsznQ&NaB&c@0eySEc{*S01eWy)|S*f
z^?qF|1N}WK5gwC^orbCjjcTw<b@1?hsgGC`LO=N?JYH^WVhEI~^I6@-)Sp-idO`=U
zIM2OX`Im0tE1faKq^%_FF`WG3y~rAq3P*$Y%`R=_<^N0;VN&s&J7_imv0JQr@<<k>
zXkPhnzKIv01c=4Sa(~cxW5(Y1{xKZNoiXa2J08pDBM+q$%b`0(rKdD%?R70gsw)t7
zI>X+7f(OxBJ$ue4wXYM{x*dj(0%XO0ZPO`Y*t;y{`x_gt&HhzZguEneBr~aLV<>~M
z^EaC#PdRUO>$q^x6xTDbU)iF^!%3&CK?lN|zrX2FvSK&u6`K`&i>7uFgKaG!>l`lZ
zj+E@a4WF+bYI=-THKTs6YdtaMw;XiIRXYsmxc&GcY`k2vT~^$5y{|Z}=4&pUtMgAU
zhdp)%!lCN>uf=?YHg+G>N?<;`o5iEtrkqk_OV82cp&Vc*e*(NHz}^mYFE9+BD#64(
z9=EmuE`vhRs%s27`N9%U8yHYX$0BDpVB@rv|6~d_$r;KdEeo=2XwG_hoqHu4T_nKu
z>@CtktCTwI3uZWT8}v%3l$IV_D<YRD=hptxdbb6hqH#!6U=#|*6yP}NfxEIj>UDzU
zkPQXVDlpm{(?N;VB=AxBN##2bRy_2y^J_pK<yG60>=x)U=a^(fTNPF{z4a}@hvZ)v
zM`bY^=@RE$925Xw_1POF&)9-=Loz<Gc>HhT=(ky4>^t&ffO6e6bgl3PVd{X;)%`XY
zJ;_e77xHw$AtT&qsHNFzoRw)y?5|G9_^(E`JS^Jol>a|05ldGBU=&z%aS?&X&TjmS
z+i~wnlw^8CWiOp;G#cA0^uc>LGni#%H6N&Vd6++qZ-GH$X>7`jJ-vtIbwiiB9i&`W
z0Q9NM9aL`~pm(LhfwWQs5stXXYDPl-c@jKQ)rsV!Ontwd<(|VN@o;PP?tBYI4Z<1q
z7ldR=0IK2&w|hpQ5-M)vOc*K{v{gE~(zW9RW&R!2{LJi4$NUNHE0ttE0G)A^kN&U$
z+1<_m=^Jl8tOJjJw^TF3ie&-e>;lJ#lznr|F(vj2wV04Swl;9xk7st}pSBtOmB7V#
zL@Gdi-4OR?qC&IgeuKkANEJ$D26W=?<BrH>zK~<B-F4<BJWOiZw!c*Ya(8PU%}#{t
z_ER4zfCjJO?Le&T5}u)m+e009bKH0N-T>yYWR8Y3+SNHPB)qBH|Ie^|2X=v4CYS0H
z>`qdkHY7sHZE`VWZ;<oRX+VXHpY+_(wQo+G5lcJ#7O>UT<wQHugm8LX8vKyq>&xuO
z+Yk|||9w-^i)Y%Hv}!#839bqHg#$rg;H3%+iSAKx5`r}bCX8){)NygGxc{dJYjy$<
zQ8qQR&G$a~9iCw4N*N|WPo$38*VUQ+ZOvC=v~1<@Se_?+0tQ%RHqdJmBNtp-m4#lD
zWRFAA<mx}X;=@{uG38Am{eQgTf3`yclxr(;(R5}lC<_>~CjR4>aey|+6P!ADXXH}6
z^Gd`VGWR|CR=hd6qbGxC=&50<D(~r=jt`VoE%H>UhLr;dT1QA4qmJO8b|YP32mn8x
z4<OWF$jNK2kyC<Hk}l4Hqe6&<efd;)^2-hGXEFMfysl*7+LCPwI7%~Btdp_+9+PFv
zxX%RU7i7fp-Q7=b@QVO!3HDDV^?H4JB}&Ck>Jo0dI4nJN)NE9c)k`GzYJdu+Z$Y5M
z2v5;GAx+Z!RYH!3%~w{U)o^KGfG=Ef2E@#imHWEPo1quBtQNhLaCRg*hIR5C#Bw@<
zNn=BZAKYqAGvfSoiR=RSBINXYvn}AG&DqqEBv_{W<N#^sv2&u}BeOaZfYF2D1d0Dl
zwAT%DMTn?yC4qlQB$a~q``y)XT<f~jAM_}!6FL#2e_%`Se%yLRa4|dB*^$a3fNvYQ
zcc>7Y$oxpQ0{E8E*Wbpt`#CLfAL+Y1Mx5ps3H>^Z7+kolm+A>wO$MScQ(aoRlI|Jb
zWT#H1QWDf~^7=}r|JXot>W|<&`*nt`RaQQ`G5m_I8R?<iE@am@ftEKXnh=w|Fdp>_
zfH`rySrx<8lMuWtNKr%4f1qB?1ab=Hxg{M2p8teh>Me5O-oDrBjHdGiz?U?HTHYw1
zvJGijI7_~mm_J64J&?Cm&eNV+!y#{R18D%o`DzKvgJAc}y5m<;u`g1XI@>zLA3L`H
zaLpaLM6&j|+6+J%zA^;Qb1`vOYIZJfFseP%GKu}hXXGp_eRt(WN4R6(Mg#j}+)sy3
zy4OJC+e#FxlAH?v-e0|__i17DDsUUz(C(%hA5hx+G-3Xw5*e79JFDt8K8_w;fEv=G
zJT+)NA?KoQbP#jBh&y^xUOMig9_97}n%x)uZqmR5noC`cYD2y4QpcmJufl5RZoQvX
zsQEEt5UnI#fI<w7u8Q-jkv!P`!;xI)yxYC0j}cL%62L!8to)8zQ<@x@El-3H<xVa&
zXQ`#3t;fSQgM%&f^?O1?uLs55gXTKm)OjtRgI<fw1rY|0>!8uG;}bJ1(qOjX4oKUJ
zzZgmN$YOmF<AI}PK<mDRNGHRux~{nLyq%FZP<=HvYLPY*K6Q$L%z%QReaUi9u!Ti7
zEt-awySPa>N%m4Ze!Jms13b;{7Nsb=`+FCowDLivC^&rJ>F<Y4sl3x(R%jt59y3;L
zL)wF-)ofT;$zvX?N)2vU6m*!n^9uvi3PiZoDdn!dQ}}3V-}3l^V-5PB_i6(RJ`r&_
zU;Ap;-kd^;G=y2zIoF268n)lTao!MSnGlZ<N}0lLgJzL}t7YN*J9Kpi!&fAIp>nP%
z%oh@HM_D5Dk-Wo2N1c9to+Q~MK4UeD$$m|&_W})ETCf;!IxOmj_I+2_(SLw&Z}kLx
z)~_)jFlJ~hD5l^^0<v+bnGBV+VV&sSdk?yafyHBr*{je~e*N9<U?Xuo-jgz1xKQnD
zSWejF40De><#(2)GVUuJ-_qwU!2E<QV_qQylQ;v|O_HK^bIS1PXWF3tM;y|BDM3BD
zE(yDNmQj-W?K0!3$Yx<lRcc|sGz4(v^{TMMgweR3#Ur~%!ryEc!B7Eqw+f!a@oKI&
z=)^BnE#t4Wj`XpUpM~V}<py?-f@JBU#Oc0k%r+-fLWv*P$XFATVdz0qZ_`hjMvK_=
z*42q01XCF~lQ!Em*e6;<!82lQtxn8^@*pDa=6j9+>9YhV2=lO~Y$>Rakn-iVWDRUm
z@I29>a@hTMUFO$5-|XMXt=9Nv4>i!>FVNwzsZo-O)9fuVq$$IdrZul%Ak?yNcYSJ3
zoW;GkPY5^IHa~eI7BHg+3A#7&{q++>LkqF0e>Cl`Q?ST50<V1%GcH|EeKHZ<k9uU@
zcKn^gK*`9Y0f*finBCa8nvgExLWiM(p6@?CL&yq2EiDwPkBj-v8|$OEYY@)xyM<fu
z|FH(kJ5OiauV4{zJSMD)u;ScS$0ZqPF5flZCs$EBIA&SEO6<+ErDfXDLN|ep6tVWE
zJzvW*50E#sU9z`|O<&tbKUN_(5%p+9i385#3%n9|TB&gX8}dS_D!HU2a$A>QdqsJQ
zj~mtGc%Qp(ev->|w&TGdanF|UH(ZlFb}`JKd3YrnF&Ur9Aq`KDzD*$A2&}#)p1Ddp
znJ(E}i%Tc~nKT#C(m?wA@(8(bNqP=*<&btpfb)yb_V&^!)7+)amKNcXrKpyJV~3)f
zJ9~a;KqpUo<o0Q1j>h_}iw!`O5iL=CWwYoW?UF4vM?f#t^4UcuMq|_;dk{Wbf>+H{
z>ApWmIxuV>BvpNMyLukjQRMG7kctc8bXn&oN_5f?T*E0w6oH(}xix$%hsi9|qdG7s
zBFAlp+(%Ztj=A0|g>H()CJSN>J9|o<^kR4lMH;oA0}!Zl->&K7bd=;z{kkm~iB~w|
z8nQ2pxP^ty;dX&-v=j0UN{f?$O(4yv2<m0X;ru)fh$Lno8bRBoBrVs_(piNljQ6sj
zryyvr&>Q+W^>KjS=Y2yMVT<4TF)O;B`?$7Qn4)%*yReTYKz=XH%v1B@F&ZzPFZS8f
zQ95yXUaFasc@S2~!vh4Hz@vFXNR?+S-0&W{6wJ$<UF9a~kKfl~K+)Kb84xxRv>HJ{
z{>_)<M^Lu*#6OUSad~G!t|zx)dyfS@v-1aFbTrutJTK@bQc3rDCa5u`r~9=ZY&Qoa
zP^5*0`ZY1W=ykEdNy$SHK08?{^CYE-k*i5r#1Tc_Ba$kbR#)P85cMh`+&&%|)Q5Zt
z`&NZW^rh~CHm^DZ6PoL<1%%r{y0NlKShJ`AFPH&M>Zk#l;&`j*Zn*PtuINeo_@~NY
zHnvY?dwHv{ke@RUN1-2?{7(HRbs_mW6vp^2ctC4!l*0GbV!`)Q@t_TVf}TgCgT^vd
zhJDRj@OVBjQMOO=1d&Lqoljn)gMz>U5YUot7}$us2aq?wKsUQ*EKQKbh3dHHdjADZ
zyXI@(BlqJK7}|?lNzo<GoJ(+8ZfP`%5>-eEufYe%Rlx@XW7~E?9nMr!dl=QjNNM^z
z_1yjPzF82^j3K;$QXiwI;^ujQby;HK=N2#gEG^TEQUQ_i&zA|-j{G#Ed|jiu2o|e|
zobt^B>&n9qlL`~DkjfFB#n*wW%WI~qs-O7fz57zYN@rQVfg9;p+i$u?<w*TGhRTs?
zsZQ=mFRG5h16ci*r<nrIiCJbhj3<d77~&9r9^A12s4YZ9d(F<~VNRTv8%T*LtK7;w
z14-KpS$t#xdAzcK@gf9luk#$Qarz?Bxd8l(ki5WB)E7>*lTm4_axWgq=KfX-WD~3=
z$X1N#5hH+~;oIt^bSW2NQG|eZS1}^cInRCSPCC)zC&fvJQau)^ocj^yy>%a|JyODF
z+k2sn$uC{!A)AaVQe*&KK%&0@2x?rz+I>3_BZy>0Xl$e=l^$;VwcSQtAxj9iecMrw
zs|cwvHQfVoB8G6#9dt(D9#in0PAD^PwoWW|R^76FTNq~J*ui&RD>;3>#lD)q_UAo#
z;}%U@_lLTKcR}&;N4|D4OZTj)y#8t}4OZ_AA^8PM)fM&nzm5aO<>cJ!6(}*d44qoy
zZXbPoM}_WZh10T0&Ug?ryJq+c-+>F;XyZ75jc}Iz6YyJokRaxIbc_|%UgXGs-+my$
zEIT3Xq0`fRyJ434oxyoVo>}RREb6rKex@4l9p2ylVjg6bK^#7zgxI8JUBDlMIHY<t
zSp!Eh_uVKu3*zvym>;l8ckJa}OK{HlZr8f6p;w<26s{a11laa@L1uTRvDa~iS<3oE
zP&%IV!Ou`ogl>a8mQ2c?B%j&R7?{Wj!s&gLjhjlq+}m+;Y=hD2<nkhhxTq!L>~1-y
zc_&l05=55lmAo|GQKT7vwO=URS?@CGDDv?s3Y)wK4wk0%CgjicV6Le{j)ZTUtFvDA
z#IQ?n+$NiRVubT_qCnYEI6;ZF|Er?sbt+|DC}5C48rUmtkDX**Vrug2)7hqCG_({*
ztG9S_-lt-4EBL8fv+#y0whJ#o=NXp=Kjg`Bc$z}WDtC0wE25wpyc#0rMmROhxg;Ah
z6hy0kCJC0}BG#$le14Pu$i_K;!MK4;?5gY>k*FfP6ZazV{C0@zSVA|aiOXD_e6Gh%
z0D5d<8W!OEdkTzQ0C%p_;xLgYn)&*qk&nA`tn-1BXm$sShC)$z%LRW}W2!9nx=o|%
znURY_X`}Cn6}pw76g`r~wuYiY7LXsVa8kf!!#{zFc+^bN4(s3}E^WoHr_GbcJi4$A
zsC(*ctvvo2pq!?A^CMuqM~l7v0}OypfsmThfl(gfehe7*w%Ta>?BK}a8}9+3G^8I&
zXfk@!L3}8;EG$s86n=J~>2mSES_H7<T1NZL=_0wtAopN*kCGhvd0qd}<LpY{^ApNf
za>_4fib9&3KihZQk}QC?;$m`o*tH{oCD4l5H(!h5P8#GxJ&Tq?3#h*5yp8j{r^}%E
zRSwSm4i5Gmm2(1{A!r4F05Iz_FsofvZAY5rfzwe-h7lyprUqyKKcD*tQ*ugeVnk61
z5mrS(Dx;&WnrPrlHE<dBrr|U_z@ikWByugC!xC1y3nOJg@%-CO2d)^oDLut&k5?;u
zbk?%XOpU>@#_m5n&5#ZTv&i6*g|>R5#2#^?E=q#v9J9-$P4fRo$U=m8^5Aw?00&UG
zJ8TZjCSv5G(S3So3J(A!g~8$z;M1SH8yy1xp7^Q*i4HsgFmt%-Ig*@U&cB9hR$M`<
zvbwb3n1kQR7v$PUS`U8War#rcb3bEfwYZmxK!ELp)J#5|b^XWzCc(D+2fvS+9P(H|
zE}4dZcUv#p^xkVxjFA)~JfXQSw$TgHDU&O`tuzysmf|@{N49$QS*H$bE~f{oY?v6_
zu0<!XP0S*S)y(2a{r~b?dH>C5w`a!>T_ollLz`j~dF|C(jMhx+%n6l#)V_2)e;oFF
zWQ0=_Q4xkI^W)1vser|e2|)bs9d1gJS0?~Gv-7`DlUh(@DKS9lZ@9AK6ZSv<dLVo!
zEC5QF@m}Xf^DG#3oogdCIE>p7BQ~gpraEi3-XYr%dSJF@Yds4}V~@%4X4YlO8Nj0s
zDFQA`!e0;jZ`I$OE*@4?ny@?0ciBS=II}TCO{l?<y?ZR@!{-?*9hGEZ2LA{Oh-=hQ
z<k64|?FD+iOllEeOjqRzj1kG5bmzj>VEtxFeW(-59qL)2_Gp))0)n~4ZVq;4yNtf@
zV*CVv4S2+}+?gb<*(l!jq}fUynwd6KC?4Gt54)T28Rewv$OLFBIqu*hW7fIEswVj$
z@Yii1rI1&N#u&rQJ6-$7Vun?>c9m!0sd5T4&W06no1*0QjGC)>NzyNMc8d0gQXNYu
z;Kh4m$^%+)SSk@z_4iD(9rXc%!!3=@+t$f|$eeU;-C}yhV#B|c6NT)99Ob00ikX=v
z|EHkDFyEn8)Y%}Ka;<#v4S%l!M$7!HINR+7X&a&jw=MrqiqV7$BF<DH7V75w@`hMK
z-lFALBy~y7+vX>+G^_{y+%;Ctgn!Dt8OgQJRD)BCNZcVtQnl=)0;k{Woy8u6*-kxQ
zX3l;j821e4YtHPEmun#2z?v2{y%G<o!GL#N%vi=ERlF){SEXf9?5bm><5Y(ofy3%@
zvySd=FtVO|lNZ)Fr>#3i&SJnf)8BaDuRAZRgt*AIad=RQ91!{TdG*-6=?nM{`^h7n
zln>g9F8?LIllSXt_qyhs$uC^y#rLpxHV;3$ka=lHVeCuLvm$X<#o&Yq0R1S$9(xP@
zOe8Ms+^Pbo`;oDj=%oZuj(24r+^$FP{1w`3!vFQDK1Z7+HQY5}f(eh_8gxDH>7}j0
zzj!3V8%VL<*Wap>f+~05yVOq9t)5blK$w?W2Usw%{OP@J=(-vZ2o0}}{q)I$H|8X%
zLxA3+r8qrA;n<a7%y5xaOl-*TS<&BelSEhoL%<<>@Uc_t<9DlF2iC93lNb=Er$7t{
zL9`*R+T&T*TlA9<A|!-)TfomH!XGYppjnKdbX++M%lMQRR6r{qAB)y#_XFJ0jBA29
z6H@Fo?<#V{F$9~({Ib9KS3d<5%m)>~ECTP?mkr8|n7t0G_D;>szfSVnZEQcL`O^YY
zUvP8+U_+TjtMP=!4-UHG#m}#!Bpi|Er)HB{HX>0<^4t>I^Aqi{lTZWI_5@iMJ^<+l
zIFIesx0)Q?MEy)VxSsyp7`>`uf3OSRAGv1+TIqxt+>Ll+qh(CkCr!53`Rfi-H2P$P
z?MQr{*|ZhqRW=}2Lf@Z}9^56*cJ7gJ;mYts^#hCE>j%8$Z~Jw*?a(W{indA;Ul2O#
zNMqqXgSu*g!x-u!+DjLa{z7mFm5P?*!*a%@8fBjpDQd_+CdmUSyUZ~iQX&!c7ZgvH
zIcS#yzau)<o~4{J#Dt1o&Yvi1WEx|V%^CbI`mR*#L|&%d2?HbKcL{`l@F`$6F||gr
z5vqbGCrEw7lt)XU-=+MNg-UYvHo)Xw#H8+ihCW|^L0mG8*0EjkG{{!A{00A0VR_u9
z)EHogk)gnzk4Nj3lZ%xunl!GWYT}OxPp_q0o8zuHl>5gI1PA&klx=Quq+}TO20H@y
zpag-66G%XjvvhbKWAwF)L9y{kquXZlkj_HRV^n5<R3+(x?Ei~%te&Lqmm#V#w*ko>
z>>YRi<h^Jc6Tpcni1uR8{h6WZuZbQmBKHh9XK{Ndx~ZY26m-U5{;h}M+FCwuH;=p$
zhvD!Nr|^#R;#6m!?8|#|N~O_AvUb<2PO2G3B?7vIF=<Oj4Ysv$8~iu70j*D>ZLSfu
zXp4#O%t#+GzdeVoRo@fcGm1M3B__5F)+vZ~`Fh*WM#k}R*b)G%uT}Gue2%zRwmk0b
z2)XA6N@o7&J{O$Xf|ssBp})2uiw(2~?*H>r`yJXL;u9;usBP~KT~pCD0u~rN`aqup
z9G-v8u-GmlY4XQ+JET6PI-EQcwUn06bRO*21816-OQ8ODaQ4e^3xA4M5S*YOW<3$2
zh<2Z~E2L(j)Z`ry?9}mTAE$juT&hd#*%xMTl;^~YT`j8xsrc?1VZ69!d(cFL9y9Nk
zp^Bgxnv^v!(?kCP(%lvlgfv~7G(!fh4qF<+*7Gom*=R;bYButp8bJY^`myihG)qI)
z*)b6i=KL5_g_01_Y;v@ryj$Njwu292s4Wavr2=>Hgz*7RO5e5-j~0M+@y;+VgXp2q
zw50*L)*NS<b23}5KY$uj5m2B54_rlqPQ6Tvfpt0dk)fcp0}1^n##NQ*wfxYx->zGt
zH~L!SkXuQ~q8gS%fCH&M?aAK|ihE{l;`NqjI0~ds7~~Eil<el?Tj|H^6?F;NFy?rv
z=KG!JD?V_R!2r1$q+zG-<&Ko8&ZU3v2BLv-rJ;jYAMA@#gK5~#;5=!63y`%V*}We8
zHcM!G7?No1OYWAl(L`b#dV~*kK+XO*jQry}KQNZQOpbss`Loi5n?#If4<JIN!0G25
zxT8R?-3oz)^pC??kiS9Ot|=a-V9Bhk^N6RzGtP%0Cl9NGHJGOw1Rg*u1~^&b8FR6W
zrIFb@CS3K?msq{DV&^W*J|*D<qjuXEES&=1bX=(w_l|R-JCwE%x3k|klOl_uR0^Fb
z&cWKD$Dqc=x1Be*&=%`>3;m4d8i!B}7td!mH#dyZNq`K-J0^;)4)JQV2MXTJWIXvp
zDEFLL`-P{cYyf&}Vj33Wf<ZG*T>veROB>7rlL7W`m&Z9803jKb29_{8?<Yx4&Q1tt
z%=5CFdrgcyN~0#J_?oUHG%iREDDO1+S-H9n_jKNA_&0V~FP!G^qq)RdEcEWukYWhA
zJ^V8d8s?!SP|xMFQB8dH+Q|eJ@M@p8DF;goh%#7Qg@K~Q{JXzT%$(T&OAY*YVHwn7
zAXx+3KR;dXL;|UmJ+1^0*nFCSAy%$Y!&eSB0O=x>`$>aq;xsG`Qh%UCrv=kl!N%0~
z?~4_OkAh?*<FjkViiA7Xt%Lfa3h^a8n*PpT4O6$L5hHAVxDQRAtNo?>e-NV&Ykv!i
zJ`Tt%6kJJP5SOO%ujqD|(jZvx1N6!WsXUR(p-z=*tSHb~6Z&INtS&5HRAj=Oz|-)!
z7{0>^rfmU7jne4t%W%-4{rXf)WHBEtH?nSJvaOX6BprUcv81lo;>XqQ>_NX7{7my!
znamuz`neendi%*k^(PztWOD$A-Jk4gGlabnLWk`C5S3(E&G??5=__>NeYQh9ykY2I
zLd3GRP$eTNb?lIa1y1ic(#qqbp>gBhbUz7o6(^zFz7}(<Kv8Q6Uv2gwH8K+hzQg}Y
z5?|@f!iDP!*uwYKda;%d?b>zWfz<pOxF1M%2^84*fP8@6@RibN#6h0i>vpXBPoe@|
z*K1l$`BmuWoygY&wWk*7q{BTS1vIaAFzjGbAN?8G+LAW;gSEWYU(J4DX(4n8Zc#=S
zm@)<=?zI6^X+u4|UVAEwUnc=+6^a$yY)^R`NAj<TH|!|`T1<!wwP80$0#y+}r!+cm
zp-XZ;<dmHRN~3!{dq;4oZ2~1#@@9Q_0=W*IZizYXsGD49_vYQ17M-%JW85e<QCwOB
z_6I$EPzFfGuKxSdO#>`N|6;S81^=ay1Kc#qN$GdAIf7;nDOb3mb67#ty;&*vzjxW;
z^?zG+{ClpyKf(!!xN(tRkQ^NUkPix*)(msY>d`K43KTv!$icZ2l}X<Mn&g8yIc_VY
zHirG*6C}$^9jHEonTWg=Gd0oqo_=ANlvNv#qf+5ry%-(p_alSwHXJ$grSG+EP#e~9
zAb{D|hWkinudjES5El%I-i|DEaN`zcmgTmz7Gc<qqeiJj8idsi_E~ddi^~VWrdn%?
zK(xZDiz?~3MLcLso~^SwzOZ$8zrbcYfTZ{|mm`)t%IDG<GHFQuY<^Sc-5NKEg{K|R
zV)Y(%jMXLDR5N8muPqVnpR&K11u=|lq?YCgo#d`{rmSLu&9Z#MK~ZJd31Kq=Hn0xo
z`WNC9vX0Dn(?N9tKaC{_BzSzufoiQacq2EA^PG{Bd5c=M<v7zBtq)9e-DV|Q&kE?s
zV(4FxGke6Cy=Gmp(Nk=|bIhB;cPsd#!iIk~3ag!3!|n3NGHC91vmz-U9J$S@Q1aCm
zhrl=)rBkny5a$}GLF=V=CjI!zH!%=*3LjzycAo~^eHJ0d0qxVVvOyeRytIDRq|X^n
zj$Gjc6D@$JNr^X1yBD0-uT7^w7AUR~A4oj%BX2VY0rlC$?8SIl8F*Fr0Tj)Qq9S<w
zD!iHur6&LYHXCs61w$4*qL!y|Mw#cHvneq=*!i2cO`xbFyoSMxp!{J!3X05upM2QI
z=~cpWhMNO>`dFd%<18IsSSzH58DyAUs6cKwkom>tVWwD30|E;O5}YSjXa&L3j|PsA
zF+&8uffJK5?vcHgTiP1TCrxGmhdi_MYhxCKe4TE&T(Pa0XMPW_!rrI)YP8h~9+D}-
zmciP<qrOncu-8~tT~1s1cs!OhNhqh4Y>Oi|!P(gqf*vuZrX@~SI>NUlhSuMT7~9xM
zyEp>&2Lt=Y&uHvTuC;MSlV<(wuOf~ZqxlwfW1;#npduiFAj?=93@8k!oY&2naHF5P
z#U4bggoRvkh3@%NdxVxP&e^-khn2fkk^L+V<oLxQ4uXFOB#OVzB1@H5lsa-{4GS|V
zn6Luv4=^U!Xq{jL10|Q)tPc^8@k}`+ZvZ(Y!C#;8xYA>QcA6|W>{Ucod9_+#){gbI
zN2;i<YE@mW5a>Dk@fA*;Pk;eC1zjXxHM4j40B{yB%b4jDS=-dG3KJt)4kwMYfp}jX
z{i!$Te&o)QUQPsA->OkyVXat&#fM4;vpWH-d9Qb5@~S*Ze>}Rrl|KBM#=;*mXzh-F
zvCZf-hzX$rWh-U4!ITK%2L_3L^l-G2CyV2KH<RFc1fM$(zAgq$c2$atlqyE0lbsfW
zF!JSHnvi&Cq_)`Ot${em7ACfOQ%RJ7ka6sf<5g>wZWDFJ9b-76RJ{w{h@e{gp=g<!
z{ho-3*?a-Z3$yMF*IW|qb$?hW1yz@`j!?vp*$z<@oZTyk7|)NZ_!aD{O{?W%7%kwW
zxw8Fbpd>sg5Vf$qGW_e5_TB8P@(p+oF7`4bWm||{9ABdl!Lds(`&e}DJ!F=*nSUir
zFtBw-j5Q~j;<-f)ga`lk2gMvk5R741p=!@f;ak)bxfex7CyCZ~aoMTE4L)5t1_7po
zKC|2efh9c&Hd-%Qwd&_aawwzYIyx&M<+lB(-!4%gYS%c|eoRHHEoR+Q*2c}|(^sK(
zSYk%I;a8qtuFUM;F~Kla%=;KwK)OtI3jXrom*4S23r4M7>&>j-)c<xQ9j&I@8;PtI
zB=J6Dc_OdCA>0=&D)hG{2ag1@zlIx^(w^ue0!mWtJmoNvo=y(?PPL<5JeDv(9X-`A
zd^t><!qqs(poz!c?Yox!=~U}EHDd|G$65542@&>09&5s$MEb=5yx_h<Zrxb9C_&XZ
zm_<ofxT}LmA6b1sDoLU-f4@67HW*ooKYfRS*5~gN=Of_EarTy~o~ZbpO9Auc5zGb|
zujAK`Zm<Xs@(0CtAH@fNSciQdX1<kC)WsVa@m(23&ceTt2iy+|&%*w7U0opP;Cc-9
zz>zeg<zA*XZQcM8wnJeu35!o)D{(5HaRc~<8wj~cF8hsJVCgpvUKISjS>^QV!?mX5
z6x&9}xD+gi2`z}CpLzOJFy*ciBN>uj#Xt#NhqHQl<<&pMPxqD~aTyfe&J7%nqq{3o
zM)ViVz@OsR!lBbPxtfXJzOp+4E+L)P+v56{`D#&xvtiLA9=cNvdN|qzxZlY=9jl}6
zQt$OzGf}07e`A-oHIOE$mjWmZ-2zA}Sln6A5!-1;Iv~l^whu#V#Z}g;KNFRXgk)!v
zdZzn6#G6}eNgr<zS~3ok5}PqEf1(Wu`VNAcpHZ=G;K*rW^3<u~*$ZeR<hV#GU^4Ok
z`Il~`v^kQr#yqr;Mx(VLUy8SN*=<<K3bLfq|Lpg~8{bCvUs_>2AyS=UNBrB;EhjeF
zwd#*cGTSAsmrPCFHvSuvY0dl|4mG*t#aLE{Ctma+@!wD+1`$xT_Oc=o{sJ=0G#b|E
zm5$F=u=?xG@osd+N$*XS3Lm&jKTg)L#j{!1foN@<kfpgN#XAc!@KH2wbT-jjmJ%P2
z*HK!L51Qx42=BVEyQQZNf0Z_`+2%2iPUB#9QB31|ih+sAO}7wZgYj}5x;|FY@D8Ym
zFh-bASyB}yP>XT#KkBlw+@F16c&=7!5@152IJr^~I{cISYl8@XF=~7V^S?V1!R^s&
zJC!kIe3}-8v}{1BUSi|ub#ta+)UXJ<&QWb8y!s9_eQ2;KU^*0<80}k363$>580Cq}
z$c7YsdF2rG6H8M$Vg>WV96RrN?=uPnBK?(G#p{?EhF2+7k)l=b0aseNtpS<Q=b{XX
zFnN+|5mE0@qhoJ0Xt~;OlTb_*!r5`AxyoZy<yfxxr-!oVrS6QjMW=+!xYL1fkN}AY
z1Lt80hpsj|I|kQp5U^&8bv1~GX&?qDrvC1Y+(Bo~Q%BPf`CmuegT(Tqbx{D*MT6=n
zYZ)xgks}V$4AN0%f6_hLAVGWSj)ji3e+dNkk%Q|%$W-NKkM>ob&`la7y%MyH@HHh|
z8TexF=Mx}^dUa(6bAR`vPL!8W^Y@69Hd&|{4~(rz3q+N!TG@GiM!TqpkZFbZf`v_H
z^%e?#Eq89bQrN<V8<*o;%&{mcyYV`oRVfJ@BPFaz)X|r-420_d>!{4$7>03YP2HRA
zP?%=sFrOn%Bh33;K)zNFTOc)jHXfQQdPebeFjvh2Vle9Tk;)IU?)Pq(8TWHW^dFik
zJ`8nb_~7f}<*4VPH#+6SO8qF|n1%ObUVNd!D8@lsVuE$c@=yJ&S?7mCD?`4$pQJPG
zF}~gyLz()JGY39HBU6pSj)-hxPYNLp)G(>-UAz<n8_rp`nS0b?x0soWK#b&fS-}7X
z=V{NwF<UqxW?6Mxn3hB0$EuEL4B2+{dewj9UIg>?GmwmbBVk&4JkIT}&-7_?GL|E(
z0baYiz5Ua|ww)hXPF5H|hFq<X`knJpDKw%JvwEJBW>DofrgCGP9P7AuHC}R_QL{s0
zTK#Qv(eJ|S&w6B-1=efCrcigEx%hzl4MUGJy<6zLgE>$eP=SKv+o&=ZqEo|rE^B29
zUh$MD9=U~sib&LbF3?|pKFui@?ifB({|-g#DR={}S?fI_KU5Xv+wnJgIJOWdYdBjr
zTiJY52yFieiwZkx8h1k&Gnh2Mbz0YDCA|C8ByQo|e`@yEbA|?@=&}Y$H%vP!2=s?=
zxCQ~I>rf|HYnWHLGq*ru_~)Tup_oeiF?G^U9P5LW%Fs4}g_MgNcJT8nfM+?rB$RU5
zLkQXww)&sc#x5alK&f<x$iTwAC{^iH=TjR(CKgsNYM-ZPt|GBad4MJRCcnnNquKpd
z8xlpL>6Lerjn<+W#_reA%7>#B5VC(*T?3AYfRw+k;B-g!`;OJ&6h6}SVvkNQP;LtT
zl_2BvqZ^{|tHbu<;zyWy#P~$LpAL#y<5KlmF%4oTJ2%PKYg(sgu!BP+V&;p>rf-1M
z-uDlVCIFV$F;@~1LT&dTzBVCxcz)uS8DY3IIWia3tHtTq@Fqh|pe;aB*ltWU`}47p
z(O@<u{Lo1K;mo9W`#Cuk7PZFR?I`_aFQpo>;eR0z)G`X$)@u<DQI^hqTGSO!OwGgJ
zjxH0-LM*mLuL+^6)gvaQ&e7^H9eXE~onzF{t-w8ytu6XBGb>(^f0xg5zn`U8>>Dc<
zS0US=fJ2TY_c7U?@AymWyrOwNq`km|T^4fXFhN+nskxcm5QTbF55KrfVEyi!VsVkw
zef{qWNrl$ce_`To_o4caq3=qA|1XamZ;t=hVa;G`j+qQKLDzpVcXfNiT<rv`jyK*S
zV&uJ@a2gx=oGKm&P3GpCE)v#D>k3R;fw%T1JQD=_c~&V$mx<!fS8VGHtno#aKc_Sx
zh!fJoBtY8td1h_@_}Kwo`Pk5d)d&uL@aV;K$eRCpF9s^v^;WV`$YZUn$>%=0)Mpvm
zA^OK@nk#TdQIINr<Dtqb!W2<N*1GK20+AKPbtq}&QFKJ#+fs)2IG}PF%4+FE_AP1*
zlzpK~RiUsm0-v-H@9x23VIY%oPeh6qjt0RvUv}z^*$|DeOMC0l+``gZH2WsynAyfT
zmRZ~636hvdUms}^z@0@NVkl3xdN=FO4)d|aOIu-a6s1u{ZeArnC7xVjRtoaUMG`Q8
z>VL07)ir3Ix>06=%Cl`RU0dHaL|qiMI*uFkIoGq25|kGzjeln{O^Bw5bZ4LW&Y}-@
z`xNA4tD@oFvMj?r6%Gw}6g11ey%s8qf#r6Wqt=wSluem76dA*aB>hlm!nsHgch4sY
z?tBRFMu(sBTRBz3nt8fH|6Fp7==(qLX<=Y%Wk}~M_0P|jD6{&SwrwbKkiFgTU-M_@
z`zm|<^P^a}i2s@~bzLlCWe;?5!QHg67<i0%zD%^9VnrI&;8gsL*IlOGN`4v*QeOHh
zZW+t$@G0<KQL`@PsgH}`vN4gm_rg&>UeTiqejK69y8|-bqYHssA@U@QrXt-tR(lUU
zfkT)#MzJo=rx05drCaq@<S6kEVa&!yFBbzs5|w0-`1;{o7UN3qhgN?k-)QF++0*22
zyH``jiP<2!R@l0mp8~)FCCT3b6Vm|8MCm_*T)Wk+7SJh`H@sc5ZHNk=^Qt~cd?)ko
zG0c(T5WtKVddCIUR}7jeEH8Ie%bh;+HHWzYv+0lY+zeMdh=3avwY%?$lheb}jnSE%
z5$Qtb6($c3j+#>$M}!ef)8mz7DtI|m_({&-dW6utQm!Kyso%NfQN&IK1-uN&r_PxA
zYKKBYX%Q$tRD^}{-WbB)1Jm&j<HIX6O)h$zCsiTN*%PrV7K1XJd*cu(6Ty-!KPRZZ
z>9QuI$#1Ttq?&tCKK4hEERV<%UXVxW*bH>^*ZR;}A1b(T#=Zj=CHYa2@zR+=T}yiu
zVtzjNF*UD~VC2|ermdA?snO9JC*pHggz>PD^{be?RQ-NTaKM&QW=}5)hwN&dP`tmW
zILDe<q^r;%N;8@{H>}VSxLWzU_E85Jy_M?S==%B_HayvbOb*BE(K;9YPxKPR_1Eo0
zrKa|qXPPmyWSQiGP(X<t%&1RpHz*^14*Xz_C=-=ZTuJ%C*U}KLf%5b?bD@wkmpZi9
zuvHh4sgoT%i>5C8iY!8<gP*8qvcM|q{za$8x<!94UPOd0;dH=&KR@cdaGQeu&d4W+
z0NxaY=Wug6`pGo14i#5yS}G;A*o$VE_;y}a^WCw~!BG`ZM0ZT?Q`HPzStx)A2pXl|
ze{?BbBj2jum?|Ea+hvEHnGGEeDSI=8W@^`5@WAUtPG7n7`&Mo>c52)D3$Cj(c~XCF
zIL#d<eUM*(Goq?ok8&^0dmjU@GQ^>ZfSQ1UgDDx1A*itsbklKKqw1l1!J0gvAvN!9
zI~pjg{MNZQ022k~F$OaTlc6u|GpjovETU&$p;r=Nrv&oScBO%8d9O-mVE@HclH^jM
z(R!r;uCu^p-oqF$U>2$q9}&ZF#-YE$zyOVQlyqoLw+W@wb|rMt-`U>&Lnp+dXoHJV
zWe)l)0OtDJ?5D~Xk_>o!Tdr%Pw#IVAsp)?Pj!kUiEI1+hGqp+UfXjGwz-6Mxn+dX!
z6;9HpyLvOb{&^Nvkij=XAh^=JLS`|#va5+?&_ehV`je4!ir9HuGx?MenS8PmLM7rX
z;4HKDCPSB#-L(vv^|YT=I7HkeAhdWQhEn@Tu(iY0ln<{IrQtKT0gd9o@RNWN%p&~}
zGY>{RHzvoSDaN463B+HhGhM=ua9II(8A>G(w8i_AlW9XRS=jmMv5Z%%^^zsR@|H}V
zC6$nOT*KoDYJ6>@S@S(&k>xZi3^lYIvc_P+5xJ{SIqn=m4xP^480=lD0KCvK!7xcS
zQs}$<OEO7Ec|l*g-btAMmE$3u10f*eE@zd=y}HrKz~2FN+`&;4^m~8|#x9&=UbN`j
z{k<bkh~5wHlnjJ$O*Vy@dYYaBoEA`txcyq`GbK!!T+Oq#qRw;U#)E%5w=nan{c>vZ
z^-op#$reu_pA0c7mVud(l%~}1U11MQ{r=xV?`fQ4BXQ)QRn9P1Q9H0Xh$ose5wGMP
zN%e=2_C2J6%Da^)%0S}cuHBV7i7y<i23OgyzwgIG)h}EuCc&9)<ZeW_W?ieO&9o9Q
zt}8Bel~nb{VHf;EO%$FwZ>L}hok_2)svFmLu}Zjg+E9>OdkI*PNVK#jUN)BwjOw#a
zF9h+k$Wfo&G^6Ef3xX+*I8*R8Lw9AC0&%isy}%A6#V1f(=LZqQ2j)OjIV|c$`I&Bb
zTZ8|ugu;1yx4Uk+dNpDTzVaF6twcF>{{;H(i&%e4S*CD#`5BI?uUL8WKdj^&y_6)?
z!p8$PNB;Ug%XPGa$j>xa0M{>nsfIsJ;|IAhe)n3tT(ap?AJFlZ$Wanj5*X5O+crwF
z&Y%vc15<v>Wt^5I7_3wMy-luR!m358Nr|~8{3=0Ff<e-q*)?#)>B$H^eP>q=EJ{2u
z9Q9@lr8Ajx>OTwF7wH?!Mh8I^yR$|T#u4xzWuM6KgqjZIf`d(M$JU4DcI?wksBsE3
z!j|Ok&CTD0@SQdw%wsL6akY&S)4_;mWQq+};<^VrWzgd_lOicpV`AKDMcAPF>-Ts~
z-MGzyleBX?zk__?Z=<s>)({`SZ%$lcNB6Uxs=FrtX~4lI^*vV;11h}v!V<OKQ0BJb
z#i+s8-w`E{5ic)DF#H1l?<Md_)wpKFlB#jMwm#lP_ghq%KfQF1f}!oPIE)z1uk?E>
zDJkvvhR=Eog)qS<tB@Y|$1NzcK_CMeJXN3w<(J_2RkRfBS#7}Ku1%hF(iu3~qWm<n
z%XIvP>AZ!f5|V#v!`R^def4$PCF8`M3IV3>c4f1>_6Xtk{EFi3Z|8h8&+Q8ZLt;nm
zD&JjY;#0nDsOHFE(W6EQu5{S=iJafX#oRFGJHEumwXf|uPHiBVOo<%Lmpu!!hx2JC
z+4?K0uHh&qNGv<O*10sAv>>^3t!B{HvNwt;&9A2|hWOaCE(Z>ZURrRzUH9%eJjfW$
zqSIOVMAzsB8Xxcz3mrY*_z9uPZu-ft4mKg$m<!Ea05CIdZi00crsOC+Z3OOI<k2q_
zGk{6k5W24vVVo$MfGj85imfI$PHs*DH#Igk<Nq7pb{9urQ&EjqirSs)0F^Mbb!1CQ
z<EKpvn$}wl^|8(%G=K|&TNby6(U2vsS#WRE*v`gBG3>7Vgg%!Ronb)xgl?mvC!SPA
zqY(u*nBJFH2fUl#Mwl!<&&xiVp}7_**fWA0%-?<P*G1Y3f5esM>G3VA=k~h;L@2pU
z-ni6QQ7F-&$4g~ohbf`9(OwS^kp{~g8V)Oge5N<m4IbD);8N0K>m$-KZYa7_qKuue
zCyWcq-Qf%^LVzneH*VOKzKRykW_zOo2|522OnTSrnNV?fjnT*)m)D23K^oss{6CzU
zn)9VaU85R3P>Z+XhcQvIQ|DaSoj!O>f-3Y5qn_(P)N;WQikwng+E42ZB2v}MCo+4$
zOWbRrSJ&wmc>$TJ=y(^k$@>`^ET9XbI78n*7n)wK%L9oKUN(fP>suKYQFrb$Gy07~
zPS@eL#^(V|eu2YtWGjKsUwarkE26LG6_h>T$jpdRB&PY6V=py^i5%JIL#>=5GzDS>
zi&=9&8|suONu|ma7YP?styldg9u0PvK-1Vxe13jXqXdH0DpVJWsR=ih->P8fSi*q<
zR4a}yUh#RgvWx2xd8k5`v4u~ue@Q3f7#p+M8=ap^V#g0}kZv<+i74Yc6J<Sy81mD$
zejbEf`jNl3yLR9mO2Z*N3gN2{;Q_4owqdIZ76n1rU(o+bT4z{6s)awn**1ec9olc9
z9lbf=ubKD6s$VwM{H#45XxA?$dVHqDsm(BdXUeP$I$OYc0+mARW-wJr;c0Bna-g~O
zb*TXldAX>>(F`I7K0)5xNs;}+MB=1PCokzOYhiTyb-uzY61N83HO%HsCfj0bM7n%L
zLUewrk?20A$}n?Ao|m=)hh_Ji0KQA_k9>T=Bn=Dnb`kfT1yN`tI?|cg*rat(+tI1x
zjXF@YeBWi@*s~*(gh-#*Yyj?n^5*Q$;Nr96FNP6UrgGGr6n8hPL|^;O9kyVm*eSa)
zJ7Lk5%9-Y#&_%^js^wyRcg56wJKl3PeEmAII=%HOlWY<+$TrJTi8JJ*B|5pzC&TdO
zU7)X|yKsu`OS^1CE$^KV{|5;xs6RsV;46d}TB%xH3G+bnyjcr)t*mEFkJ7f>=!S&`
ztOiL(@Ujg%&?V|GKWrf?JWiSQOtDw<$-vxnyfuCBfPj!PexNq4EgzT$uQdanVq-(I
zu<`kyl}!iqLBT)R&#s1+=WDU06lm?8QMsv$cH_DXe>N#N$}qox^@rZ%K8%DK7Az@A
zX<c`b5Si&nR;BGx;oNzl^M<I(mrLcWGKcu|#co0Ofj@(+#Vv>}(8xm|osg%V-5RZ(
zio_@3FaNeEJu5*fj*$vl&=vT&L<L!=#2<KG;yQ~lA!LpPotgDgJMu0Q=tDy07*3~@
zkCr=XT3<4g$*Q3{&S70n&px!sPCuz1HYd14!RO?EQkyS)ch*==>OB=0S0{Zb?{kut
zoHK`-syt5y25(s#S+2@CftgOhap-{Ds7CCufdEK}Q6w%D5g+MOb71Rs$Kt5ygVs~4
z?6mr`DHm<hnp^<m-qxUjHwf5!;%r;nP+En-ga}v&Af9a6)-rm-6~<JeP|0LQSM|QV
z5L80&^%~niH{1*i4%IuSj60nA9X$}AU=3F3h>arnaRJ^MxLOw^#7OWyCsEn$spBp~
zrCUV%4LD8$e8gl*M~9_geskWdAAie64<nPujV9tJj|Rb%h@v)W-`!uKl!0eFX^o6(
zNG7Ca&BpE)+V7Brry$tWf1b_A$`a|38U6G8qpks{XXoWlSg}duF9jXfjw8ROAd(e+
zN-wy!{#gsYB5a2jG&1JiPRb64*Ur{yp4SU5Se`As)xRPDTqJ2P?2|ufX>P~^Sv`$Z
zhfx^?4O`lQ<31v~S2m-sUyNzqtlgQCElugA)olJ<aHshuwLQ=UVGb!}d1X*?H<e&W
zr$UNW)9E)20-aF0H`<U!<sK;t0=fthsal$1BK-7qAzmp}an|o8kXs=nz%r3eeFjl*
zUz`RQ5n9RL^5v=^Li{JdGU~ek49WT%DGP!torPGCUr)irGtrYEFdd4rg3}(m?=tK-
z!4~PD)g~g#e}eHesInW@WeB&IXk@PX(uHW5O?L28B2>mABuibOBSrLEdh36moqqt_
z=yy`2uh!0O9DiaCa_T&h=5?;X*g!${_kxL`1OZcoM6_FiT5hVZnUa`c%N7v8D|nm1
z)v@7p{DpKV*o2EG$Os(=@1rz>4o&G~g`qg@lhRS8GjUH}@A{@Gr6Ysoe-`7irLqJs
zCnTYa%RfMVA~-ImHinp<DlRA0mcEuT1&@Oh@JK9uYp9~Z>QFI7;LQj7MH!FW8%ZUZ
zSvr85(%{A%rJ>72^#eQ-)FN49Lw+V*oY?1RTQj`WQE!UH&pa=FrR8RH@O?v4xGI|D
z?k26;3S8#(0Fug^Ke$i~xs8kRtuj3N@8mJE+J-YT3R9EBTmtjD=HdIb85mVzO8FdC
zB<^ucwHtLm*9eeMV3NNYi|zMLT-pqa&Tm?iD*OwL+tfk*iK0&YWvUF|upoh(#l5hb
z5K?=YKVq}~u?6!~mNSc^J`UI+AOQ-Tg0z&7D#DIlv5OJp^(DG|x`CSb(!*?){NiBa
zjbD-00o@F%o>Pm<8$y6XMOEkyf3L`MY`f&)u-DcB%fZWmPh{L0wgXlkgCeTd)V^hR
zCUFrOh^%dErqb&{`(~gFQOxQV)B2x?In}H-@aOF%!ep|@tawdC@O!O7`6;W04<7c5
z`fG=Msxi7e!Qy?M&(rsBAgFz~&RH9%i!ok#Gf-+#!syK=W@hzytL@Vfl)kCIChrfk
z!oO|3NOWIOwp~4O{6Gp}=4>66f;PMeVS~7<6c8p*hHQIf`S?j;IOjq~^C`aQeVC+V
zVfm{bydc_iAp4&CLQn9pV}(vwY<k9kblJXqNnPuO-T7qlJ09uS1k4$X3cf@V^Xi|9
zL;9P0cYO9b$R21#(jZyG5D5LBoPR$(e?bu8_!^j)XYicjM7ZKoA?;@meZijkhH>UO
zN}}tv8W@dW!A_(pzjQq^frNfQ*D`KJM-PK^4NTwaXjb-b=RwHPvA^AD4<lSY%1aQ<
z#3Mve1dsdvC?~50h(Ods%*b~34DbsmN=AdsZb~FC0J#Zc9*EGrjq^u8#dN;t6^}lD
z^9B@Om3t5o>Kc#WJ^Mz;XoxB!rpg8aFP(`ndER-?UR+G`ve3M{in(!UL??MfenD`A
z>@Q4lq5lxD&ooCCYIWe>eKZ7-B+F8SJn$+D_)$|V2xYlO_@4ijSjg2UaIZ?Ju!p4Z
zZN*d_mIv))`4U`a6#@k(V1=5=EY9t;sS`J*to?E3mi^KUYR0-<-IT^H)^XXXc$`7t
z_MBZs(vdbi_{ozzMGc<Z@}p2V2bBZ%`j;P)px{~S!+hCG(0&%;FJ2nUcfDVIoY!tz
z?r2;x-yN@FHxPEj8<{6G%*V?G)p`{RvL1kq3edV~Y*l4isxnAku2HjBW!}c{h>Fst
z<w(JwE}pvy%95PjMqJE|fLwWiN-{tg!oLN&mbFnJBff}RjJ)ZfHKi;)qu8;DVNK`^
zndT>{w-s>Z`_nK602f02=i<7B`YnA)s28k78sA+FfNWDQDhNH@5N^Pi1_**3ZSxOv
zNUMj@m7(C0Ru5&m4EB}V8n>ginCt@utu(z~hnT?Uz7ZRVj&wMW@fH;a3?ZJa!A(WY
zO*f1n9wq8ekFx>I@;WPCDC^PzSASi7Zd_<HZh?}5I5y$nCQSWNkzG$b6s){hL$MTO
zk7B(~tuZsXE;|<Z8*iV3uNpa`Wqxb5j<*q=!P!Mp)x|wqSb*3)lj<p)fl#%ZBmV>y
zLJ5?AH;~Zt;hlsVfgr}%=|n9YxJ+$4ijLTnmmg0w*YhXme~YXCd9jK%aPPEAw*>+E
z!&9K;cDd!;*$6vyX(;u?$i&K=LY<vtZ|_#u$H&lOFYG@QA7@r~w21O?WiOD-3siZ`
zy!A7Q|6~!G*`PP<-^-&5Tej*IfY^5s1MoDmimnTVroB*J;iB1!_>L6|BJ$?>SeGbC
z9<*lnSJeEd^%U#TRzRHgNo!~|p19gizIdmmZWr<cGO9kR*S=k>5%>GXM@VYErfns%
zw)%S6!%ItLAX|*NSS)I?uk6>KD(ltwxg+N6a9btDQ>E(&-nC~x03$niO_f4#JzN6C
zP$UMiB5}ScJYnbEf!d3x^r<MK5@7SW_S4;L+e2U@kTYLeD&zwdAu8ZAJ3Z}(JEKQ1
z|E6Tq1u!aC*2SPoyBwGeAT)+)o0Gu+Z8ndoJ)EuIcDuAn+YA|>Nt1N&0hH`OvxY=!
zA$6Nt0sH=gFsMOz8FVDGV!tM*J|gUrl%zA7FLN6upvN1Ar}nr~iTVn7VdD(cpRy9j
zOO_VKm28c2ua`S#)#d_yXyej+CrV#~cbOAran-dd`85z|XE?ULLZlCd?zeJL{ijTs
zvIroF-B_NpOj_WN1^Z*Y6E%ar{YgRgjf~qJ6eD3tqV*50OeNT@j12}49lBlI{sfVZ
zV!+s$r9`lD<p~5bIG<diriIX>m9eWB{*i~`t5{8$^$XT5V42*;!&|TRy{Mq?+oVyi
z(mL(LlS_8i%@$=ERCi`Z<zDbms<vN3A=$h5$*c@e;(C+DaqVI|0sezl`}C*~t11L>
zm0N?L52<3%E?7!yd77SRN#SlGBXYGY;*lbQAjQ;dZ=MoUnAuNAKZ|RGP<(E1e6tEc
z92*tKhGlfH?k+iw%|qFrO0kt^q|z}KA4;Se#IL3m?}$)GoB*^h1+*87hMDRX4;V~b
zDlSEz({<Ny$({IbpX#^<v_e(8bjLvZUSNLptLNCWd&>iN02k%>wZ!X_QF-ez<O}qG
zF^_t>rKvGqiOHe;u~|pkjY0w4nqQ^k>7dmvFQ~OWuLV;TT$d8<eEqMz{=Mi6qF>1(
zT%snONc(oeB{n#UsSa2ldqy4nc8yRZ>;CFt{g?~2OPZ@(1_J4}`qXW{KEcQaXrBnm
z(S%+orqZIA66iZB>mFn<#?wsWN${&VoF0>l1stYG9d=QT^wntuAK#P#^}rP})nb;u
zkwbfP5VcDmyyeE)suG*0E4KUWr)fOzXwjdVl36WxPagy99PFOub>+9kii!HAAKJ%$
zg@%pLDg7PicILN|b3uln`!VN-P1_}7`zCD5NbVyxXtsJ3=Lc^kGJSx4%+Zl-RAF?i
z3DLOl4g+~NG6voXVee-6H?VI7T(Cl`kE%@D*<nZt$bwS26TAaIuk+B9`M!#~<#!xV
zJsMuXP?|5dwU%@!3M;9Y{#SC?A2NMbXL;jB{)nn1b7LkC@HWaKBoj4~a}e{K(5t1+
za2$yv3~M`Hqfqqa&)>N>sHESh1Np!>5_4<5B!MrzlmCZRw?~#|F$1yt<Y~4ZfR|ey
zW#2C2A5a~eE7T(t`8Q=I>`3EN`3nH-UpA#s!<&T$dLDCe;#FWjask+5`bLxXOeFdX
zhX=T}RnL!4e$fA8PSJmnUlX@yo$;1-jzm{ZHm+=swh4)r?^gSnD<T!%q9FBFuE+1)
zb&8`NL~`?$K!*VVgL<mud33kO4Ajf)+>3O3`m6%@2K>=#B*9?o!l4+DI*5{F<-!I?
zQp9}LhIqjxLNSh+x5x3asgWY-yX_Wf$Dfc8)OVsA6ld4UH!{bANG_XGC3I_^5;tsD
zmVdzo4?)?I?4RCC%fd^bfIJx3Cbl{_e7yV`Vbs}*KL-Og9ja(WHhgs0umgB2Vygdy
zOahnw$91u8Eb~LL=LB#`$IIebu7Ua*b!{SS6*0(Q2!>Vz#Y=I@R9F#qM>-x{VxmEQ
zzB6^QC9e0XDTYNXzOmSkyCTn&-27_BO@f}xV@u7X#lP%eo1}4O8k=eAC<pSgu#g%+
zR1eZxLuJ_wx|yw>2m*&2d5a)T@bRFIfq<(3urj_=C@tT`fRWc=EiLg3x;VHX=+i7*
z-OoQBlIG5eru0j@k@i*lL?nk0^+HS{ok3y;&iB?CMQc2~2cOwwMDx@ucgydL0QB!;
z8X`?{#t8*8s)=PvR8Q0Pc4il3w8i)I|D3MDPwM->?yqjYZON7wNj$*OYucP~71S{m
z%|uSS=0;7FgzaPG69<+eEZPX|n+m0_(Zf9s&g?_xsx7o75;UUIx-^ua=@<>Z@FL6^
zBv6b}@%>=PjE#7YL}`E;Ya8z@SJw@kKPM+=1atUXj*LMlWZZRbZ6P>NN%JH?ny=|a
z51Q$?eBdF-;k>)PqCsKTlyHb$<7=_$uz_V2UarL(rgg*!dm~rfb5(}!m8TDio9K$Y
z*>T|tkWc!MHOcViBG>vAAKgCvXPAe=wVo@l?px<%>%ER^VX1-w4UCnl3^V`H{`{7h
z=$AJsfesTeiPG7?rsf~m!?Z`L(#cGDFB&M$ohj3Ep9{oS3d7q2*F!^+a4{K=>#db2
ztZ0~BHh_EUtIq{C{EuiDBB-vFkKll}Y@+yBXY>%HM<h=0aW3~S+2=5JbQ}#1C;SUd
zetM=0t-Dz=Arw_ya&Jh)Rh0Vi6jn2~<JF3EDjRgY^4><^qIrvs;>Mp9MRziZ=PsJ&
znB7YJJ9=Blvh5`J%M$!TXK9t=*__Pboo&7%tJmDfU(OQCENLC1DOWPC@Wp}mr#!hj
zfd)`gI{aTfTng^U)RepUO81I`WmBQ-GFZzU<O&m3*Sw%T&_-m|$dzR_7t=?|4T+K&
z1$wQ`)Al3|$p}p`F^TSf3WGl$HIQl>5`8#<P;;1-W|?%@V$@xm$kCu9D_+wgw-PPo
z&mVuYeBT^4dqHKi48no7KA1m#O>IMG5}cIKc+armNRSqR46;dksq}1{e|>USY=L2`
z`^z9rJxrc**|*MY&Aqvm@)`R@c8<d;!%6}Xi1l2XR)jiz5dAd7_d?J;w23%%`+W&7
zUWQ6+^lV*p?eTRIyiri`Ojp=~IaDyA!9kLORTK{&a+3E9ap2OH9@mX&e&1-@^Pj?4
znX<_0{8Ui-G>^~zg73Uat{ku{^@Wld#w(B?5B{#7vgTHO9uxYiPTqEQJ*5O{ocL7f
z{eO&TSm*=GM{K2uuv8+eZj-qN{9=&LK87J|lS%#;A$u8(e=TSum^%LH{nD-Xo>GX2
zzzivQ5GoMBs7;QFDQF3P#o1w?d<W82&dqe5i`#f<okKlI_=x7?p!5X;nY>>lx7VdH
z+nYq`LMo!9vum<c$O%af(?mEHG|j3<5Nja;kQVV0%mD)<5UJ%t8Rq{UmIIv7k;q8H
zxYr6fprLB}U-0KtP^q3=oVwwC(K>f&Jp1iQj2{3H3?p%2mN0{aeb|Cc_t%{BHp}+?
zjrFVj;Tv@o<irS@UmoT&ehZZ*+6oFb794TEj(*K1;apzLE!T!-834Qg`z%D(E}tWQ
zE7pEU`c3*4V3q7l3<JL?eW7TWUmnX-h+`1sK?7$o)Jix?wN*hR4)GqT9_X(r?cU9W
z0bG@{tGof#<_lxAa(wV~lU4VaGX(4<o&|`n1OZ$dnBiP0{vZ}`ANzfsa0eoaMhy)R
zuUubi#U3;3zon@^9GL?b7;G9zWJ)_Vggify<lt1;ppD|10yuXViKaXr$yr^00458a
z$@2y~sZ|KY?ioOP#=a&LpdW>Mg;_wMo+hX@Ta8vkDh`@fwS+S*;nH`IAt^C85uwJ^
z#h$PfWWh((l5@0i>c|^RdGr0VCIB{PMJ+l?Zu?ckiMJJ3;TVT>?GUZV5>`>W*Ea(w
z_+bp-6kcIGDV6}(>L%gn9Lcudfu;7l4JQy;J)zJ;$FK-Jml42~<0FzLglI40LbO=c
zXc!tRKo2-gHGwJTs5jU5e%;HsGUo|J<X*pq@3c0th_tg<i#4a3u4osG3w>9vJ8U=C
zcK+ILe#tJA5hpplw7~|{dCl-h3wqkkYC5d4_@Tej$~eLZ`CQ1>ti&}GR|kI>1<ya?
zT~8hp{+pIXvcZ!I!_oTfZsR&%zYoMwN~KHhfoAY@d0sTu5iQn@eD%qK_G%Zy5$SvM
z6pBcNR$TnMj=gcPF0sRWHtUadYs-wuSVspwHSaMWYm~~@v0l$49~giFZ-j8^RqU8l
zoJ{GvX_{fJd9UON*#vlM-@;`%pbg;oXjM+3i48H1rKdPF&M68_NouIl{dFRx-C$Qu
z;zkR#!hpj^PQKtJs<4}4-fxjPQ3Rlv4s`FGiSrncw{uFjYxH2;$3%d1UODh0b90m_
zrbPto=B-9#Ivh}n`OrQU(xFFRfZ9Gs?y_l-s)O9&K+YOq_t<o(&o+B<-(I(%YzBU8
z8T*sfuunulD829!qvxkj7QCvw9v|hATey=BwKD_ZgQk#-fncEw25(5KUVoijaXW^=
zZEkh=GHS_Ns{3SwgHdt$Y6)3k&-7?MPer68jN9yY_dF;W@WAcSV*wAYdC2&w0bvX~
zTjst#vp~dLa^fYSw5I2NYx<H!p%j8+iykMR+!WosEg$Y>{0MvwzEX4`wd`2=i>3(q
zj~GWn{Hy9~2;>$d%5^^Ac#aqEK*g%!%A^0)F76bnX$`QVzZ>rlla*y7s)ebY#`u9D
zO5Lt(Fnx#-biuf^qH$Xi@gTGg32M)ZX16McVc%7EOu1{W1$V_t)vWn_XF|qz!G^=_
z=1&Z6vo9s*S48FlpG5;8RM@7I44>9^YH^7Sq?C8UgwQU2^P@-hPBVI%bO_hMJc^p~
z0D5d<8W!QF{UXC%01_OCWlVP$_HUGhhSJEjeimT~u@b2Yh#pi39+BO>|ENO;(txlx
zL7A^$gB6DvzQraw0DVA$zZLXE4DRpi4asc()WGr3X^N!n=PO3t+uA`aO8i=-IjaaF
zN&77_EjdC6m&YV$>MRmkGX%kxO@mX>nqlmC1@XGoUlzO0fdk8cP`Wd`NNIB6*XL)F
z;X1k`eRZ2PmVe~Dx$oHrU+k|Q-bML$FHaw0Bp)JooiSWCaoM2KBD)`X$FjTP`;uzC
zx&ZVA8VLlBTqeD&aNjFTwUU1O1JA;C28e4<9^I|$jbgD>tkI2KyEv?J$NDwA>abXM
z#}9BnE&g>nD}8gz9R=GwT5cVFMwIh}Vg6%}Pl0UMM%V@75r)DRnYx?N*foA=vrbqU
zvAy}{0T>e`p7z32)PTXTWIe!z&c?LNiPKNdAmkw~D-flW%wHXXwCUvCn)pzWb^edg
z8G)ecx$JksTgf;zO$`NxT#<LbKbW7x-;R&X>+8`Cz0(%<{lj;hw0SM;6HOaO$!(kN
z9D4DRTM|g_7{ES|<vb0u(Bi_avVEs^y||Dpk&5!-cwS&*EknaNdXLzB%>*eB-HZRS
z?-Mpq<#(Iw*2e15Fyb^w<gd9_pBgP=->jDE?@&=<Ei(%nUD)o&{E#CVJa0qO$@hXz
zRFQED2bP+23?Fc&G%FLXNIT&r_;>WHCW~|Nfq94^PKko|FEC2Xx_=omZjkFOF6{oP
zu%fypbF<82n#!A@Yp-`dPqa08T78@|s*q;KW&)f6;QuRdsPOwf<!vQkZ;%ch#NN-(
zUY#`n&t%<Drh`81mvUehEce72h5z^PPbC7rq#f}a6FBsFd^s_;ZlKWo-^IC{ikC5Q
zFbw$ae$tAd#4$3alMY7RRlLLmWY}Hw)l_UpX6L|6ggZt#RHP0;;ewuJ7Lu&adRy~*
zg9P{OZ+LOH%H-b|4T-#oEy8yj%RDf==Yk*$^2;%opDkZv+9spJ+rm|=hah>rxgmR*
z_MTY=3o_Wb*U)4Q`yZw!X_?GdYSbL<@jTpO>_2KBI4}+*`_dpxuplIMkqZmSSKgri
z_IVPKX(xXI<NyouW$A^MDm*w7oM#Zz70@6&J?Zw$^=vr5ZK2f0ZA7IzSMy(rBZSva
z;bp$rz(SBptvHA*^i}}t_VogAgqa<Lj)9Zqo|Jt)^cbiXHwteZf2_%SAIZ_AZ{1#i
zA?lW?8mVWd+y7)f%QBfPX3;!iuwp~_m*XT*)05g59lDvY<sgt<*o>PlA~aqQg5WnP
zRE$pc_!4lk=Th@M;*m(6YrYL>*BUBvDmXb1T;bxO98p@D0=AM=wegQMx>S+K{(6Ss
z_idtzhP+w*0aAW2O5&|~2I}FEL>McpM%3<N4rHqQQ^Do4!wMtuCW$E)yFtZ!xb!qC
zAb`YBMM0I(v2``RwuA=<b`TR1`ov($RFi9W7Ekj^ZT;D50c+}j(;tRuB>&SaOi`NB
z(fZM|&=XQrv$qJ1WW8`XqC?vA#kS|K9k?0me1a0xb@0<J&Tc2pJkI`ePTAi$q3>~S
zEvCI*_c-{yRsT|Q%y(;@_SN*fyzGLlN!)YI0~e>Jw5Y1F&o9faVlqBGYTDcQ#W)0H
z{J-g@Z@wHMIhFgrc}nr@(a)>EflS<#$F4I6oG>U5HqH#BbWpBGp9RjY<)f#4fL~u>
zBStr77#Af4t4={&{SaNI`<m^f^Y>iZdq6P6JGN7~HjL?AJ~aX(5L*VQ2u+I1WQz;4
zYg7CX3t2?(n0DUzQ+KuP`;C#Ue0Pbp8x1wa`g?&#5E;VFib1(jwp6x2F~u;abOwx6
zR9$0;o-o|(?l0wGys-W8tVvG1*bd`c2+K;AjMfbiQ8dPQEnch?J0R5rt^gc``wEq-
zYP>v4NK9@dmHg^xYdQfP(M+3ipx<xWzd-9+pjk)a=UE4m-;iw;e{#U|JN)ghUa6|7
zfBH^*qK3%n)j{L$0~#LBjev{E;PGf^T{t0mMrS)VTpN2kBA(h<cGWf!tWNS_Q{0!&
zqUL10vd9)5DMVzMA9WtRgh<)wc#zv|$Z*FbXKf9u#|lzPVPZN0FYr>9AK$d!zytBH
z@)jfz$2vWZ8RWd@Jag3GxjRX0<G*+?YI;5CzA>Ag<@(Ej45|-+ZW4+#GLr`!0^L)T
zL#acWoJPqo+|ZWqb7EJCMar+0CaN^k=}GatO5O_*50Pz#`ibh~wny91&K*WdGVlk8
z(+5oce&hw-7HXQ3H-bpZz!!UqwA(`9xS=V4C*VHJc@r3pR%kq%*~L4)r&SazcIpEK
zYa&%*>H5^BTr4VBH>P$av(x6&ieB=GR8^&qf=&NPUlD`CZq@&v-zRtJ;iP%))pxbW
zn6YQl>&qX(6ap&$5YDtj;F3WTZRYf?mk~+X>tyIr{<A}lF$opn|FT$baPv_3s}#?R
zR_ag`i4Q&Mou*kw>{VpoODl$LQp2}Kky&z@qp>_X+|b>5(G}@=<xu4D01h{FAm23%
zIcp{Vw_y^2GjGWaa9sKGx<!-vgW>w;5QJ_#pypKd`>JA((v$Vin4p=m8?sFiw;xt$
zXn{7uQATrc#X=qbDsXpA9k{7vk1MXd?@qU+AH5cM=5#3e2lf-82KQ}aFJp{f2c#Vp
zp0K;M$^UZl*0%_mD>bxJRN?X_mQf6AX7fxHcW^OUO)9mjbbv;&%gx5`(G(3=u=#-N
zG&gOM+a<g4NFMEHc)$^0X*$P7Dk#nNO4am=)`XbP&*eJFfD1YD2#`{@*J?Of7dGLG
zKNb7DG2A5b218-`V#l{~Fv*9b0N`idiPAceaP7n>LgINB-sZOaXPiP7N$`)LIlQSg
zR5_|1P*~z|+h(;TZVCL-wJI0hUG6`2M_|K}T3rBMP_O&Pzxx0UQeUMD&ECuw80+m;
z$;bN~z5!5nfp>VKW8gGMa{AsuVl(mp<)@3}I7AINTNw<%8~j0p3lX!`jw)cKSLTA9
z<0_aT)?V9Rg$VVWS+>kAfPkpJPdxiRW*hC>y9h~V8YcNm#Fenouy4v}?_Ci`!qR9k
z0z$k&_hkgGXtSLx;ChTb;Uq@2dDm5}yVs^xjx?j_{}mVlvs&%}7#}S$3<s9^vb<{u
zT~fH3R8M(-uy)?3V@gl;=0~QExp>6A(40t^c3k$)u_qU!9$~6xO}-#-@$Gy#r#wu(
zKa4Y^7~wn@yNfy?8P@0oF@XdA?<{GjHPhKB;RU<r^&O*je7qi67djp(GfqT)>~w>`
zF&=DyUCzT(+_aCyZDZ|rvbiTB{J_t_zC5DSn4Ta42l~1xQCd-hbJYSg)l;|hKX2D}
z*el<PK(AgAHdyzj4BJ7L9(Y5(aLJ&x#eObpEBS$p^DgF;?o@W89<7gtjl}YC<(eM&
z<V~neS%5-aJUoEN7$t1p^M4UX=$eQC$g5u@fXbi~BYx8a{}odsci>K;ibxjFNzrbs
z)qXwnFtU*`N|TTNsp~kHiIRUXjN|uzz~j4QY;o}qC~KKA3bJ9bl{rakk}o_s#J_X=
zq9&qZd^+m&B&tk_ot(3JP9~>p+ENLlZg>ev#@KWyoQxSk;e`+kdJsf3a$MrnP3E+V
zZG4UP9dTJFs_1n^{{`(Z*xF$<I5MPh5u1~X@c>N27|E5-v%q)A_vs573*-r(Wu&-0
z^*mR#biz(8dIpegnS=yRj>etNy68^xmd67IA2JT@)MEpit`;iezxKf%pAz%k@@n+g
z^q&`uu|T#C_8*nE{3{n78{R;MX|us!_ETlT{lAqis1;p2ypndIJcTUQ`$Y!Sx$RKZ
z2R(xui#+b!O>Lpe>ZN_a`e3#bnZf{q+ol7TxMGEkex}>?f^Od=Vfbk8=-Sk*^S*w&
z0HnpQ+YouOreX$l>@i{8X819&wpz{I<67A*2jM@V>H{1EyuCn-jvjUusTslt4b<%h
znIZL8O7bV?xbPEe>>~p=RWR%;@>qrFaCYBht{+r+{PGRR=#6K6HBM42JC+%d`SHnt
zIvU7e;NeqJPVlvAIq)Nszv?sQElTIknDvlCyy(w(Y@@Ej<M3(W1>Xy_i4n0!XX)c3
zA*y7OA=62F<zEm%B8ZmdFPUP7O2%hY{YxyJ_@4mHn4&QDN3&YRi`M)z1qHs*eHrJ{
z6_<G*4r15Z*P0h=vP{k(fWv1Yl`HLhe$kG?NHlf-qWA<L_(!nn>oL(SaKrWTeL0@j
z+DGzav&H&2;16Cu0^BxhNa@augn>fj@Hx4~>r|+=+s|b}U7X68B<>OC`{pMB{8529
zu5^UR`f$!^%y-^R&M{LmB)63v2IU$|o@xRiYjSCDs_;ny$1ebyh7qw5*mTT6r0KV#
z*VB$NQ8*~XZ*btB$c=adk(hh7%}fEo1-Wamlmy;Q%(AMyz~y-E|8m<77PE!1<+ys<
zl2LOR0DaqwzUM{eSlh9JYuHmdol(QGyo7+>0?}h|DTI6B5r3FJ4Jr-Z&6r5}3V?1!
za@j;e=EjQ>sn`-77yu6pEVMkxs;L+aWVshZXIzttWiil{O*BT&oDp;OL2&@?NLs%h
z_E}j7<w1@9vK#1>fmWy3Dqh=5%?xJV`bNnk8*Ij?tvT-JwDp`tEr_3VX+AbrUWwD$
zN01x)AKg+*g18i#>-1i-_Oztos~$I7EJB27@iN8dutGqV`#z<97}2kNZxXXAn{8Ya
zWzrAQ)pXf;=;K9(-lc<;5q4t%D8j#D@MR24WR8XLscb_u$`LToK6Z|)TIUb!x^Jp~
z{K2FVa&R*<#$bfM9{IEIq)>CGO^cB!v=cYK4-2HoK@;f5i1&WP99kNL;-4R$4hP20
zLco<Dpa%EaM&9XyS%7Pm?}u+dlVJ09ahKJiu~aJ}sP+&}b}nV^w<=8vE;o|MK@q90
z2a)5!L#ZBuNLK05nXte2HiYfHr%s{AO92L2T~Nn8ZHLGdA<f3>oOPSQ(9-C!Q-h9B
zNRGtctd>gaE&tUwHE+>}(1FTWaO(YkZ7P-f)`C1CiFS`l7k(t5)rJ)yQ8>5VBs6TT
zC#g%8JQBgtiJz_@D`Z?=w^xwL=YkKrTjc_7b+CvrFsP@YKBT;(u~*79C8&B`qohdJ
z$Lj{hhbF!R9rQ)E7>m*Yn~4`!W0Do4Mci_-w;R-~Q~7m{|4@y=7W63pSA-A1x_RVe
z+&GbwUI6m5B(n_w$RI6tKUBe>Y&igrFhUhUAaTdI${Lm_jWEX|2h2QBR=ig_Hl%<`
zbNAd-J)u>o+9Zi1AC7wrF3C9|ANB*(=(E{wa{92gobCO+i?~$=OnF%UVVxI9oa!3u
z)ZT78bvR<6`T{He_-3jx^zY*qz<vg!w7K<y@4drSIsM8f^>HbDj$&=Q+XyK@AmIyE
zkHHPTv5vSCM_#t-jV)$X5IywV?`VFa!t<9HBZ!KuaZT1+58JTL51~-!2x(JbzETG^
z?hZ)Lmq|3LgrejFMVJTC>|Gen(Sx8RlN$ZvCRxWQsy}xG8r3tvK7CMBc*Q%TBXtjS
z)a4KDA9ymdV?B;w&V|>#WVEHq-h{0zMabO!+l6uHLryKp!d^L2IES$_##psOqe}xB
zkULAlokNf_XdKT$oO^b7LHbyp0cBX&3Lo{cjCws0cSros6zMFmENje}_(4@g)-qLj
z`XW?3&E4T?V^^2o4%VLQH*2Z!@g}BARm2m0sB?jwpL}VT4eZcj-&0Yj_{wj1o?cUO
zwidt(8UjBi2M?q-ic~xN{eo>4=}+}nyz~ie2-u~(KB9J?tQomcElH0!BMcUnD&wPa
z#IUcH2~%;;wZT31_K}n3f$rKrx&|Y71>CIhl&C{6HbtZkwf?E}?c+temy}n|&wcGh
z_OZ4;+Y?oxdMn2vorGCr*_=4t{^u6dgBs{G8KMR$UTlXvR6p=r?EOC}43CODolZph
zV<FWm4hCUxA}OK-C4a+AKVZFnX+h(b0<JIf+-S!*F|bM*x-wGEay@u=-ai4cGXzF2
zJ77gxFYxhf_Iyl6L+kXbTSrHM?{8>EpjEPMJ!DPRU^W0etNLmt62wL%Z7<$jq5K4&
zR!>W`2}GWGn)vh7Zsdy<+k5&=VE1PO4*|2eTW_XE?zgx5p&-5x@PR0Az;?43@hNqw
zZG;8TB8e=v=AyVD{U^#K=z~mPZ$E4+aTF+P;!j-f&f=?P{B@O`F!ij<+;f0phv_Ce
zYs$S0k#i?SkcCdQ_ei9P{;7?u5q}gn8S<}?E>5Mso9&F;l3n~nBKp3>aUq!9%qEi7
z`rcm?g#~RyER@j0|K@v%Bu@(A4Zo62wE2{UGoV$M$254_<O_jLD-EmmJzK#G<n832
z3GoE?>^rofa8uyRz|46zj(75My^mWJIV{%Agil^JmK_`>`u(?GXXVd6#O%m|Z3IEf
zRyf%tdpYr4VA93WfVUAHIfEV(h=UA9eeE|J#R4X_Z(vz)vRS}*912qFg_z$&t8-YT
zg*xHnAo{N&a3)rBVgN=i`NCYk9_ede>+HG9829Cyt32_)8ug{GqLYd$VS#~#&eej6
zNl^}0ys9IF7CYlGE_#fvGgZ18O<pOqY{HS*%7kS)@vw8tqbHkId7JE<RJF20oWZU0
z!8^%qk@2W>ps<^MYv<rk^g?%}nZ`_8FLT}zyREB+jutj60IYN@Nj5(4x)y_swMHPm
zi8hK-rWfpiKVqDKvzhZ5tlRl<DK5yJKWZ4Eq34UNnRWK*2vPF*I4t19_&U|VJv5Km
zR}1k2waq(FiZ-HRA&zs~HE_t;fR6HAsWD;&;r>OP=7WpDJ4a3-I0C}v0;4EclE=5D
zxj)#Cp+f@+V$HzV-Q8)*GUEjEZ>BG&(liB4-dp~<=!^Ho_P23ngHM8Go7XVO>QdjP
zhI-nRM<%+;Bmp0fH9p7*A``}W<xgyI*z9%WmN{)qd?^j5kU41V0HIFvx&_{{?dUjJ
z^{beAP_S6|LW@84lqqLhb@sl}?F2j2!J0Tb$Ct|zkk>xBGiIVBF+sA&&MtXfiTIL5
zuUX^|kNL!mQ-`xj<+z)m#q=8K&%yJ<iuxy=A@e`N$oyB0rp*{YzpJ)!e8)boQf7t%
z9$11vz!eCZq6eyO<*uu}M0zWBS>s&^D+k0o#^P&H<&!TXRD_6!K)h-)okg3Ofk>lo
z=`xp|9C#Owdm>J`WQbXR=_|USD)C(*OPi+ZdVM}8r0rhU6a_dA8Z1GjltuzL>ey+N
zQ6>mAs^C7>0hm$O&#LI%#YFokJn>DzGu{~}zGuT$oIxg2F?G?8)k0!r-MPv=B~zU2
z4pJuBDavX~Qb`IRDvH3-2rkQ@`FAy68rS}PY$mXdz1*l<ENaiexdV|)4_Fe5PHvl>
zz<&VCsDd~VBw{cKSoMPg@brQoT1cPpsBcZ6TwN_E7L82K^qt$QG4hIySsd#$OLT#H
z`_jsA$Q~Uu7PG}Go0j?bdk3qmWWm3P|7@kB{V{g4X7S_%9OtJ6W+HF@+Rvh&L@^Jf
zNa*&oio9~XxO)AXu#@qcf_R2qj`I)5ileV2PjF{(X{(rw4yJ(2W2SBdI;KV+GUUG6
zXq@+|gwMT+-L;)>5@Qoy2zD)G=ODuzV0nKlL~yM!0xe?l00>hF_H+m3gIZT?cbLeP
zvY2e3g^cRpwv?lY2yyy<c{^@bEx^GNsXV32Ux)FciPIQFe!<X~d<?6z=%}HXwz%_P
zE}EeNV(>^GdJ|nicYzQda|Ct@5Kipd9jIWCN%k#!+^pzV!7R^RSk}{zYkGr}sKRYj
zXH`1140+N=QiA?v0RXfwzr-IA?cAIW>5gVVOHQ*)=T9Sk_>c?>5mYq#mXWBRpLE1Z
zQ!-Bp4oB)cCxB6=iBOk1ozFX^s-ph3?E8P$lr{)+5D?k!C?jcEDVEy3fFRO5w*A*E
z<BjHThpv=nF&lToj-2-nqT_L<Tm)mM6J{fQ_<~A`K>j|PcfWI}8|+5Vq%Mx}>ogXb
zIq02QIpMOq=y&MU<E2HK$lTM+YGeHhAoIuUS`du^D_@Bk5#fQYq@br|zGd{MA8oI7
zfs~(M9yN!qT<_EhDjL#eq<FmCaAH$uHQD+<_qQ63sv=qJmAT3RboTo<Xssftc0mR-
zRu`Io&33P(69=jroC)aF+9oM+_~X_G0Hz_$EFexSMfZhWuLvZaN^#$1=JeVO1dvcZ
zb9_i2A!R>yKrqUyrlimd7GZ&M__Y}=ho-Tf`HXE;BV8f=(sR#yLvy0h;gEaqmL}`p
zU4iVXtS!Cu*vi}+Db)t65h_w=>V$-TcdtH*cZ=&^>ne}^cr9*q7gW_=n^dbycY2O&
z9_r&l{vXHlnk!VVY(s;;53Y7p-|KDY`9U+NS?-2w7h+Wd&|_6LeDPdaERTQgP}~rr
zYTO5L(&}1;))U|KFE|7s3lGGsvPpAc*iZ^1V(V%mK!mvGhJA;z^-DpuI{YowPTjKO
z^-)0002!ku+!8QOWMS+oQT)ImO60o>J?*`^c5w|sSyq9~V$0uG=Or@2?}uBzX`PTI
zgSb4^Uz8K1H__rt)|xhhsI8spqb$t8=$uUD*P5@Q+JhVIB!pSeAv9u;f0@dV#dqB4
zb3m=vzM?m_x522~Jcq{G2_xel8eLpGb#k+K{@0=m!&487Ja>stv$KNV{zBBPe<C&5
z6^{A*K;?4y&+l51#uJt^25CQteWZ-$diy&jzP-~P92YnnBMXsPKSvf6%g%3{#lTl{
z>B}E#HF5@Z4gfGPJ?^nKTrrL6zzHL@QU_J8LPQM*4S$b>$WrJ2Se|eIr7+{4ZlEF+
zr?eo{yF9Z=7)Hd7zl9?+U47&*X%1T{?6P`@j<)bgE9-3ww6)|@G#Mj^@j~kuI|Ki0
z2h-|{S&;890EX|Cq93GW%CIqJh10g)H}%E%J&!wuTK3ig`%y{C@A(|+()b@EeiI2f
zD=_+;-?`r@D*K(pDS%No5keuON(XPDmU+&d1{XX{zf$VR#Z<d#<R+e!^9}u&8^fJ{
zQy2J%=;TN*@^DSb9rOG%6lf|9!HBlaW4K<g6T3wVw~y0~yGy-cb?q=TTpwRW@2~Xz
zYl}xzhkb_PsoG2T9tTHP5)N8kVV9#RHF3_a#Pn+qdhK!%8W!sz@`>B9klIrbF<Ao^
zWRbLbuW#3Gl;0dWDpW|b<#@W)Bqyw(DuFPyfssS3*o~-Hl7hnz%n}RL64E2@y<)zi
zVA0Ve=<@Xr?zK#}hcf`+sU{P8H}gzA5>O(KbA2&R9Dy#$H^9ep(~w5!fzV>;dk2um
z-yDd5l410lWY!EyxSO<}fay5e{ZtTFM(yCCZ~_3dM>I%A&6o0zevyz@9fMV+c3Hxp
zXxFr$Ovx*mY@Jb$RA0a&hLJ8g)#TLp<or%v`<&*@N6d=tw`kro!o&ie_B|klAA6dN
zYz)OnG85|>wmDx5iZC+3+JVWM8{sb6W0U~efbT*AVM%&P*&@*S(myfqL=4$EDPnf#
z&==K<w_UyEbf;8S2J7^@qGMr!O;;X}dHfq1?IWGYP*u^C*<5bqE!}3dWOj?)#CER|
z3yuM6=cfiJJYT|a1gD$a?{b=FQGBd%kTyu48|=)0yE|E&y_wXRy%K<eZQFjRARH)j
z3ugWJ4MIa5CZ$fJtb`M=0%3GJ2mA@v7C-ERI($Ko#8=njLn)gMQNPm`myAIvKLsZY
zyMXrqn>4=`0Hb3-m&T+7=jC8UfCNsGRKWiux^j1m2HpB7my!KGecUW4H-(Zc^8Ldh
z$C-w}@iEQG(-0%$y-6fInwyI<gB=bkFs{i3d;7OZ242n&yXunldF-+Fhq=(gUs3;G
z^dDK8d{qRvCU+B{X)#%++IOFLf&K=}4E+?ziIcJkm4!kiHQ7zQ<3z5klQ24j$yNNM
zt1_(Qpfb$|tjnAhrA(Uf^k-5ms!~>K5!@DwTZ-;Vbl)jbUk()Oa(Qjg2%pg??q(mA
z`wds=VRR2Z+QeN{+W|KotMTVxq@Z*Dd36|*WHiiGVXmzCGa533qn;8cXrBH28dmH;
z5bc2n#SCy31wrfN7FJ=bCW#^hA;<uyQ9;y~DH=~?nV=zP7a9L8M4yIf!%|{Ic3*%^
zP1bfV@xmC4kHq&B2jpCf>3}KWy;*(%AEsYfTZhLu1)>$pf16jnVCah}k-5uri_4gn
zjdw&nZ4SIssypX{as&`Uo6*uzz9yMg9czc!hp}c_!jfO)^E@+?D|WRKXc#6Ird|6M
z%MGK_EJ4SpTWNs=wxU}2ji0sIysO|=Ahxsg1l)cTym(A;ow#yjHXz?rHy_EyJi?H;
zB#HyvFXqN7kt@BuBczn3Pi<-IvzGc?wUwok6NV05F!mho_w{wznKzCTRz0<)+f>vQ
z;3dbZ)EVnE1SA;&_ee5woTC$P?{dK%fC21NW5)Np*-VM3AmxDpOuRYkSimZsf<iJ3
z!F;``gu_rnhGrjp!I_oiocj9U+)%&x(XTkeR7T0#H8~<=M%hff?yrjyl$nOMuu(E}
zneMzK=lo*{58X;x#z*)d&kEy~`l+G<?SoykS_lrnD7jY-^(>j9-f(_$XW_1v=rqD(
zLvT<HM(WwxQ{H&Q9G*r3h1hNMyOY`(AIOHIU(43Wa+F@?@f4srAyI?k-Btg&n#gC1
z%@1L5tVat3rmuAwF($L$3TdJHfH7yR_on5&y>A)r>d+lAx@?*u4Mzhk2h(N*FM>Q{
zemF41t*X6J2GvK`M!zrwh%dpDQ;p&twOeh>N;7O)EoM4UjG@8a(_Zeh{d`WE$~LiX
z@!L2$cR?QBfD|xO<>h;0uy{7rV!T=Pm!eESer!JcJou1|LD+O!A>q8pEOLXa;cTH1
z68pO*{=2mjybIl4yhn3h7sy8`F{e*%s<OF@Nhqr8l9~b<RGbr()wi&$a0x{&ua{i&
z<n<XMovjJsp*Tn@1{OnJnPhfNK-{48+~G1Lk4Y-da-Z`95gk9}Bxh+n?~SF4ZPV^v
zyax*zf@bryU5qjWAn4R9QaR!LYC$WA30SW`MO^$Hf<2bZ<^LO!472D!Eo}Rv(;`+F
z4dZWq2bLMl^?xJ0u^KY>EqsGibgWw>aLZ>O)}}6G+_gX`2|<Uf$swqM1R5t93DCY4
zW_ILaTI-qV)o*496>FS;`6GxNmx~@<1)9Qcg2Zqv1Vh856ULTrUH$9_crq}9*yFK%
z(Qv?a@@hKWYPz~=-S0(*zwq%P|D(;(?13}VG_M=x>7h^GJ-eQUUv{I<4-8lgkq<C7
zgSF@TP})zz-sSS*_<*V8Vlfc*+DGNu=q1VtOZExfNiu$AKBIiJhKH%KY_j?&3Hr>5
z={aC`G^HoVX65R)1;-B}D)N@E^(B5w)g-@!>}!+wYR|=aplW}&*$a#+=$d6ID3}bK
zF6RKc(ATs6mJ1TcIYW&iH<z`g2eOYeEMg`RPO;>xssK7;-Yndj{LWT$(@tU0|Ci{R
zIqKC`1T@{UVZdAQfTQi9F^7%GTF>VyTq=5c)TAOkQzIGDL--;_ExGI}^gBIkW=Djn
z&2|(I{T13>2&SAffoveF0NN$H>9j{9ZCvBUudtd4TF5Aq>dxQkXjB1&z`)yg9ZvxY
z%1u?}VZZwOQI8Lz2QRc9>>(C;5Stn1DIhY{HnMr?IvXs?<cN}p4o91`@AmTLBZP<l
zW>vPYQ6tKD^iZ&Cdi*d{FBo^^LPf(9FaUaNVj33U8k7d#T>y8k)8Ze1<-Odg<5*84
z$6sxrc`P0?AqUy_Yehu@h*oaO&5&Jt!{{zrkZUq)V0dE}yX{Vlt`pTb#p~Fc#e!@P
z$>aweb~ve-@}PSj>0{Y)JpQa~@Rx-b)dO15->7(7MFJ$cF~STWdI+ypJ+ll<FnyF!
ztm?(>Y>$&lWn%fcvElH_lkc!6W$pG$4-8Dn(DKEb^am?yTsuz`fySGrR0wkFEe+DY
zA7G&4r&Pglw31<g;(jy1#LcW~-_x8k%6<Z=d1Sne-}<-!k5;=zsCXDJD$9rTc!M*-
zK6j!RbM&XbkM(ZEW4#?`7S0N}Y(}DC5Ysby)``o7$QU~dMBK5NoRBvQLdVr)>{*$@
z+|%Qu*PTTX&1l%Wk8La3DGF3#0{pevoQDeAxUc|CQVxqpB>las=A?CRlhNI?B@hUd
zt$#mS*p?n2k5|B%FYDAQ{Ix8Aw-GP^lx5e5`AoaaAftvbfDBQQ9~`2X&IF+Ji2Wgz
z7e6skTE8bDIBHf@3!54LZ1?l{YtQ)WstLdep2E)dF<k<hH4(Beih}^eZ})KFff)BY
zA<*Il%M0uzvG=(;gWL4d{Im5?cSjIOI|~XO9uS*u#@oQtlccdgDP5zg(`G6N^|W0j
z4n#YF9T-_>TFEZ2T~SfEgdby6gB2g0*9QSuPmA^ct9zFwIc`m-s1-)^FV-?mUl1Jr
zu1CHZGhOE?mc!2Go0wt^h~O7?yfACCuVeg*iGW1mU~cKS?p#y=Scl0NQ6^dlJrUE|
zK3>0M%TmYrEo*dT@0pxqM8F#<EpxgT%R6~aMi|ehG&_8W%7el`*#fOpgQ+x$Jj<Ic
zN~Ex<7p}ZXvE0xn92fRb#?amN;J755C9Mx5rs1HBmi&RPR^X$STR1ewCuiddpN}vn
zR9|44Sv46<iKPU^Z8!F_q5lRE(B|xk?D-r_hImv?Pil~Q!s>>n%9o=$(a(LTAJq|F
zzgNtW=d$M^rx+wq+K~e9G&)8(@(T+9AzlwEe1;54cMFw1rNZ~!&6h9Jq<5o!*LYxf
zb{FC1rkeN))rDXx6x5!afvaYXB1Nj=j0{wJMzhC8D?33Lw710qEp99y!7Cp+0glo0
z9!5<Oxfc3qYI!k?$kHj=KO_kFR8%qWzY7(7X<<8%gt*ndY0oHSHhjPui`5>dz_Lvv
z9U(y!^%Y+9`>}!|aPEVn$;M6bfuTKZ43<M4I5<iTe5=aZsJxZavnkV(5W{lBFml~C
z_e%rAi@`=(K6S0DowKo8QWqcCI@TM^EIOwk*RqbkNysh4J!~wTa$GvDA+%y}lqjY3
zZ31ja-1UB}NjZ8dv+%PI0vPn)dg<MV#_ZgrY1mB--=G-BO?v_VDEiHTq*4>Mg7t?D
zz)%7|3b(11S!Ljf^o-Gm%A+fmnP-K1@7z*5Ws_I}pw&jRZmOuhxI?jyMRN(r9{d7{
zH7|qF-BG<th0%{akYiv)ku2>)_q~|3f0W~Z)nu5wUp+Wrw;Iuw{em`b`jXSi)uX_~
zCfGG*0o_hRi25KBI7eP*vd=;aAhy*t<n?(pz3vnihmr5G)XcirQPNM1WV5}TSlSR=
z%%$v!T&J2NGwK$!NyroXlTBy*$7&ULsD5>|U^tc1NtX3+nChy?gf;hQTIQHe3)TxT
zumY4mV2TbTMhxdFMirNgaS5?7m^1g<;+4bKG6{OW;&Mcw_J;aTl0ODKY2+Z>u(ZT|
z{0kHn{t{pU3^Lf1lbR>jAJe*H89RE;caXz>CMQn2DE;BLfSH>>xifb;EeXtRhqq>q
z%Kh5-`d1sgsN$-5Re-1R$NipHFU6AwiENxD7~$&HU1|c(RVH%Lh*~EiB!tJQaAodD
ziiC77fhf!~L-BHOwQY!;!A99^*PEtbvuC!u;#U@q7ptxoB<a`0-@7T+7=IB??*>AR
zYQGOpA~@=9X~UPd<~Z=0Dv+<6+j53eJJHH#=vfA2DFEL~3O}Zx4Y#E6Mu!RAxvh0o
z!LJmVQljH;Sg&(_4_Ftf0NKrMbCfnVJxbGqf(=-c36b%8;=;j^SJ*tmZ%I!557S@+
zw#lU>%bB77D?<CP2^GN^2(PdbSux70FZy?R5W^6TTWjilN^wHPVCa=?d=DTjtPz3I
zhH!r{L}4zmk08p%%~?gpDC5pcAeBQPHQA0Rv0PZTFYT(6xT7ExMuCysd_cY-cmG##
z3~G2iZF(!BJ;+3N?afU0Z?2c6B%+_7njc`)AQr}jasZTJgcO5*WhrW5IDBQ!ev2;v
zAZPdmxgyvfvwSPCn~_oghe$cth^h|v@6cdf004SyVj33VJBbflT>y8k)8&MTa2>CE
zMh+nIS+Hk3XCy~qPb;Nz34OO{;Th5bEj(d^PHD@v^j67U`sS|FxM~B;1`MEN#xlgu
z0N>#jzX%BZ2g6rcFeaW+Na8G!Bza(d!&?ajBQ`^8*MO|WVLZb*Yv>r`(u*EYV^=Tk
z#xFQikv`yM)!O0DmM|c9<zmG+YPAEBZd>?hV#yL;qjUjMvA^5gu87^r3{>aO4YDGo
z<_9+#1LXo#dpkk2;A9^*ITAfz&%}x@L>wR}GD8T8XM(SYH0Ye`ll$ildvTa+ceH2!
zEgw?eZqsAWJh*!|VyCwa)*+;m7f+b1#-x5Vu6n=DxAPc1hhVtb{vSMR{29QA+PtdR
z(kYa(#wD{{00o<JXCt-qkmz@mPN<chAYce~fk~*pmX@}Cp%*=Gp)8wU_g4$$87W-8
zXn2YPVEu9}?`Pg`Mg*m(CEPh6ybA#sE43w~a9aB}HlFNsYauEM^)0td@J8Fw`7XPZ
zBGP<0k0p2pC-yASYje-FYVUVPj_H?QEgP;~%r{-ry2G41+qVvf_gyU^mUdxt5h`(9
zwgU_0hK@B(vPm7fJ8aI^ysqu3uVm!CZldfwRl9U;?tU0t`ZvesG5cRdQY)Tyi9Kf1
z5Q72lw!*SfxlCwyrJiLuI?HIyQ;xB}IDc@<H;gB(`{(g!bwz-N8`rUzKq*6M#9rth
zeH#m}u3vw8YR-KonYb1bOX(F@;AQCSUzyD)9S1vtnN5plB#fkF0)g*lD@zS?8%1tT
zIK{NzPRRj>)P~-e4&Pa5nXE66o*{EbfRA)6Vza_IY*(|thq$4WvmxT-20sp!V>ag}
z_T1y4s4}FWfAD`JGa(K^Q4O6kp<j2Iw&V(qx9}EVP_K#^*3)OyNuFhSrf6iVbe=>F
zAlnoMxT=_Qvm|dIh?ZD5>_TWC!u$&BC~?cZ8}emjF|+^rAWOpMf`yz}^SCPXL5<5K
zJ!bA+e8ePM?Bm7<X}^t&1&a!qo*lXH0OeF@ztxVtzFn<eB$(uU1}W;=Se4aGaI!hi
zSDQv~QB6oA&M&sPUky-!ES>(gJ_tJd2)nR>8?XJY!|k_gm#yE0(Cxdz!SX=R60dxf
zj?k$b8M4U9iD%Ut&Rh_#S3T~YOZ1ukv+jn1xt^)<BFKJk6Z(iKI|oyC-{0wTP)19M
zhV7#k)*w08ZN6tS|D;T8a=u!JV0M%Fj<SMb74!DG;1iQPA5w45guEktW(vm^(#*-`
zyHHoyeStpS#`vDWcqbqcGPuf*a2h6efETB+VtKzRC$~YM*z|gvW$dB;NX~x_whFLH
zp-<fE?2JJ;#Z<Tk>vqo1ZogC?os%KouZ$eYxLSQtaS`NV{I(VWtn#a{jp$N<t6uf7
z&N>7#A;0HFIrq$ydxVj<-1w%IXaJ{LC|)eeiZbfW-fK)E6+`SMp>L#uiuqA|iXRp(
zB`KQH?VPu4w<u=1()m$;+|k|iKZ6c!w}GQ`p;P)D8Bv4CTc078=xxe%+F7hSvIhrh
z{X7$XUM=VBl0H9G1B_+Q;EDwN%aLtr(ezwfNq`-;pVBc?RPzSiesFpld+<;{Z$Z}3
zFJOF7-@*CLu8S{C_gozxDU`+k%gJEv_g&h0UF~C-|4;jH1sXKx%R`Q#hH?xV5*}@H
zWvFPLVTIf@_3pC*<boDF)ML;>Okukq2ApMC?7`*i*QiK!2PY$qoplZXqGrdwP{EU1
z>t1S<%Y_<Vmh+biqPp8jvZdKXy|U_8>{CL^C1&)4&G?!R`6H8v^fY=I#BZQ_J{fjz
zgjMQGicE}F2E!7Yf|V4RB*+5wL4g2R^YSaj(8Wh|^a8r6)EegEafY3K<&gtS_+9xo
z&aU>YSs)G?BIP<mTub2^!JV^$`e)-lbz1hVH|2aeFm`KSM$~%W1#`u8zI0tDg19Fr
z3+@UO`G>q3C|M~4SJ#CwqNUg^ul;|10TW^6P`YFap6#f$L>7cGEJu<=_I{tNiyS9%
zpkkUFZ}mW}E2pG_I9>WPdBU`!0}`C|V^Oz0JrS8<c+5gvg(h)}38hc@lmZKjw-;4U
zDIhHN=)N~<hVlTJ4JVB$N`N`IXA96Fjqe<Tf=MD7jct2XCe1^T{fHgcz9z7&D_*<h
zI0|H{nfj48-Rg;KZ&0I$O=K=xe%J<J&cRR=YCe&?ebZA`XkHCDG{M`{ytFu+vPx>_
zb92@xC0}f5;`tUa)r<<whj8Xh2ixt**x=JG)Ke8Z!?1RJfPby$>H7IR0DFIq7CIp$
zK={&ixX@Y~rqM~sZs9SJI?OZx11)6%`mHp6ssh)RnA9S!(CAhNTP(K*QW7H=JPz}v
z@HQk`G<FqdB$Y49QsRq|r#0PulLLG-yX3D9fLjh`dUu(d6L7R{Y5}GwGS?oq4|N8;
zmzp&L1N#?;s3auDq-vx{*^4lwN~~8JVI<;Zp}G*q0`9+Aj5X6|V$}D<ve1+nSN4*S
z{MSyss1>Rsmi~O@y{A0$t}yynAilpII`%=RA3in{Ew-|Vl?qs*3Be)D1o=|1?O(W0
zhkR{pDNx~i3UWMt+Qt?#>k#Zb-Duyxa;-E#{Gj41<qspf36B&jW6XQ;HTxswqy}hH
z1W5|{H-e*+hOrH$et44VpmqgIqew^2RfR;7-m-)#_kMvihCaFt!VKHjE{(4k0YBNX
z5nmPX#P=0@&L&sgWmpJ=z4$!#)=#&mb%t~g>__rrSbvucLYwu-+o76xxp4?z==yXf
z(y=NMp&YyIVZm;N_cjfsN~taJcE+_@4JIG+_H(Q_aCPkxT{yg_MB`W)hbpB*wG_ez
z9OEo#*9G8~r58us+cXMfn0JR}F7tgnEmp`Em)|}OeSJXW&ISQj69La|PDN0eY+yf^
z!RI~5+v1!V?<kdq23<*BfuLpcCh7IK9>~%G>2BwOUdZvFa0AXwhi(2qGd?wIE#lXB
zd7o)b_Tgw7jr?yS(C)BlqLLNm-kXh@j_AKTNSN8o^1FAIjya(TE`I343o1h-zF*4|
zJHL;&LQDb!3V8(4V69&RE58)8JCJEGO5$yR3?cR?av3IW;A2DRJ&m2KE!VH9@+~IE
z_SMN_f%FB+O8krv-uw~9+!bblX*!?)6>~^IB9)pWqThdpBllCL(CUTE?J+?a%SnRE
zg*RfMJUhn4H7o1z`#6K>{}!u*AQ;$XjG#>gZkNSeOg3;&^SJ{C2D7zq^J_SNbauCW
zDbuc=y^eJY1+LnLUfh~oalv<k)7|ZiF6=kCMizsvJPMDoPn484%*b5tR{$gK_d$cH
zm&Zrghf?O~PQ5V4b6eEdK;Ct{pEu{|;`(%pXZ<<6EkI>Bn%(>8X<|byds)lxqx+Qt
z`p3L6ec}GP2sVI53M0)gz?-qt<Z>X8IFvyy)sOKqz?(<ZFoSG57O5or_w~5tjhEo>
z<m9t(E`i^uFRm99>f7v_8UyD)7T45dqdL4JA6Nc9+S%peY^xFj!I!+?y)otGcsHK&
zGu@-%)f&JBpd8R;)QmPAlnZ6OT-aw9$eM`oTJ>>-hYo+(LOGET=tSSr5j$ltV&s7B
z=SVGPy-p6#0r3u}R)3j4b1i4RYr~~vWb_A)9}F5SKWr<VY`W{0$C$8agv!|tjC)CX
z$~(bU*7pbIaK}QllQ720>2DW4#tGC0uFjCHq8J7j&MB)jy1{8~S(v%^dETD*8WKg;
zMwu@JTi{-%^8>i1NrW3ATz^A1WEmXl$?Tk0@DC$bI-Kh?lhIaAa6SKs9i7_wzgmUd
z^)~7L4_eQSbq%g8$H%$@SSFMUFnTf3tDjhG*XIWJNx>Ek!P#827}b4k^O{J%qrHT9
zv9oMJ5VE#|ScY2V(i=P9&IHnCX@KUdCUU47L$#x+*h~*Sj<kq$GZs4ko`SNiO3n^d
zm1v$^u?avxkD~liy*kXQO00D58>M1>GE}v0nkz^LCHvLmlwcF&Z)Q8TVXV|Y{jH8F
z)I}lvx+(bKzQ-O*>e)V(h)&QI$UYJr-=8kuJ|Lq4q)V(UHY4hhNLHT?r#xph+OKCY
zjV)M53yLwTwTZMfS2oJjul{npE~q+wO|<d7ci?usWFqV_M;8c5`(uUcqQGYLLE=Po
z?_~xo)<k<QL#`Y^jD-GHzRX+rUmSxKoOAvVooRG8klhOa^KuKFd68-QZAn>J(n9Lp
zMPV{hC0QA0O8&dC>L+5I94Z2ERD^vrBxalDkc$MJxHzV2Db}C87giz@t5M@(QC?9X
zi&eINhF9`sw7YcoOk<ygHA^wETKm^`u6gpJ@|kG<hMm1cfGMAoejxC%h5<pgM%e!9
z9K%%0rI~87j7^~;j=3Di@vC8_GZp@G1Et%Q26sFn+5Q|!48J+K6O+63GrlIB(6G0f
zkplj|@dlkT?e~o+I~;Z&p}YaZV(Z}zaqe!vEH!vMNvb4eAa&FCKf36nLUk(CFl|-H
zajJP~eyz4tuQX}T7)-wG0`<8fT(m5dSWm>_P?n{bkSifKLyB*RMU(bA8ro&&`YxG=
zU+8e6uE<_1r)YJBDdgLI=6vuapSJ=x4fwvX9>R-3ti*s_AO2+z=`y;H?2*?okv~N4
zkqmVR4G{eKHDg2U&!X>wA2-=rGHvc&K#iYO(1Xsjj~2ECV3bLFjY-#V3u);f!2$ys
z%s9`c1~gA5d;Cf^**K9IU5!w0-z3yuJ*MFpx?SgiC;jr-Wy$;Tp?R05r~wd&J)&#Q
zgXK-%hC62%ybCS<2)d5cvOFd7nu-#O!q!@uE9N~nQRv9VApE4PMiO{mIRKEaUPU~5
zjEpt6bK!!B+A+Q2WU^HiiAn(~L0gv$Go#e?L|y!A2{E3hOvp*?Gx@|83wLTRCu>;{
zL7;R>4@-+k-4&0>F9~R|7In2ZyXIZS8Q4oypF=qt!lrn3hx-%>c93%GIV*4fnM;0)
z$SLv|FM@O$lu)-crm`?QXLDdL+A>CuAkwN(wscxtFQGW$1>>vpct6ZpqZ^{9n?Tg2
zj-$4%=^Ufy@gp``dxB}l>f<T;Fc<BD-EtO=+1IGkge3LF!3&RBh?eji67v-s+nL}G
zjLh+OJCS^^%p8U&(a^@eE+EWHcbSBK;e5qYF#OK8LQK5@+RFzciCpKCGaPMra5yK(
zbX@xRsh0$?HOoP<11Gd?)r4@A004SyVj33Uq;Lo5T>y8k)8&MTa2>CEMh+nIS+Hk3
zXCy~qPb;Nz34OO|L(Ig3LNClrsVnBlcd6-cTr@@cWIZ7udCBnZ-{L5dg{6w`$7Y~B
zizT{wpqA}QVHa8sAV8KJ8ay8SX;a+u@ZrQK&NfwO<pf+4qZ-qnY=X2o7=2@2Pc%5t
zise1_kg(&`04ZqXLT+pk<RC<K4pZWbH;e%&0X}uoKcl0bvrx}+z&++ncn{i35dzFl
zejUMub5@WPk$~)3w^iXIpHGJJ#XP9x4zP7FPq>gD!u8;2@rnOlUn<rR1xDm|mLB3q
ztjLHNv1s@fCHMXen)5<3zH(40n9Ez2N(N2IbPxh4RU=chznU&t95L0}#%@Ye9I5sS
zomS>*Tk^GGWTzf&<ikxXp2WwiKvE>9_Jt4FMxP9t9n8WtI9dov?g{)a*n!E^m#~f?
zT0qs`J(7uqB{F0E2v$@)s<~Oro&n~S%Y;<re$!hubglUa?Y>czwQ{ER8d5qN0JHzA
zK$jQeI?u|F7<>hg{c1W<1JO2jt(1jcM~3+ptjh3>>w{@OHh8`t%-hMOB~2U;HN>3c
zve<!_D_FUSyG^EsbqY0OG5Uq{K5ZIpAfjqCpU?2!FnXRKpXF2;RfkcXG02ZUHm<hT
zpQ;yl+vNZ}O2Nx+MdTF1qa@0bQs%`{Zpp@f6aExOzCT}0w!_{h*<kuCP$87+p~pRC
z+E&g@tRKgWeR)}Ln!kP)Rf|(^<9Oas_~+iQ=yB<)+PBp(iQGXbn-10X9e&GGWv#IB
zKY95Ib{|AJ3&v$kdKmlWMNw?LM#fu*xttMQgJ(PEzNO4Nn4Ewl{tdi-lCAXyQ#zM3
z@t=-4&^P;ud4V1EC_Gl^XKry0|0}!XmfesFprNXVd`P~qj5HF$dl)mwC=TPd{amO_
zQPH(mjHkNCI~x2P9iJ{c+1y_%h~Uk$U2;`z`U|LYSH#y)52&bTVr>6^X<(U=iiQdS
zKbH^XH`h7%Cv-!MRt#CI1CWY|8VAt3UH6~Em$!%Alx9)?RFCTbhp?I-0|2~@z9M|>
zc3#E^Z$IAc$BW3y70M^qxOi5h=mL;vR?M-6|1g>!B)}D=CI#(tcjMPuV+Rq&AmcJ*
z>kS4PV!vfwdS?T<1~6g*E}cb&zWtj&$LYdTIqKSmDNQ$(gaPLrF*IZO1a_eB2vZ1`
z=YdF}7p}=#J3$^i3@Rj-Z^sdkVc_OYtEdNYEGBX;W!j$Qn`v4l2_m5=(AC=pMi<MJ
z5|XJr3{t-N;CM7%1tsyF6=w4qMhS!d(zx-_NWJ#ckFtYThBWXaV=3O8Rtiuscs3c5
zs{^Hp(bR%2Ar#~AJ|+Ht=JYKsL!tMT-pz#3-M+W|^oZD~yaS2Q=EvT{brDT+0!31|
zqW-<6Y|YaA|6RwXL;7;_B&kPxRIHXSM1xu}+CX}(3}!k}UZn{|!+OeAWu&ZXe+-2u
zv94suvkIuY07Yltp|{(<pyGj?XzlIu1^kr(px7easI=$&UN8JJ0}4=9t-O`utyd8r
z#G*h!LA71Oxa*1&rD%>vnCZ`pA3$ldZ~1J4gCLCG2HHb2>+I=SMNXm=D~}qpNiRL_
zK`KD;3;xC`HnY9<XlO<g=U9%O$?a-1Qp$1I&`|=kB8PU#c_qan0}Du`hHOW0X1pee
z-3pHc4Yp{(N%RtL=_5SI#*O<-jk0@+QK#sq9z}Y5F0eF1*YI_@V+|hRx&yFZU-D~#
zmL|oGVoQ^#N`|`OP_n?!d$_}$_rNyB;K^5aMNe4GkI7w5hKa3@peXMg0hAi|9@Ik{
zixcMW9-je_oX$gn4>GvdMeiYx$2?*nWZKqw+4-x<+!wYdPd%`pvZM=QcTzV$_7iEy
zp-f-vaR@_394y8b9UpI1XsjMtWYp(b$g&93#&1ami8Q9_ZEz4(k~?y9Nutrjdnc!=
zc)?Ae!bu)bcubtCMztb>N?A7tG~x%>ew%*O7Igs3s;4^&aPGP8RO=WWUR5SA=OY$O
zVz{!t7n@%77I_h)rGf!Tzz~bz_KVUy=>sXRYubc(I(AAQg#u>o%C<vmqE~zsZMm8M
z@I2CWBdB2}Lpx5-nJ!=~)uzoPPxh?<|4f9LnMG`RH1VA1`By8fPOre@&OGr<x%-J<
zuaVmzlv6y%6kU%QOzv}{$Jj%~wh0K4DUV=%!1|h3r_40aeh7C-O<xH9ed~I?o-{LN
z#XtK<4rAlj7Y&I0o4Tw-e&|(fm|M;|LTYNa<dzCM4y94Ksgm=FVmeRnXgkVnqh(}e
z-r?|HwFm)WR^av~YdJv9F}Qgctm~<m46D)yx0Cr-?M7MELLl(*`jo0^^w`<Psn(qe
z&t=t|<?!<0JNw5u7ZwK#sU0DAm;4c0%nN9#{+a*5T_U1XKW6o0Uy`$n#jPRxF2h`1
zB(XcvBd_S2fNU0id9p{fulkgyd;Q-Uusj9<TJxnEY_8J2B<D_}s0s?ErUqO+$Yqc9
znVCv9O;M3-x2F+E1dia=@|@P|&T{(2m=hP!xte;?TEei>Oc9|q{1}8?V{<0JmX2-P
z$;7s;iEZ1qZ5tEYwrzW2+s>QpY}MVW{dRvsS682N`Z*6cK6R(+dRu=e?ndz}?+RLC
z#YKtN!S^7)@5(Ca3cNh!FGiVmY>inGwpGVC2VsY0KuU?s-#<!LnL)@Qv{Gl|&L_WM
z39LU8J_K-$QgA1Y`)Rpt=LtE^gn<6j^bZ1ka7zD6)3?~iLOSSRQvFF<E^A-AD<rL)
z4T%Pzkged3^>m8I=14HgdwOfkfTXA3mUeL9Utq)NfKhb7_A@kXFcPynkYy!!_YI}^
zqnV;C#~V@32LB-@oBZT&&)_P1&gve6VS-|9&hFE*l=Se0&u4+=70Ym$NNNWq?|YpG
z*g7GYl7@zBdEPi2;YIUBz3Wdx5=k^;pzw$X$)wSx%Rfd`d=6)F`ir?ZwJMK=_XV2q
zKcy#@?tFA)s30crNkO5$9EIxVOWq$E9TkCKJQM8ib^<Ch`J6Ix27CQnUvMAb0`|e@
zb{4xhm@>5G?FM&`AOna#BxIuKm;JLDzv3XorN(N25d=S4YvGPIh@Ge`1XyaW<X*Hm
z=oycEUUXMVae3cq!jf?Rz;Q@-6FwrL5Q36;LrOM@&Fi?OE%sjrFO!lW^<5qOTowZk
zbzmR2&`p2PAx{{po?K$}uW4YyTO}YW6d}Oyo5`J>G!70u!Ru1_L!~E)hE^Sf6pWH#
zJt^227CWi#4IFc%Q)^XW-;SXQprpqN2REw4S=$>kIomYAE09k96~aaBa$Y4Z#F4Od
z5HucK=Xue~8`jcFl!Sh=R79Ve-Bt4upJKR!NCacgr^0c4|4Hxl@F{{&MapGcxfUm^
zSF1-Nr!S`PpZscpa!9to2y>56kTYjBAw(9|{q@ppDK?dat~QS@i83zpqPm1hOQu3S
zso~Ba0AWYNgqRm0Vwq6XqK&9TDc>W(-bVbNAO?OLmSBTUxf&-%(I^-kMCy3Php|Kn
zHg6bJEirQiN#NkxXU#z$EuWr?`};2TTmrd4EN$y+z91VfeM=HQN1PeUaDG#n<e><~
zI?1CAuh&z_Bu2zhYT4d0a1q3f5D|6gJMhzbnqOM08lXLih2ql=P}Z23kr&|Hzr6Fg
z7{6$p1RMx40dR?3gc?FZYl){}i9{!Les=aaF0(7pzs(?tuzJ5Ge|nN50&C#=9BdE3
zyNvxmun54Fb?{)xOY%$0a92D@7K;8dUt8N8o^cYR8MemK=_RDi9C?!A)%h71nx(BK
zfKt}0p225(?Od%Kgxzua+I1uu&=h{QaA0-(XqHuUJjg3FEp5HVAeq$TP>Va!O`?e1
zv;EqH6>LspvCydb_rHh;EJm$De1EzO8hXT?3rsI|6sL$tQ|Aq^1L*;oJ37kYimf5N
zZKKkYb<DnDXxq<K>rl1*!~}MkzhFlkyl0EU@3Co(gWn9iBh+G6!qojk?swrJZgrpQ
zM)A{(!v(uQB!Y>)zOFL`ykRyQ8qIj^>)^fQ<8FPZDsAa<U6l3cqIviML~vIR<h&`b
zlmspNu|cEr@TQ#Gpf74C>tSt?1K}w3t5IEm-;k3-L*l7Rrp?4u^zEF#`MMGFLlVRX
zupX?EKYyJHu?hTu6*S(@#PxtN33p_jftmaGx-V?F;8~aN#ck5fT4%tY6k-Jfs5Qcw
z)Wyd3I#GT_pM0jk)sc&f4-*}3S7zT<NBxXDVJao$o~LTBq;K#B9oK;!d!;{%jR0&t
zMJEl`*AspKVxe~VD5_=w1|=T%9!Dqjk5B>z_G||W8Tbqhh0Jhy1IXs9duaiLed2K^
zXH5v%ep#}`V)Um8BJ#ZRS<X=i)5U?qrxdBO8vodQPS-FrWovUpX05BHHw*&-hm#Cw
zT8b){5~uq9XfTZy-2k;LJ6jAx2u%s<%bvCQi14|oDXcBXe>k@GpGd{~!{m(^<3&aH
zWrLrHC+C0e)1e#ulz3&s(sChJ6v6SGmh%N{0aajgo8tAW*--TyHHtxgI^u8(66=*_
zH#G^63zbp}JGhPAg~y6x1dJgXmN=CWj`y{smv-rfBijXjY1DBB<?`x2?x8!{6_DB*
z{|GQ|zv-oZDWH5Vj0|>??la*x*(hoFi^u2>xPbt_OF3;rw@tG1n6bO7)J1>avC)+#
z=C$ar+FmXpBdft>gXpXgy{CUP5J#0zY`<ndJ)XC)&%7`X_pOer!BM-1CLlPiK{Y>j
z%pMzZV`;yA1s=^6=i6#%(jSokG(PKJh`UyUkshISW;_V$#-mKt{Rtdjwd_C0h7Sfq
zvpC6jfBeiYw=Yr$1cZ`r|MX6ZUc*PIEZCXxB~58eW@^Mz!g624dv?#6I&Jy*Rq<gQ
zB1b`@Sza%9pvJX~2BZ9_ukrO7nm&iTt$g|w2glk{g_~Zh(==E~U9zetLhhKsa<;ly
z-mDY`s&o(NXq;hDcT_LdsLvgXlADeurgGDIfZmFjNscM`&F9O}nZ5}3n=~Dl=*>{S
zV;C9M;z1Qdix*y?4<&(jSYB;M9QkN%g0qZ;0Tz7S7~=<EzuM~k=KiLfg6**^ke_&i
z>D*QQHo?b*8p&Es=k8A6CWtaXsfl@jBpA>RW((&ChpjU$)!!aJAOzI@A;#K0WY6^!
zIH*VP$Ls0tvzpC-!}r>VOaRxKI0XI;lys^s|5_gHo8|4psBw_W#$=VfwO+W*P+T?L
zfzOSTiaV51#Kj|Mfu9K?6Tk(#@q+%27Bf5f3tfFH<Sv9+eBCUMq=;9{LGAr}hVmeD
zVZq*p4_UYh0_tVZ-4pFaJ8n!Ob+lLZh1s}cR~Kw_J@t8CtsPatX;OecE_vjePjqb{
zpht??uuBjOEcR)~$F;+5NHUz8pI<1^sHrkNoyy-p9a7X9T6qlUhox90oCEItATr%W
z-oA>cr+_(Y&1QVsobZk&ao}&|%bh;^&@Cx78H;Mh@!%i=oZ*kI@?ESAdJp_t8H=DP
zTpL2WMAVV|;5p5;j=3?L9#3%ZecUm8P~tPCdiTD(2?^3+|DDZ<>L0Nw4~U`sS}yli
z{#;<GP!I6S4WWcyawCiN9IqmlKKX}7P$j(nkS*Nf&28589fZJVFIy21pNh!MkgT#~
z@Hd?Bct-yxpp^4nr}re1sF1L>6Utf1Tl%0TUrj1<+E?jl1n+_PFuq24J({%!>(@Ay
zbxr}B7u7J009o~yLK^WqhC2HvF1`2~4Gur2C#ydpXO}SgZU@-U5aO3jAl-|=K2gAA
z(9{($#aYpnldbHqOr-|=X<`BdT1l$;5-j4~Eqf~cEzR!2swMnW<r>UjX>T^H60`95
ziXzu2gPEx6ksbr-$Q#KZl$Lba?{~4uNn+m2MlgS@o_~f|Ra^BO<o=l4uNWvnh#4B+
z#mK`?ze7s)m;3(+c*+im`)~402qRH+9VO4??QJ8U&VZe?&0WX@aZs)12qX>sQT3>e
zEpo3MNS-T$=vwBc=jq@%-yHHig7TRFdzjU@@NMQ7-=hB|4#r#G&%IxrCR{D&qgTKd
z=wYh-Q@$E<E)Rz&vvpH2c3)ac=@#Wu#2F0MqguS^p#D9+*#!65wW<1O_o+N$+U2Rr
zu<JJ%dF3nSps?1?2hNul9&>_VmKNV!?-)wr$ZZ3T<bCJnktFG;XzJ_T9`(o%eQ?HE
zW10elh~UL>9++`IOMdl+4S@U!)t`n~Q1%rkMWi3)j(;D|l*>GNFF8qcrx?Y-)*PVs
z$uv_E*NYKNu}KOq8cfgu7^3Fqlz5bsvSS-XOhG)>E*ED`{gK1=%AQOmvPj-d9HL{=
zw3DM~hUi{v@<Gj&6{|i_i%2SH31^+fOrb_NXVHV@)&<l`&aH!>bb5Fh1nm3p!bS8X
zNynuvv@1`)zCo$*Sj7|y!9%HNWnWtGnf>}Ri<FG-G|gYb&8g&)55)z`u6ZJrtqrD^
zx7T^ZE$anH9|n7>9nJ+faOij{VE$nbR-){=-4UBIO_%rc^fFPd7T;>3&Tkvi5#-Rs
z*cZ3|H72j9k0ic2dhdvfrHjR^o#;1{Z5hSLQJ*L8z*97E>Rz2m0{@jwmWX3=M1)O@
zbwhzk%^Xu(wbVkAyjqCA$eu-j)x$(35qvc#U}!|Y;{wFy+d>ztOES5=*Xj-d^*OL^
z38U*ref#<#SOOiReL3-&m(_YE&Y29FepRf_l`dvFJ0l7*JgP!{N!K(G=7DuJiD)Sn
zGg?!+PU##H-6?VQv9>qK>dIb6b8;%hGpDZ@w^N!=m50!rFw0Ga*8xZ=NJ6(*jZp2@
z*>u>X!3$~G{AL!RnplyV{c9bTmR2CJWh}_aniq|r<{R{x(bSk-CDRN~4I#W<O~BA~
z&^1zH!7`Z7DTq<cP-izpoC%HP0!xoG-3scnjzuvlopZR6B-?bJwSq7$zQgRQWRLCo
z?Exn8PmR|?=X89RaQouJOW8C_P7E7HF37rpQ`0{E0JO}5|BmO+Vn>lxOSfMx#n^Fu
zIqZpN-psatTcFZMg6H3KIWPd4^<)<W<RvIPh8b@Z&E13|(&YldIfe!~yiPcJ2X6LY
z^$@ZF^%vgnLL9xcc5p7Fa7^0;2SNf*pF7`5Rn&LwGgkm({iq5^T;;iw0XLs`?Djw-
z$WfEbS>K%K>VD{Fp61}*h+bZuC5dLPtfA(&)o=xJvnC(1uHr9b78`rTILw(Y&bLL{
zww%rESRpjP*ZhPF)J5b9Gu1}4sc)`|QoaTZE-fIGW4(qLruz>F6e@ua=7%b?qMD<e
z-vL3>w-I`9(Z{85MCtJg@5P@tn@cnx_gvCyVzMy!h~pUD2K*PD9MSyJFJ94BPd53Q
z;GeBznr(ptg?nt=uZ5vM_jPTY8x1lo-c%yaR^@?@A0eKG2zyxdK^5@K*idktu71lo
z*K}o>s9jvgu>ZXFK%^OXRNQNoJJ}kGNU<r+5;!bIwhY2_G-|pvOpi1KQ^oQEud{}>
zy13AQH#d%2zXfPc-;z4UU-^SfXcPL-4Qjn8ldUeuF3Pwa-h{8oTn8dZfzpoeqq)b3
zQlYkRF^M0MJaXG#mp2}|-*#LbVQi%VViW2kThmE~u7XVl3qRba^VA8M(w>9WV@}F@
z(%g-|T;Zsrgz9nyMkV9)@ohfHqM34JRa4Uw9$Xi4jK^!?;dXP#xcyS2w<$$$1ER9W
zGd5~#{Hx0I*X(p$=uzpej4D~W#}Uu$<i&?ehCjnrW=SpWD%nYi7;@fz*J6X<J}m7&
z2Y@Wn4L1M}3J|V4AXjh-qnBE;3_1)TAweJe{_*qJsB=0cwokk-018OIA^G;4ZmvvD
zHzF%*W31o8^jq$#x`xq^eS-XX%LVmKm*0C<3k-Js7)oXp={$iyc<$$PcU}pRwhk?i
zY<-PdJ=@=um)BWjK6MuRgGUpz`M1YqYzciX98b8YQt3wUwD8}7Cw>kU=igWc_Q;7b
z{?OkQWvF&k=g7@&{FWOvTegm^{k(eLS|!qNZ-m7YVKi8E<D%*jEf{eKeTROUOp53H
z=LO*B7)Yi=2Bf~3jVVZ)kWZoU(va<<jO#8_4E%V(ErwXCK9;eS{y^dmAmZiPHR15(
z<Eqx^_M0?^iqsT*bkgxY*-=CfXdthI2-Nwa!*8Rm+kULZDEreG=PG&f+UAq4Xmynq
z=B$QZrRk0*6ttvCTY#JTzV_G_IRrBa8x=RL_;dBa{r*}Krbvk56KCwVCfw9S8{`>R
z3fe7C16Gs6vyAt&7_1jJrlCymf=Rx#6)0!EwU)>SHKE_U0LQR3LA>PSc2T|(eVlfY
zgUeAUZJNg;w6J^u#+pYzI^WU`PY$@9aIW1IReK%Yw?gQB)b+_p*L@TFjacj8{L4qV
zV!>o-?1`P_J{kO$%Kgx#9ZqSOVmr<J_AT&4?32{z!qgW%KIZDh+yB5Dp-e(hycXgd
zmC4UNW|OPf>2AWV392BfA4W!oD%1@m7r!C?{5MAaM-4C$G+hE0kubvaflr5PAIrB8
zN(9_q%*!#4e9?NsH-u|cUH#Q={M~_P895BwEN@mll?T}Vp+;#k{GP%Az*UxbA`JL-
z?wNJy@m)D11iP*h3KT}D`h4Q8^)8AyM^;aFaG=ELWFSy^z~^c8aY3V3aou~Wm$1-#
z7%l`fiYg~bXt-TxIB8kakBKB7n=c<&o?e~kqLEyrok|lAzz9k}>ydRg)ATzGV?B9E
z0n{6bJ^&;ipSz(@ipyX0v}-*AA`r`TWWnY#q=J|tNtV14?`Xdll&Sj_>?6&7cDBcJ
zDXJjT_kxB<Z8s^`hZOBs9YhTAmvKqo?%(wfsw*(fj2CprJLa+wq&uF@Om>2fw0+DF
zUA+~ZjH?|d_zYlXCrcaXjwNfQT6@L;do;B*S@z&P<%GAVY>)>OV$Hq~AnX02nIMaO
z*y(xksZhSIrBfFq^YkQ2$ju~7ZIs3B-5uR1yk_^pr5Bl$t?!<M%ww$lqW0<uQP-ft
zcEhOR-Mg(+3x}4$I@qT7UbTWJcgocJ(ci@cSxy13scI6gI81EQPP-+_VN^_P8wM7{
zHg$%jMwl$KFm)w_tG)aF)Xx{<tL?+i-Za@w<@|1ZwAxDu^nGA1-rlj4i*Oq?n1_!W
z?|#E?Uu3!Ejtp<=%DasjY-No{gWD+V5QNR%r9+XSX{Ceeq{8r22xP7i-#+OyBzz?|
zf$e-EEwfpL6k1(T-xTqnglA`vTaBS-UU7n0<J+Cs)aLVF#7*xozi*0SC}pOXyiouU
zbjKN*o{598S67WYZfhpk`&M@V0k<c&mC3#aAXrz)^3D9CM!CipsgP<f0Y?N?+OJL0
z0wLiH<}e)cwCXURdfwNDb0~9uC@z%h6|YO)sEl@B0Q1fvGy+c@*fNrTRaU%hiZ|Kd
zj=sU#WfPYLLA|uHNqt*y<s7c?f)-pCPEzkpEtBaEnaJGd5B9cJ(QA)O087@XYAvFo
z;?aqca`fKKw(Q(V<h{Xe9Tm2X8x0aLHM~=csb(LV11y0H9d~x!os5@U#le<@%5_{(
zcSnntalHBH)2693^f%|T>3bBz{X<2?8A9$#12gk<@jC=O{S>!$A*(#5=P_JGQnq7W
za}_G8;cz%3S4a<mHx^K-2wV%jBf836_JZfpHT`L4*%Vtf-&1W~e+!}?FTs3i<vpij
z;+-(9e3ozFSCH&FKru}Td3&)>G~{8?5nOWLCaL;Z-fBNp(jBV$Gx_IGr}sG+=F(1S
zIaOxOWdAuTzNp=qLyTlf{x)GHg${jp*!eU`W(0<~i%r&x>Bf7GWwNEai+iF%OCc7e
zKDx`P@Z*D)livEL14DTaa#W$o_7Vt}?~JLO$%Y7E1$LDe;punMsb==*N@m-r@Z<*x
zTiv2)r){fgHD`+e3BNaY6*s0mjusS@py9~TejV6ko~mQNxhSpyMm<&}=Q>2PLV^#{
z?y6}V^d%G9rVY|h9vC;;=HFit+RxuHe|^~KP8CGOd?>@`IXdCR!H~<9FWO}V_3!Qm
zHRvtPhdtiiO$v|Y(=~dGSBAwX=y#r(`q=+H9uCx}ITk93X6#~LH(PBthIU!x2{VTn
zfVnB)qN6v=Inkc<(3Txv(0OQ*{ZZ>kN;;`jJ)&qU6_LeVZ<M}*tb#zd+R)k>MGf}c
zpYmi*;e-7ZP-j74_>wRdQavIym=i|7O4ph8^Dm#*^7RpQ1B69*X|^Q-fVDedvq-?c
z08}>XkLuyz3C8a;qHkR>OL_F$9Rg8gQTPvh+by@}1kXk}j)(E4TsoUmUXIsl+^XU@
z-W5>l46`cQu(xsU)DXqGSZ?`^a^d*K!<ZYSB+v-$eF<E)PU93(TeJAFTOc|d@JS-{
zS+Z%xhBC2{>4WbS6SokKQ+bnvy$NTlvO7_g_m<xW$Lt|;F@k44{cRF(x`)^x)0+^`
zS8-xn;?R1-1*&e?oaV5n;;l0LFGb7nLuET|a_2`}eO|Y3d?YO-<bSqMq%mMD%Lkup
z;L?^S53hWCs{6|jL!Wx7<pJxrXTRht(**rOqm)_1VOr`lQ#;F=5sgw%yUP0Jd?UCh
z+lWbs0G#2_h6FVo(w=4=cLs%IXGcSX^U7GFk%9ta&SYnn@+!2kUQ21h2s~*EP)6#-
z0)?iedi&u^#Po_&a@0dr5#+Z!xpsUK^Fy^9{i|r@KZ|kGyOhfjaw`|Jb@3c6DArrg
zy1z6&W73*v3}J)P;?A|B3Qlj6bGo|~AT%5{5^kS4=%JO}z=&+3%m~9ZBEJh?cjH41
z&vgX4_n8PNzUb|TdNB!mSg=TcZ35A{E#ICV%}v#yRwnSr1r7Xa?Eo%3hl^EO)3HF1
z2Lk&$6B<}*FOvMatt@_jt&9meoQiTtbB%3Kf1a=iTc3!IfNDjUk2$UsT0C)3HenbN
zoX+7W@3RbofZj?)O6Ln}7+gSPBpH|rq#J(|u1P%L!wlVF-dUzpN`iNID0dOl51j9_
z{`fSzJS_&CBgW~jmXf1KQ>Z>ziv*X+Y+}KW7K7<4+7M*~XVuG-iUqwGFl+^-(<n)b
zx{n_~d+_@qf(SP!<b_Vf1ytx(ug_e6+YD3&|L3;=Dx7q1LcoihO%6+mc@p}sB{L&E
z7N09-NT74gUJI0V?lUX&Rb_Uy4rp$m_NhO!s-72-!P7+GwDX}?AL~%7iTp{5)at*z
zuNsQNL11T=SsztPmS9K!Li?#xDvmytyPLrCjU(^C{sK`=v4k__V5=3#i{22iynhhL
zSwdU8tK1t8;vGwK<w;2^Kk}&XS0`DWxX@P=3^1KAuFCdr_xwcSUz6i-)?0J*ZWA_W
zPOgJZ(&keH_O=!czEfV=T|Dq)J2FF=T1dR>f$fAleqGna=q0T3;tPwV6ATtr4B2v~
zuLODhcrZmOLi?$TrKIoGTO|^Xc#SqX^T@-Ju8Jn*0wO)qyPrd<8<$9pUO{?43tF!A
z7*~UGxU=q$dY5N~_c6A+i^>GJ%d3zr+rS%z$a{zW4Rf1>om?jAS6OiqOz>ONZOpbC
z`y419Ux~cf=JjCt4ZLu}oJrkU^|`(xl)B7q^z0Lv*^*aa&%nf!X%MHmg|66+{l1M<
zixgyH#G66p$hJ7;TI}LLz*eyB?OC;`;?EaOya`Bt<MS8;Sx(Yr^GN^t*2C+l@|d^4
z`q3jhut0r`oN8Cn`s|qqSon|jQ7Z)e<-e}1{+}M?g=Pmf$c%Li+2Ki}jHxoX8nGg%
zE^6KHYHo({x#pE3l!ow)4BpDvj=skUS9PeQ#6ELD!D*I7=%QeF7{p;yOwmBFUsT_j
zQRVbE&fk175uE^tdT>qO!6ngfE&!HzA57@=IBU?{1;mR^YvaPB<8%yGBD)h4<VL?N
zQjTaG7_vS{DTpiC1iBM%c{C}@=PUw+Q^~({`9GeFL69ao28&^>=J^oBH^}emlwD-x
zOCrYh<X#^R`+420;Kj*B>WUPJrc&IgcBMlpMul-;_kR*vJnobbXbX_p#mRQv&rC70
z?PabYQ94L`*X~jdx9h*p4rVR+FvldKx*{H%lP_bukwmpb#^egE)1DN}C~sF${R@S-
zDR=A2vi$@zc8A$A{+K)$h<oAnhog4EoJ}iQgl|G*96%D5&?(K3>zncHpj4xQf!=6M
z;yTM3YEs7m+*l1dUh=GyWqG$RmsF`xsR2Dhb}#NcE^TMEcdv*c+0D%Ghe<`TKEIpB
zG-PmvI1ym;o`}CY+}}T<O9PIo>iaFp?&EViWCcvVJk~4a&Y0Xyp^I=xzWdM^Y;efs
zwxrTSR_|#L9EuE!3oj*oezJgR72NnP0*h<B7^H!?zw8>!aG=i5wdh0=xZk`thZ<7~
zvk0YwZUZtt!{02Pq%%d1+&Il4dtuVzr6qxu$o{19oLrx^m{*c%)I;l>OVOoLUrnx1
zobCH@2WR~Z*%j>ta}ja;5VfqD8fDUk_0pon0SifO`PQ98co|_4?AZ9JE6>1YF?=*4
zUVWuV0^;r%+R3CWZUjc!xKXdsI<om}Yt|yf%yhs~JI^seM9MYp7Sc_sDV|8Z;H1G9
zphhdV1cAp(W(M5b6_qrn)Y~f?;GJw9!%pG_9^ZF2O@jZ5)J?1WqIXGoZ%X_?<u$4i
z{DX@c(c!$G6v?6AX`vnysOqnPhJ8&|luuV{Oc6Sb+U$@gU-X<j$i*oC7nvuBD&#yZ
zMI0R`HLT*`B!2c_2PE`E(_D|IZ%(h;DXs-vHg4~mGil}W1LPN}Jn>ztSnC(XgvZ}4
z)c9+o3RR$IYfB2zhQ^17*f&D*4^gY?;j7ngw*atqb6v&Qg+FUMLDA#mmrb6UAs{KZ
z*;jx74OZ&J-G<E?`{=Pp@g^sTaO>-%>YTpxK!RD<-4H>FyBH0rMEKv#z3*sRt_dN2
z@k2@N*&vj9_*tO(I@&a`x6A#wyOEnR$t3}(2s#1N2@ahq8egFh$+ssK8i3)YK(zh1
zQ;(A0RTnm%j!WUiwvyrAqbuF=6otaX{AfXGp*#*q9~@JR)p!8v_Tf;BR0v6r9Z9pf
zBx<Lla6cgpCG6p)3BnUaw-eB3pk$fe2cIL_RtJSkkGnn{KcebPlp+O{YhjbJxNrDL
zz=-jC5m!Y0v{tVUyZGddAN94`I_%oRSN?fo02I7*!q6c<QKQbN7r49e<P(e<WQGBS
z?jt6(_LB*3$4sPIo6TYZivgBj4F19V2?D-xV`tSRJC95Bq7=~NN^^%he{Ao^XJ*eV
z31Tl90)O3ap6P8>UM<bv2m`*D$w^vciD*;Fb~B_nmdrtx5C;2;4+3*?pyc2D1h;<J
zx~Nu}|L`mH>mdiX4>FrFQ|1e~`_`BwD$ieXr0j;jCKYxPq&{F{_UZ?Jd&4!%w5Z5A
zINbT%h0Bh_-;u~{$)o2>SO)u@8OLu~x6P{zJKq94c}l4t5^<O^tu(@^WQu-CTm<g#
zU<F9+;rf_9h(r<0&AjBoREa;3zN{c`PEK0;q#VemC2rV;SUC}BVua^&j66#H^@qqe
z2~$O8*-^}sJ#^p2P=vqSkSURC&__&>$a7?2HW12>JmlIsC)JyFj=C-Qg8XD<wMneH
z4J8Bi67Q3&{eu=0Uqj#IrGoyNkSY!>hi0-ac{{6HcLb3bjyTeNc>nT3RmFjCM=Z8!
zX3Id=qLvg*_J6E}HAU2||Jnku;K?}Y<|v$51y5OH>+LSUc;IC5zhyTMn6hiL#Npy`
ztc%)WA1)<#x+q4aP)!J-V_pgsFq$yS-DzDLs0gMcyk>}+dtS?SG0kV*8!d4xh(&o~
zB#OU+B*Gh7AR;)B=5VxDwgU<^f%<6XA@Rnm)Up@AbB3}OsGPiX@fp7_!!bjM6mML$
zA9QZmEZr+-tFL2)q}h{r!0!h`+%#~O{0H0K(usU=YHmAd1SF})9k_5UI=Rt5F*_{r
zh=YT&w6(+)hBvPab1o4O>NLZ0wU#u@D7&&r+|>gNOf8rVX)#wiyQ#OV?HhMA-GMW8
z`xgR`!<X)p<rDW|g{7;r1Q7e%fYgaP+)3*g5V78!Hfx-CoGikDxO68=f>yZ6SAz;;
z`7~5~#N^|T(Y#O!y0XVo_JM%reT-Q?#C)}LPN^SBbtqk*?g@y);bKDM#w>t4PtDBB
zniEwmukH!&m~4&UZhDiJ;i=6P6QT3cu6Y`uK#AtM(=&7Yiy2wiNtVQib+m~K)3wpY
zG~Twd^6`FUlioR%aJ%Epc_gjS0F4PvEghAm;v+RyXYA`U`>@j|iJ)3SV8rl!PDLKF
zVA2U`Mb*txa|5Mx8|HD`ErTo9c|oboDxR0oB)xh_6bRCWuy|O5WW9=-0NNBAuJmxO
za{mk;;m(#k0i#T&p1P=SG?X<B;I$-?Gwm&^abwp~#s95b(Lkzrk(rb7*G8CR_Ait|
zw=#bif;;4@BDdlQ7BU!BUp!O!8gv?+qmI(o9HyBsJn6BFvCs?5oJQSs!xdSqX*(iN
zPm&sK^D|<gflVC{d|Ts+IP*$v!-`n|IInGt<q#IdZmFlikdK_EDvRaZFY#j%G<_U_
zG&Q}AkpXXXIL!wDl~WpJ@K{$s$8y>w$FB|sTEZHR!-XGPRyr(OzMiJ6xc|fxh;do#
z>l(r)Z!C#Fd?{W@;o&-tjKb$AO>a4Up>QjH6a4dgzx8?-EaqIbDhK(@#o&f9vW7a7
zc!5+XHu&TkPLsrKL2jLkqxwJwXzX6)L_mE(##Ei>1YWtn*xd+i5H^{q0+tN~NA#=t
zHf_>gG}k+pdVH`aEIf_|F}#bv?FW=~(#dqqlRwMTp!{n*rZs;TV>?iS@Ri{t>C0o*
z)^!{`-ELDIejYbd@@??wDN8<jjV{Qm1n<?L0Fds(Zn14A!DqJEo|ilZYf}&3@BE^!
z1bb+}c8z#bK`K`Haz7um8w9l%dEfxhoTC^g3j7hJk;6O^%KwZ96k>7(lzlGbOjdfT
zYWzzkvo9sSVObhJB1<w_<>rtaJXLOMjp_FvXe97kHUnUre^L<_n<+PI;FyNAcn|P@
z>09c=!D8z=lsi{g9ERMk-I(;`@((ff?fgt{>I)6X-PcYEK4=YQtz`4y)Gm)&^J;TQ
zNKl`Nk)ycH!V*WsZSY~R4OjbFW)3%;CzYOFezQ3pC$c-Yj{+dD|CWF6Q=6{KMjbbt
z!mg|v`$Xs$yPt6X4*M%2flTHWcHVAX*mjhk85fOUY>K#9MH$`q;ip!H#r7S(1`-gT
zH_3)e)GDP(7F8FVGyTDsRFg@E;V?L@eIc2tOgizWQA_P0rjD~I>96vRHDMo!dK2=d
zcWbw}LINLDP8P7#s#RY41(+f^tlq5{s(T9(wbt8k)yTrjtYjHe{eY78tFDr(d&)1n
z0j7&7*2jaB7-t^^xY<#vInOsEwT%al(C1Y}Q1VKAlj8CkT9(H8lwzGVN1kCN$^oT4
z-zDT96Th~=@=OhCtcEYYrhEAl2m55Ig_2@@K#*OXEs*-{X}t<BHzZS+ep@5(qC=&G
zANNy`tt|a)*<-pG<-Uo=6FWw}lj)e7xbS;zW&bR1WiSd^*y5(=<dhyD6UH!NUirsw
z8Bi0&nn*)fn8_Q{pa^wFHgra06p2kAa@mLS6~39YhBZGI|NV!qWs*9Y?#8VPhwpG<
z@b=;}&S2b=i-I-Mul4W5yJGVaTr5i_Jt$^2Hct0Ox!%FT2ep78QCC)T3bB%{e3OFG
z60D)78SWfatRN>ec)t^;NymOc72#gdn37?38M2y_Rbp$5u#M(ff;E3}Kdd|iji!BG
zK|GRxLxwyobQ)*f7`=O~yym-?l}kuK#=}RuT8+^ZMQ9{zYa=QRqIM!&rBV^dqcFLc
zCfyrbKCOQWV|)1ZFby5re(o-~4)0laj|y%_SJZgqLeZkxaNeZ5WfrpBzlsGm@s{I=
zK-aQaJHQ(aD&)KqP6vZRCte_UQ{lG-k9dUfkRjr*IV!xk&W%T)bNMQTy-e%ARQggr
zWAlN#*vnK9O(ohk0`}Ks25*&Y{6X-meK}$akQx0qRbPoepWAGSr%~iwlxfdA<YN6Z
z8>2O3z1d4?pfUhw&zjDcyTBXOiovFsEeZwjJd1^UxK>Qm!ShnTCh$_akJ+kgUeM;q
z9y_>KEKEqUo)vC83`EI`BT=&C8@o&`c#gFePi){|lyg(WX&n@tEVis|3VcW+e|F~x
zZ;kt#vojI*pO*iQArZV2;|Pd1Y<DTVmH~O^-5>&E0r%+K9j1x?GXSeMT9uHb(-lqX
zhttbL9(G@SG3?HCauRi&T<8(~^!NU?lLKyRyJcHu!VU004tX8Gd|UBA*Aq4{Fqt9S
zl34}BzMDp5BOaS;+pUzXij?dK!*o~d^S#1w=m@IHB&{v2CqO`zdvK~XpoRpC=9!N%
ztZ=ixiBcS%V9OpyR#7|u?zW=oA-fYyfk^txZkVAfTD3&}?#Ca6Wi#Pt2C1)vYk`V;
zm1(W04Z8%)x6fD+A^D6L{4C28t=T_ps*P%iFAYm79HC!ux2E{kA!bT*!A~xKa`sTn
z9^J6corKt|Waif{v&0~`*6!VUB|`BKj41eps>A5ZZm0xA`F*5?dK2-GxljoZ<=;64
zVLC$&%kCT{gm^GiCv13r2IgDx_KMdkD(P>}2x?Q*3M5amT57dYmsw=PdnyDJL8|hr
zOuO1PAQPqwT28UXv{N35q$!>m`Szl~B<PJf#t$5VJ387{u5O+;JUl*k)_tU15c)cE
z1Iif%0yYyF|2M`9W&WPevjdy&zdPV&ypebNIVXz6P4=!w7EyQpM$EJJ$L%l4A;;ke
z!A|Y{8@xoiCc9w@*HULYI$kmeq2WjdBObsyS_1bX2y74oC;GjEwDCBn{ITap?AYiK
zsVNw%x;v)pmJv^x%hFi6$<Uio<P8e%n!kRhzu8&mNy)>U>X0<jN89q@+|9yz5PF~k
zi^$LjqrZwV5BJO_V?pF|1)D&w_vg8#3IUKKjuU8BBe%k9Z+RBN>Ag96cZC6l`A7+b
zObm3Kj9A@zVn-0TO=j?2=mwaEDxzPz;YXbhawI!#{4KApcR8$}Z&u#OV@uhuNx?u;
zl1B+HRAF`OKjJ0s5Hpkko|VZE51J$OoZps)VLZ<%Nu>PUD@;eXdX+6VDgwMU1_5MT
zdC7v3?rx!uqI3OzKbuCME=kw57#5%%%gKdG=GphUL)c`kl7-l3NM1U2+`QPN&*aRF
zd0ElW)yLcw>|>(Z@KOsJQ=0y@YQD`zAr1{@rJj*TkljGmTaK>6jfj6OH2dV-)n;q&
zz*hIo;iF7|BgCKZgqbaYYf{JV!#{K{*9N`q2n;<n4p?aNZ}#ysuDF4dEr5*Tg^Z7U
zLPBz{<_q_)Q${%60z_jKBzjwrt}0p4`(t>s@PfrYc(62n7Z}=7-NnRC6XdrHko$O7
z5}w2h4OD4YXBD+zd?JZ0{rc*(+kPXF(+n?1)R9f>65b%(awBu!m!j#DcMkQBt_29v
z?S<V4qzwPkQz*oA4hYq~nAobo`ta>aTsneR`@3|Wj`1tf7MrJ7JYbb9?T7MLeF<Y{
z?}w{I5|S@j7_imOmCQ3qiy*-6gvI06!BsqiRpvk4O%9nL6NZy<S%Pb$vkjeMl+A@5
z=;QGjORZI@O)ntc5<-C{9d4fzoR4-$BMpB({{fLq|K^l|j?Eu|0LlAW*k9fT4MD#>
z$2gIbUy8T;0R^?YYl1z<XtH~@*+|){cj5i4NMU6WdrP^PC_4xX#_ObnShly?kqk6)
ztm@$?l3vddp?Byon1&d;nzmy7RaxwHoVX%{j3N86|5Pkz&~{FP%VTA^R(fQyj=jlH
zm4h|aL^T1@QC)nGSB;o3KB7^ah_oHFGRl8nkG7?0#byB~3Zg2tlT;FU?kh~&-zJHr
zUj;{YQ~?L&7v$R-A&%l0`~Xou?~zQ8lG9ASs{KCicN@7a|C&#hE>Rlw2ui^R#BIGc
zlE?=4H6fq}$E8{T9QX;eMJu9~L)-CEX?e6xDcd^FVef;Q2|W>RP?O7-7ty&1U@RF3
z2l-hvMe=SYVeh5XS5=5chbU-ZRS-mC=}0BW%39P=h19E!xPx2>U3)Zs0gk!cxkk5F
zi|X^#<k@wYG0$Sy*|cr~Pt_f2dEyN(wi{S`XCWPBS%*EhOA7MqgiX@AAin29UmmQS
zZjIjuBZIh@BOcXAhB&Soj|TbV8NNkgB=@hC=+bCA%{b7nA8u0PIx-AISXhpK<C@h;
zOp7AeS{)hayavu|Ll~${ND$D&?pm~ti7(pxyZ!ji$pDJHIRd_D&CmXigbw4$j7TdP
z4dw9C+MT!lSUa6L2=wkP+Z=`fvi1gc6J2qJQtEUL-XbmOKfxB46rW{Si%d0nqG}$$
zmQ1jt0@wk?HwdLH(<JxNpD~T1LiUBwn5d@X3|e$*Cj0@oLP28V(M(R#XJXnJj!E|o
zaYN}xZu?XyYG}n@A7vY(WJCDj8^Ke)7)gwW++wXiul`VA{yfORi=uCElbIG>?RfDd
zO{rn{@5C8_4C{EOK#Qd2M3y9;souW9*P9v6dYl;3f&vK05SBd8n!33x2=mgk!sm-J
zw{*j#9z~q1(PisTO<1q_aEqc|l&YtX!XsggV(jbMV+w<k@9#n+U(a)-)@9?siNNgD
z8NP`n4Gn?~4NI<Y!+Rp(uV^iMP8iMi@<ekiIglV?3JTW_K@;{4@@i(i0K!J1DSRMc
zW5cT?t2Z~8F+@*InkNRKVLwq<vqrxr-Qqv{LR2iyo~d^1P+UDUQip+J3_4V`R*klb
z^xLl{2gmW!eK=2k)DwITGHIRM5j?7=O;_{&xefe_7@4-<c2TKOSJPFAqGC21Wu2j@
z$$9`=S-*?4o@JJXCnvq)mn$+VrwJSJ1W`J`q`Cpdr1n9emmY9K@<23?0$Bq?wwgvc
zn@Rm~0%|7_Sd!P{BcUYndxaoOPoS^^>)eRJCh5fFoJob<ySP^DzI!o?&3F+ibB$Tt
zZ9|Dpa*)BEUOk!&Hv6E3+8GTML7u_UV!KEe06jKpTS$*^q2vaqvt0s8Y&w)FcSIhH
z($7Q0QwyZi?J$=QOnx6uh4%HN_U4siWdrH>YCdu^l8#{OnDVdqr(EIhHeXN|YsblG
zYSqanW_;ifO{#Wbnmm|yg3-6lBlS;tNYZnU%H*I6|35XNOA;~Z(`6M^1SO)e61;|}
zml19iDnCw672#N)O)ssTT<G_rq|nFS=+Zle-TXsAh%4@q&|{Yq(HH0xx=bhITe1}u
zO~0o8h4(<Wj(284&OItiE%^1HZ02b(`IiT6#&e?P`_lGigc81_v@?UkH2=nXVEJxr
zOQcV*?N+SgQb6{*^gvD82H0iWG?rp}vByS)rFM#7S+doDX6RP|SBVU?bjifPzH%sq
z+r0j66jBIZ?zPO|Pu|b)(YM*zX^R3rutpe$Y@f-tkEM`>-Ne|^jHwC}(HU0@I<0Pr
zQ~gy_z>q2s1qR^)vJ&!qNv<xF!?{Hg(xGzq^!<F8s#ip|LR*d=cRH8Io|)8b84H)>
zsp9Qmnv)Yxdi(|~R?d-sY!-?bHq`SOI2M~q0}7Jb=BaDD|3)7fTrQK4<V3WKvZxLt
zblIX>JfYPNcau)X(`Q2+E4@t7JmCLa7@N9?v>+beti`8fyngDEl=K&H&5M1mkYZok
zY)Twg6}gsw<ZE6!??u>lS359$5rr5rS~~Fy38?D*xQZY&K9Wq@u9*lBa7Bu()PP`X
z^Sa)9k_Km=KT6Tj(XB-6aI|Lj{(DHOnJ7gQ$y1+6+&LO3l&wal(w+(|_K@!yvIHI!
za^T)AA?LM(4XOWBC`-L}e>AMFLCP7ExEqo@K+CvM$^+luzp{*=g!(f9SKIVZLM)CK
zJtE!;t+Df-w2l5ck-)j)Lq$dYmOvtcU#_cWq1?%9rn?$)2}yfD`sje>%&QdwMZc{9
z*9s4~ETqr(?x0J+Hn7GD`6?7JcSp#C<g|7cO0C0kt8uViN?UBKgp;X?;E%E1+)}u=
zcp$vd?-P-ugLFsq7a_NZn=C*SCG#g-okq7WFiLSM(Po)zn`ioY=|wBpz@=#KB+mso
zKNKBoR?=i=rpkiQDASfillp6ZyNU44tcuw-tTvirkx2nT!IrNC?Ks#|^&SKDWe#`7
zNqB&lSG!9z;TSU}0CjuX?ZV4*zzk6BI**|(gli>=#8jq4tfij~4k{0*_qw9(nUCo+
zU0Za;e19+^YQAzRy-jx4-!gd<yD?_IyXDQZR~M$97kAfBNu>qgSzh1xqu3R^vH_ic
zv~7EQr|8FzOjD#5YMdmsyp$!QIN|=2Pw6#3{U6R3n}@vlUvR$vl_bXp{)5li6E7tr
zdy(MtPzaI{ET5xp_J=!xlSvb=o^2emnOtDb4$9gV(?d&B%J@!SzzzDOC2^_}%nZU%
z(V+Gq#cR7U{ezTPGNkI~f<KqEU@9U=wN3&zp7_@FK7n4mzy=x=1Xy08%Vg*m2yJUZ
z<$)|!HpD|qsd(99f=PeKLPLh1UcWfVda(Br`<HZTkJYA-&>gtgBAt3jGm;=Zn@Kvs
zOq^<L%Q?2KWj*WI_>ZQh+%N+d?h+wV#2GEFE!;ZX$+_a7Yh>?1mr`WL%f}NdR#=VQ
z2MY?cBr<FEAwi1II3}dSLrmjTe;*3+4hQxHEWx(PH+FiRimMh{4*VqRtouS|6lMvW
z96Q@jwksO6T2p_|<7Do|i7Fj@HtLh`8s&j%StRjVbNJ65h9T&9F(z=^VE{JJ{t;3<
zwXp~E_gC9^in0cc^-dDOSW+jm=n6&>>#@v{Oh^*No=&&RH_&9fYpI1Yy+$~jnwxX(
zkXT#<5<oeuG{OqjL!GS*jgZ7_g64|-%Bs0J4nhdE8GF+gY~0mYu`KsU5#tG%bh^k6
zfQ=!EHHQ1;dyjeW=2S(j-@J(vFdf83+e#}`(wYJh#<XGCwGkoU!YvX_cXj?0r>C8!
zBa_l~WW<QjfRfPWl4(H9C#<v!s&$BYz-<n}8Dt{0AV`NQa`FPtkSI<fUGv0?%k=AK
zk&W<}Z+Rv=qG85wr{>+)&Q84pp(z|bQ7~+~Q18{O6+gt%ES~2(>{i>rE-)5sHY3W;
z5MEQnY2b`8+Dz%+FLHoTsPEM^^vCYiN5w4dQofV8Pv;7QYUhZ`%1;!RHAxxEYxag#
zKvN6M&2pcP0sk;c1+Z0!c;2YxB>L6=d?&`pp-CH1FuOmU^K|xDPD7=gXJR<4UK%qu
zF@E#;NAaPUUzrBl<0)4zwr{3)XXgFBZN_A!@SF4Ei1+a)X>pg*kJf}VH!(@q17V+3
zo^Lj%XiSgXn9i@EraBHmU<sjNbOOoDWR+p=nrvH_P4l57#$Mh@R$C@5sUUPjH!WqN
zhi0u0vY0*+sJBV8ek&qdV=duj)Q3EQhDvwmCo#AVEuRxFrc&8!qR^)D(T1^aSsv`*
zZuRobNGe(WY5BRThz~lIa7Up%2TKNZKYzBTv;Bo-i<qjO)A&fyS7g*90#Q7L9Hsl$
zxakoUKQmAZJtp}A>30<-eQ@j`NZ$l5<7K+hk(snklxi6MpFY;|s!&@@?Rqd6YO#Fg
zl5kCQu+L(c;+|}s*d8!4Ycs{go`^M|aO#hGA*e|27-A()*1y(mkn9`K9OT#!x@EV>
zSX8f;#8$>lDPY51EMfw#$~?9mb$6J&&XRFd^a^Fz5k`#+%p|_bw}yn!WlSj5g|AZH
zokC}Bo@B|WN33l!CiN0YJOPuvzoHeDzTQXlQ6%k|<M(c%AXmw%<OfcX0Xf?;I(%uT
zHk?cyaBf27iOmNoIs2{jL4pg|?kY!?Vzt=8fPTHstGi`seij2-b6c2O%wj*)^}mdG
zw&%<;Om=CiIz=;fEd33|^eVR4NpuWx$Nob#W7#jtOjMa?m;Q%6HdDGQUOXqtF!@89
z5^NN6?Wf&ruI{Qc7FO)!4>T1PRA=TZJgqM3aa)WVi<oAr&pgck_+mussRn}6>o|fz
zCkY}F>1d-{!fll0;zMl(zH|aoB{>v2a(?J7K^1-WN)+{SQ1PNnbn@y1v1B{cCn3Zp
zKi^#8tcFPQ?TtI5*%GDOBWy&gnF<36{55chbXKkHW8>xbA(q6ByhR-pU#YcX)(Ot{
zZs81zDNrzXG$k?Gk#|}6kt8#q$-9*~3OkMU1PIVrThufgT~qUXh=~rN>36`sgVLCC
zcWxD+0jLen3G#1YW??o#7P+;@A^kvMR*W?zw|#?Jz0%DQveYzBxzrUBZ;s1(n%`(c
z)htQdk0y@K-~s-aG_b&#<5D3HBio^sKS4Q=)q_>H$TenyfL9qO{#vm|-rp@v!YT4c
ztcXvx53y&cq)&R#6gUxM)jUCMj$1W4DjIj`!eM9p-mL`*1j<w-yLMg@4*5p<@G=>S
zw+XS2k7k(PwO(U{7!@nxmm{9IH0V^5a{Gw<Gd%HDs#T{u#K{Hd;T+Ci9zH*=cwn^%
z6v-jZhb)p;eo=(jt3`m1CC9?#BvC3)b*L_aM%rrr-^IN@{a;Qc?w{H;AX+0=6z6X=
zL^Cf{MrEf^%=!w8KV^xV4NKOTPLk$m?rVJf1@Vg1(Ui-~uZt7{)a&g6c#yaaZpHPG
zj_c&ea>mkDm^rD63{Dg3-^m|+sYNb7O>p~B@oFJ1la=6DtFG;vzFp<JT>)v5kcq4$
z^iE{Pe02%C*+T2<69MT{RsZsXl<H`GYhV@Sts2DToW%^r^m84?S^%YDr%3IX_a(7`
zSnPIkTZ3}wQzfm$k~bCt(e8((y-PS)-QVy;J4^<yD%?X^5zR;9sENCYq?Q%g?{lgx
zEb=WY`oSm5yW7hAmD()%AAc6mno%Y27N2sUtN+c9>`@BVwOqi{`O$Jv<bm3vE|&-a
z%t{XGtPC2DTXQ<)qY5&ZU6eifZTje4`5xH!F>u~9tFNLVa5EXvY)f(KT<jcdWd16p
zbThIkm3GNDSGp_aKp{4*GMD^^Lv8~d6be0QA&CMUEXN6P_f?S(J5+*Z=-W1&82ZHj
z0%DVv3FIQc`Rtvd9$PT-LJ)nCcz$=Ze}ko_LeT@Znxk5r<mHGq8uYQNX#&XMB3Nfg
zj(H(Sj&pQI6YfAl@L>>c*oOcZNb|sIZ^kHhZ87&WCRz+cn$E#OvSr7?`y*XEGbvye
zFauVdP9zRO9Bh9P)(v$aghi9pNd<i?$=6f*zOMu=nTd7XEsl_tG8oe@41pqvKg$DI
zGL2r!$$y=};k1k@Fa$U{A``11JzF}wls_NJ&X-fP3f6Bsrp_;4643TWKvmv<S4xSO
zkV5{Z<%kD=YGD*QaC(Nl@n8s4zV$)SJ<gX?LTkFBhyWTAiF&pXt|zuEMEGm+B4#N~
zG??2Jq+0=}?WkU_a^&kR__2FE7!48TqXiTte*d^4S03?)UsCw_Wc@oXY;N<6ddo~k
ztDWoO8Ab&yy*z%o%z?;riV6qWZ>jq|%^5Y`rAnM(Uolvjk*rramg@#-797L`M?3GB
zai4QL#JT&M`Zs-=Blf@XDko}oA?0th25|q`3sSwQ?u@InVg)@KV(ewbo`{#wRAb~!
zwA9kUYN(>-y`EG5ciZ<bx_9Ap;Cq`^h295g8t1-tO%B%nzGZlSn_x6x)9AwTFr<GQ
z#DNQXc^Q7C%ub$C&>HvNSa;To;bXPFc|et9L`6=(zW>x$a(lHYe*7-i6ulws7(c=m
zESW8BTzFg`U1)e8!|x!rq-g>^?_KIgp-vdB24VvkXA+rSO2ZxyA&MLKHZt-S?bC^L
zYl9`FJ;QNQrOFR5$%UMs(PsSjzb<Ty_cKnQVzQJVAxvqi8TOSE`)&azBz>u*P}L@4
zCl(JT^!@93_bbH{7$*C)>nh;O975T%D_IE@ZT*z>b@28r1%jQJ=!mV&L*%twJ6{pE
z5_+(pHkvU*x$r%&;b;kf26nkzAz7rC(79(BJM@8LoR<PK*E$#FYcJggC&)5=E0sVM
z?4x%r`cl+Fswj@iar2!j#BVQfbeB6=1eut|)E2#)4kR$+98fDm?b&mhrl3DLL{&Iv
zMd(015w1W7d{Z!|b>~kOM;zCPDsoH*OE3IqH|dA#)EsFq(v*OKY_E4hIyW<Rr<F01
zexcH3Sgv10-Fic*6@i%|*p|xW>&O4no$X@_)`HK?1O@#rz_6n9C&Uzh%FsEcW#`I9
zGOyF%bXX@Eh{6TlA=0K1aUhm}ZE>MTcFYlTeS2Kh#0Paa4#kHOmQd61Y9v)FN2@|e
z{=kbAx`Qa12RrQ7eb(p8PDmX(P2HWijPnrV{xb`+ziT|a@xT2a0DVA$zb>Y-m86UC
zqkE-zU=RrjwY{z5?W<rLTNxh%yp1|_oz7?L?6(>$dku8uLToiUG6_iGJp^8UE%wmi
z*eP2HnJdJu0Y0Zu$eJoHK3O$uJi<EL@fIs-?9TepZtaY8zBz2ecoZguMD&glX7Bi(
z4ze(aZ%cmx@zlK&k}5!ck>xLrkzBd4?D?|fg!)9}m7#_h)cRq7(=Qg<^#nI^@uGf4
zIRVS^fL-YC>!8j&qJBRrUdvqj4z_k$ynXrwj;i++NaZ}D*RIi&E7;)Srmtuet6Iw`
z1#Y)Y0n-Uw74iS{4WzP&T@R4CaG?SiUeI~+Y3bM<+<mh1<1Pp!2)X48xREISQBt$5
z=u*;EpA@Avt7_}waU`H$Cqm+%x0FlSYB~J+>=G%aHyVq(p=@rgy<Z^EPAy;%#2VbY
zO)`%J)GS$+EPi;ts!#}2>sa%6xoE;lot3Tt?3EKk3$;9a?M!Av0ELI{LX-oY3?pCa
z{ADc+dW==G85Nke*}fea^m~5Di6@n^V_!(n#rLCUW7gR6Qd-MrdDQF0MkRAI+OBHZ
zaI0)y%q2Pk+IvR4;!E!n5>Ek?++1zNttPvK-qq`@Q1`6aC`fZIrIPoYCmnliQ-F`)
z`nj23)6Vg2pV}ZuePZ$f)c0;)rVGFJvxPtIzFg0B#29MBW*`CuPz*pL<h}FFVb@xg
z&)D-KM;#_SMx<O@GXt1_45De~fq;|7I4GLt66HQWei=87nC@phJ@;R-P|0L&DKXvz
zD7xfv?UJXjCphSfxj=r8>yR0L^3U>2N5S!kCZJ)EPXvSgyOQxe5M6Mg8E6Hf0;+Po
zi8muMJZ%*DU4y(n<Jtjn7zga*rghR`qyeS?T>HkO{is5a3O{fhFZk28i6Su%`l?AQ
zFX>QOsd6UMlYVC6`Kf$FALQ9HVHINaG^80a^>LK+lG!y#DyCGf&te?2GI#EDqhqS?
z47C+2=5!q?$p{I{P@65O%4_LPrk9wlx$Eca7$nB*$5tnV`4!5n-Ca9CmsvMV6An#9
zZF^=rg1V{D+h2Cc1prW6OYk{6K3=ygKn?9iQb5b4+qD{~wSMHK{`p;Q_0|`amLwcr
z>4<QA1H8H#i>FsQvtZ^w5|j5=YoF)JF(aZsk)i6xryYK1lhM;Ul~=-vCwtG9&y*?0
zqZCRM0z5|Y*zM>p9Vy;6t*#|5j;yM;a~!`6pF0n+0+%GKgVr{5VUvhNzBa2chqIpU
z2ed2)QjWDP#PX9CVfiEz;=UdFY^tpJC7n$Or_mupV!8^E)W6MR43eli46z{$qiB5s
zn-c6=Mba|RU6Z63TxIh{s_N7J@7t{#!SOT2UPfX%AfgPvZB+eGW`;Qn`{(**flbA#
zqK=8!X}`~ntxu`%=2k|u5V8|TY3*d4`@ue$Tt;f*E2#-4LRx53-Fn3T?E74DdB1TK
z?8>1yGbPr64>FCcsdHR?6@>(SYrB?iH>4Q*Ch2jqZ(Nm<23E#jiRK`FlmLgilM6jH
z@RZX=%~`R0FSkkw&8veO13J&YT(j<5G#y-MuDMsKLFYhH1-UJ0lxX#CG*(}G<oSg_
zUy+PcYG`I?+8XCav@i-OQGx-{(g`ODa-&0jZK@YcP8O?P?HqNON3~=*=*DFv$PSeO
z7O1AR8X%)#aA2`McoAV5sFuhC?v*j67pMs!#1VEpJ?8T}o1j2Qn}KClms5jhqWCpu
zPgF2V$O)nusp9L9k5aPzxDmV(^?KLy9XtZJ|4N?re)KPL<7Ny4qf&8s+jzST>^ehM
z%&%(7xa?6}PlI6p+lzN;fa%}dwcz2C_XPPc4<Hn+!W@7gF~q2<u$22DYC=`}SB*x(
zEkscgVubDfEA?9V#HERW)u7w|5MWcDunp0{RV`Qk2p2hg^rPm${wZjRlUeXMHl)@n
zcd?M9_r<!mWh*;Z0kTJ|nBYj{mT(IWzJSM<MsrNko=l<Sy>jy{yfMX_rNeKXiB;@D
zEG3SK0^oY|V5Kks0D5d<8W!Sm{SLET0C%p_<%EfF9j|*v4j}SbuxC7HBu8OSE2VM?
zeYa_bZ#c}EhOI8AZO^9P%yV_kAd&ztDeZ4DQA99p7`O#)k0=fyNjvu|sC(!I;ukDV
z$rXSRM~=kf>_y#83zl~88}vViSP9SGmc_2wLHWlAK&<@e4p8N#78&4qjeHW`7%y+X
zNf1NHvc4Z=+5HOO!v$pEb+{0uuDDiYiBA>yXH1An!AuUr?p9x3K3=E4w7R2lKih|y
zGVTETVKQG=6$cPB8Z*vPFApCMk1x6%PO<2%7oXi<Ho{^E+_;*V_=Sx+#lV9KQ22x_
zOJ_JM;1~k8P<tZ?P`8`FG6?K~0T+mulnf!C>dYS5)h||X^lsHX&);U$XFzYfcEwD?
zs-h(ROl;b1;Qq0|5njuv7~cvckaevZ>Ayv^V}x*h+5IMKcF3aH9b2FS080$b8xbQ2
z3SbbPCXF3YN*3}4C2r1uo%G>N+(I!S)Ov56kePl97R?`>r-K$xO5Cq^M!VQZezrH4
z>BhML&OcgMo92mEm8jY^MCc2CcOD(ACj6r6CT<GkTQTpP_LY^QfuxKE&d@t;9G|Bh
z+mW7S@R)@u$&_P%v9*p&AV_PtqodMij@v7HN#9lM7rW_!j1!lOIB+m&fri}BYX)k&
z?_&x4(AJD=P3&*>Eo2bu=-5x8Q&S}Zb4o2|JxWub0ow&)h4&5F(JW(F)&@~lAis-6
z1rR+aAE0OX@0(Tx?Rmor*-<VwQ@%Q|&;eCBmqpC{&Ed;`JI4^rp$t$RJ_bc^)lF=W
ze~mKh&j<-tgi0~ySSgyRki*1)+x?sBYml4UKJdfM-abkYp9G|5l1D^S%WgNLY^IE=
zw2B`?IyyeYMa<Cv;v?VjUN|yZ)!Ou-6%yJW*qVBRl<1GH;jOKrRr3oQwZqgj8P?_{
zSvVRKElsD6Ugx{0NFsh*#`*i`QhEPYeNi@ex`IRfgT@D{>Da?n#!=IETb{==?W6$+
zmMx(<VZ6o$C^liJhtkwS1MGcNnLGfTEUsR%votQuQv`)?5K*u}ns5fFp}=N>zR*ug
zfdP}6+Eih3Na9`an_m5gowORa!`|v}SR>s+9+&ZjuVjJ5$}~5IpG~?PH!X5EY~!;c
zcq%&2b~K61_~p9$XYM%y&hGzilAgp&8^aLky?^-HWIH*I%5|XdK0@G*5y-uP;HSCV
z{^5c3x%~P<C`ea`(fOnwRZvMw(@52mjwZLGDCCyz4)xWNB*v8?`E5ZKS#7L??Dyff
zcglqE9p*9BjjZ1c$!&Oe@|E?Z{gv9=4&!Ogv7Y^K=G9ZF89?|1U%h)8_bbdK&R1{f
zK5;9dg{s4(J|>`g*n8|%w-T9hQ3eKi^hQ1p`tov>4Wd<Yr&T{%rZcbK#AuV%;t3ey
zr}|usRZtB_`4OQ%#$$*b+t@Wibp%O!;{wv`RJU?w8qzsoB<|4j1%O{wqAcbXhJkS@
z@ueGG65e!6q9PnyLw9VUe0K6dzT`&VMor{#KUQigkePd36tZLU$2q-FgX{_(Uq48B
z95YX~Z!Rf`;w}|%U17~@y_PQ4{zfPN00i2%H*AZmAzcj#=*VX91o2FTjK1*rO-6rv
zLS7Z)Ahu5YK;S(6NAR2#x`s#a9;b*8w$Co6)Ec?5c7olYtqevBf9_Af1*-1F=T=&S
z|3IeE16MkreiO;=vW6mA+$Zn!%TMq&Y>XMZ(PW7J1<y~c(_`_KYvsZithHS9U=+ih
zy<i((oX}z{RU_9dvr3CQR!28|SRcL)a6831KlIV5*+8!Q<Aey8lD9qInvIVp_Kl<+
zN@1&#`$#8BplWy>oAr-cO{>;3vl@zx{DPzN<yrP`0EizE#iw4+o^CWerP^?JyPXB~
zOv0BFXVHvJK-F{_c8+`XpR>8lD=Ww=(L6@M_m=%;fpat?1%4Z(7k^`oOlZ`e=EF?g
zRY`(gigaRKc67-sLF^j=rIoq5+bYrb>}+goZ#P^AcFYNal5&o(rrk-;arj8|RvMi!
z)j-Sal=egTKh82|<}&^B#DxWUGZo(KZ_hDwvj|Rm?YPAdBo!3r$soL=XWb)^{ios=
zD1c8iOsmHB`qAo0gfOe}E(4X<2}Lo<xrlHwkWj0Rt1kY`^aT7{K$2}D=Eh?yQ}j(V
z0^haT4<W8zMOcbBnNYSmP{kP$hZ<5#ZJG8J52-Y`#2jW4yU?jbcNhPFG+fh_Gh0sD
zV5T2Tk-Bm|wr_X?U@QQur1|pB0WW|cjBKM*VwKo*czaK>O}~=B3HZ)l8pL8xVK_mC
zSQbP6m`C<Ll^RBtQXd|TSPb}s!x??oNUbHXHUNV%fKVpfGR2)(v%sE(v9rn*<O9gp
z@${gwY%g!)335D$FG^;bXqPfwE1YN7)1JD?`e-RP%q#MI2neyruqEEY>=A=^`XE~0
zUe#IitJ6ckw@}Klu*~bl;oZ0YhNx64*m$^UvvoTRe>52(N^dX+{&fc;3X%gjq)Fk~
zjhvm92&_H>sfB+aR=mBYY@-}J#cULmF_orB#mucISD|xs*)-W!QQT>1cs^HVQwiMr
zn;E%W@DHc9W;#Rf^ev1PQavT4?Zo2sKNniyn29nMyu*S6;I4{xiYbb4zaMKa`r@<u
z=%{2+^_cY;2wS<ET+#Iq{c-yHw~)$paanSN@-Qm)P>3!o?1h3TXsBfWuZQAB$4WZT
za$m3K2<~#oim=LoV9Q}rljAA?2>WswsvMHv+a##F^%LxKA#FzFgOAa|<M0pPtt;;a
zAMi&OBA2aW_(p_<=yyZ!;>(eMq%wcY&=ecY*xh7cf@+A2v}Z0OkWIAkA%_lXK6aaE
z8w<Kj<#5xhHyG`!n8={bB80%XZtLB~Rg&-$McFoQ-yIFmQ%^W$Jlg+20VvA|gt@CH
zo4JBVBQ01Kv6kYxP6&_H@|T;uI5qY|u0AhCr7`-s5Fj~)gLWa~Jq|&FXsLcx1bQ5U
z_Ns(w5p>U(NECx?PaFOhMJ2?v`(6=j0_pOAI_Ow=(5LCmPNbP}bd{4ZErOWeW)+z8
zaZ(DZpH3<UI|hc`^jYKqzL8sls&-m;L)HM*f+ELf6I&AlC5-%lm}h04_HA|M>ACQT
zbb%m=!*Ay(4+k2>CE2c-%!h29Tt`ETVXV7~B(9Yes%v1&%QIP~a8b^1xadSqI2LN3
z0hl~+b0jb77-n6@xIr5JB78Pk(+mQXb3X-<c;L@r^wh1Y$Z0(I^hanQM~waRPJXIL
zTSFN+2BF_%Ae<MCV<5L>@(eg1ffZF7d7Dp+NCZ`!{&mR1u*$mU*+{~z-2=8GNRAZ!
z(iwqNL;!~Vj;%v%CxKtK#G@FLQ_C7N$nYF2TvS$tQN7>g_&n@M0_>p6cryeRe>zP+
zB7o##Txcn>G*l-k!5J~u>|ifinujRFcw<(#%9uAb7;t2T<xP?GqDTpdwWQN+ZOW)}
zD^!K72&7}nv(Qa^|Gk{4rKEbbvxZGUuEwZ=iwPcYO^^~;tAl{@qsfn}iZ9=O(}a#+
zgib8Di^*jJRT8Y_ST5Ze7jiP*s+%HA_Tl9|Aft4uwh_njx2XL2w095)bl&`}vtxM)
z455p44#-?Ch~tJdrDp=ncR);*3w37*;fcSFp8;5OGxgU3{nWrXTbai?XJeE+pg|<K
zy+T3MDj*Fo8y4zt)WD$A>pE1|Rj{#&8Aoyr6x|+UP_B3Y)q8NcYR7|#ozuQUg=mLT
zUkSA5bQ6!=(oMW^$F=P53p>7iW(%iZyG})*8KPQni3+8oJV8LTN6E7KR<*GV*G2J-
z3h(^&kbcyqW+-NTPYnCLHmv(CJ{n)m6t*oj4<}$DWwQyI+E$d#h)f-Q2N`th_9_^P
zGUN<34fhm^G7CCWT<Z{ILPz^6d|^#s;;%D=y!J<C>;5D6LeHVOU3DcZzoiS8-^m2o
za$6F&k;)#0Y(@FbfaTYEZJF~&Yr6Wz_p9{uVaVYSXv_|!KOyWK2i6YOmft0PUIe4;
z6Od$N3=v>rWXPbK=d45+^?C>g`H-HMiAKYNNPlRcLgU>ok^D)%fYJ5&{mrmq`05V#
ztxErW;>J`D%X@XH<z>Pov5^YYRex;z4$QavaZ^v)+=Dy^!V@X6Xu9g=xE=X-f#Tz!
zf<HnsAucGQiqRHdzvykWln$};FpSh3oTA~Z|I~4rrPp>oG}@IY@^n7!i3hmp?I8ga
zr`yMrs70JtwD}{Ze4ph7y(1&^J-oYf5FDu%y&&olAs7?@xHeg0%wE5L#GtSd1J`JN
zxDjIt>d~rpe%|02z`Rj#G4ijXp1<wsy$FZb{zXOx#CtOzvDLHNU;g5<aJ>(9cgIJ9
z<;NY(&=-B1R}l)|Nz_n;x|kjy;1zB_s9Orso;Dy<cEp6Cc4Ww_WtMj`p6c~i^mpL3
zD{RtK(06~$ODr!cp!q${j)FeFr59pS$+P9zw5Nuo|EH1k>}nhksZ56VeiPCjQV2W;
zT`GVoU54;yHK~DTmnV5||GDo^DefX4%HW_J&MxbO7g>!9?UB1QSw5f!9fxA8GG2tt
ztTzx%vd-D{KUvW=#uwPU*GY0w<*i?RWMdhKTmMWH^@_@WjhFTKU;17tySE^PZn$Jv
z+uo~yrr}GGA-A+SC*zG)k9vJPO6g1cC0s}5b(=WJ8s1Kp2r5%ahLQ)**Gus|i>{2e
zrJG3r=nh%jTpbQ>#ZZjad}U!N{7ZHDhRP#oHN|FqR;iv2&~kT+L?zB6Ldg>r3sTUV
zN=#xsJtXXJES-5wHviSQNP~T5I?)o|$2y!qTBpfoUxAD7oxHKfwI%HPVcE9T($_?o
ziE^oh+dEm?qY=JqF^rMw>u^qxV16jDk-M9043{>K>N1f21&??@a`i8hQLGiq>`nIc
zoMHGfXQ3?v?J(YrN7jO~F22Ls1+<csr6S!r{dGJiH>fhY%6MQK&}dZv0D5d<8W!em
z{}i-c0C%p_;vaz*6YHSdt{-E+foh?~5My0l_7t|legiFtq`~fF-XDfbTBnpPZ@}H3
zQLnG>t<9LLg{6jczEt3m+061x;;(5|JJJ|F>*qILnV+j1GNur|IqYjgcOQ(W^oiDd
zyc-8}ew^r+leRSsrmzeb)ZqxpeTr#dOP3q5s&C}%I=QbfDsF4h(HGUNCG*&q8hp%c
z4Wifj|N031WyAgPp*=V4@KU2n!h>-LBLE2R$Ep5~wu885d`x$~YB;&|7~*j`$+c^)
z87wy@!nc$>k;d7U$E(odxW#-RPlI1n4NfMwh@gedFb3GrR*0;iESgPj099{=dHwva
zejDXHWq+$*dVYX12JGC7n_x~YpP5l!`qrofW9cZWi5#HMydgbXUY;)n2g5zXZJn72
zP${=AOyS!$vcp=<D4D7n#GmE}cogYo0!ZnQUTfVaOOLn@vYoWu#>FiS(~nzL|Iux6
z-;l#-JY-=8jtq$kQ^ZBancE&={};f+X2xd>&AyyMPJXPsHXsTWhh0>Z1l6t58XtgM
zm8Xp34Ve|?v3Y$jk7IQRk((S{<Oo6f2Fnb5?s1tt)Z}aiHI%S7n8FvDac+zpPQeoZ
zm_S>S(XbwoK;5tS^(s-jbn3=it=uee(}dU@s~=gqz`iujWbmm@-@vVlyGNvS%bY|3
zw21bJsul{g`}Gk3{hIGPZZ)lGZpA1GNm1v%UuM0|{dL9e@P?W&O0BV74HcYzFCF`V
zLc)|mCVyex-Br^#Z&$S=DW#N84ng25Gt#tsdPP2tNHQGz7R;{5<~s{Q$hq9R!oDAN
zgcGkAKO-A=fp9q>r91VpXyy{J(VuI6zQjcO<U15kk2x6IR-m+k7#uwIt#n^L**fNI
zoQ^=UWG$&Qb2iF2U|``euxpWG&?*_1qjOD%vfdLk4r(wSk;m2!V6N|z-kTh6fJi6s
zY^&(cX|z{g>hdH|U}7x4M{IlF%TdjSs<&E#)<=pp-8%C$m)MyZo{(s<E&)uu+X1i`
zbvMGQ4z~`A*vr0YVnY%2{VPjv8-4zkCNW37Ee(_k#lk^mr!EK;);8R!xNb#Q7M<5G
ze2kc!!;#Vf<1ZTc@gy;=kf~j*nf7N({r4g{Us5Fj5`B7Jrlm<A^+0s`RR)0j@<nv(
z@X5VGb_8td1oDluSrx^TH#x;sJ6SR>>Znh^nN!gSsE7q9aK^a^hvxVzU48%K;$lF+
z40W?5M}@U8g;8+Y4t<j%U$BeM7;>cwVdRxeo84BU9TbVMDK^JqdwC}92M?v<>GO%`
zb~5bFs<VHD)H=>LFZfsIkNmi<m?^YNhT9Pmt{+upZA>I%1jF-X<Iq@P&~eTvT!(<p
zJelTXYR3JGdXY_C{3>NvbO*EzRkok$e`-u#I#oQCfYf#-a0~6R>ebFAq{CaBh*&K?
zo{FX`aWixK@BST>ReQ7SUP+L$shvYE6efjGuV^Vfk7(%}%Lw7AtK@NQXt7L4znv!)
z`G5E81Fe}1aqKc%ujb9^>PD)XL|>7}xooBPN}Qy&YHk+_ELIaV$T%s>xTHhKW@bSt
z#@BmHWLZ1?r*xGURKL>`3*UabfWNv$-S|BkhL1xrny!Ke>D*H;4ezQ@bCOxXUqMpS
z&H)btTT5!eY^RuO!G^H5B6D=l%y~$<_K=KZ-$9ESEc7!fA%ULFE(*FxD5z9&a;jJj
za&Ch(3Jd$FB%sYnK5UViGX(cK;CmeT(ZALM82=aDLa$)W-fSQ^0S*nI+#k^+Si^cl
zRpyYaKQ7oHfQr0zRNDda7oGmcb3TdvlyrdeFQ<9{#YacIq{4=q$$2O%wzMR+?(SjA
zO{fGh&OeCXiSCo{o&6td#Zr-rFof>5|FG6ZjLmz#rW<Q43XyX#kQ@tMJ!z?kH#RJA
z^YF9Ym_92`OPg~Og?$000IZa%*k@}oSVW-#XX-27@5ECWJ2;IAyAj(#_f4A9v)CT|
zG4{5Q;3ik=(<`lo&5#e8t6B2Za)vwg87dv98M7vwuFuyTiiJqx^RDbJMxb+`?N+`q
zGU*LH^T)I>2Ycuu&Y!r(T5u;_p8{`@XhF9*lA)dkT#v)>YsS#}JajCDpS2YMSf7NY
z0Gikb5@qXSE05j70qP+Hsj9OR{Z<z1)dP#6bQ085eh^5%{{qX5niZPkNGv?U?4SWs
zDX!E)KAaRSF1G;yU+!z1;;dG!<1i~AZ{0A>lYgjU`ZK_s!g&bad|u{F9oLlWypk8Y
zb0!+^bO1sHhUV}rU;M<v5mysz;74atNOC|DE%x1vPYL`L?78qa_fB^5(|GH8Y<JYL
zBfDS5$q+(0932R}Jv?$%Zo(dPm}jI{p-&Tr?&36<x`_<<i`ciFKh9vqsP8)k`v&YJ
zxeYP}r^qO{#B1+@mqI~Mr|6Xtuwj}6onvR>>>czPb2xR7&-{Vv6Oc$9O|o^yaJ)TY
zBcm-wf;VbQF0Fg}9c&u5u7BP^nhoNghk9mKXcpo7!tBwuE(20Nkb&W6{sL;LlnmV8
z;tZO-ON}c=W;nSF_Dw1l^^~avs*5w7r}O7tD-O%C>{_i;T(8^2n0lbyVI$A?#(nY7
zg)>w^VD>uwFY5kb#>Hpl(jM{6=u9T@J!jU^4~J^%;_i7Xz~NkFplT(Zw*#R;BpG0M
zpO-t(O9@@g_gs0}qRc@A35@kF9xQFE%Lm>!D`A@c=S`V9=gZ9jC%vLtzOr6c&&ljQ
z7h9<IF>=LSVEo((K&(bmk=R%5gYm?}fXG?t32wE}DzxT<RfiReuL%IFTwXNE1TgRP
z&L31voAqdm+}r;M9Da$%Kok22<R8Z_rD5cP*(T8wISwKgMn2zTH);A%sU;!zWU)zt
zW_GOYQ_)nwa_^x{8hnrgB}NOkob^HWWW;2dx61kIjGU&Z#qSV`Yy8P?@X{5s-ZDG=
z;ssbOCN~a*JD|v+9txF2ERr8aXJ@ta+!!)(bnc0**q1FTljJsRib7-1Oq#7HZgN1?
z8~QtKEY9RC#mC)pS_f}LPB*?S>5c^V$!rzlI^lIaa3WR*<jf0~=p`4hyOh`CAFZE8
zFhmzfP^TAK^pggrQw8jw*ACJDk)OXdFx0fNDihrPiwr%o|M-@kdgV~*0+!|y!a?Pt
zst_w76khZJvr0*U%^sJmPV23!LkO>5p>%X*(~2R+t!=90=IQ1=cMfcz{ltpY00A4+
zwFwk#TBm~1<EP$PJg?BHRL2W0Z=M<UE~<!5k9K2XA(;~e^A=d4oUw{{W-It{kF@>?
zc`t!ZI0|pp1ULRQJ1u0Q|NAO9-rNFL<<~|NhYOc1b^Ig1vyAE((60MlZcB%CK@tY_
zDYKWp8teK`!<o2T)s!3QS1KraAJ|FhqY(r!zbmr)KlJ87c$WmI-bt%7bF%LO*EW_*
zFVv>~7ND4Qnm4y{iRYd*k!lS82(iSdH9}%`_*KzW3266}zAEUsE1Kw8@`YI8EBLE8
zRqS38lF{sO`sU?fZ#fO#cd+D}QnIwYXA>!i!cRTsK3OA$JF{MXjN_;p?v{8SJKUS{
z$s#G~9_Skut1}8S6h}M$`*{uTx6a`HZ+826)P6d2&9x`jHQh7!=&CiB$3>jY(~5+&
zQq0OE&3-zex<XgaF_|QIthq|YlvSX+`DU4!S@R_krJ0B(hXY-vX0^U!GDxLDgttB>
zM9qTVH#n<mXxXRCkF|v_cLi&rJxgxH;21ysf}LqF?y72zES<315h|pKCs6|+%*H73
zc<Wx8BVqu$A?!rlHmh_Sk+8h-e`QU;Sm)I{mA?{xjgc=znrw7!oUP2Bz{ylZ&Iff?
zuRe^q4tBnoBmktMhT4SEOvVOxdi7NwEa{%^26@~h2*z;&=kv{jsOE`H!d(7faJv0N
zSbP$&yrqjDmITU2+`j}+wLf{;8}LT!@(cY$DbgSZ6x!f-O#Y1+q~3c5e*L8vvW4$H
z#;Ne+kXZ{93iefY{WEh;QZNEkopvpVqFqLRXe0bM&G&FBO+P>xq!U&GW%bxbGC^P;
zd?Z~S#sa{sj+EuV6;lAag67L+f6ykooGeyzWg<0CL!1`_6v?VseDxzhX3-ghk$7CR
z_b9gg_`(*Tw;LjA^YQNcHYP#y=0qZvx+Ge_*Sb%Be~1R+nCPwLe3pkjT~%g_PkQ%0
z!5_EQP3^Qr6@Fq>cIP4y0*3SLlvlRWZL8Kbw`ug`M+pQu(8L9R%3ZO=G{yO`ZS)Eh
z;dci%ptV&m0{B#B{)NwCHT3NAKrn1AP}35PhePey!uU{f9GUsA$%7(dL^e1&Gse>g
zC2s9h=cs201SIAGy(DnK2FBK%d&5zuVFx7Svx;Z5G5b!3uK%RwK!!RK{F^XW_8zu=
z4*o8m6g^J8Wp8QB3K;Lk@`Fo>F;p%F^=EA^s6Fv2n@MNYpdU$C0ps(%%l8tb9T|43
z7@h3oo^5nQ&jfzg1GVJ!I`0Q&BiOQwN4)#&EB$uZgW8DMQdD8Hq7k})cX;JvTajE`
zz=H#Dy##&Y{2BRm@E_)2d`|VMk%$#c@g#}ZRAhq~VvulSWEq01biS{x{ijqXk%Aqe
zI1Q(p{lkcX-eplMzg4T^hZ!|Er#3~TwYTJu+y51us~lNOI$isK$l+f=rLFQ)wqXuI
z-2@$G7Z^JfVDJHRH=IN{EmFN}|7~oxsaSwGFNY$q#h91OnL|;>VRgxF4OdZ!TOA0>
z-x1^_VX=7qN|3~b70cvr2NdjvBMs_>)|c&{&6`<$ka-|B^lddpprBARK`l_!mN3TN
zJAvD^DqcC2DInh1*ur2O$L|9>n#v<95yI{2A^RsZsWQS)xG4wV))DxSk|QgJ#bo2u
zr|Qubo+*I5TZC6<l+2j-ZN$QX?1gmkMXaSIxF{G4m~vPoN2Bw4WDcP)-9x4Vhf*_e
z_q1syCFp}?+5(zIw5lv!q(nQ(0=?(sL>ZsjQa<4u?1U@NP7NC9US<KkH5|oLt<>(H
zg4Mtsg;7k5CHRhwLkN01@6Egbt;pVm$R-IYBm$AS6O=2<D`wEd5({tR)pne_gh5r|
zCq*|>v|(}jnFEm|jGf{6AqOrT9l1QW*cJ6MCt_&7abCCMskxg;89QcY8dbIGbT*vP
zW0r}vM5fhLRg!NxO9e^kD1TiHOF%xbAXs9<&<8(yyrXI{$I7{pak1$#$q5(CbJD52
zV;nzBYFCHyaQopR4C|c9cz<$g_0DKvH{*_Sh7Su3W3A2&?;spB@ALdn%dps~fN!#1
zkmF0!Bn7ia;E?7TzdfVIG2YQmNPVbkBnE3Y#8(5cd2X?OES<_vXSAAIr8J~|sX$-c
zo`(e2O}mGdl;U&I^72DO{P#%wx0!Otpo;!kZ}U+A29|-}Ms7EdUMol|2+s8$Cn=H0
z$|12X52$o8^%Ye}Q?K>I%AJs&?#Jki1R7ymytDlgXPoatahECKSuL}hHgD60g6aZ6
z&!V6R)fJLpj8ay9rXfDod?Y+kaWE65Iv4X5Wa92}q7bS3Q!?#$)btU$`EXo8iWSj|
za(+?IpEl`^4$4!l>(3-XANqJR_#AZN=A6d<bv9(d^zzc}lqHn8eF*bkF97uk*NjWB
zmofCGYT2NQ1iz?eyrlHH(R1dYk2$r$cjh2KLr?V_GQG<uNM0O)pMnuEV3Uh&PVz*d
zQrM-Yk#;|#J`(mn|2X6S(1A(?iLoDR1x=MBwQjbAv^X;vme1FLrNP5%A<h?4ML=U$
z)xWhI868sT4n#<z4L2~X4G$Q*w1Qg%@^@=V;QOdMnf}7}Yb-j^rU`Mg!TGhtyX%-;
zj?RomQ=4lVr0!w=Fgzl92@ajB2VWW|3!%#GXXbtX2yaDU_T4?gKBOH0|GinS%N4*}
z_}y6~?y@w}_X~0Q5)5OMbhg00v>Y`wYlGZD`MNGXY=3cYWO_*~b0TVcPtPa5aYl10
zeuUIALr;-?5z}OCMB{ttAyJuY4X9t1bhTB_8S`i4OKL6eTM8g8>tFK44iiWP+s|;8
z*zXfoFg&E=ygm@`7xjL12@vb0ulhjOok3z#%HF%PNcYI$blrj>4KT0`ldUhtDOYU7
z7B(HwU9RTb?mC6SV|lAg3o5@&Z`>5ZrpmRetXG4{$(#(zc}$3kdpsj3U5W@vy?(a^
zz`N2}GGVsP|BYu*v0tw0mai2A8x3k0+dgKAQYW<Pu0a(Hn;l{!vDa@{DZ!&^w!NAg
z8jB&N=Kekpq@^m9x>(hB_=z;t_UEB;_Y-m|^3m&aqG#qtigYptH;b=UkT%;vK%&Z2
zq>$!wk|w=nhf4zZtL3nkJ#gke5AygX4KSCKtXjNNVQEsA&L$<b=%7LIf1k%o0vT1}
zL%V2xo^?1TcSeye*kpUoT}FEGlRfW)Lq4a|OPjWWTTGC8&I34RhB+&@i@C*8>ry_X
zx=ewQH%DG!q$QaJ^I0J|LhP-kR@D>U7YC@-pZG&kqLg~`r&`UwzEN;V*6ZtStDbX%
zEHTLT3^&3kn|~t9DvKxqi#MCbMghhCtkdKr>`hX1pQ6Y~2T;}sTGgnD%F#IX)G{F-
zn-1_01?!mEH0b~=X9^JD$VBC$vZWwJ!eS}TxsQa3-8t}NB9Pz&>w%^frjmun4-yup
zBfLu@NWA;tIVRIaVer35R`_s;*Xq6L<8yEpf%<Z{3bfu_zqy~y?^FZ#GaiHeP`Bxj
zj|Xxn?)U*r&1&G7Twd?SVp`2?Sj|Mg15neL5ykExh^3<GR5j2$pkAiR6X3Xmh-rv2
zl@Eqx0Fwm>ZA$KZGRq}ryg%v;w-T!_DWgbi53-ny0ZNb?1<9hpAk=9nl^`)D3SiYq
zZ}PiF(zjk2Q8eBgrDpuks<!_pbm<_LR9<kLly><XR9T<erhrE35XjXHZb3Mz#(EFZ
z$eOy6!6SQi*<N;r7no2fI%22T%)mHQy9y@HOb;yi{ZP=6mC<;&Y@RmM-5o&o8TVb+
zNC0|lVj33W8{rssT>y8k)8a6ZD4O~Dq>+!ibFA}$lW2Aai-tl`c*_NUSYxUz_PR}@
z>Y0&?LusS$i50q)p%gum#kPi`LKcu8u5ePoWy3##ig?sa(hlq3BQ9;lucytE$2_{Q
z4XAtSY^^;08K9h`h?6XWq=HdM%H)F2=r!Q`wEDRiCqnP3;RULUONK||PWu=!xaf7C
zB+mOjl&zfHkQqU$^w`k70xzm1-5$|PC<3_ULNrL@lg{v;(8>^L!I@PwhKtCMZB8OM
zhAE{-VXvb#`~dz0&+riMRw-+aIaB(C*BSTi)c;+%2ta=A>h3BsX)O_#X1{CDbmhG!
zI<Ck5Sz24UnpI&8jvipT=uA$Um#{nbWOS&b*=JghVJj1d*-B;Mt=^r%aUMlJ%F*Ej
z!em%}nKbkT`tOKB`c9v|ew6(vV(Bd*?DEhS|9@|J%B>(Gnhz<~_6rStAapO*CT8{9
z@0giCAI$6P*ylCjnWbY}O{+!j_FH48+wrwOZ>=(&q^r=yM}DBLVTeFqR9l8yQ6d$%
z?1OrS(vJCy7Z~D+(B5$<Ao8wOq!MqLRa&VlWy3bg<_e%BoaNtqnJo<yj^T#&2d0M(
zB)DTCwk~y|ydhd6?+r#YN-f*~&6-nZgc>(T?%;(%5yYW~VuIQcd7xgj0}%FurXl8A
z?YP_^q$rHPl!f+dxebsxm&`TX`*Q$5?42$SK2(Nw4XB36(DSb}sh4dp=wmL}RiABQ
zdYVQziOmM`FBa+mL%yag1?~Ax1Mu*8Q-wQUNOJ@EL>4A2RJ9y8LPmHu+HJlL<WU9d
zU_06{y-Jvxts@UyC|PgD3uwiufO4cvHOMWwvBo1k<4DOdIojo%6Wtch(GgfehtceD
zE+Gmw?Rv6?N|oGhbrGtGLak@l;YXVSYVj0nii$N>^}MADv7*mV=5|{pS`u2#=$W@#
ze=$1PGEiD4n08co@Ga$`Docr(@)6qGO_SrHdz81xqPSH83DLqzWPc|IIWrT{HHYJ~
z-)wej2wvzShV&0lcMivk5N-e2jBxbAhctnY8|8xHm$4vhhM8buz&4zhqmOP_>et|r
zq0p3kP(?rvpk*>9`z|DQ0=cab#6$vIPdz(Y^l9m=vdKS_or+TdXifXtWPQ+{Y04s<
zI~EwpjD?>?$dx4=WqpTxcaJZoPWVQa!edha;$$sRi1`PN#0Y+UZ6#p=+_$>&KbW=i
z)!_@jv&%c)i+wlI7={ba3y<(WQaXZ12A~BV&8Blb!XTY;n@;{#r1^4+O&F#<ajMdr
z#T_E*pxL<O+dYW4-jqw}rnFRsK>(VjAgnRkD1Lkm9TNe83m4Ch6V!=G0XB{FLNy%M
zg5N!{I}_8UU+eq;ln7&`)RbWLOT0#aXO~^KpD0AigQN~jxy(r>Qr?@_30d9XW!LHu
zh|6UZ{JoL`X7u12XW$oPG+hKwe`B?NkYw!mwjj3SqGK*7o~>94N{!(HS@<19%~02M
z8H<2c=WShgdx@`k3_$CNH28v2%<r5i0g@aYqT<(rd}&Oyqg144&)f5@a*U}8ywQ8A
zTTwuARO}T)hs>2cp)6E4LK2`ros}S5OJL-3qczNFz<WD->Ftp&e*7-(?Yi`wTB%dn
zr|Xc{_Hcd-mGn-teI@^n@BKW=MfM9ozI{MjNaD7bZ9&88eL(aX#pDKRPIm!t1ECum
zO#A5XPL_f(+*0ikCA{EsbhtY`=zMwZn_?JMi;iPrq><x)+%7FyAw&4GZ##A(>JgeA
z>A-$`vWV64Ppr>b2#dKrtOoFBLW`L;c|g?p_EM1(W%84DE?zq=7%#)n7jJ>wn`BG^
zOfD@K#>vLX(Up^p-+@9`<0ikHi2>%Y<ey#O1`kX%m;6X=E5?;*_~~V&f2XG!*}fGL
zkA+oPQ$(tC5_TSruul}|@TF;+?Ra`#*g~iBdHZs%b2vatJ}PF9pJGrL#mU)GZpAKL
z$&|r*^+zz%Yl6H?jPJ-l$yiW@Kg(^mgSW_F=H+&gU#shROI`%Mc}u-2gYyCHbw^jy
zcU`9mb>RsTlu;-hB0@vab!Tu@4oZ;CqGXM2uil>>kb0uCqcqu5z%m)mv(N9X-F+?z
z0tec<-56Bie|z51yU~6E!hqp0_(*+Rvc*O>%Xt>zo|#zNQLp6{P~PcEU`(v2u_r00
za`al^RbU=??h2#Hsg8f@eZ0OHQ_@4|4`1b8QIdDr{IAHZ{%6h{!cYuHbfRJYT*Ck{
z$IMD9bIw0QY_e()7*h$jX<p1rLwfg1)CUaeCEUuV%k{B_zxk$L0`?}DfF&&Qb4UB=
zj#ngty<P0!%rpeL3hxmtYj4uAo>}cKQq#d(TLARyKx{818=$<`zp$$(ky+_whOJGp
z7Md9gx%YzAvu91s<&CxWy2DJKc;&~=8xzX%U&E>vhoUz9-i&HVPg+0*7N#~mnSi3u
zTY+z$#hRA--7i<!uuDHE!wQI(V6$K3#p7vq5wc)TBA0NJ&t<<B%JGk~UBT#r&CTtT
znzk-O(I?U+LGx{#oSss<|120w_W1Hq7DG%Wt0p5S75Jhi4Q*`bNRcQ=5$}oC+9C$K
z7l=KC-{bwRnumQ6G)f6O&=9P@CHInYKqs%^ijOPv;bwm?n5BcEXEldE!dIYoc+Q22
zTn1!arosKH;kC#djk6Wtp>oy;WDvHF&hN1GAu=$5ok}%eTvw1Cd^L_Tli~oEY$g(G
z`jW~Z;qR&NM+gh`oE#aoKn`F~BFH?(Ee*G<r3x3T5&4K*7>c~!CDiJjDn#ogM~hkb
zd|bV|$;5!FjN>-w{7@JI7tPB6!H*p%8zgP28FtRR7%-?$I2HNq8jtOGy4p<=;?&*8
z`c6~4cKl~}bc<Y@NE%-c`4BJ*<F~p_qpLdtzp|%cQL-7VT@u_ZXt*nI;Y^%)G%QOr
z8^3QrzvI|=7~~T|CXt!X=t;qYEM?nGoYUuEk79Gc*s8A$CYbpDtT5RzS?bG1&ESjS
zK;t=Ut`5!te1fEyAfgQ3V_OR|s5PJ5QO6mcf}y4|Fz;o2-@$w!ZlysP!Zt9+6LR=)
zxeQkwy~4R1W;Jhj;*3w>-W-t1z^0Ui$5PdomKmsF^M4Y&Y31iBM9}k#Io8bIXe}}(
zr}TN%?nRh<6x2$BaG1E#>5oX7N1WKycHxwBSmr?oK8Jp|Du%nGM4DF=w)r!WFQ`c9
z8EI<fllN5uPlcvs&s@;~t<_QLsmHld43G2Q1kuH)4spPx4|@x{xPaoK)a!A<ox-m7
zPol>_jWt$1g2Ww3f6{CISyKJjDbvZuJd#kBkUdiig-Qok;M61*wP`ilu`QHvl1IHK
z3M9Q!6|S&eToy6p$}g`kNe^DriGX#gUUEn!gYU#5AwB2GE(F!2GhWBwh@kwH7i%H~
z26T3Xw0E65_aceC0PUF(UbUrVs5!o^X351=%B?438PUT2vBKh+9eR8rOulZor`~F4
zX{zq!3Y5`pGZetSq*GmR{@j9krlb#M1JtZ@Wh<(X{_Ie!1JtfAkpg7?k`GpZ+^|HY
z+j?)&?xUpQ>_}Tke4xfnWESB;#QB^X-F$Z$FlO|RAklNq`w^(aAQq+O*H`3G2?f?4
z?S0S)OhsR&+0T{T(7CmdJ6%~L^ictl9l9K47&riApu#|UG2WX3cLTPgWmoipCeuo`
z@UPX#x0aAP@at3bHE$Sw0cne{S1JkVTfTccmCaQXybJ2}3;QJL0-Gy-aWEKsYB86<
zWDsl{UIL5_bDhl_f@n-(P!-nToZBm<&Sv*$H|RDgOwBniJE$mDwgO7306>nW(_65g
zrLky!k9&q1Dn;DAzo&7$;@Jrs^|#5Z*H`#e@0_sm&F(OJw%Ky_aJvf2uhts_ARBW%
zCZjNq6qaw76$1L_j;6SrggU%~$Ge)^;#n5rt=8nBSl)6xGN;Yrp&Aro^G$!&9%pAP
zR1xujqhlYd42=QRTE>OnAk_B5go=-^NYFCGc6dD-$f{<cqy)SG1Mp~*ujybOT+Y^o
zCQ>^+%A%jWOaa_K$ocp_qnz7L`gO*S;O}lA++GiXkfzB>h(Hl6RxYCe`9z8hT_1u)
zmnf*uCZ=-&)iquXO(+8LvzhFuE=ByDh0Qi@pV=+_mWbbx*}0LmlAMXH8a<nx_bm@$
z%%6gl?&S4GKCjx1F@G<E|I=Hn<0ykEccD=qzrTUqotZE6B+kq{@}*_4@5ggn29WTv
z(*Ls@^p?v-XO}Fjc|u)5ktJ+u$5i(I>ZhcDtV6i9;CX!2P{0PDGy23$S1qDN<48w@
zWIwQlw7_!4cYeUGNhMH=Rrek!LHS?M+b3{DDq2~JOzf?9=3iy$`I5K;64!*icZW*4
zkDskBkzEESjS0{1pB*jbTbB(uZ}F1kGM_W~GJ7+q8QqZA2upC5S4!T=V0TrGsfu$l
z(d}q7pZr%faRew<>zoZ1(m$jjS(C)~BLwHX*&8DqphnMLH-6NTKY8%g>=Pyl<6?Z;
zd)ehEU|F-ZblUp*GxCR)l;yOX_X>EsSyl)?bS8t8>!DHu-iPBN3C`v#rPUm9Mpr`8
ze$EqZ>PNO}mV;_qA<b?E=cyg3gF+26qiVS+NghL0{lOXS$?;G+h=8qmp-HLeVQ%HX
z)m71}gRJ4OXM1<CZM}TIq=C+HI`VNe-wCcJdtR)sMwS~_a!xRceHnR7`tPb*FJ9dM
z?L7)5XigydaerQ((>Z+r3=R%WhGQh@gk_Qsk{BqClI2-gSfT+Y$d(pXTz4tX{M-6g
zM>DYR;L)|X^UnlWP2B$!s3?d^yQq<V%s)prIT#4Z)tsiu)xsi#J!n((H9<1cRr(nI
zHF>KxVphB|X=8&tr!js#yW{V{Ft{%Yfu7`%<XRI?&B2Y3C#>Ye(~~NETSE~0&ehEb
z<PqOr!+OrdRwVLy;)@q6>kzsk^$*Hk_hA9Wge6j|ind<j9J=)J6=cf;cG?(|406-2
ziC>FoZ+`0k`^=NA-_Xy$B1)sk4?Hc3PC-J-XQDVkhv~fk#oXE1^8~Dx&{LQ(?~chz
z=O^sT%%Z<vhtxGJ{y6|0I33-y`}Q|m=LR|G6K&+ZqaY<mFDM;3I?U3{1emg{<RnJL
zdI$_$f6O}L&&78V^<2l!qL7)~ww06_56BkNlL|`s-#|t?Pjvdik32hYIz*e=E$~te
z65>gS`d10eg+)Wvx|QRDO+E_mh-Rv?%wfcS^!i9SRSi9eOqYKfXJ%eAcdcRxcKwrK
zSjJUTp)HeqO2H96x&q$M2Yn9t@-4_A@ndPb!i_aL>(akAL|&`)%6W&02(C5409ar@
zTJbDp)25LfzTlfvY7fZjSEW1YvR_MPFK|q`HM(Z-{)VYiDIj#`cC3kDeJ0wca6q1M
z{XCP<w47hF972)g&fyAT!S6Jg%!zB6wuOoiIN@eR^(MrWZ-T9qj&Qc^2h%+`Bg}iW
z8H{i~VV3gFxW6(o&!T+pOu^j^{EB*_AxVN(^gcaiVVEbVL-{-?Z+0NCTa2*`^?=|N
zN=og)7gb&_^aBH&k`$>A{m8%et@O&<uck-7Su9L=6`0G4S_aSx+qL=W3#?-~#MT*x
zf&tD=kf-n`K|a4l$}J5F@c#Vg0W0C$7pHc5<LB7pk2~Sc$~9ET;<o3k%h~85l2<J{
z4i8{o?Crp*F)wy{{{anpntHm`Tg3&I9=KCt3YYq0G^p^>na-X9WQG|R>qukM7naI;
z8yk*Jzkg5bR~NQ7VKl`i!xSm#2oObB_GF-a72kU{hFpDoY1QZPHupu)B38PpuLV%I
zu>XX~5T>tcEJD+$1kJ|Z{do!7+`&$Ik|7+p8#q1Ly3gYnEuQ7+og8AEo?g|+HFn9P
zXf-iww2X~}@EA94u#3kzuYuI^&gfylFs_5>Cs&VprUOSH0*8gltgERz>KNJWX8<VU
zu;lO)%RD5^kT<30tTv<;zH~9mi0aaZ%P)0`9UH9moW?Wood6hxq<lv}F1Q7}Ii*}t
zl)bbh7kn!^7zu`#_z55UPgLR<gcy>bwqK^E>cpWcjB6oz1zOUn%rXvBkwvDOnYNmm
zAlL;};-W>!J(ttzR^%e@A3@W>u>|HQn7l)!T>Qp~W@bN|f?f*4x+o8+*<`X<JEF^`
z)_B2pf8T*5$y}(}y3jQ^xeBPxydjSpm70%X{jwamiGxvfB2ZRC>-+04XAI_Xu#^F8
z%YWi}i6u9?v$ASi9oquGAPj;7R~d|Ul=lerBy1IGpy_?K9=uyhcwC4=E}zIiWD-S$
zhAf~sup0y@NYpsN_uf)WWE8=v3uuytUCn5Rq4#De2X2H#sRou@bX|fCzk0FI9^UIg
z<9m?<UL4=?(GX}zpYBqhf#gvQcTb$y6Q5iSyojXXD#z4J2NjZ*;7lNL(Gu9?*d7X~
z9&6hl!-0<&ytGRHeK~euXRjOeH-+(!q`6j{Fwctp;pKj&IPI?kro+pXeDN154s#<=
z_J)z(q`Tx?6@t7WOfIZP&@k~1w+YUkA*>nXZ({Nd7;5W++F7*Xcfr|2{Dlh}7U@K1
z{&WbhGj=Lvs^L~Q0?CXw2{FQBqZXmlYPu(DbQZ{VpIIH`D<lW_cVW>BwjQieY>s-q
zZRjFBl@woO_<+Y-Ur*)yF4Bi??&9xRvR%l8rLpSs*$+2Ll>Z%rGJDLe8nj%xMBi1R
zZ5Qd*P=?|vXghyxw)Iz)wR9f&au}`s#O3jb)CF{xiX!bhD6ex&>)%|V2}VXu6@Jky
z6|gU~A;HW*RMSybdo7J7=^L-UPh6sPpa_79D=B7_$<RJ<iZq2VCIb07NB`85GMkPX
zp8v^Tq*^<mJDu#Zfz<)4rE*3<hq?I3z}Zm58Oweh^d(hi(qBJ#YAm<I0(ewY7Qv^0
zqm%cCBGvA`T*7mnl7uE=Gg?9SNkd^?%e|3BH&>wjOwBb0Jj^eq!Xxsw?a*;`+>duH
zO`<l%#pci6y0b-AJSCQu8AtT_eyr2wfxzESyppCKK$oBITnXqrI)MBqrCFLg9cK4j
zZR<?sZ{z2CUnw6rTdD)s<%i)<9|j3<*l+_~lv%UNPHNvM#9v-YD&DC^x)yVU2Yrv;
zba;m$@Rja77!!#pWIuL1tUB754}Dk1Mu}ogEmUSwUGN`gUs+gF!=ITR03D;_F4=;n
z;DdSv6LaX0ZNm2fVdSvQG;lb@U2ty@7<Wo1hXqFl)X_x`TJbgKwrP@eVV;TeCseAX
zJW7$UNdqu8lVjGx)1}fxyaO3%UUKr^Vk?zUfV-7)U!t+d+B?CA-%aeq+Q4<TV;5;G
zI0qg{o4xLE*~2HXb`d{`wIb`@bDZgE2efkXi?(e@nbQlfGfBuX$%N;%wI=<6JZV6y
zny#HkscoHn?H#K{GL83uY}S?sl?*Od(odtqu>)3F&;&Uoj~*q`K~*@l{U%^!{KJ~l
zxc`AbSMt$p`VKl$!l!h{-ZN4GXpTvP?PFRm;)Q~zwG)LmDz&kJ$O@?C{q+l`8?2U}
zsXFkgih{;r$((_6IUis1!19$9tyHa@zN5lEsk44nAe0qN)~&do>}?KB6GJMs=JucZ
zW7^)}(4OWh1al2^Le1=|G#*E^{<BiEiv&-#H%d7}#;6-CqD3%w69Zo8p9-?%DdPE@
zx0F9rpaur6$AzTB{zw*&sog>TR|L=PI!SB}U)s|AI*j}W&%AnoN`B26NXIk6jz(UC
zN<?XbUqcrznZix16JzTVwYtomgOV^>jBeYuZQHhO+qP}ncK6@5ZQHhOb57lvhq%wM
zccm)Hm$mG;ML6n!q=v4t^l0s7LD6?P+)YjGyo@J4DyieRSncAS<|$(sQkXF6dpWpO
z;K;51xTqGVB(t{ZHoAl7DBP98BUo1ys>;R)gX5bwudd09VkTyM{vLYjHh>)AibJYE
zd#a+8$C<@Ut^tk(D@g(aFUh|$`esSc<KD%6#6eW#>H{f1Cg*mV=A!qSZv=<0h9ZD)
zyX+6j7WFn*K-4+6$4nY@Cs+cZGe2)m5zqq)3wAbgU*x6yI4)<&p)>EkXPs>o<Wz27
zExbYl!!7um^%0I(v;`^vxbr5lj%B!H%3TjQ*)1{VuSl?^Qf)qjr;(bJ&WqYU6W;L2
zyUV33OY~+Rom~g!Sep&G#n;cw9s4v}8H=a_^jbz%A2=o5U&tZUsc|Qc5OysmPTYw-
z$EHyV6?VquM$z2PHdxI~gEU4YVGI}{Gz6tPlav^JWvYjXPLt=r9dke>WZvU>N->#P
zd%-&O;XV!LT6)V-^M*Rn9{N{cp2ZaYFGIbL=Lc;0|5gwuA(0Nab>3od1dp2a<~-&k
z;)e3n|C}Iw+bm9L07cfI`C;YKXV3ItG~K=?v&Z<lB)&dHwjVKM(ibemd3`N4!um;n
zt+5xxMrdh*IVwQ2NDZ`I*5LOW<p1cG&JH$7x^I$|l&`4piJ&-te<O6N?_|ZYR0{x-
z)003U`A~_0l4X$^2`PmMSkCcyR$cO@7%uB)78(rh{B0+M<;e&8Dlw<|H$DTskB~Yw
zL?6${QN*T;lNn>S+0xNuPp8$B;UGz{hDxo{zuI=L`hwq{lyqcmqlcG<(lM~&9In%G
zrfF-}WxeEhc_Cb&B(>Y3YU;G8gZ{ow%GXKP##Ogg<v@I0xPW1q-|OtJCiC^F|K8t@
ze~vwYbZzfURZGv;JN)&=`q=%ciNqLEILLfW@j?QKZVRGehGQLv+lW<0K@JmkL%8l2
zbnuO>lpED-7O%9?0=3Yk_FF}-h&$pg_)<R%g=K!H!ivRGCdr?Nu}T1lLs;~%VS4*>
zrd5qeXq-+70s~7kMU-Nl4LVbK!Yvdu+rH59ez*V|XM&*sb&6lb@9ZKL8dkD!B6DO2
zQlW_P#DRTmO@SLw7G8-lv??Q<m>E6xKs9V)1y*lPPFuqJiZP(FLkm|kSDD<nogY56
z20}#3OCiB-M?#vqX7eTh0{nfxeB3!Y=&L`fK@_{t`FJ-^$~<nnP<%LYm8n>69mY0M
zK?-pg#7BU!H$eX+=6sJ=y|E)P3rBd1dgT;DQge5z0M(yDMFJmXlYUsKwbc2Q(@JUD
zEOY0?z3CbXqmfjgjVj!bjo_3-2uS#&J9vuML&7-b_z{=gF&9B{^N`@*_!OgO3i4ZN
zcN1__2|ELDlPZ{Hx2tupb@vo)GIpikDdBk}3&dT~0gMFyy&xxYC@dnXeRu^pIWfpz
zJ(QTsNcg}WnS%tSzm+brd+KkES7`m<&MbPVkZ90yu;Rm(uA))RPp&DmIT46+J}9Hg
z4{$uk9p3<{a#05C_;_CKpD&<`J0Dn<lPUR>!qzMb(moLhLgkA;_VQsb5i~HJ<hf}6
z!KVN){)hdA`mk4sn$AD2Ypw)Yhh)A(J^K;Y8u3It<*diPL@K<@s}++T#h6thXNOYL
z1aiJEt0tE&_p^@8LGNu|Y>ZulTmC<n7Fr?j@Bc3T@B>bIwkwV_<cY`hZ3{eU@R-iH
z%w5?&*&^rB3)mc}*a0Tn1jMU2`Jvt!^~ta9*()%Kc|QB$fHMeU<)1ddMa(_)wPb4G
ztosaCzltBTLC!yXJMWh*#>d{2r+A=%Je>V8rl4tzlFjckEdi3)Lykp(=(Y6Lj4Zx5
z*U+$ns=S_YP`|vec6%B%gr07~%~K^ScuJk$@<|>R3#lYUQ=SS6NOhlHwpt2-y2!{r
zQ6sni4J16TFXf?T?M<fHU7#hKrA9OShxw}mwgt+?At<YW6{#s=b}qbH+QNq}-Nkvh
z4<Ai`DrDx4h%8t{L1zc?^+<eIEC9*eB*s2J<(ngHE5clt7Jg~BU6pP`SMISN@_eFN
z6T?#y85GNZhnfusjCqAk`4S-0?{8krKU!jZYMIO$^i2AaF;hgqS-(W}CDsf3^S!93
z^;D2JiAaDvK8^ZoFr57IN9<k<*(TD9`fsTP;3}x+Ii(cd%WlA(kepX$Hmm+N!m{<1
za`l2mIaWRl;lsvdr*_2U#Y0ZmQ_$||{;A!Iv~nyX#Sr3r?-iGRX#J1tbHwp3W(yIa
zeD3dGcl^`)jFdK6?@^;|8RJqs8$J!`x>$fgOuZx)x3OnLpl`~NLpvla1e&4|<KU7@
zWSma(w$lra$hK&E-SDK@A=i;mfk~1)l@!@ZF@l^Eh!wvb0YCylCH7t;-)%kxo_WN-
zj!zP#cJK2xg>L{+1}~8F@1y=OT4$m$?_cUWPT2_D)-jpqKyc^&GK=6Bt>~~qkpROK
zUw`tdl6$PKIz+cVj46`13A6=`uT)M>nOhQ#0kxP_=VYLCIyLlsAxBBDThKqGjJP-D
z(7&c$D7I&SiW;Gqpuix_+iay-60&olRGYZ2z1E*%bf4pW^Ga`uo5p#n)rxD?g1Q`?
zXv_!(5P0pQshI9)k00wWtr!`F*TrDre8Yp+<;F}b(~`YQ<j&pD$^QRLHp++Sx7|1+
z{<^FcZ2$q8<LhoiL^EnzFAQ<VET7KxpcBEIlcu)Wg}S|{`cbgRQC_j6j+2qL@m!|Y
zmaWM3BjmHoihEgSqrd-T#ZUb$O(CJU2-k5QLb~z{NEIL7tJDz6xV4;*^ZGcHginvL
z{;J^+NO3$7<VR3-c@c4u|GA~69IT=Qe56B`xQ~n{LX9v80ZQHbbv13wDh;3*Q*#Q1
z5a1?GjbhsUL-R`MtL{)2A;%-?JWS&X;~62r<a`;lGNZQDcM(vOpCu4`cEX5-v|(Zx
z=6QAYtiVqlab?qhsx`Ntggdx-fAJJ8yI$rgf~$HF-_kmBgrT||HLk6O(Y#?B2DX@F
zm6v98Ams+rLE?V<-%@azC?Vne|62xtPO&^EU{MMWKSKeAP7henWq_@2*a_`+E|3|n
zM6mQ{=KfvSec%%-Cr6>U2Imp3lN~&Y%-a`LW_c9(s`1Pq<F*De+h8cQ#pBM1CaE#X
zn{EYARQVe<B)VuqF7IIk70BHb%D@q(BzX30@R4JxDso2e_$1#t<)o3<pLHwCxj6^k
zOa*Crtd+so*Y?=6g%RQovO_E{_)X7(uyqe)F3<)tiAyHU{0YE3xC_Jd_m!kJtzv8O
zxvKky5?!O}+clUk+r{k_El)_atPm><ei93`;2x->SYzq?2=wy&w$GhGkT{~QN`>W&
z%Su3>Gi{xftI3#TKmf7Wc&_Xp;9txD9h13YJeewk;8eu~p3BALlgsQ|%i~{se5xt^
zs6HdE&Z$(8<Gdd>ZTp7ewub~GcEhD&MGT*%2hVwL$=x9cXWhTI^m{A^V)J!5Es1?Q
z!&x@O{G#^9iLD4y;d`0Lvf@mDnFs`Q;{}}5<4*OD_`7)cg8NJeh<$G(CUZ(`RUE~!
zQh9-Y5uSe&2JFQzo{U5>m0)IjwPvHK?1l}c@z6MVdmx+d4f>;$12qFOhi*KGC0{$7
zPMUuVaRl~Ed1fmt;XH)J9V5CWQwI&rWVm=MQ|g93bg5mbyl%*v4aWK;zc&H@u^TI*
zDQJBXRPe;v&Zu^F6-?^k$s>WLlJ3k6oHlm5ubGScM9d@^YRwz-I?JTVrB}Kun^S&i
zN%EENS1Lc<RlO(7s{`NLRFN@yjg~tr4Ov(oG+q{aFUz}C!Mqrst=|*86LoZ>ukAeF
z@Jh=TrVk!cTS30F^~#PYG@!a&f2aT&5L<PKP9JJGC^s(rmeQC3H)siJu#KeI(e7Xf
zhC;srqU<PsU@AOesbSb=UPeSr0C$Jc7(?*=DAwF7V01i`W~Z!iJ|(1c@rXvNkjt<f
zE6p+K*8Ba6)|P@Mxj=X#+R%N|J4_F(XEW>dg-Ujsc3)1i?E-E>0;~{0E$N8t_3#+R
zhdR2^#1J3P<BzOH*R~|3?!?y=rc7HgZxw;JAB=4_&<fu#GH70L_lY7R8KRmOc}8HF
zssy3r09Bs)zyM8#J(?6L_~|TftJ}4{-M+8-(XJgGrMdu>ok#FkhXU&>4d7G{`!KX2
zW4r1>-?L5D0V(Dr&tt%1*%P$pxmzR_6HKZBSJ|CHNL|W{K3_V2qRUmvTL04OI)3Gw
zj^cOGvb+N4Z8HHn_C+T*0mWJmMZu;1IRCT5h{0d!-dsk7#)pFIsX(k0!1p-`u(9Ky
z*>jDBukzxs*ZlVg<g$Nj7~wp4=jCt%vZ1oEEAb-j6T8k~_EuO0#7p!^@$^rSayJL9
z&^!fg2QMNdCN*zGbFm%){CLUEMPYoCeeA!=m+MNlupIYc#p9-};yiL6o*D8k)JdYd
zCPS7=hrC&sfHY?MSn`+h{`RO5W{qNp6UI9-p|C_7HZS-b<=l&G>+HHXK~kl$B(!Du
z*!5oDK7c<BW1~sUKh@$Z4F9UH_iI0^cyJ9Li=Y>Bo{>|+bH4DNEm8dVwyGZ^y~t&Y
zJJF<Cs)r6BH6TQ7Rf0~G{EkgJY*VBYY~|tifg58Flc%<Mlf|A*zdx{MOe4TRFob!S
z17*@dz+Q1^KkI3+T>8^C9hk?0@9qS2`Qbf!$+$LE_Tp(olAxi9dToK}MQGyl+@QI!
zu^@($Dj$v4(QhuoalPJR-%Q&Sg(_#89}@QR3PS*f<_-X?L?JQo)%91CSmo~JX35VG
zTGWATTSqDA73+Kh?nB}zyYld+2kCS_j(fc|IPRiTrZftw<6c}LVVKdM2Cj9C>%OI#
zo{v^3NKv;(N7Dgm2rpqOtwJt_^8alAEp=np@Se`=&WBn$E%kkG|BB$_48wuX)*i}X
zXk^2i#uo={BJR6MJPk-C{hkz@CeE_&UbuW7!2ZW%{iBi!C~=j%D>JVxBTmnwD=?po
zy4cB+4ts1MoH#3)yZpZBOeXASTBp*}G=88PmP4|jS%IpYc|T0fV^`Z#%ABTq)S5Y9
z!J{0}ke0dC(9evK!O%{9^JvmPcehow-M?;DQ|{>hb&NsT)qInDMnkqqYC*RTxhi;8
z`c@X=rkh%EOSubjQD8@_*Rd~9><X3_DI74ualr;P$Ex@Ydt(%bgn>NBiwCjP7cP^t
zWQalQ<+R^wED9hQpNW{&&%57+9`Z!`)(>t6{rs5IVolJ%VK%{8@xiPxO+)4|ZEYkE
zCnpy+GkqLam%T$Q6`CX~hehFc<Ok9Mv4;t@Bvs`AhDUN;NH&_Yn37T_ZJN4ARn*#T
zmkaKcdk8>`puV=1h=#>z!)at`5s*8rWFU=G=%9qV=GE_;mX6Q4Mi;Ln4Nhd<px|8~
zOoGQgJy2>y6^*JgrafM==U>4Si&t6>zOJo-wGnO5LUL{*p#4o9s}*@^t!RZKQo(&A
z9zp77VD+m#<_#i^ZmDS|>rl)kw_W_8=4f*&HEdVCZB1u&hWz+29Cp}%pc&$L6s7np
z?p_@0KskhnHO~uVvR?c^Xq|5{z2%L@F>4X?%qGvcp}+(?&^^FXb_GoAfUUc_Uydle
z9b|1#0!&Th55}38>gk3WiwSl8ZwfFQ?RckSH2TY%V+e=IU8)hr-lfp39QKUmV|EXb
zFi-_KQ5@g;psCN_saNMJlWBk+s2=eGvwh<ttpRAUjJO$PL=F9RAM?f^+&$|xG$XRJ
z*&h6NXcvb;P$lqMKmUkvq`lgCdI&Oyx(6SczlBn<IV68vX&aFr@^zzni;?a{5oOv!
z>-(|MH=hv!CE~)i6<I2>7E*4udwFbWmk9ljc$VN|0$|iQvvjYEzs(qAu61(wDS1?-
z*9pzeNJtEYd@K-DN6v!w#P;B7%x|A*0~X*h+1toY%P<8dmak3c(}uXQW_SX6=alRc
z+L%raCL5#TxAjJ%*^oghUrJt|rXnt2nC?#_fvyPCZkA?d$u55FVg#>s%W>cb(s^%D
zL4MMs1$-h*yLMQ;#h95p&Y=nw`nz8sI)``phgpiY?}2zN{*nTnmrieJ_)@*)E2g#9
zp&rW`A_R>e4l;_bFUP~9-hjlBPtFITzc|r!Z4@qt`;NUxkY?&zY(*yb5ws>6l!$H6
z_C-p2!W&}U0r6lnv9fUc9vXBoaWap8)rZv*FPW)|a^$PB^=+>R+Q=9te<jTbvr0K;
zJHB4T9(8L%fJUpGPxrfjE;i8E8I{6uh&U|L>GTjhs+bi56P)<hWFZGs4xh!o*sIcS
zk@ZFL99^&@8%hnO6Nf}ckFOXiy(04T>9^mecQbuctI(NL+%SI}z!gzYA<kOzRm2u{
z)Aupj<&tap5c-1fDCNc~oRs00C^oatX@iuu?dY8vP>$g&aAW0JrL?b}byCLrsNr0C
za`h}68V#*U%#wzjk!|W|3gT;DlnnQnW+OMnsoS#@lCzyAVrV1an*zJ@3oP}3R2&|t
z52Xd#!_{ajT-x1>w7i6++2BJJ0?w~t`8Lf3byPX?-yTKw`zi||jkRs{@?!l7Jygq!
zcb5VZ8uE!q_PsuU@BD`iBFi_DJfpHMO%VMNWVYq&l%dF(Bj&}_xu`z8`%#ZlV0&(D
zSAA(_^;p;{bXd558*o?jC9-oHy-rFMODa@`7(=gaPCOlQ2==e`>}Qonx-(aSQv)_z
z2GkAnFXaNynL@&N`I%<1UbVXEz9YJjw=F=9LWSJCHjuFnIQ?!k&Ke^X1(+~8GCE#X
z`B+8F`{i1djqpq2bf?Be@BP^HS%45#OqZoP{?KWJf9GM_{Oj@}dpvOxtIz>QHJM!$
z6E`HYA7kD~mEsR^rP)JxA7Tsq?@heC)ngKuZb!tQvsxonTn=EUJEm-MdFsiUWEMwL
zXeJJK2v*plmlzx44<o@DgRze`>W61kU##k&i*#K1pV-}lPJsgPbsbNRqqhw&jYe5V
z&_FD|@6mP_cL}9iAM$TBtW+nX9h!($LH{(Fn0hySqUeGxbz9HHcgkzzA+DLEJ+Ibt
z14j)ggun;XDZ3vAjU?{?_+yEk0mRGFsw>IS_cV}sY?<G<c(4#<eV}KfUq+KF#-=WM
z$7M%@4bwLwJUu-N`k-lHqADYz_+E9JZy)rFDs4l=uZzzHOT6FEo&%z&cd?+>O$2Sd
zzopNM;Is1J1t4ohNc48^A;$)lxQ98v=Z~{X8{sqcF&-x-l8wlQ`gx^oS1CMTHEc+c
zctn}Kd(gPqmF5|mob@xIZl>uO3&Jm+DkSdMi<PpD=kJhVVYKZH0Vxq&yXd~Ex*-uf
zRk7)2^jAt7g$J_si@M&x5n+Ef#7+o2=NqS!06HJVWosfLL@}iO$Tm6Edc)R4@o7m!
zUk?!>*x>2w&$_I@U;1au+fO(-Y35j;VS7vH{WloFk>dtMqAf<0@85_0KA1p7!0yIn
zG&+($xZOYHAo0JER?i5#S#go@GB>91s`;}pqIM90Ie(*U8S%^A$6hE&d{y;raJwS~
zB^~qc#M<71B^5$&xmFo~OV0T-r2^udQ=%r>YeKwM?*+LnhOIGl)=&MIr#jCwcYJVZ
z-41Cz1R;F6M)drTIBQBUQ<b0V)h|c-vGCe-F9Mxi$1Bi93*BHTCsuD2-98=8i;{u9
zjvo;dXyHF9@z5)ts|Zj#NFnIE*YMYM<#5-1MXCX6*#F3z4Xfi(9>l)|Cq>3)n29s2
z1zxu=vLp!>_4;}ndlY7mU(w(gD1=w&jV?6bNMki3FclOjP=eGnPbg9Gs8Fu6b@$=N
zJAs0MZ1?1+Gbs#k7s9jt%IzW~p(>B90d?ps_n|G;AWn1O{b6i9sx%xjsINL|`<%ic
zN2<mIifeA2(7sLtJty%il>K4{G4B%pC2CD}!Df@A9Y*GCmm`f{z(}|zJVsD$uK4MM
zc}T}60O<P+y}4HlWvt67h{b3(vvW0rjgd@=<%BPY?XFbsD19{E&(aWYGA;LTsjhLM
zx>(Uwf_#zJs*;W5%c*4)0&;I6WT3h2APg=aI)u(9>_}0OxU9ng+)qQHmTRy1U0ug=
z+N93$9cId0MbNIStf7R^&q@(Jd8)!yJyHG<H3tNaR?ZN<5LQ#e$Oc*~7!y^ChNz;+
zd=GtPUA?|oyuKC=qqRl(7TmF`Bmj3fhB~VnDEy1%bJ0e3scKyK$hIJf#ey9dIBkJ-
zFl4r2y?oO-pHpZlF`AjYA=9$+_w<f|g{6!8^t3qXW~fJ2ov@Qmwlo8O5Cw$^@hNYe
z8nBRhjoJPge~`unisBavo7(#m6X`_2aw6nf-A`|eE7?W=S#7#lt4Mxcb-I#i_hW6n
z(PyiZf@cQ4EeBabXwx|aMne|rY|dq#Ae^H`A@NUpT3`~MiPwAwBpaU7Pu!Tl2H0=P
z1LLnoVOs*``R%>mG1)rsUHY(;_h^{$@fa9m2KRZuwU|2_dXidR-r4~z)PyjNUutWc
zIP_pjV?8}aeiA4h)<bYBgY^oC6~kC>(*2-+H-k>fZUl`R{QgdJO>nroAF-VsT<3Rv
zuX`?%Nuzw&U5&ueD5k$6xmYhL5uaPjW8FWD1a3btI?5|Kin|$s6<zsFmP37L?%HeQ
z9wL(1TND7T11^jt6n4H~t!D1+4}cXTA=`cu+cTQhbu4X$@M8k~DB2o@=)V_<$L+9P
zwn6#`L4LR|Dw1ezD($gDJdycAwiN_#M#ai_OC<br*cKR+wDf`+b<>SjtfM@ch(43W
zJ|+q00tuj2$`h|rnk%3RI~@xAm<lRgoKmWwEl2O%9X+RaG63XI1f{#uEdCXskv%{=
zU}%7b(2Ow^zF374K^KDK!r-~=<+A%8D@l`i`DAS~>ESZ3R!Z5K3|}=Q$AC!5S%`pj
zr8FQdY7rH=FScwae8F368@X~EPpL5Hiu#Igy|b*#UzkfkT)*!eTiPD)+ip?%Dxt<Z
z&Qqi1?_5RLBQZetmW%lN9n5C^T0x1WqG2CubGt9oj!8IlKo_fSPc-bk)Y-n74?97z
zevWerO#z6(A|52}^Rnxx`YG9n7M;pax8?Y0V(xami>NqLgT95^2+GY*OEYdQKb>$H
zJ<!8=tSF`#ibc%Icc>7^3miaZYdLi@5<L4)w6ad}S_Nw(KC*O55&xzTLzS_^ayNT+
zsFB<O7@!^Bc~R|ZP**%VVu44uCzi?~*Gw>C1)PMMhgDi{vBdGx%({}LZ+Ev%M2t70
zcs7Z_`ls(;pb3eTTV^}!5shhYviE)Nw@*jB)|5=x`(<XY%;7CYnEi0gnSPyt@~Gg0
z0k_KMD9h&AN3p&ot%Hd!4FCXR28Z`7zd!xmMH(!a`YX8f>B^OUD&Hs{MxS(deqN8A
z#gWm<QRd`NsmcAkf24<30F3kBcXEt+45L$gC!g_*;mTE4Z=*gI>6INNe*M#Vf)Z^}
zfEs_&i7Nqd&!z&xf6p8+EDD*^OuaJsjC3!v_1Pe79^19e6mR*Qoi@}-2uBRH!T@A?
z6&OX)mOZaE7?&c=Ro8kUC`*!{@ffPuJ6E=-MiKE`aL5X+oZHf7c7D@SDY$*qPXABA
z%LdXF|9AbnIy6D^RK`j2;cG@7sYK!xevZK-xPbxrN~lK~(I0P?y3T-iad0+A*jW0t
zWs<5Wf&t(Gv<@xh)a}r#H&e42J^p#VX0<%4(0T5rNKbM~jTG|Ky8f=-nf_&(coDGu
z1LMhJ1jr8D@rCjM+mfvDl9kTwi1t%c(=o>4!tHG%-vvD=g7wHTvtWN-G1vdHud=IV
zm~8kobWFF0GErm&zj^@NSpKsqWNkCN2tjdbDx65mQsbVn80L~gTYqiB{>am}GyJvp
zq<Oi-_unx>Jj0<mHpMU17v@yzyF1+kR^D_8x!$<)295PzL7c0OL8|1`;7uCC9D6Pq
z!Um`mYdr;<pAPNW!~GA&0f9ggau{IedR{DGcAoBiFB-35)Y6Mdk20XoT9#f99Sw9^
zBKTY=N2P30L$qUV9i6MK6-X2j^B><B%goISVGQ@7Z0VI=Gbfkk!aU*zCk>^Bt(Xwg
zD=_)lkUIEc)7W2?woVjTw&FYE#SH$ecBuD$tX;XlmWO}B<Q9VuMS_(vdA#J9_J-ju
zP~@PF6Lb7wEFG$*VhMV36qyd5#jk)$iV7bK;N1eAS|kG_i-eZ=B(oC+UU&J*b7WHq
zJatJkSvJ_LQ`m>?1^goc((<{&R=fZ1>5c`}jJ4LvWxa5#W&JQ>e>wfqBBO*l@uu0<
znJ9`C|I+1arPhx0yJfWdLZjcH=xq;n?|S{zZBn4F4=GS-%7|nz7~c(8>z<9$S{W5+
zXSG-Nrzbs|Wx|_g29KR16Hjnhx{~iMb0tG7lH69^yJM{ZyhCiNM?3R#5|^I_UR$(=
z$-qDJapT+LO76<RG{%&DS;V<W2GRej>7pL*e2Q<>AW)qZkN8PX*FL3v%xA{3_Yt$}
zf#JjfhH)#x4XG51#tqr9yP0z7j_2F)A83NcZUgO46#YY5l5o_<Dh%z$BAzoZu(GxO
zKg=-C6tG$@n$n|vSsTVVy|agMELtq<h8=cVukzoZuN2)B?~gbDTiCn4rrxm!brFR;
zKK;KvD@B|UIDtMv^XQ;03#By`mBK6Lo=LEC9BoK>v6Fdf{&6=)+23-)##w*g>2Lqm
zA3d1~gQrs21O29&7^){_YxZMOL3Y%vaID)vqS--J*~)H}oG<#k0`^(1Wq=UWQB@d)
z7x5(@`cTVROvzy4mnKMHePFaeF0SfbCq;pcq5m+2Lu0IG;Y=Ii`XDBA8KM8#$(02D
z$YDs$07Xwa;f;H~t@zg7E-E0*_Gd1wU_fy69%p^*yUDZ=*@hi_UEU4~nzIcw1*n0e
zy}0_^`*A_8YeP&L{9A<N0|<<mUuZ7sZOr(aUgTo~>g<HNFGRk^!J*5`CeHd6tOOR;
zQTE#RP9LU*n=|PU(-^dj`b?Qj7!h`fUU6dTI8D~JTm}{MiG4?qf2?+NuV;Y8-FiB(
z)_QdSz{lJ9(2u@!YV^$*7u$(SpRPJw*qCT2CT{1lR39t9O+}qo?C{O02DyUG7VFgr
zqHt3CG9YS~o~Pepo>`(lf#WfV+a#qLV;yj%bf;#dvWUDU1g(Xv7J8u^)EL`?!{Z$?
zA|x&<8_$~uNbAqw_f`OTr1V9gQQrfuZ`F@)i_P9H$7{vg!YuyX>@|k>Q#Bjc3O?&C
zJIF_gp~5*88HaXe{~1P#eO5zCDW^3pjVpn0RUy*65lRIN4Fa5-_ESRiRpbp<l-XoM
z#bP9u`-4f3T{db@HMWlvfO(p7M73aKk=_mO$_o1Vm_HqHN&?CsEKVLkto)4PnPDJh
z$u)*fq#W3@0#uqoLHdcd;|Z?w>1Df*t+^}7ns!RAf&J^rIBf`JjO8s2H>jresZa@~
zj6Tch^U)<)x6(NL)10!B#+l&(cc|xgKUK32*hfC<teOj0X^zm&b?t9a8?g4Ho`IVr
zmuu8>eH=F6dl!g9zFOijp#$4VE|ma03_3zDZ~e|_58F+ka7efbo*rw)i#FIip+Ir&
z>L>|HlStVD{TY>tWdM@XYRcl7F#LjS^JNslt?)x>I&!=^^OAaX(km~CS=WgVn5{^Q
zU`@lO#4$z!oB$}PiD<+c^E`pnhrEZzlZn-%*E1R$^hM*9Dft25M)&v{fhX`78A7!Q
zuL5$82x4CgPVd7e<u;rsnw?1v5ODM6lK^TNiCLkwAr$JZT0z*U;nSkIFCd35!2SVQ
zQRBSB4@-aeCM{1z-0&SL$2`KJX8m2}fZQYz2A)R*7Fb2VUU6wKFbQ;>1mYpe1}x#-
zCv?Cd9X<-Kf0`F++w~{mPxKj%)EZiQ9=!Jk!|%fh*oh?;eI;3^V%aIxbihVc$y!q3
zZ1EcD>S<&pdJ|w2?HjF!P&A}3{csKpX&8sSZ%$r5jGZY7i|YqM2xXuii$hNF*egmx
z-WUOU+6I24(d#M^V09~Q#`h+H4CI5)6P3u=w-vzB<Xc+xhJv00<!IAo+ge&O>!bJz
z!r;2}g!VnrV#YcuJ%Hw&xao_Mpod6n6)Z2Cdy4%kW36+bQQB8Y(dmC~*m`!>GNKkJ
zk*8>o0=nEj<OZnfz?MMujnWctO`nRxL=EOM;C4yQ?m}k@Z2N@t5QMOAHGbo@jFWEs
zz3sE$1jhp}FP!9;*WFBLoEx1s*y@<ZaU?ot+Id^!xTGNvKdeMixB?fjP!3tc0$0%)
zv2}4c+QwV(KQDgB2s#?@Y$_p7$u=FMWn~nKh7exrv@=8R5~qgz=)(-A#w))o8yR@p
zP{^o=foW`N*E}bIgJ`WQd`f@D;#f>x240=pmP$m{8!$McGIq~#9yE%o%OgRRNkC(t
z5dWN%R;n_&#nx^@t;L<6Sl%mQtM^6bQXVF`i@QO>8rv6<8I*OZc1R}&hcqf|gq;7A
z6FA%u1NpZo;6d0k1+b3}V_*OATX~8OC$tNICJ6#0$7}I{ALE`?mou4?h}wV%%^u5D
zc7|Q?t*#v}8Oq?(g{5E4@e2I`a2^{)?S8k~1<t>!cL0sO-Vn+~G1WAZKpU+Bi4}(z
z@6C3KGI|^UfXwFOd-j&4V;|rb>F0zm#+`fv6+#RO5K8;O+5msx@nzteZ{8VeC)brP
zR=74AVmiTS6_25kZ7z;xIh#f8=Q++)DAnvWAT{fmrfBGXe}zQg5DuTu*qN`(FE)y8
zHLVjm!gKML{t{|FJv4M-a;)pCY*Q-c{AyG%NT8ZO=J`+JnW<XJpWf{KUz2+?c3s=g
z8aBsbo@;*zGt;Z`X&M+#`|N!L{XgRAkN#wC1Db^|lNv-|rvq_#9wX!p(L0yOmRPVv
zEu2w}o<NEgLj7ODQ}X006_hp~rLinS(cKQIF4CJ>jz52tVyHi5?De6-&$}Iobtfke
zrJ39tOoM^QJv0q1H!aY}Iu{r8A_c?U=D#1|Mnw~@zzNM*h~pb<$0zOE`g9fcF{)(~
zm(#>!EEYTC^;}a*9JnhmUUb>Z%BCy$6T;*)b@J+~l!aruUa*niym!5+3TatksTg(1
zYQs;^g;>Y5b(Oovygn(i>SJl}G*;U`XeUU|VBLJkLO4R?r(W2FOu7jZk&*KHpqz2l
zy{vHsv&O=qm*q~pFQ(2U7j!0T((bZe?BJ17G8T5yy3$unVf|)^9<j5JfI!8&fhsDu
zkxcA--f2Ms@=pD7rAgO6zV>6qx`JR?;h%ZM_z_G>CJ!q8)w~Y=m9N+pR}rpBc$(1~
zoQ*a8XBbTmFul|!;MTKq4sw?i67;Ap^29r<bhb3xE}7xeH`yv!l=FPje0g(pO`F+c
znJOrhJdodX|2It)OvfQoZh6Jeu61&eMaLfOIgb;mZ$zE5GZSb+vAW1T{FmU9QW_c#
zBH9>JL*6OXWT7ndG>g~Nq`MjYWewgVh)194>OF^Yj3(3u0FAz$TX2K=OXq<w*H2~5
z8bm{bRC&(DzSKSP$gZ25{b?>#f3!C#<DoCaD8x$zK6=hqYY7VmvSAQfc>M&L-9??M
zqxO6o(GdNL3=ZU2c7<Y#f{W`Zaw-wwNNUCm$|(L19Y`f3R~UpBQm{YV3qJ9HV$NGk
z7hacEVf}7|!7drRe^V@w)GEi#HzaP*PyGP@xWv@l;H<C@Mt)1B#9Ppj;p>Vh6}Yrn
zB@)>nr=D#yE6-WSi!s?Wxn5im%u-g?<xd_8fPV`Cc%_X6Fxhu*c0|JprAz3<#~cte
z>;_Icfc%-KS$}v1Vu%Kx>bSiO9PUVWLxg=A6zmQ6C~p4q|2$G$#2umxAQGKX<fa~G
zp|M3-edbBAXU4;2-&iBJR8YsjS*3C*IyoesZ-r(|KD7|`G_8_Nx|%L>%VY=kJ?u<E
zaC*+wGp5{mtwqDWfyt@uH!f@MUB6H5uzxCI^6?3<AGSm3NhM$S+scX*99yXx&@%OE
z6A`y?_;~g(VC`Qn<+gC@@^{tX)m@QV&WXKZhsd&ORu+CL0NmF!se}vkhtm*@Y?#PN
zO&2+1rHiaz2PD{ljm4tvVZTNU-;3qAA9`l3^Rg6evG9}Owy)AG?Yf~0%-8e@of4|%
z%K9GbP~|G5pyY_PJf4@)3eB$3zcj808-CzbGf=l{#j<i^UjXHk)m4O_>HMQ4cX%KH
z{mBzTvLcU=j+QF%jHqDz#eSkQrZUl5g!e}E$MQ+FB>av%p19%W6#qn-tv_!Vqi+IU
zn3qLLZv+9mwF}b%Hq$mE%sZb&>zFnamG{YUXx~4pnMV7E8g5lEM`dsqN#me8z6t8h
zE0*dFdJlg1JBV^`QX3Iz1hT7DK6#S!>rPdDz?gJ{&46sM5ef3FJACRjG00_G(=0^L
z4$cw-KV`_UYniw%B3^HEjt=O;Jf_>bjR5Kx7I#Qh)bCK-h4@OrYR<Fx7>6l)n!%tH
zAhqSQ&Oa-iBjpA8O<j9~XPi3|(4sRG?zu&_Phx{aGGM*bjnbb~aOuI0;^-;>k9q2@
z>`4?Y5}Pp-k9d;Eryf#hAe6W|Nw}{XH!;B7uA$i9K_c1ywIPdlj!X$D;P0-1<?%F~
z!TEY*Mv6UX%_M{fdL2}_cj^X8wEZQ-qQ=%E{-Frb5laruohG%RHDWsdM}>WHl;dO?
zdE^lLaw)pHrM!R90Ek@3mE#PeDF<xt&e4MS%d6<J*?VV(r7K!96NM53N}kbH%5`(T
z$7Dce20S@RpCs2EL{m6G1*ajy#_aq-h$sLZbP57$Tyz`QE}jd8+@P=OF@Ga5Bx+s?
zES$dGI@v}_=1#YF+54Z1A*~fGE*~P_(U`-kjL)li1L~`3iQ!wAX4a<BCv8q5kiS*f
zYW3E@W0M!4{aVUhLu|49&ObG2RAo>>D1-HG&pk_}3ieQT)KGw7>$oHE5Mw#sfG|j?
z3D8_<rV>{`M;}6?lfGKnL|E*To$6-T9+CY{1+!K54s@?C#l<N7)26B!DW66e-W;H8
z`3T8O?rJ^7@`jYw+Q|(E!?X}=y^W=;K(FS_>n#3>(-~|SfE;W}#%&`!1?g_rL<`V7
zwa6VWf+1ZoP&-GjSfZy>3EJJ0Gf7k~^kZ|mTq$t<-e`QQ8XV2mX2lgl8xSPKFV?~$
z>ErrLP;WH3Td}Ig0Cb^xN6$dKv=hA=QpJ<gM|sO~WqCGzrTW;VePmb7yrUWBwbDwo
z%8O&oe?o$roZg8OE=!UhREk$w+_E)-PhxQ%zYS$qEfeu$Lskp;&h26_NAeeVA2Qd*
zPw+*<D+<|wlWAx?07X6NLg0Js+8bAkyxV}@SrL|$8qzE6nfH4&Y|EcHsLZkgx=E!+
z$RX#(cxk7W(vgNlDb=TW{)Kv39Slm<%SPuo$h%|Ubb<1viNG!n6da?2r3Mcau-U@u
zs$Id&Y3Fs+B0J-Qc1?iT#e^OwEUid|j)yi@tE+zUQqa*1+9MERynqI@@e4f2I^Z30
zaZ5(b$(_SKY=XI8UDr`$pNZ=dQI=&WO==&1;MDcjrC0=iY0ygIyu1-}K^cROf<^1K
z5kkC98T$Grz2Xj|l_^EBlF`>}rMl>mKtu-mS>BgaUBEIKHmHKg*Al*YJ?=ULl!(3B
zWOayr70#U;eKdNJC&!}X1Yi{`>cJ-*Q~6)vY_pfGmhkn=_-Hw}OrJay;n!j3Y4{CY
z%YVdU0`26ew;R3Y&GF?!j5EeygIz-%xH)y6_+z`i3{a{vCG<D7K>|#}wO^Sq1dwv@
zXY{=+YfP$K#+2X+VJGJ>A{$~c-fRoI2(OP!qhMtVZcDC!!;@0hu;mOBDXT|QF+UsP
z;7g<d)ym9c?cOHJ&}>>{oY(A!$<s&{WJfXO&r5dw?pD-{03s%RPE>Gw4xHyq*!w9}
z!(vD;(+$Db>5IIYD2Q9Ap4Ne_F(Z1Wy>{>~S=U}<jwcw1D+xBR!{|ecMM=puy?H@B
z*DZldT2<$^N`Q}L{6M{dvqn37-Jy2$df|bcr$Yk-v%|zQc6nCCy~Lgz2>m{@Rsr$m
z`2c@*<`9F!v)IpNe_M;rVtUta#H9hW@Gtwy1#XXMaFKqx{Nj`4iooQ|aWZB$0C=pl
zjDLMUG1$<M=xoKSZ@==z+@Kh34V!?AIIa&(u*;-EsB9FCiMOP^hNpy2E5>Q45T$2)
zl!7qy?$AEoL#_QE;TSMLznDQ%O0lKfyQvvKw)@lGhS3k-CRwIY&2(Z?UN#+BwYW@n
z)mu2*>wGtqoUa<NZUU|Afq+PP)U-A!^iw)i7Dz~Fkj)Vs1o8AoAjXSP8lug8s*hIQ
z8Xz=GIni`Bc}qJQ`3>8;X+%DBG=38oX$Vsu2byx+pf+l5O1-TeX4FUS^Ot9#0tDQ?
z#TM_6oEyMvCMl5~;`q<div5wTwN7CG1gO4VsCuE<iq_X=#2_x{e_0Ix0}qZd?`IJm
z_kL{?%@O!EyyDpToDemg{8`nurVfrZ;GxZIn^kWKuSvf#^q#;{)VN2hJwiI==bDbY
zZ;XJY`{T#X(8yTN_`kQSv4Z(2paM|_YNVgTE);GNy#Fdgb-n)V^Wwr%*QDRV$J4c}
z2ymMm48`9Bp$$|&iUhAKCNVBp$bzh}<u_jHN3+tfXgx&$rzJ{K(7rKsFMy`JFKTa@
zBOIbTn-{&p=p4kporpB4E5YX&wE%;6ImGP|OrWwGi_j)xsX)|;^30Ri(6R(ND0fqT
zm>Y_k>$gUAgO9>xS@=kA2eYHXR1ub5VT@kRiO_J+d_dIw{^rk%N5R$?W74vGK*jEH
z(TP)#qaTp#?F&$vMO`G?FlCQjvi;d7MP_1)`cLeUF`@eCZ)&RV*W=EgX=ZC!oZZPD
zO16{q4B83lilfKo_AuWfJro4D*=Ryitl1m@S0Hx7{>YpKgUm@vE^dY=N>2Yl?^k!J
z?*OjwqqakGen%7o{mz4mF+1HHr`1X&{pZ9q-c_OuAolv1MheJx^0fWFhdin`#Q=O1
z{7H}vZ7DwW6#ZatFfQP<F`zlLN~Ay>ygKN<(fQ(!=4MNZ9v<^%77{v-2!GhepgUo4
z2WXE7(n2nOPjUDV!->@`Du>puYP^iw_`M>b0T0>2tP?C*c|=u)^FiEKBSN_SL2vXr
zvx1z4SQ&$qu-Ij|L#0yu7B#K_nLv=^&cWI|bsqljP~azYx?&YqI%O_Ds7r+hd!8Jb
z{hsH)nZq*;@Ns_o4{|$d=e&MfJC?7rOI?4`Wp->pPMEB+I<<7Sie*HGPnki5QHBo7
zXT57QlW=Th?IxNor~h!CSF{4KH=V>K#7EaK@8{cs5dJV6WT`?fw?FYR!l2`Ia4jcu
zsN@KVeaNLOgY!IiNX!0qM)Vo0jyDsie9VcCC^0Rs1W2C+Zn!i55EVg)t|0pT1dB2O
z)G%2ZInInZpj?dXl!R|SG9-g}J^>9mkaSBYNV^6JdOrx+QNhsm!?>Lu+l4Ly89Sm_
zO<8bdH_F817Lye(5b3!47|HxFkezX4|E9@kUZ?<L5(n9K1=2+3({Lx8OTp7IuuXrP
z#GL7nE&iR<A0wAFOvdopCzC{*VT$)k@GJX7v{;y-PT||O<^Jpf!9{5t484_dnMqI{
z994B!DU?8%2PvoW?Dc)CX~|3Cs;fiHiTXtrsgz8$=>qWJEMz6Rxu^5OkqQWkM2A_B
zjR0o<AppxBdDMS-2R?{H!4%7>h$BtYMH3=zU)yd^wQ6xlLi^t)%^Om810804$mET(
zt-pj$+t?zO2h_g#n<S_4-$bDix?L+8o}sHSBA_UE<wCR`vF2_Jf>emT_5i(@Ffm-b
z`g)TMWLG~wQN)o-j{k}fe?P)gylFH6GMxj)i>&;tQQ<KefiCTh;xbh6-LHH|e@`%j
z$O8lRlE&Q4j_0)&DJ|cV;-Mh*fqHG2&ww`BsuWk?PIhlRrNkovD7=8fL6s|w^l$k|
zQn}N;Z31?VZPz_syG?V1@5Od-3k)O;s@XP){DCp{lXISD#ZJEmxEre1kV&PJ+QuYl
zNHzihLvxHpdgny|W~V^C<McilM7Fo&0TF^!+tL9jY$I8$<9OFb6ngwyIb9Dasl1V<
zNr=ky>&=CFHN?_B&JPh-YO0&Z>PB(6Z|vtj{P<QhDyv_)0sv*xyZ90KkRpOUwyIch
z=;>)cO5HYO*)1~WVI%z~E(>8#(c>UM3_y=AOIUXG0BznSd*z9h407K5;zVvxlR4lD
zN~Edk!G749?+5KTrEikxx|VlVnVDZlRU&ifIC3PP1cu}HzS`E1K7H$*r(_5wgy$Ru
zJ5Me&X@LK04!TW_FMGW9JDn22{KW*38>Qj8`@0RsDC_U7X>$wKK4SLk(FbY~WQ?+4
z3-3rqHV)JQz@7kOH`%wIeZ^qGlM!>1yvNLypFv4DwVdf`2p7&AY@NxJQ`$}5-d@8I
z?nKs3B<<rwzt|w|ZfI{mJhqR4rAuyX*d?#YyejQ{Ci1o#OHg9(`}GNOyUeEZx&zYC
zA#o<d<FK4t@8JQyTZ8(DW*ppiG|`x24rLleUd5xh7671WMSG9ua`Pdt!H%P05_NKp
zFL39`=)Y5gxV5nCb3c6}Xx8n82E0cvfn1Zx49NOED5yb%@$-H#SE~d5hV^}Hn%(;g
zP#*;o(4O*i9Y6>a!csGr#K_e2+#xni0-M@smU)~=B=_G`IR_tC%Z)%tFAid!rbK)f
zj)l8kwXkrE*8)l&aJqw0m_~SpDah@tnn!-<_xN|`_Zd51l?e`pwLmQSC;u!3ze%NH
z`e!(Y{&3>Q&6xNS)ZMtu^}-0?ZT#9&B{F3jK`Z@sKP<@X)#bGAaZh%aWIlg6j=Ogt
zR|YmK6zqsc<huF2NQtALl9Ca14{B~Iy*MPnOrmj0`r>4<0YGfz3mOrUPgQGfB)OGt
z9^`C}Gtl!W%uaAodjaaQB#?nOADmj;Uxk-5yebA(l{R86PLV4eKhN10XlK>4(E8Hn
zQsW3+Cbr9`I%yBeQ~Fo{@XnFMe&M~my-U}^J8T{?Xu)XRVrW!P+dYceerlj3aPf$c
z0%8n|d#5~h_h~>RuO9+J6WM`JUbWvLlMN#Eg~6}ji13^%tHhe|47x0_PoSZWK0lwX
zj}s3c%qF#A?4&~tPwJ)q^<4ck@!@nC5)ne5EWrURe3z>n<W#gWePz^4zL#m!DI5p;
zIAQ!4k*lqRe6#^uXr8)ne~00@J_V936?eInfGNJDX20a#FXrJVm5KRj;GVaJyI|V1
zwj@R<j1_}X7?*&imvTt}lDMKDQn*@v7QE<-qR^oFmly+yCctwdH|$J}Z3+kP1L0(P
zjxWW*2z2tvy})Guni`8`D0%gr$2-D%rvXiy&oNa5)oNv?0TpsUwe{IDhPl2)jM+(~
zN`ZI*jNI9#e9mKlyvKBvn;5|e*)Th}j2G2z8oo1xF%5*`)4->vlXg2>o%?etavW=x
z$Jk~YMID5P2Lr-|MT*fl%R3_zIG(x3VJuh=k$QA#!{@Bv#z>fqmNMb12{vp`F8^Pu
zmuB@5+p}pi5nffi>>_qh-arQK7p=Kb|4S=_`YI0lh#GN3!+5ptTdyQIxcYOfAFi{=
zvwj3e4)wZ%0?@D@hE`wkHhx5V$o5ZOYR%DVt2`yMsJBYB*-p;-T{zK_AmRF?+1Sv^
z<Pa9NXPDpDYbHnLftTTfz}--MVSj~sSyXOROE?CHvD1D<t>sy2Xc8(jnAq+w7gn06
zcox!%F>-JAMh0=i52ju~GR>$3oY(d%=DB(JvD*SgRhBKZvvE6f=a#wdKRMjFew`4L
zupekaIO~!gevg|;{FK<{eHDIS^Ggd^?2WH}&$$0OO{O)aCHuU!cXZH+@I;rUwcjn~
zLs!FYxCyDTXZg=DRJOfaEc}X7rc{s&FsF*{$Da9wsTK*Nux~CYx0rslEWP{=>Nrwa
zf&CL{(SO|*?53e+JD-u={f_CR>OkiFt?9U?i7nr|!#>mpRXmJ7a5p0K>G%FziH@Zg
zp)_$rh+U(Tkx_-&?d4Y7_i|QUSPuX|0q(7Gh2)nk_VV<d(2%Z7%x$<)m0i5$?O>`B
zOqy|q4uKnGU)_%;>RGHEi<|CyneSgdq$JNWx*vD5{6e3|xp{m$3gNbs--~~)J?b(0
zt=_p=+6+&9mtNlcdypc&=P{PbDH_fVtOgv<@BT8y^2LC}!5k-Z!s7eBkym^5?edS&
zsD0)4Z5fM@uAby`B~Ed&niFxDWW*>6STaBpQVK|Aw%idMF``X9>E)i3dAMh7>L5;V
z9fJ7|T21yifTI`nl-Pbgsg7LmgT%laA_ouNhQv|nvhnC=YY6hRg8nw~mGu1jOua!g
zWB5oTaUxbFd+O#W2MKS~!^}3)7}ke)yTZ_{QL5;i>mqETL5z?QD+iU<b`MzR$TucA
zlvPwCOo4u}QRHNrEOMFMH(9+HcFW9gfGjl}vb`he6{r{1hq8gB&ZfO7XH$m>ryroz
z2lPFVrNDO#v9RMW-snM1hr#C?0i}rpi`P_5#wN}zS45VT<2;O`t=M!IqO!7<<Tsyh
z-fk70Jf=b6zm0eBfpnauJ7iezkpbUN{S+{IomyS8i?Z}^;0)XdX-~;|PIm7Ekpr23
zZ<3{oQHfABcbgmg%3sx=DIbZ6RYBO{fIc$6@#5tu^=j^giQ(6R=Z2y-X5-Yc%FM=&
z=vq^C4($@E0u$OAybHN%64_+(L*NP*<P1He*b!@Q@K5>A2F;&RnDnXK(sYf}gY>&H
zwBq0QnwuYvG2K(w;u2oorfEyLFx%R>ms^8;PuBu7a-^VzB^;8E<{1{vG#wU+E%{!U
zqkcvj-B5c_u><!1hD9Q8%6E}62<*lV3l5i*lp+T(h6*k4o^T7Y97sb%&_@zr``Fwg
z%AdPH7^9RWuYfKVxuEs?uDGw(CiRO2uUC92>23PV%xqK*Ar_`3?RFcT!VdCWE+HK9
z#bEwZb)$+k7CH(W#bGjEpm?%`(!IP2%rM8e%8jR#R?_SqDe?=*j7o^Vrw2|<zhn1M
z{%2G|bsu*@6W$*}!B77xxydq%Oc+GYhgj<s16Id~$*6$wP@51m4W>}kBN|N51HS_q
zTad`!+fq^+m-~;|TD4&5!5u!y#W0}_GO9Esi8CZXkG8R`fytvn7D}?j9x2QOx#G|u
z`%>%vR+_GwN9%I1Lo3IZ%|jFMCM#yDaM{f6czaa-;NaotGqs+Dq}k{yx<({^-Jsrm
z#tX>QQirgm0A+U~8M2Z{WN^?NK95|{_y_@mRCo&Hj2!VPhv9bE?HO5pB7zVhE)*qE
zJWVFY&&DZ&dhPe0#YAKC9Ke*JHxl^=2R3(}6kHw#2igrP;i=~2oEemJWi4IGq~%zZ
zAl#f=!vSRYCNAMXfWHRy#?>5SsBG{ez>fu~ciokYbd>mgS3fX(NH1BHAm7$-7}%96
zO(|B(LLaoaCogM~;8D^Aw|Y;5G_98i%QKfuhRnRZa=rj$*pr#1nsD}Lhgio4aJb{H
z@3!0<w7>_)pnbF9-1YDUylCHG1FO;dV$HQ0Kfw7t)6SlPABCSt!TDEA(WGq0c|B#0
z>l}Tm$$*My%d{-1x0+WYl=12oT91M(TlgF<lIV>LHK82pO*}WCOlzCwq>i{nuUL9K
zRm2ZXR_#F2%oxhK__h)cKr_D$ougRAig5RS2<dKVRoepnUt`^V#qs~J_fE~3a8bK%
zk|(xp+vwP~)3KdS$F^<Twr$(CZEN+xx2pEpI$5=ASMB#V%vm*S+;iO5RWNIc_aFz%
zC{ZKkEo)bm1Z~}VYC3zxYCZxUConwzS&aPtAy$^VE1u$XYGN<t?RBILv!$-eAqynQ
zSVS2BRPE_wb-uMLJLk)3we70J4>X@AIkyhA9NXHUN1rURJZiZm3CjMf+{K~tBDfNw
z+D`J&%pjrt3VTIX+Cub4&$_nB9xP6>)Z)iwRE+~8`WIDy!PM1Ce+PS8tV14>A!Jh<
zikzO*z_4SMgFq3-IIJ`!wMuOeZhS<k?P{l*In*(>0O?Nfi`%5Vj?~UzWn}nx*E?~R
zdDxw8Ye!YSWd;9d0{o_EUiQW!n;}HwE}0aeep%QW5&z;4N9}nbaGF~_6A6#D!~lMO
zL1mm97Y+pIG;V}@WykZIqhLkyk)-@-xJ2_Ax^WX7+;)-^orb*)kL$+6Etk3jtzbYn
z!WK$PFgP>&jCbkF-c27VR@3anARe^5_db_V>2nRgCbKP6a^6Z4WJ!#@$w%1QY84S=
z08Ij!w!XFZvmot4{jYcg-o`X+Ng>GdIHc%3Vp1B%+kXu~I(#MeXvfw9^PTZfn@02=
z+(sdYj*_gKPQrxEdx=2@DClYkT8(bCPO;AT>ghHQv3jXJ>>9R$#VykuO&0|0;q@q_
zE~$+Lj}~~I4y>WQSA=S=_NPiiNQ{foUJPgQiNHpP98*V)6c&EN@zF`jkA6(p^BeSB
zEqnQiRmJqTd6xnL`;$M^U&G3WIx$+sm~+>keM8~rdbGmhW)roVb656msOwq{CcKl5
z3qTzx@NKS7V6&DN12wI@_k6Xth89K&d=nHkup3s^1^F9y8Vk3Oj^>SJ-N3q$<0#Pg
zRjGSmBsV{ojFl9K)>*RLYa6I>G`Felg=U%(M%sx8YXB+(yN5=kC5<g34^X(9ho)h3
zC%A&^p{_x0|L*<jClC=_bt+2IP}#Oj%~HYC-NYi&PUcl}8M}=vFy69jo%EiDmuwyH
zB;Uwx>|gZFJ#V4%Sa_ZDE6VTeR8fukxBw2sWWp1;Z*kIEB#_5J;a!<sI3wES!LJuQ
z;?2jrFI9K)mSwnyMj^iJpSp~_rO#jpB`7yiu-8*CAt+Y@CWU2q77Yw!CnAA&X47*R
zsFA<<wh16z>mN)xdXao#Qh2=8orpsMGe;v($94znUh__K@*qJRH%X@R1HW`#u$-$3
z>JAW`3CuzatO&$=$X1aoQg|7RB{`O~oyUb`S;GhyDd`3RRVhvWo*xL94<$Ki0r5kI
zUC9#zm{L~3`F92M);03(C^Y4o7IX31Y%R$!rtpk;ck1dgG<&RQ6jLQGi5?EMBb(W%
z3AjU>EiPo5EmffF&RtNf$n&q-HkC2}gYc8xGWZGdC(qhX(59AJ+HoS^xVM*Ct7bZ-
z>?b=e&gf+6)5r<ydNbKy5V$ZlXt}iYUH0O{H>LG0(KH%bsa;_73jkJg)wW%97#Ji3
zcaZ7JBuEoH98NtgahNr296@!g<0fI-4hUVwny!kTG;qTn_L0$;p--Hu$l07^A7wM+
ze+w{L0~=%fi9w!7>R}R+&-hNuEoB?cI6Z?f@jD4jGF?3IZuGhZxB;-uugBE+R)DoQ
zOKiRFdI5HzW-?YI6<IGwFYo%bul;?3D;7m}NYw}|#ZY)JDW}3`D!07Q)(^0ve~WhV
zuCP5w&_F1ICplW9I>Z_g@6OolZ_sXZVbf3InrW7<o6!d{yhn<XjNr;^Zs2l?`0MiD
z3KwTu4O9d-w*4_tM{K}{>WGsQ>3Dg%oslv7=Nx?VMGQN^Xg+K+E)4__-_P_dzYHf)
zuIz1%d@dJoV8arQo8|vhA|EZ)&2#p~IbdqT#=xf3<K3T%SU5==LWoewa45=7!yK4G
zfj0mZKH~0igZAaP*%Vl}v6P@}j<`k9KNBxYjlX5xC*JTdl5T9arLuN|_fPEy+XJ2N
zOuj0wTx*M+&+6kjG(ZzUy62YARGuhg)M?2$CxSKsIezhot59r*_l)AE41RL4LTzQk
z-5GeLJFE1y=(+AMnYpSEa^xgQ!`#%{mv<r6dDv{AD9Ly|P_-POd%QXrVEi8SIKCAX
zuF~_cIoRl=v5L3S6&btVfWZ=Qgj*OPE!uy{X|iR=Gh1B0mci^;5<R&^WY+w__P;=%
zAfbZjAps@|=eSREnqm>6*o%&6IqOYpkt+csBidckA$e_Y_$yR<X@L(E`Q!KV3(#pq
zhFs2F*dd>C(=xO4`9;~xQYD0(n*2~2P$;TvLm~j(7WukRR6f+w5%o7jS6-BN&NJHf
zL+p@Y)M}dRW`tHaaRu*TZ*R-g3Pd-T{58M(^q1)`giTqXsX*|IOFS(2D5&Bdh`h$%
z$|LkL6*p_`VgNXycL8&+&2&gq&Ch1a;koIC71?u|ef6RvbXH%n?pl9M2_!VA9?5K$
zJX^;5n7A0X8T-rR@}%JsltbXa4E&9RJg7Ys=!RBoD%yOn>jJI9`J(qxEF0I;_}h?P
zH0rQ-Hoo_V%$_B1_Bvm8Z+ss4r5oq3%Anrga#cue_RU9l9nRT`V&g{ZV|SBUq9E%B
zFO$a}#;ZU|_1Hfz^`(b=Mm!i|w!i9dq~~a}s+EiD3X#)cwG`7XK!&5JUdZ(1Y;DvP
zO@Bd#cBSKT*QMEh9V><5&O8!$Jtzf{|NC(EGl(Ekr@omh2V-Nl%?y+<+;b20V_yNV
z{xHX$#3?HLP-rmdH|m<fWSk{ngXpYLBg~9zV`_9z#`Rzs1Df@EXxE{b^A}_Bx2nSx
z>@+!BfKgEYj1_HD7xm<i+x0`iNT}uKAfYvt?wKR*Wa75tuPk0TfNNPLt^DMjkR`e`
zjxx11=zcCtJW{ap3f^|TWEivGU=#gexA;l4tnZUDOfnGuK&O6?Kl~aAz(?k0ni-XU
zc?%&n;K|ZPliOhwk(gWO`5n%$T=Ar<YfQLSk=YEkh0@9R)PSw*TU#wliTY1`Mta-e
zK{+gpP_bml#EGIuE2M4$@HSH`Cv<jfN!zzqU~ISQIFMBMuna&|_9V5AUC`-3m_)~5
z86oVDt*|dTJ5)xYa5BEaacC~2j-0<;JPqIJA8s8{DP)bCM&c6rT`1LfE`>rIrdDaY
zh-GEQT$$EY13F(D0`)WKeFS&3!1I#g15Et<{%iwWhvb)pRNWEyApnlc;J=Ro3lIl)
zQn)FtD^vlZrp71Oz|ZIsBDbXaMqu_oL=`$^N|%o}95)A6WF-J?>w&<abv-`CASgAh
zIgks+belBxfptm1-+jTJvW@Kmp(GJtVXjxY_$j4%!_!*gUW{ub=zkUQO}JCCmM5>d
zHi_5GbpbGN1!VE5j3v4$l(_%yNq3wS<1oa%SIuRn{lanSYF$Q&7zRFs4ScYzp^SJw
zfP7@0nt#do9sbOi8eq;z)&K;z4~l`=A`bay2vgKA&D<0Ocyrt5WJ`$s()!LMXs=A~
zD-8q&t{rLruWG%`2sZ09&MWZQRJHa%^o=xIYz`lKJ>pVPLphE&uuU&pmhw!v+~wXi
zE*%(F1oa3CDNRzbmjWfr+B$Q#$<=a}&b3Iuj<EnWLa~P7LNSFWT$-f?e<{_=lX_Io
z<>CW<3)7knjIw6fCu`aB%A}-3#cN*sViejC4M%?r3^Bp;dw{`ro6$;94tT+SE^d%o
z2vSMxL#Oo^d2m~5B%S%Wo++<`Xo4dM;*;n-DYFzj*FJ(QcbYe6{!y`0L0HUROiA8X
zq1FBc&qNewZ)q1>!(DkUn&?S2P{{Uf=2!LIr2HiKq_E+ldV!Q9w&0<&8kGXE%1tCI
zh=)fKr(BwB;4Zxy5k*}aN*ij~ZHs;04|l&OzxgqrB@)Sg7Ls@W#X<OQ!J8n^Kfa4q
z<B*g(Xr<c723{L(n9&wdzRb8?x$unt9E_1ao_-l?ibu8{sE@`eh{1h>cyZnvsSu((
zi(Z45HAgmmzJbb^I?qWHMJdQgtoGC~CbC`xxBAoUaz1ZL6;uP!cTdpRP?=N^x%CZ%
zMS-!fJEtg=9-!mKjJZO(+*C5aouBuv=zQJ_9rYwPiA=eWZ!Wr?utB9`FSieO((&pk
z|4vHETb}$MYkJ^h4HpD$v>CR3EQ7}N#Ct)wsttc*4t)c4YFJva*Mb*1@2Go<J4n#y
zx#?N2uNH(HH4qzaf-z6@%VDiT)Dv{p_*xMjyx4yms(c9qyZF-&XptTLk1KyF(wC;<
zgs9chpjE^+uwp=_7m}yQ>rC#+xk&K`s;fiI-pkC<sh%64?YR^~U6jq7tzZsuw$KPa
zR)c}%PpD4n$>))a^^>9x=H<lG$f5ymJBBuJQPzu{F<G9n@i7YG4<UQKVVC80lF$|V
zG^XUHb$2RinkIu-PkQ)8!<4JZ^n7eoF?M&ma$>dQ4W>x{eKusWf~ko$etx%+8yy3e
z(>)|H=KDaR4%(#u$8#U`u82zgUdCh^335Z#4#D5Woxz99nn*jq@2%XGIU1w_Ng-)u
zb+Gv=-lv{R&6m+w(J9zti(ya8NBc$}KO;Hq6iXy0k%9AyIK_P!X)^Y}i#=u5U_*3>
zq5924-~s$HxALxl-!1mP;nO*z<;{i^vbtJq27pc-@Kk5&ks4Sz*Ofu*K$ymL%Lyh!
z=jZWgvRs;_d4>veA4@RC4*m4G$Abq?*$K}=HW@3KCge}_Xu@I@sM?RH_dxh0Yo)G%
zajARAGZw=_?vG!yD(SBS_0E3vGKy_GdT3x_oJ|7o<zD7F7SIb-0`|jBEuo<b@w~&6
zHL{HHJ1>Lu2{-pltVvlr9es;X5v|-0810EzwgZP5Q8%|I!C$9tM`bRd|GA#g-cZMZ
ziLSt<@xw!zecX4V+$pgk-t|}iJrtjj39a+nlGkc*<JT?DY0Hs1vvF73Xed5BK~V%y
zN_Flww?Q4l6nI=a+nsYTTvo<Dq}`1EYYl>he6@BMBi{$4vz8%$tYhK@MbM#(NxnzR
z!y}$X54aUz{L;y|6e^7Vj?;WH%DYl@BBj{q9qT9Ce`N?|2pxokU+AYbuY=VVKx?Cc
z+8S%UK?!`&`44?Vp~j4S9w@is-b(3+fSAu<1$OgcYEbQ6Ji24GYTiz~BGCP?hP2CR
zF>_DM0j;T1S5S*LeY?&hJVC7JpM?(djB_eJ{NfA{_9I|@6bZ=<?H>p3Coo;vw54#&
z=uu!m_zSk-ukY11`23F_%e3rCt(3LxQf#LWnc%lJ@_T}hcuIN>T5U`@u3v1Gm`ZFD
zn4uc;%_pt*w@P(o(_88{@tz^Id{m|f4Sal+fIzGOk(ylakgd3~L&{Lz(fyfd<(XAu
z^y&csaeDSyWwbtbfPf@T0YsDtvzH^u^5w~jcrK(GUN{c1hQ@HfrG?C21r&DbK9TQ{
zThE$Sg0YDI=TqR8!4H@zuEioShmFPpiSu7F6@&Uj9_5g_;Rh6ZQ5o%EUsS%|hN5K(
z)9JkpeaSvEd996(J<Wd4qL)7Qy9&mZ35{C4cQOqqt3M$c(bFN_1F$87Ni)j#xWolb
z?KT}V7@wES%4hyz4Xgwb+<tvYckHf~u=0rSU;L9IHSM5dLaHmpdYbDCUI-);jYQtn
zrx{?ppuQ2TyfM&KI$|~820Wtm{2CYIG$m<wB9M1T`adW#<PZ?+|04j9ojsO;R^|5H
z?Wm?0ONM|yTQukl^AX~9JAKAVe{PPiJ5rd$H6=(}WN@!N6UyS1^`*pr;PcUNf^uor
zn|J$D81C4`!G#Jb<Ry`g3XMtoWB)JrsDE7*>Sc2pa1*N<2RgEkVxlE|Q?};a*67^a
z<y6F18`<QfnQr%pl2f&LYtec6U&yU{1XEuRYz7al4&`HFBz5xIKW}ciEJ%|?&+Y^n
z4a%|+$H7XbbBNrU^#_X{)!!5p+SL&wf6Re{<gky$*)qq}<qzTtzbRE?M=RC5JsqRG
zUfByN0uRuVair8>$2Q1<PtFnFba5YbF?U|@JIrlG(9q38%JVjS<ist!{jPtw#Z?<y
z`Nap2!vV62ilrzYa$0!3Cj>}M+MC}#bcp#hH9#}?<41`bMSKmaOfxgC0q8PGaDy5m
z_W)QW1E{#wDwgqI?E%t-<CZs)ijxE89kL3|M4p>0KNtC<@+^(iw#%y>ecWw)iuwP5
z)h5=$54e{VbNL`L;7m~iqqmDUq)8@S><GS)JEGCjM6isTPR<m6_7z@sw!L6|XrN$t
zUqBfz&?WTZJc9cOA<}GH0Ro}&s~~p~U2S?rwAqjZA8<Gu9GmmrEnbCTY{;bw8_ZJa
z!Yu-r0-9t(-!>~t6F}e5!_eA3%=-L7;EUbO4}DW{MWp=upu7ENZ6Yn1^fHTvZqdo6
zly6jiqH*JZ@+5oThLBgy<P?zu2ZHGMp}X?&bpYP+(wc*-Iaq%%o!E41(s}Bx*Lc4A
zFGh6d-p^ver2n~iHx}?j|1W{BipI}(`Jy|S%NGvqD8A@Q4Us|&p1-+EZ)dlw3z;Gu
zA=>{ws<jFgD}0_2Yx$sRW1MHHmAbyY=t7#H7DzG;{-FhQhb_&6gN6hevlRAINN&`w
z5(K3uv6!VvuSC#VCW$WkdnjfmNBr4WqtgwrvbOwdP9Xu}1t8L*Dd_{J5lFOnIJ@wY
zs)L<=(tj}BY+HecD}rjuXx3^q%Ah4GIb&A5xJZffeder!Xb;ULJEG)T8_;Wbaa`N+
z0wnhg3dTNA__Ua8$;6yd=oehY!I<oKPbhpDZe^e}W9@Ha&Wg1%uB5SRx;_GyF$K+g
z$2%mI+G_h6c*R#-aPKMTdsR8Z9{twep-pnW#gbw~AhZMVLQbnr>oOHDzpTvRJl}1H
zrM;)6+%oj_IgTjw=TIQh#exsB71x$XT={7lI;Y2QLBgSwHsl_*$mLWssWiAb)WS?@
zLcKjV$0m_+?CG1RbX^j{aK1<>w#iEZ1-%;Zaid#?3?VIj4x>kixWhZ$mIryXWLZ$!
zRW9g=kUlrP#lge-@ErYw$;SCL3?m~D1mBYh`r-+CQ_vkPl1Qz`Aku1(Ab&;H7C~R|
zWWVC;mDf3CIZM<(pHjdZN_%cYy(_)S4PCiyfEALDer~>-V(*uM-epElnAiqj{2Ka-
zkClh^)6HY9iAE}fj?MFF2;q6|<iQUpoJV%rEa+sRIs&|xiA4%J2>%}B%l%}Cw52i3
zE9zg#NZH=Z`kPp%UAu}=H6izh#P1B48c1DN#X=*C!$YTlye6U?(G5igl_k)|n-@q2
zx|Wmj&b*ZOBpgzE$u&YX2puLjDLv0=NS=Zup85$>koD1(I#Ufk15MG<T6#XcjqA^I
z`e0_e;mH$idpKWHAA6#E$f5#=Z4^XE1&Zf)i1zvdN>mP+NCXm3>Iu?p>M-uylX8z*
z$oeqxbI^lka3j$sMtM**XaN~bKldWtvy%O-Yg=J%*F6`6*h-r98J*i=O;@mQFbGD%
zXDd3*LdHO|U?$*hN!=cJZ_$9$&s0Bg;V(xcWIpi?mty(OA+|P2;;bini4~Vx5be+7
zAY2kyB|2!a4h+d&C{mrF^hfFmpdh!M^q90HLcg1mk0%^s`P~|(Fa8o-HpE2p`Mqg8
zM}`gr$PdXl_@1BF_RsQ7<$%rN<_YL>{H&pXIRB6;r_uLEQC=tTSGaFwK@>-XuyxHV
z`wQ=Zu2UC;AiwW5jS}T9CC_22yy0_)e3wrV2h7HaiQ5{J;Qe93FQxshgGnVCClO1k
zmk9fJL9SKT>hI(b!g=b#x&xz}Iu&Dp65O)2CJ+t}hVT&8mRUJba+z?NqCsR+YG%U(
zkHM9LEiWi;*Ws<(q%!Za7WB=TTg1uNaJGOAG2+6IK3Hrqm$ueDCmTp?Ljvi>X|Uw8
zRQ##23vtf1Md&)PkhWQ0XOpWdIM;gj(~nd+yhp6ssywogbAXwZ05RDYMHt2+EefQz
z19++ld1uVOGTs*!6GtH!ZCzRx;{4J4eZhfjEYB5}Fom!PCU)B)MB$dYJbjCmoK>TZ
z{U}*i$M=+OREwLbDsuggu2bHYvjK}9fgcB-s*WOJ<eZ};Bl?n@iV4pn4^TU{blEwP
zCz=RsE9fv1oXmm?Ed<v4H#lZ`g?F_0^SnTuQ@r|@>$6A2)8r7CMJ)NFKq1O;TCuld
z%>?~`V;Hi<1@kIk-yGH_M9_E6%BkeiEJCgZpItVI_cOgmdIO$*AzAh23L2T>2DUnX
z7}>&3@l!;zs!)&?PG2I62qC`qsw_UJXfL}<Ufw;#maKL&u@<aR?k@HOX@(805wu=j
z1>}@<kuUy^`$x1<x!4<ZNFdL)Niurx1k*|Jz_4EW++s>nYxMDlz!8<N-tljD+Ue7N
z+@6V?Hb8z%se73ZfbcwB*7qAzoF#Kv79M{1rA%cA$LwPuybw4cXI0Uf8W1oqqedO*
zsvp}voJtUtQm1IiS#10lc8kWg2$9$E9>pbl!<(A*6=~qIF=JWD2NmkF(ByH<mukk@
z+%);j3bve!eXnj$uuhgD*Fk62=(;Eu-P8*xo0EmFiM%c}H|5<M&WBvni7rgz@p}QC
z3!T)6R>r1DV?Sx97p{Cx;#sO}F;_<dF@F$;ZqVtJ{l;^E8r?T<<H*xa2JFKl%1iq=
z=aWa`3Ae}{*qA=4=WySQdnJ+_yYpcf9eqMder~&zysGKm5_M*=#HstoU3{A@D_@8X
zXlVnwh1rk$L{G2J6&b}_2}^~sa|FBE&!39Z^8%Qm@EH$|?1CwTKdasEqIjGgdz4Y$
zlF=X@kR~!SDw3*=D-#xZLs+NBoSG{mU#I_J(r3SOM|?$1Ukx<9ih@*03`Dc-V(%qi
z_*I9Y#iOiYpymvY*$@V~o|$u9P_}PVjfVq>COS{DP))_1F$C;}pjp_vL1-o>jZyC<
zA+Y^{7#NJQI_bMc$h4&V;x)vaz~mDp&#78I7LUwu-@~TDw!=wnUIxE)ktX4oqMiV&
z$=gdKSm@}4y;K5gKaMCo6Iqz>i^^R-^TSik_g0fm4epzf7u*!4JHf$>&^QB)Kc=OH
zuhr%-=)sQAE*qHirl7;15e3e$M%6xeR=$36>SUG8fvnwaAi|nEyyN;VNBWn(kW=hX
zhVC|xR`!V^%{chf)J-LX9CZZMA6gidjYN(9DvotWyFf|VYwb8Yce2`=z4gPen~*4T
zUa*d_2^l7~sPpt$fnJs*gIXrBAmY4)3C`^)!u}g*l}E8y#rEE!$p8WZbp@N#sF<yS
z4BE&1Xo*<^%B{Um=x>`SI)FoHL0dBeHw}?0=n_qLA8~egvcnSk;1dzF*BBf9q3e)%
z?;eX4@?cJ4J|L+caVw^Jm-{4@j7$p<xXgP@2V38vf)T08HVj*FE?_}oQ?gH;)ZrNp
ze}VSlmVhTzR62{ul=bfBJNnl}ku!jTgI0IGsrNfg(=n++hwQ~|#LFMfg6>;>iSwV*
zLiU&o&rPKPXVN>~cSG>wy8o^Yayy#L6<pN4NhL@3`a&%K#cMW6*mM7IXiNmxT8>5(
zN46ZVBsO73m3g>Kascn42@FEzfDfzz^eqfYf1^tSwMMRpQ8#u<$@$9G?})_Laj@@^
z42dv>#8C&6DGTB!mPlv~WAq65o}a~e#L_Vq3<MLH8}$@?&k9^V9U7mFH?2v*Ex;vn
zb=n-a-#;Hw#7S_EOl6G+zHR0rL}ZM*KQ_+`bJx3(&E6SA@6v-~@Vp<5I!Qb>qu2vB
z?KzD6DXqZi+&IhVHk%3$f?lZ$(F_x}T0T2Q+->UG-oi7CfYHo<RxEW>+~#HT)EWYQ
zF^NrE(YeX!oD+RD!D~;!OtQ({yFIV}(=;Kh)z}v*4cFMpRR_g(eoXhmQ4ATpdWOmd
zuFB_iBND8ee9+4|lD6iy4tFffercGNwf0y^v=qxS!Cpw}5I6)dWjJ^W803%`gvm(+
zL<`4{6AAn1_F>6va(q@xs(c9qg(g7axX@lA<^QUu3T^ktR07mHYuu@o(g?zfyV%+!
z`}9u!sDbd?+TJtY@EoOJ?QP1P7q>GLFG}uH253u22*a^}T@DSkQ{l3c{UxzUw{<Fo
z&qn9@a48u5Agl|}9&GVGk?nHwn)m$tRjx3G&=cO?yxB2sV8HQ9Ese~8pp$w0YpTRf
z3J4T}b7sC0nEY=GbWDjDj|@4?!uR1Z!$bi<%}p$<?y|2a%%-e>+Qo{)`_fr`P!)ka
z7pCH-xb9P(mZ)$2bM<Pn07GjFi)QQ%hF(W{|D+ZxTsy<C&uy0`EHvSR+Jhj;kVkvb
zo=j^1e`iYN&ZGhzUP*|}J_0o=;yV0OF{S_%r)-SQ+UG$>G^D>u^F@yt@rF<coBM=a
zPl!{k^U=bRSBi+_syUmCr@X(ON3U_cKT9*Te!YXODc}MbbqOf%8KxUK!1xfn`5#>4
zfbR?s<h&&$;6niVNAgfZ*U++a!SON2nF5oUcOJM+kbP%1SwnKly+XC$lFz+RSK8Ye
zbc&L+p7QI4FkzL}yRXYinc*$ls_yM}#JiK(8S>A$=x#SFlKZm{56BD9Lphd8D@}rk
z|B|YoYV#175S%S!f=r86WcLMW>gRHSM+G{?l3>V;lFXC|*c?`IJ~w-X^Gs$;tgw1k
zRSo927H+=?3GuN_c>hul%*hQS-Jv^TuEn6YM489-%SY8$_&4^ujkiF7<AEb@s_nVZ
zC9j8#xKg2SB3Q{`TLN6l7~Q>VQ31EidWm|)MXU2-!57R_;X4Qk|MR1-WA*;L8}_@w
z0|hqDz4+Xp@>?QJ=+W^fIimf8kr~g3+Ci6!LVtFRF@||R0`tr;o0eZjpt7{1t>Yb=
ziAq~a8^}P^3*E?|D}kSSpZQ+8rm<GNYtwWcG(L=wXHPj479T5b;L|Jn7EywDe02uC
zY=;DlLpZplc7`;kHgne_*^(ML|H9gx$+UD2{zzgvErc5~G41dVV);LrWgKh#S|}W*
zO$*kDUNNB`1vXpa`y|$vL7s(R&#Hkz@XO>H^gRLae{xrxF<yS7bE&XNP|xBl!33%6
z1ezTWT<N@Jos1B@hx^JGr=<M`SI1&|=3ukIpsj6`=o^LcbBE8Sd-y@V%mm#-1pN+v
zYW$yRar**F<UeBif5i0vi0S`-B&O^8^ES~O0t16;n*+5J7x*|Yuk(vpy*CXpf|fY<
zy^WZ)NnrY?Q^O>t$5C@IBZCazFt-!HWvNOI+<v__3re3h)rh{-XA+=@eY(>x_LLZG
zKz3Mz@xk-&Vkk@+4haX#e}xuW8Pc|$Rd$v`@G$6>hkVG#%?bOSW9R9J>V+|2mAuyB
z6!!+cMlE?^B{~p?YCI4MX080mdNf~s>m87ucqrgrN9{-Al-WyknW2exMJPCi#+kMS
zgN>%D9KJD4&K(Q?@)WajWl_>2fp(L#BI~j;aARh1-}DugX<_WQ*e~*Rg1csfRSSLf
zeRW#x=0Kt9xbGVCrB9a-6L1-y2GR_ZEskY6(x~uzT7}*t&oT#n8^J!##(#7<dfI42
zc>kplONJ`cKRx<R4L@2j6!CFA?;#1QxTR!aFbwmmVek5ajOb%z)UBgOSW57%zc;Tb
zS8asG4fW`!(1*bDhOLs_&xiVkjdn9?ffkcb;nHRRdZx)iinu$arrxl%A`<t5Tr=eC
z%|Cn3r#P@;4m=sJHw{3nMP7-!^=FwTw(>6Kc?JUizIF-&)WY)g@mJciggj-7>+Zr8
zzX`-?m{c<h)ddcENB=&`h+TK1TN|sK0W8e}gc1HEiGZRn0Ru_stfu#-{|UmOHun^B
zCDhe+M)7Jd2w`_UD3J`c9|XwtQA~~`9UjY9!W^6`M<Zu>QVb<wU<S(%9|FRhCL46s
zI5Z-}1e`g**w?vsUrr-1)bCeMBu*0aQb5NjJ%SchG@$OE92!mz>u+=$_`|2)CT5Et
z`gs=8??Lvm@27*59sz}wA{P*|j9ji;QnKq93BDG>mT|7bM*9-K)6DlKVTq+xedW-k
z5gzOzstc=)-acDz+r$wnh~>mgc%ic2BXd^>uQ>7QvsX4<v*U!z9UPg2;>Q^uq2&tv
z3eE_M^`5>~i%+)DQ?2qBStGoEGr0SSH+WC~LRC+_1He6V=7iAyt0lo)IO~;TWj!Xc
zZiGxvudqgULbS&iD&S9<e!7TFHR}YpAikORMW))%PKVV=0%YHexyGkHl<sm5uY8V~
zGI=i4xG?TkcJG%>Y)e}QT!ck6g8xJjSss-;*R^&TK>Q_cD(9B1O88}h`Fmt+M#b^3
z;wA4f)PB{WeFkXYT+{yLt;Bf{IR_!Ah<5pl!H6iW3I5RLpqLJ@RCF+J4p5j%zU^m>
zu$-n`W!(khSPfIe7V|G6Lxj*J5BK9DDED|38D@PHaLgD^RTT|;NrfTM>B&@^6N!|&
zcAoC#g3=?+28%UlJ>y%_v$i9|bl8ZT76kqvhY2$tPjnaAX~Vxorrb87s%K)AR>0dC
z$-Q*Zt75-bUG};q1!KIq=zAFn9V5*Q3F9uG`D@2|#FmXc1{63sW1!~U-g?mW*7&|s
zPe_(tmPJy0%4^KsE#emc@Cqy#+B>*!d8jAb7o)HP;p2U*2%#06CoOM&Q|U_R`2Ijs
zL@ep1exHcG16Oh6pRuS-<JQ3jwEXCbDzb0*ivEZ<Ny^>jB_LNN9M7Na;%-s>)-c9f
z>?IYT|E*ufrdn9h>u>hJ8A#&HPF&7b!nCYuRg%4#BanJ+l^IKf!D+M`@Q!z9Ree7^
zesn`1K}P+~WykZI1(?tTt?m1WCTXf^h$DJ2!WPih<KyiMQmB5Xl2`17h>!2AWN9Xf
zcQgckX#qD3u2{xPSvqn{P9O2YTF|n06)$m=%<xc1zgB%zyc`9oh4l|f<#i_{*a(eZ
zS-$i!Ho`Oz=H|wuA*?%#;5y3gta=X+B%u7?;wQ^Vh_L_L@jD&M&*z~k%%}sOGT5nn
zd0SQ1M%cs&y|BzH(V;YAB~M5EUmxYY$pW>rY(p9>{ht-&yir}ENW6L0fNvzt0obCR
zPyW+h7nZ4_Vx4;5O=WLWF289Ak6@Qdy=ETG6Z8t0@;#K|Zf_WR?<h=p`{m4-TH}6g
zlKa?<7z`Yo2<x80-^^jah?fGb7R-*h>bY|SfxOpT23hYj#-KCuX@<w;k6L$*^UI-$
zukJJposRsjbl(%F3uPA)!*PtERK~5E^oJVJm+LF++MHj<W3wR>%Z=%)_G6YejDCq9
zRV-06+elMe0&z&1U|FY#s)JK?Nlh;|jtu71-PM-aPk7NCvsA`4So4RK{FZLY|3Z2b
zivFr7Tix3DQdCE8g&cDRc|M>gPM;{L{GN<@BunQbgaln{^&Q759$@s4^*Hg%Oknvr
z#4XaY0tMDe=}79~MBH@*2|2#I0_?FM5%jNY%*&*wH7WS(2%KRB+m#{WeGk0{8n}rt
z*q@n=&AfBqFw`el9As0m*fuc<reQDWe2U~c5y2M~&hZopU4=dU?R&nmSg>y!iMvg>
zJbCz-PliVPI##D>C^RyvYxc-4TV*!p-_7Fi>#9cV?0=)<Mokv{Up$}oWXc~eI(Cx;
z33|awT0cYYnXSo&);`qM;J81$x>1m|M|t{?sNl-bvG?I}^wK^*JQp}9lO5gaNoiPT
z96W+zmKHs3COX5}7_h8o;nf-nwf-QrXRGpWJ{0rdmRDw>bv#>05SCMD%(_h(AubY0
z(Tf+rvdL)z?ooa9@K)FLz4bD)rV1^Vf_cGYN0x+e6<i;?h7oYTusf2CG@+&3@vRfX
zB`p39HH{b-BektoaZ#33vA*Fa9;nA{2F*&+i+2LqYbBZ%$T}XRb+{{G`)(?r?n5IM
zq3xc7kp{YSRBm;@3H?Fav%iO^3JHgF(~duxTVfx+Cd)u-Uw9@{rjf$#FFUyvIkJ1E
z!MJ~7{maptKTwDLAcYG0&kZ9to9!=r%!&e>26vg&F?dGf+c$hvylDSBfH5^0eq{0K
z&_^ysyF`7nHo&Frl`xNx!l6)BF+V<UPtpZdSoqJx%pZ;vh)=3%bJAR9(4y@moq_A%
zzsjmLy^guy6KOaXtKS_Eot*y4Amqy^qC(WA<jiU{Jpr6OgwQNsE|bt>AcYpX_d5EA
zIfJ9MAyRWdQI$18qz9Jv76sw5-*&}#eWhld5eI9gPsi&(w|tj$1Q8Isj5BXWh4n%h
zUy2Niz8xB*Ku-Z+4YuYfMKlb%`X&8Dianq96wi*T9s^XDXTYvEScLQ~GrwHRbaHLI
z3~J;fCVzcy7jlAh0ehGFUKOQ-FB-Nr8LV$3>OP9vLdt9C!WG?jj7Qg5(7gY28#So*
zvn3C`Khypuhsh+03P?_F5&>2@cQ7y)(sPZ)YSd<Zq?vXZ>-GTfacZNDmqPFqZlr+;
zz*Gl7b+VHE9xx)STh?A4;zQx==<qadca%c-3fn8Pjrs#P19bKz1sa1Hoa}{8s;*%I
zX#J2bTTDgwKfzLgp&MOu^oxln)o_<S(~qbS*m^nEeWibbgX|0rXcfpnAJ@iujJnaS
zKJAP+8Q~iOLIYddu!MRZ18j{|`C}?dz4#DQu~S@0e4_FsT-#+IQK_YLMk0bL0u8Y<
z)`(yHpK2*9cKv?deOtZv{gGqs5l}HQMe2m>n+GFg`Yr6uT5ZWc=vuzF!9l%~Ueu^$
zn-S&ZOuY^hlNgzqE@v1X_N%x0uKw834+RCfyuDA$u?VTNYhMY6*t(qGy2$b2D8d_2
zN~VK9)B8JsHfCDRW7sh8mPKUaLP|C6d9)r37OYxnQlD=y^{@U?*nRVTKIASLQfI7?
zifdL&F#j;}C$o%U%YvHg60BEVA4)|LFhA=!!{H%(>V;uk`KYdG4dZ_zsNt#E5`20w
zA)e)GHc_{K{g-a(Zne|TbmMr-xtki{tYtHC*w(SnW1<T4pkjnc+g|G6LwjzGSmkfP
z`!u5>=#sM+`+aVS&6!a_I;ZqS4tBv)zfvwGTr#2=t|3l4U5G?+q_7@lew>?oVRwA$
z`9bY{bO^N}OR1fRBGv0bzE1y+3ygNsEF`<@Papd8t{OS2UlekH4&9`S1+EsOtP#xJ
z+iaMLC~Bl1BezBfV`K4Db_4#40GT^`mN2u_<Oglo5F8qgbQu4&sGIXV1Wt*xG%45K
zRNCt0>A)J#jFHi>!gWwua1Lm0_xwmr9Y`v?tnEqscnaGGw*`=8V+D6k^ucGKUE{mL
ze*y*GR7w_yCE4<+`Nw9T_rm$%&G{7j-0#F*_)h8kg$^kdb}9N!eNp?gp&3iqi;<wF
zFmp%!jeyd9_tSx&Kan>0_@V2~&R{&uvUWWJl+HjzXhsECbIftu>DI(-=V9{f>A@iw
z2`E~yeek`yU3Fas(cQ(G4*P$<%BW5tL;uHZjQ@0u|LGY2KdfT}f;ZIPTKV5M`ajj-
zf2za(REPhm4zbY>?e$qp{%?<*B=j~zH6>FCBRuW3aHSsS)>S;;Sh<;np$WA9|EjYR
z<A?q;r);|)jqh!k6hb#;dtl{}(!t^favzvXt*1^o|EUiDpQ=OsRZ$r2gA6}uBamEC
zsmBa|zrcWMONg#4M9H5;t9w^S;kGvpzE!afVpU;Vs{_`sHA0lCpk;oF(m%0V%oNj;
z4?%~56IKTJR@N2S;yETOu4-sLaTy3i4Grs6(3X{Rlg=t3_V-WC`@z=XVP0E^vC<BQ
z0uPupXP_F~`kZmT95I=^VvhO3$(3yH-t};IyDs3^1<3CS)!826kSrsu7<a$z1-|uT
zOkE)FFyy`pl{m!XO$9r$$lxHHD${E2*s^F}dej%4!=OsPO$kk)bj9|-Z<cOFX5R?j
zobAyb4h*xTf$N=Z05oT_R(yaqaR_cr6($Z`|64oj_*xCVn6oyBf{F;L>0d!wzm>*s
zPHCqYO+dBuEMvAn;=|KD2ao<*y${|FWn4!*_NiVZ@%{60^{E(;xk4+*Dp)4=CLPxH
z9_ibTO%ACLW8Mdpl!&;tLE*MWs)GkBaazuXCr$DIEtdC@fE~*Ki@y2X2;FOgF8=<C
z;4gSp3HmhSkF2dVE#6yv3neF8+!F_kEBz){i~~6d7S)aiR25pE9&Ahi%|qQe$lD+N
z{9seA<WDl=FNa#1E}{0YMmY{IquC`<#FtuxbeiMQQxZb?xd?T#{Yr|WDHA_$nbw51
zt&x`W&83kNR7yga_B@JN5umk`Rg5okqYEmgIGza2v!`(4ip_uJzQG!cjdR?i)YpS}
z|236^Q<lAUeW2bc^tGFdIXw*~;S3hmhmFgX3Fy9|W?-NXFxGdp--B1?$xj|Xy|u=g
z#8n>OlmX&7m9q<3G+t94tv+-RUV+l^$9C2fsh%-HHQUUV3H3M~WD<LB9=1@A_kzSu
z3Ihmt2360~fOC=a_T#C!PfX*L(@4`BpP^jOrzCajT{OB&!|nm{q-#Wy%!>}$s)iS$
zUdh>qA_indI*A*k^qTWr|JcUzAOCd))Kx(^|D46zf-jQQ#~UPBuMm!M7==6#=2}Jd
zS>6Df-=e!Aq$EziDF;u_{%vC?<ohZLf&1xK4@}?(q~qK!0iCCWQ5T(5u9?Tv+Q=AZ
zogOslh+YaicCXhPz=pQSOVdYXhRJ?#%kK^}g~U^9q6W&k=TkjzI|~=>!$C!h?r>Gc
zp;>xm(KT#2S1L6GS@7{t$ttmeD()gA@kiS@ZZVc0a5PY~DVO+Md|W4&T&a~x!08d+
zTP5V_H9~EQrKdB_Iu3zAHF4u{K?B*knU~PtKDOy55r!1i9Q>nzi10l75=30bJ~+z#
zzUq*a`~dxHV*C~4NvFK7H`lxM&n<HPH|)e}%}z!Q+2^%LZJm7pEcpS#CEqf18r!x?
zYR&l1Xi1zSKK*f3Qk_G7qrBZb*B_5`!x3_>&~yrpnBm_MFc*a#f#1qwpjU{mE3p2k
zm(D?3%w-w~d;|&S7kA7{6mSMu({>yu_2gw)xoQdd;iYGf;Agpw_uj{yf_6@!%i-~-
zGC;!$c1^U#a#YpRUV2^HV=gNPR8V7(GtkmB&#sH)mSh)A!{y@fGY3S@X}h@z<vwu9
zR&bKh?Kao=;<e4AhGz^UMjOHh6`*|&*j(zqPB%Kcs1OJh+&LooQny<4hH1XsfpOG_
z0+UEeWauEC(->`c<(mK|Rq)mEV060P)UQaVfXF;*MgHr6kt$@DH-0{psB-Q|EWZgF
zmv-1#m{bi3?mXtF3GpF*I`oQ{7G?A&raZVLHssnUyt8r89HaW=p<5ew^HH@YrRb^p
z>Eww6o{YE)v}My1F$`@YOb57B#25-#|EAs87o*;m#){a)IwOXS$htZl#j;*}JaOHO
zzk(5tl_@;R40IwO0GLS)I(8~L*MQr1Ps6hQ(l-2YN=}H<yX=&nkE3NsFZv&yu@E2%
zl?^<ycv{zl><dLNly^?TT%@I2q!>c;$vh-$At#bGUx(cG+7vglW=&aU!@J+lqxUoo
zMm|l7X*xFcF^Sl(e287m1f5R2e@lK%En{&jXaYx@;s7z+R=0976!Lo;MR@^do>MmN
zkJ>|8?n}k&G4p<9pVX(N{Q|mO|7G~7!^GxiAab5`JojB07|oz-@Dx@Ag4*~1)>aP*
zn%Yso7WbUI16<wjdrJhflkQy6zp8-m#WXbTSH=KIH|%!oKYJ{7sH4;Dc5Gv1xC|U%
z*y?FfXc#e6CnH6#<F>+(ccB1IUj0u%hnMJ34`0)>ngKrJAK+P*6i)3>?t>x|2Fg1T
z-&!_jqz|4@)183Hr{wu;`>}SwA1Nl;5AFSVH!S|Sd1eoyv`ykYlV7CHcHcPjE5|##
zgYf!Md`8G2l||UVlrMYK>|%)7$`APmVmt0A!gs1yUF{l@EAQu%#c}8D;>2}-M4jU5
zuU*d9S%<VS2tY&fnaET`5t&3hxOxuisR-qaoHjzq*D?V^cDo%IG9`?8FXiq+&jIUQ
z6P=Q((aNjTH$}Jtt})SZR$P?o6JG()+-r9`MDGQ9Qx=<10FQ(<HM2>o@tBCJ{64M#
zLMjC0FE`Gr5M<bXpvh`G5(_U((U3Ma<gp5^Z6jgP@Vv#*v!d!Kt?QAPV|SZ^NM$oC
z%#)KZrM|PBFeG#g^A*B(;%P<0Zf&D>;{+gO`mUFnz5G*sUN8Yg$gj#dguiAt&H2p8
zCoNwo8eO<yfY&XxPk$g)CL+OltZp(<(rz08n5nc|2y+cKv$+vcFn9l$RXaQViT@}q
zBkavdt!zLj+#9%}{TZkPM<e|a3a^!~rU=hxGaK?-HufZQKaesO!a|=d7q}SyISkg%
zc3s)N(32;$iNbb|UzRc1lffNxk{z&P@qfx4xazclzG~1#>v8%>bmxtGhvG!(Jytw^
z*)PyVQIZ~av2znCq9FYD9W}i+zDB}~6(++O#dMNrn&R@|>5avfhFp7CLe!Vc9+D>l
zg=6trku#n?Q+JXx?9+<?5Pdni3dM<|O1eI;TJVDyAR^^Vk*q^D6t9=e7=kP0$0JVV
zYM%J^*gPocxi>tSH%kad6x^t(CN$y!Lw<FaG<tdX-D>YbsW%A)|9KRAAh6&kaEoNU
z|LT-;3F+|l_-Q6`F9m40Y=HH&VGq5|;t>z=de*obhjcaUr)`iZ+=G`u^ug_a2JSIn
zpwg!>%N%OK21&)y$8b?92Z?r96mp0^=s3$r$vd^dl*wDk6Ks<df{j5n7f-+$9Oh3^
zMPUQ^x6*ho(1H5_n4rnp4XDv9jKfZ?clb_enhhY<VD+u-^wsx-sod28kGN2*MV<xQ
zv?!nX&f;#z?qlO{fZe>br+}#|tYKM}(4j)Fgg$2=Gyxq-_HIW%kQ(pusI&GdM7jCn
zet!voR^3Y@4y^rUdmamgBb%UVFIhb)a=WpR&+&vj9~(aqTLZ;L;oED9!|@!E&eYn*
z*F+LA7)Gd;#BLoRs`6>T4CwTnI!R=49=OG(cUh;Gp_nWIbos~4jU!TdOeA95KVmLP
zU=v$Epxhtn;&PO;Qer!}Rn4(bK5wOBlW=XTPlwc*&>!3-76PJ5VU~3Ku69^Q`lqA0
zgRR5vQTU7~895<$V7csetG0yy>`Y2TVWoP-x7YRKc)wMTy)V0j6zpljYU#GOdnfM5
zL>$3z$9tf9DC2j~x^R{s<YwzCm?X9t)lw-;llp1$U7H2pHSrMhF?;TQR_hpf{_NG?
z5>k&*F5FsCA$i~z>7&5Q#Db$K38CH~2S4m+1L#a}6b9{+bRXSfrI$WZsOe0;tmP;u
zKnPEy*w{bTsm+`0QU*9~HjHuMiSdjYcIquVHZ(osYCr4oezkHrG2GTEq+Y+v0|^zc
zLb?4RuLy2~$W0CHqm}rOlx=wS;rK|zC2}pJo6Fapc@Mm}d4JR7zg~s?2tsxphl42$
zkQ?ElEY{GWI|?~O359*r6c_-hptZb}f=h<C>WypfUwel*&A#@@y5eWYcI-qjxJ>mL
z4Of|j--{?t*Ecm5f^fn!C}75e-G&Ck=kp@ET~GO`5gS6=z8J;qev!n`B~mft26fI4
zrW$;{IQ%sO@dMGWrkE&1k>x8qc}C<NhZ(EdWkd|31MrFQRwca2`a$;%y})+N1?+JN
zlj-{tBBiSG2C<9#yD7dhW`bBh@{y8+`zDt`i#87X5EY!@Hi|B4N=1Mvp2!EepD0>5
zoVnpYGcW-K>Ga8wPl}lERE}yBSgu2wB4hOb5Tl;;yGGkcL>^ki%7dVMC;BUu>hJ8B
ziYte308yC4zb|^6Qnf6f+}a4=g@e-$Ws%*{sbB1(U7?|~pg(-l0MtM!>&Y2PI^8$&
z?xPMGS_wf{j^jl$NIe`~Zfi!jYcOGwA$G)xC}x*jR3=(>Rt|699lQjSMI}Avt+$#m
z6V@<5(FSRI(6C&_OBU!)PSa+~4pEOkzlHm0KrJ%H%jP`Jq!#a4hp5N}tr9C&cI%g1
zrh|e7dXY?c+v7TM3afl8l49mL&6pg>N1mGzxmuF5x?-m3Y0q5Ko`CO}#G<;d<1H4l
z3P(P`%f?=7s(86Z&HbhhLm$Gg5B`2$yR0`+BHBV3Si@fl_{WQPXccaePtq>1<wa>a
zsaYV%mUX6aAKW9$7=4Bye(os$MQ-q&jbias+hafGttAAbuhZ?;{F=0ybQU#R-SR%?
z08KL?pZ0Otjs`_7EtE#*W6W;=f1k#J(CAWldkzBU#VM}F*YgV9@P+JkUrH72{{T_x
z+VXngs~la@eQ)6_7;Td&B@eaP`=j0c!5S7DJH#X`EjFN;C=Z0{Z;H?|b=dcTxyeUF
z=`gfu8joXuwo*!+VJ*g;v~~RIh!*~VC12mWEJn`@dy#*YLle@zx;qk*r=mqfo>KkA
zk1+#(ZBf6qcnR(+0fl|!q_|3sKjas}jZ)+o024<Qz#3BQm!Y(a4cXklYES!uc}5hR
z?HP>ujZ0@^_ZGX5m5x3rV6YTBUY)xZC|;l-wQp&ZJeFcBOW%Z)BKaIr@fNP--u>(M
z?w10Xs|itrZ18s(-fbJ0F?;B!JUUk93L-s$)~5-!v!vir>e2zed!hw((e*dpK53sT
zs`}3&_7I4IJ7RzLW&tnZF%g+dj5O;4xkd4EN#Vy{sF()4V|cTXYS3XQa^E!Q;QP68
zqvM_eduD&(I~jA_hGD%JvASRZZM1L<$=@6m5L&1ndZ(_Vp(bjf$()WOwjo=}5=_Rm
z;Lq3r+%txzF9sP<Tmv?>W6@A?#;~C|i_{Z+&;pEy*1C$$OKc#}&Rn6=V8z_|@Hm&R
zY9jpKFmLYQwSIDX4wzh)5)%z8`A=hP;&}|_`It!%w(<|hQ-){sk|zP-```Sb_n|bi
z)MX5nPFt=<N#^PG#gc;#GAQ_3#(Q>z<U;VLthT9*dtq0ReUwjdM8fEUFFEOwx!TQr
zS{=0h1*I!J@tQ_E&qKY~2=c;>*-ndC#}4Cy1J#OChn@v;)^o8VxVPr&e{=dy0!rUV
zLGDq5j0(dgwAwSF?T8I^YU=<-@XwX&VkQNRdAjM~lwZPtu1!<KMc??CBea)dzCUoy
zxrpyaKc1W|YQ(m>0eiG)V9}>{)q8A{VjUvwU@wIGfr6Y$Prf(V3~XU)dTcJ3Ip3!)
zJ;!d9DyR?pQv~=3QoB-z0e^#fe44?83g8lx-d#0SPkxJ(DF~6^+7&rH!rj4x%!Q2*
zl*N%VYM+kRG2i(3afru`IcM^@()YOnrZhdC!g<t@3h}C*aT30kBDlM#62We_J(hMT
zi~=}o6^kbx*Qj3ZAKt6GW-|gt=%q~BtgWl?l%!7{YTE^asq?Z4blTnQqoa#oZN2))
zRSM^Z)=iQatk5`mBUTjl4ZlF45^54uBxm81uh^LN+tw-(D+mObYO<56jz6X^=?3j5
zt!``A9zHj@a-vVIU_&ze1l$M?-?yoy0uxr(lhqPE6a!wT2}$!J66bmtxocl3prNZP
z;Ces;Y)Y#sD2>Z8e8a~@3N+8t+YH)4F`^2E8fS#Mkk&F#aXt-G`1U);fYIrfgaO%0
z+LkJ96^t=Z;Rb7B!R~djynQ}H5K#x>+i+8s{+M-7;dcVcujoz&I&O8d$ht!{y@=JI
zg$n-gJH>I)-N-YKKalM(0qi^(U?yflL1~=q-iREWxoK>ATh72fXA^<S8Po1E)&+<Z
zHHIimnCGLsffqA;5Q63Fa;K(wv0A&hvn~!nbU@jI6*U(^&>?@5#V=}hKOg;aMT<nD
z;^>SHE_>Gw#_Lx@BzVIsEJAku{8SCtF-X{^K*186T=93IJro;;)~;23&MQ;oKGZ;l
zS~@S(+FzNg_-HPN=a@ya8&2Z#{ug`i)FfKeZP})6+tyCowr$(CZQHhO+qP})bY|^{
zI_KrS)Q$U4aVzTk5o@k7`y9QsJqfjWM!i|w`Bio4-?@_7HnQ2F3PyNJl;^Dcf){O<
zMVOlp7BzF#)UM3VP3!1=>~th#Z)&8W&RQFd#JVd=Qo6j*)iGn1a(Vat=>(u51_!dz
zx(86(K)Tp#;bNGzx|x!&$DeCf<Qz-3B^K(=G=%iMItDR(&}FpJ4c4^Iih`ZkQ-|tm
zK6A|mWa==1`@*~{m{(~MsH~NsxiD_Zv_Vq5bN+5gGeCJq6!1f-?Yc$%v^#SknYUir
zKoaZYTyMY_(08-sc|8nRuKaKq!PmU(_klHH7EW2sVs9is=404&dE*5+Odw7%BLx;i
zUgb%Ir|pgCXwJU6&8Om5Msri1R%t{F-9K)J4UG7EBl-gqnDRj8d%tNwrkYPb6j}bu
z7PVov(a@+qn#~c9*2P{u`pMsj7+T0)(E>|S_TyirXA!HFOIlg$Rvlv?LNhj(-xhdT
zJNuU2bpbKjXfnIRL;jU&*4{9d#!B*54Q03z7QCE5y=6C>G?)UTiGzHS-zVdgkk-=Y
zx))oH&OSbO6_5Mx?2c7EvvnshpP6zF+mK0sw<=e9H|W%^;XWjcc0W;TkZa}Jsp{9I
z@V$&&WOj_${Z(~%{)Y0WC@|#<o+RE89N-6e2L%;DaueNwCV&4FYoYuVN?kr1dK{yY
zPwzUTA1b=aqF!s5a>c;9RaoUYPQ|H&+qa>-Cw){}ygnd4M0B!GTMDB{Iw@StN+ZkS
zz<2aM@%@q@Q29e$VTC8^lAQ)YC!bA%_RI;h2sd|c{d|MXMTP%$WJ|tIzPm*OXKn+<
zl@x-W4%3x48;;#d>Fg;@A>loESnPi#LDJLhi&Z1*MO5j|1~w)d*xKQV+HCXIiD8%}
zx%&+F*YnC6>l?$yzJv?)QIvMTO<X{10L+E>W=<$m=Q78%QzqnxCAn;WPwFTKvMx(#
z2ZZ%@YS4|!Y#L;k7A5Fyjz`zT!K;&`i308v6%i_Ng0XN%6Fv0M4<La4+OD+qd-0~z
z5~Wo)OnH{SfW86KdX>88TFJ<Y+14<)Sq2jZWZIUf{HK-uwBK|=!GYdnpi-2C!jpf+
zSY1#ox1=II(St|IDWa3`{Ej0?kEBK^CE)C{ENlsCS(KOGmV8j#u#B$CmS?vyo+ax-
zUe~gP<&1jJ(=LALQe>vth5IOZ`YO38u}^OEy($4BFDkWvw&`pYhKJ0mM~$b_qhpMs
z7%HPjGv>?|=k95>NR0e>pBYKwGs=Q<;jh+i_;eoh6(2}$b;T*gZ@B|kW%g>S&bskD
z2C7xiwOVEIWB_bt3P$Dy?mUNkXF{Re2bwqLy-=uHqG5&tCYYi+zFEQ)^e#kNE21v*
z{9fdlnO$n8fyx<%P#{UPY>t3iDFA9WjMrf=g|OxwRC9LVXvGwl+Ij8@$XnZCIwP?&
zDXZDI!&68)rD0!JwOhh)<Fu)}^-U4iuDFK{duse;f!=C9KdHVr;)Pd6tw_t%!)EGr
zd0RXzjstsIW7s}3C0;im`+mC`M=HIRagqAsYbLF&8eN2R4}jH!*GS*-Q~ur^UB90E
zwmXdeLZBE)@Mu^05AEd_6ToXbQ)qUn+-7!|`dw<{*7jeMD(H}W81(!Qc)4Bu;ho>D
zR-m*Qkz~8ev03#<*nbM&Tl<JI%m_rK*qo}q%{usJ%wSOn$f%0)*AIw~ZKo4*#Gddg
zxf0m4)hIUCm-|Mb>2HS>R?FbuRtpkoZ-I@b*b7us?}M0b*bYU;R+PU07_5n{Qs@f6
z=cu_OyCFx+fq4*3LwIv;(Hm-P!I%$|au!lB!GGpoKmXE0>%f^|7q`A4|Ls`-Cgz)4
z08l5@@d;FeuiwE;HamTd2W)RGnYb}nfl~43KyKF&HmRol4*cCr-&kn3C61TgokU<1
zJ-m;UKAdEoctY;^MZJc{rS6wcD3AQJx~mxwtKm0w>8~E#TV$etiP&q=lF70RhG{ke
zv;jH?z}RT^eLfmG{}yjs?AFz32e|iKC9E9J>DuI|GrZIz_8c%9W#bX4f`Wl+^q$FJ
z>6}ZqZpq~+JxhwTbn1!JTpCT~S#Fvy^>AnK%;3SLpf9Yil{G?h#)fHty6ltE-XJ%n
ziJ{{*lD{-EF{C95&In$?u_WmbrAE5(0OWj8OFkd1^HpTd&p2?JXG^OkhmaC6Rhio(
zL9{OdcA)31DcnY%+yvR~Ae2bf_T=SOApQX3vUJqnkH&R!VjtiwN@><9{P`)-Bu<cd
zwEN}c3~LXWfIPdZhYa~WFGc=Rg;%aIRz7Z@R#X+ZwBa*IiGUptu0(5o#LCwD>iQx9
z_=Su1L7)r|DDsW(!p8<u;|g%6*naKLRGXm~iI@i|&M|Y>!g*y<guirMRR;Nd^l&~t
zC^%qjP|0~Ss<|O;K!GM>M&!U@X-(F<>da9z1_gviqU4sz=(uQ72rXVWD0SMqlPL8m
zXakr2qan(igo72dQg|~0HRJ~pg^pt;bA!+Q$+>q$v^*sD(e$lFQw#M)tug<=;}yZ;
zDmAS7N2}eb0>2u5_BaQQMQJxzj9_P@`AV-n-E+2ZHEV)08NhD;+e(yknzd&fCZALo
zwHwsix>EiYhuq>D&FGi{pi5IOxeKPN*y2!P<h0`nhbaoz8a#me3vvFZD75AGyO@Ge
zEP2>mC!3cWZhp6h@iF-nCa;V8a?I>!V+{NNNv%bzKUXxwD^?*r|8Wo_eNPqmm%c@;
z=W}QA!d*2qP;2c7tqeCm>jdLF`Mkwkbby~c->q$~0ly_rD;ggYcyuG-K|F4oY$zX*
z87FA~wrPXEv9E6Mk0NX=;lDrKk~5VwFADfpDgcsm(|IQz8K*uUBv5Up$+M%q9IZ_v
zqRjop2E@8PM}vC-XZgQXA)Kd?3LE8|R~|q1gq0p*J4$gW+P_=&qpx`mnse*;fhLdv
znz;5`ZwV_0j`~Tw^k3N3{FX>hpikYm%wQ%-tY61>3%AkDCa;FdBq;3wx_U<>IVIn&
zZDpXP23MzO1`|E2&8QyzY%*i3I<ChdK386?mgYV*2i$N5Y9-K$2kTjmSM`uzGHnu4
z(Ku*#JjH)!7KnHOGv3Y>_V|l8g>8M0f?B^LOg~<-rDfdq7R`8G2@jZH>LPf;_n6g_
zLXjLt!-Hn?#Q({?6<?JEUZ(7BEshd--F>>jh4;whE!_}hses!6=2ZmeMrs%-Cg*e_
z>wHnSji%z^TmmRC@giSFzg_YhVSW=UK+{F%sR8N-j&E`fic~k=c0h&U`6l(p994TC
z5M7GN(8sYmKr?8Dm!!5xu>2AV4*;ro*Q4~xn`~^r_V8pjJQ_nw1i|Iqa=OIC4>m#k
zqh`camgT!Lq^yf@wG;&zd_0>$NRB0x1(SIuO9-Gh<|so{dpF$F@TEqCHF3)&7W<6B
zIFInzT{p2%s_BDCI%j7f0WCJ{5DqPu@V<yrwwO~w%sbN2)I#u^4>(o4iLiFw55DZb
zhy#6}Ika*rY+J($bv^C1zDWvo&5eM>Uo!pI#ablK`B}6xsAH;j=1TDr3?685TIVpW
zntzYug#*Gxp($Tljq^;U&(=nW(Yx85h60#J#Rav=A0Uhs^Oy4nWu@Z8vtm0YK`~?%
zM<#yT@tEjq%xPuhFUf~dOh?Ew<7eGrU^-M#pN;hfH9fP1fXY{au*zNp>;MGc%$yLi
zx6kowV59eiXxSUdz&cs?DYKqZEZpWVN-e#;_tZ(?vtTf}&0f)>Nozin`h0l)9B8xs
zg%LsVCN0%ed%!q1>kOeW2*38@(8_m<K@EM$Ks<>+9d6sbdj)jS5uk#ampUrQ4cZ{7
z;I-~2ojw2+RC9<dXKDr$r8~>Ymu5?-9mx)|84Th(yE7vZOP${nh&rRXdf_vL8AD+y
zF_Hk;7!3|D6|l5IW1DUHGnTJfw<9@oEnVU3NbI@pnY54KfzRY$(4J2UN4VhU=5pka
ztgKW>6qDb>ulW0vGA|>p;;%i1x9eip>>eU=={0)4c@%>Yo-|}6EFv}H=-2-Mx2x$<
zGyXivrfM8W^Xpx}99xK$nuE)wMb1{V0G+hxU9m!8x7z;O`%5^0_kK`VxDjxb$O^42
z#NoL5HF`6>hNf9{7`lIKChlI2c%2kMj|))jsW^l3Y6^5F(Q5E{C0*3Bo>nP|e6fe0
z@}1e*BO(#rDeIbjdM*!mDa<<&Qb#EykjAr*Y)*uMhbSGrD_A?S>d`=?bmVB{(Pi=!
zuOMOt5dmfjaiL0M2OEM3k^*0plr9)!x>QR9h4r$Ur4(`z-}zmL-$!bAY1(SXd?VJN
z2o38Cd;vzP3vj6c=k<s6cCO<sn}A4sQTkqI_t+GN%&IIJIbmVRJy^+jCG8r??6u3b
z(EC~gF6T}oe*aa^L;3~1ZYu=;KnSE|IkclbvgT;jJu!2kr1|{4Y2LHFq`qqDm$_U#
z%oMzqo9~!~cj*E*Qw~v>uY{K`lEnV6Orbz2qV*zr%hdbma*FR0Nh=}JTGY>t`7NFz
zjG2ms0HW9VO+dTsVz{f{>P^9!^Xm&h5~1{L^vK502g$5d=m&?H!5l>oy{T)upe$Gq
zw;8XF5@RwL<{yaO&w)u-AFb!c{+eCP^d=)pUqpNlsZ$=7vgUC01z&rBoglJ~#p$C$
zfY!RYGDD+`4}}MS0~~h@0hF}vp`V0nsB}olnU8X3Ift`bg2$75gmoUafa!X)kSL9U
zmqP0=$GC;syaf8uQs1fiwknej=1*#l!6W4Zdx9|N);}mkGK(KtX)opuPA2!~X<&EI
zB_i>xIWaktkIJcRVz*x9TTX21C$}i?#hUT)2pH*FlZYqsN*@27%Cs_Qdc7m-YRCyN
zO?(Ll0_}6G@wfo8ySC<%|BY~PV75{X49~$)FwhASKc2$?^@%$0z9&hCVduz}{ytC(
zc;<pY?_$fJlSZ$4FZ7ekB2#I}7Zd=huq9?eK`OWZyi9)=nWm6sBin14qquozhC(9p
z0`^-ea{AOj->8jvg_y@D%%9<KaQDnZNjfoDbDtViN4SLs#;`#wWjJZ5XmC@b<`YzO
zaA4P~Q&Z93->3+Oji^>XZ)4#$<}k_M&cI-xaSf3|ygUor;u__5r?g!-k$Ecp+a{E!
zy4p&q>w*qsx_ij*$mz)}Mm;(FgSEe!@B?UIUx%ge`!5E+k9Rzmdu(@^n$>I}c5Gzf
zsnAp_gQO!4Jb=d4ZFvCW9(KlFpoG^@v=YXMBadv5DG+$7bL-*UJ_4i_+1`Dhfa{C_
z=w`r$0!-wskXyw%76Bi-LKpDzxR!G5+#N~@Dj@qr?nwQ-V5pO7H>IzTN*(KcWZE^S
z$^<O%D_=6$JXmK%*FIT2Uf~q^b&sJj=wjuJi7*!Z!Fj5smFt&HrAInW=sWX01<IlA
z-WtOLn(24L+j*n}e<I$jZLjw<o~(L0Z%eL89tGwOtrn`%grD=r6A4?98(HzDcJ0^N
zy9+&AqUzscUKr1HuADvn)wfZzOomlpIjp9`H2-l8VdnDqz1ab(aty1Q6?#jB{aV2X
z&i&QhnUdw~DpyE?qaJjkYTu)|ZM3(7hb|k1R}H%dsc#;7Y5}uZA+hF5?6or+C>>5P
zfBM~Fk?gN|Av_fC+tpIbTBn|&Dmp<LxdP^6NktLVP;Id<e;+TTgJXanc90auci0N^
z7|jI?>9-_p#5LLDOvjWKAp15_EY!VvYrU~Fr3V-aah}NzJa4QD2e!*1h0iItEYcSF
z5_DHHq&yU0^r~}-m-XdvKWW2p=>jk8w^+EYQMVJc=5ncoKtQ%tyO7B&o}r^y-TGDd
z@rlp*!`<9+lu+t>4IOS1AB2g5Jzc#)6>Y_P0O`nCHc*;0uLEF~m;9}(KsDPDEl6vh
zfgKP$Q;`=15iwLmrO;zPNPpiYwJ<mTRL-!6Wnr2FzbCrAN32PRWC@{}%b!?cH9+pQ
z<o5mC4H_PkmN_RTqeYd^r~wQ866g3z#-WPUk|7A-T-`kHr$!LtlY3>_jy^=xp@?MX
z^Q_QaM1W)N*%;!R-3{9#El8)gA|38|ldpOdZJVM)!$?bZ8y_{hWaHo*^0g+B8*xf1
zAi$J-q;Ge5i>IDI`7S)amk5wrg(}BUG^fFW)jN|&IA^)yPK0?pC;*80qx*V|1p0=*
z=jat~C}fT_*r4r<=riXNh0G^Y<9yN2gnxy3Ti5GL5+aD$T(W1@_zmOWIggX;5xc7F
zCLSt~v#504FXP1%ni>!R-eGK+*Ou=(jWN%(D{bl43wUifI$VWvUer6*a>F*!1;r3k
z*J>84B9*C7XuS$_FKQcTjsMc?yA@uKkfzi&qkKk>aA6QY!_Gf+z4CaCKM*46g2k`{
zb#zywMI_tY9{i(1S7sP?Lv}R`y@uEmi^!r<!Pv#Mi*)Ex?(#QI<U<j;IVpc$V&IH=
z%P0FQ<j@8!eaL`xognEpBgJ#h4)J*n+cqAlE#x8bm+EOg0O@>(tm9?$=I#sN{~B)G
z1RXIz%KHl>+p)%!By<C?yl=>2v-c<@>-hnjn$T1ufAL^<MQr>l?XU3o=m6v-B=wk7
z2<ckMHsbNLqNha#$nzsn=Rd_^)@%`X_v?kn42RaV%XdO+FZ#VQ5soWp*tLZEj=v!r
z0Cw&^QCX<JDB*>^Zon;7s6AMRr7g=T`dyJA8M2n0^Ztn>c5|zZKl%C@e)t4reHMtP
zXAJbdcnFo|MmhYF+l3p2tAJk<S!sSD<LWBUjy6GHzR%w2h2#a(B_LPczpg;ds0}Dm
z_}%TE@KSl)I?gA0e)mZj@fg)p>oypi=xS_(PVY4|oQD_%=VJ||;uIz`rWZaS@2u-5
zqVDYngE^2_Ep$w15OcKbRTvRNE1&m?r=DB!Ni}B{^I`r}M-97~Gt?tYL0lZx`%)RL
z5Wx`#-}-{sj}*hOSH3;3+I1m9Cp%IJz`4JrTSh1(b3N;#0|09wv)wC4E1E|0^bm1h
zq2GbSep)ylEIuCJV_eh4=lW|v8@36#ED9RM>}D{kfqw1Fe!i!ImC;qteq~??+-s-;
z>!S1C9hY~7M9U??CEz@=RS-lOZ*p6M33Hr%$P3D%djw7vI*E=0!TH!*`r7Afzq22N
z#@M|n$MzHttD=>7{(vH|C2qrTUoKXjFALWvmFjz;EF0t<52623Qvo@QqKZc7pkU_q
zWREDMcsNNw4*2LS0j~g0yr!R-55H^_=AxwlE17^QD=W7{AiNY97;ihVqPq+iN>h|&
z7kZ511f`CFfKj&ur8;(K=kyJ73!Ax)J~Hb>SFi`Gq>^u;PfE+-C3G{@%E2&CW)9Md
zXZ>kUj;kAv?87vG=EhBJ?D90k_V?jp1yLy4e>rH5K7Y>w?_<w2p{?TZfR?Hnccd**
zCNFNFI<ESJfj~vaFB=cew2F@8U1);5e4#K$OAo6@#PI^wU#fV8)p>orhZ$O&@!kM}
z(|fJA?XbT>3?ec$G`#8AEQW#O5Il!F4}7Xt)vbTRL;&dU?O6C@V_)aR?Rz@R7vhr_
z_r(riOTW(6+nElrpVrl#iB0BQ+`k{)Y>|lr%vKik?EA^RX=ygfNBdqC%=z!zxbhZt
z(8g6OxSXqNW>O|*VTW|fKJ!tB5hS11n;i&VzItdqAF16jUv>qHpgvEBtR<~#JkH{o
z9JLmLu;AIE^@jF?=6&dgM3~fg*y~LrXL|~ZS1?)}X&BTBRK<@PMfWda@vq*kV#}0;
z>1APK#AiRE_NXk{CK;iqNY<rTx>z!p+`qu*aJb0E%B4x>dfT3cgcY79^;`3YM%xZi
zIKcn8?Lt7FM(GfQ#BTJS8Z<xy)DaOfg7rhE8MK6S&Zb}dn0W9)nIMVkz^58Xp0HQt
z%)QU~$q_9hJg5;j{OxaCFUokiWn-A53~?9P{zZuRi@elIpT^v`!Uq71-SG3fa^$H!
zI?q2+hYVu!CM65(&sb~*dNvW@0a!(hO!LwP-PfFxgQGeo_1NGobRW>8(`XHP*&R?D
z8}FDeY2+5~qnMC%HX^k2-@guUwP5nW4oaaT_)-_atSaoMVC@<rR`W@qO0mi!^afbG
zxd8BO6@`L8Lf?h%&c}|^AUlp?Xq@}o8uknx{N4G*v%33M1A|e?8;U5wRy+Q}!W{;*
zw$|TbYG!g?CW_#XFp|vKH$Joc0KKL;V!}8WoIL8CL8%L%YLs%onMYFcr{5o?3BVrF
zo}U#UX5xhk(=Mx!@m80XD*K(qp*K=*BXpgi(eXgO>V!``n|C7^NP!04NOj(dSZm2*
z&}<F+{>}^RTK%DCEKew3VqM?VAnt+<cm{4Vry*&sF2Rr(Mw;jY4TmC*&i+gg*HBzi
zrMIe<PGtaqVEC&RM18p0n1k4Z#zI3&bwKlfKtcWln7&d_@w0O}UmmycqgPAeXb>=S
zBfC<NB0@e|{{;oExu#nsEi29tg$co^!7^y<F!3=gtqasTKQ!Xo81F_HLo~4FKKaRu
zPJck=b2xBgc><Han*ow*arL_=CieIKLf-#HX-QRV8oFeOF>OnWl8w17>p*05zsaan
zu7Jjo1ss&Dx8THUgBZc#17a7D1W7EqdviAL8Z5m(B_O%a0|gLv-PT(9Qr7ez#b0JM
zqvLGY0g7<QU=^0kV6ux3kEs^^ak3kn$K&`=4?IAZkYho7n{X5&GC_|_PAz|n*hOJI
zqFvLu)l*P@I83k{1>R&+1`ag))_dm=0?56aeKDZHi0F{L{IjEMw7xjIv2hyiZn@()
z;kDaO<JN+lHSEuhN}oS+^r-C}HSP9{PqZmM1un9Y@ZG|n%{3(D6o=?zY!%phI+}K`
z5=a6`@2fmcuDayTC##10_1TrwrW7FZrR#rWP6USF%ZMRXYttNQ`Ogv5x*}X(PAq#)
zPq#QriAaW$QwVLsZ10r(D|C%YQq%TV>v0xgNPykZqK`e-?jR@NGVb76#ixdrU@n@f
zLKd=RJIafyBOj`(Lr?6mmowFyQb4f6iwwFIT((B58po1G49WQ$edfHZA~DX;J)raL
zJi5AWk>W5Ehfo6jEH`UQn{=4^7!<nPIMgjG0%iajyqy?syn+vUhoMKLUp0p0e7bVE
z=KU)IXoeII_z>+dKm}fG(LJGez@EY|FnfCE01l{Wv`@GxbJ~JaE6Wf|j*Xu3Yh_ut
zxqM7Ud3%_cZZnBKmPoXWF!sIOGWSP32T~BIpR5az19V*Zl7I*VDvujZT4T$Tz$zDY
z|E#R@2Opy$`2a^Si>xN0hTqi!P|N;r^mOOzd9`4=yj@~LAhKK}batN_l(E137~nhN
z?0%5SOfJgXkcL&A`btf(Fw!`6Cv^6;uE3Cgu7F~jBQ)D>D*Uytdd-PJyXYcdk~6lm
zbX&!A;sP>dTsDg45efAic9-zW2pQ{MY(?!tJ9LdP?k4~9r}ZP=V1%E2f6{P>E%F*9
zPL1`iU^6l%W?6O4z)Lw*UXMZbCmxqk9UESFhp;BH_5eCD6sT{}H`y%2WtX}GX?G?d
zXbO89P&T&dGAL5>9pmeG#EX<sfC!;v(oI~6O>ZI1iLu?)`7&T(Zw?hjx7>Ul=nEPN
z#bS_302xl<?@$MSu<`qwvwFYp2KT+SIwC7f1=k2&=9be+jJlJ#jdW8|=K4At>wD*E
zfpq_$60WRZE<{YKP2(Kfk>@~Xt{<v~#|OpHNs-uA6kEb41~Q2x_|`#Vu(Vje#Toy|
z!u}|o$iS~EUFYSFVk3^q-&Zoy6Gf@Lqj7GY5NTNwiVkRgeN^#~fF-5Qkb5&8f!au4
z2XpqM?PH$iH`B%eS!?oDbH|;~&deI`%QlKz;&@pXOE-Me%%+ZoELY$t8E*jHwABlQ
z8W4AyWAvlWHmrf;E2v{+r?$=nrGizFK6IJ56z3TQgK4v4_coVS-bEmlPz{V8TF;k;
zUNwB}D8WN$XX^UO8Nac2OX$4Z^1_l~mF|klQ740$R8TrY(d(x?rv$&J{HAeVLsOa1
z?JC$RLcSbl4hEKU&w<4VtZm00v_1JE!U0JH6vIEP)<5BM^rxdYBxY+ML;d$jgT^4+
zA;r2I*Mu3BPzrzSq=38~?{KXt%=u;>a*IU~?_12zVHO#1>r^IFw9*N_HNCy@0U&kx
z$^@D22`aHiU@VoC`Xv&rka`0Ef)d8$f-T$f!4Zq|qVv)pGq7_4h@0-*K`*wR>WgH4
zx`&Yqfo!X9KNvSb1}ctOsK!oUTyBHf>5drbk_Z~F?7YRXX}>U1_TfWpb}MFaCYL$<
z;l2N6<Q%h$4_wn|6S&HjJ+Fy|g9Vn89C|$(1172YGjqY?QSIsVxB8Q-b|4MG8LRH1
zfI`K}J;o!rqxS~>37_+N*I68dub!b2O3MI(?SJum(UbGEZ0qwiNUF4|jApbds1<Ch
zHXcfM1URw7^1=4aaQHPRWk=qi9A^|^B*g$Q_#OIbF)MAy6TI7KK%m#Ye1($18BEmY
zSr$7iAQh0{m3R{8MaB$Y(UQs_1e<F^q=E5W9PE#|F4BQQp0!+PzOPPR1T$r~^<+pR
zM?6BORs{I+K(TIudxq!t3+3U8bFW5sKg(>R3$cuv!E<u^lfrb2cyMPB4eMYr-j_pb
zkiTI@P-8#tj(s7WNOXNAOj9Ls@nWPiB>w|I4AySufQLerRqu|{Z!zBE`m)(m`EMPf
zcn*y!8W)r_LOnQ01LG4AWDm%u_vwksoo)jwqwXs<kIh9MpZsXJ)X7-SKuhFm3(~>U
z=HPi#W!ma1BKn`Nv6;arv;k4&0B;j-Qq3$6a7((VVsPgvdP@@(9qP+Kquz4@+kexe
zx@h#5Dq3=a)I^78y!bxAF>2)CEb@=x&T*_(6^C9Lqy|IOQ7pI#7S@4NRQGS=R==aj
zO^qf3ZCqm?`B;qaD>&5Dr&#^&7S3<m@+J{RWgB0pSC4umQj}mv$<RQS!WoN8v1ea&
z^;ik@2hn}a0px#i$KZ8<i2j#_-2dRw|4+oD+hgr6tvD>#s{!VkS5pjGw2k_rFMcLN
z*_Ehfzz7h0l-#z^KBGDWPxKZ6e#VpO#U{!mxvlIgiYACv*rDQ-;6*&-7YuPpCy3u4
z|99JUKNvRbe^bTnKTz}kK+XRHHUAIP{6A3h|L;(9BBG8ttR-||>lEF-+#*6a1nhRi
zA%AG-_Rth)*#b_x8x4h&yN7}>#8QYHD;aaP)3hrcJflvAK>PBQ<5G<v`_@D};@w@J
z{yS-77F71R*j9-M0`CB<HR4Q8+v$+5H*5odtlF_md;^p}K(X~IB%6A({L8^d^ZOZR
zEj~pwF~UX&)J;W6^sG?5#E+9O%)w^jA=UV~@-5He3FF^8>!7{YYZuFV{A1hYZ>ZYM
zex<sA*n5gA%?zm`eu6G^N%cXMgjU;z;2huMczUKU-|TJ^R76e&10meMT(bj60qH(|
zRUuqB&|;UE-N`<%y}0m4A?|ICQYNb(TMb%ct=o@_fw8E`PVu4h76}Nx>Y-R^JxH2v
z+|{{<8Eriw#>;dMnRWKw%t6fV@`MomU(137e>#Jt@l2)vOrvv?#pztiU?7`=Z0{89
zE{hCtL8o_SD_u^r;ZVS@IeDUe=|~(k9q54kaZ0o-QiJBIx8X<qBTB0b9dKzCJZ<Dk
zAH6{E26Ph^k8y>u^{{5t#78L77hFyIt`Sj1+auomLfWEO{QjX&u|P5Q`RpIB%h5$r
z!Hm@Aif76ZA!BZ02t*(1R!FzwFKxNF`13d)v-Uw}C5tuXsmX&8N}E33uh?kwvwjZ(
zI;TjpGCS12w{Iyv<GS+^TvAXr9rK0+U+~ZCdObhW<lKfcka;l=j9GOO`D-s70^1C0
z)Ab}xuNi&JJwV=pUsP!!ruF)r^Pbo=-Bp3X)VU4MK)eC`R3c`L(-ewa2CXSfs`f^$
z7_y%AeZPmVv5C`E&7oj(x!J?<%IehSr1&W*wHj`4T*{%*i+*bxmc%-sI>XIJjR))E
zX312x8#7b1JG;?HQhp50C|R2NroNu(uW9cdK&01YTPuaRd8Y0wxl={ZEg?iOOLAuk
zX6l1Fr&wlypR91;nQ4Kl@f1tlmi)^0GtZGm40H@H?M%$i`BmLyf}n1L;PeYOq}=qE
zIxoOQ)bwLe3S&P*4%!PPxqz^bvt-pAt2;B8fS;G3TPg*78n3rAahjY=Mg9yZ+_>j&
zr{tIbR&f<A$`-$<R%Ot~Lk8(v!?exh%3{&j@g(N*HXpr-2!k6;m!?5r#&*L*ih=%L
zLy7&d18@!h^fYXbrR95FZU57;Gj~8$c(KGf_zz8hbFWoY<F|@!0TrVqGkUejAN|s*
zJQW9e1~Tv&lotER9hOx|hzTV@je!S3#MB`FaM__^bC-gT9$Vj;1F4dN3yph+4(|KA
z)Ng`bJPp0Wg|6NAnGHMLhof6{G1#DrPOd|&*zpY7e?=t5c{a^ZWi45E;z{U2+w=r?
z&|JnDUutnj!l|9@I{E|-N;Hc6m=SnP99L*Td{VqnAYV^^>%HK}s!ggxZ0>I&Od%-H
zd8*MY7PLhPDlaK(d{o<l=6-AtTv~04l#r5fXce>u-LR%!EOGQxp#)dvxWXi*+R(-H
zgirqW2p<0X`c^J#^{V5z>$8td7ja%#34$23lHi#S2Z989z<{ZBVmI7Y3wHV-u_kbi
zVYC|DV&Kq&9_4$7%hlM%R(!qp1Vw{MLb^u)Za*Hgk7&KjyYQealtgp2)hCo)hc*sF
z3H3B{<^!6oZsv<WAP;ZQWJ;WOtX^(R`}j?;Edfyo;w1ac34UtUUD+MwG`h4zF-uet
z(KAZ3*3ahFJzDioY-I+WSAgrlzfTotKeO}?DW~mk0wt;H<C%2Dl0c)!4^`PObpi87
za0}Q*X)b5T8d8F&bNz2h4C;i7RCZ8HrBCFqAbPevF0|Kfd_5YKKp=k~q3A64+-&T*
z_`Ub;v(rj}F?e4X_D+e4Yc(KMxK{|%QTRNgR+d~ksa-8cBrbh$MBJ@JlaEk;!s>_j
zmweRn-l94DlYIIc0;R^zn2$gqcj1CaVeLfz!p`+4Yg@=#rfJI9;@3P&hJeU&G!OZ3
zcsJZE-nl<}wDm}ZYi0k_h6@yU&d*a-zk4T{cyxt}512%O{~F3a41P!+w-9M(+j6N;
zRio|9Ot|K@B*pc5Amd!%IxF6?Y&(HZF2Z4=K*&EhpZVqpii5qw(LAg1#Mh1*dYTS@
z<ExTmxeU%DVVL~;zL5I^Y%V|>^!U-(n-6mL!n7ZT_4&J$eY<w6jn%Y42XSj9QgP!?
z&a$*|fPy;p!)?hH3jXc`K6_7T-U)@`#Kw_b#ykaN&Oc*Kh)13u@b^h{0}Gl&D4J#8
z7{TQjQ8{SO$&vQO7%RtPQw(S%r_5%WaAk%p*_W>qgr6mUZ$ijROpp%U?2BFmK`dH=
zT|+f7@y%7N9^?-VoE|vEQCrtkj)089SU?<2V<Qym<CC+iyZzw&l4gAoIKDBN7%4ig
z?To7|OG^uCA8|$>d)l$8AWu6SE~J#jH>*lLF5Uikw;}|L2C8nvzjQfu@BEAY)qEl8
z1C}%6#NO43<-5qVj}kj!ow8Lu4Wn7fsrIL!;_BuEu*Ke-gqU4{<^4WR*GlZmiP^+;
zglm^<sAGo3H53IW-lYzmjc9^A<yk)D1$HGFZkhBX*l0bcrE<ipKeq>;N9yavwio77
z-*eGK#HnOeL}TY{S73Xx?B_V>%a{Uskuc~yv|>hQ%<07OIa!RMBH6)J;QOcty(+n_
z07^p8EixTR3A@4YYukYYQ=Lx!>k3bP0CM@i=}z|l8aqNV`wdiDrXv)@iklZG<?W0<
z9_XbzJ(qQ0d<)*Yce#P)IJ(Z}gT>t@J`gWwWrC`Tx{2+JiVmK)i=L8M^hQP?CPq3$
z7i{o_{#_*&ElDUj0;rIZ%OAi()q<iXah@~a@PciHOyS1(wI@qxsD?aA$IHwl)_n<P
zKCA?6Z@;0>&RlDarU7Pgx+?fPAFI}{|CeR?ySH^jgIYFYzAp?<B<>3BP2#VP7{g;F
zFaCR}X&Ye)wveO1&aeBB86oIixE5Tj5awW?!+3IW@~Gu-2+}@}HntT3KIxiP0f%v@
z<>m_!mFb8F6fI;yJ0`mc-CamIPO<3*Ab^6tx>dh%nBt!?aZGL=00}^=*<&@$eFAam
zSy_~5wE$)Qw^-aLGuy$u#q&xCQO>Qt9oE=Jz+GTKJ&`Cb{8k!$_kmlUPi8yVp-z_O
zgN6o&StUr&ft69w+8kHrAv&92&U~<P&elZ8!0o{0<4PUhi`rtBlyJ5F2$|KX*I$Nz
z@?o8MZvWfAmx{BTIG)SlFcr^_MGG1nQ*$1u#rR!HR)}~kDJ1cRIVjS-_9^hkj(#y7
zw+)W4w0+?Rrh6w&a@_y?A0dY7(N?)rv<)%KpfkPs7I_Pt!FB{v2bteF5dmJUYo=uV
zlFw0L$_cRLcurd)Js>mSt-3aIPCUi?EBzC*$~c1HEhA6QgXnh;_%HjZ67M4F-1FXj
zE5}bP2BE-^T`fbl5x0basA+`1sf&N1ZOXnbRM!eZ%4bYEwfLihZg2l=Tk?NA*DAoS
zLN>A;f#}mZNQLjkq^u5AYg8<wIk6gx(Xb)4QWVbm286fTU`!SJ$C&qdo8dP4entX?
zql!6Fbj6*-pSG{Na6EPv_?!E41<jbdd%{2I24m75=sRh!DymI5{RR!vfSdZakN{Uc
zaM7_G;2c~H*1u*yEBMyc3g~@Z8Rnyz8`DoOW^?sPKY(S&<6EP;5}_}aGa8?y)<QED
zdy5_n`svOi1*`Wsa3ZTe$(B`k<lQ+gzC8MP9%1{CU+?%L)<~7wm?NOc35W^l1Oz(J
zpXa^t%Fk0VU!ZFd>v$wsF!zBKrnu5%c}<7SrB<ROuyb<x#6>9T%vU7l3_S}lq<fOG
z$)9Bvm_K9bg6-T}=qW=shB0?i=S6g#nt0oVWp*BriqL*W0>1W7e0x&Xlh^do`>(Dt
zoW$)wGs{{#c?#hc_-1*yRTfz}YDu{{Jkgip;t~pI3p_Yt$Qd=`v1N0@Ci`dA3W4pf
zKWz-Ba9!+7B1!^W`6{=J^8!ufWtP-{NW}vhXgO4Cw8&PBiL&`n0*OrPq_7$G^Y$88
z48JZ+E`z0*T?&c*6}O}W>J$iKe183AmMpsI<l2B$%p6%o58z;ywOf9=zvtQi^$Rd2
zKL`(!xmGg6;ZWOOSQEu~Ggs${D>G>KtXAT?CCjef!Y<qQ`P#-aTa-Zk3Sg2@0}wU(
zfEFZ@ghiqJuVW8=85sM2kz88X1I?f>KYH+P(H+gcvM~E@uj1187p5A?mgr-Dk>WuA
zC9I}3*aLYUUj&W8P>S^_=V}a{rnEgD!EM$No7`$u&`)_)J6mx<g79#RD0lU8nsN8M
zCKEbpUaY$~I~hTb!<OQ(Z)EwVTF{)=>T!nz%IBf&`KV|0q(J!2i-)6*Dz@X4K%#$&
zq&&mVvcbR?4frL`Bp}GQZ^ArYxu!8#0`><VIpBj96N+W{(R(*fCZLwg8)E5BDon$T
zt{;s`T8pyUcx%SjTY>u}?Qcf}6gIxGX`P)ZCtEFg1(?d=wZuY<T|n7?Ns~}$r{?!#
z9o_N+1<n<2M=875-G0cxkX)_Ikvhr>nTOg%*P;&7%p2z5qMLT3UNOnMzgRLWh$AdO
zOURYQ9k<Y-OH48Of`vLLlvA4mj~!#3Ryezj<j<a{rZOpv!LZn-7*x$?a^$_bhI(`<
z><*jlfAfr^ODou|dxaKfF9RAzJsLX%f6SUhi=e!>liCbSGZS%6mj`jcCvWG@&Wp8L
zV@w1nPyUcQ7vSNBPbG}jr$?9G`WW%V-`2M!zH43qDZF;E&8H-&{=i9+IQVg~v=BX#
zEMAx6=P6M=c-GfKen%ycThRbQn0B*gK}{|I+}dF%3lX9Lp31tH%-24Q74avq*Qc4{
z%fH0`i!Zai_d5Ksu_sPR_?J}Nc(^BrT#ILJ%Y4m!$vZ0Zsp1Z=qD3QZP^$jbZpzp*
z=V>^KaO>tKAZwip3?^pYUAuj(@r6PXjS<`laivZ%At=nm;}jPhAoM0}@kD(<;n&#a
zEp%S~J5UG10EUTat7-r=XKHHGZtlv<KakKtj_Oj9NCKVEV4zlCv*2MvbsM4QnVH3K
z%L2lv#M8`y6rs=TAtmQ3XkFjIAwyW17^pCb#}wdc1E3%pg%9)zU#Yhz?V&6mRIzXc
zpY5l~OS_wiN<;1#NWt7^t&O2<kEdSx{2h$_-kKmrLJ7XXvJw`c{4&rvI#G(rw(k!r
zx-`t^e@C`03=on3b3DNJKk3=7I8v7*9@DeQ_n^UJJmWNTVf|o@m`BfNwWneOm~7)0
ztK#5;dSlQdzq)6uz$E7W=!XMNCy0@I+5i_ebJx?9u7R`aGg$pBddvbjfA{IUUp5~f
zdsUj^h5~YT^23;drZG%1yU(xyNMs8>76JOBsk>%q{>ib1h80-l`HX}5>4~-5)2J@^
zbQ5NlB2mFz>hzjN@~~JyB_Wdhl%G$k^YpUSQUKINM)rXkv0X9{|Gd7Gi<-GNnQD81
zmSma|MgI<fQU`1Ul!HT1RskzqQ^@30aJ96B4_&&8^Kc(Fn)Xz{#1$Tqzleg)2IAwM
z@TTw|K;eG?h5xq#3jZHwkwm^TO;Eu{VYb*mv5XsQeFkm52Nn@X3*=RIRmbyeZLS~D
zedD_S7E3A(o&z}ZC9ghRCHHY@Xf$ll63PKs&BSu_l>CCmOGvUs(#tYRct~vP(e}=R
zj3;)Emf^&6k258YWrS+={0Tbva99t56o$vr=Vr;we4rc=(Vo!6?=daiox>RlM;|iU
zEI-T!iql#iv9gp=24_lWT0C8RDBgaKOLEoZnSYJcztYo(t<{N1_j$*rZCL-9=wA$+
z_6hj@DP{OgmvCrCtskriSSp&ak&N{HgLbK*hv{tVW)L@p_-u55b<|E3ZN~0dKT~G8
zVjVy!4e0{yJ<mAY+)R7x#LZq|A#vb399`lxJz)^`e&@|qnpuf6dsk^d0z^^j4a!G>
zxScz*`Stsbj5$)&gBWO?^0l~j!3A$h_mQu#J5lYAwPf(kq^Kq7R_KPYHA~weY?MT5
zBq&qXPQL*lkxjHmP!vq183*8@FTd(ArciIR#MEcj<D=hh;GQ&cmlcPdXA^YRKDd`y
zNn}DN?6S=40PF8&J@Ub2D%69<hN4iHIj;NigVE<$llUU0Z*2~VC=z%ErgvUh$3Ukz
z4rIf1Hpm=4m!l^I*<ByKh<m9lEZ+v6^RoWKd%)VJxj$>U#$<(0j*QF8#?mudZO7K=
zFh^<nw})U;qScv9%zM&*X$uz#WumdE(1R^C0nNm^EY&4p$0qBlp{SUiol-}l>`6)>
zcHR>{nWx?dM$PyyL;<;a>Q6MZv+*=HB)I>WaDAz$pp{j)NM|wAUqvC*5>P)JNvOHJ
z*adI62EQb_6YHAfS4GGPcu-UfW&2!=jmZfX^LQf)8wmo{rw-xK8vP5zrlKD{3qcxE
zfkyY)4Cz*N1h)+Wk?gRa7%k*&hF6MWnh-zCUjd1ETYNE<vQ?kC!gutEi<>V8Myf8-
zr<hw>IYK2e+6?;9wOEmPU3bpW1CeA=?p_MwLnTnPh#c4mhX^)(BkpLHNXnVxf6BMW
zl0*~>Gp0rRMup!S*y=0C6oY=Q)8grR7F2hnT%L#*ELR9AvMNPXJSoX<=~RhwBe|Tw
zA0m&IqIKQwdbwcorz)BI<MkkDDDb$?I_c91cHDrCKmIzRn;1aC5LSvwOd0wY(St5C
z{rN$OC_4-XI^$|qd9}Njx8Q=1!q0CdZp^eE-{nh1j^IP7j?2zg5JzOHXoK%Uj2aUo
zybc*WjaK21SFS8PHxj5Vah3P9h%3?4P--kLs>O%=>fZ!TZaXRTFGWW^Ij@y}V4&#G
zX=|n6)}P!foJ-%u_}@Q&N-6c3ZdLF^VZ?vKPR?O-fz{SOr^<)ly#rRU1G;-#3&k**
zeocz~aPHS8M0aWCsV4zG)I&wmcz$ZNsEXSHqkxIGn?-5t$1g1&c_Z{&=-1X$EIWxZ
zsruM{LA1mNI8#8jMD&9F8TuuWW#X_(5E5!#zM&SLK(h&4dScBUl7Fo%v-M7|#StVG
zXYP`mWXClpwq5W+v9f69$*0CXXg?qU3JZLq{%b5b?Mf68{QqBS@yVN9lf4~}DNy;m
zKHmfMr;-GVQtvzv#d;U|a0ro`pA2wpI&<>bw!K@c%A}DXqB_hUcdEZvap_Mc)-T*B
zEVJg3#>3c7UD)bdnR%NPv`mpX#9pW-TSw39<KhpwZ~<*c^6VvNWar^HVIe^>t)YZN
zeC8Okuo<1yhnFT*v2`v>VTSB0qT{0>l%Q{cPO7Q(*AcBA&=C0TS$1KKoO}7~`vJ7K
zsMooIgys1CNBZ<5>+0~g<JbBTGnK;ZrhzApUtJg#_5tu`!}c<_-5Skgk)8f~Ac#^&
z2lPA;3Xx56AQX(QuW~M$KF7!JLEyjT>YEh*DLM%{9vnO{m=PUQ*0)LVm(lXsOtK=o
zPvlU*e7cic`F%e}Blp{(@nqk+Ad7B8$vfL~kiZkAIxsUfL4|U<q^sN^;9shEPKgab
z`OUBEA5M34?^Ta*B$zWV-5l!d=w@kOwj?EGXO;<|VLL0lja)ZH&yUB^f-oV`{#_RG
zH~azN)RI1C?>|vQgQ1}CNx-gfJigOI{N~s=paJ)=`KgsbzHZQ7ISz+QnZKIE4viv4
zBc_@zsFHOH+|^F@9fbTf*ZmBkR6Do3o4G>mNDD~PK6E&qHgHAboSxRIJ40N!DXqV-
zG^tt^=t`K4d6>p0We<bz&G}^`VW-4xL5C;gZkQT!ZR_BTpc1EJ#E4i3(J%1V!_}PZ
z`-z@c(-dV-nwtMi;08PtDmrHK=So8D_-AOII#jgL1+z(rFewvv=y2+tkXr=s&4B0i
zLt~*xMc-Sd^1!?d$K)o4zsWcCRynWQ52=*lM&%Tv!XJJbyrsFOiL7E^3VnysLr(G>
z_(h9@+Km%hfC}2pp@*jVBzH-%Y&*IMRfa%&HT+vIMEWG`-E-7H*$|BC?<UZ9cxx>W
z`P+A&S0lE7o3k{`X~{EZsrH^z5>uX=^DrtQMtKoD<lBqgVVe6T2Atm{Ui!_a=${hB
z*js6fmXCz;Qpe{i^{LeJ;l`nH=2a*4nYx>1c`ZOuQ9(qA4N9Tq!_pUsApV3;>6YJ4
zhm9UcKLg@1OTTu#8D;h4=C5$kLm2qOU>AUL^M+1$dcqptpqarb+WL5N=#dpeT-Gm`
zZLY7Lrj?or#b$}dQTArsHh+mgT<~13&V!jb3!f~il~Q7;avnXL!7(!=JI1_(TKUpI
zYu1G*H&S2hGofUIc*|I0et$VlE5}-Yh*6(v9XSDR(0f1;@AYVuIvZ3FK5N15&(N^a
zoc(h<>@;08<1?mlO=)NdV#o%kf1r=v-0OZ9sdmt44}FxLuzdD&>{SsUQ|X^*?osxz
zuCyn}4t}dO-3(X9TOErh_o{w<E!bHr60+?I@oiTqiKQrep8dAqGO*Y@UECn9hL#Rk
zX{;I>={`rme*<o5DBGJq!H};a&%izAfM>%_8LR040++pC<Cs!^s<O76&<<Cj4+r@n
zz=|B44Vk+0wAY*vWf!w5Jv+I6(e=Xc_&F$8#xacr_q@mTZ!=zK=6y~$moBaWyGW^$
z5>1cSsp}B|hIwV1hIDqN2GRY>`wKw>eFZ4gf2Jyds7ymJ_LK15S@EHjVAtVdWLOl;
zxG<FXfL@6j7A-RuVyEZTfYY*x=u)BGguqwppH8B$Sf_=+w&RHU0{750@XY}N_Q6TI
z5CvY$P#aZLVHS6@eRMX!j4owkb;8a*$eQM;zF?(K2w18HOybQ$*l0s9G^%7SuMyBc
zvn#bO3H-6TuSh2_j9?hackR+)xO(<j#-5`i8C>quL*>5q=<#K|6HT^d4;8=;_O@%|
zxQa?mCZQ&`8B$<kBH>g?BzP)+Ck^G>%|r^<vI~gN!i>RPoW4j+A4Q=ZU2v=)E+|Of
zo=b1l`0?{tVQjKL<t<uRh@^Zodc^V&`x_!zL@Af5<eDfN&t%rdwO-tKLYa6=uVgv)
z4M0+M$cgipfLp3fFE(1MkYWMRqwyTFC_56C1MV^g2JDvSlk?M}vyp;b!?;q#*Q7%x
zm4xC`-ROxg8?MrbPtN0Q(epB(wr~n`wt%yr7J(zvixonrjXC8hUo)$R1)(Ooox`ke
zfz62CHm=??lbaMUL!My2yF>~MoS0WsV#Su5Tsdufu#*P3vPnIx_s;S4prSe4o$1EM
z@nuhNz>_F#n8o!TfCEr7hC+O^FXcg73sXjfS@->sz+Qj9zO$H4&$BS7Gx_Gjfbd*E
zk%@7^dIhy~fUm%8Xyx_vCLP|X2}Y@)>G~>&B{gt1`lXys3@7b#nvu_`LSg6S(=BCH
zLLv9O3RUylTj1Jd!&yE-3ehkugiUM7)b6K;YJm!%dCU_qch3V)5+ly==DAopN4iyr
zI&2^Q<xZ8gWf-GGRbM1ZDr`8XVGxVwDsGWyVe@}Y>9Z?UiASlH)GmF?{PdQzf_qQM
zyG3b-WUIl->Jz70`cNCy`QMQL?D48S%~OB{!S546Je76MdN8-KrYy$aeY9g`e_TIo
zNDNm+NC9F{Q<Hl|4Rtp20ta}V0(l2JjK=q=W;jZ8LhPa2Didk#XMnk-orNl_W^|)2
ziJXXEvh!kMuxD(mV2dLPJPH4+fR0k-qev<ik^Ho4tv!?fV*zJ@0aG_p0?yMbat?g7
z>29~6{7oHIB?4-<Ehs*5SEJClL^11CuhyBisF}v0v4n0QdX-*XvQ<J_-v(tzlTZGd
z#XhTI<@W10AA2T|iImeiy-rPWg0k*LfDqFI;EJ7dp>1lFfC;ssUHJY`rS^iKq8oQJ
zTe~+MtD!76?V1lsKqeYe;1C|A{FsHZH!kgd3y<s=q}oU+mL8Z4AOsP+HQ+kAwzJL2
zX!`|f`13V)%iRyo7Iy*i$;2QiHY)%I?>7zz<vPYxJq<ycD4{YWUbBX9-UvTBv1i`U
zR=!3k)7Tx<vHi25iQ@Zw<J}F~)EscxRtMvoKbSFDhzVf@&2+(42@1Q=uxO!|$#0$r
z+;Hk9uupm3`M$=XPsf(>neP+0kPMmck%mu}#JfC9-*aDNS;V!P;Aw+W362w%>^fOD
z7TZLj#fdX4`Yy*Dl1lB)uWutmtNdjlgX~pXMlA|f%ZdY@;(KUWOqq@|JeNzcwot@C
zb~2eX#W%)~e(hsAb3=4b_v^Un_d*@k!~N&x1z79+x5Cw*LV<6y(*PzaC|V5|K%%|g
zirlOE?Kz;F!OFsZWu_D-ZL>Z<o#jio=*^AkNIsv`#16oZeiO4C=p!<6h7TgzT<qB;
zs0Slaw6Oi$gsCx857ky-MUwRVij#RE+aSW>))>L6!ABNbi%ORc?PzrFnaX4};q3ls
zq>lM1Zy>&`3>j()egfBOxPyCPzOeGl)0TsG*I+EY%b1b_N(Fk0YffI#+7;x)B;W-J
z(H8dK<19R@)XVi*SlHzwhspV2Ty-H!r{)N?%Gm<RefK^nd#eVv^CffKL)x0uaT)t}
zbv}@0`0WJPBBY3-%ssyApuS3bX(IMW!?T~C>j{oM8#*m%sw1FbuR2+7tQyx%NMt*-
zA77%z(unx`A5gL8rwq_)O@=f-RY2{FJ6$u6w`MQD1M+gO4~)N+Si`idw6<O2j3x~k
z?=Js?uyfcFMGLZR+O}=mwr$(C&6Bom+qP}nwlnKC-fPyVU)Y^JB4Vz&PJxY_V1xP`
zg&XjOG*Jyvh`M;gadc4yN;p<5<DzSd2eul`7%@}dlf1>TpY=ny335`b=Gg>NY4I|F
zJh@zlhe!|wbhlc3I3+mB*VEpA)-n_F!!RCsk#NnbTw~^y%NXMOGd6wk`7qT<Y@B&e
z<5-zL(5P^EPgz@94)8pm+VbmGySc}zJc`^34qlch71(?lf0bTl>IFkXTWT(B=>FZl
zP|vd+ZF9E$TKLhPW9}J`bB13G1?y`iKqeS0gsQi4^@Ca1K`T(TvEkZ@9P^Y);wzz1
zZ*D<r>?+iX&dT~iOs5N*zG^Jc>;8AB&|qgZ3L!Fg++EyM($>`(?oU5D>4E25U-!LK
z?0AS-=xQ%uc`jl>_SS=9Ger5x?{?=!Vib2S<l~U-JHX(I{oHjh{^xg<oHht1D4j-<
zJ`munW}bv93rMP7Yef;)0WP%LL!b*RGbe81OVuQ#cQ1+>VD((ZfCE=0zKso5JbB)N
zrl1_WR%^NmJfU#EfDCZ1U!hDWCm(HO#}VL0uJb)8m8HR1nMsspxYOmL4zhHCoMIm8
z(d<pDDH2ygq4rA1v?o3p&pkFtAJ7sW*z{X6^fo9JgG>=YXUc#FikDPHpGEEXpQ0t{
zW%_YN&36hnpC2L#TiQV^L}~P2Y$-~Jo9ySgX=dxbDg3@)+eiVH>cd24InSk1?mCP_
zLKTf33b4r|Hi*h>PhkOK(aRalI4d0dsG0nCvUhFf4V&mv>NeR%I@Z7HMMOrsRHE6y
zVp>mv14US{AiwSQv{CxdvXfq{=VS->FR#cqh!PVfSAg>q8U;tNFLj|;BS3G}=Q)h~
z8z<~!_rg{c3D6j$wDnZ`FoU2|yomH)=RH@_&#0ZBeg~!CV0u|89q2nZ1a};`A$$K=
z8ES>V%lMgn(fLCymCpxMd}J%S8@BR4HnGnsqMg^QZ?U2w5-!xnWk&@Lm!{$1uv69v
zf_P?rI+`9jPPnD)7W?0qga6W2y-F%p??1>~wGJ&E$ZP(^-a$NPf`Mod7Y@pmL>3qk
z{6e%$Hunfr8NfxzAi%u>p_P5aYgeL9{4%pZ3|zGM$w=?}+nw^N{w%uA#46<>v1{9<
zRnn@aQpyj2FL=a}D&B)Jy>opGEbmAGxftI*&Q1i`Gm*2*gw#((PR>tP;?A4efxSjA
zF?T9EKMIh6$zm%wvl)?V^k(H28t91CdK~<fedQfT0@6dLSMS>cH-`fK`u;BX4>W$F
zSsVU(SQB*x;VC{Yf?%8o#UdF@^h!I&_D+eaip+LRxy(|l_rD&F2Ku|H5{~~&ekngq
zWV$c!8^~muT90T^^f_bw%GwR^Om;EkP|^uh2}cK-Q%xYF-Ph3=K-!q3`yG}}1ORD<
zjRADUCR6foU3wkh(hQSZ7^z#r<?#NPcifJm;qRxXom9WSVUS5yA#L%5a%;-@ldG=x
z0*+FFK$mw3_oUgt_Z7oFEH&uq>s%r<#mF^^aByIu(V@RnRqed?1n6Ov(qDPnWbM#!
zvX~s6h|_GG&k5(-!+aVuw;+NS!LbvE%zi9K;3^=;u?YT?jgcZ}v9*XRD%hsy01pgo
zv_=fPu+9dO;_~t!$Hg#Ab*R=l{6zGk>|n(?3VF@%sYiyQ>~GRg2A<qIwbQMxku_n}
zkOT`~mipgU2MsZw)=MG6qPNLifO?4VQ)6X%gu|#@Dtr%s%O!o2)+tobs!xtIc+yJm
z&c%*slr=ORGv(6Atlc}$ij@!>BnV|yAm6;lQT|Y92BcZ>SfopLl4>Xk`nS!ogKZdM
zu#L$B&$1X*^one=4%o9in>G%|R?#{hNbhS?ZJx}pPX`Ra-Qmi=eqN!#swx!&opzG?
zI;mMj!(c<v0+*{WP5!<_G?;<{l(Hn;poGd36U)LO0V=(R>F@?_HZ%uTvDZ`&VZd21
zC94#}yo64i0m|?1ghmYhUPzh##E!41(l0NUr^Qv!J~SE?t-ra*_itno%UB%C7ixqx
z(v$c;e<k|>JrnUFqf4i#?ns0-7?x4s^sb$j>8&c9hxiQ66VN*cbfYX^lSESK41CN0
zppwzujl_Tvv`;D7kw-&fK!Cne(xrq?=HOs59t|TQJHrTo>|qhiIb8!Hg@d<&${u?k
zT#XKdn{iKFo;AWwEC~MISQALu^p@jiw2M7HAeg)*b{V&bMf0D~1H2R3H&9tMP^+T#
zt%hiu3!Q2A7{dSNRf<CD#1eS^mDjttJv|HP`4g}qR~rk!D;YegyR1w#c}vh(#DQd{
zgq{SR8V0I_Y-?ewV;k`Y$X!=Ko#$4~A&r}S=aJS#4wrMrCz{%-Biu#UKQOT?x2gJ1
zK8z0&r`;QSptT3ayyyf%-FWYQnpZSQiK}b0@8<GAzEKms3A=g%u<~pw&~VQ8iofPj
zl<%!E+7%t?Z`{n=?(;FM%<Tn$?=5>+#(t*0H!n_%I{E#ROuxUdTUyPCaE-CQENL1s
ziViIae&+vZ3{WXbG^X!mMg+S^6N$`5n5}zP)7=M<ahkbo76CAg=T|ciagr>!T)wFj
z_da?+D@k7eT>@9C#6^si=(#YIh9-hzAr~)CKA);X`W|$UUkb7;@?Qc$6`4oYzY5_3
zHwhA3*t=5syX%0gjsI*)<JaaJx;%ex-*RVc7%Ggm&=W~~&+3J?B1rdC0{jDnj9&w=
zj|{z+I)OlH<d>Vh?vH0N9`HH<<3pmJqx_YI9^in71Fx5RsRH*p1{c2f{`MJwC8qxR
z{YiWy@V2>9M%|&!r(qgnM6~O?E;fPAZHU>p&HY$ef_=BrgpdkR_V;4y|8wHQy_^3F
zm@D4cCJbA%m<PsPuj3mp)BCbK3nahj_#u7jbtMTV-F82MZ?q3r(s-fP!{dF<iquB)
z6a;kM9JGWE>*B==A4$s#vf&D2?3W%9RCHsufHJLJ(5R(TB6j-o4w3EpDpBC{VR~F_
z%ymL3QDwgDGxC6_#%@54%9{ExyU=f7iia&54eInqsg@qbXQoTZ6e2Qv+{<rJhFc;4
za3Y!rUEAKUkry^7NHkL@&5O{j&d7BTpX0ubqDN{D+%<k)Q*n6)w7gz>0!wBVo#$55
zqnY=NC-|NJXi!$2B2iqHw{SGnRlTQAH)6<AEq$7Y>~@A?3v=WWC5yin1LHxFsc++C
zq#)0#8>LTvMd}PjUJ1p@+H__x7i1Mwkh!~0k`~oM>ZHs5Gwf@D`yLj8Wd@*nggwI9
z)@0=OZoB!a1O3+NU1Q7I<UMp++^LJ9+yF}PAx|5a+P;GFAD2qd^cidBs=Xiff*;^R
zolxVRS%Ltv`dGXhTU-ZfV}Uxx#tHcuLek4&*7EfEZn07#{SPSkC!KM+W{n_|HSVpR
z-OFi~&?*JYR(M12*6H5*X1G^IK9<b}h^e5oH`Z;POvh?6?*6&F*ci&_VKo}Y2zu00
z1#;Bf)VcU!U~hd^#I`>p3Cf>d-`zM7{Jw~veApk{YXLm<JuAFo`DUIqi-y<>cu}Hx
z$)K9hXM}o_3g01QX43twa*5wdv$MX$J7t?Pgj$feG=h+Tl6<D-y1dFyrQTw}{hE)L
z5C%~0TI`);Ec!5nzZQ3h_kh2v7WwlH2mC|OIK*=KIz38CKc7;viKGw0652UE(3!)`
zA3o?fsB_$ON2*g)B*%TH4x~X#E^$pi*S~%xNnAyoE>P4jMrbQpxLsDR@JREAQt*6<
zIoyazXZGKeU2)3g=P>`LLUrcz-U2GBuBk}XAifkt1$~Y<>r%*0cg!qmteH3e40m@y
zlxe)vO@GaBMy_maMkb7!$aXh(fIe>3=S2Bu7@n4-^am)|YQ+i$xrX$R15ZU$R{&mY
zve?V{a?t2)bgk?o;eT;*W9qx*WK|$X^gHi5-Zm<#qmO{t)%>+ZjoIJBR_Ip3U!(iB
z?We@2%pEA4h?X#hRS>QnOWrm&i-h*^pp%(W3yW+hQ;34zr0~)@NjYhYt4wn`P}mfo
zLDZIgfF{WD#QH)T%+v*L-a*1xCM~O?%=@(unfe8gB!RExkd#~-tScJe<o?9Xg0I>~
z`3K!t<NL>0)aw;NM(4Bj_xJ@g%mQr}@0+p`J2nN>Av$m9*Pb41+-xl*^Q9ct1mfZT
z-Wrm8WycFI2vZ~>?m<Gfa31j<g72fuNngVo%J)F{k;L^1E%9ziIkm!(2rtY6T^s*%
zR1C$&kr7)N)w-yRSndZb_?L8ZDr1kcexa^C`#gzf2cd_x0~bv^ipH_SVWl(*6q%az
zihhP!=XUVg`c^zb6M%c6CJu-EEHh$?V}wn8S89InH4U-aJ-5D^^w6rH#glrqwK%=m
z56}Vy*V!R-6WRx(k}tJ>r?!o48g_^IvCbqy|0j@Kh~y6+Y7GE*{d}zaR)7BU$GzRa
zRwgKQ>0^$aR8!V6ABn5!uAR-GZgI5FmALTAD^2wHO)VL^SR=<X^;BHUXjw8v*%4(t
z^rv&4g$ByrF*N29#d0kRbKLZ)a8xg*T*NZn39UX)ZA={j4b3KJS`S2uO^fLu<Ftuk
zm>&A{VT7#T;`NotA|>G_cv%vSgAH!Nr#%u<52409NO?ArJ-LA~iP7#3&DwZxw(98(
zNzj+&LU1$yFvXAZpt3oMB@&Gk)S1QV?ct9gd^EcZt?*w#1sg~{wG~Yb8%}$(wyk5y
zE}w3Eud>fD37t(O#!Vohw(3p=t=Q0f+Kx^k*Mi+~t~gEX`QGJ^@kY?;!&MUHIJGr<
zf&kxqWai;vB;<pMRK2bEwNS>b$J0DLYToMwDC&XSh{B%`N>9zORrhZS=XK$Wcd72h
zF93Um6;waWz#Pk4;8P&n9V9eNZ|V;3nG9LuUtfeCIRLHLdXJF+^~JcxZB<huMloiM
zL@N%^L95v##$CTp>7+9_5twQ+fMquRefOp%lyxOUvsSUfU6AzV#j|i5ygy?gdBmpX
zJV)7w2tz(}YC=qB^&oKmPc%09WH&&?1Vc`3iE)I{)}8fFqWO&)O!EZ&0cb{qpDvxm
zNUd2%i;m>KG*jtCGUOpT>keI1makHLXIEZJUFszi7oPm|`gZGygY6b_6PjHZFHd>5
zp)y&A-@)>9ha>O!*sun{1XdARW|$xnLilhhdOa!GyROt!HR<T>XQtVJ2$5TjST9B=
znnvTP{vrO|rTqz|M(<W#xz}+jMhf?{uAeg66nI++>b6Cbm$sO;%AuE=)ayTi$tkpf
zdnOO3_$j2hB^u`amy(8--sn;qj%zY2a`9XMP$p#s$6Hr>_6}EKelN<SDV%klD9x^V
z9(Jo?`UKKwx@Su-*aayC&QV{1kz#N+8DCBJ%M+jPTw;%B|4iu@Nv_M{Ik2m5In`dd
zwIn;mO!kp-t#j5JOMXb$b6@|Nk6inDc0RE2vJoJ@8X5L8C>ifLPKtuFo6J*xUNM5`
zR>HTs%-D%rImGjkzj_wWWtWv}7mjk<O@Fvely!U(8eD+WgN*=Ekx)dgL)$%esVF1M
zN${Z8&}CgMoKRu!(n9GvY`jk|R^cmyz*d}Q{b&!S3jU68l_E&RcA7fsBHUvzo`km}
z!C{F3*MOJxt@Gt3jUPg#%ac-IRO&PqfMeVc{c~EKB6OxO6rBjrSxNnh)h#p(P8kP|
z-I#iEb8>Sh`=;qHg#214=xwNmuNq4euHS}v-iL!aN8{FCk@M1*Gi18C_%D7Zc05zL
zmW}Hh_@c{Cg#2bvKl*d31|Z2`*<HE?S(2AIfCL%E&Xj+|M3a911gilZC7Jc$&&~(o
zu`P>^sU8#N1a|Y2tJJwH>jtv_oRzcKTTtNPj7umMzcR?2A_kv2EA>noHF%Kvl9OqV
z^f5DZ`O^YroW9?JcjVHDaTI$|Mjhkwv+e{NRw7qBiXQlPJu=Nh4PGWF;b1V^IJ_gF
zvfV>o2sj-jOJvI;xH-0^(vWRmuFH%HqClYf=45B-AfMe$hQiq05d#ZPHI2AF>WMqI
zy?C7n)>as(A(dl4?0c8i&iw!vT|SLjs^l+Ttd8bf7DE}J?jEHtAx*Y$#I=cf%mI^f
zfFTF|Rf-K}j%qitiBpA$CO_Et3D7%7+|=YwqTe_OCLp9+_ZsBS(ScY}#w9$!w2Td{
z&=6V<;&1>hoNgefdZWyZmA5#rWS91}tH<e=Z#?F?xrgnCIOA<Pz=0&$oWGq+houcW
z8Osoues>yVb#E+(CHZZwr~8g_I>x{y7=@~zt^+K<wF?0oU-o0M-rvQLyH9(9Faen}
z6(^7kFan4-m$DSTWdNhMa=uXFc0*2>j>bYp5&d3qE+P3zv2aS%AI?_40(835w{sb=
z{O-v#G2>)XC_y;lFkiuBhIWmRY-9+lJ(*+6<I^zfL9dQEiw(!Tgmw&ohn8QbGO<M?
z-kRX{!x8k~_H1fNyK-SQQ&VD|{hr~Cf*<noa6o*!1S6+U0&Kajv1HJOvdjz1Ci0Sc
z@?b%k`0UvhDir;j_p#GhL+LdDcFp&A>tY}*dgMR#z@#4y%mWg~nhq#8NR;hO3}mW4
z4?L1W0{jSi<c|>(L8Ud(qMCV?K7nhWCx!bvTA5Gv+rdA6MTXqIykP*Z62VVLtLiRI
zxX@Q3PTXS>(?3TNhoCU;6tkQvRMj2EwciI%v(~L^<m_==)*|wS$;s{?1hnCXFEyei
zRPS$6->LKaGpHS9`Sp%)J`+#5nBo_})&UZr^JIF~OKA87#>dwre7P5tnK}9i_bX`e
z8zC8-n!tpt`)_5G${z-7PQ{>ET<#`^!!`31pt&qCbAR?OCZ)?kYJ`d%UzmK^Y4uS{
z{OcKGN3TifbPZ}_3xx2kO`IovI41zB7QS*7oFGydmapyGjM)Twim`J}TB{SPxn7^A
z)n9*RK~4Hf*=rK`PGxZ=(^_iql%D$AYX>ZX5u&@y$tHRXU+rKny=$AwE($DkiK}l>
zgtFY#=b)#=0n0b&pB>U~WroHzGO2R96T7P^a6!D`7T98nVd(F1Q!J`+CDLy(>rkDo
z%id8lAB&(w)m#hsgrQUEyJhX@09N#bEV6xhq!%nLir343YqUaw@KCy0vF?#cl|;Ip
z==IKKmV?Z8hTaTo!A))}MKJhPuo(n@z@*Cao9bU>k4HPF0=beTKikb;ARBphOO17f
zZ4<@x_6JTS_(1qb1!tF;@E2tlavI}?HlrZTn8YV$88zPQ0JDY+p#ImhB5)o)4H-aS
zuj2DklkH6QoJqCB7WY!Bzp&%6p$f+qvj{mbuCk#&Q(7FTuVC+ZM#sEWO|fnZWvQF8
z1>n4v$4cWUl}9gghv<&2&I$|BO<1#`ai)Ma-eIu;LoL3aHg%nBt@^2CASnBv7Ha00
zFvmJm&HY_i=^&QW)wu})XwEhT(!MmjRml8EsOYDyUQ~A8nDbM;0enO-!xN=PI6C2&
zOyCJ~A@y$)V;&?bJZT5tv_zj%I?Kx@NQ)fhmVqWSRK#W(KQRG`>#TkE&#bxIx+1~W
zfpFr!<<jq;KQ@hdd}0mOow>LTy(ElbZ*OJbKKk;e_YR3rHoI{YLbRt$c=yuXgX&F=
z60i3sFXxnpwaVbUqc|npT)+HQTD{p=D(SLE%8RJ*gTs;R>MYg@J51lfRKE>azA#eE
zN0p05D<Y06KVA`0i(Lmj>8tmT(#XAZXox8^?T4TV2F!OSE#AQ*jj(H?ct2yuDkdvd
z3As5q6dd$-Qd=>*Cl28*&JV-<7LuO|Vm-D%;t3}TaiZ^khB_*}$W^-@sMH!F;T6NT
z8}p&5bTYVu*b+;E9{|K8_r1i3VFCN>e<+o3rB|<slC(w-2ll5e0_Vy6ap0mhvP3L>
zu7;2;KLE)GIXR+F6ZJ_I^C9zlLW#EkHL1+s196^T%e-lfaRHpu+HU^7h?}J*Q4#5o
z2t&JJ^U?FH>kIu|n3<l$;^&$t7!EYO;Bh)JjL|1mSvlkUW#07V-u=&)qC!Ea3w(3-
zN+nuzsVL2M@cF!T7-jq>BDq>|RA^R8F*OF;I&V+jaoKo3HSG}Fz_*Y&10*}zmy$Cb
z(GQ^4nZ;io{;H$grb2-rj>1TL7q}g6+4pOX=*ik|%zE5wl)|J|`65xJkQQeG`~jYM
zOsjp`!DBQ4vU`)!!p^5q72$6G&7FsD8+SYVX>LXjb)4PqZPLyI_0z^CV*csftUkYu
zpBNWW8=6kCQRi$@xaZ;77*S<jbUQfa;qYH2YcEPp@+pc+K1k%jz~Se2A=Lq@Xso;Y
zIUyciSD?EA&8ei#8M#@PurP1-b@|7hUbxR6y5{W3uN`x|g&T;$82?4J#M-XqK#;&9
z0eB;md*FpfQJ=WgJ6Pyf26ds0ej_kl&0l~jbXANrUnX@k&KPh0xO>EBmofWb68qJ1
zaawhTtkmpGejZU#G;K9qJynL4j`IL9&o;_TyR{*wRv}+=-0AP`)Vdg~5px!gU(i#C
zWh!oXGzpmk#*dyBtCQy4p@LmP7yVdm<=dWhq3HfgVtL>31f22{?sMs;`(1Hez|W~y
zs%KJm)6B3k<<qC_e4Cn=##=CVREf(T-cM77`bSzwbjHwp_#Flk_zh$j%TPGtvX>BU
z$Z)|-%nO%)4;_*}pJN4x9Bg#bFx<rGs5G${mTS6qt%kNTKA3$@0cPBzas8&6nHv56
z#x8U^u0_}pR*-~oxu{>pnz?M_2dAWWrpYVEqa&_<2Y|AC>Y?%Ap+$&0OIPgiHIMQ^
z>3dj`RpAiM6mQmIn;9%VBS!&=q=G%Y5?B<R7LYYd&^$MhQ`tyE)cYCtIcdOwhk7R*
z3VdmN-<58ZGH$xKJmzGxYm=|IO=CwpYxiz5WK>&=+_7B7G~)0s8{&jA(GI?qGD0eM
zR)Hhmnf91YB(`kpSdnZaakQUn71M>QO}bCOA~I9l{Z?};sy^;dCZxm*sCw4@-UpW}
zT+H_8cs<|sjVYT`px4W05;Yie%`Dm%EmJ1GXK2A?s6ld-mu9zOAy)po-$*`*!kj+g
zG!j@>Kgs-nMw#BIxCh@O(lI7WT3u2Z9Z}98k{HI~T6u~~`Xa2nn<{Xdse}0|BadIj
zn`Fm(EVtLLE%;N*Gx{&R4DZ`!vm~zyqR(j2Dt$((0Mj+8B=*q@9f<NTvPLb36vSer
zSgsA_DuoN*W^_jj;>bIW5xTByr|8y*4kKHHV}Nr;3S{CmW+c7bTZHR<%1{7Q-SiE_
zSq|YpX&h%|Vaf$oDpMvbMV#(dOkbe+G?&szAv><1*Q1CZT3}MpoLD(`&up^I&}gR>
zy?ipneAHFC=Y*=KKC*c895|00)|PsJZ0{f}E5B!PR}!DOC>K5tkI-n2_Y{fEWa;Ir
z>7Zm2P1CJ|4mMVgGCQ195oV3M4k*df1FOnMPEd`vh%x;$C+Umtf6tPK*T=OW2FzY1
zkWWjcRXZBdi}trTco?Yevy5qXfUkhAtT#Xt6nba`54MrD&jLf%)S)J4=HIS+@J+xE
zdJorun+zzpE%5M)@uhwG*tj;1il+Qv^Lq9h2#?ByPEq*pJ57yl&S;Gl(a@#lVgZFk
zn|K@EPq(z@kvI!P#glQd_{LYYK_(mUDylM|o;_O<*|#&Ufne_KgidD+JNwZJ@+}GX
z2X;t>ingmm#3h^;3g?RiaY;Yz@mvFV*Tp4Rk_oXrG*=#)MXKjg5jikF=_imBym7;P
zFvChNppsO4u#bVGBF0pvlNCOI$WoqZ-{Dw^&E-%}a#Yi)XTF;-n12&$^J|obi1q>U
zUn42Mz<U@qf%STJf5<`VPb*p^X#A7vp^h~`kTnd`C0J{1-e7}?q}h>@UF>lOthLdK
zs_}i0lXQyzD|_eLkT+4R{Pv`_d<?%Vwl1AP84$@EnQg2O!mN;?x$@em%BDf46qgFu
znjoc)TQ05z+VnPVta?C5nl04H(rc=HH~MzE-|*P3wPx;L>Wj4D9H`L4_N!})B6V3W
zG=1UI*{S+M#Fn|EI3S~%>z6)eX^6q(kcQhigb`Ubt-KtyqhSmNVp91?8YLUUtR>8Z
z6eh+-TxHQpY_iQT;p78CWO;8Dy@yi_V91x_E0LaN&<2PeH+vQNddz_wDpKkrL7GDH
z6tClDfgGPg1%A+T<((@JW;uE|A*ub53ShY*|9FGa4lv!1T#UaZy9xRAHTmxAKGX$A
zH($`~ztA%J(k-IHuEXU;W&(g^df_?EQtDl{4+1fhv*37Ybu7&7sV(K~*28g!9u5JT
zEVSh9P7iO--&>~UuaES9`#&b>9}?tpJ_IQzN56eVD&{LtehNA$P6sjTYCR~kjTo)#
zq1`+k+ZB&Gn}QJc$&1?m_WB6}C{%KkuPTDZuR#gLj>d^FFZPtQ1{RLyb&L8iD4}wt
z%RR{>`9N;uo9fw=AR9dDR7Q$6qc?P@Qu4r{U5@~~bhF!ALClW|4PVQhWjSAy&0uEa
z?cv^;DFV*$P9I$nIuJpR5Vykwd<$t6nL7*95GR_EhX#rxJYvGTdE@L%8g+G^jg_>b
zmK<1xyR0~i1HYcg^8AHsVC)BQe0Ld`?RLPq#rTu8=xD>AU*>$JX%+i*ocWHnuOvl$
z-+z}vfyt!#2DI8|yrh4V2px9p^v#%1MBk6qW<5VY##<}jE9;62mv14o8J5iU_*F4w
zy@&V+fEFs-^^gHMazn<=|4g?Z;u==PoP$%<2eP&FU~Fft8#Zutfk`^q!I|ZTGEW-w
zV1Chb)G^hy%h$JyC0>7EowfCnxQkHk<bHx-cnw`+oQqZ`e?<v+NiNw>MB%`98Tx+`
zmX|mv?QCrQ6ry1+fWJaC>md$D_7yF<;pqL6iBplagk^u*atU-mWAzLB+h<qi4Xz3D
zdb+@CJx?@|+4pNs)KXauQg!{|#eFN6h(_QzBOHJ&cKWU(@aPO%wBM#C>{;XHohI${
zf-;5_D?AJ%`CG@=3zXmEH@6vu+Z!RT4L`1SR$esO5v?f6Eq7V#qe^uy7R8!Q&T;!L
z-jysJF3|^S>e!)4?JICAfq~!73wMBFIt0NuHfs#<{&wB)3YEAY%GV<oQ;h}IF8h{s
zJN7EiCt<KEg3e&&#fTqSk?ZeRJ6w>Jt^U+9ZKinMiM6U$yJ`mFm5Uk{>UQ(COCnKS
zXz?+Gwg}0;x<4iZoAY_}hlk539OTHtDo)8PoN?ZwnPLu>@p*^^5|%?aa^ims-HOap
zjK>~ip&A;F>i>oV)Vv~)i%#e`GaRBIh%AR25eB8CapVc?f!-WGnY8X?GqexK_}N0J
zC_9CFu1ZRybl<Yju0WF6x~<kzRuXz{pC*<cfNG*okz~m*U}iwHuHbzOWrMvE@56_2
zBQ?}H3?1Y?13`#045RU8%1tZ0*m#@?+S@yq!PddK`#<yt-RufC$K7^LQ{iiOmnKKg
zl7xm@1+eatgx8$Qu~Z5`%kSQdXrFqc=K08Z>}aV%C!{qW4hHHR$}8BHHj<dyun-za
z*R5@J7T7<=&A(}Mz;fV=+Z7MbPFVrzuD4U}l9yweJv0A$PIk?*QA}yfvi+&R_CAp$
zi_SyHb*UO?QDY1QdjrpgXS#+#Ld1vgZnyYY=BXACRS_o#JH$Z;q%5oh(r0ML)+Q62
z2?JXCh%kq?dNd?7`=xK62yATT-pb+Xy~e|@rO(hYq`+PT$vGPzuULkVS(8<|xAe;~
zI+;WO77#Koakj!6=5zpGvR~)(KeZxwSO1}ip5#_oJ>DK>K6B{^L2XNNVA5T_lX**B
zJQ8D@|GXzR=_HOY_M`r@`>VC+<7R~{yC%u4snYB~uI3T^Oyn^-qxX_^4{4Y}MD10a
z8WTu+_Im=ACquc^xyVYO0ZS?UGzZn7Cbx_GtHdJ)s()WF&F&7Yd(3tFC(y4OHoRBa
z3~m%D!0oR;g2or<ei?qExTVNy$>(xGUfG}Xp8|1FUvF;bki|4LI^fs+9O2R)-R!h;
zuyUU*aTb1~BJShKrXfWcE+nGQ$QjlD_dpli(W&?&fP-x-L=}tgSf7hMQBr`@kZL8y
zvaw7um;ZHeEfh!?lQ-D2|4*Ht)vxrzBedMtp?hsUAp;zIQp2G?8enVu`VTT=K4vC`
zn*a<g?S+5DSE!Y|Fh~<-n9|4)y_2$VlY~s&O>Zl+OUPVc%)z5lkh#vGtJEeC9)@Q^
z)B|8-8)*5V);OPzM#_)RsHUlDO(Yn6stYF)f&G_rbQ?T9(Y1ttTj;ae4@!pZjtHxD
ziw=8EJ>@a4f0Lp3%=)Ij;+s^!-57dz^A3)E-al?u6j*y%tx9J=fUczW!vES!>8fcX
z4#{hqprIr!=jWHwxPiqnSCr8^{p(G*1!oh2oU5hX)a*@8VJk?Brptlt?z(5OrB1QV
zyJc;|^)EYFxta9N;(<DK&jSv`7<sp3MmP6caL8u57T##_XT{2z6;&)Y?Ct}0M0!D3
zgI^aFOAr(cOB-I$cJD4gNuK=cA5ChlMvF9plkFyCmTiu^uWi#XOHI!&+Rrio=F8Ip
zrviJ|nBLN%hPPWi`EPzv2o`O=qZp5I?w=)@hj~$??x^x1D85K6LzYQ+yM~&-tMLKz
zTyMi|+v!&?QGiY+tz}>VmvwHs6W6#d(jqxv)lshErBBudxt*yN6;mieyxjw4Y+6q1
z2T(<PR01s43#F10=%>Wl_jjkQH#>?Dp^^b`?Dn?I7FiV<UFXnyL5jWQ1eNkYsAJu~
z*;QN*HY~aXvxtvT?;0MOz`B5QvWC|QyHA$p+ikxHSTn*@Je>izZE6tVBMr4C-k4A+
zUd(Az?)L8Q(MK_Ic?_VuTyQO!+E6?GPvQG-NV3^R8IuBKk;bm@3suaVUq;}-du*w~
zeR$|aT;w_eE075tq-Zg`*PTJkN<yKcfwDp8G~nUR!gK}KJITPnOAo^1PGR7FB{fR^
z=pR8c)Bkwx0VO@IQIUg%RJAhLP@s<hO2(4;&T_8J+e_VI2Q;moBAr)nMNb<(Vp5*t
zJsR_0MU$q}nn6Cm)^X`4Q^wIvtJwI0sOvt}KRhvQWq|*zIx_RP$gRp{(7zgeX(Uk~
zo-Z&?PW9%W6>Wu=G@xCYJ@~#k?P&;hcPXvGp&cAlEm^{N=Zdl-^QY8y$L^iW`b3*I
zk@sl<f`JZ}Nz0Ccpohi8Kj1(@$^$63f!3<(3la)hKlp4$1Ku%QN~?S$!`Ut-Fr5f+
z<2V0a4vh-N9$&U;7|1b%%lRCY#KqGr#G<OmkvT#*7!K(r7PG%sR$Ql&zF78S@L(7g
z9g-=9S#MGB!|ED*C28~iLyjzy5^4u7<MEr_Jj6Xp<JOS|eQjx24uX=}@gLbMk@|DU
z$<Jk<ABIm$2D9HRaZh==NEKURSB-8aKMX6U&&OWy=Q7NLixSD@ED}trg9eqMRq3Vp
zfe>ogmDOL@B+=;OX9%YV`7@vU-E8rq2@Tbn7Ga8VMI&XZrUV(t^vpkg(z{*ViLx##
zzoWts;g%%5f7f!`{5&`2iKA$RjjBm2R<M|g{6pI_aTMB{e;AqmbKkZzJi?V2VatP=
z3d17>E+&%9hpZSm!RrjggTM(lRYnpnte6r_X^=W%ojOD&e<DBK#4cOhX50FBCKncn
zQc!0u1cv2aa(`P5DU&kulbX{@AUuDl^X1QAsDgN#tu~~(D-1Yt(cVh65@4{2T_}dC
zURy!4*QB!;E##q}950lfPG=!y`jLw8;eHvJ0J{Y|3<&wi{sg^u9A~a<Agy49Wh@+V
z5HuJC)`#;GX2fn;TGWaNi%YSAu{wtdr}MIzmc04}yRu@62>^E*QB>$k0kflVEU)w!
z<p==0kw90|C~nj+jLV<D8O^oNFy5jwgl9PlB#2)iGSwkd&|#Zvg%iFHc!PNImc$5c
zgi@&N8~WGYi^{$@1DpeE5R)HU84QEP+$=H>WvdG9GQ}RJXO`Ylxm`51Y_>}kop7Lx
zf5gC<JZf@vC-v!+yl&h8$0J3SvAqq_k?r;(->zMD+YzD4GI>q;1bNAxAq@uYley#X
zVLMavuVd;N7dcKyn=4Fa)|`tfJ#V|_7L2-nLZS%>wTmDkM2j~Y9bDGKvzF96k40jl
zRmZxRLQs78*xZ2zho6KkmxQsm2;^4oBmA5?VA7*Y;u*_IlAc)aeW3&#s76+HTJ;!H
zrscOSkFCFbij&Z(j>;&d0YSTdzw#+Gi`d8P6_7<Awc3~vJvBFTi#Cqsu2$tw>x*c|
z^$zJ3iX?Jhz=`$3$WDmgh(vk~n<uxBgeM|C^E+3?oWT@;4qdzvztC68B>kQpn+&ST
zFnrr;w<1E;p+oAU%3rjW!h_Hm1^iUF-j7VDfEPS6hS|&5wjyXL5ydkN_gyx!QY4U5
zns}7KF%S_I^rFa{+9&CVoiEb+rxt{}322_1DT2uelhdV3kv$Y^rzZzZUFR3nCRC)m
z&(Py9xx=;m)!Ol_ffHoO;jzOFj-L>6EY(a{G6M>3dE{Byc>lq}uLo{sFP2@xp%WWY
zk-Z!J6{j8RzK2g&Ut=^a!?wx(BpT1LO-Kc4q$`Xa!l4!gbNnO(66k9H&jl&?ZKY39
z@z*s4FNtU$!*x@!2@(E><%?c;sqL1hp!bRrZc_ouUNir&vtQyDLM+)+Nisxx4XC{<
z0K1n@tO4H{8Cn@nGYu(Y^8fPHYDhFa@`!te+AA7bs!yL#Jls4pb;=;8hL*&tSN`)5
z5w}~G!pS;H0Nxiwc#-DoE%ji=Re0@XpmE6vnX-0ip&G7l7FdKKXs#|5YQdvd_bC&B
zG8dg6d6g0e6fQ*i7LbSj<M+$2_Cd7-^Z1X@l?N6q{B8@ZDZ9!#N3=OHR;ABq5AT|A
z`k)pbZD}BB+dIHm+<J=Tqk+zmKz}>zdaU<@kV@E)Jtb1Jr;jsOm0z#a*FgT>V6vV{
ztBS*hsH-vb%b2NkY~A4{`yL2b(y$&?CqC3UKS3=1dPhup3Cy{^R`(Xhu@r*S+e*-Q
zJMbJK;J$b1ULhjhjVNUzdg%BFn%&=#&=yj0q^emsKXM({HMPG5LMU8g9~-DJGBx8`
z_b~SsirthWM6QQ~_K7g82*68Utb-_S<H_F%Rk6=@-NygmXW+W~*+!GSB^TgwFz6c*
zREIT#8ZlyXWwe@0HaP>6i^hewWCSVX;4ky6w&wnM){mbY<t)mz|5GYsMw6^V8uNlN
zRd~7~mwB5}(_iIgh_1xQeEpRfoH&Wv&NR)5*87Pjz&F%a<+T&3-7t(w6>I&K9|_@p
z<dHgo8%q3BZmYBoHJT2Dj<!Evb5`P-x5|aQ!3GjSj9)KrS902~4DX)5pQ3gOlw$#!
zgpCloS;nwikD}N{qJ1TVOm2G@z5CAEgP5g*2nWs_Y|4^M`>Zv!F!*~x8>BO15zb^y
zjXr5M=fIXU^{A9@yMd^SCql?h2?6heEB&uk?}3(^;>|j>Gmm0xr`#YyWM=Z`A(EGC
z<ccMd@Pk#0W`zWqhkkO=ol=<dlyL(9TA-4sZnb5EuB{}U0FBKFT>q&K&0rfC=Mu+Y
z;~s+Fu}sB=Kr(QE-3la=JcWMgnu2B|RL#gCkG%8J{(btF>4^!x*e2uL1CWInTH!J#
z`R^kx`#sxbu+)QbK(w~Lve{{A7bEji6eTJU#6sijWZ)?vf;Fm7KiZz-#PPum{}b;-
zDi1o<r7YTgOJ3CCZi{aABbbuG2G#LJt04hzNT5mxmY%wV(S&e*o}u-E&so6evE~KJ
z6R`&ZpqmQytBu{EB+`LAH5X3dA2ikE;~Ra|C4X;mWn!4{SY_7?H935m1Lbo_DDeuI
zMg$_iSO`o})Pw9&p-*hh`hUibJ&$5yPU-K-$AXRN%lo9%saX<E`hvC1<)pf2fn$9y
zMH4Qo1t0B;qi7@8&nr~PLdDgW<z(n<1kH2qzF7}ARMv(+RLR_T7;O^}sFx1;&|?}L
zfF(tfN(0V0Dr&YOd=A**_S70dq~icCj;P#UXt*>9W^saex6Qd>H!MJpzv!bG^!yS~
z(@*Oi^xjMn>6`P5%wHF1lfq9Qw3#B;MH;3>u8uMBC93}t$a&l?NKjll>%xg07<%Uo
z43upEFl8OIFiTG@a!bl9PLUzPg?-pGl}oljrQOmhVC!|U6<%{Y(<qlR(*!FA9GQ;J
z;sS862<G>K`@4j%6c#V<2L7GbUPl_!kI>{fe{dsFjv@0uk39!TedLp3pDQ?Mb1=X*
zC6RAUjzg2zot&;#mmtiChYEU`2-$VzqvTo=Z1GxE^_SJAkjYt2Z6B(J$2PA1{B-H=
z2si2N`yR{SK0r}M5+M~RRD-4Ca?0>XH$t0yUr8Wq4Y=h9-81MJqs6S*w-57!NJ3i0
z^-B}<?H`5~^@);4YuO(oE&Ewv`@cCYlifgQXX@LM@BefnJ=`Ip6E~YpsIjhjflA^f
zV%WGF<nGugs5@{~NfcxeN9C7xm1EJt%-6QZw$v8Q$kYTu>7RQ?%73P=D-0p_64xsa
zB`Q%NIskwf^;H(~5|)^gZh*88!{@Q)6UR!IW;#GO81+JEBjLaK3uuLy0Rj{DDEOYf
zt}-oZZ>Yz{25j5<F9{P}30w#nmtt+~`#6Ieu~(SdF91+n<c8GrDb$>=r{?r8<0@)#
zK;qqw4{_f_Ut3M|0C_LvNo^M>Ln_#uECH+Pm~kvm*9^H-CkIT%s`qHTfkW^peZ;qh
zn7y3HCqNpQ^*^p*L_Rn9-d9V{3gQx7bEJop&!rD%NxfwqTR3oqHavu3OJmjet~Q*i
zaV;^6P6xM<vA=E0XvS<7Wp@#Le|LEzKaXISBx5Zyt}$9|Y$|I&vI7gQ`wvL5BAT=~
zhUW6Vp9FzFmTwVX(OJ#Zl9Cs|>fsY%dzHPi-)M6-l7;|Tfy%E^C%s@7cbhYo5iPd_
zC5@EmJs=qdVd5prJ4=cIH%|Y%&lv(#_yONVww={l)oW=wC;?aoMYaaLx-nfmv5tf4
zJwP@x6ag7ib>(=ktx7sj;{9~Oi+K^`<bE68T#OgI_t~(`ln*&vD5RkdaIh7l0#9X!
z*o(3Jd<KQds5V%N7(703h~<;RjIWFnE+X-3A)j>KW6sejL5>x<I)Ac{ri21nG3Ikx
z0w7;wqY3@{To*6^kY%q#OwIRh;X_5jAF%KqDmoA{c{#BzVnZz9g@YJ&tpGaJ6Y~-B
zsJNvfn=&Nknp;HuDOC-*t$wE0T@5nNPA-Qx5aHBh(Ubb)1hqq4VNwwYYc<e)h|5fL
z<ZCR}pd^b=sc`iX59Lnkpu#F`5qCHiRD+f~q@@|l0t)=Wl99}sO}!LMFq5m79=P7?
zgV$qmzueRtsaM5_?|L=B`g#!2Ia-MTi;_I!SRq&TB=9Z1T&v!VJ&hvf4)}2*rMagg
z{b1&vO*c<N?mTcSD%TPQ#jxk+BHS=%8yW5lc*k?iSa`rEKR{gFD;hmXF6sVoaXj;Q
zXcEWEVBRlIH-r0UZ=m$Xd-~Nx=}e$WoDK6F1?S#X5gj661=oofu7>M=Gg5}+y|AK;
zPpk=^ZD4EP7jmO3%aIr_H7;i%R9z|{#ti4e+^E`{?C65PU(owinKi>uj;2Ss(DhH*
z0_tl}mWe|r@3F?^A|5SOhW$L_{Cb}=zI}xLx~k<Z)2Q(ZeBVc#HRe%Z1%rFOuB7Um
z6+n!t&}*k!OVK|qHBgkOCvF%@$H?m~hg*Zc%EO})B+pr%4KiTe22LjNo@2|0Urt%)
z(t8G}Ws-KUkRO6Pn+{`Bcwi)OYB#JobYQj>oRfnZ`n&uwo<JNzs;!qJN!AxMDH6NK
zCKDqv&iMj11yMJ>O`H)z3*3DAA86)+qf+3^${Pb^P2Me`%`d*>PAQ|ItLajSbP)GW
zelNR2*kpqYY(Gn>#i+I)9jnsT&~r^^`t@%sOZj~6gX%2@*YpJI?^;$lCFzXFIrAY}
z*LdClo14Oab6{C5mhQ9Hh1`JY2TP5ddb99`2W+wcxljPe-jGAi*U<36_^c0-I$M^y
zDO6^+R0+T5v)M@0f8Te7SV~|9>NLLx%b6%*xcT#c2+I0C&qBo=aP>{~EJLUkML`==
zrk0b7)2hzF+IN^wPu^VaU_4xsmW6h53DyHEZ~263mLHYy5MTDgEzb{XVII`F6%r)!
z*pU9c1sSIRxvdACET{#4M)>;1hZzq&U|7L<74e3;xPzX2D1>6t@$4B~5BW7+5zNnV
zXr5NnZh93?K?gD;@?FQr3)AjzbJP3ICyUTA2)xAJA_!~GE+NhwiEKaiomxmptKfxH
zi)RZksctG{<KqYl8Y1x9bE51uw5VO~hjRNVCmp>E8Sn&i>Kj>jC$XNut;EvHbXE`7
zF@4@k=D(!!N&d#jmFLmgMl;x8^9)$1>0KKlEovvy`eRB-ARG&ZrBVNpt@vEuYCLGM
z{EQN(Xb!-*P*g9BiNtEuO<i9#zvvl~%MVSh&1m&7X-V#$u<t*vP^4e+4u4E{Z@*a;
zBd}|iyra+iZWQO0wTDpZdR5NwV@W<S!uDGddd^^x>_*3fMnd&?x4K*Mo{XAFQX}*g
zz>vf#zy`x*=j!(?C#m^{Nuto$p|GeqB7d!Tm)8d2b3g2wq~tsS*fS3icgyID*-nD7
zy~wbXHy#CXEM`G@aTc(8<0igH=)jN?k*?#I^Q>U5n;fjqMOG(9vYdQ$gFoPYVb9<n
z=3~o-Zf=@KoIiP*ROZy1h;=|2V*-7@T^#%RALK-jabW4vxHH)kT1)Gqb>(45X{`O6
zL1?fgs-nYa!K7nOE;l0b&Qj7mFq)wP!A>%^5UJyKJV@B1;|oqZw<5KwXFHX?Isaq~
ziiJHCpOsON4hr-o*n$<cy85DXm$IE$zoqZC`^v|Q`a*T01dSn{RNxIWVFRcD25<k>
zNH+Pu6bypEaQsl)cPdBnO{}d2s2I4fo}r?|u91d_sVvb4k2NI3ADu}m7bEA(sqmsG
zBG)fV`pJREDire|u9X#nvACw}QRE${bsooETvXyu6qF{gUuEbXJ5@kU>DOOFJ7?}0
z5R-vcJ-_pt7yH8@QpjP)BJ^AQ%z#>NHdpA-P4F3J6iII34J!-27q#YTadHqWoa7Y#
zkUMKXidXVowRWE3cW}B~**K*so~r{Kj9t%6TeR#~?vpyMI(5pIK8Rq#nY$aoW$3DO
zg~A5$*x=QveHaIOz~$!(A>vcxw-6_K?<(OBY03)tyxy(Y%+;ymWcA2$E;=%awbr-t
z|B84@g+y{PO@~^zps7)auuz~!1?gQdwn<EirpCy`wb)@#;WtR~G-#}JRs!|kyu&*j
zd$&|blLAVnA{H?-RW)&~{2Xn}9lP=<pjE<K%`w<G0gkX=)k_+!C8N;j2mvHYpfl|x
zSh}h;yARTlb6OyPI)xZj*~~qd96`r2bu-{Ry@p07as>yyd)aKM)nneZrVsv69(HT(
zi7g1Ah4R^+x??<7-7RDd2FY{uf-2yUK7zJ^Bc);V+hP$Og7^2f3jM<D-5^Jz8}V*C
zyvZR|fYJg^qfCX#gy+~$`049E7GJPtZnUH~bjook?eqoDNVyYg*Lre}d~qqh*;p5p
zGi4+0K1@AEoH}wo<)T$fN5*o55W)ice)+B_>UM>|K>aF#ONQas{kg%RnM`EYsQf=0
zA}lwM#Q$YORHvva_4gv|m(U>AJp-4nposhs)i;3$asm2YAu+RAohEPtt3fVcn3xrx
zVF9W3;2X$?!NSsy8@CeC$;8rx1$pc`pvpBl{veekETg?*zA#{ym^i692!Ia1Ik_A$
zlT)sPP23U4;*eQ#^{O0zhR{Xko)53BoS|tFJ69z%Sqrb1upd48eaGS`h{Cna<rwXL
zL49y*@U37Qhojr^?aVOAxibPDO9~GlV*9`Xsq%ooP3jE;5}I+(t-TwHCd43(hoL<n
zi~*aN=-mtKLD@^&FOE+)A_(#)z7L}SUHHgZ{v~P`v7=v+7V#ewD1!VY9=~T*yIpVq
z9KM6)pw;~I-O&)HdbJy*O)9SdbbRE(0rrJOqA*MwdYfdXp$MZ<OWB~cVW2hC$=xHU
zURNRubj!yZ?oZgixm<S@1x>k*j;-d=j2C>Z=T@=?p+bwW<-Q%=I|Ju~0R)SsYo0x)
zM`U$II8!L}cc*#{k#~|BjGUl(u5w5`w;JK=N@$|plUWJF1;mr0TVA*Ms##3;U3Ar(
zuZarUvnnLSec%)cWL<EN&+7w#op=(^bp6UffW|?vYTbvx*A0vjlI65L!kOzGeLm&B
zlGLngD^0v#1cjib9tVeJiVblx`K5Q_@M<JlFQqgWR}IS*vK&BmvaKLQqmw}ZL6gtB
zP-m)6*B~nmA|G$Gd-~LO3&E+gL%E`=t;La2^^Jr6=i0b^yGD;qx%B_lf$6JIhX0E?
zkeLvC<IP%B6evQ?ZgM7G*L&!kPAlG;$=blf7`^L8F1i+Zg=6GuJ!>S$27clg9M_Gb
zBI7aN8}Gt+!-?m&+U7nj6nzC)Yhkb4Lt7Mxq?2(FhQJG=PK~z-Mux#RS+V+Z<i;j0
zNy^mdqod*AelqE<p4{~2RT>^fW@7$vB<mTR+DeC89wl%zt5gNT>5>+9u@B!M|ENr5
zz_B^eF!0cid0=>^+G=kpn|aa?sKV2vJ7({*9UxAvORU@jgPv+C{MjRzd63V&5X1So
ztS|1xZrHd7*BosYs>4RC&=6sX*=sd&Ds&u!8(L($AtO7U9a?B?#pGHuV{m)vsAw%m
z6miC4y(`X^dXo}L#R%xTWg|NrYOB2-KvoGZN}S}Ur|PuW)jnxqr->8+BDuz&Uu!)T
z4?j-5KZE{ind-ZRCZG+G0U+6QE#gC_Ynq@aj3EF<F##W^Fntyz|2g7^Fa@2TQBkXp
zoRGsxO$9m&^Uvn(>D_wn{i+hOA2N4v_LWf=D3cYjk^WyWz_9(B!$Ba%8#m$nA?OtJ
zHA%x;2Uqac^Wt~Yi-Nm2f+ROI6fPb@mfh%9|58$Mg8-#&QRR{u6~s%kE-9P{cOWi?
zrn%MxU7fC?VtWX_u}Uy1e$E;=poV<Z%U_ju8X2dZY*{&~*faeqldL`h&Tp-FFDA3@
z8D;9w>}giI5p2Xhx?4AcbyJ=3_rJ*hm?;Chi}qU`6#$L!2@FLtEeKx3rA<D)K9eb>
zu@72n7t_0pY-5prY)V?^PV^~mPdPD+xiS`RpUBDJLH-S(8kOJ*mPnqdELy4J`U>>g
zZpnu2d2$@|SB25}o!9+#l5El%c;eE7{OHv0z*@EaqEu}TmN9bkBdEMM267dBgG^0U
zOqs|MkP%z<*QSC$FvR)O>&WX59GNf=6*+mUc(1|Bu(HXtBCdrw-*WsFM7=)s>4dY!
zGr}?q5{1nKpgR^WG0sP5XaGVzcq*ST7%6w?6uy$dx1E_Z`lVv`BEK~c0}nU!gVWN?
zcc_(611gl|-0Z+Avlt@L%EM?F6>qVoF)?axL5$|M5g=MS8vFrjd@jJ)g(o~QS;P*s
zPfIIL#^~`y%5D74EOMwUi;RAB(m3@;f>QB#$kdDvnMSmiAyKs{9G5rmo2xeMLF^nx
z{Nf^1qRz6M{b92)7mEDzPssL3y!w*>&RB_@w2kj59JB&jC}SC7Wv#h4V(~HC5eOTw
z8B)s#P+6C`^fqqe#uSi^iJ#>bl*CpnxPOBg7t_F4^5qtSsMqgPa8z=fda^xMXx$t3
zKRZjWd>9Khs6DaBxu$qa_ow-vA$DD1WB<e6J1q&rMBA2S+xAzsZQHhO+qP}nwr$(C
zUFVNDyDvMsA7H;iMqaF$IoB9*g&ynEn~K6L+lKk%l@T^Wu0fD&!=7q#ZC#9nHL4p7
zaYFS5ECx(19kQR?L$~{o#U&&{k7VF7hNwn=gvwQolzPs3F)~W<GT<jseDMrTxD?#D
zcQ?;ZqSuH<x}jtLQt(R@=|KEIkvNd!UNegpKGiel&szeQ;wK^A)JoIQ6=^Kx&zg$d
zDyGwi_E)5uzp%PlUqFXNUp#D}DFLWSr+oy>9B&r0Q(exme;l^xHMMfXL6)laBcXd0
z2KbPwH*ERDVji%Muj1*HjkTH}*>}1DKy=c_Ng}8$#<o&;aW%hXq45TsgxVnsz4?Dd
z<UE(8Jombo6qH%d;|H^$9M(gvt<oC|NI7w8=4b>SXz}HrN1^_Hm8z=E*D!b?VzbU@
zyP4~Py%e;!LHXN&q52W^C#Bom5!#3cvOgnl4D(qTBF@&iI`*NkdDJ;3ctVOb&RDT0
zv4&E{Bkyf{rtc!#bEF~i^HqRJfi)cA-D8k2Ma09~Yj)5J$JAYV)xF27+wsL>NBUH=
z6*ifKq6JO6?B_ffqW*DpguH>W9#9H{VAQPGlPX(zUO(fsY1z}=14d>pSj<qFJvD!o
z%@51IP4cG=nkjgQci7XE$bb8GNgj|I_NF?Kh07kjP!8Cu)O)a)2ZXDVX6d$ay|hO-
z;S=1Kp_d9_6WmAqvib7&%nXpdULi#DGYr@(E%#h2ekW)>9y+zTD{h-3>=TJ4?~}!U
z;1xtA3sZ>KdBMu4@H<1Bznm?Dy{?X!1x+mgBy!K~bLB<0>4y<Dtb_|AsieK=6+OI;
z4GyN{6h*M}dj=tN!^c?ToHxV41p4$=x3&*-;Sc1jjd*00toid`pthJ)nyM>3%w4cC
z0@-8Mf<&<Q$h8P4+g)pWicgqNj46hCdGp`2il|lp%WougC$fY~>`ry<A~c(*Yh8>K
zhSh#D63}d=AXjz{INE|hE#&#e#-CEzwWRt^dT<e{sFEIa+5MuYR~d~<2pHcrlogZB
z{eyq!*;o)1$%?$#fcn|un_>15U$seL^*BTon(@3o!SvZ3s~H88^NtfCfvQWE97Ns2
z4l?dasxpo5vwK8OS(F2?tc*CS1ajk-4s0&#?3Duepe+TWYzAI>^55Dp$S#gV%pFMH
zaY^nAk}+Hk4>fW|pM<&J-{EeUq`6IdD7@Hn8{Z)8ebKP0ks<gpsIlOi?jjLdq@;7U
zt(A{{E!uem%v=9Tc1ykFbHeaUnk4Ip?<Vjw0pZeth~tK%QS~x>3YHbzD2PM?DlMAE
z%!^v~LS|L}D*scjOT6KLlVIOyqCN)FJ~QX+kdyDGl9A=_+SI)VNmpiEn-@EGnA3SW
zt${<T9}L4(b`6fI5k$vDq|o<ZmjRHpsHi=CJhlPNE}DT)3HhV4H#Gk|u!Xt~OGPO@
z#KQobuW6tNF45f>qB7eD`~rO<m!y!G-Q3<iN9U+wjtp@}QpWN#%a?o!SN4Fub|R42
zcfdekCdxG4+&MRVgCvWnqvr2xWg<#(BhjKS72qM8Z*(K6M!HB$I-yF7tSFFU+Oj4b
zdQ7klAucJ^n;@Ue<DyFCVbzTM91I<Cx4^R8c}G$K;gu9O<RM7Y_>=THw9KuPI;DDr
z`QQz8s62Sz3@IlTXi2#)L-g8m<A9g)8WavdYnml)n2S4tJDQ>&5|VSvjf6Yua5p%E
zW>_x7<?t~qmMGY5NBaOUZiyAnw|aX_`OojNOHQ{OK0Hsnj?3(?mMK6T%;@5W{;mys
zy_pz1f#`Rl6P?1CD=Or)-eO{G{`Y4_-a(O)@A+I!P*tC~2YpQ5L0YYMj$ugSoF~=I
zw0qMa<+SeMVd=_&XvKaUMXFE1Ut4kD5tFr`C7U;~#t1U>Zz(3e?VxaE*Fijl@|R5e
z>6|=Ne<%r9(`Cj3@UJAol#+K9m1d|i01wAFWvbGn)QkpPsmZQaU{zoCdklX=-S$@P
z)eC5Y5oU=?fuX*;Gu)_k@Iq;7Hk|gf`_((=4hnld|9${~t9H|D$Cu(2O<PlIom3f8
zLrr24Wq5NmKlIm;?Yx??uR?2n{6F5ZA9J8=U&qvI2@y?-j$rcKI&9!=B4$jUl|U;G
zP_q99i>~#{3ZaUOl97nWma^xr7GUz;UuIi?ij(gDGi?&l0N4C~L>Th}%tas?Zi66M
zi>a1p)d}6t)7qtWOW<iRnEX7a86>cUIEjwl=59=TOb722PL<#VE6>F*=(y!7;H~0@
z9M*%wDs1mi=a(ZjPD~oc`kV;!rHR%2^OR8_!QW*kkeYd7T*3?dB`g!Vhu+PfR!=xX
zq$)Ol$#9jMMBFy9gC3wyzH!Nm^r5d3i?Xs3IxelQQBQQobIrv{78HR3ukN35JAzus
z#U;DhD!REc+J8VYhBlaW89p%_zI39Ne+Pc+kpn!~$XA@SCq4L*^vO1l7^>CPtvO2_
z5<R*|arA2&@CDfl86|bpfnIKkw@wu*dPZlBo{QQnJFsq9!y(GEbS=!<qDbzekks$R
zZyg(M&6GWPV&?^Z6GOeS1@(Ygxz`~f(nuC^QyKSr1uVCV@N_^L$(F@x6e!=u*90+P
zb-Sj<Z2Vl$&4ms%Fkvy?oXFfeRY0t6@ki{?-^Ii|K#f+krwNZB+Q7X+fc?`-d@D};
zTMgvRwgg97Dr7iW4Yk~+Gu}Lx+s~4@Y=nia#RO2)04NV9Ri@(tqNJX#rWV>l3I}yf
z!)3}yP_EiVCzgibUqnG~+50`V0&=w{523?7CWV6N<TYDJo2%ey?0}MqK$?vI-l>WA
zw7pwBM?D4w6P0%bIk|5*M2nPiX%N6p_IJkr$apTaM!Rz^D0kSZ?<mc6PIOR*=!6J{
z^5-4BoDQC0jEO{TKgh7uCrZ<m0P$2#t@5sk#VKSL_FmRJ&{In(m>cxq*3<9sX-82E
z3$T-W^eqs;a{_U>Ra{gnU(QN?mc*8C=b29T6r4}<qvc)*<cNxOh&?AZeI~s861N=b
zmZTE33LB2LR#PVF;X7v>2Z)!gzJi=#eC}jeSr4duSwA$zt9Oz|bd<MOn2``yCp`z@
zTD;|-SQq5%wi8xz-3=tx3TqoYqEB@gJ;6VqDC7E{&h!s`xy%Az6cIwv<_B|Np&L(_
zn{%wL8?`vKOK!@-!d#oQ;&~?HGGooSYqNs@7~{6da#Bso6E>Nol1s>A-eNiHYc(n$
zJbXmtmYN1m*6xpa_8b7H3E>1sA*xLz8<2*4zDApQNR|f#OP{WpZn{AQ6)Rrdo+A`|
zZmP1wWBh`xd+4muKol<btvMw_^v*_7N4zwI=)i=OoH6pCD?~{8s|(@e4Wb(w*Sc5l
zFHKlwk|tju*nwMdKpS&wwj}@O@!^gP((V5xC;l&De#qmAa!nLZQFu@^?;UD33^4i?
zHu;O6RIk5zG4E)J;i+XZbI>F4OWITc0cZUZ)rVL&^v~y_qSixR{3JXc^7u6JufbsQ
z%MY=8F?gFuHxg}j0l-B-*JDaCtd~unD?TZ=%yd@mZG?I2EBWdLi(;&N7{Z&C(^mC}
z)03NwuqVIW!|hY67ir~KT9Q84>E1Io?a-=(^K-=EE_w?Qp?vPIq&x2EeMVA?wD+jd
zri@`JjuoH!-@2&3essMA7MGDncz{pxk$pQPECiZ@A;aL3b409m^S0v)j_|ffd)@G)
z=^^LQ|03r97cp-R&{kUHi}ih<y7-ny&sZCT57_R40FX>>W{u>+aryccXAW_*T?;#u
z)u#c7yZ>&_C3WVfpgWJzjaPglDA?PTH#c@Fo^YHHc>yN9BHwY$I)jK>NRJpeeS)li
z4`CW-=dTOPj+6F!Tc&0*J|UaXcpaSmdlAH~sI5bpjXA!j2T<N@L^Upp?K*nzx~21%
zV*qv9xR(MWd*`X1BgkNm1<2^`FJRsm!PB6ionI6+@6vi5n7Q?1MM4*~$Rp1OeB>U6
zK4n|#l57~O?C|W?TmX0mp-yxeE!;l<bPQdLs#GCr0M@RF?jcs>w_oE3UCSTqe4b8B
zzqbi#WIB+6k1PZhyQm3ZSPHM$TwAfh%z8rar`Q)@2k&AI=5^{c{}`BIkByCYBP%Rw
zju3>8dXb0v(Z{2JIP|^#nbv&K2eF$Uk3|rMvvK(dV(iPbi-|x_A3NN!IDJHsiDw21
z@l(~c=%D`6I~kYNd1LjQK{WNYmd^wgpc9=l@4L<}O?kA&cxId>XPvq>Na;T6ar108
z;_9);z^B?Obo*=>OB)_r%@K5mJnH>wc+wWv)H_N@UGkR0RNB_$WfKe3iO8$fw{#8X
zkYNhapHyl2rkB=s*t$~D`|Ik@VDn{e4docU!%XLd{Eb+Fw>oQ^iHF6hsKl|EH6SQz
z+r0O~??_VH(40(I(S;8omFgtY*(nNM#F%d=Zh~O3Sn-Szi>a^c4srk2D{iIz0}p@E
zZ8oA5Xlyr+n9Kh)5=r&@?t-nElaJqSex4JtU@`<aW8K$v==(`P;_rG)w_6_t8Xm-C
z#^S1vK^~+*y}856AYYo~-{vWR$?SITF-HLW<%L@JDZiLivN=&5(RbBWuvWoW_rc}~
zJkK%$pC?oO2Ff`t+{dPr&hr~rE89%FlBEp+1*^6yO^okYZQ0ADOYAa#`01FhGdI-t
zxtI1-8NaP%YvAmkweXr??ZS%b>u!2#APmGf%Div!e*Dv@1~+}z+J85X=pDiQ0RWDr
z9uz*S`Cs2x15acYX`wCG+4S>;MU3<?OKLM#uUF3B85@^YSkSt!G30lXVa-^0^z<3d
zIQy-Z<d{za597mpS%pIht{t&qP}UJ}9G~oiMi0;BS6V(d%)$bCS^h~%N|H}&c>fKQ
z$b+qx2Elq(y~He*>_xI#X`wN55o0vvivQH%O|-OSE1@RJ64*FT7n0M*zVyFxTVbwF
z=|fztGW-dYeBCLp%~Va7Nf9~z(D{E$HbgpvKkFEmCY{ttwJISY`(N2VPs?wj)!vJw
zdBAR_X>nd+N=Fh1lH?1_VvC#$hWdQV@Q=vpyN1svTZ*aD;G)V+JstWai1$>W4-soi
zQsG-VB|M56+?6kc$fk@4l-0kpQZz%msf@tD_>0(8vfj1oZ|_O^OTbI#M+8$QoS!S9
z^ZZ$0T*?7*N2K$7rhW2BbP{`d4{!Nge^4T+-d)s~;wNzGI%bgWe;^3`XHlea3hLr4
zOKfVblc8Jy=eiRI1q3mnIrqp7MOkEK`E?z5Zw2r75AArq0rK_Dogda7S)`tM3y9F%
zFaSD5Ef9{!Y0Vl(o<k`0TtBC<B-YtN@373yT)541CDVY}EL3$C@j=}R8S|Ev^CbYp
ziWQhL{cU$TFdRSF^0B4OCL-F!vo|xu@k$fT*AqkxKjh|Sju^fIE*@x}Q;7xbKkhO>
zVo~bk&4UjdDI2JsnTNp5-NHuL8$UU|cmJeR%oy%ZBnP~g@cnyEQK+*?IcVqf>&H=c
z$?T)yJ@wX_VY4oTvi+#^tGFwpw0CZnFP^6nj1QEpi149*$D2ZR(3N8;3x{ml#46Ln
zt=H23Cp}$g@o10!-x-WPfjsl$vp6BH%c=S)Aj#YnJStRB!F>wUPu-}J`n6N0=rSWA
zO30$<E&{bPr2vH|ailf0P!KI1zt&!{-(-j{AkuwVdJ*nwpP1HWq^@ixX^gwG9=6=;
z(z=HG7c)Qm|F;E@R-ruGe^C+-KV2S%Ru@>nd4RQU*b(h^E`SNHSo++MLsA#Dz~1gw
z+nKo0EGPvB3&c~jx)zLD<F^Ydxyt|-D|Nq>5jCe?sEt|SvPALJ3k_&SaX<v~Z8t9=
zW%?`FlBbhqlTjZ9)v&4a!bD(<?zGA8gRo3l&p3dks1mXB(1L$%GaXpL(Qv~Cthwnp
zHWx`;;}fIo%wq<iR0<76;*h(GvNdh?AYa$2@pQx^7&+}#(`^A<8rN^R)U6iQ1O0q(
zWwO$wL}ny0wM3S$5;n|+4@0TO<Qw$Rz2b67)Vdmg?N3o%4L%eZ9;?ijax;BPtiI*^
znq7u{$fA0;*vT%E-$@9CA`EVBm4-KeH+CNF<Q<%OQU4b22l#kh`$ZZ(L(Xi=s)?~(
zPv;6^gz)%24QqsmmgRd0nU`7f6WDIwP0~@f?;Z69h+WMP`GdL0xNm@CpFPYie`a|w
zPWejq7H*&9Cs!sSMwAIOmctQ(`ZM5sl0c^&A6_gx*cZjboRn|)<$WQBNQoVq@C~2f
zk@*gBUnWnD19(%zI;BVcYEg(?0vm5-!rYCe2_eHIz28vSd2-EZD;xis&z6nGGK#Q?
z>d$TdgX_E<ib1a=b}!2Wvn4Luq1?&Ogr<3nIO7ZER|<^E9YJWeil8d%DTEBY<#pQ`
ztoXuFBZd2O19O;XpuGipylCPxN?%*nz025O<yRa)dr0aE$u+rV)t}9=ttdwP-$BI<
zI$>?wM|?0|GAUUPK=J&-Hq@`?n&AXYtpTrMTf(@3ms?`B&Uv2vHb4{)-5Hn-l<EEc
zn?KI`8l!H-bmrz|mlPI2Go@%gbhg?895xMmBNzcE>}(f~%bw=BQ{boSnvp7;0S>j4
zAEhAwltJZ3xTB6!)u)UX$fX_XK}w7S)wY(s8d*7>mv<b~n-|dR=YgcTP`gIXx$KPX
zZ!TMNx48w>dgft&At}BeUWG8gJ(ctlPI1+IA7X4`EdmT?$RCfGik&Z@#fbwmgV8Is
zwU`Q70)LxJ2dvAQ?%{prhA1SFaQ1Jt_~fRAsgj^I0fOzWdF~u(?*^d-K}I;jpBE!v
z+l&$OvGVqMncQZRbEp3c{0{bO!-br~KS%P#4-eWodsVZx_eB#tYSKhJiD3dj_~GAk
za+amUQWDA;RzwPt>44P9WctQjoa4_Bd7C^Pjp>8bMtXp_Nk|t8v<dRop2^1DaWE|$
z%>268sBfc^jTbCK*!T@Sd+zXgt3U3*N|fk2A0mTeJFip_?W-31e&B0%STUfPckTxZ
zIGgw0C-Ne_Zz$$yf}z3CUrCs4I~K!xkvlNkx;?>1LS5{I_IOac<UrV+v)|ITX+0MT
z=4XgV5n1VzpWG546(bhC+t7D973q`#3C8LW<j`AF54Yxs#7qzMmN|k&aA9&)Nt>fD
z1j%e@pk!3T%c}ZsX+Ppl<V!X|f=IDwQMy_#bxX-__*t(Rvc1e=%ASMO&nq<=%HOyK
zbKu%<2tFC{d`GCa0OCQqh;lEC(IuiY&b?JF2%fS9q^FEOAsKcosdg?6#PW{+JTirN
z?udYIL9(7!%VdO1Rqjxh<bv<#_iugX-ace4O(@{5TJ@?2{8>P#3-dzv;73YboS``P
zP`;soa5R6k{i?ntxej`bNq<!bR4(c|&UVaup!==-3touN`h5Qo(&w}Q#0J4hO;l;h
zgg>t14Q-P&szoj5mH(zK3)P{P(iwr<^I1_}3#sJavat(J@jP4p4TA04ft`K3cUaS=
zkyKH^h%eh&U=E;11UYJjaAgH-UPq2)Si^YbhPnFX%?zkKSPp$jOoXFaTh!&qC}&tW
zKnwb$UL_|AjP$lXxN*;-oy1Dv7NSg{$l~6_X7@yrkn%Eo*bwGnSno;QQ7l+hT={g0
z!ff(bD+<QT!8Ip@LH{<6yu1PY(;$%Y*bo&8kK|)rZt93rbP=Go5ifxoj*Q}DrJ-&|
zmuLlvUANb^g8R}EcNZyM4e@6<D7FdN#+AnA^g`rHF{8DPPP!%-)3p*uG2`ELa+_w*
z6pu=C?e*O!HN^}yHMpI@`#x{L))RUj6~P&El4psm<0rHAE(NHcXpZIR`_zu7WO8DT
zd@ro?25g6!V>Iw~o=z;rmAcO^3`JBnUl&<|0q}~f8KqyClOHXUwK5kfvnh35?ehMD
z!I-gEP+LFk$s1ogLB&m(&y%R6x<@7Ib7(DqWP>?1D+fu}<qtoK(`mX?1AA)($vu^A
z#g|v|9KP7<drazx+y+)0F4~UO7WvkTuvYSE&eE}>;g?>lgIZ^&1Eg8JPhK&s3L0)R
zMSeXcpFtE(O`+s86#e{{(ueTe<;Ox@9PV5TZ*j)CW839_EEwmDv}IenUk6mE0T@8Z
zEehbM@~ea}+QwM$vU_P`TXf<A5($edld>pbS#Kp^-z^T=-Ori#^RUzReF`vwHe3?v
zK5+U6e(QP=nwhO)<{R80C65};3x%mZTI#ATp2xQ9@-euIcP9r}4yFn?O{~y8uJ_eS
z>;+)ZB7g0!qDnA@Nl#7t4~@x8eAC&))u<V(sRl!J(pK@u8@iTTTqtOX);0zQd?5#U
zp_w(>+GKjWhKN*Zk+o05ru01tkhgE47kM$3(p*!tXU_|g=ZJxCTp!S<d)P7tlxnKQ
zI;FmRO9&@rtsb@tkjH@JJ1+o+ajS7`_@5+y5X<-?lv<lwq-*r4nx`sf#Wu#uD<UEX
zD)+1g&;V^_E)mF+?A(YLA|Gcb;wNg(%m?|e>}(c2EI#?X)A`=eYPiW><BAWSUbAJs
za!1+l<AUuLf_4g?17yv!4F)$f)m3~+9S&Y|h48^2O7(jtb=1*N<1aoN^~M(VE|xxW
zb+*n~0%`n}T}}0?kxGx{Yu!92)Mt_Sxfo#SW&Upli(N&t^ja4RxaAQwoa`k_df_78
z@9o(uTfF0TNc*kV!hdKS=D6mLv|GU$HWPOsmb493hCas(>c@T~xj!+2@YQKuAWGJ@
zWpM*Zdt(48<OwHP1t9(`@mX#YMfyjIVK7k+=jAp^uJ*+rQOx7LYKjqvlKzJ2cySg)
zM&@5*f5p!&@=qS@rDb{|A?60_ux9vcDwZk9l0TEB8qUO190Y7Z-(FUOSruX|E7uPk
z8;;QTuRXYkcHZLkZggPjvR5AWI=Hi$D=|psL6!jAQ0yN{?!{|i;Y2L9s{i`Zam`KF
zrO@VRkS4~PAa0^^ntN~EaUL7OX7G1EQ+~;v9qDNJof*egqx^*{eQZx`O&nHu{)L`)
z+g-qsB0kv-XP>SkUhoyPl}HF<!LGG1Qc7;6Cv?xR=atJ5gd7TAs~Lub<aK>^PT>O(
z!plUwxQ2c&_>_B1vl(gcR{JSBA}7t9Qo^Zb>1KV$HwOaWd1(53B$c?g_6^WK$%W6d
z>x0Q$Rs6aSV@LosEF$A}zJAB>ivC4ESYFUNB{H*<;Aw_M)7Mww*dmieNkfjHW-cp?
zuf~#lm9O&V(Wf>Vm0sZyp(b`rkG{$M9$a%$5MSXE3^L?eckO*O5%#+qnLU^TMV_Z^
zCs_!+@_JszVB>2Em^!_Fk~}z^6dxyW|D6SdW+&^}gI50`*(!61Y$W^eiotw~PTlz@
z@30Az@ueG}l&-aa*Gfs%^@0%E+B&hL&?v|_eLb(58l`wqM9Elm!O6tTc&>4d`hV!Y
z8{ek){opr|^zvcbBWv>Pt5cSciEzd8D1&sz-m93X1QSn;-cqu$v6+|sOOsTRZjd{E
zv8kwMR=ROhHhc&7JvouVE+?9)c^SW7nhYB}bjxp~jl=bL*sN0M44wpyIFH<t;E_rl
z0Su&p#)qdc%!-8Ft5{DK09V8z*oo5Vv0Oy&Q%ih5?L<~R!NLG{r20@Wmk|Gb$CXve
zT*41^!V<#jk5H5<deYivk%WoviHCl2?}gQq)9f#Tm$^d$Y3CF#&RygU+JNrN1C2oQ
z61n5GsIZuwo=S%hhR~nUz1!E$KV#?MYrRV>N|TlBf2Z_yQG;DTY;#?SBa*1%iL`;p
zieF)bRUA6><9Z|>{6Myu_{*OWg~lpFi70ktsHDu*A2QWGMKXebRH<%K6>D++ouf%d
zX^WXR^L>}3u_Z-AO;boFA9TT%jR@CkT0H)sYSclSRL%Vq3V<Af30Sf=hW07ZyPf!f
zc~7TkfoDZ#0!s}|*=?Or?3lH$VR}Qub9-Xj^%*`>7*vXhd-$^;)X_YmTD*+e!{6|8
zi6=;tpX~1m@$d}DlxT2gEahU3T(@#kFy5-1sS1i5I|a~f;~CS`un*w1B%#TMxGvDO
zfWJT_r&hGxPz52tXus{u=k<8lt5G>75vNf6(}T6TR`1LY(no0(O|?b0J;p4A_Gnu`
zuGr@PAWiVTVOORwJ#cO}hvgY$DqRteqX6?ZFu$W)MfKB((UU7k>Xmq7r8;Of7RK-M
z=@#&pJYwWQX0bf5VxHs;Z!^gWBJ-a{Y!Suzwy#pL{E9G3qUS))%4Z(bMcaNY7{M*)
z4K<~xQyusx<8`F<tOCZ6#h8lCt*{z%D~uIe$HlhX-oiNNHf!MiNOZ^_`I!RpEw{v8
z?vcVOAMpLB$Fm=8(UI3_nXNeDB>zPd@(t49Hc<)D{YNn~0#D@$d^`JU;JYGKvtCD5
zy_QBdOrH{O(6t&cnp+LMM-a9-v7l&IBj>>U9RGz}^GHN13fkvIqsP|aNN3d=^*(k|
z;6Q4P!D8pE$chd^G0pyGG#qg7C=1W=$;Z14TiYt7UMsLe$mw$_Ah9fzT=dn~=8})A
zHK-wBvJT?1q!}{;;1;j;7zt=3iC&5T4*DX)pKbCez&x|q(=PNi(E^x^eqp*0592r5
ze?>&lY~6APGqx__iPRgT?7|NQAo(>E09fBXV&=^?EvheXoO|;}AXo`yLLxpmY!b+p
zYg|xGs_)v!c;knnjUP@r!7b+wNT9k@r6t`raB?8(33(x{$V!0)Rgj`^SEm*lk0YF1
z#Cv^>>;APP*389(wOSdh*^W8|g6wnK{Di&-vHxC@l9*D%nxt|?TBbFVtADGkXbJFl
zRYoaXJh4I@lkvz<O5*@3`wPBU+!66CqAf3iGldUNU%ReF&CSN@)=9VAqI)-jy9Ow`
zib?%tScqJFy94FNdR;81#yt#95I^QSR&lcdC#PU~$?_SKw*#{|=6s+dCTkXFerbG;
z<{%EMB7)OSL>XIBW+U0tAu1~U&F)lp$48egM)=*!(o#0;JfW*@IQ)a`#QFo9Jt70#
zoxz#6F?I+L4Y)khVUXhdBP3<6-37oFOd`*2+si2$YY>Pj1{V^fy8B?8PF~%tycZfI
z+(5ltuWzNTE7vD;q-h9G2JD1In8`EWlU8WRdaa0_LRM{4mIOAJ3!J&vhGQufjZ)$=
zANor?Jn$gr&M2w_y^{YMw7=%}hxcYy<`v2!RqQyZ4a(s4dnowc%szGWJS!@lJQT$U
z&IMr!@5=Z5H0HH<1sIweyv&m9q%693NO&k?hO1e4bi}AyY+TysDAjc1cFev!CV2We
z0DSvxtZihgK(sDHSS9vRW53q$Lqk?_`y1tw0hpPByflzK{T7Vd>yPGV(zMd|6E=WA
zv5NX)2UAe6W;&pA6)|*-w0og>_KKaf>&E=l()Ky(uyjtcbZjIz6Ex^WWBXHqwm18q
zB#%c2I%!47ri53s1r_N_1nAC{AZaFq17G5LT+s;3ZrdzT&JChD=C&+)Q!hUJb7zOY
zmwg^+8)(5Sw!SRfr(Y`0j0G05%KiE7XVVMWjkVPty-kB+sTligpL~$;0vx3tQ%;IK
zXagK^#rVH{qUUj}*=Dm#U%Cm<62-hkE4Bc*KqY;>kjL;zfat4Q|9Um$J1)?b*#%T)
zsi2PAFiU~%Z38W|?xGKdl5y?CYX~v`^kd*odEGE}s)JU)MrBoc&O8CPcm6-cH+8_c
zbJ^wSW;4uJ=Rk29k`I8|#kd7G;)m9S2y30Rk8>X@1hoXc!{KB2K4Fqf3&Z^$mVa1O
zqjOeac`Eeuh=LpGF|T%0hdyl7_3liBWT7GYmV{f12>_0I#c;Q**?hpeeyMq<oHGnf
z-nxq&9!^A!mG~w*{Hv`p4U}s+rgbrqubb*?*dKlt2``jmp;3l_f3L_2kd$~ub$F@{
zp=P@WtWF-qYS0B9$M+WT8vvXCUOwEPp(M*?zm6VrPHRi8)8zUTmCL3RRHg#)$T;nn
z<_kYD-Q)M>nuQ_&q+Xz#oW5rfr|JGp_=`1=d?H!_K_9>jTnUb#2)p{KvS>+HA2o^$
z!8+xb*1F(c0r+*PsPnQI#^9>;o)V-K5KgIYAV(5Fw<|3=u;TzaZaTJzqUz5&B-3|7
zP?tM^*=)3nBbgTEsGlJo?nRI*iK|xIDp&fHin?Pov*~nuLWHs|Ua)KG2DrhUJDa^q
zb~45KPC!89-EC!QmC+Syvc7F@M~m=`(l<bVOI%zHS0INoQL4@|cGYH;O;DJ#3PR02
zB52yekgbgSQ0;a!UayXptJeY}nRc&{Z(^>t4eg<47VanT>V1EyfgPCACg^b0{BVl{
z_N8NRPI@y&0T(M;y()@}WeA)j;{1Mg=J5|RUCGMHGT_rvT?E`E4K}AyBtbY-?qpTw
z{;H;fS5FkZa`r+W@z97|SBp)s1S8~%M`7y-dl_*nF52127(0buj1M*_uYRvs(QcTz
zkQ1nGFstW+^3O4Rk8NnXwGFM9K9O0y(a(c`Wto?l)8YWhXN2qyPkh4~K{#l&#qp;U
zOhuk>NFo_r%`PY3R?OPm^c-z9_DMuUZ@DceszJe2pwFIogPopuv50xMYTlt+2g0t|
zZ%jun`oF01-zbU%Q&_mYn*-&?d0lltZ7|)KynIB0V4P?bJ6==mASU4rNVe1d15b#X
zFOzJ!H>0_CB<kum?$2k<-<d-s^|J#Zrp&WLX*#0wRue1rG3}idjT+8RyetSbK5%;$
z;)9jyD|fg}kT{vTiBhR4YwD+`fvehpr4sk+`!O`qH)2Pv8crIC3;eJ5GSFO?jsGkL
z;69#>Dwihw5jj{X#s(P;_kby?q*ZqRgbEIM^Hb<>st|;AYjsC#iU8b3fU%}*OT(vn
zRBUL7He>3$7rUJTs!AB8uCUtTWXAK|NOcRQM#+nR!RE>Vc6(B8!5uOR-w!j|Xp~2p
zxi8|I0B048PY(}WoW_@nSf`a*Z3Os3lWm4prOWs+a?-i>i22CBG%pN9=nEchKcc(g
zsW`dZP%_B3Kuqq{mw6imW!zLmO(*n}C4fE1H>bX3x&Y=T(JjBq$t~q>o&7YRz4GuF
z)dPLA5pkgim@=`YpZK54PGyEPNoV{5_7TJ;8J+b9+1*k%f^|6Ky4Amwwj7I$#b1Q-
zw^MR+m&u2Lwb2f9`D@QVJV<dreJTn02*H{12BXTW1tuRlFtV-1vp*iCi)Q+qPLqhw
z`woZ76R{I>M@0^dWZVo?jKS-OrdZ~n71&T3ybQzEu)t7!1pe`a!PbkiMHhmPD=`)h
zw5Fs1(6<~(S_(#!pdxy-yIDSdP=r>jf<O{@sRhIEanGxU`2Jq~Ro8y-q;Ct26VGT_
z-@-VcMi{iFwxhkSFDqWvBrU2Y*}9~7;Bj$XRmUIW34>iLN-)~R7U_|oduqgD<#)ZT
zD%YlLN~AD;r3_-j@GEg;U0{sLa5s7cb-uW{OV#J^jh!AG0_5h)ET#yRty)q+KXfF7
z<)q%r%1vI%#eA}*wo=vwUdYcz1stI7LlE6n1#@et#eyx5nrvM2SIC!_F}Wi+C&>&R
zt_fq*o)ASMRJIzEMeK2N_F@PRNBFU;Rm&pL!5_aLMU}{dixo7nA><8HqgMMt%SWs^
zKu<<>8<B1u)Ho15<*SJ0`MqiVWF{SiAKtI(5f-}AEZy?m=9pu}#S05hzjMSI#H_~0
z7%UN8n7^M|*BA{44yaOdDiSH36-oJBgcBzT9Zd%=ca?!(K~^EO%EP?~LjGdS$OZAA
zD6r|h_~#aA%XiE6&HN%oQ}G^eX6)&QB=~#+BlWHh;p)iyu*{sJ9vGVUODKRS&TRI<
ziVo1}23{6MKUEOjAZwSY8tCg9kepFVbj?sLzyYQb=3%YvC2Pm8DVTKeK6AL1Q50N6
zjrxb0DI84>s)2U|HDZQ_Z|FieusUJsisD)%ZvYr<>dzS3at9)J4=+F3-qxi_w4fx6
zs2|t)_yB^&0_33Jh{T|TRd9?8Lwg`xHz;rNfpKMGFVvLFz+Cjj1viyU7~<vE%g&&>
z7`7IO@o7_^1IA=sh)eg7-^3?BLp2nr?WL>}=qYNXiKPjELd^)E`W9|qH@JA*Wnvm1
zx@jyJi5K>l0E)&&sJ^!JSvsyyyL-%3TQ8v`Ne#16Nkc)FyoKOVAJK0&8(@PiWz=pR
z@)iX`Q6je#r5|wg<!jA$>Q3H2OZ7!c*GWG!=iVmP_66VhC2_@bN#EN8#BNWGu;Up&
z&gMoeJhD3+ZOjrvKQ47q{`#0NdO`zF?cJw=qfzJf_l`|e#-OQ(rH88UZ34EyHAu4h
z&+4S`I>fPQvqnqR^O@$@0u}?iQWrQnyS`F%OqsPTzlQ@bWc1GURB@yjtRGlQ+%B0b
z`||kc<jhJh)EJ`VCc8`?YahI6{j&_*B@{;4)yNWFalZ(&P~X3$d75vju1L<=B{aww
zC+CUqN4n!iWu#GxMs~Joq8k+0@l8-}I!*}xyg&$pDSgAR<UPxODFpvr$oJJEU13yt
z5t8j*yc3@)Pl`Tad;#|Xjb{l;hUJfZ7)tA*wV|AWMzU$W<X-rLPXwx!1vT~uwnU|q
z$~1FF@cX8`{==CQ)Kz3dmX^O4UX>F0d6R|VF4$Xe3I=<2@!i-$5)czha}ODe`pzMn
z>nEfoWfJ2$RC28NhO>=$pnt#p{RG@%PfUnE5KraI-;2~aeyWfwP8`z*lecDZVa!XC
z$4L7@W0+BCAV4rlYX+a6X+N5v0rB(O&{^uwlblM5#`C_k1BwB({lr=`iT)4lCYEo^
zW0M4Nu-%m@;ETPNS1t=66@n9MWmU_KrY|N4m;K<sQQokFtj?&C(_#mr-@Jav;l1N0
zIvn+<#?7Nja(qg1Fc-eLI20hJeKZrN?q+3v+GBuAR#+N_#kDs)%ae%lU{uPS+!vm7
z4oy?1^Us!GF>Al-b`p^wBq9bAQ_=EVO7Q9StEB^#yW_cmC2S!t`tDzI+-)aa>tOlF
zSih}GAH>UAex!!Si{!x`_`~V*GKf5yvcY;X-UJyFf4!1akO84&M%ix@h*kG88Zi*=
z8IzgycGCHjcPz&9y}?y^Zc*<@akdPfQ^r|($Xw1eMi4BWmy({PTaQ^2C1K=`ruqQC
zQjcZ{VNza^4)}8+Sg|UgR@V&tSog7F(-hEhp#kgh?Z-c$|KtUIExgQ=j6SjWyW;TD
zwyfEevth!RPK$0P_I-N4BO76ybh5F|65H@AN#graC20UOs$}C|4CXCYLUN&67yeO$
zNv3{5&jxr6nA!C4Z*7f160l4sSc1K6u40q|7fdA;P>9p(7-jwrA=%Der{%o$NF)w`
zphwR@<7p8KW@nCfshG*N%p@ArBH3Z5c5RomeQ~!*{TZ?7UMCA3&d`+y(P?mrco=u>
z=K3{Sd~50bV1^RWcW^5yKs8>X><&K>eO0QWFd8jpB0Ip7Ha6?%oks(641_;RR=q3N
zhvs;<tU;)NYc;Kt-A|$Q`X|ZY$*}+z9hH#TL5bR_O(X7i12T}0hvu~CcaNe@zXmfU
znIpZ5&H~{tj^{-YMvmcRmdrE1ol(Z`N$8gkPyXtX_F1qiBhDbv({|zeCqpa0tc;IM
zSmGph1bVUakAKFouF=@a7ye}=_;wXVw3U?J3(}B?Q$0>&1`359qCxn4qg|=Rfec2K
zg&?kP0yq8~x3#_|&>j$*dXiG4C^PMVk%)nLAc$EVfTz$^JUpclp9^OPvep8VZ4s%2
z!#vH*Oc(OiIP~B5NPQ_@lr8y?|LX)LRtmH)(Y3C5ffwTtimb&Yzk=D4T#lAR8%)8m
zyM{}DmsJL`xSq|XjO%7~zJnL2B!-<Rzs!O|Tme3S0@GwZ?sUC`<gj|@u4jKXkr4Sp
zu42jCXh&g_Q(5;5lka7R9t9LF)dC#AJe9z#Wz8;Wh6_Z0c!)D$J|FZB9aym-EELP1
z*^VEWlU|I>q9CkPyCAGgovYZ(@HU<nhzBtweq_{xqxgc*OHxr^Eym`PvcC<ADx2K8
zKfG}!dC0Hquk|k6F7cAscLRAQBQ?zXC-R!n+*-$c4u0%qHeZh@{twbKo>7-fU?Gx%
z5)v<FbAz-_Nw$pCEv5^KFh8hjyvj1EJ^S;c!Bb$FioEM^ham=>)cLy~S1`Kf7#W@2
zmQFXR0m3!&Y_k?AJ)P1x``Z@A2|b;x1jO{ACd;rGmqSXRcdmx1S*khR_&}QxP85WU
zUagY=84Wp1dU2=dqQ2KHyD_w$=B8wAd<7}irCxQiossYIyjzE4wtYteuiOf0L)~74
z5L3TWV~lbKS?=AcJFYyS!J-8pJ#7z%MB-}qTw|4%ZWibJxGyuapiOuG$vO{Ji~SmF
z)NlzCAu^W4>d?RyQ9Q&$pehcg+lFWP&qdjG6wLD%WABEsK&^W?aV(t$c5R<Ay>%k!
zqUcMvN+J_aT!zlhUJ3zXvHY4p5;=$*+uPGuoWf0OxVbXpmotz38|qE!{Ck(SKEik>
z&HfgNZq3#vPm%C!hO4mRx=EoLhKbs(y!&0q&gDb98au&?-z$G40Ii+`!U%YG;|xP(
zEy<(GG7R_|0b6-PL7vbjWK2M*j7MzEPIHSw+iCga5f}PDO1(N=VT;G$jij(eWtq~4
z_ce<hHN(~1p_nEH<vMp&ae=P3LR(xm$oQa(xilk~LEleSPJh1d9+juN3BjIp0)QHj
zP1jKpLlNFM4nn7PDqEZ9BskCL!WYnGr$mm0?L}sPWMA=)Adw^9!i+{L&%D5wScvRu
z{>5O`_z5rB8dmMV7-lPPi56D&@>L6IX$3lx(&ZJ3pDR6@nOCNQd;s847$+{KEX-Og
zELksy+tz~c61f|y4MpFKFNy@@hMEpPrvi{&AoSF5y5V8g)}Ws0u5lm2-2~w&BK29!
zRSPZ1OdrD7WkN**ma$Zd1;)BEX=Kb0zseX<1FQGA%Z#l7<2lgc8$>rKMOw)`A5)#3
zM)VwDk{yV##JaI(J3FjFX-J`%zmL=#*Sd%f6UepoHI+%>{#5~4IW(KfiyE(w7Bl2W
zktH+^=UZ;BBQ<8Ga8g=<7jYPDG}k?z%`{QXckz5R-KV*%qMNxfhzu+Fg{x<+3&RDY
zg8v{Ylt69daz4e9V|GLDOhf=PyqFa=``LORO6(h0_f5rM57+)zH?42H!Z6efITeSM
zv_F07prLx1T7%N1n-D;oLOL1m`JH1Z@wrLy(_F&YUEG(y-1CIg<hd}7=h-u@pWp)p
zjK-P5zvQB{*`#Pqyq#^gN`}8)lq~Q8LoS7!VeU6qA`ma|%=xDCZ(@Fdt6$i(u_hBB
zs@9LF*edgn-l_Ir<|*&k6l(qbNTsuUlar}g@sT<42jFp%ihPW<1d^l2Q*-NvuKki^
z3|B)hBC+E$$)gp%%&Q`%ecEAcI1V><*4=f;Pm>*oT50XE&yN)V#h)7%1PhpsktzrU
zJ{G3qqyEwDcfLRR5A$1~IG+~I^7V7+!HV%U5G<9!v|FE~z6UbC&r<BrkagY1E$)~k
zCCNvac9_NWvlJ?I_kLrGe=x8Eu=B&>3;}JX8Y*tY2Bd_+lZ4OPK!o(iy4uH;N7i&Z
zk75}BQ2hPm$I7j`=B3$EIvKL1eUD8J@g6^(Qrzt$?+Nc9pVmW+;=h1+wU(n&SSRfm
z?8&y!8dU?sE1sJ*3c&m8TSRJ_W!q>v#)78?DNG)<LXij_(~~r%Sm=wC+O7!Snj7)6
zX>Ng;;BmA2J&$`tkcjZNOsKM+fgt|tZMPwIEfYJ-zP-sEq0pqMN2PfvmkAxlGdOoy
zfPMX?)Ke0?i^VXjlpth*D}h<chXmG(zy;6uzg_;&e>FRX)ZV4#E8$s^tSAPLln?)M
zvS6;dpX&DI{qKQ-hm9$@g<PzmHgbi6t(-`$IO_{--O;(5|5FvzQ_>4EvHP9%Eg>tR
zzKb^Qw_q_9KXy0#vpeenc8l5se#15Jv_bE_qe5Z#yyEN7LzGN~X|)AB{=~8b#jc3p
zwEgJ9m2D8oQ5X|dJ_Oqd$}K3t2$unc`!v49>-2-AwGdO~hmG7&alPk|LkSYPn{uP}
z`|C@<Jj?VJeQaB<34D3Jq?juKq|nw|C11Zj%W`5nK)OQ0$2F+1$hbQ<!PWsL%eo55
z-|Ix2tsOOcVtiE<;B{2jy;tcuxTPwRu5fq@g<c6i%O_tj?9gybCP*LqZNwMZpqpl%
z2zBN2_4l09Xqb7x<KscfwcG8i74t&%o8TG{I+%TY5@>2)mPm-Jon~QRG1@JE^yA`8
zk<-eABt)j*b8s$#u{*;`)ytGsucI3DD5U|)zm@N6uI<J8{ZH-pK9>m4cW&vxVwf@L
zU#bjf4;_;-E%;A3{Df_4up2pLhTb`+_u;P-7nCC}wfY|gikTP@Rt-{Ij*}Wq!D3}>
zxV~kUdd{H=`9=CeSQVhcK#59=h;HWnZTWQ9nYPHzu~bo^d$5|q9K@50)DAk~UPH!#
zG6FSUpwW|;#bTx(FI4n$R2J@Qt@t-DSmD-_Gq|hU&q)!Mz!Z;V5>dZ<UnGO<ILkvg
z3^gUqG?sX-V%n#4$U;TNtqp}*G$4)97xbsK#3WlAvSOQIzv!iQ+Zm{CU^EUWZEe%<
zO$?K#bM4Lt1V;bsaNb3mTeD9Tn&$=Kfct018;o$wjnQPprQ9u3y9D^c8u6j#LZQ?0
z$NFCFY>-i!e(2{Jj#7xCvo(!8Ap7@jl8+{Hj;*|Z0T!{9K$SUVcKKEuFSes`Rlez5
z(96~x8%Q}p@+ro>IG}0pA$#U}I5*YWGaX>uy?LOgKE{zS{$o4paqrWZ=u~C2BwhOj
zDfvNx8L$SbP6a*wI(o+8FJl~9b~S|{rylnAAJbjf+rG@j{<^rmOr7Wu3TB;7t8L5z
zlJ@K_wfhOO=We#>iUeTAUk;~4U@X9Py2Mfr%JHI7Jq3zu0mA2AGE&U__F&e{^TyOl
zV^C?o!R>zq1*{`21J-?+r^$QuyEW~{2Jq;CJP8Csi>9jE#nYRzN`_Vc9vo<P&y&dr
z=9Y)<V0T+TYDBZb9mxD(tyPo*m}yRJwGCP&L9Sg6=6Zxtc42EMGJRdI7$J4T)<BEN
zwj2fcsxOH%5(lSNg~sK>S6FkRCgDyU?;J^t7@2<GO3#aO;T+yyj4VYh#kZrnmWZ<a
zV|)K1JI%b??b7OnChf3GUMKT_QIEiRr$ToQZNuo%wT&0kj?$-t{sslZUWRa=`z)Z3
zu+HnsjY*D1ciMEHyMjr(_dJz_f*__3Z2wTq!ICsj%xI-j>b5a5IOm$pWO7>A){fZC
z&zn?b6;@JoI-A_9puB!_G4SnE`DByz?&|Tm0e@tBfaIUR=<3knbXk!Y&jhp@huWmp
z6%l(F<|~f<vH3}ZxO;VoiK0c@4!hd-*?__?tn$KYD&O=FK1EPBvQC@=)d+1d6EAZW
z_>p4mCO$B>pUy!b3g372nW+$Y&5Ro3)OV`ZSoSKg-joD=pG-Eud6N4r4~TE{t{kS6
z4t6E!`6t7yY)wKGngHaa{5?V4kEe}}3(m8XDb`Ev{ozdW{+U!0jiE}QFPE|`_njS)
zdO7rD&f_7k3fwdb%>7Ce?D_Md7V|pNvZ#h^W?VivysZriK*|UlacS)G9`mWG%T+?1
zIP22sV~z-*@k7BqV(RXv)tMOSbe!jxfb*K2`?F~lcfxo5;0vM3=lxcy_l$qD3&~E7
zH9^R;T_z5&oBMO(c-F4+x=_L+6Y}MzFZCsm{syN?TmWWZ%+TYH{H=0lnZ*BfMNi^i
zm}@PYqfFI02TPPc@tlz#)(dV{d5L3u@yb#J)n}Bd+!Sj(Av9m=U(POHB4yb+mGMt&
zAkg!7bX~!}Y0GnV!?cXFHPww;8u+Ta*2jITZ|0p~X^X1eI{<6?S~Vy5%yqe9I3JK*
zZvbt*pW#tMUv5{s_<AXYfHfNZdL1>+YA&Xty35TYPj7yEO`e6a^h}v!7eUL=NtW8H
zSZh+c&Iq`@>9A=->4oPH$I3jj=)S;bHFK;GDHU98@5mlQGmUU{XiluybI4fs4Se>v
zqJn3FXksxBo2iy|mnZJ$prKeMGZU`vOn7dCfdZ<WUOVmL#Pl!c7g0Vs+l9IvC=yhF
za=`?@b7XwdwBE1RZ%t?j2E9NW9}qQULwlf#zmf6W1SpYL1$?py9rp3XBgUv}j8A6*
zO9BV`EM#_=meb^AdjyI?paNtC@dpGZmW@9M0@}p5)}XFiajjjt>g@yWBbaVy*9@ub
z3TmY?+Gx4QnSWJ%&3>&C;{Q>*_oCTxP|(>J`79Bp<@%D+=cytS*^~bF0T!uBnKLjO
z1a1AW+CI<v_&gm2iJEkrA{7{B5FZRppp_YwMt~#4L-*%>=#^mBQglhl?F)Oob^iVM
z@tW_q7go@r1bRgzGTdL5VR~bKTr!eUQZ(k3Uq5~zpJbw*d?SEr@`!xik~)BTw{=&1
z8j62UL{BQp_5nlk#OnG_6U4b^;BW+k+g6KyeuQz}9+jNpL`<q8TQqyqmRtow408qV
zM3={W9}R?2vSiYOy@gpbbw)U@qo|P>j?9?k`cGZi5WbCAM|9nRL~bI?ks6#?e47$=
z4>5SAZbQKK;QMO_0S@DSiV~^Ud-}hf5T=44MjDa{i@MFK%c2$3{P!Xa@;Bmd0Qz6g
z58seT`F=PA{t_f6)DJDq@f^=KnVKvg^~7)P>WgZCb~T=5nJBNq3p{nQb8LK7Ae7DN
z$Okgq6=4frh0Qx%wlA$NQiJI3@WYp%gxX7Pz#TDw=l-7+_J58|tUNE083hI0P!T;o
z=>hB=_>FqgjMAi$<tQyA3CQ31m+(O>k-)G)zgOHGr18QbbGKZaG(Q+fhJ$#W%KD>g
zVS499j)d@Wi}p5v7nsph0d-X~&!X-E{UsX@gLBZC9<q=~L%sGS7O5jnS+=%dSa|1R
zF!vA`k~3>ZQcy8TpXG~N<jqQ{I?kL~Hy0V%uu-AM;jQ~S+lrNrx|b6|$a`Hk0$@KP
zFzZ?6yQ>#w$n?OjMZa_cX~v6l=wd^a89Y8hg82F}nOkup@xRvg7Gr`_uyp2&>x9#)
zgv3TDRF@4c44Oe5lnuRU<vWW^XBW8$5johJ?qzdGEB~&2onUpLxo)!D9HMbF0?$kB
zCqn);SB4?}hcikjussz#w;k)zOjT$<pIPStN@rtyBq{Ka^&~&khb>tt?B@#%eH3iM
zwouR~;yrJG!!jp~W2i(B!eaxrg(Dg=>z}~8<ATrw|76GR**n{cO|RbS<65$1^6Fqo
z(HX>kAgo48FUqs(8E}Up6X6fpIryQM#6T+z`v5UwdD@$J&B}}!S#IsJE2GC77A>_t
z=7Ie&Be^!-IQ)g{(Huw^ly_orBi_z8MQ(++j|ki@#Y=9A-Kih)t`$>zE;Jp5l72B`
zwQxAoRc{u=<XYyZk{8C7xD}_aexu=|8ulH?Y)oh7u(~KEQUtWdtLpS;{4OU8@B15T
z^G=fCb>JS69x?3X>~93Yv@GaLJ%Lh$CRRdQ2vX)apV67;bdg!(zeo!!{+*-i>Ss3S
z<4?C6ACiQO16uG|STJ2!$~Rhjl~eMoHg^_@z;R0j-$Y2?siVl$T7gfOX&AAz%9fuX
zsbF(s2=l{01uDfd6j>Y9IBJ_!z8Sobz9ukiqPfWBp213_L5$2UsAdwxd<tT4kTAv6
z+VeS3(`tKlGDl)ooFOsOfjx}D`czE8caGU2BqZ<MlRYauz#~#26!vGfHmM1Uq{mkI
zKkVI8b12ZZCE(b0c5K_WZQHhO+fH_D+qP}nc5-*!KK<Np{dE4rTD5A;8gqQl`Hgcz
zXBdHU1cQ0f!;Ajwh><Dfygd-{so)QweYDYz%g-`dB|;WQO;qEYOZyATapFo?`-#O6
z0bTKI*lQxwzZxa(cOj6^dc`Geqzt;de2_(0toUx49f^vXK=#JOWOf1KWa!7EVVb&J
zCA38n0f4k*q6DM1`io4(z0y_aN+12aVYrlEv<|--V>Sx`2I#8dAOu4etb^kq)Z7=+
z^Cg^Z)%n<v0*#LLjbO~EBC(q)V3|gtezITLL>%)!cOe<@-Eu^ynw)H6V;l1G#^|Ex
zX~%G>`;#1>!TAfF#j@%f0@Hb)Wr6r}Ysj)&YG3B0UMxE{r6;1;B)LawMwN00p#|ey
z)7se8&2)G|)_vfttr%JIA5udZWLaW!5vhWX8%Xa*KJ<9%+2p73_lZs3I*BDw>Nzts
zHjS8Dib_+=6R=uiH~N8DiouDDX=K+;9c$kw4BCKL`7;q^Qg*k4<521eC&bdC@o(n8
zww?+M??jU0iBBQd=J-Imx72FGa)1L}dwYEafuR6KUCx&_AvgY3qdZQnKwhwwJBbXh
zp(Vwz1t#+2(7D5N>)q0~;}#4dvPThVHy9AR272mmqC?YJ2-@b#UV-)wg|*-QW|b-<
z21)qg<^ABSKZJDMr|OOeL`bq~=e))4xs#fXd*rU|&I>kFr`$dV<>j~IyN7IjK<3Jf
z|2X#?k`HI9vy{sf-EdnLZh!uVOdU%*_VV+<?Up{(rik3%W-ybmvEXq6;3H6ny*?|$
zpC=s^Fz}rS8a2es#9=h(c706y9#KM*;K3iDL7~hyA`*P88%MJsx`cZqeacDKK&6=8
zF!?&(n0p|mdw*D|lUbP65E?FpY}~)o9r1eIYkCij*9msA+R(y^l0@Ibwi6yc3S|%M
zLHKF<2Mv3jBiy=&q6LhPWbT`6`NH+4SYZWkQgQ-!8}h&VQ9nilmt7Pn=TO@=D@<-^
ziT%TixGx>$dduHF+%0*Q`n2noN5z@Sb)tFt<_W5GFWqRZeL<{r9kYwOxTi4`l^|PH
zvxNe&l*j?SYcYw167n{#obOu>^PsPx#5>+`PBF<O<oWZuieXy)TL?rp7;SKO>kKP9
z%OsIINbC~_q6^v#oWh7SL+O8iL3^d|aWqn|&ISxnEJnLFE02;(Ru;9lefxadELaSn
z5Ajwt(H(bk7uwo*$2b&B&f+*n1vA!OZ#fU;<wwwF(PnN4r>>hMPuH`Lzl|`&?^$Mj
zt*Rg+*uairIU{1vF9nv-*t*ry@i_6H89mmNiu28#uvRuJ^vY~XaqfPv4|EFXKNwZ1
z|1l!`D(|pP<{Z0an|K#-aCwu6y^RmXl%T>E>=O7u*tbq^%6oq!2Y8`ZgWQli?n-O3
zsSIvfM;!)%+jsHQr`Gt_cB+b|U<BIjlKEli+OJgYP*XM;Ouwo!Yg$rk%1@)j9Z;l?
zWiWW%=`p-bBoG?*8c;wAY7}tNj;0mwCf+!{Pvq4ku=wBatgy_^_Wp66IxF1SF&ADd
z-_e^|wn{JHjJBjYpnBYIZ{t;ciOVXzd-Es#{51sT>JLGALV`_VPhXZW5bKh$Pbf{m
zW-4w+$CO8L-_Y+}uKjUa=rRSP!5`h6*?+V^`V-PSayu$lVGo2CYgpj>xUk!G4B_-d
zq&NfPt-%ZrpF4YXGQZX5UK1Sz?mPm2$dtc|)3X4@fux6af%#~~07Sg#ZrFYY%ifZR
zr;XiSx$8S#L4kJ=k-hXWF-yEeSiME;D1PjucZ)s)O;2ZEVVjkJ*RCuYhPr;4R`C^B
zT15%8@D*7(ezR;R@G-PkBmhv~*C|Dt{gadF4wCVe=QfTS2YW}c9}>mSRgpJ~`1(bM
z5Arh5zcYvKSPneh9SLFgJtvC5EfX#W-3SKxr#K_UBj4>saf-9;f7~AI2F{%U_{_p}
zPtw<uCWj6^k@JKYRm;-Wu9E*)+tSNZZ6db!5e=kccN`k8-+)A5V-D}s-VCLR^iwMm
z(QCXgaqoy;KT!(k!op?~A-4~$IC(9JiUOEFcA3RL<m_mfuTG8SxaiN*sZw+6zdtrb
z`fhTE$Psdl)yfkQ;mLx~+0gB0b-B$!jTfkRd2OT&cceZoa3h-k9HugJloI@6V;k<Y
z#1`!eRD~w$FvdHqaaFkoz!rnVGa$F2_=o_#q4VH3MCPtwWv<h(HKePhI!lT$SVt9~
z4PtVK9j^85D|~RP4^#CHgf<(!t>E9ZzRl-+-ogV1EV8#mEr5JwUwVhW=+6AWDyc4<
zm6l1`ZF>N9C?oYb5{Bj_hi?yX_gKJOABGuo6jI}cy;(<4Vf9v<vgt#d=}pjGV94jQ
zKob}*mjU+94K$RJ!0w`rZ&|ReMC@DZl_>S#)`5tAoMzG!BqVUP^-)>uDQ4LijlBh4
znX~@Z-!O*IEgor8e9<>=Yx=^%++CxNC6TjtKG$k}0MQuHQ{|n=irC9hrI-&SHZc6z
zcU4SHa|x3n4?pcGPIhY%^h?(uA?BX|A+JSR({N~eL71E;uc@czCt76t>5>Uw#K{nA
zWo^Ai5xIXbQaWnZ-^NE!Jq#_fT_L;*PYU)o%0>dFG$gne%WT7x*loKZrwIc66d95J
z1zY~y^-CVx9f7s=cSCR0qZGNu2=4xeU4?YIkJhkWpvs83o01-wUi$WaSK&zXL+|-y
zC1Zp60+FH3M_oUDAElj+Y#pI(%9c&jd??=xUqi)^?@$zn@MyA)k3i1c;JT1Yk{b@{
z%Uf1iq8nGypnzO_c{<^#)e{Zsw`4u%NarAc>HqzEe8k)nDra0G@?AW3Br|<Ebu43P
z!p07}ZfrebK$#Ha=a$gy+aNItW$QQn1^`y7sx*j(sfIB&#JrOAo!`wpKwy4c@O8r~
z>2+vnYC$g%G=}3czFY~!<wfs#?2lF#c6@=1cUW<ey33=5BcbCk-VXJY|A;7pcg2MB
zgR@M>Sx~={C*KgBa+sBz)yR_|-0suZHPeXlWYuY@|C~$e!SqRxQc^QH%YeJ#IpEWw
zDAAE5u98)>zME5*%z))^V@|I`QTLRd2$J0%gHt@a#G)Z{1Pm*iW4)9I<YWSRHSAne
z<tO1O8m5RBp+2_;j9$Z;@~22#z?&g^VWysBB1A?WL3p)$NI-}#Q1|iQreq~Gnjr%E
zmy!`MLQt}DYh~o%xOf#_G4>aC^HYue28xT90A4uHd6shAW$B%u^4ebjm!?%pc6L;J
zec#guD8ks?bk%+EXva$NKR>i{-tk?Fb>`u_83w;OO!<!okjY6K7n`4Xl7~m6S95(+
zY9)&<1y(FEw-n}_(uB7RY}BZBd&2Qy%y>=Gr}Jv|$9~P#8p4Vbh|}@+^pf84?}Pv`
zFV(*l?G0yT6VW#nGga-^UJE7_@v{R2@bWGKqTo2oy?RzuPh%~hoJj{BR|9V8O0{??
zTJG3YlfOV33LHF^Iz*b~Ej5aV60vH_h0~6sR5IJJlKQ}VZJ$0`ydg<5+o-xA7CdyZ
zDX}TZOwUewu!A(#k?#mswp!pX=g3w~>R0X_b#yN`l2!Pw%zB4^!(?T0?q<E~svBh@
zx@tdcGPsU#aRvr~;mvJ}E^Q?(u$h+!J8h!j(hs9EFBZYQGz{K@>oVZ&!Oaubp)B{K
z39cS-f|0&T4+WYM?6TvnDO#J4KoLjK1kV_0Pbe5>`{5Aq=wrsz=LWJ&gHHf!TliUD
z>AkMY+5o2>?dQ~q<&U<M$z%GQZThrZZ6ahO@n>V`&U0Da)&^o&@~)4P^m9R}7Pn+E
zN*DGAw}Y=$s($?eXp_>@HEsfpTLCYiU{qk!qmsvd$VuBVJ>as<_njuU0Rh;!`F6&7
z4*;;akk-KDqU;N(TcR|IW`n5XJrti8zPEva3YSI%4X{=9$3kfD<m~IZu0v5}y>!*U
zgyg>Y#d^s0*`Wj`CaqId%UNYn{TX5(-hBTxYScV_(dUdZAoccQyzax+PPJ9DcBtTz
z@H3UA6Uz;kk6ia)@}8a|IYKaYz>5EoQN~f&fI6va=5#$M{KwO{=uX=1UZjTC#zAxz
zH7W(pz*;+U-eE2ZM5mw!BgiHElix-adyYbSTwP`XhG00%u~oA+&R^THw05ptc22ZE
zk5KmPc58`|)Zs%Bzt#~%+q1%E7o&}{F<wGyYf*9I4`O~Co-9Qa_+%_bFsy?@l$@X!
z+s2z(pi*X@qit^byO^x&uOV%MC+jWE#@pH6JfpX1NaIo{hLeQY9i<yUSHrZ$*;l(v
zLRG;&-AzzsVp6)|;qvi;9_T5l{Kn)b5XFQ#Pc9&NoyEb=8<tofNRh>|PhyN?jSzw%
zEf=52_34o4*a7NBE8v2FZ1LxANE9ME3(viWTBPUihV-P>nuckDyn_i1%KX53gJPw-
z>(<P$E_=FZ9|)+F$;>SqRPqgYN@9hb4ylk<*@{^tt?lV(rWl{5=x6J6r%pVxs}&`(
zJ-~C;V<7BvV<a?V>2fQvwF!(Yr%~%PW+L=H@V0YMK)$)lN<u?tvXj@qsCvoO<UlFj
zrxbNvFpL_WFGYV~T@|5H=MzscbJkE(L*RtNMA5#uSKQ+v;GZaD%1#?b)c*`5d|q7g
zFcdXZS)puQYrRF7N;*+4>92PmFu-!6&rXkGtTnik^x|fy!-`A{I*&2ST8$mL!s9U=
z!L$Ai|5>6*ge$AZs@V57S*=B(==fsxTpwEpg1XBL*zCAi3pC{^CXals{LR|Y++n2_
zk9XuMG+*!gRMBiD>Ej7PI@&(EPo6SttFDq>AOTN?3NNlG&+Blv`5@0qZjpWEQpf&_
ze^dhB)v|jS3jyAptRWv|#=Ndb7zQCn-)w)`ah^q{8*9u+jFLfd7xZvP+(O-r$3{$P
zY{bv-M_F1@H8inrcxhR4AK!Z_?RzWHWB}J|kcf|;Ap)9V`-Vz|Dz+*+KMfOx0e*v%
zC#D>jW)dRx7Ck*b10TCEcE9!r?AL*PRIM#aW@2Oz_&BbgN04I$S&{1|%{FWR)y3!!
zTY5~)fmXAp*mC~O8~Dao6T#~vzFGd2P+7$+rN)eLb&qOUwp^(B!`^j_G7+Q>MVzF1
ztX}abkwl+lNGNxcdp`mTLjNxY*uDFVvK}l>HLf^Y{n$!`p_i@4sSgAU43}9&Xb3VB
z(bHWFx+b!qnaoBSbDCgQzVWGWfg$H#(cMGfQniM#=iF;8aOYXwN|XWd;nN*JI9{uc
zfJ{5013`L(Z6<FN6><`vhphlt(EtPMovOIIoSHyjLa2M@eX%pyRKSqJXq3kd#0lT6
zF=nXj#Vobt-lhnuus=iaoK-MfIG>ZzSk*>DYFT@e*#(eoHE^W)^|RNF7b|MV>4!hQ
zujlkxTXNqRlwfb7%}b=X*F5Mm2A?M^2Gd}+oYS_9xZ?}M^^imC8#X)AS4>q`^ZfZD
z+^*VqzmjFZRUi9#Tr=jfW6yG}>&bYO$6{R)_E2*qnSx+J%Bl-Pv2Ac!YPiNpKcv1>
zab>8ZLtZG380K|fXux=sP;GP;e7=&uGPqIdpgz+x+Eu_<^8Q=XaVO!YK+PNeZFbl<
zW2nz@3a2jT*?5EYc9yW!*}PNcAcp;oL3N0%weEcBrylj(ph%@HK4GT|B`S07#u1#2
z?Yhnq*Es{3Cgd3-`)?>Yy68=0xDMS}@>+)-ll&@NMjIrkpe_wG91>mL-+9leB0KqZ
zFou}^SP?A+;hiJmz>U<*0fv>x6Fwj34Ef%0P^#U1NOdJ7Fx#9I^$Y?9Ihz^d!YSlM
z9w(wQRY~*KC(oZnqa)TWn#5B6k=v8MWiHG68HDwF%srkvXaHQeL@)ZER`@sS@0=9)
zECG|KpM@@nZ{`Gm#hMSpT|(q;)Hv<LApvWO_<ma;(jRAMgwPU6j1|s_^k@BI_g}qU
zZWC#<=q+lfkE;P(E!@Nd!~%VkZ8^*ohYt=6ZfCWE)+kGA)`rtq@z$H2grgw#E<v>)
z@ZV45wO>5dn(XNlgzQR&Q2l1P<}WlQJ5>)cD2B48M_~E<m6^ue#+G0J?^ORj@sd*p
zdp-uoT2VBr4x4tY`UvlSuAVS0jqGiQ3}cL|wy!g-|EkW(AhDe*d%?Hot%ar>$`dx{
zh=8fxX>gfsZx!aWbZ*P}pAh;O25UflgG<0{P`5lEwZMy`yObA9CO@uvpa_($1fa~0
z+NB}^*OIBA+|H<QW8r<npNK+8nG1t>tmUF;HfN1ddJw9WMh-ndMR}l&U*wT;mJ&6n
zLZ}-_5*P~>&Ct#*32agfFiLk?<HMz9tg(?*!92pyHLq;Qprt1q`Q>#)TZgajgc<s1
zsjQ3D{?*bZk_io2z)V*Rf5|A@W0ENON0uh)z9DE;qYPdhK=7S#nqKapZ?LHkxH)0v
zzwx2b$(>7UpRV8%(Li1ASux+NuZFe+Lef3UHjf<TQS}q(6$H3cP0?1`xM)WtlJDM{
zC9i$R3p_swy~Iw!&eq~`Of<V1zAn~LwXwWe^n?9+KP=f?Abq)DSW^Tx+hO#>M~?#3
zzZmF)jlq}XaOGW_0znY<lCrNw|4u7TxDKp1=zX0(=a$GY{eA;63m$u5M5e^ua@`<F
zGb*FLnxr-X5t*c}FGPY3-w&V3W;LF1A-?il=H4b_Er=QOWiG<fZmxs4;R(@RkW{R&
zz0U){IG!~4lgMl+9kt$JBzX3c6hEi6Z+emMv7*SSq{pl@y!EWJSyG<Qi+TemSnC`#
z7Kv4C>NQvG8mZPI3Jx}9jbGA2`>`psoJdzw5qqc5EeuCvah3cy$4U`c&@FgjNW2YJ
z;h@EQf~jAezk!ExaAsroqxyhqqw9i?Zj~=3R9dXC6FY@kk2f|X>=PS@sLfbDJw@@2
zWZw(Uz9a^FIv=wt=vqdbt~yeCpPM{jbUZedN@tbpt?_zK5@2@o5c%$)>6Oq@F1QtB
z<BPR}u5gegAaUdf3at2;8Su@5-P4Y0YE4VYwJhhOs{Gt&QX?~ez;vV5YfjP*DXcp(
z7sh2BZ`1gWN7Xsy8X@(#u1}D@j1z_8dFC?;ehj8+fI#Ngj7u6}`7(kJVer9CR)%wu
zSvV3b`wA{w$N6H(MFcdg|Mki`SedY!2}%vsRzX7#^x4!q!yLaApFin4a8M9tuXM4Z
zaX+pF??!-dkda=z=Q<t@SEo6da9locBnm=W6t^zUtf|~qxJI;EW7?vem3Ai17aWbQ
z$ejB4=KWS4zS-X-|GtJ^z2x3Bn}F7YjA)X#OnS@D#S<-PCdQPboMNtO?cEk7#sOmg
z>SJ}-NSTy~j}cv!25R$&_emA>bZ>FHt4VUcA!%M?mH;?q`rM|!1m=|Wj1yli#=B~h
zOcK;i8`Mt2RX=X*b0!n{h{cGdc~G40ItSfEg&7d_CoW#*XK5fMX-jsr=8AE6&zKH%
zjZz70cjKWzaqr=psZNH|ANTRXQua{gN?Eo8`E!34Hyzy{)fw2|r>ZUCiDiH9SPUAV
z<Y>P%BaRM3rWzGL*s#9VhO)IziO1VB1_37|qkU{yOeIKJIthh<MCRx{pmX<WZ;#U4
z1_>AD+6B7g+u1k9#WOZHhoW@rlcN*q@PeFs@lR@Ws8FEwK;n#21}QuA`5ZrB_?CAy
z|Lbm;ncVr_Dv-1}Kty=%l_Jp1xuw6oO^9dVGSWV6n9fe{=x?X`nS?$`dM$61&@=)j
zAib=cpsez3iA5pEMbIU&N4}jLS&6*3eXoRs%xHdzvb_x>QkCvTju!a%;Jh-&0fxbv
z;1TuL)~YeNp>&yjmqfqySvcU2g&2(1GzWFN=0iUCr>H0w-GIKdv>^u;)1X+P*~W(k
z{&Lb|q0IO%{p|TC^y0&Gp8X%Jppce^djp&hG2iUG7caS<`~eJN)H+vSM}CQsi=5R8
z@AQ*iDV6y<oxG~uNtfp$EINWr`JJt(9`HDg5K1<}zc`YwLEh_)_=FY-sG95}H%F2b
z7{turcAn;zYjF#nFhrLN#v%0-z3nQ|Sakdwh^ULr$VD5;aO8wf3o-{OZQ)Lq{TD&?
zQ)d{rMzKVx>HwY?Id)7~RiSaKDLCipOZg1X@Zab>hU${@2HzM)iZCQHbQ|%E8Xlr8
z+N&u)%+qSoK*IuuCuV%e^IKh<?2o;WN^&Eg(B-{Hu>7G_geWrDuofpv0=ro47_Z{g
znjpj)e`jILl=g@V&5TsEsUV)mIea#!<Cuc)R#ibjEP+n_QXGGb?4Bxy+*HCDrfiO2
z9U2pxIBXpP09gLMP<5$=ONY0Jp+M5}`ORg~^uiH*!m+l$`dnd=13N|Wai*ssQ6DTE
zi^-VTb2C)Omg0zz2*d0TbmL~@ossTdnF4)76jF9bNG1qeE6}v^E8jlLpjzV|rC2Hz
zGv@2_#3G>WR@RK3@O%Q=X;ZOQ`!jH%`ukC#_-B$1z3pZ0eWO(?YjDZe&||%JM--|m
z;OxOkQD-Cb<LU!sUlUD6;}@G!BxzzWZjx#}HbQ_+dLL6ENFOPe#M^}ykH@-h29mLj
z>L?M)C|5yTQuD9aadkKf`*k)@VKcCO&&rzX-{DA^kI%~^6aRvx9is2*1Ff7rfCKKm
zJjJgNG(zRc?^N%h+Vc(;{h_OW8qH<W_&7zKECi3>CFPv=F-bUzK*2J)w<-^ZO5&<y
zu<&aXz~&0IxLdlZaw-j>fURV3yFcjAVWP`L%)64VDDsj51Tks%&@>q2B5V=`=Ikkq
z2@Sp`DI`7W+mAN{bGsXx+ZxW;q6i&tKzmd~yfrU?Y$-MHdx#?HiZR&JX@4JWNvq*y
zHy_!Jx*m;0Xpk%j?~b{56<N(v-M+`EY8E6!Lmnz_v+|q~l)m3(DT<y5Fthn+HN7(e
z3i8y=j*~}NSaiFNX<7<L@+Wla@7lLX6)~pYdJ3J4DGhwSR6QPH9K<w(fxJf6P0t{$
ze!t^Z=c?M5Q&eXbwq))2tK%<K^oY;JxS)`wh#S$^7REJEI1QVpq%)zn{MVS&hPC)o
zsBhDYsTgyUuHsW&D<^!8u{5F&Sv95#;FbE7)vn!yxTIZ{Xn)rqx2-b(8>v&>!v5?u
z{-AQx{SexaScY{EM_C9|r4C)PvUT_9Pr{vOHDP8ulpnKty$)>Xf=nk692(uE36Gp$
zw0A64r_>`8%@!5Gnmixi0M`$(dJ}P`bhtXi30&|G@b8e=nT8lECD3tZxaNj-7bRXe
zU;>l5iX_qU{<37v9!^RQI1sA}Qjf*+QNKmp);({xbkQv!luVykEeP~0c|{wQE1YE~
zK<ooss_7hC8nH9LJYckz;y-ifO}S}%6Sr^GIhAaL7Bt+*s8rgXtBc{PD{d6HuTO|5
z^xYjY(KBsQx@5)BABE4OCfjKM%~WP(NM!*Y`5<<ByHZZ6mKp8bTwAr;NCx|7S_3T4
z?t}^zO1xe^yO0zp(dBR7&C3K_R_azq?k3-`)4^3yh5~KXam`I7Ze?Wl4=Ko}r2l*(
zWG$$Bj1e{TK`f>cP#7Df&x9djKtiL+`Qv8<^8nBWOt&a#@0rrsi(KC>sh?(+v7Vz5
zN@F`pFWcJTn7oa->tPP7@NEsZ7w#<7{bbaE`k3Ps@a3yhrDBiixI#^${KRMk0a81<
z-WZ5SW&P7;lrdXC;n)$mWs_zlAonaVCVZ9U(Qkh!L7y7YIW+0Fuc8tO-oKPo%8|<3
zwsV$BD#9O~@17ZtoBIJ|fxKzQ@HjJU?{{bkSdsRK3`&JsslY~Y{(@@Q?W)&y(TDnB
z*8&JC%&bP$(_R6g@<d6F;dkp@7Ey3aYG+S&V#P~i9M}>z3m23h0Fp3Gd%X+VlS7_~
z>KY>#hRU2?Y78YrX}T@&IsR>K>pR3!>RYU4pu5bYMgf?Iyq7OLrrrQT1&)>(&l06(
zLn<|94;V$E$h3Df#UE3sRQ2XnXSay8@2C8%-0BMoR-~8_iRJYX^YAC|F|ogkP1Z{R
z=vG$KLCsx%^9ii>>5z)M=$B=+oHq8t<_t!?0mV+L<pL5xyF2E1_Q8uIhWKNvjV2YD
z%)`|Wsr=|}D)K#3KXwv-jdeyByJKjcbWE%*y9wO%SKUPn-25v)=3eBV5+)UFR`aUx
zuX!%Go=!p3G5yl|v}QTj++PFZx0lUyh55=O;XiUhhh+PR@jivfw%&1!6847<u6x?d
zwRRT%?zwYLv@am>XHYndmHYbBwUcZtU!L+7xYL89QGT_Jw1kgu2YWF#g~!{nMWcl;
zzJIM$2!^B7&@&J9i|e{s2XCH5L3jhTF>2~x*NMhV2U=JFNw~=64c2?e_%cNoN|xf7
zR+F}ho52RlE4vNQX@NS}e+;#Dv%<eW#?v!5pxD{7qNP{VqDH-LB6}#>@&_31eCF+C
z+bzpHtv!_|6Am4fnqnnfF<2U04Eu6*eLokJcW1bAH0v|jOiUhxM9IQczYsM=`Q&;9
zV1)zB2I#jsj=?$36TyhY)NSmL-30DLR0>eCD-oJ~^HH_W4!Y~!q-&O1ercm%l5X#C
z4o>4ntYl}HOW`|QF`e|Rx$_$s*HSG|vSI-7pn&&ZLJVFHAeE2dXiI-Je9y`W+0_EK
zZV8g=&+KO|>*IPqM^v{>_gGb0DLJN0qF{df*wsLj07p||Gg)FaDu$A(LlxY&k%F7Q
zk{-Y#*wV-S)C(yt7sc4KTKs|CEf~mog#)u%oNfHeYS4oHV4)CT0=6>DK(nzbdM-}^
zu}-9l=W;XHp7zHQ6Cc~D>oT*aQExEmUd&tTC?$Q(M{VTYqFuEqsc5o?ek#IwycYxJ
z(;Gb~D6ZyeK-K`ZQ2us>v{d;szZXt$mtN2-&|o{>d9DD0lQkUbbtW%dM5wY^xJ_Ta
z+Ut3LhR^v=s?wG`7lv=A@ow7T*ln>J&M$({(d*RbL}<4dQnSOT1hCd_e@)|O|CR@Q
z;@mUh;?|#E+&wz%_&f%{m`^%LJ-qc(vCikjkRokLds5aVqM*y*k!ip%rL9Bup@^BN
z;MaaFo;!wB1y{W7fXO(>fT)5~@1_#ccvswNOem9Cp`;)L{&p7)6x8(y6!AHTC0ysF
zG(7N773C~PN>c*jgI0tA!=U{_FMfJS8upy{KX3B*K<2&V^-s-8n|N2Obd#G5G|KPz
z;rDe;{cM7m%m-0w`wA>d#Veewv!1}npc;KBA~}QGsQitI<yNR~bwx5~Gn{wY2#!cY
zCIHRty!%~5ql|<S?*f;gL!KQUnoKl#4E3-{w<@P0PY+1cv%1kfQa`)~j6bYohleA(
z!Clq2hm8~yw1~ixMgI9l4+xRj=k`i~ZxOFqb(-LIqjjl<s`c4&yC^wulQqA5u8leb
z9(8wPNj%?A!yG#t7q+mrTx%-SIIS0q8uA=)HM%GJ!JvnW4vp}NiK2vYA7=553GHFk
zz)=kCY<$tuSmYoBA^{do;q4fW8<hRFS`C>gP2<lhJ7=O8E$=YL<7N0i0bx?z<t@pc
z=@_G`6{ywh&bwWU!A=68`CzQ2g|W%bOVtT28znLSa)V3by803q5)%`EjoRR_u}zHa
zm>-1}`+%Tm6zNK)ApV49ozja21t9f$e)uKfqai;v&8!`{jueWCyk((UpQiD9vR}KS
zN&3BDznPyN)w2cDjYxht^OnF%IiF1tt2}CGk}7#7`qK;FAQV6g?=dQ6E|oM$1M57n
zi4QbK$WJ{0yI$a!NxtUy_4a<lW7EfoB}|lyNs5LPGw7JFa#ahM3-=V6q3>Q<={1!3
z7YA2-=;k3wE0+Vu+MGPp)T_zL_(9Wfaj5oB!}$?1vjj;C*-ix|Jf6@?boY_dMN%qp
zQp3JxHBDH*<|dwj9w%eT{_GAJ^(4vbgT@xV6#A3u1yKgvOdlbSTToREyPP@ppkv`s
zeHLGem_Ph?H8QZ$D?RcM{$KCV!V~&6)r3^{*@#7)e}0O+wPXm(M9*AK463FULfZZX
zoFKRB=vkZXe_wLlwn_&aRNGp9FZTDt>BSDErU|A9kY%WzD53R&|LV_SO%`|-6ffiq
zNaU@YT<h)Qn)txec`3|O$LsFqH^#Uq0GqH3QV=t}RA-HGT#&1j5SV=y85%HO64PST
z?1A_@DuGF{kZGQ**$)Z8GSAugLo7bHbhf2T65Lw0oBHoN&FFhiT26}7L90!ciwq>w
zS=*79*F7#5-)TF&8D%f*TdC{za|R1fXvN&z$qBCuP3ptXXSfBS)s?9@Jw`tXcDGk1
zA_xAV@e{pYoE<kCO4`~=anr%&vB0N_$OHxOwG-+3>^eHL`SbpQ73TEMad#L$dG*!<
zV=Yv{D6b9<L?EnI3_JGcq=HHXf4<YF3z0FMj6fl^ed){xbo)uy({1(&VcOA9S;#i0
z`XPS5>XhmOO&Gm}p-_lP5f?$F&bv?`Q}K<n-pZEtgUrV)JJl=UpI|yi6eArZ8CHk=
zs%W@9cTXkCpayIr;>KH#lbe`^<mWDozkiP6qmX6j0||eqO(;}OnNw?RD%uX%ANrc!
z6_7VLA#8KJ`O4judL{OL3{^xi`Y4V#tyhPJ1;=#5d4{$f4!F1%;P5H%tCdGsmq=8E
ziY-2fP$N@yursBRqBt*vYCoX>yZrp%-oPCQx{SH|;KUf>Y%k?Mztw?f!jW}i&W*n2
zgc_id-A8kYecYD0Q&;ilcMyYnGRVLJ%#Y_Y;?SVTdB?vN#bDae49L_t-2gU~Q(ewH
z2@(#F`rsx-fuI>}U=+ukkHh-N{D`0AzFU`yEm9B}z?9u3RWpQvK^|&RDOoXT33Yh0
z@WO*FgZ>^%toUplA`z`)x1^`?-fish|MpK#lHJy3%Ebb;8a{zelC4o)?zHy8lQ0<&
zL@*I<`_<E)nGJPyA!O&6opW6G+B|)XPU5MiVB3)G=96P16dCcl?~H~O5jtil@wCQe
zE7e0?zwq4Lc&d*%12AQ;?|uMw@=@HU&b1m1edqBBPJ)qvv<7j&u?6jT2uPtOb+og0
zi|RU?zX@d4eE@gs9&ar*A%oxjJia}C@L3i*O`BAsAVwU(i?GA)O%UgILpZC=M{r%b
z!4eyypmd9Spb!VYO}G0;;U0KPdkv(Mu-UT${HX2B992@9ssh0O(?wHFwVqhmFsQ@i
z&!A5m7?zMn^hUe4g;usF`CPL-tS5}a;y^@_s74&AGJKWj8(RVPI&iZDP}pBM2;htt
z%*JA83N>l&povZ2${K5VRf^nF^mU)yikQ{JJ^%^E6FD6sSmSbsPeftLE0ke2>%8@p
z43bq6`ry;`zB36;J2^mIIl}&x0;D^rfwYD1AEtRwGN0e`V}-4(STtcQj#>vyYOAdw
zg&9i?`b1Wk=xHyDTm;Fu#?`+7BiktJWF%;qMdjyskiUFw#w)Gd5ei_wu(y6(2H?0K
zBdt2ji4!Lz7myx&cvcAMWbN*X>1V%bT{WeaPk*Q8Yf?ftL495Nb~xb?77yPPKV2-Q
z4)d2(2n!B1mB0RST*(KEda1&RpaO9rC_ep}z=U*vfrMjrj<ZACDpOwGf;&?M2J-!A
z#dYb((;#%LY{U=uMJ(67Qc;xH*VoX)9KLbPV!Ilw_B{jwV3T?#*#nJ6&eK}alME4!
zPlDqy3V#-a`l<}^^1lg9m$Xr+bimJfhB}XHBYRxJF+e-=7?O5&?qxxHWNx`qp&@g1
zfZ@Aw6_;2uxiE=0PvOclAm1CFbxRkunGL0Tv=CnkD}>N_nj&-5*|2&qw5ItuQQL_!
zDyvg@3n<cJG0T)?#fLg<8V3>TRWlc_5(TV!ZVcYshmF-%$@WZZq9Cs7(u6)PnG{hh
zi<4n<0-@SnWb8m#4s;o_3?yXS%#hOOwxZGZ9^-lqc>Q#HqQff=m|Zr0{7r>4R9bTg
zaLpMpAF8s3E@I!L`@Bc19gwWYGe43x>WkFFl@`udRt{JWojQRyHPOijxzSd|0rDJ#
z=+yS&X3<*j-oDA5I2EAf2s4?G?+k9sQ2=1Q{y~=iv!sb~xBd<lqz5K$?hA?J9NBXb
z3;F`LfpFcvTwL8d2VbPx_xlysjuGVLF58cOC%qzQ>)=T5=0OR=Q~`(!teoFJ^Lol`
zQr)`-LQIlG$9KPPCz-KcE>$ClQH{!xzZj~6LUgnm?FX6lFZ;43b~z|w)e{YY%rOFv
zPpe~UeG;r54?5=_hoFIFTM1vy%>TQ0`Jtg%y#<`%<Jxe6YzR8%_F^qSp2gj<sR54(
z52z3%O<EGoyc&W7?PL?VQOMZkF$u_f3Oi?>LuL%cNk<%u4{8WzK6_|#_OEYXkQAxW
zKAdcxg3a#Xbh69^Z=B*LKmaECdZ`H<`DxaMDDv2?Xs%;w^cCO?DOUeIq-{(XG=6*v
zNiC=o=9rbD6bx44`^@KLwO5d4+mNuq88?VBRd$}bztQ_-r=w7)d3{&u(0ZVlXs!bR
zsUqv5sr>HavtRA(`o}xk#6(<$qra$A9B4Mn?1$o}jg1w9@{2kx3=+p$Z2EMI`hH8$
z)tQ(%vP##b88cG1Wr_f*4W3pyzuZc6C?4CmshzB4Y`+FgW_o*KG%9Gt;0sKDH5ybk
zXq2qG?v_<-(o}3<g?L<IJFh!Z-Xvuql)~|-&T0{)a#>!7)f_nrY3*%@)PVEvSG#I*
zz!NA_f3mb>dzxw5Y{S09&t2Wpbik7rOJ+i99hm@OhGo7CC%31RY7_Fpclj1#`rTrI
zeejf%Q5*~s3HLUlkoBd}h5;gv*o+iEm(|(@Jue(v$`&aEs;U8G7JH0>a_AIS#}iHO
z%w>p_cQoR@h-ArLR3vRs?(ob4aQO$lhHqE(^7S`G-52FV(_c%6l;4)wX>eVoxVdA@
zkjS3y<Yqo5ZP5<SdjK2j?F~4etWNtk%15J<(fGDD%SUFkg&l+p!=J0UIh#G2JjakU
zqC~t^|H#w&7R=!u09+kYo8s-boRNI4f2htVn)eby9`c0U7k>FN{x5hwA8^4Sdc=iI
z{!l?C+~zVD8Q>BHr?U0G#16zG9`w*=F|me8ufp(4*ZNm%2t^f%?PJJRj`(FnAoUK<
zpL0CD`hf5xcz2tDE_b#4p142SY#L=y*+)`TK%3Dras7L)Vuoqt5S<|`VHaP@?I#%=
z)}tC$hu&G;1P}vWH3N1mk0AxH|6yeifPu{Zx6=GLIKm#M)=Lx)|3Rb9jN6P@%s`H+
z*b&mF)%=7Y9=k3{D~ePRJJTJMn<kznIE*wYR6D?ae@kNn0Xx7Wdsr-+8rC|r8j*bz
zFD)N(bO_k5Xb?N)f`-v<mG0LV2T`v?j0Z-&)99jOuNBQ+1J%zQg%3p=affm0njgTn
z=tHsQ^k?-c-((e_bCHM-v+<I+TpaqLqJg!j^zsO9qQ{iUr)ESWc;wC!(@q{q<EkA;
z{4K&!wN96&RpdcHlUW<4r>Os!y}l%7U!SyqaTdGDT=WdKDI@q#Uu-EW<4IsLO!33{
zBCl3P5%B0A<kdS@HMYlHuqxGqAqAMi4$VxenG=q&EMn3q{%Of9<vX;nKef{>O(Zi7
z=!skj8^j&u!ea!)@+jY%oj7IK1Ts-iA4h>Icn%dBd0o7mDZ<8%d$z7KT)&LZ@uFt~
z<jE4(;Xhi@M|<MC^Z`G2mg)-D(jUH@m%FpQdkJNLpW{OBpk-cqD{Axi%kP#6HaYUR
zOo=1lym5=zphLgVYk@s25D_;wx~fonc>~O_HM1Y7o7j)+;-mu*-9FI_e=UnUt!3{*
zZvC<;{uXXcfZ!%Xn#s6&SC>i=2=#ZUXpX^M+&TZ+dG!s+m`9`A%x6%ROQE2b<&>LV
zU_JIz8+;|fC~E>f2mZCTb+Q<uqnqH+=gfo!E#cw4I^^(^W0_<>{QlX^E?4=Wj8!O?
zd<1D;)<K3>?PHJ)v?{n$00QMJJ}6Vm`;O#WYKob<E+TcxdqZ(I{uG5ZfTjqlCPG0X
zzMN0U2LFf6^7Xl;Wy8)t$)5dRgzU}(Ht+vajehaO#U5{L7h}cZkptN`O_?ELn8C{r
zSJ~a%PE8R*lrwmT{gY~&V2S+KIic3Sx<d4e9Mv-S_g7sA6O=*;h9O&O;GT%(1u&4X
zU}L7D0Wyirx;4Cz%oHZG45`&9YReRnr9dx*?9?dR163N`AS-K2dvh{zARk}?EvnLf
zFe?6Ji^uazAIW-{nP>e+)2;SZIM`yy=ByU2Hlr+Rg3^C`;g^?b3H~n})!-fB`6S2W
zoa=*njjzt@yFS3Fy+Z==k7RzWCfm|+=VbbY*9p)j2R)PW--g>+$Ss%$I~a4KZS<=d
zteWmmz$+L6=6w^L5{m70{f++?|J|@3$Y}diI3k_`Ha?(C@_s~9;)KDqgK@&ns?X}P
z6|TOm%wfGh>_((~XCytc^!3?}$@J%u!81iek8%~(mx<i@sQv{4$FYGTAr&`eAGb+m
zRkA76x!6=AOsT?sy|@0oNm!1w%@n$BNfB7z#AG|9rNII|jkwsct;2>8mVQUEqXb-$
zT^=h#+*&eB$Q{a;Gz5rWTfSmok^MN%0YW4beCmeLQSbsEsd)W~cztPT&K4=e*5lwA
zwTKYx(RIa8m)yB;xOx@!E;+8^4KHV8aE4OeJCGlWZ?ePJ9-E*=q+?%OAEti}%0ce4
zV<%1Qg3#HAzZ2u-paOIY7;9q@i=g5Q{2If!U%I$)gNhcAT(%0km?(~cKgva;1)PL5
zhIsS8=%VeY3=4_}R<qJ}wsP!~>$U6F(5ok9ZHWTT0Vx60bd@dCbJ)Ce3Q23DDiA!7
zrBRrIZG3qEbfD@u$nVX|cupfBw3pqZR6@|8^HVYlT!!Vyh!QEEF$9>O+$pnF;j&N_
zoUNr6GTS+AUowZXI}A^ssXHQhoBLUlJ;Rpd+3aG#!zz)zf5Nmk7LjA}NQ9#hxzkS(
z=h8>8=bx2&Rl_z$2wy@THA9;Sw$Lj=YCsA}XelcUEP-*ZNT+we-c6P@MC|s4jMLUs
z4Ey1(Chrz!pv)<ASZCpVy1Rahf=E@F9om*6&5o29eP@wz4j%$&x-D|F%iUg`F*)I^
z@bv#Y$jd%TZCkclvDtx$9C6RIZM95S>^fP^CVUSPYV*$=jib~`ENnw4#H-<ZMFA#t
z+k>FW>$E>xhq21CIOth95-yI{H{{xp-!wtY=9UH1EiY|`>=f0=AdmoOq?9VYrN-%k
z4i9|n4UDN8p()?L9&8b}Uli>g7`zu*hi_c7t_m5@Sl-$#>b_RWku#a~X>7YPfvJYm
zYdTut*+YX~xqQ~b5HHi!Q;gDv>m7fUqtA&#4JG~CJIOx1A|O1VWUNR*agH083I&ry
zD}$lhymE<X6_%O;E(^08qK?c~roZsOjOfkcv;*L=xy+e22Fhxrk6Q*ltfM85IicRI
zI`PniuTb#;`M{@+c>VDIjcsF%TzjSfC@rWznG#F?CbC>F#<s`uy)@S;Uq{B)|DmH%
z4DkH1*1IQJ!j|rvmagaR`AgNSdkd0=!oo-3w1KBx*tPM4oEwrW6)cgZ+igRFae8f)
zF)ZCTv2k&+#6u?3?hS&DxVAl_Mxvx-byXAEjnp}5v)u0|p3*<-bOOgNXmB}}tTBpl
z>Gsf=*@CGwOo%D<I6)xcq4lAg(#sQl+h_cWdPk?^aJ(RBWOVHRqyU1Y^BZVO?h`6S
zWsx$yZc*8VV3WI|=R}J(0-j=$92qouQ`s0)@2qw$f^&pXq!ETVEql%UX@mp^$uygT
z;#Shc)4n6GW$S_`DYj4+=^g$H>}N{=h<{CCOwU=djSIh@J2TT&Kx5Vh5`$l`vDXj^
zF&=?-r;^6eO+FqaoU+Cek7H9toDGXCyfQt}R;dn3p(Nl#gWiV8Ljk1GT&04fss-X2
zqH`$%XaNgrC($OQL}RNIX9o`MlVlF|RDapO7!>BjN{O8PbM5X7Yhiezv9DR_JL||W
zrj_%+F?gU|8=tGaQ4oV!Vig2DUrJG{W1>q6@O{R#%fG8@M?22Mpt+#k(@aY+JN&5u
z>L#lqAriz~vq?C}q(Q3+T$-%onzK{-`sA*Vn!Vq13*>DR*a~y)1!qao5;j7K1DU1S
zMCQKd2UL#LW?ogS&igw1_U7c4w|0CV(OS^~19kTUy%}>3gSfsdB{)V$5t!er^|$Lm
z%Tk#_RjzlrV23|R%&EeyyZYtP_Aw7j)aVPq%?7GNcz6+gzLib7=1wu1qlit2KLX^Q
zjOS_csF?@el7j?2JWdp4^Aj1b`5J0Aur!%E&a!gMyxPHaK7!+!l7TR4sJ6&so_0(b
z82;th54jyUwd<^e_=_n7Xf3DLLV?B3#{!a@JyA&At=g^7xlrkeZfgy`x~Yb8A0g;u
zV3`t45S8fBpvvQ$WsI?>M_Rdq6D~s-YH}gg?9SRp&_d`gE$XxC@n!>Ix?wjt5gH6+
zeda#R2~TDAF!Nq?)wXB7!&63Rc;)srUcQ6NDW5m5zB`kB5ceVxy4BZaum<-BpK99o
zkQWcopRUUpX^97#sf`t~*n?bpAw^Lk8w096vbvsyH){GQ9lK$b^%y9TrCfw84XvVv
zxYD8fsHVWWDiRBTr;hf|F$F0xpg+C!=oEUb54H)fI;dtjXPTgLd4BtSF4-pm5TK$C
zJ*v7}TCvLQoL(LtQz3X?BTrG)VZOE6%vt_S^Ke5VYuYCXZ76?LZG=cg`169^4+_*w
zMor?LWkV>Nr{4no+QlabHnjn~B|!;2jl^KIt0bnt&1Ng21kYbGX$nB4@5#LdJYHn-
zaQjU*u<ewSBag@TxE{KJpAb>k5mBHWE|{`SF*vYz{4kIBMc$D`f8At8#v$KpMhQY&
z-}FxIf6&X_?xLBtkyN}zW<UmTS^au-WK!DSZJa)a%o##~1xo7~{}k(^O5^^W8rhYh
zpAZk<gaN^BfI9>%zIIlJM|C3s_Fb$qXL5vVH*160vbEAZ(k(4`@n0po5_94&f=4^4
z0l=AKznU<qDa>|36+UrN(Cd4GiRduP=WiY<101@O3Q77a-f5pkwLnaqg@d$+XQRDp
zguVnPH-@6tc?!2_`QaL;%<|NVDBVi)c83=)bQ4sA%Y#Sq*xSwSe-*itJ2&igD%hNV
z-=cMTJfmB0Wr?*A#`mz%8F8}8=d&2l8J(dSf8#)5*T4Se=Of-^6#qHS4yb9c^y2?M
zB#FzK8_6-hV;Bk`gx>}UfaBeJP`0_bL95FqL^K_KAeVxwk%H((N1@VKpvoPxK{!x4
zAsco947hZqF{yWkd<ptgvn|oC2zXpi6n}y~H>J6!pbk`t?d0xQD^b5*cgd@XfjWgN
z8eg221`gF&u8Zd*MmP&zrNR=vEjcR)w6mV(xD)Sd)*dea=hhuOIFEVnuYh>ihOi~E
z4k7o1)|tG4!-Nb%<wh!x-zY)Q%4=vjXaOE@wF%F}>4?x*q+fI*0rvS&xoFjNSNy>$
z6;XcNDq~UKQ}G!+Uareq$2FsDausLP@u%-h$}S#7!^7G>bh|SEbn6+C>LD!rR7q>a
z1nK=A<j1>^J-I_mITO&y%C9%dR@arm&g=Itd3%X_G|zM^Jh{^&Lyb~ANqIt-Z4|L4
zAH>ky5Fu2K_5eeb?7M%2Z2fTs4qUb>HZ)Zjh%|%3PbgU)=DHlzb|&dN+{??oi;rvg
zT-P4JrT+z}EU|QdLzmlyqNf$|tYNsrOjrWRE{~1A#%%4Y8eE-cyKAK)^w`+<P&KVW
z?@cR$g(_(Lwq!2WM(2V!B1p;KK9Qi(F5*}Tf&`Q_+kBGZ%~Ts5-^NCNQs?kmOcUOz
zEm{cp^Pavs4BAXSdqXUAPsT<v9+@#ow?~7fMP{7|<|uVp!*_n0K8jcyVYgMEm&3R&
z{Q^c_NQw_!m0fc63KmC;iR0<Y4WTT|Hu#4Yf+USq>lN(Rb1(APpXmoz!6z-k$UXEI
zaqpJ*oA?|uI|6)}+%^hMVAdz<98zM7n^Y+j6j)Z>Kx?!G4TQm6*jZ1URl*!*RTjv|
z2UH-xfMwlK3R3r37`EV5A~Q5g8T4Sw1>^5Z*q}x$i%k7yt@o#UQX(q|#O+PR19)A5
zE509b1x3|ws9ykb=bga2NQFJ7)R&e0qZTF1as(rq{zr4}^M+T09Hg#r>M1s33IjiK
z?$>q58P}Sn7KXq>z6pg!TtW&11vUR|dA<@2I%gp~F%)n3EXz_Na4T{&ag+gt%dU&m
zyjg-ri|Pl&>iL9yhOviu%5#jHCoKBbs5SZ3N%tuf@<pPOEq*>=j8H7ib)yN*_Mm^b
zFwc8}<7NV{c!KFfC2s4aN!V;@rZ^A>9#pNq@ev{^x+*Bm@Ao{X?4E#h>)n8~LkXnR
z2SJnl$jRsW!#-OiFfUIX*e17?GxMl5U^(r)BE>R9-ohT<CUVyt(m|&)h$~z)96ZOk
zzV&e|r+Ip9GG9ay(DXurCSK>$bLI^TgGXTk>DE4Oc;KIn#*+Wc2XL~1IsPB>0gJRi
z$R7eJGC3|bWbug}m)2_xubdPA3ZZHMSk%CQO>x~-=+IgbaZM@$L8TP06r`!)!s**j
zl=e2Na_zzi6;Nj>aOLVUMIC|+ea>DT>C~rbMzmplAOmJT9lWz-di5ZR$6{ba{U0L>
zAtZVUp`(VLEobteEGSFM^j7Mt?y}>ox}{A(^d0-)s-RZ#w$(*P*X354#sN6QiJX?4
zH45NVB@sX}Y1lA)&Y-o&26zdykcSK?*K2I~D1;1#+Gt6~RUt!#=<3ux2Ebw+%3_d4
z>p5RI(%8Bh^upq>#XK}1q;sNWcJ}V5K{-Wf=!9V|^_sUMd;r@abq?=c$iPDu!iCuc
zqFB(2a`wQ9-vq?;@2{OobL2EW+RbX{7|LK6v9Jc!_P7s$Rb6H{W!8Ml`%!gS&CX_R
z7-^0S!5IZ+-a9Tj+PI*YNlsjIOmXqd#ukRqttl!d=TDsJ=Wwtw2c*|Dd^XH>^nC+4
zxf%fC{+PY3Ok6rlE@I`-*!I7}0cqQ$;*pesg-DIi_;lB%ql{QC5m5vpt_lk}f}y(h
z*n1x72>(uOYTch0g50o(lNMhEcBxJuQ{00yW<d8-q7cI$sAx8s#k}45#)#w0*Yr}2
zPp#0n2^N)WlxF%@&LZQM^sTISxEEN}KEg8JCA@BAq?C(HPDb#!T+=FUkC52J-9ScZ
z=O@;^Vej4U;V!*JpPfbhbnO-XC3f{*C=w9g+N&ARyJKCo6B6)Q+s+8NH_(rnKdub*
z26ZOy`FxLp=qy<YA@C)I;qV4NIth}e&Jp^4<4*9w;XNeAUxIt(+Nt<QU|(CXd$nO%
ziW7FAXvRWC-36frtqJm4Fz5>{-cL4_qRhd5Wb1?3fcL)p3Vx*;4R@{vF#HsAq2MmF
zb}dA{e|hH&q=$%IJ1Uxa*0l7KsZ4@im|t0m+ht}GfPJ@PfZx>EvAp2IEWPdzBN~L7
zE7ErprsaXL17bNWEPReMKePzd$pRP829dnGz_dx#wf?#QmGPDd?7aF~T#DMa7D&yr
zbb5)N2Z4fR2m>qrTK(r1U5!D}{hx^kp8s+8R{5d29MPzrO}+;;?tk&-|KiPg<hW+x
z#qA%&NNrwct@2+0BJ`dhXJ3bXp)^i}qh3E$w;VFzI4z^nPXXXgeWm6>&ze!81;YLY
z$v%E$l|^@dI%^SKdod=7W5?0v)jv}>IHYfg)%#VWSDcc7(r8uD^8_6vz-~Z)k<w#d
zl|p_Sd!SgK0LrTcqXPp1HEyyLXNXD91XHYIJ9k^Y3(>ug_RK20$gdmbC|An=hrM%Z
z5(U_nblbLV+qP}nwr$(CZQC|>+qQRi&yG8H9w%a+?!(0S4;8g)Rpys@ty)l@qZ5r8
z!2klUeKZ}@6YcSB9i|l{qwu;EESzt6@Ve5JiDg={cZuA!8#*<hL*c4?h<@9HGwQF)
zTG<W|kU6p8HcT|Dw*B&-^5*|4Z_a82iN?b+kXm)CG~yHH$mmv9Mm=>m4n{#uzg)g0
z>ND@-6^fcP&!8T31JT3la2bACFMc=i_s3`8J`JZ$Z!S8E+L+;U)c!k{%(Adrg!Sp2
zLjMauPhDkwbYwN5KNo)gc{q~RukT-FZvqq_lM#%8Ym|ub>QiEzY7R|=ws|rOnERJF
zDZ*d|p0P*DVAaG+$+)A|X&h}a{C%Gv3w=~wKVQ+~G=Ovpa-^lc?o<HMcD1e<AOm{R
zGsxAb@E3M{kG_U0O#336Ve-%z`Pdo%p9K!k^O=QXAs1-ec-%xEfR=6CPx#`(hmaPR
zM_ob;S{zA!?9aLBk;?|kmq2Oa#4(XAKW6YO*bp1%y@y%I{QaN9i_<|Bs=G*>Fjex0
zM54bh8PnR;eau^LKZ(c<sKXP-YW?ZJtR2tE`i^uSEc?6YFcSW0bI4sn+HHi9A+H!P
zFgTdlnT{j@E>Vdt=nLTy5{HXon_}yN^bE%pLDu-kwk{5ht<ff^gaUr?mdsyu-rapF
zPtZ<9W7E_CG&NqK%HkB@e9mNrn^!4t&F5!nOyD?)_oQQqT1DZ(@YuSFNL$+Ca|)9o
z7C`c}h}^n15Skt2Y>#);EHPVB<L|zNIwQD*6T8mo59e74v4RxSc3t8va-lal<2;2R
zy_f;wFJ%12qq&gPF2VbocYVO5AeG113xO;Msp##eKu%w%Map2EEF=d~1i^pjqIiI2
zx%nydxJz&#o}hat`_KdIww_)wf(;ppaf)~I?0Ov3?I>r_4<8voP=W(587D%Q&VDcs
zCz-VmFRK?yuM^$p-LqS*Ht<#Ql#~Hd%Jqa<U!UY%V0z$Gc`h#@>7vd))6(RTV{k)Z
z5OQO}`$;`7>+>}i;Fg`mQnpZ05V7s=!RvYxTv<StdCE{T2CNzIYN$iykr%F(rZuve
zv{9bUa9`h<&dD0WWmvB<e*x?3Q+!D5?GYEpRi(cR4Ri|^71L>83h-?|u`qV93)O_W
zpCW%O<e5~ado<gR*gziY6~Lc!OV}3$nj57oTY)3mQffmFzi1MWC#4888v|#&S6b64
zKw=c=mrM3u6{E<xZto<?y8yeIcCK{HT#y&UW~bCrRS=krb4-RNb(7#sp%iZY^zU67
z8BMr!*QB>KBl4&VhZL*eYfJiMrx($90AYO7gi*wfmjD*=FEcZvpBzHDL96Rt^<`&&
zYDh86_VFZcA~O=<^uXW3aZ#spWBrVZKXTabGFfuTtE)<F8T6=j55(GJB~mM)`pHA#
zbTYWl)oQV4X&Ms?<mPfo`y^qQ+g21jE57NNumae1+JLYrqr$xoV3Z`lV1S+ul@rf>
zt7ZjQ2$}57iAfrCD$sqwBA74KYv4$drq34UVqYW#EHuys+%AQmY93!n4gIAn!?Iu~
z89&JsNf_T1Mw27uZ2qiT0@K0`3N<&OY4jvcGp4Zfha}ng$=46n4t^{!ge|?vut22X
zdh2Z|ti?Qmfi{B1e3*i(N3Z-D!gBxph6Ozc_;(Zw(}`riB{LR6luUX8Q0YplDdHGM
z!s58=sK}NXj2u@RFqSRt=b1J4X*}8{iRVo1n|>_1)qZB#xexUabkkEJ6(uTNb{Pa*
z?SbRYVR8O&h%P|-{vD8Nhq{X?KgemcW&6IL!!J*lO{jERW>YhTm+)WcxF$ZoLTw8k
zYS)eD#^=kWC!3y*0V(5e7m4<1d^}2V)t1imAEQMo<MAK~1xw%c2<-ezxlvlZrYQkZ
z3nn5{<gJD}!Mr6U3s9`z@&wnJzewU7zx-^edG1eatS6+lamTA=p9vc*!XSy-DlKLP
zG1-+vEe4Z1j&hqkfVpIjkb_D<Rs+hvOdTGG94-IOha!p?h8F|X4I=tlvZ}K)U%WPD
zIF*~Lq+$U>ukuV`VS4_fs4?W%iN*VO+~1?5V;XWTa^(u?et|BKUq@FAvxkIZLam}2
zK_Htd3aSj0i;LPHJXz(_Ox?KSi`<qTEt*9#_H-{9&|2D3yASqr&Sw7p(Wq>=8iTl8
ze&k~8V=A$XN0{memK|O9oSxE03pf!+K&Li}!u}DF_jZ%y`1ilnvO~fZT+ROxwTvGJ
z!@xT3Ls6@)^qaWnz1cD<p(FX!DSZtP*FRaU<lpXaT3NvO*c@~dZ{b<~OkV}HR@nin
zb7fTBP>gVFql8##uuKa$H{|vg&R{TUdy{vT{m2_Hl0)Vg^Ptzv7}5m!^UXXP9L{%X
zLXGUffB4KK#(^#9{W;GgQp%k0QpgulGCjKwiWn4Pab^pFtyXV_WiY*o(Vh)nU}9F+
z=@uO5R5@bc*E2ue4Y@A2bE|ri;i@d+vh>O{hY#TO&brTBWwo1>?CB&LDqI_iWKn%_
z%WT9m6zg-X(A0bSu`5J%mzX&r6)$YY0f~%`tb%?`j<9%>E7N<GYtmjP?gR_D|4Gi!
zZ*d`r?1_l)tc%sh`+=_*)mqd<2UZ!_7IV-VdWH`750;WRZf|-)D2v^_KS6f*JsSri
zVffNaH$(o<3XoA3Qv2WTvvwDWgKj-W?TW?o%#G1M7$c)2o>!%Bv4$eM*@pj`pZBam
zuN3l}Z$_H3X9*RGy8Difu}Mf%6ykzNl8Mc}h($n0EhRiKEezsUX~|hHPUmG#{WZDr
zNa#LQJ69s_5#X@2Y%E=Uzx-ng0W~oFE`aO8*i9$TcP+d&Adni*Uvu?7_!GV$-6j(7
zmEOXO+QUa*un4ujJE^7bJ0KAQblYk-^lk((7eIgEye8ghmH#LWAgrtp<MDEoS)j2x
z38$qicre`h<x0K`cQIzxRL_Z~*T7P;4r=#>;Es#uzEMYmbY8S;-+Laf9Byb#AeMoK
z{f3v|if%qP83bUK=}m@;kQHL7fgWYZ;;v-Y$b@|HYb&mIZ^Rp4Gu$=0)HtopE*XZX
z#n^>TJj4w3^*H%o)r5JiVngRN5L~N;a=DACDF$1fohcUo_9Rg;mw<1h`WEBeMFe$+
ze21$EE}bdz6&P}G&V?}(=thduNZ<~smJZdah_(%KbuDgNhxCXKiWJ4NBh3V@joF5r
zoOwwKzHywyVjY7*)8Zz+2+CF^iMDb*%YTa$GbEe)T9>D!xd*wMpX267_GRx$qKJr!
z{w62Kr7%trK&kloQ-k<s)x|IHN>EZP1T^VSOpEhLD+(QL_F3C!;7X_Y5mX<$i6TTJ
z^%bKKV*{9cT%ZGnTHv?r*yc6ziHsCWH$>1m>1y<((Tt)QFG0_ZxC3E4*hDMhjh*yr
z!y)nA>SfDB7V8QPL4E4NpPYPiud2V8)gBVr0OMm{^o`M>zsx#9sqDO3)qbmQd61nc
zPpe_Ux94txeU9*<A$MlMKmScdBG*ZnEifL%a$4*+`R=CV`sFS_R{(ys&Opuf1GB`v
zLdtgo!!uA88iwNVXdF0QcVHcFOVJ<oFoeo`h5I7pSif_qA1+&m`a&o+!s_^DDlKIm
zXsjx`c;GPcr)-$X&eKrcQ#G;f^klQQ5#B?TWVBhVu-l2c{%h96F|(_frwApe%Ev%P
zJ`KYOEOGdnxank6g>iPPZ)-K@I;z=_2={qMCIznHG|`Iz`I*#aO@z;jjqJEe5K-eF
zgxd}_92?5gi03BQnEbOa*%I1b7qruQwI46IKWh-C@lPrHAzwHr-SJCwX-GYSROavJ
zLV+<T21UzU9%?>@YYDJ~!Td(Li3YA*GD^<1b;&i4pbfO_2*-m7z<&Au<c9MREH<#|
zIc&yjIzfqyv9Gz<WDeg>-?`tu9m4JLVQ80B<xn`Iwb&LLu-7H70=Rfsr;T*^G~3_l
z&wzv?l>^q%%!-z-!?dP}Zz|Tr=pmr-wpKp7ZhXf#c{m=SH%^d?wX^}azFjH}^lWQG
zOC*h_Ch*JpL9i9Cf(Spoxht4W%mr491ep!Qo9Lj{*E$H#cWk8mLCdwdbE*G%AP8XL
zQ=s_5<@=+c6tu($#1l1gV9+N0d&+J05p~a>BfDNcRl&T1HcrZR*kQS2J}<t3_@@+<
z<5$>o$IiiX^K|MHxrE~z@u>Ufb8|{r;e%B*tc0Y0cjL$}c761!ly|c0>S2gl9X_yH
zi*Hi9kjP{BXeQFr7<Blg=yDjfJbPPZtgA*GJLGvZvoF1MDudgjDS?s=flhFM*jL4Z
zzg<%~`KsbG994BSB8oRd1H4C`CsQKxC@)ykiZDNMF}n=lje$(QrOfxQKpEaxQzV>P
zchAiB?mSE^l{*pu2~?840YWYxCEo?$87{E5xz*Xw$>LwZ+7qM|qz0M5;1(zWID2~7
z(AVDF+O$uy!sQmSQc>dM0XhJmm7Oy*W(PeP`(9U>Kw}`JgKmi0+L-`keVHw68?rBb
zfBv|Wqz3Tu=c>OY58}jY!|;ltL3(nFCX$3eSkVCqc1xG7S)wLw7`X!k4N?MepeEfr
z#N$WiY_C7qL&FGx#+GmocIo@;lSNtPXqp@{7ABBmAuXV9^8(FXZh#lYaSa1F(URGw
z=LLE};|{x6ZiDcAacQ^fu1~(80>Q4!xUt$ovO4Zzsq3HZ?t0uni&tHD#8fsR$b!Cj
zmdjtUL0)4FQICJ;0)vQ!MMS(?>0Jp?bLWRVJ1OsUSdzxDix>m2KZ!dXLxQ-7MrM7b
z0HQz22-Z?2`1wSVR2a2c7i)~s!>CW!&Pdd=uA{v~4QH>m;U7#%!{~3@f*T)TaEGMQ
z4G%8u&1xkJL~%>1G2wsk$G_!TVR#mJCI<Bf_b4|Uu^)OI0L64Sj2t<6bvPnZtzEr2
zf`y0J_EMK8OZEzR`U6QuF}w&02+$j+LiNisuilBlXS1e3Bmw$Liya}_;&h}G@<c8)
zkxA^G2#4!ex%BIP$5aLsjQd~v#04R>RnDz#>N3;mXC~V7D0ATJryR^@db@Tay_={y
z!)$b%Kxn|l3K#5gu>Je!a$x%ZtdJwyVM@)|rArK1jOh>eS@|Rb<_?<HxjcX`tnroC
zak|fiIqdRZ-xjH>NL(n;8k<n`ZVVvH`7KA93y3ah!o0~`qPd?EaJ}#p9PVW1cgLnH
zHeZTyJFr>EVw|Cssq5B~=Y;D#Ix&WrDl!X#uBVi+L>5LG90bbTgXK5DbjT;uSIdKq
zWv#8*!|}Fw7`<Guh?1oUuI?%A^SJXrtL)#?@lYBj&n5V1M2RMw6}!)z0pLX~KdfHZ
zos~x3(9>t;bh?i?11aPVfnB&E4AWTmCaKsG#5#yxZUK${fr$j;yYWq28&^Q)$?gC7
zozbQDuC~3LV%x`SDaru_8Afy1&RJxSJ#DuKZTOPVcnCt)J(dqMS_GXajlXSk^AzX=
zT+ofO>5D&tnD*9SdgN26p}#mWM(6c%e*pUmlE$V0<NQGZ9HJpqZm5BFN~cY$aq{ZC
zaGDC*__XAn+Ie)y>pmLhJj$@)V6<)AR_TamgojR-k+K{IB<-DRwKq+4-D`u1`V2p+
z7c7Po4}U&bK2=mZ`D}o4!FxDoLFd+rPScqhu|^(bGrN<Pb8UV|MU1p?y*5V=O9Z0e
z`&&<OoH*MLp07WP=u=wt>6DV2wA5*vvUQsZMT6vwRx!!YnoBDqldZ1Z>pAH)Q+IE9
z_yWGVbEh9D8$Q>~O?&Ml^ywELFDcL_3(w6!K>ML^dqtN!_T4{eJB8Lz#H2z#IQ*{C
zlzdYE=QiXboe^{#o#P>$)M3fmj}~8<JG9|~x_27y>`<r=y=wdyH0g>$blmD2Vt|OG
zvP7)KPL!;)2!W2otxsM{DaJopzcn_u^Y+KAv3kv}k1b+uRa7zm`aN$y6gL>Zj(9n6
zZ44S4Hg0}zlblH-Uti&;BPBVt@0iW>K~l>nue8Gw4TJg!Wb(I(WB+F5BXj$yM@uM3
zM@H}YIPk$9ZX$~%1k;>Ru;OQS0$9Tr^v@?1pg1XjChOa04Dds-k)Wq!vaeDo1I7;p
z3bFG@>{@6BO&1I>M3Mj1Y9Cp-GACm^3GpRZygapK=~!TCTdc=nu@)fN1(=j921m90
zG!m6+diTw3GGSo)LSuvLHEM4+6Q5SSO8q(ng`J}g@j!#-N`C{Hm}&mh;$TtGEZ(Vx
zftwUMJRg!9I^W0}>(ujzjg<f|xt;8ia?765Qq)hhY=I!3-?Ee0q{fiz3gEz5#e!qn
zm*yzO0l`D^?SO-rHLCi&27~GHdGp+pUmpDIHYml|SA_vW3RhYHBTlhlN)AhpN;0f`
zOcoqVQGJf-Zm61durDd%E8wh>c#r(iy>a0<PtjjXNsuBJN!;0@C&@Y)r@WY%z+v|J
z5w)N%Bw$HvG&DLWodP6HSaAYqmc1ev|1K0)nlx{X28rS{7$xu<7@r(?6C0}jv(ACm
zXwl|_;WxnPe2R;=Tp<!`33fr#4eQ6kE8aeJnr@T=#fVyh3qMDgfWkfa{5drI*Q{l4
zw-z_)(};4QxLQkF@O^9}7pt~`H^0-=)g-hzYM6n?OfK8-V{8W!Ae8qzk?RfDXfD$9
zX~hg!=F>a`*|ILPTLkdGXc;S|6kv)GH^Eq&+X@75bn*eW>Z>~WL&WvY_z2gBsz+@K
zJ4U`TQe>d=o&)vq-0RiG!3KyNjpYJxiiJR`dPD&bAY@X(*0VEd`S_m5f0ff-s6B+>
z%Uf7fImGqnjaWZ*%<z&T<AbdNeR<!6eESq{%@iq%?dQJbKa%R{Q%R@I4b4mD3A`rV
zfK8RDrUm%w^;;Py3D3;r2wTXHDWaahG^tuKAb7YV84^aNcyCC;NhjWGj?_~2(*ie4
z$*QPPk<B~t$7TpzdmxCpLsZ;1B%lXk*5;V-WfI?oZ{YQVI+)n26>9zzcI?4ms4FAk
z<23bKn-QtuN1)M^bdI5&5lhbC{+P3(F#Jj&Xx#09X#5r1AO}OS;7Y1}?cX(&wEA3#
z;YQ|OZqCJjcEUkUk}xIB?CX4x#y;QKCzq1ews2fd$kC@t#4*m$hQ@jFj{lnmJ|ti;
zMcZdP3P2opVfR>*|0#nnE?Wh%LwIx1?EXqKpb=BM59gg#-iL4b{H2>bprt(`i16Xa
ziH*Jj)Y{xECNzrGSImgx>DDgcq;;K<s_5=eKOop)F55FerY%Pf5bYD_8?W0hX1nh&
z<<<l?ANv4l#I}&O*@p1!1sO(1P6o>2&>p*uEhyIxipp{@)UVXSs?a}5@T+&;?6!fV
z_UINV^|=^Fj^A7pU%LP-KqG3VlN*4kkbv?{u6t<&15s2hNq5|TSdMyMDTz~9yk#&&
zQj-e<RErYO0lDo9UFYKwKsOq6<DWY1jBwaE53}fnAOaIs=&`o_f={b=UT<#7rrw*3
zXXN=UP}A-lO^3fZ%xG|f8%O<#zLUGW$*f9L1R#ky8MmP8v`l=IyeVZL2+sL~sQ9h<
zvXlEs9yKY!X&+0mZKxcOH$|_&phQ;Ec$EvUVAJI8@7yRBGttQEU@U%LZm+Hzz8yZF
zD!|>PnR-8}x#y!=Pm@sDptR;5IHIEl&=;wv1QZJXVq@SNU?_&G0lRU4zR;?5@Srf6
z_sh}RaXHLyJEq_({EY*o;iQ(mrgEj@C(5t*xi{9aI9z{~baJl2Qx7^hY5KzL;%%C#
z3?iTK<cj_UZ;?V<AORuBuY1?rlLJeKkH?4OigYl>JY6b?yYc*SP^#8|=vR1?cH^|H
z5AReU{^{KGKE>Knh-kcax}ft};JbS4Fa&5{eg3R)2#Z{I#SSO@b{Dd@v^!iZ8EY?C
zF%}r&A)acs>62B@Dh2^MqJS37wZ5=6{(;(TbdGMgGG3sy+8^kHRI$M;YRGzxM*A2P
zOrA37@hW_5+5mkYZb!vw)Ui9fm8@k!R8ZaA7x|!P8T<_Yga(JR_EeqNiNPeFQL-Xx
zMfzJ>!}9v&pubpfDqdyXlz%ZoTwJ?P%^vYae-%(^jz!(xXD?QhtSHo(>SCoUa`=d|
zJ)P@|2RLKx)Xx}!gtTx~fza^Eb}b>qZUG&oLTpi;9t~+eec%GuwP^hUCsV9|THpre
zaEpON`HVKo5jqs@UB1A_sPJc*KJl-EdGqbxReI&gybBlV6@+?aBn)}14&bc_RE%Y$
zcJUZkq8rdTywr90O?;aR^b$Qs!{ZV1?lPY-=?&k;wOL6IjkUpu(^rH^Kx3an#@eQ3
znm-4OIkxPrg)Pa+mEHWbSY|LUsc&ku4kZ?uv)D~Jz358Ae-a7=)zs-oFZK&`xzyT9
zzWFsmSGS9fM}*7X=$}4^v#FQFFKi$1os%&!`~WdNUl{++XV)axMF0R(Q|;Z>W$l%H
zW%0);5kn5&FYcU9=}q(_Repj3H~h0Z;gC#QUhk8&=uc2Nm159kZn_c?ziqkL1Nt$3
z498Hm3}`&_<<fz>eS~QgXKs9J_Y2jD6h$8X#=}3IrBC&&wsE2~7tr5q9e^`!WYUz{
z=xx#p4}aY9Eyw6Z&^F-sRs2!83_xs93h9mz2B^=sq0<L#zJ)6@l%1Y*2lCI+N`c**
zB1vobA-w9+W`aB7t27jSmGk)0Y@EN(Ybgy6ehcrWSb^4T#w1YHzq`loYhm3MExFKY
zqX9MBRcklOwoaGwEl&WrKk(pM@BH*;D2w4%*(<__TeDq?q3^zPWr&4YdLFVDz?NC0
z@j;BtWM+IajR|@=8I6P2=vfIaX98YWt}fOxAa=<*u(8WdR18H6oNL(*vQo>_D$f$<
zx6tVTW{iOV?p$SoIuzVfBe#|>;<F<_CNxZtC41Gol9sP{)}y!%*6{VQHC(4z2szdP
zcK!jJ4Qp^)c=x8BJR+YGxT4>Ja6JtI&`fG&6Yzx%i`t^y75A7g7P}`yKE9w~L@qT!
zliKxSJF5yr{VKW6D%B!a!h5$E!~6D&_W~_(Q)#9Q4m19~SY>)e_dd*<LT0X*tZ)_+
zcPz6SzQ^ppT87K_{%hp`2Y%d`RQKn;Pf8=dQIJo)fjuI<O&1=sS)~y9^?Ip`W*7wB
zZW%!p_JwP0<?GqWilJz(y(GVVQ)gT)RCll=Vg1M6I&9dR(^EFb&nCCXmw3g)(2nRz
zJW1N@gx=F=k6T?R$3CKbag8)bWPgi7nM2s5(yPi$(M*g6FTKZsRTOpx1hDR8=n1Sf
z$>2y}iz$cuX0Ure3yWoks*r3k7I6vsNf_v8;M1g8l{M#u3i^6bxKxlQ3GRn6lZSEw
zT>d#u6FQuwtDge7=ZujNrss@_m0A-SrN2ofDwmdksqHKKc>YB7u@VRi6$rAx3-Diz
zv<eWu=q0j?k`J9@g7-r%PJhy4j$Et`(NAo1OKXV@U-5dE<gWT|AZZFZ?V|#(u{lFS
zdapXmAx*S3w2h_A?Jmu771Vv9j1;&wW#5_EXzyFI(9mFBf~cZKq~`h40h4HsF`$n3
z3PtoaUqP2)uaHOw3aq^M&*6_S=5bi+tMSGa=xv_f>}B=1(zoKU!>Mwh>CoC~tnS7l
zmd~|$YWdU#XZVXLScfi9Y0ihD&x`htgyHiFqLxUpBAA(|gsfb@!cs9W+7UdvItWHW
zA+|e4;D;$;@oZwMDmNm$)k$1<m7$nU+MAC|W%g853*(jOCq@eI1L<T3^Vt4kL(-VR
zcXvVVK(GLe&-0Xd6lfcecWWP)4u60#I!{xTTLM7F7G(xKfCiWK7+)rjxXA3WMI;tu
znpvE>_E_dU^{!{MotWu9P;2zfvc&q)aSwA^A>e2LU*ut8xg;gh!$(6<oB3<6z_TQi
z_Yl<fJ$x!&e76=`b3Li7?qeNU0hdAFbG`ZFt``Que0NbJVmxjylJ%iqaM@EHI79R+
zp_qQE$th#CSI@(sHc}qTa{Dh3+itUCF1J{4^2I$;<h^K%+}}%8o44a9`6)NWT+$1u
zw<4}EqjV;gUYwX&lSaEc7Se4qFL-qU0#~7~^}@qOFt|<RfEqjcMdime%vo76Xtc1i
zInzZQw<fNJ7U<LHNT=Zfq+lV4XS0%kL~ad1iy-&56Tlh#<~3h6)d%3k%MH(lc|x##
z(F{i}P&A$UDImI5m)x@j6AEkpmv#f*x-OxgJcL@$=l)Msk^WzR%K`T|Mkc}tUam$-
z;slIMy57y-44ucWYg=W4zZNwT6Rrabu_X&elyFd`5z)(BqDqNP#8^P6FhG`0*Kawg
z4w*rofA$y)Xe_bx=ABeYMY$IAV0r#E)6~v5fI9zm1BXx-*LCS{Z}jL|2g0Q}SZ<$}
zSCM?8O<8OBvabQ4<rh5!Q#PTdxQCeiL~5TJ`*Uv;J@#^?+#>0uh>@l7TzQh=S1T)V
zg75;n$!P?)FFgnSD=g{qqy`qX&UzFY;lO9W@gbw-u#br3{~}n87dd?U%$`7d^EnxJ
zYT2E=Y?6yM>2qTsQu<gR_`;_tk1X7{*3+-roGb4tC1G3byYJLhHQY$-SZxymcFDfm
z9V29@wQL+i&*G0<NC_U-#WE|D>LCvcGQjr7MpEy-iK$IrNexzM#8SW-x5j-PMtBJ}
z4jhFJ*S;I>8V-2v4(T8;%!mlgMyzp^W0Eym7f<1ZD*j_L!dMb!b!KqarMJq*;W?P$
z^o<wX4bRFx$t0m^zSm~Jd9iaytXmt^YKDJYEGGIWs?1JkF@VP?vhbaz!$?r7*9V$@
ziLl^;hvtZ39NwogcIce7=ya8fXTvj-IG#s@?Gg1CS@>^L#a|L-8#=?v5uCeV<w<f9
z>3y(un+R%UxE{W+e0g0zdGQv^dlA1ZHyUH!-QP?gD)~?q$4w&QTKc^~_#{%Ep;6`X
z_%*|=j?7DhAup1)7B>PAv7IBd(jWeO=t^QQc@*+GgVl3l!(5*YA*BVNCb<9<dy<@@
zkANZ53idf|RmheM2-vN*_rt{CG2|Dp>z82KWhfk1%avbRZ4KzELuFc0F<&0;ICgn5
zqpIYElHx?g-OyN2lpHUz3l~*3Joz56jhX6^xE-vz(65<tcdnG=t|@D)BP1l%DJnF5
zdR5xOQCApT6tjPkdC4YrQ@EAX1{7RgMds|EF$srXCV|JuVZ{1K<0&`TYM7{{M$tWv
zR0?9VdKmFodDeeLL(CfsD=2>G7>bIiq<_mMv5G6jjEWfurQT@qI&ME3&v?*VxZ6=y
z3B1$=v0|`1leM|h_!A9rOFS#lc>+^E$B<QzIJ%v16JlE4s-XcIT)7ue#sNj=^e>NC
zjjTBD#DFRna*U1O*TgTX&HE3)K=~ShU`<)|qqCRCNynZhsS3zzM%2^nLv<&+AjXdX
zLd{}gENLD#5%JfsikB#T2ZwGc<FSXuLPyc`Z>HF=egLA*<q*fnJ=T{bV>trk;v_ou
zuIvA40FfM#nM4Rm7ILme--9pfdIxwWJfp(z;}i5*2IdRUXrk9qxaxa;u;__-)J*9q
zEhZ0J-USxXJ2~&0QcvQ#CzhkaXS`Xj0L|PQzs!$mY(o*knakSvms$1|t(Hg{mj^15
z70|x1^?+oiN^l?Wx*HEFV_N1QNk;~ZqdLX5nw3wm;uGhboYV}pC_9!2)S}g-So)t%
z8Is%Jx7ZEBK_NvHwf-9i?2SNSOq!e)Xr3Fb1dr8Tifr~ga)H9hNN`&(cxNg@84cjg
zz<VRO*|iOFp`mO!BvNz2qH1NHA1TGfA=d`91~y@;;biaCkL2jXqyXC-G-?&d4k)5#
z8idHN8#czmC<nV?E_<k*3gxe4AfaOCE&;7b!4>|uKOzPiB1j=j!>yJ~#AL+siV$jP
z6ks#J-7MPVMQ-3qw3>6t#+1i^U-EkplMUH|Rj2Onv1}q%QaGdnVrWAc_JVr5)V>e!
z18-Y=a@R9Kw^DijR&pF&uBBl*hCT~<qa{K5LY^_wg{izxmL5D76UQ|2>J-c5Nhy<*
zuckQV)u4p71*x%JrVzbfiiPOm;+gOR==~esHd_(K`~U6Gg9iuv`G4`b5`Sf82)f9B
zqv1V&Z7p18J5j!I#I<75=xhElguja7OQVkQEai7;g0Nu1uTNR^H5i!)VYj;~Sb9Qh
z@EYJjD6sIn{&eOAVXhLLz7V0O%HB90GqA>%(*2%>Z0=u2{q_;fU#1^r^MDzJQld#2
zy{dSK<H;B+2L+L(sE({qFP}Q^w2&M6=WlU=bZK9OhG)4V&Z%rYz@n@2h%tbHJeqI}
zzCJGE99STkyvF&L>Zz4(MM!|_2h}2ci!y}{A2M)DFc;;s5X2gT1l1G!Q>Ffaz1?4H
zaNEvn<m<O#US@({Tl~I<^E<M0<EEa(KS`c|uX(@g321G6+LaJ1+PDl9lLmTj0Z5WM
zAzqe}mN>@fYu`#I_V{R}iTtM9xM9K#j(KiJ7#ISu@PzOQ2^dz7%hn2Yx~B?awjy~V
zBs<czpU&H~`Zyv(zH+$RmA?g$SGr{;*KpIQ$g&g^fGnNCWyu(f&JMaU^Qm3jor0I;
z(C9q0@Gg3d*x*yXlBRWkuSHiOoc@~*L(mdXRN6OwDM4vj$24>g6}tp0g{BgYWqe|X
zkB@}fr|p+y)(*XvdY5lh)rS@?MOAiOr<$rKSW$D#%}KJ}Lwm_-Xf-a|_MxgPT;#d<
zfAG{iAE>kc5y8D6=RbJrfAG}*|L|1mA?_90S0$%=kIs^U-bXHQvGq)w3tG>W`rfdB
zFd+2gza41Q%h|(if;qqstLjdG2P=l0fo29N%MR=<5Jg0HT#8lyq9=8TQx<&C%B{K7
zLTP@VM_^MyYtTT-bfJk4A`lymq`xxGfQt*dNLgmA-ipbh3xLaGboYNG*x)uu=ixxl
z3{AC%#eb?E)$b~Y3PEEc!P%9HgOtHI447?f4&_DVm;hiFO?Q>VeI7;ZaNCJ=2A>a@
zstbyFJ@+V$WDR<yR`n^G6kr*04w*u#?WMK7Q4{wNA@WzLMvy#_rVk&Km|-Z`7SnM2
zPW@YwcbzU-jc^7;0$gL0OBT<6b<`}RheDkCLiX|_%qh6!_mh^KGVPTzW2pWP@321U
z_tx);bV&In@%5#!Biij0&J{rF+2PVjsjermr$3rc$Ha=d&PnKH4{_Gz`PEgWNLmnn
zi#G7}@D({-SqN|~kr84`qln0hX|H1%OFsny3-hMZ0MB^kcL~7>2Wk?TG2p|^^o`&-
zzjxk}=e6{)LoYT$52xB6AGl-$q>xcGdR8Xh<wDq159u96;!dT;f4I{a51LURX4e<H
zy7P1IKb{(FmOcKRR`ddz$Y<gf13Evu`)RsoQrewKe#S@iDrWLW|L!LWv0@@SRM100
z3F?@fQEp4Tbp$=?9pOGj7<$`|o<I$GEtyw-;97^c(>y1{K^V)9@<0_APly}C-XR|v
zT+5T_v>$jR*bYz&X=3#9+=MYV>L;q>qZoV7xXiIqe^fnO_T*b2GB!7`6Z<&?O*Quw
ze=CtB4hmf+SR7&{#7U=>8dq3>YZf2vi?i!*Ia6#ZY>Zhczt<#eds0(L33fGCv1;UR
z;0o2v6;%c{4*!w{e(B7jm|qnnyU||eSZQZLTIh$_Zr8&>mrQx2;m%Y?);HnthQMQg
z5!HO4tFydIPUvn%**kc-Dm;UyuR&J1aw>uS9qKOWHQ6r|9efxOa2R?Oz>PM7#8Ic(
zGms)4^{grD#9q#H0cqB=O4_^$z4G>2#FS%dGP_8RSRbEUr%K?t)F6I?*j?e#HZJT}
zgn`<g!9S?T%RYeHzcdT13Rkfnv&FaD7Ru283K0Ct=*taLJJ$DzI)ICo>EL@bY=i8U
zI3zCTUq~L$80it>k&R&N2T{0m84Nk45bYeG>jHdOa>1;7YL=xTg}4U=jlQgui%l_M
zc9Z_eC5ZQ+#u@C1HpJMnrf(jrZoXD$pj32@70d{j&(5E3WuB<qbc5Tomfo#JGl8s<
zl5pX6?DagQ#i4DL>uRz&a_LY5!Sk>Lj_rIN-vjC7_#%O+T2WcjUjc;@&{vR`V(#HG
zT705?uY2O-+)q(vR!a)Q@_)C;{F{<K#DU!@0ZC;M5722ujD-jW!vKve^)v}5{wF8T
zrw2XV2*Nuoq&^S)?IP-j!x!fSdb3B)%ZiSZc$D2cflI<dlnA6HX0B&Nw54;niu4L(
z?@tx5e5zUFE;UGTT65U(ry4fN(n=@<oyoYHYHFR_x89#~bR(JEM_lP89?6;ai2H1e
zsE`)cm$~p{K{~LUiv2T%$<3g`jP+JNujM%nxo6``6b^J_4#AL`rg-{SJes=c6e~9T
zmGfk*_${Tl3Fagat86436)`%Za0vpAI`1*C{*$o6FL|Z~+cWkdN~1Eekxo^U5lT#K
z#UC&atI@|wa(blq(9zT(wx_<o8xOIIMY-XVIj`$IPeaGkPZX0>s|y_wT&hJDwRaO^
zctC9e34-?gE{p)(MCL?-Jmf8c9K7(#`?;{Er%Uv^w}ecPa77nP`Wrv=Yi%L$Fnh~m
zle)1$*eQbB2vbm3hS^J{zBwIP^xuQkek=8e0yCNlm{3{E>TAsnd^u7o-aSzYI-1{c
zxINJ(p?;K|r9D5`szZWF!S!3l8586O{IAl%E09*_ngr+^BpbE6N00V$JJ~h>Ggi9o
zrFoDLy!DQ?)SKqT9UKYHBJupLAG+<KT*^C;J85cUuuL9r%Q4#ti1-?gH;ZBpicL$F
zN|;i{W4{@e-2=)D)Yl1B?(EPPjQW51x8BOkP1v=Y<prLm<n?whordm7I_tYzfr8I5
zn#IRwZbU!>!QraD%_o0*oE+49kp?}Aj9t)#lg%Uw^L1ze0o>oRu<>C6_<m4g^~I;*
zkd5N5bnF1NAXwO^6Z6tVfeefVWv^Sk{{^9$*>>H(XrhbeXQT~xwn7P6qUxWV(WEY4
z%)11*G;wN#3}vB)v=hS<2;GF*`Tzy1C;&jiL`79u@O`_1wXx(-M(dvTAM!~})CJi)
zh*@P>HYK`vT|)G1a*N0(fM^ESDIur4h6@tqB3Mx1jxrN>su_=UfN!V1U|Vpc93{1X
z{LADyz@9+1u&;B9N*o|XGO<<;7%xL#2^8k{&M(8Ag^U>J;2J~rq0yN!94EZ+egJV{
zGQjKDYr2fscoU+lpk(&B+~8xcF8>Z0)t+eZRcAC;Qubi)+fiHt_}ON~_Vc7K=h=LU
zreZ4;&X)2tdml>-yi;0ZI{ev`WdnB~w9l!S8Q3iLgm`Psj|7i0i2NX%1nb2v4pXWH
zvw|qQsXJa_1hn{M`|tG!O&{og14{q*7$8elfgunLzd-haB~x|)<2%ddizaG%Ky)>f
zcbaKtJ#p1{S*{esmfQR1Z2zS7x{5(o5sO=-qf2NfIyq8b2i={GZJsw!I9XWG-|0uS
zHy?B4K%4z{N31Gkd;yg=tUnG3T9gqEbA5jFw7uA0w90-^^L~;kx0x12;1)nsK%%CD
zGc^z6HL=yu<f#dvCliN=!(r2J4;jpY^15g!1eVfrWY<R)hKcV{jxE;dAMRJwR>Y8@
zj5xe*1@I;@PpPUk15?ke#*|MhkD?zYR(p)dCdm5kcnvxGY#WW<B~+2vqo>h*Q_x&i
ze{6bJn!!`IJ$VPd(AnYiL5ki^!a(~8T<t8JZpKG#p9}Q6;V!yYN3}jsXBdK^akbd2
zFv6Y{zTbg{1b4XojVYl)44#F4(NPXFNDN1t%4Q*ukr`H-)c5ThU_&)WgT|#bv>YxR
z`yhE{qF60QlWks8O7VR)U7s6oI*eL?O13`%J0zc}rg&ooQ1f2YnS)i1w{MavNoz^p
zR`ws%>fpBX4iVU?-k(8}#xw>OHfl7H|C&!&C{lWb+(gPvo*4VW-nIsLsPzz_HEPOw
zSv)q6AIry?FDN@T?$U0L(K+-L1<C;EehBd#7vgEjb$LgLQ^K64krd(d7`SCKQ=@ab
z8=xUz4qQ@>r3~MWLs}28<c%{wwuGFZy;4sLWc8H?+9*zA{`c9L7lH)*58OtKeSXR}
zPuO0Bxgjn5(qX$M-Gr{(YyTg(?LTmv<5Z+=JeTRUWgBwCDEZuq;$GI-*iWgf_^H38
zDI^pZ;Ren_NOztAsp8{%wHiV>x0ds9UO$JD@aZwuZw(v*DUK(C{3xm}FCs2-satBw
z!5T`yM>=GQ`{+a>)F^`xpwzuzck||)(jba4HK$Mr0dC^-7^Yn*npaAHO{cmDIUZ5h
zVH#H$&nO8d=gW|l8MUpxi-4m19D&%g6Gkkg4HLr%&#SX%C4TCtE1L#Xow@xK+`-NJ
zi>GM$^$JfBT=k3iw$_;=4AteBaa|3J<_+5ju*DRsyfmW&sX-8LEA=rTAc)R?!EMXs
z$+(MT3p~AI-+e__Kx2}1Ay9kb?IHuHbdyJv9I;NUgY?eK9!(ZWFluRGslpOPrI_?<
zOa$<{YC;h^793YVTF~MEpjs*!UaJD0@(tK*!9uneU8p>+pa`A;a6ELkECG?rJ-zur
zK)@T#Oxn0;2;1b9IvQ{`q~qVu%-nUCC2w$^k>1EWVl`-R{K`>!UcA*0oqsoqV?N-~
z@emltw8zoTPlUM3>scnFYq8cU^=0x>#hGKD0G!Q1N`JZS$gpZiN+nDZEWTaD!^Py(
zPNeEpyK*CaYg=-zGD~bB4|)ELUm~j`2C2Ootmv)GJ3;dJt(!jUn3ug$GM@Ld-`6%k
zUSZ4gvTXvSU=}%va^1Zz@0OQpdB@6$n5N5v_{G@%o3Kne9N$LaQo{R}H7<W0F#nQ}
zaq%bA+dZV|jAt$dbyfn!6iN6epb_Y8kz#}rL(G$*T!ukfCSNg&y{O);_wQ=ut13OQ
z<oPoV<%m_$ayOla(pSf(Px76^!nbJ8$@1EtxR0=B(lZ=k_bgE^;o(L!#OF>e>yxo@
zkJ>CKdfH4OP$>cgJdtWWcRChdJ($h89jxlvI(9-o66X}@4c?<fpTW04d1^BAo0Dx6
zc80IOZ@?(<B6Ja90%x<Z66)-Ht3CPQfra}Og#%j0$_T&IhyXdr$a8sc;Nj*=#^WCq
z34I{2xzTL_8iO3c!j@gRm|zUUIedK(N)4g(*)j=A7^^i{zE-=bQ-(+}w>f9#rkB>`
z1sHSW_((qp1;l-_SC3*N%U1GdV>}k4{)ZL*<DEbOk+B<pA6B}4xZqgDZQV~?XArIZ
zq^Z)$S2kO_-y1c%06MIdaTr|bqf|_pv2=8b5gs>_Ex>QDPpCe$cS>x+KVvj2_q$x_
zL+BszLd=!sD5bWyKy$d*`jrS&7+0*yrfTk&Np^7X#^bmtkkEujY!TQ_s2YWw9j97a
zGzE50<a5F2mMaDvf4hsYTUv!3u6Yd2uQC?P5#;cC!Pu*Cjn6P4Z6HJ!9`5SHvPoMO
z6YxCSUCCg@MQs?J*qS3uA^H3y_Eo*QKw$P}y*na6=`nr~(tIlJm7LoCWmO;^s*H+D
zN+~wRjWTWcTp+iT-LF&uv%ZkX57*R_QNv4|&4b4&DrX#{m&#ZmT_T&!g*#S&pbZ3-
zzBEpRXwB?Re?Epn&OnY<${%08#?ZGXljU|_c14lGr$JDZ-SZsh?_P1{?;?^qSb>92
z!NvcJP=mvt*SYV7l2$R9R`m_QIuk(eQGmwwnk^}_cA}3f^(QsZz7}lfr6D!^=5c$0
zJow1mD3eK?Ee;2NK2EojVD((08_}s^0$~9X2+5b2t7vX>jEu%5d2;0Yer`sf)4tQc
zK7x<!0NHTlUuo*&x8|hz_;lw}+kV^E@X^ntYCH4)Ly=p~U(sTKRxf(^A}9@9Y||zx
zl~eEtD5y=z%`4Da_8HaOrFOaseiUW>TeCd1G%6Xz^g+Pht3MlV+U(8l>}b`Kzo;8x
z?<!)(wvqtvg>xLuW^<o#di;d+UWG$`Ze^bD+Nbo2XDZQAzm!WLnN`J|OPeqYPiv7z
zLh72RI**F;5yQlxZWSgc=!~Uy(<)rT)DdE$3LPytgx6N_H^Bjh4%exL4H-m!=gs}p
zDRMCUo$4gF@vBh@V2%F=IB31&?KU{x;eWq|PP$8JE&qppk4qwwX@W|E6eXsPgXYg!
z_rF>`J2A+G?kW#Jt74?X#E;~@Fc>?|UGqs#%2!DHS4ssqu*}BT+rBXgin|-~@Knn>
z*iFmjMFZke=099RSGRgPJ&J;=J1x`Pf;+VP)(U!^I5*T`gw<$`%?Ph566!y}5I<>v
zYOIgEjW$EWZ|Umd^p+qCD{gook;s3(=GsUMXKwuvCAk%iu6LJ>uvrjHaMGyOQGqAE
z?FbWCes&}-j58_@f+D#D2FP1Y@@w7Dk>T!#1)_$?%_)^7=6ytKAw;-ru4OW(@jA3W
z?3nZM_)xjj=#)_c7FCs-^PA(s!2jaP)}WxT777(e@KoImr#)-iLOD|=HLO&5m@~j4
zS?u{XKC|0WB%RR`d77{4h!MJ%S@YgE>(tpl@c4J9O-)+HnIY(FEJs+f!II<3v?xa$
zgzP#A?<C=hSD{V8v3pjm@;AcaJ@)W>y-lg-`tmNa?XE3t4Mc&uS+;Z7cGHZ3u)mh>
zn4KRyQY#>;Ac@=+)RhqY>jn)lfD?*pB1MMX92S@=5R_7qv_p21xp#srGhm>=`b?af
z-6cmeV%~L&EjO>&$^xNx@2P&^IDRJdDUGUNbuNKpBrO!@*yq(ofTfuBz{^#1FFnM>
zqP#!1#4tq|4trW(T1(1NG^KmA?(J(<DxHT_3=OGpgvE+Or|j8eO|Jh07Dx^@h;*h}
zAL6wDkLn+jbJJwt1FIqKv%ecm^;8Xa5V8uFL8w(k@hWOawzxE1VRQ&F2A`G0xJaDU
zmW`sv2eeczjZ`k`ZPPMCFmqfzxi{2;e(7Mb!hRj7=fMie(xF7D6WK0)v_55_&V+XM
zU@Hy|)ayTPyhh^yDfrY|43SdN<g?ieO=WboU*&aL@WZtVJNd^4q3w6R-}tNyzWKT6
zZTRYL^T<O9C4$hq6c8tfOwjiOIPwU5Ck)WChhewC!S>18La@K<kvl4%VRlkeTC2;#
ztJ{K*2cK-2yk6FvLbuYm8OXhBtpAz1T#4f6I0=@m>b=|%f0N6X7f^ArqP_q5SfO3R
zZ>mvyq8)9+gc-Uk{N1$?k!FeF$qI{xckgl)&H}i|$;4DAs`VePlNxdxtZRTUVk6#|
zP2tZIti4~5$~@BM=nQ%IJHp%2p+Vq8dS_&9yHZAU?R%i2b^#5+FF#~xWaQj+_9<fw
zHG9*x_-0oMjjvtay04a?G)mGyXBQjz>)@i<6{Gh>%YHzl@}Ss#YjmQ^Exn_vmw^~3
zMxRrr%x))?&fyKyxq#zqQL0E2OE)UzX;^g5fU@6F=Ih5GLDLzBnI%AYy4t}rGPnae
zEl-(=MN>0n$4ntyYh3*EJ)DN$paCO?^kzY=s<K7;2YZvirR~No)qD^z1uI-(d4zTr
zD4NS986=bhS^VF05^~n|t#ImzPGc8_(Hu?MWHPh8pltx2v`vYLZnz~f#)GGKLwDYg
zYxrP}A#)ht!Y|t{nd?I4gw|)5U)vfeZi?gu7m2FGZHO3**!WYVOKeO=sEm;*uoh(x
zMkcBgI!#7J{SIKMY?!xY!$|iJ37J5`Ij7#|=vq{qXB$}QD*B-*;J%wlgQ{B_P!&ME
z&(madwQDxgHVB{spI&X2uQ&{cVtowo+&u=ae@?tx4x)8t&P{I-@!29~uy%g_lmcLu
zT0GB<qfs7HMP}Ryz@0D1pK{?$(v~tC`od$cFE!YxQ>uNo#bq@6)WU2idsCMEwGgdV
z@Lhju+1Dl^_ZGe4^`FA-Vu?D$iF700=~$`CAWx7)#xTs-rG$~b|2QS;zV(n&&l_x5
znC?6r;L?1h7n?yM>A`I6^RX4DaP7q_3uvy66U*LK9;G;V2$`S!T>2#@?w7e|Y?eY!
zjr7&h6Qd9N1!bA%Sb0ChX83x8-l|z;WC-|EI68sBxn(&u(#t&B0RId#etY&of-248
z;|f9<Ge#AG0CeSm^QybH+~Hbi(XVt$s%CN@VP9NeDX!t5PNfNGr#<0)DAEVZH*2?C
zU$IK)D7X|e-f1;oc#!VX$9a1gVj4+{fkP))@FwYwD87rNs*aE8|M@Lmeb1iV>-sD`
zhhZ0;u68j5FoNUds=uP0J<g>`8-cLEoAmZ8Fj_U#SJU86Y%3CNHXWR-z=>)!`U|Z>
zNr2Vo0XpUL$M|Oa4#G|`+XEN9x+Mmc_{%@#wSW9@({@ZT{uBl?KjSW-v8_o-_KVjW
zx~yi*eOWY!Dk*T4?5!i<jAHaWX@$(j&-Qx8nnCiQMx7V}e(}YjCh_QfVI<u3WPc-a
zxg!o(+86ykWn4i?A#<8COJpa(21~=&Lh7ps49N}8j(KCOZQ5K3sR@E-Qg9Z(5APP1
z++dJ$i7{gOQT&Y)PeXw-(JjIX%f-^Lf2AA5(yEYfu9%*A33pW%dxRV;$P%mZ-z7T1
zDZBqqCRV(-qcE7J>;TJli6+?aLgZ+z)>CiJk6af*cm1bG5H~!mqUT_AvwFc|QFkOh
zz5sfPI}4IJ|IEyb4i#%e<Xv4)Yr0aPj$lcDAM{kCxVqcKG4_tQ{hZK67pAoa(S8C%
z3_bDa4)4FzVnVv-LLoS<WMu9Z13*1zY<dhg%W4VTcEP)ID2(34n{KP_Yd|yIi>6jd
z<m^KB4nf?A1@B5C3Z-$<d)7VxEcAIOIy)6vADiNc`rV8%+#xvWaLD4TS#LDL<(Q@6
zRrS=4Lo&MH5Tr7p@^z@1oB|~I&P18Gs7E1(<>k{bCE@OhWjrV8?9xPbeyc~FMO-jf
zA5C~lV89gtGTV+%t>dBX!upL)6(w3(x3&^($Zph+#)*%M8)L&tB2-^$9dJ3Sf^GIY
z3m>}%`L)Ff<i+|Pk=hFPkLDMKG|KUAIOo)4F9HloW<S8;3tThwoKt;P=Hu<&M*W5_
zxz}LGN~$}6>oKK)s1^r;<D@$O!ZAJ-OMDO7PXc1}d>Z#_^5+}8u&724SeFbyt9=O<
z*V9bR=qiv@1Roki4!)H}<aJzmjxO6sH;eWDHE33#+9^)Y548agUMyn-^zRpCAL7m4
z17Sfh1G~ZDv?@FEUTiscxRS&*x7J#k-(qj5`ZG4O0zX#I>#f+L8lU$PL3+IQb*R#R
z$W<Ee8J8=hb_jBxna_izv>uzx0e2IfYcXhdviH)ecz8O?E_k^UR)o7*SU;>9c&7zy
z$a!*VirzD?hN7M;H1%|ua(^KKw!e<QGbBJj9gGe>1c&6rAs;iVNrF;^%4TM@d8NkX
zN<T#~7IjG^v3CL%ae}`4b#r$iQoAU2F<0o+nfJqRF|nt~o2HZM>OMmv%lN5Af!eAM
zmjs%Ny-|vVI`7y)%LrL=S?5^(tFeWa$_Cke7K7|E;o%dTY{}u>T=ZpjkC?swz~Lz5
zlBEny&yx8@*;ql*9Yp@RdX?+$Ixfi4-cD<1-%n~}d|ehqJIR@c9N?NhUVFRSyHToX
zEOb6cGt2av5{Y%CX%Nl|ezy^$)6)B#W>KJaOmwD=W(PgV#%%w<LVD(9#X(4b34U!$
z>9@&F=StK5`JMJP>qnna+WpVv;T5D<_$3FaUqbd6H{l=Wq#4z?OW)c<pa+NMZ7Xrr
z^H^>F;asc^SS6!rV3cp<g}O&w2M@3evcw6VA2c&sI&OjRVbEBNIs)LZMK3!E&Q*8J
zd;T5?CO-HBXyU&LhnL<_+~g0ZssRNI4C}swGzv+6;No~UiyzaIO5%kr-V8JuSLOq*
z2m@L9zu0@HUSYVP4R71FZQHhO+qP}nwr$(C?PuHGeUtV(Zj&ZG>Gu~_awjuuX08j$
z`|sbA&v@DyG2p9op=nsL752!xF;GF61)(|ho~RD^=*CYFk#I#H_Tl4dX`TO<dG??f
zlK!n~Nf##~#x5|Dn_BJDDwHJxXhwjw980<6d`mdmKeSUUP}xlsI5F<^vUIqSpc0%J
z=L~sP7yeSf09w0fm}g7eI@>qZhd%RZk!#_e$bz-c;gm=WJ`GgbRORQ|rw+Tw?-t>Q
z$QUolj~z#sb@=`7SBDL+X|K3W{~Ex~{j{SeF4?LRjVW!TF}Emm(3t@?1`K$F$#e%C
z@GjvyCQa%VYnRmw>os|gj327jdj-}o6Z!&up}AEmN9B=}Bo;tr{g4dIo;HFf;?ZKw
zkL1FX*&Gjbv2LQzgQ~qMQyBE2;@0Wu=a@iOa>;~N%B5mGV<z%4tP3Njp+-+oPC1JX
zFV*Cn&v~MdJBJ!yrKwC7`)<6DJEy-MXvag1vt+)Y1sBCcB2$>RIpdQQS%ameK8<{h
zM99SzHD)j%$m-K6ZaEBL50~?h_qeB9ZCF3a1xlegKw4~5pB{Nq!2U3%^AaKPBb@Or
zGGXRC`)f>VkA;n(Mb<&hwec?D%eS9=!hLbD&^&AjOf|?@;nZSB(}h*<@p!(>Q*YEq
zlL2Kwa(G;-k)odpI?cJSSBkzzJ=wH`<vY<UUbd#)4_I(`BOF;uEu9xB(<c)%N|AA#
z8|8LEQEuQs7uanND{fbfbe9Uxa6ZRB&+=Rz$eIHmsvH1@JszJ!V@y3>Nsso7_{8lZ
z%I!Z}`|8@+zMtL8IFU29RS2>c6m$Cq6+VmmzSfgdIh`ph$ooinQ>B4WCd{_!o8y7=
zF}IKIRUSpwRmUrGIq$Cu)!d!ti&VjEi9XhRF>`j!L2UEFa0mL<S1CC4_n52UPHNXN
z8|@HMH_n^O;XQeb9{yAjd~2I><Vz>Ppl96O>ZwKF$_8v$(w499GQuN|JD6w#_=bs{
zeF>!A`kp#L)ae3C0<hpVPC-ADYjO|>JeY%a7X}d)t!-*f`7f0pOYN<uL!zi6jkBW`
z4r;Vv(tYJ25i3tTj9OAcYnU6Z&9?6#UOw`|2K`V~t@OHh%wari_be#R69&V3rb@d-
zQvfo~{tKVnW+5q%XWhJHYR3T83SFsfh}8pDNB$@zRxuV<0k751$qlHG)-<h*V^8w6
zulQ;!3(6ie+lm)_=l=vE(Gf8|@$t3m?dZ9LcV_sq8#g2XSUE)3u4Q7s4*}9W3>P|X
zr=I=%{IZCAJlBSZcSZP@v-=wcD%4KPwJZz(6f1{|m0w4+%@thBEOZYa`pteAbRM&*
zpYvq?SQ)4EeGjttkM4kXL(`9Z&>(^VeohiMe-&&zc)HT@O9&nKZ16wVXenH)DT(+*
z9J(Z215n-lw4J3y*nfBfNQFK@<N;i^{h+L2#^0MAan}H&f3tq(XD1wzLYWPT{wGK&
zNF)N&cSHPif0z**U;VQ0E2p!Nol0`7la+B;<HD(QA7yvW>=5jmeGxAdGbHu>F)4fs
zq#A%4>@50e9p>?@Q213fWSRUGv6aiws|EED3S}yN3`fICcimjU?<1b2@P^VN0dRZM
zD7V$_&!-@-S3L3%q05#n$_e=jy2i!Aq>T~kE2dtkjFTOoQL(wAO!mh|t3-vwl`mq5
z37Us?-4VTMQwE~wW+S&{ust`sJ5>EJW11|RSabt2+=(_9tE9MGiI0(Mvat_On5$?~
zy7^@RBiRHI5rAex94y9-IE=&`f$=Gq+ueI8%vq^>9>JCG)g)y9-hPP%Jw%>rLNP%n
z=-NPl^A!5aqUz~bBvVbp5iR|22-XpB`Z9ri;)y}XV*$k*wnl|;LeMf9u4+$%oPu#!
zlNl67YWO-{f>7F`nrl<kWotATx0yR^sp{r4fUav+^nDb9E}MUbgY}gBUr&?D8jjfV
z>pqZ~RTC!8XNU&e|N6@|&NuY*qFyZkR(oe6@izqaYFgthP_4@`!V5SFu&H`9deJrz
zgOJ|oz_p3d9YkY7R*4j{)L+W71}DMhAeD?<sfveZydf%#QzKUU-JyUJfqx)%Xhm4`
z5+A6jX6e5jTSS`0VQpFAmm~oTbzVy@UH<Sq&wB|mr2*c>sV%5t=xYa50G{&8VZAZf
z<z+!cSPG6T!Rt>~)bhr>pH}eWc6vMJrb9VrHlUf<>hMMMdf{IbvNAE$(@1WPy052}
zU-Q!(Lh|A?@&<eaZOc}4TIBAW_rJ2=7#T5tfHL^;zV>!R&lw)JLnHag;IkYgjZ>nC
znbs1G930o%6}fwng9DcS)?RR^T=Bk)$HmQ$_dfVJ;*zvv%1ZTxv7;IzIo5*^(hf!D
zYW-gdO~<4mb-Tjp9%fcT;qTM-TvMQ>N)Q=o0J!7QlX9pxlvWta6xb$1v*R#Jf9QBu
zFH2XPtBwZ$z>|*S)cHqJwF0<-cUgQls2Q#HYs+69YlQn)NyyX1vz}Af$Eu6*I{a2O
zuraL1Tm-Ay^K0g=x;IF|0Di*Yn<Jnt_tQKM?}8vcKAx~6YH%%-M>-eM%?8t!Qm6qa
z;L5jl41t)AHlMTN%eKf&34I}?=d}<45i{tx@-#Hk^XU1|r+2n`0-G6mEUhGBMpvRa
z@Lxr)0L+=sHu6jn*I?e<w^5>#ClZa;DT?@oHgw=Vc&P*c$*l;iyCv#-htp<Dj++cW
z6(8b}yulHQnPjgy$+bX*tXwo&plZB22JemsIPM%JrXji5p>f`cqKN&?CTId}XkpLl
zu^^tLcEVJspy2i1f)IY-UDp0RWBKOYktT~$?&b1901YHU{nH=|ey{?d;gTB>8FGIH
zx;A+*kNW{9a8rb+G}z-1T6v{;(#EwG7D-LjAONMsMZK%N5-GTlDM_3?Xs`1cShI$3
z4>0W)CZu)~YJ+-I#)3vrc)E46;G6yZE<s_}c8^%Vz8-YlO`QxuI54Qr!3q8%6QaHl
z^IglV2KfDjp0EcwCuYbr*yAx#mmQk4TdzE%+cMPE9&zO9<Yx&<Q71DHt>~cuhX=uF
zesB0Iu&X8;@NN>st$?={9X8W4Wfj6GfM~&7MuSMvyv}T>VbcEx+xR@um*?6Lu2L9^
zs{P!8qS{xoyKZ{5(da<|c7n1mtvAuQ&j)kFIBtA@aHW|<qvJ0?w$p+)ae{yivr?Qw
zEr_Rw-V)YIu9V!1rD{N7zI|~Rbr(5N8f|T6Ald;zs*E3d8a@<5N3B9d!gz>61%eCJ
z&aa1czJ_LK54bOR<t|PisS7_XKyBHiQni3dvw<|i-y~SZM_u)F<&+4FDw2Owt3UR0
z80x=r^{JeFu~hbeJ_bepF4Lj|@{u1b99Kd&Zj)^IRI4~?P-waF)MdI{gvDAZ_f9YP
z+d{}=mNAH3!o4FkA^9ncbes{_D+L-<8@)8Fl3*eCk!_|=JK+N0K}Y6IAU*40hV?$n
zl~jQ0EQA#qU{i4o-PZ;TFm%Fa&OCAtt9(|l?U8$(nvaJ?FP)y&Z*Vs51k`$Oe$&I`
zN$anJDByGanf4v6;janC`^a!_7U1(rLh;0lY*+ci+N*Vl0^sKMYI``vmWow|O#tW!
z^uCB@V7Fpfc6rvKBkHQ|s*FD62AJk)?T*B!{-zj~hK<-CI6#|hIAd&!=cU2bP*=rQ
zWgQ#Xz;4CA4cP;wt{$}7@x=K6@EkD7ddVUeZ8eh#9P4q*OZ>45%MyQs?YM?BvVV^z
z_E7GtSc4@2aWaNPAZ$p)M#rQ3TBb`sgQ!!It1%V+SI|hO5bz{@Fst4m?=;W!x{3Z<
ziz;w_a!I!`y%+o_NQrY&@?eFd)o~Hq5UDwz+yD>@%(#)#NqVkeDa8PjH;psX+5)m&
zkKP4ko-AfvZTlY-5XNkJ$R+;6aLK232kK+k$=$dmh-P<)m9<mf<S2>9r$rhzzxEBV
zT}ItFx>NQ(K5-A#orhjbyj1DR@4;uahghqoWw1(zP34W^C0o4s>OfElb43_GHiTb$
zs|Qnv@RGk6YHf}0^h?K%T2`9Cg*CQd)!5EbR}6e~$=Airze|k87usA=0jQ><p;mlL
zhJocMLWU*BkcSOD0OL=PjGWUGInJSGa0w{$LD*K?fOp|_gMb>~$9V)orB9|`$;Ox>
ztq$^Z?HIKFzp(g;1wY1O@V>2#D&Of);lHgXm(E|!e@pGj&^VP&o@M^V0{6Q9dwR8&
z8G!pmK4Q^-AadHoqvM&1Rbu48K9Be%HSi0r5Eqgwc9+u}{?bT0M!-(3{6Ph2toQ?}
zOB^WHF&^k`D_?c~AYFFpbL4HlM#d0|FUVn(6q7H{^yo})5jV-tx&6iaZ{!N7#_mMg
zRWe+iK1o*hE((!1OD5D2q2XC7I{fm$${I1C4vbUC|D?UDUhR>JFfa~F_4KR}lMVkT
z{q;-Z4^<_&;wVAL?{`*g(enoU&*!UnK_T$<Gw;kQvs;ck`rbKxh<q2#x8*-mXk;5C
zx=+yONafqP$Z79j=ka-+`mVJbs+WqrYu0%uuDP_R9e23KI?9%s-Px%StqD5FgR8MP
zyWG=XHVF4INwJl@QuAUUQz#Dz=nMTtNHIak$wDV|9nihDqzh3NdDai>sleBn-JtM1
z8fBys4LO!m9gb&h*c)SGa2dgXD_u1M&ce9$9EDfgKzf&JzhI`f?1)J?Vc^!i8)#J=
zHxYN*sq(&<nVw*09W!$RH4^w*`y3c*fpSeZ#;|Z%IDTH62`sz!Ucw(nil_e4evO}Q
zh`uI(VJ85sFe)F1B_0NGAXw#{0mS{+DEV4I;^CKUwj%O9TXPm-lLiP0Ix5Y35KUKt
z)EiaPGCE;)!J9KAiNbdql8qTU#ed-pLx^V(A=)QEwj13Dg2_%&*qL)5(Pq8S_1H2&
zFIc+KW(qX!K8UaWAa=4|8)XW+heoV5$ix}jpzEVMX7k3m=XU`?oBG*hE=D%3BNlK(
zNWN#~XAN#ROD)-ffOr*6z$)i{L+tMW<njXvyxPkC_VqsA-Bz9oKm*7t(V}Q<UjMAr
zx4zE?Tie(?6U*~tqgfu0@$eSW6j}#=AEHnxvB-jI#XKA(UrlCg$_^ZTKe#pm<gjAC
zts5`kVywF3o2Z61h>inKwl+m|w_xwUFpea6?l;2R#MPIy4YD$&;1(SkBf4bU;?O=T
zxo1CHxti2hiF_;q0IzE57?1f~pj$lg&K(;xw<i|bNb};cmVI$uS>d|Q#yQ|OXV&~j
zywgZ+|1q?c-FQ;RWN{y@!sw0Orw)s7q+h@b07j?11RgL_=QsJZb?z-Fbk5_ly{X;Z
zkccxR<!(BZar>VzZhfv6HcUmS^Z>pQapciQ7;CfSXZa!Ep$y6hw2}#rD<NFvHv3)q
zhBHf5LVJPt%?NF2Eiakip&tV4t8#~g*|5$xu)w$J?^VhVO_OcZ%@?d;j}B?pUz2k!
zpgYbLX|W1j^ti1rwe|#UnvYM<3RhnOwEb+ha-sz9uG5rF0W}A^n;)>iztKhGhli#O
zGjcWWcVY!LZdGzibnC$aEXq7AG&9N$SksLqFo@R{JK}Xo89svg;NNSgHDCGaZhk25
z3jv3h$OK4zMQGyvo~eo|K&K1>T+OMw5EcA?999Zwey%|xkAuf~^LVP#yq!?yt7XLU
zUJXAmZ;5OGJ+rsOkM~UIGbj5~zY_}0b{+1NYBa42N3-bhxx0E;zZaYFSt8#YXClLu
z8$|kECX;UrM37Qj?2(u;T?}N)voB<xF*zwW>XUyhSYL2R2CZd#@A%hI+1Ku`r{dPf
zfIVbDbp;Fyk3tZA-yN}YE}AImq$PL8qma&hK4uvOhS0zMP+9s#TWwuO*rqLwC;d~;
z(4i|da%RWSe6!8kRM<N8==5aA9SJ(N{ThH0wtaQK#o$C@((*q}7CA-iGjR@alZQ5%
zs}PrVls38hmDc0kk{Ewh&uvd;BU8!|t=Ay*lTp_sNC#}1z_VQOlP6zCAB1KBYQE{8
z_v_cXgGvM3-^S?R5EsjfL@08sD{rQJX(LB>c(aYz3;-i?f-OVCa#NgTq(;0q(a)^D
zzHW3idW(=`#>y4oHL6C5#{+F^%xoHH2aA+y09D(Aok;(k!-nd|dq#_9ZS)jPzX$-O
z)~ps7XLw!|p19jk)8M0{mVk$x-Iso~JX}a4j%c1@*y_Pr(H1mAQ4GlR>DZN6Y|+!i
zykzVx%9Z4!qds;EWoY;2>lHiRDgUPevuda$2*gJP^mzH{mG(&?Zfy)za*S8PG^0l{
zY9>7+4gGr@UtXcSCR+1@uIbIhv>8Pn>a@KUT-LAnNu{@hn+rr@27N}i?eq3g4Y4fQ
zO0SlJtADsv{64M$)YHARe(jA5I|ojKV?<N<@-vPiouH$%xbJzM7d|Z^LtiQ|a4MYN
zIFG&O+SSO9ZXEsh)Zt$$BQtuy<>|qy-w_IeUO#%9)OL#u2ohEh_WTX2pB_MB#ydYF
z46d(Do7H3v5sC<eKSNz!uppZ)qlC*8PQroZ`Z#t+1O#8qSA!rX3gfrZXN?&~;@82i
zk98UW^@K;_F0pi2BzqQp5hiLt99xq^yTMqbn6r(IB9!<QXpi9tpHMwuKCK1@@h7e4
zc&47(d(r9*3Ti@6ON#ek8+UhTSEBmG)g*a6eaF3G<9*qb0mQ|YX^y5r@>Z^IWUS3;
z7;j%%YaKetwD2@??~wkgss}}T8(x*iKB1oPsp4c5<OaM?&6-lrv|;a%1deS;qGgP?
z!|KwJ$C0Rpy^iYHi&DAmO`Q9d%qD5xOK8{&2`UR$cj=|V?Q>2aV_FJBMbn*ik@x^X
z4BS#VS`chB1m=XUo(YOf>sRfiugGq&m>;+U2hS+5bN>!6XY3BpGvV!lt|Tq>QIeL|
zAQAmoDwDD*`|H97ENY++&5gVg9N0M{;vhD>NZ&>0S=_b5g)yfP8jEFmDM1`Ja}gPS
zU)sIx^E!~u4`mO_YjyPZ<t@Fe?E*IVA+ZSy<#0N8l{kkytnh|E$f<kNZQEc?861k$
zij<uAkJAU`16U@vNx;y0IyFh#B+wR<G8t`P=mknGID`@+@&X*mHMDSB%iGjuqq1eK
z0|7x2^+}kuI%5Nw>pXcGJYxwRu?SsW1uu|L7TAj1`8l}s=lX>=NLdkcL^B?{88CNC
z-p`*y)<eO>)s9onmuAeqTW#u=+_jlUPq#ywF(vZ;yj-vKLIC2ApnwwdAg#7NG~fM)
z^Ya&BAMx4un9nQ@1kI+R<2A>r*Ij+s97r<!tb+kmu!^9x=$YWz)n%fV(R2hmS=m_w
zOrDp!Z81p0%W+_mN7`D+LUzaIj0^4Al}=dsB#+!?Ryc2{fi2oy7@LYgqe{U<T)YH6
z58*bEz3IbRrH(NjZ~32NawpX(VyuG4)U|5RP|N{~{s`j*jjnRI^WiqC5Xi|`BeZKX
zOD3li+6tptsKp_vi>z{0i^9lKUYMGqCR$kh$?IE-X{>5qWqM?k1Kak)jS-(jT2a|5
zUQVE0YTY)?bLvB4ou2ELBfwvWX)0v7%mnkg9C?d!e~ZeAB)9vR^$cP}`w3Qou^>!l
zN?zqv-hJReDMH$FLcv{^k{_X@4Bo)YQ&|`(l|bB%PS~Ruul8RvgIy>@D#i*so1j+r
zQ&I*ldFJDZHU6u0soc9sqEr5SiDK_-&au(nL&59gn`?ZUKldWnr;lq`!d-iCt+RiD
zhP`W9LzDAlM?+&dT&<TXq2&6|g(1FmiW9H7<rnk(){z+a2yagd!s7(GoODi?msxv5
z`aNlwDlTkFDH||Doy!cMXp|z)<iRo+(t&rPD5zdyMJb%1)vm9QR6yU|F)fP>F@&hs
z_r}elPxZ?Y=f%B(R~%?<5gCiE=_gbo{RDFG7!BVWV}hYYYqmI5T?{iC;QTI8d|DOf
zps;|N#kk>`>~-p70wi^2m#a@peSQUQ2Xme}9)n}9i!T%9P?UepsVh;H%jOIxmZD-)
z&1nL$ZF`eg?R%>b;FLyFhf9%g{=#G8f*Otu!p()QOf5wsTua#^U-^jFsa<suIp%*#
zWx~zPqo<jBGu`CoS7J?*&DWFUL&x9#1(ya1xSZqQj2E)^hz4qIn{86Vwq(WQe*QXb
zc9lRW;W0<Nh*yCoSq$bTF63*o&7lOIyDFY!F5uT#+aRoXKmk1>Kgm+UB26~^%YzIF
z3K>+Px~^Ec0TC4$NfBh22Cvbe27_=2RsTBGnxPv&#k2Yv5~NvbLnaT-V@DLk2)8tA
zO8d54DL0|er%2;0GM;d9=84QVfb6HvM)%vG`sqtMGUq8e>+hr9^Wn{c_FO=VkSSY@
ze{W=80dMOsJj3VgsOIe5w{<4mN%1eNTv4!hGv;m_c2`<Gs{u?%AO?zb!mqc`mkr;0
zrf{*$t_~|rb)tqDX5<Udl`wYv#mW0ZJHiRC+o-&<YMd%IQvK%MjXZ+1eaY1uP<h#~
z67S*fS`aV20z6J0PpM}@f5bWBiwE;f$f>P(_Nn~uovJ-oR&V*SsQ)l%L^65iCQaMk
zc*VG+voX*}FE!Jta9Xkw#xlH%{v=2LlM59MKJXF>U8tIWkqI9neLk5zSMB<y!l&<4
zSg?96j)wqVI^-apk=<M9W)iC*asHM5Jo9~^H-*oSvuJYdVVUGZKUPNea7P?SfB{R0
z2?WHxOMnQ+{-eroOK0Gv_;Ah6tL*X8=ALD8wLp(!bmqr9o9W@p*-ejZsAf&%68`$?
zl9IN7m6N8*Xg;b)ST5*?(3T9D%UuE!zL{$=^&BiRW?w#(TgC{vh_6r+R{NFjIV$R<
z9WU}-p9<U4y%MEmAJ+;+BjJ4<QpB207HQNGFCZard(;IWC<>A6$!6Stpl{qj^IS$g
zZn!Z0PemOQ-b3+L9c}-^;FhoWiD05w!O4>BVRN<5Wx(#?3_w^sx|$F)4d2RS6#va=
z#Xe~NtNQ$H>5)rJERgzhJJ<|4e;(fat8_=l7V<jVoZB1n^N-`7?d)XH7iPCbb@j+s
zge~JH29XGA8}uW-lOC1FMOEDx4P)|CbP+{8*Sq|M^?B_&4=s)t&Fg99hY%$E6-%~N
z_3KN;SEOe2x^pFdAj0h=_djEKa|oFVp)0Zf2s)74Mzh{(FL(SMt47T!g&5cbro>1N
zEBiP?ie#K&o}q^gR^5a=QZZGLYp;eAMoJ&?Kb*5WnF%r{<#rH?7_?;v$d5J0<!x)7
z%izhnfU2^o)Y|6wy+Dx}e|0y^oRIMLIH3E~igvl<QSWcdFaLh{L%6=Z99##KfF0t3
z*7WD;ZDsDm>1d8``sU_Qi}2CgEqs%g28reB<3RqtxmFV;OBs6T=r~J-0G3FXl(4mG
zIddukFnWm+Z@M~l6BbVTE{EF9MOOu}888%@T{5dUbe@cZz`H(SQR2<>d;m73Dz#2N
z$1PTWWjpWv+=A|@_U#;#vQhcd%RZHNblI`(0@Xi56l*($8JwTyIb6-9bOSsq77$P{
zrgj4*$5kCG4O+ow+>N_VbcmQ-tgjY~f{v*=39E0om?08@RT7N5D-MH6z7{e0B9sDe
ztje*EeIs);+0=R+^<Z1U$*8tXg~v3A_jXgn#Urk*+-?1i&61LXEHq^H$jl8|U<w8%
zuTUc_rTLs07CD`4^bZYn4tS^h8zx+aLgZPfy%OFHNTtlrrjAv$b#^MI**s$krKDv{
z&21C@)i=mmGV%U|$y4uGFrHf%XK|Br*!q{GERMnvI?bWp`}A&i-<51@wYz>5hu(15
zj;I{^x^bbM(N820`gYUzjz(%v1%8&fA#M2Da<MU#yde%h>91GzGtt&s!TYaN^ba5&
zunnp3{1*6hf3q81G}a}(n(rgzuRUoaCwDVpYsSE?e%;CQ!8^1W71apMtgp<dyjmCB
zd-i}W8MN>hf@0{{Q*#B4WKjUR#5%k4itZGdo?V&_&?3PB8w<odcU@P`_-V8Ut91C|
zEBM{@s%F(g<r6OQb-pqEyB5Q6_b<JAhn(ZweFk>V6^L1I*Hn3Hv9LwsdE->z^f6LR
z?F&F3^AT6JfzYWVj8ldgaqc#>KFtE{hqs^Q#7(&WZ;H-Y{JRwy0{kGfhSeUd^MPE7
za|i!6VzvmjbF7iqC6XCnlXCvbMbzg^q(+yGgCk>W8l9Q}uljX2sA4*nPy;sn&P?AA
zJg^#--J?fDSuX}mkJB#va_CA(!{9!tnaE7}+1FltZ$9`W4A%@Gj2O%lg+*+ef(rEZ
zFEG|FZ>Nuw34aLR&;@t{OJjdBikXAewC6&>((WjeMLK{Ph$@#DA`+f!mVXXH>8O0M
zxo#&Q;fE2pX07cf;M=meSgj4~$ZmB-a>!BjiYbT#nOdniB|<E^w=9Uhbo@eTEQswv
z31lSubr0-l|A0{n8^G<^GIvnCDeWTLFLCU;e3gqG-18w#Ix+x5nZ)5ozVy3Ri)G3(
zC4OD>wIbR}W-xjKzEsWfsL(A@t048clPaN?Cr}~K@{qI*H&T2|Z;nx9t?#Jpy@aE)
zeID?0h%)5t8Ks;A)v3ndRO&IGWJqMw2OtBN^XZgd{1#-FL7jW~C-YBceJeZPETr7d
zpA&!Aq33pfC&P@SZQ8X19$L{a<NWvx_NQ{&3v883;~*=sMAtSO@}0^i()srv+^Y<l
ziI;xpa7%ULE|BvfX8HjjQxO-WzKk_x&lO`zS;nO>KQK-XaC~3u5AN{3lY`HDX$<P#
z_3LJKaj{EUXaHG(hK=9ywf;SOsMf>Z3)fW)ZhNivv+IRiB2hZIWg0xzaY@pQnXW`I
zapUX!#>eZrs5uf!{<&y;AJH#Ig3xH#!>rA=5&;|yx?uGN)#J1!5FW?=zUt;mGA5<>
z(Aa6f<vsSlssW1`!4GEYtK~`&z3UEoJ8|ZTGjWPNmz6BDL}*~-$L&@eK@D(oXf;5P
zN&|bXWO452`r|L&?G{p<?kfO){w7K}ghcmoY|t_<rtl*-@X=(m)kE~fBJXX@gp<ox
zvAo(mYB*=Q7>|Jm`;agEC8}M|VabE4Ix45oVQDx(J;S(8wcJ3|IyU0~yT|J`gdL;f
z9I_c=P&5j0H_^*^`;g$exK+msc71n%5^ayew`vM${oBO76@U;Xe&%}JfZ1+3ian0x
zRkw!#^&k?|kl-f;fUMc3)esh$!i|JFk9<55tv--{gMkppt#p;fMC;ppO7avLSj~w;
zXDu3gTweOT=d{^L$W`&Pq=^!Uz4OfpoKni)*{z8!>x;g@>mvP)c81megwKZZj)-17
zva?;CPF6p|Jv4^fnbLxxFpNPe^Hc7_EpCME>~DN?GLfcwaR}ENVksY($H~5KzWKqa
z!$CTD{~L3<l(L;3BNC*BZuD%J({FMdNB@}PD)py2?p{mnGTqJJ_t1TOxKomr7$)!2
zGqbX>mKeJ-uK4QQ)dVvVnrCW2W%jUaMEhZp=4Gf0J_cRgsXD52b-lySUQQ>MBmFB2
z^WZTq=$YvGY+t)wde@@={U2rrFeD(`{~f+1n!?bop83QX;HCdS<JCZP+-1O&QyQyg
zXrq99Gga7BxlyHsj?QI+RQ4l@?udYYTV~f4ss!0<Xh9}_hSB>8gUw&J6Y;3{e)y^j
zKYS?bo*`lj#!rFQp&^kf$h3hL+!#DtACr1#H*qqSd5d;NaEz_(reCM;gKn2dNU57a
zXZ?CyYm90H8F@S1ac(1|3cnj<Z>QoSaG@}Zv{|uW{PE~%4U%5<eeauQKHu%XF0`6F
zsP@_&=4u1eT?TCQU~{TcFs)fJsgwK0Qptd+LB*+or<4@K5V&EuUAi}5k48G96+p@T
zG_zh!KfDvY3CHHmKzI11uIjQpp=XZL$0Qijc5DWuwHrVxeQFqjSrU+HkS+Ruo-ob{
zQsV!k#r6Nip8PNN<bSaz|1Yp7{YX)yWbIZS<-pysu)&S;^Q7i|q__YZ$=3$B6$E)t
z0y2jOy0wJ9fWvUp_7G6F?EKP<EvxyD`1KWUe|o7A^7_fIi#B^4sZoZ2Z3!s4nWGzw
zqe)r(h|?Ry*p#x*>9r^q_SQ!2j#!9+r^gCOU$RLx@ujP^>%6G1wVa+*(e!H}jDX>B
zAR!W~re&gx=oYnY9V{EYB9hNjZ`!^ez&P<q&!nDPlVZgJYIEso9%Ep^Nla4Dkkof{
zM(cO17&jBAI19p`O}=TeRRDnv-RmSyp%#f_L?RB5t+5=8wA>9r%nM)vL))6DET%>4
zUwjBjv!NIEN4FhD0Wzq|@65JQT`v0tmBCavHsb6Z2Nw4cePehBuisqo$mC3pv6DO3
z9W|VuX#qE!3~g3g8XX|Rn(uEf>Bz7S2BEMTMFw|u0ByIfZ;Vis{(w*n^JuXe<*f6J
z;(eBsM!0YHKEo#kg{6LEDoHB-NNvNHhyOM}^Ua3yXZk)iA`CLJbt|{f?>KD6L~xA&
zJ|aUc^7y~m-6~~ZmIeZavn!xP)QDbuXwU2Vn<4x)5WQTY3jZ7y6o?iILA?5iQo<Kp
zma6#PKcnkC{GOECLd3MXNGAX_o2nom9=Dhk{+xJJ97E_6=ehHe&G7tB>ylw%$&7o7
z7+|zL1*Ll|Li5A=>XeuTY>7Td`)?P&@R+mW3MP-Nx&;v6rdQ(TE<_4!g@X{=KPN5o
zb=e>^=w3EWH49py=3A_p+?^&}Snhu}MxzPa-`zG=igF0EGgN1oDGTWhe>syprj^No
zgcdI$G7~q9Qa@=^sy+`4QTbuMRG_bR#Q5aqe-^9~eNCpy*D-XrG#&!=Jql>}!7^!t
zyJ4aPaap(jWwI2%iBrliNpl>Oh%qiMnB60ZmNOCUA>Ao3qjl(RZ*DPG5tdjecCafP
z;fxg^xP}@cw%(HH%Fi$rsi?4}rO&<`m%X1}&3gqJc)!sehGuirF#T?KfCj`i23b+#
ze*v>o;favJD|4atCC`4J6}Z@^L@twaU}2P1s1s_GcEc0Pd~$+y2M&NmEQ0rFSDpp1
z*H=Zf9?I4K>~%QCkNs>hYvqR@^@U0)G-s_%9oI<zp<ep2tp4P?h1`0%N{kg=0DdT$
zlPVJe;UN6|T?xx(Vo7&ePY-W_j9f8haSY%ToZb{$?hUKpol=Jv*geMcXO1QCjni?+
zmT$NdJUHIg5dvs^ktpTUs({`&AZpG=&at-pa~p=_sdBaf63P#ib|X3v$8-mAhp7a|
z^*F9^VgNGEDhK+}h_7C8FIc=gzE!8I7ma^(+ufHwo|Q=fP|AnTEHcp;pj_2S#Lm50
z(+bR81QcyUX2+%>2D09WtZh7gPKsm1aq5CZXGCdz-1cbZ0|gKlqS<ywKGce;Kg1w)
zAIR@R=BiW^J4!+kfDIg<V}(V9Wu}(PYO?xh9pc55F>6{?=JeSQogs%81Ezt3@z}@}
zwr|~5X9!|0DUws}vP<;Kn^m#$%R9tev?S8KBpv|fIJ;y|5uRnQd~YpKSDhL(lyUO?
z3Lxk<^ZI43ot>IZUC6q(DaIN;n=P**?=U?JPNWC7?T4X1&_Cl(cAlKHLS^Ox^d>#V
zqDh3*xXec!BcT!$T?Q#L8LH?1R>9Dzqg?5FDfc2{8r+CNy4nxSu{;M+qlm1FlAtF^
zD(v+nD)GYFD%zz@)f6}0vp$eXuq!6q*73Ymn(~gu85nzgjPIjKjiaSO3iSweabdxc
z0(&J-Nl+)i<_=8BcU225z{wlFPK6QW#x<0pE4c15n!wBxm;s68oy7THBCb;#J9twX
zEdmYL&~4*%$;6DrKHbrB?Xf``{hoso>0q$V^x+Fg1ExBS|HF#&GF{hM$wanEU;1fT
zSwQ5tRs5f#3eOx^{r{#ewK&9F0;1(H43@K;Zhcmp)cZWETkfy|o&kd?$akJa0$Yri
z?Cfjl!F0fM^hxDX4Oz7ITKa;HU#SM(E@{kVJ3Ok!_6c)&IacSwq-AQzjkH*vTr0Rp
z9Rm{jU2z7fT_DCKyu@F|GNpg$+xltqf-^#@W)F~xP`ydQZ5Kc61^VQlkh;tm{wlRB
zFE6F%*6tqjLU+2*TB>425iIoX`I)dMsDoTuwx6q}pD(8)1(G$g#jMZtjpg*C7qj|1
z^xudY{7>cdkBjcK7hj4Y#r6?Ht)`|ecezutR}U$kVSN+6Fh?=7w4Nr&+g<6_xl&c%
z_`Jz$Nr!b8);)V9RAr97l|@Gk$zu$X=Dp;tbJM+rsyAQ!qR@YGxKFOI0Wdr7Iy6)U
z$x?ng^M1dO^>zuK9!N9AszjX<<=f<%AU3>y&&-5ffcv?n$gvhCJl2N`nP;~eh|N9W
zm;?H|gt!-|$(rtj$VF2{36;wj2181$yF04+?RE8GYleMFlhj*oZV^E8k=c1YL1RY<
z?rk0PP~l;Ir|((wyK1KPs~CzH{Yyecmk{)55>b1L6k&)QDIk-#^?Zdhml{cUW1q*N
zXDn(K-wmO>i6bf>;c1BYf&$6Dk|cVXBhMG60`~Lf{>vaj7y=}r5~CExM8kH*<xb0!
zc|L^;GvvO`DVO$|`Z%wU56Nps%(->gR8m!RJz4-A%CsI_d{irU-hI*)VcT4Vt?DH$
z>rrAabyl%`?&Y6<6MnHJEosCCH2qeh*{aUDkVj8(w&6?Q7KQXTBQo?KwT@Qz;E#kY
zSv9}GuN%HXEPxwJe=(BGUZ3s*Q^mySVi;MqrrQdcAF2;&$W`c^Ng)Yx-q?YUPiC)%
z4D?Q*#ZFNHKj{?C&Pj&sw0mlg3i166MFivhqC;U3V<}{~8XpamvhyFM1*EjQ0`3W#
z9H7kFOk}WDu!-OvxajWc#FiA1U&vj>3MeZ4Zm|v00r%zd9O$Cta&k8VkDP^ASh)z|
zmfp-5{+8F(hW>yG6E{J(mf5e(tYC%8a96nr*b^(%1;m#(m)|Gtv6Ng8z8UrHL8aZk
z0{;&Izrk+si_rgM?2a7L{r_xS{#UL|_`m!SIVTV+emeqy1cEB;{U*NK|K*ST|A{~1
zhxL7*w)B?Iz*HBE57^;~0FXjqZiD2?dG-1gZvk<$QwKYo-LDCVd+_eSEq(5<sJDR8
zgI97RB-GcPKR<pZk$93AbqOZ3s?d4DHj9W_#DEwybBb(m4`CK>AD{=zfs_7vTdr<8
zF)5eWbRClOdl}55q@zofgE_IU4^Yu!Og$lo?KXDrwypb@YY27Lw4Vwicju*%E5vAl
z1<2$PAZXDa$=j%?Q&1ee;M#T_l(qe1O+p{N#H+v$eC!d9K5bX#nqm~E;`r>|QV4hs
zp+R&NBQh`ubOK$1s$3~%2-cy6?kQgEe^BcLT_+Ida*;vIu)hUqY&MvQk1Pxpx1<GN
zR0glqQdhaj!gk8wuhbuC5ASLL=6&Y8@EDZofQ^lJBPSwefe?(3dYO;<(a)=hIQ+fw
znci~Q53yH}fJG3Fvw8IhV&ccVhl#+z5I54fG;>Uug=Y>5@l)Ns<f!q|Hx-}Vbz}XU
zNi_YoUcd|$s2h{J;J3jcLv_5)bZ(L@Z<Dq@MCCE&dGl;O>gKt`$gkEWeEVz_M;8%S
z!x?;sJm&LiblM)@+&4x@Q~H+6T-M&~Z5s#Fg~+GfzkChnm}v$wkX&W;rk~z^)V5mL
z_v;qGX!~Vh1LYL6%R=vr{Eb+Nw>D>&g@?tZq|CXMJt!n**Rua3;6zf_*pfn6*^Lh&
zo#rgs)g=aA%v4|`VTxe6RQZe%hiRba0dfD=Ct<Dg0}p@MV?L@JWMaR7m?!Wx8b$s4
z?uxCITY%qTagiIjXgUlyYt!F-<o8KH65w`1zt<2A8WGHF&gy1>K@qG;v$e~{s8E(1
z(C#IO$>M(RIZpum<&9eZsj!q?x;0r7+5fM-aJ`bh{)62Mc!6~kK3}%x4U}s}q@P_m
zgZDSSPOgP+HCqP)3RZnhh8W+e#;T85kJxqL=+mh{cYe74b3gs5Dq%<4&d?<wd+{~V
z#+41z&%^A@Py~o+jOD=c{p6=f9d72XZQyPJ(I=AS0{|RLBRFDC%ZxBh6HjywX|X-e
z#q9HiRh;Z7TY4)_zfV5E1sj)6M98MUDfD-Xaot2@?CcrNB<HP;<b+=m597mPMU_(-
zt^=`gNX`jx0-yYYRv*vxS4JT(+|m+yMd3+WT8dwL<lqgI$dkQ}7QtptqtrZ({6(rp
zd9f*L31ckvpTL>pn^;-vc4BR`6|hOZ9we8qLzzVLV^N-N*+YDt3j8UQLj4(^?R0Io
zX)y)<@I@ygD3LDV&j!YoX%|g$ooZ<4!B@`D)5@Dzjn5KUKCru4dc3!|^06d>6vZNo
z_!8Hmkpce-{3CM4p3(E^wo;l5xR^?FZ>IqX;ypF!L*)9hbi}r9DX)?yPt^+{vKbQs
zRn705H0|(S8WS)u{t|YzoKKy`+k3LXGVt=nF~PJc*XL^3f<QJHw@RS=G1&sYS-(Ou
zz2v_B!&?FOACzdCPd5#w#3`JHt~sQ~9|*$0c{EwPqJ{+PGP`=)R2VnFh2G?0Awg_d
z?mcp2aW=VmL47CQTjBftLkFH;ph81S*N2T~HknucA|f;o41jKND}>WYdW+_<*Dy*0
z_s<zDiA|31J1mO}H*U*(=?q{FD|NkPLU4~_=7Lq#LMZ^TQYEJBK>M984CfEFLR?vk
zsi;oL+|4X;g7Rd`^&}DF4~2!f6NaClt0$V*bW&l*kB2Ofc(evZ%g_U7>L#jJ))8<^
zkBBk$=1;EQ9jUacIph7Q)S%BYen9UT3QZ0fC*8b3!vxA6xkC)Rm;QPSZ1$yajz6_Q
zHBVKv&hE|1<?{@J$)U=Bx>o4liRLg}bd@-&qG8*1@v4jnoAr$Us|LI1O8Zaj0^nY^
ze8iAQk@fLek{I9ZT=Nu|Y~cnT9VVpcF%9akVO&M?+9g|jm6;eVY*~C4iQ1J~h{BsR
z+7?zMgqDC`=b$uTI?Nv!<*_2O1o!WNn9g>zzI--$oTsY+w!-_$rk3XyvmodHG4+H_
zu_7m6NeT}?Lji_P4_MG;kga~i3GH@1kQuH-u<U2{Bx6S+NYw(_{5=|*zxRRxi${%c
ze~`)(|L=lW?~>r)sq*u<SfE#iIEm_>sa@=W&}|)FY8sIbDZ7ulyL6Hn17+POdX-kc
z)?m8|vtTBA{;FJ(9YeO`05ZodT0wBI9)q0`?J)sOO^Y^+wvWzeH#{8~AiSjm=4{27
z1S!R%dz=N7^K=_S1Ig<VX#~<g?kMJ@2Q^(6XNwruniggW;a%zYdMy8;W-1@M;p!jP
z)!?|yOOJ}E=TaA6hC1Xn{aGU@A(+3qhGm?sMakDQ{WbDY|Iq?sWf{?3WF5H0$Of$S
zv6Bei6mz7m?E@mtD=)g9lR8i!Qxg@Mg{D%esZdo)4P#4!_oS><>YTp4Bf+G4e4UG5
z2Yr&43qdGS(aMz^FLYm4nB;TGd|Z+0{tSAcRyrQuo(yBWUyKSr5OS|`LCrp<Y?B{^
zTSl%H-DSV(C5uWSUjdJ@f{L8;T76+q_hbMrWr9=b?%c+$hFa!^Wz2iOGmnmM?bl@f
z_26RnvWbTESRxg3C9mnNi{Um;Eib&pZQQ1R>p~=7S*?8)H!5@pYwf%O-jn)r^e0b=
z$mYwaNXmqyT4)g^@j@r%)kgnh=c*r8hqn6rnN>B1Qj^|i`O4pZr@%?DlA~A0J82m}
zw9S7UC_KUdM$(udf}Ucsr)Arr=NjMXNlC6a7ZISNw*P(xCskA9KcAV~oZ}PxBJ>bj
zvO&&7fm65dl1UzQPJ8}2?>N~kyL@kPbq(lGQGcKEBdBSA5SJEizZBXOA{m~NHtrcp
zi#?&mE2G2}*ZXBpqI@MN_NjVg`<!*qHJRhJxFl4&qKu$?*Om<K7Kx{l3;Xq8Yn~`u
zBH7`WOyyWGCp`D?C~;xvbD;xkV*Eu43^IA}P%Z^JsaK*dXv{b45|k(AUKZ1egQ2@Q
zE}`PCnV`XAB<|*y>_AGU8enJa#RfGZE@>Ler%<cfYo(eQF#%mdn*Bu8t)xu0?*?j1
zJtz@rI|cdJFKU4f4YvbPbJ~>_ii(56mZbk{ug&IQ8Y*$b>yYx~!YG5^^ZT;=oqMQz
z0+i$<0Po-L=6^ghy?|ae8M<%oqEp#_<KfKVHKHsHx=9HI{K(51I1gm{JYg`!pGl8%
zAR<~QHcCvS&>MK^)+oTa8WZ7?&;L3wJgqtgVm;+xToz5G?`IEhi{W#BjxdqBu;^}%
z$Z?&x)=!-uM*{U(MH%t5J{943eyPkWR{bYQ-kj;|2VmR>5opITbDbK;baP!Af8mV~
z-+sAgO;A|od=Lv@3HZB!uAK31;nrVI5z9R3@xi;l?TXKNjM69W;ez(7gW=8_o+IUR
zg+R>Of0sUhUBQC@{Na$MaX#rTe<Pj1_co)0L+3Rlpu#*^e1P$=D%PX=XBs6yw@{dk
z!p|OKg#*f~7bNUlGX?YS;Dhn8m)Z72m2n}_%qyykrY`w?0IFlCjW}OUY26f$5YSUH
z<aatTb#!YBS3cA&|MDE<-;~tHH!^^|Q!U<Nt%gJ~EuTg-8+<U4JR5TxKpX{GE?P#R
z4u}rh`_@!n9%`16uk9+%v4shxA-phHVw*+NK#WQ5fCg;=VYSY@kMt;geR+_b5K!2U
zYzS8Yi8YIL)SD3%9Q@l%-gr5Yadmv}SHxQdvG%7J=Gxc=!>o-Z7$Gb|ajH+dJE?k-
zmF9vyMS?{=h-Q!&{zB`2sNymdojzW;^SJ~=OrVnMsREb&^mvMP`}&w$Yn_#rX14z0
zy3F0BWCeOS&B8(hDA3zu+H0+nQHBp8`88G(Sc1L<Jb(-juW+*2<=z;IN))Z=85mXS
z^j+(WH^(GM+RgT7Gm(3+I;G-f-=9j+5?~@l<i4gAu?w;I%}v|@Sr8XihYcbNaFZuI
zO6#?xIdkRX6TD^7av4ot*1NRT47=qBr9>d<eBc5>4&#PW?r9wid`d{|=l0Z;uQn)s
zkPOPy|HSSV0L=o^G^u|t?X}%a<q_4~$s!&|%D(tNt_%k(HxNiy_{B=xphPVZF3|SB
zPO3nygm;RJZnzGVaoj1rW~-AOu~Yk=QQ}D{TzU?H5U;A(cQ%w4aA!@2%WQOrB%e*V
zf9AM(qm<v*$)x-B^Kz%+kl;)m3#6vEZ1N%(<$YW8u*rt6?F)SmUM0FtOMYHxerg$?
z(1i(ZI<4a0MVn#4HkqGm?Z~^`t;Gjn>WzR%v;j>DBT-q%UGJajw^$!$3FTW>@$|s*
zZPCStX%{9C^%UeU^i%#8@M7V4WhH;oWWx64K9usPhum!qw?1S!?J%KZloKI)D7{_6
zFIfgY$!;hjsewL$$adFoq7{|joFLKaDn&47YAvR8lmSCGe*C(}^nT4Zs9fD~asIQB
z!nrmeEKAg18wosXMPu=Re+GijGk9q1`9IVdMvThM_Unb$rrC9QA{cxyy&S5DUze!?
zolPC8hRApxjX~O$F9Y)j(}#riwvsxzo2ps12ZjQ^Kt+Cb{um%svik}K0|m@UEyAuP
z$v0;aO~)HJ6CqsFr_uK&M6#&Jg0zS0H^VEr{D{yoe7dKkRZ3AP=r5(~Wv((_;1g;R
zm5*n_hdHq*Kp=7V5f(YtgRoVvAf|M5S1BT1uuUkJvp+}wt!JRhm}%cdwQJ8B)igZ6
zEcxs(!JY6PyB_jo`V4xKMJ|sn<8DhtO9$h>6HhB4%ODYMhu+APi3{-0ko?SIHUR;g
z(+`7<2pjZ6tH4*hXTc-&JNSylc*6gr^Z?{;gA?Uxo_zB|mP41tnL2%gc!h0SV^|sJ
zHQNO=u2Q71?|iEm(Z?%mgL!aKt(d9Cqg=(92C2;xD5j1d@c->lyrLDnnx`+R#2)#2
z`l1V1*0_h^uGo9JH1cVp=#Xg%bv=LjgX>eVsX6=du_N87PH^HT0Yi}iqTXuu43b7x
zr%*wx)z8E%f{p(DXJt-qq-OV&g=yXXB9=+Pu<FgEuxUDx5;iPINoCq>ka~zj0KnA?
z0l2db9}M1nsX~O9ObzS{sfg#rr$qxlK+d#K-2|ag$Z?(0?<yKzo;A?n)@$Sp7)V*A
z*Y6ByXU)UfMlJvHfd$i4;&+vkDAS8+eQ8=cj612ju0^!6Vfr%TBD1&?z{#S_-OtQw
zM=%7$j3-|+b3iZymsEnQ+bE<%pqZiwAqA!_=3`kCpEC&uI^yKyNYs?>6;r$N1y7j>
z?Jh57dz?MYfSg-&egZii4hxcJ*^Zqp-U(n~e1(Gois(zkx3Nr_=u*=u{aMKG_3I|=
zV`$q7drvYNrwYr&uv7#KM!Dd!g6jO6E1G{6)&sYjWf4dtFq4`p2hf|lQFmHkDJ;@|
z5Ae;I>^QLzq{h?siK-W(lZ4o-2jO_$m$aO}?vcP0!Y{K$=i`QoZO_B&x|G^!j1y{A
z)rKJUCV>1BBs~-Xf}JTUXoUH?$W=_ngyW4tOEnk-qUSVnGG{w8f%po8;f$uY-)tt|
zM#tP*bIkIN8T&PNJ3_2(e`<L*)eIMvzY0M~YZ9=0Ta+hk90U(Z_S|q+!4s<F>T~zp
z6+<u`bT48zAz1xrq<0P!sHsVDH`;zct}cx1eo3z8-6?~$VQnyhQ}8^)bs1*bk~**;
z17}Ay``7giT(wxF^D@@B!L1omiIE5)-Fb@HzFLUN1r!?o=%J8!0A7Ob$&*P?KqGkL
z_n+$zJWYV<9l#=X^7%AShC~*Fy2KE7W6$m2Nm3bO85~4ZT@nv2##fP8N{4^Ou5qoj
zis|hG1P8^Iz0mIg+l409VnRR)zFUH>?k8tzFXv?cPzydoTFl)VGBSdG_@4+o@=MpX
z@ya0cyp-@?H5g^ALKt$_NJ&53m;4aVr3TH4i7e2kiV%LQ5m9<+&;@gOn}6!v^FzH}
zRPoAU9Q4*rv4~>4J84~zDgJm^-D!-M-&tsY{$k=Lh*6&$W>X$0W$%{f0CpA$hKoqL
zI-AmCpdz%reAkzoG@4{}nSg~9ySczQOD|<@+@=jFPpyinmBZlEB*pFSj2GfrqRtam
zOZssa^LbpOS+{x{s6CcJoHZ!jFXz|uk3PMWF1oYihZ_r6f<e|B9$~_?ojr8WbW?^)
zSQNTV^h-%Dm!|Qo(lzw>0p*a^foKG}ry$IDaiVznrnwmC747pCjV|MiuT)Y}oPotq
z3G$z?hx|g4>E@pBg-*<m+EJKKzmLD%g(52}u?^EB1@8;WKig}~07owOi-R%>t9j-F
zK+Q;W(j4Ju+B{|fJs%6|-Wg~|8$^RLnC#EEMNgGVrMVO7GU^vEE5SAEekE+Ar2|u#
zQ@R~&4*|*ZER70F=Wi6=^|K_1VC}ttoQF=6Svv$AtWF=&1Z88=z++2M%1WSrW}YKD
zq?vF?hC~kYV3z2=D3)3g{30o%M%c7oC}EVMQKfLBlut$t7(uIS0d75p?qGE9{%$LI
z<}co&V%rSM>7eM~kXxt`nzCaw{>$JP(@<KAojbqi>i)ncJq#P_lZ`x3_s@56<{^x3
zPzoA3vuf_=G`OF47#x}qL$wKa+(o^x3~UH%*my|)h^MP3|M0o2XFAwilO4tElzi8t
zRf7WFY&PbB2>?)TC5mGpi?{Z6al?ozm}6X;SUpf9D@`?XHIj6Ne1b`sStk}-7Kjst
z68$4e!ty)f03oTM`nqIFiY+r29?Fz=4XLy?!?pDX>l#J;fppW59_9JwoQ6CO+6G-H
zuJac0N-!5_8NU<mRupnjw)v_KW_1C}*;IL;0OmtWsnr6$sulL3s3dk+9**Muq58Z7
zw|7Q;f;9gR05w3$zncNOemLxc+S+b7l?#FAWcKHcOGvwS8Gzc*lLA8)1(yXxT*@zg
zwtqZb^k<xqKKxuh7&keT%p#o{1Gt-IX)x>3yx)R!Q^DYfFld6O=9Ycojlpl@V(1zK
zp1h8Rbf6;_%OUB_d1w3p5RxMa&Yf~lWL>CrjOqs=EJk)u&*uWN*cuq|ZeQlzWN>BX
zHUg4?B1S;W7B5hMRi6`46RIZWk580Q(Ai!mfg2+?G?d3Q!?`TkbK?R+43H!_3{d`+
z*o+t{T&6yALwWQf4xFq5FBzHotjx=YFgn9>B~bz)DmC5X1m*pYZsh#-blt@j=&s5w
z&p0`LMJ=ECG9lQ-Z=jq=ia7HQHC%Cic$O7eHZruD&!1HWLfnKfpI~Q}wUSF#sv!)g
zKbOX?O*esYy$)<(I1;UMe~o(kbR<f<#e7_*{KoZ4HGsv}MQ^-$s|2prJt0gAr_^zm
zbKE5f&2?=g3nU^I{Q;<YI@euNJ1>B3Bl*GEd2)=<kNAQq5EG{xUqfVm1xY0Uxe_yT
zkjC60V>>+WQ_tjaOxyZsBVom)Jf7pBIGg97RFI270>Kx3q93pG!o_o6;Ys%kdqA$H
zJ}jm?pyrEM!B+Jeu2Z$KLE63m{cSd76sF_sHZ>H-wXB-T?`L2j9}>Xjai^Bf^zVq+
z2@VnvG=eO15JVyV>%%MI)2x>WA-!%%T(-_qLvgg44#QKVI0J-(Bl^y?%KEm>fdr3#
zff=Ewk3*a7;Fx+oAK!F$ODxUmtmq>vcg@N#4lxm5go895x3<*j&=9YuY6(~Mn!X?B
zMn^Ux`G8ot(`icddrNC~i_Fx?GlGogMN_i+73L?6;Q1kAuCQw}eP=xiyB{BgFy<X)
zd8In{Cq-K6Xj}42w#Ja*dh3}__EZNY)!((mGC7l<`RcmaHT}Bk>+`IV%Ct4xFT*sw
z$AkWcdqDm*`%yKQ73>z+n|+AgD%3IILv>9`7&L`m^(RocHQJ5OhrqLd`^C4k%ZC!5
zKoICr52g5QY5CA!Kk#tOr8(=7f7i90lGuNAVYR{r1)A?3ni=0ZjL#JFOF&<N+`P6r
zovMB^s1qapCh5y$RqN(~+=I%hc0@0rgVeLqGL@=UtZhA`+Al}dX&6u4TBUOsLNpcX
z{T?Bm5vPyphl#nRdc_<(Kwh2Bf*K}8=KcOH)nJuBK_=hXt={_&B(W6t++)F`0=2{3
zi%W?+e^qu{`HM3pB_vhIzo)`v7c1@mG%qo3kR=!K0x5<Ook3STLwYo;-|s-ilwfB9
z3G2A$&b>kRJ7`R#saV`q&)zd;g@)!7A6|no)gbspG@T9gl@vzj^p99;s)CL;bdWrx
zXAcVRI+Rbe-aZlIsZ^AM25@|ipN$Hta%cVC*^VUS*aSnjre-l25@I5S1Eysp+(RKS
z*F+ofK?cUCKnB1vD2l8GdlKY*cdK|L1*Aw>*M;N2QgrysU#C|&xE6-F<ztY*!bY+t
zki@1_4>js+pjc?l^ZGU0o?r_3ibd039>b4LWHCRY9{OJdhDvq&m=7$TWw(c=zKYbg
ztJicPHf+)PH#AcsJftSv$l6!dFzC}rLG?V$;Tw}O+{<@utxmURe5OD$o60k|a@clF
z;QBMwj`<+2-m6ECR~jd&l$=v*b)`!FD3yp`YbLkX)Oz3Uore=z*s2Sq$ld{Y{ef^u
z`Y`p<w(sKH&AYjGw5P@-pmvz`s|kTHB6j6$y;1mT6;@;hC*qMk7F-3)Q8*M$*$0C^
z3Y_Z0&FT^!m0PkXFAa_MM-WjGqbqVW)jPUNKp*X;^qSE<`d$;|)4apTMzO)MiGDvx
zWuW-1cakkQ6p>8l0A=~9GQ8#V*>WfgBbCq(0Fms%0wmSlhBb*V34eQcDcsq&!_05S
zYoD>XP4n7=$g`iEptCnFuSn`D)9BQ#<53xK=U^J)-seV1mBM%d*z&a`hvOFLyh^^1
zFAPlgcu#hy6v=S-oirRm%OEQYxzyBMwusrD#g&L~>aNjKa)$PK>=O`;_GX`@Ikbxn
zW~BLA7R;qj7hiGM7?m8Ya#H3(m_m=tuD7awz-czpeL9hMKPa-{b7#gJAqgX&p~>W5
zXa^U5<R=47RyknXg?{Ru-J9>#IeBjZx)fAP7c*}p4@&)R{iVeigf@`8(0+gSmhS8|
zSH-rY>XE+ZOI`V*f83seRWLdXg|o0hsgB(p1Y1FG9#0nKpd|Y6K9w`qF9)$6fdnSM
z1W!3z<se^f%XAuWb!!Y=^M=J;7|N}Zt(bpQk@Ilx4g_4a`f3RO571vl5pn{Z&G81$
zxsD#$0#ZlQQT$>)Q)NGV>3X_3Gv+Q%ZnG2XtxZiRk6ymlEek+u`<e-L?Gb02LBwpw
zlQF#~?$yTf)9T&FuxdQ~lB&NtqUoBG&Q+N<ku{Mm>eI&%LXBbeESXh6)U1eRnGl3)
z*o)?m_P;&hD?1Ln4gC>{@`sGulc4a{b8&c|Gb80Ws&kQO6h43Abq*0WL?M_hA6o(J
z>cAePm?~T#8!-nsA1*jyA6#d>sw{pO?l8yQnfgKd4mA3XyV?5Z&J(WCR)@T6<fhgN
zZUwDBIuIALAcQ+Z<B+IUEmfccU+;-~J*f|r7`Ch-T$IV2H41Rk2TIobPk9E3bMOzI
z*UWDh)mJ*GQT(}wY$2yHBmh?Pl|6XW5|(?FRE-19k%X6`Wp`GPmt{*hv*3C3Eml;7
zz%C|_56(oF<}CsemL)S7aFm%U3OpA)pN!PR#+%>_%?16J6z9aUN$zU_4<ay%>d2_p
z?fDM0M!_1_&uXb2qtPYhC;6`=U;(L-l&g*TXxEFM9>o<!^xoXAD*z&{T%duSYXKL=
zh)jP&+yx$y6@^)^?xcDpjQ=L8QpV5G!J!bFj8g;qNf7voMgk}qktc8y8pVC!_OdTP
zbaOrP13)?l4-LB-*qu*1v`~O?btyj8!#D@iCKe~LKXgYgi$PI;-wvRgh$sq5$X$g#
zjsw6!q)&%wb$c_EK*TiMOs+O1*?@2&d<Y{Ljxf=C&jt0A%LG^VQANZ2d#3Q^s74i{
zkHW4IHzCwJ$CGgsmdh%p?0=ypy4;^1E2{D|AHR(ZI>ZXweq>&HkhT|8P{IdZD!6gP
z1B!~7?XKfn6C+S?iAAO>A&Vs)6BIKnWLMFpj$NT(844+;6FY5B<q!s(;2Hwu6+y#=
ziSS!H8y-KE{@$p$%3?@T2{|bWSQ+>V;$#8!o}|u!SdHLD!9dR~!G%CDJ@njZF*S~3
zrf#;hxW1_tJ(y#0LrdF(;YKyiADYXy;slS-6I`l?v@9G%fhOIN+5SsY@De}&i}O9r
zPr_aQSJ&VPk)#`LJ?Gt7vu>WHS^u#fC2$E_KfI`x3_fq&SFUC7%3gHxIfo{P9s<yu
zs`Y0Y5w%0}veLijGUZe(5Kh+u1FoH*bh)NFmlM&K!bRrLe<+3eu1uxdU(;tQEFr2&
z)2Z{w0k<62Btwxbp8|B|k3qx3QaUK#Nq$liV=hlP>>GeQMR<5b@`QiMM{;eagaaC=
zKSy}*&aX!5j}}?WMne~jKfAti0+m=cK;4!3ETWiRlcgy>x6I;g(vvbnF|z;~YrqQ<
z5J2+q1s~TicK3}MY3qU+xQQLj#<5%7LLp(qkASpDATXMCc;4)`eIOOTaw00Ld}`TO
zxOt5t2)Lt@^vjtm*h&P<wT6-RrQv|Y+7f`b1SmK&q2_R<dJXD+yCa!_zV3?8>y}ad
zbj2(YCaNKrr<lJV#MEh7lvY!8`3ZQyZUBpcOh_&C6=PNR3c3MG)10V4?^J80#N8?q
zMKvq(ejQTV_|{Aog)uW~LQ$*Fqm*B(va=LFqJr7KP3~H?5lkOV4RD#|n8q>rET3S#
zyqBTDq$_b=m}V6YK{&j$rzLf3R4W3c)c+51bOa7~6t9fu<m%89x`zLym6P<g;|Dm#
z-vCLx`Fa)q8L(=}mDXal6mxvAgjX=J22^gH7UhS1tq47^$HC3yTjrew?JO!q*q-_y
zzF4mG$zs{MTIe*s;_m@01D$-R*3k*0F>601Rad#7hIx;aJnJIxv8~>88kwT`HdSjZ
zpR8USVs<%lMb;Xi6~cXHx~V&*C&|*GPETvC<3*6tsAzkc4PyvTc=61#&jcv~0<Qto
z6kfs;r&ThBc7&%lY6}-yk7+;-FRJ`1@_W|C*vA~!#!!P=n@km~r(-R!R^4;!vY|mL
z?i{fDx&*>JGnP&@-*!`=7zDvCPqyLKCz75YiY7@PoT!@7Rc6mhtKG?|Q3H;7;&qdU
z*$I?$4ggQ~tmbMVJeyThD9YL?6&{Fj89yYo+t|_LNKAg_1|b*+`z`aGZwE}B#tQ8)
z@lkK8o2|=g(?QPVe)I1EhaV^`W|=S?nhGt$H5jVt<gSVxSbO^P1f|3`CwBVYc9RaR
z4UxCj7*Eq`d>hjw7v{_>cJJ!e7~WGAD(BRDXlEFTX>Fl7#i49V!<8v)gpcak-pyOm
zl;xZpw?21r)RgNUFrx|(%X13`PwCq<sA-XT7VnZ!mkqs?6DL2OwkkEqKisl!8P-4h
zAUK73$dYc;y%0D@2x9P0yiA^TSAQ{n3W9AIg*atRd5skHsYR^8@M4M?*$$lb?Gi^+
zu1S@}O?0WR)&G3p3UVGGv{y-+)T7lCBXXOLDl(bOP0-yYlxS?k_dtbKMxvQRN}um2
zA0`kCb5i*cOObGKf$;5wuG27GkpzA0C)X2$$+@?K?h=$#dR!>v63yOyK44lXdADdi
zMZi4fR>_X08VsY<nn>O6XFZ+{2~_LE<-_>#tVfEUQO*!YayqcJmQ}@5iiN5f;0QCl
z)Z&5t-<JeTY;G>XR#Rkz*fH+(Q%>^97)I3-Wp6ak8v0P=F5X-dR)J=MST{d<;jGvg
z2k*<;W8>Yse{xjGY#xF4Cn=03O&ynW>1JNts49Vu?cQz8s_M)%M-=A!<vSY8?R<1T
z1$T95<<GcSqVPF~Pv$(F%ganLdV>GEOaM3Ghk*YxkcfJYHyvBPCGOK+01l$e(mnOI
z6F`(DRwMe1^m9}(7AW6*(o~KmG=n=;Zt#HKv$}>AQ;LTt^4ZTAGv?}cvjcr{s<&bm
z>wxUpI^Wc`l^^h7C~gNzUgJ}0LL_ror~Y5sa8=_8u=I`{f_zm`L!Kos`>$($3y3lV
z0v5~g+-fGU#?G|f?CA*piv6k4!J)nz$ybNsj=aNTtY@2-We%P9MtrVRg)9MF$JnW~
z!vflHtmA-oYECv)#C*%uKATk{`XNH5_3I~9?#BC>m(eJfK`jwNXZJ6UM?S2Lt|+UM
zjE+Xi1X1&KUcewklatKHD(^Tx58t-dk&B+eq>gCE<df<)#>^7u%!}_0MQ7ep&a@pJ
z?h5utSG7Xh$nYjh6CdKjV-Imyr@?o{PTz&F8mKAzBklA}`*%knIIF)J2N%!%#v80~
z@Kf6n68zl$K86tB8ZBUJ6#10lHfeWEmGhSh_Mo}gV<p1q$q|zV#2nf28ASYd6@U`r
z#*Ej)(Vz7<VO&1o!X8AZC&ocAXez9rpb|~5amN(5m>zlqvRH34j<bnleLj1s+3r5i
z83tcTZv0R%aI^9AV26!rJgD5S$M*)m`4Ep{>eR>U<|3lw`WFCvsI)m<6VZ5;_6f1b
zynkylbd3(!QoQozXFz|B8vCc6MIDQYJP1DJLFY)jU*TkMBzEQPGw>|No5sqwfh^2m
zch2yP3pEAl64Q-VjW&m+xh_0se3^8P0$q#im+-u9^B{xN{KZ9Y23>8l9Fsku4x)cr
z=2;PNgwnyv&O1eeXpjlV_Cl5oZ0wqgA=|2pOGC34p;l-o`6|!F%D&)`<*ftAN@0sl
zPDa_PS*|2J4@IvTYGV#@1DLyYQ_fzg5BDV6r)u5Bi9GYwbYG{^K8|H|e+C%5hzE6t
z7e$2qRsL^Q&wEPe>ZyCLAQozC)^e5!XU}F|Wjut?i6SX4G?oh0I>HBzE`+LCbwLk+
z^iehcafnjW0`@t~i)jwr5-wl6*TaGO*_h1@tNUTqcB(^C!XC#Jw}JXPv#4!a+Z6CX
z60jww^HeG?2SWYsqokSof2M57FvhGS(kX!XO_c+;O*ops;uBJfvME6$Fi;NVOkUH;
z2aAe_><y%pP95jlH9J-Cu8!Q8-y@aGJkh}FBz&~weUV~4tyu^ATk&-o6;UU-m?5=v
z3Y~Lj8(XCIN@!}^TiJ%Aa;4iuksE^5X4V+1KosbGy7pEexXKA+yJn((@TW1?3>ev!
z;p$*?#4YEve<V9dGT`V4xxNaruaUK2TRMl&G?Y{hrE9VuGYYIO0^o9=VBH|TK@|d!
z`8#EVd=Xq%b%KU$qRd$RWU}DgxnUNj$a|YKDE=^kF$hN)wh88;0dhFNf2kx+@iTIR
zN31UQ5DF+CuHAPX1$c=$GDbgL`Zr_D{;Ro3FGi6Nhkg(Jv}e^24dsRwF5JTNu1#J^
zE)4W&Pt$k77zh?7J4I}-@!fHh{(f?#0`g$y5=9v)t_#PX;>L(b>$XJGb484CN=DSh
z@@s)~7%I-WKyGkIrNVdCh>O|jUU4CNNp60ao0R|Z72A2k`g6&DMIgpA0Y4rT$(7W6
ze~okJ_FKy^QVDr4<a9Vi^hWRGk2P+P*T<$4^JE~-fX8l%ue|yHQrxanE4#c~<H<!J
zMISyw6l+Hzr!jviH2a}tcGGHi71BwA7?h~Hh^%N89d?6I#%8WU=PeB{lXIj1P(}Dz
zbjo^AppAex!0KU+EZNZv_a4d`;=-pUu})>~c0x4sBrg8ys@77~2UhNzoNZ4yo93BE
zLa$L%j9TzL^(<W4T6T+obV_Pappzxi8ik!wO|-8tk|jcpLL0lAbrC6}y=YexO=@=W
zXN}S_m_N;m4ma%79|k?(*6r;w>ZXF}!j%Kd2ew9rus@hh9mgni@gRwI^(eD}0c7$f
zvei%9f$rr)mcdMVLyMjrXMi&REMG~p+g8JJC#dg9eViR-B&!Hq*VK7*n;XN6GufU8
z-;|?(W{ndFSj6>h=&VW%^WvsZC!IzO?{2&Fc5mvRMWj6v^C-7hWVNs_*UL);HoAhk
zE|$wHU6H>x5tAbc2>)a5;}YktpXwUi)Wle6?HO)zDSx@70UUN-7V7$z8u+6OvXNa)
zg26;M&8eVGbS=&67Z3*YK1%C68CBG$a&t|Kj}Xo{z8a9W6Or;&$CT#84H?EHk_@2Q
zrrQrXl#A_Gp;cOvu!AiG52w%S#<H_a;m@OW`|FEw60!H)vqbzf-ds@f>^ROsZF8=2
zksiy{Hx-Bnc}PEQr$6M%T$K$n?;}^%$ye9>m?0ibaOp*-OampAAvD6id(qf7TJLW5
zPY`hP(uAJ81g5e<4^inSVXDQH&HT^MAs)ojAXqbEX&v@Zv;GV4)+>7fkIyELVp?X5
ziz;l1NdagyQrj$lULBz#(FS!0++Wdt?{3N+c;kMbn_+W{l}167351JH32?DB<3oYw
zEHZKimp#r{(%0vP?Af?51AN~V66mbhX&%K{_7=4QHXt63o9&f$59>Oc^w?JbUdh@)
zfQQYh9{k#dU$ThATgiN~gPk+Oqe4hxKmghaAKOnNcKJ-Y%F$?YK~QPOum2sHM^?)b
zrP{QE7>>;x!-LT;!90a2;>B#G9RBa~FUKIrKr!n!DbF!je~HaJ((nb`iB&QeM(NTk
zZrU|p!lo?hi78BUq*`EWh(b0wo4EAC_%|5^%K>`?nsJ#<Q;Sv;Od^F^D*eZdBgiTC
zp8y2V$Dn+3%~mo5X@D`$hd`oFKLC<0!S(hVa9iC{9s=yE|Adp=hK{=YLXUPpdnr^$
z$&o^97^zgSIN6sWMb4+7_1x-cCF+{>Snn*8X?yB1Ds@o5qy5X&XHP!G$S!D+XY+)7
zX|7=AkQ#*^M320oq2CYVSAEQNkQ);eM5JoxMb23ZKmrY9w>Hp2pWyKZEIbYG4@yyq
z5VZ)$QP8-hSO5MQ3@9=o6kPAYJYgE+rd09L_wcUDn2|X~BIKatO2js1$`LAEw1nt7
zipZhuU{+tN3j7b~8Iq4~^k6su5v$YT9|EUgM~Bi%fX=?;ua7Y$MD_&DWXd!1*p%VR
zDNyNOkjScc(66k(2g0t1g0pMyY6}~&(~j}NI1!}wSZTA#9Bn~Q!J)VM9S}|bew$p*
zb+0x|n*&^Ox+tK@a|H7T2RI<9-2MqTQAK~=*EqLJ(fzDzW5mOqPCxuD;jh`G_Prr?
z8S!DANi$-?{5Y-fw<@{KNjjlMZ34Ujjh$#!baiwtWOkvWBCD<&b_dGpHydjt(EF{E
zw4kzCQVsQ1-te*}l^2H(r5;hfE7Gg~UkeHQ6jNpCo`yB78Ux)E8{ZmAViNzTN}qpk
zjBF9MxDemUhj}YPS-tux6vIZXql}|@c<9G=2fRW_GozaAujZ2qSUR~1lga#9)6s=D
z!gxhXMhF!iNz_Cx-gPe<i_<-FxhiLp2$S?G_Sxb$uVvM#`S<~0LnY6z;D`{i>`lqE
zEZkOx7N|UccF+;;jl#Ew*)afWsN0}Y?W;tMAd&WbZ3A46nybk0W%z9G7{67h7MetG
zH2Brtzf*6L$<ZZqH<SD0JSN7X6?~<1S$AhgSM~r6-t7ralKE!=x^$SDlpC%TU3+$v
zRxpiV^X~3e_3&UvV(Rb<6q-$DviW!0xkAt2pE`IEb~9UtU{+Ys$w%v2_e@y?<BlFB
z>Q$=&cGCTm4}J{q^kul4ZG%XSQiqWx<t*`{a7#M5*$yUahVwO(i}>FvpAImC&%t-E
zA{&9K@z3g|OIJPF^2vLMv%M@15fr!*`!>ZQEHSJIBl-Oz7Wmqh#AKQO_t441;%EOE
zOI9|?jDh<)ez6h67fcdsJ404gVATS!_~l}u_276SsX=g<p{6$Mn&c-y{xGtC#+yDS
zYVP2|ZK+NBDh_zh_sEeu@5&HkJ&9G=M4#^h!flBSvlr9s!n!Uh3DOgDW44NarjA<`
z+8;A|^Hg}`?=OD#t5*L^F7M2W<CYg9N|VX1l*0+-0ldTnw}1tg=67n|w%Fy9h3O<f
zPtH>d2FC$y2avxz9PgH8WzRJVkXx{QHn7O;1KGwJDIZlbWwJ|^#fvNwU~0h8L{%NN
zQgP;Nw&rPb0&<Jxpls;V>M`L(fLuA-v4B>JJL;+icI<GPa+0mMd6}{VsH{<Q^<-f<
z@>2*9T6Rlmo)unUg<}Hm6U(a!Z!RAXtb)iUqV5^jA<jVTR%k@{*mX_A_$#})#OxeS
zxJcIs{XVoQQ`}nNBQ}52wg8HaAwhA=ubJ~WUU<YJvBJccU_y|^g)m*IF*Hw6$n4QN
zG6;Sv+MnahDk)at#s+5X9>J1B!X$x{yQdXl<YoPJw^1$z&eOE0#+@Uqb_}0>vib>O
zL$T!Uhn-Ge+Q#D{<lNB?8qO6b_ZA|99{3?99F5Ri+cs<K)n>qbR(JyLgR|kzNY1lS
zMOM!5GvPs<@wamG9_I_~G6OSq4}+bek_)1TIJVrGf|pYwU{voOxhWKyf*BVdTfPd_
z9;lZW7rZ;oH{BCodl@b~$q8y}D^hy`w17r%Y>h?1n1+u*V%SS3;RTM7EWCf&<2Hkb
zg{?Z@gcsoW*r>0=;DS(=d#s{I&^X2ZLI7B(omq0bD~you%*FxA_NhY=jszRhew*&8
zpcM6)0FD6J8k};mCu}R%Z*&LI+aBZ{hYrY~gE*Mo>lDVDl?`oQo=~Pcd|hvTxtcyy
za}hU-ugp`9Hb03$3ar>gZE}R;E7{XG#-SNy<Pd()t-!p?Yb4SEZ6rLO&8AR&B|^Ne
zvD~*g(&dB5ks%BfUSo^Wh{ydfGO<NdL>9NBYtEfJXRcRnNy9G(w(NrCOIS=zOIt|7
zP`w(}Sw#a8e+L5PeoIp0H@U_N=Xy#rVo0z3L|DC(=F)T`9I2)PW|dCY6b#+iFbNrL
zDLLxF-f`BH*@F3MEILr{{HE;okREcU@~;kszaWpGop<0XU44urSyJuAbm%kRHs>8y
z#o-zTN&Np(-6Hv-55-vjHqfoG!F`qft1yk6mihK(-Yyu<rND5iAg_c0_Tj~(V#KZ7
z#3lzl#Tiq&;zqZH)}DNNBz5=c@(P#%+CXu)4<OBGx{I7-4-~XYW^C`k#FxZjs+(1K
z)`fB-ZCs~s8C+s-kV+ftN6<g?GI>%tX=_=F^}#AKg5sExVWuM3UCJ)FU@SXuz9wux
zy^D+3P#6v;;Z$l)BeaCS9f{I|j2(P9HoeCwIN*2V0%^ZG97|GEg7;H=DR$8{7@=UY
zGu>kUcM<f6gZDaxrCt%(x%kX}Co5*WEAll|{c~u2c9=WAgD;`jWA-#l)V`o56Sr?{
z7KG1Xr@)g<(p%ERUxasTX`4gf%L?iFtS69ZG;FpyXtCIbv55F2n5?~|!b;KO=C(cH
z99aC?6LO)VZ9-h^jh7#)2`aH(N95xf>8lvzQr^ZK$C4@Y#|?5L+c?1WkkYPP7Td|q
zY}FOQ>Yh3-M^}rg(&)FL`3xTId9mi9VF$`lfjLYVZJUv<Q8DoP)OU%<loNX32G7Uk
zmrteo&<3_A^i(fBT{q5S2n%hvA#~zCN4QdJ$0>Az&6nfMxUR4ex%XO(MupNa3ewLV
z_F-d+muZ>+N?#!(<aGl|rz)7mUXLCStK=oU)WB6&@raYh>D9sc%lWemVsT@XLHOk*
z$xY0v3>gvR@i(Ly^7&2wnn%H9lKJZRE=ieh%M+nkzN81QWA#p*<3(5r98A_~0Ty7s
z#V;%?4h3j{%zf+>tXq@EEutpT+U3v^XwYlQ!_tZHUw6zpP4lz<v=;}!$G3)#y(MKI
z;bJSnP7niFd?#8|`$(4}W%x@kMtiu3H^!1JXpVZ^ag%>k?MMwr(irLJkn$w{Gw|zH
zQzu$sZe8gSjtc?zm=^*NlreE4o%0BzPAGD)2p$3iLpelhuaYRc@uX}p;MrAZx}IeE
zrv~;HWpwJKrDLBo*!73ZFl4^tw3@r226eicSB(e`hPe6?JKHIf*;r1mvOm-HOpl7f
zosz)-Sg7|r`C+n6_C4p@YLp=93i)Bon1#nZ<RtOSgv-Q)sgYJu`&ukW+Fmdx-qy=9
z3rrFB<b^a&(n4D!{c~d^RsP=!vy+v|H;kyU>URWOzFWy`6&NJazRA!p?B(s{C}eu$
zR`{HCjo{ba{CA{H*7%GsJxB)Jps7*5VwMgDLIMKwpO0SF`Kwv8dLrCl<mEtiK&qqO
zx;@{>8)nT;o1;OJIiot=#+1L~`xF<dxlgjS649yjJ@R6vPtXl2<6#rIvSldlZgggC
zX|eW3x#?aK=X?%t$09-i325H~s;ub>IkfX=4j%)%`nlnQBA2J~wYCF+<ufo$&fT3Q
zY#)47v+{Kvp8LJGuW0cNHyQOzCT$f53eS*63Y(GzbBFk%EN9PK_MW)V0R&6tgd9dU
zmYeSnPxq2|Jwbwi#(2N3BMAiQNk^sWrNmsAfg&R9&FH0<(VG1%mIEMjc8iV$Y%6EL
z0mTByRlJyYX^Ntz;Egz>Vqs@vX|&9jr}5Ky{YoK1(ztTc|MAhAQr&IBvfT<MQE>>O
zn2wEXhpv&o(_i-lzO>(!P}PbeU*miT50a)SqFS+0OWVr&rY7?(B55Y@#4Ka<<%iy%
zy#&`BaP%|+aqm>XX?>#i8QIIErSeUu2?Di^G=fT@&x5V+!wZf>Ifd$VRj=9e(9y&T
zJmUHHsz!8@A!iz$vKU&!?CwrdPf~dBMaq|x-YoF}u6x6u(0$rS@G^#k1#(!jwx_8^
zXTBD=Vw6u&r`jE7Ec*i(RF^qD+bkAWxdwXSp6fF(a^Sa7?+iezh3I2#<E=#TOqKfM
zL^SIvMZr-8RR&z5Ab<~$Tbyj+$3wgBDS)Z$IaDwW2h@jL_x`3moNrR5v}#+Fbq}u)
z^qSYz221oUC0b~xW^!Tp%9}T5Ic^$|1;KTEbU1Lc)ypk4Px`A>QSeloHHx3?-N4Vn
ztg?;Be$vbpI<>|bM@Mc587~kw)u{ZK-9`9or`gQdnAx1fo-<Yy&K!nWp_qaR17o$P
zx)(+mG>)9NnCTilvn$RiLiO0e@PPa72ogm+cyXW>yns8TqO!$R@MD~^6Xpay*Ldhn
zMaS`lrv5!xH8@-M+nkd#T_a*>T;{W35X%wq7^6qXQIgPf5vTV)2&_V?r?N7hR|)e7
zqatvx_JF~bgDu+y>g?XEQ0R;lDBeAs;7hP%)-|!4`7+Ln@1zf-vZ+F1T3$sBqp83n
zI{1_7ClAzAIqNJ>NrHQpPS^V=GZfEa-0MlUi<ELHkRvg1r52L$S+>m3g>FeM+UhAp
z`3ztA1SD3y4zaplnWfrspf#_b_ctoswjRwAiFz<AzF|SVT|m(+wa2AB5Nh}mdj#?a
zI;0^8HsbQRidOG{1h>ezggcG!V8;#jkGmARM4M(P@m<Znz24V}?;`_|^y*@Flqv-&
zqk{tzf-^MgFDuvu@DMxCJI6qHWe=%PsnT2k$=)QAFQECcIJMo!n1PhlkP}m}jbu3f
zrGPWrzt}(}itsl3n~Qyh1z;Fg$#`9(Gg~nUMgr?^lf|RAS_8e<Rfk-qS#On+c3B$8
zgKN(l=VeYkSKbHq3DXe}snx2T%+yaD88u#w?1u4ggiJksnJHN3y(HmvvD9UPG8FW*
zv!-2JI7q8|Wb-Ai;PPXxAuIu`DAa6$^NSC~_JRP5N;UA@4c+PLExG_*PIY~@9;jAl
z7Z!`>N6X7zf9Z|UU$>$z3iDM?W~Hz7o!lq`kmhy%V{siT;TSfPtTnR_U8y2fI;FJG
z-}q@4t9`B`u7VQD9uoENsNI+!IdjT&u|+HOPvuc&sbQq%@&h`7QknBE=9&5Sydp^G
z>shPSBU~MK0x1T*TXU8mQU|PVcGwcL`~Ek;x3n?`$*%ZaQU^+CJF<Qu-9{U{qMPU;
zIRY5+im}_PU241nPr_=D<`nVYlGk5NnX5025tQ=5MpZ+<D6xj1Ap64QU_{^xg;vhb
z5}@LrY5nvYp$tL2MJK{F&|WyRclXorE|WdPg-rtI-P+%I@IkUo>uI+NNV%<uccWKY
zdytKFz2VeqCayV`@&)2>)b4;rPbD}^oFzioxt!fCDeqWoDTC;+iS;ls;H9EG4y`6t
z0uvmi>K-5KETYYbl)0T$IZPI4O;0v1f}Z>;<-pLb*H*6>)>X25C&?o87vs_r^StLZ
zrHN;zYtndr>0Yxe_ufa6h2~4G4H!eqrnl+jY8@@q$nC5M>i>S`C^tA#^JlXFbI`Jp
zuKCyV&`pw$Mz|FE1lWZgPTNT2Dz_}XyvS)Yb|57bY^W<Rrubc3XwJUl^|s3a6TTAd
z*|<{%!PFoTO%)*2d^!cy13ftfGXhc0NW@%bv0XP->VW&lIOq*{Y?8*K>;haCq0rt9
zrENT>9DPHjia?qwAO`Rp{qTV<nTEWxQ>IzYWBOxW$>C$Zf8idIV_ND%WJsWggqQBQ
zsXu8$P;LQm9;ump?%UA_6?DOx_J;DrU$xKpFJT!GwsaD{xD+8^w#9mo(8JPifc1q1
zFV2|X&a?;t`*89yseX(e6rdWHD#`sT{7_f~yrsL^z$`$xhVw62+G-ObxMQD9#h^=h
z@A=Tfl!a|)??D&U&ZhOcvbCyTij{!pR4W&4<7_50C4iujN`V<JY);Ydd!q{%u0h5=
z@47TBdC8A+>S+`!oMQGv%D}LO1VtIfZDiFwdv4_fFdtwF&q4_~YSvsUhE!ZgQMCUv
zOIZ~qo|>?3pM9GbLs}3{dB?wQ1j}d?Aj#|icNOKu;q_*(J5?kXU&0ACEXV`Zo!DKM
zB5qUP?kI%5DZT1OarBrzhdi?=Q|lUVVOk-2V4g@aChsp0z_=icS{0t%>zb$sulcsJ
z@Ls$1mY^@b&RcZK3TtNh<buBk2(qed0++T${~M_|!lwdR^DYX8q&;;`B)v&u>gpP{
zbP?WZeQ%pPfdH0QU>&#Apbs%K0sF6+k9|cFB25U~nIP2gX5rK{S#J`m2D3sJhoC-_
z$oU7i4$4&+DWbjcOl2O6<`c8Yusl#Wxf{?vCktx7Ju6{H;%{`ij@wzC%eV{OkFW2B
zNi+#Pv=bZM3&3BfQOvz?V2-(A-KIXsMl}hK8!T<dsU+zhyz1Bqkbz1>*0Q6vn)aG2
z=~f}-Hz!n(e`*`=KK$cK<_q>0mr(<pNyB2L)v!tq@;=3>kY=+VL-tVn4M0fQoD^<a
z!cYmDasW+hH)(~C=LDOup`Y}yQ3LGOTSRV0=FZ`EHRUsp19ZN;n8V(^N>A(%n>d>0
zg23G`B~4zaNoF?{I6b+Ca+32BUh1Xr>3ou31XnLEgF0i9CCb7USBMY}xfZXgf|~&b
z5!drZ-fZ2nMOeR<>PaU!rT3NQaJZD<ebUryzxye@q8QR53}Fp})VbBvF`up}A6;I6
zfk92h2#n$%)8x61t7RJF_RsM*gKj)4#@ET=gnaxI2QsaEh-C)Vr+iwmN2#S+a!i4K
zZ(@ZDpM`~g?%qj_E&GoHmr);QUOV(S89KV+CqC*l5#THzf{H1BVl^c*uoQ$jPPjDz
zQ~n-2OlP*c?%P!wJyfqN=du4aZ=>2CTk1WpGRf@<LS#SA9>8#wJ__t7hGJHbouJ0T
ztv`H2nH6<=bY7;8gYu~skCQwc1@G_#x|m!iU+$cua8q!Q{9iM02mqJh?*a@K2|!Kg
zAg`jv=&43w%;&GHRF)4eO<l_e{g=31aemNc9xVAi7p1HG=V^jsi=Ya@dMkS>;*>i)
z$Tfs!iJBm=vxQha9Ffb{SfGe<;$ku6>XjvPaL0s%Rm-_p<{^U;oLREobQy8a$oES1
z(Z|NNYs%P9M5|9QpX)?b>8=1ca!#6u5~@TxcKhQ$zf)rRf-bG&nG{&6QwkC@-}ULD
zTP(0b>u%}9kmNL{H|ZTp7D3`4*dAckvUrfLW(8L9?IILs@LXU>is;g{vWr8PeouWo
z|6TO%7{qG>tpo@A57JifS~M+l_Yh>+$e^*?4j;G2g&peR{OzU|#@*lT0P^{@QbK6~
zfkU;^a;rlGHI)8L5C?6noF##sucYx((u5pD0OaU%{o?^Iv4NJh46BROAX0c^1%H>y
z_`LUJAk!k-mNcK!;Ki|<%QY*wQVb+-%$dyLAUC!JIf(rM)0fmu##M`*g!`YQ-L<bd
zMeoLhPGvgB6cuzX2gT2^P-V|XWk)a9<+ab1MKB6J754FPzS=!{_?QC{R(Jd!q1ZnN
zr(<*hKZiRUGhwwM<}DyZ-GbUiT?L#`TcEOKWQrX$o(sJK`H%km8sU>F?Wav({y;R8
zzZG<e5UxHV*XV^moI{-BvRLKYCckD;-YC`kirbu8>rF8W8?ViPGQ*lBNCNj>knW_6
z)>jHe8tT$x%%H{Ko)oT#E?<=_8|5(hcFxSeD$Q(<vcB2>kqiXs8WEYqs09IOh#pAa
zUotLXh|s-4f!@5A;VBY9K<R*st}A+R;DieODTgq!{b=d34U_jNotwA?0Z%jmu;1z$
ztYd<=ze`yP7dbu>RF?Izx`Vu<r=qLYnx%~3&llAi9fJSWMtcE(yvB3dVI(WlD8E#x
zekmC~^Vh5$klf&AUfS5zQ2^ZL<ENyE0BTLMN^OU#LQqR_#>)&~0!farW5%#{w)J2z
zQ}JbqhPdp7xX{kbbE3A_2#&zqrMG|S?ji`MAR1W&mW<DeRclaG$?034m44W;rdkBw
zBwGIovH0#dQgF6*<RXi$2Ln@BYX?0Z)G+b9&XdKB$f<h=OvQX%?=$9J>iOr4XcbqG
zRy<<$2`0Qg!SDt1n-hvxIOMq-S`9(@Du;(fEiVHP<&O${Y{VQ?>CM@^!jT@rB#g8E
zwohVauWwX}Y&i&z9uc|cJfV<JW5KpbI=XRG?~QaeO9qIGY#}d=IN`ahYo4ekfmyqZ
zlwarD5w~@f2|O7rGPYQIsyK%+f_E5SNdeIWAN#5ae`tjC&_bF%=i~rve5a=dvEijw
z<p~oqM11##z+}gk$I`TPnt^6~1J6&I#NZ+uplkfD94a@jr@J;P6#sSUA2PFAgMoN}
zf$?&{%7Z%Y$~;z5T{v*nDoslyKeGK4r8+BS%|xi_{-BxbJZC%Du4|D=b%eZL1bipy
z@^Htk#P{ABx9y#+*ftD_@MCOk32d#Dr2ntB!jnQDl&kq5yd@8f1FJDCO{1=R;(~jT
zh0dv2_GR!TAa@!ep~m3?^SWOM^!kE9!#<HWm5Ir7AHB!_WBG*{UzwyO17AG$ocEX(
za5lEhUD^0zDxvz9{3)w2LqKcKA^T||sUKFw0nT66NKZsKNV5&(*yl8$zwE&fX0=P{
zA^JYEjx}(SQWiIjTgwz9@Mk@}|0nCgiuAo17h^#Peh#OFO1XxnLrJ(LIHl%A!FEV~
z#FTc5Z$al2*h!ysT=*55t#yF;_2M%R^809zL`Z-3AIsePXKQI#%}z#n@)*s;1Z!6X
zqDS!<f@#;SS7nZn6$P`N<)i}~dVPMV2^*_+6=)up$O7k&5u=zJE-c4Pn&>vt2_&G!
zE@d<!S->n4(ZCti>krpakP3cHfFXH-xzTL(of{NBP_-Uctj}9wuKD&%J7QmABU{w*
z;#=%@Ik7kpSu0sv{Mw)VtHTZS=KQ0<&jBnI_JVvA%X|taG{v0_JE1(qs-40Jv%Xyx
zI(0oQ>nQ}x#AR%}3SEdkKVvx{1o$+f9|%B`ri3LtGJ%QOZ_=hO=6&lF&-|&+I+QDD
zy%8d3D@tqE8qd5^3;7V=kl#)O7kDW5$Nq!X*yMVJg>(Xgw3AmQ2KXr%1&-l(MeWqO
zRz<<3jg)ZJEZ4MV^CPA2YB;i!UK;?6ChMwlu}CJwk-ZsMA~GLleqs%<MvKvT<Jgi7
zZSCNC;64g_gcbnU#HUg+c~)ady<s?Z*Qy5ndoAQ2eKJwp8Z}L2QEzcr1_)#$7P)Wq
zfe<Bzhdj2j*1H@JZ~Z@;9&z%h^Nl~Mco@c>UA%ABwxC)cH<gSC<AL4c^!9L({yvZF
zTUpnT(AK19<hhTwnmqN#GA*3_v4e<~Aa31evL3=$*j=BUdP~%M&pPwz3Ic{mgyuBC
zbi>$=a^ajHxMV8vMTLO{aJuDP&op-YEK)gmdz8V<eAwO#{7)u;RB!dZ9k4`vVh!`u
z|1R)845m09*jv>uS)wLg@MgJ_i?dw&CA|juWOGRzm?eAU>i8Yl@Jz~zk~5ON1B&yU
zn@uzmOL)@ZP*@F&xXu9j*573X_2<2P^GY8)5}mDeW}OU3RsbS;2^4y&Fc-#nbQUOE
zCm;9F`1ew}qg)x~FSRJfE-Jggq44%DeHbVA5}nrhhZ=?p7!E8=*-)M?@O<TSL2D3(
zW28jvC`aJdO`+S3OI@)~nd`0$oWQ303`Gz}^Bx~O>{j)%d6DbF9r3sLUvnU?)^fgN
z%x2Ts;8C#a2EMi3iwB^ogD{QyH6}ulCRP``Ols1E1i;E>H=H&KFp%)1G35B{f(Uy+
zgg_C%z&_T&@tfdO?AYdEO0yC(fY5^j=Mz0n>G_AT!ArrpA6xR^{sc81wXs%Uzfoq%
zjRA@h0=VEh2(Z$RaV5h3YDEoW9mjA9V#Gw*a^%}yhxoO94@=bmTpu<Wj|3)0JC^v(
ze3V3KuUf;g9aLjdCq7J(9q|9JDjG5otj`2FuqbYp<Of#`LyVsvrvZBc`*RP7j!S_~
zD0_muI+YC@bXcS>Ua#7Nx!^E}CaB;Dq50yyp#8%T0P&60)mpG2*&ub3r#Ut#p}t`&
zDj+BXhFwpy73C!kJJtI3SbKe)*o?W%8p99CFOF*gXtBmr-P)^SVrk@|W7?0i$1}(S
z84P}jT^Js22vSf!0f6Gcd8dDm^w*}i)@R&v>dJ5~oVhF>b;KLPk>6slfjs?j%m)?d
z4JX9CxfS6bR6+g@CJ)p8&3GNsz!AuK3^L->9b_`tJ({t4gGIdS5l#n_Pf<<ZC<UZs
zE4hj(SkL&4-M9j5WtK$`VNwO(f%$vW1dLMiuFlc=Vi^kJTPP<ZZYn$%I3K!DbiU1i
z)5qZe)iK5kiTC7Mp250+-hrotUSlXK6;S|qqLbcS>rrJCuWWn6wHj7x30GNT5{eG6
zJEkxD^sMz^V{zPxRLcmf*%R<gW78$_35zy$D#KeSC*zz+_J){1Dst6F`ZmVOONug;
zK>ycY;D@QFtA5vlfvQ0{C{LUv$59K##}Vz{ie=12n8>Ff5{DFdxBb`dIlB=quOS#+
z7BHDY6=oHY3lG;^@24Wcz93!NrBC9WAf<4N%Wp6)E?sP#rL5nEB3PbiAr9Zl{Iq2E
z)+Ot!JzZx4*N+bZJ9oL%jC~GQGCah12w?fwhK^X{U#sHWBsm2x0UI!K>$oe=?Y9ss
zJSa0~-f_9^1;;j!UTfDB+gM&m<zm^6ZG%+H=tvgd(5BmE1YeH>OQb8tCvu=j>?xI*
zBtA$6i3Sr)44f%2CI56^g^;ZvEt1{#CBUdq5~`1GCDw^FNo89LvYZIAFT5!&q?TLf
zRLTczh*reMAlStNm!|D)Uu&uddoNm17Fg3Dc*-HrY)u4xTV-B>yR@%Otsjs`y(bQD
z@@v{c6MS6UpYI=uhi0*5wfpAvf+KUfpo*7qXbnsyqrD2_?~;tX7!e(zj7dLWiCK>M
z-;2o4RnYd2FUM6q$}$*OGq3xfBDu{-rcw%M1sEeO_RnXB;Sr}W5aLe-RVnj4NbNL0
zaENdBhLKc+n{af4T-F?jl=lVfCbR>~Z(Jx|Lc1MGI`uFS<0blC;}C&|UG%~~j#B(_
zK_VO`m)^rU3B}Yb&4#y0X2A`l+fa^I>5E?I>SpcDTa0@Blv7W)n@W*zO_Q{c7q@S{
zb|=1AT<DpVqpq)XZRo7*?okUi=zYVl)FnY<((s;0&dPq?b{?XI;|P;VZ1)z0T39=F
z3q3vnZj@zh66-Um24uIxSk3P66Xex#+9lv{eyg7fvas|e{_e<tq@#Ue5GX$CyG=%8
zSpUvrWVXx7argzxQCs?1qc51|9n%+FkiPzO=y*R2gKz4l9Je_7{GlEe)ZB&W_9UI;
zx%wYD)xT9P6_}RH%>}XFL3r8*L64~Z*N88FM<Mi1D%>&OpQr-4r?w(q$en@2QouL%
zK_(;HwmSN78p~c@$&7ms`FM#OJpwB&;qao<rw4K-h=6*{J!#|3=TTb)uGPv_Kc#R-
z1<fPu?LL5`Wk3gJyGT;mKx4Q&9B+f2kj*>lRc{2ZI8_z{xWzFh9p4DK_$%1p?Jb6M
z+##D7$U9jd6BVLnH3Gb;YH{qbo3)H;PzHzuZpa|j;g$jsxRo)jf)7lAq;d;dKNL%A
ziMMiw%JiM{jD4<M$Zc)qN>-lwr!mkeOl!Mn@H-LQcf}CHZStOXn=>)%aG@puHKpKz
z<@7>{Pz&k<Fnyp%0eGJTyD$7O;N*hG^vYN+naLLOAy}1amTLxc-^u?sZSlH+F(o!F
zGp89s477blvByS4oSFa*EP6y0j{3OzJ(7=HUtN&nGUqP|ZnD9ug%GYFWpNA1MzgQ4
znYNzFn^#Q)Qf!NM^JfW_4UA5SZWiQvcsqCf(B6}bD65b+Y@%4wN*OfIlYuuDuD-`L
zi4sJk&XXs^L9ENE3Z&#iU;{EunxKfvZ=@2mX|@;K^55lK;sRRTDF;=raF0kVVIkUt
zFaqAlOn)~GUb!0BBQ=)G_(2B#L+xMMGx+4rCd;ypTE+?~wlrUB3&HX7d4h&f{~4!k
z+eQiGx$BTnSFY7pS#gvc-0c5~4#aarYEka{J}5}u39e34;Y<_V`(&3&;RzX@4_D}n
zrirhD&LVMnF)Fce>dkA{C7&qxBr<|PP?jS7?(vH^FwIW_uNf1MchWE1wN%CIJ9Jl3
z$egL@{@Wz1tPF%6#?4{wL3i6x=!mfNP|!d-`xO5DuZuD>KK$A?C+qNS_a~HHKpV4D
zM@Hg?3t_qh%`;AtXAr5Gav!U!CG8=qB?(v;vONR{a_~(5f91pxksfx1ej0KP^k@TC
zqzN~xmKg;szVC&9ox9a1FM5QF8{|jS{&1%5DWfW4y4n@wgF)s)lZA!9zZuqW;J^i9
z>eW9U3b@S0A*kDudl)NX-SJhCmj`HEhx?jjjZi}JOL~4}>}7No3|-DF$T$t9!}^*Z
zZ%!P!?`k5z5n7CjX#aPI!44%>W=5@}WQ=x`oBhP~yFyu2d9;t!qw;;iN=vv6XpTr6
zS0kNYj_JDOAN=JLJ%UUcF8m{kp=4EmC<P#ll!@C*JngxiiDiNbYPUF|ib;#`fGXM~
zr4DH|bx3;#V93VG{SnL$jl5!Bjm8!&Qo8S8uKGDR-|aozLB1(<rNvDk%}80s7Gty}
zjoXhg%rbCZCb4{jdgBhY^f$HGOw&nC?QZ3V;ceGyG9xdwPc?SrbhD?{4(h>=deC@b
zGd89Mbrn0Pr!S@ZCF%nTE_R~+@1l+u>uma}dw)7!J9j&TJcXpvV-{?pAG_d1gY9eV
zO_7#0R=<i^8`<;IRNPhkcb-cI$Pm$6{bhx!;if(!B{Edec)GV_MLVT685g3T>^ts5
zkxORYGGoQLklj_`-#Y(4?Sp)0u+e22*v$MX-$pFCKEC|s(xUj(Wg^16JP|s;#JG*`
z5qu5#Bl1*ywI1q-nv3FYuu`i-;M7Xtt0W^-AtrZHc$PyRrnIdja^PTIZ%HUge|kA1
zh?-!9`!;Tl^@2?BOG=BW<UWpFxMs58%_>43{Z4;Qr%H#48j0V{!((gs%hEDi0e3kg
zwH9<c>T^?Wr;}q#)UTw~$Q>YJcw-1Z-iCy?M0&{JaV8N*k+BvIDtO`~M~SVaUoa8f
z<5D&T+x*W4MxDK*Q1V)L>Z^Zy;y$DBIuH774=_W4<dREr*H-w836gRY=p?EtH`V<N
z2z(c3O1s-u{JiHswk4Hs_~MfiOJyn_O$dRVSe;j(Qtw&*^2gNj`@5QRokXmmP0!Xm
zREyLpvXTCmS~X9_0WWxD$u{m=6<pve*Q6*S4zIlzHllD(+av0}H~4Qjsdmg9=|DUo
z-Uhd}l?r<|dV)x>A@H=tYO;R^;rG1>H_zZ3t!<`lm|I}-D;J@CGN1sjEWoNYwG52U
zV<h_=<d<olA^fW%9#6A{aQ~VFCW6PB>IFejL>?d}q7$h%$hH5uU6-pob^&=AqU9XO
z{W1|4=B|mPua9Bz^6>Go`vx6@GFy1l8Hi}9D9A-c84%_$aS?Sr1u#$PT(<;eHK^=8
zZr2h6LSIv;OB=Q}(O3v%EAbXVVgjUOVlZYB1vmhA%v*SB<yj&LPHavQ9!RmV^*#iz
z2sNM(>q`_rd4SyT&Vx(|cF627JWZziV5b=#8HP?aw#WCqJROSNXcay-KFDJ)Pp<R9
zXCqz0+GplBL6HmUYIZZuEG9?e5&p3L%v6K3AZFm%<TZNR9h@@f4LUno6%?~zG53L;
z9&og=`GRcL(w(-sP1XLxa^B2f=gk<LOQlHuEPSF((p_b$uZS9eYgXENLQE|!s$l7j
zegpfz`uNC<(<Ga7iG86*9?<Na!<HyekY&@hZQHhO+qP}nerembZQC|pI<wyD>YDbT
z2Q{cwKXKQM6DRimWRen`pvcL&d(=wa6@1yEr+c}<zX)vJlK!6GXR&PCJ&OK%ABfM&
z1rq$*cb)%J#HT)_Tw8$<i_VCr-{bpZW*M^Lr(E0_GA6p4brTlkgLK@IZbzzof{YYm
zpzZB~rTYA*5!C<}cvxcBZuql19u2d6LGQ^I?Zb`3iGlCIu?{psTGKE#zVow$r?^i2
zZWcKjXd8zwJm%XK2P%n&SwD6ne)g*#3BWpyBbCaDn~hWlnQVI{*#tM`^K~t_gZZf1
zZhw8A!IkM41m|aaH9e-08BcE(^x&%1kU_&nqWVJdFM%t!WWnd0w=6o1+zc4;oWsNY
zR-+P20=?P!-A`*<SBa@A3rGJeEyLn0X!i_!<-Q#u9HV04<(<jzH=5ikO|Lyg^h0~~
zkIkOa_Xon4QUqD3VpouwwWXy2fzIh~$eJ_?w88nmoy9510y)~BlN$Fp0|iwGn0J^U
z^84ECvfl4I_;&i<u9R2nk(=f=aw!!IeGdeAR+171)E$*}GrE-h9oN$;dnuY=XR&g4
zE8-u%#|T-Ndk2Yj)Z=cUyfq{)2ZiR|=GsD%LW<<gOlI{^4e3#Sp$z4Xr$AZrPMTQ+
z0;a$taQ*7#uPUnb0az6pxEe+7m+sEa2UELvHk|toCSfp1b!v)Vsf>6z0Ggj9_eh?r
zij+&??uA$RY&&?4xWhK{RCqS-R*s|y@uQQjZHz}Z`(c1|D>%WwG~zsOlvLF==!>D8
z3AQ(+gSc0L(Y;{Wdp{NCD_SZcY1aO;yrO5gL@CFr6<ls#>ff?KSt&(8ByW1g^!Dhv
zVl)mf&IeK3obEE%U<Qo34NnZ-n9%WtSu&0v_S*WG!2SqT9Ikwwz!8sEiqCcY>@r%9
zS7Via3aHpYLKjfQ%Bj)M`bAx(FM#z__L%SazV(&D3N-iZZu5mNN*dw+{-I<_shB^U
z;^_TOC@F6l%hYH3H+zD(`2{nnY^auNxH!#p51oU+hr&3PIJsW%D-R9YoZP>-Q0HY|
zIw3~;Qi{!7+wd`Y&2(d~GYqUQ=vO$27rzotcbSd*d+DOdq-(!($P>G|?<#1c<4RPY
zpMEnSz_mHJoU?F;#nbRl6VsFL*-yT!#F=$^;gmQvQ9t%p4XDure-dkpM23!*as^&b
za5pqNHZ*2@R&lI%h&eMm+D9%T1Q#Z(6X$>YWK}eF=i3Q>qK!&IwtFf+(Z{#F^PEk%
z*8%!i-#n!Y%v~(b1)FezjHdGy;bwSBLbN_KRFjJ}(Q;rN*q@5G{e~Q=Z)h>(e4J~_
z_f$hVpyrRZ%y=pOLO@@?oFDS&k8RBcF$DU(I?jG)xG_nq{3?V3oZ}aw48m5;-0A_7
z(YyC=P`NVjMEk+uFBhQGWG7*O<fjkFU_vs=`+bjbq)#jt#Y=@d!)cAVVDd!aK`O@v
z<W9yZ+gTV0Or)Y^k=lsAaPY8E-a&@Lc_cgCKOna7MxpEQcB^F|&(E~6g?6g!EcbHV
z)CLIc^j>`+ez9+{QmjQ{qOG@V&jUQv`>Ma6O)M(CF4~r<vjWcl1gTxN$s9Hp<W0!r
z$3sw~LXd)Dq|&Z9SQ-bi>?aFvL>8a~<5$)8+`uPw3bVg1jy<$ajb99MQ1JU<t7&oR
zmnrHPk*yFg#hblA&~XOobr2VtLPn-2?0eO=laiX;a^`c*>!yo==#{Mqa1IJ#dhk(^
z@M5{c+iE#duHi!Vj(rmU{S&pM&JwuY9Np#iFd*QiESxpJPmW?NSFRJeGb~$EyH%Az
z1Jibhly_9+6yxYTFzMckc(;22EOUNESp2<Dq33u}wC(3{KY?Z_+?~#T&I6K(t>8xz
zcXZ=Z^6B!zKU^&|B9Vp|#47!W=*BX&ULX{dKmtY6Qy)Io(a22`$38mWm#T6hr8h&$
zXXIIkNe(RElPJ{fc>h6z_x%eKD9{&)j@`uS-&dV>lueDUm@s+hX)n;oDc-`a-JwQ!
zI)5yU%B|SF(WBZ3f~78KW}=7?kexcq|6pQGX1nfAR1=xAl)qWQSv2pT7elAl3EYtd
zEGodDrL8HIHSKAPcdR;DH~8gM8+0ZO8icxnYx760Rn__)R>veAj1v<is$oo39oLj%
z&6h}$$JfG&ffxz2`97;OLAy7RcKH*q#R8a7xoX6T>KDMVl<kief#e^)>@H$?@S-Y@
z9+n$60!%bm$LyAbCl~KoR5v4^+w8~WLOyfrAy*dA9KbQWUYk`8LF0r%vM!|4iycwe
z`vCP98iv^!8gxHtSf4}KXxnqelV342u?o-ZcSZJ9>A2$2i{T8wV4gAr9P;$ZUzP{%
z!#R`UH%1Ui+*I#u0!sCj-LJ0mr&Dy82`R67(jEOk1KT(B@weOOt0dQ;ar$AU-obRF
z0$_yiu01|Fz!Hwkd0K$A_xg!p#U`0SP9*<);PAvFKN)MlSHexmh!YW^_;7PZc-gp*
zfZ%=z$BU;6$cu+%E0;p38;T}Dj>!cxUfhjOpIqCn@^}O=hIVJ^gh{3}etirL{TLKG
zpEmrb>6q@OfequEUw!~D8zU^VeRvljwf{q;Jqd|)z^(HZgCls<tT*Q|ClNQ4r!H}V
z^lh^^B}~AnPu7kmQ^Lve0Og@gpbZHpOAgZsbU4`7+(f_$^voF%&!K^}39CWm7{gD`
zha4LQ_Aeg7Nxh_HvR|YBHNi#HFBRv7(daV1?A&idbI?Tfw?N@X(Lvm0n!XVLuq*yh
zsy+Kzd(Jmq1L#^J=ErQhBB_voeynU{D=xb_hMVj)WA?2b)eITEx5BhnK+?SKz?FE5
zbW*F=qiqv?6x3qTf$1$CIN@k0jXf|RD`1+#X|@nMhi%Rb!Rn7IV`DlEN`WbPyjbGX
z&MXEV!$MxWcT;D7+5@XrI~-PoDeBb9qMkkF9M2{pix!xX%2v5Y3&*OPX>BH*ZA4Gv
zPTVBvtPmL|BvC;5-s-|F$03xBe*QQPQpI<y)XeMV<4P4VaoV?Yo8|sxdPxvFAEZc;
zyovbHjyc|!*kcI%xwq0#w2}Gn<GR|L>)TH(2mG86eg`f0)?Za$cvyL-AWG`ErcgDm
zWVEk71zhTH`qQ?O!{R5z9e9see^8o6b^}43$Lq2)2y8E~vT_|ihd+31)L=pq3QxDg
z$&2=|5X){fR0)3d76ZUrT_<r$ZJS6yiMb;eL&Vj=RcWvPw&)s-1-H!x0DuTEB`I|G
zSaQ-0z!YCq?u&%Ab@V2?L?XS^vkO@H{0c0b8=KI?9zibUKE>W;?p5E)@NGvp!yB-g
zKq(=Sna+yl*J;XX(oZ=K8Flrop0U9p`gGo7Ysg4t99*L;<|(X#cgNE;Z5Q}n*N^^R
z;)#A|n6&>U=<)v=^ZwVE_dm~=M@Lm@Xa$UWO*XR&_HO#`5Ws$a*d%>j)o1|jdg^{@
z7RrL^58E8PZ%_AcaWI)0i(~t8l=-nTliwUN?$Ki)ZI9(2oeK9?7fdcVYkUK&M+Lbj
z=^d*!Yj%4O(PN(3_U+c0$~|Z6xy0`wA{~L*;|Y{H$;BNA#RPQ%?`Xi}9tRLq1>KGp
zn{YNcR!4nnC!(c^hQ?fbirZ$0x!m#)`jzFa(B0x%Sp-txf3_^8x3qXY(2>E9{lRfH
zV>FeA*MC`i$7S)}q2YV6O~mF6+nTT;t<|0VlHO~T{J+q>UvtNe8B8sLLCeV+-vJu*
z+V!&zhGd1lfpUy4LjUBe0)1W#YB;%t9zW;onvm#_im5Uc#U*}1It)w-tsI7W>)JK4
zjW}MJ3P>Te4PJ%odUU*`Jo{iEcnZRbK9!MWye#i}e;x@~Yd_skdoLBD`d!CcCB4L`
zPVq1R-WUJ4A|r(#6&K0Z&YXQmJ((}-<{O)%)g3%dL4pA~yN0}`Tz};+7v`o&0sXh?
zOj&8{<HB?cuN*%0;a7sD^_j)G^TybB+xS8w2O!#O^b}t&6b2J%&nKL3#b5q~>U_Yv
zfXhbr=+*}1p;gKOYYHW-L{Tv#m*A2+<!BrKbcgFw++iGMO`S*e>m}j2)Ol>gM&ta=
zs<C(#KLbvV1oD+*S7+tcdiC}izA((b*glo#7r8q{BB-HDfo`!nnt$ikG~G<18m7Q#
z<rA=sVR%Q)Mji`Zr;OD7RJa3_AyTS5unBQh(+O9=RdL|!8MLRBeJ!?q9#v=<yS~z#
z*Rs`FEz4BJ>!V3PDtoDdo@3K0IPo4<3@%z$QezPttU297Se0?pueqBXJF&~cGt)d2
zJkYOR<V&0?Wl5dP9K83CgrR1uHF%YyPI=kG4zuguv)codBos6Jm0;FZmyjH4y|KF-
z<p6VmqXp=RScnon<@|2`7;yvkTuVZJ?!D^=sgj)%jevYM@vP5r_6?FZ#T)W(uXlD=
zA||{qUHR0Q;6RrQ<u=rtjgj;=;_H>A5-d_=n<D|@B|f3xsm+$~>ye4XPrrJYUB8qS
z69l!Y20jZ`4qPP!udJ6)X4t=WIyvrYBgQdUt;8x%mSTP|Zssl?xnB2MY`Au-(SV6v
zj4i&j)zhjMl@m7H;Mvt98#2v~UYrl&nV>NK`$B`VlI6`ns>~A_@&Xi)-mgrx3c=Q+
z)KknmV2mI)bh!;&=^NFuhG-(sEoG<ei)uhydF8FECRo0qPNxER<1#a80Cj@YTgzp0
z!G(?28>D}{iYkGOkog6jRrepEus7*XfRjpY_t;#;L%orYgaNS0YqSe+j1F5LWou{=
zrOC}@;x7^nR&yqkS7Q4h@wsw*W-8O?ISBWpU1hC25QwC1M*ASr2*p>H#<F-8jNNNV
z3T8PKz70j^US?NS8+32?WP(<JR1kz-4Mq6$_nUKW-YsErjie}DnaV}zm;y>@?KWyZ
zbYBPwj%B=oaMlsXHOGYThBv^T&wiCb#$r7`uw5C$QkckR$1Y#v;0owt$}Kr|#p*uK
z^?)uMpKR??#?NN4e<!{{%$Uu7p<cBqz5Hu!!H~#0vTWn<%*Tj!MJ!S5?<M7dx(*9-
zOZHO{&lT|<S$UlblkPHzw%*b~2(#Z+pwo#9@-&oCr*I%X*aX=tpgs%gH#=V&1%fn3
z(AWn&BOOHF9v;16o2r&XHY$Xusm$}0HC=`!b})U9#?4{A>OyDo@k7YI=M2dz14V06
zQ1n6+_&)eo<89}3Zm_W;@3*2cPSpwO#b>i2iSWR0^pz0zHhI|;yvH=x#AQE7HESxv
z9y2m7!Y2y<+D&fwjtp~P^W9vfT7z85dU*W&Yk)V?9sre55UYx}!>>y6XLHlbcQto(
zF_iSRzg#gLc2Im%whyKs+*D6>nLX4Cc+pAZmMK~R!wr8>iHP+!qnq~v$L&pj#x+aM
zGIgp+0k_|>HRhJKOtjPi;l}Jpk!BMA!{4!Gc)u@Bldc$!+}sScr0UIUN}}V@ohlDU
zk0qix!6q3D?e<!;0TQ9c7DjVh)a?8M2@;)-oa5UR7%f3q+s&kQj~TE6gLj$K+#Q|d
zAEkYDW9chg*|3Xi+Ps7UngVcrcF+2z$pkK?bXvj1eyox#$Y)&RXLK9eM`}7AA(^<s
z{K8K)6<t2Mh@JQC8hDeYtS|bh8NYcGCJ{2iB*4=<wYzp#Z^ozV4%0V9wGBjn05-Pz
z#vg{^pFZe5p<2y@`r>UXKqgJ@*3<10^Wv+NvcMFsm{Yk*adDA5Y3c!1ewwo?I`?X~
zgE@fE4LOXb6AbXwrrXsiwqd5H=f4l9da_6a&0oy009Or@Ty7zIOhpM6o~&mNfPM=E
za?T5bUORm(K;oQJUsoRCLm=qCnv<8aR3X}Es1<cVZ=H6}98F&cLxG7~0CKoUa|);n
zHMn~940z;Nyd?l%_6$yHpn|l)f?2T6^Wmcx)XwdF$|#{h^~nC+Kd<DL1@eiPSC5ah
zI`JX7<UkjeIr6LB?=b4CryVuTb^FjfKy+?4VN*Res}mpQG}B7#Na$&(0!I}Uu_bmS
zil*AGP9?L@$}$Y_(k5k&aP{KeE{pMOJJZ(mrp(1<aDd<u`m!lRJPyh(yv>WcsDRE<
zSyXQYp-MSVjr1W13Ad4lb`t;`m`M{Li)$sn{2=p0-0D|=*?+h7pjG=gP=}yI7fpbc
zHOXa&VH2g_W+#G{l)=xG_-%qE8qTsi_utF*=bdGtcD^&p$T})&N}<Oap&F+XRp?>)
zhLq}8Sqb=9^!NU-CA9@=(DRE{VkxK<QvpYjAGm0cr9_K-B%LIh5L=(KPCf~fpqd82
zI)D$hLE`hvgkI91nZv113XQAKKWoR}$A9<N_rt^|%$cL*qnu7DRExU3RJANmw#c^I
zBuQ(lH@jf33lYHX0YkGCj=F!W(TU#K*d5|Az%k_Do{0t{kky1XAMuI6WlnoWFF5Rf
zM-GA$rT<p1NEUliY9)aW<64QEWjQvXWiQS$gu|XC*u-OW)fLvs)Ww3@-BI}jMkVj8
zX{>XTghCsft}*XG{cG~)Km~{i--uNRsrc{e%Q@mT$p&fJlHs^#4Zpu|EZ!?m*1Du{
zNJeqL<ADg((EH{pk=v2H^_e6D3J08W#s8gx33Gv){vT6ttbbIHh1Ss-j^}!HOvOIK
z<&F;p`Q|3)N`$GHgKm@X(~KF&m7Z;yEeYX7{pTb16)@t0G>FwTomew|qf=QBY|moF
zvboZY22_>nO;$p(mT+Tf&?cwrXRlO*W#7QGZsi)A8r}`f9QogusbUG>q!VLO|0fdn
zHn#-0*ZyG^J-p<#I0F*Q081v`7t2r}U!skfa4ALV#tUu;HaJvlB9b-;aUXJk<x@D_
zqMJffDSieAe?KAp4uQ}REI77l&(;~f^cmyH3qYt(u^8qk2$;j;$3O3fb-2W+D~~dp
z=>y#bEEGk7Hzr(@Q6T|Z*Q*4sE6C7?{@K&a*4Q%qW(~fSI<Q%zNp`?061b(sk#;(K
z9L$2?*yp19gxo@>L{khS*J2*3EjSTu=_B^A;?>pBo)4dC#*b>^U4f?@S1VWr1|11P
znYD$Fz?LC|_juT?K6zq_mMZJbJjzhU;SYh{_scQ+p<p0+3InW&JY@8HpLN*Qssvgv
z<#e7ABdQ~G@&}qrCvb1Li!*j)*3i^6lTK@vM|nV6M74jXZlmeZqycQZ;Fr|xD2~a>
zOmi8)1%MCEx;`Y&8<8Q+K`8(u?uPU)2SW@3#u{G5e+s2H;de3gf|Vtu3K$9)f7jRs
z+#EH^*@d6&wtingb}E6%1Z=JVWDJM7B5CxSbOqV{tAIpaAR?k}-hwWh`cT=p0bbu=
zNd7uJalL#oGmAMVC(IkJZsZjp3l3&+)|w`6)!<MEK_Ve`Fms%8rzWmUM{(8HJGXL<
zF+#*rk&Na%g$N>O@$KFA;jw4dcg>>VYCa*^^7SA+L{4kzR{U7Hao1h4u%UV-B&TQb
z$RBF>(g|Mb9K)kKBetkDkbE?Mo50R@ziL`AI>RY~>ctE+>OuY#$^>121VOegTyFH*
z*$`n>>bunMJlA@FWgXt1!l2J9Y27&5mDf3O`GD8YkV}r#V8q>IfthMJh>k$!H~V&G
z8vKi!YpAr~7E59vn>4x9A+-onT5NYjs;odANjS4kQBIr)lA0SlxY$%kUk@Q`NH;~;
z&nr6XKW8=nnEY;5WS;V_UyW7VX}yZujl2Wu((sl?V%tP|>@DOHb%1e#hek<{(;i_3
zKi#ftodrF3W%9uFuKP%PPRyb4wk=xncp_h-J3gmFrEtopmZKd6a^6XK4M{ST+i&$?
z-CpRWK6(3mW3^HUPChZ7(mcP@82nenaOMkX`kxWQ|Bu^}7u2=JeNjJ>!@rchE0yqL
zolz*ZX@z0(yq4lX$J^zlHSDmuEG`m&*DdH|i8I||Wx<60Wz~t;87ODs#8q~BstYx$
z*ZOSc-DG1jyZ<MVZ!IN7rN0hKw&Oj%v_c;*T`X;dbrABdM?nm99)3CpBoL)|P)D-c
zTWO4y3<>drld~3$cyLTcX|Qx_nV?xiFliS!V`<YJn1fJ~`Z#Iqk5aI~;kkAh@%vbH
z#p+E;2{7fmvXmVRMoTje&=A7Lq6E_KF6Sv&C8ewa|Kp-wvkaG~{3^p`fxh|o*-2oO
zHyKEsB^l+)F9Vxy+de<n@m{j`6Cczo8vt2$b8M2>44o!j`LC0B2XszV@<5)-hL`~~
z?#+ozUQuSNl7hd1o&n|y9@5jHW*;z9KYH!B_l@44HPfja81?zHlY8N3e0~XK^LK`(
z*j#g9A7T6-B?9t}jdZ|m4hzDapc5H&Z7~WIxp}qN!BF2;?f_WyeQtg|th<mGf4Hw-
ztTud<c$0VYD01&>l^g;w#98U|IUc2DUP&6oi&!j&qXlZKtTA_3&<c<vR{L3FZZgkC
zodEJf>rw#N#$DxR<5}|wFF;GInu*Spo>w71UjD2ZKRQ;$#4bqZhj4Z6>V@N0cD*e{
zH<jq{+*Pa0aYcE(^)%z@99p5;InU<~4hiiM^>Wy++%p?9&^tJ+gG*{zr&Rbedh0LK
zK>nfGke}!QY~VlHGfNpjPe}YJZ%ohgUl5O`aQjU!pcJK|EQS+uo>0*k!Rdz%L|2K@
z;8{)E2H%pX&(I18<pt8RHh3|`r&Hnn>S|<O;cPDvG(-g|Q~|humBu;mIjvN^;vf60
z?%9|Z6Jn?sYghE8=1R3WhtbB^iP&lOYFkDPt#bl7TTczLje3s-r%VA3@nHuW^XC8r
zlZ#8`l(NW6&+H1m;_d&{+P(KbL0Qt0Bbwp79^0gbV-ex7JrQ4%|8zudHmz#Nz6qD#
zy<^gnt!0=qN=tLHxD=5|?TMxN)we6%Dj4P&^c~m|qT$XZr(J=NLvRJ)&@pGi@}H4n
zc{_kQ(tD}1mhe6fgW)(troix_7^R<_P2BC9*zU;K-s7+Y>?*PZ;GBH%pgff-oF`Ln
zYT|3!`vtyzty)zlBYX2)0~!Vef3iogY%%;jcq=|8Y?{0DF=W^*R_tf=oj7t(g17k+
z8S02V?0?Cm>mgvYD)A5@TQF!f&-LK`>+JcpSaxMj;7W5<PP*kWSp@LfW}}$sabB=s
zD-65UI`a2?Q?+lIQ!$b!YqJgq3WGo`Wo1|Hz=8`Xt(jD_@lkrCf-1)C-l!{5EwD;M
zxZc5^EXKGZ6>s7uDn{g77uh*odoit{D`w_1=H);XL2ic0vhALpuZ*X<dzXgel*w54
zmkVX+%P{bGF)nGw3>+~`MHew{GpM`_5}p2IM`!q~08Ps-cFHx#Ixn$;aLDxdr0TW?
zmWtBX%1(b?RlX0ngx|I8)-V6ir;irsR7*8s7%A_}G(&|p66RZqN<?wPVZm{odciSs
zbyC{Rgm2!IC;NJ8wO+d+I@mNR!Vt%Wsx4c8%$zIc4_fLVypoGUK&~R2N+Cr*X}$`g
zl+ztRh0&2pTs6GNH9fXhBjmfhqezIwY~4a_0pQbEP4|AQf%rdu07z)e`&A6{o}K;-
zvxCG#$!Z)b!aU334&|vZ&TBMg#D~)LlC#tIxLiK&e78|)&rd_a&n%978c-6avB_Z$
zT|7p_#vNG1uR#Z~Gy7PO9RTbp22l4Miy_uUoF0hzfn=7X^|C%MinU#g92y*4Ih{FT
zNgfT>USS*Ql*_m<uo}=moilry#jPEBfC7B-g?qt)y+Y8HTu6LUa-hVtKju^mPC6kw
zUePX6tX)-;<CtkFaK@jcAwFOv&h`1b&cs*N<m7At`iH;DVWWKTp6d&s{lg=n)pA!q
zS`w?=nhNM=q8gf^IF&KJP8OP>Boa)~sMSA{&^Ub<r?-m$8EXT8n@{7j{=K{)m{j1b
z!#a88V(cbMU1ponN>3t-y>sxAjmsNvwDjDk;9ip9cI;jL!(uB}LZ0J88TsA_VoqED
zpULh|N%HDYywE(EG}RcWB5pj{ArC5A{;{3tw`1ToXhP22{Tn>HS<0Wbyi_p>VbXoh
zXrec-Tg=S*^^74jjqieGLkz4{RM);sP+lvbLsG4y(4omtS@jZL0>6LN$ntt*Gn@u~
zklWD3<6c@yJdmy|ganZ8QdC#tyT8pMvZ*7`T>4|g40bV-IGJc?6%Y@Sov<qPw4jn(
zGV$95xw1TAlpzhY&nN+1i>O3!@h2U&u!h_w@U2Oxew5>ep=O0xk+mce5J3g!g7d6$
z-b%^hNjBa)76w(btx5p65l@eZNrJ<ghFAofku6VVMUcljIa5k$$Q{;K2U;)$G}!Qx
z@zpCTrJx`(F$nPFgrAPa^{jLj*+V%`9H#u_q=U6CSMY+4zE~hhag-eymwEE0byvm;
z>C!#3!)^u_D=m?#J9^I8;!RH;+Tr8pNa1#O;0bS|CO&5~)g{BWJ6#)!T_V3Oy!H^<
z<l(&&x@2N9XR3oQMSgO!0~Oi{^k7DnvL)xyV176#sT6+fCo={#(S^f>w5Wj-_x+v=
zaD3<19<WzB*2xqC({J`=RU$8<SF)k$>Z0_0O-O?yfgnjob6*|yhow$xD+oogkd`fm
zim^?eb;cA;#c^^XBYzckcekwVf*t<W!4}+OAK02oRE}5#7SG-LY9x<DyRpL+I*1>t
z-QLJXFuHcy86A(CG&S{zzKMePnhY7INY%Tk=in4>4Sv@-En}(GTm5XGhB*;e6x1vr
z(Cv4jAvcZF9@BSSZ)FVD#1!HJ@z$h-OIMLpTE;ek#_>5;7%ceze41w0{Um}aN%;#%
zR{=??8YLe`SA?QJ!jcpIJs9{Id+RcY<1OFiVG)7TJI|iz>1H`KnLS1))0-`6Y<iy2
zsi@;uBg4{aAz~DTGBR-G1!jg?4;(aV6#Mxu+eV$j9K8l0Pkehec*o99lkHd2mEVBK
zaUEvtdB)@4wBET63>&0j#N?Yf^7tZ2(dq(8USf;k8;h$DUId%2H09a?;$iyFiRt1k
z(rD?wX{qx+-eid=dP7s6>NgPZIDmg$G23Ebf~{+GI9-$CrZ8ae(1L{Se*Zcb$M>aO
zHo(>-QyNk5Glpo}z<|mBrKg>;^@T6vA-7RT=84_8s$^$_xlhyjm<GuDX&JwypX+8#
zxp#D%agg}+8Wj~nrdcdCcMMTYOLCoLdrg!%OP_Zk@DGThpR}D&W+x3*8c!h!-7=C&
z$ex|^w?(e3pzBlCNBw*HLARrv$38;`JL<B>7k;jP@0N#gQ`f^#@_cgPIE!X{o*J}0
zmwt);2%fjE_B<K;4d4V*0>ckquR<=hAYB<kLX8Z+@<+9^g{@GLa4pSlnvn{9dUWP*
zBaYXhn(m1Mt|Y4}=K*m37u^>J&Vc|8mFGehF1vGU4C~Tu*-1}Oddh7n;pQUMTfM;^
z64a*rFFgQv8QexE7Ii1m=aRD}5QWbf6;1T2_Q<5sME&gNGyEaly!JVeJ?68{@8`Dz
z*B6FvUt{ScI~~L#)s8G`T(go1fuMoL4i$R2;rBJ-^2H6Shwq9otsa4}p{+yfRq+rg
zE9|W@D)W{E#g)QgV_W6X9pY3a{z~qCP){$^rMiV46!>_7>w&!Hk&ZXNk0};yjt}T*
z!cz4T0a49RRr848yyl};?jV^<q~XOjS%1ehVRo~_iv`%z)kqxr5NTaAbnI<;c69F&
zPHz5Pz)24h_b`j-xhVf{gTI6E9es^Newz~s*5Z*fA0KOd+CpWwY*13<>gz6CtbMXg
zeh7l%CyZg)2m4QG;RcA{VG?SvwNqA!n`7P^8pKc1nHt=HV!B?m_o0bRV}Ut=pQF#&
z&38udLTQBT?NQbukczP;Bw2~yg;DGFc!9|B#P%R#!G6^f{<VLp4wJn?EVv+Ow6N@6
zJMJAM1qi^p8RHr%|C0N8j@o^dTn`Rx>()uHk@w`<^P+|6naLYCM$eWe?&dtzD;Cmp
z>4Uq*4?HblZyOn0wFI%Qw%iFHb7eN0PMD4KA9_emx_Tj7viMx*S~m8ug-jf(*#S=F
z$ai0`A>STC#*qSycL&7Y{q2CWgcd#5Yz6hL$V(ia0C#YgNGxP9pIxADarPkXy6DyX
zAtF4RzGlVVC^mbZCOt_Q0!8nKF1>dw@4#R*$#T^*f46%?#pIy)_N|MiOk#UNrq>c{
zdjP?RXF>k$Yp<;bnlNl7DN|WVy;Rmut*73wo3ZfD!_r>De6aZQhK927KkwFp>Gy4z
z7JA*GyoPB9a$N}I^#?R{ElUnKC8#NFMGo!ja#RRRY1L$u>@%Hjy%PfH_#_6(>i%-G
zTNDip<n={S^(FDk7;r8>E56^NaD5I{u50~BEsS!mXl87`xjZ(|QBR~JPOsMzjYVN=
zo1n(E+Ssu&om9<(F_pcP5Gd^8S!|IYK4{$v7y*5m1&c371?zpAf|>l|v``t%Oe_N)
ztPNaXX^aq^+O(3z<9>V1?(%Zj=#KgOF-^o#+*BSpw*-b<J8deu1uTod%pl*jS9+`o
zXVrZ4_QG`)(Fl7?6U;}9sd+K!NPPJyLN-)2@V82x>XrM!Q0}NRxsQ4++Uylf*Oix5
zF4s%o;YxvLWI>Ie=lp?;$%qo_1Saf8ec8f$-9f&Q764M}k8((v1<;OJu=#)Y;(7iE
z_K9H6q!^%5BrkS(I~*dC0WMFuHB8koct0VDn?7?8_x?#}k+I+XuBMc#W=9%V7weL-
z3ny5t*5nq-;uLbk5*?ZiILMt(EEqJg7PPnAS>q)PK(@^WVqtDY9KF<C5MegdNpQs}
zf7;r`t>SJAEm^{V{#K}kDX4-AL~T)icsy`7bwVy1ZKNBhJ$NM3xg21_yYo{=x|(BY
z9?|&DA!m;|P?dQpe<D2TS;Uk-g4-j1SIYJP0?+Gw(A)Wp{3_CGMN0t<V*q^|^!4Hf
z1>mzjNUR63;pTieojBCjium_j={LRIHgKoR%rKQv9Cs|-=k3x!i^dbpH_V+V$%NB@
z)T>7kyLYgR<*w$d?|19u*V<_s6Gafr@Pt@5`b6mbA?FEKT3+(A1K1k$!81^J_uB5c
z!RDD~v=q~`%7Cg?ld1c#8?eadQ!OWMb~)k8wkA9Sv&V>(wr!pWVUjdE&7qvC^9v)&
z>6L;F<USa$=Na(Z?_bc=`_N+Fry7B&?lGGgr((rHsZa@`*JUXMO;5PQea`t^Z>nZ4
z4%%%j5k6G+NExeqcNit?g)v*M11=S$%^4c!)B5?cOnufZetfd1&MR}SarHat9epK-
ztml&lbxp0ItDFLtZU?#jz&*P>MjGK0gCEAiq9ZjyFRM92P?9la`C!H{{A%Aelf9EU
zn+16%deaJ3Z}Az??xksH0oM_zV{D|~B2|mT=tBBF1kSpjUU=*HET3vO9}qvZou|%n
z4$dXSfUWEM_QW(hm$#t7Vq0cbAEXr@8klyeA>5bk5ubQ@4XoU-(!<5eHp@gYVjO)B
zCsq_cV0oN_Bs^oYOi(v&a(OHP8!=USjg=9qdZVgF(brEZD=Cm*${KuD^XT@{{QbO)
zFEtGl9rv!EI5>&uqT_jl(!^lr*C-~Orx375D(J*Pg0?Ff>c=XI?08|@OqaT(c?(qb
ziqQkvoA!%BlPQN;Cv*Uy8#8^Dt$9$JHHqnq3(pUhuFDI$$!%TVJLjofX}IP;?43?s
zsm6ZNQi_=QyX*5ekS~HdJqjW!*e~p_L2iUJ91|D+u?A;h{pfRXi70R1+FBrIFBW=-
zy3*s<xFM}w3h%hT^7o1y36O8q&JsYAdbG4*J6-n46!6WueKF=cv}CgSSDuzw$Q?8E
z6K{fDco`9v$e!V@M-`uwgh)CxB@a=O8MPLv%w^NOguxQzog26{o9tnIBt7YlCPmPs
zL({U`rAPs7q9mYZ3{X;8syJn|M?maRH@ZR1)eJ3|nGNA1>R3fvKd2gf4tWt_E_dVN
zBakMDa;Y!;!ne7ZrZku-MVr$RRzOlD4Zzn^fEoP~QN~vmX^n9`TkN6|fq+!V)?xBE
zxEa{1Jv;++C*V%a51JF7$CzKQ4Ev+FG^jCURXszb&U})xk}8hjROV#aoc+52?jJ1H
z+-rnCM3oFdIY-Akf;~^~lk)dIB-|zRg1lh1Z5LftfGxTG%Xd_;UH`D~LTp_gPRPWu
z?X+t9qt@276*`lZ;s$-xhON*q4OZ>qB@r`8Yvx6nwJLJTqIv5eE@B9-$QKl{VeHi!
z=A+tU6P^{>63@CtJJjs{bo(Cs)1AGPZy&hO(M3%MsBl%~7;;XHhzIFMms&XGS7jAa
zjkV<QF}B>Xm{s25n%%C)ZhvuI^Y*_e>1Q}cEwIT$Pra1ST<?Ow{7Q8&0y*#;)v~4o
zSOVy5)xfU)<c}XVTPmfx#p7zj%!fn|EwQatW>@%OWmL>OkL`$iWuWqWwaj5P)RKqu
z)S*7wyi<+-MAjPt$z|nRP0}UQm$pCv#O?73k@3dLv7H?r0Fcp&V$>BwHBzMJspR@-
zD*HHww_v7U0I#jqns-nCv9C2KIQg<JxAsxF&+4VzP6kdtsFp1T(T0M<@5n87pF;cT
z07;+}aEcVRlkwLlMhbDLP~8g?1<tlvhOwQ29?zG@i_S7<iL&glAs^X17+%gJMf`Au
zFDc7`M_*9kRc0M)6>)f(^lQxVo^9nA;rlxs(4=MUYsQ-Z`m?Um;#cTlXYxxoWOy)V
z6;)Sr!{8fT*kv0xQ<k{mL?&Lba736M`3(&^+L@h*YU3n$MR%Y>CMi89tSc1EH{HY#
zohsfuEX()%D7_%Oh#(cv(}KViJ&~DDQ|JK7R}|5W&W%$qp-A<|)|cBTa$2Tvk0}^P
z%ivY8x|H2Pea}JEc&>OQhB2tGUj$xNMCvbSD76AoETj2YOLz4R@HwOSa0RFFL<c#(
z?-l)#W>pT)Mz@Os2G_=G->y!JeFyO-V%1{=L3YtH{0J6mA8Zr+15D|CJlOQ!6snsz
z>n>93k33CN+o>U*d@{zzM7#c3nmVOq{V7%jW~{YF72n|F>wP%fJ)3xc?>3heCl3ch
z)wtlHsbrfE=4I5uXlYMAf%x&ll*C{h1Pqu{+R2Z1wLmI9{h8uwtz-~w2YKP|YriMD
zq_3(-5rA$XCZR+i4Wv{^-8$$blfHgjiC~CU!ule2wd{y>MVDhs+hs2+L5utVSfFcV
z4H-6C8@cf%9=I%eW7q9Aye^AIA0yd)<_qcJ;1P|spSh;ga3n0;V&{1fau_B#WJ4uY
z=77tb3A2SI!mw!mB5E`!!Yy=r>nt9D!OqvUcQO#;JU)R+Okg-${j0E7QVo%7^YaG)
zT9?5;h2s11kY6GiJv#t?IPtQFYpoDg!+FCkcdl-6&RT-7tq-@r2gQE6_qzyD?`7C*
z1#_z@*zMm6*EG(33OSK8FdNQSD6Egh2~s0&aa<m9TWI8;WvBE=!R;T}ViUM;kb!Hj
z=1`M$z^nB{clq56C19?Y8m-P{&gO!lXg+Zq+}4|)=LlvuV@SNcOTAh?Q5*S@kl18=
zs()|`11urTPuM!GyFi;BP+24R=KCe*<KLazG*Sw7v5Y@OwuD4g@;IMYWsE4!ARAD8
z8l|Ew(!-=uAiq)nYV)#I1|6}`hR~vVu686Qd}E%RnUqA|?PtW%!O}-5ITwNKqc-_g
zBiXf!gLChyF(Oafg6eJAX_id-wE$3ms3`+gA#S=cdE^?i-|zW9i`Q91@c>)eSv313
zmL!(TC4zG;JyY$_h7Myz4Js-fbWLsW7%<~CsX31-5~Dra7CKxb9zd_pTu1})o#tW1
zY#z|RKPS%x_!xPL)f8ZPu$$yWBmA<H4hFQJPiNiXct@KnfkMmI+rTjppKep%n2|nO
z4IIApr<!Kjfj)N@|L!n8DnUq@CRf!lJwFGWy{P_pxP2DZYvpwU=%ij33v&l1S~uq6
zp&h?edPvY9Pm~K+WpI~|K7!<a%?H<ZKZMdio-to!Am`p~kG0{k?ec>E(`;(7Qr$S^
zs`{M*;eCb<JRkQ;t?E*E-eww&i^bE8v~h~p67a4fP)*iu+wfu(4aO|~9qw2W<@iyv
z18>VJK>2mJ4_t7c5r#IqD-ws+c!u`lnJ&rFzmJoOcYX%y>@5RA5)=Mc&$!yla^^~O
z&5FQZDWTgCun`Z#Ng-sY*C{6|bcdIhK|y5TWqCAIkeu5`F!$Rdg!if&i_r-LTRt%M
zm-igCX%ZGqS7X<5yS`sK%8eWa^5{|Ng+_@W3ku@doXvc{G6ok?NeA5rt$B>VzE6A7
ztLfA2qdaz2khy00?nSV~JBja|S7_9RB$GizNaYBPOBZhXCkt@oN${M$;nlFP^+6@J
z6idE9;Ypu#f=sW)!h|h@nUqvQ3b*vDp)}MU<{gPDfzpAL%Ya0#sPz`bNR;a8&Efa9
z-(~^;wnwez`Y@Lc?V1lXmwX}tL}Y#pQzO*g2J+Q-wyDSy>;#CK{<LD&M<NNUN|$|y
zeWPAJFWfq;)|#WZn5@08Mn)2LtF1+uWl?-}nGMkz=nWE#@Qo#|#kYmkL#x>L1qz|T
ze8h}SKUjq7!XP$sbJ3S6;R#x4(aTK9Ik&{~;8~J)_i-DoZ1BhG^PH;?AO2P0uT1E5
z|3z|-xvyjYsBy6sM^HeYu@=o%q7G4TcOSp9c>T>cmK$*MNp;2TP$MV~<s)97icc<4
zEh5L;LIe7OiKjB0zFLYk!5XxWF_iW_M?}a7t3uSUuP)zk8KGJZGD7u%3s^F9?criy
zDXC}qbFbE_IS`mS91+{)Il}-vYF8aa+_2fFd=2W@TZSGKFS%z0jx6pX8M;O%rFRT4
zn5ire)cBcyge2)5X^3EtTbz&942x4hO?fv8?BLYDVQ3_n*PJhUzoZ#V2>24!;A<-d
z)4}8XEsaQGVC!Bk>|O|VZvi(8IUo-z8NY)1bm|)yMjO?lP?bM+zDcjC^tL^OGH`Re
zzVE*rT(eCrAjU0(bcecP*p_Ly3I}9`uFHG<3m7y)bIh=cn24)f`x;MT@23$y8~s88
z>Nuv3p)6?r#B-4u6K}{NT9j}@y$0E##o6j1mW&NFcN#W3>^J|;{A3=-9^yTi9f6N0
z{7p@x*3`r!g=Ssi;X}d1hdZNv!joJ^CY`lmdJCVANwtXdxx@On=|AT6=)bL$TDFDF
zSNo-BY>vdH@Iql|%(X|c4>TXBNW1d;+m?U#xDN4F6vqKgp*8|0I!>vTE}&2)R*<DE
z*1>P&dhXcH8M>X>r5Q^#C}yF<Wx!#)!4)B6@tkVe5i7f!P`~XD9Qxep?1>b{aur@?
zu+tZs)M<5G43TV3!-NSCHU?vSkq;Csf#Q*QC9dB8gqn|yvJ;Gs^n9b%oLnl8fg;Li
zJhrjoXu1^qROVWX4z07XOFKzrCF)pasz4Y4^xfA60lMQSYpzK@g-OSWU(W7NA6EPh
z>MQsQ9>saPjxUbl*%2C_&iD?wSZ|)#Ys9&aep5o<!sfSzmNNKZE$}$};!hr;5c-<e
zG18LsJ_dlOWwrsK3=#3?A<7$Ca6V(y=2|oNWgWmnp%QG5wl~B}M4i+5^t6x8T{;vX
zOySk_2!WRQ_RasxFXpRkm`3ZSjsLIJt(O9n-mSv?tvP54EOM?IX}38{qAb<wx+z`$
z)w)8Q{OwV?{+C3zC4jOskd?V1>Pp4Zb(MtrucbTBcOgx41I*xJE1uxCmCa%e`DPK#
z)q^5f*1Lm2uZ3*(!ny8HoB7ZtEJ{0q&&FI3KTYxdA`MAe!L15IQUVVCpYp{c!I6)1
ze%6(GT?PQue$h}56P9W4ai(_{(b7!%u^k<_&?ySPA}0gX&7J}?dA&$MpP2Zc{H*TY
zL;1N42_61NZ|i)d9ZhUBlyW_FC5H5LmmvEoC0;@KX^{TC1IDy~=n-Q(<0^I*Ts(I$
zGcES6sn?VAgPlzuKiz{lNt0j!VkgtgVZk#DHU=}T6BC5fbVP!wW0~=B|9|>|-CKRA
zib!AdI97m?m5(EmPA<Ufo#@V<DNU`%6kmyT_Pn(r^vW|pB(dUG;NW!NXzUA}MxgaA
zgS;Uq!)jvzlCEiTpWPsJ={1~FOJ(YLc6nAQ)Z`GV=RD5aFjcjF@hJ>Qj98h^f&z6~
zQNdSU13`6LKKn+9NZ_luxcVmpIek_uBqU>kd&L)aHl2TEtj4btS*Z>KP9e~ZwIs^x
z;0s#bT>i7Jr4wYqkOt%?uOAQ?2_lb;vGUF$$VR_rg$4}y1$wU`bKoY#&3gR%cbn=m
zU%kwyTd~3(2`=vp+@p0q{t=?71TdC12E}RCA!P13RC&FO3g9GG^|AnMAsMt!!v+1l
zz{U){dos})7g_^lQta#_oV$JuC~qfS!oxaCT?(e5Y3UPR8(QYBKZlH+&3#8i=()qx
zcrEz~MpPz&q&y$_Z1o!mjtlu}4BN`OFTGm|Mey3dlip4_RiSg2I5c}EsY~Psm1^&?
zk#9x9iA}c5gZRS5KviNoX`43_1Ld%4X+uf{cvg}Rw>Mx<^Bt8RaC_*KQI@E#?^G_B
zDe}@k8yjM&IS$yg8KV;?MBFt0DD?CYG&w@Fve)o&wqSrz+vo7l3;qVuj4>&E{c{Xa
z)u71emw=oqI$u9=_W>z~kdi_sS$(Ec@1U~E0?d-w{1Kmw{UN4(x8VO+-j8}3YFmW!
zYr)5s>A+N`rgYx+jN?br4M|z&Q-rg5QdfgNiQ7;Ml3o$P;lSSjU?esQ>_vI?rlyOX
zlSBTRv1TCc9eICrh$JWC4!b3v1IhBG?(%Sa1hQBI!uZuEBV;I}L=W(9{mi+bIKf6+
zn}Pwt{+!HL?FV}mJ=JBC_-#+Hcz6gVU~?K{bu5$a5vscVicWfI<?uhUCqK-AGvjt#
z#TsPXq$!wAAQ&ql4oMQ5qraBu(RM?00QmSo8{x0BSI+VeY5o*mr9Q@S>fRKWm@TjC
zP}x4@a?B;fkCd!QJfFWna{u<=u$v;k=G2imrOwtr!3g4x*xMw}N<s+Q=Av3|xQGGb
zE?7@kr)6VGueQP~thr#3ZbWos?&ijiwgX-Xju5b61%`RD#aqmv9=oqXV3GSJ5JC>5
zPwV=IW=B8gGX=#+m5J=D(gXkA6C6*AZEk3zZZ&3~AZ$}8IXp}A@^1K@u2x37SwDZF
zC#JG^*-_B92EYKiy4r=s6q^+;<4dS*f8`h=kA`Pg7KTmd$nKsaGs{mpb@T>lox=fU
z@0Pe@`Q{@_r50Nw*hvXW#vh~w;%a2$TJY2}k<uM{LYBcxaTcS~l=7fx=VEzWD;iui
z6}D4y#F`Jm<h<OrHe!9B?BKW$=e;;F%d46N&68xubEY0nrWrZcyIzMht4$f5Y&G`0
z3iIin7z=HeS}lRFL1tKhap=xAEUgG244xI&NQPL7L*YSXmg`Smjs}8M=u~eEz4w2>
zhl@Sxf;O(n+`CGGg3_a;HWs5RoE1mYK}4j$RB>FGFq=jSgxt-#^smmD(YT3>pEXHn
z$yN#NVbDM1RzTL3?Q(L#DqB7;ge3KcUOuQgf%+0ZYBEx2I81?jP=@8Jk64V%&U>5p
zePZWB`*fNQP60)<-<3;<&nTSTj}HzKAyVPOo2L@{WXmfAx^BuX6kNKb@S~g9w`bh!
z|HU|qKrrZ?Fau8O<}fh%=CT_)+n?5$0xo@k5Zw{_Q`&JYTs9=;YhZWJ6q7p=Ji7B%
z{(DC`T7A+5)|nXR@1pBSbaU6Q0T5PzNNM_&J6J9%KE<{X#y|n-=mi0Zh3<6&hjsN?
zH*zMH!>iH|*i9G67i@SR1x*9trlZjgzj5IPXW;`2j1cuoj^mhuz#TT$WI}VFohpR_
zt5x*7c7Ps>#%>6)eobI|S5k3&Sal2q5eN7<Yaqk*lyZiofx*GLm*wu->l=f}b~x7V
z)9)7(VUn}C$?l!o6kNXZ)I<9tIuMxTAf=68A`Ib^zz9Z^!f`dYD=I(cI+_6P=lZEh
zSl}wxzS+dASQSMI3+|v3t3Y@Q!9IjuTXXYZ5{l5D?0vmmskAps2svyYSLgrkHi6Nw
zRlx4ttpEr{=0}7pv;nz+NVD!L1MT&9xyTSjsJi{df<)sSUdcQ1FxR>RJY2bQ^V4u~
zrU$COHAuwa-w8&Q3dway3r<P6tDVz~)vM3%_-weLq!nRy)MT@AITwlal(?&;mIVQX
z`agDNu!iL7S98M)Z!l=a%bsC2md}r1ms9{(z7)4*Y_fz`Xpy|OW>L39vN!-X+YRS5
zkkmg*-t7A2_~)b5XwNXcgKO+!vo6(Y`2kMhUcISHqbDg`_%(Ta9K3#62>PmZY?NQI
z%STA0@=-Yb3di|4OSY~Lb?Bgh4Yc0PWI^$Ddxj&w0+mv2KMod64E-^h@0fxd4j?I4
zo6}loIK$eXk8}bjWGJLSjsiuRtj1cEF(rQTjnDl9`*9-@P8T8ApY?cjacWBl2%WCW
zY&Jdk^@S{{SLw?Jz~5hNm7_Ob1jn!lzin_P;J#?P?pSjUIj{23x6bl)_9_BQYevWy
z6A)uId+}_R%Cj@q>p`9Hlzx9mJ=TJTZgqb2+(Mqodp^lEb*(rt>*PcFat;ItQ`_BL
z*)~(+Gx|RfJlNfh7v7G}7-?BmoxUuBnu5;^e&HUDY7t&Pq3Pco_AC&-nnZaLU_VVY
z4rJC%LJ!_i+n_sJJ3)n@Ra3CR+T@>^!v|{oTI^!7dI!awwR#p;+BV6d;faH%O7|5q
z8}#Htx%!*poOo|o5!;R5du1KhwPO@70Tpx^Gg6v6{hTOD=tPlF3HY0X>zy%uJg<o=
ze~7_NVi<8Va(7Cz>xMWtANcK;2Dx5dj4P&JDMSY$_Nq2pZosN~*}|ncp$VG#X;|~#
zNp<g4MDTpRnrChs3YQK+%5Iq`twBv;qsEocy~~W2%^Xh|VWMu>(<xwY6+T5<BZvx2
z?Uog)yTDB}>cDULCSn$3%?m1q$&h!7N$3c>+iiASetyA=Lozk$DYet{97=A1QmN@v
zZqJyaxSqu<p8m{sn7j-s#O#}`11?2%i)M|Tis|8!>iFmC#GjMU;A_@|;@aZSs=ou6
zhMSkxX>^4_YP)B4ft?{&z4O48!yjaWtlSy<76DXc(BVXkO4oD1Wps&xOr_JojRmQ|
zExXLvTTp-Z;~@M@md0+8X%YnwRm4s8Eh9_O9IITWZYC=2Y}+qTjN$|GbdBBNuHm+`
z1**r4pSvLsX06_uWeZqovH6*NwY>L@%I_`O%0zoc-LNv9r|U(!h^d+7^0GOx_Dv^5
z$}@NUkojb)T`WV2$@3{gvbMw*jo(_C`Zwft`A83WU`Vu_NtmLTxk0F=4ucARBtA=`
zmKxJR+rIzAPS6h%6k^xXyt!sU<p?3bm?30Afu2$svGC&nB^(Bh+~EUzsE-?jeYY4h
zY&yM#AwXdW_S@}<Q90{;qX1T9y6(~HBi=C&8)Lrj`;8<)U<G-~@>eYk91a8$S%>Xt
z>&An<EpXxrP+yW`<Txwhd4qwGOEc*53%NfT<S<#`jv(RW`(FjzS0}}S2O`73e4*JJ
zu(s1Ls@aLQ>c{O>kgMz5I{W@~-}((qox-ShZn=!>)1Y5(QE+cDZfYDpQ_;>_;SL&*
z)^<X!rMtq~N`vV`O5!B_0}$|%@^ruXE0(PusacO-rTjU*S+oHfG~K;M#7N&rUO1@Z
z7&WS+o57mPwEmHnNY8J!7;E6y0`#U&x<46ayAk_RNAP=1N&H6ku!S>YPQv)YgOvJ)
zF)`~j@&Tn9E~7$kXyzQ_nZ%K@vIISA9;AFb=jOW%rIvzk?%pt54cXj(j4&&+KjGY$
za0_q}FwMQ#)FPjpl!o~G_#Xf>K+L}{<w9A2K$-I@f_+^n(Ii}oSd3_W!9f?ZPzjsA
zSX})XonAX=7*T{~paMM$CE-}m$(2_1Ied-PfaxEs3ClFRsU0SfX$b1OlBgmn-L!q-
z>fk`N+U2F`Q%6aMP|n-{03?cXxKIc1U!u5ZoW{W#OIY423q-iq{4CLS{Q6ni_*@Pe
z>LTf=HJTn%{RxFepNg-!*<kFWRXK>O{5lm;t{Qln(a*s;6h^PvQ9p^%<LMU$Jlhkq
z4aU={>eq;hOc3mZpe}{C{`XSRF4j*|a8dFQVhUcj|C4Xm#6S<1sNy>^O%=n<tD}Va
zJL$tCB6cU>5iUd?zXAcT4V7HckMDj3<0Ajl|4Pmt`Rr_;f(IB)<IWT`@YW589TO&A
zcmEVjpNQ?sh6J_+aIP^~9G;r6Bl9*Fl9#%5KfiKGYolQ*w-ZN(d+;$;!=MWm$LYg@
z7?k}r4jWdapV<L$d=B7pY<um#2UAZSL);UjaY*qNOkq$oyt%k^Dufkyjpb6g#9$nI
zXkN<$M#mjqwZ5)z0BX*0H^3Xo_1!TJnFd27zIF3^ZM4-%W292k|45FLs<pH}((h_>
zMyI^YTEK0bj427@QVSJ`nvTd-A}OF8ZK4F<LPELZeaPdyMJ1f!n8OuXrV1h=H^3$1
z{K|V9^V_k5=6~I(i!>5t?Qrtt>Z<Wd%4LovDuU-O2bZ=(N64a^^B-GyJ6xvi-QL2%
z7|?T2eepML1xr3q<e2a3CQ~oxh(1)NC#jn)_KSH1qZP?aP*7Jhx?<)=sln|z|Hh(l
z-U*US(LfdVEVr{WEVh$0;G6?1ZvRhM@IxD=!h^0EhoU*J^@DCp(vRr`2#-L>wBenV
zYb>*?7PyesNG0S@EoQ*S`hl+($E5I~PAEg!qa!CcPt*tIB;))8YkI{PL(d?7o2wG|
ze^urX&KuIjQ;l!jQ0*SGy5#`5dai(&`jv+^2uk9CUmrCPwnx>zDqdHA&fstto4+&1
z_Y0qJN$-Zp!gRF<zlA)8_w8O42pj@l-N-_lpGdG>qgg}0zFSfgVM}|LshWU^UmJT=
z!@U=V_UppM^hIL{ZBD!di_-%iPy$>~mg^rGQD{#S9hr4y$=*l8dR0R-$!^~_>ztsC
zf)7P2;#>|2xjc1|-ehrB<|;0AWD)6@TF~1JG6UN0v|f*<|6}_%vnl7^7KZYY<=2~@
zouY2qc`=x<AtJ^3fg3Vtc1n^{=!`-8$j5%J`qBak>YeZ&BXg+!B6wS(1<rzfiSk5y
zVrbq4@|Da<ZC}GIJe**VrhnY0QcS^EjQ+kE@N&UI(e}cagKIZ)&hfW0lb)U923&53
zW6lv5?U*mA03u8^)0b%4QQGC(CLRIv5Cz3*OV_p2`uQj>(6cn*@j`;N%_-5nGuQUw
zh&h3O->QwPj&H-C0t*f4s4O&eD0QVDs9DT0kZdqvf#!a)f-A*IMb(7X1d7#6<!Q*a
zKmyi9IN7xi%m-^CkpcJqPO*fn3?=Cbh$0jTMJR(9A>jrlqwSk0b`S?#+ZO_nbt?TB
z;7cd^4zjL6R_fETXDra<c`0&<#B<ePj>UDy<@95Dfz>=aT!X<TrBa<PaN&%F65nx4
zW*C=uXnf&EpQpp?20#lVT=~#VzS3RD{yXACls(JqV+cn7;`1vQYj`A<x*B*cK53S?
zY6%m_Z|Nz8K4{xFnv(`MdmocT=wakhthXVs<qkv#yKut|9|A44yEn%y97M&<i+>?7
zo&k-mwC1uN;(^Z`mK6myi@ADjO_*p*t48*uF4HH^g~9Mbpvb3;_t@v%2Ym`LUm`h&
z{+NHi2!;QQOXe^^G#OMfKb<xBpu^y#WYUnh&k(lK)la3~YP#91*v}sXz!)eDSxn0O
ziPT>`zm2$GP_bB#CIjKk)i28-jvolQs5jMzcOPKuCDH?y174926w>%0?ohr$r;$uy
z50$qHBl%5+G9IkaWwTTPWJ^&;o2IQO@n%n`Usd{wMyCpmg_Tne*Y%=DI|s6VRB~Fd
zyp@KDaxsveucrEYve^1vM?z$PQkfHb+B*zuMi5EfR(uNtfAtb^d(JC@#!zuND}vB>
zT5Dhx*tzb(L_P=FF1C;bjG0&3`=*=OI6XxVK{BBBfuHBnfZ9uACJ<a1+Qoc-|8W8C
z{=_SNa)?%CWFH`7=oOKrH9b7@iw{hT*4Q+mitNlb%I{ITlQK~2C88GPq{11W;sxq{
z=Mmw^CgGr~E+auX3;=M&(7Kq0flnv0gc}EeHx8QYyv<Oqi!;cJSv=T>49)lum5~dZ
zN>)G)`w&!p1O}CLp!HP1EuSUIlt0NPCuha=*gl4sLTiEoeJ!PPoYZAw?AJP@YZ#L&
ze01)$jtQYib!K4Rt%PM@VK@a=4K{OQl$oCDU!Vm3a$oWjmHD1hk8%wbcj9@ekb0W9
zi&OVOn2AC%t1%qTbQ1T$K)yt7BW0TM5@u~LQScy{zuQYM)YBR?J8Yh~hd5B<i~<$x
z2Acy)c&Qd(ooX#%A0{<s+F*VD_M;zZGiO;J`v0QhJ-KDkg@G6#3Q*}nBfbk>tS_cV
zb(3{h1GX@;5_Nb3L>|m=<a6_91rd_R{hMSTKo0&k=}VPM(#w&DYUqx_`5m7BTvtE#
zAIz;w@&I*)+<^f2Qyk5L>Inh@6V!@!eyc>yKMKW-1(j&?#5cM(KSG__E~h%!1mH^`
zGgM}NHO|}E_&0oHVVb4RIgCK}`AT9A3HQZ=JgbDbD)BCiOkFP`M?bxfg7QjJAd)Z8
zHsV(}M%olc>Nq^)sXnE(%v4b|2ZAr5TU73vrZ<J9Zb``cyhR-%@!oOCUa4KR^m@Bt
z6bm;RSWhHoI5|J;!7K=esjS-nxSCJ^w^PVk;m06x$)Na1Ezuy|!VWbum<4%%i^U56
z&E!h|cNQI9JAOQoeWzvh%I{ipe}Zc@!~$uL8W{Hpjf-1x2{Td@bYz>)({QqiFxECT
z+tbuNWn-5#;UpcU{<7Dud_Az8_9Rw*WU|1oZKUDafqiHczdV4emgDIS9{o(B@`tLP
zZ5G86OlKz@>_Hj2=xjwhVXXf9&mG-R7kxg-W6q)M>Q*bqaN+}ci_q{?S0~*A7y`Mr
z&&~}>nm^%vsR<P}$?S(2mO4XVPfBSDBse1(Kgl>vH0A43r)qp<^pKh`bW%lc)3&_4
zZ5NKR;-6P0+LC{Dd@puy7gN6dk0@@@75M9w8I#DVIuKz*$LB!}5f;dH!%;vsC<L$t
zMFkLB!ag1^E=ingc;#%W?l_~P<@ZDm%&tFQl5_elAL>>lW=@D!hEYWjIV?$U&v&)l
zej&F&YD_X5e)+FAud{}KjDb3s2IN4pu0T4;I}6QmqCivtfRJG7=2a%(309^J_Qw0b
z3&n=g!}Z-bjrCq0vli-ew<fi$rB;|myK(T}tWgkb*@_MQUmwkrQB5&Rkd0aj>RKO$
zmG51W@=IkZv2-E#$xlWhet3uijzYTrg%8jLv!@9>JP~s{id{UUM`EtKVgyb(z`UCf
zxUa#1(gIUdNS}LX{V<96?|kphQ5p1#KkX;`QbsX;JRNc-IycYRlrok*0uku@vlv?C
zod>D90XpwMKbf3A)LiZ^dqv*L2wVc^oiurZ9%;D6N-dv%b&pkt-P#&x&w(>_QYAPl
zL&U;25PB0!7-}=QaA*8IKDxyVwbRMNfCvkG)EhG)-za>!5CWf9ihFb%`Tdx=*P>8?
z81e46LgbE@2Da{14NdUINJf_g%0`MTP|*tETLU!q-{LUK9Vdyyr$to&l(g69)4udv
z_fD7U9GaEx0BQ>F51u~+>uAs$7X@D+Tww3M<7tlD!sS3KzbMiCk+l;rO3YA*E?v69
zDdu~M?~5(`VG4?Ww(;f6Oi-R;R!e3t4{m|k)DP)xka-9IMq8a>dR{e^`zd5Zcetsj
z7D45_KAx**oJlH7!|4OCPi&#hIo}<`4=`4IQ!zUa9@%?*Sih<i1=`H$HS@D~tP$o;
z5W$*U#9%So&{J{SXVH~FngGOF6fE39$5}QUJQm#{JmI*I{WT0icvDGx;U>g_aP7Dz
zt!<EzSV0GIM~EPX8Mk479jf9nXK`^U$WyKi)9nTQXYYd0Jp?_pWI>PrkPC7KpCz(1
z?11)SxLh=TO|m{XZwNr~M~}X!*EQ4n<Fx(Q$dj^R5t?)ukabpkn?278vyHKrIfKdd
zK3GF(bAZE~C`o}xci7?_C@53U$h3x=M((V1XAl*7jgHbt3GEx5hQ`77z;HWzNnqTs
zOn1!E1?hSsU{#)@-B(OpK5b?4585M4Rl;h)FzT4%pV^cvCih6f$w;Hz#SUk-z*`x<
zTZSjQM7^cew+GDKicLPFa=E*r+tW<`C^JCap*!-DCz^9bVt^NgyJ3e~!A5fkYH?Q;
zuY=$zNAryS)sA)iPctq1-{id!oHy0_H<6)3RKch{<`C%;R$=F9)o5NgOf||oZx)*T
zztPo!*I`NFaNpnu4bzx8zTC$Vwjb4Ou244Tk(d)#bDTUXf{A(n``xnV#c<*)$(DQ?
z#rqoN*yJtRNg3uT)%)m@r(Q-O3p&qG_mQyU<3psE5l{eSBzl;DZHux?Ck_7K+C!JD
zU^%xG*9d~jKYbd`AkZ$f6=g_avH}+1?vt2+h*assq%G<Zqf+hTZI(r&`bBCl8@m%j
z?W({e?kga1eVoe`9`9~p0USg!E~8KBXMH~5V_y`+BcQpJc?7~4!nJ9rkDaxLClf?_
z&C>oAc<4-*F#(IlPtpS-8L1P+yBzldTcz%-l;eH~zJU$sxD#jXa9y{qJw>6wGRh%U
zbLsVZD0J>yoLKuYDx5kk8jiszo5ObGyI$gV?R<R^BWXS-j4GBrvnD9sNYHacUS(r9
zEIcM|tV^NZ2TIM>!I#8b_Ws<H*nSq$ZSH0*a^IE+hRcT^&D=EUEUCB|I#u;28ZcN#
z6-rRm$~bYHK(ZAx7L8(l&SG>N)rjaJ>IAF^o_XAT3mjZ|Fc|k!_X922DT(NRebW&i
zWFqYfvamcGfgiaBDv2r2gO)rM;9Ha>_^Yb<H61?QjYe=r(l`<;;eq)TaIg;3OK)RY
zW?gu-ji>6i`PKNRLooP8a)ZpE;svz0^j8D%pLk6X;sVY5J&fWnal*K%P|hV5ldhkZ
z#{iR5U&OorS{}_ouKmj`6bu5++PfIr_~HGEF8*x#<E3Z(<IH2~Fm{nty1aCpF!wbN
zspTfXuY=(D0i9qs*^ckD^mX}06GvTE+7?wfJgXod1p@!w9-r}*S6F|`+&f;%eL*u5
zl__MHOzs@zkwnWZMzI^jdL*)f4Z;bhjus*ieb#X`n9Eq8caB1P;Ak-@*!SX#Nq2#e
zg;2#8AwUNd5X)VpqY9TVVK*uLOf;sc2Sn_Zl{-@!p_x*(Boc-+yvbCek^qV6#u-@x
zZE~-E{v>#;xkEVgz5<lygQot4;BRQnx3ms=8s85xrJ#M!RQ>B{{3*LfNC+_ru%M@K
z#=#jtIKH#!l1U4HC9e|+<sMa$`(uku=Dy@1^c3iDT+|P|N4-}If_%{)>&G&?!nJlm
z<I4A=Hj>Z<G*@lG#z;VkoyG-?7&U*0WFXlRtm=A1@2_e#%Mr#=Lt;YVkB|5rZIka3
zg$Z(XDqCDW29u|3$<FeytCNie{0N<4px6qwV<i{s84-i_csuMV1dQlMiv|P8@-#%=
zeHJ%gaCltCS;a!jPwK2>IXdy|P0rO$@DaZCW6R)yj>{Z+BI`5&b<-0g-uI=hFK4%^
zyYm(&y)Z2F+6!dC23!Ne>nm})+Y*GxkyW<QwnV)hK~7e^gtQ5n?NI8AAFoT)g+p#?
zOkmtP7V8snnhtV`xI1=hejY-H*mWw=96}79W-^L_zWub{AcPfI9Dul9>N6uoPuuK0
zO`i=~&ayuJYKMMr`&zJ_41AM-U#a7{URvM$AxPRqW<HCH`HS9%gQ-3sb5}WhgGtaD
zR{NLfbIi{srED#(-T#W<gk#l$A=bQ~E4O?)9tfQRz+x8XyK`~Q&*b(lS4^BHRB1Wk
zb$$A@1f<JwfZ`RzqFd>_kT2Cy0<z(BZ=(FOwDe#lX;`s(w9z!LkwvXZDP`u&{jWct
zfMfHLE3ho;Ly4j;;8E#5QwL0I^~<11=JkGch%E-nhV6*)fo_6qmbh<UAYN~vo~?^9
z9E7`r(>`^qReYE~9SjT1ok&Psy90sNZ*q}z&X6vo?dHbq(vPhvbHG_>maheAI|r1{
z$9+Dfo6$tfq_B3$$d(Yz$Vo^09@3Ew8hVas>pvX4VOQMK?$^*fSK$Q(?3+H+l4^HK
zWKQJ)3oG94VkV4`>Ar~X#%6!o)y#wC`L@u==k_-fjFgV8l%kD!n#NvbMhwT(zRhDY
zyIaIeCT(8r_w7|Gt9|(vii|LwM$w?5gCEPF*3JR8D|&cPpRNRhnl}N=w1jEFRdqKd
zEAA}fa%H=%S~x`c@gQXpj63Q=C)0OYOZSmvM(z87uxt@I$Y44O<HMb$vJ66d3(|2q
zK*{=Ky+ByXea#5|^(BmM>X6qh9-d|1da!%twqOFh{n;mOWWJ^$+<ubhniF6^0kD}g
zBuOM`c`09ijl4CLB(S?M^r4N&XL+2(_2zMjtc@xNOx;~tnh?>RFsz&XV1}KT>ScE{
zV8Hq9@%dQ_zYWX|R0~(d3)y^P;<~}inq$&sm{QP!*bj*%9LRFQbd7ohM2aZ!n0S$z
zXOdw)O7*xda3g-K)LxB%o}jMn?pPV5mfI~J=4nOx3wsmq{n<=Ep_-Pcq>zB0nmyPN
zrc{+5QH%8>fHQ#^72)OIGBU}*^XHodXt&~GY_<dCG;{#858-NbD^FNZsJ_^=BiC(e
z3BgxfP?s>5-;$Yqln5>T8*}(zen4pQ;2l>RVdQYVizX=wm}2LWJnm;CK!ofsaC2fU
zQzTLZv?Vf-aGi<q?_~mF(A;%3%JYEHxRllN)E!$yOe=N#c250<Nz4~J;vJKK7((1Y
z1AYQk?J32m0nBm438Dd5MO9Kwf8$Rb$?ZpqL8jIv8!o{F)ly4@;MABt`uXSo2{}fJ
zs9&%s9`MjcyxRg`XE$|Y?B}3ogkuneB%3%#ntnAyWF5BO*iZQ}c%#J92lBcnqkg*q
zj$MJ$U=Pi{fUo%Ta(1v&X>OyI(-&`qrhTb~@Hz)0x>dcZ^<i+#Y_Y$<>Dz<Wjuez?
zU^s~zz-IbDy#H_+p+<XLXe0amlUUtrpBNXQL?>EvOmt1{tllosd`85AA3Zc4<4mXk
zkFQeV3_52xci?%uueikZT-q+K?ZK@CpIuKqxh#Sz%1iw&WsVL=O4u;@OLR=t%fiW6
zdbzX)i5-epg#7=cdi0`Bp&WKsg-fVzDIsMs4UYjG60W<?s6r6wkR_GG|21xBR3BY?
z5JLi^$%&KIFUks_z_k|oiO<g=SXMjV9nSX=iM#&6?{KL2@}5#ihtzwom?}vtp<tdJ
zOr&9Ph_IBFc0<9Cmxx3(Qxje0Erd+`L}lxDw)&z8u(CGG35h*aK7xhB%;fzYJsJ79
zG94B#g`S0M{|fWdaE1eMC$yb{=u5#_{fEJF#yFwHI9Moz(H%)vCuQ0%Vl5yRDoAPn
zH>hD0#yr<Rzt-NL${}UHO8Qo$^#aY=b&`J|*y&#Q{p9nSunRugqdu@S>nYIyONJK=
zEvi-zD&6;LjoC<pwM0YG?BnlCNM3bALL?s6BJ-C7r-1&;a^8{NSL9AfHhfAn|NWF!
z42QYMeY+d|`X-ZB!q}+Dd<v55?9-j4uwK?9{r}Q=a{C91!4bpJD8c&M!UFpWHm;~z
z;ybqGHQ&Mh)o@wa^;SKF)>#r#v`m9(ljl%vG~xwCp_jwj+$ayNtuPkh<PjvIwvC0V
zv1HoGez9v}qRKGm_w+!namLJ6wOZ{*zt-Kx=XyY7N7u!htNpSIh%Si*)zdmVF+;Ka
zLES#3ky>GSOVNXTt!1Nnf~*;zd*mU{D_h5RStyU)+%vXCy^ORbO{U%isfEzxJklJ|
z5NUv=+Q>*3_+0=Q1$xH&X=F)}Fkl9Zx066QP(@Em4!vLi>@<7x`ekGz_<#1+1i?-1
zy$ptMNILxOK^Jhr99<397>_(KBnsr|Fw%AXbh$tBC;JGh=Qd5aj`lUr`bV7K+gMH2
zcXI<w`)@PKK0o8Ss+-J}GKzrA@5728Z;A$9>BF;3`|gRUZZ<=MaIIwu`rT;9W7)JY
zN4lV&-{470;YVdC%C>HVNsue_sBR2XMS}A0AqBoOGUHE($7k0)l@I1$p@=HrJLJ?Y
zLwi0++pdlBH19sv*p*n(0G5I`>TjaO1^z!B8}q2~<@0k_<B532yq#l)J%Fgw8+sXN
z7F^O}bFAiI9*F%lcZBmfB%HJkjTQ%Fpg4Qw%S@CRef;MCX`i^K0;eVTRkp%cpo>z_
zcs5ql;1GNfu++jRHE8J-^K1-VoktW<#^B^_D`jQa80a{Eq>RRG+Pr(8d0}Of_G_Lq
z<MntujP&h0sMahy>F#B)xz-N<c71e0uActf8=vNM6IrBz5f5BHGNvI>1OQ^&Vsbe5
z3J*`evFpB`IOta7WYe0F=gkzcH$@Sh4KoX8Cc;u=h261CgZZF7-SIAEZtA`@G%EHq
zhWz`!0wX8*am#!+T%pp-Vl<0(Nn*%-(&f|TosU^r*1gF-5WW)0b0-Mlj~a%#5X212
z{wVaL@4aJv(NEi}U`fPs$<)EYIMrlhAzi<27-g54y81-LTitG$G;gq_yARtcY3XLU
zy)}EjLbbS41OnY3F{P>zmo+SBKqfw3gG!Aeu{7=g6u?}N?>g9dmRQpxCxYfU==lvA
zk~J!sUV4YGbbl+0_#^D!ab6whi-RoNLyn&7kYYt*Nu==yLFC>Wud!fX$C%JGcBN>B
zLcxbgM9mHP6inWRXa{`CUgAtOhMFJLla9}q8lOgXSz%YzHLk<Zfl}&&rZj?urjq_@
zC>g42B$kUi2!9xQI;D3^^8FGvDF*UUbY4&-A1@h<Rba$&hFu0~&ijPU=*bjLvo0hW
zq_*?J-!$l^*)>*jpM0y;^kF9?wP$12TlFxK)V-0k+#RLio973A=KfJyQ=$H}iN8Zb
z?A>VOAXI5XXdZ`xO7{eq=Q!5uqF1}bW*BBTEn#nYqxe;>(VI`X#_p-~4*Yi$p2g#`
z4l;3nw6s%gn_;C_)kGdeUGj+^rIz-(A!XrgsRrR*Pl{b#vp_<2$>Z<Hs&3Ki45x@6
zitI!RupO<Z9*M@J6)0o4?cO%|cENcki6NH_y8%Vu=^URO*SCc#YMo2*$6tgF_%xDU
zAl6Q#AnHPjR}|?!adut;13{4{{pU-hLglNd|E^rd9f=Z)o2+i<NvS4QJhN3BR8ZMJ
z;5VIn*}pi{CUE?9^Hz;cxgHZ(6;?d3_3uu9Fd67fG(<q;3p#AxRj(q3c8_u>u3+H(
z%YFa>e<p2uGTL57xSZp{x5lSogCm*WIdT8Ui?r0=1c_T4qMZyVZK+&1$w{pnE&2yP
z*hKAptQl^&H6j^sJ1-e$EZ7u4BP4J_JS|qXkAX(jlZOo?HhQaH^V-6y3x+$1r$v7`
z3``+xbWPq=Fqv3cM&XzJAy0Enti!gZ7gN#A#UU?!FG<7pJ~Ze?1oS3+7e=#^83p%l
zn6a0BGvE(#Q@k?Z1#dzu@pSZq<Hp}pm2nMnRg+dE7DB)=;}=5x)kuF$ipvG|<Zp6f
zu@M$vjv9Ny3wJ@lRi$O{=3%m#rGIipeLh-K^y;i6C-VUVo&O(a#tj|Rt@AXChDR0J
z;Ez6Vi4Ouz!#~E;=RT8krF;b8%KYmk28#V;Wf&Vx1x~jJ9grpG3`ySyEY869Jn6DD
zb3(kO0p2W#Xx^fVd}eiI7wkr{7xh|BVNEK(c=PWbAMynC1Po$8Z}oPXbmj8nYcm3Y
zMyn;=Ewhe+%M+b{rSa^6(k!zxNMStpvommUo>rm;#Xl;48>IgQY!%(Gt|Ah5p6`Kb
zZ6>F61ys6_y?&}$T_6>GR>vIExR=WP?AiT6g;RE)lEI<R2@5i_1Z6e8zSfWlg8*o1
zw&)1!=WJoh2gJCn4#3A$knE~n={3Jbifo&5wD*n{IXOBc*fzl+)u8~#X9Y57OwS|7
z$Ino3W%^K$Gi`5jGA6_rC|x__Y0oXhffyJ`OYGR|{^f+JEPg2ht5EL!NIMZ0ygT7Y
zG820>vRVp(wk=?=&%XprV3J&+aM9T7KBgmpQ~yc@up(Wadg?3qj32*zBHPhU*;t>=
zrc=_!=`c|&f+H&VIBDVLxtgNR;*xoCiD^awilnr}qE)b`qE8IMqzq(<gK0iVe%}&H
zs$K70NQomh1H(W}-Uiw0_gC5C(u9aH%!-NS0lGjK0n$_h@~t9%D84^UFyrpb`O2Td
zuEZs1Y_s$#^bIsr_w^T<4uGTcIr3&L&-$&HwO9I%u1dL+i<Iwi^sl8T5Mx$=t`M<O
z6|Y^z<qA2u9xW&371o0{GAL&!p*;r8$Gjp64W@;_RR<%fY<IQ$wF27$$>&w?PXyLl
zHG_fP=Dv$24iXU~aaEV295Wg*%u~YXuRM!aVU-3bAS=g3xIg)JlRO}Lq()*uERO?o
zQvprLO{{hU;sO4Du+4kbk)NpML%dh(M8FQ9I3j*!CMN7>VJ6y!M?^AYe1}B|4XZc_
zF=51m+Dp{$trYgws@&2mrH?hr?JH$TgQR`25lH?Y29GpS#2mSGe1*f;*EqAULjAlZ
z1Dwnfb85N<D=*6nLGHT0HJAd!ih#M;V?ta+8uJ`MAxu_KiZ%Hm5F|OHI--MXdAz;=
znu5sGt32tS!nFAB4FXGcLcYH6Wt8^>)%i@hjHGYpL?#t?gWD5oo>Pcx;X;?Mj@O4H
z0}?7cR9rjuE}KR@)fm>DTx<14@~F35`|m)weE(w)p5RTkRV=dHiq#+ad!R)g^sl=X
zLKIwWZ8nK`^~BO%v44+(t={Z!XouO8=TT=s%*>dmx33e*@#6aS8r&w)6eAU)Y7=Pf
zO{|+5p26Y(&1mJT2H}3IcB_ys4sK*EU0fQM!C@=Rio<a4&l{P?%kyf8&Y6)K39|$A
zK-&h)?SNLZ3Lv_xXA_pd15bAW76ONQR5Sp$8~X8evT!dZqScvs_@9fNw|(|nov%xf
zr|$+TghwgUUVyMK1dr_eT@jI-`p4?S($S`5R9ETrNbH6B19TfzuE+-KeT5;Dy;kRs
z(d%I4Q;Qhu#&9#q0i;h8rv@^L#cR;g_lbuz0QI5TLb$Oneq=P&^YO&j^z^hhqJ77v
z+DGLi*F(9YpAjp1ov@W{>m3HX?;D)?tp|{5x%okJ?o!_rexX4WmTuECY84@R9miT$
zqMN=&-WmqFu-~M??U9y4Tr1lwmdt&eO)mp__F5t5)|s;I;S*0n;AN*$FHO5;Ra;JZ
z2xga}9U9qKqfh;@{xbufqQgC<Cd>Psk?tUi-waBRu2&aijL0yh{%?kEcM7wN-Gfjs
z=-eH5Y)~t+1krc?Ie;k;CaUa|y2t)UT0bq&fhgop|NC@%z8=~5$GU0{D<z5<V=hXb
z-sMs~C!e4yEkga5(55IH{|)_QC2Yg?ehsgc0qrL-y9X;;537HLUl_qj0+Hti(G@5W
zq<Q9n2iB~$`^l<2Mgp>+EiGtSDo`JbXheUmla0wyD;C%%T0cOTMaNuKn#po9sT+LF
zJlEA5@Mv<vdO^sc3NXnPBI!fcZ4!G<$9so}nHi-X_D(q$w_eIA+c!CBnR-7c^6|X7
zNA=$DeG1fbVSRz3@Tod*Zd~(i8(xAGZ)G`?c5eP=HQ(@bS5%MM+qzsqy_*w%-E^#;
zgq(H5F*SR8SFs?c!TC-Qr-fZIy6w#%MME*+C>DAM?N<)dLOEwil<3-2AoN?2O9p}k
zijt8$bdL#)8QYJ)u*!@2y}-tKCjkhh_MFmA^Ukx$^Q4lAmFHi8j<4Z^^g51Wvvi|7
z<14K20gnp>kSWpE^kyK3f~-BIfq-GEg1QQ=!T-CBK=b<t0yAYxMoR3n)O95BGWJNI
zl{%6(-vytz`QNNGu(az8#B^B>h5-s0Xx_#CUxUiKP_I^aac*ofZ=S0NqaGi>g^q+(
z={(W;$RE`})TBeu3bT#vG9I0Kw-bjU_8>`%oZ%)ZA-?$AM@r=~1$XzYZH1z67AX?D
z2`CbVzFe62+M{V#Ayd+SM~`0RT=)fFE8zI=*hz>h?^*ppacurY12Nw^i^y2MniSI9
z78K$LE=XPtcYI;T`3A(@j6RnZ9zy*y`*sSQNTIX*AeSXSv*TGIPpVI_rFP!x4{8SL
za=tN;gBw&^L42sF3IY6yM^JGlJGvPO?tuW6|DiZP6WDO2s9Q3ft!%$oXxIBIwVho|
zgJe<stV^n)t~Co0k~c6S1e~^L{`AeqCfzv%m{l(FeYPp!7_NECa9>^7nd3UGB@>rP
zZLWI9xtS}LU(oGhK@bTRs+bK)ShuHU=`h_)Ab)N0u+P{k(!U*Dm@(RXKu02NrqLvN
zX^8~R%1~0CMvx+A;X6eHb1&|=1?rOq+~g1%PGLHLlu*dH7j*;=UP`6~UM1T2^0J)Z
z&n7@%>%OI`N5OInnUEUo2D(ay_xa7iYW7kUoodvJY89MT<M~ZmmX|(#Xh7HJ&cS{$
z=@px|?lxRuNOF=9#ySLH$i3;im_Q39dCfLJw~Ac@qw^geSD)sFsOCA~HWVWt`$PaW
z|IVG0!;pF7OttRM1(1aF$?tFKHkY6Iy35=CL7*8Zvur*lJA74}wx%l`N5PN2To+ir
zcM92hE?<*}0n|eDgQ(rI*SVJGtV#L-M^)r5o7OAB&f%Xqit5OVh?;HUFN&3d6k$<e
zKiDl*l}rsW@l}tr>Z70Y+Y<9!U&T*{wd<*f9S4wuxE-EY#%iFt7ScV3V3y0<WrHau
zb!qvPGv0s5l6YVpa=;VC=uc6DYBvXD@aDe4`C9*^7{rAe$tQ|+o0{3~$Pdqv&_)MH
z0MM^)`uarO60a`V#3hc@p{0*J;(AcWg}+F`g1F_I)UCSjurYOCA5V7lj=<Ib=92pj
z6bH8pf;NW3rvlEL>v~>(Du3}eO`8JJlL>-+Nl(imY>SzcV}8CbDHU|XgDWf>m>RCd
z$`cqMbVZeDEQ4(o5dR9R7IV1j=2CORs5rFoP#nupMy!eB;`Ll3z(*jd1CYOjmZN~L
z*o;L7l5fX833vrK!8VI*VF47H6?h^Iv~p}jP|f+)SA^3_dShh6#9rPQUmkiBVUP0<
z1AmU+O3|&xv0dC+dB4#dY|K&$oG)?;Af9|1>J$h{6N79fDmXJ!9N**9co;Qsc!ZDZ
z^7nUEC1r0V#-ixUm55JDLS1}3orETF_s)i-b9;1x@hj?Ql4Iair$Emrbt^ggtl5zh
zH#MPLV$Vv;w7mRM2Alzf=}I*hQzyt+NMz$>ENhsU{EdP@6~J|kcG*(?ZcES`V}@-7
zJIT%F$#-Vr<u~6e?%4x{8G4(q9Puf_<Fe)G!^AlrK?GNwSbYSuiuWTd*9jErLlJN`
z?^EiLKPpdDaP(&FKHOMzjyJ*|cOc2fSpSk4x=OfKH?^;Ls0c?mLqO<ISd0(ZZPrN}
z({AkF5eY-d;AwjtlFUgtR)<9y;gu)nP`q=S)mebiStpBDVD=z`wX5#<F`s~UT39`A
zedJ8rYsIOsCnV5Md$H>Bo7kCRDnz7za>uL72ssAQ8K#kfAO*xJDe%I$0jiw9u`KX$
z71O@*^ht_2%5&yBBlT{J(5d)U$_Ao78S$J0&a`7KHEq_n#8^oW^WHB`Fmudo@jCSz
z_x!Mq@u7j5S^Y|ha1jyR4kmZ61b?^Sav^%;i#C|U5$Sz_N<(ONhuxD9Kdju>H6v~e
zMT1O9kW$&g%rqUn@BHi=9C6=W4QM~-5pQ1mg;a1aBn599=u8UA2uVSIa8K1a8j2rv
z&dWv4aaB1+hm3M_hAb42M7^3`m*p7HiS0^_gs!vj=kN9pHaVru)|wdu3Yb|I4T|bc
zbM#l{l{ab@kr>q$WMLZshFdo^eIvSz(P<?i#AB3E9pctKZg(kK-)u0%(v$y)wjDDG
z{C%-orFd6m{wF=u(A(rn&bh?KYv*&FT+{l=t#OdL?-2`?oE+wuZ=z-@mlU;Zh$U@L
z=dR?CyQVx37ivw}L(_`4W8_mPZ1~Eu9G{3)edh&BX}^Zc2<>P!ZHH7QHtfH3QIpcI
zu)k=o@}{5##83zF@7cMYN^zi|zS*=(QKfx`+Mu3{!^8;n`FOM2*aPeMeh^L_=Y|F6
zZcoU#eTHt?-Bgb=QvCB}auhsLN@6RMuLG&WkzDFt2ek7WPuB_oM_&sZdCy&N#QdjO
zS1Vhrc*%Qm%LciYYjMV64SNoH9Yw${3oN*qv91kxXIMK*9rO3CIqA|rZbKH*MweOn
z=1IY_xLrKb7Qhgxd8;jJbgAW{DI77Gx>&_5C@W6m<<3QTFF?pS&Qd~T?MJZI(ivvA
zfk4dvIl!Hr2eG!tPXpeS!?O)=qU2!bI?wI)EV#M}m>g)*oANP8VipMqyXZx55E&BH
z>w&EyT#dw<xwJ;H_82dm;ungjUnqd{Vn0P)C_eWPu&#v@DF7m6aqC1abs{h8)jmaK
z><)TVpHsxxfbypOgKCy4bpi^nZSl_;#g4=GWu++AI;P1;nF}x_3(Vlz`1x~7FID!K
zkBZMuF7_ijlAdwA>YUArOnt*&L8@+#q1tr5QHa}zk175IRQ_I<@W0~tq2@jbGMe;2
z96zX71UO;{fTpy4Hm6hHCHLm}iDi2UZ<Awl&w*8w-GS<QPqbbF=d(fqB-3qM`iP&m
ze1DFkl^v~B*X{|KU)Gl$EXulDguq(J*Jm%4f<pS!D=?8Ony~^%A{{l22eIACLjpDV
zaF69B;qP~r@X&cgp)*C2<;W|1ExjhN-}D~eV*eaGWl)+6*@c;c<%oDOwE2-@NqEi1
z;T5JCt+m`&o>hY-hfze-Kd873V{cK$+3niXpRc^jDQDgSgUq9V{r8hM0-VW0^@o0D
zN2R~yP+Pfh)9{+y8T?678uGRm0!6_Z&6@W;9q`s(KJdX8sBy7A&1ktEED0ukkGMdc
zMsnAp;L&a@6P`ZdfGlpL@`3a)CM{u{x3dRtA^Y330jZtSsWuO?Z^%s65;NYKhiPex
zyEjSj?ffWXp7i0rML^YPp}9Bc*yBzNjC>~m5XQ{~Z?e0_H67MNJT$t*OwL2kBgktj
zXTH+bB;Cpeh7tS6<BkFIv2P3hhMCa~a6(Dl2M1T3aBM>pg}^A=hG$z$t6Mj1J+bK&
zn)1@E!LqxkD&XrSS%QHu!kH-sdf)b&k`|XRSBda;uV$7hHM>ZP#-oO`X$wR*4hA+}
zTfGCSqe;yz(f9iSLwLD^Gt9?$I?lxWncWvq3zgvlR`>8<UE&pmoYYX9bJP^o$Cfz^
zeu2^Jh+ncE64pp#+6|W=N(hZ)2T0i5X2U|=qWss+>>k2;(ol_C>rG{z9+4Cf8^&Fu
zwrG9?{htMONXN&Ag@DVc<udU>s2`OW?j3q2v|qwNZWJ^jOgD8|7D*2v#vbMoC3h<g
zT*x3r|3vc=+u}^#Yf6{HQy;IOq`esRay|0~t2a5&dsjj6lPNeF>YJk=c?AuYZGJH8
z!5=sM3OrLYO1DpiB=nMo?g~rN-DV}Ue=vIZxAWKq#n{axmhc0oAS>v+ZnB4W->cR6
z1Vc%Py9^ZgG<{ix_(3R9@P#N!ZV}I|D|6n39w&o?pYQ!-iOaH4$@tk8tPHgp82feq
z*th;d-5{W_2(TYSJM?4vDFah%DQbT>VfMEld@B;n?)PcW9PN+K{D@MvvB7x2TdvNw
zQNpq(_-*3S-8r;A<|zx}Lp&ZDP$=90Ts3cjN^(war%r3E=~>&voZ%bOc{pcLxU2>D
zjlP*%S21#R6a=J<d;<L!A+WWt6V=@c5&=bdFL-hg#axW|hx3@Ve=iu}Btw+q4wPtd
zon(o;wg~w7j1lr$#Tcr0=>pW8DN>Js?oN+p3^Y^#u1)I3sq*A6-$hE)G$7sW6W1F8
zW`Lkb5ULjjuSk6)^nkwy&R}ZN0kPCpkQsp+i|uB{<-gHj#~xF**{5L5bv#}OlclED
z#jHO+c}#T=^OSnuI$4{kRQ`;DglTmZ8R{AN!Yrv)nfkH4%ETtP?)p)$8+a^0;KX4I
zNWdZ`Dr2ivE{y9X_TBcvaiP(ia*ZPIExJz5*~lBBl(RDgZ-LU4NKbQ#F!V%qmi2}i
z?9b*5iF=|Pf^SWQeDvvS>DG8v^GKP;UII(qUTa%|IzLLFQq|B=Zi=mxThpeXuFlK2
zvj1lT&V1i3-e5t*h)U)%Isx+hcWam=az6eIb_z3sWVMH+`KHGNuaq084wtRNxa|&@
ze#ta1RDZ2bbo|ZOXv~A!;PtR9O~2Fg3aU`PEk+Mk?YEzfy<CKnUqFH*Je^d|cwOY;
z%2u<kZ~@pDcFsdN_G0-&XO4Aa%+P5mL$@w<tetT7NAI<pNT;=&2=x#)3K#O?DFkIG
z=Z@;6_;8d4nJ6yTBcEV4Sr*)3ssJpI3umTODx=Zr=`J%N>T~$qwL$i@kFc)Ld^ebR
z3c&OCQ><lwr|0FQ2vsOP#FG9?^l!};I`wkv;XG<Nsc(y9LAgSqQ&D4Z6p6uXrDf{T
zRcKh(a9Llexv0IJ%tW}0jICmA=VZT6qQ%)E^spqUV=`BZ631~^U5FMb+waQ)f~111
z;#?*y#>{Lf-r3PyuZ~i^JLaL1v3V8?c$I@2A9B{@r|UnK25%b9k2o3Vk8l#R8%QB5
zqaceSp*P%$BH`oJGr11@_Hc}-$>){??uXkiiX9l%kDyxgfXXE2VQoA?iUK6QIagN&
zv!HTjxfj1+#l|d)4#?NB1r8})etW-h&OXD*Nb*kjHKI;lCQ~z43$&*PIb+_IMPQ<b
zt`4aR?PSQMEqw42y-}#_c;PTJD%6dt=}+120v1PI>!+}e<x7%8J7u1qZbNkJU$+JK
zRUz?R2ZI|pAGl`2U9q8FB)$P541PXUT-|(xJk~i)90E5lB%=I;{gIaus<CC`gZ$Z(
z5p{mG+4Y*6$z?;6VaJXP^Q4d)CFneP`pO@w(Ezft07Oq62^7dx2D5o{nG1@mrm*C}
zXeF(j8Ks>?{0S{h&p9HsC~Q-G>rKj-c`z|5q}`l(f0#oKKrEtv(G%-Qf&lVMWBaP4
z9I4nx72lGY^TBb|l*(^csA^<uvkQqt?c+&74czzP_{0?&hKQv>!DgdrsyBVL0y^b+
ztC@XRasJ7ntUB;-w-T10b3x7XastE>5aYK6?0f8d<vVS!=F>9j(hpM<NQ7K2FHe)z
z0<<{fa8;2A(xcEDgEgr5JqcJlU2I#|pXp)m`k;Ua;zT2GLx(!6CwE8E{$3jKb;%SG
z+zbSDVfXELKhOy>Lo-Qj7l7?1m#p~UzX6<yJVw0}(SHck7#uA_Vbup9B&$EeOe$2T
z>^C0idEq0rw~bSS?kQOu!(FmrIR?Bnn0cp01e@TTgx>nOhp;d~kXfhQbwGW<z_<Ck
zLd#LbCEn>g>BngGLC6w4tM*W=h8DUDcl-@DjP=M$A~(Ia7(-$53*^-x#}*(FZ1p9(
zp3H6*oy7=F64{Xj8vqXzC*NzvmDJa-T*NKoZ(38ejIIy!@vwp92s+W5zgIUCU`6|H
zkx+2b6TE3~q|}CsshffZ@~M2>EkHHE;tPS<-Vo<4JtkxQQy|jGMGSqM!jCf7{3a51
zas`MlIfV@76U;P-39loWrMk>5w^&4$*7t~5idw3X@fE1P+5xl-ogX%q#Yu!dlhH)i
zgP=zjN?hf{Cd(?_hmIo0oI)+&5WZ79WdmE@<~Q1Ec_)5=6CSo2KFJ1!x{~F&DF@*!
z;B5pJaJnW)%|i_S?<OK*EsI+A`>5iRZ;DZ9agp9tx9;733RyBE920|O&gpCNfo0>P
zq|_wWO)E;?>a23R86iSh90<V6V92Zi6H7>Tt}~>ZJ~8K%M{BBm|E~TD`qGV5Gk?AU
z==pJ&{Flzn=7KO<_b{wpKJ2>|BQ?f5_-&@TR}4&!+5xTMe&nhpRVdHKEm4X^Mi=M3
zT9X}*uxRRmbW&_wIDPwRC)#VbK}2mE3(ylVnGTu#TC?c`8>S`}ppc-dt$BRVx3u+q
zJ6eU*8>0|aTHHnnAqqn1cdb#jpC;Qgs&{F5o&<PsU>g5A{D%wtdK##?UP9S*^~&A{
zp!%|$McNk`>Mh`3o#b1OF9;cIrN}cGjBJNnP@WE*Kd1VPrd`2+ly1-I<O#n0*51=T
z64C=@Jk9Tp9W7YalRq$j3|#@>$5&$$G7MKut*!)0C0k0j&;Yf5Y(K_RFLx*Jtg8CP
zlByqa9}AfMbM)5L`bZ?Mo`?-1BCMA0**;ewG8R`qw-mVW4g~H8h#WB#<T7tbWpnJo
zNA7n1KOhOCIC%1C?n5+;x&U2PfAk)G9>D9=tpEG@m&>D{FXgUi{L4|G$O|1A-{%A7
z<OLE)`BKLawQ`<0@*O1B@}eisrY6TJF3tfF=O4cgq%`Bldf4q53GLlLTg17ITzD5a
z#nz-3CrNs3Sgp~940PZ9mOeQ%lL`)85t2UJ#}*pm=~%RWFT)beKKI*invVM+MIP{S
z^0C`~6LKqK3(6CcPwm`G#Uq65C}5;MLfOThv}2@tH+XjNOz3;qUYT3g$AIxkrM0Ib
z3JG?h%7O&Y0`3VjPu35j#7E#UHEgJ4Y}?|!&ph6LM*hUs@^rvwjw9+NU@&ffHP5K+
zzr2P&9cnD>!40wNFv+F2?8-_{Oa(TfQIQ3T*qMuQt@?^d+f34f_EHes&-;g6qqVlA
z7;LQTwM2*j$=6HII}wK%0*FjPI10XT<@nAa&)8IEsGX)wP5u-iKP28cmA_Ppn_Dv8
zAP3i1OnjpH78QW?t0E$d@HD}KQz;a}L5F5eFCT)E7*pwrx&{N%)#w2&$EDq*hD{-`
zUI8?b&@9#n<c#T-AxqU<9?$dZM}wbFdcFj-3D7Cj0$sf-1_sTOd5z-&G>ULVVMtSj
z4@bZh--(cPto+jgIN2jld}_@w%_oMY&D-`t{<;8Dj!(rIDcVo1Y2gt|8gGT`uu5sg
zK^3EksUw*SA*{*C^4-J!kfS*W5VhEbdJW~!U?;N;cvzy?GvG$$*l~(pUmMuIXcwv$
zOX@?(=_8gfF0tclQdGBR=q7_4n)&1WueVx(W_)(@OLpPfc2SzYu>Awy?<pBRh4Y7b
zjRSP9oThPI_HsoT-(+k{U|YggUM_D5-7l?e+&t`u>Ne5h!=Pz&dGlW?z!9v;iHh*T
z|1De0(t;q0lE7(_d>>|EvoG68e6`w-D;-NVr*M5Uu<IsVR^O<Lbl+{Ww7vE1d=71S
z{0QySL%lKMl5aYOo}L}W;aCKQh<4tM7?e2T6f^){#yqMPX@BHNB~+d#nH=yqTjUI&
zaK2M#a^p{pe9jFgYkSrq`6~v93bKt^n>$>ZhD2@d)vo;J1azE*!fWTmP6)%z@PG}=
zxuz8_XG5=Dp}7eVb#C^Z2}B3Ay<{ov7SIiqY(1=zVZ41bw(|U)XR$YFR*pj`!D1BT
zNDo*LpUq$B)Ed?Tl2(4}WU~*K&9tG#zg;%kHJvqwIHYq3jGk_z0bgs&<)Bp<O91<O
za_ptBA<T7i-#ZG3Z%#G!$84Tu(Vt>yYD@*=BYJOiDRr_PiLMh)>ey5hKxiVJ=Ms-*
zjhm-*)lWvIc#UR6x>h!M521~RSi_Yi%x6AOT>4v&X9C^(QHdN5YJl_){x?VChN#1m
zE8rcx(F6k09T>ND;nUM@C4yT)NU{_!O8aLgY)~Isrf$TLM8$N;8Z9q-toc-ky*>ct
zOg<{@|NEvk%_Q<SAS%JZ*M>>Iwtzv{Bi|*j0NRoolEuYbpP66F53={@yeNtHE)kZ#
zvOmSsplh{`mVDmsVSY$xIx%NXF1$G6IL>@qFbTU%v%S94;{V2KJ62L@MXkAlr~!uB
z4zhrbm0vYcFli%HicXXJ)@N^-vsDtp!BGRuy+PXOVARb<;QU2+Ja@9aTC{6HIzS!p
z_z&a?&C|T|OaR$%%%>u<B=6erjMhs4_)INU97++5%{Y?kik^j2#l$(Y?+@0L`skV*
zRAX)!@JuUsmX<^rPG)qL>UDP?T)h(W5Zax@krRc%V92xtI|tF^dRVc8gH>_auJWxK
zmsg*#gz5SmTvJep=9Z!`?R7zd7fmOyOy@wg=hpTz%r8*<#+HQDz-`}W&cwIkSeRN|
zXi08GqpJLl)%@~EVQ8lCc?>~FbdGFTB_Rv^fR77w9k|TxJJ<7Mw>IlJiZ1)dCS#-q
zbF`qY>q?@h@<<FvID*@%in};G#oGDp2b_~>#uA3Z8nzGpcU;>#^A=d%Ph%YPO9C@;
zvqPLJlS=)TRV3ZU-l{@r)y;>J0k!DM8xikeLt<g8_zDpU<$^v|v--ynxZlj@j`8%9
zIIh`Di#k<ODvYE|mb$+XJ^P1ykj=;Y?xG%eq<FF>r1E3Nz>I;kN!ynzV7Pi<v$y)T
z%4uUdAF3yx&ST#^a6-sCF)vpw_1;q2Em?tr!t1;cs=Bto#E5+S1G-h~*i;m&;v4H;
zJH}^FqB(Bge$RDfgJS$U^2PPcxfx`yc~zj{BlHefk(Hu4XK>GK=N{`0%>TM|ss;rR
z9z!xrJW0WZz$BG19?X;gjuGfzjXkdzPTdo;Y24H9S%|W!f#PNK6%AmK`qux=Gjje{
zHf&PPZc|LTZ@(I$*mM1bqNgx~nUPAvebmET5Id{t${Jf7)@}VcZLHxm$bvOTa~|lq
zlhx8)WAek|+|fBbz4x5#0<?j^VACDg;PVX`LA6_6SI3WzmhrBh(gOfS&lQPHpmPzu
zyiTxvNV<h8-=`f$r__*e*GvaEXU@I+_0V$Mua_P-%k3I?V_4s@CHZUTR@_u^gjg0L
zdmQ3SwDyx`%G1dvBiPD-V?-Pa<ntj6w;gDX;Plf!wVb~`fId89E#B3v!FF8UDrS*U
zPtxBC&C9%vn4tZ>#VEe$sP@)^()9OCSvEN`wbhGLim48OfqDlgSa5TOnM)f46^Z|I
zcs8%9XDDCBG2KEAm+aIBBy+`6nXD@LZ)xHL`b-uEF0D!w<62XW`s{w?es?UgXGc$2
znG@(v#T>tNhMRN-eTn%a$%-E-eW;gpagjNuGsPDLMj`CNM;-;RF9n1-cNYC`mvs0G
zN@Bkj|BDk4Z2;UbItVxCZi0Cfp_T6RfM)sY#L6FQwdNGIxGM`ONflSw@FY#*8jR7O
zIgZ!<H56#>`=qs=By=*m76@g04i#~`+j|hO0&p+5uXAz)$`kZR&G+b!<j~dWhtB|R
zNo_7Jv*inn6bODcUQ;}vjm{&$YYn>@bF-H1Jv;i3cs=-U5pc5yC6<Jx0MJsdiw?HT
zJ?p{@j{w4FaZ8wCP-5fgK<748v`PLKCQCwrZ{4UO?POs5b$D$6A6!9K7rOS@hyni8
zlhhgeF^@H`pmxHpOhzNJ=nFwLEB=iLS}eT1(~>Am)MZ<?ZQHhO+qP|2?Xqp#wr$(C
z&Hf_#{I{oXI{F<lB6F>oa|~UtPa1iaxKz?MALcP)_sk70^w!5B0Dun#92TuOh~E)B
zJ`$nKJ`fgsedKXRPMh1<nAh`#(FinAg?RN2)E^9%B9UlSS@kWEVHMR7?3-z!{@s}5
z?h>_SfMP^X5aUgU*Kd92GE$jp9%{*2$d5j~g>XnkAqTc@XI#oqsI)=tQxW7T5t@{t
zlJOsSYkA>hGnI4I;PDNSx_B1x<emo=`;Rj%-ghZctFoe9$&v=d&mVe$FcV0*Z2@vl
z+b?-W={0SZo@}$yO(Gwz@Ff5HJV@>pPzq)2dly<M!(ez*bfY&nAP($q`93`D?Z)8F
zC9;;3of56~Dp0OfUt!zLYR%SAUqyPOseaQvPoThXwu%xW?Q3sG6PvmS{`zkuCj4J}
zSS9$O#>YSu0{8FlTu21eMXQ)s2I?UsFM$6siop*6dH<h`fZ8a~lpfrN<rQOEJ(Q6M
z39H#3(4JTL_!aU|a@0jVml&q38i52#J(a+ivqkr&qOR>o5$4xV79gAeDMf8~Ik=jd
z{;S_BO+&_m>jjbzqza)O;Va6goNO{9m`vb%eWnZMrp329>ue3P#X)w1d^o>b!E_EA
zXJNddN8Ag_d;yVh#_!<2@SsPM{ctP(3TL$)wh^(RQIPz_j>&d5dHmI6&v`J5diGG2
zr}ANZLpyuRq?j2VGy5ouCF<4WrCmbSGG1!5z^eM5KOvq?_19g~eQU~T)D=`T1&T5O
zcHqM;uo}0#4(BzcGBqzL%p<0&84JPYk|>Kx=^TYzklK^<YcRBTt2KqoL;O3O6vD4d
zgdpB}j`_#!0?O5V4@1|~Kt>nR)LE^$j*Um%?F28EuGK#fORPVCRi6<ROV!g);oIhj
zO(&4FvjphPVf6INqJ`lJe^!WsEY$G0HO!|!*PG)@4)1%?iakcuL3pb)#rks-AfaNa
z&KtX=AZTM-$rqJe!o>SzQv!q0PJi+Hrz(`PRUR2r*ny3ixlbg`pfAEURZU(F4pLs}
zo?a8rTzVt=z)GN=2j2-?K+{t2Tg=pIbE6!hW2WK}Yy?sYttU}MEmP89HOax#ge=Im
zD<rx0C5!$cfI<<5Sb^Kf!lRNGPE`bCDq<&p|0MX8K!F@sES^s<FWfwl`E(^mmKHOr
z{F}t_qjcMxt=({q-=Zqz*FQ34WTS8IAv}&o_U=Gp%Wvp;62`{g_GFm$IeY<Ur7kIr
z>3XuIlf&b0?Bu!q9mW2R_W$P`KI+5H{y*}pluTak^Tl>ERW2PnlK;?_8zKHPeEsDv
zzn|Z&EoO{z0q=BpR%;h3RrtOj()LHuLBGsVEBE+#(=%{Ur4;D6?HbJ2L$q!8%wDU<
z%|XFw;J(hHN+{-40IVJN$S3Yeysj*fKt{(S=pmI@kC+a?^eOD1w;F84rx5Z%b;9g|
zjM%eJC0LnIVjXE@nOE4%Yvi#If5u^_%Bx(qg`RABO9r+6V(2H4nWLh=8TJz|^@=~?
z<(#J-`(&Vb*#MS*7986L@2rK^rfYQ44mC*|OoJqc6v&r~llSoR$?Ef$<x3`_%<(d;
z8$D!a`*!W3v2f9=$p#PvE868G8#mj`F!FPP<8)|jL0oI!B3*43$}fHIrM;p4@)-39
zC%YuQXfm`;57u1o04Z;kp$h?YM>O(gyT5s*<xs$4Nm+1FXm7hhtwY&iQ88J7&cR4s
zoR+7C&#rqb8n(kGz)6Z?WMn-odK_;nR^Dxi$~u4Tgc!*;)({<{j0ts+Wr#Szl&axY
zwZU+_KLk7bqTO<$OZ@7F%XDt{%?H2wG5PN<s<FL~ajL%lgqmWH%IRTm>m;w)Plzy3
zbIn)ARQyWQ4hHt3KYC$CChl1}8sBON3G%0o<=+ecba4?}UZm}Lf6OGGJzQ6I@gu1-
z3r!(fhL+Z<?x#~f39?7f*q}ADIpRJ=y0E(Cp*K1}0aO1k@l~Q?+r7%o<Di}|#xdJ-
zGvPvDT7+Z3u11{(&$yV*u5m#+YbH(6pY=~FK=)XdrMI!8#r(ztm>>iCwUmNDjenhA
zZhRI34?^S1%f3NoJujtc4K-fM9Uc$}z5VYC3b{J|D}rIQx0`|fzW+NZ0@Ss3AU<Z%
z8xXT<kiH<An+H9k?|z%VI?v4LYewfza4A9d5(258IWiM~g3v~Uayym-U0H60rhhV?
zCifzg+4V^*5cMBp!I||ikO*@r@rULu&ha6MS7t$N`WY1~LtN;;q6wt846&vucKChx
zQ3h~#SU0URxN$ZJg=pL)v_z)q#=K`wsLbi?7H@X6@wG--u}5}4!<S+L{I(f7PS5g)
zX+Zw~knl}Vg1yhiD+MtMMmtweM8!#Cnd37DD#IP`MR?TF#3nIs{LSvh8QKm9oEABb
zqri~|%+&n1fz4d#D5NEfoj2d5RGP>-`jtY7=W>x}Mc}^%r;@D@E?TM%vq!e9_iEnw
z$aG+qG)^cf@X4VskP5kr5md=MSd99E-6LtQ2<ofMddKP^)}y?7Ql}1(wL?6ZW(ic6
z!_a^9OKx?8tA<FapiUzkfKVp>Zt9aK8y?o390br5hE0jGIujV95T_uV=9J-R9}@;B
zv*OYCy~I`dDg{a&?r<cnv+cD|m5Z2<$s{{CZ%X%)LXuP@2<Ah>zwyoB@CQDs#G-XM
z?fU9s1IwjYXpa~DZm@TI2&eWK%uPdv`#K(cArQD(rE<*oTQJooOP?6mJ_XZ+d5h#|
z^nv{8)L`h*D9Kbhaq+>MM*s-js{@9XRwupc5nY-v@jJ_|h$FaUO4SkB?=~YsO)4{S
zu+;fPRl(6*pr70}z)-cq{%w4>9Y|C92S9w4XvBw`%Oo4;>*%|OH}NEDlu#>RZ4C!u
zv_durKzzi!7bBi+Q}q<p@!YetZ7ms(^mB?oJ0lc{s7{E<N3LcVPf_b%L=lsdvW)4r
zYS!-q5_$BF9h2I9Oq>B4z`zkK-~xj=`vXFoVxKn~Gs)5Ayy!6N@@Ul+1I-o_`TLSY
ze)FGw!gDkUK#m^lGJUox{Be5@TN4&cf68fPI?N(JQ`~3tp5@<Iz;3eJ(3zdlm)@d@
z_Rm8Y{9!_-A+g4mEehli0@i<}>GLL;q;}i0gR|@;5QTf5mz?J;wTFeGMzvLpPFh-*
zT#@czHofXG-T`gqoXV=aZmPIy8W=<wRQ^+Ylq&Y3@Dsdi0|Y7mA#|vLoGzX>#_!&v
z%i4J`CkMHbqX3K;l^l3|2K6a>>(rJzND$@KCrZLBgm-^yXApGBRK@A<S+Qy7%TG?C
zE;1EJu`LGP!&~CCVAh1G2-Fl`|7(nU0YKP(#q;|Gu-PgdtnrnW&n<++xQXEH#jgJ3
z%sgxbY8cGJ&h3^Ew7alc9GSl;7%v8Alz`+(ld23TS)08&41(iudYlQj5bYQDQY>2I
zGHY*hpzRxBpFEJN6#m`Y{aqyW6_c}h2-wWNIe<><p#iUcvxx<}c7zU|n&#z8RySVy
z{8bH|=d!ItfCV&>VNvpvh8nLNl*k*F>WHYA>qz**UwD|rsjep766L3i$n3|=#!Z{z
zWWm<Rw)mq2wWg{6qNITe2-q0q&<!L+fb&WYHiudXz}afGo!{q)q?65!v;hG0q#uiO
zDtu0neOu6EIyG+32VkrQgUsZ&2j<@_U{VWbR^`r?J*;7wxJDd&&Ayid-pz+__ufPJ
zv+<Q+^*LdVZTMKigmt$4gZ=8ijmy-To)^Q(q*XAlQK^6`4VVf|QS{dB&emuj<>twv
zV*!9Tx@^DUV8x;>$H`AYMb7UrNsVN%`dZW>M^&}er7!RRT7Qy#ye>3r=YDalCPQFC
zU(cGqp`Z;dPbA>?{(2}r^&CvQKD$MAbc+u9QyRZON8q`TX~U|WZ~x$AQC*V}@9c^w
zEjH$LDn}jzm}`u;)Qifzk6I^KJ~~Q{^8o%Mym@3XbD}&2bH}uC8KhTn^F?B25bsYa
zC<z`J$wx2f=&l~q#Z~Nte5Bhlpd=TUk3A95ak&!0Xoo>hrVO#nMfmv}j1=aRCuq*Y
z^0T<+h4yc}1;EpQ6<6f02Ri60m3oOB@F`rb)%7%KrvjHe-N*U@{Ban2gWRO^#l9&F
zGNH$lxpz1I05&o0s~4ooq#&VnhOY4L)EHcK-Uymv92MKbIY;b9H>vC^R&B^&L{^r>
z2a>F+g*oDS`G<r#_7#8j!f|y=I5KDMX;#!mj}CtAmD$xhbgM&LTYG9Zl!x;AexlOd
z0VlUgh}YZ!T*<-Ww8)#03T@v+bqb=hvK}1uuGH>rfQa=D;%Qfb+w+6H7=bP>=h0Gj
z?KXda#nT{(y|CqwTttdk7vg=ieB<KZ>_uCI$7S7}Vg<VaDNIJB^8R1W@T&qWB&BqB
z7u;9L!V%QLt1=Ma1&Qk0ieWoNYO6g*9Zgjf?RAu>aU5dUU(;hD<q!xA=SP7NeE{)b
zd=liPco#BA|0?Z*^ooOz{8qq2(}8M{i*aRc5v4l2xEAGn`p=3BOI^BaKQdku{ZOM~
zvy3i+^kMr15`$}my8O8YIIuh2D2hb7)0Q*eyW+gU1X|*p!puh{6ls0_$`d#poEm^z
zo{MSHX)$`1s6tW?>210f8_{U_O8L4drQx)pPOCHc(}g{#>?hYqM#yaDG@fRYdOzGZ
zPnvgkG#B+WYT&H{Sb(HmIo#GwkakHWS)6zny@$$Y;V8N}_A}j?7n*_`+FQ|`sd7wA
z5FD!lAB{u*xfpQ=)0H5b8X?lp^XzzF>}E;EwYxFaVWZIklA$GOn5tYZ<*%V4UR^7{
zz6w(EKEi;-wxz#WmR4%qKmo-&Im8{4d*zS<Q8fO)S^}F}KSeJE+BYYdKAaZILMuXx
z{c|Nn1sFL%;&4nKbh^pec*hRY#c2*Ib~XxnuGLvb0Wk}bo$i}wLQ>Fwd_`I@Z6)XP
zm(cvXN$lmxP5IbC{uHx!u<fZ$^sCOZ;MyMU+fHUOJ`i-TQxG22qGC5#{A#fIYvk>o
z+vfk;U#6sy)5k!NxN^f}BIg?Db)*XmaG~ENkD|R0F?_!Nl(?3TG;(<DL%f<I*2Rs+
zy800922R>b@WaEKI36Wju3Oe5sQZ9eEP4I5u_Gs|D~B-4Bd}1r_Rw*!;9d^WiQVfW
zPX#;V@$q1OPpvte!sOqAWe`iKNh)c=Cog==aAUb%VteIr$K1MPQG>FqICRV#oYB%b
zm+3F5E%K$%Ojiy+3a)t~{-MMXqOQAl10Zo*JEO*jl3Fdyw}~-5!d}iJOPFBjuyl+b
znps=7%k{5-$Yb<f#KG&h1G_~~sMSU~8ZxZn=@`Q^6CVf0rp5RaUrJR<AH50TwtG?r
z$27d9@$Q63))Q9w!XW+DOND8{>r|-LL&Vn^?)@Ym;eFZ03@X|=XUgFUw!hJ4KW{k}
zu|Xqemb;y+$#B;aoM{w<p9p-p&0dSr62~rk2?XPmL)fyebq06xwO6)qPjc#(WjMh-
zFq(1Xkz2JKVD{#5S)1(W^@-HP3LPp~?QVpQj-O|kIlQ6~*-rAWY|ygTa{AGEK7aX}
z?P)wCuOM8G<D}dycZeyLml!WvaCMQE3IH|K|3*<h=lVPw53ie#62U&GhB8!i%C0`)
z5vjrS|6bu#mCWX2x}aufjmHf>Y11agzo2cqZx@UJo|ctGhrJ5XwHnl?iR_StC+;Fz
zB$YKTZndPL%BA;TuZ}x|A$=bumAJn}7qVbAY|TULc{@TReZbf~2467nSdzU_Q<xh4
z!gR<M#UeqfZpPQ`?Ti8WF{kf{+tS*^%?&>^)*~4FZ-wSQ+5k}O|IdoS3DURCl2u?3
zM8hwTJ%7=Z9l-d*KMM>(MjH@a4dtC?idj!w^<9=L8L|2H{yED(ajmv|fK|le7U}2`
z+KEn%)Yn0GXML|!qsj2Af6fYP6dp~%`BfEwztN9Mcy&}v@KI;$R-UkGIR$E2+&jvJ
zd!Y@cs}II9SznY4V-JucwL=z55O@mndBoTZM^mC^@@xR9eRT++XHH57dZMxU5|XvZ
z=wn2Tku-KrG;gt=XfaWs>1H_quCG(Yo^3(Awgqv6G5b(@BErFt)I-5O$~TpmLp?mc
zz{wa{Og&ZnW3FntguE<ij0e1@j-xEg0X^9*Ik$J9tFfUD^4_%!*?4CgezJq4u~mv6
z=Ag(aPH$FeRt62y?%x(cOc7?KLMD%Z#=6|J4Pw;NK7&>dGyN9PzL1cvI7e3UavR78
zh7|4kY)sCRfzR>|WjjPWFrU92m3|{&VXB)0HF$+twuF6%R3U5zQMV@JQlq}11JP;q
z;RS&vedkZhs6OX@xOxY`V2wapI73xt$4}d_WgWG%GxQwWt;p&G*Q@M;Rl2?po*3TK
zEBlRdR;Mx>wM5i!uHf|7sM|WAm=h5GJC$9Y3F_{9B+H9WOGg{jpDXT>xRZmw5Q#Q{
z4rmQ>x#fh2*P>^2wvwDXF!YV<&}T;J?lJkG*;rJfy>g|tvpCl|bIqJ^re&9;qn*Hn
zG^>`YM9?039zz!2Uah}aHU5q5^i=h)BF*8oH%L->%91XnZRTI5?J_2$Rd@2Fk~6ph
zLw^B?|J-){RryWBR`o`?Jqy~U1Jd9!`@a>&O=OjBRbzdKB@H0qaI`l*o5K<E|Jgds
z2|@h*@2vy=e{Ra{iX#nq;xT>Od`}uYrZX;cSGG^Kh<WsUHU}zpfXOxi@hVP!sCPzv
z@~eCH3QS_2&we=Ibb=W9rwwosa}RwjnHo6jKEu_oqQ@+d^AF$7`(=yqu{Y%@9w;CW
zXMc<-Xd0s=^ZN`-fJF9?V^JV_Exk1(i!aVKG_0U1uV)<8FE6a!o<<F!r<;G~DUuaD
zrOt18BoB)PRFa~}Px<+zx=$}#Ed@YbWMrSH5!)pL@z3i^xu}_Ylc{zWXh~)%Q4Ajd
zD0RTLKsh)BWfia@HHFO11y@U3_|T=hI1l&#M$?`On7P9v@)uFi*+G0g65bW_K{7Up
zvCmKW<_OygG1sMqU)pU~r5n+ed+diipQzTv@RURb#q!>vX8!?3zrrSe36SacH!tQL
zEipc|OlA&xCVt77DI(ykU!wXF>xKRKUR2b2DoC7!$3q^UM*cMzPJa0#b}xo(6X`{w
z%`O1A3hH@IDgEnZH{gy>$}KaSReu{{+4@SpdcmR`D<6jNVdJt>JL2-<At&s~Z})Wn
z)b2%EIhK)P2ywpmicLGTF5&tdalDJ(LPRK^`zz^=dwQRd(kAOYYP2n5T#94Ery*Sz
z3owYTm&D>W_6!g7O+IpHhlGVdQ#4{6Tylws)oI>#dchId7HzK^o-{k;Iugn^NtCCO
zB3mg!kaGgD;<qCJh$pDT-fQH$&7;6G4=?HXBtdHTK5tX_1`uWN0y+Oa>JOuJCK~hp
zrM}~o4aaRAlX(sVckVB<2!7Fu3M&u^FiiIKC$B2L$Lgv>bnC;IB8i<qThRDQ;pCLL
zCD9mAi(Yk30!pJ(L(da(lmxp4{X<HReNztoYwCq!dj_be5sD594AQ*KQko?pI~Pi^
ziS62J{V78CIo>y~^rpCJoTpl?xK_=t%hvhNXwCovuYEKX-5ureV;!ayEu-+d7%ZG;
zc<{R1n1N+lymyJ*xf?p!uS4Oge29MAjWgn}%UaO}5Rfsx?lwd;qqg<J5PQt>>0A#w
z5zIMhYMWJ{+l#6n35y)*6+`Mc8DSg8WqNJdid;WJKD(^Amw7h&TOuod>ThWZ3B^UY
zj`I-Gm1{t%`1oF>hET?><$Rpm$Dt&AdW`i~4TnIA<B1?Yf~w1lh>Kj}mXdt1iW2aV
z23hPrGM)f6!XN}Fb??{Jv@xqRfMQI|DHKA0n=mzsX;*^gmE2d|p)Nv>N7Q+k$`!^l
zLW0TpGH7K+ZL9AhpeR2}AolEp5d&$%#4ybB>g-v8pEBagrU6xJZa)ckaP$7+DOz^D
z%u@(g^&-Bdb>;{|bvbHWTMeUm!!`_TG07?~&FDaC5X9R;eGCW)qGJKjR$8=FmV~>2
zEtFFIq+|3!c8#bZ-0@fz!q(U~VwHw^kVImeAe?Ld!3Ff&lviP+5AgVCLayV;ffEvt
zzw6t3%!bV|j*P=uQS&H%XVE4%$s$Rky{MBo%<}_2pAseOR82TS&=TTXP13aZ$+U-O
zYL4!>5<6az{<p)_vQF{@gNVC^AC{yQ4ts9fMntqS)91N)CVza%Y8%i;xeo3Y_#BgT
zNG59;vTypCi)HJEAt^$hAg~)HA0lp12yI|>)kW@h{k!#rmR0OAFw;e%`BKq`Dz<(E
z0{bse0|vkAetG=3ZVAPu5!B`uQLMOnG}t#8XkIv0-ye_XfP1GOMjviu*4#iR0zIc{
z?d(Ah`^|){Tt1vhca+fKK;to&*;XUUe@ri9-K8=rp?Pj`Sr`sICsRXp3W_HKHInIu
zoaf;?=C!@8q@|nwOxfkS5?$5bI2M#Cra3L4kG!Y~$u_A&0E+A-(5-zKw~gC$ePT6R
z4L|$>njW1Iz76vXQfK<N`oV;Dxj@|^M4h@ZboBWE1yKhUu|DtMeWt#JgJ{bt&(Gxw
z2^h)g;V|?Q!d4e&kgi}5bDPnv_0ED{!`{f%VKOT(!eymu(lZ|k7!als3}@Sr`1a~O
zOmk~vTX}roA9jI>@`@k~*buX9353J&96SDWA_()3H{&Pv&S?1GXABGJ<IPdT>f%-W
znh04fCrXF<$u#WGw}u2pLVzRZW9VhlM>a`kyBz`@4olEgCt*Oz#v`Hkk}7T56@M?~
zCN;(y%PVV_H&H%!X0o!~DY;w(<p&La0H<03htGB8z{R@WAWoxpD{U7j^owDLDMezU
zaYu?zNh!T?I|2+o{B-3}B&`b26F{p6u)xJroV`8D$D^^=6N&wxRqFP<xReISVUp5c
zzXR5nzO7PtqnD3eae8g9)|Wen>vH@;g_;(H_XbcekqR@u>K?k8!iCj1x?^Hj&K3w`
zGG(#0x4>JsH|KPMX8$&W2Wvw0IIEvp@ELMmJLG5W84CIn{Hf=1uT-pXr3XD8o6XTz
zuAmLleQB9QItP6sl8WjP{+Z@cdF`~#V5#*DSqaiXLVwG`c+6P>De$GN2Jo1aafZiH
zZs8`qyeqLPhn^-t?oebRqOfU|3X5MRp$+DwT@SbYjEJHp*q<2nfeoU0W*U;J3z9=E
z?QCYL@93Jv%>GVXgL-Na5!pKonD)7acvgv(Rd%|RK;Th{5<IE{p&x*`)nIQzFj336
zGHvJJV7Au9?81e)7W3>W&*t^XeT`1#JH@fl6F<q$)ecKT`zkn-olKV(e6_~;gPHVm
z-ti%UYS{d98S6%FOr}k;!B&TOC?d*>PEQA%Y(LTA4Ul6=;a|AA2jM?J+^jECOZNWo
zY$9hz8#<>yk&`lNF}2%T{TS9ejKek}<8TKI7(1-enf;82X(54I7fFy3r)#=Fi(nF}
zd2yBk>BAd>Riel$SGYcB7U9e45GfoEkhQ;}4j<SUEw?mQC;;lvBKRr&j!&Xiv$xav
znqRi_pgK87%d7rnC_XNh`krm=GUc<bwL#&rL36o$<jaDxv)J8?-NeqsiOUDt;@U|(
z&m#^HFv$4%<^AqpPu_$4=+_C+>WOakm@AF)@5%3U%edm7yzfwx+Pym#pxoSr*D;%d
zFk;=RdasBT4b=mQ8(+S5a=QQTEp#eS$(H>8D1rIEXSzR&LytEA4duJ8QV|n>goGl|
z=g&&OSFejBn}b3JRr`$1c2W$JO~7q0HEc9p#JB1DcVY{MB?IXzV<`z%Zxx|4n{dfs
zJqNzBeK$huMV!+1{;<UsPBirmRX3;SvM0=klWgWFhNs0(AD{tL3C7zIQ37|1eu-b(
zRPCPA%nQ3`hdPALDv0$-jY{9`yJnXy$x`iSE00Z9hODwJe3O01?t0W8TtM2VyJnyR
ztIsxmIqgTu$HnZp@u$Evba-@|ivrK#n)VcC?^={EXKTsq;A$(}(54Fln`jOU*lmLq
zNfvGw7JLrpV!xy2*`{FUKLhS#-Bbyq2z2xk1WWCLB^JQgubAjWyx<AYd$qiA@sT$r
z#bqICOvf4h%tkeZ29a)4)>bo3VT$?G!CU5Qm8q;{@K25+V=GnCGXZD2>oymPi^RY4
zusf&|B{BoO_}HrYV5F4#yP5Bhx_&m+SCU_&JDH7Z{Xt3!p{h(rJ2h-=7z=q|{Qc?z
z=SyVZRW$GSLG)zqReNDL?I+rJsRfUQp!~NIh8Z2OGsN;y5lKJ&tVek*y@kE?-PWNo
zH>C$*i%cyY%qokKARd!8(n5f7I}OMXNRCFlK7)A=_6hAJ465lQur)_LNTwd9WYX(D
zgs`kjpS2xcFu0>Y_V|Od$8(4qE;Y};SM?#%EoN?R#P<xYeMg%h)P}m~2lyG#yi(aY
zfJw;8*i0ZyGGMFS@^UqUtjmzKG{r{1me3tY-~=OmGI?TfhKJ4c08+@dZzr4FMcN2Q
zOr+)t8qG1*L8No*JPWyf(S1Dt=ayMMY#yB<(gE&M%13XTuu9AVvs!IRJ98EvY&so|
zJA#$7%+&5cl8sEd_idjHy|0LES`*@=I2<@^mEy9dBOyKdC*fwb_ad&uyXkZVFIi3U
zZc|Ryux80Do{Nhd;UEM3g0W|)4CojAQ{3nQL$aPuyeA;3bqQ6tG($?}zN%#H4^r2C
zfTgqF5uXA~!h%0ao=YaTdfD;rTE8_?y@wK1>~R^?e=6oJPeyifn{^YSk&?u?6;&@9
z?dE(apLl#$BjFyAZ9_zYQL?~SCsNXG%av}mtO7c?u^2_M(aUTdA%boDH%ClM#Y&oS
zULt_w5K{UHk}iEWU9T1S@;fDVTnkP8INmlncnB;)O5fc)vXIaJE(Ge(6&4zOSiO%w
zOX+3MF(f6NG!)T`#m0tl*5DehH7xo|Q<gtnn4ZPK$w;;9a#lxDC=;7{3{a-h)lI&f
z=XaF#K!XUF4d|-R>S@+#0@<s9W_9hQZ<YRQQVXa1_qvbtGshTmx%S)ssiJ&k*K<|&
zmpq7T_q+uNIk(*q7X}7cs6+Sh``<8DxD7IF7RzkX>`ztQWN=aT+H}5f5T6?}{pwXx
z^DtEK2=#*D$uLL0!*Omas~$3+^(c<t?)iy8JO7NEL&@<H*HL2Pe_2AZnuX?*;-WDJ
z&<Eo{lI5I~Q%!?zmnP%11k&CW@kDVIWYMg99@jk7j&s$1aGHTNk!3eXgsQ|%os*rh
z0nm0@j=NG!?Qb>)Qa|?&Y(vWPpmV576-Z`>^LFi8`jhK`AkLrtO#C7PNDQ7b#F5pp
z{Y{AzZYy&Z2^`6w@%v&Fg=}*abXVT%MbY=lxIIBLMeMQZgDVD%gDo8hnDuX|{@m%q
zY??(-vR%uW_1vgcy5F@>TpEgN^m~M@pUZ+N1^1ouxSQE$NyYm$4n&w1klnnjF<EXy
zfxW{4&tH&2QE%i?AP_!VFdDABX8@_H0$Cm?44!?^i-Sa?VK=YUl?i!X6G^|qblUOa
zEKX07{I?9bT%wNR=lQ}O&|x>v-w?k0F2pE;NUbR^Jw_QMV&-qUsG_vZimqmn=kHY-
zBu>HtOg80mL4|m_3;3ybK!Q2esEZ<!evq}_mS22;Z2*-UJRuXTBg}LqVUMmWI&Fk8
z)Mb2a0Y0;SQH)?F7d(cJPED=r?Mk&#N1hbE4dERI$B@MJEusB47g6B#*~Byvw1uEW
ztOsB@0}dvc8L*j2pkN(}0S;Mb!!j^sv)6@osq_3t@E?#gNO%G083-JKEbds_Ani_X
zBB7=i(G|izP}52@2c3D1f(qlJrQr~M9q6f>*rPOmj!I%coW7n2e#KiMG>ee6T2Bq&
z_>_AQ!xU96K)F<CHNM*d>jhP2@t&mgc||Tupw+Sv&kavWQV%3z#|2Qy&OcsJc|&lo
zDb>)Sj|&_cB>9i~qa<@(h&l#3fos$;BmcN0bif6%<@Z4L?;8$&SxvzQC^Z;2)djz+
zJ~yZ9KkDb<S5vWDRpTON`$8PsLOsev&tnejmc1%ll2-}>p$=VoiDqFQ+r(c{m@tnL
z$su%It;+T-u^4(rabPNeeZJna4`^NE#65DTBP`}_Qd|gD=+VN7mBp5rbKxj)^e9|C
z$$*_SmPkG3zI2S%`@}_a@J0Y7D@A&l(#>`x@kvZ5<$cwFcDhRH$;lxsMFEWu`Wq!M
zS2&erRWh034$X%)jMQ5CCFXSoSWc*2{TQ@We~Rfu*Eat!4~`c?f$yy}7qY3ajfFxu
zUI{m0l0C5PUv;d|Cm3K&88sMmf_<H&J!s}O%wY=nG^>T^kG<?Y7pd!*e$rv}-r@>7
zkT+ZjIwlA}Q#Hz>#Uqsh(4aIdYc&5qsglGF1(pu<*RBx>23l}1+F-k8G)$CM=tj`=
z&u=j`1d&k`67M-KY}@i<Z;9aIo;mp4Nyv!nI>@yAT-LN0M~+OLQn1N6(mi%bShXPk
zZi=4z23y-NcwE=O$An$uq6vXZ)2$V0pQmVuQ`Z;Xbbe!AU(w_4xA6qBZ=&JcFAS)1
z=}(yCQMT|%IGFKfjp)#HcoC*#P8EI0-YM0HKCo_d85<<>w;nm4o46IIO<(>yXfy^c
z5$CGU;G>mF!6&n^FhtqRKFX|~I_6$Y0`x_E(lZ1fx0v90qj^K^6xT?L0&_}&39Yez
z{c?*NqFreKG&|(BI|nrOFsBtmAE8ya=7aS&f*rW_OM&Ctj7pTg*rkLnY3ol(70f<e
z(7O1W`OOVPStB3%fr)Ue167H9lh*%Lmi-eLURL}NR`Mrlagpg#mCh+?MI%CXcjZyU
zJ`XY4@R*AvtrDgb8qLctD6`adw<{qsx&Vh?(~W+7Gd&6+@6$O}!!xONpnh(h+Mby$
zW0at4GDZxkfv>M#ocs2Ux1y20l*rniTheBLUH7IRZAgY+Fo#?%x>M(nw$-^4Ol$QZ
z3V5(v1MAqO@f+zh)m30cjr`USH3EUdVZb8kUBI|9G$!#FiR`5^#UW_f!qnzQ$X`sQ
z;E3yZ!>lM~LbrL>Zxuz|xLL(Ek1NdknnEN)ZGl6t=T)|k>ca&9=HvZWtkuEdhdt{s
zuM>4ARPkwl*-!-6i=%1|1gTBY?=+N=?X<QhHj7)Q)4ls}*Cf`Hyr#?v<^`Xr)sbUs
z4eU(D?Pz92`BG{bC?Psby5ovXfkfox=N`qJYTUn@VeySlmo8G-#v%`X&b<?yc2dbd
zx3(5rdkCrXUoO4Rb!(~=SVP3G4^1SiC&llfN0u~vDvoD#%C4!q63MhjOz~=>%Nd@4
z7ik~^Qo=Zp&?$6S#+2xfKs2g7DVJ-@0lwCJ8<NUzJI5w=f4O8R4YwFV1B6-c{7~r-
zn^SVR%H+IR0N*rf)f#i<y(Ep}edufPJv3k1orAw&0cZ{7L}f^Bj(xNAJ2BNeu9u~C
zaz#>Fw(a~5|0z_sH|7eYg9!zdOusI?=x4sWCxKt}b$tjI>tt)J2i>l8Yo>**%(w{H
z+Ew4qsca$f`pHXu)rI`WY;I=Qfk^+P*<{JZhEzHBP6e@vCpqdbdXF-UI~bm|^p#_z
zn$8;zN0u3)N;>+|auSL>20ryp^Kc8-ghx0`1rI1X^6DKK7X;@+<wW=9S-=-q)#UkP
zG;`~9j@*q+&P$6Q4e30<+a<ObX{lT%Y+o2@e%7r}@#ej5n#1L(BVpB_obYGzEo&kI
z$gJZAYV1o<n0UAd2Kg{Qvbc6s(RL?lQ-t68tMQt`i_2tY2Uxl|>1DBBXlGR1lUJ)u
z<O^*-`icj`t<U7AWI@dkvfqGvWO+YH&`xGbx9>Ic3uo$($~_k<&=E_X#y0a=LvV+{
z@3q~vtfA??_VuMRdJmMwI-f1`Mze^Hz^t%Pr>L%%ZQ2Nl@dRsO<`MFFyB~qb`AAJK
z#0~P>fnMMn1}I@w9+~y8$^li?j-mjZ3oZzJ27J9Du}aOZsSqfn1QKc{LyF{tX*I5U
zX^AH&D3b1I)x{-H^*v(7n;XJ%8cG(724_mM+<JO(WL=9=(!4Zv7+0Ce(>NG@@leup
zaU~2Ken4p8H@xU}Kylz=?xb3RcF4?Yp6YV%>|39PZzRjR`R87T0H8Wb^PtaiRnfMS
zei$xa302K}@M?<1%@$3wu+JN+6SZoHA29tcA`Dh<e<7doXy06gXWu|@J+&A^#7k;z
zBPYn$-qW&wGxcE?aJ$6PuZe75?fe;4o3k$i(u^Oy3puZ+#C5U9Xe+t;?-~rX&uSR$
zRIsHX1Ad<91gK_lzOB>Ej!&Vu8<DpLyUM<{zVei2(EJzFl+ivoR*Q+Q(rtPfnD&^o
z==HOR5pi?_!<Vmgm)P)K6TDIeNKokA>^;A;*c%O*d>e8hXh2e41e03x%k?Iu(%LgE
zFw!%dO*+5{TgCJDe6Q1R$VHiS6Ew!Sdbt?8Q6O2+3~9`~>V~CAD|NZIkN4#gm&b`}
z{F|7BVtk!P5|J;!rb_Mf#)>4T51SNt2WF=obW*kT+t{+MeH=&$91D`T-LGk?V5#z(
zo_)KgGPO(b$OoCZz)-jhXp7z#2Bmrtz3ciN6nENJd@x4KYhRev)w|+;>NuvI`O#lY
zJYy%o@GSfEOmmZ3A-{^oCM%}EcKU5*@V-|NF994{{V-4vuaNWG?TN||sK_5Yd7ITr
z4k3qc676$%IZ`K^tMY#8(C;m6AW*fB`zGe?+j6XS5b>QW!T&!1%_&Q()V#yCII}ZK
z8|GJb&Q?PA3=SbDplf2r^y|;8RBaBT*BKHW2uml4Ta{*>wfR*-)1?%0z<B?i-SOTo
zp;oDO%;p(v`I0EP&48Q*XS~C9j+RaHWP(h<>KHF&a1r8v7<=ptX3^67oS<@GSPc;6
zxR#H=1n?{wzbb*A8OAdv>?$-(1-?UvjCl?LZ?sYQfxKgIrF(N8>~Bcn*KfW4Ecrdc
zy@_|htY@^>F(`McD_X@cHB!X@3;^q|Axxay&`yy2!ndHYuG&8sgZ6`PY@fagq0uR6
zDpLh2;pSX)h9U+{I^}nzDi!2u@uGAXgDAd*>;|je6Rzdb7k>u)1UU$?*i{q*?o1z_
z__oW${_ab{uS;DaRaLwhFqW5HNX{w-oC`7}rN5G)r@01Srt4~@jB(>7v8^C2m7_T*
zcGA`dQ_Cp^F|$Vo28=%eiAt>X16;48*fQRE%Tm6sHhp9U?>K38w?;>>Ne3ER^!w}D
z7VHEb{>w;-8uq={6zi}Vu8-d2zhWHw4>w@%XBx!fuz$-1ZOG%x=~~1WX5Xy7i|~&;
zgtBIE*#UJyW$7$q^~9@03CgIUld3%c<w#@wfTm5GJ<?A?U%6gEjl7B1*zun4a_EN#
zgCrk`+3f?|yI}CG@M~6B08XRxZH$ihMT3n%M*$>!mTnGrZ_e~)AtCt`w&JbzkJ)ir
zk~iZw1Rrr+{2iCD2iUBR8xUY#HnGS=2dS~6K&h1J&C&O(?rFxB4FY98AOn&oeslE0
z4ZkMeda)~3WTeo8(E{CP{i^E--J+@7Huxw)L($l=Yk*@^D~{bjp2{&eCWJc$f5BJ8
zznB_#5>NLQIaxf*@hw{Cu^q%tkMKR2jH<UJco;@iHSp^tP=#oGm2D!U)URlT06rHQ
zEl8BuitZ>SmtBVTiQ5%Ed9-c9K{4uD+GfO@i4-`l<l&UMTDT63MVSA+A)U#8GyE(?
zaHfu3GOq8N;j2LpMed7bqzuhVqs8t8T)m0>U9T?|(cKXYOPA>5YNv?XWg;+IDd&*;
z*7;%f!s<!g;_$o&)=yn1=2RKYB*Vg#muls(wmbFdkLX$*N^IyWmWw{B)h7g)9WNHk
zt=OZg%-oZcc&f*8_93`61xj`rrp-U{t74pD5uoUAl+Um~kG1~uLlZm649;-PqYsrW
zKdufnIE3HocYM9{3gRnF4nKxVl4=yuOx3Te_bLa5!uy}}do~58GNHeFJ^k`H`ugc~
z@|{;9WmaBN4`vwqsEi|7fCEonbqX_kz(OZAtge>M;~o>^;W9aaYSI-O5@24FZW1us
z%e6o_VX<qN#(6h}Zcpjs;);JSZrV4##E&_e3e&KmblxV4+?Cb3WE$D1+&Y9&HQ@Ae
zzQ?*;`A8rDCpfVtN}S-*N~(ASLLh<sd$MOK#NfIMeh-q2KD^CR17qD3v`9~r@a@W<
zNkKXRyf#cEJ~2&8ppZbnhp?E}0$oTa-jf*9*vehCxLb2aUgbDZmoK7N{rZo^x(-Hz
zO{dKR9q6hljpqC)LXrP>gN&(qkir$D?W}T@0l>StC@nUp9T4Nb7~tt|#g;jB;lYi1
zm~otFABA*xu^mVs1)8R9dS_r{T19Ex{7Kl;@J5<`QsOW076^wmQ5;k9E%Dwqk|JSf
z{3}KtjHW_qaDWRl96u2_nPb!+v%{6qdxpOmSmK{(*Me>)?L@E62S)PdV{>G1rH`r6
z?=2|tkmt?j_NqlZrX~`ko-<xWsBv|WIUdM{vZ_&ftPi34G6h5bU#Pf0_xO{pj0)6H
zMI=7?*3uMAESrEPU87!*C$UL~_~C@>&^g<;U~NGW&t4Ix^AeL~&W#r7x&MWngAYSP
z46YNr4e-PqK%J$P70etZ2B~|euEuD$<V2t%RKjV0s)|gnDNb)E8q#b82%4N1*rV0&
zCB?n%l4hnW+fp!V>u3FGWTQ43SdJFAg^Zz7@A`(aDN1bPX+4NImV$RzYNH9WuPjaX
zmK=WCEQdrM81q0cyZJb<%_2VHWYpazF%7|3axx!XHwNm*hjoS3bv;IOuxP|<{l+Ef
zvwB~RXPes<GXfCi27pk?nA0|f1}w_;RLH9Wlt-8<ODeX=&BG$9LB5-p$Ib3O6vQ!$
zu*<fI$lA_LV;^f-nh<agc*B$gh-O99r*O6iQw$}v$y}i4r8}1*AuZAtHmig1sZ#pK
z&t4Yc>$O>AP1pqPizJM3fnj_XeOQLs=cIfW0UDg9_HI%WZ%g<U)=GcECN|fO@ZXFS
z{%FKtFe7%0?3wNip^v8*bd(7wP5!clBui(YcmrcBv;nP@Gl0EGI`Y9dB@8ar28ULI
z;+>?7!df5P2Hl7FsR1?PWO@VJ^sk@d`phQHMIOk|l$mI9Z)8zVuw-?I^t+N@K!fAW
zTHZi-OA^}@d503O+fS#6Jf|t$m}UZe`vSU1of<!^m+u-;$m}$W&d9=rTGXi?zaz(X
z1CZoB>7)qf0g8Lo<u)G|dmiA;ZSa^Yk(JA#&|}!k4E(yy&M%C#g}^oWJrOViUL`J}
zh})6oXTB^LL_LA*TG1#{-WfK7(5>Kw<y%g}32f&yoE>>))Yz4E9EDsEWAnFsL<&g&
zz%h2Gd>yOYf|-yjRDN-FS#(|;8pq{MF`Bi<8(;{AV1Jl8=<G*;EM#PG)Yb1c-iTZl
zLulB@)<Ub$*5M)$rs$f>tdA+0t00<Tr(NNJn~*|(Vx(vZp;8kiC$#T9_TQhB9T??Q
zAc{@11GzYL&)dWw^{tY=n7Y8LC~-Mmvjmoh>T`<}EfS4cWE@(h7v~giJ}0Iuk1;Y4
z&zRD!!?cq27QH;s7+V;U+RKyOQfkyeuq0*jSREMa?sj6@KvKGAYmx7z-VP*w@Unih
z*5{vItT^viDrbdy@F68ef740h@M^MyrOOJPW5wl(tg&)32MTOIJfdOJW%0|^XaYcH
zSh7>`GelNWs^u=O%|MhnRn6#~>$J}_4rA2Uy;vh;G1z#n#dCEkW*_cHL8-O{?rdWm
zBEBEA5J?`@>M*cTplsVaTEI>VKeixcXnnfk^W<DZ?ea@#FRGx^!HXMaJ#DP@yp!PK
z*X2kOgx16XBfdfb_ZR`%W!DW7-CMvVFCF8S`)-at)|4=qv+@r%{w4J~fF6`c4Nh~k
zCJU}QW%1wd(l@hoOO;xKW%vjc4K3;RJLa{QvqtPrcD0iRW=Y6DG9UyqS_!3qa7@;}
zwkkD9i?l)!0qO1GNYIQWuBYqh^qc114CQqazXrqCgIcX{<T0Qz3$e&EtIAEYIKh*a
zp0+f&J9G{SEj(9s*x(>AkX_O4hQcxaYwwHV@~ipq>H1Dj9H7A6gwM|AH4z$?R%lX8
zNxJ}~(1+f`-9mp`A>AqD)6-vw?{H)O$~OlGCdJK&?IJg~FeuNcM+q|7iGe-taeeD8
zeEoK!=@=<qV;3iG29-W7?+I&7JxqHSegQ6U;q^^2IS=`*ujaJ_9M)yJu=z(#A(6?M
zebf9Z(4|)aK&g6l-NE!sY9<kwe9kKBMoO%5@5b4i&NjDLJjXD%6!w6j)d-9K_!?Ic
ze~Ke%<A5j8`{)cZT~orAuF7~l;!w)$13TdSS;fsz%H|%Z+?~`j=N+TAmO?3z1AY~l
zPcPdu@H97EZ4lC^3HNwjrp;PZcqH8K<F9=`S#9y-0~8Ef&H`_Bp=xTYYC(R<9Lmlb
z0x~TqO6S3GXWE?Ir!*mXD2D*V$FsW^3~m<c2Yiw1#n5uKQ3l~_oMREH0=c!mZn^Pj
zKdgV&#FDML1wbXEa)qICUYb>zyv+^I)t1(g4!A0X!x9zpw0DrxqGZsttIjUk2%}_L
zaM*a6uxF3$$9w?RRjyy4HoxF=&Y@LBAHD;Yxdhi%8GP$pSH|uDioLwTN5O~U319AV
z+&V;$b2z327B3QptY?D;iac-pa*S-7zGHs*daP1QMc8yu<g1av<v@CKJq6GYkAU#o
zV$_og2~^a9vsOzaMODI>boKb}K-*6D1$vuWVJNn(kxmZk=Mw<M#fA_NpZyd|_w`b&
zBOMDVslXg*qFrT@x(H0vQ&dw-y8jf19#dc)44U{^BX{3Tq$qT{3`FB_lhr{<$RGUy
zx}NU~7B0U(Y<tf8rR@|5kc>?$WUl2!9r~F{d?;MRw==r1m=D7pPjKa3kRgY9xo`%t
zZ*QZ)231@^hDSazKH6^IwZ)(?!>kYU5L=50PXGbqlxV`+xqUVQ&OaZ6PgwZyl160y
zhQNT*<ZgQg)UyxJOky~bC433|lG<-@9Rz>(w0XWGbpC!0s)mZ4(h2u{S#@Gt<7gJ8
zXjki93TA5#q38r&)u7A#6VIEXZA29-Zat3yXXaKLcQJ2o5NmaVDtT*kvq0$tnI$9z
z{bocu7c#ME{no!Q>_bzQwGk4oBS)`nMgJk93Yxv=WQ<TfQ6a>A8kz(Qz$j^^hJ|cS
z?wmD5vfg0d^?o=t-F2H`MjKwV2A6NES-}I#{5O-1BIFp==aLSZwNwb^YZ!)w<I4lM
zF^D7=CJk6R&@T@lLvNT%`3jCaVZPMty?D>a6b^=4SdG_C`$oS>ZKG{uL@&m4UmFpv
zLgyHI6pRN-YqcWf!8imvz)<%7INtV3FIaa8$*9!a26{3PCqKK^fDIgz+!LW~n!W+6
zow3G$Q;y8=FvEhNs*w<6`wka@#SOMN$3XD&`xOdoUZlXyR&RAiw>~vRr>Juob;d&v
z(2*2_2J;FE;gZz>lGia7lU|zi|C=%z&XXEobc~t1TZT^T381MCh@Q`%*`5IEsYqLJ
zp)#^L<6=P<nEvOanhUn(D7pjqQsCx=6Le*|8|vLLj-8L>z}uM>1VonoqOHM?r`IJ*
zO!2411S*F12qtJ~<r}r*vBIeD$EHd{zBXHkGzWlGuxeB}g8#honz_nF+OjM`=KPMD
z_KcjSBn>xFqM=m1nHB;gjhcjn+9xxmuCfDVkkTe;Oxy7Bs*^XD&%h7a<8e-)UPUfk
zy60*r_|`h!e?lexuVsq}k|k9#q<e!`Y`0@4jLz2xpm;I<nOaa%Rgm10>Q@?teByO^
z6zf_Kj-=&8M2qG7OTE_6ym5HTCN$Gtqc;&m)pu%EIN?}tPu<%{Hq8oyG9?O6o)RL-
z{ed7!f^mg1$r+g}Sy*Fz1f;`i1$h1hV%$Cy(ry4AJFtk=eYzP6P3p!>KPev*i3|~o
z8ovpuw1b?ylB9_RkoZ-KmHabiRb0|mwp`x<5C@S)&!287Lz5+&{N2=!Jwvc=k{hnQ
z{F>RMIS!OY1N(QD#6N$OeqK2>M5W8V5q4}VwmGfOV2s+V^&2bRCVsR|{J`sh|Gq4C
zRxjaOcPK|zkz~sUMuo0KJ`t7jJ8~j7l#QMSAOQh?DXi)*`p3^6E^vYV2tm%L&gl6o
zR~*(LHP$0z8jcczBlol3=#APZUm%aonLZ%&+=uA2jsdlWGgQIoE($&Dno|p!saBy~
zP(<A71I1?R9bXKVpbKl669Dekhchdj9vSkNpwOy!Ws)8Y!^&<&U)SQSL`Us?xMw4T
za(@<0*}>-8<BNsfN)0vTL(%g2Mswg686Es}<(=xMqQB27mx0GN%|fLK+!Q(iZX>pY
zGsZaRf?+xXGhs_v8`CGOTkPbzf71gGOK&UtT~hVU#6z>dNq^jc)tiLV`b5$Ku(&`5
z37ditKUIk0p|0nK?8jj$Mg*VK`D#1*u9+ans8tj7@vUJ5IU%L-_1%l%Sh*81DVRRs
z>-asyYIm^3b@;RPsczxc0KCCNquUb)_DJ@hzH!XGN8`@YZxB@504QN(jK;CUPq17_
zPut0Jz*J|+`e|XaEl$neJNg>FMWz&V>xx20v}#SpScxVmjKSD`X3r9bqM;O6>BfO8
z?K*;~OWv=%Gz-15jn-_rcm}oTs36)%tS6`HyM1&SRcAud(YVZGyKJMdkNZ*1&}X*O
zo7`D~4!i~>L>Jv|lG31#Lxe-vn-xT1LmJM0C<C^g2@Oi#4-K@T{Aeb><Uam0bsGKW
zWMRrZ()U7kct)u~7B8;^SP{~-tco3pw*z)h=EZ$!DP67%+H<o@0!yPd%iAEa1mWD$
z3=(tC*9Kz2N`L|B6%tq76x9e`pV96<glwvGXJsj1sRu2;35dsv$y#=RCE<avlI4E*
zNzt{o1DJkocNN442ggKu-?_fwLF60zJ~3!fe5+1VFwW|G4f`**@{wUZ<e-_l%?hC0
z0;dd@`d|6JD$F!seJliU_M$*~tukkRbKeuv5zszJcT%2uUBl33dsm2}KjqM!f%_h7
zu_3Lu<Uxj|+OjxDWV2BQ-bmgMnt82Lcv0-&jqII*H5ydu)4RSgcAYe|D$O6loTC^|
z|AiPd7RJvptb}$KP6<7XI*jMxm{P9zc)Hayc`g&?ztVU@{h4C7tA3^fIqX8HZybI{
zwdKMrf1IGks`*zFPjU$k)9Df1A3siJX+~6M+D7X}l>sq{>OnaK=<*&^rtsJQ3fMWf
zI)1nPL6ZZ8yMeQFx%7tAT?nZ5Vl?-!!vS1%1<ql|Ocg)7^pC57Y&?6<`v1icVcnS0
ziR4Maj0V=ii1Q}6SF(Oj{+UN|AM>?dad%1EAEtdU%O!ZYFMTh}-@U74(`Ph^SOgHB
zuWKDcu++gY>;dz!S_zamy78`JK_L&n1ySG}0LvoSGqQOsc1D^-719~_6a&Lvk^>$I
zlM4)2SQu4`jY~CkD`80x%<RT#nmGj2GEpk2zydRQuUYobWZ*^e#u@kLg(OmfDV)^9
zTxHbx0cJ~OW<h>ruzORq<BW(SMIu1PBa&!C4sM4nZ5WLcr)-R5N-^iSzT7WYwV|~l
zF<d|Bb!7+yqxN(=SFo4wYRcQf%^IW{=gk#L4!3}<q(1P3SykmtWwtmhKk&FK^J?bi
zAIrl)uX8JkdDH8;B&R&0V_UksFN)>~q-}1XL0G&QQTDA)P`I730)o?rYUC*TFdYEn
zXk~I0R@N}MQb@ri|BJnIXch(Nvh20rwQbwB&3A3vwr$(CZQHhOyIw?pJ*=on&$@m@
zM(#X$_FB5kRTG5v!%Xjg$<OZ-)OO|G*~-E|_KAqbh5xY7*gi2@1|Ck9^WiiL3TFi{
zVbaMFnv@dFI)5skpHpl^y~JR$7tgj;D_9w;Jf5AOV73{>2D4trF@5j0!>;d*?D4<3
zGGry88>Q`38UYlmn^%Q8+du4_e8$X+e26MzhRwtSII;i!d^OSw$t#>D2(us}JTXEW
zR4fKtRmoEDX)(Gvf}G}gt6eX1^`JNBZhAvJAUhnu6hzjH69otq;;rt?IhlVHd?or?
zX|#8FTJP19%2IeIe3+WT`(ACOo8l14AcSBqms|Fpg-wf9^H$nE9v1Eh<Xsa%c;Arn
zau`}xaG>P7YAieEpj7Xu6hu62{cLDo7XiyVNLX)p?INvpD}j`JAX`iw5%+Orj{(L-
z@CiNpOK;7r(eZ2A<y{~um87bVV|_uhll$JsyX72^B!2v@#;Xjn|8(GZ2Cihyn`vp>
z;V@c0>&r42EG(1UZe4PNQ9!&4H3Z?mGS3W*&#3ux)F|2L>R6{$N0Sx&aZORIY2+&4
zdTpN!lxm0Up-#9G4M);-3vo7fqrW>YO5{QK9yq6$O$ofvbrKoIrtlLtz52oScjNw2
zIWW!`Qa#a?4+**CM5F)^Xk?tY`KHJSspU$$^U)Y_okq|hMkf?aL%ZbAWAp=~|Ig}}
zxBK?9Qp8H^NB9QG*l;yv!Y*i@I8*~^OGa{VB#B(2oqASsBIm^81CR&6wAKmNCF?CW
z`A?PP@=k4a^F!n>@|$5D&N0Gn*nLaVBYsQKxPpTYlHOewMmDBm<-6_6gx&G`2Az(s
zW=mxv?tC~FFH=aio(xFzC@(<bI)=U8TAd-0u8S{%0I<a}&A?oVM1L6KPA0f6914+!
zu;7bKKiEBzzNRu4=p)w_80nG+Ms03*m^VJhB46Zj*y&JE+Q5K>Z^o)%FXa-4VvWzn
z*Z>NYq=Diwtdh|ykEYJlq0ACqG&Bh*z9?f3F6x1^Z@mGfua6kS-YP}^LrO{7DIx_6
z{)mWbb%y$fsZk$@@#6D68K2UUH&`Rl47En)-@%*7rO<?zrYHss&jMNm|3kLN`Fye@
zh7+L=lqB?g!rHEX-w$Q?NB{|v&kR9a;1bgGW3ODzw#BBLzHsT#tlr387_N5m+j!Ll
zFQA9;5{*z!6kO)rTnn5ty^Bp9;zzX&kJ*<(RRZP73Ig@F^9{Ymi0=;xIXWdC9C1Gy
zkFAKVSRN<2VKlJ~Ya!>wc4vc7o9$)e7ferMen2BE`LtL+&<Rgq`MzlBCG$*aNEBY0
zE9mD5@qQh|Nv&@7B7@ArT3>Ey{R?SY=ME`Q8OIkDzMwcNLUTyxNQoPf8*^7RHT(|M
zQ>*C>SF$(>2XNIWddj#aLJQ(@-zoEV_^umM`19k{3X-VWZE=?kUiX>Hl(zKi5Ad%Z
z$c|!431`QdmeSIxWfFlY%tb;Y6o!|X8pE7xXj}{>)6K&UErTx9b8x@(2CWTQc2&|I
z;Iha38p`YPpXD}6>Rx$Jci#}7sIQHbrb$8I+2*2JM%%9jzn+%VP@g@<R@%?ifu+q7
zahM_n!z&M73f1tSO5r2zT@Z1Ph@$98>&|qKCYo{)khvmAkU6F9{E;K%o$;DwHLWxW
z{aXHXuSM7_7EIYv!3Ew}J`iL8=kFSzNnq!&4_m8Av3YJ?0t_iMOk(04aBVOHr>cs_
z1T2j9&aaW$J{6;VYCegQ6st?QsTtlkU*gzcKpc-#-BNpA|G@ul1Y#Hyo$5>kkyhYK
zl=N8n@dwR#V~~C^u*FA>x#6z3iA%Ty{uSE#5Kjm9`$)tI;U?H~=HQ=QfT~m$=J(gT
zv|Eg)G%yi+^Zl3nlih1Qo#eF&fZ*{1xb`qrC4G9p)k>5L5V#4CO(~}!*HR$9MQMEO
zjI45O_Z50(%Skbj3saNCsj*rVp<$pZ36wHH2yV(HM6A<fahoYfc~b1ee191kp~vp*
zOrP}j4(Tb{_8ceOF>QtD_Pqa|iF9R+`7vxr?RN<ox`Sc5UBj<Wel<Vr1K)4`A-K^U
zh8-UFgs({>Wko^mEDo@?zlV=)6|(cdF^2*re=9oyu@vhP)catIP~<kNt1#hW+Nz~7
zM6qX*CbGvOAj3XR>D*x0twB8(*?ve2O0Hu?uUru`LJzd}qeUNgL0J&`m2wD!+MJ7F
zjrEak84PvrdO_;t5JJNdd%Ma7R^I|jPXizh<%reo@ufh2sUzioue?y-o1~!tpG4;X
zYG}YK*|F}Ocq{)wfaWu0DH#eA<ui8FcmXIMh!Z~9{ewK%{cejLlBNgowRhWU?s7li
z79^@nak+h6>pC`_0r^VP*ZQ0i(?Jl>NDss96g*)IhV5X*kw-9=O#1TIUb_?WE1vb0
z|1?m~f6UH+DV2KNlPBb;_A!@wEqcsaOV4k1oYAjBvubsxkw1uhZ_<thh(s@tE<I1|
ztC-VHEYI&?J>jP-T8l%O9iQNd)aMz8E5Ff&L%`I^@Onz)2VURT8v3}uxIe8SifLvV
z0Of5JhG+&P7q*tNAL?4jEU^u1aX8oIQ+GUGCGLVV66`6?P`v4$!I60hk_PSLhRrc#
zv>(4c#ZT&-aM1$iwr(|9(1XV@0bg-*CSZ)S3~xIy01e7`GpW(`O4X3lwvm@Ujf3JN
zeUhWo+tv6d;o_4kysdynH13oZZIyc-Lk~?4fe(Kc`;YeX+Y&jw2bU5$-#eJ=5BPnt
z-*j!-V|)I|2i11N!698DiTXD#N*fNEU~t6PM##GpQM9QD?<p?TChx=4RK`0A;-35P
z`n8deTv8LTAo&=1g)Gb7^a4_&uB6G<xjrLya3AKCGX9LQp}QNc8o06^nsL$iHAth&
z5f=t31ldK3I#BVK=L#Wtd>u27frp=zm#$wTh7iz&yW6f@`fpY27<;JV7Q2~qN~qM7
zZ~^@D^vYziELsDy8dF#A@q$l;Ycv{`Fgw6@NfHYB1|0j(@femv1XG|H80~AtGCCnb
z=J;8B*=KYbi@T#&q)!xX$TpoBP7UI>{`k;_V&zRMO1h$OUv&;4BtT(upB)^gnXz>`
z0cQl!-pjr_NdPJ;BDnw_1ceobxbvPb=}r@9Es^6ya?&aVRfiX;1g_!7WWRH|)cmX1
z70)yJ-cx|EVM5Wqq=9Go0&(w<V1D~zDl-+N?~bjjx_F-liS`Qac9Zg7OuhkNM61^K
z2HH|iG!SGPMufT`(|fsVo(wm>2i4f|GoY4`>NUuN`eqY2C*DH!<Lf}mY5aivudcU)
zb}3RI@j2IoU47|ev^7e^Dt$?y1ie(BP5C10@6Hg}%@<*X2&*2eRBVqCkJ;vmbk_nI
zmgV1?kf=@bD@LTl-DILixhdFg%=E5CeBQ`yXX+D+IJJK&0g-J>W{HFQ&Sm8fk2Ec)
z!HgrP{X)$wX<^WPf1p|)l`Nj=VfDDsCHOR_a0RH(YCh8dRIg>{JuDoCE^vqw@j_$g
z)nwaUzb7_xFsGmSMaBv=bw!rC-F(LwfUU@Nrt{y+ZL@1%6!kmTI1-`GnatPs63`CT
zB$91;WJw(;Ts&BRNHuK){?dE`N9@xfOz-bv1{bi;qf&~LE>4mT;IqpFZeUF6g!EGk
z20O_%@<w%@dR2C?7cq*2XQE2Rv~ARJK4)mucgCwD&(ck#$gO{UWcH8yv`l@#<Z>Su
zlCcR!Z?ruuDm%m|%K^gN+k2ocNqswQ$}-0gZL?3sgbO0%SGfRLq%QfS`BKHFLBb<1
ztEfJaeCY^zG{ylhpS81^1ZV<8Q!BZuEG5wZR!vF1h(z(l8bXC``oSHlEmdpXhJ)Ki
zkLko0c@1RWi3CsIJl)}7Y7RC-vp$HEAco{6Pc$A2iZNUk2X1=A{fkYo?CWTa#9Mlg
zEoSk(F2W1#0#gqv8t4_6BY&{I)mOQ=;Y^cxhgq=3gz<ggVvqz-nnD-^$E`S#58#6(
zxv(T~dv7yPiUOTY$@jQM8x;prakz~FFk4P%VsjD-k@{#(p2j$%X@}=ojGhGWFc;Na
zHFFtrs5r4aMJ<7VDF+T;wDFVn7IwlQ36x)O#Pr18CbX+yr2wj-NQfsCDHh!Hy@K2i
z9dB`HN<sZ(wnO|Da1xiVmro2N9cp294$v^*5X)B4#+gYZW&q`BT3<!Pz<qT1E*+pg
zsnwM^fOP2%ZLAVW^$9OG!NdO2_8&8RN`=u%-hkxFd%EKd#34`E1FG*95YUG^Z*cHG
zSSQc*MbP>7Yu@1lkxM1hXt^Y)t=O5T(G5FX19-NpSc&Q@Gr(vX(J3!@=Z_ba;j!(N
zi!ZbECyiFDG*)z6^Gsg*n&Ne|6y}H5r^B}a$MoRpi3wQLNLOgonYb77j#k!T{3MMY
zDIv8;#%zIzBPiUQ(0d6M9i$CA-4xZF$@Zmmzw*gTt&kS6m2>9O199?Qql1so1nY##
zS)mzfGu?{lNs}Jne{(gTGGr1~P$*$9Zj^0IMezN!E_U48P(t#nsGy0v>HkcvE?Y@g
zMX-sa57<BAt0rhssrmg4OCBP^aERS9YZYIWd(-ixJ$8cm^%H8c^CJ0@j16sDE#OEV
zw0afXs@<fXb0X7l3Gm30O(}W*K4I{h8W~QXfCS&?MYHPK=hE_P@FHV4CDSc+DGJ{O
zM?iCZ%oh_6Crw_R9K~iRj+hkUlC6ZE=S(g5YnMWn*pGYfj6#aFssNCl71zZurN`w2
zd<QDPEl!~erca<UvDOoVs~jWZBPVrMTeVRx<^RJbs`b8$ptj2rP@k$nbL?D7Uzh24
zP<f#g@q)dt)!^>ueC2+Mw2B9+`wJt*<Nph)e!@ZH1|9L0+4HbNmZ?qM7vb2m8)%VE
zg|DD#UH0r%SY|ofA2;sevi^x(dSXXVEy#RE&s0!$8#04v2n`&+coD6U@Zb!cV<+_8
zl+%38dEcZM8sT=P2~>HIz=}7Sz%*xvg_vbs&guBizu|-#U|P+rOqESzk(TEgaWP5z
zXyM5QETEB5PKvRlzZS5mx}^^I#&fehifqq%kVxR78)BkJqxmeY4|ErWcps6dqW%@V
zt3QY0^{!LK=*i(SjFHJvAg<y3Rv5w}%&mEnl*fR4pw)$sCftEQUKAs?lg0_>^1hMD
zzN1$CM=sN*ZIu#3=~19P(_4`gj?^{H?`9Tgk2wx)7(q|=-%5(JlT0WcHSllFYoTs<
zRJp5j?}_+_duXqN4WW)528EY+_aEdkfvUKJ7q4|fgh3YfR3V!0?-{K>K9oZuZ8Sqt
zdmnx~DVj=z@U~4m7)C2}S?TQ#vGRN)m1|EJY`lPBF~r~V%t~~%ah=8AHi-u^1%|zW
zUAk$Cn9szFv*lX3>q%k^!bUJ!&fMz0-7b7^Jq=FfYNV?k;DLGG&fJG6?<;B!%A&2E
zytK-J0@3jQyuu#(<*iQIY%rZ`$H?ia;4Ev)PL8dx3+7+i#!oZN^VuM&+qx#T?crW^
z;~<H=nbM`{79H);eFCV2NeYfbC38)@8eCz8zjP(F@X`&go?GdFK>2=Rz%<wQ$TFyO
zg9)d%Q^nW6zMwp*3(x-ki8tsE^3~h{A&f>r{4VbT(w`(Ywr3+8-=gkskWSaGx@#+Q
zA||7Wha1KYg5BOZ!`E5eM{Fuum}ZQ;%{07&kpQX4zgf3Jj8}kK<$HxBsL`EUfbFAf
zEu0Z)@HzkyK@2>ne|c#O?{`aH8cQ)3vr*wvS_cWB=pvyD#h`~O3y`-SXMO??y{L%H
zW20me^i=^`Q-}bjrD?oJ2wYYIM!&yBcCME99a>WHbW5+(C?xuFh69yEwka=DYs?|A
zU@+r;0epf*ao0%h&wt-*p2jJsEHwY6pvOgNUXtvK!iQNA(~(ykij`uZ@f!vaCJAnX
z%O;X}6BGW9(om4v$^_jaH*H2o1TWjqY2iJ6ls?S%zkJvpcBwc1fYq-;=7|f2I(5WT
z`JbCUCuj>edA5_HMlGyk>Il?pvNZ>H>(Kta_P-nz{{067_7X;vr??<wiyDs(USoYz
zzw<Mkp?f)u?^qy__hV|APkP3zG|vdR0(%vbkI;&iBh2ibQEssi=IK`ijCM7HfqsNN
z&_WGlf)W5h8x(u_5hUli*vdmC$?MBj?_Kq{{WoLP6ml9E(_|+hwlwlmFLJ`rn<jO4
z|F^6U3<oIkKXD`?$@Oh&nT{L*o_qJyUi3to$nPsS`N<qk{7!<~<#&GaYzyMkB$%Qy
zdGOH|DHI0~3hk|U5Ah0l3$hHL_dVR?!Eb5#-R&n_F_;*Dt*IVd=cT&%j7nz}%D74k
z*WcC`H)ovM)G=kqQrkD$n7zHqU#;C6yD}U#ro4&U1{N6EPoxCpXQA3WKZQg);vxnl
zxMxAfo!lwx4jLi=eTjit8X+?Q%0YxkK6sDvO|zMDDc?tfozEE@yi+pc-HKz8Wd|*m
z<0;$C(%PPt+1PE202G3-bU3$3{BuF=dFyVhWbbLB?|zX1O`l|>D3w5wg`i!t2)IHd
zn6<5}nReLILV2WT<Gj1Ht5i3WxEX_Zqm-cJFb9E^yw&FWFbf=a-{CWd^q2ob=7>{+
zWchFK2TTOu>#vp~B0yn(Z6>DUv^@vUXf@(287=kP4ADBTWut14mf43d*D{9#tl-9v
zz;RsI%hMn7JaNwr*B!Wjs;ur(gVC0OHRgBA+%!dih&vbtVDLR4YX9;y!bsD5Cn;22
z3}0KtCQ2F`ytmiy-%TXm){z-szevHsNRQ7w3}-%pQ(0(n$szlXWR@sHI9$;DS?I;n
z%R4Mp?zeAB(Dy&^Vd@{6uCmx&%wn4G0V;Pl>Wbd|Xak7-+bLS+hE7L08T#ZF$TYy~
zT7d5ORN5Q+Y%^rojbn;B1J!ONTA&ZV$mFpSJ{dfQ&IK*JRsZkCVuKbOT{gN>PaoJ?
zJS<$z7D1RcTkDLqrrMx@QZ@kkYF^I@h1zVZ1CUXKjT9sP?yfv3a<)yJ-)<y<he)dS
z<<nS8!NrSJ?MtV-T%!DHruJ(^pa)1YUJZMf?wrCe459afQHaOGE=ZdJ$$JX>CP+r(
zV^GlOB_m+B_^S+^iScXo`uJu!`*v9Y*$0_3F!REo4V1xx&_EXv2ry*(YPau?{>nu#
zcK|vGeMMaV+Rhoc`LyuW_$==#1~0({4TXaXpJ_9)*|(TjRL@VLU0AVbLJ9HQq)h@V
z%;k@Ru5PL^PFt(3pwJeCXQ&*Af|tDt4yYy<`TSeynM%rGBU4(2BKkzP!YHE)kNs04
z)`P*MeM*rsICGMjX7DF$56z{E-m<aQ@GBzRPk3L?=Dh7jOBp~dbR1oQR0DzsVR3_3
zr`KpwarFJ4$jtaQJ<CwI4~v4vu>)<A%UxC!eYTXD%PV{$aDZ<es9HI&oH?9(GLuHK
zsIDBXrc0uJYmN*X?L~fMZu@1gjW~;>8jh&sU#B(Y%fIIDUSWzRJM$=+=^<2ZEIpaB
zu3m;Z3x;%fG03nr+e>5qFBrny$yNB(JGOL)o3gB&MV!aLMM&vHY9Z(RtalmSGJ;O8
z>Qww`!zn>2I<fplJkTvOrzpn*G&BH#4jiRd2#lmFbTV)8!0YyOD&1m{YoX7oo1U8s
z+WtvN#v9afupTAyQcjkCrAaiQNX0=EjIyU_<ESVVmjHTG>o5?F4K-dr6&@#G%={y+
zs0>0o>W8_7J44ji0?p66e1Fc6udyG`$xA~QW30C4Mt`n<Dvv!K_i8fe!#5fNnH+dE
zDpZT^9T#${z5!`Tcr}s<>2dbvv}Nu+^CN_y*W5KLd7P&-wz}TjE02>hrC?1>AJ)tQ
z&mN*zUVAQk2+NXGf`PMultz4f8x8~}lt}ZLg10SE8-Vh1l;VzTIny{x6ZID6<Rab~
z+pGnW5gv^}7OS{de2PpMaR-Y_OqqIzYmO!&QFr)dupO+*ea6+s_R%);ShNfOstNe<
zl>BFzik#~HVUuuUPzl)Xu!xJXIA6DIs2#h%Z_?&jF*qQpgFD&eSnzPhuew#)hI5tV
z<gUWsT_Ha$v3I3;>^1BA@;elB-f^u4>9mpZSmD%ft?>0C`K7?Uz*(>vWIF!O{7xAu
z%Z$ZiQ%N*n0`R--88W8csiTy11Ux6AU*QZpQFo2qH4=<Ugc}uGrEGmxXStHtn<9nW
zocioD0PcTqD+q(XbWw*xZi!z9GP3oMXZqt2P(Pdx->cDzU@VoVWTW&9V>xZNOF3{!
zZm0fmGC_o3Q5BEMX^C90q_u_M8Sn1az}DB`+7W$V=iL_F>*BnCFjg<zKB#hZk7)xs
z=ww`xOGMlnNTSK)nWly@f$+7cGm1s3+6SC}F|*;xB`llez3)@DrO_(ki-Ty7peC`V
zre@6EwMKJS@A_h8`Pm0yHg?>%fW%g*GoU88wqZT4kjHtR{l@}$VPNlX9omD7{KJ_j
zCx+O61{ERH1zjZUa2eRhepXu1#PH{D2YqPvvarmYSEU}(jmmk*?>(=fsf&0jY@vsk
zv=~!=VRziMFk@dZChVs+=LOJQP^i>=akDyvElw$Po9zK5`g#GiO`d13Bkc0;+L+{B
zj`QW*5t9yoHv}fB3Kl#WkZ5|sX|%y>fNwaA&LWYTiHRIECvMV3gL8ag%lWe2sB+`Q
zFeYPr<{~DVCE@1A$-0PovY|*;f$XoIRO_JC#rZ0o@V;7iWrhGsZjSstnoC?+>K_It
zcw5*{ddpAydLU58O_3t`BeZXRsbFVJU_8q_KyZLSldZ+&M#2P{b|8sFf)ohzOQU@?
zXWF)W@6?CMN?+)O39Tu=pvI-20rX|di&rdHsQ+qZ2gk|^f;m=&4M*=d7=e%x1V16T
zbk_%v$O|>}<$ogB_4;P90`plkSR@mq1ca3ABq(u`*_h0FqiSz=3nxbnJSqfpJslHi
z%P~-_Az~M2GPTRY>H?@SGP43R8&NT+h}55SFgO@3=c<<9hnUh62~1>8JK+Rmm2tWp
zlbdU~=uywUN#*Nl6huSHMzAxCQYE1r#8cXmV@D1CexvlQJVoTtdmUS3IxrKr-Z}st
zJMl{x@j;)n*4p5ZGPs$3MC~d+1&pjC4bsH0iUC#v6-LDfG&v-!eQATEySMm-T?K2_
ze)$o$*xWPZ1!;aqnA&Nh6~}+J^EO(Y{ZX*cARPxj<DMmQDPkGi<ZiY8PLIPssUtzK
zY@fEh&Wf#ai=Nc68P)cP>WKw;Os?6TLh0OQhneCK2H$K(#6&vSU)V=TUscI8K=1%R
zvG9O5I_=uMqXS6&Ex>Yq9V1D9AK78#?JWr!qOtszf{0zb!izdqOGm;1f*KBoPUeoH
zj|BTEuq46}#hyz!9=&21i^Ybh{<n=pOn&UfF?!0zLOK~Ylm_h5sV9nDk@F{!_3gr?
zkzKifnrk*M5u-t#yX45kIjpX4H-v1fO_JS(i0^mIe)Gg{cc8n@T_04qenMOBDOj2g
zGZR@iS6uXwU<AiYcQIe6?-%GKu+ihhIITJ~VHiK2p#N|6`YCa?XF8VariPD5xWXzL
z8Md4A!AIkvd<(QMOD(DdBnV*mx4ljj{g9Jow?~A<b^b<Ab&!Sx^uIPq)n-8lp~V{!
zHb#FmcnSpH<oQEdBs*#Kv4s4jmD#cqAk0Hk-grY%RQ~gLh4u`SJn_C&`-|=Bj(;A2
zV{qPo5)|$_u-E^PNzL{#7Jz8D^#f(iC!3%Cj_Z7!)GW4H08fFz<mEa}BZAGxO0@Sh
zbz#_H*n1^&ssznjdMtcG$1YU@Zx+>Ov+f^MVtIu)Js+xaV$d+wWrv$Bj<4jMC653J
z{wz6yRL>FN5S-&JVj9!k_iTK(c)%JUR<ij?hN)a9;IxYEcLRO!jY*!T4Sp7zmzEaO
zacOprc%V6)X)IK*APeMsc72c8;@3bfEZWXg(#@9Ak^spVSYy<tdq;El(1}|7?)$Dq
z^z&dLU2@VMcjHOYCs{wB|E;QO$zE)i=+;4urC(i#%g<6sFRrBy@N`wYaV%HSH9T$b
zSkPkG{^OcC6s$Z$*UYRXis&{1N&Qyz+P?1EMA@Ayc9!ouKG-9hUk8|(a}^vcjc6`6
znSQsM&vLT>M+c;yWKpC_f&683g&!SSyJKR+#?STCRA65X6B_NsiNw8K3B>9ecgPO?
zRYcSc)L=<_MChchtcb#C2!k#u+SwV=`1-PZzcIx&p-$o{`;R*%@xbJ`8mG1;2>ZGU
zx-Wk}yVdig{#7wm{aFY_g!U<}tW5xVFpi+PK>|NOhUk~h(|o$bkxhjtwD!-a(KQk=
zjpqVi+Q1%>3;#GkbViP7TTUD~$)4j4Q}*ZM`tDONOb7xbt{lA>#z@V2%IQ|aooP0S
z6C>!Z#vz;Lis~>YpBK?%OVqJ>&{#r6WHpli-w3@HTx?h)d)9T_8Gh4LnYH3MCF4PS
zCwW?-b>{ifw*jxvoQ5Q94VrEv-eg(pRM4%fFjN28e}i1=ivbDxmr6^cv;SM%nzWKn
z@5cpCJ{rJ<xwjBedZ$PGp0R9fcs_)*Qr%^V)Ca|jB<Lb|#wec{DQ9HQ%PYNGO&WU3
z-)yTOkB?*md+R7oX3{meOPT0yiad<rZr(1xfT0*N^e-<pl#=5wg&Cxjt31vT>I&}C
zK!c_9Lb=2ruS1z<_waSbiBxTShjOq?QNvVEU)|Y=Hv-V|n6|~`tQ&f-d0aUYTyfh4
zjhm_mh}5uc#?zTa8er}4$gf8h?@JA|=>3aIb@S1qn=@*hjSl+~<rlW@b?`AbAiY5v
zbX9jt{&LBKj~TgfhwS~FU|(!_^N>wpaV8)I_2!tcPZ?}Q=pyssbtQ+4vHu*zTQW%3
z|K=(4za+Q+CAs}C$?g9qlA90a*ImlOYc4%wO&}g%n=?E>61k}rqBF<E%V(?^#PwFq
zpTW#tbwHfGH#;t=Q(pz0IrJ{vqH96Hp3dCa(G&6bqxgt(FzJ8$fk&*<2q*>g2mw>a
z|29q_Ok!>QbpEhor@q{jsv3`t%f>fc1!eu52XZTFX;WrljP2?Ilr<SrjmcuUjNG|w
zYX4^IL!C72Cd0_ydZ=X!GMHfkGP?N*nDvJ9)GKJ^6-LfEw_F8eY<^o3(?u@u$nyao
zx`m=m+LSma8N?{tKe;yL1D-;t5ne<I_w@rEK^LJYm5b_wwP~Qaixv9rRXae}@W(iv
zr4iBZZa^BE^rzz?34z5dXaE?Lz$rG>l&>?h9@G0O_WIkxIh%obo;c1u1f<(xVc}lO
z3X7V-2jZce=c2s#@+cq-eyx3^Hl6oE?BvB^;)i0dUp#;q`7rHZz|+&m47D#z9a3cA
znu0=nS9UJgt3CHj#AbF}TRx=|PQI?@F+urjM`h3Xtg%Z|9<DN;8fD5^rK}E6x{bJB
zKba1@xGym9{cRDtd9sM14U4Jb2)soa@p>^hZjEj186lu9e$8eoX>IhhjsfaG;MMG1
zyn?k)Hv#EOtgv|1O>I4BSuXGSaq(lY{xq|Ka){byrgKF4LMX>wnX$>h#pF~};@HUS
z7ZkN=+WqEtAg-xzN+Kxl#DkDZaTMw35Ctz}%rg)-hBsd*e?pJJ(9>~)xclu9x77NE
zgFEjs9aai3vYkW7;r|?tp!#`p#?r{n!)r4;%MPD69t51W>g_!6`M@Xkb2*~hsfz>+
z3uH27anVC34^*e#*k)yrFG=)k^$@^dcD-|-#RvZMM5+CdU&t)p7_SQNy=={2E$6F!
zXY&A_V;P3am8p6K<(v}kWm8Jy`H8KOZK7Sy)PjKeqq-tZgy&FY(Zi%e<UDuq;gF|2
zJJ|cNoBCK0x20*L@8p*`{}ONI%!=XTW^$r048%CXyl4J)^xdEeJ9XRAcRPpR70&z)
z0FJ2^7&fC}LXe`4D>8#P-<soO^6|_fMtYDbwGpG+Bj@LYg+nVWXw};g{IkKZY9u^z
z@&s#?^;$!G#3zA^{%*FU!l4A)hEP8s>i{^0NA^ymi|hO&EuZsGIS#!f|0pFT$)`EA
z_X<kr&Q?PMZ#AP<Y#KxMELo*A-;l9@K9YRNe`5bCTGG53Uma-yY?P}5$?0uZBHs8=
zkfU94A6uggcMK(8d%|lyS>0(|NRBsn){X#5s7>&_hJIn(L7iBm5*)nunf3j+^eS5A
zwLqE+>}rx4>nWymC;=}?KF=(+z&UTA$F~IcfRwgl@N~SXm?8}>s@&M!u1Ab;M+JHx
zzPczCwy9mrqo~eZ@l1eZ!U#`U^)n+yGq{t&2n>w3fK@5$RipO$mZ-M~ym)qqKWWVQ
zu^ckTp9#jL>@RmnI>%?yE1yUwv8#Lkn#c7EC6eORNsS?X46CMX3hDL>0^fHUNgAu5
zCeE_RrrI(Q!Ub@qGrpgXA03i?hg4sfNoJZ?+m8F1|8{rZhU?=mU)R*}Zsndy>XAE-
z0L={p@Xuli;c%4Nq<-izh+N0@ee#FcDog0?53>^&PSb4h6krw$RjqkkV3$JroJGZ4
zF#wTbIfhJM>#a5n$2XRIOi7cmh*r_e^)ykO(s<L=I3dF~xtXa0x{rXfJF3TILVnw~
zn+%Xxq#AkCz&%IuI*Lce0dP~7up!p^cec+hiIj>d!`-oDzt<w3U-t<zbrvZH?W|ti
z81fF8T@;*$?rPJY%yXeEUn;#y?utmQ?dzrUrzv=&ePv5RJm{aX#t>~Z<rvC>LF-nr
zinK7R)wKT%=+9CrRF?lw2BVKB&v^eRijVDdta|iMG;;xu3=vdtn*{Y$GpwL~>5wVB
zNRN*cGB3OhN9jn;N9IWwZV4$6M2*9%u~Y0b9^~_na9fgIfW6!!qO~5bEuH>HPwuGu
zQ|5VLRn7f_k(c%Vh9D<>X22n-gOYD&d!yw<)L<HzjExE6AzD=fMy>wSiJ8=?kAs=A
z*TRUBT_@DatZ-4Rc;bl)G_BY#g7LbO8=pM&8DzoJL9@ZAhm2y-*l}(wFiLmQ==)Ak
zs;q0|&r(={&~aeSKf93ztl(g<ZVlGdcodU^D6am2UV7?24NxM5iY#%!-AUP!I<udr
zW7%*r>>h-a`l8`F4=#=4yHw&@^T!?SY+!k!!njywI3cB2mapPZs5KwDQnm3H=z&}L
z#iFQH6#(0>qM9mP2ofA-sSV{u+NM}t^Vt=<4EvyY)lQM4Z3Mrg5Hdw5?Cc5+Z{AMK
z9P05KIP-$u4emGa(VEt?G+Mfx>852PW1Ft_CB!hn(OoL$Fd;3=*B}xvv&ILo?VhWo
zgHG=o$~6$XssYkFbD>dhKgS+>sB7Nz(m<^8rR)vt9`SdMOn9^?6KD*F0|fPl|Jek-
zb{ig?SXht`vauN{-_Y~hd^DjFJ2b&79{vOKEyA8mt||xchPqX9xBTUT5W55x?((>q
zD@!AMx^Y^cfw0rWs^exB-W8t>8;wOIK_k_#>)bonSsN6CZgI?RrZGlyY?ghQqpvYd
z(<o8;C(Mr&7?m5m&`c$M1A%?U-_r6R_-ErUeKr@zZR|sw7)pNc77^VznkFxGQ(X|Q
zZM<Ko?zkZf)mhI+IGdB03E=i`K>?Unn^@N>N{CzSBV8%&e_wfA<l{Dk*5w-YpfM#d
z_P=nHsa8#UQ0oysE0c6z-lWS0%#N&X;@8Ld1s3!y7ne2qtKyGX{PT||eyv%d&fxmn
z#y0)XPLi(oIo=I&FKeh+4g2alK$8kO`LY1lrG9AAjIo0LJi2o}ul_0xYWbYqSS<e(
zaF+aQ$F+25vxBQhkNTTP&9Ul>hv#ik=;Hm~26o_Y>*DRYJ|i0yksaP#rEKiIaIWD;
zIzLA}uf2L#F@34s@6yq*7Z<LE!G#`QYp_MW*2FuLKQA`f{?xcH5I3bLzVM-F1qK|C
zrPz=t0z~7^BO1uuA-z+TX;6t)lPt4h%quZ{y=%I0PSBT|GcC{VxHV=T^(Ee8LL~L~
z7v9th9d+Rb!I+V4?de;xi1`|*uYsP5)J3)`F+f(G+;(8WKao6-4<L(Be2L1D=d*Pl
z>VwRH5#4QTQkeS#ZPlc?$EQZoI{_!do1STUe(ZI^U)^r5tK8B#m>^YsId`qJ5wkZQ
z{;R#IjI<JealUe`EnSpHJ8gJI`{nOXHJvDaS@7Dkct*AtyK|B-Xb-&o<TrL~%uP{d
zlpR!zGF~w#*iopRb!kwcS@kS;M?@)Ml8NhHb2F8|UnnBeqPZHzzr3f{W>s%Ug2GB8
z2_BxgNG+wE@7u<%kB3$fpn?-CMEu;<mV*xXDbxrEc{pT`{z@Svnis=$bx6wQf7Zk6
z-jy+#`uF+A=5wMfkYj0@rm&yhT&42(cKjN$U5rQ5O?%Ez=1H%qFXj@QW(zDctyZD0
zx=f;ui&S^$&a>jrB0Usk#xu~RG&vf`wiUUC?*G7tLYCPURKR<jXiY!pB=KzG(`FHq
z*r_m4T#ypXIY<97Uh_ucf_}gYm4N=MDchS28vLNu1fNC%xLI0@90Kwa)9PXnksebi
zF<pjglHUA9<G0UWO>X>w2B2G^T3J(9ubSn`F1^4DN!(I82Rct)U+f_z!quj{^6q1w
zu;Q5A*jB3$x*apVo2_#D$<kX|9ulAxjeC?cu?1YyxJf18ics->slM}Vn11yOblT>Z
zPewcim8emmf|i2j&oDvVFAgv@)^z<4`2-^3T2|2v-%ieZZy{x{tM*>;XZ$`ilLY+v
zTgtaIgI_VQ+AVY)Qsyo?yZ<K-7RBw?uLp?CLRQIXx4Ox-|E%MgtYtvf#^P-BIJhp{
z=aT$$bRPrfql`KoM_Ru`Q6Cufk`OO#=-jh7kozeA;Gw82wL{zM)5lnolRgU~IZS97
z!Q)wBh5=_;?_#}|1s1yHlg$m4lc~pP@pSs_qozlO^XRpu9>Kv;-ay5tq+uQE@+UxR
zRu;S8u+q&q+}Jh7`?;|2>X)0+Z_MpUssWyzB(tgSj;-ny6{Cp>)g(cPwgMHNv}99p
z98+NZC#}Q{{aPFY|2s4*R|&Ebu0n~qk&ox&xg+>mW>IQV@ewx*_68`XfG2pPigqE%
zLe}Zq#75wulfMK9O^hW=fA%FBl*QuK0bKx$@G36Y)P9i)1OB)TU4_9bAS|2&S1p6-
zm76gRkBCrkhtII;p=V{L*2xN<BhjFhh%nd8%DE}hbqe-}Ne;WjSy^N~d-Ux2X#8#A
zVpUSC_$cexjZXHJT4}e<5`58Q3@Ksd(n#QEITasR;_F<EB-tYC=#YV+e6+Qu@oI5(
zaQrI6Fy<(4a?T&h&E-6faUnkZ6$6z1V1t7bpxa5U7?<0x@1)MBAYru!9F$sgdt>}m
z>&TUn5PA45%L8C}!H@Q>)#R~c?6v8vi}bB+45IrIF~w3rgTbqwMl_KdRcI?@qtL+1
zvVJ1wAlWGu6WRrV{keD1VoIQIQ(MUfkN(dKme!<AhH#4Y-+5I6%|sN~y9}tR%~$TA
zIUBFO&;($QMy=p7*)7t`Qi>lzQ}n~|o(|+jtSFQV_QkUbfw|B)eoLGHI_)l866;VL
zKRd|L&oxF%1o$pCVvyurQ>c6nEx~_I`jP;iw*<9{lVa_y>qQZ#hoi3DD-Kli5LR(F
zCLlp>#Anlpzsfg30m+|lh}~OPU2zc;ESqh=Z_RT#8T}6lsgDE*St3j~yEw?XR&Z=I
z4N4b_41l_IJAig&OJf7LWk7Y*0LtuIo3BSNf>BCHR!hu{$vsevsu$__ykKN`^OaWb
zONNg=CL(Gc<-!wNl0S;O7ecOg?{i@l6ga`+*D?10O8&^E`o~I2b3W_7y8s<3nk&Uk
z^xwRG6EDgV5n9R0*HIe~pnoN_sWq`v#8bLC11^e9@POZh`0Jq3#gq6pcokfP)FvOO
z3|(+KXF)&X9^DpdrE4SrR)7-7(=?KS#y`(uG2uxKm$mBnVZ6;ZL`9S!Z6+!^@NW+N
zth}mO^$^!1)<TEp+<`BM61*3!v~Jb`+#pp*qrt8GeqV)*JX+Sl9%I$HOi~QmF<LPv
zj<dlJ$sLp|zZ1G3(Vw%2?w7Ea!$CGEOP1PMy006>v%PC;Lg7qw$Pa?XH|R7*2T{cQ
zAP^4=#3v||N7hDi0kpgJ#xZtDz@y*rPUOtU%;CVp7CW;ZXm;X=K^+y36?Y16kbu5a
zq}{T%P%G4z=ERl&9+q!UILa97&Z6i>*SnI^Dc^f&k(x?O?-SQApPYh&FEjz?ZG^cS
z48Xe5{1=iqRf<kwTRvx@R;M~1{y5P9{N@ZW`!ARF>By<DD<3CjbcIHEfN!G-%ab06
zFtfN>k6i9XK%2K~qo@ww(m;JNX)A$%#P_t|s29^0Wwe}H{d=e29fgkmMPD!E@gS@5
zK8T&{%m4)uDmk=zx<_SLdv4N1&1iI?odwFV#RiHx?hRCcA(~`zM~#1Dz2(`PZ5%Rj
z$uxXu0Y_Uk1s5{|5!3)5bdCdvse@2!t?$CokRKf*s>XE;EKzR~r3=I2E{ya5+(O}E
zmKP)j>LY8t{Bg-Po6Y*;df}$izP_eVX4K|7T>aT!2o}xo;|XeHYw6|FDsIVeL+ToL
zZhe=A3ylizBVPqn{UNZpMFKvRS{GQ(aRa~YqM1cZz*@d2K4R`^fY#b4$#CDqL?y4!
z$nuwuU1IfUu<ZP*uIAm?52GrCOODp&nHyt2?J+u?>oR)xxQo+)*%eaVWUlb_sjZp7
zu!BHg7}IXIziC&mB|btQs?IHQ$WA^kxtV^Ft>bFO{GI5CnpLPtvp{N$Hr(0YcCP%Y
z8y?mYG39Xn-;&A`l1C%Jgt<B%_i)`O=x5jUR<VlEJ(1}^&vT5X`7M*0?1WAfAd#5l
zPfLH6qrD|9CwH0{!q(R5nj3+V8{y5PT;yx7*<XvGmfM$Mh*@7p$222xt)98j{Mg6z
zMK4SuW&Oj~39(fxfWvhg>bpQXx0`J>M85$~M|_S;_naN2vlzK{JpD8b9ouixu9|-`
zR+djIh{LR?syM47OpSe*YMtau!j;;9AIazWPK=RX1|ah{oBT~czNJjZsIFO+9RS*S
zb7HoJ%;n(TT|iBvq1I=-{Due()ENp>25$CX)DOp4|7+_<y*Ai($J9Z}^eLctii@S&
z!-t5-WjSx$=i#4>H};+GAbimVzFT9#O&-L7)BK(q8^=~_#S@~p22S~4Zb5gn7W4_|
z<8LnLnT@i!to{mI1nuS;KyhKtnpX16w2GycRm{1;6_PeS@G(Z=x<F^cq=gvm#2a0r
zr8seJNA7WyxuBf4qCz`UP<c*#_rnOUb~1MKYTByT*$ZhR1EnQiYJwz{t$fUGwz)LT
zLSIT|HzudR;m}k=>uV;6hJpfQZXq=>)Qzx`3UH6BT@7e`=}<n6r-Q<r9b`H)Q#7y=
zk&j&;*8WHrZRu_>9-FqQISCtk#=Z`bw8Z0ONVfcxN6&FuAww6nJ4TISQ1RwPAlFd6
z1{?)M>+q4NejJ%55N|+cRL{J0E+9u^0Tr{68pgMyiDZI(LT+PZ)+FbaP;M0e5#^P<
z4gu}np>>l)3GXf=>XV6<XBLa}#E&a@TCCVDtUce9XOuYpf@>T4u|0;2B!(9gdp?44
zeJJ8Yr(U{zhi6@uX>f8MWL|=hv$N7nzH*00=&I4#l0xZYmYl=~&nxsfhmr1i=M)u|
zK=MPqbdc&G;a$BF+<yJrMNyPLai2NDotv=n62fV-eMm*yk0&R=rY~utAV`>(V3tw%
ztyb%%<`I%oCV~ODK8W9g0Y!{OtA9n|D|slm_cNy;6^Hl@_FD!KAp1z+cDM3no^5E*
zL<)ud8ECA-l74Fg9jo~9Vv#DbuA|1vTI6<x8HDV59`l)<KT4=&`oiWRyj8WF!Cc<k
zGX*gwiUKKt+bqhR82LZ>nh)>{`kA_zatR$WqZ-y~42^m!ex*5j9LEddoXiqfk((sD
z>hbv)FAT`=FJlZhQx67mQsXQdSpN)Q{?U5`XEmy-fa1WuuD5O@<hnz2Czn#(EgDjR
zLy>F-_;FkqDP@WF`67)S3O24o=f5b^z1{W@qaf>Z?C5a3mYlLr!nOJhRD+J_3oZ@2
zZ+|mv7-`1oW#QHc<Wl`D-&MzJ7Wh2XzmYzfS!ia$DSMEU*kyHrHklJVyIK#yjxdW0
z_b+Jm=n-J4YACUe3pa?+f}w$GY87ZOC5$wz{#AE{eEBmi)43pTnV{$h%s5UHw88dX
zXT$KpFLLy8#eEX#iB}*!q`I$aon8JN`D)X~ToX%R<WOb-!|@MdXNe;iCE^H+itX+o
z&GAeSu#qdLHK<yhgabnr0{2QC^Y@b%G!dn`eMZT*ZrpdeJhWevZ{|tBKwpp@7GS2L
zvSa`lyIsYV(_S-(#~dWJAvL0b2tdm{xyGYNNR#G|2Wz7CT>#1AIm@bqF1lXU5rw2c
zRty(xj-fbqE%2+JZYzq_1^IU3N!(B4F~Y{?9~dR?E~>;;yr5M4abjzI7X`Gx<b#q*
z2=J<}%tGMu*jyqSAxshm)W?5(*X=47lX(6Oj=8;R%wJZ)F;sOQ_1UUl_+}Z5x#?W4
zo0!3H%(A~>*6N1`OqiXRDCA1pSh-eUsWSJ5fK*GL>C?o0LTe+hXh2!-Oe{6n6n(Gu
zN_G_34<I>-dBR}=EHoWd#1Tirr11@IrZXWR>1%;@3a<~|-)eON%4Q_AwKX|KZg_MO
zg1lvJjpFF*8j0xo$ikbh%pmI7wTjzS$vX>JT;3%M@^uUj>rlY5drCb!c0V<Q+BU*X
z2Kvn-`gCh)MmspgKLkn65TAfD)hQZPy4sv0>N`a8?a6GfQ&Y^wT5a9S%6y#+r2c-3
z|7BjRW1CjUOzz+O-INJ8Kx&I6h*eCTbFba;p(-Z~8Yq5ByZLfR3%o^^!4e|Cv03FH
z45=M%drR?-N|Hzml3ZV4h@EF{6`LLm+tGzJ9AmcC<$8OHblN|f1hRg+EC(wh1|ka)
z59~?{YDt#XV|qd>QA&jIu)}sp;~C+OHs2?V+$@krEy75)h(%U)KH15s32ke%pJb~q
z10FydM8sz6%WWrABys?n&an)<Wzd0lX>XzXTe}IoA;z`MSA4Rs&y#}6N#7Y!8S1$H
zG;&Rs8;dC2M^;8PGBBHa2#aXd+|sIaEls-xGQXnCIi}i*<)3@9fGfpuZ4I16pNDt<
zFV7BwCGVHXf`Z)HU#0hCG_4iXdlmOz>U|TE1un7YkR!=~S=_J)YrXlsn~JFlk+!*m
z2=dx1-WO*cqgK-S4&3!^Bh1iiC6PJd9=Gl$1bY4ybiRBC+&27dMeqJH9^J@Kz~;p8
zA>aniQcqPB^Ft3EEQGD^**1O!L3`axf(^1Nvr-Kts_CbSG`uW;R-JS}4H-mIymWYj
zk}*Fa>O_WBURdvMxq?*WH^sAuhh+04xxEwY5J&i;{&5C0%bofI3taj!r&M)29jlqu
zoNoF~(a$NUNM>N^B*bBWYDdS2)9<1UpJkMTYuX9bZ!sE>-!>rtla-A(o)sL=Q0pi=
z4bVi*HPOfnH`jiHw>ll+SBmewlSL#@PSFd$uZV{EiW);jaE=s^t@u{sDr|9)>k-_Z
zdYD6XJglcs?f{+)r892cLdbW@pSv$MXuQg~F5dVNyPQ8p;yUg+nD;YzL;D-I=u+lb
z3p&}jKJnBPfuOQzJWbM(6d^gpr)gA+GYJuA!tiyV?qb~cgP@DAX-Cd=M?5&WpdQ+d
zqJhWO85189T{8xIzenxt!-zl5JS2*g2A=ptkGwKB5@wIq@lS~vTOwi>O&QgZ!PSU~
z`u>YGg4Dn)rl@y@s7GU-d}(B-b&oZ``=b!F&IAb0Ames~FKXWimDm&%wjm!7VkRnK
zM_i^5;bdZFdunLLQ`HUTV-i-dLC-RPT4Upj<VxvE%`>DCG&iF?0alFRv-PC#?;?Hf
z7X*7Z-At-=7UdZ+r|Lm=)0?K)ZP{yt@)?Xm*&W3|giHu7f|w?$)vm_k;{ZMu*!3|a
z1OY^S&ApstrA9{~&ge}$7}KkA<0}=N0k?us58RM?EG~!>tVrdN<F+S83RmpVXKYGc
zNJS|9r@reCQIXM>i=PY~+B*4dZ*77b0z_hvs%`JPigsNA_}=umlN3vuOpza6qw-;o
zeU9NHbV@7Xb0NVBmWC(4B)IE9UQV^hC-~*<iD6Yc`E)dWb76#9c<8xpO@emr6B^}<
z`E(v%!koT@$`~Cclk<qkdS(6rK8bTHxTD?zLYr|FqN`XJxId+(p(eg1E&_h}mCHU$
zRT^I*i4<5SDYEvs83tQebWA863BAhFYe!kphnP!QiRny(#-z<2W=y&6qCH595!P);
zvP}q4F7Wm~mJ1A>mx;42BTzz6e9$WOS(XT?EIwe%iagdSRJxJ#%Ke*qT?hZvl4A%3
zUT)fcvFHa@=<3PyTynn@V0wfq<s(Flo6r5rbopMo4KjP{q)i?ljXKhHG}=8Ftm~Bw
z?8OK#9D|hdeS!PdXu@URq6AK9*JWfuZx8mjonSIUS9#%JYoVdXM}xFgTI|aLIwKnC
zTyt-a8&ap=Hmuh-^>*`5c^bioV|Mmqucs*>%HE`bpkmE1jm;0>)XQa1bDhtT{K6yu
z*Tk=qjm_xX4WVQ+z48HHa6RG!X@Hb4zG!tf0(r*>t5)Z$`Aqo`eKCt+!=W<x*4<MD
zx?nZTDK-tL79gLY!NOo)G2k0P5>QJM9{1<Ni0%BFENgg^$BG{Ye<2XpUC^oyR4rHC
zZ1#wPIGe;?Bq)_q6QT_08nmh~|M+2pr<F~G_9rc(wG1`Ki7wMS2!`JSM2Y4mbs*K;
zyg$c!*%p%o+va`bXt+fwWIFC7p-cU2D|nVsu3Jv7Oted4saSM9)fGJq5lrMZcrO1+
z9|(RdF{Fe2yYIFULbHSji{$y^)R|=S#7>;?=K8j-HCMSG%HuQ)H1dNYM(%6<)nGo?
zuj0`GmR3<i?>m46s#9ktcb_a>G^M{|D)$I8=b9wVJmdwx(fxNdna8l1-B}=`5p)vf
zFUEsZX0{Xk%qI#GzPqkR5u%(aH`}XXfIF;H6@y_u!P0@;>#+8DbxVgxjemK*!L?#V
z4{28-N^FiWZLKFsTN0ylTfQ?ewP)mbo7;jZv?3*j2nK$W%~{K@6AD6_^h=J_hFwG>
zcxEJNS8@QNSBUCsYU?oh0<1Om?%wkYc#e**el4R(+$p=z6I(MeB2y=N<L9xy7W2Ha
z5s!ex^3_gY7%Z}fY8pAChb?n{+m5L{&PAh9pNN0+?g{bELsC5*i+JQbFb?6tG45m0
z_qc?qvlJN$4Kn7Ox_=U0Zx^zPS{?I;mB>2xJNdL@jJe`g+;W-x%(mkbT9~427`eKj
z#tT257nC7-mRN!bmL~XkmR$?_k?j6P5`2z2z@w}<aXI<AEQsW}yFEi0CzYbBUSm=m
zJ3^6n{5^nV6mi0vpPaV=;H$F8AWO(ZxrLCPoc!VI82jUNaCR%BgkSrmsj8X?u{r>#
zG<jU!X>vsfRaba<v*mn($TW~Bp<GdzmHl!3e9WM1tf`bS81%np>K?T)&EUF_00mM$
z&eMW1Zo3P3YMY85`)Q{bGxe>J-RT<|&t`c{qJJ>SQ9?*fJ;Y?*Xha3xa|c)50ERFz
zUU`6|13GRt(OXQ@L-D0bsJw(Y8L^^!OD8Om8D?a!)Bq28yW#IJ)jCzqx55ulm1<-s
zJzvJd2rblNn8$<KUF=C{=na@+6=M?$BPORpptyyy+2$r}&?EU5yD!u!Kx|z<IPkY8
zo#H{qNf&my^EM(YfHmMBs%-De*CT!nxBuepoR&mUqAb|<Y1_7K+qP}nwr$(CZQHi(
zo*NS}zcBw$FS{aFW_druyF=UbxNmLl*GHcpi^=Z2aZUqRNUgJ6rUN=SmAfT76}i)Y
z9CTa@QP<)6lKIViyT7T%<`w<<6)&edgg4?}&2U#YMCH(i$mGpQ#nkP^zs8EK-8@HZ
z3d*cJen*h$vH7?MmO4Au(a9ZQ0~Wi}r4(RJ-^cEt&rnWaXe&W@=iD2zagKSG?L(}2
zO;Vu`#`8s@du#_|M=~kQ7CBNLw7Gv{8JC;goPTR{fD+Hpf^QI$4Y4otnTF~j3GVUw
z0>o>gTdxr1+kV@U-F5k~Gc;&732-Zhjx1vV7M7=c5qB8PWYAz^4c8NFzz-9lkhIoA
z<jpjcXgYN_ZNkfqQvA)!rJ~KV%gG`hf&HLUXU4>~Qh9h${~UyE_$0`<WSAAgIf3Wb
zQP|F8UFg(m*kLb0hgjgbo~;^0ghsJ~W+n(pGsrD8K9~OpN2sOJn}$Cnj^5G~Q_{o+
z0pyYt<Gg(j<7jFJqV`<K3LKwGpX*3&G`VZ7GyDt8o~0nN<&WK63I(B3DIidxvunh_
zh6Cs)lwd51kbpC_hfFJ2-40$Cq&9G(nqT$nGRs3Y&i%0_%n-JpGEBx6Wki)3*7$5d
zB2v%|v^d0ma^8uLzEp|rk9o{vaehkw#LwVe1R0jMtK-qeCcJsZ2V7Go1N!U_%tx4<
zZLRj$Fxc}_6O|UhHZ&~J6^Hk_74l`2tE*ihX#i<Q#|!Y6iG51;x`6P+fkF{^o>#f+
zJAe?x!jb;2UBY!UP_{5Gl)${eNeTED?A#ioVfp|Bb=?$hd023n9t`c@ePkA`96IV!
zzruJ`KT~+I-Bdw^l>i15u(jJDs6xtZ<)(N=4`kiF&&&4PC8$*XYkrMZ=jSjj?CJ$f
zvDBzuTas`}-jajnSL7VfwIB}=RiA20GoS|g-!)=oHIXYCg*}<dKrgykwUZ(=;AG?`
zma&T+g6G)*L#Qs~UYWiJ^I(?ygk4^=#o29yJr^x4og?*bR{|A|9}R9#vpvkId6wQ_
zt-~r;nZYRj#7E{Y!hA+YMu*y%>Wpu;kRg4pUnrVRjClKFM8AUp<`?fCc;`Gy17t9g
zG%0!J<BxC!)UKjnCyGR<T0jUF-D@DghV#?<0_?WJEyhXsYxO#$WY%6MaSpFvz7?`0
z`KiOj6d6vgNsVOHogWpJPq3I~jX}w!V86ubok@6Y4Y1Tcr2LJIZ<9DSq*i$XEqU8o
zYbVV^w&e}zD1Gac_=eNsfd=83g}>peo8x+)8%!eOU3mhGa1Ip3^oJCDK1aPYy0BK&
zWG{j9tI>gYF^iHtlSSvlYqedt2PxICijM>NZVPz9^PBhR%%=HfO&hD3|8v5L+X-Dt
zyfO@v^vRp1rwS&LN7Tei)_@}uc#*?Z$QlY%spuOmrl(OrT!D}GwE2TJhZxhT61z8x
zBh3C!zf_#{pUL0@XwM*cDD}#mml6}3uKes-DAKAf8%HYvrqKYVQtg$FC!V_H<m7#I
zH&N#L%mYZid$UUzEfQuQaPy`iW+(nWkhM4N4M|&RwOkwY-+WhyE+fd*)Y4|9SBRY~
zNygL<C6-oQt&qAxl6(&Xd4WhkDuU{#d27}Z7PvkzSBINLW$G<)aM2!!=Q7xqS?LA>
zaaB_Kh1GHJS!2boIBK)yuQdK%5i;6g3V;)x8~g#@;MawNZsL&|(a=YP9gLyTIvp4;
zz)f>Dsct^3xCDeKXKuRt{n}eikLPjb!q0Cui_{G4br5ZUQy0$uZ6x2CA;nHLn^A-C
z7c0`#QD@kFe&GdQ<*3gn24S>RoJwZ=IaTk}AVc%DbFTE(N_%Si4@XXjOqR}ZGVzUi
zxXnb68=0C&cx7cVoGm95LaQg<rIJo@!XIMb#!s55RZ`9&n7mO?U;x~ic$!x}e5eqo
zuUE>lst{&!_Uazc+$CYnn)WDaUogkcH;>r5Y`JP|B|INiFv!de=SG&i-CYn5^B3qV
z>)|-RuKU(f%b``CU=FSQ7X8O!^9H3~)IuqSFmp7mR?vVFd&OpCEqKR`7pq_oi+9xL
zhmlpAecEqa*p1@WFh>^n3IJ*xe6AVGqy=5KnQ6W>O|zWOF_FZlJtv2Xlot_}Qam9g
z3-l>B9Fpe^ly;pxH2bc7ec=_23VN!I2~vriBLAeyfQ)IWr;$xTQgJ(%l%>(M<Zz-i
zD4XNJ@a)0apqaJg!priyylRF<7WC97g+}}E)3(i__QG#jFkulK7^+r7NB%OJx*RLl
zUt!Xt3O~9-MQK9duw*`|s~pfzrU#l$&e3)bhF4~_n&nkY=Y#$(1DX0`W(HgBLXh&a
z|F6i!w|%L9qPB&I<J-=k!xQ>{nAAr#Dh!<^M|;RhoYJFF$P>HkKJUU&Ztwp6I?)9b
zPds`j5zPv~csR$bDV{qzQI>OPT5l}fWXLkwNsO|TXcw&BkCmAUlvF!??zL|`RrGQ~
zKS<EZ40JQU2-OtS%cx8|)nbG^#svwjirNN8FD&dt(!<zHDIn#I@8_XFObHOF!|qp0
z*x1t{FW-#2SpZrp+>3Tt5G)`T5BZEF);!LKt8Esxq|{{t_6Hx4#PXH0_+p1FEy?K!
zYyk&Giu`pjM@gI&#E)ZEW#3DMmp2iGVxoA=4ZPiktBKwoVboFP%vI&F1E!r(?ru?C
zC!T?q0sVOmM8%O4QA_YFDd`&FIH<ZP1{7N2RorAZG-Eg25nOlUaYSs~n~J>Wr_s39
zQP5`pA@}KI7d7r^)66eBlkQ_hQ|#WyP(hE_(;lBct~ltI<Ct)KxBG=Vl+mLWK|s%c
z^TpvPISdC)j6uh)3RYv9M&&W3%iE1Cmt##;+XEaR>jQcu%i9wJ%8j<#n@-52jSCLB
zkL+;<LXDgOfawCxEcyuLT4Kusv3<T>3-o|z_C+QPHMZjnXPQ*2Z149=BQXhBZigPz
z^pfF-$OddhD)nj26&$x+6PCk31iqpRBWB41E{{*>{uEnV)cyGr4WCOa-ySOXX|3Gg
z<jr$j{D!WGcal{*@m)jvd5LmJH+0=V%*aJpcB8}1#+7kdCGi06p`6Ivv{@74wT6JM
z9m$O%roab`Vb&oc#~_e+?2ht#E1u?ptzd{B!QU{}d*kh%tM%CPZQh~2o4RC641p~2
z1Q$xZyXKLc`G^G;Ue_a|KKa^}JjlyNjq-A8iDLVKUK^I}C&kO&DKR;VZYdWn5El2}
zXr$_;e0-EbV&^+rnVCWQXY)&wpCsh)A;B)dhOC-cf6-aQameLJxwQM<#n?8&e4W1T
zA-ZEKf8S`i`7e#J4VAGA=@Wux3CnrjwPsfb4|xDAo3y@}c&G?f0%=Cs6FFi){C-Rf
z(pv%+UDsfzVyS7&mm|@N6^YIt@s^)M!>7LeHqxA~1DGGe$&`=z#W=TN(Ev~E%-q(q
z6<Qk)OLDQHMo*4|$tHZuN*<<pxW%y~C8QqWGbX2*<YcE7$-H!dBtDL)Ya6bDr`<|L
zW5#`WO&D`V&b3yY%h5o6NTX9V`PG=@EDmO`;1+L`?x-+75{uT(8H`yCcX}$%Q%Fs+
zVcX=E^IhVVr#TS{t5xG_T2Mwx#!VpZy1R!iBI6(%{I~>DzzbHSfDE$N98?INSa!o%
zj5Uaw{jxy!3F8I5zxJZ(;}|L9m=T{o=e;uW#zw)2vBZ|^snUB6tA-VeW}T~Ag?&7;
zW$PA&pPu$WpC6wGsoOO_9>7d7W{^Y1k#4O!kSe^SdR407{_3%wyspCQC<<}7^ryqn
z9P5QNODH9H`uRl%u?{~wkVL(v#D^RoqH?8K1YZ7#h2KLZi45ib(9xEIux5OFjG$Ol
zqK#Dw?lRZY2zb+CimdUVdx65j=Oy*S(Sd)6Wcj0rqXPLjG*84Lwr-z3e@0JoZ299f
zZZ13eOZIRZJlf@uxAj5iSTf|keFPv?&|4Grm{*SzS4j~ELDSDU01gvidarZV*Ze5K
z2ADouK3kZ-c9bar_N%7<I5@j|g@28@Ai35yN?9e%n%ao=3qec*6T`M{0dYuNdm}Oq
zO4~g3W>fpbhnN&|b2Sw1jkU>vHhW1x%qg~N{%b||8<vR1p&Gx&x^>v}M{x#(a{D{5
zbaJQIpjaPI{uB<HW(L9Y+j5CB{^1-4ZDwVmPL(>N6Jx8ND1z1tJ3%{lWz>h?PNDEy
z_o*Bn45^PP<n|AD3+=*2Bmv1$^Bn*Dtli1y2Zb#LlR^XMy9LByeJf=Gr&9eLMU!@o
z55qxJKdT}RQ&S@zh5#|y@Ge3ob<e0IsD8r5c6Lvs@R%mnCKqeLT1wkKjNSh!AhR)J
zXl#(WZwp^XlnmL#2v&mR+)N#RtG;;|2(h5RwV}0D;D;X|BkN66S&LtKa^K%DuHZz+
zx^^1rC85%Po#j`Kgj&}_Ob~T47*JdoiQFGfc4YorL(H6$Bbo9AM9v+E@QeNVXRf6T
zZdA=dfenb82-ITuIXRgpgw{a3i=d8v2yfT*ySS2@BrBr_j$YST7x~4?#H;L1qxEik
z|L38;bL%~Bu^Y}!x}L3yO&rG#^N5hivM>DTY<d_v+K8uZxvO?V4YS{R33I^~+7JsH
znP=U^!c1>ZY!5&LFJ`J{7;$&n7$}V3Tvv42q!60w)R7L{zw*V9^jRn4^8=%<Ca<z}
z2bm6)DdQT5ikIxgXQ7<z?E>0vNMVS#5W^=n6gK>Qt{<4a+zQ78{%4i)bKxmbrPV11
z<22JcGdDtQMYBqN77v{Yz~~`;)qEv*q7(xE&rbofL=dcVO#vQ2!A}n*qZ}1xsNq>!
z%q_=U)sE3S?v|fB6;K$HEA77`7fs{-o-UEEZJv!c0Zg<1wnAB5_vz=!x@>5l)jN_r
zS_)4NlRFo1IXEbh8h%z@*Q$YNodGbB(3Gk!DT+ZAIby#EKt4PBl{AUIoiH@!pg%Y0
zD>Ho8#0RNy!_6WN`oeoglCVQd;;v2hqsdR)ffzTCsCFDzUIS(U@rr!q%nE*(-VcHz
zfzN1>i#=l6?Www*-$U_=E41LRK&>`|6rUi~08KCqHmk$O$7F7N0rYEcu^HMT7F>g;
zlBb2w$@(GQufK&o!+6bP+*|(#caz9wd=w}ts1G)k+@=HtQK<4Y0)07B@R{aYo8`b@
z3q>P_AM)30`JBP6KaaH_LxSe~vx^4TCmulF?VLxO-_o1bVPFc2?7z)E4fRV7uv_yw
z4gLo@0lgV>$yoO`>)Z-_h!_2q!bZNQ1oY@Ol$W+w8?BljTu)e{kza|{#Bvfh4MBh0
z8<I$s^I<S-m;KGB6?i2FsXBoE2RS5~z;w#PN~@W~A_T<vyq?Hn5^)_S%ZT9)7iUs$
zGufxOB`w4!n2I>)!z8qUr7SE{MwnXm{PG4SEyRElo;I5s2Fj<o7HUEp@hp>%$ABp|
zKf%kp+8@BIsxdAr>e9pR$W1Vn^&xmwE@OpQyMMxcb;eIo-^R`KKDbhR_M582#3~Q6
zho-OK1pnP{)OlDC*E+<jvc%9224Qyk73&V+CV87UUcWB?>Mp3+Chp?{mKW2^!M6GL
zN-7PLdL>1{au|sD-s+p`$>q$js9*vsQ(WM=@}3=*f(HVoE-XS<_HWzOY{Q$ky*mNj
zV04k5HN?K3j-eID1@pdacz)}`CT3uML%r-0Bs1C>`sIkDsWH-xjQ2dU`7?>}vqr^=
z`fA(68O;(XxMo}1R`eFhEj15QU1YEM@g0g7r3#*p&xY0vvaR<)hsbvSTZP``<^vE%
z@o81U$mXTb646(H*3oba`j1cTSVczk>W>_GGB1Ik`1uR@{LG@QI1|h4P8aQ}LBxY<
z_}h>M*%_cIPpGk%@JG60pqNO85QG)hZ536=7kJSzcF-wRc@`518!oVx*ZrqEETCx0
zYL*T=c?oC^8%^Z*kK|hVSD6ho(;+^snYeGZcc*|+I)lr&I;B?&MAGg1wFRw`)e;(B
zFjs*&4XmpOOcV-JmM&3(XLXN0BL&`RP5-EKs<j)Uq|Wk)=Y35JFzoLCr1Q6hug73!
z1BT2gqHT$U>~yoUe272ec!B#$VR`5AyAqCLrYN$Tp^d#)MDfX@v(xrW7=RKw0NnM9
zNF!pHWuh<$E=(rh%ecZRH55&_mU<KNU^<lP^LWTZV>db*AbBr$DO+oAx<a!o`m71+
z{6xA<k?6&%ygx&^QPiBK!=QCJjEX3n{l?=`)!`TtgrC>jz4XXa2szb%6>0$ArH*)p
zIjL+Q#3n^%+GWD2`HzK1X|T!m^|B<{V@HeLpb;q@W6?IkH3ukmlChk;^otlV#(M|R
z^&rCPEPt=SU8Zu~GiTYT@Vs97uY=UH>3P&EI=(Hn;W@nDK~58*XAlMSo<(VZJd*`b
z1>X^mH$76Z$Z&#sdD;zic>NlzOr1HXfl>g#haQ%K3Ti*Bq<iHjHcp~A9c<LHN)+KS
za(MVNj+%c7218_fFi@F+T~@W3pKjzHwb)+M44rKO3WA&5^!a<#EQ4GLvP11Qaiga>
zmCRS4Cg?52&r*9$%-A{c1F>T7NE9#D(<T!dF8?#;sPI{_OdNOnF-M6=^gbMlZjjjG
z%SskO1rtImQCsZ5hLvKPq8xflV8Ct+G!u`{-2c3sNA#)@<D)3rnHu|O+=9SkX8T+U
z;QCK5aD^-&AG+f4s&yyPA&};0eg0wU-@%jP8FFKh92hd2SrrS7;!3<C(D=H}3vU)A
zQ|Mb~!x?(pF3cA&*a=WM1+8kJ6%ljX(`2D@{x|nmj?F@dZQsvAP(RLU%x|m9)H#EM
z4-=D=B`fa!caVM+B{5Pw$g1tWp=TAimB%%MJ{q(#-0|>%+36IKxJqsXl<AjH0jcx0
z@apesiM^J$)JDNM>sbV+?-mJ&o(g8xW|`?jOULv8iu)qO;M-xvMTit2i6WC{hx%ea
zGB}`d(ajBIy*4J0Fz3+^{v%o91d=rA{jFw2V1sGs`{*zA=3BjZZ>yx83AVa0i>vv1
zKBY<hohyY?art`iOlbuTZRhlMic{0e0)|!ITC_MNpDCrK*4)Q}!mk#t=^#ScuKx1y
z#&DB15F~hQTI45@ILW(xZ~zaj)uQInBQbPJh8E6%9rSsReohHGsCjO%O$EMJIm}0;
zvd0H3d@EKGT?}+Upt-2miW1>V>OW@z67S(M7vPWif>z(Q2;pL0CfyNg%%v<}qumgu
zt!`O^2l)jE|DjXu1N9>Hgdo{}==rlFB8De+UF#k>*MLt;;+=OMk~OAtWnByI`W8)y
zcL(L~z{T7NrhhHkVbWS>Mo%?^H3#~aF-sv3$p=$o%c|Su6%0IS;vI0{UL%ffZ3!}M
zY?Ob)2$C4OFA!1HH|SA2L>G#=Q<dX^gKYi)f*PB<Q9O*^E$wlf`hIH0zj$VjROsr9
zq!m9D%Q_A4NYWv|Y8OQw@kz+b*7>gO3_*!Wl=h3uE^cN!z*ZobXq6GmdnBoM*t3^c
zh-nl|?F1LS-%}UV$v>kjd<2TEfZ5~h>;^Y$`MA8xivj**7Q6mdE(bl2KSQ8a@5;{V
ze#|7^BCGqK?rZcc1om&)xG(&=JvlWJEH#9J2=kV3{ek=H1t-gWkcV4QtNaQz#7i&i
zf_#1O=77!^IgZ70q@sl-Fr|@=jZ6fq*B0^pNy{9!0nt8&2-rvaTLgLzlLz_%v_sLd
zM~XQHq!tclvbrzQ*$kHtnnY@UR3U<8U2>MWPcUAY<sB;N=`;ykSBTAs;aXAZi$pO$
zpt}sB1cLVroND?&;zj=A8M@vpcE9HWZy@mbZEs^Hf2U&GC>Y#f7ecV4uv-N~FkV7y
z%NBK3M}eht8_C{NX>XNMlS?MP%FHMNk%Y#|Xgm!|S=_CvT`Nq23<I<I(8N$`0zvzl
z3~h*PlUXjM<Cq@B5psYw*S@!N_|0KYalE$z(^9q>eV@jfv1bbaI}8;!lH$oP$M!nn
zYaMX`zhGd}-><e_9morS3k}tFo0^q5>P>fvbro}2a12j55XZ}!B=<}V_`MZ;jtE4K
zD4}kJC0`6w^W1(h_=>{#c7~|~{!^f^#$CaNoN>SuLzFKNKejjZG(7H^eY+$y-Y74l
zC+bXcWxct!hib$pNkdl$hB%N*hWgkEkaOR&R6D{6U<b#gZf$Hg0*l%+w=yg@=CdG%
z9e*7kQ3D){BQ=RAE$YssN^sz@x{2i|_z~H3P|H4;HkO^`8gv#o8Qxl4%et$BwYg}L
zQa8kaCu+nkJ`x^8P<6HGzRR*CS=b<W2(d`eMW<@X`{5JH5{&#*kR-$8N3SqDq+$o-
z6<gj(hO439TQHio7^lT2o-x6g^CT~7?a%~}k}(%|r_b>&5#(*Gi|PO`yYtfP=s+WD
zavmTi8rRLtI{-y?x^v?0-s@p1pO}ciSM8@CEPPj~AWXM5ajAaTVJzoH%3#P$&JVfp
zf&H%R*BkdcBC^Vc$#~#Wcv;w|PMw=ADud;20Ps*XX#U*Pi&_eKnd*FJS=X5p+RO1N
z(2r^iVAoq$3PW9BhhJ$f#Nd=nia6)xIzr8poJB>lASz1X%YHd;Bna`sZIo{g#po^C
z5^}vuiUtMO?X2sw$Fbgy>C@+kNx`<$J%G9a@?{cD<WSgOZdPK7Mf)-#L{K-0wkEhQ
zNtyOVHaSk`KN<k>BeAp^$5Iv6dYDh|<ZR8Qik4<&Ol@qohImdB>=0k=3g9(I+umH*
zuZMt9S}7343QSdNZl?*#uU%8X{FONz2rt-W>l&Ixv=yM@N>lhR!Pm(0qaC3!l0hn=
zQIi)B(Fl-poodp9uQ-zK(Jprz7n4IkA$3j5=K2!?z-`TIaNx!kyas~SZ?ea_RZp#v
zQ*TpAn)qxS4fKUMmirMEZU_19Xe-gENGU=C(I%1EQD;6;`&7SW(%UNugQ8aZm~sCR
z@Q7D(3S6F@TkUf8&cRIN=v(a&jk2r!?s-fyzdzEH)c3bn%LfFx0kSUApt;sv&o-wD
zXBg+tcsWRBmsDl`oSO!fQ{v##jUAD@fK8i*i+lX9|H1yClcsQ?k@78QkEcAo&z3a!
zi|4B}*P?`M(>z=l0VnNMK8qefs(86W2C3W0=4wgKnj^@(ssci_piF#^2+b(LWsQ|G
zq<N<4?9xpob9R#y#Tw1b+a4@(e$e5v#~Xxp4#}$-BrB|{_L9`eD%l>MQv7#X?y!al
z;MfA~`~DeHgoJ({j>0T==QDD(W==gBzM1PO;s|6R>*Dk*DZ5~KxUr`(_5R!nZjoOG
z{!EW>&j=2z6tkB+@^>toTXNd;Y&voLd(!6vrFJwE^%;Xt3z1gU)cbE(4~ch)*mINe
zyC^G}bAFcii$UgPaIq=jx+FdAr&Zaz-SwbTx~z3a)pR3zcHH=!3!y3R<6&=+HzSB-
zBNS&(NE`FdhhWk$wYY!7iJPjVi}L(0|7c;gnb(`Vs#2fsi@m%Q+AzVefi=lsb&I49
zFym4j5N}7R&nlUD4P#Fi7N{`Ax4;WstyT#%>Q7as?ep$WU_jO1`y-Fih-w!yuGf1E
zpzZu~J5wHp_RLtre(w@0-S)4oaHBcDI+)i=#p^?Av1SqFW+Xl-!4Y?zL{5V}X&b>a
zFSlBWVi9i|$t)nc)pe3Y?+Wv*(g++M%Nwmfi9jb&1TeN9v1I*C3Is3qjGx#UB|&tH
zSG$S>1B-;2iq4t@n^D^(0x`Cf+BS14E0<Q45xN4N2hhmhGSC0rhqAVdbu8QfQ=e~8
zavksnep0JgdBbeb%P14K$Ok>l;JsIUFeI`BS_C^@@Z|?0&WqWx!eom!`rV^G`?T=T
z=0Fe^mZQBpVtrOT!ic1ZB{R*vVM{G)Q7IQ~Ro{_6^(9z>T!h{oDPmg}Wg-IAueNNi
zdo^xmY~|bno(c0XB01Sf{1b8$U)p4nY|sZb>JuR$_ZzaSif2e}a>9xP^2w8>p7A8%
zh7xA`a$W}(Be~0|wC!#Le9CfLD~`51U(&z9=3Luk*q@KYuMpH#Y(}V?n=V(LZFqf*
zqpyC8^CeNA(?wHCh~ogY+2%1w%aC>$*)c0eIl^B=84O7?lkqFESJ`GdssUN5<VbOI
zx!QU=c!*ZCK_|7D<mzHNFL&hSaT4wuJ#^07F=sbZtZ55?!YyUlPE+s`!*#_f+C?$H
z)=W$RzR3Lj0KJ;wSS^{eZOUpBmJWL@pO7L&av#XdN#<(auzs@mAWS}XklW$oMbeNi
z4U;~CQmz~|s3UxXWKG=Vx20;;C1ET0K_07%ccljeh{sUr2s7HxANoKTWO7jHDAf?A
z+)YRq)Jte0DYWY8V{I{q<Md?M3*aFtnGBi5T<@ExCrf-ghOBrGt&py5QGEFJLIRfb
z9sk@h?eMu4S>qptTKnc%B$J2q?LQ5ataUPQCpyj`KA3`%xwNk<0)^h?f+)CUyuob{
zZv1o^&!}t;oZNz&xLOc_4Sm*mGSZ6hxvRDgz(buIE8()5XWy1syYGGJ{7qaA=>A*8
zyZuKfgM|K(n`K2`?U~$=v~W+^V$e&_9K#rFWiEl+>?)iPRgeHFh}uJ6?>J%4cCL4U
zW`X$fz$YafYYp@C@FXp7oZyyGZm%XWqx0G_S^E3{(nI>3b+kEZ6|;`-e<FxJ6ghKz
z)1OuXf4%{4jS<-+HmXb&x`CR0Xpp#N9~^b*rYzQG*Zog*Or@{IXwu6cKH!<I<V&xO
zNC9Lu|2T*yPiHaXlW*jgF3{S`gr^DmtX*%)DRzFN=3gR>{5zW7pIdXAb2dm=Hp)oN
zihkMwp}6}P#X&wIq+ju0i7;G$nR#@THYPwWtyVtv<oII+M8G+8Ly#nP>YN(#Ji22B
z$^-k)cDBUG{PSg)xkZkzx>1wcn_Wgu(^9(tQBpU|@jIaCq0oqWpGX(e02m;YA0#fK
zNhHGP`FoSqsTWyOq=-<SB-`R#E1C-(#~sv`Ln6t)Lz{l)p7txr0SHTk-Sv#lhIJz6
zJA2U+>WYv{OM32-m0)`lel7@b_K1eX*VPWl6F_{MVLM9~Q*V;=BsCjNni7MnoG4(&
zehRsO+kg-;q~@LJpM2li>=V9aMUb=J=N}11*|TjAGxw9#Nqu}j&Y*k3c+0n!<R>Cd
zgtPB0Gj*DOzEUb3ZQ41-lr&gjCfmMO`wf<rVCVVWJAa%zb;qrdvyRsE;*OEsss;1l
zAH&9q_;x95za!&#5mLVR@w152Y5B+{6af7fY)3{>J94q+djO?cHIWcz@w~9nq@KkO
zAC|l(bj-l6aY%N*i}q8D!9k6(n!4%v(>4|z+P?OTQ7Vq&pM))lIGu8W6Gf&nBWc&U
z1tq!gyBGL4Q6jjSypr;UtbXE7ra`WD4h9odMcd_ZmZk-rz!#&mkm-1AIhjorn)z>G
z2PxP(xl&vv77AsLKU=l<_W-YBx$8;{8Ib|#R$(8t{dmqo`pzeBg1iS?;6fXo0>fTz
z4^(;W%8#&MxdKr_{>hU3n_XwDj>hAeY#GO+R|FqXdFG$~Obh5j6a(7T#1i1{aH2x4
zU$W7CM?u5hY?ZV+0ee3EEIAZ5H_YH_V>=BwqVo`l8lxE}!`GP}bXNhf_<&;rCpd~b
zBSUV(_JucerNaoLmk#_fjraD1WAr$7K_X}&Fz*^>_a=s*eZ~E6uZt4VYGWW+ghQO(
zZo!J*;G$|y;QMC*TZ3WesD_1){RBJ-)E$+@d+O>F^o>J4<P)P(5b8`W-yHcaKk<uF
zw@t@ALK#)v5Bi}0k|HCx()RVVsM8ZJ&pH?{i<1ETnDRzcd9=Sh)Q|R}D=9sDU&hn?
z_Ly-1ExFE;-jG-n+W|8^_U}66jhf2j-s-%Psg4e<@$N<qv#<^>&!Y^0rYLO;*a%2E
z_oQb*KDp~mR(fZjPH<FsvFVvZzcl-C6*Z6wP)Al!Us)ne1yMos2AyDp2{-vX?J&!9
z7J6g|&y61<jM2O-)`h~d>%XqYLkB#Hwq<MLCs6MX=hLQQp;&{hWQ@L8CPrS*?Jc-@
zY{3#OonrL5Q+*sM`wh`Xm71hW??oJ)<NvnFWbldi;(yh6icaybW8>b-=66c{G)`$z
z^0c3<NE++u<!Fi2zBT^41PF@+W+Qs6Q{n+6R~nu*GcBKt&_ByKBJngt>p{&SpN5U@
zTqfQ0irHN~g-(hSqegX2{!0^a-@E5=)pCH!(-_n(!$4A?8{iYhlk$L2AHzZ3(_e@l
zrCeDK6ns6^K76H~TqcM^X4p5!Ibx7`A|xG?MHl^aYTVVBxhJ8W<w^~rY3(%;Y2h>r
z2enZNjQ?ZJH$?*%Z3m5+=u*6O^#Ks#UQZ~K4L;@>DaS#zRPxm?_j+J2^9D9nQa{S=
zBz!VAnXyrIL2KJhX6F9nyLVleNVwnhV#EUd9E?U?%TVIVC~<>uWHDfDMDnuai1E~p
zay`HE;Xm$9TB7@Owkp&d=+83>ZfF?%?&t^byOB-j+v+O`fA<blSf&1ZH_AZk_Q$XZ
z_f*!pZux9$6>Zwa^X^*y<wG_w&q;LI{0)oPoa>8#UrWMO1w`cj+>{`G7n=ZyO~lVY
zR<o2KWa^HCrf(SFU`hts%37d9REIV}6gw%cww}TscqLF~*q*5#Rqzh*k^3xtu-15^
zO=G>u7R-H^^aLC1UbEd|Q#!HxES}xvix;atSIQ_vm;`m!4NKuA3Dv>Gfs?69>$e4%
z9hT}xYc*~e^7&H%wBtPkE-CqImqTOlMIGlg%JKUzV-vMZGA9*}&*cA+yWdeehg0Mq
z$DVp?64p!6(XUV1>QniUb-9rnnUfaD#Un;}#o6da{LI)1V*1We-Z8}~^C^VaLV1G7
zZ`e^4Ir>&nH~fiFS#H)O*sj#hE<R+zaV{_rfRszYGa?Hh2%NXYTF7#}mbt-ZMjBNP
zVln=~FKmGpYeX$+?rxZm!bkiz#PR*Qtl2IGngpr$B<>j0h9tDhp`Ce>A=>usN$@7&
z|ConJ@Svby12_KM&=-#%imYvm@%feLEdcsNJWi(w+PzUWxnBK_u4~Wux_n=Uoh4GM
zq$(?lBUQZG)+4N223k$cP`>^1p`mX0kVZob7|smF;G^#Zaq*nQKVCo&g5tJN!4yfp
zF(QkVWMAy4Khbb6nt$I?iApq|xQ)N>{)>E~S%x5K9BdLDklfW*8O^vU*}a2m3JFLG
zm`wl8qc~ntt5n1lMoayf_OQKh5qJ2uw{6X+UYT+*gaFb{52CNnMCBD&B`{_yevzE~
zw;m4c|32m@r%2kQ+bu5@NJh@+is_$$LV{I7eEs_uD-&bdSW`iMFbglWOpSzvi)CB&
zvni8-ZVoR`?(#Jast`<XsT2X2JKx5JYd>&N)}Hs+IrfsabY?j%gnp@dzojNHTjciX
zr`=kU!`^sLseQOX1@<n0nzDY^0KOKIzFOS?1RfYdhS1d+qZIV<Wri2+g`}kQRmglD
z+PK1<9o7=$;QswWFHZ~n+XwmMQbPPWPH4_Sz_W#iu>D!aYfP#WX)A?s(uaD?iTuW=
z<)(Usne61E$u|Vqj0<skeEBU_6!J~57ZDR9WE8t&XTClZuHkaSl1c%TiNY-a-M#gg
zY{-vT&7@?KClp-PcJ_>)DbJpq>>g~KT5`3f+q8-bNHoqgU*GW`ZEEMuYTI5=37aJb
z!3`}rnM3Ig9G~fNiP)FFh=25(cr%$pA2GPy18in68KHt^-J(&B((1MW*nL3qE%PM#
z1P;X!`!#dyVjPoE(J^7H;p2}1fW^XeE%ahT)t8cwV%7Fq_osR03ut|4b9t*2mS;_5
zT3i9?WVEA{-JEf1x%zZQeVwx1u#6Avlb8>0%*Wy*VD1K|qH42n`Rn+=>`_(c*5Uz9
zo@)@|rBuFh|9E5rhdNP*B|OWA@GNFxxSUOCh9YR<#anLEOs1>Vji9@lvO?oGCSMjb
z{QeosvkMxfjS`QZ<kgtN?V8=ic-~6*wBJ2DQ9wFqY-pfrlbhVs2A)*{$)8pncNjY0
zSeshige|@dG2S-R5u-_Kcf3_nSRd3QJ6Jjk#PPNGHc?w3i)VN=6rYbd7vW*KrgaIa
zWm&O)PokhuH_$o1c@{>USX`$<j3)RJLMAf+6R||Z`ex4NyJzm)W3wqUBoohIns3>>
z95V)xY;Q{x_R{<k2Ibc|4NYL6^<~PC=qkVM^8IZkBu^G3K6{OcX{h6Zo?tEe&zHnu
zHE@bw1ue4EZ7K$W_b|J@qj?YFH`gBwV;#b&t3veNz$(K$ZrIhwUFdlmSi+H#kWrF#
z)JEETpNPc!$IdviaxX`NB-Wr=TgAsp)POMO6%{+m(2kh6lJ#tebBIxm&Hh7{A=Uj>
z^@i1rtgP~h^}D_~Gm5q7LFNhpX36?{*l8d&O9~wP2p!oJ@dnqjR6uIiSIMEwBJMkd
zvhAds@{d$(Qp`YueErqTFQoaxv(hJD9ZN=zA)gPXS>E30q(Y|K@wqW>i3&%Y#}<?=
z4Jm#`%+YXM%S_M2@EhG7u_5988fk2@u>Ol%TZs+!NaV@D5Tx^_8*EBrbom~)!eun9
z(!O5(;d&lR3GBE8^(%X;5a-{VCDDaSg&uM6WwoT4_ijdh@CRhPRsUZ&Dh!D^b8nec
zD0jG!dW*^YA82m~nX()?)m1)gl`?cZ?#+rRgj59)_!oW$<A;4qti{=^dQO6p*3n8<
zH$q)|r<ptyjxzXa#qG{%=fnvTyXV(?j!M+vTH%^9Ze>|+CfTlaM&u-Nl({^$rd9&!
zsA5p_fT^1;;5)BGSkQyw7taif-h_2$X>Y+BwNyDe&Q30_G@O$IYQC|FUeUvJg>v)h
zNFgAh)iibM)hnVp%I*9fMED;>Yd6aV2q`cqpsCyK(&hUxr*v=5@}>*fs(+t47_<mz
zT-D>*Bv~8W@xzAQpfp;|ZaxRptCBeEPsXqa)ig=07&_br|G1~pZO~Ty5ZCU|Md0T$
zP~j7uD$QHlhAbwA{Gp-f;!vC;T1=euJjS-_1SK0J)Y8vUIY88saf0SjloP(9yb54+
zOp$OrM=CvHOVzpTUN!b;!SqXDV=8<L7x%cFi?uU-;49vng>g-!Di4?<%teC$x_~?l
zQSk20SI%<uwugxSmcIJdF`waEmkO9!XIGF-(6^7p9<3vEf2wj|uaPNaXf!MUMdNAb
z<W*m<H|tykd?u|XjNX&{Ae-DBHnBV^{g~%=zkMDpBYbc+E5cy_MZGy+kqB{nVw+RE
zBtLk`NPYcW3IXp2PqxPE)*Y(edi&Z|8_O%dcp>qBK8eFe(zpTy_C|14fV~HS>xrjV
zU>D`^0uX(J`>79%41g$I3A+HnI}^Xk)=Ijbg#f<2>nX>kw^a|q;4_(z?DUaa%+1y>
zC{kcO;SA~y6?<dfTvdFxG*o5vNdt;{J3{rw$dkDTpFKcX_Van+NON^1W!?rfZU0>)
zY=x-zj&GiYa12a5O1%FTZNyCb9ha%t4e-o(u}`Uq+HA5WW}Jv?GA>he8M1_^0RSN0
zQ=Bm+03)O$h2D$@2Yq<JTU?s%`D6?BEH|1C<&a^az~5Y34|?0^oRp5F!ady+pL8qr
z31Pf*X8vq<vscrtXV=!%(OGkp2*t%Y)Z@kvwel|Jvb~y8*sC3&J`68;a!d8`h@z2x
zn#<+Zc%Fl-G?+Bnncxjqh6I;HC0p3yg1ZuD4n|q}gJH`!v}J@v#J~jx&J5N=idWJo
zmTQnu$hGvENA*<+W-D?GDNJD=rP;CDzMtMfvtwZnC-{h*raTMtUf_J5A=ZyDK8(cw
z1+@vPQMeD4oG3|%_4I|{H#6pkobLl9gxlw?+pbAp_zRq3V7+UR*Y)Nx1j2#`xBV$B
z^RY_3Lv)>!4y+Y0wAGk}8s{wC^aOkTdr$RP@}#B=OFPD8F$R%hp4hSMQkw^xUoy<_
zO&=k(=~+v4Oa!)-tM_?DlL_%!<@d*-d!WD(ZWlP5g2a&1v?3V-B#kU=gb1R>KafZz
zAtqF^u?h<UU;!*jJ@Bqt5InUrTY+U&3xk-lan76T{{(f)If6PiS=VH2oSlOBO5t^D
z3P2G!PA2`d#%oQjoVf{7NnGZ{n%g>HSUt;a#&t8Dix+k+l#YdXEUDvakLPP_q&0qN
z*aD*|n6n`)$dexDm`^JeK$AfMIP-F#Q!~s@Jme}?4re5u;qZpVJ$JH6op8<<qe9TK
zNv}w?ACqJ&OEfue1eSmIdv$d()T&$g$2s<)R?f6;cEcEE{ZSG4qhp|H?zA_;RqJVt
zf`MgFuBY^W$T_;(726c=yhwvh0k{CaF%tllBV6+4bx{X8F96VyIOKmwvJ?m6i;2RE
zd$KpQrKfUce_UeQ1t7FF=Z01+>lC9~3#$0(Mt8fSYC>@zykbNrI>8U{Y-(h&UbJc_
z7SO{T=inGFl=@&M$-pQ5OH|DNt6CCJk<v9on^Q|0i=n0qzB$m3N-QT0*?sQsoyY0L
zdp&7WR&pkZ#M{kUz?#KYSWF<ivAs2@u92&H%f><q8I}r*%#71u__)nURO+I$*}+$!
zllvm2bC7pXT4VSjOe1<U>&+qhKJ`7liuuy}yhw{l#p^Q9Zh#0{sV#_Bre~_9eV=FS
ztPWT7ivX(mq3(QEX<*7v#E|{>0a<WkyijpOR3OgK{~3!pBX=BS9NOkXj|G&y9+2RO
zy-juBY2*bT)7_w8ZJP@Q9U(3k#a_q}X4P`*KINYUI1~J2U@eT-9}08K1*`V_4hPaT
zx|YD2fm-~J*yTw*uVYEzUhDy-Kvns`qd(YXvTEU6;AhZ3_243g%+9hss<Vq4G0x44
z4bSB_j+Po5(ucjApQAW|J)Y9>h_fV?t_O$LLHoaOTwrq37#IEwuv3XnUGhaZdo@FO
zSgO~F3m9a(OBeHlCZ>5J;!P2y&O@oALanPZ@6{dte~rV3#nr_R-Y0qNX56XA9EeF*
zh8C={(9T|wT;^{Yq~!_R*_6A=;`XmT9WDVrbCHqZq^nmypp+#e<cJx@9(4BKyl`_T
zi5y-BBk$R$*)Mpv>n6wf_T00yobpg1$ugq@xH6T9cop(LDz7q}2{&_%gRgXE85~7O
zD-;G5oT5jeJNqD(RbNJG22Wx1rgOpmL)<~y(|s?6r3)kBvTVOL;LdhtR|pce5l>{g
zsHf%tkc_bEccMD{f0o%0XVSJ(1(x(|s{*2e(Me!`X8~m+8Vq}n(mKVzb9G~$QWanJ
z96h$Hy^kmChj!QK#n_~}nHS9bnJiT&d;=N4SmzvF7DWVBGV&9HJI^N64<v)mQHBjK
zeW{O;g9`<*m{bIGCsgSJn^He43*j^iSOA94+A99ON$8LB*og3aXz=j~GS~y(Kgy%B
z=wu(WSiQL(K9qiJr5E9qTaVw*g+>O01-QVR+#nd(?H~cYZc_ODkVP7a&2aKfefTh6
z%qti-NNXeHXeJDFQZ>np!_ayz5G^+|CaLdfSPJ7IH^R^;VGWxVE8WUur|>1N*dXi>
zC7SWVjxE7s<oI`)dty^s2}7f6y-quJa3*Qn2Z4Yo#tT21ZfN#xBt$5n#k$h9!)#_T
z_d<f{+yjetB1R7w?@0T%AZg&^e0WXnFj!hjENc%-Y+RlMA3^8cvSHG4|8x%dExb5t
zr6tQpmEpbCQDl2|WW`-7WfhqjMtZy$wP(O5?nVeWCX>~23uMMaQ@*Lc8E16787=4k
z>4K%A`*~A8;<9}04{{-ggkd}ic>As7l9If8-dCL2A@L&p$`qD*8uSg<VND{-FNfLd
z5z`&T4`u5NMIJAAz8#`&-<gp3Hr67>m9WqdB|S)v7Q)_&2<Lq<`SRIZfY@ZJ%ws7y
z=}3NG3-X<M2&wo`&dUTOAeKv%(3ACKKAUtETt<kvFSeeWE#%^TFH#!SE~JtpalCT{
zDH6XvL<_P(Y;iih$i>yXAQ~1_d1C~ZLWp~RdGm&F48|^seNg>IS5w)09C5Zw_i$m!
zN)Qe{f8yxR!~=RnA)EtPP6jt+@<$51_2k?BLoFZKYQj+<%zesB76g#XA0*rWZSjlL
z^)AQ-?VKI%eI4ZU9bUrbwIZ4QCPB>r!N}VzXPzx%NS9K}UlZl-rn94*+5S;F6O0T(
z0mqGXmgm<NeA|g(PkD(6J7aa{{48eyB5u)fqr+EwVg!z+A1i5OBT4y20JfV3#~kT3
zn&&`<l|#uE^bJmi($)XRDVM4p*SbSEEE{Z0$RRWBMSsz+6f$6b9zd)6SLxil8w-|d
z&cUc6fH7<>UH?EQ#>4+>F1UbeS-o250V3a~``@;h)&i60Gz#ZX(8jCYY!#dF(L`hs
zrA?7i$u7*a(W|kH*iXIG^#VBY_Z#{C`ZP!68~P{QHN=K?e4u4-L2R2|>P!2^{|hDV
zJW5&RM3gsk$?n~Pu|~K>K%g`|>9V|A{lL#SWE@e4xYL|{!cftfu}JuCxvrt2cmA0j
zC(U!E)X4DnE)ix5I0v8`QL4}^loo=k+F1V_n}e-*)ke>Br){gP;7z0GBa!v(m$;ry
zm}>FT6!%r7IiQxoU=BgoXc}M9FbBSDWuXhCbzfF}no((TAoMd&9u5FT?rb^}00zA+
zm8>BZ$vA*R0q`?U9$YtKJ+j_(3?NC8yZpadtVd~(S0+u@;I)f#%h-$!e1U!SVtJTk
zv51>qd`&~cJ{4S%fiF|Zb*-5J5@D+MXKnhS6k=(RrSr~zO1X`yU@0MeV)fEOxzEPk
z*=t}G>I~ggr6wUz-j2$YqT<Z+sQ+-EKwL3Q72btK1@IrQyPkew0ba!K-)ZVahAX8i
zn_^Pn!`tsYc6=&=6MHxx2r}ytYj{Qo44PDww#ZlECas>kyVV?aKU+mE=a&4LyL8Cq
z!LK#~a&$$dwSnc(A&?i)5TaofMaf@v3tPPVe;jA7f%bNerTuc(6fgbzZ}j`q4V;|K
z7S<*&)^rX&lB3&~Lf>S@&(AghhJN77FxW;6u3{moK}8{o3sW^sTzlMVtYH#l><__z
zHL~}zypfvI!>%ZpBdmGboFFK>x`KOYNqY(r`7t``ng<dXb%RR^?lQV96}dMvC_E2x
zi8vzu@9Yyb26EN}K)t9@80`>u)U4YnzGTvUq}wEb0js!7K?|kKSB1}-hGEiWioY3i
zJWWIedz@Oi^|TX2YR>m4#QH~yc}|&Suay=fd^y5X+3hD%wdqaxJ%F~^$^mcwbJr3=
zbl!%%SB#=HSX11hFu=;9tO8nVX6zR`mg_;|tB%K{fUwek21P+8Gy*lz+)6vGC_28Y
zOVwi$%J{Lk>rAbiHw!x}Wq$5##hEg`ZCfb*;vAluLjoXH#VX=>KY`P0KrcuIN*wOV
zHHb$k|9r#Sp-l&2nTRlI*D2yQ5`%j%*Zg|kxiiY5cKqIX+k+W9+7_(1_SxxObuRiv
znm{WSaXwjN@qkYkU<q+x2yDYNb3-~2_{uqT=Ol_mNm45Kyludi(v~Sh$KxgI1`?+A
z$9SNAb-(`rPKJk1N88hNmM1Ff$FB6NW86ra-fSFE5Jk&*VUIbqLyOjN2Tad;j-`ek
z=Z?jW;kYs0yrCfA&r-}E@q3+eSBvlRHZADPqjqhLu=mEC?bx9fH@PvBc-R5^u=|p%
zdc<zGJ@TjcM5WgjGRs_?$>5|)pFUE|hWGFga$qFKoT_5#&vFKD7i=SvR2pk!v?{0{
zBb=8D$rgB8M#NtO|19m<_Ot7&1XO$KjE+s4a$JXAbj~2<?rz?#%Ry!x0}!#uY7g7y
zTE4}Ob5ia|{K%h!1eXdd>qk|?PF?dVjn5q_=p6%hEbF9+vylClMG#Vl-e<6B2&BUQ
zL6^ntKev=sIvADJUuwDePqY~!9Api85@+!KUxE$J8A$bi4X-D`5%xHBUZSx0j~ex6
z+-AgL269v-j*vcW=BEVl*!4+TQKX94neL$6H1RaSVWdf++5z?l+Zvnj*a05dBVyUq
z|Exo65ZK4?(()n4hJpQxhp<yFX&CL+=>Cjx5cEpLcwp4Kj4nI(+feN_Q2fl1`H-~{
zb{VH{_yKH-KNV}we%GG!P1XRqmWcQ;ny!c|#GxN68(E9Xu8v_Rdrg^qYDYDKNAE2$
z?Bo$Ot~+qV-y<AV>vd_`L>>h+nYCehiw92F8%kpi^hpaC=dhd2MbG~=X9Q#R$Cj}&
zo(3kvlssN6@oHrh1CL=Mt=+q-u|4g9RjVEjE5H<WYGzW+o^p(55tByo&q!t|-=l_M
z*3Gmwlgu`vC2}Qf5_eVzj}s8fBmZo5;gn+&$V5GV9tW!6IaF%ob@Otj2pc=@+q%wj
z{V~48i=GdXCrjLf|7t}a?~Cuz2mIb!sw-GafBJG>?alS=CzJzzO$dE}mV4=~sx3UM
ze2^0+c3hLI7*#UZRi6Sb^*80Ttz<L%3UUS9Bh(+1rjp)3Q04JB?+gOl@vp30$Iaml
z9ve0o6NkXj?r`v+J}ktr84gu~U%f{I@Ko1{pHkT*;8S4i$VL-#c5qhO>Af$yL}9{i
zvjPAh08B{;-aVF_bOSKPRh9c7Vs0J1%PbK~E%odIRzAN03+2YdH?f72NxDt3b(wkA
zx6=RE63p=Uuf|h|i)W;<p!#;2uo(AKj6+6V{ivmHu!}sM_t+RPP#Oi*D2aLqDdXO8
zcTL*{eAM-${ofPoKZM!-f0787OkVEu#&$DSE*(3N{m_&fB7_;d{&JPy&+pb2GekLq
zciKOzwhNZZe_s%4`5|kgUFN8kyMMgtLYN>INiYoCQUmu!tSo|ogasQj6%Ue0Y}K#h
zg=D5MnPo_=MNwO(h%5(sDP*Tc*&eFW=muF?TiTnGi39ln6KGMD4S-ScCtEyST=_^g
zz|6krKbdZKtik>(fo#cY)oM4&q9!Q2U{tueN=xv6<){Jg49_PyA?Mr}(rbEi-q`a2
zPVE~Oh<_sUYctuAj=Lb!FS<#9HaYB_lK(N>$wF$yINU{_7j36s%V5=Xe+FJf7clRi
z?2=IIs2^zJ5nFS^ek7yqSK)|w4%qyJGRgZDO^Fi**AB)BJFhu!$X2-iu`>VX{b@HU
z<vT0sk)^NCc0#7VfCQc?8hV_ou(3kq&PUbs-)Af~P$Z<{mh96GsjNyig*q3TYJ@3O
zxUcv2#55w7BW(+Xu3J(B)(<h+E@@e?fKL-Hc5K^-A%vyhaqJiYS7f)x>M*yK3=>kP
z@)ZpM!uPhX7+B;0j&pzz$t0h;VRRInz-KDnKq6j$8mhBJ3bFMBct#xp1bcLS3DgyL
z?mMntWrItOt9aw<IT@^>l=m*=r{cTp$c@JqXff&d_x7hL=3xcMLw4+xiCqvH`^ZmX
zyc|@3ZUJLmEJ86<e1Tt6824*8H*QezBBIN7Q8yFC3GioyXtaQnkj5}?{x@B;9hG50
z$>3U6+U|CaeR6|#{W@CBl&mdLzy%;BfSRtdg?bK~mrfCBT~sB!2a+^0Q?QLM4}cC-
zJqP)Nc{$HnB!u>gdz4BDDs+BIW`WCy92rp}<qNt1^Rqi;wkm8Eih{GX)M91_r|oOz
zaCWER*$Z`NByY<AYqDq9vOJqz40u=-lJ{?z_T~~&Odg4F6ashp8Nz(}DE7jOQlDzr
z<|yH7$dhJhGr=}mWk@YZ5eY42rGX_d&Nb=GF4%|3iiU{Y{;+Y{x{Bcd?Df?B(kzrY
zWe)2coKH{pUvUtrDziiTa-`X@5~J@N63)?M08NiYj&_CHn==OI|FCxsQGzhRvTob9
zZQHhO_q082+qP}nwr$(C?ws@P{%!8^-`BG0WL9Kkd~jCy23QXYa*xv6maSIob|9ih
zJpbriEz=ddPFAz=--ARt0y9VBD7BIc+YpLz>I9yVfQjAqAgBtu?a$VsY;vp)`c{ra
zi{teTId&8`O%Ss=WkK}IOPj$vMK!Vrq`>LPrAlupv3j7x10Q<>V`|1|D)+AkTO{ol
zMY{)v??u*O8`o^B!iKb#w|0wqua)u?%;tTX+kctC)WR6F9If!}p+T=)K5Jn}mg(y$
zN9n@!kH5;%=ft3f5}WDqvrexFi4LfkDw0v0W5=aKz@*U1V5m2*T*6z4W0k3Z6oOmf
zRk*H3#)``__xl4UAuQ>W8Ck|kbFcR1kbt%JQVq3tlOd|!bv#v4i;Zd(5B%W0@sG;W
zlK4?^k-Tlq*|*gb`7*A*u{l~?!BZ3@7@#w&$*arsmtVLrH$?L3zg4G8OQIj<r<!@?
z@Tm{J;xw&J|ExK!kAAm~%{OrTOWTQ@<m-XLU?T1Qg!3+c;h(R{1HARSXmE{esaGCc
zq3pM!P{N8A6*F=UEWTBawDwK4zbe5U!eQ3bc~HMv6rN3<!$xc{&fBOQjaBh6;N*xS
zUp{hiQf{eJZ>#1D!R(FhRe5@ryHzBD8oUtb604=TDJ-JtViMIb1x70yhh+@GJ8Uv?
zoA)?jr0%1_?WYWqQsse-i>aK7y9BO`0bfg_J*ntzw&``NM8nwemgc;Yt;%R#qAFS&
zNdQvWO%`+?ol?Pxb+cq}*0Piu4O?f;>KeqVh?#oL+2GiYUJ{<3;-TPye)S+<<Wwn5
z=wRmHy@MnSHe0F2s~B<2{g(|nv-Ul+)lW%6G0k5AW@UK+$)VO0y~9xkFzY{(j~<VO
zDB)Gc|JN5Irr(ZhQOL)&XKg=OvO}T)kk2}n^(n@#Uh=wVUH<L$*7j1wg!j2Kj~Wvk
z=z^ilntG!loZeb|t)fJNMT%@=*iXFJD;PYv$pU^YJf8URR}ZuEm$H1EphnfeYu?hH
ztC--G^#aNa``1<{%T;aII0~zUSmn_|%m?PLxwBi2$K56yuI)-BV0<TIvo~$kl<IlK
zxHUI;X4UYzOp}8L=e>A3D2(r((15IDSrd>d^SFk*00pGyD^ra^pw$TVB=a^HBgi#f
zPCZxZdX=mpn#jLK>!fW#4QMmBtYyUn%RAWdL;!D0W;z9+R*-sgsdP55py6trG~1)F
z0>}uNU(iW)?*R&XgZ>yeq4;K(%|$%e6ZudW0Gqs8J0HjBpyfffnif%--27iHh&Nct
znn+xZ?uEqX%JQ17NS)&#+?95bwRA%ulDZ!0g-9V3UtS!|;F&jets%*u`KK-#iq1aI
ztf<!O-t5W*ECZ<^2)!DL@agY0WnI5pz~mT7QMxddiO@0m71P?T*L>(c6A~QBcmm<9
zA&_g13gHc{gFT)8Duaw^+^?N6-KAQIbEi%S%w)_+1eB~ozHZ_Kre!|?*<i>Z7k^_|
z>t13sy8|fu#aGByb`I7k6b1eP(G;Vc>*VdlR46@2JE*@q#6uV=&accEehF?in%OG_
z3$f`iH|;VRSW`a7iDV1npY$_+PJJnJy6p@sgX5Gz5j~UA|H(6${k1eUiuxD?e!i}N
zKVaDd@yS-{bOd4AvWnInu=6Y3)jj4smIZ0RsQC`LiZn}dKRf3-Zm$I&^BO&CH=xp{
z!pa`ec+wfC(YAq#P^=oF0HoC@2XPMiLA$2slq&)Dn=2blF*wnao)w2CI(|M^9I@UK
z>&eJvDYLdl4T}@T<W+vZhirx&RfZ1~2<Q$qQF0X@X-7EI`#wb8PoiT_VD}4TiXC*o
zRt(rGSmLXq><Ht%BI=_aTM#ouqX?38x;+XcQj#EePd@yOFUwIyu==X0Gw7(pnG}c_
zRYu1TlyDpg3FDyvPsEXJa1Y53R;>b9!|e_WZmm|YFxM3qq<x^~hWbd|gfW}oap*ju
z+rx{xno*GN;~;Jdbe_7!7<qu?IH(oi(=-w_0`OG&U8sP`$A8*Is`_Vo7@i~tS43lc
z5X)`>$2L7Cfi#_Wp$&M8GJKXuE<w#Zh*6$n>=vYrxcY>)3<V1;l{3Wxq#p#*FfHR{
zk57gdkM2p@h?@^%<0AVbOL$ucL+M#7UeGuFge?}he4RKa5h0_EOltalkv-vtoZsp?
zQ&j-@h*zF0sf)L1T%VB(3nQ}4%K-Q159x6@j-Tc70Qr9Oe8+Qw(c~oM3z2s(Qw$o8
z%o#Kl1<a=>h}7O0vR&~6z4JG25`sH<ojZ;Gw(0{NvyWkdnDaU{<H>0wGGPrQ>!F?C
zjd<Dttq3gzb^b?v?P3CldmzMO#Rg#~#6EddL5O21eZavw9#G6Yn?Y$vu>-?)0$7Jp
zyE3Qv3PD=Dbx4(*)n5%yJWci^UQzBR=UH{VRvjX>ZL<{u1I~e@84QenFh+U9<Cbfm
zJvat&Hylx1xmp{)FhDDxdRA^g3*K;rwm5EE3W=KXBsOpG=?+3w;0Er$8_%YQNQ+;|
zy$a@7X0hEZ`~IR4Dx72wVkJSkfR-xSsgB&?MEgCKC^5os?$r7Neny_=g*cwiZ=Y0a
zLNP?phlc2Druj}(TyvdZmLLxq&I3Zonee4caABt3^P><t?!?YK`ihXUs&Y~r{(0z!
z_6^7|AXsp6nH2U^vGFJR6{0QvIJrg)b4TrVwS5)?m~xjK;ip}BJRGlcp;AD18n%g)
zo*Sm7aP9o3x^`puJM8lwHn({;g=rZdo1nshFgco_O@YBCqktDkv;LHGkKTkVWJ-jw
zg1e$bBj1|n)D4*~N{uh6rAaP50S}+|lTX^hla;TKg1!`AUV=<hym!Y7w+IB{2<w{G
z@qUgYUS+5IZJ#Tc;(uZka<>Lq7N~|A6{4Zd==g1kAFEQlts|D{1T%13LRY#Z_<GJZ
z&Ko>!y}o#fOADFs96KqU`}xfp5`Kc_SwC36Jj=C6*$0sxI3xK?`VBufmA?+nY^=o;
z*E~f3t*Z97s@L_fdKE*;yNok!hiiHasiIA&Tl8v5KiGR@1=#=<GvSO%LU9ru-mCFY
zapGGq2_-=xg!GM@9!){M+8OVE;KsI`6bczCA)Dovi_su;2ZB~_#t*ga&rTcf*xJZx
z1C^1k+ktTdG!JtCZ$Yxwp!BF9FtyTd#iRlHseQBQ_Wv)j4$lHu<^T7W{tq4be}axo
z%9y1=*8xM!-IN-8$*{ekVk!Aa^~1j@y>ZyNbxab;>U6lgz>YL$&y}~=>bH~-OQ;Et
z&Zr>*n8wWXoYTKLpt>s5j`Cax>Yo8pN~eU$4b*FHUateKdg!J`eBd_uf*-`sEPTYU
zqGR0JydNp9Ce2eXIn<@X`U&d5_RW}k0<rrUXv78l`(D!3Hp6nd?L5@49AF>`7)o8i
zmfEP>(#Yn+PN5+B7^19!aSi(ONu>{$!ptkS<G@JCbm7#J#lnjF!$2LEmi~Gt1eY^O
zS}jcQ{Lb`=_h*g;QJDbEWKV^!Cupx^ZL@LK<$Yfb)4xc{H%a=O*Ael}iR<r=r&2;z
z%Y~PcELg#qY7HIZwj-}=Ce``~VaV)yv&wW^iBl|@`ZzK=3joBhNg~o=T_Pj7a7b>O
zu!%`aA=fcC({<P-px^HT>y7?RFDiRhRr=dQcG!857B|28V>@wd)5_`WrFAT+zP+iU
ziuaC*(|)A+1J8ut$JeRTg8=_-K*_gxw$GasdnsK$D3VwJo_+7NePSks9Og@ArJ^Ir
zzU)}rL8DS?20oLsH#W6dT^ePWYquzkW~^S#4Sj09ZSM_K^z;Ozy47FP-d96z-gyyQ
zM1Og?I)CZX<?uq5mL~A%wh+7T_0W;bAdBGtePGj@5U2l7Nx=6z?%pat)Q~40)wjuW
zr@{LV3Hcuq@;@Zxe@MvxkdXf&A^)$DkQ>jfHhtPyJK3lND^|#mmIR=;Ij~{D+Sb!S
zodq~X_^lE^2<kVfgYkxnv<S@Wa0ID5b64u0R1|4?xi!qI&MY0uV?@g7?i`nrfbe$B
zKL6_O*Rcb1VQFCKV?x2$amcCs12%5C&xF(oI68E9qj958Mnb_?^LkGAH!SlRB4vvC
zu*8CG@~90Sz=C-fC`it+c245Y9%>n>81;x|PtQxyo5UsY3m)St<yS*U%N4BdJ8ep&
zzm=f#D^Qu^UO5KDJ{_SbI+2c3Rl&d*kDF7O(Rh5l=GLe+qlLwe`#Ce>7<DI^8zu`l
zLdx4FwJ#$!MCS7$srd<|FF${HXFJr?^JN|FA)Vhc>{UuFi^g-y(mRu(vg$@LX;e-P
z>LpJ0S-^oKe(2IPCx6rG0X)Yj_bDFITp0ztS6rRp*d+o(Y@w&Yt}k_-8N&TOx9U2h
ziMe+@gyE61ov?y;Ci~%6h2gz~f4pGC$KbSK6oXaV05%#L;&z7v=C%1T{K-R+tJ7P$
zeu=66Mki|INfu$_w2TP0*LtG+ySqQ3P><ELJ5&dYP&y0&De&55g5YCSx*uupPIO=r
zb`Ye0<_7<LBDMZPD`z>Hks(Y(6u;s~<^{?kYD4~Ipp&i%IVRF!Un=YOPRFu=^{|*E
zl;hJ5WTe;1&B!Uz3{pMgXfn1AR3R0{G_Jh02R}+&$MuCsh6L3X<IC<o903-d9{gC(
z8NK2P_@0{#lUA54{s0--%9$P%WMgz3TagaIql&KJS(PAV?-z}!-$f)+mB$DzH;*w4
zLE2yEV2WpoQW>bTneW+EL?cQQHZ6{&TTgVTmAe0(o*Zk|aKQgxPfuu>f4`1Yp~sx~
zltItrE845GH^V1S>4at82#=%@s(3mR?0uE@cIA(5eDP8oip?Q;5aCf-D-?@HCjG!%
z6R16{o>_v6rD=@Koxk>gr_^=Pj6T8PHn25LzmjIMj4mb9RRvJ8%!{_rCeRvW@rsZ6
zU>rWaBfuzlHeB%tWa@Fh7oPAMm5fUSwKUrK=Sp~MWkqVFF@?$OH!wbT*Hb+1v?o=d
zaK*1l#2`8ctg-(&v;r?x9}IW$sW>wCE?o^-OIY)+!`4Qz)9|}7%$r_33AHqXto59E
z`;Zh9u^K|<GsS`6UNUI*JHoVp&x~HGL3MNJXJx(i-^@aqM%Sh@?_=>FN)`O__h1d!
ziw)vi4?jKx_U>zjq1PM)=+?MXUU~3RKHy)`yxZ5To|i)hb4*3OCyzK4{9iYftsQqW
zb?7p*(v3J(7F+Sf*7w1c()tsrSK69gpujTN;(wY+7Fns`Cy%Z7wF8U_Oy!2B5Soo9
zOU|YZB?LWj=!{F!pINwo|8Um)%7`z^Q);!=n3{RXmajCA7#M#$Fd!Y*Ghzti<%M^9
zx$Cd>J8lB9#5)~G4GKCT_-oF#G2>KofVh6h6Olp)dKj@fOD`hif^v^tJ!*IBICEhm
z%bsHkUg6MRdecL?De0Uvt&MFDE2d#N8%#h>yYbYtwIc_SY%O=%7_-TO8P*6DmzXk3
zsz)Ucg=Oj(Foq3F_DqcbNMo*yTU_ToLoia)cZ<)Z{J=CKz;5e(L9RVYv2zGQ=5t_M
zx^%^U(naa&8Uq<#5r2G!P|hyB-WJHZet?I{x8eIYUQrwHv;bAIHRlNz>6iq_SC^y7
z!f}`8UcCRK0L`n6e5lv%ls(f>=w|I{g~Sh^RW*Mbsfk<c!thQ?Zt<7Q)&R?TM5eO5
zkmT{jK$2!fHuJ^e5**b|jmsB7Jti4~mm|kS7FZE!PDSOt#G;t7zooZqlYSQdY$X9N
zcNunU_*0&_L+*T)El7Qv!oMs8o+_nVboCK=FP1(E?zvI|QPnQU#R!0go`eQxrW7U#
zw0>Q?)8rk06afu`{<i2@=l$6o#wV5^%`5KdpJ+`;HAf_G<91V*!QOwt6noJqOzl_Z
zQ=jd@HB~Uh2x?W<Af6$ck62{$$=M)Uj6-^|(|_oOVeo{zgWygC#UkTi@n{}=8Mm90
zmL>|BmH>UYQk`zz9(FEn<MOxq#StO>z6W9ND1%p{w}|B}NURJNTlDzCmlayqZnGgM
z*Yx+GS_fQWPr=73k4$Hitnyc)?T|*&hKDP~Xl13J7_~%ZW`W8xq@x2mLZDPxO3XfM
zPbfQpkL8I8;4kSRnr{aJaCkt4X_JGqfW7ZaG6hSVG}ti=sH<iD2?6ZPcJEGNpT!vq
zdQKr+2ABktXM~f6uZ4p!Dsl6mr+P2qJC@wxn-FovNd{Be--weD@%8(ohh`H{mp3I@
z3xDS}ag7?-SpWw<BJPk~Fl21oufCJ^2t`*(9D8l;Kry1E@{e2Fxp+)9lJ`isu`D3R
z)Q}0)?3i}`sqTk=fT4w+-u!@>M6-PSj;HL>)pMC>sxB4DAPSTS+is^Bp?!$*ZJ>pH
z0`4<^|JgO}t>32;&Q%C)0-`gZpDs*ZMxkP|dCnhZt`Q1RU6&<+ymJnjt9}viij^X4
zX;KD`cjIpm2Ikq^8SPfIvbSsuYXV0^!i9++G^mal{4%a$jE0o^frrb~y(F%#<U{WH
zJDmI}S@X-r0XCJ<O%5|N;_0*uT>%zBD;qc9tWSgEj<q8hMKWz$lO;QFDR78}1R79S
zE)MCf{4E>$RdU7Tcw<{kuVOKYlEOGihJ+xy&9Iqm%Q{|LODgsUs}P&gIM*c%^}`&p
zTWTN|rRZw2CU5h6WP0k^J{Wo@&0dv?bfy@wIUtF97Yq1UgV=Xq_#<Z`W3G?OJGm*-
z&dMlnrPjm=r#|GX<L+y=<hfPy#nIHciVG`$ZB{|GzSl6sK_a<J2IAgt)n#morH7@<
zNKRXm!WItlXpYI~<||M(yiSC>=%9pC&Vi!nNc*-0f0rQ?Fis+Lqtk|-3%^7+Gkcc{
z(kyMkP<)zc82L{kH4T$kSw}CHAz%`5k$vjD6uI90>J(8npX$|=qn|PsiW4F6puAWW
zcX9zwo==d-j8?Wa?E+-Yr=A_Zst$y6!h`Piu^ts+66>}ghH&CHxo#D#%ZTsiia5Ud
zcyx}}IYc3Ly79<rD)hEZ&mC-GtO?%X4S}kXI$ghjpWy9@%)we@>T5~ggpB+tm6*;}
zDvi~iZku6`_H?gngeuz$Ska;^OzoK(dXE1MT)kqt);V?_NS@TTK#-{)*(vZ3sy6c<
zqZ>0~5!%i&ZWwK*Y)E0bwXh-J19c`wUs5*#V$7(C{%KSn3BXJ*L7)*%7tX9zxZVeS
zlo`$OPy=*U+K&JOOyWF0AohWRPX<a)gmTwsI5kAXQjTaRA(E;HCm?N@GmHM!r`q|3
zGzb!h$E5n14cKbh>(ti9O&^}K^lIiWn5@eUzKp>EwLi;N1U<9^(mHDz?@b51vh=5e
z1v&>mwI<Czn(xqB)}kP?f_2XMU^h5{s`e^R)<9I3N3V>Fi`nk*Li2#i<G+|+vm0GV
z3?GlV4O56$g6Cq6-&Fi6wK(JnA*jf*xpldD!fsG~4C`STPF`n+mJq^!^ZbU>G_^~P
z0hI=~;7D@ZhtLy%ULEj?GAVi9Xm>u+06HtHyoO3v-4^122_1CozR|(@5IgH58w4&4
z<9DN<*E+lwcyp(;{{^Kk*25pbR08ly9q%r2Fmtq8L^b!rg~TP@N;lPTm^U*?hx|=o
z8N)bOMu0C*s@I#H|7dD?^3*Qm={sSxVg2L}qA7z@H|X+hXPmOoC*g<ML4`EEmpioo
zPAgyI9$+&Du9lD2-~Ud6FwQ7Pn-_GWD7Hb35HPvxp~M<{hQ9`*E~734ApUNMWKRyj
zS(|C%mEdyXvR%r-uG`yC;*m(r$EdB01nN1d5J~f=j?1DV@Y=HldyVsUN?R`FK+(Nh
z)d+ppap_VGfSAuoys-eml`0rjf7G!p76Hv)qi-8vC#{0No>CG<K?(RvBFriq?zixQ
zi%6=2=pcRs;26sFR&)PE9rU-E-!RlFRb6geHsKukYq>d=r_$CoVvYbLzWXlfLQ#en
zA6=xOPW#n5TGdNtFiM>lhuul*6FAdmZW4HP{#(x&1mXnNh{sMM);>uuMrw?WiNkU9
zX$LPbaTFra()?vSgz|24dega$cS}CtZ0Kyys)2A`iB7i?>cY}%p>96G80_H<Sv`tl
zR+eF+-I7tl&~K1;^b%TNj7HtJf?>b@o8Gs&UF7WAEBM3gyeQRj-$dstG}KLto;m(z
zd{4CI4|y|P>Z`sa?Uog0_%hiBy0!@Dp|4F+aEyAbM_><vcRX0tF9(8ls)_fDr*CZg
z58VLR)OqSb-Z;_JnH9)lLF+0vVLeY!4mYyF-a~`>w&D5aSJUlfgDP@Uick%tEL|5I
z$*mm8RvRWL!eybC^Gad)%^X-Y+zr5>&rW{VB-O1XNSu-F;@%o-WFvlZ*llkY?hf<?
zDQ;$skul?Y1l2nmPVmGdbL_IWMNx9?Za3~+<^z)A+Yb`h?pUw6Az!<_65pbSd*`}k
zhibn~1W3VN=yw7#ygyVm;0@sz+*xWW`IoQ>U8$^V<+`b+v`##8BXytr7+s###5Dyk
z?<B{VaPAZZttm|d(E<{U*@n4A8nQ*p21s-C#Y9j=07r<c2JznR>MRbNidwz42#qN;
zgj;-qn6wJXeLaRkEBj~?qe%Og=S>-OTg*UZrR|H{!}a3ED|@#c)kpb9)H*n}EPfP{
zRtB+<BnZ++ReJiIfEsXikIy*G+uW?3Q}E4ss<dkhA~+{}`FaxjCjTjIUELq^<aQ`h
zpMa}(AxE{+LTlXueROEw-oG?~o>mq}CJex*KkhP)aJ~l7=?K>k*^OhEnXkT?$(5yC
zKx@a=*~%Uncgz9aiuKRB=fxuZt+Uihka%7UU_U|hCJ#&{d9Q_Ac4=&yl55|7ny_7i
zK0&@@PK>QqXNP02nOrYlotH#F?Dq#9f7*BG0%=+gn_rZcA31%Tt(UiFoA)EBT687G
zQFk!|a6}<BZ?e1}UVzLjfLCo-QTMS$9Dv%}e(9fpia0QhBhH+4Llt%8U6%&^G2krJ
zx6|S9Axig2e~9~D38rNufQsn1Bwv9g0M~kedzf<EG*mSd%po_uQ*22)uynnu_>YYd
zB&pw8tbpS~I}e=d%-{n4Cb6#I>w6_-3UzZ~^7lQF9_O5$2r{1UC^M;hFxhQ7IauO(
zs=KQkED5cQ#3{y;=bJ-!7~y-o+B&~94>3}1sx{Y_YFEW!I?&H@^?x-OoorR*y^1Sb
zUUlk#HllM{fwF@SQ-=Hd&~WW@!{gvPu^nY4zIBNnId`0nG1{1?1xf6WGu<%k7Czq@
zo-TMWeE!@aF11JhfO*2Pf2CuXIKvooz}RVeVn$?{V<~hd1`ULSO(MQan?jy!9`n*w
zsFVXg&P~?G_wc|^*KR~0Ge9yqq7uuE*+XvaiV=x83Yu-w^7bgu!=Ruoe0?c#Ar;Wv
zYBmQeXECcJ>oI`eynDrR6AfvMt|%Q{tV=kjzyp-7#q0p2Dyh?UUL1X<6$gavXAA-o
zSJtF1j5d({?40Ga1R}J8hGR1~)28)EMN}slH7Q2e^N}|(G@lYGhu(huk@BxS=EF7*
z?x|FCD!Ny}I5#+lYHaVnz?c~K!sTP%Dt9pkN5><g?Y&qoEgJA6hj*|cn|UhKb2X|d
zA`f(y{2Sw;vt1*N=ln_&rBFF0GH?tCN<w#!(6-28-0mbI1Wx^UZ(2;0b~1vw91E*K
z1w3Fva4-O1_FyLg`xS^Ay9){-hRX%(VsU8{%!sVovDlGjB-{|$rP$5KfMoVzqWlG;
z@qk&&2r<~GrmQ>Z-gaXF51}Gq9b~d&#p(Y2YXV#*CA*J&KaL`}M$(-fz${ZRBy;t6
zT*rH&nSeXCm>wtxX<Ossd66@f<@br%QDe^Xuur12wHYPZEB|?Fh31RR7LCd=GLJyX
z5Wg=MDq%U%kR~v?eSD}hDw0e3EO};?td1~Zn4*a<Qf8R(a%v;I0Erju^dg%WO!Z43
zYX(hUo+~_pTd{lD9p=seY`1kmm0<v0O)!kg<mA0m^C1$-Q^NQdO1)_)HYtI)?*ggH
zo@-!D4xHpZx*CuP$L3S6uL<T(s~=h~fLX~r%j1NXbd7D=o#G8ODBY}46jSRZVv0;I
z2+SXp@hHgwTj5)$(i}hXK?hhkz@%XB*+Lmsz}aocavSA`%b9gz*dplXCIq~Vl%lkH
zvD7@9$IN+<kfWlRV?Wg*a4hT+&)&w-v%8hUrh<T71HPDpf^E~_Eu{K$^d;81r1cn;
z+0dP`w<iDyH7a96=3cWYapA>Z#zd1hD!0r_Um?o@sAX130>O$Mg)T!6%9i_9o=y2j
z5SR{D3xRQT5D_2i1GS%~+dRiZY3hVk!*hO@Q}c1pG)KB}WbxRX4!3kbq_93)%^V!a
zi%+q&SjnvM#kY}{)${Z<rBZ(a3^YxK-{{%Et~EJ{boZDoRLFRK6&zV(s0K>9#zoHm
zpQg|jOj5#)QoH9Fl4MaTL57Q(CTXFefbqEiW-X`flOoP*E-e@b6Q^<vTW3)vl-M#9
zsj!J^XN`xO&djodTo;uFC$>=MQ+>Db{CDwEN+r3)#Z59sw-QaEy||Dsy!$0xMGWXD
zMsOz%+rFrRzfXY2Hia!i<weTl&~=JQKgz}5gM5y$>T&rx%vo)F>fsU(hXQGyfG->j
z1}_`6@r!d(M+_Cmg3#d$f{7FO8C*|k1T0TGY+Nc}cTO0w*NuIDYtoPD;1$pipn}4_
zk_OxswV{WOjb%1mn&vq{c~$3x95e~?@<4IQ8sx?R^8&*YgT*tMPJXQ1Q84*M+cJBD
z=3r0S-;~p7`h@F+WfV#CZ)hiH^wo`tK-3`Gtq@U!L&LrgPxe8Fvn+OQx5QeIW)wJo
zG4iQkm3sEXs-&n)6zFqOy-1R21tOMx%=9q@M&0Zk5@l~pM4yObMuIg#kqKLurK<Q&
zN3sBv&8msN=9QtCm&1^w%V1`2T68amb7~oI&u74{z<z;eT4oGB%dZqDc$*a{43yB#
zKrmMtWhKRsXZf06@~QLT=)3v2d0unh0YI(dI44i-X-g<267i0V?}6Q2(~NLYCF#^l
z1C30-W`Q-8k)|J9VeR=z`royH6TOsk@G&?4zKLK$x6+*5VO8M@_tR{H5DFwOz%ix<
z-H-|Ul`TGGJg8N2o6f<368lC3{1RKhoEyULQ}mEcIjl1o+Gv)?<8rkF%v>pk)#~g3
z*{v!3j-jjte&O;Gd;68-wVr5wT5U+P0MsRmak20ZxTkz1O#(Yhp@^Nxxv4Zfw~1n1
zTJI%NhV=!VA`NS0=k-ux4SC?#X!w|$j}<J{`+Q>O8QfHmrtqP)sLaq)G#H~tB-~kU
zL*61+P^~{tI2J8kVdY(vAcU7@g}%yVMS1~RxbS>uAU~N0(NpeRqgW8A3DKEs1)ht=
zM5~gC<I*urQ1_!^64p>ow+z7b+>0;hZY#`|4sm)}%Q8lORhaJ%X{Rl=4oiDi&L?W;
zs8sKqI!T>fJIqXQ82+yBxgjVS(rkpJ!{!9%2WdBbg&w~y*}tmX1>5QuY|CjHb9IRQ
zGR22tBY(vIiccb57omkSw1vF|hRw$@p&opYjj>AZa^D0yHl`#iqHQTN`DVDqdO>jV
z3*yP}lTTxFjH}ruK}P;$Dh~*%opZE(<9td{O=Zw_Gc4UCs`Vsuz5x3IgQtFNCJk?+
zjbO8G=YFMKL<J5CySzqpZf1BVY8O8CX-QURgodt^oU63AR4t>x*RtajAV_;HARZOO
zCW8ai(%*NthjaA1A0L5@j$O4rCt-=)rQ@X8ONx_FBK*ZK_n!0HBZ0Dnw)?RRg_@+T
z-jKxsk}bi^|9GDwapVigwAp$4%9_Zg!1=bt?W{OG^&lyt5vu93trcDypB&LE2e)wk
zgO?!v$hC%iFHW0`80@PmG`#@kS>NoQ1CFsWj(nB9CvY%r31VN-cn+aIvv7f^w?(|O
z-2dQR&smrJ5@&VE1nf(o6YRUPY}QT*2!wMQdoVik1-2<;@;yq0EyR+BO+a>Fj$V`_
zPeEK;@An9^+`KDfQq{1#TfBxq+1NP>H3%+M_XQ<L1mrWV(k;v7T9qFTVE-DFpu51-
z)0`Y>j;+i=SXsTk`14!!%R(1!l)5_h@oo(;$u2W=j99rv!8DF0xy9lp9TE$vI96(l
zc^W@J1ELu1bJ1>)i(}Xi5?dqtimH-G2&G1V4+k#j)BG^n$C5<VxXT2c3ckyL1R2qo
z6fk`y7YXV3AwhhmCQm;xp1$>jT^~XWK(NGjZ7=OUe3?@CQ{wbgSSspTr;&yY^+IwZ
z3m1Y{3r=Vn8-bLEy>y$!^&|!<$=NqQwp|;%#W-?91Imh61Ts2nPJ=^QoxFJdCo3lf
znWVy}P80FqbnPzq86m;s`cEU+2%1mOwE98ZvU`;%^Fe7=)r-8CWlsuVu;&zhJsk_G
z*(!4OSIZ>JmYCHfgfk<(nYtM)<^52TaDoiN%D!>)y>MB$Gjv;*wXsEN*=JggNSx1D
zof31h^!<|Im#GNcqegN;b5(tiN)<f)xA5wU!_eq+Vt6KkUPos|7-Eg%&p(wq)9MZ5
z$@;=~bRm}m7HI{1<&Uq}=Sbxeht~0lrUBeh9(a#fvUlgv;Y*0G3;4+-(sOVY#NxK*
z>aPu<BSsy%TQriyRJUB4Mz`*j7qrW;k471q0eBj>dW*+b?gle*G*Bxv3GOmnQ%#@C
z>{e)OGllT89>su<$k1EQR{)vwh<}I)4E{<UJUET%n#d7P(w^n<EBDv^X}4KdVe$B$
zl5;42(EHej@2ph2fU}J~AVcIb)K4b$-S$L2CB07U5}ggD1vFmqQmwF)vK>0K=P=`e
z1b2U`@EAv{!;=^$sBOS%nEtK>Qx#Za{1xxZ1q*v(Mww+~DRi@$HKU6`>UH8Olzckn
z`1c7jQZ6;pdE2Olf{I5HI+Zhfr8Ka+fCh#ED9Z$(KLHoSM>cG^*HXJfqtoI9O-s>d
zH<gXHbgapmGyaIcydl}bO8#U*UFyxFW15z*I5Ppib>(*vQuq5bp<Oh$onW5ikuii~
z1g|;IE%U92558OcjxbsK8?}sp%2c-(*l~pPV{_)>L-E07D{?1uwT7Iu-UfVoM;u4j
zL}rS9UC*G`zcpq%QedPC6<bvy1oz(CGBPabAN$Znh1P@c12oq4RacWEod$Y#DCaUI
zg>>Mwc<f*igTkJsKY_uAoqly3^di_Ep*2|1QpOU4s1J@}Qi6c^d6|xQlXb6}*S6}%
zFP7bStB>Zp+O#e3fyHYZ9Ln)sDkKQHZVvQQ(p`HOZCAx)!o9#xuNyebEB)eL_`cW1
zcK6Zc1CAyiw5rG4)``F7mIt7eKn8IDxrV%j@T-y$SY26fCOt{t!yRo{f4Ol=++HVw
z87<F|`zdc0+D0O1QM~a5q)Bm#_1Zo{*Sp1oTCw5)f;vLQ_wUR$=!@x6RSZa``s}p3
zb;}CCT!SPv(b+xk$?vAsStOLeDRpdPhRy0AqtP8XFQ)26s%tki_F{6*5XuIk`S{?G
zv(atieSCPxt^wC>7l4g(oT^Fd$cCv2LIvHPx)zEHY__-*rmqC~ncU&ADttFM^H62&
zEZXEs|6<HABDu<kUwgv^YCVC#!oNp|R=&<@&f7zbOI1>3g9##rx$LWX9LD%vnP`6L
z{sk)5T>%4qG5MQerqQsQ88~^KMdU386(?4D5qDMu@o%8VkVwYY6AxFeWt&xDGXat4
zNrehfBq2eA#G?kBykE}f!{A^dQ%BV+vnnr3sQ*{Hzyo^&9Hiw|*F-{^4<3y+UnH4#
z#;!*Gq!GB{v%w(+;p3Nz2e9Z;Ri=OU@kgd9;j4D1#UB-*om4@;sPG?)2uZ1j;Uo8S
zr${UjE?#bv<T}s<!N*OA&tMQRCaqyjfcSgo&ym^GT&yX4%{v!rP8h_}JTdXv5LJ4n
z#U%+u^CtcfWSowox76)X&Iy&3*C5psWcDR<N88GAE2bpt8&0xhx1sfu9BFO7C^xUB
z%`F98d_W1rfTWaotS!^qeSPg-<iZ>}wq2VN+B~&$Uxd0NMS3t`&=_2%jcW%U<{tc6
zEL@O^wRCXrRWNkiUbvriq3#nSK2Kibkg!F5pm#}4u$Q2{?uWQ+2&OLj?nbq6v^hdd
z{Bs|zQ4q+pTtc~}k|v}Z`cPhJ5J&K$vV~L#>ybAj&6<}A`A&B9b)VW&Z0!=ZwM~#X
zQrkm9_w{CO;=AJEV@lLd{*tftsh~0{HBhz3#FerpPrfJn+7zJ|(uC-25aVS#aGRgs
zYVjWhH4q(OAcNPwh2irH8R~JgSl&&g=2LJ6gmfp=y{0a2ZhXaFdy+F>-Pm!FIb?&B
z0=79pj(=Rg;wy21gqMhUW(N-2Alyro+{k~nELfiui=YmpeX;w&evRm9Oc3lEf>OF?
z8Af)6(W3_+?K1~J8=b$TaM5~oQeI}Nyzsasl~PUVez5#mAMlaeE2sW#Pbk<sn#!Mt
zamapl{BFEOH1$b#D53G4QGm|uu65LNpYJ<Uu||VgkF}Ftb5HW|i9aMDy@nfQ4la`s
zb3O_g*^HMrQL=5WZg&6_Ot!=cxvUJDnP*CCVYPVpm3p_(@$i1yrdZMb$y}Ox-)0la
znqkMgS?xGWu?N7}{B!q}rvHrD*#(ZiYLEU(6LX(IKS6iDr)hSQ%o2nRO*)i!UxE98
zm)|?(Eed!P{OgAaNEOl1Of4#>vQcoxmGJkhBw1`~p5)nbOqxM0>WnvL?>5&S$vn=E
zqi;}mrp7iPUMBm2o@?+RxWRRp&t%-i7i(CZ4QmD&Ym@{Zr;^!(M9>18SHWy1cK?*G
zaY3h9qOMAQCQr#{yTT;!Y2H_mHFMODYrmr!8VOXuo!Hhihe$&^^@!k$9gTiAMMRur
z%8QY>yE0UslEykpHUprMEFOS0sLr4y&nPa%fII%OXo;VItjF!}yp@r=825cJ-vd&I
z8!j}g;^o6ar|_s;KJ+=c00yY2Yn<-QPu^g|-!8ZDncda*-Gy<2$0cY~i`0)@Nr0Jk
zu|WXsho_FAE5UZ$wYrJwjFL4|WZrLfZdO>I7l|xA2o6e;d^zJCtwBmmU-WORiWFi3
zLNo?EBaQGz4f%mO3U(J4V=di^g{a+Fge(l@0>**bU#S!b$E0Mw2|D`AY{nS)c6p4)
z{ZDLxjGv-BNR?OC^xe6_DK2BsG=D;(M=aG9isz8$TeNcR66W1b<$04`e3SwM1}slh
zJ*iVj%IzH{PS<alW%URSz>mILMLlxi?gyb2BxgRVQLI?g9xsH21DUlquY%82rn(E2
z;ghuU-xQ}xL;*wEVu<2&(BR^$c^TjVePKHfw0#b3CT1{Rsr#s!)--$GB^B-BH^ciT
zZgo%FoKrfKsx%n7TKH0m-Z{%I`@O1trzg8RLX_%W!EVg<us<bp0aCRYvVm`?B&(;Z
z-Nm|2_eCdt5i_8<2)1@HN!n?&Hhfhu^L>buu(BL$h*z0u*_gaGN&@Z_Ga38J?$0Vr
zMNPe$JF-{JD&c!~f-|vEirPDzJTLpK1eD>BKQSbhJ<5OA2g_Lv2izQ7zlSiqdVQ}n
z-PiBr5_v0M)OVWV$dR$4H2Tl8<t|L()c9<fdVN5k<JhWWd{@iSFQ5vum5~4mE{pa<
z8%`Pv<y>IiK)|^Fdi|bedi8wph<x3Z5`6qdfv6viw}Qbek+uWucEKi!=`wkKT3`Jb
zz+2;hKFos|daa@yrbW3&vH6x95kkiJv?qjLNHu}!$>#*w{cG97ER!n*MwZM=BJx()
zx6uTP{XU~v@2FdHu&I5JUb}h<*1Xs1-i(K<`ZbLdBgOXhS4W`v@1pR9V;9}>py|Q_
z=b&7Mf&V3Aep`Yni33eTO{@pTxBgwwYDR|dH!Suwq88S><VXVzc+1T07R9HaPuR}q
zS4<2Ly7ymau!33lyc#e!ghpnL3{EbeJ*t?p>9=t*xvMaANU?S<A=~cC-f+T>rUF3P
zd(9t@pxpWJx%S}#Xn6U?{6xZX8%=DyJ!16FKN)LnMd>!5@(N|fOG|wgP+}q5HDz~D
zIY0kaCdR3D3h0i2bp50PhSsG3WPrrI*ooX+Nf(^C7+?vbvlCoD6C!*BVJ~|2L1}bl
z2hVKs{pJW$Xy<+*q-j39$odMX9^6&^;mPbg&8Wc+`xRtjj^O1iS1;%C`t#}dY0>1S
zP3iFw>qAw9km}Wjh!!3|u_n@KRr4qHSZRaZw*rYq%L5e;_g3$XJ4|5Cn}(CK(Qt|B
z<rF2f6*o^0$^-;QSj9b!T@W@4u3{o$HKXaTH?4rP*(R`fWRsKyT*9-ujk2OhqcWM(
zU%vbk)jA?M!10DOb;2bX{8uGd2x*<{9kEbW7a4n~@(mpOln+6jK0D1Ur~7TnO!q|z
zJBVE)%Pw2OuQTg~D`I{~*VdJdlDok+ru_DPk=t4HVzQvlB7j}xo!ZR;ljVH#;om8o
zY^LLo=ONH>kgeoG5i<^LbuCEzOO)TP4MHpp{HcyzVy0NZN70QdU<oPhFiFmb!AM_t
ztAA&^h`rRsS)+fc+|LlYF0m-x%1)sm$6w-b>-c<fmh1cR0DJ{#Og9sxW$`Q(l@jbk
zRsF2-uMsesKt03Vrc35GEgQ+c4W*0kh?Jqo8V&u*E5jf$va(UR<lHOS1CHz2iz|Jr
z@4K=~0MF1`pK5*&3>d_N4m=n3=efPMW($R!H0xcuTw^;n2J`?GIcRg>M8_iT%f&WC
z^TjnzJAQ^+uep91gH_)?Obql{E0Lus#kH%nU|M*xQ|yTr%ZpTRxxbVB{Daa2#r*b&
z!yD@XvIDsJZL$<n=d#j!8m4v44cF&-Q4``i9AKoi{{S5NEZuL~H^%|MTPF$)uaEHh
zqm=C2?XwCW6b_%e30sN+mSrIdVTfaV*VDKq+Bv|5*1np@dSIBJU9rH~C>)!5e{7U`
zHpiId<Y41*IRt?x7TZNCGT<Qxv8XI{P|P)yk54Vv3_D^sNo=Fis`Xt)f(LW9Ht3bb
z5v*~zC0><f#pQ(gfJ6R`KEGVu)d?POcr@MR87zcMbq^>`XpMQKwoCI*!+y-$r$XSJ
zX`5;@o8s&!YO9A7AOb(+;3l0_%-NLo*0<_b;syID@M^RNyQAobMHtLo-dT=0W4A=U
z#WpIzmS<{8{R_X4Le)egNgk+~c*nHE7WyyY1=|7V?(g#WIczTQC5>gzFYf5U8ey8J
z!2-scrQb@(#^Eo&+o=A({Ib!0GOfPkz#JS_7{n;dP?WZ~lb2gG%7F5E1i8h2V7iKb
zB8Qmhb*g+1Sdk*h3c^>I3CNZd!=`TMvdk5-pq(LDB)<ygQ6Yz+qZywT!@ieZ&4C)*
za~^!Qw=y)JE0(<>x3H40NkQtkRD}jn)V<paG&V5MN4}Fy<jv$murOiJ5C^SJ?TByH
zVe&mSQM^zJa;`)qQj#?U#Pbv=a7|1s_p{)LG|hX$q3u97-g(5HmsBEHD?;0Fu(d8E
zs;m8%2<+Yy{`b17oTsBdFD$7%FmjnP^&7{<-G+*dBy8x(BEA+Um_{!Ax1j;~R5C?Q
z*!}5qpmlD_c8~%r-S=Ry2x1){m1T^v1Qt8;rHAi*hQS<u?It~92;*vE3{0AQ3pI3r
zQ10JCoRK7L+|s2s$b$7V1<vhx6S)u<?0QlD`kU7B$P(xnk$PVdC;qth5?It06@Ge6
zHX|{LGj3dg;bk%H@f1u*m?MIjQ3NQnjamy|t+=J{xtd3C3|Faa=Z~46Y)=P@a@;)p
z{OXS=(eppdVJKhyFf{BpO75;!p-8(>uouY6Vo+SErK7rf4S(=q60Kkm-&tzkKJwj3
zoW<R5Q5bmpw7##>hF~4G9qNZLLv-D<TJHU^v3YT}qc>AT4(UhX-*VzwpuFU$)J21H
z63d{)Dc?-gVdCxXK=#antE=URGmm;<>2})GF`4;@F8&mm86@v>TYzb}j?aJ0gn{lx
zzV1*af!bWN{=NChb!i(zh;BkV{Uwn|y35dOwKI~!chOlLU`cwylc8q3L*hpp4dxo1
za&V3bKrvHD=e;&)RRFjAnMbYA+5uJRVT3+3Nm2K~MeKdRUSrQpxp^hlHGx1LrH#_E
z?3i6Jx@QC8+{5Bq2Lp2VuW@G=qLr$p8YK67$to=K^BAVfM7eFsys#D(Y)8NxbXoJG
zYfzisP4f&C60mVF$&o+r75*%FxBMx-a+o}y+_KEktgPi=<c$FOx6$<k+Q*Ph7eFUU
z4jeX2sulGIq;dm#?UihB@;l;Jj`g)r44f*tWpJo>k~X(3qOZ_!hIb^EmGAe$wXUr^
zokw!U{Vtv%-o0A~=fjiq(S3GLEHaiRc|hq=P!6A)TD%r}+5K)(whe72Sr6$C@wJ>{
zTjO+~d-Xj+9h+dWW{&=EW8={##rwf9REB>ium(JWl7;!M|G~-`98qwA-IARUzh&-k
z2j80dmC2Nt_2}`SzEmR<l5dc&Mkg=9x15-1;oyS1nB{Up%(njL&x1<Ui2-+f!pF{V
zzl(trW~#$msit-Vc2}_X6f`M-I=@yJhIHsD#)`F9Q&m5Vp0L>QzfMQ3%okc7Hd4(a
zc5G{A43a&WG_h+idL|RbG2plxOp{e;rX#>lyV~Ptc$#@rL8)q2JKR$`4RW_XN>(^}
zUjXA?TUvUj-0}><mJW|3>~P~81f>{VJ6+TO{w&N4Sc!W42JXq9>nn>2vbrj$n4tb#
zwX#-rEw2_c`uUVdWTxEn5LpUIn5A>qeCsvOt{xm*!l|G<se<%$6nH@~hx~K7r7h%d
z0ic(A>;6}!IwDBW15=GX$H3zQTY4-t&jwx{MN2D;dX#ngtq*|0yk=X*ETCps?2M|2
zI&MW=d;|~(muDk<{#t?-xdpQigTjxba_iK?TDaMkx%mo^H2=z3Nv8!Ecz6;-F<gi*
zE>Lsi09)SAU`N&FR<j&^PQ{r_1RhUnx9patum(*b^~&QY7y7|h8Q()_6)FWim#nxH
zV)X9%b$k68AlWLl9U93Lid@@+=|9nh&Q4e{TM#}h6Zj7Xxn*@}<)25g1}wtOLCFfx
z0~14phsK<zF$+p^=uA^%(Dpi<Wl8<>XMVI_)Q$>ONeF1cOANS8Y6>lg6o6<fN~p~Z
zBh`XyiOmlp*mZ)vrBZV7L*XzxElCW=#|~Up-CV`OP=XD_7ugWN(x?G75%5;HU}s@~
zcFJQ&1Z4CZ@ZQ(7=t(Ifrx>bT2X>LWq^NcAx#r1=h$ABz<z~vb^0{FsS9&`iN1kJ%
z-xeo2vtTje^I;Anp5$S4C&mw+c?`<H(j~%e(LBk;-JtTXnD_WPFVR6D$gWP^0A9Il
zcWK)-h;REw_YdJr?yl*5;ax>JEN+bB`YCmAc#%($knIc@W!Wdr(XkVkK^$d6C^7k}
z#qjloZl`SAe6p#L!{AwV!h;=NHV&XS$&9b_y9zfewG{rYt)?j}%IClP>yIe9i;pq@
zdYO4{Ny2Ca6vSb}kQfQTXh;Cmtt_*G`Y6})WCBK|4MA2G?~W*)Kr*f!=0S}mxkCF+
zXOnS&v)yGG@U*fs&-DdV#3cGP!Ml19Zl~me(Y7T~YiK+Mj|$`z7%{LjsW0<}aJS?h
zBW}-bnuW7=Fkh(!<gb~(+~e~IP4u<0RlwGE^UxCAN4=>UL9V``@9v%mOwEh;8`eX@
zB?F-ss1zIjE<<%i5)ERIOA~ra(JD$g|C2W*t;8%j%tqY8KICk()1H!}A)J{37CqE>
zYN8J-1$}N(<!y}f1CZ!F<A~=Xok=ZE!BiYrYn;%i?b{xXw}5hYN{%kxZoa>-BxHt0
zG%Ydyy5bUGc{Q?slrS^PN;6hxwVpoi;RvLgioZ(U3F&FYRQJQlmZXQt$JRsyIrz!Q
z6k~!SSZ6pk*r?k`5-np9o@<Ej7XOLz%;mMm-&O<{p%ZJ&(FD7}k0J<no1Ax2U1HYa
zj;DK1n83(2bL@ov#)r-KNlBIdLSa;l0-m&;Bs9}uM=`u4=WTlah*=HR`09bVCClu2
zNyf96;0KPO5ptK)GdT7p7nly7Uc10k;Q=FoH=!B$TfKY_Di4@PF^0)o^S7Ph@|8TJ
z5{roEiG8SuIy#s<dN?F-LBl5~o}V23MotcOTXlXv+l`!NsE|<)-&Gf!DD~-%Ce6nM
zj`utj4#}^<+Z;=rUfZd*V#=}INRjfuPs$C9JPDX!)iUt4srNdQj}4e8`^NQ-N70WD
z8e@ep=R2p5KF@;&`-~)7>>%vQ*6Uf9aemT|O~wA<%3=dCm^aSJ#6#a7mM9)h>395i
zbYq2$QSL|N2Q??m=~wE1QDwwRPmi1l{9s?86FRwD3HVLwAD$JohtE3^<AtV3gKy*v
z5tSjR9wG+ch24>!0fIj0nwC0|I+|9aU{=kCODf9i&rU}7*r76Y2|GIIen&(4!6;w(
zQ2WONwz0TH;Fd;KOi84=X*+-L6srZU$E{y}`zY5i15a}Q#M26;(aFtxky%kSS{4I#
zo-7QsPw{baSKE?*h)5Sc#v++zU^rC6g%V^VAfT(*W7n%zDG3Nd1cO!}=fSpH8*tUJ
z{5BH6VkGWP;8w0Q&!WXL7*%)J;Mz)8O4B}5^x#Z$L*pG-j^i5g`IYf>SNRZJ8>s5z
z5a@vg-m2k>vd>B?AaTY8Bd9n?q+dsdveO-Yw=)vE3s7H@J=k{7-~myXRZy7<*9HFB
z?28OtL#@m0-Tj@cTrTX%9wLyODkPP?Pr{VvneiB2=y(!#aK2J@*}UVt_UA5YF<gm@
zQV0!N=Ufq){VB?ls=jur`CwJ}i}jIiJuLK`D3bUE?9_R5QL|6zgO3GoDY?YEF4D&5
zgDVBLO>|pHMvdP|GYWVx$^TFx8OVlb$Ygiv=)mKio#QL@QKk7#raaMrNu+>|qhU@9
z>Z)boOmSX%-rAq}G961@GeyBysBUi;%YvmP1uumY$!e1fe~;tof;H1Ho@Q0WQK-2v
zYDGJtg^=E1zX95%+sEXZ+^C15`T0%({+S3^XMxQVx|*9(SN7vTZBQ&^y}PP-;Fx4q
z*~R|RbB_DLkl0LcTg#@-rPKJQI=j~B9;9>h9^T@k+*|CQT&x;^UgZwpOM{xc@ADqu
zJlg(TSj(3-8d1ht(UqCOh}(*Y!tY<~K-Wddg2`Ff;fJ<L=t8^EAoSWLrY{Sg#du3w
z3Sp(Ugas*V4GP!6X^L)i3>u|C9z-RbmyNM$<0p*yGrz`ERgAb>q35ogp<QnbmplQ~
z<S<@J+WcKxg$jy&>MJ4~W#n<$4S`DY+Mk&b;dvSCbJou(N<#`2pa8_EAg`Pc=klgf
z8t%W0u(BSL*d<;`0EVf-F@!&j$H1mwpZj#;y15eM6%C*COhk*>BojnM?!;=as$%MA
z9bLZABL-3Q6N=lNT(RkZzdN;#PE6}OTZ9eoQD~AaW8@w!+Guk+LzhTrwlyH0`?)S~
z)?ChibVR{;`)m3*!wNH~pDYZpaUPpVY7Y*oY%RfDe$tT!*>)>Ws%*<w4#8buFM{Ki
zEG0x&{p9~DbKe_eSURV%09_Qc9V}>^(Kdp%r9|Bp!LTSf*uVf4=f0L^Pdk{u+JLVI
zt=G2(0D_{4u;68SWE5pp`BCZ{gwfV70FxPCM|`gr?-_YtY@XNML)qJ(<BRO!4ODWY
z7Bb!>9JWS(B~I8ry_jov6}q5@^@(L|{f*>mHkp*ISGbdRzvy8pNq%sYRNFa@E==>b
z6D=CalN1yTGF?|t7;zZza6P_5<Y^9Bh+30V^o<~Gf6%O890}?)H0u2t)d}-I?A=qB
zV9}N(;IQq84BNJC+qUft+qP}nwr$%sI>)H4#~RfS{doVx-fN#T*Eh?e3kORt=)Mti
zS|{1pOvBREBQS`-1oZTK#<94~0gKc?WlAG#U)mf-+fX)pZZ&uY9&ksb1c^$?qHpVi
zyBBAh;~v0CH%5cfwSETncL9CZhXhY-7T}&ZIA)k@yaJsYMPYLvIr6?PQgSk>7Gozl
zX3+gY7QWV-r1<Yb*6!0AYK(RI`tF5CPKc_>2^3H@$_f6Ot~)q}W_2O@K+2a+5@VT<
z*Q$bVE9A97m=a4fV~#dY^k@Lmos9mwDhR7is_$bba^O7751xwJ{dyt?it=1Zf*tEY
z+csQACY1(0>(l|nUg~zywO!Bz3=nT=^NwTIzTANe5i{uN%0CF881-mxPqsqLdtxK_
z?N87|o*fd>2Bylk0w#M!s+Lcjl>5O=NbkAW^gV-YI`Zt(Te2!>h?_zv5D~_T@#i0f
zw~q`4S`toMF~+xdmt)Zlmu&hm7yww`cn<k=kGUDlEdG6`LuwYpqk1W4(I&B54Lg7a
z*Vtk0(5)yeQU5_qv}dBTQ3OeGinNn=7w^9tND+zM(1*LO&rot7bAgzdp*7&&{?#K6
zwurt<2V!Fi6|ej7we16j@n#AM<V)yh%x~SmZ&&gN?{p{Ee5>!hMy+adl$KtsMvpfz
zH>X69E#yPW@6-1GD#y;=2y1%F^SHAN(3g!1s1pD~V4jPc^-m+~%=EojYLaC(4XeYe
zln(6OPaBvH9N$~T#3`v+;7p9xi*hz3+P8oTO@)h`s6_7H14NRxTZ>}#miukf0tghK
z@$*?%8ek@*5IIcv9r64Fyrthtg&%TR!x5oC8MPay*nK(HVZrLXRKORTG1iCT;B#^x
zn(|BX{8d3Z<0D_8O?YB=>W55F?kMZ_WS)ifBNzDo$OvZ2-^KWM?C&+da32EWs2zdt
z+$xC!T(fQ8b{<&_b~6_0$>d*DW@%ZG7Zno9)>>+|ukUnUE^$w-iQsshx`1;-xKl<)
zQOc4A-b@hNxWpVWcbyrcPa4h0b?D<baoDl1xr)G^Kn&$PCB^78_@L-VK`!%|v^Amr
z6K6d6h;npg6<yG~s-l9a;IfF)YO<#oOy4D}r{~#DSAKA~rfKX9pZnFzd`N-zTykDS
zi>b}H6JUtFQ0=V8e$D3@W1ndPbf!6=`aQtYMSj-f$+KH(j~d|MAfg{hQ!~{ka7&c1
zj~xmwHGoqo$UEEG83un5N)c!J94JkM6$xbi48fR2EhMPhZ>z)av`x;_mf9apKvW=q
z*W72Jiwk89un^35ED;vLWdxTecI(%E)?uD~J6~BiiC0WPW2J;YiN`FmngnZAGBfk5
zzZ`_y<A!R<KP6?eH&9EVJVb!Rzmz&2Mtb9NO;n3?NMJ!vP7s_^K6;g`9iHC$(z#Hc
zx8kg5woDYA>{XfA0vPE})4z;s#_xTl6`zD&!EjV4n>VIh^_2}@<=~l$3X33+M4*2-
zKbw4-d$u~&En&=~yyF*o@$pS4X-ulDTmrz~Gb_CKUV`|jj#7wST9+rZYw6VM3q6el
zChYcJOWyD743F+C;dFN4Fzm#j{HCE#q1u1LlYSbzXki^DsvUQ`_RW8_6Ym#Q1qB;V
zId7CA>`mUeQ&egBlhAeWFxTOiVnv1o)3#il__6o@=r=>+Du*xJlAb&(WYrbyPGdt-
z#LNE;I;M}<sMbGzx5YlK><(TQcy0>Y_<^aP=nZnySzoQhs9x89i#Fw{H#dM*D+GT=
zp1nvROv0ZobV>ov4sG1f`XDE8e&ypc4KCbY=5R}~C8z{>FG{cNEWE??Kj}Q#B-#1Z
z-;#gV7PARzf^KdxgL#BIF#7TPza9c|2{6b129BH%1lOYqOSXMMGSl@KrvXLyIhk?~
zbrKy1a%*qY&oDe>E{jxG6jgoEeX1<C$O@(PR{$7AZbnW#UkC1*)|?NoY53Yv3Rhk=
zyoUA%_7Dm8+oQ|&-(FEDSCsZ`3$*DJWK_&KOcAB;&rdG1GSni7zis}6D*s?*LPy^7
zH2@!>AQ!Oap-lHxc^vze>&s1LQpoU0g;K=7`Xb%LJIH90<U>!{RO)zWSz!^%TBr07
zoSWvP#~{a$Haobe(cx;VvI#HGX>9TXc?5DNGV{sSpe(YNCU6-}kAqrwJAAfry{G}G
zk^lkv^vgK>ZK$h==8iF!Eem@OCpj^NuF^yKa5AVd`9Uh9Evy{^iuat)N&gp`&GPVQ
z*0UDvt!7dE_@WAeD}WNmD=<1}HRTZ!i}u89<v`sbxctLgQ@-e{r`*UobC>i5)-2j$
z@K#H|5S%&^n%l<n?j8|RZ3+!o8RoF)L=7@vmKIDMEGruIQj{nO(C%i@Brc;lO<KPD
zgNkHc_pkn#<OnE}(`6aK7-1=1Zhvxin^*1!+-sHF#ldR?GhHCrxYW~V5_U%PwrILG
zlS!Lm1}vXEIp5uWd1(H(SZCVLKZR!rau9^>hEOXwfbZ4vhggF3T1UKwu*nUh5xD8k
zU~h4D80MkcT9LL!egV%zr)cSeo9b)VnmV#dcQ1jul}<^(?VH<^6=Bkixy0{Cc_(O+
zoll_XriLerm#ejR+i8@qaSdm7%9YmsMk<b6FZowG4(#xncqAHT&0@z^Pc)9k@m*1n
zWoZAJlc!V_ZLpR)A2|C`&q5o=NHz;oaEp53Q%+dyUroZ7D;=Ko5D-`WJ(j^X3LgPC
zQ=$;HWMU~wj8mD80^i0Qq>})*r3oF|U?FD};W~*eSQ^6AU`%;#fb7<|<)~L8yyX<D
znEct*fo)7dEzRl0<|oGURG2ub&^j@YCYv=AC5vf`M~U7|#<UR`27OKV*Ppu`vlC8~
z=Sx%_x?{(Li^$AqemSF{0o+{lrx%xA$u<Z>NK_}wS8W->#AP^)Kas-?(Esg|!sURR
z{|~AN69M@8tCffdP?)Oi#B`jF*WekgW}FqHmA<<XdgrxlR1NYn`|#yj=5T;D{P+<#
zjw^e4`a_-<?zz#rBll00^<8Q(`ZBQQ{BD`MmIx4W2g3jiz9&SjDo-PfH2vQsg{q6;
zYwOrVNfX2O_WJ$1iNxDFGL!2UDR>y^@wtcL%qMUvOKmPW6#tRT5@iU-3mVvkUOfH0
z!&2pbho%Gr{{tVU{-NnA%iYB+rU@UQau4IK=-rPtfLPT|(K2@oI?Bn=C-*?60baKP
z45z2k-q>f`A){^_Gqf3~c5BfB1B68;&z11W;4us?XyL8;^sG2GXu;8C<13Byfvv^E
z!qsdM#A)-j&R83&4GJh_L!f_K=~<yrn{9OfGKz4KV#MFwl_y0mc8T-bjU)&VN!7l5
znrkVzc(H1I>2#M%lwZx%eyxb~07)jRVeitNQ}~4;^nNf3@p#w;X)_>sPhsB#$>@9x
z3YxuS1nico%FvmZzt*phZ&tH!mlcqGkU0Z0FAO?B87znmbP<67Lw2wB`~DcOTm*9m
zpp(#7#PzT3oPnE93tx@T@@`@X5?s(wIJgLzwj-N;i-|?`{1iHc6^o{n5YJ6IByhr9
z{x}#KW}4%)wK@t4Z9#ZO%7LhO*{k4y>T;3Kzm;C8q#U*~rDdq1PjoAcGI|KuKQ&@K
zm`pmS6e)u<Cz)x6uwi@Xu3hw2jkQK!5#fHq`}(%$Z8zG=0P3OR7z(7C5Il&B8@#%`
z#*>Pp?=)7<Cb#KXM#6o6C}^BI&?mV(WJNJ%OPRU6!zTg<_|}1{l>^I}!?`CjX(Ws4
z%F%1OB<i>3$gt60<VWVVU-sIFvq-ApiAwhKqEf#6YgG3NQ?%HbN6E|%p>kvC$&~f<
zGc;H*rNfIshHcnh8uNd_5a&*=!mr-3r9<46W#ug6JO?g9N+(haIp=5pmf<ZU>h`Kl
z#h*5u5|m;P%WuR3-7<5Eay&po0}$xKQ+kKMNV-8M^A-=hZcnGuEf%>I`mDO^ySt+A
zpOj?0K`jUCQ=%;8WcgQ`MiYuu97Mq=dx<uVic)b2U^KN31JT%0<MmVFaRSE7KjMnY
zAhx4@SXg>6M2#&_Z1537yeTU)-1S1EdRrK9#Rau3_gKu5o3MKKVMQ+Emi9Hs5aAFA
zpgg1MK7G~)5Zd1a7LJd|-23PA*ubO+;j*(!!g^OuY?O5+FE&yvCLjzt4$(Vqv%X3J
z4@UNjYVx{NS7tZXYbv7St#PjWnWE+_#b3v<BUs9-ikm%{(`M{2g%j<G{>X`m2bqc$
zbmuJgKEQ_-hT?m-HhleiB}?X|Po@f!&KbG+vAGG6>Z<O%K)qe#3yoF-ddb$c3O0U^
z_(6gsUUbbPx;jX%8n6>AjGZAx6fV~wdPwlaNt(dHul9kB-1<|`wftkTcK&)v<OAoq
zhBkY~Eq2uiX=S)vOi&2=(!*gXsJK}+dDji*1&V(x`vxzd71%XbQ3LHrex9CDCq4=h
zG<1&j_BSwVwt9k?r7|0)1v*DxIJdMf&R~Y4?#Z49!m)^szPoZMp$?$Ar}&vEbH$h@
zU=6N=F}hR1{9l@H@D#jvUfP%OflJ&d|D~ffTYP){HBiG#kKWPl_<S(vzfV2fMquy%
zZFcw%R`&k|E8}`<DsZTV361vVMCRVE1Y&iIJ7kCcDkACzYOta`iGTQ)zUmPI?3+^J
zTXy2#tS4`>#Xr<iA;ZqBui-YG_U5_RdXmgxBPeJo!iS;;K)FAzG#wKVCG~VQwa^w)
z*spCIDpf{;a@8(8wloC)Bn*7b+UvFzkgGYq&wGZs8)}3zaKQ^*gu*JBk@t=?gRmRI
zH5yph9N1%FVNz`b<r!^xiK4^3@yv-K^ooT@36}0^n&gVRqK4A^fxf%tduuocgLus}
zRDBL7yhRc}Va9v^L+VMjlBM00w_)|h51kSd0&A_nCC8=lto%$L@3)Cv`UZg8_L^s7
zayoASe5EgGwU<z)8d8}^2<t9@7?Vd`a?{OjQo!D1f5_z%0ou4*>oLim?$bZrd$xH9
zRVi0o)>&|rxIPB5*Bkxj^y>_+oofsn7z)ASd@qD~%K^1hv>m@i!qyZR^zVmyDfpN@
zS=|Mdu8xm_2YfZmKtzbriBF2j5nRz<`-n1r;pjhseDT{$UxMXp78ZxfjB>fIbwdma
zS{&^}@^C0RMX;$*WV_r&Gm{sk@p}NY$4wHAOoI~aRGv5rbS7!1ok7OOET%?~6Ao~9
zuIDS>-7)egyf-x4ORAUjP>_OH#UOw}^7zY{LE{azfo1>})YcQGx)^faUAMx^6U7*U
zOnV$Wq|Qp0e)aXYJz!4X_S-g5dSh+({Qot??_=9QS^N*<$A3_>|Db07LCyYyn*9eg
z`wwdN|B9O7gCavsyTmJO+vve5Pd1XVGYTZd!^)!mz@5|>rrpLM{fwg#6`TIDthZ4|
zuEx$+=Q*ajKV$kc7cW#Uk*mn$PCyJ}Zgtrv1)$?&O)&q;I`6GgAgF~^0Cl(VhEo<l
zjEzxnRGzt^u~FTy3!v^QBZZg)=zXPabNIa3ajR^>141={k0FDPhXb!J?fI^ygVO5^
zh+b|<C&PI{E2d~DSv`!{oQHf;kx14CJ%QLN{;K3Kkaj(&Krgiuv!Dc$JbMJ;oR5Ut
zmYI|Y+-ad7sK#hl+;?$=u$p+H*t$wH)0Z~P<+IEFvNC}yL_IKz7De5BJf@`eazp_Y
zCHFcy*d>U@m^zl<NUZeiq#@%9$x(Pqwq_#=6Ehg{HzAcagJfHX7*#V;X-iM2wjR86
zq|7<{k04HPli^&BQpw_4(F5sBK&uCuU&4D`YX}B*toLD}*TF(}@PghmnE<JcX$`7s
z%T?(h`;ZLTW=neilVLT|6^bGw^O;(panE%%K*!;S>?!6ve;GUaS(2y&sjT;w`(rP*
z#G6%NJmiSB{PFtx_kY~SxL-!O;EdI;Lo5WJH689gmSSkKL7wtpJPbv%@vCL>cMx&R
z-Ip|iV=|uHiOpD(J9qqjGQ{f9ddk&!6xmv!)_?FnP~YH~BI-UWX@{_{JfB$8LQ3L}
zGw;p65g@MM1?sg}%Y(<$Z7-O9DJB)0oen63<|EWVASoN8nip=z#JWJLZue`!YXEUY
z!u(K5*JjqC5M_k!MDx+J2P=y87;`ODXqU^Mr|SV$(AdWxoBvR16D!|lS-#6IMBcOS
zeM>C4ejNN`Y*wcmWiEcvAp4Gk$sq1xc%Nl9GOQ2##S>5qfN62&V@|h=g&8pGzbiAL
zVAFp^ibwPXjTBtI>O?Qzm01r(AYHRVO8H6&!<K5aisvT7&!iY+a&TX~udz-aB@9a{
z!<5*eZmhc?ly_PBNN?UiiFuk2yVy0lCnL`Mgig}S`|Jd@XgL}MI(wnb-4=?m{%lj<
zTQPsOtg}G5!gC0q%Jw3S=|9@FJ5}VZvY1!T2zpkwUfR0{tYoxkG&Mj^LJPQx7bCeG
z<`rOvopE_?@@u9WNcp{PzdqfaTX~80B?A@cBBc{@?0#&3g%66=&S~X*G4^}>adBeA
zu%doPFB{p0=ikb25GlWqdekL7_nShj*3kudxd#DQ-A(28vz%InQ5sNYFkEzsx$aK9
zf4p1sK}fiEUsAXl<(J<$@1)_chQyChn491It?Tmkblo$+N=oV3s(`1CRGY)rCjA1B
zx5q#u(GALFU)$r2&iy7sNee>VaQ~!0S-<nYzC2!5+(zX#mH2A8uvYuCbm$9T#~Cc$
z+3sVkKeU)TJGEUARH3|_oq5<!NP#c>UsLBveYG(6e@&hA@#GorA4T!8olaGc{)y(U
z;E^GM3htAjzUoF5)Gr+}g%|1ZkwO-Qx8bNA$@wTe3BxTR1%haCcs2HleI|o^{t@m=
z(hG2xdqlK0!?mT;iKE;db+Bb#7uMC>KbU!0WhviQsNgs}eA??j;WBbG+bExaxq$ME
zdI?y9qRJ}=vD$@9m~}0EWUxg<^pNiG`*8eMSMHUU*0-&d2Xa%%aI27l&c#IO4I~p3
zFpQ@*%kYHCJ&9Q$)(Swjn%M@4*b?4NeRa!5SY@w!dSD~S&Lh_bl-o@+f*3@xP@-nL
zpRP+t%JSSSZ(?;eCaXV?S1(dYkJZbF`QY{|f-XXIj=bdJRkufq`<pTwIIR9{4399W
zTjq=6Y~ILQ1|n*{NGH4KvJ?^^dr+=3gfA`f!G!)chTO{nbxgmP-^hAh5i`(ygmb%c
zCaaerAScyi(SbQ|*!2c$f)HAXxT;z(r8_n`m5+QI^<1yXZdOZnb!GmvaYsGVUuK7m
zyb($FMHQh@1yn|8!6Sm9G352sM-)J(`y;;6i9u8)*d@Xh^dxt$_x52{Xd8R!XOA7~
zNXf9gDj%ld2-)iye?e%)P{yMh)(k^*zu91`+9k@xIJ0?i&`BvSGG9L849*)6k}H3K
zs8G1-tRLo`p>o-+&d@hNOpJ&ObQ`4l4W2Nq`Vn3l%RCu4kY#VxNx^9e!ogZtY~pnW
zeHeZbI^O_6-mLd;@g?Z0J`Olmaj=lK(Q!8Vj{@cKk1QmWe}+iRJDP}I7^8SwSCN4M
z5!T;&B-2qpHl~wYqk<Q~(FcW}m&Ll6PLfU7rx+2qkdxEx=2qBRR*fmFO8u^paI}wU
zqG+`gHq2hf%^*m~9-3)iMK5U*X9eU6Rs96YXyT}M7X!T)_9!AcMmbRfF?6@?nHKd&
zmzuW+4o}>7z3TZlHh@QZ^4u0oM){;HzhI*_s%okLhj5YM=9cb=Un<A0cG+*4x?V<t
z_zLc{Io#lM2_&_Fz-~Le#jAM`HGRZbQHdW^7hvJI3(kv#gQ5)3;yOAYMJ96>j4*7!
zxn=1p&$Co4^!=UDSD6lxc=XdaLycQ-Yv>Ty9|uU-1L9IKtAU~t*>&h2)_v-Z$&xu{
z&Cv(J{3pq0bJ++uK2s~<PnZpcHjj~Pbf-h~qXIpFa99RwDr&#Nkah~i&}Y(n{OWa?
zPj#hJ@mJ2nV7@Y9DgyiA#`;OW!e3($M1-S5V%1sZAtI<(8;}B~$#NUUPzDDLP6t(M
zWyOe+6x%Nt4SDg_;Jp;SHabovDGc&Ln^KfwqZKS;6^Z@QFZzO+HT<G_RX*06vg5eW
zjbBe2L|>ses!7xxBW@>Gg1F}%n*gpioya#SUIHv1F3=U++(>oNOaS_ZrBO~~H#FZ8
zELluMoop#7*bF_PqZF*&$diaTFGme3^-7kAJK3@uNj)(DVDUDt%#C%qs1d;*8b#qx
zU|+jYY8UOvA^twaMP+#VgvSqPQ#c>bq=4$ex})yZ$UB4iZZ&>?mq3>Ofs1qHWyZv8
z=7Dk)OvO|!+`EET+>k?W$1~pgtx21iIdQ$GKZ+&dmT5HkeWs>^YP|FNx1)N;8&$Pv
zg3rv$NT))xv~M>SE5E5$Jd<EZBcD-;3y!eqWSRUk6O1U2O4WJa$*d^*NLz8#pIfYI
z`qN9db!Z>DJUWShZ3ui={qh!K_*=4FB|5Wo&HmC6c<=c9c2E5`*Q|?@rcBaYNwlqB
zb`bXiv!j--7H0+G{FmviWrTCL+!WbPkGm7Tl8lI1ZQfPgA#~^&z|cHhoAG82-jHU;
zZ5MOZFdwjU`u-U1883mEAJ{0*F4N8u8R?)dZ65z`3*<`)5bH*w+n18Yrm)Pyi&oID
zXAJ-Z(#72yZhVGg?)OJyx|;uAdCRubK`quj{;`?6u;=oSevQZYjl8Oc&nR`}yz7Vz
zc(c)YmK+tt3bKXecMF^xzFUp*ckqiuP7S2KA-UXOOo-E$IQ$<mConAn&Bp4!{UHAM
z?m${4rSS?7Caro4Wc){IJ*Q|#x@Ke4N8rb=Yg!t78NXn{DA$q&ykr}vzF=@k)|}Ke
zpH?>NnLvS$A*fYxZ;FR)(##Rbp&k%GrUur<M#=6wLV5`FCUlI$y|1g+KG9@vy0te4
z^2<^UbrooGg#pHlWMox8THDC!u-Epvi;jgmDC=`QStwA%my6}VHvp&|J~iRu8JNy*
zQUv<NLU)^8U5>Kr$3hF@#W80s$GG&1FL;e#>T43lCGYQg!U&>mWf{%F3Hcq^1oWcX
z%LSQtcq*<GZU)Z^=m7Uw;HGvT_)Idhv4N5IA|gx`7xoTcgzZ2Pr$lx^s3tf^wx$GH
zZL+n`?Q`yJaw_CI%ocv@=jv_sdzm~|f9&Ur<d%h6!{z3K(gCf(#ls$Z%iSoI6Jc?~
zvdMC?*a@BCe8Q1J+~Hq1H(u2Z=BX|M!adGs0D^~LMob0kq0B_^3*jme*D6IFU=rKS
zc5Z@YE@Ai)<oN1DvFN`9QGOpxN6jlRLxK;XAFciJ07gp!%0m{~mP?SWw|}-q<XTj@
zbSHXe8xM>miqBLN1$?gNjLtQ&)u*DH660DXncgq9Bg_q#gPo6g36zOkk_0Yi0GEMY
z9e+MTuY!sj>4Nw0MCQl*?aaAH3`Smg{*nW7f8-Vju``O41t{smlZTdc`K2M3Y$2l(
z&12a+=1G}ObufGVuq*?Un_&?}@<=^;hij%Y3ywDa{+W;7wGc3j2I^{J^H-HIztN-1
z{c{+LQwvUhOe&UeKot*2$6(Mh67{X?WlHcD15WcPY`;e*fSq%A!yjf`djmtU9Mu3}
zwAnUyssGfR_5#vD&$ld`!@E~-`0>Ynkjy(_VPmYq4&M=2s>IpNuxmu!WtJB7Yibv2
zDjiXTiT=T%WOjkDbaUwI12KH{p%<$r<vWTRXfkqyPl`WA;avz;Yi5dvlMp~GPqdgu
z8_cZYv3$PGm^U$z!s3ES8{hs&E{)?M*dPin2eZ~|i<Of1vTm5S-gZmsaq~*;Z5DPI
zS&Mp4gks;Jy(=Vwn3ZnGua`ANx}al{Qbv(xT6hRj5&`3Keo&Jt5ha4eP2H$!rbsc@
z86K}r<ZsL|U=TJ@6{RgMPI94y1LDkZ0rkTAx#n)Sy}(E&Y{GR2K|*gcg5>KtR2PA|
z*F)~}Q|8w~fl^feH-mM_-Nrc+`P2D2p~mc!6+2C=ncc_%<WQd}NsaY9qEo#P`GbY=
z3%TYJc*j&?dJ@Rl<8JuO8*+f-L$eGq{<-qRy_f^*-p|q)fMr6@dmqcdH|+(nzMSD}
z2zqoe-x|5c-*0T=zTdH7>?U;4e+!qP9lm?Y;X9l{;Y@J1xP$WZn~`W5M~o|IhqukI
z6w&?=4Cv#ScUE#Kvx1Wb!7sglx%ym!WwJ0KqJQqoTGjS{l=4s;dXe}+>f$dRpIoT-
zj?5ZMUP=eBk)P2Hs__@@kC3|6h;6$&?Wm;**1K^!m%G?)!L$##PPwvY=A5HJR~d~E
zfm~kLL(xO`N!Ylh`%-7N2tzmo$ozXX1h#>-g1h>&4x`(5z5t`Z5jK9d+KApnKq<Bl
zTTr{r?~DSLb6OBEkGbq*5zy(R1rg9hg*to#!QZ~v#vNU-okC5<MLYq&5N&Hb$1(Li
zfymm~#rc+0awWE~yK6DkslO$`4Vv*3c?{E@JMd@?cqj`hm6Yf5s&Y2PUI_K`DtZen
zG+Q<h@T+Ob^bhA&g(WYlIFi%1rL<B{m*FG*SXojiPH{HjI@a7ePpLDfu8;iHOXWFI
zis<qMSVEL_6L>a`A#_QRdMJleIMY)X$(e_ZD+Ub%xWt<iRMpUO%3|%Y+Z3;?VR0Og
zKvMN<42g1P5Uy*>vK$l(3+}TJWsyLgxl17z7O=YR5?At5imoOQ=0rNjt<pb5OYwM}
zKLmlGWAob;D8M)L&L-efV=G5F8lHOY*G@(+pIpJDj0+xhPVH3`S+=}s^qz-*>L51s
zGMlkG$W2w9brI9ag!xn8!;%_KwfqM+Phq%S+rM8m!u3KOO;O~o3@CxM22u{?pewYo
zGYc#m6nUuKa_<4rk{5<LaWfw$ZHVqMY0te&x#x=51=J_g5WbHr?o}}wbB8y41P($Q
zx1CN6hd#3&%T#PBSG)Yy9edL_pvECrX?E0K!#T!pTHPqKp=FQaK5jaouG)P-smadW
zaGQ_A)8QHJb)njx+J`QTKSNza+E&Bd=+>{<<Ug*7CU|vv6kZ0Yqqwa1ssm$mJQ`a-
zs!DVX=KF6R_Oz3VupW%CF9@9_6FagO9No)~G?a&JcIp6wsj+y6I!Xi$-Q`b(6Z7wx
z@R)Zk4@GZZ*1He<V61kr^wB{sAUznm%J<z`M;JrD;cK<wve?c0k1?Am+K_)4l8>fv
zo>o-V)dAHSc%l4RZE2VBAb5D|#PR8vz*~{J{Fr=^>Aep?q=hY;kK%>8kqG|uC0+H8
z;G9<vD~}rA+}dn8*;-8_WbeVpV{h~BJa2sWpBwJ~i-H$1<stk$;x{|C%j(dOx&bs-
z1159<C16}zv15f~EIZ9z&w+b&Lk4DSQlVD+OBEc!$q;22aHIxWq{*Q^P$z23RKAkN
zwl)3^b)HHP6{3K<rObz!EEc&YR_2&kM1vIQJSO}?{E>O_$Y)gIF#5o`J~cR%<64tn
zVvERm7_zy&SlH&PcUeO`rc40N(3)08+ahF$L)_yu)T#>Oex74fTQ79cr73UNoPh;2
z64F+lM47(CCYR2Nt*th@JE|jgF`k5BlmKP;bWY#z!fe`)?yA}Mxf(!vK^vfNaq$-z
z$wk_Lj>H!iF=gMyeG+2C6bF?U8%hwZ1D&j1d@JsH;95LY`O;0mE{_+pCofXCL5~Fu
zC=lMs(Y;7H3QgYi8ptF$f8;r4C-}_g_c-EVjoE)ozOv@vDjLF9710NK{n>~%rBPDY
zbn-+5<G~W|QqM_Q9z2*cu5iT%;=&MR*k7YD$?nPKH=<c|W0pdzIWXqRv4l|*Oy!Fp
z)M<7&&7>H`=6>c8shO3hD@0~kSZ#RSySuIK4j^8rkO>sv?)8@}y<Ao&Km+BI3!Htm
zZ1CjgfWtdLsd0=-31`a_-mM@CAN$O%leL*@<#2^l+u;R&kqV*(>QrT+s#VDT;k=Jv
ztmz{z*}N^a3cM71{^Kz3=Y#H$c-@>cO-%>VsXPeF%iiE}H8bN;c>*T@_I2SiNRf`C
zuN!B4E|fGJXr>WBOL%atnG}#-&TM{{IxfVFQr-CI1llZq0ra%;x{v)_7fwLz4|!Fh
zX(EYAAi6Sh$u2lhNm^0-a0B&&FYu?2sH>cdc+Y}(*44=mEbQG93-_FbDd#=;x$Da5
z1l*r&o4*Byp4Rp7xBYM$cuk~F0_q&2eAp4;H)y$BBvGQcfegs-CJCkM5-4z`WOO}Q
z4R&p{kGeJEh@^OFQ>)%EgHGFnzLW9lNf7Mpmhe5j4;g%(J}zvgAh2t9)Kf@-S8r^c
z9;pK55Xd!~Wc#CW?)@%6X(g^ANP@}odYfMZdNEI8!i5xMyTCuT){RCKA<BiZDQw|K
zI{AgFwV(@`cZ=IrjWoCYYv9(JOjn!s!J%L)Jtvd*_vK8X?7&Q8SWC4uu?SgmV<SE~
z<NoTKw@RL%>;(oP=aD#b#S=;m2*RTMHpq$De+y!a!<-<-`=GuhUfE_RJ{?wPrVGKf
zD~fIrz|PwpnoX6h%kWc(3%gnCAP5!)@2Qg!_=@=K;Dwcerdn!h8|P`g+Na!m+M_`=
z_{~L4V6~@T8*Z0vrXEesIR+;W$@`C1fuWC<CwVvlXF)j+`~t3xjOO_%{b}GWD{Q1p
zzjH{u5MD*ck<3jE{qqSViXf&271QqWR+7~e{aUHbgwm+5Pi59@vUUX_Iq~XL-nzxu
zGoqojA2d-~;BP5yLagnK#;mq>_8wmiW}}ZNo1lI`<VGXbgMSuNB8QG~Bm;BS*0!BY
za6Op(D)G+fXuX}}oZ2HyXN(6BO|Ps3%G_~lyaB=zT~X>xn`@c3#L2Xl`BSQ!cd9Vs
z_xAJ&Bq(f55cmwx>p8!+({B^@*rXd;iZC&$=*^&{I<kWtU|q+SzI4lDTu|A#qAnqP
zapccHak?xR7g5^oC!IqLplq0242tV4>zBy&V<_~Z!!63B#a)!N0i0oafdX(~U(Gzy
zO%H-&+*bGytsOq5OY97mc`?;)k$eW|GHw}R$M;Y3fE7R}<@>@yIeO}k_J{LwZZi?%
z>8dBcIENORJ{LokzxFHRGnXDn+;o06mbTiw`Y^}W*kSsgLHw|VX`X?BF(qB3rFC&G
zRLBN@8(>q6yC+q`G70mrGAH9)40~=WaG_&86X(OjTizm;c*YksK>t~cpC#iYFIz1#
zZ=sq1T2z1}KkP1xosLlz{484Lf6e3qQR<xV0p=kug5>AJmNrRiO33o8wF*T@64mR<
zWwqI22O&nch?;7~%xqvX{*U0ze<?F79iAoC5Y4syVHYYg(Hk&zb5f%r6p><yE-WYM
zxEPDh-b292hG%D<edOtnrVMH#CEf;(V$=P>)xu{z)i6Prafi3p@i2o6>k(2N?j-Oh
zGMmw2pQFi~b|4&)$aZf4Fu4uAg-Z?>*J1h^aG@dkTcDt-g1a?wB8Vqtbt!!Y1~2>`
zT6B9RjNmvS+x7{?_Bj4pCcf^|hm9{%*}Jih+M1e-j^N(Wt)t^-r)2((-E35P1{3bm
z#7u@=mkRe#UDdIAXndk|*HAeyZhzgvb$RTlSt^$4Q>n-o7VqK?YQ#zg<vyyaxjb&Z
z0}3S$uh7?^SsOr=p*+(wKJ1piQ%3(e8L8r#B6Z!-%HOKy_RD^T>CwUK+BWOO5ZIXg
zYqN^(M!wF7$}F;fd|A`Y0r#HH&iD_dZ(S%N#=k;+@Mp#rvj|ipV%-xuVn)i3&baw7
zK*H~8IGh>ewH8cl114g0V}!NT!HWNMRpEzf`K+kp4g({vn8YMS^Sc4(&Um>1c1R&P
z2ZC`*Se0;^nL?yROXs!D`I!voW#xdR!+aJt@{+i3Q9mMs0%=h`i3mf9ql2b}i%qLH
z+0q%6;tmM?M!WZ~{MSU_&MjFz7(f;($6z>f5y5L<!4TxTa|jUHl-(duE0`R{%sT5v
zk6VOOpEv0)nCu`^bdR;SOZ<lxM9^TIYOHr9Y?*c<FZk`ODo9s*QbVGI?K#V-&nrm)
zx7{bA<UA#<coiy140Yd`Hb{o1q7@1Y&#U{wHI1WnqhK-Tk#vK&N|v$mK->kv>S!?9
z>)IBZl9i1f_L;VQIYM9H=pYUSnyEZhI}|u%TpJ4{>WSQCjdW!C>fg3vZp3SgqYg3b
zB&Ba_dsOY(rEdp+{_5EToP4xyk=nzZ))N!vUYI+0K>dBl$C9I(4li?Gn_^m*&WNMh
zV(vSV>%)`Hj~2VaRH`l|LbXPEXxGKzk4BcNZWZkf#PXpg(D5~0F$(!gE<(8V`qy<u
ztx%uh){mp^6834#!Xhx%77NuJ_VdUT_5$jpAo+_wu5xx246YRf!ev^1r(4FY6X#NO
zhtCgS)Ar_y>f*Cs%H<10-NBqYO#iDDB0q$H`J(!tO@jrmVe3>KeI2kq)jD(CpL!G9
zs#W6kTtmD4K)YifZmWKD^!S)Jy}PPML;#^Dt>*>+09^4&*G(=5aX-1jRCRA6t?tm1
z3UP*aP5(O|q92;^{t_wSAdFm>iA|WY5YXWz$q|R;^xJ_7?OCM?&tG#A)r9t>rpLTq
zLoM-Z-H||*jq3ydKHwo+Q<nF8P+dO{OVQ<S1{j<h(7)=0;EE&YRC2AEcBeTMZv;?N
za^D0dD0+%3Z|Z=DJ|elidE{PTVCqQ4_+!b1eEjPefoq0*^gknw=xy4j2xsm_=R4Gq
zWSQ!g(U{@9-DyDw(B{Q=^MQOrf^|6IO!IfiJwUZRgzYB~kdVLVH9$4%;wfE?O8p}p
zKWW`#_Qn#!<0L%Rki-r|Py&CbRjvqx|J5>(P6<*iy2F!bKiI`dNF`5sXcIq_5vD^A
zHxIf)oIi=5VGN#jWMJZt*z8(1cqN`4fF@!uSY(Q~;Lg|9e+Y}kVhC}1K50k$hQx(s
ze1qVy7CeiF{Wkl!MxLnAKma=$1lMUy)0^$$9$CQXz}~Qb#kTMyaXE_vJE;Xz6DkEp
zfvo#zO9kZI=ej42<TTrxEJz*s8QwA;0=T@k;>O>*r3H4!xHRJeMSx99am18)k%{x3
z=|Pl4xuPlVr0YGOIpg4%E7(%GujwEnRT~KEef+LtnIn?iV8|_@$Ia&bxaGpG5HN!)
z8Ushg-=Y63?2qbSydt)wt1zK-oY)88w7O1g5NTogtLA_9i!RWCrJR&`hgJK!oDX;f
z?m!d|oY?>mX11_;Gh}m1VzP^ROK)B-XME$wsbLDcTXq0O|AdU?JIS!Exz{-lEKOv(
zXbfO4Xp^WNQ(l-eo5%-}J+-J1jeC7fZRbTpFg}7!-2_^_H?}Pzi;p?C%`#YG`?YLR
zfTvyrl_jOhKyn9{Zm3R9;hH}@oUH;yk2d*#+4t18!q@K2ff58ogM@##>BvfpL2DQ8
zF|cJbo4B~k5On*es*tgv#I^xKj#n<uXj^bP=PA8#3f4`ZKzNl9z-|hI!$WB9G=M1(
z!p2N2QIUCE=fK%f{hga++^dNMB^7m0-}tPjRdes+U~<(wTvknMgD3MKmnjiinFtQM
zw{_q;p&xug*#1L>n=^<xHCD<8An<@UATp|F*HSCNI;ElP<yYNIB0;AHig5F!PrV_4
zg(>G&%zb>y;LuvKslG-5=9F|j359G*nIF3F#TXwMjOVfd^-|`ev2FpWtdgio?Ipul
z#)-VT{QX@+dU0h^_GFVS-GQ!l#uxJsE86TU$UfTIz)EIe4v*2|)ID1}+{CdXHP_%f
zeiQ|nHBKk{QO!_J52)jBg9P{S19c(+5-vPHsn}<({<%}Q>SFag0mzBaC+<DuXAgHX
z#E*u;wgn+SuWhq(79p)o=m<7R0nZie=iiCV*dX<&zPquDqGV+@B_lbs0y2;O5NRL_
zlvt6@lrCz;R*g&x0Rn<}yTQ|92~%_29|JNDQ~0IZl6~8na7pmcV#^j)c^*(NMF<^u
z2D<-^qUqmY+_q&S!AfrWXI!k5YP6f^TOR)qQOXpwysEBaHW?_NjB-T$jh&Nuf+XIK
zTNS%gX+3^*Jq9lrr5Sg_biP%t7VVXS1&qN3FWhtN=ct0WfQEx$06VLA^oaA03XIg@
z)sX8Cx_AhF4~+q@d!lm10%3_M7{#F5ApnG}UsWtf4H;k4(!a{&`hXFL-pJE+&{-=^
zw%nJ1%0B|L8xWrlE~S*hx!C%4bGF^=oCJH6I<T+HxOz)~Oz4BWZ!*tAN;dG!Xy!;B
z?}OHHiQo!s`Xq+{tr6@JFbwuS7K>|}i2j!8-#Gp)ms@dYCN(L+!1{F5)zulLCzdC#
z{(L1ZTgm6!HK`%xl|;vi5~2j^L>DthwVcCI*aTF}WOfqkX3{;V>C8Ub4HqZE#e9_4
z&F|X3H^7)pdWcXUWkxXeLjM<>HTucIXGG!5KM^p^(FcW`fVFbY_%M+A^Y+>|EFTvB
zWo#|S?<dD@h+r$^Aas<o7Nat7N2r!06j05AYxnaBu?6`prq+@RPTEPay7edmYcLj*
z?D89dLHz+?lE`IUUCn}=5t>Z4Ee>?ItkVdPDZb_Gom}N={vrM3{A~c`M};EX!iR+e
zT|~G8^${l}6=WrWYbN2hc}}5Le|S|)U<ZTq7`>y|B~sl$c_7WU3?wN`T>V`iE3!vF
zSI80ui{i$T$YXnx$2qjSIekZe;c#`h`egt*l^S%q(y37RSH%J2b@l6GEK&yM&hb_g
z0BS)~V)r_2n2X>yZZi#uvkfp`W~tuEc(nWqz^MfV_BQXPQRNf#Uvp~y85)IHX?8|f
zI>gcOpGnz}rBLy(N$kBdJ>VxfImjtu3dX^=G2`1vPXA@e^F=2odx_ED@~~kcq2^%&
zW}>lM%ogu#t#F-&>F9~GKXe2G6--%ba2yqiL@_b$u^A{JvCw`mzMnvJgNW3E42_K@
zQ@8PkYh`h`H{a$_{9W*M>;xE1AcLAYuO3S6H6Uy&^$+E-U@UYg4}xbf;V}z%Tj%LL
zHz4<6$Zc4M%IH^C%UosMxf^>7)yK-6b?$xUG6~VqKYj=0oo#(S*?wL#W8omPHW!t>
zsfs!Wm1?U_IK<NIZp;Pge(c8}o)8V!j$;>j_irK!?YFZK2E2-|?kIc~z;cqi=#X@Y
z_E^Pp&UQ}cA@1F4GD!7h2FshoUcK879m9Oc9=<@TU|T$?7P<N<Vf-l!t7GtvjL=z0
zqz5gotl2+~aX&W6V{mMKLyT@XS((aKBSom}AsigY5V+93n%o;^UE|o_zTSk0ppOCo
z0BS`nj7%otsMf9LYfgv4d)cOkAa1sK$n$F`l?S*#%=TN#r?2+sd`LV=MKez8tO^7J
z8u-mzK5GU;*k;GCz>QcpVu=9&dlUAA<FO$KH=Bd8q<i6cRTVhk(4IVNlt0Hh$FDFD
zy*jF6W4N5!ieKnzzv8Qa3I#{tFEwd@1EJQgPB%sSVh9|u2+h*!VNw(qRa71yU4{O2
z*bu|(jf!^(i=~BGchQ`KeTFr9!`(7!UVl>Q?HpJh<2OBSL@}#=XC`mh3cG7eZz90*
z@G+K-gv*5?!)N8A9c1}I9rdV*DDR^Ym>MK|u<~hv?@zzk5KDm$W!XjV-^@;Ls3W;+
zgVh_ZXcpC|nts@)Vqu5WX<lRpd`<|_XJ7BRFF!UMLWV87eyg3doT>L2-<MT`h+LKV
zV^Jnw%)i6CaWG26RhDVDYBNz@{#ZT4qR{A>bgYOz`lVP%;)gRTn)S+Otsu=lA%c;J
z>E|xp=?jt3^zrTw(CdngF-st3-Up4i6~8^C40|mXHA$YR0HkaBYt7+ug(+=>kC>z7
zpE$SQk09A5c6er#M$-2^;PWu%#+Pf-qmks0VOy;(;7!se@naF<B50ymWGwBV(}>fB
zejpG97L;g`Y-Z5Rs4KaM&Za(_Epay(r4nhh=z_%7SL>li$`ThM!i{`K*ks$xK_ulR
zg_y0t9tF3i*sVUpBm823Kt*(w@f{LK`sz!3Ce}{@T4NloNapfoohJG3nT#QcfEx`#
zLUym^!B7WlbrN#ax7osZYZ4y~*WArI{u0d^o$7*zUqL78kwz|2Rqu#e^=4<x?O$Aa
zUFGgXxPOx%dHNOnDZ%w|i757%^ULfvIdwu#XrY3?I|{cOFzB07#ePjKdYGCZ-p9TZ
zB%FbEq^ou04;pqVP;ovV@rqixc7SLdF#Ogx=-f?|goV~hCFP!s;MdjH`IEnMXl2bS
zd!EF43a39exgJ1pd0m@zz?24lp(|v8lCuuOc}u<5+QFIt^K86+v@nmVc6w)dZq;cZ
zD$19Q50opg*3QO0Rp%IQuz<_v_8HQWTyganVx>)QPYGr818+DnlnYM9Cy8HDI@M%d
zlgt+(+}_hGFr-j3*fAiAd5(dH*mCb_p*|oc+eBS^1boWdSOLXgqT_GW@Aju$uih+q
zkyIe08A+<Z^ddux@lyecbw2-h_~9V5loWo4z=UePccu1ldEF2MTbFXsrmNHwk}o-j
z+VgblvDF6JIu1ai;7+Zx5RiforA(58YxGYB`wiO4=xCiH_EPFLMKfEw@YtcpUy0f`
z(K*Tr@sM8|Mx1Z5EDt2lO)Vl{&@3W=SacH>78Q8-z~8}L{aFK_xE<RBm!DPeGYBeo
zE%n4=j^|R2w{JM&sT=u+DE?L4@bI)~@MC9Jsu3#`p7^`nYEE7cHFI|5qXzx;b)g+~
zSqxoV{WlJz1FG1II48kJYNu>umbS&~7D#o$wuhC-hUVg{88nFn6eZx_)3dqck2qcS
zdR4sk*yA<t0%=B6HTV(NXiW<-%ULBT`PHnMm5x;}PNW1SF{Dgkx*a!Z13xHBIlT`R
z_%5;BJZjZo5m{$CH`CK7RZIb0;+-apgnQsG_&8QMFbEs!(h6PmSM)s$n~xI3jg7v)
zuO=8(T=v`|jfDnMN!*z!BOIE7A%p)qd#>vo!6q-vjmH~zbGumBp!L(6j;z$aaIc&@
zBkMH1t+k;X{P*1-q;>@`{UnqQi<%ZZB@*V$)AqbSjSm~x_9OSyekNWYJ@H$Bg9tI6
zJv<0vYtCw<i6j*!wi$={2$lGRDUIXuWqY1n`FayDfYk0_ypH0vEDN<D{^d|Q@A~21
zyF#K{_}Hyt_%yq<W<VIG*Cgatp@ZR|B?5lPFD@-t8G_7|u9nZBRjr0G-gSZne9)9h
zz3w2IgIQDcAONQ4M~>hO+No&Wpy#aA=>$e1Bj$%O0VeRuK@{!<A(k{r!FL^nv}Ykf
z4kjpA^qAqr@Dbymk3+9HyH8%H<0#Yy=iThqqfT?WutpkicYC4=m?XF`7(X;YDs@&L
z&qZDhE7}**zKlXz2#9OG{b%CW(VCeQjU%h3Q$jOAkKC6k=fz#XLNSXZ=L|LyJV}VI
z!`KRFah;tL(e->@Tv5c)j3p77$;Q|Cb)`;aX)Amy56d%rS$78JeD040vQ?;hId=+1
zdQ3fE$u%ooBtPg9NX*oX*nIC_ZJ>c->K7xL@eV%=4>=8!Pc_o~0@oF@CdcEwHn$44
z4kaC@!_e|R)v+~Nwtv~`ZDXp*UrRA<<2%o|Spa;n!Ph^QW=*78i1VuqEztV(@u#m`
z2FCGYo!i{Ni?R&Gd|-92Gx_x4hev1s`k?r-8j#36Rhs6sMh`KHvbmZQA3*ml?F9Ea
zgQG)zMR!k#vK#&N4zxGvCFwL<m)r^QHbGl@KW>1FMIkIl+)lnjim^R>QRqRU)9zME
z!N)X*BMV!;@FjpqRNP06YmvaQ2X<<e?QgzE*lP{U?cWSk)CK)URLL1kdE6Ho2}ePw
zfALH)i!Lbz?%7s9W4d>W@_m*sL~&$=4Q*6EY6WTzZz}$y2KOcpeEa>!PuafWy%+E?
zPJEawK@V$6XXkWX#EIlDg>k{q8_)QXT%!cAXju8!>3sxoM#~xVGtdf}8D<H+YP`eU
z!3HiOJ;{Ymw2Esi%07zbD~)U<NH%(!;Fl@80}J2OBJih>))A<!^`fMf4`Ppw$1hXb
zlrWO|Ub`e=zTMwAlIZ@;3$;JgxTxdkP7kSxSjQTN(-~<RH>`$bwiCDEcHab^$*bEG
zwmp_qJ-G~dkxgfw?!Ng&a{8Q3%T(i02A`*g`g1R8Lc{aBApJN~t|1I%b~*F$YDlU2
zS@P&bl0!3cLo<ct__V=wg?e8Kyl&iJQ0eN*ljds*h-=cs0`mIL2Ws%FEYrHho}CtZ
zYemI|M~T<!^>Eh~SJ3-gHM-Co(;GsP9tRw6inH7?#W8O2B2&vjFwv{8G58JY<}@g*
zBtAYZxxD}GK-7nloqmP_PM}k^KA1nJgrX+Bz{gmT;2KjBBIn|f_W9%cRODCC)X;xu
zbpE}LiaSdA<8d_N2wT~H%hPkLaZd|7&J>QWyQKud$#Y_aL9ni}3ej&cuK)yxS#V~{
zwx@5W+hM3QS(bmCB_Vf>DTz+Xdh8xAon5YGJ4~813i#H9@CG#V7=sAg6~P2q&Q10E
z5OY-lwo{XAr2Pw1Y}H6i75XI&^C|`(0v<LdG=ANvY0a8FDjdB`S1BoURgmHJ4AlSa
zZ_|G;KUc)Efnobg)mW2I&)t%Z!8mjJFfuzGiw~1_gl(eV(QATlT}~?~{<^lJ3!Rfe
zB1@$J#KseV;9)zmn4cj)YYF1R&Gd?EfHz={a}9otPo22yK0R@IQMG7e)?`|TJ9xyi
z-I<Mo6ZKr9ffP8wB*_n-pVuJJ=_(!qGgV-V+DIt-(+BXr!pnt>5T6)%E*Zf~1cKp=
z_!vg4!&MU-VC+WfN)J@cWIljXm2248ZC}b9=MX)#8G9W3Qe9qODXK;w#AzUrr+Wym
zH*--`{RC4I>wZxT_Tolo{}lvR&&6^)x-k*~#^&Wx&HW=C_CjV)ke=+<Zdwz96{iV0
zeluHsF$j+bQ?)|^yco0O5$48{l%ys3&XRGZ5@Yl$Fr6NR0~r&@gM}rSo7%aIrQY^Q
zoiD@YWM&w}c4I<pEuW@S1kw$6T$12?Y4#lz&KykaOn<gad|Tt>`bQG(ifXOA!Y(v?
z35RU<e#MY&)$yY3W_Js6Pql?+srria%LE3vgPiiWgFb4;hbP2B)eaBt@Txf*bW+$s
zBvu}Q5UJlPsmw+hoMKkWrs~rZAZUOLNM)e2CJ`3=m=GtL;<YLUUDEPnz{p#H=`o#o
z=xg$uv0(v)3S5J1PD`SvzpJe=iN`yrt?n}L)~>><g&(I@MyR$6ySCUAc);eNH~`_|
zWoc{{2H-s=U4wq{vNkIXWSe^uKzqW6KJB`ii6xxtofGkAB)|{(y{!@wKDH&>SgFSy
zi6Rp=kJ9%%pXbG4Ir1=xg3RWdj?BJfoUVf64jhh9bAzdu3qIQUW-5Cv+~o~tG4!jV
zXZ8-{o*-2+O##7#(_PBYD}vPq94|Z4OqV;rH^8P@L`HY|+9n>^{-nPSdc*psQ5&3&
zT#TS$FtEp<7Ob!yXv^J5k|gC~LcaSbh5a<K;opf+jAuoc#%eWUa<EF+;`1&4N^R{s
zo(yC(Y{x4)VqgKnJX^bGS6p)K@>=_@1qNnd7%rC7cKi=<XW{q9XYN}HaI@d;*f)R_
z;+}o`Vu@=mE_M=(eMPKn+R`a-q>mo-lNpFzXLopT#USsvE&7ZTlSK>n)N7k=D=A~8
zC>k>}M$L!V<I|)SKf;BcChoBxErtB!d`wcbsWzQZK=nPU#&qI&l}wbB;B^Rp*`Vo>
zZE0`Lgq9%1DHwM=zN*l1NsZ(x0u3cCa2d_t2o<#2P(MFoTxdwL<yFpCUd7MYENL|S
zr6qEx#9|_>2S@N27Y-GRy8YxkiCgb5O%D>%T><fK>tqo;gbnR+7EED*Upy~9352!{
zBjx;K_kY-Xhh|~8pv&^wwr$(CZQC}UYumPM+qP}nR=pAZ)wp`pldk`eaU##&k!$^j
zmscI`AkwxbnNn=doKNI6E8kC#<TW#tI?}C=WZva3gn@_$`uUPx>cNoA){c2bm6*Lf
z7Ee`7t}R^Mjj|#|cSvI6Gj}o0I&B0-UCX-)i}C3ssu7AItpuadi<+TTS37RwO7_=P
z_LwDq)dq+%OS8MVWN;eW%5HW?p0z8i;lTHF3G(eE+#nyce{hmBWpAnylYa2elLe--
zD(#@Asat#=f)(_%kJxbmRU+VwT1n)B+J4jqU$ANv56&d`!AGG*wC!0!2oJ&WWinNe
zRVZWI!qaTd#rJUOR_b_4JAUGn4Jwf9^bdcN9{+=+dLd06Gj=<x=UP6wflj6Cz#Am`
zB$++hA40(_lb=TJErh0Y`DZr`b3ZOHE`q)sOV0K~ghUstPu4319YxI``6TdYSt`52
zG4Pb;!YEqa(`Did%EzhwePAuUa)k&BczX%|&#xKn?%~=>L#VRHlKU7b*vCL9@M#o#
z<6rltG&1P%@Er3f6)&(3hN80rV1nwT4&~UsvIPn18c%xGqd-2{2a$CdN9s3ntdh&|
zwoi2RSTac0J>S~d?Qf_FgXOe6u39^6Yfa;D@woRSZV)0AyrIhFacK{W6kug;dgO;V
zo=j!Cpx!No)-Ln8J^N{}e|p!t#K$_)h(I`uB5V`)Nhdp`)<k@z>bWELSEcq_lnPRV
z1Z-9Knoah`bBj-J#QGFfgv2_wq>5|qO)C)s?BiIkm)>#%495}FNc|w)Da9UIpBZ29
z2w7?v&{mff87c!y%C!JD%y$v5UJp8^P8u;^s1(mJzX=f8*#efF^|aQQYIsi%z?VYA
z-m`Fj6O<vmYy7XkYy+uf31<Wgo0!&l6=RGpx#xk@R!`e8?mZsXK&bYjb>QumLTOHG
zD8E1Cxw9P6GgzX+L<By}M7%>4A|?dgOv#!eFQ-10CJ}o%fJjzO7R1E%(auz5p7?5#
z>N<iE(WrYKbDrzVzm<XqGawPn?QOFVW8p#BCy7L+@9}*W0HxOJ2$wwW`HoW-PiyY-
zF!GQ6f77+PZFd0V?ffVOnJeLkr@9~P@!3_BL}Fs3==0K=tR3uM9Fv!#XtZ2bjCSy5
zK+I?Hk0L=4Cv$*v4WzBXd4`sp${#_TwHC-Ho;@4@eX;fw0h-1{0{C!H=_hVKLW%?w
z8a)}|LqFfx{gGn~EjmX6N7Ht%0m)AMS;HGRpQlxfxFAw$ZqPvIRf@_=j`6j?h>K(h
zZFv)P-PA|?EZYDYacho`&hPDBQhN1b*&z_3^&HThl9h{zN+F$hIresvi=nshhxv-y
z)-!?7Km@$x<Tn!67>yW+zBq(e+6HLp8adxs_Z+U(3!})XyW4pr4m}M>q%9K^I5Vx9
z)i!zJ0NBdcXG3;JA``=J=abu-C**N=XA82J(*`A<y)jtdvxzL(L6UEYprFEWuu-(b
zK<kJTh4Uqjg#gVk<_!OU#yCzgT(K>36$UV&SQtFu{9UOVI4~jD#ReGayx2w#n!p5d
z@3+HlX(@(^liQtv58^8$dkq}6hw?*qVr&sIK<g3kSN5KzYX%P<2uSJsVh)?7`!U@o
zqI<!C0{c*DLbhn-2Ll0-e{17-bZQ^6Tk%s0q945ulhMG3Mrc;wUU#>yUp*g*5$T>e
zIG03g6U@^P-*OON(^ab7r{ykE7118}D^?=sw#NPOk?yHu#CvpNVr5Z>ct}YxY^vb1
zk4fplV#$$K_HFTo=2w!j%QS`9w==wtw~Y&z0SIUR14em6b)IZGbjG(Zg}E$M;k`qg
z4hIy%A0Gfh6rFv13s$fXBcMT{n$#C2cWI@}ho1%>EFjjC)@)Y&IME3*r3I@P+sA&-
z?CaS#*BG2JrOU^L_12ic{M`^C1)QY$8_rR{r_MgoEsJO*hRdE(?AK-U^2=gXknhs>
z+<dT`?l8B?q+n3?`E5~935NRS{8HJ#uQSFE-M*P+f(Lz{4XIKVr5cdAZ@ffTnkzx=
zFn`tyH=1v&G#~N&X&XkeekBKvByVDRvscV>dn6eG(<g1*zm-b~jxi+5z*50+UIj)j
zoAwJ42g8cu3p><=emL?knYOdyw6?i}UWRXJXC`$RhAgN&=%Ra}y0ZRY65|~hcj~Ia
z)H&qICBB0x8P61tR}?(seIo;7P#O*Wf#=ah!%K;(wpWC%JPaYfCxI2GX=|?<j3^;(
zdJ9$$T*5VtGlV`u2~83&tC9=@ni|>uA_pzRk$S>+2rUY))%OCfcyW9l77X><-%%gW
zfm_dI^tKV1EztR4di^MGQi0`i1O#YCbI8Zd2U~EYSX(3T3#Cpe*(8Ial#DRcK+fMe
zzfd_6kYvc-M;R156h$=wZn#zdfRmV7Kp1oxxTI_BCT!RTkGb=S9q&JA8sU_SJ%A`Z
zSt*4IK}dkzyHQ($dd?pnHw5ws$K1C<m~+Sxq4jAYf!1;NGyRsBvqRPh#V<u4h>7DD
zto!FRGk`Ppe+x(=Y`;=tFYvhGGh%=9;5s6^t^UW&0-2skol)j=S`CuH2qeL{uu=Dv
z@S<K|B%xsXmNd<N^!)LDT-X1K8Lr+CP(RYkmOfEDfnunxc6)FUhe5|^RjuP<DaqeZ
zZxvVe^+IVa$Tk95w(D~T%?tzh4^A0>g$T_EtY=(C;5iegn`_&0%SB!CjL=F89s(3v
zy#>F}rYsx?i#@PSlv`ks>3WGIi`o-9>!lxE#9qr0lS8bMRQvkJG}q&>S)g45MNC89
zLrZF69wNJ!Vc1z|u6%Ob!^ScZmxUWB<uBlx<*05c>jrj<8R)D?{K%-Xem1H&r~v=A
zME(!|C|RGhVR5O<7_WpO1shU3?pWVp9GtcT%z!9&U^#Ecves#gXr6c^)4-(KtY35T
z80C+!pvySrI-=#@sgY%K5JRX`%Qzbqj8(e_Lik#AZMVEMC>7;R;kby+^(ad|h|AqQ
z1}6+4@tAohV1l#d57vX3@Z08B5PpUpy9EUBHPkw01MB+`q?;p2*@<477z(B>%`_5t
zI1^sj@7KesuFdisoqThuzLim7FMO~R)}+Qt&sI^Y#rp0My;H3$a=URmQa%mxWZUWu
z1#2aQr^<_1T)${gj3M^wnB!yDfUiINYlnt?H)9&-Z}8m|EB9B02IkKWt?})9hr++j
zuq>%_^=ELW-fh)a7iaPM{RRT%H%;-=*nFj`@B{ZVDO|(3h9vwiwz=+C#gQYP7_hqI
zfWOkEH2~#^rqbk6zDF#MdU$m+4%Gp3&j$mS^T`fRk3Fap&Yi=gV9G26Bi6Hai4C^%
zu2O=WCfQ)HmIRp*Z25T!+*`wy8fKe^Ifco{n6R6Ksoaqx_&GosDC-)!W(MZd?Vj5Q
zyImJ68AgZ_FE9jduLNaki{ycVjI2^#REPLEhAN&zmqgowC;ta|@Z&HC)_`Dg7LGqJ
zVXcT9L||%=S2V$;YN+R6opn50-|bER+3h8SFwsKzm%0X&!JM=~Fi`?^r@bQ8OgqC}
znu;neSA(7vNHz(b5mc$g#^5<OohFgLI5~niOzJHb7Z{2uIxbVV^MG%!Yn{Xr#ebm?
zQ0C7oWJY;P@B3~2b{hLfOrB)&54wf@{Yxz@cv+h;QjS%&WReyD@-H)9LMWh(NxI{v
z71|?CrSlB#AlWyVag)yf5a6*d=pxH==tVCrV*z}ZdI_x4j+)`_0R=_=wAe~=*5JZx
zxzh`SjS;X?H6U#v*>$0fT6^b6yFlWs2jH)Au+oChyL@=A(dfQ4Hgzw+;OEq_jl2+w
z1ai1)!7fhZB$Y{c!F)?=HXZ1*zk|F=0g=VYqZM!pp38`j4z66tY41q2H%Pxa{jW44
zl3hdF;06sg<H9g$0j|`^(F*?wu2T=JxNL)O{$35?xziIRO5keBOAAAv%MRRgnNivj
z&vj8#F$i?LXT(nFQ!;d(8uj|Is!bSCOxK9aDx}i4LorNrO-F~SH@Iz=8i$lv)@Sc?
z!nt>@L_CoR261}9mDtD{Z;o<>&vlf8)-hY^iS+TxmTl*dd&t+AZ=pZ34B<A+1Txef
z0c_~~8U3<T+KlXUcPK2WX!maq*bw6kFLEoO<vn7b@~b=`=q^>xNGKS7;Ss!l{p9*q
zYLurCPp;c@zaoQ=&k(e6*kajXNdkgEz}?iDK}hR4=Nc^>YPm)<1bN@#9TPxC2yQ<J
zdV_yHomZ1L>KL$`ETH~_OV&BK-(wdYm{;36Ph2Zh_0>2ho&?g$4g)vEBt5Q!dO`|W
z+U6Y<^22Pa81#@H4y`ZkhdPrvCpJa}7NUKBb%!7lg{f}w=|V}qI(8VSYsi|KCP6FQ
zr?tZGv<grFMLcl~rzjB88CtPt1du*zg?{yEbFB}581XIqarbX3!m``V$IB3WT`;gR
zihdeDp8Zce^GCv#fKlj1(zK?B#?;rUcQ=>F|Di6Zxu1|NHm0mYV{}o%Ulz{&X<-v|
za?Hzozp((YR%1sNc{3h*_nEw2K^-;!p_#Yy@D#qtFFkbMO#7ZUD2!$l)N51~&`8r(
z3IvLL=r<XC1i^+!2~u}ZbKWhrsYtDSglY86fFW;Onf_X}E9=8Su?6iV)}~S2THKQ>
z;J1FFnpD{cCpq)D&9q8Eu%$wPVMy5bys6v;;`oT*L+c)5mVfly5!L}7?oUDZatTsz
zXTFSt6w@PCSV?jD&uz@EH26+m{CG(0*)>%BR6S)-tM%}F7#BmRw7Kjr?C9rl1wNq<
zq1dy7!xNA$aBY;fmlu)j6{;UsUz@J=g&b%31GzRUNU>%bn7d<DK|5BEIQ~**Kd|_F
zuL3yf<xwu+8x7#Zo2P6}GS;inC7oUAX0^(pXQd+sjXsSIRJ<0y4QFdUf593CIipUj
zRO^G9?lQJVd2+7{Qbj_bp!S?T$RZ6yHJPY^(%=Se>>!bo(UoilRBmZV+H-A~)5ik4
zr^<NaCQD?QyiB|Ugu<}O?UkZ#w{0xpw|GNf3BMZvn_c@~sIBlnrAu98-E*)X9_Ba1
zUwShj;CNbYu1(lFo79|nda6(O6n{((j^>0*!i!}|pM(jjk}z!aeupCQ4Utq3fieuI
zN7wa%=Uj}zE%~zca{CO;&w8|n(a_X#JR$Wb+X!zFh%tw{;Yl!`cRl%lVViSgFv7VP
zo)!U<_v#nt0k4AEd$VX~+QeB<TiA*1&LY}CGHP1PMdF5prGOeCO@n?G)G3o{g)H%p
z!p*+~0h&&e7rf0`8$jQLK~0mJ3H?M|msGQ8d9XcW%S>_vgetyHFn~Pd=PRIZO3_%2
z9R<`j={f2?ZpllO4h!P%(;X^P#CPUgDw!ADjTWklF*u0a=im;zzxQg%iKms)uG|rX
zan9L-KxqGUKP4-dMK*3ey_kT3O3+{@<HlFL*-cfMA&GVVw<p0c)H(vudxEVc`mxc(
zVo)T%$X3Ur%tgFs5)fc(;zhNzl_%r(y^ESmeKcM%MLS9!?2)0}s<#Io9vNeMEn!TA
zazn#|@#A>S3&NS6cYvnzPFFVPgFCs9D)Jws-CN`-K3f)nVc*9+u$jw)5DD~Ex#QFM
zs6yy(&l3V{{_${<WV7D>-7&?*BgT#jtP@*LC)++0J5!xh>HX`<Y{}x(L^;&_y)6}Y
zDiYa$<r?nG2WrF0EC_n$Va<cs_Hwei|54ru*E*cos1h6DC+nQ5F&{T>S%1v@=t~YM
z&0%dsRE>H*VK>6|S{E*;d#pSBz&b(vvPHaMh$*NZcx|P-IsfRKp3AE%;lKq5C<h3u
zETA}7@3sQu6)6WIjBB=i3htWIiMbANVY9k!1ABUHt(-}(+=%S=j5N<*g}JNXMgVM*
zYgk8Z5O-{=g=f8YQL$CCH7$Y*D6D2_+qlR=>S-TuI6|Ytgs>0KGhhrD73ZeQ%bbZy
zPdFma<4CmpZ@ElY_!6p|4*;r#r+eiiRT_{Deo`?nnd5=}k(ciQnDpxte2fp%61s$Z
zuI_mFV_s<Y%q*=0Gud)~mdxL0JY}1!&9vnQ?O{<I!mSv|jpMS%y{vWZpK}9?JB{+T
zV&aT@$2+cpI+0Y*Cux2B4H3^BT5i`7mP<@d<1}D*Z?NlFT1o_0CFBIQ*&^a-ASfKJ
z_iU46mCL)9kW)&o#O5^5T(~c@IIdBl!Bv(7NUfzT7QKv>vk3p^fiMP3t@*3z=4{5g
zKIX_{HHmp2R`LiGq^(x@_=dC~jSFGvue_~&jR&SJv7Q>88sBRoxb1DfeJ|oHU^JC+
z)X_824{CeDhCyRdc%~HWW!;IIRw9^w*kU7-L13i5AaEEUoKl+V5)WpdCu*_k>vW=<
zE3O^*3=g+|d8PLMK&{NA)B#iJnyC_&1eRd2w{)RCN36b*1o{L&=`~=nfMT(QBfEfM
z_|d+1+;oh+ly6|E?=*(2g^wS<*dZE?`rz{nA8ti&Nk@}Phhn>2@e6^vDQ0IrY^`eI
z&ywODpf3`JSqlu?P{kE#lcXIgYz=S%QBb4pgr%Af*zWCjf3Y)X(3vsiI%rJ!Y-|Vm
zi9^T?#N&O7cmZQ9Km-EIFE%KdT)e-N6{)DZ-%xw8g6+4{eM!y!=`=IgoH1)&s39$@
zsFWOO(#+Rp_i>-~KK-ev-Zg8^o@SxQjcQ_y10!TpD_Wh<;B-~yvqD_t3L|^wHZT|>
zC5te(1}HgkG~f8K9+R}#fzgu|PrzM&o=sV?10`?P;5qtIzJZ9zSO2yx$!O)JELH-N
z1OK@5)=AhLnDk2I2POCHte`oJyx-@iOMDQDQax|&&$K5|2T*d^kRR&<HP%?P@tvwI
z$yXQg1S?py9V92V0)Dp7_cPnV@sbqZb72#-@4q}AHX~iRs8~{<c)M>PAg&VfXpc$B
zP5paB^P*3w`S`wn47?EwCP$w@1jK~iY3<55uK3j=S2EPG?ED9oUD%i0rH+m@!`DRd
zap6tKM3z*%;%16vox0y(7#f5ePEnYn<6wX^wLd?MhiegV)lgL&&GHy@>^S20`{T#n
zB5PzlYuvfBOY0;M-bO7UN0)7o$R^`gE!dX2#pla5=-9+yD5BMezzjE~&=w7{&Gz>W
zJjUWdwe@s@oxN}^dS@wu`lnHpce#pAG>zBsZ$e>8GAlhgt^)I6RgCozCq|XJ{$Qo8
z57{v_rog#q&zp`doLesL&FXXvl~*N)Zonb}-kR4IP)l>xN6^@W&${^F()Nu6J1OBK
zM4!Nn_`*b~(yj9o_v>b_6y@OLNV^SS#>(e%fB$%QUmIBi&|W_iL8_LpkFrU$74vV=
zlSC~ga=v|&dz%ORu@AU{T!SWqqhHKKk28R7-Z*k9e&#%Egsy&M2;gDMuX&+jqe3ar
z9sSAI_$X$WH?ZF<TAjl!Xy8P-GA3eJyi2h*%rRg=Kk9uyy|nS$Hp2C7%MnYU*T(;b
zb&ZZ<&6WY1m%>l%{feW~67+e%c;Fhx3dGc<4~wb{CRC{XTXm%x`X%tb*{4S5`1Fi2
zam!4xYALYqJIWn@NLVr0xSdjE<sb_Z33{%%=ymckjF#JSZUmnGRrGmJ>#Bhr0qPD;
zPj5QX!Z)Ge<sZKaimLVRL7foIqeZl1qfZ-qJSBYx;aZDyRl|wTXX!_wd`idOv)@}9
z?VGEO8T+6tw-&e8)nuaI&BYqhlkEjE;V@VGgzts^SYPa)6U*LX4DJ94e9YQV>mV;<
zFFc9kW4zf0Dy6U?Isv~J|0sZa*$5|IMJQ25m#+nn1-+ux39^!$NK+L!I9FVPl(|jP
zZ!z~Js2FFf%ugGPRxhwLEb=gAkvS&OoZjfM;aoy_fExM6GHilg1!n+mocVgG&_GmI
z!-66#LMd07V2m+<r_;+cSMcQkql`UqBX;1JFV&<}Ty5`^W7P}(BXS47O@F!fPZ9^Y
z23iX$CY5uE;T;Q{GTC_H{qx6}1US#=hp?{#qCo;=&=7}qTz9!=ui&~aYU0Aam@#f6
z9N)0_dqbuai>9)G=DAyz<m&4XqJ>eIJL5(Mqe#U6=13xV05$xdIFhG?@i_HK+EHXm
zIGG-xJhbt&!C_=cp*jH$2iuyP2si<r*(2iFG_W?IHHaKz_-Xl&W5d9H#X~qLm$Xdw
zYxI96xQP0t;ylY%)Y#A++Ml>mD(G<QjEF^bWnsXFwGx`}8-{CG*wPr7U0uaJpgnn!
zsITl|ynM)Gsk9)}^a}tFuFNMjD4kqxCqU-^85ZG+G!*5XK^_sQMQ!&efK@#xe3w%B
z0K1bU5f{za1*kfWcI?VKe<b=D;-tBm7rm70M~<OdWRD^K*$4wm&b4o#9`hehWzncs
zPP(92@-C3?@cRSpM}hz4c-SZB*go|aP%m#81fO#i2-+rU_<YycnptdK|5tIN5{_LW
z?w}TQu(BZ>i>3h(HlH!NaB@Li)giq3oc^QG!|`H5*u%83fqapU&rc*V7yYVvFr`yc
z+Zbst%T`9{u-PW2PfYr2tyCP&%plrowxLPemR>5;iUt3)K8HP?+yDf{c%Ui}rVYKI
zShyi_BOGf*b~EG4OHZ9|!_hH#G>*+rJk>DJ9M(^H?0;%4ur((2I|_dy)zDNco8ZhM
z?96SFh{lbuO}jK=cnM}1w4Kd$dHC7*-6#Z_M`Hr{Bzu;zmiMqG<On#b#%`lmzgf*4
zM;%2FcH{F=@cdg)M_Z*ZCv5wtjj@fQv!>9Atv;vnMP%2i!maBJ-(M(!1CjBhEaLwZ
z_aL@w=1I_xjP>6cKQ%B)kQ_w=aLr@MGc9w9MG#)YK|z1OQ)2M3x!ph+hYe`QnG>Me
zRp;|ZipITObLgvX;7wL4O@DoKSeC{J43R9}ZK8dPIV<&uG$Zx04Z2uylx(4lfVA|~
z_I+Q|uZ4b^BtaN}b^*na-@eXi0fcCx=>JUb0go-b?f*v@oRZ1QeZJUkrpl#bNAe%q
zawEhr!`EN#^85MS+G55i7w}GpXSH^rQibmeB5gku9rVi_wQ`S-H$4bblp;ySVLKY&
z-iVb&Fp#id6XxPUa>=dwb^MUb6lU`b>9r^ts}#}YKyStD)F`_{HCnwOYn%V7J8}si
zA7Dal>aqbaYJp_Sr;95esRo$Y7lS9W?T$4#*b>N=tXA!I<18A&vI{1~tE;pG|5wf$
z@Xqjj(h~}<jUoM}H<yh)AK=u!VZrz(a=$jy9htZba)Y9q1ZdO4-YJD2qn#||R?Nd)
zjCrwkhP4bfEstm5RSZFk{^z-6ntiv*s51`D?KhyXL!jvu^5p>;ZmM<MWrbuI3@TBA
zIQ=hW^99J+UxIIa2^~>`>V005_Sg+eofRdnA*Lru<6`OZFk&PhM~Z+gl5q8DlnEI{
zYX7e12Uk{qDxo(WjoPwXE)L^sp*mMdBmv_PT0kY@uoTQmYm&dlnNkWwBR}yiMSQKj
zZxA3*gAsL;Ym{Te>zP|P+js_gCWMo0Bstxdl7;K>F^$_X?)3V8tS5R#YuC+V$r~{`
zh?l`7!8Po&zv;DmQ(xuLKNLdpjtyJ5&$WJ}+|FXmg6H3TB9j!bj%_W2<C3;rA#Au|
zDu8MTfY`35hVKl<Z%4O-1m(*1p`mBk(_sjZo;Ez8k_L1x`hT268YVU6DQmyb8;{KX
zWvaN0+%z)O!p<8Xu)(xyAxCEHS&!)2ivaRG4H|0UWjB8`;3HGD0AEJUup+}w>;85|
zF0g%7@TwpfPVOKm9uz7?K7Ve|zp-LBV1OA`tAJ`wi%^|9FJXP~{bY48k`+YIzJBan
z3i!1mg`C!B99~N+EZl=5IIG*JETN23J)((v!sAofaY?`s)ylTDnZvlPx(U{RMFl7i
zc5R+`G{^mNz$5#2n|;fmg|)b^Wo)3cPH0GRQ;mnO-G+bS8%Z?ap_Jd*kHrZYO#p#}
zu6SzY_A0+~`;Ljs9ZbqT^m}eY8_rURj>w_6IQ@wvv*FqWB;9$)o!x?SETAe$hriGc
zFRzJXuFu?@kaEpTUGja;u81+NZ?*T_#ElHU!k*J01X!8=vx7yrt-#`L6(;)h>R?_n
zKsMRAUZ81783e2=w}vpFDDyn^7No@xJ(c1aMh0rhz6{m4+OQ{AYuJDaj6)^QJ;K4t
z%^E%-kA-3=*!%}EYZBy`mep$G<ZeIm`{@*GVl)+(y}|OnI%JOGsl6JGq$rxHWYIjC
zNsUJ6o&6Qyk_n0s9W_!wz1pf{j6V3ztu4Bc{`C_Y#a;1hA4MCCHG{LV)vt7&;cLC#
zV8&2N*XEB1d@;}A{=R4@-ah+Xm`tLW=sk~B?av}E)tHJ(!Wh}LPF8L~0Vlp@OYzSV
zzEYMuOHie^EqcGkgW~irGP9p+Bu4BXLdkI+&oP<I*eO`;naf1wopzC}`M<15@k~h_
zmIL#m%}DT1jg%2;kf@9yxWp^mCKyQ+ATu_UEktIiKue6RF%ZgTL5bK0o|ho=fc=b7
z*^y_XOxB&3H(a2S{)K2V`>c;+E=yJ$_52(WmViX8Qw~?NMp*ScHIWCl&_k=_oukQK
z@@d5~Vn&co3}pQ3#vpvPXq2N94^DS+TqRL@BX8}J7aJW5G{;!yD8f8g>ctK!6U!);
z%hK-s;2LH`Av~m;UBqMsd{XK-^D*rWaq=+H!j>G<=EKyYqOrgP0N8)!ib-D~r}za<
z7qqy|r`7Aq?PV}|03&0@gGH30NT$7SDy&7sg5l^oGBakNCvyaKc+sf6GHFcvndMN&
zSdQWD#5GARtXJ60XmuO}6KLan5vWMqg7-4PU0<ECW0c%KF2Z|}Q6TK+W;BWqG1cSR
zt;1D@vJv?1IO1r_TZ$aaClvyCDteA4Svczkv9>l(5&53!p-;k&lExhiU+swXbc_^w
zp{9=xRhlpX$5HyNN+(iFY^#tJ`2W0*P-zqSJs+<mIg_AMGZq=(Tp>kabT%U|0pkEU
zOBXSthZag*^>ks4_KGjzt~1{56*xeSE=$e`g=xDM6XJ%W+C+r1Uq#PxxWECNoc(VI
zt#S0vG@a)7Za>YHO+n*3@XMI-DWeA;30k>?;C{lG{bcXIx_PuE*TfIVbkzM4gX-*o
zkWg>$mYrG*6-%o&eC(9~+rNGnXeU20)&wqTkjXZHs?#fs(GVoi;oC)@c5iWjsXtRs
z1T2*)N<#Vy2L`g4R~>u+IQ9-cknW=W!c32l01rn=-B#)@NVFaC{{xQ<c1W);VJ2gR
zxbMm^2!$|!@oXA~dR-<V?=dKH%_C!g!mA=rt|h&Rc`)#86g6vCPOoVp4tJmS9JF~f
z1Lc?!OLb+3ifAn6M0sWyVlXU7dGM2_r}QyY;Hbg{6>7N8Lmh{=;!raVS@+Z8ZF3A)
zV4@c+Hd$mpX9-<V#6K}hwKBL{XR@`3zW_l|9-3jdWK-#DD*tP!Z5g$fUvj_N-Tp!{
ztJ=5ddTupLUHD<O>r^OLn;o^A;a!e964{0>N}<T<r7TN-N-o^MUBzCI76PqSGcUcE
zaX6A>-;T{P4e+C+`{n_3lBOF{nRC&66sgBK)X$)!*D|c1qK$~~g?Xg`q7f`<3RT`D
zuvHHR?7e%(>cZ(zosyT53LgSjH-=>8NDEVOEL!lU!>sVRisnr1mb4fedv3lHL^7*z
zt}i57-Z#TrM+Wi@SEb|fHI5iXo+$EYQ&qXox%yKI5H$#;_jJ2oVTn{G1n91mjHw(m
z$pDIS00lCK6`N#|Px*M%#SALJRqzifJTIQnQ$tC#inuaW3paNuGhl)3SLn7seM!wc
zOUe{m<el$fe<Jl%`r$O-$>>b0g%h=YH5W-H^7o#+-Z7O4>#P1!5dO~E=FMYnx4ren
z`>@$+ENqSI#SbNOa;l{>D~F?E6o^qMbi)D%3b5zllOA3Q13ue*%g>m$eJTPw!7day
z#oxi(AzG_$RfG;~PXE5z-|Nf%FR`0u+@U7of`K@cF88@dXTq;A%Wa|y8{AD43<MnT
zLt|P%r$QmU=OPy_+Bt`2u<v|PK`?)NBF-yrxk*@7+pkFci<zLLhsi=%8k%h{A}It~
zP(rQ~Rlu7G6fdVo9zseg8xm2`n!z7t#G%LrOq+$G>E=G{K_+o@hv;`nDYWz86s<CB
zKio8U#Sh-Y^~`Et0W&fagIxN}6>YT8hp*1!d6?xrU3VO%uCtDJa55ptfEFNN(+r&D
zi&bLTnTbG3N3;x~UcmbJd1nl=;nJ3>;n0cv?<MI4+%%3VB~G@WzE)pE2UsB4T$teF
zXe+^qbqrXCB~T#<MLC~H=ygcs2;Xj%E+j!rUs-dmNWWj{Tkvh2D=>?`_yU=C6*4_E
z-F9Qm0!GWX;i5K3PZ#A=Q;c&5!{Y9^eB?l+kN99yb@&f$XNQ^hR>j4PiIK(U$Y;Yq
z{||&RRwMPp!|L@*HTwhb&e&238uYZ2$eT(@Eg5N=EGP35j<7FHO0nw7YGn^Z_^9zk
zjrE|{xjH<L3<H~C2rmcx{XGCGlq61DK5oJR^}>YIuHAXJQh}STVG2PjXNq!T-5v1a
z50s32G^d(TWd5xah#2uT)sX$`TN1F?BxZ`pENAhuTGFI8QQ!ecohmuLGUDV?iV)_A
z+S!HQm;>Z|0t2`fA$#C6xK@P413MvlX|X5Ut6_;GpOpbYQhVUE?(IXLmHT?%zwR{V
ztMsYB@zNi|8Ws2!XSfAL-0ZP0-vwkSd?A2sVKITzWCDM{d~LEUW3nk4<1TfinEAZo
z7yIB3338{sk8=Hl_H$#IklPbzW-$`Se~59~$*#PsoZ8&V8|8HbP5dt^V_PBu#lPAh
z+BirZWg**|HycC1Ohm9brN{g2bEfxUS6dNQ!dkkIPhD9<%;3-nlok-iF;3A{aJL(e
zBhIn|vUlUIhzR=9y;0y=!ZbH54ox{TH^j#}fq$^qlv>-dOq7)~Wclz{u6Y!CN<3<%
z@&kpu#+#<wXa}3Dp_d{Q=S@gApNG`6(^%=)71~E%(;@iy_GSo02qX}RY|+(9LogYQ
z{hU)Y5Y?%pa~v62Dw89^M^4y?y~}!k!8`H5j|VKxe%psDg$5~m*o4Y6r=^gJYru00
z*=sNlH?zio$x@q$z;8Y~VP0CuEX!0SPXrErTJNXkg=-zPEBK2@5o@!EMGgF7e{e$x
zH`arfU+MB0J+O8a^DLUSua210WenE>S2Q|j!R1RpnOd;49!1Eh!(apKZ`Rd20+f$V
z*0VF9MQiw5i$s(nsQh7fzD>Kkw-F9k!=L%?!zfKvlqw|~&gq3BvW1$Q4tA=vhmnd?
zD$o|GYWa^3p2^9GS^SD~L6nN}BB5*ME!jacZC!<O8n`PpOU+MAF|3>VWeMq*pePI=
zU;TIOk+DR0_cb$J-h~J)mBV`Ps%tClYcw&7Q<ZXE`kX>=YW1vsa9%GOfO7!LbyBXT
zj1<F*iMhc)eiS<ii(FqINWBw=@F}9GOgQLvVph>O1w>-WaQ)4-eE=FMq=LNhI?t#b
zbg^w`|Ejf7(<JPV%i(itnGeIcr-QB1-BD;vdu%iCcdL-ZUZ>cHQzmotJu{x+iDWFd
z^{Z^G|HweV-QcX7FiBh|UILP+QsP#&K$hBl^9cMel*H{j($kCjJgXw(I{j|w(}8N)
zy%Vb&tD#5>BpK)aA6bMe${Ss2Yk@nz>8Mrk>b(_Upq)%vz}hqV5M`pe>82c`I}9Y3
zIr<5ALe1|!m1rJBSD|CLI(Lnd_A&VnBs1?))l^pjXE=;K8Op$-LBegcphN+P1km1%
zl&C`KpskvhSi&PlKSa)}5*;nmIDU6^HBQTkIu5cU+5jDw;}pu{V})o97pq|<F+BL4
z1$a|P(!_$(9EFyYGJYvnRH68LwRW3}C~oUM^JnuJ1*G<FC3QI5-)<QAsW|)Sg(Z>R
zV%nuxGOA<CKA@^`)?s;na|`;kh}ouI=zxj?md{|zE5!B<%!X0Nm28?qiXn4hZtX0=
zbQ>fq7lEgpV-9on(Aq5M96CM_<&!^nz4CRASaufHRU89Ku+9It%W%Viss0bSk!4yS
zfR+F$q{S`XF<!I2AB<hf*DNBln~dTqRJ_}^%FPw}LH$?X`|E-1!&U+f-KZ%gfwA==
zDd%6_qRPtkfpBHou#GlGhXB24IW_`U4`T{N)NMU>DuX%}vqZ64h*LnICBJYcBPnr@
zfjh<}Tc|}j-fb<#Kat*B4g}pGQUn+C-EbI<1b-$*Xemg^;iC`5YUwvu#P8RlcyLtH
zd#(+f?n$cLwiM?NDL&3Oz3n|Mdyy|;EjYsm;NKTfjI0&|FuS1NnpR{AhhB!!#<^|-
z)naz+-Ps+~l;rYSU#AJ~>oRCl4&xvyy`dSx3M6*>oZ!w<NZ5ZpwV-l#L~yUn&q<XH
zjo(Qh&RJ{B$1>o`!ag`MQf!+j{p@Mh=-?NRX-1mBtr*IivsK7K#2f-7io)5D&IsKt
zOe96_#H|^~Ns-CxmZRL3q5gSm$GBLAqva4D6W|h%O1HEZHT@3EXVAQWi{o@J`Nr(T
zhf}NeoUH2b0~)JE?wmMctXbKpr9U)Si84tNO;m<F9-Fu8MkaaE!Zb00P<-XQW22|C
z=`9V5h%3^a=5@am@e!mX?TVf5xob!5aXA;|g?M!<?kTCh_fkd#`$9>3`VH4;dt$@S
zA#&L5d__PW!ZlFz>}NuI8;b(Za!w7cQtRS}lXW6+2oik|M$#2cVwOFzk;d3%^>7F*
zT%S4v`5BQK1$rn5&~1`eo$=jU@-7HfMm|$zs01M&0!a^}Dr>gUdv#Shj~R8EooJS?
z96e4GC(u8VL6eh|IjT`WT*bo6ZDfUYSTeq1q5sI|cPp?vvgJqmkwLs2XSGy|CJC@9
z#jKW*mNNF_`N^(>gedwipRz810O6#s#JVtXAj%!p+}?qPX{GhPOuJdpxg_Ejac=S5
zT>M0?^k@-refn6Sk5<@`+sJ)F_I>s{j?L#|jD;$+@|-|WfJimgx<$!Yi~V)cDAp`B
z`1(Hce_xr_qGS15E#|W>2By4-8}=N=kqm!Yc0{Xamh+dHdt}j~e|0~Xl0Xn5;{SKt
z+KmHg|NjJ5`2Ht7+Z9I|^2B5Mw)vhkc>mWH@_%h1|JN4s|0i2WW&<!Tg2Y~4FFmto
zdTZEt)IA~ZpLYH3bc6Q!nv}^O(0f=d`!?!iqA+@|wD8G^h6#SK<rTw255V{I!J^B~
zN3?pxl?N)pKHvMoEHxE=S#)FC=;3GX28})amy3`U*FPB@NWB9dMcGpr{Kra!LRti~
zXIjbck)%CDWg?4#Pf*z4>)VNujEEt*M=t`9h%GXW?lCN3`O2<UR4HcijO)NBsTaGQ
z`>wCm{$-8H-ZrNf5e!;fUAF6jQaa5uKY{m|mE5E>;OK}SjcOmoP}KA*FTWQ-oSjc{
z?eEA&>w3eqa`G)lrS)hVxg(i)=perfgn6JNyxSCTd&E=GGHQg$$z(YM(;~^AQLc?K
zF)+P7x@A0dCleK;m2|JK!rTseFIu`>hwQ=P<Oy@Icw5(HWEc9RhCT*aZ$$G~$U7$t
z*xAS1KVxtC*Z%g)(Z9t7Emyp$WAuodO||)aIFvAC3=VE0dM94xG>YU<<ITB43M}2m
z7ZU^gw8!r_y|LrSl*)V;qQ+xK<pNJ%KX4lTNDwNpnq~-7Q_`jFg@ThDT9kmr(G$2-
zz8pb*7r(8Gp3H4|t(AwZacmYvvsgWHzAjNtdfJ9N?&ccSq28<7qmg2vOToEq!v+L=
zX&d<RD8wwmG@sf?@>PzBi`mqt<N3N=PY@h&@$;RH4C6d;vip?&&>Nn@dGn0ruezuT
zeXNYV4d$7fN}_9$xSQ9H>G|{^M9_O99zC=r#j<eVJa|?8W;&gw=ExyO6pcGbHG>_G
z?2^NLW2!R7HsqQz-4Fb~Y=u1@(ki3|8=_&1&(sliP`)o9nEuClsFAdgXWFOxB_!=g
zRPb!iwRU-BaZD_Sw$mOB=s(8lJLE){H__edgVXa~xc3tt;o$S{6xv2T)0|=LQ*X@%
z95oXbbb1l_(cSnw;h#|`B-HtsrH-Q<t?@7L7IbN0Oy7QSbs4y);I2rH_6BDeb_bJ#
z&oHG`r(nuuznlirUQJaQ^Ah3>bl7eZ5$A*MI0WwHzm<!>Ffs1-(d1e3DoA4%n)U|`
zgx>$!Pi~KrM|EW}>S*3lWh8mQ7PLqc*5moN9ho&VKM}-Xhedtf#a5H%f9Tb9{5ihI
z4DufAXs*>D7CyUO73fx4AMWe0YoQ7+z9Z9xe3W6_NX1h6Rh&&hD=Zp?S{F7^lFkI{
zz5hxg>9D4WDmBdDF${%#;47Q4w{1$zsF=`Cg(Oktin)z^p12D~h4^4wY<aA{1-O1C
z@sj?72Dh3B`immg7|V>#xR+{0-@|0wyqL~T5;?G1%U5-DE9|Y+ih2q9iWxa7WOl*(
zUey-m9m)z+dPQ@`NGY3O0|6GWb;w<Sl|Pv5N6tag0%A~*8~{^z?BDL|<~9iLfxOpm
zaq=T2A;r{qdY??UtDI%101u|>AVuvt@yCB^XWKed9PqteHA^-cYnR#RS?TVvXBggG
zYT3bu7kbRCC_WZTyz5uiUK~17@Wo!Ga)xgC=K0b*7nMgP&FTc@i%5Ts=GI-l;*rOT
zjP^c<QrdP?JRvxGQ*@5k2K>-mHq#q8BtgfW5#y(>(HzyFYG}yRz(Z?x@^)ne_D`S)
zF#g=@#xB0LfR_NN#h3LR`)o9{l)YwB@j|3w1dupeYI#JitdN1lkMpBu2|^X?Jk8()
zEXflwY4;#1(Gw_nr&szO<2oA`1^D?|%`nY!_GZ<NRIUkFGr2{}8^o_Ysmp1TdR&R7
zL6#pPD=`O~eTa3C`f-juYJw+`MgiZk@;|Jd4ev;m0`SG~%Mg6EQJl4gw2bi6mNtv`
z+-C%;2^pQ0uwionAt1XQVOI42&+c_3q(TAv|K`iWYljDxd{&`U&qyHOnb}B18<5Jd
zk4KH*m%K`6lgHuTkLGNWzCn#?bk*IHE?#oZyv$7}s?xzWP=i=B9sa%BSt}_>uP5JY
z)<`3U|I)5I0ilk_zKH*;=&U5Dd2W}*0-huep^oi+vqI?pF|ueX=GQx%@Of!#*8x2C
zv5}DM3u&0NE7*v_w`PWDm?OTn#Sms^lta{Vyn`d#58V&@ufpF8+mYhV4y>6-?lB26
zCz*v~Sqc$~_l{hE&7fgpp&Mgq?MDs`I8hB&z#s(k`h<!F$D|dR7+Kyb3d~7yF{&zn
zYObXbS!|Iy@qk$#4h-5cjsmVDvk2;*8>pY4DsT9Y=-<<mB1y}^jUqobgqj|+PGMFp
znpa&NVY;Pw8-OCN1lw%1Az`Gi(b41B>|6vIZ;W+VQdz;EyLb{K0m;t+c>=7oO*V(Q
zNHjZQgCl};#J_(VKlP;$AqX!v7-9B{le3Rh=JV{S4liqTp%BDo!kGx6ULWc)lvei+
zzc15X4=!=#v(q(suDOLfWPk3ifcHRs%RY+w!3~RX&0pgal^M=5o7}kg)5v)4Ga$^m
zkr}89R7i~c8C31R@eVji1V8q5av5g25rQ#&Hc18{_HAcV;XtO&81?ZRMB#JXeD31p
zVzUVy`sETDBbkfFm`{JnwAB*PLE~1cZi_hu1-*k0WJ&1IzRurc_?3ws<0t<n=wxmt
z@G1VgG0u(?0=EYkxk!czdwE}p-Ibxl#(O~J#y{`?FOZZb;%1O4MHWFJTiZv1<OW6*
z%WnD@+iSm%_l;@MF<mQ%<hQDZU5r%vE6ZSy+V~{&fC>RZ8)E2`EGLD@U5q8oWlnhq
zElAO)>%*FOi>>R~2-T0iyaU%&Fy#6RRKKSBhlIDq*i09l|6p#8Q$Hd-l}6pv>IU^v
zvHK>t>4F@@9VIG_>eJUEPg8Qz9%W`yDYq$(yy`(mn2s|Wpyodd$g3C}*bP|&)Tlmk
zfeBsKJ4cR=T1g=gr)wHj3>PIMr{Ov?5UlLucPo**awl}fdxZpeqV|yI!@G@8Qw$?N
zlSs^m`fC$&Qz_lefUK3|!)=6l7=diMh8};e%pM>YoUNwQk2hY>2o5h+Q4$3&ep)8*
z8qg87k9c}5Yj0B;n6RLHj`r@mH!NVJ<a{8~rrsv?F8>L^sy%&sas<{h&YUqP?Q1RL
zdeJYE9|ohh`ieMgq@t$M{7@+KpFE`9iU=?imMoX_(RCNqdMpTS<4v;z%ZYWyDVMFA
zoY7U7MiX)<!FT2ajPgzpuC7i}X<d?`UquW&Ycq1s*P5tgO%rgi`Oz221|MiO<dJ0g
zFiD%G^-5&h%g^PR<{HRT2`vLsS4(J545iU+Ddh(?dUWkFO=R8(`CBa7qr_h#Wd!f*
z19|#TxVR8vds;&p3&i?tP$RwX<;I5e(Om)9Oo9R>W7zE-ro(QLjXue<$Any=pT>fg
z5acvLH5FQ}^~sMN){7ns3^En#OBtRewz7`eHu*De4oFnvfmL}gBv<ox`V%+(=*&a<
z=>xf!&w7QlZ=k#foPIRH8SD?iqC<_;%;jlJr}s53S+6?fu|D(sTA*ATMAW+2zj{0_
z?Se-WH5G|5DO16;I>xWh*34u}DaPi@I{D!CDb`?fP#u8hMo|ae*;bP>Ay|4FN@QLl
zkK3^s&-wcVln8a-2X)^O4Z>2~^|UxDSNr1MkL_79^}_)n*t@cA)4~1~!CNXRY!||X
zd)i3z?vTZEW&2JTr4Hw)SI(&1#nzZIiz4?h_{{=k68+MBYnE%1yjpXdB($Ir4}G<u
zDpD)rj?jz_AU#65KN?EJQDlJ-WR<d{X}-bASgk9xmn3NJblIeD^1a-;N_xK*6Qccm
zXW!Ei#5D&?;K(mV)DjiH?1aSa`*q9}nbx0p2b0irB#o97!L3Jjm*^*XNkrpEl6C$g
zxDitxSGbW!xmAao6qm#|ucY3r&R~c_&Sq_8y?Na%{qMyxbk$}ErdEWg68vr<<(xM(
zpV$3I8IXL0dA(KSfq_>XKOvq^QV|PlXgx>$tlxIIeK9<GX-rPAnO-4<X$`ac2R9X|
z;vTs|xp0R=f0v=W-bM9&Q)6B=G~VuOoXI-wd9YYU78_GITZ=m)t42hJZINA<XGDf~
z^2+O&d~fnCTJ!-0{KBhF#Kg||fD>~FQ<~ibHQm-4cK(}o6MS-~GIF$j+fEdyQIJ6Q
zaZ`>*w$$>aII1-*O_WG*6}~HCZ9j!{^L1yh!}b$lNRlkI@9uv+!dg9TaQ#cd(+m0I
zlJt`nF^%6ATq-~(R7%mvfnjj)1erTh1C21Muu03nEw3=p)UfCuQK1F@vb1?1;kyFC
zNsUC}0zw)d>l#m-xCt6{;$bI{DlziRgU~ymwL{EWn^c5ADa)XuBJOU;^!@xG1ju=Y
zPbhgK09ZV60QU+j5n~V;Wcz4qi>Wz%R&XjmraM%RP&c}94x@wox-K=X{9KNjife^$
z`9!NezCwKog_r@03rppr>^JcHiQdwJ1XpVYCO<Ag!GK6V#ZFwbeN0?l?(z^Av5jY%
zKtNUs<Kzn5Xc(21vplZ-a#5)6xu$JVu8wNz7&tx+3CDg)tYAIIFL~vx&7abhd;XO<
zOczUsAc143T`RnwI=1XKS<Gu@$&TvR!==KHTki)|9r<QwPGAatGQfLQ>n>z)C0=sA
zrj++x-Y=l!F_v0+FCBs3dkVdBQB2Gr&d9YQ%9DW}%IT)ea7s&XdjF2g3>YBv@HirF
z*8Fw5(Hc+m_2$$93Z?ow>zjvvHmTQ;`g*10VwRxgs#;aZ)bjcm*Z3WD(Dpffv@D+Y
zuXU2{KiYf-W?iRlWX?Lrj`_4nZvDLp1;=cw(#Zkb_sh==+t**axQqx<V9%RQUjO=(
z#HO5qwp@lrvbn5P#pnG>nZ@2rFKs2=C~}R4oz7+t1Y2i@UJ{e-dlJ_0PM2^xCq#yz
z{koJ-WxK8+wtTGsSARaMpHF^&6a!w~&&K|b@Vo43<Tit!WLN^Fn*k`@7XnuA8_9Cq
z9=Jzvy@<l%mTaK?qsV2nrb3<d)n|=dDvzIkh_)Ubr->BceLm8W5NC!<;s<`-W_4C<
zI8|ETaL)PLj?p-S1Usj<09+zt-M|PY=Ct@8821Ed*sZMABLB!R!Gr3kd0r4(ME$AH
zzg{ZK=orHPtv=U^d?WUba)p?cg4@g-t0k`ICnK?u;%LgJFFrKMXPF=jgu#J(G>tDF
zzNi?;nK&WQc#<hF>sI>2X&NV>5}$LQx>5!icvL>w<UbMsd9O4yE8s<JKf`vgzuRSz
z+E;JCr-){8W~Kl_z1RTJa@x&J=~ky`{vZ`p(VZScZcbo|>Fx`o$h(K;CsJ)7wP%nk
zhY@mc7)`6gJ+5u67`jmjd<^OS^p4Q%Q(-vX@KQjwM}2Q~QEZ9W^BM1Y-<4Y3#kMwc
zX`2Vn!5ja^0|VS7;}7Hi0Vct(s-sw0$m}5>F!fPFyoL^$w2Cum^*Tnjj&4gSw`A-5
zTa4X^zU(s+eFeFnPtKx0QyN|B+|zlsiq+uJxD=<dB}|P9ZA7)Xfxp}mipnY|uql6`
zybD1~vob05RW|`l>s&Y-ZnE*P69?%i5NVU>Z2R<&7Gm)Yx3ZA!ie->M{dRm7!TmhK
zH@{UW)oCaCeu)Y3C}Hr^X#7p}_jeL|b<QLjzqzx(Ls!mKUU&@0)Q>3Xiyqild*hW+
zfdk2q1@Ow+e=y_$Bo4>tBfMM?u%n>`%RK@oHGIku^IqaOH-RV|Ju|U<T31R9R)&JC
zaj;cQ4qHHBhbO-l1}G&(e-`};`zjwymz+{Nz@61$BZfzK%Ei()Xfs7g>@Puq4+DG7
z?x~*nBXA37+$6mKECoVH%l&8QUQz%8VF0|~&%VS6R`WS<`LPsR)z%Wfssv9Hb0j(N
zMN<26)76L+lA1RGy8!rd7S4WoVgztY*=9i>nebZ|uVJOo+!3@c*I*gqCwmtUhN1&0
zHn0wU!D_1MzIu~f6+EG)6aCkn0f?|>;Qqv&(MTe4H*PmjQ{$Pm4>_&bAvg^o8}Sjc
zIbs?BGc<tyY_i^Y@#<1*1h}ZsirV{-M+bbe>0Qb@D{as`;@_t5vt&>lN7YwS5Z2e(
z)aMUUftVeBfxnSa4l>&)yyo;_A80I~4|fD*?y|N0ablkwk()}K)q{_6Zc@A&+XD`R
zlpRp^mgvOB{^6A}$cnP(BeCI|plO3NuIUtur>2oxLe}()5R9J;QlHz=uV9!>zO3_L
z?RH2z!Unj52#*3@GmP#~9wANiI?7jTFr^>TX!CnPkECN0t`qqFYfwu;12;73Jfjtn
z6@3V%IDGi=g@~!3*`!&H;kFce>Q2PWC!3q4>O0=1y$b8Im>>2y6U&^tvmbVyzmxd6
zf!RZ+62*B14D12IxcTeCqzlTK{d5B&hT!0Gs|l7PF0tiQ|1dnY3aRc&9m=Me{o=GR
zKBOrKqKe&LnhmGJaW)w)Y49S1R8}Qz%9%`Gs#4F!$g~q3U<3Prz&22QX(Ni2wY;-=
zg2fw=vR)i4C-edFOCit68skr?56dAipYu+7Fe3yFN2H|s@X>L!9CdT3jXz!)!rQ9v
z+NH+ig5@Oa&iS9WBg<+KpfRXrd(go=^Fo~(F<3@pXP;P=y10G6vKPx-KdpkuwMI4V
z>!-H{w((Ib)+GtiPF^)c&qR4O@+esW1;yPFya>gj08D`fQ&a&x@Q8z&ouB$HsfAoh
z;e8(`Uwq{n^UVD>->+Ec$AlzS-R-bUQ7r1u)M@W5&JHl;f3bH?Tf!(&cWv9YZQHi(
z?yqgzwr$(CZQHiZoH3GI=K=CRLEY7;U3<>8isSp|!`DQA$z88o5w=3>)=_)8{Lpnx
zwzMv8Lj=H+1fZX1l#jd`>Yt2S;ayM9-@PGX;NrJc$k%l+E-?g=&cC%1)WS_cdigGF
ze?0B-EF2bS%x8vhTEQS-zQ)q?+VaNeahaDxf6Bnh%v63+;&?uhgc1_~WeuArJei`)
zBwAg+94N^b{UQti0(xpb4pvo{XZIB1-nG+Avv^X`K@rJUaNkzfaGRq@(?gpPBEk3Y
z*YckOo2ot)G|`7vtAv7?iprYVC^kn>HpyoAx^z?_4$jD>v4_Y64+U3TO-m~&lF!TN
zsmIKuHyownf0oYDOc&ZSjb`f>LgfV$oqg4Buj|Ouyo2kv7W#>vZqA>SCTLgtxl?9#
za)@5K2JWLDHwAxJI*w|n-H#apZpZU-QPBulg59n;KmZhEX@;dfW_-WUR+JJLB@6oN
zxbUd4WmdY#uUssued-ruNsu>N?lfVZq~7+BO@5ZvBOlBqh;|tI#5xCX!uKLcTFE+S
zAHcHmue`$M!xu*%UA5;w%dsoTj{hSBMu>cl;8}D6P2wg|0O^%u{VvHp<${niZC4M^
zYV{EXz5@wYSHk3N$1vS(l`Vg*0~7v9{A@KSB%GA%FbW*keHD3nms~N+Y8Y^%kNRGW
z8G#FC11&CAy?a%(V)Vr&Z-Q*}@la1jBA>Z<#~KG6{QLAxdqlFKay6?Ah9K;_(6nH}
z!Zux9_x}?2UjorK65VbKG&8Ebr@88>q$EXP^h=YWajMni>l@Z_uw+?Hygc_@TU**`
zdJqcS40DRhH-es>cI(QY4q$&Aeq^yU>C^E)AA7mTjY?1$E4{c}R{4jmh5#=Xe8j^5
zn*+TFFQmJux)%EF+OSJ=-EC~$p|5zR6%!(e%g4>RHA#}g9B%yGb^G*Oc}(L-Y}0M1
z8`sCrBtWS*OQ5{69U}RAE~)!pbtbX0n4_o*bbAP^+_7=5f48poL18e;X8J9mR6c$B
zKH?EfCX83R+l1x!R54O6?j(GQH6gvcMWpz?Wr}lWlr}>c&*6`;Dmu5C$L(Imh%Yas
zWSOQ<Bqu<NLfz{1Dxwf*Oar3?tyJ1GKJQg&|Drlg@tJgyXq2^d>WyS04>g(?hU)1U
zjaush<Vv}^Q>}OV@5>N3FL!>c)=~woTASjA67rYB?0^U-+)^~EvR+g%UI+e%PlYm`
z<*V3!KMBXEOsQH2G{svpi4bQEO%|Kkf!u<=2$Pggp+6;o1gALTAa<oI`wCwkR^H(o
zv)LDO<<4Y%+#Pn(S`gmE0us^WKZeRWjc3y_Vim<uFK8<`SAIHOSLSQ+1U%_1;ql1Y
z<gP&&QUoie`v)#{H#DHk=YB2QXxM{1Wbh$7j%-@7R#IPm2)gUjuAZqYu?9k@@->7V
zxK0MN@@%mA%E%jhKtVsw$c2e>l%RXlN_2-cjvze|V^qYSBw2yP3|D)*6C2J0p9l9Y
zW|D$)el+3cSD5IOcv7<w9wA`Jw*G5{QocGqn>GNTL2gpuS}H}LH(`<+W!8k13xr+d
z{J*~i`RHC-V3FFv5&&=~Y)<MY+}>eGUY9%Wpec@Y7?^7>)=>CA&&vw<)!Wd@;0nA2
z1b$&KzllcQG}=@yzDBV2R1kpaQE*+v!3~UYOlp8XV_8!d+GO_1_AD~uD)(=Fap~lc
zIl;b09aZLu>3>O}0}$y6;M?}!6)AWaid5^7zF^gISv+ovzRI2sMmO7v3Kj5=vo3DO
zkCw9)x@WW^3aJM!W_zCb4t!Xnuw#SfF<(1rh93)296Zn^Wq0MiQX{g4-$stCIw5ng
z4*qS0PK7QohN$G^qkE{(3^2W!6Rb7(+v$C>b=dL_HN%tCIEkUZZBRy6qY?kq57|YZ
z%30k75fMyO{Qiyhy#`X@UI*3@+2!M}fA1SSKL)kGJx$by7p!tn47!?pnh*SUvrK<Z
z>%`OS@*SXK*uwvWLO9tj_%3kf>Xuk90QEi#?F?5orXmI&)4nX56;{e2YW5UvijGh{
zj>0AS&6lDY2gT=kOjFg!^v*9$npJSUSTHUQSZc}7;Dl6aQbeTZZplXa!RLsuN|URg
z{KlpNE&^Kpf^r%u;GTT%7EC_iFVuHF5@xP;%=rED>p5ma?`*`es~DeGU}2buMBJ>5
zK@sbVZkuCxYX%-J3l;!w=MCjWoG(Y4hwE^XSCbgOsfkG!ud1gE4#C1*)-!MEIbJ6H
z6vNVKt`O~-74kX<5L<F9X3yH^l5N&7bl0AAmc7fFMUEL5lV06+KZ5hGuo#XFVOphE
zu6KzXQjdCm=KP5)iCAOWOU;9Yx2=rqCRJb)O&0(qY^GjkJg!XAvyT>8&LvMSLiq~i
zt~P0xluo~T!}W=v<!2wKljI}s8ZJzn!8qwDel}q4;K~Tl0t6oPpBz~rw1!T4{c{=v
zeP?<GUwoV7kQl@M9L5)y3P*Au(!=WQ&?Qz0qwl@y7)>AjVDcu(TZ{v^VHPDH-By1^
z)fD`amVIS!&hWV0nr<0Pwbh_bD?HcW)+@?Ev0I5YcaFNA%`F{9SQmV-m&L~&ikxwL
z<3nccL$D^{Csul`w0t<w-n9I^59~1iPU0+_;>YT@Vkj1L(NyNS3n%?ESh<C(eE_>B
z-JqP`6PC*qnFBeJKTv<|6DCvC#0Vsv2OtJNM`_N`nL}%TVLBr^S-@2sDWdjh0?z5H
zX`{INZ|_m`aNYk>PnWX4eBb{R0Yyu|fo)f-wTVPxi?}y!y79j4lXWGsc~R<}?9I>@
zwH8f)%8wykm9w|+t;?8}uyo6O*Gr0iv&97K?dQfZP8eWgmS(}VU*tQ<zm?N*%(G)%
z6M1C(FkHC&$ORwikSQ?NIW%dwJR!x_X1MCs%*5FxOie3jUk1UAX<0-gn(a#!Y-Zaw
zQ&pPS<;a=R;+FPhfNo~;VRJL)66EfN5*ao11!)9DVeo{0hffD+USB3{99gBp#lV@J
zj)p~0>SE|O;(kH=R1?KK(2@N72mpP?rPV~A)hUaY67ipxu@o9;*Gq5ga@08l5-}`!
zo*25&pA=DNZoi)!gBR19u}7U-*ma?6jOw%+BFSg#n<dOc71`Tb_s>$eUprM}z7`qe
zBrq=~a2m&k2Qb0NCHKhcSLB<nQ<7hN%V#oW3Q#_}`BqT3wzr$|>H4~=06uf7mkhxk
zP<N`x_c5nDXUj-pFvr?g`8gq>n_nFt4`M1N);VMR3_iuf!iebmpMM%<FS4T-YM9k6
z)Y~S$1kBa5XUWxxwm`>s+1PF|L4X?Sp%|t|x@`;5Q$Jk_9<^(@!_KP&@0ckx>N#qU
z0bq^le$c*RWgz<J;FXO_uBLPVu`c|L2=`NR;8pO!TAB-!sB+q^$gMT}&VP}%u7BiR
zdP57&i>h33a|W#N>Qf7O$gyp}9MUpn7-`3Qb`n-iJIR9n1=zFoA#SS(3IJ2X^KTh=
zQX~aNU#`H?)1GFCLIPkJB{_H%1t|dw3Ha!4cEtFkG`Uo(-e*eeZip08=5tvPH&5U_
z(dD=XREdxLAd{s`-1!})hbXDo(@$18TY2~B7VI8&TEtj!gBXkf8;b|{!2<+c?uA)8
z6Pot#hb=PKWF!4;XfbJ$7(62y8A+ELE(3)>M)pr4>5dV^>T!wVx#S>jhp9ys$@5q4
zm(M?K#DnSF$;50M(hH{P6tbct$vHj6W8(RiD>}A5_9-1YC%WSzK<tvJ#KAwiukWV<
ziVHr0Vqd14veRDPynxCXf-KOtiKE?}pOzC{)`k&l3tz0=ZV(5z_@~lCtv=K#L6Wq3
zt)Xxq3ychk<II@g&v~<EbL|BJNmK`@`Uc7Ayn%&K_?xO1N=vzMT8UFIVMrryN4=*O
zpLIQ4@-z;+pG|VT$eUh|F?^90sqQ&RXED85&<V{P9l9kZsV&Yi96<Q@8jzZ*`d^8~
zI-B^%-$UU2rTY#0@qQHKEZ#2IvGx^@OZ$xPRC)Igq3@=V>&k12KSN-)?M!sK=!!T0
znbnKkTZl1Mc$Mcb^a_5XcuXb-ebY%k79P6I=K~A<Z^U^GEJf-^7hu5HNNatdOiHn%
zg{R1&JVPTZZ^7HpsqTp+_pajb2YL^ok8DAGHWgR~qn<*zxa($Gk-B$Ow0pgkaS!FQ
zq-w8W!Y!V5KI=A?BoSz!Q*Ma8sei^mvQWF`qWN2>cgPF8UwnET1)*;PYYkPhsCMKg
z@~RlPg9utz4<+Hz&yD22Nm+cpyG|5yEm=_ccBw4}*6P(F4nto}TGsAWGq1smWZvPo
zkK?l5ek0NJ|1fcoJJlzXGwdKTEoN`t@*yXXPD<R#tE_D`FKx&Q0Hx}P`Z<mk;B*oO
z9&Z?rMxH0dx02#|peBq(15ZwiZ-WC&7KNVR*Hl`S`oRo-D!4P8^3kx&A(0K*GwkVv
z=_0>iA&HBs@|jwn#xXXUG0r$arSD+uFQH`uYeT!>-FLFVx%B_8P+4Mvs`j`6^7j!u
zLN>_^&FTiqKOAhlgu_db%&4#88X`^wo8kr!3>q|Lz+mJU#WGN+R?S(YMA+j|ulbG^
zkrz420nx&snq6M-hw^onv3kQ|#NoH``H~QRT?M1_DXN@js7ub+g)P&Zo@Db(o#zR=
zxgCM38jSmlAd!a3)Susr(VJmgxqgK9>P+<tc;ES2fg><?j<rxP-lUybpmz%_X&-De
zGg`$?e-`MB7dkTT$7Dki`{+$oe@*`?Pl_>6VdM(yJ9Vy=9w*$xugi?Pp}<7(xvFvI
zy6Jx!d!|9{hElGQ2_ZAWKNJY411_2*8e1~q%6}1zcXZ2NSd-`!Ui!|&HZ0L2YekgX
zf8B#K6L#4p+wwenv(+nN-dakWx=3IlK-OE3Z(Ka><Jx6oERGs=N2mqh2iZgw0d`Dj
zf?828_U7TV=Iva%9!KOz?7Ym;vV&Zaad7r5|541&x|(-5SG@6mHL&G^VW@T$O&u&^
zyhK^WI9@wqm}}~srH0zDl_-oCOs|$vZJkwY*|DkS6JLxJjQT*DBl&Up;3!4x>0CZ3
ztvl;@o|!c$4Y5?+gWvTs_mRtE({faQIOFi4aobPVC#LJqVP@A)7NRpz5-3%;HFjtw
zqub!W=6u5jxD|qaE!&+(CUauhcyCjKqzG_{<7LE~H(fO1zWMy;;ezr{GOa+G7!~0$
zD5r~&tsY~K+>LwVbS!JWQ<Z_n-XK|J%vRuA<y1<+q~C*(YxB(~m*@+dp~iWV)-wrT
z@&6DUMZluB?I`&u&rEdQ8nFK<^MRXaD0MHi2^1ES6MlM@he|5SSn+vx>ST-=u9_^E
z-v-vP#2{ZKaR)DiqP7{@(CZ3;9NE^bH9Ibm)s`-KOtln^S|}d5)cftxG6eZ^t&!Bh
z&%6dfW2)lU)E?<PJiBBAm>$yN0ESrObw}X}Na@N8XBHH_Gkwrwmw4JokJ$(j3f7JD
zJT&}pDop-^?rAghMzQhWJkeU7W*T-(&=Y{70E9aqxt*Vg>DwvvlS&Mje;663SM7+b
zxU9;J<7!PqgT1l>&~QMs>p|q`pK`k3P<n2&j5ihj+H&fsTKK)|UveRMxpk6^zXzp4
zsVY$scEjYTJpzLu6iRpy<y#JSN{I|Tph;u>O}l+s$&cR(>RfP=vc*Z%iJFE!3<oyl
zx3uY>vSL-o5LVr#c0F+HbrQ95Q3%U5;Xy{Eogu*VGH6gIf=4mx$%bg!!gX{PfLQl}
zG?pcQmxCGp1u%f!`y0pzc!@=6%~hALHA{wk!hta$@G8nTqtH9q_-{D~%`>zR*cv<t
zD{vxk#wU{SHvP8lC-HPQkLn(xCw(1Rz-T)2%19dvD)u^*HQ<+7>Amb8d7v9qk=Rzx
ztTsgI9?Z8dg6Np+1KaC&K{<>?_(Rz&Y|=*&7GTJQmdA=#PW@ta!#f*qw_f_z&v{ps
z|5OtX7eH`3y%RF6xf<uz$4jbAXR@>@OlDLdlcSdX-|55^d2cm4t@cJP+2LTn1$1b<
z;`SS(d-iPERE}^d2jJ<sOWmIsR*W5RccOja(kN#`ZU8(ii23=SWI4OL7tz@&hm6i-
z2`t9|R*k|d{Re)|+a3EsVrTH727d~C(DlM9Vue>$C;)z74Qo#-nC374FdBYGJL7k_
zP=u_o)(FUru;rX0h3W~MW_;N3TAdHVKBr^K5+n-P^67XAz?#X&%FF6`39ZjSr-NYz
zGe{1>*{y-`7<Of(k<m~xU+r^wU}_wOZCRCmdWc_&$<(`o`uk{MB^h~nu<@;FB)>Dd
zfoIw>=GjDk>|UU=8spfpz9_t2pmy_K5GOonXxthBXb~{&GiyFz&NJ?+9pPVUK7H?a
zDD%`=|0{jUfcoiu4@e&Qr^E6Fdpokl>3oK~#Ny*>LMWvc2;{lm3<4oa4*BKztEXbk
zu@zh5$izFXuaWdJj-C0=lZK1e_1Z5_iRVKhm883TIM%H*B%-Bz1;mndMq#?8G@#w)
zt`B6s=D$*l4mH#}{^uBL>LJ6)d$p6dF7nBw#6Fs(nhM$XJ^R(4^qg)PDob3e_lCj2
zkp~k&DzYp}7l)uBn^i56PS=Wiq0dMx8>suN-f8cxQ$_Z^uGjNL-AaR>TmT;ui{k~#
z_47T<6l%-e?@dY0H%y%-2nB<ajwsP`Y*bgXd_)$nFF50xY>M$Fc3pY@Wfk5&jTkA?
zolK{*z-P(*uMXGE9TFeyOl^0u{1io4TN=FWKD8o`wvSgRrR(hp+4Naj-d*CsSZ<or
zML%;t?1Cv8)ccYU%zVE8m67cb|K+>h<|eU!=42+x?I<JRc?^NVOqjjDkR2pAj$H1A
zH89<N)lJCvUatdmDnj7Du?bETaM;{mTV(crEF^7vy3$4NHpioG3A=CoYmYzN*9+5d
zRaSQEZZh?O!f>sc3MQLa>p|(I{g-U#Bit9ba`qIW>_>b#55|O}CJqX!-<A!No4Qtg
zweol_HmX&UzLb^oxhl~4O9fR4OF72FDzMiadU;&jD3`|}<IN6%(~cg`>@o2tYTnZ^
z(a<>oYDYbtm(bXKCT>kDDxRL3GVl3l^(`#DAGhea!-P`oolK0opHi}3W`&DL`Ne?G
zGhUo$<Q~K0su#G|=ej_Yo>2V$a*1J>D;_IasssC9CSrKvpzYdN;-Ox@^9dJdFJyuZ
zD@5vwd$>6n7yyYP{Ac)yrMlQj>)I;!3)B%XxYmx29ovr=SDqtVe&08XEoNx4t->G*
z42yR0R;neqs`3#i*wI*R>VFyMO5FJ_9F{YvP(lS*8suml(R!E3LLxJL2LH$z2W!hl
z#f2f1wil@ahkaDr{@xEHjv`V;16?v|h2F;AHYm*9(xbW)O3W8wen4Q53pK<eJ7i3b
z1Z<5!fYUmYa~TO)003G}P51ZWxp$xnb~8K(lAMFvt5S}j?X`0d(UuP-&=&KtRv<n;
z@4y2@Og?CcnOIr9ztU!;ie&5=YuZx-E+wJ5wg><%mK9=gB@7yP^LAG6Y5?Iln7>!M
zqH|-@a_z&hN?I$aLV}6NY;qJ4ePzvClL7W$=$Nbh_h{N3@594SGVq~;h3%g$u(P!f
z^UFtkSO}#1kM`}+eqE+e|3S3fB~^+tLeH@i+>c-}AuG(>1Z=#4#aQ)}AeG5U3R?<I
zz@UFmT(HJ|XB1@YvaBb_tad`oku#99W9K-8;0v`L$TgF_%Ko)4x#m~^?S(!hsyUeU
z&>pNf%XsC`tIQNq<9|Z`&d#udDKtcGQH^|L>^{g;KaFcM&}x+lpb)%(^wBi8Pv=aV
z_&5Ww^~xWTc1{(*x<?%u|1&s)g6a@j_QR>`U+p|Y#b3M88DcZ&kJCqF60)8V>91b)
z^!#c?Yc&Uve~?;UcjrZQkc5Td&L+56a2^4LA6i839?!*TdQSi7qpZWY4b?_PJMTjw
zeUfs?d0fz=Q?=50gwRvvvFutHoDi3gVnmF8wh<|1ecj$83f`2YM&#d3Ln~lD!}ee8
z`g~$8TK%z-a-TW5GEi>8TG5sD5*fHmtXA!jx@;^WE!mNz(#Vq78k3`GX_6>ue1a&q
z4ydn{f(OigzpxDg^1f9ZYRx8b!y8iv7={9-__~*_ekOm#H{&DZl-<Pj#0*9DPA^v{
zl?K;Zs@!wr`8&npZR$;i8_QrvUoQ#!m*pT_HNx;%DcN45sMurz>fbOhE6u-12{M%4
zLbpsofiFRt>*oegZiCSl6(JX~FOc0O{B{@LY6cNzAPk|lt&DY(S*77;J*3akAFG(H
z(b>#n<(!oZNhn1sCHV|e<IyPcGqm210t?jqZL*u-@=`?iJ$O;+Z!%&8d>;Rck6U#u
zxmC`r@*yl8k<)8+H)Xs)%fXKgE(EZ(*j^$9Lr%a(QISx<MvOM6cGZxixeM%PolB|)
za?4q;z~I9HEf4ewY740gbr|-tfE(>Mm!chg8a%7V#2_8>xcHKYTOsssS@{9Yx487^
zvt1gTK3B%(0gw+y8wj3H(h3bS_vp%|#07l;{<;elKMC<yhbUCtPfoCGthkIoCknKN
zFtPPo^8NvWwIF^kY9Cf9X`-#`8?hy0^M>tAp)S-;OSO{<OTxSuq@;y_6RAcY-+yJO
z=N8xai_O;<GQsi)Mg0gvhzF!tO{sCRd-QFVo`!8G{n*i{28kauUD3=YId&cAp#L;Q
zs?2`(|5_P@wZH-Y4>HjF0CN$Dmd7wi&SI+NS#3h^^R)Iq772J73?@I%X$A>wAx^TR
zx49eB9@D`)g-bPf!OC;-3p#GO3V5ryA&2eYunOBd)cNH|oePtesXiydd}(4e|2$<B
zNa%Oj38ZG87?<z@e+kQk{-JmCr_~eA2&szQUn*SnCK0zy{GbQulYd<5B7Nwq#G<UM
zgq~ZwYt$3n@my=Mk`+a;z^nUb+>W3Ya&gISwu*kPjE)pY*2o64F2g5=)0bY%^6$WJ
zJ#v5-8~KWh?xY7_iXqwN5ksxIx;1C1L$XH?DUM-n1HK?zF{7l8CeX`G>DH-2RsY{v
zqvxUy>kh12)^Lc*EPV@$ju?{rC?w5$@mt4+TQgNpp7?oz-^5U_TtPixR_=93hzyd2
z{8YyMUIFXvB0N2iX0m0mIwi`t@ijqASlzCvF}ncwb913X4NO>!Hy1L`P8ATFTl^6R
z^mj3F4^X2O-7%4~riv0O*FP8xDY34u$fmc~m50q~_DM}rFS*$T0Le#Yr?q&EZ6Ua~
zHP8cvhq>+EXU*@*>6))1C}Q+42^C#J(8CEt?M+gIL2@Mj4BnQrWzHOGB;oZv9{cXm
z$QgWBgtA7C$UKCnLE>`?B)bZds40$IADD93&zt)%gK%L8koXFW5*T9*n`!4eEf40o
zWG>9$`&!2w+H2~g+yXu%&uuZMmLU^KRnfI50dy#nI&kq3t(-Zx2^WMdGZnVV|3vOb
ziQSYL#kSd(E5AnkA`4p5@O5bV%>>gGoiic#?xHNimw-(Q>2F44=s#*5t*(I|2^+F1
zzP!VdYHR6GRK;`upKGO~LEaux^SU@arHj}?#}qm{Rr`oW+~}jBKVSjWU#-h~iDBVI
zQET#^Axv;7HY*Eg_X;|D%7m!48%`3i1$&pBHghSf&xl#lY5?6IIT8Ja@UyN@UvHbI
z>y8!r*FP@bO$yz$P$adXpYd%36gkHl`028WT|jS)74R4vS1#Xi6Vp78YY&!StFIGf
z5WzCHE8BA>#|VOj7-=T&;6smzCOy@F?c?$CNFC+LJ_(8*wrFB@&nGj#PXY>xkvhgc
z@qSlLT*v^b#uH<e8XpLfGp)TyP1Y`EB|_}fO~e#lIdXE@STxpA4LPu9<FJ(qKV-K5
ztri~8Btd2Vk0V8leSXR}N7z<~xh^gI(r&XV-H5K-WA{If)c-hA|35iWzF6P)sf%xU
z3{15__<-#$2mr|xX4Xh9oR_a(apn*=+qJMmS$&#-xcl$++|p-$ihA=H-FU?}LPEV=
zd2?f@5(&o%kr!YxD+(RQY%_?cg$#&+(<jIV_YkIWcK&*>95`vOw`J-k;}dcTjn~21
zzZXF~N;<k!*_h*d`T*t4|ES01uw6&*UAJ`qatxtP8~0LR<nBB*a)cPou>hIe{RPeY
zB6u4Vb@Gd%=3QE^12eaNtVrmi7I_u;fsfq7(5GxmU6PGrRUDq(nhOBWAT)?Bqec1$
zfR3SyQI#vi48hv9&^^S9{Pt@cp=$+VozK&W8TK|I|CtVC;3Erz#V%?A7?r{+HP=>b
zu&|vl_$l=T*ulG)gL$1g%|8Za*kfbk-N=cEnIi<@qh92pe)RDwA`X48f2K8G^g-<A
z$72zM;cQ$!f*AWU?_we_FvJdbEKVO$X5yKFLi|*9Ejnnt^iIZQb>3J#XAn)jt>rUA
z1?WcS%=@l$$WR@vF`XG_$y=wc4N|#}dfYsljktO&GV-gn3g7-msL_STR&xg3A&+{$
z8lAMoHT8}X(v-aAFqgJ9dD+AQbt3X<_bpw+Ib@iE^e0tXzUim69k#Ai^!~c~GunKa
zTSGZU@37E2A%7!Q;H}QuX5wLSDJgSqW(^35**5R}2so0|HZ&&_R&?P*NT)i9c6N$^
z7cu1<Nths5ELJ>Y#9|ugxkKFl^-5Uj{J_IsbeoMR2O8VWBjyTxjYLxazPn&+<>V89
zB16r%Bq;9K=)<W@HIZ{L2_`4N%Ax+koz@zq-^C*RPM{H&nEtVDw9`bb#Vyq2JEpn6
zU<R<1ELJU3sLJL|LX2Q;ciSchq7z_Evi!+8@2^oJsE1bq^|bRvP?bE6k5h71ox7p2
zQ{Qq3qVB06g_;BCf2Z$o`o7!osBXgpLN$YrBZE&w0Ix0Y`>khyGUyJ9U2V&xz<EL|
zrD`f$J&xL3gnm(zO4S8FgV-wlspc}0bw8>?FL#izq6Cq?cm(5Kj7Hd&o0JOPYoi~k
z#p+Z(baRHXnRueuy2`LHlr_#5aLE0!F@q~cKeC7wN8f%vrKb0BMgtY6^f@}%C5pwG
zI#%3DuJ-PxBjX9nQ+i9a<sgcXFd7LoBbBv)<XDLQt6`$nk(pF$JACa-op%lxMV#az
z$GsY(mcz4R0Mea=)(A4cg7>=76bkCx=*L8_hlTFs1ASmN0a72=9#YehuhvEOB^|cS
zk@Bt~n&39?I0p0iz$me>Ib@9+PHGaKg8)Px^0jKS9hzf=H?<1LIHu`#%|vqw!M|QS
zt7tQ71*aI#?six{`4)&L$(;};<1DJ1AR+VfB9;~!%3Xbv4tH><<1#0r2gVKKb|prA
zTNfAqx2&0sVrLw6>F!fI{LOR9K;{0#MPxJ;zfh_1TD&KSHeX$MOaEfOR!;Qf!lSX;
z4bAQ{uVlLvrk>Y2x|#PRD#y?=jD7AU)Fg?(ZCnWw$iVPed%;jvfSOOyFsz;uQX(MG
zP2xRBofFG!ariO~6;|6pb^V*5)Z_hG^WpXW5>5TPv0aD4bpNNK=jZ#leD|WXTwUb@
zDg3nht%Mrnj;-8L(pz4aT>t3CV#BYs&s%U>m1?!8HXC!jAUyl}q+yp!;oxw77}2lo
z(99L$d#s*V?c#r^HFF+hmgn8mu0Pw#NCE*u=oes$>A}&Fcg`6qB|mqBoZ1xYQ|=@X
zESJaG$ez4d!{s&ARQAUaUM_Q7gb?n_c5Ni9mxd8!**V%WuUe-?a{}#wl-Bf3(mVv{
zuqkg|knkUGe;M6U`3h$^9*PJqkNq>Gv_Z}~K@%oh(ujER3M2r<mU`}9+@W;3<SLt#
zgeoc7p1IJo0i+A_GWCX6T0WT<r<%;*A?ooD1<|)T7Jn|l^K1he69$uYFJSsG(3@k|
zb@{&6hM_9o(z9h)+1SWUBH%T^c=~|qam3fUZ31VkBz*Fdvru?vEoBBJ!21RDJ&!?r
zN!rN5mPS*4-w?%D7%_}GZrvRqfnB0m8>i3k;4P{;(?+zo0`CcJGb~agbM|gHGo@E~
z`bM(C!KLgy_IeNZjS1joJ1i=_DkR4Eo+&$Fx<1X5&pJ`Vv_FRf)@UdmokNuA5uIG5
z^a}3{Pd`8TBVENZ4;>6bQwh8QAx+b}GLGmoZpHTT?cw&9^B};!sHUpRkk_Gu^1rmd
z1iaRNGvSc~P72EZXJ|YvM;3qh-_KNr1d7a$&*Fr*E~o0JfFyHQ@TgEBMfWLCKaGEt
zG_ReqMVA=~QNk8QcM+(aDFrCJi6gC{g+gfY__g**{U$^F0g>*@GK+9m`^0oMBXwmn
zNn<>n^|0k$m)12rznJ;i#o<XbfyIG}5|hV)bLXu4U(KH#8012C6$hY|(bA#fM{-{n
zjP2(xd31{9+5U@Cc=+iGFm!srg3beMb;FKmw{ro^aK$p`MqGw~i%Ba~Q!*8NxbMZg
z^l#Q^wxyLsaI+^@QZjA_4%aPBENtKR$xvqG8ed&CM>(ZgIlM`^luWuPM*hB)U3MnD
zK;RFCl6ETng?|@}^h}Tk#k|I5n!YI*_&tNndlg#*5^y4$kD<5fwE&?ggLV9}D@qbg
z_W3v~oroIij6@<2wCnVT3mXqQMoRP86L-fMsOR6k(?6^&vX~Uj>Hidhj~3FOOCguL
zqr7)bx;%@i>Y5&9c6k^fu##5skoV7LXx6`I|56?T$v*H|#;O^K>#fjn_R8-VDvb%2
zjIcCn3I8ZLf!q3|nospA8d+NEBR<DLK?WFbD2TV(SU;mk1Y7Lbd$M(R)qKV$kj%)|
zqR1iHrmU%f)RP~C;nP|@*$UyiK3LS^2YzCLKfN-xh10Esr*P);!-q{XW66|$bCP&(
zfCZlyd7WH0bz_nMMC9~rwgx1$cn9PNf3GPJ|HSVn39CH+gfm$oiM^!q#ZW<uHj>o_
zj0Euf%{L%XsD_nm<^TMbw0hWNLvwXaO)t4VdO{URzCi{~@P!{ID_EFtBmVpD*_WM)
zo)(6raH%MCA^6&3Mrad!4hwC{ZzXr`Ubbs5O~3bHyQIgN_&S7v7xHzy4T{dg;`+8&
z<=_<4A%YU%g5yritg^zZnSKtCxJAGc$@0<Voe=PSTr8%gKUImH7@xT$jCU0%;r8AV
z4em6)E`!_PE(@Q+z~Y-5p;}+gG|f|Y;*bf|7mXb4&Hf?*TNFzSoFWx#I$1D9QAlO6
zE`wp9)*X^$bfnc~Zsn+&@-rDGZn`r6V;}7Z$LCZ`<jmD)*fkA<hMFK=1N}arG--tz
zw^nzV&``Dv4{)*Ru8VHPH2NHT0rO{267+l1{%D18gNhZ;@p+JuYbtgb{wieZJi3`P
zybv8Y-Eb3#MSi@fTW<NMDB0{Zex3dXPhs|+Jrt{P>^4hTX%t8_c-+Z)#GgfL|Et@b
zvN68f^a?!siMBWie=jhlvR4}S&V081q9U(=9D4XWDraaR8~ZVA=+zK4eqh9aMt=K6
z`&-XN7$;A!-l;sWM**kp@3q^9m%UKuTHjAXGzX(S8HESy!nBf$$~hyZYEIeekPiCn
z>|&Eo+h${FN?8cn=}Q!o@qCDP(Shr_FNijWaLHtJbuia==*LV8R+pUaU7Nwx3HPU@
zL-v@TH@Q>k!Oq7;2DD{fIbkpMoyQ5y_@1gxygKonnx7LUK_sl3spRjMenhXYzv$7|
z1zsZ|87%5J9<OYS@unE4g0yOg?#|O4Hu!9hT4g6cYDTwXcWgGM89W2zUe)0RBa4Ic
z4zn1e^HcR7{aX%Cb?cAe@2e3A?j^-Qd0Q?PW*Tj8j8$)0dTbU&NK%0bF!S&8!o45D
zcFR*5{K~UG=xs?999Ge?_1Ob?suud35HOzocg0}f#>U={v9GIXqm-0oO)La~mG$2o
zpVs-cad{G2ve@j4lWup`OCIU7++<xHlYbcFj1#%;Xu|ozBaJ5y5m!TD{uROwM*~cB
zp3(RyA1&o-Z^o_b#Id8$J_yy6NDr9?1E%5>8H}RQ1&YPPD{?5*&|r8yS#{ZXnLX+P
zOq^9kl(hvr26h|lRMebP)4W6_1fw_imIfSROguCYWfgUc$`s1#>I`)%BqhQma*cv4
zhaKeE#L@Ff;~kosguIvF%2P)Q_`45vUTR`PDme1G3!eep0e{^y@Dif?B06uaW^R9(
zl9_8Dc9;boAldH~?SFOTB9l+kEb}6gEtQ2%dEK)gQMf=d2=sqrnKk)e?&$l&<@(ct
z-3&D)mSm>BtWXTU#ldU3&izi&Z|rIZwBpUCby+NR;?-<*H$rgTi*Dfa_@$$M`wW=-
zoaIQw@J1}+8LcSc2@RzM^X~Wi^L}iI;;16KfTgftkCZh$awS|%<z~axL(By^P{Yt)
z<sYaO^BY8QG;UJG=0P{^!)u3B)$|S00jg*JK8Na<G&kxy(5gtfAR<YmzIasWac8Ai
zp;MpDq;lPbTS-$D>ffnhzk~P)33V*}m|XSDIam?-vk>3}pj_kc;*i(MF*)jEH$+|`
z9KBd7oGn08kt=W0^DZ=czwFFC!b^w}Xf5@B&!i?rn90BLV(w}sjkb>uu<?hHH+eMR
zMYiv!zG;>JrO5H^RSMlzW@dO%?pt6V+g0}xXlQ84LfS0zOJ$>@r)h?99$Le)hqWc!
z!|2Id9@(d3AzXhDjCmg`T^uAW$*d%#va+8qY`5FIUPiy$&j&C*T<BnUAk^+@Wq>K1
z(T`C!UwmSJ=R^pScJ)zRqIIy7Hg11YuIoU5sJqXq(Q-A^_h#G56&WhYg12ekPf*ia
zbC8k#a<fLxBb}eX6E&ZxCR^joI)p1yt=ZpYypfS7`D3TB+saFtf`FbXaFjYF>_f|^
z#Ul-Eb^Sx4p6?Hk5U#3Zc9LFybNEKFBNZyb<&Dv&c0h!h!e-Qe15O>r_@4C@>nott
zz;`jAamJNt2cgf4>3*g)KXIG$htxV*oI+{%W|!84y({W;36W>vKaYpe>!nGRfuXvO
zr{g9amMvf^-wPu~_^ORVcF8GRgN_IL@Dp<Lhx3ej2v1pCVYb9-viFpm^<n_droGk%
zR{x9{A*;7}ipcAQ@JChlK;W~X3M;r6wAAK+<5>|(*cD=fIwtgTl8$^s1?S8kap#UZ
zy)r<kTBqWD6(g|U6EY%O_QqU=8NI+jELc?T!r4C7j%g!WlQWkM_XV+FBF^_ooQ#^U
z{AuYS%?VC;2gn8L1mYf8AQ$8w)@DsqwMj%2&iQ;UsbX<3N;Gj0_6C$d$^5#M`G|PI
zfOJN<x1b{r#{coz6jzCweo=yP2!`O}j;09icOh^N*PC5K0Grd7)vpNA<v8#{_4S&T
z&3+@wK_2?PAx@^i5t|X(3iP!#+Q!V)B}kYHUGt<Xo}q+w6+o&Ol7lBH6(|cDwRa6h
z&8DK&%Iw$A{et{)n|aSQgfX#X^q@E}|3rQ_y~=RhXB%FCI@p*xN`w*?PGsk!QZQoT
zpIPtvJ}q$(mK}$?J{cxma&!ALT#EVna%)^ub)J1%FxTd$ZUz+YFUq!UvZW2+ltzdZ
z&Y<W6rM2yE1FQdlp<H!63AnOr4ikE7kjIb1aV$Os74Y13H?ao>#@Zk>YJF)iwHZeR
z)Ye3`A^ett?F))RR|HFGNMU+}=4Q4vW`y=*Eo^YrDH1hIR3Y}V6nzQlBrEOZP!e|B
z55)OibnPINB-Wn5hmHO_>F&Vm%!pXdhkP`+KK}6_5t;BiqtXc$zga_od~nsrlr9N{
zKeYJpN7@voxvhw(ychJD%1!YChM88C0uQ@rH(WjE|7A`5@G7wXR!x^rP+;Sak-^nZ
z$eTAIkR2fnFz8rnW?2zNIl&K_qfGz{Wu0me-U!O}Oid^;Qh@^4y&&^=#~KhZ#bC%$
zx?FfA<5Bvv1?lPBpq(p_EiIQT*4c4v*QpS7%_yQsOwy51_}*p!+7(dl3pyFarvWC8
z%$LM^^hw;H^g-@1_h(_xRPNq|Jlcxa;<_4w!{rJ*)mb(r(GVY~;;6Z0lsGl5$WweN
z8p9dYgAWkE(W>St9Q(Fx#F__q)frE0TUn{9`U9{ie)~iqDb=ECnzvH}k59BvLJLM$
zKzjie3tWy9kb}6ao5|3r!I%ZpeznA&dSf>iWN`voy1Yu_i4HYzTHM7N>F|^Xhy2>I
zXdU2awyoOM>S^5cK~iS93SD~p!)9Ex9?}(}h58*Ye@1&)e|cdR55~G1@JHRuDcwAd
z4ww=1;G5h*3J<#N&1^3iEL5&z*Ddf4QotzqYj}c0jS@<vTZY~sKa+0fi;8dEh7^kc
zj#SdfiZXJ_$fw~a$aXurRs#R~G&pKC#pI~j`Jj{~EgeUJ5NV^=1t~g13=E+y7K#H3
zgX)IET2Ds6x!U2z&IgM<^L*!SUh=K=uIG|5av>6(GsM1c0E0Nx*YTQ6@o$#`g)aM1
z!yE&*_P^R3GS?!fJ;tBl=m6yl!Y)5U=CCZrPOLxfdAsg*xm_Br-81PW4Es925f8F&
zzOnLFcAK4waPb8UIe+W;ZLT$HyW=BtKqFwo<^fu+Fa8?UDZ<<utOYW>$yD!qn&wJW
zkpO&>7@{TTyuszefp6d@NKDo5pf2;j<+wAk;RwP79g1>Ogi1CZF^&osqej4AGePBA
zu06x)f7(hE+Y)f<D+&92;|I*18+$!Ic}vZs8vRE<<i392kO(a55NCCf3j%#Y(I*0U
z?#>zpK_0(%BnJ}T757T#*>o{e;|gsph@MgnY%k{_yX(k+D%&3dRwIWIHdIP`4*!~3
zTtopk{u)-`P8Tnwro@id1j)yCx%mlbTcfIPAEBM67-cKC(7Iz81-qx?E4&qWM_b$1
z<pD+&<CNSQj6b{TT)G~A%(rry_lF(aE3XO8x`E33i~IxDyL(xUjtov+6mbgekKFRy
zT_Q%TEf4_pvL@YK2lH8Z>tbtyt=k?uQYact7ajZocO`qMg~-uSeAS`P8C&nuybWRa
zMR5Jd5G>JSVL0q{L916?dzVi&ZBHJMLnVd9w^1N>Twcr7dy6zbEQNx{O{C9zF@qRH
zHOe9QCpH5<F4VHyghu!<iscBpb$cw3Elv2CeR2xfxir8GV_w;9#zM%@C`dxDU8{<N
zW|4AnZ@B)ua3ek^;*{9nYpUsR!(}??u4__G8UZZs$NI!Ol`~$u`D$f=F*ec2_C2VB
z^=Te=8mr0d;)Q{goPhG(EW!F5LB2`l{*qf(9j!r#&gv^z5rEuhY@tdQLb<gC7=Z(`
zf5U}tj6BI{N3#rNI}Q}*8s9Kpr^{V%K7Eh5L_5WA%tucqjI)7*a(uqxiCP?Th7DBf
zyRzt`wLLLU)Eui`Y{cL~`VsW0*MA_w-uA%~)mISIhnqf6&Y7LCPC%hAf24HKgXnC`
zkS=<-=g<`ZPP)wGf0g<of7T9+ii`Ot<dhR1^vL<(%O`+hKmW+JxB~3zat0uGypY0T
z0hV5^LUn;`Z!0iTLn+jXoCuxfJHmO~_4s11&SHm!Z$@g=mTAw&lP!?z&Noi^tXmGy
z^uqBJAJ7dQFJjA7U=MFt`mGruT9h_|j;|8O@Im7{NrIzb^EgGmpj3$G--G^FP&l$=
zjAnRdS5jsG)w!B+^8T30NZMb-=j5i2+jw%H@p^_QE#sFq+Fcw3PY(9IA?V<RzOD!A
zdi3`&L%t6O>8|LZ7qYSXj$G17x5n@yB7JxGpL7K*F(c}S@XW62sJ7vKNlRi<M)m@i
z{qQ6D8|;S;5@J-POKTtWhNqq5Cx1(QOBViN_CtQCIcLYL#$wEb1HhAR{jde>=n9TY
zC&@5W&Uz#v%sG`mw~b4O3^z(>%CRDD0b*`2qI!x8yS)NY7%oiOsqx3}3hLKyadd2X
z=w_ZWn}xR;#MFxtb)c-iO+aG<J6?sD#Cn)%sUdC{`Q2y_>XPPmqG$X%!H1BbTih-U
zFj7A%`b0@I?h;t^-ZLcq{n%t)V-|cK&b|cU9l?0elt7m#_vXiqZIV7s?z)?-pau<L
zQ6MMf_5Cp-Dq<+nxKs0r?FQ4H5Q&3kqn!wC!;fyvc??7AUm|H^M%$=uu55{LLK`<u
z(&+e3jyyh9#)(9ZIR5<LO&bdZl6c9q<=277?C*7baNe5_ny0mf=<Bj!Lo$T^EALRH
zgrF>;9);K4PxR&;YK_i-$ZGw0(qLcp@GlPMo+9>~D2wptrl(0%OqZ2`<Q9O<GaF=q
z4@w-w(W{<i)6XLvix-q1wCLrcn5HCK@Gf#Kct*8mHVquN)G9eTn3A8VA>L4A#S$VR
zx=U}RP*#8y$L4qTs!UzX{Vbmc+H!`hHH%~l6U$Vz)m~FHbCdHa*mJ{iz%x$J@B2q)
z6=_N`C%rkD*0~$+%RIWA;>YoWsVm7uRk2E2jhEB-zLSS6%Qsbg^FQ#Y9BzxZeJYj7
z$D|lyJ=xfnqp|a@7o?(z&2%IS9<IG)g`aqjDisa96T)Y}b)2R4ffY1rO~$?RS+K=t
z4Lk)c$6D3CRs*AT6}%RC2!8Eg9jErm%A^ZDnB_7ikfl$5q{pTqd5`Z+b^mJD%2Z48
zwEZ$!Te0twa$6sYZX194xaW2yho8V_m1A(Rl*<YsUEDs79+;Ti&g(L8d`?9l`YvgY
z_;K&J9Co{Bd+-JW<n@+CPR*YBH`i#<hSNt{tdUG%72u`EtF3}6sB3UN5Q#!zKl&4a
zo=j@{zEL_V{vRI;3M@5UY=|V=VMP_pHzT=$v|GT94&=jSaATveW@5ION5VLTKeKSd
zIulpHI3s(<LHoRgBa~L$>Os-`oAb<|cU!fuEqBM-LRFn7<v4Si-+F7YnzjU;idm%+
zOQ=Zx*D6RFE*B%*iBchUZEmx89qoHRruL3kGop%Y43mz1{YcX%%P0CDTlJ*I`GIk4
zE*VtB{kO5KAX^4%W*Fv$PbqEr+jr)*_mq`|e<IlJ)^S;X0N_Bg-%##r#|E@^VSmg1
zp+nh*lV<P~1FI?yR1>famnqQ1Ef2-?z%M8%QUq9JfY<{O3@m8|gcNH2q(}bj?sGfp
zzi{5*r_^{K!eZBsFcr?~c|^YrsHlRG_w0u<x8zW%U=J%B@AC3mryq$Qki^!-*=%jr
zdA3;<@s3J3jqkrD>dBu~j@?PCg1EmIgPpy{9SzL`hrK(r9VKR{(_KA%Nl!4K7RpP*
z|GGxGNL4yFySfZ|<=XfoKU{2JL2GLD`SE{&>H*h!Zh!UGoEx)!9TZsulFQ@~pfbj>
z+wYea5-37hH?ub~XG%I<#DuFKtUjVCgF*_*??lTLqHAHY2r$_WY*2nuq61A80z9+M
zmnWE~yyxu*e8YS4j3cb-40)Yrau3>0GXN4$Nv$j8a>^dbMQpPm!VeLj#f>X)PpRkq
zIikdUmF@9v1(Y*e1dpzsa|Zx}CTm)~cWeU649wujEd!iD3~Y-&B)r^fs%5gk1WmQB
zC^3-=8}kAxsV^X?kU0D2K3Dc#t*w{Afx0*>Ange+VKD=iv`UFq11EI$9-D1vP`~6(
zFAy|%dhE0_qAh{Ka{CZlb)R`iNyvF<L6{SI+eKdpbuG6r!OsI|a!?WE1@aXu)$v1I
z>{&3&aIO<QC|mK?-M-_y#(J_F6zv;|=^KcLb<<40t$Fq8UC_>8C9p{5&8o=rfNuQ&
zuh>78g{vb;*Z;$6g9Iq{5h+cJ;X$Y({LZ6wkwVtp>IU7MRu?vsiGH5jQ!AWNt_sN+
zM$LWRHjU?KvkOLnr4($3`Iob+ZEG?iGon+hlc7M7BEVzkI8?YxH0eP@>cgf;ojr{6
z=jFQGq$=6!CEJUFq`gyAFIyESFT52&_NFX_6q(u&UYHXh<nozO#kRk1ETlZ!*#tbV
zHf}`OFRWhs`s*~Cw<?{O!2j+oQ|GcFPZSb3cKK}<K)P`Q`0Sq}?3)A2d`A%PuieIP
zK@yQPUyjTkDCi9d|EzlLi4^!aIwSH<zqMpV2ug@|IZ^7O;NTXucT9wAY-NcP<pkT$
z>>6x`hty?>_zH2d=Ds`J9qGZ@D1J}*pUS7^aF~;EyD`eL%vSL}DULv)a8k_=?ytCw
zQU2{g#nHzG(<{dHUbwsFE&_1w)v;Wf1`pw+CI~(88aSFj;)@1nz^LUdbx_3Q7$2A|
zKWc?7lvs-tD*@Dk`d9a&3o2i9PG^@>|7Oyh`COCG4|?)=T?bQ1{`i&%X>l_aHDWK%
zTtb;%kg(`j52GYQc_r@24k^23|GD5od->492z^-u4s!D3kxobPyzbt$^L6wo%r$i7
zXz_Is8B=+BOt^~-XS?${(ZWlYQt+>g(vOuVR<!O2K^S5aXW>+T3j-)yw%p&JE~xOI
z#Mh+t#H@f^{^Hl)ItZLWzhFu%XMC8k%7UnbUCZn<IAy9Q(gohDI!%HY)EBadyY<cN
zRnuE`FWt>^$pdh_szBQ<7rI8<+3#H9Z~XrCCe`B;w^mnsz}%#f!w$7DXRhPHjq~a~
z^vcR!lgFUUk50C(hk#(~J5`p`bGA;>#mC(?hzV;WtGbBylf1`gjEawdpHMYPD<7tD
zUavmz$~5vYz0atOFrY2sve8N)DCtfA^!GT)rSd+(JbJ)Anc;4>lZ10hARaP42BJmV
ziki0Z)=eN$XaqiFZFfAXht-S_l>_7Z@)yWOjd!PgN43W3AHb`j0D)w*bK*i~leAy3
zY7<p~1e9H@CZ#%Ck+EA|IjMj6$c+=x*qx|xiQIuB_kgX8<OI<X4bG%GGQ3Y22CDh%
zUsPb@8NQODk!WOqTY=TGuk=uExIT3Qk`^^QO?VZ+w$~ew`Bk$NU`vFL6NpTnRG_+;
z51LAUqqYs?8u6lawPB{ed?C7o5RAISilOlI4V{1LDhDJLRW{1N1pP_YD&!}xRUc&6
zFS5K}?+gD~Spj567|}b!r=IIZnvfLD$WKk+8b*&ZA;6tzdbb{*(}oqrlWFBj??o(A
z$lS-Er~?g3@N!g;z`357<`hENY@%T(j<`a#jJl;83Bp@J`<QnoCEs1f;|yD8RSYqU
zUfcmS4(3C}fi1T5++yGv4cBemgEFwuknlzL#ZEaFZEe)5GEKrSXZNWRbF=_fD?fI~
z^n{NqT)1ybmr$nk$PD2a8WQfak!(1!QxEwjk~iO<FD?vH5X_bDQYl+IINal&xJ2i`
zR@~$2SwAl{9F>pGw7sm#<;-hKF}Jgby-V@iyo41bP$@`>DCXWp>-0f~6bChvNCfV`
zlTL*9T`5TPcm+Yu(B>}jdSQ6;p4v){E7Kknuno|-1wtFFqYDl|!TLA<E8S!h_;IX7
zAu2m<Hj4B`(|@TQKVk*ZQ_-ZIf?+nG@}~!chT|$=0W>M5zMx@h7cWAxa=7>C*VU8F
zUP~yS5>R8PWedP_eX{o3A)fYmWh17?3*R&mnSti}@N|j??54Sb2^Gvot!I8(SKNZ4
z1<b&swdB!lMkEky*SqntuaA38wdTKm=|jx37m7kkeEPbkXQ^c2K8E!n^2RYULxrYK
zdh(}SdFrJEqgf5MXSt1LsJJ3)M#5bn(G;IuQ}YJM8zXj5h85`VWCgyp!*z083&=71
zSX}@!4{=U1xR~V-&OR~pb}aU}7kFaR@BKb`?^kb*>mCGM^RzoGPQFkSih<2emi?E~
z@c>}qNvm!cu@T$JRH(}KnS8HII}ylgzgl<lv*=}q8f;FdEK>fX**-yDE&bF@XOyF{
zhSXwpR>TiXscoJi{||1&gS4&_Blrvt>^Com`f2-0WYh?wS?=+U>Tb+E!=8TG7mhNJ
zN%2jvj4JwnvG-2hxv){QX3Q1acJjowZQHhO+bg!SV%xTD+h)IG^w-DxsQ1Ah`%lb!
zR@J<(lKL%B=sv8F6|b?_Vq70ynZq-)*sJ~Zdu~P;dDI;*sJd`sN*VA<$;{<fT2H2*
z4v)fawX*kZv^6Sbg!F|O9J*4CT0~}<z#xK_>GqDu*eSjuy5T!nweVv%^xW@{LOylH
zoE*1i`i$NlXi@3u(Wk={dn;(y@}4K4?l=C|5-EUt`03~*a0}4jz@KpmdE@0!dD?6#
z*rCm5n#yc??Ut}slDuxCrkzq{vi>EG>30g-sGS^998|VjLVCvft=bFW6wywy!BA$F
z?z_UFXyuekS6H%8#@eZ-$)!T2J))-=oq!`=&Pj<&>`yL2$$dQ8^ZT3emvrA2-lVWh
zJU$*K8gzSjE$QlgqC7dxj`75D#;8l%Y0mEJuY!6g8&r#t>E1pH06**w?WN+-Wj8a;
zt1l$rs%)kfYSlLFFave~X)Z`&8@(8Epmm)d;Z$G8M!lZnVpj+Bj#R9wAKKVf<%grJ
zl)EucRiAqK31zxleD9ZHpbRh=E5m{s6KM?oq*Mvt#T}L`zXpQ5Ukig6e*wxj_~y4B
zJQ`K9$ug?O^Oj-jsb;h|L{R?-q)gI7qIEc&{TZxyANrkt)r|E+aDBL)+@vy<Rzc&k
zP5adF3O-GHv~|nG{~WzRtN6*S;BTBFrB&W&=$20;@|{yFyV>4DHF}O~EvpDYKwKiO
z7}(G~m=Sa93qR(28^UKgE=#?og(4o)k+<qvaUuzmJ4*7F_R~PT{3Yvdup7w|kUaVM
z&OU`HLgKn@<>JxEMK`ffy-nIpct7zAOP3MS!~ym0)w^@mvj-j*3)k6Em#1la4wEm|
z0{QbLZi9%uX~|3lkJ~iIA4Jdpj5YS)lvJtr2mP8;anA{^YLx#HHH26SPUZLQMy-~B
zVGH4%2-vdFggcnK;68jBv~3*csuNMG2B=<R$!3_aJN!Af$vNHpZjyN6tgd_ri>(yS
zbejYanIz==?frRpGj*hq`n`t_cAFyv-+M3y+(UbVKuGP;^+@OYvCgd|ZF_QE>qK8T
zvXJ~#9MvQhe-RPKxHst{+2=Z9VS`!%)}i}m&}Q%o$thvD$e-&Wf+B~*7$a{6f;{dB
zjGQnYy=Y0-5q!;U*%S@_>}n*AV_DL-ksI!?C}2=9(Occ$?kOGLeH-Y~p&!SzR>(Gm
zrum+c(SgksTs8Rc0;X!mAs@?{LK)(}jIdyC6IlJqX#Lh>uI+N{>K3^_bss8u?F$-1
zJzLN>vk}kNXf`HV%d-+AYd>fkI39tI(@Ur7cWQWk&h3a1$pj3eE+_G?6)yc=RmyMC
zQT|7$Q*Tvdvw0J_E*`2Pei7<VtOG_EPIA2IK2p29IIOQ@V|qe4>WUKs;`i-?uzpaA
zCmn#n9BZ|2iPr6BM|8X>jyrR8r&eFWcMZmZk$}K63OA(odsVM<d0h7)!@P_OvBj#t
zli<~g##L0^wQQa}6$4^G<%TSHpFbz~H;113wWVn;a{o@5-+v{nv@YSzntr?~mLcvV
ze?J=PVUmSdU2=UG&l-QMXd_B4x4~=3ckBlHK_+ANe)n0EKE71(lOg$_X~9SNCtBRX
zp37~H<lg)+4-lH^%Zs(b%iyu%2fiisWAoq48AN=^9`8klgEf{}6Vlun925!`R|<Ms
znI>a|WBZqJQU_XQZlX<vulO4Hc|1tHW8#XNUo^4=*m;-Rboh=_Jp(W|fh+FRrsag?
zi;iCIAlhrfYC{pRe*0t>zOi6QpazK)AD7GEb;?emZDqc4XYH;w*aad6VlUP(gQtRE
zj|fk~hk?G66~Ss2IyB#1sEj)3`<UMVA%l#wp!?B1&|;#~uqX@RuYI*hW!0?gVf~)q
zd!ZzG1<&DVm1V)aaH=><E2c%GGKB{gq)Un&OSFM>qu)}DXj@x6t_0-DAVa%*_#2W7
z93!hK?=p2E`&K3PB-v_|6pa4u>peBALJ$SUe&nqVn$(cRE*j3ettXQC@!y?E{P|J<
zoM?-M`i!50)6sln_78pldD@D{TMq68qNlC-(x|+O&3CPHSaLSeo3lht_22MCm*(C0
z*qBCV2)-kp=n(koW>uj@();z6^w6@`+snM_cOA^#)^C6zsm34rkXha{`p6;G8!ndX
z4u~L9eD{Y0n70a4OHh#lJWFg#Oq$=lf1yk}c(UR6sso|z7=gI>aXP}6!#UUiG{5R|
z&zHNM?Pp@Hg@m2?_-w;hTnDag9S-btcLxU~g6KQuR_A>$d28f8fn2uVIsWwNL_*q4
znQ)=XwRO;kx$LL6f9D5poIjW(4%t%bHKN9Cfp6@^)w_u?PI6)s_K%c6@;1biAKUhM
zq<Ov^VLS_A{+?p$6@%x*HdrJ$T5hHF$g^bga?zZTkYSdH&P6^|A$|9oVU4!SKOIMP
zaR%+#Mx{0@wYj2c-mw;vn2?Gjn6G7>_)Gc6m%pJqJ-(Lgk-ExdoBv0Hp(*?f6Awne
z&+!7*yv4$$X|fpdj)**Hc_s=iUHT?}C<pcKbhQV4lEYuI8qZln=V!A(Rq9f7^d!DL
zSQ$=Yo{4t6l%q?9p3OLqfm!hLo_mL30I?Y8jOBLokh++}PWArU7Ph&vVjRUWA0WZV
z(Hty0-!E?@r+4DisWINKH3rb8_$8nmgyCHlsNfqi)*-C5)&VS31EnZjE*S6@UC8F+
z4z+2-RtcXVn1ddgwFw~9!{Gd(wLQD_Ui1wS2X27SE=S~k`1#sKadz*8tiDu}XBd3j
zXi2DKB&#RlmK(ecmZ^aiV(f`UD2Se=X=h#oYV6z+WvDjum9gSdP2x+fc0tZyau^da
z|3O>upu?d}5}`7@+vSKNET5sP(|UMtqD9zdb@Pa6;riSU414GJ{Kv;>pVeE1PY2Wh
z7|zSEADb8&_`BcEm~YTa$dQt*y)Pm4Caut^kb-(_SX<tBxcy*6&RY;AVRY$N4E?I@
z;Xbv79?BPc1CzEIUFllee4~0L6gvl(;nyIvBcT;8XzY#NbReNC*>;a)A1sI1#v(}R
zhdVzJf~WVmc@*zyBS+R{OPPX-<#MC)_0H-GPdr}_#zkS3O3DSEVE-wv9_Fnpc^$w_
z4KgozMZ@e_wlJc4{apw!IzXV-K6i<LPs5%vJgaD;3u9ir#lYJnow&OP@|2!!d7CR6
ziESz2?wCVxN0!1Wh=O+<?mzA(i5?z<`<G|)gcq%6lRE|uc>;l<-5@VgC{?`<%2WzU
zw_5KqC1ZpZ78{du-k5_PPL`vP!PD(Xl{~$G`SJ;uzcj&nXVxgrCr$*k+#1WUvKfIY
z8LglBL*FCuod2)!Tz$C_fB0xwI?PHW3wqX1=oo7{UHEQ#1?DLV(HT?%kPFN$OMjb?
zJg%6&A-RZQP3JD%=i=AA6k@{nZg8mU8Q_D+`6nq!6zT;^!)ZqucN`!uKDQsrDmK8A
zoNQ=$CrKP_P>!s7k9vpus<qi*bWD9qbqT4ZyOr(ZVR`z6VKgnaF)Io>TK8oRH+{Hg
zd{)%?7vDX^fI9dpaL+QaNdSY8dwV1Or|J~~;W&(Oq}3-W&ha?YPf6e+mJtTMVylZ0
zm-!0$&v9fwt$`}2Uu!OB=ze5BD<0jKSB5^D(tXiWpEaxx-BGo2z}4Aveg&A!??hW_
zv99LnY36Z#PBM|KawfJ<f39Z(QdtlxD>7#VGsVe7Jcakm{s3obH%S9^2pmbH%Z@b6
zY9v@9EtiA(aI}ht4>dyfc_tS)zfNWvl+^$M^lG}7y4uAE@*XZOrDx)e3bH2`W^`=W
zhyLdLS+B`%Jyd9q0-)TEJr?)q$#{I<<mADHD!VCRXnjSDn-&b>r=J6g`(%kon3vP&
zNGvM+KRR>@DcQEsIKU9i)?w_^rCT`l`W!oU+Hv`($l=Y4Bbx$=`Ncq~^DlQ2D;X@g
z3hdMiaE?QDPkyDaQ{!P^d9QhD-=5>Ny{^=<vUjIxM{XJPHq{OwK+ab2Whpr$pK`;P
zS8`4w;(XLH8w!MV`Xsm~)+$PE$1HO1R@#Qc+6$Jt>uEH=!S!9!U!>Rcd&0B79j3D{
zY76dBM9Wj+pu|*}C59yN8;$=YZkWD-BE$yQ>n^TI7O!j};n-DY$Bo&B>V_fL&*R4E
z^wl5Fsr+JI(^{JUP8Q!%T@p9s8N-ceGFIkbz??vokQ4yKeQ$0oJAHnta@Gh_k`r?n
zDM>h3<hwE0hb@blX<|pofa?%-Vsc``+6R$~a=j8Z@|*I<1}EC_)?n{TQqQ2SOQy*v
z`P5BH!+DcdZ^GSi6<Qg~&J1Gay&07QbUjkC6>~GxSJ$^TW`BIv`|qR^QH0o&VxlG~
zYNQ<R0azCDgiSOoiK3JN{%qETsza|^b1#RJOwimV5-D0=-eX$G*#g+ULss*#Zljn_
z4fP-aW>JBHRJ@sLjvqg~4?_XB)UdU}(mui6!kCmE;dNdTT%D{=J1Upp$3G_NCw>y|
zo;TgJN1%fV#(Fd}s(w`SYI<vQ%014>pj0l`jg7bA<t(EOEn`7Dj=+j#3DVk>)y#Ae
zX+QW=t)1Z`y91X%_5j>}IlX%J_D=hM#xuk`;Hulb*eL>1OAQI&r05@dhIg~E*zbDB
z9_ir<j+u8ZLmo6B@`zWyP=r}6&KIv3c{(-KYv*8S@VVvt4xb2EmN1cBI$<QMyr0SE
zExEG_DhHS-bR@6{dTf+-C^mw^HOysg)k)s0v%R~~dL(o(kvGy4^>>zAS;RGk9ym@@
z9VlRpYaWyu=6|F+1g~KzW&UKPqmPT*&4?Wu&)u!q{qUUx&t>iYyj7?RUMq6_chW(&
zc!u3EGk1{nAC{G3x%kvgdS#CY$TodO6bR=M5<Z+q;;()BBkH;jUqMFt%YX*Lljg~v
zcKYFvlN1l^>>cYm&GboUjQYP-Z~5($KB3Bp61pUVTY-48hLrdi^`b&Cn5t53@OlrJ
zGao@e_1DpAN;tIk!dioXpy@P{3l6ErmBEn@t|d1=Ul9%YL{BW6smEbHmq+Y|bvF6)
z8Yl)B5!K1z_I0;9Ic##}zrB-lQ|{W8P`B1DePyBV;r;n`&wVYa*Y?;#<&#Qt^N@$K
z_^(4vtuo_7TVX(KB;MJ2?pwEIzZYqYm{s9e|M*5A|LhkBSg9aDfS^xk66%PMal3H0
z)+lbQ>2`R8M{t{aWvO;Fv0QxZP0j=oq*;eUFFGE&N4#6sFCAuY;-l)<R#yrL%C*u!
zo<xyN@5C7O5xUH9izwi>kZxFr(1g)0@#I$wI#=Tz-<AXnsTJuk62G9k;DzLsf53i!
zg&4dA6w#-QtJsGP^)mKV8O%u}xrjPjSVZ=R9&rx07p=5Bjl&<HLQ~nrlw{@^9L8)9
z_O7k#{C@ZehD=Br_H^QMCI^rvT_zdUaUo+a=+yPA;kYESZ;V-nI-b?iufj}dTzuLb
zHx&AD{q*i%=o4+*e*wXa+9f0aeL>Swoyxr4a7#7z!oC$kpIHEU#;WH#dY!OlLq-eY
zU>B(3m6X4!ig}VXk>zEa@Q9LD`Qv~Lyi(4S=@%k2B@Jme*k^}vi9h~uX!n_Gswtnx
zT9ryT%*e^q(}@$3?bTi?vmFzrC-GK8HM()>M0xbK-ok0m4PB__lQKoD#ZEy@HJdpj
zu_De;rwo?dTsDTcK1E(m|69YEW_Q=u-N<I1FnB<dUf}#b?r1T%nZpiEdQF3Z+IR|_
zFas0IA*6jS6-X166sA@=<Lqe%G1FN8NG8)A!2fBh8d+g`;r2!ZO6Xk}T6_}D!nJ|E
zU<Il6-?p22AXuh_Oa=jNrCHCook4u>$aR&lC6f=MtmXIXd9})Y@-?+4)1U_6=E7fz
zg}?b^PbN4JVRGgW@u#2&A%=1ZB1d%)nf!<}Op+h-(zN^E2C#DZB}7P5MpD~LJnHv6
z&O=4=5dYhu)-k+Qs)vt}gK`AJzi@##rcs*OQ%y{rk+Q5(jDj>8G#9D1R`TFJFkC<$
zBG%rx0JLGP1EY{fNLX1a{OPXhQipew0(9g?%5CM9++dgf-D9?s@k+C#UQ5Z1EHfp~
zP)4ZS;fOFaE5ftpN*kHLfH1=h0VAysR=UFW$+kIrPN%=IUMFY2X8Z!mMNfW<+S+#+
z;!Jxo=3K_dKvtUX%+-0u(W!25voHG$I0#~&IO`+=vQcP9sZ*}kqW)T|HlAh<{Rea+
zSAt;EB)M*LC<4?x+nqVJkl56+Hrp5<cYC#1H>7~=kx~cIh`SFX`6;O55iwjxmIv^H
z<7%(9yrPf-E@`g*DH8(8+@OY03HBVq)2S4}U=L~GT>o=w&#J#w2w0B8F8$187)22+
z$VRJthAUtQxzr?hF8q`bX^e5I%7hMN86tG?%s}b2Ap6A!xb@bkT1sKy?c$25&b4x3
zTtr)hiPbL=R=cC|{5)tu2@=<7z!*i|`ZuQ-yCkEo?rPK%Nsq>R8C8}T^gd{`EG6R@
z4Ez(+ARF#(FR2*{dxADOjb}bK4I4&ES~3Vm0<vFXvS#^>iJ2><Byy&gY@jAXm)%BM
z7jI+TV!+0+_hla-Y0&M=9w^~$QlU;BUwCRM7J$UI`O@$Pb*Qbu?C-~&#?Rpg*yHc8
z+tbJo%r4H0m{SYoNR7n7z20cGH$cKsgz;-fg585`6S$M?E@l<P7pAr9jeKbuyKz|!
zDB8m;X#&&2*A=;_3u(wRS;Z(!1@CZm_)wnww?rSUv7Ui-;N-2H=EJ@D{v@~h$JH)|
z|4<!cykQYe(Y3Y&yHN9Gbq^Ej7n)~vJb^tOhCO+K9q-BcTdwjZftn>OOC!g|JERE|
z4_Pr^NNf5+sxF3Vk@3nG;<{6rBQLaagKAZsRi@xeU=^2!VsruDA?uS!>1Ch~cY1pn
zK78=j+Tg5(epW{s8PZ7G3JP?kbAeqg;C92?B=&1}#YzSUL$F`^?Uths|7o!+B7=Fg
z{?F`J0{eQvlx}yVsQc{P8m0}rWbr#eso0(2m4eCUdYGy@*ORXbP~1qhxwYPA8!bU<
zOa+ss5Z>{+b-nSm1!Pj8S;Ddrt<x`*eaBPf`?suDLT7^Ji-<Mt?xY!NaK>!Ldvk-n
z>iY}t{(*uaWRt*&UpTCPZT22j?&pevxp)q{KO*lvOz4Md@hW0Ot3nVge9fUNysx88
zPa<E)dRSJnFP2y2<2^2BIWc-|)#1Gi3&b)q@F;O^HbdN#89b`5k$7a~P#&hGfVqrY
z<=BvospwV?o+tS=9r5{x(pb+D;@@+3xhjcy&_miPz#4|sx~Hd(QsB^O=&L);ev&i*
zHLH|X>9>aI>4;~3(%@%h*DGNfHtF4~7jlQz9kl^AjW3B8lRq~jnJA)hiylz%Q<^!6
zlUnPsOvM0K&O0&3(8u517J&HqTUrfTh?yxjHxF=KU=|(qVLrdv17<u9;@4d`7f<_&
z`}cY2oeEd*a&v`s54nM1e~T4K`h^ZYs`W8><~MUVt7N-3q@Yj6NmZ#m(>?Ixh$m17
z4JCQu@FGh2p0@dfH+UxxP#Mp$9&@uIBL{io@8sP?Q0v!0k_DuIR+3)Unn(^h3vn^k
zO}snLw{`M3Om>^-;R69xbN9y%&Fn_sTX)Q|pt8w%(l_gJ*W%=teVO*q?B`Y{4xjE?
zgZpM4>dpuEB^E|o3P5a(i%38R+c4+5s^WU&#6kIbo;g+6lYI>}z4ae>QP`5x-1*G0
zw`@$j+%r_BchqYCr3zzsK6*_0cuO2`n*3<$24AkJAp@(kTn$t<!R}oK6&s03Io0b@
zGpA6XNQo4h<0V?r`WRJmq%_og1RI6UIiX6)%MzJY!F?QTF<zp}S3?HFhasp1jUuhl
zdUpR&aZ_~N3c|qlCy68eHw6s%M%p@*crg-mfD!xam-QC=$9)t7`6!&@Q%6n7ql}K&
zEI!|b$FHL-8jId_tnY-Z5s=j+?~qCYVIh+3^t9=<a?9O#8L@#{{x(>6WW4qn#hb<b
z9p<Y_0ZRIYl$&DWaT7A*?0aCcXnFK$O=N?lWg-bp(}{xpg1+TPuN9-h`av3dn<Wm(
zAY#I|tCZLw(<ylw?CEl@@t`x{fI$%QieKlsfcUR7o!tIwY|=E8yELl#;J*;n)hM(I
zvH?RFeAq?r$IX8qJ8I|B<DvZLiL-Y8s6-W0@E`yWvtXgd^L%f^%re6ok6_ZOjWbv3
z8~Urnn;^6-c2~kb7K+3E9YIg(pZGgTKmb?aw8vsS^`(&1MA~p(!)r#AQg2H3SklIL
zR=Ft^f-l&K3v~T&W9m`@uY7`Wy=l((QNB+{#CQtpgp*ERwG;ES_6UVu0kK>XQQ$Ua
zYQO<pCoY@$$dYYpO~AGWoBWGY%wp*c)=rmx8UEJ;vo?BePk=U*DoiN^c_1%z6_UFV
z;+ZIEB}(&ib8-$-FirCGagZK0tx`+&u7qap+>IuP7|H?s%(pup2Jd20jT@21alErq
zK$Fme(7PZ?G8G!L#&ant@;{|$uon$?R_SveVlSikP5EFZgaCdmj-6CPhUyfLs~tv}
zkpBPF4*N*P;f@t_{UKhW7ic$?9y~j0>6;)p5!>JINP`!(ZXSi8QTt);!=?x-$r@jq
zOZ9=bwXJ)hwxo#ann^y4c2U*{0Jp;PbgGduoE!SpAxP>F7sa0)TxK6L2t5e)TFFnh
zp*R6&H87RiI#~h57Yax^$Q&Gb9rBbkZDyHKaOqCfiojy;bm$PbH;?=lD*hBYh-Ai+
z&zxUXLFec*nzvPzYqw*4JDkp!((KcSRm^3{&vdhL{pZJkZ3|qp#*RUGKTDk0_TMj+
zJ6d11jV}ngWvY&>NS@^MbBXh)rB)p-dCE2qY$Fim0TB^<w2Q8JWy>;ape^MhIdQ~R
zx8$C2>+S*ocrr34oG{I4*-0h2-lO+QTMA)`9aeaeX>A|Nww$U~Mxe!T;yP7@;KIQS
z;RJR0VI{5CIaN8TDtnoiFNLe(wR}gQ@vBdB2~GBy)rm@;wzS-Zg)cRfte>y+i7EM=
zNgo;ZR?@_n1kSDKEyuZY@Hw%~SPfam)p8+6&Hk;*;HGu0OJU-RSur>7Oc(Y>qqAdw
z*pzHXm8%2|bq5YgL$X?X{y>$b-ExPXs<SdSgfUqh+;s?e$b{`{K%DH;taymC?#Njy
zb#sV<gdf7uA$<Nx{DK1|ztA;Nk0N5&P_5My3j}oId@Ihgv*#TiB%B77%^Bpv<NipY
z`J%`J4-Euub&XhRuJcPIZ?(i9XCCSGcx8iFX0xWVtLoZYod?^)d@a<O!FIe?;2tV$
ztT833ZyX7pX{;bq73TWN84F_0Lyg2x1Vq+WqA!^75E9TTePxJ1U?ooC`6?$gq`vRr
z82j*yj>bv$<ItvFY(?qqY>(t6;{E=@g_J%{!uhXKK<Humc@;FeKwm;#00CMKZS^s*
zY5DoSRLa3*_Aawazi!W|yi%APQT(wbk$-X#7_9WWGkF)%P`I;Y!73I~<tK}UxK}IJ
zOGbq#ih=g`B)0w2$9)=aFRi}lDeN-4vB%KT*-nrC$7{ok=a>6wYzc5tGIK}1x<YcD
z=oio>KojwHYUF~Y4Kbug;zOqLCNXwO$eqOkf(g#%=`I4vRwz`8Jp*(ApEjwyR&#}9
z$lsr|KIUJZc_gvyXDFrm{iQ{B?8j`X;izT_D%8XGDW4OM*bLMgVZ_&8K@bHMaLK@(
zga{X6{`(e~QEtyLb>*+QKaAn+Hvrv{;k|XozZL{O#|pe$MA2|YS@w54SNqKroeglA
zR&mX!exNyjiLn}SJTd3sfEiDTeV50@mOp2#(wvS=JdUfy;BWMsM@J)q7wz6wSckm&
zG@GP5WukiUaVK>gh)6S~fmUn^27ffE>IA$~4x~`*sa_g4b5J1>Nd9!t%Y#ctWl1As
z3ZHv(qI8*EMr&J5K;?l4j651aXl*I^_3H#}$IgmJv^apKtPkT9z3ZdBm%>bvN0_b>
zm0fUAU)yR~CokP#A%9b%p5wD|H7z6#`deJ%ST4OnH=T>Hv6_VAs4ZQm?%HaNj-!i5
z6Y#y5S6#@l%XLV?GsaFVyv@Tb&wE|e35}3D*4qE)sT@&ktNaA@gFe5~?sm)s&L=55
z_xWsQCRXD0N<M)oer0%=DPBX?&BfVrXjR~t7SF<!ohP~bWF2Gqry`KP#lla<{{?L;
z_oR|iN79E9BjqwX&FIeVKUyK5#6*HD_*I;joo0JnjH*NEU-V>4Z>!tMZQ|iKAR`N>
zs~9=)R-jutq5_qcrj`FlZgTWrKD-sS%`*dVGvV3<j_a*crLtTEufbOD{k=p;jz%4k
zG-rKjRa?YevA@N0(Noa6oSjztxW0)+Bn(mt158;9ZuB*lxhB4ZiYhpYZL7r@S-v{B
z>>eI5jgi!U!C$Y|J1-GHmzkORJp&uBH-?>yo><05RhLU_s+QJw?61bgL{KOm{!|d$
z!%#)hfsj6Xp#v`Eb-&t^3+kL_cS{#|7i=wgJ_OWN!*CUTZ!T1a1HKa)#ZKPL#+R*K
z$?dCKJM+Oy)x~|7o>kmec5Lz}S$rfbkPMf5v*{&jzczb%&P<gYEA#gSyf$c8CFkZI
zr+Qpc{|iXY^EBzQ{OFJZ#(`;dcJnCOAg@}APBD-_MNn>X0<Cw6CTr_yr>>%AnxI<C
z5S`pt2BGp>osR^bOrc&Uji4eulK+5sMgEnN-Yj5hs09_gKU!))7wCcI^g`fxl29?M
zc_k|&wk|Fg+OH9eI5{5x=4^vyMJ|E=w#0Y40*`CwhDdYy<)suiB6BpqhzU|VM&qV7
zv|ig2eD0FbSwsJhN^(|*jaQVzf*{P*`}dBa#(PP0Qoay(0uo^U_bAk$#i^*N6di7v
zGrt?HW<6lQIoU=QJ06Im+r50^n`f%_YXmX_Oa3r*+Va(;@4C!rhOhiWL0=L!GH$@G
zk1Cb21iGa0Sg5^r67J%0KtwJ;tT;gDE-_~@9KEu4zLp6w@h>eF)p1}o)^9|^#x9|~
zh@-V*MojOGY<f{dtTTfA+|kP~#D#^6XD=ubt;hn|aQ^#D7L%b|@dy^tj^<a01k|JW
zc<6pI0x$1ZIzmHYP(hkp5JnlFZg5hPZA&~B1nWE`WWHNx{1cIrQk=tFO!hc@P*5kA
z{WSz;&vLYsv2xzQ`OhaAkk`boXqC*fT1&$+nfJGTn1wPlbw^`;0#*SRFFq|aGjzZU
zT`y}apOVr#iLpq79Wgrw+~MZCb{!F>>f90ApE>*nn}%Z9Lj|k?&JeeSD|l!69p@BV
z3BF_F&G5jpHx((fZE~$EmPl><7F*^0Mw1LDZl;sn0M>dQE8d|u*y(I|tEX`&I<55q
zI7*)`1U!({{3f@WbHhVq&eXXoxSrFgaQZ;Yz9Ticu_NM`Q%#ySa2Ead=#04!Jj6|c
zy-y1nFC{3r;z7yg0@{`-(7s0H5$)`nlOD<~M;Dip*F5{fznfa#WISMoZ}Q<7kqZ!^
z!papdk8$Ld$)N|>WpCXRNbi0(rz9h{gYa!Bqy;-jTy)y9?UZVf9gPHLV~Rh`XKkzZ
zYiSwd_xY{JRC=}Ph#{;>hF5G<yUt+tza6)&&~N_lE5hC1-><xy#1q8z!fA8jv^PGz
zxyELJ8?brfQ$pnC{jhkv*i~eKAV<?us-csPP$2#D@)l!%R+-Np{od^MXYsQ;I-kd{
zCdsFIH9lvRF1wPEKDxv0?)>oQjzk$v0$v4c#^o>T$iMNCVrQHmP=%aDFzV`HS*g}i
zjOKCL%Uf)01h^+_nSf!bE3*+kKXjEKe%u2!+_>DAU*Tvg`4WAr6cpW*erw62`G!kk
zWQB_GM}`~$yI5n#`pLh*kPW!s|FqA8rkGM=T8_viFzj9NK>5gx`>s6=-mm1$z%Rpr
zEm$Ye>9hxN^X2K;TPn6|GrA1^s`+f{7`t>6F%Sek?TfGQR0!~8JmH@h^v*nC$iCdc
zrxOmHxP9xbYEV3gjSD{jH0sT#2rc2O6nx-YEm;jat<e7~R82OK`KXIu2jY{)BddUb
zda2MuenOM7f$kqFqwmm+Yg*0frzUVAK*d_NdtBEUx=^kUq!m~dHHhibSmY^ecmS4v
z&wDsP69~ca$e0$Bp^wdoM<HA=Yq7pb=MC3$=KP}jNBD@6rN?QGZ}?PP>!f#06`dLX
zc1OfGSG+LImL**N331)_OAIMSgM9!TTY1{>tf^6@s>2~^PP1wU9e*akgm7=XA{I^r
zDgt}A^S(mv+g?+l!31sgAf_;N&rZ42bLN<tK*9ei*bN_(GU(!8W(psR*VK>NYX&dO
zOlGW!k~*yn#Dol(XkPx+1*_f?-y^F=PMv-si*{05v**n{js>6A1v?5)Dd<W)iVb30
zzeK-vOaZtYWVxbYg(v6#)UGSjy8!+H{#|RWGq1pat-WbRQi^w^T`x~YbM04{Xaoz7
zizNdK$Ixz6V(1Q}P%LpK!5R3Drk?H=Isu5)J*E18L$RuE*}-3#v?&emQ~TFU(0Uj<
zi&-HgedKc-@ReXME?d_jc`7DAAFG3)Pv4&`V+SkZIo}D9-5Ta+*JJA)oS`8aquvB_
zqfIv*V4FxrzppaFF;HKt2p8O_j!h^8%LHXKl*wv=HL9Jsa7Ehg$@zN_;_}Hv$TpG(
zKQy?k6XA#vrj#}MxHFo$hDiT~P0G+HIypr*QJOaxL}2#1IDOZA1*r@&e{c=_xha)?
zfP>&UaK)*kpEk7&(oBcVm9Jhn{EGKx0w;c^GBUky!%dLOK$}uK3@DFogXrh|D*E0%
z#YxB#&6E>r(d7qjh*$|8bdj3#%N_>TVGTMx-7F(#|HTd0>=P$iak=c-cV3&zyKPkj
zSFK%{#I%7vByDeCIPzH7U|wb<$Ky=R>@KUO{kSC1nY36VTx>a6p>ht)u=g53Fo?1C
z$+L~O<$0Aol?;;vbK?MMD9>vz{#+ZRK<<nB=mh5QsIk?0fY*n{p814A0WV0lY-0zq
zz&9cIkE_HgTIt7QQeWnfr9B(ffx;eYTjeqeeOKA?>@jre`m{SFOeG+$Ij7ZA1=e?0
zPKsP@bjVhe?<>X40uD<P>>fFxL!j^Fe%hRxK~^p8!7#cv!=QqFg1R53IV?+3Df4@r
z$?T`-t0O3?xP~hxZ~g&f<S9nKxW#wo7RI-gluSt2$X7?^C)y_$W!8dQ3vT+@1iz)w
zY^ADv_kic^^exZX;4oBJHWE<VozCl-jgCE=|C`Ba%UApe_9+W$hw0%gj<{d_FMX^Q
zj0e97NMeSo%vT+rU@La;!10!&Vet}}qas77Z9nd1JILE4CIBC%yckS$aQycDw2v>g
z8#$N-ObXh@pv@K%IBQkM37|zt<E2ZvUK0FyO%+$Rlm^gFIYyp$YdBwYJ)5hnqT_c?
zEMNH|D!LER2@fECH)XD--TPNUaBYBaTf84+UMy?Dk#2h_1SWV7%98cZDTHSGyb~-*
z@Oj**$kDLwj|~_Ri{p8L<VJ!eZ(C8n+?6JsdHZkj`C1u}xp&hq1^%&Bn^VQCxyYL#
zzZ*3(9u*Xf<+s&C5z7^F9%g+rA-I|{>ra#avQebCZ}6W!ooyv<p$97zP8$#RqQG+4
z3=jk-GKHsrv#KFK6UdebMya&irLcR=!OEylZ_6@0XDHw=1*RKck+;8dA8H|co_D8+
zFOe4MeLl?=wiYTzLJ)ZR@wECpdnifh+(Kr6S9T1Z@6ulh)!XZ1Qpl@ZuOEr_z1H`J
zO4CkQipm>G@%}|JW6bQ@=P7UhA?$&3`e!08U(`DEs2OS1F7MzdR$Ye@{UWwstv2I8
zGx)wmkD(6ko)}~(F>#2vzQFKOxbd=ZHn=BEGhnukJG{zg*ac61tf?EAp01x$SkXJ;
z;!FActmgB?%R<GDQukkjZHZGYSEC2d`D1?u{1=E3y7SvjD5UE|U_X^tBMgXKad9Ji
z1{yFx9kgq1n$@P$Q~#S^0k^ZP_`zOWUe(M)(C_wMz}hGFGejX|a~hLnFy!BF%unm0
zgNP{pK-vvs)a&cik?Z@#Fo2-%Da82|c);^DO2)`G-cGAaL;dH3e1J9pFCiA!R(&Wn
zZL<>JJUhx3Y|r=sIefzh%iS|AiM}@z$}a>rPdXW<USDVk2;0s=;0j10gLxB3?;g%;
z<$&P$`uj?!&XX&q2E{xvoWq9et^?56QNyEV5lba}1?9ToK`^l1*ST^j4!onJv3$S1
zaB+I5u31*>OcwWykGwoOI43AWqq>b{5F;(n+b~+P(b%>xaW!(JodaP*KS*;VA5VKt
zxfnt=o+?5TGl__r{U?Az%F8Dpc#P3zcww`rwK;-b1>S9hQ+-Bhn*6OQBf<PmRq>Tw
z_*6`Gc6iBD*Yln4wkUQuLpO=OC2^hasGNQqzP;bAy}6duB(F->b^)4>Y$WInf~9lw
zAHRc9jsxytlnG;BGS38ij6XL1Mwd0$;hi`{8i20BwOLXS-!BcJ(FRPhYoIh)*?ypj
z;oHtO2oPLM7oj1(6<<i*Ipnor4T=5OZqb@c_tjWYjCv^kb_x2YlhN4cL<i(pSDD~V
z(XHYo6Gy035$;uT73825m<uX=pIO*sgz-|wgFY-4Jpw6bEKL_5bmIIzs91D&@XkGq
zZ!|E)75NAh9%C*U4IUJ+>9ru(jV5<eAWx>7^totSwS~g10jwnVmr|kF%?108h@Lh1
zp15WxSvH<lpeI!}eVZ%b?`;$o1)37B^q;12EWRKXk^dJ`xrgWhQvbg~#-0!*;MOH;
zN0TezW_p10&?V4?gp((S=>$6LZ)t8I;s$zV4~u8h!r6pXBXNupq~$}84uSd?58|d?
z&@tJs(*K&^A?cTj^DJ4>;J~(Pf8a@}V8E|2A{Et^g@Yc{NN6Ig8?IvGNMmAkb{2Po
zcjrZ+y|9b%@}Z3Wr30g(p9i{kWj?M(?cj1d1~Ct+9)vH_P?UEDdqAQQwcVuzRrR3s
zTl~uh+?6bev|z?AK;2=qZCBp$Ez!piFU`%o;H6wQd<4@hdj#cUBMd4z+qRB&#D6rI
zMXOpl;eu+(J5RCA9{}=SU&C*XhkZ(p?PFg7&C;ep$Qf6Gply<d?^m_0nZ?ExTzDfI
z(dY%zHd;YDD;wgGXc`bv(<!41Cl}0RE#j;1i4Ub7t``&HE|!fA^s{tAeiEs<=x6o4
zDL_eWeYmYGTN$z4W{ZSADfzdhQgJ9VgLt#ahBj?Wda+C^4)VkL4DM)R9T*(*p1MGo
zF6^9g{+ig0XtV{z&5SQE{qI~Wu8zTjaa?}ViH3pZkbdez-(yRGtudMZVZ<YuhNfEC
zIA<17M{c7;3|^#d+JzCra|p|T?M$xA{rCFMdLhUhIuqCj`IC&byoWUrN8n)<PAk3o
z^-As-+6bbs8=tR&=kL5a`U<5vQLB$O<`$~XszL{j`mD+)v0aM_x2`inU!eppRK}yS
zNWf$Kz1WVKCt)87_O^;F4Jc}`9A!Od^+U-M9doKhFn;}hL0{lwQpl0HU4I#e4S4&h
z6R_H4$J2YN#+_bM*o$t^b=F_nzPgz3EREqm#IpD|N%qa=tTe;Yj5JF&7-GfIvV}4N
z($bS#cfE~27W!$DgyBHi1(b*WdpaitP@+kq|HH1@7ZyVp`QOB@Dw(+0<BRKJs$4vB
zr1+*QH$n<GeEH!nznj~sDQ1jzf$VU2Qfm_`Rroq5*7ir$!MMm#EBAPR)q^rcEs|s$
zvZDp<iCkWQ01FQ>VJ;q^kld_WBM8k*Wj4={UX7-;N)=rS@>b0L8*O)>MyD5SZDZwN
zK_LO+3reI-Q`QebBamYGcz)?CRsUz^+2GM^t9=z7t^~R{t3|ubIE$93?3_vQ@-i(k
z;DxgqvLhm&?3j{keNeyg)n$Fx7xZuMkYK_ig@3E*woLpvg+bAEBCP2_&!ob)(RLO}
z3)aC7=A2j?!)gYbmd6w53Z|e%-$bXRQhQy0Bd_?XJMIGopih-E@+olR1I9G(M=Uj7
z1X3piFZ`_ftUg=u>f71^&ga8^MA~mg$}`Krfc==lU>*fBQ!MN#S8;ur#Dkxvv1?`=
z7bFT=X;bcTn_Nycn@WS5T`kg#Cc@8WYkUeB#|h9(rRSa;iStcLu|r-KBIw(Qj~mxI
zYy@THe-t-L#2wY;xiZ9~Ez6A3p>jz_g!HxLCk_$SkLMC7Og6!<VH6XMAo%f@pg)PA
zFAd$rGL_V395SO835p}8t_0?iC-)6szp~yn$4#Q)<%|N}NZMxy`a|hWZur`B6TFyw
z>}%`84Evx0>^?hg($qc}gJbwRDM214P_KZgHV&y6CZWK;F`Vb6iw8frcmdgUtEh{a
z>KOE+LM%qmSy*$3FaL`^#-7Hgpk!b*D{W^h$04O&r)~|SdQ#4gB=8)V8c1DF#Zn`O
z-CMVayf(TL(Gx`ml{v)Lj~7T6rjC>H-lClMGzv;**&|vt6dg7{HM78VSe}9;iTW8+
zkmbpPI$I4s3r*3*MtUK$oy+beb11vR==7PkBZ{xNpDo2Jd`W@bJ{B_kABxXUxX#8R
zN^BmPNHh{p`YF;}`Uvj)vvRLm_{IqFOX#CkSQF6}MrCLXSP>b`0QVBzi;~lwM|*L8
z_X8KC*lLE&Ii2THZFg8e7zjr4R~tIbV%A`bU^eLe>ZrM^4JA(Lz}>IUNB!3#xovkV
zQ_N&N>?g-P$I1wDvEwj42<Q%bv$DtIh6=@Ha>g9Dj4y}s*=u6O5jnhEPQb{`WEZ^_
zGAO0W$Iu39!Cf!q+{Zhqm}Xw`#2n;I%@}SR)*ZRtAD&Q0$a)=$Tdov)@qCv(_2QVN
z2fZ^kRZ)HrL0jN*C+axUwnNQd>yNWEU)(67^5SLx=hW}u8C&#27nl6FS)ra}lHKIM
zKXxD62+Bklg{@6mS76@*{9839L&0FR1^n?p89hqTwA*%KA>3bh`BXCKuD6(vs}3&e
z0Jj^&54ca`d%?6N1^ud4^-FX9V*wad8SOTEnglr0uvd-y7fl?uaZ6Da<_j649;3}+
zOf%jP7p^pI{R9a~O_nJeR`2@$?qhi5lEAbGqDsE4l=}c7Lo{|fv{iBHSgPMKbu!0l
z`@fpM2ehYqLssi-9z4p?S~c4*u<k^4WV{wjoP8lh9EYpZ&qSADsvywW8-u$#mSC$n
zK_a*(@YaIuv+$c(I$_;2zWL`f|3$yajg>v2c4jsDC3dI4i!haV&=3)mu|Lg_>zpA5
zEDf4oO>gabL=2y<VqGFqhpC<Vg!HOlu7F(D_VJcM`AuJ_hZV@nDMJQi<lBDief5Ia
z<0};s=&3Zo4#N#%#D7#Q*U%4NX1ZjL>owxD6^w=CMv;k$@Y@KdK@!Uj_Z4I4#qbj8
zBW>2%^KkvJdo{VYX4<wDsP%jjHGJ}pjJu(aol2vzIt@)?{lWZ9b=-VKgnGjndT_yQ
z9r2d6D9q{q95j8!KG`XLJT=S2RejBj&{SXe?CECmn={iA|4llnsTt3YlA>T2rLLE0
zK%da?wTTHs<2~jUeoE1Y=R=^rvUj6BUWwgOOCQNtX|PU}$OjcZ%$z=D-!Wj=G<uPh
zU_%W%*_mvC^IdB=zaOEaf`3dOlsjw&-;qT1^1p-kz|KH&VPe?{)ZAf<4KvlI({Rdr
z7mDLX?tq;+fI*!$>!rBYXwX^F*NPXFyB*Rvz%ddVnsM%Ib^9qJ{ZAcSf-Gm$AQ|(9
z;(`xmm@d7@Ih?<6R5YW}KD;SE+dr~+Cd2TX-anK&n;M7>mz(yarB(7Kdy9Gtv3Mo2
z1g4a8CPJi%M`zHZA8O5sr3}L;vr0xjzguy6p@X(W*&o}QuH9-C*s@?Rt}nx=EP~tU
z4uf3X$mJ7}R7%<FDZtvuN%zZZuD_RDYu;w#3sraZag`#=%ikIO#wr_;f3Q-)F^vvE
zZzpI_Vbu&L;<6XV3an?q(@o)(ffi%m#Fe|6YT+_htOipbg(&Hb;iHq0cbDA$ou3r<
z9bFT?(0#QkSg03ff8H4FQr3-VN;W8k;gi>X1?rZ-```POpe4f#a}mMN+?kKoBLhH|
z(Q<>L{!&G`ozEl^zC9T1`Dh^uV}^Sxv@;f}IwNyE_MZIPAeBsP26Ue2WCjeF>Q?&D
zub!lYL+6fl_m7s(p2sg9UX4ONRUWXtndLBVv^)4a0Dy%tQfaiieyE;@CmmGbLcI7V
z#smDWgvuu5ciZg?vRl|Oyjkkv@fZWE2<_6-$+ts>D5-W^IJK=1e3{}P#X?7!)`XRb
z5O%#T;;IjIR?Lb~S9v@B6<%}LI#YKu&9<IdD%Xd9I6^(zst*wLr$V(4k_mG05oeT;
z5-Rs<WyX6#1S+iCFUUGm?u}Fob=0oB3zGqCc)#E(z0D>8*lLvcigwDvFJN@%2&_$a
z?VD0}fw+}w9dDRx7L1?Bp<T2hB8|rR4BV}%>9@aM^h>PYb!n!z@mIzC>F}b?58xKc
zS4FADw^&VMEdbM{(P*$zq9|rOi9anaa_Xe5sym8Ol18Q1RUFZ@NpcnCTkij{J#uLg
ziV5IhD8bk?8rymNZm2mMplIBdWle?<Du+ZD+Ucx2a?jNLbTf6B{TS%7-y}ymga{bJ
zF-6v|jod!SFc;c$*t|D|7V^dB#A>R~(#|076`H_PWl4@kNm2+2w@&-kAh@Vmm>!Ei
z{50Ia7LIR$UNfKnJkX0(mrKc%5QRJB;uaBDlqqp*Nco8TOcD6w6|nTzL+gxvo*N+B
z11`Yb3{E-?*`otFEv6-Kr*fw`mcj&f+Y{cfjpTLW%-X^4)fL`s*kc$v_Pl|K3($YR
z3HmE}y9?h(xpD}<jk2v`AZVa~43A1@3cKnvS7LOF#@0sLfD$yq_dSd9=*I}Vdh#lN
zpd=39apUHZn}7X{#O!%dZHs3>51IXw0wbJX$}%_gA3{(rNkIJ67E_X4;FesvT-j;a
zUr98WoMoFf_*PIDJ4>imy?n$n-}nAhpa~0y(P7lst#M#+_amlk)^U(s&bx+4$Zw82
zy4Ozlgh)%BWro{Ny6A1%jsJBHqz<;L@qGE`D{fBRL3{Iwjx+Yp0=apJHR=E<qt4(1
z8W{2DNffHdCT`Fp$Ns*N*%?+>m1xT<75ia16Sio>wuz1)R+f+LEzesin<tum<Z-0J
zHS?{0)1<=kzqcG5@c^O(Wo>s8JsE`KO7(;1mCR@uM!p8wk-|fMZvF}!Vz=2hm9D?4
z1Kw_N9N&dhwv&BsHvK(w_^?#)kJ)mxF4B5;54irS4PoBojG_WKGPLRZhjc6o?m-ao
z!6`Lg(?Q4mDso>^r;g6~R8Hy}+t)hbmtY)&O5t(UUJ3^C=#0}ETQ&@Fh&}!+J$o8v
zNUF|KD&Q7+CTzW@CY;E{d+vOy%Ogh?idaud!c`qAAz`EGkMKz2K%;<QD!lPCP>ym$
zTH9)L5`HFh4nnV9!{78NsvWO1I)uw>qhS3vtq!uWtM&A{Fp}^P$6)L}VeJQvC2VoA
zK#7lh6Yc?NrcdoIpG&VE3?pl!l{yd!oFv5e6UaXUk#mv(N-b$X&kj16WnllM*)V6)
z#@Q0t5fa-U1*IpsblGf@-l9$_zIukSPsR@~VTWTeq9M!WfhoV2*gNpw|JBCvfj2{D
zeYBkBbgBjGf{;HLd7BvIny2&sqvoH2G+yQDsM!j}epWHJ*sGSa-I=}NK_i9T6G<h9
zSfF$MkCEd7;Y@(=XwSdsTdsIoP1do>&v`3Q<p24DxZG>jO7~Jk^R7GYG*jB*W??pR
zZqX&@=(r0ckM8(|+m)G5Zc_D`o2?~pbotq5H{Vc!*Gv};!t|<M3ft%&Os5DU)F8R*
zeCl_99l_%3)MYJ&Q%4R?{ONqDA*%9?>%%P=iGM+=d(u4Xr86keG?&EX4B#dOCg_FA
zQ>{=!i&?zK@-aV&JY)Y!-+kBwQ*GiQyF}Lnjs6bVSS`8jWl7SfsD7kPiGlA@bd&oI
z;>ZR~`0r=rZ>fA^^M&;u8=v4<xn8l|?FW3mGnSi?tA%<vMr?3bj%RLN3R-|4=aouQ
z(w)c@l9z-)*FXG1YPCR`{&Ium0|tW^T-Cq%U!Y_(&yMkU*rU?R!0G*<kcttmlu3-Q
z6HywQw2YVPA@O%~p@I#QA9n6ojcRN493i-ecp`k_U~V5Z-{o(R2i>w4;e%je<p=f%
z0*wKhQ_t_CzXf5{@I{T*v=pvb9}<m7Ar{E<_BmXoO0S0TlA?$-e+LwJ*mVYx4A)o^
z=#PABrX0>TbJM#Q^F(!<RU6JaDOv-0d~-28Q|{R=<t?l)!a~p|_2{a+1Tzb(jY8E6
zI>K$=!tgis5-sA{RehB|xGrrJt7;zQNaluR;!ao<pr1aHc0Tk3MNS%$G7sw~M18kI
zW1^1`uPO7`6?O?0qG8CJZqUZG(KEa_HsTVJMrazCC!>2M-FNBwX|=dxLr#lRyja+L
zxiGI}r-gvkgY9dEwwUL<BybQ&EABeC%(Fo60HGDWSfkZgqh%n^i=-O*HAL>$1CIQ1
zD{MIUlD<9v27&vvRUVY9#q`*&(1vG~NHT~8^?_$VzP}W4!M7Bbfc#jv0iRicmq%dC
z;G=)hJka>TqI39VI34?Srz9Leh5<CeCIZIUwtK*rSId;okFpwDYQ6MwyaOf9-gu}8
zyvH4g9@(Ce3X<Rp#5EqEjgqK-y{)60^4e-<umB;ffKlh-A~kx7aY2KFE6Pdw_$ARq
zy;_T+686Uem!w7Khc!Fd7Nz$Iv$*_dc__2Tda_y4X}!2*V9rO`;dTtvwZ5q#9j=lZ
zX-_H^6~@g&cOC;S>;38ecemAxHcr+RXB%42|1qSXgZ`((=-~f%9QFT|^#51V|DPx6
z0o0X-R-kxS<kLG4@21O|qV{`3CTVM`M*Z+tlXr_VFc#D~Y_kZy-Ce)M!Q^Tzj%`a(
z=10m*ezPcehYx{t-Ii(Or2k)|7`_T9+yBBIwoD6xy&SSbkrdV6VRg!9k0R?WI_j7Q
zDvr{lfX<^IM?W14@0mana?B5jz_{u9>(Wi*YP)oTdBSt|$zKhers8NoveJ&|vq)tc
zo{SNz7>qzE_Y~cUzCD9YkH%paIcnQtga5o`ZZrFN#m`7pw)YL+B7BXbgmPPvM(t|5
zYDqE5{Ya7Y5y`JE&S!Q$_t(>$FWH{_Mtt%rS;2A;pm99nHe|Yf+;Dw_sYJ};-uL@0
zL!fMH@KaBV*!f)RPPmX<NP+6A^=!=5{Ie0xYl_bmy`nr!Pt2MDZRb#4DMjF3ww<o$
zL>PNLI&`sq`<m^Lb2~^R&Mupz-ys?xvoQB=adpi{YMO3SHJVEBWiCR^?_0%E$MAd`
zD7RTfqIF3`n-RIS_&rZe^Mk7BPwk+x&o{e(IqzBNXT4616+Inj6bk6~v&vJY7Vy{l
zHXhB9LB2NPzalO54_iUF_ug3CXhM3Nx2+PIWC9m7-7<3+Pf+j?fY!CtDBI<U-Fy~9
zXUS-CmBx=rd`=WlFWv@<$6Gd`{$0V=9$N*HKvT~!Av6b#W6LHLUSxAAK(`2=#_{6s
zcnV-CiSE(0f{J9GV)YD@8!5smjzxxV44_2~ul7Zt;DqcJFJOWSG;*w)1{BOrYyk9k
z^vCsI+GrBU8WaL~5)1LTQ#Yh8M%Gjt$5W_G2wn~9AIHudcMQ*oj@X!fAd7H1(_~6J
zq;T5fvP2wdW3)&TnZ4uS8bqkC{UK$zFS78a{Q@;Ak(5ccfj@c7d84eY{~z|=sXY^@
z>(Y&F+qP}nwrwXBJE>R|+kRqKY}>YNbY1)V`gr#~*nQCb{)RQLHRoDm%zJR)00S0v
zT<^hZJh&99V%M#2U$te5lKHRa782zXy8p`KI3#ncKBZ#3vrbU>U+CVC|3IFE`OAmx
z(182*l@fi%Fz`)CiB{v2kBIL61#RMSWJeN+j3QD^Z^UQpy#is9FSuB$sHo(coW+@6
z4+PKN#9F0cO8c^l`+3wAV%Z7FqCc>rPJ9#!sMLLsn~%2Aw@AeEZbrpT?LcafCfZNw
zo2U4GQe~zN$B8}N8`O|!-BF*p72y}dlv!kX{>JXe{iq#27=?-s%`p1)-wo}!2>R#0
z{-_B9kGeN24zv_WM-1)rz3B*8PIxTcIo>&<W-;?QoM<?K##@CXtGESWUYQLkFK#(2
zuu1vedl5j>iDDHW)*!_!y$p5aY7lJy8ZUno-DiQFzWH_BE?SL_yr@p_!GL(V24GFV
z(wQV%-ey<>C2@uxii0rf7_69BeQ>W}-~?CsJmR5$_~2}JH)x4GTt!%>N>}iey1wL*
z-OU%!NQ<XD<mZ#?KRj(T7l3q9P`sl@ZI<*UJgzR}qG#@mr#YNqBwM8ZW_klcs{^$M
z$-yHktAH1)DP(mmxLDXAge~31ySt4T{_{}4${QJ#KaYmV3FhaO_^O-_ma+by7%)W|
z8H%MMBn1~R8$kympah~y+?@u2>;J@n{ofP=mI(lxK@A!+c|1h(OVp46Ggq?&S#jL!
z&4K(S@Ps-Ai`;#>GNQN79|(4`Wbqs*?{*(N&p`87sY{$Y0#TRYW5ilZY{qvwLc(jz
zkQ!(oGu<GHh?X57=|OcX_jT|-KN^}!uCgiFe#seH_u1L%vLC*0!P$%WwI!8xTQg&1
zRDUG{>`H^a%>cH8utC!);^;F~7r0sJY?8mL9@cP(few$ArtQNlUHom-+w)8{SAsX{
zDtA!+%VNa$2ZmkSsG|(E`0m|fGE}_|yWY~P0}ZX*?f!|ZsigSzZ{>sYxY$RGSXQ=g
z3@Ng)_Ejj!I00~Ek1~nvz+jX}+%4|(sY$Ylad9$Yz#$}~e;y+KaDJ1fJuDK@p4QA0
zSC%MZ`mSw?bf{q;W%VEZ`1_pzKN9LdJM`<1m1;L-wDG|G4ROmLX^o;2+|*}D^{fbN
z_t}ETkx8My_;+~fls<8$UuT_uK`!sqGEUBT{`O=-9iv*)pqVO6s=TXu18Jg9A8pJY
zl><AEQG-~)Z6E|dD;2uO<+y~98Kg6Knjo>xo{F2RL!A(qe<Qy@!_TMsbq;8&@B%4h
zmqL0Y-L?ys22TY$nk`$(Eq^wB?zTI9JeI|XS~`=3LNmKaI4ENk(O*3G<(v3GSqo5o
zIfl{OSfQ8~E8QSudjhg|Zy&R$M5L#{*#!aY`v%Aqbc|lPN75>i%-j{DN|$$7>FxW?
zrrTU`F>(;VNT*8F?N-nGCs`o@l@z~H>I{8M;MO_!W`;q%`0Lt_^hqQ0r-mz_P<V$q
zD`?s!Z<OuS_@A6pfs_a{mC+=J{VYr9HBiOhKBMxs5;OAb{%!#Qp=uW6p6e2sy=0OJ
zN8Mjz(OuWh@NvZCm570mRxrm>a}{=(xl0vNcaR=}y{$N8<qC5j6iXUIuhb?tZ49lx
z!Z<bE)rA*C6ei#-+FaK!A?~u5J!ET0?UGcZRjfw$91(NzgT@WifRdql=Fp*Rxzk6;
zymkV`iFg#Vj5k&T2~_4`>%Gk5n?2>?S7;LYRihk?5o6}Wkz#N2FYfLD$!>aEnC?*X
zcWt%J8r{QDeE8!z!X=d`r+W-VNhfnel@nm0t&w`OYE!lvrAlnhE_FBXPCUntwPq4P
zXA|-H(N=*Oy+-*%=%OzC**mZ9|7+9VzGzsZ3#1a5FRNVhzRnkDYK;m-7S}}1E^|z~
zp~9atQwtp1DYel`TgDPp%vH}*ljqr|czQ5NC;CK>JqSuH36qqw=r#x5M$>bWt9d1P
z=PF@H3!lN-+vwpZwI9}Ozm$-%8}9zHwUMHsq`W497?;vZ>`n}xHlA?<bhbXpJIuFx
z)#`nkkxIYi)5N-ZtNtd=WmhVC7K##<6Cgs{djQ?{Vs#p6shg`d@6KDh3rcPfTEMsR
z-to77N4k)D)bds^A^YTL%2NcHRcdx&ag88|A+w{sX|JKk71yFziEo#<b}^iPn;9O=
z;ojb)dNE6^n@_mSK2t$~Ubs5u5LX_y@(XDJ5%W<S6kDsHlCgYq95Iiu-?68Z(U=y2
z>tDii>F=es1LG16P6sMJf^XGr6^~yv$e%hnhp%u)65`sgUq+*=i<`s~S_r;U)Lu6l
zg2om6UhYrZmetE$@oUBTPW|#s_Bw*!NiS=EBt@wk#ki~pQL7HDa3$cBCKVCiSxAcw
zytCKQzLUp`Qr>=!aq}rrZABNDD$UbQfc1y>7{3DznOp1Yo(h)_!qKApq~?x$ANGlz
zvei{IlcE@rBmV|gLBAKn{RSsj#G(~-|2TO6ZG;O3Onnv&(W$532<VY%@{$C2e+<>+
zG^c@{*|ivR9iQ)r{yFOmmSIADr<hQIe0Wzf`LnmnDM;B%J3@JP5jD%N_7-><V6R*b
z`kVUwLvG((cLMx|EvzMxEG&gb(2CB>O{gk?fKirAl!HB}B;mB_3Ej|7aO9ql2cH?6
zQ9q{<D38+fp$ePZW`N~cI`8ftT<1;`#uW32`zb$h--`eIrm1}(rils}4M@W52>E~d
z6~>paV*eMOQ|EIU4XlKVxArEQi>3zrFUsDf$SMB800^ZVRfp~jRU-ws)L@;-9}8z{
z*@?CT+H$iDC(qwPVgwuRAIA<~J?ssxzN{EECuz5~!Z&2}SG4Va@H)?Ysk=*WU0jQ<
z{UwRNF3zOzn#8Z@oUzEU^PPYhah`ajN(efXLj7XHp54Ad__!rlZ2bFzv5oZDv<qTQ
z*t&e~kxt)Y#%*HdpELM*%LWuMQMI1{W(=`-L%0zOIRc4NR8eFSj+4P;-(+^J<<6yO
zH8!H@PT3Dgx2Z0GA_8=>PP!I4IJK0dP;TQSsf(xb*ygCDr?EI8dTiya!mA%IKRUxX
zZ-VkJnD5dwQtdbvC=C`a@2*GBQ<#TQZo@LPWw*D9w<H4r=6S0+ADkf{-{ZVKSA&Rk
zDuEhC&Kkuq1i|?8Wpk3^)9o@>9fP!fwU-NIrH@1ac!0pjd?Lkwp2>4@+si#!22x0g
zu!M-$hW$KUO_Mmql*hFy4Dn#hxg3NSyet;|Q3t!a$Ptonnxm=UUHL1Gk&LEg$m9|*
z0e`sKSaN%Xye%OvG=k(p+hP?^D%7Dk3d6+Bt0{(AEoLkOu4Md_I1y(k^}as#vZ5XE
zGl%8ML|bPKW-DECkwF*G{fg(<ees&zkethpl){o+J637ptN@qI0&Cz%z&PcS478qY
z@6C)JYid#VCDO#U;Sc6>AvLNFk{_4Q4)Lk3hdL<(#Lz5Q+0#S{e@}r}uHffWdA0+a
z<}sg@qtzV%B#K!2^p<Mc?@NMV_=c_6Lziy@afKy`U{1l_J6iw5zaXu9O(MZTj(?Qs
zYjS-v9YTLY*_b5&T%Fd=gI#3C=I`QbR72sd5*j2{ud#Q$v4=7u7_b=l`z#9qA@lU6
z-EKdIT7kBYrpS}zgXCz3LUb3I(j~>6Xg<@sZe9fS3Q)sSt=eTaM~7dCkM<C(4lpz$
zr7_(OI6oZnX)xDBd3f1`wMXOcakCZmfu#qxroJl`9gWU1q>8x*9=yg-U>zHes1kqF
zxh%@u@9;QVxqDm9;CRva=_+DW@PmShQT7+q;{hy{RIPP#Aqju@uevJbu=MxzAPH<z
zG;ydN`D1P^AFz@<L!<}Z(GSu1_he$Fz0vp$<+-K;nrM}sb-HeQNJL3LSlcQROW;9Z
zeCQ^9f*9coz=<ct5>IcgY`Ndc>NTD~lhYT5d2%!#Xa&C<mOK+@Y+sBZ;kl=aa?r=p
zmsnf}<3$$qGrBEo^~4j`Eeja{FH3hsh)i4aaR4K_m=~nDKPtWa&nw34F6PCCNytNQ
zqUkm89=oS@9M8{(8NDM-+OWDqh04-+1DmA^X=5)*$yO?7`DK{a)H<73`g^8CtuccA
zYyjA?&hGSM`FmWs)kbN3=i~BWHukYq<T!yp@$A_6cPLGCdOcW>l|uqF2Cq=33zQ`n
zbx4V9YC=-DBgMY@vDo|Nl5^Mx=FzWCM16ATv(D#glKWKPLqgvNTW8@Lnr|dNu6@t0
z?6dmhv5~m!cChsaAke))Oy(@?MUxRxyNI>$FCD~#-q7~@FGd=tnaiN4*7%w?4;@N_
z^yyWE-=Ax|34l~gvRn@ijqYk4I>}4l2-_El?i&7j!GOg(FVr^uWgYmteMlu#_xbXc
z+i_#EfuP!osL<EN?uENRE!yhS)rk+tDA?RpJG};yr=&ZjdZa^)UQqmwBRPG8CIo_t
z&s?X5YT|b*^H$4ULVqyy9`~;CTWWs-=83UZ0U-dbtVSOXYRg5)YO2s!lTXnstgWP?
zE-gs=%h|x6i6{mhf44j#Tg%VS)8clo@xk|@yIapd!Z2osS%xKKwW*=qZW>^xsSXHF
zD$w`i?At!TzL~6j{IQY`zPBR&KzazDbE|@;KY741bfW8R6|XAX?|8a~>TS3}H7hiU
z7`}N{8Omgzawyvz^<r-7BW+PofM%Jk*#TwkALg&4aBdgTtk1y!c{6#%fA?aC<BkWj
zk6fl(cVJkF-pHORO@c{I=;$O*s1u6GSE#t~>gr?3jQ<x}8;vzoS^n_3C?Yl<M$O0G
zDLvh?0DhScamdl4_UZwq6(S3P3s;18f4y+N1a9cD`BiWZLnYfU4~_l(dD0)Wbg{fJ
z%Hqy9GTBjdW#W9!-KDYbt?$n3`2xa<^hC7qLjqmE)FI&rf~Vj`zOICgLxbCm@e1Fq
zF+uc&dA%m-zg_8}xHmldoVODd-;aZ2xoahK4HM|cCclTIqxL8xXG2lwWDI^(j7%TL
z@R}=7qiI&7Y`%i?2ja}(W3JD!YKJ@#DU+~u0_W|L3k@V#83(<j8-uNg-uDIxrZl-f
zbC`#B=x&_{)j6bRBsmL4mBP((>It2hwV$&r$v8+^Ibx0XFc<Ucvhx$am2kKW4~y*_
zm!!S1UtV&OBs1ri0%Le(>4LhAJQ?>_u2>qlp0}iV?mfhK+D5>|KA`zu(M$wpuYQ~w
zK0FQ#@^gc^8cYQBj_UaSK43`1H3kjw^MVVHcwm><U*{T`p3-zRrlsq9J&G~sS*j~#
zR)X)7)bERdt@fjA15{nxPlY1sAo_mMQY}vOU>UX!gz$IvD~}$AHURoj2;y+&{BV>P
zwIpFhCNH|Z8Tei`|AOoPjsyPUg(bcQB9cnr20BK?clb3$%C}EI@G>Ne{>_;c312A_
z7V{D7019<k0hlRa7fNcN0GZ^!Eir-u6n1BCiePTWq%kSMOp0a@HY=6RN6-lBU-QO!
zkcHHc<gVG+x#amAq*Nn)9wH_YuwRPufdUHgIb2X&ElW8gu8;(L?QVKmJ<;X|VA|zJ
zNo+5E$!5aN>Bw6D+F|V*wwW<MC|ZSdUa?3?%pX=I4dNvogL5(u?rH3AW%6#u?~82x
zS*8cji@#e|W9uuRfh@L_>7@QGkG|B7k^v&i8J8%_`?P`ICy*sp0BZs|U9T^G0b|g4
z$q70NLp!Q9I`hc%v_vko)5U)>E8c1JpBLRQDzac#R|En*tkNl8++OlM=k~g5caQa5
z;;RT=ZdH+SK`jGxH=B$WZ3&G$jc-qYclSM!B3*B|k{>P|x!}1h_bQt)x%t|H74);R
z-_k&L|1(Mww``mZyv6b6Ki5N6N+pLV7CSHchOQi~3|Nb|q%~+{fZ>z8;jRA~-`irG
zH)zqalG`=Rs$f$Ajf&(BS0UCh+^e8xIjRApAHrO?Ghh(@gFum*R>1hfEXrEJemU|v
zXJ5Ge3kRNpHruqOoZN*pC2L0>F0S`LW~5Y#DAe(UGGir*W%w&f>75@te@7+-4yzRz
zGPuQfkh`ScokBai3BvpJv0ytW<;cI}V8!D|*-l_i99eQ9Q*U`YM80P=uib3w)ieCn
zUWaigME<tlbxisYfC4N_zU9<kB^BEHCO-bLj90Ky3H_B{y0vqi_x@1KVJlP}D>}DW
zz-np7j5rvc!cl6020rmdFlMnr;V9yM&txH^6}UY;soVn+*n;zzqBjpjhMwlbs^E$}
z$VqYv(ISjsGiu`3?mkqXNKDf)aOh6M$3mpGWy260xJ$SGJi{Y?_oZ~0oI_h(%p_e7
zWh{#RBbvXtS>WyW{%zQ2Rr)zlyQgzYz$x`&SyaLkHEr(ktAn(~RQHIHbi=6|;b8zm
zk4X3h8dDauHbTt08?Jm`oj2vhF8%$$9EdX3R_I_-w1nzRC{m1*33G{>nl0EM4OL2D
z07^_V77FIm(w=DGZcDh{`mAuUe$)QTC-#guTBc{f(!>Oqsy>CgN_R)8Q!)fpkkguu
zHs{=`q5A*>1*Enbf`V@|iyF%E-M#$)!ew6uP;lU(68#aTeq9HN2bThTNUNKggH4+D
zaO%(RQahR*yg6DdFQ%sL>9*S8H5a#p%(B*DI!wl46qx!{CgX?i%x71{!O*YV6G`Wb
z9yxc6`7!J^ttrjeF8+R0k%`O97_R#Dx919+-n`HwT1_8)UHfR;_TNOs0IYx?RV#m-
z33%q&H+Ho7z5hE_E%lb7n%QF}0ffIG7Sr^DvymB@%3V=mUF3Xhck$D_wd*kWFS~vq
z%BWUhW@;kv1tJ$-o<#<YjGv6_S4zp=RP~~>U;|EEDAAvZMtZ4OoIu(;$G1Oy)M`8D
zydEY-z!pC)+gAV}u3hZOUY91wIcJYZxg?2!@%EwuOc+OwX>S`;Rkfko$1Z7W>u1tK
zWJxL6%yj-g8FvhHAVWssxfQ&XQW~ji(xhhmlbAEVCxX{A(~EYS3s1+f4m7_lC(kmm
z&e398lAoKRQ$KfqlfYo(y)R?^oM&12J?anE+?-tZ#P*?m3?Aan=}59*h^JJ{lbkGE
z&t5<?Ix;lIZBD^52M%s@upVX7)_e*1PEI?NYik-w0}Ao%8&xWWarBDjFsxO6gl5Gx
zCL^|jnWds(I33~)YJw<wvgCTIKmZa!UgT90#KM@ElkjV|{HghG3nm*HGjkmT!B^JY
zweL~1Hp^$asgy~yeycyC<t$>s(EjHZMX;i8zx56vDN=;<^q$Jma~upph+xpi7pC#9
zVDTazyY^9){fYmk8^Vlw1W<$Zfr|ZbcSapVQiS|L7=sE_!eq!rC9v*T-0O$t4}xkV
zJx4_)>>1*+1GvS6;J_%ALw5XFMCxFG-^vWU;-Zkn!?`=2kd|8(Waw$1!K0WCeF8&n
z21#B{zOa^lVzF({(}U!ca5p`p*fSVg=_pm@sdT<QM&St{kgI!&^2Q{Tr=Xfodoi5F
zZ^oR5(g8OvSlgM^LzfdfKp;rb5Cfhb4;7T0nnMOL;b|KCr>9?=CV(8}ZW#+M`*5b1
zdh1Mb3riy$*sb6TWLOqXJ~0}{wTf0<5ff-Ty=;0grOTwyl;P`jR}T`hOWD=l=LQVP
zE9i5VBF{hLVlP#vblLQDZC|J`Zs<X9{HCilK#t+QzdUX)e;*J+=W4eQe<D-D*1vR#
zcYZ5@1BEAda)Js-=D*qM-f3Vd8;jgxP;W0Y!{Y}rad6;U+=~lZHbXWe#y|iov&@=?
zUXchk<TX+`C3hQVwNu^w$`?A+!PrJ!y2L8CKD3l)h8Q``V_|xXHL$epRqNW-$AF1B
zi1Csw>luMd*;@xPL7n|W){*ArxgM*W^^Jlb`b$#=zh;=;i(l>C><ga0+hVZ2{jz*d
zc$4*5!@nWB!Y-mv)(z3TBY*qIGhm>iRB;A3H&{q+JD&DX&ys^LckAP+x9v;PIB+yd
zJno%qF#y@#DnXDY)anfL7x;x{ivsGB&iO<W86uu(ix#XxesSOvq4kJAmSU)#?d#M@
zIy%JAQW5%;f>5%G@zj#O?FXNXV}(i?%T}9Fuf_xqDDyrPV@8!a%jlQ{JbRneO&2NV
z`emQP!I;2Qmvq@<*cP3F;5*eH()!4G?t=DqcHWS!(A>?FuI)Ca;9Luai(B}(<Z7Hl
z9bv&=YivuctVe<5>!AzPc4SNqxg&RE4Dro-#=S7tDs$()KXy`Tu;1=h_u7Ms*{6^K
zfE92qR<P$DoIwyRlM(p1obOc(I_sD?7-8-}8CkFlSJwulfz8Mg0+@}xU&0t%cMZT;
zJp8r^%{nH<&4UQ6IAfa?-2M_+z0FFWgNF}4#L&7(sW9Feykp{h4O6QQc1KiP>h=`c
z!oy*mfNUBq{y43&^VB|oV8eJ}-DO0cJy9>`H{!>X-Ldln1H!}E`YNn<zez@Zuw8@f
zDR@DER~zLLQ0h*Ex}k;pKhnamqJ%~%yfe8kKaks#$!t~U)R0877tnHke+Ql9N*A9B
z#>O@zmlD^H9Xdpnl2zfT2hg3Q41-++t8<P0c3p*-PW#$~i*I(Fbu<05x?{qsE*hn7
z*N8A3FZR610ql;Ik^}stghVQQ{zF!GU1v%amTTAcnkGeWrk3@06h#;(&>*{s<yXk7
z8JlD?!zOuTNdhAW;#V1#_L6qSgoAX;4fz+Cckz6Suxmt@#ac~3p8-?jdz}_K*5slQ
zk20N;Wzi@?j@OU-(|ak@G@z=SG|2<JYP#rN1r#UBOntZAyN!j9F_*QA7EV2w8m6Y^
zn{t74ldIdsF9=(aGPiS<pzyDLB!(t^F^Zko*&r;l8At9?)ul_$`+|)y%=S^ZXg95M
z)KfgG`nofBq&dQ13`O)gMkyIKN{>-l&Kpq(f6D-wZY`|mdUUo{Yetbhzt95yB`MdI
zJ%gOh4FRMcPg4@Br^%mRq%3s*xR-YnmUi*HM=Cf4Vq0Z&{jGb|w=(b^Pd4IP?u4*f
zh<k+dSqk3M$hCmwB2m`Q4=V@HQ`(>gxbNKr4l(rJHIF1pRkrrMIQn&B&Dkwx_gYG3
zu-p#9h(KT+An<|X1gN*x9ysMS5LbKEC#`b$0%3^c$)#3W?!U+ELC8MTu@2U%^vqdO
z`aWGd|G3qu=Bo9-0j=HK#-@K^#fqiUS~a%|7U{u6%&r6ZSB(RQlkP*Glqpi=wHbEv
zd0de9uy4maP>Qmq`nq$%)WvluIeIJxuwMN#bEu#p5#L3A%?ry8cVyNT1*2>475>Xl
zVlH$tDhw1oeAb%}lnDC}P@jGO=-K;SxCh2!P6aJ_+HPt=i@#h`tV#d(ENW)3*gSsi
z^{1?oD71md+PFYlB{)R8jiIR{tLqQfA+2j?^e;%xEEIDLSth%=3w|2_oJx(Aq{6MT
zVBocH&V-b(LCyrQAS}P{Nq3b*piVeRF9~GIzb*gb(-jfh6dIkq3U|KM&#$L|uCW*`
zLg+M4+5y!0?Cc+e7a`1gU^UKu94vRLd2LbRv!6s6L-%?4sb{d``1K2+3%Zsg?N**m
zpc;9Pv9xri8EYIbt<iX15jYJ)J4mn51o@%zFjyo-s6fzQT43`GQn_#6{QN+J()P~j
zXJp>uuh;!Q%jskmPeBHg_l+F6q*iv*gEkO4I&_G<W9sS+nI75~a!_Yn=@7%vny@Q4
zx+MoltDuqzEDFKsZ=wC`Xxv=|Xa+w)NYOVa9j2F>dkZtm+|CAVo(UcVaSwiBc<_%x
zmJKcs-p664n$sT~K+d06Tq4Vu=0Ro9Po`O2ARJ?6dAVhO(J?A*=XnIedA-HTO-u$r
z{0&$~9_`fgvh7G&pfmGsu&zr-{hl5;r1w35!%cR75emqsF)8W`u#Na!6xWvKg03a+
z;yuzY#g^b1+A9a`O2iCBJaf<SBe-EDk9IB;&#qv<(aC1+dtu+uxqL&nr?#D%Mp_#H
zkuu(+^Io54w)J#?2m7T4e|GJ4%pjT5_u1ut-~!|8G=~EB9520{i#8T8w`^|M$KPCe
zT~AX@;k;i>WJ~}P?v9ePPsW=0xio`Y%hfM1qG+CuZ2wM{AqjNv;vUIRyray#4Spg>
zxtkc3GUTCFT#0?Um@H#F-sqi;zcBmaG-lOCtwX_;5ljeJ>)nCK%GYXNugkU~wOO=7
z!6e8Z`Klr#a~W)P54+t_-UEo?`=jr$9|MQ6K(8#WPG}SbO);9f3F&TLDU5}V0Jq=f
zct^lqvl9LudS<u?i5?KykfmK<hDcX!+cp5IshwH1*dvLpOhr1%PveG=J+hAb6MIxM
zbGBD>V|d8fGt1qA!}?fIfE-{{AMD&2r8pJ*nj1&U=GXrm;}K@qF|c$rdx@dLm!3cs
z5nK4^|L0J=nNCGRZX+OR`&42Q?e~~ws52bg-P(fuQYwNTx0&&pnqY{xEU%GFU<Z#;
z@HbZ>5{gnk<eJd2O<UxyXWE#UmZ)37N7u=>u9pZBolojKN*y|(r>U{rSf7`>VL>w%
z7G$K-i=NC5G7bqknSV}gx%?zi3#et~>>tI+f^mxDfIp558yo?i(SJq*rE7i(Hz2rG
zn21EFRj~`>EJf%*?=9d5AR^IA)vC$Ith7u5vPX2AB{g&6GR!uPetDSoMD2udfO#il
zkPRc@d<gP?Lp4KpK;9NyGSSn}`lgWqtSW_=Q3*Az!;M;_x|_54V6fai!@oC0z-12$
zcH*RpWzdrr9~gL#22wN>x1jhhnet(oP4s`SX(G;PSPu-AM4mGDGsy7(tZiJ?62>7V
zVp%jX^$sq}dN9fnK%@A%@x>Ko`*(bhX_jiBI9fu9*|MEK>@~L_G&j0;O`f=G9=#Zj
zs+0SXcsLWsbFP&$5KK1q$8mG;zrnEVAZ}%L56Ea2jq&OhyVZ3AL`)msDWwj#<H=-y
zd46^8107)BdTCd!HY6{nf7x~TlnHs9+Lll3_X6=p*Ra6f-bKZBVRzD}E~EpM{6+8k
z*3$Rf5VVX3%UdB1GtY&EAPYwwd~f)x^goSWaD2db|0~MG!UxM1`Y7^<hAl9G#CJg#
zeBG2vCy|@O<{QDYhhj^SnFYayE$0V9vdX^gell|%X&o6Ct|qSz7e$R@QVANp^NtDO
zddw&(9h$Y`i*99!&%k<vYWWJ4$~>jlRjvJ<Jcs|7{$3A`1mR(Y$n?@L3q9B>y(rN2
zOa_ROjon5!w?1OZZh6N%ax=&2VZ#&CTeA}DdNv4+e+$|ca=JPg>;fYVAu{WPHiL4N
z%Mw57+wM;G*W?(`-g|9gi!1#p0#N)cnq(sjKBq)ooyD;TSV8DMMyK-}5|w?r%Hu$b
z%l#xydf&i-!G!Jn(~I5FlbW=OFDO``eDXCoy9)AF?Jr{|i3=!$A9*!SMQGW`nT};F
zU5}(6n4>-TVG&YYn&tH`c0>KoTE^%Ry1`(f;}7xvnCCyc;?T#L<~O$=;jSL^aEXxi
z7`^mKU(d6pw5_9Ek#-v=?H0pp6Yk66ks|C)0Oe)32mZ+gdE1C{WDbHnp<;A0=ZK?w
zJHH81g>wP(9dREnU3Zlc4!;pd*4}#}y`?-4^j=(V%w<6pLzOwCR<fL${8~K_<}V|?
z*pzw2=I`G~-265mf_~7We7%<taCd6U**3!zI=is{?NP!@0pa_9JAHPcelRWnAkO@G
zb50=BeR%4*SD@r9mDY-4k~HFrPl@M~l-miY6k%h-?L(bqJ=FD6sVi<?b6hHV1>Hfe
zi=PJ%YhZ;6^>#1{G%unOf~%JY=)Ho^*c>XBNM&Pezpf6J%)de<<cW*8QE7d)my{lp
z8nuTUEeGQNy5L%blyP-`gnWcPUh*inh3yK=CBkpxwu5~U!`DS^x2UjFuP9%ff|kqr
z=-V-3^U+iYr}$uo1t;i2*-nNUX8LyoYGkpbc_15|SJ)RdZl;AjRjg+?z6AGJSb<R9
zsH!A%`T#=eh%0wth)(wLW4J{xg%Veo7c3-D=sczK$SrNTLKT>(`(5VQD=7>jApJ8-
zo^GcOCWGm6+34;{X;r42Tg`epUKC!;ETw^8Ad{8hx&40nZu+?SHoo_fos%sn{)h*M
zK2QKLU4U>0RLeZaO(&AR)@qUINApf=ga$m$)e6^mPlS~BRb@}Ew`sau_khW|?kA#s
zGG9-W7bC9!M5Yifs=`D$Iqz^F#jC2yy}XLD)smT~PRR#6aBW?kM%8tDuUew*FGT9U
z>O%47xLWB#J!aWYqoA_p6$>7mBK8CY1!X_MiQR8HFZNW5_T_p|1O_Cfo&_?U=(W_@
z|Ga~;CWiB+Pv7O76cQT)90nlDQ;AV@<<YrC9g&uXOmks*+kU<_OdUE*$ys#_5MGj0
z7>r<TIr+4_+ku}<|6NEuzEIWwPa*C9$LvPjT8O<WEBe%CzbxB;soL#0;Qc_eB0-=c
z)-RFw3Nsx69P<pH@*zZF*xNLpcd)?x&^(^m@167^XQ7OQw|b85M`{rM<9Ak3>#Zbp
z6qx{hcpUu$FdqL1K<=6k-6S!H#+aT1au+u6o=}PC;WXk+NX{*@nAUt5V%zvgxp=~%
z9w{G$^5x)h&^X}n;iDw(&TsSfeAn$kSvr)HVG4D<^@;nlZ(G9iKID88vw@6MKJ!!3
z760%$C8JBxbI@R4#=H>EK}biwDiLTDQ!kCfYw8^t<d<^b)CLU?g`sT1+`r%!6{pv<
z>GFgpwkh6LH#lyw&vPJ>Z<h2Qv)j9CJ@{A%_qe%zR)KyGx?watYP3%*`TtF3w}rA~
z{Fz86S#T}HY1$qB)|AHu8c5!bqmf}k$Ug@S3(d8jyVF^3{-4pnIXGIRR#Etr!G38V
z%hIc?J3!~x$z1`4N~vc_JzA<e+LD4mS}qK+yZ1Wo?{+4Tj;$(rTr2|LVeee(saw*b
zx^7@L=;g>JT=!ZLjp2hmTt2Eewc#KrzI{X1`$>L_;afW7!>KO0+N|e5RYG40ka?R1
zA(0pOd7(ye)Bhrl!p=>M7>+OQ7h=zjJuVfk`necx*7$6Mvg$WH0W*auJuUuU0$YYx
z@@+04(kHZH<N8hVRm}(W*Y`-2OoT%w$}dFjG=bs#X<>B(OAzqCnLbCGC~69U1G>o*
zajP=?&{gN5%FrpnpmmciUs95qO|V!}-CM-?8ZqF0*XYj$|M`Nf8QaIORuD+89Mhlf
zrZ`I`O$|KW@uaxfai^cHVoA8);D0-1P&Xus!&nO*3@?MAg=F?qws0Yj+1t#V`0zs&
zjzb290#N|W1*-Dw^M}LFL4;~VTLI@Y#AkKaFW`COoI+jzLaLbea4u#J@ZxGe3LX5W
zDB@kifH6F({@l7Y%E8woFc7-%M-lVL<<{F?#`i!|0>EJZd_G$CH;aI4aPerEhy1>N
zL`pJsuX9;qEG6l3jUdN;^b!7yP>E+`>$`qLNd&9pl%1Ry*^Z3DwB%RWAr9l$u$R~P
zeV(x-T}ia^D9Z|t|3=imG<#MByvJLl17v&GkGz;N=6e`D?0Pk{m3paE^I*P?@xUVy
zo{h>a7v}Sbz^c&iTwk$Q!=p-z+)z&K^aogVP_oe{ah>#uB<nao?ZNK#Q+lmtz;h*W
zTbK==vO9j|gcKVnq=0=vA2v18$nX}Cl63qdcttJxmic;$O|5ntdpZ=A%IIyx2niUR
z7TuVyUbQ~Cc1SW91>l+5;xvJA^Bd%Z+!+B8nVzfKuVxGE4wCKg=od$b96ja{rIePC
zShta4t&?$WB=dRDn%g#=?H#W8v`ay&0ykdIrw}eWFWwke7DIS~v%(vj*4EB0R_Yz}
z%8O7g`+!6%s)*nk7<6424qgV-BQMOP%t`c}uh?8xSM=q+fd#Kko6X3N*l!T{OaweC
zMEG^XzhcW)ZF@$zoCsPIdTNj%B=eg0G!^1(mx2cUy}su(vawe#c+55C+?$)2eOX=0
z;t>!&OgBY0KB9R!C@C2SqyUL)KAPDN$H+zsIQ0r+j59VM_#%)O`EHD8!?eY6>qi1t
z$1bOd9S{(GweM@=d1#a<%Sb7Qq%aRv5<Ww7Nx`V@TW@%Ly*TI#cEA(rCAcH6-I9^e
zLK)r9$=EM=v%h^goZ+=;i9U1(zUI$|!)Lh8@nx_&c}X}Zb-Ya)m`%{7uM6%K*^r3-
z#;6g}`!iR)D(_cAa)O<bIOf|BbQ~!9;8sk-p9Nj3V|Pt5pB%L$NpIAT^yZMTrh)1^
zq|wBjy(5P4{eLFli}WEGA}1#3(}X3PwV&y54NJKS5ew&{Zy;(qa`Y@@F0LLnvdpC*
z;{-QEkdVMfT@s~&xPwz}b<~jZU+`#nn>HG;7jI&E&6mbc9LTS(>IjhjYjD{+=|)rg
zufgU2_qDU~v@ct9NPK=ly|wQsc}4myv=87sV5J4aBpeY5wdMVIy&_iZ`j%cw_+nBf
zXfMP)1fk1IueROnfZ0p$+Eaw@y{$KU)29AOOH8NGJ1(<d0+nOYuiK>s5D~#BNID);
z1#1ka#j-7`Fs{5x)EQCV(w9nwc!nZIhC@Sr;FiHs8%Fcg9Y+O<r6_7#R6#;2cqm4N
zV?w@R2Y{woV4T>F^w6B91m4zTR@cA5wxOQTluppghhCV9aoa1!iW^dA)L=P`w$Dy?
z2;Q1rcAz2q4m-_&jksQB|5b4#jI42btlpG$kErm+V(Z__SLwAECsjSzNZmD0AFB5*
z&@pjIqB}KeY8jp42B5ocY`8QLJlBCy?kDUEKRX(i>)zMJJt!XuO>}^ZP!4)xM51-h
z6UPdWTWduzLj>3J2{V-<>&xDeS~|)C23Z9g^U5<z|0@dHd8{jbrrVR|>&T;XODEF8
z*m?%8Lwxz0m4$%bn8$LPI`L`oxbwAJV?+vaQiNPd#r@!ye&04NU#4EYUBbCMNl0$7
z-*w6J2dOl~f?+~-@U{2(`{3&Ta8z`Vk(VpP#wrE)X=n2;vY33=lL)1O1!DvVtRO*M
z(2kR8LEO^|az1z!@${6KL$uaOTZkhQWTYh^Ps8c_B04e2n0|J~2H7d2(G0ot^e}E^
z+#^t6GbnBAE6;fujVfLR4e&OONvGH543-fpI}I;Al=M`!J%x-Ov<p)EAhBsuCmRQo
z$REMNp?j?HGKtwP<AF4o#-$wtP&+c9Or|wOHrJX(?W!2XOyl}BE64pSE=|20c<C^`
zuhgD{i$`##89M4eTzhH}w^@T}PrqZhbxd_;e8T}kQYA#~O5jk4Ws|%fkE%B$u(}m8
z1})pvsJ`7g)!IHHYr$DSjCH)}(He>i%1Fwx&W6hlGBqqBSK(QmuE<gyK1n2(g-ckG
z$FL2O{_o(w<Re;*>?og?M!<)*jbvCTOGA+9OKc=Tl|i-DlYhhlhp~~de9&NnY!L^N
zq+vN`a5_rzV4n`Az`%c66}XNuNB<>*k+g*_$h?&tQ+iX21dgrp!ltO*Frq`4$zPI?
z+!c83eVoCoiLJFPm5KkfbnLgNmc}XT3PVyY3{|=a{(6Ow!lg)&AfDVsaK*d-EK1g+
z*EM(Gl8J9Z{Gns$eX<4)#5J=BXXtr6sHhw}%|TdK<)sB|2>*EvJZ;u+Xb?5*IzF`^
zUS<WNc&5!iBePAxi(WF(V`F0LN@)_FEOELf3<z31(6`BhD56JPp9iJ3=$kI;i%n(f
zjzAMO=ijrFPnElgjNMCuEEM|dQ14K4J^~0?@p+QKwF9Etvo9oBs03WZ{u#DXb*Xue
z+9fKQwzelW?Ai4!LjLCVyWN7EdDCD?xbe>J0)0Y}I$SQ+NHZ<L2fkag^Z@utNpsEq
zt#cY{f^f`u;xT{^Z#z8Z<t-g|`k^_45f!~)cVfq!YPqUxYP9RO?KkWspuGIY*={r4
zMEdRm-g9wo?e+{m^MJNT)no?!)qB6}HoiBL5|K<8X~iwnanghiaZa4l${!spnHWo?
zeH~JtDcX7s=9MAyYGI>|sO{{_f0-S$9aKe{Pq++~uto8<B2%?wAA9&&JH8g^do5{4
z6%Ee9JF&c^kAh4dAHOLP;}WpTvyR>mAO5XJYnptH5%~@@?sXg^tWP^W^+$+`zhzp3
zkl*K5N970keUlMQ>}Mi=)_oS0_lii(3HLg9JPxB0ynt=zxgy2HP;Zp~lNj1;AM=Ns
zU>k3>?&@Fc<(LA4DSI!41U;N_)r*e@qSyv5H$<{Ym312;X$sG~hOci)o)x-n(UT$x
znA1^8vM)5!yv45}%}-1==7B+BStVH;{we3Trn8C&eGc9D&N|%q!`ubN*n-ev(3>fl
z`UTLUGK!{WT5W>IoTIxIiT$`5G;?rZHuca)DMjrE?R0ZJ8ilPtz`x+BV-T6@bFO>j
zd!u36zvW}7asu>d!2L|4!4>;knT>(91a4w4&f7ey{d}!XiP{=R+(btn{VM9~xndso
znYCx8izgJ~PEv~?n%`rM+;r7zs@~!-$YY(YCeiqSNCt{U;Q+#-EzfBAe_axmJt+t%
zt9Vf4*NAD7W3a-+(y$jC>;xAqqbIycX2_s!U@h;|ip~yNocqM^Fs}btl;~S7qS_oC
zYmKAsOnsyVBB|x8;#T!GVz?=iNpAGq|8fB=R0f^X9eW4a^%fG`lFYX2w`n#)RL{HM
z-X|9hjS9nibbJ0%qw){bPLNfer*7!I#=&}1<%NySobX_wD%PHxTu#N}l=Jm+wFSGV
z!RbpYQ@ZL~>Z%RNk)h9q%BJ(s6j#1OH3z$SHm}x?{+(3LJR|LkWOZyGFw#|TXZVQO
zt;ahJ^3r#6X-55<*kLD@s%urFbwchdV0Syks5urVF~=qmBL09XA5&1&WGKkTmxtaI
zc?qrO9f?`*o{YzS_*9=ZqvU}`nuCsWlvT0Sx30CfV=}*RPSMP1-Nt`HAh)HFE-IT+
z5a6f_J3}3kpDWxyCg!Tr(XunsPAr2Rd1i#(E=N)iKa`}i$S%Lj6aO(uS=57-vVO}b
z&u7Ac+zJ`Vu&kg_%@(0QD~-{-Bl}U)2$V2*2a57BeDo~s9{zY^m-kF>wZhkeo6GEM
z{TqSQ)C!>6+WYE*=QGsNtW8WrQ@2R|4C<&M__MKmkFdOS&lj5EK_mJqwLYz*D%`D!
zRocu>FKW82ZpN6rdX;?Ma_`JP^vcr7PGSAy0uU%+UMQAMMN?+m1no+!>`}5&j-+?=
z^-WH7<lB?stmJReq3d4=$BvN0r7A?Zyd+Bb(7TFup_PsuKT3+H2Jj%yN*Tz8(tb31
zkAGgV4q_>RsIJT(@}1~LT-i;-@Xg6TtO}@yIw9Wn&Y2HaB9`1wW<Opi{oW$RQ*dG<
zS0^+M+L2mZX3q@VMvoaE5N)BRg5H2IqAf!;;JVB<{YNKR_%7~HlWmhFg|ldFD1BDs
zx!L`jNOd-S6IhI|=0b*6?=W+Qtb^yd7mE&$%tA%{F1(WtSR~*h<~o}+v*c6Nalx^}
z*hVZO1Jc8g^jKVR1_HvD7eMKW&FzDP>f(1!ma*3^Ke-nvNm`qV@88uXN?g;e<><~u
z>=9PsLS&b?N%-*tk!zlLtqT>s%8tYvqj0bfeBPhPqM@TLx0dWJleL8xAO_c4=ZtBa
z$?lHsJU0T09{T=zmEn?P5cR3dphNB2ixZ_g6jDa$!F(9-#-_-sCThT(1s6On9G$Di
z>Il`zi{!`LJUkKUzt=2_?1}|zsUpC6qcBvyVx$pARj1_h7-j86KrE<e=H&`xoNaLI
z;9P+AId`BS^1PuR%8(?VH`}>Xr<6LEXI}Riwp(g3E4n?~QMa&h8~I}BheglcyIFIS
z01)W6(tUmj@RcR860Uo2p*7Nn9~UB5=Zs+1fnsJFZ{XxD_CK^0I<~rEqMfP^cAyjG
zm$Znav~jm9ut8CGX>2+v18v3#zu+J``sL3J7@^8>Efv}pWYCe5H6VP$D0Skpcgw)#
zo2r>#$L?Z*NrB}7Sg)FA-i7Ub$U{4Z>JmXfmUrXZFhHvSoG`c{=YQ?f8h)TxCFM09
z#-O=0I~UMBd_f^o&4$rcbktqxFFGN6tHR~_sZQkC3T>UW?X}(v;eipQH}xpqQ;~X8
z+lNxTd0r#d?EE43ZngCLms~)_CT3Plu#s?<x5aRKhta@_O4o6V&JA=k$eFvy5mBf_
z0>H1Ho&uUmarQp?Lfe!f*PLI6&y`(#PQRQBSJicQ{J?dNc;pVA6eambkO`if-k<cm
zJlsp#cpzso9Eq4m$U(qsu)qXQEV!MQ-97=tU(S<g!KvNcCxpZSQlM3@CX(K?KDT-f
z+<5K^djeeu=%Eilx1KUZIZeuF9Evgdha69`*)BFh^xm>BD3I^6kd<JqvU`jLE^@NU
z#x*84g8>k6f+KtuyG<8KQoz#h5-deHLdlr)#%9IVS(Wnj5=J<Rqk0shw3<(&aAU>!
zvDpBuCqwpSSq`k-Rj`^u)YOwBeWC+no`fBVe4EaX>Ea!PkCH$zIPUp<R74Mm@J8HI
zc4j!Bm-++<PzLr8oUH7oOncJ#(qolb;Q1rv<jcY6zNAMULIphuCF{zo*EU3Xkgmms
zq*uO{y0bc|$?%Lodn=P3=R_HmSP!l;;S{P~{H*8hsrbvNg@0^h#&DyrN5AJ4jMZ#G
z)5t>EZeZ0t2Awndn&<AGs<u2@87J!!UU8iWk?2UpEFJJa(;5XPys-%eW@8jB1x(#d
zXF9Lrwxc~}>lT&?-F-ePO)NxSR1vJ!2{U`XmMyeh<NiUCGMwPk7l5v4&U6!{V?`rH
z&Ag6a5(|NTEAgCKg@QdjY|_vCs<l=)aZsKWqC0_!$o5Tn`lD&Yy!I3rNtMrbr;_xi
z%zUmsO#^t`*|!>DB{r@jKZEH)(vCCGyArGc$z!L#oSr)6-E@aXZ<myRt2)?{;mHGw
z^B}zM#QGjbh^j0nK~;_VrbunuK1Zpf_$Kn%j5^1EBn++Xxb6;uxA-3Gn5LIld0w2q
zA_Q02=(}J}B$@D=nrr|+)73X$0h@l2J|W+Zb#jK1upZ;Pz}_zm&zH>HNG0;IRJrm^
zQqNQ{496-iwLC55Lv6*(yqC02QQtH}RS_ZSn~b0W`@UD@^noFX2LTH19`W67!y-Cg
z=B+o*O$6E6=6Oz(z^COo3b+M{X#8peFX#RiWrL^(4%M_bU5NQ#;ioq-LgJQ=vl_S@
z=TQ%TjNL(G+#lnpGhU<uWQTRtKAuN?6BB{aR+N8T0MB+euuj4XE7YTWw2qchRMY}T
zcPns|Y@}2ysQ;Aqe~|WpA5@1EC*_kTXtpI6HvK3P)pzw8Wm^?sAnq+-6lG0YU~V<j
z^4SIppbu3;fKDFW|J}{yW^PA8LAZxhniCQ9NyouH7hTKc(mfY<!YkGt$uSt-56q&t
zakf~Jw|&qS`)wOY<L%%rzZpMMQ_k6t4(8ehjsOxuvg6Oh935(RxlNoz{z7za%QY+Y
zc{{L-OMgg!l17-9Z*S-~GREu-|D<RpvOPBpscR;6?``_3!x%|%>C-a|n}lTvM}H@h
zhu}0{ZSi{`OuWYeS_hKy<qQe$&nS0>?`j}u`CI!|!z)ADFbeTcdHhakhE?;|rOyJj
zI>S|}*8uO7L|-|P4O%2*%vd1sZ{mQU>opP;#VH+y#3xN_o6wj0&Pl1D+u}85uOzhF
z%UrQwF#H4fH{h<vhS{z@N7>8Ad|7U8xXMm=V}Zc*;N%NfNi)btHYj3d-E5L!i$w}{
zZbca|9u|)_Rwi`!L^wK9l5<Lvbl)=>g$7eq)aqPM-uZVN*kk%_3M47$FviO_jeYAr
zCvkQm8&6k{+mrmfG=!GCVpEB}ZL5vbJtaJn3J6nw$eAgS=v_KX#f}=5dOsYDOmLB6
z-P?utlZ+9Tf?`C~8-Z)WQ@cf9VEv9X(a;OTz}dc~Hv1d3Wxa@>dlHAIc{58Z!%A^9
zO#P<u8i$#reCZP?h4&?f3Lf}@z;q8^d~oTFLTZyS@sOoS-^(q`CFiqzgWJ*h0BQ^A
zS%=x_EV&dymSD?qc=tGzh}+FgYxec1(>_v}5N-|h<Hti`P+L30WGab|0f%CL;N~ul
z_YimO*;89yQUnD3UYc8KVeEOD0&mIre9<&^bZA0o{R$eo53IBERgI8+(Ypt%lGtXC
zeBXW4>YAd^+-FaPpE?818^B}`A6ZWJ=MPj#iL_d-4X$m9FA`SEXY3^qnB4@75pu(z
z#?IOW0$s~3H(n{+X}&;Gg7}Zl13|pQwT7wDyNiU=<qY%Qy|u5@tNZ;KFr(;I8DJzy
zq3Hw8EUblfCD9PnfGtKsd+J@>&NVyTNA+XlSF04!p7S)O_L)YO#nXNMZj4$27r`y2
z$?Ig&p$Mt0yzD@;oJ+348&fX8Y%@Sh<GRyIy(#Po6BsAErgiU2Uy*EB9Sinvhm)tN
zmoVIb!^K@4VJPpN_%^6d`s-fGo2u|ATjPmH7!o<-!#TMC<UwApZ1`#N8t1EEq{gvv
zf0Asp2OQpvJiH=ydYAyZyY<J4jf2`FXX?!vGbU69EBcp%Z=w@*Bb}?W?7G47)vX)X
ztfk53*2iD;<f0cfw?+5dYHd`JD;Y@3N$NUJE%NYMykpt`ln16>jAcZ7aN)9Nvl9^V
zPSI0R{W8YlRH@JI4j>fkOTg$1S|`e9QWp-1<X(i)oP4kmzH(AG!O!2B$)G5Ur1*UA
zIa=8V%eujK6J+m-aV~}p7DV5w2Y~jl0O>?;$Z~-ZpqIQET=VKJsR7G!KM+vk>@r{M
zf-MbnM+jv$p7#X?Q7j-r3}$y1HTobB?&|$b`LH1idmX>`)n(|_nX*Y0#3&q9Ou`r&
zIZ!Vlc1mO;pnb2otD0~{tVje9vT&4+{9_cc<OZ?o!J}9qj5xdst3^|!DERKu3-k;C
z{e}o8!HWd*>J=SEy4Wdu@g|qaH2ZP%B9;t7#m}h_cS~!?Yr7%-Y|R%Z!artF%i#71
zI&p>IjH7}yg1lVp_8w53$h<-hE!Jseg5-~vBPV70a+^z#M=U68=A7yv8v`0!v2!59
zhKazE5r)kU&W`(&!nwa1dbX7S#_FeckZEA%F42|-!t#nl`Xh6RPT4t~G^UpsZu~?e
zPQgbI;1#W|`6KFt#M2P?-^ysICUnUErVqydaIOBswfaAgYxVyLRlTI?0=&0q%pGK5
zl(OK&*#uQca>JusxpRo4N18J0i&19FqY*~;^Ee2f3SNx?R;mw6x)+HIFp>R8KLIWJ
zixN#v(Q4yW2CA`hIt#YXO$EKF2rv$`5x)~lYk)dVz#Xg$SK1d0>HCxE3`GQRxDkey
zCUMF#c$A~Jj$VnL7`u-&NqlMtr|nT(2TJ@EPcFc@ar#^5s`1nmM1I#LV&ucG7r~0G
zW&G%&e7mY=umy4c=t#^$L&d4QDAiX5J)Y8xQg!zYM=Qd!#{p*NC3^D|<U|w>Qdtw#
zM22P)If$Zdd55-Us2RPGNg6$V*DO4!su&#ZZOI<Jt_V7=fJ<l5yl_*o^`AsA89>ya
z?;2#LJ>bp9783g={+eEcH0<f_{7==9W@>TmNPRg9=8zEq#3j5J!(`ulv4~#Qwgnbe
zNNhji060l0x`oLl-$%qHr%}PEpTlf@?(J|eQ7O!PV^1XOS~|+FT2_E!y?%~KXr7!q
z8X>8Q!tl8t--6s*UfJIwFQM*{)nkAc^t21GsRF@LNg~};Aue^SEu$}lni{mQ#b<Um
zI*T{APa%QIIK6`c8@$>GC_Y8pMKkhdLEK3_-ec=VJlxXXqkjF-w%dOvkl`h9J1u5M
zu=t|+`dbk1-&lrM5lOA<UFH5g6$W&<(FVl{ZW7V3h9RBcaZ^Uws#PvyJXQ$gar`W4
zfFswjw&VL-hwXo`cTU^6Fkp9$ZQHi<#<p$Sc6MxM$F^<m*tTuk>^DZ+8|Xog{=0ZE
z*P6_N1S64ssV%~LgS{AMuqE+^$?#p>L24u>+4f0=0g*Dvp68P5#88C&RpXgACkv}7
zSTsGVnr!vmOvEt$lUM1$I#fE-THl$7G9$Vr7*#FqLcZA7=n;$OtsV!)uJQ~q+n6&o
zL4!_i6Bl4dPjH4c_226j)2E=iAd=vMgpIK@-Eej9g3gXwh6XqNQvcpZWoPj$`mste
z8#3_Rs(;?=!-tzpz#`yU@lHl-8pp4s3Y7FY0`~-FMK(vSDDXKqItHP;AVN)%91hj`
z(DQAU1#`4PA!9YFkG%#oumb<H)4NfO?82r5M2!NcT%dE@$E>tk^U7;KuE|h5^oJkR
zB!0_o2b#nb>7b{N6ypH9i%<txYuN7UGQ<!tbdy_BJ+q}tfc3<O>^+F44|)qr>X-Qm
zqwfauwYduQJ@@66&vX-hJv4tOcm|Ogph+D5Ou#jwKhKp9%aP2bF1`4E-lDQvtDWdd
zP`X?=xY-fZ#HB9o$B+NCQS3|BCtr%Hw@3b-{8v$3lq{U3orhn(?Qbrti2bYFh>iEm
zn9@Lh=J32h_=gZ53;Dd7Ky<4zaWft-mcVY2r~giZu}d7qkFD76&$kDUkQ?Cq{(}BE
zkTc5N@y<91g?D&y=~89=*OFVBMG;jtaSXR!(ufOnT@3WxU`v|9yXhOn!I^pZ8UbGv
zt*!OSu7{&lsv?BFPZ(W&k6>yH4-}(dEa4dG#b>9!dAGqXY)ZBu_mlTH%^NN&iFzCF
zRywHjpX=fLr-hU?2b=0iX~#fRil;%zW@)5W>MYa&M|il)zkAkE-MJ}OJ%<iprP;A1
zdugq-9LrT3Xl1?<*?*QqUKd)==HP|fGR5!YHDei_o@O)+-TXcCPD^3uys}Q86Dt2)
z4{Ag_U<R{D8p?!@x1F-}XrZ;|>;fzWd5?v&F<`l3?0KGucv3>?iK}vOT7^f|k#>`x
z+K!399BJ2V5_jwIT@h2NFv{StH(6od#hKyt%+!=I;u1yLDGqbFfM^c7)iGHbze&V}
z5mzHz2f|JX?f=>tH9T9WvTEQaToVxbdzz+0NR(lxfSG_@USWLJt<Q(NvNwxslOy$q
za3!YNkZAFc$|#QO=%#jWI~BP?wYmgzcd;oF7t%W|?jRKgX^f-V0z)q}l@ui4El`#4
zzkh%%is-K<9z;Q@n*x!CH)u+!uL=C1LQpP-<QJBbe4BbBgYlw4ArQ-xH1k^fL92Fu
zzLC)fi$W`qQDfFP93HC6Xp9;ckq^w3+)At)5AB@cI?+z@2cO<zM!fNwA}lhU-Du@6
z7{^_8pk2z_jxgL@hd#0mSOB}y&G#3Dl;KjEt*A29?7O)m0{vg$m4p)Xf0Js*A(4*w
zbw1(<L=Rf^7Q7Z@5=IKNCC<=)+AR067eMHFje_N^CR?7=$Mru>Y8TtBL8l<#^7CA#
zQ6T2yr8;_=yRjXyoqSWc)k5ZNyca%U<Cm&HH;Wr`IQ9>!aDBsEpAR*-vFTarb0RGl
z$5-;tQbs_8f0kUpYUW7siO&faam*O+dp5pXy%CI2syG9rBh;?{;<ric{{#6D7?VCv
zAN(w_Dl02t<k9IG@y2vM(_W}#M-wXW>HZ#bAgYC4Sag`FVw^2wAP12%w!^N=_!G<J
z$0%<7yYIgi)z62Eddbaj{EtwYDcSA;OTD_fHD|Fy>YqMJJk#nrVnMc2MoArAkdKG*
zjZ1}^fyrs3_ku3_HoQmHP^jt*V+)(EIEv>8G~HYAYsb1rGtIv|iL(O#@xdPXf_mVr
z+^f(~SrjXU$&9<*0`{8)L`D#;Wb0xLYP2uYE27x&x*c;<PC=fh=0c|$xbRqCZdBgw
zDi98jghK%AS25{7kVYGZBNA6FRb_N;6F4ks@vg3@rq`F{`;95i2`zFT`TqbnsRve<
z)dbBgVT9LJ@O{Pm*{z-@t*^?dn$IE_Qp`_DRXt+xgK=b?4RWLbN|b;MzLwJ^t{hqv
zk+of3$L^89i_p(5Xv<Z$I~CawVmuzO=h$4-reNxE4$2O~K}tAwc+V7i@m4mUC7di(
zBy;O~W;+jDQ~sdNQ`m6;KpCKvZAyqYgxWD=ZZJW6)ytdaS;B8PHA}}@6z?Dj4_$Jh
z?9qhm;QdByHelOhH_@jr!QI%1e3W(_)o|pd=s8+Y{Caj^xM({^h9M=aA#@0dpKoL2
zax7p$Vl5My>tPGJA;2~@s&q>*lQvrTUrt`ufgTX{OOS)gY9nrZ^_D2u3UGrCS2)Mi
zaqbYsDeHcwM-Oo>V7!+)qTCFZ*apD_y~~p)_W6)mu^#rcT|+-O7wOunk3vY$2eFYK
zN`U1UI@G_*RIyHNqC@NzlIS(69WJ2hf2z9(S;6a6<8pF-yKm<>_iFI~h}lza{rLj2
zphA@@$}_~XX%EfAA$#L5Mmfx>ZdZY6>VI*lc55|(?jvVO=46h;aj1t6P~k}yZonrs
z_6ay#oaksy3UO)bQT%lQVc*3me0$HjNpM}4>S&V()f?se?Ifes_29iq{E>&PdbsD3
zN?Eke1iAK(lhhxOqkR7IK;1Nh3patf16Ne;VSQ{8#U`<(J82k>1S3=r`1<f!`ah%w
zT@p;@{~)IS)2H}9i0S_zrbT`@Uw5esuX+FJKZ6N@+ue|WlBq0gQQWvLUOwY3p{}=T
z;RmyNwSe*W-W+*kPW_ei=dij7im!!*d%E&wM^7XZj}oKKA!L^oJB~P}k^ft#kb|a<
zQ4Q~)%;Oyb^x*+`X)iZr8fIhT@`;UCA=y9Y!Mw`4dNkSCW4i`G<;^CvWAeD}BX{nb
zdcQeFFei<>DRA<)-kLeW%$7L7ES>>Emc5aD4NAKCMbUF^tye*ro8LBMjL{2xiUOdA
zp5d62_N8vg#&N1nPae$$z^71}Bo{HFef=Ouu*K*q72-w^?b?`L5=H)dHO{cLf^n{A
z>7-1%8_*`^{TYO)A`o#4+Cavoh|0~i73*vq$4vgpy@3vhZk7-}CoXdjK^cy?xCGbo
zqT-fF!G!4NdFb!Gd`ifJUuz#}&F8&PJNXGXMB#Yr7Y|^jeyls#NK8y|LmdlKht!z_
z7T{3dRb2~Cn$JBG@mZbMHcuHOldr4!tT2IkF*$R7YXDiA!&R13(<}ws)YSnR&k?Wd
zCyQZsuLWiS^;VIaC+j$dh`4I5;9JxY-xuTKw)m!=5n{TM*BsW;wk99DIFL?cex2UM
zD+H$ubFjXoO6ymHw6=rR<%*sk_W)+QPfJ@E=a_9aMi<mC<O+h78T(8E9ByS5u8pjI
zVR8HB-ETo>vf75`Wa5f0LMWM37qQMxamXT;d}B#7B&&srC#*PZLw!%EyWbv38{Kb2
z#Pe>8VU-|LhdJb2!O!6++MhQ!T<x5EB5+igX}3hBZ94-5)yXDG0E<v^BD_5M55h^U
zar$i>%Fj3kX^HtS`+7TF^lJQkO}=xQ=QDO7TggJz5|x@<-UQSz_Exujau6mF&IH@9
zyzAa7HIha|CCI;a{z#gVhp{nguBtN+3{Kh`fDrnwDoU6okil2_HkaR<1FzZ^A}~xd
z<QOXCcqHiR(w_fX1~`-6fcWK>Yzl%mta7TBip|4_-Fet2ExB}E$P<{o@~>JhGe!4<
z8thUB89Q1q`LkCD{`p9xeYshw(47wEfqI;7<$X6-7>AiRn!UR$8&g^1TmeA-mxC2j
zDdvGqyg26O<1sb8mn#OOIHlLw$>FbfoVjzwjnqodPC6=qhyt~*bXyLxC>gV{U^7Zt
z3s{bom`M!_t*-2ZdfUNEXX>15;0W>rFD3rvD6Kq!4HJmo1gvJT<t3uewU%&j=XxJD
zW<5M?CqMW-s~L#Kn9iWOu0pjQsvr4~eU7wm4aqo<WycZ3pLeVhE4u^s_@SgGky$8U
z)ImR+Hv7R@W<+zFz>FihZud+Kmr%m1h0}^Q<5ozjvFvWArQ<Kb1hU+55elxNx^XfJ
ze;-mA;lbRMSD6SWr#fy+5=Kz`a2|J3^w%{B36mwQY%~Yc=nKz3wL@RLCrmV+kK822
zlL_;cnlHt>LKt(^g*S}Pj;rM)k8Zr0E8Vc1Zga}^i{To1ts@(Gk7DvnEkn3xKEh2>
zNIa&MU_new54Gn^Wd-Q@R1HHKDWN5Tg56}k1GG7DtX2olQ!wGR9W+-ziOT<cKWg56
z-kxJ<f7Z9^&{*z%RrUS-9+qyOm6xik{y>X7u6!w@2YceGbd>az*Cp3Kc(B<CXz%eA
zoK&US?5fYiUd@ZlygX_;<We~~ogGB>={PlWhx#39{H=BiIMALx3%1Df{nu_V)5=T+
z1@_-d%N*Ma(2;k>6(+4Pdx)Ca6!)jxMKDA@kE@Y0d7*~eXR@j67Z6b{dsKuJ;m2`h
zET^A_6>Qx((lV!3r%iVZ>xGim^hMS@2<)_>U|EnTWtM*t(^C0@U^Etn45@(oJ*d1+
z$v#dOE?3fseEtF=2*Z(j=2_gKe6r{+mz0DqCDooe|8E^c5AJ#Lm7uhIA}?MonaNAc
z%LEPCuQ`rzHqiTY9Tpo7n|(KM>LAD$u;adT*JH<2m2d6cGNfW^>>(NW5@<TLPxCPB
zXWKT8H(C-g@xfInvb~xzjTY$pjQ*C#B(W%CY-LZUrLbp&<|l$2P8+}G36#hw*{p-t
zYqb9wU7cwsR$M{wh_MkKrI|T%JCvEyqcU|ZRpI1T_7-=wi~q_3^t=@won93hYkJ3$
zoj6sW=FM;WSJS*N2LNw8n1BfoV|l=&6fM0ZcqK5%Pkv8Vwa&wYfYMTiY(PrW@~w;~
z`G{Y(e|WvW`Qh3RbS$c=>N4VU>Y%PEPe~+bHJOfx>UU98`9J&R$)mQ+|F3)h{~J(T
zb!mIsR&}5-m4dJeE$muCn$bu;K@G=pYPXC?qS}*`4Q8tZVy~TJl!Pbc+uT>bY=Tq%
zx@Q0}g6cYQZA7!(JR^)n8V@6GvHR)1grcg*%l;-&Z)djp1AX-(ll)k-j9dWexbojE
zkI|W*O0xR)NO^x#ZUdhqu$}o4E^W(lQIgXab<0Rh!yn~j7gL^E3TzL?eTL+vRWXz#
z(9W25S*V`%_wpOnpgU>?R)Az~SHW!cG7RjbhB7ud7Xh!qXiXSOCy78^2d-?#F1PAY
zV55QOHO0eb$)UbHkRjoyXZp+Hu!%n^`M$U^Jf@J=1S51rI6RK3f$oSJ<aB?;Up6U(
zwiK^aw33PZ?)Ba=!UkhwFXQa7Qxhcxo?q?5JQ68qJ@XG3g9O@mY~z}7nEp2>e07IZ
zg#>pFKRzY}^+ndpM}pCLBT`D$F9<CfPrdEKyemu|z~&5d1I)~X)JVTkrr+oZ+om7s
zrK#MTnG03^R+9pffjAPPmEA5;Z_tnV7pdzF80^h<|CUIKvHIhHYZV^{Wg8QJqyH#a
zk?6=uTJ>j$+_JNo^o1pcziky26c}m!tw%Zo{bOS~**zw75fXDy^m$pLoAo5c3^2ul
z#DkiW;V`$t*}7^<ZBrI-je@UxOdrFbqqJf1I&J|)PWjNn@G5>upEN6^P^2CpR8F5j
zx4RhZyRb(c)j7(I9*m{Gb<etJIJ(rbJ#cv9x$Dy)xUm5`(v$D8U^XfsWBmmmvr%1J
z4Ln4EiZHiyNA^-RcC`z*W$k_$2@xo~)8+C&&?lDG1%bHj@|CRNL)P|_;6NvPP+x#Y
z;4M5a77d9p!bs@sgch63TQI@0|K^ovtUAwDvoZ{H#av}QMBy_`=MFb*C8%XYUVj`Q
z2LvUgVb_4fBmwl89@hQpk112QW-T!XAp$3<X7f0SxjxgX5Kq{QhBl9jlxEQNlMERk
zOwjME(+w_jBjQS?f|bb+EUcNmlis(UhI4O|l)DSVYIl-rPfRbaVnwE9a?YAhJd;#i
zfjz|XtA^oWY^UV)yr>wH5R3PP?SIA8BJfN`1XurYKQH>dezYi#IMQ(d1T-}g%^K}y
zn_z=yeC~*)^g3&VeIP!G(>m;nxZ$Y+*=*zjt%_(re!8bO9CYqm9+ffon4k5LsUZsD
zrJ}xN-Ju4g)9!c~^G<eutk(1OV7dBa;^moRW54xH{wSb7O7Duy40!d8oAs92B$%U`
z*4evukJj-Zv$C7cEfmmVHGzKC!rNA@jINk*?yB|I=Wj&(wYM}Ff`zzx@wmi@2`LeR
z@k<hYCbz7ZLwKm<B)U-&TJ@@2AHEA8k0JcS@{R$C$(Df$vfZs6Nk9`L842UPMU`|v
ztz{JptBL;P{q(XR-Fk_pjIHR9_=uxHjoxMS^B{fq!)JU26vUSe)alilRCKFEy-_#|
zU3)5V*$8%4%555FY`Kg1QL%+<$>MZs=LAN<Q!ReZLiK2iUs_J=gGW&n9?!Vjc*yo*
z9xwh9e0R9`ou)oS6#X#5*^K5N3g_4k$^{t|yB$)dc*nOFlqvBi(eb3A=bFfdPJO1j
zPS&~x{W8e3@OOLV8}Q`^5@VOK$*$9%@&aq2?&_PJtbE^UmRyY}`Bjp7fM_nnOc4A+
z??m=EM0lEvM>u~sbupK8)s&^t1Q#V6J0rs|spy(gb8fC_V!bYx{+qz^<t28_Q#bzA
z$&P*Ixo+mk8#vx;l;3OdE_>o*+Dj<7DF2xK3owr|X?*tOPMDyB4oB^@nKjy2OI?Q*
z)AGL^!t#g~l8;yayYrSHeIQ*VKQiqJ5PDL1cy<(oKg_3dY9<@mVuU*FGF6hS1+&)A
z`6d`Z#u*AARM0LsMjHi_zum(*0pft8Fet2V%NZ0a&cw$lwKSbQ-y?s7v<JJG*_bCK
z@*^mu4gSf4^@!>7$_k+~7=_@Ziog&ek)K~@VQJFe;mA@vw}(n1Dg%P%n%DZT>C1rL
zMm<XWNbSIr9F@U8soa4GnP&#{O|}K$mVRTxl`)s_VIjBMS{N-G+S#oALP-kH;YUzm
zjf~64T?fw^@MtfC&o$!@?+X@2bsBVznOkDsr$ROwo#QHxUvo&5RbpGfP)-1-EYF^j
z^cGTuqCDnWlLlf*)|w<NiyAuj(4~Y^{G(wkI=<;k(yi9@A+j<N79A?F+kEP09*;@v
zAMBjPkRq6VHlA{HfbETbqasFLSUB=-h0~nv-m}mwcJwdzK?uUVQ%?2@^t*LXJK7Z2
zEAN?Y;ZeDJU3FF2{aN<oz{xf7%e@jhgLwG;n32I^>8_ixjo_E>v6Dc;lnatUC+tPG
zJzo+mU1RiIF?6uR`-Y~I#N7!_`OdMi;14(W)RcAn26vIkkn=%T&Z>Zl0hB5<6LnSs
z_>NMl1f)NqlBX*;837=E_P)1vJ=s+N{ZErj@?_gFpS|$PWbM22U9BbP<eyhc+*w{E
zwR)r=4BC}#qGGcS7*Z|{K0bx%Yv2P6_)@Ku`pLCY{f8wRU63V|;JIk$01j+1xMl$*
zV=NtI9Aql9wmf;ZY|glw(NS*3#M|Kj$aUs0Z(Gpuy6|!PI^mtC=Ep4w75xB@eIFf2
zt;~$^`(VSmHX<Wb7-oK|s5k9VKMqK>YNEk2JtY`w_rK-hKX2~Y4;dIdcDS38##0?O
zUoq}K=o*$7L61uphc})eDKVpn_(9oaTA4Ki@3_LixOz;LstG*lyMUd$xZ?-nqR}}L
zUKrO$bc7c$q<-y49EZ+6Zl1#HKGk^c+&;0!z+1_#rYWOR3sd@7kONvz^uaWFfT5zR
zMsu?b7*iuH9=50FW~4*Q(5mK7M^>YYV3nzw`NwS;1y(o<y%~%=B1a%tXR0b9k;N)v
zq;J>1hI~Wdjr@{PIE6N%0i*seSuI<^-nzXVpM}C^lDlXr^G^QEG+rOVh{W63kFB|a
z{ebH(5aD~i-7HJu?j^g{=5D$cw>e_1ltuG9%)lu6J+Q)7ujv$9;f#rIyH^_P@2{CD
z+_{U#sY!SaOr8lV<~uOY4m)Bd&i5tM03#56Ks#2~?V{kWrssd!po9QohcTkBY}0iL
z^BG3z7PGRxNu~BP-}?rpZ-0n%0;jz}ZO7;n3XDUd3{uG-qAk(Qsm;EUAq+n#eptvr
z{6SLfZJkJ;qJjm}c_?bZe0&6_wA#R_E!D$q(?g4*N;RX5ou5%=mm=*bkRw-<R@NkC
z^#OZEtSzSgaQ#oN@!!AP2hVYX0t>HXW3EQad<$Nm4Gl5N{5M&`S@bBXMtcsO(-E2W
ztNa4{wXuO?uF0WLpA}o`C0}6g1^!;%yD(0HmmhFE$rG~C#JVFte_ZA_6^`sU9N#tM
z1#9}<ez_xg*FtdKGw*UbfrQS+ET*|h!FpSpy8FNu(9j6Q%BG(brY2@?n|)$PKd-k}
z1c$+uZ6;3d*U>=Frh`_3+#O*vH?wIkr3HgCVtQ#^8fM=CFB?z@8EouJA02MA(6Y6o
zF5$eR=yl#?X9uH@SB#_Ma&kKdY`i84bpw^G{vW6}$Xk!3&kXn7SMAK4F32qXOZ=t_
zDoPk1HvhE-if!iRqnkVFL^G_by3-O#;^E^Z&C4R4VFMdDkkzYuuihQGHepx&9=u|U
zi5h%D-~7E7`I{}nidY0=p=G60Q9i#}K`N?I3pXSp1-=S*CneEUV3PKEzQ<RtxgmFC
z=)du+@5>)ACyYQ*&FTXd`wb<+xE%Hb-n8YF)omc4uPBU&np)FSR)fnEB=eh&P{k9g
z&}D=%2{ZviuAz!^QcS`0c+1Y~J_(FT$Df&H2Ouc>By~lZVm2H<C%R>HDGEDYIBquP
zZny`I2&Gm}wP|%`F^f7dYVZ|_+qg?LZBO!kAmfYn_wdz7m$a(%loOn7KQn6#NN1i{
z8n;Cso|<7^haEY7GD%!ZQGB*lDeJU_xSys1BzQB~T{)0&$J*ZsFnlcH0Ul(D$E-|E
zJkHO|R4Ox}AiIt7#Jdr}Icudm0f?*Aw^9#ClOo$uO%+tgr5cmKBBj=}Z95{^ZEF2L
zAi2=f2M1a>pwuo$A)4%?NZ!jfjepiBS|)8%-t2x`)`cp+GA`af&Hw61dtBGxf)u<X
zJUob%hxS79rPCN5!dRG>{hdKBhz>su?dwNJH28$o1kds5<`}7^7RteQ=ry7B+qSV)
zOPK(Y?hj?x$0?*8g=392&raG}T~hE$587*DN(*Q(*OR2SFqQsJgIm2>Q97X@)xe$;
zZebgrS~O6MZH&9|gpO1|zo0A1=t57shC8H2=%<}}bZD<iG_w|-tv6qfr1IUA-O^$M
zaWn12dBFSNp7}OfsWAC14;4p-f&3kVa1rL*d9#e^u(msEsTOFM9a>P+P+*$vpkTXI
zbjE_v>>$`)Fj+C09=%x+%sI;Lk!P>jYdUDZ&v51vVbkw{%xsO8T4)n{`gtcZQWL8W
zqK^lu*Ka9A3(G^{1`B%0^9+hI|F(C}X&WYme|DOSg)vZoK*3!hc^wu3UDY1hYO0ic
z<HTx|%HSZ9TjeCOguF~k5#rauD7dwaQzHFZ){8wn*BZpqsYsIPus}1gs<&(8D{{%$
zeHYkdAPIprLz9?F3J%Nucv<oT<KwuV(93i4IHGmpMsB1}HNzw{sK<w&&U9VNlAm{K
zRqk&1aG;&HiRv3GzRhla)fTVbYqeT3GtBG4BO6_@^nly-urgsV60j@#F!G})^LM&D
z#HF*%F&_Yk^?#gUHxTiNe?f-{cIe~0V*M-h(&@Yy;tMV>4BZ5EmCn^BY?UTyObskO
z2}T2nXv%IR{O^cFe>B43zo)UBno|E9eKsHkeeORd{$=BU=cMkEV}(V>$s$b9#ef19
zdN@F`Y|01+Z-at_di+)9yGm?LUnC+Yq|O#>Wvc+jrlj8mn8S%cE)hVVtxy%|M98x_
zB%-wo+qP;ZToIV+{v=Du2JK6x7~8Cl@)nI%ZzR-`yphp=vZr{It(Pz~d}N73?7UK{
zexQl9v;*9z?4<-l25vmIc8*;6k*=Aj2qG-`RsJgA44+A1`521s{^fMjEaimCy64T@
zo_go>X4bRzoj%Qb%^#64_bDfPaxbyfnD~<I^`zCh1c)}db6f>>-)LB<MRxz0)xnW$
z+2R1R21Z6o$T=Su&>$o6ety6Dv&O)mGU&$G644^y1E$?E6>q>Sn*W-_<H_%6a6aH7
z%znIHhQ1a}lUI)2_Ouceu^O#$2X(M6sMWj+RFUZlqT;HD=5PTaJ$P%+S`lKe=Je7b
z#WDBE6|;bR5Yrucm7Y^dH^Hgjw7b&VM;wo=$`OpHF28UdP>J_2oYPNdqJwxA+W$cE
z928RC$4C>fUsAm!o_en*ju=7Tr2LDP@IVuylbwsVk<aCc4w<rus&~_ErCguFUaX;z
zM*NZ=T*GG5?2m%(07#(^EO`u9Sc!Tu99_Yt0pjlZ$&-W2UyzMVR9@#~0SZ767-fd+
z`_ETDTWgJeN%tNEE-<JA%RhzjAh%|i2G9k+zY{$W)fs~T6zmrh%F;{kqHZZ|b5>es
zvN<=0RGNEe$(}ONI(L62r1g%E)#m*oS1`OHFt)y9J6Pvt1;wbDJ-?j2U>btOo_4?<
zSlTX~`V`iSSn>Fgq~<?5v`K3oksy^D(gN;*;+oYf6tQWCbc)gD>Y86!1Dw=`+*GQQ
z%>-;(D5;c7pwhvY7P&gPRhFVw0pO`GSDB(l?t!6h{5Ax@XE?m4(mQAv?>g4T*=UK)
z(B(8Y$?+i_&K+|}@uvBw_%FymFRSTBk8YYWqARd}G*3x|J@C{Qk~r_Xt(bz~sg4rK
z=@=IaQoM@L0lS!2nbW$eA}@ReZ38yM2QH1K!hLczX~rwKky0(r2Ztv3PrK{OvtWLB
z5QA5%w*`{8>%Q4*Lt$ntP}8~X$e9rCVPHpc&g)Q_4{tFb#;duX^yv|MFV5{9KjJ*O
z)<;!5*@8<Hcer*n;*H3z*MEJW3W^*{mDQf=Gm?7Le*N60aO^e|Bzw6589pdKpOx8-
zp@-;4RCukhEpz|0r%u22X&^P%vd~R=va9XYg5u0RyKmGQaV_8`Wu*d38(_z69SR1(
zsUwMe01TGGs&!Em_<x3OA6+9g0yR!%KcwK+7qbMRGxi!cuvLktGqJNgt>apN>NvZF
zE8nYvSj!ZBI5MT>tOR80vPq{^U^2yA_o3Di2SF8dOdEnyg=>Vffy)-)IpUDb+2hcb
zVp+%&cZ{3Lm?+=9j@ZY%a@+5Ufk^&wf4%xnzRyVxu^Yw(r>ci4sV!#kwX$cR)Z#kG
zgaHJF1hUN_`WIN6A|()F6jP1qno=fn3U?K>C7Rg>UI7s$0v9fO%j!A*ig5M+{^x%f
zPs_M;s7R%TgFG1QGePEcNt>k?rrdPlpDDZw^0U1x`}xP5`7fSDLh*R8H5;FL9Gb>o
zjX{655cIPi`<$hgVO?iuB<2J-M&Hm!2<W67yiYQ^9%y3K`kOt+PE`27X1Bfg72k&M
zHO1QSAOZI@7emskKAcdIlbSZRT=9DfQl>Mg)NE3_MDT*trC0+8j94TJJ)c;e+(Yh;
z(jg^6QV?bOR5|?wE8<mJi?9as+8*PYX{Xsw_FOPs7%t2hZnVtwmUo8E%_d+b;cdHD
zkz(XsXiZ%-ub$&Ka&YwRvx;lT=<%Hm7`t#N3B-6<{cO9<kQo5x3Mi8WcjIsj4|4_!
z19~z-^w}uMK$XWQ&L(4X1WP@VT~(^qRh&ys@>a)B7-{t9o@;477t+n)-h$ejqV83`
zzX~~RteQTu2aaT3(zKV0`uB0d6^NpZ5E=VM@2ow`D&f9am)L)=AjtaWk&`@fhwDLq
z2e)-P2(z3##emJ3V9eF6SP5{?lHa%ljB;#!7TAcGV)+hh#%49(Ao_j~_QL+XGd93D
zqC_j5b#}&O4hY%i&qt4k8~Qe0;q9@ol{1p+*Gda+4rP{-kjOk*7tOFx0~Kuk`}h3;
zGZW?K{J3^+`vVe4-gWshX1vi(7H9H_fl-%+xaf`ic4sx5=BlhORs>xSE+#1G+h&Uc
zAQCha6lrJIphqzx%?f0ct;D&o*p>`P)D@}DX>0LfNz&*pye{Nc+LpZvVO+R7_Y)!C
zK@v5i>SoUNK|1=Sl``kS-J#zh$(PL|z*4<BOQVmMG`n_F=REh{wC?T;B-fag!0N=L
zjg1Q?FGO;D>!!-g8l8I%0oH1euI6v9lWKTq%;YZ9n`)aC8>B~e0;m3!8W*f`{cQ8O
z_K8&k0cYT9%>RB4ZgS1;Nsgd5O3ubv#Kl7R_oXtFX*M`+nJfUqF}fg&NBA}(N))G{
z-10EC6g$P|&~MlkSt9ia+*e-cXj}D83G3%oc>km$Pfu~LJB6miKpqy?wDmbY2_Vjx
zQIM{sdtBW2_l==9KKYOb#6PfXx*E2t>|AU%x22le&>6u65g%a=7o3<|+yn}G0d&%T
zF@B=)d_NIeTn~idDfSn{FxSTCVhusjK;P>E^zDX)>E+Xa1iJch`egJo1Bz(w#by=i
zj*qIbm^eJ&f&GuW+k1`sAhBjj_lP>-FvFb7!4g;tsz3U&;uaL<)Wl8aZKrBmDS_yw
zu3`tCa)*4S)^B8{;xuBtoUo3xlCCEIGu(rHUrTZJcg&2;$toNgfbFa%&?NNB=f+x6
zi9sf4=*;Vo3I*CMqrfSrru(_Vv?Z=U@v$vuLER=%N{#;|moE2RX?C=Mcq-Z+?!Eo;
zuH~VYtnOV3u!NM=fVChW+;E?(r}f)wYRP<k@xSV0ypSTzA}M9r`}3H!KRKm15_LFR
zj+Yc_l0Td=piAnNb0~_=JoaGo_fdJ#R?4Fn6+eiR#OsbhNYD7Q@!Z4?qLNPN=#%|r
zWu+9C*QtuVqK+0z3%&2@jkcE}c9&N%Mx+^Qut7u+g?cdj@fEb6V0qLX{ihd_z@9;M
z@UTB;7mz5j;b2eWk3mgzx#%k}yf~J~0FFgQ9q_5GIfE{wvN<(Xuwh`LAD`;rHr-@q
zS4-krdW-iV5N^`RrBhcd{;Gp?_bOTaA_;eKYHPHm#}YrI3^NMa1B!>eC7a=(X_Z_N
z(OD}p)MX_s0yG=Z@Q1<{X}6!p+O88f3n8(>Nr|Wg<Eg>ji-zEzR3KHFLP?mPK1fZ&
zv}}d1$Gh@2ZgOVA{O)6vepD55V_`+iV_^C-mt|_XW}f2>c!Dy$y9)GuGz}BST&-yY
zbD)1U-S??#nxLK4I91z|nvAsQd(rMc&W;$t9NBlPswE=GErs<rDdcu{rh0QU*7R&_
zD!HvSqP&dDWp(gM-tj*PoOn)Fu69f;=U=nAR#cn8Pz*K4r<yc$3z{8mp;ZX0n#iIj
za{zJ)h+Y|%fB46bG01wK=jy<W^Mv_cLA?$%d$)%!4p$E6!`P!MrB#D$Cu|B3jzA1%
z?8Zie9J+KKR6h+A+(186G31fBsuE*oWG%<j^oMTk)~$&;Qo&n8dz<Ta)R_+?ziUEq
zJbmEzKx(NUD*-YLhI!lAJ2q^EgSE_F%IF0u4;(=-<WAd}$r&O|N35W4*w5@kaJYh}
zN}^ti#l-BBJh|d8M*-3zRuoGHP)w5jra_Gz6`S)B)Ee?unwvBT>#tB0t`|=|@pGm7
zHRa*VE7B|0i*mtmPsrheub4V(gMERdrBu`RP+EA0*nO7+!400YlG(@Pw`6u58#GhC
z)qRCCo6b%`5^0PfKXJ~MPf}mN$YQiNzD-ZbK}{p2V>t%n)zi(HYT8gJ&p;~fb1WPY
z$Lm1;l&TmB9C2aqeW(=orgBHFMvbv$F?~V2QyN?j9{H8%L5n6zOnT<K<T(?R*NtOZ
z7J}C-4x0xkH3Ed?nkN<D@4BMk%QN+`-XOW1x9v&!-sl?cz|3tH%)BoQmb|jTAOlz8
z8p{-sa;Dj{!;osjKb71)xxm$KDAVmfa!S<`SfF>RLBRMC-ebV3ha9d?Zm!7pz@Hu<
z@T_g3*Tp=UX2&>);!B!bi#&W3uRb}CEwUy$=k+EO{_66>g7>u~(e0ZJLQv<^iAfnZ
z%N#aThtIszV(y-;+2Dy95F1&@yWqS|)uMe~J6nYllc2C8ZH|e;x(~^px28F_S$lnF
zirOH>S_L-H;rzpey&m`S@m13W3S|!ug9S50tI_w-^JoTPt6+MZ60)=L=l}X-dFP*8
zAFZvxKU$A4?`qfnNxQ|;B5}R*62I>diJ(GQ7FZb^*qqQjx9+Kpx{eOa44RL}ELv+p
zSWwp(*`Ys0$ivS4_mE|B-h}djo@0P9zBgrkj!*n=u)#`dnQs@ZOf6BwXwb+nCn<co
z_JK1X&$;FA<w*=^zh^8T3q7&o1IH(D5>}pqgrZ*vGp0JC#KV6tLh8+R^a{Q~Ux|;E
z5x>mo6_bt+hnJXf%&eodjZk!-#S?aeS8No9#VFpE%L{LyO{u!~41p@;a10A$N(}>f
z{ZrarM})2Ksx$Ns>7Rf7^4zs4W$~ZVfXFRaVPLLrkI!0}yQm0Bw8kTAb*EwNt>l{Q
zQlB03vudj6LSlr8{?fo<HfUZj+TW4Lw@m7$<ap-qbHe_}S5~aiS0f%C*z^qHJXySq
z^77CDFy{24KY3Yr0MyV&j&FWLF2IT`q|r0K!Gep1EFRS$57qg2VSE*<Nu)SLBcC9S
z#plbo=-a?BA4&}NV_GAPCkfBBQS2w%zeD7#S|7b@29p8<X%#6QRy3Oyss$i2+fc;x
zgnMrd#@8axq!;WIW$`X;vFhSB`W0X4XaFH~bx&#dFYlV9k<X>)thn`xfqA~8U#r0K
zfdIt3j-(DZ_clEH4C1~l4~P&81ajFclAu<z8~8ur1?2DPRtqfpZ}Uw0=h&wL{7^h)
zqLk-k5Gs*^)14Mj_Ijw=Ajy;YD*;<pm!oaZpLb?dUC}uWzi&(0Nf4Yg&f*E_MgjLW
zZxAm0Eb^W-M9s!+&ud?!x5P~kxYAHLn=dGa-%G-Ds*quxCL#GAqJ0(A5d-EjdHn48
zq24On1@)NHobQ#R!lPc~KO9YHf5F@~dJ?d2pl4w1D-tzraS=G?dT{Z=B6V1z>@@_P
z26&2(by|eX74;~B)<j>)vyI?kJYmoTCqW%xg(DWBwLh<U>oqJ1AvVs3%GGp1T|}kC
zGk-5$zlGNHJe-}I-V2_PnA19^$+D03TVkHf>#!n{R{=;<(+G{7<op?!nhE|*+)<wq
zr<};`I>gnEHzC`v<YP+d<KvX&$`u;sq%YpXuBNxH{LZMCHSU4_XgS9mVE^Li+PZmo
zVV?2idUsjq8Fup&@vK;8ZPKgZ;i%<D{RgclzsYNprf{P<Pydr$XZ&#FLG-aSYT<k~
zne5)2U|)qa-{PinG+0&_m30A|cVmoRk&yDv&+7rR1>EggBKsQ!vj`j_xgz%(m2?AL
zEnevx!2K6T?^HAx1Z>xCZ^5J}r$>8KQY;5O3}wh99!9jHek^9(_tOM!%+`z+_LnJa
zB*N<}xA%QMkv7hho^8MpLVr)JuLhBXBwQyq_edOfk2Q_ga(`@<{a!lpbnjN~W;Do%
zS}0Vq8-gtnwhR(lULWkOskmuJC0mpAlpGH2E3qXe8)U1ll`*%#s8a=A7wloWt*JoG
z?7M&w8R|x&<Ujg$nkwAebvOl)L=G`)C$Oeb5G_TU6QM^0pA7ipTo(I2Ii}on@^%Qb
z<tG32rv_H{jR>2TU^Tve=NR7>0sk`Xy)C?Uzs)irKa{iy2fJiGwSMll%$}vF^#erN
z#Ks~DEAgaurkMpu?FBCf9cY?xmPr7yLs61pTvWcB<Ka8cOOp1>cevX(C>}S64uKv7
zONB$sUJ}U9vh&$hmc(*jFEmQ+=g!klY5cd|jpHaIj7C=W&k{Pm0x@VxqF-KI0gX$5
z?2OZJ0pa!X%sR?}PJOCQa(IMIhv?oo2y|v6if0RJEyKBjFKFso)#4Za3cDw+J)-QM
zTup~Z>L9zc!Yj#&u(wQS!z&h8?vS~QsIegL&$S4m_%|~%1TMuF^ms@9O>F4L6JTUd
z!=e}rs6uJDy}y0x>Bt{%FbvnIiBF>8El-*tfVbR12ATuM+{>I!M$O8cnK<32D6yqe
zf^un(9C+aKttBC;^d;f3H=<uRJ%kk8%cl6-gJeY2S?|%54UJ|Hmwx!D;SJK_0|$(#
zIKol`!DiCcg5N=a_q7PlypIZ8coU16ce?{L+0im3m0#%=)b`x!xUWsd2(`NvK!RsN
zO?fx3<efEN8WW96^c~F_!u<w!;(k)SeJHI%6-|Vt9GP4LF2EdtB7xX?;V`lO1HCg*
zN0>JxQlmsY$rp6>?hWjZ`2b9cwztYab^?;e(n{~d2BR&geHUnCgyH1(h>dT@#wf?S
zlZnC&ooh`jOn7LlW}vyr_Vp<Grk}c&0X-HHHf&!z+zMv!u*Q(8rc>alT8bD4?gbR&
zJ{%Xj(O|!?l=PR)TIjIn^5Ry4Imo+Sl4+38J-PvEhm3s|k_ecH3NA$a`14&aQK`1P
z$MY!elBj69A?oH(agjjZ8jJ&VZt}E%wRoH0D$pzvn+OM$Np>+I-6?mD>)3H)oKh0{
zhge!tup&Kc0i9Spo>M!5Tfzyihlb_0wy4N#Na<A4DG6G8$X_M0=}t=^Vgz+_RY>iK
z$GgJ(mf@dvv_;U2S_iK)ft(65W1ciSW|@O(9HUI@<|_PqDTZN)cXtcVL7kR1Z#4we
zbW*%+3mK;vfz&HgZ$lij%2s#E)^48~P}?s6-Y9#0XZf(l?C-Gvoi~tW0!72uFs6%7
zPAzPccfI{1uob!8_Uf6?M6Uf9@Tj|}0;;-E-h{nr$JYEg9<^}bF6nnwXepEBl;=uK
zp*3Ooqn`NR1^!b@7%CA&M`q+!C6neX3B=3Sg|A$4W~e@CTM=Q0t5^5xE%69Wr`_;m
z4T?w1%RD3PUhh>gV2`Az3KCD;-})EW$zv=jmxY(w+8kZ%LvT0+e}pj@bX0;38^8(#
zL-!UCQ96@d_D0Vr%TE@F{?y#jJ?;i|HCD<~_y@|Po{vK&4w2^je`aM(2Rt&?JqJcw
zWK!?p-qeC~VcbJJhs}BkG!>zsA{tD-p&8GA6ttoPrG_~Ds2uFQF^pO~_%QsT1;r$I
zIkEFlBevq<fi<o5lzACAOUb1X=;0~MtdxH*%G3;DU838(dBx=pcs64vN?T3s8j}&n
z{zN|+i~48jeXogH>TnIuH0HQ2y*HdPuX6aZr`k8@ZhkECO=PB7+9X4NH9i$E$A4Fv
zN#;pSYj5Ju=6%WJk9P0lG1iY+`oI`kz#-?b%RA4yrW-FV={SDCJ2RxE;i@7=tddNg
z!VWqzw$B9c|A9cAqr8*CFW$>a-skzR>Ea%;T)``qzj0}RodPFt)x5uKuz2DRN8n12
zgCaJ@XB#wp&w%cOV3lIXb~qD8+g}Yo%|C^Rb)SK2ziOsVKx<L|ta#N!^MTir&#sMP
zWaa7?yNpD-`8oZi3)CFAU3{ha!03DPZtZHXd~HuAds=Xt=z@pUG7B&rwBj$SZUMcN
z2OQ-(MezSD2dDBvki&#lu+)RiH+{jUyTbDHFKG6e<h^E{DL$z@hx!UPgef@=@hqaa
z)TTAOBzU?j5@Y@ZEu5Ws-o$zOTwUpIt$UbmdzApAue=bA)(3UuAsUmG7f(Zw$oV7l
z!l1Io71)~1lOt~t?WhG;#0fzWj4lp6qUrUSssMZPd)zo++@h7O*Pk9<9(;~JKh2E&
z*^(l}{Mk`3iyS|hVmZZ-TitD=0f!)y!YN82F8h#Myp_GZHy9862dl}!Gz5<i^c507
z+HDA~_V4;xPb5SmVj7M(BrkvBpU!Vs19q7PU92etE)(_?=6`<aZ@)>gS-1%O+Uqgt
z53CmcJW4RSXyM_0gxu9l#-N<x*rr>ne9Tu@6YPWpJ!6FD(#HP^SWRh$p>zsTwSfK{
zF=3xu9~X2*PysmN(Dg92K&IGwV)U8k?Cn)-e{I%gq~>PsP!$eJPTg3VlX<O4V&*nb
zudXRAG(9-hi1C_WkF$TM6wrNYv)WJ}A2(4<I%pCV*VgGbjjV5QE~R`|Nri9p-Vg<o
z;xL=~Wha-zSLiug*ztmZ{M1xQ?q8zsrD`xt8hRKUov-k&Rky|}?Jn2J)jqnFUz7o5
zUD0@b&63%2<uiY*brR(>FFw@m5`99aZGgZ#vLN44`U76Qg;@5d471E6#w_2MIU6XB
zjr>x&Ro3kYlOFCJ;1LP+_FjQPyU$R9PT~5y2s28VYrNuS5DoSI@<x)i9H<t$#<!<$
z=4}~J7Mttj8}1Me2(qfVpF{&V-CIxi<fKy#x^H4FL{J)XeSWiaLDa;AZF4nAsOW_p
zW*d6ht3QH1E)t?eJNLux<{7U^FyLWi3#TN;r1{POei*tXCfQy2yJf6c=<q@|gE=dA
z7G8EI=}*&#LK5eNrmDB$2e{f4IOxfx4XB35dCHvvTl^)^h*T--_VA9%zI^OArb@Ls
zxHY>ol$3^|s>$v<_C-i!p7p<OAdIb1UB84&`GjSNzs^GOyY=t3sf0O9(7N3&bt3EC
z4_84X8{hU&^<QjlqE58h!wN?OeGVw0X@&(<s<<X;)etG%SgENm5)LK~X^R>x(|`Ur
z%MEB>DI(B&@nV!ZH$_)G0ed>GN0ZKJ7JB#`3W!AC=NrAQ#>2anR{J!*OAn%&7qUy{
zet{M52N!GiS1y3L@^;w099+$O#ScXUlXFje-pv2iTEXCfPn+|Ue|C9oaPC`O`pWH{
zpC$6&-soXPd%nDs1(`O>RVhKx`na2b#5=wnA+^jrq|GBCk}OIpmYym%Aalo4X-IOb
zuGOwGM58P>b~$JTd0(3jK}`MoXuZ_B?Up_RhkdWEM|WBeIZ>(n6)MWVnyb=X6`(oD
zX311cUaesu_R@5+=(O>~HTf6UKk1)f+-zWOhxj~Lj6w)CdT6OInS;V-s?)Ot%#b~@
zK5udc_r(dyut^m&hgSQ%Msl?&-L%yxXIYwwwNle^WK&-oxKoqZR*w$h>4iw|VhKh%
zvC)8&>XoMi1CRKQ`BRf0p{qC`7#vuZ|KqynMV>!Az>quYU8%c&XH-z<)hJ;fz4vDH
z5}GVjxYeDhu3N9HQ#wP9{qWeB4DR~Yu?7%C>8E@%cmP^dj-4M!E(NnbOU|2{AXfUQ
zJK=EEy>9d#mj_~WRITaZC8{d@F?1~smFq!FMQ>4r>#}R<D(<vprA^PaMV?JbA^d?<
z{|B@QlOw&Ke8z0e1Z`blXP^#5j}uB%<O9m8F=BjQnXlGckDc9%GzGx`^{8|(|1^8x
z3Dk&mboOg!2;#DQjpxZ1-^gLViq~wkm<Vi>60#^_qwI*L92XL8&VSpY6~3p{2D^>m
z1r2gSfew65#qcnzmz998!Ps0uk#%RzA-(YH4&6rpfPs0ZiM}JiHdNNu6!?{_@9%-B
zWrJ0MU3Kn);@wBfs!ly~x>zNxU{`UUx4x%14Hde4Q~K>GVw^bGo3|Sc(L0*rjpryC
z;TkHEh!3@4B17<pYu^9mvfjggu6!{rvq^bZT9f{%RP&I4^M(NRzcl6E7~0+!?8Ek+
z)yno@d4_icEfS@<g4A`aRxfm<rAAF#^IZ1JzN52m-f~4*h#C0=Ev}nCiPW11!>uC=
z+$k(bCR{>@W`;XPb)J%51#JH2a15GXG>9fZC<GS-S!JdP<CJe#KCEfGiO}1+A~GD{
zHldMye57G$|KlW!JZ<gUH|vVLmxRK2mjngbqNys1)a|GZYJF0jDYrUcS*DCMsIN*G
z3jhjeIKo}G@RR;W=`G`t<AJJwEKTr?fp$4pALBJVy@dbrgJ)qBwp{l4ZQ-{NCIj<M
zRS|g9u!E?Z>5Oqb6GD15M{sv5vPkq{$3RMsr6_wA4IQ9K2gl*~X{|KgnCc3B9C|>J
zD$>jx7ncNK)BE9EXLF!-6Z@kN^Q@RVGK`CJYL*he&;d$s^D_Vr*a@?QhR?gN%4IR@
zpGoK;GvZs@KqYIt5WDJhnePV2UPIn9Ang$1ES~NRqyD=rVrdek&PiovpbSq%*a}XE
zlwlt?#L&4?rFdPsuP?5H;z7JZ<qkYP@dEE&L9=zq9U?JJ`s6f~<RX-#Dje>{9NZg+
z^-U`@uK=eNF+q2mBw$|Fkwth*AT&~2!u9i|Cm6u&SdZ|S3Y>A|hInAw5p;&E9oM{3
ze9?Oy4H4hVA_g5ncRg^;JYI~WS+ZDm9pdJF^oTASZ2hBj!kb;>nG<Ta5dI3i;2zux
zEhNRKA(cowi;W^xvwB0NzO07-7+wJLtN$qe-RE%}+T-=JjP@{_TNpRL%P)_{R1!p%
zAolWfl0hK(5qRKnH26ca67RFkMC;J=1zS-Fz&7zJZ@A)^93*t|jjp|x9(^NRATLLE
zMP<~bR?LGBh-tRfvlb}%!Ua_~PL{SJw<sQ3n`w<5{|n^1ribpAP(wR{n+=MN1D`%J
z$XAXB=aC+0cj}#}LD^Q(Afp=ebuHAr%luJ=w!I^&>g?U3wDakOY_Of90I>w!5S2}(
zyC9nGeUP15@0+Xb&4sjf9kN=1)7np=8uE~A)4`<vhs0|8y3P^BG0Hax5wiNS=`!w%
z#1^gf8vy`<qO9zst}T0)GD*6f{beYgiq^EC6%xfd*EcB<GraZL*b0Rn2R-5h^8=+!
zl!!M&TzA{Sjwye7j|F!VP$LvDd9fzr`BM<VPifzwe5Z+c@f*H@c;StHEQOJrTR8Wr
z`kx>?PI)R*KK=P6oYR;Wi99wMD^&g70t|fHGBb9q48#0coH#~2J!dw9w%O7YRxZ<n
zpY2^zNN824km`VaZ|UL{DbHK+G#4o`yk{h+&(1RBj9k$@{26O3)+}s(^aD4C<<(d;
zS1xM8(0rZ0K0J{ZMT|A|_wk(N4}AD^tmyE_$HeV&G6{@UfyK$*M$<jq!XqqZ0Q}nm
zq!Z%?DuaePIkm)%y<adsx&8b|UckyAemsXssY2Yd^*=g#C)rOpaBvTIZ+3TGyzcMD
zM{P2xRnNGi^V@+0sRNO&og+ZTEBxC%5LXv&9>?~A!s>KED-9w>v}^{(Pw&f4gZwQs
z1~!__TqO^yn^!{8?FChF*}B%NM19YCK#9EBkXAUBw`sj+Zm;kA3Y)%aBVbrpdk@2$
zGT(MYluVk-QHk7}8~0q;#iTzaN*{{&$paA$yq%$MNos|MlEpSq(Q8h;hYgGNi;giy
zVJ$!!DuFFIz`8Vryv>T%3Jaq#h{ob1o5G=pGk%NvuqbSU=f61DkJOMY5nOh|UNUwf
z?(kY1V&T$WY49P@kPdGmDBF4spnwwUKtd$)d#2`@<eCT2WEw?D{b9xy?Wvn`1N-po
z9ZvX*6aFj_!XQz}0GDpI6A&wzD(80_pFN?ArewE1wnubUvK5Cn6zihWwSRBf(cPh+
z^^~JVr1#x0JI?USZs}p9ECUBFe>}U}*#U|?%b)t*@AO+37xEiNMj=tO@_h1ueW{gP
zo1B@l(+R7i|Gdrj_xqWJCVogSDA!*UKDcp%%yr^GQ2IB1`i8?H20Rxmk!{;9QL3LT
zMP0v3FqF5wnL1tr`Fq&3Ok~}4YO~aOPBirA_X-t5s$Qj!L~@gyP6@777GDvIaU-43
zFC$^eoLOw*P%}htT4ECwq>WgXpi${fjE}QIP=t&Y%iRUi^Rl$X9d&KzN$wPWh(KEV
zQ1E26Lv<ODX-zrEyAvkeY#9VDpNtX=<%Kv(T~)xUKxI7eRn>|&Jntyo?u`Kg9zK=J
zL0Si~1@D0aL%chbRF2ttuKROskKD;hIr;a7<a#UralOC8#nGGp`zpHQf3bHCVWI#{
zdmY`eZQHhO+qP}nwt2_4ZQHi(ncO6Qwn;Ww<=ghIpQn3KRd1cMbwtyHeGpwH07H?h
zbBbJb7~`e3YTzYt+qgdD)}FwSsrd9@Z}Qqa>&`%XcAh%;$&$*zc~s&<QO7w#i_&N_
z@q905J$o9m1Cmxa%>aNfCLDus!oO{_n2j+@vV3(^)S)O|E5>O_R*kX>k^Pv2ptD}d
zyvRWmK2fu;k=4?7nmZ(UO_St=Jp+za{BaVW>rO%i*p?NFj7*M0xzso-3Z+8WUi|mY
z9}KhvIn~(JCNU~@mtU;7E`Z9mV|S-M_!=kquN5L;;w%cKU=Xo!r;~CNukpxVBWqtr
zr~)X+V(h}&BdsT_6{XtofVs;TWq+5}Ws&eX0K_c2_GACLXvrb6bL>SJATI~QrrlJ+
zqv?h}a=?(CYaasr`&&C7eVgw{j6KDF3ru7P;j_G-CgeCcv25nk;aV%f&WrU&fxV*o
z>wuTtD!12n0J3;<py~`A=@t`5^FP}FGjFPKSnO&#rZbk%8WCr|bX{fnrV!e{DOkVW
zi0tPXnWbrmWTD(u_Mt;X{WadsS@^hsl1Q$T!_^i&HTHRYnP)*;b|VR<qFdi4g2}h}
z6=SaYn^|6PLhU39GN2z(l|pU67qM7x559=X(JHm|M1#hYtqMR`ht|bnu%G*vX2gF6
z2TP}P%*gLe&*$tvH;+PLL(_<DeO&;r8zY9N!{{q)$>nFcILe?8^|d*erURmzdtHnv
z&3N)l)P1WG@^8GK$c_;ZD!cofyU-w}ziytjH5+(=fsgn*75H$h*^}Nc?MNoFLSayr
z`J1hU2eIey5rlakvzr-SdMrgJj-!&=%U?hvZrk|Vt@m+M75U%2Wb&&3@lH5Za&CON
z54h{R6_`(Qd!{mr;tV&I#O)j@`5%3vYg%O8f;)|&SPQPH5|lFkR7ht0o|w!F*W_r_
z*=QHonf+nJfjd1_>rn6Wmim^XGhJ;wNWTm@E#gDA4BQ@?{-c{0$r(AxgYcO7j&%1_
z;M`^Z(la71q>`ZJGEnQ|Fg?Jc01FNTjx^EYPC!=LvMQF49sqt&x$eItNwQX6Dfo)Q
zescx=&qf~zBzVjT2Wlk-A{l!J^0O-EaOE*&pG7QWUDerCzu*np$nOH(-r7;Nn{yki
zX6}rb^}BK0v{!Ladhe{UE}g8_10B({$n#Na?%_t?oEwaW!Y^8=LRYT6liB<Bcgyin
z%=z>t%OJzJY9TDjrP3%A8_(*_x;n8U`%l>k9derSS38cdoqqMVky#f27Anhwy=cWa
z(IY)6&q`_E`a<1PbQbf8^0b97_#3f*T56!y;|pJ=a%k$@gRE`MAphRp8MF+WM%Nn8
z1{yhe9X#ULM^_^A_QWToLSX`)Ftk%}lbZ4O>je=?4+WqvLw%~^-s<Ltz-&%e=y3zT
z%B!NH%8d;1Cac}*M?XMwr{)%twiYk>ZybHJiE)uW#(_*?-jk5}&#yS~tdgOEz=^Gx
zVCB^A>V^qRzgQjE;Yj?PTyUgc;5;>L4rbq0Y(~d@Eq`z3D7q=i+O!sL;;`nl8t~+@
zL1=JWr+eYEIN3(BjTkigNit@e-lTe{@@g_vW|55yokFI{2CO<aE0hD%Iu2ybsYAtW
zeiQ2Qv1xiPC{0*sN?XkVhqGQflYVXX+NkT($UK7q+?}9fZ}^jak7<`o;X5ThOR{w`
zZ+i*DJ=+>CGB{t456X_$F>^1O<*a<5s#bh6-esvizcIsFVz_S>MZ!Jw^eQH@`eRYd
z->wjLn2-P{piStreVYZSC*A8fC&6?|Erx=)frClEyrxt1SWo1;?e3YoQK8f1bZ4Y5
z7?>Xj4wVP}y|<4ml$m#j7gB2CmlJ`7g30{|#JXyKo9Z*CSz3i710$E!qG)i#vN~sK
zP4oACBTzdW+Wz$p<hC{=1^iLm{;3GFA!8%QYZ`o2T}ZfK+-m^5en&4|AqT6SJ}(9)
z7n!nhI9~LB0|h-HD54;oB{?|--d#K1?XhEW0y8wJPP;++WGUZx_Mwgy!1qtqlI$JG
ztkO~NJTpp!=K+sO_jCH(YmwW*J!8i>fQk!y)VFK$N7bN+c}2_jK!#0~$7#y(R5I*{
zm+J+SJZFZCb$L-)KS73@%rke(Q1Vw4V`r*gSb6F{kavma4PZH2$Xq1rx$DZaG&=z=
zo54!NYR(0Pf4;$noWP^G2NNyGv&1Ab;nIg`ss5rG4;2vZIcY`^^iwgZ<3jM}Al})|
z`w!ZYu~WpLrxc<KYq1QVpw}jM2fNK0Ca4hOr>5r=K6)$dVAZ1oV3kCWnRp0JT&fs1
z48{;M7psucy<zE)oL(<n?okOI#;D2DE>f=EIq=Y$<&ORVh6S2z7(^;m1{hnDR!IbB
zYHs}p7*qXmV+0{*ocP?$lHJrdqpBUOFzsPJSZYW36s_B$eCVn#BZ|Uq#QgIQQVS>x
z;Q?t`kIL}L<`AcO$UOg`!8E;Fj<cWLiFY-g_4ccn5XN4<F(7^7p=F-}e`*o9a$Tiv
zY_9HY75+enbRF43*U0p^l)S#i>@j)KE%@2)I38Cc&ol3k>zMB0qXSvVkd%*ODQW&2
zz`~!#{DT|Dw-}#XHQQxed=cNrI2vS&U6~>=0+B&{gS3Ml4$d=`2yEeyRZxo<&Kgs|
z<LJK0E2HBC<X0s~Ga|-TPawZxJ9&}gBa;oid769K55HL4xTEjXqv3?lm#JcIR2G6Z
zS`VEd=BCh^z=Ul>avqLrSS&-Ur%Sj`!DdOrVVak)6PzMKX<iMf1W?;SwhiObHjA(4
z#xycjK8V^90uw-vA(VO(Gp|)Ib8{QG`VCus7&wVc7&-O%aaTAL?bBKjUtK8wA`xov
zNW{QSd1t<bEDy9F*zCQ?c|0miQJ|H&hr;)gzXf@b=z^~lba@7e7AVS#WR~(tIS^(G
z6(X06o=Mn2v6W8B7CC8RAQPa;jTu2ijxD{Bw^jePwSid6t9%V*1}!qm++Ov^#pP0h
z{7phzYrtSSXm3Gydj~?JJEwyf6;DyB?Gapc9ma?+K~HdGE!ZP1JP1y{1H8>j!ZAGK
zwlqN`jCH{*oe_>f4f{{x!Lz8A+~)`(9CSeM`y9zjC*-N5K%8mqk{l2oTfDx)H&)Mv
z+t1q#DE{joX%&mejNJqGT?<2aP*xG#(0Yb%-9$pAaQq>K4X+5>*Y&2SIs!K1C|fs8
zUC%q>c~%Q=8r3y6_pc|aE20mn0(okozt~!Y5!LSVKA&$zuUJSn($w-xf!Z8@5PW4t
z16gNDdsrEBbj>sIZ51OkEN;O_r&Z(8<sIFKjRF@by!lxALQwQ!w36>*1)Ru(X-4&i
zVc3|-mC7__;376iJP(+_I918UEzV#xFuFbhKh0`(Cxpg80oklEYofX<;`w-CRoAHm
zO}~NTOHxL+gy<pg+p00^p^6{l9#HY`sp-%`a~WT&a_Jk9%gnw$&g>xNc;6W>oSr={
z^EATAS9<j}l~jo~$;&R|LCFySJCqOO7~8f8vhKwmZrGjGXaYLgv_78c=vW>9Ois$`
z@L0oU+f`OY@ufu{jd`NOFQ9h%-2br+Ik-40`Vdly!ZOF9qm=h&FepR!8y5{)S}j8V
zo5vl^X6)y{^IIcG&&>BE?is#*aW$>FyuQgh_cyq59k!>u<ImAiD4)jYAsNT)7WX1G
ziKOZ}VkXML;XP8!9`#|Dl!BE~G$XFjyDCCkD)5QQ3c=}jx2a{vBYsaICq|cgw{fMo
ztRB>SqOmhMOBQ~pC|XNa9`qnv`d+8s>GT!d&UcZskGGl*a<nSB1Ts0E`v<`@_`^#T
zZ!b5@KUN})VuxuGko5IyMvd{LsU6$3sj2yf-b3V`AJ?9;P@%2-`A#|6iM)(1aRbVc
zDwkyQhlqH<9*0|ZiEU53ZZSQOM9S8$!h(UD6g4qn0|E+aF|G-sNg~sxLW1$JooEyL
z{6T8mp*EaHEdIy8Kn}<Pd6toq<VDJ<yX|x8%#af*Eou#B!%s$#<o2!*R?xs<>uc*w
z)|1VBS}l=<&KO3c%vTST#N`Uyqr=gjmrkPfcjNi0m~)QifF_&?TCsc<cAclFYV;TN
zr{A1wO)5BG50RUoPd7w}j;<GRWHJF9p3E&Jk~9q{(o#DzI<VDgTrNDKPt$5R%UlRb
z_}o4bqD^p(NB-}EsxcN395U;RNO^43!Zp?|rAwG|efddHa)|Hdo)Z5W5=Crx+bahq
zlRM#79tB&oaOJ8xW~Z&Np2v2T*`md4FJ+XCjT)oXo`qb`xXa&TX!{zcolDz=Me7a~
zFou3Ob<dcv`t9SdFhZKsmtR^Mlf}*XD+wj%vp&1>usMFjDqf3NEw(ON7*n8lEVtdZ
zlh1BO-^w-ol#zC4EZGtMXpWpyqz<=eR<3)?_}KQYCQCb|SPKf8Y;OK_Hv(Wgsu*J|
ztDvq!`W&a2?X?Kz7J^;tu2>iZfNqu{?E>oE3h4R>{Us{Qq1^k`hEX2k55g2VFX-e#
zlo-Im&DWACzm_y<Y%M#0SxSmH+vcu#L$#5y9J-4p_RV}3xetn*tUfgTYed#>K9<(o
z^5oUYjiwD~GXkJ>l1I*1H7sL(DdS!i<93}McXcf{{FA|~4C-iv&9b!TH`!<4l|Xc=
zAkLh{zYphEye@p(31iuC1<=s?w3R))_Vg(Wv}~7R<GfHAMX3_!Xr2oi+PtJU*<m}m
z;_`2eI>Si4xoN&}+if`slq1oN%sVi!ZL{q%n!u>~rM-CEPwegO8GB5#XFd~kS74(>
z0ItOb(zwd-10EU`a#_>wL<jvo8dxw4QpTkmR-n(fKp;u$pP@#y84+E*FCp;hU>wdS
zWJG@h6_kpnfJZY(VzgV0($&3q(pMr?p|ki(mx+M0$|XJK`%yHgN+F70<>ud1+TWl6
zSazuqu|h@7FbfY0Cp^=Ebjfmew31+6mh4Ih$o&-gG^O%>EDKlv*pw}8q*B-1(I-tt
zPIcO?Hm{X7W{m=O)@k~(seQ~Rio>&n;nz<ID_#>yu}q7kf$o;YrB9rIlOU8;Y+O1^
zw-eP5ZMj$s;UGRArK5h>$H{6+Bt#q)bd?(4KO?cQ$~DP!jDkHd@b{-ShJ1!4{kXf+
z3Ppnwa8)Zaz@9oyNv_8Bo3`YMTGgmH*Q9sk=jB6>k~+%F!Af2<t*b3A<Rk^`=WL$h
z)(}Y$_C{fJ!HT0*VkeOd8pP(1g%Q^_3(EX)(!}sA5`kc+uE#fQ>vwd3Su!z4VP(kZ
zTX!K|$B`Z(7>Q*Z-J)2fK9<S2x$v~&d+ysow4iycKN@n7sDFgeoONnVQkoI}ZSezj
zd7G%SB=FKtQZQ^HXcpb&ZUc8S%}WZ!ic_zQIrw{`{(Bhq(sN&y^1crktnQd$^EM7I
z6~12*R(L6Qig0pANNET>sWa%Jx3)2=Vo`D7+p^q4MHtJ}LmOdsmW8TRDaH!%?YSrn
zoC8_KX)Wo1isXBxp*it{J%*c>i}yTpYpM!%#Z!Hm-4j#x#?FhKnn!pz;Ww+uMuIPC
z)H34k;iFf0&d#u17UAgH{vARapko5Z7RjLyT%o+6ZgM34z;W2t-k~@%>NlBQdS=mo
zl2hA{u?tbhtxs+YHX~P&H!1H$RG9`eF1C3(?SeuRTMCvkG9X0S-2SfrX{n1%JB2f0
zxD&I2)eRh6J#XMj`TMiGG3DlNGH89d-OOg!k|st==jQW?EB$Q|N%-Ir=9`XNa{$_U
zsz;!TKP6$8_JXKd!;|n^4EqzB#;OPq^0-v10jkz~KVCiO8P+tk4tN_qc$R3XW=oM;
z0$WYbz7G2t&fABq;93#2{>Lu_lzh7t&CaQ$d#bdF5H9<0qbmYP(!dI`asgnI1$owY
zjE?}i5dGeMI<>`eszld>`j{O+!mLUgqf5~G+yP)&!DkSHdQ(Eo1uJZw!2ShIb<9z-
z<87u?ch|3?)V<#kSb5{_=`(9oN@FzQz9%d!QAv|bc;V2QBd9G@64<l&lUvq8?}hth
z@uN_|Kl?<fI2hO-pqW?e0%4I>o$@0TA3ik*LYD^(R_AeHWF<Od%n-3e$ySBe?r<G6
zGhn8j9)CRfqbwe!To&{y>LwN=P$lo@=0(5q&YsZ6ZJvp!+DcN<+_FFuOK=rS>f-7r
zyDsIp=AJxaVbx2V>@gAFfOR8-vDjMUpj~APas?BzO*jtk619b_BaB9e!aivPq&S^g
zD}E2|x}$<@V$Fwq)^b!#0v;+^=!3Mfr^m_lsM78>3rAxZfpDyES0q{8dRkpbmljv^
zi#xgsDRQ}^8vrRW3W{~rB%8`&_C*J_A<zrn63E4JaK=vD&BJV@lI^u{{1>p&v2qQy
z>=>c0A`isqp)cchCjbr+xw{|c#+UvJ5yyK!^i+bNXbqObxaUPONWBbj!H1|~z+6r9
zD^4u0Py^GSq`xr4HgvEpZ*EL}O`$!gSd1}Sv!X8au{lqY7oMb5O|ew9?U#^NF-_T~
z&Se~XRT8lVtjdboj`%?X@nNEau~LWMf(Mc7?TF3Ad8hK~M3bJRE;*J}2BR?G1(<yF
z#t5CDF$(9ym7sZ&tPt*fJlxDN1kQNoQM1JAW+ZaMQ%HRLI+P+vBUU90F0gcH+tAul
zdmz#YSUd!olN6bY5tOMV+f&0t{_#%$Z*Jy`8TK-`6>U&%l`MNW-nv?T%GqJcc@Rb1
zi+gt8vPGlfSStaA_|&VVe%`IX_7s;4?w!*&wLXKi8xHb~5C+_3sC=j+2D=Hie)~i}
zZZ+f*pmN46Z<66#;$JN<LuZw<`V&BH-!i>4VFy5qcaT@R955)Z^gWgv!&n$yy>nQ4
zEw%w4aZwws#1dGc%;>EWc6exZ9kEfbEGLIp-(4i!L(^B(5kyvikvQNoo&`tP1O6@>
zPBDD6udecCZ*jdhZv>3tyq4~LRF`wQ!kl)zA@Q7AhHZ(u#H?L+4joK&Wl0PG-*l@}
zp(Z>-aqu2fy(EA=f>wwUxG7VG@tC|y)VfqkJ<RN+56#Xz9i$&ovp?n+fv10M63gzX
zgMflHY8D&beBN|15f#seC`-nVi=J@Vn+p^{N5V0%4Or}PG#yOWS#b*Ju*HI>3+tG8
z9x)3UJk|KV5F^oyZ7`T_36#iyOsCk7@;T}aF=-yaA33fL@#x+EZM${m96rxesWe`g
zoO8!dm)sts?SZw#-m%QoNCH2S*jE1;Q&!B)x0N>Lt-jLdFR;02pboR&e74%LL#U9V
zYxdeIjfy*ybxd>>VX{|eMtXc};Sv8OKo-<rx9_jE=GR3df*P^4u2C4NMIF8cCPkt(
z{=AMx106lxC6vW~HPAhOSlS}Ca$KC<#IxKW;zAT$Hmlsz16(z`<5b4zEtl-FT94fK
z*ax<iS<m_vgBTxPB}Jxwld<?vYt2v5UU-%=?~qW)z(FeE`O)B~6}D;Tew;9;29ezm
zF*Zy%?RhwX^Z68q;OJ9aRb95Ln+KE~R2@}hI>jP5U#9PncA`iJm;q;*X>Ux;?CbjE
zIZG#IQLsy!h?(|69$3>XB+g8i`8gyG=@h$hM7ansSb%(QXuKP3Q$M7orM|48ugB03
zwdsqaA4CCXvd(7WQiZ47dyTH~Uy#7zl>x@D7#8yzG{SX`azG0v+$R_=f*o5{O*@fW
z($H0Ao}0UBH>i8h(qT)RNVU3v82KJ$S76D8I!@t}C$H+eyilIf?r4vVnQUPwEA6f!
zx<J~SpDm`WEWg&xL?tZN=gp1IeQ<ZeAkJ8Si>Vo!u_^GE$6o|)krBa_&!S0Y((G_7
zY*)yrfssS^`bNuu%YpZdWZxetGhTe3Nh68#UEM0k;WJg<4K^gos;{nneR+A~pvQwv
zM?BI|inWJtVpv8inFPc7YG~6oka}H+_t}9m(uFdhq+Ou<o{<VYxHFjdgRh!?Q^s~}
zgzJTXe9kzWy6TZ}_%boETK7jx%^HI@_UoOl@u`f#s&70BF%#Lwi^!jRApy~hZr(!u
zT=XtBRnjiOx{)+posA}g@p@QyaQ#vcS4)e>?{QLAvxLof6{T!5y3UNgL*V`@pleXu
zVvIiPq@`!%srvblaKiZY`&*X6US#|EWiK+ZVnIlcP2>!^syuu|W6Y`zLFe--$s%9v
z!^aNAPXbw<KTIuep3V02*sl8Z@6H#k+>lfnW0Ac#)c+1NRM@}(w^mW^rf8`QZP&YO
z(jLg#<<J(J^JiYw0f$_Ge8&FPN&$D<6N_i1ma#MX*0>S25)-D`ejFS8;X5BY#_D3o
zfqH|4DH{eK7B(k~m%T2g^z?5ayti+M6SS&b#K%0aCz3wNYhX506~b_coG^$}jyaid
zS00v8cO`M(9l0UGlzOhy6fXigha)mnpkAfv=hHMzE(0@|q(1*mVBJ13B2m^ccK@}*
zg|Gh_EAsX<#pFPfcZ^~gDg3->A8Hl2@x4c)C0`^|j5m4U(QrJu_>O6)`d_?fcz2-s
z|ACGD-|(JK2;#BplC+{o6|pnj|8Ud9(*%c+CWUGT*za#?Y`|j&cw`TYWmCgghgKu7
zkK(1}LyQgq`xOsjr(Do5+O5+48si}7m5OmMSyEv^wQGIgNGhYjt}!4K)s}?;AJm9z
zz^xmsVq!_5V{~@@Gs|}8MWVd0iSqCwji%CoP|?i;+`BLxS0i_Dx*h|W1y&Ej7O5-9
zIe|PNP>I;=k^`%_llv~F@&a}xNgynkvhh=P7;fAC?f4e&qmPr~Vp{N2svACnY?e6!
z_qG-SmY8i@M>*m<n#`hBshDs^w&0m3+vf8J+KU4F&2hI&&arvyE1+81)DJ%6ED*3s
zRQLI+w)t1wUcrPlq7aN;AZ())w6n0nABm&^5Hy`KICF49Ue?0D`kZ)^>tcH{!tY{O
zTSGic#pfpyn~8i@-<!}Xs;&>Wm1Qfzw_9%!(IqDRwp1t#Wo8g=Hd#}rZAmSbX~u$m
zSe?NfO{@d{LBFRg5TXe^C!fD2bR`&VL2@<a%}Y<6YsJ>qe=v&8PdriA*BH`EdFXp=
zDX=jj@jDEEBvIE;EgR>^BIw9%6pzM<ut~cxq<;=(9<Z6ob-w>z|5+~tnnPs-`5=9g
zwvuzVB47_Vtio!gQ@dWt9YYy`7jotGk@xtWS3_MPHzR2E)<WMx)?StGz*3u4{v@<*
zQRdQdg6k_3#|F=MR1)@ojJyArzVX2CL&DrvmZ1Vh4w5CW2d;i7d7@!TF%QD6-!JG3
zcuWjFGPCV3W4Hd(e(DIQdfD;xo}zxI+Z6hu6L_7KO5Il%9hRj&3{5D5dy{C_Y{o)0
zEX6>zWQ`_T93@jI%`YW2xpmju_+ze@CV?LYpjAMA=(neRQUETJDDq#gcV9>XuJ(UI
zkN=<RssCe-`Hwy3|8slH>ZqBEH91!4z}>I+NB!3#sZDn)WAtP_)F=Br`^pGnvBNMf
z5bzFLvy%JchBDb@QpOyYv=6(|*=s`i5h<)}j{nHbWEY(#A~3n~$Iu3H!Cf!;+{Zhy
zs77AW#2na6%@}qp#vQ3HG<S#tSiLscEoZWwSibX~T5<H!gYFrtiU=Q&fDPbZN6J`}
zwnL3ytB<oZAM8kizs1Xb&ne$QGd8G)&d&L<vw}TIM7v1=(6%4ja7qMdg{@7RS0LX5
zd|NffLqQ<51$=Qo89j<o)Z4bA!CYTB`4rNqF1P59tM<-nw5~VsA26Rr_X254@_JRR
zYL{kw$NZ2g(pqhHRPit-p|9%qFB({`;}#;!Oc&CIJ%*dZ=%zfu&YWpldhy~C8q8DH
zEME2f-N&$qB>`#S1Qonn$@l((1}JQ{D63+WF%-XJY9tQTcBvY_2h^u~Lze5T?%YaI
znl=Bx5pD!^Bs}Iz9DTt>?1!t<&jgpDDnJm~8-u&r79guRfx_4)uvP-?v#^^O+M(Su
zKKbV}l}L?AjTJp1wx%_DCAO!4i;xvK5TN0cF+a^<>m0%Q%ncfzO>gbG1oWRSqFut0
zhbf(U_;e~DF0{EU?c*(ja+^Nj4=Z4oQwH>ih`0Ti`)UO-$5+Zk5L0QiJM=g3;aA3g
zT|z#5m}rvRuh$6AR?rrb8igk&!fwMI2Z<~?+*XVr7Q;%Uj<i^2&%^XW?^R{rnyK4X
zz}NGMRB=f=GVX>xb}9_V>eMv|^#=1Z)v)sw;OY%#=>7<7Ym2q4MWRnfXOHVC^vO)|
z;iy_9tm<iGgrxYuW=}Vh-kh0~_-)ciPR)3HloSOyD|Wq1)Ak7tUmF|KH{PRf;U*V-
zcsvB?DS0*8;gr}ewe%5<l?G{734c)FLeA-t_Z`y?n?x<L;BBa4COMHTaJ*{{=l8>P
zl=F@00ds}U;5rbgT)O)i1at<F3K7aoAm<L7Z<wkyoraO$JChwZa{2Gf(dyS}v0RFI
zjs~6;eXV#>xY;6%(>g?8LNLsot!_VMq(j%i#LI9*4w5i!C@grRhw9J?pTqbGMMg0g
z?!%h!u~w4AF&c#3^g@$sZ>qyLTyEMCmsZIc?=9*s#Nd?3;F*xm84D689GyXoeyBDl
zl+q6)%_<st|8B+Rg$&vdWPfa{nN>I!Neyx28#h>o1BNx#%mud{f;1eXr=T)-i&OhS
zChhLMgG@5G>bxkC7GHL3_+WtQ(E>+lcUTHV#}5G9EKQ(|5U?2ZgqihITP}rp5V~)P
zY%pjO_z!qXB!P1pT812P;7Sa$lP4-mmP%bgdiGpTjjuZf3WHnct8Cu@;cXSHZgZ5%
z1vKhG_vK)5Yx;S?vkG6{y0+A6C3B-B<YyLyLK1AsGD+d`l}@a+uvlbq%7q*+oLcen
z_3h!;J>6dB_8lz;vA>WYJL?6dp6s^EMwhe7dz1`hfQHv)ZhU*LG{`n|9K$iIwhO;v
z<#mjP09HtQE6|UOsO`Yt%&0z4aJD*;dm<ZGX0nfK2Ns>pj|~1zESY0`@7FC`MOcJT
ze3N`CG0pDQka=TPno-Svo7PxEgc%=RLR0!%zeL5~TA28aP+D)+e&?TipRt1FX)vKC
z1!*6{MD&HU+-uDVr#uG+&qxPov@$su@Xy8)>PSKI;2}#76jW+P;_<}U$gY34@E2j(
zqqa81YWsbHjv;1-_hnaW{Zn1n#*ci5Wybv2*kdGSAA0$Mm!p@x71FEC`Br19JPs|;
zfQRnpHnOT?2FZsOel2{Z>8rvAeevcC&r5eCzQ`l8k*|Bc4ebW8#45ZqzwY^VsDc}Q
z?;*(tTHJfF8Arnr+O1YR?cso{en81K#qM6q8RX`n^tJ^Z<>@@8*H}HY*VSU)X!2?a
znlD2!zg#aSjMo^kwL|iSdN9gt{*d)h7?KaOh?$6fAX7Bp0aDR!D-qq@r;{#lyo9M!
zc1zThE94&{mb9$#kFj;zm55h4i>Q8hN9cVHk&uFr)4hgdwHoSM<{F`lZlDi~5Sdj!
zC?Tv&mGBUxJf80R%)MY}J+#Wi0cM;r-QMjSW&vDue2_n@wYAXol4bJcNu!Bk9Y>Q9
zwWh>lca<*s4E&eSGZ}sJM#SFH!8oUNLk(i2;ZL&==bro{&(kw;r<QX(g9ng-1br5Y
zXAB6@-Rg<w(-s;K=(x+{xjY`mRHwK<3i<GNC29fIJ1Z3(So2F^YvRUT|CG7$Uj69e
z{ove>@4J9#rnJu@zBMez>208?BuO{wbzU@k_w&REUFe`}+^TS-mS3i%dGLE@DdH}S
zL~!iW*q+P$ZIO>_d>`EN%f}>@A)xtr^!prTe6#U`7RmYVGhYY0SH^5L_^z}X!bgo1
zxDT%{tnpN>sL)*I50%1XsKc|6(9ZHUU*7zugIr+>{smhE^V8Wpv(edzwjg8v)9lSa
z$=5o}jw^m)4m_?!29>cgL#v%cOTUS=a+PUXIYP}Bhhs%D1Vo`)A_}hHuR5hZVxrQQ
z)W<fk0@%ns_d(3#q~~xva1PBi75g0LZNNydQ|2x)(IxxWRE5Cu53qtkfsO`cVWKM*
zi_0?)_lLjR6F(9YuHPJ#duYtFn9(AGLF=@3FkGiC*=PsOHOEBld*86kH@H+}KLNLJ
zy{3Du*lt0KbQX;%(o>m?hGm&L<VG!@$-6Dn^JNv{1woercujW3M94AEJg?FXX3h>0
zljcvnM{M$?c7lM^?Sb|dhiO^7dD)7%=mvrkGs0isZoJL#MvOiHQk1;-byR*$RFgd|
zjxOQYX}gM}B}wEPZZH|PdC^PmZ24TtYr(E!L*#6X0_a7^oW7*4v=ZXgQ7<hP`X)f|
zsTT`W?9m4G&EUT6*rW>6lRpHtwrc?Z=j!|y%CPM~`bcRwr6dYwqoxLdsh1VIjJX(a
zIFb%Y0NlGF-zZ~*S9pFXO);d8yx(E)D}1l_&d*P3MZDs_NH=_0_Pd0j$J8y?o<K`^
znC3@hF}gh?(wXIJP*8lH;b!e9Djk5#ZNB7Y2WQ*HU;Sc%8RfG)gDLsvkwV-+{nPmj
zH>Puc!({1)3=dRSh&F*^zLE%Jo_J8kvx5GJA<WX?K}`T>Oi!;5gAlE*0yu&j1$KQD
zh@9NzD{$;OvDF3DsF63}ag*n>%w23vw3m8>NE|Y-E(n`}PjH@48G?Pn_-Yga?J8{K
zDS6qq5f35HRvC_5dYLnuleSgm^(k8xxQ^he$Tn;aHI(eVa=7-bLo;7h5(WXA+*8k#
zx2n1Poqr43`c?1Hl+i?`kI(=mkhWZWM+&x0qIJP?J+R6gvaUklX;1WG^i}ls9YEFb
zPBv8vpPNHS6JR97j+>NPd3QdV`80WU5BRy&vRLu8v^M}P6*%K0bqsYvZdL$3*}9Y1
z&X54ALXtQv#X%Z}!8UPp3Sd@UelLa;*tc;7bW($eQVTaoV!iu1DFs(9UZ4ohj+?XL
z-lr?gK#mUT>uUF??cJHu4E_k<dC7=2ZH|S?d{v;>1v?tG4giyuhWp8Hx-F(eqiEfI
zU+YihM{g6=DKc?a@I|1X*Z6Av#ViRlz#M`lff;_bcB!lX<GKMNHL-MMl&&3zH<m~s
zAHf0}cQ13=pw6~Y7)kt`m`3^V(r7CSVgHAiZaL6M__RT$<p~ci;FwrU{qs9_e0>N{
zHN%Y=;!sJ&9Y8Cj9UKj@f(TsxL_ghM*W;XL>I|JW3Mkfx&j2hp-s)^()$^FuUHj$a
z3dvg}=%$DopFerv?sYU<bv8jeJ9vW#HAh~6&Rh#nF|WOH|2d0vOs{?Y4!?DNVT>d5
z-OexLG8+7#Yy8sJ&e#R8<;<*%+X`KQwGgU5MvGJF^eA>M;_5JtOMxp^KISk&#@_hd
zjfQGxkXF9}npHv3*=i2Jw=$owSM01#$}cwb3*h#!(#lScrYYsZK`{@+%=PxF87g-l
z{zxvy)K5!MK-loMi#X4ufom%QnaW_2LwgteDZImlip8pJ753Q982@o_-0ptb`z6Zm
zV_$qy#FI3DHsB|i2u#J6jp`W^CMT_+@|_>NqPs?hvbRgd2`;%lYITZ%?P53+0SE5l
zjrc-^*2=g+#=+oY#H;Bar>6I2g9EW*wYJazLtO=kP9b=uZ5Kz+<iE_XxLUx1|A)?#
zMOq--a?HD&#a%Qo{g`DG9S&q^*h40w1VKutP3=&gHy|;dN-G@=k~KY^(kYn<M=RK>
zCL<TEvy{wIoCoqAk*PsU7ZoyCK*OtF{XmKWoM4t(8IKfMAeMGFgJZc|&eylaUFwn&
zgxO+l$qC$gcV>eoQQvXMskabO9md!-?c?&bJjv>wG<Og7LdpQ*-{Z+5sU0Bm0f!Uy
zS>h(C;+~lnlnOUT^?dmkklT#4`hN+QkKDGry6VsL+)eF0@h32`16ewd#IjSIX8A!G
z;qKH_Tm{q7!(nsf%{fnjy;-`rnaR+0ZWd?*YU<ah9@Obg#z+415JppBCwb*7pPM?d
zyrV`J*+^%cE;er$=ub^Yxj(tMY6@^uUlNYn-zt&lg-`b72*8;L2yG@>&`Ij#z*<r*
zB|x~Ofo=7Xa#I#}f;sC%#2l8jqiH+ViaJsBSHl`EYRdw_VO>>3mL$TFIG1_ojQR<y
zjTqF(RKLr_cX-|DYz%#Y8isk-I~up>8}flgLrtb9rFoVuY?vL&-yUURFQAYr`{?z;
z^KFmBju9LP$kC!=JiPNfK{cychr^N~T`aVPe_tLahg$mauGA4H3PX7yvcSekq!qvX
z#Pav4fgRszZFrDw^!Ao$j98G8)V)zm(y_=pfl6rVsMPbfL^5HU(l9>rMlC&dNOIB|
zZ-{I48g=Hye=AR*UyHF|{D>)byoN;eLb#22kG<r34!_*vgkE|qggP}euVTwEu7syJ
za5}^eaxcN}1Ahp2R10|=d^W#Z8RDHNY(sfok>^zYlnDROOfcWr;$Un(PDJCtAhqmZ
zTO@R$OY+amy`?C0Rtc$?(F(erM~Vj)*!0+W8OFNnh}6A{bTFl;%2wKYV(3*5<N~T1
zd0ch16N@l+sPQIq3x5U5sMy+m)CTSxZy8FOA$9;<Dlbm3c1Ux?eaz(j4Ig87qzSE2
z0f;M3AfS`kq3h9&r6JCDM5xgUjG9LXxsw674w1!e^{n}u8Ekw7Jws35q{HY1E9YVi
z*rYmw?te^Mx7HON7#-cIJL$W?d1hFh?ekyX=_DAE_<y#-@cfUvx5^LI<%mZ0Z1O#*
zaT!lJ&0JVNSR>}p@>%UE*#IV5`Nb+Z_#odH^vEvn*vc`8xIg+}fz$D0{vjs7gw5Rb
zG^MLyt$GbsK8qf*K+fKMI_{Rt$3|b3Cb=Pj+@1W;C!weflg#ciEC3SOf{#Ri=rna#
z4b49}R#7nnD?OjEQ9eB}ce)$Y1s|`&%u*!Exl5g1^N8;k3MeH+k{|Q)Npv2cH=7H9
zI!Q@CP$ITU`s1J07IRTDcPCP9&ry?1Q=;hK0g!8fZGdvH@yp6#gsTggoC+=%H}RlK
zcd+m8!bZ{_3z)dVBk~uJ(bzzI+!Nju@<B2-{^S4pkN@jG{;#6U`akN{j!5h%m$Wdx
zbvyj6E!?7ezvPdIQa^tTbYYzw-h+MBPS56}7VplXCLGfMi|kS*G+piV_K2MA;8Sao
z7aYOz@?AWdAEH#%z+CY^qYiOK>{O2kkr%u`=38U}CL>}&33GPE08XMDW3rhJp3yg)
z%Y+9pNEEv#2k_V({!K_%La81ecj(A%9-CL;KJ?)Uz(sd-MbqZeFCH+1yJc;h^pPwa
zv_i&4WD;%;)BJEo#5}*yX^hmLl1euODY2}HTn6>)3PGec2FPMkRCtAk^;{DleRc~3
zLJ>?=LxnKza#W(AchfvU3!DaJbOGI8QY>~5{wS9F-#P9x)390}ZUEZVHS~)A65nUq
zr(=HkZk?#Hsa=TDoI;4q#oZs`z|~uy3bG3*sx)bp&%fx4kHX{>0lpy43W1<_!x?ZS
zoQCdH?GQrp8!H5)jOMssV!du(f`9Io;!(GG59lB(*EHtcdmtnwdhqv?B^hBjyMSi+
z(65M#B?sM=7k_Fs6hfVU2V*EG!h|43)r&%%>y$JLecL6~X!ynl`dQHKAKJhgn*-Wi
ze)N+jj>kqmmgFy%s-e1mIQzO{lxE;gp&p;(!gpAEDiyJ8hVabl-w^ZLM4Klg%SC5#
z9S+asaYur3H$ZRKG5HW4Esj))ayr|y>!&K&)tkh-KM_z}T1;e{Z361Oi(S75ISDW!
zp9b(Yy%KXBz^SODHj3&E<U^V75)S%tE!Efg*7x+)%jV!qmPS`9(1uWQJy#CD=PJjA
z*lRofwt*H~A3DPpp1=}B`_(k%QuC@!7V6|n!oUdjox&!Sopc&ymqM!$=TVm1ShmdA
zm1;O(hq38qs1Uw)(y_19ch!L|MA&g2-J-#)f_buEpQdRWP)d<QNO`f1Sv2_=^@0X!
ze1v)xt!Vc3fSdzON_;UibV+IOhH1`BEBkc~g&yuty%Of8wb!4VF2bVkpW8bY<lLCT
z2&weu?WwbHsnS||s1*{%fZPv7<E!Zi3b;FE6l5Ai`W!~qW>4zDIhNf^_R@L8+BrF>
zxv?Xu&{6Wb%fw&;a{xp183NB5q`Y8g`KTc&(;L$&DbeTwUPB`X+ziO&<&+x47HDr^
z=A@l8Dj^dVJ$*rA)9%L%9lNj;OC>nX)7-086Wr!qhHf?=O&gqH9LJfEevjX(7H?(G
z8*00on#l1soA_o<&SIi3@`AaP8mjXQ(5Xw8JX=)IS7v3ad<$5Y`~K+%vufdu;Yat=
zX#Jb<nAg@1k~jaaSt6Hg7@mXI`}N}xHPF|Z;|X~-lc#&go&m&J>}>qE2xJjnoXZ1)
z7rM==!>FgujFVj|AUCJI{BJ<Nr{3*EJXSbvN1<PZ;YWkF)4ANHWcpQ|UlesQ=s49H
zOgHVqAs<%w27}6^JZvPkbTeRmElXW2;)==R)_Xa+5F#W7#FKgFMsu0{Yl#vK#AM(i
z>ua~Ci0-e6Bt6bw;CvjQjQwe&LrXyHKdC<p`sgEW$=on`(>pK(OPpc(LkQ{7)6)&@
z_Pb>H;NFOB#=;{0`<o>A2jA%-U}wc%eqc_ER;<Qpv!;3<0k7^K`)oRAkJcz%h{O^=
z>Q8PqG@*%PdCBa%+?BrV-a>_+X*L)N)Z9HX_(YfBXG%aBxn2DYRF6b$M`rBQC4HgI
zRst0MPc|gIG>3jvOy|6M{Siv^&z9{bOw)t{eDGCwfqw-Fbq@kP)ZQ{_-2$bcF8uKo
zev557-cr0Da7nC*TMiW#uNtP^67IJnNrk)#n#5q(zW=Rk#n$+8Yb<qbeZl+9w6mS@
zJXO4f8!8ixoq{o#li?JqxAzC#3QiE>6H>}`f{b(+b=%jRk4+H%4Nd5-;FhZwpuDJj
zIIj$M@||b~?E?6;j3vjYRgxC~Gdgi`S@Qd#cwS5bY1S#hv&?q`-F({E?JcLWh?Xj<
zKuQ>N0kzO<UOT$DoQURp-R}e0$6ng~gedP%>)>}uUVAGhwk}O#t(dI{?M*>p0f>ml
z;xffP8COWB+JfU7I8?qG096n82#>a9GCWI7y17aeL7iZLYS_oC@`+fk|6jAy)dviv
z|BL!-2{#_`0A|y?4b@gPbgCXO9ClwlN1%zR8X*eoMC7w#4?3i0w$0@Dqu9LLzqJ!L
zr??C!D;?8jzWFuGWNr7IkN|vf8Mo7ZWv3-;TuGxL`ikX+J+*p!v&3ow<wF9pq&#|Q
z7v%9H69H`yzi_T3@>cC2=~P8j<HJ+=N3+nLi%kRY<=eGOHuQpFy1!`Tt1;h<L`x~9
zl{6=qG4PlBN820Y%q`M}PI;!xaG7ZFyPReO#0N){!a);DA+Tp%qV*&PHvz#Tw3=xR
z=Nw}_gi+Sjk`FzMVlvc?kr1SWHdu4w3%mR3U%;{sxy3HQr<w7}brnpNY;N{9eb!+{
zIwZ46=hS^AF|9d&>SuN_%WPn<!JJBOCRFFVJnLuISmlxqGcUbE*Etp|pm245nheue
ze~6bZ*4rzXsn7Nn<+a%=n&?U{O^FI`t6I7q=u~y@d}bu=ie*Nvk<APfuRu=8mytQZ
zDV^G6IxG(8N7>HJqY5M>lzS!a%k`SiWhCeIYdcz)VF=zxGT*om{l?ZhxU6n4Vo~C6
zq@8rxw@Zh-<t2y=<gkVQ9WPD2&l<>>|F}zztyls-X6jsneJhCVjt*?2=DP%UR3C=F
zc5Oxk^EPe={M@$+F-`gqIvS!1YO+~jcEcDEhuW22<>PeI`*u@2L9OnX@AIT7?fa*Y
zfXimWfX!V}f%i(xy=;+ygydLLdEd+Nxo@TL?C^!*YbKN3EgAZ^Ep5{BsmbV(?2~S|
zxLpw#S$o`TOUgM9W<99cml1|0;rI2MKbAuxX&SO)`929pM-d_OeAGkRo$!&^*68K-
zo|r~9ZW*XkHsGs<NpFdq?C<MqJhLnVNOHnd6$%60`_;F~YL-6%GbpB8a!a*SZPO?n
z@V2d4dzqKvAd4Ai@kRTL+x;6c)l#;U!$g7|2ZnlzKp`Dxiea5(QHMY1P)|nME&9+<
zBp7hBF%2bP-LM7i4e=@}ADB!!Y*(s@qo?<^$WNHeRr2CnqkHEjT4LcGLDz6u7O;vG
zs9-N_g8?sUX6$4%N4<^;)=S9R<aE)K5<aRMl2?%r;1RW}tUX5VV1C|yAXzl9(Z&PT
z1?L?!5<l~6cx;*Fc#kn9^ajQ%_X+`u=4b(mr^FiX;v-3}xE)wbef@nU(~O(0B@6Ok
z?*Idgo6Ym{rk`Abh%(F>PE|(m#QgLmZ-FBV@A17beT_9<{c9*chpqcj!dllnTZF}^
ztyz*BW<)Pfw^CuffqZ&#H<Oa5XsWaY8)zZM3^(>Ur<KVFOb88Q`)Mw{Z*eFq)nY5^
zc-~1!!qEbdCZN_wisywTFi5RfU2^8lcrBH+knE}<&56Nj(LHy-jo<)Z!``oxD>`e2
zLjZmk<nTZ(BRxnDksW<HXa0fgFA?`vhrFz*U}kyX*4ou-x*xWWX1Cp51|OM_B#vtY
z-9S9a%J1-roy45<up#v^g5&}2KFjQO7V-mHLfeXHX#!t&e9{htIH1j*rdA4-?s-&;
zdvic>>Z)2K?kwJZB7pev@nr7WukhjYfsh1zoRy7B;UQgXknAP@BMm;2qwl|khK#e}
zwtbJ7Ib>{%@ns^#V&TC$LARq(lM4{g2gjRjV>#1pMj7wenA9oJzGQ!9bY?YaDYR=0
z7!`Q4y4STGL22D_1Pd8YzG5Xx0i=?3Tx_j{>XW-)Zv5Hr1+>8HWS9n9>nQqTuHtDU
zS>~V?2NN}BdUiC*t-q*Lkl`#4bngvZiA7<VJ^Bg_(E*O=H?icwL-kusa`1Xkl;BPN
zzm>ZLU%+dMxM+-~2zbQ^pmD{aXYPb(B!J?rRod+Y1;`?E_|U+!#VmfGMNazcu#}4N
zxn1`~jmPNo6t=xD#8oxBx}l|iYeTkW4+1%^04pNakv%SdM-UeJ^0$c%b8|8YQw4UO
zjKGmt3Ew=O`+SRX0@%}4<Pu9;1VCzs^~U=sX*K*@5wNxfgWev64B$N*D4V$M;U#@^
znZqdR{S#%u*E2-_*!hMBL>M(+-Q;M05i+hi*)L41@N=Dp=ZoZd_gE9oUfCNB&WQ)J
zbLM*t&bgf=C*T=udOO1Py(=AFUx3yq4(spN2gs)vUGjS>SBGWIr%drswvnSyZ}7}#
zhb;W1Vi_xLd`PiD2o_w(3O19zH(Ail8^9&OVV|Y(sN9X&5F<qU^Hws^gQw%oCl9`5
zByqg8yNbiMZ&mNsO);mq!3J)C5*UEIIOqy43!bigZviWCHEb|&!nJ@M9Ld8x93d+~
zwI)-?k6!LNmpFO!Fzh0(HW5YH0P;aCWZB(mJ72$B&)*F@b1$Ix`iEVM6%D!ho19nC
z>Y&1a4s-V8nd-!w!X5sKBJqbTWU*oP_5MV))UL5)VEv`;9-nyDSM}L-K9qI<`W0Xo
zdZw@Nnyh{ncKO{tZVxGlP(upR>s1Fy5mrvATq%G^o1?@N(wVbZy)7kp%T1KH>wWHK
zz&?e_h;_a8>j>={4jx3<J05x_g{y2P#!>%1+wZJ(qI<n@Q+b&8)7zM`j888lV7;L%
z8uR3m)!>w3+l^9HWxbXHe7V8AZ;=Jxe6mv)K6O}Mp43qhJKEpAFp9_2F4!-fGg@T6
zW<0q}a4e2*P9D7k4|O^!Ta)vgENSD`G*ABu`T<;tRm@}*0EXr;k$}&(N#sDJ_qa6@
ziIgo&g(-@!DFW==@&m@uGJ5xu0~5SmJ@s~q=4caGWU2^Y^+}m?#S4HOIS)m%lQX2J
zR0$a84Xl})tpiuGg+6Y1<E$MY_p)QFoQ9`HDZ&eX&m!uMOb2h^UToLa=6=7{v~4!t
zmlA@Hk7YlcGr@+VLAyA1EEr!oRWle($$HeQVmEGns|P@rf~Vjct+m4;!%JyjP!8d3
z^I8O@qT`+4bU-!3c#47Qo*sH4UW6P-In9VQCPr_Mlv4ZQG((35&{?W30zB`(Glws(
ztBfg5k;Y~y?9@J(*mINC)lk~~-67@E>MNOZs|x)B2N2M!A0a7<Z@KV{bcluO5>8le
zH)~BRWQPdYI;Je)Z8+2~KIQ-lmhvGLf^m?xlkd@NfpYftLV!|9<06kymL#lS1%>eZ
z8g^TY9AvlqZWQ2Dt=esB8bFF|@_5oWGc`cxCc`0~W&NwU+@2KF>_%sK78R9J)2lBx
zGO%vjeDEEi4CaMME}HwOu#75cO6EU12Q$7|R?|Y{R%NHRiqMSSs5~i@H850}h)>9G
zQCS;BL*`1xr{*x!XEyP1(V$Vu49d++l}IzCgVGXTdq+aOF_e>jV;aW5L{<f5h~$ZP
ziK*8XAU%t+4G$i*%DR-XFxX;bZmbd?era(K5J3SxcdC8obXZav*})9rek7qQby935
zj*~L_yVX{`3zqw7gX!%wxIR;dtx{E(PtFHt4}5|ncBXnsc)p)Uk8|@V&Zk5w6psI~
zLE(mXZjB?Y9#zt96#dfx93PS7Gd<vRyodPwhM1HO6hYZ{8~{<!6mjTv7%eQQ=RzCs
zz@T;L3t+=`2BX^%4;(iLK{IJit>zm_*|nI^nL#BY)wA?JA2Q&oS9B7|VpLMWo4*to
zZe<j4@G@Q&e#!6`+b$lVuAOBWTqeN%O{f6SvQCyOkUgzn-k$+{*<I=!2x-@?1+R=E
z69Zawo*G#E&BBTN88#d)THafyrUZ2E)ETxC0Gj6JONym_)$YBnum711R$R<w>5}s8
z15R{Y#E{sYEtYG?Mb$$twtn~`^JZJOXjtduY#k}P#_}4js?#8NmW{7HQsP%Qr}3nC
zO_{$qB$p;$MTvGE(9zuIG@PxMEYI1hAW;%kOcG;Y+p!755vbywHyT9pw!C2j)5g(4
z6HS37tncbexic3lV049rrupZ0<~zJ9OqSElhhN5EMb=$=irfT=Vs*d0uW1S#6A~?Y
zVUv+nj2pG9djQ<A-+qt>4fZF%kj)~4e1HU!?Y()G;JY6|zj;isxl)IC^Yd#g!3W7-
zcHRz)%ExI=fQs&BX2X>ai;Rc>MXl9DQl`K8Nd{zqE=#b|<{=XQFuAx2P&Vb(#*c??
z;1=4EI+h%mnwNrag#<EIQl4Y67Iz}F_apEm+$WY697KWy#M~`>y;Lud)WP42l<9{}
zZtuGZk<uNsBG;<Ot449gXu9JNKDaBXRmrzXZyt9{6-X?~y?}?l9G4+9hE8tTi}Y&t
z_Vd0s(pk}RJPU}38lv^d2f(+lEzq6B@5nZga8NrFL*_BlNZc&cUDA9!0*HqY1Y_?_
zul#kA`SgW*cPnctb<)dk2O4yVDZnc*z1}LUnqoucsib6$x2tz<w{{X3v}qu=(2gl2
zSUm6BE_nM1JMx~@1^_*Xg3b6wR~yWBQ)<PtKUjNt=MOLy0y}K`132GCW}8AT5~)!F
z8}2d^f%LAC-Q_9dw)3ijxh*k6RjAW6(z#Isb;C^y&u(Ol+JKWbQ_Jmf3?Y@N1bv~0
z_Twevxl&{%pp8@nr1}MEl^~78)kh^iR_J5qZ->@4c4kDVxn{r<b8*Cjcg8k$LXt<K
zoSs3<H2h)<f&`Ct$8cw=)f6a3N>83BIV8X&FLs<$eL!jW4Z|`yS`f{emDY^|S)Z<H
zLNdIJ1KAsxt91&q^0D?d3;AZC^y=zZNq_ys@ZG;ex0V`QU5-~f=kPopj9S1V;04N%
zp`>b5n%iN5LYfOtXEd*V^3)ho?L-Sgb^6K^>jThc<IxFn1Irkm<NedazwzJLJE!hU
zqb<zFwo$Q@if!BZVp|p4wr#6o+qP}nHo8Xlx$nN|zUlK9-m%^>_TFng&)nMei#;>9
zQ|kCZA6xxfAn6ceKh!<WZV2SVKqC?7k%Cru89NPZWu+O6rl=6&kBNe-iC1CZZh;)E
z@&*_izclA}+zeih!8dbqX_0ku)L=Q2;PMjKuTXCNY*R1>#sL`rNwgBhrYA>)dsNO@
z9I1^rgPKr*55QIWBJ{I<lkr1gXeoMiN}~i6B1WXT=i7X|HFY|HV;+F}uLZCl<k-lS
z2O^XHeah9ncE!8-_Y+h<wGRUF$3kZ^W)kbAQ;r26w07FmGafR0FyZ?U2#YWgH5cCa
zQ0Ly6fF%w#+p_RjeKJW#!ow(`l_y%d4Whd-D}=Au?Z@a60<wqM&aKI0Q8%%;V}uQV
z;;7cvDbH^G)U2Gj$6CdpA|NR088@R_`_^`56mb!w3-UL8QKvcWyCZIm27G#nG-q%+
z&cN|YNEPf)UW>WaM&T#F-_Pb1g<5>PX^&Ibvc4xGho`9wN-9kGMQ1q23Y^<qe_K?#
zW8GQYv+9bGC8!9sA?qhVfUI#k35c&tH|_#upbLXiCIvaSw&azD6i!E~0JY7r{AQqx
zkTxY5az&OI!B1OcDdmUVW2&yQ#M>F-Dilx!THs#*(H;xfL*}R01KxNA(ss7j)q4W{
znm_xjrK@<15KxJ00-)xZk?P@EvP|r6vkK_{%(6+Hqr}v@mN;kTJSaJKb9FSF`*h^t
zgLKl4bS);TCW&k=8HkV)tO6)qD1P~ey3GW6{|=dIEBE~pxsy&Gu`Ib2(>e{r1PVem
zU1wx;Zr2uy4*!#uHX}{IRk2}YV$IA{cIp1t9}M%zTGN%Cx8@Y&NET>P1`k%w;kk3$
zBb~V@m?4m)%D8e!t7dvLx^1f`8HbYoHM-DVf#qaedGuW<G7xC<h-bntez8R|6$7A{
zKhGu!i>O72QF}fpe_`Vd^XtRx3hX&}h|ZQEj4bP11MxvE)xb!Xq}E=uuvR^bcw(6w
zXF^Xi!r#VSi#w&pbWlC`qNaJGV&onU*izH{X?vhO#*EG^aTNEJ)hC!YCvsWd$6FB8
zB|T#zTSGxI#qSkgY1Y=YrkI?Tu{1a&KP&>l_PptkS2?mBo~f`ymo2|gu!1<2^xXBQ
zK!ssSII&w$bi|p7j9^!v;-f3BSm{wd#Q18rwr}9$GL-;nu0LHYAk>}Eg4}CX$$JZ2
z^*YQ&eK$n(xZ3_Hd_{r(^TiM~(xh5$2fwMConQKVhwL!eVrCDTD5cG{K^93hYYxfb
z6_lCpCK=<7beHa*+O!_FJ{N*p0w+s5)4=aXCIk7DVEb**6{V(}J@^LXE4z7L;k*7P
zpP*y8S>GR79scG*0_f%UMQeXX(5w`pQ3l(zI6aG)JmH`DQ#HmCZ0EEMI*j(S9?Nr{
z-m^tN6cA+DKjIME*S?qA?brvJKpKsLg5UI3W49L5b04aFdnXqwwvf{kTX>D%fz_(i
zX9y_Z$p@lv{#%i1lo0PoTq0Rq?Z6g^l`Cp!b`=A^t!}ebQ=lkm);2lC0@7Azl7(Tz
z>rgnv2E#R{S{83{asmQ*+m<=_2g7@?j;PRXxZc4G_#`vA;?4;au;zcp?-`Et{`gje
zKZyC@-ds}>ijA#Nc=Jucwl(%mkcjW1Bdz>AH*cZKHHKziTTeER5X5=t!s)T!sVQJ^
zqw6RyUQ$K*xRb@sWK<=og;swobd1CdDbf5xBtGi4%ed6NT?IW-<vcgKL$-&t*4{B`
zFg&KTYr@n5D;VsM6T)0{`NCe4V*;TAY&dMVxeMZ>z_e+d^#OqdrK<LTj@ykvMDRWT
z0l#%MX>EfP8Ys*^sSrbW{lKQKak&u%lY-`UNxFCngSMjah8_~sZ)aIB*);?AVbe>J
z)#h<-@y_5N?Y4D>s@lEj1Do_j(Z)wO(A82+`-#fr_TK{U0tQx6<n6|4Anil;%%`YW
z1Srb6f~_C&&rQx95E@6YD}t8J4=K<+RZTudEs%DXf_7LNql&(gwDY*FCv`~dJ8i0`
zeHx-Xt)CiV2}j1~jhzGZ*E9rMrHNt}S%61ku>dR|dy2XwrRdq@Ks@Fo=}`pmT6gxp
z)6M1d1vfCkzFnh#>fS}BF`yLx^i5LT>4{peIJJiJ8}nwk5%fLUC^S(00cC*~rkA#K
zG7>mavQDtpr{tlsUu6i$yi>{Ns(sPvx?JR0s<t<~l|O}sZ7W;ZKzuD=_9MX!x&Ek<
zMGLU@lOUJz&`2(LC=Ny-ouQz};OEIg42odNyE_~Hj1>t1?Se7@LGzH@O=1m969jlx
zl6i>P!e&9=xPHySVAVfkwI`T6mk~L@JcTAFUuc6$b|VX+q!Bl(Lk6VfYdCaq45wsi
zu5tBh7}`qDwQe=yKnB>x?&aJ~EG)|K2Ng;MftSOw1!YRxCJPNnI5t*9@XW*-0mYu_
z*ER0C<P*hsdw%Cva<M<;?(ghzfHjecXxW{`bODc?nDFSeKX6Re-XlAnK?^co&nF>6
z>n(#m;OG~n=e570A0<oZn?$Jv;94Q}aYF*z(x(6Dzq%2DOU!v=hq#mZ6DujD!DfM|
z0wSpNXaC?J+Z4to93mk*gXhp6RGFeYp+g?!OU1emu30%7idgdRUfl4Gr>5NBzNiH>
zfv7yQ^rrvygid-$%v}PJ8DPL!bb0NY6ma<)Dj*0V!v>BcB?mJXM!KC+q|<(A&2XC*
zOO0zgS%BolkUgo0hQ=@U9g{v-v1vHGncvBr|69kayh^xGsh$OZzw!wv__$IDY8_e3
zCl*1QR#H9yXA+mHB#V)UApabVPR8fNy}u3ci96U3*Mk}mnNf;|AvqSRf!Z)3Z@fUm
zkVmrELI#V30N&&S;4UdSHg~pf*$PB+)LOQg3q1a+_J;XE%Zk_I74WLa<&+?7vqHIW
zZ7<h&_a`A%MSsMn!9CqjU=!i~A>3{|za2%gMxQ-(WSNTQ1IA8)<W85PP!IzutO0jH
zx^POX3wern`d3yMo5CJLOKX1$dOd8By+)M&6inp3%dtyfyRO7TIF-5u-k3jo3wzGV
zv|EvS+Bb%d_@xUsXwT#m1rl<H`QzGF(=lpX;L_z{S0Zq|LH&E71-H*`=of40lRehm
zf)k&_m=xU|$FIca`ZF3~x6WgL1v(`Qx}oSLq=;J4<g)_gLYMb9*lsShn(+BaQJyDR
z?;yusst~uEyXB$Jv<SVLEH&!C`$<Z+iTPJ1R_syq?>N}3pOSqzZvWy|q#<FaB6ppH
zVX7D3M5dj@3{Rx(S5uTu&A;~qMfY{P9<hUw!*+I0dL*Dj682m-QjQz0OfUotn=pJs
zEdA!krqOqojg;*7Rz&`?6uPh8+k%kMO$3&}c@2B!4z=4F(jEjSX(KTcw~pTGT5oVM
zH=#vA4m~%onpL+oP#$9=WgXjL%&U!{Ymw>dX)j#Iq>K7-C>S$B(8%ME(x82C;%FU#
zId7mYBv|lXf9JDwG`IV6nc?|9L=`hIpd8d0=16V1#7%Cz4Xm>EsvDI`r_K>-Ze)as
z>3!N*OIE+g<AWUO2x4oxBZs5m0ZY}HlvOu1$*)CoXI@?4%qq4$uZ0V9paNJk?J!*u
z3bvEgh*=VS?J#SY?47}B)IYo;>f#QMuTiZy2gIe4P|jXib;y_b<>3DRv|t&<4Z8ng
zeTeiNFz1H}d=9LpJsq5|T7w`(03d30cFiq(tU+3d9zy~ax8m9H>Ey^h74Gr}1nlT(
zH+yA=YBF|+19o1vdYM!T<uhh_88l_OWGxrv0aLQzW_lpKK(Ef~ot__S^ekAH5?pJ;
z&$mr0V=w33{{T5~iol=$2m6(!Sn2eB5>;Ran#%J@`Mor@JLye>A&(g)pVrlwEdXoN
znK>a&CK(uZ%>CJi^!SW_%25d{5+<ud>^bO2M}bN@NaJ9Ra3O7K;-@gBUA44@8T{8Y
z`Tl^VTJz>YvdC4d6G;t)ba|zr>)HJwp9?wGx#2sQ3FsW6rEx_u;Et9|6*<Dlo&I9%
zD`vYnP<W*u5h)BGx$>(WI)=t_O%=w(0<*K@adJPZ5oe3;-5MGR$60yjgV8&{ycZ!=
zwVet4z4W27&-nbj5JJ}=BDWWQ16g-|46-Y#)1LhecI1}((N?fT<U)&gw?qz_&X&Wy
ze+DrL1`U2-PBj(#J^_~%Xg~k>%%<|d&X_+q`(gcZpRld}o3yckkFtu-80H9cjOT>$
zlJC7cE>fEJ8b^YYWRwCJ*;cXg^^}nt&hyAXFY-vfNFYZn<Y))+pa_Y3Obm!`KaBWH
zxf>O$Fd(!lSnNEqgfmp7+X)ufjO29+hSQpjOLS0|-bGXnvp%pW>PSzIlwWUrQIBIB
zgEu!ubd~}1K2#OLUnsS2Xiy_$*jrN8=64Lv7rbK5+%Qkp@sOPTBg-6$KvG3W0_!t8
zKG8-$a&}%!m9Y$dL-|Vs7)-egXc{B8W%GXq;a3s}&;M=^SOxmQ)P4Nf^X5(1fsFRy
zspejR5;K)r%8H0nh%P?Go==i)C!mr94fM7THJ7zf*H0y`IJr%5DQV@j201Q%9$YMd
z<;qmrz{t_u2#fKrULK(L@;{@qDVf3)4Y0jC+nF+Y1d7Sx7jeT=`u<!}xJ;^6AF?$c
zh+h0|UJI2lsO%4w4b}OTILc}IX9eaGA=04rU|&e@by349JowZt+zTha`LZ_Rc8thm
zG#SD!Hh^xy4!S_PgRY8^_8ox=StMZ|$Wrqa_C=YKVPOw|^$f=o=Nt{o7sMT2k$_I?
zOF$KR<tzx%!8(2nx9BEU><IIMg#-$nt8gB+r6E(G1QUM0%Q$-_fk6nQb7scXW!KK2
zJ6$Rr(N!)9V935ztNqQ5!i|}!FyIL?Sss$p@2%scgPUjRbsyF-*^J_YcyQ<eRVSiV
zC)f_vJkNI1fuy6pT4?mqw9^u*3XgNO!ZF?*D&c-r-ksxalqS<PV7RXJiD;e3(;e<c
zkLxp$A%Kf2H&IH)J?uyR3Q)S2RZ=uxGIrH0{(uLruBlP2xNhrJj{oC{NY$ev5POcR
zo+i+3ob@ycDs57>;KD9sjh~<Y_a`8}>rL~;no{1nR2vFkm$<|=U#bJWnkp+Q{z=+U
zZ@%Q|yOf<=Y-4~;7esL?KKyrSL{4FQn3*2KTyXBTx0fYDyCy?oW(^&Ln>Zx~Jy>gY
z9u4=l-zUR=25E*18u)(>(*A!DKcbcb>{V&ur&jA_>3U2+m+gT21NDj+zLH44Sney#
zbSQAtGknsA0J&ao<9zPH0^>u|ct*c_!iS8hBGRwbb98SK-H;#ev$AS;1&O1uIOxOU
zh@U!x@eg0*&iSBCV%-Rg={X>0L0$I=rO<A6eeSr#oWG{iYA-`98y`s*PdHQ~rGrpj
zY+N>~2V5RJ6hvKlt?sVxTHPp1hcZ$OL5{Z`F{%51in-p0>~EqrkdaDfeu_I|A6}=V
zw8*;;>aG7WF2u4C{3cr!^V5&2mBisTau4(OPCBq_g@%X1P&8!hUvLVK(Qe#yc={!>
zDcV{yIBvSnbs&^yobX@7@4tv&;lkfUyqPdNX>fJKX__70mZZl8YDn((qmf|($kc=S
zg{ErP-RaCXpU(*3Y#enG^Kd+h0Phr#Wyw|M9ia2;#7<v5h2*n@Zgs$phB!Zvx&vMG
z?!Bh-yOklNZHrPa2NU0S@H>Y}@|L9Vzr>j(dMUCY$Gv)JL&#t^hX(+sIs^p8t8d6+
zKf!x3WJ{B5IN2dbgZUh&Lf|V7GIvuqFzf;^H%LEbdatx0_}oyR?)c(<A^Pmt<x<|f
zpM&mZjmJ_Tvv$L^Zl)lqyV>W9Z%gk=w$%Yd@`OfYT&GdCqUoUa`W}gbfndl`@rBTt
z+AoARCAel_2?9Qn;d8W+ys7}$w~H(uw<6se9WW2|7o7qOS}W1)B`KlF5Q{0<xmkp#
z0Rt|wN@p%0^$W6UY#+lyjxVu%OlP`_{49|q+3$GAmHcMMnRd2<DeiuQ_wAHUMUOBB
zV=Z7X<SzsbB%`;YsRLQm-e$(chc~KV3^Fhjh+N&AAAoD0Hw1nTB1kpD95|0IHnXdC
z;g>tkDda_6U<KnI&c)2ZubAqO0vqos@>s`UU<{Xv)LX{}8TeWRIsymYa3U_5oZ3H^
zvE9%VbzrcmpO0q!O+w(R99*g<fsxmbNC`&HH4aPkCB&VMp=7v^9)h2tO0o1Teb<jD
z@nGfb(vuS-+hO6DX1q!}M8UkO*0QRR=jlt5<%BDb(#+s^Z-o6zvu72+d)$SZK!5J~
zkr$K3ybdFV9j}JAk}nmi9!%CT9=OCpvQRl?f;}D)nC1F4F@#nh{=Qv(le1S=GUiVo
zLeVT|QR?kGZ-|`0GWR}2B6tp~7K(*gwZn`oy3GGMZ$`)mNxjO2W5ig2d>@HEI$=)s
z*`tbESj!4XR-uWaK3QJqnU^Vls<U_c=_BB#+wBJE^lCgh*_LX+XzZv)dO{Ukm#5@3
zo?JqzF~vicpZCwYl2~kZpeihMn9lNe9XfhdJwTEO2X*;S8DmyV6sf9-GTwvf$^mIH
z2MAOI`IoW3qHPmK=|3JJE*^Z^mFFbzR;yIoy*Q2IKuB`JB1PLpJ$cpv-i{P;6-ozB
zl#;(}au`+=zba#a8uw2Srj}KldHA0eZli@=f57zCKfN?rt6?1Le25YCAM?!;&g8U`
zOpQ9yH#*sVM0NA(q?cM(9pBEX+^Iu&bpckhzA+eT4&PGHXnuP!jC!qco~k?%0z?_v
zoWXfAEuUc(4xiJulXgjUV<e{WuC1X1W*BP@x!`U!8EV3nEeLo!O%A`t<>{OaZsDa8
zcVJ<zmbq;3=m$bFBd{Y53Pu*|e>G3GL0K@jI>_v6ky{U3^~s#`u13!sr>Q+hHYHm4
zD|U)klk6av+qY(&$TL1X*2aRJ{hiA56-c2#B#@L=%-S2)R&$zWNi(_el$qq><2wqL
zOVom~@R=Cj2{PgHbgT0Ho5Q+u%Kylg3P!yz<|Ly6Osf-NbM@YQ=@94$`A68sP(I0o
z@qi^9V&eHBPCRub&w)4JUs5aIMpZ<*up_}|$_uxmYu5X5{Qhn?wX^Ef|LQ=b2U&iA
zx(V>*2V>z7m#creSlZesi{|Jw7?-2wwwY38#Y6kcZ2fJD+Cs9p_+x{MHMiUP))6eF
zjUxC?^A<iMy)0fCNF^_^PQH3EEkUR%g@;^)6q&%;=&nUpJ?ysQa|psM%^dkZ{Mz9(
zADQX@It~3_@BS!F`TBzniO0*Yz4je0D^I(H_5qv=tgxV$fFmTPyu2T)UC4}G+uTb5
zUqr$H?S{CAAaHr<*1DVJJA3I~eTwkCxAkUi)Yw01hG`dc$6@T4B4AYm9vWXdx+UQp
zc8vfKRW4lqjTwL)iDpjP#{m_d!jCR}96=kag<NwHu*w^j1GM|Js;MK8>qBfL)N4mg
z1D>c>c%Wb_SK%k&vxkOiE_F|(rZ7+fm2m#WaB?=CIn1<z_=205Kr#0wr6$DiurPCL
zp<pr3rfuRka9qz+i&Mb}#BgCx{se(&FIy$(V?#mtXP3@abBzPWP6GY=DbfL5>F`x@
z;kFfJ-Yc-FfY!?YY^r{3B6a@<ystXgekSpdZ1T<QKD*Ut9Obbxx35WK#)@HGH1Gy^
zRogN-xub_spCU@Qe>Wyot{Nt}M5&u|(At4n7goprvvK6CP1aEQ{WqLeQR~J76L}=;
z^b_Wxrc1DOcUkSUOzJJe@h$$Oba2sQK>k>kdeh?(yoLrV+=-!Jp)hs1=+e8ht=RLQ
zRJwuIqOyenVzT5y-Nb<<N$`%}qhd!OLWMEU8ch#GgXT%WP$?fAg<T)K-=)`9tHwT~
zkK0*LzpOZ%MxpM~w$RM_j`%sWh{(mKZQIR3*pKK-J>511m;d43Yoy!7T^R;0i@JYN
z@(ETcmb$T|*j2pYU@pqKlBvVSz^8u%8RW4Fm>zmFUeIrM_pzz8a+(hFWFWargMRdI
zv8dx^?pe&Ger0!o<T<OSnJ~qji#r<>AfD|NSIw}>t2BfSXOVyAY>|WjXy<y#H2R?U
z^+m<+PIR%c9ia|RoFN9<|IGfL53=mo%*UD(yi}goobN&-3O|KmG-#X8rcGE@{-SEd
zP_gILix|MPE|Zy(>8qqMx_)^A*TkFAM5JTLOwh3O+=)#<86u|~*8Lt+W|M-$Jwh$T
z)#2&3_{qPp0~b$w;=aY4Zw6UeO!d?KLG`Bo(EmMtC$#|Y!Qx#nnjQuYTY`$;8v-Pd
zTXGnFyi*0en@-caWOr%4S7a6^!pMPheWl<^s_20ng><*X`fvx7W3sdBNv|<iq*I>c
z@x1L!iKY*$F!l$IVI(=N+#!kzaDUSm)uPo0|DBjS*=i;@6tgiyh8^w!!YFKfytf5I
z15&#}SpX}CBO!vO686$bK($7YRXpg@tL9!O&A)6id!oyMk!DJKp#<6D2>59~3^{KA
z-{FU5Fd0Q&+q5t8FiTUF!WVpGV{eHMR?2;xfd58SeOl#l6?2*$gz^K%$oa?_U1Hj%
zwMyPD<;3cv(|^Wu5$74?T$JI|fY=nXGW!V-&3dAX+TO3-2wn-rQKzvMc!0rtsxnz@
zrj2PNU#oARfFr8%??`$l84*D9WkRI*=En~i3>&=BBr&AKE=-4e+BbQ+uxF>8+}+rs
zady*4W0J*YB`~iZWz4GmenfmeuDNfnk$ZrMBzf){6g!(>2QBvln^C}<GAo<7;CZrf
z<vimv$fQabaIaz*?|o=wFlJRzu5v?^^C*L2`8DRRRuyr<dHWu6`_SM|5_qq0!<d?r
zJrxOYel(@a(%V1q(w|yrl*nAbecU879VcN8I-E0F64HuEt+Xr+-zH`;L?sa01}l>L
zHhEe#1EaNoHaQs75PKw$*ZHm!?uf7zsS3sn){9z!yR-d1kYO2G^fubv7&uc5|NNOL
zdGz))9edxszN#!0inyt^cP=rywvWxF<{5)uJM*X>UOKG>5toO)(fvNSL_#WB4vsAs
zfy~0weh_Fr1%&(yndflZEy`s#=(5k;K5cpFNTBy?aTNk1D?klQY)3MX{o@H{nbX8r
zj0CQvtfsuP>s*yHB#oR>D6rpXap&*w%JaXf%5O;QsrOZ`Qpy%rt6<C79*+d(7CD0i
zj}5~WwB#tadCI$<#l?J?DoU}=@2lY7xT2(QI}hGOxpX;Fp{5#Zv=dkV>IGfH_Slup
zp20n0-J-#=*UnBF{lCROR^G)I8{>G4O_UES-Y&fl-5Va`(PF-YzOu4gR!^Tbh-PT|
z+aHJOF$;jQ5AGFPYE5<R-q*4ApMH!0a38UFk)_M5q{AeR9<sbYD#XZTUIL+NEQUp{
zuu;3~#qwF|!t}OUbKWh)^;3j+obrGf?EuKUmaLYEiyzU!Be{i*_kGbQg3E`19q_>4
z7Awmx-h{_lVJVWe)eZ^Q%o(b`G%(Q0;#C$14p>k$VrnGkttZDI@&;uOO`R=rZwoxE
zx3+V+bTZ#dITL3205#?_Z6LrU$%(4jcN~&O;9Ya&LXDGjJ}pYBf6}7IRc@(co;2N=
z4rl)vmE{?rQNpH2V&^Y%-3$ERMZ`;jAzew_)ZQWbG&w9BGjG0knf8g4Yz6e5$&{Lt
z(>q4`eqxxoF|;qoN=wvyhX#WGIyNzhaST66-M>yD@H-j*xexM)9u2`RHP_BsFrjj&
zz2Mgef~(8fsX9^;<0}|`;*5%aS+GAG!)6TSxBDaT3&k)5Tw)6*Kt8r%3ox0bY<`v}
zbMZlVKW^FQ9pE=cFh=4xGFK>>TR}{^ozQwy7yF{|60<aNTw_e|(PRLaoZP6DTPj$M
zDfu!H>9i!MRh}s??T=G|b4j4rGUIb$fybx^ge_Bdh>znauNxgI$rWXT2BeBPSm0)M
zBOe8wW8>-k_NFm$QF^AlkGgCB%S8vWx)i#P$eqf)&}ErI@B<i0ZR`GAwE(tf&UwZ!
zm?L=S3|J&#E4<<W03TSbpbUZU5dICN5n1@m9VZBXnHIDJZx?akMizd98n7T2q?~KZ
zYY$SU^v}~(^uFpe*>wI;-I3Xm;{t7lnga8a!>+*N{}F1HyQe9G`p2;%Q)Tb`k;GJc
zWQp7!U4*oCLRvfrkqIaiS6^X}b$R6B+p17@zKYa;vd;Ce0>QLbF3VXr0HCA>PdD>j
z_ysWU@z552wFz3oN>SpO=ZkZ}M}}aew`kLhU0}uFi1>jT2NUpTou0-6ce~V7(3#{w
z*v+*>M0!7Yzn=dxij2cR(n2{`0rITEp<%M_-&L(Z>ktc}B(#)XHT_@`cX7q_WXe`(
zO>!o;^}q{G`J`Yc0V7YtCjKpmN~@v!Q|8rT&CgfV7j#}~rMdoHBXzz)dYJK1KFj!2
zch*y*KH;^d#tr@6-;ojtC^T@3d*5TE2UQ(=gS0G;VUPDH%Ql@2I9hfr2o$ElVLN-!
z!wgIRW8&VW>(TS6J>)KSM{nl2wsF0D;a}G+Wsu+ls{LEh+$6IPA@*~$-3~&$8a@p*
zgzkaNt>&vxY*GKpn3Sw4$$)-Ob65QGI(mXX=Io8}=fvw8#HWc@usz1+#yIKwI+Xx~
zGJJ?Uv`mlHw{>+X!(q{S{4t=cHRw~ga|rbK*MXfGcRpLQbTjqNCDA4J@gTb1o;_?y
z(mK%RxXb~VpYmoNEYWV)G-cd{kZYLrs!t|e>A_sdSxr3S^YE@@=P@m0D2r6M1Vvk7
zT;Xd(>obIDEh_%==d#|enPxpp)dT?j=7~%KiBN_MzlqR`MH^m%NfG;+BFc&O^6vFF
zGOggKc44ALc@)EFn(ifM50J^Ytt=~JNRGC7+VrLlH-9vqNLXC@6ub1|x*XC@dvE)@
ze)e??ErvIL`V1$rD^{KhSR%7pziar{ZYU@jjQ3op=-cd-bD!^^Jb!P}cujos-yHq-
z#|TaIvD<e1WyfEC7FKujKs^ko$j6&6bsDXCknHnNA@sU<#O~`#796k%v-G-kXyPJu
zl{P+XbK+cVl(l>M?RTcIUSQqt^DMmYU09E&nz#di8Z)2AE7?P~A<_b8Sv}HX%sp;s
zf`*s1t#@dttr@fx;e1zRhHN)!_=m(Qx@usKXji8qhR&W6<Nna<cOf1T;fTm^N;>W5
zb~SLwG8PzDXb^1e64GH2AlRI=fLgp)-to*b;|(zId+V^Ox(sUUgdM<<$gjY_8@FTU
z3CxjoiyLSmF{Jd))UY8m&5;<?sG$SFGJ~N#)Ssvirn1D7XcHYNscZBNRxW%KZm!_C
zWnlo(q=6^yR==|DbMxXiRWH^qt|n!LxY<x%7AUt|28jZkxQ}$RS=5*C=49ShHiMY~
zx*FA_I8@Z%t^_sM)yJwbue5ICpxF83d6B#xtsy}Ay@BxqROim)V($VmUvB=b51+z)
zFnS0^*jVt#DG3ZAD#su4`=&fQh}-o@%q-<LRX`6wUkh=cj-!W2(u`dst0Cqv1j2up
zv*V9lF2v=ECxrmv)srX{2=w{V(euAvIJs733C)#E|7r;j?%rMplFWs%ZyoMdjMC?v
z<Spit0)DuLEB%;I3YPZ|Y)6lM+Z-)>Jj-17dgE2M8+~Yp;6tSGYwg1zDtgYJ_?^AT
z3*%O<D3Mk(CeqHrN-3e_i1e%-oz%|qR&Lq&2$$ekS`v+%sh$au6EV?mfA{iQjjh#X
zFkb1M@Vpd$(hXvY&>OUmvqW*^b5mRGT;<4cp<v0Hfu4PMQr}=&P0s)?dWmr{g2K?`
zf~6+SYyHCFIf&D5P8({K0>&nu$0s1tIAZxbEUZxyYUXlS{{TVX=AK2^yHBjL<ccjn
z8m<wP;1lK~76o45*6!bf3YQFU0Vj~zp`4)G>bL5*s|lKc_9agE@wzajvW)(nB?Tfd
z!Q0B)T5-^L3@0Q_=%FC_lr8c4PQf;lbBJnMCK+Q0d=26TbE0rgTg$zc5uCzz0E@UE
zM;Xm(d}@-d2`#fL$)ys<I4Fb4da&(#mKFIksVp{lSciz=rZf5%R_onlyp?6Onv#sL
z!v)HIkdfm|tIfxt0LYo~3m=G@#^6ET^{BRHCYC;HrkCdUsbbau<BH%%>EiooS%=2N
zQapJGFnl+*4ZOq+9iXV3g(f6Eg%?^gyl_Z*#c%Q+v#lP|xr8Kv)MI-UtSUsfZ?cMK
zCo~?rlH)Xx+e{1>iA4F<io@C%vsq4ZcDaU_pZ8VgIk^4$!byR@Zd9{!3eK|o0L^4`
zy?#yN5<xydiP*);?`$q#$;c<fzw7C_N*T_2M2A4kH<ZR#J~G!E;iZb?ff1z%fA4$Q
z$tUbKEqjD<7>Kr@w>kQ$?;?~fS2gz~wKkUW5)m)4M(QUK(Z#(bLA)ac%NW2Def@l7
zr^$0W`I#+>pJKh|r+64Ni8el2<rtpa2_|o)H)1Rrm!D4t2|r8bb7X8Dh7dPUri51s
zTtquU7I)y-H7bauynIZYHb%{Y`qq)3*>m}6Hdt0JO2r#v+CF#j+Qr9@5PqSd;j6NF
zECZ|wsx}2n{u<XA!2$bBJpY|>Qo`#C!$kK`|2W<c`Fly%*87QHRW~{vV96iLS*=Pu
zNA*S{`qv1Rkz=Udg<f5YrhN_+*8i;`1-eb7NKEgH_^B$awhe>UNChyQ{uJ918n8y4
zR|c{e!yCi#=3j=50Pj6I-^G;!AJ1aiJ&uO4M_+{n*#5nbGyn!el=rZ_Ayp1{fNp|2
z&*XGpn`7loT-lY^UrVuiqEQu*%mT~$X*H!G(v~Le5Nb$qLbS|v&27*C4w76I=0C!+
zT+XA3I@sDh=4SsL9r1eBSNE)MH8#TpH3=>K_dZWO!ANw9Q)-d}C3~Xh=;?if!AuRs
zA|Wr12haRZ`8~U6odWtJ{9F5iuN3*s^GY%I5+oQU)I8s~z4Y_@19ebn1a7RXVAZ?v
zq^Ca$gn84p#FGLD51%KrH&1aiYJ&?+9K?xw0CPMsQK;I3|4=+u<HL7#{+mZbjj-~(
zkz;l`#8-;~o*)|=`q>5Ha@dzKR~o7{nKrEPCF8R|lanZ2Mpxu!`IDSGKrdIM3yo_I
zG(ka6`8RV``Mr%?By;zh+JSYP%f;C9HivS7y=0LfsH36^FyZf8uhU$mrFwE%T6EJI
zsNXi-&TaH1qozrai>e>jODdOLlH6B=hI`5Z-gQ1DJE6gyHgG>2le=DYVHNKrEtXN>
z$+~RV)4UT-XX6PZf*rGAN0F67LS$98_%qv7p_6+8Ue`uBhM=6Db_=Tp7Hv~E!I;Hr
zwTw&hZQQql!-vI#Jv7dkHf4%aMwdAp_w=a>gjiSHhr5!TX<EnYw=(h&uF1sRTNwhI
z7UV-V3tiInTZAl9T^=hW8w-kf%-Lc%(%-X}9l9ISl=b1cCqjpK!7#|sd+FrGVyku)
z&Eg3!px|+&c%d?H$HkVV^L~~`cTtDtQtcuoLrW-`UMGxeLKk(kiA9;eZBQS)r-*8h
zB3FI6IUE{K{W4F`a_bJu^M=_E-;$8k@lnt9&#*rez8AA3JwgUX;%loIi8%J!B6+F0
zw~C)U#}ja?C!r7YK$=h+%HPxxPA3taexSW5dd6QDvOm_{QZ<~o9b0QM=>+rG0z5M0
zKfdzuQL3#`G;-L#sINC3yI0z+q)N_@0}iAP)Hgi&>%vuxG}w4eMs8kv49Gwpv@7@L
zbe@=YMvo`JY_pc*i$S2ZF5v<hpRChsU{8hXO13j+HG2GM)^}VPrYls!<#2ZO$*hbp
z7zvQ*GyE|u?V70$hSFfwbDZH3J2hOu-i8tn_ueKV;<lY_sG4r&>{)sqUbQ|OurT}a
zUc@HSzQ|aQ6qN+dK7j0f9kc6Xp3Z-VYPio`+m6$bW;~#geJX*e4~ntSw>|<>BnR9H
z6WNvCY%5j8(={M3-Xh|s|D?{cax;N&^R^h23RuODO_cSFh?SORl2M7IZ>MiMB5nB<
zj9A(FYvgp5r1(DZT-hg;?nk7IEgQ^`v*g`Jfdrk+qAv8w(48iny@YX~6Q9ghJKcil
zyueLafeRvOP){h=M7KEg>KyHvBXBQ@j1!La(RgN7<|Rm%mG@h!H`bGFC#URXI+7=T
z35}m&++;%sOmL81;<Oo87$BY;Ti)e`jN@$wIX?6TNYEkPwOw?65kBy*zCHRY_^%nq
zAlIwXrlv$vV}Emi_<MZhtLb8Ug*bZ=L*$9amT5Y%lYA}HDWKuBr$Qmg4A0^WVE>N!
z7cdc)v*VwdQ{Dbt6ctv7r2?^|n0c2s(R?Xful-b}cp_WK2)!@p#hM}K|3&>+cJCQW
zeGVXEZ9GH{70cnUb^+*$Gmb(T?a)s#s_G38Y7*M`I{ljbP)V!ny6Sh-!qV-`809M>
zfB>m%U}uk4Ue~bF=Gdf&qmb}5ZK>V%+~MZXNTgjbZqUMi-y-LEgL|#^tRFSZQS0tA
zvfPG8R}wn$)e|;jI!&`YrL$hVGwsS~0@`Wb-6_UB86xGmwfj?)pCqgB`nFV!w)qGM
z!J1l9JN9RV;e+W(T)#9rVnE1xAXh|!R_Z_<xe$T%UIutKxH6BAk|58}`Rq@Z(j;)t
z8aa6!+Qv9Pf1*QuHP*Ucq=*ZCe~DAm9t`9Ta^#@wnZaK~)(MA6S0Au(qT;TN{}`o0
zkT9-{H(8@&PQDTQ++i)n;MZZxpV~c;`Wgjym?TH{xpe#Ao00wX-RShj&DeY#kj{QK
zb@<FUly<pPrc!Cy0R$>{M_l#k`4yavJn^iSlW57cp9q^Miv+5Ag}wezFq3&4f#uGA
zvvpXDQD8Hsdzr`lzVrPB9iZk}Mj7a<bcn`-oIw8@BkiKtZ#l)Txh|aqA#;q%0A+|@
zXrilji~|{brC-q8XgPdSk}Q+OLoW_b>#MX6NII(U`*MH133T<v$bi!<(bw<VW(_@n
zXlS#{tealx>j`zAoVnT*kQ0yjd_u&lkc6+aY&LhsE$uF@Dw4^c?qx8iFKVni?pmMe
z$g^OR2!p}+_A5b+I!$8jia7tJnH&(MQ}WmHXq{vMbN5H&x5<T6G+P=qr>PrF0nD#c
zImus)dZRq<7Sbq=PWg%jFW1M_wDrr^xi5{E0zVBsJ;0t=^uONZ97Izzmvsz)rh^1d
z>3^seUIi#bOEqEXc+@EQ#omPB9wW%4;s*9f^;}{*{>ix(o(0jJf#&#8FSYM=<&q;`
zz|BnbR*x(H)PXVTZ&u!Vvbu4p;|7}^Ymo1z50lYRKY<k}B=;`ot|k{pdT7~~T2*IS
zlXjvm?G2oyEEx4f3SXtNp_U^IEhY;jsW^>`NvPj!!X@GRfA~cU8o`y>OnsJ`krAnJ
zE<Z8A3iy+PW|FgE@cL?5Bwa!qve+x%(}z1(lCV<IFF<tBFnnm)#Vg^vlJmyX>BsBK
zGqD6>*i;i9=YweINVe;<ZbCHsk_)f^V+u%3r4N4H@#%3YC6*r-#{`_Upl`Jc{t#Hq
zu;)HdBmTS>UGC_t!l?7M6N|KJ(N0r&<1;2xdp%iJr&}7V#9A$%hS!8j(UTD^s}o;l
z_8AeUu9|k=t(Pk%7C3f`2ZklTvDI&(f(!1Ol@Hd7nth*rbhTK%EL37>3Ypn?o5}cF
zb;os;?@>Bu^pn*@h02I;+&BoxB<_ys#S0Ht^jTo>icaLX47=?3F}um1=27&hnC1%T
za&SD9f`ADyjU0ca?FQh>tro2OYHmkm{i7m*uRtsK%GD-OkA^OPD3c_jBVo(cW53j&
zlY*YlSU`5Ek2agz;Y}+z9-?kW1Im+2WP}Btw#;)#m})J(ZtS`G24-o9%zGXJ7P=Wy
z(mcQLGEzr^NmNBqe}V_yoT%MKa=<j9IyP)wPO>sc)*@K??c%)Zat{^(Z)oZue26)|
zffWvwbTWc4G#b-u>vr!v4jM7#7mX~nBmcOsrt1P6g$yw~y~PHsh)kq%hdi~j+zIMu
zve%$%gq`lYkv$IyR*gt|ry}cCjd6&UVI$iqYHIx@FgR6^M&$%Ma6WYYrE6U4!;J{_
zt9`}?Pxi7*fg$ygM#HCs!6_^KYP2it#HKD;pbW{u4(=^p?C??OXEqe(;)2X3`?4uE
z$y?1-NsoA9rOu(CYRzWdFLCfz8q`P=sXCt%@5hsAhk<_0qldR&cHMhcq*<nf0mKR+
zv2*IhSXA3>hu*W{Lt;B4VsOx0^j<a=)cX-qlcf>3@kAAk5olv%&Tb?@<!*9!l6ITv
zbFADhe6q&K&*Pw6@?;A>FX~sQ14=HtrhPEGvRK4<q?mo5=TzX}kP;c=Eo1un=*NJ_
z8{xHACd|W&ni;r!pz+Y!xvWvoyW%2OC%@mUrpZCKl{`&;_TPp8M<~UoX7<u6au(NO
z{$lEKJ;RrZ*zBMqMO&K-$CF6@>!_X4+)q2_&wU}E45OG$H{wXhbk;K$r4-#T4shoT
zkQ8?O4Bic`<h3DVTVPu2bC6)umq6q+LOF9~Gs_v1FZ-xt^}~m)jMw!N>L1T$BQZzr
z*qF&<4QwLLo2$N!G4P&r@rcj^-3m_+k+DtHR6zokZrqL0;(^P@^X7;fC+tKPI6QL2
z!VWeOAnCyT8TBw+q$vKR(c;`)<x9~ty~XoYqi8e^?jcrY_RzHDQ4!(wbQ!U>wS1Cy
zDFA@Wyp2ZCVMqCXTGwKt2Iesao3tv^jH8H=)tA{hikKodX2fT3>fPp3vnaVt;=57X
zLCnA8EO`7lAn}jTrUQ;{?F>lajil2Ey#YO?GPmM7=7~Btthrs?NV|7X{!GyVd~dKd
z)oydGPB1ielvc^yr-IfVIJ=^0yFcXyhSN?$>#}n0_N!v-ZU83PhbRHUG?IM_+(d3b
zemn+4Ve)7&s3mH0-P={uPQ$}hRQ`U0DTLLD*{H^~gDyvnJc8wYA?kN>_1Y0EjV=#f
z(eOSuEL(x@3x01|oii1Ty)lz7v{OEY3jh|j^(t@)Km-{divaj+wluFD@S0$p477Lq
zS_W^t%EziS%d&|FVOG&z@Y$}*W49{;5x&>GJ3z1xa<<sjtHQ;~`<cc}1Jy<uO;qYo
z@TrytglpNtcL%iqMU2UL676d#$9-fo5@OIz6a5xcML@&iN}5?RM*Jlj8FElX?6dih
zlpeUKQ9n!tw@HM}7uqbA61E;GpSO5LvI|$9UAnw5&6FS#OMVN-%%!0s(*3s)7$?)-
z9xcNb$jA-!B3P(dxkGBxIlXjNN)R&q+2_=HcCWXD?Uhj<9Kb0snbl32g&m?`DxJhf
zv*3n)-zVaCOLqRKzbp`ded`PzV|CTjIpD)$vf9F7-QftrsWx&BUFKvm1_L5uc61~&
zJly8F2$gNX0IgRz__yPk2^HZZE*lZL9fcN05b0XwZ}DhFF$YNG@0!LoLL9V{)u_~s
z(%LrpKJLjrkm8mvD6_|>ri3hKzt-*ig;23SDAB-gfvml&lfD_=Ht}gbDP^16)7}1+
zztGWb(;%wMw?J-QI=uDpJFd*7S1!>(sXDG6Qi==~dYi~|cn_;1O66&lE@tP)D_AB<
z)7X)=WBm4ywAc($JD1g18V;?d=t;W9;}jFiVM8Ql^<8yAbO(WPKB<r-p`E-;@rnO6
zfqTV=BL8hRt^kQ(mm{FrC(}F!+l#<s;HJ;+!cV#MJ%C<x;Eok&uS+OPF^{kRvXw5_
zYFQ&=;5_KBc(#u&QL~>cp$TeOTtkWR#!=Srw>9B+;Ysv_@J!_aB{eW`&^s?Lm;AR|
z)OXjrlfhb31X{3-aMX;g<37-xg2j2-|M>W{Zk{xY$Y>3N6edvaX|9cvTn6v)weKdF
zQ7?68mjz>~MkSB81rwrW&pUWAOy(`S5~xrJqYvm6a2#`KE5aL|x}AZ|{XQKjv|@IR
zRfll3j%buj$^Dx9%rT}bBqrGO@KSRd?%N8BckOdVs;bHn*LrccNDu@}r_{kmM6ah|
zNU<Z!(6$u6BTft@_eo<2lV`Ho|1caZnB+etPl|XYbctlKSwr%yqL$+V)wWl{$>pKX
zK^rANNVw=gBCGj8c^&GcJ*?EB#|v_X$l^kKEln$SRAB2hjGk||YC)f;lK|!%uA2c0
z;;BJDX(6!nJ!Bc@C%xbJEz&%4uw|HV+ppx*Tm3Sf2!;V9gs!a%_Cok#EjI=%_^YBT
z6Y(B=7F%C(jI!LY?XKS$t7TyJ3DD^KUP8mHgHaq%=I$k9k{rbii7pwC<}Ya*5J;<V
zIv~GlSy2)m@$IlLB&eCewCXwO8RX!W;f%62E!lGS9*XR9lYZ%KJ$IV0I*FXzm*#KS
zSxue%1KICYB5mW?r3jUE1EH^QHU6~2(%tJN6*_*Fu(#&*((}@Xt^>^(4F<bkPuobx
z>C!wm4&NFyX;jF8CKqPQ1iundIs5h$Uz7>ppl<08dK-!8KdhUWGf}vxXJj$Xf(Buq
z;)ky^g&9`%I^&-EmyID@_jK|BNFf5|{x)GrekKB?E-5n|$<C!FQYz=8<M^z@|C4&(
z!)Q;mF1iJ_5m6=K>k!Qg#b-z=0YE9VdSo%I|0VAjshzVyWMDYnPQfUkN>om+vY~BE
zu$8=>dD3IWAqjTC6IH&t8ek0d`)u8|XJ+BM+UIKT%ABI$>0Xte#JD7CvMyX|NXk0H
z0gTdZNC>D-2O+a1eStQVVqoJJ;i_VR68t_@B)5(RCur<pn`{EgsHV&~@Km*`E_d|f
zcd4QC<NjO*d>UjmVW+OUerxB6PcJZ1m{q^nAw5xz6AI(BshangGt?C6nA%B3KR|{A
z_}?mw>zgIJVa*yPx6~LDXsR{VRf+NAZj0fbc)Y8KHub2I4QgE>_rnq!9mFHGN{sA_
zvE44aJ4hmI%K-FNTe>1DYydCm*hX)9GRItl@7KQGFlF*AmoaxU2|5vUZD6A(?JR^i
z%7Fo-Zc}B!-5ugpv_^>M4ak$+oDOr&{u}H~Q9ub3G0$JTHNV1b?0`10nrHi1)3W_k
zzK0?fZ5~V_E8of`P(>LkSbinBIbr<)&6W|#iFJ;N#g!&F-r1qqq5Wtuaqw!Lr?t76
zCwGX3$>I7(*nV4FeZIjXks2HPSar80ZjQ#DU~igsUS>1hn~6$(;$0yPdj4cU>=XJ2
z?e)Y^+g^4>#RIoGzUrmE?7u}N>oG*%b7dClp3Sqxi&-m=6DLb=dx_DYuv^Z-kph{)
ztlhT(jbtRX(q?E}b(6pb@wif7SYUx<%+7-BWJiED6+b`R^|*`>g431X$}$zvC1N(R
zg~#m$fXVPD>~}+Z(W@(4ur2jSXzMVM+D-guj_>1Ds9eT%Egqz@i3^t6qkuql{vBS&
zuAAOMLUWkNsZ%Y^meo71dN!EM4g0tdavu6El+>zGfm_<-#MQk?^77rR-|n-|uZV_Y
zo0a5>8|QhWPjUT>dclasfh&_YfcfPUidWY~?-;a*Ko}Fp&)H0zS<{gss<!j84luZw
z!k4o#d_z!1EK{HJ3<<uK4kpXvzlwj-h&m9PmDb=B%hpJR>?G>dSiu4?cr7``4;#?Z
z!*-JFJAzXbZ_n3#cCZalxXi*C<v#j&KYWELf7C0E==EnW)8{KhMA&z1b9>~=<kVEU
zj6)Ire0m}e{!x4%d>lnb6Ozang>HNd!j<m%qW5oAsZx@0)*=wXWWK@D4rn^{sjfy%
zr=N=4CyZb5@19Va7FM%Y02Spzl8;Kks#+ZFo~c61d0ulE6ar2R9I6Pk``MNB1d*-4
zPx`chJCwbp7*ezhlS~VsGf-Khkt2I=zyAQ}5MaO>|GOkZB&C5(4fCNR&{NN@`m??w
zmY-ALy8wm5vEOlSym#tSzc!HuMLJ}4VVN(jr*E-(tw8y%VJ;3KeA^%LXW9w3GGeM>
zr}BpYrZmZjBF5ac8<&$eVc6HjAufV5-qF>mC72N3;bdG4X_M%Z)8U~AgZe|Fa}y?n
z)rq+JJESJGw|^*HmW9^68bsDM@O%@@DEZl*%h6lY#w2otWCHM8h}cwDdg4}JlfEc2
z5^l%C2QhrOw0&Z3#=hnpa>Y4mVQ#mHj~+X$<_A@gO?S@x>J^qgPz6-qn~R@cHY}!L
za3`P|nfSLlYa>K6V=OhkA0H<I#rl*4a^fqK2n(pS-QfCrglPX_D&OT}*SWGWNLdVh
zXfPa0p_|yI(S3@v)glEy`yL`u`c`AzDiiEtq#N|652y4F?q$h;zH(eDH1q!>u<gH6
ztN%)^{y&#mEvY#G?=2c|`kU$}E!eR)LKP6-a4DAW9O7t`B+YtZ{QbkF8vOg`aS%Qk
zyb=SfL<g2+FATZPQ2Hb71hlXRC4!8+#nSCBsOrw?EZ9CLCG@6zoq?aF=$%MPJ=Ad=
z?qE%b!ajdsUuuRu6k(msjUconv0bL_qYSM@#7e}(*nOB`{8Jk^O}G3yP`qa>86W$`
zX{6>=!>JL7?5;!T$cJ|?f;nmP_|Ze@c18DKGvfTwk%+0Pl3i(GvX>HiEQK)zVD}A2
zJ=C?^24?3aV)GQ_L>LZIQ4Q5lih2{-pS*Q>ho)+%3B7<p5<Pa;IK;oA2psNh$r`<;
z5IQEGLvzujU{k*3ADTMpOIWYt=x?ks;LgJm82u*tnpTB0?CNYE-gPU<(CpZr{Bjh)
zCM8rC6Zc*OlXdgOBz#%j>Q_)Ew*81x$4)}tB}gXzJ|ZeUjS5Ef9Q?=Q-U<g3mE71X
z`b4~@xxMtNc?Bri?dO=7`pLe%0g|#X7?1Pu&EL8CmGv#`66zjVB?@>!TO%Kv(hn?|
zILrwEaj9ux7I7iaSg(#PI<vdcQM9>z3JLU=-QC}>-mMj%{8PwTI6Ze3#F@n9J-TMZ
z#VPGQ+%r|fYX2QyiksN!w1^eK^o#ndCqLGw;qR}qFe)wg3g_>sV4%y5Rw#CG!_fLQ
z49Pf`o4*t->ZMW!V+BAi$Is%rI5O>PJ6@5REQ|v9!{NOtO+vc^Js793#j*NH@Ex52
zD#S)vHi-p(;nGQNXA)~fPy~GyV;R@S^DD_%)ZNPJEVZ2sL@>S+mubj>ia%=7Z*uaa
zujB|eR7LqmC(*rDOs2i0VDyR%7f&zET1quA5h+5`23F4_u-NYTh0j+@L-9-Kbe;EQ
zt$a!R|6bqMBmLaRmvx&^I%Zi;QMfXv1T@!1;B9sa+CjD&^NN1krSd^Qf1HyiI5P+?
zV{W0s@`)^$0e_~b@;bjL1iGk5HQzqS$d5Z^9o);*`d=ps*n~hC<#!je+A0IcV^^FC
z^ck3mtZ_@fu>UM(qB9;40XQPqq;ZQ3?V$2_Awv~~dX|_h4~TX8r3MSGT&=bx2o)pt
z)vEm!h^|)&RDQVfy67Oyh3#}zMN)d|)l5A76LLP!=d09#k)^rRYU52d5+N&}n(zh*
zFKdO?ht?*ZN?Jb~=eD-d{*t8njiX+qe~c-3YWTo*xUK8A?D%MHGeLRj0zjrk-xFIN
z8avv~A`T^YvxvtpDm8{zKhyUWR^t;8M6@@AvMGTL`AX4VIdRC<<K1qnj1quVM>Z5B
zsKkKhi1aPPQ}uY<F4fgVrX0WFC?FKuzpf;{6Hphw%VV0<AY7I`G<E%K86fZfC_zqO
zXE^ZWO^#=HF1Es;YkErnP-S>)XpRK0T`U48A!d>f*s7hna<9_cpbfG5Fo#0wwvMXF
zTV<5?{FG7y_$Ras9$2$2@|_B~x3==wJ@=I3#qetjtWr`qWkhdi5k}1do^1l|uv#&L
z#*f}*?HZ03)ayiv=6uS#C@t&Mr>U}^E;&0eI)jBijo6#~`*<@lGWs{xc(1ScRsIKi
z=g=e!1MTRxZQHhOzir#LZQHhO+qP}n?)j?b?q@rTyFWi5spQGo0m@8^MW|@)S_)K}
znEuyuFCSKZ3&*$Db`jY*IWdDbbEc5CIyg>U8?w)-BT;9IdD~3I$BhJjKkP0+q5DeK
z1#enB|ES&<P09Vd|I9z#D#-r(9ue+D`aISWJlY)BJy9Wgd8@Hbrhfh>)p}HxyyXb;
zv5m(V)Q>FV02_UBC_<$=aej*lj7aU_-kM}L4b`(p!<d<Q?XvIB`;sB{nd)}$B={0(
zL~_vUR#Hx9-Ls{PR`$+q8zAx;%%0Vh(j$rlKx$_nlfucxlK>njDB@&!W`7vlhs7Ax
zWKrMKGOsMPwVmp*87K$6b=49ls$-!EaZouFYN&K&EFg8WXQDHVl+uPF$|(VQw+$7c
zyCmeL{Gi4qIaWf8--fqYuD#xhY51;Ix&1$2z&_yuaMb@prJ5gLE&|c=7zD{#Otn0#
zPUwD~)-JVM0#Ad%<mWlfAb~B!Np|!$cVpUPI(VmWsRS=rc`klI$1PU@ZxuJ>upJy$
zVS9%<zZ|J?VbU_y=R}w<O|0ghr;Gv#{VqF!)XWp(5?<ghVVTfB^ltvNdcqkZRk8a^
zg{#~o;<kw&^Z<SGk4s&o4}Fzbl$Djxb8B^tdZIg?Yc5u@q6ijvb^nap5!6C1F4@gi
z(a)99kpjsY+F;gY_{4Df(u-OC9r&$B4)9_lUvbf$^x#V|B-=b<s8(0E<}7tc_UIzT
zF|7U90?Ag$D5;|f^m0?Yb*fO&GdgSZT-0XWfpyCo4pE+^Z(-3ELvkO5q<JrX>)3E>
zrs~NPKQHi`80wWPs0Yl-y$%VHL9+Nam2tmUz<Rp~PY<M#Y+0;EiSliHO%M}Sw`*$5
zF2McVT<A~(6Bgsmh0L>41;pkSf5ZX(T}<2q)M!O_OysPgtcc2G1cM<Z*3}i+^!B>)
zusO{>sX^)`_a9v;`N-_F7O%c71oyTEdLaKWx83`!@m)Dx^Hl^zjQ%B|tV0NTIDx3O
zNs2H?j^v-g+j6$dnL~{vyuQa{-#r>|8S>QyX}-pCuOt&ph{Fx?5|fME6ht|}M&5xx
zL=M9W>z+a@_RJ0xP;vGHlUoL3CuOJMxuM5hlot&2S8QuwEcsjKDheEjE$S=Ynpmc6
zP=hp`!*nyG6<eYYo;}GK{3k=eAQ9ZukI{=w8ZpsX`aQMeD(Me<hClHLM4t<Py@T=z
zQ~(-5-*n*3B{Z`J%1@GlJg84G)r#oGuCZ9~*3^eNM(1kf>6T8<{m*(?QyHF<oZEcJ
zXuM1C;%@D8aHB-FoYI87?mzR1_;jF!I`x$5ncOmPM(XrNH89@1u3>2liY&mmq2-R#
z_59G^gf%OA-?at156wIi1y{a3X5hfPNRay>;u?bDv@%0+);r^lzR@B$KEHGD4=tN)
z*eNke!)fMF%56_aF*8xWJ?n0bc7wvQ{WPZ12eOtt@LaRq<^u}1IVAXLdTvsXSI>>V
zG%z8AB4ObpJfk^cx02?~iY9`1O))!>@B^^U77_(1k{mPAOJC7s)Cc+2>^^h|$`u}y
z?r~V@J6?-j;FvgYDn)y43HS9Yo!3UH_b=+Vc9Z0P+~WaF5>)2@^)>&CFaIyTj3DO-
zV##ky01!`5iM`jzcbi9nXBJ-4@kxTz?seWK{|z9@;0bd6ebgUH>qIo>^-F!nDI1R4
zIwtcR0PfUZW*+pS85LR};%|`b<40aqe2>*thv?deF+~zPfwrLjmBPs>b4#K=pc=jE
zlmwJUr;45@<RA%l3;KtY9{Z*g^4HW0#r6zPQ6m%`7!as&o258QLUt~cVjbJH*ZNb0
z?tQ#(R_R4?(>PDHT5+wCUze>Ng&EEO0<U#672O@>{$mxY87(9Kx)>y!XK?Vk+?au7
zQoMJG+_@Vv*{@CEqI8IU+l@2gr^8y&2H>ADzV13iG^4up!Vr7R^1t|UkuTQwed^*{
z9s^Tt5I$hL3j#ngg_$*y3+LtQSDZP-&2}y9P*$G?AnyLVJ-76kpMvf@MmJvZjgU}p
zSKi#%sYJqYLgWRQ%!+)+G20B{f9?h`aQXyU{~p3L&dy&KmIEj4^|nmSWPCy{q47F6
z`}ZP<M^RgcDjRcrPY<BH*@${v4%>C~-gQgoFUJ7tv~e#5M()m2Jx7Sq91D=i-CxkW
zFM_v0K|8-FYTl*wIxutV$BKkLYLQo-ANa^U41LPB)Fs(4R@vd%t+@d33__jgGFqg6
z0O%OH7*(l4%mA!i6Wv3+$Zx;K5xQ0&*7-c0m|<@d(#Uim10Pu!EOt>7z_1ivvAMQl
zgN5yc!B4R-zz*KU9L(#~Y5p-V!yX$O??z5U%p4&IAN3*+^`nnh0deSi{WGokq7Py>
zKOT!93}@r=5yaS+c^4CbfgyIdV{!V3G84}X6ym3<YtcddrFSwetMkU{IfH2GZ7rV}
zDnKVXXWn<6Lx$>Tjp@ud>z{S%+8~wtsK?E-*@&yhA|t<QtMKi!Wh`BIY&B=l9rCF6
ztKmsoTvP8TAx+6!4s&T+lb1~_P$wdvR^QS!oI{2wNPkkL<(pnw+hOZUMenbxKcmf;
zxiyqy^bQNX6Y@7=1>WkcZ6+QTm!cBqX4Zg^m~HdkkANddZ9{W1VMP}{gmkKtXlJJw
zco9>+p@a#7#bU)XMl7bjt~<p2U$2Cf_76P#MYq|AQlPQjJYufE*GMGw@4E}OW==i<
zC^FQHOM=3VjUJrxR1-M|lVEZJtQ_hu+-a?0`duv2?*tlgiRmBfMmtT^THHcSzGIsE
z3uXXI$zs(qg^Fz6B*X~jcDHSEAUXloB+H+i^Zptof?9YbP)|Ew1Xao7_&6nJ)wvrQ
zJM}GxAnKknQm8qA-go*Ar|-KRkIFVYAXGE>I5PM|1n}DOzTbKVD1*+R*wwa73Y;gj
zVycFc)#IqmMd%kbsZ?F?Gl;F?pGqzxS@)v~^l}FYD@qXQi$^f-#b|_Wxk;(uy%zeR
zYOHqULpNtAn~5iit*Z<RLs{c|0f*cl8#A~<^dpN{arEuyQ)+r2XEac8N}r>HU7}d5
zsbj^h<ZAD3Ix?Q{KT2<@wj4we5=KLTW~8zfkQ@t9qZ%e^ZJ9~cw!_!X)OqKCQN&3e
za@?yiYB@YB1|XeDX!RiTD|oLP4WXdUjebn@dRXXAKF|kd6Cky5tszzIf7Lq3zNEvp
zIa1y=L=)WR9milk9~dPTHixWn!%0oTa}a>YL%vpRwnKA_@TOJ)8OJo;u9;{~A^6ve
zXBBORt>6^n+1(DyC*K0`B)Jp9WSm8H6C`AQUc}NuL%FMO(%}vcbzJ5|^uV}b+^)o^
zZ|maXM#~!6D0aqCm+n5b!{0oo3{>t<TttRb@e7seuf=<UX!F&DxAZUeYvn{wE<Eb1
z-O%hV^NO}hVQP7;qnmk8qH+u^!`SCuLQRqg+{Tq4feZ|fwHFL!1*rKH4Z~_FAteF=
z-6Y<F)H$)t7Kbm>P+_$lRM)==iap++H6LE@FVWP$8{2g#O!t4vx_-Wo%Xcq|%hgpr
zkit)^--@U~?$}BlCB5Z!$@PzJEH?a_`@99GRjF2cs<ScI3&OLnPwIBL6b=sOhY|f+
z4$WL4zQ<~b)h_;rnltA?W_jK{?RvAVj3f{sgnj|0m>wJ*dFPy=Qvc?TkW-steaf8#
zg5~l!8`+Z=Yq-3on#%q-!pmijix9$n*{%&`b<;3{EIUVA=2hx6X-=R$kkXpINt%ZM
z9X9`&7bHlU<X=X&RKCI)jE5qE|HJ+nQrsYCouCPmEonr&cm)!GVoN=DFYZu0U2>I8
zN<x*CY|mWi*#Odkd6{~{D=nYQi&IHv@DTMdLP7Lxj>Vq~@I2dq#)QFS-3ypL4D{yM
zbzQ#iwPC2rxAbfoRx&nplL&YXFrGf3dK~e!ZkxavD+!<c<SZ24SxcEg3GjYFea~YM
zUy?Sou%*%Xw{L*rD~uRM9k=cdkiag{tcBBOaPSsYooORlT!Ht5wiy<wo;iCroSD+A
zG<_pk;owsC9(%oq`^E(DvK<zcUKJ8!e9x4fFkPSK$!DFYZrY#20c$uEkIo^=^oUL_
zQhJ5=hNqXG{E@C~nTHMrp`i%gfRLu)T^UF88Mk8l`1Wx7%XtuBUsO}oWx(suL0MCt
zl7QE0G!q^<;3Ti~KlbsAAXoPPh8&0gpK|3@aXodH`;C81H$blgHvb@~(*iDV_MG+e
zTT?lnp7X}~0u?)5S{X@UN7ub<M7f&)DaZ27BbnbX-`sSK7qm>}l|JM(u$}ldJqfzs
zw^pWy5BcdYc`%Mn=GCZ|yy#v`u-+eF(^Bx_B5Yn=CL%eHZfPGV>YHiRC}a;Tk)m$+
zW9^`gf-ysD07R{U4R0G?7v0SYM`FjdY2BBy_P;9TajKY#+jG%%+p6Y+<pwgMxHRUO
zzNEZk%2~~xihU;u)TB_DNj3MGxwRR_=_CM#4s%W!h6zTp^n(_ip#4Z-%+I7oEK`zK
z_o=$RDiTHSlVF0n$2&a_V;gkjc7r~At?n#c9jJ*H-?29*f7x!#XCOpxy!wcarCt`7
zmyX$Bpy73{(S3#Ofye(*eeV#bz?1#5QVaRIo>QTcYVpcm+z^9UiTjk(aPIYU($fwJ
zQ+R8%6Y%!X`c8xE;qtE`uNO68F}yMZ%gqn(-95fq_0j!YIrs>|_Sd2%H<t5}bxYzj
ze9#??eI!Mv#JP4_9@Agb0#{1n;qXJE(ER}AA_^>z=E~SzlMf<ns7sE3<{}P|$Vr9W
znb9+0M^|tNpTBzEt%Zyy?pI`%;_%c>d=zB-M}TXHQwhdn2JeblRte|GVa6^*Q7#fD
zvMeOg+O_Q{a7qAocc6T0eCSdv#%<;=1GLND>@%}=C!uoxmHqO2d{lCJdr_@D>m2c}
z9|lm(iFa&WoK=0-mk*&y3$T(x%c{hC<^A+(6JfbjPN#xq6a?^^_^fGM<@*1^yer7z
zyux7B8xy|&hL_9^+@KsSZ{08UaX;}#+xA-|$R7lYB@wlPD-EO09=Bdu>-=qP%~^O3
zA&KL*dHS^!sPjU(mY<#LCcffR={_PI<|u)BSvC|{L$q0rFE6`V$4(E%=IkZG%|lxC
zEXt9x;@qIgxXGRYC^zYPRscCsqxtd4ruR^3E!Z#b=d)OWnF&BVrRZ;o$frbCoi8Ns
zB_qjnC2Rx%{{7BX)G>mv;ir<Nj;Dhh*HvUym|tpz<V*?-_5JwSRRXAh+g%$rBoC#u
zjsZTLkcl;fOJ#2LDGsTXdq2Vsm_laC37@vn&B&`zm-57YL1o|#z~LHcO-5Go#lW67
zC%qU8P%P$=;q00hO9>woKtXJbB{62)YMW862lLOldgVDT=E%2xwdU4ZWi|`7i?^3V
zvTc;UsVvY?TF&G(zkGEN)Bo286)JW4WlSUCIlmnj&#uqDbxFaf0(;bm`-moh<e0Nx
zcsq7Oc#3iM$nv`Y;qC%ZLS{%f5g47d%=@T^WHn&B##_?GG%|JGY2c@z_r|-d9TSy4
z%+*f_a^FD_oBNqr;YIph5ernPwEwS}Uvb%J^{YTc1|<=E&bs9)UX8XQBGh1^73o)~
zQz1&|W}ajjuH^~x*L>(p?LoTnMdxMs{sUZt*AgI6u`Ycur-2TwDveX0Q`F^eL;FVB
z47@F7NfI@aG8yu++`X@xIGZZOkBIY%dcLKtUm;z`4;6x+LedzHoAX$2bcc^WB8$o~
zr_EIE+T)cG_KTMtjWA{lHtE0pm6KgxTswaHxS^+LV(+=~w*hU7E+{|clv$Lj3NgHa
zqCzlMRXUL6e}vjH&Hk8Zs!{1L=#t4067xQuR{ngTcC{6M2v40dV$!o6tDra1&o^Hz
z)i~n269xR`FS#<&uPS0Pkh0c#9yMg>b^G+1<u&2_Ut*!ZHa<2AU+mhW2;ye9c4A@w
ztkHv%oxP$TL^&dd9>Oc@#ty{m8$yW9`YkL-M^1br?6hn+{Ljk$z-h?tUh)VjMMrR$
zCcE-ChZ6=m+zNh{J&WzRe8(@&4_HADeHYzcfCd@@|6l4LU7N?Rz$q=SE~bK|0bB${
z(fqz3_OxTBxIh@%DABSN3JI+A5e&w>z}{(HiaO$OAgi`xt7x>JrX0aZKt7#c<^9rR
zn!;u~o#^7HkU>L>OCQR`mC4&NvceZ13Mdhdu@-eutyp#62X7|N9^@!uZv#0iQEVY2
znj#J8K3qrD$Pxi%`d{58jutzbF$Z{)?8m%T!{L@7r>N3bZvs)G3L4-frbjUMwkR|%
z|G7-MWKy7YQPKuH?WM>gPB8U<;||4H9TBEWuI-~D8f)-Kqyu-QC_rHboIv9Xgvc%G
zMY9)#dKGpqcIDm4tRIbe%0R%!PZ#kXWaAjdf(9hxG@VE@DKCX1CfOW8yH0-yU5~{S
za!1~8zA?<p--0XRdNYxLjt08T=|<ed?4K~C7a_c-RUMO=cl#g=05KVS8;Q|6A-}b>
zFi#!rVxsCqq8GkFKql@%-}jC3Sw?LAwcn;D3OL<9*$fLFMzWKvu<w^Nh;Z0aZE&UC
z*E1KzMIBX*lH<yKv`YMGIlQ~#{nfpIZplJ88E_a~2)-jAXKRH7$?~d_W_iQsA1TKq
zaLr+h1qn0Gnc0G41R23+eR1a`(-3J@Pe`-#hDzNtmXk^Wb&wL}nXh^YaXC*f*owAC
zfboy=?&Io>g!?P75MQTUzg{(Zh>55mj8KaBg*pwB?-aY{&K=S(r^~#o2_#0g%qQ&t
z)dab?(-mljunG|Xib9<z>_?#)Ntdmu<*m-kW0Z%h?Iu96;#J|27y?kBP%1jM+6}LF
zT1obX`!mO-4k<U;r`vp}Wd!9GVb|l)m@Mj?u^tb<>Ao#P^dQF-!?tNZmPt}<R4MRX
zyZ!eC20in*VF@@?j%Kgd*Q}aVExw~yHQ5`krj~0Nb@B8^QX`8~qN|M?lvAmQ4~%kU
z1fbVD&;*4JvN0CverxO4EVct!r>f{S^>KOLea=j@^4K_oQ*f+NN&nKsPPcw4d#;dp
z`<Hkot%4aXAe?4z;R61!Nuc^!Al9$O$bB#E?W($|=4j>NMdig=_#rd!oDHhWW<d)E
zv+hcyZmn5+uEh<;psXO6ITc@JXJY;vthim658IrC#1SBv;X+4zS+2vIRT#0765H-4
z-Dw-J?(8x*{1#F;c?2CdDlQtNz6a_5bFN|LPoBY=^C#=i0Ee)(NTN$^^9pB<3*O~$
zu4nPgN4$isE1+Aif7_rM`^r%a6(`@uDg|d35jO}o2DU!*d$L_u77n@DL0S69>?|$W
zU~Ufo@eHO~BNiP}f`hG%$lYlry%lVs2k9@^6u>(rvv`lnR<w3=&6u}jmoVq0HI{y#
z|LI5>EDmt2-0kCuNwItPhps%*-r0kF%Oe<U_bl2Y32_xB8tVFQf2xzAaoX)o*wPIu
zJs$cdvFVr790*VY4X87~@`0urT6w_dFwX=jbk+EB#&|3#>9>!QxI_g!^}qP^(R83>
zS)=lE)5mPdCUi+2Wk@H?cDR8R+m<DEJ~bbf?8eRY;Q+>sj7SlmKDrD3d<3tio6%ne
z&;k`7FIzYO*r|D87aw8V|6?kUlyz8JETtp}ys649!6m*bjYrzit^$$8ehlrxf8x%U
zPd+6ad>BB|d4*hiaIHal=HtsFlOO9i9jwJLq%j6Pan!VEEnz)j3r$F)?p86cI#WVX
zvVj2*ukx1$wD^4~UzMB@O^C)NTT3wfnuqD;UL+Z!e2Br9PL!Y(5L}RgHoH}H=1B8U
zDJwCJTyE}o)dnXUbQ#B}J1wSY9}GP*Rrc=M#L@#4v>uRv167p;`z$Nb{9?sQJdSfr
zI<=USTU+?^ml4Ml!K?GpVF%*49NkENKlOgG|9(Q6D80>y*pGWQ4!%;6=9m_TNOwdU
zoq8b%6xk%85B5T+FK{}q9^e-+e|UFFDJ=nNR0rS<Tk5~tcQ9C2L(GD=h@g5ZNS-Gl
zK$6E;`RecSx%^MLTWe*o_9!K}sf^{3{P&w`R`FN?2V|9mgx1x^5?Cg=gWoX7cao;O
zyq0$j!cm_JdDzomJoG-)Y2$or<SZy7F<KvGgo|g)jgg76aU4!Ph&Ah|^(j3+t;>aw
zy`$|a<98U&=Axz6!cx9!+kz0?O`eBF!VjU;wj>O{qAzB?fTab{s?Obmx4tyh2-807
zn56;-zUfZ|2J{!pf3+J`fB4aYw&tcqV@?+mXn-cYSXN)wM2lS8R<(^T>(H#HmpD*u
zMgxuzW(a808IG_mV6rFV_Y4(*x&f1?1p!+TZ*izB{muwDu!S<LRgg^6ZmJMfiV(HJ
zG~d`*mKxfp`l9)Wo0oeO&vJ)R_bUGuCQ&C%0XxCXFgo58+uV~=zYjT`OcEnf=|)d<
zSUVCWc|_ZPyGE$FKBjjt8%ABygK`*XKQ=rJZ7T5d2dhfJtqpv~80jQWOTbCjKo9Y>
zQe|$N%V>jkmb1yU(Ww$gEbOyX6x`k{;-5567;k?OI&Rbj9ObxOm{SC|SY=t)eW?68
zM{J!AB5)felJNW!%ME^Wszvf5{t^>9s4A~=LSe_A%Oo0d;%jGL!K9vt8Vo3DDPk7~
zsfWcfjEv&W$qH&eh1Voulw;JW9dLqzjKYowSP|6&Hs*@Pch4ZrJ;?VH`LWzE>0fVV
zT-*5Dv$1$X+rmN()*i{sD{U$nwuI-}c7w|q6h(>p0nQr{TD1K<TS;*bJ0U6^Sl{Lt
z`9hRW*S-{*Rw2%L!8!8jVD6nJY5z$6>tX(L8k+-{!@og0>sQZvk)LgveLb?aibv}R
z0cfOqM;tp_+zd~PVQDb~CFsr-v)m(dxW{1LOykJzY89x0wxrXUjVI)RcO2KvhIG20
z7LV!YlAQla?4OL<CjlzU+6^{NRJ)nmmo%O?^2cqqWjv^VI%L_zAC>_!BJJkP?Cawd
zg-vKbG^+Yh6QMxijJ}YHiLFT2jEEL*4KVa5s$v$kRbOEe^}VJ$LPMm8aE9vuhDr<k
zQ;FlfTg-N=G;OcHu?_E%W|@lo^%YeX!1D}>M#Q~CESW;c{wW~EX>AOwZH_?<w}Rbq
z=mXD@LpDTV5`Ac%LSM((Pe5<ai&-TFZ?u69m&x@`9&k^$2Dray$mS*cn~*D}t<#<r
z=fqf0)-^H=!{yd#!bNaV$<GCSHkJH!c?M2O1%%5-iH*onY40Yw=Y22lTtFUtLR}pc
zgzv}tcm@pTpe4;g%ZHL1!-{7lQ1zwYRm_2O&&pga&dO`^ouftOz2uoT+Vp^|A6{h6
z2|Ccf;lXeK)<9rABT_c}Ybxd3Atqx@e~@cPbdlldr7O2Dp^y0t1wyPn;yIIw-h9LO
zlzW!m1p}=6b!;*KPC&Cb+b@Vc`o~JzA&biV1_A}=_#aa4gz{n2C`zhN2hvvtw+Lr1
zTuL0I4SHrEjm97m(JG`KrZUomJN5o6-IH0ZIxLn50Hf(|j6(H3R0hN|ZBvbQR_MEa
zEikPXX?21BsJbrqx(R!<zMb8QSbcUvgg1B2XPSk#&!dicJcvtIa(DQ?r(BE6q+1~&
zp~RJrYR=Wa2L6WL#`4$~t&WP4y=bM!G`fg(D!H&Djjg#V-pCyIDChFgk;De`SkB(?
z5h}Z>c<YQSDlz2Ge|&^K*OzS~Y|+ihGi=8CEVnTwlOZxHxzqD_uv)^DMKS~SjG*Py
zmUa5Mn6jn*8?5bqt*X$A)j;?hdRUw)&bO#*%%A#C2-*Cn*mwiOj<cr``kdGUuYMnP
zG$fJH$OI%}14`R^mwg%ASF7y{%`5P(!E#L<5>pfaVW-FHJ{0(r4AF^l_q9VMfM<6_
zi2z!OjUD;6FkdTaL>5_gb!XW3+}k5PFL<QWrjdxO=`kvIP38PUfyR(iA;V<_%&4Ti
zY~a@Qi(6fqTWd6=<K%{R>kro5T8I-Q6S@0MC6u6|1bFG7yCI5<>?K8wdc3XVWsg60
z9`p%7(}q>F3enz204#2v&0YUD6{8Q?YwYkdaRFSVA%`3#B!d-9TARHW$1D+!9Xnqn
zXU_C$=dg*`ny^zR$6P7egSVk@SmmpNe!E*TlBagUgb;-vZ(PEt3ybUun$dXDbJxPt
zHl=7wiNAC<TvSC#5`I-y6Gtf%Pw`_yqM?2xB7tqZ)t}$B^?9Z20aq6ixd4>&d|U;K
z2PBOJLSko#JNMng3gM3}lrKEv!@@JppZMig!~K^vw*Q*+7U&<ybMeBT^O2hlQi+Kt
zzrGpqEh1bgRYp4>lnCEO0+giF*Lq;VfT7^@Uku09t&FGZ&J=C^0JMZVFmFpbmzCTP
z>I^}1{ta;vFSk;)Uik^=aS*IEcbtT0yP3(EDWMc6_KT@{?zz_`hj>L30sCJF+q7p&
zvp%%*#>znm<<Z>K1tq9#X<1W5@O~aD(5oGE3lb3Bo5+r75s?(gL8GLdLabfcl|ep1
zkj9SLZqoBMyp&YRDHI&C(dXw67yeIug0L*eMfLcTpVA9&lMWEM%QU&2q_3mK+dYcD
z8Wa_(1CI{R0u8gx=0Y1Q$7B<vU*qlAuOQRthJm<A{45hn6RaCGxy1f&$+G5&XCqhJ
zQ`I3vQIX{0C6m>>nJNX9`Cj-uo~nA?8~EYniWKdX9-PMVIdfCxinrJ%^gY2@)8{02
z?)=kmU!3jR<M}cWMz2nYb?Y0E+C&RnY5L_D4T$g7!Sqf7c6N4t`8g}i0d~gjimN>w
zh~G~at?%2pN72Wmy!@aq3)V8f<is@$lKAB4Y`8=*hrJSrS$U{;;N~vOCooUqIJp-U
zGXQ0lG!2v~aVE~TGf$)(b%cOZ8cMXr4qyuZ4K@bg3ss&^BV`EGzTV6fau;g0Ftq2%
znQX`f10gTkdEU<hj`r_P8P>!r&Pa{hv!cWPR1=5~;<BMw(5VKKR$unUl38J#8nyU}
zMMc&<$<m8b-GU^)?42sPl7vL52m!M)lT{ud`0<<>;%jd%*aL~jaXVIX*Bnx`$|vz;
zF=OJP;7n#bKpKo;pI5><2^-8F=IqJMb`^AmAYk8IVLL^a7QfLrAsFoF-9Ise!atYn
zP+&i1cu)d)uy0!pK}3hf{ivX=XFQ8oQLRoqL$0dIM&_3w*&*0YMQ?LR1UIW5YOCpX
zMp-(>za~TYA&ak?YUq@H0zg7kh5$o*cPhO+K;f|{L#TqkKN@vonT$y0Q8%q7qxLB>
znHLo!xu{mPk%fN};jC_&MpfZxen!t@G)?AYDtTWYrjNwPuQ(GVY^j{Uem_|tG*BDx
zf{r$EA^hiQ`4f3+l9#A+v%S1~XfhV#ikN>_wU$@?768H~?zF~mUFWI_$Q&dc$UWc}
zdBFuawq_?b?oPC9Iyxgy5MK>EWD5t_2tb3#46YzM9LsmF+c>Ez1a8bX4|9os8G~C)
zHiXHEN@%g9RcfKq*7(jf3aSi;y!HuL@Y#b_;#QsozXHjFdlYiDs{=BH9rOlJ@)sX=
z=##E+4~y9yN6%aqKe{o%!tk$)GU+#{r1I}%iq1fu<Ac;cjJzI~cz^9aBwULcr{*D9
zLbGU1i~BXZoFj`jFt&@^ThhN_SVGUNez<sKN$VTCnWYF&cCog_qGR%YK`X-9(64x4
zY~@u};UY060KC<tBLoY(wI2F?c4Smd%~(xw!;?s!w1#+OXxBI<3rJxnW;IJiqJYUi
zVXZ^JN^?ckT#{A&6@0gbLYfvVdMJ@bXtRU0B)&9~qkE_4pPY2)N`#YU0{6rnZZ{0p
zylJ`<%}>rS@d(;?j>K1ahxPt3TtN0P@$G+a4!s`ZY#2XAwCZ3Z6x;EI%MkYx%>BNJ
zjPaA(A;)@@4S~_V(G!t^zsG;P0rjut5iFFC6+|!;JYLa`P>KL6ApuMm5{No}4Kg<!
zw`h7PJir6Z>=+HSqS3@IhIob<%A_hKpsBCLfMkr?j^t)kZn6r|ze!QZfN!Rd2g(nN
zvB(%)>gHr<-8Vci9)?qAxccVe$5F9JxL?vG%GYE2M)7#n0<adtwb;<s=)hKn^EH5C
zJiDN@Zb0?FMgq;B!~JKVU~^OWnCm{9AY8UHoS-lKMCj@RMa%@#9WtTyvlqvNO5w4T
zZs^`B_`Xu4Tx_U6h4RbeTwPpMbtBaY*?#Qqt@phw*RYyDy##$(;w#E><E@Bu1-k$}
zH(<hVls*iaQ6HU1$r@7)%H-EwLf{D1K_np6C9oXji=ppWpYu7teNe##z(VnGZgerC
zG54{QI6&2m*gI4vLlOJMu%)xO)L{@!eY9B<Sm3psBiD$p6X;OU1tg!0-dLTGl^kKv
zvle3d!L7|0iy>YzHA|c0;E_9f*YD>mdf{yq8Pdjo=B1Tvz+}2Ai@@mQr}t-pXC=Ms
z)az1e)jehPd!6P!2NM7t2P{_8YvKcnLo`V5oWfi-@3!h)Cm-x~4@mdF+c(r2HY0Ah
zdc;}0C-GNp%lhJ*<+8!W*mxD6zW#b8NdYPf2T)*2{mrk{k9Xrspk<}<eUNXBF`Iwv
zRAi%EL=*S&OHA(UlcO(JMAxewNzU+9V?K}HydYj%3;)e$-Xh!+be(2#%;EaIxL|sA
z%4CSmIV!*B?{Ofo`d=0`mL$1OoccolKs;z<Y~@Lf4ZS`p5#of|SPk_D{r--97V}P2
zDe+j%{Z%#2$uVM}D#`u<0I~;UvHcvQl;;?0wG7A;W-XKB=M?aCTE<BSb%K?-cSE3q
zkX^|%2`IVOHUWTHYV_u@;k`<ADX3$@h?<>Ao^a1b5|_Wn?N$(V^P~;^2(*rRZ^d%$
z-iMP0-Q$h+O7&jy>qNUm`(yV2VqzbdJi{}|=Xt=dSLC{Ez0eyzw<~#bP7Y4~&X>py
zLl_P5#o$19nP9YUj5E8ePmQgR^q@RIJkXZXM@RJWjYh3C7`))=ylh84N^;kSn4A*(
zV$v839GQ%n&n!!DM(bAl$O3%l8RZ^OO*}ywXVpVD1_46%1vHV>U=DOFn&Y=>-ymM7
zEcw*N(_pg^j*{s+gw9N7Q115wzYR!TYW7sD4llAFt!)E<q=;vv)$~+IV>tX}`g}P^
z@oQf50d%{1Sn;F<#vm!HOa^!Urwv@ruOd7*o!?*O8aDOD@L)q#LRWUKfM}yfRbC~a
zYf!d>g0>k=-UUuOIWP*TiPR0RZqo0X?TLXIU#$wI!w^s7L<Q8tgh=RPe7)D*H{@X!
z`BK>@508=}PgA^A$<0f+mT>lnAF>%xrym$+9ZXmKx>SE+tc{TPKWW#eJ??D}8?JB*
z81kfup{HU0N{Vh=Gdsg}-;pgqwkA*_k;N()Lvy$RzKnMLg5sF=hq?r6GyPxc(`BTP
z!N3G)?3T)3a)5dhwsPNMK^QCd23TYT5Xx8XDc*Q!>z(0%yOzm~{duPID%UreR!vxA
z5%9S&n<VcxyfT~qf$<Wjnx8)wqZnHE57k$Qef!vJ!5#Lq#g&exXG;V&sp?2;!|I=c
zPxhW7kR2j9d}KlHi?ZBxX~@TYB<IqfH~L8*UOc%CgZp;=B_`q6^{lt!Z^sF*+egGj
zOO(1v9MeCUUmr~>e&HCmiZMfL)Faq`dm6rWX{5vji6m1^fUX8YzEx95W``|nuLSS<
z({T2kNGxNmBiAkGzGLUy2o_VuGM=3^UZCzu(X~bV&ZL2zL~A^80h=5*R7S-5isHI-
zTv3=;I?``{51(RFJuYiY_gI1dSd>)8XnxQG>s~>P^{ysvW9wZ{fsa2{l6fFifKBpP
zM|Na5RBL?ytNO7l1-{>=QIwaI?ImV6yAIq`h~4F}LLvx&SL=F?lN*z~!bo`tXqe&&
zWfJSSv!d6y#<o}no>083tD9@<ushK~(x(Z}|L^;0%br!Bv)*_e4ou&XC4350!4-77
z#naX&7V_r<?<VzV;5D>JEm4KOnpbp-Q6#OEyRl{B%kZkzlxY+X(iEJ8s%23#G$lpI
z3fdo}0?xVVqQadlgdw=Mc3;)2zTnMum?G<#2VFb+#Z5M75d+)-^eQ?Cg-f9^i8Z%-
zPR%m6H=-qJF_QPUlJ`bZEtQ}E1b4d|U66gPq}+ciL)*U~moZ=MP#|Tc7d<m|6bu}n
z3<t1B6+4OY>uk!hAO8X5DO#Gguy(H+mozgS3nv;ltkkNI*);U!I|F<3C1DW*v=#)G
zP1av8r9VJf3mFz&Nj22BOc;58$Z?>R8E^kiFK~;F7rbP)3LqnAh3b?cnn}~^@&{Xn
za_43@1cPJhD#OpB<hl;@&(5x3fB@SnwVWA>BMDCzg#n+bn<|>RNmg7oz?J%>+YLTS
zqw&)1QuwOn7WixYS^+*~_puE&KwL2uH<i+Aa_0moL*DTuz315PR@!@)>IL*+q1N8#
z@yJufhcAr!{rY^RMk4QHRQ!&zkPQ3q5y_1ZMk3{zMM40m6fp}P-wc7E_`0Qm(a%Ar
zT;&oX`yD!@SEn0TuV}Aj2GmID6G-p|-EPSWwp*WqJsK$jcXrXpLCJvuSGngWkVVx|
zrMjma(v@Y)aRE5$U2^NDV&~?3#6jo#%ZaK#Dy50zJKG$Bz;HVSaPw*F!!njtMm9#(
zMQ<>>UcZS#-UvoJQd0gt8K|Jy5-5+N4pFUok0>z+E#g~ph1-6QGW<nnRDIMfHIK$4
zDd+aKO3gC>0cIfNdL6arVPesnX}@>FZ>V<(S|49;GBQ}r2%F719Q2ep^<P&hy|ykI
z7uJsZ^xB<VUZ~^SFUFX@JaSB1Qb;v?7CPNqo2)duhM_8nD7ugAo#1%d<3Zh1$$d5E
z-x!^^Aoo4pdt3F;=(t$uiH<&JU?=T&7}@%Jo(h@t3O>d*|DkJi)?n}Ce@=tJ8VytN
zDuZ>9HYnZl)Fdyh0HdX!kKL=GS98w-*)8A)fm1-~LTB5wXJCD!jSr_|(`Sn8lJLCT
z*O#w%bUO@9nteh2!a`?rD%UHIU1OSDqOUviAvkSUoRCxi1+(~jZq6buBGUGe7vaL9
zYstsOb^e>F)EQUqT_o;^VPzd-L2Ku$PdBB_(J1Y`Ai^fM%}6yGSgbJBB^1CDI70L`
z0(EAFBA#qzuGovtR4eS}GkXz&dydwH=)hoPc#|mRbQY(A91$iP!#zP;<lLHjx2G?i
zV`TG2X2t}0KT@z-PiL|oPWMyuYP`486`3+ow%BL^qDB2ps2cq9;*WSNl}x~(<l@Uz
zfD>M>yI&|aRAr=FH&rC5nz7`s+N$)@Tmwp8tM%hnuvlm@<QB+Q-Su0>{=^iU3rP#?
z>xEAAz?{8Z4d+`P)GebSLUpt|<yq7ItU7AljB`8UH>CTx5Vr?)VK`^0(AIa6ujV@x
z7C70`KF^GRU~?^A5~5OlXS0>?an#k&YH;<VWWLuH#4VNebtL&#7SnCN`tJ<~LReBJ
zl6j@;RKTL7ahcX=ZCR0>-^x)(w$juchcTY6j<&ZkiKdbF%FGVF<A}~Y^*W*QtE6$a
zu17qU`~Jo}`sgz4etLf$+fc{{2YRfd;yY8}>>Lqg>H9A@TGpx=H<GZo2eJjcc4>JL
z-EAz<(89=x|NF{AbAtJ{CC$9&YJe)|;11Gi76`DJVWdBkg>--jFq6&#v3Py7-a@g=
zYWkNx5JenYWlCKfZ8DCF7Zg$C+5Y02(l3!`EC}JO$30y!7QZ4nsvZ4mQ&PDNA~w?v
z&j2g7$T5)#x@qFGn<KDguoMWd;UB8vWBwftb6Eb!@fH8RKQa471%CLjM-#kML27r5
zdXwjMhalM!C9k%b*CF1QYqECalkl2+u`7%k-pW=k(&l2s?-Y5^iXGb|O2rew-G}`~
z-XWJV@qTjY{?*2ukVKZij0_#bOE&koN6s0{TQ;E-TZ;889QfpOJJuX#Pd5&EKWtZ3
zHv+_lFNum`A*$RVwxFK<o}qZPi-};siLxwNsCP_MPe$(O=1dd!oVI*#`wj2dR_dC~
zQg{(et2E=Q`UCB}%UBv?^nko2G{1{!$%RcVI`EUAw7Z%<wTxDlD3twc=1S-etBB{Q
z!Kyp!P-^$L^UWcyeiVjYN#&MUw^|s8m6bChy?(PAGoAo$FQm)EQ(>eGbm38d4$4io
z8si)){-dyO9GPkD!M*sYaHka_pvmg7B67tT--(tG^+^}_D78|})dmDX+?#kX1&QjC
z0d(yt_k+&K$mwvgpF#2tlMcc4=+1_|J0JkB^8h{NiE?1}s!`wYHWv%6C`N%clR8m&
zc<`|-kjRay#5%3K;jXcLV5G)wOeJ>iZ!gKsZT6%$%QE--<AF^%rlt+F%Lg4kW>fSh
zL+GU+P<L!!?1NS<8%66w4|BaID-<1}qVscom<ko_M=S=-J`C!XYAMg7^dogUfa<W0
zdE!I$%b_RBN@N}9{0_Wj0}?mzK(|H_N5)^^_H&X9o3%CD*2ba<NN}Bu>>*sQ#7#5#
zEqj|~T!S<_wFLV0vzTEFBzfyp7Ak}AaCk$T>mnXxH2K7p+M&VT_wr=Ut?J0hW?6dj
zUs()aKqK6<V=gj*9kyO^{}s((ciP{;u@rWOpj-cR+=T5>2<SG1AdcoZgHwBwbVrd>
zmkxf}Ad?N~25Oz5xuYVc_=NGbhLMHmWPR^noc44mz}O**!akOZ0WD_=JcIYa8XyCf
z&WW45znh5^RcQP3xbx{Lc6sVcCTQH-mblbc09<$!JXiHoKRg|cwJrSNmPl%-#qwY_
zi-fWe(<_6<u(Aw@!fs-!aWY1`0EAmm8pp`7lNCO+7c^&e9)=Icj_rCm@U#IXmtdeo
z$JtKszu;7=Wb718`zcraQs?h*e!>-b;3g-S1!nX)tYu(2U3`H@axu4lB`dq`xQVK2
z->d22HtWaJvSbF$J7Ta{>)xB7SCyg4jSvE7wP!;GdA`+-sZC<TjNh-dqh+@JJT;*;
zGG$RliUCQh+UBo52IGPmFBjUuA|;%+pgBzDvG+wjnJJHZJpswd(uO}2bAM@S#y3xg
zxA<<rf{9)WR<BdvVqz(P4`_MP7DOhi2;^23_C>14`^c18OXNNX(d97+q4Ez&V4kZc
zU9$I&oo|fO3-B#YhQ;qfuy*b?Fu_sbYMk$7M8LP#OT};}Gu)#Y3{QBZo*Yb#F%inZ
zlHs+If?SEH9{^1c)?17->y3sJ#uzYkRzp5CCgo3;M&LoCWLg}cQVj=ly~eG;(bBIQ
z)vu{Cb6;Ns)~UQwbAmq%rbNjDY)!2oJ9sYZcO4x|$+nw}np^~T`El9LpON`vGGy;v
z2766_$2(Lz0x?S^a+mYb27#N?HHnySQJ-fc)!wv%5q9Qf9fb@*4RBMXFS!-gB9{mJ
z1w}Jxd~kBZ)5GDetMpRX8g=^fAuga)LI0|#dL|Jb^g6cU1n;LH{ywYQieQz<UR+NJ
z_svJ{SsyB&=)w#*4nwu@>p#nY^~u<3*LayU`8miCt@x&6M)t?|L)=u*ev$5COtVq0
zh#p70i|tqL{wUwKjn>BBnT(>kY=LNiwgokqXuC(!G%Ck%n-2YMV5KgV1Bo*Lam<FS
zp9L<BCS{Mw@2O*iS_p4iv0<YftcEeB!1G#+s%(ilc=RrqkK?fB6K0%x4ofQ+73rPu
z)>UYE<iDU}+VVi=Tsh=I=g(c}dHZip3SYb~<j;|tlQna8C95bX{SCoQsr|X&Gik!Z
zWOt7RxV%dI^_c#QiI<A~r{Ddgo?2u#<i7V6c#B_+f0&9pf34MjdX}~*zLy0AOP|g&
z=3lDJaz*dOinzr4yY1@N$K)NU++iymgwkC?QRnXdRklWUo)+m^pba(#)z%ide{nRN
zNQ$6dQM=uNTs=9y!CsBYJ_yBuch5mhgYUv>o15Qg0RngIA`<c=cZQt6)y<9yBEcy3
zPkn}B$JnR?gY|Ex9Xk33mkm^gkon^6c$@vSnLYVDECu{&)|6J26u);7X>lTnfol~|
zoa{U-dWIO3hZ+>47OB$vfv`wbv6f<JIzE?1Tp|C6VEa^*DYRgSQ8Y{->ITbD<{-(U
zpvXA-A@QJ-yH5t6KfMA#Q)yaTKo=8&El5fqps9@-EqJ__#KL21OtW0oeZq-?)7ne3
zNy*>up|@EK(Zm_o^4AC|nJ9A_A}37l`;l(irBOY{ql2*=ljyWU0JN4GXbAXYgY;Lx
zky<WN*@J#>ZU9AS!iQYPaZ=09rW<{rBJhkAa^K7F4Q-roA_x!}&6%nV3`<1*1w^_M
zsf=AI()|d{odXdCe<#+aS4yf1k2)jS+bkaP5VyFb2{NJ$8(|oUb@NyFneY?af)OW+
zatHqq@X?L|uKyF{2dm^e6NI4n_ZSblj7TLPdEo1t*^jUUthQ=!OhPmoH5Xpf8{TSI
z2d-H>A%v8P=Q0QzA<xg)LTN{f%Zt)>W&R^(1qhFjZ3bQ26(EUJE@}wRYZWZyVv*$%
zo=g_Gx!$M(r=hOHkqqzoBQC`JkJm%vkqmBdJ>_&a`aCJK*?A0Vt!|~nj6;-LvNsl^
z6CmbHLj<O)2HEmumEHYm5~GX#vMgu~MdL+lH7av`DN3W6SE4pi7ptU)2apYA+-B^e
zy{;>Z%b?S}t&n9`zVc$1E*#I~Ru9`YdeqRq)SCHUzd%jNBrN;hzmgakblBoeApt8O
zJ<i9-<Ed#*o_3}03N9q|N1BAbJ(QD^rV-AOSAXw-fgw+rmo7$twAIAZt!sLAAc)on
zau0$hX#up88&9+$Pbq97(u*~iKXOuA3RTP#@-V9sR66xXMTI_C#l}+M7wnU?+RFOK
zWjyy6I@zoI`ibn~+Yi@2Ufa@O8>p<OBcT&w;G_(8$H`JZP~j`(SDPUrdenva;0x$S
z``9@%yY|NW9FZ*$*%O-ALs>yI86^BJkchs6aNsD_H&PCk65wmpLOljru+3zKIE6pA
z3{}@d!dVr(sF;r^aRL;%3FU-e0x4hQul~%@mXEx@kVozE&_?_yafd>eq&9dHF{K~&
zr8UL8TN4+7^bJWe&r7pff;12NBD5M~Qp>w>25*7<#Mg_Dg5RyeZeMYmh*x9wTQ_9e
zrk@fEECu6dTaj_^WDxBJOhqpkc67V-{q~1qMOW-nIGJ)A_Da)yx>FG#P)%h*d4-dF
zWXvR*|H`u8V!rg|ns&1Wx2nr%=2N*hY`v#cwaj-0B>+LZ?IV@d1HC$dLKQOsTWg7G
zl)`*EGLy0I=XQY6-`&aX#U6MnJP`!y;j<B-#K#=sKEF^)nazXfDFuN9NJerjEB&*>
zipAzb&+mhO*$QxwkI+j$plljWycUU;%mnuP)gX<oUT(FbL2o#fuca=PVJLR?@M`cN
z+i>t|s$VSOqDAAFsa$yNr81dHWQ2L2dG$<fO*xT4(`68qHzgg4<0%j}Vwm9NXodu|
zf~(!ODN>La^$0ty0(w&#2ZXVpG|@PA(q}n|Hq8a{<=Y=#>HR6bI#l{VJu%sm9Xd03
zX1E}ePx%t$?}UzG@U;#R7I2u0L!t5+&t}i_N7MKgTiT6-IuqG2)9dQ<2NoWdkxc+P
zPY#<gLy|yWa0fKeZyYz&n)~a;oCDzo8G^L5tMu9Dn!TZ2Qn=>(p)W0Dr8%(Wfjyj#
zr)v}_&TA#jWW`P2mQJ^(@P3qf_n(yB!l+aB=8pWvCe=3y;BFh6sET2imh>jFSepe7
z)(@?Rix%1=_@?A6+oi8(`2GJeu_J}dtS>Q-UcA<$6)}(;#Y!L+nKk)V3wOJ;LJ017
z|E2^9&8XMtg<UM*Y&ir~$LyTWH+7Bg;fEguH<xrsx6S;`q9BJIxrQSiP*1-r5JyR)
zdnRtKO`^x2hSyQdiu*u7_3<-*Fh!dWL<6Wp;xMOCtspK;Ak<pmX2cfgih;h8Wl<5d
z2xJ~S`JJUzVaatNdEFrt(!6vk(2gGcXjc)~wnauxutmfPtK7U%PyUmzC<T*+=2*E{
zr1iOsjFJHG%)m7H@^bntBFmdC!g$m4OPsm7!<1EpB|1X@6ls8^R&Xo4^pzdKe8zdd
zr*hb_6&~i@gklkPvr9XKB_aT8P*ISezAr9hp!phFT*8SW+$=`}Ep2bZvPwd0PJIlK
z&c;;^15uMpc!tqcv92Vr7g`d>@Tnl=jwq^3Kpz{cS%a7O;YvwO@es!|<gauEa=WUw
z{fU40aFMECv5#=Ep3GJB5z1Rws~P$NZ-D<jHy&Dr6L_~F#1Ga;)bIma2X<mQly|sD
zJlc9;g2G`qBRP6IYtvS^JT58kpP{~e=z3RfC4<s5z1?4Lhys*PT96BuVU3ndDSAMw
zK6-CpFQe9@MqHDbO%4YFtB3yJi2^ibKaP@0JTk?ZA8+=-5E$jr&lDXOyJrO1vF<?|
zZEb0&2X_P798pA^bg<f5%X_2JyvQfY%+`LhE|t+L2~aHLUFw}L#3$_D&G}4RV_SL?
zx=});@MRb3RcrWUfM@_Fpg-$}?Z<&F#<t`^_hb9Y*b;l2(j7WyxAa(5Ytzi~D)~_T
zCfA|aDpZ*sqot-xD^G&eaGyX>BHK!wvGz~}@wlqzVSgT_Ftk|ep`&a3JV{4T9=KTh
zaQ>PXI~=WcgmPOzC0$qEW`QXPkU4^9L!>7(f4qyAx!yi2PC!n2w~e=&<?%mIk2YNe
zDUb#^?Kf{O{U;)1^ZGsxZL9EgqlX581npj>!<KP6H;5RCcGZb~Sn!VG)FizNK9H_o
zhYZ^sR=%_$UEOy{n}Us+a<#6a+>9#74#NCu`GKKC#hz8&RfW5>N=i_kzPFV=V4GZ(
z_8Z62JbXDJCP}G)2>Y^-g<;cUFf_1WH`r(i)MqOjgh^FI1C<p+Rcj;%5&yVcW7k4K
zj4*u<f;{qOcRo=peXC}x|F!S+8Bs!|=g=1Y?&~(KyBJ1wm49}k({0*Gc1f<fgoEHS
zqC2qk{>gPFz`kcEkrL)q{rIFb_otrRT|N%8Tl_`Vy5OoYb51Sac!e<l30R1CP)5#B
z8KBPI6fBWIl@WZk7e;(yC5KeRJa6@KSTFM&ZS7Q@mwF&WvPTA5#m{9>^dbY6n&RO#
z4KpLTLGh21WcNxb@!!&PU?#G^lJiIhD0!JmA_qT2i@<5UMh3Y3ot)Hx*Y%qp!4QfQ
zM7<M}EY)L26wZ+=OyYsV1NIJX1XuhuZ;W$4hiciZ5OGy7keHWewZ25xQ)x%rPYemO
zK0k)%G*qYuz_Vflker=;m$$(FeqFoEjl68+(oDIO+Zi?g6!#`u0(z1!&2V@|)NJdG
zxSqF?6EGCO4qi5B6$V0Qfm2J~e+A*yGh^&2%ZoOvdkaZOUn(bZB@I*<OWZArDn>&H
z5y$uBfdVG+o{(j^@zGypw6^dcqa^#6iBnO}MxNDy7ZR3jiVHxR240>rq_-^p#1!#f
zb~?|!v_rF##P>X4nClPMI~fd`*@I}6N95@-(*-{PuNTIJOuOVcI<){t1L*sS)0g%u
zI&Hn1sd4NARzti{WtK$2Axv#cP`lV(Q1bxPEz0*&%EY;g20LyAk}&$T>_fD9A-NeE
znVSpeu=TYNaYaSkIO!tVSL76>o%Rj^4m`zfvGIINI!BFL`8x%&6W=W61Y}5y^GTwq
zsPa&4s$o1>Ptm@LII27BXCrg1cS+~lZH{_;LJrJ)L@KqodXfGo1p2_7IfO$N+>=HU
zG{_d`xoU9L^v=~UL()Fk-R#fSw*aZ;-#cmbTrabrmo8Rd9eV>EXG&sA7($$9vuazA
zJNC!);z|I1+|JXz`&)fz(brh8lK;crIYfy9EL*m0+qP}nwr$(CZQHhO+vY7>x2pbK
zt6z_QPkQ#oIml7Q%FKwfx0J4wxj{WyoLkdBYVxWZZ>C-&Gs$N!7Y;CP{1D2$eXTO8
z2bB#5-E;nmff;9ANs9{d<)MN4<SlF~3p9nm7699#+hxCrOd{WEShoxwQ0{ir6DVv7
zqjEFx`j8Sq7Mv=(VcU^SwSlN1xn3jRXbx8B;uRnDpSC+wW=j*L&j(mx4B~b(2Eb`2
zz33xzL2PiI5Du(x1CdKo=}||YFX?E9%qM@wY*53e`{qxGN)=4fA>9kPeUnJ1%)_~d
zi&UHeNWCQVYXJ>nhiNVa#v~iOI^7#c!K~Ua7GQX__S$vDp@MBVco7$9r#*KD!v<kZ
z8c0?i7mAVhPzPfJBb<Za4btsPc`m`H4SyVTM#-4^4K8i5y&rqxGG#&h83#~>qSB|^
zKd_DTAa810s9J#r4-f@ggfbt5Bm_6#veNXOU@)G-hEavur07l<Yzbu*AlCei;EEc?
z5p&I2p{UX?Qdf-8VJvVkKw_()L*EPMPq>akz9<9*yH_vKr70C<lOp`g7RTsWH{WZ1
zScC9S&DEyu3Xe62T4ZpPqj^S}=<Ud*XyqJw*+(@@-FRRyPjQQlK%F4YBT;<EiJPUA
z6%6;H^9c1$<$c)&RT*>4xV%YXKaEW6<$jr}UZciYLTn{pnq=_jg5w~+^i%>+RhFp)
zIZIeYFAVovYV*F40)2dgP$AY<lV^#;-F`9RDtCx@8Rhb}3jVXhSH{*1(;%?$Y&Xmm
zw!2ms*5QR*Xxh{Yur9<@xN)nilwU1Z&q(#t5C}VyvKj(mQ$(*L*PY`ec#2nDD@WS2
zPh<=E#orp?*y(pZg)9-DNzE8~=to7YKF>6T4)_N0GbZmwUU)|g|Jd>pde=KRK7S{t
z;wG%<>X0>4RHSY8JHH^}sERrYZTj>9eRki9S#GPHhW8QJkU8S-$|Ev3bCfgSjl(uo
zfBCFQx+eYj0(+RLgaqt7A$4W2*@_&L)nh9@m-e(*T}51KVL>jd&2YAw_EwDJZxEwl
z=$I@Mx+T8qT8YfU1%)_;sA&NJJ~G8Y6I)Zr(RJo~+s@d(dT??q3o@T+`)BKFp4qeG
zEFTSD2;CKth6I|DA16bh%T1k~f5weT;Z+2qGv^7tM6)&$V3LefsmAuH(hw_{jn{n3
zqg*u*j0^GE<||~YK;sn?l@y%b#D^(Rh`eUNu_9cfd9f9*;twx)Pa4P}Y}<X-zGFA`
ztt-|y4GR;F)E<py4T!9%XTw4U=mtxH<=&&ppDuZ25SkB`b`DViXmEdf;QdqFYh?)b
zU|8>D%V|3j*ak?@gM9i*db&qQHSA9etK0Jx8ZpC1RdfvEcnu4Msx^gc6?(C6o6YLX
z7n%wGF*-(t0Si#U6tL3agqA8_@qq_7<?!#bDjp8L1gl+EpZ$4ec=P?xs??L#A|tHQ
z_a;M_UE1Hr?;Fg#>Fj~K(eb7$v5+uQxv)+UVcb}8_(>Dd=OFP2FZ1{;+W;vmV-Sk6
zh;r=Gt_;9rZ4s|-K~88%@>`DIoy+Hsi%gdDAv_n~iQCGy7$!9OHO+UD3N+S`{#*?s
z5xe2|v$&o4PagyOFc))H3t6pWwH(8n3nA`?4P<Ff(Thw@XoHm$T)iF`75Ealr6qln
zCjYxNC(Ww}sH&VMTRo9v<;aCDV)0n<Vi#>OZS4=ng`_%`LH&yjR`&y7{9UO!Ml1qq
zyLDKwOBMAxJH%}Y%C|eHXq!{!YC_c~tn6SW-d6>5T890z2pH0U%@|Z9wWuJ{j{znq
zfj;j%9;rflyY!RZov3}yM5D!=lsmxX+N--O$?$I8WOc$Sj<_sJPb(pX)~(kukc_a=
z2Tu7im8KBxDwdt1j<f=ko(|7sacsfwMsk$tXR4iw4S6mHT~{2EjLWsq_{nGvf-1ZJ
zohp07ItdyT_ivv34s|~JC07VtM5n}U>>SKpOq-s>xx&0#7SALU$^oseCP9L8P4^vC
za+-bt1R01)C<P3l*5tyI;{)1A?+{kkDu}V!9ZZSngT^tF-UqH%U6!mp#vluI9Lmt(
zJi`>F$z&0q!vVIeeOPzmw=Y;H@+VCQXQiqte)4OzpcdBKIpd8Iv$=BS`V}GDH-iFH
z(q*dhW|6s##PX>Hs!Y83kF)Eo9tIAvkiqX_BE<;W@91j6bl>05ZN4t$?)2y>{{mff
zW)d{FeI9yfGeh9*>HH$)oQ$Ff@6OsMyP`Moz6Xi#gqyY+<GbQk3CJoECQ?8@D!hhR
z+SSCwf(S#|uVgk)F*a#FG{Z_0@B&CQ>1kBMLjszV+kUjFM^^}R98iLosoaat11;q&
zkxKMPs@UMJOV8M%B?;Ke;Cfc?(soU?w94a*3>KlW+!y%m@EKX)39nSZCpHlN!2^w`
z<w70C6ECo3%Hf!|8DPgD3)aTrDHXbE&8*PhRLpk8%*zaa;krA(wwYAaynmFvJ}_Xn
z&NbkJ^j)q3^x%t00g&N5-}W4eR0NuCQ;5K*?y)7`hmT0e8OXg+f6{&R+Mv9=hARs}
zq8gDN?OqdcpmCORM2YFsX}re_1fA%0M(Ic06UJhMlWpha?w4O!|4^zZCXO_u-<o0j
zrEWF7>rVsgCZ_PZ-|d|;K3<O1j?UK@uv78lpZ4(h+7i}~H||M#gZ`MKv%C!GBRFhI
zu*kWK5LYH=i=S)*8v)6ycx;(lO`biaArmKo-oP)?dPHH7Kg(_Ddg4!XK<zN0$)VY8
z9S0TifRTn-!TV$yA4CF$qi<@feIoFpMvF@yJE~7W(dN}(qGI_JbXW?=s5yQZ;#w2y
z0#{)AxZ;oZ+*05gQ4<C1i}Tuh`G?#_)o>$G9~0g`3#2y>M|tUEE%d=*Ee?NhU{G+5
zBK-^x?N~Y+<3o%-c}yI2q)4FVX5d@nG4ZPirnuOlco~V+>!J{Iv;U@>*iOVu6!iZr
zTP|x<*=(_0pWHwF(z?{(UVo!VSMJe<TsM9%q|jEgam=zQRpDzjOHc?_9C}JATyKM}
zvg5<_DyjB#^5=BNz}C^wQl<#l01Z1^TaJ*z;BlFjBkM0EieK6%jl+I@`5$d3Qi>EG
zD;8a)Z%0pb%YboVRDM#F)N>U<n=??2{{*yY5@VzMWlEaAPkTASNV@bCK?TRc4<BGp
zME)dM=!hQ372Y>w$cx`!E6ATFKuo2r1~j0@V)m1HUrV<m*f#5n?Ub4nefbCjw_=H`
zQAe0>k`QrcJ#sFr{6l;`-Xt*Mp4=VcXTrAN(ym<QtGt69kaqDRv#ObEfOcV}#j>v@
z_4?D%w!0F_ZcFfE%#~zHv>Slv==Phq?U~*!FtG<fp*8?#9maponlh9|1D>Qe9gRM^
zfw>KKIwqlfJFlr3I?r;s6Y~$Cw*hKG8hGLK=ROLUWh5EM1Ct<WHUO6K#SEHvV)f6_
zeCB3JC6AKYh^Eo?LaeabvZ61g#c2Ymo7kPw)d>rRi~}Gp0{8H9IZ9fwZ?~j3&*r{%
zh}=3cfbgdg_o?6Z@W{U!ZwMRQsRo*6{ima&se=|8F#;R!iL|-*=qcpm02OmP&qs2g
zMn_-iM{!>Pl@GS~xvl730<l+sLNG&KBpN3GtCuE<h(`H@nv-^(T*;vJi3aP9XNqsl
z7cxWdk%I#ef1zh_u%9a+E0u+&-4Od(t-UMLKFX_xknlnQibwCpy~g&$Z!F7Eb=;yW
zJKDiEx>~SYB1ZZX5eEoH(-{;c$&0xHW8S=PJ?j~Wb>zSlYvnfBWm-l-fdRj-J!P0+
z8PDeOm8zvxj$c~PuMo6|@Y8XRsKlBdj+xjI4v)70es{)tdRSekOHrxZdS!f1c__Ru
z4afg41Q@nUX&}2om-qnw#%1KwqPgl9>cf*IF2|i;qdG8vmX5heq*|Va@u|-Jeearg
z%|+sJ<01eZZ4OOkfmz@)-s7N{o+7zJ`GBTsAsIbBFPySUAP;o(;LXELJ<zNlRfXJ}
zj&+k19FVI8!!;Sk&ZYHBA!C#keDEQG*2!qdQZZp5J7HEh*U|({Z%e|=Tm)wLa%@wB
zG*H9VXiWFX>Z{H`wQB#E3!JyT0FGE48Tk3y$Cf|8tdt}SY0op}k^75*r*a4B@(k(M
zFnuSngRVQ|bJ?MA=PQ*YvYj#kBDG*O-wcIaZLX>=_jXBXQ%!RmE02=nE337AGgjiN
zz~88%Qz22?773sy>WaVm9MRhL%(j;z!Gts3>dVz$uF{R(IYQ*9;m?3A!ehXhysWZs
zo(s7kqTh;Co>^tz0*}pQr|Nl^^`k5$7LG9%Ya9X;PNf9}tBh0k;{e05s-&Y`*KTWS
z$@%F<-UduQOp%PRzsSvS#9p4Zf3Dydj~^@5EBvZgr1M;npM~Kl;R#PDtWKw@Mkv<X
z0^@L#(Cm>CO2CgldVs=Wz<(TXC|ae9qLUOy!=+4*hs4-T^20rYZm*-gtu1MVcYnAw
zuY$*m!*T0^TJ7MkOU|%Q&}&{EH+uIE1p9=+J1V4b-38P&j>WqCkn!CRZRMcN?3g(V
zKQKTQ=T$KGp%H>D-8vE1F*{r_ZvS<0*on|qyPq}Gi;e@Kl$tIr1$K!+;>N-DYOaQF
zoAx_hu6C*$lqzNv&-!@52)n=JhGBL!M@|A~?Oj55Z21@j#+HD$I3;PwXy|4q<|+q!
zO3$ABt{fyLfhV$w+U@01*B?{ETXv3>@8U;|*y3+ae<(@TqLX~SrPE7QX&$i)nZPh#
zqf!2jn6+bcAegQWi*}~5!|iaSdO?p1=S83yX|Ww}2ybott=eZhste>13ljxb_Y>!@
zY<E1odhc2?MtuI7%6iaYeH1pX-iNgl#j}WuMY<#-v1+|Bh!L%$afr8zc<2$HW}?^Y
zZJ}yl)>v2t$3^L?Hd@uh^JK@xXWs10>>8{ffFA1`j&@pNiqir+qI(Y4J81>hlC;P?
zw(F_#(a>@V@ApW)`OIu$MPkKs-szBeH^3fOgQ7LE4&#i&smM5W4ClDsQg4rDTjb}P
zC*xDZD^sVHk6Ecxlq3U4g=0N8K@l{RM%gn()z{icVzgbA{QAU(XCN|;#jXuri5Ld-
z*AF|^85S1b9=bMv4|a0aqOJRRQ7#8JAy-0^a^7vLabPEvi=B!7@c&KsiMWkugbv69
zadpq)5PWomgusz+ktD9P_;MR$#41yL$v{o;op0u*T=FH%`!(OQFAW6E5ddsj;YDK;
z`2(>bBzmmQy%PNk+xHl`Nh3O!kJSFb1B|R%9+H0%DdNirWrO^}7hIVzmD?L&I?=Il
zNPT+U8Otu3fZ?Zk4AV`<pN8$Hw<bXJ>Wb9@`lQ~IpC_%xk@~Z&E)sopF8CsjfQxSo
z{451E8Y=Db@e{F7BLXIaR3EQX1S1(-qfG}9JgG^(SX_Ec4^H7~&E%sMVxWGH-2mA6
z_7%74glYT;43>*X0C@42DJG(c&xvp#!a0QS26nj}k$qfGeBBmWU`ttSDU5(+@x+ZF
z<EG{O!zpiMyauyDC)gG15ahgZ`v9FyRRvzfS$41%7m2g!TD$Ff+m}RQei3?};7Y?<
zjMF>rHGt~^ijm~=&P9YM75Tt@!PKypxVn`Fri_k4tuH2V2i-yoCpf<WE-Bv>*VPo<
zT8WM$K6yC@(2BVnw%KgtL2wY|wpHzKEycax#ceRwLODFxGlvzm5XyqV2AagVMGe3R
zu0I3T_Bn1!xZx~H8Kz_u7`}BGcx^H(rR+HZs2RX!WmdBWj9*s;j_$CpT@NAtvyRFJ
za=wHqxMG^!J>5C=`H0s2d9CxD5@P8fzV!$wkk))5RQWL&DtM*{V$VSj(Zt#6>J1Sz
z;Pb(2!E-QX)AhW15Ou%jtc7~UZ`;CWp%L6eAfupY^`I}VVg0W6-giLLjT$_>Ju8wC
z836CbSESsX*!%3s4NO3<Pr7^J`}`Jc+W3?=JId@+=|CCB%lI2c#!8pzFj>9*zyirT
zqfe)^Xh=izD(S7npB*3_k_j^{s|`gTClELbqPqeNvqkeg87|3Vfll*pr@V(nia;2(
zN%rg9Ar8Dq@j<%`#>avg6C*nPvf~!Z3>B3>-;IMLdckV%I*h4k<5}ruKiK>;0u{n%
zA9~-@gJk*nVTIS0tKLZ-BmH(vy)J-PVpJfP^<vrL<Rh?%al%RPWoH=*LbQ}Ru5?f{
zzE^Pfg6r}I%g{3S*w5yD#92YnMkp0p$#L?O5551isxx>D;{$)A_{nqiU}mvT@*~cu
zwK`}Q1Ga6OlG2nnkoL<R+Vd?){sC@dP7Otw7kV9qH(Ye?nvbj+@Z`YdOufgo@P?&p
zVFKWvg(4N70hN-YRg^I9OH{{-U?^IdIW#4eIT3S50Wig0pbAeCD(=EwS{5#R;A~91
z6ggc=6Z{@|?6`TIkcHG~hQa+z7cmfPf_2$?_DauUR&&^2v?Kp!XnkjPLeWD+pCg5D
z-6llx2pJE3)I!7;wK1@BrU0oA9J51<4Z}orkM}cCIHImJKuSo`IlX;$%&l8`m-*!v
zj(8yG7=$n;(Dofqzqn|iCig?)#d;7Oim{Gghs3dk__u6d4B@!T8*aKF*T9dnEUZ>=
zvsDlmHT*_m=sCuE#ld$*X?Qd8lADISX*p0cPI*p19B3J@I+W2!Obi30o_<<fsZ4J^
z3Hj72>XNpS_iNZ*&t5}S@o1Ejgn_~%Csa=l<psJHH&7ibg>)e_HFHz57m1#nzF)&L
zCt;Vh?!!0Us$zzIjA}?gVS9^38$~bM*h8*gALYE$Ci^ZF<gM1x-O4ub>rRx}#vski
z6$Vqo(lFl{aE4j4L+^MUpNOVg`fotH5ozj>-k+~8FjowI8?Y04jKbmGHo56o28I3h
z?_{}RSdo^)4&%$9$BL^U2>$H?@EHYm@M3Yo=RrWb%_O=k(v82+^Aaq@;DUzLWMS*B
zI7c(_2)Bs<<e!)#$Nkjk^o83<Md*k})veOk8z7EntqADP*Abs;RwUuThw#~*=RXv^
z9`PT|3fKPOyt})@CIat+sei`kCG5mH=`}gHLu^nX)6-UCy_5_b;jXP1%)Zj2RUb*}
zDFK{RLRSb%)E_zfG|{Fk?le2#NSgWj#kqv^Md^GIPke2Np{&Y~@y>8Q=HKuvP(;80
zjy=Ua&cu-#!pgj$-rfUn6G$yS{R<|B4G5@;3B;y7F)4PRIpP-y==Ii+Z##d$Kx>?6
z>hCmP6ltV1r5IhwfAn}tB052@Pl3bQnv~Ekl)gMoYSp6;*=%0}(y^1)jF~A2i*tC7
z$;HKf)XVDF_LbMq@p>noOOj-)j!Gaw+phSo(sj-i>J)km;$34aotOt}>e<~g+N_X4
zWP~l<q8~HL-i7*hJKr2rd%S(B;B^OWbaGGD??`xZF6rKI{ezS)Fs4!4!(NQCxcWvP
zgLcZX?&+wdE2#t$D&H|KJ0Z#$SPVkFy4rnk!(ebH&30KUqy4g)*whPz#p8`nF2Hkr
zn_2s*f_v)=hv)rmtW6~L6yP7xXOMdRO}JN$EK6D)PK}p1Ic&?gPfu+ch1`+%?7EAJ
zLsefdYT8>Wy1lR?r7Eu)AYLkvm(n;vNMg?AD{CwJ7r8BXW(u>C3%>BmtMF6+3+DJf
z!;L&tOJn&nEBnj9`kgarR(U^s^D!5|@sQ-euPkZMf{e3Ye#w$c`QE0md!xq{H9kq}
zF*Mtku9e`k_LD+JX|f(ukyAMZAkg?-&Wa>-k*E)&NUu3ZF?w`I(@-$drxLO0?Y5(=
zU-#Ibr+g7Yj3^2;z;BxtBRpCYU*$SNAf9lV<tB*K;gQ#~oE9OIql|IKDlE}h@*x1F
znIrw@<sd89)&MayqkVE((OmQN`7?~8H25c(!*{&`@?=0-y%8@pdj~?Diq0K0uRXxA
zd>L+<ABQfw*$#fe9)<px=x}B-IG^xFVqqu}|L%ceFlS%QMx-bq&E+)nq;=Ygmn@)?
z`BXHC(rU|E*MR#3A!0##(M`|B<`2L(5CB_}(K6+>N_VG6p95fPi^S{)bU3oc{)Q5>
zJ>!c&-=Ej$oXxX|jCSC&1p<YkF|IZS^GC<VaFBE0n3d}?vdzwVJvE<`_pTtpZ^zZ#
zp;Yk-x-p@M8wVod@uoc98c(tJpj&cH5nEF>E@nS6K9(o@$P#h{4Zzo}d$gTjI%J&P
z;Y*$V2fPveQfh-sJMU=P9}I%VC}pDfF#K{>d^T4|%DEoD#n-oV>>Dc^p_>v3Mp0$s
zdL-XD|6BC=AQ5hm<`muJS&&+%q`49Y^DXP?87GLXuFSdh!cTiL<+DChOq>eV<y_et
zP~5RYeL9|MsxifhZ-d2u$_R=m1j+;*TMr@R@%x9SXb$1D1N(E0V6c8VT109EbD)y}
zAPZQ~6eLtdWx4bxAxC%a8y9K<7-Y2nNKOzufExcdNcS0G0!~A+b~Kq1PL>BK4{ZW%
zNH|$?m`<R>;g04O0#2Z3&Zu|}4XjOAEh5J_etH4q_z19n$uLgpA6h2+b^2cuTtxjc
zah??`YHa9E?N3}O6?C`_M#SR!@^IjzItfkqO~Z98Y-tS4?(ULa(BAwg)K_*fUOwdU
zG+Gd9`bB^TSLV}NlrAo}Qy}x8+F`h24MllpkViynQQLhAU{wzazvVPOz@B7D#3eI!
z0je&eUAu~|Z;1hhcxi6tB`@WM(G#dv*%JsK8)0C{`HoH06aJIwY#P<7DHjw=-bM0V
z{s5qZXz<@$5Bro{+oyp->XmJSkPEItLE9t^-@moCW)@r5u;I<9gyVk@cTo#FS=kW&
zReS)#mUBiIPA;gcdW1LMGam{)94{t>eM}o0$QS8^f+P}i(XZMEQ#vKJ&C!nX9A$(~
zn;l~Mq~zbWD#ekkOrq@;8=CYT>E&{*IPg#F3)qvXO+ZkL2dYA0+OSKC#Tz0w!tpj_
zH#5HcjI@Pz936v4<G6yPGYtdH5&hK1fv2`YTVqoH<A^6x4NbN3NzQD-uDoW67~DwP
z^gl)nFCi>LwsUzd58s<Vn?*niXiOlVWY03z@*dWN9D&C**zNS{H*0wlsACAiZhXE9
zp1+IgXloSagzY}s7&|CB>k3`i>hmgJM0RZ|+`7*214R-z5SdTPA^}hF4`O>}o&*EP
zSi35+)W9ggaukigwU4FGw9Kg%!FY{_g#&?4Ng*fZc7x>{HlUs7PJn7xUC$q>8uxlF
zVXwMDH`!@40}V0Z*&3rTM6!6dN%pPgtkk2@jMOVO=wc<&vPCii($dpA_x;U37W(Ou
z1mOVMg%rpB2Rdhk5TZ$<|6v3k3Om7<{~wg~|93{<e-%CdRrLHXik?_r2(jj<#)FwP
zAG3=mj9EU)bhgImXsC;m57)@ua?<iEDS<|M0>3jtOjIk5GK_t%&>tqY_jl@xUQn&$
z0yi_%K)q{44K|_R*1gtOD3kMP2?CksVlq#(yBl_BO203mjL1EeMx{Qg{&94btD7F+
zy21g)LStR-e|Z#%^i>m8(Cmh<Hg${dxT&tyX!&S->vLKawT%90c+pg&$h$2WM5RQ|
zswD}#x<t>{_}iWpON-nah5ql?&W8OkrydX-e?sIMKnDPf93(eGacap-o1C*|6xxS*
zK=BooP)&tu)6VG~-^k|45hWLlta0j?@gIPIR6tg(4lk0Ck-stI>wq=*1YGZ}4UX-B
zc@54e<u~4AQFxP7BVp40P4(CukAfR65ffU0BSDRQh1g`EE^iv34E>sWrh5e$6#Na%
z)me|Wi4Aj8i{XalO>40fQ%peU(eSOkjdLB?WH=+af+*Q0qPDPfQ^Kz4$1)r?LW3Xc
z$yPT6e<w+)M&P<6-^Q3UYm_U}DOUi{ts_(LAjeb$vd8pp;dVIVA(3qQsK9FTr+oG7
z8qXpzd=N<i0H+dU(58&SV^-2Uej3jG<b)1*<Jl%$Dq?%Q?tieQZDoMv4wtb3UC4fJ
z_(ehr{0>h0^iLSSdZbx(0f}+*=i>rnHjpdcaMmHe0Qk4tECgK9_Li<XL|=EoIk#oJ
z>f`l=j1I~Ug}4|D%-Ud&wp0YC_IYZU9f3a+ytJQ?0nN$!q2GkA^{XxElopWjN2qlw
zQPXn;-qnd53ziJEHtghraagYLk118~1kDf9-b0>sd_={l6+c|yUJ6hJm!3hAWHBC+
zS<YV_-X^pj*%8x>ODNCaqqytPwOtFOid(otQNJ*98PRk254~6J)9Lm)l&C$ANYR=d
zQ#Y&-Up0be&0>r&%~gqRn^-H<s~a)&S;WhUeaKieo-v|>DuvIS+PfG7O-@pPoDv+k
zrmT)jA&U{ez@}E{QV3nMvd&P6(n=X{s5HKvrUM{{4_E*7bH709#j6LVcIx!zUt4UG
zIvW6^(b~qgU1wuuEm}-qWL(3?#~z_Dj@V|`IZ4<W?MKu#ZOJE0z;_n$dCMdnX<S9s
z70wmL^=h~G1u*Z!+IvKGI9Bt(!nP%r`tsBXy5C)YV&b~!5yHCVbQT5Y)=&|)5eDet
zquY=^=$bABU+*g^1Q6e15ylwgr^t>u&+CVB2>f;V>cr_|)6+tKu5oC%SWXr4ZzRWp
zlVGagn?-;ML#5@}33Pkm9Vsg`E`3&AqI449@zFN8b0Cix01%if@L6zzONW>0%6itO
zb7O!e+(4QeAj<ie@zU^n{D~gUNp?4bR`Y%Inkh)nRxwIwxUTKwgdeo60_V&v8LO-G
zY9g-<5R~FKK>hVgQdz@4Oz}o9|2DGjO~?bxDSdqMz5_O@+1MscPhYhQh@-=r$U6D6
zru@7_Sfz|QTC^#Zs1dxn%Uhu^3R>vuT}Vex6asY6AMsVN2r-y<Fp+E4`{NVO`=fz@
zv%i<52JkNsbXxW{?=(*V+BRNG%l)l1XHNNxE09ot@y7yOhU={_7U2rXkoNLCt}c-U
zauW^S{7VN^2S^hP{&F+|(mzgS>vvD-<O|?&PeYA%MKfzyv37na;-VZA4(m?Pf16p#
zh^RenthiaAAoE3VbJAqA>vY*^lL<kz0Km<kY<qqpG!;}-KdTBKOC_xc>XZ?Ucu{By
zOB)nU=iTcaOURN6bnt@hcz8!bCO8$}b~mYft?(;#IIPOby|(!Hxt;l#Zn(edDlrgZ
zNnutvv@<g=kZV6thD`RWCpvBvH|R6S+==)Z;Ci6VW+l(k3(E)1*BP)V>@eU4<!#2(
z&7!km?&UBH9W*v30b2`EC*Q8n%$kmhxgG@|f;vPQs}nLt)7%afMw>#)`4n6P{VFAD
z&_)LFpWPCJk^2<O!NdiNrWnR*``~i@L1&M@XTU$+5oj?;q$~Ii9w8YSk>luw%u`A@
zzV%sRIJVlQkYjg^`NRP9jvwSa0c!yDl-lc;?Y%j{Vr?CH79L@nTn1-QO`+2T{EAxN
ze@h=~>iS;>_fgpLf!4tQ^uu<>B<s635|U(4u&KxCRSV0OuSJx~XG)kOOIs7vE#+MR
zfJS-ZI9>HBB$%uyY)1iBTPJnl8jBWbnhOXqRcv|irk1()&^DemRPu+!iJoQ62?>|`
zc|##0ah)Sx7++}yZZD{&cOtWm{JCY?Z7cIU1|I4P?toukls|o(0fUkr;y~8REnB}=
z%@PQGG~ZGl<#X<w%NuJ-JJV1mK~~a0hl?k5w#G;_QX*#vB(QvrOehpSZK=oP5!RAD
zzPorqF<a+o25&6U>{-Zg1Q}XOga6inY;SahIKWW;xi_sM-G4eLV15%YlQ7jVXS$CT
z=p)9Td6B_qpnwN#Ffu^E?TMh}CeZs1DVbXKd=$wEX?4UAt9MHlLde}<VEteG%6P8m
zxsClww%|3nM|6ePcRgY)y{^4m$d9{8%o&(cHM6UBy`XodKc#PsfYaKAOV;BWyQ_Dv
zA>eBG%6$Ucc+vC|4@%f6RezVLmo4>XLivQaQ~aDQ88xiY7BS<3N;X`p%ty4I%{Y3g
z)#?xY1Fmjo!wDs+R!HUegh31^;3Uu=o%d(25=aKX(*mcIbEQ!cu`%G2ftjhW>&x`q
z6FTN$JjC}%;6}~WTwW=&2np2tc{@z*)VUL)k$ij+ZaX9H(7707;lTzb2=Ssup4X@G
z-K=kMUM$W)KEM_BTJ*T(yMx49l_WmaMl{H4fB3LF;C8yi${1%CdPEpk$5+i+s%7MM
zUMCbtNfq@@wGz{R=#qDc@sQj2JXx@fyDe1Ixf1-p`m;y$I^ZjYuDsr2%Qg#lCpADH
z{8#AMqbLMVU!%wcPnU{5*H3F3>yJRh=@zaE&%tJZ5?*P)jiG1IS~rva`1Q5*2a-i<
z#RAVjr+5-#nQ#lUI}UK_g2OTZ4h5o!_P+)eJ!Ikw*4yz=u*Z9wgH3MuK{jL{5{ANQ
z!brCVCBjcMPiL{z5l(ii-*p7)gXz$$0j|5h(27`iN+6hC<R1nZahUf^2Y1Sfnj%)~
zsgfOK;AKA+F`e*?YDnVQfpc~T<DxRTJ-jZMk2yvKKi;RlLF;$03su-(#3h~s^oRg_
z0%)!i8EU#7#@PoOqwwHzlMuJg=7-ko+H%4@Gb63~e~1HWURbu#=?@TgvC{ysrS=M&
zOIQ_{c^h_h-Z|F-prcuAHKL#Gq6}~U*tSrx_4;yPWj|;Gxy7zT$*9x%M(B|aL>FJw
zDb%9b2~D>kdZrwC)35FDPeebN%3q}}-1on))Xlk9?U4=y=u!>t039=<MfftYwuHw(
zgHk;UYXJ__LJl`;?3#cf=9hy_{)W(yG%LW}#n3HJT(F9DL3J${?k&j7;DkU-{(7DL
zaFxV1*F$t(3q|sDu&CJL58d%=sTK>HusI6;C0Kb(v~4f(u-JoKRzYLUFs_c2GDTVs
zr$a3Ns@@ndui&y)L`QcIth7_aLy4rN6-mA0;7A_fFUlDb^V^T55;Yi*$u7XgQ)D>=
zx<?a3Q7+6My$~z1AfXXuP@)GVVVt^IvHattqUZ)3Z1^GYTN|VK^*2eo7t5QZY1^z7
zc;^V{e*f*5BQ_b@aKOdp#KVGnpg`r%tK}tzQ^)8oLiPevdY*2)5{B0sP#N6Hlu7Uv
zz3rlD@NrlvKM^J}qUSvP%X1gTAXFTp#Y_0!q}2uRu(lSOyd?*xl^gK8X5z|6=olWv
zZviPs2*O)Y$Wwy4Ida!7TCjWq&h)v{_;l?wB0usSI1<pASaH^U@CbugcNW@1{-?(-
zz2<fn@)^2G5+Bu~PC>5)Zv+mWeV2bf|73jHa1gt6vRVB22g7VA!#*~_EiNf&__PLu
zj<P#{uGdH4q!u0S;^%hdAMM6uwvtKdG#eCBP-;oI$#{(X>Xb5%^e`fi*gxmKCt(0>
zZmsL6CFy4PvpzmF51vdggF&VV%WOON5rbs|GH%P^0}J{gup*VoZyKa0GhnS^UWa22
z>tLzmYJ|u<_aB@9xi=TAQzVajD@0#`lr-4$JXD0|t=ir+`#}!y<%8|K8(0(_O)$~c
zw}V#zES4$As-0UAiYxQVViFCOC+obJB%1y>*Cux@G9P$_h%v6T1}HYIi0mzBHlISo
znTWEywZHo1zjx-XS8ex06?U<xCqch+gt3PsV^OsT;gK?9&lS@8X!y)d-Nc*wZHQn&
zrBqJ>FPr4*k$OUrQz5C7kE|m*bSs~<*4<whF#-{E8pPRiA))9|f(UQkJuZ$@LONbw
z05!lV9xR8L9d%)k;2j{xu$6tjr$0@DUN$|*Hj`NKMlnf~67FBaE7GViT;!?xIzuJ2
zaqKeK$uUTc6qXA5P>6a`iy#1f9OT~r`EkP21?K)=ew-}RgMj23G&a+V+<?QV+9A0w
zUG7&^A*Tqo@1xY{u4Cf_`oklfes}E?)3r)Yw47Yw_b-?*b}BY573z#$Azx9;I<g_O
zyrQ#da-^|Ll^|F6u6$YrP5e9CEk#!V4ig8Rj{kzX#w1^FZwDstL8zX#_4uy(%N#^g
znYH0(^^IIT9P5|X7-eD$%K-~!{^4{S-;tA;vwj`CH}~Rh3tdlW*CjPM4Qdp41nJJ?
z%AapY#B_&KAPPy$yARogE{rU&RaI1bi4?e_BJDX-D4R^{Hw~HkPCo_C?%kJ1<0y+p
z^iy)T6<P}zL|_Tm41@S1k*7n(G6&I=ewY8K)eYkRE4??G7HQZcVt;2sR3O`uE&_0+
zGk+VgEq3s`GZ#4;Pe=k@QJ%VF9y#gpBNyj6x7}2VXYi!(N0=d0;&GK&>EUK&9T(+V
z?Dr5J?m#OWxJ+g#UlslW|JPjq`z`hxG4aTX@{9X(4Z(HDB?u-5n{6;jvNO(O#2orV
zIH~I5=qg_QUTi9SQR=6QPI||unLS&2c);?)&;+`CZG)N$F3ZzSB##BJ82k}yU=m7>
zzjO6Z%$)9zRY&T!--;|tUOwGdc2#%v70!c=@gngM>p}#s_~(}5Bpo01ocbn%k`vn^
z2QuwLyx^v^_bgo!CuaOzw|zqg+Y}O;0M$0QdU{1db_zoxGK<6kXPI;-@6R9kcb_Ks
zxX*(kceOG~QlaAT*hU}reJ^3xYEw8@A!lzkb(b(y+D?$Hg1-noMLy47t-h1*v>fJ}
zF<_~;vt)oWKU`f&PwgoN7w@uL^0sB$Ag3!<K0Gt&R65bIi7nglin_xvg-aYrH1YPE
zt&Hm7YRv<_93x&9M>((XlHCVT?9(_IMj*I!jsqlm$HSb#L-7h|2!O<w?=qKco*czO
z3C&n^!*`UD(i)@@fABr@QUl|_pq!lE{6KFb`_;EA60eY-*Cn90+;?r0UH@=ogSoiL
zf!w^jzExGv7jz^I7KA0~??}zEXO=uU*Zm6bD^L(+Nm7iC=hRKodx(Pc_tA0@49mxz
z!2RbOo%KMz{8!^fjD2y&H~(La+kZ7~oKvQ@*@e1&sQOW`$WdOgq>fXOw((r1*OqO_
z4Ws09D~kJB=VL#mvf^j{mZp$UT!b4q4<X%o2BeCQ@6~Du<=k4%C;wWEO2TI+Sid!J
z2&6ck2=b$-y1a<E$fa(nDTiw)0Uzm*CGMjWiBO{qLV!~De%;NRb4r6K#?+ibAq2RI
z(_@%+rD$F${WYEHBII~PT}NqLVLYQGn4B*|R%X<;`Yr;B@^b`Y&rTSzkTy&VBRsFp
zo|X8iqpoZkP<7_^Q*ehj?=POB<<~1bMR3(G;@ev1jxbbz#*FJ~U^H*oMu07*SmmV|
z9Y_s=cw4DY00BXCECAZeinAJlu`RY>SD$RplKf7aiMdy-e=JknnZuwo%DEkf9#vX&
zwp{0$DIl&%u?`741JSO%*OiqrR1{l*&(vqVO2|<f*bx~df^2%F<|H}tfxMOt+ApPl
zO++W}cvobe`llwRp6<PmOf@4pco1S7tHm5BPr+>jh?!d-FHvt~2Rq%A+FY#-r*Z0z
z>bw3HuT5++uM9m>W@c9{fmE5DHPsDb11>6%oAlgMKrXpqa9xBGIC5vt0C8uj*EM4Z
zYlrEPQ?@O}p=xD!oAQK>6^WUMFQO2lE6|$0nKN8DG!Yx2&`d-@6NzV$>Y5$_?NtP8
zwDcjt(m$S77{yWLXa>2V$>paCevcV!xH7ove>ezh#0Y?rwa!aPB{3RtTmC3PHK`vn
z6+_(qmVPS(9SQmak~*-VZWmHDDw@}fkIx3Fe{R&#hZ-Pk0MVun2`|~dznbP!rn`CB
zR>0tj?5^s*i<3aY%Ld4(h#C>~wu+E2yF-iq`fjqf&30xNUcxo?W7?rhEjC=H$93kb
z!QwypiD83i-Nbx+{LNXa3HeG&gv**Q`;Kj|_-jDWQ6S}%E5(vck1l{jW%COus8O`K
zT7I*J0dR^(zonm!`>VYWfsMEbOONq{UX=RYu8N_JFI+@=rs+Q$H}gBxa@#1LLL8<)
z6;OMb_@#!gik|af)6%g1VHI)F^y{GP)C{!fKO8xSGPJvj3;oZR0sL<)W?#)Cz=+?X
zLKd7sIAN#f4ZoVq8lv10T7LWHoiiH+k53(QzTnJp;%-L+Ud<Mq>77$qTDrJP_AmQ<
z6o_+AWzSp=@DO>Undwy1?TbbOv3jKTC8R#*R@*4175OhhRBGoqbz-7|GwW(0SaTPB
zsHJ3f^F)Vz8ZZiPE)qUV(aF4#EW#**vG`%&cHmDYC!m76(ITS&A)q|wnOV_=3#qXf
zVk{_;+6Tks#gh0Fh-=h{ZjWlE;C|pg-0UZO%Pt^9`(&R;a^s3jAc^+Z8L7k}Zfav%
zPZ9?Lhx?At&={$_ZfOsv*V#?|J&dv|_AMqrYq=UTmvnmeyr}o$a?vA}vF0jN<NBbM
zQlrstYB&@h0jV1EKqKQYF)Ejg-KC}dd5OPtpHoj%?!c4@uVjJ~TQEbfOMv}k;X7%9
zKBzq;-oLHrp0+Qj$Qtj;94i?4K|o30eiaAL;)$0?OrCB@=H(DU5Z;m*W-lY8zP8Ku
zp;YB;L_GsToZ*TFx|)y=R`V?IE_k}z>^uuy3cSM@5Zp0CB5k~aK4Ngw_HA^8&b~I8
zSqp1O_DGF&M_zPi#&D36M&de!zAe6qaEJzPtClwmDr!+ogYd(gTol54QdvnkAQz@8
z7%w@pqn_W`w^F-dQ3{<q6zGGr8RfTsG;^)qaz8Sf7$Ll(9`f;oN*kkU_RVT$U&t9?
z^I<>g1u85!lnoU)Z)uUhB@jp^(&MwSrQ<7C44vbe#7SBB#*%(A1cw=v_sze$#pL(Z
z+`$cGD!P@$64`oY!I1vQDDCRUFO8(+W5p4Qm7hmw;vIb6Y>5yD8JgHwJp_m5jncre
z1@Ty|iw|Jv5_u(T?&?fH;{MDMb(?Vuw3g-)H4=0ESi$Y*^-8|(M}s4xQ9B_C0Gevh
zXh<jJU(M*Ju`S_p5Y*u?*p00)c?LyQ<r)Gg<I96BUtusw72Ru%jljR{DxK^-SY*o@
zlUGl2IQD1mH>jfei66b{SnJ@U`)?*RbMTQ;s|qkb?Z#nqwO4mw1S`ooA>!d-X=dv+
z8B3Ph)(y}MA+h4Lfhlurzd<KQ$hBa=*Yvx+TbZJMiV8`uV^Ft-qly%bamgX((`U$?
zIFRuBS!t)#tg)?~56|Q6UxO_p-~tyfIemVcwSE<Vl$2eiW(Vt=DASjc5}Ml|zg0#*
zG}2(A5@F&Zn@yS48C5Pdc}wrHJoB$NT4v8<Bs1E@S2@0Wn3nsgyI9)W4eF^b=bRWB
zBC@n;$=Dr-|8UAC0&K839XZFW8N4@`l>7YO?&o$2#@7GaOKSaCPcmnbH)3C5R>ULa
zUEKw=1J<}WWLAuHMA*8c8uGPqTYU4k5H>d^(BboB6RtZ?ytkrCTtd|Xt;PS(iK4i$
zIt_KHyu!834%hPl`pocirIG|{ZK_Bv0=`xYaDy_5>L%Q<F7vLcE{>i6%+S$L?3arC
z^G&ivxU#vNy$&v+%cDb?2}_?Cg{AxB<6!ilzmlEIyBm6CE84?Xsn{J=0i7J52YypD
z?@n%~#C#5Oh7#3aOi+|^(%?O<S+*=?IvOtCmS$t#(>vAdC<t0JMYZ5*@uy;I)r|>%
zTU;|@XI{2ShX1*fd`+-qZdMUz81>-jo?P>2!4{ZAMK}9Dc3a&hZ5}jdG8X#W9aom+
zfl}g|iu_Hj&AelgEm%hc=hL4RR#E96t02AW=@VJa_4(VE>PIsLo7lYiaE7)8)qA)F
zmtZ3`--Qi8h5FAgWz^K}Y}N0%camyNsO0WAp7W>;gCNo@Yw-;<lKk8~_=^UGStH^m
zvpVvXQxA7hC$jCgYeGqLSNMuXl`?n2We1hSAp1EJPUJSYW;Y3Uu{i0Rb72N|Nx*K$
zo@$yd33GPza|s1j+8FSNUJ0-(RDQwGoWTsX@ODrmh7=v&F6NHN?A?m7X@3Z;-*gbF
z&5$R`5T%~U#|r3uhB~sD-=~JKJbPBmaM!mg4Bxi}tJ}Om9)-#Vnk=RYu>jXbY7-F(
z#Nfk@ggjEPdSXBj2*45JvVx*tv-q)1D9Z^@=wb3~fD68}nym$!vL7@eI!?#@oQT{*
zKznhp+)c=bSS0V+19=ykNu@g$HNQ|axzHqJcXUc+^J-lT7K%ofv15}?*bJ7=VF_XK
zG(=~tPC_K-sPCDI%SS1`<P4cHur2Do4mIfBwVY=PzC6wu)yKb>Y284&C?0XU=ujeL
zYX_X;g<g_<VV)emH~W9g?@TE=)9}cYr+AZ(jAtTpu$ru4pFd{7NX>zC8X+<J2C{F(
zU2-J@ERZs4p3?z>Zu~}h3kali$n>F&N^q)`+yf1!zg+q#YYg9FC*Tq8<~TeuxmPm(
z+~YXPF4G@tpyN7ebvvnNG{Q8dNgkanQWZp0?=0~P)atc2>FO0%d9d95eLJ;`?lzfc
zgb*-_=~L^VWVsS{q2MJjSC`UUoL_&4IO=vbq2?p@X`51h9YuG3du*L4`X@i`Xt42l
zSjVPmJLZ_XFeCsX`rA)g<@|j8L1(kiTiyu9)&zU*N>An&C3@;iF^3AEjXVlA&?!2n
zZ}I&vg&|f10+NvAM61B^g>h(Kat)T$H%KPSTjYYs>J5j*+PZB4!rN*hu-2VN?`-JG
zi1o=~YiS*C`F)W}4_~Ej{Ah3ln3~driz5hga}Q2GZ|SlN^1If?`rYi*#TsaZ4wP3Y
zWW}jwSBNC;k2eLz$WfS#vg&kNWgSTJ!J|Z)P5+EiT<mt<u2ReANqJ8Gj)q8_4F)^$
zM~$_gY3Q}R(L;Z!gG%Any@=@R5`tW3tJTur<KGk%bafRYUJh(xu>M-TwX`;TS^#kv
z8QH*QbXreDeK$Hu(677<j$#Uwv~rQ~fcKnXKi_Tj^YytzKQ+0pjN|?834B{4w`Kyh
z1cEzViA373=SJ+$g}t#d%tN;QT-vJG63O&Xp-}z9h7u~#V@fwXG{(TNnjHAiX{1_e
z=HfOm95KxcwM&G43>r}^*`?j*Q4&zS3WC-wrvFAxz<b(DG4Jsg-Pj|dk|^L1XLl$%
z62vj>dT9FbU&g0KHD=`Wh1(&$?HA6+5hj{hnL)unz@Fe542+5)b1~UY&cQ1Fc^QGV
zCl#37!HLZp#}sphora^TKRg#C##<E25j#y=Am0uV#VfaJ#;RxpG@J%EF?Sths2K*s
z@O)j-EsskgE8Xqi!SJP*_1K$__=&73T$vQ?vDnE_C$N<is{d9wvRyJw$|4c;H0>Ip
zTag_y$>G{E9xeC!R?IXEDsrxEI`$Qzf=A$oEZbDXdTlt!WKwHS9=#<Qc;M3LyFs>Q
z2~YP0zz9$I#g#Q_WB8IghGgqMd4tbW`%I;DYJ*<7)$WuLe<mvsPc0i5y>=n*c$W~M
zQ4KXem3p9enJsG?3aZ@^w<^kYWMZEXv3iyGbYIiOtsd1xe_cKWcI#~-U2E(l1@GlE
zC3Qgql8ZI(7p52sQAh=!YDDi|0^-+<xYP)cU^4*;7DGEq*k7lQU#sZPy5eU>)QiA&
z*YU~SMf2L4NzQwx@$auO+*p<T<1{%U8)L1H<*B!-)`q>i`e;lYMF)`z`o0!+zu6_l
z!ivBgd}Q9fq?Gw5q?sHvsmd>H7ncwIRO1XrGMj`e4@od3fbfaSV~CU+Yj4-R`jG0^
z&7JxD6#!+AV}6ol5Z)2fGqVbm#>kIXBKsQ>@J@Ra#?={{0EQId49qYQ>D+d^TNWc(
zA_-@ur5Xipam2yw*5g=b@8HG2uMZn+!kqAicuI98O6vP|q}H&0ey{sgu2rf@><s{u
zQlGcS8YMjfr`Sy*^=+Z*Rh*)bjAE^vuOvbe+7-6#X~L|uVPpZ+DS*ur0l7#<(cjG`
ztrZp=5Szy+CO1xWAc)d20g!yYf8GiyEFy&z!Tpl~t~ui_96tf`>s$8)t!~&*dfCS8
zH+sKD*yZ>RdYC{E<x7~ck>yv77du52E47Vg*fSJBS_MqvXtw22>@tw0ms-uJ&cb~4
zAn=h_iqL;ZM1#+8Sd1(JCH7u2I+6WQA^Z<**Ic)kP!}C;u`lDHm;@g8jziMon5Jk|
zS!T+s;vdtk#;nOHXX{((21c@Q;>XD4fjU_wH-QuU4kG=wlxMh(O#S)N_{H%iU%iD<
zMrH_@E^!GgdV(G$DP!*HG4K+fml*ErqE!Pmv|tbXQF0HKd~Paz2NZ7fDXC4a^(HF~
zBai~JkqH>dN&GJ14V|0<yHgH4kv|X2Az?!k_pA>07wn){=hn$mt^exZptY<MSiY={
zB8a^~RL*7T_ah$8?wdGM(D)moa-n>;Gq<VA-rtg#XA&&OS9>?*RT&~UX!rbfN1ts+
z@{dO~qM}HG_Hyw%6@N!zDQXF!b@c{Z?n_oJB}`1r0)D9gv+@9Tw&Md#kor!;Y4NJ?
zdKwLIEUOGS^XVLCgtTJ><YP&h#gK~TvhUUaTT8Eqkl!EZN+tZ_VAs?FApgJrnDFj~
zkhFcF?G9!lX!0F4#AG~txRe$)Puyeia@kNjT6uzs@Jj(qG}#i*erS(cm6!@IFnT_E
z_@8rt%arXu;mX}!l|OEv*YeO`slX=$XzU!>DAs?YEjyrFdA@^|&@<Q9%?^v6(p6kH
zDT`Qq=R8J%>j+8>rFTt)!2bei1T*!KU$N@pv{OPCC(Ozo_VmR)ib3>IWHrZ@ZkLmS
z^_N&YI2d7@(?U~PK%ce-eVB$CFBX4VEj`_-M^>FU?bA3P&UuAH8(uoFW$`$%idLR`
zpu?1%A-sNbmJ#1q;rum|^L!L)9?R?gF|4PUEoG{m96q@Z(^YL?1&lt-{C;)dH((Pa
zvZKHOpy!*`^#B=#M81WB`gVVkgq=tWw&!xoJ`XH7KUn)kW`@iV{duUf{$@kDlY1$G
zk`m8QQ<v}DY~rZPo%wrN@94C`hR!=FaS`t$$}H?VIJd1Yq_%$>AA}}J20AEm(Kx43
zDDsvP0`-&v|B2~Xe$3z5Eus+6GYym`JYGbMS8$X<i81paxDh#v74hRCII>L!EObrZ
zUf2l%2`b#JSzl#TqTTO(zQC|8x(0OS>umYfRLd1x-VMYR>Dc=<dDNa<oF}J_+u^Y~
zCSWaT(`!tt`=(G(R*+!E7+T%Vc^GWyH8gWn{)t_rkLPDLeEAkF%y@H$3@PUC9ye~y
zDYpeqFA|-Zl$O_`KA4YYXGkZ?;=1{z+Y&&6cs}J_*~_`or3d}sg`nfuPig|J??E{{
zm}KKxeyCDj_tlG{njwlSsFdV&L288$EEHFp75F#!lw0NZA-s<1r0$)?xWCggy|;kM
z7Lqr~>0}JwMb$$k8?4QnB__a?a&vdDR&~&}B16D7dfh)?>DNmeKki3y{yrGbFTT_%
zBF7-4C<H6e5MVt-z0f{U`L!=PNBYaTe+9$Lv^wg!RHuCtbOrY8?tB#@b7p4A6f1zA
z<lx0@kBpfdDC||%aVw_<z|elvvm`A29_os`3~a~|v?PTFay|3uD^;L;)l=z?D&3<n
zr+q+9Q%1_tXl-b}B?}BvUBH76X~O`wYk7eKim*i<3j19@c~I87kfnqRUBnfI*H+KM
z7@aQdvT8288XSJO(sdDcVMqgl0->?#BN#`6rts&Tgd-ats^n>1>td|~a0KP#3rCV+
zF63lfy}wWwb45$2CxvTj{uIm1Ru5MT$s%S%XNXWk2J660DWpt6N4iZY>bTvkye=WE
zxZ0LL`@0;&2xObT6Xl-LKPo~cs@a+PDQ6p5kjqR^0kO%y%lu)E+*RL0!sR+t@B-%1
zbj==0X5#xPI*0OiQwuwEvhky5)vsZMUvFZ|7|LvAWL8vjV8A_=s#nmG#>Ym<gsZEN
zJoKdC&W95#t)#rle|>(S<_;%dSv0_>RLjFXuW<W+*gK~#(V}j<mTjA-Y}<C7vTfV8
zZQHhO+qP}yq~+%M<|TQ__a9bUd(OT3=ws~?I=w!E1STp`e;0nCQ|d~^=;>_LxV86I
zmqPZ^W`Vo2>f{DMl8xn$RdjU?I!`h36MA5U{b^jRx3*`*i(OcXa<afMkVkildD(nP
zVr;FPI3sUy^WZF&_3@me(F<fQqopABVww_9Q7ss10j3iq(KqSB*QV4Up1q?{8qbl#
zTnX#4!8ns=5kl>-+&u220pw@P7X<}NM}kJI;JAH1uh=w6VYP~+gQ3p?Ro^Sr6x9Tu
z$o8=0i&7IKLp*W}TEJm2DteHZR6Q(m9HhNh0kQ_xm=hPYqLvnTk$L?EMMNupM9Ab|
zVWxdx;H7@KngdBfdo^Cgn<A>7SP*FcY(PzoF=Yel!{FVqZQU)z2wCRtc5%1dNY>7l
zc~X*2Z#UaKRb$#x*$vxA>1!FeMeG!p^tUPuwknKT&_+Q-pZ?PEQC$l>1qH$;F}?Jy
z$LeY&gXq8!PJ7N2sc3qE01K&r&xfLR4Ru7kC=$GT@<_Nb@wu+-V<8exI(C&)%hmG2
z@2`2~;x)U1Sk(fdHIY1=<$6I~LoFC!X=5A;&u6^ksN1DEyduiYZ6|w@Eop+M*)Oyu
zDS-(nbkBf0%EELVGlWl=>8os*<bbItpEp7`*qu-FX<*IPcNc?EfWz>;-m!rr#>6}>
zN#aO7{24C*ho8k!_3YgS>h5jd!<ItLTy1NBxJJF?^0YAKzU#0YgmRYAXv!`twf%zr
zW~G2;yfT5g0vMOr4BM$XNzd-DSe51YE<(?fs+OcJvw8k@_nj1japs43fNt~rK?F|>
za9|EdVCGWLBaD8>yM4{<rlv|;-@9Udgu|SNvpOf%ElJ$jpOj;#Ix8^mOeK#+5vp5#
za8Z^O+3^mu<~bO)cRq)NJ<4lu4-=)&BVmM<XP)P~h7zxT6Bej%u#H<1qolx)=UjAq
zE;^1Jf5FcHrX1$fztD<(%dTX+78jUT?|}?oJPby67qC-J(+0e6?;IBVU|P$*fNL+;
zoVixBm#yFa#&DtDqH0)LvaSo=s<m{CUc~qg1LzwePU=M_MKem#CAVvx+lix}#*($V
z@uR9h(d(V%oCC#n4jMGDiCTss;Q)94N}fvTl~VPT{|YOrQ)nLd9Sjv8JNMs4X}(P@
zZ-{vE_A-IBuJ9PC^x(gQKPk3;fxC)=7#u?5WY?E`ts)TCv7a$)KJqtRS<_a~#yoQO
z9n90v4jf=Uz^+1v0(DOJb6}O2I4B0c=L&!$)q|UKBCm)3hL)oN+3bptwlF_`7vtP(
zA!3=-NDX}xmqh3gZAMgC_`j;*Rj2JYwnE-<i+*V$Pk)XS`dI)RdI%7qXh-9cXwa@}
zJI$S85^GfFwm?0ZOM6m=U!95X4AU)x2^+4DeIYt<jMOU3+l}~uXcKZsks}bKv5k~}
z0jTTDD^Zw@XI@XC;2!-JsMY<urgT1tRtfjzNSEQY@HIq-IIr(A9JuBa9h4N^W-AZL
zPWzR@A3Z$8X7Xvbbuij*eX5@u8LDf~Q=ySVj<+$q`es-b0_OqC)Z>k_Z(o|0JQnjK
zqDP~r&EC>s{5&Q(Tt|ZKZ~}b35sni=Z!PuWtz=9<?#!@x={<;E84}_0V8_G$;3W1N
zA9%+h!Zz!P=C4t{^hgVu2IgY36l;eH^X()2)T?e4agA2K6rEXjQ#u9k+~45-rD0TY
zj`8o9DbHFu!~=kNoFLGp$6!hXtNew(c-EuSQ<a<9T9)R10;KD_EsZC=bVaDQJ`^f~
zC{)F))<PM?xJY9L2>j_lc{NRLBk~CU5CJZ_XMtXhR^g$$->CjYr_6_>y`nEge(|*~
zkrI9&w|j<+%m1dc!~$6`gaARhZYjhJA%Sz*lW^&X<(e3TQ%yn|#YfaQq%UNoRzxZt
zt{3M~=NFIfl}Q;LOa7X~exxBQK0-B#*qaP>-7!+51`b%-ZdYYRJD66pDBPUFas3c<
zY})spiOiILm@9qk`9?x4W?CK)#J*~3z+*TO4$@v1th*vOU;gxFa=qq^2l!zRd{>fD
zSqx=c%52{VEzi!(J&w3^p|ua+LYp;W#ch(N=b<L7C-g1}4};7bYF;bPWbMlLa(YqE
zVePm7jw~<<Op(xhLO~3k@NCW#RdsR#qzGNpsFYDZ{wZ#M@z$J;hBdF56$F9IW+;en
zyqw>nJ<;GdoDGY&1lyNH*D|jwS-N}{wq&F}kAzFrmg}Jg2Bn%Yzx5}$ei^&6Nhe}J
zYE&TeH#`)QnXvb6g-;NXol@j~+5IN_Wh(?f6(x7ivC-tO+b3e+HEST&Ay_jr3{|&G
zKnBB;*|AZN&bpm(I>Y68gA+xR<6RG$OlT=#Vu&#ub;BBOwMqNFto&&)l4ZLgeYAm=
zm2!Fgxs~y|IqJqgfAq6-1=;X@*d-`zm<QJaNZzJRO}^G^w;S;qmMpHQ^!yXQ3mg({
zSIEpt8CI>ZDdOI|u;#3L<~G1N4mBWBg@MFm(Qh)(2Nx2D)gRj#@VzPM!LbU-@Bfj)
z@1GI$ncIy?jb-EEQSq0_JVjm?1H!6<ED8*h7PYPDy7=uy7#ya0bnd+sDu;?&hIL(-
z_Dj)hYPeflekGpsN`=sruE#PHO@<fIG>8xOm^jiY+H(kLsP>+in3>2z_2W#)@b0E1
z1c=%xQZC?SdrrGwHfG5>3KesQac>enU>0)R4ESN@%1Mfq{xaV{&a~&3VHscn%Kznb
z_6E|zX-e^(W+(B~D;&~ty4`Oct<8J8q%5g-27!k<uI^n0vU0c8PLSe2)jt>8aqw|_
zTcTXjk)gP9vEr`Vd8Ns-WsCbeS;T@g7L#6ULLAt8trVPhlVCNt{64@~5#kT2GgBX}
zw$7i61JU*j3b-Wy1DrO;#)MaqsbjL8RlA8&saX6<gz+lrEjRD@>VFHRI($-|2wGGv
zwtxoorQp$rD_Er^ms<F_Wg}R5jA-(xt}HPquG&`Fyi=>5NaI~rAC;hwveAic(uY8(
zkLwueM*b8G-0HW6vQ#nHu4M4qnFhD$ZjJgJrVM#y3lB?atJ!2lDsv?>#UA0L?^8D5
zLmk>(TCGOlFMf;D%y|$Z?4D%A6_AMMutI+T%h88}%UKI<VRL9sU8K&r<B5b%%-F5@
ziSoYFEZU-bGbjV+;?w!7g!CeD9>vYt2W)ruHiX@JP&esNqRMjF-QF#q2)-+k$~uoG
zsB#U_i7*~IM-nnuWxO+yW$itls-nF!FG~T(eFhk1KmzE6<<6h#nXF607$(4t?)404
zs2$!f#Lx*nW2%sK2JA{IUwSBWca1J)xDpL@{-AKXRx=;*hT+`Kn}DXf0$;+TmTh#x
zaTBq=1!dSZ&$CS9F>Qr&B#(SN)31(d%N)?R^m)sXv)?LZ2iVa`gvjS#)fh-L?XjKk
z8U#VYVgc{NPx{-0nMDfdyVgW5hV8?8l^{lj**QkYr9)RwEk^olXTAEZYVvC$ybm{M
zucSn~AWmS0in%%T<{Kdm_0LZuf=@AB!I!M|Bz`<g>z&QP14irhM4LV{Fh<shhWt?v
z^SjVLICI!J0VhG+MB|qSbfn}l8<JBKkQmOur>0KBzFcQfpBztzQgwMEGIYZz%$QL$
zveBy7AIz6u_9yz`5zt9FSbvi6>vrD8_mz~0W}oIsotLg}=K0)Q$l*Ht;<?N_>TNjX
zUQg0B_}qX311C~xyKGzG2_8tEJK=*;&Kt?nyv*lCQz(R|>dfkX+_fQB&O?B3Ir0DC
zGhN9FakT;JEMfj-&D>Mc-TSX+jy)J<Ab|gqXO4O~^5w=d=~`Famk=-F-0`Tt#QmLU
zS-;=LM&Jb1V?dt#ghv5@Qx1VIA1ykpGTV}k;qA7{B}+x^fuMZuudE&OC{>u}mi-4&
z61fF`sfaNIn^A5?NkpSi?~(H$hI=*egI`j7rbgS&%K*P*+jxIVvX0hX+^l?GWL*1D
z^4IsRXX-SEj>_#<LEF7cR-0p)9_nicA*70cqz%#%Jh_m=uB(bJ^aE?XNN+!x8{5}c
z{WQAdCdu5125Du(vPB#F`SXna@`5}yn05k`<_Zm77A_aEY+ZBcXKNafx%7>mB6=d7
zQjMBgZ*nqid1{`eKD?uutWEFnv{qEy@Yn3>{5D%^vK=fbeN%ujs=yyZ57p20XbYFL
zxJvJNzxBRsA{d37<PKg^Sh{zr$x-?48d)6pvTvGfi`H+IY~{&N^iz0eVq@lAOV#4t
zZG_1hyKvCZNUuYBMinx`7dV`ORyAwagw2)rfPJdE;x4fyBCI&Xr3DtV867cq^6ikh
z%9%lRUT&f+;a71to5lv@V%>N5b4k8fh-I>x8`RY1AJSt(LJGmPR+}l%E%7AijyDaX
z*Y#SVOCcRg-*l>yoHVLOjmsJAkrky0HU)`eHdGQf!@@G75iDck{TKCwW(7p_-yH@P
z{s9m*AAh#I1!Fb<!*`i)OnvEh4aAmaEoz;Kp5l!f9-nRLm%LUddwllW>!87W@x&<P
z70Uf*RBuh}M;IBWy@agMnUczcA+6APR!M0e?eu1K7QBc@MGOAwjBCPn67GN}1iM_L
zZ?oD#*<PxRq{i}nZhdK~@|q(wlUNKf_eC7Ri>r}yN#L%SlFjw=6Lu&uk{)^IylUd(
zF<n=5#wvEIEUWo`7@J2nnrM$e%LU*7Gdh5Z)M_k(k&tD+kapa3)Cm9{ij=%QIBZx2
zSNWSv5D_j%UweF#VAofAIrT!=p;5F_gEyGuin=f_JerMZ6;u?=>eC@mf2?Dwqz&FO
z{^{ok7oNXOM$Zu%iYPjz%Z`ZZpAVaB!Lh8ac7Jo83=y6gaM@<u)|WIsjYPRCj`0hs
zg*RTHprf-R0lQ3W-+6Gpq9*+V0B)Zvd6ZV)<bTvM<*Kh<+fq}zh{5kG3OMepSTH)V
z#a)_a6yfLJ<9o)(fLU5Bg`(1C&{YLYYxw>6AOsvG7vGBr?~=mnhv+;V2u$$nRAlv5
zlZW@UGx(_9{9=8yWPf}gbal%kQt^!Vz7)4lN!Tmiszh@5iMq5ysP#$!vFeIxHem>k
z`yJOF`YeKg=Ut`=P5+LSaHkCo(rOJ{71i>_|07$yu)4EK_P5P|w3noGFF~CD*Kyeg
zaD{CA4<z>=NKTGYl61N7Kakx2*O1&|X(H}I{JyDBEAHh-;v|xQBgN$Gj1PRj6I=S{
zO7o8=O>91)Y3O0d5hVJ_sE=!xuHtG(uVav?>uM&4t=Oqx=ek_ES9mX*X2smq6GU01
z6x&7P#jBw~>it;4nxk?C4q9GY4E8JS8ITrTlSUFT16NL>69CIe*>TkMAEfG_8o0!=
zo4cSK(Tq;2WAog@6ym=lc#JqmiC|4J;lk6|c*Zu1o4Me8i4i>dP{ypUu6ND)EA+&b
zEE?GkBU6NLz=Y*|zol;^UCpaSt7^3TOI)Z1n-Jxa(-3J{6P7?gK!tVOC08p%?Q>AS
z%Meov-(-4lUc#MA6IzRML3UcHYz68?A<PS6LqAT0qy^v9gkE2VTOS(EhZ?A85>~_?
z+}onDC|5;OVR#4Niz&spMkI|l=^q`0E+$G<?%ZeN%dw)R{h!@RY{X>iK*9bwJ8L9M
zEP2(nleCx|f+^9$xedAjlRSfH?G59D!Ob}HJf8-a2lI)-2VZCO*v{tGgiwIdy_F_T
z9bu-Ci)Hqc5_%*xb|QlJw_QS>$xJ8*PO16)FockbY<up<mvo(s1!sLR(LP)&K!S;P
z&Z&}&cn=GfvDtKlSDw4nf#JB&6tmu$PvW@lKs)XT<#P@d6=|ztDRSQf;I1wLh7_^P
z;H%|qAzRpQ3Yrd8|31XR)yo$Q?!W?)<KT~!Pm_g9!SRyFBq9m%Wa`^x`w0w*>@}6H
z-%n(#6xdToxOamIJf%uPoX4M!`IsoV>R^M?>sM#c!`%(p)jRCX8t14aiW@w#-o~B+
z1-^_3QI^g)p7$6Ce$q!F8O^JI`^=_090du7NXB^$nV4!iHSV?K*9SMUhhve|eR13P
z#x3u<$b8DfrO$7A`AVD1fR@Y`K6A0`D<h-onfm6)(TI08I0^u|IFmYnI~&A05ENij
zvZNA>IoxPRH#XjzI<>Y&cf<4HTF~%Ms71J;&vqQrrR8c1U=ybbi-SXjV+lLcJIv+v
zh_KW=>`d&QSMZXC1nY6+K<9c99O4NnFn!;#-yg1STrjJAS6h!KvCN&ki!E19nD_Ea
zpW+?~r;h^J@0K;if!FnD!1q8=GQj;B<W(Mt6y>C=Mxkty`vB}&i`*23cz&o(LqVDE
zJT)7UNS{C)PgM#xr~?mD*?z1eC$UcH{dE+Y;h7)-V^!#SXNIo9NCs2$XFT&Ra<+3|
zxu?zJ%46KUchT{gR$tbfo(4OX6nsONS7$8n)8nW%wmY@xx}aHq2|e)iAd~ZjW+;+g
z{^mr_3lXuJTN%P)Ppb%t=4-ZsVXy~bc$$Nh#iaHGnMm*;@m3ze)Fx8crKsQ%#LN-=
z_!!tBJVT4n@QS<DSt#f+o;lfX_hf~DW(hbw%78o_c#tpWpCiEcedv~O!$`OguSqG*
z18HGW(8-3%_+W~Z)5PTGZCF2rF|)9I0axz2+<{(hlRwqq*etiG5xAGB=n1jQUw>=r
z;B`dCE`J&;2>SsJbyfdW)vXSFaM7}wJq&ZEa`Wg0@g~uK3Z)?^<v$IqlSh1ur>!Q@
zQKp>Hhe2H}x>FE;uZ=9@67kes7jKcLFElsmS@qsE4;zHxJ5YA4F8eyW{sqo#U)@WO
zNls`0ibV~%l<cy9TPq9>P5lYoY6E+9)Nsb5IWTb=Q#6h1ZID5jASiqX8S-960`mBz
z+clE~wFO#F;BUFHjR>>m@Zd_zJC}!FHz=$UK}=2`Otbm))yS@CjB5*6kT0WBoW}}i
zZcT?R!ECQ7d{{#0Ig>QZugpQC{XNeCGa@`tjmZj5C{<|w#ld3Sr93mQA1a>$ah=uc
z0mr6=0i5nZNI3^K%W?H10|tQ`RlVcre>N)W3h})|;?a1l{uJd52f%KdxQ4qUP_I0A
zb%IEMPF#e3VC|(}G2IVEnZf$6-R~HDfUNR=&2RtL1s`Q8-<GK0xIBDX>p$T#ax~j0
zpMbf5@{76&Sc0NTD+jS!g-n=rEq!FLMa1-wZt(kX{8v|QZF^b1b64&)XK+9J+wazf
zO#@S==ypN(>_(0${8qJ~q48y7+v3h)H*ks~N`))b=mD6KC}w~9*&)JH_)w)zB4}bY
z5o<34)_B5l0QR2OG_?71eTWPN`|K#GKoeC959MuTEB(ZM_EC_{Bp)bL<p)b35-z^!
zPtRvEM;KS(U$GMt$mZWARR!rE7iaIx<;@pZwT%4+PZ}8Ouqqh<=r8R_pTXemWvT^y
zY{<wh_h@Z3*4d%##8H2qBOOo`j@~2|@7j<SyaJmGXsrCtryJHMQxASY`)h*jXA_S|
zrru2-vfF$nke;e?`<vBgt>`yI0&fA=v@DX7J9`=Q$fAS>_F__HYoL-#6nZ#@tR0wi
zptb$KnnustWelV~s9`jV+BP2<Nh6_Wp3#pqT!O88%IjvNQ}5_c?(n9hf{UI4^2f8(
znxBqg)zw*GP7MSKg(xdTmOq?rMPDpaX$RYi$`=QTNRkV65(k$hKs%|&M2~?43u9i?
zn;!{>%#wm3Qa;%WyFYn;%5JRIjC{tPcCsLFtk|8#Anwz)QB3=f`PelHNyTPtJIsLC
zj_Jxg-L?c){`x1c|Jf<-&d_&R(kVsC$6q5`?!k~`Q}%{|x-9QbrVJYgo%t1@m%}Jv
zeC*43MZMcQz@*U3X+Fx62In*h`qjn8pp2J(U^bJ)$?gWqb5=_;W{kTKbJj0_Ki@B|
zo@J3!ZVVgABK^wQCJs@gneQV}?}y;i6A`;V)xpGcgg88P1{>_KoTFX{vgq8($Cwhh
zQd-bh=tdz7|7U;HZ(qo!Nm%)}$+w{?+w<r~45C|?OaDWWs;CTaUY|iVaA!5(Y3VZ)
z)Ga)BV-t{uNy$fae#VtpC1J3Sk;|~PxqHli^Dpf{#nPU+?$8%nfL51M{d9hjy(vHS
zs3-0v7hye^y&FW*!$6@+kn#FL0QhrDj>1oNt0DK&srr`fuFUp}Oyh(Z*s*S|<z4^$
z^+1e5xL;;@ya&iJ-re)0Q=c!=u1NBD*>NUE(Sw#Bw}hb|O-`$Dh@wz@xb2T>)$E7;
zNz9#UGZh$)*_<W84EF$H5HdR1--e<Bs#_&5fR@D)mtYSw0UTiiaKFvzNYK}(<P`x3
z%aN#I<J>q&=^o$$Y~x?!AW<!<47KoQ3FJOAJVKZ%;AgQs_l(^!y9A88UHrAUA(}X5
z$9pk2I0w;LYoQz*0TpxOsS-|=fL@^S_=NW<Ty)gva|R<J-}SemVyfWY@GjRk2Vrds
z?lJw!p5kv(3Ze8oT189@+yqVhM5ZapABv0D<G9H1Kt4SFmeza{LhEmNOWJl=eC>)m
zFg=7Z$T1m?^lFX`E_?q7WDDt)?R@1HIAFDBm0^Xn5$7|SDoB^mNU?ezn=c2>A&6v2
zt0(7JGj#!OH?gkBmGB`~zP$`}LMvZOy*C>)^ylv}x)!sE2&PXD^e;vdVoH6t)-=f3
z2%amcLx{yx-8<T8_&X`1bSl^LgZi$Vf}tVBBe{WR4Z{u@F9o>wVx>(QIOQko<tL(U
z9`muS8^}CpXy|<qvWjWdSYDLwmIw0vGh7mpuIN?9z8OV2*Q<_VbMZleRB+EjBy2}c
z&f3PEBeA@J$I={K>@yT;1C3Fgw_?=sEp_F{tl?e@K4dEQ1j@f=l|*2JCh+|9_L5jL
z7NY>}qYeGr5Hw?0#J#H^J9S`;90`=^RA|EZv>+16bPA5yF&e*wJjAvCZ~!gTNogWL
zt*$xShz=FS%8T}>S3qcJBb2bB&3{~!j?^|5ksG9*wW7{fPz8~lss!{jmS<#rHVB>$
zPiX40JhB<~567$J2ZyH?Ql^&aU=lfe8V;B4EhqA&i8{!qAV@1KeHrZYZ>A|yWyUg?
z@m`zA5Gm4Px;3NMmGBNNTTvvT&XepMji5b*Xe_LYio|r65-WO{3|K;pEJ>g<B>hCL
zpZ5~Vy|Td8AbNtz8)n|%T}qysRmnm>8)G}M{`={tZOl^F?6TiXL@bu2ZawrPNQ$5n
zZJGjA?_mXEAd#6Y5hP`c^NEh(>e_vx&upM0x>=fg*__f43=q2*wB7W^FxS`Z4Di9x
z9|_#Gbx;IOiy%v?-0FF9eoK8yM1Yg<b3u*cN0O>yU*+%wEVS}d97uUf)WY4KS?*FS
ztuG+1mW5h9RcmR#H?b>b7vje<?c{8^tVY;+?9){6OSoT%$NO~WTU$c=(#^c0U}Dd$
zOu_lk_+(~z^ub<CC`bH>dzT+hzS!F0O_QsqjLcVVu)NjSKH<{>xAwYJ03~2pIV-j3
zwn+xPnXzv%XD^fn;b{Mk@Mi@PX>coi7u{3Jmy6Oa9ZhfmCT+JoSrJC3H49w&)80$f
z+E{;jnXSYDwNs~t2M5?VuMnB3o%?lWpd~|0O^NAcdZrHP6D+_KNF~OasA<;n6~z_0
z>+6dNLw2C6+~+n=jsQO@0WILVnCoyaPde_=J`-)yg`#=!rZ7RRdN!&koNWiLZ)d`>
zb`J;#kB;U``ot(KRN=%@SyX`xyiSPA=;zDk<D;^P#y4*B0v};ku$qObXO35i{@KS>
zdcOm?(xkuqO;<N~ExwOM@BndiSZ<_JF_3;wwYr<re3^O&HVCTp6pkU)mG*$aBsVWY
zu&bh_^b?2L9Rr;~=G4tWLC<0nIsu1*${pdOxg8_SghIn#*fk*?njO!z&QwP>^&TfX
zhS@EiTese^h|+VKz+=!I5VPt-e;s!(>;q1Mm86;fZhP~BGM_c0PNnV?8KWYS>c~ra
zPw249V|s0TR^E#^Y5qWLUtz)~L)dOkE*CDwfFqp&tR!VNH8j^L`<-~~b~p2HS&LgW
z{qacQvGLFiSGWT9**uZYD|4p_L&aaz&AdI5&H9P;(_M5^*GFC+I9g{dIc1<Um(bh6
z`W?Q3LnF)~(^1Aj!dcpc#l?09hIjNjhYT)@u2d)|rH+;DAu%q0kkbL$_`?G_iC|P`
z{M}#9ick;6y#_EU+`gJ0ZlZOqrV*+ii8iC5wGJmcUA8~95`s!nQx?QoyS6#1QW$-2
zX(wBt1D3B3wrNu2(<b{+GBKeVG!AN^9$0X{f9!n`IY5J4IqSuUioV%6+xI;mog$J5
zNbzEP)LivQ>vjP7TOU4(><Eq&CN_xP!)G+@UDoPXjSjPqv*o|*wqWmyFBZ&7crVne
zPStHy!h&61M)-~<mfmL?E`MI%OB3%?DTr{TO#5`Y;fKBoQvur39b?Bpg7y&H_*Q$+
zke0$Pr7W0MJc}zXx|{p*J2F7xRA0(BH1=lf8<?wYuDib(ymb=SK<Pz}+9#Q=iDhl&
z3}AY{fC3)vRh1$Mw<F#0w79fp14;+}rX}fGVt^N3kd(oG1LkK6oZ=Qy;G9u8rZ?fS
zIXFt^dVSPbg^|-dd|)c~K+lvz45<7qDFLQ)p=_)rOA`~K3UF7iR~SWX=8bg;EtJ}e
zroKySfLVW;ojdM>iyT!e;DpdS3CV2lq_q2TFQQC8E!8bq{4<VfWQz@mY1Jh?|JNdE
z*9>+q+=^U)Kg*zEo04giCH-qp>`2HsdEjP}p^v1>Uy*?$QEVT|uXTkx=Ggld3K&V%
z1_*S!xvPsRs#-w2ijXO$n56%`18Ix;6?{p7^CiBG<Q}t4l>|=t+9UhjE661;(O2z3
z2(Hbv0RFxV3572xw1}~Wq7N~ga=rb^9YG<g^@(0}UE-7onnn>un@pq@noUaHqs4<z
z!M3O$bCV|OZcttXD{LB=Nqv;mw}`;_F6OCQjMq>8F_|F`o4)*Cz09}cX<DqBS_fw=
zdAvy-5|~k8Wbh6@J!1J(TAfSX3O!ugB?7nT#S*co@x0PVpIqggz!Fq;dM0{Uo(N+#
zCf`(0yAX8LVSl3Q?2PO#Yo!Woc9~f)1<ok8IZfH2SN5r)q|KKIJNl`s%tUEM?w#Nl
z-5{iy7gs&FJkrot#R4xAVD4=CZwz8Ppv4&|<pJ08ajiM^=c4M-_d{0QauUPBg^BIN
zSi0}CE3@#A@=X{CLAqiSk1=GU|NMHZCjSk(%HTEYUnt_8usf`=r0W#J-3T7cJ6ORw
z3Q7h#6<_xSO$6K1T{v#OwM4mv?HPMJ>{(@Wt(JF2;#dg=_KOk1TM1DSC4a{VihO(B
z{5b78d=%4;>9{uIZU4Z^JAeG`jeJjN@oAFk$x&`2O5|FuDi~*iPjFrqnNSiSZouvB
z^M|tnVUTmIVovI=-T`ODTTpYvvxT%__hIyn&o4GN(Loyo^}Z0zSh<m%#x<)+f%=j?
ze=BvUC|AetYvT<L{-Z<72_#9|(aHF^SS9%YM|liLhJA?EuxDG{kMq~5FEbXLkY)G`
z(7nSPh2a4={)~3aG=PvI0HF*xQ*dilRqM4+XnQ0B#$OPk;yQgTIxCYMFFHtCz%H|v
zrb~HDo2RMK5W0U=CSTv3d$<=w#UYK)F&Lu3;x?e4IPpjPN_te?t~(y;Jm94R6!D%S
z;74uUqROGy>&NX9SAL$m7n(w<VzG5=Cj{)EWy^A)FD5(!SSk)dDu@!_M=V3Bp_8!J
zyY~)&Inw7^%ge=M$ijY#dTN`|kp1+PjmJNCqZRf`x)_;Ey{ZqXv|jitBDRiv-#oUE
zAOURplv9=jnrvnV)91OO!g}o5XT-FBL*tWDV=>wsZGA2tN(Q{7nV`j=aqBzj0bqkm
z5&Gb4lEwevQ%O%2kA+4Ws+VB|Z*nx9*#+2DShkae0Np>asrB~irrhB7Cv$|%Zs^9L
zir^x>WBoPVFefe0t9n$5jwL-;20bs+Jz00chs3u{)-E^rSh591&uj2Il#-?e)=jh3
zzzSn)4cCN*)IST9;UtkVeYAfoj0X0HO&9(m?$B?f@fF>lXC3A*X5zVlyV^_?d1<U@
zm)IRU1zA2B!=7vDy$EnggP^$3hZBfF>*4M_lGEykS<CjnIJG+Sz4akpf&f(#a8v$K
z!n4xilX0|h1%(j{E%w^v<Mmrts8f%x%U9HcRUnMc!$fyDp7zcm3k?Z^O8+jUk}sm{
z%a1%eZ>x${%TqxMjAr2O6GoOR9rwn%y^=k=J>ts{C)TcijPKu(yO{XsZKmdK-(}SA
z!1gG_YWM+yl5}IP!*^{}|Gr2Jhv`wrks75r2e&MS=P)q8H}+28HU+|ky=3{Cq70Wm
z*DmBDRcWHh`^3%TlUh+Rphj@JoP-i#-j)dr7YQ3o#~x(bsYP723=mp0f7513LNZk|
z%{yicN2=8%6a0veg{LHl$*5ATf|`2B?5n*7(ULTEMNh|3YF!(cx1FS6(FIGwJCqnl
zzR;CCnCuwlKRVM}s#hK4N+pxjr3ii7l)LsA`&mL8ZW=?%(LAQ%8s`Imj3A#|qnL{Y
zW+x1jpZk8oogn7A2+@$K@2F#ks;%WzVW&^Vn``2V*e}nnURo5c(OLrm-{PZJa^07#
zxFGTIVAsW6xb5=>ApGd7khtmId~6naK7{f*2a|2_Y{|^sOw7GMepslYVP~;J(rOp>
z{+qDK&kK9j`)KWQsyF9|Ym=B@*WAbmj`0NMum^MT=em4Mt<$L)Po9jg62JazI1Ar7
z7T7UU!8Ez5xbHcVM!c3eU`x0)8)1XG*<n5q{DQFVrX~`Z!*;eB!QXdqk}Z$XokJ#}
zeZmhqaX!EQc%&HYv_lEx#>K!D)$bef->y_~-0!LlQ#q-EUnaQA#Q-zkM$H=xaiG%~
zP!YMz=<YF$v-U0GZ7f~oIp(1f0Lg@?;vl9F-LX(AzDh)$j*KQ5#Ge#fi5<tZ&2|8f
zSI<RV`9PjI{ddBip^}iQNN96?-CI)M%hU<@cW9`({zhrPg_;Fl2Bk@k`-WZVcDNfG
zRam;{#@u#YD8w3vM5@{6C<+C*axXB9d<R2a0@qfQnQD6*ySqv$X1XRbs-jR-a#ovb
zay`y)dwOccR(_r#s`)k6$8O=PkEM5D>wVIB2Na`>)ILk#awV@UV62yQ$M+ytl+=E{
zz^QMcij#Xz_%=_rt`E{f4XM8su0?)JQv4}|@Vzl-Csf)Q-V*%s23Ka}m0d;KqEw%v
zeJty2YmLZS@||K`;FB=Ze!<?IAKQzVW0JcHMBw_8>fCn-14Xd2QTgl23;0*XRH#}x
zAP=BARE$2vC;BnvQ_Bu1++MAqsStIUW%ikNk0=wy4J<_{PD7J@-?Dl9qaFa%ZU!Au
zT&RF~uN{1B`+`TGp-2Z9M);Y>Wdhhh(OJ@Mij5(=816CV#mR*nzy<j(<HO8(RE6M)
zxClwh73siZ_=)IyyL3H>BsN`*y4&%*iJAM*y*aYr`;aLZbsnQ>oaJ4>2u__WYlICx
zl^l9?e%)+lzVGjx##>;-fxftx(TJ2=W4{mF&!vSws9L}5<+VFD7(W1KsDb1YVDuQ2
zQdY8LZ*VPx8NwbS_!#3=2Tg(l+%9meQ>$%6)yDDHd#)uOFKWe>_jUW4g;g9x@UJc_
z;k8Ww-f2fc7e@7F2gWd&>}NUl)hgMUY7QTU{(8EUwqYdRm{@)GmsabaPauh6O_Fs6
z{i!2a{XZ}_0u(4#pJUf4uTwp2O3|Gh0UP85_wsZ3DMcU3acD$3iHT*Vu@`^{Ureb=
z-`(^C0}%Jl_ey-J1fx*^0)~DT!;>YG9%HV|tm**zmYihzpK^Crf=HqomR8}E#gzpU
z*CM_%{r%W|Kk=V$>LcBmO#4-HsL*%C&SecXTu+<WJEc7#AUen2Tmf05T^}0+x;=~d
zr#o&S`6+FN*RjE!d9^uKX9zlOmxCplB6~77RFI%9q{B~}rnU55M*tz;8A$!r9`cs?
zvnO{a&t<P+$hTUPkFa9xh=*9ZfSb;+GFs-_a2IwtK&QX6c6t(YOGHE|TrZo2R9OXV
zfpE{j9Snv?AQ?3BC(9YX+yD#daLdALlCZ;7^g412PKA*}tSXV<iL6Ie;bJ-$NI7Tq
zd+$8F>*{-B*XU50mXukY7@^HM^Hn#{oOdvl^~e?<!a~mPrG&oqP;`HXK@NFLuT{@a
zqyMtP3(0{hu<4WxEX*n?=aO(3H;I^M7MgqYz!-NUVN1H3P6Ux{CLxC<yoGGhb8>ag
zRd)OL$_E^v!c-jTeVMb4N)5<tkrS4s?6L(%)sLW^-91X<z_*{BM|hXxIV@TByx_1v
zx0I+_9%z>of_Xmg_rkb3>na|m<>*<xxJA3%u4w@UZ^t%VMiaF&mwp!@IeqSv8ON01
zfF)Ck!2U^y-}DLkq0wo7J%Lb;#f^vHGR)idcdga8EE5KD>CJ@XsL0GU;Px!2UqV7V
zQ@?$FVFkg|TMG4*6f{BdiLP0>%Uud8cz<fEac3Q90c*^$<n^y=cK*6xgdr_6g({od
zN0Womnm~?o$_O>QMHfjlz%C%x^eDDnzE0$qsF?Ob-ye(;An8=D<9y_@Y8JpeAVs+)
zD>(3Nk0IzKtoCG5fZZ;YFp=yK!uX`f!LfyoEF3c{DL6SgFjR~(iJ*EP>$aGnoR#t&
z!8$QYc=y~%UWK2ieF3Vo0XQ)?h;1K)b}+(n(*o`OvNR_pYy{p17!!uCtI)W7aVd?Z
zTL%sr#E}ONN=gn!tR7V@Oa60<CcO6-|3R3|p0TmYe>zu!5$5q_HnvM{PsJ=)QwQ4v
zu?z%}A-d{B)b~le_tZHimaapT@$IQ0E2bftm*VOwQr&WuW>yB_Ooal~aFPtbrEKi>
z5-z&Jb$B`1%GN3h19^I7H_$t1;JUq?KRClTM$^(^&}G&P6NaF&_fDA_#|rr19E0<Z
zyY>FzAb!o7J7}m?Oj6{@3MuqwAS#Bf5r2P^{f&L5V!-!SCOGPI;?~hzGrNZQ$i}3G
zH}dKQ?B8N#2Ydx&%orb?^;P7dW24d6@A%TSj9B14BBO%uzGLVZ3PvyIXviky&Wb?!
zt=LUu9c|3WRTvbk9IvOOTN4fs&b}|ATduBbEEl(f-49Hx+G0{SW}#!*p6l{bDR4P9
zhf$!$Yhu3uj1d2)l&QHZ^h`~23A=J~>NuOOHDOxswaALMqnV3U$NbhCld;^ti^(g2
zB^(*AIe9&T-Rj3luJo<l!fti(Q`_a+_U9te!VbYxozQ=M>kZx3GMhO8D`DTPGAJKJ
z#~08$KV6AnO2C|sPNkU`GrShqq6;dB*mu=W_$5yy1hM;Q17u}~#A||%WUO)%|GDm$
z3$xjq;BF2$_h>3x8@$x{qI{b?`8df?&#YpGTkI4Oo?|~kuV8SOkb;(=niHlYjnlXN
z`&yUL=aZLpMsY(KWO<wHcL=Tg^c^w<bo~ES`o+SUIf8Qf3h4xdAT5%*<JHKZ&X={c
z{PByh^AKtS{K=hStIs#5?i&MEh%HErXwl_*!bgZCHjD+zaXL;bo!42ce*0%0-Obi-
ze)cZp^NjnQHRj~sDa5PWNH9M7oMn|jOd;W?rH}+v`qc_YcX@Mf&QgSZX8-4erL*;6
z6pLG~!@1SNgO@p$jv<K|=RMTFp_7jqpc^9BC`ik}l2@WmHP<43SDs8+@7*uKI`OJ4
z!@`8vCI!Y1^E@=qOfrK4WLw!iC_?9zIYWdog~rB{cHRKVtW9qA#TuzXl0zv`g{GW7
zYr+!8<lZ)`$5EsT&aSXH8|ly3f6B|DSj33@5bMfO#Z8Ra#q#uQdwm2nUT{AX6`K!P
z_F@5U^v8-TI~=Da2VmC149dq4RrxT-y<80_5BtoMMf$v+f0ia0!6_C(kFyYwZI`<@
zJfB8)%N~i$1f152pkyA(ILv;?M9g}sMTLHnA2EvbOoAkRKE+D)u4sC;hbv271vO(~
zhbnI(vVbbFiG*>gA%vqxGQ<(VtaYarUwdF}@<)9s*2CeI=eXXLnDdS8t0i9=DMVPz
zBDALQ2%5=F5OBoXCv<!F<|Y*oA5r=HV>NOlaxbwcVLgg(-<HJe;>ZoMM52D4eNF;2
zsuV6Cm1&RJsM6AONI$ji(vH~;ZDD}3UW4VR=Gp}8uBLZ_p^9m>ruhP-L8ZRXyhJUR
zmGbyXV@OP`fBZ{!6s?<}D-Ga;S3$pZ0p7dl73pF|IrM%xPiR%VHREd;P-XRO;?tO9
zCC`ub6Gt<w`&|B~PGS59I|Ac8&K{aygTOL{`yNyK3dMG5!h{_9l_6zT0r<xgix;-E
zNd5VrHqFp>>vQ|XoGIq@hZy!u%ExsfPra{+M&`)0>Po+@fqLws^^9DdTW*M8lS3Ka
zIEGaN0c&d}T91{h907>E_;27}yMtqT<4`XkTnVKfW=FVnT*0}LAT3v#?)(fWe|ngV
zS5?vVdZir7X0bii=<BO|-%C{dxmS@KyUl?hG|~Zgc^`6;d{1msrf?aO#?42k=WS<j
z{ZIk%YU$>UBpLd{S&Qe`YThxSQkq9LZ&s?XP!wm5sU`JKjM&pMZCc_Fmm64ov~T>v
ztXjI<#pN--Ax#HGERpG7cm%{oABo>Aod7LA&K&e0+a@*}Dl7zLqT)4~Ne8ZJFMNrl
zV=FH=<FqK<0i$B@-*#OARv7{|V{Bn@iYT51o(e*0tXwX&cwYz&IzQ-DGt$wGWrB>;
zAjbf<Lv<|!0)O*l+aZ9pXc}iu!kXh0=O3nG5nKZ!!=qe!OzfZhvr#^Ce5#VbegeAk
zN`QK4A}7Nu^h9Cowmg4=T>f`Sa50tLOXo}`soIm72~3I;KJ0W;tVc{=Fa0~GjTE$g
zk-}-nrNl`GQRg)IUxd7Cp9C|{t|!ZFwikQqd97i1gF1^^@-9c*$OchJZV#!8>pzib
z8w?j|5T?#WqHbe_;qXq*sU)}I9j7&6v2X>!+3*)8V~s-3c1IN-!cTc#XW_mGa)Hb?
za@IGPPI+Ru5pa@;8Z{qBW_|DT+pln?kidTj=cjt`Psa%Iv)P^1h$H)#2djf;s{Dwy
zYn#A~m;cxYOH%?#x(gE?2s{1!4qPAw5(G=w2(s8unZjlflb8r8EnsF$bC5*JppQ$j
zFus>D!lP`JvBPBdhsJBq4a7h!tTTvalTo`na~rB)6k;b#W_r(;z&`_K{iC&~G>N`j
zzy5Mh69}T*#hMAelQ|-f&}wSbX>%s2S)u7eJhbWI!_V))l+sj1tyPXGfCM0q%;35l
z``Oq$j}n7VdXQXOyO*~%d4ypa!ThR}%#CsquM^E<&*D3s^Ur-uiptCmBLI^xdIK4i
zWga`MZN1@4y=aH$ra*&WkF0AM-TShXcDJ`*KVkd)i8!WQwD9p&ULQn(%6c4{TK(Zk
zz4mdO<xhc^MQjFa9FDzg5{E<Ld?*t9X9T%}XH%>M=55>t-#GwI)_mK)Ls;fn@U3hj
zwk4p-TD5zi>tzJP9f*R9xhjPZnf7}ofa;SEc*8n2*peCJYiActA2;xuw0$zd=$-}t
zm2(N|fKSr+xUaX?GS+^_BB0PU2gSY$G8qPYD@Y#xh94i~$CWE0)}BrWpk0{geQ$S}
z57<Z1ri{-KW4PWk7)h<`upH@1yNbZTueD@r^~dmaT1|LqOvS57jwp7p3UbuLxd*dn
z67h~RE`n`huJuBZz$7P#4!cnwhqo*$T6SM<pXQRXWfxd#UUh;p?DT9dR<xPgGusT{
zoBPy>&=F}W4IX76V*$tkc&B~000_o$bIaU+Cw3@kfH$*1t{MQK6BNrtG=Ve=vh_<8
zH;fUU@da5XF5|t?RkQadKy4cw{M8D4ux;<$EL1u})<w;dz#(Y*cLS2m8Q24u367)F
zGLBUh<y`HW0MMVWz6-JkboX!D?}4cPdXvT*aR86A9o1nS1Fw9T>yxP=cSCyUi8BPa
zLE$&8;Wj_}Vx>m{q@sWb8E*1RG~3^ts_Ijx(^|!15{HrMuyMNUavMK$`r)uEjz9+n
zP8MIm>uqSsz+KO=D-Jetpks8qCE<mQ24YJb4<t%`jkOORo5Xu^%HT7HO|5scnhsDb
ztW;`t(yGpo1crA`>!R`99Bu@HO6s_RnZGOi(iDq6RDV%Q_ys!dK)-uC_N5TFCi{qS
zdOOHUA;}ewE*FG5#ea(b;!%`ty3e3B?>bA`$$r%33|Q%9bPsBmZ0C;d&cA^6(=I$D
z`mS_MVWbEFiAf(3#!MM?H7J-<CHzWdt6qsbFxp8-(>f>eti_%77l>bb+~)P_#bGBY
z7K`5pxlTm@X%Q>^hN6?{F&?!!<>wY{QEdP?0LSxp2MAA`i|H9^@yA5#{y|H_`Gb5C
z<+3E^j?}C*rfnu+hA>w2Md;vxVfFST&w_`t`V^oqdG#Uc&s_IKddRQ>`dZU^0x7uz
z`wB^%5h8qWCvf8SdtRf<Jg;!-0$fhhGyN_d{(A0{dBnF~T$IG7sB&&*6<j`woe-C!
zY{-n=qbQ&KG1-SJjfAs$5FB(fep*ZlaV^HsKd99;rAg@$X1}Rk?RStCfZhundwJqb
zKFGrv1~fO;dA>!Y)%VECFU=i<6?88p1hzxAsQMR5fE_il%5nehY8N4W>7}6utw-wN
zAvf>o%JooEcvzwtBfn1!F>eAey<o(XiPaA~e~#~E5)+-Cda!@gNo5VpWp9Rn>kPfd
z)dq5@?6;Uk3~^GaE^DMR!I`L+S!#n=b;D<qF6|Us-4Q?1XkHzK1`@B!VRFbaJAI!D
zsPs#({fNi7Vr=VM1Jst~{E^C7TAB>`a!HsK|M(k5FAP-z-B}w_lD2ftbvkfp7IHEi
z(k%uHK2z~Bx)#dvntBs?jjX^<p<=P8+C`mJngLofq1}^|@flw|1azv%qqT;$N5TP6
zmx%*@SIlh6nlW{hMh2iwd|f=vHzabvL7<bCVv*<y+M*0s@aqbL5BfBXYWxI|tNm!Y
zbNzOvb9Ei#T{cy&BuYta_sddLP_8d#80ybLE(Q@6inJrfN@ugzqax`kR4$hPdt?L;
zJE6jZE+_Io9}Hq&u|P1FZ<%+=!P=MQ?r<zqGty9(H#mm*Lbg?^8#Q`Q*BDYBLvItN
z814kid~N$dKTAyJ?Oh4ilEK8K=oJ`*6cu+uoH_T6awlVY>MG%(orBC^LqrtqFw9|7
zmqSmTqo@}5l_6e4V?zF^Ww#_=>3IjK24(2dY*wWH<KVBaT}uNo6P?S)8*k^n@jUF8
zUa-=?|6FTxR9T=zW8fnZCDeal#1&|3k4#fOnXtBe_ud6l#1)AdE!~4^xxnMx;1$MX
z7WBcn^46N)H2%O>y2SU!#Fr1`9;FUfHV538&6b2UX1IrzWcrwCT{0Q(Pm+&QDLvGW
zsSQZD;V_{a0<jor`#w)zD*dK9*gkPs@;P?6PO4jRV3u*M3d|}<g}iWDr*^vJ)fyt4
zOnKklwJL7jeBy6hB7@pO=skp~D2X`r2zKGSE`Ij6v}PN?EHRR9+e>J3lSi=l+&M*H
z-D_;+@HxZRrPe&FovsUPlkmZP{%myDLhn~6x~50iAkVUv(dWsjjoGZ^Yfht_7WayP
zM!9u7ENWR|F7N&nH*2IHENRcm4uSW)Dh)u7fo4*<^l0Uz(wCP4j*@&WQgc(rUr`mS
z&EW$EL6X(jRA~vccc54H$lWr^mUy?l8E>%Vg3&I#B|38SXQO<BJs<{I{FF-+K-SoW
zxQL|5_>*m7Q!J7l6wdTgd~;fpmDhGV0OJwy`M@~LD=HL9kR`^H?=SPFr>gb+c|90#
zJ=r>#_txP)@>WAXB?tI|Mh1~?L8OVy!Do9<B`GtdAKVfjP}4MniAcbvyU-daxB^W=
z4oxCXbj!3=3wsES)B}9rsVsyER9!^`I>&>lFOl=+@04k7@BNet;(z!ASi&-^rsw(q
z<oGz>nk-Mlbd|%-atdZLmXMh<KPqK+Vj~cIEno0xY5U?y?JTlEF8MfqvSxrNOPU_F
z!Y5m*9&<?ZP)W*;dO}Y!jih6xZd_|iBmekpIH1)e%y6@rWN^>WoBR&V?Z9c3G<myg
zj=n$b$5&8~zCvP=P63@$Bx2YUu!zC3_uCfqc=o>9LOTB9(-V|8<G3edPnA7Sk3OkS
zw=ll{L8}G&-AyH<<gq0>-C0es1GSUH6t;J1Mo`dN@AZlv+Ahqx39aObUuwrhVcy`V
zh)DGavcjmbLD2GPkNMj`J{7qRsm28nbP!R~iWlOmC?zzYI0#EanJ+DkhMz2Vlx<So
zciknQ;)MHFTW7pgNeS{e)gUlt$v^ZJIgZx#S%$<Z$C3JhZNU0l9r$tTYM=d;NSMd4
zVORgA&Go-CTfmTjEdO0hCz4#>rk3f*5#YIZPwhod%~=#8nebb+*G=-b3gsM`w`b88
zk3!yxF13`1f~&e#$6mBu6>0d#;LR-;7!=^a8I#n3(Js(g;@O!jCJjXY`@In#JagtN
zSl;F-L11c*l0efTSIwUgtAIS^C&xWC^DSub6!t`x$zBFPBQsuk<YrSJ?tMEIuW+{Q
zePQzk#U&?VTLa`pa>o0y-X2E{dbWG=P?<~nm$>RcsR|`S&j}BIw_YRal{!&q9C&-H
z6HsZ#2|Q-1M94fofXOSsiGOwX2JSKqCQb>c1Y6yi4m!df(kAP(BMha`47`{Y`>;=@
zY|%eu#|5i8a$7_wLhC?KsSBs0_g<mI9UB+)hAgUc7^r^szk*Jw|Ax{3N95yws?GjW
zZT8<(n?>1D8RQoatY)U}Y-QUe)oazQp;u4J+7SDn15yI0>L{73WwUu|7n0USRv@?|
zOQSFaS^Mw+XhYR;kl&k?@tj6LXf3-%DhH!M=Ot(4I}gi|5hqYSV+b%mxlv}Rz-6NT
zb+VFL$Y|%ZdC3^c>M%HcrtXN~ZSH4H@(5j$XS0n453NM@`U%zASVWG_B@vE9<W4(9
zoJ$+QnSWO7RSDe~A$kdZ)Cg%J+(NGit^p||p{1<Qw*bbyBAwm=dpBNI7qQ(NGD=-j
zHt2`Dn!H<_fik1aW}Sui?(X_63M5rwwr^XCFg;Ra^qED*J$&$|={C>SDtCQ#!sLXr
z;{Wddm3u>j81rn51@5%G11T9HRY(NbQjU&oJ@CIMiL3!h3?6FJF0KR5gOdFd`H<g0
z>H=1|+Z}x>1A+3)@rrI{`;C|?hq_Yt165IKoV-4D-DzdF-1kp{%*za2`qQ7kQBl7U
zb@`{Ce4$$fvx0nQt9aJIPM}i`=A_g%MV3FuiHI0R>&mN&y=kL)NlkgTli#y>p|<&3
zI1?OYG~8V+j8A#{vYlIqhL9gm^3bU;`$j@(;+nKJs&I!L^>wWR)o3zT4@Gn*3p5kS
zux&sybE_O}c>o!9{jw>H8PmuoDZ2fg&Ncq7mxFbj?e{o=$dE|8axZf=$stT6Z)U7Y
z3-8BuNYi=VA*^W*?Gth4h1R|L&y*3^s=El@U~we&-X@ON0RrG%g9Nb$ACfqf8=gvq
zF7k>OcP~h%(yLzlmm1AX<Nr+GZy`ri3R2-nNkq5+Y{Cnmhc!~h*3@O+TF>#ld4+!#
z(fF+MFA8O;JbzwRKJ>r4NTLi?eK4(5j+q|sMa<I;=cnCqsaK<3J=fsvgoCb;ei-{3
zX#*X#hrPd31068gUNh0^#w@dNFWLaDXx+9iZj3Fei*92dZ3}qaQ&KIzt=Pv&Q$+z3
zlm3{^4%dcrzLuX5fS~Ra-#P=6L7?ZDCC_$Yh+{rQ{}0~IsY|pr=&o(swr$(CZQHhO
z+qSz;+qP}n%sWQD+$MMV5qpn%YOR{nRUGkrheNWC&YiJ>yj|6AJ4>mFR_vOq6nYY7
z_quD}4$@0@$q6#oY0s-?*tU%8p0o~O7u{wg?br;L!kO5B_18Z^&&}P7?PYZi4av);
zpV=F^-?LD=CFhR?vp1GA{Ye?YnUtWoPVIV<aj;xB%8EV=n*t4%AgwPY@AhrVqA5Js
z$b@v$Np08O4fu#bVl~<Dsv@sVJx4T57tQ3zG$;8rStzZ{dFF=Cn1szRgDHt`A`fsD
z^_mJ}6NgZIKT66WsRnEU;2`NmwM1&|%lS^LF;5G3mH87{q>91D3e>1n|8ut@gwPtl
zNjS%xtYrCebx*8L?!{rf<EMa~xFI<#%7?5d#mPpF5h+&j9m<##>))COk2NGx0!nTQ
z*|o6L?^z4CyR_H>$JpsN0a0kV%|?fDfZ<;vY%&kFWX#Kp2Z{;ZL?5Hiz-b0rW5i>T
zBfefCpoWZ(zfr&JVv6=4fJ~p7Vbn0XOQ~2)#0xy>#*G~P<T?U~EiDSzeK@@mo3|!w
z04|KNU|G4~Mtl?(9)$flno_FI%~v*0cN%}0z785@@GmCf)q7uXFSsvT^H5-~2P%FM
z?Xu7hu}18&hNkY%YuA}M)y8`D#h=h0tc;`IU0~Vq*s#ukSJEE{3|`=~4ZHfnn>3t(
z!cKN)_P}%{<muxQISV1M_FLl@zPXNQTkoCC)kTp7Y1L=+cWE31(ANt&lH|PbQLLHJ
zdH;@gVY4T^p5d^l`0N7b>;XcV{DD^(z{ac5$Qx3zEkXCth~#PHN8etrcB4pyaYJeG
zE4N8GlCWn6Iyape@XMq%VNSUeQIAqMvC{1<SxSuEuz1^5r@&CD1RU67_I!%AA>2=Z
zmLB4Kqyf^`qw8ny<(HMo5N`%UEadGY<!2p49u0*TcNc^|+&d_7&GSU>ZX*{{okA8A
zFHkA!(v9YLd~|X;{vW1OdZUzl{nZ5E)wAD!T|a4)-?w|HbQDRav0$21pl4uSTuSV$
z-4{>+<uDdbS;n}e8iAK-EtlUW8qsps7wdGNABCY>Iw@qFV}GpWgeH2U=nufAjNe$t
za#TRtX@y9Iqbm^F<l$>IdiM3SgP4m%oTWu2@E_yxI>%cg##l{CT;O-yXy1)>!)e&|
zzc+G0@*^KNyQYNj%3B;E7}dLX4d~6F!^ZzJK;p>(hyGs%$XNfVAPcRdGaS$LnwZLc
zhRYov3i8cO&XovLF$djd;inlhkSjggG+PqFiH5I7?kix#1!)kgYdWzO{3fUJAlQG4
zmCNQzHyTjYt~Xf;$y&lqWkH*qu3x=U5te-e)4Ek_Y-)HnG;`#yFH<EFz)2_nnRcH@
z+}qs};NJR&S@iId*WwIFFas=^cwa0-fqaQJX2PWushcjiA=uzhv5839A;f*i0hUkU
zbc=6_Or`i49Q^%+^#9A!La^Z2rajwc_|j*LCoce@zQkgfqaa`oj~{bC4(oA=QCA*i
zHq!@s3Rx(M18+>YCZj?Ew60ePTvw2x5B;;JnXR#9_{|!9DRp48Mw9G-RU~lBN+Rua
z_&Asa!LiRp^$EF!PKl-%My|y?R9kT(*wRPrVa01|qCFqJ(u^O~#JdAeIj&Z)3Jp3F
zgfi=j9)T@G2=DQ*+kEoH6fITOTX>YAjKd!Sz3-P}_Cvwpz4lNh4_fO8wbgCGU);@N
z(2P7C1o{32s45bCT&E%5&MjX^#wRyVvZ?k=-F(lVAL<O!GzB1dN-<_Eb7Bac^nh?C
zfYz21nW$O&Q1R-?C|mvk#K8z_(`29Hp%i|b5?(VtLY?(~oG&?LncaF;=K;<!e&y}x
zY_&3_(_dI{8l+S`I7I!UPSx~X>4{p*`}f7K=u+B%@pD-tET!|Y-oyFe1QTx+d5Ej`
z8G2_IL{afuAlth44-(#t*dBrKl+=%BjQtpA;wa=IChyuG$dE%s!k=Yn<o<hV`A<Hp
z)2!hq)~n&amHF1JE`uuN@QoUS8E5gB5u{a|#w?RXZi*~ugPdzOdKDnF(t(<NWUOca
zzkQOb#@k@dCU1BLlmBF|Oa{e4=0r*p08}dBIR-E$^c@9pVz{X*1W~|OldAE}VGLxr
zx0TH&J2jGy=YJ7}aZA!U6N>wW?VixWl6fgUs08mXnij4`X#4F#?Yajs)uWuc{XQQ{
zL6%t0Tg!C_OQ#+@+rw2ek><+J0>9^ng)x?c&2r2i-|Wd)wsKh)>5E+MWfZK|wOsbx
zL0R`?9JU?1dU6%hj<u=sZH-n0zz@Q3%Ig;<kw<&o;26!Z*>)hGa;^Om!)s<KQ9F^?
z%96l{_i*}8p5B#*WEiqftrd)RyIk`2tkEoW{QrEB2gJTm-T(VRf*)}5Z@cnHL!Nj{
z-?qS$29N2C%iNXilPz){y@1VuiXC9`KaFKICqL9Xqdxi7J$of4F)yfVt^1;WB!_<)
zdv_|~=Q^WMZ1W1k<ar&%fsVJ!OIz4sO?g}-0Iyrn$r5L}#ma&S{mZHou`^K4#EGly
z^i(%$RIl~f%!kRwWcGh$4ZgLM6qWvZEZNSF__9iUymYa&71lw>yMGE|p!4w4IUs>3
zC4)MWJ>E)VtYk=tpPZa^XvBkKGD?GGTgwD38iGl?z!^)M?*CQ0B&m;+#&VT{4Gzz>
z%ZWe6YARQ6Qc8g-Ka{2HU@%%+aDavoHWnq2{&qP}!Kx@_75E<)^;%@OJmpszE(`U|
zf6h(<qrAyL>MhAASN<5-bldm&xsLaey`T7?-q--hvRh)4#AfI;=_>x5#5<vLs*?xu
zRW`&7pmA?bWb%tM+msai4fG5!U+|Eg4mJCLnflS|#=UR!a@S0!a$wZw&ra@zpYi!6
zl+8aFnq%|KfqjJWf0YQxJ2%n+w>c~bcY;o2)V0MZP~_&-Vh2Ng+qeT@(f7Ie^|0<j
zUi{&{|FGKeQQ}QL%%jM?uT^pg#1Lnt)8}}UmU$&<6fa`29F7*Kt+K}4VL>ZFj#%wy
zjk(D@n{)!m53S1pV4HT8Ta0JTC%gbHv1%u}R{p&S`SJ2+&G^x=DkgSAIzNP~Yu79s
zx3TMODY~gdhv%(YWsWP#>#e65Pv_7I)y;W6cXCK*kEmC`e&?Opn1SBGVI5pj%Q~gP
zpV3=?n+Ea^&4&C&4`2i5X3s2T06ih`r@S*g&woQan!@cjzkpJdiLw|@$az9VV+5xk
zIuKnYN`q%LZyWqbqCP__AXF4e%i7?@l$=h5`>U&wd4;pRM9>fws!#>szABA#-g8>1
zdc{BXS>3ZSFDArLG1jf<OU;#Oa}J}8u@kY=?A5i78d~QBa<-isWE=G!3r?8=9OA<c
zHWkbP2qu@5$th)#mz~)ae#hH)T!(t^e}S^3B}cTtc|EpE4aXwFVS6IJCFgcVZZ@xK
z$i53#+<joulC5Q!GfGQyvbYqJN$rWH`89MX-6|O78}uF65~AVGC8u41kVE_z5704Z
z!t$SyVtG4&I?{WovzGEc4uj!1M5e&-p%|r~oK4*Ao7nEi*xuu?1nerZ1mK)}^PoJH
zDV!%$Z))Oe+WQ5*f3I5ABqMwCTmu>g1%I(euxv5B9=w+v6E@FX`WP~7mMHc!`c51<
zD8bu&iwt$f9`?Uv()}Y~v?}!wAzLtLGtcwj{!c;ky;y!_PT)#&RYAJtF<A`o)^4Mi
z=y6`SU@Hu})i&~azNy-`%&8d3leJlo1BF4Lma?)dcVNK<l-5G3+4LyAQAri!c5l=j
zsTNqRA>82LPZncbnTj`Y6BQ$Ju8ZuPuDzJn*c~(T74vc+iXb<`WZ8aC&sWY<)3Zy%
zamr+@`^SYc^lcb;ycm}>V+M{GrlN}&w;5DX4v9|xxuY|DR*0r$7dzz|WSyT_NjPMB
zd{TW|3rj`mYh|ZDuPWaMT*~j-e(P6o=+j3FbgHGAFpQLcW}2Zw8wv9xMJ1xR;jrMi
zPQBomxjHHBX2Lgb%9DLPwc4QF7#(by6k&+tLe-wFKW5GqlZ%!*2(RSg5Rj+Hrcy-F
zPg<aYDCKkqP-%3e5?2E+a!rrz)dcw=?<f*tF<ZY-R|xntR@<}RW*|PEf(#NG^Kli!
zyl1CB!|WjOP`Vn2iZIWzxI=j=jPn+a8S$xfz2xllGcH$vJKtke_V2f`@OKtRJ`E^|
z)7a!Nhb|r?V&e`h;?JOy*qMDS$PNJZ6a%Q|j>Qn`B2Ev){6I2G(t25+7sc8xMh*=Q
zu7b`Su{56sYp<xCbjoF17+4Kx+U1Tt&EnP$JwO3I`NF;Mz+NHfN-iWmDLGJL+8=YO
z6(^mL9j|y7Db}vK*>TLY3^*e<X^0OPiF1Aat}F44H90w3fd1iCIc$^<-gA8cw10Rc
zv_|ggS4(1*TT=o3OjJWN6sIc2*U3UNlth9l8nxzk5*nuu<MehBAY*L+aPw(=*1wk*
z1d|G!byz3ALX6#HsoQKbTIoq-v3Cw$vT1qa?b966Xoao(Fy}h>l~AKBT=V&j!gLZq
zyYwi%<kwba7+`S9r*+>Crjb>kup<3fmSXG5?s?ZJWd1V^Rka7{vT$Xj@S?&eZlHk|
zo`%6@uFsOl!vCSZq5f5o;nlJz)?hd3KHLKc#|9KMsC>;LTB~*7a(#G0>O$;1N|?tC
zN@`4R%?`d|`M-=@0tcS~c#Wa^=BKAZPP`qr6TUu-&Il&j?l6NW`Dx)}_;)f|uqB7e
znUwh4hsGnm&-hYb5ffah>1EI9Q~kQ>CtnHXA0<*qq~PCR29;H^h-mA-ti7pXd0;%u
zGHeo{;LN0lL6>OqCx{=k7t4=*jMXGDopV#R7_l9K1-yo0+6Z%$U1UgNCZGWFdMRV)
z*S%y|zT0{G1_rseY*Qjp1P7o)3OJ<C)}Zh6HtE|V%ZfxSDqhbb>UXud@7_8Ph9wpL
zr_Lt?>vF1=_cx8H`?Y5p&zp^GyD8dNn{bdOUKW=A2BdS)Z>H&Ny0Eb2WTtpV__^<@
z<=cyi4gY{cSn=DNO)qGTwnQYX0NUkeQfS$2rsw6<Ej8GYKHE^-hGi&(o(dbUm&PIS
z)uKy5yVp&28l|fQBeCOmd_Fm|Ls+-g3sDWnm(;c%uyt6h63%U@FN$#VCb8ZJ?P(<d
zvkWj(lA%Ot@ztGmbH+Re)UWNQ&!KD@0v?;tdo|n!8=x$L_F=&fM8vH~0>B=)xR|*k
zxzFJB0>&bYU$J2AWgsJeGKm_Ffk-qmG=o9rSlo%`I5+g{l%^C1^VU%sg*Xkv-aP#6
za9b2^tqo4j79y4o1|7~#=qj%J^!zp{k{}>-w~^9MEFKyv-3jT>K^Kg^6XgcF{$VPQ
zw}_Q67iY+PX45c`dH`9-=N$To6(nN5DEnK(LfAIKxMae|n~2llHsKe#gFg9<xmi(m
z8_5}=K!Fj>t=KU6))`CC5Tq9OH$+;_UAttE((R^Y{&G3w!NhpAG-7SJ)wO%@&Sq{t
zFG0bp8c2q29>_l?QK8h<#weq*|4>+K=1NLX@`;Y`oq$g!&SCwVvn#4U_PjD_N%L`%
zIC4`(Bb1Qa86s-O?Jn#i=++c={APBYioGGTVV)+gtwWiRZ<@jLl|hkQIyk%J){Mt#
zRWsaj0-bTc-$-3bBE=;ueWK70W2IUIjviJ)yd|$pQh-_{^1|n$Wc`MhYvt0KbGT{+
zpC|`=qqOq@cE_!7T|o47N2U6aMnZ*wi=?!jew6BgcG#8nU;Sn1wq|Yw$NY{SOdCf1
zy$y%GVSH?1T?5yU>^hGB38DL;8^Co+hZXOvF7&D&b(yjRM+~Nhcf60&a4Ds6qYDq-
z95TkRcTWTvRcYaUqLluq&OMWF>7Pg^EG3zh5oW^#I+5m%$AV=Mo(B9}ttUF_M>Eth
zIxZSj`@P~S&DWxSF3#s;cMIc3>-_#ZjK0`*@v%P!Y>e%GfLN+qLSxY{HmZlGOq~2H
zF4ZYvgUor-(X@uy9JYWVQ?&ut8#{S;x1R-R{2zkYSze8z>Hnw2`u`g#pr>_4m+^T^
zJ6zBT!H3YG@L>ytuj;{l=^VP8D8@p}Vy#u>yvxJ_GJ&xoc;>!QsQfW+O-N`?MBPxL
z=5}VyuCdcKlGMdZP3f%{_aaZ5<=?S1i$JF9O1sn!_}BIGIv}aYun#&oNF;qFFNbR}
zg!Md1xcvUk3#@^fvc`rDYh#y$WNxHzh|&H%R>`-CN)hWc<NMjLpWhsx=7~>P`SR{b
z;K%B1AQHQIZGErG2V!E3S$dI_6%lMt|HNxuOoB%cYbuS3*1sJ`ft}S~j159*s!Vn{
zWaxEmUn&5$0QUF(mzs&+0EHU!1vb1$y))KQ*!26-9C^0{ZR{qO($?v-9g@(;dQP7O
zZ^U4wmxPL3oquv`hwHJa6?w(WuV?%(&Tq9y<!Y3m8=Hq@ku+^dPQR+Y-${SGTB$V^
z5!_~EoV6ueK!LOznLP@=cv_&=Pi?0gH9*z`S>OjD59x0mL4<9Q?pzh8$G*0V0stek
zD-d3H2FVV+354T@aU*~Q7`c8UP_I8(`4^Rx;X3)t<JgT4#;z7`$R?Gr#fT_BfS6NV
zIqpwFfcdGa^1OqY=ar&98j0co;xlThRfgpH$#Un1H!@*)pqA^KN8lMZZH$b<)T=i{
zzGf@dV-EyHY~1<I8axP)09MPy^|<F$-S6ZwUlmVUG(lpF3d&G!4L}(hR9f<ph9_Vv
zBRfXYDwM0msaz&thAI)4iL@@~RPdd>?T9OM5Zg@?DmcU9qPcoqp0Yr+n{hZ@=meg_
z$;=~EO!bAS2pb=`+t-@RUJ2i~Z>VL7@WHU_u@?RbGuf?vdq}}HuMWBE5?m>|`&+(t
z<dj77Kj~?E08~e0D{H-2V%-4nCk_~1GKjj0UzZqE$=X(%QTm2T#=ZGiWIeAUr9_as
zE26|{+fEE#+VYqe<#eo}B;=*01JHBi)^$gnNww;15s4#2hfMW<l*+}X6Z)UunUFsY
z62p;}B^a6f(8x(g(W`LIl#jl?2qyc-H7aZQsRAVd2xG6k^e+k){g0A<g|#=<D_1fe
z*crG)=!c;ngyVXRSoohwEf_n@$l^#t_P`z5*_!BjchzX;#lY3645h#~fl#A-(e!{`
zmEVhhlUZW}l;s>Ti$%weqFj8?Zb@SVn8f$)c;95JeL*S0z@UFJ7n=q%#^XIE2^KZt
zmT((IJq6#a010s|#J;ngvBF}z0oFggzr!`kW3}3^yBFmytiz>{2bb4#){36E$EJ>2
z5-;;yk4IfnyQg%bXDC?An0|ZiZNv{2yT*fV`Eq^@#Htxotqmlf+~Z)T66LI_H34vJ
zS-k<VY1pQgDEgCB@>@8J`#pdR(D;ceQQqZnn-uicU~jO~KxgDXpJ0eC(+IV$Rn>!;
zpY6_m(OK3icN|}5+8?EbTwYZ8K{P4vr64AfN`*v&eG??2cq^7&sqQ{|OC0V633Rz>
zX%n42{4V`Ec*O>+0Ah5Xb?hG{Tk(D&#&_1uXC)AN5cW9+IR#?#P}S>m{_I}4IJ-Im
z_P~^F!s;vNA%#y$2_yVYRlgd@yt$ih$Poc4@=}Hc=C>m4U|ZudJ$*fXzqVYRUvOvq
zTg(#pDoMe-%dr0XOx=U>oxQ`Oni0R_AQbJPA$Vn#SN|z`Lpvtpf6@kxt5^=#(g>fj
zQ5(WrDWJoU01rx{fnpg}Xp26LAVtKZ(Q;@&?>FK3!Ql_I9xk&EzqGkPYnlNdd9ZMy
z#W)K}^`>)er>X8|$|^6fr8lPap@fs3v+SG`7@&aeLH~%Qv76&e4E0}OK+GSG(uJ`M
zD4%4Hgey|zDbR%Xj-*N-xA|pyqdB2dNCnI?+q};gI2a6UsHy#5KTudNfk9Vf(6QpX
zL5K|I-bdoNwVf@n=uTT9-1YV;DdnE|bq$w^qHrYZ<L^{dp&hHcG1fztf%0=%2y)-A
zlCfXf9^(1uq>h0yY(HG|+p;;f3*6dZqQRPC2^VcGR2K`n$L^04)V0`=>*kAiJ+H}%
z8ptawmLLrGb`q9zEXg#)+aVvE5txd!;+^QILZ_VUA%m~#uLqmLn6X0)ob=9Bi(NiN
zQ6b{^p0gj~S0f5Y&xnzWY{n8sX?|u2i94ysu7noyjFK?1{c<&GEHih!;C2YUjB9)2
z)#4n6d~TYNJ=wriON8c1#^b(F6Hv`bWmD$4RX1-3O5C2gd~f^)coD2H<Nk9|3UYdb
z+YClDe*u#ZeRL#0y0|44+NO|hht2z3d`$=-v=2gZh?P?SHD9zm#5;QdvOX1&4MghG
zK@Fs-7x;#8Lbf2p;EOOVF!BTWjysI$Q7b3%<@m*DB|>#Y@q`#!$A-^32r>!L;zw7i
z59%5fkgNPQYsMQ@1Yq>Q$keQ^fsq$6I+k)`Yu?~fjz`>a0mx4h#xP1l<Ig%GbH`jv
z^Lp+Kl&O0<#LvZQ^<Ye|4)WqFkyNN7crPM`OegU?;o@wv#x;o4Vd2B$i5s@?q`EvG
zO2O+QPj}^_X56t>sX{3>nSi`aALWDgGMp@CG4Yyep)CJAR{`TmIL29q>>*GoMbXi+
zH3}R$G*nT=p=c`oIqx325IIw++SWgO-8#Wh9Od7g`H21r!p#4*|B+C_q*zx6b@+v5
z(D#>@V}F#su7af#Ym13Eiz|?Iw#q6&1z=O`)=H5`<Uj^;BHQWnz%D}h1DC+KXZ7dm
zBb~a2;u5gvxzNr#a7t&+TgTJvz^!2fm)Ie#0k|Ja8QzN2!y73WconGktf9Bnw_wF1
zIz$JbCBTHwF2TR_4^wLFonBn+=0O#sYzY0c4YV|7G=%Y2=4H7LK}Y?`z?*kSunQ_{
z<tW7mfU7b1$Heq=1MuTBCcG_b$D7%qaqy!Y9Y;!ktcP?L;_9K?HN+B<2sqOEW__Xy
zNO9|qT&O5xn>#pGdfnwTk1QntU<UCaKF;$+hi(&|av70n{?F_?z|X{FTLXIC5z%f8
zZc$SNTvPBv$Rty7SvLNkSxMJ@Yg#0^6v|C@NS|~7uG(n3T5m|eaZMBhl#l)eH3uZQ
z(4~hgD|!qR+2jC<wS;?E;Gve7t&MP2gyJ@7N1^3y{FaNdncz^+n%y?BUwlc1FFc_=
z8zU<0?WGh~w!Eug9VN72V~<UH>jZ7K@3C)pBJJ}65S7_}#S<ekTmaVd$k|X;vBB2(
zq$`{D`9yy{PsxN-Jx7flb(+3g6X@%{uS3^6-PS`>=Wx%Q4sr-xGjXTq@V6pel1T;0
zT@I~GsOn#NBbr-N$kV|!>J`)*e5A(<0QYiq1@aeS_qznUoQ7~+)6?-{;Mc|Tb1YYO
z!=?z1GM&l_?w#U5GoIas+`xh#>zo9{NwkR?a;}?|R9Vzz+f3i<@mEXy(D~h<$gpCX
zDHR>9`PD;80(Z)3zK{6<|I3zHO(VDbyaRO>e4&`$3#wJb(xC#eiu!`zFfa!yGuQoR
zywAsQ2_L?0lz_wSy*fh54L4k#IJ#(4tGcRB(*5$gXwRS3STF|RUgLOT#qdiod?evq
zN~#P3T1HpQTBRhImd{@5pNnYCI~Pn5C7m<2%Cy~AP!P_-?*rZa<jlViWqI^C&7Y}z
z)om5rim+r-3m9VnNj$Rmnu+rX^{;}HSr?MZM>(j^vj$`X7}#zr+T~_wM&9Mts;l@k
znM-L!d_{DI_B$Ca0!sgpr7bP(lZ;@<+EWF_+e<;;TUBwuIka-v5?1vXN+Cj?=gz1>
zB%yhheIaE(7Uz2|zk&sK2tm@cbN)bzw&G6GioqvYH(<%}k@iXerg*?`l6(_!_j=<0
z`ak#t1;x&7kuQpoT7qpJdufGxoBOzg(N9w*a6(XJ#!Y5cuGBNA^~Zd&iOdHi04B6S
zzZPo7=lc>$VOi;-yx)9zSt;dDHA!L$zis6pvvVw!5JU-f3Y_fs#Q0YoHY$h=Ctf__
zX(Z@e-l?<AGWP6er}L%u-2Bx87%ko0!CLL2X64tcv0wZ#tA?Xm3LW7f>9^-3&PL=9
zK&u44+%t4HH2b_d3G<(`3pn_fVtbtRQ1g91>A}Esjb=)V@Af-MqzZp0S&N_&IU!MF
ziXri)1+4RF_CR>K4En_LHX7Zj78!X7n)&fp@n1n)AJb=L>0A(1S#G=@<C~YBV@*}(
z03z1DltAgBMP7s8<<>66dg>Q#t9JkJBDZ~O1&{q}kiE`xNKU)^)%119trx?J=WQ{K
z17B}@f1J}}rO;B9mXy9$2dZI#F!xwF-)J}Pv=!wdNz8?+@77W8!BPr$#g>B<`q?&4
zUOL)pIRXYW_QJ`i<s&^jkHW^MAEKRom9d&q^H2SrKh3bDR8_439OuGt7D7@0Rk)0w
zPj&ox+#~dB(^|VUE5CG7NjXb>s#P<}M=sJxr>#cqc^iI!Sx-@sNqbm+H0Bg&zDtc^
ze~YSj>y5saJYq>d`;gmewG{}LWOw1fG!tYZYx^8M-k)11-^3+0{2sD9S#|QW9doe-
z)uh^Y_FKR9hr#0m+gLLCQkR=Iv=7-LkO;h9gy}W%#n6vFe<ejc9;Gn9%!*;OU-jO%
znC)Mx^LIl>rb5f$HaK;xohQz=#~<P~IpW^$m&vF7sc3|vk33YackRig3?n_A6l?M`
zIwX>IZ&Tp6-O%;WbFfQP3L0JSs54(c!|TP_X_ibyathaM>m&oe(<Pf6fDg}s49U7l
zv3RlQlotPvL`^fho6@8on*$AB(V(?c7RvV*JY~VSFGbtR_HhrSK7qp|K!M7AN>|9A
zOO42--ua$7lvwusx;%k3)%(8ek1JKgzOP{P0W8ZGjpr1nk*ZRH-AEygcF|F|93-|u
z-CeO?j1Scvnqu=Lt3IyJH4P82^%1gmB8U+eKC{&u)HkMc4DSw1?NTZQt2U<LJfd->
zd;9!#m_w7J@uWfJsBzbPp1aD$Dw;7ry{E-Fxnh6FQ87L?Oj|@gmkV}v(2%_IgS$YV
zSANIvv1IN9a#LUIqGDdDo-weHcbMxJHNb2|J%gOFuhb(w*|?=OBVy_$A^Ct+7!ONP
zGHBZkS`0B%mlhW2D<TO8Eea9jsn3FIK8@|9^h*01i-^2@JILV*tk1PHTAZHhGJ@Su
zMn9VzX$%ipDkTvU6k0FQr})R3#7E=RpHK!~?wW<;f=?Ta1hh~$Mu2n8O)%*PJ?0wS
z#4dCG<9*H9#Am)y11RoTgF-IO)17ep*~CEH?!STf=3KWmSsvA7kfbJUm%|=57#5Rw
z!eDk3UU^HBR|^97{X|Br!XarS^ffy!UY<a>uqd;?MjfWQ$--_u6&^+pBGLH`eg{Ir
zTxoX}F-rCt_IG$bY(v35t+0uOEGL=C8R&X!Nw`S2Y#8IZ&xEY*<_W7EeGG(@^#%%J
z51fISG8-89=4EnlK6m}Y0r*_HjjMtZB~9e`PwJHp8alY#j9LRG7JfsGe&E$9TC^?$
zYq<D%GRu2-n*(DE!SS5dZrCXb70@W_m${Gtg*yr1(qzp;p!&wwrzN8PJERG9HtS$^
z{;<~mBr$P}g_F~sMyGUv-R1Iq#fl|m1;adju3QEmd)Lg3yA7Z|*zA42#Ai1kL7~^h
z)|R(!wA+{fFCu)NVE08INP<tNqFGaQU-ky$UejCqG%%CW*pkHXHBz*mt=kBB0i|XR
zfsxaYOkBjKv+P_G+99E3?5Fb%G%(Ujhx5Q3Uijmjx#<oO`3#_sd#js`iB01;MJZg{
zx!7}bUf=?pgTxnh`1OgX5MT^jRT5yQ4v_VEXh?=1N85n@uu}3q-?pasQ<CzqQQJ9e
z9fEnQY1_E6RawDCeDWkCL|hdfi$BJzGYv`j^wV!lhSSzCd=K8EqTzr1DJyc*x0#(y
zmxm1M86K*mmLFb&`YQ@3;Q7g(4B`}un>U@!HK=_p8Zby`ysa({OWEE?dm6;Q>iw;O
zSmvek#o9Raa=4P`kKFRG2O@C3zzs8}c)@^r9Kx(z+1x2)5czSGGFvI;&ZrMCTp2;<
z=^%H(T~4J$Skxd<%M|X69u(j$R?H>x0xu9GAp1!NG1x)6JRV9(=>Y(yARD`nv7lZb
z<}-bz3kq}1#a|Iz3KJoD(U3G#d4C3CnWBvF9`g1V=n8yXW-{v=T1xqND7RCHSkrAI
zX<1X1B*ROn<@L@*%jozSmV{~y^Aj*)Gp@)pbbd+eTAQ>(TkvNY%y(!wjYw|qJUQ?s
zl|5hE0DXRJJj#M7mIf61CLB+^men&kus2I0HNG<8Ary{s2$u+u9rs&_r9i~4STWey
zcMObwF1Ju9i&A7Jo{!yRhW)cfQCgs)dFvMzvxrbOYSGL^x~RXuPn+}wv;=hj9t%u1
z<CU8$(-E)=CYN(u2sH(G@Ik>sVCaa0pa=7MBu~SZu9ja*{h3+VWbn>}Uy~Ib$7^*4
zXZ7sx!OqRIyQYSWJmDx0bWCHN)f^@al-W|Jt!5UrtY+m<1L2q*fJZ}3+e*%?LM`7Y
zM>QBE36(YDtrP|0OhK>sUH$2PCY5m$o6Rs0o9%o#8g2w3zvbyHUgET;?mWPV@(+u|
z)uLX(u=hr3W!jQPKSo-oUH;-N-WN!LzVQ>I(8@NVv6TJ!9p2Z*FMbjG9GQPw!K=C~
z2)~dPF0dE1x2-+Weu3M)RVv14sC`sZpb$%5{5LRZO91;wa!afZ@FCuTS#uFE-sZrg
z23(y%XOWvvq+k^|E5AWE8H3-H>p~i7yl!i{^DB5sW|6M|s~jc$Z~i*-!M++CUncyc
zl0(z?m@y4_PNRLa&=d}v)}*3}A&orkA<vw2`9IqVk6ZQjzk5tS4gNkx&Diu=f5$+L
zXm!Xe>VPhDIuuc<`^lJRTCJZLFi3t-W%Up%!MPCqJVd3HH<9jH2&Gc{CNYWxy&4`>
z>!Fre_lACeO<k_9x=vU@1Wl-t4hBh4|8DGUA}3kY1nxwH-hr<KnkX@-yzkJRU+nr8
z_FrYPZ`Uj561EvZ3Yk8~g{s#2Ja=4gzLV<=LjlP0Q&CXUrdFd1BRkW@$*{k3&@)zQ
zM8b)UDUNe4H0Xg^1ROO-KGB&VKn~jtMU^(}U{z+7kn#mg?cqi-<2?CNy}a1kVxYp0
zp}0b-LZ&UZ4GSNmyazCVt)sS11*I@>QQXTPdRfDKG_Ip^&8$WmHpV&U+U^6I@@_p9
z7f}`@fde?ZZPB;cAZQFBVj@`i4YS2MIlXK4mF>qTRntuGQegXfFd3!yk$4UbHuVEH
zrsYxOEVgP>wxNI@FM!CHl*Q0olgDx#VgMiwxtHnKRjkItf-vSD8Y|@|icD${GiUjz
zm!;*D_(Q5eXa|IU&J>C%)P=<#Hr#1zmxMgf{A{IPpd3C!!A6j4J56CUH~O4S+Hw<S
zD~l(ROIegV!T`;A>t8AoqQ2@-B9OHXQAHhO2{onTF(nJJOT5@lBaqSF4mPEmB+`2N
zx8s7v6q(I@$)j%7rrb4}M;=fmA7{WFBx(O$Ue){Qp$s&yD=EXf6lyC-#I-bQS>Kt+
zyIQ1|B7}9mRB9kb>iy0PZvw;h*uXO4?Z+m#KS(I(wh#oN%uBsHOV1P6K~ju=r(;}>
z`1{%dDt{~;auHWO`6^J42d|3=Xha1+1+EgzlJP20%XcP$$Ge4WYiw9BDw}K`8<cVt
z*~MVmVG+;tdGVH~<zwBN8Y|TT0yDMCj|K?_ENtBa6O()+=ESQLsdo(sByuOF!Jrhs
z`a=121M)ryrMnS#I=N~Zt-H)`JJ2uX`%PZ4S~HO9=S~jX`@0)EL25GxAT<+=T(x7#
zAxB==!)!(XHi>w+Oa@Y;0Q9{_Kj7+8(@1%AsP!(<__k2!4s%2dEdTcPL9)aOrz9K0
zJbJIZr9AR^YTch!BhmThz68!E?6xRUCGmd;<|?c67iqB$SY?Klu}xs|IX&eb8QKIm
zfcgJhma3GYSZGyv;5#r%4fRgZ;nnUH@;4msXRHU5Qg?^`$u=cNl)0bY3u6W}Gt=Pz
zqbtW>E-ciq0#f5W96#o<deg#ZA*S&kxoiAe<3@|=Sp|#>e_((BEUpI9;;tdZJZDq?
zy<*=FVuiLWSx>4IH#B;^p$|bhm2dUfFp7RjLFs14B`?}Y_H_)hjB%@y@Apa+n>z6c
z(Cbnld8{i->DILKseseWiH~NZNcbrpRHwBo(>v+5G?OnJ%@yPrXoY_02f6#2Rowc;
zsR4#Ahnzu0h0fZczLn1L9e?SC=?0*%pi46px8^$4-t=&bQ?7_5_mOe{J({tWSpV<;
zUNm?68`FCb%RfIno`>NHg)9G~hTBBjO4T6fk)zwX(YH7E@Xz+14|pdH4v0ps4ag)%
z&t+9zt;k9Nu@|V=v9II$bj0%~h^wax^!3Oa833S-k`Peu_6ZvGkz1Ala;x1rV{iOF
z59qMHhYmwlsaODc;GU%<UJDfb>3>3A<x6uuUMAB_({EjCH9Uez2R$QuI*g$1tu-z2
zban@UaFH$YDJz*dU(%2c*w)h+y@ZPQn#reh@_kXz?T%4E!lTgZ+OzOi-FVtfiPJ0l
z5No74d=_r11=V4In0=(65_OkEVo7TDR0NLs?UW%^uWNEB$ovplClO*hch4)y8N$Jz
zFk5=50~CVc+s~yNT_aH+zNS3^KypOuQONW7@ParxuJGayKlaGkO9}UZb5wV_C{g4y
z?5`z%p_y=-l3yBxtFsP!R}N5LRM%Pd@{Q}q#vP}<RQ4@cn+(`JdEf5>c&c#nbnxJ@
z?Wp+CQIt;mCSkt$Z|E5Q$0ahR1a-b#3E4SvP!wG-0a_^M(HK9*5!V`pv50?DE~2wW
z$mINkxR`=ureqA1mp(Lfn$EE?K^q=W?@zCGEerIB9(@9g*vRrD>)yRofRQi#HsK@A
z8DQsT(7WfEE3;#z4Kn{6gEd@CE+<Qb$dMjCPQrbhsdo*+uY(b#(qu-!e1BWtNEx$!
z82gAqZ9nvCoK1rRB|)9E`A{=_VIJ<g01UuI_5QLb`Q41r5m9~(VblNH8kyg*a9D4D
zW^%uPBeOZ~R>~t-0F~CiEz(hdQ8<53H44(^`amGuR`U0wM-m@i$5am;KX&sSR(pci
z!Nh#F7@H(@A)E*)v7k%DROlhG;=~G!;f|m)X_uafX>86s(Nd4iOr1%WJHy8i9~4Ng
zn<xt=K>*px;{HaHZW|$mWRikKDQ`jl$D_+1Bb+^9CO~Y^-4j8ZiI$XOqWSZ<MMzFL
zAKg_<m<j}?Ky|A;?{C7tzmMAqv%feT(qin|LZVl4b>lj$Cw$kZa!Ut2iqojJ%}K`5
zdYQ+7oO%18UOrs(^DmEZwtD9I!0U^cLo<9A`epgTS`Gk-m77ySu;^#=c-|q7@GuO4
zCaMYYb-b<FbrY-jn#ilHYl&vZ6$xQwE-4Qgv8P<P{Y6x^mlP$sfmFBN$=zOYu?;6V
z=?o5kTH)(SSKazCy&4HB0K#UCS>{jz@Bh>BkjZ)6cS6gtqyWNJSZ}*;2>(^a(LpnW
z1@mFvxbq$7u&m{G$!T5;&_|B$k(;yF5t+$6I#!k;ZiK;{(P0%A^><(Wg!`A-Vaw`+
z=w2rQCA^FUm+9%zf69y8v<#5Ej-HBjH0u-aug0Mmjb-f5^i$g98p`C~MFTM(=83+E
zM>m&$MINim-w<2OII7TOgG5^o{?5cOB|)L`?t-a{^TSgkp;K8Vk6oSVOLni2*Y?WF
zheG|#MOW)^T;50&2D+=ELgaJRktU5ru^55alNba4AT28>aL9|foU-^7;Q2q3eoFSi
zYMKg@6Z7}|hy(0YB>YXeiu8n|<-Faxo@(T+dkqZ~BZiCo!a)cJ6HD_HU$Jv^CQ1`=
z<rzgSZ8(2lHIorN-7o9?<@n|Z6XbYE!)wNSx}bvaHS7vEF~CDlI6s%61cjuK_9>p;
zDIwlP_!9$!V4|UUaK7k&;Z?o_-Q;-a^ds${+f-z|geb*D`W(QY9%ZRZ%PK08JCjv*
zxK*5RHhoz!J2Q@Cv}Ylbc=a+%T0x$#TldVgHtwC^k03(^z&Iuk)ZT-Bp&^g*+*wJB
zPVufYTm{v2L0c;+t;r&liE`k8@Js*|*8DFrRUsV7E%MRfZc>FokrTStpi3aXFOy8$
z5mH_h`;>Aq-#Lx*G!F|Mw>PWeZRL*WFD;5ql1#v&RPCcySNSYNYt+}-hpoeBnN55$
z<wDTb%r9vmcU+Ndq*F}|RW<g1!1Loe%PMp|<$$^7fbb<^N{6BLyAiDQoHZH?jB?Tu
zVM0anMlv@c=p#`RzmCp&Rr!LeY;oTww69y1FlWeJIO(uDAyX_*iB6++L=`NR*_fRq
z3cQc;B0qUBTu{pjNmw99h=`EE8yp^~oVu)Dg$(YjNxOXxcVZ-R*BP~QC<*;Tee!z@
zfY7my;MgXUdnR6MpdU%6FtJ0j;Kv@<H33OYnh?|xo;+k;aCX|kit0T%#Nx{g3k!8d
zGIM93Hlc)(5ApVN_4d`PnJ&m$E0rRipcq)XFJCS@llzwGdUoC!KiZL}fL?(C9c#R#
z7kgKEkeJ;Rd)6YKC)y-y2oj{$vPnoBua8fx#mIjA$X$3p4)})BSW4Wh)9<c9_}*gs
zM37`%>x|mBlhy^lRJhKTr_`E3SilZ__Mu!98*-jzHsDeK<+_UjxhxFXVvZ*(-cmiO
z8T7*X8zivf$#tkJK){#B9TuW(dml58w^XK3a|*CzLy|XBr>Q%@fk@gs0FP9(@TQ3=
zG2daLnn-*`V4a>(t~ToyXFizv*IHwP1z9<s@(x?}*6zwo*D5;Y^q{P53Rk}>y2V)u
z5Hqf!nyd77sHH>M(bFB;(#Un3)L>>Ou5u>LB&_rv&eBx@5VkOE4>fGb!VP|c%C~o<
zKxMdUtRvSDI21h%ZJJFEI#j{_s@g=6MY8&}(3KHV8bcVimj!w11Py{%hMo@Vtgisb
zX~XIjWG<@JhU6DDb&|b;AEO*BTR|=OgzOEBILF#lxlEFY$h;{93cc`PLp<n1CIqm2
zYYD*sEu<g5*7%H0j{hpEKZ<tI-gfW$q8SG7<bc<M6lpJhixY_}0E_nsFhi-AWi&!T
zAbJi=){!(tEECz_DR+%cCfpQ3F7_@XzgVo5OZ04$csZbK&Mv;eC2Ea@J&?D3-PbDv
z*<d@B$hB7LomY4+bqHae-i=G2R`06a%F@27KbEfuSC7MFjx8WnKvE`-J_=lsOekGg
zTxbq{sWRxmQ`1xoakyY6Jce~(xvOY%s9Cui4o5p&@TR%1wme!04_U}kTTQI)6t$?x
zrsFh*<`l`Ds@x*dNviPk3zkpr>z5zaPqs?$Q@$k3)^kj%yBEF=yxLoy9Q2Os9bdZ`
zUo`^`zx)_96i?T5trEaeVf*EFs+vuqd>$0qV2w*wWw0CL#1aC0u}q}V4T-=54FNkW
z;K~r0eb5nwRBGnV7WjJg;A<igWeh>7afH@iIaJ;-ndbS}-F-u<ni`ipmqWU(iye3O
z(3qwUFdOtwESf767)Dp|2$>bGGz7~w-FLE5YPzE8Kx1&ZjGYfNLf9|cb$L;3eHX}k
zM|6C~V3*bPJ4hPJnKWVOi-`k&(cHp`ClWyuRp}y>IFBWVWr5p1k~Gn~{f(rBzJ0#a
z05FAoSV~jn^Q<kWF*fl^?BfSHQ#dVASvtvW1U_1<`mC{%z`74GU)opJaYV0Vi~ODh
z2ZAO(b~&=LDqlgKTwu^G#$~mj+U`G)qviY{6?(u4mVWv(#7!Si)MG6h`pL=|UE7%z
zXpU{vA=ZxTJG7`0Zx8jiKMx6$JaQE)!#gfw%@dYH3*bx7T~{8avX*emiO^@kp~Cz?
zhLfduoeykt<-yeRgn^8zq+xH04C07)=&uQ&bvPpHirmr&9_mxkq0JI@(HpVx83Ro;
z#fwUl=73=dMF4F%Hc1tph@|b6d8LmRsq|GNLo<(Fp-|XY?iDloik4a%MFNwe^G#(#
zOa|>ZNb$i>sG@l(=a2E>AK<VS+3f^D=PKSH(BsYo_ei532>9Hzw|m_KM}}0CBUd<M
zXBS}~>Bp<dFIJy``b>2jeT#xp<IBjX7p;Wy8A^UX@Lj@X)qn}s!n{P}V>K@nSO+5X
zG0$Thb`D5nkB#W)>aw9EKuj8J9Y`Qkuz6-L#|Y6$9HD=9)L7;?P+F7@lU^y9Zi52o
zCY`_`gBB|R$PQpgYX8$RFNEg{Lbx#xGIfJcyS>1!$s4D%9&>^#l~eiyajI@Y<!Ckw
z8WmhW(}$l+01j606zC%)c`{|P=Tp{IuB(naZD$YbaPM|fgO%?WBfqwEE;dK{Nw8jE
z!)b0_2xzNi=?n{T;UVnNjd>wrVVmZ%_&I*v=6A?kG>|`g*-w(j%n)5o_b@e-x7+p9
zevI|^W`3Y)XCg}|&G#<yuvw5l7hiFCUCn;>+Dab}I!NAau25_FS561gHc9!5Gqjta
zSoI&HqE6frtv|`W#TC(iZ8QQ!5WHVed^_}OA&f$htp>tDtd80!!OWRck|4{q{)&gP
zw7%!x7Q+ECCV{5{<(CEY>d^vEGws~Cx)8~5P;)%qXj!i6d0{i7=it`Qw4n+Wkss!W
zI9%B^^a$^&rZ<U}6TgB0*f59vDF}9M;!L&dBVRlF<S>HvtD>5)uR=S_U@61(YWuRf
zMUBy9#hc@C9LxEt=*Hge4U1YJBn|)3HsCnG8<dtf4LoB_@16^{IEF%K5@77U#A<4V
z;GmbQT_G2dw#;J_6-cKD)FAJDeNZw6a(@ahq^IH#?iWyOG!EeUZ4z)F6G_;UL_!=h
zVfY^r4-K-k4iaK8%B<*(?<Dw@jX;`@!1O;mE`C-NiWM!s1LSI5_J<oKT`zTV>XV<}
z7++xk$~VX|g2-=kUpzbr{s(o9eEw5w&Z0x?-F=wT6%6x7@I-|EO`5ErUi~V?O+xa)
zB2<V>B#bNh(?jkRFGGR(?%aizdvAoP#AVWhp7GVOaJ}7};`Q~?At5>%0y?V75eADT
zGkedf;B8Y2Gvxt8(Jb`z=J)_y+`D*r!zgA=*!oxA(As9d68)jX$C*>LSYvar^-l{l
zREKqMz|+Cb?8?JA)zwUlJJLPFG-bSq+RfhyvW5M*P#}<W43>ZrXpK1jD4mZy7Pa(S
z-~8)IOpqwK8&9=el=8LClG!ntt#4%r;X;HAw=}+}bVc5s@O}yjeu+#44nC~tn%2}&
zqq^$kZlSb>u(L<+=d?xEku|v->I|&UTE~>_kaYrpZ}VS2aTkJ_;};y5%H#5jbW_{=
zc6<=qSuyM0=;9O|iK-(_+!oxw0TlkZJFZp>F}t>=J<PIL*@UNl0J2d_jaj_g{qjdq
zbB?8onqs_Y3e{KJw`2r{-nE)m2wwtdFw6h?91@-%g6872@3GR3xb#ydQW&f`zBt?_
z5ryfWTClzuPIv#E_c7UZzvCGJo)$F@2s6UTjOXzW^cp702c8X)DG2pPnxG*LHa}P6
z5eg*MC?eC-f*%yqJ26QW`8Fw+Egea+0x&bM0S4nPnekk31X2eo_Nci#_cZp;x3XB|
z&<FmsNHUTVNv!FzTpH~ovYN(3^(K0V&x7(F?nlALRXM%IpwjYS>50TE#jpXtJ)vQO
zqfP7*LUbz~pssx^n~|@4lBy$h5sCr`NJv3GH>YdGy~lWBGTL^ME*DsH2Gp50Ro1rl
zW_HEyL7?g8PWYmsvJy4GX6!e~dp1w6ooK&W&&GE^`XHbi1HS(_-G)JV-(X+3>p>Ak
zGXTOnNz51Rx4;W^B{^*-yUut2Kr^t}z2G-A6nJxC%mELk!?pd@6RS?8P8bA*Ce->e
z5`lNY&wM?UReF|k69#-*V6hu-I@8=kowqUr46YI}L=<w&_IZXIlD?Ee=~b;VDE%3H
zJ3#R@F+jJPG2;@md8ZJ{Yyfaa$atQEsD?)pAeV7Y6X=%h3H~JcZD#EXoOWKlAN3{Y
zQNf?JIA}Cwg<dr4K_mfQGQ*8cF3@(cA+rMq%EMHf<yRuRjro__u`etz6_g^<+04vL
zu8bB<g`??Nm3;vh2bXrW_)0qaf>`_vkKszdETRjja|izMo6^|H{aCIc_%v6U7qxYu
zWnH3XV|`ufKz<zoZrl$c>T$ZZgJ8;piAOwr^u#Yc7U9JX6lWYB-Jg01eG!ap^V)@U
zVd)#Zx>TAx&u|H0Bxqr>m^K^XS&xetnXP1I@nvq0G`k$$zJa+^-8UP&Tj$3wmp~S*
z0UYoKIoIGX#I>JOhf`(A`Y$84zP=PPL|WSY7hc1*RNP2~n@zl*5{5s*+ZSrV?lll`
zZFYnGDa@1VQsEcB_Bbwl)rPiC(c!y2QGBn#OMdfASiynYARV%*;eb3Q^%Yf6mAog!
z65&Z)O%~%<CYbC5c<E8U6YLS`dUoird<K0#APJ@6*4nS@;U(?LZJ?)hb_IeH&9=Wy
z(nTKkj4LVDTe=kRwV<zVabXndp)#4Zg=Pjwvm}<ZDeDise(xfkl5QjeYOX+p^lJ{w
zT=SHSYTz4^^2I0j8P(C?5XzQfkTX3TMx4$sjm@%f74&aN`?@!os02w3K?~tI6u3IQ
zOXiP?Qrm2q<tN14q!j0Yp3ZVuqft*FRVMYxE}YW>rWE!$t#)zPdmBXI%xnePtC#`B
zQ#NG25vm<MPr)hjD2b4RDszlq$ZPPL*jI+z!k8o^^!`U73u{p@0x;_xDJLF*vQK0z
zG51~hEAt108pT+n$6+|ho|uT2d?Vf@)<2u{>~+CfH;2;GOw1Sj{2p8dcn^7&1^%x=
zP-K%+*z`)h5KMNwJ0r9&zn(?(2-`sk^N}_LC7Rjcj2n)N<c=3?&VakIb2vcr_M%N-
zVSSII7w#W|beff&>3GCm{|vsJn#jotv#uolEMu9^%0~<#fg?WjpS!-qm_ea`V60{A
z0Xf$Hk8}d8_9Nrn3btxESD*Jlf0NgX*QLpH`p}7g4;G0o!h4%7L1uFG6MRm8{wWlH
zmlHM^+3z0*uU`1aI>@6nHif~sJ~{hY@?kn^Jj4(=3K*gtNzNwW5{Y0(O^+-k|1)sd
zK+H7l#Kp>vaZi|d!%^BCpIJ!3R@DpCcp%A#(x>boG|WftR?51v%aTUQdWjqQm_TEC
zn|P5eTOHO#w`f`SXkOZN9m?RcN`jAse1J6zVy*iE9mYSX6MFa2qr{<;S7w#HgMzq|
zX!WJv<n@Tp&a>)fMx{kjE+Ja^(L*q0_dsIVf-9xPaAVzLuN(33efkd-ZAlg3PsnC_
zW1>?FBjoN%x;GdKWfgp$8x`}t-;r7PzwEDfHs3w0&ClY3w7Mt)-Wg9Fm0fto^1z^y
ze|qEM*~e)zY!Zg!hDDi17>^dk76|MvgHks~J;;tBuLcI~evm+A69cFbTw>bIoeH$S
zXN!su2=?$Ju0{|C$+8gaPFzhB1G=<CmZrKt{5ZF-7$oRO`n8-$Gk$pYZgF|-wlDm7
zL#ztylPmdYXYWL(>r#i)Y+7HSujFSgaf;_v1}9`1K5d7GQm>j9wn^`pfPzsQ1UoJ@
z(~DSfyTy(i(>768yDjmmx2|H}E^D1~gOY>@m~|)5?{BUFD;jI|R*ws><<Z1unbL#9
zK6s~oyxbE1O)27G8l9-Gfz8R<a&D|!#ezeUgeuF9|8_y88hKk99zD;?^&(d4o{}oc
zMHTCrGHy+dMk-haC3asQO?BLb(!f1{47F5@Eke`PtIpfucohBcv#zv;@*eypB=aYD
z&P`JvZAta4ri*5W#yJzbQ6^?))8ka3{}*rP(4~n2E!nhf+qP|1+IFRF+qP}nwv9^L
zc7CaM*Xs4AJ?KIIj1wnf?-Malz==emMv9REWPfrHcIEHU5^#{G2mQ6UqXwS4zL5e&
z>V3npGndz<Bcjz6`+lug$3xf{bL$8clb_A0)l2<|?<h`V!lud<F##!$qMXS%Q}o;@
zp~v)Y4E@L-q5ZrFu-1o_{bD`IrCthkds)>El194cF~RnS!WK-FyIzbp`j<AlJJT`f
zFTA*9;I7pWHbE?z|8{BNOd^<fr6boTi5(Xn=u4$cI1hTM>&6Dzd*Ep^-q%iQ>xnqx
zi8N!K&=bdWPo)dx4UkS(CSb__F$Zt|9y;{zu>3F-CE7ttV&woFn*FjwLvfm4K{9Qf
z2O1*{Pexbp8Ot{!O~^L<w*I2*utSaN8lO%qsTnko<vwZK(26xQ8*n;2bbvurNny!>
z918qn&c2`AXR|wzL>NWSI(38tSnY>;EoI2134coLR$%A_oOF0KByF&nldU*F$jyF>
zCTj0_E8{X&!p+Wg;Eme#+LKev%H7OiR^oq?%sX@3F}cjP{AY@(%QUa(Y19je!tgl%
z(Ol=szg`O<Sn1!qTBF3F*g_3`^F^*oLmjDUG40u_PeUCJC8dFQaivo0-F*ub^Ehut
zY+$7$5;YMdVg;MC#HQO48=i`C402yrNQW%}@S1cO#He%#3cx)EZB_CHQV7w<W-VMN
zM4@vUE-<{ZmK}D=-`pa*IeF>}qsFzDbHe9~n%``FKgtl2^Qw2x2(;5<&Y+ZA`T*n8
zCI0tN18Smyhnt2%7?4sDw>p`#y-`WVw!##>2*@56!TA2qwZ7gh?~AxdcKnNYec%pc
z_QuW#pADYxicrB1t|h|qibUoT;}RNEamF~P4l?Wji1u%jYF&0)ZbQPvz(Y+z9r~MI
zZexL#?vHv=z;VFKsyhtmRpsK5b{Rk={#-le66l?~EjU6D&^PPcAR(D^@Wv_F<ikDd
z-;Ek{RY~tqV8K+fOJaLI5<tP_5vv%6b9lS~>u=7}lOScz@4Oqms4g?^GBm@{9PMNQ
zCtI$!!2Q5u?GWc*DU}>-HUf5INzT-NYQ5~DA|8l2(k*p3@d_?a&xo1F2yhcPJZXJs
zK%nHX;krvPvF0RSRA4GRt9LOC51$r!yp;#=b!&bs_1ynE`;Ot)3T2V@`Ha#XaO$@n
zrcoY<GYG|kUFTctqu3u%646_;G3_D6>KbL^`U#<EGrll96)0aajml;BcYzT?>K1O0
zt68^s*s<L%`G%KsHO5#H$)E5?BbU`hqbg4Rqb|Q=HckXj=+(b7Ld?tk6fih=_l+qh
z`*f%~c(1KXI|D<iHKTB8AD8URnqYinaGdG|i`#KB^hhN;TQ_T$3hED!*d`b4c+VkR
z6(7N?FS&KBoYRYRKx2znzd-3?2p5Dp6*liER#5a}bdg*&d4B$uzNxCsvw2qU5owUw
z0ABDWc@OKlZ^tN#8n}T%k74QPs4P|Mcy27$>!)Vqv*}gfqi1X9tDiYj*J;l&I_=6i
z+K@)ZJ~2}|jdnK$*8^v8BOV;V#hZRMcO2<e#7zo0SFkS_bo$`7)KolZs7rC!`<LD~
z=Xb%4GCO}D2N>z}tz<aBrVHOu`;X><IOep*#(S(EO%0Pr-WSjE&D+GY@1aacS9ibD
zHts6OcEL^IOi0T@L}ACJdR>Ru5elf{wi(sxVT5GpEM#5-DCFB#^@#2Ru!$|7eXHh0
z59VXrhP(s9&$6p3rfs?YpLI~gpWc*Kf%3;c`%Mli+P`yh81^LiseG^1U(|oxaxA4>
z`KG9llMeTAv3*PHhAF*YUa1&1!}(*FBo}~XPOJ^?nYL5{J^2VcyZ;OVeQBq@eR#@j
zYKwp*D$YZ+LGfxWW?H7ADpnKjzbv$y{hlODrp~RSm2q<slZ&$qb=bAYi`)Ji@?6;(
zsHDgiD~w7ExEj=_bf+Q^Oj4Tx$Ndi~h)R=ag)Nk?&Z>X)jte<<u`M^{k}G$aNEP7B
zy^#^^Y8kLewQayP-pPx1J8RXXJAxpV(cgDbvxq*Iv4!5^sX)OV2t$aijC!~4v+qR|
ztz{Hvl!N@x#T<(cu0r_YlrrK@{*KE8N@d+6@9P_fk8(f92Ncx=x^lS8B0;=SLa%|u
zsb!Oe;exgP-}mY912ksVQVRt6Oo%d3A*c)@(d4f$Ed@uB@Wa2`6V5R22PLgqZSI85
z4qsBwF+9VesxBcZFAMBtfjq754LidSD>UvUuYl(<CfmXS4gLwS%B`ZEuSCdi6os>V
z5z+6Jw#Zx#6V?{g!hnOMLjq_w3dn_lC9G|3L4=)9O5xdks<VwX{_4*HQ-iPpam>D`
zB<d_Y+=6lln&(XqEBw`{76w#bP=_qRf%A5*b-d@36JyG|_J`^<eV>SNm@RdYe{%UL
zn{hMLP`ri%;SJ*qdg*K|Vuq;<+o)>fz9o5pJ<dNZ5bhbgUB{J<Fxd-A2Q7mS238H2
z)WrxZ)nmOUCEWR}Kzm3S@ow0CL8r6K81}tPGN>^xPw0^Bn9bPUnjcMR+a6P0P`GgT
zSaLPQs{6<EN&z%kYVu~lO^;V&KCu47R@0hW21J!)PXpkO%Ea?ZTfG<H_N8njo*W;m
zu7YLQjdy1h*gGgtpHLCD4mKhmBl>3Is;50Lm(GOu{p-Zl6P2VxsxU~&CgV6;#GP|n
zCm!@4RnC-UIHdQRrP}N(I*qhRH-fCtVHqZSvff6Ys4)nbD=a_o*@(AFb#h@{GDHCd
zIc>l5UG+N0AB`3Il?&p}ZZby2*f3)BH!ydCz=y+VGI4HT=9NIC#p5=SS^mFd=(oiI
z3XaK#sH{zyKV_Ftr&{5{dxGAF4Y^IXNfxHS1_}?XA6G10sn}eFa-<1{*F8~q$1x;?
zr%kr`_0|YuQgb>c6IZlhk<&`ybv{qoB&RVweFhDN<+yI+AbI8Ja&ZTU_LZ_XBGYx?
z+K_knMwQZE8dBN-C=&aav;za7ZA3@xXD+7-MN&?Ea*}LH$!Kf;^nYIkLJ5s4v5(m)
zbj;xfDW_$HvAxwCtIjP5rwM|4ijzVtj7uQ44ug8@QE+|c2rlv5pcMaRzF-wT$L_T8
z$p8mXe8(1pkBkBx&=PnM7{>?nh>sz#;H;hu@@|l9m9b;aHb2PWbFgl@^0;u6FV4n(
zdl={07mg0~67M+`=l5YAnp^RRd4Y2kdD4R8e^#Q_OJ#-($_~v|O=XS=f%B-62dTs^
z*Z|FWT?b(s1jztn$;Y>TGX+Rl)Uio756ienlRI9m+qc=2Oo1XncVad=wmSU{0^-fQ
zjt4u<IP)oan;?IR$)5I!QFV!^pOL`*|AcZ?M$wBhwV;=d#P~1D{g!2vpb~|1qRhte
zwI`g57Ts4(mUJZ_aIvKj>V<Z={tXr&2e!xV&e-ODLT-7JNIbQ0cKsPj%6x~rZl;6X
zg=P-{)56$9(9#>J9e9gy^pu*XI~RdYBQvBpBQ}(SJ3>TxCgC~O0jkE03C!cW;O7s?
z5%|_-pIWZ`d(-D`o)ugZrccJDWuvmkN2PRMxB}Rc&q|~9WPrl1ew6CjN*nOm8c$8_
zv6mXDF-SkN#SIKfJn!KK2V*Iw6R0)96>2f{Q@UY2n77|jn(<{)LH*2;^UMiy2h8IX
zr}}3^i>FKVx6q;ysW^$D*J;al96lvHkufjuj5|lYMCXH4_9biGNMT~>ApAto@QiMH
z3FwGXF`NUI;bj1t?#>kgLgT^;&-1lpjs=SF$n$Rs+#?8CX^Hj>xxOLk(?rWW^us$$
zY3e@-%3AX)gs)6_m~M9wtRy9XV0mfPuwR029N#3nY74YpOYb+Ts0Y&}%>wb2xf*>2
zp^`=DWL&ze9Fq1EY?+wJPxU$sf;C0@-H*Pr70RA>mN-TO75(+B(F(E-p+fA<F*Yz7
zJlT*;UVpTLN^-4d=eGn(U01Dd5Y;l(Jg~$FrtyZ_Rv}LHk6r8GB>x(^8X7|J{a!CO
z(`HsuEOMPM)r@Rg$b#PjSP>cn)4_K#h57N($u;>pqvMWno^GlXXyoVPbLO^PO+J58
zHeI*rc6_ITBi43V5-d_tZ<<i;VztE<SL~1Q1Aad)2_f*MB%abtYCR6@Q@3SxBQAsv
zFLGLllCPPsr`CDCBALFRYdiynPulShRjBtr*wG>Qe{2oE?B(`)yATwXG6uw}jqbod
zCQkgAPSRU`=0>Gg-i}ryVBb4@41zLFfxTycxG!=5e#XYH)DE9wFSBL+AEM}d4LzTq
z%n~Qg{s6{~l?*Vv1K~~zxb|qON0q6Baxh!g;3r$T8|n|$uZ#+e$ZrmeV`%UagTj0_
z^ksMvT_1GZTe{a(al8u=(CVlHN>P4RsDKSE#eUei=4Gc6rq9jjIdSUwA+;)tCd#d<
zPMQt3Jma+KoqHdApK;79cyHL?p8JucSTVt)%K6E&;OTQwBTg+g_>Z^A%ZOda{ryCI
z`T@9i=h`6dC(me$Tpq>pw~=EGgzD-`j;rFlcdOD_b|*6!Nz|h9?kQvwQE$H5obfxq
zJY(xg8Q)Apv>6C%+*7YxY1GP+%3{nmJk}H@nk9*gm{?U0*?<lJra9>+amb>)^G0Fn
zlx1uf5@lA;m#2C3?e!}h8RUNG?<yrs&$?nT*7%(Mlr@ZhmX4-}slV>t^T=O&HdzVw
zvNploO!t(jS}juqUKF?t)NV?+j`3ruW1O~lGz@fde_3V{UW(mu+sZfu@CS^klVb_!
zz#c;-BY&<-tFn(<hO(URb`k{#j7ZbIR*>8AEGJYqVLGt>;j>v?!w#2B>-zS;Z9c>Z
z<)wiss%>FHrjYYAcb(sF2@`cxeM9=~;(vf2nyZcab&QOgd-QAvD87_~q~w-LdV+s3
z<kBHt+w!!DW{||^s*aKpfXy!S85IK8_bi;omR-@Gz$bj!s3|xk59$7>uJV0t!%M%;
z!*^(D--V?J$^j)o?xfFS^6IHW>cMNPUuS3w;H=1GRA;{IKL#Y4erg;PQ3xgS7mrYo
zcop|bxX1R^4FZug!~%<rzQeMGE2pWH!yy^oDA;K<&#CpY_i|GhbbePDpBqJPxnD<a
zz^GtH+>t|od!f}#vbx4AbDggz@&vye`W@D*JYi<p8A)j2y&i=IBag6p`h;~YV--Bx
zxyKx4&@Hf=(a{2I=g<}(1Z+&~(GacK=N1-0tOM3&BfM%560ilKbW9t(7}~lyPL^R0
zng6ge6isH`&_6yFw$k;J&GxxGe(yaPEE2T~lB(0F1^_m0s~xijBrCEh8-aJtm+!LK
zWJ^XVAprUJ+#r377dayTROwtyup{7b8BzbD+>gU0eA3scbhuC-w+XE)0bs8+6bFLD
zi3<V$eSMPq(Ut@cWc4e!E0L9<m4rHjP{37r_WNu2e4@3Bi)t3gekpGBG>SJthad&a
zI4Yln)nuFX7gd#1wrTsOV5K94EM;UP8Q~H>{yxgQ^x&j$?_2RsQLp2JYW^8px=iD&
z-@=<vl=!a~qF=Oo-c&Jbbok%+?=FsR_`NH0&~yH-e&=lBK?pdmWtG|my^;L5gw>9X
zYf>^X2rEAi@2d()l1|WBoaSCzfYvV4oh}UdB$h#%PXdPweRjX~`UT6d&X(*R=g2J3
zts5<e;Xas5`||X+q-=17HZDv}&4%ED@p?1W-Krhe*p^Qjizqaoh<45lDHhZr0isbo
zsB!ZLhTbj=PsDP*aZjG~RD5toaV_9|`zBNz7%}y11gf7*B;-Z$N-<yfGCy2JuZOyK
zD>8WcRU&SYBpR#dyg4K1VQ0j=Q{>;l@QRcRt(<NdG~{$>L1oyS(*TQ@NXRV>kJ}F(
zQB`zmzEFE7H`q24d%xyn)R3Cu1#4UmsKm%cYhgV~8Xa)t?oU>!FoW?w)Oj_CIB0sW
zc`olj=KmxZ>dCsFdGo)OFd(H#cB5WVXOfdDBT`-5)^trpST+2H$<RL=yLrW)El%s3
zmJJhzM~>=6To{Md?lArvyPJ4eQ<Ns5ea;~1mM3vde}x+suqc@%5oNi$z14GWlww;o
ziy1<$aP$NRv{rY=3dHc^!QpJ$`lVv(cu}lB(Y{`*wzmy#qHfzPhLQN{@cm!LqC!mn
z!)u5V?Bql$7_4@6MG$d9MNtN10?DRX-e47?0YCT<9(Q*u$dExIs|2n9cY?0<YXEpJ
zRi8b8dO8pF!y#;aUZt)n0T`v<D=sjFptV*yj#>8H#)qDR4xcu7Vn?qZch4E0ivGz^
znT`}vW-pz&74X9jfgv`v9n5PKu>;ku)D7cnT_BH;xmQ?2k%@|7XDfX=S!_+r9tW%D
zLImIV*SX&lDA6@g@I1NbHld60AHg!YN=}sZwao3gQ8x37(Q51D3;GTmNNS5jtCil~
zb@AteuAm^)Fz%HP1+funEMQltbHtYyJDy?{GIux2#T5dX=)Zj{_qmg+9N)D$_bq@k
zbD$2pC>@t=`F6|^f)m8|LWLpY4pVFuikAI+^V*OXU_)=}yd7S$`TTWFpeVYste#R-
zwxD(r<aO!;=J429uV61>J1HoFgM_1yKG;e0_vylszv&zwtn-{IZTLeKiNw5Q52)ff
zXdX`q0sgyz2Ca4B#*CV^LRB@7gGsEWP;#a222`-men%20D%gVS42M61S_U#*>vnj#
z8>TPg7+d`A$0GnDqd+C)GUB2P<%xY<!y=W`ib?>tBQ=dM*}a<a?w`DuTwaOgf_ICO
zV~ul?i45hE01w>E?yRW{j`;KHPMzqkkfK|hiaQ``6lg6p$wmYJ88IQ|#GXQW%G0qi
zvL`AUmOq54Jzn*@(RA--peJz@%$}F&6%ZtIo30>p(C9)<X>Yt&W{NQ_e+)whXPAYF
zn+`eqY5Z!vU^7nOXd1#sG!(&C6iWd^g=2qkR#yc-0O3w|LYKL=1NIV8?TefJ`m)FX
z`!p52Rr!^TVbGL;n|cJ75J{auhke6m(N|HGmRRTdz~n2oT^%D9cs))ZlPUWO6VHT9
zuFTJV<aD^P#F=_O`|@boVs$-~+4NlBw2Gb$FDR+mwHeqlad*r_JkqA<?Cir_iBBG6
zo?xS~E^I*a)TmFyP^;IQ^EeU>AQ+X4<s&J$eXe?N>*m$pu3SL9bT=^bbYhukL!cTF
z)$lV*2{@OF0$h`@*x6s*AGf3ic(_G-R=Ui?so=_fpdGto);RW5?7}*KY(&2^hBu$3
za3EL6>PPx$y(qrz)KXGT>P@mS#{BPX-WFEMt6RvkNxh8o49IwT79=OpiSmF3b+ipP
z0wMdf=dJdW9ZV0L9X#!vZw_~`>;}d-Z(rPn=}gpO-ySYLd2CH3j5-Xh-={qNOxi$=
zWaZ~o5=?niYMvjm=V|RL(?Clogbu+aIz9V);p-jKX2DH7&vQ*PmC|0X@hRp#vdn3E
ze>8|#eeS?|$iII{b@}&q><dLR{=lXH=!&4jgkiBg+xrYFSDBH4vT&RF#+519v>qJB
zelGZwNIZkU&M9;#fj?lYdBTi?e&075gI$#y%?*t&EoIQFXBM{N&Z>(esKSp(c7K;j
zaNJ^<t~oz?eP!nimnHwDl$+h=RIoNT;rcqmMH8MaGH~eEE;<h5wwvpeU0b(TlVaI8
z-`0@nCAy`bvwuj%M7XtMk!Xn<;d=KyaL->RDt-#F`l^v5lQnt~C#W7%@jWY!fC^Nc
zU0jubi`?u*J{b?`9AI%60G_Nt&bMn8+^Iu(7I#3w#ua<e!TyNNqM>OU9xbC4b8sj&
z_7T0l+E43m`{aN)dr#TxnV9n?AUaqtxL`NK1fRdh=TxZsXcTZ@6We?zSK09NRewN2
zmE=?1&xI=+uKc^^qnuxSIsDs~My!iD^yyiaID4NP9Oot?yZj39*T}CKDSi9ATk1Xu
zWt8f9zf9gO0G<qrX|COuDCzsFy8^4dMqx%RhVY@~nzJK&0r@ZSw;{j{!`VTH#cqR*
z*!l40Zr1VN+?y%)KzMJ``H;)U-FW@f$DQZiDqay500DXg7ZI*YpXkI1?X6<5{Ih-O
zp45HUvB9T#MxABqqp&h?T2wlq$>#5%Nwou73sGC9Ua!>?-egWtaF|{QGv1Y1Xhc#s
zR=%_d*2%sonMD>9YnLvREK~#`20f!M#K65B<VSw~eyg|@%3@Kcf+iK_Ac+AHbe@31
z=mJsr>3Q+8o)ZeLazv?c4_V&<n9>#gWxOv@dm4IN`=v;<7+B_XAwRFl9g>pcch~A_
zT{7ZlIz)R|aP#70^sG;SvlN5n*GTKtL_KVJzUFWdw^!9R-$&_LA9;LL;EE@JOU9Y#
z&sT>7eiw60cOcUVtT;cAEUjvg+hOjLGw6C)vaxc&4l1fPRBKi?W2&LX;nIl>*L(Oh
z0!o4fi~Mp}VfW(mvOAVM$-$#bqF}rbA<5Bfu8Ijok;jmFv-S-3zB5K6lKI1vvk-k_
zD5HKs;Q)smp}Svb@X#q$eo`Mnk7@|~s19f4Cf~nY=Z^iP8Pr+r85W@OlATi(-W>+1
z!#jNHV-O2C6JN7WSYe#CCh#u%`wU2w;4xXb^nRgwXJ;mN_d|Y5#7PUA49L_CepP$N
z)n7;^=O8};k<21~73E4G0KCXwS9a3PC9sfH-jLfc3-U1J<}DUYX|ItWLoeJOB~>T6
zi`+7iVc>-D2-1|XTSBzDs$2Qs*t*KzMV=HO#@#^dJq(*zrEV?uBiG48i>Xaja&eUp
zm?&AYf-Vfj<aq4r0y&j6A7E|J6*QdBRx1+E0`F9s!7Yl{RWnOyrIUt;?9h<(3U~&s
zg+q~!@C!>zwOcXV;QD43;bOs0eb|xFdLthmRhJLt)>?5*<~$r}z0>8byfTY)xVZlk
zf@wPa%HCjQUAz<WUso%tB(3<2<aaKXULK>}a(!9C5#}9ejxXh^i04(9jjQ(&cD-*q
zYj^%W2=H|V<fA7egQ3z9kRvJ3)RKwb8`0ljg8pubxDY7NimwlF0BnkhoRN@t2@Sq*
zbV9J2bxIpvKnIKu1)A#3CWZ2ZDUKMLYT=^KWjBSvvd%`|D*Ig;Q0)nk{qpCesVXsv
zdk<Q~+!IW1`F2b?%_fQ3ss(vui~{1ppRQs%7gudr;uqGa#8c_>Zub?;GiWeHQ8n|I
zHoU=0?`0pNA1PymTJVPU)b#UD<7gBTV#@xFNrbKO-aoHZQH)ZC@DB@Z$IZv%EKYY)
zF8f?6SuuastY24$bx*UqG`r+^F~d}?#d<~9n1^CRg&>=aA_o7-S8fMko^yc!R~s|}
zSq<Khn+kKecE;Jt6&HVDiQk{yqIC%z5|bytm0=v=`3USBv!U^}i}ZxdD2TkZ-mwVX
z_;lr~DONxyu!L(w3GYRibe%Qvtue(sqOf*HAXs~;f3;-@X~H4F=&+Kp?Vz!A-z+a7
zUI#YR;o>8M_%`4(V&bP)lfw|8mzulv2_6qShQ5JMRQc$bu}AHF2`+8$Ex56Env2*+
z|J?<hOSKH90%1v>H<>@^5QGJapw#m5iw(Eke_%yWBRW1yz&b7zgQDhs$r?H7!QH|`
zJM;Is$Bt#52%$KI8Yfg7pb33UvH@29Yc7zt&Z>+^I|+sF(R>qas#dJ?Zi|tTZv6yV
zZE;vy<hm*;u)CQv`LCt-g+baRw0$pb?2*T_z8k^08!8kn8yTgIBYQzBVeqi~mzdWa
zK#1*bda_BzM9rHJ-U&PX?L~kgHfx3Y83OfvB0vuRK;$cwKbK7@^JI?>Z&%DXw4J+^
zYD_4C)uilGhc%Kpw$qalM&TCDfrDJ$aOlGdu<CMgi~m*XdSg>WfM|mSegxxx<TIxm
zZRncdslK9bE`{ZaNu~bLX$SfA!)BB1Cr{!fft8sPm79WfMGRoS`NL=ZPs0YU)i!zk
zb9BBX3nf?rA9(o2$P=BXgH&k%hF=e1;GgwQI0wwDYR2u_)r*)%z_6+>&wkBwwAtqM
zTc$Y}^RrAwyZ*Y#H-}h3-fORA+Nuje<|x^VtGOQk^CQjKW!Rb^f}GhHbt%#~XZ?HO
z<=hYEY7LfXh}G-3?9C#}xL1ui(|i=ftWz8R(;;jNPXK`gpW-YDT|at*QP10&9@^v`
zyGsS?4R`EeF6=JdF|QKcmYsl|Y686eAE<J-<U!3c4$<0%YnVy3`Wj$3_PeE`?a18F
zSghVE7zKDi_OR|RxfHXvg-O)~1CqjHMM<*(W$l9^#4W(jc8TN&?Qm@;4U^yMj#*gB
zg{b`bp-!+hzv;VH_Z%xv^9oOjLa&(E_EX^Kn2}X@BLlzITrB?vl<Re9qcnl8(bx0x
zX^8!DxlOd2$3S!Lse*vMrCP?8>uDo*Bzz=}v<DlUEkvREnOK+xb-AY%^J^AepLcHQ
z+mLuESp30&&x{cZhk!gj-44&T&#<aLdJ;;2q6G^FYMQgeb6=5!muZ(ui+IW@TCoT)
z^l|{rcgz-<($CR!>#FBc7(;%GA^AI8Rg@@ncjhVLq(f0Ku!%o;gGSw^AAfY+JY*D!
z48r4=J?>Ri?%lNGUx309Zla*MDkMI<<-gnV`;Vg8=>y38!y*sQ%6c<>P%3i--@V=P
zJs(D@PBs0*v-|1R8|{?L>s`vuDNVk38A3Tm5Hf*A{NJjyU!*n+@&qZNjMR6lFU7y}
zhD-4T6m76s(4J`@89;Tl__4596W_inl#%|(KJ<azu^Ct!LA(@_JKx~7;mQ)6%koSv
zK3Lv)A3TFC9H#LF>LLLUR#Ln0TjHqEze>#*@j?g5PA*|;2|&lI@bmk2@up}o2Fb2}
zTdFpF*UdAz4ikWMKWd}>ZBB~e<hWUxZF?tOJ2LO|O83OEZ)ga5ab4C6O$b{a*2=m3
zCxAjiH|z?5mVjv^f{nGHw#ckq<E;pVI=9$ev=>HDn;qQ5SmG-&ae2mamo%gv7#6va
zRun6560tDgs@M5`yvq{P=j8Ud1XlIHGng42<D5<Kjo1N}2M<`ibnr1|NgV--!=RF}
zD_1@CA;K~p_31`o1l!murl@$5vWxfGG2_y_YlgF>egILoACRTpf*CXlpd{V~{tyN<
z@Z%Jn6$moS+x6}$;})!^Ur{4r%v#|%>5>hLKb?|@#gsu2S?I%eD)qXY#&^A#4)x|u
zgzegjl#A+aJeCGC$CpwFDtTc(yi`fRv8gm_3(=xaZ!5%3%XlKvpI=q`r`>LhBjff(
zNL7f$yAIN3eS7D2RqpwClC-SMHcSHn(M2)Um6s6FI<1>TYkn_{F%ArLpx5w9x%!oS
zz#r#ZGD*BRaVsnn<jArr=kr7`m02Hw*OKzsT|)u8ur?*N^ElQ-E_eiElLuBxRz+oZ
zw6=zesv{X7;#0n~`C{LDdAups;^D!=)#c!$n!Dc;>B1X(BWf*N|BW~m`Fc0jl-S2X
zB5Z}ZGwFE>g;43lybOuoBNQI`BFIM-dAYgC9DGOMdn?UPu_(Z|@D9ckx_HpJ>HD2w
zjf@1~N+X${Nmu}|)jU$4f1=?v`uL@+#(-eS3>fyblw*eM%97GG+(OWWHuE?8cI2nU
zUHM_bHBmq(;)%$1=!NQ!E|I22f*4vdzyC^)bhm6$liNBe@@@v*698$iiG0DAZ8N)c
zh7|lS%O6P{r0f5}@^>Qi?MzSo;zAYxqWp%zaM8XEIwe$Aq=V|<!OtfcHD_?_THylf
zHBSQjRWb4(a%*_~SYSAl>cRm=xrEHU^#}J+^5)+fNPkToE>18=+!yFaD88NK(o`>a
zxfT|&O5$W@Ce&`W;U2x1+H}D7kwxmEipee6>Y{~C%i@k7k(Erc(fHfamZ-Kz7ma>o
zg;|O6_#956YZ=epZiN0=N&6hTjFyqnr8kd)!fO+_luWhdtZ2q5vZvRuWSI5w>h4FN
z?&w+o<sGnQQ965H(SKSg8OgRPiui74sL&IWFjjy&FkEe}6Rg5rxte``TXjy4_LtBM
z^^Ps-w0N=7OkWlEVc|jqJyktRLdv(&X3wJ;hEk&-uoo|5cjwu{X)%g<SESC2EA6=w
zwep?nnWXW;oK?Cs@7#WRun0*qhfNj`9K-|=ITD;+`Pt;4zkH{z<ZC&~YtPyc0Y^;1
zP*y|idS4|>2dIXSda4?%td~EF%MbavH?e(Yzo*CIG>a^hN05(Cp%FXJCx;@^v3A|I
zort-^CRT91B*6CQzC!mJ&XAx!V6@#bO4`S%!#xCO-{p<T_7az35g7Z~xGlB4*L<-H
z3~wWP`m)v=i)&D7D~0&mt^I($br(hY$X1T>+%MhMWyESP=pd&So|b~K-rB0`?3Bc8
zX4_BiBwwvw;~e3{t9&03ye>v0T+<OB-l_8yPW@;9EBhtR*d!9vf-guifXAin<vozw
z=CJ9jCQYt7-L6+6_3GQTjO!x~cRlP)JCZvBZ)X^*`X<LW%in6nWJ%?cm#f4x!@6Y=
zZw5gg!fDH7o0m5vl)Vm+Kz$p>$a*LaK{a4^<Fuw%id)4|dV+$wuo}TgjyWbHMYV*g
zIwU4LWut`-J^o(+zPL3~{r@L$=>M~k%g{xQTB!53d#FGk*|x(oXT1SG7Y(nG_d1&<
zv4md{xNgFufV4O1x~fzP6_bFdmt1NiawY)Vr>K+BYN(BnO2h}<3A-CQa?d`EXmwJV
zeYA;fL2)y`iSMuEGae^Re$|RC>{Rnx3b^$r(*T*=JPqT`h@WJcSHcND_X7PmfQjzq
zAE?5!@c2GtR~@VlLz9zEsA>98Iy5D;P=QRmf`^|^cE7*8Kne+Uu9s2$*dZs!muolO
zUl;w_93Wwc;$3cv3G>ZNV?QSZZil8;<n@j%^0gL`g0lBM`WxC$k1>x3ic9i~W+Us2
zV6BZ#u!=T0h7e$PWMglR`<qvKE=3%+)I}G?j`l0`dbAxjRntY-T&%RE83kIzocg!o
z5j$KWyyR$RX7<D4$BFh5mEG3p?DN+ysL=uwP4Qvs*iZ*~rpOa)nOa^o8!X5BLx{6a
z`Yk7hq|Y9NEawj20?4ax)Ab+rTHE_rr<!X3%rs|oZZBth7iH~!Vx*zEYk>;3(r3C(
zFsK*f(F-doY47sU#8zWSkUwpl;9dm4#YK2!iN5#!F^h8U@V{cEA6dP5Xe!AHtgLp;
z0E5O!kUf&-KYDYUBi>V#3#(f`M&koC2o1aIJ!Kk>-K)HOF4~0>Jo7y_QywIiB?Kni
z8uS^+%!`?vS{IbF7V=bsIsfEBOpg_LMjJbN>@NbKNeYl3OBpEimRP;=#^X{m9eHZ2
zv`CAZ7+H@wJ!n3{y?pjLQvU1Pc%W12!Jn;Go<bhE)!>o3f=1$IIb6_y%zr$jYfDts
zvPV?=doZrmK8(^0T2!ELr3v!6h~_raeCqD%#zmXeK4J3T!0fhT*EyV)5G<>`+LfSZ
z%e(81T=t0DPYDphh}s2o#E8RzAy6St>ZM+6)XbJsMF>0;wrF+4VeyVS?dkAw(}m>?
zbvj4-T-<4IMv0`Djlp_*&Pt-*rFG3MI0W2mwEVAZJ{Bj^@Ek0Dg0)ECc(ZV36hm~%
zKkeSSzgHp?=II);%$T7cWni0kx$FNhO7Gmi^P#8N4E&`{Mlgu(T^P;o7WXC+aWSLH
zpPd3@yipt*ye+zDD(f~R=(Y^Fb+E-yq|0mlL-~l9v0E*oaZ-s?k2yiEsCSg0hGv>L
z%?pbAPY9F!CMi<1MTC!HkH7;PzpXH9kpbAY3YETUZr=z!Jr1Q#=Gz{9RjD!oospUm
z1e?UBl$JO;vDhkY(w0y{A2W6c*Oj?oYox10HH`UNM>-#~3ppCMRiu?(ysq0UNEKzA
z%GQSJ8xgJ@|9J!R=3PEG8N#y+Q3~fdlo|g}L<JCT92QQHygEfpf<V;VAcACj34yEX
zSA#0Tk$@$EfvJ&nyffh7uVfMBzI|h)gI92Ot~#B=%zy9N-^1UPt|DtyK~yqU0w`7q
zAy))SkJ?KsX4l5ydq86V*HbLaA2*n9w`5X)zaHa;$2u(j)*vOV){A}V@<I!~iPzvg
zZK=xO&(?pKM6|o%U5EbBO!5oiee7ohcPHDVXlL<-doC7Wh+8qK^)S)fYN}FnqCy8}
zXZGt*(yqNFjWzVZu=mC(kF+ZP<rLutihRn0H_Nc5t_mMA2%3Tbh=BDXzjwOMGET2!
zU(O&!<dg*{QP~(_Gc!C%{M$btZJN4G-~A{U=SA0T#O_`Pu89y=YbLNMFYDeft><cs
z$GJf)*>9QHl>i2^+yx|;;){Rf<b+pr?2FNOB>_2dAcd$s8SV{2)#g3FO5%o*Fi3F-
zI$YLWqR*+_xobnR^{-3ZQynWkN;lzg+b?a3x>OmfV}6jH9CrPaq%DzGgRuo3{3xE{
zwbpI`NkZg4iF2#)sn@0Bi#;${7~=m`cp*q^NMl{U6X?C7A4L=0tp%odY(!du2qWNf
z;8|>gZWm4-$B7%`Ugmo`i*(oE1^a#;`EuRD1*FeA5QwpMRWQ9sNp%Y8r&dmW{C>R_
zoGaRqOOH>G5fUN99n7a!Z7n^KKN-R8@>$1pRP*Mwy}}fU1yd-ZGKmcyNx0q?Co||2
zU^lMJp0<M4_sduvF&cU1D`e_=FXk%pi#FA1mrK|gJoOPG|5173hamdVd7z8Gu`|ck
zg&zckR5~D~y=R?dU+TVt?%)14Z}WPrfev9X?+#B-Z7ilGo@N?~>itcL^N|A8>F33w
z1QG~w@l}XPaxm*>*7kPUFQU+u^}9-mcGK)pR%hnUMN1q#($l+V@;Y<bh|O{b-E!u?
z0)@)BT`hP`L*a!gBb!pv&=ZD9J(IdX>Ko{A#ic&x&<kk!tsu(Z2=aN7wMo2N)w30^
zmMOqRjO~{wz3G5IIr*_F0=QHrLT5`8+r6mrX0ZI}7d2TGBZSb9V3dbFFP*ukL&=?s
zs=Ne_%s4S3Y%X}i_fyNwI6|EhP)7StzSFkBPPeJP;BXX}HE531NX7V^W}XkVE202X
zj{^UsFp2StAuQfpQXIPVLUJ)(zf35k;zIo?Co_&CF=3JAAkgM1!D>)s(Tr83FRTvm
zt#O?!p=2Nh;yV<O0Hxb?H}?F2)I41pT#E1i^e(}~z$RmxFE};P1?1<~0g@Qy6?uA!
zCx+&KOB8Dgvl7JFZbkV|4i9$I^4*iy4iH8A?M|3kt)-K~gXXe)lsjKUWsWODOaAF1
zpA6w5o*AenKGqfHH$80UgZh>27H>9Df)nI5T!+FhxjqAh9|!z*@W47!EdCJbq18n%
z)BlaJ*>qF|+X_9k?uv%xf-c9Bx5C^!R|Q7^rGFBp|EvKrct0<@i}nHxS3J%9>xgV4
zxi;zJgp|j!>$?KhtO}_!jMT2HZ0cgv1sX(cKL-(IST!{Jne(npyu;T2LCxBs&q(+$
z>xW)U?8U(=s_Q}ja0q6G{IA%PoY5GY(MBIi#w0%W{ie~;>K>&vd-gypovn`opKY&)
zAkt3}^C`dpBcv~LLJyF$w|F=?I_i~#B*7i}Od~>A-j+~4sK9aK+AG&Nh~y6&3p%*@
zsvvX~YsfGS<uhUXgPaHFT=v(Qp1+p$)LI;*|3@Pes6TkFnHgj{v}TEH-cY=oIGvFo
z*0KNkEz5Zak=ltc$H>u=<><44lhRcwn!f378QSOK2jjh{d4g<i9ETM8ME_$nt{u`%
zsBm{@@T!VdDVV@rX%x&`-UeSULA_kDmF_n`TT2*;PI)0;n(E+EbKu%SHXOb|dmtag
zO~*Uker7V1SfW|w_|wUi>8ad96QP7;hcu-QPTIq;sWqRK>{~gopnKx{^46&6KxHA!
zTfB{%#Ke%gSt6D_xY$fe6)zpRkkvKrFdl?t-SRvVu04JEb@Ln<<+A)E`M=ttR&5Tz
zi(sY8SB1^cAs#afHh9e<^S`tYam>@%m!T}&J+}OKk(qwy_9OqGIP9OE%C1NVfhlz9
zcUPuaDTnCvGi9FGpT<m*!j@-B2~Y%WFIaH@aC3dbz_+Shg)5-V3)Efw>V0=KPpyD7
z6UjBM##bQNn%i+FWFueA1w#%0`9JMXOi>w;<#>(69De92m;o>3O(DByyh*Wx{ja}4
zwHFB8lIcEaYO`GR?w7wV!RMztb8#Ifw~VgJtxL3b+h!=iuIREk6l8oF95>>-nYZO;
zV$p^$!MzJWDG=YJQoIdTt^M^91&g>ZkBO!nVYFPl$3hkiRg}Zk-3YeDLv%g0^LT7Y
zA4Xuuymlg6mEvEZrho>#jqoKzQU((V4a?LQG~R*E_#qiv0FP)7A3GaPyMANMS|j5C
zU!LOAldw<#tCA`B#dMAyL)f;`D@Zzg!)8^dPk;Zi_hU=|46R@u{RE(Ep9pmYiEe8=
zMKoO3iIWnF7$4IL%?K{u=Hn(U`(PE8#zW6|!c?o1U?!)(YN|9cLKHlLC&4B=bZOla
zD4;;sR?0D!8X}z|YN2OXl?5ED{F;rYkpI4U4+zOEq;L9mNPeUx;I1mrp7A+YCJfPH
zG3=RRRtZ))RuqbCH-?OWK?^Kle*&uGSl9yx=`hh2UeODQ{R&qPI&#@4hyW)>bYD`e
zEvP-TtAr^jd%k;2yQP#m@va1+CPOOiW(~KSa*=2xMDGF)(J(bR5dv_?NQ_xmTRKv$
zgK0tW0uS8LSb>}&>~HiRT4P(DrT{p5cS>w+_FDXW6`N80<0_%8Jt;V0`-D|JzNx6M
zF_p#B-SIf8V_0$zrEE}Gg7=ido5Mq<z5R_&i;Iev{Ec%cBBBZEF769=J6Ca7?8X{*
zt!JvZJ?^OuZYV4tpO;A0b6db)pmtK(uKMpG&T3Eo(E{Zi&R-qEnoa5n7nf@%MzL6u
ztz&Hu*sn={Z!Z}rGI^_7DJJ;xG9GtaL>A-@mV@B&THcjR7`1V^apXelWOzREjsMo_
zCXO4?NT2-3Isn)yoE5QcGGX;F1E|=}d}4!AY#N%F5p;V=C$Z~$&$uMtd6Yy6sfGir
z+1MHgP$*?7@%&{S0v84lW&l_=CoQs~kBLmZb7}kgh0$E|WoX`Z@v4ls<LP?ph#jH%
z^$8$FLWNN3`e!9w6=)EX32=R%&5<)hlH<b;G@Bai^+^<aNp)4=b7W>x+^(DvBBvGN
zI|ZO}p${yy=ZP~m;Le$<_5RiUlV+x7-%zd@6Rv2SoGDzd9MuC9<d0%{Y6g5k5!i+B
zXhbXoSCMRznbl~>d~5br_z5poeJGE_6)r3E2Y;)l_s`zjC|J<2{IuMzeYN-HO{jO*
zB(LIs7BlMOE;`R1$OU~y#}!WUHk2w+Rw*Q$1-R{TA}@*vPjK<<)~Kk=`Ix~7vb@Dg
za0^o)e<0G23gu>~K%V;&hYE_Dw3=tsm~m^O^A(LJ6y>Rxo)GK-HxrS`^y|(DKXi|L
zKLow1S1<)WyGwavLDccGn%O!wDPaWc<3P-S=SvE^-&WDKhS83b%Bjbcx9nZ0ykPn7
zXwY_r!x7}44QS2kGn#~UoK%=ZMIUGp>j#8grbLYgPz4klegr<~2Hn<$l^8tJfcm1W
z_<Ijw5=F2%bBX&7wvj9#u|hLmnM;4DEeKoQlss*mV_m*`OTuzIW_DLVqo@3lg91TN
z&gOzg9;2UG%p4r_@0ts!#3LUg%V0>2EvY|aqjA$>TWqR299;Uc<AY2n((lpUAYC<;
ztuAQIs6F)L1D71uYINM|MvhS-k1Z{^uYu|U<d~LLMM=<4&K5<Oc|~B4Tk-=h8h`S!
zvuIN@@<z85o&P}rI=01Xr3^h8@;NI6nc_a<K4f=m0Z5mLm|LH~wotemBWgc0=ZCe3
z9Sr?u(;0s93fBISeGJaK<hfTqjVQ`CS6vnF=ei|<=h!%$+Q+CaYg0o1=-bP8nXMBQ
z`m0j@y2w~kFM6oSfM~AZ9k!cZsX_tyVje{}?#I8;Y4H3ABjr``r-=@5L*+!!4E?4X
zPcVn5&X=lI;+{cT8V7!zVps!((V5eR2(d_C>x}*XV-r7Eie`M%146-zFq3n~e6>#r
z4O^OM^}{fNZbYesi6BsgB1qin{jCs%TncF56wa(S3`P&f?i;1xL4Ov5yS=-DpS1a1
z8F*N*j4HV~qm|g%+7zaf`O+@su7)C!{-kH2=N5rVA1AZ8q(jkW1shD44^~;sGP-ut
z{uC3(YTEdHoA-iJW#ESOBSjbSQV-O{<%X&sSNkGezX_EMoUJGzP;Kaz++FLKIP|$i
zvN+?}3Xj^$4z4Np5|1_d@4{ohUEKr*!79Wb-SoQ+OX31Ys=rQU6*hF18=1KMFhBz^
z6dXs|P)q_p-Ae}7%w*kJm(B8jXwq+fo97E)w*92-tTe_9Eeq%;%;FrMF7{=fkoUOF
zTUnBgF7tq{4_r=sK*R>Hz!!eegoC`G-yju+$o)HOfo6{YfuG_`wAy>=(*Pma60}q}
zpF{tT!f%?{y6}-@)`Q%>n-OeN`s!5nIOlT8TwRL^j6t3AueF}WdCeBQ;t!fY2+axq
zKSghGsxvIZG?7S9n29aTfPM|D5?zf^N?WaozKA9QRE%T&+#W-^&>a#l*pm6d$!U#`
zHYN!Y&#@Bi1F&*S+u$^R;g#YYSSAwFFh^6b7d@|SgCakGvPixQ*xD=<c2ievvf_(+
zx2sHscX$t|Jvh9$SnCGBd(>~g<>T1JoD8%mXY6J5o?|a)hk`-|e@HtjySWOt;5(Qi
z4Zj?YV*N}lTYTm^k;O8PI?ld(0(ZQHY$<$4(0`}kuu7EX91wX%vw8T*0j4&fu|TxI
zBeu4#%C+rvZYr$1eB+Xjr60)a1+UYjjwq#aZUNajZdppMFBl|zTNvuNlAGd_>$efO
zL}EFC(gswyL_y$vQEzn@@uQj}6`0EubmAL@+{j?Vnx#PeL0*k*Km$Q0%FqG~?08P)
z6VGpmC}~w;YxC!(0JU|#wWn%77lWiN;+4+UrBG@vONK~^F_#37@0C@-urknpAqIB_
zsOay1y&#F+J3X;C*xIdoa@esy0qxD|f48$s6F)}tIsh7hSvAa6n*ILS9ILVJ!s@I&
zr<=5^yC}7aVC%X8RtNnmuGzx;6%MJ}?YKzgZW<lYwOk`Pb#QDHccZ-;+Oct<kLMKX
zA4-(m5zhEUf`zC-cEyk0R)9a!83j8^J!w4ut(r@#$A=tUNo0lJgy-tTu5#HG`|QDE
zWYurjw@0h`KwH*5Qe3o`1)EoJ@X3Nhc$HA-l)p0nxmLajDfaP$BZe&Tb(B|Ebdl1`
zB($qL`%=BqoOC*77&tAp1Y$OVnX4@EU_QRuJmf+Jt7;zHO!dniMdFEl1ZOVvg|42v
ztlMJK7`t5nsZ%1q2QS(`G6}J5EoFR8LI0!9h0@?w<=~wl2_OsBPeu0CwL{m+)UTT*
zYP@qt=*X_%9sPTHu)wT06Vn{N&@d**rp>*ly#R8AQCJ~|Ql1G+IoZ5{*(hq^X{bJ<
z;ZPEevAZbXUN=uGTgTZ_rB3L1jk>j6dL`a(9yELhP9sYd^Eq(5E(ixWhm5DL7ngpW
zJ;5VcJDW+zR;JZjKjj00lhRT5G<Ei^yHQkC^%LbPI{K1MPIplkzGppzWC8TZg%x|#
zZf=&;hKeI4Qxm5~$r!G$<A1LGa7SrT!YwVLR=)VXj-U5}eS%tG&LZ#3@FDCqtZAmQ
zn0xg^)_okmd~>0j`j)<j9oQ;?@A`K^f3XM6@qoP~{6p3zrd%FJ&&RqY9es&@ttu&F
z4R`i;t)mDAK8@LmQ}r}0WQJ!wQ<4Sb@kXQW%6YQY2hwit(3RaZ8oQzzrKJPb4Bf;Y
zqkpm4b~8O$@JU_7e<}nKu3{}q4M|H$gmsez5U_9CIlTu>-sNiJ9h>}~5w#fyk|Cy4
z_G_b=Gqqt)IR0xQB^A9C&tDuEn_m$nrVC9V_m~Ak8+t_HkFPRkVYWs%<+QFP!FgX+
zKTexQkbH?8jx^WQdn4#6?O9qUC?Xu^5TRZ}MNishJ}|`$o7rze&VBi$=L4c@6w`lC
z6p2-WC|jslmh&Y}OPzLq(W?(^I3%DFh*PyJrRzOQ(ab}|zlfIo>QaU~loX1st%>!#
zOpRI54c{#@IGD?0>t`Oq&<^N@2Djlq1AUk0U;RP~!n23Pc%W_EX+eg{R_0Oaxo=Zx
zVP8JrV>SESNrGabPR7~~+5K;@PBHr4ydO>LmzEy?11Q+{K=;vxlwT#KSNJnK=zue@
za(w-}i>CRO67%|?jiVn)R=2_E-Kd*#-*Vsy#|$e-CnSuLu1CsR(^<Efam^_AC^5_o
zHEy=hm|c&RTiqwA^(6qw0<R><!uT`6@xF9;k--U-B}FDE%ye@|<hif$Mzajg=hOyR
zJ~`P=FYid@-*xZ{j%G9<11rI(+3I>m+3V%PB&PNT?NHAM=`Q!BN}aCST%FC5A27b9
zn#WX07>JRBatcB_Kr_p06pZBA==Iai6%G39s=2cFDi2cr{3vL|FU?~1+P7E)sof?M
zfRp41gd@L(#duU@<8@n}Ec}V-^qgLlj8`Dlj7)Y9pgV+~es7~rKUoH)(J|pSFIB#4
z`myB>I#KP33>1PpDDrYoM8z$yP8H!9z>+3$H3<ra0GV2o3zh+PmiR@iI_^{aKzcd+
z;c0~hX6LtyZ<;bgzD_rt;8+lvQUPfFO}t=N35#@WY0qFG*;xHUOH;P%3d%Y*d01##
z_a6_Lh3JQ3y;|o3up#xIIRpl1E+5U26-vFvB-*$lL1b2{AkR2alWT+j_vWM^r8i)7
zZ79;-=v%7yT|J61EHnqHx`_x*8bX?<P4mlg^d$Qj7y1V33iE4L>%_)_(j22DuuGK%
z?daHbD0=JRP)4CFxO3+RYmGabP7l^tVZncOQjvYech~GUWt3{%RJsod*?7R2y@jL?
z=S~{M?^3y<DKF^lhdAYUPCOP3%+w)%qB5lD_Z?xSZ~3Gz+Uw(@zcc6xtyWZJsF*j0
z3Fhj^!mREagI4F#60Ht=63BPWaUUy~3E2FA%K*(}{$@QWRyLdJsXyg?bxikBDbXrs
z{n;|VCAobuvC_Dk^v|#ev-4l;sHb@U#pTZDa5uJD6u_aw;M7&ie8A~5DJzfcX8U)+
zZFT;>DCJbo#(+pe2`QZ{CxYD*oj8_}%#5-V>5mXjQkeV=Eei#M`j=O7KH<Fpvk6j*
zX?0CO#w)i_e6ZJW5fH=U@r#)duc9*rnWz30y>5IEBWIy?-!5g{L2w5XKF^I9Z@m*4
zdUcD%@m>P-D;jbP?_bj^yfR@C>))KGr^%_;tV9&`cx!Lv5mI_L)d^L<I`y8b)TY&q
zuo|4rm~B2;ZbCX`X${(q8tyPJsqq=SKj(pf=OZf=?RB6gmZ{(@t(@Gv%O>e=*_(LK
zb2P#oX1ylglzX>A2tFx;cU!&@bkL(?7sDdlWs0=)e<Ieq#!uC5me+<DoZZxfmHI$e
zcIsej$={@rd=ipCdRT)&5RG`(9<9&9rvI$uGyal*UnBO>^eX8dJXT2`8IzZ3Djz$2
zLpcrF;*_Y1sKF1dtYB>>c9(KNzjg3*7lsG}$*0PYQiNdz1znNZ2B6B>;tk__*_1h`
zC$-~-sJ4N2Oo}R*4dPMO9B~O5<fUnybk^m`3S4^D?=4QsuOJ0iLV+JmiKK?v&#w=U
zwE1ySiKSA8bBKi>r|-i{JFG^0hP(^4ddKm^QDG=A;p!U<5PHqdkPvRc@-u2ypBu(i
zVh<XdO8V>I7NupqP{?6T;KDW@r+aDhmk!!iX3CHm1R&z>Lq{yIE}`#0Bj!)9TmG$4
z9F11Ju^U<He!%-5=FVwB6lKYRZQHhO+qP}nwr$(CZQHhcx9xi#<|F18>ZK|x*NVWy
zxffR_7qQgr?aJ0TApaW;UIpa`;h<p=S7xFCu71WocRV!6XDB6fWXkjI%u1zhz`7Gy
zN2p)TTK0k5S(x2g{YcE%OdAsc>OdGNx+8p+yD603W>2eW3Z?1{`yk2ZER*#dz>9oZ
zMij2*kz@O(ZbZ`FS=!o@V{-B<=frK!)#)fMY&lShr6wB3xhpZ6#T>H-1EA8^tv-RD
zmr6DkJ70lk+sWqP(7UaJJ7P&AE^q9+h8}UeL!Y|E(UC!g5v}8x{GjVMIDDz>S|i1O
zs7Nh7`&u9^n4gfa&d6(9>}TAM)6`~?nASmFAkqSm+>yvZXfL;ORRWZjBU`o<#iui)
z-B8ru3xQd7t<GAQz258-24zw<0lSx6e=XZ1PcibnjU8&B6yJ}+JfspvNvgbSj8uW?
zJ4rwdpQrj5dye9@8`&w@h9xI^uS-ArjYyi-TYLSjD``0ROd<m79UxiA4r5WH5o}5s
zi7w9IA8p(-8?e%ux&uz&ojJe+ZXyFN4yA=?R95A@6BMA<;K7!Cm8p|ZS5=ybC{FM$
z=0JJ5Y68ba;WuBS+`*VM-}H2K$-1@Mw<d?-V)DUKojK8VFGw^IleX-olqu&J9`fB0
z3FvDMn&<n+mR-tYZ>j^tYWeqb`3bD$xoZ%)7>>W#6M2&^wyoa6wgI|vcnDt_3SEAh
z$9@5wsEi;|5JpSIlQZ)0hf$l^^Lod{FXM(TeOUmYsyz^(+E!4)ip!JL8Ail4#d)qN
zd;}as|Ap_TmfisY!0%}yHP46GC{W7GQKpKu=W3!dBe`g1JRW`~{TDjDFQMG}+-B9M
zY~uh#yqFyzep>(h-dqqW4r-KrKqWw`#^~Rc7dN&!PK)n^DR5Zi0)?58#BuI@OF<!&
zzK9_IP+_C2b8Y&7<_d;R+|uezLs6`||DO0C8>7ZvdnxcgAZUBnF)w(@VxN>f%}rMj
zgb_Q64Bu-~B^C>+;BAx{W;eAuTGEpm>F-_v1f{mHX2C;oM2=-Y2x{Ag=!W4%H?pH~
zx=Z||D(YQQV8dghTnNIBEra}ECougu3hgNd;4)0XKDnnB*wrqt2W_@NF*H-QcowKn
zW26pKTIoUuX5LX-J;}$%8-(WY-<R2XBH*78*9!y~8kVphmA7TWD7AMaP}e#BtPGls
zzKJStGY-%quuiJ;;LYBZB-d6y3R!p3fF?$&kZdI4TuQ8gv?43id-FS%lc}*V0w^ez
z#knv?Rr(c}fX0K{iH}IhnjabIL^gP=P|)njInec^9Fu!zqiBO`h{~GuxtB8D5548d
zR6xhx95p?@Zi1jKXIEFl@jh{@u|06(?A|XOao?x9hgUNZZQ@@NvkmJCS3*&$pj+k|
z8BWYE1*H3i&4dR?Dl7(i1Ai`$Jl%YNFap{gu@$Z*$Kje24PF&%d$eRZY5RJy-<gm^
zpiBCNT=4Y2=J(L8xrn1Y5S_*>T)~6Y14gBBc0nCK?x%P?p0BQJKt}#Y-<U4sb@vvU
z2>+a}z)vs(cGJnkA*hHo%~c<`b_m!eJzZI%iahXT3ru8^ENc!Xh2i*nYj=r9y%f>3
zO`zCf0L2l=i2qv2nG(VN6TH!@dpyOxmWP}BDqXwX>l13ztbzVZLSm$Z*~?$l8&RFu
zPr5k6=CnsC+nS9yd8<{SB3!13MO<ZL2z$c7kPQl8xujsK)0#r?FxLQ28s9qvjnl(k
zDs|){$}H1eED7UWd*?~OmP+B|znF2mWYi6c-h~FK#J&#Y+1n6;&eNC0Pyj+0NLEN1
z>X=oLY!3YDblA8c#BvmiF9RO;H-cy$lT?;xs)D$d>uQaY`{1m~E*4@ObpWx30Nr4B
z6_U}a*`+93CAWcsJ*03G-$~DAa-#hs4jTHi$gg-tXaTIbI(V~W^usNr^6Vrp>HHiw
zp<U+VUP^}TOrs#rkiwPsRIBEjN%7w+z%czQr)cVx<2d&+MyKJ%5)|zXow6(7C?E=&
z&OY_X!1qn2J&PRtD5Q*ck;nr#nQ|;xv+c)dfAO#vrG!oASdm4{BMxLMy)Abs`elfZ
zyg0gahv<KamhB1e=~KBr>}uuASW%S*mqgP>=q3QkHm@Bs1M%3m5y_h9LJpu!4|NH{
za0&-j?d!rD(j%0O$01<=h*ptyumId6-RfJ~R<(^J=Rm;^sZU7$$OZ|;tcsyJ#6r4q
z(YJ!alF<C?P~gTe^Qff%jyWc2tEYIy7JR?x>GappCxmzv%KLs}*5s#S-)D1r>xRAk
zNdvG+Bm?H{C+>(ay2J1qqN2rEU_U`9*_@QwRo<$ghx9_>&C3>Jf&~IITx`y-CF4mv
zL23%h#=M~F>z60GEVzhQ?tdef+^8AM#f1<ACe=gnhhk=8i5)fZ^~i84QC_M=ab@{v
zkZ)N1(R}>F;_$74rW_4C&UftG(~Z_P-G2;2CVTAuqqwqDf?6|4wx->6z(li+zxN~R
z{sV}4y}J&=t?VG3;vWO;%w-)wnA#O<064MK@cz~Y?G&#(3gJ5OUuKM9=Su1^)%Fs7
z0#0cGE+BJNZ=GV3@B)yR?kkUbe#0xRV0`CLJfe({+ND0&w#eA2MY(+ES{s4MynzkY
zGu6yBeQlnz9%`ySa>(m};eQAWGOolx&uJ6t`p9szpaX-qc(q-P5}?l4-E_fKApk4h
zwCM2Cz~&@ME+oE6_WjRQuN9+hP@(3gKxr~xnS;`csbCMPN}il9S$6lL(_L2WS3nn>
z!$9pT3hIO><H+n?lyw6_c#HY%>3(o!rtIk^WeHtEc5G#zV8IDU`$7=Lq%`zSrO*{&
zkmVBKR7!tr#EL$rTIuZd&(eV|2&>V=oc|shrca(9d)`UUtruPy8d|gFbh3|gQjP`=
zOwgNnkmDRPz2sN|u3}2;yDQx1EaR&;n-mBzgU!Rwf#u)0BJx$L-PyZHxUVar(hgYa
zZwLMjQ>sjkd$2h`(M<r`bJUbPLK)6W`nX_G_=bzommbU-P8;Gz5q>!6I6#}kfQ+y0
z_H=U{i7sAK8y*7Tsiw{noC}VQjdHO!?UIP&$s(E~1WIJM1lJk~3Fq^+4p*3~oZe|0
zAe3c2TPH<)Ygq6ap{wV9FtcJHS9n=I5Ftq>c>~N(eekDyhPk!a4a!+C9nXm>HdCy=
z_)a@dt!!UVtw>`!*A#-lhkVK0iF6tbJP3#2%_0P)<LQzQ$5h0w<Zx!g0rJX9R~*#*
z=~E+OgpIP_Jp-1uFOZsp&J8LAKKo&dpiAKw&EfO#=<Xy&(l@mB9N%M$o!3|o?})R`
z&haN9S5;(YwdmL}n2)rg9-383EBHLuu-ROtuHCxP^h{=FW-*L=A*@;GASa~GQSuh}
zpCoQ<>C&4^W26!07rF?be=$`GMSczVM&||z71Rr^n+4Wh;Oi1cmhGEe4tZ?M&pBRE
z&qGHjQWhZcKmI2iDgjS5MHPM_=8wFF^4jX=kV$F$W%!<6L-{m(?oUO`!S?++;$P1g
z0sK{9uBNYQn8ly#(4IT8FLtOV_0#V)ZbP-w52Bb$j~FD@5wl%hif0FPlM6}T{ZB5o
zF-gJ$mrg3A1E9Dv#W6B(U}RX6a7!jn>VBIqYtXwXGwAa$DBHq+P@f@*lGpe9GG6WA
zol0!YLa7>%*9DHxa;4+9b@CIuJQWTi8I$Lh2zgs?kXnw0Jg?*bfwn0DZ-V4|*^4fu
z6O}iWpe3LT(k~pXb1?yt|Blst$R_RPQKX3RUJ1vvSD75VE2T1WSXJkp?5=@M%NY78
zvuw&@PEft?c9`nVaL(tzL2ivCm-3HYsk?LhjLR7N&#J%v@huZQU0yFuNdm2&tjEO<
z1DTHVwh%LElp1UVJ=6eq=Z<K9m9rFyug6Mam25<a|Kst@VXXt}XNyNb;ROXxt_*n#
zyt!UbN=0;d%?C488EQibw2S}Ak~>DVBkK~k$hTt}iFH8W`(#gb_;o#nZ^IkXbC1zR
z4|<imWhKz*1=p#dQGn_7JEjgI`UQIxF{5z+;oV$NTv2@WxOlCf+Cthi>SxqJ)FN8~
zjQix!sI;50PG?@17t>8}$gY!sCvm(~?v3_AY%_{Y<rfWw6R|h{2Ljc%Ex}Tqo*nsi
zNmFf$j)G7%dMzehD`)ezM06;5XtAs4Zu|WLk}7F0AdBTbap2dU+zi>>zK)~m&XdpO
zJYN!>W@J)y8QuYSP7@&q2);6@bwQiKE=~?9Vx~;*42mD^?VcKpxfD=Z?{pWGf8R0^
zm6{Zmm(nk4C;})BoVazujwb#HS6I2i;f$hIuGXrouB!rDM}E>Om0iV`7W$VAK7?v%
zx`6T`_{s*h*Nk_i#hyzYbAN1aJv4{OuZYG-$9P@yqVcy+LM`PtVX{XnS}5q`$?yaW
zuh*P;8e)`2Bl){p<#&G~5Ise<z)nv`%u;Yi<#x@=!@y{uLW<^jmMBGN`I+RAg8W;H
zVmq1n;{lx8zwaRg>GZjn4+8A5)*V!6%(D|Xl7Ov_Ss6n4ez-r{G48);?dE^w$zmuo
zgJdTIaPttjd6S?wCW;rnYz630J-2#&ukFxhLCxeG@iP0Qh@$X7<<)LBBCm^?gg&cg
z3oA1DT(kh?SI1~WL^U?x$eIKD!XZzKn&Wi&2GDD<BrKwY1&_{G$3Vw+Bd7Yn)0$>M
zc$Mo`)W;`^__g>Aqw}3@@pjq8*_QZ-;ESVB=u{c=GG)VGfF<hSjwZgsd){Fov)8%Q
zQKCt|a5LAmU+K-XG-w#DTEp-jb-u=amNJ~;!p}RsEkS`-M^tblV(9CaTjQ#CiTftY
zmB09J#+w6|brda<pNe!$VpZ-@RMNh;qX#qFp#z4n;=I+BFM_@-{cSD|EB1!_=~7X|
zuC*fLS6spXpaA>3Nwf**kJBv(MdF2*z5UE-j1$nVlw5(nLLwv;LJ}0P?z+&N<MoZo
zKfeQn9LDB7wiey*3E-DJ-IS;m)^2g*s&GsNaSmmz(Dj4;qZ+v`_dizp`F2&(C3TB3
zjMpMM5yoPu`ReY#LtH?zmnt@f$3kBg-}`ZLKDC-3JFHco2o1hoE^W8(`_dlGR!f*R
z8nhZZsI}z|?U-U*;-V){uF_8dmQ_f1gTpa-OV+!uVZ25re-hh?OpY|Q;7Fjyo~RU~
z^f?1~kz@Jz1P?p9yGlDy*{ji=;i`D};}UkOpE=!DEXb;3O;=(^Di=qJlL%8;BDUOt
z3`NVM@m(2)nh<Jhb_FuL|Gp4Jz^jDGKOn05xy^*-<9iNRG{+KPn$-gDB|W@dwZO=?
zA+K*mv7!v-3_5Z@)T5<Ges>uY{?Lh6mz0nb3`5h(^oH5o7FN2RRoP83=%$wXqcRdr
zb=?-J**}bVRN=j?l`MRZtw@U3mpu6_!iCn-THgvobk{+1k02K~%zla`on2@m`&xFv
zY7tOFvnyKQlOz<;Y;f5<@_hCyQIy*X*uhTOG(UucWAd3Weg|s3H!+xa(N(YNf+m2&
z$sqDxh#r@m$Zp|*!#VovD<ttB!4q6@M6CsLl%MJxZE$p;Z%R*5RYf6j797EGDZKyE
zd19LZ*t@bDwHQ=@`cc9Z(4TcW$9fb9R=b#s_fhly#>=gRmy~;n63)YxGnSivx0*rt
zbc$e|e#tmw+ZKL$cbq}CgL3YW1@6!4mw*7bZZV60wi<ibqi&?$=?9G}iz32ChHLS7
zH2Uo3*H`?52hAz>f2x9(kgW{8KZ?sm)_AT>;rWUpNF1L)W9tVYrgR|>T^QB4?A(By
zEd#{?SvcUs#n>l>T)qr7pWertU^MRi5-**LDxiIaG<mBslnKsN|8kT82+FWP`Kh2q
z-(n>?JvEvQZVr##Ssz7z;Yx*J?9N%yFN6vO{3MJuJa#FQGMf}p^)}xENS^y)p_#cs
z`np+O%{6_()oGYw%x((4<HI=(^O{|PVqG{c4nHqN7p2q_w({Ao_r;jEv$Lo`p?&G?
zALBu$e!8oZ-@b|-kEk!PPWHoZOAi}yOZ)qpE+q_8#{MoxhfW&RYQ^3{xqWdQ@3!uP
z^u{ty23M#3s5f|Uh=!bA&@U#a0&Zbu4ADr2#q8hJZ`G2yH|!xv#28~DnkdO0vJuPC
zUlZHuyuz2<K1+4OcB$fmMO2^)yWRG54BiXPVkzVxND1kbvms@&Ev1UF@VxG~n)~+*
z({P`+ZvNqAJgQ};l?PO^Rle%m_}HDQvZ4U3=u7pI0+<_DFgM9JwXj)&(4iV;+1ZTy
zk`w$yBv_dLmp)uVB;1^u#Po)hXrwdpz&xvhKg6!r$vg@q!6fK%H5EWjMb1|eY0@CY
zjm_}Jt}sIZMV|<BqDnMR$-BYq5?y09RMXr=7m_c*l_X^V63V-N{hCpkXL8Gl%&-WH
z@M~|Eq5N0m86Qf58O@`k*ClCFu$4laEFW~(>f1!<Z;;RUBA;q9Wb;v09pZDV*wF$b
z^KU^ItPlW<5WaQF4fQvff41X{1W=4++={NgFfB9^7d`#Cb5OoRWIA<*h<YjWXh4~0
z(q06O$;e_1H(Jh1pE}r}hJoiqVE&nTyC|@p7ti*>c$qlOmXd7}UNCR*dS%ZCk*4`=
zrWN2fg5x!}3sxPHq9uSAzTERggTXI-gJn((rxd(vR^PfXjjxuAGI!JmV|t@XQXoiJ
zP*p)_<-T1ByOY9>Kb!fx0#A~#kLW$0D>6zd$<^RGKUkxu4WTLM64IYC%3H}?NVCeV
z(N#d^<RW;*Ph1}95%#oeIjss*n^+dipng)nc1?<6mpal2K<MNR%U3WULlwP!{PXM=
z`D={njz}mp3w=@**<)P>Tn#3v0!7qgwUe9iF}Nz$8BdYvv}V;M?yp_hgFJ@gP`FZn
zGe<=V2N|?^tq2^KSVUb_=I?Z|NGXIb@NW6oAYV1}VXi#Xnx=o#c4fGSY5)BLk9rkh
zoL~?6zbH8qfn!F<IasXz%TBUX4+-CChJu@fPJ&DuY1V%}ij?lU^8pTZ^!ci)<3^W*
z<IcSSwedIH6$+PYea?CmOdDL~H}Vh*Y+V8{QlZ-sR){A7o5V)>zTz$6oBh^IWGqpV
zc9fbIzl(!j7wa%09hBFWl+G2v_En`(#HPp&@|2kKOWAl;Baknx73jP|{ZpZC!=ul?
zv0M3fWTPe`ZxW+W2esMnE=I`+OZ`~!!;;r`fmw#m4Oh0YaV5Q|P@Jjjai3iCAO}4u
zAB|PCEQ%T8SE+(4&t4eR(P3P9#*|H)xD=Wsd7{lZy)wt6|G+dHe>C3W9LTN~($AWn
z6hpIz7RG~mtuo->^&Yw1y%f{<;_t`g`c+y<3Aif|oB)`xgu-AFSxMgX<^tLMl}`;0
zoauLAyEU?7cQ9U;S%OZe&B9$;nhxvQyIiEw|9FxCn$w_sv&%R}gb~f{UnTgN0PHZ0
zno8GQ@SuGIM%9U?(qa%hLW?loq@&FKBQ{rd?a>phnvDcmlK#6FxN6SDqeP+`)sKXI
zN`j{=Nys3%ZK81^<1Aa`n#r}+B&l-l>19b|yAX4e*8P&UX=6WYBY1Rmi=Xq~^_%3k
zfb6ugYCktWkr$=NPJB)6Dy~)YUSWb8rtxJz7n>94tzLUF9Mxkoxi2zJ`d6F)>W^-(
zx|0SQJ2(2%6%5DRYQ(j<eZ;oNEn8iaBgT3<+Rn&JxLuwY_@9nIT|ni5Uo3?MKg&)H
zvp0C$>_7QTpF0S;lqTU89j?3MzK|dxFi)nLCleLdu5Nw;_NA~%cwz`-3>@yKffFyG
z^;Y>d!Tt?&aiaTpaXM5S?ubJG)Omj+wbCJ;kRtSpb6ufd7XD}z(Zaa~!8c3Chj$+9
zUpe+8Q6vzbARHJ&U<LXTNj5?chbAIQTTSTCUwg&k5S!=}GYis8a{pB+>Sio+#L5g}
zVn)+m&MUpmo(V%THgq-`7{rxMknl7LRCMQ>8DkqRmTAZeop}r}A6A`og{`|NYh}tB
zAg?=$l!_+jnekUIb7RJCZR{6ryAw>f+!5C^Znv_Aalo#(W}PEIK4LczJrUY8&i17>
z&K^vr6Zt19XRsc{Gw^pd)h?~vwXbpu{XA@u4Sw@#kaWq`GJWE!Lb~Wgu7y!!>u<-1
zR@|MbEU@$gY_z(=udXbEw4EN4ph}2m`|>JoC#Ls1g6*8eFMreDoY{Y0ZH~5jM8zAc
zW%H8iN8rRJ4EzsO=Kmd*UHG)zb5M-$(3LQ6k~Qj3%^hhZ1gyj;3s~xBs|mQ&RZsoM
zd2}2G6qRT@C=CuE*fs=U72)CTb!xEfw;)iJS8YKf>CMZmxs(7PUgOgjmrljLp*Q?`
z4;$O$vj24elTR>%*s{xWgOPS5%;?L30Mv`#;5`<R;2;6E&(nNr!uezuMVo39)ux|^
zldydY(UrV5LR)W-Iwg5w`6>*H-CFVy!ynk>`xEnnd-yxU_}1Z8{Gmgd?IN!;J}}9`
zSt9XwQb1{w&j<?$!{q)gc9y?d7Oi=V#W(tiFElwCIp@HN1}gg=Mz3NXAMG9Oaj+op
zZr%&ab7(IF+PW*A3VR`K988rQ&f8w$11hw#_fnZ~D>!>xp(60xN&EGMa4a0PNIsMo
zF;z>Yu7`QCIpdUf6z*IAqWgRoLg-607ro*285OhaH~pCXllr{&7DFXY7*lCD&c_SP
zN9Pn79_L>Z^$sv}=+3N-9tjMq&ZtB+uP%&k=(1=^#gtcwA6rKc-F|J{9Xg;%-jFBA
zOyWzi3Jbtn_rt@)Ia+*P%bS`#3WIjeKvZZ76QlKGguLEti+gWY8q!bKH8qJ!L>#li
zOLx(}mH^p4r+F4_5<qZ9$D#*yAv6f=>baq}rgTNfe}NJ#SQ!_Tf>Y5&=`)~-V33iR
z-Ztu@c0n=U-KF|oS$^D-CEc-g4v}F0u~{1Bxz-X(^>F%pZ{ycZHmfEwgGw;{Bj%zw
z&i8%yeA(v!5{CGm*T=1KNnK;a-`}yb6AK@>-u~jORf+GYRwC?oLDDAXK+%R{aajy<
zVx~PH!@Y<IYKzBv(asZJtHQIP9rZZ8hskk^WnpJ$e@!BJ!;&B|_#<;wj%56g=NHXS
za0~}*nPkv@Lmch`CwrJ~U@Bk(T<IRg$-+ch_S!5`4XWwcnf!%ZrkY%L2$3HAvQ@qJ
zoXi;N!s+y%arA)=1kh9XOy|vJ-oYR9e4*HD)>JC!REX*JX;G_a0O%a?JvaL5=wToW
z$x%0UGsBW%cdj3V&@@e1Dmt$faI84|iOo$<*Tp6?IkNuaQZUX7Fwig7FN_yQ8CXYU
zEM8xAC&xltw1sZR_S-DsnZpbbeYA|>bR?4w2iVWZCPHUJkHIq{#X&H>xUqRqnb893
zISk?<AdnPf?E3I(3aNuYi7xrU7guK{`?S~iQ6^MuHWv{B*1bF}AkCncrLWgdwqJf(
zrOIfwE5Q59W^VHK!YoNoQG3!JvYf4i9HQ&7(!>y+51_B0OL7i-ENCaTaGGLoCg_r_
zx4qCX87x`4%L4_()JS>vVhmVb1c6)pP0Md0U}sqJnLXm0l;Aminf#y6gNvVPGQ*z(
z*Q#OnfyQnEB4rNhPzx`A$Di0as#tQKO`to1V*C<icZ3uTE9+Y7Rj16!_vy5)RoqND
z=b!WDyJGNuJ@=f?i3{B~-8h6M;_0}15$wQNNGp4r?H&Y1!l9Z1E6+b=@V<5=18%6*
zP-03sUE;3l!fK8Xyf&Fef$kKghJP4}E8$a0CM09EWS5mUZuCvB&zMkP7F&kF1Jf&D
zAgp#<xOtYzvDqwLge<EN{wO!1mYkJjMGeZ_<Rp{@ual)m<oNVcMK$AS2ZS;>$f}dd
z__UByUH1?+78*HreZ5`|vwQzMp0`pcwp0njxGOT14W6jGkLsPVyzt92*b!+rG(gH8
zjJsUNelx@IlW8rBk2$~E6A?;B`o}r+riqz7s!wU*5Gb-KYu^+R#A^hqlV*U|es?c1
zA4A2)oOUlp(#z_rl|UgAziB^6if%T&klJ~)f%C<4vlfXNbGGLna80bkvrHV7gww}8
zsmB=F_aN}8n%AkzO2&Jk{8GBdWhW3JHLeA*WXmU0m1wF=jMi&63`)O`V!CW_=%k5Q
z>kiV17eswQ-s~<0c<FlZXdC=8(G-J9Lr8+dJoFJlwN56(K_Re$YTjN?wstOMPeDgQ
zK+iTvNgkpsK}i@1f+au=+3TXaO{vmwQ1IY2kP4@!OA+igvIw&8QIJ;$+nYXB{8s;a
zs;ygAF*{4Q-l5ssf!~M3d$MWG8%bIit*zy;fzLJtyI3~lVO}T}>Y|l^0qdbzTN4oG
zwjX`ArC$BU_EW}}`U1=Hp8Y$ct5i1OAX>VZzv2g|-@<Ad@W^*TtDl>qh%{JB`R?Ym
zt4dOBk>(YdOz$Y&6Pl3t)@za6fExop8^soD+Dfj~aKOirI?LG?V(x3@#IPoNh8gvJ
z{?T@b?zLv@^H2Br_YAXov_sN$HYIy-(zpEBscwa0wzE%+9c+1Uq`i$(n2+TusC@1S
zyu_xf>%wu>=nHr*!$SaU$Be*Ib1kU1^G6wH_u_UniG2cz4U4}wSaIbUnV>i@KV4_|
zg3N47gRXY8Rh|+~mNBF8_!<sS%U7aK4wQ<V8DGfu=Qa&W6n)m|Fqeg)=-!5OtBy;&
z0ZcZCnzmw}qDUyg{xaWRmCvV1g+85*IhXPNkck(l)TDY%W2^AMOWb&!j=yWW;a&*I
ziAyR@Ha1yVkwf2?Y?eqX5*w3}=J;cyq*3&dxT<aib1(^!o5aKi=Qt%n>v}xGv>E+D
zQ@I}Yg-^D9>yv@xQ@4Z*M|+N<!p9ui=GE>gYHls;Io9Y=zh%vMw>TSNQ_MOcch4?!
zm^<j&)u+aaB$b1jW!BN;uhM-u268b>S(n>?lvIO-2{jKy-I(bd8>;RDm#57Vz3J*l
zvw2$KQ$#4M^Z|~T^YaZzQ{}}6Pq5A5M`KUYu#MP!_Zvl3LFd6B+DmE`@!7=xC>aCE
z`s^95eCRA#w5dZ#)9Kx?i$|+J6AYm!WbxH{oxq&RB0g?q-NX7u<EJ%}f_{bN*ki=~
zWUxZH87Pi;n}>06WiNdJqknH_5RIif)t>J!4?Q$P3b--UiB+JdD)M0CjLuqObP*dJ
z>=xT0=e#(WX%4yfP#cZ-%f6KX>tY)We-tmR6s(A=mPDOe7ph1Yz^9R?q`$fvlnY7Y
z(r7q+x~hxo0c?Q_=3N&e)1eN@qZvcH{SjZ=s7#EmW)#^GwCCydo)D$7noY8*A&B%^
zsPL&V(1v>`WAzxXICErn0_aJwvO*EWYv&9DG>Pa|WZO9F(&7D}Q|}v6@$YJIjaj{s
zZ4f@q1I_~sVq%!%%p@|^q*vUKPUYPbm_cHhC4igf45?0L;t{B+NN8=RFvRn)iqT*i
z!;PA6n3ZPs$4x?R-cE@3T5_YoKGpeKSCN7fGEDjGO;IM|V93Ani4gX5BF7L@_E!la
zdiVSZ5~JfWxGoE=tExzKITfjH+@|n)TriiUO~l*eQodfipK?~3my2PwqAP~vbB>W$
z%AjitgmQJql$(}R^+7~Mvr;R2T(QP`8AE%~gE)BUp_2{!IbEKbSABTo#=SrabB<dL
zVhZq_Nsu<H&Lf99(wt9}RPgb20G0Ao1ju}+BG{kR7al+4X_`muLW3$`*O(qs@cGo(
zBOa@{-n_l%TdeI<|J}%n+e7>l)k4gFaO=9NNQzg7aFn63w}-m(sH>J_J8%l?AtsQo
z#n&9CRW}8wicFk7v*kr<LOj6&@bz1E8|Q_EMNa`X=4q0Xg9mQ0pb9}?n@WzcyQ=z~
z=XHWNpo1^7yxqV^jdfE-(-NTZ?Lp*dR_iRrrP=Fbx<FjVj;5a|Qy--9!+ytK`wRAR
zA!aCyIJbJwBGgMNk!L+Mz~4hYLa<?~JfB|1DBJ9y`<H&?EG!)T65%h#LN_N!qske$
zFuZu`sk4&GZgJiO^sT%$PrdpCp#Qu6oGJ<!!zG0yH$}uk6tf#UJwgINABv5a+eat3
zf^ZGr{cVxCs!p0M820K@&zzoWe!FmNAIULlItFQ#=yGC2M;~R{H9X7dbJKB9{a)-J
zMIQdG!GBGqDNsDy#<pC<DIPv!bI|d0D%{oE0j<~Z(MlYo7Hg{m?#(%o+?s$EO%fEk
zYAqY{t?9r`r3*#e7;pADoTxH{^gnc@V;Dcfz*ghvQ{hF~IKLdw?l8)HW7A5@PxHPL
zP!Duz%-R_^!UQW4UI+<ozhLHMKjf11!;DdJKQ_EDS$mDqN};d><7-CW9&``t^Gg8$
zY7(+DnqCZYO%2VeaWE2C><;j<H`F<JVnPJ4ryod&bT*&B>vNDT4F-KkZjJtmBkFi)
zC*^S1!ziaD3<h6@uGT38jG}a2ur;RuDDoW|Ox^Qi@wmYfgf)Bzvhv2}|LXvR2oWay
z|LXuO8IU;p;qdC*@P0*ot{vBlR%fS|Jsoh+BR)Dv`j1JJ$k^4J&tE#whd7H^=G93I
z$W5q$I<9G!y0R|pKW^tN6-FM%YxHmn6kbW)cH|zYYMN3Qr$UEv>@QO75sZE!CDo^|
zXI+QOOonY^@R@Iz?R>zyUi9v~B@p#8eY3gl(%<xc2qsD#RUff$6`Gc>JhqxEV_+F#
z1UY~|FZYS>tafkKG`r(p*eQd@zPEuTd_dE*<$m@-KMgVYi#~Jzy<&YeNQo1-tUMG9
z>zI-cfd7boq<LZJo&~YQv&OK2hErVp3p8@>umY2>90;*fb7!3s;Or(xW;e|Q-{g)J
zGT0nx=_~a)VjgpZ@&{YmG#}$e7KhKT>bldE_tNGp|JR^a8H1&P#5{otvsuTXaa>IQ
zOwNq;@u|6Q5PY$q#R)HUnk)pJ^-mUU^e`ZXq$}A|t809zl^Pe!5ko@J^{)C57Jz|Z
zjGjEY>vErF1hg{2QlG9BiWpV(K(pdGB!5&SE$B3>cYikwIbKXaJz-juHk-$NnyZGI
z0j3Pe+>s23mu?k)2oWv@nicQWeP}OM;1ErLsY=sTNRJ{LslWXmuLT*wYqsk2Ccpd{
z%B-K`_56>n-b!oURhXQxn3v!Wvg6B&Q7Zn8b8FJ%T#T1*LBc(4SHyH^Bwgn_VTdG@
zLhp(4vn2`~ZxT1Yjtjz>;xxzrl9abTHiWU6jWQ&I*09sFa~24PGEyB@%IVw#)G18%
z*kJcx*VeA8OZj>pO@BoQXJd_HWcATLD*q;!>9X)ct0A1kbFFuVW%z%hg$`^$I35IZ
z4Ex)rMW56i4wimBRjMAJs;wPHsH^<x1yiPKdHs}u%}lPm+}-5rL6Eh*)Se=>TqBB@
z+G?i=Smf@@l$=zCy-O}%WX4Dui@F5-E{Z4`H3_JQ$MaIlc<Ro4Q=lu}v;^2J9ySg&
zSq}uOB%_hkx7#A@U|sAt{}H536=aSK?J4-dKBDq3Ud4GuU~qyP>ZX54>6ouEPX&B>
zX=IVEocBm?W!pz^d@%ICn$QB%secQ0a=2VOgw9B!5tNm#+}H<Nubx{Kp-OPc9w`U2
z7YQbi+h^i4*J9V^QUTX_T|(zwqkK+3%*x*7Q6t#Vx_;Vfpn*tO(lX3QsJ`L!04%oz
zrhP^MAVmA6p8uwnGz3>5qNtNh7qZg8ur9J?q604K<f>HmKzHeKRYZ%ylBuXm-74+b
zsN&$4!&qL$rhMWL_Clm9WbxqH7K%UC)dTc`@hnApG1`a&y@n6ZkLrJt$mLahZ_%nQ
z`i6fvk-Or)iK#n87D)+72-c0tj}&vr<5x%22#S=48Yi?x(j1L7%k6F&=g~IPWVdf&
z0i2tZ8LWm(+6<JR-Slsz+Pu$wEnyBN;{^)Va~eACx2rcwx<cW$(c-4957`}Q@VBRy
zQBO`~GVB$^zxzz|4&}4)bQW<P{g^UgX!()3gD#aHts{2Ww~py&dt+WSzEyRnup5T+
ziI5iC)^+9nZoXI$xhv_#3?s!JF<fKC)L8Xr4J#%{=~|z1>)Djv5!770a>RJMgkjc@
zFyxhXh@Zt?o56yqvCGOdna6w^+MWq6GUzTonNfh(esHcr1Dp^~JA%`eM*iWQD{i>u
zI%X6wiiQU5B>aNd*Za#7e#@0?v-xY{GtkVL+VzwrZDR!E{{tgh@C(op=x31e$wmG-
z!=4{I4Hm<jkPs(62kl&}=4?_@aEMAui)qE&W%*oj?L<jx4gL+(f2QXKyFGgsduF*;
zhR^DbR>_w!K7$CxMLf=*wcqdhn6+FpX8HY$&6^r!E+vB&QRz-EohGYup+^>VdwQd3
zUFn%hOr_G*ANR<I+O({Z(_!9wNP;}ujr%D8v2E7`3(2^us5Wg_<soC|qj$^z+b>Y|
ze53+S<Z7-6O~BZ|e)2(1#->M`JDb0q$0EskgYA1xcT<}H2^<4g53yRpuSS4A_yw;w
zl7LMNE4KJVc}s*Cptf9!CO+*D7D=$(?CCFhs_S-!EbqhseegJzeb-60)1s8q$sxY=
z5XN~a!fN{G+ghW7!y+_5cU(2`+CB{nTdWNjb-CPI6(~i(HALi`U)3?GrVuV1QKGMK
zOsFVmbWrcFVfl`!pUeEr6g*xM&oC?cMy$4R#aY&cwKOqaJQ0+3_YH>GQO=#NirMu&
zkLrq&p)<!JX59_6>1c4yKsK&u{Lg(R>T=q8z-bw>yj$*<D^d!x!Ea%g1T*vn<)*&`
zGNup_aZZJMD!o<mq3lk&5X=_*%y-nml>7N;>@sj(@B0NB^IfyPDZwC013sfkZY*A4
zPWEg<U0+Vi#gYtD?6wHpk78U;QKe~%Lih?kD;(d|&&m#L{WDr<3JUoS2jB2>5zJ*#
zCTY~)sxDLZ)ui$Ix#lTuv*vIEisw6Odvf+mfjsK|!5>&C5c)D+fYrkR{TT~L8f!Mn
zjNB2kq>YCju!;dn+c^1s_&CQu*?Nt2b!<6!Nwn#Fk{vg*&+2tJCMU;x<4YN4$FH?O
zX&ry&;3CWnsk`ZcEc?S2B292{a_$m^Dv86m%O5v~u;BEqqD~f1W5jYS5hh_C=X2J3
z|IJY9NP!F6bW9y-WL=z$H2HqR?dXug!QMi3;OnrKC`)tyJ1Pc($yhn{Eg@f3D~UN%
zLIvglDCD*@o7%^?_oepY5ynbjFS*;7&d^>|KVP|LrRJ7VfCMwq3UI|mU1*CI8Sh)S
zHf-y%rhnshWV_qax%;;Xc4YdGWf&C|H~v!2ulg%Q701`5co>>p$a@8D`D31WD9Etj
zGAH&OZwh@cn{`rjxeUDy{c^O@ijX7^Q=S<|Y#*eGXn)BXuad7+oq5-{Nk~H~q`n)p
zrqKVmJ`=JR#^u5cj6+VR`peQ_-f=UJUpyg1P6^Eb?FO>_rfv-a^60}KOpr5#BH1xJ
z!f~d1*NkbrNJ$;8;jyrgsq^`+U%B1k(ERIgsKzy(l1n<J(~KqSJdmifbl}GK^Xy7#
zmt(;hwVO@%ErQAF91@kNa251x_`G9o`xa3(Q(N80yN>s$=~-@45qjD>jF<l-(8Z&t
zZfG8cOy!uXfCwFyEOM&bZz^CyLblo08D}ROqB<)imCtA5;Q=gbAgf%m9|s~EH^5`F
zoK+tNUw;gVu{cM8F5PAe`qL*c)J^rxoM+IOWSArochGxr|CwBoisEP{B9Pc3E5?Hc
zn%5JDGOl8ebWTa;ABB+2sf~C!_TXR|<wlFT9v_J3G2NM2l*$=89O+c-{)jXb<%QNh
zKu>?(jqQ3u0|q&i?pW+~rsEmiig<p1WaFes%Q@^&_T6D(8f#!0(v{T%YrI4_-r2M%
za%$|Pd?FAxySrzT#x_e!supMor=E@gcyuTcpq*mhh#2%H?rmBJvI11$ssV{U1w%?(
zs7(dQ?-+O{-`=Vs1<U&!IwkP>zUNb5?YhiCxM~cxxaq}D5*BpnH|Yj06pvfWPdA()
ztq#*P6OhO~gV;?6%@ZD;u)3X)18~QaE2UFj<%(;+cqzs<i?`KuIbqv!#!e0&^||(s
zL}hzlMvfxpSish&j<0jE%0-TC;`aL+F19%UjhK(_(Lf5*Y!A_1k%%d-E6XbVud=s6
z3xgl2IYc{oQY)J}^}nOx_7UW;rk!}FT`b&K0BB&p_vm(Sq!SEQr_Roy)1~wF(ViA~
zQBibYA@;I#<>EN8W!Ip^*>{S&wGL29>Va`oQ=oWgV%(NB5!R7KN#x~DN3m7!n2@@l
zDsB_ZtPiGu2}tpY^3-Iw>slLm9uFOWzLZI5i5a6jhj4n5i5;QHG6+d0E}A*}kK^3|
zi>90@Kfe}?`M=!6gKsCl7g&1-@7M}U#v=w2pMF|*$?P!+RE$)jaENN_lbdppRg}gR
z3lv;Uw2$w_F&aIkl9$aBq2+P^$_b+y&2L8=_-=p7q;(hj7>v6<d;iA?-ofXFLbq0J
z7DWtZbU?+NK-0`<tjJ?k+G{Z+wdLtD2OE#$`AQD_pRJek+ryoKXp7Ol5x%UaMga1E
zoz}ef0q8H)R7(%JtwV~~gs85v=~qi#ilc+g-*uD(beU*3dbTI7KU9PDV)Q;!1q20K
zKJy+hzv7JpM~_rV7QPd!x4c?9{=T&E{T7vU4Ee9H5@(F6Sn*{b^KItQ>B@0GpXT5s
z1N~CH?ti9~ZqQUMlQTSl+xPV9*bT|haBC(Ub((T)jpygwPY45T_)IfP?w>4jT$gyV
zAUApc={COnG>kDcJe!AOzY-A+B~2C{tpnJGf*G{^TqzCH3ZypAmO=Sfvn`_R>H`YT
z6RCN?4XXLQo8eI+FP=f8ueLv8H$c@{Jx4yCUx&!h(~_WCZg&gn@?^c16@rMQ03{!%
zi@OP?3Tp?XG^=ES$0)DbUiOwl!;$;mt*NYtHcB{p#!B1{B&~6t_}>1}E0>&yUoIpi
zz5q<7l<V<o*e!xWF`tto#_bD-+5Efd*^a^y>PT*R&pi4%y&janeKHx_%o;%0!C|Z$
zxj1?X(Qaf7MrCbnVgN(<Td?O~xz6_(_&OShG8|}@VG8WPMTWSB3EA&4P5c3*l<}ct
znJQH{q1B3v{Azn&DyDX)W?0Jj1;O>dSK0b57@Dv(iG?(rDFlMD$*JG#!$WtZ>+0C@
zS^oBF5RCG<OzbJ3_sT=G{0jCMX8HrTd+E2{pe!7|VCiT-lRq+5g05U*ftXKp!*%G4
zE?@W!Vjb2bq3o)`z%RR65li8`MS%#JkN_sYk}-2b(hP%1!u|7u^$*?lE&;9MNJRBs
zi>^zx!ND!E>4~bMP2{x&X`GDP&qo3_F<|I!S-(s!J7x9RJMZ4XczjO%Z!@J3CwT~L
z69GAZyDkU3B4X@=Z!F0e6QCLu8Urde>0-=Xa6x_rtl<CY4%g2ky{iXkrz<#`?LaSz
z6X_F`q+=q;>Cm;l*`K|?D{4q_@=I)mL2&R{QB1Q(7w1K!O5+_VJR7u2wdol32;rTL
zJG#;ju7}-{2A{Ik-QM%#ZhAr+(XA=#J`o`w=GZRD23eHbMN;2<c99OPi5`Sbgk-`j
z2eFuhGT6ALpcMc~tdSp)%Nc0i!fnnHc~zRo+g#ksJhvg6jmbFf+T!On*eKdw^cI>?
zciirJL6E1+oA&{*rQ#9bE=~iTsCE4xdnGv}S#O)d6qKlo4S8B&^#F?v)k_l*hQ?+7
zk8KhGI)I5Yt~v!*&I!9H)NZu=Vm<?)@;a!o?gxFPl$>)OirSI!uW_Hw08Uf7(pT#z
zU*@P&Z}hFZ%HB4IX3d|TY{1q0pA2_BfmG;1^0(#=LbS*;N-oB;Cr?4sblRlbs|&yE
z@2?%+FW;FH@5d2H4!YZO(fH`lWL0<DH&|i7ef6CiH7JoD9|0y}Rh}^J5fVHO=&f%B
zT0o>XI+3J0L(pn=n$BjvWuix_uMT#Ad%o9yV)}_7BLT!eG>j8>e8v@!V5|3|s3W9O
z*t%#fEn$YQHx!|;0hZ|pB`cmez^(yKEyH}2NGJ5y@9|)(<H4Uqo$kI!v6wXpDuC(V
zoJ&C`ZrQYl=j<-B)-&aKrc)iEqX8A0yYTJ1;c>3Dj*AuAI}8;pj9Zj+26I@sBzs(K
z1lr=o&B_y3yqT{VDl`{3xq%|?OqL^Na)bbd&*|^Ul*xWf{t4ZrQeqN<_E$hW=_bN1
zC^gsx-}LPc(vB1mT2O_mRWri#n&7b9UyRTT=Zq*qyR7yg)&5^L&R|43xlp_hZv~SV
zflAYEF~WBHHlemw^aliVFQnvgp{b8wGHIs`&2N;I74z0+O7Z(&>?Z6Ng*UP+`+QDo
zxJ%R=ssu0TMeN<7EPm6-pEgsx-=6p=GrTkyhbl=s5Je<<e{(GkU@4G0=7T1}oDQGr
zURR>OqP5OjXdvimk&{4*-=tD`_e`LScgE_L-9SFtRw}f`imDklXc&myR!pJQBIP#s
z_5kOf(7s~Fjl`llXlHrBA}}&=&P&Pu*!uEica@PwQh3bM=Y5e3r2uc0e5(}ENP7ii
zuzzk@q<OZEVvo;_w8#g)jI>THFaO=n_^;vHSF!r0gkQ#g+|1Tr(z6}wj3E_HfE(^)
zF1dMl@U#(GL=N~>Qr@VDYxYqd*Vu%UPIc*4eU8SqW0aM>LWxbD8qAlX+z1mVUz>nf
z{a)Nw?Gh-iC8F+FnEq6G<GANt6T%E;Fvmd8?0{?(hRo+)<QF|NK%Lj+Yj|II(&v&^
z)l58vmqQiY9)J;9dv`B5-IQUEjRFlqunvdnCr{Hk)lRf7wFZ$)W)uS?0t5NTZ?nF@
zYI;*E-R!C2pjIPR*C`Bs<eNLA)#o&m{#*EDVtD*Z0{>yI+f`q0kD3w^A$6L|c5O=W
zkL=yE!L?d)DpznWuBMHjt5}h9cy0c03@s1m=O9SNfj&R-9)IbktnqkFUv)P8mI}%j
z$0Cr^=yDKDRVUYONTABX>mccF^mNhpNjXDh&JHCf(z@oam2)mVKNOgHj};A6J|BA-
zs4G$*L7q9b=O49RCTVOtU@9uW=ex_0rKh7i6oe}bh*T!R8qx#~b0ud>#XX-5=c&}R
z|9+L=spKUK<~i4vN3VV%TgB;!_XB_Vc&ss@MSUc)b!S5WNF*p!rat}r^z{HuesvO9
zhp)<q37H{{P|RcSG*>!*=wJbvR8V=h<mcf88&aM&8~UjiPzg*k!y$tq`RM45P%Vw*
z&tDn(TJ9zR1+s|PGPh0AAXE)u9ji{T9MUYvjy?)$&*e9YT#9aD5~EOArEn#4nqcM9
zBF)O`__ViY$k+{q&$Y|ZSGuoa`IY_ffbJ$D0Nhb%78`*SY%?0sk^pmZ9?<&p4$$eu
z*Hs4qflm08=wI+Jj&)042e22+F__4C9l=K*H8-Pr#RhSW_d=0#WDO=(UiC9i(W|Jl
z>xQ|`4s|DCD14L?B9l4D6GY>?9`m4uYn|v<K$6;Wb6ucJ$pi64n(Sq95_rx>$B)yN
zX^@WSlEk5OKpw5Avtd&mdS6i*+ZI;Z)Lo_pJL}G}=-Zh)i^lT3_LqU*{g4{>j_TxK
zM58L-V9wz4l7c3kp63cHyghSU8UW~k-~0Qz;>w1y1=a4WGXlT}TaNDGhvQtv>YCs6
z7v9oC?Tq9ku_G4!+Kzk78CW7fqUqc3JYyzeuf2B!#&Yc2-(wFumAL#Q_DB#boHNZy
z<s)t?>tvEv+>5kg$=cA>k}&439M?%@y+rX{*@4A1<VtD6sZ(?zUSsW#4aOorn1{U)
zp1e9@2hJ(xc{~4IZUP!E_K=M)A;{lhQs<kh;vMvK-s5Lv(AYZOQiH|30!QnvofE*p
z*$Q6oFV>jqn`Fx(I3i-K_P!J~I8>k8gqoenYXPNaV2ZP07TtPTOhR4w%X56^03(ib
zTi|EfFlC=yL98#<xYY(!Xz<-RrAUOLAOai_6$>=HK)ollORVn3b!aJ?zdTD3u3>Ig
z);@z!RQ6ro`xj7RwOVPO^0jnLUxX~wb$%p5;rXQXZ?5UVTQ(h3>|Ox9&?L>Ua=(_x
z@=xtig@~h7N?SVtZ^p08a-|#vyh58HnIS&*Aa)eGekQsUVPeTcRZC9x)xdZ^tqLNF
z7Y+pAQboxea;m#W)3C<(j$mp_$?V6Tj{mnq5E1dL^tqJ0up0B`U(R|w!lJlV&Er1q
zl-Ve$H^8%p%sOXA;gd-FF6F`CgFZN(EkRD<$(-F;DvWT8cgh9@!0ypWrx(+z*dK0i
z^92<QzycuUaLUE^6@kpSr)&b?W1r9HQIxTIHCNfm^jIK^(dUX^K?4vGpiqcT7`yv^
z2BjH1pj<M`QSkNpJYFgRRF@U?C@)g9Jp?8nkSy4U-9_4;oQR+dmwv>R1>XDfhhJSt
zq-xuYJP_zFY@m_Xw}K)cebGZHU!w*}RO|!oC<>Kom0Fx*c7)NB5AUA`Au+4%^uuhA
z8^atbDa}Z?+6fqhzV(^QCi09t(0`FLd)8?Jo&#Y{>;U`1n7b{G1h<f8VKD8%COWp1
zyDgl^<seDP*>-MG@&F^YcRCUa-w4dK9s6o=hGp&eN-_rdMyv*slk~8(UsVq+=Nv=+
z(CUkNknYOQu0y@b_Z@tnEDZkhK+E%cw;Z%{HGdlkbS5pqYU?CwxBv{xF7kjzbDAcg
z#B}V<1PI<XDyaPT&e}ztVo#3yPb^Y*mRW$sH!xfi8MJt&EgZleO#~yGEzXyWr;<ss
z@f%bTWq`T5;UpELY<_*AeM37c`+}Z$fn`sX+cb${m-lP3NHlz-6foJv6r(2}QDsLr
zHt<YeQGmbt$kQiMId!~-bLVeTX+)q>%M4}5%ka3n=k#c4%4R!Q<%F+v_B+Ig_}==b
z{(Q(T&|hjCfglo(XwcZcsvNo(v_31EF{TNOMwan8fYB;i5XDj2y4JwWhRii>?eq5b
zS}(*)X>)+c*9xo(UVhIHtYPfTNQ+$JGy9EQGd&L|KCCjR)P|cqys<frP1K&wb$a;V
z##!vxQiv>uS5B0m(q{R=@E91atVG4zd3e2a==@5Xf7j2Sk=p25BOnb4(Vrs;<KZCN
zDjfYLw1=no=*2fCmBz4{)c69;Qqm6J_V4j@S|xdhw*r^U&>T8{M{WOBFw#1`*dsWQ
zA#9kyM2PMMq`1p?!aMM|cOd36VXEJ;R|NH%2NEG*&#xNCS`mb2e!p8}pDT|SY0U4d
z^42^rd=jco2d`bDW=elpUm~^^e4$Da9_|{5Ha;jXP0a0jABDp-ku2UzB9viZDRk~+
z0m2KmQKFZ#Nm3RNcha1-Pa6+R7MT42()LK{V><>}L8u3wjr+ghh<4}tB-g2bQWY4n
zO7PO(X?BO%I2112*j&S+Z45<Onelu3zPa_Y&T-+n?OYS{O~U$7!c=}bEtAXpK3-Oy
ztP4A9r!sYlvO3-(`s*YPrc)L>ff5^2Yq~>!dh+6>i<~`}!cNv5OA^7EV(1`@eZ?3=
z&)%SnAhLtM{*$Np0B6VV^MrSKNT}m_OaGP>r?OWz`krVejBvDGM6cT03r>5SQH*sW
zrR6dF9uq!KcmFTJ-G-GeMAsn*!(WB1{YBg;;$4pUCBohTYDC5no8Ctz<Lqv&!7szi
zb~nuB!F|RM!z|hQdmb|nh(^8|K6evZW*O)w1y@gx3458UH~a^ddr~P~5T22~+%y5q
zO(sa^vYNpCXQ$lgip@RDpkptr@4>x7+;r}oehnAo+Llpy^K~`Sg~8k2GR<Lzl3_9<
zzb|<;+q%Zt-<=AVIS#Ab73YN%RpWoWozs>e(2`)&wr$(CZQHhO+qP|IrES}`S;?tc
zbLXYsZ+}Fb6WFl>c3aIJt~`(u2!A?+F$}MOt>jDlvKP_-hRe3gJHEmK-kAee##(34
zGpyc>f<<YrH`g^Fi*FI66^F+f^pO<+OQsJ#u^zV>-8NgN`>zj!sNF@j7!d#iBLJ%h
z7oroc(9)`aboc>4s_j*ito)N9GmU)A&=Bdlc^st}U`Hp(Dt^)_y?i02Zd}u9m`h8J
z({)<GvxLW^O&Ju$K#c^gw8PUEuE#5pF45gAu5JqLs=23x?Eb{>!BT`0rEtrzUoMa2
zQs(3=DhyoEwbn2GelssFTF)n1e9@huv}iwCDhR{JbT4_DdQP$dphr!i$#ihDn0AG(
zKDm2md@vk<N-%#hO~~DY)#gS*nCJ!K3HhSi1<-V(IpDIj7f5I5jMVU19U*tJW||Lm
z$LbZ`3*=wjLS@qW0Qe53Fp(&5iRT}WA*y!@N$}#2<@BEdLaX!m1eDVA!7JXAUb}`k
zHGKzx`baYq>n(q9HXJsPK#JMuE<moVKCG4-J14&akzTHcvsA0Tv3GKiVjUDT`Pqv+
zRktGik!&o<D+7?>*Ref2Qb3(;jFRSJo$rbyHq*%&zLY~*1)${8)C!FsPt4CX_F{Ac
zB4-%^GpZIY2c|I0g9C!icpHNn@>1ts`Ak%AB#k50e|LFJGhqY;N1#~sKZvKoi~cS1
ztFm5)4OqeNo#VZIY?7h}nzCC#?<StsQLMS5grZWrS20fsMA80CLGmS#|NeZoxuQGO
z75I;e6oqCve~|I@w(+SYMo$p_Mc8G($6qJDh@WTao*yHeqFx0rNQ~J2*k+o=J3wMZ
zU|h;?pHkXngnm~vK1<m8GEBAU@barpMq`ZxFLSZA1wTpYKybh?q0qVzK{$*Xy<G%f
z_>MgnI&gf%jmqp6UxwmnOb~6AVy^MjX%-7JS|Th8!FmY9`7=fz#(+63pxH|$&krKO
zKY?I<5_o$Nph2(y)L_f6DK7?X;+F&t#$qC^ywXgG@{xlrt>CQZ#fG&es!<*Oj(JeM
z+qmBDWkm@Mq8N$!x0VyT7k!2FQ*o*0*{3Vc>XP-Rse3E}x$&!$I614?+*rm<B4l%^
zl=B9c>nM(q5^_32v2Ny2&4X+n{*{pXO1JEi32~&};IE>OwnY+t&E2&c(Da1#XTOpl
zR6qV=FlzQ-A>>SnVR?xy>J-NSj`ilYZPUr)pS?<S{2UEMH{2NZ@r@4qq|i;xj=(qE
z{l%+g;;hN{dRy{A;XPNpDx1|(w8&d&riFBjswxQ~eC)w?S4*znSlUkD3(^7AfG{5P
z4DPCvv!MHlPIjOzH;rGaP9M8)Y_U%I{2kKfzPB+GF3~L1$Hv8Rl#{b{wbHC)r0vT*
z=2(VYOpXtAHP+9n;8hpWG*#>>If=Rexjhm0ssp>wS<7oPV16X&EyH+zi%eO6nnHG}
zxul?BZ5DnwpF~z1(#G}V%|e|L-RR|0fUC3$jvG7FEg652@kx36G81qYTBe*HFsZ(T
z^tKrRxilIK&9d*vNfz2*nv>cRlj$UCnnHM|!Y+#Q{2%T8o%dcKRvi=#K5P)t;C&y{
z0(@S*IMBx(mvZSE{tibhGzYKWP#e*?e~3>YT>=iobRHD}t0t>W^@0`*WH-=&Z?tI>
zRl6JCXaVa!TnluE!#(6AxU<hSj*CDK;|dY%EB;M6{V=e0|EHhZPkn-)s}L07r5NdD
zX3D9IjGqJ(329@`v~I5i&HMh~*9eC$E?^$>o_lO5LSNtVP9EKDhLpHkO`ln;H~NR{
z9e>8)XS6coCyBTFCsyzyapb3z-|h2jk^8RE>pSjz@i*!ym@hmXCHRWeiD95TMA_;t
z&}MksgN?(HO-*_z^<RG$1|_CGo&SGa!r&Bn>>r$g68Y{zff4`GEq+w_c#~T5c%p*w
zErHD{CwA5UV@1foxDs&@OJ+Y4aE@6NyFXS{(&uZ%@9-BxUqkyFKPS>>T)Yt9cJgGX
z11UfVd(A|@#T1Q_$64}#Q7qNC{sow?;rp<)AC85tp{+1j2Z;H_g<dSpTZzY<gt9Q3
zl@hkI&zvDJ+f-})!YP`~K`~PnZnU<5z(4fKtZ@wbBu0K)`kvMry2#Z>U+9^WP&tL$
z=jrfeLqoZWhAIxS*#W<e>y_P|B=~D`<sx2)QIY#`mR1znZ;(od>orb;ig0d?L9JO-
zv~&LB(%ib?AZrUuJ!x=lvHxsMpck%t1+*t0aCs7*I9T9(x4s@!TL8l<B5i0XHPcNq
z|3iMsd5lg&XU+D~h{^7~j2Y%O080}p*Jx8TsaZ0es)TWZxaQ=9nBs;gr^;`2puv6|
zp;z5fhkZleScxCzIO*NL15nMAe3C*6s&4reG)O2DYsj4gs<vwASaZ-jL%B%9C2X(#
zsP~-z^s)DVx0nlmNU$=i_q$kVwrGbWE8o=s!K{~I0B%G9Q6JZD*?yeK3wnk7@$c9i
zwqK*_ahgS82|>f33>b_)T4q5#J89c4Qagy6%x(zTO=+`mR?07K5Dcw;4pvHpqJ`3c
zvybSPftlW5Ma0;7^cxI$?{W(<oyr!ZkKbTiEg4ufe53XFn6!I&;fPQ4Uy&3-2KZLK
zi^u|apF@N!-EYDbW{Um9I0hAqs9qD{T_(`v6MNNRY2GQ^EXEkn-uPi*@hiei`0|$L
z*`%+_AqWrCd#+~yB3D>xmbU}r=y;|~(4v(=Ee;tU)WOJoo;Q2JU<9$1m!GgNIwYHd
zkZE<h!bvD9=Q3W4V$9H~Gxn#;trPJ2rZ9-JbY9D(CV3zMEJ&fX8%Bt{K!#V9t1O{M
z<<aawOw>|iynDWN*a=Y+S@AnJP#jlRvS10vQV)y2+_6M`O2!zO#%XH0UY5^!GYPn6
zn#=|?m`%s3W{Tpz9)zb6+;C0$uegV379X(Upi|URjzv02Fx$%st168g+%RW!^WD|V
zEay7rg*;NYP7Qx&#8ZGsV?;q9jS!aV6W(BJRG4zd0f@ePY8WY|Fp1~oh7%Ym<~d&B
zf}PExemvh%82I9^5GU%64b1I|fw>DB3D}~dz!__(*3HVG#X|@(_z`!alMm(Y5iiDO
zFyKNLwu-jjdTybXsl-ioW8*9-E9tL;yq=bJjO)91VoU;zZ(iVz_>A%&$gC6=VkoMj
z;J$zfpgoVL@*2;TF(7q1<h!Z``JznvpYPL$2O*$Lo#C#Oo)av>3>sS%A^OphzWpN^
zQ`qXbn<Wk9qUy|Ap}xP)5Sa+LTC82|V;MX@m?(GRr(hPz51NBzu7VitozutG(W7n-
zF|m48B~&8X0!6cb*Nft1y0{n+kuzYSqi^z8KGA)@WB%L_xU)c%nD0nhl{X=#uFU0=
zH1rDm+I}cU^C1V97}=ii+%wU#ldg6e*!}wD!Vs|_VldAJaIXQE=*5mGLCvKTh-Y^%
zs#~<nH-tO?6w^xy0~aSWo&SaW3dfNSHQBO<kUGrqq=>}pQ%^Tht^HR18JOozq&Nnn
zR#~B+!SA7ZV9yHH>}Q|URTPA#IjeJp10kuTUu0OGW2W>vhPC|!b=iuO(6?V66&*3j
zLP?O8)&+jp9w|rfpV8_m%@*P#wlF@WIch*QB=L~GMqT4mL|G}9+*%8KB+MlPn-u&Q
z;vNdgGCfeP%QZY!_fGB^{YxZC8@m$l8*73Xfw&W+DQ`<EgX9iLAL5(Ahp%2-wKH|o
z>sGpvaH@rd2G&F{l-J9OuP<FEX=9CYL)#dKBaZwY>sqXpuqBb$?QoPT2x%aDzLBP4
zF)p0<WCNqdhSck3yT5i4{6hsGoMoP!j<R9MCFxC`U}-fR0FGaS{2Ht6GYZez1)@hN
zH^@)Q;1I$IL`Nr5e|4K*)-TGg1u@?U%64o4l9WGF_JL?dkShZw+e+vmJeGP#a8>;X
zJPr<1L3uEm>ceSUf;3o3=Kr@t6&_=M9T5fhp(p_WWbQ!QP6oK5Z%d+ot<D>-mk%Vg
zoSf>qp(mJcxrB4lo%tA1*)UI4nv!p!5nwd^!^VS}Qx5=Qa6To(hyY5hFG4*&3pb2=
zX?~izJil!%R=b(><$|uSb#AiW3w9CA1(v2~gxZo8<@SdWtd`Tq(7`f4V3o@-2QAwY
zvPVniwCXqdj6Sk{))m=}X<Pp~NH@qG;4>OWt<4B5plUZ6!dmq=Tws^}(0vKCd!db;
z>cbKWfvQ#_-!5m5`FXEBQ7?U2u*QMp+|UUNv!|kS0q$hJLI6&A2IGe@-kWQnyR_4s
zw;kgU;EOzx()PLjNZ78-u9$ZYS?S=KJmBk8^&M&Fm(1nxy@T56rq{6aL^61X!Ai!8
zk-qxiTs^=MN|8d#X6`HtE!XM5G{(k;>aM<xxM|2eU^sxbNa@bBtq1)RiaF=w%(i4(
zLiBH5DglNrlv_a5)gKVvg3tkn#c4v5<+MyQ348<p14Fq(A@M2M+kDB+v{LEUg>B8l
zGgQ_hGH~%}i&sS$dl{3dbPiwwEjRIE0XoI&Tm=vBIci6Qj1@qn4}x^5&^OH6DfVgk
z!qHUt9m~@`Vgt~2$}jeY)!bpeoVm5Ip32R=*Wm{72_zxmKLX4%N~(jP{L68&dtxZ9
zXLU!;ZK$-2<WbX@KfWETZyym4&bJB!S>ix-YDySgZg3FxwZW(EjvYpfVz9w)-;GP>
zNIO|&MV=D0*yBH0YDhCkuTJSJZRf6yt;Py{|4u}E(M?=KA%dKJ4x@*0G+IAa+_RUl
zo6JHsO|fZ}SFm}bhl(G%@C+s7yCMW_<`Y|`yIjXo8!6<T_kf<^`7%lYuM*atcveGM
z8Owz5iD3@ASI4SzFT)t17M`@uUmHb&dJS3|qa)PP@!?^@U-X7C+#Z7=b#y6z5UmZ*
z2m40O#nR-wW_-v<!G%O?G7*V3G~g2-xk6a#8g$&Uw+tepR>p`U!I1SDC6=PU*xkjE
z+8q3@{ToHl0|;*1hbO}0QVeDteLJaX*JCkbCTpyDF#2Wii5y9mju=y%^NdVZ@){4@
z6*m~~Q3XXpGID|{4#83i-p}|#Jo`eD#{JFu9&3$P$T9aEkFjv#aSM#RCV})6@>Vi4
z&C_8kUtx3eB}%R9`9h!|o#a+`TKqG%lD4E%sV%a>#SxSf#+|BmHJTfaj@fK3Zs+kU
zd|>f{0@8;{w=7vN;$>$jQ_BeqxJ|FpMCT0YXVZ$<UA?>}iHw6;{{)2L72zB<+FT}W
zG~YF-s6JAizA)*GL%?!ltFdC2`p<UQuXgna8n<V*Zb_CoI>e5D1dZ9#W!TquMP12~
zoevl|O0a`|I}bq>*PRGc5oYd}vzRKX<6re>AEY0fEU+Mn3u>2zQ<Pn1hu?@UIMbXg
zMC93#@*dXpm-{@aU*?Nx{bS3vml~0bT=nM^$&ah)ST1(dj&a+@=6pAmaf<x_oPuQi
zCyp2CxEMgU4Y9?^@uAjrD6Rx76`@H7BPNquWZs$3$GC{gGpsDBdnYh1(gZ0+aQ(Pq
zp942<h{^?&J%((EjQ=TOHZH6un^;-1CbBB2Q@+`vzlDqXiXc|u(SqgY;9eB%<Fln}
z2ele(GTME<S;A^p2@)B|LNxP<i*5Ok=M3CwfW@j!cBK1V)~QrjY;X4b#y?}Y3K@D9
zOda|l$1HIbc#bI<w6`b`eVWnI{1*k>SXVQjtecAS`A+LDLH<$2NH=}kpxF~IX{U23
zq(za_6V-v+i@%O65h<2k#W-2}Y}wJGeuU+$mr_5jo47@T#XTOVd=81}6VdQt*TTz9
z{&JytUO)e$xxl3m{hC+$hgyLy*XUzatTb&{d6O^o%@SEIu^~fdV?Wr{O`T}8iCD^J
z8&q=Bu02t{?M3FB{yAj^LGrg9E=qy3CZ!xW&SwVqIk=2H7|#Qb)DOP8G_L%*t9I`C
z#?c`Hc$dkuYj?tX8{EI2cugw1rCCHqip*!tA#>bRw$#<H&?+_m0ZE`;&05`F8`gMH
z_HwvusFQPeORefnm?kB~xjvq+R0E~jceOcn{HkPkzF6L>Dc7T&55&034Wx_gyLLLB
z@^MDbu+pagAA7(X%9jft@~ovxH!1UAA^J>XaQ}}QGS80AKDddO-@Z)fpPlRGgfFZz
z#$jrDK=QA%XyNi@Qya%)JU{ZjnWuDaUGDY;ZZuW21K~dod%h)X-UEe^bGK=A$=*ok
z`N1COdEQG(IZl{*@EyE^-zJ5b7g4Wv@J;0r31nCyv&~yLIaZcWu)lmZljQshTT@QH
z&g10j9oRqp@BHz4_+<GgT4#MdM>96Hmg^um3WcYkkY_I^91t`mkXLuY(*WbwZl)dE
z@3W#v1*rx$2dVTs>T9^R+Z1Fm!>Rp?Kciqen==outN!8CF$N0nO+>qV5lxgt>=)i-
zK7_ldUMK{n^g=9qgZ~Ma$MZxl*8s;0Za%Q=yZ}2N30<Nl^Fiz@x*{MLZcRBH?PpM5
z>##DYCxNpq%jMt`BStaQgXNcsmZem=C_jWW2jBtuSS$E(J919wfYIxt?4!gk^1z{Z
z^E#DYSfO|f^|o>oj@?sK>KNC)=ovqN@pAkW2fRF&FzDP$C2hw*GrL}Rz$0%;*+3^r
z=UEWTTtYw4eR(0ZndI4~o;2?cjPdfT43xzM0V~@$Y*mX^BPrcW@%hkYWf(9BQdhyG
z*vml+xF##z&RxM5HcIF4<pjd~Gmv%sstvB&(dFfd!tLmuV`SN@<<|MHe7fjECHJI~
zI7`EhJ2XQCjJ_ePk{A+EIVhz*-}J8-aWW&Q_j{N@;%znV82{tx0%bA*?=icU^G-U9
zHTt>jHi|a)9QirAwKc1rhM>Q)BrX5n{y)bH_#l7}j;IowXp|s(^0$K?pa@5&A!K!I
z?Y;5E@h&w#1@c#+PhXi`<d~=U8BkTZ*ua+D559n{JgRJ+M(vrG+-A1z=VOu)fXi<t
z3_{!O={}hk7{RyNpLm2~;%$JK2!MDUdO`u{zRbo6qGslqDLa!AFn7IlEq&@1=ZzeC
zHPM%w;Qf2sJ;Qo_BVP`du)L4grl&n`W;6@eZH7OiUG&TA*h0K8@-CT|MX}zCP%w2(
z{)2sIIJLse(lvm1Yt?dQEPi82U3K_pFm%((L;6I%%_V1ROr(`B1T(&ce{Cz;%20(A
zgllKIHW-Q5kK|dcaydO?SF=PbYO4mYrqi#o$YlkKb)ue-L60=|TJm<)B`(y5tz^r0
zWh&IVX5610_4<S#*5^)0k^lTnOp}wRr>Q>469a`ddDir5s3_#aHUR;3rvai~5dl=U
z2`e>v^_}_IUvy9{TOt$eoJa)K|HY{t)y_2A$OpbO;ZiTGYcJpH6r{p4*4c@jLDe34
zoWqs65Pdes$HOdH2Uv<gM~SQ4MWioENi3Cvu(>R;3Mzw7G;K-{j{mEA{EGC#YIsTW
ztP%Ex41#N=VL2nEwFp;~8wd5lIjn>I+(aW|bcsAu5rOMyj@IsI_53Ui?>52+s1B$!
z7qX&-k@|K;4{{c45$gkB0T&6U?&QIskn46pD1_gxv=;{cl<Gc5ad8Rv!Ll*@dZJbt
ztx^I_fZ}j}HOvUNftUp!<s?j`14T8klf1AFf*8wi=_fB&v`e%ExjzLr{!c$_G{+%E
zlAVti9?8B<g*Gxuu&f-t5snuO1a&OR__3n}mc4`O5GW+7IWL)y!%*JGQ_Koad5Kd@
zq&`S2t>$vOuQ~<9fdjfWyuVb*B3`j_K8iT+(Z~KH&HN#jc{DURMP)lr{W)}w^h9)B
zI-%-iUI$&<e348E<VMHDzYaeHNyf3$`NMMhcD@L7r(RMr8-RK_RXJP_#-XbTj3;&N
znJrHcb~aai(=ecr7e^p;>L_%Iq=acY!$BXb6H=wO(lN34P^x{GxupRiN06GZ&Y1CY
z`P+27jX_R}OazUtNYXkw{2Ae#eqJ6OG=*KVy<P3vR0yS1Q4|RYa>^1|iI2Q3jS0Zd
z(_u<8<waB3lMktD!T+gokUZB>`xHd);Ec`*5L{DCE`Y-}cb|{X%$!MK6SqH64F0Pe
z%sEWVBp|_Qqy_t72-jFD6)w}m*NrVX(s~D6Qw85#hIxHQqFVg-NA#JUbw{e|&Jd?a
zmeJu|btTczi(knJ4zAjufZwkzJuq^OhTMEbcxJ2Gb&G(IBLQ$`Rz7oyWfW7R(0of2
z7GP_-=g6(u?}dQ0q?QzHfGta9Yu#ok@yLtfHxv}IJkkQQ>-7T5%2RX0?)2)mIyLuZ
zNg>4s<F|iiBPq61s`&~jlSDKCAU|s~f%uGJ`9jr*OVn0G;5fmH1pbxzifsQ&V9%R;
zlz$wh*5ZM+N>63+_m=6AaH1E;P&9Q?!*EBXQS~nMUS=2tVs}>cxcyWecf*I`P7IPO
zohdj_>)CZ=e2@kIWg_Vdkw-L;^1AFW360b40%+hm>vQHP)D;g3T>I96IjRo73H&2S
zxmk6d7Q397v(`ICSO9K~uXCCd+n{;4f$(Y9p3w~c9dAwdlk<H_Cf;O20=9r^5QS=+
zUP8(65t}iK3Hu8rk3I*cbn}y3;_$ct2s8F(v^|;q7cVOaVF?Ah2%7agt>w2cu)rhZ
z=>IKT?L&$J1OL~1dVmZDwcZEb%?OZRUB@?8dA>h3kqZ)z8esW9MT7hwPnDv^ditpo
zJmL?6`oB`BG=&^J9b!%nFpV#iwLWX3n1-&gXw&X~JZt!`WrIbcChQv>o)^RaL^WC9
zAMf(byV4Vfq!=&kSBmtGySeiny3KZ3F{)?aKk{NyixgetW)0+HJp?yky3)CA6G6^T
zpqIZJANWEJB^>}_-S!CHI21>s<3{!XXZpO<h*qq^5oG&2#MVBq@-6u;ETCIvk`^uS
zT!c65o|LzWE<IaGs6H^_Yk1>FOTveXCGH!L!X?f$|Lk#0D%uCoMUwyOqunKjH9?-E
z_SkR~gJ^0Rz1S<gEhL3Bo#=!cz8?O^nRJ1$#~agTno04W_e6B*8DZG~e)+rCoX;}X
ze+5r|E-$=~tYftwdBF`o7nOdxGjsu;ZObsgP~pTIf4h-lrBw$l!($?Gm*KnVZIIEY
zi2(HJW?T4+>@;)%qx3P(W%|4p3a5IrCUD?5abDNULu2pTKC^dHjAIxOVR%HdIRdRG
z|F`1J<tjnpZ*mHGrqs2XtDB(j2XT*upvM_aVzA^DeJcU7(X3=Egr&_JQL<J*12Cp)
zpew>Oa@}oUUhuvWivU&5Lu>Oa@R?6ZlUb9XyO{7i9s%t`{v8`(=O3RY_ID1o==BS;
zMd(H18yaTU0Y3EuU^!gq(qogCbsXt_syb)&*X+>SuU%V{uphZ1cjxr$+Y`X#_ovO?
zxHr$0chJe{h6C%7IgN>vlYLaEDE4HvxFw2_N)uF&o<MxwdF-POO;-@d6|lb@H!d4z
zMkj*#Ta)`@k#kkIRYD#2PtJvMs_GVD)DTM31gf8V@?_x!Rn@o}atl^SoM#|bz{_%C
zm3?{kLM7p}yUoH`Xa9+Z0Trl+|9U+9>v2DZL_Fyzs4jsN+*KGX<B8v+wE9gna?DmI
z;Jz@$?P_EGx%NfnmO2wTLNA;Uli0+Y??~$E`17W3i(O;*UiL#>O;qIw5H_dsS<9f-
z**4RYM2IIm`_0`d;oR3dx(m+Gk#`Kh^T(CW0BU@wJ>}|CT+^Od;z-mFYJ21=!bPtc
z5qp)`W*|+^mU(nV=3lRWL&H2Y%5VwP9BqZa*q43rZR>V&_$St~Ce_e5C;ZL6Mgp!F
zVS(2Q;Ou9Ph_663XVYXCBFXSPRDDdQXbmAG(L6|cOYtGv!cVw!q!)hAC~)|DUN@*;
zt3K?RJ<?N$RQGk-KakVNG$Xv<9u3G~b<eVzI<3?%p%%LhTKu2#Ao6++XG{~4<x5~?
zjs#j;!!KFtetc~9;AxSuBgJ{K@lHvR+-hNPvnY+}g1-t~P{fKN2sbrgViyz8tWhxJ
zETjt<J;B3uP$%OgEU|t<fEHV7NQ}AJ%q`pEOE81w$HM>{*&z2&XKwFTR}t=)VreEj
zUOYA-;XGgcAe<zOhU^&V*Mz6q*s@N#8QV&tOaTFW=Xl^;6F$=#TC#U)uS&6qesv*r
z>?KSU`<Rissp-;wH|tPY)uKQOwbp!D&~3+2*vb=ut|ZD^W|d983VFvTw9YZOMADh^
z@ppWN;s;o|UIpg8E*eRG*`SK#4BOgB!;#QlnbKNE;71m#5fns8(c(AKWJ>TfN|*cD
zp_e>Mpz$(_+-DIBvuWw=lj3rQ&w~y+71Bq498Bf??8w1kHxD?Qot$lDDt&WQ$AVtl
za178&?fMbDlS9ldgCR~B%e`q+$s3;{!j5y3zrZmdWnjCOPn>{3BevH3I0Jyk;v`v(
z>BjDXTcdwRz~CSLk)?TNY->?gHa?o4yuF=zfh&$FNXGC%RZkjX$MT%ge7AH3pEew&
z-BtD0MzxU(_NbjSD=JJjeTwa*$hO_$Kj6`4_-CrT2&}V68k`ObxUJo5+JH6AvIb}e
zIJ-Ozi$_+g$H#C9njqa!o)rGY{skhTK%6C}ZcJ)Pe7O)#WVn0f0g5M5*8>Gvh*APX
zwcRf~J<OVPNXn~vWoFc2y1h?&KXjOQbuRiRinHn!Wm17<Qyd6LizocW=d6K_d)k^M
zWTQ=4Cum2%dT=7fj~J_^D~pHhjzP&$H%{ffYm<!gM)At&iI?aBEdu?+DdzWI8doZF
z_+!dOSt!&&RO_KZHU=^#A+GskjQ)v1A^TiHm-hVn!C|qg(~#qmWeg!Fq95v<{iOzA
z>Dx5Z|J#LDjz)5?C=?P|tfY!5{R~G)mzoF*@uT%}b-#gO#Q<+OtPPRi&1ZuYd;*~|
zUNj`6GnuXWceT*T!~XrRY>ie*e>+w_u0!$Y$8%|=MxWCHOSD4TA+euKa-J&_ciaTI
z+bxdeJWOde;F$qMjVtmA6=%Em(56G#+;c22s}^;KnSY*a1ZJrrS&6rqI!^l@{!0Xj
z6Ky*ya&K{NR4xlxGzx0=`unG39H+S^wrDDNaN!MY$9h<nxms>IG$24Jt28!lKt6B(
zTv3=OcTc!ko4$BKT<ki}?&&%CM`#A+n2s0M-6yHH#l72T7TD!lN;Y4HmmpWG5EzrK
zWz0yhp-Mk@ArA@Cx@2yiHI>@L4Vw>Zi=z<dX4T*EZQ<59=CAP4ozRiVm7MZ(9&o<6
zfX<y{f7t1G;`ZKOIM=3*`uzxf3yK599qC-14=W?@3M(8Z)if>sx;lU+7B(tL&#S+@
zSL2nH8b)Lf`wshPV!)O!4Gb3^JNbJuOZ-I|`mM{H8LTu(3{8neQ!DOgJvnmn<;uL;
zs-Lj*V>fowY%5Q02BtphNGGj)DY%SmYx?3u0^$`U5CTyHyUo#Dm4SAd?T}V=0Be+W
zR*2t#2ML94xnV9Ya5;Zh4Ha+OWbhj}l9$a%xx8VVURnox^}aJx#u&}3rzj#H=4`<V
z9yqc=si;vnv|5-j+}Y3l#qLyme`a);Kj(9EC_1ABtUSQQ?+YOJc{q@)UaziiDQxRF
zI^oK#dRFG7PDgQx)5{6~sXV9@OiKSbG(w}b=N#2sD9>YrNQ-0sj-g(d`EIafqF1{M
zmBXNL8fEfkWf_!yCa-Lw!w;}At|#ueRYb{bfNkik1WO6XDNO~y5(LgdYg#9Ce|Am#
z{2t|t>S>i#q`eb?+i;nw<BQ7z#pBtP{ZP%hKq1`pmbZ))WhXsGb%go=KjgSBAqHAn
zQu;cIMsqrpvykw8N_#=Qo#Lt;5+aSFG*GzZp>)6Iq;8oWe_-%mM9zf?M9y80Fl+|1
zl3YE+3)%c3({1t=+h9y1b=E)%CUbc@diBFEtjLLev_<|I@l#jNVBEu)<spIGN^aR}
zn%{=(a+wwX#WqEUiMn^q_sr$Q$@|EzH*07<`GPn29k+xNb~A>xjCQAK=D(MQkuPA)
z{6x{TY#pcsa$Nx_<0snd7A>uOB_&GNQ`*pS;8_zBw^wfxX+L66#zjo3N?eIgY$M8K
zMgO%Dc!=}SweS)2%wOSmtKKut-AnF+EabY=9+`esa3Pw)qrvnCR8&=cl)UrZqz1qg
z-g2B@8CYSsCK=BV;Y_Q~Okl5oxL;Jaalr#jD{J-TF^|vl;1r72n-EHY{;_n7u!cL8
zi4>jQ8qqMTOm{-<`Be@2R@)76hb3(M<;&qCJj9Xr881O5|6`mxtjtDLVbD#r62MU5
zHRQcL4sDBWHFnk*P8_)ldgO~<-<siT!{`{wne#<DzBg9;q$}_{4>idcim#4Cg6z$o
zqF<>GmxQ<KN}FYI#V4}zH(wOiO%0!=2Z)dv1>jf(ymb;7FO-YP274VDfK_WR_sK;&
ztm!QZ`br6O1C8@5H^hThp`}{>-}lId5=SMPp$if9OfW)PWDeOG6L|FCS0O?FbKKS_
zT+^!;!lMDu;rNIj5kTD-*`wfhV<M%KzWVdjAG!hP1z_>`g5?toIpvB~biu+?=sYcf
zFbGt>qvr3lZ7P2<hh`Vy!(%kfeO-cus33q6@HHu>Ghd9D*b^c};rcNe-EKa5=2DY3
zHzDu#<hM8NIF|QnXz9CYsW7tY&A=;~XJRt0;SI(BE%cOhBFRwzFyBFA&h62|Sri>k
zgo)gbMSZMkaFFu5H!JPPaL~pIM%xfOJr~K-Cf$I^oT2-xoVPIMVUag(#9Rp>9+JRv
z??hOwpZ?`^I*Go&^Bd)dI-a=B)o<E4q{j0RA_h^07EeNCb4MRyHKY`3(Y^S^)=EoP
z2f(Y#JFPc|XmKUDmv@O%Zu6eTUWf<NmD7W~$PFSFNBY7%zu6-UQUeZj`-fe4HYL2X
zWxo=Hc#^JgGkeHmPygDH=3&;<b8a`3!+Mc3C5ZamV2C5&omxn%-|vmE42*$4lse*3
z>pRJ{eZE|N&KD$)%#m^19%)4EkNq@-Q_65<`gd_q6%eNQpv4Su3bvKFIUklw<@9xw
zd6FhEpG5yWcI|=eid?9};B|nl?`%cH9f$o|0{-*1{X1nc#+rLC9_N-`5f)REMi)6N
zrbz}^f*k&H4N40RxqN-HXMgp9mJR)ff7pKrkA0>rXiQxIW?aeNO2bcNuxv_sFuB5+
zzw}r4D)8ukn2!#ubDcUN8;KhDaMO72X)D$%dEp7%h(T0=Nc1zP!pKn$S>|Ibjs_A*
zR(wer$<9b63Rdzpo7%GYscu2Kq<Ct+R7k@Ua%OBZ;)>84AB>coc=48KQHxx*aY#zf
zS&GUYDNDlFe<KO3wiS=!7xQd8=0HXfEEE;hjQII<vt&jXu@vhu+8bgTlb^~i=YtQ!
zoRXvW*Vgk>^dmIfRMf^~IV{mAz}s{GthIOYBsrGY^QYDx&6P#6`)wW~6_byL|MtI;
zAT}OGL4hxRplmov0ef~w*Y)BL&difa5E~?LCO=GaA=d_|nX*q&VFB2UC)d;7j2R?Z
z;NoL!7tCbU^4TtuDbP+8Th^(PHwTyPfVh!m>i38;`zxi}r7%{-^u>wtTJsX*ltT=;
zfOV<i4cKafla(qBYJV?=i*E_BFHjkP_XS%rs$Uc2#hhjjp7%^(uX_X3Wd`hWp}bEO
zGF$~B#uZR13bK*@>`NMK_mnB5664=>n@~EbE#3Q5#lj;X4p`3p)!cNw7QJI)92Kbf
z?tr+13hCk;h$6leSCIM|p|JoJk;gicHV<c9lV-fy$6(2Y>G3i4f-B6Eg<%3gG<L}~
z<fnJ773Z_c7y8Pu*v$Etr$MRcdSrQ3z1zeGdmLO>knE5ms9_`Qs<SS}eQQ0ZZE531
zbTj>_hrT9#4z?>aa2QuVpc4P1R9?rRs_Jb_sri|cgNqk?;^9_Sq=DFLNSdWd0<IuU
zRnPicrPfkXtWj{o_=lo3q)f;i$69X4y)^JFL{9p|;V&^(W;<sz&6v!EZVOi9w-}{%
zu`;29);ygzgXYlUeHpAkj2E<|t|atiMobr$5Sj_=IOT7_Jb9prI-`}YnE;QKY~#|8
zw}l+txY>y6v~4mfyBZ74?9G$s@awYuKR!S(w<^Afhvd4@_l#6IZnpTRlIl3R7@U^`
z)sga#qPh?kjc|)l83*}grRhC_1(evSD>9vG#{~t(bjZ|lO%>f7S}ivmb{>z?0lHQv
zs*U(l)ctf}8wsan8v2cyWZIHc_0^4R=d_7NVS2aD2ioWjh00n{TD^xFIk2nOlSYC9
z86kS~hQ*l<TuXOw;XGy(Whi?10v^oRH>FQEl&j=IrV#S!wMHsoqNzYxu9~z3CN%tn
z?F$L9AcDC$GFVldmVgQ^IUDx*-}VeG<Wo?BH_1=V@SeD40t>r8ARRB&ji-_jG=^8^
zm(|!@S0Pu(Y1Kgqif%=+hc>4hPUfv9)gP4FRz|CZfK5J5k&qocVY5zC@Z;4GjWiW+
zJgszQ)1kz$2CMb*Up{@@0p>Zme}~A_U(gOW15GGc-`1_5;C)%sn*0tPwV&7cw6Z)@
zvQ%3EXT6l1%v9x%J2Jg(CZLCeeMz!c6!pq#*P(^0uJrsm*#C(v7ZjYKq5562t^K^L
zhDDUjE?ltc8~_p;Kr<c+|Gc7sqZbwiE*Xq+AO^yHMWzSvW%Tqz+SaSBWfJ}7V1Sgd
z&Tyo<Otx-i-<B47m)&N%j*8m4_&+$;r#d>E8I6G?L|WW)m-v8#`h+JRORe}jf|>?k
z{MG+}zb1sDOcghC(JEjSlg@d!8kVP4fBoDe!i?`)0jWsYP95gMN3Z9vtQrM`ynL##
zH30E(s0_YHSjA|hq0EJwA3fayc5n%;PdQT|g_`q!Mvejskb@DV>p8_?ml!pJC1Ky;
zV`nC%)t{AiNLZ0Hi|`1*c)MyY+5WVh*GiBbV!9nsoKWR>ch&4OH`kP_=;uqvgg$oZ
zW*qUy&*ZN7$7;};ySP1au?W@8(+5rj%S?=aew8xlIVpI#Bza_d;g70@nAwGAw%ABW
zOBm&d^sf19h_}Z4;wgCFMs*t=^=h~uPs1A#vTf!NSdE3)X#j^GaLgT6_LOEIKgOJW
zFb^BsSolz#k^e}gYWqN{Uf`EQ++DJu9pW5+UV;PhF^1GTj~ABO1Boi*r!P;GMWS<H
z`zHb#Cf^_UdnE%>QrRP((_#aDWwaR^IvQHEkcO&x7WjA8b5WT~dh2Da%Q*))^mcUD
zdBITBr-kW1=FK{g<~MzI&D>ghpuqbiUOtdDdf^OH&(y&c3h>D>?1^iVn@Xw{VuwyT
z877Nm7<Xgr42<}wC~bBz60JdgrXK5>(oh2KG{wB+^)hpFi$Q6Ku;sU9quO|QKqxt}
zFw0SVbqApd!6@RE1%g!)=4GZxfF&lz)f|?&H_@-i0e#u|=(}>}1co>yVJ?TT-7ppr
z%U;xEXoeZOd#!JLlZ-#TUkum6IFinw!wa+{(iLm&iyO3A<Uloe7Fmy;`gaf_$+5W!
zc)V>gH!5?iTfT}~ja<`fX+n-|*BPLrs1(1{^`FJ}V7#7u20Bo;yz1R!J?_QlO32NJ
zKiED6T!}5(ruPq|Q=S(*^|vT3{bhx9`rtf}(L#n$K&>VfDdM{!cPk(qnM%y)qZJ&9
z$MgrCr?D=mJlrI0;~5ZE=cA`!hbdh0mh~b)LM&AlE-48T6&&&=bk|0o!t<Ev4Ei|2
z^T`Kfw|t$!ooTAfQ7Y(<kQpI1{gL1e>2Qcm+2tWZ7f(~Y{Kf6K$zaYq9VHA2sgw7?
z&n?ie0P`N-T1Xu*>Ms7_vzdc8H~NDj?YBWMaE>2{b|F17QJ;uOX3fU(J<!4>$$U%b
z`Izf0zvOEhccCN#?dAw+?rgKu)DNXGg-nwNks*<)aD7khD45={70pwB9kTWuAm+&B
zFicRwElFHqJIuUv4p@`uNbU`q_!*Gqww@)&rtj#cu|E_^`j+yCDoB>rq8??%QGtt|
zhTP)SQs*%ta*k&?<=^OsdhupBB!}xVA5ftG{O@Z>aJEF|x6G+vXf_u@w2+;EbroS&
z>)&)a4*;HZ+oJliyEM2d-Ewd%zj_lsJ&cg*;BFkTvDsDVQnOc!<ZpY3FpI{nx*-vA
z#xwmtp)@A0gr3{dIS%#jMHs|7F?h>Lrp;D00D6`!PQ{;c>fP~C^=7;%X%+pO@ucE<
zLd-@hxNg@~E*$!qNxI=OyD=tHwD`GePTASNhKztf7atcl`$$VpzHchT^A>U=<(Rod
zFB<yD%^4HmA0B&eG1So$O+1wZBqKsN74gFNI_=@?1}K+MDwar5c{?5=$f7$rYV@NC
zNA*=L=U2hox!bB2?EzLhym2pjL$GrjbXG<Lnw%O7VZy~ks-3RutH^l2;3Z=;rBwWY
zu|4AFHY<X8?zb9#jj}naf~nw4WOvNi!~WZ(R0Xpm239c=$KqJn%hVw<div`-aTTuo
zp#5cK#vTUc@crN6Nik`X`>~cha(A@=WMDZTD!|;zg5exHB(M>D{-2|iAQMVdUwS)!
zz7>|6vm+KDxw&1d3qpQ7BM)D0W30uOE`=&&f%W3f#;foUi@2n_u&i49ic?osg2>15
zoV7Lq+bZ~YJ%lM8c_B)!lXq_MGaTA+b$TSYV3qd<%V)$v9K~x-n_<hl?)t}4`WW`5
zpzD1}DY0NSfdSnlPW8w^UthcQTbtWV4M@1^tC!hLO>5izl9?!rMfYq;#V*lgY>%cK
z3)UO<pQ?+dqGcNz+*b7{qvvr%iaoE{4@>kU9YZ^mC{CPVC_-)E&)jD#Z88`1>+912
zM+H8Y4jT9==ItGGjvV(Rftjoy^vayIfTtUL-nQ5GYvt8+Wt~|&F#Erg!G3?jPi6G}
z)&e>JJFR4j#jBB6!k#V^yz%S)r$@{h4H5WX?-BoxnMqFLrB$iPI%Iwbala^SySb2A
zCmvZ~w#XnFKPk?8OB>+yhDFhsgyjT=nRI$rttT3YU))n^s8;@BP3+i}@Y-k)e^oPQ
zXkEdr+1X)F2^shSpc4IL@@6#)6zJL2o@YA$0Ov8LD5rOWY0CBUOx`Gk_5NUe<6!6x
z>M9Ajd8cjLwbXdq`gdn2(wqwUhoWu8`y{}mbqXsBmz5jXWhHw}FjleE0#Ut(yH=GF
z?LCxfdqxNM*5u1|x7qXzaa?bSWhpT$=`;=!gLzOS*l4XMRZjPz2JuIWLjyuUU-FSy
z*ZXX-Glq1mEcA)i@TgG((>Dk`eliYw>GV5NR~FZ0i`*YH7Vu}P_m$5CnD^Yw!7k8c
zWga_6S21K4a<7Zx;I|ND8d8y5gZ$gWy(8A%i)+15%pH>}gC;yVZ5)G<d;HVaI7!0i
z!M<zQ$c<fji1atZiD~J*0E_J1+_3VR^X0f!#TU!(0~H@!e+xgH6?~K;rrkf+7fqbV
zOL_mkr_tA)*Zr#(okA)k%rmVH#$H&Y)uM{&`7FgQ&!Ur^4bS3#5}~+1L8PK`BIPM+
z;ke!RO6GN`#se<@HrDwS@JE0!>|vzvUq~xjqchC0K>$^xi5ZK>;3%R}BI%<)43xh@
zeL>cs>@xwa-0bmqb^#!$mJz7Q5blkjJ(=zkIPNDLH?!xAz-HTh?R5P`o$?%fsPDwS
z>WM8uI&M{YSAuOwXwzkz69wSK)6{+I)L(jj-jjrWIc9Zc{6Oy*KCGwHw&FM~24aO2
z+;GOo7i69L>N$SZf2Y(=3w_#=V=sUgIvG_ori0f=C&FUHr4{Ilk8Yn`3^SM>5vp}5
zY)6+b^<iQGB$F1=YqoGdLqQn0+SDPdzV=blZZl$B<3biPp8>y$_T8$XOWPtg*V1*!
zi;>h~XlTz*Bd(|NryKX_0LrE|F}cEw<+IVXh&~6MxYpm!n(k0~c<K8THGk4G;4pZr
zQN%O7i)^?sT?j$E+#<%Uc>-h?jyxp%g1a5DhGL%<5ZHzSdoHVGgDFPpF`<<0oO5;A
z{|S>8f7!c@O=MEsTG3NN(8rsKO8jw*aB%VUJ>9yJPgYYq9j_-TI=wf3Z}Pqi-RCn!
zqmRD3rwWf-PIR;JuL%4NZCrE^2RXA`Af@_~ZkEGo#99nq+sJ<jr`KRn-vC^1x4%;l
zesbFP>4oj;M-hk|mY|Tn{hN&k+#a+i^rBex|B!%;adPJe$@Uv`lpTQfD?~V!@ks?f
zQ<{B}c)`W9WOVhu-U~dZv1mMU!-NfGbd0yIqSy-^fykdMJfJXnxed=QwT7o)(NT~%
z5EV`Pd%yt|l~%Z(^J<|&qaW^?Dx~k%r^>Xt`avMZ)wNKGbV^bU-{>9&n-=qsO>Y7E
z4t}TPb9@tX&5R843C`oj&qI<KkE63Pz;amyQYf)EyzY4bW4+x>;qslG7`qF&C#Xa#
z%#iDTS(H>I2ik&up9m(1`cK!aj`bkRMC@^$Rgmjt8~=f#@gqJlog{gEJJw(02m>pP
zn&tngRqcuo$5}oZ++lKARDasQ5qL9=_aK&=9Af6~oWQ?&`SqMu1FBP1TerAHNhPm#
zQk@(Ct)RaO5XRaSl-A1gWCL9DO9aeS?q{&YO=htD0!?CawWO9FN`#dPM%fZG5y^Po
zD0Fq@H@Yw=aq!en2m3Oz$90_;yk2;<_Z7AB9|hy~5iA$26|zm4U!)6DBPZ>TdoH`q
zdGgV8Hy9>OG3KY5CLCP{KjY?6Tzm>GB<k4{L$h$LUCds4Xzy=XIZKW7?G$N*clpD-
z>!SP`nPM>u&9NP@vZ*Lgs;n898Tj$wvEY74LjP-~i!K9%D_a!d^T9EPFd2s785jF1
z^%rQ;b09uIj)am*KzmW&S~{Re`b)$NPngrfNDn8EJQSUaMeHC&-evG`iZ+$y8VW?E
z4#Pzr7GXaf5!25(aId%#)8T=s1n;Zi*SV>TwL>_^5tQfH3gGbo!6Lq0T@Um8&5=Tq
zJ_i;}E}5<Ctzv}@<D8*wURJ>Zh(1FZ9%B|>9Y;miWZzu6Ux0;kOLBI+4rb+uMv1F@
zKCNFv`ReMK%6K}M;Kx~e?AdVMc1VnXxL0{5(JZe*>(%Wfe;6;UU<_-sH|NkwdvK?g
zM`olX$YNHuxD0bQh9sF=b0r{F=nnbl_jJrvf+c{rZilmVy*IzxA{P&2t;zj%3>XHP
z$-Q=KT;MbjwW4c~7o+9yA2x!-9jz*&ogLtfFr=P18Ha-~yqNRNB3yZkz&*&d#`0%@
z4D#un6mm?;p9sjp-fK7@sRBVySl<qh)XU!zrg@GP`mkQ_?^1Xaehf*?Hlc@w(#*Zd
zJX+hNMNP>)lYe$_kioA1Yi62uusWOhOlUT1AV?SWP$vf`{U?M2W#Q`1e)PM%MBA6}
zm}DVvwWhJx)Jb=b$P9HxMOZjb1EF=wG#YfmDZaK!01O0*3FU}$E~s3a-Q^lx<*$y%
zC3t}CpQ_!W08{WGZe(KY7mw_cf~+=Jl}JLmu%5V_^^D~-OdAKNyu@#AI+=wkv~@70
zF%U+f<ZV6*{rq8mXKx>j%p(1ZmTip4@U#|{3x#_r0jmd?rhZ^b+HEdrR}Uoji+@^X
zjTQw<@Z2C9tz7Q2QzCspx+Q|`Lrp0SvgVrKDU3u7MFH<Ec%nn3_C6ouW3NF`FZ$6E
z3AB_dpM&G7YTxL<<4)042i7uyn4$k<BUpeSG`aw^3DVfpK*@lw_UU7sSOA2WDUlCM
zAd{d>h`ydrP+*$fXnuY|SPWKj!r6JHQ$AqMGuPDtkJhm?6PS3M7oG^RpT~!ANb7h$
zffGhGZ(yEuOE4zv0nCq=vT{WitjgYcvTwo$1B+B(TLM`Zbd;n>Eha~U>x|M`{bHcT
zZJrfj^#opxM)%b>HqO<Prlzh@rsm4&8v>$r`0-_4ume4ztH8^x8TQ&+@DDpO&hCOt
zY|MlTsG`cFdu}AXT|Q?6{?}87J|bN=`C62h08t2x?7@R)pqbL=x6Q~)o7CKX)Y&r&
z0U0`K7D3l*c>gqpqt5cwb~0Pl1ZI!w{^y>*09XhdDi`DL<dl|vU^H2-X{h#!M>SS0
zyNhG`EH*JFK`1(%z~)Ja=%>|xXJd*OR?iqx!xFcDZ-1Njw`DIY?;-(Z@`G|57(=6$
z`GIavex$|60P0Zb?ed~_j`MEqTdsg!ap45(Kb%u1!%^emy?A?o%xd~nekHlWpW6|w
z!XQSA@nECZl5|M9?S<;FhUE|sPcA7T2kcCZmA(I-aJrBLKOoCnkkI0gtn)f!wv&7N
zLZ_#szYfMA!hNe<35&$-^c(k^h~~w+TFf)2X)z?&Uf_{BP%8wq5%=l7SULD`PF8lU
zW6??z1kB>h+c1X<C&l%AZ-5)Nx#hs7Rb_5-ZuXFL$a}>#k^kc_eGzY=6XZcxE3$XA
zdwr87XEMo34m5EHZ1@Y|b~W>b;Ee-`9rK<xICxIgF#Wz#u-c5Vu`YR20)0wtw8%2K
zt}n&rY}A5*e0&Y$`>1!{j14tt!mw>dY*3#fpo`|&g(Vfw<KHAec(Vm0$v2=}t^D?A
zXh~(~o1ae{iGe(h(XzC7oXtiX*VQan7M5|K1s;iV=qdhEF}d4wU1}^M4rxfTKaK6y
zQ3VA})|AmE!GYceD^b%WTO2@e1&q)nROJ|Cga^lxfC1ZL9&J>?)i<}_Egr5oPE#Kk
z6nn7umNW;747-Yjx(2HdPo4i0&?`E)mj4+kN#Cv629xokVP`S&Nxaa<Wj=}nf+98Q
zF6VtiHodt8g2>Dq-<pT6PRvxbuM2Yfza}yO0!a1eWn-C3QiJ8xs9^aMjzvp#xW<D{
zKtT^)(2OTCGS)wAw^AnvB6wg*3jxiQc-h6qq?n1x4%C`8POi{LB+@*J5e>_d@5rZ;
zboePI{(L!~$bIJB#bgzz9%}heN63OmQ59-gn!J|3v9EZj{9WIJya^s596-6<Z{4qj
zD2t1if78)Hhnjo1!C+rT!F?in9i1FF+0m^K?{GCl+P8!_F$hWVE@a$T@?m`=fkRcS
z=gUjC#e3a`)Hb=Q(=}zyZ5y99H8;kwN24CSG8&q6SJM2;y*NRLCO;9et1?i;xPiUw
z5(#_g@EAS*^KeKz!U_E^lre@HHj5ll-}paci~6XHUwmo8{8Omh=4;NYHVKXvuGU9=
zwts&0aO?!yY|adb?|2-_k_sW)9xOd}s5%C4N_hYNI_HNfjS7nLTl<DZY!fH?-mmf(
zR-zv#L}WFfX__j>sKIbIYQoo?<8hI8D%pjI5Bao~{3!POWt~OyELCA|=Gf<@%+`Yt
z>-bl<Se=^lEHw+Fz)&h9me1!?llZuWHZe4~if>$(vbZHwD9*4zQSuX1MWND3^g|}8
z933tY)j*3Q39$t@FjAmN8?PT1x2dT!NAX&hF_{5Dxz%14o+{Zh>qo7A6I`G<n(&+g
z>(dAB`YscOX4#4|9Y7NP{&i%hem*oDQ>L@JxHAudJHr;<Dy=AmO}#P2S;uNm<)HnL
z&&1Jwwc@TxhflJm=d1LaA5THP{Z8AU5%e%p#$+;~r+k`G|5|12-2s}g{~a{CHfOZx
zxV*va6V@RjVu-Bqm$xbzk}6VatyM<$wXCll=G$hxm=O#5qc~m3jw=?=cO72QQfwhV
zZA`L@h@3}cp?em}>fhyRb^&e<m4eO~;wtC?%QqE!pMZZOhIyA(PfzuBx|9{M#wy)i
z7;)hYozPFl3~S7o*L91d^!Ef+k8r?r>5Fi+CWMZHHHbv-s8+jD3Ff=5<qh3s55!ZR
z3*-z8Q#F1%Fz&^`h<+{68=he=E%S3ANB$IYFP&a-wDv@ErCBH{LzKgu?4bf~)5xdi
zmLT>bYT~)+DK`J-y8RE{=qn=QkIh;H+5Z7mK&rn9(xRTIfrU5<qQS!OD^E~4Df<?v
z*JTY-O@ZQ5+*ME`_FqWJ^e0p8naMs=no5h9K3ox(x5l%pG4At?*)S#D%bYTyZm3DL
z1$m6a3ijgIxpJFcNtoBdx2`qVk;19UKn!9<cX`U$E~D%(6ye_!4aqSb>*R$M4bc~8
z{ECMRF0C9HymkY)mYYk0@YQMe=3GV8P_)C)l9c75K`H!s*RIQNu^3k{;MJj+BC-kS
z5^|sthwi^iSBbc<4r2VuC}n9*N%KAxKS@$p!y^BbHTF6dH*b>8ONx+QgG;HlAh2#)
zuE_L&7Q~C*%Jnr<9(&;>L`*trp0dWt!={H1sob&p(WA~Gd20dTXTl$DO;%b>6e0|2
zUu(|9C+6_jF<5O~c2{{5d*z_INQ8gGFMm1c-;<8<=>sb&uPd-$ZIYQIe$_WbtK9aN
z0s1I00P=v<8vb>B?y2I0=7?{IVt(oPa<O8I{iU+{d)!D8%xm`p#)@?S6<Rzt`H&kc
z6y%JAj?n;w5a)wQGvDhKW1RMbG_#pTVz4G0S=d{OC?J2)eVJ^^>|>b(?-GqN!QAEg
zz~5z>U7@|0X*o*ew-mZ3U0-V1<S1Mm_<|M$VPp&?kuD%<NrjS$qbok)nXd09*EERw
z6+8A7=REK!dMowF8e-8`N80!~XWejK^FOn)oH1C%uP>+BO$}{Y3UQc$dRK}$iNyFa
z#Uvpk7=1M~eKd-$L~e^Ph+qk<f%ZWa2m&u_lm>is@O=KWGXXBp+M=?y)W=l1-#08B
zj?N+)E&BI62jHF{Kg-w)caV)nBm3dD=l>9LYC8d|S&>(;aorC^%JM<&so@y1&3`Se
zd`2t@(eA@$R5^G&l4qw=O0+B*T^Wl~xjU@dOKG@%&P9wRFNeMKpEs|>XdDgdtSmO&
zk5Jn_TC|~PAI!OF5d6Fq>naL#nP>-7+3h#7DAAr~03GF7QdQ^y@3E3g4*!qu<_n7%
zmtDa+Mfy-}0$bxnkjrruMykAkxVb<eCR4iHaIWOj=Fn<j_!=G538xEV(va?oQX29E
zhL=Y%CZ%73c*DE#v71x35?2@pQU|^tyKDy`a0=`XP27JuycFL`LmoBclq45-xg*Qo
zDH1)Pg+h1x4iiWEh`$(hN@J=;9Ujcfvm+$)oy#R&Wf#2@3x#;|S^~BL8s&^22mftp
zA9AiVm2@I#iI$v(v<_czatf7sl$8jlj${KmeD|f{oo-ym0Pw&VqN;1^4KS>=8{V1%
zL<1iXn1pXw4(Y%n4>z1F>N3Py#Si6x_B<M4w{;4muSV-xObb(GSoBX?KfkRDDv(hS
zc1zH4lEnK8?|`r7<)wDQeh8*lpu%?liA2yF+WvrHKa$PJ#L&RNJ#E@Y?o!kUR}j0=
z6NO05CHoqEra*+_KIGJ^S0MyfenvuD>hu~3VadQ%9XQfEZ&*xgyF!N<qEJgTz~h(q
zqbVWwn)9=s10kycA4w_H4W^^cHF7@9t}yRP?!stu(NwYl?`^yS8*@!Sd7F+zBDb>z
zLWx}U3tzIM44{RUBORB=-h9D6UNYXLV}VqeO`g)R20rtjtCn6#5Yvwrc8wvC`J_tx
zBaG8i)N0uUA3S(g=v5ZCyur3bN>fY$2SMo$fwS|DxX<esNY6zdytImR&#_t&#Hz}E
zbk}<xIZxv1T5R>M7GbVKn!}WLAcZ<)4v-NSdkTa3G45Q_=kja0zcXHnmq@Jyj>*;c
zM7pl_Xnw5qaySmUa4M*~w7~PIXT%>jMlx1Re;Mo_;mn?oU`kk(qjMQ3`V%zVdQi6!
zc^#O|DB55_37s!N@MNisQruW(W$M}FRAXXJhvcaE(qwuD*4q;AGGP4UNj(kN%2}Kf
zi1cz;o_LV~gStSy0S3m+FH|&pNS9dt9QDdr*!J=gw9Wn6B4xeWWj^9lNR`1IZS|2<
zMkJTyBZ-nfO~&{F1%_Fk@C)}^nGFCRYs@N}!I)UW%(tmbc0bkmDMWy%ROSrCy_iL7
zqm5XI?s_88poaUov*@!*Nxf@627b;FTx?=64tx3r4Qa45>yYSf-uoOqG{P!q8{&Fk
zOYGD|bnLCoWmq9tD+jLOYcJ_8d1|z6aGkAF&s&8+ldMwI%Nu20__tM{^sGlT84n5h
zo72HgN%0ehigq<--*>Q1ZGNp>DEK2CZE|h>iyar?5k3y1lVnx59RK3)lYSqgg!yqZ
zkQrfFDUD`HZ*{PfNd;CFrgi_U6zAYuUVx-*QFbZ~j0W6|LwKZZ7N&H+iGb?idHd!C
zoG5y$nRbb@4dNFLq#jeaiK%r|M2BXcs`t+FQwP;VU)&GI`0G=A2knwkjo!X)?0xb#
z`XU-RrITC!6+{zPv%3p=<5gOADLlY0DSUQ>r1|f830H7R0<&lNMd=|~LeHf^#vH#c
zfeI<d{H!|1mlIu33d+BDXJ}P{%3fl<weat*br9u4zbYMaLP{sD#yV#F6E=@93dCHy
z6yxVA-TaQ%zxk;59lbxNy|fPG{Ime~56D~?bp9vq;ypx&!~bIUU)yna(?ZLumZA)>
zKNBIt0C5DMis$0d<z94ZpAX@|WV08q@G9nu98`27%)Fl1&>kW2e0x^F?_q|7Qxi7e
z*YR^SILyJ%wy}a7$-(V0gmL!j7TNP1s9G;?Fn!(vu{<doWB%WGh)P_X1g&?lY--}G
z@lUYNBdX`1qUsLWHlrw1tf8YN*ZfjrQjtWvf5+0bkHNmC?C&D|1fR0-Jfm>N0Ik1x
zC@AU9WW%looH4$!zqBed-ziJmh{Sbv7zSW==p=gSQxFxgxoTsgZ6a{IOi?wnks$qt
z_CW+^EnDwrsnALK1F75~&78vl_(lql-ABXQwkr;$2K}6}xvyX5&VJd9IW%q6OT0?@
zR3VA^s*z7yEt)?6H?m)N*}xYFTGV<O0jeAl(x)V~87AD?69Q%O>&~-%*}Aav{2v2;
zy;@FrPgMjxE4)jlENQQT5T>9dYA1UtP^C9Cx!>*GHwOOTW8MO^U4{M?_w>D)cqgU1
z=wyt%$I%p3zd)2efVeqnPky7cxOHZU-5dPaN(^*A5Vq*2G)NoS`6Z$1Q%#Hq@nZdm
ztkK7Itj_(#SE;1VB`{*J`R5d}@j%!1HpLB@-of0v=b5!kTF^hD1>yQwDJ0{;s)C<}
zTkwRhnfwHDx|OIbtEZRukB52_)#1`Oz5#=u;ob8SiT&m6TCjhEE>$aZmcY>_=o#U3
zPBi0(iKfvIl`nKj1Le00Cjg+<Fe{*OA~GJ6Lw>nGQUrmPfFy6?KQwjk&}3-??>C-=
zsrhV;9{W(J#ZfCNCXt?r^wKX=T}Z&13;2REzp3em7#!?}1#ByXW*2;`p+LvLjZ}D0
zG-ny9IweXjx;YFV!pc`eQ#4jeVRd=X3zk$Fz$kM;gI8_uPTQPB&Sx23Ur1ffkG>?l
zm#OBh{?j30Cn7LX!mxlq|JA+y!1Y-RkZP5b5tZhV%ef{?t)ee-w<g)1!fTj=2>|?p
z6)~Z1vqNMpw*pFH)-+_SH}jM;rr>d0QvMr1z7w!{KPFL=wv(@>>oH^S%G#vmpr+%-
zD&J+zs%58?YySXaFIvnK@I|H;t*@?koHYqtiGS#xfX;!cj&f589{uYggCI_?5m6)^
zgI0aFtw3@6zfUuj4O@TmhO)XWQhu<q)4=WQEbn+USbWGHu<VBn-&$ddh}fdfcJMgP
zmzO(eYY+(3Nqt7LCF8o;o3&SsKkES#h#_q+K1OiElNM7M8#5VQM7D^J)VRj7QUjYW
zV<NAYz@&1M)b&xWXCR(MVg@D=FUSFL7ytMMT}5e+d|f}>rg@SB+mdo@FAfm3jpPP;
zj_9k{HI|j(v*k5E@x&g3`wJz#QN7UXm7_k0`%yoQzv7KUvo(z9kN^OBY+@P~;icUw
z*j)e;90(^>k>K+*LNJz$Dyv`e2m$cPDfEdwT-t6svw2&C!!M5TF9oMH&Y$#gfVMZg
z<(yx~Oz*!Hv!coq4hEPn{57thp=rs5UAscWxw+~u(>%<f!*WxDAqo2vmx&CSL(1xA
z5=|3Ah{4SF_<lJ1+_1`8a?|Lm!|6EO$|zPzhGSnn9=}(+)=(mDR-cchOP<CB2%11b
zrI^*vRFnKIlSAzb4WfEk1^wJ2Yrv#nKe=@Gh+#_5kS*}YK2_jZ!$b&T1_AkIA%b_M
z;>ziu!U(Y1!*s0&tq2@!v+0<q=5jR-w=o%HX_!?rLX7Rv4e$J~ehbdchCzB=Mb$=^
zqI8(Bb__rozboyN<+g({E}eXy+U!JI1b~D^t#@JaD=!?xG01v^+RV7y`a}Sszf)<F
zVteE#j&q+nlngVbB=TA3(RzTj`>)qoW;Pl1@SqsOlkEA%9eMfoX>(JMG%s-E9Y6`v
zK^S8N0|>DiM5p3~m@7>kqlQK4#m3reJH5z(CXSpOrW1%}*#U2Y?!VyYKeWG<;}PEj
zpB9(ER8pI^)-pVA+!+~x&;^DqFP&g9HLsV%ozo3gUVO(n8w_24!Q*XePuAK{Muy$h
z<f2VC6o-~~97sD?XOe6$ji}v(@G3};RYu&|4PTV_I#)&vbTk3-(!pe!0{SG}OnuSV
zDB|z<6!UrY73F>bYRLFD`L9?RK`wB<3+@w(gCDkT?i07~0iibtM~6R6LS`2T2KoPJ
z5c}drRnFpRcTgL%8FsMTD@#YfI|uTdl6_#raJ=+G*S=;H%o|PEH>)GGA?VOhY75&9
z$vMPHGWSQ7{h^uD(r#GuP;*?8cfHYo1>EL<CdW&cQ)JJXBBR^Us6BW)s{N?Bc8u+-
z3fc{tkyv0Ngjy11=K}mb|8-#=H{fOo2LnP3+ch{ozacX(f03*$Z+Mk7z|jSNBfLL_
z*nQ)-JbEXW_;0W#7$8_ob2G(NUu@mHjC+NeP-r7IQsUhMLC5S)9fCWD9@#hvY%vcH
z4lg6aY2Bx5`spvxEdI3PGM`5y!0y90&s{}MK*shNnx`-Mp->VWs7%GN804N_>valh
zbHIu$N^p;&elGdFZO`b~T4LGp(QOpgnKM_lZp7W(Wl_)kNeppzDk95r=8#@D=AC8#
z4V<BoY5DeOp&}wJBmbe#f$lG{)ecHD9)Gx<K^eJO?I2ED3k8ND%~@TB942?qlEx>o
zg5J2cOL^I{D^4|!c{CK03}q;VLbGjtbylbhE-!2Z!5*Ln$c_oksUAMzORd)~oYSiG
z)!LhHZ-_?Fh^Kb1t?;#NBUo-C_OJ}mH;P%HbI>V@x-LI{TbBnCC~rEZ=qwxEOE8D9
zz8w{fSa<bY;`e@9xq7FdEu~l68bM5DV&p<g$IL@5c!B69jxK#7MH_t%QV%a=MkeQw
zY4Yhye)=4&3{i+db8U;uPwQYUvFj?{23Wu3@R*MncyO&$mi{>1Vs^u>X%Zy`f(x(;
zfj+4^{M<WL0vK8}jd`auQ8MSFm(1jf{C!jwmFZtS62qdDK?>GKdMcYkujxfNpVQ@R
z3|iaqXgr2rTv5FuKRIBz4t)HSumSW)%Dp6GclNN9kxJ|wM1R3)H-;!Sst%=^hL?OU
zSvB|4+f`4-spUZw=Fdu)h`RJx{X&wLW9J{dKDv)~XrfZbf9HvK#jbz`Djlxj?ViBQ
zAsw^*>A?=|9Qci2zM%@bk5OtckHwQRCP}pG^=n+)w4ZE8dH`bJjLWd1z5_s*TTZw%
zrHdvta+Zv*+<-dZoOtbpEIcQuaXLVbf(IubjWH5_rr>d<71;beeCN%eeJ6VC!G6{A
z?G9u$BND3*m|ZIr;$%aF+<xCc@VF7`H6MjPcXefioii*DKec&H7c>M|=<cB++8pp;
zBMvq$PQ@ah?~$UGaPc$7qP+RzlI4vo<_Z$~Xj(al+QtX-TMo!i$nn0o@U4@SNlxa6
zP$(z%3cu)3KnvScr8qYgMOYZZsKk?4gMVx8aPAo0td6Sye)4U-(p<{6o~o3Jz74kY
zA2j8i403MB$2XrA?QiYkyooZf*-(;}I$=xhEJ<YJXK_C`5mSH+&1QZ&*?Puc=QB}D
z%E*vi3es2NS*w$9{GrOh#03A5m_%&`6)+b7@d<(U+S}K))8NQZ1kuwbD5g`TKTWYJ
zW<q2zo)(<>yN_8w3H!v?WIg?lo~~d9@JujP!kQ|!{NnrLFwx!^=$t6Ya_qk#Tt8vD
z7%h+b;~|vox<479t;aik;XuOlK`p9dEVOwjs`mavGM$av=w0A+n;F||v1qn8flc!)
zDPow-S;3Xy0FCJ&O$C<sjAjiUHO8aqXVgDP5zD3`8E>>khiN%YkThZ_Z+N>nnaE)6
zttEn=CMSq5sBOn{`^lFL60}sB?&<BMLpu~4u782^PvtWr&g5H2>=pP66Q*Xhpy_j3
zN{Rwhu|>VMAm_BC-Oa#3q}MbB{FzVc9J@GiH*zMntBq~{qJxmxa0gGJ$Dqn{Z}2E?
z{)1Q4gx36Fvfg(pHTKJll|v#myg3*({k}M5gp*_ytW0#rs7{w{Ro7gjU9-M$byAZ^
zHNMOQ8=?LhLJ`DVTQl}gwB6-BbuNgfgvH2DHzO{!>M$2`{1Valv_yqcvt;-MZF|sP
zdB^lyCH>e&er-G@W6H8o;}LPwZl>P{kD*~G(ugtb?Q1?P>0LBXEHjn}gbIqfOqV5g
z)w<iMX+R6Jz{vY{cbY@x7%Io=QBSUrt*$%z%MVbf#bxnsCsQMjQ!oMi5`t0?9^}~-
zIl~t?8b)p&Ve<eX>j$xC`l6$MTnVmovGBuv)P800Xk^ODs1B9O6&lAeQAbTGZ=8mq
z7a0X=!CSygGkOUZ<4fO;C8t6Sd{T(AQ))zone`od4tE9ecR6>`kLEAc?~PHs<sYaY
z+jes?dZTaO9iIg`+$-Py1<Af#J9HOtX=|-HDls#fUDdG3LwDf!p_N~hP67b_g6gsA
zigXrfA`LyP5`oe6ba)e@{=+R(2l&DgF*CaWk?w7;)#(ZC76&BQ3YhW>;ucxnz_1IO
zym_W00<9Z!5gq$e8U79(4P-RuG+9)c2%MhRVnra?cd{G+(*`oLt{dXdwWJ5U7C~dB
zC<7Wt5q|`bsxf2(>y^m=mHfQz*0$d_k+JB=DLGJZd{U|R2H(npQ}|SMX0;V&n@;WZ
zx52yNTG`Eq9Z^woZe_oyNe-T{ew5Y+f%iTTvWyNeI`8v%^slL!dMh)<$|WncoWkbl
zmCn3VzXVCDM~^|47-p{`GB)CSytuES<<jp9uEeNH3`9|X#!)DN9)hCk)tjw7{}Yv!
zZ~GGC(P-K2tzx3pB~zD>ayg)4LOv7X3h{3(fYEQz!-xM4pta#)!nTK(E2Lh%<^SQv
zgkwDev(jm2v(IO}H1=-NY8FdXk{q?~87~>_saQ-S#}{JvZQ34f@%1DQ;>#S+fPV}7
znZ7`izu6KMVw&TX8Wyz+J^VExV2?*3;h6U){D=sm?=hbSsCP2OmO@c)rtSJ3={}9;
z<7or_D~y4I225Bd!$OlLDA?BvfhQFcP!u@1xWb+IL(o=q!s4U|&gt*G8veoD)^Kd&
zLp|N-SMuu{dki$d8z@@I!o(b4yG%s?hP^j)kEdzKa%BpcVX?U<WL_46m`MKOj4hsa
zvg^K{yoa&z7>4y?PW6qUkb7OSt_Eta<9JL{0d8#gX^uAfJn0*3{+yJvFZCa_?7w)*
z&ozmPCx&o(-c0+2e*)`?_s)36X-e#5d})Y*okwaT4_As`#N$wzV4&A#=ve6-hZZn^
zelW#QOokU>O*Zj^1v09ec@Z-tm^QncJakRou6*;m!~qsnCX=-TII3--ebWp@Gs?rm
zHSfp5HMt}{vW~Xn&4nyzO1O81Q`NUJ+Ci5f6_<FQJT@6#2n5?#!TWHmb-Nb9XP1OO
zZ;!?^sOG;KPpM(wGLS_r_6<GC7PQV8%HHVFR(Dqh!=cKI`zE3n(mYfU%{6Ck!QX=0
z7bAMHFbgC^eb59*=7Ju;wGN5T*sE^h(VW+tb%l{Ob%IYGm)&tM4`P%~LB-zIWntsY
zG~fEMntcA0`~nz)xMH?sPzS+S&o6i3HoEgQ)7QeW?Tch@k!*bk?&N|VMWHixkg#AU
zgYuR+6s?AN_uds($v66QpmC^OHfs2fA+8=~wP)XX@m62dC_iJ3D3L2wcu8^){v7#5
zEZW&*)5B|;aIaMQ%G<upC@rvF4xu?es)cC&PCu@I3rfxm$Rc)zzxYVg$+N%#LJM9`
z`4js3Y4=v}Mc0lqhJr!oo<?D+L`b3b-aMu%X2EG|`iuE(iHfuH$ca&2aS;H^542hI
zPZ%|{0;vc4obw@GY^o`VQ2t}6cKOFD0WxRhKys3W$3mj2+r3%H4%htF(>Um4wjPx)
ztCFuCt;DP&20xpByCO;&6K4|7nLEkJqZwZR*Q!~vk+*<Zq~B}v1`0NOrjstii-Sx>
z*YL}h>-4W&X9Wu)M))(i>#6Y;Fc+74qH|!GJuw|M4zDlRdAqov=zGT<U0aMI_cR$r
z3WuNJF;mg>Ko91O`6mu=zt!uP*6H1I7wtj4h^e-GUdy8x(#n@?_SKj-I2lX1YBc42
zF>$=WM#?JnDmb-gihfwNkAg<i(lJFhekCSvLtEWQ3l~=BA@CgaD8`A;>Z}C@vm*>j
z1|Cbp0Dwi6*7F6k16L{A4W?x8is1nUvRWh@kZ&UJb9xsPlC5pdAz<KGb99`)Ea-<%
z?F~CnnmgiFAz1Nm1t7lsUoT;4To3IMa^`ekR5Dk8k++r^EV{$m_SaA22=tQknSGmU
zRsp}UoeJpEyWCs#rQdM7N|`r|i9pDQ_)X-fZVuBB$bbh#(0vWAa0RZZpkvS&*O|L{
zxnqm36V9wumDOKsoXl)8=HUs@e#=2S5Q?ykst}~5fi&M}lhXZKU9D#*c-_xS6U;Q%
z3yia_ASy|N6HZH+wWS@a0Wa4O74`rKG+c(?*oEx1Fp@anXN&b0Uv_Zd8mfi2IFWgm
z9C^#WKjsQuCdb8|{QlgS+PffYPD<`T49~f~5T6-U(|V-@m?EAm2p8*Fgh_%6eoq_c
z)f&FWPMnz1<{R0)m~Kg~0f%2RNp1>aPxu2#a0Nr&l5EyxA0nn7fMYC9xXd(HFJi)#
zNukP_kTl1hozY)zeXGv7Rh|erwukQH0X}BT(p>I06TKQ6nP4)-d>xQV>39E&SLM_(
z`NpD&F#8%-8M0jFng04BJm|Yfh}uG%V6wj{x(9`GUdH>F8$NNT`OCx#Goi;s0M`Yw
zpQ6^RQxslEi!`xxqPgbW@x=u}s_$kaDoYdO<$gVB+}5KBwYHl=BS+_QoTA}*v0Op2
zYu=rO{U#>{poU+W`4^T0AGRxze(viWM=b8KguG~DtMk%}q+U156UmvV2|6w7R_gS5
z;l0XVu4+<fOek9$Udo%reQcNe)S@LwMwqz5S@5e9e~>R>#v>3CN!_`y-&O2gewR}K
z42gLwVM3@PyACuY@D+Qt`bPTPjtp0EBT%YG+f%aV(;@G<KxFw@NvkRz8gs>cg)Xo$
zcv64H<BBBFwPo#c2RKP@jI_@6$VzT;hFUzDoz#g!H2Bv=Jw1Jkfjxt5-+zdkZQ;Np
z5A<V$QOH2i(%m7?*-1;zGs8CDth`d|qI<|0UmPU#Rjg~~9sPLM*k&vDh7(4WRHz@@
zRNU>^f<L>8kaIS**$ml0z=O@biDRx(UJgYBj70rQp~!4RiqzcS0N!i0iN4U$@|=uZ
zp2XtkwpcmgUSo2}<3<sAn?C{^eZ*d1+5%Dy6QyT}%{2RVmbzPXvrRY%X(5eE{l^C8
zR_klc9;8QU&~ZGl2Y7L7ZYxI{eD#T`($aK()OLsVfVwq%4lGr-qAKyt!N+F(1`@$E
zy2eM$FwC{|*ia{8SmJ#Z6w@dLwwvm1u+*h5>+<Ui%rq3xf^Xk-Oht;JB$Ok_g|T6K
zaxhot7`{-M6ezv(`IzxX_F=%Sx)>=_2t+au50DA+@0rYsCL(abIz0j_`^Inp3QPZu
zCP%oMSY`7eHWIL_wQ-_ZRjw^gnT91I6OL(^@}BrmL;xovT(LoDRRj2<%vloS|6`;a
zbAr@$Cx{mArpoysiWXZ<5!k-7`bMmk4e-=mO3Y^s4t3Q1G1YRyBqurExk(rI>4FM(
zE^@Tb$_VX}rq}QXg9wUJ9`@bIMlLuu#0&(UIS@?NZ1vAjnhV*-A<e#Pb?HR6mqE$Y
z3XBHoF>_G2KL36#nuwm>h>?azF@C{RSnA#3Id{JLaHxj|E{(@HY#AuuSE)Pv&Ii7l
zr@@!QEEMvj>4V%%Np%q4RTRkSIA~sM!nNsre`2J+Hw;Diw91q`;M{z{SkT5!&7LKQ
zVFmJcU1L5p1q4uG{X&TJ1HdEPaBPb?VZCuN0A3wnAKDofaB^;$0#GBJPXVkvUT3-4
zDc=_2p2N<X;soDTAv~ff3|5ZcT-7m@kN&ebN=PcHt3#k^o@MUJZ@<+Gjr-05DPG_A
z4ma2tl^$g@XM>&NgdZHv$boJVmhrjyv6eKj#{(SWoXm)$VohWsz2})G--tKBj)+RY
zl@Y@nqx~0>BreBa3hRM+&;cCsRh=#|lwmFh>X;8ekZjNgz>ooBe8F*@Urdze8^BQ4
z9=cDPH16j6;SDEj?jkGPmn*i^r&?!!|NZSASy<Wne6SHYf$N80Ra0XBoJp<vTqd%D
zD80#9`)oE}Fr7nF)beE;RDPkD_8aQf66)hUo0Pz))~Zwc5?C)3BqgDjv}uGNW@KoG
zzN?j3U|)bCDH)+&^nAs?=y*@zAi^>1bB+qef7kV2f9|nsJ+E*?z!c7+GwY`CE&o!-
z&bV&9+1yxC^V$6q?MXA3t+y_Z1iQB;eWBk6xP;^CC12F(t&Yi5Tj-I^y<lietYLVc
z$Ze_#wbi<^VNd&gaa<Oo>fBA5N;LnWi1cJK`o|RhWCh9s5%Rjw)ig6=0<i$Mey-!W
z>R9Cji1I@Yay1qFcG3?J>=r(cKd9l<e_qFWuvhfjGr@Bf#iOm6t{D625dwNgKOEOp
zEXeqZq=zcyu1Vir8FH~bM#k}VP{en)N)8mVKmkpj2o&f20L%ul{h$-3H!ODZ-jlu`
zle<yn!SKNT5MYQXdqgONLbT9K7-AuGR!W6Jh0LN(#m48oHREeT(d6Yf)aBNy(n8HA
zt;?YTjkndxd{oLLj7Dc~FRCiBfZ0I8fGy0M%XHV9POCJ>G?25FJlXUh1KHs&PQ~?_
zOfiS9pF9=gM?mU>AmD3lORNqr4W<pcB~BVECltxW^TxM&R`<5jQLsnPL!6qi-YhSF
zqO#PD>%hC*(6VgQ$934z*E<^7VrMEx)`OXU3Uw7-umOHAn%28FLem+sFzV~~!m-6Y
zLk?GKCUaqS;7$J<IJ*kz^+N!7nglr!E&Y1}#4&cL)^jNWH<@*ox}>=m&7xhy{2PJS
z(Z#*c$^obZP%vGby9wc>-Aj`8Qv;*?zd7~@EJh2ppo2?K=6z4{#X(6D$Jl2{Y3gMT
zh`E|1+gWsiP>3<d{n2Z({vVGu*7?zvL%0Ik;owO%<{WdozmvzNNdGRXPa=>1E`jZ^
z!((ygaLOPz4DERp43et6>B192CrC6yePeHT3)m)J-;3ZD`0S?{5xG;?bR<#ok^-0_
zVbChWB9%?=O0t@dSwAgYAA#GzX7-!`zJ!mR02#66=%E;ICT#E;1l76{57F#2eKnT-
z<0%9P-GE2u3g%;mirWRCR*xxhTM~fENtGZzgv+F)O60z%aKeb~Eg@kSF>pvTjtG+8
zsmRmy>#YU)P0-*FwNgZi=Lru}(Xyr0w#S@u>JO%q$Lxnn*%N^|%KJU>fXi;rwGpI<
zF5xVe?@EREV)8vuE9)Z1HOAbONfNg`7m(y-?W$Qpqdkc1h~bg1m5p*B2OA?ZcJL7D
zjfZc{N1fTg;SBz{++;+9Cf?1W;(U=ZIxmZmxy=88Y_+HR-6m*!v@#juAvHi<%z}m@
z;DA0{dtEN<;BpFk_53A=AF}dJgGXUV6)phBBT%7RIDM+AhPOs@l44k5gR*zrfRMkr
zM-c1*+Iy;&{V3??8-2Lj$pv11>ljkaMq4oe8^xRctTar{jM<|s?gQ9Ee=fXeo8#|1
z=k06zPRERXsCJZYDuK60DWH@z!iGvB{-EBYMxNjP^G+(Vm*C42-~j^uQc;Gpa%4la
zvclhFtQMywmO^t%A&CvP6a~G7<fB$A2>_rPqS_IlvpfX`l-w<B38L*|V9y~(SIpjy
z(lz`VK#i_L=s+Fbi+Jc-W07d-)6+^IJ4tbcc6?bA@jI56mRtx#tWlXU1UO2;))vx6
zs|LQ`1i~-qz(gsJBH5(=i=0ZXRCPfZPaC!gKR$bJw_&2rWf2c$#~E_$9@4>c)*XVO
zKYF@O#*G$6nj7R>_6wvp9i~p)tawtZK)D2^>XpaK<dI;}w3R2_0SN?-S5z<3>gOGF
z{opgD`EJq%-S7BIXl+(m5-V72$NjcfP$HXpD~6!y>;F+pEnDa-W(VMNlQm`5*`M$p
zC4}?em2EHLX_x0g)BAZ5Eb}vqueew@LsD%I)pDB)-9zSdz4wx?c-y-0z7!Yl!XD4s
zYAC^$<^_<(;s=+YZtn8!XDVI^JaTZbY!$+c^EgDC9){6W3TCSsY!pp@Ne3DBCLB*W
z+{(^oBfOtF3<-+qzVW*&LIWL9Hddu~RBqP*$t{@^K(3p^XrsbV-yt%ibI%QCUr4#~
zqg0r{a<98t5NAHqsSMj>6*#^hzkf&_FyTHRYI?Q(^At&2?YaG48pWjAgP&fjZALe#
zLI=Y%CwYuzLAc8z_-=pcOw;R8eUP`*Q!`c$uk_iEI!b=u%K+=Z(1{hSQ)Cq{EKNPz
zfdzhv$c6?2jWR6kv%;Ns3erD|e=_IY{8Y+(O&g?k5XcAf@I?H$f#K6t^QT=rQh<$l
z`{Ug{w*g!!dTAuemXNE)x8K;#7F&SR0L;}2G4SzWq}L*&n2p>Xqxa4Sa^ok9n&ENc
z2b^`aUe_HyTl_c03oHXQ6egJ+VarGzhTkSy2+E2+!nh4Y$9|;~gjw0Ey<HA-&#Mi2
zX3(1Ekrt0L0)ngA9q^Jll9tgV>*byk*5)al977anX}-PAF+XsTD*e=4tIoK(yxJSL
zNqTX~76C{I^WV9mFxS_ft^<Fbuuj4F1t$^W2P}Jv^bbxmFTNyFRt%<^I(7+lv~(P(
z@gU=g@iY+keCUy11Wp?9pvFdf9zVEP&2dyk%0PeeRiu(%KR{kIzcEdqB2j8)Jad(^
zen{Ix=zSr>d!b&oU2@y8KK$;~C)n19tqP;D(U!$8-7P$87h*oWYDiS?7YUV|$Dx)H
zJtk`LOy+kr3x1-^;C_MEW^jhYsVd;5&S&n@Zhg~!E2*2x(s!K5H+^eM>u1ckhcTod
z6g_KqOR9$sY5#wFzBCdmt}#f7Oh4i_EJet)3oU^yO**LNqF=#^x)@<^M)ewXf7xPa
zc+XmkZ0g|k0a2#A9`9{cd|1)eTV{)1>8}3C5BV(Mr%eb<*s64#_>t<~x)Shdsu1d_
zpzEwiu7ek>PtjOAQw5lVui}Gjl6pw|P;5D~CnoIl;-VX(GGT`i(?$*K=R>4qc?ifr
zx*D?b>ey*|7}+UaS6u(UTaxjog0(m+kziMYtQD>a)R^<v1;Yi!Xw;xbNQ|07+CL$)
zmad}M;<tgnRcT!P4r8=z8&s=FxH7%!2AUw?ONj$Ro0+bpKtw?@S4CQ4wl@qu6Yt?o
zW^k!c$Mhs`#lt>b5|8;Bnedhw#)h1>N%OibL4uJi-<)U{!jqn+v<P_%s3!dpM37GT
z%cD25YQd)A(`5>V8(?M{t$kW6o-c0lL^G0s8{nXFC;8{oXNmV|fhC4gKyzn4TTzT*
zyGJ6kyS_TJEeakI`?bLGD<Gr@X0UB;3N{YZ`Fjaazh54#`KS9E@5`NV7tkJD%@U8y
z2r+{~1%*s0BD)OHJvIHZ=F%^o{^HP@T_N6KTIT962LNKSz@3Y58@M5y#E|od$BT?E
z9M>|oeH2vp0#81}7!=YJ{M!(p>ocg1=QWZ*aT%6d!e9hAgrGF|+8fXK5%083P+mK9
z=1%cK&qxjs+V-xsYS+LCGI{3)%zKOGM@P(Z0OtJVFm#~=iK1yTI(l~ET<aZ;+9qf$
z=lRwe<7zX3g9U~OIn$I`#C23&^;9hCS)iu*4xi$0NBDKD8=R)RRUJe)<JW}(vQ5s3
zp-cyj6+Iu50JeScT{fSFA!6+mOB?mu5B`yh7Qxn{<s>lq?zfTSFee(_F57KYs{ccA
zSlefW!ET%Wf5dx}2-e8eLDnDO>7@EHg#8UIS1bD%R-)AvVpi0nSp|@WlPn$8B00N#
z0jChXtHS#<=0o^nj31|zUYs~<PZVCd;5eB*y6ITOnhmHI%#<I6JYQr^NV2CtFC{b1
zm1Y~GmWy=G-;Gp|Z^Kc~ynFJ1d_y<BowXBMmP}tWtHt5l+2aJ7@fdjHj!;k1k?pp4
zJtHc$>9=BN{Y8_7w*(yJ0e);`ZPH0nNAzea?h8?Y{f;^X!Dtr=9c;7uDH?NSp%92&
z6LzlYZWu;cUA|JW1O6&>*|HR^?(-IB{%Xmbb7K_U>MAxzwV9!W%%y&C1VXIbUSK2W
zbPb=7Bof4JJOzXHGXrt6n#lq;xL$cGJba1g`Hy_vd*G=Z(&G!QYJU+_G(f|;ls+-c
zUmsWEQ5V7GgXFV5xHvbKsXJU{+|mDNZNReKggax$7mP|F_T_Pk-qXHfqx*h6Ho+|}
z6kX$Gd<msSY`Tp~RA!sOcCJGVMfVT(h>A|~R9iGkCYc4F(e`qk$Xc9qhY_vgVVO!!
ziHJ$CGJWdE6W!2I?Bl@kuD9oqA?qeX9!+Xef@s}@gy}1~U?*5r9614Hccr9Eyfz(`
zKIHu#o<?r6L&a9b0I@weBaFM(U3;S@8WDL}*i{015!Fx8-hw6xUool%36Z3@B4(zk
z1$&(1qV=a)*zBjW%9+hz+={+csiz16J8vWN1boQ(#J(_ojt{wwW_5}FYHu^*xlJyY
z=hc_S=fuamHm8jx1&Iy`Ouu;2h$nM-a|I#{ME5WP$XDJU-CBU?HhRUD{l~oeXA&Z$
z51r!Y*xVUc%|6A}4<FdQ%!?{Kk5y?BDn4$hE`iaZ*AY@8wE*yLwfBz)z_%ul8(D6f
zq0~p_*44}>Lg?-BD;;09o1>r<%W@~NoYD<s3?mNf1(JM!|7)}L&^yhQ@i)9H2e>WI
zZQfw{Ww(qN8i)&5im1=ArIvfhm;~^_-6)z|z2ND!M4xUbF;FXULFPdynk$#}aUffr
z9=ll6)TiUm>JK57nX~g`?S`riORH=cg3i+ro@uYdD8mCG<BX!zK}85(MW-<<3QbzW
zIX=Xm<fWE2(eItp$mLI7U!ZeBSt%!e4-&7Y;5&&Y>he5)W+jT2l9f`Qe0cq~ij1kJ
zQ>+(zjkW4<Dpn^DFH;v3x3E&ny*vGW58Wy>p{V2Bg#+UQ-j`2p!`EO8!}Iop=_rmg
z0Pl}QG=e9gs3o++Lv{$3W^$2)ank4@GXa@t+t|RkVf`!n#^uhUpWCr0=@I=&Ud`Yt
zV)#l`sT?VRb1fjF*c0N$+S&V!@nc&k?My{eKsl-0+r=W&shmv4b;|LLz(!Ue2j5ih
zpi$S~fdr!XWJdO)tWX#wqY6T^z^w_eQ&PMB{11Ah9GJfL6L<0>Fs#d-bU0Dh-_FH<
zk}!v5h3mf!=!{zpr$L$pJZVy9#CvM$|NLHNb7A7PGU{Y)_b-7JkaI1Pby8A*GujS?
zqd=aGuKzSfDt!z3<;AbY!DAC1+tz!m0FO%8;m^3wu_g^?3sFo|>OodR0Qw2jB8oLo
z*VI><qv=DkZs~nm2WfVJ{<@Pe0$3JVuZqv&BZ9r(%0|lK!=yV&br}3#Tg*ts(TQd&
zHJjtpm29y&U#eWUIFT8i43y+tr?@r4Lw%*dVy}s$o*xR1yL3As^v{8JPf_MapqCs4
zhQ~UqW!V9CmJNNV`Yms%Fs-nj!*6~|DtDiqtZ)J+8};LM8$(*Uw{IY~6lTgv#=rT<
zpVIl5YR}C+L$t+50yh2zmpOFs07|5hmb}Wl^v*5~`Z_4?0p43Z2<7crF6iW6EwIWG
z{hXOd(-ZSuWRHDJBpRiLwu(hQDEk|7Zfb#?pYNWs8Fg<iDq}j_lA|#5foWSB#Lo06
zSB#{;Sgy0SttV6=K`S;&cOxSvbnL3V#jTMTcah{}GRGfBMu4n{=dw!zJ1~w@l3Y((
zPpT65$Gg?Zi-ce@ZyT3rSd1SLv>nb~Z|yB#=5%C((y~)+0<t`^n95$-m~Z8<+iY7H
zKGN(X0+xy9#V7e{40L2u<j!>56LE0A4=90r<qls%7<7Yk9z6+O9|qhg&Qi?uEbne6
zL1m=mKj|&NJ;`R-H*xm43uP9=E1)t!M`)3rPh18T(|J=qWuM07rC8V-x_D_e<2`Xp
zNnEhBu4h9?js&{Bbh!a^10wGxtyu8c$62H!Eg;$sLAukd9ox-&s1ST?VpPioO-MP%
zC=Mr^uZA$o(hRF8sRR<*V!SV*u70&<GRt%34nzN<BJ(JN`;HXj5+rIepp{nT;KUDF
z2zbs}!Ws_X0U<-mB{t<$Y!5+@*OR@s_V?#Lqk%wJzGcpG>P87WZ!_~h`!CekSZI?!
zOyAO!--%2z+I8M)PuaBO?J4zXiJ6KW;O^YMQ@`5KU<aZpV)!Yx8^<PLk+IEhW^aCk
zzewO4zLpUEMi%{=C@O$W;X`$|6^WJh2|)36j*SSlrSCIV3GvnOhsOjrdd7Eul+31+
zk)54N9{3yAM(@!O`g-6D7l8XOJOVKMytaP)AyZmj@`PY0@(|XMBzSCS$uagx|C={@
z!8|OP@0Ad6{cSyknIPk<P<_lMLT-K<c$SWJ*LI9q-S58k;^volo0OU^*y}&NDkiY8
zQ#13Ny2JF2ZsaaZkp<Ia4u6Pa3NN<Lg@mNzxvUVTsV;I_Ogl1q$PiTfa|H)FAB}iq
z7-j5X{DLL@#Af$Y5;&D71m^NjzF|hvYv-(E-HChn!G)LYz=L(X^FG8{wymy55Y|K3
z5pnvG18X)#s>&5fj~FGen=TlORJDo5c<QA(Kx3B4sWy8O(z(h8FTJmF50mEzf)yL<
zREi*?bT5lu*6_p0Y86fSXYjYj?gQCV-$>BZi0#fMQm<Y@OO}9uRJ8^t?CP2Is4A>R
zU0q7uiD_-*X53-B*PSxW^;3dgekh?P+Rq#5B}@c6<aMhDj^45mG5je7$;qxE-i{Z(
zv;oj*ZB=fsF=wxX6^r?L5?TV24qmnGW$;{+X+Adxej*J|Z34LqOHS<DHZ>A1#n_P#
zhK_LiQL^i;i$@cI>HerMtu791qh-wQ%cBN3tj36-tLdI;c#y(gd(hD)E-A}Y)@EiV
zd3n5xv#LaNIW;K+@s$k0lID$VvCuGgWov3$jQXY9>idiZ5xa?DFU&{K+p67;rVj1R
zvMOPaDUo_f<GfsBK>;I&Pu_%Ggp^cOAGY*%fR|Tna<L+NTlrod0TQb+`dTgM4m8xg
zTS2ZDhFpfG>T1&wSQSrwPGTkF>S%SnJTP=P{vy@lJVU6X)-F&wy_mf5T$8hEygJ~S
zIQXzTUk)oLjTqMwx5<m0{ctG|uDC=U5hv;e&8HkIry~-U58E0w{Cc**XHDaT!^$#J
zRqSu88_DleeJGu(0?XE~<#Qe2SdT;srYQkD4|3^P_SIb7QMGG{HG#9nKcRbkJmU<{
zi06VQ%nss(1EA1&H^jo_>`sxwep5QoeDEQ0QP-^%wus2JY{W*bS^9IA#Dw#s;wTF3
zn8ewGY#`?2Y-W<WF243HZzE{eAw($iU*fj6aZ_P*=^{%#^VYq1MW@&jEeAI{s!c>|
z*}6IsfL`JK*w{~z!8cZ2OKx%uA;n$CR^}@wR~C0W=}VTba#W=_91uM+RePvxn$bNo
zoXv`?3xx<S1&+M9D5bPs7W^Ni**15V`HH?T=JXspxrsM2Aba($edtKIPxfNXPDz?y
zR1W!j*sf^xK`mG*$nQ7N-}!NVx3K%keM*%5-DG{uMhVE~#AuJu9tHP^&AEOW-!tMH
zM3BL~WsBZ}Rc_>P^Qma67GaHS!7c)4`0me4w*GEDhNC~Kl;8Q^4cjK^ge*;$N{M<c
zjm3Uh*X!VnY8Xf20UV6CmEVZKiH2m|NYv59hnF6*JbL`a%D~XYJJlzYy?F3bTzVh<
z(Y&VdX;9+SC`oT}+=ND~46g4Og@Fj%A;DZHs@%nb_hhbmHXQ=mfbK$aY@bx`$eFeP
zdTe4E7UF(3GW}fuGaX6)sbTvQ2Abp(xYyeg+B@@y#KlB=>ViL^F2+9|ct{KFBA8PS
z1<>AaCoE1;7iXCF`>)?w6T-m(Rl<}6O(`E95Tx_5=&PVP9IfFSnDFwoF*crjb*!Y*
zr*L^J+o|NP_28_`o>bT9G}9k>>ak&&R;YSb7atW7?OMOX>$rm^k#dH<amHF=)M&7|
z^qwFV9Qwy_F`fAJOvdLCh~lrqfe#!f*D58-fD{?8qn5)4sRx&TH1JAimd>+ZGCor=
z&-1O^;&W4wvauIFbpg_;q3GUFuYSW4l$x_t_s2#dq`pu^@tw5xKPWj(&9^^}2%4iS
zaH8(I)ab-#<L6-I_?f_U;Ej`i>7WW0s0T>ZVHx;%{9D5%rY7ABl}L%w!?@nlj9B6|
zK$;JSs4;HLn^@QiFX_E-ms#on=f%%-%LQpcaKpPLmcfWOuqr}Hg;E%PbYH7d9R@_$
z1If|vDjKCY%4K#&^Eg7jHjX6>_{;}j@5O9C)9O*T#tHzCR;-C$#W+!J@88R)LEdj6
z?5$o+R;$oTOi9d>%ZpVpIxacTpg*<z@{$!7Sh43k5qe}J@&hNjL6nvsR0>ey?}H1O
zqh@`I^2dxez&l%J{|*ZcA|m;qZvQq9l>L0|(`l?MSEVd520{ZeB%-N%UlC^=_bqF_
z<Rm^RP_$evTHEW2;^wP__jJa%+c}^elU3)anp!}g=6T9|sWyn^MiL=Odhx-l6k~^f
zb@0vb`bh;|2{@8Sb&&i>8ney#Eb#~o<tKao?k`Row|{|cTgS*BD)s~;pi95E`JrFi
zVEuH6x@ex{ybo9K7Mj@A034So!M=IdzKO5^X%=4HOYAZqHao&(kF^k8RSR=0y>csl
z6OC!)d9~!*1itptduBv9AsxW}Ebsl12(TbL3;Ci)l-vSQPt;cc!W03oO<%uzM|vao
zO-{|ba<d1(V!+>_ZHcSW+{ecchplp6`HKQ^`P_gNb4(|rlnG7Pg8E_Ox`r-5an1TW
zq9PXhlPhvZI!-twyVI?sok82&N$Er3ra2Y$NPiMVyZ_!sPq#s6DGES`#iS7NpOt*L
zUu?d(vmU>gMlnZXUQ^}8{bEk;u`jrBjoS_o!Z642y6L3`kUw<-*K~{U*qi3mCPu^>
zFL*(;o?C^&@}9=7HD%R9G4Ys-RFDa8ax?gfJtV>-lP2wxIiEO{`2F0uVia0=h*I7-
zv9Tl`vD;5Me-wBMcgqv!_a2!P>vcz9^zTKc|JxhP6F_3Nk%;}8y)oMk82Eo++3hku
zKt_g4J-eAnl|@=Y^Vkg@<62gH4@fIzPlS3LswLPjB3LNJYpve2Ez3c<4h=jA9OnrE
zM^W)ptVk>Hys{(Js<9PW-xJgRsPS(HW5&BkWcxNgv^dzkn^PNC)$1uR1ewGnC|$D>
z6j>hp3Q74}Q@$b$s>9X1+@%}_;Y|{lU(bg<XHM@b_;$d~{~qgggY+t03pu0+c1FF$
zktlWN(Bef8j0%O^Z~9f+juwhuj#PxX;Q~Q*sz3Q%9jLcA)*PCaIhwUNt)gr~s3u5k
z^93|Le<D<<a`Y9kYChPT<jR)>$pi_ZBukG894p=nK7e!VY6MwP<Lh*8LCI0_su^Ar
zKia;C>BH<*H`opi6bx8k7_VCG4P-3cQ-tcpzeoPo3**}C@s$BnGu3Gh-fGBj<fhg4
zjlABZyp^}FhtMmu^T;e{e=;Ti{2yIRkb<mDZdMovskN>5^+ScT`0EkrHH*-W{hk+Y
zxapvkBkF|251FNvM>D}#z!;Ta*BG6-`&XJrriMeHL&8{vT2M+CRDR_ht!pJ&@=vE?
zN8dLV-Gd1ZY{MCEh(i2Hb8Xx$62vd_P=huuFt^*3==<MmP1(S}Q$dF5vU4&r9SS|x
zv0IzOCa`PDB|lhxICP)A4W5PCv^~JR6c&T6Z<m9_3;C9Cw*Zv7E8^4f=*kJ;!+Jvq
zcN{=t>^E7f$8{+@XxtOD^_#NSR$D2CmI?Ul$BgASN3hueQWduxg$BuyGENe;Qd8j6
z^l64q6M3Vso=467I3%;J`;FoiCwPwc2}}^nA40=fD7kNUNz;kjM|#%D&!-rim1v>Q
zIr9XeM;+`bBB=N|A96&5Lp?sS29{-c{e6|6__A-Wz0p+oN5EI}y{}oNzCfuhv%Fu3
zEBfp$MHnxw(^o`@dVx9OHm??>G|l?K&mw9~aYW{flu6;q`a=hN4kT6;sXDS;sDR<!
z0WCzp?EfS?Cn~W82=W$!Z{=n*vCJZQkQUZ?m5t}phhLoc>6@#B*8Dyt^?hxu`<ATq
z-41~*V8=F4t|_iwjy6TC1!D!1D-u6y8=aL3KbpK1sodMEL}p#2Z4^^6?dU-Rp*gD(
zH+BN&ii@Oz)^EguIG)kOQF{;n58YyZKoj2cl1>~k1W#3Au<n-KoQ?7+U67oANKI+Z
zU~;KtgB7Ox65#*UfCi(6o+aS^0K(5q&d-Dn`-ry$2)su%%}XP7&@k5OMKfx8c^Rgu
zKBJ1XEe#wI@$IHatZPBrVXrP@OTTFLfsPP78cA5cB$}wapk{x6gEMCaMx$Rn7<XYH
zFsLwyG%e4;%8huk`N!5v)dCAJqxETFgjxlbi)sH6zwQ3wz??AY`?qua$VTCrIMg}$
z;P{4QS&redJe%iWQ&6FwPSB#ZH#07llYI~6QM`;<RA1?NSfwbs6`m8o3`P&k#R?3^
z0*w5)DzKf{!;)qF4}m&?ikpSVWofcE55u|Fln{(z#$9O%piaEC&u|UK&yLwpOB$T&
z2O8K2m_SXw;paM!d%Mb6cqyXsVU8KkBbCZ=Cm4v91_U{~p+cL3t+3RpkK?56iBabp
z3)E4qCZpTa5ywc&9Mf?e=AUEMWOWy^*4CNu>>GVtQesin*4;>l(kym0w^@iTPrU-T
z0kKa@T3ae9izW6)m4nQ;b{diy!KqI@^cJ{SpF)URMkq?f1FNz>YOy0K4Id(AWc@1P
z{HAqtVS&Q?L)ISsp|!+0S%8_DN*I!O=u{%x!5Gq)B#BURV(2-Ir+fuNO#v$`9GC7{
zg6i1^w-&ab#&7_4IWG=XWxzVZS~`9Is$OcQzQydjZnd8iTp$=@WcSE`0r@WHRc7C@
zm=e`g;@ES<^%n#y>fpfumkN5eitxwz0X3sIx-#r&)L6Q%OXMn4CgMK7IHeta#A+l$
zUtn7#{UJu=8ae^rWf)_tTQ{92O`$Rl|1DpcdNc81--3I8z^1e`I}uO`Unbi*h0Ea5
zHx9ms=9|n)n4L5yO=MI&07F2$ze_@pV0!p#1AsR4U>Az@Zus=qjzdaDFxsJ+dDzz^
zckB6B$pcE*nk=fVIro*|n$0+oqf}Cd%qUlLU*>f}hoFut=ZZ}`wJLpX^Xa`osAJw+
zzV}HFKEYN%(EYJw`T@Xdv5>vxgVECq%zx~&M4C-K@~hIz+$`BLgn^o+eZO0rW8+l@
zE+`zA{V2@+(ok2RHuA)ebAE$eDGXnCB-Ae!YXd`4nCYg1O=OIuG+|m#TynP6&znFE
z2gEFU$}Jj`!p+&Z=TJ}f0@j;0D=aj`1?Zj=P21)5LwWK8XZU>W(Hp4(XWltAJEV+{
z_^w<I9DrKaJk<dX{AX)Z%y=;sNs(|4NW8`GnY5|Z)2_Kj#Hb<po-b?;?5(P8Z<js$
zXL0nyo43&O`_xt*P4JcANk(tU$zL}G*7kuW4vGZAz@n|qrH&J)HBCXh;$Wh(13kF2
zn!|wVQ8~5X6Ox>#)85+TY3Q+G>$Y1!O5CrzfQ|74+*^Kq%{bwy&<VW{JKe~e0EvN$
zUa-*<wsl4tJ4jAz8=mWU)==tbwM`e^UV|)-TYb8?GxYM8pG@5{6Z9?C^WQ6W*L(4f
zz^$jAwT%z}L%;BZs>^#`JUn}~3zci*A^LT}{=r{)<%sS9(JPjKfiJtnjzn4ucF~0>
z)L+<t%SBe~lUXwnV17#yHRxU`jte_$%|lZgcZyVP@No%a)WRPDHv<C0t8m$*5xuXj
zRE~^-VzU@JonGjC9@u7}V@o?@PV*A-H8aoXqR#`u7P@eE`KCy&Ht+J_XqU(TD!Hds
z6iAFDT{BN-$MmZLLD(a#oB`N!V=MAQ&&d#ix`JwQ2+93y{kRLy%59Xx<^1aq0nCpD
z?qcY8Mi26*+&&2W8P5!dhhZG;jgFA?uLHts(9XRrf>|z<Km+cf$F?a%*nLm|QDYv7
zTTTXeC}`g?8!;3+tolZ#(|V}kRHGO|chb=j;(U`vFQI-|IS+-%M??7SKJn$@yTrr%
zL-|tXHNf(Vt#dJ%mruzxjmZJH8(|~vf*h%sqQJd}cx^>&-|voF-fk7Ae>+{v49swU
zlFK&&GIpvA{)NHr@y}DA<3k0Uqm<7c#QA75;5RK@NOdSRF>bYw^Uco?P~<CY@NsBr
zo5dy~RqnInw{L2CdqGnjlm0<O&lR+oarIb-z=3Wh5oAT!IFE%x&ur~fWqN>0*?6A%
z#}yDhVGk<S4hWJz{T?|DnuYn7;G)EL_Rmne(APGz^dyMadDf0ac*=G`v|rTFXA*V%
z9B)=Nu+8neW)D%Q8C~9djW}8|ZyA3ZX>-B~fS!cOWcekFvt>t!H>b1R)Gq_NzE>=L
zs235J3|I{i_#D3P>}4IDnW~)KcEGu1Ryv2XPhG0;zB8uPXh&ka@J~iZFjyPeFdN6h
zQLSi$;Ku3LixeK!mmTX{>Rxev+BQvDF(fv8K}o_B!cKy9{~fGvqZX^uU)F_9UrdvE
zB}oQzxt0J4N6wXqO^nUMm;`Q^-LX8hswPKek(AL(-CGAiEjxW&V%wjnYG390m>xMb
z`;0Qvy|ti<;L^=?+CRObbrl#1IK5+(62pFk_o+Y7*!D~{yePb%2B~YGRk|B)=Y{gE
z6_gId2Rf}u+n>Gn7A2|_GAKCX<WW*wi}MZ7ZOI7(gV9lOxbsG4Kq9nAcEY0}L@6_!
z3wDwYKg1S&2MUhPbh{I@UG!WD!uYD5%&^1^`eZN*oG2j_eC$QuY#=X>vy8L{PXl#6
zaOe-W2^ODKHO!Xi5?1aX_<j+h+pMrky2WuJ&>#bfwk-E|CI=X_2$CBd-_d3@NrZoO
z*1~^M5@#u})d;uVF<FS+D&q__pSsUA!A>ktdDu#pE7<QfK#vZZdQ?I4;V6?Z!~@O}
z5vy9&O<oes>^MFQf~;EB1e9%wMB&5p3B{x86&LtE;C<VH<}l3BcIr|N&~h8Dd8r-0
z@Px{((H8gsOw(=J^NxYDcK0$eQmMb2`@VqAAO7B7o(Dv$D#;J0%wwt+$TJ8+;PB*#
zFSDA2i;~a?9adcd3<Kf)LBmx$W1+kr&?2_y{%!7hU%fZAD~!Hfo<7F+zQ=(7JTe-3
z)cw&hpBh^S-z#Yrms1>^7aTl7YDcq(s(|-tUlSGgGapS2{wvpJ=~^{SdRdiR^Xk<z
z<W5;M8`q~PO>0n<gE|8y!}Wj#^So*cZL{@wK8P_k%nq!;Gv9U}152+|%e!GHx>T8Q
z_$3-pF(Q#qGE(gSyC=P|JZ%awoAp#`VYI*#0tLv!nC@klr7V&P)Im&X%<`Kw_0GV<
z5Vmydkf~;P^Wt&qa*KVq^DS7+g`jFlb3taNm%ZJ@f%agiD0Y8>yyFUOvXen>h11X{
z7c9f^AW|P7ORuV8Dg7rW7FbHKd%k9USK2i4KkSGVP<I%(bd1NG$GiXCK2PDbA)L<c
zuf_@LbK4tcNdLW8c@$_F(IFV4FOzo*krz4(Tt~Lu(29L=27*#b=ja66sPs#_`LH<u
zvfW-()eWzLfB2@m(T$=Jo5`1wwZcKH5Pn;FqReeVqQVZp%g5Y#tYF7=S5U$k%z<~^
z1RD-)^Lf2~pU9QOL;9?#J-K<LZtiWcO8A?u#LTwV2GSMcK7>+xH8uXor)$YUmkt*8
z<1F{@EQ*olGnqI*k)Di>wE_Q$-ZufjIUN;|OgDG5ZTP<K#G9{TOSNd@)y-=72veF;
z5BC>!re1ut!5!GMWm?ksV9PQK%23W6L7m1QQ-T=7j}Iak0RwSnD&Xe=6X%e<itd?f
zX+B!IW7q%h+)hU}{DcQJl2Z5kkN5XR!`E7BHEo6?zr>fud*P{hgS(Gw2r7yTP6Jy5
z@Sw)&i^gr6aRo)qWBg{Qbv>&L1=~hMp!NFYmGLPBtIF^nKI1cwKcM-BMdq8JM>kEw
zKJ}8zLax!gDBOdQPOKgF4-D>k7m1m=sA5upP1kCJrW<f*7w1iIP9JR1yG9lWx7<p`
zjX3pRPg>5a>B$;e@$>aL!|wGX2&t8oEfs=zV33{Kg%H<5LPGY^(I^AjuEFA(CB8kM
z8H&>2>t{PpCvvGK7Qi!SCV5Gm%urKkIS!Hge$l<qqBpytbc14>=c7BZTN-_DH4z2T
z;-0wEvO8BP<%i;2o7<Nr7=nfM3{=*FyKuqB#6`GfB+sMC<_mF}2d1$VqjrA{2Pgx-
zZlN$RD*+RwD)6=lIP|F+<#~zQajdFX<fSHa16&Q^EtEDkEy}Y@HMUV@jwNU%MJ?j+
z1zZZcFioZ6=0ofH;YH&*J3I)Fd^tbH#Tt%c(ZI;vyfTi>tb|#mZJJj<2v1=32#zQF
zrxo%SX>xfppCAjL_aF@Cj%{zv;6?~6pQV#Vjs(9d-86Jg<Zsxfy){TnlpPVYlO;LE
zW9Ru7W=zn`!PZEPeICZ#f~DfHH-uSDB*K0x0lsio;C5sy9`!rD5r;;&wmG+8;nZw|
z7MDyxI3pP+E3f<(g@u%Llvx#L`3pE%Gn_!Gv>a^*xZm{U6g3`dM%;^U)jd|pboTER
zyG(ap*%%%e1E2*lSQ@gDkI=LdRHnI3S?x6=E|xLEKe@a)`q?xkjV;{AntTW1d<j#w
zh~yJjk5%-+IH~Y*pu>Cg!-XF;K623(#$>AlB~NJY7RwOqo5mMWK5d$n?hTTAapUAG
zb~{F8s`X)j9UyvBy25T0!FqvJ8LWssW6`)*&f;FE@i7vOC*4-;XJ;hjssfFPb59_m
z0fV8~EYy{b9z>vs<guLX;d$bRCgXGMJ3FhgjC=T1h=d&ZqJHExrX$1Xlot|PUDHd=
zzH{Z=wv2N@H>$&Hx=9x|hAhXt`aU#^B?Q7;>heh_+n=eQw>d7AA2HcpA6b$219_R)
zu7H56ufdV_tBzk&*6R1zVCbzBGPI83J2kez%NIE7d{d%|82vf|7g~mj$J*y@-m5F3
zL0nzE2r4Xm-w>E0j>>k`txh})c(FtI|J5okh3uUEkq)DA1FxadF1m2dM_NW2{xjj{
ztC0`_+%H#OE`gS;uz~G$Q|?!I(kC!qrqPB}Gz#hj#J9u)54PI!ZN1BRtYdG)jSZdv
ze|RTtG&@)pt2@m0wxHMYil~<r%(?PmdhWqbu!|VC^1vavz&#6y!KcTVq*z%8a_*7X
zx%7lhI=03x^-OTAUQL)J%h1grEu$|+_r(fmVd0%qCL=zmmLkf;r$iDpJ28frt6h3B
zU!^)m2wC_}!9y-GT?;0I6TZa?-p<R~?n{Tnya1X#P?3y_1y-1W2-;LbgTTf2v{hYx
zfP;bo3D}7n+@NQGf-QBpyp?r0VOOuv>@%N*|KQRZOB^4M50c_-*5ifSo1@Wax$GoD
zN7bKD_>-}Q)!qo%gcUyNM)H0m#>7EH4xAH;l97=nd%62QK~|PF-Vo!*?}g8oKhjv_
zJ?FGVt+oF<2QOpbY*d%wtxM5WVkr@&<kDU=8HX4~u=@wk2V|i1P=yV;mZ@8rFzL=$
zL67ptJnkI|8`hh`ZXHU^6%Dk0v&aZk1$T$l#3UTZVvVW=h}`x9xhj@32lAjBeKX(I
zTWx|&jqw^8ZY-_n=cr}9acJEt0G(cX{E8X|BP9EYmYdH1&~07JE(N-R5*(1!P+ELL
z`n3@T6phm<WMd;|!{65cFr}rOt9@8=MCyS6z-HNjB8dIKH+$f~+%UpsVoFzqaHgi3
z5xK`H49ds#$<Sm}Cuy8ui@k1#cZa+TTAgNc0p}+i0K&;Z`S!^?j@Q_sys~kxuhYac
z%1*Jo@mj(e5zs9d-Chj-nw&SBJLbl#^b<+{XHr_P)cd^SKVZ9=gFVx+m<Qah(+}9_
zTMu;Yr7^IUr%~AiwMI-ZKV1BMSke~UIN0CE#0Ko<{0%9et3HzGp3RPgrEcNX9Cj7{
zOvK(W$tVzJ!)(o}>NIW8UI0BQu&gBg=2;yqtD&TO>$dr)U`S6~V+18IFnIo~pnJJ5
zf_TGQ%xe>4<<oxIPD=a)Og~T+tdEMl4wK5Z6O({q9-H}9G;MwGQNvKZsAF8n1r<}I
zai?OrbfbM0_Q6f=>}cJ@Aaz~|$~)Roz9rwYNWkaGDdytq0tY^7R4*M?Jo`i%XiVfc
zB)2P`S02hXtT!ljMl#I`X5z@017D0QjM4d_2>SuF`&drkPT3ex4lI^Yl~L_q`xb)5
zl)?j(N$g39Uh2W+@}ZFxnb+q~1699UHD=W!MY>WgZaIkxbK=UTycKAm)*4%q3oY5P
zAqG;sqbcxTn&DP5d-=5UeYeev_OCqhI29Q{3ITt;rORFk3C;GU)kQwMsPT?c)0}5`
zeZB(>rI)NZRUot27DS@p($_cW=_<S&g%g0OqU0NL?WJQNYta_1<PWJqf+;gJY&h(`
zP0J*ec(}{?XnImZd(ksT*2XKJrxMUo6M_gMg(x4N6p`0-X|R=akX*CU0<0?#@MfTy
zNVQ<pZK4ch-$jNe&0`O@{P>h{8)B7@kT-fTI;;$l^1jH(PN|ozWXdWAM}b@#?OAV+
zU(cJu3dofzg3Os<s5vV856Q0eYBai*PZVes?YvLp+De4iX`E?u#x?e*47X?LN${2S
zwR;BMe4|?~<_zyxXkiL+NBne#v?8PK6abeH2IfRYy)xK`hKvc;_*~II{0hI9=F-kl
z?I3;6$(dpu05E!GOZguPo@jxhu;c8fb!kn<%u~b?5|GuLTej+qzt3Qt{Aw6|$}jm{
z7>VX6Q_g`iU%Vr{hKN*4Z><&H!@X04jjAh?4gXUdTA4$behl$L#k=i^OHm19QK#+0
zP+9G?-T*k6eVl^p{EjyRPhy}MoJiFlsb8E4M43BlNj*(jcef(IRrs2hHnK1tg5iVz
zo!abULss4hVN*3<MvaKdQp5SlNRZA{gCltm)qy-g*Wt8w@+8oL%WPli{qfi+lGb!2
z)Jyir&3J&Y$PrahHaQ`_Q4h=%o4<r9sQa5N2pK=m255g6PKO0vnUO$P5^nj0G8$9V
z5ZDPQfF78bFQ|@=8|v_Lp|5N^(Weez^9CCRv|?yf(5jp+H0u(0;xT)uNXsy}vWSqJ
zV0G>~XKOOw7t*z=6GTE^_d*mb`}l@|IhoQJ<4uJv;_|oj<dFswTFzutgVRY0a?|J~
z0D9eeP-=-*@WJg(=IC+d`V0H$T#v-zJ9k8PC*{W59tBW5k*H#d#*gISH`2m4RXH3f
z+2g{VB?|%K`!;`DqZw7GQ{b6KX&d@31##V7qCPS{0m*+GeVgr8gz@@I7~rWdRW+Ax
zVk{rDAH55V`8ui+mlevGMi~a2p8~<j;0e`-0!IPd{=>w823)Gw!_?ANTk10QN>J3x
zkYS{CjB0Wqed82(Q$9;u8;O(opi4iF2`^{s3Xw|DzP`n327v{6VaPKKpvquJW3OBE
zrCPQNTgOBNPjfr#dJgsb`qrs^;3m>5pj`AB2m!349=|)_mFNU_rG0`$!M+4hgxw6!
z-WS98370Nd{lC8j9u;w8%;a6e>QS!b?adPAKUFRJxc`)B`0@j)oji8xBh}yi^S1K=
zxz~=l0RlIyxcDHn;x0jtXId$rXbixNdpIjUORs6pQ+ETY{Yv!QdS%gyk%YvWbxTg?
zMa0J7_nv-0h$;O#VtNHv&O4PvE9IjI?a4mE#6;7I;_>}0hXKmIY?wMIp+qI<0Cq>q
zCpeB(`d^tq4|%I+#gcg9PYIf(W<PT{^k20Dz>s77JT?l)$daBBmw^`UU<(0kx?x|y
zl9`V7L~WC~8pi&X8SE6K5xf&C>H`C;hAyi?SF2%6Q=-KKrSDZxr~Je*h^q__Tk$4m
zDtcHDY_YH84-m046HId}STvD{kr4HLasw!du}$7kO?VZO1-zh0uH}xiRQ;ULDtlpJ
zOl(;+m-Za^+g0gmFrZXz3ZR~@9N`{(#~V$FmT0_H8ga5xD!q(0tajZ{%!Jop+z_@_
zpM?_j#eak0Weenmr6OC2dOR{<VSC9xR}lD<oKMLw1*%A>%4y(@!Q!yZbYEBISJTHL
zVsYZ<QIt{D6{T2u>`M4J6Mz#Ycc%8%Zpk;ZOT$ZerzZ}j$K+ihA2pzdxG{pKDe9{%
z_kyI(xzw#hIK&<)Q;i1FoWfe*dsi_z^g@9FqeBte9%kQj;deVUc0MDqFo*e}T*~&(
zYpCwQ9b?_*ud%*RMqdB&M;>G&^YX&B&=Z=DI0*!@z&-^C2k%YrXk1#APB+?`C~F_R
zYiCdJY<#=d<jlUen`A<5t+9c3;ZPH4y{kb{?oSIaQZw0naW|A%%{bHshv>Zda`MQ%
z{DIXrOqCsDGGHSZL|+;gmGG@`V`0ANk|viF95<X=pxK-ntNPh|0jmPV)V3yMpwHO7
z_VOHz@QM1veZ<p_(G8sZI{*`&0l3XVfL{0ZDw9O;ajUfA<;kq8^@&Y$z$J=5WkwuJ
z)XEyP59D*colK+|G;WaN3OHc4OMp5_C#Zz0^e3A(jW^rXi_&Np2sDZ(?!6RE?9e^z
zTs}Ji58tx)E3aipnFfvVumU@N$)uF}y3a1Xk|kCMAbBQ9deuO~MhXPC+Nri*3jM-{
zXTUA-0C#uTY^?8XZ7E!kah~}TnVcs47QQ%eP*X`vk(YtSyrx<(!s4)SvL-0MtpT9F
zOyU-4_SAk4dPevei;V*0WCQS#`Ra|P`lrd`xf6c4KECGXOi6AJ7yp-;3Vkl_O;xde
z9f5@TfdJEp9`gbKs~tAU1ij|dCAQZRNC`rLz9bHi{u%qC*u=WXu&VfI<lX{A>S>_#
zo{T&dE7?iZ2?kO+U<fj+!Q<xaG+v_<f7Z-)!rX+zj!s08g0F@)B2~jA9r15-etoJG
zU)Wz8ET#q1FZWq<m4L@yy#rXPQ(^zzxVKW9G&Ti$kW{X34b$NKsII4XSiGD?4Wn5J
zsfXWQqukJs_vgL!6{W6^+_3dl2i^;*DI2qq>Tg3QxryLX4ep)e@{h!go<Yic1z;CT
zST0m?l;^%HO|0fpvD*E>vx4YCee<)haNE~qqW`3B#CuSdQ5joDeofe54x8z^X@e%W
zK?m8h9~fo79<<T`P*j7zhlIq+ji|j&u4YNz#bf4oqVYts^Y|b9{`37Cn=xF$Q55q}
z{c)g@Ai1P-MwQ4d=EO=T?rt;{u4iVi3n3e6pVH0?#kB4Y{*gUA`k|+(b*%!<JEZ#g
zzhgkP9LR%<50qs?-HQ*>)kT|3x!L+=jzWcPaDCxP%5w&vT`B&*5&;Zqqb|0M7};SC
zr|L2oZz2>;{%4le<3rS<e+5+ORYW0FOABY^E-UXXRd?;!`~lwser+SW?nSjz+30}z
ze}>Xk*%y%!bpH<88R)94={4A@RCyQK`ZJ=UBGWSI`B${tl4SB9D9WxG8B(-qMjN$;
zK6kP3M+*67k;i5k<tmr1JY^=v+TTLm&F3b+MwwViV!V2(f>WD%TIR5)LbIXTS|OB0
zbD(g>#@fbo?_O;fR4-)kQiBQPLOyV1c;qdvjQ38KM`(TrlVJ`ck5&F=U&Bj7M=*<V
zUra*hEK8GD#m^6zyLphVhTI_yQ;IZu*rx8Da)M+=M@H+EW!HmmY>{T<R}g@8%xup~
z;-s0h9xJJc2#G~rGgz`}NbZ2;kVW&Y@W&{H5jb+=&VoRvivu!lG(Q&Vk#>KI2*l|%
zj)+`Y$I$U|B(_U=Wh62AWr2)=#Y{xp0%rr>R`ZR|YsmfGn#m*XxA99BV~)Svbj~j2
zMV$EJs78z@G#X!eNz^=_EczG%u{0MqC_i2S`q69}Z8Dqu_Ucd2O?!rMl_I|rG9&kt
zg_&}<@RGWR*?;LErXp;Nr=p=bg8#3j(VcX4rTD+g;XFlF>_WcX-_c0E>`mkirKiHM
zIuCxMm*M~g^_g-`0oXAfWV(LiM=B;6a#pOvqOhPA>X>84c(?y*e3DrM*-`0cGeGwD
z*C&C<z6xyqck_o%ja0KFiGBa2l5P)>=8P#TS2;k?w<JowQJC63sce_hQiC`LHgV^A
z>CRR1%ZC~(1jD|rJPvMwpZbw<^58cEi~nRdWoveKVB#j<O(Z77WuT;CER9cT9N_9?
zr<}G`3UrY$XR6FV{q$1mOamh@CowYnJfnc|1{eepQ*q)r>$;_^V3pFBfTr?N;)2#s
zx8~wIasnNntn7SK6gd>YIM#boNtID0{6tNDp_Kf%W|kGcBI|1c`kfgoPcY68#H0R&
zk}gk9vVc6vVxMGvX!cN+jIlKgWG7whQ$1r4V_}dN@zZ6_WR+UZS%m5>`NefX?HCh~
z>_t5(>*zRSkr?rm@Dl92O@Rv5lMvwfxj4vY$>Ux_5cQz0!xlxbDiP+$He<D46sS$V
z6j3(mMu(HW?(y~KF&QznUF8}g!jPTENVrgYmf$Lk88WBF9F-l?-1c=_zrCiv^05-P
zTMd2h&Y7m2$TGunHkxM%20o{au;RvwNyzbUAE4W6^;=#?#I_PBHGLgD>qXIb(eaJB
zrSfXi0to%3z7n_fJN$M$zjaJf#k+ScMoR{NdRXEb_Jzi0$+C(7^N5HSTQMUEIE_G-
z<$ezEuY|L=9Zz<1+lWO82cJ|uWhY7U-Y`a^{hStLw(&2q@mJA$6-tj|R3|tWJ~8`T
zP1=c<z#XJAXm{}xm<e%JFDoNd%YM~Csbx0zpP@vWU4yvQd?)!YAMRv&vXX|}bU2D0
z3&dN~Smp#Ee)9v$I_%}Ze|DaA?A}+tRg?vdE;ql#`gJOeHz=GVge8omu$B;e{)=Jq
zT?YzT(KxOBB-o=TC*{c$CX66lgtjZ%br-gm`PZ4w&{C0l%Yj{r812@Cg@{CexXtX^
zmx#sh53B#pg6$-&*Y@Rlv^B45g+o<xr(oF9BYfSLkMuKoYsuFNq)@|>3O=bRLhnyP
zD-{H=jS?OO;T5pBjRQ&wkqWWbjZui~mEJh5m@i>1nL4=Y2Vs5Jsia7WpIc*j2qt>7
zKZ6j3X^e-SeCs<^9aVNB<Y@MH*>*)91%S7V7_{`(({ITlq|mgjVD&vwY&<cf)QLu7
zq4@AubO0o1YQtQ?lG{<pT@L^mm3d_Ol0TLgr5^ES*Y{>5z1+xX3W$ZVRphG0<ACbm
zJy#K1fhtz*$w0Z}TKl$wq*;9yhKX7rj}$_7p?u6#WV-C;CdJX~l8+gUs5^UgA8~(`
z<jJr+3d!-G%c^;VH|QT1O_?}ybG-MNZgSUnVru^PzP<xGZ#C^AD0~->^z=9b-;gYc
zDMs%ivv1N8$zzUj9j|-c)yCu+)X;<IL(3egf}7~&6~JXU17I?Um)>^yy2lq6Uylxm
zZx%0^w;V_mRECXFwOxE$XYtsvqOmAn<ekEOHacvpSb|C0vo%+&zkqR77MeVnE0f9D
zGmz3;kG6n=1S+agK5rfQ;S)aK*KEbeOW3Kk=){SJ!MWUvevl`HBJi>qh4anXQ0n^a
z)+IsF8+q%8s`*q<U{5GA)t2mFME13=Gz-y7eHJTmc`obY>4|7Q^nz19t&CS#pXm((
zs27{p_C{)_5n@@*50c>N9_L;)K-5$Q{?JaAPE^Q_&=mlsa*$19V&~)Ex8z_*M$!vt
zBVF)i861B%9qg7p8&?J55XQ%Wu|XaS3ut8_8NMkCtwov=B-y*^qrMXQHbEu`U{6av
zcm>w8t+feqrZ<~_19-ssA%l<&&tgv?Z`o!VyoPBw4fY<>@ROO>o%vDJyoj|ZF-2=l
zn{`7jiA3E@{jJtvXQ;N|sQxD04wUi+H(Hk~zB&5m4;6Jr>h>hQ+nbK?f!GxMh%Lr{
z`Q7fFBsp_^7^*R_av=Hx6ulX`E&73*-D>+Y=?>M#EcCWhq@v38nn>FMR-?x&uvlVk
zlh|yz;0#SXWXJcmsuv|(u-pkDK|QAqhL0D-$j3Z9MGeUj{?`4pWI6zazIYDj(GOEx
z9kG@1;?iH@Oo-$rq+06b-DciCZ=zaR5<@f|rdK>WN{-}Ja6=6g5DZa2<k-IM7g?>h
z;8>^A(T{wv6FiuG=sy}Xe?+i`T+KkK9)DJcVnBtVvt1^zaPH6M=LrKQ+C5Uc6WMAK
zfz!rI{yjQvf*^)&1y;l``Tj{I$F3c2egtg3qYPd6mCB}UIB68)?V&Rvg#vF{HI*{!
zNWWqt5Tw?Ws{Q5>I-~<8KVnuqUxUBSM*#YA{iW2(Zf-16>Ol<idvbY?ehaXOWd|AL
zkH(n=n+{udVP7{&eA=gBT{mq-7X%g+=vOnD_fS`P9v$msIDk!~${yD)QqHN2xG3?%
zISbC-xLEw}LQAx@J%p8_@j1W9i&zoXaB%jH%`znuk{Y3zf2zU2F?_uz_87UCnPv#C
z%r^qjQuuz|yX<A_LNmyyZCYEY<HzoRUP}DZA4>in2x6W?6x_IcE0))<64Jl?M#E|{
zj2&wgCHG9ERe2wB+l{=-seJnrtaTyN;0+7zu97>=<{d~7nP2b4q;-cxsXtwW0l7Lc
zhRATk3{uqM^R2LQm88IRx#l#FycjT6H#k``KmbZ3*;(Ho(YD64^9t}(pP9HF1^BAh
z!iZ2lpxHKSkUQ_#O3tu0jArcg(apnIT0^=r^L7>+UZ7woB!<T&%wbDvK8gI&ifg7d
z@4tQy4!-dco5Gqnh~_FH@hQ3S{dw6SXf}VVCKm{r3j4Cr0G)j>tjsIYT!r;KA+C6M
zD%G}M83uvp3@gnIlqLp|ust`*Vz`pZO<9(ZYdK&*$3x~@yw;5G?EzB~h(NcqIi0}A
zCd|O`$l%2zF-YsmcQ!^40sK4vM$oGfjJUFEkAM^_&c2?)XI(aRV!l@~Yx*FlJ#&nu
zlLF=`xXYbXr?wABh;GwAakij9j_8(V{RalcmU})qVdBbTRjDv2*Rt$LUoJZjeJMgu
zo^|TCPp{kTfO7b8#Y?A5x4hN$7{K_R;X-}9Am(^+k%5li(MTeLUgfZ}BN;fQh1T4B
zrq|ZgVSnHSz4enL^Eaa3s(G}9MAWNv)_HD*@#0wfadVFm9H;{g-HiDYORi6odR#XK
z|15Su4+^Gb%&}b@18QYlFW|?bxGaxDWe4&YP<;_J9;!=L__>n3LR+=0b}r3_Tl%T_
z_wLoi&W?jBh@7sE!a11pvHA+CnC<NjqChKsu4RrTypx=)<42g`<ME((7=s=|&iz<}
zCXj^8y}IHp3mOn}w%m^D6qF-$C~@5aqb;(C9J@_@vx38gArG>cq$`aV*px3eQI3wT
z#D7#r45~^!&Of=zsw8<Njh{g#)C`8wfCjEZe*!xP2TR3%;J*ML{NWnDrt#w$C$W?H
zWC`<DVcGNr@0{!IUXe7GqxW^mv3CyA*f15ZjF{KhH;ZmyG}l@8h<aQabH7Db?J&Pl
z^Y2+Im8+xqq}pFa`F=FCIS5*>ylorp<oA@tA#X<1gRoG_L{6SjN2>V?0V?s(gE20{
z@8R3DOi=|2xIx97e{D&&!ti`r2_4A~p@-~Zy=PK97$WiUGGDJ1#xd)g@WqFvKPTHa
zUv=2BGigLiy-)=0_NfJE8_MG%q#2-)gw8T!V8YK4A4Kc9Ut#kxsylo>=w!m;K2N+@
z6u8f5-Yzu_=;{~)j2>h*VWw(3Jx}1@r`N?aMSVQ(1feb~!r2f8k6W0H={&61e*Yk7
zWP0So@Fz&`Tj}Flb`X9kW(Qu-RxD-+3cC3P=2NtP8Tzp@MG04{pfmsJn|R%ESbX?9
zCfibCO>%+Dp`*OReUou~OBn{P{HQm-Y7{6UO)?4(I(}tEGsincFR8kAuQeN_3tpU`
z|JQ%uQzW;qzp2XaQo(eU{0J<gC!bd)VzU)STpO6{K(~KPnqdmLP1_{Mw3jkwooUpN
zCki1VBEhu}7p$oV^1IWvteh~>$2Wc{&9-B+XYDzpc1L=>erqazE;lVT1!g*!Ll7Mu
zgDBS%V?#tqn)iUDMI3p;!<1gLko4Hz5DkWCBz=d5-B&g<lX}gm-CB&SVnkLOwm^ml
z>7+s}35NgbhJ7mB0Y$Hi+&A(=@8*Nur|D+-x3^I(m^d1VDVh7WvP!Qi2ZZsaH$}zP
z)m%o<Yvd;3ThH;{`>kD^xR>_j0^w*qW9CiC$`6%D%1b{*N};)yx%kNIgWuij?TPC(
znvF<xP%EyC;`SJflgl#G#Ss2b?)LRV%~KpY*!A*J46AlcLbF2C1V2phvw_;0ZiRI^
zM3afTi8#*KO_wH&xC=u*k)NuuDQI>vdwQo#h=Nn}YuqB0xxBO9-PeQ{DMaeMn~$dr
zE78-HSUo~25)`F&fQj0xW@Wk-%RQH4c5dkN!G_K&u;dtHpB7skZ+iKz7=r;E9;U>B
z+D!jjk0e4&!s$3M|G^`bSFbs6QtkT2HZxJY5hfGbRmE}DUiYoIZXuitbGS~QF3DA5
z)HHv*XhON@MooTkdmrFqmZ99+xiN@+28tfg0@E?BKHp2>M9ma}pe*s_$+-~IEFD}#
z)y$WI{^T3|cKuM`J({=xl@&bD4kHw9^yvv}+?XB0&+z3K63g5Kq~>rKLPK-0KO}_t
z?HwQ6o%~OfQg8o)>DDVcPymuKu!%LRymf}CVuaEa5@l34#YGfg$1M?m%{iW)nyG}k
zuiFSUcDB=gUOe&GE{i$_Myj|`V1Y*>WbwF|Ldgo(FrKQ!vO>C2c1mb!#lk;R#jYV3
zTb)wNUzE-2K^EEE086UYX13l1?!Gwq?&ApR2s;b9e+4vXPz(31rbzTlXmoQWxp)}M
zLLg%fC3f%bwhNIfGt~rTs<(2Mm6XOmIM@-S7lJZb;N!C$C$XD_+TtLs-i({p#Xkfo
zbo9O8wr3cxW$1ff@*{Vm?r;_AGd@*SHyI*rEZlU?2t4kCGdi(HQt0%cYPD7p;FowP
zmob+#5N2X6X3<ZjW;ec9LpuO^Y+@P~;h-}jYFz*q2mo<D<%3aUSND}`<FCLc_xv4P
zYud4h=%2O&`1s*;gpK@F6ERfOtcBe}tC$;@)SUVgt`=IEIEx@7>*<T+3w%`VgL={t
zc!W9sqeA}(5hKFy5UY~Qs#;enYcL9i7SMWn?%_tC@v@vc&2C*ZFw6spY&?2ILvjh2
z%uzAS?Rzuux87Vwoe~805zUN4Zr07Jy=wiHG&44QB+N<LKsyWJS>~^Ms!RaVQg6Ka
zO@-G@W%4M-E$FWgW-dkmMR^&KIT)K$h&RVQ9DcolNKud{1a!P=cXtPx_g{1DWirSb
z8^Ypx>bRG473bV(7kAmN29#TJG%>e1z}>!F#IE~uC;vWAdn77p@YX+N@;xDSiJoD7
z(ww(DO*9?uzaeJGBrnL3z8oc#kk|yP`y%56&Q|IU!UY<-V3c(6l1CN>cx8n-w1!e@
z*?3Q*dN=9y<a|2y^~2Xxcgz^O%1`%8-OC=dP_>=|@T5DS&J5vrSy@C#vA(k7!e*5w
zQj>gmZ@6q9oJ5((T(pfBH8%`77wa6EdFW?+f7)2QZB=izg>({VPbaTndX99_g@6Mi
zZ4e&!fSu28j_5kp%O}U@qj{(3N`ppk!KBDaG%^ljN&<Nif+X9xx-ok)Ru4TmjR-Ed
z?LgnykVIOH@KvdYH$U`ezkdh`+ZvDgwPCDdsgKnEh_Ktw_EzO?><Pr&I;`qt6<Zgb
zTsPYk6pXzC=(UKR(n(=0@C}zcI$^+snF|Q8YV-BgD7&PqN^7T7(Q6#}S&MvICVKbF
z%`jq#=_X|fuGupMEZU9qNhS9z@nYu&F?LOGGYGR$T!Z(b38=G_W`hnR7htVqqZ<Uz
zt!(YvA6Le{6v>*Uz7>p>$3(B^?K2>!v!Lbsno-c8e?_FJKw&r^jgbLZX*8`s-qm*v
z2q)WZvXB5FP4eLyp0oPGGy#W6^ZyAjkGKZ-VC`106as*1xA5o<*_lEHUz1IHKpz@j
zkKNmBt}3^{^cV-S#d#6icW1J`JLuDT_;bY-cGIdCz~I*6){zHkDFfnun!u2mP0Hc6
zNz%0b>6O+wqnr{5n{!J>!=Ly=!zz>c?WnS556^=ubMrT=B)AD$Qp6-Gh~Dh#Gn@#f
zPqXpBk2{L?XsDs6f)ZUL?a1!pFE*6%3nXGIR|A8%U=Jp)4DN?4K}#WdjE3sDKmv)I
zGiX(2%NSD*DR2!@;Qec`2vYX1cA5EE2<@qegNl@aj`K;|$8-|F+6iBUrUF}V!3-3n
z^PT~ka?wgoI9Bd(lL^GpE=>?FPEB|ZAiyH)=qed0?SrFRvv~}JO&NV3n1jQZ0;@m<
z3H4NOnF2voUBjM(6S+X6sX1JQquxtaho|I<me^^qsJreRu8SWFFJqK67AS%q+fOhn
zjxirrFV&zt&?Sk<Ty!A!O+#p~gD!+u%-WqaNG|jqG3dQ%ub%fbo{<85nKB|@+zH0%
ziJ-(hltj(^?k%!0rQ&1A#es`Ke7!>^hB}_#9npiR0947bIM=(atZ5^vKBl*SQ?sV*
z1qXK+k5Qkl8#_2KD0R~DW2U4=RMDjj_^a)DzMbqebG}G7jY}A@mQnj{mFO9B=~Wl|
zBZw&CMHwT&k5!jVnK9*whr^Cg)VA_~)d6I4UYu3?-I_X}cKLe(J>aEACJlrUIQr8%
z-PgNm0+^*D;mU|uX;VX-7Gx1<X&P~$B|nXR)tTxNb2g>tclIi9;ZMsp{t3f&4eNn7
zD=d%Wa&!kL{~^s`A4mG7@bJSe!6G$XvGm9~-3Ij)6!<(vq}+t8X5Y8^O01VZ>P&Mu
zbj=kSCmryvh>@(jUtkpIQ`)+fn(QPMnhI+p<8BT=3W(fx)OjusW~rPHms|G*oO}N|
zK8iUk>tAn3Wddp-I;eT71FXY1EgYm>9Keq(sx3*z$V*xLYS1ng`>@+8T);j}Ey-ZU
zRDXgIFfalNmMnVo8}j-8<|A7`)Z<C`mmg%@%gz&y@%F@%-l+1;I-Fi>x!bx61lau?
z2Zz)&(Ehpc>v52!=~prHOZKT_v5WwwEeHpF@J}1DxX=70y!6L#7Uwxn>&3WDIW*CQ
zi~i<YjU_^@rezMUTjjEhH72zDEzyBv(UXO{lzrC6W&;`2{H@Nlb{|~<!I1S2?(Ta(
zg(t-bSQ2PoQ0=Q;rB~jfK+k1W+(u?A|85(p5|6@druen28{(3BPg#l-;;BuWTTHAF
zCPWt=Z-4jPIeE9+jA2e-KECfqAr1bhyzaNfZcd(%#EW+`v@wL??9Pzg)<l@b-|>g|
zh`p#{e9o@pR~phqu`gk{cjlJrQNv^TM0t`s$}tN15AU6%umFxLO<t)oY*M~CtN7VS
z;0PW<7<XioW>(3Wb`F|r3Ln=4WoSe1&z}4V7$|RW96Bs5%*5hQTR%m0N4D$o>ws48
z|3bx395zq=JiS`2p0k}r4$ML;qY8cEv`l}~oC7nmnXMvSaBMcsQXje>RlrKa)GoH|
z<mXKm;=M$?jp{z0?)&Y3N1cSGZ-XOF=VAiz2jyIkZFD-V@Vy$`8Df30TnZ0jpVXaK
zD)tmtrqXV|bbp)f9nLr<1GcdRRZ#p5{Kno;vB$6Pnv2KO&7t+wGQC$@AS5R!L48!x
zr(-53Ig{9Rh%Z1skdMMXpw+qY*HkWiXyvv??O&rD87JXraB!Qr3;22}^hs2C!HvU%
zF{XmijB#7-6KY3O?9&)&dvzZcNI2&XqUXsF^;mgn3Menj@0!29ITt&ZLz8ncpXisv
zsYjPe8ql_(y<%uR<C7XZEKo!yXRT}S1){^5A^1_N6-BjYH+Uka|6~L+^Ln(Ql?UV`
zVj}}egxS~k^@v*}18$yyB0>mpd>~|~(-8_LSrAjmO~I&+rj5*~{WMoSD=CdEXXW_T
zcr!6edHM}IpiV?N(x$|qS^U_ivBZa4*^V*M;^ClCWYGNHoE7tE3xS#dU0sS}Zj{IJ
z=K1K*fmk?dM%qb(Yk)Y((YyX!>iAzr1d07L$rZ`^%3~n~pbWqILSI?`Rde2m*7)+v
ze<k-`Oh?eVn)2d@(YcUabSX(W^EkN}vdaM7G9x*Y90A+-aH(HLQKwR&<KjPWaJs+<
zCfiE`Utp!bS?oNB&?G2{4yc&0fw8p;QC?PO;iZd@0k1bPnnBvDdsLw}Vdn_={@@H?
zwtGmnwUUvuzd{Mm#_AVx&(bhf1J)EH3$l*b#{bex9!~Z-;F_82Vx8%Iba~=r%R_!V
zau0}X-nr_kf6Vo2DfVZZ#5`#jzlhsv_HhbwBwuCRv@nNYdHFfI2~&+z(HoI)A1G2E
zkBSxJF6J<%3QsjGY*25)Fh0lf8_Hs}B0!mDMKHq|y}jb+j_8KE$sgzJuVY#i^=LQ%
zPL-aq6B2|?Ncm8boH|2E889P)4qs-3kap$_LhgO$Fp*B9tEgAgGHfkj4zH|f`*b0Y
zzm%=YEF+GGWr<1wUvt)6Sj$8T1d?Y*_O9bZG7kJb&BPAgY74emsnLWE+$IlgOnv!1
zvfx)j3%8YHvemT?XSvr<0CJDpnRGG>>07``jC5+70ZoREv?mmsIou<aE;@^sh7-I*
zMsv?eJpehEwY945yuw{?3aK8Em+-iL#!*4e4l*KHW;?TAgqd8_OS1>vg#igKDLJ$*
z6wuO=Tgh_YPqwyd)wL>LZoJW6^Fi~kgs-Il))I##YmP54FQ3pNG8+SpNwt;5zcV(|
z-vA-=`wn#%%7psK5c2Fi-unB=<X)i#bQ@jJMQAJHUg&^GU%U&vuXJlG4EMF&=I^)_
zxNKC+OMH9Xwc3VWd|b?}Lo18wr`QAdhC`)daXAI~QywhON)8yx9~!zL+Lkk?2G5%A
zc|+bP3{x7@s+`1FEMpFRl^{_cQf4C3{_OqA>^9v_J@XZ+?H5dbSj2~U!Fy4uMaqjk
zyS1a~bdF|XJ%;Qp<|*mQ<ntEq(X+O_&J{~L)=OMcs))fkmc&3i0b@FfZZ5!ld`e1`
zpz4L!x_^pe8t<<dVtXuo(Cd1?O`k!hTcfoF+kJ^e1q7+Zj@yWuuYTaX1S5*Ag|JZO
z+c71hxL_I{J{yM$+&_k1(rV<p`zd9juazh3TY7+<bM5%#gFIaEZE`4R)a;sYVg>{E
zeDuYh2~i|=+>=CAE9H$XG;&X!jVu-!?JY?YH%+=Ee(dkbd$WzJ4B|>@nh<n&@u44s
zYBywcgpyPanRoxm$6tkclM$_~AGqOxo(-g@ywZlX0v5hwt!JK7TsE39_Jw2>Cvbbg
z8oWRn*SO#C6c|?8#1ht7X~dU}PL8(u{^pr@ig1SD)*x5tgo_d6Cnl2^fsphvXjzhx
zR`&zJpCoJ_)(o;p%hgYn_=7jGvMLByM8Sd9%jwbm%T~;7E<+O2&F<jzLM$rgU=;#n
z?@nzhD7!VdD7GpD0-@ZwWnht@a1T_I3{hlVhq!34QM6749wM1=!;%X6y^qKyEHs8B
z!JG3!=I%*Da`{b;k*vG2<5EWfrKiawuuVKlY9FopTVjI>N-h$qj;blaCh*8x5Q`f^
zOa~xDP=drn64vYFR7fYK$>mdV_Zbhkwv^&o1urqWSIMngnFBx&P@Ca|8$v84jw8+|
zNT*WReHC&>4OkdW5=2KMw~CaNd1dO}V`BOJlve+E>a~}f^xd8To1)G)M&PGd6wBqZ
z_vDWaCE6hw(?x4>E|*(-99~TtubXsIHCTwnuS<(Km%*GB+GoIe?{Sv?P06DgZYWtS
zm0_ttwIy=BQX~;q9#8^HQ#-5igWTlyF)~a^gdawy{r0Z8)n>Y`yt=nh@os(;JVe~)
zMq3+#>Gn49!rg1Pb}n0H9|?L<GVS9AmCwEr$fihw@Uh@gWog*E#5GkWWDnne(RkV2
zMHfq%6Q)%KU?(Fa2OCb^lQ^QV?MX0<!3@;CZcJxmnF_)Fxt|OspcE1cj4?M|K!X9z
z1(LLD=ewfGW?QOr5SZxqvvP?H;BtNhdmM+LS}ENGg5PS@!v6)Z9l)fmH4$Av(W_vg
z-j5V9`Q)OcHXt;*w0_GfyB--&6eH>nzV}Ch!etG{25(*m03z=XR3$z88_R2AWViHY
zl`tzHRBwqaM@WmItTVrE?Adc~*2+k~BA!<Vmeq|QjK%h$_R$$DIdzz%ut!_PIhL;6
zFzwbd<PC0VsY8&wQXvPwo%oQD9Ld?n-nBR`4Zr;G!LKIRhBg4iq48*-P>51Y$3jp~
zUdUA<44+p0Ehm3V3nc#J&xs|)A=REy*9NYx53{28`#?qhGV~8&{~J;tpS}b=b-V=O
z&9NU$OcZO*Q?Uz1GD3V8d#>7Rxs2-iDyp$@K$eN*?41dmL?-ifMA#J*A5wKij~B9_
zv{08{V&deVwKp-ZMb(0}NCk^kz(0-{1Yw@DdUqvovoG79afNab;1t*PAz%`uz2t++
zjf+SYKMKViIn;SG&UqqLl%GxM<X;1O(!0pF?yXXyWThJqHBCb#GHl>laHC7Hc6M^0
zG;nMw_&AFOKgDM)2Qj{B&XPgmLzBQ{7@T;y8z9Zl<9|LK9x-;fo&lYP(Ncn=WfU(E
z)=mB5BO2reUu!2J<V9HAWHEGPJ3cTbEiHTS(w7s|!Fq+o88RjN+c;w4{cic?wy<1i
zodN9ZAr`(%8|7FW`@uuhu`+MB9DB6;&h|D<M5-J|`ww;=e#%v&P#6WEsZevM;$%yB
zd`C%lW?%1<Ukq`Mt3)&-SZ_n@a?^2UV;htO^MKz%I*Ut}n=rm2luPLC3omnls;%Tp
z2I`AaT{pLVTq0~#L=lmC>9*mEWpZh+*`eKVuydAOM=su17KvjkmM){TfISvz(-Gu&
zJ=&-SZc<^{vR*tK|G+LDx<X*#a+4$RPD(>cD`ZZ%hOt9aS&gR-zoQ{AEqOOJI6nFq
z5!eg*llpAWqpXwI30BX*Al-FGZzL25zq0`<!QokzUn_ssIqtEs{Ug^&u3#R(PFhty
zYGz@qG{rkpnwr@#LWZH;aS_W}x)aoF_U-$f)PE5OAnjj^1jXukKB0<JlwqTdH<$J*
zu+)3}CWt{FH?1eG9d^UbLj&6}w!X^?(Vlk+e63NBgo2P8Go7o!e&u6tn<*RpK?tRD
z_13lW<zP@CmmZ^lW*2%y^Q(I#ghM#4Y!-YO>}KWhSP+YySIAwivKxiX^ih4@{gH8<
zrA7uah7i|<y8l_=zT!!*M)I`m;l<FT?wWJ)R`c8g5Tp+z{U9~23!>lMu&g2d9-r>>
z#<iNOSPlZ4Oi`ICOfRyJXn+y{iSzub+2eGfYz<ZJ{Hc?3%;48m%Ydu$5J*%`{l%hY
zXB6do1(sad$Ac0vp)4psX>6ppQ>E7U1>6on4SnsjdC%biD>R8FQH09a`9Uj}zIS#k
zFSYg)X;#BS4G82G&tG;XAAW;>HtDgHR53Oa#K0B9R?$2laR(7rWYpL@ralq@)8b8N
z{3aF;5&<jfS1-p1RXyT00i2Mr>44Jlecm-Hk*x<TWuJ|dP31UO{~uqdGLiL`PE2?g
zd^a`Yef?nJkdr#!+#m<7vfue%`57?hdn5b}PhT?v`IM|3=5gYGW;&z+_A+6uv`?vN
zgC?6aG=R!tR#v)UcZKE~K-FGxwD<toPC|~TV`7nE;sl4a-=H*47@vYvOBv~gJ}7^h
zmKw&;$>En)<Mq_%R}T$Ld&Jjgs{HkRnQRbETrMm8w^$+VK5BUB4l<Asm;e~+)f`Lg
zN#`ODY-lG$SCGRZ$PLz}y>d6{;SR`xEKOKSopYX~f@A;)TRp3E$NmD8SK4SQy;oxk
zm_of#IOoTFQOuC45*6irrzVJs7j3!gC|fc*cCfi2lG3G=zEKltGCyd8>@v$7etX5X
z+RP@C+4|d`f`FOierq)Cj44(--X&a4C@zz!bI4y_$TouHQX_W+<ni0~hb_YxZ|8|{
zWvXgoWqar%U_%jfKO1S7^nI?J+McZG)Jb30a);M&X($b3525KW-m~Bpyl_Nr*5xSH
zwNaz*x&>Fb;^x;KNYxZ@UDgLBWYDsO#ugRxD|N3KSi413?15rq@7HMpl;IM}c2Csj
z_Ra%<#M#?#S*yTHjN%9;9`c(AZ<t6GT`(#Xu2lyN==Qh93bupAXH&2rP6yt6&|26W
z5P2gXpBs0yYysUc2>d)3`eFMAhNy_QYtigDAIH*Q6F-1NR=t)nNQBoaB%3x)YzlBU
zOn4V({6)>#)*bw~fMSV~P8@`jal?SsFtpwRT*xLQt`X&c9@&_E@W-Wobi|R_uLE*I
zF5euu@+1}D0=)IAZbrOQqZ`M{8e_9HrNlhTE$jykuP^+CMmp4xJqX))eaG^=Or%rQ
zu?QM|>Z3L(>?_*v*0HMx_hs6QB@I$3G_!?NXP}m_U<FH_@NvNCVmI)}gs?I#RMc02
zt%RW_DW{@P5i4IH2QG!lJ#+NpGou%QK@g4qt~7r^$eryLX>+Hg`~j0oU8iMSE$e(d
zDsyZ>C9^hn;fukr_>4pi_OJ}I6Zhyhh#s2S4_QAH*Xhou7P=_o7<-e&0+1H5_f19L
z*nGu-aB<SHm|2;Ed`W!6WA`&W6d6-Xk;wv4DtTz&s`_&HG1Z8en@Xfjtgm>FTC=d&
zdNO5)h*O;4pUS<Dq}~wBgMh1kO3Je(Y?PG_>b;KV?a#N{L*9~`B2eoC(_3G8fii}}
z65TMIyg~GlHAeK<B73_iRR=d-jX!kOY613Mj%;e~V&Gz{HT6icteu0BDA2NG+qP}n
z#%bHOZQHhO+wMMX+qP|c&cxh1@jl@FLsjg|s$IEs<=|hvG>xLFrRjqDT<E&))u3BJ
zqa!Jm5VO;42*RSzSCvSd%Eya7&oDw8DzneH{=Qy$kQxZx;ukD%FoK}H&5SVZ?7(2(
zGsOn$hkS+p+Pt?0>n2r*n?L>L-^#ouO*G40n)*MiOx}~$gT+-pR)~)V4XSmzxUSv|
ziDgJALB2`c+7s&G;c=>g>Qasuv?lIMXuX#lGldpDOa&@pMSX$!LfBsKtzu#`!eDtr
z**>Ef7JvA3-^EMyG^ig_FE}vjK|rNP$lrb{(dr*9k?vsVPnt&4_~cNapm_*5;Ac*w
z5)pT3<?_IKakNjRa%daPU%`S*zRmWFuQ|8576wld<SSnp4Nrb7{(G&e-rZsE&*Ars
zG!o;jQR^H4Tysfp9HSqWPF}4l(gR&TO9N;HqYQ~sM3<(=etCflu}!~hJ*uqmM^u=<
zTkJj`ZaW18Y%#D!!L!<LE!b&qam&93JkLLl{r#?d{CII#F_78~bLE`bmgO@_#K5T{
zvooVkurp8W=F-}Om+dg}n&iZL4AqhS0HZxST}%oD#Z33(NWmi2r)YDf{P^y#_R>8l
zqfl+C=dhAx%I`F<v47LIJmIwc!OxfYXp;v*25*hyz$9&-o$=ULB4YLCo210U&muE#
zs&QN|a4RPelEVXNo|mo<gZMBx@M#l*_4g{`21szPK53F8mF1F(sMnq5t2I^rjbu?O
zB^4E%$EO_oYGxnl<1%X-=@Iw;e(4amIUM}Pu`=YSOt>FwSZ?#UQ6l)vX{Bspq98dn
z`X}l>wZL!CiA;%jmTBV=c^k0fo7QikiK}0!OIApZvJu}kinW(lzazUx8a2qRv90H-
zX*4d@F}mf&G4DRKhhi*5u!cd<pTAV1h~mVIMb<I95S*z#7xw`y<_GvcdmjPicQ%NY
zOcfjp4^S*{D}m)tK(;eWGIqGT6j26yUC8wUS&^fadcCB*Jqbtr8cDc6&3lla4=qSL
z&8-aJzJjTQV6{dvy;6`n3EOD=?J{e!>Ta&#>eOS^P&qdUBP1~72p6)p6DsgMb*G?O
z{NTa9M-!uWD%tZJQ@$5LmRhy1M3ik<&(!jxzXP|1lZAo=sG9Ryhq0c+vzX2oKsO*~
z_?$tlM$|GZX9MKg_9k!4a!L~9Ibo0(=Qp1L6MvszKC$G?qxThEvZ79hE8g?orHmtu
zzl)H5j|vXS8?Qu2By@|Cahni(LpoU4GAXeI^33N5qzKpdVgu+hKNtR1z6<v9&I~gu
zS?NM4isx)K${E>EpQ6LusAycX7%@j(s?)JQK`DNN$pue1P74i>E=Khk`r(74Ao%@I
z{D?u`qE2_Q*CSgVlWEZv=F>(KtEeKmV7hLYodW&Bejf=w8jYX3_`{nho;3H}apz_=
zuDI^t@<;jfXa(+mCQNFR%4~Ju&98?`6Ho}a1@z2mwcYRm9Y}@RlTvIvUnYHsuGF4-
zAYXRV!L$$7LnS<o@aokVhv@6$-D@tHxM0s{4I=c{e5-sQRhCA<|M*>W_q#W+z@1D(
zUp#!FF7Q17*vF;9kwFf10swo6Lrp_;Ej(qdr=977$DuEF0#pV7{g`<ne3(%9l}bgw
z6~)Pe+9~#XAF$*=`4f0>sxpHzEbsi6!q>rSdCf6dT04J@uPgo|mp0khj3^eM6Vj~-
zl~$i?M?&cX_g?jIeD0Fdpc=y(@0=!d+uB~b>Z3m0{x}BoS@V>Prrobxk@$55#V`0t
zCiozlg<3yL&4?eX>eNDNVW{FcJfHsigdvc;*HvVTK8nZn7j{f@tUCg2s-U43+S?gb
zZZ<B%<w8Owim6)T5;q0CaF`mXdig<NS8~z2YwkGrdGN^E17t1VJSC3algL0p3@-?K
z3WS+7z7Z@=fY2qHo^T5uHu_xgF*G&a8hdBm#oNIu$!H^hcJBM}-=>9{&rW)bTTn-n
z95-E14#7eI!Y$iGN9a=Nol)IM*6?62Ih@P&lGN&GJ`MPaR@ZF%lh4gj`-0~>JS8nw
zGfNgRR-s5C`*#rJeHe#C91F|1`=0WguM+z-DtXy+{ab0b_aK=86){O4Ad>>1_+FPH
z^~5UkvA*M=LOqoEV5&wsjIjR-TOU-bHL}^#A>Mf4B=;4G6^jGgH^OpEeEEzcFtQQ-
zGo8nDbDjq<fbr$-ZRyx(LliZQ=|*=(;%CdunNd1SNf0R-q?;BE7BPoxvR>x0v-7W%
zdGtFS_aLyuogP;IVXr6xV=j?Tkq+?cc-_a|0=J+G;Z|5vJJs{eRk#vNHz{-VbH@mG
z3D?LZS~odU%CWJf9nG`EcG3wA8Fdh#M~oYchnh>3Rpr|;Y95~R16<>#tTVv^7~jLe
zW3X}$tjl2YEWTNMrzc**fF4DzkmhoVzjf)#S&hGaZ75y~@ws82C1-Km7uknjNY7ao
zFGf}B&V8=bL&!Q^&KeH?MhCBP=?H7%wxZg{!g!L|OWK7F;H#t&pbGjvsMI2(6luW#
zndPx+jB5ieZ3$0P03@-e9kllOA4N#sm>%t3<>FSLW{ETjzOp*?Lue|CPVvB}LdipI
ze6yf3vECI%-xLRx9U~fmplYCKVNG0xvSKWPynJhfb40T`Nqiq~rHw3FB%0uI<T-8l
zXxrKLajJ+$lxwWx4d|z9^Y?H??fvJl=d4#EO$ynPHQ&~<nW(17ePd#?P74hbzE~al
zmUrCX-@n`l<idVXY{6M}KV8kwRg%|pRl86s3Btx1$j79bX9v+d?`pXRna?-x5fN+0
zh~@O1B#E}2JW1CpvH8c7iaZury@D)wuzI%3FD6b#7i|qJ0nlMP<q^MIi3207S%zq9
z4>N|L5)3&+x98N6ZJ4r&fKp}nNxgp;#>u=r&kR@Eo`xd$OrM?g1MmMnh2KugD?a>9
zcfC4E-n${f!MJvNWy4BWQRBW?#a=QEIjwG^nAx4%<7=B}97DevhKW@j_DPa!%QnWn
zf53=+bPlOj8mNs2R$!MGI-L4Q+Ha2I#~RXlTCe@~I{XkI$sVWPmSj9!v>-O>aU*mt
z9zouXddG00XvWB*P8j$zz_5rN;20gTB$9-t9>}2Sg9vXb7XM{)2a%qxIA}Q`JoT-k
zrIa6rPmjB;VePhM(|Z|a_#~vu0){SH+wrXh>)W#hGkwxJVbU^$9)op6&Pd_C2oz<+
zm_Tuy5$RYO<fAly{yKj^msRXg5xg6mxRV23yJ4Zn;hX#Qy5b(wOSz&{bqEn?@}Bt*
zF#<I6#7?iK#3^Us_h<sE;1z99Q^T}I=-CX~A(^>Ga4Y`$*VJhWLUVzPy<v@6o8LFF
z<_Z1vwpW+Pk+v?L3?&}0bBaD?u`=OsLBGwJ!T)_!z=U(s;E9$L^=F<czRGtHhUXZ-
z#eOYcpDM@S*OktZY^ntlfZiwg%_g`=dMWo=jN?ku{m*2cS{0YEBkqz50sB&^jMTUa
zE$7sA=-n)Ug7}nv*Lxc8wqI@nmVRwd#=K4u#3hHA4VsyDnf}J$VamPVW{_LINwUnB
z9|wxC9T@{RLR1Ii6iin#dFM0}-d+qD^i1~?HLINz5J_r?fJ6;-_gTlA!`rO-NaG>a
zF5y!5m1n00q4VOmkMFH&d)QFMu;T1zMFg<dcblE2n71HK57}{<v|9}`{S}(I3^WD-
z{(^9ncnr0Wxj*@W$$8b{5JZE5cvQuPyf?)ji<B_|%L204n%nxsmGk(BISeBVQ6bR;
zh{>MqtnKQrQ{Uc9qwC_*cpkwtS09JRJbg09l>V7l4e^;Tey?)DV6qcy$Hy25_n-`U
zvz66VYiX1!MdF?C^dQ_P^Cu$8ptU(ezux!N!E6Bd`%bA-FcqBj?~fJEHNgM-cCx3$
z3SFrKfEW%kCeYKw(Q^}XixXjnxM@r&i<r7R3P-roGE#DY+Bjs>I$idjF=A(fZYf1^
zjXYn9?eYZ*B;*~X3gG-yy-+-d6(Z1%nPb#pqcJRXe0eUH5;1smbQ1|V5SG)U=3Y7R
zcgHCJX~YepUvR)&=tPw3ENQfeV^3t?qo}e=6QodC@4mCeTrz*vDs;O|HI^fqKv!UO
zk-(>J+IC;3*hC(QSw|%~5rqC;c9xm11#D&%=^mO1Q8t7~^b4y7gNcr*7jmt)6@GzN
z#Rqx;4RynX5XsfC$ZJlQF|Bt;VZf*kO%g7mG$#dOf0y=LE<w3ZIidLs8K1<AAklJt
zeIGQ7Cn$rAXtfyk6r8t_kM7DQ0KV|6d5GX9^#<=z@seNgH)2;`JLRcLrJvpjc#yy5
z==f-TtnW&=tJ5WQra!sjoPyA*gL~7e-vA{IRwyS`jT5Ok2Crd#&Lc46nW=NWq1PwN
zA?)N%ds^AbLmBZ^p1z~v0|6${285-S^aK`$Aq33mK~f-29_6^Xf`(K%uS0n@$OGi!
z$(+wGu34N+@LQ>9y2bH=Tlq`FOz#=1HVE}sQh~EMIa{C&2~KBl;}QG$Cu%2<K-0Pl
zNc&JDu9cHN%?-f%6J80sF=CrK4O}juH@u-bXvY$Q(du01L{XXVm|c%A;Xs`ZM;k5#
zqIn>$>AWwJud3Jm^eLF~O|!#~qNh6|td%W{f-uM^QjTRAdzd`-Kmlf_+|&<0Jjd(B
ztwng&EzAC$VJ0f{M1I@ujrgRp4<KihD1b1lAv^1gg6RtDDw<4ujytL;rKu+(zO!&g
zAsQ1cS+g6NSD#YGc1OICQH#lXUM2%@mKY$FIP_`H__^ok^Ia5ql<Zdzq&JOO83P)c
zhMofWwcT{9<mZOf!4myVWW`RLgLf5A!Mg>!U$~Ric6j-f+7|=G*Ksz>-CEuC@TX#J
zLY0cyHVQt6ySs%RzrpLmoE1LvZWjlIwF6TKf^BP%Eqxthl7c0XgT1N@K8+taWoe8D
zoXXFg8%P}c9Qb-r5PIP6;@RvaK34f+d&e&BvHks!6*Ic!(%2H+pbJE*#Ex_{c)V79
zRgrD(5p>V#7hU_O!$o7N1X?;1J=6(m>8<>80C-Wr$)pKBib~<K@~tRx`o&W^2lmBh
zhwgSIKum-3`0Vo?t%ihAM^cpAQFsTfqu_X$F@ZnbgsH=`s|lW}Zb1wePJ9K0CPPO;
zdEJU*XW1k)(F(@g)e1u&TYTf%d?WSCr}iJfd+((Wv;iL@ms>=4yO<s|%G-i~zm%|q
z5lAhZjA03&r24wu<{e4Fe-~N|s{uCkEcQ(VY3Qe*&-~ofJPKKZu-G|}Gmd2CdBof|
z-(p?)Cp-!>kF$)Fb4u4xl_BBs_`>ZI!~nr`Og&(Pb0r1R53MzOZn-%OHt7T}$!D*k
zn9$93*OcuLklc`>dr^y<a~KwkEm9e?&{(1`zTClha(HS>AE1&uQ{(z=+VyF3pgQ*2
z+t9cOMmug-CQ0V>3xAtej$4;|geC+<nyL<tA4!}n-W(dPC3~E@5`4pFQyR}X&E)<7
zk}`<f9Fk=UzByfI{lNxdiR{b1<uO&%xvqlk?fHlU|D9{Mk8wZeoU;j1>)^Kkkq{a5
z$S1~n>TeRZgWxK-y2YTHqK3{U6lfx&7#l!^D)sZZUBZ&>t2W>b8+HEULk8|MUmMDz
z%_P8T&#pZLd~00Kfl37nw~jFI<ytM>Idtct3j25jf8#`MdXod4xZ@<cwgT4SvkJ6%
z3!4Y@3!x%1!?mC`B(5mGuX{qX3bF4Lj!N$LWye3p^XIHTO)-8`oFV|&wCp3;lTC%N
zA9WiFY|z>@RzhvuJI3#3PAaFOR1FL4Mn#k!jN#so7B<d#cz}~FMKRjk*d_<`DH)>E
znj@H7)S{5DumvU_dF}!h2;J`?#M)6D;Ie7-9G|A)s4cHaEeJ5Gd_nmbi>*;xR=tT<
z(=7gXGN1mQ^)jERhD3ZGr2!HJLL&aUD=s6<bKtRs9OY*K=FWEWc9F|cj%;uFbB+1I
zc!LTC>#hND@?_`BkwT{`P7krgZpR#5r_94v8MI<4`7~!9ZuR;o@q3UoA<YJvP}_+2
zj(5!?VlC@4w#WKHG4GNt5EujC(qypN2aM`hg<ESW^LAzytiiSbQc9e{J)&L+AeVak
zkm}5q?mS%a$X%vcO?K;PbZj^B8Is<V;wIi=nQ_;{eSmTk)1M(tuUa1&bawwVb>Z<M
zqjDR8liSaFTgs%I=CzH0<MSKc%MFSoqSJ-qf;l?vfdna(dKxEe_(c5h@0k^44GhH#
z>uUvBd3<o|2>gm5zIDd!3sqJ<Trfu}xVS)sZVAMSXk+;9gh&GOKXM$HVXUj#1E1&e
zrk0?$p{loOPpTg7Ar?c1<_kg+e$x&EP?=;AyP>>HNcC!D^wM|X$mrQL%xNhJXaXDD
zg&{A7b6+}ah)}@--}pXW8@l3DXVmeccb|frBv6oH*fD#97ycpzB#RR$a)DmC%=soN
zEHMJ4E*20-*{$8H^A(4g*rZqHC4{!``7>>MFy`9*9xbFE=+b%I2{Cb*j?;t`Js|rx
zilGKQ$Ku;_YD80bi%svh4EqMsTMeT>X=fKkiHXS0N5(Ov3`Jc1+CNY$aQs6QlbO(R
zIKe4nBF+$?I3b@}d8@|P6>Tc;s~lvCPt)z*aOydo9RUF7UAGA>jyfiPl(2<8S0Z*n
zN13D+>y(ZDSwIa@xA(pp?8<bcXZOhqsLvDm6H~K_AH!iJKEG9h`|Li4+f96fljC7@
zuXAYWH>?nO)L=~;2da_@@Tu6Dgkm?oH%L@4?nd<dL|{QfNiCcGq(Zy1p9$FXzQ}7{
zz0zrCU*3%WnVv*PUChfco0W2eVI8Bh`_EH?jgOTMC?FEbxLa_H#{C{99Ws{TgaVW(
zqb_{IcVRg2&TYR2`if2eMFXZ#+@TW5?xVkYOp1T@r2Y;rn-iWe)ktF<6q5>=ZZcAH
zX_AagU;B#qLVQj##9g*N)`uTdRbNQdHIf24BPk}K@5*gitf&eVp6&!-hUZi%2X==?
zq%-fCt|wJV#^>ve&${eb2AcJcS(2SV$I+0fHh%xm>K5EVtsQsfpsxiqyIOn3>r<hL
zhu>cP7vTc?3n%}mZ^foqxHpo410P8i^0{XTejV<{`cnG><j_0Ar$JH^*X-JgY*F@9
z#r5EhcsyN{iU88|Fk;=6q|;@7G%JN(5is)3N>@o}VDx+cl;I_3(X_e3lvqz{i9q?c
z0wjr!LL6C2uiY&bM9pB5VV3*9g})O8ZNZK7PorOK7hcXZK>m`g0+ToqS?jbMPI%`A
zQX|M_16%tSvCyb~FZW6`4sD*;_mIlSLPP5u@Jiqh4D$_Sp$Q;(j_vddg|n^f;5iW5
zhS7T$2p<)$9<ka;mm8;Epihgf7Qp^0cvAja!`m+}M=e+V3WMLjtG`Rqx7j`$;BU>`
zV<!LE2;DodLYBsQv$=$`7!gHIvT!H(O=*8xQ{bLp!UQgB15v?L=!-((7KKE<PSYoY
zf01&|e?$>bGJ<2M4Mw=e^+;K|JQY*9_b8Ta%`Da0g6GE;_NavgsUDg2%mMF(zs3d~
z1_j+?kRzb7>wtIs^%llQ6Fl|X9@xvy32+yR7An8xDrPZ`Yv2)V_c2C7;na33&1+Gp
zNe22(s@CIvaU3tdx{n@JHX#WZThc_Qy*t{0uvg(@ZMcD*&zGV|$(1@Y>ey+OEF_Sp
zbTJNda)*CX4Q)kpjFGt3Bcl#l=)b9$V1?pbArNCT(k{6UppEVjaccg#L4~G2)F8lc
z{TZ&Bu2e+W@)FnH68ibH(L#YuDAvim)Wu6Yg8PLRVS6-g5|~b%r&?GU^XU%z5qXH;
zkL_Ej$d=e7J^&O*R_Be0>+|XF1QT+f*X$YH|B>ym%D@Z%gPV{AK+l0R3<2P`Ln<xN
zL*gBr1%#>aVoh?tMI}k5lh)Sf&*cC=*gk+OFbBP9p`3mZog<8+>E@Gr&?qx8gUR$t
zTeM<bsyg(oUbsoZKk@`m8ukMABS{A{h{k&B6d+2|9DYcc?`LV9bJl8beXv0fs^GD1
zTye3wb7mDZjCaQ7myAN<Z`v*S8K;l+yIqbuGpY&6vnjw+X-<rf=sZzdXeiNj;4PNt
zZ}h>wJ}e?M+_yhc4y&<kFzK96#=ZzC)|H)auG-WK%jRSn%iGVq_IaxG*Ms#zJgm8c
z{M5ozyPHUk3RA#9Y6?z>hmP-^FO4O42VUr&o>T`fE}jxYvmF8RdU&!v=4p_mUH<1h
zlVTb7`tx~Oeez$9mAaYMo_Ucjyy>tvC1m0ZfgCRbVNg?yk4K%k&N+P{2qpfKH<!Gx
z0qs$x%v`|Rih8~0)ksp`!q>H<0r!*YzbMy$t6?mBF-r*t5&*xyJ?`8cC;tH874QC>
zarvPK3uC^SW8WbNSx7;(>8+IKMn>a7@CSorcD);;wU_d4%&dCi=Vp#B-`u8;hqOCK
z+9bv1@~Tc8Y8Kw@sD9fX_d2R);eTa%b#vVh85>DTua<iTE-l$x1dDcYvK(IF+q8EM
z*3L&{oXgXf4!YC%=YSP@WH>pxP=$;M<$-^Eu}htCR_Byx8+lV)ZgG01eQ9lLCvXh+
zGAl#3u-c973b&Efhx7c$unR7`u#J+jB<!5GA7d%TXNXw{1K?R0Zu*KS_T=Kih2+=@
z{#da#0)snXY&S#uGqFNT_(96HzhP4Qc)R?d<lIa`f_V~F<%JqNZ>hfA@X`@otawx!
zATm_xrnST2H}>=%WXv!m31N7#p|C@GK1b53#k;w?y3|6b`2geN4t9`^cBf?)*I1`J
zKj>l2n9x*c19pjkQZ7iLx6&sYZLR}wt%_F@sS66`XHBkV1e}fFs@}p{YK2eP1x#B_
zQbH}m7B)FmaVavMjFcD=j^o?z2v8*o@8!Vg5r`dp!GVhIYOApGTa!h?xHbz2=UTny
z+YT)0Bm!A%hdmQVp|sys?~5K@0{N{PEt#o<$|j=za>HyzF~CLh^EG)|EGbaAvlnu<
z|JGn*7*+T)s7I3?nuv>s8!CcPkGdICGWBMx$7J}&)x5vI6v?L7!+aL9GD+jm3d))%
zkc`GHvQq{rR`S+M_NRPz3yMu~UEKnnG9Q^K6)f1c*tlrXpDyAObFZxU!6^Qy<8xs+
z``+yoW8c2LeKNtYblP^fuD(<L*Oh~j0#*HU<%tmF%%-GIJ4#xwI|nMB?}mnXX-efF
z(N}eK%QwdgWi&3f>_p{{t2rM`$}b58!ay1T1lXKHvcss)_71oQ3kNn7*0`ihT<hzj
zt#o4s4mcFq*<;Ljh_lA!#pfH;y*eBE;M0SF+Ms{(r?$34eLiP=Kd<;|Rek-U0AW1$
z4Nh_sc<z%@<d4?wudG8HXkamWIRG1(uQ_UO9A`x)b&R_@+277GL;$j{iVsd40&UNC
zXWW1sCz+1w(6eduF9H5Qd^m*RI1X-68HD&Q>j-o=n&|IxGnoG6fFq?GZS={?G`(0G
z7HN?b=0nEmam}5JQYisRAOq&27pn^NU5ZCN_V-{uQ||Xv0c*UwsoH}!25uvXW~<_)
z9nFw8Tb({x^*(9Z6@uXXWT2v=Zk-?7`&`$<{dMG3`Exf#1$rY5i7KJCFD(c;&D~Cs
zaJ|Gzpgj(8L+8$(I1I<mws~Y!gNdymDslLyo~QXhn$wf}eS=x@ZKKfXC#roMW3E`n
zFBv*_xMynl4ju=My+>k=MV~p~9#P>l!o#|!6uH=L$X0S>WLoI(L$gzgXk%+SLrA}X
zeN+{a8*8LpHS~$C!`8Kcq>6+NqD_J1Z?>t?$eNT_z?@`iP@lPA+-yaYZpi23gC>kz
z(R+N7Be&-2&C2XgN?Uw($bzeuJO=)(q$KqKkbn6b)JsA+ZN+)UU$&tFtjY8|US;&&
z7dqGewfNofD`D{xozzz2WeB3CM<^Td4ri{g(7;j8JPZD0#Uwa@uU_^Y_I=t7>N?yx
zD`H&UH0DP=g^qdeL6@IOx=}O6nG!T3AxMJy=5r7=&1GSBRH4ZkH|mOc*Ys6`Q#@oX
zMXw2o*--#~zJyX36=470B1GVr>E8jbKuS3BDl7nL8L0At|2#`jp}^!i07y7vW-47q
zYvn>pQlBV^gH<BEb}Vm9s+%)i@P4Q$-LGD2HNJrQiW1j>&D`&5;JYcg_fXynyhuhB
zlH*4|g{c1oIKI5r{1(=D7%z+?P3!<|Kz8D!Lw><AwKiz^*c4gE-B>IN+iZ*qA&{ai
zXEbZQ{cJ32cdfoLQ-*>X0ydr*Gop_b0JV>>O(=W}iHU$3`{T6jy#FQ*qeVC7+%6cT
zd^Vbrai7_%y~si>jcAL`4h;W8b2EJFOwrLSw{Y`_yPU2!FEy$;bAS>An1HbI@G(Gc
zMKV|}jcp1SKUz8Hmr3DfN>)XQAq9}PX*Kxl7M_MRY4R=k#4o7xBT40*_~^aGmJd8R
zyX7=)|E1qVu$HJ-B2}hTtQ@D=cxnvhfO!S1)R$)3CZ4k3j0D!WWs@fEhkibqBY;3W
z#6WO<)_hKh8I5#|qIW{wKdeevfCvD-Kks*fo&(e_w-Z4DT?YzF9cnY-%V8|^V6teO
zfI~E^MYbNn!n#K-^c2=hpkfV1c?iME<bgQ|RPXp>aHzK|h_6J!3{ncV?nsK^m}eCJ
z=ue<$%GBFNU*w7#6_XkyCKWNtUkRlG3OkKJONLP_Q#LOcm<NQkPy!jARz7>TnLH#<
z+tX8|deY`a95F)=QxL;PA5~ICJw03!sbl7Oqcw|0zeDO(@A$53BgYpAF-QY&PfDM8
z?0(}Y{9{9Rt!aD<%$z%(`o`n#OS_JhfItu~!XPsa*3S=b_C>TA>W#X>@wOvoPjTYw
z5X1c!)|sAGx11z*Yml5w%daBZV&aAQ7vd%_*(7!NfplUOiGbDH(3U`+u@9H)DYb_N
z6I43_iwUIFUiJ)ithJy&<Z++$y#9ln<|hIhB+E}*E>QX`8?$}{^O6oN0e!T5y@`yp
zBC?A?LpCSBj_o^g9J?<)9akk$;8naFd~eUOFkSfrGq%HK_Dg@nH$I?emw+VjCSD?V
zzTYV6wITN0zp9f4tjaK1q4qQt=u$4`I-5?EQ(~M=EKq$8UJZBZ693SBQf=1z80!q#
z@A=-QBTwa$1IetBMTi)>`z*c~{ikOjx`8VGhm_0w0sV)-x@fjN=W*rc!&%_uO|fje
z^|n!p<}-Q6vZBaQ5v@U0PSwrhhjno5(>9Zoef>t|)TMSz0w7L#-?AD@88+$@dtdTq
zS#~}+XsQGbM<&!n7i$NbV3ZaI8j^(n#57x3B-GiQ=rb8^!5QqLqn8(poYiY5EEP(=
zr@Xkxy`bT(8JRwxx17g%hW?0?EkQyev)S>ZV(JXba>zjZ3oeVEUv90*#7*1Bs88<L
z4+GZ*Ye&-kkXgAE3L^3ahN*Hmp_pl9w&}vnHP|B$Sg(X>x4{xBp5uoZ{T#7IZt_-D
z<~F><P8X2%(;Wg*RTVnxH&Pp*M5N=4bE{A<r(~-}d`g#@-6v(twnvr*9kf^z#xzPs
zd?C(aGaFR)Pp%&Joh<jfs?(z>nERVcM8_=VIz$}&L&DpL+W>Du4entwHk)oHjyH_a
zL{`+$#J{rfCKV~1qh=Z8fW1wU8{!I?<wGEulURsEF2jLSD?wHfzjhMwou3D6)AQ#s
z@JdwgZddqW;_ppTdqyar5g&BM7A4<}nS!manJ`}EjSZV*XU50O+vJl(msVS`u^?z>
z7F%j-qTL>@$4UG<uX|BuQjy)Ev&~QYGdhRmMn!)8MWs51F@Kg>(MC?)V2wp7oN{_w
zjzL$tO>yIXEsxIZ(QXhve9`dXeb!8W7&Qt8mCc9@h*!ggpv3&tx?xi~35()91#3+$
zkQ!!cDR*PSFyk7vD|N`H&gml~{bgy3V<(aA*IVZ5M&6}`l^*O3S9KMQMjK0==;i_K
zTk$~VoA`Z?d;?vZKq4cp7NEKyuDS}2A2g3D;uZ>^98Xwsa}E+?Q!!{zWK_Liv3%1+
zB8FG^v^wRvGbgdCreg1APdo>>c^)A##$)!Mszss#EC0WH15k4;iu8*U3@MHjtf-gD
zX)<5I-IXnDk;P*W?52VX-_23W9~N2Vps4xKlbB^b{w+`@OTQzC@xz`f^;{vUMB0sU
zMj|v!owHN?tI)=rBv#nEN4)n;LYJxJM#3>QJ}tW=6z%332PpkqGh^MUYa_O3*uh__
zg_R2H8g<oqlOka842Dq**kuZuY<7-+*|R<}Vj``WpchtiGNc&j4lhiyV}1X)Ek>25
zx?_MVM2D+Cz!{$<XK=Xw@7iUp6YLlxuqwD&)R4Xo3DaMKcG!_sfq`uo;{2rc)(cDx
zH2Q(`b3P04V7+%rjMEoI+Y%ZuGq;wMq)RegO>vQ7F~5$?#&7cSgXR5ZVLEbSp~x(&
z*8aALcCe?}J`L-Mv)&U5S_rAA1D60?hUO*=JT+lKcXu;03lY#7NZ~z-$)04^R=0Qb
zl0cM)x55E*st6yGl51|qF5?K_E}kE&kvXwQ*jc~c;~{4PU-Q5;R<#jHz&E}cH)wM6
zN}_l;vMtKvFy8Rn-j3@gtXp^@hP~Z+KPS8S09~G3Z#~D;y54x70MDemVAhNcK4E2O
z461v2T3#@S=t@NH>>0caDB+u{x9$0`2xK~I2BS#gpH;8a(PJ}DoW^7(K^!VK@}<(b
z?}q|6agVqXo!^s9&{#R$(z6=Qrcc2lG5Z6}j;7T>lxdYCtfOj%pHf=N474t#Tm5F<
zbmK_$W@^{xc7Njil@XX1ZiC<+PR@5onW-0l5ow_9qLpZp<9dDXxb2Nv%3E5Jr`7~_
zx(7fed@Kbvy1nP;?N_&$IT5d~4d%8--$)?(p~09w{HchSl`=yTDPGr{fYHWhI*!=V
zAL7$rg}T}|&=l?QlRpyx7D4$W|4v9JSo#o>G(kllO*NY;R2W!@jf`UpF_HsHA*w@A
zzI}zIf3~oLtdce93@$y#qK?M}swG@sTbO*DpShCuz%UCS`z188AR=wvYa)<p<Zm3N
zbT@`xpIth(f19IYJSY{fMXk3IeUJi{;zIE5Eip=_scTc*?ZymO&z}G=fkGmQ*m^+t
z-Og=Y8HRR6E%pnz|N1@%90rzYr==dvmUimfL!XGJWX1HZ&^BlDhac#S*a~WBbv1oA
zalng)(_ycO6?jDBvlW0y%1dddo1CxxvQnfuL<h4#B9zz+Vv#(gSw}5p(_wn{ZVFf!
zYDRcQiwn>6zTOeQ5zJ}RjLA38^dJJlOw$Gf`TcmLxO%ju;*dm^{JBHaYSa109zxME
z8K8nhIDoU0dsRlK_p6dMY>q0}(GD6td;jC{$1#~r%~Pd0AY(v3u-?l5I(|O4oi>;k
zhO=PcxvV8u+~Zw~Ymf<o1VTRtZKmC*B@=h;W!BnJt=%Gbt9jrcT61X#UB!7=*4ABS
z>N!EO3+XS>j-UaP$}M9!J?(C1>$Ia7Lk3tk{j$5Xu-!G+?c{;ax)F|H;Tf;6WyM_&
zDh@Nn@ZGwo;bS0SIJ%y(qr(m-BqHx8`YcgOS-Wi{ZQ4_B+vW;bQc(?-d?h8$LncP!
zf$L+bQDa%N$by3k5<xlkp1x`mqbjmh)h2`@#@)`7zSJAG+{y4Rt%-ye*DqM#^qq=-
zT%cY?N^12~!M`NBMNu)BAPbV*NjreaKZ+Tl*{@NWIj6B3W1dOjF8qyZY%8M|l0y!$
z%mE&+OitCi=B2%0ed)L!Y>~Kz_cN#RZ#NtCRvStV6t%w=79RJ=x-BKsE3p=t|I$q*
zz^D9|j&$|ZsC~u8SKG(iI42f#y2yX!vMET(@Nr?g2vF*D-BF41>=5Ole)JK{G=qv!
zE7$u9<%;3gZkeb2U2T`T_tXCc-ygd*_HlY8_Eh<@TubHz;^hoPKxFjLaT<gK{3_dS
zg3WNsbsidP!JvqfvuEFzFoalod`~uaKC!4O)$jCaRa!vR%h*8SN;r|@YQJ`Z{)F&f
zyx~D=%>|HKPIw1)UfZ<#tv<PrhQ?}2Eb%Y*K9U0nw}h?oN&pm$!CNG5piG?%*g)fm
zrR4XvjtNjV@gQHlW;4u!jVf7QEyddIJgcvHi-#|1FUW!@^m!*43kn>_TmLc?|EV_<
z>41FT#IN1sGUdRy<mwQxz2kj8<{DL<d+BWlXlhbjINLcJ#=yP`rb7bt(7yT^tlT1|
z)5^vPmC=N5$u&~5?$CWmW|TfGdq=G>CRyzZ_xk|%&e6@Fro-TQWAUvl)xH+64k#aj
zVz?6}d)e8N7L5ZBYWFuHNyijtectf<udN2@22#=ipiQ34FDirjnyUW#@pThV``biI
z!HoG0L3DBBq-E^?Qd|l6$gqOx16#tSv1V5GkdRVrJu&#Rvy$)VUdBY%u6b`{x1zVf
zDPFJ&Rg-U&e>`2`6@7IQzu+KIO`VnY;`!sz=RVluPU0s)mQ$#3p#!k4K_jQC*Tj`O
zVZ=yg7=UDGcxi}q`CeB*-wo@Zfh<HjL#?x4(mXr@+BvzHU}=$VWZEJ5NnB8z4#|;$
z6ss>=vsm|sVK53yVU%631znXHfAvePT;`#7ZM^*9%b7Xau@rqqIhD7fx1o8_F$cFH
z7PXApIC)HZh_a6DUMp@<SSlKOH%9H76swfoy)tVv0K{kc{*NCyZrWMbSUe7%MYKdb
z-;sP%T{y^rJ7qfSFrs-Kv!kMK16lGb+JTt|-EvAOi-G}!NY6-fqk(OBxXAg1LeLY&
zssJsd1_<eC+>vcPi{X`}%bWuo!A74JR7E_!+a^JCPUq;9GUdLx(zz*EVU<Op3bEdM
z)uyV)UV1);xcA=G>i8wPUf#u^HRPE$dFK$m76$Gl8W9aGxA6DqapF^nH_b2{k_~*(
zx}Zs!(UYm(R{BHfu;BEyAbd+iB}x*$wWv9Xxp@#Q@ww%Yr|)}MoW&=zD#phpr0x61
zla&mAc#bVULN~$^9Sat_ny3&4ch*2?&eU{AH_oLuNP()h;E4P?BOnc06nnZ_YjBQ>
zW<E_PAycc@{gJ-i`0P~D_LbKxc~eJ9NRq^WxH74xVON%HA#a|t_8iJvQzgpKLTYTJ
zpdP`0>kFbD*!iFR#gZ8D8dJ3<g4}+GO`Kqh{QI?sGO288q9X3fDtZ@T6%n6Dow4Z<
z^uC60NtXF}*FzAxXID1tTQdi<54p4jz#{UxjL25H^9Vl|+jvvm#?r8@s~6d(8(_4T
zN;0NEAIR*&%Nk>O{AD|7I=Hez;u%dpOBg4{4_xwosBETZ^~p&1j23i$3E%j@)4Btj
z4NAg7HlS6_&F0=ci3;TW+Sx#%VdDMJ>4_tVFtz5~_bKm%u*-C`uyM@W<EXFaB<H<D
zy(wDCt2|J%eN)DT@-(q1ifrM?Li+ZkWGGcSDICXKjP_X2O(8pe6)u4qs*?SFPWCj9
z@k)ZZNU?<3+|w4EuTX(fWaq>Qkm#Z(hn+A%2wWB_o0=;9poc9B*<YZnuzd$?)g^O5
ztuh9#UXojq+2DpK@8ni}S*z)a;|gJj$tW9E$v!LuKo3koId<VDiY1wTwV0zjA8<^o
zs~Q}<!DxEQ|4~p6Nc#)zGL0&4>9$T&0g8E&&+3|igFI2Iz5W=`Pgt!>HNqA<P&X?e
zr)WvWVvoiP&Lr{i<dlmt2&u<$d-`c8zp$45#SX;rN;Kc7khwIkiQZGsRJR?7;jC86
z*AK{W))27$=eR^vKF84QxT_#Is^;QakHG%vFFBlDKWK$#x`O`v_~oLyX00}5^jenq
ziv!)YsPSkiFUWgM`l0ktdXV~v34$&%c&Uc{G+ajV=^6e8BM6lSlXAsiPEs8|vs%g$
z(Br#F*-F`UuAT2|*zK3E=V1}&uoS`v#E@R)OhnRd593o=gJw_dnI9$FGmXv5*swVk
z9m<<0JgrrRON@8J{e;uXyuCxby>YiKQkWTj@SUW#E@Tn`Y95cD0o}<;#?}*{QV9#`
zayE%0t`kRmkQkU_vTvk;T6h2GOv&06w{#%fE68d(s!!5apIKrUucOH(0W}{B5!}2y
zC>ySI*W>X4&+_bAS*a*~WrY)rLZYnrAW~Wf)*;FWov7<Mdk+LLJnbs9^k%t}QQeP~
zoa1;iiL{z@&rAbXwU;P@(3OO-s2m*`4vWwPu8c~D#Moqu{+mTr1DY_UW4>7u?UCi3
zM{C4{h<ck@Q7H)iPxarUzb)K~qgxVwm*^s{mg;&L0^}Rn@-%D#mbj;Ne`aXZ`WxvK
zHy2H^cJ5Qel=lJt+kharKuG`7OK;)VRh#bfF|`9AmS}@?@H*>ZaWU_Q)L>-HnD0x<
zdm>-eS*fCy#3Xrs?NWD#M0T%bF2&a3AEF(>-CLiiJg;~PFmMdfVbcW_UrOjvC|`xd
zZX~5jw-}Q>ajU!vYZN6<Gu?&-s%e52DRI*JrIlfxtrEMGOHgf*P`as34YjzL8P@vV
z=IHXk0f!_0fC^H6Z$v$qOmud!hJ31OtLpau*xs-ATOGE4eE==0iqJ$%+Lx!Ght}`+
zy*xs&bXITI%%rAl1CnZsSR3Qh@ktDjYKDk{`awRUuOmEH>E9QW(#p?97t+594VbwB
zw%qSXx~>r}$Pi4Dg<+n2T}?Jf%ipyzK^Fa?c*)$rU51>hK*OXg-U2c{^4W&LL_W0%
zbWU?NIwHorvZ_{FlfN=q|Aa=A8BcCYT43?YUaoI(V4ni2tH1WI!JLlrae!GjnEV=*
zA;vbMxi7et(qmCNyoS>3ghBu;_GC1gVNUjK6s!=1cUb{QwG>hMy1jC}_%S)YA^ws}
zo!!M)yMT$_BIP>FWGlHS+$f^WURca6lqIWbB>HBeWJbcaT|VJ!64T|eDYXBa0xsf~
zB-aVfk=k;lkVNu~!P2O=w828ZwP9fWc^fGQ{UA)zjL55MR$w1!aO04zYM~M)d0C<5
zQ$?ps-p=<~<%a8fdu+#cX1&b$|H}h10od&SnpQ!vNMhzeH+bf6m9*=!k!5b_IQHs^
z52w4jai6^S=i1EF495?sP)$=yEYhVSZ&Y%w`*`$Og)Lm@j^GOVir8cLs!Lluk2gaT
z2n^0pmGm+*Dq)}ZLiAF$Nuz+3k`cH3Ud+94RW+C4aReq6<jhCpFp^y&9Uk<MDzmFS
zUULh$M}T|^TkQe8GbL4=!x4pEChkHdTCD0@P<PnZXo^4Fvhq#lgGTz_axxlzUaewn
zMF=sout-*vO7I$wiY1kB$80j=(VLEIs}ZGr7rH{tRw>lCWCo%ES^kWlVJE^M?epbk
zb=n)Oga-ZwCf#7MS^xM|#MGJXKek&^66d@sD;xaTe1@u<`xrgs<gu62@$dm~u<4$&
zvw`hK^nAcewS=SO#9w{1sw2I^HVlLln36}%77dD>65xpSAyNeP_bd?K-)X{*te089
zm>tkRqW)$o)nuwv`a@u&#K|06<G}3;ALRRzwE+pg6lOd(l-$;Cs>B$hm8h95w)e#F
zxRO|Z={ZdDuOS<b?bj|%Y31|7z6lA{%QR=Trr*Iq;ihEq=kSLijw1oNngY$&+**G;
z(f3_`Jd>w897NF^dDx3UU;U5r<5rl;z38${c?T<7AvLk9GHc!#d}qwbrPc_tii7|5
zPwbnwi|&xUflOn9-*GHG5AJ$<TITc9TOukx8%T(PBsO_tnI1ko8!bC1nU`qh8eGm5
zHL4~bBo>8@S_B;PGf^o8lA&<6v_hd&mUnqwZ^+B6FI?XUF7HSxmxy&)ngD>qh2ykk
zOP@7hnt=k?6;`#4iJ{fXuUWV&^-IfBo%I9a-JDI1>(Ph2G=X9BfK+IcdD(zPil>ZX
zfFObLnOH;@UowjeOqA?`NFaKUg>Mdeo7Qb(eIDhnMi<iNb2laolRBEO2vvP)=GiC;
zh){M@k5A%i%r4(x*9kR@oY|}uL(%jJ`UCd9DB~@A#b9R#yx&IHuVr;{ZT0{haZ-%k
zZNjeUegB<?v{b0kp}lgCpFphvTl>M>?EI4d-OmmU{*|FCESXqtZ!;GChAiJYiGJH4
zW#ww>He-U^6)1d@!o=sSTHQi>-J70uPumvANDVwtzA1S+14zzXnEf1RD7WxI_ng}f
z-Sc2c6_y%=Oq4n^)}YS+&!7l$894WUujf1oXGYu?)78Pa0|fEFpv*Cvl87=IfLl{F
z%FC9%g%o5SKNravjhqU;-{lWF)0{UVt$rdB*%mQ|WKnwzIKF-siKfz2&QWz+Je5zz
zVhlEf;R0vtJx!>^BJ{4Dsp+1<+&-&x=6Wqls=G6UCy*k-!ckvi(Mo&ZVNYhQOvL(>
zriRgB2s?>*0(#>rK-Kol<R<lqIlHPR>%SQzJR^d8(hsV$iHU2L`hU}ZZWAa+BB{}h
zS4{4@9P4l-l{~R1V3e!C1sb`U%E<=G$0RyMCWd0>aiIoDzMGCWOd9%~&ZiY4S7jCj
z`4G3+=0pO|G4MNbTS509HCW=Mb^v>8M6llC2I8zjReXz;U9l+LH9cD4<Q_Ete#|fj
z1mvV6F{UR^wRyTzX?y+bnjdjoNxdBg0NUvMUHZo5Z!+T2=oCwQ_a4d;4?U&fFG{M#
z<})af=m}GJtZn?kl9%?g0ar;YA1@qiWQJ8iVY{%v8U)W^(3JiR&n%L3LKQXunZRXG
ze@uy;_{B6K1gU7uTHU!_u27G*M-StDIlQy<nPB3;)*`5chySL?Cy0^x%=#DDN*$!C
zM}{!#f1Ttk-*mhAH2J=45ET*YIS3-V&G=k((;R*>m6_T+dMDYlA%O^wVW+vzY{LO2
zhuzNDVPia!F)ozGito#6Z{Hl0NW6C?asH%PZR|f=h^RQF#`OaIwAiB>oEZ0XU#JTy
zdKlB>-rwe1`WFmLp)mJLdK-n%Szrv{!`n)n+0z0)uroPaHc(1E=ZTV)`bT;8jS@vf
zGD8rJ?+voPNdR;AKvwQU5zTDw0h3-dsWC0+j}X*P{uzi|Py~-|SpX+>8QyX6@w13~
z90JIPRaIWKt$J))l5^6iuGO$(x*vwCIKanAuQ8^0A_W~I>LT&Yw<XNLQZ$MSHB8Tv
zPp&WXcD}I~(uVSgQK-stEjFgICowO#@4E0&GnP=`&G9g{ZVUCR*$SC2r-m~Dse*zx
z#k7*xA3m9xzWDRA%Tu7#3Mu^)zGyuVM~r_5H%mV*T!%LvsN<|zxR@C4^tvcU#11Jh
zU)_;;e(4fA*>8*JXP)ct;a=}{tasRacz@F7k>Qqw>v?DxDH_wp+|G^}uM3B<{;Qt;
zJ&z{;i>=B<NBTsV`GNv?-KFJKFAajT`#>MYu#&=J4*7t*>if*<IN=Mb&@2)bM%oYD
z{cP4+pmD7i_|oYEpmaApso~po^1u=Gko~WSAdHw4BlGQJv<5+J4$71v5uPF?PahWo
z8AXpg5|LV&+KbRD6X5IHY!J-AkpVyDJdWLJZCRrRj%8s5z_b`}l7C_vb!5ofryW)z
zg&JW~#vMwd8Qj`kM1PhNI8U`#%49PwjT?(sDu_qD`SE+u<8U3@xc9isvdOMk+*D^!
zUZSN6oh7GE)et0%Rl=jk|Cv0#NfUax(5XP*`3<PW1%<(uT?MW`pF^;mu)>9!R(2Ux
zB=8CE?jy5XVWU2yY@n#9L%29^kf72*QjFI;6`Iqq!@YqF=O;qtv5{8NetA3fN1+US
z*<0xe_!%24w!&+m=w*PC7w+-FW8_0Vz$Qnwj|j=|=fJ|n<K6Z<vAUYwF;vuz$%|k$
z_HD`qX(9O*M3UFJPf8w<-+X6Xd<@2c>ahUv8ujr~R9aEG^cw{g-3$)rCc@E*Kn3ww
z);Kl4x~#x&!jc6A0qa=fvUO)|5A<mD(rrc|NMIZJK}+UCZI0!*4-ug}W0`k)=2_jh
zAFP2{c~H;r*n;M^fW=?G&~)2<c*^i6ndPmTzAwVvQv2*iiDS}98R|O8q>>lDK$|j}
z8n2J6D61TV?nl5m-RVX<r<r+f{1G5emu#c~kq)IbH!@l_`aL%rJ7JY`r05bsb)f5S
zZRCEHg1*b;EKJM3Lf_f%Zeu=7XqIug1zHCZN~c3QXW3?hs!%cIXMpXJ?wEt~`XNF_
zt&lz=Ie)~_m2blg`b49!4UZH)b#xO}WW)!CFnX<12VAi0E!U}HjN@NIqqE-ljP7>P
zjAI<TkH~l#;(XOyTdn40L16|E#hpjk4psxBMwdZV@uk_@myx7gykuyo<GBFUIgmDr
z=0~N)Je01rug6d7{NHgDGknz#QH9lMP$Tusw{k0~{Vqpnq!+C7f06qS!K)Jh4`V-d
z-_T`#3XdmN9MaGrfeM@c4zQWrO#P3JGyh-hIL^5F?tqy(<Y#$&rDdJNY49%YZ{Ye>
z31Ncgg4agz&)t`Wt{i7-Dhh2eux?g45L~cquIp__NkDl`xzK>x(w@~&o}|Rm(7W)~
z)33_Y%fnHbdEb(wU&UyJ7Cx2Zf?Nt0iy4ZLwe~!;UpsU1?v6kHV@%R@Y4*|jGHKSB
z)p@hSWrmTzwI8cV$tKh>NDxJ<b1S4@nU4~Miyv$}{0{i<ra>1By~>{WdLSZ`yRXVh
z2%uK2p%Xp@-ULm{mom^K^i2u<&veKpCH1qOxwj;XRW~HVx11X`Re9DU;eUS>is-~K
z`<z}aP1sCjEIszvGSWhQjhEo9$K1^)@R*8@r)T=$t5#D~(H`Oj=dx`@w{%7^fba!P
z3rV#xwDjmrF~KfLX+;I=d(1{<hNdiJM{bPxw%N7}$Ikd7@#_0=m}D_}#t>c+S=}jT
zKR_j6idQUciuBDwCeVY7MX5&}a*hAZ3IXbp{5W5g+REyq$!+2#TQSMsrfZ8P1HiOG
zC0h~wlHqe^{pDyPg{hRE14Rl_FImcyJ<xhS&qtmj6q5fa^Y5y;dw!0LRIfV~w^&U>
zi@{k})yR3s{-mA>)GMr);I>`J*a)mEQu=JKJv9_E9_zx?2W74bzsM}MtJLP3h>ZfN
z(g+7Y9ByM7y3xFk@?YpLrL<CYL*!ymzN=S(MC*oamx1lJMoJa=uzm$MC;;^%ku8Tk
z){UeV&^3T&zp6XucX=Wr2-$)->Af`H1@W+Y>Sd{u4~|EeNjumL8kN*lyYaNv*ao0g
zP_|SUvz^Rs3QlKqq0M)0v=<%ZHGeVXj_QvRMSGVn)km(L${McOXQ1~{Doda@{p0)U
z(tc&fZbBGP$)jgmhmnKM(kx3{quJUio^c2>(u<H7!9MYkhrKn^^SSs-MQFRchIVi}
z7(FDS%SIGl_5vx#!zn<dT|XkabZTY(0;-kkeV`^FbHey;Bex3;F1RWLD5qJ9XntfN
zO_Zb$2O%?L8$=(U$3S?q>Xv{LtPugP0A)1kOqU+;lipW2a3l!6T27y!5mo<Jk^Zl`
zKu-ns(51SGZ4ub!LdJe_2(*J~%m%cQD$`6VtVNlVqXjjzUyJ1}ZO_^k2dd-h^15he
zWLo>8FC@2PAOGLQs3<MpXVs?qUDpj9OZE*g!Kj=PBATd-w=h~PCPJ}-6hrl-aN~vW
z5rFk4QZ>EeJImaFiiEe@H)JZ)q3r6J4PJK`sz33Pzp;f>3C@|+0x;U_tvoQTP9p0S
zl42@*x_`bo%KM`M9~Eg|sNM1hK%l*4Cr&U9q<GNATl^^S(rUW#H4pj%O$%QuLekdZ
zaq|C!rZnHO^n6N+7NUUQWKs9LDU>Vk)~hgO?{<Sw4NCW9ejA8DtK&``diXK3X5QQm
zZQG_zuy!4>I&Lkg3+LF|btjI|>-l1FK6mmW`fpd)KeTzI#-uWytWL7o^T~9rZElUp
zOb9oQ`FBfB{vYDrflIJv*%mF^wr$(C-Ni23=u(%vY}>YN+qP}<_IqRZzURDqzB{(Y
zc>iF{m^o)gu854pW2e<k=kWcB-pI+gV|{kV8iwS2%G4JFk`j(vPa@@!EgD_EwlW;i
z*6kpuHwuG>R-dHQE8()uW3b)Jr;ON1#Kk_2=`E0Yd+Rw7@bwf^4*Z~3vy%2i`?T(%
zp%@%elUYOG_gRAEkGXSajz%?h-h!fTv7LdG)rEn{K~V9-Xn~<)cve)4kHNbSq3pr7
zy*9C^dxCqq<m2}YNK{qu&sfA_i1LwwYZs^NtGQ!=a{8qz-&43jeSyQxbC%YD-%VgJ
zLWsXB6*R66M`S?}pXoR!yH)Z<gs8%6t73rqt3b>n{Vm8t6Qc~-@6FC9rYb~u3L8`1
z2vI~KKb)V~RzCI=1qysWk*Vlnlp{HY=5OhkU~#L068w9W4Mx{)Waki-18*2~u>;Ud
zP5n1zol-jAv|E~!vgmU8Uvl24n_<^GB-4*Y+>*TGcOSkkK|1J|iDKfpj=cj^ij$Eh
z0&gh_`cpNho^QMRyV+R{qmF@%By_h!vbCMnFBCFvRp(#_n8q?T>Q2)xDpS-Jbjyp3
zVT9kSlDtT}$qtilcU3e=RJRQ_nF!^E?2}K{@oGK}m`9t8k!gEtZ}rWG%1V&8L?y5x
zO<EJq^OHZlm?v!LlV91@`n~d01;aae{%CFoxZtlgy2{f`>4U*fDK~Irb}AbTG7BQv
zD!-{aD3iJdj14v&3ZSPrmnu0ja&4`BY!#?j?LeT3nuyUar2gg(swj7GK{AQYh|IJd
zkSCz0158oe#1)IDyk_7tonJ73rv^=N74hK<YH<KDOz%Hhhi`qrs{&-ZQ0wr82}{>b
zn=^o}o-y5?A@6Blm~mVenjIz%lFdw@FIrqFJ(s-l<*XZ0*+lfP%bEO<De2gZ;4W~f
zeiRl(M#a6zF;UB|T2nfT=yR0<1=6D7Tyu<FUM07qX1|RyP`Yuo9b3y{0+sL>$33jr
z@CKX@?`;D5XcEzSv3CTKaO+=&rjat$PMoYu+>we&mpuk-c-v{tmRoge6l9NouY}YE
z%GPRk9D;<LHX~(Nl!LlyNiW=H?$?q7BA=+p7Rfp8yl1q2@$9uTbDE}2*W*kH8~O|d
zkk5p1#v4d}CXDM>wA>?JXJ3Gp)}}#h<oXqgxRVLNZn9qAC>l0^^LPOxvNW83=y2xS
znwyXICXbQoP-5s|8Gn3o-}?1ndXxogyxdba(OG71oWaE-M>maBrS@f{F~ahRTA>kj
z3y`2%3j!~`PkdvSF6XeeAp)cWdy7zObi;oY6tY(Tpoz;wtB|G?IZYs%(7mlGEyBA@
zLTQ{4Ql39@$j6P1ef}%pQRi|^s5;wNkow~hq!RWz0;hhB+*6v2$Jp>;tH}50ozwPK
z8B~dz9h&Hlj4Gy1SMui2|6!fv^!2FThKpcAE)h$!*Y<tO;Zx-1AZnu9IMka|?6vgu
zYrxoq#TLm;!+WY^@}$`W@A7n7jVdM?xPgNjyq`Y{3!Rq(8<POqkgnXrYiSzPsvSKV
z55I#J9*s!AH%JT(D!~N;j$86;0rU{i`KJ8TX+|VpCp_-lzdun`Xbq7vXc=q%mxUYe
zuujdXxzZO9&(IR$;+cj@=%`*uP?KSo5!KmQ*t{&0_d4}=qJunZW(@d)y)+ZoE_D3)
zW_nikv0ffrFQhRcK)q1X%r-(4H%hJeo&`d^$k{$f@EmUp^UX0nRlx@rs!lSk&TsNE
z!fRg}<ClRVQEe+?2hWtdbQPW&LnWu*yum=n_|tx%>BhvoXSC~=I^KAjuSm=Iv*;5D
zn_gnBM$FG80PD_lbp(DhOlp`f%1(bvOk9O^r=Q9YZw(C#^DJ^h`r7r8d6CFqD8yP{
zqUdzGBX}155%Nc|<G|^ErPzP|U#a_?WK=TtcStZOY3M>ij){XF_HZwC57#>G%GzC+
zcLqq)u4sMX;m!+n4Ie-lLpjAGlLc4Q*5}I0?@(F(Z7_bg#^)jcI75;~qrj75jGcw%
zNOslj0;=XCu|E~;s(D|(I=B>}?;;7)1FUm(4B3tjs4f(-eva{0^~LlRX`~3@Ci1Du
zBnrwW9!2*c9UpNCMvJ6FM}?~wROjdO%*dz7-t{N7uj-e3TecFmibq5rPHLErwsvr#
z6+syl@1lmFglJUf%*+^KWlZpcs7HlccP%gP1}LXa4wo4+fQ^nPtX;*~k(pySXFCad
zkYHL@yWmU?Xjj`B{+>}$4-O&tFcr*oecW6)?9(t2#R*BfksY{sQ-fnHd$G=*EUsos
zOWL+@n}xr|{_d?Ng#wmf<v7@sg`%4hkhVhgmP$+`{V=ZXMJX%oJ%w&izWIphw^lXe
zVc>;JEPa^=?bJr`O&F~BhMC7>$#_Pf15J^D4Ht4WhzoV-9v@p3u(SH4i2db5B0vU9
zsOq}yG<}+hclTp22cJ91)xS%N41Cw}9xM0-9XXDe8tKQ+-E#;q)ILPCX@N>tORG|&
zZ+d=;kh$;qDyUgoTuEDNf}jx)3eGqCn=j@NQ?$Oaa$_|tPU0`k8oqOMSG^I}Ru=xG
zdQR7Q6#8hI&|*3JH{HmMz=6A~8%K=!kH@Zu^~xj7<4$p$p~wg(#Y>Usom1SOE0_x}
zc_U+cOT6ReF4Fth?F#&h9?B>SrA)%VZemF!P+lJJo7*9o5Ec;tT`rzkn-_d<tdAPX
zN_@+$c($P31N{g0{PSXlXNLQgzN|119m`ML2f*jqPtH~gRJ6IGcNM`)UKM+}p^u5{
zPi7WBv+bP7MJq6@JIJoKV=-edJplwJD?F8n0EG!dW4KS(?Ayk7GFX<wojNchmIJMM
zzC7l&p<#q;4aCg22Q#i9{1H9fHp6H^^rHj2HmDXm)r2_4-;;Z0y9>GoE3$9Df6+2I
zdWGT>rP7FhkTF6sQ`vMAvwC=-+904E<I2LocNqA62@rmkVM923*^yAF)(AK~vJ|-}
z;~Blr^V%kw@#BnZ9W_r`w~EnMUvg5z^vosr>ohj+HYWuMdY$%LHm?5t47mWD{~r|U
z0(4CTG;x{_?ky`VI%x6lX7$My8&;#!Po|a<e@5~*I~d$mz|wIm<HA;0WkP7T9=9TY
zgwrMN8tIMXFcC~8R)$9FmDf!+Ad~r#$jIZ->RO-Zw~>`kL|;${&g|}ZwCn>Xy{Ehl
z^5EZRwMZ23RU>dC%SG^>AzB1AFyy0r7#nUDfxQT;A6~;8+@bs6!`<~SkF!u%agz8_
zR*&aWCp)f|mS)UK5Y=6V&a~SAAo)!ryC5f6aFnKk6dq;Cz_K5KxOZyCCHvnU+In@r
z)4Jm4kYI$1)_p-zd?90=3X4skz<1BubTr26)}-**;w#8JuuwbHR=3~#F#xr&s5(U@
zF%}A&1%eOP>&H-WoZzqy@+MO}WqS_|x>^&&VH%`S%W5gzs_u-@?el2cK4r2DDr_@Z
zt*^!|QWi@u@rrQP9Q2`hlMxSXB1)!K@#`=OyiT@C5|1v8)Tx&4N5f)(KV>|z;@-D(
zWT0O*D~65RM}tZ^?*umbMvOFCa&n4*QLQHI<syMe8|0|=LwLctWKePqYNxKl=uiqj
zxQ$}VWeZQC+MUu9<4u*XBi%oT&2-$M+(lL*FARCUaU_D?l#(T$oseXUJ|R=YXmjxv
zaeN5Zy^aY80hDb)5F)=|eAtDuBzfwRKJzi(7ps51J2v(Qm@BhZ>*rDKF*)gQBgzgY
z3cGwoYZZ9Wo{O14P#G&1f@gHe1M!nmmn18VbK1W)hP!}AaUZ5#FY+0eJ2kCuZ50;G
ztlE?K<jTm8n2Wj5w?%9K)iMka&#Dk|nL8!QJ_Lqj5N(5vKMIar(8^xw(#24}aCL<a
zU)lzII4EYN#MgCq@bGRO%^W~h4%UWPRQ}`&ZyH8b5A7J)6mUdh*`}_VHqn?~YlC*3
z5&m>hSI8-dRv+Xc(*nWwn{9g;5(5A;t^9rppDIM$9(~0*f8E*$ls5eH=fS~;CXm8l
zT+(6X*zP$$_%k$aHcFeKqYjl?fgX3dhJX8mg-LdNV=7v**7!4Qn?0*1;ydV50<5{*
zyyfG^C_IG<D%y2kF?y$uX#>}&Fy2&8`hms<$?1gnu$-cbtcx;A#<K-9<ScVJnpf@G
z7s?}rO{2JcPS}ZnYIx785A(9f*BQ5k`Xu3>OA-Ku0Kb1A{?Ap&%F~Qqyf!6vBDtEM
z!`*bY4Y5eFN={52Sqe5LU(2}zn`-6ueC0j3D6F~Xw7C()6>4Fjs`2q^&vxT{2RMGH
zZ+P%#Y7#xGf$&}lhF<p8#$N_E-X-?d@R~McWq%w4kQQL<KllNb)#Rw(^4Q>(lQ;3J
zGRVzCbZY2#Jp=^d*Fhz)P;QA^m1}0;dFDOyUQjoveX$XjcvzM9<NTlTK{zG&r06y1
z%)vv8xxyWXy@Lu}Mc$_l>`K^d3;`pA$gvs7C$%l96j-b^)~{*W7*1>0w&V9J0w(jq
zf+3o=`@*Vk2$s07zWps_0rUb`{A*n4Yf`GbA$Y0kVyE_zM*s#>&ApEIj}>~4yl<)W
z1<!Jn(@qd_jM`dWcK3DPCYJQ)OMegQjZ1qm`K)W9i_K!9xs(<!ztzE4T?-;=_+{uV
zWQ9we0r&Fld@gdKT3)*aLwd)P42tdSN6dvQiI_+(7$W=ffuAJabXZcF9F0O_9<BDs
zCxL{QK*?fq{G=+rIy`!3)N>xIv-PMm-ALW;yK;XNT`xg>QXWnA57Xee{L&?A)AHna
zM-iY}U4lOly#ZGKHHdUaONigqcx&_aemsdvi!My~hFpY&9J4lLn+--mPJc%%h%@h8
z8*QYbW7x#tB{w#YA+nvhE0naYs_jS`V1|B01|)F2q5_iYeT4@BQv2~Pc6-HfY6|bU
zJj}8s5Aae&UyX~ubF~Fu6lKN85C2iu?{7)wlo%j&Gvdi0BO6x_Q0qx9uL3ba)OTF`
zUTZ-4e)^<^NV(e+dp*q?cR*QlhVRn)Z=+<0kfEZ1UpWtjR_L?}eeN;#OGKxAto&|j
zDV5opSNBEnCT$c3RBZju9X{7BwuK#tH21jy*8Oc`Xkl(0$@Rz2$f{DMOX}N41-_!Q
z0arTPNP;nwvc6iS*fH6aN0Xe=RPq<zG8~Z$$9OUNi}y4hrX_eFuPsNT@i1q;?7%LT
z5{O6FeW=2XT}IiADdcm-0D4LlFh5}zHP3fwO93}@VZ6FO88)Chz`{SqWwZyb*=A0Q
z%3WvU(>`{HOP{VQ3vQ7OJR5VPrkAx*1oLL>MwHm8WwHBay;z5ysoM|8(h3Kur<i6!
zDj#3`P|<WYm0Mn_v}S;N5Tw3AN6=S^h?m4GE849V=5_I1vNE)H=#k4GNwDN0GrM^9
zYIh{_@|?mBuU+NqbE2(1z2~yc_f)eoJuw?TE60&%Z#*i=_UOaw@)bICZOw+4@S(&C
z%7(9MHDYUh!W%GCWk`SH5ugOX<*yO`mD5@7!qwopQH|!QNdfL+XzTfhAX<AA2a$eF
zZmm#a$Hq#t1+!2D$G6H~eB@6+)I}h+1CFyY?PV}Tm3QSl7}>tG)y-=B-Rmd;hX46b
zuvsjQU+u#vOUj|xN20_?l2cC+T-=f{+9MEU9D;b2CWuFsS?<q*RAG{)x|<G#TPe=A
zRkQG?Rn~@l{y2o6X8RRC7j8WHqsI+yiv5E1wg-AiadwkuF}uz&+cFY|Co5dAJ8p=`
zR{V~}qp?>PSSs5Tik*^WLTMhR!zh<N-(Rk~^&Or6rG2&^3}j9Z)fOYP_KX?)@1SS_
zM*n{T)y^AE^qn9w{ETQH`%o4(Kzh-Mvog%VnrASqpt|}L3B=tsm{;0XQ=TDFHD4Qo
zt!4Oj2`XezwAd{#$;LGNa}8O3n*nP7PB6y`xasWsTaeN${@-DF0WAGBtpDoY3G}o?
zb={iwDhKA2WX%SNbAd&Y>0OJS=kr+N`viF6{KI*#3Qi%`6v*-Z>0ln8V(H=sSqi$I
zaL*u6Oa|f-59Qrt`F;f^krvHFQ*rAAVG&VB=!7O9Qv6G`ydbmXHsc+69mJ-iQ8b^X
zwef|=(*6@0vgsOh5-ylGEWjZua|6dX$?Dg_9~G|<S<tHkP|fM3AwaI&4i^(i{DvRY
zDFuKRbt-Vy4S0n*1p+r#ajZW7w6*;o7=zyiK{J6gr02EiAP;kSj%nj-YIem^eXfyH
zx?g(I)1;|jk9A$^5>{lV53TMr1O52)xi|UgsYF+uOb-Sy;wEx~hz@{qirhj2V*?(V
zXg3pdmSzewhB8ppT<VI3%#;d0?IiHMB3?{f$`gZ#0K;&W0Uv^lN6i4?+nyhB0rhBD
z)q;!M`^|cwJ5qAWZrt!=>`wp&Ru~z+I*4l@G|-QY<^Fw?f!pD!Lq!Hw+66d~b}(0~
zwXc?WAXtl>rPH!PB)^`g_|tX_#Nq^v#cXKye<g+->JYcspdaPWYSQ5C&k=%e4&p(q
zCt~zJYSWh=&%i@yFt{VwoXEx#WjS%-Y)cs2vPCED8iQKKoAuWvxs@!#&oMdnF0wr^
zSsaOhm#eQ8%8CoBicYbYi(?&^Eg<!aG0Nq#i4@9@Hw$Artko)1Mp~}t|3Udrt=F=N
zM3~hd^cW4iH2x$lhjY7WEmNBtc<KQm^?LLh=gsa8AEmuH7e3p#7at4veb*1NFl8Py
z7~}8yy>AAAqvt}=^xl(XxVL8_W-sf}cRWJ2xIgx2_kLJal{gD`9Ad3i8N&IXvd9%~
zzW#o7jm;M08#F?glD21o-_<!Eo)Y?z^#ml&m^xQo_?VKuw#GUMmN&WWD_o;)@8}3l
z-HPtwK3Y^4V$k7zG1%|X?SI$gKb&y<KkN0sVeGW;W}T(%{>D&br7JmNySb27Fxrt=
zIGceYtHm%htF=SJ@O&V~zo`tsN9ynbQK2VfO4s2vP_h5JcG72-K2XjI3kydo@F62v
zkF8NeW(^I>W$tV@3tunK8zCN>yRD1GnM7xZ0tjNHV2Mx+$qnaVqP)_lyejG-l7^Mz
zJU8TU`c%q7!5@*AVLs?4lT@aN%0AhJlNTyj`=ZjpeE<x9H2;Ume;s8jm$uO;PZx`&
zCWpY=^`V+N7qtxig&GDnE8tjAf{G}@#2g>KRDT%n{MAzo&S!DbN`hrjD<u~KAvOUt
zP#`Wi7uY@2C&asCuvM^&xGtvVauM~@-t=+$y$|-bhI!tC%tPYdDqO*<NwXZ&-L7=D
z>DrGV)0(6@bJxc8YR|ayTPm4bnS(livUzV3b|YpwcT&`@=*Q?a783o<kAyyHde5al
zDE$F8{&9c(%_TMXCttIh4P_4qw8NBC7(3FV9})ON1qcUyZUDrwQuIlB`aQw#Gjm>}
zS^@Ae|Kt)8zXlIFu5OITxjz$B4fR+@m+BO<xWyL^Os)2pEc|<hGAlJrxsOY>E~4wL
zwzM{xp0T*^sVq@(ox{Ej)Y+x?cCOYik*}oHgrIs+sqK(iFe143eG!R5{y}vQIf}D<
zu%(Qy?_GE;SG)31>zjx79e?;;4*;0V3IGF!2WSQLAEW^QoBtNl@YWw^>cP`Lnd70S
z1}#r1OSFUw6$EgPQ_VD<OW@MjmpFlOhglwH@r>m%^}l(X=KS<{;!gMuh7C@)Agung
z)~OoI=GL=hAGvSv2C_1#a~pyok!hY|<I=p^^QR~4A=V1&_?U_5T_vsvrgc=JD=vGi
zNqK(8imMVyuxnyE&HIL(0Qi_elO<3KqGJH3b{(oRA5SAO_+vDC_O1fL)+83re+nv&
zCtP6G@EvKxAWXXVbe<}D<bHB6xc8itpjNz-Jl`0mSy5cI-k5kVN-w`max0{jA_OIV
zT(8AWt2t%OLl3&z^ZQdc_nEvmI^0Ax>lEusgz5acZcjKZ<}eU@J_XcRLzuPO@?kWy
zr!xIJUrff(%`9Y_wsrH+Lk-!68L2r2HdKG_Ebla5-1lItmtXf3ZkhY`#P5*(o11x`
z@g8Yg^@)Fj3QP_d|JSU>;F?yUcfi;UFn{oT6&B!uOL4;34kr1)i8+aWxEt7d2%>ZW
zkDliLxPgD3_^C`=NFa-X+Yj||n;eKx5acTFq<)ckx9g$HwzA6$c;<sN>t|WF%G~Gc
z37Md|?;<o+z{bd8lk^@#E!<w&FpX&age)|)bj7tuTVV>R;yJX?$MU@8rH~zM`SNoF
z&;V7lv3_R5dClcIT7fKJegIk?Rq^fu$X{2T?P;5j1M$$MKyngT;*u+G{wF|PL*r3`
z=|qPR{=LSP-U1^ru?vf#$i$|A@mAYVVaw!`K>)=<;TzI6!PBW*1Y%cKNQ2sh5OX<F
zAB$@iHtr~Q21-rMgv0_VJ>G~FU$tS=FLjr%A_n`k3f&74o#A@2JqBLW4yY`0j4|I;
zY5aG!A<Ly4UymyMYE(J<KIfjF7|PK8i+fTn-RV2!o0I%;{K5-oavfF@MNS$LrmlJN
ziL!v?@D+gdUu?2e)K_>begQQ%J3Zg#lY6K{eYTVc{zecGGQj6w6O@S;2^LTZQlt?R
zvtFvlS=Jc_mZb50YmOC9k{f(?wIp4NVfR%R^HU8$1k0FTK9X7Mu&*9EM@uQtCnAU)
zai&?H+09HrHUh&}6?pjQoTvcN&iL1=UnqAcmDN)rK%*MfM=Cjkb}0^qEL@ezP#p!t
zl){pCjZ;KL*%6z8xj$dyVRiG)%dfnRg`W?0IU-;^)vWjT5OVQIZ>?q{wbN}yg*b0q
z#=Qn0%6lWeUuarm9uk-1P$#_(?5qdA&&Ga0=g|q<to+Tf(@4GLpX04?LyEoc^5E!|
zQ%@0+;{KX~VxFY&e?ox(@bOQEVnR8&UQ-<lWR1e_Lb=0SM(7Q;CJCVTka-~-fpV*F
z;1PDj-nDjHoMk!^tp+~<wM!%9C2y<KjmoYV?aWlb2S-k~rb`D%-l#B;A(`y<rP!ni
z1&-j1tnQpUZq&q^Cp37FNhjF!5nKZiY_fk*zo!kganL|Eui^c=U{`BkcGk=WBc>^#
z;V{`IAuF@s`{%MyN^@muz0(t(+r&l<G8ngE!uXCfs_I6$&FomF{;$uA{eWrK(*D5G
z5oo>{0ABxevzxQseQM?Dk7Jp@wLb>M53u~#kx1b{J}1JPXJ|oBbVSUGe|0BHD%m;M
zQEUdiDm31l?n|}%{loN)-jJ2yp!iv}C&&+&vZpU~f{+xVoT=RqAymSKgmKEtR^-*r
z<_m4FObk(pBJu88ZIUO`JT8A$c@m5-%Uwi%{~KSb3G?N!8I&#5kR?J3mR`C_`0f#e
z#4AOy)J)=6$>rH}mD6;8A3b>@^Utbi&XZpd+Zk8wzYykT^fleA_ETrqCkf33j?qFW
z8?u2vT+xS8OqLF`9Z~*R(<<P^UxWN_)-)O%5^52p24dC;Qr!-cEckv9C6In5IwK7p
zg*b%U2nj@LVW;|Y;p)xjn9no*AP(--;Tjz~5pFyFfyDW?uE@~XV{3TrS@31Wy#^j@
z1utk-G%AeFV`EKK*l{m|ECO#mdaDGa_L>x*@)3u|<CSS0tC4~-qLnIILruHuV?0JU
zbgF}#>u!ebW8^6ma_|MR@dmk;C4o3GXDQk5Ti2x(L3E;eNYrs?|6!R1y!GICNKQT;
zv(eXvL&?pAqa6F>gcI8GoP_W;9k`o*rmP?uOtaE1r6qG?9{_s7pg*gs!fF3W#vRz?
zy5VXx2`4xw5CTzizXNIW$@Rys-0RSF)?9NV+HA?xPW>`pQ-hhg=Jii7TR-40UDE1e
z^q|2<5hpE19ZIo+u<z@*gNuCopECzT8;e{Pv+bD$11*5B9o-E|zx$SLFo)Q}^@-uf
z23Ty|&%vt%cH9tChIfkT!HF{Ki46D|;5w`2KMC37H)}C8(T4jGIMe_Q?COqrh^E$~
zC730iF*lsn8M^M>Ii@ko-WF@_EzmsW92!_T_$`5Bef}iCz^#DY{{dzPyNw8_77gS>
z^w6HP3}hOy4W4xtDZ7XQafj%f0vd|YA?9t=Eh_Tiu(Tc+x@s<j^cLSXD$+uY1tcR4
z7}F(rbr9yX)>|l5V%0)Wq%8#O@~;>fsWxmLrYbiK6u<!JB#X?zvsXH+Fg~IvKL<-Y
z4q<~zspg|KBi`8|&9e{S&tC2e4Yu2=1n_CXNyJ}el_V{O^MbzCq%HXxTGe{-$r`np
zPqb}%*|#+9=)Vm44MJWAu@c=>5#SK6e)ObRbq}CuHe@qsU{$H~&Qk}!!mb3F_W;Dl
zq&Lsi5g>M-h7FOyHozBXk!MFw3E**Z@i~P_5#B{G!e7kFWr)t+kybKtj^7j<VSfX3
zFtvD?os9Cg^p?i9PqsQru8agE6$fpLnV&D3iF7#y{k%=;Em{n?f>f&Ypv@*QDyfmS
zVZ8#>#x*DC(^be`WEl`8ZH~q8<DnpvY#<Q@1G*KBe8rG-A7{|31Oimk>%}YHr>0J6
zSi_yny&$;xp8khSuneHazb5nl(}n_WgqId|B-mF&$o-4lBd>WLN=x|6AZXRW9om5D
zJHC4tSczsLe??WqFs&P?C!_;XJPMOKyiuFkyghmHQ996<raXY9pYE^cCI7W=3!$Bx
z;6a)t8}*#%eVT7GSnP1ZEZ!_3`>5@eZ;@b2miVZ0MW3OiYdz~)?;|0l`TR53$+&ml
zE>W<XJ!y5uVVehrc28E49m@)D5qFOaH=vcY`pFSjV(-2AsA;c=?kvmR`V<?ehXEmN
z+88sc*tMv5AoY5AB$a49>d9vpBP0yO&>VliTLN&)8#zAiXN9xZ0(ak5%{pHtH9o#;
zi(iC3iv?l}Tn%J9zMZi6hFRiVxcuVS_wM&0q$Q^tm(-dlvk9?C`*}V6OKMc2(4XZh
zN(fEFtc$PJt$i0M4Sl)$LH|@OwW8kD1pKXCNC~80--7XHNm(7$avJrJ6vPNsz!IA6
zLBUs%h_!9Bpr^msVjq&apHl)T=+OQU%~jzr@r61RT8R}H(^G^sr!+V-zRb=sesS+O
zGO51Euh!y0n(9tfq??WW!Yg^*rpJ0$T+<%LsF(EO+Rr<9p^R?St3@JJp04s}K)muv
zr*lQ_U+0_9to05IkAS;;Az_Et#Dz!g_xU(m@z|G|?bBh&f>T&zQB)z<i_WwDM-N<_
zO_sc=^55x`I>;+8pG1C2JlW%h2UlQQ+)))WoBAVlToL6!2Rkc4Pq*!UKqagR{2cZ@
z3DU^Lb{45v6sy5rw%MEZk`iAq6!Ay9&(=S(SD2_c%NFxHenx-3(R!x)y1!!JcDKRy
z*~<?Hu!D^>1Db2ox1A3}QvNP`<LzvyFJ#^h4id?_3E9;o+|6iaH2Nrcndf%90-mf0
z@R<0gdl8Bqxc#q|@W0TP0g{sFdl)76Xuw5a1HE;RBR{wwUDu*bM9U%d+@F8fQ-<Tn
z_MBWc+~<<#1o0!xg+1Xht_toFdnSXB?iAzr9DCCzBLN5e*$;UKMKZyfpe#prb-HA8
zjYFdqD)t`qNP!6_{l}=v?c)h5(^NuWNoIeP-C3y63YKH)4w!QQt7)#YPk`BwG!x~;
zDD$>@VbRf2>KP*j;*oJmz#YS(`2oc)r80Yn061_a7r9-qe4>Op%G>LhCX!B~44sPq
zgCH$n?DGLGIG{yBOLzSfSmNYvoG4sJ+2Uvm%0>A~$x0fU44hi}P!j~1FY(Mff=I&J
zxghAF1OS+Zfqp~Rq14ced9GN>@S$fq-(0{O&{eL!(9=-d<L}`_u{=r*iGGlps)x$i
z%)M{9<?tZq;Mz-XedM-*1RT-@%WMI;N;hN7)?3{p?*jUHAt6D#JQfR0cAH2lIWT%P
zTAs+ha-9J`e5QAxM0>Gv&V-O7x8kv&XxA{!psS*Vkq^tIT4IhE7X#uC&NChP@8KFg
zfNl>zm0F(5Mee1n5O#6RfYj7vfe{WTAbrE8D6Rz}2i{!JYKOQk{hG;OJF#bJd^($U
zLAh6A?!`7{p!g9wSsIN3M*yQ+$U`P&KRy|iQ}mB_LYQPTUW3g$g2zto5i(H`0p$2I
zS@&?h<WEd&r+!aWktlaq<N>eXC}bga;lp?=i?@iiCxL8UM<#_|WdmwXeH|7{obE9^
zpQ{9rNP1t)yvUDeCSQTFC$Q#R>7-(Ka91z1Mh@V0Qe*{0)9|EUyLTMXRZWV|RWyw%
z=~xsDkC6uM7{w!gQsLmte|s#loO1FP%&Tc@p$#HsYovCk?>8>fdgQEEH>PpKb5f*&
z*=v2!^v9_k1hpQB%qz5`%-0ptOQy@R=m+l>=$l${+=fX0)@p`_7ohJpfiT@_jPI2u
zOdTV}=2$%_{wkG2U@OIe0H|D^0F1>p^$no;y~MGz)O`iUI%?k4i_5AJ`bP{us15m+
z&TCg69Mjg!J^ozWA}f%00Z&E|a9>?Ebb*zOvaXTn5TDRQApe{QE9Bz4Nm3QC34oPj
z2;Hx>yo!n@*63q^JrS#r@2vBk0@InAXus&$?I?OO`BIliU|ZHr2!2q)Y_pz|t|eM8
z-%!Y*6$}PEGAV{v>Z))0`}{3s{0|FxFjwYRBS=ClWmwki{A5P?9h$*677au3W<IX4
zF}cURtArczuXrcI{U&i$=OmcmQ=~vZYsk}m-u9F<*itd+9)>Dsw|EpQ>vP>NzZ~+C
zMo6URvr;OmId60>kcWBj<wm-l7M32}q)1+XT_qG*);4x1l0`>NSps2}a{=uf&{hK>
zf7z?g`yGt25M6#l2HYU%Xx}5T+roq*CI2i$m-h^uwmqdRp^zOuc(`JjXtqI&;DLpE
zuyPK;ngcQ{a*hP{t4w~=CC4+V5w;6RNR`X8)T$tzZ6diTCw&{&mg`u$6-(j8reDLv
zhEkFFdB`5G=O3huBYw@XDkG@ny6or#v1_a@d{QH#oYB0zlC=G76HPLK6sdbIe8kg{
z!<^+h``~N^=GG%ar{lASFzo;ub|td*t58t*1i_W8cc3qQDd?pI3mCV{GajDv`xK^Y
zNgbv#$O@y-#94vKF{{y5QgB96rR`48g?f)CcUz;a=bB^G!fSK-9L8bjUXr>yYUFFq
zAp%Q&K<YrBd34^Fgy+0>{yY!i1NJw~A`U*rtRh3)=-m~BV;xB5gum_-3AO|Tg|xuZ
z^l6$8M+j{sJWr&+E4yajLI5aV7Vc=ptw8AS98rkBIfguLDNoWWs(q8pBU(WN7J1SL
z5%6h}A?|WPSRnW@e<UNboj+f49?*>fNYxA5v!85ar*%mWF}cYWo7rGyf9c*uGur_0
zBecKn*A)TaakpT5-}eSA2#97`boB;7J|#ZtDy;qqSS<;0RF)ss_*og5YYB|tW1l}t
z^{f4(c=SMqig$%3CEgT&zk`^l1X|Q!W@jx&RR-%I`{8S)aR8}P(NdFF@%v^5KrLLq
z$aiu<X|Zb@_&7vR0mHx}zO4iSsZ&j-Of6Y~7+_xop-v5zDrR;j$z-NDBM05%%DOY?
ziS<5I9!v$RaS1O8*v!*O#M#+O41{&w_<pP4(y+n`rNl?58=dd^Qqak8SnJ`c8`QuC
z1Tkzbd41$^c|Kg<ZdgO3?zxYnB~@V#EcOBU^V7Lb>5CIMbui<5JyL(Uj<TX)j1|go
zuDembx9@T0@W}GsnFOSMzs8&2j*Nv_&c25mVT!Y@In<(jQdmIJi4gKf1Ss_+QgMk;
z$#@;TR!5k;0S{>S*;=oDauP(H29Yf2{$GUL`XAhpE8$qn2l>Am4GLcCiK<iuq`IjU
zzLV^5W}Z%2?lEr*pZ{{O5J35e;H$T7w(`l+J$!owf|JewEDv)ok=k&RaI&bZqSUu*
z-$W3(ILNu7Z&W)cEuOLPruf9(lc)YITC&+9>awx7{Y^dgA{3A9DpKbdjil;fTiDMB
zdRTHI^{dqm)QKv6dj-yK=O@fPf{2$5HNkYm7&nKpAeD13+W0bi2DM4R-g}?#5a>dM
ziDd#pt2ob7$O}ygPYaC^QGks0W-8)wDw>gV$tLI5>q=#lw3P--xJ*8hY$jH{<)_v}
z>*@^pD>W$Tlr+a=v4?b1?pAdX{!{`$+Wqoc$u(ce%RR*qjSQ9{k0Vb*5ZUD`HrnWY
z_Nf8KD&Z*$K~|)ev@`F8t$w191L`<UNOZ36^G#|c>lyoBfS~}xzk>A$UO+(lL-nI{
zr!!Rt=Y&Kj1pV&4e_!;uLM3*bC%4U4>Futqkyc2oLQ}vH!IgLpA=_F8WH>rhDSY8y
z%Rgxy$Va4qD`s6But8+WIRW@~-l?P_g*RMSJ_xc-N4{}~gGm}W%Xyw+EPQaiBQMoP
zwNAN#s<5h6w2&dFw4`Hq8y*TYe;(A{=OFOF)~d_V%zZ>;$d$WoV@2u^eg+J;^i$`H
zd-(j4{5de=Y0xM|xaaIn)GCk5a)H`U-$CUJ1q!}`NRdf({vwjtXK92cPy6YDur$Mc
z|GXFSA{n7LDHwh#?9@J|4=%Tv0PLJMpL_2PfuF#g<E~!XA}nFTSM7ph)W_+CCz380
znQHvSJb>J*OiAQ~?c!?7)oR99z2ah2vZnBJ%03F9mu`j_J8&uLVk+bJFHPH2^!xpY
za{QOd7gUp;ngg>&gm3ec0Ydl9aGGS8A>!#8lKR7hd;_qq;%Aa#j_+NR_G~12mMz;m
zf|FgLMJevYan_&!@9ELN-uqFCCFCwwui?%&-G$w+Ij#0g9L`KlTVeDr;{ItAL=NAh
zn!r>ic;}<0qlQD!k<!$dNUm-)FEK!3Ja#%_mgI2SWX1~APtdr$w(e;7ShzbOn|0;{
zdB$bzQ>7*PJo@HF))T}Km(#IO$aDEB{X>%QVy?@DNFWjF<WOe`Dx9FyW1@l?DVB?7
zn;gou3r-M8&p?zD{Y<f}FtK_N>$G{e)0HVJmj9d$fA7Z~|3MkIoUhjO;}$baiu!@<
z1Iikm?mFRQa&Rb~-)AXP#5OdC2``6E6k5muJqjwmB+AyL*o(j%ObO284HX*(v8uFs
zKB+;2*Dc&n{y;)P&qN(q*^a%hyD>ZUiutA?bSuVYBA}*;eG@Jk@1hI3$J$@+m^<_S
z4*uYOq}0NwJome5@*(48q(IEhBqKO5*e>NVw6L(CELU2|F37Jb_6x#MJ>6tK`_wJR
z`Pj<-TDz@7zVao{@ux&jOgGoJ>%EDmn+#$oKe_?SEIkaLWbc=a+{%h@0H+ccew|dQ
zWkzqS5^xhD`Zh-?vCWmTU1!w7D7L+!m2bL)9KVKpe`wHNw%A4j_vm&Hbhb~fJscbG
zpf8K9Jbd}EiD+AGpI$o-OFc$!u23q$g}plFl`On>bO5tZb~!FbmYCGAJe&D*Wv5Y`
zf6tT!Q1Q|znbK0nzva^2c$x!PQm3-r_SM$EH-F|=RnnI}NvI~9V8NXab|8{N4djjo
zVUO^uyRIwj+pLV_=rD$)e_fcw;@Os9*nvfM<%nyU1C?#cuAfhAdCuOY7%@EpqY>C$
z!J~bxi_>=?8Y2w%#Q!i!!WvemN9*iin@ZsfZoeGa7d&Fj19ft343qE{L2Jw7o)*hq
zG(C)cpi!Bcv3RzFss%;(m5J1}-S$1mNUg_1)|tO`AJQef4!|F*Es&X%6Z@yZ1X4XT
zL~moqfRVJHyia(U6W@727TIF}MnyAUmE7Tj`Aj3J#L8k>EZj_QnjK3w&WN^Qj@)<-
zfkVfcK?}a0JcAI+AeK`>O6m#2h2|Dei;N*oQlFM%D7^5U>)qb(PBZ{J2vS#1eM#nh
zFsi0<9M~R?km#q!-TCn8%efT;`I|-^Yxv8~{+Xsw4lq<C7*?4@`v-tiUw|XlrE~5A
z-+Q)W7`<@2am0CwqimIQMFy>T)Gg$a9!xoQsB26<SU;A07T9{oyDXU?o%><s050Ll
z#18i$!#sub)TMScZ;N`EL<I?OOxx4hR(Y)BI8^-Fw0>rupOO!*KZ+MlX?BpjR~>jK
zndt?Xj%$tD_Hl9tKkuSpNA%Gfhj02H3uXH`5OtO`q4a??Qy;6(%!^qK`sWI-F=K<{
zp=!_rSX{p+s{mmal4-|{zEcMMtb4y9>Eo+Xm{kL3dv!iBQ4@eO|D$A}Ex@S1Qu6Q1
zM*qDG(cI9+`V8ylL23?hdx@r(-w$$U6rCDuWs`_^OKa8I<J#!lnAtO9(@{HE(M=-)
zxz93T0LWrRC-5DfCmJ?UlXTN#l)xsH_4~QfkJ59@!alfeiSB5-uO>iMBs)x|PLab$
z9mtGC79Cp24hSBAGdZT_^rnGGsbb`=iuX8#2HDQv&+dr{vx+7K?~8h{v5P0zHu6~u
z)CM@6Lp=xbQNrZO8e%aAep8(>O~!I;y0_{S+rzdvA&m^}Vd(Hm_8f{C-0i(kir&P%
zFIE1!#Ut0*^aAbr*2vPkHWU$f<Y{9YqY@P@?R#8&t@xZ6;bsGF&u@PA3miu9MK^Uc
z&0GM+utbPTZ6?FjFogj$KUG33Ea~+ph%KX=`m`sropr_cENVk5-%HA4)wbmMp8A~d
z<YJz<cJ3wi8v8JY-&2u!nN&13kZd2*+>L~n^4+T}$EsBt*_m*yvQ5N7Szgk$81kA9
zV4D8aMc@Ge{$Xy)Is=x9e{>k0Y(=grKjs)r%woO^`Z%KGjXf*GsDX!JNuW~<T9a;y
z%iBak5y#bJ^ELAIrC!pc8dAOSjZ-G7xiYGPFYC31xDBwM&8-jLFb8?6$cUGHz>bI6
z?T~=q*P-bn(H*_(Cb7$C`oOM;_(%&=TmX`Pdr16URPj}MmgDj6sdzqz{Lv#@*UqgI
zzKH@wJmJ`8aSrpvE#7c|Wxlw*8JV;QSG)Vj>9NYL?J4Lr50|}YUpc6n%ptiTu!hB|
z6X(m5)~M7F_Acj2if)T{bLFQ*_9qzkfYJYOF#gLzz2kM2pMPT-lC&acS0Xq+q3k&?
zg&2Ox1-)|2vw8`5k}w@Q4P|qB#blVbh2$?m_kZjwq~RlV9@Eqrwpy7{f79~mA?mT6
zz`!FE0H&7MJKg_g&8bvBkARvhsz4Z@;%El>uHHS^@sU)VfwX%HY!AD)<%I09#Ak%b
zQE9iqLmi$xjLm(8WHY12c=sLg7ht1{#smVFp9}Za*bS3W<=4P)3R^;?BpwIKBx(Rc
z6wCK@wA99j^^auGwuc;%+AA>?QW!U4cI8}=Q|jto7RT~&jvOu@rBf<I#7p)GLdfyR
zO8TzeRj+L?w<vPF!8nZLxy@23`pJfV$)wv>9{RvVZO_j=A7`e4^QB(XA%)<6?)r|#
zIa=!}5XJ3E?ycNG;snF~YivVPY#Tii0vS2UDF4!XsOvFNppF9&|Aqzp75}v|g;iMI
z29qxCO-fZ?7>_37T6Dgjurls{$oc%gRh$1WE;0|t|NoL>bKR3G;}5%4qWjvdRW)ll
zz)_G5&E;gH#PF89ZeXu<Wa_^mmEp~F7AsFrH~k$zxfd^kl1SG=vWIvwt|{>7LhB}x
zAs8zPSa6>pmmCYc1)kpnuD_3M$|WO#c<=g@y8xmxrnmG}Z9WJ;k9uM&Lk4dld%&fZ
zg#Bts%o$tQTZ<<#ba^A7NENu-I$p))m*dX^;bJcybv3F-Q?Ijlk2;7xm-y@s7GO<R
zyLj?~YNW^(+F_3{6`cbkD~9-XDXDjl!Vmvbis>eFhg1TT&h`@Zm<&F_+NYfe&=q1g
z6@o25yGg&#e)KuFd>23UdQSfE<!a`(dC^A2!+3J^P^cIcGqTJKjl+$B$68>WsDjK;
zW1=IPMldj^_;TS@aGG^KYi=U#HtYs~HE$<O1xk&2t9GUIPL9SYXUjBeFAbT-X{8DZ
z=*N{u-e4=vd|6&(@Wk_`$3FxS0mA>o>iOSRQW|vj4h>TZUTmBwr(SIke7*2Sp0Ff5
z`aqz^B-qk#B4)5Taytjs^St!d^VV}D-ca$rXi}4E$7tV+D`djW(|f>@1vItn?-jQZ
z8mU4gfQ8kZ)Z2|Y_V5)QQKe6>gt2-@Bk`{7hiz;Ondger2WQ$#o>u#ePBc!}tyvvE
zNF^3skpM9Z;L5cJ;w)g6v}(8`cgCDkt+Gxjb&P$5V7FNZG)J$y-%R9p>a}Mh{48zQ
zO$oIrX4w9=0uA_@)3mF-Eh}|;L0RJxDXbrEQP^b!ns@Ir_i~)CnDF;45DyUQUyTja
z25t;@FYwpG#1x-tIdLPE3OZs&oG>W{-tR^N$*8DUHp>~S7FI*J@FWBpP6EmqW>bVD
zr7$YT>;+J7F#a$DT|3S^KwcpMdl}iiLW}{zUk^Y&l<r`&q6unn-MlUhYJeP9N#!oG
z*_h~sJ(0O!E_KgzgGJCrqC1s+Obdv?jM7UrVt1yS#BY}_?x?=ky>}2VR35{nZ=8xk
zXMGv@tNnH*;cpAiqLjlwiEl#Cind(p`J{pIbC%NmxuipW+H4*;T{JLM79E%P@=O|A
z(~`sfZOH&@0A~EdVfinHd;3Sze+;*m=#$kEIk#Wff@sGK&hz@Z0>+3mbjf|!FunF6
ziy^9z-M?nIDw@OM-JWdKFnQKr0OneKY{H|z%M*+Np#8Bz_#{+pR%O)RTIyqN2DcnO
zYVy2TaDx1EoSos|NQ(b4tgY@n6+VO;2N3^sRp?VFUJ}8f6*2B!+<x||vf#G51k=N=
z7`8TrkNxm8hbjvb+e*RNL%62ja=S8RsK!fpwbeleg~mPOgvKAVWAXTT?-&Nkx=z5n
zGf8DAynri@W&|O(LDog^o)rmL?QrH8Z-Ck$gvCb(u-2Pj<Xb}>;i=|5WN6R#p9f6&
zY(r!XaT-)K(mf@vLtye_(6w=v=TB0<=Y!Sp-NThsF<cq*kj)qZ?nGl>ly|6mk))J`
zUBIRRIj<+I=xB~&*A{@A=es=VK<kx8&n^b*O$ZQAX$fc8mdeGK5}Ngdgq)P3hX*`l
zJW}{lc>Q4t2r%*AU}{3-zDO6)Ti~mB35KU~1s6~DJVUB%HtC_mK)^a8-*quXg!YJM
zQS(6|@(ad$K-*K<<5Se8an^Zw$Ng|p)`7}N9xR!MJNmocv39qbDsORx3l4AQ4L6<l
za%iZy0!mZ{pM<nK+O9{=Gm5Tu4}ziEi_HPzWfl}u;?5geH?J`l=ehe2JZ4A0B?SKF
z=ZXsV!>h4pzWN)}h@UoMyN^{R_VTV2u`p&;TNYP@BAggwB{VBA`4DLjz<r48*(5O(
zH?kvD_12>z%!A{(zs4q1v-EsGB7Tq2r~~0u7FlfPHn$qicswo?JxFYl$G|kS<z>O!
zEYPf>S6(yD6y81VdbTWPbkgV-p)ipzhPThxqNc-7SrozblH>V8a9$yV&r*Iu`MHKt
zTac(33@TekYNExIOJg&8g@^2%JX9J_5aaOuC!v>>bKj)vn@pBQxu^!=?beT&BG8S$
zd(8d6m}dVGlg+j5XYTvB-snauS9ry|R|qn0-Dy5Z#cptR)I#1%{Ip(>m+h`C$-SEl
z<F|M&y<{Tdk~PRCe4|iLb8GKycl;fmoPh%}os8Qz*3F3w<wSqVS<~6id=dVHJbF_K
z;haP0O*Yp|mxx>g3Rj;T&lJOQK0d{rNkb~=_$=;KpMfy5&XXX5y;`t&R)^+A;8K;&
zR7R~BNS3hi(d20z+13<JKVquBnMsExd{zCz9P-C9MG{Kx(ZwlS*a;NWD-KqCSRT^4
z91MHz=sohL2t(@m)}Tc3akiZ%q3`2%5A&18A=Ej|V$ek9@S$|2x>7w;_&T<Qe%wgw
z67mcZjvei5ToZ!Fd_OUctD>d47rZ0dvdX^`?x#eg(yP(n59QD`{{pg1`!!!E&wK0X
zL(J!g&dyINj#U{h`Md4I3U8%fj9bFs2+jj29ImSCu3xpmv*?d}i~zI#4f*`<%yMYw
zqqYumgLHd_BJJ0KCitEt#inSfoLi&~QyYJPS+XiMKYsl(8bAAa)Q+KgMiwIbG02o$
z5yPs1kefkL<J+lo#(VBu%X%y6cer8m3VY;RvM>3wC{^MS1{V-U^<L0zDPwl&RIic@
z{Z}=@(QjQ1dx4MpPS>u1*+2}}5uxLKRU*bxF1*vh&XwOZZ7`Q<MAm*;45$(DG#hIZ
z6BhIt<z~WfX;sF4sYs}^UFljRHAp_=DzUyYD_q^@6p}O&4X-533gR(=9)t1Qu4ZAs
zrsQ%kkINn%gy1($NVhe5_~}%UGkkj5LO!G85xAObKmqh~VfGn9CfkJjMJ}vXYMt+T
zjePK_v4Ivw5PNaQcllb0r@NL`b;W`jM>~Nyyj}Hf#hRDt@!%ECOZLRq+8d`w3E%F<
z+x0dHRM=i}aK8GeFKJE^n=?`3IqTm8b0Ei9Y@!PblKef7c?FF9x45#o^sK*yrV8~L
zd$>=uK7^lp66DlN?ltLUn9cgaDN(TOb8sfFocF|G7bZQl^Q2|+AEhRIrD4s?k?XDN
zVwtu+REFgcI~hjx+$ostf8JA;*W|m}8QeS#vYCoB9*Xmeq~@*tH1jAGfJOgy0aOp8
z!Vc_pge8Hm4V}C#6Q&av^{mT<#oup&a2#JOK_)gEu@iAVE^`dSs#vvkOHO`4h=CSu
zFA0QHbJjHt2GGXzr8X!sm4bttgEwcgHVii<l{F5CV6uZP@}&3hvn1+X`A~+YIL%FX
z1{jdAeRc7qbf*e2>RWOXDUD{d_5HFDg)95wb(qZK-Ahy9mNw?7{?$mYEebnzY-|>J
zcYvFybmKk**!7!vHS;vx9b<QaWYN{sg6vOI5#{~UcwY^_raIZvgy(O&!5%aIMwcTB
zM+Pb-?g+j3-vS`f*y`DW`-mJ}a-9C8nI(V<e@#yos4O=ty!Q%Xy)h`y8b9w3kP8t!
zfQbntm<-MHAPCI0<enj_+nI^BjTAW8`=xYFILltXh!LAjT0VBP;}KHO)eR}UG7EPF
z(oh?vJh}Y2bbCUS<yG@@OVF?n6SHWecy(4pYV0;>v+veZ&j!MHHk+)@$%^yXfQUri
zeL;%1xl+`}^lpZrQ3ttJES{j<NetvvES;{UFet{*4F11TR2zMA`3w*Uu8D;5$&Qjg
z&Lua*ZTiDJ>}TNp=G`XWYL!GSc_~6&7eIwRzX6dR6a;6c*zP?9WAE=aAE(dX@zjX>
z9!GoP4I@{R2zhzT?zd4HKV(8vWf$HnDC0&lj`<>N-krmV#F|8yV-@YS(1MId+9K?f
z|8UiE9Tj7<C`5qIfN`A<DV69_0ATYH!I$m9XVn$>6Wlt$-xK-&=ew}wt6u&doFoRa
zh6yCcW*G8zl*skMeaMdvw(~hx7Fl`um}~^<g8H6y8ytB;B*_RwRwSS(@`EJ~cq4@`
zBe01~XRdkh-c@}?m?~H4nO*}h(lI{2E+b#~Omm3yrxRY*oUea5Oo*h<g|@K{-Ewdb
zPH7SX^Tfd<o3TDPomf%T+FWressS-GyDux53SWNgYXOBlnOE&6;T6TGJW&5go%#mK
zsrJye<`-QCqIXmKh2#j`<hmpeNy%GIeCLH&N@Tj=HwZXG@Hrv*z3*p_54yIh`NgI}
z^ZwzaG$gp0=my3G_?91AtsBxwA++wB^hFG6JLYkp8)Mv5FRbLP3jPG=p%S!L_=Z5x
zz9>fRjn{IVOW647@!Q^(%2(P*`75Gt4}raDU%I60xg=9|K2Vj?-pm9Jsf#>B=AZbQ
z1G4>9d@E1?kHrgT0!I$)!tsm)&w_%Pe$w@@{j@3?L};43=Ff9L1I!D|-IsV&jr2n=
zp%YO5PLXs<N4&+{(_yf25hKayfU?JuZuM4qiQ>x|Dk?sHZg`nFm1z;2FipzIB8Zut
z5wvF|?H**>Av`%F6R4TReS8NF82K>aFqGbakhr%yU;aCOewUSwnL)bNAx1v763Vi2
zZr5>t=jhAstFwaGvaedb&XQ0ZiGrH`Rn<Z+#%Z?#0vA+9RgaQKl~}%5isHTb^w1uK
zc>4h8>9_py9jPBqp1;a62(au#WO&Gw-@skbgm;3fKxG&u)2BXBkggR4W5sJWS~pd;
zZ^wPo>Q_E@?$AH5zLb&_>FZO0|Af#6kn^uX_&+aElqXMZOel47{GdC$*YGOfKI}Jo
ztupQzyAYjWpIzZ&j}BbU94dQn_xk_E-8(o5!Zd%LZQHhO+tapf+cu_c+n%;DZQHi(
zp4LrVJoDbg#m*ZW``dTpcK?IQPkk#ht17FqsiQQ6j#-iK;dA4SscmkyVxRHo%-TnL
zpcIxg?&etHAnriu<b!F9Y$>DUDSdTNv1+aUw)i6j;O6If{iR3iDI!L+#PiSv_$ZdB
zVInYx47+y^dxwa6omf^nB9Qj0pmy7{Ks*=xyNHWF#lVz#Vo!ZS-GibS(3a<c8MBem
z+_`qx1p!=b^mq*C4XU(ghXd#mS<ZO&(of_LG<yKyM_2GSl_nL=8z@I3j|s<gFAVWw
zV)DFwd<1!aXvsGn?yor}9_^o-N4c$2rfm-d&>*179?Ud~h8Ld#&*URqot`FtD5?W8
z{*B^)Lx?!P@1d)m?1Gtp0z&Nv^YkSPzrixte!J<d72}!7k~##I5WgPB3#Mr4LLvzf
zM<~A<r(KnAr(%>~Dc`7Rx;WG*`~^%DEqTB8jZ#GOHMXG`t|~ncOMZ?gsaG>f&(C@P
zSg)B{RQLsHOtLNA*OJlx_z7y<fMx6%V(-YbCJv|b;G@u^p9*|}_E!dt5Xz<d5h7Bd
zxJ^V<4<$Lca@JPPwhP|PSSWzK;HihIBq`X6Sp~ivg!uYvYpoBSyANRO8-}k?V1k6O
z$GHv@@0%r_Dz~aHZm9LgfWr+vnzarDg)Nf_ds7VBzD~b}Z93M_V7j!Md1H`<Uq|u)
z0>2Ajw=9v=EE&r`^Z@Gsss0T;a6=Mp)YJ)4*>9bfA5(m*GsJQj>o%(no6^q=jhn0R
zIwuyCyqrW$MRN`cla-6W?-$YL!8d4o*pLrhWuL0nq2VZFv~lMchdJ$ZR&?f9Im>w}
z5BH<IXN4VkvHT=@-91&b!dYURCjmU(+_zK`Uuw$iw}@yh9%ACTAu(|I=Kh2+2eu5_
zZs(s|%H=I5H_EX!B1_zbFmWTmHRc(lA^lu&wnivk7bq=#$GuMLttmGWnd_~5WWT^B
z6>ygY25fo2K4r0&*K4MAh<I#!D~9P`Q0H=V>UvRq5N4UoP%nVAiSHY{De(wrfayr*
z^!9G<a!Ah)L08@EzspitS~??l)CJ26<f7z4NgE7X`Tv6rU<Dxm@7UsT&4<sChenwy
zcE~mN%7NgF1Z~2JweJl<8A*qj@y-v(8L@*09o<2f^Crr`PBvF+rVD00_{Cxs?gObg
z)cCE>P%#K(Nf0zmCeylzaazCoD8p(j&OjaN>nE8q7T=$pVk!6Weg2Br{g6dOKQ0cw
zf5d-YWpGwULvgH}=r$iR@#Gm{8t(hEp90tg`0E8^&Dp;S<>4lW82h8~JcJd`s1r+w
z2a@){fbW_h4HGKEmR3`T=>#GHEYRX>a)RcHIJkHt@gWiuD{?}mW}A;Um?|C^dU&WB
zG^q_nlV9Asapc1{kFn)m?6fZcm1<gC(v?#gX&PXd=2i+faGxo@1*u*Iwuo?|h8B_{
z($>wo$<<QqF#(COX>Yd(q%79b_9F_Rw-`U#gF~-ZrER1c4F8eq0>HuFx##w@aURA%
zY|{N)$aM7Gwf5hsmz?_+{-eM+mYKVIr+TR9{s-9w-g0sRLqrrv^<pk1C`?Qis3G=<
zVJw_OMF&;&egTOasI9_|Mr$)(>UY^yO3aNRm<Ue4qs6}FFyWIzUM3~Il;78ZpnMez
zG7|77TK12%b&y0lu()-eI)Wdt4AN%S=NWPYX3C+~S7NtRA5R#YaJ3WpCyuz~9wgAx
zZdfcW^qpHg6{g<E;~vOd``jmF>cA4M6e){Y&c8cc?h;6E(NvOFJP`abcmojn?*?bH
zh1j34ff86GnK+kfG0_lP36YEn-sn1wp1Yczn3da3v35|ruZFX!vm66`It;$JR0Xb6
zGN1t~sa6_WRiV2a?MPWnJSGzUzAfCbxkgjeB=Guafk3@U)%J8rO=ffJyZ;``Md4_?
zjd`W}zVe)KZ74U<<ERYH7DHC4H=N@EPw4-=qB6uH!HRTISP6vc#Zb;CO121YlmO~S
zPM&fkrR2FRLB1E1xIH4-nPX_v456<`yC+l6xee{8>J1W3wwg_0JvMc~=<~^nyh6OH
z3<6g|wXTUP%p{@aBqrP=4)0um_uYA8j^Y}{ed)rwfb<_OKrw(?{}Z{K#*3`^b$9{l
zwUsw_P#?<l;4&d!!Svgt$n3}<7JLvrFL@&N7_i{yI8#ZH4e$SK-DYOdt$9%tII>^<
z{ppV>zB5&;s#A7BnBI2p-Szv+I@j)kiaV#&%uA2O(@|j@RijrDN{e4Vpw%f*T9z-d
zv&<54sdKEQE}g@H=;$_GrN-y-lnwko#P1GF+0ldHHk0)Z%5Z^MpWKmj0o$s@E-w$_
z)YkZb##iKNBpoRf<w>RBHo_p_AB%?KLKgXq`vH6^V6X|H9Ok?lC#=70dc32gbq~Vj
z=e!^7b)bVi&G2zGv7zM~zNOn<JU|~%?D}=gl{eVf!T5_tH0jsZAP2?Y-Am62;FS81
z{7|gFpM?L1GcXvS_J4_Ur&s=Gh0}EdB{6rlfn|uE@FQS{RciSYt;&<f$HT7t`RjT+
zzD+6sP|7dxNUChQt~XaON%Eb_eiXmE3qZ$R#BWxzkFQW)E>`Lk?pmK{{xXUHxWDU&
z6UN2SM{vf0$Jbqk?!*NeO4axs;gjarlRK5m7yJe=4z$=7DGct8F5SA?J6!Ri8h;`v
z&&X5#z9|u^lEhr97^FmmTC~H9^6#o+8~<3|tSR~th0M^2br5Ol3J)NmoiZ)v>;o*u
z?4AlelLh0Ur(F9E8K`cHzK66v5F`XiQK*DK>c|!3yUtL-(`6)S%AzCx*qH18iws?S
zuWc!<mNnG@in6c{TLsUgO61GT8=ud+kL*n0rux~v=vapckT!M^%^-LdDC8f|AX7m9
zCZGQO&L?YfE%snaq4pb_Xr#d?$QE%$`Yb}%mN2N2vcm=*8e4F)AKbns6-3UkH>rg>
zVGk+>aPJu)toyea6Wn)@xgXOkHxEz8e#k26_0oD0wt8yUy|b2n=d1jx%UhSaPw>!a
zZB_ou=g88fHJM%bdlF5${z%`{d4(W9!ccc5+YslruMyssGL&J$4KmKbz+Xx|Xl+EI
zkd@WLF_)&^*p<4v(kkwnEK@I5q&XoU5}E=;=(sy(Mud+7G8UWmIBDEyOdp6~h3~h5
zNPWFNh#jDgTO#syrDCW?8P(Pyg6oed!bIS)Hz?Q#bb8Mk3^XAOqmr<@aY5)x3<^GI
zu@!f$)Zr~Mmm*#cTIuk($!wVY%D=No%SlX5@@}VR3AjZx*9VGouSN@A|DXq-?mNHf
zrX-nq7b_ss1C^mdTH=(<OX$=E8|a_fHuw3OJ)9n+2;XjhE+AR{S+NH~%Z0u*s5eg_
z4rE}~q=bEM-UruLrMMJ|%lfUeg&F4T?K^-KcvOugtqm@4AM(PmL}?~#-Wx56@frJ>
zT*<7pj!B?V|G|uoiruvcp)W(799+!gvn*>&CI#<MD@)0eFrSO3lA1Go?mc+#^|twH
z$_$ZgAu|98Z-)@Yu5|bkDoR#JuR`QG=tebtqb5AP4&=tK#`>!s2I(TfmWUs10F%QD
z-QFL8bD-96ue#t0v0+k|F=|FBm!`^{Dt}@H$N~_@-`DDYPC~m5VsM-<w;H=K@auZZ
z4QSELAjG{YbA3qdqmEkrpq`vX-rpO72;Ai?(Y9VQG}Ba;Jdy-nrqFqp=F_`+P*MeC
z*hpIrEt_O!3&~_$)=S6ED%g_a)LK$!TP;7Ys@~59gTjY{axu<sY=CCuW9)m|jmsEZ
ze`=DUn8iB<B#)-wVMu5V$x3{`JUrRh<6$XbNXnRGD*XlOrdo3%AlzM8b880zFIA>x
z+0Rw!WS?7a92ghsF`PorN=GN%Hq@gIt{xkt)7{g|Xf@#&uD&>uIf-&tyh^&SVc3e6
ze4Z#o?_`nzR<9mE^jcl#2}e_GJN@vzJi0RUJD+RDmvQzaSq1)E@zDX&l+xDbpl^1)
zg#RM>l#_VPQ|^Lzcf)oGWv4hV&<#6MsF@6dQf3i#=1A%VD2kYo4_QL?#NaYhlW-{+
zf?p{iX6M6JWqanjZ*F*>ox-zI7v!C>_q?(r?2p%-d|5R?q(&1?LMO83R;(nT6%m$&
z7=Gxi<4|aJ2b6Kg@qEP*B=_9_Eo++|Iq@I52aM>xNWZ&-0IMuyr<wYprFS5@y}Uw0
zql2;cCz1<A4pE9oi%YVk6$sD1nKgI+>sy=OA`<?ah$;)%WKNN$W|H6AqfErO9mX+w
zn8GIJ>0idS$=e5Sz}M$em8(^k7!AD`LTk>J9O3bkfAQMaiX7gBJk(}lAF`jkfPtZw
zX~*IL(}YORMAtk;uvUSpU}U`K9E}W?fQA(uT5lR;$u`x{M2YYeV`ZHFN*g9B4Z}m3
z@;18WEVAvch_+1nHnq=wAguDL4yLrmW~PGCvU5dTJ||6N@LHiL&|UuBPc_Kh$;!^a
z#u06AdukPWqL=v-olig*V(1JiNcAQB5~TPm9k%^QL$$4^D8&@`(JC=@pi734sS=k6
zhOE)7v3*r;x3?lUY7}UjfrUk%<HJrP?M6DqJZ3SXfBtajxi_H@o_rBaF2h);c*$M?
zu_7{iB$;ETa&khmIX=8Tl1)z&2;9QPMqEGkd?_~0a&H$%1g^rVGyo7<b08vLy1YM`
zD)1ITC2fFo-J?ptjp%L#65VH*?+wuRWAAMdxZS)D%5?xMDdw_{W{?+d)@xgK`pIjb
z7*)tzu2RK^FKO%|$293ugn3I`o0$7_h<O}CfeRn^C!MN@*q5!*LX7>RG;jLYQU{}x
zmIAwfI4~rho_2s_{965tz%uHqr@$MR`^FHh0TfrFzZ@WEuBehg8DJE=eY4;(y(PZ0
z*9#&kBHi4nOaTooBs<sPdgzrHnNq-$>lqr6g{w(b%S&8jQ8+26BNo`f;DBQRfKsd2
zWpvTb%;U;rF`*ETLRMth$V>2_xV8o)_BTD%oc#x#lB!80Mxcm222E5*8qW7xf0IeP
zR5|4Gu3HzWPK(R#B`%u_s7E`DGnD<-ha7k$1K>W#hc^V$L-3h#7z)X_^s8SVl-lG3
znd)?3$GCQTWIyWNJF;m4E$cs!F?uOw4;NaM<?s+k?T}9(d3p4&+DjFOEHEa)%EFD6
zi+LkES^cMu69ON*e5ulBnW%TUS#(LPp!pBTiD)F47S}Gg0Duh^^q95#7)CiRDnMK+
znAN6k#D2Yso|kdmH{LCQX{>+-%?!smJ|UundgSh=hQ#mZQIM52Hxf1gj4kF>BG_b}
z_VtGfG78nqpTY~ky8AvM0<yg0d*cNH6=p)XyM`Cc;F?~CF0;L5a~My^kA(EK6)IaL
zk9%yw70L~JeiUS#dDYu^Jw(<|@R|wChi6cOrXd;Ea3}0+_a?qn9y;*oPGr{V3`kgx
z^llQr(zg_6`3p>0%-u20%qEz_xtk;Tpg5oGuZHHu@;wZ$l*3~iN1llh6O>P^r@cMv
zSKZ1@zftvWgMA3N>paEp_(9HnRb26>I5@OGAsc>#h_ry>e0r#;@kpO>RrplsTRW!2
zzvNUkA}!FXZZ@p}*$F;sjl-G7*wKAaoI}MM`2$R0{E^fdki_34^`CQ5*~AcGx;BQ4
z^I61+(DeFzJR)M(%K@Ya#W<CNoJxtwR;4c=KF<iIV{o>O5;paMRTQMIL&igv$SF0C
zJK|oKNBDFiLZ%cSJVOu3G={wuP$crdU-Bn!FZu`#?;8Mc(l-TNgGj6};_wYr@huW^
z!BAE<HLZ*vlY~mz-|r~3@+0Psvg!)bCycX$tw@4N_6_GW;EpEMK3|?Y+3(CYNhvz2
zaVx-;H11Re6&i}egWZ?(oYBr;T99%1*TvzbHNiX@-7M_&lAtTxHdH6d(f1r_Irn3H
zJUe}}hK_gk(P+3daA^m(caU!5(!uu=Ca?&@>OQD=<zL}WR*63BL|sj?*IJGne6KE#
zf>u4br%D|HJxWFu)Tgp*#&4(ANgI?RiLs~QQ>P8Tuc9Mz8Mj(-Vqa!1?-HmD{b7jN
zN&6mzDJ~S$PJuvBN;TLG*Hs5&#5h_d>8h+Uxrw6D>dH8P*mO%e9e$bW12c`4u=Wco
zMw<88Xc%d+CrO4?BMp1#n59W69~;k4Yk<`n5PwMWJQ23lB32pbh@6cUqkTBnV}CSV
zBg@6`oU0-xCCq1ApbzCvcvT`wXf74@OSb@~E+vS;<2)}@8#ytq^U*u13%U;B&lw3|
z$iLlavo8Z<=BS}a+&l<{`^G87Q28u!8(o=|^N#H_nioeV<$U_ZR3A4s{@9-@1vkT@
zym~FnKS|19X7Exk&TIx?vd}NRMjv6(N-7tTQLS~K+MOY~^nIBDk>UxdPa6+7#yUpG
z_=596QzK*upN0nW0zmGus21QVH7RPnZ}QJX#yBPDnQVR)JCc#j_(IVph!QC~ITvFL
zyFW?V`mS)$>2E#|c|c$C#>?H@EZWp%rKJWzMXGqBELCOz+Y6pi?C`8g;ZB%LP5mr%
z36!DfeJ}VCu1N#LVIu^-pV#t!spJ{dZ8FfA%u#RwOCe<pTj}@DVgqOZ$oSi0`~9cr
z|Cb951<1LY@UL)r);yW_1F7XSHSpiL-28|YLEdzi|8=Bsq`Y3&v(?efhCIg+?mHE=
zLPPFp#W%Z;E+bxINCJ$*bOi6$%*3$d2kothHY~&(z{ihtE)>*vn<qF1c}>qb&(m;l
z?k^IkI;poipu763e})NY2C(-(Fw8K;wN19@PngA$*R3~7wGyucQNOtK_VeQnRf*>|
zDrhB-YEOJxlYBa?5&t1Ysns8jZPLT)HZ>mHDnJGf8?Vi&;T(m1_y)lt>tt4s3pyr`
z@LyPM0WkYtcC$>B)WfAu_UQdCWVX(*T%(&^aa%^!gAdViR}fAf4Pblt)6OdMe5j->
z=Jfj)Qn-5%SC>vy;f){D?)axIto3cxwG8C)vf#RYvoaV=*ztu^tr~)VT;L**(BIAd
z?~baZw5kiJ<h84-g~!kpi_pryN*NW=It-n@Tzvt=PX$Hyy=)?Yk<)^Vr{GlpZ<D|C
zh0{XfHUAzX_9!~KCpgYlBq`S=qf`|0JQ*y&1}*>D8g=0<Fu#Yw7bXAB)PqVa(im*;
zk(Bz((#*E!d{rY(UMc|bg&iN`4<+I238)BOrNYcDr-Qa@44xFyABKpD#I;U1Un?Q^
z^3?F|SXl9>x!tqC^t;3Bn#VGNi#8~riAKd_UC0`%65c$Ir}yn*&J2RsiAgzzNG1r2
zvz{Y^!Sh8WR|292UIh}9k5(KM2Pt=)@CK%##ME#)zBe7>)2K941>LSo-0~9Yd{ICS
z8;3^Y@uR-4J#T7^>FQ{aqrellMD^y;emWfKBR|o;M&MZ#UL>iCC2NwPBu*Y=YJm1j
z>XwIZqJ%BH7;TL`5zS)Rqi7i8Yp1bifC7?}$AKmrl!w`kp1Nk6{TIMRd)`<Q8W`lt
z8#ItiwCc;JBqDGpodAr_D|3GOeT&ZG^!0zF5ro)XU6b%nigi5wdVLE(u31z}<Vmev
z_p~O~rjYy8q9$hfF;BobIhX*QEo-rd@Wjv|AGYF?7vFpj-AC(lr5`FVla1?f{w7zL
zOmiWg&}k-op&g)I{WESow+E<mDcGTqOgKzOXu?_6(<z0XS`|Xxn5!i1zETqI&wq2j
z+n4`UPXFBz)l*#dXSE_Y!SM?qW=%>u)|>Z6*9F0;EH5wgUTqjBp((lw*)Gb^;EE_5
z6%(<YC#C>PhCOTke14@t+%aG%#-?U7SM2b&G)KML#aI@<!)pu;I$_;G^dF-S(9lK%
zr%_5uFl#Pf21IAvGQBexqBSdwZ7VveR+^b{7362$(0=QuV$N|cx^tI5T%&s=e`%<0
z!k!p4`nKDXMk@HFN5#FeNTEYbAbF%RrkEr$XW4#=HwlIb_JgprDB6MYTxj_{G$d%O
z6M|CwP~Ks|ZMC-q5zqM%ro^-BaqnJEkt!{*FLJm6Wj9-wMY<{Uz!$@?#tAWJKY-79
zWn;by$;ZH2^Fl-X`F@R3d**<c!l>nAdxsfUf%sF}GbM$Q&sb=<u3`K(InAcSXzjR@
z&q~5;P-orr3fMIj78n?1h?25ZMuu$!m`IUxdYWUR$wnVsr;4|+QkpNU?nt>IQy5Bm
zw?nuOyoq-TM6pb7N`l5C4)8*mC&9i^K9Z3zd6WrV@FTvY)JB=1WIXk@AAJAiib>vF
z*J|4BTS4<P10=0&U`{O&u5y60YD+dgDn7KS$*}f(OmOwKo9FhowPC`1A})TXE~anl
z^W)^D-kZpC-vkw00;l}+RhS0H3=cbwO6JpVS6onQrxE-v_?Jda3PIhTjnIC2$m8UL
z-EB8H)Bo{K#Xz)w^G^Q}IkA+{%uj;0UuP!~N*)g#e0Qb#se{oN-mNtZteSr0EY{z5
zTE&EPRbuBv>|R#0zx=rg%<T0F$Lg=LyS(-O+E>K$`OX!VY^>1AONWhvdm@Pb70?5&
zRgCv$!D!fyc9nGUwOkAo1XEj%&NAzq-K1=1WkuIXgis24JXsUb%YF}^!(Tf~+<`3*
z(a!5N6EvsnBydh-HW;J4>e}d@jhU6V>1hvRXk8sW+rmdKSL9JwpJXk00NfWbVu|24
z=V9cpDBxH=E{OW;EwC($qC;F`>z$T`KH+<#IEGK39r<i8&sF;U6lPl}#*Fvdx&8Kl
zhxNnJk!8v;m&e!S)YXKunWyFkOD|U1E+Wsv&;v`%6KLYJ-cvd-Pr!}sW&aG#YM5a%
zcoz~rL6C!BSNJXGjm+_CwVJDwA4lVP&0~&ZpflJEcmD3#59}cj9skc(;Eiv{)pWs*
zz{lFtEuRR=^v#Dm+gv2&RyiyW;$H@fJ0-;n=W)QuknOdgEb_2Eo2YCU<00#L4p#YM
z2Mt-j<jq3av#Vm<2|?A`z91V;xcWOIdpPD#MR7Lak4_XKFezb4iN7VHhDq~=KSyn1
z{ZY=;-;c2VXDg>`mg)SV(fb3)79XXO$FdLw>USr3MP;;FWAv(%@6YuFBX63^`)7Po
zazk2#2?EIxVq|3=g+WJoQr`x(tO2uACp|8IC75M9EGv|l3WtcM9moe{A6_q!@3Ix)
z2IEPL?uk(E?6);<UA#QADu%JyQ!;>%_h#T(>bdm#Y@q49$dV@EL#Rb0!P35KAE<YU
zQl78t+KmKo=pc22QGQwX?z9G0?2;zHVX#gQIN~vsUGgup5Oc5W!ATJ#6{BAU<q4;h
zbv?xZPbdY5wx&8m=?Hs*nbj@q6+lp*C|Y8oHFx=?jJd}zZ3YR*I9$dH7j~;@rDJ$9
zJkGG+8U^mSO;V?BSn;*#2Im3Fo9R~BSMJ_3?bswvJfUKimgA#Bacb7n%rJV7I886u
zw3<&r%{hetLHhh|H@+5f_Kub_qv}#aVa#OM!r#BnGvV8+(Dk#(xz6h*#U#KDI$?x3
zl|O<FaZ_vKB@>fb-PP!`G{xbS*B&;>@K)csML^y<UEZhls#I}3qgqs&9X2zvqog1a
z_(Y<BE<G-;_jC3|=lc_Wwb**KPzY+fS&3ai<MMg2EUO2;9ohg4`LnjO|7sxe=$4XB
z|4}k-kLU~x#h+9jhzU^SZ|>)J$_k_G=TdCJ8)M!fKdxjeCvxXXX7^s%J$ZXW4YSv#
zhK<zQTUoMPY{p{E6#AgiCG5-b&1l7415aI+n-wZ*9Q}8LdIee#bM+@d&=?%s3K>x`
zhmI}pBSdBQth~V5+V6CzF)5F-k!&r|Yn=wY%6Ckj!+wS6uh$v6WrwH&kaz3`^60vs
z4<t6a;OiV8gc32zUrKkQ*<46obBG^RVZlg=RvG#`r>vkZnYqJM6|Wl<pLU}P<`+Y^
zVvq`MjOw@En_Q~z^@flo)e%2@5`0RtH)N~^wv6ZyTX72SdhqS|{IYkc$@>FM+$4GJ
zR3?44#psBkB%&F88m~PGXBzvI06pi~3(wECC?`30Oy!It+_wSjU)ARJG^&>*YtG8~
zi4b@U1vYHi{s0B^{wKK><9)!eEHSI~Y(>0SI9bV1iemaqn%fcGCE*N#mOMaUoMw0@
z=K`J5Keb;Ox2~8Vl+i7z2w9M``lU|Z6+!Mnyic(kI}wv!b4a|9Qo$eWk24j;X_PQT
z@s>&jlmbos<ip3LFFWl*0pxxT$pdv3Y|bilG-<KBTQ1}i4H9|h`zx(47QRa1_bvaP
zt^W}<yTp^UuV$7a5{x)XOcoBuJ~Je@b&VSc4D^=+V%oND%oR?H(8LfK(fDFKN+E)?
zh{%T@bF~HiT2ddWO-ieiwtKjOk~e$Z&l%|PXsJKu0z?D2{9Qk}2?^(>@tYfnlBIdJ
znZ>1qRWE|J;XpC{mtk6caFI~ngx{EE#e4z_3yAL$=iy`{AG2G2>4<YwkF$}~oPG9j
z3^A|d8gI2Q#R_SvplY^uuv)tgrWW4SuilydtGFur-xk?Q9TB=b?nod`(<FhNMe}RB
zd%z1II|g2&cS8Qa-udV*jdysTjR+^AwJqc3fDnps%D}kT=AK#rI47#kTkxBwx@%fB
z9d82}XlQLuPZu#iX>~x`P^TB9RPaRfd@VEcjUq!VD<=ht{OX&;Xp-<<FDgmm1sd-$
z*U{E((m#~v9B=0{z2xf(R+aeV85O6_7kCJnNe{i6p2<6s!z(Sh?F*rOnw^mXGQ&hh
z<r6|qA7j?Hn8%9*M9^0gtSE$cjUcPk_JoM=+f0r5@Yl<dJ(btXRhC4L$8^pL&3x11
zFw~O=D+3PggC;k%1r`gSH%LkrQIHl@{`oP!HN8=!uCwRhBLOt=9D+$UAC}TF1dZ2%
zJ2t_BuYoTQz7|W+7}&3^o7-iv*lkJlIjL|=+rBk2N!6&*LVvEFvM8?)ndZZUE}!I3
z!$tk%NSk@mbGLzvCpCsZOlzLVbS=jWsLTF##&@1;xFv#wYnP!!G}vombwgl(Ckm=L
zt6qYi=BvSA^G7X!;eeEXS4$q&<5x_mOvzKP5%(<aG4^ix#kI;JSY%BWIc*h8(~jR4
zVKfv|3~QAV2yZSUnZ!4=U^YTsLC|74Z*CWD;zG5ddkxU}LU$5LcI_jc3zykxRA09$
z4pL;6EWuLm?yRy7s*5%YG{s#2|28<>QNy>N0H<KQP&^G)*PCD(Kbx`6%jshI>pF?Y
zl~tNCUM0y2#TNQM*<jv`6gWLz@3Xb)ijEMX3?^)mJjaJX0QU=?o^o|gD4pBD*ft_;
zxkgwWF|F$QtB$#HBg{z~UO3%7<;qc0o6#4+0bU6_`MHzY2x2;OpJ|o$(nZUKjwpvK
z^>Sy24LHe0Px)1z(8<RHTx>z>NEHRLUHge}mSFxxtsW5jZ`6JVdU-nk1!K-SWsy=Z
zLX*{6|GRk{?JVd;IZ*7d8Z1oZccM5(p$pk~M=4Szjynj3hXw&~sFFslmj>4Kn(cU-
zPwAckh$5<=#hr<R0Q=r&5k!Y*h?AA23HUOz8qxu1p$t?WddG7{Bl~(lLh)ngo=WUp
z-5o`|KU}W5sAL_w!>~Ws9j6h4_Z)GGi?z8Xb|#ybLRUrUltVlZLUKSc2W4cZe9p@k
zUMZ~*n^|vDR_xF<9!a*~iHWd7&fvl7C-?VP_9*%&cf6=aX%~b}O{<CtA2I@LOvlX_
zkM>A)3KDrwDZ3(Kc}(;|@;P6Lk7sG>R8x0hX}ZA%1psMV5;nH~Nr(XI0RGL-w7I=b
zcXwKs`rr?Y?oFNc&9F_%#%Z8tS&BZUV!FNqNxkO+Wm9I0Z_qEyi&w-I{u_JV43%V;
z2bC+o3fYk{2G1Gm$3-;>gfn-2#Rwf~EOF?q0Vgk~`k*CIJ%D6RO(I9#tE(aW+=h+P
z>6U$~sK}P*4q<+LZne*O{h3IBB!KY0P2}%j%kj)tc-b`#?|vC>P+dnLpt*7YS4+N0
zqgpm*k0DMDVCLL@bL>6&W<z#D%F9CKf}fWsE(5O4l_cd`z{bJl^`xd3@WZ?cu1VY_
zp_Z80T4p>fDT%{l_ElD>u6UbmRjs3M-j)9Z<S}5xIJWoCpa7i!PX0cqtQtaVetBgD
ze3qB<n}h(LaKwYEN!okExymw)j_&Y!fqv<Hun?{nL#ZUF^blt`3$D#HA0oc`?_fYF
zeAY$ttpw1@n$qd#>tNHPJf3OASnFdhTcrYahDJX=Io&l$KWC(JGNa&*KBXwFzgqX&
z-oOV1M2sGXVUK^@L2H)xRrO^$(;sTg%cTh%PB<c~L6j+L<1p#3cRRaI)p*M?ZFdFa
z$gVs03|I81d69EmFlCbC#vfbGiU~_Mg29J?|Kczl{@qY%k^p$)B}|u};2){{j?!O$
zH~M!?TC7vP483D7U1`S9{%kg=Oyc-KSF}wSPiG?HDw;IxSe8|g22`?kT_c3}BNTgE
zLi2;@gOpsthzZOrjc*PkpMiKg`s48~ko#>mh1cjM)7pDUUJPa?Ol;XWw15C-5t-1j
zZ&H#wThT<D6zJeZjv#uO=(dQ$iS4X974CQfwBfUMu!o7ldF%k^Vx%LdldtKEK1a4?
ztuVPWbI{2J&KBjR=0~H4l;HENdPtA57sgXf;Z^DCIO2PH`4}J^&J~fB#SNM?qne~Z
z-ZBPzc)vB=%tL~d8Lg-pjfUc`hpnCazXT8t2=@P97Pf#~&@c0Yi5~A;BbnEZH6G+!
z0N)JyO@qQkd7PRdiRWOy=e?|tjdr41?n=#zg92q&6yQU@FDqd{mRWPxncNq!OlhO1
zxo#%(D!zgI*snpE{EA`joKem?Ow-2{6NzL)Z-VmOo~5b!ipKdD5@3M2zaz<6<u%bD
z1!0cSQxhY79e(8uomj&hT+{Yn86}sMxt(mn>I*eADCjnfj-!|ulm_hlBBOk|`Ocyu
zD!sFi=|dWs^T=YORFn~Zi0n-;IS}@?B_?mW4GFl9#(bCzPsTGT+S2(+Fzw2Chd>UN
z8?VA|5|jmVZhyG%ZF1KALmIL@1V#^pfi*8$q-jtCMhdvrnjtfX7vGtN@J$S<9u;ek
z*1AzN_bK%<hZvh8_7V?t5n!LTbZi;-U*_%pyL$8t0(y=?zfi*NFl{Pw>667{2D5<Z
z)2Op<`~|HNtS$TT-z5TbpM~O4#`XnbY?0~+y1<i#i=3VYgk&H3%9yO?drA6vP6Xu&
zKbC(L7_eS0?{1S6cyt79#x3DaG~3a|2R@=8uf~c0e!}YD+ks?nx*W-FAJ+3Z8e6`n
z-_v2O^)Ny!c-7`&JB#KpZ0h0wg;%QaYE=6XIVHPG!vS+Wh5mH>a%#K(B<}oaiiZ59
z;cv1yn)kISIe_F1JB%5~!tR=5Mc!{4nz?M0-7rR7Jo#-FW!Bc+@P)z^?q`QN2GcK;
zCQGHa=duKst8XCAhL4iZ_)%a$EwQVU=|ZK?eF!I0I-aBO32=69&Ti!qK0sV>04Ifb
zx-;(v-u{0a2noRP|A0c4ee9aP*|y)?yrs!F<*yCOWYhVT0lM5gk8Mfx$+hd@8}`7E
zOQy~&d3-l7jW7=5(5vmBQGy9?wZ3Ywdv3e$s@@N_Jgj~7o0QFQ|Kuz2_cBB4nBR%e
zobt)-uY8M*Vco01sZit?k6cDx)*AIz)2@F%U~QPmCF@<;Qop8jczpvYGu~f@!ec_|
z?4=Ce8_VDZ^fbRtBL#)gR<~OOF^$>EW3Px`!fs0bwJSHju0vy(`tXm<KwyA>y-Tb)
z``<)12Mk62Ag}3Q+72T1Qm#H(XK=fq3-6L|=Rs^tX<Cf=vIs1S^(E`NrqH;Fm`0&s
zp6bYBqaXoac>a1$0B7_>XKwF_op(20qGF2@+omt&pI=wEC`h${x@z<FwYR7}!k30m
z?WI9${TU?4di~upI!U8R<gTdoj~l<vO8GkX@TVSm){P@q|Fsqg0CxTdg~X(Nx;J6>
zL=ZR!CMJLr9~G@5+QCKEHn;Y$*U)=~Vj8+b1-$A4-L;B`Ba=WP5MV-}bZq!#4WR^g
z&X;<rxMP}2owwpXwi(vtdsc-PH_JwE2Qf-yg_eCpiVO3&H3FJ1=g&TF7nR9KdMWgv
z#WR@LvR&j*W?5ZlW+^IQtSHX8U&T<tXA{7u=l{kwRLJqG(dIcivhAZnfKXn~IPNro
zVdm?*g~c#N<DXS?0?74uWB*qv=(`-gpeMO)d$~dP#3_FjX^6-rFH2((Q9ZEY0z>}(
ztx3@`_t+7cqJC7aX+Jx!BA$Wwor#i97W*TjD}Mdf(0!O#`=WsNcE*BNt}?eq!twpV
zbq7%OnI+`$k;d7wctq?zXN^F}fsJpq|0mSNh|kPW_Yn8xDFB>|ayv1~_8ASCC)QbV
zb2<<e`)-K8&>^5PFTZe3U2wZtivh9LX@h-(M@ZL)oa}_!q#%T_Vo3w{p0y2g-T%{~
z>Foayj2+;3NbO`3legCIU}82O@rGQ=gEHj|pA(_Mw+1sPfcCGA!K@a&1Hj)06tFJ+
zLoKqLq=FsJ>$c*dUIc_W5Fxu$XArx>VGXcWtCVZEzI#5@b@i*w!2spgBuEF0YzpJQ
z4ue&@da_A0>v0J$#VYIe=Ei~k%ZL9Tq(-O18yD=wd$fC-OGzJM*sLlL@jc2znbTB`
zSK2(#iJK{!Jl$~0R(kkQwu4H4)&a`Xat(gvv}SNn3cNxnP11%BDB_zSQ;dRxYH#K{
zP}hkxy9Q~JNIikC(fDH^qeNul%&6Cw+3C4Zwgiv|n=Wzb(|>ueb3pF@{TKB^U>zqP
zb@?h*5G4FZO8rCprY?{qOsZD6!vb-kqpFIMn>VqMgTx3@t0fW|WDPT6YeJ(So#Elz
z@t!Is&8&P`*)6|dY%<T|HJg&^3=0JVl_L;dD4Mq}daeQc<8m`e0?$|Zb-dtv<zowL
znN9!=uk#Uj{mPfz;2(}ae1K~ID>)vjPNdp0fO?pgR_28MZijHO_)rT-f~2qc{PZ(z
zlvP1tY1?`WK63I$zm+fgilEvlM#wNE^ljf^!Dl<90v{u9g6?GVuN}k7kF;y9{ahpt
zAtu;EuFqyl;NNHeKIyqBzn^tx_XKxEM7rWJ1X9*DXwbL=yz<$2Tj9ekRFIPeS2<85
zFfhuHF1}lR42|8B-`lhUl+ayTZU=v$-d})o49>b!*a|RGiK#bW;0Z2C{sMNB+%m8i
zNXXQEXL)Rp@z8sC3B0x8WG=(BxPZQ58~{Sh873?yG-c2FOu{U-p93;}rfGMklGjxF
z!x+#H5c2Pg|67SY#wOXwTA=>a42LBKh96=vwEw}O`xumC5)06G;F0ev``VHOPn$NT
z>nxEK858~ZE`4n6PBv3#J>wF3V4aDjo{?6$gIQ*d)QYmIy5ok9m)jah^`&aIqQG35
zx^le(xV5Z7m;3K;ahp5ZiY&ecq$Y%x=3-aB)Is}=0{Vko=gMoxdMgr9KEg`&P+ojy
zB{rVD7C?v&IS6gGkEhOBGZ(Ef?uA@N59@844C)s_B&DA|K7;XLlIlGuhsB5XguX$x
z-T=>_?v=D%kLkJYjf>Nx!OBSh)Bl_%xBHXWsRBy>ol5#Z^G>cQxto*Pc&!TB-t-f=
zZPVVqtb$Xb?QyfsV^-#OFjjEdJ6Phr4=_6weZr_{AO(qW2^kegGCvnpZ%P^a5@+Uk
zq}D9hrYJ<X?D863_gI_tP0hnmOrf9ipV9G0SEJ=*7U~VDNIdxHAJ=U?Orp6wlCkO0
zJ6>yCZJV}){zc$-LVzV0n-tZ8Qo@^PTKuUeF5hND`ZVr;Nok(+s6BbRY-xv<7zPW$
zI#xb<+07lFhDs|`jU^m{{|KjM%PJidrjT@G^x;jiQf(f=f;9|qZKqQ^=M(CkrYg>;
z%W&oEQ5cXE*d+_t4jgL|aK5&4xmwHR3=h_>bhFOU0V=JHZS0`;EZN2Ja1(!|2`3E`
z?CecQ=+!-FF}8zEc_m^7WN2U?vlY$fUPK&5=8yT4@00*M{vGT;a$_QGiaTJNXKfMe
zzFt;g(M<Na^k7#iG_;Dx;mBR~fu!_(?0(SB=bduA3nMDFm(lF!C!Y%(tg-wGg99@H
zPBuB4{cHg;V&Lk=ZVP^`cf$%ffCLqYB3aHHMbfmv6+7yrkFGvRJ`u$^eYMSuDa`U%
zg~TYpr*-VvQEbO$89j9*BN)-EPNVD4PC*~LL8*u|Vy`;G8g03(8k+?+VvYEb0e&|R
zV@e5x+y~=tW3ha{oM-gOGrozgwNOD<S;ng>bAG$0|1s<>h!fcWnmN8FL(;MKhrli%
z@PCTH#wJ^9re142o=s7n_}7hKW>AbX19w?HG&X|2EjSGYbh|oorTE&<mbQa%0_|5_
zH5AxS5lBpr=rDrK7-^N9P7$9F=Yq6S-JP?iYDA}D7P}GbgV$wqS~q`Sr+)WE@Et5H
zMhJeAX|a<1>9R-;CG7xAqs_qG)oGvU&3QEfhAHcjN5MtBP=h$y$jeoKf1J?hTK8N4
z?RSv}uGD4r*jmuTei0@_S3B?vh<|v1d;-4yokwmDEIU#!Q$F6)?2f^~?z}IibW2|e
zuhBwzC^&3sg4GS*n^5G3H(%OCTz}xgQRxI~r9JOEwGVZ!liQ3vph`?k@15Bod=>4W
z-ukDpJgkR2x>nUKkaJ2v{3?oeZTeaTAhi99S)3(-=RB5Tj<n7NmJ+IPNEpX~sQU+k
zThg+HK1=ehpARy3m$UI&eBOt83E{@mI?6k<3?MY4!AZw=a(t8=Ny9j0D|Xw4?^y^k
zTdB1xR-Sjt;bl~F4VRbbh)fyua2Ut|n{^LYT9a<@EeE$uaX7|%k;1<uLUQ9Lk`|ve
zAmV{jf=qf(Tf}Va+pb*&f6n>$2d^Bh(T8wt<=T+Hj5p}OH;klqonS+cW@ihBf=vRx
zGCW+_A8LjoStLGCkt|J|8}x9GhqdMbq<S4S(eS_Kp{=2i{koN#;I3w%T=vo?$sUE4
zP@Xh-dgknILG16X;Hq5rTb2G1Xhj@Ii}^@oQ8OJ>iK9LxiPwH<R5jn(+_`0srym=m
z<pcFOOAb!+7{|uhl+;FYVFu2ZUomz0aqY3{7#Kn1mE);=*Et;bNkR-cXl7(IiE=rr
zM8=yf=&9J-E#g$mixIUJwS+7Tb{ZpUp?A~K$_ZMw(K-Gu1HV&5fuQ=YF!Th-{C5@n
z*Y-hB4-0IjKT@LS;r#28=%AM1jlExLf4mz|Os*!<_Jj8v8nUh1Ocxi_Hpgd#U_Tpe
zHIE?SEGJUIN{V`pvi6q;e<A0E-zWslslwrcodS!N+r_|EcJkL@SV0AGG7MICI&!E(
z7N4;@DE@jfQYG{H{ZN&L)Z|=e7jlR*$OoLi5!n~)vN5qf)!a0G%DWP}6~(B0bt#M`
zBoLqv@doXnB*usL!6h!Q^d_Dm=H{VWF_UYA7j$L#*{vJ!mHj2(HGnMMkKVX)uWXGI
z-GXJ*gov@)c-8N5EeHH_=Z{wz07UpZzg!c`V8>E!wEe0kD|6N+Qz)}X2cxhB)evs{
z)dF5G7jDj&yM5+N4N95d5(<qfOL7bneVP)-&G=Y2Igeh|F<@qKFjSp%jrDeZfFJLw
z=NQSPt-A22@4M*30>ouLTaMs&53nn{dv0N)lS679!q+g*>Z7AperEL~eL2d`%p;R$
zbSN7EmWB$9<TA0Nje_W63XR4qSKq8({pvn`-!!<*m6}gc7!aCJ-Lf!TapakTWXcWc
z5L~A4J>-4=_*Egste<|>rcb+vY?x<HJ%*W$LzSC<?#OiZXt}{Hh1kEFUjE=_y+V#%
zY=cmoS<2@awC@;M@kd-hK7dw#hx1<(*MIVK&$#+yMkZvkv8hns0_w&!q@)?9{QRI_
zZdvEHVW~#K{+XnnKt{(9!+wZ2(k$Qe5U_E$#Ufd&_4^aX;nBIdWb)-0cACXc=HyGj
z^e49ktdhn`F6iu+_~UD<xo44x`61h)o9rIWn;W7+MH8SJvivn$AfD&9#RT1_=KF<*
zAH89k+r0KRbs}qL>bfF%1rT)>3?ioAO^X<NbjXgKJg{(miSm%6BN`OhIj`~DV9$ZW
z&6LfcNBsX0B`^ZuzdI6?Ivo0xbO%Rfr?SN$vqYRWE$pG0!EiDP={%kuiFVDb-PC#G
z5qg>;^BP{6VB%QV4m4y?9poKhbtq(=%(J|sJT-hm#xbLQq*5K}@wG2fZ(Jfz!kUcr
zH<bL$*9zG66niibK2D6jc*@_?dqrL_<pJ*_8xqL1wu=?Qu`!Y+wp@L9_(A&008om)
ztPh&EnPhy;!WHmT7k@Dy+|kajM`3Jsu5AS$s}R@TZ|0C<QrnsW7+iXS&-K$Y_d)qy
z=fuIa$_->0VB@9jN2h-3aFK;E8t!7h=QZ@nlY>h`$vs1!L73A#mU54x*Iivy6q9aP
zTuA%;Eim0ni&36mK|33mF=cE=!c*|~!O+9g1b~$I=%VhGr3Yo0#_Vl~TZZBWW37*i
z@Mdm2(H`(JQ+Gwj+t!xkb_H)b)dZM8GD}&Tjmz903NuM{y70D?4Z2xbM+`M56z&E(
zH=@W}+!6Sb)krncXyA#U&HhfVbqQ?Oas_G8cemn0tj60zD*<vU`MUuKsZF9#uCUZ|
z>~qvZ16+^#LpBnOk_ODvnb|F-tCYM*6s=0i%{-w+Ti@Rm)`GvLG~Y!a6rApRTI>a<
zIzBi<;nv<J68@|;fZKofTR^U%AG<t|^(*MpV`@o{o#rm-w`FJ>Sa5VxfySK>xQNg&
zdE(4~x|YFww9kwXVxXR3L?%aL!CjOjV8;+Y>@yL9Cmk}87<Mt^#YoGvZQj&t=iu40
zUvnT^!LjoJ0;g*u>D)_x8r25(W6=u`i*zCMM08fEMc}`n!bs|(E4?8`0a~GEQ8RJX
z6-dPD)7fAG_qZvdfBz)rUca1NFNvnrRi(H0k9q+f0eb%KHU7(%;Fq80b$&B@Q%ijN
zeDV%r{yEF)cBbmOycG7?nzEdO{LU&{vcH>8NV!%x3LzGMo`Y7!+<3o9cnUv$9#}w)
zoonuYVvJ#IO+5wbenXyln%_w?sDF%%bK&S8LoC5NOR0@YVfbfOfWQIy|BWr6w_p-D
z#t!4bArWH7k4Q075<TY+56y7F6#$K1Ua&a%%ADU_VD2EE2S`@hE=zOKJ$>)I@+4Mz
zVT13UmzB6DcB^L%N*?vE91IKgkmw+pkNRxH>no3c$>WtHq3pHE8h`5xbk{f0bsa3g
zyz-_#V#no~yp}>sBi;6j+s3UHA?{Nvw~*5g?Ln2fQ-I`y&=$7JaMi(rklk63AHPQr
zaxKN-=TX3P(A@DS!Dpwbxg5oXgj`6+0ax(KynW@*kqnoGc|u0UAl3$8xcNDIsu<Y`
z(|qu1J*=wZPYJ6f^SPZJh8Mpw3TM|joEn%PmuOm-C?-AW8-aq2P-8@cDi13`eShEd
z>K}_fzY)9BvxSCP2-VCvnka*LNU+@UMN9JB{V$fafM$PV`MdbQaALNgM>a8dBgmT#
zPH8`vm}XhS^Ux5lb~2h$Bs--Gb;fQE&ih4j_Z|#5pRA{Dk{T>VrChp3=suI^9P=G8
z&R?d1hq)z0u5$I#e{N#9BYGMg1INGW$naOTYP-J~J?h&arTn9vatrCy43UA-pz@H2
zAPE65F50b*F9HwG!Oh!CpW2gKi)erzK^74G8qb0^_kKn2P;NN8+)pL!-He#KCTJqK
z`I<{i`I;*>?hJpvTEnnU%_=rWstco0pzH0U6_TQ)Fn3|Cvx+7YHBSunr+z@!kZ%h@
z8}+5dPj#<8d|i94SbahEWP7Jc=;$*SGIij(Gmj9RSWuxIT$Y$E&Px5Av)x5k0Qo>%
zyRyo+N&%Ej8+>a**s;wnEg~P07Ge<R3+BRB0R3T2@medg&K#Xs9i-S>eNvU`8b-IX
zL;!UcHv!V1LVuV8vI5NijrsrmO;32e2C@Z~uwL9ZM*DR&^?L{ooN41?tCa3t=kkwJ
zMkqZKSs&vc-5t^#rmfofP+Jc2XKA*rI73~4w<pX5APYicg3@ebYzYq{p6(Tm5f3H^
zERWy(QG%xtdtFMipvK!vX1>EEU38mXJ&#mjV-p+3>nLI700SbHP$j8wD8G_Q4}<c!
z^n=3iFn&!9u}G(vXu74Y4+xW~5JJrDh%Y`OR*Ck^C}3$Z<Li~(tIEuRcu6+^Gyky<
z7#8s7-|VX_Av@k<D+swi^{#bK1~4*Daz}~9>JIJ`b{v1l8I3uNwWtF2&e<D3VNnQq
z9B=-_dHWXcRzs|Z_=sMFZ#by+faGW&z$iVnmn$hy_VE%>4vv~)5ww>i9@6J{vkZUc
zfr1^p(sWG$IUZ$HxDcpWyaJ9u#WJgoQZ{w8tp*uAf}=*;f6hGGWZ7e_!Hr<m?_p4F
zg4Wq6`=%E96ID)yBC_P{vO&~xQjK{(vn0=1_>8u2i}#x|B{4WP-2(IFXvig!8sH@p
zG&8Ts5>&9=%@Awq!=hX+wna{HA|tgO+a{@ybNn`G_9=VN(=hj;Rf&_j8BthhO&Bj%
zf!Inzmq-r5Ylg{6_O72Qf697YZkNKOjQe!qWB=uYQE^KUuk3MQN$~QopUF02TjuJs
zzt$j7?Be9wVYxaeqX_P_6oxP3+x24L#_e?m8Z=?cUsZT(mU0bWm_14vmd~C9*}$#1
z+tPNd$jx*jp)cKEm?K`r96;SY?n4Kp=H<l6<3M?<w3%;4HMWXKh)=dIFqOz?cQLud
zhHGalNDobK?*NWE^GOgm<^Rkk;47g0e{wdxzAwHYu$fQXdZF8p+x6l{Tu+-z*j060
zKjyXSpT*6pB;;2bcTPD?KrOM_Ki&u(<^{}XgwbxO^5lYO4Ke1DAOW&0A>U1d5?KLy
z&@z}h=}yZcz|L}2YId$zSM>N_fOtXTnl|`O3p(KxH#sH~zWC}m#7dr5##%exc3`=|
zNMvE-QWXp)TMGJnx|3k|lRfX)7KcAl&aHxo3=5qV1?;tqr2ue`Yv=FO8QSCN4FO3q
z>63J=f6vrK*ly*;?F#I=&4CO5Nw4oB>jR{;K9X#V?*+<~qD%3L&|IP8N~><0&_+U-
zMAm4H?Ro-=K8g9QLSNm1peL0|T#K1g+5CWaVwNF({8Fd#^ni9iRN&Z%<X`X+|9Nuu
z|1LM3M|f?4on#pBAeDCrrgsHXGM@+f4$}BN;2O)IppntYyu<7KgCBXUT<N7F`6W-K
zs7UhCRVZ8LejW=a&iUQ2{|=`d<k#kb8?%-OpFX6j{JmiW&50fgwNl}Zh1NFp7tVss
zoBR9MEVfP^f^&#;Ia=9(h^|#4?xsSkjxWpSg(~IrIDVJNR=}TOf`$S9wI_8om~1Pv
zKxi5ZSPCi~Cn%0xvrbq{7@2*r$KH@1PwcIz96y&iR*GFy7+<lTe{ag53(=@dH71#D
zu`OWA@St*RXQPpJSSzqAJw&$0y*TP+bo{>T(b3KdU)asmZ1#KjtlZu36wL0zF11U$
zcBK<RktRRoMzo$CS#0}aj8)b31&v48<IVsRWc@11sJB4R{VCDvcD7>KD6=!s4JUty
zJg58jhI^spN?K_8o(_5ZwoW>9)$)f}JqiAUjrpy{TblG};Y|Z#e{*n1#w8{<A9kH*
z;+xk4jSoM;*3y@ofcF()dCXOfy*x8F9n*dPG<+N?!w6kRl8eGtpydEmmhbQ<kIK)G
zJi)d#Q43>|yh_M>SR2iEku#SLc36xS900y+zNp+(5RDLLyPcNP6r&_hH$e<=`Oa@n
z+N6oHb2zWmga}?@+W@XE3OucFj6m0DOdP#lRX(8f`YF~n?Gg$cIF!1;FqL^2`;g7^
zfLr)sahqWo`^OBP+jbVZ4;4S2*-pL#p9fu`NqP%+&RBdNRJ+YsPy++Yuv)Z+)%0nc
zqO$svo@eSbC=)km-Ds<}LSfw~aypo?F-JogsqqXL!gjB!2kkuGch8q2#^szOhM_M`
zfn9J9|Lmw4Q_piVy-nZwC(#7;2YmmVyZE<K5PYP-x1kKl$~0Z8K9`9WWxe^7mACSi
zfj$v1+1Sbq0V2NRO(8@GgmC`^Q_23Ji>=J?E@y0dI;~*h(C^eHVMoIcy@(4D%vpS8
z6rRdr{>0I`PUs0`>1=>Y`_35l^BN-;s<GTE@?zM07Y@|!0R`0Q|6=bQctmTvZNai_
z+qP}nwr$(CciFaGyKLL8UAC)t`hM@}?xfGxIrrYAliU3VR#vjc7;`*x&1a4c+xq!~
zHfMbBRi`ZjfygfZD5zQ4vh3Vod?DP$yunM77j_JZoa1V+OSS5j-3o6O;c`-7+Nkd>
zgs++ctiKz^hb&->$q4iU^8lbaZ8pp-(2%{4Q1}qPM{ChKM2EZ9By2uo3yAcE0-YVU
z*JQ<jrEd5DeV5^?#D~W<>3H6MITNvkt3L}z<7h=WuK?tKz^Obq={9o%?$C!4MpcCS
zJkWYR)bjHI*%tK6yj|KKhJ4?WvgN^bfFqH=Br9V6ok1Sp3lM%6(uMSC8l#-U3PeY=
z%JEYD+_opysR!%~*aot)_pp7*Ki)xb-}Yx8vRU{T_M`q<nY!^AfIu|{2X|{8v0}Oy
zkI2UgSeCRmZobv<b1+oE@4KSVbHnZxu^g4gVohbm_^99t>%@mvMUbyKM1HR_Jah9x
zYHz?P4~RX0P$WGWa+Iw2KE*Qfo$SHq{0~j={?A*X{}u>Baj|O$o(55UJcHk%#FPFC
zDMl_Y=%lrMB1n-XY=^oY_xADL4*C-vkHT^EX9G0oOeaT|@LJ#jyN$~*V8zK|5V+LY
zF$owNqHmbUb1Nq2Z(JOq_=R#7_0a|5gw{YNN|jn_;h?p@$8X5bUHL6P9wNi5lf8BY
zG6K#Np7SYm=WirF;NI(2n=0*PLyn0bf6J0*F6$MmxQ>mJrsa>-fIQ3<F2lmSHTU+r
z$LVWZlf~AKxd+R&@tnT99zZoX&Ki!m{{d>SO&!zg981cC&-IfO<HkQr!eHNXlw88V
z+||-CBF=CU?66ycbA6r*00o*oivXV6><J!15P22@B)e*{xTW&9;M4;SA<AnD{JG_6
zaf;)+sjSEF0aBcu<;2_zyl5mp2+2!%ka5@pg)v>ED!o0S-`ucBPYFYmcm~uyMJYHY
z+yQ_;0xrGtsnmFYU*Ni0u^~m_ZW#`BMRAAIh>pA+n$Qs8s;#l(xZPMpFJR5MhQ7+w
zNSJYnbHUuDV?!izuau6A1ijl*!`;PEU(d;)cjB&{&w?@0J*8RgWGJLNY66@mHSI(G
zz+)5ae7qk4T0ZH}#ogbl=siQv{|^*|1A+c`$$`07#~EKmRa-f|UEoG)!AnHW`XA6w
z$X*Ani<7N9C(FjNBWggJ;<-P?<<NUpeMxqx@5X1)=&}U0Txv?S0fu}r0n|M#6)8uG
z7UCW?`QnqnI`=DMi?@~-p4M>g>vXTow!UaU1QLw{pi1{+hW#E?Gm5r}_I7&y(onJs
z;Q>lVUN$0HM5@YOW|GAXeO%nXftkt=Opn5{$oB1bNF`kb=J2)i?}Y9tIUgzcOkiAr
zm$FvvVzt|h;4@I1EgH92e%<LtU!*7-VXl`K$&Z}2lE(JMca_PvMQfF`-V)D)lw(h2
zY_g|0?g80?tt{<}z`mcBR}$y~C6AOFpA;25be;`-Vs|Brk_fK>#&td=`rkQ&Hqn+$
z&;speAVCAjC#2H#&18niB@W5Yfm6DDLn+vMi^rg4(H5ShW0L_U(FC}x<`Uxc;rF;f
zAEc&xmc7(};uq3H$RMBk=AchrtF^Qd<y(?a>UTqnK&LdR;hpYB;v2h02mZ?XMgl-A
zNDA}H@H#0{k3LtlNh8|W08eqQFNY^(4&pR=iN3@kzo&6?iyj*ORe0NQpEUA}pZ5V|
zVLR-Lh@yO~K@Hx+0@utR4^BG@g{Wc6HBw6!@UH>^!U{O`?-Ah<(mFnh#@?#;lkLi|
zP>gXa#T`G9v4#~uZX|~G=u|O>@Kz?HEPxaVwY6PEiwhR|lz}7wW$L$^2euWL{MiY0
z1zoX8$<YBuSn4bWT5j_@tqYrIUr}$lL*I9Z)Tn^|NS4y{enLFYh|_lJT1fS<bs0zx
z1~5jwb|(J9NrFzA25YbCOs=!vd;=V$g7gq>8@Ae`AmkQ+rGwhus5YLQap&1bcGDfb
zM(A))Qr4Sd=RR;3&_&Bhd6?DZZtal>i;0;d{OEdI->+u7fnZsQ-?hehhm(pNg^DeH
z*%IJ_EsbqcEo__gE-UQ_$a<5F?t-17w{S4}v4Xz!v+xlh_8dkh6Z|m=uqg6Etw-vn
z#gyBeQ4#i(bhXkv;`~8bZu0g+qTe3(8_N0tV&6B!YfSzQ4XhA5+p%Dx#9+HN=9n3o
z>7A#g50b);v6CyilZ>8$+_vC5YgxdWs?@H6n%8VzFmaB&aa*=pdeT>9Pzf8F!ATic
zUXO!Tmc9xi)KMv4i$=FoBde8Y1JB|l@&gjEK!4C1WFjn{4Xe>je=5Yk{>#(t8OvU{
zb?+alL$?8s{QD0ZmcfBNVmI~vNER$IF_$mQ4+D=qC3ph@!Z2L}z9CAyK1E)N#sDRe
z^qSArDQD4(yINVga~hr&l^eD9D^QTft>!0X`(k~Li~!q!n=!bSt02@0d(y=+(!YFW
zi^*zt8O^<TLwOWL!}Xv7cTcV0aiQJ?;$E*n4Cns9>vu2sY>b*Qs6Kgazh(t)!=I)H
zbi`g1&B49x<q+rntq{0ZSgZOm3=47QRN}?*LFIbXP+T*}X}RsTx?0&ViOcJ>;72SO
zCM*2CYTO2RHnavE^g(v*W2BTKaFMEO%DZFRZ4=GRq1LYg?JsGE7&R7j8k?4z#l21}
zsq3N!zEDC}1Mmv}T>LjfVAPKM&J#)AqP2-^3QVcW2JMi)bM?nPj}MECRdgN+3brH(
z-+e>%@qlq{_WA&|nGWPW#d0@~d&w+o>ss9VrdD`7wCP;er{$k=5!s4I)hC0q{gw6*
z0x8oj4~WDh3uu9P^tVS6+TLnYrg7XsUMOhHLl%`U&rSqfRSw;H>M4kkEm-^c?TLOr
zZM}@8NX-w(2-tsD7YU%r-_jKmn^<<nCkHgLh#EU?!cqHaKrG_J)cC6=p#FsO079B$
zjc5|(^oDjq$u!rQXEoo2c5lW~D+x7ZJ+GoQHNxLC#64=MRb=G*O+!=w2;GS7Db<lg
z#RR31E9F?{=uBS1p7}5xI<FX^I8BHqX$Ln!_;GGX*Eg63VkA@T-&K!FGWFR3+?Ce}
z&|SR-0#~4^(^Y|I;+o%xK9MaC-Q@cVWIVU*?&d6r(z_P@@Od8^3*fsn7iW{nR{v%4
z!`iT}x5qs!<dV6T)a@MJNM~C{HktC@<UB9X9fYiIw&eVjx*ppdfeO>=qtA~b=j^#U
zmuT#+0SiStY3OFDcWFDk8VpYsvP(uKVEIi|{nXj$o$M@;axG=&aUW~zI5G{93zS>p
zKXbr3<efvGj@~cey9m3wK$TA`Wami1W_O8pt3SY8V`21MUP5ZW=I413IrVGlz3DvL
zCY8M;_>{EplE#@mDD7|fwS_y45@Jf<5r=_9Y!vN&S}wRz`HPOWt9ZyMr=K1vA+HpO
z&itr@D$1$_gUj+9>gjTMuVqD4Af4NvP5JY^X6x|9Tvi<k4j^ACz+EY{YpC-Dn(wX_
z92>6bP^Xkl&~--p)V8&KuNlL8gj@Xyd%@;D^g(6Rq+BzCe#4eKr3NtZZS}Mh^aAd-
zxrb-JTvH7DEy|J9zgqoEtHEo5n*SH0bT%p((Z(d_UOhV(dp{=DF%4Fk^Il&{WoKLS
z<<bTK5}CFm+Il}U$h4@c4qhfa&HE&*!G{-u3WjWUfmeI~g%7wypq!-NiS0y)q;(?w
z9N<3nyHMPeIPH=IW?<O)*OKeF;i@wr9rm~mR+PC$G(k@IL!{LQp<mPDYje<rw<G|&
z949}Js1ytuT3(i(bOk-T0ckAeYbjm;kdiRt5V7Ycvt<YwK17Y7S?V`xOE_3dLC35Y
zt@d*=Db8EnD2t~Tn=Hmz77-YlhP_ya@!x2=6p({ag!HhzMJQs0enzFK8q&Pq23z8s
zv$38{%PH~h#ak?>L{Qd5R!p1lc94KN<S81AO`<q=Kh$ycng$f$guUa!-39@;T8Z|B
zT%nPyq5R>2bM|{rikS=2Z&AC=wo?Eo04g-ML>|e{GZ79hEd%P6j%Sc#OPun{m~V`x
zSK^Z(=Novy=kac=xW_sk0r02IA$D!}HP~%I;uzyd841;tgoupcvf`V6(2*9E;{S|=
zZfDoebQ96DVoxdS<Gk71cb~DPvjfSKe~Bb1%DDW#O05O>&i>}7=CZ)~{O$i<_pW*4
z5h)+=W{1_~B2TEQAoC^ETf~|tYRSQM)l%VuR{y2A1@ST*O&-GdDH4CW_b&h=e1R<e
zTLAN<2p?jUmvx7L_Y}$Xd9g5&fc24|JOym2{tR1UAA_B@P*}(j0m5}Ex>@Wq<=%q1
z@dVdE#W0{2GnjwppVkbUN>^S!zuCbVd%Jzg2O@stab5}c&Xl`Z08XBuD7?Zhb}tY!
zPGF2+c+Q@!aE(@(GU=IIVfu-AbWzcUv<*%LajwLD^dBlt&ykqmp7-BB;6}VRSsqG5
z^jTifu|OWw*tiN&jA~^t=9kj`Fq4;d+7BmMd2S-h#nU-T2bk)FXZwF$D><q<s<TcM
z_e^@W7fGWoTiTDVS3RCen(O4ask4&i)lW^)#9qMbzTylk9NLmF4X(veeJ0?E0>$1M
zpuCmsx!Gq5cNEG>)IWTkv;oA1ik&H8=`<<`2jTn#6Pz@+2#g@ENHR<r(O@Bb)++ih
z*X|+Y6l~n|Qh9HaxHJ12b3NAKNaF;)cDdl8F_5MF8Qevf24+D;Q*$<Scc;D?*Y+jY
zPgO1t#4$|vN-2_%2E;Mjo6-t{{P;R4qa&_69MWx1biH^*+=rPhjhr)Vzu=iJTys0I
zGc7f}=1CgGmS_gJ+nXKi7Z5;&YvO6XW|9XEQF)A+uU$f0RSyjCC_Y(k`k@@95{t!c
zJd(4nfDdxP6vB<d7)J9Qh;hG_R1L#>^LKcQb|%j)d(gO7B+)2q903a;&5n?mVtlH6
zdeSG&gVJo$@3O`j#t0@;oCPTIR9!wcpqYEvT%%_={JG8-iUpF}<mX0Li<CtH)Q*k)
zrrU9-s;R;X647b<Rr?Y1XPw05R@t=fRuEp999=Pg4R}OfsXQ^{=GeV-B2E1EJ~L{o
z=Qsj3Y5Q6|u@oy5F9z|IfO~Rm<zscL&<d~aGKu}~>8yA`ps|bK$#zx8V%l6ID^>)d
z{=+oYnX94!(#IVBHOlSES^Z$fj=(q<mbc`=G2%`*^1KwF8`Egs)wiMss~9>J2wt(a
z^Z9%Tj7Hpx-K=gvz~Y@{xLAB2%K-H>Y|P9+3P0&?^DZcML~fPLsB#GCHWn{%0{-gJ
z1vR3HEV|F)TJ-YrXQ%U6ktKJ;f(g{Y?OC$w>Plg&8%_~}l*&z5e+?7%b|-pA_t#Lo
zG?`Rpxw?ioxh+d!l$JDkDN~D1c}Bm2lhnM;9)}GmD-5Bf))X>Hbp3)JhfE<?rg1nL
zAi{Kor4=%l*L<_I2nVpGeN+ttp1S?80;mNm%N4HERws3og|&JLg&Jjqkd3l&z3vL!
zi8iW1T_?#AB9XUo43|}oy}W=ko?zD%Atu!{Z}HRHa7CX3e}9(IrrQQib7wy}F=s&K
z1Y^So@+gUjml|Jnd`5q$TY`g3XU4^stINGl^X%Paf@CefE$rN@Tsf3%-~q5ixn!M^
ztet^^Erc7z6uDiDu4;W?93#@x$h9J>29QzssnV6~T&%;!2M7VOsJ(M$3q~#pXmw{!
zpL&mHGD)LF$x`(Bg%=)vQ*Z!3x9)HH4WGdj=_6JDX9`aJ0gbo`V4Z5-EfPwE`W9zy
zfJ>5y81YJ30BDbcM6}>jonT7dMVWLM3C*wjJ0UbJ8|#=H2)VhUI~lGgI8z)U-n5MN
z`S@CsWb@<1HRT6)<7cOre+e860dUKILEwBW&Lv{0WB8=z9YU_cB^$R5)#E<-NkBJI
z>J8o%u_zFhMHO(+P-R4R9dbUesAG1g(7wkSwZF;7Ydz{B^W1^GeTy%oXU}P-gla4T
zGx+l*m+fpsFMhq&fq;TMUl)6Z<x!!?I8Ox=#%U{IrvW`4W4N~n#Jk>TZUX7a{p$G$
zI>=Yvhg|EX*eQ;(?R!Fw9OF_(jdl{Kj+JOPp1Zq=50F^udRAtNFmESL+$LYY98&L%
zpXz6^WLZz2rYJV8Qlq?C^ysX$6J7;{t3nKFP^TG*Ebr$B@c2<GjQ)`}?Yp-R3E-6t
z0$kH84vX2KH@cMde1|I$%1KFyNwNo+8EBQzAE=ORbmf&S3eT#$TQJ-$VQZp?pc6}r
zdI_GfvSTurDrpZER$1X8qAS)KiuD>Tz)Da{`fXhWTHG-L<uQ1JIJNGHb{(q+xEX_M
zm#$~zy^}=wM=Ah`l8af~3o&wE8~05-4bu3{y$$M)>N?KU^|)=V0c+3kG7r&i2Y23N
z()D;Q``FJ3A{|bx^HB9uu9!)EOb6<d{6;NK`vhwd9Hpqi2jPenTqq@jB}a&#RavWG
zgS@|B3!gniJk~*&$1Rbcjk1=$;9D<Q`5M(s9>?$HtrR4X*<-J-(pA@sKJ!`gC;50l
zVcyuKkT&LM@{dI{!00K&SVwQJU>#(mhO-ja8NY?=GK+X&QL;`2c&LZVEE7_{OcNS{
zWa!zZWhT#Q;TKeAq5Ff$uV@7)$&zd~q63Oj9<y2V)v^S>Lyx-RJrYr^>k?OS@t@ib
zEmGHm39sk{J}}7z_aQn48ifgB=LVq51;<4GgYbJ6Y^x}4BO#cs0A`aeNQ?-o1^ZOq
zTf$nHn66}na$sT}j^ygvB;aAmBV9LqOwxDj^VXT4zTOKRT=ZoT(MVBH7^QI-_pV8i
zd<V{%4UX(ButWeIE1tuW(BX8zA$54w+YY!?i60i~tEbb1>!zAL1z18<avZ>8843{&
zD`JoC!gWe}j1>#`{fwp^N>U<#lr=tx`<C0Qy$`C$Ly`C*plAS)e0?)0k2i})RzBlI
z<plU{;ldn$K^ZKT_WUk}kUp9*ORCC^b50wAx|H9)l)(CWy6u)P(cUl>3rXEtwUAPa
zH$!H)Ue!!${uJ_X9v~!(;?iJWB!B>(3ZBu<XAVU5Ktj@YjIDj=|AMqC?8aks)pz_S
zb_DJWg!kVv`0u}y|I@L#PRV$eL3`hW&XBE5%~_p(53-)X0G|d{aj-OH29=2ch5~(>
zFk~5uu)W&L?;3YE3G`Dkyb%RlAS40|_D%YUFCVaFOkAbnoiViEk0ca2)MA+jQ!~4d
z+4H?w6ahu=Z)TUyx;t4e(*gqHrlpaj%`bc}5@C%{Xe&h1v;yMrKW^Q<SY-$a^ff!}
zw?{I{PKtRnv}!F0IyQ0<WwnMB(kLjKK)y&GmYSr$0O&uA5q}Kt@F8Bo!2;S6q4>DC
z?ENz?y}DPtQTNh42a7#PYJ~$!m~nm1vwm7vv&4dNZZ8qD&_pJ?o^MnIrk_L-FDsk7
zu|b%H@I%-!Qbzf+L7oglLu&jp=Q-P+vGSTn&v`brr)J6$Cx=YLOi{?BFY0dGOM2-q
zNvljPZp&-BJ%fxe?Ta`%%Q3O+wAJx$bHP{-1A8@?Noc>JlhNF-Jm2A+T@sG4?Fe^z
zvkc@;Im|td^R6WjLE^gjC<q>p$sMY!TT~0M<Tv%Hj(B?mkzR-02(mzh#LVh6eb^8m
zeaYePQ8(RHTXBbtph9^l-7j>3&IVgrrps3uw9>2Ok3LOBM$lZ^0U2g0I!<pyRJLpA
zY;!G!Kg?jz1%np&f=2K8b{)=m2XN?xW_Lmgubz<zv($Ah^V)lwhxs*@A#$(DLa;^4
z27XtM&KmZ`)mgI&)dy0untm+++q;!@yy9`R_kbM%Ich>7GOr?U-WG6UQMZv}0}Pqd
zc$rsU8Pvy<{8_qM9E)T*ONGrw+-M#Os?)^q-XiT^*y)Sd1KVZ;1=+wupvc}o&@;xR
zF^&wAsrs34K~pCMp3Zy*pnGh1xi~VT!}G}slb1kwRZ$AjrYwDI=P-o(T<eW>Y4vfY
z8|u`5jI{|6Fc0{iZa1c<@p}i~dRrv3uUi3=aH|H7S%fes@yHqyB7*AI*NE6Su{$_;
z@6}i8^_`qKN6&*3=Cjq+e7nj5LNQu=uJ<RGpYgNNfsL?;Tq2v}6<hbcqXbZTDHocG
zp#>;9&k`ucb*X&&WJCBif$^PUTgy@Kk~#+!LT8FjN-ano`ST070ux(yt{z!=yWED5
zHVWzaWm#?DlXq$bPmZlH7{0P%BBdk~FRyb`uv=!|k}8+oclCDLi?2IUGpP#{(<-VZ
ztGC7kKb?9mZs1PmUMOOKd>DSC85|&zw~xGFMf+$5M%4i;N@LeJjAh(|H`|b{6$4)9
zgf1F*aiS}RXO&=Do29Hnf8W!TQpHrbdL8f3nvwhl@tSRjF)qc}qHiN&O&L0HnXy9u
z%ZIC$g24LkD0ZYd&fBUp6b=yg4i3o9q6Rz(NzUAJNPu{BwhBsWjV9SDt+cz%(Vom(
zZd*H8_3nK1n~SquvX2tM_rUD=KZhL{NZ`(Yt0e!|!_NQj1^(am0+?ad%P3i)TaoCI
zTGfpPHL{-G@!*(fQud~E_wkEAP-LHwcKPyhZrsd8cP7x1WNjQTmg$<<QEptcADW8v
zc5{_?FGemkE!5IncimZ@X%$#Z_Rq+!K)zH~C^}|ANEZ*JC>|Fy{3Ru|BNaL<pDGt!
zfIGFFk8k-eGlF~UEf3+ddZt*2cWKM^YOo`%RYYOlD=Z0tw2;ifeM;q|(=-zJ0!n`l
zxkhUMAHuju`NR8zDwYd%mDBmZ041nNb+Uo2CXw^E3K->a`EqiM><Qx5%2E&qz)T$;
z;Ia-h&eqw$ArbTMy{NH`*~7=BbHRWUsjs}|PkC2uW!|9}e9hBM<O!hJW-z6=7lMm9
zbY&j+3Q3UCmagFVuc|cE2P;y?#+W8_3I{ZxkIFO<<R>J;7T~Xepi3pTtU0;0eTedM
z*r%@gN}u^e>tYMM#13GaQn>@Lm>7K4PEOm6C=H_nj%^=X22jEHTnItkOeMB&Ax|?>
zjV?b1rGYcRDWvH)n-2@tXEW?Wz7$QlW#z$OWuzzN3kWsUT;mQ;Y!)p`)xDeewKO$R
zfRHd60KV`K*v^qNC4d%Q#UW2Ly;@A{0(GN{8ZveIl?udHhDxG>z&>`!3|eMx)eufz
zrXPFN-PsrY><zk7_^1piei}uYi`o1Yc@nA1kbw)me&TK1x{%t(ly{^i%f96P>7&C^
zf?)nz8vlR65O{qVL}ZLLwr-bFR6Rjp&%fE!Tecu}xY$MpXESJY@Q0a8ux)`liY7#=
z7;Ula(VvttcZRuZm1e$Du^?>6F1)tFpfifVwHFS*poIm7#ZR&<E#VwxSFDsun&6wk
zMqHMArijWm`jWwDmIiKaqZJ=4KPG=U@q0!ThO3yvht5ZQ#zj_BWX0uSuDMQXHO)xd
z2%Av#Yag0-OmD{sS82nO&uqIX3VYP^4RgYBXl2XQybEu5*IZB~7QRFrr*YXp59pgL
zKw1WPVX7DgYHCTttf7!4mNg;Rh(oUJdM)w!&xw8z**6|IMM^n#NTfCL0DqMP$r;oS
z(=rvworJ^pc2k-Szt+>LEA+X})x+Vo0VjLQt=n;xr3>ltQ)Y$#s48nX7o*#Af7yZ`
zdO@o!Y{Y*^W$^Io2S%{*;DJPi@FDbNB0cYsEFQPZdIQPo0cNCT`AxluzP?S}tZ-fz
zKL^UOLKtLacUbG_I=*iSE(gX+lK$2M_U&UAc_}2&nR9M-o1Fc`oyT&+n?Un-?5FT8
z>FptXCd_SdeW|(QA22KTaIuVyWr=a`ojsY_<xcn`V)NB>0DYYVCBNTYFvWjfO9>?S
zv~&myIfVUc1UnYIz^0FBW$$I28l|b&ijZ0Y4@>i&$Armsgkdwegs=f8Iv=f*Cxa>1
zjxq5!Wr9p4<L?_T3h-dHjM~IV>@xjc^uml|fX@pDK%{n|#d+=cV{JFZFU9X^rGgQf
zqR$_xcISA_@K(%WP@C8Vw1J<FJ9ypCG8tuoaN4&DSx&#G0^K-@`@P0&Hc7z?<S0yi
zr^B?#De5-XGTf%ho{6!LHdE|)(3$FLn4I;td+@SPE@hW2NjMr7w6>bQCp|oEHtP`u
za|W=_oUBC-T9c0%ZiHChFo>1!1k^97PCV+~25{GP_d~|o9QG;tHOeH*Y3Dd=%ObY9
z1$g;A&aBE%E=@^{%WZE&YbMxak1RKucC2GSE{!M<`t^B6$2cx53Q#vxB@Rc1?7(jg
zhV=wdOp9LJywnx2&O#L#Xq+ORsJ#R9uY*5C8nD&BRf+$Vi+wrqz4bFS7vge|V#1ec
z1!>Znhv<A+ES`v~Opm+oI>mUhDzp4IS5hJy7#7)?W-Ef0nNF8d$C$pn#zRj*tq`1_
zTOf}f+$L}-1i+YRXv~|+ILXMuO%+HkrsQLQ8@~Lv$r8&C&uBEjbQ+-uWneVeISK08
z%#oT2)t_O4KkB&_B7hXn%tpFAIGgy&vc6ax{NuF>h)PVK{P|VCV!6dQV=p;eu;|#9
zS8i}%`y%W!+RZYVfMrSLk|L9j+FCw<V`I{U)a++>#rTN_qa+<;ffv?rta4ynD;x^+
z`F%7Q^K`y9FC4gTUD3FEx82ikbrO0ow@+~B{W^Zc8D;+#i0BvZxFhjp-*R6Q%eV(B
z=Cv69@$P#YoH4%@Sss9xeOjo~KR$eigJ#%(ZD|iGHotwH-3<*YA2@9dpX+k(Ufj;l
zk$;cMaQ?uSY%6GV$5~lIjxmlvc-qlgv6^MrVPkLM2fgT7!8wAYH|<(#ZodLkCS@%8
zM7)fZ4<<bKheG%|-3im`9VOgHo6U=QSku#gAmEDMPVBj#sEaDcNs}#^nCJk`T|FrU
z{vNt`ye&<7n>MraE(Q(*U+f?7u@4b&X-`JVctc*zX7z9%RL?95O4=_kDPm^4SOe50
zpXdFR>BhID9v|!*pnH6$E<Ru%%(!sFk&hGY#m2teJs`ryIL$uc)W!|=xC>Am!*|N!
zw}FRhqUg(Fxpf>tZ06mY14zkfN@4Ly!Y<0;kd3`m1zd*+z-lJJ)XLAzj+0y(c@fgq
zM&rehqIsObVBj+=l2d{t?NI+S&OW60Sv~utte=l-UB~2Gl?br9P4F+;fi(dBr?cDt
zZK|n7_N=D%L`37=-foQZDO!VcuTHDVvfco_j)~Lmhr@b0BJ`B*VFZ?gI)90aT=>zw
zm~~PDY3Za=&!=a3xtDGERU9!~npX?zX(pB^qCWl;JMI@}njqppD$;!MpghIJX)`nj
zzw3&v6h0(D5&#fC=}~eG#*n4-<d$^@3|@bSZWvx_^S~ywt<`k+hV(EnpFYxcj=GzI
zpc`_WE@8{CJiAphlsDq=jy<Gwvp%CcK*ewo9}g4(m*(@J2a+NabG1Z*H{T${O#5mn
zs0-VAyp<y%Yb3WIg_KPxUiTP?rM6`&SwEoWnO|iI98vTWk$*H<{tVbOA3Dt`#PRQ2
z`aUnTA?s23CB$aGA|uUK4mr_?g^@mW6thOdZ!^8eOB@2pJ?3A@5;E^4c41W9iqh|t
zhT|RJcrdBH{6Wo+D*-O-$-BZ2-92_}r40|KiFOcyxF(wuavf~@8}I93Me-h-u8_Zo
zRSkrxu+t48umXczy036CEJ8_l)GeqAM3id*AIAmOw9k3R3OzvwwZLFScF~R_UuVC5
zNMX%Oc|70JMnD+s@;U~FAK*c(83ehl1^zK#AO(Q`4?_(9`o7v&>#r1s^HitQ4T=RT
z`;a%kz4~(AT)Zi3bxb2XGffI_u21-r0QUm<YaAQ8do8%7QJtfgu8>j)mm)GsEdyi3
zzmW1?3F=0(kXUQU3Ff2uTq3D9%OizO4nFnpT#`bIAUxa9j9#i|R7YJ57r+)}PqE$w
zPm0}r;dHjY4*8-NmjNJMUkK1%V41#rSQlgwlD8?aQpLk~)~9_^FTJG|`pA*8m^pV7
zEuUClHv7KoiAZ<%rnPCX%nBmmN#IP8dLqVyf|=N3Nsh71w8nic;jdyf%$98v@RQ2`
z-7$|5`ILKG>D3rR0)iSRLh-iFGJsd+xLJzMyS1Hi%r>aUCvsP!J$3z;;M}(X+;qZi
zl_*(U&XnK(wDM><78|8nP1Li*oJGt(c%+wP6WE3=WKJrtWD{;&n}yqa?*{j`Nwod4
zmx-;pOVB$q(Q-S?16$i*3JV3p@v1AT0TlW1{41Jvh0ItsdFL_2WP$4`OHaT8shRh2
z!i7g}FltmN3|@!s_xYec-L2UH38xln(q1N8JIq?z`9Ys!U}$dx0so>bum@n-|6VEo
zj~Qx&3}y_&;5){-!*v3Gc0V_^Pm%`&b(HFw!^V91xmv8%H?l2|=`n7}-I)yGp&uXU
zc^&f=aq^$opi;dDuQHAdYa`C24T?lI?__V%WDGH&2&?a2%eY8>{w@ddM!+O8sbh6(
zr76ld&EMhix&sXO{h(W@#`8<U&4`!qsaADM)c3sxgYMieo2;8K2Z#5Xw8OuF2i=p`
zrc#kd#12U-W|BFz&Nz4}oIeZozCV<{j48<U2xOUR+E~wMb=76h^#(pu8d-o+-;2XE
zr3WBk=b|gTO(25k7zHApP@lPSs8TAS`TerplSAU1V)TQTztvVS;l4YR_^%I#Ui@OH
z9-EamsKYu_ogQk+w_qMaY-_hwaNElG;>Uw%^W@MIJmVS6Fgk+ffuhIXvo^&?ZPpUe
zQ^ZmSyqwR*Fe2R4oN%olr)~2`<Cw*vJwVNN-a>Kcwo<4PC`Eg`<UGw9br=a6FyEjx
z+ViQH67!>3lEGSXIgQj*yP;V28>m(R2WZU5`y8kl>8tP9k2)WyUZ@nyZ^T&^|Dhpx
z0Z_xgbvOU%K>4|dp4E+<x`ZhQF(AxP1oCQ^2F3R|)c_Q*T~Icc+8Fj&;JV%jlQXEu
z@&NeZpOB!I0UgRot&nL7>E2`YcrF0Q4x;spY@DP7Jz``Jp*yV9+h+@Ts3<!lDgy$o
zr%9G)sVGw|Q5?(%VtOXLBsD-7WcAqo%)`%fwg)E;07KY|CT5@o&xt(HdA&Oo^8=oA
zCl)g1Wb1a4_5E67hKX-9e?pMoIo|Q{F^Ao2Y5`1-p*^+O-AUdf#?8zHfOWJ2pC9!{
zn02-lP|{HJEggYgx_}N(dF}GLu=*yiW&$6#d5||RceA`K&?+w5XTt<)Iq-=~`xGfk
zwyD-rv@MH>-M=_FM!yk_#K5c<&jt?u1`ETI;CG&-DIqHr`CMx4r$P}ABs|lc-;1w{
zPt+}5ezUqe@>--}Zkd6QJ#a%6r(6&23K<y+&TJp*RvK=A?XZ}hQV9qw^hsOcGem@Z
zCd0|oZ#J|yr;u{u(di!_3707DZg9!8P4VXd=>JXZgKNaUpRVd}pN2-uQtc_j%=cRj
z-2f)21f-d-q8kLp07x4wCuH=HYBR|^gDw9Mmq;zn(-SyUXHnB?dOsXC#%;f+(Qo7_
zMuOSq8LI&f9bi>z%Ba}2=3v{+fy^Q6O1l?emoo=e+f6JdDRYog_qP{L3+qRbmJ+h0
zA24eT2gZZAXs)Ggrk=J`#*7Rmm5<aI`V><m-s7Am2doaV>oRiO!lG{O!GtRD??zL|
zfRwSB_^o+s%UN>%g*&W}WAj*dojYehod}S2cP~mUKD}Bia<f27M^F+@5c#x$lG9Lf
zk@IY5iU>cE@+daN`k=KjV*!Y@<$k>PFU0{50{TxQvH$Jpv*3+{m}LR_ohRa`@aq(t
zQI8=ZM!D(qOb>Oc;d(0R3Wy>~EM3d#Jw^B4t81TkC0VJD1#CLW<&+;kNYS?Xngnk+
z-O|3h0K?-wmg@MRfOW@D&p5Eqr=T)J>#lA+{~4Fertti7YBUgAf>sk9Sk;$#&ytR&
z5jpA71{S7h_lT!aLUl}t2Sal1+%uxzhlOIc``-Xhnm0nkgItirIeA5VoBsL6f_OnG
zCKk%;iy*^iJ_%HsC-fN+>JicuJXi*R3;io=#*5x$0r)~G|Bf-mOXI(f1KvH)Gd<ho
zF=F-g%X@qE8e05&-$o(R;>*>o1Er{sjC4G9sL1feZww&jj@YJEFapc@y$!+zmx&NP
z-LuVcY6*`>3)1)G$y$t{xt`Ai=ea+*TLQY|1|O_)f1n{$2-OwykcESgr9b|>+Dd`2
z4s4}0v})C__LP0m3|>*VJhE`}qK67D@*Du^f)TrtE`+j<`BKrcr7d0It*d|pm}ZW!
zq0RP85K*8WeB=UxtLFxm5JZoG{0)V<KYbL!D_q8jVbR*kL|ki4`@wf0V(L&WBku<Y
zvq+3`Vx!n#TM2*0AYjW@LGVWndiHHU;)wMVi<tYu_2tfPGw=q?rr>d$#eJw79VHwI
z=WD?CeEERn?)WU?X{}!|m`Y_<C2~8p;fAdc+zB`_T3_$I{<O-IC=ikddg!2D(ctEr
z2gE}qAs6AEn%7eCsKj|}bZwK2|COLa#l1-?rMurO+u3^aC;#(I{|5wXB`!d%u?X2N
zZ&Si9f*n%sKr0;mFzAnC7JEF7j|0|(NJl%ZJIN-P`JKT(Xe|QzZ}m|;ikNxG9iI71
zHT|k=WSLtgp8emWwJ6^?$Y>IQihQp1!Ntx>7J(5~`yo@hz;<hSt@AF&MwL|WV~Wcd
z24FHk@zl^IR6(qae^C4?|KeD{)#gy?ph?HGVVt+KW?))njRb!5k~az&(Y?M`Te~nL
zYHWO7Y~6IWh8W+TJ1e`f*{c1AJppy7E7cHsj1m5x<~yjY>wTLlnE4`(5=@pc+)0kz
zMMEwIS{4(E0vc-*nP9SB@D16P9K3!N%wx`z(>i+}NJa`J+}`?57v?IG?P&#z0#KO@
z^eQ7Q6+@5$HgiqfszN%Lt-=QH*SE~U!tED-o!0wi@Z@YQ{Bpu(kO+t-EpUFrOc1P>
z@obDmbdZmp5M|6F17;kaMRxDF=6Q)`;UVr4gSrVivu$W}Qf(){;FG6-RoDR2>??q0
zg*lb$!=nW^&l_&&t;5jYeH3(mc7?U4a4Qd+b1;PWpS>PXOk+~LlicMKFF)8ygT3hr
zy{TPeY=(_W1?VKsud7&8pR(FFw)6O#(0BG1`>MEz67Q2O&3)2_C1=O$Z}<XNDLYEv
zE&vaYoiFdLI40TsT1JH~EjfZmmu_Sz1+29vU*N^{Q@H)q7%ET+7P{0^`8lh5&t{Kk
z9tY;h1UG*^mmp5_uQRNg=B#IYoc&OrGH!(%3PCEAQUmc7e_UD|atfG(6}gfOaYka>
zK;jKddy;wwWB~zQe!-X$lb$w_3xL|oJs47(d>A3bSlJ9RM5tGpAaJ}ifi*@sCd~#L
zqduVs0OesqZ%Pf3Pw<dI1*r>J2p}E6uw0YWU~-2fl75sr-dVtxU|Jb*`uBOg=6%ea
zsI9kq#ra4S3msXiSt3FFhd*!w`t{%C4}|zSe>-UI#bH;1u51F>m+=V-zC=UtL@wQR
z4aDNrH4i_pj(40N0vQp*AL1ym&(o^bvz(Q`4p8QbcXu5^eEqp6bkptfkv5W}q+Bv$
z6uED9E*RMfW|%~S<eSms!p>Na+4yC&qG;|qs5BjD_pnqmhY8h}RbhrSzZpp>mF?8J
zc>%Ugf4YFwHLKBD?uJwq7I*0R$Eura2X|HVz#+;`HHs8KU%bz1Zh9aVjgWsW3!&&}
zfcXR1b3_rmtns`qDyO}#eVP?|)$_a<PyFrF9t+<o!+QS{>^&>uyoZ{%FfFH~Rub6;
z`d0dMge%gK{SQw!CE`4sj4p!hhsflufK?BCk8=Mzf!<#HgUM@M#;6F;!7K&~@nCfR
z3JI8-GKF?4RtEG#>}79n$MjIgrx)~gXyWDX-7UG1=iDAgu~y(qH*@0~(s_ief?frX
z{llIii=GH<T=0DT#4IOv1TrX!FdLKUy9@ujat#xCXytUhz)jJwtL=J4+T0!A^vBJv
zU3FeuuAEVV^o3DdaM<{+k$EsTg*#%(gCi&@1mTyU_^yd-5?c6O^QQ?0bjd@`bksi`
z3@M29Ppwo&l@*3CqQ>u&aon7uL82?+^W|Uj3hA#}dF_AX1siy#0qCD(ZwxW7L|bzU
zU2AI>DkdPXW*kY5gFXq1bR@IeS}D9to7f_2iPeyQhmS|>qe0Z~I6_&wb&!NOK8RxH
z6Qc%Bqa26uur1&kDO=QZ1W`^X9|zQvVey$!B@4Yw#BO=><SqAG+jm~#MYGFKW)H?&
ziE#f3b-Z2qeZI@9NC~Pt%wJvoAL@z)6!Kq0YBqHBuHX0u_v;aZMkI@v5aZ~_$`{SA
zFaI+`<quPJz7SlHr7GXuCoe+<a)3LonPy{;UppTm{-2&7K?!;jEo`i2b+!9DiEKGd
z$O{>bg54qZ-6VBu=tJj(d|8;W(c<&G8#_J6MU>IwqRlmUt+PiX^D3h{=`(HobMj-!
zH4g$>H5G)72c)?v3^8rn^#Pc&7g2Wui9~6)1QEv%WZ}6C;c=6kC35)KCx)tRY$|;&
zbkDX}@@cO14l>4$QVXGrs$MAG@37z40jwukzwNaBtH^T>a`PFZ`ka<0NEKa+Q>uo*
z!9)okgNbXvwk&1so4|#fK^o{LhgDIkH?s^KTe~P7e_i7yhI#@dY2>EE%9oCM6OW8L
zLqP5XQte2R7U8&@reB%%%a5?%&TL2UV1L=Tldb$+B!{6EAB}xrm<n8Hp8luin@f1E
z1uP6%pmG`ReLFz>@&?NORJ=(iDDPFRCv;Q0esh(33fu$$I1-{jHwTyT2GCK_G0$>G
zsclBv!z@GAU$|ciwW06+(3(&&2;Ak|9x6#h(DP`fd6%};XG6n2hpq<=15SDq@GI$+
z=4u_=vK06+pvRlz3`K-XP7P2krbtU)F#>q9z_0(2u!JJc2aOD$H`2eh+(&~GN$F5a
zbD^`IL8>rOnrcfl2*U(HR-_{xjg7@?|M^a9Ic&@s5IlK@Y62_;AO5min;85`7Wfp-
zVDA=0m?QIJTkb$dq=%avb6O!b`P)HvnLhca4JQ;P3|R(T-v#M1dDEIVXJe?(2>w=d
zPq&Xk;9un)Iu<zoe+ZD`aBVK5CD&7D%PxpC`%i-Lh>8VB&UoujV277(K+Tmd0*)jp
z{OFuL<aC>njpQwSmCD}$qE{Hd`lC695|$-`mX?#xj?9il)PXtmJ<*%EmrROv4h~AX
zce`nvVkwIZy|?zmK;XNsZlwfyA00uU1^`*uS53o3UF(`a1h9u|DcAzRFjQHhBs*rQ
zy%6ps6Uk4Fd7=A7<O5KeBd7FV`bFZym>@?6!#PJ6VX3$S<*gl>-GZkcUd1}&e7*ei
z=N}v!OxPV>5>qv6Jqn6i&SY#V_zMWfmDoc#78rXG1Vm=^{zjq(;e$9OD@d{}gZyyZ
z3^#xP`6eayr$}ZsBN;gQYs7>4i;SwD(3a*~MJNbqG;2=LU->Xw36aveI`LtOlm%J9
zU~I_f#0>hJw0e<0skB0I5NEnj<ntd8XI&=Eq5rj!CfCqhEzMZi{i`Z(^xevUIT?CW
z>#!N%vZxCgB7t>}{&Tc4Ao9pv9>D>Bo*5HnZ48Zi-GV*6M$AZh&|NEc4*ZN=V1w7^
zSRbC!KLql_vbSJp!pv=6Ka7tE>Lo0$2GLvBBBH_JU?6Vku}&C(Uoo~;;u$xNXHM$X
zExrp?9eh@(O8w>r799|87G)+~aANM=<Un^E%cOwBftDJ6nJy6pIk-XKIUD=X$@%Cg
zopuGdN_UaP?=2qWn1h?4kpg>sCH|o5WRJEC7$e*2m)l<cx;lmf<3VzRO^X%*kBsgO
zO1q^oR=Ip-QM!dG`Mb7^al!-^(24s9AzYKzB#i~mdpI_yoQ0fQy&Vs3A*a*USEFGN
zU~fiDW??UbfOLwIto{f-yL*SR0w&FbN^gmY_xec{g?*%!%HCU5x^T~2rfe3HS!qu$
zoc2%iV0OxnVYNrZCOJ>Dv1URIwgK&+4qbVBkOiZ_C+n#9DG+`{A5RV(g*1cPw(gO^
zNA}&QU!<pu0V8{v#Cvy?fkw2>482oyOLO=4A`2^VaQu<I9;iEn1pswh$#-&75Gs+$
zFjsce3~Q0$jMGws0UF^CZZA?@{!U9D%a5Y>;^N&lAnYMcL#nu?B#XM^R(aj^bN1|?
zQdf-odUMVcoI~jIwnV)cCwP0o+|z3%O`Rn}#E8!Z%FTd(Yz+(<aNhqAH~%RXxfn!(
zAKjXxuI}Txj;}9&JAf+NKJC9*`)6^E-&@mq?HRB<Kzas<>LXXy+XNT7C(e_^uFP7a
z9ljrF+YH{Cq>Eb020Wpo9irnh0N$#sVM~u>>P3N`@$%Z<nfHl~UBs9N;ZfVjDOT@M
zWO|T3&M}FZRIWzr#0LcZQkNA)FnGHmH~ZPLO+o+sO6~?0ybv}to}p<t3$<u8EYBWN
zs8j1uvh4~kS4vCMo8J>l+p7V<j%jLs>&aINj(b|V|EXbE4Rr*Bw@M?=K~7#5$#gn^
zGjXG?`gWYoG5dSzlY7Od>pb6%q%JamFh^jxDxbCwH#`=m>c{ujin_{(JfLAv?-Eil
zy@R4l$2$u`I5=(AJA0M&tTC+Q5STOimKE<giaI9ofCeL+>nfL*%XYs7REzQy1}9T+
zfMO{ghrGXtB4XC)8PisVn{}nX4f0K9V?sqJz<gjUyc~Ut=;CBDbNvckYXUg`Iyq)|
znZ<66)ZOK5^)p|P-*Mqu`O_>*|A+SU^tePeJtCKqk)(sJMfqg51t9P!A=m~wFwizg
zm*?K>mU&V>@rfu9_TMl7v*Cvz$D?hK*4#{I1=k}5Y$ikNc0AdkutE3=mbDQ7eBBw+
zG~RE79amwSl)HSyEb^B5Kx;)O=5<f}07Sj|kKgaz%92?*Gt^R*Em<frlE6cgVcyI>
z36&><vWtC1hZcn+4%GJ-((ui2=^EB6IyAi_pH}XPAz>u_@K*{tM)gA55mUHHn%(kM
z`(<Kq)2ksAkxU}YNid4EQ!aE*GL^PtfJgjD>27qHmN3~G$ur=E_6wZMLY+7gwxJ6F
z<2m6Zo9x^P$n0)Xz)%?zvP@it6QHd>+u*p?Xw}l{ZQ&RaukBM@OS~*`3waG=orS9^
zUb4F$`CGt>hZMLsDlI~Ae5~$>kcs$AFcS#%(6dOK5f3@3odgrU-fvWHM+&igPGlI)
zC;Vr7E!v!PYd*Yt11p{D>gCOJAd|x5z$VJ;A6%-d?rX2fE`&kd?mHZWsyn~N77qUA
zkE2`EmoRz4_r2j0X*mDv@dY)u?rUz1sjCQ2zQm?-INQ6&+cRo$8DW1Kq`X+sm!EhA
zDG6a^lIO8lj&#?>KxKJ<`XQxx`<>6G{bTH4NPz#VO`iXIWA`6i)uBcXCmy`>YSjhF
zc2m0u5iO@air;~whk$NO-(R}Ix`)4Pj}O%sod@_+RW}ku!^BXj*AGxX982S9eIeH|
zs*7s8X80?Pc&@d@Os!#T`ypgQBp;B12L<&*aGs+23$>fb<~M+RqOsMFKR_kBd^|q+
ztc&1{^J$1ffowv{%g-I}?<gHR5ttA7C?XW0)Qlq#DmmqQ!M)VPaWhx@jCr0QcEVOZ
zQ-j=MiSyS}20ev}kE5V9r31Da+BISr#&nKH3k^qZ`+M3Zt+xnUL=9eb#J{^Cx9eZm
z+^4^4-*prXxOAGvy?s!VU2gj3B>&*!LKJnj=CnT*WzZCcS>4$6wUrW3(WQHX$9o*T
zRf+}d!x-hvt-;Ukerm7SGIXbUtsV57uiIIU{h|06ADF#N|1+3NZ#^M&pgomg%a@_~
z5w>`1T05SDkWH~w$~l%Bh~}(|_GU^g^p!AUe_RSUr*|N2<+VcM%Csw~%_;)(9Vtlm
zddq%~^s!vWwT~)sM|J-Id)g@$Q-W$em-6Wi>STejdx_Z*6LUf5bgq~@h+AdgF*V`0
zJ`>zefv6yOpb3JIG1|%ygm4Sp!1(u0@!q>hEe>DbmB8C2lg-!k*a+|F*zXV?Ub&-*
zgn&f2ogqs#$L86Vl(y@<#QVj&Nipxy{qf)6P45$B@-|hI)hu6$C-4JKp0@56l?^P<
zy-z&ABOqF}4sYV%TCu7}sScPPvvYX6Ek=PmU@-Y7;r+(dJNy}|hiCJavud9bAsfxO
ztb~664M{WLp4uum{9HVZFrfb?A_t#`)h9obDAZk^hXDTFAC<tzAExU)p)HI3*i*93
z7q%rDGv}vkEmbW#N5p|mY0p<Nfo`!4PlvuK4la7I3a3l!4H0#>j_$wxYrwTq7DAuY
zZZ+Z27mP!bi~2gvMroXvdP|DQo6mQ7xdD={sM=*yc@E$MgQEd26K7mD4!gqU@R(RK
z5olhmrKTS68&ulU+CMGxP&Y9SPda)VfGfH^H$Qu*0M7l3kFr3%zX2Lh2o-@^3HhQd
zw!P30N|=i7MMjTXxBU!kNqBTZ4hEHX%!MN_hm+mMc&68kEnvQ5?A+72?)zzYqmbOl
zQn#Lo?=C`0_UAwT>w&WY#s1HztdeZ5nV){4!R@`ry+O+13gG;AzU>`7XYYA^SREfH
z@V^&Q9?}KKp%`l0La$vJ_<ve6bZjM~7Y>wwNOmSXw)8`b*uV<fk|`g2aqO4msZ8e+
zzp5F?75%W}=LIkX+i(M^jhyz^fQ;8^HSAOLG5S69a5X<NlzcI{;LjBrNdiH)_lFNY
z^ZjEu<Cdyo@?#ACAg()CM-^!HyxD}SY1@tMK*1IKTE+*oWPzS1W$LWFyibi&=eUjz
zfc!xCDtpy?6PrDC;MA=FQ64DZ^t_g%1C){Yu+i3|JG@jaj&V**7wRaax<ITTW9%#g
z@-8;%aFC=XVWeTOnaOP)DpDOE!Xo@&BkeLO?q8KWiQ(AcFr(Vt!zLR61%$-~HYzr(
zN|jq;i<90*BzBvRjyREqOUDeB(V^nw%&Q{X`gP17Vxn+ogDx)0wg;};uz_j$l&0yK
zMl)nAz_Zo^)K+IYu=cvs<dqMJrCf;vo2q>r#D7}a>Xnlv?<-JFlPP`n3Jr%1Brelj
zaAfi7Yx+>2{La+Ihrvn<Cvj;>P4}D4{mRgRIwQl;7v-81*b?H3c%#Uj>Qr4kUu%*F
zLBZfn_4~2kTkmGgDe%m-xA=Q%m0)H|<t>$-T%?e<kZ)u2-oxgH0M?@Vk=;U`xxrRT
zkh|XJ&l98Ux|q(-y9>X{0M6&kpF9<ZS~%P0TgS)k2klIAlqlPFAVBL6noP|q*sHf*
ze42uarLWof*X-K|C+R^n_Xh|N-S{T{wA2)hzrlL~xxF&=1pl;O>4BpEXCU)$gTPPL
zw+ckAEOe<4&d>*x)c5OtPu1#}Yi(7#ZM+)192lgLYv6P%z--e^QRCg6bS%drW;ViS
z`6-+1{)6G7g&=7(Wor5G2U=zkRm!@5f=bb2)++{M^x<-UVwBN9gZ-0D!=bwvs1Fxg
z`n@NcKob&r5<1=n^-oQSn?GG}Ct#qt1_ZB#vPpbw4Hap?q_;czwm`GdrFhlCPbQWG
zUFB$OS-;W6vwZu|k1@89Zb^&|WM+~?{cBzW*}43@$)Ltj_!_;I8~`bmx_{5tL-x6e
zGg7zAo(z)_Ig?TYxFfwd|418*dKmU&<i}kY;7hGj+9h=Xg{PKJsYIu$(!>)LcRsrJ
zZ%H7VY6mux(N(%s*T~|k7+^`zpgmy-4LNUe>oRy1S3oszg%UC4O}eF?#v`3t%W|Kd
zsxP{UJadGD_ywYSB;rXNOQ4-DLhI6kG27?QIjAwj-*d+NNHNTb!Zrzj<ALa<pMt^B
zt3{(ApA8yF)MI%?D^0JTKPk4Fe7!<(t@G+y8smY+5xemS2ijLCB63W9M4=rPMtZEZ
zPlRIi(y*7^$koS;=ZN;0$uAJXfGl%Dg<JE1ps_xh8YxYQ{$x|da^+IMHE@~<xZXj4
zOS`{`kfCvY{3dB+H~=Nk1S=Z55Yc(1>H~!Nij96u`J`7aN>&u!tYiEKfn{c}2)jNj
zv>@kApj9n*p-Q_}NNTfvFzUB7U3&jF^4|GN)Mm-^E!(zj+qKKw<*Hq_ZPzZ_wr$(C
zZQIuDb>@A~?b~ae>F(+K!(B6fK|UGr$#^m&GvbR4I$-umEf{g!WbFepK2?(l?tyKW
zNi(eVp$8RQ-0~dy0CMit^Ea2^Kw<waF2x`kb%YCQp{>Vo7FJ9k=>+Weq3Oor!;3(V
z_+-e@)66x*9G$tb{pAfL!||nb8`UmfI5FF=vgw=!8T`kNB-gBN;BXk2E##28SpZK5
zGN?8!80Tf|ot+QBJk9!7I>{>Sk}r&ZU|4!NwIn|!@3>wU14znS#_F+dklRcmMbNt(
z$*@HL8SUe>Ab4Sc$^#7?a=%(j)mtq^{i?Kr{C;m~S(E}<sYIO%i~-NIvM;plL65oe
zhp;RZaQ=bcC|#wd=mNmbB>#2V3IB%e-Px~}4av2TodLdUm?xH5qJ(#b;4M5m*v4p(
z+uX7r1LXKdwN?<oYu)LbGoAz;$x%u1v}%m!Pb@b!|2`u1-8MtHR|r^qY3432*{cA>
z1-xSRy)wJP9_NQv6Yvw?&l@T{aY&YGwNcyT{-6lhuR4D<4cP07Z8V2<M~it-ZsZpY
z-({Bm=!nML;o_=ek+&Hoc*s=6gj2YMJf6G;h%9zG$tAs2S4oxOjG7y_ZddYpt2Vl9
zI5?IzSY6cF<B4L9DDJl#*+u*X##+rhbB$J5c|GHCVPrvK5}X@i*laGwq)_u=g~ns4
zX_5o16Ff}yOvMNmFFrsd6<*tJ7q2?+W4E#Ix3Q}b7`Z5$&b!o+mIq2{rZgoYLYRqN
zu=<3PZS^|Msw^3A)!R>^Jeeag2a#0~efwdm=eYyasfxrnoFHww#6afli}*^`QPeAH
zu*5A>drkvDl-sVUN{jYnYN@l|URdrlS=c|2T%cNCU`&5sT9o<o+45=v{Cz|QhXML;
zrmy~iWlKPji!^>Vj;|oI1@#-GWkkcp+_z&s!QLhtg-R`(^V`jl=zirhxoY%0{qQWC
z&EVwaL(1L+wX|M2@#<nGI4cj~<CHh^mIzBpm?k5s_JQN0FTzpO!|)S+7uX*KQK&cF
z6Tziqj=LW(t}!ZXjde$G+13vrVZEv)M=V=;2ibcrOGIjAGZzyuCBkIBiV0W+fg*(I
zd|!rZM{-tFbw|mV_*Z?z{!zuerr8?52ws4hsb%)0RSjkky9Bg*;o383=}G8;FY99f
zFQ@zpQRz$bv92FVG02eF+kY<c5A+=D8x1)JF;XL%w_oy!BjhOq2Q#vwQCfK8lyw^y
zRO!&F_UjdOc!<{gN`#+me_V-^O<s{Vtj>h|t_$X}=A!t)qM3~jHtuAP^MMw!=rt2D
z5s0*os@e8Bh3T_O>jK~pl|dwXlhWilF{^7HJU~{Ow5rxXP$h~ZNWM_aS2rUDQ#W0G
zS}oLbNR|Kw@+8Jsibl$^Z0K`qTxoT?!|pkF+&{h_>macLIj_r0vyA(3UMO#<B|G#0
zH(-5=jVNyf`2)heBa>Wb@YikrcoHOt2?WI}0n~tWw5Jvy^&J@mIxXEB+-gvLAPe~*
z3MI~r(}e5j8L824h+rb~Fu-DD-wMsXYLgzLpx~^%CN}je$H#k#E2~`s=opp9nc0|8
zM+{xz<gSWcb^|8tRp2OkZ5H9<RnJf)wyHdh*rk@Z&T2%_*f~DX9-{2HiXu1SCAsQ|
z=zSopu605lz#XigYB<s4x@*;HCk#(Je}_y&Am9I1$oxBf^C#Ee=_q7mI6sS^XQ1~E
zmKgD_E?$FR2EMPxtSu$JLk+8ldYNFS*z}RmnWHg6$29Ye%O@a1%lEp2mxP50gdJXz
z_2Ra%h_7RCb2-RU1}5e${t;1GJWLQ-nWN6g1p~etoIs--lqU@$W<TKsuBt^8Qm&Y(
zq$eaCa>Fd)oV)-M_DS8MbCCL!7UMWn7#osW)4I~NKlxGYj5Bo<^vu6f-7IX_Z64w!
z{Qd?r2e1u~L8dtuMSD@_vSPtMhL0R1@230#Vg@5=k8|S9j7Bb>N_ZZon#FKf#4eW%
z78%8=2KuOzC7X?k+xB)JjpGP)+TzL<*c_zHk*;qxYIj6NV-(i75JB{(%%oJ8(a!_=
zvW!Y-zQt=r{`U84XFXM#AhUuxCQ5(6Inn*QW=#3<;|1$oY8f#zivimY&8Dx_OTHIk
z)uwZvA?g)F+6Exn)aG1hdT3E;hSjsMt&8?U)1x-OxT!{xmMz;b*9hva?83674H%SP
znKt^odc6na(pg+cA>-Gz?+6L;<R{8KFlU-`K_E)z;%CAr+dL>)a3X(7@x9c{PkY@4
z*f~h>Gl^n@p)7n-OAsxNSL(-92Fhg23`I#<UWXxVUEx@ZoYvxLIYt2m|HzpeC12()
z9!2mor3m8n7hh=g0t1+9=Fl5djP$%%E5A<j19W&(yY`XWf-OmXA1%q=!MH3J%<!_=
ztJ3~hgu$I#qo{M}K3P6#_~G*r2IE373aTYWOULQ~LV4}$XyyACj9}+Lp8ri4-z<26
zGeaog0!^xX7u)HoC#s47t3M~JPhtiwSabY!Gwlt2UF-(Q9WgX*0IvimRDalgH_@}H
zf`xzub<B9M`>x<t<Sa&kKNNHiX3bkZ(^ZkHCe8Aab6VIZO?_KF3FXpz5UvZ{1@d=4
zK`4(lT#`}l|FHMP$ge#`&USee;>_TQ?qRrC1ikV4A$NzSe=lO*Tb&?MGIyceqdwTh
zxs;R1_G@C|Nw{}sa?y2FWAZ`3wZF(HUg#KgPSmqySAhSgVE)IPJpy8(($XjhyGC7E
zDQC*pNl9r@jLuM&g8piGqd)xRVP9OJB8_uqe>iVY>Rn=_hlZiip|?lN0|MUb(idQ)
z$+(2WQ3~z|I+jj)tKklJ;YLpOpQofDeh2+%uuN@@2l;#}f-Fd3YnzH`mPjj-p&x6!
zLx2z!o<hT2BOgAsm$R&q>=~+<UGws@I5n9bk>&A4h_(t;v__lon5M<vx`ZLd>!$-t
zm)EW4vfKq!kOmx{+B*po^lFDRyPao?vM|nLV`=6iSB3Bp0l+AlpKx=QdAyIhs#eIn
zz{(8EG;~`Tk&*7?Jj^uvT+PVi&5~+BU}MCz<P@kk-2xV!%Sp5VoFV8ND`iuMOR9Lq
zT?gD6;b6#TlEc*Pf>5_g9_yOw81tnxUUscTqC0FX&xD1^*5)5KJ5fOg&7JPu$|n>_
zyA^;_Y+!hq+k-7=_pqGj!_U-G$Wt(OVHAZ)DV&_>QyEf5FGzuEIZ26K$8P>;f+7EG
zAPn6E9P{4-QNnukA2*=?OqBg%v?wYB;2R(KbI%OW1G;WYc+bt~jQ8SU?p!!|)X5MI
z;_$M}1onx60n_T7TYUlO$d6Fc3H)_`j^8oKp*Rf3)!ZuvwdMooa~IGhzlVlG8Al1`
zQd$CloE56KhA=h%8M8)5mENKxb`Exo!O`)US#cRT^keu_p*McP2x-H@au)8V%_(%l
zl{A)w2P>ju#D~XL%c1uObZaR*z(NSz&T_o2l|c(bdA6R8-fMyhMzTILK|yroisf9w
z%W*vUB+nR}0NMuK!yu4>=GpLyJnrc|pE;6!G5G;NT#$TSr*QwTaG9C0pED|5OZWb0
zG=-H*rJa{~_wsp=5T{#Hlw;4be_l(Xp7)r3jwZ-XY{N)X)UuvfE!*8sNcgQz8b$$s
zFnH&wF(MISW!gF2i@N+&#0xr~%xEy@-O6(0li2%6JlJ=9)2nPb^-<`{qNV)sSVb<_
zOhY}>H#D8`*~3M*#n-(To%Ul$xk7d_QJ*dg2NrASjeoqra^^8x?(~s-C^_Man&J%2
zT`J#eKl%aI%Lr$?^zc}<OgVp~>ppkkGlo~4Jcn+WXXdQ-An26Z)p}-A_XIbnY3@$^
zc~u%<UfVvCP=35h8hBL8N$TKw%ZXD`TX2H{Z3lUaS;j%t*J2}u63Uhr%*Bl!3o?gY
z8$<Vr^u`xLV7gyc)~{>E%@fH;*}@ae<HHT=c6>>r|E72qci@?;#u8sdh-}>rH{VtQ
zdBA;`zFDPNoaF-Uq|C7nCAdXB<_ee%@lpKQ3r%D-&NLrKyU`47l{s=4*}f52|EC(s
zN%_Qlx<yBgMzQSLkkl||f&B}b|0k8yp#b0g^(eCk|MAkHl6!uu<WixXDS8=m8*->b
zNiryCybbiwi-Dc=$YG3mcQf6n&p7ym7~dkcXi2nC#_`9_>g$jJHH*#t{z+sY!wTzY
z`FTLOm+oX_XLhW@D?9>{gUGrwH)Y;+sT^Y%8SOqf$M+NSxG*E*!<EjvvUMED<o+m7
za;;L_;SugckX`udREzvqf?TnBy-~`Y*Ek^@QCyGo(zFt9ycnnca`r5#>p6+FkP`0U
z2QrdzvzrVxbUV|IOQjYbn$r)c-n3+bzy1<{L;yGcYH?Ovp0}gOW?u*FtUEZy0&v|`
zEx-Ab^<J9EZ>iX@++clQ+~$t!idibea$Eo2Z${`^A%<UU)gAA8%0`D)l#Utr8IWw`
z8=r~=RtL%){V^tXf5FZ3D6hRQ`<!|y*!E6}huJoF9{KDO(a$Oegq=G<4akM@MY*Vh
zFhcuOyFKzI*=8?!G+vEc7dpwIq2uGaak`cFy86VNy&wC=_L2Fl*Bo}ws&~5bF{~N@
z4!h_+2Y*Sdj2AVT5JES|ebhFb4tA`Uu)&j^m8)14B~4|0$>(oRisdx?_gMmP43Obp
zPQC#IzO|ocrA%!ThtbGkK|OX8Rd8S3!2q-#UYY&txpncX!bRw;E5|>=3_*jG<Thbo
zrN7*ycHP?BnWo0=@n-i}ru{8uPlTC#2F^08Wop&&HixJlxK$_K?__R2B2xhYtB2n(
z&KfR;Q>B~n-XwNOUId78h&VN9ldoK1sToJHc3u!<(u@M)oG*l5Oh53rdAIrtlmhj<
zEh3mD-M<RVAuT{N+;R^l1OnSzGqApsy<HG+6L*2Dts$>a{f(+>>-7fg*R7~TwhImR
z3Cgjf;4>f=Y&AR>bE8>mu&TVIPMvz4ecPmOhKsy_kKNjI+y2Xsx{?tO;hM99C$ACM
zJW`G8^RmkU!20TMAsaSHnJ1#LIq;>w$N`cC{9hNK@k4n4h(h-sfX~?AIU-<TY7^b+
zzr(gh1X?%rgKDgEy!h@_R!@Gs-1(}mb7upd0bf%B-wjDF|3*mQrSu;dd0a!^uYQ{U
zpv{+Q&p#m`ET8eDUA`3x#r3MU(m;l`>u>DSZzlUAa{cv3`84Osru)u{ac2_%O&+PZ
zJ?E|8c$ntEaOS$4emegG{h+txF;WAU`Y;GbRo7ZlxVRqOAUq3XwhZ_oLNh`bM|{pE
zKMSCt=ugwNS^HlPyvLEgfFc)eWg0cc(sK$C2kd;2_$TKn?Go9O`*R>dQ_y#0(gg4y
zk$}FtBY#>Zjlljcjc)0Qg{B-i2GrU`4e5H>j#m6;eNf}lD<TQG&Ed)R|Jfd9O-hkh
z@eCFw^GFJiEXH^%W^!qvYRwzUoB&Tq3H*fRYE<ZZL))nVO7-T^WlfjI#3|Jip{yWT
zPR2&?H?siU09pT%*$|)7Av?h1dJvLrck90Gt}bi$5wJI|q;as}QjZPc`_7;vy(V^m
z+X)xRApIli9;0$PyY$*aWUqi48n*oTtmqyx7kB)5h539(dekn}y?j3-@qQ3|Wn-ut
zOQ3J;4J$4Kmbg;r5^02LoM-P(Xs@}SHzBtjobQY-(7VStGwKOOy;^&(e-Q#l0QBo$
zeQMQNF1%R9AlM}h?HBj-w8;(k_JGc>!uH!SnV%|EI_o`-+r7P{*y5N@5!a#Bx&Xg}
z$bd;kc0Me_(%t>=2i3|V-hCEo)6^PDYP)i&Q)+aHUA40_^vM~1gJ#7^XyHMxeG4<&
zN}~#2Ewj%->~d>8aGA&i+#0>^A}6C^l^<|Hquq0v*A%=3Kl>m>zxl>qvwEyO-ujiH
zN}R0J`lCp>W<&*FeCOW;Tw|4ycS>&=$GKa;o+X##*m%6#mf^n`cdBUM;0G=1Ba6_r
zZ8#;e?!b!Sga}~QXG2B0c%3;lYus9r7qbX-wcz;{X;az5hb%)M`U(L_5akakpr%mG
zwx{-QHwaOaLjAd8&EH4p3n>QBp#H*+N`u+-DAEkcXM={E0+<{+rEA|h&7zQPuRcv)
z`qn}jV^Z5Tt|Nxgvc^6DB$oi(Qm9%Ox5NOK86rrl37m;CS)9rhc_bVoZ)-~C`7vRY
z6NfT)7;J_k9B=Y9ago?TYGn(6rme?eE4uQI!$6CuEgr)XmDLe@()N2wW5STTyYPHH
z;!pGYPRd%L@?F!st>;d+5vvhJ7dV%~5Flez=DnITUSpLqfw+)jhm4g|ul)X6^9aHF
zsy(Y%z14_${Bp*YHV*Ykn?QwqNRO;SnpdR{fsf97Q>+-off^`tvOsGZ+F!PnI$)sE
zX)SIVUpITht^lyTU~D}^Z(GwyybLez?~56?m`t#|J`Aq0%%W4x1*Pg0FRaAY#HyRd
zqNuH%me{sdetQ3WH313_B>5k324yVw9=R0*06aYP1$#U|cVboSIg6QMrr;5iR(>sT
zFfG-+ZbiKnjCZjngE&|Qe~=EAS1FHDtr8jYX+Pf1Uaz$3Yw9SAudqY@rw)AMH<=)4
zZagrC9X}#W*nH`E-J~L()$mN0qDg@w^m=1Y;7pdRYa0b+!c@1Q`guKkeravll$sI;
zRvQ*i*e^l&)TZ{h%$K9{PnxJzL!5Y^E`k}CXgCqx=czYmy!eC>3nQmn*UNo(ud%u3
zuoT}`qYwNArht(AxNp6!bD;e@FZH<;75FwX9XJHj)5IVj<+jINQAfeeTK<aPpWEM0
z_bZM`$o}j@!U+PQLVEoc)R0D&aDM5A_P5N8s~2@|(vdBCT9^=BbS6LSBL^%IF=mSZ
z?6CF*_uf;UsH25~cw<>#wg!c(@ByoHAh;aBx7{h^&OxL{>vHNK?N)1=@K-B1=S*6g
z$nM8Vu1qj+nzKqonewN3?XRG?v56`}H*;?zEpA=Mg3#Zkqc&%f$F``yT%qw2V|WK4
zN!gXH@v3PQ({p2<HM|bM656NtjKL=AK?1#90_pU&{pGOnLC4iT<*>ZqM~>>pPvMl@
zJ48m2r@%qo1+6zoudG>spu5`Mkv97@<416;Eo-y~2I}A4J}oi55}Qu?O<;e`zzXcH
z&GsRQuY6y0ca--PS$3}<=0DIWCpNvGe0|!wjxo4M;{AS)$o$jywOe7W(I<@jdlYzM
zIsMni&_AyXfqVh&{uNgL^IbfM5t&|`66gyY*ar7SsPp-#5(@&l{o}Q!FX+jkDU<P#
z#dXF{c?Zy#2@B&XnJaK<*J;#4knBnPxn{|jqIgtp;aNi4i9QcGtZwbl$7H0jcK*Qi
zuix<Oo78m=g_Q=5E<G7moj*%xUP7)Kxvh4>k13P5?uR$Ye>+X~yPnx3f)4MnWQplH
zvk~x9i>b6D<jCWeVouh$l;vB3&o-uz_&dtX9#qu9is4@ka_Yn$cJxkezlE(Sc<!}x
zSL@+c*;z7g*ltIcb*doU!nQ93+mCjHvJGNk5K?s`hWP_oVldF9dzwO$?W`6|3ZbR7
z(=v*}m}=E+u2H<qHm+!v#7ahBvFScR0sG2vxcPDTGLa?8v7}NXZgh;Kzn{&7;%sn&
zT{y=3yn9L|_UBbBlpBrRG=nnE>T_6t=Y{9>=Ci0%c4a%0lrLQnkM+IXj=x{%{=G5H
z0r>of_5V%PUVloRf3+ugtmcbZA}y5#8&CYrFKua)`&g`2J2O}L#giuC0Rpn@5I{$!
zjy#Fg6&%*qJUfP3BirIOr+r(yN%0LQb|I7REG`k{pL}=f#7!E2axorTjRb@M&%l_g
z4EOPN5z3k+D$ZPR*Sq0X4!(0RgcnAmC{)Th4-uE0od`05FrDD-Vph7@{ii$~huZD&
z8e9r@^*$-E=VSwme#t#Yefa``CJD^QfS&xG?azHdv*x(WV}N(btzd%Z@ir+PBdks@
zyjTkWN32qHD;40@xlwMLYs28Pwul+hS^R#M6yvL7Blli;Jm4KYe_O&8VB_CgB2Y<)
zK%nr$+ZkC+)R*>--g)mk?{gv(dL=nA1HB5Hw)?;d3QzAGz9L)t1k_aByP`i80HOq{
zwItaQ)?+QJ3p}|)+8s^8HDW&H#NX7Pqm=O?jZc1wFVuuz<)_0|(idL&H`zHhU!_-|
zFc55&)4rn+0*t=c73m1tSpHOA<9t#x3mP2@`rxj?5w=Iy@MvmP_iZA%2pCVya-+*M
zRdo*UgMvhjvtAwQM*+qKN+hSi<$XZ+knodvV_q-iM4Qk$HvwCCqbx;wcfsFV8^CWs
z;(tHUf4KY@8#&plCjuRv&e9YS(Oaugsg@r2hlQV!14%?E&pZr8#O<}a-Di3gd2&x)
zY_UO)0A}>am^=Feh{LB){owKSO$JUpTKIZ8%G@SucG`&=f4-4`HMo#7)yw5mxw*$J
zA|u^^QwfG#=PO#e9s98aZ;gLwm)d&+66n?P3Mk4Om1!f96wQwnkQ1*uC}VArAF@ht
z*L@$@8s~GXvYj)Z_-aIC25ypPK>BKT$@LBR869T>p!|UBSFIQQpzHN0>ABK&m{G$P
zf%;uBrnGp@NS@^hp3~zLr8{#1NYgqZ$Dk`1bt8*>4k8TQC&w$<4;d~CV><<njo}>R
zR5G%z>jyrTmJZ`d5(Wk($Yuh6fdPC9=>G5RRTS<h8a%xJ{60FA>5oL#I^+j}!r;>B
zt2;_pMq(M3{|;mH)3fnM?%N(6Wkmu~hEvb<g#JU}1d{axDFVd(cjO*+uP%WSlN;SW
zn|?Yj^wQIxM8!14$wUF!Rw3aPk3**UFsMjPuM+INLcE<b{Ah^JQ`L^6xbfXtN<wV=
zkfWT{g{jni+0cl}9ObQ%qI-M;ES5kaehBH|(%`Hb2cF|~zRRSYB6Nu`@h|=OwXK9V
zLC{8pgL^Ku8wr6*#5%wE!+EhD{;c<3{CC1Z0?w~{DP5-0gtThspKk+o3F;?>6C=&O
zBttuNWn=eii$TXbBQQGBKkgxtbZMV)fGu2Euc)OVCte~)DNl7@@@fp{u~Oc<U6soX
z!9{nn&$MlwrbOiBzJPZol0oQJ1mYBDBiX${L)H_s+)y61qzopbp^e)6VyP+f>+rAk
z0pms9T0E4vWuX<y$8Ou8mBLHbT3J63eh7M=Q2pfwASOVAf4Jda)=&MjWPDAt0E6Q3
ziJhoqvbL?9OwQoF$OWK{(bM=QnAyBvwASq+0)&YY3x#ip!16)EO;A9e714_5=L9#<
zc9m~Y+vS|GYjdI-0{mEs^kpqs>SXg#L(hsjNzT>^dA5ftg_(}w8p2N{M<&Z=nFaVC
z07Vw%jFNM~#=YYcTS@}8XaLJY(BCzDZuBocOGcQ+usrJe8L)W!TcSrGmGJ<;<3MsC
z*&_OZuf}M8S;}oQoO;!)A$>9Ak?%SLYJbFAPqN-LWM9j<u#Fz|U-sk>Kxsr>B@GIv
zC!r+ioSOs5GI#e-<#Cd$1=0R!50&H^SsWhmAG~3>>rtWwq)eFbEKf4lwhA<I!pb$7
z4(dq?)#%1@iRaf`DvSddM>%!`1vLHyrLvVy9q@J(3@#0Ro#F%JqvIAOWlv||is)+d
z{oCFafd4^7#s9DD-8rbD?G5O0!f6aTE!38&Zkwx*6Ig>f)78Mm5e6c}X#mdZ%xERA
z53fV#TJPN4*$%T1AHY2|(J|}m=>fC`*%Ou+>|zg%qo^KGA(ATEvma6(Rt_=cSV$k8
zfbugFca#ecamPDp1E9~lB)65R4x1I=DASp5%nboUj($<Ris#b-c+K0sC2prV=Qk30
zQaBlp4B<iAoLv2?)m1V}CF7uxsd?h@E~gNk-4tnmDI!ljSBE{%IThA7Th9cd0&9OI
z@z3A|20NgOn?(@E2X`8g-wU9y-(l1_f5#zJ!14d=0$_G@?ZPjjj>G6)o%bcxvq%#>
z^QbcfC!rKLWhQ8>?j^V_<9-6ZG=AFNAigO|iYyDEzX#D&^ZYG2(U?9Hw117BlK#?1
zF~iF83Y;-#Zp6bb`PdHltjsfzWK&``gRNy`qI<7*p|5(Dra_)18`^itI|glQ@|Ei_
z(GXTNVnb>Pvn8v`&v`FA3$wURrg`{=Yor=Zq=lB;0U~(tj?oP|H5Z^LvV>FwdkYDv
zeSzuHtGtGAS*DzV1E1j<dPqEuflh0gT(0AF>oi?T>+wsme62A~CA@Q==~e~DwbhP{
zM~uCY9<x+{_fuS(TaxJ3pEx4Od9=_U3L${OdUm!yEwJHqJK;&A`A<*994wttNvmUM
z$e9z=A;M<jAo1beZ-Ys%-;Yh7e2O_0ng<;YD1p})@2G1qAo8<%zA5^WA?=Jil+7K1
zXaxZs%=PgjAu<SPL836&tr@1-N*FNyE!Ix}FNr?sO~ztZaU5kR43u|p=Bjb}G->ik
zDBUV~vcL;0s&eG}&j-ZsBWLhPdf>caSAY5y<_X}AP|e;SAde9I<yTNzAol;9U&%9@
zoqI!S>pFux=8lUq9bM$*!D20p$LKWkXmXOw?mIM*D}l*X3%RtjzBFIp&&wk&2taC7
zX?_L~H`r&<1f0SeNyT20TR@m?rM&L3<q{g=-IV90KyF9oy~_`|g79p52YoD5U2V|{
zsA&)ZxVu2|(*i9=PX{ExbThjE(Qd87ICiO%RP_+G5$!jh67SKJSRAv{dn({;(ncS`
z18k};7S2v4pu>Yzf=wTtMQOQ$h@JAiR!c_o_SZ^$PiR-F8HF83Pxp+QLX_KC&e;e4
z4q?Sh*dQ=RA=5en#Mfjrb7rv~#2jSloY*(8<10wteq!(Xq{nxv20!|-umxH5__jm~
z)p@m#vAt5J+rH`ek=@4{>5|$8NZtuv)f|g+1!oi~RKG0GllVy-L~^k$Z1#frv+1%s
z=dyZJ=C(+E6>E{1mS;XH>Jgk5_(PX~h1L<mZgb0&rQK^cFu!sxyR<(QIy`QP&}Is>
z%~Jn2qqa^uV6&UJaIVKUvKu0y)}Ks>(hA`N$j+2~EWbs85F58uoPO&xmZ+>N<*)+Y
zz8S)6LEpd)Mtp9{L01k+UM~OglCAgee(Q;zqZwKx1;BkD%{&=Sgpbme!QLdZW7LT}
z>s3^S31Syhci;$lF6*M{bUrq)GEgQwtg(S<OX7+vP9CpPvT*GvD>YWXRBq%fRu^AE
z3V)J@epcxmfWL#a9iZQTjv=ho+kvy|R}u#I$FH$rQnB|AL!W6`g85FMuo%P?0_q|+
zU`HKGDb6!eD0ERkXca>TYeOD?;&pRC5U@d}7I+wl6b`kkX*4@xwJhcJTuv)MfvQ9G
z?GioyQzf(T*N&xta0zh}2*)=epJyx6WeQyb)A#tA?&na^n~ERD9-~@2BYWhqTqaN*
z{67O#mQaV$S;2|(Rp;L)AFIaQeX6s8Mt+DFhv_^V`%5(Ey!LQh0*)dwT~Lem^zSE~
zplN{3?y_tG-!Z<&GS}`$QEE?T7Z4Y{$Km=WD;soI3DBBIBG~^XOJe9W%`6Hc08iZP
z;t`9;`g1!3w=Y-hg=m<#t*RDb+4*IuzGkpr_~o%8Q-tCIWc9O-fH{(?Byri&gDm0e
z+S1X8L<s@|VILy0bh97UV^~|ic|1QX{~Yo<PjG$_SCUc}yM+k@$TYy!PlM`~lN?0M
zr6;-PZ*SNF`urEY;Rz7DYhR(?>0^MnL5bAN-L73+%oKBW>Fq42xV{xN19VJ^x`PP4
zwm^J%<u?{9^sUkY=vkJGhQ{n97+}gh7@JCl5qp&J@lD6j9dQ%S^WM$e@}?71-bAu6
z4UJy6hJzrXgNYFCMi9b*%T&MFE<O!Ej~<t9Q8Yt(R>K0nZKLJ&oQG_s`Z5i_TX57M
zddi#lg9R%DMSJ@YIf!rc#<$+tBhGs47nl(oBi0NTSzT`k#i{H}7A==xE+KGvPeuIK
zDcQ}a!*SVglEm-H)#hiT4n3O}Q_tcN?vFdX((VXQk%UeqBzuESGw&GS=9kE00`Tvz
zIlT~B6c&D*)2jn%ge{7#iG}%3&YMjY3ujVy5W$Xm{X$uB;33)MEbv}1e@$`hr4or8
zKJRZnh9!oTdV>gIO#>cJN9SnQ`;RbRO+7p4MfU^Ir#<AP_J6JnU`xQm|D-S0{@;I1
zj?t$_1`<X3Dc|pU!I6883$e0nD(mG59{d#95A%%Ioj8Crg1p`q1!LrXiUc2f#yb^c
zyvB074kbY{_aHUg1NM<v0=dbbq$lLmPiW>h;YkoxQY+#Nl90Fg=nmIj&%P?Ok5;U!
zp9<L$J%D{`J1qSKz3jAHLaNm^as(gMa^1w=)~yicr*2($GQ~h+AEeWK8mVi~IJ&G$
zygq6xU($w&dO_^i8+&m_V@Kc1d-LEnB%jINEN@Mn<{lXpb_(Sc3_H;v8-sNoBM$qI
zVHEMZ#g8fAKd`KVngFuYb3~zN7?FGZ1yBuL>`!YvCHfx3n9j*A1xCbg0_+LWQY!Vc
zV0rc@=xVGG#5b1Cq@laamy&h9%7zqCwtnv!xW}TE_N$sLCIyRqOGZ_<F5ku1syuoA
z%J#If$@XQD1@87aOIbEu)96FiJ88DLuE=#5UI{sLb|*vaqdtddDP<D<i1vy5mgkm1
zVf0Bx;{ZGM_b<AkFYc+dbW09D0}lor5?V|lR45z6(8aAo+|*>yx^x0Go(@%&q(>NH
zHUP#~$8l=`#r7O2#o1p8{%0)20z~;&9<RtTW-oo*Z<$q|GKC`#x5zxQ2S{A@cgK!7
z8sWc&V%U`-+vX&FXf4_44i=^!>-I-U-UfOZ;mE5ys(IM7_WqGc$}zEz%#mrn3q<Py
zw=d73CB(`fWV+jV;51k~QIV=juazz<ZJL^t?YE(ZtuRGF1<a>_s)y)pB@2d)y4zxZ
zj4A6j1%y<jV!gmxyf44@8%FY{?^-9NX1Ahs(7t$zq3=tU2MO{4sv?|v*d&&<a1q`?
zf{;=+;7y3e?Kzt{G+r<=P%OfTEJTyk9Y)Vk*JuVZ<vjiDPGX;j6dTOK1>_0-J2U|u
zv5rA2s4G-uQKRrmTZlRNG04i_1_HzYSpJ8B{-2x=;>BD>EQBYv9^4?sDcmKBq$7d%
zt~$=MbW4}jb@SUh&{qn4t<|380)9|D5{dsiSs)f}W`WG0gUdmsP5P*$R269-kNwcm
zFwA|Am|1k$o@(RW55{l9z!%k_Z|AiY`E3~4gQ@LMnjk;)S((836-41L<87dEP5=0E
zxB+9$Et#vKdZWkX>+zK~z~H*{^wEmUnE8S}8~Oq(qipGS;HV`IV8Jp8nnDKnaq}+K
zw>ZynPo{d$2+wn{rLm#uWiYQAa15{2sK4h3-~nLs@8*aQhM)@y`lCMMX2^g<1>1#D
zu?3+k?UsaMCk3(|_K;9|s9CxO-0*FfT<~7mPgX!@Joe#=y;$?y7c@nyUqYEgJkKCJ
zZ6z`nI)TK_uNK_1g7CxX-~v1WFR5GH>+Oj)=dbV&5D4J(ug8{y2>LU&E^3cqF>Xsf
zV#c(TbUBK1ObWm6p_dAg;#g68lSCy%NIQmS$#*Mqu)L|I_4h5tm<W*cZLPcRbh7!C
z)<d5sSkb8S)Sr6LFDwUQukxio59FxtoOk{?dw&4?|L6<;m$R45pd)S_f+S(Ze<BWI
z2l#6JJj~^AiCh+oMV5cE1?v$khRROS#ZLGQq`|}Tg~GCzjkq)X&*1@s0D=Gg@c&Gu
zp&rAG)6`7;3SHnPQOSur(SaoP5sx?DCuWS^C@h;-<0dCjO{44_Lpr#3;x~mRFPn8B
zbqq{P^Ikdl4g#vkQ?_&qaq$Cz)})|X85l&+i-Nkzn$$&7T@_@RUsSio-xN>l{pNlS
zt_*jux@@G$AbHCg0A6vcVU;}$r$>i`2Tx;M{~B<8An_npoapOm=~qjpLS=by#;CH#
z3iYPejzBYD;7`(F7ax5FKyUr&PTT}iAh<MErCdps@59LE%e{CEh#>qkvK8GJn)JvZ
zb*V;SQ*`4J9}VYitWj?ja5R4kUFGEi;04@3<S!t=Y=F4_VUK^Ay7(8m&3}pY){#WX
zvJ;i^EYTXSaEF*`r;iwp(J-_O)wLKMp(&54A$}OD@WkGg4i*XQdq&UhbZ!(NPLngQ
zM$4uwHVnj^$wt9l<{C4378&pYXbMs}qU0boA`V?xL)}g@_!DpKde(#<sC&=xl~$ic
zRP6om5X#sjPV*kYczvb5ax<}sZ0!h28G5B~K(XX)kQjwsg(~6aRr{2=f_A)#<M`8=
zp{6$?@|XpFWH8xrnXp?w6v~FV(NeMP!{Y%^FEA@*O1ebwPy$W%qya~>(T$`y|BKhx
zcF01y0n_h=RjPX9dk>2F&kBA-RHgwaf%-n+**V0q?KzLB)5ORQ$1EhGBY?9pc$$ce
zS8hFUs?MIeft@m{cWAo<Ey!(p=ROBg^nUI~G}908h!2Nn))6mAoc-W-0A}qA*M()P
z35sTRwW5nd*6A1%&VUvW#kXMaD5g#hGctfZ;^(hBlU3yS7BAF}Zf1Fd8}eQnEnxvb
z^$YaFLXX2E+}x952rJjtWg_!rj@YK}qgdbb+HL5R!7#n5S^+j`Ru7#fXJTJ<3Rcg*
z(Ho5gJq@Ln-$nZ6T$-!5hiK+K%dHG98)27-1nZuS<S7_fRW4RQZ0=kj_O30QbwjW=
z8Znno56oO50C+uTF1Jt@T?TO^mgBqzjJDL=W)=tGrY3T=_|hb&`!_~vK=l7x7zss1
z(RgR?!GB`+H0TBuV8~iaQ2?>ho47AT9Yx~lkg@NYW6PH619Bd#R^xl>1S0<Q1H%gw
ztSlDci-u8L6XQRz!q*It{2E8q#Tx9tF+acCHMAp0GUBn}-yt}oem~Av^cdDx@KsoY
zOlAa4#Y4#LyxX3|?H$~xZa3U`QmJ0ny(?e33eR?>S6%{#XnR`g(dHEBox&NGq2HN`
zU5XQ-VV^HFhN0OI*_$GlGntuJi29{p)#Efj_7i;(vZhNjaO1ltjur!=rM!u&>q(TX
zU=i-~Al7<*Ya4;%K6K+gdVSzZEqs(UR+rHoz1hNYN8@I1Q4NfUO{Sh~{dUQgR;U)<
zr2Z&Yejx@Fq5vOa=R`DR5OwK-&-63e?Ym#Iu2hDmf<+?_VUSX0gW?^lI*!mo7w9#9
zZF(#&j&gSGKumD2=o~NsA4f{x5P_Y^dend=(Yor<;^7-SRm=M|<&0U{=hpzi>+VCZ
z-^094o9@?v{xqIkD^7IPFHRH`KM5h0EKc;>WN`elp>X{eNQL3X9h`#tqm2{FC5_x_
zw3ymU@-r*<VL2^J<5!CvY8;}ze9S~x-b;r~X{=+P?_4a$p$0}WXaqts(m_<z8y-9k
zH=`ag<p}!GHmdVncik@kNJcbiz568m_AL`&#&?il$BfQ=dV#;$aRie3-(u(A2n4Uu
zf3Dlt{Q#OVO&ZT}x%Etpj2mmKN`l}AZsT`I6|aYV%$HL)=%d%1MN6qPBnl<roZ~~4
z9*Q5B!YnS5;JWCOY^(!i$tEfpGy3v9Cr1NVEL*?F!U&lQszrxO0dh6l!E`F|5%}_t
z5x#c(q0kfUk?wl`RMDAzc37I5;iwLWC^<znsXud=(IKZ+y>Zd6Lob>4v`fHS9+I}Z
zkD*wVY8_5{wvM|N|LQO^w4PPqBIHyBxfO93{&e|hG)vl2c)`RFS+dTr?@I7yVyo6E
zh6BoE2@p}ymFW085FS7JY}-=?4Y$E9r5Tm>HUAN}-nDgbe@4_cB-fOmXnn_aQu036
z>VEFKl;VVA*8Zt!1Zt=XmjQkoV1KXKKo~Dqns|9DfR_%IJT?!|b6p|F(LG8Onzgj>
z3*@%{m#4Nu(*A&)L1n;@$*V|8R8|o$(G*v3p_nXbA^r7*z#`U;i%h$YcxPS|{{l#F
zIv@i_95JF#F^0!An6&M$W>>swQK9gRmLe@Hh?ax<IGd^L3y8t@p@rE<+($c&3j=En
zmheKb9HU37SH=+9Ex0YOAOQ2CvC+QoFM*<=!QJXaYI*zp*Op96Lyj7q>BR6&x;o;f
z@S3RSuxAgm&Tdz3iF@kLOnCS7B+~V#cfNi}J(vc!^I%^2eL0y;!?E>7;j^FE=5Q$6
zc2&{@e{ltc3=H@marJLxb^f&)Ee|`?pneN7mR|ia*LhB~&gpcO0jXllHMPdD8#cX%
z1yTE44h6%Nt>D>8h|}04M7jVW=eEE?13HXLjj2^Wv`TGKkdy_f#n<|r)O{16>s5mU
z^HqxG2i~iw4>vFe^!&Q4{re48^S<I(8=u&yv`?93#u4zr%-yfOalXW3oucBtK>KO*
zW^`DpVM0-_Sy=<Gu%mQ2=8TEw0EUbjBfm17t(<mvK55@*+h}raNQ-w}sp<R%%a(l<
z^|*?w5LU1>w~B<1-b&X5!k{(a4kYgF%&(utUaf;X>&OY>+{`Q(He(kli&1H<02nW2
zH3l8ySFfYomhk(ZbdYR%O-2rEDxQVC6u=p|1eTNb<vi}c7rx*}s#yFPvTKDLU)E>g
zJv-ote0pB(h*^w}u{7W~`eeL-Nv{g6Lul`1bVtsQTTt9rlwjpfuC^+##ZR<$nHeWF
zH-2CUTRbp)|K==QVfvLVh|1fwH}Wx7Q10iS*0*~x`A4YIGzVxjg7v)kg|i38BgUpz
z$Q$k#sw}a_S+;M?H>#Ww)=c`Vx+jJ-JHa-CqQp>cQ~7;)Ru(T#Ql>p3lQ_R&z>GHu
zaYH)X9_o$jl$_{C#8ptxw1pHdAJEwt$QGts+DxiDq?tcG7>8B62ujN8Gdmep;&!(z
zKp6{0e~|H0A<eh3uoiHVK?}2K9%;6Jq6Qh8$mNj8z7c^g<@r+&u$j6*k0yUeiq7$>
z#Vi6zl6g6Hh?Ks}yZhGUAgV;7wU~0Mmw43C0=K@BS&~hI?y42MUDQn=cgwad##bU@
zicg6;Z)5Pl_8Jy3*JPR~8FL4ss=>Jck$)1bM@Kk1c5f|eMbd~fqU@fGLE<_KKlY>F
zLO0h*pW5bef|IcoV|IKu2@e!C-d7Ps`D9fTuffU;-?re8nYeE4>4=PXU!ZQ!U#kIJ
z7AW-prq#gH5lEBzDqG6F%Qb%EQV_E!d&EqM0IErEa8Bj2a(!Z@kfgA8h&xdBiBBAV
zdo0|3l%Q-l4JR4p7-W9+^t;~jBKWvLmQmP!yC0+4Qf2gk`nLlS1;xE~O^`uevl((j
zWC(<n(_;D@+E_t}n1G)ytZ*eMB4#s;4x}C6$l!99t(_Vk3Q@v}Ms96MR{O~YQJ2;%
z3C*TQh{hFH@YCkB+M*0z5LaJ`WYtv2jHz)Cm|>fBj1t%H7IF`>Bd&NgRuNf0n~NPx
z?8uTYf9B8D(?DbA_2r^loZY>#9vEMh8fjDBHqo<FXXFS!PruoVt$eMmpNN^>`1QcZ
z&E4g6ckkZV?F#3}nPd)_WBUL+zyEZv^y*R3E>63w2F!?D;hWgtGdu1CNKKV=t(-;V
zx8?KJ)`qm}GoExs)DmSo++iNy7|L0<U5+W6Ir`!zJXgo%o6*YKr&P12Q63ON8D4rV
zyo+Lx;-dzuN&(`elJw>_E!UMjO&_9QoezsrV(EjqRiHQycwm7U3qT7p#y{Z&orU<4
zU6b6iE%W`0N|@ik|MLR-e{uZyKQTswB4DLfFWUBZ@16slgmXl)cumazdG(IL8zA0%
z6GrSl_H}&UNIeKuBW<X1K`sn9Il1IO8KNLf!x7~I&=42X0gv(|DiLaO@_3iQOn(#k
zwgYp)ztczdP!N{eUlFXii)2zcx<((wwwc;yi^Ei?_PFv+_RT>51Zq+1+MZpBTI>PB
z&w?j;U74q{e8~N7_hQIOk&fW;h}y3|Yi$NFdH2Lpy040snfAioB1O+4ShWUPy0*fk
z6W?|j@3@PrnyjQ-uU1OtXUNvqW0Y%ANVQ_pb7ebqQPP*M4&vBSalT4(aVfe+oY7Y=
zj(*O8ZSzG2TTA$C9UdMHzy1s9-D#&`zewyJXgj3(RzB$xB6fShF*I~#vDzDHVpq9z
zk{j~jwaK?yM4N0Ah>wSxABq?qmVsGt%sHI6&<T9`0d9uy4AzLkvFTUww5}n<uf-B$
z1HSqi@8HU^_@HK8sjy2gXyfa9f0v2{SWYOkn}~saAz)1za(O89UU03G%Ipm7#)%wW
zpUJ&-e6}xMh)Ik(9E6|k#pDd|J$^)cjFYGCOSo|1x!vN7B9JbjOyO)c$#ly`i!m<`
zD^HkIabSl&>Gl^Ij`l2=NkXJvOR)Qe88czhW*u8Jl6c*8W--*wnA*3U3im8=<b~Lm
zVi@R=`w+`UB&y+zb&2R~=G|Imj5jNHKxZ3%=jV=WiQ4|SgjkXI-q=~4c?n<$pFIzl
z+edNZk|a@@uP6}D=9XbP^~J?bQ}eR%=yZka+%aE$N_hJR9+5$~zmaVay6^OuIGJvq
zI%eiUa6mip8B^S-|A=rVHG7QYlfF7-hB=@AI@p%XLyvTtoT7|h4L40aD&x`pd#eO7
z4pj4h)6e1WtrEaTNESdTXsPq$yE{n|^ABcq{6*8qEEsr+E;%mrzQhcgjEoEpB-#4T
zTfwxSE7*6{@=<_fc=_8(c-BCAr8){o=Gn7!=%(xLm5&M%`!&%Jw-jl-Z0+Ug>&h|g
zQZnIz2|?@7L%7Ab%1k>V=Qc?Qmm2eJosR=|#2yqf$MH5t(}z7Y{O0FhCQqV8cSqm?
zi8Lb~^1VvlbobST$C6F?#9W)&0U5@}U141ulQrrnZjz?TwN!#@0c%=L(9)U?5mii8
zVyFEd9MI#Dzj)UwrK-r7hWb`z;w>^)8?^MxWSvyPg!DL(7LPA5hkZ6w0wDE$x1PM?
zAVa>uGogWAn<>aX-&A@E`d-2|_`J!0bk`;FxgRX(0v>+f&=D{p;@YmJ_=b8xoee}$
z`M2fL48CFe#vS9k6?OmtEAqH?Oi_9V)tNGwsGbWicwU(fiHlw<zt4&fzRb}{!7o(y
zy4<UdwToxCwpa*Db*ge7h6v*}EWsCG|76X5RvQQ%3}JBt4NJtTk1ApOx~N(BY-!*;
zJz~iq#WQz;XVi}F{uC8KJjk53J#9%v2quO-NlGnp;#%`TtWb0N8(!!nVAB5ry#JKX
zEJ9g%_Sn07{Z^vA+I_*r{ld!2A?!JGXv7gWnIW;ZkS=IT`mR-pKvJXUvzWPgch)~s
z?MekGyp}uCRYWzQQpzS>L3*Bpitri$^G0x1=>sJ#2E6vU?ha>Ceb<b*ivY7_08l{~
z)Vp5XELuWQ6uG^ZU4|1k_+*IWS^OD_=F$_(dD`O-!j64*rCo&I<RG8afY%^vu@khL
zyaG*vXsFRPl@o;2(#EzG#y85M_ii!vr|DgkX85VXShf@lzy_1e^6#0GG{1z)d=z1B
z%|LVxWOj4G5I{JOo8%7%MqoU_yWAWF*CID*6KW#~DzmI%!YXZao6hkup?q4s8$%<i
zu6nX0i}`GVDiqDkAZaa>Os%<JJipba{en4xrn%1boR@ydu&?O^oHcOs-kF&RRvRNR
zsAnzV{RkPQBwJFcvRQr$JzhC_g^l)({U!t56Fm^r2K)%9aB<8w!E2Jtb8!D|dgf3*
zWpqh~)mo>>gkFLpL`rU=JXVPWAw0gS5(c=&S37ycH^5aG<{`;tZ_dyoLC$RQZZ5d*
zDUXosxydY2XtbY4xBRN{ndS+(WkkIFH2j=<)@&BV|6)y9d4B%!IaEEuzT#8DkUua=
zwBGaHX{LYbRzh&5VYg9lB~+VBm);Wsk#z^4-Q`8(u0&Kzrr*IMSGm3LdIcSAkU#iV
zM{RbBG7i?0O+C~fAcIT?Z6%wmBULJ41ELUPiYEP|0Br{i1u$RAI1~g|40lw;cI(Hf
z1!r&=y1G&qWGbTO&+9lEcTLgb+H$KqPDHm%-Zr!7g|Qn;x<DckP5&?Bu3jLp4oC0P
z5JWnb={tYL0+f;&Wx@ixvt-1l*K>ufSIt27##wMd+u^xBfJ!DosYhJiLe(M%O{cy-
zPMghQ^W2_jkakIr=m7{atweDdxV?*(?~s6@<~^M2*7ER|rbJS-9_fUtt;pj2){dqs
zWYiMV<$AIm&CyT$ejbxk*DqxM->W~tw680^|2_*q%md~B7go&wF(>2yM7U4yj-9r&
zE~_&r0zUpg=nmN<DL~EdHa3gZ$4;<X#KF^vD7OS?cXA;!jN!e*R`WlJponbIJv6XJ
z>e75m`LRGV46-Zasv6LEVwM-a3Cg1F2q>h&aReh%zEP4fYz>B%DM3LdTtr;#k?SKP
ziPr>dvEL|Vs27(3!@{8HPXnMZsS{O^g&Z0%^#<Pkdhd;Py@gS~i3uHz>%iZKsWRAF
zqxK=J&J^Sawhd@L%+#<#D+?{K*$Hze1Wb>Yte73pHw&(n6`l`%7si#<v+DI5!^mu!
z5wnA7NHm+Qp^8(O!1OJHJ1tGid*GgkvaEs`tn!&+N!q|#s^*lF?)*d^J=;c#MxYK=
zFD~qxIQMJXO<2EMUKXbpPxU=Q(^;!w#|pXA&QsA7=8akz0_V0j{?LI3PB4gm*V>>f
zbUq|Fy2vsBKHFgByUnAlw>=?8JzD!ZYqu-s0jP81;G)@$a9E-8UKcu<XXV2;;GpQ+
z*s=#Bg<x)_2rAq(p25aJKVL30rX-{5sqj+(;IC5xWChUOe}UKk&mz2v@T<%{2EwhD
z(MXsJ{r1=$aIrQIj?A{~IMMRsfbqJ`oHeU@beA9^50JH|C}b~8K0XItD&`o-#?(gb
z5hw;!{*hJP8wWP~u;vNbhX-MnC~-Zm6gB%YbL=2rQrYjgE?o-MSctx3<Z>ShgOD7O
zV*N`dE)m~-^TO=OYv5NSJb^jjT6@7x?MZxIZ?lARm&!nobxsm@_Q&?IEaZG;#t*HN
z)7-eN(;Pwto8q#wY@@j)cTGx!YP!R*u9<J(iDwJtUTPCK#Vt{@Uqj*uyc|$<eE6Dm
z%ysqtg3iq@HgH&2hJm}MlUjN^Qp_qF=5TC6PfSyOQRSL=Xz2o?uyEvNi|wS_X|Fid
z#IskxM2<DDFxN(Gpv66}oZvxULj+a6xZ<Bw{dn3x!3z8O*WSWA>;R2!2vdPAF%(Gc
z@--2RUm!sv$}~z?WK_2u=;>W96u;)?zmPBGVBNxP0C9}FKum;T22v$IrR9%Wt{iit
z0_}%|0Me>m*vmG&fd)*CNPE$;z8A!gW;KlI2A^=l77Y7qr_#mn0a1~Uc=Oz7<&6V5
zu<8P__^QIE!wbLmi8IMVN75uhmJXTot!9WBvX!`Cd05%<)yUWjXZEeGC?z(10I#Gi
z7m2zsL8m9>TI+NDG#g5!8lnT+%Qc{ciG+krxDx0jJrxv;rMP#cT<-B5F5ThMFlqG*
zMG&*UdiKy30Zw}I@J~Ow?;sA^4mp2G3Ij;cf*oO25sQT0Ah|?$rN1u@VGErnLi|Ag
zWKq$q<TYj-Qzx1%A^V--V5j(oKEp%=4CL?pJ5C;=%n-OsAxIvJ!l%EMBGlo{9}9!P
z6RS|G7=~=;FZ{t&fZYBI`2Tmp^-SYunNRKh!Rs_+TRj$}+hXnAwlUUhG!WD1AbUq7
zjLY~i$*+=en;M=2=t$N`Vp}naEc)AyKMHxt=O~YHOuSj{AH|?5fMhdt1u7pzNyMdT
z;2fF4M4Az!T;qhmOkmR9%g@hs?buBz(CkjR2wRwDGs--TdZLi6aiD4J)>TmY?gO22
zV}e-E>cq>(HRd{`#2f`TIdSAqap3Z7@C|a<{iTcGCHocpX~ajcW8-X@UkLcLB40lU
zzBgD(EwFooU<>?w-JZ@W%RKPI%-vb-Hljh~@9AHp`vZchadn9Nr>0k#uHJH6w_=Bt
z=!7wtL9~5@mGbcdY4s>NT{^j26cDJZL~<vs(S0Z4+|Yw%+$u@qI(<@&;0ciDKr*$3
z@7CTzCKWwMfa47WG75JJnb11PY~x`vrI`kpf0WJ;z|)@@^KvUjnIL@d41Jt%A$|J`
z*Pg$K7ulu>Ys&t>LZTNfIzxYfk8Aokfd%M^Ias{PY}AyxCi;pe{ynq{_Vdqslga<V
z-aCd#!e-f`5oz0~v~5<}wry0}HY=T#wr$(C?W#1YveG<tX1?k>Gq>mK)3@jJ!E+=2
z$FtwH*2at2+bnQXpJW?yp3fMIwZPiNPNRN!MRI%82rPFN|D$eCDl}v#=0l%oCAChg
zb7r9->Rc0XxL?m;d4zOw@Pq!i$C_nySq>rxov#_N;i=~{^>a%k#g@5SKF$wL4QEGm
zcboR|hfkbd6twwI8NIbXp~>>%6UV#29*?AYVex7tl7e_AMDOc)Xi_Sceh1-S6UHt6
zmI_%RlF{k8!13&wb;DvXg+D;BaYX3Txjl?B#_;atCPp&g?R1sM9kL7CYtwH*7C`mh
z6Vn6F+m8Fa7-7V!+mO=G9AW~a9I@SA&hdCLaZ#+W;nF~l(Nw(3jHl|+_NN5GEZLcE
z1iFSbPa5iNDVvJ~!u1opU;$a+w9G5(IcNEv#^>XavV;;e7NhtjiM)254!!hgoW|@#
zuJUqx@D=xwQ8rD96CpNx@sD1Jw|omXiIWaKmQB%Iz1@@QriS@|>4=1R^G#osrWjDk
zr(<&UmdZ~pyReR}o=KQ{HbOLZb9kb%w#SzS_Eh;aI^{@mf!x@9*0%?8yI67|LU{Zu
z@h5t^^?D8$G~CDZ=L4wQN;asE!|0k>jEuZ*uM?_7(<`)(E3YLQX*;JL`zuWfT@?4l
z31UVL?y{9Zu<7b(h-H;<O_8$_SvZ1l$UF@VDefG`oXKw6@z1q}Z&77JHPli(J#wxv
zv^DRkP_?>mU&9YJ94DLHo28PW2i*Bj=D%>njAvR*a}H)oq36GE=aaO$$wpPWbdSR<
zW$=uTaX+Z6xjh?$O5c_;YRVHXC)(yW;A%C8WR5b!{(Ls*iH-}7q2-S2yoq*ZRT>JP
z?pE=vFiQh_|HQQoz%Qe$ub;#zs5SBL4lpaL+(}JU=^-z`WcWfKv5;HBs;Zb{J2zaV
zEwXc5dfPD|U@s;j_X06h%1mf8aA5#q(rYpy@0UJj=|vww-&I7W$4=R$W9rbyIa@=g
zC^bv)k>=R4YlGO>4nVq*`#bchfYAOOqN^>fII^a4j%Rm{Ts}bZ<bTacb-$wlQ=5)X
zW^$P7=Z#D7Xl`QVR#qjOtX?;@RFN7=n5a7&;~8|0^H$kIEV9avW+`n)jlz`O+=1DK
z+u}%rs_%yA%-cm(qWUDY+t##nl!2e&ub{?%AP0B96i|uv$}G1pHDod68bc6C2#T=6
ziEOut_w?wKiB(g#){MAvrLKI&aERG{7Q1-GLj$gs?rQJNvb~I?rB!P`_S7ftJKBGS
zEww1}`rNhSp}zU$trEmq3w`A07jSnvbK<W?q=z?*kQ!8RZ7tAOD@Y#%Y1nWo6`={E
zic_%r=g8geIWJ0fHWW38J`Kh)*o**&l0r|<KMkC#nyj>~tvn4du*?s`HG7?cJU^ez
zaz+yBDY(AS66UII;pbXz1oP+!zD|*qC-!d^xd)&%)pWRpHl>H~n7M9WK;4^h!q$8-
z8J?bovco{{Q=b?%YuY>}`r7^xw2g>_raBJclxEPIgi0YU$sVMSUp^7O4#&K^Qw!Mg
z1PXB{Ng$!Dpy<&i7hpsK#IiL^Upd0%342gP2SK)TtPG^$=}fnTrZl;9u0D&gqbV?A
zp(1#F-;W0If@K$A(B9BWDxR5VPahxup`~Y6)a9eP?sb4BMLS@@tNSG!8z`-71k6Ae
z1QUg&hSyz_zPGd#bt0HTp0joN{98ECl%NoQDxBKZ)PEDLYD+UCEs~4uW{r9fy<HTD
zxeLpXxw4-#W$V~gdhr;acYb*K;+N_<tBaLPNgV&e>dSi3Wl;jvFtZNNMB_$3@`$nf
zzP9A2^rXv_vrl{9Ks|02-B88mw(D9!w3%<JShsDxaU=~KV11X-)}EK#TqF_~C!UGE
z49r5{0HQ2{$Lrfe#a_N^-xVv-2(VI(?~9X@5lCM-%7XhL+wo#;_k&H%55!bNyC2&x
zO_uH>9Xw-=oQ+XKlv^joDMFHV7%>$?*Z(k7b7IQ_{OYNnoe04jB37cOMV<G93O&cu
z#EAILOEm28qbg?!qZtaSL7?h&L&<l&StHFxmr+GsijTx+T1xuymW?UsB?MKC-i{~c
z^!)vnGes4-?fjwkBKcA+7g>Vbc@$`0iOzSzq_X@QIZ=^C1b^7#=@H(gW?I)OP8YZP
zoanI)LJ#0~tMWmDMKC7b4t+q$ZMueUu?xj1O?PHa)hEsKK~eJrcz0{Xb`i;xT)AM1
zdfb4?;rVvDJbP#aP-*Iaup9<ct}yF{c}X!8m$<gD+@_V|^X!nQGIwP*pBk_;zUmy7
zgh|q!>0^q@x2gEtys8^@5$%C%orJ#QEfvz{3#BFq@Vo495l|07O`-B&Bq;%-nHHZO
z$8PjfaF!I*781Q}qRK-uHbl8@l;J;yCQ}JokmEciGP*<U3In6Qa{D;y_D%1!9CH+?
zpURN~UW;HE3fl4mrx0}NbH9Ws9@i$>hX#tV&&ysI(S}!m$-RQBr<Ht&4xU_MG1**U
zOUJu=s~B(OB^eT3&<e*A(sHz?99{HalfKNgNi^E%b4(N_(o`tqte@Nd4Sg+=i~UfO
zhYRHtZTp!Mx46$E3t?&;7kd|hf{*3yZ`1x*Dn290qUbh1s&4p-$PYj1;eM~D4I(h1
zx^5_gL^s^)cC6QBGa)_;{@PXStdrfqtiFq17PrR=ejaM?+8KdbBvkXej0B?rPW`D%
z2)G9~kBwk(H0!-*xG>HaVttq5i5*W}#mS{A_&R(9=Jp`sA9k%)p-_i@GLX7D61<e0
zZ$PpF4Y5}w)`_D5%r2E$e3ZqE$Tt|lPs{}uUpm-aG3_uTnYPLI(^cLgC}Iguv|t9w
z2?f6TyogPyK%HtF2t{}8<HpVYuq0b>)jlAtdp2KV!)#x|H59PmW}C(?=$36XCjyA6
zK*h<wn)1|ZuvB2f_-?<X*K~A&o0`-mC`V}K;b9y`Cvu|@*Sbo^V@M7aazsri=fKV~
z*4lhCQusFLJai2Hd`70+kKZ(g6`eHKG>F+HIO+0+6y^-B-$fx=Ze}}jhUJ@o*aC~h
zKOHk05|1~j6OK4J3RV&`s(SeFN(Wcn3glyW**=d4VdI=m_SjAg-^JGq@Xq)(@$<Ht
zR8gVq`zTRpAgRgxgH}}|6Ct0DrkRPNILsjejV$<prALC$2b#F)evtY0eU*XLURP{<
z6MBl8)|?)AQ#D_-buKpKiTbjJ9MZKfDn0xUGJ<l~)7X@4WSv392WX$H4i2)gr<fL?
zMqCGw5+Rpq_w!GXOuliI9^4rGktM+>fs=n1v)DEdeZxFP6#T5If|!M7qKe!hk5SxT
zcM3QHgk(UsI7BUF(RAOlE>XczNN(W^<2FJa{R7#tm@Ce~_}r3A%Bo>jaKwWkpbocT
z5gmBi!nH1Zd<Qa6ie6=`XD?$l2t$CQ!yx&oE+{8ODS)A)#Dw)cS7etIl<Eq-;Qc0q
z6Zzv}+7WVc2nx?DosZ;msX*eRpE;x%YiNx94$>A7TV9OtmAKG$(wZrz6ufbtiLe^$
z=86vVwgGco5(`6jUe1T7Wyfs!*lqRhPeDVXB}YTyQiDiUf*R~!mu#rNo(6e+a5x<{
zLS}?-H&U=)J`04?pCa5`yZJg}I_nX(_E>n~loO}BrMHaxrLHulWB+I7los7xYis}W
zX6ZbL3&#}(K0ZQ`anRd7hL?!QxNDgIEXFg|RXCPCM!p-n?silA)W`nT0YbH0>UDDN
zcrrnE!>T6<Ra!dL0&WMWwPAdtrH60JIxGD&#88Y)2pHd>w!4?e;pME=;ESl9rZSFr
zbUzh9X2TGe4TKzc8XW%GuA4FYXKaGUte<}zLKOd<#lYx+vws({|C!6G|JsMnZ?0zB
z^(AX7%&=}b3va2NwdPmKUnp4&+-JP-K}Hht6^tql=q50cHx*9kLx9=iS_^-ZCG!=k
zPUz_x6whk!T!|i<(vx*tRK5j`2ya%BvbO_IX6xUqpWW1zD!mR8p@fSR`TSCwmnmYu
z_CrF8TW(>wZlj#8zhZ3+U-OhQSaBpQha)E3z<v;dPr>F+7-U%clN!%Hr?^Ux%}5eZ
zjHI}l(faB_N(zVcmKoXJOM$8A;c<0x)$TICtddrVRLQep7-$;B(_AG91%&0)nzf?O
zeQ?b{S1#hchIrVQIEyx3KJTYi!BXRWOTMjatuiaU0A(96jm=~qCbsQPw9JkSIZ1W<
z&eoJR@?iqh1h0iI{i5J>fn-qA1F&d4|K4C5njY=A2U7LDVzBbWBXKRogb)`lHSoR6
z(t%y$jzYG#>M||L^Uxlo)MRaD2BHQu>pR~V!u@w>;e^iz@XuW4Os<X(68Kf>j_iZ`
zx4X@vHt1!$_<8<Dio~nb!2%^S4yXbYe<7C{IR9Tjt~NQ&hk~%mA@arxckKw|3g2H{
z6=t&xL$6>Ay`@bnm*Y`6vW!+zQy;C^&Iw+W<KwnqBg|=%l}=)}Dk7pg`g6|+L=?@i
zYx)<)$v%{^TjW=0ZZJzf;e)jL%lBza2su;iC00AWMc-36`&wx?U$T<DM%AT_ARm8J
zN2Hw6pI{}UeAbM37M$q14_A5jgQd@->BFwWj+~S9tQw#+6${fsj(D+CbRgP+IeZza
zYVZ6Rm@63^fJmcE@T$dcrCfM`&w)Fxy%~(u!RoGvk3$Ie@yOqWi%d7+V!>m$d3zPg
zG(m3psHy&(f2O$I+p+xY(HTFs>cr*ezyN0!26Xq>h}+9jMW&`-4vf3Wnw|y*XCMRU
z#@ZTUdhZ~Q7`!|u<|?=bwVWSP9D&WZ2!;Wpv?t{YaLgVilmiHNKWo-L1!fM19pE=I
zi_)3mSY0}Y=FnGOl<-@?um7BT<_j*40WZJD24%5Ls-<<)&P4Bal{l1{FP@?-1jl1)
z7M(psj;GcnFJKt{koN{fzl!=xx}^fn{X_JYt(yExy8VCot|%2TDMLL{7LipKLly|&
zm{FoDPD86o`0PuhK4Ab}cf3#YSzN%&SBgw=Nq<bM3BfZEtaQw35!z49uUO3V*~$y<
zOwXfCR52ofL3-mlJm0?x77pu9xQ)>?S8jaif!|}38-TMdGc~#^Vd~epqQ6Td%UX2#
zbyuE#aP3RmVHx^SwI^7zkVk#3QY|}uYv9}0NR;?H!H?Vw)CJJ%a4ua|a6}CsOKNNY
z&v>PgT3{fHsG=qi!X}4aweUFYL}o2X`o>J62som|h8Z8o!O{uLhaf(<rCy(~1hFOY
zyAWdI3<`ND&|In@unSknq$%$VQb)XPSkl}ouM*bf8?*jQe-S*FMWKHo?!G#4Y#jV7
z)ia&EFdNQ75*D}Zl8d!P^Qr#RYynBv@p$}Q#YR%qQI{}>^^Lq~TqZ+#5+bkXjQ#Cr
zQ`7v^Pdu3KHtYt=XT>k|c*gYxSl<JF$ew>`^fh1Mkl;Q6lM#K-!rWbaOy{XF^3={S
z5lxr|{7$)az=eN^-G42n{uev%-H8<y#kE!c)1_uE$eDUO!Pc0+J%vtr$eJjm^BWZ4
z4WU3(Y8$}U-iKK3DnV>}=JvKt3bw`8hQ!9o2{uODf6B@$#u}oMxTLq_8h)Sn$Q=x?
zlB1zydi;^(^Y^$s#Dv3CPqGt(&a+u#LWnEAx?K~+>bfcEI}SA2A~YnBZv}+NOH+t2
zhUyGLFn(=5agpZ<clwUfl{qig;Z@ap?$NVC*IoXfjf1f&>g{{lv2D4DQ3{0pQ!4@C
z=u?8BVSxO8ZPwMCeA4wE`5ZWfv67!v);g*jW16#24@@FHO0c~-RQOkWYpok;Ug)jH
zg7~n<6n;p_O|~j{o-B*Ea9@+LgGM0?vc^Tn#RxR95o|7h^GgGq{x9HHt>U-$S}(io
z3A44<Y7{5Zw+G-4M_e32p>95Qdgh^N1g(Wvg*m(97?k*rXxRd@D;l0tH4Je54y6ix
z@!^|M{Ys6hM@^AlUnj03+pzKyoL^nseRYU9-mn1!QpAnOF})OxjXyeU=4V?M>$jJ(
zL%@RZl1FTgXG)u!zfeITES<wdC1MZ!K%}I=g&VW1Gd?2?S3IeDlLS#W7hCJ8yJ3^U
zVuZLypVoKf@Dx69lCVkgDVAv(r9v}P)N|x(I%TW7b_uaEt)CZP?Z+HxM~4Rzgby5q
z&U;B@e#Rg7|1jiEB4={j^HT$16w%Xa!tRQ+*J5#6SGGw}?FEjUBro<V-|{E)>80Du
zug+KIm8mj>cpvUaG&zC|!;VvboSL=y9ARm}{HQt6_!bCwYe}(7X)+{yrlpOoQvyLz
zVO&BTPx@en11o6xsf{LY?8lnPj~Xr(N^7jX@ptKw1_r?0kiiP1ixvxrEuQh0`7Krh
zT&fyO1V0<!v;_#~XuXSK@4#V4gWuGW|Cbb1|IT&8f6}#V5M@AHK|!21mg`gu1j{L+
zAKvu9x9)>b$z^Q}4)rJR*^w9SQiWzcow#%J@UG8KlaSkz(PF&BI6|5!bAE{>wfnLG
zW?wd8lbr`qc{@ZgxN#1<b;+9v1awuz%d^i5OOI&@1ekbfIUjI6HTW`84@A!iCTvG0
z*5+z{(z0wrJZl={QCjZ<tKCuVujM(4c==p%y0(fHs1qw(j(WD-K!vz%+mf^;na7(&
z72m$|C1p3F__ot_RDR!qoCmyCrr*8VV9Wt7`$<EetlR`PUG9q#oztq~aO0BLgh`Jp
z!&ixGh!ur1T+LnRq5ZqB6h6SRP!6T(`zHTiFQu#(ixNq(PRWA5<uFKJJcg;f7;q_B
z9e%S*gM-Bd9HPqvVFDAv31{_suHooaH@>Z?I^4k9RVyPDDPY3h2#B7%kS0rA(f2_q
z<HL&^PZM@lY{uelU&{IRms#T!2D@r9KuU<5jiqa0T~beV$2S9LuSIT2+MiOoPa45B
z|DUW&^mlG@|NU0Td710iRwy7xOD_R=gzFPFAEj|By=80^`5Ic}z1R_mLVURTf@zj!
zx@+CJ6mndi>#==4M~ZG>h4S~iV0-o%WLhq_al>w<hCOUU1JW9i>%3#EcY)%pz?L!t
z-2yx2+c7<w7f0z17xL%iDX==db8?ia>iA9CV!8XHPdt<ddQ@`e0{7IM^V*5DT6jv$
z=FM)Co;S*;(8&^Ux+^O1v$))R(n7(H80+H{H<oL&eUynBF;aySsARvIo}p*NjEyI5
zdObHY=&)}oW&%Ra`;z+dVbsBS!N18Z`o6|RK}S=g7&Aj)k4zFm!5GMw)1PM4357?V
zq)2s?yy_T!!~Z&9Ekp6TCwc_=Nc&|zXV#UP_(#npU17Eq9|>Jxk448()u{W!8!<ty
z2);%U=qS8X3T4l*2<HOu6ep2mR^P8y?l>0}d2`*3W6teEWO@)n-wW~AJb0UChDHSL
z3yJU^*);OpRx?0krI4pP)hHpUS7tb6)Te_}Xz!F1sXd1&tBGM;|ICNGlEOWXH%><W
zzhqqMf3RHs*Lv!&xh)J<1cOWS3Re8HuS?5bBXWN=!0=P-aWbf6KGAncuwd@pgjY-I
z%j=bs#!{aUhci0Yx1ypNu;}`bWSTNH(K5O%X?RI#gA4F1W>g;aCD=Y=9zPB_m(Cj8
zKD{-jwYI|s+mClnhCl3Fp5r8ysnSH~gZ0`(_P(UhM4gIX679l<22<I%KkMw*l(Ulx
ze;a87n3u&HZ<})5`->~`I3lvR_J(_cH-2y@4Xg_CbQBdt{7_3=XDBi^4Ki;s8F-Q}
zI9OQoX?6bMB3g^Hj%0R#))Peb^hsr_Np^tXU11fU0V#vuo7~$J^vqU~B0~?g>ygjz
zd?49dg_&_Lt}xk+uD+E{grKtYd!yp={F7VC#Miuuco-f~VytA)j-_{9$AXJmMU@H#
zQul*8z|l)RQ7p#<!fr6Vdud%gJ4du;7$+EtXJ1<N0Ow&1gk#SPnmvTSmj>Nj1P;ue
zf|?#DevA;Q0G!G)=k^z&K4Q_jEnaJ}nG9UI%{Roq&`bPxo?-lFTU~|Psz$_)iS^BL
zpu`|sJksTS>xVbi-TA0pKOy~KSaGeTjBEO}e0H&+*cB*QIkrF^t)x`3Vumc)>Vfnp
z;t<#q!!DW1Q6ev)Q^aRF>p69`MkBAi5;s`iEV|@@7@8GEKF>H%0IPmirsa?7n=FAX
zMo|?T_QN%n%9yfUpJcFBe!gH0?v)0X!2qXf0<esbc{l2M!>tu`Etp!v`7SE85XkFK
zW%Rt6B9EY;h_y#;0WEQjqe~zjuN9Z8P$>mQ1Bg%E`)71FYh`S@AP0}kX_|<GT#JdL
zpH_vJZP;+}<(U~v^~Cx#EgeK7DaQF$g>=2UeDJB~F0b2S9sCmyVr=56t7i=ks4OxU
zV?Kg=>f@oT*jWjt&ML+-m0uR|;AeU1TG@bvKopTq4huTod}Oh65}7`m#{2#y(c-hj
zSjn!D^NQ?Tzz%Ar5^jaQAn3885TyJD16>gvdiEwVJfZL*#^}Oax>qGuKGa1MNX8CG
z*}E=*(}x*}eL?b|a{irGKjOE)5X<ln?t}hHrTqV=+kY(G3gTFTu!?I6sbKc#EbsXE
zw}NKFAn!vfv_0a#MpX`KkjQC$?@Y{Wv|yN_ZVm7@9cgRHreE1FrgmGfb&9sfqWfO-
zyO?4I&iq4la&T%4z&Kx#2{cy9Ok8NuKoD8%f-b;nr9gc60?N$)XAD0dK}|D1MA;ic
zCrwVT(nVTX&T*J#GvViNCJL0VASuao+rOU12{GV5R>HkBe^`%SX?XfRZ7>vbu}wxQ
zLS~Qe3fhI}QxTJl+)Yu@Xo|2^qQY})QbO2DKg-wXvt~n+8VYjB3vAbdZ)uJGrjt5Z
zkmh582v$4Cr#Ns~J=0P=h1bQ6TIM9+Z^f@l$hsn4Fccr<0Idwr0j+mqy#Vl|*YT5F
z!rL}yGtR4ufnqcxLZcA++NX>5=|AL?4JMc&h{ryv_tDKfNT0SEU*Ut|<S0R!K~LIk
zQK;bq5qx$Ia$RCVryJY-3@BoTZVC_}Q%-a4W-w~Z;kJY%hLb;&MtWh85GPn(9`5tJ
zMv5{0#1T(<&t~T|Fr+mh+kdp8*RFg>a`^SfPPn4UbUg%=`Gx5B6VpTl?>l5M9>fB9
zAj{p^TuAk73B=Ua$IX$nxCU(fXveCn*F*p%4R~Ym$Of}+UFmxRCBk_!zv_)*jQ?+L
z>4B^N1>ANFi|LJHo0lQaDVG&jgd(+0@;S)8(BQGhH(iT&Q&{=VV8}<tlo$c<#^|qE
zo+O&BSn7l&$D|u)%al87ag)WXsRN&1bRo_KJ2eO@zv7n~gVvL0eFr=nEyhCeW|x#j
zNspyhV}dX(_<+_J-y_*xaZac|6f3k*FJ<RB9&0W<ih6;wzoCJj*iEcP_@bZ??ypXt
zhoePAsuR0(J9m3ODS0!B=zeWE^v5KwNMrE0S-=Z+2NIl?4Ad#GO3=a7S>2S|&S*J6
zZMhs6G6l=7J+>Ey9hHQxx|zc+nya8|ogrTO^w`6gQy!~?j(d|^pJvJ}tWF-__X0e=
zo*A2Zi`|91+QFGSy&-D21oO+UOZ&fh>bws4VWe@f?$bFjLq<uL%??va<}9?nmIuas
z-D9wXaiK{7EgSQeM1>$~pUGfXM*D1(mcyp|QeUaPTV?x=We@&q$#cbRD40<FEsZPr
zU|X~=X;d}&!M8ZAbSXmeqlDNTvHjza{nU%AjxuSrAfaF|y}sxX{~dK6FsFHPt=!)v
z;{b>ME|UL!!Thgx2LU+>W=g~#e@>5SQgkm^D<NeR-b)W0&h{s1CSM;@?^OlnZ04Rs
zCXL*r5_42se2FLA7+$ilTJP?7DoQda(pJ;uZBsk;MV^Z8Q;-3t;Q}??@bMxUHYk@(
zsMo?~7saN5SUa5$%&gX%2za7A>D`2ul7*TXn2piBZK6d|zNW1|q~a1F2>8_%xw8)e
z=LpN}@D8HmY$zndIYF@&sn<$w^20?D6*Ln(O{d$=j5vpuNjBjY1Z#U1-CMNxQEa6#
zxUZEO`~6-yyyW^F=FpZyQbWGg#^<rt2&-;Ct1lbtTU~f3@uUS##3I^!PA%Gwo}9GE
z<V2H0=K-cw=Vf+adK-mMS)=h@mCClQHy3T|;96dazE40Y@F!@)XgpO!Tvzggb;U-`
zR*{Yd0)1we#-AW36F0K%JkhVahk-l@%ORi@k>}}HCJl?695nDwO1tPZg@|FPf)3-m
zdY4g_mi%XJfI>Y^q{`u<be45#s_hWazS%N|qfV%w-_`HOR;?j?|B`VjfunyHrGLGY
z`lC`lhNwqA7P-~@M0g=}IvZ({9iK>QKqdzR4<!)K$uQn#5qahyGNk-K2zG?-16+eG
z(KY@~GsZqVh}@IY>vfOK3J|nK4xIZ!D`1LKDQgljhC!bcZZq@F?R;(mE*|G5;)$71
za7XY}4T5;_){P(ALPy(I6xPF|a=m8n$&>|n0)Y+ddLy6Yqw@*jeVQpX@zG40U%Ygl
zKT3PXu)B>H?`Q4XIo2d~lk}P2=<#{%RYY?S?g<nsjY;0)a;-LYi*=<7lgnPk0;+7;
ziF4chiQ_ZHGW^Jieg)caS7n>NMNVnAUooD1tXi`%NvL0~4UycBx5HgYM@zcql42Wo
z6`Wj<69W->KA7`BtNCSGt;(8L-&uOl13HRqTrs(yUhZsO;wXwqD+w!7rz!n#7v?FZ
z@eKTa`=X9vuS22Ek@L5XEpKK)TeFy<xfC1*ppPkx`AStmT>ieaQD{?W&T{kZ2!8VL
zaEf}mcLS*^0Vy8`|NHa@lR?#R4sE2~-+qb<9Q?aT{f~ayUAEdF4Et4yo;CiKZoX&D
zmR0-H7LPQD0=s0m!qg#`9?9pmJJ<eFb60LRc#L*Fn4SaTl3Fv(S|O;X=5NtI)l0N8
z`8(2A%Ms62mF!OBg9wg<DSnRRd~8{f1<)4m5}i>x&=Ae<f8EY>ugMM3Ed(Wc{mz;-
z=WwErR99YIh^5q=;;_}idftELLrR6F$%y*JY=vMiOL4HnJdNz&3wN2(JOGDH9lW6f
zWC=av0FQQnK$pb1pZ1cbBpV-$yqK0+q-jR;9u|)Z$rm6yKdJtW<VZT9S4qy%iOXV^
zNynhHy(xBL2a`HJJ1}zVae5z~QOWI5j2-{DV?ZHgkhuJwBP2pjZd1j%J6R{{_+Fn$
ziE9KK2gryjPp-u>|G+RdRUX>l`N4Ck`m(S1(MC9tAJ_3~_MY`BE|b&*_M~a}K`O!H
zkL1QviU@j7d#291+K1t9y||A>RGmsWXUvCD4EoZQhA~dWiRN8W=n&NM%L`c<JSCZh
zAH5{qb00WEnz#^%acO=NO7IT_-v4+~@$oS+<71LC+*Tq8a}a~u<8ghM?8L$xKXL!X
z(UR^S30e0c!si<a*zu%V39^Zuj1R=bP1TZJGcSu7PR5YIDP-=IwLXf-$pVxopgh5B
zY9O~1*t1m5&unPY%)TP8Iu(2DG;^feUR6y@`PGC_NHEQfs`;RHn)AUDbFyNnkUP8w
zRBq2U>?At9T|afi%RhfQ;l@PW^97%*WECMUNA~m8&y8|Lu(S5NtxKS^25K)Ds)7+r
zfFEi=&iPfY)rPBfb<BN`ELVNpy1x)HjZb5a1@qo~Hk}4d5z&TO8H8WsH%mFP78~rA
z9ZJrVu=p8!2eOJnPNQp7gb)@zzCcXLD$8nH`F<^te7GpNxMWKxF&K}<Hx-b*_|~aK
zXEJ`gI@xSpBIo&yHYolix0unLh>VO{ms)rz|JsK*Y76g1j^-%Q0gOYBxEv7r#xX?x
z9M9eqQsIDAb&{7pI#G=bZvIgP@jSkXSUaZ)AZM7hc}B1J6N$2iYuw;BrIdfG4eH-`
zVe!|FC>BO3;E`QAo|t#=&2Zj8k1^1?rW$dbn@R<R-&(Wy4kOvwj~_hSFJ+F=C^CV9
zra79p4!Lf5>cmR(+3uxtC5@iQ2Ppd!qr>{xfpa7jVbxMuc#BA8kh+{c1YXnU@-Ml7
zugj9WRB8t*A1f`F_Y?+eWl5*BNxm1o_4m64B7I#ORbOVzb#JdIx)ZPd&@Q;D?7KQp
zlXuW-axV<oP&rBYz+Zy1Njn15d6Vw5&))um-;DS;NIr^d)A+5LK_e>nAi*cm?E37w
zcDrWG3<Ix*dmF{mAG!6g)00(bEPPb|uHE9vM9we?cmde}Sdg{|HG&b{K&?9_MGC3q
zrFz(@TK|E<_=!?lyip95ypbdkXKD{ztjsL50Q=~YJ!!tYM(wk4PP3bdggSQFC7w}6
z+;zsnyTl%|_9PoO1o$)!E>n<1)>YC+o1t`#k<&@)LswgsIQmZ-2Q8TSdX$2wWaFQE
zC=@*DlN(P$>jn_W4#&4Ws@HlMoPXCy5WB#)Kaaitu1QjDsjC21kdFqebA70fMxA<X
zgM&-^q*l518!02`n4Ag}_LDWC$AadyjI*g)2=?k|>aEh-41zIHOb7B9e}!5EyY9(X
z&lsjo3d0|JqGxc~NN#+ol|pRaxGD}8Otxm#pP*rw0xQilZJ)L&uX)HLv`Kk`_C@{a
zuJAV}?Z%fc`4JDqZ-c}Y%4y2eI@mIytx+nz&IUE$nz156!fg=J^v?SoctcY{5KO&*
z&;+%7M$l|sU~l#GqpjN)9uMP{DAZdCJH8laD)TW+Nm`Ca7IN`;*%2Wt+h?LEK83$R
zeKaW39w0VEsy?g29voX~()4#~z&TO|4W2w+o`SKj`|wql5>y?A0JcKYXd8sC$57Tv
zGVgVwW8x0ef$@yMTP9^{bNW#6;R;Bh2@jQyHeI9`1wJ^U<44w&gZo|g(7(+{Les*3
z08B_vlfLoCVlEwlnD!U4=+%aR+mwTn!(>b=mrC>I1TA6sUKYuSQ5q`;ZN@YkL9ml3
zmahz$D+5PiC9ow<PIQNnxalnWf`!tW%@^1X>Srmw)nNQkr?7LVTu;8Bo5_36Ze_7W
zeYJ&J8<|FP(!zEsngCF`7u7Frqs(30;z5p%Id8~d$f?%Izoh_T3ncz~q)>(=zM&)R
z+OMqL@Lp3Nnx8$kEt0;_u)@6yMVT_HH=;G?(T-$gIzyku#6+z1&8Zn~&zsv#qbjkI
zk&Dl1XZk?Pg^62{SppR|pzjmq{0l>=v{_-<V7SQ$z1$3__M)hhaba{GtvBvh9b&HG
zEqZV$f=FI|{}MeS&)_(Rj+>jth<Lu>{7P5D86BfFpJDRDkt4fS`FEAYO_M(2B6e&`
zo59$0=Ewx%+eTTBa?Pw<I6V-8N0xlV)fYx%e)FDDXmSfyf!vD5$(Kh`)3#!Nr;}zM
z_S`8{$Cf<n*)jh0D@66?heF8H++dU7))bU9BrFoBT)-a@5f}l4|5Ld583cqu!t5>3
zh?2PutTi4!jWxu4Zpzm;WYcEVOu<}@>>0h<6XvLbsyk52vfsQ+YcN`O+dQ{yv;m_W
zyxRX{cJicEL1bkW>2@-GDncBOX^xVHeVLQvf>~3?k~X%tfV)Eap>)8oh@*BVG>HLv
zz9olX=w8&HWm%Np&XA!_?Sr@DC`g0HWciFSVSpUmP)?uGT%s3p%d$0-3Hc48oCFbu
z6AVJaOe8gtN?vOBF~_dTL&P3=3oC%pidP;<YtzXv@wjbYOOfOV4l3(2QZkC3B6J?|
zCHEv3S!Do&8{w-f{I$s9AVD;!OZ6TuE8%Zsyn&Ga1Z1RZ?HattVhYyVZuC%a*&q4o
zFWqTS!w#u-W$ucN{X+<7sGKCX?!(etc5>C62NCYXx}TEBy?PT=lVwA%abs=H-ys0b
zS$Rd;%00pKu+EUAIOTf17?0Uy{U%f4CG8nurL;999f~hIK@nH4w$>#v;Kp6E-}ZQE
z1w0<#ZB8+ypb$T)4h^mwvec^P*%-c25ymFAcnhxi%md-qUo`{37{RS_eq&M%B={#_
z@;^l_A5m^urLDyD<$}nO-ds6TO_V1=a20n=K}PqpP;+0l-^gqY$m0b8t!86ji=(xP
zq_!Kc^aocs@fn<2DiY$Zq=N%2e)fmz25mV2$+_|1+xpE|;<a!wJ5*x6CmbqN#>-5;
zXpx8M-rrc|0kQuHSp84ePnyw0Xi&!knuLu9zFop>XP7wK#pJm-O)YVmTHCj#0IX7i
zN&EKGI1OpVVEo6(*mp!KAMV=0ZijN;>^K?y<++VxgG0{4zRe?{r>~^tl7&inwrmal
zf1m`Y0Q~s~d;Up9rqJsg9!kK(ITY#V4!wvT?t@{+^vmozHZAinHGr2UJNt|#qJ~{S
zo9`R0OuaZH{l~gq3?nO&ElugpK5I`IK6!J}c=P*xnp!NC1wG=T`Yx_&ufYt3kbd&i
zVb}&1{>1fp(1{(pT$ldeVG)oG2>f&MCh6lXtg9L~(4-i5^>fTN!fhwY@dwN{`Ju{G
zlNlOBs_Mr5wbqGLM2e$hy}lR818+)=KviH7%$x5V*@3zq2&4M#-%&jH^=!{16_G|#
ze>ScdILWWl_p8^^ILqh`{X)}j^0zs_7$D-GoAW<0N+XjGG3GkxO;bDSeoI?J>(uT7
zmt_^cU>=J@8r#>;mJ!l=7z-xt5_)1LrUlEfbm!^+hIIXH2WZ&@;S-`t?#0(Qk<CaK
z2d8_eUYq-nb7m`<@Z>!@uM#)TP8RqnT7F(hEWtmwCC8!?GaR?##Q4MdIctJ#F?1<;
z!xHFWPGC7&0%@D&nOllkgQakRvPu(|o3aO@<X`+O00{k0z~*oJ8P0)@K9{|f{ES&C
zv}R3jfFydHKLIz{oHXJ$Sa3|$@da)(f%&@d6UfQQTrUb}aV{L>X4N<RcD$USku|e;
zwwGwcd51+fjvP`PB{O3r@05G=1FpT~+PXPUUo14J1aHxUV}|Yl@3-;{x@Sw*AdS1Z
z&-`eaEP==3ShuQ|FyGYSA`5@}6)+Bn^iM$LuSe>CSTP-XtG@cuGi5y{Tnt5UdGhL8
z{SyJs!e}ZEsZ7BObUI-BecGTy2x$bqSmnjzA*g#Y>M^a;q|lHAS8cP1I;ad54|#4+
zkEPDKi=TvaOhv1hY)+Ckl>g#RK|q*)0yzH!$s|$0$JO{{(O(8RilfF%Rjjy2plu#^
zQC#??Q6!xtyXucefhm-PACrhFQJzea@M<%`#ljFo6|Kh6ew}0>f%02O>P+~HX8sS4
zGFiN_xb#UFu+<NE&x<=g52ElYWDEZ0UcaWtMGrZ(^!f9iHm(v0E(BLk!^7I&X+_%r
z+R18Y-W4g+>PV%*nCLgbePY=pDHNOTMHA*}IPjY)s{bOH|BIr`>~Uw1^N2?b({pB&
z*lDADzVqty`R=t__l^#|gN#<X5Ag1D9Kd~JNid|GB&syN%E-n%>az6ZYEn)c>2iiH
zprH46jT8TWXq3q+T#3=qSHNw`l4`Mh>AwAOC=C*43Un8TW9|Jm8uccIOd`B!&xgB)
zUc@A?7qPY7o_6%vHoBngqH#*o33;$?00pkNBnporZb?W5Z7#b@&@;K%CY`9dSeWE5
zk_rC5BFc1Q6tcl+L_=Z;n5iLfsTazkVNOF^b-j3-X)a1R3|WU2cXKi&B)(;oeg9HK
zJX(h7869=|jJ+j1jm_Oyi8y)l+P@cUNs9eD%7Byt|I?AP|1z`j-&B144U4jVP{yXw
z%+BtVwKgq7nAOV`>zhG7u|h32=*~?&F<206cZ`~2Yc#`4(#8h<@AU@?%Uw|V!EJJ>
z#1`2g-4ytBf_uf^F8C_3qzGAR$E!-uYdH0)cFUE%U~v0TW=8D+w#l>C;mWRXcR9id
z*A+m2+)nBoSQ2XuSyET&-?m$!)~%0(!cq!RBCd8EoH)aB4s}C7D!l<lD7iTy$PIb~
zU5EgfQAZz^W7o%jM#VF9B}|A~&0c>)1-vxgjQup)KW_lTM$ByQK;DZn4^W)6*^G7m
z5%jQ?EkEr2A-BB#$7K2C`EHiG*5<*u>UYq~MKqb>Jar=d)zk&$D9=i(s@kXOnBXRh
zlxankce`-*s}gTru@it_vk3ei$Re9o_UEQ70>BRa5<bPtDJ+5UZ{Gxo0jm6YlKbl=
ztYJtEMnDQ{D940?IBo@V0^Ii*I!JvB25qH9h#4E`6=;TFfS%#g0gGvCXYUF9AtAin
ziihBXyO#@j8aIBFJw}8bHkR=BaOSW9uVDve>FEl*f@qo+%Ay5WYi-c<eS<B_5q|Q)
zk>SW}H2%%*z$Ya`uJD0!_i07%GL>D&8+G-KJPrnWbtqcfM5PbWg4<*FDeDkmdSO*a
z7Pw!dV46Oy4JzUY<J1Obo{N<NOV^wrD`uSrbFmev<PyrA-=k`{o*&=XH!@@IU~{*4
z^xn&zEasj$$pRhcn{6bKCB>~DZySSA?Nl@@vxq8doq-fJT0~0Sv;=|5ijO}8!=89r
zhX%YVWtftDX5U$m$1S@}cJT2Ft&uxv5Vt`C*I#pg2fsuhlr8|tB6yI5r2l2voc!r~
zZRZDNe}4Xf*#-pC1@Moku*5%E-hKVHRe|XjC4B)MUR1TtIH`En(6)$(pC{MIqoCPc
z_BvjiH^N^tVbo3ypwmICnVC0;?y;Mx!xR)=HkKpIa;qA$eUvXUA&Tl%nlYdjQ-_gJ
zz@0W1ZiF~^K1pbJnuQQg2`bqkoa!dcVC>oQU6x=gPMHmhtrHtT*G7YAQC@yA1Ha#7
z%s<#R^f}Ge2ysF2?H!|0bzqdQvTMQdEe8##?7!*TZM9;u(vPw=;N?Ru`VQ&5x15T;
zqJrYH95%?eD3LZ?k!~%H%m_TP`$%35zTfyvkQ@e_E`+DGdGnt9Op2iK8x&9ApZD~w
zkyz5TtH(U;Pp~@nG2Gh8=y$4}`Iw<o!mo#3vB~KJtKc=;r1_Q-ay!~7^aUHqN`&&&
zq*yWkK%4+joHG$!k%M6c9k^KImTpRi%Ay*_pyFhmVRT4nSG4XVDoAJM=|AZs{;pEQ
zw(`^KfQ+4y2p#OXI-p<~CZUoo0$Bvsce3w9fswP&cb|_RA~@Wo_f2zopp)w%R+U*t
zxo20hH4K$>ri)!7_`Q@66P`zMEMv1EBMd-DCJ)fnJ1{Z^nSY{+qMK!F?WKi9egA<V
zQ2BskHQLdGosSmMj^#IBwl<aNE$|zS7a;TBk_d^i%1@ox?eVytSn_)#72?iUp92@&
zqm-4Mj2^*}3n|bKzO8i;uoc75`O(1FexyO`p)WQziRPnC%IvXM5@rw>x+zL!S)r#A
z5uao#+)U1za{D|P!V;_&3_pHo`iZQdl$0!054y;UUplA5@r>fv&1a|2bl6!4@|Hvr
z|4DKgwYJfHA>yere^5xqf}J-~tL{f8-||A#VBMzQa(`1@sjsctrwhemaXTBvFtub!
z#%ZCC=>})W@LLCM0#y2A2p@$Rh4OwjoH>$sLwyLrPZ(O2-`p=y9rp;s8M6-an@DqS
zM&+#fM5AZOG@{PpJ0BON`_s(uf%NmvWQ_h8Q?l2N+fnqHMo$P89KqP}5RnMyAMk;Q
z0nPqAg#GU^zn%)~9u#TGDckE*kCL^@UGtP5w-7V4y>3K9ZqI*0wXo?6i+auygIgQ>
zf+LX%ippYksNac{jAL;ULc`?Yq3Y@RXGT4KsKw<R5poSUmwCs!NShGF++27#31FP}
zy3tU(De4eeavA{zmRS?WyZlY}P#Wy^?BuV@I^5KIGK!;oCS8WR5Xd*$cl9+@UDg^Y
zuw!ME)M%b6FH&y%j7)!mpUz3-QvAfuff`qE1KQW|9QZ9QH6%FHnNq!bto~e3-+pHe
z;0}=GZz-1exwO$aomj@PWsYc~u(y4Ukr%`26NgIyM>kiWOo(>x5`OQ?uzrmkre5^n
zxI?<p@S|&^frNpxJ4f+p%K{>Js$04nntd}=_w7bp&YG!ttZVJMEVke`FjRGionaG_
zF4svXIx*(X;Anov-qNL$8X)_Z+;i%l0fX+G?-Mc^J(evncK~6EM6%sA6QX#@HCn3H
zw=Fmfq@r!SD`qXeTJQ2l^tGByr!XU3rYvn}ANb;2$X*+#b5uI;M*~ZdeBt}D?@-qs
zhU4|2YM`6fxtdl+rI`466^)=HY>j$~Z+o5RO+5CqB%?@g&TlMQfr7XScXl#}<Z3yJ
z^mGTfkHW?fNhqL3oP)5e2oJVsm+X<dzde2!NcE?Ztug$2&(n=z8l~AjCh98Csu6CN
zGl_&b-6kUiq&mJMc?3{88l47+9G!*wR#D<m*jN}iq0#Vwb6cY!1K`s?TLouHHS`~l
z(-(w9l6E}7PnB*Wof=n&NsaNc1tv%Bk;~6I)7FnF##_(X$6DVrnm@0^b%ZP&Zw)s;
z)fGS3nCVWT7?Ob6S8~eKb!Pr-!e%??|H9cmwcXYnYxuStQdbFR&ZtD#s%WhG)!j67
z9b<0_#uQA(l1`KGeC!i}tmgv)6(H2bAroanl7C1&_0|n~BCfFjg-QHoVo9XgP~>-<
z1R(|r{wZqzyWK*J_kT@ak25amZbc5)AMrdeHw8|gPzb6#e7N<bt{eFXH4O}gxiuq*
zFI+1(-z}-C#mfJANTEJm&834c=>vIQ)bNvdYi5rLO)j-cJMK7xA(V!YRQVBOe#zBp
z4^kf_+u{lY$?i_zPRkH`KH#!eXIy+^=4#Z4OCG<gRQe8%TaL<-Dc8wanNEShWg;=W
zFH!rO3*dLyL<jQx6VUwI#~c4&ZY~I<)MB}U%u8No?S@o3jYS;z*3Lk+<`!6+=w3#J
z6mprY?xb2-0FRy_^jMbsgT>Z}{3MGTnv^oU=<1#VoehzTNfxc3!r%Mbs=l-2-?yVB
zLA4J<f%9&ykeG4o3CaTHz3d5aKijN*n8^ruTOTs@^d0|cHm8)8ONo4xQ;~!>!TlRY
zAS0mX&vA4&+_Zd<**&R}+F+JyBMhf<q(mCAPp9+C57#v}ZAP@op+~y1)nMPQT_jM$
zC$HqC?N?FIra?(Nj>U$8eJ$RL7laKDq{Zl<WPUHQkzpuwo6a;rm<s3!OY?zBPAB}H
z99U}?HAdpTx`$M?eEZQ~z2*eKkaQU)KyfXFl4O6boQP&>Kr8<?d@Pa98^HbRQN2IJ
z#j^VbJD*DpgtO=@kKZ4f0E`2Q|5vZYM|keXK|U&Y_IJTC9Z*eCFlGW|-5BQT7~3ls
zG$JyGudc6f3aNnxzfG<JWdEtj0^hAn)t+N@)=j9%pRHkQ9QsG9x?f<vDt1!RMsE@m
zu4=&8yXmJn%JVt}Y@euxe3l$Z9Gy1QH8c#K6R^D4=I2U~^}9z&Z0xET^B|YyJeac?
z%vcG_Wm2pgWfM=Z{OTdnh=5r?Y6n#+Qb5R)(IDRKhvyx~N4(ZW#h{H^(d>}_+thME
z`k$LhM`!F};4b#F@YB4=7V3@Hsq$oBtITpA1YINWd_^L!VV+10wLo#m@rG&hW4o5=
zW6j~I4fK`&y<=Q;rf0+!rhUQpnWS!tpdo}9ugLR{MwG6x94(hWkR{+6{dD1VV~djy
zyp=6Z`M-lh$GX`;rbedLZ8|GbFpvac>FNGqCZsfo)1RC9AD&69<A0~CMCx>j8<ACQ
zulqXBa$N|9{~|h=ZpYB{vx#W>%4N*`Okt1X1Fkoupz}Ibn_r^_xhQ>kzpIg&OyO>S
zChD<CGX7RaVNEb-FSiH-r&Jb(#Cb1cR9lYHtf!%(TPQNx>Z=FyV3DvI`uLE_jaEn(
z{)+FgWY9ONHCYo$q<|{5(Y<H(3d}xjke$9J(nW(jtP0F1i~!Td`z>xH$6EfUPW!HM
z*q(3pjp)afEq<aE7~N&tg*1#>E3{`7Cxw$8VG(?%uldzX5};>aEKlD8RvpvA(Lh3|
zaxdDQJZvu}8w;|j%4p`O(sbM1w#$123eYCwb-6fF8R<2AhR;J)YsK79o@t}xx{4la
zWhSSIDta^q>2KidnK11RfOFK%QGs;=n+ijs;u~UvHg7M>Js*;TjFb2mOXs78Rc=F7
z>dQ8|2U4MVxl<Qz2+3)-lSbTpZi5CQVm9;M;1kR6Yukz5dZ}5fz6F@Ym%tc3n2s_t
z$Wv7eU}#HqvylqKVV7KiObe)|<TrSJ%*+*sy_|Sx%%-t?4&wvkd3Vtoc{7dyG-N!?
z2Y4#97_5*HD1ext^UAN3*mvz!uStkJe54C2eYfdpOysuipb}Z>VrEueA?%+*>l|s<
zT*vg6658fQ8Ddt*+P|5d0Ku9aRjgos_o#K?NTV`PXR#Dd6*6=nyF6z`Qs5X<N?)*S
zldvPDU`3uT&uQ*2*o{+2hI4J`)hXg-o%&#4GFqJ0B(t|ezRi<qrrn*8Pii}WFA@&t
z|A+n{JVCJjF8vKa1VB2AybO+=7p?$iblZN7!DY4X);DKLpRU&=O3PP_g4p^Y>8FV~
z&c(_(r295pi;spN%uA0wg;~(MdGM25UkHYZVZad*Y;!70vA7-dXb9Ji%8%oPbCVo%
z>*fCV^Qc4b)G=){7<L<8vA(c<!E2MIqJO{55t!&HdK4Dw4^l~KqA3?v8ZbhSs5PcQ
ze1%@S-iyG_jLi!pvu5(nZh_a4B$p$CIt&PrucrPGmZ!er1ZQ<WMxVc^&`1!9!bZRn
z>DoyTnjjL|F`N~L$@;==+gLF4<|pP(vGk-esO8X3?uaK=btlH<##+UQ;^I3O2GX4Q
zq2*Z?fnqL5ErWX1Q0PO@4DiG2V~=<pJPLf@hX7`V!j02UTxipVzpo05<Y7P1^rw@|
zy#DB~GRb@%&GFgNq_|E;1ZV1inx;|CnHz3=#7=sefuk#t+L3w_^Z<iVtiY}~3VG1<
z=zMKk6r}M__HV;57lb^-ZP1rPYMVcPm}S4M3~r60>S5AyWSR0W4t<|VwgEJJLgp~?
zFmS$lNN`q)iAMaoh~KO`Vm+xz4&lHw<u9dpKaS_|YJ+%lFMdVaj2=;xoTWZ>CI{#H
zkZUXG)BDi$b9shO&@@p_;2xL3z$n9`iMwyOe#jSNefZ_$A6XX&P$D5>aB*^EFtW5|
zFtv3hG%|FufQRvdhavp+F?TezCsYtrR@Rpl)X*0Z)Kn&9Fm*O&_+)2pX-jWnYUV`f
zO=#@mOh{)!Nb&1SXGX{j599N%0t5ow|LnI7-K+`e#JCA5C>iv$^|*CuxV80&sC5|#
z$;k;RN!j>V*x3lZy$MO#d>JUU8R?jGz3G^|b)2ZF7^tYc>>Vv_oe4>q2#J4vN!ffT
z{?#rg3qun-w|`^7|LE!@<^KNF8T{?l5&re%k+Kr<5;FbARj~e}t56qIlG7Iy7yUap
z+66QKqW?TdP>JWBdVQ}sa7JxL)3CSU5nn((Zjv4P3hOeG067FAIiAO}<yRKsHB{0k
zjeK1vcCT*TK+d-Fp;#%?d?j+E{JA4YAiPUy3C2?MLO(bZGm0<#=oBwCuB)G(y;}iD
z-%dYvI~Ka$4IUv*kSlvD_ZMYK{TaS4PNt5ACMJY*BEJ;)FEW*s6BJgFR1^I-iv0K=
z6uAp12YCPKYXAFbco?mn+_FcatqgFqr1viESF6|dCEgE!WGj2)ODgF$@A6cFy6xR8
zfQ#70WoA)GHRgD#2PVK^DRfyFE?BEcdhY5$rnZ&Yw!RWGuqx9MsqTv>)J$^!z=x#0
z2l_u^GqC)RxtsslpqGDd$UH0#UoRMz$kp>&$u}+LNiz<-#%gzwym|(mdwCyDsQ{w{
zKeR4XK4_MD+1ITRo?>$UdQ!F%hjYvx$hl%#_VrN9typI93jF?{owWjk&P&n8kKafy
zej28#D^a^$OW7biFaW#P1ZyNvYBZk7SX~6Hyvf#Q(;J31>0fO`OTwtjSF_9XZ&r>L
zxUjsT7~!ZmCE0|l>aaGKD@c1MtE*wV18Is;l+=G^vV6^8I;McmCFPg8#W`{8sNpXH
zs9U|Glrlsm*RkTkr1_PFrM6iV{93tFuh)N&y$jd^bp8(#6O`zPL>zQ^@o_EE^Se+r
zp`y8&BTGXl;?F?4!_oI@8Ji7F<pv){$#$N66@K^14dRlCnWd6G6N|}e`0X#;23@$e
zvy>K|GN?6yM^jmxqryM=_@3I#DHXF>fmCf&QGu3^WRHn)pXs@3qEL)MxOIwqo02kH
z4?+i%5YZOM(jakn>}U&)yZZn&RYVMi=wQXndd!7?SxDR;6J`Ggh>i8z<(KBU-`wG}
zQ8o5*iqZ0|sl>cHta8$EUflB#)FdfUU<>}?g^EwUws6odBP}_SL=3^Wqj~lo6yOvw
zq$7LZ$lsYAaUYF+wr)2e@LO8XK+->jQeZ@h;Uy5P3wEs|xcky6zOB{?FPDxKvE(c0
ze`D`0xbte(<v_h+vY45fnVBrIn3*hQW@ct)W|k~wS<K9m#mp?l_s-{&WF_CZ=dM{Z
zSu@Em=-yTJRPXM+`>FRwvF)9%OZ1<!CJNZ)Q|iPpGhf;WCiW9xh#Z$5ZW&BR$zTd`
zDI!3Z78854(3JWchBh0M&IuAFqi`)w(y`jvx*MMDQypFfZHjFN?^)wwlN<w0f;>kd
zhjd6S7^BITP#{qEv1c2^CcfWqlo0CqDHT%^G&FGiG(@nbQVKEGDe@-yw3_x+PZ&qe
zs0<jR=`f$64RVBGY4%(5smCBYcm}4cJNouQMpc~pxGN>^<&~}K<Q{c+&bc69>SLXO
z`WV?aLayQZ2$%wLWUznH>i^7r3`(Mx#H1{KmqzMm*VJ4#7VoagQj22p{R0>((0|bW
zpDU6XznnzRs!>&-4o5Q*6Y?&WzF$YpP>Rti!MqCyi9b8j)t!a$Oj9oUBlH+!uPTx?
zb-Nh@2XvQ%dBmg|QpSQGj8(kh@XV+zltIqfzUw|AI9zmUK-eZ6FCFHsx{Y=}MfHN&
z{wMiQ%$}}P>4V41UrIdZ&gc;O{AkSW=2QAp#46MOkeD5i#XlwZzj{YNf<t3l^?La9
zvN105hO>7u&U9x@o8*FvUw$_~3QRii(AFXX6kHd7K`y1zau(`r9`aDQDv6HOD7^}S
zeOw@Hx@o#7+g~^V69V-A>9_(-GDlU_2O^qSt6GH^6!#D8M5PmTZ53qS3}5R;;fjU4
zAm+iA^^z*0dZS9;x|PDEOMkWKtn-Nhw}O?4hsIeYlz@scXoZ<;m5U;lRx`VFp-aM;
zm7d+vRkWvW-fzivq@86XARX`p@RIlyieZ6<iA?r|I#~@-jst6x4AE_}M~T!@Pn@~C
zoR1d|^8xqGsSU|k*fa`E(UZ{_f07w&9@c}IP%F2NJ)Q=pLycfMoR7-0cDMIzgdcv3
zpw?(=)ntQ6z=vjP>9H*bYc^9?YdcUdu%)e`ujV}SnW<~BM6Jwkxt>ZrqD!#KWEB)G
zgdo7IhC{TK&3i_>911T16FAF$jcMP$9&tXUoeKl|#Zj~Toe&@9vdovLUzSZbbcEnZ
z8o_Jnl%`?rJ+ljMFC->@zv0JhTvj!4Q@<8<=4}F^@gKC+0Y3kqM;pJE*1h05NAvSm
ziY_!?489C^UKyIYFq_4jSDYX}EI#|=NI$kyufei~?i5t|P$yDorbNw+Fb^s0NFGv*
zL)sBfB^nf);6)nbT4u#eY*YKj5$E1k0)eL(x1o|74>&ebPVL9-GLQN&0fJHk+Rr+6
zr|?|VIW}yhkhe{o=<1<n1mYJEr1erW!$@rmm-K*v;!F~T2WJ&}sEy0H@Z$j{BHAT5
z1DgIY1R5DNlJl`LG?Z^BMF!n7-Z^jv-hUhd_y+LLSEv6*`OJ>4UHHY+@fh7JbH1ed
z7U_Z~9`!~LB$NW@#8melnoVU07Vbvkm6MZk?PpFY>Ldp<i6a#=Xgz{o_GHwItpc0<
z;Ov}I$i}TaK9qFE-F^kaLahdfi)K=_cY3l_yM3#ar88K0=Y`mF=h2P*R!sl=rN!&S
z^eUi7JG)MOi^ZA#d%LM8yVLDloZpmB1j9wYlrUS7a~T#8dtp4(uk`VYb&MYNda8Vh
zU&3Lzd8g{xBrQ7peED89njxOg%rl<@B$n&7=YiWKz++5_vIO4F{3tCkKB_Ymm)dzF
z-Gj||0rZXaJ=%z8%#Rb;PjET48frhd@_!Ydd2SMWpi+^k!bPFb0N~^m?I0R)Cvav_
zE?z%^BDHY(%Mg5Ehhj?}aLJl~e<N{-uibNH9%F|cMD3aCn_ABdrPJ@m=q_aV**dSE
zyQIguJgPGW3ALt=eB+PAQ|focGM|+v&M~B?-NYMiRZ5`MmxD6tSS=Xr=G2p?VB#kT
zQ$73r3$<P?er`mnB>^qVU|z_~_0F?{8H7o8&tF9a+6T<|uN4(}R!jUX$*pK!POgqP
z4ln_1CA%XnzD^stI7oxbX`olkT}9#`k)nczry#$Jk~qP+1SEosIhP$#K9}L_DnBDS
z&hSYBAIo8k^TOSS<OkAZNi=lPK)!CJKf2wyZBMzEXb3ZD;>Q&&hrV9z&z`<e5|5wk
zC)~Fbx=nY)`=N~;i(%=ddXri>#6Vw(<9ndOn_QF^pd4a;nFZ?LG4r<)<{!7}T5p?{
ze80@SM5n-od%a5l|M;F*Bzqn^|DkGbNivT-bT|Edvk!<Y{(uoLb_h$``oMu7ZV*Ue
z7zm8SYdHYkOATbvjr7<~;jl5<{Ox2`^C=j8zv~m!)ECbi3%cx`2DX>bqB%8L=VyNR
z!(#|#YGPp=e#j7`eTyX|S({o#IT`uTNfc=*MA=(6qP5M2$aJe9_R%yyb2I%qRA;_i
zYZA7<RJLS~u56~F{P48`3@&EaP6?w75$q7OMT_YkblFtP;gXFZ(V+a!@yjohivgH8
z(QzoX#?X2Z`D{Fv$Z&|Tdn0&k41`lMoIELdjj<&g!M%pUlQmN(hWW9<o%<q4^$()O
zdwHby45HsXvRb3*@M5jZUIpjJ_}|e*OcZ>NxUW9>*CYrmJw-=D>20>67%Sb}r|w;{
zSE6-biyW^3#SI9MGLBJnU|5D$`nM^`Nu~=<^>$`F{g~Se%wS1jHwD#Me->U~Nr1<{
zrXH-7>w%NYXA%bY`;XCKQt{UgBcCZ*g1JuM@L0rD0_tKnU{+mj1z?2Ek9^NxL87c9
z!TSLcBL$y59)=J-qY=#<uBKVO=37|1g;{cPLw1=;HV9febwpVPZ|k-<QnZX$&#HR3
z{WcljbOY(shU39JpPZDuxT<|fGj-!(h&HbdWMD>CB~(7b?=_Ee8`iIbgeBHFy3XZX
zJrnI#ax<xwo<%zG#YLJI&_;MKvjWtSfRdD3k9CHyC{BiwlCz{_K{&rf=Qp0u`Iz(T
z`xE+&9(nR^>WMUsMO%YMwO&}4h(s6y5-M&thd|VSA%7pI+?@SBjWl#fc&PWV6J%K;
zL4D{%kxnSQ{9!&n9sOglE`3gIfF%;GT$G&N6$<>ts`vfX#%YfEe1z3chO^SeVU#0p
zOQj(A3_aXWrLbxn9!g8u`yGVMbRnru3Dh@R*Zw3{;vYPG1-SkvdGG`Z*|D!Q==3o}
zT&F~8;cnL{DPf8|Id_T9C??iWe3B2$6Nh*Uv{LY&{K}=cU%u=da?=#`GMFE`K&3^3
zbq6yJI8|mcHIQ)?N@1*vsORcs&3@*O{@u2$P|sMnJ0~g%n{nupqkMil3BS3bktrvT
zEaCYf7@w52xrBkmq9>ddqxL0NBM-b5wlCK(PM13sH6MHdJ!{OL&Wm0BbSla%nM=-Z
z;WVRAhhc&L@|1|0y~NY^NmzCGnC;GPzhBpOes7ozD;oByj~@m8ZGlyAN9$wFhwrjW
zywc~pDnfdX-TurJqu;IoVHlR|De~PTx3>RfpygS7g~zWfsHOzgOujlgxkk6K!}<aD
zTtPo|T(17Z;7k)Vf5`X#E<oJFM4|kWm`<&jRJD!jP<P2-F2XCshm0g9tDsdXY5IJk
z+7Q?c$Os@v?=LF_5diG|izKZ6_iG}@$iqDYi6Z@^?`MNpz>*$%C`;6iiEmnBprXAd
zPig0V%5<OZR1{mqITd*y&X7&Kl%nmAbh`S=`_Kn(6yA51v8QONf$hObMDs$v=)Qi(
z9I+7#axAfhjV}*anMhz0d<THR5Yx-ul+OKKsF+IMA7rC@>+D%P?&m5vBnN9Ly*Jmr
z(k7h|ZFjHGn{x%xUqOi1S?yhU=y#}vTXxl3V>Fz?3hGz%G`zW8DdLtDkc!w*zeJRE
z)f22jeLnCSimNg<H_g;v1H{G}P@PKo{DJ&oDSL!qz&7re&C7!1I60ul=a+T*{T@Vy
zk)fd1j}l^mygZJVlwT8NHCJ=MWJ~JRefZue2pm@0;nDCrqoHBf__kKGl&;zwoYm{F
zCkaY(nK_dPuSuC$oVo3{33RIb4S8VG4o~)(^<HxJYht`9!{hmuk+rMgd{O-Bt_{S}
z4VlV(jqle{Xj{-+ItxnV#buddGN6<#-o=QK;9t0b3N#Bs6fDRs&*M_Sqbx0<pYj4s
zW?4`gjGC$|1E3gI+}3ntwJt|u(89UsoJQlAD%f;<w~~vNeg7}I0YIkz>@?=Tp5>7+
z5%BU75D^hj5_k~&H>Y$)HpUJF);5j=ruxpt1o{NF`VI~*HugpYM1OPYwGG?}(EFzX
z<A>IKd~8fAh^}C;C`zdkp#!W=0D~<8%(1^*ty$@YRDSS^G#YD@01+XAC+H<<h59>$
zC4vH-+pyaCWN8_iE6=-STR+L{^R(fG>;WIXb;n6CR8MTkw^ibV5YPpX;ohRYXHiq!
zY~m_n`;n$>ob{nV`D9`fp0h+c=EvU7+MH<S1Sz3~owRC<OslnWIyaxbd}~(1TVh98
z-Y~vnv67v0w$*I->E~LTX}6FUX6}7vFx0n%1C7OH3S^_eM%6qMYLnoTH*GZ2cE9N_
z8<BmKA7yFy3qD4$JgScAq--}FbXkF79==Nm6RM#yTAkVd2kGddj%05E8i`W3k^&0y
z$Y4{<dk@(Y#H}GTfLHNKSQ7fl$QVOD@vb+BK95{Toz#jERSOILCp^s3svl64@{EU!
zj2L5m44RH^wodT8-d~mq0Q#qgZT}6u%>PC&!+%Ha9|HfKQlozyzHWnh1B3n@ffe~|
zGRH`h(@Ae_k;Y=&c4HXbOd;cQ^iQK(<ZXjj5Noq3N>wV0j0SFSqlC|)ok}Uz>9c(V
z6dKTmV8jU}NE_5;`j9i|#v^J!BM!UcuT*#U@xDFkm((A|mai*l=HB7CUZfn&e6hSn
zh5;&rdy~q}9yW{`eUOHS*GmdxS=74{5hQ;KhJhvx%x$#|h~z7|#<Z6tXCY4Rm;(b(
zl3a;q4{;NvYq=ZJM)`d!aE3@$S=@YkxNpusPCQVPD>m3tC!!q>3hP1+SDif}Qm|46
zN5(R(pnOVv{!3=FF)APdHKL(uO&v$F=QwdaY)==4%d2slo|D>Z1Q(jWfB~Cah#Q3s
zN)YOys)bR;uGA**%<Z)?owRT@wFE4MG2okQ$lw^rGVRI;;Y#FG19sd#Bc0k%V~tOh
z_F2?~X^7WBYecUX^>@#MSdmfYEk!x;QN3(tvpgO*Q<ISzKPr;?u_27U1g0G$$XQm#
z3hSD$!O?<Iz=IQ#^IP%KCrZ5W2>mG}w1?P;us6fbT+p2D=1R@FoXVJ*^CQ7ZbdwXs
zJmsY{oAz!H+OSM#qRgh`oi_Ym<>lKI7KrW1@EHW~+uyWqDdbMg505UgzOS$Io4fBg
z&Ms~+D@OXD$g^WDT|`x99yT5weZ~*}S+{{4fUN#b5Y;DHeR%B(oL%c8S0ZzA9oIW0
zm_b_hIhy>hL>Ytl3<?5Z8NXQ2_39Hez|B#=cmSV*MO0J<i_e?n*lDpQm0s~U*&hL<
z)p*?SI+DL~pHN2#)q>H){IysC)_@-WgOS;ZWa~WK$ajd!{f6a@vZ}3q4I+-DZ3oPY
zLoXkX>(cdQu6Xara(5OK(nrXIH49jzWScVesoemc2b{w&2COU>-1olvS32@xtl#Vh
zb@g%iB3Q1E%c$5}XnNRlyn@Y9g(likxMj175>X&WDUZ#oy+GBJL{4?JC6*jKP+8qJ
za&yFpqdC+VVvG7U?CYeR-g%RsDj<IG6HfF!L5v%{FTgR419RVB5w=$G<b1vtQihz*
z@TC6U67*Bck*8o&@JO#rva9@9byO*q!3d(B|KUR1X=o|wF9+WSG6ypH7clVNy@&j4
zW#h$=f*_Xug@0-{A?_6$rUrP#O}&mTfA*AVfW?)@dLi)hhC28V2-F;|S1`dJ3MPps
zh7Gsamb<CYfcpz{pcSB^e=;D)BVWOJ=M=o_d8mF>9f5%6B?w)~n!QxP<K8rALBI(V
z`VWr07b!A@H>KXDo@lotUTT;<5AEFca$<t$U(^p0td}$c;1$;3K?c|(1|q!1QYMZ=
z_G_nfPJM#wLV)~HcXETyYe=o%F?r;O$xPDXOhD5!wAJK&B!xV*zsA39D^jtdG+KBv
z_+kA+pbJ2`|7&I}^fv3*lww5(k7|#-LY*iPZA$l1!ek8vHvxLA-MPsqD;S6%jB+5V
zjZpuO$;JTL{@r9NTdwevz>q&Xh6CMf_?M=?DVa!@-6a6*qYd^hBuP0;&J(SY014*_
z<Ha>i&6??8Bv0H^$&Yjj>S8=hcnk61gi4;7`7N`!ynb94IqY|)hSDK$ha-k{e+CC&
z0+s#U;QwCAZ2}d)+tKF*=_8ID#WAKV5MFUs3lo%gocd?2g$an>c0=~rjyIIakm@F@
zkq?1s#XT*W$AMZv8{6<VJ5Y7=bmJl1k?)a~hhLxxS}aVV9@NJu>?WzQj6aHEc#-yl
z<SueQx14p574RhLExtnv-wRh;K8FcP&$nbvZr}`s3l&M57f&|tbP7JIuKZCXAO(Q>
zceDPzA}M4fojDbX>3b2~I4wMfkJRsu!k*Sm^=Kk+4TWw6wpO=c(`0rpAjgT@qM5Fb
zR2^I{sJ_?Ik4rjtE#+dfZi;W3R1U}53JITvwk5!r+c$g!Z8{$Tv5{l3;!yeK6S1%T
z{w=-p0G(S;wXKpK(&%T;kfQy^@vhuV)rK51ww;MF`<I68(v2{-IncLl^zX^gu;#Jw
zbQK+*<j{@$+B#E2j|!mz$iTKNsWL05L|f@iV5htk<EWmM{71AD`~mPyAOmaXKG=0z
zN-?Z85bn!4d_o6ZjSzJG#TYuzhsDMylDb#B(3te45zZyxF`sX{;J3wFAzVE6o|AuS
zcKh%D0;;t7@x6>*FU^mq!|Wk(c1~MCd3-hbD05HtSXD`*pI4}`DL|c~1Opux4e@LW
zTo>x2153egyI<SUuFlxxYqtC<bQO$OmFuY5x473L8npS`N3x=^+3-r;Mus$NeubJh
zc$x9-qKp$vtNDN^=1zNX(|X{bGXZ;`@jyax-}|T_&e;U&?0-m57U*wNUaC(rs|hXn
z<&@;{S)NX>;{CirkqfL6uBz3*;wUfUIdG&(&{%zrHgYfoAj7E>XO!(hP_3o3KE2KF
zVqQXSPK|BTN_pmbinCAFN#ys9I$j6fh*P<M8BDbI3HutiKVV`qu|$upa-OP?sfkR$
zg_MzM__mpDt$CE&m%kO>*r+F5HW~=+6Ri2{L!a3hbRq|_pLPFRkd179J#xkRU<jyv
zEUC<z4T(+}1Gm2QQI7ctkmdMa96%$30RB#;|9)jhAUKr+d&qkH<&G>sWOO=Lm>(7%
zdtC4m6qI423Sw21cx9Zt7>xm%haGy*pcNTQzu}PUG&e@~c&gfvR5A9FT4UG^o8H5M
zsC_n<g5kne@MJmEX><ZILx7NTOJKec9oD7R)T#hRr7k&G%7WD5V{KOIwi)1h(fF15
zB30`R?^(=;8-xR9ZcWzy^$M$HPjR%3Pkcn$r`$600OZ&7jpptcU(%s&aY<j0{S<l&
z`WLEULNTuySwpYzgN$#?nd6Uv44JjYe&slux$W?O(&wQpUiGA=3K}h2_fXX1D=$J>
z!PDI;6W@BPToVa{S3x?ExVN%C<V(DM4DzfYCrWTLvtZbao~15Cr~d%Lcq*?o>=?Uv
z9^tlx-+QNnV$*Lnc3@NSEb65I$;>0LoUpIpardA9fd5&|62OpCC*=6FHUsb30Y~K1
z^K3`VVseP30msoN;{`%`QDhxTdn=>&^YpM4#eG@n%eSM8&8ka@Bkdh##tE%;5e#9A
zJBCkx&Z1=|%^X2g-mcxBZ=;13egWxyJ7*KtPyo|h;E_ny(~>979vqKYn_eMrI89Vp
zVvUm=-`G#oZ^l^D8PDpT7}D$nTMUX{hw_>$ZY#30d2y1n>=BtH_>BUmy-A20GvIbn
zuUsd;iM>T$1P4!9Na6AUpNxWTV!EYIr@2F!1<-?YShb6yq^>-&lVK%ob;|;kvtaZG
zn>-ZJe3}SrgCrZaGMna;<^&{Zkg<uL4~gy>6X;Q%KJ<W?sSEUI@rS1B9<Er-Adn=R
zS73)q8OXf4Z%z!Neoe9#S5EVih(4I-Hc&E4wrSK`v4XdYz6#=Q-Ll2_NJ32YDOKlf
z3K`g1#UkdKNEahx?m$#EJQW}cNdDr{5rK}~TZdYi{L>jxc2~wQX^n*+``&N9o9n1g
zZR0S}$;65=C!w2!2bvo1qZqPcqB@$_aCw?<OK`|cLa*-lr;K-BkY3MU)c_$29QMCc
zHSlx<(WE`gma*?}ja|7E#xBSnFjFFcY0(>=Qn@T&9$6_QE9~y$4wS#+6DM3B3b!95
zDjQ9~Nk%&cn_oQmH&~v995%`_3cGLhW7JrxjNDQCI}lM&-0IW@8|Jr|AvZ>aLRvX3
zWXz(C7M6+&`00HSt|CRmY=PB<vIG1aT<Ws5Q^P|cN?g{+t1HcJKUyd1(w-rq+3*O}
zxZnzT*qBmVkiiS)>MND3o(!EfHR%C2YO{`2;_`1L_b@x)N>F1JmG!eZ+s4F>D*Xsx
ze*bYCWa7NGRD6xIvpd=Y>#I^LZOYpwc5>{D9O>ujH*>aGpuH)NnB|S%0D|1oT|syA
z>W$s5aEhEo=72f62gKuVVQ%ErqoPxieqIB}j9TU!U*|JB>;y_nlXR_`LFBjP^VZRU
zvg<RMa7EM>W82?m9$O#EU9(+^EuTL4;3hm($K{*W&flX{v!_uW5JDMVd@j0)W{~2e
z2Cq&9=A@GJ<~FU+lReHDqF|j1k5*#ogS}RuI1IdFfgKG*3pT+&;su+5{E%Ih+_f$D
z{Y#aw{vhuEJE`)IM}r|?rPVCh_IK}`0v|<iM6q~{&p};dV(<n^v|NP~yN`Yx-ZoJW
zLf1+gshp7u112UG9VkN;q-i*!U4R<nV>{qc9>l(eeLuRt$z-O#ih9|GJ>%c*BfBdM
z&+D%Y(b_@!UNy2xAI!Fq)@F;tRHSyl{7Ux8K>q+{QRmv8Q-xaM0m{#UCwW<wud=ky
z{c87Q#7dEY;Bk-IZ!lwR1~hT=z*4rSik6lB#NH}J&mvg83Rbqd%%q#pcAnt4gR7dN
zq}QNUM&@V4*4Ja4XHi78{JrPGcJi#WuRtBtv9<Dah34#BY?U~(uR#L+lmpx5gX~Kk
z;iGj#L=60zCeo|ZcH>^L_$}~OXw9`;@;PMO*1Tg_*z!V+H`4fya@hno)ZKHlZ;hx9
z*#<Bl4>vzFG5Qw<X2DVC2;w3qh^0HYX~L5)#uSdtnk7?uMv$5dr6z`a4Yl4ORpkl6
zEqYSn=Uy--m$v~fmGfUXq0z1)2l|CTv}DNTpwW9Fw2!KCGIg59bAN{q?XKaoeegm~
zVASIv$hVh}Gr;%w5$!Tg9J??6j-SZumS7ZxatULKV6#b~TQXjVeY#tIz@&-?-}lL|
zKhtouXTeMsBK2DQvR9Nj9WHIwu}LF|*G*>@OWlI0bKR+M%MwpsgncfKfgZI7xnxYD
z8o^kfgwAH(t!>75wR{77vhH_!>d2O)6M##I6@~AOo!yzA2#)aHbBDQg5I-hK60P-&
z0{Lie8Lrz<QsOi@C!2sySG2|*`_ZR_xA)5<Dj3%v*#@Ee=J!<=rmKgJ={Zmwuugo&
zR5xmAhw<bVkDmpk&rVt4&ZnBcwj}e>qnsutDHB#AOw$g^dGrYWDnrOI;M)Hk%Mj=-
zG#jW4tju}h)tw}nS%g^~f59{=8y5a+*EcTozNAc=%*;#<B-w_}Yr%B+W$c?8xo7|x
zUcr_Uo;9$3nXUqodCm+Sy6KvG)xE;kz1kSaYl?JUw)TpQHRV`#DVd0%#NaiUA>0yN
zWu|S>Q=4RjbB(#S&ijEIVh;+L!vvdysr?=re)H3h?+;?dHwO>`Ni;t_<a(97>27O^
z4keolh`Ba&0y9kxyTZFTCTi7D+$2qv>!<`*16Q@3V5GGiBCDCI#gF^nIAF%2G<jF6
zq^il7hWb`y5-hS-8nq3|Wt~*Qh4eX*77ouahke#n0-+3iHy^y?p+Y|(vS5IpTPVoh
zUsQSu`<}wr`Mk-1_13-?aNk+b1>X5z(Gf5q;@YmH`i6NypA1A(1+?YS48CCd#vkIl
z6?FiEDDt><Oj3FW*PAkYS3MP;_q;G2k`TL8ew~pRe43?`f}gMIb-7g?ZI{S&ZM6`V
z>Qv?44;993T!b&gmS@d-R2v8z3}tZx3s1soh%ROPIIEq1Z*Al}K48ft#WQz;XVi)5
zeisu({FOCjd)%6a5JLRrC^@aziEGsdu~N<Lk9c8{K}i1-;;m6I++xt&aiuFpS$_1`
zy?OprqP^I8!o~f-%FiY2IdN#hk@!AMVr?N^*p~cRrxJ;zM$cz4ef8>WaH86k22^zU
z?Lbcv)sRXlhjba~aTYq#YXICE!C9pbjI;!B>2ui~!KC`C6?qd0Zp#3qf-tCmxv){Z
zh@vQZeJi^JCt>)`5XG|~ABN`A6UTYn69CGNeR82wjNj}am)wZgC~L7DypysFLxO0e
z(KeYIjMUo3wi(Vh!lM6bF-m3Q5v>(*tT37*1q-y!WV7TyeU$E(cwT@a%&irK&VkHs
zE*J`c^SDZRb6^C)6THdGRd6kKlm1R^{FTZqdzi3V2i>M~Y*eU#R{zS#n5wIREZJf%
zhoBloD=S!98zoD7R+GnHeabI{6L^a2RNr|~Q-*z2H}Is9oA<`dOt8iTi9tPk5l<v^
zgpzDgrP^lcCG2qd;Q338cibl#*sj<wK^?$bV5N&=&Ud_K$$SU*&*n!C<zq&dlrP$A
z6j?BfaD+%H&6I~KQJ{o}7uCW*m-uQ&_xOgm3d1}kdF(Bj`XtC%&E74Aw>=e+l08>h
z#R^UKbLf^IwLVikq1TLv*Y8H}vyWOWV)!4dsmqU#BJV>rKiQXkN*M|UMu^sWUOUYU
zj@?QLPBiS+8?1!t^5`;pLLswnfONXNh}@Nk>c|W_c)nF_%|Bnj#26L~zSL8j9ixna
z_vBCy^#{rz)4^EDrsztQeYF8qh&4r%7AZvAMneG<NSTCz;)>&rsMv0b99wXPgrln~
zbwQ;eYRO;5)3|Gi9oAJ?-EbnhW%0I|#mtXhS<(d&iE0IWm~{05gLgQ3ABQ5+u}s|r
zC>ElWPAd}@+MT2zK0Kc)Y(8rRu{X^?2-*(M_5oEf2}<4L@)oHUJ7_ue^>Ny4l$huB
z#DKO-dc^!rBhXHgkb&DhYyAuj9BSFcx%^QP@zk6|iq<2YSiKolviGB-xf&U@)O4wV
zY+GyO-M*ja`?2c>a)AGeJh;wf<>#Nh0OTC-fAFW?|37!e|AO6TbjM9uT9?-w7K0qV
zA#{iCk`$sAbeovP8DJ+`E#TnkMpjq?wL7_x8O8G6V5<cjMN&ky>g^j^BXw!Lq>9Yb
z41?|nxvB;>9hv1vY=E)oI0A%JI1XTCD%MLghpoZUvc6J~2^SNWc;xxWNa8hvSnM@P
z8R^Go!m==E1<(K~Oz1{eW+R6MPQE~NKi_(zU2bADY+%B~;5zX4VX6%Ns8xFtR%Z(K
z1K$Fe4>L6`)5^jKY;?lj2!YV!r6}eE_RT<OXGau3+=O#w_pEsNV;GxFF=BQw4T<HD
zHCA&96PUhaa;K+jdk@?aQI=OSgI7ILEJ_<%OVu88(w!d3q3760(FoL|>c@wF66bwP
zxd|I|%gN&O;;FtyYB_5+Zd)OD+IcE^!oE-|L*iWbChR-#zzGJ^?^qjlh0TSA#1vZw
z!si$+f3|s)_qHeIs>kSDX76<6-T`;6|2k`NBOF$!y48b8;aPt34g6L7X=2%fkxDST
zTnrsyn!sS=U{LTaE4DPV>!Ijf0O+sR6R1kyoBtIKuOj>`bBlp+t!?}>+=YH?^ai9v
zhX+SyOLmNC>3+au&1Tk`RXwIl5RnJi+EWaw7q$SO11}A86m)%Zz3u=E1G?bAs{Vxo
zn|)a8i0sXSFk6hc0auEeeTg}4kT1F1KfX(kLNyMu?-04dhr%#4m!!ntoQX@+ch9^i
zXW|m%*%(h?7NpKzuv2FOpV!+g@zkX%$YYI@#GU=VeKZ@nK$-DP`{+0?e)Bk&P{F38
z{3OSCcF|pn5~1dI@^9DlC&>7tg>o<TcR0mOF*D5}2?Sma=z2bUt$ODAh5$k578e^h
zEG(m-o#P2@{cR~`m34DCHlYWmNx$d{Ej+Xg0kJP|<Yo))q+99FI5osG7a&BAwa>7Z
z#%y3EJ<psF!5>2e)xNkA?^OMGI`ZH}ef_I15gm2_<14~65K9aNQo8~z1d}Hyu*h<a
zQWhE2EeCpfmovqW*|`to^KW0=B5VLSCS9Q4g<%KMB;Tdw4q7i9^P+?7hlPOBYh2jN
z*S&!UOpQr<(Xv11B@SjZet&^@zzv@_>aUy35XT3gA|LSPyV1&-1aV;12VwD5M@&T&
zee4luk%#?E{~Efu&s<<NP0Wy^#Px-Tm90RHjJ;@j&+3Bm>xK{DLfUeHs0$NpYU10E
zhCDy5#!{)qn4tCw4QOE^A>r>_iFA^l3JNAt+&fY(xA+d{?r`atv<5|@h&dlUyJ!nQ
zM?LxY$8X&?kiXjYIW;APfxgm$A7EA!i-uhxxx{p3ye<r33!NrGiu?{pR?({BHDMf8
zCz>cF^Urj!Q+z?6W+DOs4siC5mxC-f0_jo+mcyd(>93;*b9f2B!XWU(D$*{2CENZ>
z{@^OWZvP4S|KB;toNjtA_o>_a^*jaD)_?`&worGoWr8&m1N{5;275;otjpLiiDv1T
zO)bwam?+jLVq0;FZ2IdCLJ`W8Q<VF7Cf;oKw-PWF0NFHMp~@RkGI3ct1V@%Ikyhjg
z*BBuP6S%bZ(&J-&J9cv_47*bv!X~EKv@%bVz8KVxc(8PK>uP8N_kqrDqk>qE>cmTj
zwdT5{#2kfJx$)!=@ep!s@QvTF`^y#}O7|-H(}@qhjE=EoeIVe|ihhU?e6F*USzz}D
ze<}3yb$d9eD)+z-H+N^XTaN*iyQP1U?hg#1#?>VXn4DT+x_HU^u^Bh4L??{F465TJ
ztW<y(M5|BH>C(yFs(?UUEt)rBjqW=h?}i>C<5oo)-|3TP3{QYO3!0@Pe6#uzI-%%6
z0+L`TkXf`{#DvyKW}5(;CCxOzEK)X208f8n!pp4~{T<<rXXx#S3+XdJxbE~xqS!WF
zSW8v}3yEH=_yqk4KEC<w=nGI!?5~B3tR^j~OQMeiV*jBXaCx5;v<VacbzS03h*>^E
z43+{5CmXf;p{1{zKMg>0r*V0;yHlYcI?$hbMJuVaS{*YB^^s?qh(dk32g<{wk^`S~
zN8MJ;qRMjM*=fB^01YqQ5mc`&;p7|NUGlN6In*5OQC+Rt%AYJbJjiMCUov`XZ=p!@
z;u1zXL7xvLdth*CB$5Jn#zY_Mxv5hs7XFwpVDj%f!~Rdc6QC3E&+iGB11Ho?=#q(4
zQXnlc{d~p;8t24M-B}tRRd2#s3=67B-=%UAHhN|&5Yu!Ma_YxivrU-b*C$wBhUMt2
zfGZ+|$iN-hXH_|Pe$CK8z0F}g$m;zLJQN~yu~qd0Km)RvLa#=@ngJX;@*p|k>&{1~
z3gJb!J_myC2009p#m5S<#l<NdeP^_`W$-)jBL>Kz)FmIC?OI3y$g9wVipwf%hft+O
zCo{_n<Z!CS_sL-1p$?^~Bg~8KzG-CrwiKzMv$ID`9MOl?sTwp>WLy9?aU;EBKQX0P
z;2rKuKBidW6w<KMb*zB7!=G0xkk!8rimX0~!~I@^-U(|v$o$UpIT{)kZXTloYT5-_
z+X0#?__iM-ka;RPBLxwIIE>p21x#vgtL(FI`RaSb=b5;l0C!@4g^ryJx1D%T;&jtc
zVrcBK^>gh>@Oj0(4jyX-FL+fnCW6jmV@+AuVK0j;3U57js|>XMiWHyn0f)xpg=rnD
znSwH^jVe}6MXURLJWe=#s*{}Sc82bK<S`s-=ozZ{8o8b&i8wiLDb-)I`@)hSHd!?+
z<|usNph6AaYG^zxuMm&f=ySuq?0UjMmVI)<5p8)+LU@}F!c{L@Mi33QRbiLXg1NaL
z2t8>ifK^%UWZ*dK7JPEua5a{M6M_>Mfv9!Bp0xG&>U~%CW%%lMFi|twY}wRK<1$}M
zlc|~dl@GX$Kgg#JX>BQb@X&*ZqXwfkrC3pf!8-2HBHyo%nf>97MK1H%j_jhrAApz6
zo+brsK7DJ<VYWy;V)(H^7Hju2h#G+%SH!fRJEimxMA?l*`uq%VUA5mn2-&`E)?=un
z{Tx8xPyy)MHXQK~O|8dDFiSjPZaA(pbl<siOk-BOF4o<dqj}2OH?eZ?TY&s-Gx^7b
zm4IpfBNt`?Pe!HV1jDgu)~+qBIJBU2jAL^QU))1*=YP*hb$y@)Rhf)RX0)5=<B5%T
zYi?rUQdA}#uU<7aQ<5BvAFDeZ;T~{|^;Ft{FEY=MVlHh%jzpJP--6zR-C$3HtnUKv
z$lFF%ptO|S{?W8>n1P$&E2qN0Cky+y;8%(9&Lq1lIcPfJ9E~4N00OtffoQXi^YZMK
ziBVIx(hR?Jsj7HNe}LY08Z&>%O%0}!?riJHyt#;=p;2o)^3p5r{j={BQ*vJ9{k3z;
zO?5r-qY~Ic19kW|5zLkLJJBx#l7l-22sO&sA1zRqO9*&^)T~&Q@=yek#VMG5Gh{B0
z9OorlYw~J@mIE>LR>Oe7q~Mb?%l<QEqop4!OE3NO%(FwV%^oMfudm0`9N`2ya?Wow
z1i8u^xVdI)f!tbx?-Qiu34QBDu6`&@HSI3JP3b}0CeEAZkdG!DFg1xrLz9z`HfX55
zs$)YYP3uR5zuI^~eh?B<SI5GgP!D(#Q_96A*#h_Se@pmMhxNUyLj%zA0s{W<6<<P8
zPTuW@te*ij0K-~8ed!RJJLE|o6&TURzS5tPyCdBUio)o^vHCRHhPuFjnG*l~b2kdu
z1BOk2UUN+&sd#FZEq!$KT0_UCsMAY%)ngAulBVC3M>{bT6CkB+0LVZU1Qms$`l7ue
z^=M`$>VQ9iIAiS;k^4tD|0m|*|HM4FTN+@YZU2sWVEa1{sXoa8li_BC_g+D4GzQ~Y
z<L7lf_A;w(7?b3;?8<Lk&tgvJ*0iSLOG0~fC}R$K-9W-2HK6-umdhmfS&0X&u&YuW
z{-C&QQYJ7Is7ZR6ZYd-9Bm4qG{Bj`~A)8W2k~*WkR}*PQsw^3<OBAm?#|wuK#&d|3
zaU?D8d(EX?CVRW5$s(s~InnAD@z`PVciOS*x{Zg{#}ygQIs|O{mbL<iG870#>%}sf
z2{;QBAofGm&BpOv^Az^!EJFuT_po5XnW1DZaXFg4wg3Xv>RawpLk)#wcG0k3Y&!(e
zuUJxU&R?WzkE~bROf6gZpk_cBd&!xqA4G5Zn0#+l>p=FKvSMX!8KR-<edZu_G=`d>
zz`2r!6B@)lgK=C@CI6}>U|Rt1e*(fg2M=pG4f5KsZ|M4h5(t4F!xorcveVU(hBw7S
z>a<+|wP9f+8}n}n%!kL5E3n*h1g3ScR|Af<OwxkFBGI_>FN$bt1QajzNlc`stqIR`
z1>{j+mQ^4VDk*y{OY4L*W7gTJVYGQlAYiQPjSi!A3oeg`C991p`PJXtXthlZ^CFM<
zGMk6`L)IdKU(>7c(0?b`G{%HYd-!i>IbX1rYa|SF)y@16`l*r;oY%C3J8gb8+NBys
zAkJQ<$9789tZp3D3_=D&Djcmn?RM_RC_9&WUtav<j@FnFppZkl0_EjeHvvI`P_xvv
zU>8nlc_)xEp||0wbr)Y#4xjHax3CAS8Wvr$9GWOZYsbgwA#?a=K?8OKaQ+>Vm8)I>
z9-JilzrQ+@9GPN#vn8(<lujGJq{PSXn_w|9LP`mxHDlS&;b}Ww<eql+Cg|52NH}WF
zW9zU)kQz=Q7Z!ma>Ub_3k%JV|W|QzNp#$snbb^1@d8!|4zurp$2(-5_NNR0uC&L|}
z10d=2vq^DLMOs`?msN-zD!R3U4}Te4i_g$qYOSGRg2r(~%@KY$P3v4e{?wF)WS(;9
zs(PfvQEqIU7Ra16PcH_sV_8srP}yDCr&$+am`eM>dNADI_FRT{%%pgO2BA+smqv7R
zQj{y|h$X7scHCsvNV(_xK)g5f_4<yrq_iLBw&mhi0J&CiR591aZdKm&D7$+13jWBL
zFIxA(H$KFZ`hHT9+H@PpS>@K{HN5ZQFXs8>fAm-nkp4Rq|0gB=9Nx>Ahs2}KWlLW(
zbqGfsZfZ|FXmLg?>`t6*P^L_T0?%<_oQM;{n&eE4$XZi}sYVmUZgqjo#89TVKRcAe
z&+p%hJ@TycUOEWnQYWuYw>4P)7F&VUn5F>!?HWHwJRKAgK4mf`oUE$e^GjE<l}YJa
z7r<$HfBF&)3xi(TfW4Z|2G!oXhd$r%a`#c+641)9gt?8EXnG7vtP%J4$RmWL^@_}x
z-Hk_WG`S}h5eZ|GdfuS#+VfPh3;-Fa38|WFMH%}Jk4(s*@rg4b+0*2WM}D2^LsWJ9
zVsHUwl~D7!+*MULZuthOL_uq6$i7<39Od#Lz|Rz^vt%@sylda_14_F-DG|Z#jnkG3
zNZuECx~x?~YuJq@iGm{5HZ|Z6u-yRVzXvvs0;~ONR}QUc0OI_rjI?f@kumY1E>LL&
zx^L?bM&3ubQ|~qrYFKfYRHSyD)JJ_NX)qQ85XH|#WMwaJ-#Egb8V}`YLVbaJtTjK0
zF<|9V4l!W6B8F1>xh15oq}n_c0=J7Py7BJ2hmSrtkHE(*$##9r1CLjGNmtO~Kwo@R
zsVzVEeoU_3$XK%XVLlf`Pzd-bQj*B=7beDMM<gek-E*o6HbmXd=WD|R1$utRqFFe|
zXyoC;&-QL~@*>;_)j}tnvmG^O3!&N(UgT5?2vR8RX5eGR#_uOH$0ftF10zz0S(Hw8
zvk?Y-wjCV{G4%gpLyV|GiFSE(U1-;b-KHAO+grV(bpqJ&PS-})PP`Ik2kH7Ol;j4+
zo|!xPcw)+Dh{|=g;RHt8rBO-Rs6j%%Ojg;xqJs(g{z3Q@p!;_S{|^R0VbJHF6lxkG
z>b~gp<JDm9nx+`^KsZNejcUl;UNTb>>n`ifOXJY7O~W$tE4w*Xs3lLm9U^t7O7-Ss
zII%!u91vp1fSF=Nv;<@<Go!Ux?FnM?HI*z_K7G6T3$KeBM&Tg{Z~p7MGm%;1TRa)_
zW_}8S9UC}NRkZ8JP(#%Daq2~cZi}D>1FCT(gUgRi3vB`hkZ8_Ia-pMoL}^q73kgcP
zA49gwU<9(5`E$1C&hq?6CsBnSlkBwf2Z!X+nVXJ{E4VsBs;GKR8rkUzvEXKfgUKTj
zXd5R-nyhM^-D7>gs-PbI)lAx*)5xHpX~`>AVfq=Kehn{VIm&O9768yfv2FPa6bJt-
zpGsZMDcABM$mx=3-!<)TFXnHb-LPwWvvAU!h8gFI>-}Q-Z@6bAhNxfvVYbx(#eW^^
z2sK~`2_D%5FpZ@uELX>}*ltEfYch~}H4~a19q?hXH~NK1-q6P^fp*wznw?o2FeJL5
z$~rhW&_%80TByJdsw9Zd(W9MmmGCJ36NsFKmDA2V%}GT|BWe+~S)QD`T-?iY0i3U>
z*Xzx@d6Ziq$2@-VtI39w!sUf6A+ws;#8x1Y+V?>&R(ML?f+NB`=|1S7uZ{x0F2ukK
z&HIuJ^t=2VkpdS!E5YwBi^aR?Au904HN3ojsQsKHCm{Bhsv~)!`*3<#dfZ_!LV~ym
zWWAaR>ocVf`RGz>0r1s3qFf6wUHk0X5K^(A5j6}+Z8AHPcM4|ZiW6G!J0M`Wz2%Yc
z(Z-LcA+i@8SqagVsvbr$8PaLL${W=}ToJwzrkqWE_q64=>5(J&qh;T}@5T5(+OQkw
zx!|r|d2teI_?Ru6sD<W@t5n$&29<4O<rj^by|zkQR-Cb!=MJq8Z3S$3nt>+nCex3Y
zqdC5Jfg$O11n6<OMo#Hi$`D~I9nD!^Nj0-xgh`r{xEfkz&=dH=^+PL1-D|w&Xq^^*
zQca)Bur?VR9CuW`1RYi~kkay+?nT@Ams=}4%%-0kY!nAEm=LRS8!4cd6T;Ui90Uj9
z(x{_Fh;-5vMjmuUBk0JvdDy&@P#Y8BFi`E}MQL#qefK^vUw+4qgr4S+6=sUOr1VeQ
zqJ1G<rp*u>Xhp1g_FYW#q5a&ezg)Iho7_o+Ie<r{R>{|R`2nljuc*!fjAWq!1}r-d
z*SleHt*&@)fqMeGtI3)$ANG$nBA|+ZzwHe7KR5$fi69yvd&ErUMbNXwM@}k(p6iQN
ziEN#8ybdt@TLYb4ndpRFpj5T`mfjh*g}OMHWA!8dasCv`%SB-T#jf%`VH?u=Y}qij
z!Na}To>#l2hI%v@Gc!lZ^G9|J^3d%|F=XY%MU@R&gDqWDQP0{-tSTj?_Ni&0Ey>!D
z9wh9jl++-PJqkkl+L8Qhn7iV@oF<GvMoXK28;wO{;JOhW=)?NnTY}xvUP2W#7+#TJ
zL{gA*P%Eu5)QzVl(9BH3yO`5<j3E5yZk9oRgj-6veTwy^H9&6{6Nmm+ucVI^0AOKw
zHhxWc-r<YHq*-;zxJh8{H9zZ;qlgr&)5<Jpmxr!I^Fd-tC-(K7NHEdkMc03Y;q6C1
z`~e=kf{CJCo2WU~(b5$yxH{Pm2prO5BwC$ecrnp%Q0)G&7N;p5=mm*o<_XT?oRm@U
zgsNLI-7jWkLS4PeuaqZ-%2`xemOosD$e=g!kgnwgr?lGAR&xImJ*Xj|<?l@8-w&HI
z{WTlWJ#;gEu+`6O<%jpx_C7u3Oj2q+Xx@|i)FYD2H_h{ACqlGg>{27cYXc`cV|e?9
zV78m}(%z|~l}qQh)#+QRp4B`N<KfF)67yxX8_*@Bu`*vjl8`#y3#d69T^%J^65Mol
z$z&#_c;_()2z;9nVw4IDlN;+;0WOeZm>(jV<KV_Tp%!y`1V67UC!irl>@M7UT>U=A
zY5Y>Z_h5Z5S(ar+XTwO@7acBo)dHKd$=mcbO#dgrI||lVt!ZnngurYYDbk^S#1u4>
zZTos)JZUv6W$3oVeR`PZ42YxLRuX(7tlPceci~Ec#t7gALeip6@ixRaNhTQru$L1!
z-RgIDSo*=<g5Yey^#xk1!&4JaXI^y&XsYVs_hHB%O8~rg0?-H|kT1C;>y%dMk6UQ?
zEht5n7((0vdaAH}UPyYHFFYCnb4S;$NXtd9Y~=QC<}js47yO1|x%328bgO*x-8R4G
z8wlZCAI}b|GzWy6TNSM{X?ovvxa-SwqVGA9A%pGnJ?MR|8T0+1mpz<SPaq`!EDRvl
zfRKNQ!%o1(hlh9_{_#m|c^T|^k8btuA|WP#Ltm&nJ^(;UJ&)|jmF3k4Wq|+kz1>DY
zCMvhhK=peSsg@Y_gQ5%&tY2qPWw+uQs1%ql9@t0!l*)`g1~%rw8eKf{Iy|ow-1k&0
z*X8DJN1Xg(T?JKdp+-AexdaAxgSUsvS_@jvA-UO%EHBkjR!%1hJ)D=&w32rp#MA|C
z-Cu6y4`ZceFIe{{g(JDXSw&=s9+QDXQ4X6Xb*@k(yi5wNhC0wj<!vdUj1xxXy5E<Y
zyUp0h>>H7fSfBzH=BD$bq{LD3*2?*fw*^G0GM$YKmU{6V^(p&|Z7a)SC`OQ|KFUo4
zoXSGpV@t%Y?TLTLp?bxe=Axzm6(mUn)Qzp^IKK97-wo2k&Ta=d`>+mrsAE7KhfCQy
zeUbPEk^}q5kpO==QdlRzI;<gDB!g(OYo_yj9Emimo2isHA=Bt}h(ZK!!3dc-|A!MW
zFhKji#L55TbtP9*5m72;iEy3S)zm-dE1O;E5m>Uo1)&Ixp5dR;qZK%;Jpq8?MziI1
z@_MCufvGzJ!3C1a|7_jA>Hp$_i`4a9ZFR}}DtsZ|lk4Y)L3nSZROFW=JclzGJ7>__
zrg{j&wIj3gr$E1;MDm)+5gNDXcj&F>5|K51iAe_32?xta)12wC(=8&6W_F_)7KL8l
zw!W|S0yVc$z83m<84(Zf(OKPHKLlr-jiKkiik4e_1I6g{HKU<xzSyiG2d*7lU@IDQ
zsdh%ozj+>ngToMhFZnK=DIhj9W1BSHV3`Z4-WS-#m?sjbm4aW=KWYm!*J+qmWsHZ3
z$spaX!d`e;D6yq|jec8#=sxbuiRb8tUJBMNX3mu*iDGLJttseE+{|-!i`9@MKjXP)
z&{Y9;paZ(?^@m3gEx_N#wEe&9kMe!~6xC@34V107&&2!mm|km#bV`kpYV={BT6x_%
zprpIkJaazu74VVGP9SNaP=bxV0d}#U>eCXmhOXZt(M1OXSU*59ju|m8UoJ64aG;a`
z+AC@}Q6kG-;j4jq4hliJ>kQ^O;y+z!=DM4!9&lbHtv^hCf;-$QiVVB$z+LUppJ3QM
zOL7PVJjdf9Nt(*y0CF!4)(qljSc*W#y4zcG(6@>JJE9LL@?2(*IsIraE{MRB2wM38
zOyBLZPt;)+OC6@1>=r-o?#_|(D&4}~U;CmSO5xBL-w1OuV+DxODNrrntygKQY9wzO
zCa{X}_ARL(C7Y|3iCOu3g#}3*jWGVu0_*{>|EJ|OUv*To&ynZN_-t0(toZ0}r(7be
zMnXGn1A$_{OEyExeI09Or&eH><5@n+Fr3z)UCf*`$f9!HeC?{2Tr%CyVO5CGJjIrZ
zDfyhYjjAOyy(!GG6!Ntx-tjDAWs76@5Csu!AI6n$*FUE)(K8*2pa|;IR>68%dAafI
zt!7FJTcB0cEjt&2uXV+BE5Vu@vBf6($-57}hoA?&jGk_BO2Ak|ito0(_JbLvLm7<0
zTb)IkALUprrL8Vei{|TCEnQ+#ecCXWZW4Di<PE>&3`%i&j;|@xB)&|K;o29Djgg*-
z;gl*pH)*!3u(VcTKl$a>QS5n)OYt4##;QP#kqaI5sGf({3us?>I+Zw-StO6kFlCUP
z3rF6wiXrJ3MMIm*J~2k$oaKs=sz~y?!rX>Q*WSC;BDI(NM{9X;)jBA2!K@>^^5|e5
z0VJj~D0XreAe}$(1I_>_e+Pf%>W0*+T-o-~XT@VSBSz$$&H`&1ALA4~vNkg<PwWpi
zl--2vw#4>SX8`ii*PrvJSe|@QHO4Yg#C6Qdx|3$|V8~29%?Y^Ed97G;SQzqWDz)zX
z`Ly2Gy<>LaYB&vzSZa0g#nH|QVcVa>-udj5gnS_dZ1lY!pS`l-JOObmrF6)E9Lm8X
zbr~?XWy!Zj%e6N`j?t6)^3~ZF;VEgPc4o(!upDzb-j~W67Vz9KXP^XB!Ua|8voHXC
z6EgL3v&=b0bB+i?^&^(_p13jO6sFevVwOQcQ{kr7`C)g-9EJTV8*td^0>vy6z~Q6e
z2O>9$)6nh8k&7I+&R?%p09v5UzXRy^UIL26f4*^gCI3|Q{YE{`<yoMy+hp_(Vvf{3
z>x$2a$!EgPcexj<ukAR+eBfR@(8p>fyJZ1s$ZEmv-P~muI$}Jw=>a?Hvd<VPdUsFL
z%@zU*yDH(qWK_}*5k8~x5^ohYkIYAbaT4s39`se!E#(uMSvMFn5m#0jM(A7IW!`S|
zzL=Z&s-d;_CfQU?c+RxT_Dpu!Zpe#8_CSMB6^xWw*|_AD1`-z^H6p!u=ff|>1k@PP
z84dhs&DPw(A_ESqk9Uth+om~y=ifi-@2kZBcK;As7isoIY`eoafK-H%f&=Rlm}>Ia
zM7)^AcDgB5QkS1jtlw~EHuBD}WSWjFAbvdOCu{h^5W@r|p>94mb8dxM9GmJ$|NBx5
z-|4p$62Gv9Naf}3RkWP(q}DC&V?zY4IP-w9@Q3BAv#;Ryx*|+fQ-rPYvV`891I3Q=
zp|oyBGX?T&IU%{UGlEHcR%NO;tcPXnEW|t`E=;3~!ZI2pOW}j8c$M}nOlCsXeQNh1
zi4?SM(?_FtMj_s)Ay36pnXVHLgJDA=l!@>KYKw$o+Cw3a^vY9;mI1(63Vp|tj_SB1
z$b&mtxa`J;oq0l&YoNwANFDCd-Y^w+W1a)Z8BCC^5qDcTyzM`R0k(@wC2e_v{_!da
z8vlj8vv8<u+s^&oxO;Gi;4Z=4HMkSp-7UBTch}(V?(RW@Lm;@j6Xd1s;oRHX=Dzl|
zeZ9Rs|G-{jeq+or=URKt-?u)>=>}~*Zq)V07T)qjQG1c#1E$@xCw9ye8u_wNk>t~a
z53J^Kbg0vAxAd*@M5q?pilz*l)v*U_aPBdoh=kI^>!bt?|7%<Me{l;BdEe3!)$uH4
z)){0RPKn6jao?Z>B{%e#<zoThOVLoz+b)71M0*TVfcZMf4=t#l4!WCXjE8n_o1{FX
zKIoy@d|9daWaocZ(D7Amq1k#dWA&u+)E;DaS8?Ng;f^M(-FQ+t*_w7&HBYaCGJ^(?
zfCyJl{)>ObFx_|I@&r0UAMZCE41sR9v3Z}o#(o||^GuTLObTK7j=sLTb9C>CN}{CE
znk0miju!Zsx7wwgyhSCRSB?qKsI)PnHlJawz+Rj0*Op&Wj1+cyHB<^PW_70lEl`UF
zX?M@X@AJJiOh5e&dlbpZ8xa|DDn`)TmT9HEm6y7c+rOl4^2uH9)?2+TBrh+<z6hzX
zTW5!_FpB(=90@C=9KU!uKzDwwQ)LW+6$GkWw>}MPk@ggJ*V@Pip=Q3P+f6dso=iQ9
z=i-Ej`7621G>W=q#nds;8HA)551IuLhqLW~a%dE^FF}_s?vj^(Vepbv-*E}y{_w+I
zzU-IW33>r)r()Ucg-&q89cFs+r$<bhTmGrn9R2|#{bw-J{}LF+A2gHye>9WtAPYc-
zU#|{Xu~Fgz>r;dy-Qw+pG#;nxEa!XuH_MZBxNOQg${;DnkRe~KlI3{5dq)&wiHUHV
zEG?1ckDO-Zq<0VMzFpkak3p~M!5M-VmQkO(Oz8bqIEReVO3@YB$vkxs1Jd<C|3)=U
zorbI>fhouFMID=8`4|_;Afe{O66wG%Kj0~41F@6!eF?b-&bNjkS`COZFAQ<p#drDk
z-xFxC@J``N4QEO0nEcG|Rvjv*Wqa{^zbrSSiApKSc+tj8C!W6?;l{fd!b>DDauYpo
zPOjlpHQF6t%hd>qY#WZ?@Sz&Mmx*ZOhXD<5F&4q<AR$L&wiGUPEX&nZLC)q@zW8*=
zqlpNdwOASNFdr$o>7zsQ!O!wv^4&mAd)-B70ha!Xc>12ga*c6umb8`i_Ma6-=*`WO
zavL31v81>mDDzWEyk!?izr38TW2RD(=GIdYdPGsLiKO&+@u2ip$VqT)LG1RJ6kd2k
zds?E33z4SCVAm&cUKL%b2*Qr%2|bcWGo`mIY~tnbjfMper3bx5p|tA7eG<wzN`@9}
zHm!Uh!00~4rB6z$uJEBgHd$=!J6<0}=KbDqkb32A_fi;U>I<>N6$NI6Y}BvXYr-bW
zP0;E1Zklgn6t0n=E<EO#c>njNrvmu;?;Ga(Bmu;y*a1qcOj5U@>P|Lh)x~<grvnJI
z$9BRmHY$%<8jpm^S3+Efal77QM~qj(nkx@nW?wMS{g2At=jm5CSe49I?rSne*-+);
zxKn7^OT0(p-{UiO>(4Bz;z`x4hdC{zw!pNX|5(rp5?AbpFos{Z>&gpR@qzzb?ZVSr
zRfXT5E%OWK$HBMVb%WUy^_<oF>vC*tRku7Xhd0SIhF^(cqE)B=l*WaB*Z5LUvjhyz
z_EbHW)Vhx1hnhTPSln5HHJi<dA)E2~(Cj}fbi~D%@sMr}><E35?TqmLc1+|W>rlg9
z2&T&wA17J%=4wcA)@8Y^l2>juDx>cVhw%e@jAST%*c*MNYQ>b0@+@JTjBS2tJI(7+
z3~wDpL=>-%Y-U$0;H-Kvw)^Ncx0NGo%B`P<aCQ90bFQWc`t{mA+J>u&E59ubiqalV
zG=JBVgcF(Th6kM2B!ZX$`F=gfKkYv5!<t)!p8JnVQLJP=a~70S4m=T;B?26PL6$Y|
z*1n3P_@_~e3(B>83{2I6!(t#Z{31C>at1o-L=XnEyY{xF4N~mvh3%5o(mQh7u$Guj
zSsm}qgwSAd#UKbVgUN)NE4=&0`+RSK8Bl^q5QF3bcV2ClgU1q!IP1b}C$h{vtjXIP
zgG`6<i)O_TqL=6%d1xF1m3WdEEG4t>k2r-sUs4AXiG}H(*5TI9<^$Iran+*R!>n%!
zL+lIc7`{?PrX@IXDle#9T>I|3$F$OyWONO?KN<hndJ{7tyqjbJ0#-Y7_V_(@P)`K#
zqe7%)CT0aYef(thtDNv`B_}Y5lston(x&17N>b+w*<SfY8WFyj<u0p4k%s!nmmjZN
zYDysZe^g6092|>QHO$STAWknyn9Y6NuEOuigqTTl`MFhviZeJt+Uv?#cAMoK=<xlZ
z`&owx43GqYx!X<TPoc@*G^$KCcyi`6vBlsLu%Q<1+9b=sTO8j*mSCkJEhcMM5=q8f
zr0rD7(fI}R`|Ic3sJS&iWx}yu8MIPbV`B$mt-tjQ1*c$1TU?(8`(E3DLRvJ5lQS+H
zR8nnZGoxM+PKozOf4?rrrEesd0AxX`gd5!}gmSmm2W`*ea!bZBip=4Fx^O|KVSlYI
zASs~k*NP;i;LAd#E-&Eq7w9iCiB=-YMlu;53ri*M5^pA?1mX-!jv9b<-ul&92iIZL
z2A;V>Zrm<7MX+?U(q11Y+8j@^$+P9QNj5oq?2KSWPsGvCTDk_+lZyQ~@QTv;aT7=1
zvF8~55+Hoh7A6*e8@>l+VsYG|d8Ezm+tsQU0S<2_eVGHFc{s2i+Qll@Ow%?45s;nn
zV!GJVRQ3A+qyasDBLlz(ar+)1*8dqrH`kMnFo-|;K<_Lu5v^dM!XIvP#-|!IGWPpQ
z>W<0QQ>W@zlbL?M>~8XU=x}3ah_3;^52yIo6<W3w!8)8ADjF|UxGS^;!HZ0KL9#q&
zvBBb_!KbF^4a^GH)UI4ArdzwlJgACZ`*a%qAk8&AIPsu37sC*`yOt1NivM+3$@AU9
z{8=cNS&uoZ-*hd3fNSo?#1!m0^t+-gJ5Wu|MICk&o+AisIB8I}`qQ@6<MBD*@~P?7
zG&Nk<OcAH4GiFV1$~^DfXoHSJxLz_#4K8#`vp8QRO9ms1)gvWet$QpAeKzzPjwqJp
z;O|w|F{*H4_JtV~O-^8X++>QLWQI+I>PiQRbUq-3RsJ#YJdH|gFl5!%Lhw;|{LU_d
z7a+_z?m~8OuZn=u1807n;7qCQuY|_4(0p>y%kbV^D&*iWJ_C-cvIj=vxSnQMMGdkW
zQ1TWNt8KWnQn<x&*qy$O*`QJlr5-_9{(4f;mrcz@;jRrX(4QJv*WPiaUAX@I)7s*(
zE9I#$XR5K20o$+Y7LN~t$Iq~;%-Ms&Sd_*{GB|=ori~36zQd#P0K+iD{<AP)9wR2L
zDx$fri|R)gZLo7=8oXc=*(aH1mf}zhNiBh!75P-k{D=3N;p6NYLmr!&*0nM-YrEJT
z3umO{^vU~Su{MnO>`$Y|H&56Ji9}%feH?LbPJ4s^Si>NG=qY*UeD#S-*wrFJ?jh7i
zF^^U##qOJuRm@+!u2}iPK^!h^89_F6<Sp4xBohnmO~8~fCl+elQbVJt7)G&{rZzQT
z@CSiV+=!H^B?!UjXT?q7+<IgYb?i!Tp)aQE*&ks%(M&<}ZAPi0s#T+q&DXxG2q;l|
zAX7;uK0$qYE@JA->qV+ASn1;&esj2c&{Sq&WbQaANN{R%eac)vOhog>;ybJiD>??(
z66LYaOX>hXnUBd$pkv%v|AI6L1_ZTAfCfK+nKtM%h5_C?uyi?iH)2M;rVQoZnlczI
z2*h7a@W8XAD<mo#l{F@rIiw+en$Kz(2ZV3%selmXys?D^84O98&!sg3y%J^$37F?h
z<VfsOt&r1HHDU-|j8~FM#qv88YNQ2PI1-qdrx`YDYUy{w<yzch>Z>zk@cMc0d(W@M
z*@!<yfeR7Wc1AH7Ol=Uo-HzS4o=qzZo#@IZ?YXgJMeF!xd$s14(3@0rh)Ka;br1-R
zFz$WZ<V)BGpvGT123jA9=(AAQ;0MisYo>BuQR}pxt3c{%A4qEUlnY!P`j^zmRz?n<
zi*0u=U}Wv*ZheSVBVDhH_&)n-dK0u2Bg4^d%yrL11~IDIfI(e@$6l36$(gi#r|$E;
ziflGrkgMRHCvNDs5U<4(7UIUWQc+vcBGwhSMAgaM*`aLGO)#5`3Yc0u_rr-pT^C|9
zsD})`Ez0VSF@#`u_G9!t!@8h!fgP|>D6oRTd(TmfoRe$xvakF<w5#;sDyEN<1<z=I
zQhYx4JU_>9%1~yimGcNd3nrFDmlf&aPkQ-%xRjV%T(LwAA8An0^oYEDti`{LZI&X-
zOH<_JJww=58-=>+!i%X+J8LGy&C8|{8ZtIH7J@+?mCX3oOGltTX<CK~dxJGfEk)BX
z+@y!#zQRSAl~K0|rHeOc_(qR(ma?H``{ofN6!vwUj{FCgTjXHDf5l<q=Y0l+8rJa8
z;6d@th<kOft+ST^fHmP@VDN$KDMDTu*sP`zrbF+AkRF+MQ>ehAT2U$<H1G{H^G9Ua
z+2`)m%XA!%!m?|gR2kADZw!f!%VxX+xnP(b_z%a<sRqTU=VQGGhTXeM{8aH{M&D`B
zv-*QhlPpjys*OSi8iW}>RYE$3Xmppt&25iBKpAIw+~S|<v|PBPKpNn08P4(TNgGJN
z$dpO#N5O_#xMzT0iIKB6x{MO0^SR=@lkpDLF{Wi!qCf2+RykD;;u?`fPKn3D9lYY)
zwlmti!fy^*og2%DmD%ROIv?^Jn--YVpBX)KEy8l)ENPwO8x6vM`U!}FH(#JPXoDMI
zy4NsC>D`psjt)SIoN&x}ZJB`o9`}U*27oHy<8Qb{QJyPI^8%Af_a>yckQQjMAw`r(
zaNeZN5~TQsJMmM`F=S&h4tT0SsEQ3Cy?);ZrFTjv%&f*T>jks4()%$Vs3_l1U(%TM
zy&$WL+G2EiPIrN<`G<QXsG$hAzTq&fTdcIjND3fkaoGB;L;<V6QN;f2$$?6Og#7uB
zUe0fJ;YJA`YCkcyo3K&~Rb8|h<)0z_yjz-efIGSU#YTXd$=V$Q;w7=Y05=XP8+LLt
zMs-K+3cBPyhzhs})oyEc-tL}#k}FroV)}u+FB~P$Di%B<W0z}<x^3>vwe%&yjw*#v
z-`4K>csw40^C(PRZqNvai;)=}^U0T4e(X)t5bH8W#NW$d7?ALfv+3Uu>S=+K<+Bp@
z%hR?ds*tGF@EBW)HD?>jG`8rIogKUws-Ej62yq0zl1R~)Kx95fsD5u+k<vujIb={8
zbrjFaFD2$Rd#x}N1@n#E^0QaCqD1@Bfj<wtKwb^7g-?SPF4j)n-qXlO_1BX|gcE?j
zMhKJujQ?eXF>l|UcCWdgk%&3dd2*|h1c2M3=w!~W`;$pCc315GM4aVbhDlIez3<ji
z!KLY@=So<~vuofeHmyN2T)8w<sh=GtTpIeSTbp&Go37I=#heV<76eLac$&YjPon7n
zsBoShbZ#OnO=DI(X4fZh|MVGoD?QC6Qzp<oN@C=ZeB9}BcE3XeyORbK@@hZbk_`rp
zdmxmWPlu2G7<pS20d?Ux?S8wv(j_;jGdEn>NnsL9dlZ0RB1{}iMCc{*Iy8U|K<h7u
z_GfhhkE5*(IbqDexNiEm>LE|6V!e(D+}b}n02htT!W43Suif&-I+=9SO4*M?QA|cw
z?NRhLTWTTjBhIW(!G7cF$ElUy3KG}}MEWZaf*Tn#%j7KE^%#0^Xx$NUX(nG@L6}j8
z<RT11K1>Qz^xoTug&fHa5ZEXlsmnf9Se4(f91$SlU4P_zgX@TWYu+@)nA#?9o;bh>
zMY@y;sX%ks5Cu7Cs4e1jj;=G`xMmZq4s(#8^rZb|hn6)XKvvhzK=Y)N5JpLpxIYvE
zy2QOsHAu(8-O9kD@sz^I^{9WiB=wBHn)CossD-?XE_a{FqA#;qdkYLP7uA?_?mIbO
z6QgHMtJ1Kk!k{t~4n<Uuy>qu>sowrDc5MpxhCnNf$BO+pIa?jm`QGW6iUD57VcF$w
zE^nY#n$%m?w9h1viHi-dCi37cz~H}oag?CGYyrp8I5AGC#A4oa)N7Y-HQI|iSlp6z
z+yMk2TiMQ5aN-<~jWY9poYuJBfJMJ#n697|GA3xaU55C0!&Z+xLaY$1e?slj@Q?sJ
z#ZX0gv?-N%YobK&elcAJvdn)VFe)8rfx?hAaLd@nN?)|L&v$&|I>qt0RJFUj7(s>A
zssyHI7w+XB9ScdlmGB-|uM)w9_ta=O6B7M098f!@`YxM6W9W5i0QZ6T|Lc<CN#TJC
zyhgRLV+##k=&H?mC#c-YyWga&iPTYT6rvhDIf2GF+S*=5e9yN_h~WFW+OPutX+!j9
zE&LzXxp_~BWJy0dJ|^>{>Tkd}FlgJgvH}s0$oy;pVf2mPlm-F>f0E7r!Ts=`oDctu
zb<OgRD0A+AG8LpXF*D>P{uB86pHr{@DHI?;<yXJ;AH<@+_Ax@h&R<r=?@Kxk%w1=T
z9RuC=m>>mz{HBtjRzx2{{&U#f8e8PNlq^O32;d@kE@JyjgH$_eEHG8xdA~H~()T*B
zh|ASmtTMrSzc`gftbOD|=2vRE09y_}ExFc3np131rF}u;)XOg&oO9tt+2#ulh(A;b
z={AYxc;6|^(kg6SZ(It+U-<iXKU2Pu(-korC_OA3<D$kgo8ar8x2EH$n1=%iN>@(|
zJl5Y3CiMB-SX6x;zr24>dwCsqE)%!ytQnwPkCgL%K+dk5EA?1|qkQ)Iq`~&LA%ji<
zHU4&nEI-JaUZln8oH%lPiDimtcgja`7q5^sgDArW{nOR+o~Vsmwx){6{=+T5Br~;p
zP=@G;Lm<*xrRvCLR~YQskf!*-{?&{?4uGU10>ZtG@>^R|z1XxR=<IsI`x)uhHVN9d
zhNx1H8JClj3hDJBUU`=Z2W5UGI$H3b)Ci70OaEAujF?rm_v~1=M!cT5TvNncHG+5_
z?OZF?z!wtC>{x-5Oh2p=nb{GhHBcrQzO!$8m3W6)KL2SrNSm;axtz66GIu0|?z0Hy
zQK^LsbWUOCYh^6}iT=K2mdJ$XIMUtpe6AV7p0>q7WuqfgcU+~WdXVOO^valM%Uc(z
zsIF(*c{if`E!iJ_KNio01X}CI4<dl{d9&sU%>d}Qa?)#2q5&QM-qiv-x1CRDkDxaY
z(~{37!Ow_J@g8wQpBLK=(YfY-;K_GStd!SrK;b3ko%!x?Z{^8)1EDtXX^4TC>J&Z8
zGA*g%E5K!;2s(n>Q7?XLJwwjSh;S5`$5LBu(voLR7OMh+b7eSlk$<ThN8fv#>7!*6
zlMs@4=ZEEnX5Vs~IeJrISu4phy|c$&gyjKvK+>}o?~HW|c`etW-_8R4S<nBoo#Wrw
zhR!)FL%qB`n-Vs%_;V)_2f$3Nlu7a{`i21)G6Jx0&Bdo8sGnzFr^ac3=QLXjyn~v-
zPBfXUg=#Mxh?(b#zkDcqi1A5!dVZNW)^T7)=n9co!S9|-#XAIX*Av#XhONZK@d3NW
z6-|{gb^AAg0P28W-rJ}+NL<4ve34sal7eiPaQff{Ioe#Q|EzM^Q{<;H2I=Z_)m_ol
zT&Cv3n7coqn@UQmYEBlc<#GOqJh)5vngCir{XfotfAuTG|Hp6R0Efv*?R}z7qhOa^
zZPZp#w+rP7JzKhT`+z>eODjrr0Jeo4;_O4UMG#oMe{LBH73Ql#-GKC8k09%0k48Mj
z;T^ajPOV^%X0U$K*)`F$oz=9x??M>jhCog0&r`l;VqW@0%cdDY;D-IJHuVKh;9QqM
zeV`k?Y0?F9;;|FYZWvGEK;cI8VPz5!ADec|J?6L^MJe-(=$)P-RnO5zuv&b@(`>7W
zRB=(i6rv9U7S*Ynfy!|gvFa*zf3ltG{<Ymv*&tK6I#u$!R9=)UB>1#u(s2*(%Xt*(
zK|_7faap&wGMi#g7wcu_)`~-91MN+TZ0ai94f8#3YhurNX?Hu*;dF&lm@#t7S6PVW
zKbUadNTesYn<-sI8i*gK>}NBAxq}lzk1pulkem^4N+AnCA*eO&px|t(2Y-&^<*n5A
zei_<Q3y#RqZi-Dl@IEyiF%4y{QsB?8j3;JVCVMP?-YRq!<O4^~#jU!v4CwKG_ULrw
z_o8J9%amWm3+iD~B?SsZW!R@T1RfK4k5S@lMxM6;LA?qyGufAUIlhZO`1`jEp!@AA
zqG}XKs8(ask<G5~MbIL0g<>N&pxdQx&y<dGA+W=Dh=qa}@03?H4O2mH!|^4Vj?%0K
zA#0eluP?pLt9w_7C#Hr@D1N3mT%CRZvcg!hU59V0$!rcpjFTD_!GK3c6Z5F}B$Fh+
zLtHmO*OsfcJnK)p3w?RR%hUE+?|-1<|3Jt8&7<SNPC?Xv-P8WzSmaUuYMb8Z8!UME
zIh@6eHqR^%a{I<L@EY60j&{SH8?eufaZm&9*?C1fEO>?)cNYu{v!*<F;;>|DR%{@6
zl);3!{R_|-8WGweUkTg!r=mVq#%vkGhujyM+Xd!#R8glmLCghHdrv-s^B7<}rU=s|
zBR@o@S6RRmCQOi%z!JkrMvI;l>&O&?z)=Qo3EIdjJWY_ub{AJ}+h0Qx_9sOX)2Ekw
zyIcF1Agi54mI`W9+*7xf#jfSb==Qy%PLz;5aPxU!{8U0*Yqbs<nP5fbAZNJR9gvl*
zKUbZy&&HXDY6o81C0p(7=iaY{RL|f`7t5^0@FNhra8!hhf6^L&FCfLRb~6=_fyRc+
z-5;Ig!k5Gfd6}&n*b$Kze77Z)q}gjL5rNlxz|+RzSSpfm70fi~tnig15#LstimGJF
z5PRYU;xzF#is+8wSQvqIyEAA;!bhm?gU9z`<+LoLTAB+5E+8o~UCWNsU{?2cV##>j
ztnY2xrcKyg6>CMtprb4<(1!-xEV)c5@4Eo@4D3p}UQ0%EVJi}nvJ54$u-Za95MSZI
z)k<K<ATMAyGuq!B_Uwj!cs`U@!qb6-rVEQ=f-qBSswvtrIKb_xd`m&akez^xq3^cF
z%o|O1N44r902<GBMk3|75GJRnS|WtdYcslmeJ}t$uW6=bETw<2((Le<=#!dwA0OxD
z900VioL?5=xhr?$geU&wF*EifVfx2>F$lWgvL);=JMM_IaxNI5e(p`_>$eHeP~hJG
zo+^VgAp?|%>~esD<~kr74ZO4E34X`q8$x6J#vk%Sv}Br2RIxld`9(0e+gtkP!~yD5
zk2<HM@#d6nlLXAW&t=?<$MP>>KHr~X>kKS}0?xBUe$4UBw#mMqQ2@KaL-HRo6=?gU
zk`KpU6#L97Ht@-iRrrNTG?=GZugPTp45{p-K0aGoMBACYUhEiRo!b5ub>X@pZpMKO
z6WcqQ>pJUduc^-{sK8Iu($F@mX93#|g+H4}Xi3t+Sqbcz|AT>^dF->%;zMQ~J7$E7
z@zwc>Tj7Ra#;A}?tgK%Ps5l97X_QKD^fVY0O~A5EqP6$q`<oDRfLlkm#M^20$h_y*
zq=Sh6+E)Chcgoc6^UOKJm-*WdkUgQF8h!b48Pn2zyG6fcP`HKiYu>miBnmjOPoNpG
zr)y_DUp~9tlXKp_Kn?_wIMfNQIDR=<YGh6C=e9d>yQ}yjcTQj-yv(Kv78VuOd`BKa
zvL{m$+i-c#?OCh^bAU#A=qmeR`ODf*|C@@*>lJO7h#9_qDU@mvcres2rRZsxXe=)h
zCZ%NbK5Ue+=8)SP9<tS_T5pQzaFjF|v@;$YL2*3NZPdsS;mTAtqkE=7YpQIArkMjC
zlerpA8a?;9*h@sWOFlZDrv*;S8V)lyVy(0v>2ycSJ3HT1>fqI2@V{&Js9RMLWjlv9
zHUY*$>wu!T#Gzm-4ExxuUj8oF9`KiJ>VLAx`P=WsG<bTg1O+Or?TruHc;abIBLpv>
zO*6ezuBii@*43(B^tyOja8<Z{tMK@3*L`ou2RqDQi}9x=FnyX}@B6mKPd1!byVbzA
zFh+tJTp%0F{Q|Z2eY;VnYt$DEyHBe9T$SG{k3D~<LmBY`xQU^b9L14Ai+zcq8w-<@
z-xnFiIdkRnY#XxQ^0F8zwzyw575a3md;;E_Dm9<dsyj^KO|%sg7<lB-3BVK5Z!Sij
zeH59~w0LL!vE3cN&giy6j!C@rEM*6lFqdxZ&FRi`hj<lUIBzUNveu1lL5!8yQMH17
ze}RL_V_ow?F<!B-0@!QvfO3Gpaziy;p&k+|R7ksKqoeMCaEm!(kGDojT*lAOcq&1c
zf<g&X9F?R#!Wu@8Kx*9V49{pLDXr4gtB9B`Dt&RsrHy~ca~0h_k>(Muz>dOmm9rPQ
z?6jKZZLJoGPi~L71t{Ak8qj4MsleJF_`MkN{4EE3&={=T<&Dfo(LLr(b)2fedtIVf
zF*+3FmyvV6ii<#Wl-;ieH|Kn~#|luMJ+ET`Sp$~-PjA!zjsmn7da;gSU0kVMxZC5&
zb#<-aWhL^NJPeu0^I(FJI|vn`*{`GZlq2a=&gqJ8`ex$9Bq(H-nr`VUZ}*NLa<*P2
zH!ECv@G0n?*tI-$ox*U|SkF^Jr>l)%Cre(iuYuqM+9X`m_shxz239Ud$|*CM&*UCY
z72NT=@5;F!hu*1c+Aybn8Q^*^JoW6SX0oa|Mrw(H@Bz!jl^80*a@J;;KCe9-I&nc@
zGBeBkbfTX_LyJ3!8fKAE;>;l+H~FpZg!Jo+X&)fx*LnMYsJ*(>ltpkC+m>R+Cd(m%
zN&)S6Q&Kd_B5Tqml$sRhr%-QKB_9h~kD}_oQd=FBg7+kFbS0HS?msY7xBWN<DO^)@
za_xJI#EC(XokPr`f%5GtpEY;vcgQVBFR<{};r`FqbN=0y+1yNR2^iCnQ#bqZMp6HZ
z&u=9L5epprb<VO8#mf3&=hL8o_!Uct0$h?($(>QYHiEv@8_<H8e2zU5TotG`oL&R^
zr-#SLP@okAn{)J32qb-IPk=%2kC5<|Xvl=|g?HLjvH_L|?1w(OnUQTq?8@~d`B*7L
z=m)vNdd`B5zTXmULq%t^N>77lPE+gpys)<{@0kP(xvs1*gn~D8O^43w4oULmVeM$=
zE~qp<mt%R7M8;Qg8+>NwQFJr>tltiW7HAZ<@`Sy$<*%L0Pxlja)5i?5GAUKbq<PsH
z4QkBOGk{o1rvpGo8EPq1yFU^v+iX&<sM^>-Ddq}VaW?JI-NH5pA1DbaCg-zcM=t;d
zZ;c$NX=85?WZ>3(F&KVBqxNP=>HW2$yH?Qq7p_mvH4PabJ|3h#0UBun`$5$8aEGnL
zsTnA0o&Zw1=d@7U*B8=(4qoLs?irVbTN}I;7SkD%89p1gXd*RU@5Bf8op_D*s3PV?
z)vJ=11I=1j9VkQIXm3tmU&Kk8y&#6yWk`<e=AkSZN+yR8B_`nuu$i`;D`c8=soG^8
zoS3(FvN5ej0FE^M$27+~A3l4cDm@k3rSZRhp`Ztp{5q#U=V1dI%I%2YX~tY?1%%8H
z7%jN{#yK1${CQEK^H0wWh&31+;Z{`y6lk$;W?z8dZSKN049R8#U5G`Y7UrDqEd7V?
zI0Rt(E@w8AXHghHm$yxZKJSs9Gk|+t<dAYfR*xWDMXH#nA<a(WDKI!;2<V{R^dpDG
zf1I?DBc3NF<uI`1KvI=MyWHWz>dnMEd38Gj8vqXdI_!T|iUeQF{nu*Oa7ys#OEkr?
z6axmevZ}eXVrgynqmr~ZL_=<jxjw4U6@c*hjfe=|OkvzxgR1SynOQh2bx*FTtC!53
zf3;ANzr!5Lx<Q9*34U7zKah2zk^_lR)m00?;EIbEB7-t`t1Y4gQ|L~qY=IxYzblj3
z!}L)F$MRc;ii7Lc=2w=I@A#{zrZ1j%-AUs#sOt+FL~1p~L+Ea5glX>+IJmXKI}gc%
ztSKo7@E~FuSxkFo8D&t?cZmr69EYLQZok`92q^=o%^2(1-8=0Tf~;!V1XJ=|u#Ps~
z*J)ONL<k*d1bHz`+8w!i97T$zG6^N+Nv!I-JsOY#pNBp%D`<WbPC;lCUG9nB{Vn#R
zRdz2*toz4Mc6m<(fsY@&{Uipw<t6ssVd&xQ1;qJ3f;=2rge9rR09-zEo8^%r+A%<-
z4PNT>D^cnaxQV25N42Ug0d8~2J4v=)lnQ0SU`J}10Rasb0S!qKAUX)-IfKrwM$5pR
zFBQn5tCyD0#|9W1(olkj;NcbXd>;LpG%f4FwT2B8(*#$Z_WTM^zPhiqs0Kv&by7b|
zs!z&3A<ldGQY|7zeMjsH&gAV>i9dSF3NazK(;3po)U~2L888$%pO+D`ga_5W2sdmO
zkt6q2N#~`yboP5-X&2S^7G61?OVd1K%*Ch8&3O*tdwJHSTkbY;x5{lK_Y$pS>V^DH
zpLd_3(oVf0@)AGD?-UIX?4|UqVP7QU>tIhaL6#_j!Dr_BYIvUNd!Rz)G&a!jiCOxi
z>#ko}x^i@-<5S47)_$EJFaS@-;Z4?`KbRJ6gFB?;6~rVdJo|2hkfkLnXpCO!^Esqm
zPZL7ac$1>ZfRf=Q*$B<x?XI*C4AH{$r<xNb#2K`1{i(~nc!wr$@TS)lz7i1jD|yO-
zy^AMPU>ouGeb9*)nazGIpwEzz`Af(%wrAk$6|S>=t0)Udg&{x{FAGnj4!B5hEW3t^
z1OAxA*l4W)t4ZQ2E{b?r&ATVY-6<mq5kWG%wEq!~o&0%&ndVya=6Il^C{Fo=H{13Q
zf&s)b6_1HwPU&|`ML;zm;=d@ah^yQ39%rW+h$zzH9eD_2-?Qd#mMtf!_9)^FAG9`#
zKRi!yz<Ie>$ZoKq9aNaag|-t{b;0~j8v#@S!vBjRD-Nfh*xN#*&AA+Z>BsnTz1F<+
zLWhP|QdzO@>p2?v<U6fdaXowNO1z<I<=WqC`>kX_D?IXblMR>z#QiF;ii4l+tCYEF
z(R>a@EUI&fHG36@#Wu8ATipNh3q;0Dilo$RI<&m01c^whb;?^kpP<^~W;Bm{-Tm#a
z1<wp)@^mQbdjd9L14>b|L}ZmYCTSGhK9r!U!{u-K0X%A(2Lfntn3N?1Q{8Y%XTDSE
zi(O@c#Wj0lJR@8-pI=L@8}Lg^%RiV&;u`Ove_R7q5~;5WEI^qMxkOXOb>@#}{@5(l
z<Z}X{h1xh35Gd=LBuFFan4XcGQ??c9PV#WCV%<Szpc@E}8DZd&C#v!(DF^?f<@T~c
z>w`;njhXz85if#x$X)lBuP&mb*_=svdsDbtcdwcObpY4D)-1j3%LBN$;mfXa)Q<8y
za*b>_?E#US62U0Pz+vb6Z{zz=9nOv9`IxdEptGz)bC|j(a+m1p%u;AfD<CBm5GoEz
zN%+dxb!Vj^IrB{++T4naMBkfgZ@EW}aACOQy3j*oLKfWxZVU!eu)I^xF=uIRdRL#e
zHjEaj%P-l=^Ah5=UEJ)(n5PJh0^eW~^Gq1?tYs1~D)G=^au**O=)?9{`F734Uar7M
zMUJiIQ{!Z%Av{xS?hL53d>RC?<Q8WMl8Zxg;7>cvZO=QEx0ttq)S?JsIr1^FU+sQX
z;17i59|+68VT2`+1F-(<37WZ-1Zf4+BpW%Ga2h6H*ehnWqxG(of^)?!&GnP@3jz!5
zSb(hD+aYcx;zpCY{h56bhT0`<^o<u92~9hvjNCGq1r^s!(g&@kS^wv4V4niA2ba}a
zFfaj4A9}}-LT@=9TgrR@FP0}SMXlz0%gG5)qrc;dSya|Q=Hz5zfu&weMGQU%QCWDB
z7WMEh_@IF)iPLWLn^H=KEO^slH805qtoW932|A(g<D1D3WBcia>X|1sX1!kQPR?hp
zb-nE{EZy;pqM)y<F~}dl&Od;ie>cER;4={OS97<l)5VWQ*ik1q@r^eALH~l+*i7MG
znW_Ujs`)qNH!atdhOM}%!9+duYMoSR?WW=gdGeX~{8h&z-{BI58{cByu<m6KvCn+&
zfS^8+>t+>QAsT{HV0pYsM94+LyprcUpc^=UZ-ZU3WPwaqiFQg$5Qd59CaZ8%w)-iJ
z@;oKiGV?KP9*UQC4;xPNO}F&amQ;TM&*$si^LvVl*p%@6pqYqo@rZXg9n5!S>Zdwy
z#b3Y}w#-_Gy$JE8DUM|ApTQ`N@`JqVD7TBlWIN_2of2@9RH!b6dsd70oFuI=b<4@J
z6uX6Pzh)eWk-iuZR41FnX<6+E4S1T+Dn#$3F7^JlD+2k0y7`|--30lA5&K`thy^A9
z8GkjU|M8!sKYiJ$gw<4^{KPR?>zKFOc^$z{V<1*mvE<p(q9nl$KRP#6M@N;J3#*Jp
zvkOPWNp-)QAU4&mXBE8EWcM}?EQQPF%we@n^F6_!Sh@&d`1h3*twVzJTi+a3Kuk7@
zCD9P7lii1{;e(Ofb6lsM@m3sru50Z*0@+GXw0vh9Lciflf~5Hla^v%AOO*|XQ6@ru
zZUBbvCKPgk>U7F&MoDO6AWT2#S0plO3wrFC5l~RT0-LGZq;{XoeKp!4h#gnN!KxNH
zzRf{nj%TQ<$U5-|3IVSZJDk>FFLS1@z{a2h$0p3GSpn#M?&aj5{yBMePrH<HoZi#{
z|DiAs7(_hc!?R8uc(=C8CG*+qUi%Lw?EeTR>>m~re^^ZX%~(tT?SN3f?zmZTRX)yj
zRBssv8JG7RZ}sNHG2$S;_LWMkZcxcOnus+NUy)-Y*I%{@iY}l*w+zWVsI4z~4|VdS
zztMX5()>O*WWZ*@Xv0PBGdN?MPORz(cmLrqI1LlN%>H4yI~C%YfQ9diJ26=%Sg4eP
z@IjTagUh^Zeek8(W>{zQ>UWEa#?(A^VL4!@6Itlna}i4Fp=BYlpT-1JULV|MT*d=W
zoigQc$O9K6U_jnpIf+7rzHCd{@m{@++r+zy#@nE5F_=Go93|s~BD4Euj_J|+!N?+>
ziDiDY8TT&NZ+Rk7r4=I)6X`l8#7U$C==A$HI3VL+dn^2J7R3^+*~iOJTB5d`0g#&B
zTXgj1{@a(IL|N}PRv|=XRHMfC`O6=qGHe}d@6GF6G!{)g-ow=2X>jiZ#5J0-RO$_+
zRpGrD)K1vGE*l^g!1!O6Kn$J*yq|9u`q#H+meDozuJ+>?5_ybYO$aXGrmh6?tcZpP
zgx+B;+kwgSe;g8V`}mnQR=d=Dfsh2gwS1#^7gyYrNv9m$7b1vSItO89KzCQ=y{OtG
z%Pb6^e$~V!C8HqV9poBpQD7fkg+i&EXQV1g*#}U9>iYOEX<f!l%S>_@D{+~P7~meB
zUOBwDD9cKvL2;!+8sI-|dV9(M<7>?}VP6ZC2BC7OhXD{choZFW=KlMZca=D{mbQ*u
zLDkXDKGK6{CFp_86*;<Cek&i!8NS&TXB;%GelzwRGKE{~lw|0+%hU&|_p!Jr&1{0_
zT^8&xQZCDXl%+>=?x2OSOl?t|c^Bx9Zcj!*^3_}gQq#xC$j5wv4q=``glIvA!jn<S
z$OL<soUIqm_gFzYt7ga}TA)AGlfZj_giG0jkJDEGeR|seaz$~$)mP7OT>a)9-SoA_
zlf_5bhfu$i>sB~vZjW6xpec{J2!CvSbMOA=uj4(ypw{0L6b%&rb%L_MrK#I7Nu+ms
zc>>lGMX%1$dlk|h6B>7f0tDRT7WnfyuVIp06ks3RgU@HQr3suMf@;bkjF*PtE~kwO
zMow$?oI0K~aE#9%7R#5aL<T>SD`RW8o)79CY$5aTHwX*Y@Fx*M0I0V;v!xQTC3=!R
z!=Eu|FK=*Wd}>-LEcbVyO;wwFCksNpZ0NRKa%{ZQ<=VMixaJ{|S1>USTs`ki%ET$|
z`egf!g7elMb8Viq!4yJ{h{`&>*G;g<t=h9@qcPR<aB{0=RX0WB2|;q;bot2XAhoSR
z&4bXO7Xg&ZAS7Vke6HY(0g@%A1|gYrO@S^yRO)+vp86*#|C~ZyvFZ|F;d}7~@<uR>
zGz>tspuEV{4vXL2LV26EU$l8$voBf2tY<Dk<0opwoy@1-UW~w8K+yiWsDr8b@TE<h
z<fZhqZ!EA^BAH<*HEk7T1+36L$S;2$s7}7|>RO4wrGef&-M~;48g`m&nT5fMZ=Pbb
zKN*qV75K8rh9z&~XKVh&xN^5Gwj@v9A?a+@8>S8pE{B`!z;Jd;5j^dr#r`squ))oH
zE4Li=0@)*aZcX(Nk&1Np4By@_d@#-E+D(te+d-?R1S7OaRxy3dhJ8W#*sWEd)F@12
z@7WGU#6~dzi~hWeXtA77cyZNiaoMA8(FFl%7!Oh`4DV!%ugBDv((+kn-m#9s4~h<N
zW`DZ;BC%<ur+IiStcRP)3XjFL5MrBX$5A|WcXhq)v;qa}QZjBJEX#w-<XCTbd=<`g
zIt;m~L;NWC3MZ&<SGfB=4Z`+mWCW=Y0aDzW1DWmgG}d^@aJe6R?6%9i3;I4UHLa?H
z6S^l_@#0(d<e?WXpBZx=Dk4ChD8iQUisLwVi)Hi9s+vD!=4~2HaLW}-ZwxWZ^j4_#
zS~Fj_AFJ*CN^8(2O?h^F2S+mqDZz-Pd2|7v2RS)K&J_1gFDD*R#S)&U^})3E@hiEv
zASA-J>!jcD@6rym<)Q@mRLa;-E-@>!1cUoHkjF-^_f>^UVI)Cng0qE<ksiBN=*5!`
z&?%CNW*J=P)a4N`+4@MtI%w+i;X{M;>x01xwO<PaR1Dbi|5PCStEIWc6H^B5H&&%K
z=zK%DGo~bUvv$3X`APH1=iXlaJ*7TGnBSu05P7*35I2Nqdf97u<>J9$ue@VGoCqcg
zT)XA)r!e>=Y}L9aR87)#90;q@$|1XGZTonU)lF0$y2VouKX&08>U76Dk)l9ArlTNP
z1`%~j+@X3hYqxTQZ)sRkFX?7`Ehy;bR)I?MHWBVN8i7tVOz?W)Tszf-T=h1p=&WUY
zXFHx~oK}3l_=GwgkM_;%X0|pC>NCnp9UYT%vS{?jg!Ta+3;Al>vUX*LP#=49P``+)
z^D8fg_hDuuyvg78?yDRuJ73&&3>zb_8trbp;89_@{5XA=bUk>?p#%V2^pNLet<V|@
z1YqGb^obD57vUcXbP?)J&?8|UB;YW7?VFy<V6>)=EI*EieSyzHQBdM|R_s57x_wI-
z%?oJL&y6#>hG4qU3jo}4R*JRJX^mPVW?gR0pS1d{Riq7e$+&qqea#UslejS-HeQ>k
zK?e=2u{vannB`bD+SPb%o}fIy>i?WHes;HSz_|59Iw}1L_b4iRtU>m1I}*hU&&uO3
zJ=X&VuVWf-jKg7T{S*dCjd_niB;mKoF)x7Vef?&!b)1sm>#UlnkxUGfELC8gtNJa0
z%eMs6TC=psFH@u6#D&nZD7vBwE4o-*P4woeRFSOa&DzWJm-OlIA<=Cgq%cMdb^M1F
zfS+^NnB<gyd?cB3U>5UPcfwObWYOg)*;Ssma;=2*!s%1d-rNZllvl2zGb~mq&W&tO
zr{`-Ul#p$O1j^u+d#rog$`6hyqTh3G&hYhmQM?5WMWi*{#p8q!b$l@m4Y<Zu9)vF3
zf(MTm?+6TFE~iUbJBiS3hpqrDUQ&#3%!rj$A|I%UuGHnq4E8DOmC=pCS+|Bz6gx~{
zO+<3Z7f3wN;NKC+J49y~dqB*(t_KNIemF~Gh&V8`RZo5csT~78G)Z^cvQma0u*3lM
zNE90*gc37OsdrylRQB1fD;V7r*#E;;%I-CLATmI~UuEy-SzJqm_unMOpb<F0I^Vys
z8rF^K>vJwJ3Ow(^_VAxN+SnGSvfycYBgHyedMtz-?;}C<%+BC|Q-h2oG1tA6$vR=8
z{6ZiPNcP1Le?!Mxf9I$hFpe9%J%Gcop7D4F6|OIh1UYo`Sy>uyX1SWw0O<!`9!=Pw
zfgH*Qmc2zSc$<=rB$gYM>@%D9J+!bt+&ObDB*|DXQ~I%nLJLa_t)M`KnN3j}g^(SC
zmRkyKm=9)9HjO|Y1iEpUV8e@QB#n9sF$QIo0|Ys0?Lr_&aYfJK;B9YGzEi<RINH^w
z=>rUBS|+yIonSQ7&>h?)&Y|^#J_k-1syFfC@o{LV(0xi1q&Jru(;-%CSbNzU9%x)Y
zimr>dji+xT2|U7W*o>G1>rtW?R>m`Vy<+?a*Zseh>kb0=YZgcuZ1bR4nW|{wXIFy3
zUeSt?RGzb31}7%PJR{%hO!LFyGoQU9%XjPQsy3$!Ax*F;PwsQG_u^BT89dbT(;5Iw
zX1ax^7(*<Y@x{V2DwVF|>yyOCUU!pVQrv+x$)moz*t<xnF9@FKszeOI6R;2-0Mt&i
za(>Q2qr9fedY?2@%zeVnv4(rm9U0lw7c?!xaN(l8Ls7<0KhJcmhRScX`Iz>FZP6F}
z;Nfa$5UFps&{Tz@daJOfBvqsb-vybPZ+ELg;YySMdIbFPHF`9Md)_Hh+%2;`;#SeM
zLa9~4Pdy?|xm2BS0{UZEXNm)A#D_<Vf@*KLn}F}5AJ*;<%5K@}p6wzjOD`fw>s_8o
zhbS=F_0uZuRKzPgp$A-5n&h41;R6GuUwZ>E6o~Mv-thBd;opav@qx>S=fbPA)7}rX
zN~%hj(kW&a?KO#4T*D=MH-_hVjIQ|TpS1cAK8&^)a)1=Qo`op*_3@T}MH(6kutQa$
zhhRC@&oYl&QuE2Gkna*gW5^p=lBikgtjXYmQ@c**toL!6tt*K%Me5vVKVEtRAG+0h
zl2E#Zh$TXX#}*7%eRGbU1$UGX-%IOO?NXRDoHlcX(hX0+3sQ?a?Jxfp8PM=IuEW22
zoAzHM?KQGb3QOPKMLfgJ7TmA?pj0jJh!ydUPH8#ZT~QIgZKi@%bSrl!pf$>-!yfV(
zP>@=zvTv3iRI{pZ<5C9Evs<}uND5}p?IF+$2wWz!xSr8Ax<-7#ZuW)Se6g8gqNE-y
zys^dTbt1ENgy$Uo)*iiTP~LwP@%{wL!L1fzgJ42xrHZ7D%(nSM(vHq)ZUiF`GR7=A
zpeGeF(AWm7MP5i%Ywq|-ry@unQ)QlobT<47RT?~~<uw`20Iz?n(?8wdMn0O^TS!$5
zcQC?0J2ROl_w3Tw*f^#IE8<5H=(CVhvJ!`tTjGycslGnPUxOUyMZ@F;&nE4i*!7V3
zj6q))gC^e|tv{M8ElTCid)W9wp^t@rA#<WQ!t%}0?_gBpXi83MXgiOnvpCb(c6%@m
z(dSkD&w!`D2nDG(xyHZpBV>%$omm1cmBl;mxHHWU(k7QN*v)oku5z<`4MKf{WLd#L
zN2azMiNyt6*5({LhH4|*!WO4ZTe~sw6(=@9lb1|R5oLMa3w4qP4dDA|kJWlYBET&u
z)*{1YoL#uGR*{M`C&KA^n3aRiG#t^9(J&g7^5?7Y<MwtW83DL<$W}2c-K^ey?zZg@
zt#KNh3KzBB$?%6{eY3tvT{}Iw{DCI%%&5SRd>>nHdxECS@t8+|7fH<!0*7%n$!$Zd
zPIo-mGk_gdshWi{NbBrKw{J^>kW;qE>C%~ezLpfDiz7pqo;lo*ZC$TQ{4ZfYYXScL
z*~q}ZbHMc<koW%p<Q?DxaQTathkW!Exo#zrv2Oj{2IV*T1}Svr0U7*WEf459i;OQO
ziiVq4CQf{&c!j7f;xI@MFH)=+PtYeUGKGanBAG+l0SE6$z(;_Q&Q?BI?7o(;sBRgx
zn5wH?faW3gr2-*X6zn^Hvyy)FjNjiuftY~#e-XoUdJNP@96f}7ihYD*G)YH7uXT0Y
zTj{0_tJB7ZA0W@kh}BjbmNNuFaVVtzKga^H@iOvc`W;-h%5BnyC8a9f_Hf$|><q$P
zc8Qrqm29ZiUkEe47zW;{4!k%oEy%6G$!?9Wh0p}~Vob>deqBHodNy7I8P)QSD@Eut
z)>@T08K^b7o<AL3XaRnzNlP0p%ZUD(*JDGUXJwQn{R1>|jvZ8>M1m%t0dds4L-ir{
z<LF1G+K=HM4<Y781}5eqJgXovJs1CUJk;~&CB=V$b^iG(_fKO~2N#~Z;Ts<RTGdHB
z6G4=irB=C`@uTiG$_H18Lp381NxvSm8Db421%?mQ7xC@k7sGd=ja+=kdD-pVfvJ<)
zD$M;2SkBqx1c`_%E{s=7j70-+P~*-U7WS`OLBJ<~^Iv)R^_!ic!`&?+<wwM#a)Y^B
zP~?Z{JE@z98GuqgRL8}BQSDO`Mp%B?Y=3K!X>jSo;FR_T(u7COMof-bl_!j6-V$hZ
zN?E9}<G9=BGYeGw`|Nv5Z-sY?^3imV{I9EgAi&}O8p5VuO;iKrlULhlh=%uW&tHt+
zww<AKPP_=i1Av`*t+E%cXqozW3Nf<?RYYF{Lk7W-o5^~tbd6@#K33?|@|o^KJncPb
z6yfWF76b(Si{~T#IVWb6rfOU>WQL1W<#X(w4m63kc%1nr31iese#uugE^<=URLb@d
zl&#C3g%3+!GUf2rF)%gNYhmjp2&61W+0rf8#TN`#i-KyQuOCS-66P#(OczCUQGn&^
zthzP9H}TZ&7p~h+<zWt1$MrPnqz{>WpbKtQtg_o-^cc{Hkg1Hz&wZ{}q#h)SUwXQl
zdexGs-mqLbV^-K>hj>wc2uC+y;7inD6Cb_>U^L7B^o#?`6PO#RP%fv+^=5qM!!^4L
zL=uvZXvQ#xeY<0jGFPSWO?2g$03G*Xq+V|kIGj6<p>p>KxPvqhdDY_&r1^gull?yf
zY5oVm`wxKk9{}$^0N%%i1G8MxQEYzzy#KENZ{Qy;5P#tU0c-#QwE?v8A@JxxNdvBi
z#Nbx&tH#EA%?Igaxcz>nCPllM&Qhrmu~Xc&0vjT9-tA-UVH6`ai_<=jye!-VR=}2!
zl7U>vol-_EZE{q?*|jfsY$*6fgY9wJd-epSif+0*L*1<m8bpS^Az5xJyem$Qs70rV
zk+~Yy&hc&t)5p6D_a<t0xi)I)4L~=4J@RuW)nkNU_cz@V9kJZRU>*nRe9|;agz6`A
zhS}NXxs92<Y371m5xMEmyMo+QX_=v3S-GJfEjbo3k;Il0h%Mb;hYEqWa)bFIIN@E!
zMeHO1M8a8}HL&E*>J2uwxueMbM;3B@yJ}ldi{30&ab2IvE8Sjqy+2vcu>S@%N^wT6
zQ#*+23lyA-*K#Hd8Vr{N&E{vV#ffbr{6HM}O~mZPKeTA7;Z#%-bAp?X)_C}3Qt5}R
z?_71O{h(c}?pW**arO~1KhND`gTr9W*DfC6PNYiHWKFeh6a4&Lv`#v&rwLeROM&AR
z;H|?$gSM`rK`SbS3cT-tAmyQ%pwQf;o-nPHifK&V4Hy@jRmY`I6Dsj<#Cu@(N7Ta%
zrSk=)4X4p{9Pvs_Ka;<kH}S*trCYnSeAz$G<s46%_~BLv4#tDyNTt{=njf~zueH;E
z8MON5;7k;xQJNgi%Vp?#Gdb5&XXSTY`hm#*23<n3%Uln!H83EknGTyWUe4_waU9dH
zEK`l#O|0qd<jJSaLUv46g4z%09#CbSsxt)RLqyFv5c1x$?}#ON`LmvWdF<nW0>@}c
z6GVF$FO#%gxgCN%9ky1X<zbfQM~JV!00H+=-uTS+tu;LJ1M#?ytCyh3>@&Rg%p?w~
z$Ef+cn>ZOdpKjhgI#GG}-qf%_D1033yQgL9D2n^#^FwD^?<*22XNj_$qa%FR73*<?
zwp$!xL?Wu62bw(1Qtsjf>n=LS7PQzpdIQ9iqsYvk343GUVvv_?6p}QLV7f<_<!)2Y
zu|wZJsu#L#^EUjhP6H6+uc*UppsS|bt(1V(@k|n?T}xJ85)?Ok*MIYzVkf5(-k=_2
zW3`aTRX{b*!L?FbfJRa!dD3M5DK?9s22ChHaxkd4tX)k(4isADxsiFye|E4?1*!*}
zvPHOp7H`iKyD*kEO^Gh<X}Js?&COR47pnXomGcCb7A`kx^V+!!mt8kDhx|jBzM`A4
z{)w^DicXA^qr$LV>%#OJ4cE*dCv9V!%v^Z7ZbRvZtGf#@U?nuQnZYQIp<O<FDuCFE
zGnJ}*EhgG!-N+MDR_Si9AWo}=RIWz7tdNA^;*n&vq**-3!HJeaR-Nlr4$uUkkv71k
z;_G%GGK?5br5j#EG*2@t>7*_rjAlA1MIH$KrThj*al;O4x`#8>3U?o7T<~4iryo~W
zm^Qpm+)t3IM`IY)DylZN)C_a9&%HaK<BUjQt|zRMq?W8+*Wp-PE|9=*@krP4Poa&_
zQoj1ebOacNR}t>kPrmxgHD<E4ZU6`>x3}kQdZkrxZ)jD<K`b#=S2LaP8A}p4^xi@-
z1-2(y?xmWebS<Zn<VgMyW%p%bNx^DqtdbmisHxF+OjdLBgAVOG?k>=KImMwH0q(a`
zYVf3ANiV-8O1Ji}Ugi0g=psB_lHXcYi=_Y#&qJ!W=H`<<sgNCP7jzjX=Hy{3A0IZG
z%iE)JLaI6$(Ez4T{$uuJk{>H5NJbf^Q35{s+jng!BK;M97_3>9oiOle`so4J*<`9K
z%25Y&kku|^8`YMMF}(l7*E==|!vtNLZQHhO+qP}nwr$(CeYb7fw%zm0?z>+$V&*So
zR%K*W=5<aFd9*MN@<5>~w(Bbj$geGgGn|s}UpawLt{tcZCBpx_%z!=rcf|isMSN_8
zwF*aY4gpWY6XVe__)8eJJl0lhwB}Pw4@F1N0Zf|1UdIk)6OY1_yPup%sTHXF#Z^dE
z#EF`kC>GsL9H+Hcsu_<OPmeCq<_V?(7FkHmj-Jd0V}xUza)=VJ^*)kJFM>-#uiq$)
zB!9>K6|%Ri4J)jk^aV6NH5iGtYt=uTOy&<$P`%6kxwXVxE4_S#&lhW5X@8^5en&(&
zv!8(JgpP2&k+^jV+&l1USNQ4G$hx2K0yF~iCw+<lz8E{oa=7qLfTp}0_(h~gm2s|8
z1BPr#)<0F2fH#4BkW_k!7H%?1+0GRpY0iFX7Dho4B5xxaab=s(vlL$4F-xf%8LX5m
zal!0vO_*L)eQB-MKH8-mPY@h17~Nu&%!)Q=o1nyzpp9sy%-TBKwkmWnc{;@!u~xkB
z=cd9?nI>S%FFqz)K|jO(6K3cCjrf5h23PI>bH>jwF&6rG6HDzcXyT28F?B^ovGU;<
zUy{*k!*}`$G;?r>GUhLxa}Dd4)8~)vCB6tU5QB#S;TPQLYjE1UAIuQ}tuxy3+4N9{
zj;F1H8Gd;-7BOF`dK)sBHeqQr0$Fd3@*lH*tF9W@0nZ~HKA*HutYMq$aYH2JU1(RU
z5A{>r@*PnYg{wL}8AZb}e*!0tRdkMHVMeBYv-vT=Vw1$x7YW*Hj@a9B4FEB$G{CS$
zQhg=VPyyFHOyZ)UYVm38f(9?vIduI>nIh`|3;kdFds!HmSJUM?As}IlcYvlsEFcVq
zkGh$a+Xj~8u!pPTj2}Bc>rx<TKDSin{!!73v`WJ16Bxr9e@cY|_p$Lr<wg>shn;t9
zY3Q9d>&o<(Ml=%*vF#!u=rrR`FObsLovxwXqW{J<H|s*rfm1_*op#t;zi6?^FPciJ
zyN%MWq|3l^VPaE_6cDG-69S%#x<_IRUB)gQVSMR#zk+c>!Kf{0p%siV^<R1=!U4tQ
zPLs=SU^ki)Y_D3qL3}?jf%JSvvZ3JODW#X(bOlblw7c@d5|YAxZO0?+2wO};nfjo#
z-ELjf5t8;=eZD#<@!=+Rl(Hvs#PTZc=~ySOfcF_|0QFC5GsO!`&<>C0vdG>U7Eih-
zL?G4`*c_#gCQn<bsU)<yAis3D<WiLCJe*_4pS~-MT4dYJ17o(lFQZ#oyf!7Ccay@t
z9$myrtJj_p#Er^&$SyU6N@P+}eAIVvAt86@A@4`ghHPe_Cu_D+35rf^1}D(xA~E({
z&m&zhA8L9Alfi%9EN;WD#>^4&1a=}J#DUz|JirKDomSYsg;ud@-jczQBZcl{T5ZE)
zWNv{`#+G_68Q(7z@Ph{-0@#s^%kbLf17V~^+JpK)QGgmwL1l&Xk3QVhWbpiCl1+WO
zl~F}U>tKVPZxLdvo@S;KFrRfZK0Y&&Ky=p8NXoojm5NAg3U^jJN{0`gTxj34y#y&T
zzx=YQH=Q37ul=m!N1(u*>6;;bynkU7@rW99So{EOLX`n6w1~S#;e}YVFfM5WrpsS*
zd__e@Q`$IeOoQ}=cj2MXXXtbWR&0fsCY2eEoClxcZqzR^D6w$TMLMhQSL{)qeDi&I
z$`qHmrU*b6DZ?d61x#X9&dq(tNT3ocG837MU?*txl*qLwy6iXIAX<-gB<-5EN%V~l
zk~@I%LAh90Mrk@S|DHWk`T1K?KOXaW<)xaUrF9}y=3N=bXk!*}K_4{W!p~F%)WZ=>
z?u2n$>h6`JpX=jz0#cFp(ldG)T<#Zd3K4jVk(ik3fxDZJg8|c|ooS|ea#P-Sw25*n
zl<VGL&7JpL%8?~^koZ11aoUWfGu1eiMUzVcz#d4+tH;<}kcBl|PUi{C6pCRQQ&Tid
zNNMr)o}=~fHa*3=w`1wr*)lgAne1#y90D#j%D6kkS**DFIg~@?%AOSNCT=;3acnlE
zRbgyu)Ic!IwfQNEoN2E|R*-cA76@D5O0@91_1nEl7KmEdyf;UD#<CfG`Ny+g#h->o
z*7zpu14X8h%ok}saI$W4CwHe7{-;EVGp-HJGp4>>E~1T#t2mc}%gST;3;tzmVg`aD
z(f+6){<wTX+<-Xo1r<k-2N}>3Y(HbtN0y9pSZz2s6~?Ko36H7F$D()Gpq;d>7FRKB
z_{nS~;z55~DIEtp#Fsk_xdqJX-%bH#U7?IAV;NLYYiRs+Zz1|qpAWmaZMVlhTcBy9
zy<|Enu7#r+F&GG`v0R+uil0<^=G2=V+AzM>gm{D7rd*^Ax@1+1w{B({V>L~YJ1K4+
zfAxC+4{hd6cHG$ashrl#bf8l)Vity`)0Se#GIM<pt4jI^iTN_BgW-LEJqbHxL3^p5
z)IP;fIi$~CdMFbdl-#wQ8l9HHPZ6gp+%u2D{*Ok1HEjRy8>h2_Wzqe(Q}LsWm*<Kz
z@YYCm0|zDrD2Pfz9zMH}usBdkCpi2YJkY&NY~76Wuq^xx0>D$_m>Gr#h9jpQ6yc`V
zgaKN`p_5!-pq}855#@KY$?fw!8}Q**B~FHsyWg-o_1RDN6NJT<?*VbUxkN{<NInXy
zFwX6$Wa-AAVOOwEn4Z}(h~9RfKi(Jrk!B+T9b+Y#2--75(bRV^yQnhOq1d57Q8ef@
zF6lvQ+hiT!5pn&xbDdFJLX4G%R<?1q_mI9})74-yIv+!$@$y)NV*=tbIXOR8J0+pi
z7Ztm*{h6{S4FTFv$=<ww@&bC4el5f<8gL8A!na^A!;{g_iCL|G+$&RTT1j>3B|3If
z1O@s=5BuA(2z>QP7myz4k7oi8uIxpHig59kw>V05M37M#9Tti*DBzXKPaZ1aS?1I-
zt@1u{q7;A-XRoW;dg%U0?}Ba><ygSc&V@%oVcafUyNy)&T&`_-&4U|Ibe!Sjx~`c+
zlkN}UA#Z?E6jEL6ts+Y2!Tmbrl+T*-<%FeLR%(jk_JIPPWu4_)FNG$8aOL*LEx84=
zp3opj0giPFIZV&Y!R?xy2!8q!!$*4&W!ibI$TRPZFweP)F;u1G>}a+mByWGIQwCGX
zxY2P<$gD2#MOhRD)WHUuyc|)Y3&GTdxZl(t|6h(Bhub0f{of2gxf|L6%;XSiq&(*&
zDg>+LGoCgoI6ZjZwyA}H6tJ<pZqlC9+h#Gito;bQi>pUoreqNNMtOb<s~2y^&ml6-
zbUn@2aKHmYLgaZ=$bn=&Y%{LQSqx$#f;KD7*f76IE2!f_kAk)y7pn4gVvK?_w~g2+
zT?H0ss0W!2C~7+cJ5UJFOS0AP>c9Tm0G!#ZT+Ux(rBAN%ZcXS>wx~n_k6v!Y;eI4a
zH*m);{w8KpJR`x)`g?6o@eYnd-3$E)-@I#^xZ}suf{?aDX_g{=rgG!1p+M=am!s>D
z)Vu}D6vS5+(V}|6A<>UDIe8GTF60hLjGyfYk1{Df_-s*GXbBSJ!Eql+FL2h5+Gs>J
z9AVCW#6I-D@EV}xm;P%jT(QU%IW1}PPSG*Uf*XfF{7uD4Jk(t<$T)5=_;^gPUJp}c
zw!)mpxm-)8ghNQ#0~YaAh>;vrV}Ds84Y*vmTYSeb2>O^<-kY@LY5Q;2QegW|(?PXn
z9)+0rnX(!`B32lBEbi5iEPCTVfZlnE`%7^ZCil|8eLrCB=aFs0&G`_ibgmX}wFU)^
z#QDDa#TKmK{c?L6PyK19maL~m1Kx^Zq>_@Ym9xj5zu|{y;qi8?mYh_u<+^Bkr7>bU
z()vHnaD4a@82LD;Kh78M*nvg#!}T7!O^=6#YH<$@(r(BQbq9vU#Q9Ld231p3lkd!N
z+!Iy?>{o3n4n!wCb|^GgqM4cf`_8nMQg&>nX>(OB`;TWZ0qR_XR1oahDCf|=Guop+
zXiF$MHA#dGb~&;H^ira{H~QwDw*D(3U`HeQeolv8YZvEMKal;Ibq6n|wjtD56LwQ>
z<!y<#XR*Q($jI@>oxF>(#{_--UVyTG?PB)kQvE@b5ukW5s^KUisX7E%*gj5<V-*@5
zdGLdf@Lm2COmkU8Q4DRM7Z(XsJoNoCP}Vcod#y3VmR-J{>n{C<z8h`x&?sio)wG+*
zGzvaBs8GP#_roCVYYlZJ*mze2q6!Z%#jmnqsN7}_L0==n6!%k&P`5=^#ZmH3ByPN^
zmvI99t0{|bGhAi$(@5`cciOw>id)QhF$Xr5s?@r95iQa2rDA^S@PWEh@JTI;JMO9#
znrAEyX->$R57tLyE%~YFtIwR7YirZDE048Tr@M1ru~FeoB8W`_Sw4W@6pd?U$|_nV
zx{Qd~8>2V?ulNm)Ri}TNT8bKSg~0w%g<RcfHptQAEwJ=6CjqXlFItZtY)@}JvrMjj
zS!UE|;%35|J_+8UsB1W6#J6V9aA(usg1A|mUiY4PCFrJwx8C&h!mnMmd=Ea8(jY9Y
zn0}+c%r(2k9UTZ~M%9Ahz>*&kjscIvH4XB^MDbd8v7@yNLpz>qcYpM7X}5Ac=(xp?
zsX!2Eb$922eSmB}(sl}ty*s|{@IozS*N;)noE@<)OHh%tpTDilGR^~~QG4rIZ!J&x
z4_CTG$*}%uMxft2HvUp+BLeoTSZPD-=4646^rb+JE>>XkPVE%wM@Ezm@EaY8E!?*U
zAs8XG|A<rV=qC~thA^5%8FJNVTOg!arL{{JMa~OLxcSi3C?S+hO+z*E*)jciKtF>R
zm?x{_P}LR~jMS1?N`<YE@0@!>n-7;p??lgCJ9P^nYbhy+@*7lU`JGyB+)NVW#?^{0
zce~r$w>V(_<H(qA=Dn3xdF+19Ma^hV5)^f*?~A&vsNi@^xqz#A%Y?Exe@CB@_I=NN
ziR)!O<-dShB~-(sJibyYBqEw49cJu!RMhH3T-_u_!RldyRHV_0eAi-<K2~r}z(uzj
z%)LqFY8n};C8C^ctTM7GYj65b1Io+$=pJp#Km5D~>d-}sv(84F`yHy`H&yc4v7E11
zV%!yC+o>j#4A^ww+ps;zEuU>1p$O54y}w&26cnS@2`CIEfOWKGikfa_`^I*<baGSv
znJ6E^am1~NF;yv#0bW6R{hAr^<NA2e<dv*=+9wF_JnIEEKV(o1WxH+8C!o^ItAZB>
z3{Wi8nXLI!hpwvb^i+gga-rcVWdCku<8{L_yatMM*+CD&!<z&e_3k><Em(dJN=R(z
z^WhWUzfAjw5?!Y(p-gT5h35V1vP|~(sX*(Ys}^t-izlRI$i*NzAm6jW9=xf%hC}oG
zyIvU!YD=nbar<dhbfr2dmslz5$|9Wj_T^#nUa3B8n1Gm1GWnh6>shGE{aJU^?3u_8
zQ1qSKNM;qV;Gefjf4u-nQWtkO?a!i3rZrr*(&wns`{9Sfip!?s4%tg+NG*~-{KJP$
zUPu>ISWDww$6V}T9NQcb2C<NJouuIa`wUO0h5Qo^7WF$~t4&tdu|KB$5ztVi1T^zB
zmg>FhrYeix^xAgln&$T5e$h+gp?`HI%^i@&iTw&hnL3j(5Ragro#>7|F(HM-Cz8%Y
zajy`xckA3qJ;SXTn5I0VW~Q#pBX;889suk)p<gY=#iam~kDOhyt$8A};%ZGD6L6W@
zEHWI<davzvXNe7*h%u;9zWU}+ce%Pf%{y6;tzF~C+`0;^jR+TIo7(!+)eS1jfh~oG
z?}CMJ6jdW9#5%yZZBuyeVl0^tMRF-xa?pg7#V`>4c*nthtbt72Y1fKp@#M?a0lv==
zDP>v_R}m6{e>jbILrzflYIr+ZaF`OJ#7SMIfd6leFJi|smf>qaj1Z4%ZNS!FjSmt|
z=uUl7BM=$YEh|9ds%Tsri0E~;uA??oy-YHnFUEn6@x5qIf6uCdflB!VBQM#TumE1a
zh_cUWP6Iw93?dHRrRj8jQeX6+e)p`HaQ$P#Kuv!2J99lx154tr3;|d~xEwY}#JrNU
zdC4c0P>F@Dx~@L3>&jiBOlx9mS;Y;+kfsjDh~GRC_ckNRZQj=gyL=e4(CHkKH-x_K
zX-*wr>-s$2?hD<p)kFpO2N73SLAVi$6-|RgzTceomCE-L??u)kz(3@&Ho=cA3I;S@
zFrvM^!WN%h4c*3xar~w1t8M^!AKh<v(XLfPaA0V+qCHCOp+vY2mN~Yif9G*o-@jdq
z7bE>BewrcDdAU=@4rf0Uqg?UcaTVsC`NW(eof*mx_7^G5miRXtj~4K<hzG(*OjMTr
zl4CQ~DCQ)}x`MArSLEuN`Q7`b;=@$%FOhAj!|YpJr!~?dMaRw74i}?qZpOl<P2CK<
zB5h;yu%0%a;c4tcP?6A-ve0Q}<iUE{Wa-QW>w=qqr}%um$fpkV>R$UaX?{Fr?T!;w
zDRpqw8m6uwCIMVa>!6S(+l?I#$0SRs6{wn@RIu^{?VHk%AR|dhuYo9omfZRrl;<GB
zxPt>NCu!#|YEh?!HQL&Xd$0FX<oAY7P`a?uE}X}r2#_F8+ZsB-<LO~%Pd4`AZSfuF
z`x~^NzG#$V^ku{4?xbNMDG2VJJpm6yt_0bv!5^&D;r;DI#wvTPeZ)zE^u0&Ol6Qsj
z4`<*3ORcDTEKySnaR(8&<Z{WuA=HOG^R|G*VdkjTeRqKr5zQUb`6k@72^bM*FfJGN
zpV{MS54uQnUqQdEPD{*D8{wo?fN}0ddpSU_p~9qXNllMkne0@{VlRFq=*+TEJP6c<
zbfB8qAqEL>H?{`NeLoHr&hY-8w$;>d&E~<^Wxr{k#I7}#ixdZZ-ia2dF=UCVO;OP&
z-f({z$f$}ygZRn1JXKCMMJLU9bTavQeX+>4pvx9O!0^oVGHfp#ZsMkaWrGT-Hd`*Z
zRJCtoc?kYLigPZ$FrVDG`y!xQ_fg7Phl#Q)?qf(Dj$io&(e_pjU}M7m&Y)4CeM}y}
zr>vt%HHvpgP>_8W#B@q>njca{ujom|pH_o7>D$CVd}`1#w)00`h0WH{8adi_u){s=
zwiQ0jR`s&AQ^kXy+?As#Yz@s4W&91XBaii0wdT#BlNdPJv-t%AhGDqMn3<ttj*DEG
zM1G~E%_Kwx(#CBo!kN9t-jDta?&^rBcYuqn*-YINw`90pZnzroINA6@UcGV+Ha&Hf
z<Cza-HYw%OI5IVl&cO?s$EoKZQaE!VafQP6u^F8UH8|j;hyvRhL#!+c%*hFeGxCE^
ziG7sQBdBzQCQS}T%`Imi!Nn7taO<4vc5%?7etgvMIPa*^Zi7SrIy;GJXeaVCKqdbH
zeC5Y{=a8I|r+@KPG+rfQr1OAKYPU9W@lstsRNgEP4P*s6hzeG{nW`fibW5dm0}rh6
zxR|$**imk#Qu%iD`*-@vdFyDg_C`45C&vyJy0(pea=|kb)VgiVKL!3#Pa+yF(9n-D
z)$E427~5;tauBg)<(&|~*C)zXSi+F1@zW!mK(44XpTPIn%W{F4D%mZLKj#^_3;NYK
z;7acjXS!G#Mrj>#)oor_#X`()w<tNSw#7y4;AnT~%F5YD<x<$VF1k@^JZ|3^lL!3M
z6CQ_EW5+UZyD+UV&E()K3Om-!78!UD!HFTx*<t+pl~-Et(Gq3HD)htl){jSrfaBVx
zFQ3Qmyo4$o1#@Ta^P^4pdN)lGb7kb3OKh2SCb5WDS*9)N+69+=R-(yllgeQQKB!wx
z6AY+*v>|BKodlNz@ahi$2ckejD(KUr--qeBb_35p0`i$1=*m{!TR6Y4nvI-u*!|li
z@Cp-f3<btg-uiLsVExgYiavwgc0+zSV>4E*DORG;|77~z$E=P<1DrO76lOBWdk8;V
z_G)KaQ)~2R-arU@T{f?G`gb6qdiyVO{VnH=m2|A<V)t=yjFL{Tb$IeKwZg~lu$<vF
zUR3Yg%IwGdVV&9XdnTg%RzG(3yNt!y`jj^SdTkyuX?yuDJIX}0>h-nVcV+Y4&s@&;
zpnQZ}CC9q;-p?v95p+kvq`App1;&)*{!4GaaTsrO;SHe&G<f8Y>BlXih&k`{HV;O!
z_JF#dRr^b@XMKpWdBxhY!$-LX2UhZuu04EZY4I4_C>t5++}_M)uLYV(RB(})vS&gn
z#vuS2fzyLK_@1~JqlYJBCNuozUaNwI#&2RPJ%n@s2Iey0Sg8qK=zL1@s776W@!tYJ
zijRQL(Y&EB(>7{M3f3bX94skqZ6a=9t|kgy8aao{2M)~hATOvHms7}wB4eXD^e4c5
zWxmK{POfJ8&!cm(S$U#xy0<UYU&5+!?0$T|!*+|bG?S$hH<Pql;L9|L@`>Tv4O!&3
zQJfl&PJh5w0Ey%xW^yL3W5z5bNF#@2B%8aD|8G1J=eri~Sgc4I0->61jFn?}Db~gp
zWggcDe*ycJ!5G9dTBL6k>spqQ5K!)C4&W~db_rmfzt8zSc@E^Biz9Odkvtz1b<ho`
zRIzkUIl8|O_#?rrA_j!yMu1^yA9d`-Dn0*;2{2-;i-TbU`#%TKef&v)e%IOkt{L-Z
zcnQYB34gGQMPCJkeFO9?<l|@mUBBl-Kzx3V{h>hNGqEU3Rr^g@xB&uJ@MH#o%j-Dq
z^lLG`ix0WIRCjJEIZ9a6MvSz@TxWkgbwUWY_B~E@vmj@8r`E(Jd>TSQ=a%MQTZSV%
zWVn~x>1zS>fyFNu(bT2wicP0ud$I+$r&N8@Yt6YNp)A|;uO{8}z4fPj(BmHsRV2z~
zCjT3sHm0~9)i$a`TxP+_Xul+Pkvl^cU9FplaSpv+D^hR+#F#`Gbwt&7Nl;tLR?*Xy
z^Y$(_W&v;|UgC}JB&#aebYJLam3J3WVbZnA2=Z8?Hvtl%>AvXDC7#e4rc-><*Th{;
z#3wwxWi=w%p6=}#qS4aG)vr<eWW8=7ny#Vh!)ykVK!xsiM7|Hkr6mD+sN(p{N8Eru
zJ88+bpKHQ${%yG4JCRh)WGXFHwmtm}l+fJkjk~*64TfMa{jd&+p|1;f@<;^+)o=rC
zeZYOT6!z^PcDuf=_WL9ehURY+oDBF(DRsM<0^RVgYAe}^B)1AL8n)w&>dG=_pmTN}
zXi)(i+xPeD2Y-b$=K~c=4_8JJYq#M*4F3a;NAe&N;o&yBZLD``#QSW7)s*~@E`GJu
zo?%A^wxMVQL+dX7OOPda(%S(Fg(m$JxvXtGRHaHW+`TB{WDUVt?i#Xrvhvvf=7h#H
z&|#nu{TkNO!qVl3JIrwWL5yTEyJm@gr64(O$Ci%t%oefj#t)+YsD|BH@1Z<JCH5Jv
z&ew(ii2Gom@lmHSPIi{UjW#}Ro}XzsYILXlaOIO>Dm5?bu#V@vqWInV{`nvLBT81=
zq3W?z;12#2lP{<o=;q;NHZS+s?(*gi`TVe8<??H-e}{!VCT)seuSTIap*pI|!x@~7
zAc68=avnthWV7%!4+c>LDKzyS9H;(LQkLbHMi5m>1hT%R?2xw`w{VTU%D;cfk+shQ
zP=5zGUNwx3_=+lD@!VI-8W)*Ul_<7ezdniIc~$hhf=}fhs=|~~S>xSLN~qYBD2Et4
zt}^&l*Xv_b1E^7Fe;}~tA8QqxiLNZLfYtP-jbUm|#`A~5?-(S~QwRF)zk@%XK<kcy
z@K(I;LXc6j;F!?tOg(g$9+Q9RCb>$adrIr*w63Y<miYEH5Zd@E%MxptE(UR;pOKW@
ztrfp>TNR8a7FJ^PSv%vwD2uwsu8Ul%LiUOA6`q4TK@Sbn`S%Ld&ckOdBVKVOyqvin
z)Ptg5^KP9UM%sg2vcZtMUjgB9&jMjQO=WK2UV`*`*#Zi-Wxo2PBSB?wKz;fv?z55N
zX~{6_=+0_Z)#q&oEmYK^5J~(1k@|L{ic4hm7rD!5tAmW&{Y6Hqv!vc6B#FFQ#cap*
z3DzV>9I0cSE&9&^e2kMFpm@{vJ??wx4q?A8aDNn@gOwx+)j>>WQP=nDC-po_pAl=0
zR)V7jS-l1o5K6R1G9Zg9w#icD1*I=qWu9G(yVGb#_Y~sm(cExqWn9jZ{+<$B^B8Z1
zbNlnJJhR|_BSCr+O5le3BHz>7C6h}^&)qT&|K8$NtRu=1FKw8(<FuCp+<kic?duQs
zWAtSkrB?^E-UW^&s)r}fwW^=3%*PT^kLdfnf??|}Lc@0<1@-#`<z<whZXzTbuJo%W
z3UB97jX<p(bdNz-49XP-$+>T$r!g8SEA1P*^g*k?2Gx=dVQCKA`9*+q1|f;*_00KG
zL%d95y3W7l6{pl7%FoW0KIUYSP}T%=N9b?3q4Uj1r}#-S?I6KTnJm`ZyPL3yNabWn
zU1%Ae;1Kkg)~FOAA0nIw*%_cnsIH-vXUFU+gLFa!!N>?1@q&&GeHtaCO8*Zg85oTE
zq28B{;jI@p@wzBzw~^b4@#edO5sG@7lP~rH42nr29qcSSt4(SPBLBzOv~iSnXoEnQ
zO5+;W^9tDm6MUkhwfK9siwHyLzTWNL=yp50ffFij_`8|x)riUZfhRUEhSNa&pSS`T
zirZ$eaQDUjn7;r{Za~I0_Pb2`EQA@;r<FH1l110CBND__4XQiD2E=~KmK7NTbl`C=
zfi+E{?66$mLMo}gX@9Tc;vuHZ?1=P`)Tw5bP^*{LGd?iM?=z;1j(tt_-^q=^-!udg
zhLA0%*VrE)X^vy+!#K<2vyhBfIe)@&VE=jyMts3o?LCIWy@Y@68di2lHj#+o-Gw~J
zEYrM1PJ!-QHv*6b>+r+-(A{4{5#{=x>>R@1`f&&((yRyd)1=$amR~5SnDSy+UUB0t
zKz}81{&$D!lk1F>P_VUKFFRLq2s95jki~fM0}CB0cxZx4>3`ZG6=WMOs$JK4{?jZe
z@K|a}VQ%MMIsbhFaDL(rvRJ)&Pl>H|cG;W!<hNb1TZeXQSYgjuw~ZfYKS1O-8xNvN
zIbov@w-@0?leoxoT$nf+NB(`M75d?UDJ6q{-WU}%i&g0zY8NjG#Y($kn^Z<i>pMMt
zu>Jh`yO(7`Fm<7yg-(*tz0twA6thH6J9i68t3bSl99{>DDN!hf!qf1$Ui>1BjIclb
zrp<{L7Mk^9jI^+{B3v95<T#hSpZ+AKwj4VAWDl@;pCX5iD1pgL&j0zC#aF@Re^PM4
zuoS$<ZAuMABy^sqs9*erW}PtNv7JF!4}GoIhT<4Y!zCYuL8(|N^wBsC5uUh^0G(Ei
zK^)1v9mzK=DRha>tcbs~By%9RZB_sVI@O0*lH(R^GLntfMB))}@sDV7#;v*J=QRF<
zG?b9<m*P4OV}|7_F$G<yA03G01L)7CHU=$?vrvDtX2LPM2=K>(2^#QMkJK*GggWA&
z)})lZbTayKC%N&{LedW&cHJ`LO)$j#QM5&bOZ<l_ENqC<!Bs@LSj-O@GarFFdI`@W
zP8^u-xna|mN_@JfmrY{os4_alwey{(-+tT^Z-ys{->%553_^eojFd%*16E}Y9!~>v
z7$7fUzRHOjqnDD`?q#?pt5STY`bR8PVtF_1l%QI6JPIGL_Q@b>y`}RdGR$NQ2aH*Z
zp4X&6v1cPq0dBYiCa=7&YsX9|?+P#$E@g^kcprLh)pPpZH~#HuKo8K^@jh($wwQ)X
z&L}kR4T=4d>x_@V%Ltl}q95w@Y%WVOOnA6OmK+z*-e&pi*b<+m_IU*5`6$||`FMGZ
zu3SeFD9yR=Rah^=AF`OTjc&Ba10sQvFLz|+I@ZtO?EoDGTf>+^j$jEKsI0PIX8BXj
zOmnf@AdAhr8}hqRLI!ee<GXRT3R>o0F*#^CyuURHyOe)C>zm|oQxIuKpY>H2%c7{T
zIP(@yy_T!9CLB7pu~7zae%je(dnL(Uos`WoElR3CF)%VfC~PaEr3lC&)Fv>{s@RGV
zxvvj7ve#+K>c>wBX3Sm+^~72bc14_GlM_S-yub_G<7WRk*a8%Gw6AX0p^H=93K*S+
z^Q|&2ECJlj5iq158q?#7GH#+cl&b<;h4BC-_Qs>62N=CU90ZP*M>~=eZduwBY0l#O
zoxqMzfJeeY6GA;EhTrWs_e<I6nHhVP%AnDu%hO6=C|B#=C$a8^F7gaclnwL(Y)m_z
z!{k6|PxA6&{bIRoyiqo|^zv=&^!YQsy&fIT)Bf78AF=8x{0L+wRWe-X@8$-DqXAze
z5S&=Sj81+waDc~pdjzmT9?;Fb7mdo<EXf5;Gu3aPAv~V~vanP0KFxiQn)t@G7C;*h
z>)5=aj9n^cQ+KXxOUT^f5S*O=CCF_9#1q!)`O{hk>&aHs)#Dn*R6@j|*_vmPnDnfa
z7@^wtgr5-?o`bgmRUlkeSN-P$ZkoSl;-5-&kTJ>vw+&U#atY%UDhTL`ozfD2;cMyo
zEusCQFrnF|=_G*34<7HgEUYHNfw?{9<Uy`*{lzGn|D>o=MpFz&{FIr+H<zz)a<_DF
z#h)l9Y^U@==*%`n>%&+ENx2qERMk|_Kjo^Y)%NsKthZ{HxVaEZTo+OO&=2JOj-Bc(
z95E!Q`f}@ZP5YEFCW{@!o~mx=vt0=5(tX+2KY96&se=S;Ke+xCWM=&`D3h5v#)AW)
zmG?5*XaY6oq^V&8&2#GS-jOdBm5Ii{^27zgrMp`^HD6)^nm;qAbb?8LFoj9rn-qT6
zz#JlJ!`P^<PHf^OeOk69KAT%dFdx+V{kl$}^6i4Fr6?*5zC2gCjh{@kD#c7m?Kg76
zKx{+<jy{G+>h)}FujLWA7Uu`NdEOm3T~#??jOthAD~WL6?G71$`@n!#k3?;)igkv%
zAs1KLm5(24mhLQ(`0#o^K3X+CM4IFF4D@jC9!RgKAq5aES$6bU2u{JF#tR>ERPO#^
zWZe7DhZ~yzsi#$05g_TE2)2s@BCfhlJV#MkO57q20X{Ohgg8E7pcC4=`Zb`rz$c$U
zz2in?5k^g{`sqQo%ojCGyvok?hDC|+E*eNpc^rXLj2oydso$1~d76-|f~`!>Xc2Qm
zA6WTfBO7iK&@8d4Jvd0ATV+IKtoIcDsublO^);%G7%q8gy{JDbL=GBQm9$N38$L+j
z6SN-`B`Uyg?U#*r!;kRXd!><x&(hFAq>02`j}&U~&LisJ`^@6Tx3YYf2ank1!FGpD
z?#!n&Lo(Z8{uL+E=f83DmFD22X7Or3Foqy%v79j3RP4_!hj(Jx-Gs<V?aF6+#d`xR
z3rRlz<#jj2L5b?T>FhWMzhoX6MzK8R^r)icq!Oa93JIA7m_FRnws;hsZ~0FBh6vJx
z33uzn^5>07{u8p*Y;1-qcEtAf9;h+$q!hrcn=_h67eys4JR|_0OBj@;)VEaP$drR;
zG}LYN?`@7=UhMibv8!;e+2o8CPKU#*ChbHmM^l5z6~=FnURcU)F#vwf>HAkyft}Ul
zkPzda4}ZL;Ogmo&X(R!()XlHL96hO`f9(1znsy1C;p?L&Z=CY0xdB4aQvU?39qh@e
zs<)hyXG`aNDIpI?Wj!q-dR#~D(elBGZC)6Pud1ItfvH-0Ti{9<szIwzdh;~=56`}&
z<5&Rlo80fKPf^K02Cbd4KB1+AJ^ba$yl_*K4_IU8?ojK5H0d%M8CkT2;J9X^GCUjj
z`v@3PQDIoo8tMWwbgipgX|#8L8KN+FOsE<0bhJ*!m7$@x?^V<87ZAcs5FXP<Roe(N
zT%HkR^VnIK72>QC2xPVy*hI*ePde-bb7h7$NUEn0av6F-!h_;Uxl&1B`M^E6I9a&Y
zLxm_TSGH$Pi6ha9ewSpv-r9Td;DB4H9W@2{T6+9Qp!>B_K-Gave2Ef;$4ym!04&TX
zzxn{*XtY5=5_ZpX{{&{)sk7Ux^%#>uOWZts9Vj+b9+<=VHG7xx2yiT@#hij=VOX+7
z_v;<z5tnYxpT@8&`?e>!M)_jozmz0L5W$moKvxKbB0tHP)%l>%Noeg02!N8t%Cd)+
zZROI_IQb<2wrzlZL`SQ4<+HkzzkAv`62;brj?<9)M`_ohlF0(m@H3J)hk)Vm>Mzx)
zNs#=@{IiN279v=+^09%fGK7Hz`QO6M=7(<s{&;J?pAq3st^>Li!6^tgT^-m1wg7BN
zLKvn%<OOFL=olh2{I686_m$@^KuSgC;)z%;j_1o!MVLk&Tfh=8v)j`PX^(>&Voe@d
zx3vsE`*t13;`0ssy`~Q`&JN5mWY0+gX9_E>ri1E(=HMP^1r4T1Bl0z*<Dlgt)v?to
zQPIE@&a+SDV&Ne2GpsC)S8LO#u!Vf$o~puT67wG_1J<U0GHk7C!_}qtytBqdWSZzy
zd|=_p+^ltKQ%|?i)4J__(_c#lk2wl;SZVV;AGY_fV|*DYm|dylGXa})IX?Bn7*#*n
zP}BJ+ZA{_psERW|ESvFH2i5R8l9mOytS+nsKX?nE>~GX^yg5S5fM#1``W|;w30`fb
z+BY=BB<CbsGmI3EDXVq~cv~Bd?5pucb3|TWnSB+h=k`37PPgV(rM>wm)->f8fk$O1
zxCC~6B>iev`-FbNl6%amAex;gM&R_KN5YK;XCTm9(V7U1+$E1=mAOqGg6j!waP2YX
z4JoU4crh>~T0$a_49Z13$n>H7XlsP6mUrN|iEwsguK5j-9lXMTYPwEIxbZ1i0kj4c
zRFxHt*&SkZ%4ilcWR1m_?aZZm<?P4>#5LQJI3#b_D}BKJ1r59ij9AEj;`b+jAX+_2
z-Cwda5s`ybq?a)HpCbbR<hTS2vqX>_<73o9;WM$jGCDRedmc)a@s~=pkOwd^*!&#{
zlB|O2(l;gwDxd{ID%GNa-<M;A0=>G(0u5(TqaTOhGB1PY|EZ|Mz63v(;;(%CaYN~R
zn9uMT8t3)cICE2Ov3}?^{2f7&sn6SLpGauoQ0rXm>Ea}Ox=k>2Ifd(i)ek;Hbsw8R
zb0ezIu#H!Mv*b+Uij%skai<^tXYq4`e;JoV@~PGM#vZIHlTXBtr+AAUvC`b%bJCMf
z`(`2%_39Lz#wG`9@*=}sFrs91+vLc>z-_dal6u2=g}Rr<C99L}*PcT1>99K)yRcXe
z(g!H$W>Q<vHI$4{8R*-Q6Pq->uQ)1nM&T>;m^`F-Zzqj=YxaDn!>y%P1sK|Er3Bok
z<c_|?ffiVrA;NsZG@M*le)@|(R~~{i4?{`G*@94rlsM%aFSr9~du7bgIAB`jG)@=8
zm`U5e0jlR48Z}Bj$6nN88kwMdw?5QNSR)_-X8aDiw_JAMNUuX(huh5R-aSXF9J%Gt
z!!n#&un9IZ^xAtb)|rj%%i#a>SU;mW*~P|l{FUz{+7s=@;$HPdh{N|FDgKvDu9hfh
z<Gn;`wzs+yn{8@A#_?@#XMcE4Sp-v&F;veC4+=;sqQbw%HOrs5ur0R>!}w3-Tp<=G
z@zXce{M7$*`bjGSl&v_`8%PELWoD@ce{DyAiE#$Q5x>PMj5(_eweXVsKXL`2yo-b-
zlF64s%MY#4f-rw&G!`kFZP}pX7>FsJzHeIlyuO)w^w5K6f5|QrZ4@219<xej{9RMw
zp*45ZN?@CmC;TeN)IN9O>dWOFh@tSy-O%-*cx=)8U{ap+AM{~V3AD{V*pf0G_Y#~e
zX_T(?zRv?bAjR?BVO)RqBe}W^7G$d}m<?JgLY9(!4Zhnob!pYb$0cC{Ky8U}oNh3V
zmbM>lN{)7OuXi>1?Wn&rb%%Gun4JmNm76yT)ofoO<&h)bwhj>Sl0z2}vr7Y?j0J#c
z9;oDBj`vMLUsqGgX-}zOJ$}-U_NjYWWaAF?VVM0mDbEyJ1z1&%dJ|p3K60G8>#L#m
z%MOb)hCkftp2%n5NNOFwYyCM(AC?8C#@&^__slyoK5`x^=uX9kJq0J50NDuVK|h(U
z9U-x-J@<nhN+>4fJdmzqsR?9hZGKwHT#(OtII!7ly^-T<2ClC3WTqqU+ae*G0!G}2
zL_sn;1f528K>~u&t4G^EY^vKwZM{K&?v?Qn;Zk??L<*A~%(=xAOiHduEl7|p2-`Pt
zKwAH%cETZ>gyZ57N<2w{(9Oa;F&Ny!(x7JpK<)=un2R2tlf#e__Wkx1nY^Tth$H=A
z=z`B0w8%6?J0F)}vbi`QOF0Ey>QDNV6&syuX&yYW5i1jKKe^0+ns|QTx+Cnoxbg)k
zgn+tan0TwGg5v#q{dYp!(i`%X&d(y&>^jtL)P?cbfBXtjUZ|N4u`fks|269}?B_ah
zfX$1l;4`%F%uT9-Brs-(%&eTA0v{NH-<+ka$AhT#_K?}ZZJ5ama@EdeI1?Uex$d%t
zP5zXcOBgE>&fz=!MDMja#3Kfs1?@^Ps{UbpsnHuzwcA><st&+bfY}oF%IU>$xa7%i
z;<jgoiq4VbhXJ`oy!h157iKKjI+sV3ShgMLmUINF70>9QaM1Wnt(3v74Fl&@!cO&M
zkOmRGFYgTK4h5a;pOa72Sc8m{Z)B7|hvt)euSR7=I6KY`Q}R+2t;3n>jsWMnalUo>
zD0ztGlntE$2yy4jH;Wbho3z?rtzv69j#Ri!roAM&5Qft9wObw-OEIuwz*oYC&Tp^+
zDT~W$?NjzSMT>7l`LD7S`ypdS)oQw@X1v-z?<|BAN<4sbaUSjfZow81lDAyk(EevD
z4c*(kAnoF(E-!w;hI+F;et1vhi2NNCF;|uqH1Vf9{;ub^+5GPf+GW7(BiMi*@(t0f
z*@xxS3@}CvBnNrd&SWG_myeigp$M#XKZ_()eu`^!(CuWanndkbWYcNr+x%=|r#l=Y
zi4URp%MKYU-Wh>cGW)}-db>t~zOH$fohqEu$`j{}SR!qc1szWYLbxRQDaIAT+Og<l
zP}-)*r@6(e<5Z<pcw%uXLnSW`bM)9fVakp8TP!DLii1=m<sm?9M`W^P^%50|Q+sa5
z12TEz8t9-4Xa!`3dU}YnE@qR9N)(|7jhyK@i|y0i#Z>8X%_U^d=Fb(ia$ihr8r#WJ
zV>8W>A2i^*#llT9Lyr^e*Fui=u~UQPK^t>I@zrPEepcxRrUPzce5DuJ3@n<VrQC~s
zf)k<qnqUW{)1?Q$;H^t$#c!^HuyZVl@v4iTz;Bl#6A|e3R^6}($f1QV;Ww>3v7A?#
zw`BFTm=CTx`JS}MO}B=GDB>Z4+tEd56t2$nEYh3!H=P4BE59)%)bld=Q-R~}MqFFV
z%eX=r>m>otouJS$#VICQ{kD)m1*Y--lgu=y4c-<;tCMe@o^k5dm!@BX)A|G;0h7u5
z>>!bkUs%d3>%8PIW>pz5SM@{;jO==9vdiH;i@Gd*ni3z8Y(kX#WpCG3I|uv$@cavQ
z$Iz&)I^AN-GHM1axKAQ;#N1|Oupdo21i8(iZ;3H`84mgnKovtmcMu-574ant$RgF+
z49~uQQ*S3h$1k_A!Q}O0lcgk17ZW4~z~wyUOr_!3Xw5Za(O90F%C0iQH-^TNJgdEa
zP~I=zUuyIVZaI74<T>uPau_UT0;(yhS<gswHWDAi)pH1-`CE?sFxGp%W+rjOF7Qe`
z?O7MFI{q^PX6TnUi_J5+cVo#YuP6;2qG~kkO79@>b~x6bgZG)^WN2ed9OCY^W%^hl
zP+64!xD-W13b!B9i3H)xMjrA!E*=|m8VucXm1r`KMu}3u92_5WGClI9wRys~O8&u_
z22cWat{?4)@nioYb<Wc&xngBz209^k=TqvbpTKVLdq!k5l-%Qv<g?x#Vg4ob7N0u*
zn;}0Vbul|l*qTfiA9=SsKN9F6mTX$bnR3<)Q;VJu(j)@>^ZgEdcqQ2_iu&26v;tGb
z;CG`Bl^N81U&NqbV9t=|IFVbI+O}z<hv@xx%$i>Pq~vDaG2FN5Z2avIvYm9{hc=-w
zoC^&kowddc0l34UmOVq!o6Zx`!o7YzssWG6NRbe>OP%c9ULpTHDtviZ3C+BJUs;Y_
z_YP~Po7)9jIl*0urO!H}v&`UheE6E0blbI2YCMd4zvKkl_@M+uin)hHgcOMj!kZ1H
z@A=!I8IQ!wS$TgfFY9#;Ll`|1MGqu!pHo|!b8~G%8FTgU{^_}7b<`4wj2&Gy9)UG>
zk7LigL4?u}gt(jZIaV_ikwt1$VFU_{x_yCEU1*?W9(xL{MlNd;2j2OfJH=Hyk_86`
z@h?Y4w_@#Rvo9w3``?jQkJ>7Z<$~{;cintRazW_OaV*tgQbnJvo=6zIjbf8-xCvg*
zW_p`O@T)_^Wr~1&c9fr93ExzA*YazG$`x1%vWwa&YwP;^_0*hVh}VF)&l-0&k~Z80
z-jr-L9#j)>+Uk(F%LBqud(`5k6CkKK$=h)}3}XTGAj5f>qq1(V`hcz2x^zW8s}K~B
zc;twecC-e{L_Y2Dkd;CmP{YMk49m~o26<b@wuGd}u%Xy3E?upc0xpa>g-X<lNMKry
zsnUG{9A!O3jGhD)d6QQjtdd<6Xi6zpqoo(qVR=PLOcd2%{E3A9ybU(de49NInE~X!
zCKdYjbOf*{LXyZN<aBl&ELyJohU3Ya_4K;<eHBlEj`XB!Cnp%ZUd*@32y2SO;Qb8e
z_vllSq1xL^)jD*RAMstZDOZz(9k2fW45N0(?Q>O)n5oqTjRNIrxk5S8Hz0Ymd<@*V
zN8Yj(w{}e>;*NI6eJC^Wd0<G+aHTXHe#NLL^bGEr>wY62GQ%IF3|X41N_yytaI{37
z5fQyx-Uo|7UptDJk~E!g2|D$44zRhVf6hw2i0*W{^m7c++iJYm{z+6F`^lE2|JcNl
zUL)UEy-E4*_Cfa}@F>Z~1oD|fL^LJWrF`jK<-L#@$vGT+Fr7l$5piF7RHYIHU=cb6
z3d?*mNR(Y6Ukuw>Ut21p&}@bFn2|pSxVIoqgfgOewbvXyCh8X=>d1RHkM?@7dy3C+
z1EL<xq@ltDV+Jq23fZK5H&ci-h)7Cd*xxpZ*jxx#YTc-}z#agO-sWIT4kp4A=@y8A
zol8$%`HtJRG+u(1sZ!dR2N34JT5piU;X8W^51HE~Rm^;+)l^5=H_HnkGWw<wOv0y#
z_85OV-N}^;tTgIR3uGg&z!<`BGFCy$k%9baEhE)4CwqC|!TQm6+PeRWGSPajFrX^7
z{m@ho1>=ZB&38qjp`YSyBWJ1Av{yXwDM)a--g*i#>5zaaR}Ld1#v@+9?=(|CH2Hq_
z0d%u9MaWr<%Ql&0=HdYo<MPl>FEGyu$D(fJCt3v54s%YMRMpX%b+J`|_jJOCfJOt*
z<?WkC@sm*#%dZgVm<ko2)pu>iy$$(yzV;~wCu1Xr?ziP3(2YWOU+`-sEH`A0w-vZ*
zwCKPAAf<ym529cIP`icae}2xl?O^&t+pO@bVBwd_|H^hHX_D7$$z)mz|0!QVr_I=Z
z5oTs@SA73+eBn49+U7o-$?5gqfHQwEa<kXcOflcdd+D}^^AWWqALy*~n>2}uE)%_b
zHxz&03Xk}m3Fp2A1sk`h3fz2Eo$tDGT+Nn2eT7usHuZ0`4gv=vqAn|U4#HM=u!R{2
z#G2C1|5K?7*l0P+i`y64)c5)exs8+@jYA8*<bXd;B!dniYg8SzRk>lT|2VR}rY(@o
z>)uNJVKMkrywAZdEf!wnDlq&UsP;EJY2`<4xZ*(*(we!>YX=x=fuhnB25`JLixeaC
z@}YzU+ph$O;3ZUsV|L}9;Iqa^XWMfC3pY0dfVH`!4sNuh;+a}B<1&NWmS!%Kjyz$r
ztd?-f_G29(X|1T^yx&el(*(apKVK$9g*gmals}0xH%gyWweTo8Rf3odUE*52Zxk!l
zr%$rm(QQf-b<raZ=kh0r`rI3Cp>Gxoq3MTf`)HX!0)rwc6P}H-?7Ao>whEW~5hf1S
z)^#dHTIGcIjxxJgPt|E#&XB3Fhp-8fg5Y!k^oOJCJY#o}Qa-IxBt}-$0!yGZMs!|M
zDpJeDul926$wLf4-Fnh=zhy0LFUSDLOKa!zo<u`k<N#Rr6c<Vx=#NAR*6t@x&)cM;
z&DC@Wn$>YV60e<30>`<63cWS~LV_t_0vHcM9ZX$Lca&?Pj0;O_`4HcKGu2!U%xL#J
zRD{hT@bu%m2_xoyl5796{S+a6UaXkiMy!og*H<&TUZ2V~x7!{j`n`l5zIX`K`V?Q5
zR{(19!`Uwi97}vIAE0?Q-8alr?FnC5t&mgLN(CHWa@^YD@W;C|gIa@;Eq7YF#7NI=
z9FEyZ_=tjUbD7acNGbceMQ=1j+*CA#SQ|7hAzQWg_BX8`>DytB%-avC1Iwm;s7r05
zYYSWZsR_!3@F2rzvy`G8a<T$dMJXepSOi5|_qnYyS_4b8xnJVAf@2rSE*^L~$Foy=
z8Af!@#2xFI%MP@(1iq67UO5SnwAW*_DBb`6=xoqLz_$MjD?IeVkuNA5A9<gT!7~C)
zV9(9r>!3t!G(mPo%oWZ!W{2du*0ts!eeaH`BkOb$X46>@z7V{dj=ba19;Sl8e8EIA
z!0(m&$&eGgu(6t~NJzElcnk~K$n!JKU~j>)0(?vC3HB;MA!*26`izs{>#BiE^L`@7
z^|8E$_>X1}#Bum;y=wo{Ji6M8*+oF4vpXW;GB`fha@VKF!CF8qekIe8tm}<SB`1hi
zJ#_C|3+W33(<6ycNATXI1R8x@$Uvp7t)>P>!-76AzOZVr1zbB$cl-L0HN}S2N`(%d
zDiN3k+N`!5nq9J%e6W4m)XP&#Ln|7oRCKcw<iF*a{HU1Dgv|q)hRAr<Ed(|5xs}>{
zy~2EL5vH>|PO!}mGF7W+HCvrUt5dJu!D}RL2qL`6pYlgNj80-~iuN7KMsjM_)ozk@
z6~F|;2@uGjQUBYctfTt^%HTV3)%Sos7gBxXAUruvtK2-pk{4Bs33COYwrnB*OWfrb
zMXdply-xJ8jC4SjLv4Fo7KLRq={pfz^I`D0K_r7E&+MuH!M%Zs06G5uDSV|&6+R-y
zKY4L-lf&yf=uwX8&acpv9M4ZovasT~Yn5&N<q-MRg?N+;HHQx^#UU5UJLFGin_tVO
zyiFz&Lu#qcHwsk1P3xQ!S9po8AVN~dc2@1*j5div-vvA~FzpzF7QZTOZ8{&z?_Q`I
zq#M)2e=0+G$}57xOk{g(IGV&7V{L<24ky_WY&CjlN9CCEuHX@qmQA;0#UVBeQ2!vh
zxCZCiCUbB>tPao}<39K(R<${G!8v%jvfPTvUCf&A!5E9m*3760SSMQR6kNLe(Q06-
ztZ$a+ru^3Zl|{1YRqW9l_t(!Z2AYK`Fm~>+&lVUDEbjY=+Y;v1M!x@~Zmkb`&o(9r
z3fIFqs>%OFI=2Xu%G$J<+P+zBkl|KlhCBb7>eu|AdvLH$#r&U7>Hk(K2+5Qp6(%Kl
z_dM>{r+MwY!g-s7n@UhEeK2qxSZ}{ia4d|uTJd`m9G&!COIBu9`UT~<aS&*ay@;u2
zEySZW`Rar`vuNaK*6+YK87SBanEObn**hj>b|Q65)9>mZp7}PY(-9Dg`@$U|f^gT|
zV4)JOreTPB%&8VMsORlDvODNXZmy9$2J!168`DeA0r^Fn-DG5-Yu`{R02=ETEB>15
zoF-?yhhbTdy@Y!-yV35`;MTaBatNhhksO954b};fEXG8qD)yW-b>+K1^5QJEvvQj^
zax!mstWh+ascoOBT4C%x{@P*Hh`e}w_w`5<!@P(nVr`HYjnR(#!Fc0_AW+>;qXpok
z%IB6EI6FTw@%0&$a^a=3#unudVf$Z<odd5Zz_z5fZQHhO+qP}nwsE#?+qP{RXWM)y
znfsE-B$M3#(5t&vr|PRFprrbS(km_6mHYENpTGwtzawHzYumQ248iWwT1%L_5UG5A
zFKt6you1)=ymcC5fBq`D*G-{+mcd?QyAt~`YX-(L#zL|9s1^3f{BU>ww-V}T4qe>K
z!tP;y4?>1kB{il<w}FGQAK2;xKf22-{0W?p8+TL}w|IdPp4nc9GAF1~toKcnZ~Rgn
zF{nE(Ijzm5w?Vy_$7vhGu-Y+w`~6jI3(k2o8OR_$xRGgRJ)PH8Bk~gK^Ngt&FL}W-
z39v~^9l6ikdrSW2*8yiaLd*~*9SRA{96tLaW$nZtS+$8e?84WerKr6`w~ACSIi1wo
zJcqYotDzwKgT?`_9Dr8v5Vy}$+AUf|;j01se3UUd%b`w8DX_X%y>&tsdE5&szU(~A
zLV=bvbhb%J!X|g&Dx-fFW1}IJLr0@6%kn{rQ9JF_gT(!%q1qKEf`v?E>H_%s*OQjC
zP7!?+vsRfD(nuW19c0zYUf7{>(Ac%RaLeRi(U6?6fu`dzl9YJveyiJw5wrgt&4}@5
z5AVoFBiXFwz5T+_aDBrz8sc&}KsmNJT5K~6VhlXi@Zj?G)88epP+wK|=ghB9ZB{Wa
zRzz9adL{WIDYXf`bL?AxWbOKZk~y@1H5xA3ypOI`XBxBCt(_q<JuyD@g_62UtV_4s
z6aNioFdeIW)mFMt1RYyg>$G_N(wK3j_U48jRt0o)T+l(s=4TI1aJrK={%%%RcycA?
zV#!!dib`1{*!anal>~iC%T|Nz4PH@R+8ygYjL?H=nGnscB>xDDLTbTIZI8cxBGlfq
zm@H@C@~l$en?~dE?W?vB{f~rR`XW{a!A(!i8r&wqDW4JsdPIOu0K?jM(+w6RLkiPz
zbG#L=KQOYfdFT{H6nv(oW>M!;$ZbBlv?*E(@q9;)hdx}hN5q4WYUOWo<i_YNpdo#p
z`n9Ln?B>HuUU64PdQ2Dv#Ia6!c51Ng3t1UAsC!2E8TZKLvQ@!j0S>auDSZfFOc?EJ
zFDwTD&dnThlQh^@^=C{2yVTU(@{b-;k={$WJ8p(ptZYlfW{8jWj?<fbo3-<fE8`qj
zD&Ux~r5o46;5CLmjc9+McRTJ;iR0+~tkC-&H1TlvcR;A~z5mGfBbxwq>aaG0ZhKW{
zE%HR&MuI=e)SNTU#z<^q+i^bktB?ruU<Ea&>y@!+@Qe<<>8zU{bKDHC#dj3ikgj*t
z$s+3UbL8iWZ$C>Z7r5_fa%z~tJlf?5^K_r?^@(38J1LP%u^Yss5nt%{tFPh;6YlPL
z@qSSs_=e|m>`5;I*8SOz^=YLAOI0t?Z=xU4<$^HiXs<FBp#||438SGpaY;rW$kiHC
zbe9Vf1Or1(oLZLY)W6}6O`KE!v}SA+x%?sRLJ=-4vmHN)!cGf-6LtHT^0kHh`^6$Z
z`Q^P%TNa;SZ+8v0c%aw^G&isx*Cn;g49=R^%H1JI-^uzczsZvJbNS6%#&z@ybWZd#
z1pYT8ok!K+_e2GK!O$%Oxr=EIBj4By>geY)WbVpco2$_$&#P++tD{;RDL0x!WrwI^
zoH*mBFFe+$3R-Mvf3cYYgn)@UdASjIOlD4lf@#~VSA~K=%lb{rjlbe=#DQi9Q}?+H
zy=S|v#|Ma%vZt_}qnm%{3iE=Z)wok0pnyH_9EX&)p0E=ZKgX^)8=EwL!lxhuuT$^?
z`J7%oc^PYb9&xyUr;T6T=u(*|fLxGt%xCxESusIVI0YJO32^xvY>Ca#GPNz%*?i{c
zs|q69N}O~!OB0O6_oyynB%Yl^T+C&~Wo%Q*AQ|kZ<<zU-l#N9o*<|U<S;s)s!@?zV
zpe;Ihxa46Vw>-(aL;AfH>qGxxru6xn^mK^sd{<ZH(Uta=o&Oray^(yQ3Z?T?USffC
z^A$BiVU$$H<(W~SRlcnO(imYmt{16OV+ulpQyl_RBmkb~Qq2*)X<b5ka=#N3y3A}l
zC-Fxto)eV)1*IEFci1m1icqaU7v{SWXk>)Q!j@Nq)&+7R7`dG%?Q(c&@*d*z3)BI;
zPJdRFfx3lq2Jea9lMKwCElP^2_7UIUt$V3!)C8Iham-OjX%0|+KW;Zx$3JxFDVR#_
zK;Kf2Rj`bP6Bse*y@{9^Cd7zGXE}&l902T0*Nj1CiwF1jd2Vo{dn%^7AgZpD#aDJi
z_~3>mI_f7SNPQT$PB-m3!ifNZIRZusVp(OW3v(p~I$=oO_H<C$#EP7}Q73@V?(g&o
z5PXc>E)5e^p02e!`3(D_7PO8tLq=@q#)rv=U&7f{CKGcKz$POFPq6$A%jueW`$}7T
zk3XlTCwawXtx#Gc6Rv*VgBjEAZFKm|aBba+%J=uF^6gm8t3Ip~u3b?jEp4e+VXRYj
zT`j;N(_iWmD%GHHJ(AU_B`#xw;me15O^TP6sHAxPvi5xBH@U>K+xdiEu!hIk_ItxU
za-xKIEe_x9;R<xi?ZAn!Kf5{afUix*nalNye<!bzS?Wi-zCR^-DJN+nGa~WWc6}Jl
zx%wZ70CyX;y24nW<dPdU+fU1}R#JE$>^$q=@XVKZfp8FIf6aPcw{gkm83iH1D)nYs
zlLUK&DjI`LI4?xz)|oa4LkK~C85us)F}xE^Jh2YbtLIfRU{u!Rc-H}uMNRwx&a<>+
zLEoqYj&GzW!i1|q2HnCl)`y4CJ6<0v>_p?P_Q`x2arS+tql($w2>_RgO3yjWyoT3!
zrwQ1gOO&q3D+fNql-|yXA&L$!Es-mgEXuXs1yz~K{O*%Qycs>yJs%Bn*z=#{D_6d#
zp0#JubnR580q4R!fmGDCTaxGe&?{FGN6fc|A>vE){;vFWp)a(Qx9_$i{2HBvLop=*
zEI3z~lVF?w+T<<rGgJ}aFT<IB$>7~%TbZ>3jrnB9!^wpwqnT!n9=U~--mLyUgt5Lj
z5)p3o#~`asrRg0&VJIq9@sj^%mJuUCb*>$6qPzc?6lu1PPU`z=EV742kw{I(kW5QR
z>ii?c9I?sdyKCj)r<#{%@VP%XJe>|M>bs;arLv?Bn0)2`vJY(23!WeU^5ozy+?8cm
zw#iAFy#LxIt9L{qP%}PZKuwRN7yST**Ultmg57Md6{b7tj3AV|D&m;)bBtsw<i-(r
z^{53)qp)9;#D?CUKxvilPAhs{n~V3ym3h&j{<TS5Z<KI~C(anTjPX(*c6PFtWBA0C
zMK7H6R9mml6oGi0Gtwd7!NPf&oNyryt0oy3qeD8EJx|g8jWk<v9q{=TiyhBD-K6*E
zi;|cPA*rThPQJZv?$OQ%O_b3BAMH2+(0Eb(s2DC*GMz-ZAqFR4<~IjyggAv!J9_uF
zq|Nh?ovat!OK&AK95v%e8K^nbwP^_;8|4Cv{@EK}2oD-tTFveL?u8Bw=~dyz&xjkn
zRrd|49Z#JTF1f#X#QhbLCQx51b1ci8dk{VxDq-zBQlk2$qxR@@!PSAa-(-Vk<kV`=
zmr<L&O?b3ewAvz^KV3bP1IpwhMzTEVpxajHl3vl~%!(x~BHgf^8AfwWqxFt{lL{f|
zv{3~dDR^TPxE%bK@NMDi>hSP9Ln1In{;?=re-0mZU8xQwh4f|)r;wG38t$bnh&8ke
zTHtG$(V`Sx4%>1Ms^`N=CsQ{Iq`Ev>)^yO*u>w;xJ+qG0sA79ct2YE&WmAHI`L*8l
z$&un~Hk^6wEK@}wuYm}-cfE$=gOTmBzZ-?oRnauKbO&j$!+K0*tS>Z!TTzrv&IV<x
zGbb6Q<+nk1T#XY8HeW}InElzBIHE^<-O`A=gZP;CZg#Q12B;885=DzbWGRc;>a50*
z7sP|d*a-3Y0m~!0koG-PhX@DK4KxH6qR2lz1gFP;y`Kbz_v?*XyP(X0^AqQdlTow8
zVQz$Oz01T7iKCL1*tRM4%;qLxc_Y@3@GOO`gnUoGaILq76c|*`yZx4X9vAYNc+llV
zYH02#!JOk8SaJ5|-{DF<?xkvoAi~nHwqTV8+>BPmB-3X{T6AGfvoB%4JtHbS6GM8g
zI9vbLkJiH|4$NK=NQtw2@8}HzAinJlM2$%J_`sDd2MJ-|T&izH)1Qf1cE;{7WxoiV
zNEr^dLebB2^hh3?!7SACfLmweRPmd=T~IM>{XJ48Mz5;8pU{QC?k)^_FJ67!JD4z2
z3tH<hDT=}C;@yC52X%7u)GKM1>BV_Ri|gQ_i^hbacN5#-w3((9klaJV0(dI6i?gNy
z0iybm2%@bF_?ClRV==08x`BBK&XrgJAeBxmVkU27O_8odGuHj|p6Ve1CH#R@!u1a)
z#2&+P*4-*7z)5oX9WfPP(Y}WXD99xwOuNIyBLeqaJ>hLWKqi9&Z8Mc5!2Cc<LyKH>
z+AI0ixOXswegLL<)Ox8UAm-bztZcf+&EE;5DX1}E8$SMIVE>>eF0*)S1~*eP+pJm8
zDgrK#NA3+=4&qSk*Po#0eor*Ib{q?4r7NT-PrkhKC5zR%+%AHrt_7@bk*~bhwun-$
z#E@Octy;_$k^y%Spi+8CIiQoS5i9KDJU>A?D>8**7h9U$HswnDP7DCihag*CA7Jw_
zLr*h5)poP36ToEM-u+8cRSvGcph$aT+HYMS^1;@)U7m)OT;7>>Cn9AK;sDG{G#RWc
z_oc{7^qDD0edN!2JBF1wz=zOu=LN-N813|6Y731>`lZHq*HEx#srux97*8YmIfC!K
z;aKn!1Lx&7P_#Jb8#))8ktpM`CdwG!9|DkZa7S-&6TodCW~Umi6;EH5Vf*hFj)LSF
zC3?_anzI$ueuF_hS}7{{buTGm@X<7^Vm5&l+Nr~11zNliXtTTuh4%_3(hb@*@Ay(>
zzo8kk1rI6bC+RhX^B7R$t+1&2QgiJJtZ_N7r2jPC|BZ+{G)|0M!iTY`i>{b%GCs|*
zL7=Lq;GaY+fwRe=m5|6@9>+ElXn_Ic{gBx_&=}{jIml;<rBXj9STVT_Rh5TWL2e8J
zER*og=~ses!L&zuf9Y(g23B}|nG2gRS$ORhT7na`WzC~yzp|wXeP_M4AwE`0*O*U>
z;{@Z>ZEAAT-zH89klmGw23TmqEc@0B6f3P~H1l}XYEwksiN}l*ee)tn0u`$OX*izN
zBL7`&l!x}MI(Nwrrp7E1HsMJ7&Pmg-T>U+d655Wv-P{i6k_ALo;bo32C}1|s&T=Uy
zI=4i$D!~7x%JX+0rg8|_A4%4n4NojBho`=4efF{|-FjsM`cT!@m=LVjv=j5y`N#h{
z?v+OaMBv9xydd>P6fjyVe9Zav9@w28rG=G+{0@VaxDlEZ3xqrQdk?V&MwC31#TSNS
z6p_tEep;H-I?#*H%CupwgddGB3Wfo><;Xa}=srcOhxT~g<v)wMscoG$+Pkq?8Wovu
zzlB-2<jX4yl+UhaRh<I4-a19rD%aG2eKMOir>yW)0}^DDQj2^&tPdne=u2!)EIvMy
zQS)kn3>10IcNUvcA9{|-D74sL$GCGo+L1YS$u4*}d|divY~r~zTT4EDxuG8$kkHjP
zZaMhy0A``s%}&t8sACw4_et}Iw=VnXjlUsHtlugd^@_G-`dD`F!e~_FRlLUmm+&9p
zEKr-46{pdQOE@7xgoj5@S&(z>1pf*@;YNZZ-BFm+C;$mOJiglO=8xpRC^FyX?($hZ
zqm?}f-u~>)pMgRM2ZFy*Ls_~d8h%ed>H#IE^bOj;x)h{Mc1R8jnB!tz%pmC*&Up5X
zMze_0_$np#{+6garaV7sEUK?csfrw{?8|!+36=wFTM~?L6pSTZwTAqkPu_`Q=sWO@
zc0_*Y0NIga^oJ&8r9Y5waR8_6ybJdmCf<T5;r(eZLxalCgpCjNBRrS-eD{D;9L*5>
z+Vh@-1G}2p#6n*ek7oWok<zR{YV_()#zaQT8)5r1^kKk=+9QwNQU}jJuWj54^HF!%
z@9~~d0tV8s@D1(c&33d2uPeJ~i{rfCT&8cAfeJ9&A0&P07=Fej><8Jc(f7d@Tth}O
zQe~(Lla0SbjyJdFCk-&(d~|4~67E2dmP&DoVC=+$mN2_OzeKL3O=H~Sp<Z|`ni;@1
zql(?04K`RLIqpbFls+%uek^Z9-q?sOT?rl=qM(WZn>+t>uOg#;*iQZ;>Qe50g@21*
zameAZp;47&Pb-hdp~0nt^Nlc~7(?W({$cBDx=5NYd39E4i8bq{vv9ji%`$C6e&pYU
zoO~*6(GT4}Zdp>tQF3B$xrxMEqQ-v<xB)%)C-_lJFWd+g>XHVlD~0Kuijv^bJ5K;|
zV-W*A(S*3c^S++h&3YolM`?NHcykEd1bun%NHu6K{PI!%(YH22{vO_zqf?~Lu}U$h
zn4Hws&*yj~7~mx=CE+~eP?;jYc+9e{oB-SF9K|fT#jA^TAfL!VA=r^(dv!_#>y(bW
zU-0LN2X^1+;i^LBqH2r7-93YfU!KdR1%*3nCko{9_16kJ*^m^74#An^*?d&j>?SIT
z-K$mG-Hu)@dd=;DME>jS8baaXTR=EFfZ@|)=da||%l_b&XIWik<1=9mw5l$E7g4d+
zNy0E2$!}T%Q~$8-<hN+4l!OHS#t|Z=>%CoCfCcGfPRZS%h*aM+8cth6cY9CU<%Pqx
z#Xj98RJFl0OoCJs87*c>HZXp12EKJ>RXGJ3`2-%~h@V%Qv#(kW*o&W_b6Kv9U`(}t
zI#OLvG1<cFh3_ddLQzhVcn=aOY<N;sC*v(qEUDIeLo{6z$@8I-Ofj``TF+|JIl2ms
zNFZv|lXCE>cSsSsYydZU((+*H+Ly3lUSBW~phI~b)V-Ifs*nm~hvt5G-v6NC!TZ+3
zG67HTyr^>yexzyBHvpQljLkepLdknhsvW(tN0e(ui-&AzNt@-t>njd5{gBCP78<_+
zMM;?#=xKDd2CB7Ka&sLG_`1?tjg!~qd>kK69ojTZNyT%(n6*QxRAxDRgcwJ!j1_|e
zzs46%6q@=N>zh6Fq0|IW?AT$4q{$M{IE2Onz$bXBXtz5G`B^y*^N2U(^z7?>C*?Bw
zTqBO7!&1j!m-(C^Y!GMf$EaNny1pbheE~m4FZrZokxx!U1FE8|tFq?eVXDxYhC?B@
z70)eno~`3tjl*6R^x>G1K;cQFSCQbW%dV-@<7!j1srNXKZ9;x7P~9Hrw=-wZ0A%Cm
zg@BoT@k?MH#k9BS7JbsGE4t#!9iKuBRki@LnE{Hk4O$Tb5X|*MnXkmL+JV+jooPe2
z#Vp&@MYuUJk&VBpAH4ANvkS4HS6-R6J{h&EM-aq#7yWbE@V5_wRQ~V99~ey(wLT50
zIHd8MJr1>XDgIJXO^{U$Bf-9k*l1YR?v-B06d{YFO(_9nxnc!++;lPh1ES_Xm2d^o
zZq>l(*6_!XtNTB`jj;U1-`8<QX7{FtGsta9Z)iUH9EOliZhq}ol|5U}RRzgaBE3t^
zLUVvEfjCS?r#~-<Nb`bL({V)R9;dHt`Au}L5u9dJBK}f98r87OS}lV?7{cTlsYFEg
z{)7JXt*N#Mb4{K@M9z<yiB;Nou2<ycL^~vP$n}J>O@s^CPTCrim#y(Hq9Lq0QAKCt
zaPa!sI5>36*vR=z_%--aTirVzPI>Qa&IuC>A#rY2`CxbpE7+m0z6rG0H$+)odh8tR
zOV~o;id<xiMI)@Y*i^CEb#sVENzL<MJ)n+cpX$pH8t~3#j87165FW;&fl(XY5*(gq
zLQg2>(6;_sH`ORC3l_yE)cR_WMf_a1h2JD*Z;@MMWPs92k>xiuaA|K6GZG*^+n#lW
z#<kLA!6002%m$kn@R&2jK)p*A1c|POoEo7tSUga~X)-__t)}?>1IBUT*H#JljQ(U{
z$3aG)eoI10NSv-yeX6`t2<L1IBx&!-{PrMhHH<<YDbD#n2gg^#8|Pvlqf|f!qLZ)t
z>B})y<Q-f`0)BM(uzH_~jq5a$(#BI~BOvjM*q9V5unzC9Ox(52q0iTp6YA`K5B9N3
zBL@nNN^Z2borFhSW1&<Kkrk;~i75J4e@w;x*rR@z34pFwavXcgSPOOgzxWa76mzm$
z)EQE!w{qiknqWilp&C6vZ^le8{tW<tgI6gpbFE>WS?P&-{mQRbPT;;$vD>A5h}N~Q
zXfrP@xre#2@dS(wm>8R(0_UNNxOSxC#NR-EN;o_2@%fBlAl3r>xXORc>U|7%pP`hl
zgLe5hc4!)5FiCj#pat-iCcADVhg#L$T*6fPrXhC3HxM*1o_K@VyPC6wg}X0_zPzT~
z`xhMqLq{06BlcL-IiLw|O{g)#hLShN>%wn{SV?k6+biN-G%}tKmP>=T>op8%E)&bx
zxv@oXq$biH{%2d!R=BpGIqQ;3jFuKvh|}SIIMTR9kMeXh`1Rq)S@$#TK=$9#)b=AS
zdn9P#bz<uBMb1<ZkJM&LbsCDHr8McWxyEe)cP&}{L1fC{-SdIH>VSgCJPkw)?#gKv
z|BNpqgJPcm0|DHjpC35*ZRW#^SNQx<``RmHJHzqSa|5TRi6`q>Zfu!OQuO_YKLUq_
z>&6D)qWZ<;@!H&CP2f>KfLM<x$c?@3uLIrJb_B4n23E2_yDyf!Lg-MYGx_HVB-?@_
z`OJ?Rq9>dDwLH{X&gRZADrO2gv6>sN0T*qgu+(l8=?aJ!sY_B{1~e-<vYSach~Y&9
zJo3SO!qy_DI!C2g+?%E%Cv@E`xh5wH(vtGLKoah%10z8B?pxBP7y{Wb5R1UT)U{YF
z$R^aDZ1&4Z#jErJWfkxomr#s(#xe02E_AI#?d~$>rVu(fGmQ&z?@lmfCw|NC@(u!y
zgFs1z3h^Zx?it1dYsRN&#43Wr>5~qaHd8~l1+f;qY6Mj1S~c9dlotkf!TX6rVr*wY
zBWfKF#~qf>iht9=MxdDlj7m3u1Vy;;qrqa>JlaB{>JwMYqAWvTwY!_H?-+%KsiA<0
zRy74Gk!xD5yg=C7T{Y;l>Qdz|@Kus#A6m)p4^`k+F!(vRR-ofehJF>;YqlizS7tTA
zu;eexkZIE2^us{xUv<T?Xt`og{Ikp>(}3eea|pMoF~>(Sp?Q=H?St5_MtR6yis;K!
zB-Nn&H5>g6NtS1mPx)vJIdI^B$2jcm(?#H%m^i|sFGc1jI-w!e>e8n18V_aWK9j#b
z(S;T4>A%QXTO7|!&)$uMa8^qyKrIp2d^=V>#n(#+>_cE5DQ7{d?R!H$iH=MDC<yIO
zWFz&?P5X`8yxsJtSNrnzQ4v=(MHn#=b#B=b2P8M5hq;_X>`$D0-zU51ge%VdBp$iA
z2KsCTS~#&9;uvgl=U^mp{F0qdIM0D<yw8jQl>aRAzhPrN5uQ*{f{%@!|1K2j4R?wL
z)%*kKpklD6U3Y*d_sZ>+2BsRWH`SU|cz8Oag2^M-YFtLc;x%1akJtmC2tg8H*9}HN
zbQNy&W^);Qd#Jw|rq7J&bd&A+Z(x+Ll#_cSgc#eL%AJiA*N^X166jZ`iP~}(H;T1(
z`lU_L26tP8{f;v~7zDKR{@xq3Y1nUv!QA>rOmn>++cT73(W~NxcB8~B{0VrHL3Q*J
z%J1SVuTJSIyelikL`-=_M3}Gf(w!Gv8w1X7yCP-81I=Fg0UcmcAg;j7ew;cSnFhd@
zeyZ7cA%<fIRtBQb+VK+(m7+>8gfIfzi}jzaFCcj(=9rfRC=JB6AF)Uz(A0|hbfAc!
z=e=Lzo!IVdOaSd7o3C9HIegZ9;UNzLZ6FA7TX0;mTLwJvH9_Cn<{8Z<{3$4Dw*lrA
zPxiOgJ!2_4WwZ0}uL6dYy}7nqp1N$|K!rmDx9w9}QmBZN`YP!!xHwU9r?@q2`Hu9Z
z!3!wNZ`_iSfg(l$0DA_-*KPVygt)2{=A8~Z1CRlmyRZ!9nCpW?g#Tob8Mdyi!2;t~
zdV_Sp-HN2j)l@YR;CeEAxi}dXYqkL02%g%HrQ%Wowi9qd%A#8BxeS;8L8e5<B;a$8
zXUALxiYFcMDP5u2&f*eg_>@0u^+>QuKyLNi%JZ0DD9$w`>WoV|Ay%S7mfz)scjqH7
zSRxWUIFyZ4GubD{W$2cVsxC9;RBYk*aDYpi4gpcu>U+pdSn3bkw+J!aY&EKIIN@;W
zT(r7{G-C~yHeH|pw~aSKDvzTYe$WZ~ga+4dOS{1efid^URe%icc#xTcsiCZe>ERz?
z&@DdRE1LlFv`Lnh)A<dq#rZHwg*0rXdSaQD#+63|?6<^?VdOHuvE}MeE!uC0G{uT0
z1|KVVoC1511zNusE7awojL^0i=z^8yuy_>b<t)=!;VLpQwrJpl^zM8JX<kFkGg?tB
zscP98n0EfT-xkwmd*RMmB-;uV$|0F}0SK4j2#A^(3Nmo1!j|9>qWj)Ju8ApM^+9=a
zH;s-P!>pM<@Z6YC4#u)IkZrMBE2eq+BRK|i*TMn7DUZ3mJU3Lkf9oVGq(XE!OyZTs
zHcMUvO=&LYD39NCRIno9bMsQTZ6%+=KuIa>8EL0!&xvIBcMox3YFE$I@Wl+o30u@R
z1@mwTvlV|wa?g^|ISF3zt4mF*CCR>~)&O6NbXY=(QoQj`*t_r^=%vO>fWyHeS|{$_
z-RzjVp{+|Is+M+66kTg%Y)ozM!R;M$D{Us%VNMvk(N4xIVD&?-suAY9b)a$ab<Xr<
zz{l(x_KqRVg#deWK<VH9VClUHK8Vhn<&6Lx&D%z9XByV_NhV+(i=?8cv%?Gm!m8`z
zE6|T9QL_?-6JuDk+^yvrujj$=3e+aDx%azG0C7<5ebJJPJ+>J-P$FW~7SoATCGeox
z&FW7jM5Es#;aP$RGU_4a*Pb>a2J3ifK_~p@InF$}zp?Z|Afh!J1KfO$+}r&IWh$!8
z1TPe+k8IotGWK_EE%#9x5PM-pgF0@6&|ir5l66Y92LR&8{oIkzFghCxYn181tWC@3
z;_Wk4xPYAMJwnK*1tG|%pG0BHB&kh2XM$wUFJlb2iduL-2I$sGMdh-rW#)u{Y3>=q
zymc3O@cN#rMi8f^A5t40hBD!@cYeRTnr)@g*T#iQu<DrmC01^K|A3+FO^?Vq=3iz@
zafRMlD8a5VPUzz4;>ZGj##9e3lP2_F!GLU{_?&;cWb23!p50Ki8#tfDd21nPPrjGo
zy;#`N_P%hebR<?4qoauS#cF2cZM!JV<%cbQX8Gm9-#=v~{v3+)BFvx8K)em3VHrIh
zIo239#KNz&posTPyMz9|CHsDbFJmjmKmb#PBDFH7U$cgAc8d=f^kWfSbYc<u=KXui
z1EsR0fav?66qQV{KTbX278r6L(t6V~GZB?jnPNFXreO{ly(<=%lP^NN<{ds-d4Q$v
zfKzBvki2ozX;BCOK{lW|yqtl5pT|b9-ElpUu)Dc$JwHR6m@dz8ycRtg;__-)N|&i;
zL3v8D%g(tRZ}x=Hd@>ewAp?IU1e$9SpV99&R94??lcr81^C|Rsl86BK^D7P?ojJwX
z?Fy0bcP<;H43XnGhT3^uPJxtp@G?VF-P2=5FAUK9s9Asl*_DPTQ1O!r8f}I+4n)X%
zO-nYou@s*(@$V~FB{YrY*K2|oLVG1nevAb8M?_%>Wxo_+M!`necGnC@DuqZ@JH-y!
znfn|50#K^R<sBFfquw9N=S@;Voo@N;sf*3&)1AlsV&0XRT_@Q+mrWaAEZ;#neJtON
zjEqfuF%RQUHGwxU8c_-q3zZF!phg|Mp%BZ$&ugRPe_zvp_eE~T(h%!+JUJU@eCy3!
z#3hAP(=B_(1!ARYW7h$PR;OCwwAX{=O*O>lULj8@-Smx#7$~_04OylHjwH3##sB!|
zIKVoKZ}GzasvutyRJ(L~nFatDrnXEBK)NzU0$M7!FWILJ8GW9po58R}p+grY%pGNL
zl9(fJN`6}%qkF#ggrEP>BN*>}{+o5b5MiA)R^H9x6k(vQatrOr{ga+-_AN@~lhr1)
zT!zdEBc2iPwbn%m$Yuz(i@!!kJ0hV$cN&y|Y$pHR&9)UX!k%$u)!+?^Dnk?hhDxjN
z-uLY`ZLQg-Q?xIRx|f~I>h+p_1q}9u8pYjT0XPwJo_HgK0b9W=4Eger$*TLDUs318
zwc_uxq+_3C%?BH=D<HF~Du#vFh%_avFgnfp5!y|{fD4aYF%3KnXUR1`fQc(03DYbO
z;^Vz&4ZNqQa<B50C$dhRoimObMP%uGqQ+_l;ZhDF`y#g#3gQ72Sd*W6xMEfHtG_?D
zvdA&;&Fe~Yw2J$}wb~A+b)17sVuer&b_1Bf`6f=r{Czn;F0E6AA;y<V%Z_e4_Sk<m
z5gKcvAI(4gG$LMQUn9omh2E>IEn?%Wajcm>Kwk$KQd!<^Lt85}rAl!M|FrvR5f2HQ
zRB|u}iC<wAcBw#P(J;TRcPjFR-B(318(Sd5$E80Xa!@M$W!xQXNk$!PRoLw%8~-|(
znWk1Q_e0DkT}kgjZFwBO3O&1YqH5grFI5_!%bB!4@@PAa{bec*h-;+DDxWk`;4P8y
zK7A5dL<F|Hba~3)54N*b+XTjEx3tfpbEER>qn*(ZmU8~I;i3UO(4PHQ<R@n?k32hK
zaQ_(3)%rey{#?6MDSjfBLI#G-d@r6jP_HLlu{YkwQCsj}2Xa)j_^G|2tek<8(4Q_F
zre(iRKK3YjajtBTdMN6wIuHJqi{$hlb_M&b!HSEFvlX6;F8to;J96}j&>HG$9S@uS
zj25H7^p;9?Mw7zIB;VEYaw1UE5Hk;RIfx_%*lU2FsC2>KsKh%=_zl>ZG1<bye4h-)
zrdqdsjy?p0;sjS3s)fVN)*L&=5ba+K*x8f8(86htPu?z7Y)-V(T!i73vSA_qT@Ze^
zE778FmHy_8Xu>Q37<e-gHQ_@B&*jfMLpn@ZU7qMm64td%YB=w?yoEf#*^S%)6^Br9
zKm`1JgFFTgNaBqRiv@#0lZk{8@J5@}FW^X4ZJ8!O@IT`X;oK$Ewd*j^jcSm0?KaDt
zODWhTxIwSj(zWmXvFWAnBa}X&0vNT6pzy&D6)Zq40}OT|+!zoJO9R9F^f@bhI_jA_
z*d0gv(N2@{c=xSaC8wk67(l$#`|5$QH9@0=A{m?=0tux6vn_Kng&xl8QhSzQH%tx-
z%eo8e>_Z<T%@oE$%1gba0jG~+;XPBg`CkO?X%qjDS6yzo8K`3|Ccs@Qqlnp80{|!t
zl!s@^u!D_Uw`7YFJq@9iKhQbzY9&PnmVK+4f$cBKJ+e-*txlGIcGOVPN@WA+q$Bsg
zFr=I_^qmHjr%8+39++Df2^89|>;9sC8oV(kA3l+vO*4-&PZihh0&W46ds%udN_Ogl
zXf<40`TyfG#j;#ck%3@KI&3Bnt&vYbIF&4j_1WIQIhB5vfad6;gC=^M#Bd5ufus}x
z{iG1-LN!q;bcnKPA<y}Mrt0dcM2Eg?O3qZXT1>z2huKax4i~@L*RTs4z;!@SJLDn)
z5H!X!1Buw7{4>1BIvFD`+J~HvOu-W#ki7GF1!0J(dZD$IQNhD*$p}8yrp|PbW=u%X
zin<5R3(-u!*(0(#JT<H)e#QZ{I;9(aiu!0xWk?fLVPCdrNZHBn?IM6GNZodMY9^ed
z_#y)g)1SI!1h9$Gie2Ygt)oS~G>S+k<c7;7ie%IyvXLgdjWO&@sB+WBkaB`gBs%wr
zwLvhwMLkL-l3cVkeN>UloJ8u~>TN|PnygaFwS4M(-nU$0yTb0{0l`07v%a!9JE3H_
z%xGU5iL<w+W&D(6BJ{<nwH@sbQ|-UEUT0dg!l?)ZFBm$&sxU*9d!2EF4<Py7IDs{)
zW%e2_RsHl1WcmxN`D^vF(Dbs%&H@6(NfH7)`^l_>%oxw6IQY&82j7R96HvrkX%c31
zT|d+Uo|jOp-I}<=x9@~(*Uac*)N(Pt=uFfLrz>6ft2hey4Vp^2hn6X4`Q)?a3njJh
z@=r7>xF~QEPrjh?S{h_*_id`7fVj`G@imFX&s(3#UZE`X?WtHJ)z3<BB#C?YCGm5Q
zA!XDv;O5@<YkN8&WR|<LUrIBZOCjBt|2?^AO_L2?htvW>{=sBL*@gn;KnvJ0EtR-x
z^#1FR(BB+CTH{b!aY}|3V+=YcEi9^pM~XTd{v`iyqf_n`25@;q+k){684{B)tgp>%
z@bqgg7aMO1gEDvH8NJ@zPP;6oiM+@$Q=%N{O#yl!D>_#Pxi#Wak|QOs?huzefY`0w
zY2scscrXIn@{6s~mx#q+4Z_A4YX*=s{RuRn7sQYF-a8L=|5hqA8-5pY1s-tqpgDr$
zlEH{Y_$^&l^Eta~w5D<8mTQ6>I$b~RU(uG{2mBuNC4u^rvta46gK$??pz(fxDHrJb
z2j^(nxNt3=+B)p1j}t%B<Q;LKW$F$UnC9uuvp*$Z&~@L9gu+WA#ybYIh}kwcM^I~C
z!T=Th6SeMnL*c^nvy^?1C&2VvB5uS$Lcq_s$C$?`uqzU2%Wmyn%_BK4xxBvJYF?9i
zS^P@QNkL0)2s`?k_HOu^UBNzNdc@*p>5fuy^kAesN~T$*7i8B*;b{{W^2To{{+et}
z%o;umIVYY65h0Zt?iZ80<#ylH31;ZXq7T?G5*#Eq*#m38XS-*K{d{7Xx%H2gBb5r_
z#}lbke14z<YWRe|Z6r@RJJ`M(seBas$i-G(jOPIZg*R2bExi|;n*@*&e*5p%!rJ&U
z)8lp>Scat}z<bTy*9mjfGB*c@qU(^J{?eP@kf7)dJ53kn1IXV#z#falZLS_{z2+2B
z<QobiH$Fy^S(&NUIP6)~L{NrL%b^mU@g5gEu}m$2=^K3!4)A7H2d4Y$6;aJ*`j|6H
zde?Tsi>5Y$yCP{+A)goXc)of@QTlCA8y9+Zu@JVRhR_*k!k6SB^1npP-zD06D?%cH
zD8T;QkGvR|9O-Zpdq?}imsr$pWKcZ@2}&nh2VZzw*Hoi6$Ci9(>fDpmdEm{LsCE+u
z0;4)Ht=N;qhbP{F!!gSXH`;(8f49xF<0_u5vx$qqmqKcZ<qe+}<ba2udsN@&+n`1#
zarz#$k+FuM_+{k}vbe$ODA3Tz`j&1gQcyUeKTOPq^CWP=BeHq6v`Jex4w=_yA#vpq
zVGvOtNy@er6!^x#A;vF_y<M&bD^ybcExg7oHwB|*^0LgN^V6Vzm-saf118awXz*DO
za+hGHEyV50kuND!XiU_^HLl8cy!e!2fMDc}nFun4dwNd^P#C;iw&zkMO%j`lB|UYh
zIQE)%XYf)q1jY7#)aZFUMIyPpYMtiGk5Ex{IB##J985|GjApsA^KJ`C0lit^<EkI9
z6h}hs9+H&%uqq7a7e+=tnr>y5Rn#+ma>!;qKg?tizZ)ehTx?2?&<M#nZ4jrV(VB?z
zv0aTycP8q?V(_Ae_rR?BKMcOetKQ`EWjnItkGaoPY|(uhciJ;GJ!OY|jS;cZ<gp>(
za+DVUW{`>ej}=WohuFRzuj;>sDsy&s@Ee!~-V4lIbBGb0B4c$E=`J32e%(oQ(=KmR
z^A_8SLXn1%SvgUgV_4uSO>6Xq0Tr8u_@RURkkY<54%H=4WMn;C%<l%CU;v*$X*@+I
zytMYrIj=!Ew>+#sdu>pCQ&X1%7WFk<M7x1{MHSR>4)P3SqLS?j;M3x+GD;4orEV1D
z{I<q8ld}n++RnmSxhj|?On{H18j1ke09VEP=@1amW-}G|GC;o@PD(t+@sP7x&6?X%
z3Ncp%tb8-<!cR`Ss?s<5em5rC(*&HcwJ}jC6M}|AUQ7`w3*t0{UCK^G|J?1W8LpmM
zy{;MA5NM=MobePMln)rsTkUVmG7p<ODZ9(6vkB+O(@a#8h3M#^N@e!gv)KQ>75+AD
zzA)QvyA7eHS^^jC2I2HKXPuo`s)L(G{^9j8wRuJKMwzuW0)uq#flHl0CT4JK=udWf
zTV#^jD>m~>L&}`>>$qk6KoP#o8knw&jqm|f#kt}j4*!z=;px;x;kwL{OyBwJ8hIzM
zS_*a6Z@;+b*>!k3o0PV{cyN1n_?2AlN2?gc0$hT`dK^)UIEb7}e;WttqTq^|*M)F?
zhcwg0=Nk5PTS2cIj%~XsAi=%Y1L@~Wr(~-?qw*aTK+h=ce8KF91N}4m{LQ-5c%YJr
zew=uQF-%5lON9qz8B4L2Is`#tZsj5OF;`#{a;fLV^X!&fhPNk81RWV@nTC9>vKdM~
zd+0jWsdNUlwa<R1h~K%G`iXeiPS`+6XS$M|DBe}(8gZa}4>`u|6dOU#bVA{^3vkvt
z2pyf4uD9o8iYXvyP9m7dt}5L>LNnz)ZFX0N)oL(J*Rl`f{nxlTvU2xo{DRVdB}U-1
zbPt1*wqrk^AqVx*gAYo~<=mmyas#7s^PI!Zk5k5xIUcp8O)AzDrZThx|JH^$ghipN
z$YCx#(ZdEPh9-Vyx{y(<AHt>&3tFwRCs3PR8`(Dz+*Af>o6`b#L*|tnQrh}%hKg-p
z4M-AB8rbRuA{KL;D)H;;IJ(h=I&Cg%GtKLlo&+~Je#HH)R1EAd#U7-v@zF{W7nBXG
zzq29jSb!;FjwFgic8yI$=owHLP9?li&$7|g(B9%!!cHAnG%-|VVn1cw-1SIxsH|P~
zeE}{aigeCMoZEK!%)85o4cjuZ1|;)a|8S_e+ys_GWN)kHc2#t<%G8Nz(sV?<c<DL<
zv-L2my2_Z|^4N3m2LiSdGsvJLt24OMmqCBe04VR$@dL7Gc_5~8V{}<$=`(WZnpQ(g
zO<^7_+X$?tFRy0*)3KA>jy(zJeGb;KD7nR(%Aw0+DvuN+7Q0O*35ZV+%&AP+Ex_If
zUMtr#hcxepHgs2+!#rK?RN3wjR(#;osC@L(AW?sFqhjWgD4a~~69hTdyXb@d7MX_=
zys9m~3Lr~E%(+)|@2`kvFlXM(Mi*NTAGcB4p5fd^z5DkxccD0Bc$=Kyx2aT)xlVM9
zO;92^TYI)Bk_xjLz-3JqBk=TvP?D70k`U{;e$lQ<!`j}USvt9*dY}2+Iz9J!pdBu)
z&G2l1q%GOSF_O~N#Krwzt#!l|vS5c3Ru0vJb4jU3^q}S)Z!J6RDT%#LP*=^cD6#kR
zs%FhJ!8cwYeZ>DnrVz@3{r}&{)c;j;%(0%FqovcW4<Zm*Ge5khY#hsx$uNgIP2Zsa
zzB%(}#{gV<6eyPK2g{DC{Q&#it5R0M0AB#m3e2k2^SJdoc<6b2NS{ss!oynLOvT7R
zFrsT#{?rfyqIYD8#E9Z992}Q6v!7Si0k-&5TvHp&jtiqAbPzRf#}R+*(v@MOOq+#3
z1lGs*A*m+3yP)idU>>GH1Iv6`>b2hL(QGEg2lTeSa=~eM%!(;qbOs*5;QTL3)%6TZ
zYEKE0<VgX>?RT57(+Juj_TNT8OM@Z)nF<1oGh!bW1M0_533;lI%sudCs-n`HT%F1=
z-YI#EMlE}}@VO)FFP*M7As8mjp3zB5)ajD+-HZY}5vvAymI+zml2ER-+K&Q~UKW0s
zke6{BRqj-jb0ko~poHv|@Yv<tKf)T}fLPB(?*0V8A($pj%WqGz^~H<9%$)6vaj?WC
zWF6SDyr(?(GH7-t7>d{j!Y53cokq)#ShwDXs{}pl%-!Z{|0*=0*Z?S@_%weI_V|W3
z=giOpKq$J+&WUy_v_CV^7okUIeh}#1X1C($`-i=1eCB-7f4xI`a($P#yR2G-p4x4Y
z_}h3wDEODF`TchjHTciMKg&+}4_=9-x0e<Wk&ogZHIEoD=2t-)c8P6GP%_;Hr8pji
z!guDkd)H0cwv%B%VN}x+W;~~f?-8+aAhUa=qCUqqD5*zCT+eVbmQnj%^Um)SZ*|_6
zf;_k}Cj=mKsJy)g-DSF_4BxF{T0oP*`VLSoj!tIDT$lEa@nYL|9c8p`3M`g1kU<E2
z1g4`MR<mkEH;|w&EGL<WWvO*aWih--ev3O2{EA7?A~&k7F~eQ5>VxYgAesOmwSfv-
z_7H5C1>y!nVQ$G7y3+T-w9<OPT;J*mbqev|W)s4XoLc-|u)i=B8OX+*MD*3@r=ZN0
zCI?}XmEBtN9i<qn>@!opJlm`Ppqh0z_hrEPO)!IZ)q8z33m0<wK03_dq7V2mFIqv;
z$UpGqJ1K%NjqA>1s$T#o0h2b5J~h`@uGx+GUMDnr!kEK>`+S8|ly?KRAg0q$g_v!;
zyy}kLFw14V4_X)6D10mYImD<67QHTT25m#QQ*n6&wk=~E7zYCg2A!G;j|^9OAXxrO
zwggWMIeFG`Hp2bC2~=<wAhrLKy!-$30|SnI^#%o;TivT9GR=};^D8tN!k;PRa558(
ztv_ZEo8ex;=)<RQW1vN5D|^N1fkpZ`_aYI}0C9lfN#kRyEdJC)TC>$Hl|SJ?R?Ng!
zkd41>G9?C?cdzNAMR{%8St*pP5QQtPx{lz0sB(m`j#^3!0%cGYU<z18tt!yft#+oT
z<qx^;9AyS1Z>}tBA@c|9oXkw)_Lgx-6o4}vft%<*>PGBhr~p|bxjzoTUKUyPfN9{N
zp(>M)Go*RwYnid(*}9kmEh2g5EHA~8!<rIIn`0|PN5r>yyIS96UQ9*46BLnnfa&XB
z7wf~0=^%?`!h*#G=9)8)4IE>aS+__*wkmx618f*rGW6Ba93|{I3OoLRinY!YsR5k=
zTTEpGQ&Q}SofHsW8i7VeqMB1V`?hX5Q*112MS1{Ten<pQnV9{hUCCJ&nIdH(he^ct
zvYU18L)$Efqy89J(Z2gvAcijRkNjylfR&I1jOyyjfr6Z|x!2>C)N?b)AkADkQ4RWB
zE<M(@U3*qT!~K4RCmh4e`Rs?zS5E#*#x>Lzrc|j~WGC@W*qY){k7Mel2u<p3iKE<e
zg5yAD&##y+!`XnEM_BZ=-p1SvxCH^S^i#Ov!?v7EK&j;EBLK^wS7^v(HFeFdm$Ed7
zIo!)3*o5QukD-89O?Q&umpu3Ej%N8W%=W<Fg;BuA^-<u<E+~u{sGuH11+=?W{~^2^
zvdV@*q3K$t(K^KvW7Z{?8??66IdzyY{GaO{eh=v5zdvHx;HVPVH|+M4^h`%N|NIZh
zmryjHO1E{XIcP(-a5Z%m5$K*=Y(|bLP2Md4q+}$q5WzFN{|tbg+uoLjZPA}2D5X!i
zc)~h*V{(ade=WR;s?$8!YqfvO@sD-etq@q9Nx)Y??<)RblPlC)eKUbU`wEri2>AX4
z$EripFyoJj##D$Gld_^>GbHBQrRBFuw;_UQx|s}rj*%+3p}7?tC`|;TmcyV|KdhX~
zGKx}#Xul%_$oacl<@3uQ3VL;ZQa%a0rO_H3DQ-AP^*f;$1K$)q3SM@js?KgUA-*W-
z^eJLe=37-#3sx{1OuVf<pZTV<;}nigG(1n-TF-Z@Xl+RXcFaBI9et|9lUiJ(x=1g=
zCQ)U{r0uTz7FgfPbl4*G<^Pf#3cs&x`^?C563FRzM_<g!jj9b{o)h2%?h&Y?`A-ot
z<`*v-$a+h3OJ9aO_vl@2T2vfD45)-i=y1n**OC7dj79sIX6#b?=<M$^^9z??`{xmh
z=(BUR3p}IGAtqUf5B)q}&L_XRFI*T0B)vf!qQ&ftll3jR-#L3nmntWY>d=6T$}iPp
z#o`FLqmKPu9Nl$4`(1Xa&PjER5rxnpyl1++2Y2;VOuuhfn#L=_>ghzpec!NaR@05)
z*uN^Z29!}kk#BEcJbJ@tb%y8>?1-1^Ak-^y*tIgu)*|D=$L}&|?*K@Da^mk<hJA&$
zJP@_xk3fJn+m#l!^7ZYdMe|Csca{rCwygRf@QuD>rH~_AI83HqN?fD}^8)A7vnBlw
zh888F_~qqUs{{wcb?&T&1UPdiPatxUS}6pvsWNn?J_cLl#9fW*f#D)CHIuB^6^f*a
zhC#Yfj2tlU9JK3iW$jKV@^6-jlR0n?3H)>;_41MX$)FTr#u`7}L|wrWYNTOun6BkP
zC1=@#b`JgITB4A3U%gtv?yl$!rXiT=lAZU|Q2#RqxVj+K|MeIwt1c8W)E0*=)~{hW
z?HAF}hpWs>#2WkHPL~$nQ~i0!-4>;d7~AKQOcP<3*u6MRf3$J%?^v6&S$H;E$`hK-
zX#OBV5-PQGVd5OOTq(Ob+<5gv{fh3HZQUE$vSlum!SebUg8O{<x=z*Fri*m=v1<S4
z^CWO`i>qZvXEkX<o)t0qHBA7Ne+zAzcvM8H<2ze`z10G&`($pN4YtHQ`eq&<<~a0?
zJPWocYZPke8a~%bWN|{>IQvojW7dCU0*s&}gA4NSbJ<2}yziL{N=6D>STuXKmR%pU
z$37b?YHayY=<cwKsg0?t&tr}oV*y)<^cfSHVQ=Ov!mnfUfd^t}5;>`+p6YjiY^Ud;
z^zK&Ke&Xqf9luFe)(BE8nGsokSLXcuhS@?GrpN<~A@<K;IhR{dmDbf0n0!gk;5eGG
z?^3}>6$Q1nx;Li}b(L_knr?-|bVO=|=gubj*aN1LfSd9O^oJXR47zM7WC3$mbDG)Q
zDS?+_U}2gX8)g!1fzY)(P$k7&r<RL{2FUVsk<W%kS$L<6<w<gEcK?Du#1jDS36*2G
z(m9zTHC-(qdQ$kcVk_j)nvBZeQ(BYpm91knHDGEIWqLT`N2pXO%?x-XimLus*+oDY
zDR@!GRUk@~b*wC;1G&ayg>MaIVYW|d0S4O%9u_Q&w79L(koVlvYs0EXb@hCBOL<6N
z2hn^i@+Jo@PT#K2m?aPU_)ojtNT+9BES<$;FL1K$)!PcF9qm<+?AE;K>3&qp!!Cj}
zeoKePi>Mk=%KO~E;@+-g)^>+gHe+-H_zDlZ%`b4q8MvtLxrK0yPYI`Ax{ikM_<zmA
zGr0oY@eKB}-1|;L7um-+YJ=WYuE0`PAB^Vp5KpIz8^{B|XK9p^X0d)Tc%|8sO<zml
zH@oV<kvm>*IfGj|>h=-s@+7XmC87(eD<{7n8wBC%1Cd5*=GnsfGX?!Q0rpAe!*ruI
zo6Zt>&%L+-bO7wubryzWuA3X__jmOo^)#GyAQ0Tv5Bq%(xmAV^0%;!!FwOe~7m=Cp
zkScop4rP88)WdI1;gu?`uPwC69}}F38>vVaIIgAx5y%|4@M-D)kTT&JrOu&*skfI{
zdFmV}=vwd@khKaq$5YQo7FMqrTR{f#K(FH`U>6?s5#g-sM@F9rSx<hu3{9h~Jm|4d
zYIi36X~F2+{^tx{V3S+(DQW`nWML@849$Dh$YD@QOY|>PcU|PXSqh(|gJamGwq-cM
zK3&+Uv$%o=Mp1CWtjz%D(h^`s6=A!k)P2s7e+>G;E_5T{V=D?_2NH;~Nu;|!+FduS
zvyIFacc<jCFf0Z^^;+=D2$axUI<Kx=i2_i5dCyf4bQac7V}5b*@mQ0Sn5RS&itbtz
zpDIayl?itnbYL+OhRyL*p#N!G5KO>c5iOyJfJ}#qz9Y|gt{4nMe_A(5Me_F$vb8Ls
zfPBJ%KMCKnK_@!%pm)s<@*tk4(B@BNGV33@Ghud1(Lpf@zCEt3-WKC-zyp71?NFE~
z|5qZyZvlP%H|v@Q*RT9HAogmqmaUKD5RP3O3RkKdi_`uvGF8CRJ&XtabFgE^Nn>_&
z_9K4<{j{cUvf;`rd`)2~aR@m(K|A+gYt~qwA04ag5<)=fZtEg_l03)dblQ88>K>h&
z|IrvmlFp*}1qN<z@<N5n?o3d?osPPOlBKB|TjBpu_Kw||FhSdHZ0m|`+qP}nwmoq&
zvF%K3+qP{^Z0=cm-|znTtoQi|-F;Sdcdeu9tdOa0HZF$Z%^ALPOh19I$>}}q;v_Kw
zQj%*?AJUb4lnZ>`G=6j)TnL|Kyb`-MxJ_20HupXvOc+2wvPlc#&U|qt6sk(RYupr8
zAWZ-@d`m%=q08Bw!8N(q_vQZFFerzbG1|h^YdCoyhu62rMFUWM&e6z0`s+^Gp!q+d
z-@n*Is3xKjg_Fv2aQiW7)SM!G-Ramw%aPVdvuote{v%bFeDQi5_i6-FVCR;%1gFUt
zX)`t-dl}|7TWkV6;<hq|9JYz+&r}@6)^XfbsGT=&>ehmSThx)cvP(JY7Ap;(O^7iF
zIh%lH)j>+(dkj(pkLMdAL5x;0j-3G>GEZ&C1jlP^a2H(j`FAW91n(2J38tPo^g>2z
zt79hy4=`!=bbwjEy2;rq(;4o@FOl<rymw)-;J_qDTY$yE{SNBE$Zjf8SV3VQdEgDc
z*_=MQAC=_vd*<mM6|KuLTjt+4$$3Ym^16Q(N@jhFsOT3|$Z+>}jT>#7+^or-RNNZ6
z`fj$zOJ?#ZT3iCziAthn*G(w?bZLA_!6<$HU5NWC(B5L1Fk!*J4Ms@;7Ha-*Z|sWI
z5rq%Nn3^4i37s4u$kqA>6G!q25?r`ljTCVu9}^4{S1&NlEwMy;kvC-#Ilk8JxBWGm
z9v>h*9>>_9$JQ!Aa?IBhh)%$`pv?Gdq%B~>#n7P@ow8}r;*s#oU*CufZatf_QFW3_
z{AUtd=Zc-)r^6TI4o+cTZn*ik^RBHLwkFt)3nB1%l*w7urqU@HJ4U3puLGt#n8@sk
zLpBnS4}3qoB?|NXe>XU02^il0RUq(e;Bx}OE_o-RI!DlX8XjGBc=PXwI8)R^H~D`+
zAJ0J#AFw~G%wF_yV8)=2Gvp=#H(89N4h?zbTEWqv=qGs03Sy{wxhU?Wt1xK;yuAv;
zD1==Dc=l;!KT&<)bMpB=m^t;rFLZiS(eQ*UVKI7WhsC@Y$C!m)7R?3L3NSwVKz>{{
zFOARG<L(?Z1;_@@k@d+s$1jw~%4gQj)gnZJ`B{GxRgc*7tXJaymOvAGm017Y6c;It
z3sg)`jIDmVN*ids%z!_xlg()AGId;wNpzGY%|Kwgz1r&sVVKh00oGWo93{;k>r)FP
zPZWL@LOt?hk8#8TE8PgM)?@mN@w)F6l|NiS82ns@ubnUr&hTi(WIKCkM&L7$J9d-O
z--RhRm|VI+toR}x*@74Xg6Y|j3GYHDUjpR?;%Ag!=-ehb?TgQlxX5U65U6b3JfmZ*
zY#&>ung#XMBt!f54An@!M^89i#BwUP<Txp2Sv6UO;jZr|;G*?=#OMBdJ6OS4wp0m4
zNK>C{4A*g5Zo`l1mbulN){>Bmn`$+tz5`A>oWv3^HAURJZX&j9Y`Vv8Va}!MC%Qs6
zkHrtupm@qJsY4VLVBC#g95pT|Xp53elln{arFAMatKk^iaWyo6bnyipE~|RTt5R$|
zmg?Gru-JVtf`-d+HogvF_wwR{6@HSqBv}V3^-@VP>GfEy=lVWpQc~<Br_^q6nv3M9
zu#bTdrph=fWHrr$t!TNb5Y;(T4ELh5@rexE<l&eVdGYOGu9h6x*Ve1v$YYm-M+Ej%
zMXk>MYO%fTr8?-iZr)>fQ~XxpMXw?IY@U5bICm=!ba08QQnb)jv>PXHpl~UZ9=+CL
zvb4xV{G_EXN&dPL?l+AhHhwo+3^Qhu<O$3GRUhRy!Dn4`sz3ZFYNtR}R9MXI$xUls
z01Dn6hmXJA;k%4Qq{V*Y&^X5mVl9ixL~F~SmuGRrd#vB$okVI*Dp+|aGC<cK1r?!d
z1ze8rGW&^{L+u%T+y3OUl%3xho|dGAY(ZH^*BqUhul0noLI<a{)Egj7LetTC@d3MW
z$CVpjdwcB3$@_PH-~y2eEN{Imjiw)}`iXTV2*d`#h&PnM#&&P5<4?`S6`3e|$Rj$W
z;=U(cbyJeNT))^+&|~=7g4PK1h0fN@$5L8tTUZ>l3zv^i_C|xmC+W11LXpGj4(q$5
z#*`^#*Q$i2sm(2&{E)2ytKTrh0n_Qc<%CB*_Ed>o`FuXvut2fHchHfbYT>fa^u^rl
z@MFPQY*2h>mJHA-(VxMo1h7X6rre9xuQZ_@({&ez=``L~ESXkL9J2DbfX*GECjdwv
z;J-`(F%SIse~~F5=oY~3TL#~DMFzgi3xT#)t&U?K`sBzD5R+y_QD`>)ULK8+YV*af
zWQzv$;R12tFQ`<^ZL#8V-n5x9b8bMWAJ3|`&3b{WZMbuGTv8_Cuc6++SBR&l5I;-`
zXX&pr1_aA&p_imp`vA)}*_T&)YF4r_9fp#6=pIfBtVT|DXyWqe_MV2Iv;*$=)^Lv-
zG6tw|Q<2%nMjsS4l;;zZ1g)uX{j{RbYycgmRjkDu;UU$V`wZT&Sz>fslCzi@k&@MR
zim{BZ@05l8$5D*3s7Bx1_Nxa_HO5zew0FdBb4B1zT8X?cW4benfv+_P6A@$g*3Me6
zepR(Anw|fAVin)+$1`rT`Bidz166~HO%FcZ`6Z)UWd8n1pf@{^KEv0)Je=&Tz`UBL
z><>%9vS)6XOt{5*4>+}pQbcZDcr6L)86hc4u*U)ou5ztY<`-UWr;DpH`UU)ov^hhH
zxeK)YDP=xRw~|bs_x{@wM%zRlW~CPzII+lHDXlu*8VGXDQzawJjJekEq!eTIqTxnP
z92TcNaQa}tGdIZiUuYX9XZUAXul(3OG>mg4vnoZDV@BpA`dP0x1X%-j7Al#!Dc%Js
z=u-9=*A?j~I3xWh09X+aH9a7R;K`JXjrN;HBV5N)R_oi^rs^Zq^R1mm-J6cQ2<u>F
zcbX}-61XQ+bd4Br_>3c%<dl;AhCbYKaT9?D7XmD*$ln`{>eqCKqjcM?8j8}<a#!~f
zQxRF(%;_|VnYc=0mrzA0sbu@?7xJObectyAy{VI#N<*B!GGg9<fj9|>i?tp?OI46$
zIGa3>u5u;_emTq^c<!DHD3rRt+uj12e?G$%peXXkf#kb0onDT3+s-h?9A`pOiMZn8
z)S%5XQ9-C<v$8?iBqm&~x>j|}UA#Gvw)@z1bWhQ==E5`M>aTqVy=tG`HAb(J1`uIT
z63NDsw6A5jOwPlWT_}Tz`l3te!h~E<r1<A$Lr(hmxx&HQ@e1tr!lyJdCkiC8=v<7#
z!^B`}Lc`%zg{Jg_^;%iI9y+2stE|Y_4EI_`_VU<cl#g0>E7?siFeQO#$Hu-qU(Q_>
z%(|LeKGC1f!$k6@ih(@ctsd1#D2wGqSv%lpuZ1}1M;E>~L!!j{B=Vz(&TE9(rPQ&m
z2>^b}Uix}G-y^J?lC}AnAm2@Ff;mpy6aXf8mGnO*Ms0JSkFL(b1&bM7L~ec<+N93@
zdr5w6lRvm0P=0M`8q*I^6-5HP&#%AcsC+w(UVK}VYUaqM8-s1CNP14v9x)h;*>GH4
zJmcI$^sQ^^H?!SK)vnmc1uMLGn}ZR)1+e_bcE|rNeMkH2w0fbRxD*Kg3R4yz{qbTY
zSeg~!PT@o%(z_{C{s<D4L~?SzyfK3urvLU6Dl6+_9nb}F7pw*syiYB|{7+$sULeE&
zD}_aG5aC3}2XkCF9Y+)R`^0KM&Jm<!k7yrXZ*=U95Y~48#R+&`?}s^-5#EmwWwFhe
zhw2zs;c9w=u~TbhHr3@yy`%3K%65dF8BkArwuY*{8I{5d3IzNfKX^S<>89`9zj>Cq
zPG8>SN*_pV01>5Jj?lUAj^yl!j;cIdJr<;SNuAiT4SX+}TcC_`A>LU$tjRtoBAslp
zLJ<phFz^5KR6_l&@6YB)SA1mnSSB#x$ybuOYVF`H19@Ow4M&5G2|t&7^a_ZfR=S0{
zLpYcLKpgFFv$pd3^P`LWqC3D8w_+GegecQDA`c;FN_g(`IB{7|DXS4l&z+w|D+-sp
zBL-&-I`usd-+ZlENjm!jG_WX>@Xxxj*vtGxcC&;=RXfmfATld+6`J<7FTwLCH<vTM
z6V>fN0bk9}19qb<13P*JhQ-?F+ayzy(4_iY$wL4nEi3^A(8p_FW-VwwY_t{>Vgaku
z-B-8hnf{En{n4XCx?j0yR5@bOk>KB76$4DNXfUJa;7IMJ2$5UWdw}daUGxhChiqR#
zoQep2js^1?Z@B*#WP@hlcot;mTOik3)kU~t8S2KXmO;#0nN^~8dv=#S2sqY`jEF3G
z`-EmK!&-KXttQ~xd?>CM?GNfDO*R_^ebG_<Qw}L&6}6oy0mDAUwZ-$U$BTQccRE^w
z|B?3E?w@pq##XPsC3F9DqKM%2?*0p@8I@Unz!Av3zwbtGFv!SnJ&I;pb|9(W(+-xu
zJTfolgko{#6};21T^F@v6h@x~%tuFM<gW!?y!X4fX<NYp1jDrU!YofY5!kuf(fY<b
zc$x@{tvqRj)rS?P&r%+J?>x~|%z#s-8c-|AJKfkE&M`44dP4BY%NrkXwEt5y67~OD
z(c@5QIbdCWVeK`?dA@aiR5Rcw<&wC^0>n|NSzOP<q;=`>FmL`2AeSt^RGz<=a;bdy
z9R6lpOn)A3zP5A>qNKmW{23^$%3q;4-mIDEHu7gvd1@db5n)BELPrz{N#p;`fVH0M
z;1iXO3yqCs0T=4b1+ri-S{$eX(~m2ALeV!gvL>VUEb)FJgm}?~w)x&L{;MZ^Y-f-S
z=-io7^=#Lrfh9)-@#S-2jvL%%j7etQ4@3DDZJL2$ibJKoLdzWzrm<<upt~&W@jX?w
z!|kQu*_(%mG@S(ow{$w;<hG`2WbV2a=SWNZ3}&?D?3rRPy)@W?M)XT#haO7$SDfmE
z_ZwRgO8AzbS$m8}dK*Z2atX6f*{ULMPS>s<21)_cg~@DCzL9d&!S4PlLF0;-N{t6_
z29-5s3KTraRJFYgSH~g+GUo<7ho(u_7E`be72dtxOncd>$Yk7Z89xXVm|!E3BepvP
zVU9xH3CoF!AfP2IOf{MVO=$mGKvIodVmG!H1A+qoZO7V{Qs6rvcOumiuh?$<_b7^*
zD7E;qYYyqWyoYV$W)zio-W}xBJPCBK@|+ga>UMsy1gJAO4%`H6;4}7iU@L9s{X>{g
zQ~sN(M3S}vKFD$t-nVW?%D!BOyp`jTjPnSG8mNsE$NC_RLGUZ24ve)ZX*qp1xD*zd
z33$?RiA{J7vf~lOs=*%7;k{e)Wl7{n*QVgh*Q!<BUwZL9bkGR`l0{P@TgQ}FhSMHS
zLx-i-zb^Jn`6eX0rEXuXUOseEEk2W1WRj)JAdcWvI<U$BpzToip~=iy5v-{CmV0~~
zM0-q5{JM78B8r~D>&RM+NnFM<N&iro&l^%#<@)dZ7*42Jjsova)SCaJXaLCX|5c8T
zk$Owqn=Y%U4QzTK)v*7IxAi_@2MwL$EU|x7?Y3yPsif_v!wq<vBgsLYg~4=CeA)DW
zhnXjYH#+x4;*E-d7(BgyzM<2HrE!2PO6LQKM=+?(Id6gITKEhlAp8)xe;MkxX<=(^
z)*g8m!Zr`dJ;CMoSTBn9wzY*x>j~f>9*ccHw})!0)KkPR;g4Yz*ORIGvZzP0SJ2ez
zEvRe4+dgi1(W5ITuVtLGxKtz0QHoX_j&K}jhl`_gUmbsI-FP>Cr-?rx-Wn{Mub*n>
z59*61Q?PZ`KIoB@N(THpm;J3uWG>SVKL~e2eQ76q-u6mdZ^yNsv<WHO)_XFj_aYQ0
zYjY-IL!A~;6`%-~$$a7g!P$Wnyo!Cs?ccGCU9y4%K4MQ!#NcU72sXOvt6pdVbb6^`
z#Kj5@Tu8m)_evT_U8)97WfPMjW?zt6L6(|^s2~%{F+!<FF&Bo?CQ|d>=}X7ID7Q=B
zQn*{J7rH+p#_|ny$~num;%0PLoP5^6n!FZpIeLJiwuNb7VGiFp>p-D1Uug&=hS*4c
zqRI`42)8q+SSq`{kkqwi-^6`%fDo(mRjy`aAZdTkD3Z`?8j7kMm5PNzqK`^B-;p(_
zjq|MY2N}181Wg3A?@1Pekf%BAznCW7b-<@<jU$gA`UgzbB01i!V=o*vk$zv&T!)tR
z6V|tsP@J|7@VpQShpo{F!X3I%Ry%lLI>^(92rUE_Jdy!p(*(*%dYeO|S!O1F*4d%2
zTpnHVu0t=S?52>ctGW(LE_&+xy~m0yZ_Am^17i=6kw$ak?mQ~}Pn+P9z#acPZQ>Hf
zL?G6p>3rO|6v>n?pYwXpG82)aA*sxn@}|yg-~`*Ll|C@nDlI`efECRZ_R*!n$hoS<
z0-}2IPjy+VTLR?NjLy@NkosTq_;ujmGc^<nD<D#rP}RXOfk)pw5dRX%J^DL=*?f5$
zek)@truoD38h&1hpgsq$nZxZ-=3osWECqE>dH(w^(k|W#9#;`|Fzt!pV)El&pWlVh
zzsW_}LdENpT!HgYA=SfY#?ck*hM>gua|osPv13sQQez!Y`<F6eL#V(U6l7opsbYJ9
zh^KeQQeyzUQ}lwDz?hY{eZ6!U78s*|fzszY4rdVOy^lx9_x8=Hin4B0mQ^JiOV64t
z@m@NOE(P=?0(_DMe%MydBe-T%K(Dwrbtt9;+-|iF278@FwkIEm;U5Y~ruRua-{fx;
zhfJE*!(G@_Loo4?1MWgS5Wv;bY#C#h{h)aQU6hschK2~kG>;E%;%7du*vqlEZ(O?F
zL@_nFUw57D)?LdxqveD$CL{?s9~<8n30W2|fS5o3J4Wp+bVNNMe5mefK|M1k3%*Pr
ze#-y>C5q)UCFMc6m3%jh*_N*%jjwdxmQ!%&{(x;#<gp(u?X#y<bKD7Te#~4no(PJP
z5o#{}=boUPj5_kt6c4wvaz{1O^lwD1UL<hBbcv-<g&p&AaZ15;91J_W#L-0Z4#SqP
zeRfo;<3%-A0pTFM^BBk05_4@NL`snw_do-n{Cg4m@l_zWN5`XO^>0H9PR`5?WZMe(
z2Anooz1Z0raPhbViYqn)TCE@!DyszU6(Pd2Yn}pK0eq*kH+-d8nYG1!QHtRqNnq|X
zzhq*65_c$MBFPXwXRX8JeGsg7q<6z2RmB8qZ8&t`T4(Ub*9Ccu*DMiU&Ez|dv#6=A
zvAk6y8gJ5rj33Z@@1C}GI5x1zg<vKCWWLgDNHjk^o2WSZXXDFb_fz>B*oK?!=)!E6
z(Fe@M4-{vTcK-|S&^&!;xd}Vv1y#+s^u-&dvb)2L>X1Dxe#m$1T$m*T^NKhW>LMvc
z=$Xhl6lctVs8QNy*gWj4Y8i{ZeA{iM<0I1}1aXYY@%1CaQmODOXl>^o0p3be@B<pw
zTaI_}a3ni=WX~e4wNaNJuV7`!(RKnMX7iM}awgIse6a?vIK?-|bM|F7#z0kP|CN<U
z>y972TaOWF7Atjn*ld~^7HT%Dn?eNT7kryq0?iAtI=Brg-no#6yY9m_YkhRKjMyVC
z>p`U{B%McdOH6(`%|JqGWY*$KQVN99Q4#<7(a%!`5S_zk@Q_Tpin*OD1KxBd-;N>y
z3CtfBuI$4NdD;vqr!N#W;=<p3P=GYX+e@z(xS1S>c&&l8$LLAr-if!ME1L2@8csd+
z$Widcs#9|B=HDq6JV882QH3L8KOVzz@Wo#$ZX3?lIiaojJ#-fzU5cmvVDs4+BM^33
z0Z+H2i<o~nysu|7sU;X06o`CIwFO!0zj|fEG=PyHo(T*v#H;{gtqjL$oxy2`^ka0n
z1SZy)`v~7KZ5`#o3A{2<^9LN7eG?*iu$uig!##e0JZ|4^8^AC;GH<23`GrosG@rN#
zaSr59-@-DVZCq6YJ_StxoonhHByuaRie36`WE=+L>hWL!ZVKT0SNlprxZKk)nlP<H
zDid#?T2{#fBvx?pn;2YS%re?t?=7Jy)l;UlPn}Qpcx&I(NEDerY^c3)0b_QtS(<ao
zpK34*DeneNM7At)K|NwY=DTqqms|Z(V+s%cUKsAu!hOO@OpIsRh@_<2)|lYm#d;W_
zG*K4zRK&eh4c)S4T<-y7y#UFqV=HkVqF3ytuiYr&SbHA=B5miY`c6b$E2J8qmgIG}
zoSoNwcq0{aVHnq&$0^sOU(&39SCk7C34y3N6y?5>y*O8J8uMsBx`YYO>vO=3O}?n~
z3dHg05!t7{c*8^fD&cV<X1ATD=9cz!B3WgphM}zH4QM+?#`ekfBaQDjkRq8Y$f7fx
zhTf&cwZhu%f;gpOd5?a4)Hf%T>b+y{96Ees^l)`garR8^^0NxA$UzdH*G8Jh%dzA6
zwh+?oElo@^JjAf2r}##hRC3BW99N@<Xo2;1WuV0$T?)U<Gt7gSj1Xn{B<Usi7cX8l
z^Pgev+=uhm++9$WpzqEhaW6zaCl0SALzS5k`nxcXux4|WTc3OKc{aqSYt$fjp8qyB
z8OO)g$A<jJba4Aff|p%6R-#bgnrmv5XOopsk!g!&!Q#E_`=;4CZ6#pSvaw3n&H5Zv
zmP}K%ElBi!yRHNT3}YG_!fa$GD^UgtVwZ$G1{Qa0p-r|KC|=hDB69~h))n<^dIBaw
zF!|Y?a&4|#7Ls45wz}u&Pi4)gxI*V;K!nuzTB}=FxP$hF1?0!3Q>Nb#YW0{s6S>Mn
z3DKGt1p^of%8m~nl6j_lXSQh!wC1+xJKc6hx8VE#GCjIA!}Et;MgtyQ6#JkDz=ivu
z4ic4NwWSZ|9kd!kzA=~KujDbt0n~^_7e;|Gw6@us`(ehwmF%FQ`wfG-zRh>B1R!eD
zr<a3-2d3o0=dvrKbcEJMgRZHrMqxp`?(TdA>~1m>FT+;cr$BM48_h9=1f8MO!_Bq7
zT0}%?aO-Z+M&hH>A+5Az9wap8-+<sF_`@Xu8(w`v`<TD`RAZ%`>JCpNjDV9)XDEw%
zuRz3<w;Jm6w0#v#_4T2GRc=FRDbYGE^Tg}KmUgig##V<3G!n!-Z7mS)2^dZPB9GeT
z4@PhR7wDETPovG2+Vh_12b(FB6bW?d6juGQPJnDFxB5+ya43Qn>-$iWry5q$qMuxa
zMemOG52~Sr_M{;rYE0}0;sxwfgmUl?2!P_j`Nb7wD5|}ZEZX0WS#|>xjz-INpNQ6!
zYFP4^|CW!#D6I5Ot_6?B7|>W_+;v=}GZaMzMf1P&lK5-&uPgB~cYGCEKf+bW?7j7t
z0jCsCy?v$>=Oy{eyj}e=+=z+NwBk`}q=r)B_q8q*z%}!bxbi7Ib2X<a*kHSYB1V&=
zE@W{kJVvZt#>LarrSyAAzG@Hnr0Zv%vAuy6c0G@10(U^@c@m4d--L$lFv;*TQTYTN
zJjmo$;QY1F{$kv0&+8g!M+NZ?sg)O2rak~MJxVQRNi)ynE<U)(nColJBXOH26(FJW
zAS@<(U`z+m@ckF8ou+hjbyvl$;~KXw9j3Dy^GK)m=%ZJ*^GZUY!07^mihcV=UP{6*
zSHA<B0Ef<W8I7i=!h5Lkm*sP+*5UKff}N2D=E)r%@Mk0IESs{2vpXLaWBD<E<a_>_
z;WS#Pn_6G4<luLg+Pv4I?BrhWeSjxyJrm*}qj;IN`_?mf8?iO2s{b*vQ?`3&<ao_1
zGPkaZs)TQr=fv%NG!wDYiD<v=YtFcQdZDVa_*fRngp81NT}(WCdj6!gYBEEImnY`N
zQ~Y{VVaQvBlrNmDCGx1mkHUc__;U&&?T-TuZ`faoH-wWbS5_i;CE)w3s7=6_diH8m
zE?-eWz%=P)qDfa>ZBbEC`)dJ$TaHYSO8z5|ekWNHM;@|o+0c0{FX&fUZwdy;)fnI;
zUf-K-ZK>?H4I4zC8-<SS&)&1bE9upQf&-=!ZtKd7tkAJJ;koT&wentEho0Lh8FX5k
zM5%ysdKcwyW!y9eyTFnJ1`*ztg{@xP&zvCKuJggldy3kWy+nL`;9Ryb8TsbNhE|&!
ztpF<pK>_yp?)SM#BBUjEpgGa7&8HR&yG$Ic_$kYW-znsN65?m;?#GLTk$zXCvMsdg
z5G(+Ep#r1)g+3^r!j4AD#_a`jt}&znh1xeI6K^DcJIB7-N39YnFn$av|BRL%Q7ELR
zgDgR;I3E<e+w#GOkzv8HW8rwSliHKQZ!)pD$Tb;ZE9m{_v=56&Doz$pS&y5>FU4<o
z4=Wbzj9JV*L}z&Y2az?E6LX)R9|R*s^zwBKk2~&}97R~B6$=Elx5&TDI&8UV69-9S
zGK5JL0FX(Eo40<Ac=vs|zy*z~UZLIsHZc;B4B(*+I7H0l6dhP9h6!`Np<itr;XmAk
zIK#VAT#>#n=)*y#H+JtFB_Buv@5RIhzMXnCR#!H-wxvqYP!Hacl#hcpo%N)evQF-S
z7r;6Pykx*0YpB14G>kG#tT7llScn@iYaw0=A-!x}svV~DN>7b0>$cJ^1-GSQEG>L1
zhyi>l%GPk|Nz%!?qJ(t+o@xoRpLC&ICMFX+wNP@!WpeoI3IUFkCkIIEA!eBPYk$=;
z^(4(!EV$f1CFZjg`$i`?3O1;{s@a9#|0@4^=+svdj}6)p_A#sTo*XNMk8-O095mTM
zmQNCg+j;g-)jmpOA`6S?Ocg+)U+c|ILNA9nDbAQecxaK~sI+J;*gp2dj$@vF{sh1)
zvzgA(U}vr6%X*N*5@YY(3U%CUqn4nN<lNP)7G34f)41#JGApH7G^^n0FP*(NP}S_E
ztTo{~6J+K!BJ`Ya3Nf-Vp*>Hv%z?03jb^rbhvwbYOYN894oDmkb3o7%wJ4>jla4&I
zSd$nC#?Q)Rx`+4hhoadG7taYYZ{)Bmok6(+6b0`3LxHM2I);9cR7~bgEb+wN!s;>O
z809)QTcE=ftunWS7UexbZi;3l%M7YQ@8m$g&{On!-G@_4`aK4Nyz^*<2|mm!t!W8M
z^dwDZ$2odfr_q@c-FHH=bn)com2(JdRK=1d>%lHpuwqG68~of=KwgmEbsB|<u$8$z
z&E6N`2EiVFzHD$71Z1FWQ2o&(b;g~nhd2cHdy=RxIL4R`tjFt#aQeyejEG?bz+qkM
zGI!M@t?>4YxE9Lw>f4Dzy9=1RU27Y3DK_z6hB-E&q@;CkuhKNx*@@Yp@Ms8V!Yd-L
z=SFgCu0jikk&Sqdi{c2Cf5@UPjLa|%?ZVPPUh-#=EsQLn0@3c*j<yWs<y<-hZBw^1
zaF#K-{u&!vb3sV&ymYU)SdmkA1)ZFD%S<e0FUH-^@|F=4cwd{|0b3M*Tu)jOHLqmG
z6m+0&EL`KF6ClXrJZ0th6N@%PGYFFYa38Ujb`r6{IwxHVEiAJjo*QQ0D8KA0s1uCt
zIOfVI&QT{iv8u*yyFt>J`dOx<8wLPj=)Wm2Qp<ZjOMPsA(}dnVr{gB`NjlP_fpz!;
z1d0}5$ZZ}qL*hc#%DwaeqsDdu8K4J~lUOnmy9!4{!X^uak?r^;h4Iz8TQIefr~J7|
zKSE@u?r{w{)-un+G~zKl2&DB3XlvKfl2r}(nePWWUiU3mQJdg%Sq&~QO3wnM3$>!;
zr;>P58-9}957Y2G-(R2Up>ZxM@rxNeI~CLx<Pub#-P|DlpdVuKajBuupX0z@k>qN#
zeu@r{+xYC40)YY!53abkU|$GT@2)gNS?9u4IWS6}p5002ceD?L>KGb#l;QoY64J=^
zcIa|r3c7nBuhT9R%;;Q+_&FH&ZCQn_2d;xBjh0{Zvts!*1C4-TvAOA!g{I2R8n=)<
ztew<XfmBh-FcNW}YmRTndm%Ml{VRtKqMC92SFszh;)hVKr6wCFM<e%XS1%()#ns|!
zNECkPR_3t&r1rW82<RX+i#hzN)`X8?oo#_dryxv%g)JFsQXh&EPs(q3C!x?y1wdmz
zx}k-==io*2#H<2P7C8m#)y!l}=FVTT!j)aUleC9EX-;yO{PKx9OFDZ%j1t(c?q>wi
zpa|*#SROV<I!mSGyF{>;P?<hY(#aveI*jT)uOjNnuE(2MZ(|j>&ZW>0I>I+gVL%wR
zRJ0qkX&fo`T1{B$mADCLu{iPbK;Dc~nrx5lf&T3v*c;S%0KI%(UR?y$C@Ze6tF$Z>
zf*Wi#8T;1C$|bU}rycP#vrx!zV~EBue^0rZMenQ%C>r-Sv5kt1Mc)VDfxY(QMq@ca
z=0L}|-H;PaOE&T~c~4bpIy1Hv);dP;_cl$_`^W}3M7w2y4kjl??QTKdd1KVK)R+rq
zHCFE1p}Zz6TP<vt515F&JqGtpcr;>x%QBsW0zIYCP`XTrbKqO+8Y)cu?*)X5d9t$A
zNQe2G2>LRset9(|qE|THzi&&**Fh6S!$Q!{h&e7N`pII*ds_uj`nxocG!E>cb*QZQ
z%+&^&tbDX*OYsRgur_)dwBNj$D7i(Hx*+kOw{RGGR-B@-2V3}*2*s7tLihtFzgs~u
z-4cD)q2Afz`q^J`k)E-YK}{c%YgXb6+-`TP!Dwth&0Ce<qF2_X0|UN7@U>hGf$(<$
zM}Jz7CHjHb?U{-}X#_)WZFQY%;XjL~uwWn6ZumfnvUSAwqV2q>mRuYgi8K9yuLM_K
zTr$7y8Tut<;UE9pO<+r)0okECs0-CGw*tF|;$EUIKzH(w27kVgRG&}h&OoSAmo2{V
zj$32>-lr*+PM4noxh{h3Q;x63bWsT**k(#o*B8HKnKE$WED>-&)VRZ^bYH4r6BWXQ
z(U9dwb=}#rTaA^5gGWvG7_(F1z*M#_j?dP=J)PgzTDCQe_}dWbzg|5y5n!ARV+e5r
zX;s(K2flON#+fzjE}T%EP`nGz$wzNEA?|7dQ#-EyWMl)=ZG{?To;TyJbc<9IlE*a^
ztt_@C1a(e%<lK>{=wRf`a|QK+0Ni+@;;|VXt4{r-mk#JS)Oz5^?^oPtzS^`1%_%>B
zw)984`uX=~3d4~`tmPMS*}p;W6cL&7?Lj$F5Av(KU$QMhm*|l`5aWaBToHeVR}<;W
z`-b*cL_uWz*d!&an!w=W-wQt*58?B-!#2jU=F*t)?~5w1Rfz)%yL_#J$jk^@fcToV
zXruhItuQlRVkKCp*uP=>#|Ok2FCwM53s|2_Q;mPH?wbNsR!nLP7Ls}HV6(jeWiuEO
zq?#QO)magxjzfk`N~58tzdOz7a07vAb)X(o7}~t=ea?-5{(FoWsACe9a4vPQ{U)Dz
z@=>d7T>Hrl;hG~54}x(!QD`}(r5`v@c2)Nj09;#2e`aL1Ho}&U5oicGaiZ*cG*VX&
zfj`$z${-&RV~q!Ue_Lx5smTDR1aEeTnb*8As1vTTZNac^leyo_<P1ac{5!hs*PGyt
zM0`=&NxVAq9B%!0B$HH^F`GI|ve2ys4JaDcrv~(La@Ox~KGopgRi43aCM9<BIgv51
zR(qkl6cQ}V&x%$?=Y`cU_D^hECA=7;i_)cSPmE=W!*xi-Hq;L*hJOC)wab5KiyxYa
zcy}b3Z7ELJu)qNVAych3hEK;dt<1O!u<ryEh+-UME&4dvdgr<8`M<Ny?ZtZefYOz7
z``lDS#=VvjQeTRM2Bq&$@vw}|>mqFZ6Euw<-(Fu}9hdk1K?5IlZ+eDatti{8c>XZi
z97cwd`P@kH^l44lTPAN9mKoVP!(5PlJm{lVs(|b?#2RyJ5gst4+lErN2Yk87C^#iQ
z@$I5efO%m%!Xaer=Uu8s5UEA~kVvv><BGIts%>H;2><}<LLzF8iq5hb>@jbz0<&R*
z@M+oH0&;quJ$W@{UKXKNd^)qhKK%_F7&4dH9a+|(A`$%IfDO@2#%k&T0xmxHw>fuj
zJb!4_o<$xpK=pfRi1jQ<R2)i?GsT8&h0AyeTurs_Abn;v-%7WSkc0OCN337gn%{Jf
zF|kO7=}6YwJ+38QDF&b4sV8IRvB_ckm*9W3QQ!lh{|Q{RP)o03dCym81%XMywxZn;
zPV`0uAjkw__kdlKAfyD7YFFbL?R^fFLWtx9ijol7_7f|+(aJnC$tg)3U;sz6nTvMy
z@pA&Y3%~PMC4fi%RTzl>LT{sy`rfVU2Z*Rdrz#+hyT<%m>E5h^v<w7&V-DHSUdxm+
z8Fm%zp(<ARUBPA(TqUbH=TZw(>PAKOoBk^rJYfjdxZgvX;chR0Tfj#(J9*)XJ>ZMI
zNwWAXnC*v5V{Cec<<y#Ke3FjiHgX{n$oX-}jC|3hZrLZKIOK71PHN5IBS2=L#0;|P
z=>HJBz&$`8{{xQ1k;vFYx7IQY9>_OfRHkLuLoHmn(6;{RBD`vXE-cmxrc$IbhWlia
z-V`UnhBck=tAjQ@S_kI-d}!{@uheN9@|)&W!wfdXKB>u46H?u70Q5C6Z#s1v3C@vd
z)*-fCAR*}z)w9uP${WU~rD+(28f%#jg9ErwcFUQhT?g-=$~Y{CWiuCAXXDSMO}(7t
zeBZm$J^o&Ir*@nJB$L~wKxHrJhhT6x!H3CeA|-A_?Jf}UlGhD~u5|@TF3r_ebyJMi
zkg_TZl@a#xMqr`^od}30v_EXF!F~Q|+3cgD<KF)f#30b?|F937Z1?qPP?*;OBxNPR
zX`VF1XSDFZ$fL4~ScDdqcnDD+&sjhOdl@>!s(PyILszQaY@>YdF^THlW`&Z`s=8HQ
zPcS~ss-Xtr><XEORUns1g-n#==uTmsFxhPvp$ndf_U@#WlBSrqrbeX>8Vdk!j6~fC
zlvYyi$(J`X-n-DmyhQ(L+xpdp<%mW71Fn$4iHqt4YukTA%yMvLhm94WCv@)OnCHms
zf~?miS5x>lG?<Lb0NOPOStJ|=_xlyiTIY&kk1>S2$+7kt*P>5$%m%zz`y-mpv}{%=
zl>fgN27#XcFE$}K>P1AEvagTvqPtyIX|Dh)9zF4rf*;rw%d{-@bZw4Y)p3z2n@y`g
zaHh1EJA8jBS9}QlW8s~NwZ-R>%R5+fKqDD+S6m@aN=^Bg3m;cYdeGZ8`FSBWwGo*3
z1e?RWWJ@g;S6f^fuH5E4lj_9Sjc+b#>2eGvpI=@OPI)CXOLmmWhEbO!kp!sZJv}cn
zFmG)2g(!45d%^?Sc2526H6?)XL0T@<CV$Xbl%0eWaH_Bu3U=HI{M-pnQrUf_s#;?^
z3$rOQY5FXM7nlD~KJJ$PpAJysLA&*USn#BNDvUl*A+m^1Z<9O;wFdg;R{`qDM{^%W
zyY(MbR2LOxx93;<o^(XF)JUyiS-mzK)y?55$6BEU=EQ)L9g|m-fiY>c$Q0<Ct=E@)
zVIDitH&#%tIseK{<6k%SA{e@(pIP4NxS&eyC(HjFf#YW<n_)bQRu+y7VfB6>w9`|W
zF6H5b^t(f5ma5gs?{WXxQADoq`w~yR9gCvCXRY@P02NToG0!zWG2gg-rUHXkn+ajz
zMCWKXNm(pkZhsQJ))N#cot9%bqpPD6%aQJN8jGH&ssAAfDSCD_z}pVcI~9B!lqb#H
z=_+Q_ac{3y$UYh!*_|E4%PyHUm%nLeiHq%u>2ymV-lnZ9c;Q$MDjBjk@<By<V}Fw}
ziX)dEV(+|(PGy=HwJuc?RGU*ml`f}$!tg_z8&TpMJ$rk-w87Gl!b3HjZUQFk^pD}O
z%<zpx%acHjCab1F3DctPO9(Q^eln`p<@2<H8ifi4AoZKuGTvE-c2=%lo(Ebp6i;<b
zn>~LvIa$sLYc}l5rJ*l6ZGlgYJq3hi_F*er(np~QE&)tIxLtGEI~K2rwZZ)B)jG(u
zZalZ3#ZzHX`%*zU^y26aB<SeoAch?8pylt;AZuR<3bC-tBB2^4@lQI;q@hY+y6I3(
zJ8;YoF|~=`NGE>wMpC%T6NzC4aCWd{`=UsG94kSWQZe#lc^PC{#ASUMD?8UbKAN{`
zk<;_|oT2k?<dRc{8zVcwV!TR=%Z^B>)$pLco4+AzrEgPmX>nBqCY5;>rkEbSYRsBa
zO`QrvE9#lQL$2~N$pgl{1(X1j-aHiNu(rlw7Q#<arOPJI+Q@n?&L%4<gFU>eZmWrP
zZhx1gt?<!1Ci~V?**=o9LPa(NBMtvv1*4fCV$pLadwR44i1#($Xu)^b9(`o3rV?Km
z&FP1}7*a%sKJM!DsIWh2BHC#2CI?6zUq-%B*o^MT`Ex5l!Xl<%R_u{T$q3Me5qG)V
zzMFJv)6VQvY}N%Sv@-@n@}_s7s^~%b5QMmngw8CbX;9fzx>LeZqw`Rd9-Fj~UZ!Z@
zwB!qfyWv)hI`uBbM4t+GUoRg!yyUZkz9KW8Fo<Gk5XELi5*MDs1~S*#k$1pG$~9z7
zZr!JP*@WvhBKi^;&tH1}+Th~bmpvN7Z&KG^W@-hq#e|V|Z}So#%|kCP$->=Y0i_Pf
zR>pA;=W5Mn{QzbdO@B7OcId%DR^)(EfS*i@M_Lh{TlM_-!%lS0VU`FSQu|*dLnMKM
z>H%?QkE=(^zYn2(&2zh(+X<-D2qnlv-9I_!S={7RVqGL*qDGc!9MO?qK~Z2*p>wZ!
zA~xIEW!7o=B>o`1T~J!i_ITWotaWwS%05EgC548xsVVDQXClvogJ@O!0mFo>`NH)o
z^$*<`af>R2=hT;2Rj`P<iMNBe8D2tAXnhfh6tHY)+<b00=6bc~BZ`_wxs^L3e*D+?
zeL8aI+(&JfAD04BlB98Z>rZ|5*nl1=+&<V-QRTj%_hB(q1)e97c`UF<(zzLp#52*<
z7F@f^MCUgUsy0FPfuv9ZpD;v_3@o|DGoWp<NL|5DppK_<Q6Q5#9c_O^zBUegI3)@)
zx>)o9a_Xa~;IfJSaFBO{4G(jcN?gGPbF(LMSYQLL{90VjLGOL6;~j3@QJ7&nhy((-
zgDvL9T?oNA&*X!NC$vI!C!IdcN{VHjrrPESz`2YbEOHlwERC00;Jwd3tJr9sG1-dK
zB6Mr(I|6fQ_@wOj5ebvba~n8zAiO452o!3^^A&kIALyN)6^W+On`0z>mS{begeT0(
zB=u;xl-y^)QZbu+=JZ8%#hosf@W^c@%(U~wl3FkEPBHkL>o4P1mN-W)I(%P_>1UQU
zd6=o1cR<+)jdgbuo>myooOC#Q3O%P4Hb6frpKRt|oWH_Ff7sH^pP(%ufBaz|t{gR}
zQ3K<MoXCw{q%e#+t3T<u^H-f%2^v0ZBt3)_j!Fyrz(i7v8&Ha9PfmS(aYxEdlYY6X
z0<Pp><wTgr6D|v8?p}oj68qDAbCzZ=rLR!&tuI<u1rgCJDYZ@)P?MzVbTUm-xw>yG
zdJi`Y83?=G_`}CJ`76#XRo9(+udYtfY(TTZYLWx!@{2jD3Yxw^!CI(v@jk=7*=gfL
zgGFO=eo{~M-Tm<Q0M7Tn>MK~@p9&2(B69yWlz)UZ{GucCthTQMx?o1GNjc6DZdI)9
z;o8<LQj=KdBRe(CW6%1I=_W(Q$S>2El;-D7`=oH!4`ut#!cSwEd<cGFl+gd;0sR)r
z`~Ph+JuCv;iH3o*O}i3s>?jBY4N3I`5PtwrH?4L9FLDp(RD`-!e^6agCNLfo{StC7
zl}p1@g7BO37h_e<lAE7qh1n@IP!_YmZ8!VdrZPi*+>)AD5k7&?_tj^9LVq!wcd)9N
zb(3cM`*FiwAVDP?a}nw4-8bJ`%^mQ6sJDCMv@s9qn61A0cL)UWw*{3Ik{j)G#>#1p
z6p{&!@uo$-^$g?^2FDsYE2ds;5wL|y$uHKIHk#0%FK2qtx-jmTmVHs)-7cf*Ub!@5
z{vO?2`saIRnV$Ru>XPh3?f8IABwwlDhojS?Bb0tU1=!qPjTuX>=z`nFnfYi&d97+T
zI&i6g6?M>1M$ugDgDgb>#_JqbbyK*{O(&AN*MB$8OK{}FY30Z?lG);w!?|!+)Ao&$
zBE|mOd=1D!I-ezr1XTyVO}cLRRUUJKl;kfxeb2N*t*U)05LrWB%fqSRl-DTxw?tw7
zQs<qQP5YktH(RV+S!qc_BfnDGpGDXn-5!;LHdipK<bb8aY6131x_V~~o1yq7{aS!P
zPO){uYTDEWI~<)+*=VjH(g`5&x;4~(SF5NB?odJ(94Bv09`EX2(2?Gbj9P@cHRh6;
zbF>5^CfuY-0dy;`E=9eHWT&=Sieuk3Gg*{7LvPu-t7&6D!nmf^I|o?tA$FV>=g%*1
zD`NrcB^yY$yF*1b?`hM+;h2#7kJEx4^y%mHUFB4Tu7C51BGnSK_beopakU!X3yl2t
zbZjGHDx(k7-9qH$^m;23c`bh#Uc;96&Y3>yUk$F(Nb>ahy*^H;C2vNRjCvPTI)kkA
z3;Y{zS4NRA1Y+Md&X|81#S#q;!;VD!h>5nhyk4mKJ>VD^9SXC%+F229-`3yFn3?&T
zJBaG^@Mi?%<#TvlK;b=+afyF`zRX7){iZ*jd#7fjN@^1lI<Bqs$VxnuWV#a|{Td6I
zY3V7bJZ{saqL(fu#2urrGU$3Ee`DOjX>J$0N%??S%B4d2Ly?nFm=meI{f#lu{78q?
zNU2$$2flcp2A0CtrP$oR!G<ZPuMqRcJBhCwoIUz`-wmK&@U6T1aXY{l6G+s(a3%Ei
ziQJ|Ls0wnTEQP&qDXrGt(Io)SXFEPVY@-xkcsh?vvCAFnsmvb)bqWEqw@vsitZ3hG
zS_K^($oCwF@-3-lg1KA}kpFyT<f`C1Y1qOGAt$`uLp;*J*UNw!1aRs*Evq6C|Nj1=
zD5Rt0E}Wpf!$U_3AZIqUSWeqST>~(#>%SCWZ1yW$dN@7?cBN1OC`Dc&vh;+C&LtsL
zW25MFA%5Xl*lCe=<I7u?gV2@yAU3}Kn_PNv6!N#xL|ZN#*<DV5ueAs_#&}H`#9#`@
z6klrCVR5zpQ6iC#Z?JZSnVyiW{~tgq%S|Xle7m>~XUL=%>3_MPH3+eq+n)%zkNe8a
zi8FNQ3<!Lklh_S8FlT60!XtgR-Cl7y$XmFWz;{FG4se)?boAb(-vCi%-g?@3OB>;B
zxi{1f#|<RiE;iB_g2J96L|w7FY5Dsjc1hcVQ^W2n;~lOMK$Ok-*SSO;)ph9-dB(d6
zKm6{r?Bs6X@22Z7XV9NDHQN%~XXc}=GgiO#IgzKL8e?`e)~h^#x&1(79+k0lghxCi
zpUCWB$yIJqXlfSoD}0e<{~O-1=$fm$<uKKvD?0g<Sej(r(6mFhd0#YPal5W1v<#y)
zXwPolDC^VWXaaCfKhS+AqLa5qA0i$<)%!6c!4h2+#Aq$o`Oe+2Wj*LH_>Ycz%zjpZ
zg@I^iwYXPPA!maqkrDk?JEu&B#EZ(LS+Tc0j7~N-l^Wi(y~9bd!&FsBvi>m=)S_5^
zvJB!L5$^6r%-r^x4G_J4R92YrUn1W30WK?Cc#orvrm%PGHBL@U$e|GvX9<xo5Q%%<
zWN_<K#=zx={2J08g=I`m<RaeSb$&KU5t>_d{|4I5mF_=H!Rkj&Vm0{k@Y|BT?P94$
zD=N^^mU~n2Co|AHsyr2D!a$9f04fYh)2<ll@72{%!>2~MjtmkH4|JQ;#kCjF5%<41
zzb^FTswX;PKwpJ5VIFkb)7_=x{Z5s{fiKXO0BERp;n4S(fIIDKbu=`~4V3Geh8X(X
zOt-$vO{QvuvhO?8kXW|g>3e~Sgxw%rvw|pd>zum7cjxC!9Tsj6`<%P;R!Mh2e?NtB
zo>(!T9R1z&#WLk;X4a?C|MK1>%!IdRW};L;WB<goC(Or4gmjuG&M`aS14SmDRh<sA
z%TjF#AEl_+O_&<f0I73Ivb7r)E;s_LCwu*T^l|@PLPvGl2)y^Z=NySdeX8ABAq2Mc
z#~Ai>a!1(JQ?`7(;hTdBm$hgz^Wv-Enn)vtgqgd&%0?wqwx~)6IEG!?uA*1D=4JlH
zKh9S2)EJ5OsxztcIiJfE4O_uQ85;Gn8CaHoi2m`2Pz=`CCdS?9t*nL}+#MA|YwIl(
z6{=Y60qzb72z)5xEtBP_$6BQvP>GDZd2lX<W-?6Y`5xta*MIu{*;YTQq7w#t3}f`4
zz!YNoARWHU#+CfCo$Qv@7x_A`WjyDAF+#N22VzHnAk@=Bl77Zfm)+9Ro;B<ObwPyh
z?-gR#k&*K*tgk>gznt;zBX$`HQ~=@nX5Lw$4MlSC>3LVVrHjuRx-v@?o|{PXSw2a!
zhZN-)^Pgb#G-4CAl`acKuwePsJu|1s(os$_&rO2e>{-wVYB2&%glF{Ow3}Yyiv77t
z=pQ)nYhleA)KmtG<WXbql>!zh7&)-ea!1p@zDc!O_v4?unaMU=L9BjUs&x;_DrjrO
zy4v^-<HF$hk__ZF+eJwNaMqDvn;Tbv3JkK+2f-s!FXUbhNn_{17yiFz$iBFv@V}8S
z{{xkXvQ9*tCA;z+6W^WpOs9M0mCR`649_MQSAZcTqq(8UGoc}l$e0dM-?QqK;~Y!U
z(8=(xb9i!DBhv{4J`ddT<X<1u3Jzi&g6-SN>M@%igx^NYVmiI{2?+)pXBAIC^0^tq
zf#G))H3^EimQy(KhC3f7m0f-w%Qu=k>Krk|$pB%;J!g@XX|fOH_p~2;+X7W~ovvgl
zLU*b};4?btA~jA(#4Min_{82f2#Czhmtz_vU%=b1U<7}(jPj;_`liPUa3{Pyy)SP~
z*=v-OpOeMYTH-aaWpdWMDm>)T_8*K2LrDKm->#4CCqq)$x3|UKTS}dZs+0WPFXj@p
z`^HM!8YEAxU`Uc|u5V!d3r!28^N_#<rzJ_?l`Vaab5|gszzH>;=tsq+T5T-E65#I#
z#?~XvWNCgWh^;W>m+U=rig#8}Lh?n@M5(vngYaF-cdO4oj?RSN?!uwX32s?LoJ3o!
zh#s@lmvzU=ks~D##z5w@k(%TYo>#d}dKx*aJTm;HWev9v4wLluqwsqZ74bC7f_<f?
zSD|>@IHdZ{!_?)!@)yJ(Kle+U+GXavZzk(_FKs*JUzqHs@Heq+@7OEkwqJtfFw|g2
zXGazGx+D_HHwD%(G5<g&m=5rr1P?wT0Y?mQafUT7o>cgmBjnXe-CeI)qr74U1ld`K
zFAU<-FS4>ooF()48U}dwt(s{r;+BHfZ~a_&{5_}_0n+)Pgt{1sgY@;YQRAc0H$Ms?
ze}-ZJp<D-%lHvz5$!Sxao>K-fSuM;CSN4K&y0NI;hM(=TTy1fp$4F8b%~$Y9&Ayx?
z0;*4%bssx*;T5kpR-%M8ItDGrb-rx-W|)Bbntf8-q-76%8chD@r3Nqhxqga{G8u?B
zE}c3%jd&G?r@@S$J8lC-vG^2P^SLfIkA+x^aJty@k-4V_OXv!6`lyFZIBa4D@(1OQ
zsaH}Q9oD_dMOj{m6b;r~WF;R??+*oAijfiSVnSE~!u`G?-l_~LmN)8sKZIeThact3
z??sY><lWUvtZOu5&mEG;Q&>daO%|nJ_g#%m%xY#HZ9u~zYUqk0;v?-i6FWJqXI|^)
zJp5&Jrh|%R#!wDTsDy#?gU^0{|4RNm)cDTT85PYPQkVNQ_amQh68)m=`2}UgsU|D7
zGn;n|))*i#*eW5wJ5e!zmPVG2c^Ul{(^8u|-TDUry`kPIU2Z`J{q^SSMtpYEyhc-D
zhv5*`<$v`=X;zS8Ewud7Kr6tbJ32kKH)Y$Q2<v?Ofe@;n^?S%>$_@P?g-AV(8%(2s
zqKw33y&#H)p<S1LL-_{NQx?0Q>ohm}Q2RPuIKFhV8TL=TodwIMxsH~U5olM)ZIv+I
zN)^m+<V@e9#i9Wez}fh7+OAiFNzzlI6Z*hxU~Q?IaP|l2r2VKqKQ?K-hJldWNa0py
zCX;I5nxthTkp(~0vIpx|kcwA5Ua{+ut5v&U68XH|{b>*0Pn?{{%Y))GrCm?6?hJ+E
ze8wlR;K4Uo%-I3;|HIxnY>A>MQL=2?wr$(CZQHhO+qP}nwq13KeJ4Hb)gSPFBV%U-
z`gmG)fPNgQYo}195@o$4dXO!Rla^aqqc22?9&Re(pw?q~zjDWuNi?S+pzn>P45N<x
zZdm`PX53*qssTG)e__+}c4L8^b>r$le(7_ZM95O^4#TYb2hOgY>fb$TXQmd385Eru
zS!N^9;=7X8D(&S}ihe_JXloki80@!rD0NOdIku(xycyT&^cIK?>V#8IZlN<PL=47P
z<7FwV51Lx*VTtgUpJ}G8Rl-7%SWe9GC*b;iO@?+>p0RwB>{1<3&s3AtOWs>XU)I3#
zlo5H_)%6}xSMoZGZZMRB8z)1w=g?}$Ao$%Ym4CHS)R_$ocOvGYIhFQ)zOabMf5Bvd
zgf9pAlw!2lyD(a_P<LFl3T@%%VT0SgSg@H22FzK506=r>*uUmD33PM-(_`14y<rXk
z<M8dPBj30^X)Pedj8Jr<&n2bg2HwFK%4%*Bn$R+hPc9X>DqH{Z*Eg3&J`|AZ6V|FU
zG`ZO-j<qjynwW3IBw+Ti#<XE3Uw8?o>W2r%gXIpH-m0C0%RE!}ogkcqi+l;wjW{4S
zzN#<|R_r=u6ZgjK71}eL>uC@b5roQ%Ya0V*^SP8;MI9Sg*9~0)8HhDaI=<YFlYCEu
z^Gsd-G<Qh*khK%@_#8Za<k#)M6AO<ou+7lR3aN86Sq}sL!1~3W;aKAeCAbat2NZar
zSm;nx;Or>NhCUI=LTOG3f5}PDA6)3_AkV-2{$tbq+Aeu?v|EU5`)i$b%sEA7{q<i@
zG+-hKr*X@z+BVTF9v!Cj`GB;xR!3I!>HqG}6wS5I6aQ`ZHIn~3=@mui&WG?@&R9R#
zg6-G}3#7@jp_#1hd@3&UBxc+0$SsR86wuSz=p3bG{Uogjwri>lVR<L*V`#0UU-OVz
zVM#VsDvRaOYEl9YElEh?`^pmZtHIw5JDy+0yJwB*Z2<XE&t#}47DzJ}QMhFwu$4dm
z+p6*{c8G(7eFXtadr#}1#w!jCDkP0nR1I^t-<m6WSou@g{v7s!iZo4*C^XWvMP{cA
zG=ZSS+XdDE8T~HV_n3lX?nV|~8Gpxy@in)#3#~$H>5<^LDf)(Fm0G;y@qIa78E#q_
zjU7seSdA<p7x=ZPa@Dl5G_5i2Hv7~g@=T?!tXDbV#Hjpa`T7I6^{;LR)F|7UiRGH&
zC8ny5%W=;_l=NC1cTw(?-^crUl~^jKZKuNe@`aN6SWq;w4D{$0<4*|Qt}9U&F_Qg*
zxy!7Jx)pwe%pZ-p`q<~Xj7Y$!Dg%1>vpyaGCHk^jZZmI;zHwZjbb`w_3<R2KG<F)b
zCkg_u>dC|<d4()P<8EUr$nVj@kvomf{O>$pUg!l&gOoo$Ds2uJ1D;KY@U75z=~0mq
zrIFS<;)LLr{um|x5ck&TJwBHpK(IJ$N-2T>BS;M?V0NBLXPF}!7d|ImHjgi$QT}nC
z0AL8};R*^=nvH+X8yKG6OrQ8-)s)&a_etTP7Ne2~@IttB7k7<lBK)QF^;v`I8zPsN
zA3@IXx$Azkv@r$-)<N5puf$;`Ju`6KTbiIqN8Pz<5Bi>417s+O`~5uXX+0ue$Vczi
zGei^b_csF!eWSJ6fpuTjk4i|T;3mu6V)AeFI%1Rx3FijqZzmQILRkS`%lhxkre-=T
zv^7Tz`{<3wEo2RXYuGXg#ht54i|px>3zD5KH|GAX?W0(6^W33HtzqulBth(QYkj^}
zStPimhZZwTU`$|lxVq$iKv39bSr(1GnNviy6Lkn$%Jl;1KI=JS5+MQsu*@Fk(%hO(
zpv)2>XR1Gr@MNg8^V_R(wW1o;XLqA@r6v_ti+SuMp+UP|^<T;JCBm%!Gq12n2P?2x
zx6Tn=$e70#DUk}vE9|a~X%Bi6<nL>d9$vu3TQkWT6po}m4AT&yxeDX6@xyMHk11Ka
z3F&;ds0-6?>ptu-QAL=@6{^Tlw{D!|%2HwAr&|eIU*&Je<5U|+b4eh|EHXK>DSW4_
zZd~k(DWAA8BirNgc<eF6j-j2x4WH#n)3%}Pn4Ff`MgqoEiKoMKR)uuVsmaG!zMLb$
z=iMxHGG$uW99sRdDUdT#1;M^*p{x?$<qm7=Age$|x^RQlXx+B<ne7Xez!PNrk1Wjh
zDh$FhLxv}<)<J>f+r7VGE2<r9r>pPfB{2O#%X>89TY92sm^d3K-s28-FqGSV<wjN|
zyh9A`g?)ak*OY9#I8idMdvoK`ayAEM4>l@Kja7Uxm}VY_<+PgY$gq>PTtIxzqg+oX
z*<&oSqUbr}69#gH?5~1H0}z=ZU~P18I42&^C1Q?Ry3@)f*(#|oK<x$#cX_>1s;>|U
z7NCzy_&S7JzRj#o--;Ikb870I5k&9{`N&-Bqhu~RzEV2k8-HS#(R_t#Z%duO-7ZLh
zVxtYGtnm3~smOgLpDxp%fS1<!EM|;d8^ap1o3LhnVpG+dj7;7B%1(Sq&Rz#-9n%>p
z2zi%jlmz)q3<t7^>{6}@Zp}d7foEK}4rBtV{!}Vm;9iO)bMre~h0DSRb%rre-jP_&
zUBE>wu#3<nK}}uz<Z8q3)VI^mx{aOSl{hPP9au&imCDH)T+n885_SE50lT)#L0)d5
z3vK~S_a9XE44?(8tjZ7K%Fh@p@ZE7TfRow5m4S*oA#%-Wf5}YUWD>LxNFlFU7R`6D
zYi%d~hFF|KFX*AIdD>17W`DknL1Y)A9Iirp^TFeE%Y{aR;4eNaHqODh<^=5FITkHj
z%>lTi2^8#?`_oi#+I?YVCnDtkUW`=?w%j~gruDV0!;LF@%H1tNL3G!3=}4Zw9GJA?
zLo!T}!?Z)jTF<K%#>Cfj&bo;2yON6m+4)UhfYTQAXZg-_RB+ia>z0%U<O9GGSAW3<
zP2>AU$s_-uwV<4JSLnP7?gmK4VO>qjm4@=RMhJxVCQYm3pNc&_!F}ezoHtP=Wm#qx
zMXJL+0E+GK<bXf2?jPdpoI^b&(!<Zj2D2=Tf$vdrrF9@LVwf)gPaSR_t_Yx}GjfSL
zM&!L{N!AbFi(WproQD<-m@_aq((d|U$q91)!I4~-CDgsrw`dSb*G(?zVd2K8BQvgI
zssnBMPrzDPJRbs5*lX(bH{=!}(p((PG<80tJzx0E@G4q^A#mw{^EiqU?an%eu_}bQ
z^QOg@ja+nAAs}<|#`1-f$(5i=G7CMFQyM!fT9^2k5HuEB&c;>!u`APnnt{k{>)X=N
zt4(XT^jB++1C|fWHD$g37L6DsX+@RY8X@^kI0U_sPMz{4qf7-NsGEdZu3Ict-Wt2x
zr6&K4pN1||XNB)~@~|O#1I)iB-su<%@IjAMgfQI2YpFbZ6)1+}%Sus?6=eM)@$V9>
z4L|uy+i7Te%NqPA!<c;)wXPE*F&!Y(lj8cTcIV|<s9*X+4#-a$@<s!r@0OW;FSTEJ
zQBCL@JIjb_%s1(Xc!xb!0gzq6(xyy|o$Ddx0|cQ;mRBqrYA>k2qk_f5y!v<*lA_60
zS2?UUiqtU0399o6%9aF_Ec_tf%Z(YNuFrGuapS!o<J!X3rwq$`PiA(B32#w#U`siv
zmDR%N-^_y8l?YUMXFnuTRwy$z`O>w-8qog`66&|_w0cEZZ~Z$p-Q;aQ&RiuQqSk#)
zJn#j7bIyP&UW~rhN=B{ccLwzGUfAk`R(J9*ewkr}*+`l9Ja^y?7@;gAnwoIM@dI*J
zfI-(-7y|_4q~bi9+Xc$0z3zc|Ab;J|*|lupM5mI?5zCtAyr{}*uBEZu$KG#x!Snog
z5GiqCy5nVG?%PwlWGor%ys`dO1sb>+6ChN)%%?Z<#Y-sN8iEmB-=e(5(1uRujB8yZ
zRv_WAD-t`vVO1&|-l5w#H6_*0&Ssu9m^AH~9$~@?(q%%+a*B<DopAR?W73tpv!99N
z9L}8I(aW%>`}^pbE`~kHEYM@X^E4I&5vo9DHBDgbnLZ+@g!6?_gnqVQ$Sg!y8~JF^
zs|f|?xFBnXcgJ?du4TyHrYS`qmApFkgCd_mnaTKv@n-emSGAdo(!B2JJoh|dAOPwx
z*X~#Y;^}G2a53qmVeA)RlNuF}#>5~~l7=m4YoQU>33lB{5gBL6Nx?z{up_v<0Auj-
zOt)4!Ou5eR8|Y?Ze?+KSbP>+sw9AqP0-I$wC4Cs~z4+YugM=2az0s7r^d&7ORANAL
z!&aKx1>URcOC$;yn(BH696z8?^fKf9McUZQ;|9p!^VJcn8_N-f599zNIP@^Tcu4hD
zn<{9H+dz3GFieMvokwToa8($VlW0&szwo&#D8oCw3v(H_c8SI4nC*%X)#(=0F&`(1
zG8iS?>A%1X2;idf`wfq6n^<heBRP$IZ+$xM3?L#lZt-k<+iYoaRD>VDq}7zJbGX1M
zZe1Fjh-KV7EDYfg#UCw64FY3NAIFxZ+nfz$?eyzv{0^|LIWse1KXl7WjA9ikP`?xy
zQ3kT~h-yy`@ddcbyL1v@k>UcW5*{$aBvKz#Kg~TQK%v6IgD*ryx7;2AfCQ^Xj!y8O
zzdcFP>(oELLKe}kA7v&9h{JS@m@%a1jWvD(7Pd9Y@`cShV7!8@?he>8k-Dl{GeaKA
zx%WTO@6jBX0GlMxK92N~V74ZP@DhZ7<$Oo*Vr-&LP7I|oq>Nou#z%jP*P`}-A+~Qm
z<bd(vO_$)1+!B!C*N_DXO-;`bNLOvtJY)w!Is;t^qtvM8S@UKD`#(`}*~{l1qF?b?
zi&d&rX0IE~5p@|Y%XS+;4yi|oxlm*UTB-4bJrTv5jK24sdeqxI&}@=qHa+K=hJX(H
z<7}p^B1sTtn2I^h6EwFTwULHyX44A)ke<)VW$XcD>G*U4JbH6^2?(+hL>iMzi*>e;
zJ0I_LDMP<Stl%J{#WDW}a^_aF%{3RIja2kko4$S2XdUYw4*a?!;r>(h)@J{NYVA|!
z=-(t`57q_ji{oz`1hb}OQs{h0kM;Qwf$C^=(dMQw44b2MdRdXEX-#D|$)rM(K1x6Q
zkiRh%6v%W;V+NZkV?x{4?;u4-!<NdIn+fQnvew`z{}!WXEat4P=7sXOKWC}6<wUqG
zkI7d>0z)51s!)%z#29I-)a1_6<j#<?oFN|r^~J`NOEU-S1fP+7r*Gbq9>}@K<#1iD
zWsO;49A9b~3vGo(Ju8311K|zXc3pz>;j&)EbtBlw5oh%Rvizorg{tP#v<zIdg`zsP
zDE~K_m;6+2U>W~Q5I?63_f+avB;X?C;uwSt*OT_<W1NgD4mCWiah_#iVHuo+ZX6<~
zRo6zcA0bzj#(+HPUjzzw(ZhrAw%@dFBD6rSsI4KhC`MPA?QE!PRHs&<K4h|f&XV{<
z;RYk6l1z#AcL8QB6%t<Zx5`&0plUE3jm3N`pg|)5dffyg=DAPawuG9cmeCK58OhM~
z&|hBv5$*dbHVs#2(h@Qk*Igd_N&iUrOqb{9Y}Fl_p4wyrbvgJL`L|dC2#sYBho$=l
z7+9c5L_h%uhj<0FX47XlyC!xWm$gR|(w{;WED0-k{G+<SEYYLmZ_5Ym?!15KX)V&u
z3*b^c>+~vuvR2!ZS``g}M9=mnxL|M9-qUpYe<Iz_aWP7A^OeLuxaV@On@oL7V$7FG
zQ(3f`rs5bTG#BZ|-xdT$DAvpq*3i0>#5ACRikz#zTL$;cqGC&HPbh&lWpd8OJ#7fb
z_6Q)?I<C16;H#*f(u!;T*+VLH{t9@|-S}sB?+mw49W$OKsGS6h0c-?2h}D17)1&s@
zUwOGMlQ%x4uy1bDfW`z&3UV>wz&vTJq{JjIpv<HQJyaC`F$BB)L=!n^-pZD>=~#cu
z1;)svPBfiYMRFIA`2X^jt0#Y~LdbNFI5x2{0Ovkk_m*`iInmgxX_x+>KWI~^45wr~
zd`;s?A5?Tu6Gm9Pgpk*fR|9j3{Ck~rDj*0n5bbOwhBZjMz7{CTLZhMIRo`ZWywroo
zda<#W%)JC?$l9kr%-Jz<*Hrvq$qR(`o<xbj@FjQ0K4G-Dr0Iur{y*q2uR6$kPwUTI
z&Pj~VRhrnk<O<J#6Yt>j+$)8>Orv95N0cB1_aKrauVeCCA>8pWGZ%t++>29T=RL9{
zpKQpDF|<=2V?fATtZ^H(-6R=k#W(1#Pi|$fb_;Sl0>VBWHl<3xFL3|9N}tpyWyaE(
ze+Sjz8xP7+^y+X7qxH~~-MbL6Nf(h|J2;;|)M$$im?<nvjdrh1Wu5h>ibW1~x-@G~
zo27uF4xYE~1Kr9Oc3xUUI^7%sStYpKUS^*><+w?ogZzKikjwK7Z$8&Q{R?>%v<Oy=
zQe)balvdAmuWruogW%+9$}69~doTsG^CC<__~J!j9S(rlQ8A78>JPZ`mE=td_^yi6
z^R}i_TT6fswfV}30L5V-nSr|-uLzfRLYTZ}Ae9xf_X?<Zeev_15gzn3&PUKUPT`(Q
zz7?Z{whQgm@<+;y(fGxPve#3~8KY%>hBNm&Fx<DorZBF$ri(~HCJ~^;k^GT^9iqZ2
zVa?S{DYj9F%~0=fSBw_`oHd<@A{cP)G`lw(YuC}37;&e@*7*tHXPC2=Y?PyueM&bI
zwkDBJS>B6jo1+7Etd56Wo)o6~G8XLj)SSRx2z-8`E|Ej`IrJ*G>-4^Q!{<~hZRYG$
z{$N7^+LzD()fF{E@kz_AfFzhZ&Zze)`QPRG&!&-6?EIU8g20g2v>Z>UW_SU;Bf$l^
zXlKy@w|Lj$G4<{=Ha^&Ks2#*il~(%?hAby-!rKSU-%Cra4<xFoVW;Y7CLDM|y}Oz}
z4A2$QeDA&jgk3&F9Y1wEV7vajUqwSMLM1H1rSX(cl1#JvF1U?GvqNR2sbzdZWIU&{
z2Wg~ot(26Mk0Jm@(FZ@wjm)H(PUyMnK$Mv`6s7__F1#_nG14-|Q)bY1G+Z!4+K1xz
zYFv{q>3|=m)ksU*jr1s@j@-67_Fk?Xh~J{;zp`qNRPFXlvr>=}*5!gE$CCOWV^Sj}
z&rC0Du9K`|YOiG$4l-j+7Ga`-;}(y>`dXI3x*48&zzR=eQjC?6k8Ueg)cnpbCrvvE
zl|c?p;6#)?$O<LkNKDL|a0ur{IL!SnlA*-F<2>&+g^8w=Dk^cD!q^fO-1hrx%q>68
zE}q&OQr&4y&E=ur+G=D@L7fuc`n#YHLWw&3-$AbUA3eAl9py!Qij0e<xr5GRo_{z>
z>;D6Xp{tEZ9zyT$0?GUkaUWhI8%#;&?EtEgfKK&x@OVpE2GYd}xbU2OTwk7vp{gu6
zA@;L~VB5l(GLkiu4`*tV#2DJ*I{scypZ}mnbuiwP8FR_Omu?TFqBmtkyg!^5F-csb
z`!C%D^Fga(x@Z9iPm>Lrt<Suj))aF6jZsvgj826KlJGCgbPBJuoFWBqs`={nIKx)m
z6SU^+wiOFXgYtXBM#=ths<$2Ah=u!3bit>Nqe-456aTYr`MOcU&Zx-wIQ%Qz4H*gA
zJAwlaO7#d$p!=cycOmsfM|#YUmihEX(IEJ$@nt~G%aWm)Da`T-)36tx0@V(QMv-n>
zQ8YV8(vLzXF6F!cI$16!M-x-9n&GyrT4+(g2RN(S2LpR4HVj^B+xdBJ`m$XA$!D!y
zE6IM<z4v-!{oq|S3fjp`ej`wK$Ti29(PgKk^`&9UZE2r7?d1G~Xsf$Wjn@;_tZjf~
zXli#OZKS0-v+98&^y~(MPU}aBu0zKVD>OD;HGjg~TLm|MK+;QCQV+@^oYVcAC#AjF
zSC#FuN*81|Jd%U7qg-AnGWd8Pqm0`SITCTjdCYnv>P!Pe^%f=ZCf>3F9hGQ|MS+eN
z<u3ipo+-(46cE^Uw_u5R@r-=JP}K-5xPD^;9S+Q;zgqJss{mEaYZK@}zLvO)ca(8V
zMvL_<*CEnXD=PT!Zw*Sr*y_+qTH&&{mVAE3)KY?*ArNAk=@}C5-XPmpjIX|{LZ5q8
zT}X7%BLH~~hqfFb85sseS~OU_-PyL-<gj-pkSZ+lMytk3N2LaBH_u_`Ma>*qndKdb
z0E7)h*u{`5d>Hh<$>zbDhw1!TJ=m#gH3^@2v@N7A6V0Gd36~eeloX$khfQ&iJ0G~4
zpIjRg6%|W|u#{8!@n9L<2MDj`B^I0Y-Q|W5jv}2_vmXPjS*0G1C!+HjHu8Z=UwRPv
zSnr=|V_hWe`#ok|R{wb4-tc1kwW=+H%lGggfE8+~n0YrO*hCOES9^%UFr*OCtkeEC
zz5~(C91UP?|9V-PwLt4lh9yzu)uW3Gr$2I=mMb|al#7gnK?~vf*5m9ETqYoF!(R8x
zvZ8DO7GoxI2(Vrt>(NVN-P}Cv#C510-At)*Nauau%|kxug>Dw18#8AK6Ozkc4S5Uz
zc{c*-zbNxO#^k#maR0THeo&OJd_t!ssF9xWn&PU9It23EmyJ}OzN=eJLM^EI=><pz
z1{Yf2KlQPx)HSCT<0Yi@I!U)B#phpXZ+LEfg~4O$5fuoz1ulDcGWFsFd&}kA)Mz6%
z@{h$EL|vSY^HCi0y8#Y>v!~skD1r?^3KVw2)l#F221nUSJH^Wn8TDBHVTSiWx>}K{
z@xu~R^)zlMSvT0p57E<r=tsfE;ZIzoY0NOYxTNR3jfwWcDp_-e9Zkc5TMO-8l9xYU
zA~0)iSO(ellkop&I024Jdd)4CS{Jg$KZ0qIrn}L~FY~Yn$8no}SM5nX3@)VIj_0Dj
z>(2hgb-yOfodCOpt?c$W6!~#}1<v#Gmj})GuU060Z^tD*sg&)kH1?YFdK{E`62H=Y
z4y0^vihWFq)ueFU8}H4b61h-A7ZIh^W-3Xp4%Wl2qE->|^s8fTcr_4mVS8(YIz@(+
z{8Rqq0lMRav_>Lye$uVz2621WEjt;v6oftzOhOzmu5&h*1fOM6_S1Cxy+TC%f{r<A
zLBn!f?C;^bG&TdJSCqt_?%99j69!7zJTLV<+-VK0j+Ha4u5fQV1sKWWgqNm9EDOXI
z30!q!m%SF*@jQi!<ve#%VDM$n11FHrr~YlMlf$aP_jjjH$`H4|?1?r|S!}{z&M8H+
zC3e-$)n76%Eh!?Pi5+}SN>Y4b8`@JRePcI$>TWywTVUmovtu8*KWrw<6PI;v4vS=9
zp%h+o7VBY8cX)Vod8;*Ioiq+U;n-1WxM%vVxn=yx@%?RMG@JI9T!QOQsmxH>Z7~f8
zO$JB<^RZUJ%t&l+oNoW6pn1^uY5gedUhkI~Izk}-?tV4(zn-xxI6bP|nBlm^yF6|>
zd24$~CF;;p$RUFFu7Dp>(5Uo$c;CP95~&S?g!bYHuTl%RYW{Pis8Yg#0|lF82A+MS
zwyRiEOMW>HZq&3&wMxTT`F%QVP~o5Y3+&RZ#{RcEOGDo>G((_Q@HOZH=<K);<IRAh
zXRYp1yp5LEt>msTtU}itOQ5Y2p?(G|P>9!52v_(NOPTXVW5Xx>Z-^Ft^C9v&EAM@4
zmZ8;R()mr|q~#JwzUloGWCZJiuM+kJ)-BoGc%Ee=x}RIrNSUy3lx1D0J}}(Kl^6by
zz|R~J!~`DA>*2fNiCx!Zq$;zN{h|q7AoNz3al0OGWFq7i^5LrJ#HZQgI$pILD7ZT-
znQjQvPI5%@PVTn|UHn4|dKnJ0yS6)%2L@mx7-44IFgO1}f2Ou9zt|IM7}Q^B2VJa?
z5Q1z|^PRmR88VPs3S=8AzJa2KmoIA|0u3x!GD*ui)U=rI%$47f*rWNQl}saL56_+q
zuFM-WVgMACJ`=|^V~9%v2o;`#lfbv)O&?=6E};j{>H7)?*bSasyY-zzw*^-ZTLyX+
z$e8HMu!lP0nmJIU5U;-k;r1rzdTN1UE?|xhwBWs$5=4qIo}s#x+ds}d@e&q*u2NLS
z>0zUmJ<20_Fboxa!UXu^1GS`+=#B5g!GbJ>7Kq1D;dX&$6#K7~HSSdZ0>&&M*N?5Y
zjdBwNY)HojGQDjmi|FTC&C8(Kx0$iMNLs+*G1%8kZWO=4FFsSY>Uu3wPyxe&*2ToV
z7zJ*Cr0J$PbjfX*KcI-{)$r6cBQkg^OU%*$k6`ilm;D$9^%vxmn!nsIY9G#9v0W4j
z2+J9!I{+X03jR-37CZwmmb=(<`LvChM!<B?iYOE`PE2@9FluVZ@M~__r+n{H4xd>_
zK|wp27tl_LPUJYAA;`u=gvP}K7`MF~i_QC7*P^B=<uNEE`Pg^l>W>&r3v?ua^hWt%
zMtvVAm^;Fi)9w9&9l2U=3>VnBn+i(CbN-OFM*hI5+<Lau%v^3tIJNHN>u_BHNPpHe
zBM8O1HHZmjl!hxKtyAwO=@3jG_2-)5SKmpY(ldWhIJgX43IPjy(%xs-j#4I0Qc$5N
zb^IrwIv|sK_sqQ;Dx5Y&HK(fff-8>}?hDLo@1#k`62Aq$I9_)Efo9_Mim}}yaE$NK
zf)o1sQO11Doe&nJr<{t0nvgNL@gpecv%~DnWq(otc3g(8yqLb|%bR8xXIVD)?Xswf
zcjOL}ofvg5c5qz^BMccFQK@l(s$2Z>5Bgz5;F|6<d@P;vGz+lEd>pZ~`-tUIbhPDF
zQH+!AaI&@S4S@V|4fkRpiyF3aCMKagNVtXV-^&;?9b7nt@Y?mxdEhc&byZjcLx~r0
znw5Q-6%ZnW{r>baLY%jvAC@K`^N<BZ2x#0`miaH$KSu;o(?581IchPo)SYtfHf=y!
z23A+P#E6`9#tGP~)WQoCxw?8hK-H0>A8Z#RI<^+qdwFFiQ<yLcJ`gY|^mw3Ah+VU%
zq`D3fTiLM7kq^j{HzNUxgm0^ws2f1UbN?HX7BP<Ipww2=>`dA}g&;0|wtsH16H>#I
zTU3Usa}!$ry(nY<1X!AyuK5oI5PCXdiJv)B>ogarsLmJDn=AnGyETLz#J|yo*Cxr-
zarX;RmWAMvG{Kf!BtwOK%(`njpE-x<jA?%j-SXWLknRRq4wDt0?(1dV+@dQkAi{@?
z)~_9p`nIptfrY&(={YIW2=z{S{-%9A+#9TmiQ?XW6!(iMD2MA`==o7Ch$~)R_*bCB
z5R#QfrtYZ;nm;80(ti2C2bkG+1H@Nt#<I>j#$F(~4Ese*-!>mq#<}=4##x)ubpmK+
zIg9a?IHlpDTY-vT41nflapTyT*kBG?4`0UDvX`5k?vFpfW!b{Qr^@o*g9ciTDb=if
zHr<+h<)}rtewKD2BFWX)>3$}r4%qzS)Xi>y=o5|nzOVLA(%KQrhMN;37sd(hx7fE3
zWGhVFFJ*7AebE|m7r1{Rq9}l9doBUKY$s^78E#&3zCL{?3C9MUxan2wD;KI1<QOzi
zzJ%4Pc<Yp6yB}=>XHoSYW12YK%g)mkTnrh$2(V^OuML~uy7{49<quZGA}y5jp3lD0
z46TzOoBsMJgj)l>CHf|aK{p@Dvoz%8esWL<H9Y8+u8ZOU`qj0i;sPn%m)0z6p*zNm
zq5WdX!}LVZQwGW~G5*p(R&B%Qv{XQWxO0ndEXbOFWHt0P7L)EWM2o$DX6Jt_HbU=U
z>m@TM8ky%V(a}$=Z+y`5nrimAk>xIYz;=e)#6d7N<SO)2qsU~ngOZmGW;>?KxZy)E
z6JD=zK%;5Ub~G7&4t;JXcO?A3Mk1|4J&DuSdqHq$4MW~Q6gyz`CQg?xSe7Cc+x1o7
zK|fcy*Pt6GYZp)B07(1#qiw(;B_Y`)_6d}oZK}Ekja|BeS?u1d=HRdF<YS{Eqm4x4
zE0d$kbG^5&{~%)KgO{)I7|nmvNps#ks#Z(`X1@Ns7xHw9wR=g`v`k2*aR63DCvkuS
zK<?ZkJ-m<Jol<3V)#4%cSwT@G$pWI4Bum@Vio3wtm<1U9g?T(D1>31mcjr;Dg)aYU
z5u*kK@Cs2>fX%ZfbGHa2`6IXq#l9;83QH`!@I`Zv<4wYQ=Fg*aTYh1k{&i}FS>7pH
z7wHl!U;ZmnAvm4qb4|i>tT=?qEx!!D4DF%7eaGu>22d*}I^ssm*#E6yVr0v=`LfJL
z(gGN3f?7k*874&`aC|jrYT;iT8q?~E{+HwV(%XDZ$N==ld2+GiBGUy1ni!xV3>PDc
z5G=u=TOKNMxF<bgU(oAzxi4u*nWFEHyI5xq1Zf9>y^>E8?07`R1*G)efB0q*lABNN
zeXMNz1v-Mz7DeoCw=-LSrZ2m~olUCfYPUS8XA1L96=H>@2=eUQ>f}NLn0Gf{LNe7W
zj`R}6YYi>rZra5>|D@x1>~UUC0~eU$aTlhdflCT&Y10V}lsmSPbm;O#3y5Zc_jx!a
z$9tGMWLvg2&|0?)b)J7i@+1U_e@INdceyKaKczm=kO|9H8Yk31A7baEfsx%Si=A%j
z&enr5d*3Z@%G)w9jTIr_D{9SdWtW;8-IGMZ7c5HrpD;hJXvP4uFX_Zud2Fqf$Mw*i
zdc(;<TUs6uE~}B88b>S7E$8a<%sV#r-(T%s_Ci8Loa4T%4W<Q8y}RLlI9$DC<TGF1
z+)2&ON!p?}%qGA>O_T|+zxm>iy64VtBzpB2fPUIUZYU9A&dUOsjN8^&fX<Plm5la8
z;{6i-L1Q_HFIY=J*k=VIwJAdbiLP``&8`5aIXKN`MrGL~F53z24<6YhFH)BVWC*92
zbs`4K6KJV>0C15chF<!0&PBkkUHR{Fr0MqA_9xrto*<H5I5tYad^_J;yQ=BHGowb>
z^sA2p>$1fX-TltZ^c?)piCS!t8Et|+UZ=+x{&!dS5AruR;pz(DioWL|I^M5ZYtHy(
zIi6ILz-5;*=kO%K2B8$1_r&HRb8cHPO}osscxshJiG0H~-W0^BolgfIHk&s&FYuE1
zt{eoGZSp*+-XGin{Nw^n?1}|clIWvatMD5t3^Xjo#;8syh)0gENu;~#+NC5C$E}Q^
z^%yiAr9*ALz@iEgff2S_rC+Bh{0aEutXz)CAs%q#S$$)0so$JZYI;U|SZ<VdFM;%D
z(S-mFi1I%zy0fe;DJoriB%OOb;i|-_0G;?0Zrl^_G#}%!#LUH->gqav;F!Z-TBoPA
zF}|eM;1b&d<?<t(qsjL45#oPu-7(4rM?>=DS1}bYY~tY8V0Zobu_LeRXaZE8vNr?p
z(DjK&HekVt4h$`$sSfy;zh5EbD^2T>Zt^;k(MV%txdUP6k}YV|<;%K<AdzFYkNm?O
zOBetZ=4-FKajS;@rYlYuRjLOD<*7eRUDuwsU6Aqay-;YfUP!j7vY;9rjv>El4Qx$R
ze)-idvr7JZnuH=wHs{s+VJrMq9K<&C;M*AsiQJhl&%>zRz;nh$#?TB`^K|i&-Cl0P
z-YrG3KRa#;>oC4pbo6&7liSn{^WZ2#-G!N%Qz`NvNH&cnvLkPNm$zhTGu(gsnA=_F
zNDgnSv(}OLiYJf|>HmUL1;xey_|Va*Nabw3YL4o%<__gdrDGQXKdnS5Y?Ef<$#S!$
zln3TsNvi*F4>YD%*1DIt&SmV1ri6Twi<Z+>$;In{-*%VJgtT-{kQLqFy}o<meBi=2
zfiFB`Fqi-olgVmG2{vQr#NCd0piUaetY$ihy#rPpesi_%kZ23uN8dR1vxa<)r5S=I
z*iv)f&)4K>gk)r1vQmR)CjCwgEtwH4pE|?EozjkEn0V0>TXpO9{md@LpnEGh7Ew$`
zDe5i0=7`@w#?2#DFbe%Z;=h?7h%sw@>i$7#&ge#V=ELdt3j*n1&_*Semm+?IVE#7$
zo?Ej<Yn7s*6jGB_^Ey5Z5Y$47b>?Na(?5m16=s&pTta+5E>auJt>F`1chd+{gfX2U
zrbfn2^*ItgEAsI8QLW2d2~be&kp7V<-N-_g*v-QDw8J)`@u7!>-@5f^2=0N~?&-c$
z8o8X(#P*wfu<+_*e4<6QP|UslhMYEEuI#Dq4hm^VXy_`|UMQqMV&lzEP(u&ZgI67Y
z4aS|J*=eFpQTB>Sqa?=y)%A;$gKEffi(4ZkFOo?!pfr@rtYZ?|7Q894gCP|2Sp)py
zVc%X4pj_$_3-w6YjnH2n8n@zy^ON<$wzM0a;u;7(uboOT8)O$*2=&KkGT;-Sy4S3F
z4*%PLDFkm^PeZuF_fmou&*FlsM#Z}+V()I2V$Sv;Vay6Wqg1y46PHM^s9++ik7F(l
zp|*+B>SdleLfRa1;3IFfUn>Z}#QI8;ZJ)hxC0Wz?+wB+n(5m+Sh|9akhoQATsRn(m
zMWfCwV8SqhH0XP!HDos5l+nC4mj}k}Z}P9L|Bk^%I~ToHuJ-%A*@{2yiM9DklYe1e
z629s3-*pWGsli~uOM3m(#0Hi|9M?*=9N7YK%25YSibPfk_qnCIVM8QA!AxQeiwK_W
zF?>mPI(+=1l!qYbv&kpn$Ifqtcux|o59Yv=Z;iMHh3y8ciyI`e3Qh?NlI$~T9qL#C
zYY7I59*}cMh48fT3(Z*mc?#dv6ob?Q%kz%Mi2<dmB7px!&`thNw`@`mvo>KWQ|)Zh
zo69SE(1G+4Q>lO&Qxo%Qwom9yMcl8~6P}6#DEY}@k@{{vC6m+SvIv^JcQ(VlXT6Nn
zDK;j-dB?ETUxr}~Tg%au!y;Nzf1#ObOIpr=1w!{vWdEmT?YY2+fP;nX<EXKPxd-*v
z_~xFLZpv63<54VbNIk<)FnG#41%;rOzv^$Slu)KfqF6L0e(5Ed<uiEsh~I$-25yH?
z*tl+y|Lu6yr3TCL?Ns)7v=<R@jMg<o7?SCW0+Fd=2!20e@|fy{Roj6iyO)Z@`n}u4
zfzwhzwe)!>HQaMbmH|`gz_HstY{9<uFLz^Sv_YOcor`lM&36t*n%<8zEF(*SSO8k3
zHF^(N>uA3VmZ0$HhRs6;Sr_Zo>y0*Y#FNg*vZNV?>OJa_N3xjI9|z6pIiG_tI&pJX
zb&4#|M3pHQ!${(gEa)m=)gt}U0Z?GgBVIk9S&pAvliZY|h`z-*poun_1~(aHs8?jG
z1`c7>AQY_FpBbxRheJ@Ee~hI%q2<)D(O)Xy<5zDq!x8djLAa0dT#@ky>;WbaK1GS1
z)1Hlzc}|*ysp(lZJXy6+DFt^YJCfqN5T0WMK9ygM^z3h<*~%L7MM51Uv>1`(UttO=
z4)er88GDk5*E$gNDVzD!q?1;oE%4j}UngFKK;`)Hw99+;BOJE6Xs#>LdD1&4d$iiy
zoLM|2+AH~yS#w_05lI8}olLK}84D({Lro0oAqCe53+E*+_Y!pF)_rw^+~UrqhdNHW
zlc6JLQQru@0oJtmheuN~XnqeDJ2;Q{I|>8?m6ld4;izCX&>B8;u~uG9kB}a{3H0)6
zMiUEn3xDwCcJtx{m1b38KNJ?^@$j><%h=|GEe@kmUrRU>)Y#wHEeR?a%zVDv`8-Bk
z@8<bA#8&IK<4ca4o5WuOM66w#pnWvm1Ph=$I7M_|CeGGdyl<x7=g1m9yEp#Yx5l#l
z?9Crnx|@mslEw&BI<D5Uz)=ACMpa|G%`ABVmX&xZ!wUm4GDhjRipLB`KO8!Uhk#S2
zmW{u7{~By{qUa^#h%<5Y3nZ&pqr)Z9dO%&C-o*>URUZvN7^4g;3+0qzgBmKFa^yBM
zXj>xv^2f&y0<se!o>zAFhr_XSv?J=Ng|LPsV^{j&=6-0Cat&4ZnL%!iK!^fnJ=R2B
zPg^396k=+@kaD{56!2l;>31PC*q>QwnAUvjKUai2z3%muz0mu`Eb1lL0!9(^)E$B_
z4q22uFzJ_{oF@L>k`ct+8W9wDJIM<-2IL}au-xQnQj&>^P@d(2K@(BudNan*lyH{y
zFCe!j9v}+)l$=mz3g0?}f_`^&xWK~NHPoI`#b~~IFNz>F`RC)>yP?XC=dcTqw%;U<
z@sJ?X7-$Xvlv-AqLkGb_^dwB5RB`>L=PN;;-zIs1-b!t-!e{=W3L{cywII!^t4=)U
z?M>;yNk2yiFiP3D<C5+#YD3b-@rn9P$HJ0t&&;^2ukc~x=~OHU&*$}Eb_z>3pLXXZ
z(OZlfvtzVJ(XQ?rT6@W!SZ@Rw#H}Rxv(4>zfKCvRyF{zoiVLnvE;mQfo_ZTHxn%cu
z&B*A8%~JSPXm?q32w+BgY1>lFh1&@94!(8J_TcyFbeW9Y?DI^~T+Uq24Jexpwhfu4
z==<LrE2?`|KQzcSC?}<KtyEA>owhFOcT~vBgoa%leFc5v_^n;TOjA{N9o!FMo(u8n
z*y<OnM7fI$?4DnV*AmdGFj`_-bWVF_fDZwlZJA&Q<U{ip=p#Wh{kXrzi&m#;5x}n7
zyK}sYBawmN*}4bzhv1iF`~#Z~L#)t#z{Or&kwalSa{~WA>lgl<%2qw7o51}%{B3tj
zBOh1P^Kv2leC0<Lg4HKBc|U8lEK)`vnn;R;Jl7JB6P8WH?I4aAFU#y1%L!3riz%hf
zbig;`7b;{Y^-FS7_`t+_@ZxL8J(8&EYlV8FGw4*2PCG&VvKq5-;1qxWa8rd#d1?->
z7JxEm>5;>RD(bTN^8L^)eV;{$gU9-!iUGODkX0g3xi);^BET!NR!DTALN#8;Zv|^V
zY5jvp@Nf&CTLIeUI{Mh7js(HwG*3#+V&8s2N!W7f{`2~ZePIPrt#z(lqqxdOu(255
z2yoI9Lj4*MsPda9cNLKs*^M$RYY8ohrv{`fc(p1^Zq1a@^4=&};O=OE8?0stbX`P3
zQdCjKztvgB31Wc|;SkK3i1)@;99d*X5d5M4;x?S-;a<D%GSln#$#yPNxPFkCAd%E#
z$vy4>KCzIh*5KRrI@d|Nyhm^O+D2hLpw)>@2=AauINL?84qgsrJMml+sWAy?lAgIj
zOm*B|4WW=h*^gmTUE4W1HO-4!Q)&0Ig&N;aECRolt4gA`>lbfEgP`7G1c@Wf%a&~r
zVzp*X-9by-EuZV-Yc3~;hr6FNeUVM4f5H1K_*5xy1Y)t`C)R*KZMdUxOi0e6fhJhk
zL-k0m01>{~o$3}Dld-XbtT{z)0Goqd?Zc?gj7bwsg6{aOb!7%dpPRnVthAiCXAW%u
zAbz`=>x>j<6m=e}9jAQpUi|gAB`X$F3Nyl$*vxZdBUfXJdVitKiU3|pun&C~UjwwW
z`@)?pizWT+|CsV7!$OH<@_KaNVBhA)Eb2%Cv3MN4E|s7ozZZZgILRu4MO?@m$7yd0
zo+8X!|CP`K2%GDbXK2HTM39Tx*}|Y#viQxaf^gV*ZMfOHLI7~)sfP>e@~t8SVJ&+O
zAeP_n#Y>67s-2RO5*;MxDKIqTreP-*CD^wzy>ak6Sio(vXj!SW3@qVuSGxKkH+3;I
zuY|BpMp-^qh(7$Og-p;cG&GsXa|NMzT9O>1=z+`Zgc;oo!ot4SJ^LMd#nyg)iS?Sp
za$4l{G?O>cocHHg+jzaQSEF8llg#E%j=x&|u_t*)tQxBqrDso);OG{s8NML;JSUR;
z=$`jBo$sBeN8K_ZIdTHvf~{yx^TZ1WU-Y}X_-<y{k8iZ+05UUb?5deUDyRO3>t<is
zUt&L%FZS=mcy3PRg#Du050mo!NY^+$S$?#u5yvxa0fGX0v?7mi=-sEP@44t>M8k0m
zUS<>K&LQInz^Z|I&9=JiFW8y0Q^-KJ$U&Uasxcr75`&Hp{aOxEwlMl3;*&?mvtX&>
z4)b)UD{rY=_fjunOM1h8WM9p3G4{st>MF==f58hn4m;iv2>wpNJ_K&ZT;m7qu_&15
z!7Z1oxk`d*c*@2e^&DBNus8&~CT_|nW2*{s*|;_5D8W{>_w4~h3KK^S2=evVC#s?o
zX2KirHCsWo-NtTjNsx4S)7$T&4|?>m{vw2jo_}_gHii?yp`di!WdZJ8w-(&`XmPdx
zH%!<<ATF)PQM-DA=zvjWSYu*`FkC_PgcX^W4>UXxifuc*03OH=Q*BV+MqI~G3n{A2
zu1(&qt-dlxV~j~Mx??H5obq72(oP3KbVhMVz~d-qp+CI!8DR78T)ch+KI<U}Jl7Kp
zJ}TU;Dbj#fo6LwddAXGXUGn~+F|V6Wa(nE?KwIZEFrpZI=!tbeZkQeDlAy9Gsa98f
z@_@W!Db0tZpQ77RtssVvccD+o&a_332+H!lNC3uaU21?g&}f~bM8K)Jea45Wfl$h~
zi;Y@NwLi(4BA6TAVe*~=%s-6I1h9L?x*cF7^Q+A642!@5PyA)R-HhFtLOM374oB}q
za-_uTr@_l(GZT_+aEpw9NA<WiA}Tvt(|vIFpe)lUqI8Vj`Me!j7&8Y16oa>*Fk9Lf
zDHi|4C;P(vS?T&$_1xq%Jb>$|g=hm&Z5_+|CRV0~Ci|>Y^Vq@{X3>nL<y#y1<g)(s
z!`Z8`wOgJ=5`i3zIY&#4mT~NWC-xYbF0dvnLz(#;kt+x1n9_Iq4ok=z96T1Ps~zh9
z2)Aypi1xI2{l$3-%3BTpfv=6SP4k>!)6B}fB9n@3p@rl@cp2QEuZ!)pa4G?b$D{DW
z!pKXuC+8<vWD05thDo-e!h(ziTs{_B6JQASAgoSYH?V?(&*>uG0^7*{slu}4|1DYB
zyKOa2Py=~WTD(ZL?i}0yXxN0b-cjN2VJe7AetRuv9?{u7$p@xh2!%XQC9ZG-M_8Aq
z5FUwke8&wt^KxykR4+w^_pj2<T;*xP`B~#3o{K!4`w?Ty^-=$&ZxtKa5Zsl?7{-Ra
zj+yAtH-JoEW85m*_6f5ZjCbE$F4Z=-vLihWVWIcRXS;p6yG5DyxBU_?CBJ=o7nWJw
zfb23f-a2~oBMIo7^~cji)#xeM+lpncACzm!rQuJz9Dp!5FK}ZC`<L;Q{mLCH(gVhN
zjjWbPupK(`XbA6OoD)o)!7|dhmWV&_1W=nMzH5M1kWN+ipSoP+o9ZLqf7%j@)M*oc
zlUX52K&@2<-(M{Q<+*k>Yjj-?=kgfcJl8~HUJ-9B{#fnWvD6$d8Npj$JLqm7v9MS`
zoHbr33P|@05pZ|3fBqFhTEYV1EvYI#+#e56(_4U)Q2Mk?PIl3vPCGhJ|9PM9Ib5@$
zQ_y|*A#9P==OQf~@?+==P;Wyi5z=WIysJ{48$bn>nDff@G>0oqz5O?~(6PMNm<=~F
zyGSUiiufIj$(q-&eD)1W*EDu5j!u2NF`Kvx{mhNyM1qjX0vMVhw%#F9eV9SPlmoip
zK$IfSh)&?zc*7$OA!XCoBEiC12vxa~KHpU}nL9si_c|Cqk}#<>j|9=PR{OmxdfxPE
zxi7YRy3mtnd?mtt=d`Q?d=jf`FDlk3e;{fNj7Hk^=e6>prAUG!HlQZ@5%3^Ah=vm1
zsD6nhVfPZ8u-wd)&=QER7;n%Vtii5}m4bCL-|rcmFWbQ{cE^O(LtUHx9IcF~Nd$QY
z$wF^3HUlX|JW0+mFO&)OK%QR-VH_x)SMO{ljv!>o=k|%Y(_~7DIpU{Z*V?~??vXkt
z8<gp*eWK9nraPwpc~|*{n&=mfGD2AqG^AEN;u`&qVkhN?-Bf{}-|~LkCA{rT3i>HP
zeOfzvg99tT!7*sOFMqO*jiR0?8T9B*V&RSj%)HE#9!gdxqUh;O78tRzK^=h)r2ZgA
z-{?qngy5dKY~w*<Yj!|V11n75l>+($9Y=yOg0O<F4^SQroSMx+_paX_s!|4`o@R1^
zDT#XS`RnC&bE}a{^d(`+^+HUPB2l7Gp(tHCv)TAmHC?ALLir3u1cWCxsAkIT(jJp?
zq$Op-QQsOv2Gp}o=E$3e(9{r7LKImZd4VUrDaiqI+|3srLz|G^=Q;xy2Oq*G^Fw+x
zkzcpgiJScdj3y>Pe)pQGBhw*>%c|MfJWl1;6&pgN467nAedJFdCIb>zb~3U(y=I1R
z#!O#+-&z%sY9!VmsVqCQjnKEyAyWv;Njk3p*px$eSk#r0_vd5{=xKLX(>39x6$n4s
zH@{?~^xpmsx3<PfSAsfSUcoS%MH0!OMJFt2D&zg8>F-I9B>jj^5mcP*<wR-hsD0Ja
z%GAMr;yDaC?_gs%HB=pHmNz5Im0t`z5EYIR73&}vPJJtkIvNVVQ$o<VHe9sKDb9>i
zs~Fcvk~PsBV9i)HpDGU3!E#zs=j&|Ag^HL~d|R9alNt*Ai-q4`RI@Dw!~z3Gx{7k%
z5VjUzc2=L6e%Ao`DVxVV)+W2X`^<C;)oe<>tqmo;bdrJzWB8i9!AQ55qgkK`ow!WU
z=Sy&YCTaBsC#k+Us?7o>?lHv+#O;K}sgJ^wQ0yC?K#76&nR<B0yS}B8I}YCe;E*<F
zCyn0p)gW^5yLyalm6`f{8#h_Q4EG!~_1poy(aKac%ZCBgHG3~b)E?Y%xLl_n#lsom
zU3qS!9_9GD$zFi++{VWg)%*_+6$!8pZ`YClr%K24l~z2ZaQX$^D+*|nEfO6rNzbo1
zqH%}B8|&(v@R1QraJ1h$7huUqm<wTVaHa>f4^y?gor>9n=i28f><AN&0fR-Bh*z(k
zNHlEw0ys;})#L#1^<J-eVWxdnu4_)bmVa-`nkRStbYDJSZC0f>Nl_rJ=2i`N54?Bb
zVelOE$N}gVR%2r8vRDo&*}wD$aT{gDh8V$RaHnL=DZoYWf^+|^z(=cJ2miVm3XkJz
zLi>g!V$2NvTG*w5444tJwDYr_3ulG>^povXMTp{Gf&iV(c)sP;eA(fEG)o0GL5{W)
z6`({ExwK~utOw7{(#cvNN8X}6viNPQ6WIa35s{7~qb+6wOyQcX4GaG2E3yaJc{kO1
zNVtE{byu|3_9ICw0O?+fOK_ujRZoS4Kv0Ep5WR<x5NQX#!{&>^$IuN4-==-%fth`k
z(U?t6)C30El2x`ChqAZ&Mn~*n<%gHMgt-FZaT!<6c2!!<v;BsN+dzME!6uDmm%e<n
z`b7nER}XCkF;|w18t-Z*9}hX9w_S&mQ#YOW)~DPvF1C&^ad2VcYOK`%;n?CTgdfg%
zeIG~_p(C6a->_v&06mDGNoqGrM|ZjSOm-Z<kPu8^@o5T;AI?)g&`2i>8MFPwGU`*7
z*as`0BlXBrS+AsQsQOJH=c>gD$VLfI-eB9F)H0l({1dIcDz?KBvPYJFuopPL+&+`>
zGrgcWXnMasK!EwbaW1%2(53&U2IGHmuK&fk{uk%^|BrK7Qq_|E)*;WhTW9h^Mpw_m
zS8qjO@mOc0asN$4SSsIUt9Cex*tj3FnQ3pf>VaIGX|lXcu3l7w^IWynSC)CN24p98
z*UumWn2Go4y~t6A0-TmNn!z?7&49g~>P_iW2t)s?5@Mt3t{exVU1#M_R3a~tK|zam
zHvh+nmI|Q5UwzQokARj!kQJwFeubp~3WAw*tP)gHSPAZ&%i9p%#w(SSCGGi~W>dt(
zUx9vRmxiY|QgIK*N(}S?$Yv=?-tdsoq*LvYZ>wFM>uZ`#znQ{{6avB#Rc1@2G|XAJ
zfbGl{48A$<uDwU+Cxw_$6h7+b^zB;poU>~&avmn^5T+^LeCLg_zBU=M5rjA+5S~S%
zQ}jHgR}ki~BN*yb6IA>cwibRl+oJhT>Oue|4_V$FCQ*QLS#i-sKY@9tYS+Nq1F3+(
zY)pGt%uHOBWa+s^l{-XFK3T1y82QJB0h5>$`r|7>{->@Ep!;1Ai{V;f2%fA4!s^>!
z_D4gzm1Ww{<ir*KcTzc*ZoJ{E?zM*pw>ny6qq4&wYw@)w1pb*zK$JuTm^tztX2aj*
zn?m*Ku9g?QoE%^dFpSik;@y%(i!%5Buy;>eqA0<ZK+Cpm+qTVJwr$(CZQHhO+qPZR
zXEgqxAMameu83H3z&UXsat46AEeX2z24oq7^Xne8$=zRPNCHraRdC?ac(Vn4oXXng
z&xn-Kj~h!5+@kjOx$OGBTrOZ&X+T0)0WNybjq~?>oH^(D8SzIk7zBLh=wJ4j_1bqG
z{%N#xH+s3Gx?yLpc1<>uBnY|#6wd0)2h^r5kV?D~41;FIR*tL<L-U5m(ruv15YO+@
zhPgwfR>sA)wB$l|LueR1(2{3?3#crodV<W+6;3NJkEb_)X|B=B+aA1j6ZJUC|7khe
zM^FIm(*ZyX2Pxy2pz#RvNvZd|WJaE70{jH>`LE9Dkugx}Dq*qZPk>9A!z`YG%f#oc
z7u|%%r_em^N0~N0;IlIV_qZyJHj~=MO@#ip&*<c2YA$BmPcw)md%B}JvSJBLL!pPV
zciz2>OnGDkWn?>3<Pk~B4#R6I`Qt7NQMgA&?F&tTBs!A1>|}^x0yC6J3*J?`C{(@t
ziOG<~+wjWH<DZz~btP7xBpWFxxH4lqsms@)K2uAV40;6ce<Lo}!I7H3>c1`<MQ#-I
z@0p-(bOO0QlDR*Zg{<=`&K>)vSWLMh<MV;33W)R!g=*y^K8cmzlKRoKm&sMg(jF?-
z_1fSd*e?YvF|`8HPY)t50`Xl6q6{EqLEz4$*S74y--eOHgKp+E+{PFkTdi24hgtoB
z?Dd_m?BKtmisV5uo8{^%&)%7c?&-TBQz|&B3!cj8J=#mRNjQJ_Z9%3)r_~M5T@+qz
zC5vsiUOr2H*mDmp%uq)mYPR*NFZM8X*W8X759M<6v8tt^-Vj>vMNobS9H=cvaR=`@
z&g3S23CgrYLc1<<kxvgigKeqt1K{!+9DirJpvfkN4Qu!ask=3zLLtQ?=(e|>TtpCQ
zK5-lUtLsgz7^ycO?d2=s2!rf4&98y&NgUgFr<jPs0AEj$hb-jfQPAsq0{y$;^Hr7f
zS42}kS)M+WY|le)ayDZ%n*+4dLEj0PjALzX05msrq7<aoZK$tg<iW_H_8YYeJI&7*
zSPaNr1V*ySFjEI>VzahUIOf?$6&XfzGqgF+hCqWAY&1-6$toW_?NHWBYCt~&`PJf)
zow5|@MT<g4Lj%}f;Py{bQe5cdqPhs9xI}##33)n&;}Xw7nN6FpFD^(ds-X~d6yg{L
zHdW}CTT@s8wC(mJ6XrNXKZptk-<9)jZHX0a@I~n3(jOC3-DOsye`!;a2_1-5cQ}E)
zL=Kc%z+uBIMZ0xeZ7poU-_V-qoss00J0VKGCs*e;2LU7qfLYf?!#8Tv`@jz)*DngU
zoM|h6?*E>dffw!md~@B<?Gq+=A$B&idb4^t)a+q`R$JF#pUExxHfuKlhMtv=4yJRJ
z;W}j6vLydxr+*^fATd1Zn*H23ASOlU2%{rF75+md=@qg}@c1_N35x6@jYh0je|_kY
zMrR#@rd*-q179M)#xVzDxjV<{Z+C%EQP6hBf>)|~>QG3jw?xLaw9|-+4-x?6Rzf2v
zQmabs`L-m-18@>i>M{lr^0`&z>%ZSS@gZAMHNopgpmb7hp2NBD@$!uUcTu5qR~4G1
zH8*i|<`yz+ws^{Nt4@q)gl(o~hIMr<5d8Wf!(`5qMY4YmWJjp4w!vp(E@_4X8h&^F
zU2FHC8NY8Nq|u-!uK^iKWeIAb+k0^LkHiUw%W5ZfOp{PTW!tN6;^h8HLmDCcr)B3=
zp*Wrz<+`iP<(86E=3>`bQYj(c($RN^9eRZfdb=5_bVbWdyH)~!aqbRqvnG!QTkRf#
zh(-XmmtimYu9_euRvbwev?70cD(tm{7^$!zblgGWrK3`7=_&b;5u$&rqUxA3C{osm
z@l2=<z`jWXCbnyG|D3>z!7@-MNhxH>L-&O1VS_u)Wu@o`JFq-P%atp?FXA7aG!j|B
z)KYuKaj#{9?X%00DCoh2X=Q^m^pr^x1bRVUp9h~y)xK%zidY{8T1g!`$)#7ZE<?X1
zfs!*B&TLo7JYzhd5$}wfY^a_u|9i!Pf@SiW&LFp$*cmX7g}mW?!33@+#o%JcOt+(m
zu^bDmKA%=o-H<^aIY7hlHKt{jW*2+SAho~b6oVV?Dif#VT$CUSydEcLchoXr$dRAn
zedjH_B1{9>pJT+-wd`H%(Gb<B*mD($dl2e^JB!Q3$3S>y7DjwtjT(dMu~~{vw>YEv
z<EtF->V1u0A5aIlw!o;j0_&E*{QQ5d_)?5;)j9x-*y9Z!;cE`){jBp`!dkyZz~P9u
zN>Q0zXQg~fGP;4_<PNe77(gkz_Pdcz5^01d0Ict#Ko3V2y=hfmXEF)Pg!QX;`2nd@
zHrB2q7<g^ir_Ef1ci@R8Pgab+6P`z1<+SbxtXT(iE*`(osGI0u=<dgy8WOg!zv5!4
zd0v!uMdc%X{_$W7nGB9+1n3WGYygwrM$?|IFf7Dg6~12Vi#hfFi*OPSRGz#qLI2n@
zJO%MB1x#NIliZ+xAZfU*Pzj4LZOHZ{6ba-;Xd&Y_Fy0n9dqsGoK`tj@k^lsOU-4Xy
zb&*=uVng#yt~r2x8!qHxYldo1dxtjlWdO5Jf_d@=Js^iQ-LxQOO}mtAmP{#kq1@Jj
z>0?dcO_i)Bme7U1m9@{P`p&C*9$)ozKc|~Su%~i2i2>pPMo3D@V9sOOWI;S@PbE9~
z_4H6No-AB_L3ujzTZ%uk|Esk)Ztax^KaFv@Zo;iLnED%QtSWbe1MJ~>HjlmYJ-+?N
zI0yyz*FQDUlUNs#WXCyO(qF-AM5)p6p8^_P0p=+`nYK9fXZf{Ue;5WyK|X1s0R!u%
z#%cYA!I~~=6W2ZXZIERXOR-e@u8F4*jchS=Akzh?PH4)Z0drj#iq&BLC{Ns#lxLcI
zNuS@1qhhJw?DSHI<=%sJ&j7sM*UaxtZ#$8LBgArHu}>!zH%4v&h0CmF1TCfd2NRWX
zbPM)R6QCaYO>Xjh`o6zJY=ateifWu7TYLG!iclF<Qg@Q8i>`;$Vr`bZu1MjQDM&9m
zf&|0FM_pEB%XH&8Ew(j<4Peo~tl(J*#(NFJv0u6aPIUztw&n%zLDyqxSTkB9@eA87
zv8=1Z9YRnvJtwF7AM(2-xF)x~eC$ymiXfIiHv>sAMq<;|J!B>xL_(+`OIP?L&Edj^
z0>;%9oZ=mYS%g__My9vamhgbED#|LZRe^M0!6Pv@t!ySKn%k>vskEs|*1c_(V?~hd
zp^d~T`_&P^7aa#-YaVr+OQDGo;);&nM5Wnm?cQ5ku_R-j8SbcR<?pQ0H9BknYJFG0
z68B23cx%fPvx_$AFSO*YEvq!h&e(?W!hUP{?`Da!zH4H!VWc<*v6HRm+R{?rKGq0W
z&$V#rHi!4GJGr$&u?rWuuJ3Z87xV#K4Y`#?);h%&)A5Y$p&^fU@9U>kBYbM&4(@Fs
zdz~@NxXwrgozLE!#s@9TD(JOvor2iA4B!~f`*j|b$?zPZmn`3-E{f9GVszIhJD$kd
zx7M_?_|~%3mG4IAGk>mjmd|T7WQr(F3@k+P;<*-nQF}}D&%#Fl1o1U6qDa?w_!<r%
z#@f`q4$_$Fcp<~pTH-cB`!u}KQ&-$Z`^Kkq%J3$dk<)>K0&;SU$RHst51ATXk9M&`
z{qRkTa&XMKW0qPf?-Cb*_g1T0Ol(>!NdJ~#0?<u$x7*`wDpSZk-c$M<AEZ$|9Romo
z7UYM=KRe)lMzD*NrfJ-Z^>m#Q(&DVt79o%1AP6}{%h-c#pgj|G)_T-*YZaSLaZVh8
znMel62Iq|TuQj@5edSRD*Jd=NpGyiP(A((g!5GY&fZ^)tP~v6fw7AF)^HnQ|jIAyB
zWQ!(pC;TBMH@D-=jqn|4zR{i%3=-yIS7v{`18aB7c<*^HdOuvv!&T8;W<|}E!Ashj
z!w=TVr~^eo0g-{-ebO(By&S=FDZB#|8~5b=cLyc9yVr&&{UHIWB6PhZcnG5kw8z)+
z^9%@~&L<S2Au1TQ;BHAh+?t}~H24lDIz>&cV@r(*zeEY)^d@mNf;_DCteiD#ji|{5
z{nD7b7-taDYGlZems4RC_*pa7Hw2v=rR*-7))5=kC~v608W`t=-hI2ay2bmqZAXVw
zVB%}h=9kibH!f<1xap6HAoz8vYlg$<6)A&L%6p-cdY881GwPSFJLL_Fm9ClXfuJ+Z
zOrUR;V49*!39ttS6Kzb^k>)w8(#$?*>Hk(FM5s1i5DR=U$bTiF*h@xqA{0ncs-Led
zBwFWo!WTxneSg<K;DWfmB<51q7Ff4Ub_R9ix0OU^7pb=RbnW$F`o;J)DAxw4KPH7v
zHa1rGn@|r1T5!cU>9t&%h#34kq%)d3ff8NeKKiFZgH8`9Y_22X(H09qXmffVLU5_0
z?&4m)GS$rXPVM%o%He)+0xmv~7{}J&8dMi%e-G(*xP$d#`Oe0cdL0Z#5}<^VpSqnQ
zjkf5M6$db`wT)U4Le!lT$G=>nj-1%iRKS85+M~QCgD2!?Hb|hNd!`I((XnzI?jUVH
zvDR600Eiw&!IR=I!c<0hVY?v+OVaE&yoqUQdk1iP62yDkiiv$Z4jfl!)fW~cnOB{g
ziSsW$f?mN0^-dDbSLsgwR24FQ@&RO1BEwqFH-CwsN&k|uc+J>$VZ-q&d2QUg_N(vu
z#3AOHvJ8~tS722D&AQ6+zwqZ2;`<+@!Oz~aCE%E|u#N_Me@tmU)d#iUiA|q2xf|SL
zHLrWDWcld7b^UxFc&$fgm&WCwIHu2q!QOhDQ_}hqTtI9VgV#$pGCFs;HNq*5H~9F|
zNX9}+QwQ`yfuxXPu`_0^<hL1ETm(y$Fh@yESJ&%3*1XbY|Kd<Ay~y@UqP3;KtDcP~
zLRv2QC1D0Yc@5*eeor+OC$hxeJn1--BQAX8IKxpjasCNWQb$a<o=KJxfH63Z=2Oj$
z0@}*^^sDC{7Usy`Jvl+S2OAz^t4G4hnY{279AZ1%6@)@YV^0>pPsPGo^Afm&=ZMyr
zS>n6lpAzT@FMyO;11<2>K%!SylYNd7_*_0j76y}?AM#3OFl55`1z*yh1#-LoQy>==
zPA!bO97&M1EM%{wMLoYZP)3fL^B9jD<ihoSRLHh&TIPq}9Bur)Pp;l(cH0>YEkDsU
z8wA%H{jXTotIM=1=hDJT%zbd8v&sD|y5AN3@A#H5J<+u7@HOHRN9B^{vqzgBu);4I
zh<PU1ve0Ud;0pXcR({$dMvep!1i|;$x~XK+gh+l~ZT+M6_h8?w%9-8IP9fc*_Y|_4
z4je128Z}6M0<l8?Oy<}hgzaUlqHQWkUF}|<V>l*}vdz3)jBPvM!l}B=pyW22Yg8nW
z)6REp^UihKV{LVK9j@l8fw4+OtJyu}qn>Tvrc?v_m5H5Y5ZiZ9ziM|c^m&R?7B?H|
z$^ifPC&rQq0Wu^e*T4h1b^zze8&wIkX(qnzQ$)(APw3(_1fAB3xr!iRc3JTml}T7K
znDM*tZw?rkyTw4)`d`zbo(nS*@+a|l&yi~;W+v9w0*I;%WKD*+dl@{Cioqzpj5o4$
zOM^+<y>ipjrHyo&`87~<Kpy3H6V&@dytya$4zdqCJ|XXZse2wHil-+?`D8?L9J(`?
zo(z5mDsy`lbB1O>yMh>vS1s2u+?pAvus}%%66lzWZQM0v_}fOY@uQEKo2q!H+;e$w
zoNAfmZKy)x1A0)(OEMpFVi;<cP@T6p1!eh`PlBPI%6nsIaRd!i6tCLh-)U}M{7_d$
zZj|YKfyDA2)L?j1`~m`o<pR;!uf0fLf~t1<j`-)0;JPbzYZC-23Uhi*zFHD{Wt|cq
z$6(96OKGC|KLPky+&Y+X6DSIx?F34ODAM7D=QH&9;_h($bQpPyidb*quY-<ddt&qi
z*tJ9Ns;+Z9${N|uitcAOxFhD+oO*Jk^<fp-(@w<U8B%3CafElUJam4c&HV!Ou-QZ(
zP`N0}8>7ZOTeS>K>33VlJR_ErqWvF8^NGFxRMtuh3X+v0myX;?dkt}(yq8uebN0C6
zpvr|LE??O9+F0?*a`tr1-ZGbuM+H7(AIJgLjBc+8=4@e}qDcS7K%HN!!b72uH4M6R
zT==NcqnXjM0Bz@!yB2AdEJh#n9MY@}gM{&ZnxQo5UZzIru8w}3A-%Gz!S)r<zBlI-
zUoU`AO=8LPNZM6w$2n;D!1?4VUZ3EGVOio{eN9{_9>-vKm>~bWtD09zj6C_y5^@S$
z7XwMC(xcWBvNyR{c}f=!-9m^Mu%8QIF96AAd>|izG6>&$_VzI`KWjs%O577<Rd^Q<
zH!zE1x|48b6P9*<l8`-1Lukh={Ar{F`t9T;1y!M_crD?ub(@?C3jreO23#5YQ|^(V
zkf85277>yo=W|@7onqUGX=EH5e?;KkahAkZRof1Hu*^(^(o#-Sg}H<~yQC<ZlFxuE
zucHU@n|CKhbuEWENiL9rL@BzUpMZ29d*Fn1A<9%Mr;s~Z<5XK2^r;@;zCtHNqb?f2
z)ks%ZlzUGLP%GIuOal~zGdo32hNmRzr5D;%IfvkX$8Y*^Aa{xo($n`(%Tp>-T&q8S
z$#}M8H6>s9RE1?bLjVHhQz#*OozS@Bfa|&Klsic4t;&$j&h3?dhdTU)Zia;k%YjXm
zdPHaHMoF-Wb%ioe@wU8j{F^@$xThSWDE*t}N0+ISMlD^5C-oJKw>e^1M3=K_#kEaX
z2ElDP03qZscEp(7m-yFqCOq0X^<QtUdAKx}NdV*-0?ttXsVnNa`SP=|_=ToX9xw@G
zx>I1U$_V8K4dP7F0lWnWE-G4;XcdtI{!UC}Oe8+MbFRI|m0cabe~Jy#irky16c2A6
zh;C~Acx!w=aYFa(s`>m>H?xGiIS%0xHO*_ot+p4em!TS=gn6&1RjAEdogFkj0%E_$
zx=q9Mhms(OIS4SO)`}$xbmLI*qT1nCQjlt#$F_4*C3GC_qTlvTyAM0-pw?K2XWx~<
zo0#|y&|g{A78RrK4?^iQpb1k?H9zK!8Q1aK#m3e9ah^(npl`ECSu3UY^@5}*O(Jja
zc(pQffO!(JB_v86ZO8ISb7;MZEP^nTvck0a(wppmn-!YKt11yG>fXoK0GmV59tlKo
zR+henRdxFn3IsQ%SnJ;aNhz7ATf^9TojRv0H-bV2n9d8~TK;OGx#b`U@BcT1q_cqp
z{V#;Xl`=I>e9@pV;D@LkU~8}=YEPTOAq?Z~88GiZlH52_+?PEx@CRkOf@}cOphoR_
z=WiTGBatQvmKMc~Uv<Us)njnM0c={;DUnhd4=0ax<3MO{$3;q^9O&lwIDI{n2a<c=
z#sXrA42qV|Mh&6C5JQi!<!FqQ&NHCL2B`2f!t<LI$`govSy9vCn6znL56zd6%2F(M
z17}xKZ>Tp8Q-#Va_pVjfEYdXi&AcB@lm=taGpTIfS3%ur6UqP9A|8xinFH7d9#`1r
z8M4d`YYos0o2F}j<Ohh8N&>H401L(DMmEy9>?T^?XDg5KL7=xmi_Z+pj#U!s6>EIC
zdb>PK4vnJwBdal&7((#JDe7d?Bj}mSg=-8TDjO`|wpzc4&fm?QG@s6HNPpBzWR_V#
zk=Vo<-@jrg;^=kG#Dyu25!8~b|M#qesn!orvQj45g;EB3yg@tL?`67bMP*VI4Lv&X
z=DiO$d|v2|E)5`lC3_ZYnh<OjmMlSA(u@+ukdSHoSMjwfo6_7MYTprIu6Sz9*n@es
zy~17zt)Nqc%5WVxeItdiCp;y6Y}a*|%SJWP5G_Jqow9qY2qoyrA#7mWk{IW?cn<Cx
zEz94~8Y=u$xCtuf8NLT!<+>VfRCu))WE42t(ZfWfOJr|Qj6l$vy(Q+Xvuv=}CyX@a
z!vZ5t_HRBuHK9nhdQ6a!ORQLVw+Y2to_EdNO%06);U(XiT0N_;SucNW4gWT|?4PY+
z$*#IM5smvvFv&n;W{l<lQ%ruuqqW=|BZK|?t`6+VA3x)}1%+eyn0Lc(`2m;+^ky7L
zjgfKgeq|sM34>i9?O1+yV%j|J+YE#c8Q+~6SH<PYJsBKC##<x9)YW7#mzI`6W@26&
zy|=B*OWY=bj4s~R;1B16nTqO*jVBN)o>B=OU!0-u)^ZWeecDE9uZxF)=&D_Y35EIv
zJdCNXZsSiBD2NNd4fDaGVpC#ptGkBjeaP+1vymNUZOc>v2<Xa|)ky=94P|!Uu(BaW
zx7m}iiFN;!sQ)Qzt_ri6OJ=3+ZQn3Xa|qI<>b6fz^Cy;&#@n9jG5Xu;aJ%RpN=Xs(
zL6$x#6`R*$k#v@VyPd%rbt0s-0H(T|9tuOqlz-ETe-d&&0^DrV_*-q%vkQi=SutXw
zEWViD&7&3zt*q+TE-F(8+Kk>&W!h?QD~>lNmBmfF9lb#m6auUzQwlbTeinw1_DT++
zv9Q0mqmH#>!0k?pm7Mh0A33r}z}0Q+TMjkt_S&5S6$_vb@_g?%tLn!5Bm|*;hS$z^
zllKwC`@vDw+k9?TE3xdqAP;lJhjR{umd?5ES0bJG#kCd5_Rr4&&xZ*)TO;cIqX15Z
z1NblOv(GHf!-(s4W$pqAB!f1wUT?)@DYKJ)f^mP{Q;QSW8r^~1ot*|8kT6{9yrv*h
zRuO*n`_b<<ft*A^^16QQSARKKZIxy;s;LzVtndVpG>ktuP-xriwRMMP*c#{e0wcHY
z_NG}i(O<d8PHuu`F%XPyJDFaDJUdg^HaTp*wG)^{z}r|u1;QVbZ=)%aZ$?&xp0AhD
zVA%_JCd0GaE*2-?fTOfU2k+Hpg$C-8aUKq0ePoMEvS7)wR;TsqkjN%;$rFPu_i7FC
zF;AX?sh?X2K?FqpQlPtJv4HsJ!5*RyxR`=-PPOtJBIjPQt%l}17sTdSR5eA$&HQHf
z!v1R0(d0>>RZ+fIjQd#GG~<%(ox{R$YkN%+8Q<~=Ilg{6e~h`YmBd<aI$gL^qH@2D
zx#rkb-4oEW0z#~{*}SnNI2OWw0MmKGLG>XiXb1C^_%w$b7kgq5?<rx{`$O^b%ovU6
zUm#xQE+&It6mLg}KCo<5)ORueWOupLEA5>M98J4fH|F17#D9_aP&9D)j$v#Nv+f94
zNjo_Vjis;!EecL%mfDp-0uTEmeZ`u7i|za2Z&`BCPCTH~Z>ps1JWdN?@w^S_d|K_a
zKsX97W53!DvKzCp$@}DmXN2V*O4I?_$+_+h1yxU6nUGJa)OhmnJ^H~e8o{``mM9#7
zcryWxMR0tILw2<DY5izv6fU1o!P%T%_TsmO74Lj6b}?w%Y4(_vI{(-|G&!e^%DD}&
zl=DH~=D%;O4dEHIuOdrR^b!aZe{#&8q<<<)ctNv7vN8Vq|706te>Dz;>QBv{3ZGdw
zAQE8}4Y_e?``@%WOLBribNcAUF<ltncQa}rV(hL!q{7(TI(l?A+|6wka`d0h^b5w|
zoZs}^83JLk$QB9#!*VB{!*LSS<JUYjob7*Kd1}U69=fT3%1Mlc@m|;r^XHpLj}$|F
zFW-$Edu~(fPfNXdAgNBmqcB!$*%bNgqNbVD?1(}rPQ+zLpvd03q7T_lvGxB_Wt*<K
zR@{dvEc7Z4U7}Ie87aiwG!f_Mz)z+0Mzr$lH>E&#m<`Iy#VS337gPs9%||i%kC^7D
z+U5j{4gDJ3HS{b_w%~sa>`+j7hts*GM!b+pXAfqQ?>ESyVd|6AdUTNfKuma<Lbp%O
z$;}ctHUw&>XDy6l>Cx1siXB!E1jPbxez_4=a`*7@PB0zrkN!4Wj3LsD{$PGq<(w6s
zw~$52Vt-x)onLOl^8|g3?6mCv4hdN(%8^(&KD@~aat}xt_6vhdyb9{FRmqbT!TK;I
zWVi2wx-ly4;Q5U04Li~1%$t&Qgi8mlVV6+sfHzahdJ(n(_UtFV2cGak32R1zQ8`Mf
z#`pdxj#0^TICBp)962(9m;G!I?u^`Ta<EtjuV7-J4c}aHilef3ek3ooIV3DxV+NG-
zx#4dZ9N&BuMt=W#Gr-%7>}NL@i`(MqCFyt-yVC6PbP<OlT3{GWEX~Y-K_Yl|`eG)L
zP7s~q2V+?`$Wx^8T8^vrURyMP@pV`IJWmVHQ&GlZ$kENL)V&g42<rNV1u*u7`nbf?
zai^~UEZ&vnZS2nB<2q(Lf)SNRqO3p)44as)rdU-3`TFZz3#`|{&3N`K=x|M^dO;@C
z%KK9yXw-ejp&}pR*_*x!M5H>l#0^0HzbGFJ9LVy28+eCA7+ow8jd|1)4A_n8+$0d!
zLk-<}$}1&5)tn@%S%ToBqOugF-39f-;#ip;zQ({KBTjgf?(ZV#QK*i%ogiinBycAl
zH)>tWzsUhpK&kD~#`n*@BMZY1tRrP<V^OP$)~xE${_Su-GQgHxq?sX%yvnYoNX#Iz
zz{kLgaSl9XpKCh!8LeZIM5k_gbKO&x6x@op(e8m8896YJriZ~y|Lsag?Jvw>4!Clj
z`^pyqrbxt4XYz%T%Fkey_|iSZR2q5I^d%~zSACF6;`XS|Wl^PTLkn56;5?n>kErb6
z87JeXZ3-(ZZc-QQ#bMU2rx>q=DXYueXqdG$yDCfYq==J2vyBEGl_ze*OqHlCyk}1T
ziv-dsT};(sYc`|c(&=>lSLI@Ll~)h;^$^<rdM^`V>=+|wOcvWnB~xs@RU}d`&vNbu
zkN4|i>}kYr-roHMn2BVcdMGvDF(y&Z`f&wxlWy~fF*G+87=&ua>dWMQ@8R2|SJD#)
zhm(LFBolHLecJ{WNEYca#l(Za2$o+z;8`ttxT8|})>xKyT7RW@eC@p-q1-INI=hw;
z6bvO@gv|NiX*aOEda%t;@eJ)j_~G<z<SEoL%qL>hPDy8z;K^c`KyYEz*K(ke;^P2H
z^{x1opE&5A<mw$gubqy)WNG?1y4J0NQxu(b!+ndCgZ?lDIJ+w@aI@*K@9x4Ai@{78
z?XpZoX8mD<V$5}?B_<?BpuRX|GlD%80F1@EGzeH}aGNn593DtoRax6I0|FU9#-1;i
zR`_9aJObtWRL7%*7W*;o6ygTS+Jf*6f%<>VBeJ4?kpH0<|A$`uAA0fsBfUs^oekLe
zDZeX=P7B412M%Xw{zx#^vTs;`^LW@Ysy#7gIHDLQAQKK{W`V=X=XU(f{63nC-dn8U
zkFYVG8(8zCf?HonFIs~+W+g5BA<U<h&_bG`sf*eM)8reLSFb`O6ge|Cr*bG@2kA0;
zR((fDHUwjm$5~$<bK*_}OC1|xvJ$(Zeg~kJVaLMvNbPu9(zYiYfM38T8qTWyz@Z8p
zf?4V6fV!eJ2Hv3fC+8KOjpkSDXjz80<yx`xc52gIs3e8T45%hYQYhEpj;a0M5lI&T
z)d*O>ngZUV+hlG3edaT->`&vXn&!8<jCmyvgpVGwa!K05-IEY*O7pSwn(-LBL&pTt
zU=K%)AYnRugyb#ZCw%h@5Y+ie7Uy;xzu54$e5>iCrx);RssnP*rpwzBp?G!WS{DXJ
zXGGMDkkmf?5(<2afQHWIJY4uuMd==7dzIM2v;zD<+{EsBLbeuF?510y5Zyy;=(Y2c
zJ|6TeZ=a>SNPpMD=~uXF*%NZxxXcr0|8lHvd@GQHT8NaLhH+-FTK|r}2r)qBSPc~8
zkbiiLIWl*nI~sE#e%p;mb}6oQ9v*x_+bp)yC$)-mm2YWN_i$sED1siq>LbN77i{!y
zJ;<uQds=`~9C-@mSbiCScC_$8q^Va+jo92n-LlEm)wzO49F$GQg`O%r(c#P&Avn6n
z_?5!W)Z`g;SLAZ(nRD0+9}SBOsnM_IeeqFJ;zg==#|+;yga-4%@K54&DK(BFfY+!I
zW=+b3<9-{#*3k|4Ctr5h50J&KeWI0tI%ITNKz$Sg>UF+xMjdH+^;Ak^9QwknKUBBu
zsl~VV0#8%<8x?sJucS)BcFAIi_c(j1&DK9zJh;*YlsSHC+hzVtK?3S??}Y%hp4%lX
z^bwyCM~$!z30-4&i@WMa^`QSQVCFFDn1+w8?0~!W>tbE}_*Fw^=6h7pPh8nLOMJ<B
zIaEwW&`%0D9-EPoD0s5oR_-!42PT?>nqr@%#*oD@oo1tif!|vUZhmgP9g!L48(==C
z_I;Bn<__{I_=EHN$TbWr+dRax&&1Q{SRUZ06U0DY3v)0psI)zx#7YF=jVb=--awxc
zDthvusb{yF@v`A6OiMk*yJ`sb{(ae1QYNQB((0>IwD1TK*a0-^S`Qi@!%P<+4HG;b
z#}9^!uJd!R#lC9vB?zVN{A%WOCz*7S>f0~MwoT{tmikURb@A3OXm&r1Gb+S#vk^J;
zkb(b%d45wI548%G4&*ZBAqHmyoZMJ~NyB!9X`N_Tqa~v<rvd8S@|rQ#Xzo{}MmooA
zsY_od-^k$e@=W&$TYK2XyepK66WZ4qe^%3E#RD?-b5chVdt7GI%g_UpN7Y%uY#nu$
z=wIYKkSP%k3#}XouT@taHYDg084apdjludXC{nh2zI+jMg%mP8#U^vgp>k8Ed%hE*
z)sEhbvtbv*Y1WVH>~vIaoqBG6Q=Rx8d&+$*&2fG7{n||uHT?sP+1ff3y<^%Z+gM64
z17gJ}AGVW|cMFFX#H7y1TV0XLYbfJWfwZOzf%c`qQY?E@cOcpxJDudri1q5(T8*B^
zZlgmcZ5tkI>@e3^ynJ`G!W>4mo#|)ET|&!nOk32W-@t^tex!(kTBxms&DgqUhDa%;
zC1xyd(JbDA)E3D<4Z7ITMk&GYKIC_>j6KN>by{dsM}8f_G+$fF);Ql~@l)lmO3C~i
zfyA>OU_<E>Cd1nPw&Q_GS<P75d&XnN3w#<?E^r-xg-KGHWG^b7^7p`<Su|rf5NAGw
zZEN>yTLN|@EINFMYPrbN>^O)s%ScHf#VZd#IJa;F^E21u(KG~F)g~0_&ttCWa<Ria
z$rP=+RB7F0_zW8_jxO!MW=CoL3$w8ngDpYnZ&7aXN_^3&-;`pf{ed1BG42e6{3j`;
zPAEu&vnV;baWY^Upfh72`d!t|mYDl>MPJ1BV|haIF_!)0v(;Vf0mJ<p5-Z(>7ZJ@^
z$BPmsC7TdiU9=LX>W6IZdrG8tiEw0uoRBh2F#lr`L=K`yiT6GYPJLorV=347{%wS~
z_VR1w7a@<5MYDVMnIFh}Vy_UC{RERIK^@d&f*%<H^}DAL*xhVgp9_+}-55PWtFbsm
zvBs5CoBC~&tANXHjgElUOLjiw^SE0!4p#8kMha5T3s%o1LgJm(3fbq^EyYsVgGBl4
zXszPe6g!Y)X`KbsCx7lwSq3fCkP^dB6YtQryE0e$tg;^;-XZT)O3k{!Fn|dSZPpx(
zOyrxqDWqQJJ=K4TI|nej@lZXXH<UPiPy4<l7lYh5cnuB%CqYZ$Q(i8Gy7cNDd#rF;
zO~=mvJIVB9qDj@L7P`DzVa=;-N-&`1rMgZo^dV0u45Jz7js<nGI<HHy^RcP*pg-S^
zQwnj%NcVhKVVg$6L6%5UeVCQ{CFeGi>p!pmIPFG-Z<EuK_>hA&9`lt4WAr<5^ja!3
zG>Or#!-Z&5UN~~Pq@_Q$i<0_zm77_U&)qP*%uWRXcozrL^N5TQyIz%J2J3h}<8SI_
zu@#1m)TE|@j(hBY9LL>zL}?lr(Zvat$?~QR1Eo8lQ+pp0&Y_WAc=nC$<?c(2A!h)|
zQlGaP|H^B>tq<3^Ww~Wc-s2AMr?BI35N_Qgqm!x7($=K{Sl8`_(q>b^0UN<~Niq?}
z*$2a$nkXgFUe4OR)kDKFp?Cx~;fFo58IufuE;noE4xbKGl`xVog3ESMIO7Et)m#sR
zrPB)Q8ETX<^vG-yf5wzs#vox1J9iyvGgG=$RsbOqkb!If3*!=so<ne2J-FUumjh^}
zn)Bu2HKH=Dm~eUSV8=@DX`ePuXW-p%AHQuI>HFmgR>H@k9C=ZxuBm*2`0IYu3vnq`
zDZBOW3{)riXj6m6Vt3thH+tQawFhwvrsUEkB>G}CHRq9=m+f`njGodNBPGB%!Kpc;
z21K-5n^br{7$bVOs89SYYFV*h?ADbTMvS7MMW?(V`=R5_iuHNrfC&R0j}X*m(4`a}
z=+%p#8Y#n~ocly#=OsH23Jf4mF*)RoKD7+>YHo-46uYYkH|IDD{aYQ|dG;Oo;Q`(O
zqJ*ex-QV7>@fqkC@_AeP$;qf`K~OJD(W!xbltQ=B>IdNPq(wp7^L_ZS64%~yQokaj
zKOJfStYLqf|2=mAO{60b#WBe;S6NH)mMqnvfS?y`iN$Hpo#b;G(FQ)eS&-~z%A+C*
z*MdrXZBOuLO6$g^%dEEcQ7uIyqTdtJEFM;-w7H#xGK_*jozCPJ6D~emgwMC0f!kwH
zFK^wq#Uv$meWp)-btIZXlM{~_-O0uoefLxmIZN9NqL^nf&bxSi=32JOsIgUqAYwl?
zNbPYK-Pf)W9roz~g)y`<_$?wHNp5!Vf`wI0e_B0&_)meRCveFGb?aN0(qK;FUAW2j
zxZ&B==vmGFt|dQ3vQ})FAp_iav#v$%0`tzhM@_DLs@_&D=_<suug^rcDdtwtv5Yeh
z8&o78Ic4zz?}UTh%@7?(%no$0&8a$0=5zP{)L5~=u$5b3WiDG7Pq(kkOf{F7R~CAi
zmqeyHo&GW&B6wk-VZApjQ?fTCufJAigc+3YWQHKvxn8HwbwjV(1%51DRL?;csvn+t
z-+ySwyh0us#GmlI0rIJ19<fuvc{-x2+!7MUMx(7L6=)_JYXNU5^g@g#R`i?;x9CXG
zbE386zfgB7`x}Rk-GzgZH`zx?Mbd2*LnmBz`vdC3=g#y+8eK|tikZj{Mr`<><)?LM
z#|FhC)4(sF*ySS$TUYOjsdYxcSO?Oq`I`;!_=mvvdhq+=(a5j!>UI$-(@b*)mk?Hj
zF2N(G_$AI={ry&QlS3k;@^tjnvs(Nj{SdjGa&LU|`THTuIY@$GT?f!zNthT<tWqpL
z+#L;21h+$Ynq+gzn0MGU>Eo1`B9lJiCynNdSi6*J=eKg95p_o`E-grxgIfYY`4(k~
z7x}W@#tn>^5}HsbVyVO5qzgw<*jvw1Q(KpIk!R9>IgR^cEVCg^kMoH-p5tP9*ndaf
z8MlLL(Sbg^{Pcy$gi<H-bQwOJmbb%GD7`!NQm6xJD4ThOc(a@|D-VX4QJ+`c9bqz%
z_ef}joE(4nr(1th-+b?^q(bU&r4iiLaB~hly&wK!x~0fU=?-sY*eZ>0`x5sTNLQ;+
z?iWtWn#{YjNZ+y#f`m_mGcHo~o@3b>7PWiaxtx!Yx>^SBiY<otc>7-$MD2$|43<bv
zas`bu7pk}FxVsOz_K*?b?Wip{`dnw@^fUpX5sP$hH7B0Q$J1!-2ee|jhXkD0GT=`D
zVmVwAYDfHe26dwDJXgCeIh;LZ23mH^Qt=sX$sVOSqoh`_#F0WpPx1T1JEW~D%n?G*
z2c<hOE3&mJqf(|txz${DCs%z5GZxsk<pPt}xmn<377`8rF74tn-ggj}@yz0Wo_+BQ
zC5i}R;KJ<#rVTrsnBX5ROflipxmX(>(Azpd1X*}ajZmTIAK{|sEMzO>k&21)F3%RK
z!%y!>+)4u<$l_nWW*iqTg9V-(z8o=?_|sOQvwk&NYE_D2W(%&|#4?KDKA+AtCvj57
zqT1;qbeMNVQ;9mg|7<zVHu4Of;;bA@uFljk^pa&;U%UQk9kv*owxqPl4%GV>5WK#~
zER+_!33IJMCCDj2I8o;QQ`WCKKjE!vC#eWtaHHq3B%l$P>DAN3muB%ou7Vb#|4P#D
zo|N7Lm`b=i!_gJ8Pdl_K;p*_`Yr8F#fF@|rX@(X!u(pfvkL0=n5j4Hp8_VT@1ToN!
z;JZ^@u-8rqpa!GC?C5>jq|1l~sFU2Kn5S*bSkAyqwVVTPnQU_PSe#W^FFk#+^8T1H
zogkn+^$M?V**q5hv!j{{rDf`Iu;&{>n`+tA<rp=BLakw>FX9j}ijwvTB9t1Gv5+LF
z$fjh!4a#)$Fm5A`VkOK$fP4LP{50*`^+D_pRFc1yPqb$pISF1LOALZKF}d+<XA}LE
zX>25s&hW-wxlHhGmyU(<R(otpWI0;Q0;12yRo==p13n5%?a<_BHUHZ)?M4z*LTS@b
z@;JdmWj~N1CWbTJ?VC;l;qq8;N6`k>!wPZ92Ub-|n)1UM58<h_sJ@Gu?&t3S(jGvN
zkr&I4uqO_Dak8CH>vUJ(txWqQ$kIS9=GtD$X*QGmd7Why&HN5fvnd3!Zs56W6mnWS
z%xv{c{&S^BW$_x%p&TLlBcW9gp^1OKA%V_S6N_YMf=e&_Lb1bpEFh)Nr#<;xvaHaS
zET}%A!0e`7-u;$K>pt3mbqa9pKm*2yr~2Gfoz{<D+5}|UAP0LNG#5jrtv!Z=?{L+{
zUP=KM(^GVtsDZg|50$alsiVae<Jcpuyi8t3jA_X8I>Fn}yqR*Zq?JNivD0UB+fTT9
zzIAcimysZ!Rp-oDY-jl%zn^prlUT_r7L&ahm)i%^A`+TgZK6H};NAy;K1x){s{z!%
zwFXtFu0JUzn763V;_j#vo3K`mMm_R+uqZ{L699j@8h7SoXy-cM$g=M_{H4H~oUT>w
zC6|ff`jVrzKyO3!R$tK%u0h(IxjyxESJ#_K(f2?nUYjaT5CcHw=t?i9=#}MOCVXpJ
zust)L>x<doKqR3jRAIkT%ctoM2f2{o@zjLpxiCK(>yG7uGFuZkRaT>Hb7~ULrJjjh
z>|E@cc)pqchcmaslLY{5;%rgs&Y%Sp<`X04_QRv%b&`F-W$wy=MMHK`HT@Y<ybxzE
zG}07ctZ%9h(A7$-Vkmzu0z60WC`WWQnuW_V@bC%13#@FGeVR{3b6eU1<JU;?&&R1u
z()E3f935+Zw~1GedBW!Y_9iYI5^s?o^n8kg|48(#fb#+)SYwZG(Ta^5<?^4u=Pxx}
zid}w&M3<4ebTNf)r?@U$empY$<voUTd6vmvaa;d{P7B!br6#CWTW0$d=iMP)*0&~G
z<44}W#O@o`*VwIGHoIWdQFxF(_4Y&Fk@n1XIwI(@6{Gvr+_%+^8~f8nvmn@EbVbr7
z&@{8iGoBEpJ6Z7y330?%j3%>-LuPtm>!6~4j<x5Fwyav}CwF91v#TO~JmcI^$wH9;
z#t<Q+k~^AND>StjW`I~oY|TM&)?_dA#*99fG#PIyATeH5Hv<L?^ABvqNzTMG5F)au
z_WOLLp$Egg|2EqR^ccpIQ$Pia$Jb>8)20|#WT=eMP^cuPw$8h+HlcUDtCsK6!yKq;
zLHtgA6a^|;IkwfH+o2uTOs+%!&*`<{DZ&hE3UyP1w%)oi#dfbz?M@dE#0x9Il~|23
z$vHYpAk{X{Vh8h{HYyy(eFu!EaQowCjY<y>r$akd)&1KcJ5V}ejPB@-IX&?E9{op3
z{`-KxF@p9BsVd<bYJZ!dwyq8G1?*2h(DV$AJzoJO*hS4a)+5nDKw!H16j&}L9U_rB
zV`}@cOYi2|BylIgvT7Bzdz}y`ut~G#M6alK6gGE&GLG6aa%TDxnmLPRWvkX*A&g<O
z$8F)stFKdflpOXm$W=9!UNF4VWF=)pEQpj`pF`)pgIVy5^ZisYAl&ryh+?7a;heOM
zx-x(?Kt?ODjVHx9jejceRoep6^?r4oUFyT=lqAzV`jf1Zp=>}8`7bw2jcP?%vV@%=
zbgrxWlUaFjKdTcH^y@Ku$SbkSDv7U22hUOIs6N%NMcE&E{%b^;es4VA=yiqq*23nQ
zYlU(Ik|OL)DwT<OzTqP1fr~&~CQq+>+lo`#&0WqC)O!($c$`(L>l+=B2%O<kXZlSX
zKypeO&{Uy3z8+oha}$_PHY*6t0-lmL^kjLA^*@sN<7p(-9-d61W4aM)dN(|P<@Or)
zbDQA1h`Fkj@1}H&<pnm;r+}>z%Ire5#bj^q@Sp)8PQ;Qz2L$OfM*6f+dzO-;y|~6A
zec)%rXCIJ)R~=o2M6*Bpm?DksM6AJRqQCs#P0}tr(cC{C*y<mI-p6K#7XpW!ojpxY
zCoT?~-0*N4aYjbVV{!xMTv+Mfo&2291yffC=UgTw-j1ajnq$Emb}qZ+!5bQ!^oG8l
zvjkny;|^h~*?4RaRpw<Ze-1WmH!vluW7{Q`UZtgM8$B!=PZ^m<PPgZ06V`0s-NsEO
z8hU;eOK--BK!YmuZ&|7}XJNHQqw88R%3jnz;`9qsUuUh$l_2L2+^cxD!hE_Qe?Oc@
zaQraSh8;|k>ARfK(h8+QI`Q$qaN|xRhtym8lFKbzp1fe9%9Ben!mLCo(#r?BQbtX7
z9Of25_TYwJo$!<-q73?&8fNLpTfzs+ex#5bVC~`(vZeIB;>_23=%Y51dmWq5RWIkt
z$n-1V?%fHY^l&7L-ggs@3qq8@VLmqCI;COq#V`tTJDqvoX9<*iB%`mw&e!P<)0&Qj
zQ6uciS1HkEm+~B@Qu~8Woy*1|1cN;0nSPKch|*vAd>4&T)B~~{Ih#@nQ{B9fc|5vE
zgFv6=;Tr0KELH-l8c1ZC<N9U&Woq}V3mv;oCef%{@R%~w2gtR3|7rd7gx%_oY#392
zBw!|z&{jN{J#-p&*waweb%xn^bz4q5M@^zY&9bVTJtk6hvY~?ING|)(`<jQ+${V9%
z#P`WA`2$HmamOf3KYIdUZi%4vtf_*jlX3i4-z}Hu9gOwb5xa)P@8okbTEr?hwVl|@
zrnfuo0z~pV{mM61&Iy~i*2kD)rcvks1l%!~#2oY?@j5|#fcO8P8F4fOVG7d{(BI`7
z+8zWc8YtYdl&v}qvd=8$Wg0|}d~OfC&jmnS$A*n8%3evv<Traog%eB={Hp#pDY=Eg
zz<e+P`kI@s5>c@dA@znif8g0{Vf+c0F_!f`kZ0|hyaR|=G-38QNAoilTRoS}pU6%G
zY)n&4v_1XAm|VBo%8d;d`-clW-C`B1WX)Qqp>8@qb_B&8*Qo;*;v84+(b1;Ee5$QL
zFiH!>_o*D`q};R(m7X0-gxBb~oklx&flI&Moxk`z?@Ls4DO4*Mna;(nQ=Zib8whGQ
zE};hX+>+DHV_<+{rMC>#;R@gz)a8~Cp|Mw2YbPsw&1T%{<dpq?;EwM+q+)B4*IOBr
z+>VrK?(TM4jz~yXLYN|0(SEEC(5lvcnHZL^pVmar3}p_#!i>9Pvr!RNFR^lbB;icq
zMhrnsD0s?7Dov-5iKrk&>me3L)j31&70{Kj9U~??J%IXb9(vcOV-Z`uT6I{RwW?cv
zN#D{okQShwcVU;VF1DU+0wl{rJPhgGVGJrDGA&)=;CjBXA8YNs;Q<Y5Q&Btlg&Su{
zKzXH{9wLO%OYGqFKSy%Rnn}FI6jY}5USTfpFx^4(Djy3L#!@TY3T|+WoJ_wF<+B)H
zqkQm2bnm|e87Ml(tzjQXFq!<dUF9C)NTT0@g|+W%qU?bS>hL<QjT!A#?lF!^_xLR1
z#qk7&jCRe>1hBSOfIzv09Ecb*o$NA`N5X1Y;Yu<sDBvn@`ahP5wad24rO>f~6ll_2
z%wxuEo@}kknA-`Z9RaKyZgZ?luaTS93a|7@$?Tydk^Q?Po_S)_>d%R~<(FI6aX;g?
z^|5#K5&mo1OhRa1p>W+iTl<=_oWjO#0eYvrKeRJL+Jr+!v3K#Kz?G#m---k6>92EA
zIRIk<bag>KSqz2{bMkSp)~sLj%`GSu0@B-}pcPW!P#yVtQq04u*1}@~XBqU-tIAvY
zh+|bU-Qp@#nl)?vDrG#@dI+q{nvF>L^M${nWtJQcrGyP>0?^geiiowH06I8iK}~n>
zIP>6e0AOZJA!;!?!>ofW<rn#rQ}uc&c!on_<@n&m^wOm4J%4zhO|p>3lNL0hUT8zR
zOD!VcU*P|}cSnUc>1p9vkrFI@D3$O@M428rmpng#PnuhnG-Z$HoiXrd1KNeJB4Q=V
z_0_*viHu9H#hq&4vX7G;H3+|1J>`6Hx1z6B21j>u!|ra6X$JYgY9bZ?_TMw|VRF)n
z1g`M(kFmnE)zw0=#~&VzfNu#*3U^sr<pwaX=`+W$)z_Og1Ib5lsV{dCj<iV;ym5en
z^b*_uyEd?1@UqE$PxzdOuy4V&W3dG)2VCB#Qsx3V1o1rhQEM_OUG^4ghW9?!5yJ#Q
zbIVGM7;NaLIjDrV$pW6IY>2H=z0G$oz1$KngC8bCb_sb1V9gSbvJ8LgaV%t4#Uh+e
zSX9qRWj0n8>}KjzB|qEgdrDPh!-9<ws%RO)p5Gm<;dkQ=3-zv*0S{6>uJmW)yF&K5
zXw!_|^CcTH2!O<Uk*k=3xYH~3xBZ0yXWWiC)102wJG`CNfMW$K0vi^Dml;IXD78cn
z$e}-~uwZU}%CDiEnI3mg{f0M&xo@ZWq!(mSpfBUx`!^PRa{!TGsw(-hE1J~XsD|iQ
z`uq7_+>yJXO{SI30Z#<`QTi!o<=e?AwRg;m+Z&r3E)P54@__h(9gmJ*)y@7RIi&pJ
zE-w^S-wk$9GqyL7@9!LDgvj=p?fNdg@Gu6|ce;mZR~_0xeE*1C<53Bd3{Je+iV)Lt
z!u@5DD<V0nxj>Xs$_<<vG2q(x`QYI$^j}}<l&yVK)%TQtS5cNp9CfNEcY^PDHD5e`
zD?JAqu(Y|y?l4;UMY0@&=r0IRW6^9jhJ)mlYi)S)0-+6z=tpZ&cFl;BkBeN~cls+}
zfyKEx257!Dr|TJYi&+ucm}M#;1@c>04&fi1X!X+Ef78qJm`b1@kjTO+l*J1`CLyi0
z3Cy?=!N^Eq8Wg9)Lo-5764-v>sRUT8l3Gxj=Z~B!Vc6$?-s|%M%&wP^uCohMPsmMA
zZQ=~VE3^rYfWN5rSW1$&Ad=2W2;0o5O~O1uaJi0Lx(BeCIvg!X9kZje!KAxVhW9lE
z>=Y6f`(5~sh;F*-YQ|#&wKZ-;@}Pj`52=AJ9aY;4wz#F)6+IFsq?aa%YdA`1DD$lD
z3+&qo;H*4k6SOGH{29;!mAxbSHQw{D3Vfn~@rbTjTPZv;5=P*1T8(Qo?5G^4l~nU9
z>}3z*=omU$K$66$JI)@AK$17?W*vAOA<jNxC(!`D^Y@VLYaI1L^&rn>Hn1^6)Vi=>
zh;6<c301K3@l3c0HQ28>E`o6gDei|wEFBbD{}o?*Fl9`sr3W2wTh+;3nL2~x_#el6
zEOvM`uMBsm`TC)sO8NWY4c!%zj)L5XpXBez<(vi##S0{&m~J8;ZaKZ+o*q)J%%Dpt
zF~aEiveb|;&dO11WgyIJ(xD6$T=Mfp$qfH?{5}wAHi!~Q&@lZXwVHQWfq3f^G*x|l
z-Z&6-U_}kiokLFEmMTAm`JkOPIsAm2zRb9(Kn(tIb}XOg;|Wgo`ETN`5E>tiM}xEx
zO$*n(I@hTJ*XTVfjDI)iSAdw(Ih}npNK7RNNYQ=kAg;=}`WXqNXicR$@E$RWIIs!S
zBQtzc#6SB=bj2EYAEd(_m#W5(2sms!HH*%-St?ZvW}m)UnHkV-$#8G!5;Er<|A)Mr
zhpk*YI7(TV;dFMqG4F}vWzUU;@nv3v*CRt)o%xhKPzn`n!)QgXd?h!H{3qr;f}m<6
zieRNr(*P5`m=)B7T2LAdn<$_3%Oh5!E$)rHEovr_8mC`>0o38^xZ{QmMggDyF91P6
zzQ0l!#l2GN0cdoeD`9^?z%6WoUi8p@0gBSLN@oy_xYOv8u!B6NdAB<;=Znc^eTiil
zJo=?cjj$I#<4$No+n6E880i;!fq=#yJOjEYU{|Jkyj{LTE@_4MqAn6QQma+#L{Lr&
zzIb=Zt08<b6GdN;cO|?CLW!I`rj37h!G`cMJxo;sbOE!}!-lFOZifU2d0+v%Hv0L1
zJ0$zRoHkK^aOSW&Yf}-&-)~5ZIWhS_sd|HO0-kr2jB69%>s8ynT&w~YI;5mzSNg3-
zz9&=(q7C^wN>H&DrZ;YE`Q}Am!Hlo5s>05DE!+-%IUHB5V3CYigEXg{B3uQK^A8^V
z4N1nMMWWE=UDeppo0uO7-Wx^*1$QkGa1|9x!CmbO5lZ}kb>_jw4CMc<4f)3aD(fu&
zlj5S>;fCMuPi=1&|EOf}5he78iXluisK@hsJOoMRO<w<9Y|YLgD3ZW7jeA_hz}_K5
z!R~ZkK2U*BV0Y_kNMuPHHd>6z(*@5Co?3<`Pk=MSh*b?))Rk>Em9ZN-vg`8e>rti*
zp;66GPl#X~pnSZ&qw5UABN%1P=aTyk;P&!I?FL0%<y6wGyh6_+YQVBP*ad23o?s8H
zc<C-Pg!=wlJ)72kg`5iAOvcX~4+t_5Dc5@b0u^j!J!g8GZwj)`Jg$vwf3JcwrP~ra
zoiQzeWTxvCf~smID#!BEv0yUS)-B`*{`Z#i)Ko8_{K>BK^{ZWnff=P{&VkCvAs$DQ
z^XXHKAXR2X7!x<~T(3STy#}M!G7CP}8=O=6$?)bAJA9r>M4Idjjh3)D;BGTY^Yr^)
zW2I{4O?(R?mlY#KcuMx}R_+im2$WUf;8=vnJ{_H_ETRmHCnWGj3e%cXg<j8%tDl*l
z?P?J`{dKb+xf+t>9S1!)K{(E5Z?1s`dd5;(g=XYhu?gf6pHAGY;gV=18=_zy|8DB6
zjLZFPj3~x%cliyJT=t_pF0Q;tQL2$jPP~!0Aeky)lMw6gh&43rpfVl(=;%62$k2XY
zJS|sB%scP#9bCq;waJTeMivvuq=Hz3qMF}ru}jk6!;f7WV_mp{1LqT8NG)mQ*QX#1
z&ha&B#rNKruXphxX$H@=i||3jSSo{Qe?(k)#0U!+o(vO3S7&x8Da)@eJiZhQqL7f<
zXtW{CXr<VpMdk;3=eKIY%0{r0LX#)ZWv)dqr+Gbi%cM}%Oju{o_MM}qa+)f&l89@K
zZqhNMH1Pg>#Sb36e+-;?EsBdPA2~ak&V<&2S#WwMsZR`;xK!||N)j=SaO>g2a+g+b
z>u+nU`aLBirx8T6X@Ec!;tfTs+&u0IRa|L|E>3r!T}+xNy$p}{ei_XTqFb4jWaQGf
zd&>z3hQUKm5a`MKKLC`yDGr0m4E5yIRwt=nOAy{}vVD<TJdto529J{6htOR~v=+*Z
z1MWfp%-T#O3GfE5ITl6*2<Vf^fAFS6)Uy4IXdCWE+_5hp9J>}`E1pqlF&XxEN8-qi
zjw~$71R**a*jjUV8<(-vDKz(7yr-UfiXJ*2!W7SXvfUdTnB|<57Y;KsTq@H=)leA1
z9pRhx=I|wDDsW0Jr<04eU@<u1a_HLB{v2x@_K`q^8KlrEq$Rk(^frfgeea~azCe_8
zEW|H+YDw8t^52kg<&c&M_=u1ANF(xF#8*>cys|QcM-7wdK<x0=Qw>&!XU+H+pbj|w
z_=>8j9_1vBvfxWx6^V;s|4*B(0M=#BE7Y%iNu(1XQzCR$W{1l|oRmx`g@BzArYk>Y
z1cXu@KfpFB@mytE*-Ry28XJ-7jd|L8I;22Y#-bcIl_QGb4{4zcz6842NAn;k;sPIZ
zK4=#Hs{*hbE$LXS$AN6Lret@O3oJ<gTGlGk=TM0kH$8<=Xc^0nmpmp7Hd`}LB$I^a
zj5#mAW@J9Th9M-8=JiR2G@30G?@rRt%BkD?9SV>R1kc|1*UX_Yzv`{(&J~TS*Ehbu
zvmsvhow1e;{>JA}dR<fjvMds={Q~~Vge%hfLSpfKomdJ?{AI5j3TeVu;bGh0{OV1_
z)q0Dfy~^eH<x{r~XZkLI(z&2x9HQLiM92WbE?Vq6kDXz5LL5xIDTrEh5enBY>5C`u
z5SU>Jie;6*qKj7>d8VoM9uRAyO<2vSsVYRS=7MC9&KpM0q+13;UnF|T*SBYGi0Z8E
zH-2K2>mO&UksQUXVv4jH)p;3zoFwE|E)da{Y{H<ormpiTjc(8QY-Rr`C8}N93=U;V
z7%Q<zA4Bs;H4v?Sh*jH8VWf7FZk|z+^KvoHtATD^)k)D<^ix^yG7Wvbsqb-qj)oqv
zW;L_mNbq?+%*&VKE|4A5r+e(5udE!Z@dx$+Lgi9Otp`ZZ*D~4>yRV;7eyTZjns8$3
zy0`?#x?fId>GkEQc@&lhXPP)XMVj`dG>FUyF?enn>9X))nE(SI{*<N*QJEtF%<{y4
zk8R5s0knLpLbC35YevvjLdqLEJ1rO%(7a(<%iWGe7XKWr%*w7;afqTBYWH1HZ(+lz
zlD{|^zp_cTuqLOmPmC-;N5UG5u;LeI6kT5M{AZ~Z84S|u9uD0b_gUviRId1Z8nctm
z-I~Ioqa7CU0FqYXMyqr`CUC<;5V()z1Y9h`$o^f0__5SZbLtoRSFvnCv`Y<G))u>s
z2w%sbU-rabBw7Wy+b*l#3xb~I9KcGjDo|Kzy3c7ts9?Nav@SV-eCXZrSZg~(p^HYL
znLHgnY8tVMDRsmwimtoeI{*YEJgj~!HiZmQm`Z|v!bff~p)XbWy|*mX%@avXQ3vnS
z(YLWKHE-9=Qk9gIMc%MbNF)hf_86WD$!cw(9A53vezZEH3u;fH^u{WK(p$p6H{zxQ
z>t#z3RL^v&bAtr`R5pw-3V+corJU}Z2tRsB`mveFCo}~(H#bjC6<`#x4ptGuO*Z#S
zC5CW;4;~N)2tO7(<vR17V}{m-x{JDWiT37Bqx(4MZT@~h8ai0TcGNj&heA>?K{D3m
z&60>~A;0U{x8xSOd>yIhWc(<<H_P(LK$aPxj~8@{#?}0x7^bWf*<86F76^#V`&j-*
z))^c;g|@j5gZjG^7yz+<9U|`pm}Y2atB^K>KM<b5e~L+o2rfm9N14R?Nybq6m7HhX
zh2OBseH%i{6I5~dP%~Lp5W?MFP~<(~KkoojtzR;}I25tVOs5q_VxuN$mDn0d_#z0h
zVU8sF3JH_%DR6JNz!1sWe_g{e-LE{y$6saN5Ur1J$_wB19&oW=eoSm^SV+7rskf$|
zs*H94Ljj8kpx&{v^o-GC1YMF`f9rP`i{H)wEqO^h`-6UB=>0kSLvFZ}5%M4hs|h20
zWEu*{s?m~;1itbVw271jNicwvH+x**R;EXk)ZNwN)%X;dTOpZ^;&b^J<z<NK5wL$P
zh&HAME)jw}*<)_PDsK4=w<6gssq!loV|8ey{we6U86hO(E_M}4`jBf4MY>Au*~ko~
zMp(Ux-SmQ3?bi)?4SHE~Rg2YTZPrF)LLhC}8sIq2X0HS+L^fIdSO28IN=cfetqC7u
zYTt7{{L_DNnYV#Je6<#T$yj48B+O~K{yTwhm*Cr+X7tI588R{;0*!uKS9mQ^rfZ{-
zLD`>1sFHQJp414q)EZ(6LnLCbcFa$=0p@w>1)WF0#QG9xZB!L%i@0D9F(UZA!@%_>
z<w%Gl$K%ibR@lRuq~0s2%j1QQlFw1o+yp72+O+INSly&rq=|k&H{+8+#KAP|;}O@t
zmk>pwiv%a{ZUIz%I<KId5^ZA?^y9DjM9AE=s{%=W>^G$dm1_Eg)ce<RobPty&2vxz
zy@9Y@g}TD}Cj9+-+=#zyC2tjyB`IdvuG4XqHe2X>Fc;P(Lyk(^{|PrJVC9&gV|<#d
zPxS$YAC%iAMh@W<#fIBz3mI`WB}i;lW++RN?=3&2I>KN&X&Y1T>{@2=4bIC35xH44
z$IrgwRs4*@nH%&gbAqDNhz-AwY-<f`Kv^LXj%wL~94#J2p4@Nis$LyY?LNlPMGbLA
zOh3u<QJUqahM$O(GK|i*_0&q9O2FeB4?~0y;XoGkdd*u!M3`nxfUU@V`Oz%3v8f{X
zHJ;*Yo<ku`p%K~&rBpYRc{c1p>Z@j2Zn#PB=olg=Qg87(+rr|3xUo9^7Wn4I0dyIl
z=Icu%3(6^Xmu1kX)?cTVqUiW?X!)AU2d>x4kpStGuY+)R*5j(X|2j6`eeFU(v`^m{
zgq-H3;334VV+@S4Vq@{si_8ACCeg*0eFbQ7;GQvJH<{6$0m2Ap4^g!nUZLbUTn)*j
zTu$-%h65)Ny#}8z;Dcj{`UYX`^b1e|$b9EvN&_jCMo_xJE`wdUl#<i?%=_8rTe+t%
zSZ~~Q{%!EU5p@g4{4+C7Rmkii*J_2p0jUCoV{(AxYhSZCT=l(ZYxyvYL^eiRLEeRx
zLt!OZH~)9t_srgqf%GMsISWv!4Ks>MF<7C0(ZpT|tAyG`&TQ}Yx9tdAMp*kHcj?Rn
z1`$6O6o#`uAV31Fpv0=557~PZu+Wj$wtZs2w}(ejs<92i_Fq?V6hMrc`$?ddY^voy
zM<2}4dSRA|0jnK$r4WuZns6e5xTM;}9Ztc_JN<D(4H-6IH#DmV*Pa70+m(o8uli}i
zze0*BlM%Vo!nXYIiUBL>M0`x3lLHUk<^-S>gF5s_bcBF}>2V}v`bg#RR0)7GB?Uuh
zmhcxSfAVE%!2mEC-KsIjBH1qY-cey_o;3v^#SYpIkYrr5_nX#W_6&guacGaTRTr!Y
zr2~U;6iAoKKP%SrAA2jNuSiIB?vrN$V6na7>LDj1fsde+=@l<tLGHqn*mm9|<oaG#
z7?WE*Ws(W?)JYWMS!n2IJBUI`9KmuR-;^vh+-(yX+mZMPWXtNj^bgj{pSR>B@ZggX
z_;^*xc|FOuodqxkOuz<h|E^G*;@~SmpD!?%ZW~vo0W8Imee<VUUn=lTZF7?8_wZ}%
z-Q>5e5UzUD^;igJS)N)OrQD@9cksxyp)uxO&Jc>M#qqBcf5}4-!=#NPGVc0j#Fjr|
zP!f#GYAtbH1gjl)xvkiI;*Q&YG%f7d+Nq&XZdL7HG->MsxSk!`sA>y<t^heA;Ssrt
z<s9dTw)qe~Y>KO6d<u*<zU3nREqBNLQK1hpI(sVgirAz%kxa)yh@3;H9NM7DVTlHS
zaGg`URC6nV0;2GbV`)kotaO@cy!t6myPe+I&YYkQ?Lx5_GL~zC*0LNULX`a$;5vjg
zyj!0aC(sWY({-GjqJ;=!4rOc1_B%jXYP_<EO=on`=BYSzEeZ?b1*CSB%rwSbh6<?c
zWX3h|E@74bq(%QLyA}{5+i^y;WyJ2@oxLE9>m1>jQKY;l^^_+9(4rSCl?h?rDam-7
zx-kLUJ=YUH6Gv)-^4_dECs~3hw;#w&)wP;`ll@U4sFZ8}6y9*HiB})u_COSY(7a)P
zQVE7Zh$hH@H0-k;H+nWh`y>;PqKIR7gu!*7j;(E+(qx#2)K{bTN7VI{GdbEnlyOG?
zd#CY+U!Y4m)@=Nz)?yn0;^eKIMglN|%bSz`xT<?#vLuwKteKfJ(G88$H3-T2Bf)$6
z?HprjQ!r`BUTW<8rc^bNXg6g)CPj6}@IY$3-_T03@>Y_q>k5MuT3to|sE&L5hH*&{
zNgV)_cTByQwsKdP{!;|N2WNyE8!fWKx`rr|caBfp5;XwCP7Ag`Ub2}qNQ>_xx+5%|
z>#F-aNFI2yE7h2<NfNX4tc9=vOiO)--D%=U86v#9T-{)kPf3&J_}LQ7igMaJ1-rl#
zz!W<n$qc+s_li%FG9yiIxwAwrWu0jj(szO_ISfl22-QzT)n=$UDvB;(sO5*l5A+r9
zSiUyD<I8GY2GQcM-mKvE1x-7K1TUZy)e&tJyvjQ9tcEDS0FLZKz^m_WzcP`rT`R-$
z^K?S$4LpAyJr9{|o->it6G{#UaFkzmZ5Ca{uNA>xcpJtRprLd9IMwFt{rJql0Ncy1
z*H_Vi$WgAblFJ8#GqqX!i@faYT^x07-Z{Y0YxBn$+$hzBOdfo8Ruf<#rT8}e_1=x)
z-tFBdtOSxSx_|98Tb3OZ^veevQRFltq=qD9=~3)<b`dBt*T@qFXfS87lLxtZ!FlSm
zB|te4cfHk$%p<@PW6hWTy*HMGPh~d9XsjU<v#FiPiSR3kaetJjFw#iVK*WkeC&Emc
z#mR2(m15BeWUn~#HP`2qs_&3X8urxddrcpw08e9(^aSA7=ed`UE$mex70WyGuFtUU
zbRe*spg6$&PET|wgMaVgphOT12*S!QyF}nhK*KQ*B#&voc$}L8g&3K<#B3j0GQ@jv
z`neDpcX%@Wpw}OV+wA_*D1q5<tB<oT$TH^}ZQ$8J8_V+L4Pn!{&{WMb0mTYcbmM=@
z(@nZKCSN3DGiwfGsK~PNuS}t>x4jY4px%1EIL%kKZfx~Ag3RZ>BkiP}m?rjYYi^4q
zk)s(PF0KvjJEQ1PWfGn0R8`Z!bO7B1<T-xR;owW_?P73N9Q-qhW3$8u^}6A6IT-F}
zxyoh4>q-ErgvJEoRc5>->v`oWpknKWAP`RTVh8w`=ksylANPuMQkY5lm5I23Y{N=-
zNMb{e5v9hl(Yb8rVb0PZpK2q@=wk$RTF7W0hH!TmNZ0zG7m_EqI#>&!@aC(3PImVp
zz4w@~On_?XRo?L~IaCN)6#@a6o)6SfP}J;4Lf#=RJmnuBBrDvshexm<H|@0g?(zXm
z`ZLaKX6jQcNpVP@L7`qOw<<O7HZH~nh6n%qTU<7UL*zlM1cHhm3(6Ja^Jrm+9vFxe
z*4x}2`_r$yUGFJKNyx!gt~XK)yLN=U{ajE2*|eL6<L9nijd%;iigOF!ra>paXC7PY
zc0LW3&vLw<q!_?;{OA^&n(5YW%8|=pe4YILA)kx<AB@{CUI0x-VA@DG?8KHj;8?Ni
z-=vuHvu>^?bO=;PdZsQT;1)@&tTdUVx8-fXs3n4DIbLT<aR^lVW`;!0m@(Hou3jiQ
zl$2uJpmgjyWl%4S&z+Yw%o9B1x_83;c7Ig@dDw>+B8l$SEEoyHlPFNt80l=2AWWq=
zxZ_K1h%nzG-K3L*WgwKYG1$&_rhF$i5UQMh7!@sQe)Se3#-ji@--&zh{E9-`8j%hx
z1Q?mBgIPT>Q%Y^l3-Re{>1fN|Ix6ofAQm4@I>4IubC-0!0TfEVkgQzy1p>`UO9C=8
z9N|3i=ewV28WE(0si(M~8r-!0{bJ~xq^g8vp|gHx|8m(H4Ve`5s&0)YISlmkKFTFT
z*9wHp*01iSyE<vqyn+O;7!3ChUZBh%N{EVyJR<O2h_;?~hhfJ#k=`SoBOs~}W_W6@
zn!UEm$VnCD@4Rik$t<<9np{HC)R;xC(a)RqanD&LO?DfD@O}}doY)i*I4-z`#EaN{
z(8lPksCECY)Dph$x30eS*jEE|=@7mb%lQVN=Y9=4=GS8nAiH_%so$>`fCWW9=G*7(
zqDx_-ne2L~tcjI34|u1QxD|_L<6g~(q63GJniIS&%n*rbU=2Jcm&Rf9b=CMgjbbhz
zLVEHe8gp&-i_PR8cho|NJ?i$UpuE>?WaDjuOW#a;vY|TpI|%#pdR@oHDH&<#8p~W-
z@bDTM`;0{TND-SLyy8Mvn@^ip#_*b2tEVG6CNm_4klMA#53Zc>JoH0?;DoODzu9=Z
zZxOl)iqT|QmLtX+(t!x*NKR3RQ(caz^RL`ve(T#x1#NqCQy3YYD{^hTI9`Nv-P5nB
zN(p+;(=8*7)yzU1fVbQxIh3{hdsClER3y<oi6ErA)g2ES%{((!w7qRVsQ@fDv`ljT
zBYoRW{%sJOop7#bznGW9fLzHFq1>y(zaaCf@YcNf$G>&|Yi{<GdJ0*T@U6UBdAx_M
zCrKGbnbdNo{#aVD01No{U)};52gT_!h?coXL~Oj&&_Nu`ffCS}l^poToARm_d3tqP
zBW#%YZ1M6T3$`VGSqsiz@9$*aHNY#ZUH#ZbFgS4IIC~`a%|@_AuWArNto<nRyaF*)
z$YEAN^W2dO%Pq=WyOql59={+~I|g_TKvd9ZCLhI0!+k;&R>Gl9K5pifi%MI({$!;y
zq*8p|@xGi=7R8k!$!dQKyjntiRdbR?EK~=34*s1z_1tLSZO6jH>W)n5h-{omBGrc!
z5P|L~6o|WCJsfsx49344gC-ch{#P}!3%Hu^+`lAE{)r41RC-LtKuL4Wfi&J+szLVG
z3N8-@eq-wRTKf-wgkYNWa=NGKjDCQV5|r(KT(N{>|E;({?75K%tt8u}`<D}|Lh^&3
zXQj*B>(ECR<D+DzkrP~rz>Mhoz3ulzWzJj~8(8eRSm|YtCD0{&>7Qd8uYzW%9kNjx
zRqrA9V$Jrx4>eRi!{N!7#0e$Bda!&^94bZ$pXVAASG*!e>cu{MPFt|gwU-c>)}|uk
zGXI>NOXf1v?${N|W5}B8ghmV<Tn-0DU==sNjQ`BtsVLN%X!SPdcY+99#+6;p5_r{a
z;0My9(LO^;RD-MVIUUP=;lAq;B#xrCE-cS#vD8+Z_?DZQR$!7Dyn5`Ss7ibk@AMDK
z^<TLwt0jZ4OV5pw#Il(-*<O22wAtojL|=^C49_}DAxa;4Fp0|Hp~?(a4sb5-<$Ihr
zFy2+oTsgg=Tst@w<ipy#&|M1(s(-VvA?J+TTJ8H2npJmXmp9H-$wBrIjKliwRe!Du
zfS!moJ@9?b&9MILa^fDI9aq9Dx6BTpX$V}}(qg>rwy|Qlf3-6|41Eg~5GknC5x^3g
zCU_zaXRNUQQUGm}`Voo*Aucq@>A?R{vGKUqPMxqx!0|Plt0QjryzpOoZ+N>f=!5(K
zSg5Rn#1WsG5?^@o(;No#Ujq>+a&t-g&zOCS>CeuQ^D_u(c)Q~m-x4IQHH5%DK(KaZ
z^YZuhz{}0a!V(Sn8L%sH)%cr`FIb=I-%3HU+b=?|(5SR4^x$Jzt#P`h1lX7#h(-OC
zca@R0EC#BIT_6F0tUm~#%0pF2X+e(8D8}!*r=SgB^~gu}e~W56<udi6??>;0qz@zo
zmN*lM2=9`FI=)dOv)Pv|Xpjt>y%dgR46oz5cg19JPIKPxa{dc_vv}_<4=EHx($Ta#
zyJ+8I#zIjD5>!7YBvu3`=XFgH{@|r3pp4`b!tIu~U^c(KqtTzRvUKj^S+@>s1t5(U
z&DE4k>)0A7Xl4L}yUk_sEv((At=g!1rE4D5q9RWxt)Oyg9;vJ%T=*mYm@OM`ZbjU1
zZP0W){NRn!RHCsA@EA=t(uEX|-zl4s6J+A7)~eO3HZq8*L9_K>oPn|?=T@Qz_}=9{
z{Np2=0px2Wnxp1w7I^gEi$)Bp7t&d_8zwrw%{}$3t@}(?7m)1hU{$VD#*RAnS}*4y
zjkPzqsn6=nig==qNNEGldx*+KAv>+FpLUPR-Wc<~P~&KLd|;E#3H5#-$Uzc=6W-B|
z$UIlnSjbO7t{uf(*A;d5olTr*s#V29S7A4LA(<7NOY^sD(pX+KZYsWB?m=m%=}Y<p
zd3%H=Q-~=Mc>$WuCy<>03v^&p_HqjEhTw`nJ&xb<6sm-#hhgD~rbn`_>)I`*wiTDE
zQbxE73CS4;lb7}E<>7xh;nKK*0Q?=kc&<lM(Tv>`G?P!oNkm%>TvFMEB6}zShS9nP
zzm3F_4O6<sn2R%W<mt$nLKod3HUq<U5H?c8-n(}G6bY#-W5Fs2I6ap+5R|>de)gCs
zqBgNRdYKxL_QZO~_tAJAt#FYQiDc2pMMq7A%XurPQ5zmMoX-(&Rr&Pf+aUZLsAJ6U
zpd+aGg3Qg9?7W>ykakR=^;+I`(L-gs3>tq-5bm;osyGNG3^+06>P~`woU3ZpgYrKF
z)Ac1T8>Ylb@2wE`+f<)hp2lukIrjV~xc|C{5R%Yg9g={@qPN7*&q(a<JCR(s586<V
zAv^SV+n&3F+y3x6(&f7rQi|S-2hg%;eqJ3E;Vqv7ICfg*O<Vd1=QGD6>)+$nnM4Ik
zA=9T$DLQTM+|!F0rzq$<{XvgZgJ!i?ZZY7FCb`y5<#?$}XTDJa{G?f7HD|IEEyUif
z#R6i5d*8R>$hFZQS4A^~$1${iS>8R3o|$Ic6gI0|J)Lr|pHG5yx4T9IiRkg%(hgRK
zn7NdG6r!Zgn$~C}S|Q`#J-fM7)7(uPxga~RrNz;bqiUy7u*GA%w&y@6ugmDUZmCoE
zFtV=M(2}cNr$K%4Fcg<}CQ^Xi0q==h->F2Qu<;~I7$*^;T=6X1E`*lCUse;u)ZN?W
zHlg)T9oCTQ8#Ah<w?+yj1WcEGi}lB$w!~VQL$k`GW{I`qARyf}lH;BV)MTPOD5j3=
zZUn4n49`qIlznc+_gNBkD*HuYfBgjirpJ+a9^t=&MV?@0%X&Bgt$Tu@J;t#^<o*6z
z`weOd%eYMu_SNoCxme&6%l*MPV!E6K(WlFKzIHLU4U2G+98+~t_Db;sN}NfihFLlm
zRFNkud{tBJwPoLh)CstCK9PSTtg<<8ONa8Rs#~C+DF_5?-j%LoT6kZ3+3$mVV}fGw
zrkiSv=a`0qtxWg(q^OqqL*f%OfBPxb2)Jv7-MBo$J<S=bZ2H6gunLnqW*{{bo*XIq
zNXPOMz9j0PU{Qo^qo1j}VVG38JNfj<%}8YGk{i?#!geuOkp8~T1b5N|s-vEGkg})Y
zP=idJy*@1Zosy#FO`t}oay9B|N<X9`tP0gg7g`I7%+^X5a`V0l6S_V3aLEqsSt%r$
zTO%n|_a0^2BIRwq(KH)vG1QZjPkuQ~*A`~+(T?)~f4*4JB`|^)^H<EJ1!=rG+oz;Q
zX)D2?om70`D)%BNmE3TbR7&20tR+iSR-L>g$e}qieR<~L&J54&E9&(X;}df@0<3aM
zS8OR=y`H!TM@HcDJYW-Mq*1!hkZZLU3zk=lT_BDyUy(tS^!V2kCtZh(g@sSPHn&Wj
zN`_teZ^MeTc*j)PZP<TY*>SEfJSTL$u9+_x#Z^@i7Qb&(y1aVvF(cb1a802oBG3qF
zFJ{##>`z0g>wtELx8-@3Sn@2w3B+^1aWytoXjZ!;+yoBE^HhvyIuoEx=#Z4($1caB
zy4W5{Ne<gz2TM7)5P`j2*VMJ~02cde+!$;d*KkR8_}rjl5eDqVfqDV^>FHWFAt3S5
z7^NZhFT|bYiM(Vq;u2b)R%e?_KrSeDwoK@xl&hFnvDZqh;8wDO6V~MaT<QdOD}o>{
z#29@{T+=pa%P-#ufU^uW_@?}6-=T8zEWmpMlgL4NxT;~cEyY{6N%BwcwAyuqLZozh
zeLyR|1>sZxo1R=sH1=TzGr-II*sb63hyxBtw(V{pyi0MG)A|gMs0Xz`ohI3DnSTq0
zYKVl^?7Ao1@4wwrEJc?06akv+??cY66y+Z@a~f13Z%`;}i~XHMBX1RY<EzYp4lJ*l
z&0_iG@gxEQ5Li}f|49*|(38Hhco3173NIF)>2jbaS2pNNgp0(sL;f+}znYRwLB_%+
zGItu8lMYok?1BcP4pVIQ$<L$_ov@C}XWy&Qg=4oYUlA*W7eADJhj#!&&xF}DfDd&-
znF)*diSA2PoW{BGcnJGH@^M{pGowH>+g9dC#DX$*7kTLT31=~FW<Hr^|D-A}vIJHa
zW9`wJ%B`&6utI7q@!JUC27eu&2<H&p=yKe-8rnPw)%B5iiSP!D#m7P1L6ickE+^!Z
z+Ts)33o?O5h%5pi#U+ZvAXXZX(>Eohajyrl_~ys@^*KUAOT%wIg`~P*a?nnJ=Is^U
zbfX8qoxEt%?H%u=Xs;H(M!8H`C6FlYIO@9m(Wp<9=Y!9T4?{^Q$J9{H=I1jgpA~g+
zj5`DL<>H##jSZt|S5R>#UanMVzLIQR2trkgp-{g^Hk-!{pCYskUyP5epL^M2qkuJY
zs)3TVQyLO6V~ejUjPwV`Qq@IHouDg;>jv7FC(!k1ch_+MgkfLGb9;;qic`h58#9t7
z&RGRV)xx?juBAl0Hv<?|2t}y@<z*kU7Qou}3%=hGDNsl3dpF$M4U6Ov<R+L$DhDFR
zn#c$%{y5`TrOq|Czc?OH)c!+>2B$Xbo?63bYk#UUCKnGP@v*37|0)%9P(mTEN%*dT
z5CXj@6ETKhYd}|2CFS=Y76DQ|EaF?UGTGIMb3YimLxgt{`}9N>jTvF6Gf01s6CZ&b
z-<*ED_ia0a@O56}sanH$&bIe!vAhg=(D~p;!w?{Yz-lULF}cqdt$T9H6!wZG7hfe%
z!q3Jf=`}$4Wlv&dAsIf2k=hvYO;j|r(3N)Kwl_lsfTUl2IOC!eoh#BJtyH`QSyGF9
zZu0IvdYCFl(Bn?{F$Lm!Q~h)V8LB=27eN3@f^EBzvzTYXRu1oB7#Pi&3q@a<M{33)
z`FB?}%`a|+hr}R!TsPZ<7rm><R>ulWqSv{DrKr@}*a!&NjQGe|dz=&Ul6;)#W2^dQ
z221PpX{QUu`9ba??~~o7?8U>pHF6MVY7c}~<+OeLIc{vd8L2(?jLUpagW0GW#dkS6
zzFNKC!SlU`MmI9u&lRLOrNaZ<6R0{v9?@5^0Z)xpu_GM+L|<>g2HyF9p*qwVGv>NJ
zhJgo{fw&aZT&aj8Fa|;W6Cnnwau?09K8UJ?q_)4Y%5Dy7Pz5Kw6L(CYYrDZTAfpib
z>RHqecY3b!C3q+Y_)EwUw3e$!b&tT&<)5yJ%l~JPnD$d@S=Glnt?DprVUq>RXpm+e
zL!nF*f;%*S{+)FNPjz{l&re&k!xDBEtCSVBR)|vHLMk%*)PGu=@aO*@;($^?rj3DS
zwx*Atq(nZl21lsQ9bN)*ooMXV;VLYTbxUkq0Y|14-=5(f^y_7`M@P$f;}Ptm3@?W`
zv(Qs{ocP;dGIw@G_T>5O700I{J=~Pz<`lbT_LAqPXmjc3x$sb~@fOsPlyevBgPTKE
z&0(0R0PfZA)&55o^z&p-Yp6a5xio6Q&x78EuOjM{<0OnD*-D@6iN``hEAp0i-^H#(
zL!;c>?N=Z2eosy;*@B!7g`cU)p|QV=Ibh41C_dQ<DL|vtZ9YWNpYFAMua~)RBZZqb
zn8up`*1fhoJD<|Nr6udaey@NJI(l*s$dx20|HJD@FX(4SmcK%|A)sp!9O2G7tUhMd
z?MBJI6t*U$croL!QWMA2FdP>cYk1^CQ3#IF%ap<6K|{Jdd9t;}13IPY*_9&JqyqLv
zwQhYn@?pqX0%j%AW)U=Y7pZF-z@?gI(_mk3`$|<p$f158kL(R#<poCZEgba#qIbTu
zp4C@*o<w!gP|yQFEt6PN_qAi{NmH+^|KbVm8+Sve11A~PTntn+;kPB!sRU2*ogqJ1
z%p}AbtKxlY^1{e=H*ayj83HP$wpIHiTzW{t`e?wZYk!6-K9M+Ygn$guMhLiznrUvx
zjY7rxMuIj5xsZ74$>M6_b|8+?CgNhnQ8M0=$3Vh09qyVQQr0+xP8wCJXsceg>^xq5
zS<5y22z9eJDV}9T?6Q?;((vTrgqbEAE-rKktV`W<o-!TGa&#YRTs-^Az)gUF_C0#y
zn?)ToUX}ssQ5-7?Sp?lpOp!3<xP7uC0@&%|4_fFJs#_vCsAEmj;MtA1^FZF3zkNvG
z$n$S52O_p=1~*Rdup19hj%LOh1^p{E-<2&z0UzDQm81}N&ZQr@)H8tzg(3f?>#2zp
zZ<~Uy#r4#_$8HUxA#<Y&suXJ<$PDDLv+Ly!{0x@4VEn!r!k<Si;y)NQ>{XCZQx`N_
z5d|>r7YJYhBwS+mK=Y&thNGYK6~6@iOp?_03T;_`eb;1FJNg%&fp-N}=qlszW|V5<
z2&dp1E@($AFqeX|tl#mwh{x-HPgq~e%IUecy>9eDmDQ7#Zgl4{_tg6^jMP$(fNT*J
z67^4xQPDt3z?h&UF>aPQITNE)@XDdS9Gf;dwrzVwV1)Dszk!Q+Gb3g8ZkcT)Rb)6~
zK7;e*@#aFvm2Azu1*>ci16F1uMR;CLv(l%-B$dnxF8$`g4XdzNc!jAHkkt*)jj#$T
z8I&8lUcOw$WI&OyFK<*Rh+OLw=^0DcY&q`fv2I#gB?Pm>@Cpp8njnwiR6m#95K~^V
zZOc{_VrGDJdTJY)n$n#R${NKf;%5th)8JYYIAcZYP@4Fz(^O0|aoP6r#8&7BzzK`N
z?T=h1=EDIIf@Oew{$`aRgd!#;s5muI@TWvtekRli`TVfdf{q(MPb%+zI?)oiUw1ST
zd4~Qwjfk9??#^W4xqfQ{#BagG+(61rjCY3in*Kk-=F%!w?kzz)T18O{N64KwXNasB
zt1tpWZHK>PLn1(O=U=QL`Nl&TUz-@xO|kd>s;r>Rwsp7A7*i4IM%TepTJ+i9r>2F#
zbu<{%mxd%Uvcbhh-8+y{Pdl&&S@T9g9HApGC_R8unwh}^aS&&~^nPXo955sJj_;3V
zFyb3s#?3fQm)~t;<3Zj){W1g$4yHp;VhtanV`wxI(B#p<4zpX&U-=8#;JEBdLE3yg
z;+RUMP6J$wDws-Mw2-{47plK-eLfhpA;K(FUMZ0F7xe7eC{)t|GmF;ES*;J5V)Uum
zBLHk0HKw?>Lr8d;Y|6}=J5~)HY}YcMIVQNp8Mq&k1##f9-H9pEo^uxg(+GB$#U*`x
z^Z#h5XDxvBz8P{njpH1XwC;*r5`6XS-a7e<V;?Nsv~p$vsi<LOHOSnFH|_hW{jN3g
z5$}6?^S<xYOY7%ou1$jegtg`%l&JoaW?u^LCef}LG4O~hx$!cnQ<MTa@lBjDqd$bn
z;hICUHykc<;jge(Rn%G>D;6N(g@XkyJoa-9TUt%HKF^!xrbXpOnoPCp(F%|bYC#B-
zEbYN39A<?QMPN}5uQaJ^7BwZE8L2%<LWd?(R`#kr(fcMX3#J-51W{09N!|mv+z~Ap
zYmxIeTD}t|5AkelrG6fcjy95EZ?*&SOAvBbDK~?@5vvLi;6@rG{W)Ix(nnn-vSkU1
zHQG$Ygsyu2(pQfLQS>1c8ZNs@xEpY;&JAW|x{UmFG)l}KRd0a&s}K4E;tobQ=8hRq
zbT6f8{d^e?{+PEg<q0>fdz!=Xv+DrZXTo<~D}~;9K1vM(@4XsD`1Z5gGy7SyFw%hp
zwXH`}mY_bL$BpcGvN>Vu5VXgR$In{1^qSWeplOOM7sk}2sNBSC%npI4_Y0d7U?y93
zlKb4XM)UEMZ=+)%Hi{%ey#5Hgs9!?@jtd6hyYkifzcz{u|Luv|jS;V1g-qRF&#S+3
zS~%9zcMd--eV0n}gSQ-|(=BZBz{N>Gm@Kn;(~-Qvk0YGA(%>FJGFj7vvuX>0TVSbO
zpl%UleU=8l$H4kOg+{gd>+8E)615QM#M?UVq!LgT>>z6N>Okk-WDOWD(_>#IARM#H
z>;ZGv3n0cjX;vCz%@^%ouUcRr4!Xvm@s0iEwjUaFGUHObm{=ceEBbZ_=8<a#ucE;5
zH27$c{+=90s=P;9AJKOrHxmG)YoU>>n0>P)UO3uhZV*c7@#Env&L#{fq?oo+f)l4y
zS?f>&gm!P2m69J)U9DI$&kzp_%59%7{1g)l)VQ0(2+HI1GHyeOcEzW<kLY02+NM87
z)$tYG7@N4yT;05bxV{;25qk*3ngAfi26jn4unG`mwz-j04FeZxgq^2_@|DOD{T7Vw
zUTJCT*VFuemIT%_wyNgdxwTx2PuJ*ATp+x%x9K_Nt>_nJfvdWzAUhc<V0&Ntd`yAA
zDA|D%+*=#l&4!Esin^2zn)BRs-_r6XpTTDnJO1P9MzE>p<z&|<isnj0eRh3@LBC5t
zbn7!}WlOjkeE@y|<O6`%e0UgiS4<1>Fkq0_a%R@>acc97K`yjvFAOahWy{$}AnsY6
z2(8JtZ133q36%Vgk00c`hKuwijsfs^h_VbUIY1CB8tTn04<H~tUitpw-pBtcGRqx3
zIf|I6-#tlx)n07AyYlIV*~Ed0vDtxdd6`!&<g+KTsZO|o{I2)X>V0v6&K=-U>N6#7
zat3nod18jIg7$lHkR=-nr!KOLmkO}~PwN`d)CI{m(zr@m39FR~)?v)d&bIHSSu$8D
z;I)Q25w#vZ#328<k$=<;f;e*#2BR%I(X)V+W@|hW@uRCnP9oY+x=vXbJwr#q?IK?M
zMh~wiR#Qy?_A&;9tgU+Ei32@>b0wbfoCUgT$9C9|?fRjhw_9KhJq(@=M#I)9C!Urf
zm=R+k?YmT)dFCb~i;VeE*3Edrw6@i@utt`LU4b?o`?O2OV68dEuJt2=b8if)zT?m*
z&`6U~Usttof21IR6~0<b$_c@m{k|@%)YE+_O!@S3B2^P;2J#SaAp)ZNgqr+9k78=E
zA_U<uI}_vj=gJNQU%%tn!jA}_XSTe`UsJU=ZsAM-0gO2^WCvX#rMPTB4oZNSL+f7D
zXgp@+{47>fzTVyXptZ1}L9<Pz`v`!^YZ>s@%-FrC6`<tNZnI4v=*UXd^m&5P{1>a4
zp*6(Y8I86C6x}<uT%SABTS<HO`ClyXB31qb<6L3p6lh8%9Qx1`KPbc_w~X;(6_FGQ
zHlr7+yS#P@CyWs7dIM{F>|(BQmH7fXEl)QGVq>V&@9AX(_|RJ1t5*~6RMn;45lN6O
z(-_+Gtl({w#e$&k1c7=u5AtQYj6_rBx~HO%uN21QIbzWR2Xt<A7BYi_uO?fpQr{7{
z_RLtQLK%U6-W*n&g-@bhDjP9IGWv*czP2ovo?Z~L;P;425Ey6ZGIyj1%}k3=DQ-l2
z!D#I|`uouLRF@v?PTrmz8-d%L)WoA_`5O|}Bhyi4*^+j1>YMDa$B;&HCT)V@5GlXz
zCW{{~K{n6uBg!!L-d_oE+%Drbv-=&bG<#9%PW4hDtnsjRMDw7T_d-7~gP^W~`ul?V
z2DVs|c63V7?r4TK9o!quT%}ikx)g>RheVtKPt*s|Zp`%{3;WeBCv5QWXOK((-==?+
zhHXqbyu($f$ARz3p3(L-21J_8m;R2<t=kF|i*JnW%$=TL3Qa91H1s0Zev`iIi^oqH
z!@)f@5z(5VzPxj|jw#}VRs&W4K~EM~NkJ)*rp?asUW|M*jJ#!@+#)goI(th=_W{*0
zgMB#}X@2<t3CRCsIa`C5V|h0)0Vj1Exml&WZwem9=-3R}icx}eLEV?%<&j+I+*oK>
z49!@{rq1f>Y@6LWsxjdZ+dC43^^W(p4+4Yg4&%~P6@IgxGa%_7ZGu6x8t|I(?_wUv
zYle6lMiPYE%vtAxJ^_g^j8RX-F@LOQ55=|($-0yR7A}?oc>!L!U*V+|uB|cabDfgP
z5d21`fb;sDm=e<)QPcf_L3c}-+Oke{=FIco;Y78TD>Ivg@>Vdg3Ml40XC$tAo^3Ge
zK8v^E{>Bg1^A`shU<M&<UzuE)kO{CGDgx%YZSk*tL=(8#O?U8=pb}fFpHN}YEpK-?
zZ2NznU*kvS(5{f4W=0<Dj4o(OVRHFK*K8O_TmVCqTn|!!<jAi9PP2IcxySR^j(0Un
zIIU@zx}gqiw#$S;dxmM1OWub?=TJ?FOtYRe2Zq2sp;kyzoDAatX6DEB*dLZsGY}a2
z#y<|?Dx|ZxE(wFiZX>sQb0R@xC3>5>dKzeWhB?c5+1PBha;iB-12@cLv8M<#7e~Zt
zVTdHOBE5~Nr3z7Tdz0OJZcH@1KYq<wzwMIMI8;q9nLB7kmd^qL4bLof5~j2h>nqI!
z)gH<_Y)}OjySMm$TsBwGlvE@mcKWqx81Ty&xH9A3#>SeF2@!3Kz0fG+#B%9X3&D7P
zI}V2Dm~kaMx_tYhATgTkvAzahMlF<7b~D|XhGq+f{}NIE<FDfsu0B*qs&hDUl<5s#
zke$4s`BpsWT_mjzRC{-sA%fj9$UkHl)hN9*z<Gl92aDipePMegR}rVwSL>iGrh2@T
zUr|JXQ+Oj0!;%Z$Zj4}jQk?bDh{q=7d)sfMzjnZj-syv;;c}V@B)^QWxoCKQdxJx&
z)K_k4;JJNQarxE_z=Qd{yJLw4(78hamp1zc_vHsH^5VM;BDOE#yIAa7J$#psOQnf3
z1iwWQYwuKNGZ9<izGas(l!Ril_`hviz<H=1kD~?MLttT)WmZ|j1OEsBZ?M>m`>_$6
zpB@=~D1*UZqSCp9e8DuacQ+y=3chL@8)I-L;Y)#@qUe^zr&bF8Q?<;;?7lHv^DA|Q
zL1?wH;vu3%eg@9rgxQL;L21ARnZa!ABL~%Iw|C`4K0@waH{*cdQDTo0e?E^3s+ai0
zVnJuxby$#jBm9+d?N4MsEoD$!9(=&%OP(6Rce0U5XIAFKanC9&g(bJANw82@iRaZG
zllRof-|K~@7fLFH3Y}q58FG(bEgzFmq@cvG59=_nk=j<rPQb&0QpvwywL4}S4m9>=
z)4=yOF*b?BB2^Yzu29EfR71Y*#b@P$9}HnG`MvDKb&Va<E1UEvgw@c<T|!RmLVePX
zK2jW^f-Jkzuz1zWBV_&#<H1#`z|HuSAlXI)hNgEA%U?DOtX;-Dg&mikYxP)e%6f)A
zFYR^xCc0?UizM}!Q!r&_UR{SGC|(n_jSqrNvB|hVQ1x56ft>|EyR@|lpY~*+nYpJ~
zMJs^Ky5C|EH-UO9K!*ocmH<+6YTH93O}laxy-w2n`%Xyu2c-^-;Xt(`(x>LO37*=@
zxBx*TJ0L%lWQGT6TC*7{C^WsY;`~?+{4cNP{m4}0|E&k;ZVyPvrvC|EQzJiX{M`)W
zc}RH=TG$K!YfKvbVBQk|s%Y9C%OvfJH5y)OS5fH?MpxVx@vvEZPI7$P*0F1A;BC;Y
zjWnZWVYiP&7&tbLRxr@osNpZy>U)9?oGIvB(9m&r(IQ3h?;q05<xvE2^EYJ`hCyRX
zu*V4dac3LA>ErfGWCw{>`Ltiv?hroy&ZB`gQ7^vi8)C5+C6P$5`>Qy{E)MGz|2Ll2
zd<uymc`_-pn*Tf@ijd_W{H@bLu*&1Rx)B5C*R+24z!?r}Wr|;+w^VHt=jH`NHgNJB
zw9R<gm9ncwNQM@Gh#!}5KgS#Nw0;QuPv-BRXZCLFB#B;Q$Pt4BmpF))IH6wYlSYjo
zW>pBE9m+;PdB5#0*B4f;WeH>W2ZPi=PcBCJX=hXxf*Kc)a=Aeqz?~OnD<&{n#>kcS
zac<*ap4B=j3P#@ZM4Nx9%POvK*~u@yut37#GnE}Nm;_~bLzZoj?q;H+)d)wQXilm;
zVBwc(l>?Aw4WKo4x43~$@UtOJI=CE-OTJpzAFH6OqvF4zAvGLq80BSUeoo|N8AnnW
znhtm;uyY^-Uf&|v_l)4Hax^q2(={|(vmcG$K8DNbtm~FGy^##q@@rG%#`Uj;j)=F3
zE!c;7NIU7|sex_lLQPv*y#>vv_MpE@hHFSJA$?<!YZE#v;V@)9miXOr<LQ=SRd_uA
zy+H;5_+nbuX<XPqxguFomOmlx>X-egR6TJ}z@YnD$i(?fE#MTWisJ29G?}79FxFe7
z&6Tkf-D3k{=u4jIAAi&EP%Y=M`Edu9Q{6Ek&eZnRXF#BE(M{&Sk;8#%&ZSgN%p-fy
zKn7;>4)I23reP6DD7>9zg+9U&u2VMmUFvhXn;D(^HM07gbBwUElD_q(m8OJ4LAa|f
zZ#KuqsL@D3(}|{XbSc{|XZ*%`<6Xcm-V0YN!*Kf3Km%0fNS9xcrxKP?+y{zG?_(dm
z-F_HTLq*XW)`=5vQf<fHgARA|0wl;#g_F==O_Gi+D8hV(@*yHzrzZNg*8A<(;~bTX
zqR+3MuUAr!ItIXE3NM(*OA^PIEKY>~@u()<OL5=gwKF$&^kfQhBQxn=S|+-9X_`Yo
zW1mtOq%d%Ye0Ebt41eTJr7`jA<<cZkqnN%naS%ex<DsYV-t#F<RE1shPQ!T`Q&Ewo
zGhely_(M$SVO+g@q-u?9B+yNAZuRo1@4&@jw*LS5(HX`FSSH>Uje;CvGTT-AX>m1}
z@zyB}*hx;P$Z0T{Y4xAb+UDtZ0S!esV0ARqEW~x0Dlk)++eY|;%m0@F;<RMRcV?v*
zg_i(f`W+zcxOA{PQsO~hAGg>6`+_Z?i0@Qf(VkVH_+wSM1CJhpqIX?Sv-039Gdq`^
zY-<cVDmb72U~S!A5LM}m@nJ~?RW^A1c4IybbW9N=HpN1DHiyay(GS1WYKhDA_m{lq
zS5%eW4wEYUTvx6cYm)Cp4kM)NJ6}@es;zx5(PDq?iz``IE^+{en#|P;ChWZfI8{t%
ztSk`|OYrfM)R_o3<FWKyjQg@K=PYDzsB4wXs@{!Ve7jUu_mRjF`hs$k7TRj#CV|Kp
z4OL<cC>bbkrW47guk|gWD!MMy+&8|Q)j|?}fIPJ2`pgQ!<rjtp?T3}+IN{-$X$1R`
z*K;uL9v*HPh&x^@!=~mrfW|LAQi$w;4E@F`C(z4=ylEh_8TP4wskKS(EOgzSbrmWj
zkv&31S4tiL8}ZZM=e5T13?hgbKsNF7$3WZ#oD8%61d6hXEsX%yJkvyujgZ=eD!u|D
z8kWrc_K-OdCQ2loB{ZBgHymA5htr3r(fq<OpTBxZ_v(q>Lz`a$rV?PA1J`C||Ec2B
ze$|m!(RDI*g6*Lt>?pr&wXI@mC%q$jH3aJ%8CKLgqpM~BOdU;KGuq6_e}Hs2j<8`5
z+Ln$43ZLVejzz$Nnk+@9dIpgx<^6q;tOJZog2-JMfsp$zb|l{(9breCOZj5Sz&3_l
zhe`Mh(JaqAT$IPv!?uyx?BomDJ84$unygZE6xi>*-5f#QRaPe#h*wh&#j)LXXLN8^
zQ#Z@hY<D>MkUlO`&&I~rkP$ogd+xUC(`*y_7jkmIhYN0vS9=F3HeoYf$vGbI?ImT^
z5QlA*($?kbefvc`>nuZlkRPN%T}tXk5TP_bT-v@~G56Hw`Q~3rkEB*e$+A(T;AVIm
zvW*Va{DX*|5T_W&y+(cOYXIgXa2MAFz3Y|T#U9YY4fZLDKG*>FB@+F4_-C*a(ImlB
z-UpPl4T*D)poa{z|9pLU8*Zkr0Fn#9%_SA_DA`evYb9$H)tq`7VECQvCC^fH(9~O_
zo*Qd~J(c^1$lCt(7hOaatwVNhD)M)Y?}Z}ElBbQibDIAi5g8CKLk_<TpXLa)_-j>_
z9GJ~r<u+YTW^4eY11H>8C0yc*{{t(5QPJNAT*d3H!7)+avN+eZh5;_foFbhqEW1Kd
z4WtZW<iwP3aQ^`1^$}DcMA4J5ueVq(Q;@E1VEmP*oaB!}Fx=0p_vJ4onxkr(%Oz;B
zvz|qDe0&MY6Gui>cv=3`qR%Q?lAkB=_5QC?b~$C5ij?u06gR9mQT=NblJO6YXdZa^
zABlk~Ox7We`nbHmwHr&%;t{NUc2N9T;v^y`b#*(dLKo7$f3^$apT>Ep%|9!J`pn~=
zwS#H^Gp^&3@~~%i#)JJfWF&QUht%R1EP$N+-+#ZtI%<m^qCgjRv75T9<Fi0!AS|{$
zKT<!#q__#Sg0m$Du*!P&0T3x``$Ld7=~>mg09P?r9k!$b(Xt9*s2D3uioaRpB5IKC
zi_xW}|94huJn!^#y#XGh3A<zfD?rr0m1V281Z~dD8>6B&lN>bdIIvXvRxeiMbRTkJ
zu^H~SK(5(<k}zEe`tW)`PuY9AS?a|U0E&*Uvb1H_92O7r6YUITso_$9yiWBi;oK~z
z6Cy}~YoEC`5&v443`q28C~9mcG?){C95II1EM*fDAyDjHaDgz8n$c8v_L6>h)`(Uh
zQ4#2G*o=bbR%I3L<<1=CISaB(rm12y&ej$p8ZF+(l~%ins70Af1FbhT6CHq`Y|dDg
zT({ITho)^U!VJuK?ABC$z|4F4t_ir>0hjs#_(8tDiJV?<I;%(Atq4Je@-71v9wx-&
zHTHI+hZ`Aj8IFi|E~Jj~Q_c5aV~@_aA1W}DL1Ahn&GpiE`Stv~e#OI`gd=V(HV3M&
zF#7@;bJ+Lhe!DhCi}Dertn<_r0!WmqR$NF1`f^CJ!6;@@{E}cc;C8nE^zimq^e0YT
z1+o}F8z~lhh<lESWm^zSb|20B?Vk4ut83%uf7p_fv#;(9JU4#sC%vyhsba0r;5aBA
zN&>#c%=Isgb}o?2ufo+euEdjV!1Ptx+lOp&K%c-OG1t<v1gL2`6Oh}N(}U20{)^YY
z!!Ag#g|-k3J!57lWB>=CU5}c>4-qdh?&O@H|FU0t!VF%F&0eB{^Bjd)nhY1-l>s40
z+>!%|6XK|dn}^8$ktg33tqmLctH;T~x#av@KV)9euabE(^h2^V*NKd-Np?G!rI}}+
zpl4ZLwc8}c3+`{)opN9L>PNd|QTbrDwF}mY;!by0bIU64o5dVvhzW80pjeM@!pL%9
zGN>f(r0=RGx;>1_lQTbHyMUr09&AY72^UoE!7TPX1Y-8uZ*$n%<OmFOhd^r=v=MA>
z!$^7(2VZBz=YLO7Ii;A_xet+^a`^lqY2xTtx)-8Bivjtgsm^OODIHf<i%R9qBFeJz
zZZr;(>ELLs%%zuoy}t!HB=d@Yt-#yM$@vZZ&e$Xs!|r{O5LLGNIgo>R@ECPdah&s`
ziL&?($oJW{=e@}`KCbFMz+56vsoiywxFPDx$~mIskdTSq7;t;wP>cD=qva2luziH?
z;Tn`lj^PcT1*|W&m(|3DA&-<cJ07Z<VkywewzN_0V!i}}DmwYAKkTZ1=eT!&4Musx
zX+Dl?Xnv~sMHQ&o-JDUP*t^Jo^bM?111+*Fs}od&qx}X*HpEh@Ywh?tOgt(yccN&R
z;9(iOF_1^8f9cB6EVFt~yNn;x4i2)ieHI$SmSc|oAYcgmactl4Osj2DqwhmO<R2<u
zw!;Ob6%S6^yUU~Pi3~$SDe=zonDp{n+S2!Kq>2k|D5@H5&}V9*GEq3sLLzOPTwm>Q
z`MB|H?q>5d%+h!PAGLj7F1~b{XFCE_7XsgRW?)JPzo9$PqR2QPNaZEmJ_#PcZ<br`
zfDEonJu6(NHEwl>3gK|pk43+Beb_^#RV&_WH>5_<0imV2J0h>I>c^sWIoYD$)1kwN
zOPdLW@!#hn`f0wb$St3Zp{_l(Nq5`@ZTMsAWx`m4lWev#&1EEsG1>c}9xU4rILAit
zH;l^lqWcS3NEC2#1cZoEj>mLhiE5}B(FrZtYRhPn@{)k~<e(q?-(f#%F#%6SjKEz3
zVuoB_9)>zm;pTAZ3s4~J0~PJ-V)ud8rJdMVIb!4UC;q1d2HpU9`TPQQD89DEm2+JM
z?d?#T<gL@>%{G3vJWyI0cq7=H()3KOO=*#QVgqod#OG}~Pwqz$w95)L#6o{dXIoi-
zyITldOZ<l>bE<Y6IKv!nt?+KmnfOw3FjPGKnw@NONwLA12s9=ckeW$J%nfq=qi}=G
z(d?Ux&g|POx>DXvUho=3CyzX`ln`Oz^nqSfEVB8oJ~Ku~6?L`BQ43mF<^35c&Rq%<
zFppfbMg-!|jmPhy+>*A7B+xJkQ+hx3)Vhys;#n%buN{dlA7%5IjSihGOcDwy#4=nu
zLC@A5d4;~;2@_5T2WoyiO>M2UrL0QSjGR0#hgz+WB*uD@2~P5=g+y3Y>?E$g0XuzI
z0HG1)e{=NZm#G+;(W<rRUkZ4c@rReXjD<Enn8ClExRqQ>6^<OTjNvIZ@v|VF)e~>!
z0HFxn>SvhtCNkkpmU|>b<@+!Cux+3co1Ab`X01eQ_lKZ9w8vcj5fjHp3(`vbg7K$U
zZY~4^tlG)0=K<woHZD32kFDi)*G6GM_GAv2<+RlMR&7^EkMc7EK1!r53%&gM*A;Lv
z0ewTs35V-5JW`?!@y&3F>8Ek`7Y7^l26>;U<+}!&FDG%gp?F>J1HI*QdlXfNQ=zr%
zMXi!zr?4MLrKuUUL@dagX{@|{`bLg*FLAN~FV~LU*rOi6(0K*UiR!DO&gs3Cgg3C8
z-~xKBlM;EY*y>s{wfx2ELdFD49flxr(cg^O?2&)I&@P*SMB28ygF(bF%SW{AuK$?b
zyfk@@HK(NXa|v=1@kg@Z6eW0hZ?RB?K*T7NF%td0F`le^k(VZ`+LKPTO$@cy{T7E|
z0jK)Eg$Db~r(J&RuY(ZCg_o<-SVQVm%1j-nXZes^7uB3pZ7pa@P?aM!S}h`;xTXlF
zfD)Tx7-X$1(ZAZu@UdYsoyo@Bt;=y&-#JZ2ij3hb#p+9+v#kJ$t94TzD@KwFK^L?6
zlk$$)u2{r@pJaV$uQ$gvAOFSi2&pQrUXLLZa>IhhxBC@>jOdO)T@Xf4MCw}ne9Ib2
zRYzCJy0+w(1jm<VkC3y$5eAc_|LvmZP9^+|Glpu8Vp=`7<;<vNkfbs9-Y@AX1?h<Z
z*D8)+J*W|(#YiJtG{y*)Dslh+IM?Nsmyy1xgFpzT1}lAwP>ab$Et+QpFAyEGpmNO0
zM$|s%`-D;U=%0;mqKXvJZO&XH>M{wxlmSGR*8A33wvy5kZ=R*6K?~;J=B{5ZpijW=
znqJX#rcly3gtPzKT`=DG!$|FiUcjqQwxyvJ=JO$m#D7_y&{VyD2EKtL87-M3T;xAf
zk7%X_$g^q^5p4rO+warm7i_Ws`QY)50aI_yN}(3<TXst%<-{52^G|eqkyVeCXQN_7
zcFlWFisp7bYKRQj_6P1LXO;>cQ3^&~1E$pvmT3zlY5d+3=A8uXW!nH<H>)zpZLJb6
zi4F{|T&1^LV<-Wn1FKAS`q)Z7ux?a4L(jJw8I!qA(Nl`IR38W-n|&mE2;-RH=W-W7
z_O$}MTI8&%7f(aKgi|BRU{UAlxXj7+3;7Or7o2#d(4siWs}q}4X@(S1BZ>}hHOZ<H
zFJs2NvyzQ}R}1~&lwJB8)c!%79pR-^o$Kxi{0f!ccoMb~IHVlrP~>xH{uh`gVEP3N
zbaJrXYFu2Ey4z=j1`SVrt!Fo8mfC3h<7k-ut|2_@`+&Re3-N`$gjlv}7kT|i9-QM&
zwewqbus+isT5@rbKI}vZVH1iOwF%bZz_SPeDV(3uQ0SS6swzKocAO1!C~=(q%`aJ=
zGVrWPn1J!w>u5g-MKot1jBGk6VKl`v1|`g84#+P*E9<zo*w5;eHY>5e3;W*&bSr=a
zcYx$%ecV;L+WFoIDN=pcxXd;r;<v%dZ>45&p_Nvw%xEV65bE;Ko@?wT1)n>-3-jPy
zqSQQk#UrpN2ME%xU=?E~{JMavY>2Lr+bDDC-w{*Ed8S;f;3&OEaZu`T{yAb@W++bc
zBN<xrR6UhX?SIOda9mxjgrX!*6YBBQDY`|n2$6X9u^D$}II#A*1|kc(_~fb7d_NBM
zbC8PPkGNf0?1JDiJD31UzfcOWYJiHf^6~nWBYa7%4;Y$XCjZYVy#fS`rsOq+<c(ab
zP7Y;gh92GdVBseN>1i>Jh~<gfi=?hUXwq+xckL#di_?JHT*Ri~7i&*vbpJR2YGG)|
z>!vZo_H_yA*HQEZk(6~y6BFCYbc}alReFl4p20g0khQ@Ct0wDP<Dqq<k?#f(;_(j;
zV*WpcNQLL1)9>ip(jP}R9RGGA1(d`@;Sg&9f3uHQz6c?Mn~j=~l|tNhJk_&}oeE-*
zHvZzhe(=BYmPf4heD661CWeVzMN66G0zU&(VA@*%^91cc95zlUYy(^YJAJ1eh~UcN
z!nhi2jUoc|FAX-*c3I!gHY9%P?Pb$hA#(X!@NX@+O(^4%wr;nK<^#GCzOC(!>Wp`A
z+`H{Ibz7-ouFho@P{=n-r6-Ly7zdaaC6(Ggh*Q))zkD;>6b;0@;RHBS#1gRp$U3Kn
z1EpW|6jk|C(S7Ck2<g~Z^Uw8X)F{Ct6#=UvROWAdU4K~KDQhI5{I=FaHAwR|{qZ87
z8ZcmgCxzFq0+;J+@w6>g;|M)Vz{32pPDV}s3|yaRKu8Jm^KOn^rK=x6(s)4aZYzdu
zvWS>+j<Q&>aWLy_gBqMZ8#1?kNi*NM+e%qg;P%jM#@J@%>^2CD3LU8f@>$3eXl?n@
zySoV*#|jmlKxSanW=9=UWrZjvu=Q3O&jDSt%ttLXXX<P*XHh(7Xls@aAS*+q*sqO6
zhg2$?q3jDU2_n|zg@xNB2suIGYMHH?w<Rq61olGWITvn{Ng`lM5A!DGEKu0$?Cb7U
z(^Rd0_F|zXT_C$0TP?^*N<DY%p8vUk3ZKBH2#A=uv3BiJ-k7X2Zb+x}M(ki*DGO7h
zDjtZ{9&C+#D>epXU<<8lEYGa@kWO#sOSt0jM7b60cTZGW3C1{xH`lY2V!k8-B5~s<
zGq2}h817zns?KXLMl1#@p8VrWOhYcD<5`8vi-DrqVm=^wnk@~1n4AQf8c8R>G3h42
zPJ#RF`s$KE|Fb3Yr(S%&D@a(!^Ms^$IOl)SdU;7kstN4YLkYYl&~6CPs7{h}h%x=a
zdca%=Rf0p@v^0|M%W@()ZQH$Aq!=;wd{UXl%MHN-tzd<>7`qFa-X4I%%;ffP7<fAD
zFwsci6N3G+2IIDBT%&)(0uZ!Tm)M1}_$8kZJLT_G{x&-BaD4rsO4?6+#sp{)-Or3C
zaNF7uoLb$%2-?sCUkI=-t!&!rMlJIwwoQR@z4jFefjG20=a9&9t)~{<nU1q}6v_%c
zqH&ZbkBU2Co7#;RYt^3hT>>VMw$g$QQwrT@=Zboh&#s4Gt!Ig}I91B7XBncrN)p<)
z&d)-?FX$}u6EpKAF^>Q&=&$`beidrIKOHs&fTAk&t|TCT|M@MDC?Br93U$*7v`i4#
zMv`y{z+P-i&*LFNC_IlRa%%66<)7eg_q~f@xm7Dmz|PR=-OMm_)Q~|7u@%Ta-DwOC
z>>IHpgmia#oZnmf;p!6DWI10BC!a1(COWfv{{)Z8rU-6F^v(>0*|@A2<_OHCbP9=D
zSfbUksiuD&0`I;K_S9A*n9tNW#e@E&3NJ<U^*SZ@G_w$DeN}72ZdkcPTgYXp5>D6v
z|E#$tfs*GB`t)TCiLZSvI%xi~hS*+=D=Q!tOZXqpce1a3wxa0AkCxx9)ra!3l_4o^
zkpx$#hDu19*`dD$fhMl@?0eToh8}GxHOs3X6SV(>MvUFb4x>dPq;}0MrkCdZl#vup
zUveQtl)L-qFug|N`MV<FxzSd3{Hlutqq)vUJ+(6qQaZ<PfU|o;1{2n*yT!c-id!64
zAus~C6?oz6AQxM?4;!cfuy;(6fe|VH;_P7b*(>xk8B3I3D-QR;VyzJX<YpQLTqy@(
zRe^SrSal|VZPN1wlbnuY6GWn;@T*DWT0zeckCRj3q9sdZEV+DZYIOlyKjT*d74M0M
zU0S|g7a5?^sU^+j0oS~NFJS(Hv!jGqVz(thERjAD_-mnEj;)I#O|zA{62pC{y|GcM
z?2s|bvFa?5sN(Ei0V5vIDZ)Nct4vFE^won2fl;MMM=xG>c=A5$0tkvIeW?!@XxX+=
zXE}6AVAWXrsf%^AAz&mJCrCytKySr6;o5dlu)|lp=Z$MJ4!}ze;jTDh&_pSB?F8Yc
zt<Qq*FbiuCrOqbaAOfaf5PH_{HIq^YTaKn^S0gfO7_EuA8M_NXf($!0Tc7e01UG>5
zyeFSs+0WI4qkB-^EHA$Tx;{&Dx;>;Z7xuGq2&iH6Dv`C4uAJaMa%2%|^SCGm79RL2
zribYI`AWSf%#uh9B(HhJJM-@>fq$D-=@BR(7{pma;FCw>yr4&+!5KbLg*=%w-=y@y
zgpqd#|A<32+X7^y#4MP0*W<IY3S9bu(uchK%98`1-Wh*?NS4AF3PAY-evgyoiAI}e
z=qO%hl*Cro?9k{=(pCRIW$NODBszmq2TO(iVd3lB#oK~OifgA=%?W92Yx`?eOfb>G
zg<{MvE`pW*7n2olkJ%<oATgJl-$m&I$S(!<+sein6C_LJ9!Ca4Dhh~5_$(L&K{zCz
zu|=AYh-Wn8FTN**XBa#yLy3R0MQJ|iKTIg}GJihq*2z&UY(8FY8cIV~V&!QHnhYQQ
zcQNVu6$(M9uaPj6so{kRcyHcwyy&T?CJu+f>L8r61wN_dhZteUX6xPlx(2W`dO0j9
zHayJ`CbYF`ejnWMKPnsSTwGuWL%e`a2$vDYEGu$UqVrLe%LN@#1;2B97D=6~II_ew
zE*hO_pT25R(B)w{(MVmv|6(z%8rJ{L6*1$wRUZ)y%D6T!ANI~`5`eh+Lr+2X|D5Q+
z+vSS3xBQ8(x|1E7H>>gQRzoW58L~JZOF|0%sPNKdreziTXqdBoId?ryUFygEYOjv~
z((fY|w=t(s<!vC-vA~@@U;KlXy|j9?yygW?f<sV)EJ+KeB}#Fpu6RVS(7SU-Ef;6i
zC|O=6I0$kqp#-1>sHjkMV{$GO4PP$EQi){Y7<rp`B%e+goLwieV967|%N_C^*;ctF
zm}q6X4)P-%YmqzHfM?FZw<AXx0PC&m0|jQ2Mv&t-k_T=}zE*DJeiehH!xu}$c7oz9
z@UJ8FGBSb{rAGy6*KWUy8d+mQMEqD6Sg&JMmmQ)2&xIS}(H}yLhKiej+az`=AcdRG
zQ=AHX0$vbM;&Yi%5&3xrqQ3Q@IAiLBJ+hBsJ}Oa<Sl9J8X>xZObZ#C@w+TR1HW%hQ
z-X@2KrWX_co}=0RWh9d3zxz84A%#?FHwB0-dIXKNhX=T?sU7Je_v4C3jDA_Sp|uCe
zvdKPp=F@ANi;#oEM>K*p*g}HIGgNR`p8Zv1$A(R>L+QwHl%|gc8T1up<=7|XSJfuS
zf8dHi#US4Vhs&r;gIPdNRx~y;c>y_S_51f$>F}=VnCLZjSU7x?iu!{Ts8W+3LDfZo
zleSe8{N;r45st-_T#76~D8l>{m>-O#jNnq4%Q-BG|H!qx0K-<*+IJ>`S;8?_s&5k#
zBg83IKzRu3sU8UZm)56sVe;g+0>`yZYedJ^<<4)>(~i5U9(+&;(JDA7=@jx7Szd43
z^GO;1`CXpj?L<(bw?-Lfdq|;GV!GrZ2DFiXt*G2dTU<<FG&+{)&G=iy{u7VYQpK}*
z4;puQZ0hk<k1Rn{;zZ|@X?Kjau_f=PwwH#D!Ym846?hzj9km97mA-7Ub50c5L&4}d
ze-03seA%$kfsYj@Pj}Y#07V)~z-gNL)%CqVRHZ_Qkz89`lby8p%=9{UpSih3Q=b#T
zqQKkQTJWi+zW(I&><1)HK}*8B<Vo#=nw`w*YThCM*a5zqHWeHNGC)#FFuzq;0!APU
zZ*BsvbX*j6EI2#KnK=RBp%wy&1^Wn+8qCAq>kMGUA`9??1SXl(y?++(mK_L~5cZA=
z_RAtG`sCi2S*txJ(TDqA5pFps)+V}4;l%V~BFWF|1R~bXuV5<TH&o6%O<`aQ)<0}{
zpTV%7(in6Q?prR;hy2HG0w6wspi)?mhI7~3j1DjqKex)MW9r|5{bKLPFCVtowKY?t
zJgWyv=v3JLgK!LzgOM=woLm_;jIB>+m)AFF(i{UC|BAuhuS5%p*J8c+Lb+@KFKinH
zGfn!(a6+D^-oLwy9YA2@4UtqW)4jLmk<Lus;)OybOh(6+L0+}{)u+PhH_Ft=(Z7F)
z8W&~suv3)~{fQR)k+jm5&TzjQe*w4uGw(km^ka^!>P{VMDKa`TNn4Dk#u~?s#2vrl
zsG<?+S)${X$r6IkF4o`gKxoP>QrU?>T8=UyDuTO6wA6QQ^4Km*C$S|>(iMLVp#T-V
zyH37gaaOSqq4@yW_5Zw9S+4X>XapRVHEddw`A;cRqAyvO6&vwg1Bef5UX2KRB!Zto
zZe|mUT=an@{|U3~ZHkBqt<UxqP||3N(2W}qe={mE_tq4dW)ZCq8ZsNEv1|G37;puF
zc5y)@v27Tujm99?YsfYMbcJ}bw(jNoB|w|pb$)x&M*KDz9uOuTmaQDgwfGoqeiK}_
z7v`~JgC1BWtX-2KvedDSzl|a#TzQ*BD0+Hh1Wt8z0X!e})pyeb)@oU)AXR!Of&e|y
z#56aFb0j^4Yr}ZQu2WEud=WhCwGY+gTMk1cA2Gs>)vW*j{el0{FEYBUF}Co#5kIpT
zf^2Y?)XsTFH)o{8bcf1S3<r9kC4G1XACfkgqbF?Z%I2_r1J%U1C+?;&%j^Xem>NR-
zG~@nV1{{dA26T%JMM@F>B4m$+>TXCvgT>Wsf~BfVEgkrX&98$n?!HM=?K&D*JxM_4
z32PQk!%`-`1&LfIbjf5=JkbIo1;DowX9faNhHK6*a&QE{WW5<e{^6rz*Q~+4)V67t
z(6fLOgD^3P{<S65wl9jC(wizB*fT0kqdk)PSs5_4$0L2I*XJWi8%y(u>qPBuqgzRr
zt*HFZWkX<PZ-dU=!|;TV)bo0m6ib;1s!!^ixw)AMv_@(pWr2@s7>r;72l{u8Jtu6{
zOv1nBIqChgjHhu(m;zgc2_)i;DA`|{r1z46*^cDxg#=vBE!~K(bY;wXT2%Xs=7_6o
zdX6n|*-R66;b0p}HOVsVGw4y7_W2k}<<0UH_@VBcmL_wTRR~z9cNNG|*I$0v;;IXj
zPc8W=4ANSZvcWq4Cq@_wrhzLUxsq=a|E*0sL{akr?7ldP7!34lWRs+8zt%5DMm_-t
zKLiB13`fDGgth9aiCZtHu|fD3sqsJ^zd|8?iIj?{QF_+y0(1DRi{{#1gN4Xj6&DRN
zHoD}~sg3esr3<q68*k0ABrhwx(tfuOc?L=Z0S@PGrjogm!|zM>vaHC%0H0iJTC6Xz
zPFpnxF5D<ZDOB1D&!mt6BVnG)``1Lrv21s)g1&|tL*Lw~su!2F8{sFL6WfaLb{}on
zK6u8x#Si#3eWzsnCe{axTSq<uKuEpBvP<iNTqnWop^vN*Z;$BQ_?BYy9S(QJ`6~sI
z<7qx!Qon~oI>F_?6j%@Q57|rvGa(~wrot!0&Ic2apkn+;xF=E!IPe8HcDPEmpG$>{
zriV`D!eN;%s`Jtlh|bCez&4L7`-E8!+V&E^9b#$}3LPt1kQgB+e<i-oOFzZW%^{a7
zf)ml4sgU{TrN50HR<Er1zJgjoN~*WCoP*Op<~3$zk?$F8(8-x#ZYS8@*p!U&6Sy)R
zh9tu(Io5Lk?T5bm+yN~tu-)~fB|iFaO)!j-2NlG`0v>Ej`5yS>eDdE*%NFym3T-PE
zGs&=-RxQ!(Vo~GxC0K%-cc+3b$@N1Q@FP;UYuq{)5^4Tnxdb6qSS_Jq!B=VN^TQWs
z=&(u5@}0{?9pJkN`DPXQowO9yV|>6yWpEOX_xcf3Rzej{RogzR?rj2Yx`*C8SGP<?
z75jKRYlNUjz3dkg8BaIdPxF!s(=CN<c}ltzQ-+&9xXu!7B&<-M<vuUOo(?7$!L|WC
z;tP#MJHrGY^bo(l?2g7SdGR~p*NbR>6N@9(A}lz^I@?_RwU`L`Hm){<DC$G`v3dtD
z7c|SU1X+FE1O;<LE($?#mnOn3KzALk>nX(>s;$l|ncChYmTm-t&9e&$dT7!t`>dK5
zZ)ehHUnup)HF;q=L()Y~mBq1l?Ua86RQ>C=&2dP#;RO7rTqVO<QSoq>!vgO=HDXFx
z_r`w2wC;ghqSGW=sReYkch{9MO)qaAEKF2dP~)QZlp(B;<AZP40GO(*4K%7B!)-j<
zy4^}KOAEndY2A2E*^hQ|Rf<Yy(EnIgGu-%;TzX~wD6LN1E>fSf74QE>L&;PKWqlLP
z1Ag*?ESOzliq^`waDFrN)@o&cP}_FX6b8`jh3yGG3odnpO)gG|ZALAoXe+~2*9;Oj
z%YsAV05RHQ-vJ&r<bnry<Z}mE$ne5n;&SUknm)ZM;FM>|ojVw9sCukW`?zGUIQh3X
zs3g;5DvgHMgG*%Sm?J`Dj4B-2DJ%pQ>BB<->Gf9gR#qL4$#WS?JS`7Z78^(!IZ1Fh
z#5Yd^{LLH<NcYYa2N7}Lxy5d*ZYdI6M(QIGM-_@ggvpMZBtp1#6AA>dNF4}SjER9;
zscP97NpVo%eb_RpE^+Wzv(y>uqh|WKXXk8WbvujBw%@G&J+fTg2Trx(cFuoyT;MEh
zHr_Ywc58wl^R<{k`;3!1l_V7cgq<4NpX$63fJ`Gj^+Fo;NTfa9iPV3|fpR!mO~DkJ
zH4W6>8LtuaCv?6Rqz@GyAL|s&Gz?6_+5kKlZr6#D+?h)()*A!ih-DVuqi0OA0tKU=
zO1vCT>;rQskELAFApu1gBe!3U2grQtZiBK<=EZ+(&?`gaOIUkxql+o|mkJLh{O7LP
z>)c^Y{b!Zq=-t{p4{oO3>2+A*7gt|Q`s*Rxftq?j#PfCEbTGiWXWiQtZ|ANB$HJQ|
z(Zn32Ms@Z51g1VO=EUP`0cb>C=v@>z(R-*MT{x=S%n=4p0SOa9om8_<@8uvZ{=cDl
zkmX>&$nO7TtSq%`;x6mj1hkWQ`uFIai8qv7nfkc&+<K&Em+flxm=SL1n?uXL<dtV?
zKS{PrV(5TG;5UDSxv5e|e4Sc3B>OG$hC!1HQqvcNK2Vg*<V~FY*}y{6rO*Se9Dx$1
z&$_q=Km9C^1IDn`e^N;x;t7X`sQkckExzCahb|*@uOlqvW1Jqv<RrEf4829Eh3E%;
z$M_*wMB7B-P!?cKm7geIMRN2;g4E>`q|gM#{vh0AcNWEU`l<uQy{@g1-`mo(E>Q*x
z%gZ$5<OT(yrf()2Pst_fSf&b3F3eVn9WpP>2SR0PkgGC%vlqa==ucaxIg79wwE*^l
znceLLXDUM#Z9zOfciuj620KRw*bg8g^ZX<<)c*O6<Q$KNca&){0d%(Tw*3&M8-&UM
zPG8t+Y(8PPiwLI5!hIx1V}IY%I!9JiS>5Omgy8X_V)ZXqeK>#G$Bl;mwG#r#u4m<x
z!AT8Lhon&aef&JEyPduKfx5@0^&D-KF1vbthOX0V;?oy|<k5}FvYs643`ww~J@EPV
zkv|D0%SBD_hzMAp*82)`nr);^oW>u5uG|aVVbw~n&oFPAEj1jL^OU*Ai=skfXESf2
zmY$ltkX@qFK`&E>$e7nka2`e#(5JYywP3T?St>8ZL39sU_mUa^L6Y7O*82aEjSS}-
zVt^!9TS7zA2$X@mxo<ZsnbD7-Cm0<zv4L)98ast6QcKm}kQ#EX;}NYayfm9dANw2G
zXKV<!K>ae&wuJNIYYGA^PG#L=$cj<v<ay@tK1;l4mL#^eUWoOx+kbcJ+FB#()MWHz
zU6YCw?*!L4iD<=5J0S!C!<;mkXAfGZ9$#2<s3yX)?PnV4dqu3An96ya^4AuO`Za6#
zu(N8qa>FgLU)iX+wMlMd=JtOabb>9*G2RmY`f(3HILbZH6qU~#kT5f?sK47QsjvZl
zdUK>6kaCjrjVRAM20h+HHD3b5Ci_s9R+OfzIU2KgRlL;{=W32{uXvuc@4eYc-=A6T
zJcq<cyVZ{>^)$(%ZTx(&ZlV7}KK!;0it69twG~=0TTwEqtN*eX6%KgdM4z^u1NGGY
zqG6<Z_%o?K*hFbSZQO~mm`H-hU?|RT7kad>*$-6WfNAwUH}upPYV$Uvc`9m2{$Rp)
z9J@SO`C+D*rt?r`n(sAcGw<_OChf)DWRGRGOg0th+U??X>;+?b?fJ$G5N0&=-0RO@
zDi+he7|Q>9q)a?d{`V3zjH<N7a(a#GunphpE2S0f@#jr9Us&fNnJslP6Dg&bGuJ%N
z1Tqryw!SkK$)hVZbqTpua1IiIZo|Zsbw@(%#|dG@MA1CehSU2(WmVnPe}$@6pST`C
zdsHq@ow{KUF(^~9M$zUjhbcNbtCG3Q50Fk7`^a3rvmHH0Yst#RPZlFW4l4hF3ldE1
zu2!JPGktRljbuyE{0+NncXZ{YLZaZxyhl0P2htPnbbBvvAKuHOCL9WYkfBw!Q3XME
z6-P8aL=xJ{JprU)u?xLX)<lV+A)?PFci;0$66(+-)-_rh<EgI#3k~LX;Br9ey*h2s
zyq|AU48C9%4c^w#1hoTzGewy*24>9vb1W+A+K=iN<1*qqjr&c~n%Dxu;b7J8&=-^*
z7u-Jb7J+16r%b=6yLk7HnZ`n6S9_=64IPT3P%GL5^B#)Qjf51|NPK5wDZKl*A1Akn
z7%+T)$7a6z@MSF&qr$JTfGEDhx6huR@|B_ox4`+WIe&xuNcLu@mHVxT4CrSBQ~4j2
zu01zyj}HoyoBrKUMZwv4z_B%|LQOC-jA34L`Tf9TeOh(MItVFkTLj(al>p5(YKTYl
zs&F7@Z8FmC5=c7)&gNkU-2-r>*0Vl=zl_A>sd!5)jFzHaOqj`58{pm9Lf^>y)dh^(
zB5`MjJ#s$UNUpa0;VEI^<z6$xcXQ4zPw(U3dKBZut^5}n`Tq|1bJks`O204@H&g_E
zQkXuvH<W#xkU~?I?<^Vu)PtWs@bA=K&aAr`rk~1rb~04W^+%OQjPj~5h!n*^y;)W6
z(%d_ar7P5%0)QR$SsZ;~ff1D)`H4?s6ZQoMU_|QX5fBib?S98?Ugx6ILCt}?VoJxR
z^0?O+j(xRl@79oZ{z!f&cxhHXwiyn$A3t4JG=JUOUN}B&d1oY3NQ(^YzEG}dGX+PQ
zlq2P+1up$lHE+=*DvKzsV#KpB+Dq?$QNnOh-?J0I=6wP)EQ&kybOIjeh1%uQ^2KdA
z%c*hy@_s^_B=^y?&wvpHZ^&LJ%<Hu`ma3KriZegv;3<O-5}9+s+!cacWM@i56GtNn
zdvo)dhO1ilX%~>*PZja|%$D!mU#v2#0P=yDge}dCHZx5p&Y+yfZl4xm{ZPJgC<5eS
z{ZmhIjGofVJ9uT(h-wmsee$dB`m7k<A=R?izA=N`#c<#{H~s^1uelY5eL|*X+REXB
z5?_02X-b*Cy?ma5ti0`M45qnj_a0y#BpVG>uQJ9%{vkHI(7FV1{{*%4+J9#u(zzzx
zsB$M%vXHI#_c4QH%}xX*=+74WH6X*_7wR&KWZ#~{W`KX3cTS<~6M3iS_8M{`FD?E0
zLH_(uS_g-c|IbQ;O0<KjV%X&P|MuIg=sy<9EKEN}rfjiz2el%dxXP*QaDc<j@w_*C
zdYlsJm>S3OPClDE0rJXGGLPKWI;lk{fFA>DPp}hOtYodhsm-@1ZV<sr9a-cbcV5LO
zrT%L-wGN5{#bLC4ZC-<OSa1JkevEz{pBw#%X5fghRtzopZDH?cT0dIIt`9)shl50%
zxof6UO!->vN#dh2=u*9HAE#EF>CDfKqc{GVLA(4<eA4a8Ec65=49Pim267bTyXz3f
zGtsS2L@rce)1|aY7BFkKBlUeEnJIxgN4KusqM-LQ2EQVF1Q_{ZyuYCB_ma(~<IsO@
z7}+<eIA!}%2RkH7BDKNw7SZ!@DL*%6Zrv|yzU{LvQL^5nfsmmS%eKr^^YSQJl&=4y
zf)3F!3(1Mo!)g&i+g>J$WTOn|u2mz($S~_a*+aU>oPne^nmnn6`+u}8HK??I(XIcQ
zDeVWhI!kXg&Jvd@BHp#nsK0%?W;3ej3{I8MD1$v}SZfFWfrKD{sZRp=L=qCnH9?{b
zDvmma35o=`RLN#ZFMkkSj6@nUSXXtmQ*qBvCY@lE%`&zH`h7!At&NJbw!1deDnU<!
z&--8Q96NWjy0=tRDd+EVyRJ(ho;vfN>!Hz=OK6M=oo_3T&w!lc-35JVyKia-5T_*C
z!e7rD0?iE;bY40*uA|TZJ}09Ezef~^+k%77!!5=ikkG#WXgNowkd#BHd)Xz}+QY>k
zlM?ksDTul(|I%36Y>63=CnDt8RGOUNcL@@IkYOG0$12WWmRR}WNo}K^vur5F5<%F$
zaQWG&P8e`tIKBj1jA8(MFK4_;vsI5SYWI6GG{M!xLI8?+(~t0;n1e4}YvtsOpAWJ&
zKq1KFV&Evro6+n^6jzZ8PVr&1>m#K2Fo()v8|OmHjozm`!Wsse6IlZ4%EacxO^A^A
z*2yv^{)BAlrdqCFy-cowaE99z2iJ2aZtlC2DfP+WRN#m02IZXRi{sI~*7@pc<G0ZU
zY`@o7ZetKc#GMVSG$3j1aCI$_LeM|EqE?0lWI{{#e?e|k_OsYHn4F~03!(iJx&r^t
z*O;fI`X_{{JY>m6!E4?v`C%t++5%_4?db4*3cDaMe0iZaNEocuJUJhJN{oxbK_85U
zBgjZcTwySc!Km44z?mxf+&r2C2E;&{tzT0<qN@%ro;fK1a`$%#7Oy;uQZ@eRWrIo#
z?nJV9(l}Pu3gdE+wH7gq`1UY<V~3D$*O^U8jo!qNXk0RsM@sf>A#MuCvGJP3iv0B4
zOrgy$vh}m-9G(0kl2p0h&fIB))D$X&7aw>y;zkU%K8RwC&N5C3R{)m*^yG{2^r$>n
zW^Ej_^CiR;38_p`%(6V6W%=IO<09nsV!e4Hzr7-gu9QLJH-opmabvWwyP0Xx>Q{RT
zSgx87F^rL|g68FQcn2CvcO6A;**K3rz5^#}hq}WmFPx-m_45o#0vQtmw!aL~gRh{#
zDh90)U?_G44(B_aBp0pudl_ENBEA&p|AqvH1(cD*PgHTm)gP;1)Hxy{3Q9uF9(|04
zj7Qw{*g)7m+;NW(24koEZR=ys`I>i*ud6duL}B&8IFe3bImq{T5LJoeV#6eiN}2+d
zj$&3hZ$g;(BL0q{mmJ5N(Tkenoxsrw+*RV4V>9TtSX^BtXdar5xZW0PzRAD{OcBYw
z^Q?aWSEwyR_*fINU_ai-nF!#p^dnOTnnkS6m}9EC3^z)Ca%^hd?EYKY27B<L>1>MK
z7*l{);U5thRGS%RmowU{+!5kOKA#uMA?#*99cyb?>t!RH!%(eubo@-f({~L(t2Bbo
z0(=y*>usZrVy4MVG6Xq>qb!3~OZDpWXe}<@zWe!f!uJP6g3kPYB|n7!wNVg9j0xe=
zLoA7uK-15$qRi<^uO%>tEyA!{m6xiCjwq;ZYCO54_CcBt+#X(Kwjm*nmn*izg{SFm
ze5wqbFCaj^6zv(r?7Hl*?col>{IxPd*eT_`>w^`;3$v=c<Arh;V$XChLS<d?nt|{`
zinxwDF;-YCtIl?KvomI!cp{L=IzK5gRkT5ZM7{4r%y?vaDKIzNENd&v7bX#yi9TaP
z^F3B#kU)RT>uj$jBYPH-wdCI8$#d7;SZUYEz%tlaENvyI1!m$OVCnIU%UEsYF;;;l
z`m!y?crno5R4$K{V^N~oJQ~j8)d+?OV?rtcUX_4!!eTL~HRF|9r+_1RpT9*i=SMY~
z9K=Kp<SVeyGzaJ=N)QNI->_2z63#Oz16hA8*~2=enDv8i?P$Q{!O=S))oEPRqEY3*
z0#Q!=t34qQYxQkTuA0lP3%*^m0JenHF1RKv+-Ud8>9hYZJU)5V0U>u+V$2259p@d>
zCIsf^C(k>svZ*mqes}hrM?A9ow%#8Jr&Q)o|9uk$KVJEeXP=5xna)1|vKMEsL$2bx
zYQ(HnpTfzW%dJYGICm~A8#WBuFZnqL2oBk{3RN70#@_8lwmcq__mZ$~uA8}xynrV)
zZk{OMly0EVOW2V_%eKBe!m2Ra(18Au^r9H#Q*p?u1(+GnXgiw8L%A@6bCUnQgu>oj
zy?Fx-KV}5_UQ6G5sR2l|=%X}4FHO{U$yV$X4a1(>PG!Ms)7xY-ChrnYCYtt#<+U*^
zxqBs-C*+OK*3954W}D~{jsJW`2e9xp%cIBUwFF^~FO4^d5vTk@BDQI#uvfJt*__Hn
zvZN+9kO1X}p;%^rcAh{!cm;KdN9xx|wikx#YuMn*AJUXWP4b4EfgF`qx)Fd*;O)}G
zw0SWD_GoF$&M@zKFI!XPyX-PRkYy2)a*Fgf+hqBAi!7o$8Vfax7@C!cQr#bkT^`Go
z85JZWJ<gXqD^x0HS+^-z$G<mqJ62k}5glv}W5GwpfrVY)pkm~+v%Ao933lA0XXe?i
zjh-DLoMo-OoVt(e&}YdtgOQRS@uo|67kyt*vGtC)G!r!kq6_w8kZ_(6BWXG3hG%!w
z7?f}FW!7$c;y_D9!W-sSx#xFx1YJ$?9G&*jKhN{yIT>B&yth-0RrDQ<VnV-)2HAdE
z$c^PkTrw2=;r#!W3?TbM@pPSc6CXIKuMw69OW`(3N9$#}ojPu-S9EJDiug31rSd}g
zD<ZE|48fsDgm+u30K7l0oSWgWKO)dF0$%t3yV4I#4Q8(hK$)=63cEUr;zqUYLI;na
z`ANN2iP*v<mIfT#{bjL{)fHu{!R$dvVASsJLO8DTU0vcA|G#zlw8igRbleVmp;rsG
zhnq1&4M2Ed(=49EUd-NcAgM^XWIX$vk;uu5Zse_cg@Z&6wyi0RHE_gQ=-G+~a#~E9
zB9NF+JZ0TFBPK2Q4g8kZ3#{Q_4dpCJip+j5<L2MU6ZWhWugs6#BMYz^R|0=vW?K*L
z3(y8Tyi5G)ot*p}(JvdG1QHFFPd&MM`_4M<I@_It<mh7RP+5KWG4LmKC6H=LrD1M;
zg6x(mY_|(u(Ok#w3lQdNdl{s?JXNrrW#nxJ$^{FoxBm<Q=YsLQ%9v6S2x}xfxE7Db
zZT><b?D=n`ERzh;Z?I!aRyP>UHa0LH{TmzUdK$u_%4!6E{v{Q(k*Ts<TJzlK5V~T~
zVQ%-BU0vkXrP>y=D)Q$rV1f522roF@DST%A2_Uz)`c1x&QI#pe3wt9;H)w>XT?d^F
zNozF20t?i2O`JDQs|27UqXs||geK8l3X%nO7J(L-R|vUWDQzVEZxIAuASLy)^68<g
zcaUXGT4;StO#m+FdpW!wxtcfQs%hvRrOhnoUYbBLbm1_rW#G-`_pqw<uK|c&FJ)AA
zBL+d3Ri}od7<2DA0-n&S@QW((PjqOIN%7YB8bRoJA|eP8gH?^S_rA?w&>{7r`dkVm
zY7q8e2G9W%atsUDeR`R94H+bpnJ7s3DBVor&p}3cRY2rKV<i#iHSoDbr%R29f+j+L
z+63|pUaK|%<E2hQLWo+G-EfzP|BjED;BmLGC4-Z@1{C_>D2sZJ*llV0+n3|lubUj}
zmWDKn__%9Iqjx=l*Z1cjHqs16{ow^4z!Wk$lkuP=7b+I}E($&#J=C57cte@)_3^o#
z`(YFfSm^nQ&j!M#yod-;1<eB4!4?lUXKxR^?Whegf=)jvfgStBIDav8$a^wfUJTD|
zYjtW@iI#ud4gL^L?<4=-Z4oU`YCR-4{eZ)!OA8WL<3c26b!EzE5PJFiD&PXB9+484
zFLeI!$+wpB+pq?{YSKvAU*o|ao;RN3vx^`!?$;ZFF28|4hT|OWVJy!t`i`A(L~yST
zZ|04x`};KEvyAiU(Q4y3V!%QhQ{|*VI%nf+z_qIW@jTIzV`}=zL6G98>CL~U_v-{*
zT+<w6e(QaQWSp<u`F`8BAV;_CiJ;1C3UPy_+eqE*z{NGVNH!VZvfSgS+^4=XU?u~Y
z;?RQ&G{}pW`Ou7Qef>1A^9o!LGR2<#sksyu#%rxa20|GsAS&>rKS@00Dd>Q)#06IY
zi_^OmpNnHZN!~N@s1{n|AtPwdkCr2gBwtV+s>lZ(<`;4Q8tNSa;vgbr8sF%XhlYXX
zRZmCwequW%o*g$y9)8L#5U7PXmn81i(vTRV1hbjTU1;aE<<ETCmz##-W=Watw#>Bi
zG^iSrJ<h{qiANa853Q0U4qvUlYS1)ICFzctlg7g3vw-#r+JlNNZ=T^itz@g68b}As
z@Rsal2hY5)6h&Btmzxy=iX|I|X__Xi3aY|%q33N72~@VuuZvmQa?v|mfLix*WY10A
zES?VPKx6wh4BUZ+_@t>tLovV40Pb1-24DL)Af7)|6ljF(1!<r&3U)O=3h!#rt6jSh
zC}8f~Y5U#7NX?!y7yoa3qA$_La_y-8ilPIrs(`Hsqa)(gRO`$9Li^F}?N41Y8v9jR
z2IeW`llVT-`md>1|7Pk&p1F#iN*6^nc9jX?crEaB%+_TW`75l^I#cb!BL^=IJ*z#b
zGH*{$uyJ??prUVg9sJ*}tnZJnqe_i;Z76;nbxo{eCg>aj;~-Oi4HdupBF!>g!w$Dx
z@<Q<~l_+4ya>KD#psk^IMnpMsO;QB2PF`=T9S1}ywvN=?U^Yu?Py&EIr$O$MGBe5O
z*1(p0_U-JZUSVUmoT~!8xBg#<)ofH}a;z9O_&QZ?a8W7sWCsMInuwmCJ@kDk!m_Ad
z(zP;Ko?|{!!NgS}6@(GQu9a`fHg@;Vn#IulRpqE+BwX4!z~<Q_GhRo{U=R%hg1hD3
zXRq4*9|qUixwthVv6R)B*9s$O!h_b!Z^X7)C}Tcq=s2*1)%lXZXN{8DUoD;?By4pa
z$H9Q(lXMP#`{$qdv;q@T>)ECK$uKJRH@9m&tdxmO<)ng_2I&11wa~T`_S~R8LJLOM
zS3}4pW^c@<&DmRwn}h0LqBS21i!w2Q;2OVXc)<QczDEGX=%q0?aD+qnc2gGvNvW=J
zU?j7(qLoAfTqk~m8JI`a=rIr<GLh6*mi&^rM~~)B*hb~eU5M8d3SvwJ$k|oB#uymF
zMooHxJ?OEGbf)ZKGes4OoJ}nAS3-ixfr>9hNpb9R@u%&b{ElSEq!AW@+)F#Dx#K+_
zYR{Afzja4i*ylE??HOl6$o|oDAX*`L@$9_#*7U@w{n%_rc8bE*!5Oh9*(3mUzFpS2
zhX;LmFyIJ^dm3xshePw$4XF(qTxqA$v@ya}5s|=PG-boEaT}N<Vv#OWh1OkqCP`X!
z%3RpF0EvJkcyWT6o@8c`sdu`x^(M%d1_Y#C4TJ-Eb^D{(=>s`=axc0rj8qvNxKje|
zb`lmE8_VQBPKA-~paI0Cr&bsa>)=NW^zO8ZGmB7BwoG|p3*@518+Kv`HsF|y(qcY9
zeEq+uJ#GIh$ia{07UDK^MUdSUnIy17A~SDR$P0kn9z^=R{*??s!2*RCoKCMIkp_0~
z|49UfU%l$H)~!P{&aDw{4z-^U8<{2r-0zQKU@_=Fc$|j_8=;~(mHE*>Uv6t9ARP^r
zh_cr)!H~#6<u%)%ocT)7%FYTk*(mAI;l4Y-UWvHXB|CNHW`?Am9n;I-dbuNee3*X?
z@ZKa249Eu_;ao(mmeh#=GkEaePG>&Zdp`P)Qc3z-<-=#j3Sqz1ixvsVQ$<k*o!X`>
zJ_CIS0H+*Y&}<#|e)xnw$PHi+PA?JN78}KbSbtIH_l!l(x8f9DgbP+Z50s-FM_K8&
zpW1@HXe($#<w1tq3J7U^l$t!(y7gE7_5`i7`kx8Ew|t35saSKQd@~dOZ2N6p$egT(
zFa!+?k(8qNvIg*PAUSRM2fz(7WQH-0utu~C6f$YJl1NE8?7^gaJdQ`b?Jt28fkF8~
z6Y~>)YEeL3uU<OgDqK_SNVhK)0+e*Rl?H)=cNzThqi>Xrjed{KWbsGd83Esm2z$bz
zV$Mp)xlsO{ZPm|-Xajky*2sX-#91L>A~?JX2J#)kINH^F#V7Hd9*Z7Bx7s}+a!Z?u
z(iD$Kg`iNQ4gE9aev{l}i>LeGW0X9#)9FSiGvaQu$)`HxQR4&RN}{}UrY(0;cHw4O
z>>{vvXvd@=ZVn<~=m2Adcju>VQHlz+tV{3h1*GrLU`f`|*1!Oi%Lzn=kmxt5c&$p{
zAtmvEN{wz)(9%Ca%wL!fw3$}dQbG8j-_OG=eI4Iws}HX62MsSMhH+GAOh=T<ueXJK
z(N83TyH(-?5A)MR%E0<g>t-r`1<QqlsP;B5ViLhVv|Y5d8`^{t1(vJQ%5Tg+2Mo*S
zba`euveCefoIp^)kO|3qn)ht%_?Rq865octTr|1eqNqhbr!JH!Yrt*LU8mI7%5Yrk
zRw8BfA8b9_2zUkeAt4}yvvvH`NbG)Se&z_-ehLe8M)TCDR}K!dP|RS`nj&~oRlm4X
z*W@Aq_3c`CgujnwH>4z`TG15T<ypoeX>|%vmA4v@H=Oou0W0j330+{v7lr$(^p?vF
zLsW;<!HVZ-$k4I>;}x+2fTUu;PHQ}6)qKi$y8gvrwA@2wl5|Ovt;Nd>o$3*h5t;4o
ze>!%aQy*VdIIDcxsP-M5ZdDM*P~k&)iPC0g`m`~9E2>2cerR<Rmy(yk3Q=b9)jgs-
zm5y4xQlCVk0Zd+!<3iZTwYEFX+0e@sR@;nhrg+*kXoWQc3dax)uj8V-MTVif3bLe@
zcZpQzm}ds~eapGY|Kg6aGFoW!x1nc=zH5aQ+;!L|%4nV*-$^67{?l0yIDOdLIW-sb
zD}NUUo#X1}D7?&*z#GHis-{TFyDe)>$_{SC@T@iK&AK!>Z3h^}m9&X#Bs39*UMXPm
z9=CDiYh%SOr+*<BG*UjfZ5L%aK9Rs8#4?=O!BRc`K<2tdm3MEshXG@fh*TnU=^hwc
zn6(<U(w#XeH}AU?Q<*g;Mwpg|AA!*sQttgS#pjJh1-U#`%3Y}sHtvwuj6$8qmUJj3
zz?NTnZ?wD>aW}y~QEi^5-U7X9J_L*xv2#C0we^W2astDjxLghNAGhVjrt=0O<O$e>
z0_NFa#z%|LWgaA6+SD9d`YGq+LD9CiQr)r%9?Jwh$gTqhLn6*j?|}%tz-sI@-?rC^
zEs@&q=5RPbPsB*v@4Kmnu4xA6*q%#-f1nfC40lEh^M7XbD4`!IhxxpJ#v)>4tY_iK
zQE*sd`z=P*eLSYjn<bS!V#shq_7wFUQ#P>t+QaIVKuZDTQP>PZ!}Zvwf;$*q^hDgL
zOidwVi0iUA_P`E%1Hg+2@=SQW=m)aj*{Z=n7uz`oUs;8~68!D$dOO9`yI;yXRk|2&
zhr}W8k}zXYwZSi9;LaM(1pON)J3TR{{ossu{0$*35gNiiPNdIo=eYWwOg`Cn8iwWx
zMU5`v4uYuK7xc6O(3pq)vl{B!ig;svsrs0jp}9kf3_3S9!!=$$tnL<5>asoSlnc6b
z;k3bag)`AuQG2QnBdRCD?QboWlkSmOLLl~X8cI?{f3q`;k^ez`ncy_t00Z!`X>ge*
za7Z`)qJ(8y-vSh1RWZV3dQ|Z`@AIBPvUN^J2CBx~Y5+e4sw_jE+%~bNAnv6WK;XM8
zHZ~te9h@MH%TaX%478raaZBACZNcv)Qg3+!Ti*IAjq;t=4T)BEYf%dq#(d3$H?=o5
zKOmiMT5xwY3}S9*RbSpZO>Uxyy<3Lx(r$|uJ1nepgu5-0(oN>`5o5OK9!$+Z5$3>C
zjk+KGjBrnwIAIe|-t_}oLOnnLH$ce06%!{8i+eVf6I&FL=N5j6G5X&}6@R9iGqf+)
zu%M*Cv&M1K?hsfZhw3LVntI4n{t{{=a5>o^WfCVV43P1v6dPlssCOq>S1HO45OZ3-
zTUg=Cv9)lGPN5XW5cKiL=h7-Z2pNcAMUF0k(~*|Mc0(ik&Za;$!$I+~LQ@C7a?URr
zH2~kLNaX)*GE(rKtRBgnd}ZkgXoqJwDdq9xtNbs7dNl4&VfkUDfhUigYWueb0dP<5
zN&s7N5}I0@QH9ob{bEfInFp?YiWV1$q2XpE8#v9Yjc27O7H}5H*EciyIUFrAxMMDq
z);5wL(+nrrWG1sD&Af37JpZ<WoUd#Vbpq!;fv5%(8QRj9lujGn&es^00Wc65UhI_-
z<1d7)(u*n;ZZz#SjuvY^8PO3WW<NMcm#q?&dR0FMb`f|HnYcPqN%{Nz(nu_5k5!-S
zxTbs1&gXWhsC|m0VirM-ZTbmc%R;^)uzuQMhBdbS?w9@AOShxRv0xBfhfLSCa$*>d
z{lBXSrLC=_DR^peg<m0swuQ`jF2}8P03m9rEp>&Olk~@cl(S|40tA#JUgagqG=$(k
zLYORk)tqa8w-h(Asx)&-r1rr8AA6Bq&d6NV%7h{*QBsmx8JSzeV~bTjOem?*hl^C0
z_0%jas79F{J*nB`b`BB8kg)}Xh55`yS4`Dg5-DfQF+@|O#|uZMxhqs6<1mGGQQ>11
zr~?i}eoP`NR(Y&Y=Szv$J5J_6-SJwcWWhHmz&CQUA#nXC6_zbx25Om+cKD418pm0U
zu*6ZPw0h-UgSvfu1X+6@B}7XvX@YXCd+rJ<-t@oDK3Fm<i)JR%yw|yHc1^&OkZ(tn
zl73O#Q&zS}P@hZg>N5i}(bJd1s_%<0bf!73JOGa^9oRH&Zq^&$?<+@;MP+A^0yVHj
zzzUWo;%tV;^_ivDPxi#K&8-c}mzN%a^mxtGwQMfIzgE?3_UK%#YC+pPW)bzbk^mSy
z@F{M9l};$YGfN5zO7I-*C1b86L_WYS>h$V`J$jpY)@;{w#Sy(2P51fpkD&qQzxR0v
zMRNNGZ9UcQNgLS3($bGfP3~fFadIQ=OSGeS52!*Orx^-Gj;7elT`ZAWD6M;6nO$N%
zhB$kk!2&T>(#X;)s;BJfXKT-mkeUVqmQ|~m)M~|Cig7I5O{bV*Kdht+<zL*;^nCPp
zi=(8ahmJ_0Vybcko9>QBwGdYPz9%$vXYB^pqdn&~nwA?h>Dwyh)4iJ&@vpT*yf0m(
zjf+3UKiHJo<E3BTNyyhkocZzRgvhsbBil8Qb8=j$A$1;BIM#RP?h7+Z_xkh1+;on+
zT4B|ir4~*2b+{7fx|aY4Y?~L>snp3jZ6S65ioIINb132QW2P{+ezfsFsB3?j58#W(
zq|IW3UiBjY6}1rkGRc>Ge4v9)<Yh+T46zI;H678e&n6tuO+bZpsha|bi-;lH)+2#<
zK~p!7!j=(61qSMikOYm7OQ?C{Nssmi=wNJF7qd;INe5|ON9;L2TMP$VM(6x;vhb2v
z;E80E?tT2&cZ#El1m|9U>u8c2AW_NfYgkh#ojpsws*PzRqu&~^UsCq}RH|gb6Kx@^
zhyriX_KTB|bB~FC##4rnuMtAp&V|yv)woW-c<l3d+axqYu6Dwx%{1P{e#{TpW<q{s
zN!6BuPpWUgT^(@eio5rfDczBqVhljD$x!NBjOonyl&F>FJZs%VAKD)PsHZR43gpk6
zE0gKRuEYF+n#Ta^1npfa0gk8O{W35<tYj=IKUZBLYklt*XnT%EG;2p~)yu}=;&-`q
zzQ(vf2qBFmRO+}htf<~3N(SJt0C8aHd|biz;OS)j3RX|z#QXQqPKxv*W(5;2Lv;Fg
zj-K$1qsMB$MoTfUHQL_Io>1si`)~cJC6d~*zBLF$Kpf8xoM5G$z)y{fjhsX6faol*
z!1^?2_~nNbfUMvir5u1n;ONILFJybtR!n>R%u|bIsdlGqaD1D-5NNs<Z=tsd8*)eI
zH^=wDwU{VxfeK%4MkG@x*#a%zA~{2j;P;&7alTvi9~E|$Qm}jo^DRcHU36;vOSlC#
zUCywKJvhfmPtd+!<#YC*|492kt7DsAeC1Rr*2*VTOM}H_yC$Ejv&!0D5O3vvEyKUI
z))de{k?b%(;bG@@?u2!Z?sW^Sst(%u?)tCrUlrpWHPo6?^V?W}5>G=_>v}KDi!9n(
zar*zJDWxD#ZW;zh=hm3$m@XPc?t^DeD<5-)f8%++FNbE>H@y>Z6y4fQc<K_tM*Y>p
z91G4N1{X$~fd`(~_v;5p#Zp?TCh8lk`LnKA(;pV?t?ntmcH8iz#}M<34#X|lW1X#y
zR0Dmvn?c6J^<qI`qi0*3O=K0*s<OX}4zC<sX6{JE)G&lKxbZqF(yP~>G@sY+V<C{s
z5+5N`N<r`6rpcbpZWr2=^bbbFV8}JU+&4v$g;zh;Si&#>um{_o3AhbMJWI`jkx=li
z@|*sdul3>alnb|7_r_nUVp8g-3-8b!`*^yMzUv{^w=kL4N}}z5pom#E54<-SOISMD
zVf%<!9+9*S$q0(fA00au(~BZNA-U4WciiqId*#;*R@isJ0vhHnM8XsffG~yhB{aJC
zbOe4P^nRX!3)a3u+n{{~EFfarK-xyqe2jekz7KTtHR?GI4>)QH(WWsO73|f0N)P$l
zZ%Vp%oavXo*z(nUPBDyi%V=$ZxOUii)wrPE-a_gFf||Izzu^mdr^pTt%KKf67%<dd
zK3Egr^ABmWyO|z#_p~#;J@er|59_$hM5li^NqB(9<yHLpycsJyM2)^b)))Pl3ECZI
z>B`Er1~IfTH-u0fM$}_6B(t-C#iC~YdOnZxdtJ0LUp<nrokYyyA=+a*V4J`@Ol+BU
zzQ8gZF}?~>u1=!AA|`#!HHGuMW^P_)yfH0>!6sV_V1nNg(WO7<YMRH3x9^Z%NymD1
zrwZ-0HBt-guKEHqmL%;=jJWi>q**_^WI62p8Srh?`W)mO@U(EtjUa;lxpS{>k5-)7
zl-#XD6D87da>=rXGQcCicB}=R*vkm1_)9(9k3OUTCVkWO(MvV1>ddot!cu2ch`KVM
zc)E4>pO<krvep1(@lH$(<8982NxLqA2Dd1okWk6Uy?R}+QnI!*T%nf=L%4R&UT$Z8
z{9yADH~2v8wW8E&?<^&56X@Us_3mks2<X8sxW3_vU)%lqKa*Oj^sPpXPHu_wuEK0|
zGc3qpjQ?am2tWrZZz4J|GYJGKdrs;Aj?oP+vMBC=I9rwyjdBE-W>!@fs8y59IBJV=
zfw-Vw=|li7VDBS?g9#r9Z6XP@r-<l?_jS<W9=}8_!570#4HOJ3RyS(5{S8prhhz^)
zMEtbH_KpJT)P91SNYg5hjGq-oiPZbEpx7ia83d;KW?luSuLJeqE#Hx;OBK_WY)<I$
zEXl)wP1hk|L+`}P^XybY#BpjtlJVigKK~c{F%S4+!K{QHlss)^qdOUl^D%=au4A=x
zH|JW0qhkh9a(yQ^n16RuiKd%kCff$Zc7cbF7+%*fB~yjrqzeDa$@42#sy~@SzIo{v
zg(S8lihz_O$>V5>!#8GR&UyO>Y{&AV;4F}<|FDNrLQ0Hr!sJZ6ut(^~SpD8!&`F)7
zlJQ4@)^OQd{%#`!<=vj;1FBw%Rc~0pxRF4Di=&h5j0{mJPh`%jiJ51+D@`v$h<Co<
z>A9XN`(_-!NS}O@6=dt!JP~NenOj9n*#IC;160lrSjAGjz^R#K8>-p_Ybb|_3Y84B
z@C*YzrY4g!TStaybBnoxm=gA<(rG8=18l9(J74fe>A2}@Gnry+=;v>|oeu72JJ&%$
ze$rYjT|{^RezgMAje3zkS--d!V3vDd*>%PlLk}LjgNx?R*)Mcq6EIogN7X|{By^Ro
zxmCyXo?DW=<S7N)T8o%(genca4)8dd#$#@iCO-$@&{2FUf@u@Z`&%7PsQ;w_VdG3g
zN7mPLQ&jEN3Lbll4a(VCnL-_g?kJP`9;D+B>Fc$0G}O<ckC4t(Dx8z!D2=AmM=-sT
zg%@cqiy;XxHEy;w49n7rNOGkNttEXN?2m)P(QsLnU;k#%`F}P%jCU}8LMV(%s15+*
zJRtGJET*r@cu@tv|HB(HmC$s15=wV0jwh`}_mhEg=y?Mx<0bH1R#oyOM{1Cy?Q$m#
zF=)F>;auA%$Y7zI2WK_zVAkwES2rB=3o_TG`A4Ea6^0r2?GDQDy-`?i@06*weS4Il
zV?Wz4^Rml-X&Uv@=SH;V@vft<2vEQ?>g$ccJ%zG{IOX;UQr1Zi+TLfZb<cFFLASl;
zZjtTYkQVV}<Wqwg6X+zM%pFPzi8PO=7+z#$zoBOst#4&6O4Pdh)%aViQSqiUk(#hM
zzm3rqDKH57EQ=L`W8B7>1^52eCG%DI%l0UVg88#aQ@)i(Nv$UP+e++sn4)kW-+EY{
zP6slZjJyAce>DwcE+m@Y8#zP$@3_V^J2@7N#Z1apts{$e!iT94Zo=FQ*dvzQROkRK
z%BnXwLngC4DjZ}zqpARx@@re^Rp_*0ay*Zh0Eo)#AXN71Zvr*MO~zKC`?dHMTItOz
zHXq2R6IM&lT9a)%Dr5RByM+tWHmRPd8SE(ZJRY&y7z=JLcO<4Ja{!$(VXF7E`8I{;
zadmR1)$JlHM&**&(A4`W^ma(8UX*P7kb|)Ixzk-3Sq}Bn1cDJZ=yquhc&j!p9InHi
zD77)aklZZ<RuLhEUc1&!vlw*=G!74MT2EL7y;@?STG+6yPnXIujC(eeOM9I-+;^)}
zFco=_zy=`;N-3XMlYH4Mzz(01=mF~F!ohQ8#-l_lC?JqEC~dqP3#?}|;br%)HxOP#
zRr;Y0Ua9U86RyI@$2p8S@&daAFS~=7P}?<UHjh+Uv#diGsCG~0jb{RK&h1mnyF)WV
z7YT|1nJ_dr{8>uP?g^qeXoXj!v(xv$adJY7za#5N{PUnyVd^QB3FUdi>Zx94rU`30
zUFhNti)uh8sjA4?_B_dbK)Uc)G^g%0?`9`O13Kd`b2$>&9r1JTE4K|swDRNMOov}4
zA_P0FN|I~QrZnN&@xZW_y-XFJ%A#Aa^bTC6dWtnOh1Vg{JwA*_IVN`M-SjET&`w;2
zeud~B;Cl-f;v2y|v!e1)l?^MZQ<S}aM1;2Bz@I;H4y2E?&SX=Q6q6cmSsoo_{QFgf
zp&c~g@!u5Y>QKRbVc*i7qK4S_ALcsS=EfyOVL#9UJW;0$h5z-d3^A&!m&fKZw4==6
zaxmczW?X};YE4}H!%wyYG8jX?Kj(P{WHn5aImCB6P=B~l`R*}pGHc(ZMT=py?A!ys
zV~zU0GCW;ofU`&zrRHVO?PNF~!f@U}v_HF9KAJ3b0*kxI`m{3poKw3NpoMRwrc!ax
zAA2Wh0PF0SA5Wg8?nP3LtqQYG%bL@f(x%6Kd<4`ZHVSvNR6<$C4VraEULZ`dby-xx
z2g>?YZHqO;)7~3RF_27oZ~%Z)NmyGK2*1PNbA64FDDYHfa=zkv1-vQ>u5N_j44|rP
z@fJD&bez}_%bcR)iw(T6BT+tcOj@v!$40!e9f()ub1^W~-hnsO)ZOL8QijcIDViSZ
zGZe{-Ie0ZW@kY@zHd*vogb|J~RN*oan4KA}%5$Tc<Jgv%q8!|UW%W}<^EDNA>nZq4
zeeepI35@2^fU6ga(~9h@Wk-7Pa)?)U8fW}QsUx<#^I{}Mt(?m_Zvw2=%g19<x-X-q
zs%U3gY(aGu%+wj0e&|S_w}a|f6INFsWkE_3Et3suVxlTgm3Yjw6Ls=U$M}mr`xW(h
z&i7kHcFgn=wsjCIchgfxy-v^W9dwH9?X0wKnTyC+{11Ak4fgK-P+NE{4u7vIZI%Tv
z+X3}w#1vGy({E2wP3qL|>AqT*IP(?$u2@MRy44FX)j`jbif`3WxJLDlam1YzdMLqY
z5=SWJt(>}nl_Md(UvuU+0&WVXe+5H1UGjf<f``r30eSs%?LgoRIqOTBZ|=?PXAL4Y
z3{S{NCzPCgY=3K!8$Ql9UGYqmX82yIf;e5wA_tg)zexq25zI7-HlU7Uy38M>gTo;8
z4E?k<#sySmvW(<lzD8T#sCCf|s26(Y7k8}>qR+UcFAsN)HtSKuT+_zfye}*_%+2$e
z>XS>4^7ifR|9EU>dv@Z1sG~LGbS!a{i`^D<s-D+yf>lt_#>=@@wsw<fPkX#NxmQyD
zu6mhq0r)f77xV}pbwDm<H>6-9(M}x&tjNi0m+%)p^4p!+s(Z5ADQqWoHXQ>qNIwK1
zPv}cSyB4Qy%t7{<lI&C+hFmRxROR{&;{awBw8aozfpkaZ<}n9hD!Fm)?NUzj4x)#9
z2Q1E-#@!ppIJWVRJr>|XJfPWP2G!mvo$F7QpbsXMJ?#jaFK0G?UuCC0p%I)D`^U-d
z1KRr*+G`eq4=Y~e)EPjVvSVYq#QK_QrQ$&x5~%2^5)mVYzq!@6tA<;4U$7yDCneL_
zojXD?<aM&7Ti2gr>~*|<e0yjY_bql9mvseADoH&3edo5DjD$?%Z0Qt-Jq#{H<g=o!
zs+jnXE(vIoPv&<#wGMMd<GQuo`;Ux7#H?w6C9B1m4hdbw17uhI*D!7W(X>lzw-9>h
z$JDx6IizP_$aFO#_&Z;u7OTKueGpNiQUQ=@I?*(&4}+lIs&L2^ci@<0=ab_mlzR}h
z;!v-g$akn@&b{+J{+jp5GIW&L<dM2oXE=8lFxj3@J{E_n@eq|mV$SXux25g1_AcWd
zn}w?dAOF?1+Yax@p!I6YTw%+lmD|Rlg}tVYDEF2xT0fvTeZ~_jz|nLh=ZfTd7_F*z
zsyxAVjKwY`&pClc9RVm2QIaJ#=>a=T<jKiwA1z0DdZFqiL7Bw_5Zu}DL;|7sdZ;Qi
zw=wZK)UeRtw8xT<Id|UOvM-0oFTfTxA=7=3^dk3p&Vx)Dvuw2Yx=ug}!vxPq{8%d2
z8${6Ds`(JfgWR}LqlYFZtMd|h$b2*^4f)M)KrnA-?ZJBJsc9!_zv^nlZ(OdPTC4rT
z8YfH7WLUGelCQnLOh=7ZU0l)1I``B+j0){#B_Bxuk}}>#7l<AoPq}FyYHW2%(kH`q
zEpq_Kqy`ByN$Z3yoUVp3MuWGSC<U$>IYn_*Z5j~;e6~gV+`RA)mY_QvGfBoX6K31+
z4`Ov!1S-7@sb)cftwVIu`U79{$5O5sMe8l{IjZ<mKgkJ9Xc7oJNyYpLEy-+_Qj&Do
zg~LD#%MuC0i`un6dm!<jPvyrYGaf;|mXQgLPQMo&id}I+ET~I^6$P2v5HOLNf{qYZ
z$_K88t!l2hM?#v*4S~*$jM6EEDt^ocR^3L}G23JCr(}F{Dn?-%X6Dd?dVZ^3jld3g
z9a{s`1t1}>FFqdXb;Wq!zT#g%)FsJD+RU|GMo4J<&{9^-`wcc4Qx9%7m~xuLaCR?D
zDX{2jXg#UaXD=KA5oxEl8j+a#ZnxYPx~*i^=0rXxU}EwtfOAyN-wH#Ac;ddhwo3ht
z!uo+q1&rEMt$|S71Rkk$uuJtwiNjUr5;dbQH;JI+9i_#ky9~Ifo4p<!FciL@F))fU
zy_n)AL*QcU1kB^>?xoZj)yzaxc`z0$!`&~mtukm@fMYJXNbo^_yaAT1mQI1RpcrB9
zsXS3<=BV;72}zvs3=gz_VFu85Z?auGeomWWzV&a9eQw)Og0+$o1hJHt1tY2W*aWo$
zWsbQgj|xCH+Dee1$p`UDYLQ9QKj*~@Xe13DS<ISWT9(`D7shQDB@M!!K`w(LEqIOi
z5nk<>QYJ1Jb#>CqIQ$rk8J1ldd=hHTr52g3PAn?g>5pq!T~Qmdr_8XdJ18=-cZ$q1
z5-YcbotyKej>guQ@JeSoJb+-hfYrg+NH-KXStZ=~LPApyoY!*xD<j)QfD#U{L{^#>
z9bgT7oQ33U)z_eaz;Xde+&8XJ0zm;9YN;axbL+{gX;b@>pur_q?#+HMN^U?7N`*<W
zvhIaA${_B@r3I!HO+O}6!D#r{stfC*@VbviP%3tG|GYAMZQrB+%x*c1HTAl@`L9sg
z&iDX=^KyD0Cr#9-VPF+GE$|#tR;8!yZ-H^WjWE(Uh9%X_?2iXBgctCWUGlAdcNWm?
zShU+Yr_sc*!BmmU=GtQ3RLrX1vPC!jbuqWf?k0Bw;;q|5x5t6`@<!23%;Ds=0x*mg
zLZFf|W3FJt*tN@k2?e-4HSrFXRr&_eqbZ{4<J5mo@pq5K*F)to`l@hZ%&MqwUsVB*
zt=TT<&uodKfE_p3iJrjT?YuUwBmnZ#<dAG^htxNN?kmiI%lXMCYyVT|)w5`}&0HW<
zqB;(()<OY%Q$Jd@o`lTeEMLxRR6tEC76e>qYp&w8|2sZ3%9NKJsJ7-YE>+@WYX>N;
z_HqoAe?SG$8<H1)f#E|#`CwLeYsRqJ@W)j65_~;;GS!hCB@PIC$eKJExx=I5NTs@y
z|Gyq38GTux+T>Tucj`M6w6LC)U_kGb!k<Pm3VR$hu!Od^_|kT<UDA%LMYe*Jkdu`Z
zO4u=tp*v?}_JhNv^gy;S*sq__lnNEdA4^R`7qE)agtA#Ll$RfES)gvPf~$;nJKzgV
zq!RBz088|n#Uefazb@8%xh>GmD(!C~SxUXnXTeG0TjoL^%K3}L*qiN16O*J<WIUl+
zgHXgrtoU(I-4lvJAv)z{&vyt=d4^hs_AVJD0Wi5c%GfNfJNBm})~MNZ!AT{;eBCf>
z0Ib#p!m<WUz<>1~QN!UD%S=I=E^pEa$ho~0QbJP`9RfD&?Zo5{j*YeDZvvc$ET5j{
zK^+Roc^{+9FYwUK!a|aCqSFiWSbHI?iq|m=I;S9B45Z?Jcro<8Wpg%g5!_M&M(ia6
zteo*xqhuWXpk!3;9KU`|?5(xQ^=asqkFv<8q~o%?@Lt7d!i9S=3r|ZgszxKcF(3++
zwsAeZOb64Stzs^W06RNm7Fb?a?R%P+QGt=DtR>df4FdZ8uw_0qu52@k5`A&Bq=J@9
z72ahZN`tTWq*)w%e*(%-=p@l8*sG~A#1Ly63z(i~foulwFL`L(iYG^OHpU$yd?leN
zU9!g;j*dvXs$M!@gjd~bs=*SFxeSL$&n22l5{`DfcQDE|Y_xd_M5Bxmo}e1NjLHwm
zdX-QbB?MRvsy;ulq9*iZn03NgyLzUbX<NMfjA6^o15gQeDKTcr|M61mH-w<9pziH6
zn$5S4bGB?K70er$%Qs7PgJZ|q0WC8Vx{*QV6!KRcQ4ft@gU}B4S@0&a-}N8JftqW}
zi)TV$e?+0bVSwv_$%%1txo>Y-C~hHA{~>xeN&MRsd!qU2kx`CzT93N&@}V&t7xtrN
z47K4AWC1?e9z;Q@g<b_*9`tw*bN+xc*j~QjqS@_{i@i>e^INh65Cp&>F5;X1XQ&?1
zMA3!7;7bqqSDhD~W@1*Ry4ScqHbgT<V=U2CdC@=pGqXX*F3?t8s-6H+#bVL!lRfvI
zX*fK*#wb!&e|z_cZF0YRpe1S$l&Jx(HNTjmxseCJ-2pkUJ1MTw%~5{1f)j<0F#WIz
z40bLh7`7ZMGf}7Q7ZYvRdc>kxDsz*zRYj&Uc+GAn*m~V)A^nkNydYz(ed;|JTmvtE
ztS%yQ1D+BOO|xY{^|CS>fdNs#1ORt3v~O^it&b>?Et^c#>0@KbV&9E9crb;Ek;CWe
zPGgz@2awV-|DmJVbn;*BdVYrAXFl;1Ts7>=zKMZp>}=g{H(&KR@@a9-Xl`TaWM1R~
zSQ@V6fMOxCHRDs}!t@{V*p4xT)06ye#!)!gbLY>dLeykb#qzGUXu`f?Vs+XA*Fg6}
z90Zv5?OIl7LNEP1cehOse}Absc9Kw*qBF?;XI#v#-ED@~6MSXa)$(c?q5p<u4o=Ij
zgMDfCj3w`5mSnwNi3(xv;wPq7Ol{9bKm!ndY;P)3wgY*8lZ02|o-bgOn9%~S-Ds{;
z=|t};NYO81#q#QWNK|G<D?cnr#<sF?lH>=$8op0`z^n*imvl(Gwip3*=^#)jGK<gJ
z{xZ4Z!-~HB%OXH@qlLq_lPZk0Al261Xk0O`X3ZO3+p3!=-Sv4Stx+v@jfK_1xmXJ`
zPzbPrR|8kga>ORr6Cr1~J+%uxhoJ?5rXMg0MVmtOMu+rn&5$pW849Vhhm8)5=4m$=
zSOEx|1=6!}E`|(=b9lEyRJ#{h5E<^xSrYuFx8kZ#Y(seu+jm^likK{uepkp^on6nJ
zT0LIq8wxRVE)uNvrm(cs0!Oli&X}l5C5J0Bkh`;_zd1~V5N!Ge;{-}%&Ac4Cq?yD4
z6ChOtzfAo^&mbsGGVB0$P;$DI@Aq1S(cG$ms%OuG_gvEVW3aD1;!!FfxM?4=tyu8L
zrD!ID2XBp=$|j#-VSravx<I~?ywi{FuFT9Uh0dv(X)W(XqptKQ5vZHNKpuGJx!VRc
zZz?*P@=d-;z{8s+vX*wa1qVZT0iU89_GYcXM$bqQIfx}c4h|z<+pRkTk!GvL{Eglg
zYl|cklz|BQ5U&27AvM$dG%~qW-IP`|2LrW<M46o?-tw?EPQ#=DOJ#28ip^D$w786P
zb>Z{o5*ThhT3aU@h&HSagQx7ZFUtGVQp`f>`n5e7Xu`zIJDc_8QpMoI_fj37Uy>Y;
zM7^inJ2~4D3d8NR?U(=_PIH*Aa96n_6&yiUQQVLnr4jsKazXm?jvOnrTgbfs6&BAX
z8uibWjkCHoFDlDC50_JSfRYt0YL#<{3y=}J%}jzLz%tR=Ul3Q1TCF<wLs<5<;qJLV
zGI-fnE4)RiwZ!F1PuP)mN3S-ITH@1VTVu4b+M_}K_fhY<R`4LhQbrGw-{acacU$f?
z=jqg?JHr1V%0=t>lATDt!cfhYhCU88ZDK)t&AXG<G)V8%VfNj<ABwdn(+JN+k$gM1
z7R(z-?DHnqP;S(FVEO(Rv`KXNG!G-5#`)7IeZAI3ghWEET~rCM0adyf#I_E~?bN?^
zoOV2Gq_W@T?_&^SRHslN!4FfG5X~pg{LhY{p1w*Yb-{RNcz;NWa|}g4tiUD<IGOnd
z)+HC8n1vQMEYy}61UqEvBFCKVCK})Gxm7qn|Dvuc3})C~MH=lVi>~jsm3DlprdKa4
zkRWrY!!hm7PL`ZHPx!Pw9<<`w?viat1~6{o2^u;jqf@unq(VN21TUAfPy{KuF_5Bk
zRGuEHA)q!R&Ea{$7mE~wif;BtG~}ujilrVlg*G?L?U!k$gJN*)&#P1V*CW!)La-WK
z0JDq*r4;U6q8KojqaxCs!s=Kd9wK#XKG7(*x~{VTg4<`mXrVlaw?JAP;F|B1`f4+E
ziBm!Vtr4`*ktI`BxaR3(CzSyePT4mY8}PP?#xqXeeICN8ioh>XOrA#6zgn^)5pCp<
zU{>KpmsH##<g4`-1F8#dXn65O51|g}Pi`1*39#~*;70d^BuFjC{!aH3ipp4<f#%_4
zvy_7SHvFGR&+kv7AF}b__*k0^gBHW*suARBx-g%iP`K6Qps^<W&I?`36OkW_v&9#8
zRvi>QS^os-d2wLeS?Hh4D6mYZeM1s?D&~Z~tZW(|LV`@RGlz-SFMeLJvw_V%IpD{>
zQFXOVzo7hS8X7%&jyI)8QC*V+{IA={u`D(ysT&9<htPcUyM1hq0AE#{gG9j7P}z`W
zy}UiwsoJ&?_;%yu_faD+_54dW;>8dXmi)TDUQS*9YQNyc(=$wfrlN+C;D2n8@mF~N
znfZ+=I`^OMR9SFinl?k6OO>U{MA|vMM>C6Sd-tgg86M;VC&9LQl33{Dp=uE|y52M+
zH_s9s{$@y8YyU2u@ut@=t>gQK!l7h3?R(JBU;%y6h)};p`(BAqJ2FK7Pbgu1#3Ng(
z3~)+GcZUvEj#EqC2JOVUw(mCeuc02Ry*BijD?e?#7hfD<?;C+ajx$aZCC6#0oA1f<
zP7y?^hXm3#MXHKn)h`_z-LNg7uM~Ea>A5%Au#dgC(5b?95nv%W@e3yHiry9!&|5k}
zeml(bUr;|hZfa+t>C!8?XtRevZ1ABfr*ddv-5rOZkaM$o_v|q8-Nh2mI=5_Yux4Ky
zMIyk9&u%D)Esmg_1mB4ox%rSAQf$AZ0H^bA4<u&Hwydu+_z%`vFc=(%oV*s9TT;?x
z3hV^P!Fu|+`E&FVaY~5%w0i6?r!A@r?hhW7SPs9U1QG~NrAjaMqs)gS^VQ6R`=>n9
z=^N|beLLYIVj|Uo<!!s22to*5i8dS4cv9CFe7LqiG{xLg99x2W3p%T<{g76e=V3Fm
zxTt<Tyv<ToMI^eD0)lG8RwBx?qo`M$nSobzBT5wIyH_lEm<Y^Nq&EILA{aF8!_Vf!
z2igcZhiIJM0wGRmhQ8k~chN-^4K1H=W_0%kS*4@@O<R8+qEc)|i6I{h1?Z*K*n(mw
z)gqI;KKT`hh*O~8TWOZVO+q4xi6g&W|0r2#pwB&SLu*qhp-^dfmp@k{j>^s|?htvn
zWi#x)T%OmP0zPi8`}mzb(R}S5A<=EXBy<av3ys@h5zpipA_oSV_*N`q11iDtUc@aM
zIo_6ya8?XpN*<Y<UiW>69R)3p?at{31s=yTEndhtZS4%fRtw@eQXTV2afT5u?VDJ=
z&$o?Gpf#G!-qMTk@cFb6hEJv*;&zK@k@@$ytmj>~dbAP;l|>1yN`OI*ITVryGs!&Z
z6d)Qhv1Ku&b21T`ornf;1|N#>+vTG%RD)|f;lXKc;-lqkE7}9(6LA*1)$<g^1QcD)
zcyM@8e}GyXqqDYhYg$3E>Wq#j3<}R~YSL+68KWRZ@-s;DIkAK1?E7;?IR$QW&ettC
zm2tEJ>XjcJ3;yb$3N=_-F+86YN!+=-@gO3{bf7Y`9H7rYXx6-;pWLK2TY=Q(ZSj^p
zCx#|9K-6MWF<CUb-gc$H(UxMDnwc|<<hW8!_$cvC6kxTeD7|)~-peHKn_>RYK8Mpj
zW=nZ<S2#-0aMTILhd?%eME}%7c+4xd<_xy@7><*UhdwjZsni@GBJ;8x*uE(;!*IvG
zTPw}(AL{%q)SFK+5KXY+#4x;9`pn|?G~sAw#-or1H};G+#j8!;CoyM+W}U>cY#cYx
za(<H@AFSYa#76M;ghJB}AL{mZRtM>E;n9k0HX}Iab|1ydwXyO;_K$S|(dzy_bX|&t
zVFCy1p1t1I8lq>kSd*|>R(ShEDG{rilsJ1ZFC1vZdzF`NY5c}Zgs&8n#|5H-<9GDS
zGFCci=o!WUM7^q9Nq--spyAxv6wVP%R$?E>8B2$sbu7+Cqv;L{Z!FX4qu*zK?l1U*
zy*Dg)Pt2eCy69Cd2a9WjL?nae(8R`dQ}G+$3C5R>flu~tDrW}!sZ?tm{ab!Ag?bzT
zu@N8fHITh2h?iJQ*YFKjMz$hXe0s*z#9J6?MPk2N#{iP!2;F;|gMIRqD}UqflA8gV
zc5f1alq@ASOdKY%_Y%Cb=NW##h_KXqfGTQE7B19-_K+$@-J07>Uj%~-CYiRiHo2A8
zaq;-!0-Fk#DP`9H1r7gL&nT0Tq{OxA=bjC{v}P=$?gXw=U~SPaM)PU@MH8q_T!a+{
zJdnG5J<U-&|Ml(~V)II#+A@kVvvz-^i7T&Xu4M->0|Sinst~F^7@v7#XUo5kDGCPt
z0eXa1NqDrB05(C>H5xLyWcsti)u3VVy<5N&h67Iq8Te)U?MV`zoKF9Ww3N8@yKWl-
zTu~F3R28CH>(Wn`hJ;iUqy8gSlqNyNF&ZmDg;CTECin?rG&b=*@Z&qfBHeYca^qiS
z8a=N7OBr+3sRKcyqd-NZ71dr6R)bC(^rv=Zwl}gB+G&!PH2U7N_-#-DITSEuwW=KO
z@vd=;BwG=!i3qZGc0J7-*d>Gq%jMy<cCMlBQWe>P<w{j^5Sr;1lzV#@%}>C|WUytg
z+Pj2aI6)@m0KCj?^9+RU)4hupqDe=j*q!t`p<epe>Og|5CiRS{2z&YglAo%w(`okA
zl!IvweoiRDP^CO*<|c>AHSctD5!rRthO5+-$!Zy>jpx&9^NgrJl<{8W;RkJIiE52Z
zv$a-JN;*}ESnS-GKl3ahpgJqk2AYK$%xzZB5`|<;+Y<i~=}{%{)y)#i%y-+PN(rFP
zRXXJ=@|s=7wl<suloc$VtgYJ`kk$q;et{F9K(JVnXgyhp2T;^&H5ek+^=@upqTD~3
zj2l0S*1F=3_o#4WCnuk#!TOZ)mz>D$8G)iPGI%atE*4u8y{~C>d$L<wQS!Y8a~hc4
z9x`_AZNMxuz-iTsMc^Ex2~OH_FSTT@wl*h`yQ=dEC5|0m64C@+rcXthFpLpME?;RH
z$ya1fj;4fXvlZ1j7U%DHRZ#r*Cg24Ase^PL^O;~xx}$P*hHk(b^?yBt2qZ*6-Uh3L
z;<1}g_==!F(Ibp;N3g;P=hZ*0B|yHm27!a2+$TG=%u_qV0~uW)(Sx&%WQEP&?b>+9
z9lb*;b>kUgzRc)07O|s1PXF8~v?+SmoGBDChlc)2RP6gsNGbeQ;i?B?w~2W{LwFQD
zCIMttuj#FR$F#G@gQodrMDpvezEg<3I~ATX3c&?@ngLl0152bOn+8Kr3_&9goNxUH
zk4=|6OgJezN6NG9rDa^Zxh}1<_{L7B<_0Pt>(_otaVt(pc4*p0hdzTiwI_GJ`ZHZx
zWO0-<!sg47bW@Kt$4MWg_(Npuf<@s8$wqKIWd`9|AT!yrTsr8?_v9}ot+AQm1~!NA
zk&T}!46_m8Gp_W{hV#y+j<Uc}8@Jz6MyOa_*&O$oBC4Gli$<-;l(Fbk%M|;H(y67A
zm0#@hOeOs_dr5dyBXP0!?uMni{MuodMMsD{;hk_0NG6V~<MOy>GjnW(fuVql(^|HV
zLIjB3=zB|7<<>usjVSgrNe$)|6)am!k<TY5vpe&BU%ZQSZHUnR>=+?{D48lUliF3r
zobbm&$cnX;_Mq9DF^uv)x28<NsxkOx#6I^uABdPe>e;5S;da5t>J1UGVWaUdHnV`C
z&b9p`HV`jT2d>ZrH)v3o^E?FPM1eR*?j?AaZKt=2cg6~12eu^X5R2)o^}d1rWP6Ks
zQW`zJ!|V8J!||}l8I<4%b=(JVId2`=F&)qoK|qY5q2v_E0&ExK`px${0;RbQ!x>t9
ziw_->5l7DTW@MgH70smIq{TP4vsjGdepRU8+fB8uioc)2rK!(gXIU}_xDkXPL!E}c
zSA|xS2@7EtG!>nfiO-h^ek{mS2hD*4`CJZq^rz@x@Z12!$4=H_B9Pj0fnCPbR+w3n
zp-ow;IWK_s3c4%9w}oG<$ZY3ATs9E+dTr8=<{HuM-orx6ukG-ZPHgwa7I?C9;Jt?s
zYZ#`DR<|w$W6;I<e4P~av6?4sI~$1O3oF>q+UNzw(UK<Rk17OToZXlk(o$xb3OL{-
zs6QMA6u7h~1$GbzWWxt_H*jp6hQVL5HW2@(1pfh_LIcJ^?1StCv#Y2c*j`#jaG(4Y
z584QAS|%eLWx^=Qu3&eiP*f?_kK2E<rO)^p(=S#mmQgQj1~$keqi&NSBBXh>8S<J=
zR=)zwX!^ndv~$>9aw#ftI_p=8UWrl^L*QEM4>TF?c}@O)Ago4|vbDzDNp&kNuP?N^
zKFN576A?>M*4#a*FnKi6uF-d_d;xT(sIZ>JxHPA%%d=IhFt^dWbmS~4z|Q;Efvwl%
zF%1&&-&kC2A<15Z?Xc9)svUTPby_n<G?(j4oLY0*m!;Ked3ovUIE2SC3c%ti2`$Yn
zBF_zr3ht4OD@T4_08LXOO}G^PU6l850&=%#A6yFx$W)%5$XJ;|llLNw)Nb4N$CQE=
zIiO>LkD=DdL@oN4=OmKS)Ndz4*U!))KNPMnIyUT+#oIfc!zWG)r*lad)1uPm@dc3y
zb39lKFi8;p!$NGzrImn}hlU?b2k-OkxE>&Y3S=Z+4-t^;W2P80W<=~kqG~B<V;FF&
z0`aBJJ12>>H2`r*<~$!R<Hl#K6WFdL`)p~4A-;~-7<IWBg<~gq`OaGs@i}{!kbaBN
z6rF}QMSyT<)YiAL<pSihg4Cd|MByp+l%FktK74OEb9E(%)X3GP$-5US=g|z~ZWIN<
zXbhZxPXXEMI+Am@+HeTfW_iaf^%@3nEM824a1t*ah?m#I-PtI@H~d`0xQQi;(W$kF
zt)5FAz|+R2{AJ39wP7NXEuvh~b%oXFGjsnvsvk4f?dU*qll9>f_S|w5PVO4A>+F_<
z=&TjDzo_mWK8C9>71>EkG2knH0j-qGStgW81kPdB45U56=AUoRlTGilwUI{Enh8b7
z4|@3tnncJ&xy!NXj;VoBXVfbcH}q5Glxv(Ok%yLJ#EE^5fBCBJmf1u0TmR-Uq^ek(
z>HV&Yhqby$4To2zj-xZ1z=cOfzqco8JN>J0fng`c2f$^mo9Jm6=O?DM65+j<2l!^r
z5t+mmLpBr1kBwX{0Bo0Cn#EBYiASK$2FRt0*vyO(|2vK1Xh89o8(XMl2<y-@h$n@S
zxNbiQeJUz3Yus<9V5><P3dwwVy$!Ew*ds4LS2O#*W*tS3QK&zL1A!1DewXK0QE1QT
z=@|>dMUU=tT15u2T)Z-NBbcDVHFa?Z53c*-y-$q$`8pY-po^)?kv8{(K=yz7Pqc80
z|Hot<9gOLKNIcw6Jcz~;;SDE#_Lr%Yv88ncE8&rR<1M*`K??E>A49fpp=8EvVZUOw
z(=dgJ@X%=!vMKFHO$|KtIjHk1Ov5nH@pXw-6Ux{PvEl$vz<ac3OUHn6KR>kH7)_87
zJvjs(JQ3s$r|PTw>W(XZrR;l~_emmo>4PG-*VOSTI^*ljSm($c8O79Qq*CooNr`_^
zWx8-z*$eL`O~@fCUW>J(M*HUJ6r&5#c-?o@kek0<xF0PdWyN}iyfOwdjCNNf*|a49
zh%7Kz6^Z#268$m;#z0z60HySd9QMMHwnq-am=Co2A{H$f#-HONm;qhMm7X9GOSy;_
z{w0nP7xelI4NBvhi@%y8guB3(pw^X}APyAc9ZmJm_8kk%aM<Z!Oa+}Y{W@@7Vz@T6
zriT)^5kRmRK|p6Lg49Lesp$x`T*jjyt?ES|P6-!pO>a$h_4W6ez@SqWIVnMSkiF=#
zA3*K>w_;V4ls5UYMe#K@L#Flb`}y8#O68D8X8a6SnvvEFKnbOgMtn_yGAr86+Hn@U
z%?7~lsu$=yE6mx~`s$e}Us~HyFbAk38zr^feZl=HiLjat@H0~<l0twT0rf;Zg5fib
zcJJkZSI{=36@_vwOX|gJtPhHjS5>nmK$~>^)$P!2c)VD>v~5%lE19V?OZFsi_1ktz
zQH``gIuxy+jU??GKq6Xn@DEU~WnqemtwEZ}`7fN6SUnZei2V1&9oJMX^tz>+)iBYh
znCh_(Foh(MWLe}^b>fIfjQ2>T?~rN5efhV@-P5I0&pqs>d-dP@_UI{D==REL{%NtC
zIyk-PDjJH_>HvNLFMmxRZrk>o%o`r4^u`g9mgejEs2$+75M{!0&Uhl5-9b5D;8yHM
zxaT;>^Du5MVEaww=GSm7YQOzVA!fZS+Q!5vd4&oJQ05LW8_D{?+_HM>(B<!1G6{&v
zCk;(eKZ$T}ePNo(#ZX77mB@!O=NVZh)U(|X@_wF&Ejt}s3je-DxYWbHIWyaJlVwrE
zU@n(6W>#fsqOA+5cN^12n%x~@p7n9u`h;xFhLGBo)|5TLlEK;iEjcqX(eYn~0S5PS
zeN-pva_OUjBz2&FYkX9R)KcSRz{{pedhlBrt3y=d04?Hs;|539mkA)>bp((j#W8i?
zUgZPteWo}JHWIQp*v_Q=jkRUPB)q*Li{vl~G;N=^5c`g{8L`=-oaGb5WmlEuanjr9
ztXBThUK*e~`9g6P0(KI30ce|&{KO)&|7EWn@c&rZ|NAXw(s2-OhZ~hal0Z|s>wi{E
zR(0?+SX+d?XytKTs(^~c&6P8lmATX{S9VDir|!&Jr5{SG-fK;>IgSUs(S=NtclNVD
zPn>V=8SnF~<2*)Ph5~;iOo#0%LH`DL5C!L_<S|L|k6PH%rRL@92q$Ne6wHQmK{}Dl
z6XRi0=$ktT$}0r63h-kX<(lA7o!yKeXcXwuGWpFz!b3Gp(L5}4ILtW*XfEu#{wUve
z!U1Z_SXA*H6&zvkJWiW()eULdr(+g!%WEXL2A&EYA8f#nB%}dvSiF85kK=Uq2*WvI
zGevgSD-qSd_>kewQ(+oQ0f<To;4JLl^a;?T)D_vDBHu&iKN_^=k5B^g8tGq8yZ>0u
zm458ia9zrn{`6Uj;ZW2B3k_+6hZE$rDIdVcO<-7Fb<WdmA9=c04hyc{W@Q#;w%4Do
z%HFUvwq*Ffjk4~)$4w-YofX+RYf@4<Cu9h+sF+Hv9`x}wuAYM;eQwLX$5wj_vOSKt
z_mcw;_^2}S*TsOsr_``;?rhye86H&b$vlzAKuN2rKBVONI960NJap&GiyZUo#g<d!
z){ymZR2uR-HK7&+TXA7LnJ{1+BwREAkz-F47jB&h+&`KF|2ReTu#|PFF5lG4WQ!#d
z8_%eHzl|sytY-koKE$FCobl;pni>S4p~b={{A7pK1eqvT34!PDq$X(qNFA5$F(M0{
zGN*P$cu#pw*mOn|#%<iE=AoB9HD7hW=%^x(8^FDU#8}?3xw{4!fW^`e9thsIMtOD&
zC<2@A)wJhzd6W?4^^2M=Hizs)*5!;chi|-pw07PIVd*DSjVGHKV+mT^)_p}V#QFgi
z>E{pKZ8KmSlEJ3Shv64v<E-c72(F8HJ~=@AIao{7IhmHN@b?Em<QmhqCqf%1>Vk7T
zS>|$U!*`BxRGtdHf=BnXM9f3qu+E0$c&N7^{hs4^EB$)jRogQ#U{U|*Xk6Bo`|`TA
zOUEH|RcZOzi_So^(66D*q9cI+-fm#>k{Y@65;u-X%v}ajirB==Zn0SA$$o=TgJo~R
zrGV?<#Pzd{j|(*zNNZ3b;W%uy9>&w$=<KD_SnvfD>q^1>NK1rxhPMhF7R`hlWC)g*
z=k3b@5Qi;QUwEV7r?Y@GF!vIz7;Bf-(P$vc9f<g};ed{fA|V*@@~~PG^e93gbD#)b
z7KFaW(w!7>J4bSG12Ru3PqA0}f?cIr=oyBif*i>)8S4oW{7+cB2IoqRuI?nMOU$x!
zra;=9FI7|O98ka>Ypgp?=umv|lsK0r=OIPdSBi&-HZ_;5^icNaqIcX&%_jJ6s<+g_
zZf%3q&Q`c|+okbgp*;caEBYya!rI*o;(|&(rWny`Cb29$*CP{blVS`x<cE%~+N+%L
zVQTXc&UmqKmB$8?!KSHc_Zx=|TD<qpqUN<EqeeA|V}%-8R}UZ%d4<-=;||gF*$T07
z+w6Ue2xE7u-qT?kRM(Gq&0>qjszln<Aaqq&)l1*ur{{#;BcFTt-FpCU8ydrHoN!OS
zCYnk)kb;;V-0P4|zblc{0Q(<2bS7ezFK;M#6kLp=sacGOPMe(ox4EtozVOJ7%;}<1
zFuHCKu_e-&5UHl`oY=^5RmnYKpJ4l*oowu5%)~?>sqa%T9Oc#TztB7ZQ@aM$?Omvm
z&TBUvg_m}cCMP}tq|1fFetQ77g{9X1)#oWk=X|cOB`48b`HWs@3S&l@;h@^JijaFh
zwbUj^sroY6p0emvE4*<bb8gf1Om>yP+%;V_<{*&;q_s)D_iNreeNSRYX8fqnAiqKj
znn%JcrZZ_a&mZI5d8q}Uq#8CwV_fxd748@Rt^diFNH^*IuHyF{ATS@`FR->JsP>WD
zl0acI62I;Co$2q@Ik{f5*C+(8%RD61vSUzn@IyqjnvXp)M&!8O`&x3NsVr7EW1S9R
z42s#ehPP^1KdcEu#aJ`QZ3OV-_f}UN5*;0Y<69AO6C6E7+ihJ;m#^4}U3!fQ`1#oU
zj4T(fA{_;bl%>YgN6Zh-ceQ(EKdULt<&p<8xw{v`FQNHEI0gcCk%SN4YMtrgxC?AF
zdM}peuu!U5^O5q5x!7Xg^4<KK0cBuCx0)oBYW-a+>0!tdGK46uKlwJdhT#e{d!J0Y
zH=)qEP9FXR@XHM^oxHHe`l#H>e<|KPl|Zes%xs>7lmGh#&y<SR_;lE6<c3rb8Jo=r
zN7kr`r);+SAtQXL0TVpq@1@36;yX_fhIO`C!oVGKZK5MtRC8*F)u_{5KqBgGv~C6H
zQS%fU-CqFe$X^)!YH{?j_Bw@Ojrj3BF*a*9_@*ti5pRiHQ8HW$%V%RU4?>@f6V`gs
z7fvy$T>nN7>d&w{-QxsHE1lDG*VA<U8(-=iTus_54%h@C%mLbP0A|Q!#6Y`u4RmyV
zjCC2`N$f9-ZBK+z6jhEy;=$lFYO34Y1eC7s;0d3z?Snwsi*ccAaA>)ZJd_@TSfXRy
z*9E?WK>r)Kix4Rns4Tp~uAomci_DVQGQx<Hb``ug+I2G4MDO|!9=|m6;Gx9Z_oDdj
zw0d?E(v?ZC|D7m9>x&WFIY}<ZOb&~l;PP1ZeJwS!2$c&7A7nIb47$!#5qqdlk%5k@
z{sXsGM0=MOE|30<y2N*}7=+?PmmCZQVN_}De7ciQR&TBIV7*{~>kyTa4{7Z4M#Wu3
z`A8@YiV6}{VhLFJtBSxoKi*4Vrv!C1S!S=SEKS9clk77R_u2X8`uX#G0M4t&cjJ%8
zN<kOO3CZlCU2hN1h43P6jWZDh7Uqp?5@^3(Us8#G0_1L1Z?LI=+fG>vBd?UyyKlov
zl%kK&=Dsm#Rx<L_iF_+RcEN9%bVJX}hiWZ@54e}*yeR$JwojsBx&hp-{gTBI(z#S#
z;82*tjeX>3Krb9?LXnRk4;kDL1zBXikl$S!MzrMGZxN-6w=+i!;5lR;htza_lf%h=
zqRmnN$Gs=y;I&`pdz9KQzHYDRK~(DCl^q_uDl_@8gIVl}8C=?eSlnBN)h`f<J-fSk
z#waavLJmKb`5ppUV_r6}tcV`KH%F?V$b$QNkWyGQbf}PlXyI;`)Kv1w1?=QC4<3$C
z_jk<%*U<;0e{7X>_U7u3;vLrKJ;>>7XH@9cy9KU=1bS&^`!4L$SXDnIeD;v9T@-~z
zcnZ-h4E!(DEAeJMw6it{k1rU}B3Ab16B62m!Q}B~ECGZseg(RsDFr-(IH$sOpSn%b
zGE^Kbp0jLXAH0T@;{Bs-d-PnyZwdMi(&N7d)+|Jr)Dq+t6LbX8tf+E=W%HNS#2vaB
z(cfzj^||kNv5)D$@2Yo~zO}|)sZdQtW$^E8|Hj}!M9gTY8IQ}(7F0oKXpi4%bHE;m
zaJNHSYR=DZ_cs+&3DFu-Z8`Ej7;-Emw>CRM(||@-yzIwgdXojmH%Q%f;1fgJ|7p^u
zjN&H7AD(8uXom_`d`IRx=&IG5uX;w-T$0jPe)!?^nOC%(x8$9w!kO8S$-mDPXZaQb
z<FaI&CcIGsBE#2UG*aU=Y1{5kNvu!SjD;CA@<y{rE8p_t6_|WowDZQ88GTy(bJ5fW
zZ{fCtQ=1PaBlw3@!+6^cCO{!C#l-iyT%4a~5dJU#H9*S06h{SbpZ`An34U5==7i(A
z9~Ma1VxlH<cmq|A9;(2PXB+(7d0n^t(B}C6!%dpDcgqFM%@H?Og~-yw@fAl%4HPbD
zqe8VeQ+R|BwN~WElR8fFH`_{Z(eU=NVf@rVNi%YiqGxgiG@CBXO8uJO=;&51Z!T!y
zYi-fm#0KZGutO|2F4=QWhQ1?0(?(l8(BWN7{0Y!)MhVOh{oB3$;`1Lt^NNXR%RrtC
zQOvfXDy6Un!rx2Qq$36G1Rfxyb_j&t?|Nm(R&F<w8qZRj9PUETA4nzt0;yYXJM-Sn
zAe3Cajc+8w{;Z{{#0GDvU^c%U@A*SzD*rp-XCS2Q$wyp;K#XV=CN0~UnQlIS<ui2f
z0!!0pH`I~^^Y>cD6l^Om<F5~33uq90L`19?i9J{JZmdV8$$zsdk6}{dnmB)iZqHGN
zD!UO>BHH>%1JVgV8rvxg&_fB}PT^r(t3Cq!!PV3Fz<^`nQd(I>h*JYR{#JFp)&20o
zwuB$IzIN>NuBl>Wr1XC?Y(G9W9>=W1*nxn)V6{O=Zq!Y;$=omK?{{Xl&?-(uj7ciS
z{%8Kovk*CjEt#VoG=u%ITLFb|_1=4aVnFf4J5g4}VdZ<iwh1g8B+yX7LIrXpdHPeh
zr3)cx7HC?A=6%4^c=uC)H|>wXezV6pc|twzOA8*w*=OV&A~*@#3L7lK$X9wG)b@oJ
zs+`7ZR?^sr*J564)1GB{_D5GZ1Qwylq)myu?PUtzoY;u?>8P`5c-#m>u8Qs5YhYhy
zy@t>~xO?kyJOdA3mC9zY7%9(<wt6NNv(A57xImJZ_N_$vgZc^G2S;GmlWx>1te2R{
z>*vph55uzfAr>#*-XO2uGSgGfvJ_IucafH4Ak}ofK->+p69c%geG9nWs;#e34*tUi
z3|zWL5A$`bD*E<MJ+UEYgO`gNrF%1z?vapfn~T=vSL5P>aoo&2TJI3>9<2&Lle+0a
z+c_No1$~Vm&&T6>YqpgVYIH1(Gu(fDUij7g$l>~&=Dr<S@>Qr}tWp@@cR%p^F^y%`
z_Q3np^{}YvCQeE{;fyAN<`ej{O$7<O6=KJLsF73A)>?NQ8p_~7_{ND)c#``iqKqTT
zLn?#!S5BK4a9^)XR>pP6#X>!hCa;?Pb<iAg-}Ev9FYfAMLv<=LzX|pmgUj9uc@VB)
z>p#kb7A24EOk^03KB10)tQd(nJi_%`VxRk?+IrN<=V<dZ--o{x4XsU^g#F^ViF<B(
zKu&v$fzy}o!PtmbYbOWmmA+7WjQBa^pE%;j0m?|6U`cE93UyxyEi#{uBg7ycp9!!E
z<uD`h*7Tq3_C9r$%u#J5o)i#V<N^_WvAzYLN}-U(^xE0Lf9O;Jd<z&DEKo{tgJSra
zj$<SByZk&ZF*mi??xNALbm!wlVdp8mwlhtR1XV;Rl*DfdAhZ?lCie#nIXV--ut89$
zZdmhA=DeQWnjl5s%;P~kX-qzw!*d5eFto;<3Ji$idhZ#XKe@<7l@}#_-tfy?4u92=
zjIiijf`H?cEZv0_$r-*@X7BwX#XtRJe6zxL!U9_DKdyN>DLlFARziRD@w-NKdxU)!
z`m5kMt1QJ`Kf)QOwYKlEdVP7?EmKWoQUUNJo?v`r{#V4i7|9nIzJj1{VEj3L27K*<
z*CY+^vb;B3d-(#KyN2xng!?{4;$5~AvsM2G`dhwUxb3B=rJnJDUoCh3=MMxIL!ZdN
z(cO<$jZTrR07H(Un-yuz#^UUyK+}dEg#<k<8q|jL&gGL?#^n|p6+=jQ=$q29t$nI=
z(wlMnXZnT8s5OqnPeYsyU%Gx}#gZgtov1chY&E9Nm&<T;4dXm(RwVp<5X4gTpGtRp
zl1IiMMxI)rFnH?a_N)V!V82U>2w%7OdY&3c2+K9o=-Z7i?IsCZ1|uKvlL%x%fYW36
zl87VeUp53aOv$zOrz|6cO#xTpr6r{qtxpX64kjtE`75JLbeIWhE)Qx-Omn@uFgB-6
zY}#*FMME~pOM8LFE5XvFi^gUJ^+xi?00!K3LK;uuMS0E~fwnj%=5%8YuN*p|c@SY=
z7McLjd8)4|Vgb4&Rfrd_lf==~uQ4ri7%QAiwm+)p*f!B#EN@k|i~T|8;YPKPVLh$%
z)+tG(@N-WnjcRFlA>KjNxH^2;Ygy6><%0V&Fg!-8IPBn!kW!lx!m0-f)#zBH^g%2u
z2SAbJvZoE0NRUaeEW=?)Fs_dr3rOH?3Q1AfAz$edltu&$4}6yCgo2*$<~orlxT_c-
z?Ood(#DRKC&Ux3KnA0_#q)-|WQufnLF9p-|R<Das>RhX|-K1@hSxtQ4p}-%xKRqPR
zlmmw>d4;#WcF~>NWV)&V0`{hALjXJDO@H1W2zQFY?{fAwypJJ0(2}_^Rj<Mjbkbfo
zR`v0cr&(hYGTHA=`;izEOsK0M<2FsB-S)dREL!u0zzgI>-<3Dt7^=~Tv=DOC;ACwD
zDe-boUw|Z4XnD>8`)?LF(0n1L*6%Ex`{zCywl(<1hw1*Ltlcx<tE3Zmz3205A5d_m
zI`$S<YJ9#tmMs<`iG2D5>^sSWtZ=B7U1mKz-`V=qq&sTbjGavy+Ui(-xa8yFD!5a{
z8gmI4Uh)xML`gVYk2}-XBOs?_j)5Xw^X`YY5hZDBnWAB#TCe67IQ!-d(q;A!xd7t+
zSwCL$?>CjNU5iCybxl7Hyw7|cn1EBbr?L!lJb~@Y(R8{Cd?5?Gtzdxnl_*@ucl}~y
zMh`)Tc>VC*iSi91w!lE(>AL-2N~B>bg6!%;9G@UdU)OOXA)fR?jlEvxucYdTjq=%>
zU;W{txV6mEK#pCILcpYrR;HmRCUT-B^=LHXTj3I1A_53SF7|7#l7bLp&N#4N7hmoU
zq|p1{u<`heS+^6#|AMXv5(uM1rR;?jNVP2Sw!83#bC;wpQka?&JQx5^ECdP>-bcr|
zyG9xUkf?ki%kEG{?M8rF*e;-=_9=Nmnk9@w{ks?&?Wh!qjKFN^aRniU_wM;zN{1?Z
zbk;A}l=a0i(8f)=;ofCfO3udwmYBTCY@SL{Vlr~SxrR3WRU`8DV637?h<!{{yj%B#
z*K)ARkYT2P%Z5RHZoedi`G5}tD#>ikeu3LuB}{1KP%O=jF#~s;Y7IyqZE}iDp)O3?
z3}C2hv2R5ru0)w2f;jTc@8LeK5Nwo0`_VKk4;Ki^E?{d-Fv#cB1vM*}PGlo1D(Zeh
z&c|h3=B;}@A|d3<x?HPYn)-gTuQ^eTI{|yfA>E}?jRAB};iHMqD8V?%)^7>}9E~x)
zUpp?J^rl-<fBO_`G*j@+QE|~S(qxa*UB9}jDj37qVLb}wC-Y+^!iJ|O`$~H)uo(!1
z-|;{R<wN!E*Z`ZG@a{DO6P=ky6a_9(ambT>OD-P7x<h*Rc0|`PvPCy3D$g#t%pJfe
z8V;)+Kgp9RKHrwZQE6cJi_vr#k~wW!**rEwq&2<9&)8IH75`{dG2MFYS0tv4lHYbb
zAg}8_MwF*0dO}Ofl0eZUTVqxxat=~^@@+U4^NJ^)Wivscc1w<}@rKVD0@h?#l|lY}
z3>+6f1OHND_B%&%ng5e!BIi(%L!kK};l!?NandD?gw*f13#pfF%F#5VmR-_;kjs-g
zLe4DEF@6JJ;7oHq?pp9+YafWy(?$GEz<g*o*rV`UI9n$dgn^2d=x;&F&>=fwtlkQi
z(PO|e7`|D|rk`gq(y{n9!2EB^oKT0n{<K_mxRY>Mc}6WZb!zOwKXSeC-L31bG@Is<
zhTpMd6Mt-%kC!PTX+@kUx)S6~Y6|_X)`S4cW;old%M8ZUigu{UPy%bzv0-ma2c~*3
zcYEHUiTgrO?pPa<vR{su#sv*iP0V%FRYz4R<q4SJW>d6h+lFxGPsC_@Ia0*qAX)A7
zx}vo<7d0u$ExN<pCnnu<p_tmV^0{$yM{o0nSijImE*APplMpg*iC0r@SR;h6Ib97o
zW93m_VRFqx^4frMWMV{PQ-c!Nbq`@p?t((Uth?1<D!2*83csJ(fbQmZXbI(gV*Gep
zhY!cVW+L8Zn3}gXYUL*;WD5<0VsAgup0T*oU`a4nxYR+Y7on;lk=4+3dQ5;gZ5Wa*
z+v~Dpqi&k*8V<sOU<<hoA&tNz=b-K0C8lK^p#Td<#4e*z*_?V!lc$%-4a)<)2N(|)
zk&$!3n&&>ftj`Z7r;8Pr66E)UliN;d0`AmwJkvTSC^N2iBLWfrh){H)SaIIn`-%M_
zVd5o^PcCOw#g?=jeq1RH=mO$Wf4ph;!I$Bzzs6#WAY!w>y%PhMwDEJw=7V__@IdS4
zyNLR62guMr>`z!v3XGu>TpGM2@4KEpo6_0`-m4R|RE)rzdczb3Q(-9%p|_n34~qZP
z81jhLYJ7(E8*iqt@OKwtLr%yN6dEt%Lfy)mYjy~<vJwCTcnW@$1`*4S8R5;m*%l$S
zZo7%mY7sIzwoV%t8)=nT%{q@SYM}BRA7izo$^oT18PT(M*i#@1|6x)iw3FoxAwOxz
z$qIbyu<~0f!-Z$Pe@VOPcr{mJrqR&j7E(trb_j^y4Kp`U;Ft3TU**N!ETos@=`;1y
zCf0~6Kv+F_C2U@H(o_M<o5%W!a#xDt0*lJ->Js<bUPdzZMB+-lya|(G(w_un^sWvm
z8eg}jit3ENd&t^=f_;le#16fzI6q8#16z30D~@jOMHZ9dqR{57Tyu;fW*poe0wJc<
zq1GAj<SAzSaN%@M_CbY&VCmV7{!A4Z6V78HO^^L{rkSy&18aA*H*))$_|gsa&R$<O
zPp#h=uA9Mg_lfA+`FH4ZVGA0~47`u#ZsJG6YwmZB;l|#I_>~~D^s=ht<TQf=XSiE+
zyA1G3eE;-BGB*Fx(#JXs0u6-rYOdY#H=jL->zVcsJlI;m`{)s{{ieFr(D~iPumZs|
zB|k*DW?8ssLKNS%1gzBz8)os2Q`zG5fX0n{K-+N(+5~Qg)T<5NClGLB3sD1rMHA~=
z8_=5r>ST_H8ZS6_A3y4|JZa*m8BMM|<mC7^7fzc+)Fw`kK?+4tVsAyaUE?pi)CgOz
zVqmtnRRLp6{Yw(f4Z1lx(zyLBzbJxxYHoCp2f+;Tk9yn6CZ%E&L}kgNFT^ZaV92l%
zye~RY!A4_pT`T;3#O~%{DL$w29Pf>UUI(NG<v%pXB5m=^c2Rk|zpm<$Z6Kdm_uBrJ
z-wP?Q(kNf_Ra#mT!zQ4m9%f&dux3#)4+$-uZb&;Nj6DcGh>N*q9_KmlN|JLF0R0f=
z?>-!q;*x(EVQr>R7nKq!=54oiM7LeX8i*jzezv8CV|(od@E_&)4^s!=lPD^0Y3ASk
zx()uWzS~!PW>&VrWRzL=`pE79$nUz?Vk}$kCBgghL#T_LA6ze(Mn~47rW`vtsG7eQ
zw}o~c?W|gnv;CS|03md>zUW|&D}riZ!t9R86$Bb>R#?E~(HtY<!fC)OgD}(7V|*;z
zFK~)?A|S5sSjzV2DuK7TWedz~?7Np>^mNZjxpWWn3AaC;J$_aX7~i7MnyO1mLT!?7
z@^GQyW)Iorr~lOoMt3J=yHv$Xa!MY2h>VDZR^bJ7(cFUge;o2xE3D3pB;o8gRvB~5
zOK0R}?R$et#$zCp*$Gb!+rwn@z~@`2ZjPrcS!L0|cW`VlyP(pZfrlS!^@d(gEBW~D
zP!UIpLFe^~<<yT80T1hT`P|QVkX;3{X7I9p&Uav-9P)~%)2#g-VRl=$26?ULX9JRB
zAF%@x85rIKX+X_q&qj4_zi%9s4c1!HUKgAvUA~l{erj|L;jw=wvd%S*RlU8cC?5;0
zn0<{S>SdE(+pam^sEk^2^Aq3w`J&Y<!r5_T9?V`tTnEP4%Q%<F-wfY1RPe}+f^zi!
z28-<2l$3-_oQpnW0<m*QP_}PhuL~0L8S97nb}TXZiqU|R+loU+y%d%8xS`wgftb?4
zqea2IA3u3ijuVWW@3aGE9fX|_4?rexZcK^Ub5%{W$l_)I&fE9l0x(MLI8#&;J(vd)
z2*w~u&isWWGm=wyWMhv9Yy^LuaCpqKwuGG_rPY_()=^smi0P)H)r3bM&Ibcf(Jqcg
zJ6y#918Q3~)i1)6_GpV_Tnstl8lga;WL)p~<e6;`!U$}bZ1gT5(N_c@2%1rrtT{wp
z<}Rz*1X#9BCkL(UeTi!3UgBV5IQy--^SZh-O|nLxu#WSpQGnMgqLLK;{wk2r$?9U-
z{lYn~IbE31;f0l;xNMu#oK>N%ors%o+!o0^IB3A4G_T_`lm>v{%@8A_(3v*#b42AQ
zL0fw@zjW0(Z##~#kkex!Yvngt?+uAGOlvrISOD&Vx^CD<dexOf;KAX+A<0j?fsPn{
z?0}8j^9Js9Xb4-5Dx-{DNsWvfRIh_#?I`o+L2>zY0UX}Gz{aO43ur-NXI=dnktDUw
zS$}Gygm;NB+nVk}Aw5T{$z#dy@K+3gm&WTLbn#Iw1`DgoRS^eWmeJhf7V1r0`BZ-{
zYKYla!6SMOGYy2%h&alF7(nx5)H0=-e<Cgm*4TT}SftpF-mY{rle`L9nAhVh;QLW<
z<93fOp#^@~_vP;H-!=2O$s>7>1MS`}?^QFh!Ns<GWsfDN&%@)#R_2|a3keOoM_P*c
zgGpzcAYcHb$9Z+v65WV`N)YY7p!`#Ntg6=|@mG3dKHqh2Ke1qC;8jc%YbfGlTqOxC
z#DnUngHS4zqR(NHKcMgrsL{(P@d~y?`)9W0-7{=i0?x<M6H6yA4@d;dE)D0{N%0at
z1t-&+bFR64DcYss_UOpF!YQZZVoX1*PcNrye_Zlyn`H&>+t7r3Emb@gN!mw?0S+rX
z+uPkL&A-5je?*=7a*MllfAdYbZlW&FOeqR#wU`%AAq@T1j|haaf%!iZV24)Yn|)Uq
z5R@+Sw2nhP9JJsQp0sGG4=qNBaVhyFE~%s~dpyV7_pX(MOmQzlzuz*=Y2pvMOQjd3
z@6}{A3T2zB7akxM1FO@7h-_)7uZw63gsLr;1!Lj*4t_sL6F1;>By&2Hmdpy;MoSdI
zv&dctaCM@AMcdzLhq=@6HML0NL4oUYLSYm>eOwPx9_q!xU1lsHEYtM(5j3>eLgp24
z+d;{qS-hOpz@%OKh%>qO`qDi|sY5P$fv=tv9~LjRc5Omm1X}^cw^RF|Xe2frfXB&Q
zOR|(K_`o2QbalRdnqR9)!62n+{}e4t#M;}@ciW;6%Y+cYDBXma4T4ESLMK@MrO?9T
zM?u-B@$<AD{E@qzG~yVl??du8-ll0$I3W%YK@jkK6Jp8VPzmKlR|(ESSH{pjuTf?|
zi3@V0ssDc`9(`+J89XK9E8W!Q#{}_}LV_b;^W?^}=?wVBf-L~nW|}_6kWa_S>JKt%
z0^ixFV$-%6I{%na_ArF3S&H7RINAT)Z$&2~<T<DPj=3x<*<w#Q(iOQ#%37Pk^-zlQ
zt{p&vbFr`w+(8&?AA>t%Y{&^m8lqNVeG+gGA6#$RQ9geM$+(XJieI342Q}0cT>Jh^
zBb2u~`~d$6GVn7CaL@(h=ksaSXA=9GiLl&nmJE~&fbbsqp_HFH2=sc<`)a9ez0oBe
zT0F3@D`0k223dPb0i3L3yS|O}cumwaOpJVZ8=@W$*f)Rt<$tW>FWxOfNYIXK;LEPD
zPHL(QehAM>+1F@r--jB!>Hv1{^y(x4vW3tKXisl*1g_{X@3rEMGzd+7rv2XDxS@$K
z00RcmqoKVgE#xTmVhuR`Wb5~zZ1)Yx`0Rfg<O;M`0JPp0m|)I0D%L4{znq%oBH-`Q
z&xvCb`{k`Dmw#vR(kxr8pL@pmFJR>jS_Bg&UGnQlu|~jP&Vb8BYUOK}2|1NzkApH|
z8AfcoAek}x1{we>PQF<WS_9@`uw9n%X@5kGc`X&YJA;{rdHOKlK;8{lm|Jf1=3d)G
zRdnV=q)QX~S859hC@s>C$&hL+EE##Xi@wc@pni#Vxj1qPqDQoBpsU@ecNc)7ZfV-m
zz{!B3GZF=_f~0G+sZ%i|jya^WliS-_0-87kzE@DOm8cKnHC``so%>*d7v;DD*%MMk
zqEC@`i=iYO{Nx61Rnv>JUjceUYio)ij?T3IFpiJE7JBEJ<S?Rb&C*7_QTPVPVdQHV
ziR}7)7PH{)fPZ6RwkPg?d4#fiDf-js#}lf+l>6ayw^qN7@HGksv6jCR9h+}dx#&1F
zSPw<7f_NmcZTk^QUn7tkxtZU@S9dAD&m@`VkNze}06huTw{0D!v?-0Xz>`Pbv18L{
zGS(bFZyhHj02y=;l#rcc#GUO-1B(rsv-28CR8Q`AEAqC;yHJO+FaPy1(9m*6;$}}g
zHAZPgEVH>sss3V4ymT=4-?-(ivtby$jhTxT0d8kav^dk_vyrp;P{5&lLr0-VE3wq%
zAdPpf;XE5#l)Jaok+YOJTVPga3290<Z0ex^y^k7t<EwN<`lv;~|DEn&lU-p0sL|?R
zIT;weD@G@N2@XL-kNJsI-+rG3rP;6jt}0?}OnR9V{AV6YVETf%3}W%9`wK(I+SfH^
z%m7?A$gA#wHDTnjIl-42+rTI|0rW;Oq`+4szrv+b#rmQ8LXTdv8uBuXN6c<Uk)NG-
zhXv+!yYo~5sQ}8)Ar>+;XFK7ww@7OXj&Ik#6n;0;1k@{6ZVj9R%IoFo)gKOwjW3$c
z7wJBPY3uX{I=sb{`Tdlb<QLK9%aLUnN-B<o=o4YVK_4z6uHTpyg$OAbFf+l*20?fZ
z<GsK%S$Bz&v1OCXhx>ww@m;CScW;)@3L%Q}yHnNfPKxfkFbuJP{X*H!Ybev(gh>I5
z-}3k>g?6-2N_=E~EM!1l@8rI3*>d3qV^p>|Sqx$r)Gb_&CPW{naR0L0;{dyiPvVWP
zI|4AUiaHAzORCBX$G<Fi?ZTu(5@YMSpuM=UT`4DKP$5V8K#MUl&?bPMwu6yIwVep<
ze`kacTlWEVI_z$DAG`kG_~=Ane^YKhy%E%nW`#lQ8iDXMT<En*3~p0~S-T@tLWLX|
z-n_f^qxV`Skbr;M1gfdd?2t}Hd6du-LqI+0NG{$e@Pic8NSGu4Pb<MIsjQ80m?Nmn
zl&Q}RqJ=74cr|~kU`ey;`8ehg_-5%|q}JaaaOj7U-B98TNSk@sZdUk!+CUKKoogjp
zQOm`PSyazM3mlw27YnI}Viju^IQp4z&B&9!|44)l+41Rj6YAglgQ^r@{}yc;b~wjA
zUy3>(<PcTP%98y(5k&y~8El)P;f9zZti(s5U55zoJEbTfG)hv3P~+L+!D5MpRT(V*
zoV-OnUxLtdI8uy|g6}x8`yV@oW<foxq+4m`YvVWTjl6UhOcV;$I5Npd?`Wr6FC@8b
zMjZO_#Cvibkn;je_85iRVI&`@SH~#|(<cwvr-1&2Q?3d72{3(IYk&=_GmQ0H;wJmS
z97<CFPn$8lAj$bZ6$Z6ojEt9Whf_PcQWu}uvM(#iIby}r9$0RhD*cv9Df>(NPb04+
zIHCy}>b^RGJT!;vi^_WNQRe~olV|4cgOPJiF-_aka=Ibg5VWL*(570m6#M(M90*wR
ztJwbFbHIP2W&i}cObzaB)yWjtlReL$**>R&J(iR7yXpb&P-xAWD)N94UG|ej0G%U2
z>Ru!Ebe0{!Ip|RZ{ELvC^Fc_pGs&dx=&>%*c{vEofWlV(8KBc75hW)q;K=?s?>1Cu
z&*D;)>@B76$>j4}SjF`6d#05WCl5C(8Is;_7HC53W8uB)J}S97!L;CNUmLo{P_}=r
z9CO)q$d!lOv=|9*n}gOUa?Bz0re7(RSj?*iOX`dgqF#4&t2QOp;rdIFrC(mye-O3W
zRjk@R`)UZ^EJK^xRL&LAIr+N+qrwDkI0T`xpQHDlWz6JVPNOWc>x?KQPRQRTx-~0$
zq+W>eK7`PJ7D+UUS*>8Io(z{?%un)NW0@vqcWCpwKu$=N820yM76+Ugn9oK`i_<y9
zf#WRXW>H6V3b7bhJ&gZWe~Cc^ZQT5P0YE07nBv`Y`n#ig8wuI#f>-L2UjAgbngg4G
zpcpfXO(AQ_M~X746G$j65xX*JiA{GruLcbdoX%Hw6O}BUdPw;{*_++r|Gr9ZJ*x%0
z&Sy4S7BWAJp|^OhmO*`a-0e(eRM_@g7LCK!<n&k-$YhNX-WV400$Kp$lM<4o*2!(6
z>tF%YZA0kwPZIXg9k97O9YUtg#G_#HHePMYAm147F^@eRCM&Rhr`#2~=yuM1KVwf0
z_T&U^C(QjAI`|pZMCS)k_7&CNDGEm-t(h^O@ZGB{gfrXPX$XLa5apuYh3hdh-r4F5
zdos@|*n5dmo1B~LnIv#ooTTw#!~K-Y7)EwdwUCjFH%)I<-xLx^c_xLQ)(#}9FIhKR
zhhNCC?#o!9Vua4t_%^1P)?4lZZio0O(eJ(AJ0qr5-kDhanZD%-JSA^j=Ey9O1wIGQ
z@S|xxY3pXNy?RkahsDB3d{g_A$qKNXCf*G{sEGA@l>}Qk-`#2hQ#sd?WNN7kM`2K4
zp>bRbjWU^2<&Qr)%!!)@CZv5(V&l&%GCXvK-nuWPYgb^_l1A^`)C`$nrBw5`{VHqf
z@ij(=X=a*eht&7+7vJj06Kno_Tl;Las$Wn&3f{;-*>3EU$6!_u2E3i5*x*|8CCT7{
zR#cPcLm*B?)V?E-%{76-6RlIvlg79u3dmsAGzfqkw?1-@t9I47Net3P+pOSJj0@tk
z1~DJFJ-$Mia<ppCqTV0$eMaS4;|<+!;nqabW)@=F)qYs?4evUN7XG9g<uiyZzdQxx
zSE15-ajl91LM<KZLorpKPG&1;qHQbEy{|WH1|@r%F(1BvOIM2ajCWxjCb8H0)uI#6
z9=(W;bLSm0;@T=!Y)t@3!MS)Qls;$w)WJP|ob3}SuQci~+%3XjQ)qX@_pLv%;Ve#+
zOh7x$R>CQwzv^s$E72SvxC35Bk`mS*AC`%H`KBvG?aUpT*b?m(-@6E~0n};doUP{7
z>7GC$k?8AL?D{8s^Va>h9SIE7I>v9OxVO1=40NOji(ydw(Rjfa_$F0UTU_58)8gyh
z7JMvUT;$W0<}@4n8WX%c3muN=la6<NZX05%Q-%dy;2L{he3nUr(mhgey8{uJak^yr
zHEoy8@m6-3sI~PiK${}Ft69VaIHOc@Ao$1#+y^CfH`i4N)@d)ALG%tn26})oh9+Sz
zjRGMn=#D&&mKvza6bC)#2s&<G<dy7tW*}w_z$3A;1(-t@zKkaKZO1kqUTRxA8JO`$
zwr|zaLN1_mX^yHcfghvOXv$>G0Zo%|c+%DT&<KQl%FLSTBRsMHhAepNlglP;BF$ti
zNM%B}qfzeScwK`f&uZ}{pH}fu?;?MOPSw(a%c3>8U+YnH(qZ)g5ALdf@Z0Ft_|y1d
z5#fIcAMH%BIVom|cVQMg8TL{!fQ)HL-U}H+X?o$&F1+;?kHaD=`ze`7Kc`2X5+2U(
zTBa_aK>rrcW{sZbKUZU;Ni<&5^g=;5_^%}1__d($;nXIHR{KK2b&7vVe&>Vs5~j8~
z)2(&E!PUyZAR1icToTpM5#~FE@c(j<FSIA%m<={iX(nh?LgoV58%052Ann~Q0^wUU
zdQkH1Zs(lm#Bl17rKgGKF|!^7Bixv)%5gghj5m)ZItL1BbkjFCG%L+L1o}>g+<7US
zFPAf3uH{ysAY@b@&|=ngI)fe+g`H*?%-s93AeIZfU`!wCKcwmd)!><Vzos0jUiHpx
z<sPI(k|*H%ZjL|LYDKHN;Rfv+?rqr5&6QSA*<&UXBCkJi@}nbokhn2)&MUdrr{nC>
zJfRuzgo*#^F>v@uXiD9pR+Aj8dydtIUzIk@^uHGVFY=D=AIps058VY6Rxi$=gzkT(
zcN@cMi1NefZg%q@E1_FBwUI(krVE%GcM~7rUR=;K@w<gjP7IxS5MokR=iJ_RxxLq9
zt5@QYSg+5LDEUr0!Z>%U8-wR<<Xf_0qLE=M!PIC?4HHIreyw(i^Equ>;0WxRR9k@p
zS*8PZIJVxP5}MTeTkMVQZ67va));I7l<yND#2H_hY;t_smdZaJQ$LgLOS>DUh2LS5
zaZx#<h>U4-;p}a6$$!ZLtH;8Ae>q0Er~`Hu(2obVxA<}a{K0d94Sc3_hW7g)bJp#E
z#t~}FX-zEym|H-#6{V5wrwLbx46@bafFuXb2wmM2`PzbzJaJGf*;-hIVj`lE)nfcw
zxygJiLG>+bOC&_stVJ2>LqpBGerU~Fi7ss6!mDa3xX@_V3G@f@!BvNz!qBbAH_CAL
zgV9{=9*bQ2#+G~$_djL#c<UfRT!F4Fel3d;aT$zUYpBk^G;1!1b3&#V+l<=)FmJhD
z8&+~g{%~RaY8gRWa;{XZo8iu#grz1*O4a#qw*SXSpqLrn>(I<gLbfNskE&xCg^$od
zm`Fysj!fWyAF3u$QNXxIY8xQVHS(WLNZL%ag*^9aGROgsV&7Ke_V{F=<@A<XvS^GL
zYF~aaoqizo<2Hp7;QIe)uU49~@aDTrkM{x;vm2w%>L`qqmh|u@13rmxJeI`QJ*kn%
z;aPHtno->t(#0BRP>q#d>eR<$JD)_!U=GwY^rb}1AcmH!{9h-wiT?l-V-E4-cZ~7#
zcxp|N^WSBGClrqpYvvu~O3xX9-EjI|qA~&4><&-e)8JRIJOuXQ2t6lyBHrJ|_zXWS
zkD4*Ta1k`$@?917uk+NSyd6eX?acO~H9F>^rADaL)o#Bzv#8^O_5Y^9usn0LSI2e~
zYj^W!=j#PMi{1mR#1H34A)A`dDcxfN!60K&`gX^az>Z*3M*079vj^Bu#}Z?u`)I87
z+^2DWXFGJC0FZ=&8Sj)g2GWtTuJdshjC4bCwt^3jg{?U~K=u1aG{R+)m&2X)y|X$^
zu3|Jb5)byc`YD46tob6aUhWLi_*(EmPkrGYCQ~1W5ISs`+FydQ7a;>YEq}u8I1^un
z*0H<yGSKMoDeuF1IxEe!CR-$^mt|XWQ(y&|PnaR*tA#-P(DF=>@r)~(o$TZ*knoAH
zxAGuhn3<53HdAvLB^tiEcc}o+rR>MxTQ-|Vs!UliE*Hqhe9y;jsI%J`k9biSq@<?z
z3jd!f;w(2eVyQ`4qsnkm$(F7XkT2O3EOU?@W~l5cZj9JQ>O{G3sO|>;8O#6LZUs21
z0@h2;gyj8lwG8_?d>*wu)*V_2ms9sx22BH04V1|}dI;NqVQoiE|CL{8A7&&nbx2rV
zbjnRmI!&ueQ$H-@t?aZ1p^3?;(1v-=b;N`|1$id+jY}oWfE(eUb&HIe6UKMp=!z3n
zW_HUHl-oCK5&T5iNC-`beyWdB5;vC_yM-*VIg0nL{5|txtDK%lu}0PjyHzdB)K%F?
zOO!UxDwk4Hq)IS$Y^U5a5~A?9kNS6UGF^it>hbg1$GNv#XW6T6!nm8SD_Rx6i$Wr%
z`&b{?vA+h`r6-X*RL|^etZWuKcC_7oI`v2-wg7O55anV|1@&>@GS(;ZV_7KNlC0%}
z%D0TdZqLc&-{7`={Xlas>Rw&*dWAh*jV{tunS+s&oTV@Iw{Y>TUG2a!Oll5dcBRy*
zeWN>$i2U^^*TyEb97SNDL?<_c?f8W-4$p1C&<4YTDSq)%6{@tK(wcH*pbA<$JhjW;
z2vFGl02Ti|xI^dnO*i*>O^M4X>C=OEy-%3TI1e+7_DEe9@k*B?jKD_ltH}eG!M+iY
zo$W&`>V&JAS;JFEsQI(VeylS0JQWoYdPXcBJj@_AQI2`~A;9p|F1kvfk6W*2=$b|O
z$h83|Foh&x3baq3Zf-hFYVB{gU0KkixG<DzW09#0mzmb~HbqR84P`Ju;3grzQ4Q26
zuumi7xcHRPz7UJStY@|5I0OmOEu{tTs{VAtm;>eh=32w=4;GxE>-F1M5myomX>AGe
ze_??B(&oWG;naOcWyvm;D*G!%nK^GbrqhvZ7zY6!l9|~f$VC!P{3f-8ws;YwtTrEE
zQ-P~z&KUKyLHah$Jn%<al$qPve=PSYlb&tQlIKL(*b*wF4iL5<@1|NwppiXg_4BQW
z8RGN7n~>rYO6=>tgz5xX)8+Z^RZygH4DzViX!cHaC=P@6G2|$yV9jz$q{Bkw$^FKU
zT4l8c^afaKI5I@`q;;&a-4I9CFf6At)t-vYvw5HhZ|WZJY6krNtxz?j`kH<~;x8d9
ze8GZ5OY&7TmoWyZr)>ooY$}&Br$Q5FGSq}mmlHC?n`rff1^V4zcfUKezcF;0!-mO$
z;HF$ikZ%j!o4>JjP?0|7#0&wWY3A7!+2KzU_mB|iQQDs#ilVz=Y+Xi}I-`K1jr1)%
z0jRl(S$a5%JO`7cKa(&ob2%3}<2eGhgQKC!?+`P`2Hb86|8(OV0Zn#*8f}0%hFX~T
z|Mxgl0y9Vl3wNrHvb78%*1y7|viddCz(gL}zJW32+{i*1fnh>)zmSbW9ZxmQr-Qgc
z=v)h+8bi+IN|VLfc?uh=x3NK0D`vm(hK0=m%pcq-`~Yf5m8_vsFUY5*n^7L=$Y;Gv
zQ=%eqC{_HH$PM7|2Z#%JyUN>wrvkbQ*B;cP5{$1u%-l6Hm7MjNTatfNgXvCmi>Xvc
z)Qyy?yF!aJ<Jkr2FI6XP>g@=E6EX7NG=oXWfv3m_MD-MIIqqVm<++|N!<GbuMvit4
zC^{oes>o2Qq&eZ&EE+T6^|>%9c0K0u%r&)A@ba=P2}Zn0MG1DNS%0itY$DS%TMo0y
z^=j;*>$wAmVZmJ3MO+H?Q9)D40t5@1aF0caQFMN>2fVE79{;+^4A(hTBv;<FG3Oz>
z4mN#zTwB7!N0^eQ@<+~NFs@+N2kc6!IDLa)JUQW9=%M<d7aoQJOR$4|10yuNV7v4n
zjZIM0B>l{A8&1H=LmVVoLtaNE`>sVA*t+^ZtWK}9#|1ck!B|+9@gAABhp%UAg9f{%
z1tSi!*!K(VaEqtRr5ZV|4mgjYZV)%>t;!v&a_D#~fw1eVf=*qav<1tpH;6&{0l)Wi
zLM&*amDAAf4YCTd#ZvM+3|rC_nfd!zP#e>V>ewA%YA1pXKyFA$YxR9SgbjVRdV87r
z({rqY^lRV~CZhxswdwg`0DPV-P*bD&3OKt+;(aHkxy<ph7k<e?xL<;cv`R0!pgo~e
zXN5OXFUTPGKqWC$&+Nnf0cc`K8Q$!Zv0uT05er2c1gdp`B2nK;M;jV;*cy)vgmp}F
zs{9`x$Z=Ai!uBRa<~|4Gk5;h~_BIJEb^axUoQbpe2yzdk<frPop(lP`(2523Xa!~^
zo7>2U^X2pJF})-%-s!>e3kSf;H-gU^5NB4B27%YyObmQ<JCQ)P3$S={B6;N1%`3SG
zq~76QN;5Kx4r~XRaM(Ugxu#FaLJD0}p&WRVku7zfLg}~uK-Y9}cDwv(_?xXbzx2aN
zxBh@AXpi_ZTb`MrT;a%$;S~4t2^FKk2A_jC6ABq-xW9Ij8c;3+bo^+FJKWR-9?mVS
z&MlYB-+HB<!MrTy)#wp@4(aH0hLuG(B8A(oM&`y4MdlEhG%Y_^OJGCJUyL6N_&v{w
zpT^01e7mCuW#Q|k2aWY$k#Pd@D0Pxj3>jq4TOzQ%$qNK!kMVsHL~qR2LVG)5M&NZO
zIqQ;o(rVKJ)3J;P?T&KC*Q5Vu8Rc4Us9?&xGf_E{D&CCGA8Id;(xpRvUhzB((Arl_
zWyM*V|A+5#Jt3^R669LV2#YUGIuxR4nsHL0)1BYTI&|*8Ivl^?7(hF{)0p7|+it+|
zQrkmS@FQ5#I0%1R!k41?0I`rBo61d*igr#zmd!);f&{1MO(V6I<oD@}xV9$HE0ct#
zKdK|`{hi5qmobGfXUXL;E=7Y8=3qR80g<w|*|?_69_l)+?+qs6!bLYhPOAx#K}?TP
zr&lk~yJG95&JME<M^2}DnWvmH1J0P#n<bG?O%9mkBI6?Hlk&I>s})+`kjYXfq&qT*
zR+3$ibLZV`qO>UaaMEieCg#;K^BHnl0`>s^f#2qmeWzf=Zmik6s*l7_K}wkw1UIkj
z^4*MD2%1liF~I$TL>MQ#f$;5DD;t^E<I}>S_PX97F9p-kUGPa49(xJoIh5vHClKLj
zH3CEH{%Hcv>|I6Brg)8Scl`t-2e;=j16pej^Vt`n#>#Y~;fc(Izfv@-NkzS4QtkE+
z!Kx)cZlN0EG((PvIK>1&jmebIMt{jjnWU>gc`Hr0La82Yiqc+4_0P6?SVJ440QQ;T
z@<CGum#7esy<wJT!EwdKLjfzV-l`;td7;J9k;J>rRWJ<OrAZDIkrW*nr3!2-66I>Z
z(}PBX9^u*FoAhM%i_a1xHJPwg=o&A^shYxqClvH#LZaE^xq$0gx~FEziz&d8#a{~R
z{gu-dTTs8fc_>7llLDB!WCnPNdsT}fA>TQ^{JqIAXP4b`{Iwgcj?E&qgs3MyI-YOa
zgTunhNzMd<K!D1=+ch#mJUxt1$_QHbqH8V`_T<oT<E<c;_JdK$@l%Pu8ykr9&>(2`
zy$t6R|LQ`;Y)V5S`9kovsWZU}KMA}w&r?9$!l@5EX$2_sx#B&9q6*VupAJA##O}QI
zu9#DJ%IwY(GLE^MOypzFs@soUc_xkO>x>0N>EfRUmw0by9mKpI4c>F}G_P>+V>X^*
zdo8+GN4v)r@{JgDQpVb9jddS1+J0}=TSxJYAdC&q{;EAxI#erf;`V?mR}ExzBEOqG
zX=BuvM4nO^#qgyT5!FuxgdcBB^0@=+&-%0<(xs1m$xrG?>Q?BSw}FeX%lkQhCZ|9B
z8Ron7*d^ck)rU?USgMs!WrnK~kOsskBA_XX1HKVT9e8c(4k_|9#*W=fRTn1X-JoN7
z@5mi#D)oS8^5?=Y+QOGxCAtiU24j&jeNr5NG><2mM+Uyu&Jr@r+@*b~Ik8su7X(*v
z{!3EzujYr44l_i8m+<oN8M#!{p<g4UY7F&<;Y>Ywf+JFE?&f#^u|PiVutptl2JK%>
z;msOoJZc?5F!H!6h&K}1zsBrEh$>C9!G_L`mF)%ppEkAdlgr%&iPd8_Eno)nmT(+p
z;MXoN8Kmhz+w+ob&+|uS1Nu6a@kytp)-Ic{cL{I2<*u}ydH^W)Gb_1v+ChRmwao7x
zfKjJy`e6kv#kP?_l*U389QNfKI%;P-{txT>PHeo%%|lMxV)%-&^))6u_0AF&^@2XO
zN>q~C$-8rxEEw?X29R_pDwr4#w*L~1v3z<{-IH4!-i`c!51gptz`M$yXGb7CI@QN!
zl23713VBWu>O?@zq+7Q{(Ln3tvQvV%HJAQ`E?2r9=PTFdbnC?iHjnu602#A(AFBFo
z>lbz?4*t0Tv;X^v7JrgsB<NDF;uLs4S<flFuvL<Ypn(~(#zs7G=206K>B&@s&?e^4
zRVkw;#FsRi0jX-{nukh|chH8U^+@h>_OhOo@sY`v6|dSZvY(RW8mU2Vo%}P{@xX8L
zbG`PIB(oB@Jm1h5P74%3Z_0wUxAP_7XV6;1b_`aULOw<w65tJc%D6XHGqz`S*zAd>
zorHh;<`qOv6e9MXfV436z|mchK)MZ@Z%$=Qx9{nGMvHvgDlqbhVP~+8Z6W_EI2lEz
z$RgT_M|hW%%+>Zjsuy~bQ!I0`7z8hMe_-DxHaP;qV6+Dx#WEsV9OVDY-t-x1Texn}
zz}PgSf?Rt~oT?N-fxGX;Xe45Q%i7NwMbGwK+F;WuwDuM8bTF{zsZWMAC<ljCA!>~C
z;^;Y$Ph^$JnsEz3$@NOK-wuV?;E}(`G-`cSXX3eBpmuD6+EAB8uo}V3>rRR1@{l#Z
z#4B-jqGisZIMwR^_wE3{>@7C5eoxZq{8HhXQZc_Fb{=+2(o8x`9Yp_2dzOsZ?_d;j
zO3Z^;R?@qch*3#0Z}#!&(-7)$#B-@nk3`35a{QX=nIZ1RKOtsdN&}jp7zVXj+%)y<
zKj;St?ZPJfmV0cQr|nn$ni&E+l%|}7##>fg^G?fh@3O4&F8O^|vXkQuVMFS|ulV$O
zK#FXiq?K{9y#kv{f*TvSE<G2Sb)n4FvO?-#u;x?bP}P7@mW#BOw%!rsjni|KWMwr_
z(PY+Y(KK)+lU!hB0@JCgAt-=keW$QeXQ?c8L~wyvxFkW9y8{(5M*pm@IRH(qyrqfD
zH6fqa`jT}CJ(TY21bHm?a4z3rsB+ZsWOE*IHA$RF1v+490}Im@5Ob{aX87K_hLCQK
zmYB3Ol>u|hHv#=~p_>*DL<COfN414Gv>1@MV!Rbp!G+Lzufqp3t(TpVWVVWt`NK2{
z8=E_%DWsr}koo2TjBO)^JQWJ7VBdsl0@u#8g{0<9bJz>ekLzAjQB3EE5N_@2c{rMz
z4%4RS<^47Djktyo(lc?X{&**WEot_yIr9*kmf5m8>QG!UP7}SKFq{^0p!!-1*CgUS
z*1l_(CRo3FiKu#~5E&izRhc661~m^|#fl952I`LSf>Z6o2HSAM+DE<-k#>cpSMpIq
z0S(@VQn<hNw+oM+UFZ6xLn3&<1e>35f~4}2v?5VuQPC7iKIuG)16q?4Ey`==8L)?+
zi{PE~Ql^DA=tPgB@|X?u(g_EG>9^IIq@&9Q!&FHiaxd!d047qUXuHzdKd)hbX7grO
za*jsp7HFrxr*J&d45$>_x!9@GG&NlH`Em|>cs;KXYahov=IJD%uS@kl$Kl$K#>4QV
zwG<>e1U+IcS_+Q}siZ&BvSsg)dEr`iRs57sNmFW|cA15u*v{R^kD+(SDZHuL8<^p+
zig6c>+yRTPtRa)RmJER@^JM!vN#|Wq>$PS9WOecuZe$!F8ED3PgsZ=MPr`pXPLwwE
zzIiD062>d{#@kaq#|%*aj19!baGiEF?a2vNG?1{kp~EteN8=Ijm6cQq`Q4GH8~PX3
zh7U05-FZeE<^}#|9`6ftg3hnPTyL!fs|qMF1NM!Iid4c5)2}H6bJ{7=<%gFhb0g8^
z7$cB;?4F)iQttu~I;`nOvix_l8q9+ljiGJS!q<G^jr^jwF(=EL%MM7Yy$y3JbzXk6
zSRUCVJp1qlYl&l3671E%`lnZ2K_WW+kuEum`f}aS@mEz@e*0v_gQB{}A_mUiKXK$!
z3btIO_Hro@Z%dLu7_tTK-}J23mf9PCYIoiyzYjE))ttr`G%=6q9w&32+Z6jfSB|31
zZD7~vBpWm1%UIr+4q5<vQ2_-peO&9SLCYXsw21eYi?uUFZ@9UN53^#)&L$NGFUKB-
zXoLMs??u#?9=qSzhkvXm^)Y81We&pfvEI(od40qMl;A<xf+9A1!LD&Vh83v_AML8x
z2aJ^WVb_yAR?Be1m_G%&SU7Jo7sg4}<!>_>7#};hd9i=wub7|+(rXwNlqVPw6ec6Z
z*^`+|O-QZ(x@zDXw8$EnYQW~t)N}A#S>Q|Ocd1>szh2RDfkZ@x3wy*&()9DzS{EOB
zVn@P1HQ^&inbR9(GdDqt->~&xN!!pif7DM}ZkaZsbYrQIK=$EC<E^FV08U(yt+(IG
zE$7~#4@6=UQ}AQ>zvK+HIVIdY6C0yqq_y~Y7glz%j@cJV5lVv>d=Ed+6ueg!nYOSv
z<ZkxJW}(~oSi)9bz2)obOeou2;oHuy#!QDh5qDX1?W5x9AY5MP_&H@Dl@|+QjINZo
zy4$!eKm2pfceoasH&#ijad(DX3|_!-^pORLC;<&)_Fkq8?+wC-e$Nzd{5q$x1KKZU
zt$4Ixyk+T5iiY;iOB~JbE!?XKgi@KUL@xlmkil3lt)ki=UO}ci!vDK()=pG%D&CE<
zSzs>tLk%4t0~+MQw|14<0}E_0v+0k9_$oB?Ud>1g@yo1VqPv|P&0T^me&=I96ee&M
zT3Pc^I!s_AcMRPj`_R0Bu2lZC`=U%rG*cH;A!64>cfE}S(=@hIMQ>1CTs~xp#`1on
zyQO>cjSL!2cY8Wu)AxsqnRV)5aPXnyhQ7;CCj=bEFY}e@?^uE8zL&tdmb&S(-6png
zs%^Ef^CE6|yZGTq1&rKPHIGC3{bg~j5h~Z;f7;=;UQL(3-Tu8DikmY<lc_4*P3bt9
zIV;xz8SI=$?#Q(erUUX`==Wb=sYbF@Tc^oWJxC++?F{U<ggjnRckx3(!>i2obrQ<i
z`T**xz7QA3*Zp<h@=@C62dcRxf=jI+xROqXa`Z1qIvmrJiB*&})@N}W+v;4^h@OSo
zj=Q?99FlEoWDRjaMVof?0CKHCZcmR;sn4p;wQf+YKaf{Q%q7Q|ei_xv2zxEM8eOg6
zja5RKO|Iv<S|+PW!0nzch!3C=njpQY?|xEX9)?tSAS0uTE>&;z^lDP4fe#|7LNDQX
z^ky5NWRmB5wQ4LPNX{{KPgjEy{so3aFdGkhZm##6ML-JS`n^V)<UoWKLsi!yKM;WH
zTjh#`vSE{Yh07WJY3|foYbYgagFbQwg|2%I3iX!cb9ZgXTYKT{b3+ds@nZ)Tnw9fv
z$(>7j_yE(8HS$nz@<m|k7n;~I!^&{{_}o9xXrIChhKlk-ae_=?>pzJz^38kcU|GCd
z36t`yxo)2;9L4QW4Sm2;=BriM8twaK??JSVNl|w!yPGe}$*uU&hxnpAOD3ED2pfOi
z-}XHl`02bx3|o;MPQYQrIgHqY>3I>SWV+u{LTb=HY7J9NU96zbb)#}q7_s@--vKOs
z3B&@e%plw1xTeP>U7u4%RLZ_!f0hK86*<*&Ny9a6ixrh5gKy!n^qVQMDZa-9$oc9W
z=9s@jDq|jKP`T#YY?AA3ZzIne&sh5a5lpDq1vN(JFlJx1_9M!t)$up|Ag|}_Q6_>1
z2jt%@64yygIbNg;%j0W%4z7>n%`yJGP9(%n6x|tygtZ6`|F5q+G;GJrh24@V5<if!
z$E~q>4N~ZFIK7y>W2b#s#R-M-Ala)xF?n78i!}@kedEG8%>eS2h$~y^OFu&I*=}3$
z+FvEAW~Bw0HHfkp%O9QO8^g953ng(guB=sQVsVvtgB(Z5XYOSEB7Q@<dU_Ws(Bowm
zF(4Nd2Br_&_kI_M;jTF%{pXjh56)Lmx9J4wEnj2Il`Jnq#=Gh?+A6cu(IYZ6J=%vT
z`b#uS%R@2O+t+gnIf;^85@3stUm*GK&5pj|18W1ETCp8e!?{=+VLDE)*duGH2#w!S
z8O{e8S-%M*ZU-lD9aM5TaZJ<6@ml}LXX7ohvgy@fN~$D6)g-iZEXHr6{M3qyUg|=T
z1k?aOnyH-wYxI)?(Ca*FS}h~3IeV;&f?h!UY@vjES6UHuP1kFJt@+0S!=(Fd5h~L&
z@9$;RWO$Jw5VCqlJtF_q9mvPw@y2WMDZ!v(;HMJ`Azrnru0+TZZhA2@r4hg^-2N<Z
zpzRaR3oOYzsYe#Yg8etDr_<O&--F<@Y)ZZxk6`B+?Dhh@6K?yB#Djeeg4R2DTad-*
zf#251sAUlZ^x?9AjzY@FX81U2n=sWoAcu4;k&n2FA_is@z2WES$p(n~5yzhOW-z#k
zbC<ND=k*FTrZ_4(*Gve|eD0R8=o2ija@gOFmq3Yn4)0;`dNNj=-vB*8!oRpq#o&`n
z-&`GsgbI4l#Ie^ztaviQO_gUjCu7`>j`T!P?0eR8t%-y{XQJ`9F_bx_B04<>GrfCW
zQEh?!-(VPrDa^ABQi1p*nP84TycoH<G3=1d1h9-s5TOd|3RebD75J@c8yI;rF0B)@
z&q7%rHlfkgbKjP>&nHUE_@SzlOwfZh%b*04t^s&gbsvg<`dIYUS@mZ&^ot2`E$iM>
zWHRsewdE7$6O<oflb~jQna`lpzYD*>e}q(K&XDid_O+MLo7}c_S7S~IA$jVj6oHcV
zMa1tm->4>3_G%f^*fk`R{#3W|@&Ep17nG(GsFzITxozJJHUaM>xJl>nuUN3LlM7f^
zkyz&{8ChXcKOghHV24gn!maoBP{CdPDp!=G{ow{w57<v(+;BkDe@~np*rSOu7p>`X
zBIS&4$o&I{uiOdBxS5x)?#YKX-`_hoN%vD}Le2kUg^WZ@b%?XH3PUH+)6V?t5jZ_K
zZ}Xc1)O!t6s+GH^bTWe$IY(=aF+$qrt-lTS+b0=a&+Qe)BPHxQRE@J%oJ70=$B|A%
zX@Xfa)C6^rSv>&R=pBTxovbBuu&}Q(E>UK#xaGZt8V~caP{#vd+MfTfKpX{;#68!x
zDy4cRyh#FJA%>(M)@ZI~cK=-u%Efw`p8hLm<6^nK4kjXEOI}~@52m$iF(sg{xYPX;
z5<Gb{ab+xts1ot)6g4C#RU$24>Pwba`Sn;z<mL(GZWJYSs40TyuB}j!59dkFg|E=9
zY#hH^+w>QD<J~Z&q-(?6_;#wzJod}#->9x2M@OMk*qQdr6KX#~2LYDw;4rR$R~+9n
zmUUzxFz_-hH2h6~h0rX$y*1s>_gHH85w+7*i4e62FA=4C!JN9r!>p-w0K0lXrw!Ox
z((!Q{RTjT53}|-FT`RwC9-;wS&I!;JI)gZefwCOdWbVz(L}ZdMo_QFn9lqn=Vbzox
z>+jG;3yI|m-$Ew`7*O4hj4M6;n23Q!;IrGPOBr$!GZ8X{cHiC}u8UCyA6DEQoavr(
zs|(#=DcmVPOth<$;|A$5psXUKH}uH^Yy~RuwKz6%M#Xy4kUC!6e*`7=2W<-Lq`_#4
zi$zE#=;UmQx3U52?`MZP!vH1$fX-9^@nUv5*j6L`fUp+vzf18ojrjp)tB3H^cjCS<
zPWWcK(AG{RscVwm4+m!nE#8mqM^;%+(4ix{s?%@eWv<`=syaBu+@(!yT`u&s4iIR=
z_}3>rTSJ-4<YH2Wp?f|tUA@>%Kgo!P1)1Uu(n_^JB-aq1=`z|{SAreuxAF=dGzIL;
zl)BJAYwo79l*8RjWd%}b?j-@=|JV5m8w-53#)7|_3k-}?utS-+nIQ?ez9EnwD7rKN
zZutY!-)RPaP;hUp)MQ=~1mXy|p;0egT=QDbwRY{=l-E!Mj6J@4yFa}qYzQ!w%lQq-
zUXE)HHBp>FeU}xga$+Y!z`Wemgr-~=`nT5U@Zh&F6n#Twi2Su~SucbQA?X=q*5|>M
zKDH){B*`Oh%2wJNf~ARlqhpx~fUtcr1O=lktY2;^gV2-bM1z=c9q}OWe$$c~8fyQa
zDSDGmcr#R@YeI>fujx&%xmlVns-9N{2!io6O(Pu~_&?F6AtdeHT~Q5*z7}6yaE?NB
z7A~aqtB<ZCU;M|Dhg%pjLgR;gt9tW#g5(LWRvaP`nMg42y=rka6meUBcSbBR_lGTc
z)_g=>WeUps#_(M)1Ign~As&EH#N9uThU$!&+@q;heZzS}26dQyn<rluKwW%IV}a|0
z<~(qcv_(fmf^E>;P#nug9xj7%Fr8!oUDKkk6L_1+!6SQ^rnG<yp~LAbsVORJ6zU;_
z@=qhiA?-ua2RSpc0U<CP)85ky1@7HpZ0@Du_~=rBrjK{+{r^*}Y$c_LEo?4H=Ic?o
zAJi5r{A+GQ;|0v;lc#XJp!2uFIgCv2&G)_4brjex1#&|~+D~{{-)O&dDzQ02nI<CR
zewflyUk{kV5E9+hSx$%dFGLBw73Tcli_K$zDzHk*`j~eJ-A#`X@mbhfpnP;ncDJ2(
zE>yyt8nj0Yq@M+8KuDF&bec=+NdiH3QuE~}1nejakBkQ;Q!N>{X|*X5noA?|@F_BQ
zk~b>*AAce$u}Alak{5qi;t+l&HJOS7eV%Rfa~o7EWK?@hX<?Z#T!(kMpG%skL`i7F
zB!1$#p8GO5mxLaCq+IklCIQJ=Z-TFT@S&rBTS0O;p<GDp&GmkQP;umcWASg|?l6}N
zz~Y3FIe$zy^r>6nzj^&$I5R=x65<*6sK#Ep)JMdfdW!H<k5$}&nlkh0G`5D(A+j@W
zB^`aHfX2k_`a`wgwqpj;=tGXO0|7CzJ7yj-2v1bz4AwJ&g~m>?q%nb88o!d{)H;X0
zz*HbkS3t&pY&adE7$7Uo;>BR$a_3;Gq1;eCF765Yp0uC?23w+TR>iXYSurf|a~Vy@
zSAnNZG2``)D!Z3OQ=;5uW_B+Rs7uIs<%cL}A^)2*pd7f7NvID@hD;zgx%^$_&pb$2
z^o5xUk;))$({@3He@GKj3TwZ2HdF`;E6_vm29oSF$m`69+BS(ze++7r=X7iq`hB2t
zSowvVVam?6$uhM&nG{LkmNqx&jJ=-3c9|}<G9RLoCXN$%%L;{3(qgpu?kI=Bs{dK#
zH<o;D3yb$Q<#VwLBg=tnh8p&nt{#(Nwiz9=7Y~B=svH7T4WWaIcfm#1o>1iKE|)Nr
zf2qJlX31nQ8rrDq-ngJ5-#LXUynM+4lOM3mtCThi@1Wbr@pEp?icB^F(xL-6nlhPk
zl1e3|^F{W%vmqN4Eq{?cXg2(%wqg=)zXjM&apj%3W5fWHQ+$R+lI_XEshHxVtIlrk
z%i+j4t7z#J+~{SOp2)AL@BBR{f`8?vw7k<(c&RG1JgjusmAJX~_`D9eOkf<2(xZOH
zP{Jt$p>R?U-i{C6UFF5;V9nO`qh@e6so|W^mOrm7*UJ|MH<AOmlQEQ!6kl#_Ic*J}
zePbo#!0Vu|Ce^v%8>7BFr)@^-KI!Tfl&;?f6#88f1bph5gIK@LvD3~c<#V~4VnYvY
zy__}&Yj)97-N*(}P7ZYVL(#JY$RGoj?}qpnp<Dw3Lg&99F<h!_^!%sH(2hn?;_d-w
zb&z(P53iSja=1a5ocD|+UNRgIPU``X2j<XK4T0k&Yv=V$S0?solt~6%k;$e#FBaYN
z6=FOhbY^D(_=iFnWd^JL@&ifxmYSY?ko$Bi=t4_NL(<oKE*RZgegDy(z<zUA^QH8A
z_iQ_Hp?;nd5<_3ImE>UwLv>5$0m9rl>k%UvX)G`gr#MHU`ebK>)H{i|q77}FWs{~1
zu~;OP1_-=05n5PsVpI1`0E$ba7p0AkMhalMQ<eDfU}$XQ=7x53N|s>_lNcs|j9`8C
zR{!_4wWo%6pr{mYf5LVR1qO7!(HA1N!5Ca_AC^D%E(Yd;*Bz{te7xC$DZ^sCHh;pt
z4|Gf#4024&iHkgJqyW+<-=yf}0|b7`52nt)%uZ72y}u&$Cvq+`!-Vp?>oQk+?_NW-
z18vV+Nh!?fz*J~=W2WcsL&@7gs6M9!vem>5YKrqWaFDREv;89Cr{+A8(*Z;z;I&AZ
zk0LE`J0pPlJ+uM}zNIy1ju)N251cp9tAxf{RlbPhpKrT+gndPtD@sr1Pv0A6r;2=F
z)(#cghEgdL>M1!GnnQ|Ot<7%A#eDd}=y@zOn|*`Mc$tnhIOE*O_atn(4Gw4}{&ZqA
zRtd{uGjp0YIY=4!frq{BK-cGg@8NTxD5HxL<jfNzo0+OPl*HV=-zU-#dgn9O@C@M`
zPGyQ`pzM6Dp9mrk<X_=+sLIGRMN$wEzTJq2QoH4uk3}+lY3@}8;M-zk!@Hip{AniW
zEVtug)er+oUzw8;^ytxW-;U)j&af;6>S#4g^ID(+TsUG3)`->9;$}fI7^|sL7Kn*p
z3o&_L@)0`e2O!LyF|7ZlMg5Xoj_GVSiG63sCRIR3rf#k+Rx{&@Ylp_X#Aj4hEYgm+
zTyOm`9C~l7XDYJ&Yx$23g?bWd&((AY4ZRzI*+g(iG@(UoQ9p<GXn&acMilWC6@#HD
zziZ2}z)NB(AVFNR-=Fiva5{bKj{M3?v49`+xO6S@-!Ein67UQAXgDkX0EU=_J}H2E
zrS_iPG4B*@xCB-GG#thy?GG8h)6h!05~41UYhEH_81Df%GZMi33`QhP`n-HE3=8y6
zviQP{&LEs>|Ch^lLp^sPMn$flJZmt5@<dpd0nrI_e-KnAC+ZYN4UcthbGOW;v0?0P
z-m7j8q2FOs4=tDmXp5Uf^8Pi`<}HEx5KQbdsSZ)utf$U$3Wiqt0=d(I2-{Fcn@C(*
zn0rHNm)Tkh0i9?xtZAt~-?N3lnVE$?V-)mRWKGX#v@G8B<^&E82o9%@8M4SKNz3M=
zsFwY3FXAMw2=Uy;af%DhW_Q7*Zzx^><2F-DlY#*|9ZT&#N-|#|N@CqvboU1EFmLwO
zmk{_N0e9p_g6<UG=k718-9nT>yDt1f;(?j_VqzKlNb*IqM@Y=rRXSY|$cWCMP;=z!
z@GX3_ic*cdTd|y6YNKk=qhUFPcn)MErxC0YxsPSBInW7Spx|f-gZNtGMgKxYLx>df
zws#b0D-*nyLf_gNd8KWtN8wCRMae>pNfhOH@fIF3%f~*`y5E781>qH`KgO}hgyJ`&
z^D<%IKxFSQIFXGMURzi<^&}pkXiqOU!u-CKsaB73-m#ZDVt9l#qwB^PIp5tM%VYSN
zS3;mAqt;V&PQqJ3Kw3jr5r4&aT_s-uQa{Ebh;p%mhR4<})GJC3n?j$&7~->TF8WP9
z&%gYHopYN1LPTOFWyOb!uh`)ItkeY4)g}kafzswxV8%u?azuEV4bNoFVDtwPfvF)g
zuRp;ifwe^PpFv|wV!bhs%>Ea&grU&*bC;}<w#5z5aR`lMLXk3~U7r4(XDhZ#b$ooo
zEdj%)bV}@0YGKgLMeQTi+z2|gz~K{@*5}rKz$um%>Rx!{m;j3B8!C3-;7K?yxGGb;
z44RghzU^~(Q!@>bUwHcycrP~!Jv7NZreUD%@Fg*T%Z_#6w=H-mnQMWdZ2u;13+i_Q
z6E#{2$~#v_JsplDz)SF&p2=<sg|GuUkFGh|B+FJP+ep95tpW%zb*||67%p$>v|b!2
z1_xx=)M1VtHya4=BYPfvZ~JXMdu2OLnY<`U61oLcf!IA+B;#;vJqq?#%R3iT`7?S{
z7w*Lo16dP!>H$Ode%<uJ*<|c<*zjRr9*VP3!?!N@5ep_n$=0~dfD7f+C~|y;{LhT>
zPq7stF*Eh1<9)d%lq@lTtKtXIr3@&Xb_~7};p3*@sbLtTFn{fvlWP3$>`^&v4zwzD
zK3n<}{{)1e)&m{#+#35fSy4#GWn~GGpErI-A}?_Zc$FM|_d>U%=r=^Fl|kg2SoZ5B
zI8#>Z^=`HLelPb1O)*GZ>0VbCQ`7(@Is$lE-`g2Q@B3K3L9I7sP85u_);T;CAyJKO
z_)Y8^Yz?@?9#LVW*eN~VgemEzDH31-;duH0RZaae5=Ronj+EC(-2BaFX-<h~qo9)?
zQvmknD^ZC<v|we#lWv4%0<b7N+ZX|X@*bk^${5W_73G|OcP;5V8#?w2h;X&yK7~G$
zkL1*MR(t@FQI}nRayEW?akucssnDqrpYR+Q^JvS9a_sje+-)I3bq0;_gHB4uo;xce
zER6CwGxg?znRDfc0>f==81F4Rc=Vq|+8-pTky)<UX^&gmkaq#sguGJk5jgZR#D5HH
z*J|u#7bFI|NW~$I#4S{sRqiG39ZP}7cYx#Q_>BqrX+j9EBpq@|B{Fp;-!UgeEa~xi
z>mQHrKe3GT;j44cvTkMy<>A09EyY!19vyQE<=*@7rH~bjguI16vHZ_;eC7=rR!qoD
z#5;F5OHhW&R?dhK`IO1AGei}G10})MoO3IliA6lw$`R2-h_p!(5)c4ALck4R#e}NH
zW(%*s;g6hY-(=qm!pEU?ZiCU;F7bFhk7{JMC)q_N#N8C{(NcCkEz^Qxeayf23ZKxH
zsB2Te2=aAmkhwOh^$;h9ayzj3B#S6E=$_S_qPHM3+M*s&s{Z{OfPdfai=3&P4dn3b
z$37TpRu@_COFV6_+w`l1o6PNGwc0JrP$9L~<Pkv!gnIj(U{dP7OFK4xh|B=ccq=dE
z)j!}$FF`I2ZVC;ZU;i}%lX;eg5$+Wmg##RJ$qH7<0DwUh#ubkiPCYAXCNIa<S#Es<
z5A&zO{j_IpwGz)%qn?-+f|HtfQFo8%{deb}y)1LHh`n3XHCX;<MrJqb)Xyi-87@}h
zEf2!Yd?|w4fm6410d1gZF3A09t*Akh!xB+mN=@KveLA>nty}slhF87PPy<R{K$6y8
znE;hQ1>|kd&T1HG;55L=7`FtEn~;f*&;yI&gIA9IOVg*VJcz}Vo)>tC%en2n-ag)e
z<%;gYsaNwdQXzCG?|2+<3xWW)%~XJemc}GEGP}lyfa~nfR=V!gh~Tbtx1E}s`G)zS
zFIgCM8?b)Y{ICvk@JgmF0#-2G4dH=mrN0U;K&K(DjWG+d&9(ZR1O7RgI$3c=2lNL!
zUl``tTj8<MTeqrzu}#$)BT%K>%<Ep(aUkKnH(0u7-(%0%ZtPz$bqH9NT9&=(1)Keg
z4b5CvuwalW2Y(9$BDPcjW}v1h&(9ReWt%2zw4y=8Qyi~}V?m`&?PuBnrZwcfmwk(U
z7!DtiOGay^Vu1l7fiznMDlbXvDP~Z=H0;h;5cbB5RYm-V(hUx*^d7QCw1W>Je`h1;
znXzGh5-R6}!OlhUNN0Y-OxfwjD4C58S=IQ297uMIcG9|^(7hwcIXKBAJXh8X0!xoj
z$`%gBaozi&01(@!0Kd{=Mtb|-UBzfUPdWj+RI6LFKl@IjAIx0uUr>ZyJ2kKM)~sDh
ztd!q`XrG0hgf1{8_XHIR8w(6>IB_RKU(&N4Y&RO#fs6bonYDTFZJ&MAQ^R0{T6ELD
zzHOX^9J`JwVg5JvznkEeegc0NJhuUTEeLBpEs;gI*wERUwp)i^H(Ib)?1-<><2qwA
z?2^~ZCN+4wJ)hFxw(~kNP-NV(y!lGr!&v!Vs{n8cC^Y_}FJ~A0OpG+5)is6;u4NgP
z>ozh<Bdl<xwtAsrbXV(EAh@Tb5s9<J|HOqnXhEM2;|T9-Rs*9n{}m_<5ulF7(&e@;
z64(md3MH4uG<wIETc@1F4uY^Au}HsA8AYeg)>suDRKtiMW1vPuLTVWjI#&wb<2QCp
z(;|@p+X}}SDjW>ylfA4`>(q*k?rFZ)@r?s!1f$0!{0jM3#&NYqhc@*gQj__T;Of*J
z1A<+Z*zG#@uF&|O-&zKqFjC$20KuGoa9k8znW>LFNur@T4ar~)vJ3>Y$zwq7eyqN8
z<Wbsvzsc5b(`f7&IhTTMu9R5uYG7{yHaT+1KTUp?>8wkJkN%d{BH+c(egXe(vPLAv
z61NH45mJVzPianT9b38Bmn|AkwUncHs7WDZ8v`v+V7skdu!4Nepq?*w9~%%Q<C;s}
z2{SJ?8E|~zY69MU_5V^OC7M?@JEK8$Q)0y-)Fm?;BO&IVNYfHy4WR#f@d}z!`g`Z&
zL~nVAD(yHyek^Ub8X4TNqnoke*7aoLg+g&Sj+8+2)Hpw#3AHlSJtZLXc|~N10=`Op
z(_A7p7fk{;S1BxUY{E)KM2K6QT1wiz5BiHqZ~#n-7Li=7uiRjOuxZaIzM7)E7pFk|
zKCt;s{qYz^tU4<~AyybtFMK>1NfY7K22=(Bh6uUdrm?Ri1+RKa)R-8O?>nE#+<2Ws
zh;Ov;cm-V?{!hHPm=1|b1dKZk`;IzKwc=qVEnvm(P@6LVW<ss@6Ak@wkCxI_*z!@I
zNFoULGMsSEQGliyX0t5ObgMfpal^dSwW+p~+u-344+?vA7~1(^)~*ks@35vLtSJrq
zCVjn3qMf_!5>ap4kkiG$;MC3R)D(fLvs5I$-H-RACC3<`N~G#{AYq5-?0{u*d~170
zLndT}B-XdR)aasg8aNxyK__bBh@y+cRa04di_nIQYwhIROtTfvwT;1d55isbFry>c
zQoeIIRae?)32;l;Qrf-13pk=bxQ63;yfWNocCZ1BdAPbju&_PlvsFll(ecrp{(-`B
zvdnkP7o>NTdfkO7VL=hYxm*=8hhc>Y(AFXZBHx0-2bgKL^;y;BsP?IerCzIcKzzvf
zeT$H$`)o3k`nP^D(&w0x8_CU;Po;27d@`&5?d@!vKseGg4f35VC6EQN$J6uQp^ga}
zAtQk=g>9L>3OO8)Uf|oDG~iEA8`y-<H%i-SM6WO2T!fbVcGt=n9OlLgK-g{bJozam
znx){?xAjvzeET8?;M~!>4LV0)8NwUQ;XO6D{Q|6NZ|Qnnc4kr2A&9@&zHkg8w;0Zu
zP%a>KF*A#@ZcUs$JSo?`e40~+6}uSe9GA$RWQ+1WWl~yS!MeB7OV%zQh@4YgUwUgG
zR_F7F;)Ks*^JhO~NL}ld_!Xwt3FT!RN1eykDWca~OPCD|Pd&G*i<2hMjsy<J&-Hhd
zlDv7SGt+Km6cKyxGCQDxzC<G0{Lt4dFWvJsn8r%DVZWe_-sYT+(4#L>rPPgXp&}>I
z`^+41BlxgHnvVxEmQ<EUaGh~BPct!-|B-DM7^pl4TYP2!&~Krqpqnf)sK!vG;beFm
zOgVGs3E9F4w!>T_^?;$MZU%aJ>{BZ1Ug4Fe=NY;9`o`hrja}AlsOSwCv{-Q7@RAKw
z1~o1(>{;1zzrkwLn3F8cwe?L!W|D_Udn+P2i}bUD!=@$4p`rZn)YjPw>fX&(Vac<m
zw#K{c7EUzzV(*tAP{id<&T=7AHWQW0nxso~z4t55jH}};q*f@>G)nP2PeQmtec8KR
zW4dSvp2ZoYUL=BzT3*b-7bArul~nr2_nnko6jkw}hK^y{rZlCCQ51ILCs&M(+}mAQ
z0c07lFU9;IItHCvT`BX!sm$VbrWT33tg7Uu(tVTR)d#ok8%!*U*eaqPhxO$lZRu_8
zH^{}^<PU0p>qTd=GK---ckr;P-A^F9&)kZQ?U2iuoAi9E0IvR|>Tc$`VFwsB$}>q%
zFl1c*mQ77&w@F8<S=xQRFAk2Dh`NneO#&LT%~?Ym{LN|x!FrIDD#CB#Zj>rZQUgYV
zduJBW4tV@yOSlM<B_N$9Q~xa`)9C%F`Z{hQatp-;pSF!}q!Q`Y5ipc))Y9?UN;N%<
zYw~3iJ$mBYdl>r3i(^i7GeW{6$^V&mAsiKaDw4;nLsM3tIj&9M2M>Kb)2Z>Q6#Ptk
z;57k}5~drZqz_9x6KAhdb?X2|s!DuE(t}itn`Y+aILMz9DC6CRn_+c^ibsNZ;L=l-
z44fD%@#chjwJC`{1yU&&h<bH}*T2i+uJgk}q?+oesd~gT>`zbYdlWoMH)p9<`F50H
zDt=^{XDa!t2gc)}3k2_*Xs+TJd427krn8Zp6>_1H`m+B>8as)TOrq#;tx2h)Ss5Z^
z`d3+Erovp{TbEg}!8_1(_8$?87X6uHxk_6_Ek4@t%uor$>)8<1MtDFJv9&+|7P3-G
zv7qM>QSME%@i%!{ai7oY8%{V>f^Q26d&5PR!?#JOkQdmV2dG?KuK|qgop)Q?kcGn~
zPiFXlymIM^hObq1^h>5hDYGC)<y{hb+A5()3Xu7wOUubpz;r|BtGptC@-$myx`pJF
z(jWp?jVe3m@lv+}u%-~T9Orw{4j@bH=YNHG0(AlTGe5Q*9X|Cp+aORxKW<OCT<MO=
zqtsQsB<S%_E?>iGL#__Q4l!p?T{6Sf|A8WqUvPk!Q<gQ}_5VA><Ceta$mW>irF&K{
zVro}0w)Debpi*3V=<)B+^Pv-I*G?CN@=U;?UgDqk>FaqbO&Ya!yg^`Q(W1vV44c}^
z#dP9fuKzCa0csQ~h;&;(K%^d&@?^NQwt|si$T<B<FO+i2;QIpengaMjT4$yc{sX|A
zL>|>R9h*5;zu0Bhj|Yll@ET&rBTh?K+2G)g!RFI+wZqHAt){w>Ni5-j=3Dx-i)mun
zQ%8)*jHHN71&~g5<$<=i?ygONn<R+F+y$>FPMSa9fsBCZ6yCkNM*R4q=vcc+%hk?)
z4KKnp^sU?D4D9?K)1~@4N9%<$Ybn?Iv#h?_lnq-W=e{lIph8h5>vZZpwCoXORs8cJ
zjZby1p!qz}h~)fO1DLd5B2%N!9HaaX5S?BMaxp}?Dd^+iaqx4bF_EHu(>h+al_w-;
zk?eu>ITSg-cI7axW`*ADLXRQ+Nud1!xVkZ27&i-IP5B-~+)>|b)0%<|(Fnh0kxvQt
z+Ac<;b@kaRbJg*uZEbBfmXBKaXXkpQ|KkE88|+-{%6C_hNQDz=mfkSQW^veqC%2$?
zgwXbf=0rP<Qz1No!7f;ysjXODi$<ARre(l^S;bw`k-%O`1J=bnRMR(r)V5_H6d)$E
z9fH?#bQp4auAV4qT7+kk{B*rpTJhE!&A&LBbbLx@njiv-zfrR2kiNkrke{i{A87xb
zsyAphk4=`oZ|-4wZV5=V!BNs;O7~EyW0taU?W*4{13{BWx1ICK#Y@~uI4zFIMw>s~
z3RO3X3eURS+YL>edlnW!mYKR=6^g?F%${~ObzccrqIzgJCdkX{E!ve4l)+-JyC`}*
zIiQ7h>C9RFU11v4zzH~yFP##Ga3ZMKRWwGped3HZ3~lS*3r?}c8MjZ@F^7*A0x?Ds
z=>IzGQk&I(fV%#ypG_UQ@`_uZ(Mn8P#BrGwM+k3<%cT9`d_p~^&70C)moHSjd<9Bf
z^=Zab0RT(`>$A&y9y90U6s)@BEqt*}W~h)pY@%;U$q8(aPXXW|>hxuS{qeT$gvgWh
zn^SC0sFvu@I_ALd7v_vwhLCsP!+5>Mh1<Q;drJ-H$?QnvxaZ$jfRxHtmE*R)B|7zU
zhZ+a3noE`)Rzc{hDt@v%`!&h$2nOy7Jp^10nnLXf--vHEQ9pG4zhrxvhmH$-3tE?2
zXDy`Ix3>|<``yWQt5?-U9~`~uYS)OHE$)*iBD?QTokFK~uu^SV{ngvV4RZTDF?xe2
z<>`w?r1eI^pX}cyDqxB~H$?V79h{-X8^pBZYi%fS3RF>RjU3{oL^(gAw70DnZH}OC
z?b!GB__S;jLE`WktYo1;Ol)>z--dfzs+q1DIyu_vE9i<3V$t{3^xLK^k!jt4m*#3E
z?Q?n!$RE%hnmM4&cBPB!=+ufL`FOb}-aiHV`w~fUgZwszOLfI3mIZWX2-_I6{U$xq
zA+mr27KqVh_B|nnz!7y#_G_ET!OzyQ;EE*YXM0cel7G|UH88S(2`0jkfr1efoHbP7
zRT2dgmlM(It<6`asa-hL3Bbp_pKWP8SZsY%C2k&xqXsu8+j`+O=V{X*ptQ3*A?wG~
z`2PC$uw8cp!AXSv%kB4=(VxsoEgJY(8~ckLtC|U6fpgJKYp2cH%+>uHsc9(qAM{wx
zIcLN`^byi+SXi1?XLFY7uhxWY7so_xpe@!oB6C!tNs!R3ZHqUIJ9q}II3WIprlXuq
zzkn9g(@mNFk-Co&BuW8__ubWI1@-{WHL=ynK?sPn#h3D~w!Pdp^UxB8XItL)FkfGm
zT&Zq&clC)2s`{kE{1}}%mr{OO(s-GrgpDno|7`Zdox^f2@G;E^G>$wTeXyZwtM^;G
z*^(PI>dSzLqA88J@(t&W?illQaN4AtTRGp?T%Mor1=aA>+xB1|52wwGzKSz?#-qpm
zW*Aj@e*g$au-Z9}j_<Lap1dfuet^wJl2aXbc74az7FPeP;hbvnco*|0|5hrR!MNhh
zDx*(QZ<BQ}R1O;A&KP!(dTlCQnt};k#&BMd`JN5TY48aN6hkaF)ecJa_Ed!M%XBA5
z(==~gYJre`@SFK09U#d?wp~FlK{1Wg8Lb!>^EccJ6GA-pDpL)6hovInx!c`<#aZ=Y
zxdcH%GjL3oYHNVhtkDaCkAI={XFEH<rHUB~Wh}oe3UN@)`#Mk&_ej8j0bCP@YpZo3
zSC(wGJA6EJSl#T=*uzcY5!yQ@bhM4C0kTxqc;{1Fi7*a36Y^fv8AG%FynFqdrVv9%
z?km({E~(!%KNkf7YlFVc4?8P!g9h2)QaP#9fmB=PH*#1S?FZ7&j=%Ggs9wkSZG=_J
zG#~O6roIy(SuHHBH<eD4cbD)NjOT8da&23s%7?L<jCKj(V}?{Qvxgdb_;t_2pDj$C
zE<K(!7K|NQr6U_|C47Hn85?~z-%<jyCr53p3P-3xNVy!FB>6+n67SkOri8@=-~3em
z>KL&mVk{4oiM=gIH#S!o0{0fY<8V~_errf(k!R={p?hz1Dsvp}!aq%AIvqmfNtY2d
zS&j_$U=)VV_eD+Tt%jCT05>YUt`<q2B=k}l-F@tgBB*Btj#+)(kCr-Z!*TK}J^!@?
zJk>hCQKK#M4|x9qaZ^uHuK_2frFMizcC4q>nvv@I=#s1@Y24^xR4EK978{P%p5$A3
zWK0Xg(>J4RU(bC;1InOYMwbBkycH_+JhgaE`VZB5Uk54oK^HPbye|)qL!YF>Ou*Z+
zx20z3mamCYDB;>d-|T6hp~d^2BnRNIRafB^%v0N<XZ<}KHTqnlmu9_eaIpirmK#7B
z7tzlbs{l?W4U*6GtdCxVX7vuqYD=BB8lfj>A5%J5E#isbGF6~cRt4iVgt=*zBhbDS
zB%ktiuE>oHZC_EPl*PZ;$pmaeldSKuMs(q)cv%F#uz-?FKJ6fhyO6zP?}Dyzr@-5j
z9jUs>pvarn9YOuYjGufz03)D7TeZ{q3Aq!wbGI-3;Z`1qgNnedF033wnSRyP{C(2f
zTHp|;XB`5`zQ-|a#Uc7F-0G_sXk)oSN6o(!V}0$oI6dYo(xf4RUfrYP0hYZ6_@x$z
zKcj6p(Gtg3gvoNhzpubWLW@$GZ{nCOH=d{PE2=3gd+fSd=jWp7m#{TYV?yh7RTpg$
z96qsCdamX2(iqd&Lr&hS5+ua{h8?sDmZE(C`&}E_;4Z98tM#!q<-lW+OG1Y4gr%z2
zvL|^{yH;dS=ARbRp)~)j*IVdq;c=H=X|KOF`s{EbG1i5Hd(24gfcq5V`R@Bz=+3`9
zR#uD~d{7qaeK6P2?}oi<Fx$?MJMuu!MY}2gQkShKaA_Vrgw__AjS!l6*A5gw><4Sa
zh~Gh9=gC#`B(Gw-bTe}rf$pdhz}derIF-pjhEVZQGL;|-87N-gU`i3a+6D|o#p9Ti
zj!TMGot<fit|?%U03r+Gr00PE$*xgogyuZ3tkMHUY~`I1-NG2;Z()@Aan#Pv2LkHT
zOI)(w$o<qSMnz9&yyS_MN5c!Y;z1ii!ar*%h0>&1S;rt($D!rfck=^x?lPKrkiZY8
z0dpJdbh8+P+-b?@0zSL)*5L;Z`bxRN(g1T4?$W1H+|I^LS*L$|l4;3`MU<GV<yFSY
z2vSf1F`m21?jJ=~C2}IbG(c@gV#C9$RrLe(ZYQBXc|q>36J`3xun?kIV0EyXmgYf2
zmU4?;`m9?E9)<o&@Iv&26ZycZ(c+oDIBM@{rLhAepob5(<>8zC`ip?6{93(Klk|Pd
z?Az|W8Q_k_E2~8&VsL5hRUF*;gsw!iz;{dH4I&l(!)q%t45II8)14FB3*STOnr!jM
zS?Rc_Ebuo;iGHna=YpUpNjgSpo9JeNM817;MvJ&MjSQpGb=>d8Z63t_=^4%}`HJno
zbRt71z;jydP+y}GWT$x@G3h_e4^G>(4%4E@h0^j6aSz5!U8H=5VttC53QMO8REvbl
zbt-mseWx+%zMbI%@gw$ay{dBh_KuE1EA&CAwflc*zoHdk)P=at-KuBdh#gQotE=yh
zd$8ItZXDw(PJ{dvp)jWv<B#^-GB!Jo8lyD%t?_^PFCEN(nAdcf-CgFpK;ID<u%qo)
zavWqJVTR&*unuh(@e1DDU(Xz^A#S074uY3%dIyT&=MC<Kkvq$L06u`zxHH4*VQ)ZZ
z>jgE4p|K5=kQ!IDCb>Vt{7#Bm7E%SuH3L`E`Obk(+Jt8JIC2>=UU4k&hxzkc;=0iz
z^1eU2RGcK-KI{K`O~CxgbqjdC`D6w`B{xLrk&u$FM~dY>%0lB2Ix2szKqiNbhu+Lm
z&}S)|;{YUv9YF#G_-?tM6>_$`ogjm%OmcPs*wP${;+!Dw@`v={zRTnM0%}2>ybi5Z
z_eTv6=+f94W7kBlX;GbH$Mp8FiN|_uU!d|CYnl7}@>{d2HC|s^=$eapYt`R2r!GYV
zDQ`Sco;Izm|M}<(**p_4R+$61of9>un&lm_%zh-k_jX>TWVIU_gjXhdT4!l-+L#Ai
zKmF3@KVxi8Tp+?nF!E_M^*J6u+76(QA|o#*!;fEO_&6&|d2Gz7TUEREcLSjsVda_5
zf~bfdt<z@Z8z0;pF_v4oE0_lf@vT$*#KN@Qm^5Q$)Ke+0=1;)g%KYWalDQ+yA_z3t
zsYbMi7tQFHqo1eXPX2CS`lFk|8{glNVP*%g45ajg2n@zg>-6l);4}?HpMU>1`9RXK
z&7n@BPtU~L>1%*SHZ<)hv1z*uR<&p6ztx>ar9M6_KGgT;lCq+#dB4I(q!yTzz?*(s
zN8Q6cSmT(EG&+(!fqy!fgzP%)5ENS_GERj8=j-t@1e~2B*2=@rp~q$E0mss-ZckN#
zOrdQ4`KVx)(aDafxP3*eRNs9T@CoN&E~3l8JT_w8{0KCp)C`KV#sQuH^B;Ia9th@P
zu=L`vbnRxiWY)o%K{~_c%RaRN66hd(I^grWh}#<NWLde{Vg_Ql0*4xYmnu(a!yeXg
zKE}N`Qkk+?Ietb(X$IFp1y~|B3!{_kjEhnQ9=Rjk=v4AO{;LR<XO^JwkYN*jNGy^e
zq7J!s8<ENc;o%x8H+awRjtYIFW$YrLUBN;+e-4PC4+gi3xfAJZ;DJ4U5zD400c^3B
zpuWV<i2e1pP<FbcTxv573wU^yOZI}%t4#cR+QWqCXN(iQ<bxIdRV5~_ah%y%(KnJu
zey$hE;p}bFLM^@;7J#o?@5Cdf`&u{oB@I-K?WHH(fM;KDu7;NI0Yr`*Xl%>ix_I-T
zsxsy612#mgL_{-BG|HTA(+Lq2ihZvJIb^51rBgOI8^+y_6;lH4El#2~+sd1Y<iI8^
zdJSCF&;?;%l7oWbBi<`}fy0}2F5qy$TO$IfEMr)SM#k9uxNPIvs7D|UTpXwPErk=6
zm(<`=;IAID$4k>@l$(hp(^4DY4Fvr;xbNv=r9FqTO}QK7YvhDfh}7TM{5eTHRp7^S
z;^-eFJacW+W@&5qTDAVqqHzhIA(a+a|7;gQ(<Pv|x(mGlnWW1|I{^^`2zSt*`&=}0
z)*X3*R$UNvEXR4pO+dk|$NmoZlt+$mH~f#As@AZo7=B;1UCur^>)OhEMe+TAp|PqQ
zaIz`1ka|e=S>GXlI{WcR-QL-Gfw9Rq)TG*P)mRWate8T&lDrl0_vvJd)NFWV#OU$M
zjbcoh1hEHX!24w<hD|V#IMXWr9PPlXRPA<oN0WF66|1AS`QY7Cc)||^3X~t4C-Xj_
zA}b5to4C<>)94<^a^+-W6yO>?;@jUVtLF~Hwo~fXBrj4(Vv{QsjaFu|Q{Tt?Q=SW$
z)n1-MFMuG~$&2;B+&P<aMRBeXdB8U2xwcCVgBwpH+tlsCrdY#^phoj$0k23RJPBMQ
z=uk;D?|tqBCY%J^$c4r%mxtuLKEhKwN$FA2YQ+*^`a0VMrT6(k-%#G9X=jx@9jkge
zijtI^?2TfJ367yMgqn+VD?lzS-^a(tbU*-c>zoinYL<eec?f!+nZT|EyaNxT^2YSw
zekwkuYg-f|6~Ga(N3|7Le_m`9JHRagmDv({{i1yiRb)*;3MPg;G~fD)fe8<An%ng-
zk_Apu<v+0TeADh@^eH|{z@?qMSsyuN!-|+CTfLo>5ezHvHs}~skQCNrh-bM{98hLk
zrS%s5#Mjn{l9X>35@%p;NPX*pM!1x%s+Oq;WlrJ8Cu-grG#x;P56n#AIOJc^Z3NZ;
zMclR+D`)7HpMQ6v|3sbF3SxBO&<U_li{f~!!7{7LVzDR(k|Un~P)j>`PmbB9xk8)?
zE&?W4_WpO=2%<f<qW(o~^|@E}Gn;osFRF&jty>_yto%CXIe2V;#<2ZA*g(>)(RWWY
zoV#_KHH0uz&B|8sDK#K~M=rj{5sN+bsM}QvEV81q`gxz*Z(Gsp{pm-J;#zdb(cl7W
zMF<KGU<_+&0bNBG0;)YFZ;TTmd|{!L5c1I!q1)LsDQgvHJ=9eX$Bsunu-Q3<<y%L(
z#VxwCRN^$8>EM4Wko9l2+K6@s>_q8GK+h!dp;(A@p})`#Ig>ZqW$s<nADYg}rdB^n
zD*7P1^laJt{P~6!FS6r2chg2VE;Ih<p*o?XUgRE3YQCye`BRIq4-0LiZcXFOrPiL_
z4P@LPaL3q6iw~_#GL)al4>)hM&1Agz7fI+`g*4F)@IlD9%_VrnR%hQD+d%uPtevP$
zy&?yY`G>coZFHMz0<AHjc8Fe<o(BzATN^_MoOTOlhF2L}0PR(PU7bMzDo|u-KwECx
ze5yKT!K~m$9vib5DIG2l=k544(^~A7x)1J6n^7Jx5V&}|U5p5-3z?}Y&K+MhD0{2n
zsj#z<j1MfU@~-Z4=5TYHOE<fHlK8YMvMFwIDg*AYu{KHM)m&E(*MAiB$c@O1?(%g=
zL5yKl=?A7UJu%}6oNB5*8aQ7>uZBW*E8fc)#KnCU1&r|_yqb_L4}0vRnPaGQ3{@0`
zC~rBPzqY;*Zd<>gKgi_gZEB>*ruSQO`c=_nWnX87Yfdzad>o-jeQsUy5yx__QPWMV
zuQMl4cIT~mNxYm#0&c316sJy}SCb6Gev?ID9ea>5q%@{!JbP0A4swzFt!-08UN@0%
zRwN{%MMW4%j~6W|asrZn%{$w_@DsQKj|_8U?vckB&;hEHg4XYxkn5x4G@nO&k|at|
z=GEt6F}ySRqAs_|iOhoDSEm9BYaXL;=g&te-^tCZo1>)|A;Sr<t()H41LJG%34;9y
zSDD~*KF1uP;uT%RgAADl0|ww6ganZ6X;Dov20s|i??jXKbzeJFB58|GM@NkY?X+xl
zyMZ%jQ|WM<gs_sGZ~Rgj?&Ko(!;?+|$v~>KhfYMxVtU7+1c9=0)=}`sXzk~;dx4*-
zPO(?bQ1I2spE(tdz$+Id@wyb^GU6%!Kc<pBbcjIbZTk{CG(bh*{j*&HpU!^|H0NQl
zh%2+?@q9Z5Lza(8*pZR>=0$6;Se!yAFR}0Mx=%<;FNt`baw!P33Jyslbug<PBHai^
zhhzK!nM5O&j&XBRfqAEU8V5XVXz<HTf!_6d_d7C2`gJ=(Ll|ysG4|m`%KFtn?nm5c
zUi`j{S(<Ld7x@Ufv<8wBLM@|@s~sP}sYIBVt7%@_dW4Eq&rb?TI^}>~%f0VaV5!A8
zrLTK>7B>)Z(&?=rt#+ACgnWR=b%;PxijUO`;yDiDrxX^Kdo^IWWdd3X@arw}TQ}eo
zfN8A9W5Xpj(k=Si0EAqD88<9QX+}rUhoMj%^YVGy!>AUAx4heRE*w!u20<N5^5G@d
ziLeZ8&q2}&%Q=v70~($tIZ?{;ltGv^?0r~FRRdnsDLR9$EhGIjL-@q>v7LGaep(>O
zUuE)in8Tv%SSs(zzn2bz)406;F5>JPCcQ}W{vK+F3+{8l_rB^fQWgHPZ!-a%*`3io
z+mFf`FKJ;OMMdFSYTW(SJYy+3oWyKS*w8tjcPfiE-E~8rg+n1obW)_+SjU4e97GT*
z)!ZR<6(fiMHI#af+ik$Cryh{PUxIB0lh9biqqWT8obyctH;2dLRd!&dW8UQqosDKh
zd651emCa??CX+iK8+&Mt=llsd=C-#HG6PVDbJED2@l)!*pk-<$>E0xbybh0XOJ7FT
z$*`ss`?-<Wk9qtD<i_PrQ{a!t-QuW8I-vS?J|-NQn_b6=yV~3FgGhZnv;~H(N2d7~
zn|O|3V{pL|JsSMJamo2`hH#<d!IY&$I3LAF&}&hY<m|4i{KrXYJh%E8q?>6OVp-{l
ze(~Hua!#P{pBikk`g9)C(e1FGJ+(X_A=)wWFc61=l#1A6tO-E<R#+e6i;X}wnhj1T
z>dT$SUWI+0@c5kQmeTz*sJpUy7V_IL&K-9O9C?ZZN<iAn>35xOW$}e!f%da3ejIWX
zgP|`E96zBTZZ*-IUbjfO+D*pb0Bs=nVd*br{vKpNK8UH~TiDEajQFdh90(mQu4{$3
zSS%{-m|Tir5*OTbwcV2KB5^Uj0C)3!QPR}D#4B(dy?%A3SjSGkf7riuPdoZg2zN}x
zMz-`L8hD|HuTF6TDP=1LAQ#j~i0w(n%-^>eM!svR2%OWzJAfK8Vb*0*FgK0TpCS$B
z>QbqW0X|vb_`bvrh6c~ifZqLtz3@1LLPDgRJaJsBEI>-4S~HMVO+Y|-Y75TjGfRlC
zdE?JxhCC_JKHI(C_|g;8-Wfoa6Oy@Co(KITk{5dBLz<;5(lRfcyWYKT)jLn4v^{3+
zn{=IOTy}Z5I3Cffag{h$JK2q&#}q-K-xOnUj+FN65I4M$;75m{*fmB6?Kb*_daKf+
z^L5ANR<$d^GRY}kPPJ-pqs~BqXHMovQz0hE8Qb=H*Q0#!mrm9Ut(R`6aQD-42+KQC
zHTVG7%!E^CZ`wtwegDJr;&;2;M;7_8BN2f!u8aT<EH1a<=_UWNYe<}i`X7rItAgvn
zvq*e!y+CKo+Uo01yqC24Ac>t{@vl<~gqzm;dJqyFKJsYA%zc@9+Y9RUA;;l|fTf#;
zO3qmvWfJ>B)ZRcQb#7hNzcS{Rz|G6pv^*xKVf$E$oifxx!Vmu315=w=Rkga~mEgNT
z<0Qs|;^U1^T-f$`a(pDq;1IrFAs#4-+ghO4VdInVg(8p)`Ri4EQhp2*^9bG~G;37C
zuoK9NzcPrn_6dZ)`An`6<d~F~T_e5sHwN>LO;(|(gio^Af|@tO!+uSnCZKjWALOpC
zy$26sCs&ws%CZSjks^Cp;#ud0<e6u<vdQl{NC)=Vrl^tI5{C8gg53>mCAIW|b?RU_
z$i$w&31TbvLdhK;Q^oLpJhoWfc4xVn&PrHBx#awwx5tEZuK?fB)lKu76w)Afo@JxF
z$NWaD#qcBvGW%F+eI5NA%uOq7OS;0_$63?Oe(zDqj?+ZcS7|i`xqc~&Tdu9{kJG}B
zg)WaC8RT5F&nqu&fNG3_)4PSU@(U7BC$Tu`6?t0?ya^tF2cBI%jYk|35#MU#@+uM!
zMaai$P^+BhR+cfw-2w@6BRG@hoX_z40ht-?jZ<I|kiA@Idw_-Fnwol$ASUHp{&|iM
z#Leku(LSC!M)yd38WaVtAS`^>rJDs-yX+6Mj5JKFab6`xQ-IV?y8M!BPV)lZ4`7;U
z07Eey+F{^u^lhF%sJL!2RlBaHwRDOAKV_1^sH%-Yhf84xYBZdX+EIcM1H&{~izMFk
znkQ9%46)zher1&#ylWIKk^{F^dMz5xA_QH$Ue&$EDie<pXB!~vK3k7+5^AHRxQ-Yn
z#Sh&A0(s>5OMCN1eR;fu0(&|EstK^PL}a%&r0h<3LmhO^G~AZ5|J0XV0<RuZ(_bkX
z<bwQv|6T<Fv??kACFv<B6<e(^^IdN5!?Y8bb6e8U3f@($NaOVcoG!l!5<pS+bOh&!
zq-H6O?z%e|XHF#QHP2<A2P+67GYgrrsaeBT3KJzMlRAmSkfrVhwaF^<XMS|UA`Lia
z1Hx+KEgLi0gc@fc9FmMrHWF7!5wdih3wU*pm#aq?3~9_uut)chVaqA8sl)Wpjvqv>
zx*a^=r6@lwgru^qn#O2_5znO1C1SJMrqN};|9tGBhRQ$l38^AV!nu*p8IGsWCtAWi
z4$BytqqZ+_G#}+E3u4A@W(SgoS066xZP#JPa9ha`njg|oe;ZWMrkf8R4XePPmILBG
ztetG{+TX;pw4kQ78*mkme|)E?(k&5Q3-+8uGkleq`+~JiF~_9fM2FrjGSe_x2)(b=
z(*K?1L=NDg;iSQJ`_3>@9RvgR%eq|SaQ4N|UZb#F&CpujXvUz$dAtBq8_4oi4qCIM
zNLB8`Sq-kJ0YcJXnM5c3L!sBuSE(HXZmxVHZ-@uY;iwEF3swG|3Y(e3xQ^@RP<6%e
z&0`C3mROy$I>IyXj<~BZ3W&)Uj4+~9)TVQrWd(Hjem9(U-RCi7*&}x8<J&JXGng-s
z(Hdm^zsUlbptYQYT+VSwyU?3(RzXGH6R0pDXt?8_BMVl96Hoi6qDHtPi1N`?o9j&o
zhpdQSjmh8W_AEAjUv-pMZ7}tAbq4&rm26piC8(Tvc(DV1)lrl{u4XG4AUR6zLx1cC
z07x0%w0s#BbZ&^?C0-{go4nBW<(Bl2JOBzuwkR$t{+#J6iim=g><P>pTf=yTyiQ(V
z4Xf}~I2GJ2)QO@+@gPt0eH2g5Zezy>;eK8LhuK=|vt+_QDMG^cWGSfHco%Q2>g8tx
zntOB$1Kvyap|RsFPjzHrMgpk)948QVubGmIV|r2{+EM%H(uw`}CKsU!CZ6RSU>f^D
zh9(ld4_3t+D`cW6BaF4mA|+W2-W}iF$xZqwEkaQTJePE0o{~cNV&Q+=%gP0pOj#T}
z?0X`-#INU%2xcrgpff57>(uG9tyNfGzq#_vW0{5}P%H4&6RXAExWRwR1ZxW$3}BWb
zjdjfV8ms8CvkYzuEmrtJ`!>+;<wy8<V!(#{^ecbhj9P99*YRZK-$D4AlT;5mx1J7E
z6FZbSeAE2g@73CvBl!mHaGQ;iLMsNjs+vn18$-OdJ4Rm|-daxF=#5TVVwS|baB~#q
z{fKouySKVWkuj+y)I=#LMoMk)V&*c=H-S!HbkpX_GnU(FDe^A1e{ubi2ydE8OKTW<
zSoVCVs!<%^4EgSxYZgWWm?_$O$^RyD<ZFlTRs{I7g}MKBBrl&SE&BWEP1_{XK==&1
zm=&m<BSQD^N@rt-i3(EuO|G0u1u<gJ`=4(SmQHfQGs*$yfg3Cg1lJ!P6xJ84SRPXD
z?uhT9th~ExYs6}M@utBA2bW+*(?H-t>+d%5tHJ08r46l4MXMsa)oAzG9K<#FV-TM{
z;g~!gd^CiHJC6sIXn5K%vw0u?KCZ0BLH6FNv1<oVLwq~!2+Rh=dw(8h4t*atLj#`f
z;+XsS;tfo$%RZ_n$*R|K3kDpuc{gVB(}WK4f=#NJpn6ST;EP?Du7*L;z?SejL(S-B
z=3Tkx5WuMk^xPh4&shs=7%l?mqXpc~+U2>h*+k!?w80_n*#HgyPr>X^O5%-7O!DEf
z55qIRm+pg=d)VcicaDaw+6aeEQ5$k<yMoLctD#%}x&vj-XK!=M;5f{Dgm4)`Iiep{
zV_>76+_aS{>oAcrAL<tT4=Ud=EL{g$zD{Gty(uMlBi|Eo0BLZDJw7S|FLPR6_Yk*&
z!LV{kDVW~?J3z$0{)F({-%l57sqn4et|+Qt05gPieqTH~w1QLE=Gbogm5+!<zMj@D
zDIx^a>?`l6j|)#aUrT^*D+x#ir2QDLh1Jm97nDO_Pb9Avs#5-k#d6yF0iQzV{j#3t
za`T+vI%<Mpelu&(wwAMe-Ugj{VqyK`D+v`ZQ%;Q@kKM^ChACu7NaRPq2e<NXo+Eew
zT6#Y~zWkfnY-9-B6mCkQ?BFDZkvW~A;$5sRb3cJ~1Fedd?Z0tID+f<if2C_nNa&fS
z|J}VjUkiQTZi%+0(>PJrnwHZq5W=~olH%zb-RpMt3jm7EQ7q7FUOFdWA+IWKzHY)m
zyws|LA!c0nLaI^U)YAiSaephjMF(}o&K<&<IaV*928SpudP95aNiPn<kyLV$VbSmX
z(FBeJZoj}=7A*^?T-;=n8DyF`!~)9cl)w`AWco?wS2@g5@c>47khnQ=>1r-cc-ns$
zO7Y3y%CPGqr;A`T=uUCizqTZezuIrK>N8^Yn5MOgU>{X5K1?5cCma2Sa%^elu%5!a
z9giAtW~Z-N)Ebg~ig`77?tsmsR9vu$8e+?PzU;5!+C?|HB*mtqUhuwG&P%hmMe>-7
zRGape36UZ_yOkrHn6qwx{+_LYUqea$U?wmlg7+2{ss9u;0pS|;4iPE<+6a!}{Q0-f
z_X@V2CEJ-_SWnL2Zo*h-;!iw*{=J_u#qqgPqaVt*&2YGSy15`S<+=gwU%Z4JH0gG(
z6^-Yr;(OWq`bPKN3OVKP3Q@=Jn9Hm&$?uV{m*CPH2nb^JHmhLRB9d6cQwn5|E`Z|<
zuHo1`ILBC4qFvJu#aFQhI3Q<eI9W64+OB<5JpuYRihEo}htaFghA%PFo??g0l!^Db
z5#h2>N$)#5^;u+~gbWMPg%r~&EEc6D2B}=9@%vt*>&b^m(Wl;q1+1EjhykbP>oIKy
z7$H1O-+VUkT*^VG940N{@e*piq`sXdk4j;j*KEFTq;I*S6&-|{G8)=uhv50Z&IfO9
z>1@VBXy26j5sbDnoP)@$l*1Q5t`|&S*V#Y({Ffk$sH%5tdtBN))&WD<HB=zkbrlWz
zr}l>t^v$DcVPCcKg@ADf?t{V6QMWy0RT6F^`tl(%sgP8A^O8W8xA>(#T1LC#)YaJG
zSvSp%CiT4vHn-}pHk+EiRMuH4Mz}VKkod(5BZfu#jV-FW8+<O5;3|UnXj<O|NN(3c
z8%bnxSZrEMji*57Qmhr)opY>}xyFxG4}eJFLt3DVFu88*a)1G*xZJNV4ySFxFDMZU
zO@3Bc7`!l8neD?9k;E6JTpIidy=uVpk<pTSru-sOAgbV8@V-BMcclY#Lm9jzt5K)n
zw^@kR{oTaV`-g+F?k15j`Xh5qBVbT;v>m|b?PS#Kul?9iq5m+YtJS(kY}Skigpbmv
zuzHTUMbL5>f|_u(8*B=M83D|KkLt|04e?t9p<d*-IC%tbA{*TN%!Mf8Dp}-qXse>Z
zo+Q5QQ(vjAMy>kcD-p39jCO>%SczID3gKca+A-5riRZ82bg#-)U4)c)l~vRe$FRgz
zjEmc#KTu(B46Q9iY3uX-skV=I&Ah!Q6P`5t9$c)h1}XbK$9@#3CWSdMk3f)|8QzF)
z|8Fi4{l3+Q-!r}D{lvff#8V<ipU`)rTBhIq49%aS(R@>HwErOWIW*u^-Bxmwg%6L`
z*4h~=anPV!<%{s<-OAh9pHC{u>h$~VRmafSL+=GTXaDr9-jYNIuI!9<KM)bQFN}+e
zSIwbGGB~c)eTHa#JacIzEdm2t@O%2OXL9dPslU;MYm|9@qeLA5i}o3AodiJ`LA|An
zk^zzvgpX~orYEEB)M&l_Pku9tvmnJP?(Gs`osJmH*67*eF8MO_G$BgZwvb*#v7gUv
z0*z3Fvgl0m3s-4aK7;!%846a&)Ja@$TD*;d3+1pvSF=`hEBoehgReVVpmt|OiVim(
zz_-9MhHIF6p_(yKqLxU&e5})rd0)whZ6yNSHApI>b9CQfJHT-8h3;{{3)=`garJm-
zAvMY6XYo<0ltCPV;J*$9^X1GB_h2HVEOX}Z{u$DLEMGz^qgD_0Oq~-!PP|WJiJcDJ
z5E0_M#37nYJ0Ld5y0u@FG_JrOBn_%e<RPD{fN3HDw)39Ht$Hh@%Wt{C`VDDbGYcZA
zDkzd<Q5Qu8;qR&X*hSyFzGAU+JH|cy@o^g5f$(`$y1l+T8;H<QkJ0@q)5Oy+cPFYh
zuje}=Uvea`1$uem;^+z6wu#+%%KKRB=(rjzR2iIVowA&*{8a2RxBfzY*exxk(cC!N
zTw*;x>u(n1o1}akmc_y%2x@sCv0#6@nXFUiqfvt}nB_kPDBuripIE$k_z0To%z3g1
zF-$KxdRl(lQ`zoz=;&A`bclEvN}B9oIS3EVGU%)W1G_$A%^LAc;*szdxPn@?;XMMw
zQ$dim6xePZqOP7f&qFCnPIB-|M)Yw;qJW#~r{QYeBAZJarwoR*jdg~nw?VUG`CXu_
zY521%f}qgUa#kx;)5%DkxSo9|?)hr!aM(|V{MhSjR8*K+@mpd^Y&}GE6wk$FIjRUy
zmhItsmebmFWsfg9@{ouBUu0HDoi#ZuDJ!#FBEv&!(D-TMl){WSxvwm9Bz;K>BFLp`
zi-tP?iyCt;-8<O=;Yxm5y$O%qe1+P=n0XQ#Ovj*QSxteXjxDF^{dAQ7Gbw`zO_?nJ
z<$_v`r+)z5pV{&1SXpQ7M9t|AG0a=ZbKXX9?WgAJSgpoQhcI_d+!qs<t&;QY{>^U|
ztB}40Z*Wn4iHEkXT0M}xVXNo$Y^rNK3e72?nm_`ZHyBPc6jP$dmTcf<qUe&i>L?vd
zqDJ4M^JuU?!Slzj{b2=0h7FCJ@cV9%^F|n2>^c$U;e?*jCxtAhaM#`YqTR6kL;6?J
z0mU{Yjth6F7?oRxf~MQV<4kR%)P)iTS|LSNDSrv0-WS?38UQnO>DUf!<27`_JDqgi
zk<}T6l=%dumw(x$N3w~vqiwowmnw)z`N_m(^)})?Qkh=liRv<Y%i~kdxu)cZUr2nE
z(d90_&;%|uxRUtV&vFl8D*}#9dUxK+xH#hm4?39sE3SM2j3&%ffUaa;UK1#%_5Rvt
ze&3ag$`RqQ_>xvD7JK572(C*2X!q7Mj3$skvCtv0!2c8+X@p=K)>EW4)Vnc)gVKLZ
zN1__QRem>ryrE3TOX&a2`bEU7ulr#>EvlH(Cw|->4MQB4_ve5AR72@PT$b;>37nJi
z+PN+CuubBWxTJ+0+D1llUa)rgZ18Zn(ypwK{|X*rRf7X%nGL}Us+JgqgOqhx2td70
zWYY)zc}O}?g{6GOhk3(|QVZJ#?|LjJFGI5>Dz`3r6Qb*Lc#7zNP~0b7li3B#>Atbe
z+g6A*cDqk3RHV9N*LMF+hj4g`#z`1#7X!d@KuoFOatC)QUz%+3TTy+DoKdpn(|=hF
z^6l>3%ew1?r1i<)pTy+TJC8>2-u^O-z3A1;Pg})@YlM+@T3bI21bT9n9rlaJE<)|?
zDd+d9jc$v3(!<G{8WMZ0xt@M-TQ1=8t{BLV9;au57GudehKet|8#s!j8x+}=at6dB
zJ5oGu3)6>9r7uQ{Gabc_5y^T$41>2qdK9(Tui@O~0usq76YV+mc-#pw8eqRvb4^)y
zTn}v?T%`ubqRZMUf=L`z2sU_oI6^k!Fv5va+D-)_rW57JuTmhP>jz|1QPKcfA&lKe
zK9w$OZ8H86$nd#L@w@-o+d+Hm1d-a-f#=PZKKfaId#=TGS%a{#l(sAunVC0y?@bKz
ziCvU?+s}~Kn(u-cH=0p#EK0mKj#6}>><%zyj92Z-yHYcbK(;#&ePJkE!GrJ3k<6;0
zv#6)d!~HmaVu}I$EFThf<&H?Qy^2!f6!lU1T|y(5P#++sX@y+_&FvExG*Ti(=F~gK
z&g3@n!>LGC%2qXrwYi|ZQMn)#CWhgZ6@q&Yl!^FG!}SPTZ%1D?ytZkg`{Aaaz+--D
zNbFutz{H$YiHLTQJUSGWln}>>;0ZLZ@op<{>5>$t)1zfVq)(EcvPQB98A*5DE3|%t
zv)6@|r*HFdX)fpR+krg-*u(fx8K%^ye6Qh^=DBl2TKz8{F)`1Nj^B2`{d<5~-Z*LQ
zXRN0!&Bj_Ia}DXRAr;)ftf%Y=1B1G&@vuqASj1bcK5?}S&LB?7uUb->lLs}xc<N9Q
zCzx@w0qweSJ`QIP8~FmMLNeL+Q1LAglo!NdOMl3UPHHE0q~vqHCBfE4X?8RjMOZ|h
zxjqs(x@murPV*k5YCdqMQ&GY{2s;~z0Igt8t67#<54TJAe^uPUo(;Hz24K_3^eYBZ
zD{y<KTXa*M={W+Y{I2^62J~UY;t~Z?CSsd~7iOmo4BS?8d7qFN%FR0q$~S>Q%OI)Z
zd&Zgin-q2UK`s%$X<9E>q8M=rjo+jI-Kn^~9K39Ou8RMjGG2i9c`CypV|PLr5``mu
z2=5o_<A(A4O7dH&t0A=9<-I<aRj&Re=znTFAog=X3pLj1oMu)jG`%%4s>V|mwXNu~
zxyn7HVJYFN_=!@52`UzC12Ns$4MMtEBp4=wZ}&%rU_j&&1|!OA!MUY}h<$f}FwXoT
zSMzWZzX+tNC!H15xMLM<qa7z%fMr^`RV6~O_g&lNn1j%URQ!>R`I|#bcCf&mOqq#9
zzNehX{uOBGQjw4>?hOc*=~FJE+zL4n*eksUu>fn4`2^tz)8*yrT06gwY<<yp-y=_)
z$?Qv<g~WJB_Spz{I)81#VjVomQkxs<&9pdY!*;IUbUemOJ0_ld$+dxcU?bupOL)SQ
z^0e8V(Z8t=xp}BEWeMN{c(T%gYLGeZT!{jucY(gpx=!?7O7zKkP>jeMTy9S|<i|eu
zXgS&P=1setC=9)679<mL#tLzB*z@3vmzK7mM3{Iv?+QN$Y;y-}aeF+OMsPPKt5kW}
zQ4f5D3`9`hK&kWRCopD)@ZjRW*hb8AGuXt?-x|ko>p~95InN9Vua=~tyzeYSmYr$C
zO_G1Iz9C6H`aUGS2W1nSSrg1ZJz~1X6#nd?>eTl^>3=Eg0K|316gC*h4;Q!t)_{2a
z9GJXEPa?8LhFQIT7J7FHU4~2_Go)ry`W>V^D;`~`D(-yLm86{5-}cTnFbMVHeUb~t
zkCQFMd4U8b<geV3yK?8Jg|17meJ&cUO}?#iuPdvL#qL;gxG4JcXx#*54=`$*a^W!@
ztzxH9lImyMdsNB(_4Eo6kO=tJwJ#=vAyI1w#3_!lSJLue6be`1sEjQT6l~yZVu@TG
zwik4Txc_t;RU@LwSqkY?=rr|`X%nn^Fv(;C&<1RD4O>*Q#GJNaI8>VghDy<z40eX~
zJXwpmfX8r>1syJ8!F`OfWbkA-1isoCd{@e^Sdu#(mm%78tAYzqk?ue@<hS-BA0i1M
z$GO=<dw(09Qy?&o&KJHA&oiNDcbee0%L09y$zP*(=Y!iOS`BQ>Sws+esan-|k>2_4
zw1T%U(3S0vEPM9(A3q%Xi{?5Hkfc~48=4|9sGk-+?|2?$yJ0J1F)65GS@X*2S(Lac
z%c#n8f+2!-raB?zXUH5pC7Zyvb|jC+sqZgo(}1Al2>OjC+e#Bd94*H3gh4axXpD36
z6aG9f32>m-d|P%UmA<}`%ulW3!qC*EI~Rc~*YwkZTY}i^H`ntTSUCHh&wH55dp`Rq
z7W2{%6`ED}!g(a6mluGkk>^s(6Ftyd!n{ukAR)*kYRkV#Rfm~vfL7w!A|6>c5w~|w
zINf1~IQ%-}PG`<M2GldW!0BtyUT+b)>;6s@2`>iIeHATR1k%APTUC>cv&a>imuYR|
z6Y$FvwuQDMW<^mZB&~O;W@4K>TH}*hX8Y;NQFw$mlKmnogKMZWUN@9^5NaF7k>;C`
zoXjkI@dNLHtWv*wNWN{ukBC|dTAOET<~ND}=F<E;0xd|%!RDnSTd;`cClbj3wFV`6
zs9(TMl#w_JV>V8VUTYe>1y%MIRNmyd95OEG=v6-m#r>UO;Y4d#&;7cwt>Z;-;e*Y~
zkbt-#FvW$TWu*$C3)&egMRCIDJUXqWVcb!C-Pz%UmAJLCP6H?kY4-H;dPRQ4x#p0y
zuBEH>?X*niwOU}V*bQTJORQk@|2=N+zc+d#pTd&(Crf|t#dC^{>}dSbBpLd8)X6MG
z>s*ODCHiGu^l^A3YH4^^hXqC*-o^o9`J6eqF~JEjf>zUJ#Xe)BL7v8fAL#=q8jl|-
zx;pVX<yfcHZ{xPmNki52LUIZH6)520Ho_Pw8A+uVFe{YX&WiH-ikvn6d4Nk|e)OHx
z&i84CQl09<1uml+j*qb0u1nS(^w(cq)JsX(^ZSeZ@~DKx_@<CIr1S7Cq;qm^fZ8O_
zXHHCbjkj`<hkcaYB-xT-C`pIN4r}Fgci!dc4om?KMX&iraywSKK}o>;bT9GA0fEul
z$Yll|cU|fu=>7-*^R~x^pwjP|elh;7#l<k*EcYG#WtDVC1@)rJMjF2rq#7%vZv}=4
zkz7MnD`d8^{KjGeX!_<)2(rbrHsoE^qA^Vz*?90fq#OtBoggi|Pss6*C9F^(I3|LR
zso5o$lr7Hb%sFhBJ1?NP8<2^aGc#p$PH&KqCkA@kyEe7HoL{21{17RDJ39L3m}8~&
zx~%KQ%zb$52-^Bb*$zrsd*}vRUn~&E_LmzgLi!oSnA|(W>`!1~vDGmPo*9j9RgT@t
z9N`y%(^Qu8Duwh?Uc$nl)Vj>^$Jx^hZ4sKMZ8wssw4Cx?Y=>TeQvceRJH6i<?rjIo
z>(p>~`8=EZ;{VSm7!Fh#m^~f@)b1DbG(BBGh{*VMGU5M1JqJNDrC9{crF<~PaiTl=
zA}Zs=TQ!>M#FenXswAc%%F_A(dA-WR1zTi7S3um@_RrKciO4|*Dd$oboQsk89?S^T
zIu7L+ImiZJ1W5lq{M|2+Di;1H<=!(*3aSbZc~_fCbXc(PKi^d*RXLyLTtYS1shVG^
z<*{m|?Gk!*xWq)a3TFkE$!jDjb#*OHhH0vgbWu>!&a|%wHZ1R?PauWICuF?|Cy(rg
zknBYhQ+-jj4I!_;I##r@ri|eLhX08}B)OB4931G)8zGx{7OGqUla5Cjf)UPwx@}C-
z@NhY%C2@_$oKJsaIxcg}3bU>Hi6-=uT{%x?v!`}_AfYU0JmCpk|G>W+E{45Ri^(Co
z5M=ckeq)~G$9Y=c)OHu#joxN>=rI$%!})E_9+H1D<jtG|_DW~%j1FJBV0eAtVn7aN
zd9K)=fZ|{AtZo|Uvn}oT4jG7s=#QWhh)(v04Eaj{C?~s~t*#ad!+gS-PAAz6LBpa$
zG2hrB^THSrckNgYJ&j*~<kmo*sjAT%9grGA%NV7>>^EsBd_}a%`a?v(Y(y#V&p95V
zkuUbhNI;C5&~o7~xiW`Pw>qX31##~D3tWyVIre#O%n@|onDLXS?PNmY)#DJdmCF5+
z4IbkOT0DO)#8Gj663Qpfe<CRoRT_vfOV)UkuSIKydV#8Ec#6W0#-w<LW;K^6f-uPC
zT1*Pv^c7l~HL+ts1yiBw?){NMqZM4zyQLn`dnqMM>Faw!2OSm1>{JuXZxO)dC_|Ur
z^JQz=n@{_t9(7Xqxh{=>%%AIps^wEauRP0zGlE$WHBfwH=f~d$kR~B#yt^b2{eO+u
z{c0QXt5I+?eo5*d3?)@6Cs1ffRU2<&L)c7&EQ!^Yi48A|Mo<{~IM^htkk?SN%$LG}
zeR$@goZRrxC?I3|WJ1!c+dHUs@1RAClQ7cRbTo-VGPY85W8V1l(G>;XU*J!P1onIj
zPD470ML6^j&;_~p!$>|8cvl{RCZlYC)SgRP%TV&w4SMnBBVf3B>g@<K(@?!f>ek00
zj8&|Q_aHT)MO&fz`R~X$q9aB3zSVyhqO11qcD`ME--0oI8%rB-x$o726yzjMy*?V#
z>>ueUP;^WKh1sN=Pq=eE&OZ|ev9#9S{Z)NW=V!9OGWnnnniBztL>ELB&6vVk4$VEn
z3U(C&V)FcPv`QQ!^M3=_IH{3FB2}GElvM<x-YdO|J5c!BW2J4kVM2-&eaNy0M|7Qb
z`PBIWFBFhG!2fATK&0`w!rZ0RN-;$GO<^QAoU#-Fp}^oL$eU2~Jkpsg2c|p1n5d=w
zRzNL36B>IH;d9>FuPBq<O;M^K4li=D4>JXfO4}695HjOAlJl<^Jt@DNRHH{QYR_O(
zy9$g_sUJiU=9IXb`{`bKOaiOKJieH_%V`n)W8lqO_^X=oe@7{Sgx!-c1LbXU+b(&h
zH=mSENG-%u9$c~AERPenp2;@<4KCkh;sYfjv<+tQX{7hdww$peR7D#4!9mIUu49Iv
zcio^W;}X{g4OybOqqk>CsRJ6%G7GSl1EdAXt5)kHw<3{)4x`j?z6WWF470Br7l{XN
zp6npk%LWx~8^W4^7nZ;qLf0au9}BfMMLJIn+KQl4?<`6Q{gfW*psNrN>h1!kYwPo_
zuayxsO|>+(BwF_$If6`rA|~qPJ-NdL3BfYM8yRQI`}5YVKrgyYaVG@C{{9UdG_TGa
z_1wLp?X>c$Q~fc-E;$M|_mLrgYNZ;gHzu}wo?W3q;fH7hc{C{V*uS{C+$&+&gG~Sk
zb}xEibX@%rZ)MCP7B|XmG9VXK0g3p4i_IhG#{HC55maDfyS<_Xgu8yE&1^s>D4|~D
z6vNn~uesAzX^pt>eukMFqO8Yx31T`BmgGh5p(6Pxjgg)J*j>|iTKy(fzTbTy1~6X`
z;IYfyFV+f9-axs^E3QKcuVoqfdxTVvNawUNXL#Uo|K*|-JSUGu6N^HQK5_u3<;NqN
zw1kQAk3-<h9onXJ<exBP)jW1oED&MAHU>2H<MHeBXf(8p(Xlv6LVUrrs>qyHq@7Hb
zz5FcB9tkf;`hMLL^*`V4?r+RzL8{yRwLFk(3IRWiCmr1uIggIx$}se?E*U{3{XE|k
zqViMqd2bP8;@3Pd34)@93oaU#I0T0`OX6RZg`rWo{)^b`vM5PJ)<Hegx&nIHpHqbM
zI-EPlkm!;LdCgl$E&R(!Ys4bUWM9zPp&AKWr=TYGEUq12K06PPl!affiKpN(X|RdL
zaba|TGf4T9(a_zoR?=YZBX*7IO$vvju&v0U3uXw@q0azcbeyHp-w{8?auLwF*&-`N
zG5sbnc#6UNr_NWPLvQ~V9{K)?6?B%1zl;6Is0+jKzs9X_`LlRW)aBEk;H&dFK57kY
zWtboFEoeEJjLLk5{1=Jk(h6h95WLe}&KKz-xWe)s<%>S=n4q+*LL8`sx*~y7l<y(h
z<HQ`n{nlK5Y)-|Jn9nGeP4eL`^1!vuni#~v;}L;<;m02bzfqxPu=(@RlWA7O4yZf8
zX=E48pOE+0w-dgrPc%c|xM7r!3(>X8mJh-SHv<B6^uKRx>JhUWE^!LZ3}XyS=Cmjg
zoq(+WgZ2QN&e3@3(oKT_y>lkDd9VaE<Tw~kDAlZ!$Ng?ug=y62y6?DX-l-knQtB1A
zS?Shc(HWA4z<{N)OOxTPqdU<(U9G-pyGsecRzvG%|0?(Bkin7;9<Vlr2up3$TLGIF
zti}-t-iA}+KZm{a<64=wOUlrklSsK(JN~}T4$8uUdv+cewu)>a#YGQI2VyzY-*){o
zK4IuE75b4=dw`aFR`HL)ZUS3Mgi4aT7OdCa&=y-jIebiClT|z6NGwdR<}6UQCWEqS
z6!8rWo;=@~RYOZ6`VJhEYoe0GMT~|mdwd^PKZ>Hr*7vbds5gAT{oMC5@&qp_HT@rH
zI|q&TsO(l|W~-!EMrW^sk-)hkiC{9b!m=mAI$dx)YNNUbxECBwts{5@BauC@=cZ^W
zs&E!rMKl{YbZDCeMj$~=MphxgvX@q)`my<pO~8#QY_NQ!<qPyho>GUY&a(B8_Tzc8
z1EqpWhJVx9y5_UrN0`qC&ggmpA7%U4YQ!Q<302WhEFX)rXB+46Ch~sZ@RS|-ngXq=
z$9M|#yzeS7UxnhMTeLU!gYu@6(UL#FpgqJDpI(Da%7<aF-xw7-4X&|P<QTD_PY7j#
zzwl3p!yI#NP%IlZc1S1*Jxs)TdYFGFWQ#?hIbvy>%Svunmxm!&lb6Jkb-;vGDrZ-*
zV^!;kmaLtCr0)BChGD?X=ae86-Hn~!GNT~d1Yr?~{;WpLgnIL{@(!}vRxBE|CrKHl
zbcsceINQMTt3crsllc{>e1M&k;l_stgpIkQYtrjMRjHo_#L96iA0Azb>sf!BqsGOI
zf}*@^2r?o+EeNSSBuKySLoL~<yA6e;8Xzn%VTMV6G_28M%s^K)wU-)Erq1VYf)9xX
zM4cmep@}I(ob<fM5(B#xv4=1SjSt%QiC5|oTVA{<Wz5kO@<$OaprRMX_%MwaJF-ms
zi}AI$YI4_nr(AuWN;~8@-&B?45&dw`B9=(rL0cWb!5Vkg2dss#^>;tX-XU<PqgC|>
zqpq@`=!Is;87x3Np)Axsi1e6amO3pJRLhb0u1gc<4-9;}%(mWE0*|AHwMy1JU)s-(
zy^`DVLA5EXx9@%8s|(|M;4WS>$RBJMCN?ysnMjn~&^4rB1}o*Uha`pxYPw7rmGk`L
zLt@k|pzs45^6BROT?oeAO0mc9{hIJ|bd-%WI>_ahA1aM1^r)5Mfuo7iec8a&jOa!6
zAiCfYRoknD`LiD%@nFIUuz-J*jKN@V7ZzR~!Xhtii^K9<XT)gAHt`H!Q{t##HQAJA
zlJI*ns<KVaN=x~aze*G>#;;Ey9Mf&}us;d;6z%=sr>!ns9wgI`Fw-0r>#{W4W{$VV
zSU28K(-ve*&#jB?v!1P8N>OJ9PmzvEeapc{yWF<<gp&HpMsHt+jP2__>=ymLflo`<
zGELF}DXnrOu3gJS?Cu6UeD6{~5cJP?>s)jk^s>YfO$jcVm=a9?{AG-UF({0r9ax8+
zE8iPN-q6(L#G_m=5Mmo7euKk)aJG54%`Ua?sRj)c1PJA<+@unR;$5T%7-rU0?A|Bd
z@xnk2j0l|V%`Z6&GoD98(f(P|lm-%+1vjt->?-P(Wyynjr?mG<dlwx7_#YiEx-;8Q
z=3)!f4rhB^CJ|_|m1t|WeDvkbtv2693=}=OOflltol)Y0gPUUom69x@ND90!t8n!l
z#I8<O$Yz1{1<`E_LEP6Q0}#wq7I>tU^Ur!|G;=$%zJHUqZq}8#-Ptq>SXtoDF&jW8
z;yrm0p>DIhTkD{3ajwDXD}Z3mSC1x;nIEgB9<?gXh#sYcdI}rL;t4aO9)x_|<AJQD
zA1ue0In8Q#^z)LN@t)zm?H=EM359l>+)zJgQoM_v#v{H;p~H#6t%H7k;7iWyw+yEO
zq$?yOB5R%U0;-H(@b^@hKO&9`Mxnk{Hy!)P+;k$0^X4AI%&U{FB0K_x;7+8g-?BJb
z>b<@*V6PSDZ{=y^&iwlRH*c?%Bbd<20NWV30k4FDaQ8@0qK&LRA!CWkqrx~|^7o?}
z_QAgsulp1Q(;51~>4U$Z6g+gKvVzV~7mgl@mR>+~_pYijo21$coQg_HM?jKbs9Tz&
zcO=0C16C!R>e}wO7Mr$j?64*k>;Fyc4!BLF)N^z1RvGcE#?Afb?9V}KzUIs$E3l)A
zY=Mzi_q(>Qcv{r#N&$I44BP2o=aq{IHLT2g=<nFK=$fhvv1$L=9NP3@<UDlz2I@#l
zQaOyY3~^yoz3e})t@5|+HD;D<o2aZ)%t~j;N`|%d9_>6Tuw^y*c+HOS|0Aay5S&Q!
z%;c3v)hY&G^4cHP|MhHC67Nm_HOGNa#Snl)&EDyuLpjO(IYi1g;%&>-w}QhK*WpDd
z+!SqH$C;lE!;9yhhTn0oKl!}D0+*;oZ0GVBAm3JfvgoIEK^c-h4$rq%?}W>$OfL_D
zRAsIy&!m3K7))l7XIh_2buPI;n-Uj+oV~Cs&+zh~h3FO9T7!{=>mA#X=bNJ03l}e2
z+)Vg$v2OXOe)8)#ZJ-Eg6NsjFe?)!;A!NU?_w5;fZ332OIgh^JT<};tq{uxRe=f|y
zb4hZRiCnB&ElqpevInu0JhG_<;yQs0IL#C5su0Nr_Y*S=?~_r5^!}mY<%E2?T~N@F
zTo~}<A=aMyJ=>Q46kPn%X*10~-mLUFX)*78?M@x#r>YNH`9YmM*D3zw-(GKAb^SN#
zk#BniZWQsv?q$(BaQP$_v<j@~dn>JgW-n%XqBK+4w!4GL=5pwk0t$C;7Uqj*uP3l6
z-abmKMh|<C8yXhDJy`c9CXHY+F^V6}-SrKKh;7N-NFmrK^aBeKM5}xZ6)sRM;1~(x
zX5{{QOqI+%f+e|+V%cIDLhiIoq4(vvTXcjrK9g<-j}W6NJ&e^vtA;&^9{c<IxcHsz
z#@8&VCr>L%<COgbc=CSUR!ZAVCBN(Ti9oS>@FH@>V>A97>Qe$UI{T^TX2=B5*3eud
zSKx+e)Qp{P@^Frh7ze3x^3L+}bGL}x5wRLq%uTEqes(GStZkqCy2&8e@KNuGeql2n
zg1-vG%yYq{<gVN35Z{h(ZZs-QrHO*YDP)x|KL{agZFvkDiCOR*{xRpLx5;YV-4(m6
zTg<+dCfofoXCerr2ntsB81f=I*8?shxYmn1K^Wrpi*u_xyS;@oM+rDkV7_TvF-tuy
zQN%;i!FxU_h2~~PGKLWb+by)zV~rlg>#;nE;k;H%`j&`*(>Y!9edrQZahcOoW+3d+
z$~=#STe+K-SoidJl}eKPgS9^jqcrzm!!SK~jz$yt(-f3sH^$R8oyYrP1n^DcB$+_b
zaN{VuP@E{Nc$OjLP?sY1KHKB;k%WYsH9;~}eNszvpVZd@5z3RI`~%UH7NcR($`RPe
z#|KO_&>K8iW*s&YmFV8s(^mQM?5A~2B2Vx=)ejQ-{7-zL3}jod5I0L@8O<VPsrhnm
zB??L4G4+CkQv<(ld1kN(x|cQ)6|u_T5$$Ws++@7gseJPMn!(OL$TDMT!YpfL@S<P=
zg8)txTkN1Dblx()%c_e|($Sj2LRQnur0>JfteOIpbzumNWL`fZvg?v5TL+oHCpkZi
z_YnIr{o?&4u4ZvKl{A0(#{&fS$lg`XH>`OhLoN?^uiAl&p0${@D`*`09HYVz$2AT&
zmu4?N<Wx<43MJYA99+qYSOs>>YZ?g<Psun?KHSaN=~QdA7-J#(qgW+(wb1p8iKop1
zKS)!%aN=X|8@1rt5fdDfaqIV~Sgd+k+E0-+&u{8_LnHKAtRHp1G!b#%{<0&71XYZ(
z0QeGwP_cXrYDHlo9k(M2m~eZHe`ip#H)JMY5IdN^+N$mV#QT9j5ZW?~n9sr2i4Fl}
z3jiZXe`aO)JVibKeC1D*{*9lGDNy0|?|yk1hzg6ON$jc<j|avL!Pe)4I|G8S|J=o*
zyvhM`hPLW`8P#SgK7t@Dv#VU#61bF2|Mx=3?KP*wxlJjAd0XbJ7Y_8Z@j*1Ebu{43
zk>bG*$Yu8-huLv~k+3lRQ+VYEz&)|u)h_Vkt=t~;oY<8Z@ZIy_Vb=W_#mT+pRX-w$
z2Vi0<lZTft9J4;eVkho@fN|9N1Sr4q`mW=jzXHTGs0S&$ojBExd%AXhWry>>jA-#!
z7Eb6+Qr06mOFEUua{;kv8DC*YQ8zIG!y<fF!s<ajyjMPKU3)iZERJ*il0CP^35ILT
zO%fIw2+)8X*`*FaX^*zN1D*dIRUMfp@q$E*=hBMYxiMsLJ;so1S`7l+Xi^5B&lxpN
zD7OEZc)sj>Dw(_hw9bI|6AjJ%eeI9q?@p6f(-QdW?Z_~HjbR3R`?Ar^G0YM`HMArM
znqIMBY3{&3USawM?gZ-P&N<2&r`)xCdhtG|R_OPHDU<b2a}B96g6eaVY8^*ALwe+6
z1$vgZS{Ux1DP1@X>O{IWU?nXL_;Y{2T;!=)$h{hYG>mXR=|TVd7M?^ui<qH)b~LJy
zRvfv%%j2b)j@`Yy-l#M*X`X+c$v)z6)nWwQl#wsUVU$*LL06jDaN;+xB!rwUiN-im
zAYW>ci0<3!n;X_wQfW@GOhjZc6S9+%p2Rs+8rDWCshpWQ4ML)<*n~8{x?PjFUFjZ(
zwQ1MxA|au)ThWI~8Wr{=b#EixI>uhl8n_z}l-UInVN)R=`mjip9O$l4L5EpjB65Ol
z04~S>Mg2EHm@=Bcd`s}UqATcbRnjC47mm&>RY2}M(YjQmBrWUAFYcC$kH)9pW$O-{
zwb<gL-$egXIpLI;UtZ01?j5%^<E1jt${AkP=pM9?$mF6Cu5YeRSKvQBwi5}J@~`st
zCp*F@?;w}?(C(Ra9aesbd!O2BA?`u+q&&RF)p4ydq&fdk*F#YOaQKu=StqeN`#JGq
zArZO#Zl?W$WQC$qRa*Ajb=ALO0{TG5Cl+Q0&fLIb?Q<rer%fbpdf9O>q?5X7Z>9n>
zIBFD9w9a`##zO*I&%yT*P=Oof5X|<n;vm-<^vy^}e+6QMWgx8goX|Z5Nx9pim=Tl^
ze+oCBhzr|$y6fIQtQ3V-T&N^2DEAKa6dPB1Eq!D=r_65z5aDc6?Fwj7Ul~BljJj#{
ze%#Xkgs|jl(!bnsQkR&SWvS@bDd}GZ-O(;0x*&J`@vWar@TcwF?l}sEHqY0ng2eaY
zl$O?r_IuzUN>LE+@&NYIO-0mhexhLFI=u>*u`RDob<M(YMLG-F%+67P>5#+etK#$k
zI@n=RsnG5?DO~K%T#lxiiAs@GPb42v{M`~LgW#I8SdKWQyTBhk$ac2NbsY_I?gPG6
z%H}sEAm|pV9|~I=ZD!X%36fnUXQbVbD+nfWzP=?yF`KC&R`??BcQtc&?^9s5!{h5G
z*f_lMtq?wy2Mgms^9(jex0y9Yu!aTyTIFCqzvB~<u|F%`USv+C{Wf0u+HKPNE_k5}
z5?r8v-Mt|23Q4+jbE*;Kz0tynfh9)a=T9VX7Y>GhGL`U$;g*WY!5NMoJ>avez3(y^
zd_q><vf9<<&ck?{8Th1t8I5&x@lXyf!CrXMtrD$tN$LF=HcvXXThea`9(dK1QpahO
z>Aaod+4rR#aU#_7{1sd#vg*zst3&nwi)cR$QJ%nO4|@D-g03*{J*{fyS_lIZPl$=M
zB2kbCcj<#;#UKsgQOChStG!N8$GHtI?0#j!?EPFfn+iQ;FoEMP$VGHCEwu;AMWC7D
z>Y|8Q_!jnLNh7HfcW}OaQ^1j~5Rsr-r^kAMZg%dGumUVs6H5s13up93E_aTw<Pjaj
z>@1-i5Kdz59LY`~L0M*sqg)M+(I=_h4*&O+3~_p7&k!TJWMlTGn6;zFKQaREBtdR|
z$=PjamG;bpik?XOk=*-Wo@p66TdgcH#bkZqFX5Lp%_Oj#0I!mDw?ztG7ps{Oq*^pW
zuE5F15o#)B3*J!l;R_9|m51>z%wE&FwVH!^Q;{wk+I=1x+FX+UB$!W=eqphkGMrr#
z)2Iw~Fc%nE=&9(1!p6GkoEj3>`fbzBii(Kod2%DmqYgVyMiY4204>5AGayq)-_a^V
z>Z$i*FkY2hhV%<&ea{lZedC}sJ+Z1h@fai_(m=nkPlI9ASm%Uj64czz92!1S{p}n{
zGIE5bucLlaXJ4Op24LxAB!ZXe7ufs~K#Vf2zCdoJrI`Q~M{aD9RqWXN_ua2Kk?gr`
z3lsTW7qd{MBdUxU`4WE9@L$8ITgPMM#`<i!@$6hl?*}%%wJ}JWC>$EU*We}m|51fi
zod({27k8RXJ;$qy4%+e%Bg3?efI$yfzyzI$H#>*{rVo9YO?6?Lkjz8GPuR;!Kj?_Z
zQK?9{&^Hl2%=>DQI@zScsrBh~y)hEkn*YLO69tu~CN83eE0K8}<C>4~l1OoJN=w&(
zcDzH$59?d++B8FRp@zqp^5f`qB19zhLd`s%;tHWozV6*o)K&`Aj78k!4C2qvv9Q|d
z(cmV?n3``Ta(~_-uCd%6FNLt|XKIl(QgWvx2#4$-(Bc?<0g|jmTb$omDJ7DOk*KNf
zFl23j^COHTl8u!K*-_P*)`PzWSh#QX@LI@>AZHT2g6j!y8X&SQu+vs{koHkjyM~oV
zAwaJFHw<waDRbTczkvk7DSK9FcRrd7&_AoANVE(U&xd{QlBMechlZ3-gziJ!-Ag-k
z!rpgpk&eHPjYLi|(3%C&JsTE~4YAH@G1C00Mm}QNtK!j`gGZtSHV9&SrVs}pLQ)&z
z9mj2`_-^}GE-eJTD|6KnB<(<CC=nYp&?u~x8|{~_ihEeY-H9Y#IoyPTJ9TtSpSsgI
zgP4jJ0UBTCP3@0g*rK1$<xazj&9FtqW0cLQLM4K9po}E>&bvD|-ivumP+T0;YYLag
z({dUkhReAAMXPX!R9<Op?eWk}&f1mN<b{lbP1yY4Ra{3aS_+u@sCB%7nx8d`7BJW-
zbP!Nw*?xg<uq}2Ci)a&!2k7?d54jXnfY?fIkUntC(U$op+;2U*)p{(m@7&|VpxjTl
z4=X4%z86ONZy8DrTDjE}LHYuhIGiCYzb~?vN>~S9x7I$hVbyGuSX{1Hu&FM#Y`2?%
zf$f?|1q;g%3~)m=vpSwVTWw(dAp+3R=3$MrW`rwH(uz!nQnWo{e6t}<D-hlnpTwYE
zMDC0vwWF|HE5Q<iKu3&#I~k+~S9~CggzK?(w|Ck)J=Q@n?lbrO4SDC}J6fKYRkOTa
zJ<C46-X~kwsM1wggmqR{#MTdif?6jw{xc1Vlo1#Li$BQ9B;LI9gV#9wM+y~8pY~R>
z!Zq@>V?|5zc@)$I9MDDP5Slsaq03)=rBV@p9Fffir=B^IAw@{df7s6=;P`^DgrfS)
zui!=cfC|LX24VL)$Wy7v^3j;kG3vztX}OJo({I@u&?IBAwwy6#b_C&3TomU{$(5P;
zVr_>WRBo8!(xO?eB%jFW9HEv)EN!}*R4nEPN}$eDYq4RxY93x$KT(5AorlU&QqOq7
z9n;QND-L-2l+LrR+XjU~$8gxDDm%VJz|mlV?%x6?N-g6y08f7ef}H=J*8oV%ygNK#
zU{Q>RC=~y2(K`~Fo#gFY!><Z@iQA6q4@}#USfutYz-sH>U^4(sP)Wevu}=U*2Jm$L
z(#Bs~2_5JL6VSh<SxY<qu=x;Hus=ouDV-kspXv~QBvRi~;bNi41>H6FBFhP|HcGG>
z++RhnNWw7cch+FecGH9a{*hu@Tz1(+rCO{J#ivat^0KjmHJtu{+g<)`Rc;qYp|?K@
zkCb~lcp5jj{DzW1<obLh4qBtlm$`x`oUc!+9Fm6Q*H#gqFZ72eCgrnB>I>lnBO?0a
zQ*;VOel_6VX>zXK&R420KfcJ;c#DW)MW^CM8tzdaxo0Wr4$<m}3`?H3)3gl7tBeZ;
z+S1m(4ToMWRw}9H5_}+~@38%h%sFPrZS_E>t~t`^VGP<axgew1#b5Nq{i>Ki$FGY2
z$*hhHQV6<hCMot$x&&~N0Qh(T0FwO@ZlN!#^I<@S{qns4ryVu2TyAUzIjGd^Kqn{U
zn_o)TEPNT&$%I;U-~Pug+tx)X*^@Mqp95)<zsYq+r>;K}csx`mjOeYP8x;Je2jT+x
zA2+Ch`CBCh{mBqHFNOJUrZhk^ZzNLF@1j`?QX0j)M+p)Fy6b$D+eQB6j*zFBv<=Y^
zvqZDrYKs8k;6CxiFVD0{<+-W~Z_FS89!eSaUZyGGgReV$74*kZ2nmi(6#Z4SSgICj
zp0`4Pw~IKE&ur#^%KN5Nx*m?Dx{X8MsSSN0;{@hel08us>6qV%Ya@6*{X)^Nq)N%e
z*NxA{M95vx@l_|_$O7uu!*MT9{_IF^`hJq#SLkZuNNwgi1~FOYKWe!ShzJGtKA4uG
zv)JpuhJDo_4@i!^d42E3$aGTD%M;qL;S-F=&$|QKwo`&3D%NHtM|JY`AUvHrQMi>y
zGm5;Ir;S`EzKOSBS$q+P)-UAr2A7mo%fdI!8K2!k;oP=&^8*B^Co*1-Aedsdc(iD8
z2GA_eU?_W!#rr&Fe-uIU@#NF;`(L;3Jx|Ooyw@09<!ZxEWGuG<HMzR^)j*MGU(?9h
zKxbY_=!DmO8WH{;FHqwN)5T&3TB`Mo(gNiesu;U0E}Hl1>6IhA1(8-afm}ejN$Eb&
z=MZBf<%!gjGO4fPv^1bRR5!xRJKICaJJ}qc%-@CSI^;@jm+~$j75QJIb_4|8tdZ5?
z2n_)Zam}jy{nJ%7`HE&!B(B4O%wAwO$mISRGlchjYr$-eifj)#j^W)O9qwYY)G(S!
z1)OrRLU~8b_a@L6_Pc+o*{{(yE|{X|w$A+;=fusa>kOj$7xFrPxdN%7&grhqw*p{W
zph^e|7|6_dN;RmLR3CS7VLkTwQ4&BI0*k)HEaM58;B;hJEwl(hL!Ipwh$5dI?bB&b
zu*N-}-5#CY<yDx^hrK<wJO@k@H2kkV;A=FCpwKVmIDY=aZJRE|8$8np4^#oHgSw1)
z-jyb6(tFxM1J}w>Hsd-&^MOLcKTJFiIC)C7WVoN-XTV|Yp1iyu0USCv{gn1&5ut?k
z<^I?F6J42P3VMH&2UQ?}+Ks$;aT(?db*_@yxtOv`I9Q_-#_fp6VorNP{K;0@otNlA
zxJbfAr9G8<M9M0n@Qr_rHndC!mw7SfpspF&cwC{%=$oo*6yH5#b~ew|K!WJ>Gq^O~
zrHitdF?ijAJwweD&c7vq5T*xk0@k`X^3t{R55)gm>FS0f2MrQ<!vFPW0y**7f96OH
zx_2pv+zlc8IlU{<ulhOF<h=N%>K}-&5`LKINIUAYUgSdH#^ZUO?UjAg<1v*tKzeIN
zG;+gMVYoblAN(Ua)_1^o<pkZn!q}-8=XoXy>E_MVfr?~0WL&8y0y!y>IS%dk0d3x@
zQXx`Bd~Qx(Y6+FCcCvq}elI|i2Ezi(TM4nG9-##FIN}Wu4I(B2|Ks$rv`D|a23)Yv
zFad%>oTZmGX4PL2YlH4cqKv!Xy2&v_6U8&79cFv40N9iNZus46Aw7Ub7XBCH#;N&8
z+Y1DV+GzYqSLjq~xU`=H*zIGm=C+_dXV$!xD+jdMg8&#1iu(crkMYdZ;s3qv7w?;Q
zwyv@@aj`&PCWgGV-hd9&67OOpFr|QdsO8Nj_R#%H7PBwLXo-|&8`rK;OtE28PFim+
zPUl)X5O`XJ>g@LLk8;kUq_wx1D)V(r%EYk>+Cu0Og`@xz+oM5==!iplf&EZ}8mw(y
z|DxutJgZM{?8SBfdw=^_EG8r>CXk`^xGW`Xi%x_p)4z-@SbYel3d`K=!O<(wysnXW
z{TqvamiUcX5m#+SU+YB}boS9=-*G2@HM>U+mso=GOR2v9{8z$oV(%*1QNBB1XNo{v
zI9;+N7FOVDK6alRhckT)irsW)x)&nyZ}IkmE-g6~G-q=O9qN`AN#1y*1{g2FwO!b?
zxWR$37I152aRTB2Cmi|?#ep(3xeAz;Kr`XD%gQt_4|J*FGMTHX``4-&dSWw2z6&;w
z@rlS0Ll-GiBnUmFj@d)DO-ZsYPoM!IOTL6@i55+_>=9RTp!GQ*z)TaZdiPG(z&{tF
z#|wOL6pgr<a){m)Ww&;6Znw{&$hFLswb60cTZjl)1~Qj6D&kwam@JcA4(W?)bpwj=
zuhq*Rp@)?*yfvsk8XT8N*RYnx<0DbcaropYJToMQrRA(4Q9qiIrCjjKU}Rlh5oGAc
z$FG;Q?uPHsP`H5;BgH*XKYvaX#33AB4kfh1dR>=)$1$}9l$?UrGVD$O6=i1>w=HyP
zE&uUpwM8HqMwY@KxY-uj0I#k1#&!8m5L4Sa1H8(;1)<MV^qQP}<)}v?r8Tfb+jK3M
z%K*5sU$elnASZR!bWhY*P<XZz*q$ye;Dap*-r>Cw8uJd+62nXq2@T&$N7}Bj!JRxq
zYgx;M@J=MW$<hMv#KAlKqAGsh0puQM1oHQ@g~?XuO7gG?YmUIus1`6)s-+S4LE4qU
zbbH`yvie{4zYjLdR7+Ux-2gJ^2{o!Ty2oCvZ?XNT0;Uf3#4txF_&@=mOWpGBedO|-
z#&{CcMGO(OsS7_&?mOxI9WWjm;_+ZkX&B$lmYznwPFvP)%b*<5HUP9jT5rlfhJk#U
zf0Q}m4Hcj%${j-tb+sV*&|nm_cgjBB%@|?`SjJ(-Pa~0zhh5obRlKdIu06}ntF^zB
zoSYG+?TT{{_7Xr)?D`$-V{+|KF2-c|MW7hf<MKVh3iGSNnR#9Ta(;E)(WfmnY)ff)
zX{a@1v(v%MI6Y_jv7r@G{kNQ&?aBy(-Z!0^w*gL()$!!I!_2Bh!IbWPQ>e;<rDyi`
z(T{Of2s{DP5Ew8O+5<M7PcMKBdo5}WwrB_OlS+hnG;%B5HLaG)0!N)248Ca_Ot9=K
zk12i(2=$6PI=C|282Re(sRX`j20V<_{*461-mUD69OUB(pw4QxvPHW%StgY*B~wj{
za9x!&oT#AYudwLsF_avhw;^S!^L-a)YEzTYcC!E9c1oe<-Nghslg6s%tDEeOdrgbR
zDJv&3bQyf%snV}`qmGuZsqjxUiRsoAR+9*{#!TCP-esSfEBen^sqXn^Cf@Oh&!H0U
zOUGG5m3h|p(O+;QtXkFzv0+I{l<l{!TFLA>f5&EytcU-gxJMFlaaMFllUU_AXqQ-Z
z;mjxc02L9d%rQI|N}}-P%u0r}cyil8!*C{Uyp)Q%?QdTd3V?C)nJ@nJs*Lzlclxf3
zXnFuMA}B}mmD;dRP)(^}lr^bu4-5dzx<y0LQrzih3Gn-CD^wO#qtPo45|UpwMS-sF
zlQPMh5vhzPzdS|MB(seXLQoY?W*n0QM9bIyrUrC(uSDRrJ1<D*(du_L<MavcRpq7@
zjy3+7t(;G2vBsR>lYx*Vi}?M2oA+$fBkZRk55$Eajt8+dZ4V4|Q2ZvuaBE;eYzf=&
zNCxEQ&la8sRAbZ0XO3-IK6n+m{~<yT6yj8Os5VM{=P`2jxk@O&NGzjYO6B<<FpT7{
zQormFb(f;2W68a?8HC4V>i&F;8p>i{qUx7XXgV8*eo3^nKtjKd0dshBF%|8NU&2->
z9BWn;_BOTj$;G>4Z9$uH{t1<V_K&0-o;KS=oW7A3hMdBO^PuMTxigs7Bg_810S<_1
zsKt)&MoCe2gA9Q|g?Xuuq1qblTHUF_)ky(gPvOq5_Cq(h87z-#bQ;2`c7=dyu6`Bi
z1>+gc5h{&Iz2gOPu?YzO*l|4$mdqjIE5=!e7~tNR&A*@FS;3}ij(bx^f1q@Sx`3cw
zE;iL+kZX*|3uLC0wDs6dIsMkG+OJMYzc#VuwY}nW>+;^3X1d$yG(SOr<d}iB-hbId
zHW-5$NuXsq_CN&CNM!<#fmktIzKw^FGTr&E%JU*lVk{wHzhGYWXj-C|SMhvSE^=D*
zP__zsTlfb0aCWq7#x@wT4?)$$^Q|b!piEMNb-Z!R2}I&#MS{O72*4V^03sm59?k=8
zO1P`Qq+!B+Y`xiVP);Qqm2LyLn*&3;*qe9Ry!D1UQ)yVjb919>@RjJQ-Vx*)OS>06
zhW72)c2+9Ass{7HHz}S`>{Diw_bbN$G(gM0>~D!Vi>)ONDcJ9D)33&bS8ub_mJHf3
z!8wuwW#j#ZOk*sXuhj#H^i(`3mNg)&W->93>@<UE2oP;n%_67TnmgXrt50K6<zO+3
zY~7I%SLNe&*s97r;?rohzBZ>c`cDk#d*_u*<0t+Fn$0HVqp@CwhSz0i&{yZ`^U&6^
z@OqJ2pf%Lg{Ypc@&q#kJiHNAO7C-YUawz+xP}xSg7f8;RX<*iI-dNrKyDg<VRj5Zk
z&*8B|{7mw=<H}M7yh&3PRpK3xw~(ZnBrJCX3lp9KUAgdhfoYi1htO;n^>QXg%hZ4&
ztMqZ?G}r=roHgb`lv6nl90GDJ2(R~SEZxxiYI29h$pl?J;3H#U=oyM)tn<?UsSSZ|
zOo{ij%xT{1%rQZ3e0d?<6ZEtgO3wAXR9gtcEh16Kj{4xCixPI1grGdB&q5u8WAu9R
zAGPv5VT7U^lc5)N(RDdh)I+v``U^9zbZM4Q{+w@Oq8^`eTiFYOTjVu9p%JDlQFqEP
zLe2CSJCd2OV&x-P5shM9T53ZjJPs%*806yjzRl_wqW;5PfdpgD`6cILb*7^xZjXM#
zlpXV=8$YyW{I+BmYKj!ET1VcT@%}!0YC|LnxHUe|Vx_T8(|YxzpcBTgqFMyK2?+46
zvl;<vlREHn6E$rHpZJd%{RZ*YD_I526VBE0Ma#iYQD!6ct&_?uAbQrxanKBA?lzHu
zt`qU}EIu#7w66PQ_0-FhTy*haPGBe`s`Sf+HLo}7&~c>*Y&GqW(uL4)$*`AzMOeO=
zN*z-2+=8RG-t~#?lt)=jLMa4TQz`YM{B*}0|6*F&Rb~#!I9^U(BG1C%<h8O?Or+)0
z&ao4l!f_A#$d|AbwIjeIW5dAc2&GsuNFD{?tU6nh5A5<8T*HQX#(C)+`5yonV2$s>
z(S4=_AefsTy_bO}L>|W`Lb$rdP9hx)<FXDvCu((s??Xr=ngSdg(|@CpTlaI%NnzPW
ztMBS<N0=h6@b4M;%Kh7Y>z84qBGGVE@@jUSRpL^$uu~uX-T>7w>G^*#A1b4_i9g(^
zV*jKC`%2~``hopC=;+L9e#oH;zAmp5jPuY8Vs!W19@som*DJuL4Itlz@X;sB$u-rA
z9O;qCY^XQ&qNQl%BwH|M&HRhbD2%E;^RaNTdCI%XpL*L_WYm+`Q$wHmRdtY-&!Tjw
zl;?=)(LLN+`T&3-b=67w`-4#EWMt=3%c}y>3iKxC*nY1Nk;+|o=R+GOLOG%Oo0#!R
zQM}`c%Z-BI50WrQ_2-ETHkEXR@T3!%83ns$?enMpmzvQG45L-~9@gs2+T(tOH4!EA
zjOYKUDeq%Y$Cm_vExauTR2NzIcK%OS?+xwJT3El^B@1<0e*NM*bvQn@N_I5Vr%K0|
zBfUP}sy|DN>kC=j^{5wc`8`z~huaoblR%+8u+z*vX!k)9>0A?)J(I=ky*5@hXkWRH
zDc<85-cBCp&O8GI=iaR_1okZqAK1$=Yk&8x#~B2HnfQu}K+#-%i)VyphNesSHQ!9^
zW7p`a+bRnM!oK@W{|x#4G<Ye<<b?w6OG4<cmXgulX-7?PXAjmal<ZjVXPj_A9&erq
z?Co8#BmEYgK;l<fkjxoQr+vsTdE)gob{qVZp8i%khi2pkTWanUqTS_5>wr%)ZCY}1
zUn=(hMcRUfEzYQH@aXOZPZT`CP=Fu(jYVhRaGLM7??uimU{sY|a~+xReWMlU^A#{r
zuU9)e7jy*0z>irCuie%K2pF*dP?uqr!^bMCDsv0$%j)&%UKxXkqSviS%(iVVSi$L$
z%{7Ohu{_I-Hpk~IH1=mSCcYQB3J+#9cI<W!P*SLY6`+6EF`I$te#zk0N`=rN*pDI=
zaw-thlIql<ass%`<R(IM)8q@KZPGYoZJ`w31_V9ugSTmo^@OQPU`{svKGgl<Cl0)W
zr;HrF)Ou~nHc5eog*RIM@ynn^Ua#{sixc2Urt@5HvNE@y168Nu>EXe6bPJPom2ENb
zVS;$}GHAL_FLR$3cCQFF&n*E&yEM}k7<&_=Nf<qZ?Z1YiW{#cpPUw%N1PWd(SGW2o
zq!f1rW|7nHF(ko2t0zC~FbF^oFcPSD0mlTps1rwQx7z|17x*Yr&3%gu`WT(4YvVZt
z7}@|_V3cMF0(BGHiQe}#ooGT?YofRziU|QKXI(&ZeyJelF4!kNwyAYfFbsIpf(9L`
zj=LkqD<4T(IEpptl}lu3)N)X&v{K4dbrjo1^2ES3GsHk!;csriD+;q$6_R~U_Z8ue
zo?>&dAl9yFH~~B7chUjazIHBp?_@|t7G#h@Mhng=B3hM!w;J_%Y0jifbD^CZx^9Cx
z4KY_5;Z_bqA%_!1g+$*m?@W<<&Z2Cqb%iYea5y!}P3ePd(9#Y)k3>W!FZo}X_wo1Y
zcgz4n<}s^(cb_h;jCl1~)AR?gG@Xk^<MRdWZIEP(s;836eVeqP6-@6h@L=bS{%Z!0
zsV6~&W2B4Ji;H|XCq4@1F_oKCF%$BaFV(1sT>XD_QQ$n9BWNj}N7@`vwNXDN@=hbL
zrr@VeX7>nBr%{~-+OSJ;IlO;W&OkaUIW9#d#vmDYLM~iA)*P;wqlj)=$yevR4Gx3~
zMkX<nxQnETNtAsaQ^35Oc3YOC3=5gpf09o8rgVm{X#-Z>AbEfqFj^lggk#s}ZFIGQ
z_1QcMI)~yP3O&@R+2><U0bSGT*5QpgbImP~Z{h>~d{eLB@3PReiE6_W8lq7u_o<C%
zR$x%f)JEhL*_{gZCm`pyK}-ST57e8URMo0@+3)DrSMTh3y+H`8{5ovb318|;mpK`U
zvxO`<1YQsIP@7H_s1E|_WBm*H3n*vaO!8E=<sbDpM3rw<S|uux!_|0iV+{JrE*VAi
z{>h?WGsPIPueXU$-Lp#9E`Zjx%EH1KoPHVrq(^&ayAVT_ihO2|a)t7qZn6@Ry`Cnb
zZ&%;a@StUrM}M%C-K>Trm(SC$ZhwFx@cW0ro(#m2jR6NqU_G8F7%jC*9@VR^MJl9n
zSy}U5HXoVCsHJ{{2nn8^1D0V&$4>g%cQ=x2PH07T8EX3-7Xi%*j=?Z^*Ohl^%XfIw
zKSIt0DBxEbauPN0p!F#Pzx-;Q#WH|o#q`wMko*2a2Er(;xL%@!8+w(%AVH2MFe&$*
zG8JEO-|5jNkWoi?B>#FssM&utEF0F5;tV$Z@GfXhk_e`iFwu>~^8}TmX#<XmfzSED
zn9RrmO2qB3t9lg?T|4^K*vm=jbZQW(HdZG`0h=yfr#3<-T8M*`1iy)cY6if+cM!U<
z^r?r>j_}}++$gm52)M$ezkmK?6{m12(S@W%+*p(@MJmvg+aGe4tLRo<8KC^<RaOj-
z%&k6ai{e&2NUJ8-4Yuy_OOTSLuLf%Ms^aGfeTbNpl(eO~llna<H6aV{J%#b@_6i?_
zWJN8?RFeNr9a5?kMAZvf12@i~AFk@DwVUCUb-tv;bpYfO=j=u8<gYj&4-&}c_|R(i
z4VCN=n$=T9mZ(x=hl)(r@mwkKc=5w5;R+vz+h7ii#MZ&vO1ZIejH{O@PxFUu2WJqb
zXE6^tmIl4KT}WPxzpop1fCL+gH~>W?1Ce!4CXqIR3JQ}>S<XyBRtcdosKOb(mq5bm
z+Rd#Ic?q|sO{Kr_VHA2*?AlTCtHc-X@-^nm0^?%<BX}6tf0D?x^bBG(sB#>~j#b1u
zxn9SSLviaDdM2yocT6(;sNWdNF#RZ`<`B!_lthM_*(ElG37>X~uX}vjybRw9&AZ;o
z9x>s~V*Fb&RAaqDLPLk)3&*S*b`Kz&$^V@MK4k2jE_<%NGUiG3%Ts_fA5v#U2MJ0E
zAJaF}TUV2aJ%xXB%-f(E_RTk-E{r7kcT1Ms$`r+SOm(K+J5Ej(*81N@t)D60ODh3T
zB{#aIKs+CZoZWRM2O}Xi9ydTI*?)=Y$ybI7rcxdr<wPq(Bt3OIq$x4=tAGb7Q$D-s
z&QIzg_6r>dbA)$l%*`a`E)^lGVFJCUsPB#FA?mCu6+VO?dn0)lt-Ulzm=#9)gvb5O
zpTMT_70=lx((f>w+G3?8i>jRPo~5*!T&@AzhFRcUo;H7xxuLRy9@xm*Q%-v~)0){*
zvlu$kWW^W0rrY!Bp~_h!SYX`g-&(YEPLLV+RUsP6G2e~$9-*QII<`gmrkoG#N??=l
z%9tF7--uY0{;4n@pJeS+)8Z2;P#@0yWy!IY>7OZ{oz~lfy=Ey<_mTHSi>RsFR1FZM
zSyO0E@6?;`o11&VEe$Tj*ol;L_DQ}y#h{DrUAZTuR)S>nzBP&MRa9*2K>34IuWG(9
za}hhXYz`6uFHE9|2N1C~u}VQvD>4as)J@cW6(^2gK^|nWrI71ULTFT3{7<6<B>~pr
zXmnz~2l`x<D#r0=4{=x^1=?1la`OypK;ITkLJgzcoX4j5TK#YMC$qExJ8gH}LCgl*
zs-{kD;1)M9s!fRSY1W(z^q#>nSE`&0LaS{!Z;TsLMC4*Xi8-r*i=^qv7Dx9{6RZGL
z%|gnR;}n)!H4NSUtpW5G-4PO|Zl`dmGa%Y^VFfX~W@sdn#rY-7Z!8rgRAk95>2^WR
z*dUl3sKEuaqI~mnbU=v^{%DUW+MBx>X0>Qvc}!zLtW-^+S?%F@&NN^q;D&$47qf}s
zl3Zj^kuX~B957{x=wB=VTc7K7V0^1>aLhscIIG+VEDM9pwE!r>4aN`~mtQ;iKfxx0
zgw46rW=LZRxt*#gMle!uWNX6nz2i&S_@0HoTcrIK(O*Nes~H1OntExcjj)Cyviw)B
zyw`XuT>>zt7eaB{XESb)uA)m(4!hgrP;px`B~`Q?GM`XN4a`=hjc?|h33?J<b@iH6
zX=M3S%+QLlY+R*jZz;th9=SG+oh=*N6IFrbv%8h_7BbNHGZqcf5bd@!x$NG$4#5}F
z!?XeNwi?zyEcj#0-ryDCC4jva8!57d4cWh{*G<`kngnzDD11m{+E2Jsy=Co)?U`55
z!hY1xGS63^S5lUNpzp6EvTsJv!rhIa)RpV|Cs=4P{5trqpWVu%YVPk)T*B>$Nc}@}
z8}}I~CfTxg&4>rH>-3mcnmiW%ZqSQ}t(I6p@DFZU8R`G|`aY<HHbRo_;$EU&)-zSR
z>R6%#YTh7!e7q{$6y|-|p#)X5T}iV)D!1K~KDT2~Oj9=hrTo4CH?{fmenLxI4NNp%
zVA9kj)OSx)_HOx$@Jw6)5)Ix4`>2)W%bNxMsp9oG{B4_&fHA?W9kvZG6JfDlB_v4=
zLWM*YZSBI{@(r*1;jrRXjyNu<Nyz?jzANjpNXApXbA+Uks;%T7Fk0!&sCAmDJ4z~w
zfI`&GzGcA7$+NjcSZdyqXZh?0WH>ZpBFW}CBO1+e@C?D+M5w~y3Y|xRK?EUZLMz(t
zrkWGl2N;4cCpf3&c_(l?^cw{f$}Z$Do{S@UR1H)0qXVOU;W_QrU8{1UQ}vr%<nTi-
zwzpfo^Z0D7ZNDTfb1v`3^e?XID%sX7S+p}^nk&>Uaj%>ZRpzQBLG*<pes98l^&#uL
zxT%s{G{Ev}2gjdh?&s^QOhi2tjm_|ly%*}_-rdtG(I8z?mcBZ`^5s@VM5nbyu(~bD
zJ-!(Eyv@^oa+^_@q#u5C@c!HgpxHt2SX|9%#u<;ug+QUmdJ2HF1`=Cxm^twVawW$g
zIqT`fwWJW|wZ0Gk0Z~stvN|mdr9HrIIc$2fPljOS#29=_$FMAb|DIcg-K=*_H@{7Z
zZvESPQ9YrHc&kUOIG5v|pqS1Yn@n*`GDCVS_ckl(_h?cuCPDH6vRXo5!C|X3jZXi2
zgA5UMd8hywSXc!N5u@VChP6O;=i*Q;|CyQ3Q-fO0<YW1RyvITP;j8#Mi*ReWCl|~M
zYTS(RY$}tfxIse!RyQW3Y1c!q%=R@kjls8<is&YWnJ)eSDsSijB;LRmr3r~upq40&
z6V0dl<|G5^a#VBM$8r%F?)<!4F-h?Q&I?ER!4r@~?VpBULPtfvwsQl?pLr9#A{0tq
z7U4NfX$(^IdOeKAc+avZ8O`Y{99RT1Hy62cML8yiDD9Id0&$UI!0;=x=Ep+s56gmi
z4%Z4K`gHbavQlWwnojoD#!D1<%5TO(7e4?FOr8dVZ7ZFTdH<SRE)Pyl4GQD5HHPXq
zR@(>Sf~0CDQ)FTFV>4odo?AwF^M%kpaogc}eJzi86ekB8ATf$y!@t|;b7?Fukf-av
zQwfwVPB@+c)xMgr%myw~#_Y9_s>xoDtfYi6%B^^;<lA*sbc<i<r0{zYmyA^zQLMCk
zU`%kzOX-Ve0Inrj>5butNm#-=f?-y7!=l3=7HL?ZmWrM^bV&r=Jt@HM1E((I6Y|TG
zZa`D#3YXLyiyVXtOIv69k8@`9OK%hvHuTODExM~w+G<=vXKdrXd;O1_68kh15+3gz
z@$oZ^5Z}g-<pY4MHGy-tN6Yl%PkQU~Yh^!>t0t3J#6HZ9s80RHT_*3GX?NK^zo+_C
zq*v~kOENVEp`P7E^iAz+xo&lb^L+ZrN~X4r-+)|L_tJ|xk#vUU^-pcn(Oj_ZK6_<Q
z7htA6xX$N9X8?mpM(D|{*Iw*bNG@b{B<Wks6%6(+FDB7)70-=jQ+Jfm;USU(<s?}Z
zztwdbv^w)*Z>BzXl~$=MEfIJZ7cD6wa#KAHWD?GAYUw1s%b))fH04sP&~S?JPvc<6
zQfezcKfwb?NJ)<O5o1|8SmM#d+ltWaA&~!GiAvo7qwx8l-CItPTDg+}rs-h$V#g1;
zYs_~-0V)dnCgM9>#d?{4DG9cMetk+KO6r#%r`Z_b#7Tbzfs90y1-p#~^L$`ws537-
zTc!;MF~f4o1RO`{68Q4<A`#U5-~%d>k|eOP@LR2KV?=ih^ycy3rAUln4nq`*t+vL{
z-*PXG?1>Gd1W7_*5^IV*pw9gQpWUifA<Cb-XTchA6kcz};5eVa(aC9dqs6_WaaD=_
zS^)T4oH~xoU*8@eOi3Agl%P`LJIs+1q+Zu`zSg-M#v5P0YYWsHjOO@gv0RsEPv>&R
zN1XWwbjEH{bAB{S+=0}4gQmRnqLieBx;h2cykrq2Vj_&`rFzd1Eh<k$4GE(;6rImf
znLF5e8%0lWLPhp6WTFl@0bnz2F}pK9IrDFWC+dInaJTW6`fp<v)@e4AFxUC2vsh*p
zwm5Nd>4}#1TSkasVwM)eCz<xH^FO=CxDm`911l~rhn&FeMBpQ*1dO228gfB!BVtE-
z+cmRn<P3qe9_;R@4VWZe?@bn^V7lAj=z>E=jU6=Q;QU=2L4RrgDx4AuH#BJ;Vtlpq
z3oiY!mw;%zP4A`qzSU+fTlD~z0iDLW<FW9HYgu-OJ}j`no~-&~x#E6CI>cm(1E3>4
zi$r{W$AdSCpeJLz3sPciVEEI7x8QE*UicMm+%ad+F-|Y(d_Nt5<zrazoc_18IdVyt
zm<7uM3ZeD7V&Jo|quYXPSt6+U#<kIQtQY+WrQUc>>_At>^n`!Xh0ECFh{j+g`Y!Jj
z;q8n>x2hm+x0G-ETT)DqYW*|gF#1cx=HO-RL`bkqr5I8}kE%p=+=2S0(vt_fF4RPa
z=iy$pgUvQ!d%lRH3Oi<<oFr)>WAkiK`z6#%N`<>&hrmHx(D@I@sdGw(MkaY`-yc3N
znyA#xY&fD(OkROvOKuph2~UA)4xV?YI}^Av{XH<4oS$++p!mq!<gy5V-;b5?Azj}A
zMv7HwmR%`Hw$F<FSM%H-bc<3&OP7+xBKUJh*(eUIFW>>#-Ysqc(m~M!i1gf3do_H&
z@r?usbIfMW_HkP@%cte)=vUf0(X%=|J0>7B>Sjk@zO2K~yJj_}Ke`?iM*}mO1VtsK
z{iR=f$R(1!4&O%m_wJ)I5B+XZeWRiZ^pq!6OGYB&i1`ut2)MU#ruU{7yAqgq>YAl~
zj{~Q51-Ou^zFyTET3sk3v=BNY1#EMv1!|g_jEhMxqrSby#*XRmxd?fzGhuxdit*$m
z;|uP*1RR&PQzYhL7BQN=g8&7`iqY^x_l$fzDlqAk$mzrbX>Dt|*d*h=<@>5qP=Aqt
z40<mDCoq+EU3)Cm&uAD1mP=cXMJlHJTccqoce!jLu9YcJr38x{nM7DHxPC`Y3(#?u
zlJg1bU7in7?M0%juqV*PMuzJa<e3-9AQKzq%*%|v7l}UMt!(}uEe>kQOVmZtgb|ta
zU}W(qtCmGjl3HDh#ucY)4EzL_gANpsr*XX}o$;I@mz_qkZp-vo2MeefZv*gB*k|p)
zZaIJeXC&Md*Ww;{t7e9DciIK;bNGbbyvqh3lPn8ZfZcE*Ch0*!|28JizZ^bCx$zBo
zd#2_N929z(iPF;vta?jmFS1`iqdMGFP%@gjU!qhHXopRs)i=L1?*Ic;0jhL6<8L{w
zH^_R<sinW(%ISe7`UeL@vkX5}jK@bi&OUr);;`gKDUh1iv~Gvs`M{F#_kXOB{Qvjt
z@~m(_lW^%5`J(a5nOLKafoVidQf4ASpOELO7a`FCB~1|#E=P<Y{^5rI2a^hOY;7gg
zLhre*vnh8-fAk?~>gh?Z>yE*S1ZO?lf#|z?-)^g<StPwfwlu-MwG(LZs{rYy@9<9?
z%_usQBZ|L(HGL}ISH+?F%=;Mpiuymt`JUp);=UUV&4LVhaDVq#@^t9k-72ZAhxog+
zX=xoGl9wUBgEb>{ANc;iNuST8eyOSm&YFnQyJj`N8eOwpWHBDxE0CdW_Q-|Q@bP%C
zTp6vIQc*V$=2a`B{}*7+6Nl)`*5x56rhei;LiN}_cgE`?^w};O2ZA@MM{B1jQLePO
zkT~~z9!!uj#vDC{B8=`E@`5)8+w*{CCpmmrg)wqA9EBJM-_xZv11UIJG>$zl5NfsB
zl|-LCNVq2zUe$e`)`6t{oYRfeG<1u>o`~ISrg?-KV3Q!ocDYefYsxw+%J+GyuCW8)
zUJ=U9<<P$gXk&EY!K%)yoFqk3JdKuTg=AGipE(NR!++-<haRGJnLsF9-0kLPk@5W@
znKuNo<Lm0VzyK4A;X@JS3%ro2qdg_o-7IO@n(G0zm~Ew$HT^v7_vjm5@(kASj>gad
z*sU)>%Sjei+xcMQ6PixTovtqZbo<>cS0!#6orM3*__dsfFG(|GQ%#+vAkn)h$SEsD
z`lq^y0*%1)1kCO96gw$Tph;k(tM-SiUHW6;mzD#&W@h+7dMbN^Gab@bcI9N?WTAVs
z`>84iEUjn-tl-P;rsDYq65z5QNCf7#Xnw>+w9XnFSF+t6ri2A9ErUHuVqpoTmQ$)t
zba}hkBZ7gWIldj3WCU7}{t^Z112hW8lC<&2t8G{f83a5}aem&WQT}Y<(@MD5zO1~Z
zo2rC7+s!#II=%>=T4lKkoNbajV4Ep=KIMV^9h6#C7lM58Twm#$qrDd0<T9!uh1JQw
z)D9^OuN?Umaa4k%5Jc7st{0~C<jo>v{A0abXCox1`;iDHdOmU($2LN$kLZU`*xXcA
zF_cIH%BQDVjn(0j8T>uOx~om+@I>}(@06Kl`qGk4MtK&GWHeguC=J?J4eE>=7irA2
ztCXcTLv0MtzwtkZl&@2p7(cgJ7k<&7QFL@(T!U27fRUarB7K35aY{jaEdvr8sg@b2
z=UI>u!OChVD?A0BP8y1WlvgSlpuIWuIu%@C75eDO+-Bxsm|aJvhQ`j$kB5<xb}99P
zz#?0F*WJuCVo;S0*iKD^-KSGKww&Yo!}4qn#Zk7y$|w@8uE?!cKU9=uW7G)o(qPI%
zanSc@AynoIVR%p0gFSad(y!RjhuI53UBLl*WBl^^giAE8lelR<IZ@gYy~gCKph{ap
z!-D`P<wJu7PZA}PwL$k`7*sLIFxH*aT^!a5z<_7Q#_f4z-h9JIo5mB;12as?(mpyq
zEO}>CpKS$SYXq`jR7nML&*Lu{&OtUz{iaNS=-RAA!cSl<adc@douh%yuBs!<nCF3G
z>ahGOGXh)k<egbZM^{ZmNEXC)|AZtKDW?E)gK;RFj0nRNIiKKYq>g3fm;bO9ZYJ$I
zL$qfVa~m#RdfoT>WgihAvhmI};2mfNqzfCVesWmO_uTKFHX!AqQ<F|S8YDAs;-QhM
z91bw?+e&>?u~E`>nvS)^Dlmk;=rhIi7L!68N^;Bw%*WKcd1(y3g*|vM|IuXAT?g$Z
z3ps<6c+>;k92#bpr0<4k_yY~s-K8H9q_?LE`X^ug9wCzzP_)N6H}gH-wVms`Mn$Yb
zbJUJpUeSPSB^LBF*XmhCxm7f&s%Oq2Khh;Y57%4Su9uH?W!6FW-(itcTA(Qq&dP2T
z#>GemK;(65Lg!4ZI03~bP(=a1!8D{~%4Ta0lDGQ~fV83Ir5J2rEAxEW(w$V0eG2${
ze}JF*H#=VngeF$|U;^4OBlqbccMILS!XQgClHY<+^=6~}AufSm4@&_pg6QZiyikhC
z@U(uRlF8!klR0hdQUPFR?|Y&C=eTHKQ7D_I2RCbiy&6f=LY&<C@!5+VfqMyGr!(7Z
z`@L;@_p-F?3A)}y$$zE#-xQ6Om&huDh<XZ$^ADLY#dc#0IOE#afkN!sMKZ>@^(z(2
z9moLrtrzi7cm+~WCPA+N>5}A}ZsoIa8fT;RAq-HinI`G75=GFW9if%Gl{NdEEk<rz
z$D$}a*1Xho)G6>1wm$me0Cc)^=n8TuvKQjvjtmku<yy@=JAhd{g~Ru}*`hD;XJ5r!
zuw<EtbLAIIp0wIrd>`XZs$4n(RCrWn&b_p4V7*u4Ne%u?ByY%UM9$CBSSD7%mo@p=
z%GkIyE9n3tJVr|oA}x^ru$n76n`wc$U8U|3zWV$4zX(ugh~;gezsWB-C(=Vkw3Yzj
zNr^rWB*-dA2_W?-Y=vaJpt90i--4gxA2FuiRQM7C&AeayPAfcy7|i%r3~~)JSw@Bs
zFUXB4n4?Y+Fce3`Oq@(#<Kc^U)Gkanjhb7Dq2$f<@P-8@IIG+CZG}D{rW!?4dm^oY
zt&;DfNg*ria!0%yc*Zha+z!dT(QsqCqlNPYld2lUI}Qfh3C1efOCU!(iGH;VE;+ul
zm)f3IPoV9bKkV<7?pi2>S!Ek2sI=9P6pd=-EgKR*NBIHlw0v)Q3LHxi=Qn?{iL#;L
zpeRW9Jos090?;3v1v%l_DN&=Jfh7#Hy$QD50gI^!*3W|~=Mnh}c_;}Uj?FOdN)Bb;
zr!M-t!{UJ}hbRApstptIKaxF!M5}8u%fYCs?>`r7j_jR0UDGtA<6(zjv^i`3E5y2$
z<_z#{u~*D}_}B+1b_xo>t<+Z+7gf)g+6)qBNGm!u8gvQAD2jr;$3PC^A{gc&L}n+W
zj}+u-DbaFI%Xk$9#u`s<+naD(;14C$ld<B7#v7T+2hW}Pbu5+Vu0Hzg2a?x-OoFa*
z=ZQ58N9Pp@zWOs^S1Grf!79xbzEn~Cq{^jURh^&p@(&m7fjJSV)WTkqIjwRSlUc@#
zPDdSdl*x+~#=2))Uw%tgA6P3#1~tF}y$ZS^ZucxFqCnN$X}~_gE=@mTl1t`u`eX}y
z7ve<hCf3>FD821e#{tLSDwN%7=6B7s5=BIVgVJgX&y&kIAMh3<hS#u!=g6Xqc-#MU
zf5XfWwnjYSxHHdLn69*Sqrs`cz7?e9#Bs<cMp}sCnaJF>p7~F@G>TolVs5TII_jLn
zvX!ejzxj7g>ZYjj>%EaWPhVNfbTcQok6%cU7JgAH{-Pf|hNf_V4RiYknt4TlLwhS;
zC0e}lmi;sN%S`BK*9#@g$PGbI6iB@@A^4b%-Ezd<GrpG<BYon}@jk7yz3I;6Y6@|@
z_v2Evls7g%4Ys#wNYbkhE4d!-Gp0CLS$<eXWOZTcJts|+{{?gS3+K2{+m=oT97U+e
z#bLd8pvLyQ;=8&s+`ey~yH0ucypNxAU+D?slf3s|z9h1Mb0_Ph8FDf)=4Photgxi(
zDB~+}C`zr7%NWPpFUqZG`N|Z|CIt%!{Q5Iv@Bzk!Fsfu|yU|Q|&amW1?Swa;i||i!
zV~B*nf=)JJ;|-DMGhY=r_dr85O0Y>c81K3jWBY67P{_$b&M{d+(dOzTe?P1>rPqOi
zZN|fX54tdA>6D<HS<m`Ul3ujnA=jFLK52@grWL>~E7BEMjC&YS^@hbzt&od_egzKq
zF;Th`cMEKz*N)R|+{;a_tXvIxCH@A$!oOx?=1plqs!aQ}`X*AyfPHdi_P*(N!Ntk6
zOE7#_k6aHV4sv}ErhxdS1>PEc(}xca#dirkJd_{##pME`hH^GUV>sY$l$+LUrki>o
zh(k1Vj%3Of8n>ZBXi~nB^JS)@xC}N({zt)m!crrFZ<Nqa0>~h{(Ti@GBQQNYnMET9
z&N1aVO0+~xR^B<dN!}524V<QAC+O!CBk-`V_v{c26`J%M91h%qQN_Ho<2H*1c^V0O
zOd=x(7<HOn<*Qp)mG7bZgqSv7?d)g(_?10ENnsv4C1$#6ZU+Sd<Bnd;cVGiKh+6cE
zYl;^tgPy#YcjOPd`-bM!@}}@q>5%N^NU|l|-QhJPgIX4F=xp}qms{+!WKd%sAVOl9
zbVsLT{tqKun#)AK*VeT~-oUNRvGtR`T|wMU%)nb&{EFgR<w$cwZ460(+4VgoggOoM
zKqqSi($l!LyYZTFrn{Nx+W1hjEpK&8<JI0Gzfs$eZzbv3Anh@*XO<t%r5^5lsI1G*
z5LB*<z$~l<-A2YYCDy)uls1f031L!m_VmXv0IwXN->`HmN?6pYo()d7d(o>$TCk;0
zd+G+l0#z4lUlW{^U=3RNz_M&4Q)(D8Q`|FTxje<lLX<tRA7mm@MF2g+`}N8*Jq0jU
z7^LIGwAU3^f_lnN$*pMK;Z8H)@{~5cTGLLsSvQKt&gw}EFUHDWk^*n!T`+wk7$y3Y
z0GDL@RnhdRW-si8cW&8@hOV{B{vTI_aex&?E(MzD0E6d8M1vozTugtUtHwTmE;0>a
zk`i-VpUw7)?y`i>M6mSNwt+{AcZfm!P5IEQ9zK{(GntJ6RUPvhks>{SCNE?Uj!}=-
z5MamOq)c(OWmxnqgNQnI5_jY+tdQml;1Q%82>SLi1kpsD!Kft&aTCOz+w$cBtqm_0
zBw!cqjdFt%038hqNXx`2Q+Tv?rcwyk8M@#d3G4>k?^i?(+8)=D=G%m`TPa{r5H+d$
z;U0r{i!_zeTS-R`dm2e*AhtARr3$_N)<tCD=c0u{jk)m(amqvu7x?<F(jb`Si}Wx)
z6B<)n9>dd8efyXQ2Q-v@zl4*j#X(Ogmh4A+pMb<xo&duNuNeF&Lc$6**Y;N#!wELX
zNVyO?CZjEF7-@5trk9~M+{ee}oPmDj$F2Gi-&QJRs?MTSU$}*7U%ucwm`xlG0vb9d
zP4F7nIswSu$obGU!5Y%?5Wd@j3Zf#KGDLvw;W7M;9<*~67!pgY8>Uu}GM*uH^%*{`
z72Wg<guk_G6u~<JYYHq&m|4KM*-phw*q)@q?d(AEZ@mPC45w7srb@UX`IEb?Y+OOl
z!^utDZA+6M;Y!jvg5<N$DUl69*g|gNZ_WvB+SQ?~Ku0F}9Bl5HbE3(PVE3POd)OfN
zF+6K_c`_Ehk|{!pw4xBi=(>kJ6|eV87Q#m`Py4JJKXmF6>J8`0kWGiV_4!zT=Wa8^
zOh9dc2BqxDBwW1<JG1${M6k5v`19rbl*04hK%=A}v>1Mf1bCnyNkTX<E_;T&biEZt
zf!o<V)-_t8-t@AgTZ~0+&~M+Fg~T}gSdCLV#EFk*iagVdjyO0SpFRfJ{#j&N%+;@&
zH4O1>$-tvXgP55Sh~1pnJjhh+jU_~U6{M{)bN92$GCs@Aau9A`-%^`T#@0*Xf~Ep+
zv9*V?HRuHjDUA4$H<E1y@XAHgbR5dB-Pb`Raeghw1}>;&&7xy;hu-txL>%$tp%jiW
znLOEcuQXrFL%of1g5^%DuI&?=FStX6^_6<>b1J0;vX3Pk<8n3`>BC+in${I4c5`g4
z4uxK-N#exvzA>KFvE?C$g~|lIyeA=#InJfB>^?y$^`I+~U1aT2&e*h)M>>Mni!xBS
zC3qiA;Pzl@2A@*TF)F3wnOuQDw$Idv5qGAgjQ~!awv~5p3>I1vcFa8EA>8iV1|Q7~
z?=m26RuPx7#DqJtMKlk;R+h-M$Qs_f3CvF!7ol_3NX_V=40}H-9M#d`_>;i`$Aptx
z*MZ2&+YVr>r$x}$m|hG7wJ3X{cxt$CHXk@fwNdr!xH*%tIdT3=y+AI-oflR#wDYt*
z?2ua}FQ<e)hPiDyD#;;TqsfzydZdU!-Bp1beh!u-c8#h3Tt_GBX{QD5vdp|K=l`UX
zRa<2eq<Gad*Uo25_f}!DL4un^oOHW~KRu2&r>*r}@ze!?HjyDzmzm_3eI}-c9R1DO
z7UXW)1VJPXHkHDT0cO`XIWD44tLdumkM;4+?7OEdG=xzKSyS90v)$$YByWc(JbwzF
zG%42va`jNBuN)dJVNWSsG#Zmptd-`a8eH8#4P&dPdM5w~p7B(iFeBz-XA_zk6818W
zsVRg4SMgbjIttr#UGWjyO51_=`!va9Caoc}WJPhU&U;D3KJUf8<(DDusno>JzIP3a
zzY;TmBN-6Dosb#R!X?3GU}=G{R9&>F@Vd2Uo!!p%5}oT)()%`0k^^*QG_zo?PLpX8
z5yM;?4aU>gZ$bi(>-l_Z_0XRT9NH(l3a&kCGLt)EAJp~*%CRQT0HlC4_0Q}!3H?W5
zAorpoBp(<$0q(p|>O9NEVau^hMno?Bn`N@}6)R4yRL^AKy2L0FATrDIDnlM^6YvUh
zhqOk0vxw}bK%A63k3Zd_XRYfkZX?Q#&R_U|xS6^4qZ9#T+X5Ha*N2|Q1=kL_;K){?
za|%`3fe9Ofwub*eG;HBd|4qt-8Rh>f6~J}bPE_1UHD0}QzS7hhOfAZ2Y9}OA^*qT|
zw+0jG=8xWwJD%kbT6pFA0YI_$T*ZnxgGd)s1}6%gZ>0)K=VB0$wi!;<PO3tdSGE-7
zLvP8+%L`Gi;JWd_=pUu`)b~A<P0}?K*Hw=^^QuN-{2vii71lc4&sSXl_^u$8O)_Iq
z=Dj;i=8xxsI-YM8kL6wz`=5M|Py$2;>qRTwFsdCndh}{0<WJ#%Vg+_-Yo}t80-$*^
zI$UZYW!e?PSvEpO_9*+Gu&KAkgi=jlUl%R&k(7DeJC{zhc4{P1ND_H$<TQfTx`g2S
z(&?N|j>NlRN&mY-c|4{3c2~kMhdx6A!_dgEed|P}RX}6DQt-)4;6yw_trU3GJda&}
z+H|NVqu)ez?k)s{u7g#OBS(asZg7qY|Jne!+Gid5VmT`Z^}L%9|A-_4lCSB0CE%|j
z<L%m)Xc_8_a<!qK2x~LWC_R6m#gUNp|DO{>D{n_T*uZhNE3;yobxpK~Z|7%V2xaA=
zr9Kiayyh{rHQU**e0MiWt)Z80{0^7e5Mly9Qo9p`ZRq=MF(j}TIcvt1@u`3OZRJ^w
ztEVvMxAk7OGe&+BVrss4P6L8~T4uAX@>j|4OuA^6m|DyNuO+*irJ!qgVB!2hQI^oR
z0BPz-W+>tgjZwg6dAmtAi<*UE-S0ow$r>=&8QqC^*H8qmGNSy?1G?;q-K7uz4hDDo
ztJvm+GSaIPo4$ZU)O7tw!GlCJ$`YuR_oUb;zm-P=JAu;Z>Cds`^j8lV>N4kvJ6H3k
zJUNL{`oDu5QpUN*1ZcvC4jh#LCeGoG`DKA<vhAi66O2Qcz&m3~-FsLO{8O}m!;E8B
zIbx|)lnK6go?ZS+Jh5<nW_0b{Uw~|53(8qefTQ&P&(ffOh;8e=)k=b`4fz}q{qCpR
zVDr0#s2I4OKgKe7oQo@KbIQomFA&vs*p#8p0X}OX6130Bf+jG&_Ju^qk35<I+m24)
zi0a!kISYWID%SNk$AhG+E$p_;5pB}0<W+IFfci<Tq+9S;Cb!V(_$dbXqDI+Js(`?*
zSa#MFbl*qgKp(<inRQ1pIn^8yJb9!U=+7>rDyW5xme)bdC?g7gH^%=(JbX+j7(gNu
z2VY(&FLlpzcwwbnZVW&hGF+YP6xGJIZXW>;a(D{zo6@dN6z$7lTp2llf%H0ir)u_V
z<a(ucBSKjZw0f=*`ZVaft3?2mRyu5INFKWSrsEH_BKuid9`Y@0pZ1doFf%0t&d%|1
zH%V$MI7^LF<7b7m>K3eRw6kRK7WH>=Phx2SJK_xjUzywOub+h>w~lG{E_1RbefzkN
z1R#u*Icn}|i(Y|O#{@iq_vEX#;5UU*5zSe0NXB^=SZuIAn4jV+S|0@$o}?q3&hz|S
zODLeE)d1;p<hK1%zLJ`;9?m>Ha60UO=Lu<&yfGp|M4c4f;@2JhS1oA)-8&`-8EPr0
zYUQ#$2%D)V_kFVy2zTxpsd)!MbprlW;g@ncLYuC)N;TqVJ$-p_$cKXBQ%e`F6#u)w
zdiZb?*;$R!zql3+sGgIveeCQ*Ko}m$cQ=qn&F&J5a*b9A#+Z;GoN!Wc00GcnH?QEM
zF;LwDx-$+_UMHw(s$_^utp|zr^+U1-JDJJ?uma<|Aw8iYgQSJ*(0)+n?IGpz^}W5G
zoQz{M%{MJ#EgqV;v`x9Wjp1MD^b_NyfsK`$KQVO|Nv9pt1>03ku%0#JEw)}tgo9Rf
z;Xb)0O=~5S-P{|9Cm)+l`1>3i0g-Su;%pxEJaD0Hzj&Q=C+A~B({2@g+XIDA<<9*>
zNp1eIUCDO%T?pfJ@#AsGR8`Kn)^z7EK7g;PZCsG^3-^v_tkyunji;2%U1mE~-fn-C
z46R~yj2>S-vj}WVSE`Q}_396o_m2#wj=`#v+Chy1I;f(1^bKQbD=bUQVr-5Mh)iIq
zZ!>ENM0+{(`ipU|+u|Q)CRQ!uG0<->VSGEB#+qt+xkr0`5}PpyhjHt`Zv$gy2610H
z;wM0}e~{wO<36`pl=g;e*ME<7@kP@kDha~_Jl3PIex2Hh`vU^It0{pDU1o&@=0>a2
zmP^~K2Lfj~7d3|t|B$}Buu^o0Um$1?^S_yeU@>q%yXpaX5nY2`&#t2wGu+j_nuJ<`
zUP3thrVL=tyZZm&j$-|to2i1VRW%a|Gf}_ANwRwGIPBav3s5GX>j2Z~#-%QZ=IL+S
zq&_P;wDGsa6EU}U!bIrn)CI&%#q`N#8_sw(kb#XV{cJ3MoMb5aIjS6ER9FxbBWnzN
z+?-mBsjmy33J)n?BqG~P$D0;?;->x@gOpjW16w2g?oT<StpS0I22L^(YvC@x-P65y
zpPC7;h0lFsLV7+1JMS)mXj;X(sBpEmymP)m--wTgU0k^>NmgM!MBOzr#KpUVJ_oa*
zVrl4ptNEgJRUpk22NTnk@*msvbX40pMqWpN*&$0Hn5Kr8k^QG4!kkf0jI|dX>!WD>
zjD(I9`y+;PR>=q%zpwdtzXb+QtiC7)N<AD`#GKNNR1Cm<OYiLV8YDQM!n3CHEzKA*
zL5!iC)C+P&FM;pm>Ty1PZ*#qrIdF+sTKhusQdC5In5R2F@hw1!mA1p&&s@LF-v#ej
zxtr%HtgKxOc{Gz$dR@GVN!;LGushs(m8Jii!6G}BOE~}fN&pdkcA~RLi=R$vqTq+p
zrD(Gk&IL*OR@_y$&)o;I|4Y5$=ZCqag5XqHs|8&lw--|<_ESu$X?1qUGh>*<9o9_P
z^|r~i>HmhzjCRnzJ#@U(O@y5L*m-$h%1znw3G9(eLx3?Jf(sIAXWhPyTZ?Z#M*!P&
zBs>#8Z?u7`r+p6DtZ4Z$zA^OmQ*R1*rKIH6k$oHlfuqhSt~Uij+SAk!yX73bF0bi_
z%==SbF8ulAOWs4fq5IGMqdB7Iw6yTxcByC#d?V+Zvu0`D65dFmo-@*#4`cc!RiAi)
z%JFegAa!7(c&G7(z2W*dN4@Di@ky{_wL5zLpE|*T*81$86#So|5kd$@TcuXWx1%cg
z&AuKz!^qb!7b$H6F_l?{>@HpS7(P({$cx`l(4yC?857Sc)<s9>r}+1J&y&(qLf@i5
z>uB4?;y(mzE?Q%(PVX0{ma?gU?<S*v{Y5dv`c&Gvk`0Y~chZ3)SCVtebJYg;a@pOQ
z$cDhCWePzQFjdD}*K{0BuMjYcqdMSu3C^epNBHN%0KoR|7BTx`LfX|6bXrc|1leGr
za3v29zOZvnJ|rs<xsY8|;?j)=Yp4X#=-5gaaSEjEW&Ic!bNL($KJRA{clNQ2!X0+O
zz=7Ef`Y^UQ8ll=7R0m9=9-~)#^5dQ~-1B359*AFB6qV&{Hb$Ww7G4YA*%b*~jj}*E
zwYG-|f=vmAXN{TD>4mkFzdXUZEt*rs@%mi8H3|>^dA@&jyJm6Yg>tUU@}IhSH$f(s
zuT8ZHrA9xJ)MJ)40jY_mE$FJ|pGc4oA|jTws5Q0=ZmlmV`MXUk<uOA3!GcjxAj2iZ
z6?}X!^z=e*k<<g$=~+k5x`G?b?;4WX&$B1m{>ENf&+f$&xHi2Qq|FC1>!w{!lhLP)
z27#HF^%vOxdgE<*g?aB@RzePct0foPwW6&fK1q|=iC>52$8-c!2Z7p@m^}fz=zkdi
z#E?|bwkG%w`WxdamFw<_9!j9GZo1xt3SNV<O<tUg5t+{+mi;pGiF{J5wQzHpasg=V
z_kAy&v}rJ22JY}mfB#mE?QLGWkOdrqjOeF{Ys+0W2gx*#YSz2BwYAZ613+T}xqnIT
z$<#ANkxU8gNjj2Vd5_{`A>xUTdVvehQ-v3^b+k(vqepLx=sLhhX|zVj5$6O=M1WdJ
zT&%Y{GG^c5yZI@D#Js2wyFImg%80Ii%xV6{YA}oTC91k<@G&d80;A{oe-G{lb2YJC
zoJ&Mazra*kvD2hb0k2@lJ(N^v!ufL`RDbD2IT}1LTogxux6K`L0auaer8bL&H{$O8
zA^_~KUFG6=yI7(2MbSz3PU+UFRndL%z@6azy96yAq-0w-Y0N|)nTKr=Zp~?F;$Ox)
zmO(7}(A?Ct`9NIGKz{+ESgCMECx?fSmnd10@DqnWU+3KEQS^69V9vp%xnXRFBnXM8
z#JbV(5(aaB4NES5a8MsY!o-<%p}&BTA&QnCUpe(Bn5Rx!I=J*E38xH}n4TgV{ndGo
zyGUG+?)0{vh(zlrmEWnShE`8N7}zW<MUpRVZHh@As2PwA-m~;jHLbGicuU}S5*22t
z64#qo6ezB4P}Hz-1G`=gMAVnjfek^#>flg#et53QoX3aI6NCwgTGx#-)}AL=h_V~!
zENMYZ2SQT%Ovkkl0w6x&jKvMf)}kp6_|PS&vREp=W&?1vhg<Es*$x9ORRTFa2duqU
z%cV5#rc4afjVcXb+1~$=Oa)`vI2b@liJ;@l&k>BtasrwVoFlh#9IkU6hDSg7GlBji
z@~dOv`URX6M@gPB+}&mBpm(Wva*(ThGyK*Pu;RD#3rDc#n3oaA`EL!fl(!)O3zJ2p
zy(2(V+Ppjla7F?ywA_j)EF+d4+qz}bNGy#kSCIhEd;T)kG$qR}Fp7bh6NP6Z=1z0d
zF6^*_mEi!Y5U57wEwiJ&#Y=SVNP3miiC+W|<PHWIlC}YNrBkBh6JoXh%?X{kiwj(7
ztH5L|RL4pPrLe*6*h=<bwLgJWDsYPNR6KNzPqyHHCkn&EkpUiDuR=jlO%upZ!pdxf
zQtGteT_>`XDUx0x1wckuu*Jpil4o)f=$%#}9-o%cQ!`fyu<RF<Plpmp#V{X{Y2}8O
z1CCy#fS%gG@hv!XWU9q+l=T8>BwtKB!w(ZH3E>;<g{n*U`4aTEoP2itx|Zeu7?!Fx
z;+0cIH3dnL8&2^8zQ+T*Jay4pWtF4IgKb<L_vyF{bZ&;)rv`Sd&1SOL10u$g@24?k
zWlM)UdtEU<h(lV~;Boh96w@sUurmiKkLkox%ZevK=%TAcG^<jv4C47P_sU+2!?XX^
z4x{jOqW?7;7R|^p19oFS?IB-e<KZaCQ*52$AP4qr2hElm&snV(zgLt*-<{|Ph-q98
zb&{NZByK7oWkr<u`lgrf0*x^l<QH(%LEVgbTUbb2P!k(IwyO?+e$%iMq7Lk)n(zgF
z*OfB-|D;o(b~4pl!9y^n@IScg{Qu-(KV77p*paS5*_-SI{{2!nZOKWaS@R>Dxxa7k
z0FaO42?LA>Ew|Z?Wse-5nk``Or+-bT1742}GO*wQN|I{qZK-z^2bOLEO=xH*4U5qL
zfYeVmQLWTb+UK0xApurIqzn2vz56j!F8OQoXPVa9^Y||iQ*`O3Qu2gKSWounNRLTL
zAle!9O-i|-bo=^+N)Y+uDkYGfh#5;~xu~fS%QVUs>vs)7nZa`_Mehlj`6&ZHkNplT
zFg!2zvDMJm_Y5(Na!^02+iDH5Zf}ZbKfJ=sD+m~>;?jIr8Hg1zfo_P6Yo*wW53hr@
zYBSF0o6@D?m{j}CxI9)g3r}D_VfNTGF{Fck%|#k1ql=G%GACl1{)cxCG4X>uvH>+J
z-QxJ*B1xDp5V}GRv2vM*NAgD8l&K#T_&0vYaOKrby4%no0yFzvAP0f_O@#tEYa?4a
z@BtW&1&t{hL$J9?DKCc(c^%i6>TZ|_>ptxhd?9N<H>K!TFpUYe(k_(sq9H~;E0GbN
z+f>i<6x(L6YP$8>EtV;QyO^WQTXFa<`!fD6<8duQ#aJNq!Dm$IZ6*naPH!$K18S(%
zYJ@PQIjsfiX^kteorjJ$@4X-4v&PiFst&>{`smrDzBl5zXB;d67u$p8D>!WGXCw#)
zv+rP0Wz!!IUB-P$uZNB_9msNXwSJEa#wWu$*_|_bgDP-v^FIUehfyGl)uNT=F9&2Z
zF8Y)CW#m0wz7YsGG$)-Eta9^zzp;l8uoh^u2!31~NY4Pg<2;QoVah8Lo2%txI{CIg
zWikZ|txqHC1seAozUv>B*Jfy0A%UG>#4-IrWDZJcX*8uC7Fv9T2hwUuKiiXB8?TN0
zX6dHm|MLAqN(Ei3!x{F{m1oyl!?cpx%EQileG##wdf^IwO6eH=xs0?FklQ&KGu4J*
zw7#h+!l%u~!_}1>;oGksuhc=%>Z-Y`6!1;?;Lt>I7b0^q2K<In+-tZ018#o0Lw>{<
z$Xtd)W1?SnsEN18XvnbR@U+^S?lJ}vu$-M-dmpVPw&km8yBI4qN9E(&Pz1Q}yF9yD
z-RYKIBnm2`QU=M!;s!Ka`=B;nXaKj0VNBO_#-%~tklSM2Y1uv=WITM5oN#`#pck&s
zE(520@lf3d`NF6EKmomdh_AC(82|t0MJ*#W69}oi8n0m^BI@trpLR*D>JYOq(A{g9
zhf)(T(y>af?xl;k2&O|;i<1jKTAGCnm6O9--|auvIH<PVZsIYl0U3P@bf<g>-NwgX
z>@^sH$r75buRqp&awIn%_xO9uZQB!P1gB$YvC(P1K&p;pcVMF=-gs<`kv=xORO5mE
z5e;$E$5B%*de)##IRoAtzQPg+{jKsO@Iti%&`)1`zqR+^r06q*QmBK)#o*20;iCwQ
zZVhzW$!MCNCzY9ATEvZqqFDh}CH{S)>W{)Nc(jy1069R$zXg+HOs2<X4woX?{IGS=
zVfX=ST}hw_&!k*mtqe|xE0hmQB;t^``hG*1nL<1eo?1ifxVPj+n{!gCC$p>+K=0>p
zvg@<{#X1F8ut#y2N!&*hI}406!U`!Rg^9|<HI7e^6&+*|Bjb(@2pmpA9N!hjBy(+b
zv7l9$6x<-0LLWeq6SLyF$}R$R7WECEo{Xkf*PThX`=7O)3ukF*{#>dw=$7X~b4_&G
zvjg{2cr$^Ga`%o{4&hn3gZA720TU?AEcj%{xP!4RYdE13a?8%frF%<RHMivIe&)DB
zQ#bh8d@C(423f6v=5t)0w2-KthNaHvLC>FT?dglfd9_#|Hdbw47(T@6xXDrM96WUX
z9L%KP{K+0rg;KTE<o)Xsdj!Lwky~ZwOflGg%NDjCo()5?vT_sYDs|RDRTLKSn@yQ6
zpRJuR&fyH;T1l8)tmgHZATrpp<#v9fa!!k=ICS%K2I5`E$S#TcPV{MvvDOO{m#EGJ
zkLMf}F%Tdv)!0k8k@<UJ79)Fj4M)wM#FG%IXQZn!qm3FeF6dyWV~XC#SFtW>RcGzv
z4|^E5weu)#!<-DW*Ci3w2hGJ~$@d-2FR@t>_^ccA?|=Y5K@G=%U27-M7f&(r3gC@O
z9qCgc6k<C2KT6RVBRb0QoaDXWFtnc_ZQ?Li1n^Uv4)zc1d+G%>nnrOdfiA=tU|C<`
z&;^Hd4wK_SOCQNTyelsC<S#<ovDI;L!>h@&-2jip2*Ip7&wb7=OI@9F5b;)mg{do%
z`GZ7D%j%Z^1a5g3A<n>3|Aw?76ilc|`NOwpzRTvj_zKZy>kUzW8Dpgnjl}9B#g3~c
zQ$`VkwfhLyc1cLjSTrQGyOdGkj;ih9d<{9#0g`C8ewf7i)6HMnYA&cVrg|?E0HOOI
zSH~t1h(QI|wkyhF;5&!M{pH4Ahd)Y7DJ|RgS|?d-7=FPL7r4x#RBl(eLTY*KMT!!o
z$g5U7j^&ucGY&1++i(I__3`F_FTZIfYw+llT#@_+c+@e9eu1PhNICM)2fc4_X2so`
zf{Zzd9FpcSLEd48e~^?_*(tSNK?33%)QZ>HarriAuZw+<Jxf~@Xb+&hyzfvHF-ONn
zc}~+CMp(QmA=#-~{qCGgV-USZP)``+cN#35uX4Nfd5~VWiUfGZ(Nd=byXATdLnC)T
z^57RnE2BvdRmdndW<TdFciu%M)GNn4=5yGi*tVe=#iKIc!o1=zVMq8C7r91gy~bRz
z;>T}jdM6tU?ollLQU+{>F)3Ne6sxJxtUNkPG4!QfL<gkg&sbeCAK+gHQbOv_b3Gn^
zRCvMdC&D`Krnl>_oW|u<^#*)bKG6~r*Jglr+Qx})BaKuBhdq!E+z*!4X@FKEmhh*~
zQlb07$)#ZcApcHBJATP15=#Mi24#>eca!@uM$fT>A<QPdRaCGIQ3%HhLMy-uUG`c5
z&t{>Y#Lo*L?*cPGr|Ec@3LQQe<LL_|w<ag9-2T_`wcy&&Z(|&LS*^&NNJi9YMptsf
zT9*G$lJZQwmj%QAtrjQ)uj)b^VKz7_Qnkslf0v2+X|Wq4atWgNp+~hFjv{!5kzFRc
z%d5qH3cJ$rN3=9n;gG}U%rnycFh7WUt(Kw*9j2r)C}vi9f~I0an8UN4Wc$Z+&Bsl(
zDEo9@;Uh;{<$*XRM6cB&zrV`{bzMf~2q6B&AkAC^H^xfK2;CQSEE!OQfby1PNbj|7
z`K<~RyyI)%5>>rgE`5pY)(5H={{2+sCf^n=UKqbZ-rLz-8WK%Se>dre@VNf(cE`;O
zVtiObE9<>cb#$r3bE>j!#f<VU`3jM9G5Lp1ypMC_zbjDd2tw*PTivAP<94I0Twtg_
zlCr|V4uyQU#os<R_ei{@Hn&r;zQjV8Iwy)+R7Za5ypPqx{b(6-pHv+?k-|sRx9xk#
zz@p^~A>vd-JFm?B2m!BtmPnKr4cWX1Cr70CkUNefX+5N`7TCGBE78KV<s?^H<vFDI
zxrPaFj55|7*pQh0<}=MWk@!bXhB}FUa3GScc-9DA`08*uD*D0tP-wB`_11dxu`+$Y
zEG7Xg!Pup`daq_DzC9{PZB7!i!+g!>e!&_);Zi|f^ByY}dC@l(9}4M-fcoEgCiI?x
zd0#K{J}evHH<uB_;*-X0-tUH*X}2WXBEvIBEdLt#?_8<(>Ab%Yb9~Y!)|6S#hgRZt
zn$ot%)CjZh2i>q<lo`!ZrD@-6)q`2RW@4aQ&vpw5W#@ey61sW*_%l-u*M%daAD;`a
z_GPtuPix>Y6}M8*u8J&|vcaJj^##41u|AE_WT#m_ZI@H<0-aTd0{ZDPzD%~Sl~6E8
z|KwsqDvty`OZFOCW029nmixMpIvA$QN`Ou1=<mxwOY6+_?W~#^fq^n`U+85KnW3JB
z-ZRWJi~qjLX(+o6Lk2`d42U@@4bbf83sve=;}X-iMb8er$O^VcyeqA725v}W5bOSE
z*Jau{;~9zI2Q4g-fegSK!^@8^IhF*a%KAYopRCK#-MqvP&yg{3U8=v$36^;Jf^3en
zxGlQeuG!F(<~vJ;l~6PQ|8Lr;v_m3<R!LdZfhhxQ(nkHly;hd4>pp7|W<%KHUjP<b
zK&eva*#<ZG%Jz(6U>dByv@&~*2T_>X`LktVMPG>4=6z5&Ysm`?SlsK}SF56NxF^u#
zSqm>YuY=Kn{-)J9Eq;o!vVUbH`)wLt9>0rNlm`irk>2j)Wd}l55H;yJRl}2VZ=1}D
z);6TwXx~dEj99%Sh8^h!@wl-=Mv$6QKQDUg0VQg(ONGB<ZJh=0z7u2>Qm(RvHTG69
zHh973sU|@dfq2V>G>4(^j3X7mn&)At*Q!Cob#{IvSK-cfuDTPhs<zhq7)TF7Q#)4a
zztv`<iIo4Z!Vx;RE^^m~_Xk}J5m~D&fUtctB$a_G+Mbhx2G>x;4X@E9IHNx-!Y=!-
zT3b9WGU(fh;@Au%2-r?_t{QbQKZRXV9`XFe(=|nsoXlb%Phcj45@Ae(&2VQE<@|e2
zORfH3WbR)wb>a7(>%xufBL4UCW&CU7p^hA8-1u~yZe&R<Wt1Q(8Y0iMCew!!h$-p1
z@Sml)m11_|dqSOJ$gZB&jbhK+5+r5J#$Q~MVoV6kg3M5KRkc34^6Z2P%Uv*>ecKxm
zH9343Ic%kWll}mPDKIh;mS-RzLw5VpC@Pvsrnayxbt>pVA%gfbF&ia*z%b!4jeYvc
zX2s4HC4uLztN^sV`|PKMS?AyFxyeVKxOiIq&Ev@Z`W{LO*W<Z{;CvEu@X$$lU;ukj
zhKw9^rgzb+38=aI_m<fDuq6T-=8Ec7B;mOoHhtu3O#X)9hwzRzV^|b)n>2n+32kQp
zyK#jaHcFxD6JZqd`Rol9WU5)ctjGbyij3uNu?JH$t}(aUYdiqjE3!9&uEr=GMBmD5
z5_4$J{ei~R3^)CtbkV>EHHZ00lo+{pD#B*KI@g6IsVAeBn)1?tJ-L+dw<$T@$n12@
z*tI}9p_LXIbPdAd`A)HQN0n7cpdU@FW{KN$#-U7=+#Zahl-5Ad{q-TD<_djZV^+yR
zr3YD(m08NYBghk+FDX&P@mY)ju%wW+l6tVQ7#kr^AnocL7P-F_Hx>GV&|^{)VS4jp
zR^+gGgLKutl@d4~8t_CGjRT|)zE1BkGn4(&c;mv$nBs0TWIo*^pYksl0!Ti7)vH>{
zA|$Z&P-W*0ytn`!B`zkH_Ttaq4jq2{wqf_#H2Z;Et26Ivs!|(JpGGjxY7blWt>9b4
z?NxgowZ0Jc!LIjq`Zk%(L3z~@dVDZeOwrPXt|CQN7RT*gh1oP41&TgM-xt1h;dP|m
zHJs7~I6#g6{IpEqQy5(Z01%w56w35m7qXATZkz+gz}|GTbM#j(_#&rAm5APdV6Z&h
zyY&m<i2*fJspg+5Z5J+gQa3Vdq<}rT7it*vDqE<^RGr24eu#i14_Bh@*v_%oM&vaj
z=~D~<45KhHbW)R8SzNUvF>06k6I2xZ;{VKSYX54EG04ht>Hsgyddj2%$xK1kKlyBr
zRBM=YV*;`QlT*-vCnx_~ViX);8g61cRwHWFDwVywdlt-V_V+{2ja--nJDIy|ugp4C
zM!3rERJjt+nG-_cFu?;+0g8-l!17MGAeF}04_T#!j(~0OG^pX3x0(cO_q)xM=+osZ
zR8WGuu~*pgO==iF@I_XPnF|16DaF2bTJfZr8WR-Qyi$P}h^4#J&f8&6)tf`eJfN;T
zKr;k;$j+q@|7?X9Ib?Y)XX=aV^=K~<ST)qK8M!UlCZDH#UdTX{bYkKr98aB{UATo5
zo{HYOPffs=Xd7~Y8r!s}Y3adom$MAht-6-Su&ehbyX-!#@Hi!o)4`-MHsWXzM~?r!
zz4y&eOPbuPE%|nD8fTbXEJ{uUL0H;m!`tOdjIeMi1*T9?&3p6Ol?@BhiK;{pBvdG>
zW%=&0wyR8&&FPjP9lmc1x5A~KuZQoSQAEVuwlH^%00oJ|hRsAFnoBI7Y@66GE_EJ)
z>`n9oEwkCRDe^PJn?-h}QGqEc8A3b}hO>tBZE!2fubZD2CS{6$N{MsRc%>E&D^QD%
z$!9aL*gqQYw%a1_RD4Ff2}ifdESF&Loq9&oF=dF*OAG^N`nOD=-$VpQFr`I9>JOX%
zjeJo?fCD=ZeTEq^f_S`%)O5lbe{_Kd)dFuV;78D<QY8S(^||FA!iUbrtI=!)C^L6p
zalBPHik5P7Sb`<ZzF1Q&ZTdoCLsv4>jQ28gL&KCN+r^+jno2S}SkIgCO$IDVp|2E7
z+dZ{8SHAKuc*jQU4MYDBWQZTxMnULQPa1KgmV_$gl;HRTDCfHknmc`cp{R`$&)C>)
zzAr!J9J9nYL6&ioT1Nst7nnXa+}tivDAO1vAWg1lT0B|ZN|D1NyQ;U5EjS@$I=ogl
zudFiDeS9~t=gzMehNQ)PTBrkU2Z^CUV6&<Q=^mIJuLtjM4;uM8-~tKF78Ez?6t=S0
zB~N@?rD||j0lpirLt&$>emSj>*Y)T}!lrOq==Abox?TNKoiZQMM-<*Ja0JxXm<c5R
z2f);po0MjNr2RSafH*Hv3qMvOOs(?N9H<vU*auk}#BF)(M1?<~G*B?j*)T=&vPFHc
zVyfC4ChZE0Aw7L{D?R+V|1!dZtBcUrmVqZ&J$%@;?bPP;9V8_$rDlbyBe@PAQRN8>
zx7N0W5XS&w^Y-~P<;K;uN)5mi4fxp2llU@e!1xm#;!c8LFu~4?RN4To_+{P7yi<a}
zA=uyJif22>KOj5nt8O86i^b04zXc`tlG8S{6Lw$)Lgfk~UlZPPTcba^S@UXkB5g>B
zVX@>ORQ$2a?H$|m4>?E4>pOIpKfk6x$Ykp0M*6V5%kw3v0}bQ8MSP|J1XCb~+_ogi
z=tvtg*EN>mUvv?0G)Lt^Z?Nqf9K8@4r$mW|@(_c0^&D<>$GqLxhvb_e<#?0Bg(qqm
z>Z|m_AUT3aVyY$~D9Ix^FRRyBCB6o~OJyTWzEnYfRmK6L;T<{lb?|!p5FtKm)nD-I
zG95&1AJ<<2FIno?&6$0yAn=P<s9ehR&h!++c;6%Y<2Ip<R4DO!n5r`ZAWdTml!*=q
zH0HL}+j!oKSjjPk8+20cPOg`>4AqJ17_*P`GQjPOZ89hIa6>2)MEw>E)W;6;=Lq}p
z<esQbf+9(E_Kt1%p<TTiw(4sFBi)Xmgt@{{26pr?l-V@fM<4~6Ge9s8|1ggZ&D&(m
z^+vyI(BpomwHIfEqr4GCUGuTXP_3m?I7AzKm;I`6iP$$}ndRDIKXXkHgu_%HBXF8M
z@gKNA(=VPD_&!Y^%)q<zoYj2{h|=<25HCy{kFAin&TaUb7?6wL$Ko|_Xb)w<6NGun
zBM4K@u}(A@n}NzjrW0>s;sJYAHT*E6JW^0>Xg}kC$JAQ-6rzeXx`io|<)tD@{d-V`
zWuhEP#>Y)Opv3^R9jKFZhE!$o|F*97a&Q-Hc1ojjC*OgHOqN$I$BNlTR=dO3*?Z?X
zMB-puojuRGi%E^a1?<?r$V-&FL_SVHMMrHdu$2*!EFBj}Q@|p!g0v-V4{t&Rlq-iQ
z31X(je?D7Z8!~&P<8_p$7u6P1pl)?NJBSK?(%A5;vI%g5lhxpz4<z6%%^EI)-1OYq
z?NM#~NU+5)Z_jjvzUmT&Z1*zOePL2Cu|z-|ApK8O2&?Si?bX7WlTP^PI(@+uT0M3G
zB7-hdJM#bfAtCz%bWa#CCnO#mbPq7w{o?GaT^RWWNK!9kp%|k&mYHd}8j>$w3TyS7
z6PCXUH{Y+|M@t*dL8(BWAb2-{Kg$Ccym;adnke%nqAAw}G+To(I}xdDj{o}t@tEVB
z=$MpDGZwzr(m^r<HA}&egdMGATVh}XQD==AoP$#-;dJuK%635|&bhr>+9Cia<9wZp
z&_wp>HcK*;p+^oqzQ?qdL$OvV+CBD&2(Wtg8$~<m<I0?9`BJ680Yx&T0yApn3U6-$
zR&JLktZmRl=Ui9}g7yb0Xcnr#4a1^z&yy;tA@H<I*c7=SL5{+%zHsg$wu{W!MA78|
z_r@gDq!il;up|}j!9GeykGnsRJ{3m@5s{qJ3&!4t-`b#<sygx@af5ZCnuXB(x8qlC
zJO3jgjd;%2Jy*#yn&@08s9j>mKnImWdkVuZWCGizrA50(g6dzGaY%O5rE0#;<yE>l
zD%c^0&(FW?@0iA^!Cb>voY;=x0^x6?`rw^uLx-_bM1eMi)vbB<B*s67aN!Neo*QoW
zN@c6z&>nG<VC2%~<Y<gXxdquIvYWRstInRV3}nDP0M#^a{&<27P?LEo60LeMv67Ii
zby|#ReUk|FzJwnK`b_6iC48mHS<F9^{llfQcmhR<68!ns^%5pNG#s3dO^hmY8&QsH
z2#yQe<Jx{z?EK6@ZQ0eLMy&_sxWHz4%>o9VYTAJ&35}K41X(PX#KZ|><&T1+!0zrB
zPzWO^U)*4<KzFV_fuNj=oT!!=Lv%z;mtyZ&fS68xBZA;lxl{L$lI=b1@Kq0aX1iS=
zcNbKY;h;K6YtW%mc;t)?)qvvxbhBa4Q{|ilIX5CF)VdzSEe{EX!88_f_UK`?hHpB#
zXOG7B37@cNv62mwGf2n#PN5KUh3<wf4?|pSfo$*gfhN@?MvQfJ*)zwG>S9~l8MZw+
zYX;hjkXR<Y0~bhzjRAtt8AW2f4!|Z{8DL8;>oJ=xjTQPvHBwp>0V}z71T}Nc|K<QE
zFuOII?ryyFH03Kt<iH%KM{Vl8@uxnSd3<osCmZlt4;o+R?Y(aSAfhW_LMN7j=u~d5
z&4KgtjPm(t)Hg^<Q<1q3<sC*zgPJ|IV1K=?*~{k1Cx3I?=a~Pm$eSF4$0N|6fe1nA
zc^s1rIKWOBF}#T@uC64AjibhtH}|dKXC{<CuATWT0LZ`#pL%Y-uhEM<EZ+6Ch^%4y
z2e$lQ`3wP{iv}6W%MT^C(wov))MnQhN^f>IDne=|vk9bREn6#mPYYZ`!fL-s7&ZcB
zz05~z0LOb?Y(5(GYL3M&cmtIpnYw7l5{p0mCO#Lg+cr3GQW?YwyikuB`Xy${_}cJ)
ztudvNnxQdhy!*Y|2O;0*Uc2E#Vq6xY+`2tOjU$R>yyxWEm_9;)Rg^;7f@bWIXjR^?
zIp8XQh^u}aPor>w%(nt9U#z73ZKVS;<&?aOCEyNk#HBRIRPuM7g;(?er0pX&9Lv4f
zqKu5Ni9L8_2iaQob-p&6lJ{XHQL-c*h{u7zF{R*H><J#RVJC{bm%^`g7;GA)vtlRj
zEe7vTO4ya^Oh5e5Ut$Ks`Tk_9WA;v#{3y<e@#=q$75UhFZz7@|5m%=KaT-s0q4ax4
zp{;Ev@*-v%3PEY#8Dw#)dGY<=KhHkUsf$rZtgOp+t(%!fn%JMt>n0~W-#?V2EGZW+
zPF@ss<0eWdV3z(av;<(N)KB%du)TT?NzMRO(5>nMBC{GH3;Pq<COTOG0w{M(R$+ys
z$7Te@azjFT0uZUDbLpO22vQLUA46EEZ(gJQAIP`;T;d6R_R&hs^%jbIE}O#S+g$uz
zK0+rnOA1_0y_;j4nu69MZsbTi)CE$R5LA@c1@U*hgfSaR9}c>k%9<^sUJJ#^xj3E{
zJUU><vCBv|Y;ifo71NZ<B>D!7QRLO59JEJd9I9!g)3$rwCnQL5lraoGh6nW~?^X8K
z@|_tVLh!lgEf>tetsSV`_wBAomxdSK;;@i?0L2%C-!_pXB(UpNk~GPwEeS*^FrA>`
z2mvP^aoTW^Cg@Kawh?o9=b;Av1*kZMOtxs+*$8q?$9Kb>OvOX<;MPZ_?(x|H>y7Ma
zsDai}M)KeNW~@DAZ|@_=Ef?0G6ad0xR$8xM5Xq1D7d-I2!f|36(>xCb1Cg%H+cR0C
zQSbu84cU%t68R%ZzFx>;NCi@TvhGD&6T>hP@*>f!G`XT7X*A8%jP~6gq<uhXSo!92
zXJ|C>t!#RA{L6*JI4YRK-)Iud1Px*hhwvXiT12h<V_Ava0=%eWD4gN@9WZo`<5+|G
ziy`J8kq-^dG4jsnVt^Yg!wP=j-66ilSH28pzy7MNL#e1KaPTE_TIsI@l>NfEOAD&g
zNG3ZF0M8Q=8v1KDH>3?Z>Wb)#)ujp_AW{1Lz2=ZE{qb`OH$##EVAD0DNW55|5U=&f
zGExO?8hE5|`md!lBfcg4gh7Pk!T{N|9wES9QRJ%!C_3wP8J{eAJ%Q+bOy@U=>|*t^
z0{3-H_gPsgT0KwSe3SIeLfP7-jy}WX>P8HL0xN37P(Vi1i07|NDh&NMgaAmR87w0W
zDaa|J(~7^8G~BK_(!!Ndm5=mD^I#Z29|h}})`j-3$gRaDA{`dY7Isy*Gf8$C6}~Nx
z1-y+2p1BA#@9Wo<s!3bDeBjLA6sfwcHI@$_6D;?os+tYT^P+oLz_rMAPD18%n9vSu
zr*Ej5rhl*Df$c*fm_vL|cH-iry5PLYGfs;KE0~<Z-bX(RE8?)YdEvZG^Z0F8K6Q(U
zYVv4F!;s~739_udb}~cPi`soSvAfPIsgn;>lbiln?ott<^@b`JB;yWyFEzRfy5ZX4
z=nq!b)t9xCwOWg)YJWtBw?{SQdDjOYXYS?<P0xoqF`NSwD;Lu)Hvvo{+m|EORZ-yN
z$pm}ce64LbIn(?EK4W0(bkQ$;CBr}P5OdT<K~KvFLX|cnnZ<!0U&zNm36w$$UCkKq
zSqe7(9-Iy}8Y7|eIHo=NK-uHjSu*;m5`CvB%abSi!MF7L%E+HbI>M8)0cy{s*WTQ{
zulv%hZ}0Fc1QA6or}u$)npHejDI=_f2d9O+LP4`|Ff1YO-1`M)Ru<IefK*x7Wx$zC
zmFtXQ52=ZMv--+-(HjTe9D&VjNl%yV{{ReH|FOgB;$o*#`AuxMmAO4-;C?KP$E<{j
z6*pF~`|H&Q;mDcI`C*;@zk2-De0>n22cdRhyX8l@uSqs-NeOHJk#XX0p1Tp!yNSU4
zc3kBf>=u&F1}Pnpu-5=2KYnjgHeJKy918yii3iPIic!T7zorm1w83i$Mr6?od=93D
z77o-ffzSr}QnHn~iH$o?qu0djHtZ(2@!UFO)>zrQd97_*lF8_UoL$Awk9YxkA<uCD
z^)P5Pu(BW5!p+c)L6_)ic@;>Q`%$b}?OLAX*JboJ8#W&^sJf|3bwX}R0^<iMkAo4%
z72u_kl*y`_MXYo{N@f){5iNIo$4F>PDT^H+;y5dOj{Vr=GDBQ%Bb5<#?|DY?>K>Wd
z>85&ro|H@vst#bqy+C;6EFl`l3cISgJx{OFh@WJiPz!^}v9IzyT};($ghWBY;o~@<
z6Blm6zAE`_0tll?$`jQf^DWu@MyN2FSy!qwWV&N06vu1<cW3ql>R*aPdew8!1>FbF
zQ#*nbit+tZg3bK95*DTk%98J52RV-T9lC&tF9AuDIJ(OxCNCIY0XOBbbh!NLZ=pC&
za65Q75wB;L(-<^}Y80w7WLdyFtbhL%aWgl(D9L*jblG0ZxY%qU9D~eNuQ>Y(!k_Y0
zOrYECQVls>9^j*!p~;8l1^IeMZF5{K*S`g)HUs!qe+o{rPYGS7F=Q0KzhkB1T9+@8
ze>MkcxnyS?K}htH4!!4oD5O<WK#ow>cp3$J*yc2^LlFhQwmF&3GF&w#ismehRv$$!
zlE+soFR6KI??^v=$|_Dr-+u!nWjAoBtY5DMg{;fOtL%DB^AgFXhN_^cNyb=}#oT=-
zng-*3T?E>Ci#{Z~?^t&Bu#rjquvs#Y-<9&L#Yh}q9NS(=bxNj9&|9Lwie2)B(V_ou
zY_>>o?piTo`WxzQn@^iAXJ4#;og8_+jE@FOeTFDr#&+s?sbhx@5gNiiaJVzVg>sbM
z)e^zS_vz)!@^$r^Fg5g9G9RPj$zsk4TH1HCy(Sap5l~a^6X(R8R9zG}sr+5rzjL2M
zM=e(BLQcLu1$3t<5bx;00N^7_Vh1mPe<RJsTpzf&lsG{~o8Cn5A=dBLV{n9jwHuit
z18|8Mrxd=W1u)y<tP4;{0(KhVdLM3YSwnCkx+1#3(6bINm**&r3m1BHmdwOtnw-H!
zD1RRKug)OJ=c_xBU}xbqUr6Wv`+*-Ig&j%#*Y#1yWRv(t8Mc|_M(wILI7fq8*}(t+
zdTe4E7U$|mRrOr}f4_?50A!{b*qq8XvVae>(yqbcWcEm06hCW0>d0Y`NQ^7dEsBSf
zoYS?jAqbfQSPs!LF92(rZ~4ieOf&)M;}2^*Cg&XBBI2-OJOnR_Ul@Gx1U7OpI&T=C
z<^X$a{|6um!vrX(y^>jFd?SbQY<S?hThzGdr%urL>I6}C{(2!y1$?uqy5`Cj{tA+<
z+G&Xq<mkrd_MDhFu5ddD6vIyzR0g~g7NRKB&w=sbX~7M}$Ny_9u4R{!YqFQg|D9!#
zg^j}FfbA*{$pZ!}D3XKcnk5`nX?=HdN<0k6lN6e&+P$6Upz$TI4GeLNVis6baKty%
z-^AWUn`?puWT6<l0&Znx+4j_DcNV3-;Pp_PslJu&z(}dH+EzS6WF$5b$Y%8{2uw!d
z2QFh*w)Hyx^{=){ak9B`>B`%F!N}O&EmrX)h!is~_R<QhV#&xEPe~n*isiL?Gks3$
zG9<JSdvha+gQ>2cAZ%&Zt^<mhwWWo^Eu>gSnvhfyR6%t*p&E<-ip|f1glD>}zk3e;
z%NQ>qKPc)<h08~xlFYI}VweZR#^i|vY(5g6(c8uv6~p!YOhzgAX?-0b7U6>gTL9g+
z#<9K1ZjB(8FdO60yD{{`-!kuQI~AJ)#MRJ=KMx?GZM$CRtsI{Y2qX^cZZB(A1^bkr
za<+d4o7{p^Wk~+U9P55Z#F|KjfZ6dNVz8E%x#}+wZR1h?Xljxv?YX)uW6Odtwg=dp
zk#vO3zfYnxpK34B5Hzy1Zt1EH^@P_*8(^)t1lVMyYRR~)e%Fo5r1H9niHpxxm$OZt
zSvBFfFYZ>1+SDF`+xm2`zns0*x1hTqP0kg~5JF?UK7)Ef;bJb5NDzoQll@LNFb^X-
z^>fN<_;sT9hHLC&AC=cIT%;72WwsS+fDp$-gZKkMhPknChpi3hefC7lg~ao<;GkK@
zs&zWxrHi`?wn(pZ;QwIN!c=4p$M|eKfwo~bUZmoWe<U)4q9m7)gSS<7%N0f3x32Ab
zw2cbNgC%?|-JO8C0Fy-Gy`8^R4czDYpd}=rX6$BSco?f!Vsw36U1xZn^-$5%JYO^*
z2|&fdAi{vfcFzy6ABhSLKGYAlQe0E;tZH)hHhF74dvZM&wj_k^o<I3%?$7liBPvji
zGLJ!#ZhF%K8O1ku{+vS(mTj!B%77EUlEEoi`HJw3wNlt6Kon^@x<*&+0<seY4zlao
zx6R271HO16(&RNB1ZRRGxpJsb@t@JN*U^bfz%Ve*zunpA3@D~of~$%(cxC?4fb2*x
zH|MyVj0NcHSY=*|o`vxh=84Q|5&Jm<^>4?h)pV)}T)KSwI0KVQb~^*uWxz(OyBm|0
zvlR#(EGL=UN}dKcs1xx{EvdzB#R6zBNRI<RfL`pf$oad$ySpE5SjDs25I-F+^tl%N
zs0Y|>()!@i7`@C~jhtSQ6+nyVJ}GlrR92o8KdsP%K7qi^8LfEl*ngmea9EB;cF!Mr
zDTJ!jjHn~u#9sV`I!$s|2CqXR{mApTzOBLR1_&qUvPx{b2fa>?HMK}^6`23NldTyY
z1jNvUw@50Hiu7N`-qmR`<2FR74kPv6OL1;rwYGNv1l^CXrKirnReCq=qgXIUHE}Zk
zcp-IKm+cbW-otMSJu|?A3xOB@yzOhYt@Nt}gu_4SjR`t3|LNYz216@xU(63V=x!TH
z5z3P%;<Exw?i}|U4p*K3I1u+0jZh$oOi5#safFuM5N&xWnE;_O$M)38T|X4eU4;P|
zAxB}4s>d0bV$|=RZ@Cg>W(~?8DF4|kUQ7K2UD79S>pPNr2iFG}@nP4F<Bhs=?v3OR
z-Afz|2Kwsr=uRhIdiZ<O!Fz59euw`qzK}#lRI9xwx>1?9B@{$jv3AC`Q}@w16>)of
z)+;fbsAxM9?XxY&#>g7w2JigqlQ1=kTcCwh-F`B1!c3-8dzijE_z#{TF4~RZ^=C97
z_PhqX{nTOj%Tndrz=A2if@^Ud;(Ve=qX5!ikt^-*af#8XFTZ=yRM^+_0o~uxs}eV%
z#K<mrb}1gCh&$)$k*sk@X^+5Ybg~${oQ}z`>+3?0)r*sdsB(|Za&EazY=}o55glqn
z!Yc9Y>H5lFWor51en`2=Bxf}WeP;$@*h?G0bDO4-ch>7xb#AxvLT)}#S!ze}=kcy6
zia|vP{PDDWS(;`Ae@6K7g_`&<xVAQ0rej#8fbKSwhDd*B=g&5eL@bu`!R?YL$k@KT
z%tlSLFST66dXz6QBdkaMny_>q=!YE!p8TEc7PcDzAM*TDzQ_d2@|U*l0^rH*Scimb
zRl$dgwLQks?WbLd-qfI7e#WX7KwP;GC8(MA3uh@qW2DXW6;fB;Y*uui&eO7zFKlxD
z^;F)<nCn9sNx(>>;u|E1jSQ5De0A}e-Ls-*oY1qe6^dDCUE}#ur&TypY;Nz!p^=GE
zXdP7T5KDv}2HUTAQ3?F71=>Hjamiu*^~D<2V=-Rfaku2)5<YzVABL3=-rQ6TY%HX}
zKacwdxh%PZttqIl6x%79Bqf)zHLJ*Y_S7+i|BY1wg8TlGw}Z4&)oqPl{Ji5aEMp1Q
z$L=SfSE`Vh-tMlypfWE**OH6}Yi)75E7GJvqxR$F<T<PIUeC4<1V2j3>r*_zf$zA*
zRsHY4zimyoOgQ-3TlQl4ojVOmdcPZ(RJtX(*`OSYNoH8^Z2XTELbp)sR3fnl%8`p`
zGbhViIP+nGFu0v)F7EvFamxk`(Cf;*TpP@NwMyayxjBKn4yf=Z%b>KPwZrjn*i|lU
zQ>WaP+4k+z*LL+RGinvyY0f~9#1*Aqb@C>^zI-3lnUq{!RFV5sWC}Hc6u8el9ASkj
zy-^4zEh|At(B<Re^ypdX4?fMnket$5mF@6$y}SwkEqOJnRs@ypo##c;DET5!Aw#y`
z9)`yX4<;RKyWe|AvvZV%hm{jPK@NC379Ta(rlXm(pwF5tpc-}=T>){~NFj2O`xB`K
z%jdl1)T|K@p3%v6Luxg&(CM6{QnieSg_qWPk|nOcg%3%}#e0i2DgMm6uIe-}nJ5I_
z5;PMawV!E^39c6C38_(SZ@u*5`wp7W*&cq=Qn{FQ#Zqj~y3Am=Hrd@+_t@Sl6;nY)
z6IAkY^vCBBH{e@yh@cdJW#Q6PTb}to|Bh!%g4Y?EPIb8sc`o5%fRv7nJt3c*3E-^q
zB~5ON0`i<yKcRM5T*B-tg%1Y(a+XRfU^5f-SdA6Lk9*w=KRkvM7m|~rDZo|b-ka4b
zW+alYIv;(FWjS^So!*{x;cPpI$BWIH+z1Ov`z}~>8k)~XrXU}qp|~3d9TAW}uIW0y
zM8Uyp7ZN<Xzoljw7IBcyDD^?GJxiS>Ob<x(p(Xzy=arM=g^x^$Ti)aZf7s~|?H=b}
zQoWwA^RqA!w3@b~Ge^LAn-fYTnSw-kIojxZisYP=!P=?9(NFGK%xbFJlei90%6%J+
zg*B#F@)lu2BZkdLi$iz2gyFR)*rOt!t`9nRhBW0v426&9eoeasNZ6q7T=4k*w+UJU
zuD0w3V)kEHq3V)<38Nih=@gMvH>*9`#FQ#@q|h!=g$a#OLTpYA=tj@1f6~;`G1S1V
z6pIc~fU3w84Wg9sQ*BrC0+8}OtV~nl2I@};2EJuf(Zc?iHJjvcCVo6?XjR|Ia2R~E
zK6TKG?5&2sJa`osqwbb9T=O7xG?mT0D$6J_482h_^me(Pmx8}IYI}y5oQW<(XCNF6
zmiyQ8NaAx#WehuYfDtr$ha}0K@NO!1;hz472?~5)eZ1b`7!s($hEwi@Rm-)?3p>L#
zuH!3TV3pkfbk0SznZ**4ewFAM8Z#HEu><<)d3}C%<uF1vqU@*+ZdHJg!|Z&(u2>*o
zNyUstn<|v6Fc{aXG7Rtvkv)}~p@=~tzlqZB89}_{3l}JF5cn$9jn5qpm!pK{@?REu
zqqkUy7P*qFh!B4*5}Or7mY?8&71EJbJ9O(A=qVP&+qOD{t@(kZgw2qbAeZ{9tHulZ
zA#?fHZ@-t%J48|1x12Mx*nbN=1-0*qB@Ga3TvF9$w%VPB+6G7Dr7J8}74rCIqH_AX
z8NYBO4eA!(cg!I|BEG6}{z@T)^m3YxJn5q#ut+vwWNyTMSr<3CJfHPSC;PmfL`d><
z?-A2M&ag%ygawZ`K+m?tE0>V)Sce;XMAhaYok~FawL|6}CB_TJi6#elf&!MQ<;_;K
zlJNuY2IPVFT<p<oHvi$-#xzSidfe?FrX*Z2-I&QHV}LxPGA*h<nhbXk(oBFuy#;O^
ztDvQOajP+?Z+L^(V`D4%=fVEw^8EXE;e%jK{Q99KG-F44J3QbA$nv5c_-Rtk$LF2~
zX-HpLNzQ@mjS{m&1j(CA-ggV%5&ON4vfa@9#nIK#vS<-xfLD*+YY$4OH0b99Etrc_
zaJq0EDYIO6uC`cgm|ggbr|+UuU9`&V4zpNL-Wn$vQLUIdps%!6`DFK@tEZ6Bh0=v}
zY09d?L&NrQhO0t%-*PI5-TVdf8q}t~aY?u(ima8xg#!=G>57_~=U*{9HTYL9C({ZG
z%0U<BRF(JZunWmo|DC?$F>G6g7Bw6wsdIvC^BZ(-N5+Jp3fp-~fdR`qQ7?yl`4lbN
z_YW|M3-lznyr%T2(eDp3LuqeIO<PRTK2pEfr^0%#t#C-ZXWolia;9^Rlqh_<NOiuO
zBx#pW<>;*U(~C^$(JmCW^Nu{ECK8D*xX$Mt()(moO7G4EiuQ7acS2x;j;u6%7FcFx
z75*>e3mW!a#9y?L3fP+OvA%tfI$dpwzF4GK;&Hs(L9eon%zfW?(@AXzA}@5c@~9)-
zB6jk6!&&NYePl_%%<BteH<T#q<~72~9!I^wS29(1ptTY3ayAiu7!^l>|IwY?+(TB+
zC1#$izu^aocXJ4kp6vp3UOFtCG8d=4UHjZQoEhHo-O_!*R;w#AvPn>sKkmUyO%lfL
z%2Ya8YaLeOlS~6jPPZsy{vA+*n;kFsW|mLZ_f{m{M~|20yb~wgzuDW3w4~Al{ux}+
z<6}%2leo&C^|G&`jI5E}FB}P`ACI<}0%9q=?iv6U<W(*jV`wjSr=1+-HJ~S$kD_b~
z1dfJu5w0FU^|3wLB2SgiE44reFpdY}GS{mfG4P7wHh3tXr$b?F&TG8(M;G_NTYGcu
z;Z3%F{J(0jf0uFR(q4sOig)k7*pb=E8jsBAhR~lP2#9u?Y-<J%nmGk3TBQZy<R{W@
z4IvD7#YZIOZk*D4F%kXI6@Uq>H{l@G1@V+pZW*;;1x>z=W<@IPtFp9`;#2>XH~fvg
zGb+r1R3JM=gAM1?LcP9o86iGo+w3#a$yPVLKkz%{YDTG)<V{h}wKi9jwXi{}!PrT=
zc_1z1Tv62ZZyN%Eex+B?E1ihHR@gWV<$RemO~RheufiJQ-m#|%sEEKXbeg?5XAQxy
z#qVFgfS&1n@tVjJ;zExr)x6C0d9FU617LOH1r&%HQmd@QE|ec`x0HO&y3#j(PY5JT
zv&WvZsg~s3MFS<98iNl%C-C9FnhW|ilKST@;zROJ@IWmUxvO2F)|4VpIr2vv2t}i-
zS+scg_#bp@1XzX=T$r5wq<9v^_^Gj&k7ONHz%AyvfXkXD#mHw@q?Jf71r{fbojZ{|
zJtcBV-Z`fu{(J7jO?0%SU|$&fNK@hrX;2gM432Y{>i=Y30-%Y0T{Le`u-XRtK$)q1
zvM8e?&I%0SfuuFK+iI%VhVBuh&V4+=qIocBEA@1E3blI4yiVSQ&jCysZ@;1})P;t*
zxBDWX40Z5G_C1h=5d}p5ko<2+6KAn-C%al!%l#QTjnC?E|IY=zx(25NG;NPUQfc$0
z`8;`IXTf2&iBWTk<#M^usiM1Sr|3GRb(kh(p*0ja$q}R@MYVA`M%p4`yg{1n<#!Ee
z9-rxhxOX5;*<cpQoPqR!8OmMkNXFg~|B^h584ZK2kO5SlFO#bmH8aKN(%>4Q#;yjq
zy5|710w$l*kXKO3{sSQvSRxj&LkzG1Tba^MY~b{-j|d<j4ftm#9|-K9x1*CJ{XH+G
zV*|n~d0{ejrQNnP>)(k5pl(59$G-sV@6?W=&Slq}Nw2jKnX;R&oSI_f*CaF($uL_O
z{#Hc=pr-!?6=R9=;J8`HdOvz6?db01HhsJE(3StA#XYdyixgsWKj*Gu1nLrZ%4Wm4
z#!n)3jyI59#~jnU<2EAw?OqFn%8nT5s`E-6xTySI_!6Nh%5ls0+aVfX;g6C98?lf!
z=A(2n>Xe9YH1usyUl%-AW)bJ=BJ{f8|M)NQI!A`CT5%}YMSqS2ncA+;6ky4+v&KTb
zlo(<(Ji=V%44MtQ9MA6Bxa`)Eqr3D9`E6<=soM+>rdZ^?RL<g%i7G#*z~)nB`T`%o
z=QhfgzIT~9YE^(M@v?Iky28a)*c%WVQ4eXKZA1`X6r1A;aUdTdxbS@~a>2<_iGx7T
zB|G|&6dYsBecCMnKz!j<+#x)7%SIj2o)=W*UyE{{xfuc)0=Qu9Zine`f-$gA3fGb;
z8H2V{?;MScLYNr2c|Bh4_^4N;Yc<^n{w%7`YPvFe<eDnJ#1DjJ#<oDQuCaN`Yop?X
zZt3%7fV4;eysO+KxG+t?ot1RqClXs8F{XlyA0D*dPhW-nlOA*T9xxsIM@1UC5ymkb
zNmmH&59zg(YbfmKfg{k0z9=EaO@==PP%u?~fzHmxqTvv`Y|b3@9;@8Z!9m%Zz@J+j
zTl7ahlm`3jy}qY^9KUOO4}V!IRPpP?pf?%EsX<eIh2Ok5S)2Z9Nk`_T&|YHQDMIV#
zT4abzQgw$wNO<sY&5#LXiU%}Qf)wk!Q-U3);L8?yCi9V9leid!TJW4An&<#kh%!X>
zG19hen5-P!Z{-fw9_b`Q%HBH32h_D;YlBKy1m<#pjmlw01jn+fCXNgNY_c91+_Uw+
zFWgDrO+!|rpODgzOw#XxhvZxXQ<6oL+NJElTTR6~g#yJ<l~x{aB46TQe_@tsa9oiA
zc&vTukq|Ge@wI^CTeZ63sScrKBk-_nkV2Oh17*MckNk9_n|DSNh1B^GsWheJnv|;P
ze*=GT&BUU=uBrkJ1!(<pU>?*Z>Y5l~VG)EycLjMQFn>tZJ09?+;aC{M8l22~?pzNZ
zi#QIG(hI_CCpK3pM-#4$?2Btx*=vUJUvq(vf1bfC47sY<mmclV-%9>JS%D28B=Qm`
zy9GbA<k`ec7KyMCuPu>CDhD8P2eLkQCc2^5;3fiv@RVkhKYs;aN;D0t>IqRinM%IB
zj~!!SJB*4%Ji0(shfg=Gqut56VaidvEQ48;TJ*A{xhQb{U$|KIS9b{{;i;P(j7t6D
z735WZv{6Bo|J|<SE+zAp#;AsW0kEhl=b^71$CN44vvsFy`!iY2^k)9!5t0R9$O=bY
z)fPgsgua7)!oN+V!4gdtUC7Qfj%Z)`N*bT$?=$XRcSLqWSD=QoBe{-?p;xG&(V)tB
z%5#%fS+{sPO!<}K{%Sq9n6^}UTf_T(C{3N%M%&%#P^Bd#JZjj&X@SqE(I=TsK&QWR
zUrk<2Im=O1Gk~zFddo)-inRLi5eh>3HlZ*>UP$f-b<E%!arIU9c~?v!UUTyU`d#^U
zj@n|31CKSafBL;NFPvJ^siviXDkNTdBVvLpsX(Zp$_5oW`j)7B5TCa@4UB$hpw4=o
z_wsx0oP1Z8ozsuqPTWgcj$u1T=F|0)qoVZrV-K+m1Fp>saKsa~5^t@;eZ262ALm_f
z78+OenoH|%f>w){NX*KT`L^%5Uf`44YKbJwVD(~hof!j5TlI8`&skfZf}loWBer8%
zH%S0Zno!rnWTLr^!OH5fZ&#bD#=E!}X9V-NRl}9C_tEKjPoDXS;aE7<%8eD1k}GO9
zwubIcD(NkX$jd}_6s>Wu3VQrzlpLrp_2?oApm8zdZ^{8zZuwG40nUOV#)7sGGH=-~
z+9lhCN@AoNwU8aQU(Ij6F{D1aff#RHkzA!!Yf2bLhs-@OFtWC}t!vxm-EN!Z14z^s
z?DA6zBGP?LZ>ce}D~U^ZKaKlw%2?nQA#aLG=P}Ko*Gt)0EME9~1=lw-L(q-w^35}3
zd4k-Ibm=MH%3cFt+EaM-AbC{s$WJsdrT2kjpyg;nhHTvYumiXoS}#41rfVKVhOQw1
zNDS8Isx-_}LkN;P&H~|zZ|*!TS3qB-#~`7ZwRLH$`U%{!9Z}tJH$&kz6U6}+JO4n+
zSTR#QHOz`BeSyDpSsi1HprxD@c&PuV)Gfx_S2K(%BkCi2(OiLKOv(x<lLwNJj$g=j
z!;O7gZOyg2vfY$niJ6++b|G5tTNv!A0oqs2ULyCULg*LoH`YCC*U0Ssf)IY_2xEww
zPgwsGp0n~|pnNWBpq)|?b}EarRtN4Q?F10dS0SO_NVfR$1YBn;-Xq46k!KDLw^Z+_
zBwOq21d%vkXCWbm$;R>;MH-cF{vZ13Q^;?%N}Bq5<9mmdSB-nIVNy%j+e>1I+inFH
zJM9#j_80uHrPj`h4_8+lH-($s11Q|zh-vs*_+n|6o)+4#Z>8rlQzyL4GD}TxrEZRl
zaL*8qMnwP35k}29cOPbT^ObEkTYXu3b|xJcVQuo_sN+-}eBCW`+V}1ybdJeYiY$<K
ztJ$Hc7w3}MTYW2WRC=-Ws{v;iww=T0M^jNLHVVBe2Bt~$pe&{9Z~C7p)(=0PC=>oU
zo82ENw1xd83`u$_NL$7VdlE^ZE}3bsE7J5Ke!m4NtA4zKElFaN7x5nPXY9ls_QbSi
zYAo(-Lzs-fZ$E$T(amyUeu6{d6L}u&^Cx26dL~nenn2H0vrR8Zlc0Vm*05G%L*41K
z-=$O5vF&2c0~ow12THt~z?>oOEhiKm?E(Ezlz#$yLp)3jPqw`gMT=IsdJ&tv$_cnl
z%Xsrxg6*_li5tD5JV5r!bVCI3{Xl#!W1+e*si+QC%I^*yV_gTqqyu?g12E1OFLk0%
z#UIDT+5DsnYM7;WpR6ODoOpdym1&qmy?XO%A!h%^RA9}WD|(_|8d?6v7Q1)2(8nzg
zj&2zx%h7Kr@Mj?4?}t#e=}!swqNH`J_>(Ue4eihoPWkc|#i$G$zfFkRG<{VD2O@Zk
z3L{?bB~}c+G<`fPpmVmn)lNFeX{caO`jcM0!Pj33@(;fEO>J9g3_q<i2((!Bc^1Ai
z?Q4J;CM{3U4onYO@|q~sywf$5S3@k$1bIIh)~J!NswgSc&^w{SIlR2`I=cPIB^ujl
z9`u^whHF4ski6U}k@ha9^WUQS!PL5ryfa!3TAFRWYxtm0rTo(^ScV(fr?OZVFQC1b
zmD|&889)B)FG^}6pb3=!9Ll4N;4HD-?nMbfE;5r{_{xS$gS*g65Ol6~`%MtiXr0pc
zyW0_&!?+5mcR|YFMiW2dr5Frbt;L5FYMDyLdQ|4QyBi@F%>I5QWxMur(R-u<=%d7o
zQtZcm#zOwEW99T^@aOHyJ-w0u+Um3u!=CzoSft=Vn0ZqGU}eAKKha6aSU*L#4+%#O
zG}UpvPQjy&=c$c+qZ_F(azZV&QB^LMMr0AkQVv|iV>Z}vg)v_9tI%}9?iy70rWx>T
z@SDl|LMFp?w+OJrC^`8=WSahmAolRYMWJ1m8|MSPTYzBd5!9NRh-DjF3Ipi6ga_=G
zueKNAH+iQGvnU8O9WcxKrt7w^>Txu*QCf-I+M{Qn(&LqnKN0h*E}h}q#XPW>AJ(T@
zCGh+g8L%d9Dt3%5nMh8IL6*J}&O5K^NV%WNc$(mImSm=dwD6PBW5Qqww`=EPUj*G~
z0sGy8$b|t(NEixFVbV|?Dk~-TK<uodMXdbski)oe)EodXZuhr!U&uF~AkjLW0yoE+
zGQ#qG;wMyFia2M)et4I8JdnL*0xb*Z>b6<?5>|GzIw9z0)H)+gmYLY46lQWrkyK0r
z(-jx`^4S!>)s__@#H5RSGd>>vd()3la~{XUb@8OE1{z6XQr)b4r52W7+9WY_f^~7y
zq`rh;1g&U7k!xm2SOsyofiTZKZMj7a-Q?xZQLw8p-3x-Ytbdt5sdrHI361pl>@SA#
zQ6(Oru{85FnL}*gy8UrN0sH!eFq@*)UGgPx3)}F(x4lbxu2xW%8)l=cn(7xb>JZ(}
z<QY&@JIQsxzNQG_==E*foMWT>Mu3HI({Vv4r(1liL~iiW!BPtQ3Ss$Fke<LZnG9@G
z0W8Hz?qS*R$qPtR>5^hvN*={Z2_9-|Yf_#WAXU{MT0ATOML#ZU?&DJHp=U_Rrb6|X
zw>OvS2b|Y<Df3uOIu@m839`&WW7zWbW^$dQ&?I02VHCENxf;@TAgquM%b^;a6{yju
zZ5^4n-`eV~j%@GOle>Ju7N_g6%yfcOT2Y6WEqIpjAs;&7$!G*%4UC=?`p$w9nbS}%
zPD@sNI$F#Ra3rZZBB{g|wap3fCakwL5JS0>>5!si)xObSt>=d2kpZ1d0dS`7KG?rU
z71-D(i*CRU3~icKuyOfWe5;T7Ok8@vv1zg(ODm~Z|7gS>@vMg?=bMlxn~fPNUe!xS
zC1q^uce}K%;k_-<K4o9aIDkYD(Z&@lQ)#4xHi0z~P8>l}rKA9_6<dpL38)Y{{>-ip
zYKN7U$5+v;Vc<+@drvE5FIWNKdT{UYcStEn+Uk9{#_!F#IZuT>`Y#G^HAB&zHb;Y;
zvu7oA>`Xx(Iu5W(K4G{Mx;sP!=o1BR#%BjGWA*!Pf101u(eh>)SV^~utGvy@4g%7*
zickVrYGPIEthVf_k%W3*HEwVO3#h2uTkp+cr;LPGXb9RY4InwecLm@kGY2&fDW@Pt
z>7kVjah}(S&UK1AJpTtdp{Eez6NdQjd7=?rn)zt8g$KI(xN!cV&%iwJYk-`c19L7+
zux?`;JGN~**|BZgwr$(CcWm3XZN0J1S9Q<*1LrSv)pSkItY@{xx!I@^0pMv##qH0n
z;0zohyVSki98u#<-#70bHXa40=xP9F3cnRb;2T3*71*SIn%`)`cVRK5^N-Ji^e}i|
zRD!kV>Kf_GQyph((+LszE47V_e~%3cRVaD05L?N_Qi52_7BmLAB79rp2A_9~N|(R&
zo6m+x!=VRUd1H>2kqT$rNxunQYHKV)5?STrNw5_Ifg?VKkI|bBR&;q;RH77X!pW`R
z24_bHYC?E~<@*Jm&bgT3QVJtV5vV$cJlu+>=Ec`lfK2B!aj_vwgSo{VkHMo&4u4h6
zBlP@};+jmU@8;bWL`p|8Ds^FORe9&M-z(oX4E<8Gi55`lF~;p*lQr&NO%%s^ihH*w
zd`PylLVDxh6Z0x2QrKJ_cE+z60=~<-we*cv=s$-f|L$z6F`C6AAxlNh**G7|FL4MB
zXj>Qw*unJM?Km0n)kb)vK_c=imP{4c_4Nf%g#p~D56L_q|H;l!^fUB;mlGE?BIk(^
zgXT_70%uGIvj9mH38c!H=DXx6Q#e#1VCY~`;)olcAni8l`%LsI<_vW146kn-uKZf1
zv5e;ghEH{KDS3))iJ--iA$8*RnDP&YX30A6JEnm^O9cY>JhBvjeg{(PV`MP}tgE^n
z)PEA8UTX@0EWkmdPETpI-ov0(5jaCWaXDC=6B=(mq<4A?h$utG+srQlq~3u^yj8Y}
zcA^V{s36W%;7kR!M@!d5j&7R=p|3wZtyk*-l+0PtpuQ^n=+Z2K=kG?BoKnTnb3QQk
zHyj5d8UuwyW;*WDqx+a_P*~ywV#iznG7VvJc_$@+u$R;)=)K?QHb+aTtyC1n5h_gg
zEuHAUEeqJ3+!sC&^eHb>-&c^c;(dV4*R#7AI}Fkq{K@1D+dIT$>Kd@baO%AN4Us#b
z^;?zsBP+U-aD2P5lm}T=sJ_0)SL&m7)!9>0uB$SfeUA<cW}iHCTX+SUp#hEf88u}z
z7=4PaRB^D~#v_4&eM6h>&3he1^Z+#Zhj%|!5S$!AV&5&Zx6jhJBjRECTKD`ymTwJS
zVHS|vofqsMFLVeCKUyF$=IL^#xO**>ql_}6D%}>!dBV3QoxFr8sIhiD^ENa6>?iJ_
z9%e}KnTO@{Q|%iX<zm|#-&r>sNGDvif>(Nio;5EWOzd2om^ZIlPLQD(Ap_-E+EE;O
z?kZhx_RD-BeT@&C7CF(aNhx;(1m27IdG(5LRn`r2!2n}^(8jRM6s<kvTEJ7s922k0
zCcwhHt8+Pog%vObHc%KYz;n5(D{|}xoaDvucld3+k`P|hLE9h4rIP|Dy_ITytd+o7
zk{+0ir@gBdR9HkLpNwr;;o$5awB!;Mr5@uw0vtSQ$Jp-LS#Gi}gAE^hT)nX>kkv>3
z6yiD+Cibf*5;GeI%!^9MGDKvCwn=i4j)=ulI<KAr^%!&sMkoz}Z<>j4<=<FX3xxpW
zk>*hIERh5CW{q`;N>8`JRIgmbY?}0qG0j^llKl5mi3x|U^I@(D9FSBunGLl^`~gOO
zyaVJogblq7)Z({IG0s6$#i~9^lMC&`XFqQDB7y)CyqNUL>LUdRGe@vNTt+t}O8EK?
zr|?4*w-kEht8`w*l{d-50>nt1La6mW2j-L&ox%Y6K~NQK)OnPZUyd7z1^ldi+Cg`%
z+}Fjq0OG<0U7BGt>GdH=T}*Lv8s2H*MC2(6qTWrPVp{}Sr)S!Dmwg>H6>AV|pfbO|
z1FKciRKKcp*n~$?_@Ro<H~j@p-wEhtq24yaXNdTbiP+?8KyA&DT#|HQ<g19H5|0@T
zT$;e!@stFAb>5D)uN{fCV=(oRW~I#GdE>)c+qYMYt2=uz$+0^ek$Qv;GD2(4yEn>3
z9r^geU7n^8xepwsV$r!BC!wq*7^U|uvsNend!qc%QwXRA?nj3|d@PUYQ`nCPeiN2k
zm2GJZ#ji+{EmH;j1m(ASuBp>b$u9GOAIK9##x!5U?xDIq0CZ>=smxk#@lzu-930T#
zbvkum?pV%l?_4}@{h|;3Bzu8|@iB=ClJlHE@Fwmp;Xl<@I(01){bNE4e;6dclG?~w
zOVp=Un!)~XVLS8$i$@!c)q_yarOi8+PbNw4CMBW)5q;$_sTGWmAcSTRf{ESQ^e@d<
z6{&u!h>`Kjl9b76ZG&h{cfd#3De{6&jWu;-46?AA=n+*<Chxa?D%)DwYsvF!*0xgk
zjjbyjiVQDD?u~#a<E(n^3Ncc&`CvWIwJBpG8Jp<}s5h!JQ0XJM0K!tL>p@kq$Q~ee
zjR)2kUr}#YGS8Dh)roo~xV9V#JOqT$^Hf*fKq~2^>1qTTQVZ(-oy5TF&nlHB^>#!z
zuq7*iR+sV_zldmmeJ0-<*pG;YI`FRit?;co_ghNk!~-p^Jyb}8H{VIUqZI}`aofuO
z+C>Q_6rgTlUCh*=!bo=WvdtrfUT3!mQ&25R<E;^uTOkHj*FJ<B9~BCefD{v7h9Q%!
zGOdY6NO3646;i<8*gzKI8-Hwgk4RS(NH>UVCjy72eUTjvzOR!T``<_c@ru|wD3Uq|
z-gn%34N?4ny@PaL{3WLV<5022(N-{YO#6iztD{o2eIy%*D$Un5Dg8}0gs>OQN%^D%
zc1FSp5b)<I>fFhi>8rk0C97($B~E@FV~c%eLPWuy%T%eBStt1@uT#88!IE7g_?z%(
zu@<7_lxjCZB<Dd)3Z67?nhMFwf5$95FuEKU4iSL;pt$ARPj?{P=t%`(l3-wtsF?I~
zobr;&`qAm+ZMqmn+c<8!!~(SnAJVsb?e<TX6(6i}a;$TEWgR=5fexU$xxyCH-{lSx
zki?=LO0s@QFefe)oHsKWaL<5)O-;PFHAsdss+4I*Q;OIU^9!y$2<o+`NsP-XRKVrT
zuPDnu8!F<SzdDkdsJciRu_fmlBF2qRz;Tad4*9OB!k_VdWb`md?RSID!L1dAftuz~
zmd)ieuxekp{h6<$s@+zbDUzJ2VuUA7Znew)-}%p2CHFN+LH|(i{DhPc#Nqr`NXKwD
zdM(1k-3z&w70LU_)eBSoU$Tb}CV9EN5VzW4m#C!B%k2*2L+MfQlPI;fxM`et$m$+y
z2Qf`d_z$8>>eBh-Ysn9O*9H(%8s4Y;KFREd^l7``VMY)okwL-sAOK~t!DUt)anMek
zs|Y9&)%Uv4e)cMUNK&+W@_<$d(*yCY*v2B19CIz6T`d7XkM_KZCZU+J!^@8@7=z7!
zNHa25Qy_odkPR;JZ<z3F8Dr|2H{_fr%XM<u`eK6{jm=7s%3j{4I(pZvlZx5U7ij2E
z)Rff}$pU83xr>kulqQ2XcY46B&fdUjC8n!s#ZFj-=?ro8TB97ajcwNtoF&_aAaKhu
zV&Y<t8^dGIS%W@A$oW>##eeel<)vSGAiR>D%d%GwR!(H<51DVh(~?!t=sf}AJqVqh
zfycCCB7m3&mZ?6B^h;jHaZ!;aBG(C<v#TihhpsN<uY`fajI^YP)}pMa878bxda;kR
z^6>?__6FIFeS^|w3GkCpo_)@z7E}qEAwg?$XcP<M7++xW5%Ax(F>BbtI4vUXL`;O=
zT+)v3X1YtYVTGyQ?CtamnpX^_2S2A^#>wU*hic!+OF!}!aGbq}SY_vQWlta88Br#g
z<*lDZ9tfBM<eQ?+N`x~qC)<C%&cG0{qp?}CsV8G;4iEKS_F~SqWqO?Mh1v=-gaMj4
z`hDZz|Gq;l+0Pwgz@*F%-}Uj~Juk(=6SmIRl^zT0j=NWKhHzFidd}#?llPhZj~3|M
zlf3;;Fe3JireV$_tk+0CxH9t+w8r2v4@;x@8!W#h?OIn2qE94=S==49yz`pylpIa+
z&RL${q8>1_D4R?qNq<udfru9*yK*K<UEdnSr#M?c8*u%*UVti;w>UN_LU^C!r|mM$
zDfLgVHM-yhunN*t9zWj9c2?QMbuc3#x*I)ShYqryP@(d1m5xulw1@;{s6a}j=i*?=
z;VDjeZPlSQ6zm=()}|YcQ~XY~sHyAax()KUli_1h#|BOv$-{eUD_7>D3cdC93bF?S
z*~wCi&-sLWge3$#YbWXgcyhLhg9ECR^u^Q>yBSS+6|VqzMdQ4CeDtRf-RaHEv1qVp
zr1TpBo%_8XBwOA06niZv$J!~;*Bt3=wenTh&FgjaO-@XE(E?7TRB53T6#`ic>8jVn
zd<s29MMj=wjDMR^*Va**c`N@>kl9dYDKk~6L-K02KLDYM$H`t$q4C|LYzs(`i4ZfP
z#pB6U__B{6?=Ykh*`XcK(JIwu?xQzoehUK-d$oCG_!?n7Zl%n7*^_=>d0W;Kj2(+{
zKhDt`9hJ&4E@|BSE!F29YaY+&VucZ75!2v&apI+McBAL3kctqJm?2n9h!KkgF6&)T
zFE7sjI`{t|CjHV`6QiWZ1y15-LI2wYE+Wkk{o0gk@z|twPTd8!?im7F2gMj3f`A7U
zi|5ALry&*R5;?kW$em4LecK{cPH|>!SK?SBv-iS?OZ>sfX6U806nD{ouNm0K^lRSk
zka$bbzr^f$t>)2#F4&@mL!JP+k**YQ_E$bos&eXD!4S*P=&}BV(>K_uys6##QZ1_3
zzWN~-GALF-9Pt5yBTWY|7@(%*nNlL692@IN`6Gr2fx<NAL`^yGdUEjE<qQzOkDb6T
z$D=1sNpHlS^qQtd;{Y@{#M8Fu;xge1-xxdp`3QQ(uKyAt3G{k}4{?dNT#15}Q2G0b
zH<8@nP`-$Nr}#BnS#HCk*z63EY2CuFWj^?)LEpJ=T4e3`-qK4YZ<4*reXlG5FR~i1
zksgX<S;u$<45Xy|&?5$8CTZyY8%7yuM^($?+#R=O9KCza8Cy~eYL^S+8?%CpNtIZ0
z6bW6XR$Z?vpfpgJkAN@lL|cT;Do*<vWmA!+x5q(i@00)u6_aJ}&*VYu`a<;7y7ugM
z=t8tM#3D+xXj@=S6~QfI_TfU(;W^z&Pnn(S^YB4yp8)~sq5FJUjk+oR20AW~D|{@-
zad_-uicD%DfO7lOO18PMWU7=vmricbjFD?I)macN#HAsy&*ZKVs*8U$JZ&(cUrj~?
zFfLS7fe-xVe%9(=d)=M6=4K(NY}b6lWtK<dUc*Khl~EAA^@b}`K$MH-JV<$$rt*Rz
zxjM`Fhs_)u_u^GFo!aLTE3xn>GTYU6YZDee?rMooS&11X5E-CWdaunx6Nhk@fU9g5
z*K?>{A)y;{>GtnIdlod{t20q(n)op~!j8SEa(Y(S6-qCK!PbyV8h8ezFIosE*qhw1
zTUYBEWI=t0Bu4UFwSkJxR9r-9?SOyY)t>Z63l4H!tb#|4^@h`d01xOPSSmEw!ih*S
z<dAUP002$xfqId~$$|S2#VJ?Ts&i`s*7M0c8)x;q!YjWV;H;VDafdzR_^t7mz_ru{
zN0WZgVzpMa9~tYd**8IFsOuPQMTI@$wO`E7SmwZIei4!Vk#-wES>{In<E*Ym!XqcJ
z*ibzGAS{*9VUSWwlm|`}KjkHrvgRLbuxS;oAw<-g6b_-kaPW8x?Dv#zN$BtRbwWpc
zfX}I$pDyRNNd^!TJR>1mOh6bR>8n%pKw8wJ1pr*FwWtD5kxbYc=eVJ8C53uHVqzPr
zt~SalX?ZsR9ef@=LdBu6D@2$kg;8BPkb7R0=MGo=4!b;*Kp+Mve2LTND5RAIuCF%1
zfB}`n^nr9l)S9iKlQ>7)?%39lTkXc;=F&+Jq@Ip$!t<FO3CC58f-H6>oVC|G7ARnU
z@sv^ZT{g5vcoIfzKj!tXo9wQQ${KDViAXEZIVSA7(3AxqcYRB>Tl6a~S<~BR579`E
zFBwE~)$CIHjYIU7)9Vfl-Ft5;*@Ik9uGMd$eE4_SRNmm#NPXmXl!ZANfRxjX$|@oF
zA*0C04*~Urh$mDe{*W%X+-W~i%Bt=T`XGKmp~ajvpP5IiZOMm;r|VdM>FC8`0=i@F
zd)t@eZMO!SelXAw_b9*5FdNxpBoo2Q(;N`q1dR*57Ca@JN({O{*K96PT=b6QZU1*j
zx9f9KjRGgj>&!c<vEl^8lzPtYpL=0S(TJWOxP<RllrkV+U3UXG!|oio>Zjba`z5m3
zgIB?YN(psSv-yLA#E8un4<sjEND-s@B_IF|wCOih+X_?uht4=e$Ysf8szA$YZj{LS
z8TcUylpzcb$5;?hJl4(J#rRjMc(-Jo8R!0`X`mq{0*W1Mdg%my?Qbf+y9*BOQFq2S
z_@r)FnYM0pCq$}o!@NEvOUU5K{oR2JHF=#R+!BIA)TaA+RQQ(GG0tY^O8PnVH@*f%
zej#`<c1o@It^HV;1Zvw=2l)*~aOxzO!iytdSFGbCm2bJn8=-03aZnw^^&b}t-XDN0
zI*}Hbc%>%Me5v@Fe9x#Xwb08vmnx|)QRw*^5N{i>N`72T`$*B2NLo^Mj4M?{M*?!&
z2@6nD$(#WaiXjQ(qv}#tFw1XkbYX2}KK0$s<$4>%GKeMYFxeT%q>yfTE+vX}?v|F3
z&4Sx)5AN7~+-2#*l+9Yw=OND~IVgao3bki&{5;fZ_vG_4!5+$Ik{W#;!R=Ytqga?G
zi_WDzZNeLmU>iONxvT%?jD?p}HZa48bqY@o+O@6=@hpCR0ot2G0OO{)MNsegJKx8q
z$VKfGos4n?GoNR};Y70YAhY#}Uinj5LpnIEhqv2U8bH6xIYT<(J5%9Ro@H=bo6)-P
z;y*@cN}lO(E{JTX!#!!K1+SljhJiS`0>1Y(AZcQ?iNZ<z%Tfk*g_5V&BK5c9qk)^A
z<Ypdat4Gf~1H1W+%Y|pjzxaZ+fDRhNUiKASLNEydh*EtV5&}JuRM+r@JC&L=w6PpY
zAR?#6YjL$abh=SiF(bbv=))^^5J`Z_<F0M4!33Ovb-b?AEptAXzQjo{0!8=&wlPAk
zQB_G<PUnS1!ja`IAJ>enXatm{lz{NalM4&HbB@OUln|p8SeCdxq`Hd>=C1&P0uX|=
z^idf6gk1snPtL6=Z=jbWVf&_aaVe=3-+O0JdT|aaqQL~>H?GX;R%m-p$+hGc6_?Q8
z)Zx$j`09B*sT#w~XbQ_|`UGs%KFWsmPkU+8JGhZns)hiG7K4nz(ZrSUlk8!e#ce^`
z5#A&qlu@BQaeA&md&3Uf=3^TygP}_!l6N5MjEM^YF1jOq@JX{ZESQBaPTwDe0?j9K
z^YD6gVuQsTk%Ws)r05;e*27aoZ#AZZmZyEYOJEAD{l{9Xc@QNxiws4YdX>jZHmSia
zn{|#=%J)j%u$P|Lr%)ZB)x`HQnVtD-Qh4q@*02d7Q?7`V7B*`;_Cd98YjRD&bQ3<b
zK)RVD8ZPC8p>?9^wI=OeZ0aBrIl#t$*7%5|aRa~Bt7sPlrnf#K6>V!pYK`;_jg%SD
zw5HYNIK225J~{;((+covJ-hPL>}gAU`TZNP3{JDb-4gtVBAI%P&$k4l%7dCuzR*gp
zkUm%dv9Bk%HdH68U=Wel%mOn+t#LZ($T;u6YFlV(prZjEUAejytp%)BtkAo?xDufD
z9xqq(gNhxSBIeX(Nf$fAK3u~m$cZr%Jr4#v5P^?Tu4+V}py~?hs>%GFZ_D>F*|^Q`
zZ^7k~+&A>k`@Lfl1%XYnqH}}G^KtsbGQ~>5k`=V)$iHtps}lI0A1BD7lSuq6MxizV
zPK#21nqw?s3S`{c;v2aL^+ejzYP%w#I7fVSGg>hIU2I?l?jG03$8bGkRSf?(v@fpV
zcRVEydu|(TxK^nxYOUGMFTvAO8rrY(2EzHhH;4z+S~-+&rqs1QTfmHv1bjktaYgWN
z3v2VgvLA=_-vcJ3`Ee9=<_U+RjZoc7b(t8iWeSN3dKMMEA#2>57DTpV9o93g*0N%n
z2=LJGpH|#dYO*e+HLW)WZ2^DyT}Mou;JBsuau3GUIIOv#X)=cE`V?8-dp21SBs}9G
zl<7T$b^w0v6%1=`a-ml`{#7A{G)uH*J83z3r?Q2d;^8`rYCi+%l{_zWJq4NjBV?K)
z@d3HQ>lM)AgM@uz#JZ7%S-D>GkODz@@DpssMnQ`m@!0{Pi?tDP&7^Q6Pt*r%|Gb__
z{!YS$>8B?<{W+>l`ORK9_VY2ykAJfuWK>X^;h|h-Z8<{d!in0>Qg36kiwoKk;f5pB
z%SoaM{wO|yDcp^JY_xc^HF|gDUzo99i&8DpxE?`bv-F~vH!L%q>=~%{&^d9_0)RX9
z^X%hpR@jrn6Sb+G0O@1q>2E`UL^RlQL$Ws`((S!7<k>s$9<#B^Qo<?Ihuib$ePW^d
z$(~wI+PcRP9JQmY@5;1i?3ASn=8riBnb^2>Nvk7FY?j93div%y8<OYa9Z(fy&MEG4
zAP&kMY;-xRcNdMv+>*Mvsg~u{+lQmQsw$;S?N@fZg2%Qs>+b+{#hej*@SkdJKJPM3
zO+7P7Qbt!8QAy832}WxI6EEa5t=ag`{%OPvNDqNTzTVMlxbt0#Xvx^4UZpvrN>%B`
z<g;6F&HDW5?^}^0=4Qv)HC05Ooh1pl!(PC43G7RM2x@pk-Oiyd!jg+BWGcCpyJF2y
zhV~F_V)tySlg$};-OoUb(<y|5(E9xB)#qrU_IF~ZO+E|*31siD(_E&eK^?Y2ewf=<
z)%$5$m>+E2V@}{ccm!cM^_VoM0ijG)+%VST&89H`s~(v{5YlX=3%W3BSTPxE`-Vam
z8}&NhB)gb)a>9@4h5|3=vMbPAw6yFtK@u!iv4Y<{q~Hhj>>b@D4tHwM=Ua8f?UG2l
ziH<z9&~2Ph;UFTP^<&UCg=yncNH}%BDx_O@CdzEw$gF|!bJl;9em+B&D6a8&eYvuo
zT+Q^iS*XZmo)EaDyg9Dz)iFe+5{4B^Oqn|D?h*(6!9S-LpA3<a1|Vki=@t2UFqd$%
zrz3|A>rky0j7rQZuvdjSoXp$92-T#~%1s@0|DK{q(_c7$^W?ybIluh+@8+w(Wxn+;
z*F`j=#E?JNNaWhHYWEZrJ?prrKAmuY&9~NuaCdDh?jA21nX5XrohhxbK4u+;Bx(j;
z&q}tn3iF(zLyAqSWv9Tvu!g2`7WpyM9we5B<)h>*H#+<k`t2|8TVOARAz`UD{RvNi
zA&3nHt2+xs#TAa#G;<a>h85ty_`~}N3$65v-_lT$Deel?;sG0x9z2I`v48~k=lK+z
zMxOVRP4X{D^>1uP;kbzeHLN^2mo`j;^HSa%m7XX8;rcqSBE0Dxw(wt@L$pUNqCEV7
z<gZ^1BtcZ=G;DHLNa(3-sI&#DB^v^ii#$0Ji}Rt-l0V;=s_~Si_x6;aA0UllMJZv$
z<N0qT75RG$)GF9@G;c^~e=b!L6lWm3b7(1z+u>!wcu@U|cD3PLn9gM(64vvjU>h=O
zsB~2*w)*U4GRMlsSbfCU{KN+1>OFHoj2}R<o%zF9G;pbYr{<5xMPygP&qjo2#Sqy7
zNW~tD3wmi-g^RLUuF}Z#y#U}dVRO%^q@_GBDwT84G_-+>E1Z1^c3R_!92nZ7RIE`J
zW3D}GnlLXnXG?d8VJ2hiD*!9RW^T!jaNyz6D7$0zhdn4SE*BH%6{`z|$r`zf2H|WX
z*tJnIyD4Tzw9ziR3tc`-A7=Ng>(z=a__`jHD{hUqK3e7%AHOpT+SB<jGlRoB0Z=i;
zQX?k5eLth<F&5M~OL`A}>)Hu}Zx|X50=KeUVxX{7WtP|*rO_*K+2F28+QdSF;@ZeZ
zv;b9Cv_u)I&KS9&U67}>VN;X?D69_P-nPkXpc!+2gtxIlSBC)#Fc(&8m9(KYBHWG5
z*7Z+@k*=4)sh%E6k-yC3wClMvMT!{WePnqEXgirIB|l+yW{VPglvZYkMJshponi=*
zDN3YW$*p<OB0tCWzVJ1v&yXY974pLsGQe*CG~l+W!&15qhsPET|2>%3e*RUO<Y8yW
z=QOE|e_aW@qjFqb8_MN^?+G?OtMTEFz#Y}O4bK$RNu`1Hw1*R>lMN_T>J4YlYHa{1
zugJ9?FF4o&ug(4tA|x41k<^u5R2oO7a{I%0oDDK^!;m$e2S7BEpVLw7_#O^+BTjBd
z&6}C3*M+A7<nkod5%qc(mYpkm`Rei3&gYQk@b?3ymhu>feg}e{!7jH>!=r%v9CUWK
z7{{FBtc+N5zquZJ>-%Uk-BAP_wa9z!AFSarpZ+O6JTU}NJf000M6Tt#d!*pS<9M~G
zwL@vMjLE@Qmpu{#qxkBTfwp|}g4mp#LFd7nCAUgUE`M$>0h5N=!SV4g`{(cd!ew%N
zZc8X`(xfIb%hft!59Wpx=<x&YcQ4g?jso??m1OF>`uFZVYSMF{O~LR4?7?&%&gYBx
ztB>LkLAjS@0!hvo1DRnHneNW;P(gc6Re!r%@|Ts9nEY8lT4ZDrv!=FezFZ6#1-5@?
zDZF~q34LCu8Y*veh-!Av7nfz*NiM(OuLFnZQqdq4UxZ4Zc;(q@qz<Szqo+3RH=h<~
z{bPu_qVP6Z%n{T`#R6UBa1QA1tIn3xRIgW2YnM17{B>7}3Q|1<Rl>01hK7?R>0MTq
z>XJ#vN+R7lSCH(;cMWuCK{#g$Dh+RqI)I%>b~ESd%@t0x7CWSG*}p;#;u_MW&AQeI
zG^tRVN$Xkn@Wj}06Gf{Fy9kQQ=;?<kpV>1+Ro*;cf}0!X8S}rI3LG5jy$&54?kDL+
zo7E^Qi!Vu7GpVd2dpx1Wf$TkJfx{RfXevK|EsK)EjpwN|fq`u-VRD`oDF(TkRenj`
z5r+=pAmKTzPeIWkZje#t$qijZ1c?^m)J~@M{&1(GkQSQ6$^vm!1oQuG7}<k2X36qg
zKKlT^M?FjtlR#!Agm{z5x&|maI!~6f_~5Rw%O(T_yN?-gYHO3vM2e@+jDdp_r>!_A
zwc{vI6hAfQi5Y{00EgI+rzX1&b@uq4gO5~qhW>4(P$xv@e6au`k!2H`f!O&o$IR(^
zMBk`;L-J-4JI58ONcbO+*j7DPK!vm=PQ8N$AEppyx8wC?{9ccTcowOR(%;^T_m*ib
zxJ3RZCEU-QXQZB8XnJ61RWrW8M_Xy;<m6YwTKMq8lzYF54*Q3e8CF=bv^l4aRBwd^
zgpbM5iTy!~iIck6g_7cp2@v0K?=TID{-;pk4}6lh+xzMxsbDi&ZjTDjydbS5@ectB
z`bVjf5PW|>S@~NSsM;slHf)8iSrGB;V+<k)TrGTmPqj3oTCpDS_>n<qGj=QPTVQau
z`F}9VQllMO<Gt5fUX)x0!4xuFHu{6j%!}0_+Bau~tL$_miaR<br#_1Sjt@R_(he{w
z8?I)$1K&}4_40Uwe(p*N-}w&1Zfnuc=tjxEt!xeDd{l_>?4ZtKO<>($J0)^*&~<>c
z%lD5Ji}g+odH{A+NeGRJ&%jJgDGjAUYVzB5NJUOKLwc&J-~-O)X%mE8rJlFe-fLpl
zoy2Q|lFfT|zG47%C{0xf8=T4?N8~0r8+0|Ab6qAH^pQ7Lu%)l;8n`CROwCP53s`*z
zTj#mv^nF#%6K~z4*W@+Cmd2ys85ByAoR~;k?8xe#fLc%(HC&+U_HJz;Nt{eA7%TH0
zHg?Ti)~m}Jz#Jp~ItJPYoGPWW;%I2`WHR`>xP))5qP58JB+9G=^3;`d`5c4<`S}m&
z_x!q1*_H|nt0%Tb336n<zYW+lF>7Q(tX*}ax&JNeIki*0)^M~bl{aX?y&Dynnj%3k
zx_x&(Xl8QE6_MUkQT7nlN9Jh|2B~*$D_CK$nc*T%F9*{18%@sCx^F{z5dZE)H&lf9
zr&in*&otkEkuLbIK(VHZ*Cq5d@w%;{>{q1q<OlwR38Kt3?>Z24^bY(s1Nam94FCJ^
zAF>a=uA)B$CEHWgd-p4?#BGBrET99WYJMO`$k5j0PNdnb%lO$H7r_Rx_wQn3uq6FV
zSDs_j3|%(=lFska)H<xtY~<>XGeeKGlN~>r<l~&6@*#<u^iEi(%ba+benz-ZpD0*H
ztu+iRs*_>tx+uGiph^o!iW0xUcBjo8TfvI^DaC6ohLs_gSM3!8F!*vAJ2UxCn&i5j
zqiM%iPeF~WRiG6+9OGpsPZv-+TV^5H+s#L$<5VG%qf8$MKh7EUobHM+^`|rIZWT?H
zxlC=%LK+H>$fHP9P-tvcxkU>hKX7}{*q8fp^|dW-qaj^Tl|6;;`SzED4`!%Egqk(0
z_Qi@87$O=g3(~6X=0mq3b!%w5UiXM?O_+Q;g#-~k+{+jw05GElCX>xum=S{?-G>0_
z3?_Jb%WQ69(wZhYuG}yH_-trfJ25dm0j4FkRNo)$wyC`@(PRx={!sMz*zOQfOPAW>
z(?LT3tYqFs-Xn6UmLVo#ij!c_6l3X*xADQT$CU{h{DWsu;_osA%5mwoZy`mD$G$;S
z_0#Ia6|1rhsH4}kI^cTI5{%6W8$aUNcOHyAF8(|B$yK?HJ*W|M_74bk<50>A3T$KJ
zSB99}?G34;zJPFI4EtriCRuJ<{;|6*ap?WUvF57$9@1asBgaJ$liU6)!XV?VH|D)<
zWNM+4ux_7D`U^HNqN33sIRDLwegof=q_1oP=!OZfe&b6vr;;OBG~)y7=dItkFfd75
zEZW#15`Ne1$>A|;{%8drV>eB+m~}ZZWkyEGqT-DEiZMa&<*bfaG)0+@C{V}~dGg66
zC%)p{-QPvx=WE(1;*+qI;3Z^qT!U4ii)<tQT}R_21qbi9S<$m+akG!p4_7|^pg&+J
zeHa;u63d)Fd51$UUfz5AyyB13b^CuX<yKGsxfNP;2MwU6#m!DUn>*Yy&J6Rb;iL9v
zzX*g6a$8*t05=qH1b8XVT*<9e8sQTh40xr#RH$vSc}ZaLXjXvnt707;K^?3X9*=as
zM@!dj$+~<!G-ksOmX86icIu#st~bf8^4g)9q}rH!HgoA<rA_20gR^7P1|gcq)(ao?
zsYiEZH+Rh{0B+HL2PYH3@{%weS6bq=ckP5}*@eP)j*Bu49h`~LKtEehmZ)DzpRJzP
zVoh<`t<|3O>fI<2hT8E2i0(!-uc(su@yrR`hlzV1Q8B8lHfZCw)g)M1$OqB8#-Ar%
zRUMMKzvX(Lp*GeEnumdGXimxwE4_fO94St`{G6R%!BD$}JD;fq77~8A!tOd;o>=(2
z#txqERWrb93L}<kHRA43Q|-PNK9tns%y_IhiU{;~D%+;cYQjOqhcK*PwzA`=$Rz~k
zkJVowkQbO991Jaxym9Yrw5^Re&(kzi*)Pri8{ox3xFG`VN;Fm%gr~)fb(o$WMuxRc
zMIa|<c;A}}Fc%~hB==rlNGhHoSg|D>d!vT>)iI3Wk<A5AS1q6_m{f+i<->f1CZ;SV
z1B5;HL&+#TkHB(ii<P&I=;+wiR{q6Gd3mT;l9F-*cmJ2kj<FI_kq^tUpTIu4QyE+m
zMxiU0G6<tCi#q|74}|;jEF1}<3^ACUsR64I2#sD`*{&SShOPX{q_%%=eWRt`U`_z(
zUH!y9zU~r~MqXbrwdl76{DhAVYaj7biV@n<?Vb`5>;JbP?E1jl$pd%>Qow*Y<zr{&
z^<*K-^VvO^^PXIL<aA5bwxUyT5jslr5JI~uuZf9{F1`tdUMI#dX;KUEfzkuwWq>Zt
zv8#`T0oCfkL25;NR+}cCaxUao^}jpud{i)Des-|b=56}F`SgxlVI2N`W31+zw*asa
z$H2d28G=kxGlybD@UiY{|6Uhe-7Rpn9Ww^EujtX7+d`cRl=l(dt`ql_@8ia}FXId?
zcT#|n48tPpUz}7b2P^BbewxjtORGXM2kWrn57iyhu#`6HG28W|Vx8k1M_Cl3L<9vw
z<^rt3&U3H+phy96G7fvIyDoX(xeq~}grHK6)kQ{8)`MKyE@T*y5en;c&=YP9=3F_t
zpmM`W9cz1Mgo`TEw?vMW$Y;cvq)bvas$6EKSzwXRr>YI(>J92|tG$z5>m<|5M&}jO
z)N~gY2;7;?59#@kphpReOIT}o18K)vZ#;(_Q=vhrWL6^ET2xJK$MKXDiTI;0HfF`d
zb9ovMnOWQq%<xS$p1F6rJ-0Q6Sg>IB$ewpRt;Gj^PB?gJYLj%&_N9;}o_ra=>q2L5
zzl2-Xtj^xL*LX~U{JfNWK?}3<W0f5PU`YL<XX=w&K=3>m;7;RQhV%ML2N+P&lANd~
zQ?<!#AxTgMzYNq&<xRc{eNEgMhH^m$ZX}jVbu+_9f9}2q1SK_SJQAQZB&I|CN;?MK
zF|VyZL}3|^6841Pz}b9xbN_xg{&hKkt+?O(vNMY<e1#7Q;TwsBZ0lroyOM6UN9#H-
z`?_9N4O)FFVZD(5&TV`M8c`ljdqBb-l-4Jhm!JPwZo!&k_uH6@Vptt4b__LK(t725
z;f;2eg2=mQD>r8^KZZ*@T(o$(re)ClO!6D;{6U)P3Z<Q9ym8{1IfB=BNiUuj2nP#d
zFE=1@Wn6E-F7nZrgUn;0w%{lH^;hm4@L+EZ1tss=w-iDY0_V^H{!M@XS1`0YZ&qFw
z-*^nh+{wDx`^vVI$VAAU2<Bz)RnDU{em`15Bu9HjVt(WYx~JxljoUn4B<J#{R6+HK
z&c>~^Gxg{p)|bE2S(T?y8y(?RgO_cCD@F?F86_ojr2TpI;&80{zYV8O+YLLtVul<6
zgeY-q3G(et$NYnzmsfo%i8Wa~^IL@P-SaFSg;ik{xIY6m%Ax-W`aiIl|3l)=%5GUD
zBNM!!cRS;#Lzi8dCPd-PI3QCNkTSaGW>vUs#TR>{(kfv7PA_ZEIuNo2Oy^g`QA|0?
z6inLNv&3a5s(dPu7T*_Twj~Ek<y5~vxa=|afR1@8gg*LUU#D*|lcyd_4F=+)fTrrR
z!>Y4pupTVdyIY+2l}|A2(S-3rdMwk4Ns&fYP>`r_H_lms1k@0s3JT3WIZB)I-~E!4
zCj~M+Es*wR#ecf(Gtt6h2;7u1Bd>b@`f&x67~O4j7VeR6Dbp92?5jQ<RE#B#2s{wV
z2rxSoeMn;7?}EdF(Fh(krv~i8WC))0C5{0>nzZt3cs8{PaT0d2VfjH)TCrspvENEi
z^Rn|YU9+68IoyVOSR~UYeiX&n|NUuUI&1gq!N6q-Y`~4Y4V{~uqc^0osw(*Be+iY;
zG{wXqmYCFb%8Zp|;&MFOyTIh(HAPv7fnmV=412o7C*7!^6TUje2Y*3D%Ov%OW)n5(
z8&+GU4EXTAmPf~!@0N4j7dOCGQ2A;SBaLe#^Ohm&pPC`ZCQX@7=N_{Je8Ijlj6^R<
z>p+sMVSivzwU6|_<(0Vzm`PEax7T~tSd3Rco%j2Rpl+KDcHK6wzl**PPk4JVQ^ud?
zNc1KRZF|@(gZVZvz*zJRjz<(U(b;n3&DZZ*9{m~M24Qfzjk|9SFNk)N8j7fq;?LxA
zf!bsGl}hIr#R4%kh}!)TP0~alQfGBh$7n2$v#bWQlaWv9!&SQW1vUHweyos*Kjztw
zLN~M#J)WLkmSbkWl8mm761T^YSMGF)u47px5M1MWpeR+AYgSYHhG&UA>iz&kd15bW
z2&TWltJ@HI5<#fqr5YDTeC$(9?ZlrkoBE4`WwRM@rZH;p6KdhAP`TDxVj}bnm;_6}
zuD|EvMRosPoZ{-}-<CAJ2%rt1chl^l5nPCae644Dap6}zPWb&6*1(M-8+0DSyM6ul
zo3xzG;o%B%UkcBLNcNRZ60*A{?V47VerjUFRIaeqs%=?^YVV%(aGzgnm#|Vc+lpKk
z4f=zp2x}u^JVqj?A!+w(AnZ_}=5tmJO|H{XXMQrQG3?lJ5UhcNyutyqj5_on6qYdO
z#TuGQy4GMdchiQ?47Dw1TuHRp-k0b%2qnK=)LMF_J)Pl*Q>}(sj@yIV#dB(tXr||s
z82*iG1;4H-{eYCJs1(=~sN)PrbrckmE6%9j-ZCk|pJSyy*hpc5`H~_G$Lc4YhH@hA
z_sSX8=vy+{hQ2Z#SfzNCXCBlYcIF56vtUbWKHeLO$$eKpKSt)4Ia3YU?}S+MUO`4P
zU^U<LB)diDzT~K?@n%%@-tmFUsnpr1VUvg0j@<;*tO4-=bty8M=mAHl33KL_)YUbW
zjpM?AsT+`<C~N!Hyi6wxbsfAP3?+L*t4z4B+OvpBI9I63Uj@RJcXhVZOt7Cp2{|Kg
z0OX(>0#kuJRRxObi?l``;o^Bf*F9UF!p{`I&*kQ)($MB{C5sbE<D1Yl$BBG(&@-vi
zDaU;-BR%g&DZ8>DVFp*fESQ+6DlOcT10u4k71#zHV&WI5+>O04eyZ=oS#zd|H_&3~
z0}hIetZ;#(Z)$Z`iT4F||5(dBk@HwAfIkDOYE^6(4H6B(9xQj_BMmv1!t?N%tS~On
zUr3u_KP{$?D=|-_*okt5rujc)GVJyNuO|z-%f~jdM2yWtkuhzI#Ksw{@J-E3AT|3r
zLbBT$9qccofd!L8i>RCGn?4YrNz~fPN&u|IHIO30O?6(KMq#}JnN%$U00a_P#?M8m
z`7<Cx)W~1|G%?#sAiN*EA1a(X3o17Zr=*$jpA?<Q`4W%m?P)=a&<O2rz)5gq11po!
zPu>2E>8Xc}j*)4jB@e2Jt6oYOo5xk6UlO*9wGjf2*0ha3AQ=0KwtR}V9fzL%W3gNP
zeSPOWW%j=i+n6jXR@NbZ>@?e>8?{iewb#Tf#|TcmOKAG#LM97J`6STQrAnXKuC|J2
z*gvZ)GSr`uGcfj%mg07vd#S8!?O*rWaV0^o@0RgkjaVI-Y;96KwZ*XyjA!@js;xfD
zW6D`$hdyxdGHACLJ;Wk|x`y*a17sA^Y8^6-U}2`PEPKp5#C2wq71g4nWxKLZGDBY7
zsu;mUS=?#8rS;H&^U_PnZ9AJ0H>J8_bp*Dco&5_@wPuRj0;~z|Tso0+E=(U=6{HCR
z%IGeX`T|xgK?%&{pw10XYMx^;2>wWSLAfBS^jsHSn3yKLy4+ateKJJm($pRxfeEmr
z?t765KHlvnQv4ZuRFJ=y9Yz$nNuU}l@0Wx_Uu#K)tJYV_h%|9`l>rn{eFW>Sc`HFn
zKdJlHE8tY<hL;C-Q)@)2@`fkSG4I}8apCg_U?K=}|Iv#sW(b4-N+#*pOEG!pQOY(>
zH|RuF-tj{Bz=cG#W*j=;egKVe!o5yQK1j25;vGuqr)K?LvBgSFSY(S^D5HdF7thpR
zz0D2}U?WsqY*|^8m^yZLA&<u7fh_W+r@T`~bJ*J+z072^i>Kx|f6tXHU`V#sX9u++
z%!8tDChy8X_l0HFQlZWp@o?glq1l^oeMd8>@DyuLUZ3%(qpq`k`MYOrbLj^9t<&x%
z1hM(f+7eEk;QN^MP>Z4oDlA&3AoSraKc*k9C-Ojmy`U*zj6Lh8Z(&c{QHr=e<vR*X
zv>3v4;*I9(3)Wh}xq+<q%1Ik@&NmndCOp7<6gG;V3+#H3F}djA0r)2yUxDHjUrW1r
zmtFKS$8WEItqWreSX(uUfv1~S(Z8#bt-PAF5(1kJ%G?x*2B)K<IAk&iij|=LuNmcs
zG&{85X-={n0`wm~%W3EkKsO}uO^I4u4XoLMikYs%kuOqb(XuyC-_HQQBsN9Jlp|%)
zFpRL!7rgfcMH#3)gJQG6Lj<G}7XU}^2sJ{HaOuBz+X?6<Df~Cmh=h+|h*u{Z_EpIa
zEz@3idls%omp8%QtYJCKA%q%4)xNl$sjStlfd7p5Cmol~i#?l|XQ96V6r#$t5ZnJ`
z^!SL3FWwD4yfXlm7{<U;RKx{6OB3`?3=TVI4Bk0cw$pOs>bsy8WYxuam!oomZw?$4
zK>ns3o|E3MCyHI4e?nN2vk+*1Sw0NjOQWvJZb}djXxwlldHQO$QB51_H9cDt!o?@S
zC%|d1994TXsF2>9{~7GjAx&UqN(B1w4tbfm*cEFYsMp0nVNom*PodEKK+a6fa%)L<
zLC6}$Gu&X2`hkC`fdz|h9qs`yZd2NqTGHG4j)dM2z`r14oNi<kw)#v9SSIq%i4^G0
z2oGStxDdx7x)Zu%SM5eFC^+r^uK{*n&=Cws7YHI~$hp^1oZW$j#L)vy7$X>s&?0&J
z>pTtZMg<?zl_zdq`jA54*f{OGoQPL({TGtDf9v3_*)kRPdRD+sXKXZ}ddH?3^y&im
zy$QLmVV3IU2mB@ksc4gRxHENi%KPOqN`5JhF3XV6TJ~-PSHh(d58<*yKjsURMm^Pq
zda<Sl`j*n93?hvdW=yl^KypZT{F4+jZDZpnaRR8^DGkFvww|9SN6pfFD8T<=*-Df_
z!=-{mKAX7sm@)_O_`@`Ss>_Hu6zX(vj(4SAPs9QL6?oV$?wg>b9AJ|)35LsM5`k4$
zVSLXddwXgWo2wIT@TLGh=AFSQ?*Q?Y)VDVOCBb-+RDf&A<b&<6*|A$z*VaSG2+GZ!
z;38MOOvy)tf*UoEx0}nn%JHT8Cr*PEm|KjL4jH(c!C|AH^5qrE&=0Y%=`p*fn^Qoz
zk7}5bDn>U`>p(uXpi0N{b60&MC5^ICYNih17yp%~aCdO_W6X(M__(OQAanZfB)2I1
z`e9{I80(n<1dkJGZgLGH<|s?-r@-(U)eOMt{4v9h(A!4;KX#TsD|c`3f|L?mrc5f)
ziXaRT8WRpGL?R@|J$SxcTReDG>3hq?`VFm*F$29xAewvoM9o@4G6=7C{XfO$&)qUM
zW*|!&t$yS}JHJ3r)ZGf`z-hB2)?z*RVDcQ_>=z8JQ#d{XcPTG!Qag?Q>f$N3uWN?w
z#*cl;afIjXtu<Zm3J{}BI$37axU3XBsYoc|wtb$Zslg&T|7e(`6FFR|Mh0MSN$VQc
z>>4y-KfJkgXQTA(IQrp;O^Q-G*<me9BD^x|!Qp@ol3IPbt!BRIbMhO*HGxP5kupL}
zqH0#dQe~<ccRo3AOVpBi5XPC}FO|CYCy585IH>eaTOGvG8u}E_lD`+LhKxJ?CKC~&
zBa8qp-GzW<P+p$PdKU7QwdzblM5Dk*3nr9uaY>Oc{kvyB^vRz7LC(h(sOhL=o_LZB
zSQW0LaLd&y6z$&0)94PoBG5WzhP#`l1@p3gYOsvOMYd--3nNX@Cjlf4svyl36WBUL
zO$^@suUX00u@O*9(#-@S8$)it^)jls0sc`#-JxC<A!h<G@fnwjYyBvhs>q@?IQS5x
zq(ZxiZlLfc^kWOm8@WLu)q4H#&-p-FN>b4Q@YnBw{upBQc{x8%wgeRvVeG2eu-v-z
z$gjwJn9&ez6boeL`{zbwi_MG6;<=53V{uFz4hFdZua~gczn20b<JsY%Xsj1gVq&S3
z71UOY)`SjlBYqevBf53=RU>Q4o0=W)K3~ofGux&yAp6IQmyHAoo^~Pl6h?W7BM)<?
zroz$WY*BUo#*DY4%KzUCAjU!T|F6wJ$>Co-&_5T9D{XgsjezqUP!?RX(S0r`PCE>F
zDbOxx5X&wjd_ABt*`8SDc};e%;klne(-_7KU}oMQ-3W43{n(mY*6mU=@WGu6fx}7e
z3+@J&T7!=q(jqD%$Bk5R|4+cpBHpt&JPNr0z?y^$$hb(xelF}r;$*(Q;Y_fA;p(3`
zeC4OGs(%TZ5YB$UEJ|caT5euFnNC)s#$r&UMQV)Y4V?8G(xhR1E~o7H9jI=j`qV`J
z>zoZNhBU#^+m0(@4=hNQ66rk9d7O+5b6itK>{`pYl8`HX{i8pu8B&*q?BISpEli17
z<*z{jw#mw0`4Mm0vL6XI?eL3?_<Jo3aHOz!c+Em}+S-n1c47%#1AFfhI=Q(l30n3s
z5quLr2^CZ=X&KHD<?zBm6?{0JaO}U=CTS?1k5-#FEnBI?K`DZM`Vv0@IoRIJLs;Q#
zTD(S!Mi*C^nN2N*6QOhU?lwC_JMT0CD#UnjACioWq~ZB8Ll?enp!gCNs9uPTp;zFm
zYvSV4!WYV~WpV8oj+{)yIxwr9(r}1eS~qSQpOIr;f&6#H7<~ZtKTS6R$NKRI%s-e4
z?it-QRhx+oxK1@%<+JKQL<}2#*cb*Uzi*c9x~mD+94`@k*eY3h%1Zz}%A<*aJ_{5t
z_9__!p52O;Q(6*di0ESc<)_S6NH3Vh1G+^P*$d^M51r{Jg#xwI%^FeI5ulG_QiW-^
zC)|Nv(Eq0%--qf4*470=PLeDKErmO27fE=9?~vN<NHTm(Vlsh*k*BqilxceDj|K~R
zF^!=PneTVN8ps5TR~{Y9&3A>Wy%DY<UEBok&Ek4vRAsFsjD$hB+a_uiaq&wV@MR}_
zT<+dKLCaA!YYw{Z4#UC@%1xc$?;bE2t<}?4oGak1Xc-;(ZC_Bl?O62)C(PwH4C`o6
zBOZkm(l?2B2RC|l^6pc*WnHrH2!-2t$5}|?iWSw)trVn@^64m5caCSa(8LmMB^q>T
z0J^5`4;J}>rR&6|7=^k%Uv8ginOJhC@j*d)X3s>@U>8*8$O&m0kR;yH?e>x6E#bj9
zyNK`eTH(&~;L?bnGe-<BdrA{cYjej0sgzo=`ZX;(VQfqfy!WOU&p)zTE_KZYg#Gt#
zj8wne>OjzQ;3bME++&(~YLd?X??7K(!r`yRDS4Y5Vdr>brG>Iv{4C84rtmst%c$l5
z)>#D{od5q+=Vs4lIx=0(HEUKd=3h}EJ{aQ)Ylf#Zh-f&LUlk|}K9*EwKi;rq?*CRe
zW@~1=jVVC}@Yci4f0~KK6OV)xI;uTb(pVF+Y1pG41u|dlAcuGUY5-afNWNdnf!~*)
zEKGStz*evMu9;s9e*>tTl<PC{?;-jaQ-mT1R3ZWW5bvnR_v&}5$aY(&l`e)SNM1~$
z0LJKFak^C8en_Bb?A20>u$ZCjovy*lZxjX}7V~+^-IUy!KU1nATFGt2<HZ`Z-|<=X
zhFWwX?sT{ppb%DS9eGZoAawO^lg9F#AN-40U$5Rxmk$orH$8eIj0F)bEvgNQ9>>Jk
zvelaV(8q&I^z_FL;PQaGKX5hpNxNjGhd~^7a&CZ$nKuaQ+gWLu?+yzrgoi?3yU@-6
zKTR0oo4eP8M;#`jMJhw<0~aGg^Y7VKl>701oe_q&sAreMJY=s%R>>f24!&z@oJ+ED
zg(<Y)Tp5J}7oWSn%zsM||Kg-Oi?rw~Av_Ol!bP9c9uJH$e8l&|&qa2+$a+m4<RmGZ
zHVZ)Fp>3Q*9W|F3goG-%XvjQug_2{}aSQYfkP6;=^L$gNN`2DAkr6T~1-flgiBXlu
zR?gd4-hgmW{+J%(s?x0Gg0cV09G6x#|2y1kzX^{mPzJ_-hgUtiHJA2Rt5?X4iKa_e
zx#S|kjpI|a&Go3_Px;{<-jc&=&J`|z)#HZwY7{#Eu<>y|`NxCRrpa1@3DQMvY;vB4
za_p+%1XdUdH_}D|_q$F&cD>CyuR$Z*5UW_YhW_`nw0})K1p?OtwvsrC<t=7OsEu~O
zF_E|wyn;p@cqZPHf&dp_4u2`{+b^*SWyj6L;b`4$l_k6BXS+kW#(xPQ$0U4U4q`>^
zl$EJjy|^X0OJIz&eC6r%5+hS9V5%pIWvnyEzj+WTcxKsF3=a<ilT&Zzwy2bphD!LA
zKny0cq#>IpJ?H|$y-BW~=6b4)(j+E_4Pf4f|9P6UC3UK)Pl!L7)XoToT$-b-Cah-K
zno|sESr$|7NBbY%-YH15Aj%dj+qP}ncGWH0wr$(CZQFL$E!(zTb0?yE;zjhwOn1CD
z=OaHd&d<qQvDeCda<5&U_cS8>xf<+3H3`?O9UV*B(6#^l3&`Z#tZ^6I-bkSp`_h7A
z%$HTy8q2Jao6={rzF2-{IR8?qe1j3deTA5%`~cVQsm02|x8W0deywmS;atnKJSU`1
z>U}3bDp-p!F-|7^$gviO-#7W1ki#9Re|2_+OruYsc`ph)p@+aK>W8@wqtt!A_(@6|
zF8ZMPGGSGf19DyTWWYOra|@ub!kDt~-CvanYO*+UlH7vkXFe?q7@EMtgueB6=FaWC
z1%2H{D#Hw$e~9JVG$Wp@+7wmir*FV?Num$T>p4XtG_X+8Ho^54gaUpd?-PocY;1<2
zXLiAj`SeeE`p2f{cV4CGt<AFtsbNV$Hmv2YtJNU9MwW2=iZ4Z6TTclv<ityN91Ay1
zJePLSy0o-+ymxOpDq^9FmxI{4fCcXI^|IOphO;)S4EZ@qD8~m0u5_7CQQ!g9pvBeK
zXCFE&;oFVF=Shb=C;=A7qm1am?&C=Mi460c(scH6o6>11fS|2m)B+s{9yUdM4p6=K
z7?G&iVgdaMiB<lF!e~&Yhi+O2GX;}AB8H`qg|?)U-8A#7&Rot{2*rXFONhotQZJ}O
zikR|T$&{)%ihoMq#|wEZuU87dOs^#Q)Y=6EYsw~U6WbOXcB4&esGlrOe`?JFyvgD<
zIt1V+!GFplU<p9P|EWCsZ=97bNf-0S<7!6F@26aL5T4ZFna?nn**MU56)<co40?^o
zO0@zHMR}|(3uu7{0%cg;(K}?O0deXd*0YyE(>-$0b}=iV#$9s;bD~OA4Eu9*nq?cR
zjOg4}lz|q$&z}(IEUVi0;eMPk>(H5-fGk@W2Y2;YeLf}R!Vhe%BFA4|?5-Mz$NvQK
z&mSZv4cqE~Hk>n$(SAS@|Gc+9bU7C;ynu&L2bG+X<vS`E?yc?p2hjiy0$lx%i01zb
zp%VhNy~~nRfr1sQh9q_HOPzp+N&jm+#Fdy~Meg{ox6RWPM>;qknR&s@`Q2`c(GfVy
zl41XXqP>9pKVwEZzk2Va96#ru?z*m%w*El%EXK9s1zWd`XK=9fO?U`GkuaJI!<Co1
zHC?$s`_^h=jhb;?jt(C+KZm`<0x6&f#yGPr+oYn*jCt5=hb4ro{3f2>j4b~N3qUP^
zh5vs)yd%ui(P5v7dASiHb!qu%3&U&}UnLcs0GTAea|GqIO@)d9LV;Ou@xG!lIW8%C
z!FJy(_^gz<5>NgTi&RJubuXH>5(3@8Ay2tnIL_$!7Q^-T^84X}wlw*a;*nv}+*q0M
z|49%4RsY|h|39SD{>!#PfK4MP0DL8H7x7H&h=_#+slkOS96<x$o!Lg)uHtR+EUDiX
z^$M{K0)xHdaTD}kKylzMP&MTVr{xlA61Fzl8{uKY6f{J!9H9jZMZKR73f=DZB3-DH
zr{y@s91~(;`c+2fBB}y|2}y)m)J3|f(Y{f*jn9Yn^*DZ9xSI6y0X4ax&j{2{K~0ZM
zkv|k8!p?s6r0MIB>R7Wivn*XWnwHQZn}6c`=iWov0;&CPT^&Rq?i~krvzP$SFoX_8
zJoPhxL^=L<lMeYw2la}qAcmmgyq@y_<SA_y+mdS@l87=lqoANT1uWYtYN%6Y5{BD5
zJ#v&T$Dbk>7dtZj?;Hvm()$!1*_}9zy)CWWmjhmd*1Y>6aAMD9`EQ>-9~7Xj)4-CQ
z&ZdsgTuHc8e)jPpq>Qf7`c#wlj(KvMHtS<R;uiWW(d_dnyPH3XzTGgD?9FVWkBRd~
zTXP~}O@|IstZ?k#8V)k$#{5kp>rIQdA10`9*mR}6-m$*aXx4nrMXuw3{t6FeW(d`*
zL55WLif$^o(>ey}{+I!|N1k*~5){8k(cqK|{k5rGy4+iu@-%7jku!D-j~DWch(BYr
zw!(>*axo}?Y5@onm;apnZ7gw?i)coxsnKe4fG7DIK>=vA4HqFSDGGQX_h}+MIaN2I
zAH01W1L^cnHv@A{CWxKAPohx-bs4}$nCK{xzD>r4Q)hgTQfIAr;j<i323X7<rP0%}
zc1`QRIvQ{U+7N9hFClWC`fgsHZW{w4r$o*Ynt&e3$jyqPMe;o5p#D1GW79=SIiEYD
zUfu@fwP`tze;Lggg^_F(bo$4-s_B>$wZVk+c?b6e1E$jhtZ#3s#I|>^{w=3Gb94{a
zgN0xA0T)4L4pK>4A@~VK(e8^L;%i+z2|T6i4T@_(a}d;@G`cbIT&w+$zzTK(#PUC-
zo&UzEoEiAAyWa(nl9LoxMk_D;Lg`p-_QYQWxfEY5^1V~TJ6s0pFO=ib)elqr)u0)4
zG?Y$A#uzMv@6op`Nt^q5%nL=|Y81}*N(q!bFdPdMS4GYyN<QK{@%tu+Y5&;DxEdee
zA3pU-JAejBGA98`bL)Id<(7`G*_MW9@BKvJ)jODQ0ndRi3sNf#>A<Dk5(qj+gW$YX
z$zA;w{JB87(TP8xPi?pW%SDGK&Y~Tg>ys0I!XO$$G@iye$(*M_M>*1-HWex;Em>e;
zD!qkP6JSd`7CYLBocFz@BK+ok$(UN1i=PNkcXkV$;d)?(C|t{U@dySt7;DnK8VYUQ
z0*H>%ld+W@9t<O=?D7zOp9Rf-icg6b{<>h^JUmG8rF|4;cc|+M72lt~N8R<8S~tFE
zT*~Vn`87Tx>AhZdy#;BY!(|zKga+c8{Y|!<eqvkXxyZ4n!K_@huIVR{h12>A$l=r)
z?A@&eNbchpAYu^=puP)dN!2DuZtB*Rg()C9_O-&LG&21x?w#pXDw&o%#H1#=7O*t+
z<Jqt&c-AF~B<+U&ua<rS-a9#Dw&|OyryXT^-<JV2zZ#MPm7-|y)&f<wWP=clKgrc3
z%o0xJKZ6uPKJe=Q6hQwC-Ez^%I=oG)Pw=8`Dy&6v`@pmPG%z6%kebP00DtI^*yGD#
zfn*jO0V;9T>L@DS?ftWfO{s7kgFb?0EzrBu9GQ!Q#Jn8^y0s~GI|8-xh4W_9$3kKm
zDmR>jViAm)$jCSBnWNnxr+Wh!pmF)rtpA4lfVaqdQ}U{Fq$q7Jhd#E6j2Qo~jGfO1
z%*)?$HLNSXw4Qq+*p3opzQ~a1c;+}6<R`lznaOO~MBd=i{3a9Ll1#nPXM+Lp5V;+<
z25*MnP}0>$ie!QUHnh_a+z$7l8I#x9jl*8Pzh^{d?)8jvI+*r_b_WeKa#T9kJljt3
zM}W|)2ef~0cR0yYiT#g|x1ZQJDN4&oG+?wdegZ;LL@NN6+ew~tLRbStcSxAMZZv+$
zRAM8{8a&<WD^7ly_kI3YCiCmYmCA%nVEz_%xC{^m2C(z&;$t|FZ0W6`m|KzvXcYB3
zJwv_*bA=aVe;_%g6=fbIrbxtT@mF2}C)xpX{;l6P%gVSS;jR@juky=E>NT}i#Q+7^
z(P@)-SvRY2Jf0(0W!w8Y%aHJ@o}mlIOd{Rw6n2v_IWl-YvCm-_H6VKzfpRyoZ#QO_
z$>NmFWNTNYGP{qdc$|wuR+w5&dKZysWV5@~%Zd;^pos8V61bfpd3jJMd5ZGNG*}N1
zI>_2XH#q;xVaSY)6U<`zUK3h~juGaX6x0Yjjx!Hr-Kn2WJ-;}jJjaTt@JObdeLvOf
z{3qI1fLHS>4ou(6ZXvCN>fxtZLJ}CNcPyFJ%9h9ql6NPL@($BxPtGx4*`0`M;xvM0
zra^mHn;bl|#{G-3f9k%qXN7HBH1&Kl!tS1<j1N};rK<!ui6Xo<#<HiRa@ioiS+UM3
zMyl}QaItJ?<BbJ_&h*|QuDyh_`@p71hQbLx7gPw`3f3D>V`a${7BoZ|EBS<h6;3f`
zRm&#TB)EZ+AVMAtG_yaSwdWf-;nqO?#xBqxnyU5I;R`qPjB7!7u<9d(V0s$WlI0J`
zgrASZup5E(XYWsQLLBk7*%tU*Wv))#SP)3egh$58Q_L702==d3uz~XAc>qZp>}|H@
zp}4Q70fdz_R>OGKx|({#@b0%^#GrhHn**%bQoOHn3ro8eH0JQp22{Y-br|su!+78~
zo3~+lt4LTFN~jFv$#{GA#0-(ke~<)dHW2FnRw44grqc)knW_tXC->+pgqjo_6i>5X
z8?4;0QFg&1J*A8w=o_FCY<>`t_9Mq_fHAZ5I#(Gs{DYcnS^KokwKqWmFc9_p(fV8`
zGW?x>Xfr_U6*+v1q&mB;s~Y`2X7A8l=Vq`$7UxkGEWPH|?{RFz{G?J8y*Fbzw7S$k
zWoe;!pUh#1Zp>))0ho7EOEBU0qEgvkb6TEaR?gprV}oyQdJkMne*^>*9?*+twR)+L
z&#@WisG*HSu{!*<5H<k-S;NC%Z_-8h-MMe4a+U2(_6*$a7Pfq?@-w{UzsN@=`}0Kl
zVlgDh+<9=QZJXWujI{NtbJ*9P#sOv-p;H3w$eh$++x210krE2_16sAXTeK9Erii7x
z0FdJgFKToBiaFo+rDADO6TY)mjTPW_qH!$l-UKGp;L=?-^j02vWi^#;dcs$NM$_md
zHN=RcBf!|=<cc&&7kC@8$%`3krLK7sU)5d$v|Sn&9n&+vnp2a8#M><*g$}m*rVod6
zs4|JDxS%3q5Jx}@hO2<rEbBEunH+J3#BM|Uj=SUhgYCPClt^&e4`Q_UyoK2^$0p3L
z%kAu{?kWK41L&Oy{sSS<v_J*_Qx^E|$OsUic_pua8nRxaQRDnA>So2CKO?-nQS|)`
zLl3`?K0}zh(`vUnJ0_N2)cMg%=U;Ojg9Rj4YwwXI@xm9r{3GJL(s(by#d_R*V#7UP
z)J@#(C+5bD34iu}wk^t6FMcxgC~{+V7R~R@J^YU}Y#o^hXtctmx7VER;?oBtnjNnD
zAyS{Wm6JY}ChIaG+r+WQRBD9iFB<+zj{{5SV`4R4tll<{t%a@T`~kxyeh5|N=;Fyp
zt)xDG01$73mY)$kLo=9}0LOOTmCOcJ-NN|1EdyJ&32_U~Ky~cREz~BAh;PHLY;3G2
z2sws{zEl7yFRyvB@x5CxP>g4cm^Kr-oa`7|1BWr~o+LnpJmP{SmO0%K6a75Pc7Q5^
z+dYIlj(@bUMSw(wU5#S1BBI;ymg<a(SmiU%ht}hw9y@fOC4SpQ*cDcaz?mG;*o&B$
zs5l#oaQ){C$Q$f_><&O=`%LuVtstYfqfc>l<h8?&<k=u03xh0i;*6XX+rDT>JS+3U
zvLYO$1Bb0M02rX+iJhbkyq}2kIc`fMlJ{`h+7a+k7lF&WPnOrwt91To%~Er_^|B}9
zta-<BC%C%0h!Pc)VjDLP>#|1SRc{X#zhdrAhG~K11Q{Sc)Y@zir-byLDlHb?%ax+;
zVo`ogk^LM)P-DAOfnRn!J?fSY)rL~u@Hc9^7HVY8wEPz2!A<0Ix7MBrN=YR-jFl#&
zfOi<~L~8S|{}q}=z79vlXE|@;^(}#BS3iiu&DejS6}TCY@c&#q`_F7b+EOs?TXPXQ
z%bg_Pktl(jYeYtwH$(~Ug{P~Qky^`&7wiRKIDi`!)+i1RwNXsiAk%1njOBIgUCL&o
z%Jj5DTNbkY!dv8WPys{9IFZnmQ6PWOtNLtj?US#k#@Bcvr7vxA4MO}}<Lr`wj)p%d
z)LO^q5o#H-v7TOY)vDkOhhVkKOi<VqxSX=BD;RN7*Ol-j?6@RcspIj!*YQzm4B~y5
zYc^8$&1dh#R)pCgWzQRi7)lAO6`FC457A)xe=0m+GeAKd0Jqw|2SgZMED?=))DsNY
zjq2Pa5LZJD-FiyPCEwMYMB?)#(Q5~1p`5`%+XXUFY~|Vmhb}{Ov!ZW89=>eWlwTKR
zU(FufD7*ymZSX@lynLCmP8G6}A-!jo&5o&_TWncAI4ew^Qobv%tgz9sb&g|fjL3ch
z>3VO@%H@5-^|7xK=6T(lhOMPjmek45(FC;fM?IhOnXh+isFS)d)^JUeoM&EdpC(X)
zCW2lU-*BZ6$W=Ui+VK>52HFWaa`}*Nb@@-dTCn5>aEy5RnCyVT2CAB5DQbl`+)QGm
zF)DDE5)$r_-AYoI(V}BSfQt@Y*p!xrO5;T)W~e;@E>MDt0i7Bcw&qS{TD~X&{_|0d
z<{dso!0{!Qh^w^?0B!A>*y?E2pP<l%v4Wi!>yz2aiAp2yEmV#0kFXd?^4I{9wzhTz
zN+!-O_Wv=87&sdcP_WUl(J@d0{J%eq5s6#><t=?J;QuoBzfPEvm$2}g0RRB{nm>c-
z000mG0N?^JKo9^=t`Pewm+f6C-(CUV0dLJt0E1r_8`tW7QB-}P>pK+DrjgEaEOgs|
zi3hb*3OT=HZI?!wD`{@w)Mp{4^cmJVf*!fe@tVW2=&VOHSG?Rw4b7rt>_O^k|A^`h
zn(6B2IOrBsxy0Q{+q0-)8aA@95b0qY66hPZ0x`$ekR`hT=#_vG>U4)D_)rz~^&#oI
z{VRIP`lN!dnnYa?CIIAKyUBC)iTscyz^)YglUnJ?&&elc;LMQlwHzCxl<>|~0jf%o
zB$=t{sA)bClb(#KY>W-g^D_D^dFVysvKQVCjCyc5T$`(4_!5Wnien-VbDyC*FxL~j
zXAv7_wR}0Y&k0g9yu79v9JV!bhaCo?%Ecl;^R&Ixt`JLCLzj-eKpSt6GG8&hmSfm9
zdQ@R0=hb9)^7#~=nN=)&FSd_(8($@>U#^%p<u~c+|2oBo<7!dLG&BSZ4+q;I`CW`}
zZhI!brdcGpTkZcATV#*1Cfx}q;WYLhz;U1N@k}}aFz@VQgfiV-yT4@Ai(Kr(94`=~
ztFQ=5`R-L=hklAml3e7uK{&5}A=wqU{M%8fryxO$YUX<HUu3p6GELotL}o&#G@NFT
z>%j&10qX@hIw(z_zS!z4r>t#T8C*`jwm4xAV<Pl1azEBS2_ed`7!tXx9eCn4w(!tB
zg5CX|%Gh^WSzQoA7i(Ju-S-1re7lr(tIKu1lCE+1yHxWx7FFV&=CtK4bN$03Ub-CI
zP%bM&{P7OVaR0oqsEoi`?x)$UPK5NsBC{Hs2E2Xp5Q=7T!nzD=EU5Zk-F_48OQAje
zvdOPzr5%dnOLCB_T{9q#izU8~|J&y#8UO{mUN-#JDKI$}anX7*Z|PkaFh}<dTVz%6
z0R918ywiT=mazoO59sp~O7S9=QLeL#Ty8TI6VS=&1`ykuE^J~XUSMEFH0ilNG{LQV
za($NFfBl;X@b%5TFA~dT%+pU3aFA{kBuJ+fT<4relvbz#&m2~QvAw%+(9iLS%LkzO
zms3{gBS95ei;PMmQlz-oW?Dp>(zK(p*IMw!wg@#%LSxhO<#$Xl!)V>2tC#=}7P)T*
zecBJuw7s*~xrhB0v1%_wVQ=Kl8C4&eLk_aW$S1Dmi1me4Z)-IqLcR|1Iq=ZUT4fT`
zS|u~nuItK!fZ4s-%bt0{yA!c!0AE_nJv*-UTSLjb`lOnL6R`wHJ~hpwW}m#Pe!dfB
zMt~3iju}fHNNxJOEeG#1K`$k(wr528W206xD3LN}KU6*5ZulL_Ymn3$x~y~a{T5p+
z07=+(X0o=tkj9U5ORv5Dup%^zFSaikW$3On2zK*Q>DIG@^)k<K+4B0n=PyE$MXY(u
zOAU6Ll#o39BPb*bsX|#C4r`)JQ57_VylK;1@|oUac<1&J$sG#G9MS-fr5+wH;#|TT
zbLXZ!<&YEPGypy{d2wKzMD8|Xp9FA3o5J#Q3zNF1ig|0CeQr~G9eLKCpPso{o^N5o
zoqb3og)#z~8YNOk;d;QKflmW|s1X?sBwf8=om83QjwW<q8bFmGIq$`jK=JZySx0kD
zdDqB(?F%1ml|nc^_R6_>siH>-UjEA!HNjXsB!>A<i+1uK;29O+e*5p$rQO&RyUZdq
zE)K@|x-kl^AZ3EnAF)5nli=qoojL&xa^y!~GcPBH{`8~leu7ZDkWoxE8m4N_BuDeU
zSwxv5ALPzBze#NDL`^*JU*^Y#sp-8?yn0agy=|gkR@csRmiO7iUtUzHU_T*s8{R{u
zWQ}bYkRYQa{n8vq%b6W<23FJH^0oPnim!&=Cc{mSP}6}H*^db)UzO8Og5s^W-)MOE
zx2K*PaMnGBNWvAnF@WA#FNm0@1Qnr8!CA(b-)0|vPXej{Bu%Pfs!lewPI*?+7;JaK
zkXPV(fr`(hsBT<<0`9zRL@C$R^R!^2GsYg-23MfGBBqtC%rYkLI1tRAc&Hs*NUAGg
zuQNZ&8-po7+P}$?X=lRqUtn?7u@-<0-M}pjCc%mU9e6EaChkd^^fhMB+VMlWKz4I=
zymf}AIFkrhEtwQ5exQ$)z{|bNy<L`%@SQ!&;DKX;t4(^E(sCx6yqK<?q|2FJ4q1@H
zS9#k*-FRhNm)=S;%lK_HsLYp5SfUf}TnZLy5t*iu0Q-?1o-y=Kp|_~h8sV?VFd?fU
z*-4aYZUeo1Ux?DHccg`q?c{N(oC12vL<s%s^mc3spU|gXb$${986)=1hf-4r4kyO2
z7NvBN_QrJ2dPeElc39{T)uVsDKa4L{^h|=*frn~qLoeG+YrJ!^)j+U_wyXAa4mEw+
zYxtGm2s97KmcaaJkJNTnV6wM{A;g~lEF%r)$Px;nsJ4MTOp@TEUzgs^c%53B!VY`2
z+~YQ^K`NSWXBXKpoN>C=ZwQdgXQ6PydXJdL#@#y@A>Dvf$f@}I)39leVz%$kb|<7r
zS_;&n7&~cQ+A8j08Nwf2X2*q)JPz&Z>4E7U?z<f!koRb3zyoc{GLjn&he*aQ029m8
zPwEDp>9ERfs=UNtvM&@`<zQo=Td*}-cmmB#GpoA)p-OT8_Y**3wwZhxLZZc0v?U<5
zH`~E!0urPx$Nmh87`g@<!PI)BJa|>EnVR?w)vIxE6~;V%V8$Ytn_JuUcw3m$`BBzL
zYlKrX3+4lygRPiN4UPlNh#3B;Epm)j?Xu56=o@~`jcuPik<jwfU6JLRkn1b#aEl&c
z=J8d@$cDHly(hvjED#R+*hz-2%urS>WWrE<+<eI6i&EmCo}E8_ojj3ys7*)cFB*qq
zPveJemQG9mG*E^2NP{YGGoUg>3RuP4G-M8hx!dNY3@<L3Pu4zyP2y=H@N2EAVCu(D
z0jB$TNv-eIEXab&9Bt|N2suxA5}yF4Oe+h>pqzT8;ScWSrih4_4(W7<^z!y7C_z-+
zg(H;#1m$lQyiFyWlb#!V8{X*vyN7hBks$=e7MNJwyfS-i%JoDb_fsm(BbBSw8H0K?
zLojStMPSEW_?lpm&u0eh6q6Z!qlPYiG0NRmDouFI0OJF5=UDKuTav2C2dy?`{`Pl*
zlD;Ufjc5%LHKZpx1f|5P3As1#4xG!9A8DRW{f!O#66T{V(_fAEZGpyGs3J^k-ESrw
zvv*d=hvm7sq{g+%)8~<W%Nm6dc#)waIaA0!<`(cRBB!(yZ%GnL9$i82TVfkazTn!$
z9&BRi8KB7rp(W(E#<4A+l7{GP*uDuLX}5V|_dF3{hW$`-NqAbFu6TPvl0&E$dWXl2
z)5hQ$^yx@c1Y70#@(aB{x<`;Uz?Ox}jf<obneS4!>C}2yXfRiUt#I@MLa+Upwz5G5
z*v+8cvz567Q=GclCMnI@%;LFEfAs90JVPa{6)wjj1lxt!w6RoE?GiK2gtmB|r9Qa5
zRmZ$EG5aAp;ZL0C98HGxLU_mY;J*}G#k9VWxNWg)Q))iu?$`?SX4Zt~vL-?qTC=bZ
zmy0U(RaBfbu1o1y67=(bs*W9&2jR@?&7{doU@3+>Q%xVI`!6mdkr@o?`j*+&KNfI`
zV})9fi4n2pk_4KO2tqfo3gpJE@C8-{Lg4Y-(Hf(75*1C?>Cy_3^#5G1u$=Vu3rmoF
zyLLOIZ_eY>ERr|9mk61F0q;>8{t<DSEl-LhbSSCyC_APJdxVW_B$`=X9av%LWHHQA
z7~%4h<7Vi!!K2!+Ytts$j-g2b+!GjudU9#J5M_BSbtisfEsbI2ONpl#=h};6xF7?3
z%!CcHeKF|ZPp6i7TjYt^OZS|72`89LVU=jXe-E-ycu3of^5Bnq{Xj#oE2(I>-dMDz
zou2!X->An!xY7gW1J+N{WxM7lgMikh3rtuwZemuJRXh0=3x#MZOIVxb4>4aWKW~am
z>ob#>4X7pUttMseXyLFK(Wvoz)YW9&u~wf%A{`@*radZ#xL0HMXRiK87Q$W}c`3Ly
zaLj;WzPi7dj1@~|JRv)!iK6k?2t1+jyJEUA*PPh{{J@>YmE=N-^9DLrf1Ph4CaRBa
zFanwzLMHLGr8q-Ki4QR)-lZ%CrJ#&DYOhzYV6@s_JtzLEO@UU6Hk9^v=U5SFh8Y8K
zK1T>+jVBk}k$_{yKnoiE8AO+#^CXy@Vdv|r?S?Jo;av*Ql%Z*L`~$t&39QNo8g;yS
zno?QV=S-=UeL>YDY6a3Heb<0n0(l!?8{*#5B|3+xwi`G+!0$*;?#mNVU9T5wiJJ`o
zXh~E9tb^90b*tmm?{k-x8F%0%8&JBPl6cKzeKYs3jbA;tMG|d5uT7RKXyhj&-Qh|o
z4JSxx_mX25ej?eI!SDu$I;9=itJamn`hfELBoC|MK3eZPSi<Ki<8+fjUL}lkZva+e
zyxpXBnEF4HXB1Ozle#=|KFb+!GRLxNNZk*nyy|#{10pV!5V>H{AvE&pkzS=Wdv-Bh
z)ciH_hLR`J;YZ(4S{%R>jK${`u-i_6q`<5CV*&IyPi~vHH-df_v8ZY9;2gHQTE9nU
zJ#Nh_Q{tOvi)|U0^dG6rw@y#lxpw9R7_@`RK!8u~(x!?>4h%VJH+BNjDQpP+B!;nP
z<@d~e|94PlgZvlCiolpT`F1TS4KUc;_#BabzEU~xrwK|#i|l$&!Tv;5L=#*qX^E9c
ziR<P!CtE${O=juyn<T`_feQ?$v4^F041fF6_Dw)aJexKPz}P~fJER}&g|nZ)pSlHY
z0Yh2?iY<Ws!|F}ZLB>Y;sbX_=g33><^98*8zFaoCDW&itr_aRaHVjKL=O0!3+1#fh
zvipP(V!L-3MrO>$<ApzV1#7o^A5>yH7&ucDuax<8K-fwW!A>~@xwzRYGp0an)qE^)
z(#1(5G0rk!Cm6&s_UVlB1;4o1gDo?D`$?W~Y+dp;mB^q~tmGmu>+%X(ij+0&PnI`(
zgbbX?|GJ)E$g?&|>VoNNJkY3hCkg&6MWKD*A{HVC;1&(teXbJ6D7gFqNMg}wJOOXq
z+9TYoSv)1cZ;D@7XvB{{Xp(*Oy2}X4Cf`?IW7)00VrA8pbfX1)CKJ)Wa1F9HlWYn(
zt8%2F6E;<j<wp0d@OyL;#=E{c10UxvROqs75}r){A=`=wcCjo^H|PhFzR|q!)8_Vm
zFzBXi9?##h*DvLsT-A6$DbEcF=`@>1dfa6b3d}qz3>e$cJILOzB=Vtq-4_`8Nmlo7
z;6=_5Ok)sfX^Mn~fAfkDJJXyrn8cU#>)-8!Eh;<%7?q^CzYyC2)C+6nLy0tRmC{$=
zj<iDC#E)TH^DkGx=3k?!&n5{RraGX=<{VdDvbKQJ|2hJq8Dq#Is(GQgRq_NMG~T)S
zY%nE(sL{p3Dvk+_RE9O|q*pplMzyGQoeu@U6$8V`xRIQxy)X}&>(Kh+PGHe2dCM22
z6bpo({r>JPQ2mYh1x)b5dbn3a{bgzi<7(pz^kn_-T9shitGM416jc^Re-aC78Xu-+
z3*Z>M99Snir287fH_bbLY178{?aux$(6CU*Qz^PwJXZ8@l@^<Uxz^#1p=M~~UP|KT
zO<inbFCFB2KTrg=%Q^(S;;5J|bt(e^*XEs$9TIYjy+}1w|N8hE8nWTU@&LPvkfwon
zFAqK)Y7$$W&KeA<yiOx;9Ci<o+atcJoSFb$2u?v3%e>PFWb3F?c7gQ%JC8=AHx_d6
z-{|5~?uan9_ynAA6=FvK=J7H5`f=#*;ca$nwdO_W1~J81^b(=uG+-KMsv&fdYN2!i
z2Upru-q(YTH^~5;ll>@6CD2Flji0u1HMVSkT}?2YoeG5e6MLNBqGs9~abj~u1Xvg2
z_7JVYuWeFapMD5tDrMBF0(|V&1(mUB^4r>g+;5!R%CV4w+7{L6S!i`6K^qo1EV>zV
zEd-=@p>fv)YFK`|d~efSKQq`5O0^enwe7{TH%tE=m1<MTHxmZRKkh)0k72UzOGght
zIG&=Wb|w3sEXvkGyN~uGlr{TPs=<D(K2Qou-d1dvf~KlCBWRTA6k=l10+qGY(;jW@
zm@wyT1f(*wK2<tcNnR5jSK~o039sfD545?;KRxU~-7B)kagH=`HL3n(zup<}B4%MZ
z){k}O`__K-?3o<(Su0@K2(>wtv~h74tOWJR&>ZHL)hd|nv%v;GYw6?Fo5edY=J=sH
zk|W3mNYU6a6TCAC$=h^rSUfUPwOaER@*F8Hb;*2(w>;?U48h_rZ)RwtIbRPmO@HB_
ziuoLRBg&4*Ltde{pP@OD6FU>@(BX@XG9^*K%KWNv;+kx^<;`QDzJ%nVK}VzM*v1h8
z&37|?V2iMLOWa4&kWf@Qds;A~I;+R}QClM>YR1U=|1!t8HP*Xo)bdq^Rt!ks5FxmZ
zo7~U%GP@44EM_2S(}6eLCp{Gy6yi7C&)=bBN{E*eITbr#t%dMoIGYQlN+In`U{3L)
z%c@^*)c>h^0oH@f^?Ntkal`(3)$?F<J?~2sQb|#PP<k{zxxv5ZfLC8mBJ~2&|I7d6
zZ+;tBluuZlC$?@q>)w9ilsubwizo&k3tt|`hB~CD=<$2G<>R&miyK<j{Y0m1jHmdv
zH&(1dWrscYS>OA3NA-1`y2sYDqHgoDf+GLdTvmOo<!*Mw95VszK3OC|h)S3|&Z)bY
zMp9tJvmLz7BW?7=@Pl&v5v#_^TFJ1X^9R;K9ftmPKx;&w1B*S(UWTGVa{lxgfRTId
zQ)5h36o$;_03cIMmLGyrPZ}kS-oCnlA&a9B<QXIN*4DKIxD_!(GeOQMc`Z?#aAJ9w
zbglTd1fBH|hW8RPCwRraJ=^C_ZvAdR3d^GmkV9T)K}mdEIQXH8{asjw5BL>-3hGC%
zP^!>7in8!0RHkH<rOp8Zrybuoi&%!e3$Bz1+@-}@Wx2nk2P=uaQBsx{T3}6J>e#kK
zDwG?_qu`!&5NA?h9X8peD^cn*b+|tvPX_7aCfyK7)<OuI-ITxdeLamCd3?@oQ#s+1
zbRwCsNj%=7|4dBZvPzSX@T7AW^3&2`Ncl!A<e;$7d*ySMS$6ut{L%d-EHrf963yMA
z9mrx(UIrF!%kN}lg^J*tFJ~l4Yaqv`BL4x#J{_BrylBRm0a&t-?Gi(D;*1%kYFi1#
zD`T_tHHi=)OXA*m|9jY_c{aJC|9)$5kty5C$<ypqK5?*<P(u0(tVJ$60ktzj=;Whk
zN*io<SI1FW=M-rf(DGL1UM@l#S_?A&=pH8Mknqk?n*Z+w+vz_aPM=jCORrL`)8uor
zy#xzPntt>OU|Ob2sCWr>2-T`$;5>?l7T>`MVZBDl2=M4h8gGZ=<}-jT3+yOf&_fmY
zJe~7AVH69Y{+5zSP)aB5;M~P4W@5@t$VVLA(!y<Li+6Kl6U&Vj=4a{Lyf7^-slBbZ
zrL0(vzfW)6P~0)5kV7kqz~RL-yQqW>^tYDr#BXM6$_l&wMr%g6q?yiKmiG4r5J<~&
zGWF=gfYG+1Sosa8<8Ka#SQoRzTXbZA5x}YjS#^)hUJ_SZB#dW`b(OGH(B<iIqzwc_
zgXV4rss{o?RpD4ipn3B4B6bH6>KT6m?tcQ^OF{Euyon=JY)JWqjX3@ox`ZyRn9heQ
z;bcb^abI@}B0BNmOV7PX-W|*fKajOa4U~us!c^0tlf|^A+D8E!c2Oi5YDCF`5%C)e
znlb2jERKub*v3sd5{B`phP^+RrJ|G5YlJDb`Lc(E4QSKOhK+||)GMUqpvU|{_4U#m
zDNoM~Jce<oQ4h|&Umn~0h`H8lJN5zdf6RP){PGBk@XLvZLrH;fvif)muNl`KA_AwX
z4v?W5)xLeLg4RsVPkV<c<MbA1<qpEF5uQ3y3xsu<DR(P+=Kk(?+`Qa@b_cnToojTF
z!rG8#10vQ}`FK!W(x&<i?JX5JlA(TgjHSkPQh*e$&nOa{9e>b>e1d4v$^a&qxw<kC
z!iqhCrWJ{1ZYGM&XKFi|VVE-#{AC#F9wVr_{CU=cTOWp<W&o!1W}}Lr_N>$u|6YHN
zXT|^C0;di2`MY&t4zeb0PfbUpxJp{$h0vXJ=xk!0QYv6a;caHIW)&!OL{@TL0~nzv
zNU}<pknt22HbOBj!8B*v>a~(`<Z0COjQth+1W^k!2QAc~FBY%(`zp9iym-BE1YE?Y
zA<w_%k-<v7@0<1VCoXsfQb0z^uIjkgAq3fS-5#Nsa7B4kR0ktWnK#^jx;k546l(&0
ziR-nZA|d)La`&?t6F^1}efN>EblOj4YwQU23M6U@m%OL2rWS7$E;PC-5RNj>B1xCs
z&w^;<yd{3f!2D?<A{Mef$$Us*ZlT4730Lpc*~vA$lKfORcrJ<;{#SCLTn(>*?4I>p
zLt?r3gY(dA!tY#fW;>?Y5u-?I|1^$x)E$uf6Osbi8mRebcnG3c0VXFmGQ?MgWK0fT
zBo>H83d@q;q_a&Eer0$y*P{k%IabXhD_F7vV{RU}<_PMyDwR^<txL+#HythD5fM;Z
zvFZr*s5012VOM*3NZ`^X;M~n@*n8rWd?HL|GdVWx$}xQ7(bB*-_GfW~Bo(|%N_&h)
z9?2AjT)%wkw`@3h-DU&k80lHjILgX<5bd5I^_`{V*jlWy2c%F6{StCT*V%d6m@Bky
z{hG&4hxZVR8H||I86h-Qas*hT*-|(eB9~k0aIj9I*q7~}A1QB=f9%+)H?0l$GT{o&
zQJ@yp>STEaZW-aZ4Wmr7HN%-)*-(60TmpOzo6rhO_>OZL6JCu#26}w=p~XpKbVF%#
ze6Yrxd&ET(xzVFLTW-TN4jJu~+vm_sktiSPD4&FA85zzmLj|3pP1Q6gzF!d29|NK+
z-^}3A<9TfG4GRonc3Ze<?H79m@MS~;b&|Z$x|YjZtqJ#lf#@TzfiM)K3FVsu^UEU!
znigU@BNStPWOice#aw>1X;*+gybc%_&L?K29(S3L5glnZsaZ+m-Q*7+5D-*9gi?<o
z0qRmPJq(Fg$ft-S0l~ir`Y-ZmSx8nY>s*Y7zedRcW3X~3#*NXf3G0ZQ?^=|9mn_3C
z+QWHFqO&0Ke{VDqu}^5s(DNx1Vl?<m+V5CgAmx|@hOsNnU5vC{J&<%>c>Fg=`odSb
z-#alWtDOSI%5ctk{EkJ1tmR#^e=)rrlgIQV;OL(HmmyYlsg5;0rU!k8OXCgF<DFK`
z12c9zocL-+rsLcI%`2?xx@98oa(2_ndy3BC-13a)MG420Q>_9r)94kET(1VJ8YSq3
zlsfaEkU$R>Cveu#JK}F`fQo6^201vU#|eeV_X)5T;%}zRLF6vRTEv1sFvWm!p*YUQ
z9<wAfS7#X4V7yeq+R{Xm>R+MWmLA~n+&>6$A6=G$j_dAW4|ll?OL6hD#@<+<a@@`{
z%oG79E}*uR3eXtWL5kO8J}c+XAniG)5aZlYyc=)NI?oIzM|&X4lPJXYO(CG$F_sw{
z?Whf!<s@ov;BS(#zkQV&Ajyc2td-xF3DZ-G<RvdPAfb_GF=fLC*CQG#th?MXaU~Ki
z65OHVQ2V4HS*=~l$(f_<WdWmy;1+%`M#PSL%x}Bj5V^EA^jfFYf%ohSRaY^_`OX<Y
zLJ>G+R{;o!GuO#C2`sJWt${aDo-dJTt1mukOz}shq9M&my&QV^?2gp8v9p|U@p(9R
zBplLe<KiMfhy4qvjw-RBv;vqEzhbJd#0LzPy(E8kpbrK3v=LIioSiUq8I)((_3`My
zbi9UlNxp+-QI>9-f60$$4;!O(m*$3!c09Ec4`^g%!4TKsZ#g0DN@X(0NhxjwB*7n^
z1g}92Y(b*FBRalN7xPzUt}jw|bTbCH|DL1anyJ%~fr>j9EH+brg1j_A<u4fv1vZhk
zq^*4_ar-#-8Rm7&5f>lV$h!Qgicf}b4l}5~fIZ0(uF{u7R9iQ`uXs+h<H7LFPfz;`
zyUK#3dh<e39B0+VE1Un^=8GKgc9ou0O#ux7<$Xw$X;za$a$Ub*Gswu9uBvqXovt?A
zMbbv6NL5paJe#>v1xuT=P}BFhKr&(%4ibMahDUA?csC4GhjcJQ@k53pBm-kw0i>i?
zW#?eAV7sK2*1O5s#`AL4W_pS?A7>#b4?4@q7J5f1=nI)z$2FbTx~kx*mLw)5MDg{G
z6nsG+qpbRDFebu-6_KeCV;5yv0y!2eiz-W_RpI}})ilvp%N2?NsSb6&ud#dyuY|g)
zy-y`qC$Eb1DC8X9A6RSXp$<fX&qT?lVocW^1|tb^O8ZI*tT+}$eO1X@rcP&~aq^6o
zJ}RK4MFDSvI39H&B*OD;e6fn&6KINO;z7A9R+nmm37B51(Ukj+C;7F$hzP;w-+tGP
z%K+;8)4taBhnL`1g0nV1H=jA$&yqBBY?$~Py+ovm&GL*8SLLcx>iTTkdV3E`NAl9@
z%t1YzFOcSqyMsJ+-E~mpIsTQs89W3wFmoruw`7um_FLeqeyJV*ul8ML>Z_S8Lt>-s
znaaK-?2!7fH86bDO>HIW>#10|zl`f`1+a9{EDro2BAWE*#z1S7)*O{vcv41lLI9Iz
z=Rh<G$sNZ&xg8OC`MI8gq!GXg#W3g50MGrVCS1|5mhRd5>J+8ItBjd@YcKc_;vf>Q
z-L?9Gurnj0WXf9I4Rw}`IgriseJrUbU6B9Z)!Ww1L6e~)9JedthrW}O4$#>}M-O4z
ztFAA?pMBL3ddR$u0?J35<Zsw5HvxC+SK0PP|38p7Fbmbe*=V<o1kZGI$l*<u&oxS!
zAD8FR8)xK9d@(>4cT{;rQCr5jex3=)opINy-*jp95#c2$w+lJcHM8Plb(qy-ofIG^
z$Zb|XsEy$jI2I#-x#(=!DAC)>f9F^+);}5R23gyr$I%KK-Db#Zz|bZe3oPlN9z(b&
z)}|bqQ^R^UmW0y(enU-$sT-pN0)=H8Y~QY-ybpyeRHmX?PfPGu3sg_6lS5<q-H^^Q
zac#&v0OTNi-9so*-Rq&_K^BqW5hVBq6e_(KgZF){T1nISGU_m2(cv?MKI%5)yx6AL
z7xCCHe3JFa;;-19_Dk6NS3q_65ilME#u43Qd1_i|bVqyZ&!}RH1mwZ3tBwS^YIJYp
z^>WQ<4~03{7n#G_3=jiL8D<4yDE2Br8;`OV^RVi9wSFM4Yv9;C0;WLQ-Z&dLPo_Lc
zM~>CnK7y|jvizC8hlt!*MbV5hX~kH!CaRFTfx`!kBZ^;s?ryv#nEE9;!fe1aXdr4g
zwt{7-$>A|cFvb^{cB^kHU~?Z)GIK#qU<4?3w*!LznQFuT#F#4s>;jCq-C`hMjCG#p
z-g+ffNENCHW$_&up>sEw*+J6@O1-~Q92|_7tRlA`_rzoW=ick<c9kMv`^=Ad<rtjm
z-`;jQNm|zTP|YcIv}e4_#bC215m2!CiBjH-$?xNh8C*okU~~0$$KJ&1PFz)~nxm+0
zttX&YrJloqrcK`-$0R25!oWKxeobacx_V$J0>Gg`exC_;F^>#m%x(j-gi-5X>Y5^F
zT%sL>DR6vLQCtC9XMezcifAv)7H`)?>b;8NopPuuOI;-SXp9c+qB5M(-%4ALOt&QP
zi(X_-@a!y#0bm8$i}{@^RvTLr&8q%MaWCt{j6y6$XUMx1E=cR*QlzoUf-Vh<1L+t8
z6-&sVKNV>p%*C&Cslr_Jje44MjY*DCQv%HB0J1ypb^%DJ#%GM4>hcCOEH4xu?BTE@
zZ}kkHcAWDi$=^6BL=>9r+wy00eLQpc2e4&eVQ6Z$f*4@}n*D0E(4XiC8mNp)j*Rk^
ziiQo`Htp(e`MPLTeteshCp!=Z*^y5$`$iU9xV#MVNgAL=^YWi5+`H|imG{z%y|0E?
zN=p|uQJVmXv;-w&INn9ylULB&Z-M{m#q*t~N_DKeY~z`MRy{-g0%}I!97M=h*cyV!
zkM01Pv`9d6I2T~FrM5DxdbXt6wK$6p@U4PBe`t+#;@t1UFX$<=U~`_B|9jH9If=<q
z<o0215@W+9Ks)}evmZn;0_)Hea~J~ftqOacr3Lt{W{gIsk2jZ;#K&Rmvrjsrb5_sI
zeC^Q3Oi47qJ_28$f>}NH$9f_lIHXhtjeD!a4~$7H$yD;|$0h$E&AKoxO})W=DDJlU
z_eBGyH~^V$ZQ(8ZjsEY`AEiAc7A&v$9v9tQ58yZ~;#@85P2k)OHf0&+wE>#L$YU~)
zck=3M6M}Otk9CBvj}0q9$PS5)!754e-$Q)RZ>*j3r9AWj6SdcT*A&#df63$|arFy}
zPTjyQz2dSecNsE+lsOj5vQ#u&(q{&zr_0?GvY9@Xtm#LeQHS!6dtLgEgUV2q&Kn~Y
zRtAev9XQ7%P>d;banEt$x#|U4zLL`MzszSB(Qp&(07I^qI#BYmM&CB@Y7mnTbGWC#
zxnvUM2~ZA{iQ#ZNfWR@E0WUJf8(Z@dfu4pfFq)a&3_00x8kCn@NM9^9cjc>@{6=jS
zO)fTV68*D;#}JynNc)sxim`tCvO3n(M+9>y)lMm){*U6@gHR*TyLW5@rGot~LySkD
zy1a|r;Q|L?`QL`sdEv~lJb!Z+s4+j!_IErLINJkTO1~pf%{)RM9OOBkb*u_bHz?m_
z6E36oOvaX3(vrm<mBO@RfWG~<Xyy+shZzmf9}wrY$#tnnYZRvL$xR{>3Sf9r-W$XW
znHc*MIxSB7-Ote1*&pZ2kft1Z4!{IgagEVMkay{(^^l|D`E(JsV5moT&hhz4Wa$<9
z)4oGk8@1tH9_*DX;Np2eBbo@)9!))V#S=_CKag2F+ojEFGnqha9oO|tDVPZ}BGd>J
z#ME#i)jp)yV8J*QJ9c{BTbOT!TU$W<q|57}olpnaw@mZN9C?JW=q<CjfAAik>FXIA
zp@Bj|?C@9>@AP4KI$^k@y)V)=SXH;YNMD-T;d{SJ^e@-<s;P0-S7}6J2~6y$j~^H$
z@}7JsI1WYT43PnLWWy|isyQI3-Edru<{L{Hy~3L0$X0Ux1nGTk<Q875L}rgK7T+5)
z=fK6<EBp1`Fk-7OFc$YIjFbj+f9{EAIWMZlEeCpjW1jq3o$8z5s|(S`Q7y5-2U+aL
zSx>ddc5sj7L8UMAGb2)ys_4~dghw#ey6h{XOgjljliNK*V|Qj~Q;4f)@yEjxyE?=!
z?YdFBfeQuPRH2ARskcbl7b=OPx+h)J#$W>XAl}2|<L=t#`*#^6kr`h1w0WVgz9_D|
zGLy2=pliR5FULbY=TF$iQsi%cA0?@OlMs_xf`h<Y9r{%UkOIQdShP5Q4tiJ(C2Y?r
zULG1t-UbC)k?uzq|51U2PycaNN;QoJz@_<pBz-sH%G)>%Lmdl^o<EGaVKi#@V}}-8
ziA?Bm2?HOidR~Le6!4IW$^K_0PTe#hl+$pbwaWDJ-w9C2BW4?-q3$}~?Eqc5a@ig(
z)qy(vTg{t{he05ZN7hx%>E~*3)`LG!)u->n&*b3`1;w<_w_>f&ok#ra)A}vsQcy7n
zSQW~!J2=<g-RuqFk|DWJBFcZ83-o`}KFm}mg}GUlaFnOrYx@HYH8;w<(D6RoF&{!X
zXV|G=IU)&@kK_>Ub#5+K@q&)V5|7D@I|h(NT+7FAa*lcw5>Dx{zDzG4ysT)Y$>Ghz
zb*K*&7qwp(?ca^V(M32Hr`b^WN>988iis*w3IIUWM(xA6=Hx3l;s4rs{MCR|)=Rq2
z;9brp<Sigg;_pE)w+RZ_lw7c-I-h}<B45%V9bmzFJ&*n8arC`(E^i+P1ms2Qw7e#M
z_<mu!+~=RtdWW58ZxOqhg2|OO2SU7~EHXYB{u?w~Qib`koP6<F2>V496}cNrS9@+h
ztz}-gyL1z=^3{40YX@3}ghXk&?EQp{*vPlW$&GPP0L|y99`7N{EWi!SA&X(2_A7o7
zGKNHT3`EL%R+iOLRtWF?Ugv_QPbGN%980oS^Mq{meOuf2^VDSem*ZPWo5E*zXDhX8
z^4Nf<n*Ek3y6O_X6didglXuJ%mW}-fB~GbfPAZC-1DBCiJ@siUMmr;aNReD?Qal}t
zcKMDHAEhskL$!<oL5D^J>Vc}Mit31lBi4dKobXS@!L=CttS03ZY21LB4~2lLNy*P4
zoYQ-W4T(Jn;v9lpp3R<E%Cw6YX{|wvIfh|5?1X1!!mQ);lIf?jyM?o3_};Elhn4F)
z{Xbs5Xg;x(9cgTSxH^_r7CZ}}9!q9<Zz`)F9miBG-vFlf@N`|E8<Mds(L$*uxrMtT
zd-r;?)9I4LXptjio&%3JyDnWDU^Mym!6r0H+RlnuPd##kVwYPnXeRp5<q?-7a}B(7
z0gtXiJ&HpZD#Us*)6sc%kmM_$F!4ZnN%DaKEN+=*wJ~|txD0EXF;SwTl87wo*oCOL
z;g3S|<?Kfy%q9Ycy@Pci>}8l`8YfiBJsTF8=nr2Sqo%ug5v_LZj#O@er5AaoxG2t+
zFXTE&`<#r4L26_i{9vJ!V$?New&kUmti2<kFCM8ix^e&xLbCDjOvXK?&iYsUwY>kV
z#plzMKt#aZfa0~Y$D21dj2(H-1)>EM&cU7t9f`>P=r143&K}k~`@s|pbW9rhCDb?8
zTBv~~(Y%c_&-zrL98bNE8iRFwbsU4X7oeUSqd`{?C%z0;tvfIa7<*FPs`+&U^NtK@
zK+<1j<Q3n?M#&eevC&wLl$bMLCTuJ?3Dz<4+{!-Tu%7vxkm>id2{LnDS6OdNVw#CS
zl^m1>kAv<5RI`8Ds-*rdkrnHYrRZ4sGZZxTi(l^2s1KB7==06N8TzlRlr9FhfoV+9
zDwO?RIeT;E+p*-7s)M8Y`GRWAPX`H}oSonY7}dp2WM63Je1?>fkhph`Hr-H_3sx+!
zzUmvc;vt2INPV6JaehIK)3$5dx}evXdw`R{bLs5}z^GE5w~@E2#K>!c`y$;1tRP+)
zkh@t!dBdu|so}O@P+_7vM=WIUS&PeMM{*`8yM(o|?;#Gor(T5w)-}~oMEp6(Qz6nB
zlIA{$pxC6PCk-GvX?4|wOF4%zVcY6-_Sb)a<XS6!n0h=ZVmS)&)6zrIQRSP`Wi0`e
z$6hEU+mcv(n4+5@UDrls?M{-UKbd-HSk#o7xp`pzr9c()DlFSRL&jtp%szqsUl$b&
zdIbKZ3V4+69&b?rD5|0K&LQ82(m|@`X0{>{#8Dg|Ys;^2-1vakBy@22=PFA%S8X-i
zvo^F${CQM;^q=A)baF{#mflo5(>Qo%3^Uqj$<xT)vs$^~%Q{tgQiiM&lyfl#XgnV3
zl*z>!p@K3R0m%JwJMjWg)+dteO&PG*Q#M5Qv^GNK^3R}4mR`!O<vATC0<FklPu(N>
zfH#d}b|Q#XG_g|~Yrp$Wzdo~^19V)mzDyI~W>oO6XX;&!PrJ3jRKx50l?1<<Bx40s
zQ7Px1gc7^!`atZ9n2`z-JN>s1o?;d4BnINI9~*WUnIvRGJ{r1a2;XuqPjK~pCObk8
z;&Ut<ojo{jS*`Z#9~Pg`yPKqj=CCA)zvzF$F*K!gby)@N+1afiL5snN)oG|Qw^cBE
z{x1MfK(D{-zv~}%z&vO#!ab7RHGKym1N}JWxcg$72v^AV0h+ykj>HlG+UIW6=Vo3Y
zEfsc?7rTVU#y{@6W@TV;?~Seb;;3AFqlGidJ;?aW&U3+!GYV{ON7Qr^J11HJ8-k4i
zlCu^3T>^yzGtvi4v$x#{)Ebs?xwR@p&#K4tTS@Eak}Q)}|GC%sF9Fv6B2lQ3RVa3%
zt6x|`q3zAO*S`{UeedA>)TYX~g&5X$f0e+A7=gQ1`#?pKsw+GEfAOoR_v?S`3#y0n
z!lJItKf?3J$>=&g(S=1SlQzIg(d{+AgX9S*G|<jsIeiqg5q0vt6RMbH2Kly<3U}8S
zk)x!vU>6|*7}%sOtXX<(c#d0JGwV`vZRjv4;y7Xy$oo}#P*SR%N|RUn+*UQ!uR(zs
z6#wO@VkDUD$i6?%X{!9Hz_PM<!8^j9ct3P|Iz9r^(hucl{V{%XE})zw1K<H0mGa!d
z1GLiz>gRyS+k@9DUhUBMet3~r&TTU}BB9+<DJp%|8@N|XO6iN#Ueo1-{50@=dP-i=
zD{OWRHO1wXtZpDnO<S1!bAw|U!gehJd!gmXR>V_qPu-4CrIBaxyil!m@}HKq1Mx4H
zC1sj^P2Vc)HX9o~DyyKbl@`O>c4(feun0~16WQW(E~X9}13xbqNvJN;bbQRf=LQn5
zn4HWHe^%1qoi&vaS#JU1*U)m95L86VO+DM4zCh}KDk{2|ZP}uI3C-$>3f}LSxxZ(O
z+u)a9(?4vw1H-I!zQ)x`y!AlBy{d!NU_uGpx58<j*-IPhI4w$B&qog5U8~2=3w?4s
zyAea0UJD~3^!|v4(2Q--VeO<Q1GOX(mjX>hl}GAduI|UON?n-*XVeLf68U9}NRkIJ
zb^YlXr`qNwM!gP@<T;Z$<0y86Iih)`3Bvd4z%zvszqw^G6=qb{tV08;2FN)6mSCvg
zCr+FKaB$Xbv2IkYgEaD)gsP<R4{iK-rb|ob%m%7AEQ|%njfYt?y8p6~vbmzOY9MD|
z=wlO%EcNL1!?i&R#Gc6^?(f==#D83|b07#o_%y5+89wupejnHC5`5{147lt>eYZ%<
zeIUW2w3PCtp{K@UbAy!nWh>wK*%3Rmy86~^0jo|w<E#NXT<O5b?9c%yH|~vI?#cN(
zmj-MXbJ#|M{LKqFU<~haG@K!#p!8%xWE`<7OM%O`4oL&n#;LuWXqb+636gn%nKUE+
z{Haci`-K?}k$&g3P^D#Q@a(Nv5^1Vm$vUnT0Vkz~N>|WCDyNN7t&!DTq_w+~?Yvu=
zcvMS*2vyU|y|aq@`WJr1f#1})E(<W^%te4$_D^fivit~f+BMkC?>ugia7{ve9mu!z
znv;dGMs+4DLib87glTOz_wh3nRLh?~(iBoU*Q=vAbS<+nVtRcRKB4ah!q5RbUgBez
z8{uOVHj#Ksvk?=sI|qOjW5e>5+^tG>R55F*){3iU+R>E(AnW{V(H^^9FKYf8=qSkR
z^qZTBoDK;Y>PxkgG9$?veasD`iJQ|u*!uV%HVK}lcRihEZfHU6y4`z!i}9lM9BsfG
zcll`}p%`nt<|eKF;_)kJR>UR7Xtko_E>6sj1U;b5JjW1*5dI3*-ajPS!fBbA4v3w!
zHWGQqHBXOnk&Org<tX1U1)P)dm_Kz_Ep@U$79RZHNc~k>j%t9$#<{?@L`f))i2|Wb
zU?%gQ_m!(85ROpTTc^g(_(;!p>*8uSEyyId15a&R{(0hP%T~I{*~U75F(7|~Gx*Hw
zv520&u5GnbM??=cT*ME-qhl>>h8;(_pi>+tH=Yklw4qes9lyP5;`%xCS><Ft$$u$>
z506CEMhYhu>5WyplYi+M&W8J%M@fpu<(FeNsKOf_-evo?pI|*W&5qNPVn`m-eYzZe
zpF|plB-QFgo$2tX;873V?avs2=Zq8k1MCFRYa=D7ZVb<C8RBt_Mtgcibo+;HAj+l2
z<4@s_y5q0b@DMS$IC1^x+(URvA;=CJ{Je+lm*>UP8=@=;S%aF-OTl=A(BY~wma?96
zZ91bo6o+i2mS<uN?9^cN%VT^D4rpK-eRpBo8Z6N#%)Qvpzg1<&la!H(KoNn*Ph9S}
zR_IL9+}oG@6%sLn)Q~MIU@bXh%gR%V;Nb;PN1M7ByE2oY+_Psb9eY4Jm+PU&K4wWH
z;xW}(U{4Z0HjLi|l?>y_BeN>4a-2pGRTolnZBn{8Roi|R;qD9j>YmAYv=q{<`VPkk
zyGkVDu?hVxr)N`A-`Ve>vKSt!>`VU1Lg_CldKm;yf`Ecu8`t`me~8y;-JA0RTnuoB
zkgQ~Y0u!+`JFM8*(e0O39`uRe9MNJ_`UoyJZVpQdDa(YL!`u^dWjPCw!Ov~gcZu1)
zT`g6*Xeu;53JE;79emUkCHiBKQE}x%7b*m`0l@@v##2UM_!C(U0kFh3&&|0zQ+Pu2
zM<F;n4KVF;_{<wUY)7@wk197IsAgqYEGuy$iGdri)7IxpjP$<_g}sHeKcQS=`bmQ|
z-+%fTn|V@Sc{*Qx&w(S0{FlIsNo8iUG^9R8DSka}By?G~bj6q6jF!;Fr1ahJzb_hQ
z`O>P*KmN#_iBdkTY*?_n7BM^d3q*9ydJRKNfgclNNt5V;kP8&<56}tT>lC0vK3#YG
zMYmx0lpki6Ul6yB9z~fuW-{Ok2n$1nR)%THv;wc1O;d~z0jpou`hOUDrM)VAPUUAh
zZB2_u0NoPOoF;UT!^>juS^I48G$}SqDG}20aMy!B05hrJh5WUyZur{oo4D3>$xFA^
zC6NC|yk8TxgRa=y%Gd(Zs$3w{f+Nr#i~Q#6Zj}e(qY{FoK=qhqVo-1N!~a*7<KcxJ
zUmE#v=QDzkk0h4@2F1mz@BZZp;Gvq^XTCVNdT;eL2)zTaH~r*)6g_k!S8n5m$KYW6
zQLi|#ITqQOY1Df$X(<)yGKU?D_(^lZ4Pt(a`77?5_kFtC^{wi)eFMpNn@MPF^=nbc
za-nz-ohI2n?8RG*%@)q+R)oP<$=#y3){p^nBo+zK4MeU+Np-VaUZcM5dx1U>9F!1y
zfcwcWiX^pdUFlbH7nQ(r@v%{Ed*on{5vFFR<&bB4#`?FbCSnYz6ER%~Yqh2Fj97ak
zdhp}wK(G?OP;JBIJP3vKnKRztBuk{g;??R-1}!&sX%D70Rle>)yvuZ+R;7K?pj6qE
zxPYx-D4z;I9KQ}5UE+pYyXn;$!T=E}!6GC;tW#OO;s(1Rpvr<!jqL$hXJ{x<wFq+H
zGi1@i9^WmS#nXm)cFlD(KgDXxnuIsf@D<=f?(R93Xj1G{<hllg;<vl4uwf)Xm#pM*
zr%-db^h}&8FP%BgI7YPlqtqPQX=||x<pqx!dJ0=1t04fXWEf~+_F^)L#xYzdE8UFj
zKx_)Z?&g0W4Wopi^2nbU2&bw+=RR-gZW*yz=Rq;O3jhO*08zuGPECAdEZ;^aYm2^_
z(i+qyR^rz>S!rwSu$~yF;;LhqbR3zGV>1gEM3{MSt-+G`rqPa5N<k}d+j>Ph3M;kh
z8L3)0Rx&RWY*m=}l;aGM{;VCQIe1MPGez^`>y^J-(1a%J4<MQf`STo8Ok_q<io5$K
z(jQymN;oOx?dKMyp+fc{2gD;auZd(>7|rvXQCN9mw)*{q1w7wS;oU;sF^eSwNn`Rd
zOz9bBJvdyAK`zP)sxSPuY*3WtPujt0{4YN_Q6G!k4<vB&t<}5JT#*OKI31At*40P6
z_!|OOmN;EeUM*91@dgr(N~6TY4$%s2ub3VS6wqGu*y~J{|EUOw&9oD9>96XKgyQTk
zC!o2ZM)?$MR@)`}Jp|noe<I9_&fG~i@}Y<nH*uVtNE0>d)z{9L@dtm@M1n!vy|2yA
zYp7^0)h@FFVf(t3d0+jaS&vLMn5W*sB*HaVXRk07h<lo<j!jZt`;)vT?|@s+%Xts5
z)tmcD;tizl{LxK6@)0shozOoIt+}|gXEt2G%K&WdrjMvs7fG&#MFL}KdC)c$DhO=L
z<7(Euz4lV~5(9f61vJ+9Q-Rf>xz*b@xlrGLkk6xdytge6N4u|ZxLYk$ZBEVANzTn!
zG;x=ua(04#r@9<*LqNN6Ees~BdmTIS)0;RnY*0+xfL-|MJ5+E2Kvc`kNP_Z-@0^MD
zl|b2HW{Lq%+Vz1Umo38(2EMEcrW2ftXvz5|v8t|F)Z6s_f^kKofIAt+4mdZr@&~|5
zWX;5MGEfxPEqpFv{*eJh1UwU>Bd_Wqr$ELwawT|4duY6Td*>yw9V#Ke(Op*QqRXge
zdvt%NW%9b+r=nU;^x%*3d>|Vk&wOE~=)hjz7Pg;ibiO7z00tQMXzd`nWjG7rzCoP*
zRo+2su3sTkv0_4!gHxeab64{g(AeQ$@dk21C2*_7i7s<<vS!3yWJMT5?S0rH{_y}_
zaiz1PLHW9SRP(<^>9}ku?A=mxq=9momvdkVP^$sZjs(4TRDaPWly<<-eIMU;3}yQ>
zqT?A?U8#|jA6DKtJTLYJ@6PAHq-EOq8s83E-`h6S9Cy!%oC8Le(ATJqE4hP&>w5;u
z*;Q#$uHX*lSWzurWNtYEhLf(i)98l^dA1VT9pRXUyy}Y+5Nkh;4PjtsC-~t>Rcp)s
zo7myzJ|9#Rclbvu$T_f7v%E8y;L4NZe+7^J3AWs~FsA(2EHz3tvTplUY#tMlF<Hx2
z0}^@6c5;RU0YPHg1nyc(u4u3QpULqad_3sX3k7$8J<YX_oDL^6t1boN)oTSzd`YFc
zp`bEs>v9_@pu`=f$rP=@uvKn7?o?!&qXg9@K`)A5IOsYky^t&$!Z{I_DFSeyOR@Ya
zI$f$lfm9*gY>tvM4gH`ib{{KsG!LJWLim|QJwEA*8{Do*0p1Mae5i4Mmcp-junEJr
z^TR*G<RVi9WMvJ?;YUPyj3^HeYRDW;59ykBDT8Q}wwkWx#!!mt-Xew)P0W&GHh)gK
z)jt&33k|R<w(-m(R{r1@r{?Sqr^3#mGEhMB0^30sL6a`3p-89ewUsar5hayDh7AVq
z8qc*m^Jl(4t@~g=F<Gzky=%<~3u&7lW1&Cl1ibh4k{tkp?H&^rVHAx50`v5oz9Zfj
z;+8inG5~!N^h6BO0epfS&|@A)p!hs@LZk?}3P-(_WC%7YYy1|9T24+6w?Xn|=6D>r
z>xt^tx6LAU*DO}|Pr)f#NmKXWmAndLvcV2jwQR~Ckj)<3X0W<(F{TPw$vS&!X&=w9
zVm%=?bZ-1uu-RAhL|4<#b#8tKv2^O-;gW5crmsYFlWcjYzbk)qXMV2d<;$;RL)4|P
z!zjTTY$S-jig*21Ktuyr4oTlOi{-Tx?)nkGQWEgqy4iEk_H?B@0W}~m<(_6A=Oz-^
zJHzNQ?=g_;v+O#xF+&K3N8f?0-!5M)(d*qJ6>v3`UbGj^aqV752U`Jalxd{6=vrpW
z*Wu5*{>hY(Jn0i{cYRZD{UbkI+ev35Z`9ErV%J6m&@U7*uh#-9DGs&&<BxPrG%&yx
zi$U$I@RHO$TRq@g?zQrW*}(>o*{wat&f61#E_JX812axt9tV7Bg<yAqgInWPbo?Mv
z;3lpI=cmICalzV&3Y0*D;kquC-IBP>`eW*O%)j`(K5Yqz(|)LXTJa#lIdejMphOJ9
z0~Lay{nrKPhZ{nKc_71&KGxxgjKZLxo!y))$E32LUy}If@7YBIBdrhczpT1MM1CRo
z0Fz;pKoShB@hm}$w<WZm1okbhDrrlr6s(YzR^_4NETcN&{zP`d4bAh>TB@z<Fv%zl
zv-h6830wYbp6@}uR7%`;*IP1Pc8Qi#dZ+RdF*xd-m<|wVG)xUGXN6GC*L5S5l4wLn
z@5ww($lNF$=0nV??@zpgZs(uELH({Vbpr}5k%}O@P>~@q6%2pb_yEbM>=}Ssb0@Q{
zEsASIAs7NdZ|hU7AR}vzeZk1D+l`d8V5?#SbnDZ-L?X;tj+{LFj4f>cW(Pd(hjPAT
zQ9>>PyWT{!69g%)YE;c`Q7%`SK6^85=zG08a1*_&IDa*O`C!IcXEGkOSo!(^+{X`t
zpXZwFuAb9g-Rlc{flC<vjCJ5G+chg|WYWwnO&{}c4^oEj5w7_c=*$=PVZ@X3cp{|o
zD0awAYjnOI^8JXUvfv#Ko<5a=T-#Vq71)ENn<|Z<r$k@8KY|W}IUtf53CV_<ySDmm
zv#)r<N&BD0G=NBYe^04NxDgTv&gvXfC(u^dfd@0Rno`y?=z9$cG)lj=12>7S5)qcR
zFLIp)A}%+MTDf3G4Q`6Ba}u-gg6!?a@*liWHP(L{7Arky8!dR{&*KINwtb@Rc_RSq
zZ$o*!Wfc0el5dw?=^ZVaKk9pO+gz5Wu9lT~x<k|wK`L>RpMM0^WH$ey3sQS&C;l;f
zu5%K-rj1X6AZ-6fa;1E>`OFRfB_fobc(RONaQPbMJ@2GECqR5umpxN3B&L)Cmwo68
z04&Q(EB4oc#`bZjINvJB%r)5S=Hvz$(2P*__R0?hfrOX~=|6*93s=Q!{pMFdP`=(-
zauEbCxaBu=x8v=f*gP(o5=C;>JR><zuHzf!{&!0^ZhMcZ3zr+!JfN*P$Mj*(uv5%7
z6-M2=n|8=AEtZzmdO|UwGm!pgpu&d?-|HyN=ui@lRn5}yR%AZi2_N{NJVbDJ+xv^s
zDhlcma?Bb5sm?Fbm-hn^FU9`;RUjjiV$8Bmyk?^~MUb9JCvG$0WlAo4?9-nPS78j<
z`!2wS;0vSZnN7-vVceiU;H^iLKhC9Ob<h*MaF|PjVzJAu2cyr3tp2pA^uW|>;73iU
zr`~F?W}`-1qFr}lQtn0*pKb0hue;BP#W{>yUbiswrpj;cSqWk@G~JP5%hGJ!ZREPk
z4alZv^5J%-GqVEKX}B!P<{ZEapsQ%+=8<Af9gCn)mz++(^hE6{CgzKu>JBKgM>wH*
zz0i+l2(P<Y$pdOIKAETH_f*{RV>$){5``OUy10K@R<w=*!?Xnnysmb!^_9l{RH$i#
z_3^O79Hth0L_2^{B{-Zm<fb|FqpMS=LaL!&51B6qa{NOavvc{nB!L!0`F}+XovLCr
zjRL<kTr@{M?YI8Gg(xML3|M?*ZY`5zfZpi#-=`Qt-F>j6mO{j^(p>}5Kl6bSP(heA
z?WUTO%=V$KXy#i=9pPh^l|rygaD6a{j;R}CE-mYO3^pitra0%BgD#ZXYOmJoJ<vy{
z`ejH%V#(=3MUac<flGI@Cb%f^;m_8{2w3hgRwm&JmyZSC9{266M?>4=w4*a&$##2U
zun>q_caWg1kieV}VWJaUtSXo|?0SY~>aB8fVc&p!f|sZHf@CW`8Q;Bwn4`WmWd1?H
zBrLK0N;pd8n^j@9?S^SLp3M`(Yptm*S-67&t|aysZf}+iD9Jlfh*@(K379f^44W5F
z`nb@B`^rc1bEjMB^irUhz<@~{Y1sk*Y^HGseTmYtWF8FrkG7^UL`(``EnG&DpniEU
zV~=H-f*eH<)TGqT)*ZmrcaFS(2={;=IC-Tr(yb%-yr-8a3@J5bxw~m}LjrC;OQ`-c
z%xzS|ozL#N)3vYnHId>%G`H2#$Lq)xML*f&#ojY}#grd3SCdJXu32C=Dm!YD-YjD+
zMNKSu8Bq=AYxRfCH`Lh^{Cy6Di}I?z{EZ^^an34ptf|%WOkIvR&ir2{@VTGZV!DtE
ze(oNQfHQf%!x+W_;NX?HZwNLUKLs|nuJabEKxu}hFoEXUV^(1+dQwiQc6=)|i^dt(
z4B}XPUmuto90oQQBp19_8p=}}A&WWCxU}ohO|g&o9|2*(T$_(z5GAGOzIhu8>*&aL
zN^}C9)ggTZEk`83UVkV--RZAG$`!}Tt=Nv8Yk)W5vV=L9+UL3)lkoq)M2U6!K*cGm
zRlJHi<P0TClyF;9qFzG%s<QZ`e?{@hzJ3r3v8jy5Kmw`N9o&Xup;i3w!G3g7jsmH7
z4!DunK2fQ)xf(DKUEaZkgPF&vlyHhIX->85s5~D;dcHVfd-~&VKmuA-_PO)>o6YT5
z&hI+{&T+ZaRcV7N-=W|oNUhWXG!D(Xr1!Qvl@c}kVKZ*mw72u8<2wXJ#2~@!2*Fsg
zepb0QCObwWh%aD{!Fdrn8wA9SC0P_kxQ%Fn*?kyF&V!fFp@`VPfCYR{#|5v<b8ga;
z_|&WNwCSYy|Ai|zOk{Z<1vBnJ8|xB)3)9u{#~LsVNGc4PI2EF8_tGwr1IDBnz=Qw-
z=ucebUpVJiHNqSwRGd1HcS+uVx-OtfqS18(IQbs4OG=b)v|s#s8+xjB^?*2=#0(30
z2w2!1Udr=mgwwkk%`dV}m-!{6?IFjwYst23uG#KH0zK~x8PiipKD}!{wgPe~M-8Lp
zJg4=E??8A)j+i`XB0)gZz}Sy%479AtZGKsGC;wSo#=&+6c6qo_;78=;KNEDKB!!QV
z|3}sYyNN};+Uja7(I`k_(NZpgd{*E}msq0^RlI5vmXXnj|3y=0{v4`PH5Zahf)!o)
z<>p%G=3xgstVg{#GtH)W8@;LGi7y)<cspThF^49|`5%@Yb;2I)6$_=|eRbw5qGW%i
zauOXi@j4)ZnANHppSuqpCK~DtW3*Oo3w^bf-4uch^y)(SjWP(N*Ve+Oe4rVm-XZbn
zhP1DqhQ2;bSg*=)HCY2{mA$!;z{bg?gV58;9i^R8K^FM0fZJ>a%@Wm~;6d&DN|gQQ
zUy!rId#Bz|3`IZRSeU?FsDF9=i7NzIXE5+xwsEf#5eWc6whp;4w_Vml2U{#XL#V%7
zfR>x3Augln)K%}d9~@)@I)BoF0lz=+-D?%JoEooZ`UfA2$oE6IGX<36<&)Z(U@b^H
zZGp+=F$@AQ4!F{iE9H!o*?9*{f9Wu-v8N?2nfW6{fLxkW%t{Prnz@hU9KESApCC`B
zvA^uBZ(-N}G|6*b^|93(ZQS5bhwx}~KY#yG$D*_O<V>?;bnY6?D50oi;g!xf=`Yy*
z$AHsBX?@q{1)NT(xQ@J|7(^IpJ#|yr$XlZpyU~Bri3`V-(<A?7S{lMeif*=w!>pAl
z?_1=Oa$s*ffi+&^*Lu1A?-$922=Voq{Dhn)_hmO62Kv(@#_$Rq4!AnsuJ0Zk5W{L@
zL}c?oC=SaU7jNbIsG|t%{^@mWJa@CndUP5K&Qq%@XI@Y!t#K*ZT_Mv|zf69Yxy}*G
zOdvpE9=vjUhy?80j=>uavOg(R**CD&w4RmRIKYs|R6DJ`vgs9-T_Q2)pwAE;Uu6H$
zCmOi{Rg$j^*(4mi)Lb&lTCwK7Dfko1OSOeEM!qw?v!)<@+``PZJQEIlE7r#!3iy^(
z7eJr?i#Yk;FPdR<-`;$+jpdbB<BZ7$8CvgX{_53ffv!vu!hK&Ty4vrX6x?Y6ECU1~
zO#lZiD1tP@{Kai1<=$!_dy2~)F^9tz0EiK-Ou0XD?0B3BoC`(IGmp!*a~9`fk*4M)
zK$hxu@|jhA3h;FjJ2UhbFJKlkvui^OqY6}=CA6q>MLM#7d)iSI4lok1@;z55Bc<PV
z3D&&SQ4)IIK3hac{icKtx|iu(9K8OPWJWT%DG+Z8+&N4!TioU#s{c<bS?J?$R39Vk
z{12ZJA|jTyNMdh4lI<8ENJnSkb~_%yP@7|AzTPLLOzL~>o(H`I4`k3a?1}N&8?rH`
zgiuY2pWs>I4M0uXkS$6YNT1tdq{?BYcKGOMYAdC|iZ<BE-T4V0G!+wh&X~nuqPFIk
zhnozC7(jQ5M{&~R*z}&g5a@pfVLRQNNZ-%&FIqb=7)AP9rN|2kpIOH|_CGvJ@i7V)
zw4&&Krbm#l;eX~sd$BYq2~{93t9xwPMW_nxD+U>c0IDEfGjC-!`tLb4y^gB6(*1ja
zu^dIx2tXAF7Y)^A7LYh^zfG!@%=h<y<x*Z;GP32-CcGG}^YoLbp>J6y6m$D7#Xy(8
z?i)F$_eGqvDVdUl{)(OOt2|fiH`nRDegAOtDAuD?Wo*RMV{cqgr-Du*zgwpW*WVU@
zWlA9UETX`Hw0MPz!N#$-CQ-|GKiZcJ%2f;G<gmX>OzzFik-6px%yT6{<qw6`+8l(u
zCP>nB;%JulF{N(sjHLSAN&x`ZvLUcBo3sXX3|KN0d0zDb@Yf3N1iO<x$^=Y*5TN;4
z(>Z+*v?raf5(oPC3e-9)8Dgk^a=|!mxdKHodqQ4EHGyy%UHxf30a8ZVW15D1E~B^)
zxN|++(1zf54vSE#Cyk^!$$vz=i@)oPU(DLeGa9^{oA|oY3{c(2TN-iT9h3sSyaFAF
zwwkJ22DC3fobmkTxYx-twseo(nJ@oysSr*8pwa^}MTA8IgwFWOz?Jryy!p5PXp4q^
z>qQ!GDqj?)9&NK!U`kN@>AR*oWn5C08ZSVq#yQ*~Q_$7I?l#TVIx#;8{RwSdi6D|K
zR0m0klpw{OmPMjd;8v24Al=J5_C<)IjD8ptH7)F1$lrtNa;!64F){u5SJq}q<OdKE
zUN*h_#>Hyv9E0;vN+utmaQ6IUgI}A+miCu6`mf6%&n{jg<cUdcyn?eA(m~SEvv!CZ
zKJvqth)OH6Elgof?)vIKSaM%Yo(s<w$Rwp4q-&IhF1R%ZMAZu<g`ayJ>4m0ncQ(>{
zveUw$u2?*1aCb8te>!l#W#jb(UG)G$_j@#CL$6mrh+BpVmJLrHSAZAr_}?j*gqz`R
z8Qm6Y+=43H+G1KEIphdy_4KuC6cSq9mg)sZEy@W}$f<2K`4QQJaW4C3Q+mrnh88Tw
zb0K1*T@#FCy161D_tTC+fpaYW59VWt__rztA0NK(wzE}k$|?oQfTJu*F<d_#!QkCD
z=7p{5s-$h$k)#{JH5wYOG#zbu=T6Kkya$)BW2W%kYF-Sb2CGm9?oF?MoXj0=Sth&>
ziuK9|hW4U@=DFm&z6RH*G=l`L+yF7=fiI)WQ{X`PL4)OI0(e`TI5t(aGJ%ZbmHA8-
z<-)51O>u7c+i`_HAY#`fiSn%-BDQZY55{GzhM8HC3~4D#Ox*_Vn>ACJz)<Yuy0ZFN
zp@0OU5Mo1ekzpr8GJobEx03=>8J~s_ot+5d7x4eGh_GPl60Nwc-WcUi<MRy}Y9d2n
z5!tf3KIK_&W?e})UhhXc&4==kiVgX)*FC>fm@QB&DSj`PH+++;+bX3nR>RRv0ceoc
z(2UAs+uPDm1<;O|8#H7LV_Q3<qd7>TBIr-0`>jL0#Ze5xvbg2{kT%1f!YOQLGA}Ja
z!a9r&Yi&(Wvk^=YW{<R8qPwQg#xLo{C9d4W+~XUUlwZpHg?T%ioN~D1{-ki@l-70|
zBhdU&FGK<w@F06wT02RCdnh-7ldkKZ8~Y5Fg)eIFnuglK$m=#poQ%&(u4G!f+o`l1
z<Gq=f)=y|5bNqOlJqVA#aQ9kA^RIkvJINOl!?T}4(le3!7ZRY8{*~5DNwDX5F!qcs
za73j=oP8@8>#4lq$+E!Zux9JwfupBbqtHA+@%7pdW3wSm7_(S{a}LX5Cyjf4rCf_M
zb3gFoO``%Xx6K{<0-Jw7HzqC+od1(O>-Af<G{Kj~*Mc=TTrQ&nYC#dGJ+{fR2<{(M
zxGj8K9L;3*@Rk*MPP$x!B2RUHj(SupizR}ypVt;aC>zMp(2qo7l~`azzwsCptO)IM
zDvJRi+kX#53T_>~@8I8^v_<jQAs6-(7`6Kc9hRB0m{GGDUgKc{$5osJ)sWmPBMn~D
z%{7J0L}x(cgW>7&Pzw*!+&^8q8FkE#`xWao^r*peKPV~NdUE2i0XB5`%mO7LDIQyO
zLHSLSHOXXu5bX$734OV9<g&V}x7n^fIo$mFTs)nhZOErlCn-NnR6NG&H131iwo@^2
zM!9J|t6q;c2@QUUHy-Ut$~*8hd{uBkI7>tgEh>r`Pb-+a6JrmU-}V)4rr3k|8%ksj
zo7mv-%v0zfXJO#=uZ79eqAw#-DIx^kJ#eIm@KDlIYy?FU5m$?yP-U*GKA!31U2r*O
zfov^8^gJ~78#PfFq5kE(moN{WQ3R6)JK?uh#%?F?{62EWr99jq(brQo1ZnVJH&GiW
z7!7o|g8x-f%_km|*mcPSutpm`J`+!HgZRq%293y=(S6>I43*mOQfQRRwd_Py)Ua;-
z00dof@@Z0kTy>2}P-h$=9KLBH31p#+bnl#b-gA^cDssdu;rzC>)Aca)Qvl6<i_018
zlypo&Icu=zS04#8q!-&GtN9&b<{$W8Te+SWN3B~x^K+_j?1BZuKVE-8GYtxp{v~>L
zt7>AQYIM|v&qIy>Mr#5=v(lNcmU)^Dso*71doaYhT@<3C#EgLR0i#wrwARKTVb&b#
zSXL~Ln(O=|Y#nD@6t!|<Oo`RU);JF|GnN0*4i&i6nki|De{VZ*_DmK&v*ObRXwZx+
z!s&kzZX${F6f226E<sXrFj+3R-UR+KDcIdG=j`Ty6E)ozgrnc{Lc|tqs*LkXfsqcM
z3bzrO2LcXKnV#ic`yFI$V^iTX_}G#AWjq_n-YSaNV7q6d#uBb?NPIdFyInJijdsL%
zyNR->6ef9I0B>m%Ct36ao#&(_sAcZ>-yOTAM>EelW3ikRHwfdQx0<Lhk1{$X$c|N;
z<zsY|+2ts1Bx=eRP+z4)F>g{Fk38`cop9-S<!UFsnuz=>YeCpgd4qD)&ET9`RVCnF
zuy_5N^fAO|fJT?VlLjuT=jc8esp|>ur)(lz(bKQ4_^TV1i&@4p^Htms+22s%m>lLP
zK&JG?Pjn3O2f5@Z3r76xp7{&W$zZDc03r(JOV_U!5Pt)R#3g}Q$nt|-hm8`k1micf
zA?1=VOBpFJ7ARe|FWD-z5`;O^03w>?lilE8X1ta+kmj3QLW7R`pMzOSuwq~a!;x1{
z%0;kh=smYmdje?z77P_7s3KBKkxt~_n2{k_C|m_O!(3ym$q)mi{9pko7K+O%hD#S!
zMp>|L#sGw}e7PKNOx7rw0lXjU0x>f;r@`Lj=1=s0c!{7j?$MA7$HeqZsEooBe}NhA
zEfd-X3r_d{lb+EKOPGb*-O^%54Dy<YBva#Oa-gpTb@p)nbAacv09|WVQft&tyBvOh
z6=iw+NUEL)*oVBeayo!7fu7e}mpZ<T9Oqk(B_^fl>)4(YOLP7%R>B!Jpvo8UjKQP7
z>fy-o-vb*25#w=(lH*o1J*7Slz1y>MI82t&y3;5>5U^1?;vcM{t4LoxNWhZ$_ITQA
zp)Xp{{6kl&Co2W+JREi1QRyCs1H%^HGf4`5&|1Euc|1Oiq5mslzff<*i^0se!fl!!
zD#Hx9qFZFgE<`EX)S#`q!6swe6j+5pT!wDAKEcrDNkUUOw#-ZkKDC;P8ziocg0s=M
zKDR!0b*gZR;hWn67gf5O!%6vH1$~R|8mdH$aF*na>|B6Mm9^$PP;;B4+IY(%BPcD8
zNTQRwznV|l5T%3IgCSKWb*toZ{8cQM_t&#0D5MIHua1KN@{Dalew>$9UOMWlGi~eo
zpXE&;2ZbW=Uv755*-E>o<|^ps^h-r6{lH%?i^{RCuAnq*me#?G|Kc_t5p}kZQf>hC
zJH3Viq_)ZG`#gSgLWsa0nujQ23Y<k%*(UL`&DMp`%Js5OiVKG{H+74`s0HGl%09?Z
z+m@kwauqa{+OBP?*D-)K@j{kWw3a-C3nS5>-{62(C31RzX}(sGj7t3CWMfw`O92<V
zd;{xdVW%F$i*<^5$QTj3uH9Q%e$TlEg+{X}LK^N?!#>8m_x@ljcG1U}liffZt{%y#
zV}$gd&fl;$EajlFU$jY=B>?<mKzWdOWQ{RP4sd^hWAf-+@7*xr)D=#k?Dqzih^(|n
ztyVUhNM}@K0dS9wjg<GgU1L!R6C#Luhv{mYt|WjcyFT`E*zpyAiM#A3Jn^62Ayc55
z(G{`CLIUy}r4>UZo8LB`E8qiyBq<=J27KD!>)orMo8-(JC^Lc#IupglZHSTwj}TvF
zB`CzSRW5be=^eDQK#GsXe7Mva2d@_2Fs+5r56t;Qi_y4VODN3C-RpE6MuzE_Q}rPK
z0lnM*g(&Q2J$^(qo#acK>5wqT60a3ps@URZ=flL&1J|;vmjGLZmdb_!9qgCsrgG92
zJ#b&s;S-aRjLg@L90k)=_@osy1%@D%g1eNubrev+;3u5e6Okk^Zsd(#1om|rxlLf1
z&$bdl3Ju{NMlyi&FJF<Q{@!Wk0_*ZE#^pr=f8flk>j&WpZUyNes15;~-8G<*wlR-R
zWQF4j!l_(+{+;&~P5)M$J12-|cjPq#WpIcR3$}i0!?00Yrt?`MNif%m4z%6UGa76s
za;NlJw}4VxYj%)7wy`|?Y}hk4uYnG|6tO<#Lvx_mvGhrOqo*wSrH>9P8@B=t4?Mog
zbBsee!2cN<`Avfdn=FGxW?rU%*;;~yrE?!i)1iF_h%er{qBVpflL=a$o*w#I?hLQR
zFRlo7$|IrC%^*25bU3CC&N<p7sAw+UT?w|1q@mPGvV;D_^&bS5jNdCgV(~YDCfjS}
zDGUT!e}T>$+M}1Hb5v$Njc;v&+(Ta%Ws4J&sZV%A8X21&4*+xymmG~~d^}81+vPr~
za`6|qpUth)htWPk&^ensL5pgd{&aoW2s~pJ?*T4)WG)!&BiHM;XvlrB*B%eR58<oO
zIg+}<9MwHVukKDQo*t*ZzHuvAaE5>v2A+x6!c3AE*1#eqqFem0@kKkO`c-P}QfF$c
zUKI0qr>!D`x0n557;Oq_(MG?u?nT+II;(sI*&*P@<DeiWW{xYf00!&Q$mELepc7D^
zPjvV%E(1l^_M^i#qf!HoF=K?n#}~NQ5<@eK3J_;4UVcZbPkfut4>84X(b)+1Pp5zL
zPN<U51JCoD$233HOB`l9G^LCP)4QDVWb`F09aULzpWZpca8>!%J-1$MKpoM07DO_q
zw>dm>w^7fl?_cR7<}U4ZJ&(4?LCeRwKKwH!s{iI^7eN($&X{)JPX1%pXmR2BQ9BD|
zsQmDp0gN}TE%H^_&j1JG-2snSRBPkcBVuh|WYv?t1URc{T^0li6FS2WXYE#Yc-Dai
zw<yAR<T2+CZ_zztte}aRG`w39bpWtz2y{ZY`k_uKdG;!cdnU-^{-%2gG_`lJbp*O2
z8}of@S>4^^X(osV=@`gu<)p5r%{`vzt2&$5sY=rBqJY`=fN3B>UK?$)#@{3c@$|K-
zWdA*BKvhY?gc#50W)qDpp|G}DD1#@cP8taCMZ#7UYQIq$^;BR`ca<+fg*E&C;mo7O
z^6Lv<b!i86%x})n#tN0WDTaRMuh+dDuSb!)){e#Pqs35Gc-o<X=_(;mxqADdyt1iO
z{8fu_w8c+5hR+&X#KL=2hy#d~430Y?{8m~fZXgdN>^d`Z>s6sh35Z?JQJz;oK>Yt?
z$<0dGTKc$Uf)6ovW;ZhYWn7gtElDZNrAX=P9p!fi@TtdO*zV+hg>xw<6j3&x+zjWG
znKK=)<~2NC6U$BN{25_Lf<^`A<82%2%q6zfa#`KmhhtcS$2cxdnE3>GTi<}87k8WZ
z9rYW#<f1*fC%SrA?<4IRxh<RE=5;(AL)kec;q*2x?FtO8210~Sb-x^)qIge#K3$PL
z>(Br33T!&?{02FKX86d=3L*3FAG(dAK&_0Sf!41+gZxpw=l!ldv+A4qK+Fm<IGJ-l
zz#NT}=OQiteQmk3<hXX%@j&o&0}UfXk=V!dmt=_<#W8qPPe|ZIRIFJLy0n|6$PIPW
z!Ps+Y-IJBSINDzhOi$U2LJ$EYr^~T{9K-QrA|x!Vc?Kt}xFN$@XSyf9_z$!MkR1&<
zV}%`<qN)40lI3TnLaWt@%zqz>pmAA2723b20{Q)}nVqe|m!OQ;>A;?7GqF)y40vQJ
zX4H^p6Cj_X$)G)Vj!d+T2EU(^&14C1YX*zs)ObZ>k5X68OXuulMh2}Qk7trb&USo9
z4n**MdCvE+U;bT)N{%lHZ&`QP;tOfqeWl+yTalc372a<!UWcR>H9F^0z7H_!^C^uT
z*D-ZwCOjU$JDpOqM@}i&V)5zYH~=x|8kU5#fZ;;F+4sXW62tK+-(jxJQ{hOgTD3F}
zdFE-5{u~7t^j^_mrMlts0ahX>sn8fPW6<2U_y(;%XahTN>81QM`YE!?P;IqCnC&yX
z$cQcH#Vg|&lB@nb#O7jA^hIsz4QSLB2hcH3DdA2)%0c$&9JF=cjd&Ji>CDf~FkInI
z3#B*QBZvnZMwlB8Q#A{-urEtk*i-LRxFF4-PySuHnSjkiN=)fQ?x)Ck=5jzpkB@W7
z&7UZS_1-)4%+Ll}*2P$+Kb=5XMzEXzQmuiAYBbs>9H8AGdC2&_*hX{BVG7AAlUbGw
zkbH?*cUWj6l?Mx!<c4EG&V*o@V|#+{;$l-EsS$InD}lbdm`LK_3!W#iw4y?*1LSie
zHiU53yyabUX`S4Z@*zAk{Fz#3K$zw1!dpNj-R2z!a3e{-l5{gc>vpWHrSK8WyUQ;@
zsg7%$G}L6#8Ku8DZ51EFUQn4bc$E>fO`2wHEf#V{|2pv-y)%aqI%}DaOp$UNn8@b-
zk()9ELE#DrS#6sTnkuh3={>YS`A(o?qHI9>0)0R52PcZgLvAck?Zp?iE7tp=a!5>m
zUO>ZW<P40vxBn4bzT%ud`w>XD6=ko%+N*PgvWc*ZTMxPF&6ZXDtkV%uI1&g&Jne)e
zF^B#@j<7h(pOguH#*8{05Pv^mygC<d@#H-hkijQd^GkpMA9IKN06p|K*Rqs1k=R*H
zxBD?gAHOI}`XC1uf+qrOaq-#GD{q+Ova`AQFeXtW(vQz?D3>WI678HOg~g=yn#ssQ
zAC)BYANKmCx-<I(1M-)mjc(hxDcUpLFH8%%ifnL%r@!?KNbdC)|FUzR)#guMX~qlC
zx8``(T9I=EYBqvdMWWP{DKXA<GUt_E`?4@|R8T1bGh;`Ruu03KC7Z6IcBG<nNwB*S
zA(pS2sm&Hmsa}alLMN!7n^_|uxL77K+DPA8(2E2q7(%jjbMGoVarxLT`pS3L$Eq@X
zi)_?Vmz!vVJT3PAc(zNZ$<46@ImV^U+hNz;LR|SrCrd@=Dd8QY#U4fNg=40ZM%^-;
zsl;Q^-YBvplOi_MWl)amCFIMn@H!b`;Krqgg5ST*(uuN&{$#<)c7CJbD2eiPDp5M)
zl8k*%abMliDOe+6y%?L)@>;8f44l|$fEgj5@8&0b*$eRO0H$jES1(SF<P8CaHjt&G
zfiJDmCbFn();8ML3uz-25n@r>^NXa~ionyePofc9zsBh!U4#TPXKW_cu5jLlMg(A%
zkX@CM^@t!a0i`HmfG*4G4QAT$AxA^Ia(h&at6ISx)UljT+hPwPGyH&U6ATg9VEBj^
zbSV%EM~F`zK>&_bf{awx7}&JE^M;k#2(_;mGMw5|?_>>aDDU%w?cwVhBh1coJX=kg
z;E;1r5SXBaqXwvHb*LQ5g!qpwE8zFxS<aB4op}T7n)*$n{JpC48Dq_-W`p@SXj9R!
zZEBVsMiP{Wj?oR0Z|^|s@&|BLpGn-Jv|<ar^tr{;t(19qbg90&%2HzBOdE5>I-zU`
zN!OC5g!|5o+#n5$$#yns2ZgZ}%-^L>E}5p}gSV>{fN75WiW>JBBR2c!$-2D`D(^F{
z_5_IxQUM2wkH)q-!DrADW<l@hk_gglUAlhG*VPnkvHF~Y(rnGz&~pt=qAT#7oigjU
zC+#dFxsG&JL>0*&!FL0O@DW>L`Iy;>$cSj&K4gh5acX&)65@9*_1yH>sLqKLuEEX7
z7*Tul4ewm)kSGx6tmYxMWTpf|p1H5fHTsNKqd*3aKA$e@8!-=}zj+iSYZP#}u+eGW
zSg(9<T-*eq1B0tz{dGInn93k-841}CQnJpe&qo)U$j&*JYuO3zBh*fYY~Ho>_d+2x
z>Cu1B^X5u)zIp&!t12MZoktPeMS(X52#5IsP?(&ufq-n(LWBJQ8i)TEFdO!)`X%mf
zR}xZonh$Za2u$!(_<Wc5sptN=;NgLARkW_#-akb5a9FI^goj37+sPvzRR!Oo#a7eL
z#p23J{AgOtO&(AZbZ*<U@MHse;}_kcYLf`SSRZ|?3}s|(oLI-)!&guZF7yal`)lfN
zxgv>DG${0;jr@?8asTJ0swgYzItSYPXh=8oF*<_+Ww9j$2$TgauxSk*lijF6ria>7
zeVkE`?h+;2_^Z4&0jiXvM9}5Z&4L9;Q4`<N%fiTKE3~@gCz@$2vl71D6;B5_8<>{_
zaWxIk2p1lI8)(MrVDx`5AI=^Bt`a33RkmwcSbtDNX8Ms_nlbnV=`xhg@1xwt(rud7
z7$7g&d2;474D2t%jZExt$FaNSPhkUyx5`@RT<wBEGDz8%`Ak&_Ty^(GKq+e0xk{FK
zt=VD8=E7==uo%x|kdM`Q))Sp_!r2(;)yTd_h9&)XX1>I%5~YLM29mSVF<Z{gRMBy+
zA9{kn17{<ZYfjG5Lb|L(!5U!7lSVW3`R~3TWjO*ZDo0vh<Ggun8c1goT%XpA6JX{$
z2Nq=cC~5=mJN&O>OE6FJI~dXpZ_2WGlPMC<uBFI_H`$L_eTbtEzo|KS)3{?RK3cT!
z1fV-%u)jWRpM{N-PZYtR0<2c^)zx>-2|wB_7Ll$(vJ(x3UKyJ^)QHY%8C`m>8x>;i
z(x7gphdbaIyX`!b*2WdoD%Z~4y80ZrXq)cDi(UEJ$K_~CXA3_VP0Ibz=9lEq)xo*5
zp`FVuA30Z6W0BDz;a@z7=OmL|=rD2@ateAqQbfN=X^pJcpDRGwvA}a2g%|q1v2K@r
z31Ycw+lZH$+`ZW_l=Z8vUH|fkh5oCN`iG7cQ2?|W<e6UP`ABHrXfXI%Cp^hfjauMx
zG@%?zemsL~=JzCHr_$z)((HqY*Y9}<M?YXL$uwZupt8ZE7s|5t)<UJ&8ln6vLC*!F
zYp5f{w)I_aoo}9e!{2n|#mxK2QJEoB^H4{1&Q6U8KN28L0_JByCo-5aSJVInM;#JC
z542zYTx2cJt+r~W?9-chB8O`ty6>q?D|`Ejm)-TujK9j=N&P}F)ziUf8PHlFo=c0k
zoMcHstyye)5dQk{P$swG|H@EaplE_0lM^Bx?W@7*FA^1E``?UmwQx(#WP*QcXHTa@
zP*BDJ?jijj(N6*JW&aUt^bJejbKn2_GkZ<zKS)3ISO5S4apt77T>t<e0001P2;kbB
zXXSq86>g9fEuOybCPYIbuogi|#8)#V{j@T%cSaiSUuoA|XI(2a(Wr1VtdaHhfF{uF
z^z)|%ktFYvm%zHQRJzX!JG2}>fbWI3E@j4+>cVfoe_6xwc1OOI)aKiVj`B^4E(afx
zrgk$&rs75hSKXKMqtZQicUZF~u3D&aXEz4p1J0iiTqQ)gJtz+UbnaiNJYtlM@@B2s
zt%*@1dC%~!VU#WtY-eHzPEkVhWrY=ct^xeZp6$C`HyR9)*qQ|T6l@Wy(n;1r5vd<x
zbFFhp7*WXO6?Qd-wC!38k1-P|TKm8L=?u=*^wU6(&7L;<vrF@c3}*PJxL~)6osUim
zvk5I8J;l=DPnb0H&yL9C&b&ztcGCf~yOHM&ZJ+BK%`$i&lfFfjn7m`&kU}foHJg}L
z+C_ia4<cny0gP%0AngphXrh;vEGdTmW8Y8B(e}J)l)|W@#NKAVrwMw`zMeK)13S+P
z=F0o0;V2yD2n)IHk*e=1{-NIG3T~@^4NxBJlExA5APDoTu$lugAledYk$`VbD?gSB
zmJQtx@ohdWEhxOZM?&)4c5)ktnpjKF7Iv5Cn8@&*Uh`&!^mSw5Rkz2-Pb<v>mQAy1
z@w}4ib4y{~qf9vE!s>8wP`{5}&?7XC1Acvfz4%4Q8=6?qqxm1(=_Iq8U5u6wk1({h
z5x+<_#l}`EFPkpU{0Or}8pM#;dyJ|JuJxl;`F*_WIHZ*F8Dg07Q5*&3lJ^iMjy|CU
z!opJ7=~#k)t6ExNh!f3BTz!U1=BjbIfib1#twZq?VnonX=lC6(+9^k+T-i|YM_~^i
z8I_9Ob^$JNSrdV9(L<KNfO`%41+6Ox#w3(u*@P%<sSmtz+|J=tpSNY?k^r1r8*6U6
z6UJ^*g1i#qPQ3amZe6V<(LI|fmVWJloTrS~|64)hZofn*%Z)1n?7*!wZTsP5K_za3
zI)g>rSVWXR`5mvfbu@{3SMbLE=TS^)=ECnd`BvJkp6Pe~Ou7Cgl~mLNx{7S)K8^eR
zYdABdWERwMK@8F?52mXHB;kE`*Gkxl$cInLEj!0}B?d#&M=H+%%r2@p1d*3A!%6(0
zOI+3af#+A<=bcbfQ^jbtHjwsAF&emw;>0h_nDJbwW+KW#qZ}069$0BK8?kM@*#2|l
zUBSr;mD$1Lil>OfEc<HsyFt?#_N7>F|H9bE+}$?GFHS^|XJk55CR8o2T&aY;&6u#{
zRWKOx^{RG@FSK=Gs1NHA%v?7fx7*A9_)#b5H?kW`LI<mJtIXYrnP+4BL}WX7RP~`N
zU-8*T#VPeAX3)GA*7}y95)e+iT?0us=4w#G)kqL0ms3Owwi*yn??_yY2iBK+jF6Aj
zrFXLsh*j`g`rz7rG_2rcOL4k`g1Jytr3%8>;>a6$;9cG0z_>K!C&vzFV{}5YJ#+}4
zeY$c%gAaJJZJ7~e-!~c%z#m;LH752I+Z>Kat=F9i8o~1P9Q@)ITR6IpMXIGo)39!l
zxsa2=j$BwdvwZb~j4acGHJh$w5kgtfev_TPe`kD0L-qu8-y2_!IJ8{ss+!6)C|=?4
z`XO2>!U+p*L7MwR@@Chl)MzGHP0xOR-!TK7BzgHj_~@m)vo_7cEh~mYmOZ0u%K~Jy
z(<DN`pwVo7C#oP`(L3>AqM91qXI#oY&nYPmxPnmia672OOBB?l4_ZV<xaJaxX%<Pb
zx{u<qz$xfE?RdW139a?;gGUWP{=`$}HIxPQ`Zy*gi%IGnrZEDn_>M^FUO0HIExeya
z(C)-A*h(8H7uP?v8PFcdb|zUKxOx*;dp6SoWgJlEpuGy;e;WnQPtMxc9qU_+Wo}!6
z*8jGC=REvN`)fW`^)kvTY;;WW*~%S^UZf&bEVF+0Tm0~vnRocbK8O6!H>4>MHjVdt
zf~ITC<B%j})<sns-F@t)DtfRfsv$k*eQdv)IT1K-eTMFHtaN0p;5?>6!e28UVCtq$
zW6$yq`(0Q@#&ACM?MK2B+G1KNFT!C#nosD?;e}u-L9b?ZUzFh;v;J5w;<U$4W1nTc
z`)N!*LUkKw4WeQ@k=>yFpoIDS--5&H|2IVHw&DKlq8WVf1vVA37KFS(`D<`I@X&CG
zZRD-C_+A+#E<kBRGX<t|0>+|uwyp^FSq$W%e&(mt7RQ!sH7WD)4V!%+B+qo4zh@ED
zzx2SFWlHh#1O%U<Pc&`3Gxy>L)W7MO<|3e#>1fD?aA2M%pDaC3in4>wrR814S+K`z
z<mrR`wU4XE;;^QX7$SCf1kddM7s}J(_;yv_<<}V?+UpfJ5Sni#1n<PE6eKbv4{D{W
z3iozTYrj4u?GE)tZz3tQU!qIot!1W;FWhCiD|3RVP2C<%4T=B&O+d20A`q>cXR-QL
zv$XV`$+xf5gcq?{hYfUQlt&J($uSSswy5;tUE^ZBhC@SaV<A{VDv;m9<#TMpI`l?9
zn|h!fGb{e6C6FN})TiMy@obkM{@R8==`3)x0)nx)l9|d*R%eX}Ai)y;G_jRU$D<i=
ztyG0Kb8DLNY{+Z}fX;w2a0-W!`&hUYv4=BqX^lbpJD3@J<D99KTW5aj)k4U0_FNuf
z`1gO*4PuazL}TU~KQwSk7Qr><v!gnQ=Nr6hyMF`PKYf`m?^WL=wh)L>o@3*rwX7hY
zqonTG(@oBgQEpSmx*ZR=lI$SPN8jg_ieSxQ3bLXTjETweYfq_ksX{7`TNc<)XM;@v
zxNtCg<61)}mls@4^vzYsi+NAB;O|uUH!CbKV>qav7JpX)I`kg0Zk}qQ;|otu@<V6O
zA-io_pv!V6<9r~=D)h$J*zi`Ot4}gP)qSCS&C>nI1Ah+(&ZC`Iafu!%kRtljU8WWt
zQ2$SDVQPfSCymA`LK)|5?ZQW!KSUim(;!W@kSQgEK1HFb*us^i*z-{>Ov&7te5Yld
zI!j9Xl2qdaX+kAImV`ymE=E9@gjAlZCUasxjbk{l$r_W<Hhtc!e=eF$+hNk=Fu(&2
z_jpH$7n+A;+<4`pDp|%drsDv7ux9aSmH$ndOx<ID!bca#ny{**20tD<@rxYm?(UeA
zMg-pj7UO=c>5+FC&@Q3bXefp%IAoqjC))`a<hq`}K|brg7&FuItaLvya)rmP<#2UB
za1Qt7m&6r!GfPklu|gH72%u%FHC*%F*oYmtKj)i6RmjRqiSpxTR`Nf?DNO5;z)2tY
zcjKP6WIo~Sg63nP;WcG^u6Df=9n>bL%{)2zpR#v%3OAvD@R&C{2_~8ySdiK#JB%m%
zmPn-vMHln=R}$J#b`)^uDCnmDzzESc$uC5yH0|-ce7K3;BNU^Z2D!B7$@)-ie4O3x
zzCEx6eS1UsylKu*WfnzyM2GErdrmtWAg4Y0@5wyGCf_}f*0gKoyit}dSyD@Yu+)aR
z?OSff6a-p9hdLOjbAWjccs(Q9Wa|VL<&Mvp&YOCC#9*g|dKrD&x3tA)I1@U#5fj(9
zOifM3(HiWNXwUw#8Dnrwodv|*pgUipa-TQglD|i`7E%ZT2mc7dkaAelAHX3{h4<Wz
zT~68vqO{fl0Li$gSpo@c>FxhWST-Nos^Q?-Fj0jIPRUAW=M+8HPx@#76$=)-wZSbj
z29d`Vx@F<!D`44Xffag!=~vAC;302H8dLTyU(3AF-kqBnE-PVyS&A6(i!*KbjS#2_
z>G&XKnIV}cGg`SX-qIt+HrN*NM0=lEYR)5&<wU5>?n%Ial%zQK-IpJ%V$lD51*rd_
zmI5Nq#1^RAK3iGjZAmB9+qRT77T+8~|AnPWtB!a60Gs9%B6SU=%R0cD65=5U0|%oh
znYga^xnXyx#jSvPEd|m~b8F8jkfpkba(&Zt#FTDxd5*sre+=FB!i9R8kMyxn3IW2f
zTowxWpD5R_$V=Bp^*fj~{;{4JyPUo%{6epaxvZ)APU4GAD=7MVg#VXvMB0kH2Od%_
z@7iEd%e_PRLvf5aF&=I{qFV${`?z2ckHAb)3>~1qrG5-#li=QHw09WI|8WGy_(j`m
z*UajFojwIShNKzaHsDH`m+Yr8P1w`}4WA+ss-L_b-2ldJ#XLlJPMT>6_ymM6AP#~{
zWDMpD&ZjS37x0Za3-U{D1y8~5iG^aC_Uqm>`A;Ze8qihn!UURl4~Cgn_@JyP;*>8T
zyfJw>SVYu?T9*L>bzFrAx!T-+KZHv}-QlGG4kB3L6M(W*yxcCAn)G7l+6oJDs}X|K
zx!z1$Jr*9YSsWjBY(5tCda60h8m^eTm@WA0#gfa^KdP31e=+ayVrTVoTts5brq_AI
zQy|V~3g5Xe&gdjmsmc0KW}UHXfy&Q1ndc*@T@RwU`uX52Ki}Os`eA}N9Et^{k|@p-
zY;#qfp*wCw`pw?CZ}bbFD6oJO*5pI-+WIca-dLgbb&0F86a|JWk(XvynCl?o0cJPB
zmwpz}`RV!YCR-1Y$RpLbVdT0pKC7Qzt8W;EoA_61n+J4x%dage4dCQrg9K+?;YxB|
zjV|ZH`A0FN0rl7d8h}f8g19`M$h`_dT)nOwf;1D_vTIXQeuRmyBn(U5XhSkWu|!qT
z=zBYK$1FKPlO6Co(yf=Kw^n}9UlGF3r9K717;@ki?)d{-v|O<HPPO6+*mA=cc!QIx
z6zBX$gI4H%BNe@FbtidQm$3-;Ibu(an9dt3gwzN-IuCtB`E#m$BrVC&P_C?lNYj4B
zT$dQ;Bez7xA?Rg>r`63Y&#TWI<x|ChnjWXgXubvngE8ou$uGD5pMRC9`j0adO`Q~%
z>1S*mN{+*hk=(vS$-!RxiZ=3P(V3gVgz!S>smCp04Q-$WGC+}28PlytPi9L^sIB<{
zg#JuOQYIEY@9pH7?*?@|@=2yu!$=vTdI347f!>4g+PbSXLUc&}7e(8D1WcP5)#2;d
zU2&Y%jT1PmWI)yg>dhg(sPaakX%=#b*nVrCB(8#g$JDj5=$7qo{U`sGv~st<+k}-X
zxii}i?5VS1Pbi{$!b};_B|=XqD7`5nN+k%#6}rBE`q1J9xvyZW3(56s{@$a68wAf<
zvkT$ZjWJ43OK^Tc65f>2ZMEL~6Dwzzmfd47^QaRWoc;E{`$3A<Qc+PXy=EAzCxKg0
zd4&9*!`GHEGRnqng?J(}_<`yq+hfHm!2kOuk>zUC%cT@xQH<rsC)+Oap_o>Dr5%ts
z3@81wCMl_Fk>9vtA0&OMzA~b~jA1?e7}+s$O^$D}QAkG4eRZIf%cF>EpwSU-04KES
zA3LPBpiRG7#E1d#cUPoKJ<;#Ui~!`V;779Wc*bz#iF0NL9%GTdqRSW_c<h5g#PsIJ
z1pyq^BV?y<S?Jh><rPA^TIx|q@t7v`0yUXkLjDUpx`I!}f^`O;3}We4eUX32!`{y_
z<Vf_%{!ce0jG*|)SJk_HLWi(JD0*ncEPnwm*`X5?YOV0ApV$AjHdZOLLm`}){^^vL
ztzF&imhoiUfLtK|rnjA}l$)JOMo;PNYi_(RZITn6yT{)VO)$i{>?n3h!Fmykfu$4k
zc{v7hDya-8bAsVFS$j&JNI%qD{8GhSM?HQ_BR_K#wpX+1of}&Ex{MIc%Lr2;M;wg<
z++MVc{TKUN1adqigB}Gh#9y!SU45Wr2dPsHNjlP~)?bp}z0StP;z1bD>ik1kB7}xr
zF$4H!rTa-I4_SDP6Yc>?%*3)0df^fQ``E{Cuj#9A>=chSyHQq}zsxx5>Lzz1JCP8O
zw#a-&z>h{DyJGC+Qfv)*5!MC_DBVJ^&{hUy2d^iujlBY9feXAZSL&NvKA>4lYo+Yz
zfn-j+zSn3Zji-}yelzE9<%w4LjA>u=tqOaf+-X;yxeWNj6iJ^o^rNB;(#hTq8rB)O
zE$3FR+M(i?nVbDB_o<)QYwXcr><*h;2f)Oq&QQn~a(JfGB@%s0C}dZ_WBf$-G{;+R
z`oY6<>S|f=UZ(g=;903esGH%L2CLc(SFBHpIch<s49hi~=4Um)tC==Vujs~Eq_cSO
zqL*~eSZ!=F&Mz&ZYuf~W!~NfoX|NRwk&a$TseFbn7ktfZXHB7;F)o0R!TPZkmZKFz
z?FQl(wE0AoK>;=2IN=M>c^^7=D4#q4r3qTP3$?_4`(_K%y!b(^5(ZOSnbz=O(-0|1
zY9P-gi?v^auJ^tT5UJgEP5?laUyMF6ho-MjPL`iwz;3CJnjn862C=p_>?%Y4K*&Ie
z@#r8V7Z5C9dJ>>&xBdpXZ?V)VE;x2>h1#O#76A@`90@iZ%4Un7!0l-Lb*?)PFZ-dQ
z&xfu&JjIxIyB1-z&^f!QI_cs)vLfhBBYpO}%C*&mEr+y$7fHn)?%jGXt&!Pr>R6rf
zX-^A+hz`9b5ApQN$1YD_!aG&3E1Kyyq%NI3!T3nj68R5YKSNe*oaSD*gRd{{7*~M<
zlZnxMLIP)KD)&ZC`UzQAw4D&ry}s@G<X-{^v0BLB8AHasR|TVPX9+>9+Bj68>P*=N
z&kV&P#g#LOH?s-Zipd<Q#%iqC#6K&^D%#z#<_y`-a3||Ua(0qHIO##OlC64_?>nPi
z`nP+5A0l@`%-I87r8zf0+fOi(F^P)b<Ld_%@=oa!ry23+qR<v98ej{i@ap9!oB4#L
zIsnf<((XwV_f7q=l|1*8A(zA~)^11<31lgo*-S<2xO(LGfnp(M(+vCB7t?*P;WH<N
za~q$s(PNEuX_T%|LB~y-t-wAHjnqckM339P1=IA{NMYTbtyO6Lnn=sp=djyyJV#jJ
zQ@xS;MQuSrWR^ejg~*F@+8`Z}#pwXRi^5VVkvMs@hcMmOSYx#GV2nBWM4g+)CxpQg
zhxQ?wg)XW&?=^(j97=!8PctJM@YrP}NzMB3U}CPVFGT4d#Pa#a4vj2|clZ{2?c-e?
z>8`%=a^JbTS;&E*z?(Gy?NyRB<!&l4&0brr^0w_cAD#C^Xtw==``z!uMx$;o5ByDv
zb67FOiMPMB9bTm*Y94+=cEYTfkC%d`ijJ!K8Bd4m*_E0JsdtOmH5@6H-oA({$0Z+2
z-W}f=4-o}p>Gf~>X)jauSMjDU;pvyu_Oh*?HVZ1Cb!l=i&RYk{q3Zoj?t{tg;OYG4
zVe1pvv=l2=iA50nz7A@xr3Y#{f-opt#u8P!w=zD)OVDH5y)vo{xKl{J=mp(0^-pAe
zppr;mvF!?8*0DTMHkg7h2tL1j;e|ewy+HI!z7`Tg=*BfV2`|dxP289Y!$cUtx*3Kl
zYQv*&Ns`+`x$^Lk%I1CdLiG)l>;=k@pgef<`)=gQKXckHKa^EsHbU|a=kP6j1e$Ql
zsr7G0pU&&NMf6%%fb~>>b>7gdO?Yy)x-sBDh!iZ70&NBbiNoPiL(}qgC!k)19==i?
z?B$!TER`hK!v(7%TOB?_pJPoj0h?vbECGERjf~~wA0_D{ZI0Vo*63-In=JDvYT^5o
zqs}|e^xr>`mEQi#MgkPFe}0=&|F<w+`M-5BDMPx#-7|rVZxNL|shsz)6N~ukC!xut
z&iCUic>x>R2CQWN+aPO4jGGLLtDAEWlGT=d_A4Jn8X8K%ls}DIh}HV&B(fVhP*vk^
zpPC5|+!uN&50!pIq9za~4KVS&s3)y(RP)b1FN`H9vLyO)g1EKPFiTazfLzcpzEOw#
z@T#H%VYwBY=gO>>o=B{H4KIW<W!C&vtMOZjpj)jaT+z910nBs=AfZCaGplBXCL5US
znR~BJ+c7Z05_uSlkg|E=eJoG-lOJK_SSGeEKx)E=J3T9LG&BP10(dgY`gV7b6t>i|
zx|O8%c8I5!|8E}hs?$wC2poo@PsKH@vs*;_V{XO|+!|kpHhVn*^9;jTMk4v`-3K@B
ziCSh^S^T*+p2o%1Cf@>xe^K-h6pvJL?jiM4wFiaz9#AP=HIu^F_>6m|4kzlz_(NrX
z7T=Cf5(lyIvsZL@6hB#B=25bVQeqEgWb(bzvWs9I5gbU-fZd}}pL(jiZ8YO4aM>fX
zgFwFrW|@qm4+P<Sw=juPd5@Ky73;H82aMO=BzdPxsU5qaijl#c>4QgJa;FiWBiRzZ
zaga%NMGs(1(jd*8@QtGIz%vz4%S6*&4bslH-DjV#yeoL7-8%{OJ8U({=bne?p(D7T
zkOrs65W8igJztSeiEFmQv!)bbYI_Jq@@v>jkM;`P*;k2xOej_j$)e2f&13UZs_0gd
zD|9UzHAHY;q;qSnP2~I)IcLGm;bo}v{`K<Sz+wN@V$$s-#GjeE-_Osgv{gnWK9Nsr
z8oTC=+nKDzGbtA8NqC`*+TUrxeG^X1vsSVam_R$K0AwVo*VC6~cjf8U`y}IKM;p|>
z1Jx#;-vRyY>=k(azurhF0u?v>i<w20?c6iZ`E|=a18t!}{t4@9j~CVyzFG<CVcUgG
z=|{vTV&h;3_oh$?{wJtI@!W4PLY>~sQ|MNlW#^;N96ZNN=!|8*!r2(xVD;9@`@;sJ
z9o33^SHvDbp}i?EswC6<_7_Vue8j88UQtB1Zm$EAn+BCK)d~c!@d9DVRL2<d;yPPJ
zq5EWsMDTKFoj?6zO#?|1uj3?)(U<Hj2Gk~&crX)az`C?!(uQTW9H=e|EvgUsKi0T<
zrtLCGD>7?9(sl-JZygR%r*&a|+B?5kr^~f#k@3D$OQHJ_7zaQ<XPhmz{8gOu2>Q;h
zu0=@>WnLiSvgWVyAwwW7#+rJgfN#EHsECGt(9OpJs}UQ!DMaw--bZlZLK_C0qR44r
zb3TOV`NkS7b<`d2GY1==siG}+Ta~kUocf?74%qyy<-ddxCwnj!V^+yNN(>ZHanNw1
zjrG%HB>!a1Fiw8`etA7}Jw49{1uL45`Sil5{ldzHH%fc=IdGshc*)G-<H;N{W41bo
z0G#JPQfk0>L7~E-Vq^-?93c&uOZ=>mDdIGwox9ranCT1zJt7v&OM}}^?-fpg@T|b0
zBgm5~%GDXKqT&h{OUU$hj?G0(dZH3wYXmg8$i1z?(R*Xat7Rm7m)vGUl+t&BN#J1`
za986orp()AKRB4dK-FV5Lp>R$QD<UmA>aw!C+L1?ni*#s?x@8LwgU8u^(%(|mC#Cj
zl8)Jc7RHdgo<WH#<C6%?yaP&wnhwCKy}1@WuLABaecH;Zta%+pM$%GLZBoD+?A;n~
z4ht`q?Rz7xcuf*sdr6<2d4QlZ7GIe(cpsa&&PUf@5UGc7DOdA6fKt^7I=X4^pO+oP
zWhyPn$-JHY6;<Z--Oj9Az$$3i(Dhjp6nC~LwO-cTGD37rt~|YG9g{Ur&h6kCE#*w^
z^jaU;QZcEZX7c+#Rcv|1`HdID3rHo31j|E*oIdCv-t;tY<BFSJ<zrHemYu}>Y7SuI
zzaUFVPU1k?3%}zMhP2yz<WxPi<P{PR)g3Z=&^DV26v?z)K({WMheFq=gph9#Jb95S
zY#ra-X$)XUE_^1Rs&1qyePIRi9QCq?=K|=vmgJ~5N)B`_v%0^n%Ay@k2si6pCl{q(
zpS%OWo!SrMWMbGcTuizZ>I$M4av{Wy_94S?yH>6cDD+rWi$#f?rI6X-xutI@EieJO
zX2yz=V&4dr#dK*-l%<aZDq!=$HAqKRul~R8{oCnIpENgCY0xZsN7<RoYCFWU#z`xD
zfm}G9$=AJ>00-N<=aE+j13;Pq`)hPm|DfZ0RJwYJi+x@aB!yxBVk6SRmAqPraqGQ;
z@hLrnYwv2GkgS`TI4&&d*Q4Ux8AeFtZdg3$cP`!Y{bkyGa8Peh_&!gG(AoCDkXgI}
zPbdyho5D=^&Dpddw7p7*HV>S1jM2IsSjXo;*Y(#l-a-$9Z@}~399$BameJvS(eSi_
z&zYznvaN*<C^J2qf$Fjw$j16Q`kaDBC(>r~k0=AP%HGbn!{&Tt7EIA7P=H6*cY-LJ
zR>vzisbgHnT9{rd*H9G*Eusxdu)2}#Q7(F!&&$@{a#_&m?<nt9b|x?wl<avIU@!_>
z*K@^0OwgErzo_;70LG&Ku1Zks`FJ>re>6l4ioC6>z7?N$n@*iorsL3jcQ2S<^DojK
z0}y*uwJa^3agH(U&0W2ge+)^doNW82EV&We<I*?N0A92YL$34bkWrfVg;QC>uI2ri
z`iI_Cx`g`7d-%y)u90i^$jqv3O=hEu5rz#ATC)-iWIfUppqVfduO^o{p$Z(7s)<5t
zk%S#*T?fpz7b!f<!C#bOSB8qMHIH$|gUFO!q_b{>TNwaIYsp;khdQ*2eBJ@^8E;+{
z?#8^|PckXqWI}~nGd2@g*JpcR<R%wDsA^VL?n%w+)Vz@O!IU2RKcz~4DQTH_SbU7e
zI%FT`#zt(;@%nNQ``#;yMRwY#L5lO2|CuE@u;;A0nGj^NV}<#Wyi2p8C|UNkijWJI
zp;=VjHXaWmKZduTb4PBHd?EQCL$W5@8(wu8+KDpV)oR>Y7LIG+_uWtF)%Kqb=-3~H
z$B?KAzC1j$Vq{8awI+FVVIYDWIcmaVo0a%Nf}n-aKYSmu8u_Ri$k21QvIz!;-{tl@
zt3uBdEOhA^XRYt_v?K=34#b1G=UooD7{6I}D?0OPe5N(X^V8liz_P2<rYe?X-IIeZ
zi4xB~7s;3iSZ~=asIP_KDh=5wu|R^|FiY3&Kwq<JA-}I+opv4C=}g!K+)QKk*(<$1
z75Fi>K$fRwavb{WZ>ToEb3;O_XI^@vH837$d}ATF^mDT^`LZ;i28|1t+ilW^1ihIa
z_){`f_oHo?RmYXR)YH$GN<@-fAxRi&aqHEcl83$Rg8TQnkXKhv;0zBUJ!^4hc2$gX
z_!H_)hMM?TZ6PGzLaA&Yw=|*fw8WA<Bgv_t-oc96#)jt;mVyZGJLRM(cu9V$u*fKn
zB0HSjgy~m(?NK#2nmDPC=#{(CZSrmKRnH}nJ~@~gf>JShsFEImCP!Dw2PxI@%qoo>
znK6==yyGLfm=^91qsEe)a~4|?YzHmdr#Uxp6h%DqSD569=Ghl9o$E9yHqMhLAAQf`
zxZ4lhB4lfdc^VCzavh|R&ktZ$d5{Qgw@#uSRXi9K`DzS|rHtG8ZZCSMeZ3rKECC4l
ztNNFD>Ob`tTvEf%yNyz(qc2qcg)CLJCX}<*iPEO|jbasiH|0xwf1+hp{C@b&r5fK@
z0|Va>O`*P3a}n7{kM`(4<|gl)Ao0chRh=3G1`c9o@@h=Cv5)XgqL+;u-uC2~`zn2A
zkc7v)La?5DCCK<dSi#50RzSPXd2m^wFM|65?{y<|ueA;UkfH@+H^*-4*%G7qCP%#0
zy=SXkwjf_zfP&qG6}rXXZ@ukX%|Vup<AtC+MxCU^WAbRh_xQP1!H{!RnQIrUDCYsf
z+3_ouE=Hr(K^=ZBb|opirW)~CDuM;GYThw8;(+qJSq$dR0=kscLSyN3oui&ek1-Tw
zY|vmO)HiIe&*6?v-T2AJQ6#3$2m<6KzzCvkDSE8)FXpjb<>-;EYOJNsHWSMbNHm?~
zU>K@ww-?ccT_TZe0w5?qwEL<}G0wK1X0tHq)ue8Ho1)8Z-qbuzT?bi^u<5yGHHdU^
zr&~?{&)cgOC7}S60E4hX;KhB)#5VtKF2V+qrf`5w)CJIqwa2{~Et}}>fHw!03c6EF
zKR9Z5;f=aE^{O31M}Vb>M;aJseQE?neNL&o<S<V4){gIY;a~}DYH-21u$Q52UJV%p
zx!|M>4M8CM)T|*u%(MfE9&k%$Sf?9*A<f^0a~2b6)zyh3KxzkF7<;Avj`<tiKA95?
zCc?HhL|Yc9Dl;i!z4H1g7}$st*YSpl@___Ao;j<Vg&`$E3;FVCRsO<=>Dyk57BvG$
zUQ@4-(BOF2GnhEpBV~cH7dJ+AFBr)Q-gBBFrsAd3@}GxYGz>Dnk5ZUfF98_QR7PG{
z);GuAl(&815^=-sH?4JO6i2cw6N@)=(^r`+A$9eM4v3tTrzeXWy_Qeu&pH_d`I(Ir
zRSHSQ(7!k4c4TId(jl*v3Jdx*x5yn4U<&B|ejAz}XHn5W9B1qhOvMJ_BkC_snq(Fq
zQbY0fODCSMQbF}Ar%1vY)&CpIEB4t<&+--Nk4P$Z_-#>1$Di=r>@l5{E#=@t7#sN2
zt6F$8EYWhLfEW4Qgb!nm!~D%U{0aLXy#8A}bHRg^g6y`Jl|cC#@Di6nr}{e$3Pz!=
zJ9TOnV#HvVwD=!0qqCU`Y>N_Ho!&g>mnjIEc*<ZconC)L$Aqkd#J?6sbK+QMka9Yt
zFNu*cRo?Tm1&nZTC3@uG&(K-Xlk6~tdy^o=4c`G8x$d~lno|<*PTA9#GLxg*7&KX>
zlE94dy6t!ruiS2&*`RYJk)50Wi-o=3`2bL;0Wb%!lzyOf`n!)b^@PIA)uW)83}bxb
z1y4||a5RfXzo5T>O{gdF@DR;F%KS5>l>G_W-YQ;tyi1=85qaX(FO$1cz$nP<d#rRq
zl^kMSl-92DBa@{pQFu2Z6+1*_xKAhYs>bBHp^S)1&B)qDYhTFkC%V?>TRRPMA4cLv
zYT3cZ%>BnSlQ~I26KB$Dz^<MsCfEbRU7Ii@N(m<2&<njF31daR1j87;boJ-cZoPcz
z_aH31p@6drC_d<oTU_zNr;52fmmYmVDu}6?JYVDhGXfp(7XqW5q#@?dNncjf`}+^*
zsS^9!>!;+^mERL2!qX_iI{>@2g=1-FMRakD4^{QC>~%6w8e*O{(Xtm6YqFfc!V)hI
z$)G|)ucAg4Ra)=ia?FmL@0lvY`>|-HI+{LceM3eiNBuDEkd|>6z$mxx0ZjE@smO;J
zI>2Esa;8ZNZP*mh`FP2iw&nPhqW|ZN1?E}?+l05andYc<2L<H};}rNY$@pOrf(uY*
zUw53j=Ot;q4>+-#q0LX(iJTV6!6u|ER-?r5TQfGjD=_MrG8+z@jgNbGj9KAo7>sPj
z2iH5MJbUdfcqL=XqmP~%?%CtP;R%P%cz&N+7w2P7ZNtKt$-{??OTL)UH@&~q=LYy)
zNo(}~rH0ArD(^+d2>YpJ(z{GE+fw6ysVd~w*HNj)VAq8zWrI^UZYWfEX5CDs!Y6!w
z&?_>=P&sQH?Mha%TSYRwD5HZ$CG_x_R!h&D1kAV1XA)$PI!0&x8OF;duq*V~lz>I(
zoP9s9y>?B8hgRLeoG3ey%WXh?1d@|^g>h^HrM}QvHY8YkDtba<c62U(pWs8^f}F(a
z635k<c>K1Z3!mt~l-~Zf@U3uC$Q*Fs(FEpPT3!1Ov;jW~A<wWgRZU8^G4WCk9J2HH
zk_T;VSL$S)k>)ka8J$A$><KQ<B@&+1{DZn^_Otn=Bgia$<Vna1e{^oZBFkW3_E|d+
z(bB_YwY0Mg{1(xl8L@IatAwa)l#`va7LbPi)38YBKK4xAJEb!D0Y5_BWLh6wSC+=M
zsk)CQQqhIpW+)^CnyFEK5}QO`Q}jQb^TBGBg0&4te<=;9f6EPaz4Ag|AEZSKkWwcV
z#|r5Y@^5nj^U$I<XF2sc#S<tM+jeYe?PT9$Oo{0aDYHQ@um%YvT*YYmR}XV{1XMD5
z@1iFWO)SSKuBXV`(%N^~PssRrfSh-T)4xPO^T}24;oROwyezGkghR$;Y5t{3*xgHx
zb3ukFwugzNI|v4uioNgb#frQ^#2l+~y^`Io48FeJPQJ$hVoc6WGV20D^;6P^(o}9E
zNz~SjBbykA8RjlTky55wO69Vbdv!ESzdB32yRMA0k^v1AAujw374A_5&G<vGX|$Su
zb9C$0V)4DCE3INgxS3s2<-(VZjLV0KzW~fr+M|GH3Its8QD5W9C@__<ML^kB{o0>9
z?KPmo)zGh|&<c(RA?joP^4%Z>j2YI@1OKlcW`2y^+An;I2r@tEa!177#bs#D21Kym
zt>NM*RQs-bsv9mgH)>|F8@Y#2<<Hwk>-5#E-X$<y>P5|R$mymmaNE6LofpRVG<5})
z70x2V$>I2fsODE?eo|Pz<uTkdW274Ac)2#?2a+^9g&OFaCOz@v&pv;<<TvZ*dH+-x
zl>Qk7fKH<a)7xYNTgFuRkh8FOWzsEd>VW6#lzBlujpsmN`cx;IQ~tQtJPAFcU3r7~
zHO>tyC;LCw9+iDG2vrwk9YVN`KrbXYIP{DJ#KMFb?&Q~+rf9)ysZutzfQe+s;mrsM
zmav)s)XaNEh_UYx2Y>Y&=I?-;k~ounC47~9dS-wDJb?0HpB-XhY>Cf#pWQ&By#gKS
z`y-q*6dOXFs9NpDmvz<gW1TFP0>xLOL$FJO*qa2dwT_}$9|EmnMNSe)zp%s9Of*4;
zXt2E$mw^Y49{M7z)UquQ3&(%2oMY4f;&e<UPC*%_9fRcS&)}b_gHFC*035EhxpHv`
zx80I9F~d7Fl$aucaoss4JUqse)*{3!Wz{AwO}kj#w>_-Y!|XZ*RU>i(c_73`Q&MU;
z+5od)5Hw^`Yu`}K8GOmUPvlYt-=03|b7J6-c`{E$cO39AP4BA(3VfPGYu5xe_+E>l
zyzTG7TW6OEQ-9SsDwdyzO$L6UvVo#KLJ(=^2o@1@w#5PUH!Vt~yzUjFTh|t2eg?sH
zN+x(uzJP%VGQvw^fHuOTdIv@tmhbY)tg8OgcNuOL5m0uqid?W+p>d(hW6lB&fgyi)
z712mo{m!qGjz=fBt|_@G`y(4dOvKWrfpn-$ephZh)yqNIv=K7?f*@v^<0BPFGJaxd
zgu&}WW1Y|5r@$3*uuBCn9k{E@hlwA2@br9BEt}TD07O<3Yy5g2yqlJUOiYB89;$_|
z#z_@I%M2<n0A|9<trvLhBYjI2H_h9GyoJst!|@4YvOB6&%sz9gBOB~qf6}OnE?#I&
zU(5uMnQBF|HLFvASm`cv2v!IWpgPU(5|(@TL)_{_J+$8e^(882aoy+)FzVNnYsXSL
zOxW*#>!z&In3Y}<+HF=}y#oU|oAW<Nak&V;!Hnq)cijd%0tA_BS6bNP)sxQ4g#??4
zq$|8ubyp#`5;DMz+R8b}W_Sz4^^L18tV1_>@_)-mvDI_`HY!?*yB^Wma5gNmW}*NH
z!u__`Y8!I_ePW|#X;f9EBP*Wu<eD=<zPnrWQ_=yCYKb_c0e<*cDL2=6)G)1M?6{lP
zA!lLn!6lT9=a#+*pf@7_k4f)O>xX~2C46F@i7<+m^X$mRv-rg;RY46nF?t>XZ2hw-
zWTyL^fd`iGnrm&n!aMSPOISF&3d0uRzp-SvI&1{Jnz5P-ZmnS>)QaM@0m0a~?X0|q
zS|HPDY3^r!=Q%pLeaf}kLlCb<?~rGHAwcauWfeO2FVqe>>&!HY#c@xO{Tpa~Mz*WQ
z*GYGO5Y|!t(;J+)8%Af>t1g5e9;-mmME^$li<dLMZn5_!<b%_Gs06WXr;GV&H+n;2
z0V@NGcmzOX%0);M59D_P%V^hb2|{|J;yW%w6tH7-G>hbOonu@h_Thd$E)Lf&S}8?^
z!cLmH%)V(o;W`smgOoDo{WKKY%6Ox_5r{VGJW7lA&&PScS8O^FI894s1Dsc14)`_(
z^R`X-Dvrb}H*L*Yz-5L0a(tHb6jXo<y!2s4QLBeCpxqvKv$y{;Aain<%|8nP(Eoxw
zg^lv?#vY9GU=U5u{3U<T6JrIQS%blqL%t4MydmjOt#T!43J)q~wf;$MpjOY&zffAp
zvw{+j2*Fo%Qp@ddAFS<3RHcmtc*q%v{-(YUqCQyXmvGOD1@^M_1~yX5K-TLvG8M@`
zUC|Su3jct6fF2j2fXA&|asfDlFjq5)BKm{*U+24{>RVjW$@ixiFp9|63r5?**2J!Y
zO-c&3g(evdi-+`A;?>!XPJ<740GQIK^9&^Qg`2%~rP?Vy^ABXeyIT$76~>3=v<Xo|
z=?}?VYA!XDdv$GcpCgXRUSB@q6iw}^R&(17uhK*LvK5brX_xKU#F?dc?}rp?h&ZN`
z<WW^~q8EX@bO`wxJ{Lm+sp3SQmN${(etOD0T4yMsj09mf8_*FV2yBbfk=s;v?mjiE
zoZeW}Ti&h_i8jDeKp)>fohU>WF0uiHrfu0@w~KVjVsfLv)lnb-X6#!t5ZW+3cOjYG
z*GYu#t?GKH*h_=G^Cn~BiA#GogbCbcad#*+->KyTnI7Q~@){`3w4Y1Ina}8@a{79W
z;}acO426_?f;`N-j8nIr0UlW8`?EExQXbT9nkVeAA?;z|f$(4`P+${XKuMLFbP@e1
z2T-hxRcq5y4_$ZrG=NR5Me>MerXEo|fW3Y@x-^nUcFEEFic2j`Y;C>O+M^Nt5$Ct;
z*}6?3XEv@s&kj4|wt%0(L+aeFL=}*<IFlgqR~nQI){?56Ybc!d35|9-jwQcRW)FZq
zg;rYTd9#?Q7}nB}*?Z#~^I&~BaZ(8{1eecut5O|KDFP&5tJiHLV1<TU&iEeCMU3s_
zzd{*agc2o`D#*O7SUyQdru;3RNjO{fcfuNK^&Spv;#aa0!ulp~iUd)HraoYTMwjJh
zv5qqbQxyiaP9K(0NrgFaaCf^XKsBasmGzdUZND_uli~^u0mC=ZDXm~CehBGfJ5<he
z?-cy6h~5)Xq_`I+2qk(MVG_S`_sON_W+5S(aV+%eLP3l)Jm_yw50okvus-bK%a5`W
zz;~Lf9?pdgG=9X{pL9+!j%XwIrsUU9Zyq7wmas_Z%xLTbKhY{NuK_F*4yAnXv?)O-
z7S6CwSEAJK0?IZ@gtXzWL}GR;wppB~L`Tx$nXz4#+-e2|;OdC3Ra_cf@iu)0017zy
z+NnD!Td|RlTK^sQAgh6r+h#j^uh1Iy+Lj2!LbDJEvw?}^9;Q&`2*E!3?Vti{1UxC`
z`v!eiOAXkddp-8A;Y;)sgSQ{Q8cJfRoIV*#nTtK%Hf{Gw=bCSz)*AmiZu!@`MRQY(
zXRJmoRz=61;`=+THIIbD+3H946+2Yn6&Knt>W3lj8L=*b0RFm8GE`!K%xacet_rGp
zCOUmdDmkJ9yi}x^Qz+z-V#lKp+9{}oPP^m`9u-J0HR;ScY;*YtT-rgbsv8g5W!mjw
zz@c2YzaJsf=c`uyU+jq(wa4bxBob9cP&M5f)UY98CRBcFS3=NRI}v^FV@Su8d`qX1
z`D^P!ydAqf1$cujRU(4>#=wNXcT%FOTs50KpK7IyS!m3{nSf?)*Bf?|4b=R&<|gnJ
z$|LiF0mm!OwaAz;>Bc-aeA0*@Hx<KHt$#wT^xj01;jCySaa2(%?D%jO(8KN5gGVp}
z=I}}M<p(|BCiKgL@t6^Ri!fRBHmH<(KXx&wMD_3}pf9>~NQ7Lbs=ZbaJ&yE*#H#T0
zR`eo6_P3x#!Bl~@4}q1%I#xs@SDooB#)-P3Hb=1M19t0bngc+RcR4a9D3&s$*?t9l
z;*syXN6UAGFDD@Y07d$il9tYqj6>o*f^&oR1@yNyWRbK|Zv8AO@=o!$+22djBNF@b
z1^wqF>4Z|5su_`4P+TWBWzyzL>WX{8{pQY9p1ucL_(-BlLE?SEY3{zcuc|ovjv3h@
zzx&)(_8xCE=0r>2gZ|aQ8_&2w()$uEXU&$)xT<{!fLm$#-IE!$^T?pJmC<cIK!j67
zeo0soW|m=|PnE^hf^1R&E~%@*dH#DBeVa{~fY=D%>b-R*C~Lm&^H;w_A2ZhDx#v-E
zduKPARdUU{b<q*o#z>8E1dp@~DbrKFXs}jq%^*NElBc?55f_8FscTYz9q}nanbLU^
zJyE0|ran5Jsgo^?-;N3{t8oMc>0sQxf|0<Af;tlgC#4xdlRMI1;qbLnCx0JFiR@?-
zWBN`^rDJcd+|f+ojOnsX1C0C2ie!PqH_PD@L^2ZUqo?{}`-dmjiDvBGQcLy7m7|>v
zx1euoT2_1q33(iQh&@d&HHR+OLXxpmAc{AKzvJ^Q=xsUgj-X7NcfyzZ?X-)r>322~
zL@}$`Wj0f`d-?3#Y<6EQh(W+-_(c={LIk}t?=~Y=-nR{ddcGOTi^NlNkw#nRW+q_F
zWNpz-i4|boM_?)M(zw@Fkf2MVv<Ua>Oj4$nE<TjUHc~|{JrJ3M!vxDynkFxY7~Y1u
zaVwM&967?S;+jb@)wuBf=`TjDmbG|?;+(l}G48&A-idQ_!vq|tettX0JFF4GvGlPd
z%%+X}OY-anSS9xvvH^MtM{%>zM)4e(Pswc56J66LIK&WosTPfKRmj0f`@QWuxDm*(
zhQl!TJ1woC{bdb4oASH@T93H&huz8Wa4CB@)US~_DLm|Cr(3-*#C=#X!`33$52AMp
zQ&NfB`5(&Y2uGO44GX8rT87X7%Z3~oD1#G_Y_}!TO4jKJ@YMmgQ!4G|b|5C~y!kAw
z+QfhYmdGtfo_76Vs(!d-bU{Mx6yCd@?9>}5EuM&&qC1a+7EJ;l_ku&qj**Crqaq=X
zudtM*6k82!RGrlQDr##MEGA~&^iM^QhGzgfhx;d?Y&f^|!{cN!;m84vWA6_I{ZWDg
zm4wea0+hyPb~`8}Q8zF002^OA0;OjVXz*yy7J@lEhVQJEqla@0i5>J{ys|kdk!luU
zpG+|eGbfS8tgnz`rCF08?JArb^Epvy*g_rfzr99Ce(TzlP%do)i1%qGCi|aT0?%={
z)@*DACq%JOUcdA6E=eB}%F&wIZg+zoR`*0l)tm&Wud&<-Z@p?c<2fXlT2YJ{yqE^t
zC}(`q`o(UjE*xdsBRI|N&I^u1p@y9c-!9B{n8!_HVb%XRWy`^b{Q9~Q&zn2vjXh5A
zLpnlao(ZEcYVuqUKYcN6r;_0XMi8@iV#c+rJ@KD^`6{x)QIkRWdWt;0R7i~^fGiLz
z+orL{C6qGMb1^lq`lx>W{ytHjc#|HwFabU=BR^(#K=ijRQ`Q5aRMnyDz4)i1!s}S_
z!hd>z{CYqKwQpn+6~Prf6kM-$J-dgA9(U%hlG^C&2&I0|Lk!f)q+Cna;e*y`$1^1r
zET2qjEf$GxTz@O)f+_!EOw*E<ft%!1s0+COt2$PYQD~q1V`hQaho?%-t>0+;sIcHF
z%}_Fw%fG1@#h`QyiCZFv1Y|ejm2VV;w6QrqaMiAHb5(BPJ>9^o{?r*PRq5wD$#jMm
z=g_F~%2ivw^VRfA36HGeK*f`-H=awE+1nL1h2XRAna35I8T^)}R~YoqH{mX-Lx`0?
z?76ZR!ApQp<^oU9p13Mu6*u-0|DkVz8ezcPN12^y_JYSHA5eNbOj907a|{3}jw>o6
zY>i&N>DZ=sv&`t!A)?<_I^Tx0cI26$B3Fp)t1rJRv1t#p*pHdD_3O;mH&0Wua_?^K
zFp*km_=bz#-0JLX+6uCMNW9_sGLO)t>B)ve!rL9wv@93rK)la?F8mT#6NXQfwae2r
zkeI4Ur)xZdZY2LZoth-P->ob#R#+sAr;aJj$*X8}UUif0vCTb7^=3Uit>@su%>pwM
zt-w$jZ_9l{V#wB?tai3&i$dcgJYW77XENE#8yBQNbIB#<6uTLEImK@OJg{tXM|y?F
z*_wwa{0Vn{7){?XAjp|V_t`w4fQ0S^S=N8L^MDlTz$?!v*nP0A!MR)%BEqZT8)X+y
zfb3-DZ`#06|55%)VmeTjeE_bz*ptX8rstbR&)Kg6&_QayasLtYvv~=x$@s0__sq92
z-I5MvqV?ABmvB6EDUUs5Ct*(siRDr6GN<7M0k}}UsiRPvV-$<g>}8NhS6!s5D@AD9
zPZbru*8VYcG<l^Oje}Gzz@c{?agLnRJg3n4k%cD5qH?C~x8K~y_6T5<ky2RfSW`kx
z<w0Y)o9^@89K*`XcKUnM_E<>%=M0e#xpZ4I94==-a~T4pnp6cIa-}@E!~d0LkQ($-
zKJsHA2NnTLpbtY}b)q{K?J3#|j~gKd^pG|1V;BMON1EFn6_%bpIx2jHcpxj&?4m{s
z{oM~E&&8<gOfvm<&Ud?IZ2aw>sEZ7KAwc0n9+z5|>otbwdZec0qT%Iq?g(!Wl+ZRB
zb$SWz47(QKz|-Uq_%Pjf9*4Oe>AntXse-tc4wIXc19Yk!H&Zd``j;BZinwgof$?#h
zN-#pwWWx!lwn}z-F5I|qAnr!vURlreB7b07+YHT6F2lio2EN`S*0<!s)4L0or@^Nr
zVVZsOK1Ms);M_^mO4oWTiBc3K7buK`*VB~zqxKQiJT?zON4(x0>D*WU7-w|NXKT7s
zvE4_v&#RYt)JgD4<$INAFQorqX>r(O@e3;1%#5xlEdvW!pUdO6_R@I6A6UvbJ>E$h
zE{YXicW+mO?>~uqaOfd0tKZk=15P_*Rc{THP{ht;E8`cB3c=*eK831SScTaYem;(F
zKhipRc(wmfzytdn6L?6F4oEWL<hJD&q+5;q&|-bH8xR4I3_;?Q8J=(Cndd-MJFI1b
z%ZR)*=dP2~&K{!S8o!ZLwpNvIX?9W^VIuaz@}tY!CcE=J{bPngNsjz(C<*7EpVwlJ
z?dN(NB@YAz{;t540*m068F_pd81PY?z_xfV+DF>)rp$m+tsZ1-wLq*Fkm-laSGFDj
zu9zjLJPp2U8ZntvX}Ed@Jk$HNs`7&XnOFm!(xnF`<3sx&tv@2Ed%xDvN2^qNln0t8
zSrVP%0EgMVWBvw<*ju0=eJb3X>PaSJ{Mfu)=Y*k@VFt+JW4<&sIWJR}F0m`>6B}lF
z+}tBAWa&$}DFu$?lv+Jh`E9dd#fCIP6uIUVN0t5%YuX$DbVrt9u=Fce-%~EFmZsb7
zTN7~O5$o}OB!oi80rv?a^oHm~qZy&u^_{Lv)5+AUML2=Ox=$t-?M=<?Mng^X=c*yS
zsvm*WeiGnlh!dLO0_f>Jl&OXBSpC<qLUg_RguVi}AMddjXDbeUKFa@&!(Uc>4oKm<
z(61u@Xv_cQnI@z98!`46Z^%z#1f{gK|IDx?*>*0186K>7x6**Z*}&%zb#aP1vhJ~L
zwlZ^&1BsOfd?ZRbiwblkeCR!`P^vtmzFLe{1{lG)8bA-YH0A~U$I`s&bT?`5T$nUu
zrt5HoeQfY8!MLcB0ja8VP)mfLAdNuiDU2h#Q=C+v_xK4T2`DNIge_I7FLA4kG3h$^
zc&JSLNQa=^_kTMk37si&=v7*>sXj>H0TBZjm@NXCk79x%dkLifQ;NVt7FT3W{KeRi
z*`0JE-7PYM)oI|Z)2R9T;~uDK*}XCDe;ExktB={ent_xFLhZh7<74i6$oEj`K$2U%
zFiy;?wQuE%%<Lf!WCHAoCc994QmP|pQ=sp7ui|Wa)MYCa04!O#MJ9`MOLOZ!BPXrh
z!=zmVlW&K>Xe(=~+aAKia+{KmXd!ZdVW60sHUd~E`wh96@>I$$Flq@s{RX$5;~05d
zTgj{H!{h`T^R&1jP$qi<q^$jA<^Pd!z1YAr`cocUcxZdjRZ(L42um#SH*-S1Z(jvp
z*h6o$f;DS(1#CFBl6;>?5j8vQeem2La7LeF_|tL%`X*w;A;HhvGaB171-6ByI-(my
z?QQ4^waSB40n}-<%i$FbBYj7hx*Ym-(ZAUndZ1hl#x380q$aqsBCHIEJyF8E;wxW^
z>uy=mf_E+Tlr2m#tSF^X6HeSt<2C)*)51Z=OlW*grw5{2RY4bJk&_nq5785bD1ZMj
z<C8fq=>YBn<EN~7n%hocWik}%HUl<v4Zs$UKknv(#ZJW6L;{!~NN{X4biOCmCj?Y;
z=z%_&a098TI{pwD)J*&1STiwUn!2MOrN8!uZ0z>44`Z$cGR?Ep04y0I;j9tLXU8Eo
z#0KYC<EjL3i~MsuL2WvSHhE;JtKr&VJ5GEk_N;-zgGS{2zy)UBM~3DqXPDHch6U}P
z9^oz-RaDmggyThKctBeH5&L(Vd3sy4ji34`l<)Z7B_%EM#ytMtD&g+h+l!9%D^4x4
z2fiFK+y##TwNNtMerZ|NV@x6oCkgJESy^3sV^SrMVNFzmNxxFn0Nl)b0F||uzyb)s
z1sS^&d)IOH<QWTP`Y7|2aJ!fHj|L%HSTbOHeY$yVr^*+R#GvX1o+HH3Vh8~Wz5BCh
zdjqbeZ;aXEwG3j!lOvKi;|wauSaB_xGu>j)B~Oy^S~j)G-cT|gPrXWSw}Y;AT84!}
zR|5b1QL9mePC`r(2Z^@yGK@wM9lsZDr0BBWTQGx7-auL53;S{;NuX}H7*JzKMDkLt
zF9=ti0C#6LLwyl&r5t_vC{Mh2_9$2%%d8IhrvRuB84k$yyU1gM185;-I>q}_0tX)}
zjo>h8Fi|x(TCEiyus9EcQ6ShJI;VWwTNkdqd`_+;IB6=jHHfxve3ri7;lc=m_+0B{
z!N!4*%NmIu#`ql+B9O9Z2-M^2FMBmFcLV$!LQAd4<LOfR9dN`s6W~7=j3}~r0lDUS
zG0W%fSdYf?3a#RrmLlr16%RT&1Upm-Kmu-2Wr^U;{hFo1@rc@eX^QJXbGbJY;F3-X
zPx*fQBG=_9!JbX}HV~E?NY#l0P#^w1rWh*TZ}Lg(p<wsFND`I*fHyJH9);f`#LtY<
zn1P0rbKJk1RRJ#__hB?91u{+h;_X^=SIgb;w_}N$9_Lwo`vz=hu#fDZLRwn)<G^AI
zS5`4uyXNbPLbVzM+m}NKHnSNz;M2K1R6YsSv?3Q3EAl2B`sOO8+-tD6<OZy;9$yx(
z5d_JHRe2i%>XdZGi<1tvABncXb>(0lXB_PLa1|-=sDUZ0uNw*rAnuwD*?+AYzWu0I
zcTEqP+*F{C`Wri_go8(Tnl%Zi*w_$A1J--3%c<Gx$vbu6O9<z;OPdo93_5B;|2jxp
zn}`9pXeK|J{JvU=$j&6sQs2P@LnRz6jh*Q99$a;>pALE@Q#d<Q*7QS-JH>va4+Ko~
z_))fB<!a8Pyy1Rto1mhFU@#<jwhJG&yYnh6hHs3r2#HK63f69PICCYoR#Z4Xoi1?O
zNT)q+$Z|<c&+X+tLij`S%^5S9t7_~%vf<UWOndeZ`74&RD}pzC6}D7g?jD#VyGrne
z2C0EbMZR@%w;ldDP55UNSYqZRR?>ud&nd6};?Hs^H$`Bpo6PDiF;QV6g`0b(fGn9c
z#|YMqFOa<K;T*dX5S~3g+CQ2{@!CExhxo1&;69U$^&F$aQAr}1N+xSOaFm5o<ceCZ
zE0Qy<o2gUUNOx;`;L)n~HJs6|TEaI3>Ful~dx1?f66*%Xq>rEHPQa-s#*_;b017H}
zap9Tb;_sC#2MI=;vQvS_4OEo7Sv0Rj0d_7Pv>HJ=335yMbj1;EYk0Hl(Py&SklU<d
zioEX2j)Mh#9<1VU@E23k;#XkIAzC{;b-hm?;BRU|zT^~^`s&Ty%^WX|w)`un%jpvf
zl%IsQ0kr$6r+rODEMK2Z&fmCevYRNhu6bA)ZlU~sMQB`BfF9#f5i81GR`@T}_`Y|3
z$`{lh!zS4to=ci0EP0{vu{k2sioqHz&XsoU=&O^*S}fsgmhpB=_46)SyF5%2-0)rW
zGotKnKR!$3mm;j@A+)02I1zd=I;{ukc0NnSYZ<36kU7LP0qEG+5koBc`@qJp4A4lo
zNhEH%;1P-&0h{ZyJnn4mjonbytxZfqV^!l`+Vv0iW-=MBqFUSUnd(yz6QH>gQsfq!
zTR6C$1K>QeNZ0Sy9vygx;8?|M!)%k|mqv$8Ci4U72tBJ^Shtq&H)(9h!4p?)MQgEh
zI0yhQkutFm_H_Ueu51dB{cb6BXu`eb)*=MWP?J#zkgi{-+rcRC(=|uEyPawj&j~N}
zqG}$Sy-eGRWNp!NSM0mny#k9$RrT&Pq>PTPz`*0i>L$^PfaNv9L!JE%N;zA(!@azT
zV+s_dcP>>v4#`7yqBfdO!t13Eub-C|C44ano}=f}i0lBBGT7FtA-$Lk%FMOm8LLe7
zH!BFo@f6h=*#FQi!Dld{Swisk5o2;J#);CmeGJOFtQTX5YT~ghQv|kK(q1;$(Gvm)
zRZmw2U<Y2dvGCfSdh>>xu^8Z5uN;YwBbbnkz@2E_0<(bRK_W(WY*oMcvducK?FOcj
z*&X+FcS2MSw;MfGZ6IOcL@iY`7XVH`vA=0&4HQFX|79S|D&AJg;_I>5McyM=f7~m7
z&X@`wm0|4$g4cEqb|WaA2atZGUF}eP+74p$XI@h0%KY#IsnH#C*gtPUOm?gA&2((;
zg%XXGUI{_LM~VF(L-QdLZ?tAM)IfYDcZk!*zKKfU%6$?pN%kBasA!x08F$kgLKC=u
zPlPpH{dpMOSvm=j&}4ucn}%6Z<FV*zH;Cn_eASozOo`fd-_1Zyiwo&*@iojTq(oTh
zv7#VhX=e>v&@fDjqf0%VYmY6+XrtGcnWBkH4_{ZaKMCIyOqitqqC&z9jJ`wBt?UwE
zwIaD$&{DoH?eD~#{{z)goL}T|-!&zE4;anM_}!z`F@jfJZu-MiM8cC8jV~$E#uxG|
zm`jFROyWRJp*SCHL|@3oE7ihf4;vhe1{me!bMlLDZF>MyYdd>_^J~eSt%eD`n_EHz
zB%m_)*OlT&CTOxrX0Mg9+7xnVNBBEJqW=Gi-&}iPepD+Jpr?K!U66-%pGC=BrY#ui
z(ZDQWDjDd-DkS#;cyr-#nUt?jGq7@PQdyg$fGC%tj5q+|!#_(^;sXHRaEn%7+nOE(
zSsq~&ZRxb~92kfcX5gA@Zn~}RT$chl3dcd|fBViW>ai`LkZ3D>y_)v@nxeIic$n4<
zNt|AyILPTgQ^Z^y_&GwfJSjMfG}V;iZz^2>%3xVDpizG=Y)(Z@gt-x-+z$@!#gE2_
z;CFF{sm#wVn);IjOSUzrP)PBFM?oh|ohH^ui8b3LCo0TmHAXJVvi!<3C>m-AxLsF@
zu=E$yirpsOMfEBL4>eO!ic&Q=L?Ss+S|zjeT6O&%``bb47`1Y=)y1Zp^x1KLKPHT?
zOo3=B=qx6*r05Mu!1AoX{?;EO!%$nBQEGeUBnMty65Y0K^P_@2%O@(`gw3aF4Vl1=
znn)CKR)yPhQn@RfG3#Ls9b;`VMaZfQx2%}_VXz|(r0rM7A#z<enoko_y2~R1scwUP
zmYt?j<CIua1)7#Dc#(=%;!eTZ&p^0c_f~OtC2L8)6}lm6xFXxPmFGz!4W)3>5p#lg
z?AOb5*%Z>OS$Uv&h##C%b&kKL*#Uiu$LCqfp3JfndsJ}^GZQ4M0akKi_jf0B483;^
zo=R@RPh2?6yHSQ8&wZ)Qynw3u7scnz5(6W0@*Qf!4OXf&y$=gb8Yqz7)XpfT$+PPl
z<zS^hma$eXiAWuG5}>6x-uWP5@%Sz-VC>$VWDf-~d$ln<*M1xSVbgywk7wkXpm;&*
z!2D*iS@W;}tc<N~XF^B{pbsM87v<^z=lrDGf1H(288$2jD!4=CkpWw|)6n%KrFm0B
z%9EX^*2LzX7j2Y~BkT$>A6%gd3nygaP>0dE6t%moMOVrvM)O3tg2hn+8{7|Igp(74
z{OUu;r>R_ICA#+vbR=>ZgEvWe(8i3_XZOW?vAg;5o`zUrX`trxkT@n0?zRZHdp5H4
znfp+Hh}Z|Kk!?CCDbLwARv88=0u!wm3msy3->#J|YzG>A{q;4~@Hy_V`ioZ^K*(5i
zuG=iHF1mpx-@1w6!RC#?oY+zeZk__7SWj#E`J)eZS;yz0WJH^d+|^VJ3w@3<HVxCM
z-f;>4QZF^*FCh&=@*@Hl85UK4KHqknY5?W=3kZ2I1=Oc9e<C3FVWnS*xooAcxk$Zy
z@=T4PWV}HZZ1Ukyz=EV`-x4t!y~Av5NNu81=}rXI&3Z`RH|{nJBOqPl>i@-Vfa1ej
z_6sFGx769B|5=wWc1H-KpGw&QE<k=C2+&xJ%n_;`ID%5qyN-Gr!AQ`o{8VKzff%yB
zqU%RgH)vp+GB0=^GBnT_AvjcMa&e8&k@OPsMsSkli@5x?BRkaj;ux)-Fh(mepTumZ
zwGE-f%|aEU(NbrQCgk9-_gs4D=-d%8WvxwQ<J{2ZbJkw44RIyK+anxnILO~qIYE%a
zaZEOeq3Tf1-{GAykfZWf&7KF*g;L`S^?vqx0~>5Jpf3nxU_EL|;R)wav4c(S9Dz9-
z^3#gQ%oIcn5EEeb+pILOhg{-#;(tq+PjdcYUiy8pAqr<w)p@H8J!GhTQ$;oGrr0Wd
z0zH1QFPE3dT&X;&yP@KT@6wANu_UH|x^ongrbN1*@=;c4yBh7Fs(@>IWcp6Bq?7yg
zYI7J>K$`&60`n*p+HX<{U#J{}svq2~H5rY@iE0n$72(HfnM8&|SG^ZtEkceSGpi7J
z*$qFe3Xdq{AkX}b9L$(2wfi5;gUsk-e-lyZS%7q`(^f<9kLbOP<F)sm&|O?#{96$H
z=tY%R)r*bDj6cA_9C`y_J|f;2Vw){x0#6JD81j^H`yGk&^X$UDWF==QOEC)|S|`#n
zWRuwx8RuA7m8|~xmW;*tIs^I2!(r#I9>XStI1FQCXY1<ai&m+Vn*b@afC%ZYJ2wk)
zy};is^+)d<J}iBD%0-3RBd8F4BPda~>mST39^be*V1aV{30RCTQt>9$>TxyFCvoXU
zeXY0u5w7bR4*QtofZ>7QaSN1hKVpJo1>Fo69U-g1?7VRIaGg_XQmC>6mYua^5hpsU
zjF2X2y6gl))ICAEauLKBvL>~sW*~e+E5eCX5j^OItHgu!f(7@~M&^~S2SUy>X?K;2
zv@_ZiAl?wH8xz1x_G0}Fqp|shuwL1HY+?qd!XsWl=}(2MeJxLQv**jlg~4f^Ztnfo
zYKkyA$ZfE;dI!cyi>h0bk3$GS=SuJ<U32a1ZYnZlAeM@&YfcPL@YP#rFjb2lPRDh$
zG-q;3{X<n{x4Un=3~{77(O;8p$%kD7D1hyVbUO;GLVuMPvQ!(y%L-EJ*%P};5^#c8
z+#!H2BF>vwM}J+XaY!zz!Yj)Sd_v&58`OoB_@IyDG7QuX5gRIJeLO;;_Y=vQux_nu
z*zjh<3DRID>QFJSxc(4So?r(Q$D@p#ntRJz){wJYlQ1N#LDJ!Ub>)4Eo~m8NU&qk-
z99gj}ob76299udzNz$l2i>)oD1<+<HQ<Wm_7JL5M>#&ln4Hz93u%lnoPe0gxXLSh-
zeLN;)1o8l$7H-hS98M<5(5RqM1bfTskuqt+-Syd;67sjOps^A#X`%(|rD}xVZ}VDq
z>mqxK!^cQ*h%)DJn4vuMbH5jkZcokALjAfc(*qRuQ`bwRF=zv+d~H^SVydM+#vi+8
z_Ii?>v<J-x$oEf|o*kR(#;P&e6_VZuS@q87^{u8<SBs(NaTN)7dx5HX^eS&1e3lTb
zh+J1j6zR7|{ty@qS(&rB^IdiOAq*+oXqdT|a~!kAU*gV|4?nQ_@^K}9N^mI%FSyWH
zZg)3iYfLoL)-Z-WaK|zBdl-!Hk>hZH%!=_cR9r#f^H^s<fR$G7+d~;2GIrwB;k5kK
z|7O)4w#z5fQJf!5&}vc$8SWTwO2tr{t&*x!xXD=Gsks6c#2omY(0#Nst$fs|Pm#Vq
z1VHp}mysx%q7S9Z!-Cw{On}w}T>SUhn-bXM-;(pxFm;I=ZCk}hKOXZ#l*?Yxpzs?O
zLpvVj*d@(iLk{H=gZInRqJiSTW1?qBwN|^NA>9%6g@`D*E9w?JWTHHWCY`(N2rg<b
zpGI?N!HI-cA4t1l&tR(08xq1xiJtyH=Ztkf+imW>H-R(Z2*k@ih`P(#UD&ZJZUD&&
zxlX_1Zcaeh@qy9Z-$o`WaFJ5{s1`RMxt0TE4@)Qo<z+LwF$@D0*@>9t63I1upMp(G
z^OsWU-6Xe}g~{0Vq5`f4X(-Zzwb5LhxSyFZt{j1mX>crtYj)Y-^MtG@J5`68-K54_
z@LmBz>448C<y+YLB|1;~c^mPCnY;f+3(vXbUi=--ERsxsNL&HDy(d#2W<QC{^k9M$
z7outWyJp+jEr{KSspWVux!7M6$cF6;>|CM;X?k#4H(|j^AmY5Oz(dPz(lscEQ-rC$
zic<Lnn6Dz{hLhLYJ}Vu&OyhB$INc0}Pwzq-@+*i~|AtR@H9!iueNJ^rgDRVp;QHXr
z{9DS}3jfpCww}rh&j=ztR<i`L?Qfq70*6Px&e&9MBvRSm9D<g71z(CuO3!46bMeg<
z4$S>7&Y0>PD(ifF22-K&Y<62i9t<f;%(MDN2!Ra7)xJAgpxKVU+K9mHnx$1j=U@$i
zbHWp@2U)<s1_>LIo{~;=Ws&2I4G88zSGB^tWE~qNi(8~d>Is;N2mU;~xZxI}w(fT%
z{n=MGSdrOqtu?!X;B;PYg9ZhVRIxTk3-kqUzID>L>RX0T4)%N~cUfe$9hlE$Ci6nD
zy%9!!926)}-Hyas6Y#!+ixKf&8U++7->Pm$*t^p+a};T5zx|s13f9YBH4{N>$rLNE
zE&q~E>fXin4fO&Unm+<<VbAs=^&u9-2q#P(d!)YsPt3I4Ye4@y8DpIlSIS_mtf^wv
zN4Dlupe#@-WiF51Sfk)YvG6SGg6%K|WtjxH%m%j8w@b;sR7rs5gOfzEvwZu$1VjBu
zIC{yXBaLm&mwt2>GB_L<Nb)f<_Y(X1zhD8ui&I@iF^(g<p~77P6OUB%?<l^xnFco_
zKxYAg=E1-60^K=TR;D3yQRw!{JReQ{&Ansf@~;}Mu<-=Vx0Xj8+LG_Y_rHEXKr%D9
zd<=_Yi1Ti^>GAcp-2d0R+*y{-tT583eYt9CKJr$TxQ<)Wo(TIN;pRkxwVO|MP~9?p
zq=^_h4T%(J;<~vP&b*=m9UyW{bL&B%&lyZ*e14p#73i=4hHyzdTS2t!a5#~N?a{LC
z?BEhBD=KmmX9gBI;S*mv<Brk2BkE_bxk5DIdvHW|t|WN#T7WT12bRJPb{zQXYh(M^
zNAv83`lMg5J^zazR8Rn2?syf_(bAftq9#gh<U5i!Xv*;SgC*tBvK9)F)W-hN%8%%9
zgLaH>aWdYji2k@wc6`4CI#&@yV3M%Rip!=otr<T?>~v@nGrPRc1~Ey*A_K}?@>R0@
zzqO*9)cH%3EVInASD3!zjB`w(dLr#`c(8iw%7XKY2?tM-%&PEJCD>dH|J$~p<LD2e
zgqk1eU6JDE=o}0r7v6{s0${y9F47(%oZpQ-T^HpR5jA4xgr+FmLaGfPpYxdtS`JCc
z-Al(fFBy&6hU2?MR#hjklSqLEDEPzCmp8cISgasBJ%pO&N^TDx02IVz2_0zc`m!k2
z7f^9qSm5)Zr?G9pwVwb|)<b7}wrvX_SMGIXnuc5ARS|^^&;S`vuIq$I<-?)x`yksf
z`e-ap8A29fw6<W!HgaYAywtTl3yTIPGBL!?kVfj`G3;HHS-}4A*@tQ=%UEDqzOz2o
z{IBHrwf}h<FagWrHhN>PKeM}q)Id@Wx!p?Eb~0^kN;8j0COiAzJFh6yWCy|`WJTs;
ze4PK7uhLg9rbZzOAmnA|^m3SDamMO2-vQ9$*HhdviaC~((_m*OogmKoUoj%WY#-}U
z1dAS&YIpdq1UQIprKH6Em6P>%iC+1cug9*44@KT%*Wx3`3QH|{l(=@E=K2#{GcK-+
z{n=#bfFrm?a<gm*yTc>urpX{TrZfRmk>&155>?kKXxKmcYgV}ly~5>qyk0@U0oa7X
z^HG>E)6KDbi;)uVQ{9+#hJalGR_=ugf05$9&JN_;mb$nXaWw*%k<(+7_sx@-U?!+9
zNx>{A{V8!aBne%06+cUn@L_09=FwNDOchJ0*;Ol_iyQ3b41*Qle>JN%vMJ7SY0tD8
z;s<a<V%}LQYUn0Eb;O12!5Up<=(%h2fSnO#Aj!LJP_R7mNK5F7zP#LSU#T`<divt<
z--)4)g*EUEy{eQIP0!FHA8C=^SzH@ufr08tJzijdg{_#Gus<oFzPT5vW5+E^DUK6m
zT5T$X)m`2BLo?s9y`KP)Lw{an@-YjL{_tkNI?pRPZY<ll1poimmU0_YvW;AU2@n7Q
ziHev>T>t<e001VIh8_3v0c!$vl#i#rd+0g|%7YitQe?uI!KOSdS4X}rzLdR-+;1h9
zuTb&QTZK~L)O<Zmbxo%q8*}aJ0mX4Ia9^|~Zyuw?$nhJ!YTn$d6SG?<!D0Df1|dBo
zFpPp`l?PNDVsAaML=8?F9LA4TW@uL;N&vS4)7xdIQ^CyN608hz^fxq3R)?>p{a%Hw
zR|sG$>)vFZMHk%=ZiMpnIQ^(<L3OR{121(zE#IE!aIyE40ZC$weOPGou(L^3mYnvL
zm6(S}Q?8w@O&okRXYjZ2D~i_Kzi{?A^eop9Oq-LPCG60=qa3GiV!yLJRf#U*$DDYx
zjjj{E1DY57$SbiiaR+BpT@8L8EH{_74`MBAIs0T7Fra0+Hg&{!K%U5G&q2zN^md=9
z!)PK@*wf7+>h2^z(5$$n#2a)U8l}sW!^f=bjsS2%18(cQ)y5)R_RR8S`JA9x$jSYi
z;pkad+3_+wBg}wttJv}8@q^|dC?%6C(kQ<H++=RX&Z7|{lR}9%z>tHOBMfVyhzVZZ
ztws5~OGXT^gS`MvZsrlpA|rs?uDpE@5+V^c&A~T9=K^AwoGpwro-25VtrQ}0<621C
zyD%U<yShNCH8%M+<hPl(w)qO217bXLh71YKsvUO!5(%Gf9is^>A}BZ_?Dyv>06rxb
zYvp;ZvRWeaA@O(RLKB;M+;+U=?uE%Xo}&g>^@6YKEvP014P;S0<UY7vwp?lOgW?xq
zH-fR?f^v>W;?-Z8>YKRp=I9r_l)=Wyp*6i$m@9?w@x|4JYFulBXj@;OzSMN;6AZx@
zq`LP~p0MoL)Kpd1+ChWrM<I3->`yVpcF)?Wb5~3W7f`a*8j=u}k~!y{%?b%FBlKs0
z$jT!g<;I(XR!u*I5t0ND52zH@u)K^Qeo(LEDo$rDb|7jOoi@gF2a{c0UttksKgMij
zm8er02v*k^n{;-EoPXE}Yv%Jo5!e6y9~_P^?Wxk<Mp3LAGAoWbVwOVQF1F1iHN4n0
zib+8jurrJ7|4?2_i$X0cP;=Caq95!Go7f97G?I!K+^-(3A2x!V3=RGfc|GrsO$f_v
zPjYY(SRcpFB-PD9v-^=y>={20o;`WXlD52B?^p+2>GXH`0!QFMpJw)4>3h{9rt2e(
zl_Kt{>S6zsY|F~i#`S2*NBjBmy~lmxi#$xAky4B)Ph?MCb6DLZ{Y!v)cef!Mr!D}}
z2P~!D!kTHs@@va9I+8IUYD_2Z9Gg$xLlqx4qSYW^H1>IRFjlPx$#we?YCgBW>k;_e
z=8rLd>>d`_b7RBCjEVlD!5>32ya|BDHJXs{kYBONPOaM4ZoFwV>AK|$!jFeEO!@r@
zkoLyp&Pg@vtu`(S1LxM_xt=UjkCK2dx-=Hib0sT<NX@#$ql087W6{tbl&&$c*=E*J
zSsZZB;lhp>d)<<BH`-(V^4@ekcd`RT?Bu_6KJKzlYTbb&2&(e*Ze|l!`C?tiZ8{=u
z=&kaH6+jZNEAm1jk=5v|1P!tG-3_=M9c`qeXx?+fv<~b!onU;G!=$41oH0OOZV}$a
z+5B2|#hOvv0KUVex+xF|9_Ibub;x2Ws>g(49{L2l#=swkLfpp(JBf1;{@HY2j8>~)
zKB%p93xp)VB2Ho7&?*HQZ~Mz;Pw-vxU0W(ZhaSpOlbY<vm<`Ye?M6^f>akmk@F2NV
z(Yi8XrAVTe6_~vR-{Xq}{xj)ZGqXjCib9D(j3H}=r@+0<zx+Rp12G4>G`*cahh_Hk
znLnivyJN@rY3h0f$=guTB{(2~aNYXNmh)1<UnEx4E4cx64#!ecbbcG;x$#%&-4pMy
z&#3&c5ymRuatwi5S=e2%Dk6M-!1-s;6!7mMd-mAMmS3Tq&0kl;ipigB+$rlP9ED-#
zxCLRYM;WO6(}RT{iRhXTOpIJ#aA{qBY7r=`-bL2yhhW{<pgO%jFDiXCy!S(5WWkJ(
zN<Gn^XzO$<Pg|LP12>Ml-n7l)6N%-aLhBFIKGW-z%ZA?lr^71Vk!&|Z3A0h5VTLSx
zaE~OIb}ZqPXTDc*dTxuXxye06u=_p*cros-c;Ey+JdUKgTbie;bvdMTvpM?_2Z)<G
zW(rH%;B6K`A=@8IPo}p{nOlL2Lo1bO?W<Q52X*9BnTKQXM_W5zfl9d1s;#%x*7LZ7
z3tQ79r;-86U&;4}V(7ljh`Fz6jB8!drGFneC>rjAq^w9L^!xBss9><}4uO$A=M(u{
zr~Kd9Tfy-zTj|>l0{8D22&i$9MO>`XnMBo2NT5&lPQDepozp#~b;(`jESGCj&G7y*
zJCebhZH+0iIF%mgbeSJtpYef;_<P)qRrzb+?^e+QTe5v4kE^CE23Qkhml`l+!Mj*W
zaWY{s4p-@vY8K#XCg<)J1~hSyQHkCg@Z=;*=50+nYxQPv_{G|6H#^F|8xPTX4lY5_
zD^(g@a~GPQ<Uv}X-<9Ei(m`vwK7vA%zjAnPA^tw&Z)PUjoJ0N}s7W79?|xRuMKdu%
zgRq)Nf+~?6Jy}L$l_b@!U+ATKj9eQ=hmfB5`(2Koc8l{C>GIN}_i;57jV5H)S>nhm
zlY~Hob+l5){Scq%aWJGrqIydp+!eH*0j%kEZE?#QX{<}iD%1Y}>Dvb2=jAs+Y&Ts=
zmR|su<=vX>!Tsv;xS42Bu#*-al}-0F-oQ0|T>TlP7Cs}NKw^j_s_A-G-)|HnC*9h2
zI^UHMAs20(-X6gosD&fqACGcM!bM3V)5Q=1=Ox}c$t^_0epQS_;o1Ts{~RQ74^ES8
zL$=ke{^OKgf!A(Y*nME(z1<dFSCR6CefEBuM%Sl1x-}m~fUw`NHb~(h`X6bidmI~y
zgESRez?Q892GS0VE^du1r4o$;O!M|6l+E`w(^{J|TRj9cetRoaGc(M!RD-_F9%Vci
zUf=1RBLHdu5BoiXU0pN3Fj=D%^EPfS>r%xunLDC2n4>RaY~l#_cm0B5NkX>}sy?X3
z_&(`4U>^UpOfC}u5R<Z`np~W#4}zvK4+EocmAy=pe}FgFR?b@Q$b1~0H`)iKa55qa
zjzgc<^U<aoDrE4p$Ei9$%xHSlM*oCNoFz5YLR}!?Jit{V;*wG*ExoQ<OM7(WInw){
zq5;+BRDw?Wr*197=UHp5eIO&Z#>YEABX6=|!B0FP45hTBOX;8tXlB@DNWZxkCi$$i
zuc)0z{g2JeBhs+HO8nk=fwcovJ3&_r3))fu3Z^H6UNM`!Tmj)JkBPo(bMW~HVhm^~
z4Pf?|d~p}DpnPr0ViMf;qk&_59l%3eQ109v6wT8)Bl1aaE#r`2I@$<hBF@3#SY1z`
zH603M!x~>#q?JAta^atkM7737^Q$J}M}rt7a+rF%*qJ-ZLK}_|^{XrB!2HJ8$jnnw
zflBj1VB5vR&4jmyLEHEs7lJhix!#BN-WaiYh}#z)tEQ-vZ|lw4AV?{bE5&0=h8rK~
zMFEtrf#utQKzGwQ9oe4%5=}vE#VmDVuF=$OTIWwFXHss?*T2v)ux5rSLu5u}i8g~8
zROpiysMtgQ`@tGSHyDKVzFa0U5WHJi`TT_U5q(q2bkm9-9>i{L?=_91Z&^z8@}&2%
zG#4FJKC{%QiwIcCB+&^%4|w!D2p|ndIEhiD3B9<Y<%sg*b)D_W<XU4_LNan(gf{%v
zuzVs6O_}7WyhQ(SwoB8Io)5J-kw0C{yHId3#aN%bZQ^{I-b;eMw!OpQx}dpmU!glk
zBt{(HnWJ*xJ;#_&HLgUe=W<;%i!VGx*`K?O+R%yjJM`?ir{hT$McTLZkA4TKB(DRh
zFC1xOFU92<v{B-l9NVgh4arTgE*(}0;ZDXE#R)Zy75~cdRz(p{;j9_A#dOciy7JaG
ztC6nCZNdQ%UTVtz0;2n<a5vFm*H3#E*Tj8l-#j@|gp9c-rhdR@wA;U`)o%>Yt@{c*
zUf5+G^RRftE|Jg@UGSb|{5R9-7$p&ozGt^)wvvv*5~s8is1j|>zyWcf7cp2eo3t>4
zW+xD)wcd8-g-%EYDkZ-_II1vSD@+bGf@C}sNyiFkNrOTWSCTNy@FqmdsKL*cqy*&W
zw9sbZQ(Xlrv$>%R`LyF^@0kp>^Tr3FF=PM_;w{)T^5Z!jq@&_f!fya8BY(Y9DTmSL
zQx3=}lgdO!+qOgYa|M1Hc=*~9mK*JH{yiCi5E0@nH>s`h=&nilX1J0=(q-A9?`tWv
z``q^y|6rE0i|UWK+TK%!{X3(amIexrL??D=1=$ukWV~*N5gmcM3sv&*>sfLg?Y;=9
zV{5WaWfS&}@nc`4ZF|d}hl9i$Rksn4q)ygrjk;=dk2cm7s;gmR=wt{_mpEs|J`^p_
zlwo$lqk)kevIq{X|9O0a*CX&NLLu6YfQAr98Bf~`V=4QVXs4g()Kg+y61)31N{bJK
zII-dJiSS&?P>+{81%Dv?Hn2s_`6`07Re~_q@Uf4A0BaeCK`6}@nR|59?|%~=|Jz}{
zse8}M3i=7QCbrA}oC(NxdIFWir1+2T23NwAIZ6;CTdQwJFrDw;(eH=!Ycy|{h(US7
zW|!zmiufdhF4AYqS17d5Ef&VHi*#*;$1kYhituAqsxQoDYmxN>j~(PE)C2I_Y}w3^
z(MVkYy40fmilQG5u~z)TP`Z%F7Ny<>Hn-MyG@Lo6U5slzp}>)MhOj8OJKgePzoQ5U
zox#HET2uc-Uwj*vH4ycRQT+|2g~C6+Jp2Iy9ejj`^J(a$<tL5mpnWj}hOblY>1bIZ
zCuYs%@j{ZZ_+Ib%_fu?Z;!Y3!hc8N50`8+9)@evqn8M=jJfqxk)Fc9%U(Cs$0P3E%
z5uTcCXrD_;w#epVL(2K_kS6XsX;Dwm&B;6g_gDlf=qH9`0_9*X@>$($n1#rl=3q1v
zxQb^FRFSN!3ciC{T)gH+XG&tl4l$OB{{qNy5H>Z9_;lcju=zId1C`2Mf+@zyG>ROn
zh!*-UsrD5ha1ok%0<zk*EfVM}#N%Y_kVQ={o<j5K4)hSM8n7Zr%Tj$eS?DcOHtfBu
z83vn+IIwtw)Rft{p7;jlgjb-SP2ht@ChDjJvVGF~?h=-dd%w6|x!UY#{<AKPN<_~m
z(;Y~rgSEUV1q>kH^Cif<8NwxAV}InuKeA<H9g3s~_$wFoN5env7;OUqF*#Xcz7{e6
zr=jTVp>R*Y36|~9c?G{}#O!M+r*~5+Jd{gh4A2c$h87-O$(T+XmSQi-r#t+u&JYa?
zJHW<NU3u|3^cOd1>uH<ZE|*lrJ1`FYsKyfnVq{13p$KTN2?ACryE%s7OIZQ$ca7MR
z$x<O^#jNI7c~qoP6XG!x4Bp<2T%P69PFXX5p16<d1^^mL?4mw~(}n|2r>!Vl$sDt!
zmDKdBt_ERt8hUVChZW0&C4{8Rl)e|_Q5-WS@L<Y8KweNaf7ml1H}_&~gt%>{zKf+G
zA%S{rTL=e~7BjBUEOBfn&4iK-w(JP*IiXIXVI6YP`VA0_v>4}kP-0y$*Hu1Io@*))
zk{zG|Z_{IM$pyy8(`jatz{!4)Mhmn{0FQU?cnR>0CkL@<j4xTuLYv{qvq~FN)O{8D
z<f;kdme|xrh4ZKd#AwRT0);Dq_mGpLuE@^$@DV1-yn`6}3f${k1|SO85q7+c6W%^k
z3n5fJrrDNWe6)`YsM(M&x`@2sD*QRcb$aHm<enoMis!ep6(;C2WqZDhJ-dR~Xw~^>
ztz+6HNRQ4-%nj;KZM783g{5h-1kca$b!CJSJuY}%Hrpj|w~UAGW{HE1qmpYZbWRzl
zOqs?`9=?;D!`$A9!m9N5qj%7+x&UDKZy0$&rc#l+?0pqfn0f0N(wBqa6%siYYPXNb
zr}LW2-<O;n5*=LP>vPe6*kq=3u1^&#tQ(&<{lGuN^whi$y*RI3j%BkXBi%b}ay5%#
z7>cyIWJEqwHp5g1ofKl2ox1)!el7RE&8R>aXC8oAtbu^R@Bg#~+--y?R|mQMDE!+T
zBlUrZNTY3uv97*b;Ng<}<1DY^B4#jksKcL@OZ%md4k?`=6%;~_{jY%r&hO)S;}A~O
z5MQqXSY_!u{cFjG_CByZ)-g?Wbc{cvp)e)!U1C+HR4d_?nE*C~C-H^96~U2gdzCN2
z?{DPi7O>pk3x3mS0Z%p=9K>@}R~6$avuyTqH|94fWTSNh`lP5M%v;XXS2Pu@ySif<
zE2ROA<cw4|rm~8<Z88Wy$6-1ESNWk6Y$Ga_cfW_}(_*J{Y54EaI753k%FzSqISu52
zVy*m<9Zs^kKl_AA*?gKj$BpO-Zy`5fG-jcuSh>@WpQwYuQVfm&;Q-a<?2#pQWmM@}
zkpn@p%~Q;*Exsmeb}H)ZSud6H$i)bhIx7dT6?tYCs@I8sp|g!Zw19<OiVWwczKf+D
zET2IvUHd<8>GLEMng7{zkAp1q<G27v09y?ULzI0{#cabPZbm4K$0c)e({MQh6RXb+
z)_2K+b}WbY7kRU`@=p|6%cUB4pm8Ko{MovpmsKp0hEUa9AAo*Hsg7RN-f@S7>FVJW
zs4f4@DOHA^kk)Iashv4d^B3)2FYzHFak3lr28`eA|D^39z}VyNOq+UkHJh1kqSrwQ
zRP$ZPYEn&Ye9NbRcq;j9h#(GfSCv??&>|USSxnehbgKOr^MTjFi~XnzLkE*XdxM^N
z240jldSadC+2PuFh+@Eaddm8ZJE93)AuvHkM>ByOh$25mX<BD_IeD}_bKbT!oFtd?
ze4c0_)B4cLnr6Q4&|s5io6xf#t`SbCod>D>71khL22vhKkNuL%?-`q3s4B8h#UO8-
zZMHL`_;7+JLzm-F5k^@{z*3rTmj3C|Evhj6h=USy=73FH-Wl7VkTHqvj)?aZjVR!$
zSRmlE{$ctn2tTMNa{wY1Nn@WeljlJ)m6;hq!ujf5R22H#342RtxLjVa4i@;~+C7zW
z!A{2Y#@(&!)0b=oyM(t*)&YiPrX#kHT>^WCjzmS&s6oW5J}CZvuTUl-;Zw7A4v218
zH?=zf^~I>Ce!oyu42#>P8i`*^!{&-Jc*>xxO3VDk2fA6Z^1M~)u=Ho0j$(@TE;w}}
z5=fXaI+Rh}BC5Hw{c9%vEZV^ZM^Axi-h03#t$)d38!2HSSy*|3S;pBofXF*WSpIPM
zTD(d2)W^etjndGTQHI#zHl69}XuwMx2J1G_!f#;FXAdj}K%dT$*ms?;#%%yTWhf>D
zB`AMhCn`i|g)EYD9$%7Bnb5E1bY`ZKa@7)my&;`B1*K0+29oWFO%KeO6Vne@t+4hy
zoR~;OW<1A;Z5S8@;b!wuz$n*;+-VIC^KxX52$_V{bgf}Hm>DHDP%iqJq>IU(sacS&
z{gaM)Q*XpKIRPO1%yKNkck8bUt7~sjnr&~Mpv)Vl_(-`b%C*e5ZKQ+Ul*1V<mPPK~
znad(tN(>a-($pH6tnJT%iIWPRC$x}*m#Z~wBHMdy?LPqtPBFN?isES(qm0`1;>6t7
z>x^POV&@|dZwP4v3jl`<HZtcTZ+EA{63~B{p{Yzewjfy_BUgmV(L>EYoj~gMy{NTQ
z9>E|J8S=AfU0l__`!A1&;q}gLXtw15^QA`p0tT4=tuCE^z!0>=rdJKCe+SP6#UZ5M
z&Lh0F`dq3-OKh5>^U5shP6zZTf073P%N>|-P>dUiUM7=W-&mP!CRZboLluC>4G1Eg
zdkIG0e`xu%K&&1Sf2Vj*1^adQ5PKCxw=kYrc1<z@l({95R`7owuj}!Iv@1xrz-wVB
zN$M<8)U~duRqIwd6MKnsI%(6NtD(tR@V&f1z0)bIj|{dFe|IXBAqC6!bz{gDA)?he
zn&O;PK|0G?huYz$t6+#z*N6^tb$oWSl3HApQiPCLQM$qp#q^__U3P?N_FE_al~GW;
z4v<1Az61fZLVvv`*b|TGn5M1dk)j+Fq)&E0R3xNihi$|9dX&dupPd5$k>XMGLT61n
zAv6ZEg7g~~vAY()RQ`o@V1m>+xJhW}m1gkR!NzT1JUa6Lwa&idUb`B@lSM7JM%O4Y
z*d8gY1G4#3CR9nx0GlI>Us`47QftgIf;!azM9@(a74xd5VbR@m1UH&vHlKK<DXT2+
zc)EgAISf+1L~&U>{&Gynk%$m(H4g|b{;kd1&>+cq75pRd+yLe(?rK%{k35oPesRpS
zC^0|)J^TAq=;?8vgH?)`U57y>;)AGM*Ad#EG<S1@Pc>8q;zHobxg44-%V{QS!S%Vh
zfY>@wQ|>F5zcz2Ae*@5c(_AMl(|bR!NL{fq;Co?l?}7N^@$C|#Uj7{8#oW?gnekm>
z06OFoa-5vZ2RqQ=Myqv0SD0xYPPH?nCx9aTZM<^vxUVd~F1q-dd5(sr<Io~$-1}5Y
zzWJZP7_@xO<vPB>C+%mP?%+2eA3%obUeA`h(C<-gb1toz=h`5%O-Z@@UYn+`3SrWY
zbjZ1MwbC$p^<r`G1s@y&<+3I#=@{G)gR*8EYDIJ87y1tY1A}9h%;ug%x^27)MZ{y^
zcSRS0go8_@I1!8`PLt^{!=SF<{{<sohP}uko6hsMIED0Z;|gFtA-tkw*B83I`rbVa
zH^_vNz|65MxyHRh$cL1EIgX#6Hl~s?4`pX0V{jczNv@PZJ_2i+t_n2~?(c6`!Pg7a
zGR=vc*dKbZkhO8oVCj?|xy}U;l*1X`SfEVa3A1ecefDGR5W-bY>Vms_jZeaqTUt|T
z4dg0MTl~PLqjH7but!YmE0|c!`BWE$l8h=w_u1^-Vp_?5qrkYai<%h?@^don5}2{8
z)Kn0xPOA7vxDJt0;0{e=^nry5YZhO?@uE<cr5TKCsFmBieT=8}oa)dXmA^<%-iHBs
z5;eQ=KezQ+JOh^If|oK{dP1M)l=iA`m_aT3;i|oPeKhfkHkXi}-AVq@J)l?GWf1j)
zbSXT~BSg32=L+W!zZge(ndcoDa}DBqkz;5?l&DJnzs?%HvAlRr)V5cdCzvz;=(z;R
zy7CoSmyg}W0B>M(EueG9xlN{N<~pKnbTd5={eU)-LlH1OV6%#j7R!;m9oHs63f|%S
z|12rKbTrGW%}(6eKQ@`V8cR0>Qz=^+4Niu}@SD1Ff~Bk<x>qm?>6N(RMm^7-t|Vv{
z&dOj`On_SPjbus;^z1^3%=&onCbbV>td@GsVDA0A{QHan7GaLpmRk-28tVguoa7zq
zfQlu6=@`_Im2je?H}SFca$Lf>hT21iarBH9bAX?=*BX{4>%|MC;+yu`gi0d{-7dA!
z#Qg$IEV6Un2>!Z!Cn{MG4O=iX^01kQ(pWzojWteno0yJV`K_z~=2n1yLA(I~@onws
zEaZ&s9-jQF=Rt06QP;4g&*naP^>2Noab1~pME3Q|6PYqnSF`)_({=)F@mE3SggTgX
zXNAT5C}DEn@$z5kJOdg|BejafVyG>Q4YU106#?I>j!VO(HRagDW>WTY<AkV2$qPTk
zgl?;v2brXok@Ai|dUEIB(XMOd=FMA}o#}a%65@0`yb7N>B*}a+_SK@R6i9!-&Yz~Z
zM2kQ0WSJZP&=*6!eGnQ2u1k@hMqhe;Px*IR5<xKgM9KRXx?5x6W7I80U>q*|bm#Zi
zPAFJ9GJ|BhVi;)rM05bFSxJ$V{1kChVWV;#*-n%)Ce{+7T0NFtU&UgX1$nt(_wWZd
zi4bWSx4lXYu@ZxwpaPOXTl>hm7#CW-ArZp#;eTEj_p_f(!Up7RKs1C0MXe~q@ZR>6
zs7pAF&TLWp{|XdhM#vtf!@7|5kV6rKb;`a8&bP#jbql}*GEd!%?`cNu=b4$xCTem#
zn{ST&GPBitSQhucfN3Hct0!#__F8?bL37igzT|~$$!WT9FAOMUv=dU<^b?#|#SNgk
zBt4yMiy2Gem|aG|ta&e30$hGL1P5qmFWSf}HC2IjD)KrD`^u8u=~Z+f8BY{*@D1xg
z(Z7qj65SIua;GI-_<Wqj)`;LH5xueoXa^Lb0J#%7bglgorEN-wTtZ8Ml}Doj(S-BF
zi*z*w-sRKM3fe=g!t~{ihnvB!y_w-$#_(WudE<?NCxbnycld+SyAjTaHa6g!V+V`~
z;xaM#vjlxdO)QD|A2X}rs}N=Oq=0=bW}S1@yBW^V)_jH^0cxi~8oTbFXEwA57!?BG
z6OycVVPK>ZiGN^vN<%CP5;9R?0u9%s?tQM)qx(r8Ie}@K($uVdeCwqWlVBUWqU~-@
zpfG$sEI|yv*n>4-JB3)uC7KbqrUj&lA3*qim<o%uB4Q*-MOO>II#{ikqpmu4ZMEvi
z6LdHxBW7f?lx@`p7Y%f$D85Nzim=o_2p4_pUXro(Nh4bwgTzC&J&>%=afOV`Pg8!t
z5oE8#^on2dbD_Wz5H^`oI}-CF{!;AMj*H4HKI$FPNd=8tos{Y#seo2-2&~WMKoPI$
z%^I7?`q=x)X=&rNLG45q;qXjS&3;>`pLh;>#8imj&3nPIZ^p=$zguqPegU&Zd&O-h
zod`je))O4H?v7UUTX2qLbSDm411668;;$j1>+Q{^$dFzjeTQOeR+B_Qjkx)^1VQCf
zWeXOav%o1Oz7h>?yxo@-6N>Az$6JS*o5TOD#8soI%oBB6xTA@Ps-9TOO)s!;whC^e
zc8ISgjG47o({%tJX-2!5PcR1Y062f@{y(9}1`^9{D@zoKATE0@32sTM$B6ohM<R${
zsohKgtWItuPOLH@_nBid9xrMKb_FQQI{z^_6J}<wq<X*?2IE+y7)#=LdR*{HO&)bs
zTojt+a+ieEV1-B7heA~R)1eP$d{jL&qO6{07Qj8H>Mmc~yrnvbr_kP_yF*L4U)Q+O
zvPEy&0jB003Fm`|BSfcyXFhL>dOxGO&>^6iQ>rx*dRxj(&!r!je+W#kH`p0uvyHr%
zm~6`<*)r}{C-#Afa6-LXRhoej*~;;}^w#6(1wR8(e<Gg=dD)i7XpP26O!h=651jtG
z8tq`>#a_OBpc}X$gFAZ|FbKP_N>J0?IcioG3$O&NrSaX!tdTBgsUsQw58W(u%|+k-
z+?=G7(hO4Qc>`DliZJ0y4|MbfSCn4SojTwec&`BMPRwss>il1X&!2zS^(cgQu9Y91
zVj^P(i{nAp$miZDdyghbKihr$&fh4m2%Jm>Wts7;6dW7DL6{3a)G*c1wPYS*WJ`wS
z@RXG!Z&V=Z^{^hU33J?MXq}h%&nhdXG+A?zJ{eB^Q*+M*H2L*Zcm=e+$7_Dl!rrh<
z=Eto)*mI0)zl7QQXW1;Cdefp^%a7ARfRA>Ps6OZ`*2w*S(R<*z?-dq^8*|DmZ)yBE
zIynQZyu1i7K(BQ|urdX#YSY?5DUAiK!ZEsR;#PCJ>70*SJBCQJhg7Ux+f7c<SmJj?
zTE@up!wYSKWzIjhn>T!nm)1{%If=U?TzYDTo~~fWl;`9Rcr1EQaYMhJnSE*`Znx%k
zfhD0_53jLwp;L0RP?iSvr|&)o{9~Be@eyZt+)+J^NfnD7Beyx}TNe>NeU&v#GbOcv
z;D!M${+sX8X?jnk62)6rkbp)^MvUF8$bRJS_UNTnkvxRvKF?<+lWV{H3W=We)6w>#
zg>5^?1WpD+3&0RBP&qn(%%V}1gxUxdDdpeEU?<ChW-vD!BVyLx34P(*IUHcektVtk
zcg5<uxse~4(t(Wamv_wDJ@p!@KMdeZ+5X%rlfUH|JC5u!F#v0c4`m(usQ^-fANlx2
z_FK@X4T$Lw4tT&8bzd_8ql0h1*k@fC)COW)%Z3sW!(vsE`6M!JR&-&^C00B*FEa^F
z?(2SUGW6AsPULKN<@P^jwB#u_;isBUV?UDGeOsDlC#O&q+wT8PDyzw@Y+S5JJY<4g
zq=DwfOFT;|t9^5BHM1Q`)rf851)Si>=RVcBrw72MWopY1Zg0-YZ)L=fE+IQ8c8%%<
zU_Vi*i;Ddud3LRlT&Rwmt<4e@@0mU0Ml{yhguR@8|J%hLM}0(F2%-;Se=R!b*|1PE
zIWb4+9U!&l{&h0fa6R!TE|iPc3=k2Az+;ddh&^}yu~%TpKa%>*Vq6)A;jehyzZ;ma
zmaMKJc_YJ#pbp9(_(mp*OLa5gHMpt^+%QJl&ez^!p+)U60%QdM{Mi!FSEC9nS|dWl
z>NK3Hg4e(p?_+XUvqn|-O-uOcqrLXB_Jm1xX{PQh`UIYWZtJk7Xi0G@zFminPe3^j
zlaN_IW;cHsN9i3Tjoth#KsK7VAB<;(&C0hU_)K&I&GSY6@aB3ylgIRE6e|0{xh3|{
z&~YDN_%Z`RV+mys9E~B}fTYTmLeQ^|M+Itsg}W({&Ll&h>VunArf-zldA|H?9c{Yy
z3fzfRKA7)!v9jzP_%K%qQEC`r)|~@90Ag^Q^&{X-)2;C|5x(vNO9E@|IjkYZ%3TAq
z-FGO}&Pcdb7ERTf+DnGdP-~G*QA%NAr_DqPJp5EuJ_Of7jMFX=g0Y1ogYItp3xOiT
zrgg_)r6;yt!|PN&R4lG7Re8~BX_p)_)U;Y3Hw7Jc5#Azvq)af4oJ@3GLTu+O3=$_6
z>X%c5$NzBq0Z@ip`UMoRT%SybSrh-n1e2q1m_)YLc;oU`2^DM8zMMGNOn(f@msM`>
zM)w}z-ekhQ`IvzLy>Y*ny!IyHe{xXi9KzCN0wV(dt+wWk4*j^0{~~GzSNFa-R0B2X
zY@!0Z4g8FWFi;U!(O06*xj2md!}~WoUl<&L$fQ>4@=Mp*1pd?^S9Hy-30T>O;(C0a
zmHSoY?Qj96)J>Sb9DkRU!Xh3i6t_p*$=-}>HLeao`{VDM%N$hc{^kOO5hd14VsfDR
zY>=3a;dY@1bxCx13utjFYtY0nIKZ`Fimpb89_0D`*mK|)0U#FoUV|bh2l1srg4I98
z&ghCPs$?FcDAaKGnqPIqWQImZ?!C#7*k91U5><(H^wnk@RNC(_!L5Q8!^*<p?#}pn
zrm>27J4(56FnI|rXIrr<uz5&I+s1R6m3oyX?R=LZ8<Zvl#`qP|tx18CM_0=JO3l^o
zn6mWbr=<~{l<R5-uZ1jVrQ!_!4HclOa1E2#sjY+gQvwos8Z6&R;`m^p`6@mja_ngh
zEaGlQegN)u{Es9T#*1Is6*O%(t;9B!N)dKnIx3R5lqtDb^*k>B&Omm5^4#r<{7!mD
z{LPbTBaj+Q=C2uJ#j#e&T!lU7u3-p>>%>qx^B1bzcRGO(Mmpwq+3>myT;Moy4gt6&
z=|{W1@3z5aQK_s*mejaC`cU-h9}p04xP5!AM)i%-%Jrdbfk?IeHF21zrE+GiemOPZ
zq`COe$2mq}uuNjdj$a3$77jw6*ugH6Rp50dm_wL6ZlPh@B>4(!Jik#b%JXe_#>p<w
zxg1HrTMXPV%%Y)*O;`j0Q+8kZn*{2W6xwLG>Fc!~1aKtx{$7H|@nFKRv6h%Tu?$0l
z%p=wVW`<WAEJ6}G4g;p-)ESdmFk_9Q{0c;$dK5U!s{=$qY1aM5KcX1)mukD!E0Zkx
zb{)2Z0bo!_g(I+2Ij*m3JW0``wOeX?S|%SN{^Ie1oE0yu>WUizKeu0+NI2Zg9usAk
zRi7=$%&U>DpPFC(?DV*(<nGI4!kYbO)2e7=h*M<5y4S?bT*DuhLzRch11NH91J`@;
zfQCvtjsW=@GU;|;13Q{+8H?H~Lxi+VQDGm@nNK#kp%A`_rXofA<Q-qozYD0Gx7w|W
z#C_&P=|8+g>A^VDuhk3Q?U%sXxJzAvmb9{7?zcsr)V%t^5&T8q3}DBA%KEJ*<_Kov
zDdBGuv6eGMF!FC~qegsATh`e-q!n6z%%N4Qf1BEZ#TG15s1k|n!xfc}rUnvwzQ20~
zCj5L=A+LE*8gQr>=U?!}?l|K<CdZ=GcfNZOVxLulKD!$55Lv=V0!7peC!8eTPzVCv
ztqx$OSerZ1ukzk4(adYhZ`|_iN(cTC#r08=OpH)O$RdoVVxSu$kP3d3$v#Lrg#gxv
z88l-P8%uP21}PqB2!fzWWjq)iR4dwIp4-VjE(C&Mt|{sh!Z)kal|BP`sANRi3^ey8
zqA|}wtSY~lgUgPxj)DD4U?=7%Bdmk((URgsu09;XmwMKxD<pVxxpUoL$!8Ep-hCOA
zqA#(-BKZeRO<?(4YI_Hg89lugd25%SwfW06s!&tj_(TUJ|AUw|-1W}I<XZ=x{zz<^
zrGI5}sWB4-LKilVjUk%Q-oGSUC_w(L8J7G0LgSc@Sbmo=>TWY$j$l@)<qD1>+8B`y
zkorI5V2*_dFMkl{!-+R~y`uruJy;C88su<~Tla!8zUE|OTky(9H3asW_iIN*=%e6&
zDi3X*yf26i%oc)#@6}KXXCL+u2cCnX(5jHf0p}pd3MU53mQHJNS|+s;czNV-V1I?&
zI^M>>1TOSTw}V67Eqng0GqY}}9_QiJ!Lc(R!L>9;a%*m5?EXuKM!Jm_5kA4rX4<kH
z%BTWjjzfNtOMu|_L;j&}_UJDof20Nv%HMsg7aC_!m#5*KeRuRz+YeVNBk*D4tDK1|
z2fQB+os{RKG~!x`(3J#4ZdZcvm9%25qIEwjtf4u^#0Gi{sMAcq-oR$cn}55dT=feR
zk5|ed%qFf+F0aOlO+G0%qFTvW&k!R2`0+7Q&#0Kq`OXV^fbKBw+$5kVADykQ+nO<d
zt(~}?-+i{+Zh7Ym+HSXrYK{=UpxR;?*v@IX=f|+sVdN8{gdGGsrX}~^@`x=kduaIn
zw(Kw;PZG1V#ohD6R<Zuor24bv=@=2nAv^SRz=dFPH8Na_Jnbu$%3CS@6qs1|!FP8g
z-Oy+IxkiaBj0_(guRkb>BDl`X+YZNNdZL<}9be$E+Db`Ltku744xMAB-4_E1<%Ufw
zGHkBOO(O9$KQh8Nk1D8MoFg%ySII#DVVkHEQ%Rcp>zAZ3=ATSFZ6z&rNdE&`?bFf}
zW9xFDCWIk_zU)Yx#iX~zutVY0pRpU+%ID5jy<<n6db9(}Xh@Gp?W{iU{=%=-x%Qd5
zRb&~8JzJYpN_lM5W;s>kR^Q3%9|!3v*1iRnV<Goh8&2&t23aTW4iSRMU9UaU$^dtd
zm`MJw)0^AHU$9kv%IhYBf;JbK1qQoX)`Kp6au}|rNPqWl@E2Ro7AgA-(e{|<?Mwy`
zSR?g94jepWhOO^nl}r?RoGXJ|VZA0ublnw8o~qhS$-fdinXcLe=<7(?&%>B~K(&@z
zkDt_Wf;(gEqY;XM@A2wyl1esIC`N>G$gGl9!2ng0Soc=G=#7*Sd027YvVxBn?a8|%
zw*6)~LPMVHD8-+EQ=VH3)dBgxg*e}IP#vf!m4<PT=*bdpRWU*)d;5RqJH*ZmiK4i(
z8$_^Jb8|cI$`7?5bnP`7ZeYV2!b|c52L;e;TNI9iUOG5haIDW4Gr*`9RXQMpaN{Dx
ziLf{;>w>I3=D(PS64#1q;+inO7K$h++g{SZBb}KssNMlR8}!l__@PatMMS|{E`5U#
z^LE?&Gwq?g&T3L6ZiSSzY9v(Y$|yoWGmLiL)I<QkVnlEKO%^<jrnu_-96}ihAj%fo
zG9)Ei1P}*tMw3dMatrp?$cVYqCdVBNk#@Ccu#2m+7%Mr)4{+PX-MEPa;R>N7i5@<-
zx3-pNnzj84!Hde!d2kiN8k5`F6Jl707mOv>QK^p^^GXAnR<CY-=V||Yh&-Vw!#h2g
z++ztq06jp$zi3S9@SSfktDNQJC%19A)J%CVo+ZfM)7;C!=2fMS^!;9Ksv8`IJo5yw
zSXcFxgnSSX^Yu)8Xsh}PF6e=E<0eVj6U5cJtGQ6B^N5jbdMA4zn3kkauuYRZBe!e9
zWAvR{mso;^TxcHk{oh?dk9SG|-~*~TAaT4P(vwA|_;-q%Dip}eDUatk^Q+&##Tl^e
z(HL4L@nn8S$)y2|E?TivQjNI^8xBiO$D6fzE1D#uxJ|Onk}34~A`j?_u5*&IZ@(c9
zBe?e_v<rOSA+4|C9~`i91YGbwf&Gnz*`Lu3bPK{c-YKX<)v~iQ>E_f|S<$Bpg}ul4
z@Mc-a*KxJyj|*3X0y~?T^4`KH9I7ws|4nQ6Nxo7~G6Qx|kO<GFDZ$;}1~gOt0M1VE
zA`g!s8`KAh&Kw(%6yCGAlMi#w@OX+5`HExZKfA_3{9rc7&7shm@}M`olQN0jAxjbm
zx>R>yUqpQ+m&^KBKdY9+(qinp<pBv)1`2B};XxO?D=>SLtpArva1GOzQ|`n2@XI2F
z$v%^(E+iy02`OMP->SfMGA%fp%eu6n%q}PT%9wiw=I%%0lLc_8xS<zIZ>FVYLG~-;
zSFDvfZ;7OP{%#sJ9CL&wp0MOp-v|CyDq2@F#0NN%k;Bw^(PJr{2t8yMDI4L$7jcHX
z5QD>*H$Ef-J2og42h?_E(6s8ZvMFmYx==k&FQF1;8lD0pb!GS1zmaQ3!?Y$#s>5EZ
zgK$uI#?EPe!Y?G~@40|>I?j`ECV_)(Q}nRa5x?cK)&q?2OYood`f>n`-W1?0y;@Y#
z8A!QWFT17O8<o^jD|=vTMjd6zJMlIhhnv0AfOZ}t2D$s(P9a{NL#h|4wl7I#cZ^f;
zdY}Oq;;5blz;ppj_`p>+MHgTL7ga=Z#&2#_^iW$X;eI1_Rb6$18!Bx*$B~@2wQKW8
zRAv>ISvsq%TE6!lT$JD+1rUL3aGo}ut<t>!4xLpK;?8(GZ~cwkC9(MYW}@x9&P{1_
zPM=lOFoXMukjaJ@c<dfk-Q<>=%p8aoz?oI#zNS7*8zpTh8)(}Qtz#sCP1C|P&@=xX
z%i1cs?IIm8*BC^=iwb-UN)j9S1;jzp3u1~y+}Aa!2q!_BP(rX0Bx_#M>iT6XD(a*)
zxAqVi!-DVoYx><+ni<NfIG4ANn4x_mUqBcB@S_{#KyPfiVm<6$T}=tVz8h`$gftM$
zl-`)%Q8(KU+x9zU#FH!=e73iwOUk%(5ev?rJoj`r5$U!%9hb7iZIqc^bBqdFdVUl=
zS$44Wam*|es_N)zo%vb6sySS&XXymN{cMpCRPJiWOu_PsN^zQhM;uW~zKo0wpwg?k
zLNM%F;5ptSToA&rHnrP;FP>;-)Aynb2af<wpQWuXW`ml-pkl_|MJ5^XFWW%N7S6$w
zW4JB`{np!S!}LjO3;9JzEF&FTukO0mXY5<=kW($;l10c%D-OrAeIw|G>e^XcfPB$5
zI}VDw1{Qub6)FI^{p&PaC?T%yShX4_Q=8>P_($O21lEf+5X@;i^={HbqhO@ubo&;i
z#CGdewqismvqi>Nb<>}%Q@Jhb{ixqAU`yW-ykNf7Qg60LF9P+Z@p~Ni6i}*t=6!lj
zAepCVAAmuq;ewVn3I6ITZrpIaODobWy86)bGyyp-F*=u}{Fr4`d~!-7mOSqgg%T9~
zPPze<floF90Xg}<-28`!>d?$$9)J7p30~HKRk>$v!EoN#n3Ig>eO*AXl%g{;iGJJy
z3|@W2e!ENib}oA8fGGE^vHoVq8KnxQ`u-K{uXs#Cy`H?Cz-(Z%QHJQ{>zxP{>498`
zy+X1T2_0*q7gdUM)7&^OT8-V;X{7f-(^Wzys@%<aB~yT1hK%bd=opX=5WjlVe71}H
z1Rcve8-^9i9y>L!4SXQcyRE~b7e3AeaiP2NKm8t>FS`IjlA{M$MGTGV&rH2aYmj0^
zf6)C4^gZ~QqNMYIZVFNN1T`CEu&H@mAL@kay7Q`IJ#WokJQc-`A?HZW(@GH_C<KyJ
z@xOm^4(Y}oTSeT&kC49-eR8JkAECTTuv|YUn9H`6Jc36z6EYK)%IY2jnlFE<jlS`Z
z$s;$2hHT(RDiB74p^gAA{_>SO#MjN7<moxJr}7#4^-+%Gw*M$q4mdmaTXE)9W4o0Q
z8P8u2K&2H0$3e_(!s`~|5P&yhO8k#Qr<O|f9EG=JK5m}!Wk(J;nSXvho_HW{Pnvm3
zW&Z_$S_>CJ-l-W};*ZW}zM3i(tP9K<(07=j2xFl8vLh>W2kDtFvs0!=Xo3s5I7mjQ
zH!|>O)P!;S_2EYU<JY9-q>)jS(}6%nV{9Z~qV#HrVPDU)N5g{a$j`k{8yzSm$mr`T
zLjQ;Uy4?NXfjZyBe&aX4zgjK70ZMqE+j#Y{kjo)g+59)&WIMU4%uddNo&w;?R}||$
zMRnktwb-z5`+bb<Gm{}SOviw?9D%e)ss{jY0iZ-o2Jh7-lNbVZR-Tde$H-qOWw9lm
z-RM~)&Oi{P42GSSO5Q5=QgPnOhb<-`3b2YC-uJbFqm7Z2$0tA!LNfTn-N_}z%gx4f
zGZOigE)-C)NN|v^tNu?qmQVD;qY=4W%TVCrFwYMXk@D93SOynOTP-1~S{YdLEVXt(
zDU_ZHkA=C<+#yWhs1h~6;kDA-4@K^KzA!N3=4W=T@3jB;b(MPYq)i(FkAR~mJN3s%
znIdx!ksbQU(*)=k^S4@d0w7OPhcDT~24>@#)xdfAsak}%4z!G{2>vQO)6G6n_jJHE
z(%~uzl1KDElezw!E(pt9ay6)R;794*NB)D2`lIo#ruYjaw8NW~7IF*N!NoE6>Zve3
zl1}6U82fM=f`VmiK|gWz;5Jk|I|MX|yA<&w;;hhs!_(x6ya<?7W>h>5V7ZSv_EQn4
zBzOUIK2oaN7yEUf`5y&kN-ez9uqgLXm9ztuWy6qWqot!!SS%IFlo#6Hh<T+^#WTDs
zZS0kl#=gwwU%?(zg%buN6NBrf^i^8!l4sGcJ$I!A`rGdNHw#E-zAWH($VL1Oq!{)#
zC&T%;c?7xLpt7pJT6^fsH4qbxJxe;@HEtmK&P|y98Y>EA{}_%x)I0tI$*SNN6We`Z
zyf}1umUIg87d>Ur&_yLyZyrWR02W~!dgES@eB9hl;1u7Q2OXI1<0Dk&j9CE8!K8;4
z`f!7BE<{(Q_IOB_qkDe90`oKv(R>2u@s&C%0k902P5wfkXwy1v`jY-xRuon}cy4%;
z*~Qn7{0yVyu(^xPIBG5BT9~t~LnM<kk$E>>2pZ2j{glNw8CdwbtNKh8G7_OU^xT<N
z*dv5PcEX}Lp%6|&z^N}GpGr*_YYhEWh=Y_F?pyUN@QOLvYL8Coe{K!6%UG#NFFDA8
zfjX_3PMp75Hj^W%n@7a05#yx$j37S8<>`}4vIyxDdKUfky;7D!pX5K!Ro8w&B6YTq
zJ1h_EGy7-&3PW`<EPjHolm-x)xl>+FR&t`Emxq2%by0Gc=kU!<3`Wt`UF>wlFYh-I
zSEk@ZjY_hdZugG~3q%J~C-%bO@(y6xmCX-2dNf^lHk8pxL~Z?6$@IRZnJ<KiIrXpw
zmRp)~B{d8RLl|5_oSSKn9pObUi)C~7yY2$`G$xUSn!WG!5GA=^LGZj56HxAzw5IOc
z`%e-k3VmZ@(B_%79K&8$&6;eGGu189U@Wvt>w|;)_KRDipQl?<<b~mQ%4h*ePD5i+
z+{6;C{fE$^GziyN`V34ov_ZXL#ovvWt)Pd>9NgL&XF{$>4(QKv1B*3K6Va1!oQzIF
zW++#Q2F&!(em1i6A?k-|C|@}&9+E>a*`frBiy{K6i%;Ra;?E^4ZeJIc1SJa$|83_x
z{j(-z{C?4WPg06SSC<GM2YoUqPnOysFOF)mV!(j?puZ0!DX(yToIZ!V*1aMQE+MTA
zqi7EIX-<&EMCo^2h5#!OsxS^vL??A+nJ3<~1bYz$TT-#)YyR}#i&2oTUbiroAOD%N
z{r?Fvpf<lQYHL#(3rg=%mOZb_aJ~9f4T)(t2QN3Tj3%3I?_`ARvg=+hOhJMug=2$9
zt`tg%Pv+#Y$H11VC`dH#gqLS{R~&BIZd;(=s8`!#pI+*f1N#8g{_J+4-fMd;aY4FP
zD?%xReE~sD@z1Msm5+MyQgjiRmiTv=eV{$O=p`1C-|io0-e%D5w9fj2NC-GY-?ukd
zxIj)v*F8<&cF`o!SxsZKMW9hXGkUTo;-0a?M?(OxrYH(;QU2awoF_Iok2U!uG+sb(
zs-;>%OPD6g0Zm~d?tVLI>L=PsrVzVfv>OHn5!da~6%nB;6Pm~#9SiFmZvkQ!armMh
zFss1l=i`l?h+cJRCU3rAi<G9ik><J%;}GYghG*-780fNgzxsTDG`bfmSbXv8>gRq)
zhxAh#=hddlQF%lVsbhkzhmcRMHcNN=$`JvZrW7|Vbe!Mab35{_9a-nqaRg4|3e@<Q
zam2Vx8asEr+V3*^!A&GZ(wDc#(E!=Mx&cC4GCFi>0Bcb}C3R$EnD@sMgOMdwyX!SA
z!hJ{biQ$aoVK$Ib_R)+-&;7LW%PQo*P4D$qBjfg-ksen$m`n%q2Dw~F%9OTsLvCE!
z1^i296DZwg88pT<<mXC4gbF5XTC`A6>N;}sr@_ri8Ta!d(t~B|Tv7nyFCiy73`MTb
z4+4S2{d%{PyyZJN>(0^bjLr9y4z_f=c5j$O{jxYqin=*oF@&Y^it%m{Vm6(Gi6+RB
z!g$rIRD=Ao;j-h=Iz>VU0ejEsG5y|ZLDP19XBW5O9>OwJVD{nBwPEQd=%p#Ir>2gc
zi+p{T?MHQ4ZD|zU%S~J6e-_`PC}FmMS{;}=LxDv%CCswoC+ncKY@UW?CG;VH!0L0r
z`@g30&2Fvd<5?1zrj4jtp9Cg?x>le>dHuF7H)l>KIcq}NVD2k|?-%JP5Eig0u2YUk
zGTHUe7QSjucTZPgAp-rmE(ov8rsGy{8w*bZVuU?UP8hA#xF8@Vx?&_~YJJN(OZ7!F
zS{Iy`#3R0`eNRkLB#wE)nhM00V1cgn*8`rJj(d^Ni)c|MfDWuTcSZ8439<@qDU@97
zbw;a$HcZCbf77s38D~k?P11K3NFTQGsMzdn1YmCe!Kx8;&(7xR!y`6W{>%WqBsC};
zCc5KTRq^;k&HL!W^*>>S$R>(u@F9h@h?xRy_WgZ~pp+i@=+YS<22DFH%?3yV`bcUj
z)+pWh`$N1PC#_`lMN|FVL|=g8b>k!C1)tT#Zs86^=~c$kDcdq>9Q%acJcUfin0r@V
zhzSM)hL2?I5!_RVN@tCEuJ2FEBCbC6EA?^n>0|x8QuYWuG0e`h)cJ(A4^TdID_PCs
zSzqyT3*K_J#mM%z;ith|28}}INtK1?!Lfkm-!vmU-3y$h9i_H>xQ$4c_eDEA8sbGC
zIKyvIjGss-S#evhZ4JCl*90~Is*SX*Nv_n#kl}T+>UpWg9DR<&tpdIYia}<K=r|K)
z2Smq@0vy!u4KlENiJ>2q@Tl>PnyI=+AM_pm^JQ$ql6o?wJtktoSXy7nf>nteC&hWJ
z&4<|qQkcS&3OgR*|EqXMi}k6)mX226H#P2MJdz-~e1A@pPK|X0FN`7XEP%1$p3Vcm
zWaYi^>+YkO+2%rdwy4mY=?Ei$Y-IQKG5CegXmz2~3SBF!1*dxdss6;KDpu24i}@(w
zrc=jvnZyHhMGQfF&-bKAK?OGWBtZ)k0IXE<F-t25)VH!}!_E8O;Pz>Pb&(WBIxnfh
z5~+aw4wal`E~Q?Kuc$ck+c5r=p}&qL@JQiQnY5Swp~QLr!=?#E7=ou#GM;gd_Y&?T
zf_AQxxI|AD=ONK#Q1z#VwBhPP!|hGWzy7pkN5t2&AdV0)*{B1!AF%X;DP5xG;7PP;
zcI-p$rf-|!T<8gd2QB<k>T`$Uiu9taiUIMla~a`)aH`ruG{5to*c=F>T_fb|jlvs5
zbSwh5?l58iYSVpeYgmz%{~PzSS~H&zdU@Hl{kl_db4jX~d!oqmh<u%}Yd+pD*f<IF
zMZ$G-#hKU=6+^WS;X?hri|#sEC@3&a4;eQxeN00Jsj>jEUnG$CW?d0j!2xas>>}KF
zIZ4c^s;(RahwU^k9)3T+5(~>%9nKOh?s2wdhrrA!Rt<^VLdDs4Tf|;MlO*b+C917d
zbcWFAjs#8gm0RibLbH+jFcFRlwC3FDf;v7?(?b1JpI9GNEAMsUjsj%Gds6KZG4_o_
ze<Lq)lMKar0;fd)23{xB&up7_Ws{4+`@o*|n}|XBCa#^?h`o2_=alcACC($p8SjJD
zthPS8bd(>miPYv=@~r>g#Tm7)0vw^XGKpwI6>)$(H?6^m3>d>(B5UaC&!w0btWu?B
zD+M?4oRo)qiP8ixxeb8);?PVSugntP-zS{*?=XWo_i8g`6lN*zf!SwQtJc>CPx9<l
z(%wz<*>o`yzju-fi!F?O;J26WG&7AzM~1%ThSm_4RMN~3bqFVpZ{`3cns^oj#U*Td
zP}4tYHB^NU^doMG+n$i8OGQZ_n~GncW3ThahDVaxf;aUz+qnz}Vv#`8(L5Ri0Wt*E
z(*5Njhn2uy+hvn~6eU*jeXQ=0JN_6JSzkXXcV0tsZ+<jrtq97ux00pt4#;F?q#u)(
zj3NeBQ(lJDVQQLo#oL+;7QV(~<~8VKxJ+XjUAndaOj_6pqI*u<o+>e#cl^YSF13XU
zBup*6{nDNOWy`%W2Pa&qKAte|`oITtQ!ypj6bq>BU1n1^`RZpgjiy*Bc&`0xpW30x
zO+FA{?o<Egiz&zz9Fel8jBMRDaNIBaG!u!6Qj;)1%X_Ft^g-TdO^6HIB-Rr2GR={X
zCQQjTF|9mf_O=K|L9W_))Z}-X0e8|_P-sHrGfXuAID<GQgHk?N3DKN;FC<Mi^|1{S
z@SIWqTx@nFZ!pXYPtbPZPBVD;Mq^O2qFq7iSM`DNMg>zB#&1Sikt(FY0<xR%+87Cn
zo=KL_@x?TAuE!ajsHb2IwD&LAK0gG1yTjQV4OfUz_C!srNibQGg&(uzAY5ih#M7e7
zn<xhLV#X@sW^%>=&CX?vW=fE<i`-Y<Pb<@ICv2n_d<Drpz$@>{4GE}|kth^Iz<9>M
zQl%+#Umo-ZDPIrs#6xcXr3;2P1+XHGd3N#~1kY3m7TU^BIEt;*bZijJ#>n!&?M*B#
z$7X+-`1&(8c|lTTQ*Tk(x7$U?KP#Fb^G5cA>L8j~C5|fuw!d;uyqDM(<8h{wOn*@i
zUc9QL{jjFb9<DLzde`?P!GMY}rFp5W%?c|azb=-O)zcYzG{DUu0%5S)mLP}gq13^H
ziGJRx{IxsMXZ--q1kckcxe<Szr?GK_uy1cu0<+N8dcL;KEk%=F*0AkX%o-T5;$IY_
zKk%FwKw1e6fY(R$?NQoCAl|6bp(Lt$clwgeChmN+8kjuPv_NevuAjs;lJ(otO$}QT
zNx)t!2>1`G=8y<DS~ef-*opLoxM#w-Kgu5uTVcw~|3D_2n?LMp4|TEcIQDf>F@GlQ
zNmu%A^z%L*i5!%EX~o;nE$VYB9Q650$ZKBQk=FTCLXdbL)KOD+{9`%K#oC2Ht*5yF
zS*6TUF<o-97%5?G<`jVd1CuXfm9qP`zE-JNqjE>9Msn5`IEAM@`hH4<P4%jUx^@=i
z&N{$HH?l_)t4+#^9M4tFS#aL+U19-B@r|fyZLDr}GNqxoi63KF4k0R32*cAn;|FLX
z%a%i8G3v@;s?G%#(=bIH=+X-#+D>JmSV9;#RsBmwQ-(!-U*9o5z4M+VF@87FoG=@-
z-WN~Dw9iDCCn{_AfIp&!UpyQfk@r_Bmp_Nr<GhoRb{EltmDgCJ<|hAsmwFzt1#n^y
zh$}de(h!tPhb=H7Ar5g={AjTgq%pRXQTbb3>I|;Y5!jIU<1ZkdrB6cS$49wjhnst7
zGCy^ha&+$8$gz-2WHX}Zg;?pURkS0D=JvL?{tt)ZM<GMEEQ~M9x$$3=;dML9l5fxb
zXF1NM8m&wOt-WkaAbD?q7o9KrBQf)ukUoYDU^%j-PKT(@uf;K0w{~u^_mqudvrPWu
zLJ-tTRhx5%B0oQD%Pdq|HM#ryG%v=*%E3Xax&~=H&CHxm#;pQP5TgTkMk3AFl`?_7
zseA;6&ovoBGP&xQ&?)4rm5HZ$evoA%7Xpf%v;4HAltQ0`J2y@QG~rs65!mnkaOH%L
zgO}83(KjZBGnZ5}`q@p<C?x-Zj~wXC(~$)%UF1v-I+HTMFBc?cGX@S3g=>7(r43%C
z_df24!DoflMF!1OjSG+ebu2Q{s6;Nqqp=~d;$~AL1Bewnd!bwCUTccYM&;5nNbK_u
z`!E@mzYY^L?aAC$(}Yrn)K<e4j9-eo+^UV$WckoqK(a0>_XSO(iQEug*vsJ2T&Bz#
zv;B`tU~fiejhKSl>F?r{qas$xL&1|zS2Y1ClY3dNQ78l;4T=NlIP$_iI|W5c{%4*K
z&wooY3F2=iSd3n4j<y!os$fs~i^mpRTv?j;$I@`*z<;6WEay9TD^+U2a&;(`-Y(Y{
zh>144Thb>b;dA>qYqSl(gQKjoz<#G&#+UpfeR{0WD&Cxq^?{4mTMfTH_DUmfd|vk0
zHB8FLvD!4ekY&R7NisS2W^i|PR9PGu7?>ocH<SfcwF;iMITGNW@XORgHlv?BVtbl7
zw7|q>PlorysTo>q0TA%03T%?bpY57O%O0?)!HX9mx6Zh4V<~NxVOAnsEHhr~CZ!js
zaw1?3E#L)2M<wqloJzP*Ss5yCBWjyOybwy%RTQBg7Rz4R7)j|7eNJvW3G6BJpC37s
z09K3UtSR)fiIVmF$ixN^e`Zt+An_J(MIOV?43~>}8+p931V%I}rc3$jvLZ#hW`LSU
zO<B7wM}#L1iOSTueIQA>O6yQ6GPYLWtYl}Do6%{;fgS&A$OvtYoL6|VBA*MA{c!o2
zXjdXJ&#4wyjNxvPIV?<er!<tdCy-eOvg^c#Sb6%tu=zRLy{WIw+SFVrjrsvhg-a>v
zv)85@3linAg)7_L0~TT7&<D(bYKFia`&kqgs3geU&=Ctr2<75}=O#dEXFJHQ{>L<f
z>`&$%?93*dM7mGU87@LZj4~4FVc4L!!E#-Rdgut*<|lHGDs>^0hch|~KrjbC8v-Kg
zb@`rATEK&e>o+D0#1*WmY7fbz@~tB-K}Juy{>jt39CM)D8cOnxqPF)55$t+Fxrznv
zsKvZY^_G5UCLTUK?drx+km4|UwSG*TrVo2@2KQXFs?WHwBcFF4Q)+d2QE9NuWa`Yb
zT<7_kPDS@bsWKCE7JsoZafi6a8gx6T5&bDaDeTwEFaR;>_M}X>!<^u3p0Uz7pN0<z
z8r)8}XZgD<2!J(s<3Ut?^;N89Hhpbhea~zLs5_Pkw3s`|u=(jG6Y~?AAH>?GnN%Uf
zqTSNZmnh=bj8U)F`j;fjzA8M4b0w7-d%dYK4~@R3KbsGrfU*=>gLM$I<>LoY`lVUg
zaz*ZP_c59W^-8QyZghp?sR{omVJ#j<kgLk6TI+W8JF6BUI#qtIB~nk~g7O(9kAV`E
z<nu)(DAY2sP2(G)ID|9%zvYoH?%}D$d5<q;;M7+qs3AExy3Bh$SpkJv$N+w}yI2k5
z1RYarck&D^iidD)1xWd0WMQ`Zc}iaJcJVL&p%ND?QU=8hySnkT=O&KO1G0HOs#YB-
z-fX7yv-!t3ls<uC%<#Chi~jy#>s)((t*t3%TdhplakP(<vE27~^#24VrfIjtAqG<w
z53N|g?s-^DjIz(yN%gB633G6(F5N*cK_{w^E_NF%NETn;nb|kujs(pNvb|{bh%?iB
zfI2iZ-i+5_>n@OIKyU%0t2^Z+t;Yf}8bLC64r}w(V!;}CU%v-y{%3xyaIs=Oys^7e
zgFnSLS)%?B_u4So&DLGkFlA3TP|2ORg>=ot#1iuiFMMm1h7-1_RCCG!7+OF=SPfv=
zWK$!qfUIPNg{5#|J#(#_n2R}-7Ex+%zRaqIP|jKma{z~XLA{hGxf6tQm4^{P8K|Uu
zRW+P4knzYd|1SK$n8fK@GlPflxBVUk3*VSzPd6#6V~h3-xgRJvifTOzs84==b$+w`
zpN}J?sxpVKnorA;I<TmLFn!mnwlBlVY3eaAFJNiWVHPR5`p}YhD^^>_%*}|mdbYv$
zFz*!#%l9?s`H7!JsidJNB}q)y$&|A>KLdBVJvvg?6}ebnZ^`=kj3AVdcrFoB#{z+`
z7^w?n-GMziH+rpX?5&(a8SlBkf;+BgHa-*vzb<e)gUeScM(Ojx+m;$u_xpyCvp)}x
z0nbzxtk-p7$7+Wz>i=Gi**i1$QYc(2o9p;yt(^Rep}fKv&EepJUoGxU#vdKKecM)f
z3oTtfG=>QO4+7Sq-^6Z$8et0yak+kDL`yoNGJZI(^)24HqKHDHk%Nu0I1{uVBk_*L
zrw<6g>V*DE?<%6Tz_Be`7YJU6aB<jmNLY4?E<x+UHu!tl0kT<nlc_9BB1$zT+9NL^
ztEzq9tk21iDDB7?!#6ruv-=$wrW8uIDn)?_30V5uxzy##{a=a~I1(;m5M@JnPoz1!
z5(&Pnd~!BsA^IYap&pxUTc^3a2JFhH=8}$0dm+#7%`7nL1!1wEmrqW-j7)@Yb!Roz
zTOqNP)9Ty9Y<$Dfteofs95_1y80Ihb%#q%)>k5%ERhlG9I*8YJTM2j1J4XyFnpql;
z^macDCI)O?r-;S+>wETa$iZ^hlS-643O0zIT$Q-xT%zrAUaSFv*2gr!XW@w8Wq9TU
z84In#t5{(9<bw(zhdRc*&`xyV$iYgx>NNqg3Ii13+=zHXx}lHJ70h!C7?|MYmQv`7
z=-h!ckr8wi7><~x@nxh1{9k;`3Do92CP@#dYSz7kP_MUrl;&PX%VIB2jn_GE4m-2J
zrM&-rtRrY*qS;b@IQ+9JRHsQk3taOyDB+ppzO#4BS%S>Xx9eNOy0w{x0KAzY2~PRO
zM4iUUvdF|A|3hY^cD>33{~e|_tasTP2TsG1s8ec)D#%}4f7`!QzrB$`uU7)Wx~nfH
zY&cm&$hp2{>w*XIyhG)y8ZE+kX|82>3MS>Arh*wk()-;piTd?>m4(&a*};NB($QUL
zgxO(f#HGKO-Ah!K0y6y6*`dw6ux7{%MBJ_S^Je9R5GKt##0dp%XV9_a3ixHRrQ!G;
z0yZ~lOBZN%1ukQ4MK`$#HPGmeAdFBQCAk;U^MP%ODl>TxyB`O#k=wEZk=_azsasPZ
zXgo1nXdiOOn@<UOe3MWSO)H`k@@Q^8*fC}!J8|;7J7wJl$XhUxgwcw-!@=2P-$b}&
zYUI^e7CEs2s$zD>(Nkv?J^(sOU|N(|=?je^D@PgG(`gTU0>Mi7A389L(Cc|{4plm)
zp63wr7=nnfsNSVbo^_<(jcHRsB}i+I4Cni$Si})aN>G;MC}kpGo%h8mL;l!;JLL73
zEymNhG6K|`e&=1g(bP5~AjsAH-Nct}C0O}YJT1u?_nM;-;VvQ5eDg_yy%L6fINV7R
zg{2IYgD^%1>4Dw1nZ=t_acbtT9qFkAXK0VUx(#Sy&2!$#4La2=@(1ARG;`Z|hWEHA
zhHorF!r;J)cg=(SNzuCSp-~?;U@QTYla&HtkDSXgfTQP=X${f^-HX|A-c~9~LPY#8
zf)H0_jE&b?s5d9~w`%55)J^9yk{qq9M_N4TaaNhHeg~qu(H?)~aKYYjDB$;aEtY98
zb`uPXIE|f<bnLMg&fdi10i|`SX;{~a0q|3j=7fg}$)mlPHlL8>y=kj~YpSAPe)!@8
zi;|!B6*`AmP0*u%aCbOEoESy{eL)M}S6`f9`54-}2BTLDz66$v!1d|xG+~c;pMUyg
z<0!7SyYg%#jP__c(4J<ARm#Rx()TT>WQohuOj}!iH4C)U>(kQSgE0o!$u(lX*|Lwj
z<2vb*8|aT-c0g?X+o2WOb=meZ^-W}UiNGn46X4;#V0*s4KgY+16tc1XBl~=ASzqao
zD&#9>G_@A#qCHGtAI&6v1Q*po#^^vL1|jF1Kdx%Ie7Ikl3}z&)w%zAzz}%5wu@APl
zbHKi3V5D64EDIsn;Qya1sUmVsl>0bs7Njq?AL1Y%oaDHv92KzW?Wy9<#0GRElf^iY
zT6NS|9981GZHnGSa|s3Q2t)F*CSRtQd+CNl*wE)uBgC$t^h!dj8>%X0{}pM;w7b^s
z-fs8gl?Aa?4Iff=oIlxg9qjq@yD&zl^(j~ZT=WS$buR42S1Trs0Vp*V5{eueSD$o8
z%CS^bgrqIGY^ye)@p}EaZpd&u&5VJED;*fGG}1>~h8ORkn^}|>**h2@<x?N(GxVx~
zU+uy%u9d#XM~aU#97!bZQR16z#fp}TPwme@mZv&hrL!lh6la=1ct5LC_Oj-KYPz=-
zf>%nP5<GL*)nIXkuH~5VXjIzUGqDI%baKQd7Qxg})0Ssw&9YyxT%SBP4k*tO`<7`0
zaGakxYev$4<~5fFyfJ~hVJ0|4&6i9YyY~9RD$x0`gw#@JW6cRy=(Q4p>+ys-C9nid
zh!yaDaI8h*%hi{r=jn9c1QMRBjT5guGq2<~@8-;Vz++yyLmQVr{?pL;CF96F@RsC3
zR(p4LeQ860ER_FHbc#vZ5|LelJ{P(HY2{a_1zApA#|W+zvyH2PQonq?83V$a2)ksc
z%ouzOne{C3si-YaR~h@PD<OV5?qRgbvXh~!3^+*yc?`k170T+e%XXP7Chq$kZSO6Y
z9<m_@gOM%TY#nPjug0i@+jr(cq?9oC+pX3ZhRWbRyn)j55p?Nu6=GTeUxe%2bUeB!
z4|a+~W2XO8??j#Js&X(t3_uCgqLZ*Pr5LA~qjhU>g1vsig6F^MT*gzvTsfEuLA~)8
zS<q2|9b6&-uFMtxM(iPA_jLd%iz`=f<R^}<TVA8|S(Ci`8Jgs^hf!4xR!M<Qr^qGq
zvd)doly)bVQ=Je547g1pkDG|Iu2W$OZ~0UU8-FVj-YIIh531GH+PnjWLJzuhx2{d;
z=IJ-<{l|WMQp~JeGSV3G>H($)6wGEnwmSdnDwy8i)ZItYh~i@}x$(6a!%m7NJ<4VB
zW-ymIj($|_?a1=W?}<y^B$iii30+L>DkC>Z+CuxuQj&OtA<`4jKI9e+N0r`QJZGFe
z*&hpl1ugNOz%2!FMz;RobX^?~V@kA$Z6{Ro-YlEQGI+5s0k-DUnH_$h-a2b<6TtEb
zV2Uy30;0Bjo*rx#EJx|zwnHX%CVkmpACG~h?29%E4p$rSkUB+d)eLaWj89&yN<rF-
zhnAhl8U;uh@dzAc2)^?&DZ>uD7@)qP(VTUH)P~AM=!5vdVv?S)WQGrGNIH-w4Pd{H
z(7E@9{+DmiH{yn@j<g6#446g)R-hBQT7G++@$M;N9O0d&;IRG2(v1Yd9E-f;=YcZ<
z?1I`mU@cW)dYj5b{|*j0Fl{^wJ>0pqmarTD{O*w_^awJYB%@}>$V!+IF%m`_7s=Jg
z=_yQ{rlFy+(~=8Y_;GpWy5bT+@Zw0gf0w2^un{-^bR+(A-uZxEAD>|~IxqE-H4Vg+
zGn*N>cCad7uhCSFdnYtJF86-5Ry7vJr9wN?@-e1&k1242Lo843kDp_U&v<o*;{Z0v
zl`Oc?_k7Skd*SsB(}ML<fx7H`CmGdIF;_7GO7Z%2i}{BS`dC9;nzC5s#JQ~8q2_Md
z!=qY)LwOR;u`y}-ZUl9B9YjV03GQ(a3c~Dv3ebOEpfH@3r7&9bLb$eo=idNltALdI
z({nP2>;FIu8v`cEc+KX^{xqt?0e~6N12sb{x@K*b>Q}18>`_064c%7>+}|<@wph3@
zmz~G>2~-xu$83{$!PZr_Y!9iQKg{`=C3UaE7?>aQ=2*~nXjL8!5<U(j;^!ffn2hW=
zt_WI`6a9^e^7B)g&yr@h);P>4su9+16$4IZws;5>;>ip>&ZdZOG(o10&i^8}cN}LK
z4N*`ZF6y-Hk|9$Np8u!}?kBb!yf%(1ywuW(gjU4kqQ=T*EU&O&e=IWP7%YFuM16)j
z7Si1Kn02y=hjKi?BQgO4@M(_^7S@>y1K<*^e=$k{Qi>(zBg2e0<uw*&t`N9`Cx<oo
z&NZ3H7Fg8XACCw|vspcc^>B+M>a8)b%X9m~|0<%K$`LeD!PH>|iLmkZ42X9QwFWbj
z=j+<Y@D`CZNY{peLs9t6f(bh>>CBYe{Oo_0+yYq&IN1a6e_I%$0wY&Jo;EJ(SUUz1
ztthP+is2Piv-QJ^CQ!f{5Yv^{J&gLXpDNIwmiEM?nWchpg2mmFZ2M4*AP2&$Dmc*%
zXYuS9Y1<(LYL(YQS2Fn{a*ypoQBQ{_pEu@5lBwGWdi(CdgNDun4WMtNW{3%#@8-T~
z>{(uP_qVEM5&>ngg;behT3me&DJWk|>XY2>zRyvAQGxirCzd=Mid;U`Wn6`A)DJd3
zpKBs!K?8#56I=5<VD{n;OH#$rMw;@}R{3W1EqFOL1hXqQP4fbNuvAmGdWuPc{6ME}
z;{39ocY`r4m`l7WZJdxKp8<auukH*zLB!)N)+j0DwX67NxrkeQpwzr&eEjOs0uj%3
zRf2G}BPWJMi6X-CM1U_aRsj@r1Lb41*tx%@v3Kr`+v!I-%AH%C*Wve;o;D0AR`x9-
zwZugygg9f2ia^^e$vACX!(cpZVp(oL2q@!D4m~%Eq*}~vK0u;Ty7pA=Y*vPdqyMww
z?1AHE(wufaYllfisN~83a~F_o;>Uy&Be6R#33%?wLd?Xf)4&Y<Nq*p|(fopw`w$dS
z<wTeFutmSdp~RdABpWv|h_Xfk&1SrXwyx9B4Nd_7l#@PJ=u~AvZE4E0a;xam!PTYt
z(w`;0Paa0zvX;rT)=ObX<(yvZija3S2DHaQ-wVhs!iitE-_!1;$2HF@rRgsMqjMo-
z47ox2>q(lBVvVL)zs{r7z!(A<pOPOamv>At;qKTED`G7U^KV;8kLX-!Q|jfnOlPp^
zB@3gC)f8$v#1+3J&z0*Hy{PK$8Oqb9e?t2~e>!+#N;XX|5DECjo`Y0W?V@!vbWp_8
zO5D&=@(>Wgx?2CiJ4@lHiJUB#zm6K*M$AG1Ju*z+=cUZQS!>wP82F&s`N7^|$^NOT
zwUiV>U99%M)b;yUf7`$6WMUCGClCAUW@-?R9B%74Gn>>l&)50}ivc#aD+eRwyge7C
zM$-A&7~mO)W&|UeQYh~RnQfQlz1iobhXdir<4=^A$a~9Msq#fK^EHwgSHKzShukPd
za~&%^-e8K+)TbCt%f+CKnda5Ut)ve>ya2ds#<&xiuFNo~E`L{0N|p`+-QWE(b6J%(
z>MxZ??lk};uf<=Ft^m)f5$F<+QEGnbUK!623f*`S03B$zGe!3NZi-_a>C(%8i8+A+
z_Td0|tEQoR|7VY=LDPr#6%h{LkuxW24+v%IsAq7r6dJzJp6~gZ_7e^Rg>$AuvigZa
zYo3H@>Y_&_R8YVnJ6u=ePdb4ya}*}U<!uGC@Qd!vXZWv2_P)($5joHARGVetRGt|?
zb3CBMdCWWhMrwyxv8D*mnv(ZJMCLQ)nt)~w9)oJqQHLK;@ds*k&OMbm##H`<WiGo>
z_G!FE-h^dIh+Osi;zs5Q{Zg4!;{nqHH}vomWOqRW%R6v|wVJGPe+Lg<xzH0qnloKJ
zcQt+BB^k9FB+5Wxds2lJ;SN8;0F!sy<HBh~G=AZ}7_1OG$F`z*4J31M9bXSNj?psL
zGCE&0vxC!&Ut0~$OkTRAmYYUJ7we=gUixx!5~VkrU>;Nltu=A>4_O^sVezlkwrDpk
zjts|04K<{GVkK>dsh82*juHE&BKh;l`!o_9a_bSmm}xu~ltonnz5UaM>G49cDZ_Bg
zkv@YirOT_~zE5&kaM9bJpwdhc%nys0Oo&-PYtAn<27de>4P)iShsZ*tP)@Kd+^V?d
zsm%^3!W*p`FRjOJm|UVj?Utqm6RD_Mw@A~MZO+ogg%00+u-BOy6VU>TXC{soWuBf#
zRvNg8;B$@ms|>Y$oJypMDjeLyXU(;D)~7<#zy6R1=K_qFfe{)?ITS+g0$9ASzkr54
zQOz#FWI#7=><wAfq<@+CTwCCG&~{wA>$h9xbOH9%0RP9DmS5K@KK}wI8HiPYsJT^8
zE<&UWd&tp=WoixHBd@Rhk3_)_T97%zSvcCVn(!J%-%U+lQ}ePea1T2-;xt<j5PBiT
zQegV-EVH(<%?Yz+$=<tgL}Zf#9$=pJ&X#%&*pm1L`)lEvRRT|)KvO+O;E(c;EMcqA
zc>skzRP4j}YjyB`*D5>q^~>iKE7F!Aj48ODL;sT@iE;o=@3@J6e-R&>L%`<`pcUm-
zg%C1&Kml~iDv8e}?SP-BdIuy__b`rcar9GbFpQ>5W)&mPA)>+T9?c2YU*KMXv{bTi
z<dWd=F+`asLBOg4p#ns6rGb1KCV_Mfq&3Bu=*OSCVJpvweCJpoU&KQ|$1$xbOTS4I
zZ+3>qoD+w72(ATNMRJoHhum6syO036a5~yczl)Xt$ggc@nmDi%sLUl!+XmV^M6W1^
z)9d4q@Ghr<Bkk?|Te)qgTgF7alHOP}xHqlXP!Ge+<kJEArg^OW=$E-U?0hLU{tTHt
zqeAyR$Cdg*0JvOnY)NDi#^?ZMQoTAZjm&m>yG_FSj@S<cXMp*fe1|VIsjgvFGDW_z
zhApPE4w+mYGLC+VR?TA^UctVcf;&-xeaarJKk@A&87_aQpWGRiDk#J{er#Pz3epnn
zl=8?<mDO?SAGfHXL@OAdJqr(fc`MI9kQ@qQv@MLYfs~IAh11$y0hA^?auuLHfT%<t
z9O{T1%@JW?jb>8acXp`p-wctlNjM{<Aii-UL<^STs6}S>voB%k;g|siEQfSk8_vsw
z--?Oe{l)SZi58A&J6B`N_cQEWyJ-Q(d3wdn)V!0rkCLEOj*J!=9{6;m1fksb#a6?@
zLD~6tZ&y%ZHXySLHftB7EF*pO5Y~;n?xuIQU05d#Z3v~21+XUHG$`(<X$I^<^xPGc
zHq-rHEQk;|Zxa#^1Fn{x!#P@d$b&NW?exV~kDm5_Pat-5t<33qw5#Ogr?C5>Pgwsm
zw1UrnRabRG@YZhf<gf?_xiMf_)u&k(Ax%Rv0cQmC#;sQhY&QAL9gR&@9Yn4^ETWHS
z53DIP(cC4-_UyZQk7()d%ajd-J0*Esjw^j?9rIwE^2^XGn7UtN$u8g3T3O@<U5k$D
zX1IGT@ttOQHh+mt`aiNg=V>BgS`gRawb_TStU>wY%BRyyS&IxqvT(6+c{enSZzPHh
z%CR$V>)Ji31ni08vXhAlp<z-gf89^E(W8B|u$|sUm8&HD`)(Qz1hgVkOnYbOPE)Kb
zt2G5&&7Fe)A2WB*o>s8K%js-RU2q$`T)Qi|C!n^`+JXE9WE6Ic@r4{or2hwUCicsp
zCf;XS>Ch{V-wIa(ES#b#&3)$YkL#yT3y4!o&I3Hz<VJm+NIsNwZ-JO+RV-viC7rAf
zjAjf9ph>bkO{ci<HTMW-fSLrV(GM|XZccB87<5z~?zf|?KU9ZoQf`Z(rFAR+Zjkw4
z#90KoE|sSXOE29EXDKf$Zn0X;-(tWUWB;rC@QV5Fq@z|+-*Z#m6_EU9*6P!<1w%!;
zhWZRDljlCHF9V$OuTezT1yBVPb@`?VmY^VgAB8k!PPrH{WV*Dk?bm6=nl{Pn6EkH3
zGHY;cFTas8$an-%^8+l~S=P8qtcHwO(0;abn>28Dl%X?~GRq*DC{mJM!xnH2%s?p9
zNc#-yy@F9HTm#7EsnO{cL~(6OmQX<Y!Msx==wPnA(?;jM@3>0wwO-UlN`S9alk{c~
z0ypz^f`9+p`1lf|6>0_ku68+Rr)cN5UwbpjtP&4K5MV<ia`|@wQO(JiJzFVwM2rew
zS^A0QBq6T^5ROjQ<%Sr$RSS;5*&jVS1I?gnpxGqqkDRud?Mf<v)&Wlvj~=tgAa7$-
z&glXCs_qmjGz(YJg+_u9%~Q1ZBuw{J?Oz1wFgpiB$o-V0(H0{R!{QCj{t$_oh}3?P
zv%beU6q)W4*_2M_K7A#uul{(q>>}7Cvy|9IdfOFD`ua@8Dem(}faBuBC6bu%zs#FT
za`k+@#F@D#3FgPD8>cSrO#8!FP`P`%FDytF=H(Td*Cgz;!LD@vih;w}t1of?h*T}0
z4EC8HyUZwRf1Tyfb1$~hn-ZPGwh3R>a6>CO1~p!?MDqW`Xdgj5;^6h1EVI_cH{!2p
z&Oj)Pu3@fyW7(_V8@t~!jI)>?L*GkH0<Qah)#TDb7msZVMUb@yqY$q+2~ikt-m0f5
zw&&@eqm{5L>sn2+fwVF`k@C9(k%JAFCAQW|+k=|{!12|Z6*2yI(wtz3vW!;s<cJd9
z?a|{Xb1-45-Lt$4psYHDmJSH87lcE~J5H|gBPofp)Jrk59@Xy`YplThsuTM=(7DVh
zhZaiT*R=9Wd*^FL?MRw5T_!F4nc!VtY1E>4!EYv~38mv^ez};1;sD()pyZcIm?!`!
z+c)5ZQNg|rICxFPN1%MDCDc+l6+=S|yhPw05Qkl5LS<w+v?VN4rSf;6k(`h-;>F|6
zkqZJnH959NBBoBwAC%S4-Bw(P^lv)$<9POw;xVd`<T*f^X1tco?_7UF;N(U&wIIYD
zd0~NRE<D3yVxHn(yqq&C7CaB-B_kHIpP(5+o9AR&-oWV>>IDtEO=7HC*Y=@RS1|%k
zo$s2;Yl-A>6Y&`@P>`O~Z;6)Eu3hEH+2Y#yat2*ZFPGIzG>@_#e5s(kjRpVu#?mMM
z9Bc$IDU}{+<*u8ipBYWuk8bKVWVP|vPEflKZth(@+1Jb}j$*vcub+pEUAanT>G>P-
z;pzb?BBg~HxwT?3Khq1C`NlIZI`c#$1(ob>9PIC2+-rS8j#rdRU!5HI^>$$f-Pj#w
zB9_kx36gE0o4~f#dd!$VF7QWIl=HXin?00XD|&Ze*<l11W-L8F;GM1%lSb_>a$f&z
zL<I(y5$a!yfCO7XfW2J}t8_pwRWH+HPDEQeJg~bL`L^eozC3TND*(~?77*mrX)hSi
z9D_02`Ib1B?+M*9`{>?80<V~q`&PCqMAMi_UefwRe2PwH?%grp^@U{8ok>d+b~t2f
zg!aVERT@mS>eb~@EZU($3zr`K76j6^4mNuT8qEk_i=GMS<<=8;1(Cu|K#SrrA&*KS
z=r-b({m@e@G4L0auQ6@JLPD$crh{~K;=P#WE4}Der;6jx3^^eff9=q(aRG0s?|~)T
zIsMU)+zSq7(hx$|X2%Ks*JId!5&Wfl`EaYMCQa|_i!lHxPH#Z`oU&R&IpU`<N!Z4t
z^9Amnp8adun0J$qkWY)t;|C_)x>B-2r%5N?ZZh2!5oh9a@VqovgVAt$LE5{5*BZ>#
zV0U{zRB9=Mbwc5WgGhb-MBQrB73)fAM2!&shba$8;)i|ECrtGA4>bObD>lum>`?&v
ze^w3__PWg}BUHzxRR{60Rf?6}Lzn{px`IK<j%OK3<-Fpxr&5FTv{y>7^^;a{c1_@6
z@2^*@-@U0<B8pC>Y0%&4wtB1`{Vo6*FP$M0e;DV2iuMRi-O?hOwz|v`@ZHb&Ea}rA
z*e3J8WZZ8X!3;4itRI`->pe=buhSo=yXfVm_Ez$C-2fPZ`eqTrK{NGHF&YV?cZP<q
zBsO0}c@BUq>r_(9$psRo9zmH^^2af5!Dea}&Tzf2jO7)_=*JS3Z1nKOgz`|}pfU6V
z#1!&XVk3A+58^^{P>e}B6&MXjgTZ=Ekmqtck9=ld_<;@$M|$AguY!v7g3)aQWqM~@
zTrOz<`2}cafc0K3@Ji=;P9(pffu9TC5pa1FB9S-HJq9T=GqhscQ?;F?yH*dX6L6`K
z6g%23tmh+JF}(yW#diEDxcKpnvkB(o_#e-%l+MMQM$<UU1hE+3!5VbxyLq?DpWbm=
z742r0a|XGs9V`?XQvDoP*kmL~xLW&fw(};I)x!MhT9R~#&@>Vwgt6V)6-2-zu`)g&
z;+T^e(m-jQIN&Lkqd#e-3_i!Z`ic6{_i7KVP_uDgXDIZP!kduI4ZWgd=^~hMZtUS_
z$aKLIY5QCek4B`8qiNMGCA+MAe*BOV8}qY!MmgtHw%ue6H;-K=(qa-0yMH<1%Q2+L
zR=s0EKC$Jz?l3&9d$?sLu^&BYiY_<Q6-y%lKp~%w_$Kair9a?P{1V0KZ#kSpb`Gbw
zkWgW!hGLezV;*G+{R`D7=fb7upB__pLc_0>E`XHz&}9UQT|0LjM~oEX+CZ}3*DO2u
zB|T!c2#VV6*A{!xND>0Ad!H#bklzq71Csy$QO-;Aj=q=qKY9$)1Y}3t@GQu0+q;c;
z4s(>O7hNaCJQzJT52^+Jm8eTM@v!)m%%e<$9AIHb#bH1|JZq{aM-#eGM-^?!JgrQ7
zwPKs&3({=@wmzw0l<n<akn2i9TbZ$Rs$t+NGkk6@;#iwm*Flb1W`)TQ4ji6~ZQc9P
zG=G6P4;f8w2W1ICz_Y`+dkFFb8^laIy-XO{Fo996`mAQVS_v?jWK#JeCH^r(t{*1%
zuLkfhJPzxBs;cI1Wg<)$AIZygz?**$M4t<E7nXY7^`d1atnY^&4c?xkzb-py_)O~I
zQ<wmB(d(7}3@H!jF`@;VtG(iW{JeDw4>JRJP{9Be{DFmM^&&4ny}8-}PC63(_t#a~
z&pc&f;Oj!$r1)Hoco)9hgTVUw-2tcp+z0+R=+?kvN>Is-46STtt^<^;;N)+mYBHP6
zFccmmxftVaC6?Qr21)R<y!}a>({prwUtw7ODy@^X<bs_#3*JSQDjK|c^8B_4K0Xti
zEFx*Yru|0_`o^Ylk|)m7<K?}LfX<{=-@m*@d0$oj=*02F3y!xdTuHOBi`EAtp_0{u
zX7?cQWNZP~D^~xs7}6eu`N7~1onw845@)XlUOu^1G$p}{DMjEs!hh;obP%C1`)fYl
z@iPNmOXy&WXzG=H!4z#W2<fA*!CQEg$muc5^Ni)d2Z>v!$Q?)GnA`p@feZx_`%I1Q
zwTI}*^=B!oV`2@r75>pA=wjqhg_P6fMS%|!gZ2XT*!_#?K&WC&W`;(R;OMIZ^|fOe
z-97bpY4@^Sz1pi;eMzY-QRMSC-XF5-WPFHD5G2BuAsa`kL=lvUZ$Fp7Ke}-@H66Hu
z<q8a@+w}>2`4toF+z(Z>Ax4<b3I9U*aV}IhZD5n`7+sfvCq*tOs6~nA0svV$qlto{
zlzQ-U6G#~(pA|D{D+wk?o7!UWLASg3rC%K6l#k6Fv<qY0`eTXT5bq|#G_WuVeafAi
zlm}l)VJL}+@!?k`urExIAyx9fH(&#10tq(aOr)1mdh07`8zm>P51g!HyKx1d1a&`b
z;OSM1SaBY<DGl{!>r6cVSnn|=vGsriW_ev~{60~?G#mLK(H3Sj&yL?gmAEi@Hqk)%
zeN(qeM_?~Yv}nN8T^^(~WmvTT1jGPUK&rp)a1D!Pfq-Sq!|BM}&k2E{TiEqqz<q}B
z5D0bgd_<lpVFH;ocG)nK|6Sw}rc<qQLe7pZ`(nsr`yI)3-Xg)Di5fZw(MQ_}HA|Hc
zWC8h`qzt3{fgF}#YbwYONq-ASaVQ|k-!8-%d<6AJyP;t7H>UyG%mR#WOp>BmY~jhl
zCk)~EB(mosyRaqV+%||r5lRy0`({_JEiCtqayabT9)<mgy`3F7jJk~aNxb&@+Jf_e
zXfHRU<i1#ro|m7zEwSPf&KE!<Zz7bJ(XIc6l;8}xqXCiSJ_E|D;)#xW{hKNvf%`P-
zOTwgcr|72!^IQ`{A$=R1YCM{LtcryHg_X4sqF1!xtv!ae#aOIcMVd#_?`B_oKqb&x
zr2Lt2OpxAOpL}fzASVrxFP`|R<tj6zK0~;+n6AqF2pknVM5on0p<K=N=g6o(@4!sv
z33Q?f?=daw-wOdK$C})QCZl~oJ$8O0Z^clpa2gK=%YOx;Lo54%RQ_CICaISH3Q56B
zwbt)Jtv~UagWj99odXAa`*I}vs$U-~6s#8PH()Y2D{MDP#Ioq7O-H}Q<U1dLc+U-_
zeoBl4pxQL`v`=;o2q&?NXmi@LKg?NKhNcT7Z~$5IQcS+%hBYvedHrvr+f1g5TAzXo
znvFM)#%OMDeXKq2>@4?tS30W!9VI>SG^FWP@#$WnZLblm!?j1fb?_buaGW~_@N4DK
zxFMgLoy~}PF>M8=pY^hIra}LRXaI)R5?HwqOQ#+YDL6#5;Rn^qwq?;wU%0lPmk^SS
z&GrQAs>DmNms!V+^Bg1ga4-<ousOpi<`j7sW#w~*Gq5t7tAvm1tE6XsR^e07PO293
zJ_>lBe$qitu(Kf1?TuoS-DAY3)<x{38yubZx|V9ffg4mXo;kZY#rWd%+&@O)wnm{~
z0Ve)PkAZ*+BI{&rF;6UW)7z6g>2D7{WAEy(Y=nz6d0#gbvYeSxf<}8-$6it#IP;0d
z_;7oD5;$t7SXN`L!@xMxRwVn?ZbR;LM2k7XW;O4~`o`x=Qnq6}e;9sf)FnAM@~4D>
z0=2eM$c^>x9s*Js-)9^AEfqWf^Wg%l4}2N!KW+#+!&(0!QzfFyb#SSUsrW%TDQ&y&
zIRb}ZWe0}^zmtH%NcjDA4o?`d=YT8?t+K+`YT(SjUgX5_$~~l9d)2e|o>8JRlfH_d
zaGW3H8kx#h@%5iBc`J2@fws3jHB!K>=NXZ6@2oU-1a^(3qwc!C>On%<;$*B995c0y
zkl;$5;834msj(HgWfFFs{*Y$fKzkE0u`|irq+BviW|i47p!rETLc`-)VSkf%CDBbd
zmcK^3v|ci_b^7uWQYiYku})SJFFz5hK0Bd$`dp0wqtvIx=<Cv6e{k5s6mf(m@?fD6
zez^~qwGCxb<ZfzpDPjF>Z13F^+f&(IxU+v!`$k%q1jj>|5JnRx8%E52&If|G7EP8r
zEJo`5U$$G;2_%sqf+$uE4q-&L0BiY7I-IP&d@5UJwE7x2Ng_`HPbZ%aFF>nIBWFNa
zuIjD4PLiZo*;{!)Cig3xV0noN_;wEgG^s#!BF<M)vxc${FtXtfZ&5+n%)QK6$-QSS
zE<)<&{U4Ub>&o7e1xBq(yrWEH(^bmsIwPrpgFKsLh!$k}Q>Bc!KEF1Se&G2-jA-yf
zOKJ!b549Y`R&*0v41!x;^^RAx!MsMf#Nu7U2N@k#*71St)9$b9Wvo+3<vJOCC-1OJ
zqT=`}A4uc%Rx6%xk38!<smV8vkP_u?5e7I$Yb$<ql+B_NOJ}2rhx8F2Qm{7-Z}}P%
z$2BHL76TpksRUgAiUg?(o_%qo|1aDGTjro>qN?*CN2a*P1sPGtax};Uco!KY1i!3O
z_N<leGyV<?Bo1yCnSkVRgwXwzwoU$I0CEbx<m(CiJ23M4IP4ny%`c(Eji=;a3@LF@
ztT+q&;k%fbR`+&Ql}k;1O&tYnJ~*&=SKLKPk5Vaiqqr?@Mw;=T0p?MKt+R2`Vq|aN
zqtMHKHTJA>ZTH?kSF_!n1TU6@Tn}qSViNT3i#^Mb=eOF$xP{Frdh*`SGuf*SYO!TR
z;G3<Rxf0Ca!>t+n#2D5kCaY`51{%u(KXc#zha}zO-;WAAE^mZHaOt8Z10o&FcFN}z
zkw_C!z9IvSPvHjdoIVhi`hqffch%^1Tv)P+l^-_0A`PXSd!E@rm$wKRotM-fgS}y!
zt-VFx86|qJi9Eb1;ShQSE%jHRQE`w>2`$(3KzPQ{ceQu>yh6<zGhqyQvxn#~VTSVl
z`RU6a&`<j!Hf=@!h*-u17o!nd(tf>9gqJ#3rwJx|)k`b$QJko}k2|-0wWTnk>nuC|
zw;jwkp%~2F$JXr9M=X$8FlJW2-$vbh-U4=%bb3ZmJ9C0YbeN)Chd}faF9neNTP-*7
z!P}$<aR(~Egq%UV6~nrCy60>%;kq${O2$o(guXw#(3qYGC%aG*@iO>AT=X=m2V{4&
zb-Y_zl*w%ZL5d(-1<+uTNEAxZau>sB5iErOtd*&B-R$#MCHSd-yn$jrl@Cly5u7<o
zAYdg=3*nus%1vKn{i8D((ql%Pwlf8*WY=~UtJz<YSVEm_nUtMn+8njI`uCQq^;C0X
zb@e*$4`!_Sssu~~xg}!MwnTT%c*8_By8LibPzemk`3048f6~%@BME4-%^x343<85k
zueJ;!A@1rkZ=qHO>Lx~%r|Dd%&-@cF{-*byw{+F?LvFugl@`ha9YlA|{`)6h;Awum
zm+`s{b|6gGJc@<EADlduu5bpvWQtK?2oag`#>nObH#%I&=8|?S))@N~0RO`@!`p<f
z6Y%mg?U#552-s9R?L($#B5G>G3MVpm|Khw&NUTX+$k$4|wR^0~BsKp>PeDo$R#&7o
zxSdQ-Vw9@+lFGqGfe$4fUn(Q}WDzQIJlUg_Yu?l|(Tz8X%$G3)j9MCY1PIb?%N$0p
zz{HrYJNzHwWoI|&C0-O6m@B8G{nji#+8!N!RnA$<!t!bR$%Jt(PYyXKJWF!KCS2<q
z<6~`w;!SeQgl^K{fg)>xI~9`AHic=l&D>Bbn6XR>9BHB@$b3jD@6j6OqQte63goFo
zX1pK$7cZo{9ZksZv=<firK2wI*4uxbG>?zA;O$G+y_x>H;rMXmSFNa%tT+<8be$9r
z*JHeg9JBFr%7(C%0>7#BR_~LHzdGHNw9%zC+pg2vdJXVU!>K9axi52Cq{gd%(ingF
zAqIbF>pq(UolbCg9$oo&Irkpq2!0I~OIRCEctfZEVYgc;<JDqPj)geiV2g(??~Kii
zHS3dHOX^V=C-ZD|2Gb^NaDp3XeQfU83QxnLa(G|+X!q;2ERzdesjU$8p?xD;pR<0v
zhv$U;@4~;$-_9uY24woA*Ce2;RS<vvWEX7Y#T7Pd^%4-siKjtCmp0%jcOeb&@FwG|
z4`TRm?TB|>x6djBdmOFGR;v~mb@WW?P`7E*h%@!(amW6l_8a$%(E_&EHL{V16+cgt
zS<f1|`E;Ag8yNPuB~4n0q*{(4I27>Uqi$}4W`Kl-TEx3aGydcXqM>aDl=bitGLUdN
zk`!hoW~>|O;(<lm>i=BhZ0#G5ZcSW+A^z2dIg%EBAzzM?J70a25K61B=81k`o(@-7
zKHB;!)+pN#3H<C4jya1IUi4HO99J}ut~Ei)<VHowD|TH#`km0VjQmr9icpkH86zK~
z>X9>9C{jsYVfCR&IDPl)S)f;n-zEZPQZP`N<9VY11$<>+&P^0BK|w3$KhwHnW*$cH
zw~2mcaORZn`~mlwCG-ne;5TM$5H>KAcucC6)V)@%4Ge{I&gYK)ERd&`HxjwNF0Dza
z>|-Q9m~gNHN<_<d@=Z35g<>_DV_4-5vg6=i?4xSfpCx?AGMoX%6uyrQp9=uYpbN?U
z%dDE0lpqReMz;u3iW{f|mf$X$;dp4W&{XcX=L2FU;rTT}f3xy^W1JD7%O4x=hmrA}
zD6L7W=+dJPOGdv!7>9@oojc`H?kFNl+?{BQCQcM0Whs+Zj5oPTtRE1HjKkq$%RPm@
zuPH6E(w8U8Wx8uU2~4tw(T?l&=IOAE!@;fzZ+w7{6JAGGu(|lH3#1-6X#YC?I~7S7
z9#zrEc_>a=%42hX(7stKReVq@w~v<2ZEqszneG~?8l}+?|8B>IutZPi)WE?w|9ZAS
z-_xsd6G*t=c&Yd`GyW>e`ffePKm)Rvy*HYaMQdrT#szICJO4$i;c4Cdrd8|j;OD$H
zrjTE#jEJEd66z)x`^yU==AuYwLLRPOhoFsc8#D<FM+*!r>qGbAit|14;T|*jDHCjq
z!VfW)=8PsbAWiXE&CM#d>lwSs+@8Sb(A1WXH5LKP6>Aqc>BUs0G;<Naomhm?6?UJD
zA~eKG{?Ni<B>rKYTRINJ+w5y7QS;dkm?ehO6qIlfEZ~zPUIRp<D=-KIVga5PIfWzR
z>W^bH_4@=LzS){!vsYf!za0q>20q^XaV8tbwYP&4Zgul5#$wBF_lpEF{#SAH4{9%f
zz+fJqGNamGebiBJiDHXZX98=AdgZ!3nk(TT@nI8E(RJ*XI<*~^gf=7*a3?Lj^O$hr
z8{)F|SswdD`$r=1n}ws9lv1&&m{Y@$b-x2@ZzaKep*hF$Dj|3xyt~0j!tQvpWL>=f
z5H8QyLWOM{Z>XfzhRGX1np!D%u$UWvpgblL#~|F+mNER=hIuc|9Be3brb@fnTeNAR
zCCpTmk0@|iI^54=iK_e(y;!*XQ#gxB?Yu$yWi;2Am<;s#Gi2`b_ufO-aC9z*^ULlf
z%Miixk`}cn-?116UR}-W<TuL{Lh_x~x`MM4Qv53_TphBK&OKJmv+ux}+WL(1;WK}j
zcAOnn*;hl}?Xnu6>o)td1a0rbM+q7kG)lF<PvWM5Ldk}d(%v;>=iv!pFu@mU@GU4D
z5*tHQ+2~dN{mIy$%ZeTmcM<e|%06D^a@9DftvGku19tH&B=CR}C@oDe7$ZgV|L?9q
zzl>ZAAFe=ttHs<L#1sW-3SYOGt^8D>@cFgFIFf+AQDBslsP$ZzQ9sFvlO2&)P&hN8
zLb57ICUfn9`00a9EGK7(ThV!JllX!hG@IOP=`GVoVUw&fD=TFiCIdmBh@NfgY3rwx
zTY>pnsob6?QpR*V^w-YdRw{^n+h>mu9{kAE)6+WR;ALPHc%O$n37(--kbp67ORrJ^
z!*Oks;OJ?dlS1q{_!U{G%XwzS9zb!0@AEPe0tEZ-;=$op_D{8}9d{{8M(KnOFWA0D
z=kJ0f?k2SP;Q&%Sh|lOaWNy+H#8T39Ng-@ru8Sr8*<6sbILNELqnli&G6yU1SR7Vf
z(X0pS2H}=4u-6=;LKG9fU4EL`&DF1;f&cjJyPS71?(!y<b2Z#UCTjFD!8X1=GPdCD
zep5E-j0)Y4l9R22j={SQ7;=0uyo)iKVqdWAv`>A6ab9Ek<NK%gCpZ5fj}Z4@Ys}4P
zZ~P_`UY8qSSN?3V$OYCar<NkBYq*T2@Y)WBfe76s8<eZ>uQ-@<p|uIjo+m%UODysf
zVa2yRs4ziA+%k$1jTSU|YV^T6_t>h+5~k93T~vH3$p{Q1Nfp*e{OjgeoVD@(3yBk6
zcnbsh(;;HGy25qsFWG{TqkgA&r=tVj)M*3-8=P;MKVcoZ&5w*7C!9FC;x;^dWrS3o
z6`qU1i5>E+s_`5%c~F^|#9h%-4sBPahY*R=FVJK=GxIQG_8v~eER=DOdtbFlY`8d~
z<3?{BFm+eh3qW<n4;7YgV11^rQb2hn3#2vXD0-%>C$&P-frk4RJNE#5oYiE@pci0a
zysZqkx2oZ+7JfWeM)&kVigyLpWEkZUMq}au!*6Z_G$rm?T;=5jv9mG1kF5qAeM4~g
zgXyiko2LpQAyuN4Er8>w4v~alTcWvGDxYv>TOG!N(2-QTLr}>tQ&q`$;INg(Zlw%k
zQ2;9OyNl!k5k1%;x(}1t-DZa0V%zHr)6CncNkUPLqH#Ko%#iLP@lxqcu1DyAp=5=p
ztLH`AhnOPay3**G8$x2vaH3i#%h$v>dtNn-#sMYDbzqJhgjF#w03XkY_VpLN54=;6
zZHd?GiFTnM!fwygeZ)YRxq95*pnkkaA@$^0>cX&IkOhk)D#XQwCmpyYKg08V-Hb6*
zvMv@($e|#s1lByfj`IZ}_RUz9viP+>=PgWw^}laeSMY}P7XRRm$^3nry}SqZ`yoXu
zZJqW1U<_IY&^lmf3nFKAV;nl%ZC_mC7}4KT`*a$I^Q2gC7W;14v@$duFk@`BRfk#l
zHTLNgw#Sk^6OoXYO_#~=&A<Ga>C!PBa*`O=cq3Sp^WY{7ObR)WghU5Rx;0BZX}Rse
z^ko<a%~7opv+SK(xVKYPmfy&1;=8~r-sZ9*W<j8qFBkL;9PSfBox<o(c?2I!49K;L
z+@FNg&*#Sd$TdiiKgrg}igksM=7Q94qrZtYOq891#OS6UZ)75}IuQ<RO1<HPj}<-|
zfn1lC-{1{8ETf{M(b#>!5e9;pF4WNs1&bG~R--QFahh2S&K?J#XZj>w4H;yQg=uB_
z9hQ9(Sr6%<FPuX`0nz0QoKr=ewvrXg!3B<3N&#M@tKaM{@Tj^rz*J=ux&{!67=%P9
z=Ky;>*%uv_I~rAr6%x(z5U`;B(e#UkzrA;I0d+My0&+xj_|$n@6XHh7rOX{A=rwr`
z`z+_ZKehb(=HZADhLY(*e05S@kD1$%o@s~1@|}*5Kg}rFaz1Aq#&BudArP8jOhwW{
z8~gPE^KC@t`46K#3~`s_VbMn=&rHwb$fZUmC+k*cL4AROoRJ9gK5PDieQKr1rllJs
z$K6tgi{m8{It(EpD$D;}%|T?mob^eIYmgKfA&yRBG?>PQl1znHfhPHOU}LOGd)i!z
zPM^!Yn9eM*%>haUvX}&dK@5`!2|qBB7OOSmnnQGD_|5a2Cgk0YZ}s<N@IavU(XSxR
zpL!2d<yA_aqMnr#71N9xRT725Ru>vD;74kizE%39(`&!$HD-IvNWziZu=5O~g1w`d
zjqODcv8Pi`4;Nn?jr^hWP$fLd-ZG$-SfDPe5hXViLZ`U<=gW8~d2ywT_cWYp>X)`#
zLX{X;7f*m4Q0U@K0re#1ihFX(XIEvR3#%XW2z#d4F*IQDf(<fVW8a+rf}<h+eN=sP
zd62)yY0L8`4<_n0zYe-MC6rOG3)Tcy*Yh6{!~1(w^+?A{FQsa?v~GrAaAvXySrIFI
zzellmy@1)Bbbpk(-PnuWGlJyTQ)_komtx>kesE+;E}S|H*UB3jjr|#)%;`Q~5;O9O
z72>AS!MHk~V1%~0COJJ0ut7ixbR$S$A`qh|+9{q4o;XdkqEL4l-w1fBqFPNzQR62L
ztpSp|rt=^R+gBxe+OOFWTTEqJoiSTf3S;6viVw8g(&)t~@%BlZ73Xm<`)&f8fl^;I
zM)`#4^m8d%U9MTr@=*iEXpDPP`F=)qu{o=Y4y~Z@Sh6J1*9+F($0@V(5Tjw~!4l(6
zCw-eMHbE)m`-On12l|_2@5N5sgl!fbR=w$~I0H2~yo_`fiS%G!trkmo!9kq2KfciP
zE?U=}=aT~OezMYU_>YUr6fDgxdc9+}BM3@yCX^vs8;&A4*06)^D$q+?kZ;AxmM=Xf
zO|#HRqJ!M!Zbi%yf`|depDwA^8F4}w%ouwrz@Hz&O91mzO!%NoIF7kk7n;-xLvUCj
zJm~TE<T{{I>E+Q-WtA3lB|O$eH6`C_U_#56%VcgCd;f>&O+e_C6a^Q}`iIg|rqx-$
z31ry0WN!zIFEOI7WQyFKh5G}uw8c<L)ByC?mod}!JBd-_Zct{VN@#j`#tZ&DN1S?1
zq~tvpGMsWXk`qEs#fggQ2piqs)g1FKQ&E-=wF>BXX<!+3_5Wzw#!&RJtny5@t@+Gs
z%xLo#*wMaqQ|ypt0VZA=FNDH-o<mti#3%d`s-=#jd%MyrnozB9+o^x4eqFv790;F+
zY|Z_Yiv(<7J8lU{#8nkSZtBiv;<wsNd{QDD;*=X@$K$E<uPulSc@;LhN~Q%VX2phU
z)AUKXSV#UsA@!q(`kmxMmVVK$jf_rKZD&*INbarc{dcM8T)nBTN_wztNjw#DDw$z-
za;g^t+?JHUl%&$hS8c#_d|~t<1XOHY(%3yW;M;$$L|%<|35HMxt)b;<1wrD(iDnaS
z={&`(KZCvUjRA|Nm1ZmwHk!83+PGoA8~|rrx!Vc3+3blV@q|*(HV%}70i>$ZT-XJx
zg~#T;CDE%HUh;*)Amey=s2xuyfBH6K(i7m`&hr3inT|#URGv2@A)t2y;p*XP%htg!
z+N%KN)r?2yL#LwlWecTHE@QO}Aa0^h|23UNYB4(RY4LR&Mh@0<#e+@eR;|L@S4SV=
z#4s`u{qh6Cg<5eysM11lAv`&KrNyJ?TusTApmcZ&e5kH;brT09k%N#KG^p0%GV0>4
zOI%%zKTEmPG-!#CIEz>P?t2F@Pz#uk5+PKKdtgL42Wzj(a1_$z8{bUNZO96F!6UmQ
z7}SjZ=EbR^Of6HCo@-m=RG^I_1SN1Lee!GhZNnkP9JW}gvnp7E$K#XJHV1rc`TTF<
z!5VBUpfW9Z;0-Iv;)5~^@7gBv=(U5~JC7gk!0Lt~VyEHT&;9iM$cCX{iHvks4!SoV
zI*qi0y9DZk9`Y|T(ShBo-pPf?!iInAl%@K|l4)&iYmz!Z*8T<YM*<d}dhx{n*suR?
zBU6OvnK9bue!y=?ZZ<g-B!wi@9Nf1VBWD}md3VXp!Ub}1jyXi@YQ>FKB2^|5#8xId
zq+19NR!2SH7Lzc8$t{KpRz@K6Tf-{j$bidBDG7QA5fv+;^lck%Rum}snIi%zq*wy6
zs>z<kLpF`{+TbqV(ij)$C4)f}&&HGIyL@ij%502nMh?~mmU>^V%ylWxmOEIv*;Jet
z?l_1Y@Rquvr*pNm5wp2>$zB${5G6pz2=egY1sD=@--)bMmP}~0_n(sB+|@JaDL-Av
zg;_h!kEdBz<ieH(pjvql`HP0)c4oeS0)&>z+~kd#c@77%qi6l!^{nInyAmhJQz11-
z9Nbn<jYV%kaLc~y?2x>RyP}I%pbmqD1m`yMem%j;w_WTENR793I0^U4_~X*dYm*(=
z$M7B-aBdIc%O9Oz#4FS34Q3Mf&8I@V$-BzGq|e*vT`~V3rPLkNKzTo#FN1Mo!3H_n
zq)k?%&f8BtlXkuH-_IsQ<IruSs1`Qn^rr3Y6QC-26m*ZC%A;Z*UZP(D7Hu}H(6LsO
zn*vCKz=|cYC;FOM1*cB{;vs1BI2Xc1&6iM#&-VKa+Nt>U|J%`{^SpQuA5K-N7J`LI
zy|*<_#RX*V71ewvBAi}8LZ9vovakyJV-Spf^2swu9L{sLNH7{8u1878KS!IJZ~VL?
zwh@^g1~!UrjB4F*9ev%jzl$AtNP<5-i}}bLFd5qdHxc<?C)92$aOa=CrlEd(tiOTP
zbY<N>zO}?j62*GUXDBnw_7qES!E)~)zr|5H=mvlbN#?>B-HS0%-<j3x&`ZYuIstZG
zr)*KG(MUZow7{*4xt5B=;{nN$PD`Y6ct|o{nk`)h``2N550|vIzjXfNUpi!CQH~AJ
zvgc*`VxpEmp7uVk2~vPo#(4QM&2r7jn|7`qZ3pE%jnQTcAXyBW_q_Q5<XV?vS}Cew
z0Cee-cj=VbWzo%Wjug$K&jNHM4o5>wef8+tfmw~cLZJ}hJPK@<fU(fL{TWIUC+!Ap
zq_lFbKWlwc+!%9)_yr?8Vsqf*iuea=t^dJF89t`&HH1*2Sx}-Mir+k~M>8L#kZ!w?
z(sCfsJ}?D_wSm0BC7JImOC_cioDrx;L$572NSI#lloAxagIMoJ22cUWPnd^?8^&2D
zonyeAng@n^4edv@>Zja_9d-<o^!LZT3CPhl_Z%%BE2l}@RYVD7>g)=nG<a)#7RU`+
zah5ppV?ct|EeVP(BUNW8?H@OtV=KpV3M`p#4GVoN^K3T)6~5N2$I)!s9!Pf0ynSX1
zsH}6>%itTNcXJu`y>jn}K(5+lM}g)+ko>%$E`~q-_7m}8;W@msF?;-tPYAc<qUtvg
zyf^(qDADQoOezc%7*=q?I+m;yoA9$d!0<z^CG_SjGIcU$^<t$+bO@*^X~kkw5}`~h
zdOvoIF_B^XAIR!3?9e!ivZ)G!yLge*{FSHCGup)II5P8>boertKUJmB`(lZ+21$%#
z-1nb&?jXCQ#o3BF@IiateS8cokx9!rO7Yslwkb!%ATq4)=?q^OX-SKaQIu}}!UZ4U
z-e_-!!DboRd^e!3oLs~3D^e;Lico7ks2&rp*Ht6icV4=5yJah`vp4a!+0HpW?T8v+
zFm?O{PQ6E%B^AbFnbadz$sT9-C)!V|eUvxeEF^h2JyS=+d?kCPO7v?}f4PX}ct+E8
zLo7JYm$^{imeU&-SPg>wI)|+_R9|T5GP6=ie0x0nXAgITtMoAbma;|a-$YjVi$Jj{
zdALbmsZ!zvJEy=Htrysed`@7aIO+E!3W~+mW<h8v;aZ!NB6_E*DedrwTbx1b=rmcN
zXCEx)prOd@imCm4>oaw&7Z#kLE~`g*bhhrY3PytV@FBWs4*=}vFOfFKzlzb;z@^;G
zXNS7~8l{s{NWgb&+4w@LQUf4GR+0FC+H+4UM3#pxng=><pm2ZbIVmS(F2Qie;3m5M
z>PzVId2%J72YYW}`3-|eJm&p6wKFo&vW3bJ&^p7kgD0Mq{Z}&-XspX-B;IOB>|o!S
z_L8(NN%lBHx}bJ>JlzSN?tL3WBJ%2AIM4~}Q^3=<@Glk%(KcsMmvY?oLcWsp;bK>l
zozqKx#u-C+jV_ax$f^rl#D$<%6(3o!Gw7WlaYZ%_6|Z~4@}<FpH%3mHBujoC{M1IZ
z#zPujcu~14ja^xM746_kvoZ)(H^+<*J_gp{)G9tNU)@~Yu$9Py-Q`%+7%en&<L>mQ
zwUzG36e9g?KngA%4GF_84+p(lP*7P`=;Xyrtn~`(UFU`!8jw^996)9WY~fG)ccrbL
z%9BpAQOWBOUfUfYXI|=KR!2bLADhU1<$GA$j=qiu-$a*WBX$mow`$F&+RNo?F!Y9k
zF7G>+cQ#$xpkahb;pQ6Y4!tcTu}c_6Cy1;SFsDO=@kU>$HnEQ0v9<|s<c(3vpfdRq
zEKmd)DloS&S4p@;V5D0iRUiBO8Z%(#BLMK7C7*M$iTyDE-hgHB0pb?8(h02?0@ztQ
z34yXO9RTToM|<V&-4GBJzgYZC4~+bD*1wdL-kt#0-EG?CTYTRU#v~97T<gv(;KF1T
zTQyeh=8Wn7A(dM&*VfQK8@4CodCUpv=NOq)<@a+oA{`4iYk{Tpq|dRC;rPtphL6A<
za<iU*5y)X@JbRgV0$>~oBec&{6hH+-3nk@A;`dxX=^opJG&wD@5dhEbH1|$>tB*sL
zUaNn)@cb;lq@CP+7d*<{j&GQ2Pnt*BYo@e{?-d{B@%qD3?kdWwuMocwCtf4gbS7$s
z_EPO|r#fLmGOcSUxZ<NkLq1C7AT1`$=FQIjj^z|<ofEqxS4U8p6n^sAb<fLM&-=OC
z)otHd#ZTzPWR#<DZr&;!Mxx;8$z>Z<Ki;VLY6vc}g``^7YDhVN><f|TNNlmHw_AZ&
z&pLsNx6j<bR$ADK6h?;u&{pYsB(J{WFjJ>AP$`}?XUvxvjEs|ItuOA!iY0Z~FC-o2
zRA$J}qC?vF9hI#412mYY;j}Sygn{hv&w-!IdA-ixQ-)+C2P+m19&oXOXLbSmDN=qW
z-{l(E*Z&>|<1~n|9EJH?Se&qTuOCr1<>%My6NI}cOW<#ypwX%&8>?;<W6d58&aPUm
zcFhJfYw}5V3Z>@VpjeH`kKZj=(=e$aR<SOI{q-51fEl^$I5=*xEN_y|d~m^6kDFbq
zw$PYr^qO}7(P5Bkw422*M+M%*m3Lj(q1TWi45rl*C#hRNe+-P67Vc~kz<M?sAOF-M
zmI<W2Frm)(Ru&0pgyufjyd#fknwuxO;fu73f;P1XC<J9d_fN=Ud8CSZTOx`<ZG<Nd
z{ymBA&Xh9#YK*@OelZKQ=pm*DdX>ow1ugrcRLicE=EA}K1>{Dy%=0t9S{^CH)I{5Z
zs(5k@Pi%$IcSrXnVrF#vWESHW4qk1J<kg%2JJSn}_CxyLVEvrde)tsRWBzh1!0PYE
z2)j|c?u=af2-QeW>K6a)So=g>^C*8NyoSIy{)^E%51WgizrHXm31LyIgBqgn3r2(6
zh-G1*1a2SH)ZMx?V~L}mxOLz2B`wX8W89-|n6AKTLRUbLHDYgZ9-d8U1OHz@DS)QY
z(RE*LE-99y?YPk$%*|K6oEo^_8}PS|AR2L6>7~FH0qIh1>uR%V!M>hnh1Du_H%sp<
z_b?#I2HG6_x7)jTnldFBA}V|Plo&2iB#-D?N2pwV`2c8wWq37<Uu%jmwCLjo1VFy2
z63cAAP{D_IzeWFOcq0MnGL2@nc5S$Kt_3huf|1kD-qozq#~J?E#2e)9<lC<&Wyew=
zn8n#Y0f$St6KqtTTIOC(O!?r#8DmeTm>A|lMj5s?9jI!UE_Cq5rqPE{=8r@jI7p9i
zOnIu^eu{ut{=Ow=`pI?9pML4%uJ@uo!=s2dYy)qmBJ0M*9=GThwj%U%P|a?XWiw27
z|Lm0?WCy#jJCWV`!9&i;E)WYUjY^(p<;MFs27Gl&K_Ao#Lc4aUnz_l6r8SjVyN_7O
z(TI8*L;Z@MX3_MYG(xKjf8i6XAB`xi*D+M}C2$m{4Fvu*wTZICm2tHHDZ4HethU<4
zWe-3j!t~@AKQ`BNG9kX@d|79g8(=Qh)8Gki`6L+cXFc!Bd{?D)+C(txJ>r#@PkFO#
zC)=XrsVa@baOV;2`>{xuE^os-(@B<1>64UIhVXM$2Zm;#VGcx9({i!uSW2$|MB)CV
zWV7n4+t$%M{iS!P)>38bjgG7T@6H8*ti?{?oExVZNqOfFipnoYdd#YJx!lkX6xEyI
zjMx$c89>0%#P~7y_mCT7{_NfYV!GsZvkCc`H`56QyFnr`n-$ex8K?XAVdg6BA`8rb
zDO!|7_J2TGH&#IjMBWZ}+Nlp<T8-UWx=Ce@L;WA;M9)?!n(WGTbwn|nd=gZS7@DQ|
zvB?h?TG2l^mJEa&*ki8Y*le#LIlYp(VvIbZjKU5P-iNPv)BQDmCq=z=Om<6Jw<+}g
z;I?;U9<><N$2o#GqkZ%?BiZ3`(j0SD_10Z*)6*`}!<(FXoZPiUPBf&r80j<5HwxF!
zGg^1^^F=kTda{t+n=u4=ZkeYdBt)3-w2*`cKA8{jsb?`Y>iUMc*Aqb0LHsq`STNdb
z*v5ody3>6{FALfTxj9XA<}9aF!1qRIH)<t8ZCZmByZn&4wsA@eEgRR!2~L1}p%`K9
z+*xg;Ke27`5gs9`gOmGYv!CW_-npdt;l{DeDpZ_HDx{$FSnxMZGA;w<qrJ`)V--p2
zfa@~jrrIz{)@PEx4XgIP7nPmnsFwl&Nhp)*#CQRL>(_AE?|}0Wd!{krL?X};;GVAp
zKwVFr)I1M$h@{`Jyk)+lEsEy4#2Z{r;Ar!bTLm5}jBLd^b2w>nNeo9CqFe|eltQE@
z>uU1Dqxyl4b9YI*`8cAS3EP8N>i5j`X;X;d2acW68)-3u=1=&hc$huY^?WgpFs{lb
zjZcDXRES#s^{~FhD3`OaSz>K8v6%+_gq3C-?tPv>pwW~WhTYa(ELm#)f!<G5fCrE(
z!o|1J@SL{Vr}-d^A2cFkJ%~zG%E|4E;7RZWZruNw*P@K`*qLxXL;($`jbk*!nyd%d
zwBv=%3p>z=c%lcdz{ARR(=cm0w9MJ2q3su{BsgJwRx`8UN&n`4>?$Kmh1GlaDUNI{
zr?M0l&%4<l)k<2=)&&J&@f!TvmPyaRd5ot@^keOr6w6^WYGP}u8>@<vWwpj!2{O@P
zH6`DWZFD&TQLIr)T+l$MfE5DZNe`gwG-0Yd%M(gVU6xuXSM?pWjJ7r|(exhm0#$yX
z%Qjyof0t=dVDZ1}sjeu^Iqd&S&O5@A7<D=l&lYS3en3*eO{*0HS$@5EiYwLzgi#4<
zZpl2(oW~ZAVs8TZ!LYifEh=QP#gDNw2*@=z&81Bsn<?M711So8XxDiHBm@y!2hu1s
zO8sxpY>Jg#Fh6+UYXOr2)j`2g4%<%v^qJ|8G_?OI1sed*8G{$p)?ULVB9VGvBFLrC
za!h<!D&`3u7m=QwhgF8Wl>n#4gBXjc5GZi`e`5;^X`&3%ymET`)6pheLo%|2(|8;b
zQ!fo8onn6uq2DE4Hme<sC*ljOpnpq8xpQkA=)a#PtLj-VmEg<(jk*R+-<lzX$h(uO
zX2Z;QnRtTseTN?{zNISR3qNO`&smT<mW~YzQW|@=LX{AZq^IFOZIy4_<%Q7+F)~Lu
zS|nehRO$)>5OjpoG%C%?(0~dZ52*?2`-(^kn)Ou=dEo<nGc>22vVm`VG}$jkO0}sa
z@>7hXn$BVR=p)ll?=1_p$NVrYSca?j46Dg$$@-R7A*BU5t*q*Mls!=v{QwuqlZQq?
zCw!Ei3|~vHoV{f|yCp^y%e@KMAi0a4aX~gitj&U>X6xSA+$3M;Q+`46@3N?d1|cSl
zzqo<F8(~PoR*}tIn;dTSH;*0M^;q$b)`vG~SNn!ynN+4Q4{NuM9IY-xShv$RBy<Io
z{V-XPklN$cPp8f#>$7ng4EzU$+sbY3jhswMGil`4vgWKbdr8=4A}SSMtJZo42D$qG
zBE_%;hC#s?y6NnmJ9IC5{}tkb=F>`G^hgWtB#|FV@rt^gA_QF5>&(?m^!9ND@G6)~
zB7Z@TTs^eoF&Fc39twZtsG>C;1{TXnIxbf;jKEt;XI^Ci``)aG15Wy1;p3}}S8bO9
zOlmoUbXI*wDO?1IR|oCqIp7ssuQIF$mc=PwPQz^b<mahTJYU;aI+{sM33}v<$HkX`
zdJ%#v(nmooByo6$LCwcZ^`1iV;DlFi5hi&_l}c*pGJ7ie>k)U8zz5A>UI>}tL*xjB
z*n+_nudXKZNvEa|Za&l8gQN@Qs60CVWTl03EouoF`4qB_r|1H(Nr_j(^v1&L>@+R{
zDnDEI1InUe3y!f(m+6y&rhi)=Mt}|+iwK-@UR<M|2%xlg;+<DcK@tv97KTHNB;&A6
ztY3U>r|VWx#fM5&8rJ4+515fA#A8|E$3V+Bf}2KlVL;}d;lIIjp<7pH`cfPa9R32S
zj~W*c4#qK>L(2;=4`V3MAxj!C+o=yz{K(ukr%kQ1kE*-m*AQW*;7@ojE~TIgXVA1J
zKde8@;5MSU4&a|zXpuowyG^DP=pqRb{bR8gOz_?aEVoeD#c<EY?)?U$>&St6t}$E;
zX89*ymK91lx@%cVp_m(=SeH#mGP6@$_A#A;i=f63mfds?PkwAYtlYcK<<yy*{Angz
ztPo_<<v&Son7xz3_`{6FAfMZ}3K*S>gcsfsSt$;4#M;0`EPpRyVmjvS|Coe~7g_*v
z4TiEeeMp+PGY-__l(XkG+Q!W}hxt0*FC)wXLtF<p7Pa*eHIgBMq!oN6S^YEGJA3IM
zC=%{$)!>SS)#Aos-`4%TTKRM{4F$6u3!6G^kmC^1d&%QszzaxMWiNixZdjZTr!f?8
z%?j16_Mi4B2~@kN(qB2Br}WFcPCm~Kn02xG+r6#<5p_(UG@5~C*&|QabeGXa@E?Eh
z4haG4CHZ}b5ARKG<xn_x$n6D;MurJr#LVYgsOMAKvX+jysfXFeQgJQCr{A&hHoa2A
zaDUX7CfzL?j?Uh>Nka{r6hmXsUELL&iS|TnXwn0{n3c2Kt#X>meYB`w%PCxLf7nAH
z6f46hv01h8Zo|s|ONXA&6N$B>qq&sVPcU;eLY3cgFPe0wpkJ5PAt~DMM+zRuk*>#q
zWP|yTiAd%nAH`X`Aru-vQ3iM1zoI#@$P&hM;9}LPQI#2V7M8tK71|1YHCm9J;B?su
z38k(U-PRKqza_j(Kv=HG7pLUA>ac{$oA}gqG3TRE@wMgrafodaLYuxN`uZ}8Zx}#O
zQz(sBslYR|_sZHevsKgnJa*xYu&M=Qq9zr26UgA6T_Dm6<7`oiP^WSu=i}(BM0W&6
zN6nPV8h2B?lu~VGf%IWQ2CM=1N@0bZA4mO-+L-&93xHux$+B@wQFN!fzFWVH`MT|#
zBL8{w7<Jiv_6;Kl3c!#wtlapp1-)*ubx(YLsH;#Eg$urT;4eMD;a5lvk`8+ffHN!*
zZZSqD4)tj|#fxdTz~H%~u>kL)kTXV<YGr#AA%a^Hs*+cXb=Zu1A?`cdgeTBxwi4#N
zq!u{4118@Yn!_z;SgIreu$8%@#2_)faX<onbAv{q59G6y+}E@tlYcnZPl_@ZK2$qW
zzdAi~xqlrtT!EOlzv4gC2~p=8vGLinx~+d(fa8a4sTEZ;R|Bx`=#IrUi3$rk>U`Q_
zZLnJ~9_&g^PKnYl`=kG4cKGV?d<A@|80YxvUe%huVg#tAu3M^p^sEJ|F&5PTdn_aj
z8Zy1{KK*z;^ctg*mNm|O3MCO#rZuw*x0*kg8>WIlQ|G$aCMl^n_spiOYuGurP=)dt
zFCE@)y~-5NNbb;|WD<QLZ}RcG%$P6PmDaezus|!D=!l&4C#u#&nDt&HTf-_anZ$WH
zw%<w>>Tiwp^<oG0_$oDL{ASdixAQj#nlHolHkfEs28mrAON~@rw7ZeGW{|RuDR`}D
zT_-}x+*CdG@2Xf2)^GS*>5@j*bFOhS){mg$0c!>QJ;y2$ac!)pyo}Aa?|3UxUFWb%
zA(PaX!)J=)*Ok7WJ2-LMcl8=hEcMVl%KdX&!D{@zkTo=>t~A9U=GfNnayQ_isypXx
z0bVJo>L(d*8c|kgp?pgOpby}Yw$q9`AD-&XGr%dUm$B^|A3pdQlvG5R*8XkV@T;Xr
zpi7}&BK=XnLUppxt*&PZ3~h8#XH8+)-IwP`Haraug3!jCg53HJ{LGpW;wvVsCUx9A
zQJ(#jtAZaIY@Pbbuq{TZmp8#INf$YU|08MJ-=<D;>81_)D(n0(a^Lng`V?R>-Lo+1
z0L?(X1IY5#+9+q!*^ymkgiR*|QdiN&^Xvv&m+dhPK5FnEpHyqr=WOzU;d$rK{T$i(
zxTlg<a<L|^3VV*LN&GGeFU&a^bgvZNH24a*WQ|i?axDpLEpG|NhJ_(L#=#O0b4a#m
z8wSjx#Dg`RpcNtBE8pGI=EBY+wA(Dr6NU-&$7)ja#H1cf)yE92v&Fm({YW%}?AA`=
zj_d&-pR0P_7E%N(;rPEqxBKHL%+8!=bQub1`1S*Rti205*4{ohsaZW5)bsRys(V{3
zvY8$kojWm+`OyfDqM=3@j1DpS&OS<y%L;dB4WsiDFk|zcfqO#&0;kpF_UAfotqC)L
zV}K~?4?{Ipk1DYQUKYRrycHK5{sxcs*QL}q_v^gTb8C_CH?0TJxIip7XJp4$AJDAw
zHT=HBUV=F8#@~{$KmGo2xnUoH>+qiIW#eoXRw73RLz`nuX*%RQ_{5^xq!Y?<WnYG9
z=Bov5mlhP<gXTXv=diu0#d77tNq3xQf$rRJuYd?Roq1}EUu;YhIZ<ZEx^@n((Y7Tw
zncrLz^sz<0T^^IECeM4hnfhbpwu@B+?aY%q_Y#6`t|qL}rCaf`Q>h2X=g%(tzU~o{
zKu-L*JBrAL%EQ53fUZ(B)*R%LlOH3gbcCkcf4~cKqqH#eK5a6}gU1IWv^L<J%~%ia
z3yj%c9@fN5)*SW+7YPEv&4o7pPQ#HXwPCfR%0;5rwGz*`blmRyT)T><4LR6+cW!Q^
zOZpm|8Pjx!*Y3Ux4e<v8r+T|??@CBXvV!<M{2@;c3nVZABqMHp1{yEG>?Sez76}t1
zWU>TbZqc;#o?K7{q#!L|r~~$Ju2WXyWNPoul}(L>#_U1+G($@-082%&*{OP|kF4c{
zIbijhE`@p@csNPxqteCuU196-@-GL2JI-LwG{AyZ9MXhnjTvrMCE<-IKOQ_$u{rZL
zTe+agPZ3OGpV#g``U-tx;uBPzwtd+kTB~`P!;Y=tA}+;jU0$WAqRDTyERS{JYxYxf
z(ffNWa7pnm+7T#54fyc%Z;W`+P7S5gu@70K0+%|Brki3u48)9EDq83)AJQfd712tq
z^kzn`-w{J7Vh9oiKY+C#poKddrodb@*%9kiMrq#WzkMDt#Z8U!jc15AK$O20awx1x
z<IM-NeYdzC_FfE_xw*8V_9by6LFm~)=SZY1SprfD&i<%Ck$6q4#?QkGCRwQMC#T8X
z7#5LRG)huiV*@h2Jx_aqNQNqh2RA^F-XQ1!yM}b2EnVPAk+(os!bucow1qS(!b%)L
z)LuDT_en+5D%7i1iSdld`1?v990>tfF$LfAb3r~xU@7K9(YvNm)hm7%U*oXrAeTpi
z6)e@Od~;{r=}&oP9})IH^G#0*pGyj>=CIE)0~2~do-V;HyEw|jOCtGqi4TC;U&k;N
zj|3HHR$P-7evzKfFW#Sy^E&l(%{CQY*!WSv4#8O|v3su|#qMDxUIKA4mHx9la#kp$
zDMW=1fy6@j$_z+>r`HD+?Ye|{Qh%nK#|E$bTht)SiSKj|DVi{dKu@C3)2+D~9iAsk
z+tNWdxHOgyd*q8s4!uJ#?)a%485=>d6`1?e_YzaDc~H`XAVj0ngHFr4q!~!+`iQzn
zj{ES*vc`7l-Xq|jfkBBwwgRJhS!3L8K0eVGG6Yn$`P+gYYBC^aHKP~@r$}=1Ut{G#
zK*JFW_{hn0)i5p(iO_B{Acek+39BAPVF^TLmkT|r+CCmrWiZo$-+PaA31ABStE*l>
z0gg!%c%~tH+Ho&>iF>CcIu6DVPO%L3SYCKQD`7<8wogM7_U(6x948`Rf91`gj!}7%
z6qbWimX{k;ko_IYzc<Ln6|wZq4Vw`66e$o@U!dT^!dGk4S>=s!qEOQji|PG+MM$a4
zp;j5wP<*{g)Nw0j_Ink@J25k(+cue~=$bm4)u9m2CU}QV97oP=ieK>lrMJf=ACdYo
zzg0EN2l2KKYnoqI1ZR-!x`Je<SZLW=JJSFJe?a{#*C$nirCBQ0Jx0Kn-N69Uq@Opw
zUQuh&Fi!JllG%zz+Gz6A?tMR(OfBwsMFAa(G&wxl(h3#gJ$B|S4a$j*?beXTx)k0d
z9+?}FqrT(J`h1O1rCcI|CL*iA-IY2OTnNauOC5Qm$kL&OuzBoViF%0p9)5=8x|t!i
z;C^6Y`lxQAJnD*I_>S4`^HlzeJz9{zC#z(k(r3>^^`i|Lbvw`*Fg}aQfK@lhIxyp2
z-N>OUUAw%fYwLKdpJqx*m|rIrc5CHXgooHDe6}Q1VbqtEn9qw~kDgVQ4WHn2+b`%e
zcC=b2!b(tDjX%NbM0DY0awd${9FQNnz|6ivOEdE|unabpF=I(0Jx+?&si}ZU@ie_$
zMYP9ERmygJCY)5RcS=fy1r;*y&uybvBYcgc0A^YyS5|mT=>eC9LC$B9v(e6%exI*1
zz?MVh4zB>28nSnzWjJB5IG6BAlPmHiakd?2&*%DHc)K><?=4On?g6$t)wz6z)1To`
za+$O^UtRS>m|BnAMcd6+q?;eTHU_T9`@-5%Vq++OvnG7G)HB>z1e7i}I?R1V7VS*w
zkRqErr5Bv@b8yK>;^`r~)?fJ7%?2FT6WvQVTbs`{kwA=R)bo|z*8mF|d%{H#?G9)`
zqy*HT?iH)pLcXjY)k$BJ)R?jo5X_{|Xt0O)A5iSjm%8mdO;uU^phj&B(sQ->*xl;7
z;xCwf;QkCqjLRhm<g$8#v3VnVJZEJaD2{4$rd`XZ8%NmNrK}}lepStnP{@p%sir~<
z7E8KwEiSP`IaK7nSfIGv#GT>*W9Q|*7%S;|!FI0dBC|8X_)_)mYbygv&qDal5po&A
zStcrpoWEs!_@V4zO5a?b4*+p%r&q-dnK#s=;YjKH{9omm+mwefAfju4WA17V$rEug
zluZZJ>6fdYd?unIy><1i96rDYih1IVJpIQrHK!Wxcy5%v`6^1mYtgq*&7Z?*SG<}3
zj%R0#uL_HaNH1lo4X`5STMhLntstyUA%^?}VQ`y>D_qwe;n~HkwsMN~F*AWdJ61IW
zr;Z<~d*v2~59c`JVhNfUFK}J`AxKs!N?dVF6}*TJN<#-9fJ-7-NG?yj8*Qj&u_dJo
z@cg`Lgz-S&nb6ttW@BcOHlNdD>PW~{5lXas6(>}2j_~w-#CDWA#<4AAgs=l60W}NP
zX2{#VZ7i?V39IbE7tv@i1>81RUMfI&WelLE1n)L<(DI&*CfgvV?H8>Oh&b({LrtN<
z<e570wpxt2JXhy3y0j(Yu%KR?@P~O!T;RsKROf7kzd6JN9iN``s;bnicF}0J)Mwf+
zFxwyuf6Lweh#bt3r{Y$m2jfF+&dZxp>P5)-gh}Jg6)Nqj`P8%nDVehErxTrzhdOyx
zh$@$pP3)CSStn{^`sZC;>))*W+N_@*>CPq8p}zzv-OwrG+d@nWN{F|(pAmp>2T@J(
zXdi(=Usoq8A{rm6VJ}u@M=+Arjj)^7DNj)r#=1UOUXhX~x>jLEQB^iBi+IP2VoR|k
z-sBLix?B@`^zw!xSjM6D46D!d<FU)*9tNgb9OQJM?ly|m<jbpY1{x_P7c_Et@RVZ{
z=6gC{U>t<)(yXD(p>G&cCWH>PMqPu68x4KWwZx-#h9bax{1?ACUMN|mo#dqE4<74Y
z={|>VS}vo<7oZ>`zRXM1xH^%z2I<E?;E{0)+ag&+n~uQ0O>{K9!egzj&6n=YJ6l$p
zsOTQVtDudW^&mb61gTveS8beWOqbuExJ#aUL?}DjFw$xMg5Fh}!{0k9vJ5l@*E)_(
zT;O#NAm^<XVt~vt1KhK%yyYKAOcqybc3QkGhDw8cDFaP(Yj02k6|Im;YW^c_SXs>A
z;v-o4<`M1GdOz$1IIbJn7DvefH*3T)8~;8qvbK@7G@Vg9dSqFo%K-Dnfa~@gO{K&a
z*m9?e3<ZDO(X?Fuy~Yf7PkD56CoX?Lvh=eH7}{(ziW)M*>;Uu-AAUaAA}eFfnijw$
zJ~%HVEPH|xs(WEzphAT*Z-o<^{Qq4W{Ke27W@~F|`sFa8l(-g1Ad6HlTpYf`1C~!4
zzs0T|5s`cK9GrWBvs#+m(SSeu)5nh-wE8w%U@n|<yvr3XRx^pLyGkZPyqS4iLWWf2
zR(DmmioX>~;qZ)PNn8fSo-tCI|Es@dyW+@SC^p?Ebq*=Rn!|>w`fYlTr*7($!)W{a
zZw`^eM??SYBG$(1Z;f1Kyxf9tgh`~QQKaK%Q|Q?77<oDq5^Itg$eg#XM=e4CCJOE-
zdHN=s9h~tiK;e%?--tsO5ZZ_Y6!V9AKZ5whg@S?o9>e%828{qYsg`{=NkVf*d9+29
zPd6bTLDc3SOf5*%=Zy;>Dr!Af*PMlA0OLmo$*dTT!!aa;rfm4rIchyxesqt#PJc(I
z;DZ&o$2_o2pjZ(b04YG$zmE-tYp}4l3GjAbE6~r+Ffw$;gR@U<phwDi-!kU}mu`3%
ztOvq)LKeC<WGM{(Cna4!9se(Kd5Dr1=Tl=^XS_@X%l+N9WASJ+4@S_P!Oj-IEV5<u
zE6VM-ItgO$dm>~Q&3<WYIG$$ttPC!QD35o!`JrJ9$xhg%&IszpF{`}zT${S?$XKyA
z{8Ac#jf$9a*|&Fn>JhQT>^ObfJN`IpgZC=HXWsM%MEz)-?$)O6b}GP>De!Av0c-7r
zGs_SVaAxRIDKu{KRZru$7Ej!rU(KW&BANWlmKPC&zc*X)F*ZMpO7qc#N3XY3-C>d8
zKo3)H&xn3p%Vk!(3!gsXwOt&FvC>>;8I1C~fUMk8zuKGRn6}&K7WCZlk<1C?#ScE-
zPptSD4C5$c782>P-JR+U%|o<1$D9X=tF7giU^cbjQyR8^GSU0TOpls%a@eEze=r(%
zVZlq9hBkg=&g-h~M||$|r6f+SxX?B&K~|;G1_M<ZwbkWKtlbB4<}H|rmiIef>S`km
z8#_L^XZr*kk`uqP+<ZhowYj_>UK4Oaugx4XDIqTG9?6dkyeZeF@F!W6OO3E~XqjOn
z>Fpr>x0M>}9RNs12HpVeH+|_ZggME@AvDDt<&X@5CRm0&xA`#XuO!E;7jaNZ$_{bg
z2nZf^)J}Ih@*<jtxJv!lEyRhX)C3`H;(xU%lcYnf+MgsIyKVkJD4sbA?#0qsX#CNT
z+`b4qt&W^*vvVj~r9!1Kz|@)9E=DUxBnw3=GDbEl2A`V*iCZwfw9%-{o;i8n{qWLg
z4!R+nI0kOk-%1}z;G#7L3V%|84Z5>b=K58ujB>{Tol)US^cF$_T#AdI6bjS?FLUvk
zO3sBr76U5+tT^UUK<1td1at<+WxJJU1N5EFY`z`ZCYzRJ(|-Tfz0`%XA43YG<N$;s
z3a(F$x048(?DD4`yB#b%UCPd8{3vI9!FHs{Hw6j<|EcB}nG5v$;4mo(&h&)Eq7Bp5
zFI9=2kgyRc8d6-m4Lwr~gaC752PV7Py8+|nZ$G98k(~X;!jmkJf{UJSdLgbPN6qZ6
z`HWi+j4;iN`rLmrIzl~$s4YT8$aLiwP8YB8E_nKO^6^rM@fi3Gh^(K=>tIE9tU4j7
z3QtqHdigFm8$l+Em09f=otMlc`AUh3PA+0C8C2H@rh@grf4%R`O%E0+mWNfVInvF9
z#S{E-l!&KAeeGg5A|Oh;x+sE^Y1m=cMqXGfmi3%_E*~af5ha27^!bm(Uhv~JQisnc
zuhq@QE&!?UYu95Wlq2~4!l>2aTZFzx_OhDp04xxU;Jv#o327Q5K~9oE*gd3mFN&vW
zkD}NiIF^!P+5q5s!rpBy)NSrFx}w6S{GpEf7vn7)VJ(k`IbhwwN*@FH6(8X@G*qY~
zPWe?~LL@x|%8-)N)uxs3-lO~A5bS^xRZ5x1YuzC=X(j|n#86R?eun~+A%2JvJlaM!
z<Q^?8#M2<1L|R*~Ma>R`u&UptyGiCkl<bnuxWl}axV%popdjp^1|Bs6J~wYwN<-t+
zt4W5MtBn$it);RR(_QH$6s+%018|F#%hJ?C_%0)n=)4;Ye~aSQ<Zet^DzRWE%OjIe
znh0#J51tY4=gU*)xgoLGBrMo;g!;piya?wQ{kSlCP$Bb1#|lw=glrDQbVj7F$+_ZD
zUH3Ej7w+0V84n4DGHA#MO{_yVN84ruRXo)D({#VbUVnh$2E34l5Z$!s<|1Sot7*-T
z&}p8EPxV{s_?SUcERNGu^+l(q-T%aJs}bP{8n10~0@%^8&^p@Ge3Kct(t#ruUyV<L
ze7&>+idhv7S9D{A(_7Fp^XAd~th<dERW++#-RZg{PW{%{w`$wt3`jq2r%Fj_{Ew6`
z&k<XTrZI)(^FZtD$r%T|O1aFQ`K^Sl8rcV=N}t!BtSc>U@Nd@2$8+HA>~GIxh{G&l
z)nz1g3m%UhvG$yRh!3E?MFc;tY!VA>n)zjbOsS(2265K^?y(!X_hj<6ZJh*Oyeqca
z^&;?!@;%Z7`wjKSuzXmlg|!Y`rTev5h3C5eGG}7FiNV3i96;CWS_6EHf&Whe_1>_h
zkuJGdI{ZikUGPHoli*c%p5q<vY$Xk-Dad2nNE#Q_6VzZ_=X$k=%sId(rz89Ys%5#P
zTbEP2(MN2B^~o4f37>3%d{}ZG(@{-g<nRY^#bikbfe<NxJUPq@33}Fz{a6Yxo^f^M
z3&sW4UzrR7IJumy{s1OeU^NELzDj6sQZC&%(@Hc@7&5oDvlT{uSP+~Tfq6K-u@%8o
zs(T{^?n0iasnjx6LczQtNQUhe+Xd>qejIo%qx=_+u%sACNpQ9zz^p+{T5%nM*Vlay
zkAjZqdtteIL5QW=$OP%=KUKzHILm}j!pKbJ8}ud|Jj<It)3542TJ8VHhADB^@YIiF
zJ>P>-Vv6k<sKnz61H$bRM-!J+;;u#-qH^9OI=<UM=lo<98Y&;&kKT<~x7%a|h-z~@
zCm&=a9H52<LFc{CstXlh1<4V!cN(yTtuDGHBq99x9DXBs$z<?e`QQtm0x(c^)8zIH
zq2u4zF8GK_H0M3cFC7rHDlr`tO-a>HQi5Q-{-E~aF(lliyxSSLf@-@Dj7nybh$O=8
z+xN=5+Qb%;f7#rLklv8P=(mSo8FmT9vgZ!$m;)#3|Ekj=#KDxGF{GY`2ZzOaDMtun
zKk9LA*dQyp9f^VcshHly5l<vZJXOeWY|6h+;}W=(j4jUDr*dddyUcv3z{ld?2b%G|
z<%(L8GVR+fnn0<jXj?oL<1ipj8)4ft1gXz5e4Q<<Yu@{3Xh^>tqfHLNMoQLYpog#s
zzE=T7qRAwEmGd)i8UlM__Y}McTDF%`+-@7>fn_1F{H+7Pmj&eym3!tmZO}=}`|_fC
z5of6cNElrFmBlaSe*blJgjc~`N^TuWAhZlL^|>wc-jO^Y{_@n}o1Ine34cCg!CSzD
z-u}y`)(@AF+m{T9p?jk28;fpkt*4lpJ>tLz|5lP59YtH%#|hrGH!d#wDO>wuJzt%n
z;Oem0YmF9juy+W&u293248G_LS|+%OMB(HZXLWRnmal}Aw>g<gbwkSki0^mak?UGl
zZFSkg+Xcm@lStm;$zSHg9=O5tF0;3&YH#-CP~PL&h|0Bp1a!?N7(RWV@Ct+%46{2(
z@&2!HcCD?}^Ea)D>}taps9vd>y`;XrglB4|!?DW4n_3-FrI0Z<$OjYrPfYE{Bxa;T
zy<#DZA9L_fvAIdOMi&o3aG-~nsP4C)8yS$1oAk^=`VRIAPgA~y$Dg6i0s?QGsj^0!
z$(~;qy?KwIma&DQr#d1M?NsM6WqufO^M}1=V8y<3x4K6;20oFNgrJ(8;a4SLZ6O8Y
zoA8bMUQ>DTTk!pG5|$?AuXkXF0hU|HgEO2cF1H9Bdcy{}C{Gsk3VyQKsc#fY?oEc=
z39;@DeJEZ&QD{eIbzl>st^f@uv0iA}Xv}_AX+r!PTxTlJ%=|KR+rzWl64uMV-=!)d
zl6%N|FH3n4oE%w;dy9w~Al+$5(dvu<6$FLE5}K*;sf}Wnsbx5cr(OpC)C&?3lA<<T
z^nJ-auSnJ$bEHUG>65W2G`_PsTtxfwv?%i@%@&&xZ~%L&cW7LRDYsRhmwc7*pF<2{
z>uxQbv<cnRlMls0oM6YSvn)KebZ7|~WN5-DpC0PhPN2AqU_+T#2=|+In(}lN?>tz>
zi)AK52Z>Wcq(b*rtk5%>3e3<94s%}ygnJr<d)?(nVHuBP;^Vp&EKhKhtw@<us#MFv
zOpo$d5Usr5n;sj{jGsw=cPDi1Oqgn6#dAiBjX6**jHzzvIcgeCO7dj2yp2I>w(XpD
zq<6+9$;D#6=dP^6beIo3lXRa?&+Z&1#QZPD1%5Vse-LrbgNhn&2-c0SWXW2!?aD^<
z6;%2!;4ydWpxu#|P2CnUD7O0R{_pqG6>o7o(Y@ckH228tRA(>T2#N@ivnsM0+_e_H
zeJdtZ0-w8{SRJ)b_WP8S{GTKEwxxIVL6m7_X-fBRKH2F=d;TXycCFb)w>+(EQ#!L@
z5kH$`HD%HJ0XAzdtjm9-i>ZvN@~fPqIjS=8q}YSfD{sB}c+RDW<eSODpH03JvVekQ
zpr8xZ>3TW21({3aKuP+wj2WCKgn#+8FoHKhIV#WYCSZFl^q*p{!r?HS%)4;PX_l!{
zPZyOT8lny`G#VD}k1j;oG}b=#=Uvy&-)&Xj@RmO#t4}6eZZ}M{CTvQ>x6205YSg!2
z@qzyk_Pga~&uO#6OaZ(pnza@-Av^nV>HGZ4bVdSnj@(220D};v!sYVZMtkzr{JmV&
z&#vhfY?#I(`(F4JcW4OQ7lt}-rSoFW+3WzB#Rsdv`XkpD5>fLIYG0q4e1H#9GgB?>
zG>2`VUL4<ypq4y@=K<(ceNQXV2+o6bgt&<q1bemQw9iJWte3_=v{NLMzst{9gMc%$
zNAECGj#0@d@*%#9C>lv|7g*4@lR(F|c}()sNGy7@YawA#=>45D-)IWLVgY=9Hmcb~
z|8T>IYaPkoK-1don<^Wa9ZQ*U6GA$yJxkGi!Qu;&X+Du~2T@^}YhGzD1wbL&TV)~@
zNvG~-&*1{>pGqrn3i@#OFC_M9Hg?U&&u17#P`ST_4XT(s#6l#RmMQy0G!QPBocyP{
zfzB-o>KW2_Pq(_Gi!g01*d~4Yc(gaJ@<okDckjYcYda*iV~|7_*t0>;$n7k+u9<I_
z`e5<R4Dd!g*FVlOjE||XyGzs+e6pw>HGN1f6oQMXG!p$;MqA?aa@@a$eMuV4pYpFE
z)5ft(9K`0XN|ubTE4AZ<Ocy;)j0C3r<3XdX-8vU))ip{ge=t4d@49y_+cRM5<x-BM
zb@qfYrgx_hun-1T|JMOL8EZeSxU~x{Bo~5ZbD#8?LmB#4Ba&F8(RMF5GXK5DtG+Yf
z1jY4I%>2uO=QG&*33(IWgJF@pZNozL9MFCbTg8(Z?E<k~z<RV6NRm9o6<lbF^Fv5I
z@@2DF)bNm!FKJOfj`PxV$YhHEKKFrcvcbhnZr=kBnXj=d#$(ytnIvhC*w6bPrD*<O
z575^fB$i$RKRn*llW;9+`~ubZYV5l1q9y4RtIBrfMx&W6m?tSyi^{?lrQhWlpJ`f=
zG}Q=IqaPB0Q8rg}TY27aS9|06+Q|4DWWrA=WWdwatR>G*C@B~E9#(vw{LFA&W3O99
z;Ug#+d;Mwh6)A2Pg-+NXr>md73#jeD*apy3lb&`qxmTj8G|`#!^7g*7y%T)EIjZtO
z%nvZMQiYq$DtZO9H^QN;A7?|L!EnFlx%BG!Yh>_E*YI>iX0Q^&43X|T&)g?JWD0y2
zU|mvy73R_BxRgwccchCSC0AG0_jd!1m43r-q#}sRtiX#oMxHJ4+f_g_C>r1n+NHb3
zfrG?xGcfDot5AbpbmP)10%aT{U;QhFD;@*HFx5$WuB;^vIw&N{YPCC+n*LAcn2N)Y
z(cWr~AxGU4`Q06r@;iV)(RAXlX4DNk@MwYjrQ{XF5`AjAK#?Q1L!4O&U~Wt%&BReK
zXRXQJ07V-cYC6jBig$H)brRB&1oj1_wA6u)1&2n0G4x?o@6YaH3b)<J0}s2CKuO%A
z1e0ZE+Dd0?-Jp&r1dx-9;@mLu48#+7?{>1Jv~+<>JaJ9deK$C_`%5i#_vU%yN?|2L
z&^Rr-o<MKk@&X~bNS5HV5J022vS8K}W!*)t<R2F$<N+V9kw5$M3&td}guW3mm=+V^
ziI1DsR=t47naJnfBM&bY4^h0}wE9wevCGm$=hOKOhU21ie@*D%bn8QoIN4#Crt9Oc
zg_+qTE@Tzqs%8Ax<<rtTa=|vC*L$PV+GvT?c-jI7ENMm=_MA(|8bF|i5}LE8+b;!X
z=6B-tJnk$O#@Om&`IS$2YaLaLqaz@<Ub7QS;ndSJ|DrCNsVhiS5nC5aDqT|$-C2z3
z6dL>+=QqmncsKJR$w-`r;61+2Iwhlqlr!S^^+Nh~s|XVLdl;B>SsYmk<QC*bMa0e1
z(tP5q06V*Zpy|vH7^<mhFJ0fz@bC<UtPR_~{1$p%f4!u4pa(YCNr3VB($X{OD_P`_
z`bKky+@>-Y7@QOEN?2D<#6vCS1>0_}57(HmhLL#t6C9NRS*Aw`S=@Oe)1OEo0gWi$
zuJ*Jnum-@Ij+TpKnMi+ODRpm3cLT;Z`ZJepGMj9#`Z;(HdpQeT4SMHb;Y@$<=eo=5
zI9x#Dt_THTA-x5&Ce!M1ll@&^Nz>SuK+qL0=-h6jos+{EF&Qv-l|qKJ=uevpm=d;G
zCsyab-F+~K#_-gUjst-u)x#3`N~}6D4hc!&_`8GZU?iLUeok}yiGng}|7JbXI5X6*
zC&N&r5I;Ic@GHl&wy7VmjBsFK5@<%Rzlm!5r<X2IkF=(IA(ecB8i-Htmhi7r=GgG6
zV}Q3Tc9m~=u$samtD-+LVq<kPg`~dmKZ{rF^vuOk4Snj;og2+hL*9N+nAsDt#>Zb?
z)OT(NF}fGDC%e2s!G<IvWozj#SB6jnCvcz=j69}8keq~^jY{`-U<fVHr`Ly0&#z%-
z@F~~lYbk?q^BqL_wPrbTunN7=fyj+uS;DSvxgSa5Hf7KD;j`+(Z{2yP>5*Po<DhnB
zxoI?(1v`_C#;GSY1o;W#)OrAf^wcvEx`d24S98(|R(nMzZuOPa1;DWQZ|fK9)bHP%
z)}c5+hp6(<LR(1GXb`)P;wwL8fA;#C?m&FGoY8s8HIYI!{{1hBq4!2{8mJdNDUI%i
zNgp?2%Xy_CqYY%xurtI*uv41^GxeGgyDmJ^z?H`c5v30G-Mk&-r-M?j{V9ycHYuz~
zZmc~qT&OtZ-8j+TBSZWs6O+jlYNHa)!wP7+qep#Dr@*mW*=(4~0rf<@x-fwbZX2Oy
z&Blijzg623^vuTASD++u<>*COnn8ew4Q<6zIWhd5$^sJa5YYnd6UVc4R7)WOvR=U4
z*sY7fnv^QC+7_;@6XAPEI0YAse*J-g@thDAK!kECkAXxHjJMM}4kt@7i^5p-P^*`J
zRRC1-$Se;IJcoJUxDDqEk^GgChv{J!#|?_lj&{0;L;p;jN~U7syh#LI6&lRE$rE2h
za9C3Rs<CWTZLD(;yu6~TR>NZ??tlOV1-Z>DSNkRcb9HTrpN&*g+^J*+(4y_<g_t}{
zFd#EB`XuFVA}>tr-H?Xi$aOORc;BL4%19t8B%E6)wcCE^jx&lc<-3g}e;M*>P)?9Z
z`g+-%UnMd3g9~xvHQsqz*Zv|B!FIr*TyBdweX|){Kv?*zH~?MOwLlS|bBd)lP71(Y
zXrly;#hU4_z?f{NhUpyl#&iMka_K$}DPF14mY#-54_xAoy808*BUbIF7R!hDzFrm?
z4{|Cf!Vvu6xcFSz44E4#C}_5f(M7wosU8Rg{z75BdzCYwLx8Hu&Q_X;V=DD6@b~wK
zE+2hW&-VL(-Vb)snkmqw1fVPZFQfVOUKd%UANI~vr7+c|#|TNEZRkO+CKuq!B>q_y
z{&<zED7e$LAq?m4J?i@D@*#Ywb4Dv(Tfe5dMf3UVpXgE!E+4qDCMvP*Z1_>EymiL&
zODf!9Ku2m*(CW*bKZnk8`!p;9G1{lbv8;S^6&O*=Mo`Lpk?*+Z3Eyl+676Ub^Zy^M
z7De&Z6j4rQB3?{OZ&rb0*5|jFbbAQj-v`}<ztqR|vXjA|vO5z29Zj~k1W^zvp7!Yd
zFGnfRZ49V}URq05UIP&xv8*Ck9^fFxt4-Z%62sa`A->9Vx2uwQ9Q==4?2t<bSWZyi
zOt;*aAO$#g)s>-QOQ5^dCzZ(8iX68c*C^c@$M?CON3njr00>$_oASe!F{9)YP|uKq
ztzma`Fs0W1R7FH6W6)Qx8QUvXZLzu8%oA6$bHm);ev8A$$IS+K!iWAyKu)%Qrnq=X
ze(3x(OPhd~t_~{!W$vorWvCWaWATe(Oq18KrtqDSlWE&}fSf+54GnQxeHr*QB7(Q1
zS8`4ou|>k-@1507*s~4ycW{Bft>E;<{)EY?<;x*GnYgg@4*$ve;hZKn)4>6r82X(}
zO+JX^oHa7_qauQ?OS&9aJM+?cnI6$*M~wV@vw-irMVBRu_-RIekmTmfsfD;5jzQq3
z^4fW*Q9O|_*p;v_lP}PCln6dY;*!6A+ZC7zY#xmT@{KnLsRo&k&BNm%)(Es`<3H=s
zs>$I_G9>g#-qy1ClpR9=$P~|L9^ts}(WHb0bz7XBVl%XTK4)?tpkk`XaH=A%MWHbW
zk7NsvJoPIf^bh@7NdBz>(G(nc^UMzEyNe|4)BdFLt-=SFl5)iyNp?Jfm{1YptVT|N
zAp7hxT^{3mD5-^h{1iT42N>5x-oV&dY8E*mN<$69S4X_2u9UVSX{I06J)X`Y^0>L2
z_MyDOv=QST^|GMFO<;v27^#dbXg}gzW^POeZc?*;Mviu%n*pvPsov10cWe&mdyP5B
zNt`0cj0ayTKz$Nkl~`zql`$|tezo_2#!F;WiKeQe-v19o4nWv*EweJ^?W&zx+N{FD
zTB4FHbAX9<#90WmBZ5RK5_oQ_2?q{Nr9PIwtP$ci$mLE!WKGlHtc1A%`9MmSMo4NA
zPVH~~s>It){g+7u$iQzH9_=f3B<qDxrJHA_2kCIr8}?_!H1qz6-mKj&*IyGT-bDd&
zoV8tM<vsrRl?|?{4iTh4{h6eeXs`l>>3i$9#S+<V&K^<af<0VJcpph-kzkU&n^bP1
zj{t`I8dqhRa2hcuK`z=dWY}Lu#YMpthxh2Pu+||9fBXM&1^`p|&FAG0cGScT!<o7l
zLOADF-)Cl`B<j=bYxDV&nWQ@%pTx>E>j8<`ItA=b-ZbYFh+mu=&3?j3m0#8G$T9Wc
zv`u{%FrQ3951{y+Bbn)z3ntr{qKq2AAtD@fLFCJVxWIUfvlE!-u-Q$6ZzLD@5+$r{
z%f{S4wXAP6Ra{!+I?+WY?{37OkT^wLn030td8>dwnR@cMJuG@c4ztn9+Jj@<Dt`it
z3YM77Ca`*Mm9548HN{aL7H#@<62f$@BqK!tS8{=G$XV4G&m%-XlEdVznV@u&o$*)x
zW@eio0S`EW%2py4u1QnrraV(p{Qx(WJs?hlcIHxS)+t%UvCO%)fDC1$$d)jN1$Dq8
zuie3jGn-Fs*;(z?VIW*H@A?oMk)TD-C`Wa4l^49AL8mU0Q8Wq<i}$^rn}s}Mnsg_T
zADPR-!Y#0B0g&V#DqMiqUP{?l^EO7xx9ZT}c8?T)_lNEISufz;%~q#my<ZuxKJM{n
zAL`e@q{hur42rF_5wWeOr~a30)_Qk);s456xLbUp**oogAEnQO4W3i&g%)CLltz;z
z$BeNQN1!`Lo7}!PIT#|zqM!&$#pXy>s_2(G4V-onkQJ`awC!6k2z6Dlrb*o_P4_1d
zk4LJ70&6_dCG*Wu635gaPDF4$+P#7|d;Xf315r*<(E4c_j+>U{RpH>Hn&N}Y!XxC*
z@^j)I8$tnA81AF)6cz|^0r9x;oIhmW(FN|=@{3}5I~pXADEEGBQLa*bxqdrbu%C`+
z|5^L0%AkD^-TDJAdrTgmTG?ek6YMk&*5@PZkr#**xA<GdqLh%-M^*57RZ9B1xyDJd
ze}a6yatNoN`T`ZmkWl855Hp$&<S8#2^&3?`kQ|9|hiMU2+d~`21aX&mBF}Tn>ADM8
zTppDrzba14BUsMJbCu7xFd*8`?*Z3GW7C^er_f&=hS~qeoQq8snWO{2Icq)QIm^X|
zf^cZi^qAYg`v|{Mncg4QS5fQkW}(VdZcb<I@#jXL@LTEA&5eFZb<M<myxTPILUWD7
z{AWHiHXieAaWo2;wPTy9+5OHe6I=c~PUs`)j<#gw8(EZmd}rb{gzUe~(}(Oe7-haR
z510gNdg?pZy&{T&FmW?iGk(wAFH0!y#EJp_Pm=Rf%4UD?)@p(<)y$}cb@`J^k_Rpd
zhr@Pws$DqP4;vp{#6sDxqT9?bLg}hB>aR0cJV6y(;IEad@|PT5djOdU4yx^>vosK)
zl^N;GarZ9yc)9ibhP&ksq0Em%3+vlb`V~_)wox^GwSVJ$&jDHLV%h^92mW&7h%hM_
zHbh3iOfpO))Xuz3^EFR4kh32CCL}-=0G+EI?f$Z;z7za`Fwv4;u`J2CJC@{#s!AwB
z*W^(U&`TPtxwo}n^B5Lv2^O*29zN7csm-OA&Am7#;A0jTGDZ&Y-0sVqr8<7W+018)
zND#}>%hU8#G8v@WTu23o0Xwx1iB}q~nJAheYOGt&H&;dG)Oi&Lpx;utuV<Z@z}qNj
z!$yi9JE~4co_&fw0x|Gp|K>2C{-IBkn2wDt8*N_^Xw!VEa{@0bFrQY*yHHL=2QmD&
z@E8al$VN{{^u<wbn43&mzz-WNl!%3?Mq2op*A!B{j9}qZHty0HIXB3V$<z`FzOlvR
zajAOjQhaunt?cMh_5(C#NNlKBBs5L?r%ndJ>7eRe>3c!U+4n0nJxS}U`E<HlivFp!
zBmJwCWb~u5qXiyQoS^V~h2buKWY0YJqIJF7nd~vMEoR^bH;^`WVX$)Kam*jG^dhGl
z<bY|)0|xktu-fIevi%TfJtu;h?cm7OdrJ@E^Wf3pjk~W@Pp9dr)&sNaOHwxA#SmdK
zAcXX^j2m+2!sJXQjpD>Ft`E4&Z$1_3K9qt4M3-u7@*Tlhp*<pI^m#_*HMuWayhXeJ
zd4ci|D|0KF`RYd|N0sH9*~1M)Hg8^wW$YE(wp*ls4(8CeKr=D%6!1B_no755ZC4#x
z<yCbK6<;OLhtf1ilogjaoWgd($3E`}S@`nEY6n4LKAG@HMTm)@hPvmECZLbC9po&M
zm7q-VW-!}{`4v(v@@R5&Mvk>B9%H=>d|+Z~)fNb01<VS~x|p4+&X<N17o6!KFzZNg
zYGUOj_sFb^QQmpR1511?zaeS~;D1Z*QM1&&gv6di^ijrs;KH@5V3ik;>QAJ$I(?U^
zTx5^`CD+GMEd{}kU=0qfHdYI%z*Z^($;<a{xqQaHbhk0G(rzBxdWj3I;A3{@vP9vN
zAI=L?g+Y~3LN<eKixP{olv6`6s=pC8Ed0DfGR#Wqi=8IqUUv}QP@i6YmkXkMJw4SA
z6u$$$3QJ|UYEp%0;iyl((ttRd!Pb_wcz>Y55icsHkyApr<nq0Jc<`d#f_a0?&}Fw%
z*&>gJdrKyPUS#pS!BUzL^|H7~l^tI90V;MWtz{h`K?_iSsE^Lq5n)j)KPW54{Rc{U
zu^8HtsA;>>bzp_hQfpaUVCF9kt0w1?KCd>hF%T0H_eNf4f^zrQ=>!)}zRySQ<(Nb3
z2b-ysDk3>CDLe4Wm{hq&7bMv`HQ?$N7bMPb%bpt$oB-c91RoHwFT~x{%D4JUzCO9z
zxnUol==*I>BktcfwIdO|g(7aqe`Gi~t|o}sH%#t%PUA+f_jwKJO8!i0wqYHgvZyEY
zlDYW8(gSJvN|qrE4nO&131PX|lfRifY(H)!ZziWEd3rd~MmMEQv&dXBXm_-pkb4$x
zG>43w>VIA3N11*Fq0RC=SxfP(mSmV6GJemo+QNqNg^FoaTJD{TkdVksVsUK?XwBcM
zwm1FJhMbS7HKtnzWVXcPSyI*hhr)hUXS@xpG8@GYR<jJt5k3XF#<>X*Qu<E0DtqW7
z*`~iE-NNn0;mitVPW9L;L&FFtG3a`UimbFC`D2qxSr$I#nq8aO6*iF>Ikdma2|Eq*
zS0?c>IT@%iRl16244=HG#WdmGM5|ekZGo5P9XzWC1w$s^`%0}1r^i}2jX$$!jU2#T
z`~bgEx(SCFcDR0&t-j!J9DO3dMt;iRS=xo7@n>qZMP1LaIV!w%nw5R^(ja&iH=CD%
zMY*1-Hh0g;UO!LAJPznr8MQmEq7E5Yt`NZZy~_YhJqVSb9*K-m&&jFre<H#<e&TB$
z?dLTUbf*c&c_6@oqKI2glr5x1N7p6OiJQQGq9!N7jFmA=msjAYN|ME@+>7Ty8z4kk
zCWyM#LJ|Si?Z9u|`;NYQHf1$v=Xi88c_Az4sS4R3d%=BU!P43`5&q4EI%aH<UZD;+
zH|AO2sT{?gLG98Q)HRZy_s7W2PGNRfWt=;@kHN|VGiVpQSHYEkekk1$@wfXcBExBs
zWjh_AZKTF|lr<_KWhOmqdJDy!xt2a#RnYmO8HBi6-iyp;(Aentp~gu7#e2X~&X8a8
zl;jZ$P`l>vyOzoky<n;wiGUdJKd^yI>kub)-%UOsa;T#KJZj}v@;6_-VB2uzucU1-
z<;;_hwlmo8{OcAIVZMZDtgpYsHeL5rREmkmD~0>UqNEG${4j|>4h_)gc!U<obpMf*
zO;3hsP7OwEOp62~J3c;)$QJ)fnmW3Er2zdmcKveB(3vd6KP4R3k5FWxsNOeT(v7m#
z(X!Z86j)m30yqoT;y+iy;Cc|1Z@ZwDhKIknrdF_Mz?l361E2tYIGQPGBS$P<fM-i)
zpuCL!M-d0mCI<i$`O$Uay}F|U;wJ)*$_yfX(y%E$A|y{qq6u#F4PvymuHPNv7vBJ&
z<nJjA^7ngi)V5OQ>Ki^Ey+M@<b00O0H`i!Oc>TT76cvkRq=DXRsn$Z1QJxY}`=lc9
zZ-)4*)DaAyb^dvBaTnw}H5!gYG^Y$~yiavUVV)wX3X~nxHk|DlJ}>{I8H6erkAOh;
zlxYRJj$&NA`*@t=mYM;7mMrFw@^|Q*hKwH;Bvs5S6F0?q${!lLU#%Eo&eCYI@<o(O
z%YG>(>%UaDX*vXdolum2qaxw^0w~Z8Vu0>~O&TTVMJ~USo4HKfxhkY3D}-aP^)|37
zj8B_53v*FUU?LPf{F&t<RS#A2+!-9Zf>?1_J>JN8&Gl^pXf_~zN4M;2W+|P^X%$v2
ztD~ruu+yZ)@RPfOz6`qR%_X0V$UZt}UP1&;1-YBEoW9vGhLQD!8CIjV+Udfo`7b`a
z-!1F7iP(^wc76WVD{M&wbi`8EX1Z(-TCP4ru1TnuV&(jwW&s>Lf&*8`CI%$SJA=S*
zm^bcymw{!^Fx(6OK{zTMO~K8DR|-mneTyAba1*aRL?>X&X8|=##BM&uOrT?5v75}v
zgpUyNaaTM+&-l2ic*^Lyvmh^hq4NwNyL$1I8H|qEOWBJNa+O(<njpQ<12uMxE7|KN
zV!7ka6r!`fn{;I`?Zl_Pr6~(>Sr{eSfNo#%k)=juKH5zyVAb*5ErRee>W&arGdolE
zD-U~yFO~rgZ7hf@pk(uLi&=DAeTsxJFvGbCBI}zan_Q>-@D5^dCr5nXOcohuHrPEF
z`ChiPo^zH=NczCvyy#R)72(A5{A#;OL@b$duersxQuu?*|4WO%=PHy#QhT|CtL`Fb
zj;UcXv}jtZw~p@6<0E1Tg~uPxS5>wY(<~@S+Iznly2DQ*UTYx+kZW?{-l@!=oMWEF
z`<1%g&6dw;*e6)k*Nc8TD&joBvL2{0XZ2)_S4o=N)?BsFM8*Vd%lk_??;LM6o8i6?
zeYFLpJq)WG+>&2e0JKSl<bG`+hbqx4z<J)=nuc`}O%5sSOwAoklF;9P@3?f0kP;is
zEp_k!RKP)t0yg&f(QV${N8`ubLZia=FBduo2gMg2z=nm=+a~Jl^A=*tQuyX&>u5}<
z2(ibVKK`&bnjzdjyKsafR)<SDJ+n$T93w8Fq;mm+n#YrvkPAcV)3=S-gEcKzEJ-T8
zBn}01SH$0=wF3TCFchqnb!UB1`S5QH3X)tsYigxCD70y6*@{BmK!$)@TUyxhGLn0#
zfds1WZf1O&8!P#(w_AHq0jKeC-9TDc+?oE&@OObt?NiEC8gTdhPxdelw5%6$^lcI7
zcSxle<Nt<|*|3vTsp9)(!wl@nSL(5f*T8s{dRIx)eiI9(DD4jpI%Y>T!;$~=qw*Vf
z_V)_s0VfL`jMOrz?scR#Qh&9LXE?;y!8%0LAp*E*o+A-iqH~>QbU`y!(T!SFjO9<>
z0@f#7D7i+soVAZ?Tpx$y=~LA_X#EGWd(0!!Wa%qB=}X<8XvFRlVH%bsP|SwB8>Ox*
z38zaH6qjN#FrSr%4Z#1zLX6bS;dOt-EHoL`Xu<Ud5Xz~ycCe9#IetxDNYB!bPG1)7
z6+($<9!Q1-8MEnrOqKF+>9(FS&)bpEisrf()wLwk#bhB@hQp`xZI4?2v#IPCH%MQ0
zeTtGV-@ZRy;|}UJQ1hw}tWsaaeV+CmtHj1c9;b;aGOKA+(cYFOL%%#>y8T~v-8_Ej
zH2%|Yz9BklN$NDT+93)o*vwfU<D3!Sq+fD&8s1FE5y!Gc5zP-T!Y;TM<Un8pu?9~#
zJV$Ag{U(9E`h(3fTWP{!P)K#(na?GCw=<#{R=GoA!j+&s$5m$P3HQulxNWCm0@h`{
zYifkYJn0UzA%VZ@9*BU*k!vcj*G1bf-S{rFoe}xYDdTzALF;%VV{&M%JJ&uIIjlbc
zd^Wex2^L+(0#LiWWrS0)+uY4H;^{!KGd+p5&&>pe!q}mDR|jV41aX@d)Dw?S)kn$M
z^?Q0fEe}8W0dKpeK!D_+3KA(W6&k|jzZ%-8BtB4c+5u|lsoD}mz=_-so274WRh=ky
zMi@G%7@g>dZ6378#2aCHP;g~5k;%Q>kPXlJ{~PTO`_#8K4r+g7MLQ%N53+dSAnMZM
zy(LWi#aq<WgHsalySfCg%!=ON*|1d-zV2_f%fRWlHu3#*<b_(dl1CexTNwyt!(4)g
zkq7gPz<JCs{|h73Th=vnUy-<)%?Ko~E?FDgawW(Hvk~i_2sansR)cy_q|Pw6+}dSf
zO?SuGu(6C7zF?Ezndc~L1;6CJ%bWbA-|X>VjWOZa|Nob4Fdy~ddNs}E|5o(_56MfE
zy128tM#Wy~X(Bnt*{m2dmPN+pk}hwi+J2n@^mn$dVhO)qT5de-Sh%{XT3TPVhN3kS
z;BN&!NjmuS1Tq9EUeZav9kS0wtArDepg&so6g09~*hw_s<+uGYPr(cZAEuj|?EN{3
z%I?Ztx)f6-6*|+c=C$QbWi+k?Hmb)Rk*iV2IRtHVCYQnsA1GRoC77H(xOh)l5lfVn
zx8OyS!C%D!|B+e1Y1sPe%4HlL+`1kiFQN?;T|h+w&xC}0wP^e#VNgN$<KX=CF`Wgm
zVtp%g6+UdX5lHpU4%@dQR}fFTv4XLaPjxSZ0mnl}$1}r6ZD5s9nBIP|%8*{V+Ko9@
zx29MoH;{Eagkko28`ix(vzDL}Q!O?eG^kIJmI3vd{AwXV@4E?ds<L5y%l*v(Ab<Z)
zmx@>2xMp*<lSkKvXZ-_yg0_sNmvH>@8YH#BtZjHqPjUm2VIoh_Vh6HE+$;Aty#m3;
z?v5XOMCEe8JA;otY!xEyB#d|~g{s5qRtU|KYXsuL?zs3e@Mw*<r<}t}q`$__j_G+;
zL2*DoKUp^YjK#6h{uU&KF4w&*GB<nx`;@7zR{9lvDq$svw*%jgc+Le|r*Hgk^Vl7e
z9pSKnHSdGP$vcC_QsO`0x2#jX=t;|&s45&;x64nt;6k@<rKW?MmazAyiGbIjj@zSV
zlclS`K8DNyLta`dL!gPEFi8_|FzH)0g~)9DaZ8xF#(cdmbnN%U7?lQC>F7K9FU9_N
zZY0;)yNS<Xsa$MB=}1!6S!$5nLx%&_u<IC&*XF*_5(xC5jNx}2?`y-6+iIyAvG|H*
z4~qy}le;fa4-oI@p6rRf9O-T{OQ+V<0^a4bV=2HTpXQN%364V7<4~jkR~Msv*yb;^
zdP$hppK@6VoarPhs-M5)F~6*sDb`Ko&E+P_FUE{Mj`y^jKW+I{+~2vl|9g-fL8uGV
zKj7#lv(z)9u4L{(H(N(;GITBOI$^dFFXvB%{+!quaIn=~LYVDfGF&WA_|ZuOY?&;<
zvOaB;-SYeF+L57bwKj0TC|9pqi1wF8E8pGSd8p$@ta9UjyB55muDL&_T_l?a3z@;H
zF@~TMGA3nh2YU###q0QI-h~rCdrE&pV(N4iZ-f99IH>$)cs!%QUlstc5=b0vpQG6Z
z|K~c;4!M8W;`L6(o9)+`tJr*eoz)tymux)6^VsM_%P*!e6HaximI50MNi8wm?F87^
zV>e{S7D++!dXYv-0cL~!Kbu)u6fIerCkm}chFsl%&&*g0ZY_`&U!IBVor*=-bqqk3
zCpPFi+jDy3z>FdPpTK5S%e2Xs{mSA3aiH6<76xOshA#}>bHodtElPqOQWqe01cIhN
zFQXa1+@=<m!*fS{)3q)AMFO1kd_GCKUjto*61)B0Q*`c&UZD^h_E2UKastH%he)b9
z#9}1Gy7g+izhkB|-Kf5}k$wH5Y#!j(d%_|Ma7Z1fvL=aqtCK1VGN+1TRod@n9AUdW
zSebwKDo^cwUXcUFN8|8l1Px+$i~Or4-?hdNsH17YZo2iSNB@qeNJ3)C&Cn2+q*A>{
zDy&o^?e!U5>y7^W+6I-2p6zpRt@I7aQPmmD#{^Jv*Z;t+0W8c)6{|_ZslJe9DOyEn
zQ7>8&YuDbhb%IUMsFz<7ffTwfNyWyBjP9LE9^ml0U#+EA@45j^+k_C7stTT1S=@3$
z$m852n)_-mj`$EP!JrCRp`-OQEt=%4E%&XSu&(3udWrR#K?{3!Z*mfe28koHUOEiw
z=87)X4|)=ZNqJf<KbIi#@WK!}s+QX%c(};BZ1XQplYznU?BNV3G1W<5sd1<9Q#m(!
zcH?R*fg^KMw!lzzFo{aS$Y;xN7O<qF5;G}?(ILg3-)fi`D~1e6Nve;@X4nc&T<M?t
zI3w4E;Cas)|C5>{wj*KsNCS%Ya1X?6HeNicuEi{*O@yffGa0CvpGSU%0<(mVnXK*G
zOO7Jd)<ZHN(OGl&p^-a9&gGFMocb7b3H0zGuUY|g*AfeJnZ2#sC)tkt@i9K~;s;B^
zOV5>J_DXjt-jzl>0yfaMhaPAU`3@<%yBk?ocO)mE{|O@EGugJ#vE6JZX;H-HMU?d7
zP@r)TBM7ODT{M5i{W>seb7w2S=tjVx9N<RqSspsX%Zvyn8gE^<xr=DRE;dZaoIFyR
znYow`r=sAxdLq28`te@6tF-OIFo`SNL6T84+Tz=fL;5;tVYg8&hQqhtm4yVaG|^kA
z>m@@yeWqOSf!S~R;C*u~F?t9MoW{*YmlHT=zy+CtKC#u)DXbP>XUT@A4@ZImFFZdF
z_6S?%b@nni=o?EX8Cg)AHoq5=R-_}Eo&Wn%6nGOjQFd1PP=c21Jj!lPRK*~Qc=0R^
z5q$_50Gv$QkV^|JUOc<fMz=%@9ocxumnaX529Gcp#UnzbEPNj{%8UuJ+1;Iz{dX*h
zwrA{|V;kSx=Yv7#Oc&bSG-L_LX~gxbtacPR!GLh3tGT`mK7V6<aUOtWPYq`Rti9Xb
z1_+sTxm7F%oZ<?<vP?ddtFS8=_}$*EFn2>|Zh#dg*)1Rg5&gw|A!eK1v9312d!n)W
z;6uIcwB6c?{H$TG8Vq{YlnB=@{uv3*1VgUhS1G3_)eGCB#!KCwAYMydHlR|4M=VOB
z1B6#pfv+bvVlN@yLK?aWrC?H*p|>o9q$u{gf3n8T;4*vr0e=4(yJgyw0eFKA^M^IY
zsvnN?5lv+AOix&l_0F240P5exN$WFn)fT_?m%#HScg2P284;+w`hnzh;~@}uaYm9X
zA4ZDncR`QWX>10QDQTa`UG4u!fyr7Bh@Y`KgYV5}kWkcD#|rYRxFwlvoKKn#2N0TZ
z7vupD(QJd2yz9{m>shG5R9Vy}_>scV;!H-ppP^&2^6-frZ-wtx*eSI=ulwDxaP1Lg
zE1aR9n7#RGgY~1P>1(%%Kx|P+%S2#&pf^@&-^)Zabild*#Lr%JS@KbPP_+~Mv#KU#
z*M37uRRRl5eL#2@WWYX3{XEI0!7K?NKx;BbC#gxm)CsL&62mz)=0x*OYLQNj6dVJD
z0LGnkF)Fz12GIW|+7z*#_%oWy4H{nZD_BUb-R!>*?^^UtdANgGU0yp+6~*<TO#40z
zk-`~AldwpFuL7@yGnzJc4)jW*?u|!HS{&?e_>4C56!2lurk4j6F%5aSjH@9A$_X|k
zmXHZ`Mr;(C$w1Xr>W_K1KR4yv#BC0vraW^GCUcK~bxw=Fy3V>AX~Y@Y==bgG4ViL*
z#kh*?({@x3F<CH3rm>WbRThbRR^u2r*u%g0$@M2{$!7AY2!&<0Ko%+<6i?P;c)Y2N
z&5w^{1Q^vwCj1)2z|5p0n395OSeL!6Qe-2kafZ)`=DInxf)k?>*-qgfni#OENEn)U
zNkS&4MPb;^GMVp?vtca?JbXoaop=3lqOS@q$d0j&K^-Pr7l4oBk^H`s@Rs4ieHQ5x
zM;L*@kgtG`N80mH>;TTABj#nF!hdc*gW2>(1M0jt1&g-tL-%7moa9)}a>)MxeY;bc
z+7C(MTQQn?80_HpuQRk&abd;_gD67@9-7bXro>%kf{e{n)YH_5CV@AKs;dyY=FAQ~
zzLf25+p|>V#;Yri2Q;0KGV&T^t#KxxcB16A@=#GGZGbe-*&{Nh0w2nR#9+Ne2`7hk
zg>~R}@5Va6^7@MPK=mf%KL;CpR{qE{;MbRg2`z=-O+|DL1U-dMQzA~33Gp<T$Ph35
z%~Q%Cc-Yn!DOZV^`!0ys{+%K!Y#Z-M1q1>NxM8++CE$4Q%xCh56|!H&CoX6$`@3>v
zwLMvQI%z)GGyQOA+^YZ7oKwdDdy21e@PaW^NNOFL=`7gl%VYTCN8@Ql1bY(oo~$1A
z-C!569<ObZR;*$+b~6VU4T8s%7R`=T;+#}CVe4iz03N-8-H2Bsv6!%?kH&)|)%D(9
zqdG#ey;9bTA`H!|Q2OW?V{|2vs9H63f$2tcb6R4wZQ+7#(ku0uE(t2nH5kL2fXaW)
z&ej~8=-RnB@vp;n=hFpJVr$C`DBbBLs-=P;o1vLMP&piYu!Z{qd>_pj=v<>!%!Y_Q
zKwgrGvS;ud7GmIuiI>%YG8`Z7z<M&#=#Vlw9$IQhVnh4dBn38cCotj6dJ>B*wC?3p
z+nEdYGnt6EJptuql)z-RN^NcgsT@(IBGef_p0c!zyE)vLi{e3ERt0B?oE@rK`(fT{
z<z-Jk#xB~|Z=S_UqdW1xHabf$R>#1oE~byWH{IF#ZHU%S)%&y%q!UDWz{1@X(6WS=
zsz!v4igL9QmMyrAOF%>)2AQts*+Us&-n@Hx^?uLNh?}y?95PcVZ_CeLLr}X{Is78I
zM&~BAmH)%XX$~Lhybd-oEM_C(o1gM^=XY)8T3bn|e^p7UaF)t@8#ly6JkA75vmn+T
zXL|r)2nYRd$?Nz|ie-4^s9M9N#nc{A14mWXgU1Md@=9H9Bg3<MDl$qN(k0f-qXAYZ
z?k~i-(#@*EcimS452-}S8iq>38P{f<ws|e%O^7XL%j2im-2WN1YcFI1H8P{3?(Pe%
zB$tAYmiwRkI??(Y$a|>Sx5x4S2Frkm)F)cCwf5Y}AFA=6t|h=h=1zb!#;Q~1Agr(4
z`&M-}x8)&BAM5of$wioD7WT`q^f?JnCoHA(eH^DoHQ~}n`M&>YVgCEq4ge2K^+(F=
zr;@#zC8ltcJ7M-|SFjV!d>c;>&|`HRyrs*a+1aTq>@Pvbas10YlDj?k+riG(ohXbY
zqGsW;KH{N^0es{kP_L@Eow$g5+`^Y#-HVBhmfIa;gRiTRILWdLANlTkRpq0$MuIqt
zep+GxgTH|)$*ei@limLtJ}7y<b`NUT{{oljQ_Dc(%2ml7vy<|`5Xr$N=LswFs}LTV
z4wPf8GxTfpNs&da=s48L)9~Csqkel4=%I#z8JK9l7z4Rp4`9Fz=blWMKJfgBYzj4n
z2!2;0fWC-XE6Z0QPPBD86Aw@kq5dJ5W46tBNH&*&&bIY~)7+Ooni|sS)$@2w;wrh{
zH#C<Ny~#SWNLvFlK9n%rKY>%)ytDEJXY^xuBU$1Td0gcB8qc3$`*vke%>pl9z(HBb
z=vU|rU-n=|7TBJ{(Qc&0fV9^#-G22D?vASeVW4AVAK=m+UzrZKmM@oCriwKAxWx9+
zvVp$e6irH%yg&v6dqhwpToC$i!qq8YDPGt=C+a330p;(eAJbMR_LWb@Tkq3jHilnW
zoM(ql{zMM&dYKGUhw|2A*R3#`qd6C9nK*OulHo5f+@|rnAzzwl&z+#p*Zq%R9aPg3
zPhWW56}kueL@|d|<zpeBa@HVcQnxOE;c4j48KPP~Yd9bNMYSWxk4jucx>+CL0(_#q
zb{wp`|A4vbcNKC7j9|~VfVSC5cEbj44)CmQuvgrV0q}RxX0t6ZS+Q^BZ{nkESKcDL
z-6kxTPXQ?IIhB-t8Cry~@F|A`%TuJe#78OYCZWWAoBQ2X_9&X&&qNHxV~I<JS#@av
z3^&N{)N(lELUQRhzjfr}GZw0@1Xvo@HDB8$mS9f`Q#OILbgP<?+q;?VT>uo)^3YyJ
zRzE^HEd|5kfm*P5#0=5@yP>o{ug4P>0cj{S$d!)7of-n5$j2S5E9sdE3(VCgD0Hsl
zC~HV>Ra8p?uE(LgU0&;8l9?ja0WRh-3s+cjNbf>Sry?w9zo%geiC?A#g1=MuklO8i
z8qiWO|39AJZXQh#t;TW>R<~ITEwAhn!^8R*zy(nreP;HeSD)!gN!;LoL(p5b$WP*0
z_uSJt=@oeGTy!F;NockzF3qVJM@}hwoKc#}=BjJkb)nSd25eQ$+KJMD{fn{3YYoo7
z*0mq1*$i@9`aXYO8n2QwBx?E{@Wfm4XgsbAWV4keKRv?EF6<Glv|<Jkbw?qX!;mbs
zmoil@Oo#B+$toM_$INkEFiJ<GEP+1+WYfN~OJvhu$6E594oe=My1h}Z!seDfS6kCH
zl!1I8wj&Hw(3884D$Wm?MrTIz1$l6h7m?jqpH8uH8k7<#&1ah<<;t?Z<gjTA)Fy8#
zzrEjh>9W4D=LctoBRI#yj>5NyS)8MiACy)NTnpV1R<c-oA6Bq7qMM(p1!Z40g)cRF
zP^2?+5g4$pD`TdF=)SMJJbuSC?+ya5Y8rtK7R&%q@be!T|KL-=nP8bb{Ma_n{MaIb
zml3&s|1DBk%n-hecfC|h!m)-m+Ly?7l9K<Wye=xZRHy)6#wg8qY{<Ot6Wvq2m`|)<
z37Ucn6#4CDC)RULPbn;=5?QM*P{cR5?p@7z&B<Mld(tW<CHO~24K>jdm+-*6-v|Rw
z=$$xQgqeVA6(=EDzt$p~8QRviVG_%$p?C8kOoim>fU{xJC+*$Df_v&>Hd2(abAJWz
z+)y@lM^tqc$hx?rf!z>|Zn8%3**AR}IK7~097MTcT!5LQTYBabGJVvFmu=b8VWfmD
zLa+>B7u^;=a-Jtnj;RdI-}GLmHvqpKD?2Fh*gkg^TXn%yFUkfw>0*OaI+6o;8kN2T
znJ%*X0wH$e_A|mSRl1YHW?S)yDTJmYEt(XiKLwBqmbqaI?@cAo*Wm<26iTK4G^<F7
z0e(#5zYl&7$1?yaK-RyT6B0bq1FD~qU18xuW?E4cB*-s<P`?oWn4DC9$d<T7!#j@j
z-2=<=;kyvrDEhC;x`kbuiG)Uyh?zBt1=z(s4&VM-_cA=;0Q|_7-Ce)aGkcodH{pQO
zCKxd`m%hzswJ$$8L8&#LhM5vDUC^s<ZznHt4_LE0qfVvEvI`fW-yaW1$9HPofa%ys
z$ID!Z7%!A+c%Vo^g|h<c>L0^=+r0=n^gR93r1kSl1mG(>t2xTUBCRp3${0QJ5H5Vb
zJUo%lhBy?<r7b3cHC|znS1Plg4}_1aS{#?<bN|g+-6ZxO9v7wpoTfs6*L=2g6mpmo
zfaU*{m^N6{xJ%?>KLNqc;J~u0QD2QPg>Dq)5zBLkmEqwF$|Rb*$zXd6K(}9yFw73)
zQaVmiD<n^cyV|xKV-u&E!7ly}r|Zd;?Yx-xgLnv8dX0xCcZoR-vM)>W{&{%mD0!|5
zU`xan%&3GLOWkOHTUU^Bu5;a6Ejd)8J$#ew8d*==WS1Ouww;JE>$m2QlsRlShF=R`
z-vqBFCMYWCvuxwFzG7e?f)tYS{%uqhl`jiSYg*)ZmeQr`P^ps!+%u7B3*XYCe-SS=
zLR|2KLz_~?uF)b@ZG&xAVWX_8IM+29`3x^XVwRKB#}H_1&~A!E7C#MI`{JMVg(I(z
ztkDfWPTlzV)XBTa1rVGg>|eXj&c@XAT@kDRy;7K0(w0OVU@=t7Gu3q}!n?3^fRILT
z>pilwF4i2o!VF(DtP8<&y{o80^g4W+vMnM364=vz_4?TbQ7@8G6*=xPU`Le+rSB~F
zhV5Dq`J%HZS6f)Z*LV^TdECtwx%5m{PofhMXDE@>`t|B%x8_dctIR?spYmdv)E830
zuNfxKgFI&x;=r-p_zSJt!}6A2+KWX$07Ev1$5O!hJ?utZxZW0&Tv4N8{C#}_EtHjo
zA*BUA)w&|etYxCt3d))Im==b;O^qLDJlFyLvBF0|VM^snm7lI(^$_tS++L1_%C{u=
zuQGdK_lf|tluR0Ssdr%*5k)Ccn4X9J*>l%N4@gbB59x9+*<*kW#0PsLF?})OWm<yY
zA_FWKn>VCCQLsRXD=fU~G2-v+f0)+AE!WOpy6T)e{Y^$4ZNR35`&N*$jkMur5Cc?B
zb9VJmF-8<<G$YOwN7Ev(uPAKHQ$IA2v_C!Fy(by)v&syE^a|}!cF6=3m8!+0QA5W{
zhKK23Rm6~6v7}~;cN;w5eTUW9^Cn5sbJDDOO^tz9W?SmWU<b}R`U;`Sn48<wdxz_`
zli)H#7Cr?_*yN`nyQSnI9StrJzawH1OYeuNm{lqefbvGvcS6t+2%vRw*;uj`ykzFw
z9~)9nK9Y0b?lbiX5*Ed4tUx0>d<sRvl^7BhN7CRDKkRHu6bm66@#An)J>}*@UE9%V
zaUqsXh05z@SB%27j_(S8z;N)ehvh>*_lrii^cM9%6h8-AXx~PkmiZnznr79>YCeTf
z-a&`^$Cu6{Q(Wpt+kEy4ip5%&W<Z*_TzCRg>Fv&sUhh2>tweD$^GdwA2(uYV2ULi}
zTVul=8u}R*9(mJob&iQr^0F)X>0)o|F`Fq<<7bR}O-jgD#+PFZ`L?qUe5bG-vf2Yu
z`HD}emc}Rm6Z!5hdH^WRSW%VK{KNY*UyEoz$<I*k1>Z}iFvz*wf_S@&L9UOG_LQZf
zDc2y<@T6i<aMpQ9lCrXYiFk;Z^Bh50wcBs_y_=1ce(Y7{$VZ^&LG*u*SgHx|p~mZl
zG2V6{z!pf%LQQ{&2`|5Y#2-YzFz*2nUMfam>qn&kOm2h)eicbyYL{5Sje{r&zdv9;
z=2Rs{J~fg4@2j=7M1S~<mJ{|odHD^KZjpHs`_tng^(IbZID}E-x!E`=EXGVYS}3Go
zhP?!itC9uh4QFde>@e@cHaXq4KsHE;VbY|Wr%HWZLPW2URq>0IwiRo&?eqyraeIGO
zdTdpoG}E@N8VJU)$~O!NOG+<t5!*w7wvZyUbevMHuI!Hq(3&hWZ;A!EN$zY{XS@_b
zSO)uq^k$AZ>oZHeeg-O-YJ1ds&;uT{U*olxNnzRnCe8+K^`4Ec>@EEKbWSAV7i&T*
zqRr3O=cWE<Ndc_~q#FQxHtR0PSL8lvbDnCto|)6Gjs<E?2_AA_+v=`EWW?eqgoVYH
zJ4u9qh+WLybh89?qyBM3<dmRn54a}jwAF#>WHy533^!PrZG3)@mNf1qVS&?mA}|8-
zzd~2p=IiCwQp6{Q&5KEBw%Hw*xCfzDo_QTSGW^0gt~h&_)Ab6V(E80R!hiH*3pXJm
zMqeLT_B`socRIl<dECh(@WQJ?1^SfRG{+q0j1HT&QQoxl`oTaq{VY(-*Xe-uuxj(C
z9dsZzV)F?M%F6h;!O89UuLo&NEb(@D(yhv`!<{rtU4srZmV3OfPzeXJyZXb&>I^n(
z05itSS=bt?oq)UXoigRENY%inA5;X}rj7E2d@mH*r+BLQM@fW@vPo#&^XP0gl9Uw`
z2E>))KcmvDE<p(ijp;LJeySPI^y=Sxchs%1z}DV+b?qxg24ov{JKke^E%=b6NBVKh
zy1Jk{32dBoWaR|8H;~8I;W3ICw`-vkrtum!+5|1W8U%|6?8V;5N*f|Mh~j{E^Q#Wp
z1?cpJE=TwT9@v42=-PoFB=ZRo`h-NXd3i}i&?XME1E`=x-pmb7ysVH?z9a2ex65Qk
zDhHxVlKcL~z)@m2mN)d*Wz~O%LQsg}@)jw#2_rPgC>hv(#91e=$4iEk{8^tYkO)c2
z8V&D8{h`klGYR=Uly??Au6eWK9H}s{+`HF@ZRXavBwyLsRD5#tdJpr{2dBcop<;~%
zj8M73{{>Dfg1=xj4P92ijnJpwWAFC!`{ksL7s>npJu9rM_ASF~|Ihcr!wIdpB~KFN
zN%diOkfjG8;zvF>W8?+?MR)*XTZIr`Ca0`Apr?Blga2sEh!Lq?6HpueJA1-NhA0Vm
zSmq!pIh9fNZ*+N%%_k>=xY-tW+|%ZUR=NtNk18I=hHHXFTGo5;`#sBMj%WcpgbAie
zp~)Fl^z<0}-R~&IgG`?yVlf`yBmwsUP9PKZ4yngC%TCC4@8j?=bQpEgUGIsl2OVzJ
zveazkkT_73>+zXahUv%IaN1n^#^kGlK2kV6LD?L+mp@3N1LU@DKy8htk+3E%|1WbX
zP@f_}Aq!^m`m=aAK9VduIHO2+dvi&McFJ(M<0tI_@SYy9^G50945qXv*y!dyGcani
zvT~Zl2iS?o{yU2l;Pry5G?#Nz=u2CtJ_3AJ3^%>v#NPsVf<m(yf1An-iWAsFf1rr>
zf1EsN-7C)%&Yq?UvVhklah%YC8?*jP&~hCa=olp$gTqnvCYT85eUe-jo>{Xp?+H26
z&6eY2LY;6&RiF=suUxo4q9d7q=@eDM$YCJBOYxt^<1pHau_wNxJV!RTYQppWC?^$1
zR})>!FcC#6ZLII_z#(*DktGA9zYEWN3huL!EZ-PuB_>J(yNP7&hb=o}G^0WUrOLhw
z{zQ0FkK}5+ssDm^+BB|wk_~gD_|&1br2z2LpI^cR>0JiLOv*rdqF$~u#zm&56hwyr
zetOkSNKf8{enX;a>f-1(IuqqCdk2=b1j+RqiVlXb5yO#Ao|OeDDo5)`aL?hW%P9KM
zv0o24jfReKgdyi|bAPm0buA|y2rn?T1`h2s!T-xO0sbAe7|CB$5tqcIjTe9i?DTJa
z86Tj$vsCwbx~1Xy<VhdesmVo1r8wN{ILfXB0n~W^6I`g%J}cWf{zItrW>pcn<Fygc
zwAq@_9YU!2K4k|s04iLAHDY-9HRV{tG?U6<u`Mk8c;i3ri*-OU20Xd1gdbQ7QMx{l
zBKU%_xyU(_q^EbAT6nwsbvx5_k+X*Nj}qFuIvUMyz!(}fy2$asHxymCqnpw4WlQ1P
z`Uvxyy>62Q(%ZQ)YgJ;pFk{m@YiDp!n5vzZG{__R*RdxWJP3Ia2RjPSTFeJqG?F(Q
z*4A_I;|6K4jjwa&Gex-b^XWMt2-|G6cyl{6`E61TQ@_{<HPf?PGQ_ruWtm=qMz)El
zf5kIWJvx4IMsuOlMnu}T&DRfm=*!2py6u0@42g3bi8`@ouLX)?H#xf2$r6M}wOj6E
zJmo33eUXlz59n^xC5M2OQb>Tcip61RM~(QFBhoD`vCu#kTvEhB@g9Wtz4kQ~C~-I@
zmw`UZHv0=mSVj0OjI8dhB6RN6%N7w9f|y50p490lUQMutW*+x9r{C)`v7J*kojra7
z`DBXY3$fwFPgZLdM(|2{^8}>RPZ5Yvdw`}e_25KN%w4QUQv2!198Se5=*O2mc9w$}
z8+(NCw=W*!^9-3@&u6%yEv(8Xggzrx)$E|7=*D8qF;ZHy8((AjVYuy|9Ec0^!2MI>
z+APKCyY}tye&~TctkV-lHmz)|>(@ItwmIbo9>i|a_T4mt_C`zKF-j}{C7)>1Iqd-h
zp_>pTy}F1^F=qAG(EYbD&ULLAM5_`b3iU-2WLl5H^8=2J%u82q)&N-NO6&2tckyZj
z(=Sd1YS76ev?!RccSID`d-fshMPqjCdR}J%=rXh0cpYLs<P?IuowzyhwR}h&&7oE(
zoH*#MZX`Es*NIkZ#@WR2mf|si$l5oFfD-0li|rD$KGV`mXzf5pcEQ>AFldDs`fih*
zLiUd%r(7tD+;8ppULO|Eow$r0fSD7r&F6_n(;HCIogAYTEjoa1AyA4_U5?Tk9K@o(
zLGV=_E&D6BDeGf7NMzGZHrF;h%2U@x@bjVwl=hT2_|9xZtoM8F7Se6UZKxes3tevh
zA)9QjFj_zfY`ee}8l5`_%ramR8T-WnFl>!+C=VQ<1&?I_VQjWtyz|$haD(W5j(+iR
zk^{A>eMGGsGXbI|%jmMvQ*aFOA0$b-l=Pcra`Erkq+gIywVU*RtGl?lsQW4XsNC;R
z*=nM|JiK>C3%fr*D=JHPT9%6>ttxY1`Wez`=;wbgV5R9hj0sZaRCS||PB@?!AK9#&
zQOaH#UUJ$T9$}H!n_?mO7BHR8_iLcv6rnJ$erL&GjJz9B9xdQUzTv8LU>ClggPEvZ
zwucKRd>=dMHc{ZYn*G+jo^v;4+aE&vptK>8>7QKJsPaUmmPbY?S0}(2_b#1K`Nne_
z2(tJV(V1F2yA>}9J5<lj-52s=<1~l)XL;gCbBXnqD<Qc=SNn+qK@n3GGJ2}BmjwJ2
z8-Suct`A6^bcDi5twjTU7d~?dxJVSq1PQrGO;~s=?y_MEEZb>@(RAshH&awd)c@j?
zgbi1FD_Sn47Y6I`%NH9LP+t^=or|udis6UY;dGas1e5}0=<Tri#75wI9v;c0m~n26
zxBTg!Tie2bpr9NP_7<DcNv{WG!KTBQa>?A~-*vWq_R2@y?Ts2v?Vs1pm*SU_clz@M
znLWu!WaG-5oA?4<XI6I_k7(%!;7F@|vG5Rls4ur%YavRPge(}Uu6?Ad5a*PY9fwiP
zPZPWooTasPyx3eJUAD@Cz*lue$}b}+sQtx3r9#%EgK4rQeH-_HK{s)>rVbd;|G(F^
z@xcN>4nf=Bw1Xx-r_GbHdfeQuz;FMT0&k*6M=*h=@75M)NQPTrH=;Vn^lP*Dd^@Hi
zs#Z^m*GOLPcvnU4UZW%Zoqs@doEsmRia|^CkUK0*A#|wBvSu6Ip#LGOHBPR{?w}(z
z+kgLc0%hMXVD$sS(tHoeAr2p6G@R&(oRM^{jxNSr>wn9Ih!Kn+dm^FAx{Efzj_>g(
zQ}ru}Rd4>FX|rN`zabFEl=n)~-@N0&tpNoqQt5C2Ke6pC&@QHYFi77C+{7d^r@hVI
z+9^>d*Qg_|OS5M<ZkrG5oNm3#l$C&|&CaUfT$1_%BJU)|=6`+6`{m*X#)Sbgt02Y)
zSO(cq9Y5dlanj03?bU4``fVyd{v8|CO^76XJk54>CiPgO*&OaAv+SFToo8$_H$~XA
zVrI2x(QBrsbPLfik0T8y*eZmM?VBGcjZ<xq;?JXUf{17i#A`~*ep&xtrFD?Xr!_b2
zN8B811{BaFS|)+1<vSX(GzN0c)*zj{-J*|l6R)4t<*h+Dp2#HSqKR!fF$(XC8+c*N
z(swJC=QG>bFirBm3mqOnhbJ)G#X4t5SR|xkC=B)j0`3JG9RGLjd_D+K->aa@m~}Tn
zGNbK{l&uuFX}=qP8oc6(sEZ7N0_;r9DI>#2x5V-5e}LX+W*K1@mw!_L)gf5@7C5Ou
z4ap59F34XC06iokis?(SRXAS=QZ@$E77zGAVQ4d-W#SK*M?rio#h(Zi7Xk6J@wwHk
z@6{P^xPWZ#g3e;0T(8Dr*PS8kl()uSlB&n@H_=qdSf`=VVB_cGHjc*pIXE=4#M;F@
zx@imk|MK!5W?*OJ)*IF8eN(1mT!3-3%pk@5sing5HHu#U+5TslJ}eu`-uxDy$MurL
z475SE>?Ew^D~B|Z%6=fruX60~;>}AWr=#!}@|-4OeCEeTtJePCFU4v%37Il(M&R+K
zb)RS+rNTrM?-AIV<ZhWZy0aHT`a#aTc(j9zvR@B0$!9@?r`R2RokcKV=IC3cqN??c
z<sD3=dT?gvqa{3hp=3H_eSH_!KGn?Pnz{)40Ec(Zz-PQEi$~%FFDz{}2EgZ6KH*pk
z`P+TA_i`6@P`I~(19E?j_}|cv<ybMMLYBM49QG=OIklhrrpU%cO00fd9)@&q*Yv_T
zTm`xI@mKtMUa7=u8(OpJpwotJtB@hE_`7@P40czR6fM=Oi4Chprs@$s&M92cp!t-}
zCc9_`I3tNO_I5r!Xirf}f}kH(+@e$i5~=sXt+VYJA&O758eNrnF|YUEWjDuX4ZM2`
z@HFIReP1b=rcFa9@BeW0c}!a7$#v`!(>XoMbw=`Cv<w$1u~2_`D=!Y&Y3Vq4gT7HS
zjDu5AAFVRRt3slEhtGo!6$`SNVRPlFY+BHK<jUd`0rV*AW{dEf>sG$<hP{8&A$w@R
zkzN@-oP`sg5c%OYbTAIKP`%U}SfToAc6wm2nW33Bjh5}JksmK#3iHc+fX8yAj`2>T
zNOfrQMUFOh4783}EAti3rpjZy=EQpYuQJzEh<XXkLoHGvSXRi&Pn7awIYlsbf8c#s
z?iGO{9$bpaIBIQJAI9h!oQB-<4}<EX_##eE6qC9H{}XA4x8P1!vaG0fj30aV-7FN;
z5}$u0WG&0|0BJ+A=C&W*;9!(szLoiK$<+}h`B|hSqX4poV1ogfSF3KSiH1}(Lt-H3
z3WZ&%hMJpuJzRo9h8NcJP&WP*Uc!Bu7+_bFYIa6tz_9=_h^U(WnNW6(2^uDv@lxt_
zbc{N#*00yHz~H(dq<RR^AF?W8wZ>CU(TC<eIXtqH+QxZyzvlT5+YZXL<x1ns6Eijd
zdGzG-;O6j%igHV;zSnr?DE{qQxfGzHIiH4H$oFeODAQni+G0U@Pfs0TAX32}C@-Dk
zkLExBL#A89`_$5B1$k1$hUJ>mcz&YBNc81mvRbT{@+%|tI|+Sk%Kj4o54%T7!q=y9
z>#}IGb+(jCx{LW;V=)W|m?0Rp!IcIH{J)kD*dyU3V^1Vmzq+re=<tY9b3FbrKOFeh
z3nK>+-DBokCdhCA{RW^i8Aza<$lE~2A=Sh7dG;6)t}@(qP>s3QkpSerUbqh|OwrA^
zLu4$@>m*XjlTwVz$F}_;Hbt~dyrq6{__*yEZoZw^3DqvkHvosk7*W8#f#Y6DkCqUq
zV##LRC0o!>Z@9)RBK)}+@Z`gbmr?f$VyMzTs6=R3<7e@R^(j&9?*&RH&b_V`TakVG
zoh9LjLd6pfp$*d^RlkhLhAPMuN;%~V=wK+UaL|S(Bceaa6rf9#(1l$*E(@j#RD?M+
zg_bTbMCi@Ag^4R8w=QmeF9aFnwoQW<J?Z5}z)J`qn9m-uaD#tvee^ny005-xys?ls
zbGIe3jQ>&USQnrD;}S<2n@VBD8&v+v2cfW)7d#9x7%7<QDGa23#)rX!;RvdUkoG2y
z_=7<cq$(A)@J_v5p@ohJVL{kHke~_6I658Q<1V`7-d<az?YT=5P+kQhBg52Esp_>(
zrGx5Xl``;&*3Zk&Cho=xYb%c<h>!r7ZZfAT4^BVHx+)}<UCnuLvft4oNNi+xPUiT)
z>R|cEaSt0XLXDGRYyA<@-Zk2hWK#P(&`80U>|xT}G~oDGLRX>`(b`*H)GvQFZB44e
z4MOKIb%jdOS5H)jV!+>>{Y8PS{b%he&0L>93zN6%dNJ6I;~0&wG=F<`S7`gyMCxqb
zAhoTt%n>n{q1#;&@Pn?n79JX&PHTR5o{|WZRiSk-36xnx?3Xxc<Q49<L1m#_T!^hD
z!wctG3`Q7xx&9YgtFSXlukLWOX(&WO68t=-FafVJ@Vo8(;6~xS4}>n#v13jkxp<<&
zy>yjl<kASD&E|Z!So|&;3BO-JIIZ4^ahLh@i(-w_-6K<X{ihD$!OVX~nV8>9rW=YC
zgHU&?`Slm>S~VoT*|@$!b6CjS7=v-eAZ>{&8w`m`X)wWO%$-Xwj!r`_;_Z42W=e?a
zY)>gBhsQ`s;$;BoSAohUaBdyOp5MAK?+`?6O$@f}?#qiv)*jdq!gOJc9d5me;z~4w
z*P=GJD(Av`lT@r#tmn(rWu?|_c&c3z#iit8T}h4k^pH>YQ^^~nS)E%Dr>4}dBXslU
zr+iih$HI(l-Ad<=Nc&bbhFyT%^hO|wnzOke;V0%X&H8TH72*SBIwZ|$DQT-dA9&c>
zU$FPUhTz3_>C-TgSX1aCpCmyIQ~yx3GZ?$TE~V-HmPbwd?62SXB1`YBsWHU#w!u5!
zA9i0?E5V<0Wpo&D`BEttwz7zq*6bS|D~NHdzyVtNjbp`~=(fjO7$JmSPw$9CZMWOc
zFRQZB1tetYW%wDS$#-U7kRxu6#XDav@e#`yxl(ssyp+St31SfXHLE9})f;+15gP;c
zRAjv(Xy*#Jsn%8;0I@>(LccR@`sA`;ghmBbgw!Zt3&KQWH42iX)8fE46c(u`-lk~F
z&CIKV!GbmF9I`H7NuM6j)+fp&C<`cxLFEzjdokwEE(k`6sWNviJOrxaSRG!GaXGlf
zfIgW*g~S!U;@<VBL1QL1uo>g@=<SUAU3qtz>t9c0U4)Q5UZ>Z}3)nx{%0RG13@DNp
zF$xw_6Oloxtg}%JM*kH4DK1TCZ1l+|hIvC!$}N&jp!_E<d6hLW()&dj`_3O!V0y{A
zNlVmp=Od3AX4e_mD&~^W+fa|QN(l7Gg3n#uj_3StCXQm`G6&m|jDjvmm!B01!_p+6
z>Ar1p!9&%ss(L^fb8`R;J_{DWA&z%^rm%mVW;)@{Jb{%X5VEkO-NhadgZi<s{s&T-
zb}pHrl0}?Om$FN08j!d$ll%zb|Nq0IjRYq(yXdw#)iHC6tR`i{L$JF<uf`BdrD%Aw
z8&D|Oxf0_3$@CVwu1MXXI<$)+kR&*z@XjCIAj-O~^YlT;lMv(!&x-%Zq|m`{hurqQ
zSj{`R(xlG?1}y>xYB<vF8GF;MiNCR0Ln2nl4Y%@g{jsc%tIe*S9qVY@>1y)259&TS
zTg4BSea<!JlNQw~O=9D@5olYPMqIiOSeW{Y_PCC@jYot;d~lqnwyiXn_^4~M8CfSK
zasR&^K4k$Ev0sc2cO6UICYd0X=<Cj*k-`%SS6J(qVl^N<PuW$=TEy;!-`ieuv1*73
zEZM3Dv%1SA`;Gu>;d7=lV!@?_1UsJ`61zQXPyoQZgZjiNWqj0fzNqMl<zUn@*<Rr^
ziKPaHngh*C3#|F;Pzf$WoeZxlN5juwxMGS6A+TB20MnD_wkySh$z0em7Z4wu-v1Mk
zs^sOWTMWzm(QXM<Nwj2(lez+l<O6N&k%O4XqXvjSUCw8HA~PzUX3<1S>V$HE`ycf$
zdjwL3fqJz;!tsK|daq(sOOW<PnO&u7h5&;xnA5)(Q5S66_W!QbguX=&cb%`3TU>Hw
zmquS<DhyqY>6~~CvOh;*8R5EPTc~q((Hgu-Y2%qubT6Fc9XqjnIi4ooTxmTtf3>l7
zP?TZL$Pa>I`5*EF^0t(r7L3<u3{jJ_uXn0Z9g?iLk|@6ph4KlOsghbR9}jq&+6Glq
zE2|Bwvab+?Vgm#l_TDcXb!Fb8G^qeY)ob)2EAfS;pc&bJq}fj*XBEQeUT9MfEShDO
zMG#qed2m8+K-<3p5byhyfqV}u$_C=XY%us_38*Q@sZ9K#E-KS~5!IMMxsDyvdgf2V
zsHnqoKxFZ8FnA?-b=dLp>pPROl)f=R=IeA&#H0|Es}Un7O1vKKX4i@y@oR+n?AtNN
z_2YuF%dd2@G*_huvdxt!^3k=1POXCQurN_YQf0vNfqmVJQz(6o9*)7W;!6my2jojp
zcJdkeNR3-N#{HNr2{DLzY^flCdbwVWX5H_yxTm#x7Duqsj4uA)jTS^hgfK5j&*Wr_
zTIS&#PNt*a`XlmzV9%)d3LCvcMmEnLWI>Y>Zg8aA#d5siBa^*520Awc02d5Y%m+FQ
z!2B`DnVx+{i*_J|c%9W5`L(yK&he16(LT0JE$D;w2<dpu#@s(D?51XlxMme;N5QoG
z1AVx|SDjQY?}^QX^93hk3I$bI>*bB6OhM?z4~7JeOXByPFb6!xQO`6aHrQ;yOiRUY
zJ6No3AP&Uzp+%0}q_yag#a4%C2BOE_UEL+d8%O=ebV6GFxoj{=D#YmA3TF)7KCu5D
zZI)Oc+}k)Con9ip1X_E6-)PsbFlKs{2fn@swY#&gtVRERZ7$04ZGK%`4#~k|ude;Z
z2>Rq3T<d=DZhEfo(2ZRYtp#&9;Cvs?%+GQ81>upkyH$!)53?T?wY7qTB8GUftf>+z
z1{hwo^z)w<WC~cmaNI*~TtCne*#Oy@6$;MV%O{wNfdO5uK9WuPZ#z!l0Y`GtR(t_v
zZ1+8ab~6D*9!bw@q(MB`_It-VeNy>sHp71NZ1yxrab77#%X+q7R}Jhy2|rhnYM)6p
z5deF@NiwU|(lbey&mCA~Em7E9KY&Sd6>s?!-&IJ9G2v=0N?P-n%qA0oJ&D2GP$6JP
z!CcY~Pz0lQlV|{+&AvpAdN|{~7%M@m+u)5$8KtiMhetL{(EoK{?nE{2ovM~)bs>0Q
z$~#4c0imr{%;uPi2WonRB6uQC)9r@6;E3KI;|meGy$4J^17Q8B71N)uIM5u*>!?l?
zexj)E6ZyWt${4y->4@1DUt3NAH&GASn;_lBE6d#Lu+i*O3TK{R+#qW$@0gqPjC-nP
z2M=6d&9+q*5T5z`6qeIAa_sAhR3^wZ3Je#3(!iH3!2DrH&~#of+@)gAU*r0Dn*<N-
zmz)X5o5p0{`@`vpHU*D0g^S}X;67(E4+DWs0UNuU9Xe1B8}2EjFg*de7PmU*p4%Q@
zZNIP#g$j3%WmM)R9b|&8ye~9*9|QH#3|_WuY1W^E5v*B6@<}oKl)Zw~ezDgHC5|n|
zK({I&>51Rd!S<PpRUyLenKahHx=Echa?)INy()v!bVSK0ofhKEZqeHdIpA&n%jLSJ
znlk80IV!GPd5a$m&2BFn+F((Cx670Odvc%<odUO}MgSwXSG#4V5-DUEyrRrV7<<Q}
zffKzt;zH6f=_UuQbl}M7lorq@9iF(Jd1(zBDgyIu)`B=&2@p|!t~!!>1(R;!mA_!m
zOZ@i{{j@Wya>uJjvL1x6-|^rsy03|c_NY2R31kVC4{buycXx9N4*kh<xFD5&p=Sc>
zSDE_%$iVMX#G)4|;Oy|?pA6@X!j^8UF3B!Bm4An%alydsDtHJEtY-5y1ScA8z6&ut
z+n$mlR+uEWCs>?D^$at%ZVJ$D1w09tEibs}Kn6P%N3!AGMhZ92I%*6M2gGQYyX?iv
zpO3C~_06(F-|8GbGb!`Z7Ar`T`9l(Yf`}<X>-l!qu+bL@w>$R}hT(LzJ#m#*#>d6w
zi)QgOFPi4sRwc=5q5bq6=VSw0vlCgFw&%9;=HmP_u{a=D0q5=IPWO0uf9@A{2uyV$
zXV_U0KNMf&Ny6~s#jO_9Qo|_F`2L`p8~IGomUMWb9y1^A|5b>PLmbe!R8Cg>#J29f
z_X($Cl!{u!I(PLHIxysti5<zOyTe#yY`SpIbTEmu#4zfieUf4y<P_T3=Udvcz>?*K
zkuOf?dmWl!&#<~VIA7(qf9i>-`+8-*hsgk7V%L3OhG%G~^U40hO{{64{0+KY>E}rO
zRu~SMTY8eLdJf4$5FA$Tl6fQ9NArbP+}sEcd~bMyed!F+0f^`{wR3C?P1#|Gy@_)n
zVOJG>mIj^+Zp|A>Md}zMqGraU9#`dSdnO)qF?+PeS2cMB?eWdQutk|s@(hug0R4bx
zN#x;@tTkjnH_1|t3RSRo0Ky^7w$r_kA^8#axH}id1ZfJW+EbIlRy4Wwex{%^J}gbW
zPHET(H)P1j(7<wdow6Z@p=gnreSZ6RugA<kwszj6%yvVq{Ae*3=m8zB;SM?2@q#&<
zVy(VO6dQ#0?IcxdSmC@LZBSG=3|;F6w+^l$-;zDW6QiVmwkF3Vthw`eY9ae)+!1a8
zO~C-RoWc!G9j2Hw%BMN-Ihd()ys7<&#e*Pgg2wbH%bUMHLAbrlgkUHb?phhl<%?>R
zx&T|yH2upNA(3~QdE}?Chc8#Em4&YXR&##DY((Y0$g^iny|b=c{BrDsi~oy33l#Eb
z8z3of5%hH`Nn%J|U;~=@U$LfuLrKa*%}`Ju3&bYxZG53(U)a(MT->1p6T0(@ZuQ1>
z<S@+JD_n#GDr*ej8T*5KufGfq`}-CMJ?=fmysVSZ!IAW=tJ~c@wddo;{jUUoXxgUI
zB4b37WOicD*a28zPcM$~QdJYA3jj_U9ffM)Oc45<-Mr(EGtHN9*!46c3#a$tT%<9I
zU!|Zht82GsWSP*xrWwZ@kHZ1E$$w;Nb&*(fuHY*=I4_@)7pq%@{|5m-6<H*ptB-Bq
zV1GFuvBP|vBt^Iq$W~N^;~pwXkQG;!Y3#IRWEJFRFPTH*Xbuoa20tTJ56T2NeMhO(
zyZbnu!Sg6`Y>_@D{>!?5G}{k(9Rlf!_AWG!ViW3tdAoN4T+VsdP}?mCrMg%PcP$%~
zi%s#i8&wFRA!(q`es^uL1kaSmXgM+y$*2nHDOEpdQBJpmp{1$?ZXb{X)GQu{lafIf
z6fFbH0t+4Tg3@1IRovM~ZK+~^1aJBEW`wIa(@@25id@q<-0}iakrUoS={T{C8Wiq*
zh}3eKb@vW_*Kag$Z1NldqE>kq2S4#h`^_nRiZK=JKaxkGz7;I>EEK`PBlz_#7D(ym
zd#wn~4Vw&aiq6=ZQsaRrr;5t^c=+4xf6VNc+Sx6aAAZroFKA4xl)x|eb1QY%@D06_
zEA66pEi%3V4k#3iRlOU298u)>>@}HDSJ|#<$D*{6g(7o;uQ|J#s9SvX5H(9~!75<a
z^@3BOX?-=ix^?c4Qc}b6otYP#6&Hv{1z03hP6M(oRTk6!O)G0DUVVx`pRz0kt?tEU
za(Hj0=eCczbJ~yk5i$rDbM0HNmbsup2&b-~*=)!>v|VVZ39k`0UA}c6!Tpwr*U1oe
z^`0{4QeqEV9$^7dXn{r7<B;y97i0|Yj6u*w>0s6U^k%(KF090#i7US9hDKjMHNC^R
z+mRUX#})1~6Xv@aHseoA-0$b#U}utDGgd;1NOo-YgdZFy2lRtB1Nd(DP-Mol9ZjvQ
z_sYRKxMBUhs?$XueCr2CA``LU{d1ydZAFOpxnzo=8)7VqOfuRWT~8#5RRx59!61VB
zc$f2&qVFYbWT&AP1eS5$$fB!6Y8<TemVGVJ`jy&`AcK;{uZrygBe=`+P82(WK&<oT
zIp8HBDi^2Caw-!`+Mf<-3v+}NW6wFLP1=6}rhbogHNfJ9lQSQHSA#bzspUtA-*jU!
z9l}LyN~m#;si3#YLEGBt{fic?SIK2QQ8W39V^$E8VtQ_Ns-L4~@fRiFNpv`=Ui=h(
zjSwEHbgc#T`*WHi8tQKgukEiE<GT$_Cq}0!(DfmK;tQY6C$uKaK=*Y3yYCVJdMLBu
z+ey|{;jlH2m4Cjsy=<!&isGsFxZMD8Y0|_4K#-)=!|kWkY3lGudO&r;ts$*C+rd-c
z`)$8eO+=Mg$v9E54&YSrzxwTr{2m#?;JD&^z}0`c>ertFDj@>J&XUgK+|C><BW<O9
z1GO&XihU;AP#|Xe#_~_YG_YWV-`NFZLks3Lo1keQYV6J#YPzmbcNQaPaX=tiz&Tmu
z*2#zpLS+@sTkl~7wS`%Ec$+duqFAv2_!qq73?Fy&?H_&?Ru{VQ==w>#GG4I=I9@+_
z{`YW*LDT4y#vykWlS?6GP_Zvy+1A$l*tpJ1GIlj_A5er_nlq>WYi%t!%$b_RzpJS<
z?{Be1VkmE49UfB7b?iiw$_o76`=XY6nyW{}*|~qsEwkqr8oCy0CfMPMV&tn0smns$
z{%IhhqhDi9%M(*TJj`^HT6#7+P^ZQk$4o5dKCzmQuwh@5NK**~+i=kkk65kotdo2O
zTY9Mmo`o{$@kM9XI`ol}Wbdkdys|IiZ`g=C`FvxCoy!H?CAP>U@ox$acaCc@mA-P=
z;{o%;;D}Zkv8TqqiU;so^MT<*BFg2`NeNT``u_95#5_bJn+qvs#dkO)MhzosVvTxi
zx$v_ZP)e&@jqb9XvD*wh96hO~v<n+Xy}NTs$|lq1vsbn)9o1O_4W?yBjR1@Q=7amm
z#O$>&9K{p*L7<872~2o!Ru!U9ABTpL&Wzvf^^YdQEDCX7THK6xnQ+x7_lb0Y@<HH{
zjJ*HU{c{I*d+;U0MkCBXc}p4<I>fmAiuqewxl61N3(9}$Zu35VofZ$bPV3JK>HB9!
z&eq_`1`Ev_$IMVVYMrCxiq7fmlm7u8YKXVZ@7v+5NgT)Z1CT`Az3@StbRu*HV-8=|
z&0auD`1**47pe64ZwgJ8Gv8Wvl+2TQNduqb2kQ!toBa!ySFLM7@}KqTL>2HM(kh`a
z=EF(7*XphyX~vNEc8RX)Hj8Wj2={)1Pq=6T4!eJAmHdsO@+G?n52bt+?-{}rz_oyR
zPx9^s8#@e58fu1jXB-<I<FJ7F&EC%!+OIQ{BuI{#ryfXwt$ru9P7kTA1?5#z0qi>`
zpuZ)wvnr=fGl9E-zG#N)t^0|?#R&G(c7Tyek&oPR6|n1(iQ5#9G8zX(@{A&l<ix37
zJ_{hW@RQ62+W!N|x#0~-^k5_D_v0d=w?1q2`>I{Zb1S&<1u!L5k``szO#(F;Hs#3i
z7@=<;SN3Q~?=v2Oe4-+A85fkjGfwfdl5~sqdJgD2mZ(Yj1<GZ6UkElm%IfP566c0m
zhNFW014jUE%J>Fk_S}X~%-GZs{AGsmFow=CgFD}M9;rUqib#EaQ3G&eOigTRQ}Xit
zI2bG=<y^?B{Lx*O4nO|7B|>mL;2zxbzRAQ!t2$F`r-CKZbmeq_)ADtj)%bff%)il|
zs<XOl19<8sRnf2qi_%>C;?5||&HXqN!|wVfEvy*b3{{#=P4F}IRI`~!$d{b5Y!-3g
zR|shV%t|grx|TMR4h3a5g1EqNa)`};&=(4e`=J{XaNzrI*$a@@XtzLZEdl(e_o7iF
z<=0)7A=4TF+^w`os@HufD?oX@U{KdB;uwP6Yp7!^MxpCa=R;qBR;y^!$aPfJ9ORr1
zv=i6``Xo*JTR!Y))}zzHrtu!i!ZB_0`^K2ijeba>!3#K%mcd;rAf=Sw3qyJB2ku?F
zl<fTreBlr+!2*^^`9UtVib}&Q1>3Dm1q&vE?A*fl1`p{r7%Uhi<_>f$7yu}PU<Zk}
zH~$dnv1M1xNx$Lc=az0#yshj#{kCeB(xc1Y_LCrkbYJFeZu_pQSTIK&te7aB8vtS*
zDLRV&ZEF%=(n*{3k_+F~D;4jBW-DFCk6X;WPZ}J_8B%Sl#DP{;c3`jqJDPJpphoLO
z$I{!+c)T4zM|g56R<)C^m1gXQD?P_k^TSPY?p!3k48`{Xro4)q(|c<`BGS)qrnen`
zpira?mObZFH|5sK*-NIwDx>JNkwEpVf29yF^o?8Y+V&j50z;*pAy4R=G6vJp7d2JW
z>)@9>Ce6>JDM%tHs(|{(YHGwnbQM+G%yuAw`~vfG5R!jpovbf&?-9X`+~Px-62`G@
zWoO7xx7KzbUW@cKKC%{EK&3rcOWb0_Y-T7Hq(s)yAOzEoybj{RE4rS?s7BSWgE{9n
zE0hrO(c>(ig5u|JrU4al`aAAupOSaGk`<lBpv1fXhE2!fe?Lqv;o|{%&s{Gq80bDt
zR0<bq!w09`L)JwVjV^(3IvhA(Bq?T36$3vwtvqY^7NhJrGW!Gnw;Vs;$3dRbJ5qk6
zpot?7Jdz{UMB@JO<)&py1dpEw0*jHCLL$XLsTBoCu7=P_&iIOPHz(O>X5|;)kf%B!
z-#^OyIbH)Fl{C}D_{n<2yfjv;t3&swxL$)7gS7k7Y76PlbtBJ^0@#Gs-Xac5QWZw|
zeC2;S|MS~H4D43u$OID}jz?eIz1oFn^Au_3&5!mX@InW4#|PdKN>%>N5&-*4+<COR
zL=t*jYy>726OyVGiB5UwmT94*^;_}ZKgA~G4+a=tKbu5D7o%JNTQny?*|sv=8_d&W
z@C7Fbb-;==M%$xRJy3sw^Fi~K1Z}7DGtKxVj)s^JRXZ_(Mwks6Sd>tTP72IKAfU=%
zY1c!fxeQ9mkZr|6W$px^Ey3Wucj2t(g@Nf{??I@SXCQ<DZia%I+9KvmC+^s9Eio=*
zUHxAhSR+2U<GneV_}Xn2LHc4op~>Y%sO6(rvQNnQ<!}J-Ujcuz?&*5oeyfk;DHMyo
zs39@2qgM`P^5;3oR6j|dkY3t3jdo%hbj0rSKFOB|OW)m-gaiRmMiUY&0MbUl^{b|c
zC`>32Og_H5{<7j&QI~PciiaMVp4#V$Yc9YjM?t?Ql1neprfv!JH{0HVW1J(jGIBWh
zxGL^|@VZ9;b=JjQb2#2)#hZNpIZC3Q*#9y2<`E*6GkqRh#E>mdtQkgIfDJm>-soKI
zw%5}9=-Y(wQg~?H$P}EMdsc?PcZZttSc&DVQ;WbC;l4^8gD`R<UA8p4;atbEyZNJW
zM)Z;r{riy41-9~w)MLVOOTmrOS>Z`S#IFhodzD|D*$_mQa5+EEFYhIVwMtR(WcXuu
z?Z(zm`Xn~9Jf!8CqV+Fjh8Nf9B$-`2>l+u~4j|vM0SXtjp>#d3)F3R5!jcs!NpbTx
zGAAp`MMUH_xXs|$Q(zwUs@FP_1rPXzq9z&C_tT~a@B#<=fXC&Sv3-b4B=Ua(PhBt?
zJFb#s!_Wp;+|>wUA^{t&xf1*i_>$UTdSV=l*aDR4&&iJ@IU*ju-n7Wh5!OY|1gtNg
ze7HT#m|gpukWc&_i{}uj(_wq9<p#W<1I1v+qI`$@LICUodS2i332UnhEh}q}x%`Vk
z?zB36>CT_vWKLb}Uy>qM_KrFqbY-59sv(0cj8y<kvcjGO55GNL=1P|)fwP0o5oNwG
zB^CNw1{-%)2#PRLazC{|QYNZBr@S^pE~#`84Ms1hF5pm1TX0R0w%$6B>CLC6Ny@wZ
z>G~s*JZ!3sc)W)My}fn7;g2WJT$OdDJ$@wrgn_z3+uvxAf|~f+<EpQ_kw7O`Y6s4x
zju@NI<`9+w-yG9Hnv%2DTA3(3lpy8_(uT6O!&@`~CINy|0bQHK{6|>gxB=|qfjklL
z7sxz=$YqJ4B`(wUXIc)d3Ocycs=;$qen+)$fdcz=Uf#doXP#ni1Ssu`I|@^dHsCsO
z$vb74(jVab<$KErj*bz*zenq1zzb;D+)vn%ccx*Rib*AvIs+k2&P7};%c%&#6|GEG
zhEl^J8Qwa(m#WY#cw!wtts7u@Zwla;C;{`roL~t4@&h)?D<{$Un1RsFXK`nT*v+{O
z8saH~NRSr*SY<4yQ7CCDXMDs(9_!Ka5XH07#O=jKM0XjaMmnMKIHS5aMfWBZvAvQ)
z$zqWcv6Vb24cRErXr2#j*?o?cufPNqO)k}s`&GMbj|pjmh)3X(8Ry>BBsEePDuq?Q
z@nU73(gQLcX9HU2Xq;Nvbth5@L{TVjfa7(RrfYzlw^)m^$1)h1P0o&PxwRK)*ZX^1
z7>YDAS(5;gzo5BWdPj>aygc&ED09*MH2W~f;3{hRgV}4!A*VV%YwrfCd!DRe_>zQA
z<g)gQ9uG1sd87i}NNyR}L*sf?0EOW_PJk8WqeBD>dWf#)D#FrHIW?8o`|r*U5hF>~
zoX(QL_#d8B=a|t${W(iH$4v?mXt9tYkx4`6K1j%13x|(tH#Rh&TS^uFU+qKCZ<UP!
zTcde7u*H2LOJronT9~4Z<PG?pSQ5r&gp2sELde>!%+(lYhlLI)j!Xq3l0aTZ%Z?L8
zq)Dxki~V7fSf%+`x%pW}0HE@cmE$p53(y*VP_sZ;Se}_DR!qHI0eR<QMqZM*)9}&u
z!qIJ-PP9%#wNku#eT}jBIM`m|1j5ULt~uABj1vq7iow!B@TZ8`mJmz}WqJ~2a@&zk
zc{8fCYJZ*ZXF&nvqJM<@QX69+gPM=ZvtK;T_OPq8y8#V0S?u@a2sI^d=Boz|pR?R@
zcBV|SL7%ih-oK+&_Jj*O5C<}!g1)z%36tz}%AV_PqnY%Od%wHh66{{P5VE;JcdD*R
zu(H#2`Nc~Y^-VlZNNKUVvA9B5YAAo*h$x>PZ!}=f|DVa2Z3{(~Wwd2{9vGu~!OMdr
zx2o0SwZGx65iII=7_p324jfV|(4hd9CHZ#`_o#nnxRGJ}TLVSWtNerXQgp)#&$@A4
zfxrrZ;BbFs0a^`Fzmn*SCZEkNH305iZgEto2Op?NF9~iabWkb<5<tsD+WCxwA0~K$
zjDoh^AnTCw$K4fk+j&aKEu+B1UyGKGjS`}6Fy&w2NkO@(6?mir{H0lrnc4{oRFXbT
zeajIWBLY)Q-u#lZl`|U9a8E5dWp}gZF>!)}^lhftv8C?;l;z!U2DLZFOBw)43c7S{
z)d0<><>{UnI_IFP5H5*V!vJd($Wm|WzQBpsGdD-nuWZZ9K2opdUyVyowJc$`L4eeg
zTaBD(VQ51U4`sP}C(XqE+A%Ezt3j>`T;NA8Y!V!UrXdSkL!xr-v!r?%<-Y_Yc$Ra@
zGDjrD9jx&C_AkxF9qVfW-C*+Q<)S1RxI6how|gGRaDN+adg@8xF?T~oa0)?~);O!!
zW6BrxMOM89r%;5z#)p+JERNmjtciVf#iPy)$||??Utq=lnvDC!*1{R|?*R6PBA8&%
z9=&4F6RkhuQAXp>QxwmYR#m+9>Y1vO=CNh8wSa3DwxVBAL!4zBP6wK;J1y;R>FEfA
zfJ?%pW1R0QKr%4=z$Ly35lJbNU!@d}oj$MVr)*a9<4;j2A#XF~?^63q?&Uzq_PB7A
z@6b;<MS}9l;`Zoz-;f%PDD~B3VdR^l>WrzzCAl^Dn$7TFS%%))AGt=6?-wi&icgXT
zpY4|kugkCl^jqJmR*A9pJA$C%DpGZ8wJHGfi(X2;fv-1DT*aAjl=5rT($Rm8)YyEr
zVbQZagKFyvkv<x8+)SbGR(GPu?UYHn`FPi`Ph`{&fiJz0fvdklu)%g0x7v=F=WBd4
zkmWX<kUQu4PF#Y~rlk+zh{f?k{-s01*^ESR0m_69*wcBvN3;5T!?M{{U!EqJ8?pL?
zV(5jy$k|}j{bg_{dt*+Uc7eU5lv0(>%xIH<V!KKH;de;QiHpf_e;FQdz?sf9MxMzk
zC_N=f>k`y+loyo+@1DOKhnG%U%DgysWMciG(}AT)eaS0<)b^>N9Z-$in4B{sbPJzj
zTKyo({4UXxTe(xXriR2;1<<?!+|$__Nk?>Yd*95URQZlgOu(iC<I0ETpiltf+%0R2
z=Mn=(EDMH%1Y%UNq*Xv&Ql&SYpC1EisgMG+K0MYIZ_B?nt_{J%jzkuR>AvZT7{&dK
zil=2p5=?)`?xJ=0$GSP@2MPsbqm2B?GIK3_>Ek~7ryBr`O*U0mD4`t7Di*d{?p~F1
zEvzyt+nKhaAVgQ-VtG-!u~iNb<-b)Uer#+j1oxK>kQxaq6OJ`?&W~Rx*YZ`PA{J=+
zP$hRXMP~VA*iZGxUyC*N6VBcj9Dy&EP4hq<(oNbam?*dtmc=B(SLMx$cax7b4zDp1
zMeV+$q1k?6g9)pR0`67dpi|yD=%>{C2++pE?O6cBfMJ9V6u)Jlf^<7+7?&D7gkUlC
z@y1i0{CtEq3G%7a`aDTCud4C<dv;&Uke%Z+d!JKghY;1^MMWW3ZXj3rsum$(6uI3W
z7ET>2dsv38^(~VT+`qGG0@#q=k=*$P^VYajZRWn4iv5<?bzcMtr%yrTuSFRB0FZGb
z*UMj90AqYZ8r=JLqXrokt~FmeHyg$Hhb{vq74$7<y8)$3jxF&Rw=hk&fHmH`folpp
z;?gI1Uy*v+c0bJJG@UHa`V&G(7Q{mh*f&T|9rUFJ?sH1HqYwYmpuIcAsH4)9ZEb!<
zDesR8pCx_Nnb9Ee6_>6$dPK%E>hOMFDGx);z%>a_cHR*@oFLC-t-c)ldq4gp+ERld
zu&^&z1@Z^7n^4FstUUg>D!RcV3ogLJd8Ji$#!7dIIaZuQ&shEE-nbG1TWr>gZ*>k)
zce<yUZVJ|fl4|0EPmOiy`xTs9`2KGXH?+9aMdGj6+6m|^eF&%yG59{L;Vgt@n*rx&
zc_cJqz2u<~4+eNQNW&!lHZ|mCgq4hSH_}rzIeoQij!Xzk_z7?XKUsXB9i4lav4_&H
zQ;kV2IMs=G6YUo%p<#{m#Dg)F-%i~$c52@s$e{6rz@dCj;KmM6t8*k{LYE`zEWdAC
z&CD#r^7_}c=pZg~SuI$B@EkNBeXV`Uzlvt8>RSXv)k4IF!5qJ8`THy+_%Q)?<y-;i
zgJ$Gd-TM_OHCTm)I+Pg<&1~Gmm*jW4f<<{uOOFqJ%mEFp&pRdf_<QtZ18m}*0&o;C
z68@nmd?}Tt2jlt&@YHnPJ~=WqWTR1k-L;4vY+!*lDXrDvl;;dofRHC|LyC5cL4O+!
zSzBT2Pxzr7-ILUu(0=KVpfcu4Kju|5bJ38@uSoip`4?KM5r$f)g_!;Qty=WL*6ttg
z?`^B6A!Y}?YF+aRsof45XEN1GoBu9wz|#%dQMoN5<LU1`c^Yv@zTKB8j&afol~bqt
zoz3rwdsyb<ZGZ+qI>)n~cQ8Ucq^sIWU%Sn|rg)Ed+~YrRvmg$rANN5B#6*C?ptQN9
zU#&ETjT!tdt(yx3LRe@e0ye(woBI*G4<Hd4#md-wa{Z>V-R-H$cPRV{@&1+nm+PzG
zLgbnrynp}3${B~r9=^{lbrhVk{m9=H3mATMY_)SqX;Yn6HL%-DK{+-RY|3h-JXdVP
z-i)(*pG>4M;UVBX_Lw<XAu@HPUxY9DcZk*_*qplK3&D$GlPg|A&28A>qte)nb^v=l
zst9k5t^EnC07XE$zaLHzp82w1wcU9-NN%9DOUJC)Nl|)Kx@fC0r--Wvk7Ac^pG5A<
zCA_U;6^+Yi*iaHa>wDV_6fmNO(5U`1eL06PgXVra_;2du<F5fE_*~TmA1jd@HU~&>
z@KvLI<3{iC-^>^lqnNqp%{*=tkmV6c*Hbw*vxNyNWoigN>R`rd&wIwYz_kun`EHQk
znhp5bNi#PYaj13_5C-ki=n+Eijy>E^ZQEDpL+oK|j#6`ZY9!};xc0JPzNgt2^6C>I
zK6YCh1n+lrI9Q(yV-Y(;uzwgkg6Si53n^4No`6(Pe~S`vJVUp{N9ChR&pW~#z^)?B
zU<C=$41+c0GZAieX^|mIVfb#pd*@iXz{C*F_SG>kgi?t06<@*n{Jv6SbabFVN=Vx2
zabM|4h~caaJrr)mAtqo4*Po)&AOIk*0PCnD(RY2Q@_Qf%v(??wlI%Jj&o!hxLAw%%
zE5!#zyAJ385;20pJci4P;%u!&QvOR3`L_HmHkeRiaSaZnn4<3fw}<9OevDG~=<2_7
z_k!XPBv!~D3=qibIz5$j3hw{Po%GoF;T{(=>m16d2v74Y=$}SzEJxV6tzkMA*s!oA
z!RR44&kru>_GrH@3BP)swr!P~inJ+OLuln$i~yl)!CDIdF=gUSrld$+9yB-`s(#Ta
z`)(e9ozSy~YqVlbV{~hSHY&c+NdKJJm=H|*)mU2tk~k1@Qkc(EAw@;evNIwdU^y4*
z)xGDoiV@?X<F;XzuD!QUi-%TaZb*@S`*!f);<j`Euiwehf_ZLL2R1_8^R~Z*5}=$b
zlyCEl&C;T<q|h|QTEMvz<MU=N1#~v)_Oo|PDy4|?S=5rHkzF>!R58P0CiV#2^!pe8
zOPXF_=^YtONZ~cCGNH3wReV}U5#PgKDQsUIEFu^>Ur>gPydI6nMEfUdf(BcK391QU
zuXTCu7#u~>3Q8C<E=%g@6fVu(kr(Wq2w<cIk4hnb%8&#1?PQ+X4nW2QTl&CjHjS*Z
zd$>lrbVy}`+<Vjz66$bB;9gy<j&TKD;&?!x3}L73at$9epPvnIxOWOfn?t-h3sb~D
z>_4v+VVHY9yBJ!IGzR*Ks7D=kJLjVNP7+zW7Yst(;FdD(k}(kyA@tY*0$Nh&2){~i
zl#i`;?9@#?7KzpB)SGvKp=@Bs;r0wTN!cD?-|R1@?gn^L0i~-Sev^1*A~0k{=mP*y
zH)sPmoJMJ)D;O6!#ASBwLku8vimXm5VV+Jm!-y8;a}Q}d$x8a?H(Z!M%o#WS1-3Jw
zZ@ybl#nbQkOqHbWq88x*0rr^oPdGOnS)4baQ&m;#jM(aMj4M4&3W{c=vuA#o86-br
zH{fz+SNi&I@?>B5wCU1$%-*Y6D74U1Kr8}D5y~PLyRCrPjXU+61x6n{MfX~kkMB3X
z>d`}YLPkw<BZr=@e>Qgy;10ARQ%?Bhj;}Neqv_C35+wQTV!+F99<U6UHAD;PDa;qp
zj!zi4*VNRf2?=`H#r_jKbe>d(f|U$UFCP3jzzPb#(o)z{$Um3rT<dt9*^vo2cZo}5
zng@k-B_?pD8OnsO4Ui5AA0I9*4Jcy{OSCpAhrfEkiiw2})^g~s6a$a8m=bltOKwC-
zOAGd#`Ls~brA!T1$>$CC;qhL)snR8>rsz^EQ<XTlKysix2`g0jzptj97A$BniCVg3
zuJLlBvG40yjb23|pOg?rppDEk%lxhcsWYzeqP$(##O=Gbs2_)vPGdoPw{|et5tGA4
zi&df}t*{ii^*Klq$-QPXKSvkS8P)jY=QarTACRYeFcYHah}~Uc9~YLkLoTX(Y3zEr
zDXZ+r)YKXmY;Fx+TvJl&RS(oNC}BedIb8q6!En-sdb~eY<wAz=O^CjGjJmct=Pup?
z#hkD~BnpOJy8w5c0rbXrx+(2^e9C48lC`}jX5Xv$rlXaVPTXRq8a&>{TiLV%S6>5R
zh+{B(Kimra$YzTAc_=u<hYxjUBW+r)^@M+Jr6e~7Lkdyyw)H*bTr0u}cAyM25dcZ6
z_;JmZYpj2xJAmM?*y2m83%rWIV~9m0Dlb?I)zCjkJOzW1JRr=g5z`a3ds*<k+gj>#
z0x1VJ%*@k)jV)^==COwBTu9d68r)bSMV`{(w%%HZA+EXXcNSQ7%YHIpo?#kxCCoCI
zYy<5uO5^<X*dKPq|1wuq51d0$eA5$bW+9~0zLOp4`8Ua3!hwz}nqQjWqSP>V6kHtX
zB(`au&R;s6=$C$OCxL5c_WyFd<EE>t^>i;yu>l81gb{zk7m<eV`_%dm(gl$1C(56H
zKnB!7!w>eg+C56fxV;4=sP&JbuvSl(8`+RZ;uJ5?vFQ(g)#?ECOBu9}dHP^;`yExx
zRRt^Y?R>AyCMSy=O~^G)OJfoHc>$8naFlzO?B{|z_#QZAom`Dr-<F5!lkz>iz{@z#
z@M(4<j=~{<58ie#9_f9;6sQ<2;@3`g^yOg+b@5;Tavk(F5sn?l>$!&h)!&<2(KI!E
z2p=-Q#rT4KTgW|fQ+L7zbl$8Cy7zGR+PFtE#git%QP|J<oKlCrWYk<*g!#=H=T856
zkg@@kuC=6Ly4QWobzox!R)9eFJBM|Ra`qQwP7#C5V3taKM7I%)fo2gNXF{!vy8?Z9
zPGVwcWMp|XtiZ?^)93&sL~6B_<_$ED-Rc8HlcXFrBFKX++Qs>d>544T_-eAg?StEL
zN|bX}2aoVvFH=`4<GYeRn0_x$$BGU>05f7$04)7lsa~B?5ygQ0Pk*qfmIS=3V2UE{
z_#L3V8!p7c%-Pii=BM}b?VKdaL|k|zX>z=*pH1ONQNK04${_>GoAlxLd{eN;gwBW*
zzzDnVI@<c9NNKD!m;1qNI-NFY7HLA9>HVhDSVP{lS&`G9l+n4X^~m_L+&D?_QAc{v
z`Fu#!OOIdSG4;-dEeO28gt3;onaD6nkV<=$ERxcG^{VJz20~_XeOJJsd#Go*xtmA*
zxp&pE)T<yyM4_?v0qy|Exi`N=bKIhqi8~lBgyf>?k)&uK)Rg+(ibw*D*Ma)fA!33<
z$wU<e(97CdUL+fmbe<6m2j~2#=ymM-#N*eZn;69Qt!uh@p9mws1JDNFXgF*e>Jhpo
z?C^cf?*(742sKn7`=hM;9oRB)8?_x1=33?CPYLYhr~7kC>E~z_;o^W80dBaE7`=6B
zBPf_zEb|=~`6tU>-=r>Jj&5*f*VfFmMkVVY_9MeWaOtn}BJMn6ow^U74hZ?0AHJTG
zSyIn{OZcBh&Gm@{_lNTDf_q5sUWYBV8B5ZzwOOuHWv#gm)b~@pffkITumxo^Xt^nX
zT2&Ep%(H7KKTKcr^$mJ)o!{x|<EZ7{H?W-K(<Y)A5V#i0ia@)Em;4en7>l?pjkmIL
zVg)7q>dD4}m{i`n+>}oEk6ob6x@+q)Y&V8I;)kev!ZTwBxryMJlS7QxQO4P^VvYxx
zhv!KOe(@;sW=gdrxB0W6>)uG5zH+pkT@vslDYhVvEkJQPR?_ZJ%DV)?1U-P<5CraY
z8YcaA$OzI5;z5Pi8QBAzWniVgfFX<^yMjJYZR`~kDwKYRRdNX1#3;na_jyfpfJ<p-
z@`&^_Z7`rBR*%O$(?qNy+r(Br`lR}?ctURRVs_<DN-0Q~pAgM&U<bVGr9F(_k%#4I
zN*$h{E1j$jZtA3UP;W$iQ}*6uh1kltM^$SMRgooy;{}MtnDNJ@QDmcO@QaBp4V&~t
zm?V`0WUP(U?$1ix#d=))chjMhFL$wm%h!Dc;n}5n*(6)%n60MX6N;mQS&G<9d2r%r
zwnOW~GhJfd*9p?muh9->)Y}?nFu@L~J}O+#?aoqYa&>;KDd0b!-5w@G#?7&|uhw8I
zMj!X_di~M>UEtiKmpV7uuSZCmLDUmxTm^lPC6#|7Af8b3B_-lj*;<~A_53BJb+cpw
zq=_VZR+F5l?W;lW2V=^)yT(aDW4$L;+(SIsi{_l~_6;o-Ux7Oe=xy^S3+mm!kR0UN
zovu~a&91u2yQZ7IS~23c%33GX!^Z7|p3}3$XZs%(o!Xa-7`KIWV2{8s`x36n`p>R!
zoZz>mVuq(Sy(gM9ZW)S&T}D^j%GFs$Vm+IOP?}Ju6f$lto&>nF$XYEyXQQ*xC~-{f
zgd`;4(2@c6*W|05;CO0>73LrAezWhai^=vGdJNNhY~4BAx|el{M3x(e@fkLUF%;;a
zTN~i94~x@MWM<d%Ch>id+8gK-gm$@sJ0LdL6w!qaQSdOu@2K{QZ*GMDW(7MrCWd{)
z!0)a^Wvdu{Uy?}K7D`m}t_#28kD!w*9tC=%p0MEf1m|KboqyHzw{~t$@_3^f5quV8
z(#{*`@tfqWIA9-1;7%p)`sOh+e`#%ymYy3w>Or9R)U<6dY1_dIr*gGQ*`F3d{EF-d
zi_IRj{)glJM+_Ot)1TQy4<?S7#rUB%q^D-#AWLW8j(-CMcFx;P0|?oiK0=e0NrP#?
zU2v;IL&8ynX3{}PcbtITw5C*$a}5Eml3uzZ0#iA^K;Ym3<H+%J-OqoJ4FhSw61EL&
zIGT4~uF6XjG%_^@j0pV|TbA6{C<<Y9Dz>TmJsF%#`Ay0>77n|_tc*JO3a{Zck%~T!
za*@j4!^QNMmG;+w9f)CS$o5l^8$s7W;I$t8L)E1)Tc-OSJ5{JGDR(u%r;zMy3}uoz
zTkB+9j93#4Ryf}PG_at+nqa5zW<L2ku@)6OU9&tgW{G9qSZAapEoZ4ua-rf>=Iu)s
zTrii@Ps&JYK~mUN@tkZl)@;|}?q7l8Y2JNHn^^Q>Iecw4+t^INSDV$?(+(@5A-8US
z=_}m=UMQR?2QJHkHBDiWPp=*h8;bb|4Yo0+$^_<V%~qiwm#>O^D~{ygqjTB0#_(Ar
zH3q*27^z;QoI_tE<#4-N$kF_e-zCwfWfot8$_ChjC|D@OxNu>)hHtw()viVsKi6xS
zWXE?<CAn?K`}D7D-(wq|)K!|m&Wmv^@|+hi$y~fqi>%7N$d;#vf-p{`DV`%gZVR-z
zjIML*EZqY_zB8lSmvxXU%<m6BM`8}Zr5u0og$?BBqoS()lE4C$4^}6DTQJK!t`rX6
zFSeZ}e>4zt5(Yb8`~hwe_sDT{Z$12{+?W-4;fp0_F&fP%H<x*?hbZs3<<W69hp^<r
zPKLY-X#0#fQy$K`2cXQjvEz>C+*YiCh5yeZXj<zFCmG|jI>rZDHml@3K(Y+x>(uJA
z<zbb#mdAT^+;^dYV7U|Y6%d$yKHxMn);1k&H%sI9#~nw3g(mN!gKNt_8Tejl|FvGo
zeezTm`89qaxidE&dDE><1QV(S<1Z4gh(&6Ty0nsD<DYh6z!8`38GBs{BfuZ1Nn`}-
z*4UiO(RhEzau4B>Z1e)hnWg0BdmC9}PduQ|Q&U}4&N|Da_*b~&V`=lbq|tKQ0j%F6
z8SDhUV*4>qSdXry6L?9SL&xO#FILEYsPP^mrSldsV?d#x;B~Fhx>YN;0t%&IgA=Fn
zv!!-N-B81T`3C5+$d0&)w4h^+wf5_va7=w4hM?0!Fs0xSr~`g>yQxy2^*7}vADcb#
zG|9Jh(!rMT>AzZe6k$X>$@t%`ha~G$&x|soE0h{l@$`kQeK)kJ&N#f-y(UUS>DJ&i
zGb$d1z|F~mX!f}6Aow3cbo~+=<gQm=#wIIEz=X%ELX^cT0s&=O9)Czg#Lg?jL%)Ef
zISSBEBHt<C5=^{rwq3EoipbHP?@r9MWA+aa0rebe4;aA-nnl+;!3MzMa>_J0CxX*+
z9fdU8W@zGX4zCDZ4?FNj+L>K{@4g=1#nx`>G@?vkAvcVmOQ<r}ijM+d6*U%qjpVG}
z`=jERyzr|9LRtor-=JhUUVWnkKhG|R?&v-mPl)rDw}L;2JQ!k&ul=2cE7)HNyHr)n
zEpXRGvEJ#Vi`3c<Tp)!t_L<6*6GK@pgrISB)>%LYz&ioMX_LqbRY5J2b2ta#n2XAZ
z2@&1|={&zRBR7@-!c4URv<Eh#3PbpMlMGvMG0KD<pO8{J!TyBwU*f+HeC)q&UN1(Q
z@c1B79izkFaxP#bJ3vzC81aTtzTj)l<?<|GYyUY~@uVbVZi)0Wn;H7(MRP!n+1d3P
zvyPJ??XmkV*>~(k*<_G)t4q3erQP|wY-ubERjP%{C_t{uf8`9YuZ387r3CPsboq`^
zT2|sz_-8@&lgZZ&@4rog`S^i*+@-E*LnzXlO<%-T(&s<|SbZ#EBaVcR4<m2-fJ84@
zhDo}SCd0I3G-xoPAOiLV5ZSQ&XNm&c^1xkHW2D&HvVA+o(QvcbDJxp3jpMQ>2`Tu;
zs!#q)yJKj_NA(*;EZ1Ml>s!3<3obx!B*r#%vlV~L#EdIL2kMPoRk2Ui$I+0~mz`#N
z^7?2O1igO_?m~!l$CZ6%-Zhd|*{MGgLU+Z6LA4j0bJnS|chR5U(i9Z>!Q}4Lx=Eug
zd;!9ap902nl$ZZG`<zkD{PD|6Ch=*M;dO*E1T0N-&)mlN;I^bJ!(%ClHyG0nD@iE_
zDmm_(lHcF%{Ee^miN6>wT44;>!R<%Hc;O)MrBy-i_QUgWzh&}X8&3V_1|_Zh5z*>o
za{7nm|Kyr%uf2>755?P*muMqLZ7xM3jhs~cO$>HruBu7BI$RG$igxIwBq-qTAuZgn
ztZvF=<hF?~EE|W}4g&>q<<?8B`&(2|4fTssdaH*WLm!K|tq%o6Zvf9zV40#z68#kd
z1h4cMw3ty+^_hV#z>CwIy?P)c6Aw=ucyAN^N}?T?!v%8lGh%^Z*e7Hv4Jv<uIL~={
zA;M>&3?X2#Zzx!2!FSl-kq&gFU<TX1zW;LISfY6DFb7SJR<v78G~7?ATc#$)Y+@72
z*IpQ=xLHYpq4EoBYp@TSG8Ofi4@ZT}XGv*Qxm!Z#rN)F#BKtDY(nmfQS1b(LrM(q<
zQrJe<J_X}a4pcg0w9ndB0kr7~$!&#xkppbayy!?@5K=^z#D@BAs>q*}&>q9d{)0;F
z@N@e%CN02wvH+kuUsVOW@EYqn9s8k!J>}tECS!(R)Yx0jeC<`%6|WUsdNHCOKHyhi
z2&v&q@f+ad5cvfY^j?}yyhHa#)Y6l@!1=5bR<m~_sYzgjCbcBLGU(}9paA<oXIq#*
z_t=CM%P>swo#gF2H!{masvX=IX1KjnfB7)ITt5o?=+oIu32RnNGu6{B1L<lL+3ZAL
zcrP*r%CuNM*wvqIaGj8nJltjUvZr=(B9V=@uy@uL_qSn|?UOIoqG!BM8fa+jEq9?K
z>GUZ%aL&~ZiNnNc{HW;T0f)JWGwDih8i(iy&*g22<&)p7(Xmn2^khm#m((@TeR1H0
z<~jr{e}Rd*Et1vB>dy=F_I*ABe7qs8y|3;NZ{7Y0QgA9?mQG68U3dq-p^R+~15uaE
z04-Q17;ng*WcMjAX#L;dD3Fjz7}XA^iay`xv^&`TJwXbGyZ;=k%BQ+|?CeAOWiJI_
zvG@O#Jg9cR9ZUTnlPI}3(0^wFUYtHMP)%*hDK_M>a8!!NN$`9y1HK+1S$orll_DMH
z5Ha?iD9N|=e!IZo_{mzr{7hz|<Qa3r_TQc(VY*zOPFw`n#u1*&?!-38Ud)HbW(D{9
z>wDHTjh5DGXGIjA3<1T@BqZLbd&?fPu8k4v3@VY`{;|E%s^Oz($_*g|>~7V^g32}G
z&rL4YuSmF5Q(=h<vmdgrSd9++8TK!Ee08fXs<PqP24iw^Xh&<pI5B<h+q$I3M`!%K
zK>ixYEzN6F7}JsriViiUbCXW){AG$|x;xHZ<yB%6h789*a&B-k8kH^}x>;eP?;e|}
z!V{MK%C$ey7L!xH7c~#Z@gDZP(AcsupqEgLu^FNJ65WCLO8SieAB~Q*vbfk?TahL$
zwlBT4`k}ncjFqlXHdev~;`M&>%U(me;NU~K<_I-$+@YTtc-p<Wx$zYHi!h7HqhE${
zPAZTBK$3t^rKzay7LR=>m}13$fJ#B5rzjyB1nApO*)4U>>Gw=G#Y(SX*!{UbWO!J_
zhImE4B&f_A>`ze<{qtX$ou~Nw6+!W$?4|I$ssm+$qHW&w0TOCzoG%RLnh7K2YSUY;
z?8z87kY2}4?{^uL40Br;eeAmiKQ!PNPb`+j3Il0!w`<_Z>V`J4s2(XNMp%jIs3Q@R
z+wErQamsgNZO;1|o;5iX_?x;myEve;ymrAv{}i#Xw&?&+(pEKe1U`9du9W+}!gl#C
zQ6>h58lB}4IXV3o(LBq)>$YBcZ<1)!i5L0ogOU7HHxKTO6$R-O-3RJWo0}{5GU@P#
zO3(JtfQNTN{e_igotc>Z4U5uxlEXxmIE(?hDVRH%{d|7*6g)Eqi6f$poe(mjgXt)w
z1T4Tm-(@FCUTkD^&q=1$7%QJ&J=D=R{ZSC{dvG_a*|N4uUeKha5EK%OSsPN<Y|FYR
zeCCfm>T?&X-_nvs-y;c);k=1*GSTyYTJHrN;D~GvbS3uwAR3}k-5tL7G8r)AVd?^d
z8#kbpZH_Bn>Z3#z{Lzd%ERM(<$w_34JeuRX0mrcnxa{3_m)UCQR_WO`7@CM&y7}&0
zo%rFBb+>v|+_3dg5l2jzt>ZX_-1lg~sO3)rhxVq*T}Sf^WN<WgAT{jRNxwkei}+nM
z&9b*4XbX?PaX@<=nM%>i0;`1P7^unP7hHJg^daK|WkKaw5Q)U9*9n`5*e|mcimmL2
zPfLxB^vYX9ASs%YJFCy5rA+OcZ}p`K%z7^H7m;W5RqP9nvlo*Oz=yh-lOQIaP2rZ9
zXQYL1g%HH&RGJOUREb>f3OPo&nEXg@8B!H`4}}fm1{>|`nj+A9;|zfH<5f-m1!iw8
zs_u&T1KazGRJK-ny{@lXpPaCxTxWQ2e^EAZdGko_^vz1vqdH}Km&2N;N@tZ&EFg&k
zElkv}xM@Xa!4`V}JnKcF)o$f5RI2IFPGi5*bV~bC)rL0ka@LMik(K5yl$I^jKE^F@
z5bGjc9TS7NFrx;X@*=GNBj`Gu*vB~NHr(Z#Ht%L;#fX)#EVq?$n9BhlEOROm&v~==
z0#k}|O8^hM?u01}J;N=Zvz%ZQ`q>sT*H!FXWR9U9PQVLW8nFq3Z@y0H==oO{jL}M}
zf7r>~%c>0LK}WsDZ3%9M?DPDai;I#d*l}Nz#{+B%%`%L=wwz*j{_By%WfcpYDLn+@
zCi~!7Kx&vOG_~Vf;7g=jF%qRq{4)62U-91$oA+P4Va2`tm+YD6S>c&Wg5|d#olH@N
zy%5-~?}#=ldx;~^(sJIpp&He*@u%k85^2suWE{Oq*A%_53PXWPJ+bQqVmbCxfX}q5
z!uB!o>vibJ4a)J4#g=n><o15kp}6uW72X`;^m!rCLE-#Ee2|KStj4qCi|XF}aaw*)
z_)NXxXoYLj;#~HvB~~FlYtC!K2q?*aigI-Z^XJT$o1_=A_`*WlLw*e?0UfalCO;Tg
zUg9X5VUt*ZyaYy0zFg>Q(sMQF$=c0)eXu_er924MT58Yo13jk~VQ+uX9YKA*%1<pg
zK!G2lqJlAW+o+z&jcitBFh|4Di0F^f^hYbAHQq-GaOA^RtYxb}f&%?2!A+#?2R6qQ
zn#}zlR^~@qdC3_O#{4mwVyv|p0?o$O;n5Y6Iyh>{Yn5XG&0=LCfKD3p>?C3px>b$o
zrT3ZdpdGu?nOS%U&hmz)sitXAY^@9T0&3_Av*B-Wops7y0coeOc_tzZw55|>kzmPY
z+vgWlOWCK#KEzwed_>FWSqX9KEy8HmkZvA5u)o2s028pwe4DnqB0>A2+huRTmU-^R
z&698O%SgV>0|fvHqhAvJ;F?|q#28pZ)NKIMR`+7o$dhxWQaWpTVdB*y+nwEXm~Hmz
z%ae_KuQH*Yji5cyj4Mu(pGKf9d)_wfVySx5p+8Kp2pdoCr6585uG_No6_;B?fzs{k
zeSQHO>Xj4oaiu^fY%zsmiMdHQjfGu{a+=ce&U8~~neNevnYfOd3K(oF+}6$IggTD@
zB?~_9NN}-Oo=fC%?Bo7VD;vqTvAr(y)4zkfKQ*2gHPwJ4X);2DW(-u3t9!GK3)~L>
z2V7{1%FYl_*7kGwA#Y_a<6h2Kk5F<SP@&>#%)-`SpRym^2NDCWfzTi_INl$FLhu@-
zc%La3tp*N>bPp*oHA<w99UU%NB6$tcVsNQv+Nm}ahE(f1p$ACn(y8USv)2zZdI4`S
zdKbq}Mh|(#O*os1QUHr*ps;<k1_!9TnBUsC2GP%Ph?W0$Sl`g-r(5<~KYa9d<9W}o
z*GO-z!|Ku~7GsHW-mon1=XT9IX(;==d>LZvXNMeBij~fW!}3cy@tZNNhKOg4QE9=l
z7hjEk9n4|IlLQK`br&V!%I`kH6-=@XMxZtTC~n{jn1k}uTVC+w!epcN(Z$f;LIDnz
z-#$lpJ!d&wGdAP{VjjcwZt+A_0eS-7qcBHwxS~4G6l@|^vH3QQe43KyFAGYKnJ&CM
z_P>CLf`Q~<F0mdeHdGLhTUL8Y-(R$P`}|en(N5Z>1NdU7{&nn!8||SmGHA>2F-Cel
zGLS+K#PCpy^Tvui_Vm^wfj@zPt@tFausZa2Zy-0eMlw0D;C+8D+Gq(d28C3}`n4W9
zz#kk(guR`syKG=uU*M|e(slQE1ZV4j@*`NwuqV`^OpjV&i^Co5j^TdFJN*GM4>>80
zl?(kUX83qU+NU2jg!!fF!Derywh6w%2v>eYZl>E2w!gkDC24DOP_O94{*zOY30@l6
z?;I!AeK<7n-Sn>L{4Aq?A2pNf+K~$x8{o$VH*|eLT2~7^XANyX@4&yN9R^Hxe`CAJ
za(zkSzy19TtNIbrJ==b_dTy>Iwv$$sP-bU*@N7KIygA<7R|E^&*QJ-?i`(SuDSHxd
zT^$n2Jr*?Y^Cl8~q=W#nZHNhBL`~9K-af=m`R41hQNYX=+K^2km>$7ss3zqA^n5#^
zawm95FJ1SqY`Za%q8z|!sL%agcQ4vb*3U|93ASqCc?2y+`vZh%Z$HY~r7!n<L&j7G
z@931<1w4y)7jmGohAy%~=9$LGzj~7Ial4g=9;^<p00k=PGr%8UXC{1s*FM;rub2_r
ze`<qCFPTR=vNl5|Y1DqhcPa!`n6TJEyo;T1?VX1#2hR$%FyP^86K>~(OdA!i!FUkT
z;?c8s(YpB<0T{{0(k@ORRHp>b{6u>^Bipq@w2HOk(56B}%}Bj{<O>iRdhT}%hUiD$
zL5v(_@grl`(4!O4gT-5y1vyJ~bLVo<V8tCF-8cZ_+t3zdZBsFQ(-^+t44LAy4V_NN
zvLA)fus!r_d<I0o8@TasTzQ1j6vS{Y!~^-)(0kR=K*7b$E<^$%KJj%b5%Q#@V?}sl
znYwlSGog1+`fc|(Y%Z*-3bV>f)nc)&*YymjE{riEi!vzE61(VuyN*P~%ht&lH1-X}
zH6o}l)g9H86WShEKof=?3ej>#gQRHkEiXye$^px(7wMHrzOt&bZ(_&JM(wOj_>&>;
zm=wqJDNPoYE^td%AL~65Ygk^i-(Tkf6mmB1Cm16KRH>y-y@!tu8d$0)N}-_*Q3sQ8
z7ZkY3gxm}C|0`(*yM7jT-6;r{L_R7KS-S_i=bMlHUH5Sm0u!2ojX>zITq1n#)*1SW
zUJB%<OPYa{?>uu~Y{opf=`(xp+=lq;8G+#T{ponSiwY@#9meVBMKjyCN3v9i?x{dg
zjBlgB3_tlCI2tHEZ^YCsz*oOYF)WDU@i75ogEKkt7~!zZ$yIYCm#2{jqO%jWeKBUS
z56@rC{()>Y;O`B31hWT4D<b963KcZ2*>TQY<$*d@nMEZ}x^Y$*H>8H-TCk4KPxG~6
z>MKQWSusJd&T1a9JAH<PJ1)QgHhH~*PRQcAmaP}iGq~$$Gq^LAjM~|SMToQDsyC-Z
zIVn8`O+&MD2xH95yhVj#L1HOrUy=|ION^IR98Fr@m99sI(RXbkak3Zwpy+16tIHbV
zzZXW}SVb>QLSX|&ux?*Z-4;*L6103azdH;B(JmQxM;<R;KX4@)t4`gL#YqT5*@~oL
zpO|b^q!$?yJiVCXZqEUF2kwMtER)RR{@r^0WhM(u*Zj>qS+j{i9IWW9kSwVQfgHo&
z<r$05MNKE6ZpH0wQgkT-i$1Ec!kcC|SSKg0T$ic|O;Svx>ov!?PV70XG4c4v9<UY?
zfx}w-KHWtTzGyQxbwF;#$A`x7>$v&YJBQ!VfJy>sO^^^AaVgv+GJVzu@@evaw^@t=
zZi<ee0Lig;a@t!_y`Z_L&WRX0&EuZF3%Ld@B(DRH18(Q!FMoms7LwlOb@6=<y{r)*
zslbge_iBXbuYT$E?C$ohLm}PHs!3jW=V(YIP-|*+`R8Ec+qpKgbe904x)$nL7FM{T
z5u%78#~8}i9|a}^CINX#7mUdkIL0-)8@>T>jQ5Ud_<G1#7$xffo?a<4R~;sU{8b&w
z+E>-vS0yjf`xbr>dh6pJJGyw&K9A>2h<Iw$F@o#QxtJxuf_+IZFra=wXqQ#?miW9B
z36R|ho+nsh-%~pD4*)@a)dafc2NHGPf-PgXph5IrLFzO#!;~Tx!G&6C$Etu6W06T*
zFfO<CD=ZqWt0A!^2^ko5($@S0z5QbDXPv?WI^}aED67MqH+wmB+md%V=eQ#_jt293
z6>RQbY5wrdYqk#i0u1g?`8K9{)7pjG4WYTN0#N1&h&9!^Y>pmK3pr}}&+oP?1$JQ_
z!hv;u7i-$k*;I#)s^t*jcm%UJGj-LfQbO_Icr5q@A-%1viRd$4-m;D@38z4aXeScF
zc6Xjw&AQkd@AGgNa`l12a$E@Wra!ikEh21_Gho4Uv)Wf-fQR7Zy{5~;_Rbwjk!Yvj
zJm?g>Rw@#f4)EG`6p)BP5vt&B(f23z{JIA7`+&&d+0GujvP<*K;y{dNmQGadO1;N}
z{PC!+;xgTj7UFFkJpR*niH$C8(%{`S$`B7}=rdC&e)5}?yPAz5$5t#itIJPZv}}uP
zsKp|*1-e4**VYVEfR}3!x@u*e^lw0;aA3e5w>m2TM<-wY4GD;<jUJe|v3aB?Fbir9
z>TYI!rAIkA3aKur?iwk<t@vp-hNVYFv9;{62l)g?ZPpgkmm?Nlfn$9)pNaZtj@zn|
z!lfbMJjR34HEwFA-gtk-6kb?2bVOSr17XFk)2|vh2dn4Zri^8`)kGR`gn}LK)yI36
zJW>1bcxmfZn2WM}uj632o{$<3MVb!EL^^^k9iH;*M&>O*AZep|15JrL8QWwBezG$5
zCZ>;U6>LbGM%7*e6a)LPtj*Sij>^cZ7&dM*o$qACGPqF~{Dy4;<pw!?cL(oDdB%K)
zPcV0PP<g8p%4_+4hLl&f?3+gx*Z$(jc##qDAUH#XJV@G?a_AZ&SDliAjSC;yaSq#|
zA3)Qu{*kN1d?3YM-etYB1)O&&QO08EJXvQCWa)9$f9|?h)@j+RSi^|l^(V(cz!APh
zpRV;Xx7VU@+45Q_zwn<f$|ulFTuf#(wJ9FKpOlL+-hS_NPY32LFCq7w1j8jPF4ou;
zWmxM}(hrTo>Hrt@hNB7NtJdgrbDUg~{vrpZN@}7Uw23Eo2Uz4^$L*m8qt<n!&uJi{
z$dT;nQms-*(y_f1^n5xNF|#mLydf#<yNNdY9c`;;;a1p2lGPDzQFDO%xQ75J=C=jc
zy9<F>Hkup$H)6=fT}Hwp6W?=`WNa?O1vV_hn1d@??Uaz>H~A+n5)~23v}qls0*T8*
z?9s$_-3F0V{A;6U=)b?FcFw0Ma&ZyQHxSL!@=5^_wvqQY%WTMo^P*r}meDNCnAdWl
z8$&XtB}}y#(u{$R+UZ2VA9~IIP>AuiRxc}o(6Kz=`omIV<Rhz<9@BBfaNR?~j<0wd
zlgosR8F3uq4%~EY#P*+HgLj|lFb`_(Dbq^2oyZ+88xRdbU;D{vqkp0fhBh3#h=CC$
zy~`zXhiwH3hrH_D#7NTfXELFeS+EdpWi+O$Kv|@OyDMeP=F)3G%f;PrqG*wA`xcU$
zeVx%^LyE_W`L=n6;xxlv!x8Qs_H#cS)TacfL&ESR(%KcBRaSrvN$G|>D$Z5wqjG}9
zQmEeFywz{)>tn4%@bC#^k3&Mm<IppXHQ{r-rDq*(hb;cpx^^*RVH8=J16l~F0pKC(
z!Xh3uO@>&tf9PMw!FgMYwaYfb@CMz^XaP$|Fb2dFiygeT>?6I0y@Hsv&6X_4k;bG~
zPQs?AI)RLr^rgr^W=WZ>$0azNcfi*JjB+Nyz}wggXm=o8ZWs^IcXg<S|8FTBj%N5}
zPNbuo4=$1~wJce{gf6Y&Rk7U{P(Vg;Hx$^|BnS=4lp(J#_D9JdojFVt<k@|H8Ti4j
zF~S`Z0uoN!Ci$C{WubG~HmlMX;7{T_)ZN>paOvux#k7i7nBe{Sq<EneP~2rD@A*h6
ztOrR;1;b<PaAKlYGwuSM2$rc~A!jQDA(qnRdiddW<T}yOnK&KqVsr9jwa1GqM1wvy
zg-!haO63OeQ(6!)sSNR6S05F}T*#{1!)rUxX<o6;_6(%Ej1;F7mZ;b(1JZaEh4ML1
zV?HU+I?j8Vn6p8~&8ayHMe!`-hCJqFaXnscE49l7T?MO&LVz84ARw<h>zP7viduWH
zOY@>Q42M)xF^PbV(i>SdY|@KCjDuD|*G@}-o*K7f*`sPEof~_}JNl@!)$o1i%Eg0B
z(Gv&&DeZdVc`^##A+32FW2=13X<V-d$LEdzv?HL*oD&;R1c!fn*=GL|qwpGSx5E{i
zQv%N(4MEQO?8?p3+T>tN4~(1dPYyb(GRgjOiBFZmp`ptQ9C@=~8rAX%sJ1*)1aasE
z)WSL;ZdSd;-JO~6yMpRcaa@zVj$24WyQW>F(pN?5{H140X{Ds$>2}jglp@;u>JkoT
zKdI^il`5sx>IK2V9Qe1jH}!s0>Irsy)at)_Ut*)dlK%3;YQ(Aq5ffI`OGj>lWhr8n
zc9ZUY7pDZWQeWWGZ8V^Vox9NZ6dtB~bD}eLpt)=F3gEA;Kt&`%7h44raEauBS;b{O
z1K}hjh#aaUUj^)ON!Br2`FBZ4(Y`xQwdrE~c$@okS(WKNWp8lhL%lT7nEhn3(&aM)
zanl14{4OHJWk-#R=FMjuUTTG_FdA7D&BbG}GJr?5A>E5H-<)5ZkH!z7(pwBO@I6LY
zWnlsQQ;ya(HfSoX9(@+y0(hWPB1^u)^yQgFo7|~oS^C@Gt6b%51gKGIlYxd3IxW4e
z=OXhXIX1|C_gqLyCELoAI+H=;ZL3gldLk|8|Fxbm>gR9Yo7@=i#AJoHnq&^z{9Fby
z0#_?=z+kLo0%mI@1+Gke`j=KO8i3CNTeEhk3XzDS|MHQRquCCCTU+IE7$jwkkOxbY
zvAR>fp$NDLW?5P|7U92;!7$Iyg9i`B>+s19R#LF32S2yQPV8<N`2WT(y)*VuRiY{;
zg|uxva(ZC>LFHEVVA@pTT;Gr%#Uc}Q17$~Cm?R&JxL0r6X)%m1$|9My-a8q@0!NS8
z;nzh-Bp%T-TfJ@fl>JGd(;r-t&<myY3zE+IH~`TnoI_boOd;^dLEL4EBXn)>+$<GS
zRjqlu4Xp)cZYwks2co{q66ke<=keR*7XoX?QS4Z126WC})8ugDtkM#2KsoIifsNM)
z_QUy=xpT=&NS?MINXPHM&Myc_j5GJmH{UdCq|Zt%!RNHT?GM+8$yM|#(FnnKjBOya
zV{Xyy>gKEu_<(+O3N4d!XnLfrj>crdezbncj3Z+60;Aw-c%Jh90Jz=jrH#dDsiVcW
zjWGALC-2cKAY=GY?xa5-VYc2#2hW{=7%R7AaRC#Wb<B8c&X8HF1#2?aXPO`KYB-Cu
zL4~+MV8_t14Lc)-JWl0>RL~ZnRR%$TJP)BPO|L~m#3bnLoP=6=*<VL`P0HfyFx*~Q
z{CVD^1^<tSm;NEqHur+et|%?sb`BJBrIDvW@@CZWBi<NE;|1VZj?v_~^Gh8hvm~$b
zaP4A5@U9%_&lnSJp-5=E@+4zR7=TFyXdv~A6}QT$=%>IXT96?AsFg%?!N%b@?D4XV
zh%oRbuQ;qvq?kS(zf~To%g;$EA*w(g{97?sNy?ZqRCSgSf50&Q-NFzPD$lm$+fL}a
z>2@wG0$#R?fc#Ug=CveYPfsfg(qOgAu2Ia7wzMimWO%iyWR^OL;E3^5&9)*C+K)Vz
z)XtGyrGCmSKeBkH-%Nz%W0Oe|bgYYb<(^?V#bMPb*j|}J04?eo`qEd<)EbZbJMwNM
z4gp&|4!RC0Tdn3S)WyD=aF80QW|<BJq5=TV%eP7jBX$44Z@5#se!6cv((8@Iu0R06
zY`|G=vA0S;4$^hmBiNrg%c_&p4$qgu1(pp7AR7q5$iZ*RNKfcpbHh8zw!`jDK0V+v
z<Pg7C9M<V8AgAi2Jzaiu;U*~afRj6jiC=mqLtQAxufV5VLlFu?*&Q7sC`BsY6fcbX
zqmzONJiGeG`*T6jLyG9xAAtDzPjwio4S{%xAWgw`g3dkuVJ9{gJ>^m`dyx{0NRyLN
zPVmXi8^~GjDo@5WoI3ML?{F~+EjM}QEOMYMiiCp_vVnJ?XBd`z2VY777I(!gh~tKM
zw|fnj?6%`(IX@-`3#haVpUMRk!+(B3ooSA4jFF&Y`~^j_1K_EcBPcXNjdk>(`|^vP
zx;%y$3Xi<a6Dg*SEV`K6JjW?H8|#>79XnP<ESy&M01gF<ZJjx%cN=z`v8o8!BTxo{
zRV)=wuTwG#y3<Clw|lj+odV)8-BMeHE2UKyQREgm`ddQw55@6B?GEX|X=maP8%E8O
zP?Z_Jeg5+!9V69hAUGsz&R(~Mgihx49JFiZmDJ)i4jNUN*p5H05;E&16qSY&qkQM>
zI2Uby>c@YI;^;&<D4(5_;wdXLU02)<<$ZfHPjZr9MJDt!*9~QeCib^2LGb{Bu<Rvz
zm2NgZ>7hg?AWHW#^7+2Yx4h?|g9)ua18f)(RFQ{GU9!MWcv!<&KMwS5i*sstu^k1d
zr)x<>c`iUd`Cm|#Vg$ZpYIUi|Qffhi@Om|dYL|CsOU^*(oEia=3QQ9rRj|~5=w<>u
zgY3|RW8G0qYn9-S_1TW2HB{IvG9HY%QfgSz$OLmKUw<`b)|l_u-2Z7KH#X?HPEfH@
za0<`w8!Vxf6D<eVV)<n1LTn!NXTT$>kkCR<kB4h+`i=zf%q+yRFtwMAZ^1|qP5LRS
z&Hu(9>kfxYGYNy%m9XW?)902QFbB<hw(5F;QYaNbmVORN^4gB8(*Hg$bxO4{hTDAV
ze_FwJj@x8ggb70;UEej)j@72Q8|y;gfVuB~Lq+$L*5DZC**W;7HB%l5eABTfiNV!?
zrT^RKqn+)c3;`mutFp7Cua$>6-(8YrdAOuOy#pk|8!mbnNDYv19IY-`=f6BOjaL$V
zuYlw=%I{>O?$7R8&u4Qf=JE^Y_D&W4Pq3%NQkE>+EOUfn2k@VDH}W@o01(tV8ZrE2
zm8xbkNsBN3BT768Jqky)7k3G{ELhfckY_%@2lF~)YtMEDQzlg~ii#1UNfCjT47T+e
zV2%m;xBNTsf35V`WNT|?!@ye(_lFRKJ8Yt~bes;Ya@6q(4hD+uNObz;$Rr(k!yQ@s
zvf-efs<(dqw4n+h<M#6vX>xfUasUS);v7XH?E6jV7)*RXfe;R;I?bK~R}3gV;kVcC
z>kzro7Ni}Tfuxb+TFYeWfw&lT<9hZ=zc$-p*Q4XwSeMwbh=dG@yzOBu*e<<;3urlc
zKS#-evA~+(v3qIsbop)&k);QO_dErHj7HJ4ysv+Em;dNf8gA?XXu>jATrHrfhi`d5
zhy%`mdnG3P#~d}+nFD^MX)`n9<Qi@ipq*G~g%LD~rlsD08k@_6P&gW3ijtj%K5w2)
za&=i<fMp=Xd$_e^*?ND(=)*}k+;29;q?v2At8VyHE$f5sCoY>jpEBX>*4|NrDH#9i
zYG3N&QGlyAiuD6^_++a0MiyG}9hXi{Qg)(PmW@QP#qY^Bz<D=x{-F|>L^G2=z2H=!
zZK?Lg8kkgN+!f!j(N(mILQ|#VLpCi2@~?mMAl%iKMKcbDbk`_pbD2x91*&?B3Q6tW
z9*Vnq7$z3ZPQwP1V%`~G{%3wliIq4kW|NgdgeB(PscNf`f>}Ek9zFE3Muz8K?8jbS
zDb&i}>=faK-~w*`V1kGeWIWtFr>}u`<LSkcq_@EC2krIwju6UqFUr>OBwFJIvXvfw
zy2B)+yGSP0?9+L)^_@7M0;g02cr>nC?Q*DY$*rS^2Hq0wJ}MRzi0+NU7-Xf3pu{eq
zNliPe;wZh~1ihMyNmlC=&1>L9tPQo6t*YO(f!6q9)p!l)mk#_Acka6;7s`6`j57an
z*fY1<?G3z|7yL3a2>qX<Bnn~k&4!g0mEC`J4i;R%1L<9W;;Da-trNAGG;lM{rK){f
zyz6DH&@<cNHd~Z+GH`+2h57Q4SZAuV{VJ#ma99x*@+}vdFd?`(UUuccjIpG2p@!)c
z6c!Qs1`P}Jy0GV#_=`nLGf2(!w2+I+hWR*tFV!B_|E^B@JlJ)O(J2;wVf(HhM_0Qo
zzxwnj+9S%&GSTV8P%y9)G^S>N>RC&SHRhFcTjpK<n^5`(uy@rPAAA(s3`MK)fji3W
zHmAXdT0f%hr9F6f)F|ggTA0#3sbAF{xh}`oYId1z#}cRN`htg#$4IIWoMOEGr=!tm
z;)eTXMc#X`;qt9Gzx5$k4*C|h48s@2Y^Qf;u>3!BXyG6i)eij*irf)irwf#(UR5Z5
zOoF}?GyEG<-~tX=Eq5t_vOu5+ML@s8S(={Xj;zvv8KPy1%q$V=bzhwONWE?%V#9$&
z+FWhcy0EJxcnhW6L)t)a;0^kr)S@toZ9fZ;4bpInk~(&=gTh4K4oJ^2f@AUC->C7_
z*G_#phPQ4J9SIoTd%1PSIn1-RJO9`yit(G2Y2Fo^n;HcS(2DW47q%5f7_D=$1OZ|I
z(M04aif_*4)+#fC;<pI3;n0SoPtG@QlXvnFlS8sgX^=cxP*L(XiMyJw1ZDCb(OX4Y
z?v`i!yyfX}lcW7d-{ASu?x*P`Bx7fXt*9qAkak3D8oI#XUWz7|OjF&aK8yVQtGXkO
z3WEUkku6>Y=z~wGlVlPKmn`@_sd)FG&Vfz83`rHheyE)SY9DMivhUM;l9tt^v#x6W
z{cGxt7M^BwQ2>iyL<`9e#8MuZ2E1&=o|P4jFyVsa#tfRdiib^dEue`gItH1W-8Spx
zf{wY{qNd0f?=d@5cPz!R$w#JqDk1O;xLq8uIIm${3X1mmgne6U^@rh#h8Gn_Sr@x-
zoN{q5nyr85!|lu`XoPzr2U^{jo<OGpd$O1SmhSz-UQAP=f$^y4Llc>^Z8|M>OT3eN
zPDZ7FNz|bbzV*`iZQ+{2^fdyT%s^4o@sd@8S8S--Fa=SKaK?c?O$CWxHbcI?rHN&}
z7@65)T>f4YZqAs#IboC5moZr723x`Iy^(<aQNANE0GbOmXZrohWy>`#k0jx7x8KjQ
z0}Lr~mb#hvz-uc8vdmc!(p~n&Y>z8-CivcGTN69NALewcQQmF`MO|ugi-Mmb(my(X
zX?xUfsVQLjUFLtn9AGMswN`S+Slmk=uJp0jbMRj43{Ay5t+Tjpm+5D$jx<4`v$@zX
zb8Za?VJlZ=(X6>3T!>Ue`Pj1@H>G?ArS2UZVdq&)GP{27td*FH_zj=Ugi0cN<!PZh
zo7*|q_-AG=UAO9GPY53+!eKGn7q)n(hGnnwoj0b~cghvL)}+s2AA+Q@`oHvK{Na9+
zaOiHBHd}0E<J<(oa7d{Vm*MOFnPkXM%1lt{48{~JHR!Zdt9_zgY)sH~<2#^jHRR?)
z>qWhboPO0aI8Bnxn^M0TBJLq7B>(rS4Y7(vP(~ONifYfy2n%>`DNiF?KTLp~eoC*B
zz>BLvc|E`1ipP=^`?DS`edwX4(3VVuW+uB4p<-_~f8H!*Q8lV@GQu?Zb>n2jaH)pS
zN{l1Mn>UEX&OU4>k_Lx7Bvs08CgvUh+&AwwFR#`aqgJaP<nfc+*~|sikEJPANTq4P
zc1n)%ncg}EzniT`|LQ|q2ab4g?gTH|qA?+d836T&lLg}eA*DJHlXwaIT}T&0efKX2
zs__pUjO8|F*HZyD2U+Rd9gMgYVw{DDUJtseF`yI<YiaA-H93~HOi}uhtZUu@5J5?k
z&Ez%HTKM2&$8z_8l8(>+7T9s883;3myI@JRFxcO%u!Ci3Z6SAz#aZIi^lP#!G?264
zbt)4vnF2G|$Fjzte0_Fps-1l9UG;|+OcRWqoK4YFS(Ljt%u_wtdn<aNg+6?`46Fn=
zbn3>M?jgs5ML=fDD?@^6K8mc!fNrPARmN!Lj%l&fp?F@M3R8JU7>~H3+uvEkb-cqQ
z?lJ4Pq$;=2>!MnS{wLVO37EfXu1@Chd03cg^;^?-BRR}BF(H9x%`9Ze{D87{6@Y-F
zCB<4VKgno9xnut}^0%Zqw`4W9`>%>?T#<><afnTXjWfB<D9m=TqCeG!lf6Z(vYP^6
z7xTlw)5mgX;hI-RBMX}<&p_!#u~TCGGxSs*U(bD^Pmho)*8qD)2NFiM-RUg6fzl*C
zes3tNKatG6@KQHB=e9i2shzE$1}K(SJH}ebe)+L-?5I?rL=&lbj0<pnlHxzg0Ty&j
zV!s||U$pb%FB7^%5;p*MJp8)gQu-Fdekbs6N+FU+kTC_%>l-}@;M$??g5}DEiXy<r
zab`}aeTkNyM9RHBK~Z61u2Z=Vref<H;jwCt)4^G0qzbZ;;tj|@*uH4YXsExJACYm6
za$C@31&0>UkBtL9REcRESHyix3umxkYiLhvTT@wvf}}hlI9r%`R}Gxj?6AQ|vR@Iz
zM;#6w)wXzlmrAhKzy;&z<GZ&)KrXyiM7)$7i488`MA0|EUSY@u{|DT?&+o1Z6f*3G
z4b)X^J)S=x9R7*i^1(X|k_D6=DdAOd=OWq<%6<=dMC_TDq{GlMR{8|VM*zFn%Sy$V
zZ6D+{X3ym0r<}glPmv2gXc`#b{KZ_1C#+|~hlGLd%i0S<rtyc9>FY*=iC5R?>ON22
z%&8sDU&dYtY8(%z!wT=`R&-uLcCUJ#KqFWe*(*ix#;`9p+t6GbcAZVvC%SyjET2o*
z=-M(N*^Tb|vbD3+>Zje!AiO+z(_yi=U@#?-(`OPDGk@iCmZa=U4u^%vld&04b?;B!
zdb)ZG<yyXCccaId#-6HASW5}AHtGX$qO{bHZnS$Wz~W7-1I~GpJM%HZ2aJf*+W6RY
zmCO~h;g_2y0*-UJvF=K%WXu)Dy%0}g5};H-0}@U_?ID%L@x*5b^gt3H2jX-%`1riY
z#Pze-vrV)Kq6rM4K4fghJ!Dcxxm`f-Y=Pg9yqTHkfDd)vXHyIIrVa&WFb{O3%Y^Xo
zTq5kS&<%UrkTa}RS9_2HvrpeK!QmeE&j4&{noF}HIMeKP)z?elAiVpmyhIlo442fb
zkOeTt&I$3fjJ~{<4;(}2m^dzgl|-~@TZNX-v8)8?J^lbSK+3=9LQ$RDCf*ER?XJ8l
zG`egt-W6W4@AbAawcXU@I~EN(5gfm**^H6G0VrCIt)^YRuR&2pAI`SEwlqeYuKw#&
zJ!RqwqQ)>pPeKKaCDa$w!6|a>rDIe8O^M1mfQWk8CH2&P;N7kAkC;(JEvN67FH`qp
zv453Mgs}&;B$q8mdPX7Zv4{_zpUN)Lt(7ZMVA5F=hk_g6@QM8PN7KQ!0ew=7&0s1S
zOQM$Wv@_v0iRt<Fivhuv$zb8iQHl^}%Z0@{=Q;Xzhm5K7P(1wO(RIT;tIp|%?J5Ol
ze_M5WXV<dayZ{_A@X*)Ux$`TF%as6<`kky<R#T!J8wy|;aCzQ9tR4UcX)jgfhi$qn
z&7occp!mRAku*R&V_KV+Y!punfB9&0B^-9oE3dT;s@O*WphV}g&!*VU2V5u_%NJz`
zjQcuiYfosEC=qb3rIRE0r_>lr{9Zm7)Ug)ErAhr-E7v6Cw>wH6^>6*&>w(yck|uJj
z%Q~AVYuMn>7(MbyH39OTMKw8$2WW8!W4N_EEdu7<%;OFswuv9=E=YljFuF>00z=w#
zxL5Q3ddkHv?0u+*AGWMh1gN10OpdKQRNAalgVj}_Uy5gQ(^b+1;64$FT>W0lfqvo8
z$TIO}v0wUN8TB%k4A5OXaM8f9d5**BmK{)ScBuqhYmz-fUHX=aZfq@xFonz~9bsYB
z^fTCtfYt}7&wo}or7fU(N~<%>;6h4lDCK;&9>?*&B?z0o-H&E9)>E~N%V^1&WK2ur
zw;S}Rku8&uA@AWg*N@+)f8e|uD5bhJe+g_^H*VkI;H5eqM~0kO$5GkM4w!42^eVkX
zS`pBwct~MrgUWmAZk!!FIz|0!ADV0?RQ)NRx^DIqQB3IfNZOv3VjX}BIDM+zcg|jV
zrEMH=U_59$FPc05R7D-%vg{|fohr{_f8{Vu8=(Anv5{HE;RylV1^|4;4)s0d9=#1W
zrZy6DKY{#lNjySqD(p<(e2M*FRP<#A5ZemiNA|>(Pd$+0waF*Id_0Jlxo=$S&q@+B
z3}-TKE}8S9D%?Ed?yK`i>uLlo0QbP<Ut!<1+7jobkcfZSJqoq+L^O9fYtFg%5eCM%
z_0kyi{Fyo3D1~$Vfh4B?;Hu<07vORgS)}0*`Bi?DIdLLl#rU{uQsx@slp}qdy7>q2
zHv@;-6GSno!#joj)jd$PGc8N&Jpsi8_}z?;deaupFZjPwa~tG{Khc#w2k?Vtt7%py
zp7aDY+56jEybQ%YB>R$Pg+twb&sZ?O0txL09E8N*Gi8EWrxO=$(`;+TwBA}g#6M)`
zX_$5;tyTp~Pi5G@Se`;|NLkvsQ6!feek;&M$8DVDa`(Fu<#}O95vvavJjz2{!xcPi
z301_W(s}x>DSmdiR+>6pE}h)vtJz?}mHp$|SsEiH12YQrpsp_;Zar2CZjYz9_2k9z
zRFeRgEXq@6?k*XXwp-*>*<)1p0rAV>J5$~&M8oXYkS-~&EGkmy0bH=WUsuVJ;H!hH
z4X?#OJ-fPb$!@X7Ae`Rq=&!6qk6NQ0ij){>e{4)zh@C{(BR=;)FI#9e9<!WJ>E}8k
zD)Ta{)jUV8ul0GGc?<VMM?ZSwj4o~k+@ZFi`+zmkgv9OVaKLTvbe6x;Yeofj#A|vv
zRFzWeit6o=#CVb9w~2&lWL9rTJa8vl8F46}=CE{L{c~st`<?E&+%`fV4Q@F5+cb%_
zwPe-W(6)8xpHN54ceO^h6FEN6nHW`CA2Neu!5+*q4RFSaaHd*((~l!_A;pzLo)%Zx
z4@#!dyBqw_)omN!hBS<i=pyQAoOsqvvk*QMjKzW=u1SFJdK_b-%ZQ;ow!UYU%e5m@
zuM{a!aH`(%>#uIRBGb_Xxyy2!XA1bd+WyR`$iLro<4W5`j*WlF|HiZ(C!V&Erv-m|
z?5hP$)N;sUcjyN$)#eAH!v(sBdi|spGYHCGtH97~(ym^!PXsbYAd0C+<UWiq)o>IJ
zyQ5%L!K(PfQ&2=ZMz}jfeMcuy685!RQwO6~4FVL2wh<-c(_(OucfDIH_<A=Ut3d@{
z_*08GN{|~N>F0j;T#-JCiW$BDTGAEo3R*a9C2ws5W_At1!_j|GNI!RAnaZpjA;)~e
zkMF3Jz7|~Rhb#aI!|KxBkJzvc5{#zdZE;#5(;I?hX54EbjmJc>j&C{STa{I60TL#j
zQ~(A4aXB4MAb@R}dOZpfy6~^QlvV1Z#9l7Ww~az_#lD}J6=WxMW1Vr=4eANe-zjjy
zM+3yf3JJ<Yvs8rzuP)rESa)y>HPqVM%lMH9iuvYS>wiLWT$^#IDI!3-oc<?VbiE5@
zpWJd|bE~Sx7&Rhx7%H3z-5h>Zv?5PzH-JU!P;%t41(fd$VZr`;Lu^&Z7?{h*Z)6Zk
zsK$S*d%Lv3R>c5)P~Iu4&o~D#M`lJOGU~SVYa=k`4neiP5iV;f0uCWk0(JVYqyp^c
zp$3evOABm&16_P9x~zI!kMQK-diJ)<{aBKc(>A;PJ>ccN_#MBP9$Tn!A|Jfy?;x87
z0@vhKZfIO}7bv!K7|2~X>s_Ows>6s~NfXgMJDuSw8evYw`5cJ1d4rh>-Bks!c<#8K
zM8B2+6TW#~SSn@j_HtEg2D}P$%&5U<XPm`Z>_i<C2Vj60o!=`73<)f3BwSyXWrbs<
zAy$+RI@w;er|e-RI6})D-Q6rrw>z!x0`^}wtSL_YdUb1kt*md9gE1A>&;0ub57~(4
z2$0X<7L2yJXo{y_7neC!=3`)!Xz=Lu)aK@Ck4b9kOVrO-!*#xKKh&{LA4AGvpYL`%
zK{_==X64`FLm`ak^IDNLdw6rPg8f8bv!hjMe$0i(zP<<fus=btn6E2gpebI$am~VG
znxSJ|vLo~;PZBG*L@Hh>C!Q`*^7^`e!6vn=b_MP#QV(sO0X1_+Ec8<GhJF@KavT@@
zy1qsJC~7`(=Lo;a-TtNCAb#e1mb$ra0nyzOa+=lRT5zoo(AnTMi|V**O|y+2=iX=`
zVT9aIh7VZ=-lV?QT-L^<PIJ)2H(!Zh5Y2fyo2V%{sGzc>lyJDrJ{WrJoOPKQGPu7Q
zdwV_!&*IM!vb{u5*z;Zm8pzpg?%1RQB(JP0fdc34<g!$X8&&y%=pPctByMLGIzNJG
z&eP>a-*Ae7a|m;aZ#&4rw-x-Cq$0v7<%nr<(Gzd}50f^GTX{4Ax2`hQ!!mDkPWu-j
za;|lX+wL-RL3G6WO=dcEtc7zZ<1dlKxfk#ozMu^qbyVv1WoE6lWj(a|z%}|;e*}$j
z@&Okk^QY{grr*B(b8@~ihAem0UMRh+v}Vv=_r-Aj>vB1=0*ic)6P>CG`8CSejikls
zoS3NNnkRS;AlSpuOuB(76S1vBz-ekhvL|gbO33cUdSGHPl=Pf1GHT_ys_L^&$V+Q;
zms}JanSKPis6;gKh7^#7iw%P(!>sfRx8x71<F$HaM(d^ffI%0sO55g>5e6AiNt6?V
z^v`H@Kb!Z1hBarUKZljA#*etjzjH>a+1KS2!~ki4O5QZGXMVe%y@*^QnZ;>tZ@iE0
zJHfa>W(E%3=^|V@jP6+@k=!d7dWC-(KpO;&XvA6fBJwPPXL!=`w?z*3jfbu|f|!RF
zY$AK1Z~m4A&q>RmbRwT=D!o9nL=W^*^I(HLx>Fofa?Au{X%*!6XBpE>&<hcE13B?w
zUI^X7zXbzN=U9@IXxtRiOOwGvndu>RFm&0ERUgF=R76Dzvs5dKj<LPZ_?lAjV@a08
z6Zc$4T_pfWS){3}Tqx1U^IKHz8LDrp=E&Q?do0#VkOYw_+8|du*At$_968Vyj)^>>
z_vA(`GzhEV45A3GvZd;3WR>ZMB{^@VMq)mM?f^t2d<KN9`odDf&lv-!fyC7&MAl(+
z>csip7e!!_(bWD(xB04Ea|y%|Qhtw*Z(>Q*Z4z0zZ_Jl;W}p9o2XZ!hLCs#B|CgH|
zchR1~Oqw6U`euQ7&x0_5zsz*^s#|YWoP5_W_QXB^s0P#H6Pi++Tt;~zQ*TPB8jUB%
z-r;zk`(IuR|3uFyv6OyMQCq`>`(AXyMv~r>S#EO5EmXsaa?=EDAC*{r-_d>Gl~#{F
zWEQ~-7vAzKh2}Y$<qECC4;!B(l;r>$FZO0%JszL5DP>mAoBRRq^&6AwTK4F!-)LJM
zYf7XlE>Kz&SPzD;geM*s=fq?Eb+GP(y?I@TZ_II+T>wZ)y;~<+%vW@N{m-UU71-Xi
zj>QMR4-uXjES6?CBoCTFrO`Nd<*GURz74yV8%5nW?QhyJ$64HW6H+_V<OQN0JSg^t
zjt4U7zTz5c%`N1e0!nNaN~YM|MR3;$c5p^!-nNdVZW&N*B)`0Zr|D~!I)_iMLOUP`
zIC??jz5q*Mq*JhiMU}4zYyZnb4_}t${||JD2{<RsM@Ld7Zcw!bdv3#fN+zZxGCPM3
z2k40iJVFS{y_Vn8FaS=?KyM-X4!%>xL;W<C&@e~-0wn;ZW>DHoDEU;Pl$_*GQ#Xrn
zppiinds+X8HNki5n?BfsFkw}GfdAM`US}qj{N)UA4g*Bs?!KUG{x5z9EUc8l(@Fl^
zO_mdTzLHY={6sf^gk;Q)cWU#L2r|xKj!rLQyr1P0Ja}7O#U^C)_WRD<M9XSIGhlFF
z`agaoNopo0lCZT)!fw!ReqwGrqeI(CO}%n>{$rEPd6Ycxnpp-PDr@Kft}7123}?b<
zvKLZ4>o&<~jppU+$5^`4MVzX{Jea8U=ybzJPal1%ofmh7hM`a#fREnb{r9-JQ$CNZ
zYuPS(L7dWF*5ad+9W@PmQh-*h^$%nh3xasYv$+b@AmA_ad)c<uOYC`s^OXgU^p=@n
zyu^R6bae3hv6<_A?4Vy$U3n$8R4Cq%=zYSJOyb~HUP%;+$7<!IR*1>^G&7ko9n!Qy
z>O1QlnVNjkkK;XNbC*tq%XKu>w)MK+?1`En1ZBvel|`O}K=;KOyO#bm81xg>mu^eG
zI3d_m$=IOE0h+F8LtyYkRb~qg|0%JZ68$Re?i-~Qep2QfiWhPah&*pZvOOzKbG8z9
zR`9l}n$EVXH6Kb~sL4lKVag|jIFxPKmA8PyhT*;A5KqA{ygfDXkb!kQ_>)KjYler)
zG^Vv@Ath_x=#sy_L;aKyh)Cf~dh`$dCb<M5M4bM->;APl!XHA<;iRdMDsVtg-ci1V
z27pJ4A))v<TQ1%9maanI>AGkud>W2U;{uHpyVOp=sq}C9qCmU8GBF)1886dqf{N+;
zKV2-@SKbdJJVB}IL<hJif!+jlYHTzp8%aPQnnMp<o)Ry#e*K>716AdHTMS=mt$_fm
zK})9dWTwX5tYy)I1OE`PdUp#R+)r6=Mg1cKd-x}#&Bq7q+2Ff$fb%eM%qA**BX<LC
z*G|5R9W}~p;}#`woV%E&16DIzp7`K7LIKV(sxF{t4Q;hu`9z};ZeJmX=1u$sBoq|X
zkn~S{|1njApOTOMttaVZ(5xB#@iK{fZ?t09ZeC4ypM4S&86CRcG^eQ_EIEAfW$lT4
z%X=Xbwflt3Tt2iHcN-SDA##pdUY?vnRd6LYj>PS0wppLumabO%(BQA+uUB5gy!o;$
zxqF}I0tA~$hg>_tB74!*XgyFD4sK~^Psr?60nqAo=meLrG28@nj+v~X02$FeobCj8
zg{pa}@J3meH)MvDI_Dq9>xOu1;pLZ60Ac5aI7mF<=9sLooOoXdoDk)N|39k8iH*N9
zl(nQ*im;n)s<EXptkfUBy)jGDZ+C}>%Ft$Udn~ME633SEo}sxu(#`NIa;VYvRRSaD
ztTU^odr7@26FcBoX~J}tduhi!;`Rl6N;3)G06DXMt*U;-2_k1zD|}mZthTOSQcuj)
zIQB{d%q(On={Sih2zvxkv>}W8@)2*yePAN#{NXS+OTT<4Ys5#mSUi`qfFg+`fI~3g
zn`k1b+lEiV0-kQ9e|F^0em_PaxmnEn63x3DsD`HY!Xdmvor9s@hVpJ_G7e{d)uuL$
z$9fq|I<U&DbiS^Mf^2L>MAlV7Jqq~(U6kU@Y`-AnsoY|D?;g%BUv>k{>7>$|Q7ss&
zV__hWr_pN5fj-$BRlgF&PP|TvX^JSSqpm|bcj+qA>kK(&jHal{9!<ZL|GyYr!RWCl
z{^}pepOm+*Hnc4K5gn-%G}cDeL(C39ON$xqS)s(g`jh_PRx+2%zKG;Rzk5cz2o4jw
zZPvTWOdfc-Xpz)y5#WYRxR8xUUW>JrXY92G`P+-5*6?xx_cABIy3<J=kLA+Mw)^eL
zacpzXWv>cQrxH!8dX}#Qk6!ZK0eG571)=7C^G^~ylkpVy6wX$Wt7d%rgpR7aaV(M~
zpB;8V^+enKkzH`V9Cn_e^Iy3LMMs=R@M}z!sh)M6<O<1t!WG_%c6y>d>|(eA9L}Qo
zU0;NI8vCzd5=_XCe4X#Wr++}Te;*w0p6q=WW=~q)v%59x#6a%TJYT82LnYM<#=v0f
zWks*t#!VFu@XEY5=+|RPS~U1!$gk}~Y3!h52FHd=cH80BR6B0}H0;l^5-%yw*TNGT
zr<(5}%J`{S)-z@XE1Z$kthJ!UmRnuTh<)5J@1o!gLQEL}!NRe0pmm*sq;B2mWd_g)
z;8Umrx*?t{VbS<%eEn*!5F#i{(wv=fwrbu>L&>VWvx7f;AXwZ7sl{?ho$-7my)0^B
zb7LmCHmCI3K-xPEaZr<q#x0f^kropJ2dB&DL{)P|`b_o$F|Bs3jZmj435b9A0^Dw=
z-J^U{Y8d6}@ODMeIZY}dc@Yc23Mxd;f+C9R1R>Mzv`!G92X?LkU5g`VIHNdXEHYN6
zO%xSeI4o^0jQ1HQEZ=+LKI!tYRg6ld|4BtlI|i2=q!yq%FVm-eBtwz>4>D)`;=5pG
zc??__ShQ-YT9c<Lv7o1_u;IG<a)ndcZ*%1;0!L$Suj7_0?W9WPV~96esZ#?}I?2j&
zK4T;;Q(i|fb-k`as<#Q4C6cUkPGEyb$1Hw&^A<dBUM`ksQ>cu&DJG7FkZwy9=$EuW
z4^~c6BT*ZrZNWUez|XswuX@c%7YgXyL=Qhtn9+#MWgYBHu;z*75yMD4J$95gNuR$w
zj3B%>i$vP7yLt=_e-N2a+ZG35jh!+Q?No4w=+tIIr?=iHn}~E}h5Xp-h~1&p=|IP<
z4y0zbf+)vZ*;9^JmKMsh+_K;~eNfS$>Ao&b;~Ul#Hf0$h1Y!|4dnM?Eehiv8lWJ_`
zWHT@OVI<5}R%v>F(Tio(as`^0Ey1Qem&fLfM5JMTPB3UH6wgUQbfq?+1)G4b?*b+t
zSF?qT3oYuX&tn(<?djw)YClqGfuBu|gakM?5!d#{lilg(((1|Mc%Z~pMpPMn)K5L@
z)RsD-58@^aME|%M73XSLE0z#-TWc1%|A9k@U4Z0(_Tw`;62hDX0zz6?M9+sJzLpj6
z<FEOF|J={0)l+P^;&WTdTdpgl*G~8*{_lB%)WTGqK(5|5ItajcJJ@fp94p9U%i!-y
z4usNPeGnav@d}{LqGHy7J@H|*SB(X^4txk{Z*ph`q(e$7Z8&q+H%Pzwn695&x2gJ7
zMPWXVaSZqUhX65aL6XsKDGOJ}tL;QcDF!%g{V*yRAC=to=j>Ai$7}~-f@^dGNV^;q
z`;D6_){&KM-$EB2322ULY#nJhT+q-9={eEfL#|3vl>~z|w;#Y(hPLPu&651O&nMgx
zw)OtaDEPN4{2gOV1DL%2ml@9`Fgqe&ezCFNNFm(_tUgL$DgN+e=8+H+F=?z;hYf60
zxx)FtWM2hSMg3^8MT`3UD~C}>3}uE9jkY>_7b&%xT^s$i!P+&$Qk}}t#K(B0?<)zC
zgrI+9J=#MyD<GHcO!a(G@!wV6<<neGh)`Yr_~iGhTzJEmyjE0Ecc6Nd7D+ppAW-Je
z;gOF$w56?|C~G9z_~KaOj@|=2BKf2!)cJ(1PTZ(fkHUn(XB|p;MP+!JF^N-kCt@3c
zq7D&QCc#_fbW*it9XqQ=kS%Dr=)RJWI+Z3Vr$R9{i>kEqM`cfq83^Day&fsQYlfc8
zdq?7QkMhV8%8XyFXHRlT2QjlQ5H%4T6r(>LH>g7?#|@GwXH<`1nzbFZL4bV>(CecF
zI6)3?j=z!~qSqfxZe$!GcT^dWUDdO>_~DHNU_Pco=UJNRF43;Q()vi1q1BihiZ+wG
zE^UG6#?rxRdb5oyQcO>TgXUIL(+^B`6_(~f;mB}m6;rP>0En}YqgI=qkfs<Wt(6u6
z`?T%;c*}%eehs9mbd8?^<)RSa_Pcb|{KM$qeBl$n5oD84mV;$10qvkF*_lGotYInk
z4j5XM$|kFYfEcA;jsc5IB@15`l!a?>Fv|5pxvJ}N4?x?MAwE;_`&6p`X?WHqXpDb9
zXdQV{9^eT~h_49={%qxSrE>s%DU+I0f(G#v$P!<&Fv)1ud&;Y)wl^~_{G5r6sx_xg
zj-Y#NGN+Yhn^l32Lf^KTI;W|sN9^FP_SZj(Jle9ad{IPm@m@TnCJ+w_hlFNtRBFbs
zQ|Hom+1+>^zRdK5afpCggP$k9D7MSoue=#iXZq$Z9fsRcwc@caRc0fhZ?C$aORoJP
z#QNSbm40vTB>pvYm3~URzzD-P@*}T|w3QSy)c@U+DN$@Gg<Ssnf%fO>i>U{H-O*(H
zbznZ(42ND^|J|Wg0BcI$Ne@)JlK){0S}rwVseCC*n*V{vPXv4WcP7KaDo#mt9vt?T
zU&>yg%(cr*v^N1P82xK!WJ@B5uW5S=rsyPZxZQhyIHSu~3elj%{M2_%I&C;L_Md8u
zPp~A0I?Kj*_9g2UXy*e!ktMM2f&;qZwQJY{eh`x?tu<#9t#Q=_DJJ`r^_(zS?MK^1
z=|>0H_w&$wknJ_vVib>a5HSK#RE+7bE#7bSZ;Ma9I5+DY0zf>r{V*?5-VkyXn?Dy@
zS2XCt@Cf6iKGsk)=h4BaV`mCK4=aoN%&YXsN;MZAANZDbEst`Hht70}cVY{5nLv3o
zBaIAw^q=lIw#hNK>Y%Zq4X)HvW1&zae6FUv>(r;9^&a(fSg8l4?ENf|gtHs`D^2G*
zA06!cGJI8Cl@3DH!kIkYlHT%z($@__qAE9sMv2jRAd=&b33D&ZCSPjE*9?BG+2DYc
zsH1-?K_YH%>l8YHhfBD)#0ke}%4Dhx^pQ47-4`qlAEqkA92lK7E6T#sNEH~F#4N3r
zD)P)0q#r30d8@jur!`pua5p=yyNw(R_DR^}^E*C{vqguaO_-B@q<y7_seuB=F9u$s
zmnlklh_3<&#`4oHolaS>$iFP<&d4Mc9@g3`;)+G#AP{joE&9i){8ysNoNH+=3jpeU
zn0+9QROzUqR&<MFO0QXKv8iO3s(;oplR4x?Tj~P2cWfFt?zr_9snZ%%5MHoQVrF!{
z(^7p*Le6ZdkrrjHWM%43IAqFR@^H6XjqL<6j`0O>U%Cri6NV3ww90&T=DoDIm?)hy
z9~|&kd;+eWardC+!LkkrBErV?=;N~&m`INWa4>%il%&XmNCI!>tuAMTqaS!$FPZLu
z^4E&3GI!i|9=Ml!Wui$q*f#R_>~Uss3YgqNo-GZ$>ENK_;g{fPI>~N_P!8}{POD3(
zUtZT+CgAIgk4sOW+NS$h4gdt%r;%TAd8rFHJ-B_%Ls~SRP*I5<Xh9SR()$Cp_urj-
z7DRV{jGb=b+9n*_3PrbnSUkK2;Hq<~<0hFy^qlB)0-PZCekrh&DOQtg+FkZv^6uHY
zWzCN(y7W2B$)me){(diAEEeVwDiO#6@St3Mb(xMey%ch117y)ztB_67z~q-J-y=<0
zyN&6?pZ_d?e6(Yh?wT%Z{xPcwcE)Q84zc5HB7_<&+xSc)Za>!`fd<XZ_-~HJrdu6x
zPTl0VRcb_(C*<I6l*qoh@A7KqznGH|Of;UHnSC^Z9~z*Jgtcy1kl0u**@H~+j^shX
z5kuO?*6eKS?D-2(46VlwPSQ^X=|Vt|Bst72BLoPQ+o(CWc<7=q3|4D=ZOX+P9l+*^
z-@O2qQfB1b>bAn}7b^h_Bo`wR630$9q*pPi_{m~gh^$;T!`JKsQy`6C+IrF#G2j%R
z<Cj;~^UC41UW2?Leq_5}kq4Aj)##OH%Oh-8*9tUEBMR`I%+|0&XQx#PFx@pWgGxT%
z5j1Y-7@u{`C#v7gPODK+s`W!Q+{6%;D;4gtXk{BcpP@*H@S|bcY3=y(v`3^a>=b%x
zE_Mwn^~RXz^<+QlHFTUplIM3`vS<T3vbU0}StJnU)d1D`-@x(LL>>C-{`DKLiNexq
z$xCVqmR)tKxD8-ah3so9U~Nz(z0+h^GXR0`t<4qva>AfoK3=txq@czj8sn&JEh-H*
zG0)X!xWqwQr5>4DB#w3diMA3hmjn=0i*&x89yU^P;M7&)&fqd-NQL!S7_*7pkbBg=
z#%P;Qrl(6f!9%A6`gnlE#+GIcLZg%$D`f~<bX#@?q|ZuN0fq;`U9xfj*9E1zRGy}R
zUMWcb$>SIQc@i1^ETabrB=@Ja&Jj6Fj}k!Pz+ZbMqp^TEA%Mp5j3N>UQX)RIVPJx9
z>wOTm$&oE8bSK74z#hK6qhX=~eO98^JX9=gfB&}C#&~*_pyK<<z1)4kiOFVR6^&H^
zq0^-7z1s|K8*aT@e8VALbO;z!5S=}ah=tXqk=N@jBC)Gyk-*NvD5DY@)Pk;&ySQ}s
zwEbu~`7Uc*lt0R03>Py9T`goZCah0%H&;|kCdXa;Fj60CaSf|Xbh}^3(dxQBxz=M7
z-6h?Q4}3o)RJ|!EfAk(w2g%(J`KZK{yvbif#y_Gf+g7TOLaYd2xGKh-?AUS>C-WBK
zb+6N9)pxAcG6sSEZ0RZD0vF%T5?u=5fl&UAI;x9;@2^D4z>&<cb+$81ZwOrFLJ$<i
z^%2hso8Q)kiot1Mop%O!aI`Vx-6LC886#{#O*qbD4K-cy;b`}4eaqkk-UnUsLL=_7
zzi+rP8mW7o0;w8M_qSTX*P!4?s>C;gK&4<q<~<)RgvbuheLUDS4ME+#+r-$byM5=B
zl4(#maewPhe`tNR_YUNIk&koL944thdnzwVi{lUOT>aw;K8CuIeH`@EYPPpvf;T*N
zk0g=B2e)(=n1JP4Hm44;aN54bxz&TF1v!mOyU?hp^!LvQ@3b)j1WVz0k`c84gbSE4
z$j?RFWjVy6Fl&(|i5<PlLPDc>p(IN8Ve`Pm1F@dk6<vlCK-N@`msuya&US%2yv&BZ
znG`yAgD{)A#x5(%XgMbe8M7@Y9N=Ko6OB^!=!0ddkP1eawu(##ZUhnovYZ6ai;8ut
zt2}6Ma+l^wRhgceY6hh{_B+bjwr=rL`QuHpPuZO=jSFJM8i8KiR&{P?6a6p5nKb$!
zhyvLO3Ay-U8Rck0pGv6N4&CPP{~<68eFeL27GZL)uwchi@$yv&rZp_yDQNfgiO{bP
zsAS=Es3xk@S5cb>=whaZDUil@jBiX)E6=SI?RMX@{`-3JY&-1x>Ymq|4m&<5bE#8O
zS936wZVIiS85TvZclNGvM%vT|OWKn2I|<TlVL`eNWDTIgWQh?%E~AD^WtEJ~L;)I*
z?MbV=a*J0o*m*AJyMlw|d~k7e-SDk!_U}Dqw9ln2)+yZ#5dGEbo1uRfAOrPZCr-XK
z5q>OnGL-LN3mje##s7Y2gXF1mZ6N++*^DE=Bu1N(%vgT=$+C)M+yr<o(O^CeGXNTM
zJ{BC@R4j4IU$#~>rYA(sgshAALx0U*GL~6OiT5D-MNEgbcE9fdpipV_Paw{|Obi$}
z7myGp{eKA!mPc!FB1P7gMn3a@A0j25B=H4#4Sg-NwX3>X>i9Dmx_0miMRE#r!xFu2
ztUgaDi^)u{cVBVR%wXHGV?&a*k@ef0swlotXZYWOzLS_pAC{>0yjBB{XUV!BMWjBZ
z!USoyCsEl4^Pljq(c&+7<9olLfqK_zZrT|Q5Evrv6)}hQ;~a98EMXHv$4zN$8a%&9
z1duUrUxQvplF>f=H@EL(lIbHTu!fm3hn`VTJ$~0+E!!e5(%ix!S^CZLCV@wHEab)K
z8;L=tP<oc12ePA@#o`W}QJ=*vH~|ODd_^U;YFIhcPp+vdLM8k)eRbM^-I#alW;c_X
zVD)Y=4Aojm6M#^>N=BM-jm=x<53V4Jyg3h4TrQZ(UHp6gCzp)`$XqZ)QyX<i9An{n
z%$C5uFm(0}=y&^&VQoV@mLjMRw*Uhqq88tX_IMJc7OPL0kH~F9CK?##gzGB+pD54<
zTLHo<b}i9%hb{7cN=-Qis-0+sut@S<9;-0ZiNxxW;^Zzc;m3Ag=7-2;Pd9BUmel$+
znkLbMXdzOWi3=c__OEn#XBphhrJ9ZZ1Wax-x*05=i4qCDV<n{5B;+}U`@_Uxo+Al}
z8#zeg>KKu;IEBz&^PtM@wp(YicSJ)Iy&_5C1}-YE+cgQZ&p1U?4I??QP9E-q@JGa4
z+{D8!K?CBVq!num*Zf(yL6#imzYdTfA^RLHD~9WO5zE=kF=^Qw(9!`-{S}Z`;Iol=
zHI6v(-7Xoj;VLc_D)jVjOu*%JmYzvm{BflaNDlK1c3vw_jPwz2$HeGebBQTSxA=3@
zHGr*jYIMUs<niwO$9#wP%rNgaSr*-}%GQN$UVBp>mP`!Q!~0fz?__0ED-z%N-Js|u
zR+RlS4wzWUPqbwxEZ#Wg=}jSg1R4;D3xWVl?u84$ugi0=(R3d=XZHeg@Ad;69*(HH
zeybxZmkb$8!No-6c)UV%Yb7C*=QvB<_2rZ<0Mk=Sg%*qefyVWzS*PU5*utEJ22gWq
z7a?vE05ip)1J?uXeP}X_?5?7m#28el7&U_hVe;qdSKYCxp~V<-RmHW28%DN2gWp3H
zj}{8C9s$<@gUpt<1z$mU@-cjfSJ6kgmM>Rnl%+-HSgsg1Wzw7|XWre0(}r&6Kx7cE
z092TJi#ADvtiPsG)xCCeAQmI;FnrbK4IbUwO!+z!fC{%{#)M(_a~K7X|Bfyaer;cA
zC43Kmb+uR04gC&zvF_?Lu5$=xBg1$7bz$ILO6=ci1M?gVu_*f{Z=Tck0wy<bUPtBo
zn@Vb0cL%I~Z%ojQ1b4vZ00T<*n+V#N)px^v@rc&hg#imMauoqKQ1-=i?sgPp>rac%
ztB6wks3&w=`P<NL!~wMdUZ<A9h0-5jsatAOWo)Wyyf@8<_(pKK!wT*uKIfR|XAoap
z+YgDZpJP^dZ9R{*r{;R&Ju|aypU&3XUBf?5cBayf>UxO@-vdoeIbTUe^h*N>z&TJ!
zuit;q0N%o$cSxNRXYvu~Zo72}=peNi0wDZW;?wlfg10#3UBC{ei$vIt@zp7rs6?-l
zN<BFHpqJo7ym))E+THDaIB)UkHNJ;f>4;iWH7mSmg|!eGh>#`zxl!GQ6RwD7N9ZY_
z=FBn3`MKHO*|Ve6p|DvuFP4e`?}BOK%il>;9;fbXoGN4^#M`We-vAk&k6%pPj8w}4
z$dP1Sf(4xPv9^g&aWg&_F?x6bKIbmC?_H{QD8<8skOVZJ46SN0CufJ#HE=-!*!txb
zGTt!8JZ{rq@n-?F3w4tF9Q}%ipJn1J&umr)ywypcmesW&_VnXz&Fx>-JXr@|lc^@d
z>Yht*p(N#tkc}~CY9IGQ(C-?E?Vt?GeH2JINYX}U6g=To<$0wUuPwSlbmKg`<a7E8
z@elnh3vGkpK^LK}WQhP-!R33#i(9>I0tHq4j8N7+NX+r3PpgDI&DAzBRDuQw?Od?p
zBd0^IbfHpo%G=k-9&m+A)^Dd_pTQ#870-_QI%lf~LtRi5+liqiL!`^5x63k{Kj$ux
z**j6zYME4%JSP|^Ax(l|^DOs0!&rl+AmGUvacs~q$vc5)DJgjaz+@d>A2)4hAfSln
z1O}{3Op9G@UFj1uzx_U&jZ<l#a+ua{ux^+MTrYC%SAPHhgL>hkXLrJc%8W`qsFcXL
zcLuVrxY4^a++!Zs+&(u;4IogV+JqW3+ppQ|y`^mT{M032MhO&ryuBQYH56q2GFtc1
zEz`0Kvxw*qeF27#hC~}>XVHtYf!dWRw=9nKp7Fy6^5&dLI_Z36&{A`4AQutU3@|y{
z0LG}l5hfD*O3XR^0+orw2f^k)#h;oZgxJXtVl`OAu?^pL-5nWRha!y?9|<EE0SDCZ
zrG-Q^3iBt37xljf(ZY}^M(M!1+w|+5^mnKt%=+PEr)1QFdfmgGwTf)?;Cv3=Va2T^
zT2EeZoifN#bKPcG;}LmG`=OcOBVIWPAz7KSEBtBe>#`f%EDrK>WT(mkO+mP?C?p0g
zXJt(-J=bh{DMEGC8GzNZa4)MMJ-%P^)E9s_czRv1mB8yuHM-rXv~$v1h5&wrFNzy0
zG;c@(rJ$DYNZ0cS(MW^zlRL$q@B}<fc5%tD=UB~CWwq`6AvR1}8+8gJ_&h^*QBD#U
zX#D5IH@i-#k0c$4^Xz0JAe8CdGyw^m`hvzL@cw=~yghdJQN%v8wT4PX+gzugk(v9~
z+VQ>0^mOTEzXCVq@EIAbqU`@uAI1_2qiYN-O+yML2%b?$LCh>&LWit#|Ci2o20b)z
z1@cX2W|X*sljy^6WS3yK!t;ifP<JlTVZ*Az6^#+_nk%Bl#4Ry8_X%#YE42Lz%?J8X
zjX83Jl^f_HzNm09|6%)fVQkMPmB`);Yv4Nl<g}}4<+;2ax_0umFk06Fb|2}<-L$$+
zCzsxZu6mA@8?d8JBK5bnMmxN=TtqTvC2=^_;Y(lk&l$GrJK7gu_zLy;d$&3esclSv
zu<!f6@Pnr96vYO?)qb>ur8(0j4B^W)d(F9&CiI=2QC6YpM@GHG^xkd_^zXv%qxV4H
zlgCqUz$jagARPPmaURhb$D;)h<%XO2r(s5_MfPR+o0K-Fwog|Wu=X!?Treorlf30Z
z!8Zk!SY4UrnR9gaT+ez`N_-V;@~5LjGwv`&gOD`_tSmlSgRPTc<j6Ks$v-;Ge_Zqu
zlb;Z*S%vh&FO`+~rJ}$Z$Kt))lz2VB?i!qQ4v+8`Q2*5-%^Q#NU8f?7!oTld0YBXk
zHyws{s7rSXVn;%{74EIj344MiQv(9wq8r(d6j*zdC=lYaKXjD(vtiG%FNB>SX3GA!
zufxq`geZnzmz80XE?*HEhI3-S+}|nD%f>8N+L=5r{P?}Hb3I2XAbUu}llAWmeCxxB
zLOC<o{(L8v`MXyd;H`J9p#Hlpp`n4FuyUM-<PpnJ_CZf0Qx>{C&bg&6SU4W3|4jUH
z;LjJgP&h$Njok8=OLgfUw$LPaaBMAjcuXAZ;VA>8!Gu0fdxHHlQo$6~XPrc(?-#Pf
zyH<tAq1FFcPWYM8BrkH{5?QxOY>dojz}lcuhF23_%21&B4#JoOkmIjz3hO!7z2l<h
z!@hq>8v`0SB~7absfN#uz3vi^r%&ABXk2^mMaPCMK(8#NGWDA>gxSWJVY8@iLQ}YY
zh35kaF|GEmfAcdMO`>IqXO==Dm5SQsGtW61&AQ2VUn`WPqf@+q2#8BdKRy1kMQ?uF
zhzb(lm?XJJ<u*f*#m}kB5)Fo(KOQSK1dcS?tD1$S>_aVfHYvE{T{X?OKpA|=&6yd!
zinf%Z`f4x)nvWs7&dBx@r3x$~f3J`;WJC5#-u}>}8d53`(GH238BJ{aCZwC?ReYc3
z$OYYyYqQ4w0NjQBF(82W0w&%)z;f{fdJ2RrJ1D)zWb=PW9`KLvH?(pUWbKxtC?32>
zwu(DZ@B~leVQo7!5;XBOlU7xIHmF~fTc#{zUQg}AaxOT~lr^9gnEI#r4CbTm5i;x)
z*O)GGO&6#?n|>WRtZ#A%`qT`1-$Gwkt-Xe^aHlF${>(p=s2|d61zl|aR~mTL)$m|M
zeud+&+Y0Rx0r;ubX9)%RNF^&jW<AHD0ab2W4SpZ?;1SqIS9o+*PMlmG8mOEG0b1@b
zIOiwQf!pe0F`tzKb{7g<2kyBKb&UPJF4@rt?vue|ZBKyIGDit;Rl*<jf#@#dzr9yb
z!_4*#XiRqKC}?8%KVH}cE#nevgW!?4a$@78G89!BcMz=&eDRX5$Y2;2=zM>vE3X+J
zIKCC%n7<3&V6f#-p9e+s&G4-24(^jhz<Rbewk<OZY3-#xC+B`nitCetRXbc1;BEN6
zD)?3h2TvCB+&5U|ccJkwgRP8Y?5^&OQ;c7O?S(|P!ix@+Mq6vl%FRy8W+*5;4;)ej
z7WAOGnxCqOPLv9bx$ZQFoesY1c$%%Wc1r`!e#+04P>D*E>yGenQB#vLH7m}quFOZU
z{6k;nJ3Brjp6F$ly81?df&Ls>4;0uUcM{hIQjPL%2LFt9!C_qUTK>l;=M4kKGg`BB
zO!d%oDKce>4j#~k6h88FUR1!SxV{ZevWS9?c%sa+kb=lPx&O;ojpGJJ^(=E1$(dLL
zSTH0{d!B{>JnPy)Ic$Ae3M_R}I+v~g@Mp&Jb5cw7qQ`r0Xra#&dCaf&Qi<3rSVT#c
z@)78{GwyIe!rHkGZ6zzxr-8N$zY_JKuhRL)fN`(t3CoAl@$)Fjm`rOUgQ3Nls&3f_
zR7eCvnf0_R0T(E~Y5(-hkAp;fsbNok9R^7oZ6DYd=Q5+<-k7uiGi0B;Ck*1kO$tb}
zW{#V2O%&6fX_+p3ynHqpG4dyaN$dz%!v<90p=d|hc$`{?KoFPq`0gc0>hl~!5G_S^
zzM`pHB<Fl2`c0ku?BK(n%3#MCF*WtQDn)U-n$%E`MmkP$L$t7t97J$_CAF-I{S}Hh
zSp`$)HVPl)bj+7mgYXuc-12Oh{A>&TQlt1Hhkb@iGnlhIlx=&rw7S~b^B&rJ2mgqK
z1VG{M(+X3_m-26}i#pcQ36vt4DwVQ2k|Ve`(1r4NctUz|kw8ukm|xpeX>k)hXzH<h
zqxK7M{kY8bkzO&h;wG1n=U8?P2ZG84mHWb56)x5aa5X~pyoF@GFseVSqQU3Ap`~b=
z^O;s%XPgS(mm+;dE&(b^senp-_KOyVwiflR@X<nZtqh_-K(m%e4{xKdPNILFeKatJ
zzZ&_vjRAp^&JT;sYDr0V6;mVKz8E}KeAW9z^?^7z9|EyCFk);d+yRUj#H%oms7}0w
zJ$sG|qlIftAR6CA8GsvS;rA-xw~t~kDsp162A_g^j9>zKV+G+z1KYPeqhI2nyq5W%
z;qq|u$}CxrbZ%3rU;>QoR@vAah#x42>PL4gG%tbcL@0p1kyb>DgTRkzHC^CL$;IrL
zXPw&un0{r)<)6wSg50-EWZJGcEef|PAV-+jCwY0UtlixBt|CrNrER+|k2(m<g0&eI
zGS70>TLU#<ic2X?sE*_f+;b`bQirRW<mVh-<$eO#Dza!NfDPW^G9)$7r9Ru2Vo!jm
z?rIL5ISB(t?r7lu<CDoP*#>G&9c>{r*s0#Y-bB!rj>CWXYG@Lok%(%!aDT-{-ABm=
zm4__z?{Qp;yN$$;cto*f9+SD<+DOF@^#5HbB|4RE)Z?xu4k_$HQYEfE|F~UT4J23r
z^OrFP{@TRp#0Ok5=02=<=nwvlRc|_t9Yq$LSlZQVORcM#^82wR1d>84Zxrh=U>ih#
z&Lup#>(V&c7-R51i5J|eV_5km2I?df@>=kP@6u3=mUh_!yLKNrtMTHlSWoYBA;}*T
z3oe+SBR!@)7){(xG2H7maMUIE?yF6y)@2S62n!0T=}nh;)89iuF41`B64QngFnt}o
zF^;TB+p(z9yFDK1&jeyP3wwmJvL8xF9{UDgp72kdFnS*Sy~^O=soL1(2bzpQ|3ZM)
z8e%TL^N1!Jwtwh&5#{yMA<25)BLrsma<t6!Ow*51BWV3oSI9hd;yX|6%W7hF&d~{p
zXT{V~8tHG8LG7|If2Sn8_$KKN4ZogNS+WIB#J8O81eypNts?rv8f}l-FTB6?_uZ!q
z;Jj)IAje$(aUU!L=MbR^fO8}5knOQF1v19I1gKoQ4G#Ez7r3m6qe^&2t5l!lb8HLO
z16df5F2}?^b8)TQ=KVs&gp9u{GjW>_!j#bI<z&ek-MPEYQwd0oR-D*tPx0Xk*qY3a
zv~x@VClqdJLP8PU<#~M7jLTl$w;fCg?}_eIp<VDQ3x;my?P13k`>ptdv+A}2p7EvL
z&k3ddO1ypX5o34HRqY}$ydUAAx1NEzB0K^cFV^z*Q=}*10FMwge-4j2ihxBL(tck|
za-bt3d)cKZS3M)NW^Z32nE21&+%5zfPO;W0fW!m0ZfpU8OfR=ax+pm;M9dgiHJPb0
zgK={z*F-)6FRwVHeBfiAD57`$S%P&4WONG;sS5T2KAN2p0b!=sQ$kL$y#{q3i?vpC
zdrE0Q{&(U@eNEh*f7#%V>-+rH1|_|C+%74gh#16M@n5fdj=2%?W+NRb)vx^)wUj<w
z7BV`OmFsAYAcnKZo2k1Z4xK&M{=az(jPl2kRUrz}y^(!Eba}$67*Ee(&(qXw1zy+2
zo%jCkj&|OnIf%wf;Cb9w!?v^O((UeYnFxJvnr9v#fk1ROzPU}JD~a-V7;V)(R-Z{C
zbj2Z`4wWw<r9K-N9cQ`35+jl@vP}_}GUQkN;ccv${qbGi%C9*Uc&ZP1*_kezH<`E`
zt={LL+UjFa+GS?Fl)k$CEVdv6X%jt11ZDsipJ1EDF!O`<8L)_q_ihMHsCPXe_5zuM
zM=R1L`?hW}k9xAAur}1h=7_qxh$~AU!A<A=k&Bgj@%v-Q)6TfOc$)dea{@ENU-Z==
zGsp`Z{YGXS-jWLQmeqFPwkG@d0I1k-SYnRBcqKPijfUZt1CNHlL3XIVm?nF?LQK^_
z!4X&KH}!>U0KZl>3fB@h$2wRehF-VHOQd*1k12Z}jyxPD^uWRa@A*I|b?*Ug$;>xU
zO=79!jSj9&$p;Zj8z2AbBJ$3o9D^=+q$HRM;~~)_Yp^&W6iFa~xO#oDDCwP}{;3?`
zFi-oAve?tluHn1<$$W6zsT8<;c&wq>79(DE`$2~hD@>HdpsUK}fAKA|+s1)+4^2C|
zKlv?`ruFeHADp3m_JFVOpb31!*KKEg3`$)L_P_HsH2&YXoh4RoJv}reN)nx9XgIGG
zup%L%RyQrL5+6t?AZ&bUsYc!!j5yKIdioD}=>#FWMDaM(%Z~Cl?2EO9z^+^A`R@ML
zio{uV)c=oE7%(`H_ym`>$E-(RhqjlMs}qfE!^o0p&3IP2xj@7HWX^&=^bf5*@rQju
z6o|9>;+R-?2A|n(F;m|TkNDwLJBM%rQ~I<v(1bsUM6@@9dK#U<#~X+i+F}!)1y}9T
zt8kDlWfsW7Mwy;wRWpcanCh1J5>=2Rjudfi$`PKv^=ud6C5+}@Dnf}jjN>|g)sXq;
zf(pxsSNe}cjq=vD_p!EeRo?q-G@wlxK@FY)4hx83yigh1H;3J~a(4T#5Tzil*iF4J
z89_=o)hHW1byOgo9VC7Ax2e>*Mp$>{a`V5E@tnBrY2xPMb_ISvy1#Y-bKr&ROEmbd
zT;HD^&||ebD{<!(R2C<a0Np1i1=vne;~YD1$QGC&5l*v(Yhv9$tMB`+PTXm@Lm0uH
z3?^^(`9S(Xz17u_-|Vi~ouh}?fCq%J|DGW9$xUc{|B$=UZ>6e1@&TG?5kLhOPPzl0
z*mxL&lJ^3y^3yOE3FmRBk|PHsvhNv;F^@Pv_m(aZimeIUTi4a8l(qbTT@#D?Uadx~
zGX>5z$Ah-OppZ6U_rS!9>=(^BdY%AXr7cZbaqAD28v-eVqH%ipkunKW_>pb1QdjHY
zD)u-;C~uv^5|7F&+~s?t2bbZRB6$sGdnli4oSlNZ6JaQ_ZRUwW-<Xc%KWv8lPm|%<
zOO7%3Zu6GxmA*Y7X0^yR<$~8?&r+KTma?0~{{+j2I-|2P)6c||uJzPd8UV|e2a(kh
zZcWtGIW0ubj{LNk?Q_V!>j!{0!Ta`P#Jga>h$xgmhX?k6;Ta3^DO*R@%2!@R<!}A#
zxX$)AcF>@?s!vy95&H}H;$LW9eg;jkH<XR_aK|uG?cZ2LB*Pcd>oNU<4Ue_#8eofe
zg~gnIcL3u=1fG|7XB^$nb&8Y0F)H9N=5>9STO>s?L|#sOzV7Y}7jHN}H%3;v$%+ME
zYeIdJdS~sl`dy(-u{$$ugdtK8Z07xZ<!Vi~5-Iz5D{hJW5qx@^3S{zF!nc+^?krIP
ze}N{Logbvca)bi8q@Af`2sX1~U6``Y=2U={F!fYDU+3XVmvs84i?yW?@AHvFNA~V@
z)obW<Q3yc*F)GrAB{pj4U?Ux;_}_5mInk|<tJ_F<OYH5{Y7W`qsX!Fd(B=#yTtU4u
zp3tIv1z_r7RdgyP>1EyefuF6<$b@rH>JuXO@cXxRtLhhk3geKhr|%`Y%8Zc(w=zxo
z2kj^SrN@7`L;`YvyS-k>N2`}cMYq$)0_e0m0-$xm7>UmI)Q-7XO1NBazBS&Cp)sfB
zhqXO~Vc5F?bI5?w;Xq^(2U<D$*7XZh<YD~Hmugq$ox+u!1=M)TXup3plj(<c^!mN#
zG#03$XRv0Sq0H~|57Kh~v1I>vg-u0GNt$<?qi?$WE|>N`ZQTQ=u%qdKKAN4hbNC(P
z!WW8p!Pe%J?=C?-KnO0yyvPO0I&?6sHE61M(n`%?1aaGZE@rLPAl1E-B>f1*KS1#8
zXMk_))!cRkUd;^@)}}Eu_~}*Y%MYz{$gW6+=LX|K9>kF!m@^zG1C1f+ue{%P?giuW
zk0ZsrJ!#B^0#0Q-vE;3d60_rMKf^ap^`}9}1!Xfwr`iO14LmF-I?zK)k?P)rO|nL|
z4(b&iXQ(h7!>RLh!-l{G-zG@b9S|N>T!LlcY>dP0V*J$@=q4(nQ_J1`FQ4%O6sRhJ
zKQ*0?=_lnc#&*amKZ&YC(3K!?8o&x3H(@aby@cDXT8~S9BKLlolqtb)-g?0EKU2D^
zPtK>^#A7=+zKOKLJmjxyhof(Wvng$I4x7IFD7kAZRUNoFn#Y_|Z+Fe2A6XRmiZGP-
zt7HL+fuj#oAkk>=@(B7^V`tmsITMGUjA+!iY>V!`b=Q*)M-gwH7H_d;9jVyPBMeuH
z5-2=43k9@cP=99|D+w*EkqgR3X^B8TDp~|yU%lNjCYCn5q6tI1U|ivfLa7ZC+YBXr
zVhlf$&Mr8I&Rp<6&wctz;&DGME(3$J@Y?qYJWUc^jx&K{%bF^Qh~)|`Hsx_w8z-F(
zwCYqfrD(qE%7nD|8U>*vBrZI5%}IvxpOw+VyGX(=0(BP|1>?Z2?xW5`Zf@0+La(Fi
z#ZkvHw(OXJ<rcrVXDib1o;-q*yta=)PLuNVl^j-OA^pIXIfcGgo-pYQU>u%IjJrw@
zLS^l0om-e2GZc4_J4M0ri@I$uqRQbbYR>eqTbZf|WZf_#xml^#98;oA%^*FvoI977
z`WddEYnj`_#<l-&+I;|V(<4dOI8?meADwAx;8k=!AmDo3;IY9D&`tpt$SGps)3f1&
z=u6HFzys>cUn`9=^hl2h`r*hZubeZ}S<7p51O#BEd>jL1FU$?+DmkF905?F$zecgi
z=BAEPl=1@2&Lfkq2+2B|*V8gx;05VxFzAta8KN2Yl5)52dj1IiekPW?n$=S*ac85A
zOT3EolW3Eh=*os2vjCg20#Vs5=wiP1>M3c7Z6f#u1c)6N<egr9P*s}s!`Gr9eTA+d
zI$s;GPtWw;sv`sxYn^aaCb;={RlaWYn12cGJ5Cyr*95iBd*7GIEWRAG>YlGaPf8Z9
zK7WDfQJ59v*P(Z?m+MK&r~G!WC|t|CGGRrqtUlG0JD3|<nhwb~XLjoCyfDdvur^qt
z-&r>HrZVRRMhl1Ape}$tgwr6<sa_99MCJ35sfpsKYQ_wCmBNq?dk5WTgy;QK4}b`6
z%%vN#^X=U9JSzc?FYA5W{6h{p#qV2Wg4mZ?-RN|zi+~b)LAl~@Ta3Ad)mjMmLkNUU
zcS3Scv|>=iQLBP5E|y`l%-mmPw9XW-3vMy&DSTGrgppsy2}Z$vACltz&yLH5*KSA~
zWIP=S)kE3}mCBUXv{+=7YF`UUb@vHp&uCnbdFJ^A$z<RUNgi(Lgq*@vWDZ?Fgm{I(
ze4(G|h1oHpV4~g(x~2LgALqe~2}{sRso@<yBRi^J{)LDzbD^X4BO{)Udk*6*th}=~
z0pc1bJ8lv!Nr-)rTx~y8qF%SMFcPCR3QSktl{FOz$~TOE-SQ732Nc?TxnW~N5asNV
z(31O9F-r1wO{s#Rf|di?29%rwH(;oD$+}@@?AN%Nv=zjZRra;FE8MOJEU8G$-x~SE
zq1nF^R7`jGRgzP8NwZ1_G<8w{i50k4x3+urCimesMZpHBCCHg$T1C+v6Ng7*umLaR
z+oEp^!BZ!?%>uI`!ozPp0kfVF(Ex_OD*PiZMGx;VLh1?GU{#SWFUsu}8aKhKp`j+=
zx`^muOdvd$VoyD`vgGl}^(?cv9dT%s8_?b_morl%`r8(xA35W25H>yj<oGG+gz|#R
zQNcqi5P>R<b1x@32U1lX!tt^LAQZsRGcVhRrzB<kAG@dFl56TrS<<66|CD!0(J2Ge
z^G;ovA3;vj6H?Bgv}Z2JA#Rg<>#~&uD5{$qU{;7aEfqC7v;c(d9=?b0YUi^gp8Q^y
z`0%-y{L&#ktqtLsCD-UrnRs}*KEc{D^`f*j>ZjRjhgXP(bE<i=k&*&9l(2&EnxZS@
zNK{Qu3xd#Obj0ZdVEW7S!ZzKJ=Tt$_j3z&hQ<m9JGQQq|-f^$(H>SRAj9^*Rz}OM6
z{k(_~&=`HQ_0KXenlBH$G)yV(o<8C#<1M{8hh}Hbd2x9dOgOr#d43H6-nm97Q~;LK
z9=K%+)oDuC1pb1>MTgZIe4l|70s7^1G;M`zaN&4q8pxWtt%&S4X6uA(8_U^oKOgIH
zPG&KAq=}^^WlMsU7WI5HOzKr?Iwq1T2}^^FHX=o*Yol-wvM=$`kIJe_>7|CW$bgE`
zA2h+i67sQh-(+F#CiE^R7p*s(S359o?r?Qacn*?db;Xv0r_##Q^Kg{bq3v0@fu9SN
zx&;&s@O5F9<6F#r%vRS8s6zUm`yB#X#zR{ilCgjT(nLP5b7gh{KF?^=-lKJfiGrR#
zOR~`aero^GbQfaf6Ge^(@Qj?X@w3*Qj8X}3;uy57P$_6GU$0oNH;N9Z*uYA@^erg=
z@locCpAI=DJ&3)bLtLqfKmq}mL*n>9dF`q*6R-dCEviq=A02?5Ol}l^T4Ac2A@nwW
zvKc28w_3DFMV9aGVO|>jVvGbY4t3Fo6rSF|pY&SU|690bAJ<g;Lncd)h=E??x#1Sl
z;!jik;6Bwa;c6N}Eks9gisw@LdUp1U?(_d8y}{xS4LWDV&=n8Hp(}g%;*=pHfd8+A
zQg{6A53S<p{%|zYls*jI1t=|p{(v~leS2E>gB%1`)%WiSSv@lHjW(GIA|_mAKh<@t
z%4@RwQ!JkkX+4-daEbLEz|*9Yz#qLTgITT7`xTw2ot+DqlX^Xn*;rCdS9%B7w%16i
z0AWW=$~9i=y1t9IFVfBe<TajqljJslE_+~upv0b*4v{QBJoRg?ZX&7!PX7Z`H614D
zZ~^io9N%%BLjRw(e~dc~%t;1{)5?%KGYJ2LTF=F|q8{tq(9LgV(#rvRU(v?OB4j+B
zx{@;L+QlW_(xE1pelg(DSr53>Y>YH4^YbB3x6N>(Xr_?OJ&tNJv)KkL^NM$h>ru~4
z38iR7Qy74gr{0zr2*zyQ|NFqqd>nq?l*W=F6L(czIV_KH2mZ!GLm0d=^2*VN4GYah
zL|}KRJzRSKxh9_tx^`2%L4wxseQwb%a~0P}?eWnHi^D%+dDxIs=HNz<UjvrBwar3J
z*%J#Ya%$tA*)F5a1KsntHmQ#`Ft>vpnQQ(>r19BIk*wg2NN&IXg(MaFLhWYGCa?^|
zSa?!eIO0fnwv+#+Oy(P`IovQULza$z)`f6UR$wGF!*Pi$hP%sJ#ltg*dxN>mh~T1F
z-+-sU`As8iC9MwBl6J?K-SHo%lw3jdvdu&IZpPhDxIualG|tj*#C;X7DSZ~aYX9UO
z;D|hgJb#;@2D9ajvW3SWZBSRn3|s(YL$}ns?DWG<NZT?P(UudPr>8;Ui;Gw6P8l%Y
zt+1NIXC^!mzc!<h;!(0!^U}u`2AtFe?K)`Nb5)LjTN*fnifC@83kA{JL4kD5@LK*Q
z-?^7uRMGa7qODPRHjNXovcVz~8}hD^PyfYq9zTp=5&iEUR(`jdcX%b83^v*y4~Pp4
z+q+eNMo=9p@%URqG$8kr@Yb=A&=rdqhdv<5aEQPHm@rEeJ8bjZ+nX245QA7@HBu79
zv^3>-)x~EvjpDuz$M3p_InBRkFpT6Mj@SPD6t|pA@21q75*f7Ob6{=XpX*Miqswqe
zZ?E<p&&lF5_?^Q<9lW$5qR3p)t3zT=6|OojFiAXg;KqYui9iADmJ}k-%g0{8&{|~;
zZ8ZC5G)@^qP<b7`R0jfj#KzP&T)MyB4pz}o_HUT`JbdllD^#>>wUir2&t+0pA5EW4
zE3?_2=jmh^%AZfRD7k2!ecABFH2{8ffLS4!nAUQq(@pqkV7a-vE;a#A5dB-ZNg1zJ
z8E6^}R%FMxWg+RMTpcMUbfed`@}l^uC?kWVeR$&Fjd$6zmrW#Sz>-V7`N;BjK=+*u
z<iN+DS*5y!7U+gu1i#e~7(h25Ng-(VsZ>eP&uT@XVMd0thlT0>d-4QE&IAE$Ss?>H
zsw{|U2610A2<4Y&U6qeSM96$LWPP<iXSSR35gFRJ7y>Eq%a>y>(dd5nBxcV^Bayw)
z^uRCFg{3c|pYW(w)ek6G4&vjGnL;NBG`Sa;6obg|>~OaR{EPs!_&=a`{w_jyTD}rs
z3p~y{a`32oYpjLo17O5kdFK&wbP8s~{A9{dA9<5{4Dp-rtIeX!xCRFyI&7<;U#q=c
zk$kW}$%LqGt^h*L`?67?EJ{r|!Lmq_b&J#Vz!WRWVpPhlhuvHt8$BHPaLa;p8=747
z2U#2Cjnyh<<U#rK0@~OEHVNfC81R|~d0;rP(iWwB6cV>oi&JNudGyWzoYB}Y^JbYy
zfKkE{-ua9S#|a*?m0R2ar$9Ea`P&h1Z;qUIHjL9m2PdtjM@iynsTeuZx+K`6q+Ucn
zP*FEC2e1uhTBLUyD=_aVngzoEZ73m1J$8})9Az&l`5QBJ);BF=b403`@bCNRKT@rE
zbUq}wKS`;8XRqxP<0r&!8-rrFrTB?d_{bA!nFzl14jrM@Me}`INZiLruZ39kEmPp?
zol-;r<4Gshm;BCf|F$qcAx#{NU1D+)l_<52FKGgjKo2FTkt+F37HtpWoIb$7)GTL!
zCb3`_RH>i)l?OmB5oJuDH0EvpsCVNot>QcaieE}<1+_KC`+R8f)50pRc;@xysz%z^
zN{u2e3rq??3tBd_#GeFGgwPCf?4&|12I|aRbzO;8qabm;NnA<~oPRDNXm@(AiftwD
z*mOtboB|)IaKk9NBsbiwhiMr$n4dyj3yKe-tb}4aL=r-S(`Ob~0CqfAdvy2xzx-Kj
zLP+^}`i@|dO7EoytJ6jOgSnkDf7B1a-X%^jD_3m_gFYA>l*di67tctoWkpEuh4Qf+
zn!FhfA5w09g+L3S6a}p97P+UZHvalkp#ePmst9$*7=Gr%OM9k0J;ig6vAaK7sFk_v
zis)(8RCQfdi9KHh0_%-xbsy?}n&PE;*`WdISs}Pm59dgU^ukB+_(L#y|8J9hBjVh_
z6%<A-6Z>V-;eoSZ%B#hB;wz8Elu9mqx;YAM6#-Q8!ngS6$TZpvjulG5Tie?*CMg25
z(Xu=0X-UF%v|_go=8(>J8mfU1sFEOmennJBN}?|u=1>}Urkv{@M(h7mc6NU<o^@@G
zlH`o&&ZU~>)^@{t7ruqcJ1OVDOOt2h&e|fpM@&1kk~00s(+|pCPKciFEK{pKp9&bk
z!zMpx@DM_tAJ&Qonr>rr3^TFp(#1t83z*)atFoea0zSx%G1?Z_r|@Ignp00lW7J^a
z`0vJY1Q{Aqpy3f1p+^x7x9MG0c}uE@6C@_s2vTbtKU+1m7bi)T7iizn>Np^CF{N#z
zyG!ML_BG-*(>0vTa@!)CNMO3gOa(a8lP@+0MZ~-zy*dL#R@)W>p;5D^CG4bx`wGPe
zt)1YsIG?iuIk~wD-ZcP(aV!sJ?sNOg0(){t_Km(siBbv8D@L}?`QGdifHW!=TNE{2
zvKPOnT<jm_3vAHyWl^BKjZ6>V*)tMSu_+>A>8W{Ai7Y~->zyC?LT48MVMSxc3Z?_#
zi3BH<)GEI^UQl<l_Ml6WKJEhYH-hM}g!9++MzA~_n}AA_$U|wcU<@c87o)%|_oT6u
zj00JbtQB=yP$1TK-a@a%^s5f#m^q1ZOtE6s{ua%4Cb<1-3tl?P$mel=V&E6E2WDPB
zwuSmm?FUMM&_LdJM<eMJW4D~5DHTy9PR4i0)K!if$#`#^$H8wea7w!Z@tSmF{&c0B
zdV^Zi;Xo^@b{fZZelBxgg!nvlv?FqN&;BIthk(tvVi?;>4lK5o@M#~q^Gd<2oU{SR
z&M0=8hhn`4Yy-W-Z0s3&BdAWRV8=JX*`|Tw@({+qNDD*mBIhGIAt9ixeSX{pQ@4=<
z>6*0U`Oa)mg@v<`^EFZBzi_yQx6wQ9?n;RWwwt7%>=52h=YlKVI8L4}*9BiJLm}C6
zUd(sS$OSR;qX4pvqZqg^GbdxX>T{mvX`v6m>;^T0i`iMJ9aGNUp}7ZFCJ`h#{Szg$
zWww#LgzquG{gPmQg#!wVpb_ylaC$zCu@+^AX%EP$X@t}bc-`3#G#j%09xdO1-<5!4
zT=&%s0nkSk=YV@cBjS7Y5>;2!kCjFVwi-1=u~pamPB<{T(QqA`Dm|jCseiqA3*St1
z;hZxS-1)=eS~6cdr5!`TPotH55$gXf%7*CJ*NmhSa8#m8Q^Nc8ydpMR$iaGP?2CmI
z`}j3>1vk#|Tk^tvRvcx(IMeUR=S7y{e}mO_FQpAC{yhtbBaLXJlAEncMa!znb^{w-
zkD~P9DS$2`!Q6vft^jrWJ}*jMp3*t*SX*MU?3VPGFRrI>k{zVccF2;auZ$%QxGI!?
zf7B(#>w?QBRoXG@@>lG7$cjlSlH{@6tc2Hzpc0SiFi-o{mKS6o02&J4{sLx#r}n63
zju^0x;t4;5RwX2hPNrjM-`8awJum>I_0zu={6f#C4?WRf9otsA<$Qj0&G}VzrndOr
z)2%^CMoJmUA>ChrEB4opA5118`${Sed<nq6bb2F7K^;QVU)#n<Mp+-MQyyxSY<hBF
zX<XEdh1c^{ymQ$hrc|eJ*fBp-Tgig;DTLYBUMy+uVPo>U3NMhc{A$Jp_L#|$fqfY$
zd?9rXul=IODDTqkgbl}GXwb3@ikzidZF{NGTg6^x^=`5=8o=kw&-68k?#fwD#paB$
z^;Qvn1~B8np^r3P9~4lfe7n#Cgi%RaOA10UI;ZLuwiHKEQF5UP=`WH><dTtIbZf0q
z(eOksc6J4#$RaF|DzLkCN@z{8M^^B~4if{NEBQiQX_N#6v2T+0cLk$n`V<p(6n2hZ
zyJq1TT+lwGGlfqbX!Ajh$)PIsp_@VWt<r1jl(oBmvT82V-$~sRdG-I)42sUpxV_L^
zdc@~SK>o@qT>~xl%lM=GNRXzf)hVGKjO^E(#^V}vm^C2%nvTUQ;rm-7xUc!8BL%A!
ztefx{NdT!CEEHZmFsbkdbDu32x%WdfthnPgn)vs7!%eU4ssN@rbBG949ghL*4@u{B
z=EA)9xQe5}%M=F%4oYw0#(|oX=-jjNKV5~@Cx;wj&PYon6siu)<FvngwvanYM~S2!
zC)nUUd3R_+><DC3ca9A|<4%30ms1r3^aiCh;LVk`Ukr{~F9<u{s3VY;S<Q+9)u(D|
zMVDe31L>H2Iq*yK7yR-zq$+!6^sSW!g;7>)tYeVA?$ro<RRk)@pIh@?W?Rhp3n^ve
z%Wf{X#$=(I#CRQ+Kd~M2Iz2i^>9JF_Aa}7|gps)Aft#$e@jPSeJNb9}(|iWs<NuPi
zii#<(tw8-;pme_jvRtxs)G3o57;hKeMErxRN%BrKsUSlZuQDo?w-S-yHni9k$lhG4
z_3PM83I_9CuOy`Uz}t?RyS_6qA<E{7v5z0mp~w&T6j@~`nf|w6;yW}i01dRjog)Xa
zXUoGqkw$xU?dn(60y@3pCz3Z-BZLtv&cb@$ifleh9k-q7;M}h<e3zurP>$^gi>y%&
z>T<UlYke%JCVDrz$yRUh06xr#%OO6xU`je3tMVPf%;qo%GZ;k+VNyAL382?n5Hx$?
zCqy4>1aZ!>sdwjFZ@<GsTFvgqgG>V<SpLq;*`mQ?0%G$utx<2&D0v)gOReIO#A#w%
z+yq}fh}ToZU6U{$V|khtw7fbKU`tecgyz0i83FnRP(69lK8&<}d#zhmTYZBz1bvpn
z4PNFx-cNsa#J}J$a<IpyF;R^MF-2LGDsyGJdfqIbZ28qoZOhj9baO^6_)F!r_4kdD
z(BH$Jht?wkW`Y8N!X}o(wqU`hpQ+M!?9}`9k=SbfPKqieiuU7ghxAk{&Bbvnrlp6F
zJ3tTf=un{XoM$0F1wbHy_xf3mIH_{+x<wNrQIHXjch^lnyc(HAaa>pI9nbJWM|3&_
zWQ$i#If7IB(Q=>Kh8H%t>62S)l3qHPcPU(e0*;H@S>`zqKc~*zJc3{fK9#R5>}apJ
zuE=dGJ3ZI>hID45v+jGVfnW}lv8uxhIVjaCmz%Sv5!YAPyg8|n@D?+&Bc;O*NVy~9
zFN`B`V&($b1}5n9U=o;CGdxzq9MZ(A<iLPZ@H>UD9T4G{WdWLLdG={92klJ`g591g
zxXgVf<vc67myFPR^u$5P%V*gJ;?jVPT3ltR=;zsYKlrL0gSD>^d|pm4Fm)G)AV%U3
z!K?4kc_Ej?zUYm&yj;m)p;o3k_tUQzE^ECU8%)RX^iooMiIJ`Oq=<7PmmGcFhxPVA
z4}srGmZRgx)@j2ftcNt!LV4}afnJ?N4AyFTdvlp73;-ppCIcxqj5yKx?`?54Z*sK3
zFPQ$+k5}2H^l}RWR0q}%_#j5QWa^r-tkf91@fN-DyJ9WfB9#1Jm!FI4|F-A$B1R3J
zs$k2IU}n=2!|(3hL-E*wS`*m_rPz>*s;2_X!$pMh^z4t~_LoRAou{^V0@;tEI}?+i
zajvguaZZGZ?z24AX)U-MlDnK-v#asHG_PGOJHy-vq*=v~GI0tkYn)(Eku&w3^uTSs
z4VTdxCu~w#wHS!MY{!~Duz^j7Hipy9VV)R%(W`z*hWI=g!<a1^I@R%M3ciYY_sO9_
zF#totZFFj{cNCtuA5Puo8iSAWz}r-E^+oby7u$1CwZ6XxG~xgo{x9=dXcUNevA}yG
z8EfPNEwi+x^LIC3L5K8F?NIpcdm-m~WYh~wfM>U^?B)y6+Y+YiW$|U;I}32pw^jmu
z%ziBn+NXWuwV5+eMrS3?*5`cl!La6hFH^1T#y|I!Rr=KY@z!<{jD$Gs_ie*YN7X|-
zz+3A*X3<~PG{!pTW|p?!`zF6~;cUgs2?n|f7sS2M=bYccDy~}C+@?}-eO-dw5m3C5
zwK20fbEPsXGjw!&UyGay^BkpwJl`L_g}W}6g#6<hEXZ(SHZYpe(u6;S7nuPwql|eK
zj{h!cwl!d&jb<(wRmHNfD_fj8)vnoiBb`$<v9H(rhx~Or%GJbW#J9@U$rm?U`)uHZ
zdLKuKF=C>yeYKdRnZ|_frK5dMiK%RPL?je40n4_UNF&z2nY8>qagk^MrH-u5L|Q+<
zPT49f+wI?o(>VAZ2$Jxe1JIaIO|WAGNGikfOgtx%ZvTuTJ2KAImgT1!WapL?7&DIV
z0`*E<+(hQy=W;C+0~lE%*4f9g|4UC6yEW~d3u4>>g^>aLUpQDrL(!;r5<7`c^Gq_q
z3kPY!wz`5pL-Ht$nd6aG4(kypz<ew=#+UiK{z$m7OzdPAWfJU7m{(#~UzUoYr{`j=
zw4zt-OKH(@O5^1pk{9gQ$=GIbMYR=3ge~&N@Yc_}?Cn#-w8fGVR+vlazV`b8_7~t3
zcxhWs5r-^X$;oc<7K0*D@->slgCCV+PLvM~^&o9~q8>#4%L_IfH98RtSYOgjka@L$
zu;TrZh*V<A^3N2R_M!Z_uNef9l>!OCJ}wdc=y;O-c?)Y_v<+<dr<ym^Cb+5TX+3}u
zedx8C%v$I7O}7+4Ub@1%Eti8^qrTcpo9VZqJ>J|ZH&>02I>c)SK_I}s=2Bbbe}uq=
z%4`~u<14g-L8gG~_JD)nq<eo>k##lXtfyD@G0J+OQy(x{cQMss3F<4nYiK7dccwbb
zp5j1X!-miY>`GQyZK1uRTB?B*m{}be5~NdJpo_EvK-qYvpfsMBN$bAcePO^YH9OkZ
z$?CThhnCk4@*V-ZnOYrb5`-bS^cGVq!<}((io{Q9*=YrU4pjCTiI#y+lf3<m6Bv(u
zK<rG><fh$KV6_)<SU|5}%OD>jnY1M{FyI_LIdA50pAS{}ty!27+`2ie^Ndc}#TFbP
zGnQ%fNo^+XLN?<NDB9c&9e^K&O!)j&RJ^}Y)wE1hp`d7+Lx97B<4m)O@*Zcg9ja6?
zq!a-T4&(i?)pP)J*5Juny-soaDEv6f_o2;RuBn5MKs|;dRhMV|SlCctRuKJ@1A|#!
zSpzDEoLndn18`HKt<K`vfmt^4=u#Vm2#*zg-i#)0kE8ln@ulm<jfMzn7sVoG|M`xQ
z1Ci7trLutLzzRVOf=9ea4Tlv-9mbr~&OIf;{S3MHboeb={NOIi=<2%@vnw!)HFMnM
z&advVvQ&y-wG3T8Rd5Qsni<nTgt@x>tx?D1`C6=U+$=%h49q4(O1(j6T_~+#au)|g
z+i*3eakj$6g@n4PHe#Ze@s6sT2%Q^iF5tBO%pIxJT)nLp{zd*U15D{Iv#Q`|CUN&0
z@wq3r@3P7e@{$XO6x><f+_%q&vAb^UYD3(3XaCwd^5eB%+m0U!KXDpp`6rI)k?OCi
zHY|Hht86fe##jESmVl5h4qr!n2Y{q~|M;7ZR|)gH`PO$U-4k&K$*-!AIE_~SiVMKq
z6zlyAr;ySMjR~_=0X(bD%QI#G{6@rv5F{3<I*f514ASy(*ipA@NUjvgb%!4&-UqJ2
zb<aQA<!*@>?#%k%^6{v=w!~x-e17f0suomvUzf%@;4zq(ma7jTl635^5e?$Q@1K?F
zF~!V~nTu0QWX#k`_*jpPWoGVRFTPn3MFJV)9I)n;JHUtXeFgP#IjZtMEiEk2LrQME
zgy0x2gK^|C^QLXCBk_TIZB;t=bW8+<K-B2-$t=Jo;zn)Gn-b_SNhC&+cY4LZg}p{>
zgX(U&KiC|<Rnng|<kyY6H}}t<7a6563i`fLi5P<bP?_LHch}Iwv!fuUqP=rT+b-U-
z<L{UELCHuFoTXFwW8B9s697zo5~i>bM}$hzrtCQsF!Eqi`0K*|9!G>49fJc2;|q4U
zKWxE7Aaqj{UDxz|dtsgpX+_3wtbL-ok3~HP_khHoC?tdNHb<9)*aL?fE6<nXSd~xH
zZ(y9}J_pxmqK8;Y->jMC{EFLMUlnNtoY#*cU*#z!YB2q&@b>k4+0<m6VS$$qM0{p=
z+oF>#ZtZTBXpNM8YSm)&GH6JwfT-v}m{*`bZ9QI8x-vIv(wbZJrsuu>VdUYvJ_^aL
zeS6gIKl=WTUt2~<-AI9bNoHYANUYPJJ~R40r<Der9ie=waaWqZD9wyRiz?IA49*L9
z>KbDediE0I#!p-b@uj#b#y-Y~%p#C?=NMFz#~oZVKn5kP#huqWQzq69Ff5}Q-Ip!P
z7gaWzjMr!5u@T=0Nsnr6F<K3qDVl;)3KV`a>yRyBOZB{IZU(-0C_rOAlC9q1Ol1X@
zbo(#qc1}M>EJx83Y)y#irPL?)%LnNq#hHwKUNotW1hNOZZ#JXnrqkO?E}pMl>T{k@
zHsg&NDB>5wy;nsI`?X1G)%B^EF14=Z`C>EF-7+c2_3i0?YTCoV`3hje<3d-&S)!zN
zh=)v<TOc~BFHw><Z;0fi8cip!UVVM3s~s62KI@&a4PVO&G}&_xk?VzACkCD7vR1ru
zPJO`}mv2;AJiA?8VH|c3o66H_omXeDt#-^s9Dvtl-#6FFM5ZfeNBeok2SSrzNxWO@
z4w#*DSqc!ZIxB}N%yANFiek9ffJMZiSelik)Ove9=Uv#7ma)I-`cR<a8`LXv?xNcm
zk~bEF;p|W2Z$ly9jJh2x)DqnE!LGDZ;CX&u2EHozEio(bV8o$uOU=@u&gvZ^nck^e
z?OPk1DsJ+&wZ)grcBSF(SBZJOzljSd17>`7>z?%2g|PiuSI#=d%Q!x!ai<+krjzu=
z7j5Z@&7V;;J=obBiU|iU{jy#Xzlv>#3QK<Ul{%hDiiPbFw&JhvVOJQ(iQVr)Aq?gG
zXfL~Uwg@uKD5pFqF>}W1`i`#j#QyM)-0_8M3$HV)8MPJ?Q4$dKr=6WHVn)pdNyKYD
zH9Oi&r2H8zixNutue!u%uM;DmhD?rv0#t0wPhH_dKKFuS64AMLrf@zf(57(vgb8Y*
zS-)e?#<)WvF{LT~SjqPX77O65^=f&gJo7x-;A%4V_joNa7!7gw8(VOb_`%2#r*`f^
zCQ{K5L#GFEw=`suoU{M4p|eN3*ymnsXH{GyH-DMs75`^ShhH06KT$cD26f>Ak-lbT
zG+(L%tzH=$1EN-l|8wVbvr2alwvU?luZD|)HcVJlEUE{raskub$0^{kO`~=5Qk_z}
zed9IjimQvYETH>xSHyImwJqx-rZYf-xqnELJ5EI>O?<v00n2BWAz80P-;|0V)dNfP
z4hKV^d{S1;O|USjkpEe>^TsyEtb_BJhw9~CqdjW9sr*8l!v@@Eb#HfNGODFf!?Lkn
zp44dGC*HzE2t>u^Emw-RO1PKPa=MCE{sH?JLkbeOpz+|Kt%tP2Lt$|zRB=qLXE2u^
z3VzEwdi|SN0qHrD<iwO2km=4#gwe64M{To(7X$au7A~Lq_i$i1`xUM>yq_gviw#TS
z$m7HB$@27~GybkhEZ<?u^XbqOKj*TTpP67=%LOf)Z?6|mt2mS|ZPchp6X7KGHg=HA
z8Qk*NR+c2IgruGz2xfc*eIe!5ti%=x4$Dt(>Goie_4qF=TUtJ_TCv>xg_T0d^{!;K
zti{Q8!VsW<O3gx@Z8-C|z+;2S&@Be<Wzgssz-Y28bQ&t)_!1hj+0#?;#9K4`wD@uG
zfOysHoh^J?4UUYr*hqWHBXGxGRa{~Q4(40gCzDT!<j-gNtjX77?XpGD_)xNP){&Sp
zvVKnZ5YrNml?Lt#CT`_&rGg)AS_Gx>6ye^F_=2L`6jvsPbv>trMVi~8HMTKFd2pPp
z=EX)2oyWbR7r?iiYZj#IzRm?A2omj*JCg%wLoC`0kof3h4M>+t_5!e6VtO;I_4uew
zr@1pdvWz(MC0FQ!282^Tf+qFPTXDWfO&9-u^{WIqnMeFg<|l}oH6!68F>LZfq;LdL
zGYO^UXHsA)D9{gq8GJuG?nK2XCfF_+4w|H0-+kG+Cud#~sVz+VTUhYDpv&8Sdlkpo
zF52YP!}8$1r+s=NT|EC`=QZdOl<Y}pbRZIOTWO^QdXKa^&mapdMHYqaq`&4vMwIk_
z^y)_xIiq8&_!bbLinX7TBO_O<MzZ<;ShyUqp8={j9|+T!)^kAg(k7!d6zL*ciGuG*
z4yQ4U23IvV*4#!bLW<u<K=qzJ){pK`f>-{)_2;^s$9u(y$;9xCx6!fPoR<P?AS6IF
zm~_%tMtR{y*zSMP8`%Ri#w7BKrm%fy6a1hPKT3p_=TKKpDLuy-_@r}P5``GK`Ytz8
zs5xyj;2Q77g~e^H#fyY?xmyF?Rrh3-=i<dX#T=prIVbX}Ren0`880be6FJY35a3)7
z^A<31l4JNHaoGi%GoIh;8H}wC<biu^ku%BX4V9~wDX}%Sd$&;Kz5455i3||m{epEk
zic;9?+6rC!iVnTaiQ3V2h+64VEX%I?eHhgs6Nw;dtC5vVXMxh*&4ILzLFs~wVcP!e
zv0wSbM7bpg=<^G@x2_kV<6CRN8|I~heM((K=|qs1wi8n(_DE}dpHCoaq`Cp?sTQ|Z
z_COl0@0vV#8)#h4wY-#FO@s%NU&hi>TL1C6dVKPKDqgUDL|*~BR`R#8;YU=>$AB$&
zv+l$h`<;dAFz$``1|oV4$U#D9*Ny_WM5qQR{vx{5%<KamC@k-&R~<+1QwS9g90n<Z
zp@BQXZjR(13Qd!^5h7}2NLf_&$rrIitYdRU>|PpCpVW$YlCY9V5b7BcUQ6tD`KoBP
z@wW#;2>u;K>eChFn2aT&iG<V1o+nXfQdZn43)1M)LVA89n>GW^&fn^IPjm(;SLJ+N
z9o14eM;I-W-Lzh;-De#F#Tkcgt)z?ha5*q2WeyYziN=ZO(?2UYt!a|jYsvWSe*qv0
z)4xSs$r;xo$mlFSF|l@o*&d-aQYaHgJ{Wi^TG08s>M|mub}mXx-!2h^OQfiAcoSu8
z0rVi^pmf5FlBL9<9YL3GdR2v6tq{zj7C#7i+XVZ>c{OQ>!{}Mn_;{LG*iGIle^azd
zM_-`duMFsefCO-JxH1KU+CnU;D|!F=exJaR1khE5i{KpHU}@2-j8g`zs$EN{#lo>V
zZpda_z=_)R%?0`v5eCoywD>Y@1#8`*Z6|gyrA}cfIBEBR34@1tq!{d;g7RK<eiWzG
z&E5bWQgQt_^h`6l6x(G{#`z*Cu|#=q>>3?QnnhWm^Jw31*=O6=Qdx%vk7Ul<Uqic^
zb%VVA(DT7uD5MmuNbk`{V9zO9kFwl%^D0u+Cfxh_+Njb5z=i30(F=gz&)o=Ppna0h
zD7D7le|`GaN}sfxzbcycT%lX_GB^H0L>9uhk3@T`NYX^U4m|#Onc^XF<`OPdpW-A#
zpyR*Rd6B<S2|T^*4$Y~6<IDr}@hQ_ps{1z<f{Wh*T-_+5_D8YFD^;K;g6tGumsL@Y
zwz2uC2ZhEmYdgtQ5@cK@G~sK-iTfxOtGq)B!L*O>5o-dXZSX4z?%?=#KI+5*H=N!|
zQ5`Y1Bqd7AV5_W*0svu{RBi6^Y-4nVZI!LnjRAVqGODOf%f&RSK8idUkLWZfz(Wm)
zFEpk5I4<9(eO)OA>jHLiqYiKQIsmRUcs^R53c&u*J6rx9QI9W*!64m>AdA+XdsZj5
z9~O@Z%E0x@rvsJ0tY>yUDo+q=LyBY$?x)t<60ceefqs^UAwT=t5|XhtUwz?~vB@gW
zjvslJAfkBpcA;eEOHID`#Y8YqdF$UN!vH?IrGQRF=r${#W@(FF2_J$Pf%h_j7G!l(
zfd8eQCVi&!KpP&JeiDl~TNr1$^VOCn8{~=C$?4hno@iDE*}tR6=h=Fi<ii+1VPhl+
zFQZTcQQ)Vu9*VagyHhSfXLsD2zhu=Obs@HlTD+uZpJ~Y?iA}YiNgu1ag@p*rmB&<P
zclSavQr_^=^PJBo-ltqdtkAgRtFWm;M)!pZxYKe7!uMcEk?$rYlTCRtUseVJUXH$x
z3skI9YhDYYJ?k1K(-e^;TB1j($gI8*(iyBu3VraNi?o*@yV~4m)LY>?wz*`tksi}X
zt9PpF&Hv{?i+Dd%_n4e(<9^jh$%NTmpa#D+7B9tiup~(ho$e&km#6<JyhqMK3C>?p
zg8R_$W6l1<p{_`o$Dgam5fRVS$}U@c3Bq6qW^6%p1ZdairSY{SF0Xvw4%pILsTtzw
zNKjuzVn7Rhf}yLxW04c+S*otuvD{<dHUP{x@wh*`a)=>?^~Nh_yQ{ac(*AVb=^a!X
zj#|kw0w){M7u?U`dj2N1#BP;a4!@WqRZCty)ey_{!&`WnI(`|>k6LDJTYvCa`>nE0
zH|%2Xmfa;(0)HOa?>ZLDx?Ikizf=R%2%uJX&WK7W_D+L!zhEMGPg)ykh*iF3J;g?6
zLi6{qjy0=WR>?f0+*sigLv~F9;;@0(O>W}}y`lcp*4A>p20)FCV>ln!cJ$O@Zr!JJ
zQ4U+z@E#-ajCoj@(Ba_bZBqat;`fU8Zm0MBxxbT0rY$!tU%_CdmTtS&jyWsCqBQ0@
zSLz(I1)LteKEu)HEhqWVaSIF)#^J{;OlS188w4>Iz_316JWFq}V?QVnp#r7dLWX*I
z1j_Bx19O-V=avFLYTVMRqGrVglNe`os(Wd3+<h3a%$PR+=m)`<;5}2g#wBKxy!u_E
z{#cmh*le$ybdCp{@kH#tTVs99Hk$#Q0gKF^i?=X6O!q1oxaDL%xn|Ged5hdMt<@Mn
zD&_r(z)Cny%n_^OSK$6E+Tv^E-ZGbrq-|@orncDF^;PF@@yD0g2@YBmY!bG>-ME}i
zNwT_y0u|;tLWvD(9`u2%cTmHtWyLnVLua(r5*u-=lCo|@TogULUrV7{4&=LR-*Wm!
zPX@20!~2#O$J;tAY;Ee)>fWwX3<QKPEC2-olo9z#TS+@&S{#P;kA#MO&ogv}j>siJ
zz2ENQYFV6qSr>MQWZx8f8TEiVMZomUF7SA_n;;66f}!NeD}fXpLI9M_#nxw2nExpM
zxg=`#Bh2wwf(|+Sd6UQ<;f662*Z*AR!8WCwZq81%{~Sh%qcWun#o#9Pl1PcaZt}QP
z*sM?1vN?7uRwBiLGx0L8c0<Z@+P?0rA1L2*v8muM^+?dQ?>U>rb}SS_uz;Ir(XVZn
z6P+^Dh}pw_@KgE21*-by3+NbRC=22s>PDaD#<2N;>p&yp9^dt>ODTeQA^Uxy=2r0r
zKVttut{{c+l+UnFPlHbS*lyv0$>)8-G1-7K;2#ZfU>j(fa@&e-t}B|h%-v4TUSDa=
zls{gpRM^*oMGqwG@+UEmt|_B%H0(4na52ndT#K;B%AH&P)6bpN+d!Q_e<wniC2x4;
zl5ws7D##_3-}J7`>kc2<HF0ceyDhjN8}y(nR(V}kKMZm_W_fbeqU|`D;Gy0}g`>*D
z+;6x?zO|3%jX3_;No*6>_}`&qEgMRYMtgSC-Q<ON$Nt_%4I?OS#(A>w$d^9M<w$=o
z%3Jm=;nu<M+vaVr)-J+$en@TN^@uZndzEGJoy#kQIMsx5<?N`lmG>)o-YJ|aFZI{D
zlPjUHHRI~b6Q+@F`Emhxp@*i|8^O`&ccF(c)Psh%mVcqAE4665u}!R8Db^F4)m%LS
z+b-u>(Qo3plA^1Z@|za8uw`Q`wc83lrmLbm{XH%Ajp@Gp(lF4?$6p@N#1uX-*tZix
zLk_qR-$1AbIy)A<#Q#tqLC(=ibU~eq6mS7hnAQMIuQEY8h4yMz$z(XR^zB#s?4yDB
z@cBf-L(tibJOt`@x{vLh96)!X6uX&(RcZT>vP5$P0wPAmkNDb1uy99n7YV92ZjU3O
zpxqjWd`<EJ5ftAz%z0V>GPkev-8xe)|Lhb5o}n1`qRAM;K^_HeNhH!TQ303L^NFSu
z-me=vfPK3tS{zWA-r5hO#nP-Z`2!TuR{5es>0jnEpdDm=(?jy)(5+T=37s5un|Zb!
z)`3_6u({6biq;d*)BL@q30)wDR*#;OaIaZQ?_Z3po=QDWI6pVcb8AJn84D^@wOZ<4
zZ=9dgg$h#x8X}zD%a%QnEzie3>uqdD=k@Oye8VVx=Scxb>z~jONZu8d@ORJ!Z;(fY
zb?27%0nN@jBvRN4cSSkg8bSlF<_8Yu3!~9mYWf3T=6^W1t`zR>cXKgtPh0kliEoc{
z+Li>Hey@GSNNJ@B68V|EYt(iCYUB+mVy<I3Lm5eju8wEIor2qTl-=W=^f%o_LI=dc
z?4ZIP%)?qmGT{@n_%}#X1$vF54NVh0twUj@OhJjEd0)D(=D=ft3N}qX-<s9jtx5W_
zafK0%AM#+Brd?P8F%|U68r__yiadNWW)Ef{?Ic*>VaLe|G!WGwkLHv@KLwM2sjoMB
zc3#D+XXg0JGwf5^@r$A&pPwrmFtkT^M8#nz9$e7YEfnrg$368g?xY8e8JnWXw5|H4
z<_8_K`2)9NTxYySTFYb*(r?@ew)|p)OdP04i|0qh7stVcZNlO~ey1t9$U}X5O2%X0
z4%rz0?Y9t(#5sQEcv|9aB(~M!NtsSV^a11@PmL;4dX{OOYq@!G1yVn;t8c%?>|QoT
z1J=SB;wlg+_IyN9^2Qt93fyQ{(WUbkb(gV#i$~hQO@1PdGrtWtVCQGKv@ekLVe(!l
z4r7(gIkS3efZ@LX0l6cHPm5{fy=gr#i8+*auss+>?3i^n|H`#l@i|>q*^{Jxq!El)
z87%gFuxt4wRFFAXZxX%45-w=AIPAJHZB;qsxP>#OOyb;*kTbWmJS9i=9Qf*R<9rPf
z<f84mYg7LGPh;)J;>+xd*=ExDhJp1a2H0quQo@jd&r`*-oU?U$hL;P;fbuHtm7=S7
z#fqGm<qF*DyWWUZxcRTTJIeWhIb#Ao%%kXTd{n-^@r-zR2<$}9;$bIjOQ@`w`=|WO
z(J<Hp$S?XZnt9i@jHBjJTMPXRmR~I72<$TVvW{$$_Mt>xE5W2h>1@iw7y2pYL;RZR
zC@KoEbO(C$6CTYY$OFsI>4B=lr@sW^MPa_)V|5L~I&vnOU?paz0Y$5!-q|q)l9xpC
z)_`@^xliP>S7!3H5c(%#b&^$eT6J%VU1h%SkQi*1D>-wS)jao#iAHrcKb7KMr3Bkg
z%8fEFu`&*nUqRHDUy<dxw)=#eE8pFqy{mKBoUF+BxMYhhP4QW+Mk`Z1(wwL!)Y=F%
z0?k>_MNAA2E#z&KtslYgmfDsYxF(%{a0xko=V8?-3R|*n@rF64>2Ip0!J|qHlQdyV
zbV0Q7B=TR?Q%x4vo+yTtn$1&2aR8b8F7oGTI_#60CItP;z8u83omDbAC{Ya^3?_xD
znKHwQ12heE(|dmkjwYbTdIWbr^lpOUiB4MmG{=ZOn9S?T&%e>N+wbcm!IC3qOiW2M
zcr}vURNt7tr8dHG`$5~9W<dqh3cG)}wz;arPE(6x$g_ATzq4}Np{G~ZWV1=|&M%a-
zn{=1IO3}$J=FWu!ERS{o6-#O$g>#q7oi$Ce8CTIT#K$aDHj)f40I$rM60e3uC;sRH
zoMh>oAb&?mcK>SCW2s!MPzZm}y0pJ@U-5<$>QIpZ-_VF#4yO2%o+l(kXPaZ!_tbe;
zhfYFa7d80wV9c5};xxGFz})a8I&$8Uo>`IB)kV_lZI}p0mVmUmIg5@V-~CCo1z;H<
zUSdju-s4!Z3A#6FT!INcM8R*Wjiww`yV6l`I>VYI*FD&}<e|QPhEZ0(@D=IRKmL$D
zwCjCl3of$dav}Fz6&U`VSy9*pZVYaXqV=#7dKH*4yRMuAw_VqG{-t&YPywx`cK%te
z@@wJ>wls?n8v!%YSX#mlG@Q4(hV)fyOq$g&$4Uazg{Sdey{4p_z0P+V2&-Ek6BO&r
zUV*)i=yH8$m|Vt)NHVX4jwGLxH}X@x#-1IpBZkTE_vWs)J_NTO$i@0({*>Ywlph>4
zcOWQ=B9*We9LHjH;Wd$r%DxyU^P|fS1==%I-IssW_=S}K3fZezCjwp?r~GGncUG9f
z5ae$XP<4eFec6txP@Uxf$kcsr(avB)hv_fwFzgVW@XX%Sm8tUYG`v7*ko8Y&O5_ks
z3P3sgd^ijc7PVmhY;OV{059u6_BhrkT?oDp7R)9#7sV64n~P0GJHVn?V*0db_Hwv;
zX#<~HTeVC0X{!wjJT_cBB_CZ0`pjI9<>)?`m>!;^S($roU|T5Rn$RPZF_BfOpaWUB
z@`>b5Rv4?jeG_Z*s9DvGCxlg$oqfxSTAm1RZ5`iFXMKG07q>AE9jk)HcDSa8RE7&H
z$#TbPX%uPIlxwau?;&sXCQAtes^Fu@E<4mA-(i_#!VN&sg#!Nau}-Qe>$qr6J2lZz
zg+DQPv^+SoI5cLpSNz6qk2P5mFT!YBt3z`11x>@M5INt5Q{|_Pe8P9D_kT7nnuC>8
z%Z`V0@zplbaWfl4W0>jCHYSylh+ka~Z5h-!3o6_0pOWU<9VEWJdJ1iPKtzcm6^eow
zE`=@-s~N}-u9lm1>K2V*j;fXlY4T6uNkJ3n%}u*V5kRg1kk;Xu>uN;%F51&Lh<RlK
zTSxerNnv)a>@|0Z=(D^_x-3^nFY|u+zJ4H=5v4Jc=wA~tnwVOdfXTx*YnTQM)Q@EN
z%?i6+b?y{a@u=B6pGaO0^XpTUCWf1Q1k?&%5lE)?<a|q@rw>(Jp^DtrYd~2rC7S-&
zYztx5!abNwd??+agI1;pjso0!r$?&rj9!Z0RiO=pTkmrsd_Tx##G;l&RI^`$zHXqg
zgr;d~pbd*0ZT|}}Oxu*wi%PBdkFywd1_`C#%_Y@&NO!peGNvgnN4Ak5@{{TrSox2$
z?hoN>Ah+L&A`I=R=}BncnHTp>e-WHvE&ruNe1QUAz??W@o6rCm_G`U#A?iW#!B&kV
z;E!M`=(e*QX408IMbumy+K~4io#Sa^0%rqGC;WwbmvW!sP2bkqYC&<M{8_f4D1!jH
z8^>k9{D(r^9u{W2d8$=zz?c+qJ@vxb_4nZNKcdP~Qe_XVa!r|dMBGLG$wS#toLUMo
zM?+J?f^pz~n_3FAhn1sNR<x(s&G8pesc(SP|5b{hU}#y^=x$<tbzf$<*P()riDf)z
z-(Z$HR?;As6(9zV+HYlI%3d+5Y<btSENd0~V2VqO*%2n1Hqd4g7)0!3T!~83K#Be)
z5&L;^u^A^#Jw-Po>iXB<Hz2ie_Fx7QiocuLo!xO-dg@(dXUyqw5hd<(wGGUv8zm6)
zAV@@R-c{>j3gE#WZmtIQa%q#Xs?IPCm)(b0ZAp9UVlerDQN8(GArFoQh`730JuYGG
z9fw=<WByd7U|^Dm(1@50x5ed3Z>--+m(Wym-=9$Ar%({%D5|yCnA3&;^enS_gQCR&
zr|NOGM``i%7<Au{z>@}d$J3`oA80wItcdG~AT&8050ZyhN>6t6=n=$l=5xic%WFko
zGk;JPEa>_(Gyw~<4xqVZB0YUte0M3ZCb=WYjvZ!;BGRK1=jQ+k6am1MN3n3`v+_#K
zfCZ+@t4f$$so%$v6P)am7+7*z_9fg>;8~HUe8zHd=DZ}8+tmR6ul3`@l?{49E$@4F
zK~Yc<N3x>MkeA80TF*PAYg0DjbqM_G!Bb{lB54r}_c7ZJM1F)up0VGnZ#3qK2O1C~
zNO)YflAz~*OjvB;G`?XiAMA`aDrX6wl(z^{VWT1lr-ZsvF>>lS`yD}hK+eR&;1d!>
zCr_`z`!5r6K_n;1#~fBw-NM}0EI%9U5x0f$lulZK**oo_kJtnq`l1RRQmup_5Z$V#
zI4s*X2lS`Y4QhITHQaySC(I|K^3X@qj6>50<*$!J6QiRa*Jr8XFwRkj4HxKuc24&h
z0o~^XWg+8^nE0z~1)GuPi&Jqewc=e5DKzQ$Dpn=r>cFG`_(+$!|L~5%&g_acC9r?x
z`I`Iy-+<ln2uWqVKw6j};V<25*9AA=nVUDWdXvWQwxWs6cZTlSa#+yJC;jkpqrlO+
zvc1Z@KMW!ayz+d1+Y*6TeQVO@R(gcYoZWm_@R$DJ5b&SsMJB(a7D^q?5_d0oj%!Z&
zKzhANa_1za%RcMhWn*b2LAHB-SHU1V7yZ=Zu~|c|xW=p2c(8g@*KW?Ww7ApJE2@Z?
zvlq{_u^-ecbg}sZi<mY3j#QhFPWREZ{=>TpNd@s=Hgkx3dy30kevj|hNUh*e8^>#g
z6W4q8sj<N6KB30uR`qYep-w7)tR|oCU&EyI+AjRXVZ7w8&_2Z3*k|GlmnCHo2;eTJ
zQ>g80<lpD+-C$*QK7xOIm(h^c1i4W!@1DY>0Y=^&Cdr4cDfn<S=dUszk3sMZMiQw8
zA?}!v=1R<9+Heo=cDsmad`+)7A`yJu{pgV$yEm-nISW5M;~~u&Ye*&%xAD<{mx+Hv
zi%5qofYqxk6q*zyUj#vpN9noWD;M=_J1t;;y?;i_gE_j@B<Z~KMvm;LpQZSFZcXcb
z>C|Ll^S9I|MjYd;vp_+#aa|M3&W5-XS4A80bp!Eo8hFeQFlY)mZ1J)TD!;prA!jsg
zY&V@>wPf~+71idR`ATuVCfxxrZIJr>_}qv~v>K<Y`i9C#D*U2CIpb~wdXV$82(g(&
z_S1EfAa<t2H`YtKPSW~d6%F*A$xzW*hx#XY?3b>43Ad&~TIt7Y@&a(`tsV(<i(#af
z_gTe8yk4&AXf`M+0x)ILbftS>bM0BgWK{Ua$!XClEhB5}?gwnrwLqLNr&m+{MXJ;l
zlwL0?Cvq#J%GphRqxB#M8+TcCt13Ip*aZxNoqxdg_}a2zOSowKbB1v-_AFGD@Dl_T
zLb0Kymao;KU~mUzZ5<?3Rf4q4)<IvGCwm$rh6Ch=#P%}u?i7Tb6Gw>#C@j8I{Q^;F
zD`0qV_QG!BJMT7~%VB5^JZB1A_F$z2Z|XC<>?4Onk<vfY*dqSxJ{hAi|3pV=AZ))m
zP9a2NmTNcAwAaotGKc?IAw}3@G3kKrY?44Gdua1bPu9@8Rg}KsFYGi0X<u-^K)gWj
z?2(JEAd!AUpU|Q`55_uhS)b6`wG~-%fMeT1zYLD4v1WFLW`$8uysSfi4fc+V*$KnM
z76g`c#tz7l#WH)$yVhn>WSc+-|KRJJ>zFby#BKY~nU@s(YO)mp$P#I$2lp#mBo=Pf
z+>o+hV^suFV>Dh}JrDHmIvp3{{T5fQ&Hhof`L43^#~MjgOO|JUos*&?4?+maXj4mJ
z5WCejEzx|Mk6!OQ_3)+K17^saypO)d1Sgnc#l<&1_Yf_rsV`t|%Z;r(CH#nx>`sgb
zt4W%X?Jm74g^*lJ$}I;5I1+zZ?xh^%`O>*TjKLDXxB_;F=nk8*19KvfYY+gpPjN{R
z(;_ljR|)!jBC}wzvzIYI$C6JL$FvLbKPQ!q4|`fvH#i$q${D%rmLyjO6%@w5SM)4;
zT2ok107^i$zq;7^D*qg%{1=|k4d<;~gOCFGW9d?%?Ii~dh1nMP=inwgETT4j;Z7ON
zs6M=R=i$bSNLQM(qH(u(3p73_@N0n@oWY=rtxdw&IvAz(8ghy<?5h-DfjgT3%`dgm
z?Wz;ggQ3XZNg7O1)wM+-PoCb%SB#j95_*DfLqU6LA~(|hSVE*$bqUxpt97~Qv^V*e
zEaVF2=)O!q3e`tp?qrj(Pg1W*0}w+$08~q+Z^Fd%DnPx627V}Juwn0?$)9%3b(}?8
z5!lF(hvB&S&Pe@}e5!(bP?6M3)7J4)HVLyOZjVyX1#8$4tKR9YVqY2VgO7nW(u&KY
znR8Y3JYWqks9466H#g~r6%?H5u`;_Z)qDW3$kj;CJNC3OhOE0M(>Q3G6BQU^_Smc9
z%8kM^pdTFNDE<jIk980-%}ip{A5r**lTKp8v4cEVzv<s7o37bl;;;x;lWp!|ed#73
zM|*bk#8Pi&3|x~Zi~Tby^{BJof!ohS$c5J94hfmu@AbRu+bo@avnh!pWWTIh$-*J9
z86|KM-o%5h%?p78p#g*K_Gu!T=3&TTdx|;ckECL?l4}`O?BqTxDX14l|1}(Y4Sm|>
zKJ0hd;wdhHrBGyBDNSE>_tLO~&`6RL&k$gga6J`d(G3mp#o82qS%3H??wJFu@~zCs
zd2~qEF7BT8(->X-r$zi-voRrJ<8BEuNh+Ew*j>X%xgVTm-SotN2_k=j$h#{XxcaHP
z0sl)h)JlPS^4g5DkOGc-F%unTWdj2N0wzc?VnV<Xq#@;MS|#@NX@1Xc;brj`)mmiB
zRJ_7@R>>2lZZu5f!pyVwDV2!7Z_~<=faQd^D^Uo~zZ4{^ydOu(Qh02nzIt$ecS6}|
zNDup4aql0OMt$<;ta(bVE^Z=|3)T7Y89kgwxuhdsm~lj?J!Hjt=;oBmxzb~IUTRZ$
z1D|UF_C@f|%&*TS@d6fA@B*LAmX%?G?Dk$)Zxz+tjWGUKe>B%&txG+^EP>30Oo3Po
z_YRq?+LM<7DV{(DS}5R)+2@TCIaJOH6u_k)C?qh<>-%J|S~NdYMna1P7DNHOJH9G$
z4Hsn8Z?!w$upOKxRikqRbW5EiN#<O(TF2xpoeCB@`T24JgCeSsXb--br`i7fqZH3z
zy$X!KV;u7DjWaXwDU5=S)7@2Jqt<beoeuhbam--mxIFh*)3md5N!oqQz<k7m{Wz(r
z=@gU%fn9jlI$2a|4z)#>lLs6x&H6x>FK$o#??LpY=F6(ekNxW<J?+@9sY+*%UJgbV
zH0dw#F*F8VtF)-$xE*IFNFa#hV%waplOcGX!_X3xKntvft&BMp*`^=4*gRIEz8JCv
z<+*TH=Vqnv=)#)}D0nFx(blVy2<L@*;wKS1tKRelOHMCj@Vjd-E}Gl|T1<p|Ofu~Z
z)9)$)=1JOi7R2(PUCz;cXKm^VI>HtXf*5kM{B>Nb>iP_KC2QJB*kX{Cl;zdDQ+wa7
zDv>3^Zrz4>xhus8IfPzWKPf4hRu!^F;I^aC0X^wcr%)gF)>fmilf$0I=3r3hmUD*d
zstVB*CJVI5ffInPMpwxIQ%uG<`226E_b8Yko3k*;UL|iY_DWL%b8>@U_0=ibekg4F
z8-bP+(McQy?u{vCxd_5A*4YkP?R$EC+w<+%8F#s1%E>22j{eZ2$q{I%6V8)45~CUl
zRuu7(Y>aZraC6%h4z?8Tt3DB6*RH#Q7iUb}k5Vt{rD7Y9Gm2fQ;r<pzMp(}F>+;EB
z{pRT_YvHXCfjX7dMC>;&MV4nimiP%Z48LH`Y9?XM?7@E?)4_S|ow$g{Z22S<d8)Yd
z%tfx#Ekp~P8#P7QDEP}{jB3Z?I@0d}F7QI9T@uI*#9(()>M08%QNm;RgMy^=Bv}_f
zKoGFPhrDNRGCbE{^0~m8qXIGTeY5AAozzN^t3wjoCIPp1D)y-SH<>yj*F-((7zKNG
zIHrY>&wI3~mHUb8-e6SEU$@eCVMFI(oav~l4Af9ny8_C#Ys(MM!jGhv%~-XBP@&&@
zlbK#DwS>RnJ&O&I4=lvOSQ0u(Bc0$=K}p-f|7@?{TF&e<-c8b9bggU>+K!vWqI7#e
zXc1sQdk?j{-+~MC6^MSVvr%R(d{MJ-NfV*1({M9o>~Uk%dHDWr{qg>|m?HybMR8X=
zHr|^1FZOG`78HKRhwyk%cy=;&zY^<Ofa@xiwjkpFn*hvV0V{k~FM*g7Hjo1w+;0g)
zdTmR?z3-{zJDVl~7n|R94SL5DF|dk)Myt9DF!pw?fbEa4I`_F%%bloW{n{FcQS$!t
zK}Rucb_c3z{5D+bAdi}(sJOeU1KQTH0&g+l(>A``4ZuYBkF#bt_{k<j8s$4o9yF$B
z$3=kRum%F?DVsQeMLdqjQB3tqAH7<Y0RS6yonQ+aZy~JrMq(3^nf`ff1zW!&3sa4^
z@%l^j3^<dq=jC`An0UrTC1YKNdI<y(^RQq*K*>!Q<FP&sp+d5<Qr|it0?DQ{WXYz|
z56UEF_I1Qv)o5+$Wlj1Ph<hOLl&B1|?MFAF3DX>%iCJso=M+p<h`49vF-j<rY7P-z
zRVE>M0(P<*#o%J<g00W7UEp;KXgQ2;enK#t@RFd?+|uaVzbY%KQgK;~^gHbb9#=~{
z3NhW$OUoA6(VESxX>ssaG!uqbW!pj3h<0xfk;O^YGzC9|Gm)SR<lA0)0r%3Ey3<TI
zJ^(yEj&yPXx%JUy3$iPdobpLx_AV-1b~9=)Qt7qB?gPwy7c>5YbR{Ta$<_6)fua4S
zo(e}sHcTE5N_wh3l~+=m3M_{-M42Okru4hF2GTMOm08~vR&1C;<*IBogU1niu$FEg
z^S|?pH7^+Jv@=*MFpAVI!^PhMwEFr8=G{~FvCQVf&2AaJhRtT~b7=dshKp=Tk0c4_
z!FkgO84GDgDt8Eb@+@gcZi}djAeX9Jo7nt7<ZaC*I2Qd|Yf$IBnbFd?0RVJDoZ%Z&
z=Q`eM7y?a<maVQR-dE7VeS$<K?sQS-X!I5{uZ|=PfkUWPE>D2>$xr*3grWt7M&eyG
z{0^wAv(ptWrJ1OySSMh&6=k*sD}j}L(phjA|LnVC{&}d_EU$NIMJPxBG^onxBnGK_
z<1!xm>8`EuTgtQsZT(@y_w$ll@5+aDcMgQ)DxCpZ+Cp7n5<i&}pWQ1Np+<{wc(VPc
zql9*PlW%w2cqzQs^Prqy<FM)A9VU?d;tp8(dR^>Sna-fAh_m0>&-^8aZ$%4SC?Paz
zE_K{0|F?!-Hde%dsmZxX<X*7aCoumw&10^2SOfo+;+3LHLH$30tXCaozVZ~ShZVLr
zDb0Wlv6QacO$n=RAKDzeb@+z2Rw$5@{?=l3Uq$`~;gprc+tC4&3_DV~(&dZ>^Gp!U
zj(gI{sG@nU_l-Io@qDXtEXRQKCS7<`%tR-JrKZ5mqbw2|0jh{N<}%w5vCnJs<0n&@
zt<&EhHt|CS5|EZD!16zPk9=r<o__}F*Pnes*T)x~syB)Cac7H;H1yc?7DkJOEs$cF
zgAhYTO9*ji+f*>S<QQC747-R%Wzg8yYiItUk2G_F)BnD#oQUs9@V?=SWT)g(7j4NN
zNF(8W^1Ep+Q+f!KRc4{ksPX7CMS!rQ4q?d<97(udIT%xFVhSvHy+iV046-`6>rvB(
z#1ITa7*>dFqUPCd-+EtBdWnf4g~@tEI0aw98a%g())ZKT(6xTLB>@}%)GCVPQ(61V
z)4}028I@0LN}dQS&<eu7qCL+-*a6N70cjp*-#Q2MY}gk>5pBp>vBbHzq!4{l8tuvY
zS#QO|8EG61?B!-SfcXeQp5s1mEfwdzV6qS2xAmWaBF%eoOPG-&;5=1Ft}c711t<2g
z&O$nrVPqIl4kb5@!W*UZnMD4)*e(00Zhv`saC;H~|GQZ;r}RMFf4DM@XlQ5hunI+l
zmSJ!ZzHvDdys82Nw4PBaqXH<b>>7IP&>?TR=3jz0(#6F7?nAvG;ylqu2WX|ME`%;U
z;J&9)*=?8`h3-E5Zb95Rg@oQEY2ZAwgJLdXY^eGU1ek6Z&)UIi86+SMu^oRFj5Rs7
zog{L#ID}jR?e&xm(IDmPvS0}KY?pxxVyMT#Pg`~Fbq9@!J3@1?sF+8$JL&SQNI_^<
z@*HCUtAgHQ5;k-$m0})?{F=#BzFJ@v-`xodi_v^-z2H=ad-7=5K8^va`qGH{9rTIT
zZB2%kN|UY!6SFbVR8(6P%>iQ2w3%i4x{Ex=7y8^<qoUh-XkxdcP|nN5V~Rq12c@7*
zCuBc@$gd~+7*(1X=i)2&bNA2#4on{lhg;lw9Fp+!Qx+Px(iOE>IH~X&{sL~jcOPSq
zFvc<)TfjLW^z^eY!B-Q?cioPkBj<(>hv9DE7*E~u!3@WQG&Ew&W{aaJ_TSLmdGjqX
zcj=Dk%x}r=0J74e1KGbJ#6GL2T|NuA?y%Cg54G04MPKehYUVbBX-3{io!I_PHk$5$
zSF3vS4v*Q;hPE196IOIlTOFC5nI!&D-HsjFMoPQ%ZU-IkY?$yJ><7&Cx2zJ_;lQw^
z!`+TSE<)n@c*B&2MrEB?UPJW7=1#1qYY8~AKicMGjm9b=7@j6ajM#IA2p}SsUj7ib
z$Y<^mG_x!$tv-(?#2(Y&G*YYIdw#~@o3>e?V=ZRsIhsIIP;%3p+)dY0Ur`4a^mrQU
zH8|6j%>lYhi3Dx%K|d<7HHf<Nh>oiSOkp8q|G`cWpSg>z6*l3-pz4raGudr5R}Sn=
zCgWP1^5{&+;+fd<9~IGBY_pHEzGy&#ImK8$(l3AXgU5_#Hn0g87ZFPy*X|3xU)vRJ
zJnjh9H_c0cvB$UHDM+R%C9=VtIoUuhykr`d3c+xW4OzmT1#MyVRrKo}qRJ>)H9D@7
z%<v>O2*^AI3QAQ4;PU{a>QJorPz{d>$o2@y__SFC`zOP*FdtlJJP~Uv)=z|x#b-M-
zZ7Scuvu`F(pg`-YWy}+3@(>DU5J$FU4m-*ZfOR(N5>cv1o{LzZVniYTg=Js5R|Y9X
zlg6m-Qli#->cE0Rb&>vel@0~9Wq0yLt$436M>_0d=~dKqA><{%%^ma&Rz2~1Jq*))
zTkp8HxGh0AKhAm(Srd1;qi)w{*{jSDp~bQH8`A(?(?Y=eJ2iG4#8z(lc(469jKU`3
zsR3~2^<&U6XIr<J^rIXHadEdm9}0MuYOKNhG?VCA5Bnq@C%@!qfysY#?ksIFxEJB_
zX!Ivq+3!<phf8m-@Xho~2ry$MsEEhv8!loroo8b>R(yN3yMM9=RP~}S+cD$tGI`o?
zyQ3$3nDC$G_kTEk?&(*AFA{fbDN(rT9#re*7dueh%t^hP<HCR+6SPVcLd<%R&21JR
znue}Lf0HCos_&4O<XR^c0Xk_{a8^n;c<^%i7aU&RKVI^ef7&$9<(n3Z4<3b?UVGL@
ziB17Y(ZPvzB^1is!HAN<nfBXhR>x?ff`?y2Z>o?>r>d^K6k^3PnJ8tcpHfCw+0&c7
zq3C6p5fYOfMi!1;Bm{55*sIMD*nqT>7{ZiYF^xUrcnVE-$|hD!{)Xy_|HF|iz0|;6
zL_=B=#rR5(`q8Fk!Bc8Tgw9fwk|W$D=r#Swv>7xzC0u(24nMGKsUbNqxg&U1iOkun
zMJkLas0^IH_SNTo@s6J*HU%KMM(0)!oUd?_XjK}yhvX4Mc3_PrcdbMZz3Pw!aFWZs
zz2tDZ^5rEN4j0{-lfSs*o8{qE4LerH?Y8(viujmfk^)*d_Cws@J?#YE)o}TwDZn;r
z`E+PuFpqFuQdM$&4v}g~T5>|2%z%S!j6=6|j2YD^o=u3Y*z(%*Hw%(I+3pO!XH~Ed
zp1ypO@AlXl#v7M{ak9nk^<fXU6T>ymQIEVf8B^`Czo{{N$IqVV1RYAtID$h!gDdu<
zVyA#e+5sS6R)4!R;mrPsFOy8fI-R*Yoaioj{MU9+8E$t0SJ;ab!!1T3<*SHgdICB6
z3jf*iF}HD1vDH+N{Za_iP0vF)=?Wh4d~p{5_P<5()I^%&gsIEMJd!WsM~JN0el<zD
zsLar*($2x1RmD~f8#b6lFWaT<5~<yh^DeY)yinppi2++*GQd{X((IO)VAOKZzAi<j
zZvH_kLn8D9`b)oAzb>>*M!=^+f_hhWm2P!K@k$Reuzi&It)dMd{cMEF@|5ab|MZcN
zeZ~s4(knKVKSlTyBjm{+Z*chDO8Q0skuaBD`1vVzrAgEUqQ#^jrd|%%$o)1o-St7r
z1}=AQ#NpVhfld?!F(~9M2BbeOy<pYWnnA~(%{&z+rsqUm&p#9i))%qwjPPiBj=W-`
zd79W`C1{v{d8R8u0SpO&>w1<RAb4<ZAfX}%Tc14A0G#w@6orO!0b~gBUjDs56JCXm
zc7E0F!-6fw<+ZFWY&_LH9vG4;g<HbE05$u)t8SG<V{rh#8h*ot{4y-(o*ei2k-j*r
zTw%j{g=p(;Ab<`KKCfgu5={nsV>|y&6T@P+c)3zBNA{V9;0DDaB)I7#HdxCUCR56-
z2t9dfnBA)%hz*h}8qUlNMQ!5ud@{k}`qVtgjV$Zya&A%bX0W(x1@DW2xHWT!y0g}t
zi54ri&NT*3C?_{2iAT-0<{w=dvpo9)KHzgGHf0CVzp6q;L45Cpzz93nTl#M#WcmWv
z<lHFAo@M^SL2$D3*^L*}n*>LG&z9*Sqf(AQo4V_?0&sae(!9H@cU;OReEiRHTD-&f
z9NUU*ibg6*d3y0UZ~N1tBB@6_4p2W<a&#qh!LDDR4C;cblL<ER7BHKCAX=Cx3bmY?
z4kwD_zn~4-er@y)j#x4sS~^!h*=cGtDJgxHfSu;~&A2Xhmux3SpXaY&)91Q@?A-(I
zOZ8HLxQp*)xyJ!`#s}kHMs{g3wsd%6Ii5@1nbJ`d{~Ra%9o}*GfSNeA2M5N^QRT=r
z|IGs-IMbn(v(x@GwkNPCdIC!?bW6M84pIL);JK_MFw8!XV}@GlOAiLs;(nsjn8q8W
zpO<?&!+&)p8%}rm>_#`f;{Az7Spbd1*(%c`J7m!-rMN*D-=(JjH`;Me`W)TS0qdW!
zh(<~!Pmb_5CaxyDwzvXb-gHS&jx2q<ffilxjs~vjJ-pQsD{5$fGY2@L&ZzW1^7S5x
z(1y%3tWvVJ1uIe(Dr^tzRek3Sb$~NkS1JMoU~M0b6<v3OBVAfY4%J;SP<YEZnoPYt
zc{!CG-+0X%Y@IiwK0UMUF#Qg_iO3ASrYb<4GochxVLs)hEAU^|2~VNY;CyPqvNSZl
z+fC{fSan``mXKSjTR7F;+GMqV!mP0r{R}fpS5}5N3=dkT9n1}`8rnT~ZzA{$cmyE8
ztmYG{Ef9z{8LvFnGD}AEZT;5#3h1+H>Xk4m>SD4k6%4Dq0ZsNG3X@6^8FeboZRrYn
z`yEBN0%cJkI0K+-rW;NqxDv^zl3VDr?J}}tFT%G^IaIJ6(>9x*`X=-o378=0+f3JG
zNUfG%{kg>^WoGm>^H)6K#hAl-UG^4~HTgsMJ{6H96^g_korLX6eM(WcVnKqBTM8FM
z;2+_DeR?gIRwDS)>==QjPBb2%{ErHW9@<h;-3!&+rk{q#GLT@p)94r?Q5x>CFS7(~
z$kzvAlRRzbBV+7OF{6b<i*=rf)pixp(i1^9F>EGwbHr6ssGccGA1o{-K?*avI1-aN
z3Z*f%r7M5*FORn512yp+E$(B*In#eLX%9c+t|4lK@F;T-dWVf7n|6vKJQ0t-S$c6f
zybgBNt6L$X!*0a)-Lq$)ztd{bGZosequ>WLJjn{e^sg@ej*yWWLLD|;%GKKVbJG+3
zpt3+>S6ZN?WE$98#Gf<LqOm<vk9nfDe!kak9$sJCBT5lgjgh7OVZIUdzglD_Ejk3D
zJ!TPV(+)dnT(V^B|G#w%r(oyXoyTKxgSUGbpK6D=MhY&?JDNtn9q!3PBTVi&9}j{>
zPWwNoLU4`L<<*|nam9}e)S#Act6}M5U0H*s_nh;U-)vh|wmT49*{ZYcM0-V#VoQm#
zeTk80zg3$F)xnLRvs11wiT4Zy+a<8$d5myRcO-BpB|VaS-Z2Z?6ccY3o)$LQ(ip8i
z7dv-^7;cOkiRp!^K(J)Dyw1EjZ5DSlu%K%yq=wpW?3JMHNfDftcQUSUN4!)SEEHJs
z17#V&s!0KXmqFOQXk9*b<HcPbH4cMSnpoe*&bQaZ==z(PPn?T3WFy$xVeb~whWQSS
ziJ&hAapv@QNe9l`K#?DetmC_LkvbYXk(=)?<=T+&6?W(|q2)9NkXf3Mq_>aNM$;fD
zY}EezxL3u3m%hJE*frvxZEZ2>k(mA{a4JW4-2BrS#bjc~X_%BQHCx_=bQ6(AOrFxv
z0kON8PZUDms_>T<`|xn+k*{J@m)U&RziV;=JRHH0c-v)--dQsv09Y&*E~aFO@(?nx
zyQZ)T08<5;pYBZlI7*_MmnW`oL~6%gaX{bq#hcvybZG#QU|f{~+C=LV)}o5*2Kl1w
z9pdyb@YJ7|FD6kbZ;8p=Vlx3NSC78t8OEK_b7z91WY+YNU8GFHWZ)6qfw}jA!F;?J
zYGb6Y?BbDs)1(S+Gzmia3eM6{pkL+iG4h2$#Asg5MZSJI*;*6^TR1CCirKx3?DwJh
zX9}2rsfS|{hxW;*%T&`(0Y!|c0AWRWsvd5EtUls#>QG#H;Lc|5=MvSnx6pQKn)>a@
zCA>wj5OA*BMv%IeYD__<uo#QbgPU4spca0&2&6!f6h_r0WJUleN;Z8<c$jM0KhG)v
zY87|V{1b5mS%e*kjtPh%U{jr6`t-DtEK)8hH#Hv<eVO9o>4i-yX#~(njkfU@kgv5}
zsY9je8wiiP>@sI(2YcMn>TKk4yr$$2BN^tS1~I*LTTrHMgc`32Co`gE7;HU)|3ROs
zW4UTnXZl+*cwMl3a!_it84=xSI-0E(Y7q0gJl~FiozTq`FzmO7tkY)@d}_k9c}w|d
z&?fYf;J2sV$&M1rcnZ&QVV-PjF9bv1K>9Va&<U~PHE6tD?4ITiJZs74`O<>^dU)Bn
z<LJSN&05ONtwO%341fV+Pnl3@aZ@Gl3vYLw_}nkJ)SHDBQ1A6gUM*?x@FbIn<=;3&
z1_nwJahTQ4`5T{OBpx|7)X_M}P#+F|+z9$P)ek6=M$R~?KO7J8E{_cKOf?Fhx=8dm
zVCm=uWnhG%XM+3|bG1s)Zlt1WE^rQfEgiBVA&RT(v-<3iutJE9Ciuf1dLq*RuM4hV
z0&BgGS;%J#YZTH+{{AUXw@LdURJaWB$*hY6K08A{hY11A*oW7nuZaE;WlZ^U`WTLz
zKBjhnb}8cvjuMW7uxM>`mUfCezGbVc0+<npAPHqtRTe((;_bpijnD0ff$WJ5y7$Iq
z_4J*m1=59%!>U|T3nm{eP9K$eB3V`*07;iAL|^l7$*HH@@mVXxvkE#}1bree(}wJ6
zU6YfZ8R7K%TcTAGbGm(ED8d$U#>HaUEJQ0yB4P*3*OYlovd0GfN~dBdndj|DXPBEf
zs(FP*Vb;G#oiM%Vz1nv?yBix1q&qTD^`jZldoU~v{7sr)&bzS?sfpdnuMgo8i*ox=
z!9lGX#tQE)2{(*Ces7T$w#diLf7qT)=?S`E_GkB!3pdJJlTg*-2ZS=5dW|J`eQ8O$
z23VH#+XGc>RS}ZP?OTl+%(o1JV2@<^J+s{<6=IkNO5>m2srSJwX9{03+m;4^jUVH2
z)y|qn_CZ?Q(8!18m|lrD7l8^oNJ=vrt%k>FhtUv!MxCKq6?MuzjE4PhYT@z%NUdmv
zgMVhdnuq{5An8>J=UCJ6oOr0+-m%i}U@9<2{4>|vv&Q?8zy$m^3H5XuRqZfa+`<<_
z9egb_5mky85CMqSmLWe1;$!zuY)~8XKl~#nxE&GbiwSlshbjAC7d>`E`{l<>OiHyM
z;*%tf>k@n7Y}ke(S(-*|TmjoTbFB*czU`vp{s}K#L8C7G78S(%4TSTB$6g>Os647u
zXPMI6iFHRmq_{cNcObMv?f}577q`*SJ=DQ2HE(Ddc(r%SM}DbQK;D#L!uGTe6|%kT
z8>hC<DfUH|=tzI6JH9aFJlHacD<9EeAz+1ktf0vRi_-EUJEF}Fmo%%fKr`Bzq4u|o
z{oc-?de(scg6VedrW%{kCsYlY04avRz(nW@caqkGQ<y>}QRj~z1I+qsK$^~Txht#v
ztI88<z{X{UT2n^@1WI)&l2HursGBfl84d8T07enLVYC4BGyF1obbl^?8F56}d90dP
zONunmuCKWAChH9&Z_XhgkZ@)pB2A0UcEV<gON4DAyKFCdq%xjwO@b{B&ZDof@12jL
zL+KGx*ZMUtb7HZt2)9`$c$oYvTld80;3Z%F2mNF{zTKn)Z9)eC4KQ>b)XctF3<i+R
zaBp()t5^jHD1QKTO{ahNqzg!Wtk=N)jO@v>p=M-{fZ|0D-5Gw#Pc5#-^0nJNMPf0t
z_`ta|Ubc$^n8I0aK06OcM*>w=-@r#YZ+A4M<@Gu)@CY#gQd<3^Opj}2%FsLN(lMSQ
z;ddmd7?r$kI=(t#m=(()`A%I*P`=(7lJ1<@;T8=GI!jDTUW7HKXb_+wPU|zxWn<j`
zt@X9vN0y$y`N=UN7200&hC_Atb&wRW{;;h3o|b;>Ta({-Hyi<C9MDElIRFE<i55&l
zpJsPheiB9VKC3<j?oyv{#T`%jDqylz{oSNIBf{rRtUnTsRLdHif4?g7Ng@B&{xMcL
z{(M!Ui4pO$*E*x8cM+vQH?Gl(ZOJ>OVEVKC-w(`53YT9byacMV$EVbTdxgD}C_(4;
zEV4yp*$tC~PDphwp<QVczzIkX^l2LlZUF9;1sngxz=~As!r$C4f^dv4$^!<iZtFPv
z@5=Tw!n@OMpb+LY^T{EFo_1q?DT|01e{Ut2@?#t}i^&j{WwmR2QK?8<{ukq~|1?a>
z2-?q#0t~*5szX{}5YJguam4T}YCcrZENikkZktGxK!HSAU*8HH^3O25j;b2W_NmEJ
z-*%%QuqvNelIQB5dAbSyj}xRpn%D!GJSWV#nhav&Y^4{zhZ=Si(6HgRqEWyA=f}`I
zP)JY*WBED)m5WE?D6o0qHWlUOd+@JF?-XW--oVlkNV#~EV3s3~g<C;F@8d!}FB!Gw
zUSyyHfHFrtZWy`SZYhP>a{BRYEX@e<9HPUoIv%ev_*n|JUDZ7}3s(9ox^nr!-biC$
zQn<HD|DtcT*=a!rE7E+VUbG(b>mn9l>b<GjhBdA@)Un(UQhV<wM-NedrJC>^lGR(5
z!R$Q5MnAh3bM)lqbppp9XtTwCNfmpk;KYnp_dsm@-@Xh8DK&^$s}Kth%0XF_95T+8
zM4y8q$@Df4HJWIU6Uj<w_@>U7N3B8EU>@VWEU|UjV$AnF3C5Xgho_A8_Dkm>5XQ!K
z0$wm*NF^Jxq^g<9McYRHme_qYfUr=q;ixKCC^M_>p1ND1$HUA33*oJD6>T71`jXs#
z(HUg30Jvl(Q8nIn$Ym6CG!qs3j=2{k!?#zu#Za5Q@L>qnaN`#Ld27vSXTNSCpTwuS
z2lPf$P;WVkU;&%5hxqlS(@iAcgvUU-XFv>J7|GYY9eO7rgr#Z_)qBclGWgIOgwF<7
z`xzweU(&on<Ef_(Z+dKSPYTEd)6|F~YuJe)lfM*h@PBU7JFiRLf^#*Td@%8?uZ$uv
zu;MF8G;t@CIo=4!uKmv0gPsF=6BdQF=y3N<D(Z9&tsa(a1<Y#0?20=82f(d4_{}$g
zP=<c+*#%I@2F87(`2jdD#<9QFz*|N4?mo94!%#Lb;sCl|FjL^ZmO|qi$SF%;<8;2}
zpm%9T<$!j_I937H=&_#^DYFFxTPsbs`am6iG2!-MjW>jFA>?*TSu$yKvI-s!exN-j
ziL6qtD4sw0`S=OwPPQ!6vj@U}K|XMR#}Y<Qdt3z++g^v$30q9_Nv=ou=^VAWx7J;0
zW$m(Grj5L-GCwi2H8vXoVFEM0Owb5z5(}RS__-1Wp8+@k03KW>P@p|#YM^Y+qjF%V
zvF<>g0^_F}?;U#hzQya@mE7OI%lAI3Ni@G{Cgnmhh<@)>|A5IsU-W)oh7>xw?OSn-
zm9w0NAXqKIl6uN#9?s*Qv0Zv*aqXQiUAVCRm9B(-AT^Ik+P4I;>=S$FWcg4?Dr8Dq
z4wOnSAK(#M4Z1u5^wx{y!{#UGqeR$2$OaBr0*bebeJ0K78arXMk>(c&Qz0At-mO>b
z3`3|E$(+)+NzNFr02WK>K`I1q+G9m1R0|4UarDI8E8*=NJcX2DvpKlRVy`tRsZJ(<
zLt~0eCPhq2734JVr`^_hz*0}(xQbO4p2&48px>-g-;j^~76j841v=J48l$cV`m)63
zq?JFX7att(i>!cwCXKV3c1q{$0wk4BHt7%RQ&qMUwP>ay*kJNNC@*K48F;^bh9sqP
z>V80m?gbve#H1``$6v+(QYSTMPk?BVKR52HrBe?~gXf(QDv)6g!F>if>G=E9{DNoq
zO(l06s+7_a0py5mm?Vp69_Xcys|Q~Ge$f<L7b+wnTPAX=nNTI3K%)Xo5Xq?~me&+z
zD;+~;{Z!O@+kD#J`Z?7Np!dmKQ=%2jeqyVwq&);G6m4e2E%zYSq7j+H9BlJ*NEU_a
z6r8%>Og&b;dc413ybB-K#E!^*jfXY!N#o)V4Lf^2D{)G*cJ<FBP6m+;GX|?do{{oy
zkrfPFn-x~#9|QjL%($Z}Sk<(pXjlm&(r)p0(*ij+k0`pwq-fHNyvX;Xe(PW@k}W7D
z-9ruj-^yp@vk#$76`5Q=A6;IV{VF|YN&KowsNRQT^Bi@twoR7(;(`u}|Ipyp`q!*H
z;xAmsAaI-+*6i+d^;g@spFA$FN6%?3rN^Qz?dc$kCg~gT|7g-0@#JVPpp%^M!(C*Q
zWfYcFsR1+>B%)}mSbQ|ekSKNG!omJrH!{q5`Q{DDH74cO@R#)ii|~&ZaLj1&&aPC3
z-CK!~DT266n{)){W?)2yGP(k_<`Eh8ateX-?u^@X5+SSK`q>a?Bca2$JZGldDJ<a8
zH7!X2^Xh~kL~zjaLDdobS|j&v+DNRPVIH4rR2U+dBVK2eL}EwFsC02#S78XUUhUT|
z&ol#?{(vM!kVvbNyc2}aC!U088opgx!$vp9hVIN@cJx0W4|RIP#m&qF`?gdXmVSXl
zd4J)GvqTNn6E#=su&zx`e2vw5k)sZcq&qFqd3eR`1(Gc<j-J<{=;1)Je-CRql0Bj~
zpbDgmDtR|#<^7VuifYB~)8s(*qjKh^m77uwm9z_4Du_I?WAFbEG`xi3r9Pd@z)a`>
zV83#kSH7W>Iddw>n(9lL)lMJe=m*H^`mws!J~4{(BMFtkhg?-^Rz@C6`ZE!Tx4rqE
zj;;y5Km-MMsMSA2B*X)$GGz@*b6~3bV4PCu*cZU=Gs<oGTOIUlU|n~dR9<(cb@2xz
zwJwj@l7czUrjCD)Gm!Mmuv*HraNPOW9rqvG(hD!n_jZ3Nr5WeiN76~<+Rd=-Y1N@`
zRb7pS6o8rC>JJ0#9WSaOX_1;L-lkg%AbtQxK#N_PN<i&)(ljDZl)UQ)3XDJuTho*I
zV=uKZO!q|~OhP;77ORYI3%)wXfjJR9`rEUMhScvjE1!OPC(QNdSPV-M={j>V;WRqd
zc4>rbCd%Z`3#0dPg9|OGEo+tG;t*QleU9by(S1_D@X?hre}(eaq9il*Hufyi+Wcvw
zX)!kMcn(c-Q9AS+0|MT3UASmc*^mI9BIJcJnkHO^%$c4M%Z2^%(JL}sBO4?yW^b+F
zlj&iaB3vY>dPXj~c$tmesjvFlp3Hj43^78|Yq3@HWJ-MCj)dES;`fbAGzi&`cu{a^
z6Tw6}b8c;vR;KTd5=^PpS6pY+-r1G_g+cvW2z<6MQvhM?Aa(z9zHFVhmBG5Ys77|1
zbwD~kX|9?2ZQ!G6#@eD3)Zs(U%(Ta0%GvW9k(|K%tv$Ym2x0B?`|kAKpStNY!y~B-
zZVMxiK0=a?ALiue#t{vZWj$1Co6he5V}>vW>6FudtnPzJ56iJ)QJ2r;o&Cau@sR?U
zjQR6xsWrJNFdGE9!=Eh>!6Vy<>kL;%b0Y5s7kctdP3*<*mADVr4AH6RxG7}01abU7
zM9z{;UM#epfO<M3t9}tJtV}-lK$n2Xf|Wjj-a@!KkwjdU5phl=Q+^0}59t`v4l46t
za%n<}+B-VZ9AXSy5x8Ox6(aeSAiUvZl{f~dA6CWK?dJdJt3O6I<dm$)aV~2GJ2PdX
zwG6%RLq^ac%$)%-!n9(XM&ylo%fCK*6Vvv8dyz#(>!{sAXJz%1lJ{at#e%v-%GzH9
z)+N5t9TGGE8DsbSVbdOm%GELP6(-Ipydd_~m>aEyQ})h~Jz;1mz#QCz>H#Tjj+`0d
zar{nZ4p!`pkXz~HuU(XjI<;}?sKdhD-KyPkQ}W4HNt6>=$CVMvRYam);;RZG`WQVa
zk4L@xm;lqldyENz7Ef#D@yukcX395Gv0K#PGhY<#npkJ}EBo4AGg_IF(4L=bGm@6x
zwD0SJ7e4FBt;R}oR)!cFaD*!p4s{M2)!cB#4cS)ni$vG}<b<}^0@DI5zu}j}wj!&D
z-vISOT}g6EXMgl%oC7Yar;E(ED0Cvw=^-oNUmtiURp0_iNeN(ZU?OA-@wvs1h`jX;
zxXlzrhuh5Y5rRN5A;jTn1zGro{sx}n9tSov%YX73=l2-v^DKQt&TFsdPBJ87P(qWe
z+n2hbc+u1<oqboFxK1S#@=$6wN{+v!BxhWrV62l(-=m1ll{H6Sv)@M3(<k4<21<x9
z!=KH|#{g8(Q(OWS1rs;`92aypU(0^`0S@;QcH80u5^~w3jbw74Fo)47XtTZUn1=W`
zh&ai=PZA2da2EN#OQg?US3=-Q&g~%ym3@qbFd$y*8)mQfPZgki(ueAM#KQe?K+^(Q
z3BU-`v~33Eh%%;Xr_}i&C2Y+(x`_e(-{^>c;-<r-Cv_soj*JuDGd;WAGk(HV@xl2>
zf3mhY(G^@mObh^(hA@7@*z{Dy4<8^SH#+VydKeTD7b9Mh)FSYnr+6_>60T{%zK)x|
z%+8@ktpUiu0*(fQaYSLyMoWjvU|;{ddyr<WK&$}TwR%1YbAToQD5!nKE7Z4${)6y9
ztLW3d;wP8P+W!7fLNoT&-54GcE3dgvEklN3WpJJuS%G{j^GF+v@T2aRKb6ks@`j>G
zQ)28f{^3K&^T3nv-b%&aYXm;XU|=8gtw))`Lp?eL=j5Oo$-g(KKQxYL;8?Y93tg&2
zHNI9*#AX*y-sSAsZl57Jo;t0KmZEyg-M7!P`BYd8@aiX536Dqa-fVd13Fu)aO*2Xx
z`w8f1uS3VpFe0CLdq>hxx;~NG_-ok|a%+SVx(^2l_7ge^5S+Hqi%UTizRCStq?U6w
zlyyNX*&83S@ts5@<;~lt!e-^b%lGlXJ9MvLIJa?Y>nX{r91#ZN2F!Mo1HW1FnOtkg
zp$E#HwJ>uP1%HgVSeDXDbuc6*>Bpvv2>?|2{;#k&w4FuWW`ZDqO1!1F7Lcux)r1t}
zt#3Y}(6|OVt6T$$Z|Rdz%sPF1a9vdbR17Nx;33UngST9xk0~ZAGEIZ~{=)=RZ<BM%
zGj{16v>)ngIH^?kYy?wYm{H_51?I0xSta{%S3Di&%7*x#iuS0as7_kyN;&W}Umc61
zEfK|lIG^*snp!&8BJKxCybb6<87QHW=NXDY_K#@~UN>I-UL<L@`;xn3h<1yv<ed(O
z7l$F?h@6;uy!1_K*+h23n$q7W!?cUbikE5TOW&*h@aQT?WA03o-cW}uEz5*Wn))7h
z`3!9GhE^w#_dM?DU%S?xc)N>g;jX)V<UzNj5kp67I2>!pelmapdzS^))E&EM0dshW
zBV)Ye?PXU0`#@x8%#z(Pp2;LlUi$E|S$6XHVyLsUf?Y99{xxLublHp@t9>p3tXKGz
zu~n|%F)sh1PoPQ*&*hj*nfvz5idC<lYtBeqMS%%}Ea67$28Y8EyV4@Ou&U}VqMlTS
zO<aK9dP0qafF9a{rq>|x6!p~@#7hf>8<3sG`Z2>rwZ3kWF#k&l^n;WVswMwTdjQi2
z=sq9tu6N~D2ORTR?e6QGU56?z@AQMb{2=BB?@WJUHmKck|9lZC1rwv{67j(;0*IvD
ze6s3p_@pEmM9(D1AJ5GU%sWC=C5f{9gGhw63O?)fi*#9Qo&+m^P`FwEHu&_4gw1Q{
zzM*{tE2SOgFf};W5a#GjpM%tS<M`dQ=i}v~byrpDGbBsx!u1rr-VdI6TVU07PX0E1
zJU1dWQ@umi4P+7$KWxrpi1NG{tQ~(hn<ce!v;1)0&9p!>wys-O9W`-=<mCGi7+ky#
z-!?T5*zU~S^;n=DR{6LQ^zxYdWk-`CKY>M*;d(g6=|^9;bG5rL{=q3{>#T5%$9y`8
zIJS~#OkP<|dJ8?KKvwO=yad0pDQiBDcC}}*Iu<sBRMi($$Z%f8eggQQ*H~|QPN?A|
zp+;3KnX2|C*qr)<>9fRHerlhmU+=0GsMljFOZ}rq6&sigq8~U$nLe!PKMGn$;MGt5
z(pO0-M5E`{MK-fvyb*#r%84N6A{77!^N8MX#n=+}5`1>f9G?fgnV+B|jHRKFA^cC!
zH$9eV$`VIC4K~Y9v=-nfH1acZ7Ft^;7Nejce-5g0aEM4c<~oA&ym^e!_kZk>Y6eP?
zoUe`LtD+0PgqAfPs&QxZncR5(d)R7ww5wR|19a}vAsiD1?MO2x*7P~FZcJo?ykVJ%
zKU%jaMRbyE$*T1mLap7oU!DxYrfiHoTIqU*XTYu1xveL5mVdL<hxC=+@J%`|#8uFb
zvu<sIRgP%AFuW^0nv1;0x>!ewxB8(8-C~HHQ$>$Xf|7N7tQ~G#;E>~pPU7{Nf7l#o
z>zbyI-cJtv`AT&A4jjJN#5kZOz@C@iFHhoMIwQem+FYU6CDJ_;&)-{5A`Eu~qQx-K
zI`Hh<hODrco9JisLDBzeCt^lps*T98#}-vdxi{8eU&o#^{dAEa$u6~Xxpg6XUArpt
z)k^ln`sd^0-MfycEv&Y1bMX&Ke=iZB2fB;fjw=i4M|7YxnI6&a0QFbPBFW5I)n@AZ
zA%6ad&t1}=!`HX0MH|B!(c3jFchNSiALsY!;>rUJEDC30tU^`7Vmn1dMRw15F{Zcx
ztd%Z-*_AR{EG}fW+PHzi=R)n@j*TynZurvdJ>hP3!0d6N$gHzjraSEMntPd|46%SM
zJZt0{7Q8)4m5>v08Hq7;WwNifD~b_8{og;wvsWPpK_q@Jl$VBgNaiXnKcXR9iX5)~
z(Azn#+5cbHCCK;KpO+C}tJqX#f#sL{`Acqw=y-Mj(tBRRw~p-Bdn(<f`hXGp*P@Ds
zd?7Z>PP4X+e~rghEF~_v%sSHf@Juci2+gcfA_i=3d0U-mcy=myoIeGh;83Sp2c3xW
zja81$q<@#Xdd2E7&qSD`;DDq>hng9Q;hgB87vsGA-XPjd#KUa07KcF;v5aDYUt2m6
zB#o%#jGkp8h26RXYwomWJ_E6*&m$_I79_{D(5=qr73Z0G6Qw1*`Mjg2uJpBe?W;%m
zx7&Vh0yp4WzBaPt13mXgGBvyo&*3X^^A}yctfl<Zw<jO299~9iwi^)}F*Kl9skOQs
zB_8P6v3v@2slBtJaf>A~l>DU2SY&-&0WDS5)P(~_nd(+Au92=MwEY4dx#G%k;vwE+
zd@k$J0FOS2vm5N|Q^GF3>%-?t1LacC0BQ*sXLJ~K%z7Hj`Y-8Vk|a4UBX;J7q2&-+
zt0XvIJ<h2IrzqN;wvvfI;-SE;{(LV+dezZE&!NPeLOHEXpw=j2J!$25XT-}fo^tks
zxUtZJwRCwpz#?D8h4<Xgt8f%4b3C5hIe6i!o8&?^pT4@nZ*X8e%Ll8h+Cn9RMl(1=
zijG>K=>@b&fytA9lpAVM=+S(0Gt=3l@VWVEd>~H=(wE>mu?^(C%k_Wts0{8x+^w`Z
z@U%VFQ*3+b@xg<3*<K;OCZq>SrXre6N*^mnM~!S*lDK=#Yq(dScF$3Mu^e21i>mJ`
z=@KyRRF6!H@^0N?tSBXbfE$>=p!KN49wt0}{kZC^;~-ux7ut*PyjzsB*)Nv@^r$~m
z>L#{UmyaQ=o(UCN(5Y=G(Jv{SMk(oelFZSCdrNq?MQF2O?O38Zh>U%CL9;$}XfmTn
zk)=1648|X{;_-$dD1Q2nsVuBHr}v7Dvt`ej;5`lI@;&Crr&hA2+FfX<AH+<KczIPy
z&8rxbyUuV;rZ-Wbhd;+}9S*vk?%9?EnzS2v@T!_5?4bfcixlA?FW<Nx+~H}68jS7!
z<JQH?2jbk+e+MTMvcIxo^Y1Uw)JMTe3A(TD{S;dFsXLB2F&FiD0;s2GmG%br{ZsS6
z*Hh+e#scLFCakQ^4^}*Ok4^(WBO?Ab;~m`4R)Z^3L28vw4rzREU}vP2U7oN{>miBA
z_Ls>QFkm_99zn1Pw@pas&T_OyW4{4DBUvQ$QuN3V5u|DzAp&_5VC?!Z3n*#r%XVLJ
z@yJT`d{VvLA+K%wf`578H;pExDP{Dmu)*#>V#zl!vByAWx{c1KBN3HWhDeCuNrB@d
z&oFf}s*z?=@e0W9BzZ!`1jY&*o@3hM^fmkpkxT%XMgsHgz?Hyro9o`o+hFi|t)?f)
zt?YjBni18N0nW&X81(ym=+kE)d=eS6YpID(70m!xS36MwKKk5aLN}J_$-|Owg+gy>
zpsD|ysZ{^g^yyc7Mu~IF8~^hTH5fqh^wpx7D%(m2hpUI@Tu3Y&_Rs+D<0njBD&<6&
zg&EeDdLT;CFnLtHhRU5U&PF~RM=l$W^6(x|aFbR^x~QBop_Bhe*kX_BbT~BVKQZbc
zDO0lb4Km<CI?D2KIz2@GiTX4SlAA{xz3coLXNjum2ymQn2um?hd*?u3$#wh-W#U$A
z3SgnCN(6<;=g_(-@jT4iHll`#d@Hxc{t<*GUo`oy;Ri<%Y3jT7+uDm<vgxUjA*rb1
zbeM|Ur|-ctJ#1v8!MjU__ol&E$Y{fC?cT(}l*Id!09e+HtCK!TBmGyK1Xwi7RR<F3
zB~Cd*n5<Na9g}&&=B+giya5mZpe^Mx+q!!bsjc-^tbbwPaIw^Fq~|EC`w%Db%zd(?
zs_(-5EWO0r!bOB3OHLbJJ8koIFAZL(^!}kBlT6-rsfCW&(q9vA7Z(<nnr}Eq%)^!=
zsKLtB4$-z_6G;*QUXC!lCb>ngv?WvIfK&nVbK(4qBC(x_PKQ^V^Irnbb%E^$1{RK*
zdag45&Ghz-5)A-eFoD&9?qa404Ixj70Ltc9u6-#?Y1@u?|B_SC=XHEyRKUKCY_5P~
zBQ8wWfMA9s7T-^Sq=ZkXDT9i4xtMOGM)<i{h@ri^`01Tcp=_eGNdz5~Q@E`3QYaR$
zG`YE0zX)r535+8LIIlfy={&-0>VmXnv!5x{<0}2oWvsI4w*|MNy{du>WRODY<6{u7
z`uC~AMt*+2t}#Q(BUS(v?Cbg)MeNOp0w+du((e;=@@B}L^A5bZ79!NHu0HmxB)BcI
zuB2<)_B9t_1nr@3od4lDsE5mRHTv}4Zb%qW*E{8mZlXT#?{6QGD@eEDNIIBB@+R5<
zxa|bV?C-5xc@=*o-8i)x4!oPq6vAP&K;Thbd3Su2fIvD;nE=KnoU0N{>WqjP4h&p+
zIkx~bTrgWYLtQlGUeIE$(39d}jqlN@(N%@k;Q;%lBrf0ebZu;|!KSgMs+1HWSpaa4
zqu(pC2c-S%`bY%2qLK$)99@oZe#xgQxKJC2_D<1(u4uAC+@9{>Lu&Xjn;6*sJ>ty(
zAvV9VSSQK2X*OXEIJQXFs892U^HqHro<4Ws5y0R7AiPNePmrX*v%<r2ycaiyRNqUq
zH<Cxf5|V`W^?!}LFY^R8COnrq7po=@mXqSQQ`W~Up_Z}O5XsYGZzcj0+)801M6Jx5
zS-E@vfvE}}2O@Q>%@uCvINE!yQV+-|e5_h}15l-%*B#hoPgS2jsKkX4uVQSn^6waT
z7OqP2YLvM*TO2*VGfZW|h+DI1oUZKs6BF?4Q{tk#Gei-Bgx&}lsRFhlJP9C7svkV=
zk7TPsL}yQ&^k9nESr*fH3Idgk#&OH`;wO=%`O0#w&&Dm}dPLvNAs++GTrWD62W721
zj!!%o(%*b@0mY-ja%mCKb&G`BKQU=RU>4&)XW%L{XuW668DA61RYdIJS@vPn)wP@4
zw}*Lawc}^Zp`XYwf<HIP;|MHC)@6%cb$-G#REJ#Gqa+fQpn#zA*q0p*irsNSwefcX
z0mZU7{4cU#RD)o)Tacs6y$fl~`}-?$ZfQRZxI;L%6A3DEIxm<<SBu_Z*J}hz?s*^}
z$)x=HwtZt$-PaykCP;Ft>~qvyI^Iii+wNxz%_T?OF^)o?rvCdY!Q4|sAROPabXd!(
zvS;?7zr5ak{dNY&G)ako?u1eZoE@MOb?df9wMZwE6Crek9o68HPgM@%rUCWWq84_&
z;<ts}&iLgLoWpBH`DRJ4y%(Z4KzHT&By|G+|J%tfUud*^HF<P!hW4mi^HpLi$~g_(
zVSmT!h3#fLHaxeiHu^-7AFg8AX159wLpwxo0=E_&Uf>|~{xjHxKd>`FItc|dJGa~$
z34^&PIFg?V4~*;v>Zuz7fS+sR+=cqi=J#=g&{n6PSi*-*d~u@!19LoH+IOju6DjVa
z(K7dt0iqIz{=ypQt;3YWcCE`651_}2M#@j%whIQCzMPpW#^F!8@kZ8Fl8vviXKo0;
zF?C+PYa%&P!=Y^?hp{Kdy?~*J8;+O1jwkTvsR*+y^bAo>MDq@yD^90m_YhticysMo
z%Izt9#_2xrxyy!Ox)qlUA58uB&ZD`+9nf)FYda30zu6;GH1F@;pS?eWFHj%98SeQh
z6vh&@6Q+dx8ivL}_E0B%;-%GF8n&_~D(}KLAKL`OjEAu_)VNhgFTcuD1BT>rx(4=3
zZiiWGj&#m;@P8{J){kEut8iiyw<s+jZq9dG1ors>eOC#lwH|W+OY&O^KMMV&kNWUG
z0WJVo<{=erj-pwi*mGhvbj%H}U#@VrqrXCsx_=>a+fVIh;xt8XqdtHWf)J;|V;`s*
z4j{a};59z#sPva00y1T^14yq+Zh-p(ytk(Q@|>X#|1_pKXvfx;6D#asZ%EX1T`&y;
zXXs_{7zt*-qw*Byzh7WJ$enPhbhT!ZDRY)P2d&EPoMy||aB!u$R_U>ye^-5;rG{8P
zv^xlYjq#QEEajiq!7#w`7=(a6k#WGUrGrAX3Tv|aQ^b}VGrsz5jt$#Lq8i7QzONoX
zZaDSvo%84Q4DPJ``57Oh+7c(O_VtYdM}`BC-&CYBoA1JxaGao;Ix)ybo?H9?wt1tu
z!ztQ+yi7SgHROXr61L@nMus)Hy0K28ME;bCx;sLcBZ;%|M#R{W;$96{`vq`bv|)%c
zsv9qI(nR}Mgr&yJMz3-*hN7r6Aw?}BfDeg|s2y<4D`)QjJwU?026tBTU13Gi&P@|@
ztoy(2AuX2*xZ3Ub&$XV*3kd!s?C4$88XX7fjb~#o^)3xkWDq-N=8EGiQ~p(1>mo&W
z96nqmaH!c8PiuLy_Z`d<Y{6Hd1FMj_>FqKWgo$2mWm+Q&L;9*S-;Kn#1fstF@$XDM
z{ywmKAng53KN$D&UNl_&2%}XA2$AIchkTCArBOdhd4$}r`rCMQ*+@HXiC@n7qPVMu
za6TX~#6cj7j+&LPzgFt-M}Cj?wcx304P!2S%-$8P<FMd&mSQx&#-9aB%2me+|CJl3
z313FmcevFpeo+dqAJc~(>fT!)lYAm!(&N<Mb7KcY%wZMHQjzVjb@M=(?FXdk!^cl1
z?W}ngB%g7g^Cu{l!}TH$Ap^-NjFWvLnKl7nFvlJ%6Fouaas(uz!dGD6D>cH1XC{_`
zqG9*2xlemvwf2JCtZlt)oU|PUK8z!F?fF`ejz1Sl(0ufVN|5)VO&ab}p(V8eb2Pe0
z&Y3P=O20V}`2WvrEy+#K3Phiq4PPlJoNQ7>^sz3_y>P7$wQ`4GYg6sfnNBcw2L<vE
zyhk{Ink?mGoH;di^BKIB{O#D&eCER25Kx@hlP}dq!Z4%KwI$cT)27(W#34jEa33&S
zw@>}St7oX{S*>XFtLZ5rf;RrP_%oEPgN6;arl3v&>3fN6v9bBOQYM$EXR0InW?oWL
zx~59ss@+}PYuR2u^qobZzdIXwhdI~mzx4h!t_YV|%3JPs>NVIJUBf17D9X0u3}OUx
z#vOT66KYpBC*)r}u*cq3Bb%OrFVLQfHDD)aF_Lnp8aR*W@=Js1mh6OLq=+Ckj@pB)
z{%uw0NtQ7b<~g(3VC0WU!Z7M-=1+%Z061mz$?cx2gS<|`<7;H0KVcp9>sM-v8x%i@
zN-?g~ESi)B%1o#hQvl%;0FSS<2NhR0%I1Ez+V38FcRF?7`Yp2#Z=YTljFIVWhI0$)
z<Brd=42YkqR0m+Qn+U{Q&%k2}CMb3jmyb;`KIrvt#vRk4u!l>`HEt759bWwQdAZK!
zfSPrIRV_+?Jh1VgcX&*I`<Mh$Y%4VnPp@#8y+X!D3Ql$>`*^U-|1}B9Ukr2!=EY#|
z@m(_Y`<=kf6un7|JNfci|8^|xDG(<dsX_(2S`}24gXc+Q#O0m+(kf@yW|VG9LG3n6
zW$EyHsbK$#UXJ-RV~NivT{ZtpI~H%<Y+*Ag)PK2>j$8YP{*$6XB#rzJLj3Y{OYM<4
zC=mpd+m>x?NQ~{jhSGu%F25AjJ5q~>5Ck34f`$DKB_rOr(csC?B2D-g#GKa6UTu>;
z#3(wzKG_u}Fb@71>RUIf=OdS+UEpc&{KgrMG1t>GVF@*RM2d<X4)YtqK(pg4t^!AM
zJa4k>q4$`AX533dzF%v^1a_a~qzLEX<al<7yY1l3CJ9WdWyP26og^}|tcQ68MNq1T
zP5mh^Wh56|COlfvnWG`s0P`uifLgX!BZcJVQ<>2Ve{W5oC%z5FCRL~v5hW8G!cLq?
zHbbr<z+UE@_xvg#uXjw_VU!b6c9>#J34lXpfK!$RU!E~s{E6W6+|FkU+5E5vIh3wQ
zHE{cA>X%S^f};}#%zgxD79%;)Bj{|aAqucwiH7IoQD{Tl2dc4lXK5QZitx-YID?p<
zdkcO5);3A&;#^{eNL5SDW5Qcj<7iu-N;3{szt+ivd{lw%K$LkgkHU0A=CwYaOc~i*
zK;4ByCR{voAEY7SV1<zC`TTmGJ?IJs1WTV>rGzq5!{S`rlZY|LsS%aP9Yu5r`Ddka
zf0io^{UtN>-AIrVGAM53ztD$D8VUU7ENwp}WF;SNb_Z+u!`40uqisuiTVrgkF4Kj?
zxe4i3t!=s4pz?TU6Cygu<x~oTU)ySjJF;6<3JX(F9sAXA>hBhz426F;zU{<{`%;6+
zX5QuMo-+|R(qJR=lS(f!4!q-<SL|w?O2W2)UF#Jyp=;NGsN+sqd8p}}-0@3&OGwNX
zH|lr;#lr~ic{DpA<SXYp!;)nTGZ7K%we%#Qf8l2<z@GjDt}?JnW$+NQP>S4EJti6G
z7a6rx37I6cq4m@ziADqN9KJfOq_nC~kPR{T>eViAYx`z_<OJXz7my0Tfy(%aON*C(
z-n_GV@a+PYMQ^h>Dd5?8KlRVy{&bz~6sgT}UEJQfDKDAuqALFm!#>-;68^O0(=@5?
z$xu?dkS6T4rN`wEt5AjY0k=EAD`HN!qjvlg9A>m$u9w2w)x+L0ls#>?47T!>J^rea
zL|2a<nw6g67K$E|f+(p$+06!o=BI{RQsZf>Si?2k^<-JLgXIGvu%mctRrIT1^Z1pQ
zjnmO#f+Q~^j$4mPK^bvKMNmpSIFb0zz3#}<OKMj=*-3h5I_*zVe!OfzSgA}>dLeWI
zXFTYGFe~LR`k_{|_^+f1gR!%Ggwk4$=pjE`+QQLtR7ieojp;md<szFAbE@<orP{O^
zPG?BE8t`=hjBAY0L$;_$Fc6KSXIt_+Jl{$^X698Nd{@ndnv7RmSJNMMbPxF{DtWvK
zLsjyjFD@9N!6Gfgl}Jrk0r7`ptO=6B3P-jxYS?lW1Y99`hj8Ke>`?hNm9y;^+e-*;
zsnLfSjC5~?vc%j5!9-yvwm74N`~+SC0_R;*+*#_M#c$D@tcf-y(j=PkdO@*B{3jAT
zK5lbx?3~Qvq2Kdsn3AQpyr8AgTHdEjO(c)+{p1_)RbJx{x6+@AVH7A+*uDFvp4dr9
z<W}tpgk!Rba+AIKctfD3jXB?4PKN+o&5fB~dtLt>X6AbLZ;zH>c*SgW9N${FIk<Le
zF2}!RK~dM0h=>XW$Av`-DixQ?JD;4P1p4bx@c{DKS^?}#mIS%SG0?niD2spID`J}U
z&KwW;a7+@1zym$~R+^5_8HXqc4G{3=PDgq2NVL0r;fg5(OI?avy*H;6-Kku!%j)TI
zN>j}|cr#zM8Hz)lb6r>8X@?0!NydvrpiIvV-e^v<^eqP<mE}!Pc=paM5F%`}f-qKL
z2a9}RoztTc5qa%&OO6me<!e36_(98MSGLoPZ)zh3s}~f$Y1F^&et<W68;(f;@yOyy
zPltDhVZdy?$D6BOw=1RFV`oE?nuQ7#%F?kyzA9FbqX_8)O8xwFd|14Y104M}=v_I)
zU88Lg96fr{D!xje{ZyD8pO8J8!#hp(Xw#hnb3j3=*vW_lSGCQmPtv{(K8ZaV!!Qms
zNO!oe7+}G8th_PiQWp1$Ch9pXv7@vM+Mui7Cftx}a8bqV!l2y#n_K5MMmGVOu%&QO
zf2eQYNbg?K{%v)IW!TPB!@$-?Y7kJ5X927;cn~9j7%Rm^0$Ir}Oz^%GdAzI^iMx;i
z3_g;R-N1*V;ry4Al#k(YW~43KQf*hT{eX2wdOnaezv5aF$&ObtGXdCi8w@Y>HyeOL
zYh$g&)uM^S5jsoQ#x$75cLy9s<e|VO0U_yq6~~38)c5H2CB%{wFHk&p58wN*Afa8)
zXY#T>7*Rju+9666P-^~Ln#09fmzo8GyGT-|Qh>_RvC~&%Mt9h>(6F~MWGa~7IV5JJ
zZyv<Rt#>igL!Gy2V@3<dl8?{6+6liufAS+f8I0-Sy<C%j4y>+zKDcoCw$i<~#Z4Qa
zi;Tcu5hzU6Ps_2+BXHv#Vc%sNTRbj+&Cn&vyf{0s20fHcCew(EI&0EfQ~EngnE-wx
z$SX9~-)#;}VTWiuyYs}<*vm3gFGOR=z-e25_ZjS9P1WQjaBiM|z+}w`dn~-ODtY02
zj~)Hyrp#5-_uCOUQG%6{?*8fMtEJ=^YGkFJFZcPZ4^#*tNp=_2S~|Pq>K~&#@%~sr
z4=^{NA#Uf*Ua!*t)1tv;z*zY9n4^gXMH^F9bEUk1OE57qGF6D|e)%)DZ6(=~@Sj>s
z@immgU8_%kN2I!*E15$|vSHKwuZh`Jo!vLm*si1T9un<<&Q$7>W-4V`y0RE<;P~2<
z*}zr8VRgaCC(Yhy9rUx6`Ib-nIUdYRA6nc;bhotsoxSJ`E^NDDcq)Tj1_wuD{+3uf
zhMKn<h*{+s>V|!~ItSm>^>R>v_g^>3_LO)Q%xnjE?{VOSV-FNjbpQ>aXMh)kK=p3g
zTR@#ox5y~;v;ch5m6G<q6!LPJ*0fRRj-3;8pZl@SO`#%AJSBkIeUH13XSDE=0G;R;
z%OxU6W{`za!LDwhU9MyiYHxrpS;f>{7i7my4bA#wCY!aKcK`vOt+V&g%{O5TJN18?
z`@OGcD0R}vn(pa+ErYL{FBm-XL7`UB$c-^ri{+Irq%gX-F<3yeeeCYtfZ3kO@lenw
z3@&=hx2fdn(6G@Rw2VS0huRJi&TJJN$5P3UqSxXBj%=34*c5XM11M_sbO?jRwgGHd
zA-SZ;1qjF9)%kd8=wZN{8#l*>ml-T*Z9v)OdAo8fY_Dj9@LcNn1IQ#oOV&(Szq)5v
zBy3RME@tLuBFuUG!D}YTwu-APFR&oc=Geg~RuDI1L3)X6_Qubs+0>NyX8b3z8=7U2
z^GyLvszs4LV|q3B8XrHb4=x-LaW9a-3!eD$i20(_z)>JDaiM*9%9JD(J#6gQ!GTZo
zI9%mGET>s4i5>Ld<)YVZ^g#?<UwnXisdmgrbIYAPrdD>6SGQ~%;CG17sIFu~hEUmR
zk)<rIHx^_Kd9aX`fsq@ZYYn-B5csol&33JZ<LiFX<`vAwC8^15dh@{)Rw{R;)FweF
z-JZ&nqTwJMzs91PkdmyuD?3NY(4{|<ho>6_7>CeShYGm)67);PMDJ7^PFmduuMJ-p
zR+18$IWK6gTfFAShWf7nCi*UL&MNmz@u3{0RNea2*iNe)bv(k-t?qq5n8ri2b)Ay7
z(s54e&>4YDh48Y^GS5Nw$AR_Q*H>MJt568P!v6JTQ6F}Mn4n2&^&sa#w68T{9nL`{
z=bv@b3M^W_#jyvkbM{vM&Fh;kGi;g?6Xy`#<s#UU*yrdHaZ#!!wtxpD2m4j_;jL@s
z?{szhjji3V^POwdhrn3Kn?uk7l?wYIjmZ@8_mtWjn&mE^A?st<kW@XKS&aS`QHkJw
zp#MQW#LK!o_|jgzraZ6R9S1HZ2oW*f2zN0b7<PAz@~{^-o?I`u(G8}lkSGK2I@blB
zx&xw9Z(f1O+Gk6TVM=oG>Rc*dZ;~03lFUe8vp)k2bVayj4?OCT)soR+Iah;gjwQIG
z{eIAcQ#Qe>m=^v01?a@j=)F=6%7(lx!9;G1W*7QVpI*EEpy=C<swRZT&|Q|w1p}Ah
zO4oX&m;4dg;ywIntA5x#%MmWmb`K`I3{x2FAuYwQKm>IdxvZEhtJl^-@tO(mOD}NH
zE2md_LV+QV*Y6cm0$RK;{VCKYHn~;@_80I`FE&8i$K^_#Sb(DJDdi>SQ>`KAn@{%H
zw%cmm`;Ebv=2u5-OyL(C4ovQ#{&QXZad6QvfgheC>FMT?!MGTYTXuTgf)a`*nLa!Q
z)EmHI?WannNK25Eo3yT&!gd%gx@Zpjq3$W7+f09v0%5|Yg%Z43Y!cb5;*YN{CyCmE
zQLVxAxf>(3qy%^ljjIkH1qiI(AB2@7{r!_Asni|GCItfp3Hc)4;BZ8-$wgQA*4IHD
z^7iN$ib~G_o=+4o(YQ(JgNF%&#HCkx`ANYS38si;hda+ccbT7>-JuAnA$j8(U&mHm
zefWx5^A<@57bKhKus=)E08$PS<E}za&H!_4$VUxK%%B{!MJb}Wk%a=eVFpaN4emM@
zYw0sdB{wPlc$YT$L8x)i#<Qm)TS~zc_;0L=SW7<b8r4W!uJt--dr;4RMgA2COiiKC
z0^}m2J<)5W=S>Em5`s~P9GAk@j1@k=_^h<%sbhHdn#tJW3Alw+ASW-z{1j&4YCy<5
z<;RLu<pVwY(ApOyTjV+UGRrVpDoNCo`WyY^{cyXtsSpXogV*76jofoEf63w9AJ1$*
z+Qz<L%09>&QmWgT3m*P|nQ)SSEjb6I`6MJtwR{$QF-lw{XQnD_C(MjHBhA87v5~Dd
zBcoXAjJJ?POE(Q_4Z0m2uV(+|Z$|bbmNX-EV!+}jx;HbsK=hCT6-)^$;v%OQScTZf
zo7l(NOyCI=3cCcKP--e@4CIxeJ?-zp6iUTED%Vr^9!^rZB=g6BCDT(<JQCM4H;(b6
zonPdm%$yUtB&Z)f2F1fZ6kQU9!8PtV30c+dGTx`DlQ&kiZ}{yD-6WhECUsnGp0rgN
z=VCvMCzGUmsu(ONSLEYr^Gy=nGe5S5U<oF--Cby1-kSF(8D?x60GTE5on>@&94PY-
zW2W!XgRf(TAod%D#=j5NWXZhtX`;m&F{~27@tC;0@!+#;p35tXaHrTtVuR*B=cKRM
zbEtXXFvRwD6sSRc%+!c>@8?`zb_-#c61J*;{#*i!uoJ{JsyBWm?;~rTN{TVULzo2h
zqq}ynSpTn9Mat)Lj>Fs=d3JONKWA^De(Vv~7i%XyVNfJcdkLqa8X=XMn1mmGivpg;
z|M~@24E_fMB7!iSY-Z}Ognd0=qs?;*TzOBZkb)@phe@mb|7k?{)*cVn=7*$aSxUT!
z;JJW*M7o<H(If%4DLco3DJdP4f$dqyRTkZ=yc9Z#0FJT*5xpnoxO!`JTQb1KAKabr
z9fJG!qcRygmLTTn!Y-DI`#l+U0q8KP7u`)@z2^?`K^DCrlJxJB4P4n@fzJ3a!CxJ6
z%hR294Hkp%oinWE3@#Nt3NMvn!ocSYvuUL+fx(`^k>rU~U-F$kI~Rm)^P64ooqWns
zzUOq+#-Riw6(#!a=CZaCY@`@2*(E~HHa9f71BD$VHYHv{R#GKxO8R<H!UgY)B<}<D
zrCm@>%#^t|msuo0j#%?bP;@4EPlC>9^5NV7B#P=6zmq_EWK57M%aY0*wH%t3-3^Xr
z#P>=a(OCS%>zzjj{NzAzhM^k2JPl$eBn!RbT~)Pl0((+S;`HpL_vE6rnNj=&4Qc)V
zU#c`I+|4f3$*vJ?Sg1Knxsq^^j-cU~fJ=!2))1{EiCi^P9-;tdPWn&-3Y@M?=l7Zk
zV>!nQgH^}Vd}96i0rt!EJ%D)mv<b04(o(vttj)YlIT@$mC6?$UHSkHA%yvrzcIg?U
z7(+yt8rsY5c_M(}23*`@*Bi@n-Xgh54yTH0vBU{~*p*>f7Ag%5)XaX>Ea|rNWs}SK
z!=Y2#%1NW!xZhGamz6!GJ%VJD`?fJ7pRqB%JeU$<>u~GJBNFY{^r7vnSGXX5lkc}>
z_@}_vlEhcc2*7bU$Hdee0qsE~M6SS|X{V_Tt3zSNm=Ac8sBP}C{fxx>1OsjuwuGD$
zF4|}sgbjL)V;m2vDj)1$mw7sLUGZZ=2Vfp1R?U<MOQNmk3IWo*dj$P>HYis*C;KDe
z@6kZqN&JWZMLE{I!#liCJa`EZIqeKyZ4jf<=)(=ow<lXa2h8Yae6V>ar|!u*O60%>
z9OrM&`_cg%niFFjreIAd=W7of0}CiI$KkRR?@>GI*q%}ISakYj;46>OzlE8;v7p>f
zg8`CLLh=%1jvy#ATO|;u&&h`D`kzlfSigldn8Cc(ga<Xw62~DUjHWT*Hi60(5w=$Z
zGV8EiIJ5)&@+<>i#Qen`FdG<69D+z5vQ|KzSe9Li?e0bKg(pc;#W3a-deq31TQD-r
zStB~H_Dv5Wm7?(Nh=o6Dn5}t2fWIp^^DdrvWiIThrTTRlc)q_^b3vP4LmDttFO!P>
z+@h%8aBYEG`orunE>1J*1Z%7;{T#|qZ0IV3511{bGVn#+<?~P^oe~Pbz9=!pz(s!I
zj*&b92n-UGuir;tBpEyqmn!^!_5K<`W?7p9CWrT|@*~zvOEnC6q?=^EcU^BEQ4qCG
zTuQ~XsoFy4c7aT!O{|qR)t_q=_lEZDk?5V11%zyr1ZKtxqavHysmhi5YM$3NB#P5@
zL>&T^)sR`3{-LNuODsBe%0CR(1A(S-e3rcUT-`CiivhHdSYg>%cmjsJ9l)~a&8kN!
zT88vfzr+su8B!BkS?QZmr_QYuzcEtoq?qb+-#wljQUcUU|HdUQ(Exdf37Zj8<Oh5D
zBwC~~Tvr>+0N{>Rp2NyvI^(!MMkA3w;>P#liVFj^Qy!q+5MJ!p&8oZUr8m(BIaE~a
zT%cdk!4_N(BIE*pv2MQ!`sD|_Mh(0+gSDIEF*UkGJxd=;q*!T)TSWES#$2a_3%T-E
z9!qqXB}kX(Uzv;9a*n3U7D>qq_h(J{MCeX{ACi||9jtfBCZ=d+_Kx_tvu=Hb`<&g!
z2==ErCg?34UxyiK<E<b64#8hzWnyJbq{3{kF3`-x8G>?z&NpV?3Qb(~<e80=KcxC?
z&UjSlx$h#iT%0(g^wCuQ;wLw5sQdCmTpl)!0K}Y{@XXZ`v0p8p)ySA@WXW%Qo1sU~
zi`?DS^p42M7z6R(BkNbs6LmPocvp%J6g^hPQsmHX$Md|d0Cb)Gtpn-aR%we_bDnEB
znN}C^>g6!!(+p;lA0u-QX`0tVBij<b;YP22z$j7!FiP%pA6OBs%_NsOwj)AI`$ey4
zk#8IbTRmFW>*HmZpY~Csd0S5@i2xUAkruv`7PrE~&52Fv7(kgKrC8N8TWjWurKf(5
z3U(85Ms;+=*X98yQTq`*swqST8ZgGOoCm=(X~?nLDEqKCj{%PP{|)1mmgj|DZ8b4G
zQ|lz(tUNh0ZpPldU!YZNeKPaImBCMn*G~mDNaQMj%78Qh<LFvlqN@0ac}w@-jvex-
zMU9gfJ0+ts_J97=A9{?O_!y*~L5h!uD0q|cE&yY(eTO=t()>1e^a#H;6pnrie&(wf
zPe|4sR?X9}890#=)EEfD-(_^Qpuv^CelgkBuQuwY^|oR!%sZq?GgpxX+3ks+uKi7w
zZ*9QAV!>Ig=R7uXLRd2g47v|`2&}I)D`At%;cz8&vyYm!3Xh!TN6*7N35KFbhtCWY
z`~?;kn1$g8+Qg6(3-6UKI)q#D9Alr61T}m;$Mt?q#@-WlTCPnbd%KK~(FAaC{$=tL
zW>&mVvgX&gmG=9tW{>=Qhv{C4xG#_HYEkPwD61#D)nZMjnsz4u;Vp?O(6r{|V}1#s
zw1+*I&gc8<NyR^Q1(iA0!aze=%`?|kS%iA}L#)$t(R3BP76&AmCJWhYZ~!RH-mP<N
z-;&!Hrj&_f*%+qAg8s=08+HZ<S>*PIB4>?!V3Yu#2uo!a%@-&fhuBCXzm%*mz4lAp
zpGtm67)IKZUKkXkGc2u+b&%zl*Sb4CKDlk(7y;0fh68H&ig_Z2N^IeuF*xnwk$Z`G
zKEN2tS$gvyATX)m70f0_J_biu+kH2N@!lkMv|cLS!ij$3ezpBqiySO@odynG5;Rxx
zwo||bLdSrjM6sCv=ViKo2d|Ru;dC7$PeBEvZ{Em1!knymnsUwr#Bb%HzEbK%tod@}
zvnhjXH>wB^j}JpVYbcuQBiMUEz-O%{Cr{>rk{o)zL{+i<f$F(6EuUm*F?n{uoruc)
z0CWlF&9GlveJgh315RpOZ~monmANsmXwm5gMS$3=r$zQrF6nAXmcF%+RP}M%6b<K6
z{gg2e7s`Z(p}<+dPAy1XT`5=KU7N2xQUY9)yNiFb2m)OZUU(V|5M2X)v_xlsYx?j|
zfS19rispL9MZR6)Gd^=6wy}Xg1fiIj41CeMGD#|dyRTUFgS>>kJN#_~F@p#&=mwN%
z=>^ORvR4@Mm}Czw^Qscw62krE3wKrPus&BFF_F;ot_@HGJG_L(?!%@?2PRH+tE+#a
zIBdg<UfKHOtG!{-UUGpNS5Z8+jbWs%l{ciy!f$zXihd}vTakj)(t{`dYt%5dYb5sw
zoht=K`x611z(kT}WF=|^*1KMD-H35PcKEb3<t$u>fNlWI_oI*tgpRYvgAnQ4iYzsi
zgG774)$KpvEYO1ql9*|>FCe`H8D$N-Hsq041(Yow8yo0=PKZ2uWTk9Pa6)xJ(2aWm
zb%&sR6;%?n#0~VopcpNi9mR6ZThv1(5MAwmP;+GNc~~=MajJ==%1??fehlV3eqOI!
zTlLvDOK#7ptm{+ObKb;wX$Q=Rs8y;Bn=HArF@}f(am2?yL^+U(Yzq328xO3(QKYHX
z8}b_UCp}D|-o)84r-V`AN|`<q_;%Bgd<^9>P^uHw2ppv{_BJ!t?i`{U^ZB}mCA`Hf
zAcA)s+cFu<M`ZBAv(7B_Hm=ax{VX^C^9No;uAz_tQ(T;oAxoLjC3xzeqTX3$r!Uim
ziy8^!BYyq!RPUghJht}Hpz2!!Rb>6N0Mj6V^isU33b)WCH+~y$mMgVp+-VwK3BvNc
zH)N5u+70UG9@u^;Z!|o%&zvx5mXr*_`M9(v=c$&;DfJU*jOCYg|C{*&1~%3=94AqF
z5N?%TUtNSx>6Y7f8m_XA>z~2;(5?SykBzY4OG6?)Kt;M?o{?l`Y)9rE^{{|)A{3!b
zjd0+^z`r7elrf+9BquBO4|VEFvRit6JQ3q^B`fa|wK-}p2STl^=~q)dMd^hhvO6DL
zy@#g6y$j3A!ol49KCSb6S7s;Sy={4(lYGadEv0D=ZQ4rlguR3*4P=EwI>s|NLs35~
z`_kJq8V18Vo5*CVGyv+};R8M6qx8gki}-9Am}zA*`9m9%^v(7II86;ATC9il&wI&%
zxsBpJ5R)lr+LIsi4NFIj1~1A|GdaPXLcj^-ZTy*k{<YE6=I^}*kR4166Zpwh>&@h0
zx%s3~<dS*}tNDd3*AWT<UN7Nl7uPPj{Y6<_rweAE(_8^Q{ID23!2H6*Ox^NSO5<(5
z(&Ee5p-T<w!(p+n$a~KMAQ^$??V(m*vOJl@q8?0YeUy2Dxwwz`gH2IWz*eHtM@t!5
zhPKW04%`G}d+@~kzKbkr2>fZXzkBnw8hlFnq&N1U#a5%ECh;Ltkm`jqX<d_q`K(B>
zXq#Sw*<di24EJg84`{?i606_+!j<+_qO-6-WaPegpKcl#tysZD0>6}Dg@SU!Oj|`I
z5>b$U?iuLBcz@ADC={<PaS}2umv>}&&F>^p?h9LD6ZS;-lWXTT(rqkf#74?&mUQhN
z_3;*1lUV5dxE6duW<yS69CEmw7`-`Id*M_LDHo{XllqF=MKaYg{2UDE!-Q=OS<h3d
z^HX>A4C#;EPh`(3wX&qKShbDI14k*+t3dAC1<eT@_gJ;rpT~ytu%T`1dJO(7DcY9T
z6C-&E@qY;51KOweSRj?4pnFwQ(j0>G=QAdc+6g2;+R0+<KBBMsHsg_*K@DH3SOXD3
zb!4%kL=?G<XovS5QdZeD`i<78Ql&i6W>A_`uQEp922&(&upvQInqW}F)#TQ?tnJ|U
zh~D+wjga#y+2v>dIb%X9x29{+rja5On+<|OSkK0H>V?npa3XKc*d;h7_8bz|?Diue
zw6vudqfXk5H3%?4oV?cNth9&c@UL)w_MV=ahI0m%zrsib^<9X>3Uz;E#nXv1xnds|
z^^POj{RBJ;{k$^_%*lZpiLFEhkQvi(4ho$~gctA!Oyh7RhM9lm=&mM$g+kvHx3JVv
zYnd$5xMAL?Ra?VQ?*SF0qpC1l)45bpxD)W5<_x>RW9rqp(+XgD5Gu_3bENH)v~lEj
z?+Z_ZKnr0&fphp?qn}d54()QzF)>9<`f)IYjUW4ygBazkIEO<luEOSqz}+7|DuGqc
zwAlCbl5zD>XZG+cg^nU|EF745%21Y%mMAhkQ{_}EZat92hHXFr8Zs|ld6M<+%gJds
z^|OzPkBrw$wbW?+z@*D;+rc2h%gO#avuIh@#9t0ap>@yb7=?-?>!8U8B}7;qygpWP
zIG5%RX&sa&YabVtk{tN8lIM4{Vj>)`YrN$=terj0L&kRNUJ!CAq@8<aGOA#Hnk~5}
zui0I`x3$6n?}i*jC)(w6rbZB=<JP#dY*vU|1AB&mje-7<st2rJ01obC1@IS@xBRi9
zcrxRUGUB?c8iETop`j_S{z6_q&vGq)2AN3-Ym7;Z_OobeLDtYJV{6b-6(e4x(h3je
z_w@daT>bu+POOQ950F;8+Q8PO?NHe$2MjE+V;TCb>tA7QE&(^>Ecv?-h_^>{jqP{c
zPp9+7$vBY&7?NaGzfD7USQAEuDJX9PPvIUB9Np8?f3FCj`;#KJffeIe_o}R~cX(yf
zJSXh#U9M%x^E&TuYjw&Iko?r<LX*Q#yg*QM!MlL}5{JRXMLetAr_ouOe<Tb*)cB0y
z>`jx_Ye{)&;1$32lwIU5=L>NmJ9t(|EU^-W;Y8zS|DJ&X-`gycs=_oozKiNH7<mB@
zPtS1#SWI*MYz<}19Z$hs!DC?76>SoZcY|P9%ckf`g05+bYk~Lx3v|xh_=92BB1?dN
z{Q@6%Crz`^sVz7IShJJ|i+Fo`v+u`SedA!i{Zw|M>~j<5a)qR{v|w7s(*e{uVrMpC
zr27&osu<Ht@8~h;WBpg4bmWYQwNSpG<rB;m)a*@Tz+c~!gJ#6jUnsB|`oaZP=T-y`
z-Vt5lXTC)eYZ=->EQa{>>BFZIFu8_G&(5b5BmOvs<xgSTalsdhA2c@d$&b-KjiQV<
zQBnVcew>#^7IE^K0W>^1N4)iu3qo9C8mNX#P1=F;I12Z?rcI2|V(AY5%%%<hINiQO
zwrKX68MmH%b@6Phf4b>ezXjBYW&>S<IL5l!^<f?TOyDlVr)l2OwvE+N>Yd!F&FEly
zso}R$W3-N3g4=~ELd5k26wldAI~8g$qWe%WqcvMyqaAk_+&>{+6HR-s%<H*+!vM`-
zBJ!9X4#T7ReRv*pM}$b1YN{8e0z8K5JmHTh4!jtA%fGlPl&p>nl3Wa34*2{j0og^T
zl|s-3z1o@)7v-Xt;btfb5OW{mcMpTLfN?VbzGb12KUSAxxouRjdjYEba^c-MCm*@a
zsr{h(tViQe0|CzMMWn;Z`YKlaz7grQd$i(7DqZK@h^9iUgEb`Dkmy`o>Zb~FY`^@}
zpGVN{$wFbCElJ^N#R>BJv|pl|Lp99^NAJ6<$eM|9(ctFSbj-ZoGlt}Y8`j22mK$&j
z+ckP`x`c^g>rk!W%6I8aoZtpihdounl%xXyDD<LP^|FgB4dxf|Po${D!~5Y5%5tCW
zFs~u6`*vTKQsdWitwC#0)YblHxW`GeEwzrx!}U-S=J1f(hWuCF!t-C>FRf=S;j^rK
z^ktrTvi{nBgw@UjUfbBRPEZj{oBK~WQ5@BEtLGLM3hr=Eal3N<TIN#b?wrrjvnUy8
zs71c`8Wp2z;R9Dop*`&IXhxGr2qC+vEGOO9GF<9rAhcx*5eWhx(7#3HBT$7E<#{DW
z&8+R^TYcQbXXoHJN%By|ILkR!d!0b04S%jy5xSnmueIf6??xR5Uckdps=78keyK_Q
zgiP;<s}xI*$nlGd%^#~tS4)t!H{)ckD6c=`9(;OgU9x8NA$$1w4eNh*f?9^a&=#v`
z<s$$q?5o(^IQy``M<WRePKal9D&dIWo@CxjCn0`i#NjAiUiwP$*4g=R?U0B3W@)C-
z5@c%qh&xblAK=UaXss9@aPE+UPd3Ux5OESl%m9uB6u?%9t3bkWT+B@x(I<m09)tDU
zLwILrZJo(C-0hev0hbLNxDnd6LvDJ+j=$y?#0L3BOM~#su8F-(N+VC?3$|_&b4dsU
z+sG<E`>I|vbJ9iEw_rrt&Ik9kwu}(j8ndT|4p!jws$lPw3$}v_PCMws|7QiKz>o2M
z8993`wouHn8nX!3kr-PX*M`F@l!)_#vAb0EXiW@ckcm8}UaTS8nP|#q#8JF3L^loF
zqlHa{bg+_3RLq0We(H^l_O214PShJhbEUP_(ye*9|EwAQa|b-_88B=iWA%%g6uvGd
zcf(H0l3hrfS%|}R4*~nitc8^*enKwDhPn}Q-7nx6!_^3IAdkq9{J+|=661j`$6Rk3
z1KIqJ_pz;#Y)(o^50p}2b|ppF>XK4TeYoF7HQ&-xGl<ING=lTs<ajU*(VJ0tDTBdD
z)XSf4=Jze+Fi}&3J;Dw8wP_?fj`9M+d-SWLC4k{NEpACbW+FZ4j?&|}eg=)5g~r2Q
z+}f?LO;Nv>v7lZ#QKNaX*;GPTA~y)UTY%dpx8L1is@P6vz=^nxY2|xJvmT%;@C17F
zj3QkP#|lh4Se7S~4q?7hs{Ka?A7lfva}dP1AJG9ZJNk6-_BD<9?6_rlpUD)m-x%rF
ztSM2&DrZY+6Gii}_!u~Qki>(^4@kn%8bVRjx#XFeN0x{8$X@#V@HAv>Gf-R>Uk2Ve
zmW$z-YD}`+!PVU=s^u2NYg_40H`@2cv{oDI#(*$HV5kaHx6#sBLkfsAguHaoNT66+
zo77~Tj}z7Z6#l2o?0G`0C(btNl*XBZ7ckxi{QjuG@)NP^1ExLZQ1Vy4+oaJRJ~9|n
z{(=;$Zd9rEr>|Jvy>2Rbdu_I6z;OQ>0rB1}X_q|9STctS?8^S?KHGm%IT<;6F6ivC
zWjw(A!qrsnV7|z-+%iD|w}yxggtMM|1ZJt=%43!=?3P)A)z2SJPrFvW>%QWEk6Sbe
z&T=OB=T-D<IWW>-tp7p9o2O#BYU(%7y(%?|ceFmLs|ZX#YgLtw*#p)^<5F^e2a)kR
zLi~uGJ|vsmi_q^k#X~Q_s~8v1oQs0<z{}shuwf|$;%nVdPlda<wIPiEV497MvOwB0
zxzExL0%3tKKzFVgWncLrJv<qxEw}B7Y3yfWL^m^AolYOOI{--*2iritQAGG2=2NKn
zW#wa@f=1b|VhzvK%!p<8-A(5LP?|8cY$bM8SvQQ0d2Fr5CVi09V3Vt9LX%Ku@S@YH
z-hUu=YU-|%XTjFJ6u<*P(Z%48Ib!x0cINqW?3#u+OE#J~mdZrDt|4mx;*WT7{8w44
z%+0(fEC$liFSl0I2nr<Wf76n&zYzPpcP5%S`#{&WdBFCaj8$z6@w(KVGwP@>Wu3&u
z*IV~KFHl~8f%bfrpE1h8)~RJa4OZ=NSeP_6?`B^(yXK}RtFz8;p0lxpuMdqWC#oRN
z2%aFFF;kFg?xW6I)-mF8eg~J7x=4A+YToE9%9I#a*N<fN)GxFx4tGN=Yh?w&)X7tb
zs094ntf|dK#15nHa7d~zTr1i^#b{^*!v`YBF@wPOQtuq~@i}lraf|v3GgOd#h~zKT
zWn9nSnUr>5u7$7nD28%Im8~@5HnCkMe%5l&p6coOcPd$Y&9CV;Vxk<2Sfnvk#93R?
zR@{&%xF>huu=5X#!Io|jISPVV<Nn<dVrvW#^BVV8EzgJsDMCct?b%(ic7%t8wVDkf
zVv?<i%k()#YWeVBhXzJk)x;orz@l$#dTyS9C4*!}TQO^3L&Eh|9=XHo`6}jr^?5U?
znX>|1=~)<zRhM#kO^kBOGhf!U)PBU#y5XX|^i(s7BFFPW{yH9~jX40NJSIv+D`=YX
zAwN762whFUSNIQPNHCd_hD-{(eHe)jCv4Q6_okmVbiwxAy{Vcs#!%%kv_mhiAe$ye
z1@Uu}-XUB&rxn}+!-ZH_a38O+>)beM-C7y}``z2oJYpUaq3f(Ah}Q<+Vv)qo+)ptV
z>J@b8opDkT8~x(?{%#_HidcE5lmjEs`e<kO)*z+#nGc1^`N-aK(R$%?29PlMtJd^=
z47zOGnv$7V;`YExr#l;M3_$;-l;r1vGIRA`@JRE7g>qYdjkgYGw4&yNnU?Y3ALxNM
zNwQDnc-UXJqb*6$qsS5<kQ>uLwnoZ=CSeEriH|AZ44qmQVE0ps(4f)P;yGKag{xfw
zjTp(&Onatp#}^6>Hl}tVnvF@!#8miT0sWc>SNN>vq!Rv{$%FF%QUaAsUQyqia6T(?
z_Ev7TVeKR5Y`eMtMPNO)<1bL<cpL*#g>c~UYBBv_hUcC2e(?wb5)Ra78DsUv7hgLq
z6g;0cRFiMP76$+}HaqYyCrI0FwKnsU^0$(O$r<x{|EiGaLzzhIL>#<<u)H*sXKM@W
ze0CE>@{g(+P9CtefffxT!d{hwT*R0SthNM|yu8cWCVYGt(2nbr$OAGhhNhYz?9S;e
za)jpvOiE*9dmeE6HjtC3pXBSidhG=7#Mi+Lcx0$0Wut0M30sNgaM_hTiOU+Sq?a6^
zPJxI1Q`v{I7HGn_dh+Ra)}hg5M6(D4yOW;yZ;424%IMOxSw;_A<8P*=Q$nXHDKo)D
zW~?b`n@sijBYY}syHgLYMOG-rb3OfGSZW~RT9<N_?P8SnN%-SVNTH4Quh}zu{A%zE
zUmG0`8PWn%iMtS2iuDnTZHxja+^_vyOJDd9&bLcKiYg@Q{vib*WcjnFxi#zzQZbx{
z2=rZii`n|TpRkS++}1*|5YuPA`l|fZ#Hai#W%Zdhe6}>M;2%Z>K=UpQqSZKhuHy?|
zvKV6Pg|Ng<gexQ!PE}_3@u2;p>+Ly+&Kh<GB%Q`6PNwad<twveOVR!x+BF9Ymr*rE
z8~RAC_|aH=eKo8}{&KgChBl7&y>hp^n#|}kQjr2J{N3pN`iv#&r4L&sMHi;anp6*w
zV|zH3jasy>RI4yNYjN!C*`C|IiZG%V+ITovK<O1z6YMOmi59_e)4EMQ>eqd!HlI@k
zX-5Zp8lf7DswSf2>=k7YJ;@EoR8CzVQf#{PicT+(o#m7X8`gRgUf<OoTj^L%al%N$
zisvR+$Oen7^&xFER*TsGb`cl&=iY+)CfkpLkg0N3+iBkxN4D4SOycu9ZIi(Onqo3z
z*J^7#4i7f;{UNi7DgMOY=1dtZPWDT3X@|@wB8BoKC~_#Iz=9jo?0;ZEB-Mg(9ty(5
z@bzwjt=1ghdy}k*X8bH@1uKnSXowPDMMm*aFRjPSNdO8gkYs(tCO~%(^udlxa?(W|
zFwQUnVG%Q_8aG*P1nMDONcXmjK+J$2qD06&>+ZN~GCB&mHt=&v!K*b!<q3LHIfsSR
zn_>b2N6(c4<{v{$i2Brtn*}s|nny}gb5p8^_<Y^Vu1^jV;8-6Ji-Z8wb<&OJ+x!Lp
zPZi_a4a`z%sW{@}@GIpV@hB?{t_B#mhx>7r!B4)!2d~D6CrZ-EqIEl3AaxA7!-~r$
zOM(90II@!`My5kdoFCP-m~Ox3)&3HUjY?Z&V<q12tA`YP&$>>7q1&z61jo|)1j?Ol
zQ<x)D-*O>yFeXMjgbRk+%@DNnDX$bC<VOVJcHm5Va|7qHnav1<X!baaGSV28S_>xz
ze_!`aKnlS(6cMaITK6e&x7uaxlE$sg1mGZ5jR6$wR!~v#nSzuy4AVZ@^-x^XG;e$A
z>an}P^K%vVYV%wje*?}+jL(jmF7|-@C>${zarHl@ZfR+1n3L~5JZVBZhdB}rv5Y5u
zM{<>sI&WvB$l1y6s=@0IVJMsuX~VMqIy*bX@_pUgZqyI5vYI>hE{tpGKQ$((Ib-BT
z_`ziwsI0gRGf=lAYCd3p8yuu}nU5P6@qme5?|^<!Ao7()FxFDNEiYKUc%>75yD@;p
z(pDh6<%$R<Z>De;D=RMEopyko5`~TdX%WWD0-`0maE}6t)gzU?6lv!75{K2S+e-L<
zo!T;i@wxM~<fE1-8$8x8uLlx;xch`U9kak@GumwlAQ~KEo`Jp-CWs_s#1P=BFC(Y`
zfApy{5$>2R7@ESMSm?U2q%YGN+B>f4`mtfKzM8U*lH7XCUh`;M;!p-GDOJ*0;2_tg
zYpwPja#Jk_Jo5@(F`3r=Cgg8C#qeP#EA6shtwrzmm`jJu&SNV|5-LQw(T`f5FinX~
zhO=s%d=g)*U!ir(JBHLY|6=-rxuS^rH8)W9GQ=Gy_i-66?7k_HrUKk&HRPukw=sU*
zfP;P6*;8%kVkOuEz}n`uX5xip*Zk;iU;zu^2Y~1|Gh%|#4qH6l(D?p+%veT)gc~pz
zQA9zm#rNDS5y|BG_CB71XDT1=p7&Ls0*_^FV_WaKAJS>Vq+@9jv%phq-o_r7M>jKx
zH5T5cy!WI&o}v|!=~65FHJMNR&^eKx;@=`Eba`yqTBx8A$jRPNL~V@$XxyZ6hh)%E
zIU0p5ZU%FS#3%@xQ|ps$39y~7uA|e${n26j=P@WMK%h-juTK!p6XF4&QkET;R1qH1
zQp3x{=UDXdU;G>-2Eyn@8O5LBPX6Ku3#K3V_<^2XueQw_{dhez$}9V<Is%-q^6T8|
zQYUE0-4<rOFU54Vj$?7cy>W8bH`}qz>?<E~l~09O@crG2cDK?&()z04s${y}+tb%s
zHn{m?U^NkqDmV7ph%`xFdCrMoQBDw`QNhCvVzl!W9ooo<xgD7qkM{^@VnIjNq)9^$
ztyYR7MznXOM#D=dr3mGBwCd=rrC}v)Y4k5Ku^>JwRHQOQjp*!l;l_YFj$i%DXgj|6
z#r$iwel&MvW<VQx>&0s^pY5e3_IDR1y1&Tt{9kHyv>JT2qAD@{W9Elv|6;@Fo5e9k
z!uWKwNE9(yvY6Z2?nAye;e(L$@^&T#;~;<Jp@KejY2^sSUBLoZ$gB#F`aygn8){O=
z)DZH!{FCIxBAw+se3)?imB91X*Qc3NzZ(r#+lQhs$W(G|z-q;LA)V1fo2t|{s3|Nc
z-?;t1U1!{GsMbgHTeK*ZDz@St%@@mDj?G~>1+y_OmmS*SP&7(Bw9MQS4y0#KCmA^g
zDXFa{n@Ghea-qezE$-6&hugL55u79%P^e|wXrHOt2GZ~AZ`no#{_cDVa%UgLg6_Bd
zY=q*rx<1e)mP9tVJA@p2U3g+gY@gjtA+_O^bSe~3?0A$T=YdfBu8|E0+P@*+IEKSD
zf+T1{&MOZB7;4bFxeQ+|w`ej&3dgX%Xg4CHV9|fD(j#Eh5rRaBk3{?gK{n8=FjZJq
zz=yzigBSz5K7;T{zkt2~b%;kj3O{ra!!MYSV>I^f?)Qw3sNBz(*HRQ{UaP=BlH?=V
zITTXd4Trt>Qt4nVd5M~aOADm10*!3v>*scDb#AH=k%xqP`^o%ve_Uq8XeCI-%^i0V
z=bqOjU6lH(1>7T~x`O9Ti?+R`TBxP8B+s}|3dlis6kSi3H&#sR``DCb9Y?8-5>!5;
zx)g@c3pNqThDh2{h-dD{>2RBkp#@G9rz{>!5-%i*o$@Gid}dLV&U<;r3*X@x&H)U|
zI%b_gqI9zjNkR~Iv=@9~l>O6~e-p6I7$U?^g;`1?H9H_aRhoEu%lc7dT!-uv%2FrA
zh#4O2oNe2RKGZMI%ALd<y}$#OsXXTuOAQMS`p2HHeSyu2vah}8t<l+<l?=9)Lhfmr
z1hSc;k(k=m6JZ!F-UHz=DV|c`GG*lFO#_l~G#*N1G`pI*TiaB*tVT+;6Ig00gdL+&
z{ql04@Nkp}nPlq&pLwSDMeo}0G{+!Na2FgeQ;^CNgc;kOlNh)>75#VcSZoY$U>02b
z91I=Ua^ByX2hH(<9#(b4$Y>?btxJd})r<da4T~Q%cVSb_4Z9stn?fafvXhfTI%Sc5
zXn{Y$r2)Q)u?uR3Rj~8j{DBF*rtMCpNe9Y74ipP(q^N@Q#fot}ylYr+K8sE!Ue_U>
zqy-eZ3vJe98lrQV!P_o2Q0?5I^D1xqkxVV*2RLN>B&6hP&$3QN5VkooH);Ikh+$)z
z&>_DWrd4ZjKp|Ov`CV9gm;B{-rT(iF#vrvhbWT3S-4Iccz7t?wyg55z1fWm3L*(d+
zeo6U6`cB9g^!Vq>iGFCc!)<ge`PiN<WjMZ+{s!7xGPn}I4stt{Zr`LbzUG*AC!__e
zM+T{sU7~jEVIjk~-E_8nDz`C88WkU;y+-te-!E*>|KWD@Eq^$<)8x?s`<cjagppLn
zRl?aH?x`)P^5>T{>_(yOtWyDu^H=9Oh?||=ANK58EU036j@iCFF7wP*Voe&gpj~r6
zGQ8_Sk>aE{w$NfKOuJ?Mj<D(H3-Kqz|6tv(5*;K9`is_eV_vg$IW{_rj|}Bqg1?Hp
z#ZX-)a;p)B7HwkN_lf?b<9pCAtfpV+Ef05M(C;Q%cA*0UqKz8KaY0BdHJ;XiF%D`C
zZypiipG^#D-<TLlyRzE%HAqB@_3n^|Kd0v5tHJjv&Uxt4!;AC)l%1NIK?>3)CkX*=
z(Gxcy{N%er5dZ<e+A4hyF^p_YD7nh(+vyP2pptBqP+VJ|X8QZ^a@#%BOvyMb5`5+>
zvLW7xsv^{Lt?0Ndo@7|7550e@slAER28fK=!~&%mUeFzKo@96hh<xvITwdtsj*2Qh
zwnhTs`7qXA)ad4}%y~uAkogG0VWoZr?OAlHUu)Vc!xPw;Fb9)tKo~kFyU(9+HQ;tW
zz$L>oCXIuzU%mcB-HwX2i1wp4xSki|BxTLbpT2ITfI@PW!&O-?SM-5;^}x8pqNV}C
z9%R5Nv(a?}T|<UlmRcMwv}l64*fEQa@iR#0gQdlI!b+(XuB4wzC3Sdf^ZrbztO!?;
zfrxPlBE^)x$24HR<^lAy_*OtHJ2=5?fD`mA#-=>F67(HcNnJqm9TLs%N|YmP>E*!x
zNJi+5FxKY9N*f0(0;LqjI~YI?>pk_T#Ait46TSw?(BYbB^=<f3qR05k6%o`7{U@dE
ztan%{9bP!K`lS#w+z%Bl-C#Hn1j^0W^U+XTMf)gmQJxp+1Q7KV3A^9Z_PD^Z_(Lhm
zS~i3%XD2P3Pjvwe;Q{8s>mow_SC_O?Lml)DRCf~p;Tfr7#QSyHZS?ROnOI3oT2@$a
zy2nS?#*?gj?M@V|BObrsy{1$_47mf*aFwtg%QR)3>0q9w?GCI>%1)Z2>Aa0v>d8XF
zT@`&-kej6A_l7R~yJBbGdvP`%T2a!WSj>;#OTjp2z`O^B!^O+Bg;{8B&T+SVD6u(H
z_u$zZXb8vC##~=0LQ3ci=}lg7tQ6<5O0tFqQYgV^12h9k#5wRmP##p8c|X?8M?bvh
z&`TR`t!UBo9W~7HOnVyJ#_)Tm@4aW~{FT^^F0{#4HsHvZ4eW@XD!RUaXTe(V7T<w*
z$nc)R-e9B7dG&=$;M3@LgljMXf>UL^Fv5ir0?^`$C_HDX*u0@H>9%!^Aa#2@nG7I>
zWRKzt2m==-Bn?ZgNde!GD~2^W!KP3m0)&OH0(}GjY{tW|<0VmothxVx)x=yE##6UL
zE@4Iy6e^9@%olszW6<MWD!AjRSQxPEcyMEXG^~o-h@~*=LspVKt*~9>-@m&$Uq+iX
zN>xPhrMaK^*ys^b_uI2T(opFo$6Rl`28Mbv%}|mAHqiDQ&@qn{uq<^Z!t66*rC!ef
zLZlw(y5!{1pCk-g+9^1sCeeg3Mh@cGdTikHhp;r|lPeZL-VOp$yHR<fGrU2o;3eSl
zDx{T;Z)oy)+AuG4(WaR^1J7hLm&MP0qqv5wHF=)vgYtKX5V81qjo2I@(^f9^%V6K;
zx5;r1?dXCfn5|kxU6JfEEB3Rh!^k^*M+O5xOV;2KE!1i%xa<gn&m$_Sk?4IS2B<Hc
z5>8YIGj=_JPS$Jqar8xAD#c^mv`shyC>8E!HMywm-IA~a6V4<8n~tAacUArT$QZJ*
zyfmOGHp<%|nk5ITYL<bk2IslGl=AFxTTc5O#3FAKwTu=E&Ju`&|NLfIN*<Z+-1_S*
z002Ee!oQd{uAq}#s~mUwT)hLO!s0*E;wuxi9^5>kz;tUj{a=3tGg0~&VU~Z;ql|V*
zy2-84<bLs4vKo#}z(c)lj&PDn%;mMLzrR&|hR_a4e+oUPK^acX6T+(Yo<mrNjFvoL
z^1RksMXg*sS}<-S#^wfRT4SrOCoy16HESjyboyj7(jhd@k&mFDZN+PhgM|B^0b(VC
zd*9*MrynrsKV1MH@@~-s#`Xmvs`0r1=J3?v{XOIl8O&00tE-o=JQT^3v*{PAq+#l5
zW0(Sd+cna(7hY5&E_!?R=Wod}J;DC}4tgs$9+@Lq<ZEPmP<qG>X5yRP{e}r=#aq97
z^lhDixrOm`j$y^VvyjT8^MT11FKsg}>^}wPI&yd>`~+&Y?~v8l204-ur*&%1z%R4o
zxQ)gEaovRy&HJqMi;WG*p_S+|8A&({40MOBgJ+tSd4Ky0_F`3sGrjiPFOv)3?P+5S
z=OBhfvY2crwW2%&-q;z`M65KG`mo={D%M<Hpg*Zu5I8Q=JlMkX|EuACNv;R`R%yAI
z!buznuPcAubxh6WS718~8tCmlyW$G#02IGYjUbKTTgHsJT4+4`JiGLC=e_F;pu|)z
zwo@uHpe);rR8)Xd#225<eG3|2(f;-}^%`7#gvaCpLYdTVw>mO`^}?$*M0K%(Z%VMe
z$67~0dp9k%959<s6v}h6Nc(tDlmQZ8j01LE;C?rm7OK*gKkYU5bP;8owwgOyD^r;8
zKd0U*_(l1Iho61tjdY2d5xXe6sP20c-Sb%G`?r5cRoU5+LRbpr>^gG3;cLPc>mvmY
zYcVNX$xHXsVDq9EK#?k(%9&SUFOsMsq>~TU@fM-K!{>4J3lE+e%QrK}km4e{XoCk4
z%yJ1ay-U{la#178Q%s>0VE2UF5vc|W1KA?Wfz!PXhfmDg2k+$(4x@KfgY%wR>x<eW
z-KcJRfed&1g!@n%5U9UK*0dQo(PRTA2fSUyOC=9aNf_c7D3gCQVkZb8yoR%7HdM$B
zWmY1ed|9LfpBpj^%x5z-_44$+bTz{=CX{&?^tpns#9|tu@#9^#U!V6aR~`wf1WKU^
zyUfrv&1YcFloc{=AQWcbyYMObrETBT;=nJfBX+?Vj&fevwS~rU7oMt_d|d%gSzrg(
zy;*#9-FCLdopVx-ol+Liox$g|(=4f_lP#4}BRsQ<tbCOr0CDM{C*7p{grjIAp5b5e
zwlcP?1usWh5>4_yK|av9k<AjAt9DF1?`17g^TYn&HD~<Z>*QVPgYMTVG#r!Z+VZ%A
zqp8D|e}B$<aJoac%(MGXuWm`zK1il5`Y^dOfgFCz?X?H5*(@ZEgAiC;+1YD|(j&y@
zuYnImw%P)#?oyvLPfYvyJg7X7P9}b77jF1j?7yBjQ~<*xTXMoX(zX_Fu(x|>m~@$n
z*4jj=<jGyI@q{AqPdJYe6I+004P-N6o<Rd_01M5g;$Dp%${pZI0Gw^i#Y-cl(2WC)
z4fdbn3T8IQO)5~fC!08sve-(6rlLBn($$GVzt34ZjcN+OHHkE+O=h{uDy*v!`@J45
zUFcTW(bD%H??@aB+#bnbCa)WMK2vyyH5Qz>nH_CC&ePqE#;wY)zLw2<+I)N5nQLX1
zywLJv=ytYzLG{SweePoq1!8MNp3)#6;iW!#@_%a7!YSH%0wm-RGC@d6mtR$*O2*~%
z_e!L=046#BaQ?BjY#K?I06>(_WO7bk4Q7BNEdeXf1~<U8n-%fRXZ!OwVIwaLE04+}
zsL{f-ipr+<9}Mir$t>7!HK&6GzkaT==%a5=UHFm|P^SOYY4Vxx03ZDmS7(K0>Piy^
zY8xKcNDEVycWi!O`urL!f(JiZ=X4Px;=+q=L5Za_>MxJtz2)YI>+ri6{VPvyeYzBh
zn6(G+H!TS5iimuUAhBE|@c1X=efdFH#j~{jmt{?WTVu$x88Rp1bGoy5>P}&2j-<#6
z!07613<6yZENMr#v%w1EaAn4a@mMYTTV<5QtmkgUPedqRXt)859OkzMa>Xmsx4c`H
zuNg}MHZcsbUmkmc?6n!i$91RfMAOS3?Gcbg06(C7c<Yn$7=06u5=PSTy<?d*utwS>
zhnLo)%;I|xfKs5)wJrG;3XyN;Ob1kA$!i4Ap2CJGd*CYWDj+%q`eg&Kz*G8aJ;sF+
z2SIu=Icu9WGEg+p$v@a3Nlb82N+bB5^B!Xljl+{-wQO*Wp6k;6@*&xXg}IHg{<sP-
zntte+zOg97;Jh|ZFu^hi1uZvrTr9$DWsLsw*4P(&+v1iIj|M%!(%>l&M4jrHgDk7v
zq&OHUggnX%Qr!3#{_A2ej6_s04d~&yjgZvbloh*p=m22RGg%bCY`&vdIb*GJis8Nu
z<sxYR$!zlljEgDyzv59j%OjfwPp_#7hk_k8UJ_pcvVO8;O^T_`R_t`CH0hoc%THbb
zeWTI$o2RmB(TAQz9J0Kw6U&VwnGl~*W#rhF(&!o0OZ!35OCcrr{l09eybB=2gc=Pu
z;Tl=il5fS&_2-TFRVRK0aUrOgj~SUaG;sH{eXeY<durxS3xGYYtXP+0p~@`elEJE_
zBhulAwQ2!{5OWif>2d8A|8MXhFClU)AAFOg-Tz74<pr2{xu&oO29p+hpqC_VVX>jg
zOr78HzClx`5WZLiOe0K$jCuf<61|<FpA=TXJ~7;S;aXNAdE|~Za-1WX&vi|DEns{h
z<B=eZHdb*~$eI6pDL?NFBQYUW&{SU$-1Qc#<)#$fo0vzzG{(|XH`*4WI87tHpxMG5
ziwR{uip1&IXs0R2`6^4%?6}2J6RD?v5s{T+tJqp9vomtFD@IV_-JYOrxvLT!HZ<`y
z-`xn!a@2LZSp-y5P-?g0d}HQ-i<S9E$1!q#7DyD$)k|N<2ThOhri5o{L?u`dO4uRJ
zc4gYzXl&8=DSTdUTiH+_SY8)hcwuGID_qVMj2;j2>(iuzq3#Cg6^y)vV$>wtEeoHh
zS<|7MLQDT^&LA)9@{-%^8M2`<zy`J+EX}o{Ja;+5m1D?2zSwo_z&JT32o!F0qowrM
zjp2$TNjNP@3%3yIP6KijVKp+q&~lgR+&5EgN&-d-gPGEac$65`>6?2_j*_SEOpKEi
zC{<7#kJObwR}kS0<$tz%M!MR;WtFbFrS_MgNoJj%0Cdb=3eLg9#Ad1foo@LET#3e+
z;mlQ3Tg~GQlXUnHR+6)R%iDc@WKTfvq0uVbzlYyP8|uhK^4oWFxzn2JNnB`e0Z$xU
zxqY&D!8v;EbC8Hr^3WfsB%8-c6pjCWEBOnpox{s%{E|h0ZLr$1I?OV+X{}IR9n$vs
z|8S4r3V}~e#+&j#5$bt}v`~N~<qW7{Prmg&T!n}hFvijhF14^qKV;((&gm72&(Ej(
zFOW9YjqFFjK8F05QoFLBcud{e%7;;U1+tr=W1J8>nv1?Ue+XWtuIP@++_7knuw>A8
zDXKTnTJPfioqeg<Rp2e+%9Qzod5{N3!9~=d<GZClhNjX4?v=pCYlTYlyQmY|UBtvq
zN1*^V<T3?luyIbA9YVmG<I>=5z7DxMKz}CKsY-}Zc=@Qha~Xy!3mQbz;gaza*da61
zYoq4sL^oYQ)m)X5)^TCEn)HgbKYK_+{h-r`A0@Js*0!#GF$NGX!ydEI(=wbCL{BT_
z^xM<U-8ro$Ah`ne2Bf<=+IJc<^PadX_+bk<n$=r;S>O^Pwkw>Wps6h<0(#>-{FWSd
zk*69>VcF@;2{$Y6OuIFLR>96iXZt41klT7ZHwE>WT*9yxdUR(f#l-nx2rj2MZDkEw
zFmE=bsP+YjtU)Qbiji`5?P;3?g-Hq?X3|h%CaSA_$-9C2mSf`tfx!Ijy0&f(pB&9|
zx7x#j!L86Luoa@DVnpk4NhqMIPc9-85MwZ!bA}PPk<oGDXQf|lbD9XzYAXr)<nHS6
zy&q<2Is+f_dYqzw+9=f9RV238&|}z7FIM*}FROF&5bvvLcT+ahn;+QH6PK@&`U`q~
zPcjGnP|u1%oEh9^YdH37R4G5tF6LZ_{DWT0g~(LR_>K`a$`a{P@m>2=z#P3Bd*9|h
zv0Lr&J;)@kgC4nM;V3L#xfnA7>_Vwc%%?_)w}v#`(;Cg^=mu_q$SUQm!CO-{yGw)b
z%hrzO)^<;9#(ouHV8GdE7LlbNpShv16e=m4xw9JLtqH+e4&zmN)dsu9We2MeGYIU)
z?t%9Qb!W~vD0@o#p)<*g?9Uyij~GK9(Drk=_#R=e#ypn7(t1gJ!f=gwfYT?dBcXxP
zo`M~y{)!QzF*0oB&i!+wgSy6g1Jl#p^L?%jiX_rLu)^9DV%&9>xRQ#Hyc{Z-N+w_L
zPy_0j{VHK5K7p%#4Y7>B<Gu>np%UK}jzk>>T~}@K<?0R20Nmhal~?8-@i4^*>suwC
zah>|j4@crdzE4-B1(roxwm<@3<@0=-h5oiaxRx?iOHlH_76GPL68K$9FU*S2VQ+oi
z2gi$yjQPtoO-&zTLjGp|TGSlPTgRUKVt~P@?JewH54&S4GR)?TXNj$DdGEUza@Jkm
zOIY6{g}yq&P`|IIlEo((tL-R7rscNdMt=wsEu8kgGsOQj1E84)!D^I*YbJ#>&yr~>
z#tUV4U)+{K(d<#S8{U@~$Sp;~L91LOkt<B!GigS3b$y>hi{ZtASq7uIXCZc~l{3rY
zy!56nZwY4H))JcbVJ-om!79N+V?pIN;iE{tog1a=xpqMmmdqi)E!@HVM_DijxUOo(
zb!x09MXetIbVBumf$H3^G>frHfz`F|b9uD4v@AN;Ew|U%d`=9gUujp4k~Y@7@rtf{
zN;_RrzQ(!d#fT{0<qheuoWqhj@qp=P{9;)kgVAzdbH-CV{y9@xI1l~cyBzoe)mYFi
zI}qk{u{MwHY2MRDWwE$fwBl`qYTnds8$}8FaTG1TP#!q-_l<Wk3}M-rsO|E=<pMpZ
zU3ZWX0uivDIg|74fC6u_P-g_>06{vmwBim8a?e98K0iVDE`_|Xnak6)x8N`q&|kTj
zH%2}cR+?ctU17wF&A~koZi{a7Vn2WY$6H2%?uWHh(`9vP9l-f<P?mx#-qX^}>r3n?
z=0@+)*~GUd^TSEQ0-izt?te?tE|C12Ad+?+PLTChM2#q3ld@h(5mo3?EZbE;;=CkZ
zvR`a2{i3Kg{#=Ma-su4^%h_LJo;DXuCi$^>D>n7k$fqaP4^fOuNvJ#7P_@I1D9a@s
zQOad~OS+6;rK;S_CPSK+tL$^xpt8a@+aeV5VVf?7*@eIXd8-xRt#FWtw5X!nXx7=F
zE-BEcS(=QBL$Uu??pt2Ky=nVg{~Xr;c`Hx>lu=dQmKTNnSZwyM6N3`dy2MI(Toh1|
zTJIDwal-rHJt+sliAJ=)S^?+>rt;|(x-Dv}Te78d9HBm^cu)u~qUdb3Z2SiX+CsaH
z73k1I*;S49w`Wrm1F7xDf!^ZXhbz21j6H?#oItsKXCk9(%IdX0G0yh}-ilzfVuE}*
z0{@-|J!DzPLY(wW`6K_s)qhV(HHLz}!SB%QUik2p{;f;`^UFEqOiiz2U?$I0LQ+Y~
z;R|b>EW~{c8cc&o>34#?#l0@Teo4YSgm^@yD*>wR7o}kiiKD5RU2ZFH-2Z7|(Mf3D
zZqd!3Tp&WX_Gk_u*-zXxN!8FJpiY~{q@^g|v9-Ot!HCzCuk2z%ot9g7J5=4@(($fY
zOM9pvPGW_;ic0>$Ih%n|gsN~GOUrBsA&E<mh)+ZPDWPX>6uI|&x|mb(u8t>eN~+_I
z$W-FBZ##Ny-&SlxNl_@3c4WMW1hPrQIYmZg8Y0a$eV$_qd5nC_l-h>a{2j)yNcFqi
zGF$4mEfzKn@s@hzl^=Pb|J=TgBj=Kr_TfmGZTiFj!9lMQG*l_$SRY(Z*^GNvzzi_y
zpH}sxj;C^W*BTXT{%5zEMt6ZtpbaF=C4)r+ua)i@fnWA6jIVev&hDc#@tesnreq^p
zsA=>G;yr{{V}=(&hnjoq*{`7(I5?Y)e2Hd!enajyrkh4LJz~RZwcl8d9dhARGO1gD
zh%?i{;b9<(>xL=O<V4}&+$>eBjI+vA*}GMaQ=MQTqt};dbObg#0C9KC44|_xq@9*B
zlaej_rsI&D`H9AqKJMvK=1b7P8aS;4MHL&y>sl~48`?!br7dd!LGfD>CCgCs_2d_m
zg_1o4_N_l6z3Js!1aYhW=M_vQCvTY1Lyw54?7%YHPZ-NBZ`I(9>$?rDy|i||6EmPO
zz+2+9jux@tx|ujl7-$upDPw-{%Jg}wM^{E?Tig>u5n;~eR+f91MSK1=P@1IfMHh+a
zF=CQP590P+(_J|}h-v@|Q{9n>-7{aX83FOY`fAU7p534jv{XoC3IoP53H@q5dAE<!
z#tmpjcg*>AV1h>;gd11!T_l9O1R*c(6tmO}`zS*OYyK*Z^m@m{4@+9+Gx5NW!@_W8
zeU_a`Zc5oqEW07G%pPZ~*;cufuR4BFIDDfvD}U4o-9<SI5O@qdD(;z;A{xF&x-rr1
z-qCu2X9v^9sdRd363;E@-GdmFhwuHI<~RNJ5b3fmK(CNM|5?fyr)vkcyAy4C*8aoz
zp#qoVQ-|Qfg!p9nxDyIc>Pw7ao3!bj(i&4szPpxLDRxg`9O%I2FBM1W)RpCSpwcuE
z_wE#8Gx_XiRf7pC?W-O;bEQ*&4>D{7s6J^M6v*4U;*khPU4Z;`b$PdhDL0KwW&z79
zI=iMbJ1JuAf<|7iS@Vpm`z@~RO?8XkH#&fNe9^QYbECk1yCzz;{Iwo1yM#b$Awdb{
z8^Po2VNL3C#^nva$>|}cw+Hgc=p1Hn2GN$3aHdd_`<*j)3#P83$(T9FK4POh%Y%&E
z@*=5qh4me=Wlov&*EP&?UJbOxhF0D@2YY>=VC*}1e(g`7oN)z&(`!eU*E#G-*z`=T
z+OyxU8|k)GXL^I6zu4{RTBPN2uS#Hg(m6Je19Zbdy?x7CgbyBX<)A{XKU}{;Mz3hc
zA{=@HV=<!GFPbTlSwyl6Kso5j4F#@&&Q@1-^ZFkmDyOX-F(aIR$y`vHfN08?z7*Ox
z>Wahnaf}D$$?2s~yJCpAZeDDHsh_B%ws`BrF`OCTe-;ihl}5v+SVqmP#QR+VS14@&
z)o+R2)rL=tw@|HsNP36=uo$zTL)l#|Xsa>O$^|xD;@>KvzHxa*=}}Lm0jVq=Gr^k_
zyr8!}Gcdi(blMzP_d@Sd1!=Y<^r-zNs?_6+ye}j`H&qLbGK1DAoDLtE7(JL<u+xYZ
z#Dzab<l6Yj5CR(&I}_tTthum+9&dH=S$0-?*(-GWU2Iaw-v;krp1(`5k1s_yt`6Zq
zNW_VbDhRJPh|h1C+87Y2I&<<H3k?FO?$*x;4)w39K)Cug!b?PH9?hJ{1u`0aD55Ex
zFAXzOJ-h`a>kV7gC9%?Ul{5oT&`UGP`o_<WFnEu3@g+1o#A|T0Q8JIKFC#$=B60z+
z27~uNCNwQ14{QEahqPfxnqy358dWNGUF1RATy3}=Q$|u>7P33wvp;K?a?F)1(C`$m
z37btE#^V<t97S*`ULW)iB;Rs~5?BM1kQV4dlDjC}P$iVBQ#k+BSGpEMxQ>B+mIam_
zIPxrPkS?~3Pg`4)?0l+J$P?#w94tlNPALO@q_E7`d4CGXbMVqUtBK#a!}9-Qq9B#N
zjrQ${hi+HGI(4-P=J-UZ*%}U6#G{(tx8FvSvaYcgAS@${9wo96S*h8CB|Zcg24-?*
zM6@HkOJbJzAgxSJg%HN{5xHM;+#E>!{NC(!<d@Z;=`{)}1mpKfzM7@}f9w6$0)ihm
z-Q>k_>?8nyzuEc^x=q7nb3JvJ6+;1ZRc1lws>CK<p09bPURhA`NczfBh&L`(uG}u&
z2w#pPS9L;TVrF~aj+)9?X<BT~Qd9!n+7`&0qaSq1MBJm8SsWBxWO5FRybKi-N-OXL
zb_#b_@hZ8!BO`Z#qzaj&2BR5?_HqY4Nvi*Wn1`1CQy|vc@-_}h?O-JDs=lp(GgTj)
z9QgHa01v6>hUTlUef9l&PFN5>_W6oyvKIwh)>e%nnEsW$ji(DsBaQhzD~Awru#`J3
z(Z=(3^8+nKtbUHEV6p(a+nWF@F)amk-?Ki~oJGU-NUExXz@GI$J4(Rn?iED+5FiZy
zY|@r}0(R<+J)nHOascBgS97kfHFYo3*YGBK^1Ar?mDOJ&yPpG?PwIW17%Giu-KV>+
zAe=0=*+)hYfXg-umAo?Mih71&FKCnQE$5kl$*C<ammZvZF7B2SHCBt$De9fTl=e!C
zN0BD5Cy-@AXuXUYBLgd)+jfm&Pf!g;R2rpqr)RWr^jh8QsB?29=am1!PFoTO)3h44
zF`mz%99#qXyrbyZDp#h)0h1(?8ULQ>dP_5z>TM6nc=u3gvZL^yMwObwj?q6aa9C;k
zxnj(a4PzeMaOBiF>--1V09Sx`X9Q%?wm}D_NkJXZ70v|d4g9ZTJ2${Gv@Bi`BBF~;
z-Z^t$Rv>u3S~VkrSr4V0?DaStRk?icRR^7`eul!!+mU>vtittjH}_xeg8=A7>bfxE
zyWYx@;l)j;f_yjn$L*R(*IN^jm|OtRW%?sW>P6p1jmPD^_SjFoXf-*FD0Yky%gRT7
zNOtH6=&!JQcEIGuYhS6Q#~?2iGkdLZN0^xuyZG+SfrZ(qibd&H9gobyl*F!7>z`uW
z8;)&{@~(ezv&&$<isqrFE|Tg=e}dhyn*t>dBN2*J4`=UcuXu?96-1{12YGz8h6ENa
z<OQP6%RXppqN_Gjjm}Tf_mW+tIDI6GaB|-P<zEI7$LVxUT*M4~4s|K;6)2Jqh{Kc|
z2h;}IPyo}(!Wtg`>8PMpea7wG<2_V0+ZI`^j4g{D@Xe(jOPRiNjQci~;eyR->EjBW
zeq4V14@v*QxsMd+-C7yi<h{8401vs;K`l96JfrehCV{eml60g+G1UAF@Rf?X^P^k$
zK?*p!7It~|!<qqMt{z=>&i9N5S12>Pz$g)sSQ6jR1&Fk&U<UIX-K!}WYOiKGWN=k9
zy#wH$=1h%@G1+-C-Lfp&^R!h@Y9{F-keI-^xfU9RGJ0CJMD*u9rs@inCO!o(lZ5us
zto&X^ztXx;K7jh_Rz{ste2$SLqW-_qvkK>-ity|Ozak@||H~89u2U^lPAR`%g3|;F
z$L`5Eg&_~mAU`YL$pkzOQrh~y^G#eE@IYXh6h_PEy^G+lYKRWWkd0O)aa&^XybH2!
zv+5jz6Nw~lzlqq5D4I6k*Ky}n(s^d6O3(l1W#;K~paoC`fS(UR!s|;a29wxXZxf{e
zZ>jJ*AOS3TvhemsJ0uV0IGz=rb@@hK3ds5$f|t%R{3HLPLt>(dk)76>7fir}{j=>S
zv7B4WXwwVe&bJ%;_2M+tXt_nHktTkK3K~}AznLN(bHJUayJ`PhzH{J!P5rWi3L0)T
z7ejAU9@z~=cWTs?o#iVR4{eA{j&A^j@Q4<0j=40t=vPjrvU?_30nG^En*JpJZap@0
zFupM`IvF;{8m8MteU%jTA#od9mfldRR&GCr`W^8bsb?E|8Iu>g4fZg?(RLfcDZY@-
zT7X^<r+nsqI~_idzWl&^mg!_SzYZCl=?B4aU0r_)?@f_Hijv%39DMPI6GC$3tpVbV
zfAP0Sxcb3CQ63;-#a&7qt_6MjJm|z=o4TVPu>e-+tbUkpX@RuOX818I6CDHngut7B
z#5<kE!_dh_8;%{Xf#;gc#WGnEa{=oD7ts&p6j!=!WPd6mZ~{dmd5#78$E=2S+^+n>
zXU8xDBbBnZq()KbIga8ucfcD2@DC=;oSoB?EGct^C^rgIROH_*ZS>Mn3ml0`A;ZhR
znAYm7WJktK7H<!i2H1AHv@VK-LiXifH5^W1703kyX%th}D0Bo@=n2E6?Gj|D(Aqf%
zhsN`Su0R{d2>-Jnx(?qm8H@QVxsuB^3bI14m1ZA;Y~t~aZ^o>s$g{8uCu*V=9-tQ&
zpVS~3EV2gq&4lvCD&Fbn`TI+#$kd8%aVS6op6TS`A<d;)yC{7iqGicamp>!i@-v$t
z-wkj;rp~>S>h4h+sq0azi$nkz-u7=U@*`DVI>@zHq1bh<lcd&fK66@PAiOAFls|na
zP8?jqU|(eKd0+V<1)O}8uBBznT&Flk<?B~}um4pW;k`LPA@b3HhG}E>PR&O_-MoeK
zQFUu5pQN0O$?|rz02U%j>yVI91|2%3jl~9<*_<v2qrG4fX0_OdRl8=@*cNE}E%7Ff
zv@@Lt@de))F(JhRbxBduBY~IBDwCy4jS9obC+KK~5S{O&0w8jC&H7_#;`2=b+MHUz
z886XFv3eW7bQ`#+F*^QAPDlPyPuq5$Y^x9sel9)1oXjA>djUVfr5=Xc)990&{=g64
zJoQD^&yTDBK<;}CH{4glOPMWt*iT2-w9=2%ne8)Cst~4W2XhJ0nkW^Nu5$DkHt&17
zCs54X4ACkjRsVZSkX{_Ac?u4t|I(W=E@kqVaV`_0-`0v+d7?BDwujWcVfW$1Cm(jH
zMGuED(XLeMf7yQLbxk9E4$#rKL<lzic$vWYbtNo6>;Z~U3Q5fb-5#5+*18|VjYR)$
z3UKrFf4ZMbV~N0*CR&$43pT;!1WC3REOI&Q&WSiOrF@`V7+U{v5aa-rjZ6kOy@6p0
zz27zb1iLj+t6aB1H+vLZj`**RmGoIe-wUzA1&42Yth+v+1gnyxTOys+2J?1rjaJJ{
zZ2a9`-xQy;`O`pM?Thc1yK!Jg7u_3Y;yn0Ho%$`fuuA>97a-X5NKBgY$;Bn>1@h=V
zoKH2RR}XChD5LR#q&KJWDZI$tCkv8`7)X9j^!E69bYc`yMkzFfCVF4+Z#Ilh*mO_p
zH-;%dDca+K#`=X6tqaj_HGIB$b8R9D5lSaingf(q=RQelVcRa*b9+yN3NHA4EBBxE
z=y-zJ)f(8r)W*d^Ah!qoE;tuYq#T~)tx3FAq<NqnX=|7cobJpQEZ~ojQ$R?2NhIs;
z4o^@$a#qD`pk=+7$U*?NQzKPV(b~O<lUKj80eN(p5IH(d>J;>4;W6%+q$AmHxHgY-
zaDD{T)2NwzA_SRzSaGUwM+;sM8q<Pb6bAwLo=NRGI@ANlD?vb)?kO$+Z%eSiWRZ+>
z?d6t`G9%R7^V{vviokoEft@(}9U&u>pScJh>GNmVa5W4W)wBH+{oUP{NuMzGYXV*)
z5@|j)mkX+2Ph|`m*rNx`LeQNK(e5nn-*~QLwF5c*xg*KcYlXiJ#Y4eWSjNI-=Qu<}
z9#tT=P}0csEArO1Q~d1M21lSR3<S=oMVP&`na_RM>JxR@!0y91{1U%;X0)c)SRt9c
zSRw-O%dQ6n1~kPy1Mqo8a2Y7hFJeo<=Jn!k;Qd-Rjtv}Jn!DeOUQ@Igwt?O%`A`*5
zEGkw}{w`++2yYrO*|>2{IXCF!BFB6wzaIF}XX{G2a)6S+Vnm~)b6pnkNF-=>9;ZKr
zE9oDiv3g+4P^$*Siy#^0DOTqOOZaM$FikQlmWmOY>#67qdP`wa{By1`B9mSW8v0X|
zh;Vo@KIiHym8vY0U}Ts-f8Y$mTKEYb|7$$*1^OhYEqt!#W$?F4NHK`G*>{w}1v(4E
z3t?ogci_JKS6Y8l+dzWD2$(yHD18LT$?AZEl}>?5&^(e-p}j31m)q#0Hupzhw^OEI
zTV#RXn*S_T>@o=Dk5LnvIIPQ?)&)pv_Q($~(U%ImdL(kZ(gt6pZf6I0k-ypWH`ZK*
z=fbTCUrIe4FNo5%W4`HX=R6pn_%~hP<9b`C{_0yukoZNbt6l*I!vez;DVmHj9loj;
zuuRbvrc3*e<JQ6!(_ul@H7w$MgA0@87pK@C&$EW&#d7xNID$W!#3WrLMa(r1%EckF
zP#viVX84fb-SOVYU$U;C#VLVNq3iTjlRnSnXzTdmce77=TNbGuye~nPR*0Qvjg|MB
zpWpqB(6Y(Jab{>?)Wq|WCJJsF4DPc%yvJCW6RYYvxY!LUJllV8f2R<!c-5b;XKnRt
zy^+21Mh2N)yyzFg{LV{MOCG{GW-KJRtkpbVNk^9Ytt0594^5X?wk)s2gF4FGtBqg5
zPhK5$O9(SS+2p*_9r?0wg<E0CPwy;ug1e!UTF`s!wjGXOwT*c~g4{qgHd+zwT>SFL
zU`T{9nV0s+k~n>pt9kiW!c9))yj`ax<9uxF6EyX%TsNmaF4B|_IRH3&O5;4cr!bCz
zY=g69xB`15>NZlI<@MS_ih5bV*bovnIh^^WpQ&7uhdfUy7c;@~aoCFNO)B)3Fw4Fb
zywiUAjVh^r_b??=SWv1mQ<~VzdIZUVW<xBh635oS&~Q#A4)vAR#&sUmi@XKNxC=g2
zhjV+%nC!)qEK21&p`D_9(dn*;7zQT|@jnqfyHQB4cvh(`l28RNTar%`58*p-P?@um
zO<ttK0U&Zyi79!DI|l8w%71b>p!;GsXuea7aIY`{*0c`t^#w5=5WP0VKo<^uxJl$m
z->se~hQRj<9Q=I|fVtx{TB9^qY{K$+-u5!%fqS1zd`^ehpComPFMuc~g~<`ipEq=q
z6j0G=nKl3@)Pf1NNmC)DJ90V={%O4sKDB`tA$s7<BdwZLP2T=P&MU7)fE<?kha3;L
zl;*4PDWVj7k{Qx?@>5DabM{l_Q^N*h>D0@4##yzjaPeV%9oNqtU0=eI5P7lLfgBr8
z3jPsFy#Yc@+(q|GTYbon*euE*kgQAL{yNI*cJ0F_1rQPo)u-r)Hr&fs6axdu$ogUD
z#+O}2eydL^&2#sNt~*^mX(u`GZlX+*t*B<T;E?77Qlx@7KBJF7w3j{eet+Sgn0u-P
zU}%EQo)E}{DY<?b64%qpXSvq1&GtkT81X(2pXErS;YR0NKUz{sIh%_sW&DJyh}Hvl
z(_A?gI-#X-MW;(}qQ;f)GnxnYzX^(~D8<Fjd`TD!<d6~Hnpj8kfT`&eHE|Iasffe?
zrTyJ%o~_ISWDiE*?7GCa1&>~J2WIBF1|B-AI^Pkwf0+4UMaBG-Pa>{)`+()0o*fVc
zIWf>Tr{%QV$rDW-8_r6I=K#v-V(t$;i&gKTlH28W$tnnxHYx<*9_1dKNvLTyP|HmP
z6R;ceWQkOrPq~0>Kf$jR{Y<KszkWOIA&se}S+5X2w&AOUS>si;JVlYs`UKt9PAVb=
zB;H<k{UfNYiG<Nn%{+d60U{0UU~!!htmoA|H>EkbI`Ro)%9tr-?xN{nKSmuEcU7MZ
zNVOc9UD-*dolLIed3S>}%BHh3>BZgEpsg1j_NNMem2x)-KV!A?*1W^zxh{A@21$HQ
zDi8T}R@LU%NZe!*r{Nk|AFqlHw79$YavWXwY+3#5pag^K$8g=xBb0g<ZjiflyrQ9{
zDwd8oCH%yo;FRv-eVUFu3YOBoeP}KtWyWM;Wv^ZZf<T3ZbB$Hr2x&g^P?%WeG1;5z
zUEU<L=^o_lKIPbCp7QM8RPU!PBm*|np5}ml3MXZvFZG4|iw#YTf(7x!NjMD5`;waI
zX}}Bf_TttIN}8YJ2rD5ODMDSSQ>-kz+&yTnYLG8sbE;ZE>+`3pE6{Cs?Lr!%i^+db
zgTeduYB#UZY!Co1ajGyp$zT7>l)zg~@>CP$p~T!=3nSi}#L-0NXusJU<)9(l-J21M
zlVh-ppo-CowZvu5qQCOt2o?-I08v%lzweP8(&0D=L0@%Q+b_W;P9>DXx;3UC82gE2
z)!WlpHknK`_M&<5E(F$<yyhxvQ&PDiIRI)DT;UWs53K|2^eZd;2gClAeO$S7X;ToU
zR#8?4<p4MM+jq#uYjp()v!Xi2(@10HcJg(a9hO90rcjew{&ZE$OH@K~p|6Kawz7jm
zo+{h4!h`h#K2`H3U##UQ9|ui92}lY38h~#5PzW~45TWl->S=U*KDc4XKXtADSTEgt
z&TY|6su8{_k<Wv)yY9Ge*ZD8JksJKbp~Qu~e%C_1VriuL&CEACvhS69CsmP&5MT!R
zC#sCkd~JLkhp&4M&7BEo9&aWxS9{<Z&@vf98tA2i_J*R07lq?53}|&u<k0xRSDobQ
z?sSNL%G(<SrY&u@q1V9kb{Qji<EmS5x6{rKffLQvQ3qO5LvcKG0eBbtP=S1ZMIR@<
zzh{zf$&FCMl;{5)c3HfNI?7pf#6y&cJDZ#C-~)^Y(8jEq;Mvl91&{epQc$I?b?rl|
z5~>6YZexp}EHTQ?my5ukE)hQYIBbA*=tSqk!)*2RO0M0#sZo#n!w1*M{iADLqjUz{
zR7Fhx8Zbb^rv2ZtJt8=7J?jFb1Zq&?Vy4NV9-2d9PR+DNA}@)&%*qXXECg$BDh<ON
z!+WUO$v)IXw-;*w2R`qQ*>KkOS>e-eRZgU}RDdj1$M`2>>@dW#TqBxt9xI0L3^r<g
zhgy14ZA>8YR73o~=DX5Y7@(XbfhfcnjY2qNuk(wGh>_D3zk<^n+QCf%rV&lM<~XTy
zfk%Nb_^cT*&y#J~e1e~~q)@klDq30`twM~)5^?NQMvZmo>M;9YUB0wb5}&<}7R*-m
zy8_Jcnob!VBixeA?G!0-QPomi5B!|Kf>(0$GGR?w!38wUhX`8wG%)efM+u$md>4zy
zgg*P&ZiYM{p+OY>T^e$inzO!=Oa1S;_S;Hq)+C;ddCxhjfZoqNR>;V>uv{69h?b*N
zRsV3;q6<VuUS10;-2u_Q#=`HG>r(Z3X?la%lLw#^#Q8{$`_#j~s6rv_r!^sRGWEE>
zGv!Z}khAc7B3LR9pE(Kp&ivW`rBCt9@~*GzLe_)0R)qW)0IA&0+z=lRt~x<1U+=GZ
zXY4%%D+$iR%oV{f>hATF%cSOY1}W8&JCYkv*XYn=!8UxEYjEd85Q9V<tXmapXl$2@
z+(wkyu)HZvW4&9@cC)dB0fNt($N{R+7v22BDTxhbu`D!+%k-iw0EPa^)`^!Lk1(RN
z>sucqlrzZt0}zSlnB#{!1a{rmm~|WKlVUd?86CQX1Vdx1aR<`Jg|uoX`1eiVk<J%R
z&vh4&#@%AiAohE<-o}e2pj&XLz`J{u*n=v(`fXadg%@Wzn;q&o6BVWCUlS@_9~{#=
zwMeu8$#23zk<K72pZ$0@ABG;A^oqo0*+}1@14e1we>okU3t39QG3XWP;jfJ8uvo8v
z?-5;5l76XhrsWavXpAr@rs6~+(#SeH6hO&>U7%AE>Phh(>}=&$vZ70f#^;!UP7zDP
zf*yR++|D|(dHT#wlq*gFvPL3Ay=}mVkAfqQ!|)M7>aw~vuYzv~f880f$3bA$j;((^
zg)2X#Bi&LCoHLWB&E<3o<P_ti<q;-5_B<zizgb!HxV)jzZE<bHI^j_XA8oe#j*$|`
zZB>;25V&vLR8(D0Xstg9(Unft#i)=ayp%lFh<pdO?IxfcBt&Vb6Zcf>^b0m#=EY@=
zFmV#|@6i0om@>4rb!9vM3<!;{7&C3;(ZAtM_zDBS0@ht#9#f!VB<IVQn8tIj{+%?h
z{K-WjV;;|y(a%a0T>u$;19Yt7=OoU{@%kvqh&D3@u7?E>6=fR6HA5MH?VLN+MF~9E
zKn&{Fj8DqEIjNAG;C>th#P>Liu-b=`+{)r8>rcA-$)ah0MJaZM@V-ECYu7m}!>lbO
ztaDZ$CdA~-{p1?dHUYBAt2Onb1Efgp1q>F6%QOxvJn8ZYc8bpB|9c@6CiLkjWcGJR
z_ilQ^NEJTh!%gdVUtu$OPEo1k3@z`Cgi0T?K^hPcs)J3XmtF$dFGAC?HoGR)danRn
z`RXnaz-I;2%fh<L+gCoSH~$OZ$?PFSjvR6)ts7U1uBO(k+Yj8v^p^rjGxhX_ntuZ;
zQaNlZ)o9oTLbkMPeSh<XD5=vV1HMt;THgqbw|-kl6mxL76J0iocqM=!sKK;AN~Qmi
z_Uj-psVfQg{S)kj%Q*iVgw`Ky?g|V!Yv7A7P4j+2mJ+4^m1fFm24wSqA8^rer=7^0
zTQI3OxnFL&y-1yS@`<x~bC(h<D>{$Ppr+@_uq8zg8<j5jspKC+4ur>s7RZsV6arN@
zN#<s)`X(bzT8*E=^bA4)jVeD$h)AFXC3&-+eY>ok&RCQpA{>QOneI|+py=SAU39z>
z$0FpWOb`UN;ede)J&eroCtuv!!?8R2bv`S_eMcTQZ^Xbd01B{&la@V<yzw%85R^vw
zZCgVG99e;a-y|LkktxiLzi}v~DrY{2a4D5nlw#Bg?rf*NT#W!PvhP{`m7b<*EwY0#
z#Jb3i7sp(L$tABJ?<$(g@lS?l7z`=@hDxY&%<hp~m%v#$Xm(hKdmf6c1)(1ab(wy$
z*?j%5mA;VR;6@TgT*?-Zd<&w8icbCbw*#0(O61c;<SCkKM94rc^{0mXnLRoR66q1j
zZRRjA`tk*C>UEpYH?s^DSfA3vEL}1?W5t}$YG4n`wQe5i+wc2g_RPW2+?zyuLiW#v
zi)u#STDsh)=;<XR973F$sGtLTx;k>^{G2Iu3G*_HqjuVx+xfzAJwG7?!u$z(@~Z2&
zuTsVgGBM_}hdT}g*=kDI^P?*!QA?w<Mkm=hAU_t};~c4alkn$rxVd$?n5X|$-n79t
zW5|)=2vyjl^OXkso*R(f^}xv|Fkb(dpv)q|iFAZ&7iJ95uc{g~&edhD39EeP%kj=*
zx5?%$$zjZd#7;7W%u#FgkT0ymOq<G{$AuBozxa0K84wh?5Xf^?IW?2htHp2Uw5F)%
zmn7)2qqlc%`C<0xG4a+#nzxa;#ZXRV<3spXEMSFFydq6zuZns#S!tMOzXdP(!lrpp
zeW^nM6Sw>(Ymm&gnSTVrqaVOMpgW{`T65^Q%R?Be?(!oCn;F|NdT>K7s{ylSwVa|k
zdZep$&v?Y^2&T^mXaH&p`^_&~6@qq<pIqjmG?|Sg>~wrK$xK?|qa)*c0g-fikRwja
zbCR%JTM<`)_bqQNpvWSEA*hpGOTDoi_N7kHqaAD8#PBU-9NsF^g_ng9mNGNP_(ybm
z@v92>a$7vqaj;Vqe!g6H?+_<ny7sEy*-kFu{1rVpQRnqV!H2WUWrLfUL0LEfQ<_{S
zo!1vCnFh77i=09$Pr2NJ3crKVA~;Q)8U03&wpbZ3pT^madAqx%b@4SO`$TTC1&{jQ
z9vIn6XAE-=j6bnYQh0T4&mw4D)k1S1xbM(!W_b%9+Zr+tt9)zN4D6at6oLVl?D3?z
z+@n5ldtvdRk?coE-#|yNwudnk{3YS-vy<DK(nZS8PANX>IFJndk^;lKJ0x|J%gT29
zGqySw=2-aTJ7=4))m)dkLTc8OSISc)iH^H!?%X9a32V^SA(WLvDt`?Tf8vV%UP@Kf
zy@v&gCL{baI+CO3;wVktD^+T7)tnp(?dTa$EL$WO6txvj-gjuj52XXMG`CfE22uD$
z7N^XyqMePNuWl##q$f;$Z-kHmSl1F}{#@Mck73i%Ef4?8M!DL{u=|f=T|%g0d}ib8
zSTFfSPN)>O-|h>|qfU}X<QW;-fx*c}F^A@jYC~Rca76H(7j|lu4)SCa$<S+l0FVzI
z@8y>_A-sj*(+`9VUFnBOn^-e}>+UJxbo^7%zkd)zs>M3Hj*#U3jFW?!kyt(Ci!0`{
zTqnoJw&Sx>BRzNZKdA<}E|pROO`8SWFa=KySG#MT!_Z#>W4zHXaMh6+wJHIKswT;Q
zn7Hy*y@|%vd!hnIh4HcF%C&5py2KeiT)f$*ssZn2Vo4Z6y<#uMw7YgJ(LI?%Y4rzh
z)GQBi9=}EwDii?!BF=!4Lg5~zMLe(fc3#x-o9CT%pu@-6xNAM6sWPIgyGE-T@`uym
z6lk|(K8E;4vfZ&O7=%!*hIHt$593mcAfs?4=g8=G4j*umif3ju^#8{sJ^EmMH|S~G
zaZ1;}?3Y9i;O(4zEiiR^j6-_BgSqdUOanUf;0n+)+azUY9Cm54j+n|k!X=ZO%Vyu`
z?0M|$g0xo({j;kR>F--+ahFwfu*g!MxQ6|}R&fi0Bs%vP?vn=ZVMVDHs*bl3E8=45
zj)lsnq<+}KwqW?hhx01u;so8sR{p?KiINXM&kn&p2y9n)i@tbG=(7N`z#bRY__HHo
z{v0ol(741WP$f9A#LrwqBA?(K)_3#FJbMSRNFCDP_dyAiAX}EUo_Sn)lga4WXv<E1
z#wRe9Ixb-nQ7pLFC9T4i$}7qd%HRQr!dD&qGRozDt;`UQ)jIL3YOf-cxM&@8VRM7U
zoqm2$>EY79HLJ?0pe6hHiTJkQ_*<%S$9BZ*@0|!7b9$=&4ef;&;{Mn(J}GB_aRo+n
ziltgoe8`I^?M9=X>%_bxu9aw5N71_{qPNh@QOTwu>uWtQX=lOyP~YK9XU9jn+jXk1
zB5(rm87T7zcE@imIM6H3!S;ky0LI;Kk4HEF^sIx>uCP+ywLbqC+kx)V)o^2U*MjUo
ztRDNU!DjSg=_FuQLdAX%1i!X}!l*~i-Dbm^C^2EHGx3GaTBE4LU+RonX5Umkx1ptC
zU^{rFD=$&riJ^z+IgCUhg`I;>IxjjnHI^4-X)|lb2M@hL2b`h8&79oExCAocszoQq
zelX0`m&GPgoAuF_>k)tdr`SqRoDKk4n~mw67?-o08<?R=&i*K5)#FkSmwd}O)H}W{
z(hv|9Ep&*MMn3SjN5zy$)J8cBzUf(gX_@xFTY^su%i6Z}K8W%d5ql%Ic9jEEEN%Nk
z_GCc{(K=UBjb|D>Y$I1`zo>;Hf-iUz(@^4CEM@H`-;R+wtrjmWrr(Tpm@FL0{P3ZF
z+Y)O<mU3zp-Xaadd!?55`Fwh_Bfk+Vmw64^2E70l9)r3<zj69`WtnD|>@bklw{Rcd
zYZbs)fjtgFxV^Ma-pxL@%K3RZ$kx`P33w6U387PDyxmTc1#DLi59_larMv>Qkaf6*
zg^Ng>T-<i~_F6hHvhLa`Z{V?<s(HqX7-a50>1l^z&@5wSi<0nrb2T{Cs<NF6z1Yfs
zu^uN`v}|z`%wQAb;(der*J3)neLiLt?Ol)>J5|>t<KQXDtvyPtd)OHV+7yjdoBIb!
zN{9Is(#>L;0U69q5a2naA>cx1kO@lp_arb*q||$oW^>cwcYD?dRBP}KHP4YAX{Xi#
zEXSwc^xpd%i$WOu(|(8CJZ54LdzNJ6_DL=lz1O<951S5dIc^{*<zyM^dX5AylL41u
z#vt>nxK_+i>m0NJmyNX}dab>k8Jvu&y8(JEjC=qGHh*!RTQiUl?kBk?ybJHN{O|>f
zQl4+A4iG<qQ8BX4mr}G@Ge-#y%K`dw+my1ansnJtoEjMfmDJh?sK`S+0n)k)DRs;V
zTF&(&WC+lEg&#~6iKxZBk}O(ohsiTC<El<%)R(IB1uJLvvR()uuM35lGnm8nj7n^{
z|AuYE{qm_jz_)15hi*-Sx9eywm!bg?Sk^=B=hx|-J4nztu(JdzrB69LmC2S2kw3*0
zM|Q2o?j^RoFR~hycrEjq0~7!NTR&RfEd=!5wfD*7tOu9Y#%d%sOS#%tqO0wncyiYa
zJkq{xWzM4=H{Ku3fNrS}Lda8Pw3xA4&z{GL;%$>A99CJ6hOFe7Rc7<z$Hs&{_$^k@
zxK{)Ch1`X#^DXD=S(!Q&Z$Js~LFr=-onCpjeS@Rf6@eo*{@>#T3AwuFK=7D{7$m?Y
zBZ|VZvCEi=#B(Wl^Hk)|Z&b|xa$c&|XE>P8ai$Ji8&)w&DwCvR&m#u<8jjrPth#=v
zX&JIOO$c=!Fqns_f%`nIJN@Dt1K_FSrs#pvAY5H0@2`JyiSx<bp<W$7SIkkgV}ADq
zSASwcHs>hNJLzx>unu9+sdGRJjxG)i@8qfbP0DHD3pz3S6G}X4*Na#}TL7BCf!2c9
z&eu{&s~=x!Cq%5HU-X{*8v`cGD%fmvwFJge{Q{bQYa@rreIch4M7$V_1q$vUN_eI@
z$$)!ydH*XnVUDM&({cKX50L4<I6VHpGPCAFoUTa5=<3#hp%?w^IDl*&ZTvU2b+_sn
zg)#8(Bq_5*#T8Sd4O39w+**d$)ZDQ@g`(;-bVK>pEwoAL7M)`X2b$F(0N;Gy&DH8o
zU@jRb#ZraeVaz5j49BiWSC$@8F^f0vFc!x`moJR|zzvbkEH&pe)&Fdbzxf0Nn@phV
z$tSvcQGvwWAn9$6`tq|LkGW%OE8V(|j3EuQt@GHHX7cet_{_vz-^)lS?Dd~R47b+I
zw@S1nISdnT^@uLTY}%SCpxa-PY!y9GF+_8i(}rPRl-56GYdN$ibAA-5iXX0Dal~R?
z%Po4CTJBl&i4|t`uJJd=bdHh||L%CK*QXsk+c5l1c`b^WL2i}jJG#Qu$t;{ZzEe)l
z528Gpy<u*@1!(u5;)EB}O!Zy?0)uT;G>>vUb+Qg@z6_o172-_^vDnT}%%m&TZgL8?
zC29GSI^dE2a+$?U*I=1rTBFMFzhEY?hf~q|A=&5>wO;y^?Y_d0vW?RoDC)aoRy~W&
zC8$QjN<Z|Dgl!1~Dy{R#{9DQlqJScZy^}~m(Qh%7_ItPB(CEZq*g4)Pd9quQ?zN>|
zLx85!{5BJ?Ae1eBZ?A2v{37w5<8+o!o@_=l^1bVTcqUOGLy8wpr0ba#GMwV%>adz0
z=J$*Fv+fj_B9<9_kcpYwZ+Hz(Y`Dx<hoeWqDp!pc@@&$5)3Z!r6B<J3=Lf48%U5ko
znV<1VG~}iXFuNE@?&l!B3k}oEN8GiG<0b3uF%${D2rd;f%KgkcOXaKhBFCmE%A)|i
zFc|wUHL!IX(Al}h`bg8~{}u0Ax7`7;rI!nnqJ7)F0QuPKf57OcZX9bDcRmETj1ehi
z(U(rs9`q3Mc9q!iP-ajkJyOUu8VLQ{zV_E?Z%%qCN7~mh&9$H{S~sMo)i^Z}Mi690
zr0?_wUUwxPXpY&tmI=X^_1oW7f((|&AL3uFdiCvBoBg!0<si)Z4Scmz@;Si|HCQZ1
zAu&1AA+qRGjog_<=8`H2;gu|nq{QzatYY2<C+>MgVHoewksl!2f(jLUjCqu@x53p{
z;Ws=zsaVrE`cj<1ooMbAvy5v>Iuo;{g{g|mG?cof%UApMR^v;~h)yvouencV_^x>`
z4A7>&N@V7z+Zt(y&Espxx6-d*|7Y`iO)?5ERIZSF#S|O9gk>VsskOd8_5cmE^qP%2
z@Y0pUI-1N@;wC%gP|5OG_a?Tda*N?#@^XvRi-P*rZ@dhQ$pjV{A8u;rOMumFveW#I
zUOSwZWsbhM6*>6qsFUP<M9|n)Ye%KMn#b5Dn@#TzeE>vy#_m`O1VL+eggraiN|U&!
zI%pZ)KfE)2TK}xto4MGlDDlJNGcqDb$4qZ)r?^fFLM0PePpf*;<YOVGwf>&AOZT7C
z;YX)%v$lj4OT6eb<S1u2Qr>|Nj%^_)t$hg*iT92GkwcY#mHKDH6)4f`F-M+d{ab$H
z3973hi?lu;HlG8H-%vNu%||?3@?e~*-YA}x(LsjqkGz0zw}oUQN&$nDSu*?W$4v;0
ztipp2d&dPjJ)<U6jNb1ZCFZ68JwU?0+2+}zwMniDPn`T|VF@&j)-YjxT?$d@pA>ze
zSg5S?-o7Qp3M7`&e{5m5UW}=@1@r=TBboc&TlsF(C>kDKNw%Z2m^f-q@Zp~=zQYa|
z`;S%qO0rfuO~eJc!T})<i*!n8W)9h>dyZU|-UPYVs*<KJCR!)V*R~lEu~iCckU&Pg
z;vD#y$kRy>E!7?0?1L}T>^Pf4wqU3WgL@Lj8>L{fv{C_f1#US+y?=Y1C^(2U`8`f*
zwTbL%o5oJiZ#b^mjeao#xOVk}EX`hmQ*QYU`|%kOxqa$mZ$XN~zXH&UCRW{tU7aU_
z+;hSyOZy&0&+s>6o4Upadm)^cmj^?=e5xaM6_}~^Cql7L3|C^`|CPg+(8@x(czl7d
zUD<A&+gU(y`}Vj7=J>z(y`E7;e^vFhpY4UrJ3hyA7>r`RvDd9wwmqF)IIu+Fr>cCr
zRs_8nI96imAK)*q2iqceGIwXbEV3)qQ$f}_iD;0K@q-~8_uA$~m;QL`%jkFyYae{v
zHbtgg4VF}vhhiQ(z;>%}%-|0Z=vG=O{Ha8>D>$w!2-T&IEcpbM3zOCgWPzNbe5Q|*
z_(XQi;W#_IZGCXNPNta4;@b-N2)rhc{Ba}~tBu_Z$b;}#-ZN;!w2{lio(Y#Y;q|wt
z(MK{TxkX4O15N<g%sF|zHJ$b=@vxi7yTQ>W&UdllH&pMErle;Fu_H#v8SGC>x>~<U
z#+`j+RVTFf$mx9<p^p4{#g)Z=1^@wv`VT5uQgY6<Lf6!2l?4U~$?;9uYFuTU{|E+%
zK>d8tGt>E{llx`RPyA<n<8mwPY%NtI&*<b%q<q7k6q8%ZfNz()E1EA+|1uR+e0+kM
z&c-{c_0QOs&Db<QNgZ--+Z9K;3X$PaDy`m`HD@RXT1N;oKw*WJUh5WyKW_Z?E6EN3
z)kd`I&Ing;fuZ4fVv}mrhBoNWY9E_%(sOK$K$!j82KYvVXNR|@c*a_kJB8C|Wrm{V
zLo~^-$RPbtUp06UYEoBhndFdlwvRsFJFS;Hxops_({t6rp>cXh*8ipEY7n}4U;_<?
zs#oJyWTGt-EMa}f-5x~%5s>cr-#qnSxa_>aRlm=+hk04Uk5g;E9gv>l+Jzot8Sj$@
zFx49NbW@$F(EGbjQ4VoA=pRNK(nw;Hks#&J0$(=FL<9}p%%N*QZSi0e<c(<cA2}*@
zZvVSpTOPw#?C_w$JbeJnTYvc4BUANw{1^DENf35!^D-m0+~3?a{~%gjUA}oW?+w|8
zx`U?MyCdDFdss&Eeha%4@Tl{iw62}$Zf6!)PmpUR1}CAs9-P<+H8qs#qZUn&tusIU
zf=gq+o*EKoP%B~JUsshhEd^Gj7cRH?LBph+TqzxX$z<~%<zm*O4j&QJ6dmI>!s}X*
zQBT1A#pYzeGp?f#$I>MaQ>&QHgZ|X+wS~yCu=m`4_e6DY4~Wt9`JtM!c6Jlg{4{$v
zpLw0Hy9{)WD%<yh=3V7-%-BCdUEzt#EU2>X;p9L`KEvA%U34PNm|2hFt-4z@8r*&I
zM2<IFF^&U%7XsJa!ckphY}UBp&FoYy_;5ah4+cfff?C<xx)z6eKagS?nH$X*rH8G<
zon=sCA?#J8r!?_K%m}t@*d%RcLA|@lz4`{p(cI(y{4U}1tk_=*)j|E4dC3Z#VXwwu
zUwaY?0p5=vrKS-qo-DrgDtYUn@=7mH$dkoZfy|E;F1d18OfDIXk_U){G_g7NRV4X!
zx^qsf%%(R9*L-6=S`soe#M?}YmSv5zZCfg>eVO&ws5jbnCZUqQW8l_uH49UyFkL1D
ze(i6pT2tu3)0q108Z=iiZG0=2nj<{*N`z~eqdtXxt=ERAJ2U!JV2-bGgefhLDLM^!
zAt6m^`YAEie%wL<ksY%#9M%S;UxS9C_CfzU(=xE~f0ZY<c9b)!R{wA{car04^zB)M
zZ5IYfFV9@mDqO?iigs5&AGEj9H7J*Tb6G?7G_Ne<28pMdr&h8G<RKBilpsK!e>UHE
zuoq^K8}NWTT=Be4(Cazp4N7oAc)7t23aGBgLJ&4*N<pu!+5N+wLObDUalSW>N()mA
z1rm|&SYXpWXA7icTfaGxr+eK3+}2b_r_q&?sfOGTY3iq2-0DiUfPb<}4l`FMUu3e8
zm5-`kVi-U-U%HN7Soe80eYJD}l`(lm$CGuHN8{qQ3K|^<yogL9If|4jG!*~SXb;vd
zOK>->c-B_@ASwB5d1}ir+=((c<a&U}Zc@FmTqj~^+!z3^{wY-ZM?!yAFrvGWU3pr-
zk-Z#A@)2#jyz5S><)T8pK)_3lycoZTxqca?f`Hc-J$s<W_=`}HaU3X=Vttrb118_)
z?|=j92}H9MWYkOYOG+(4)g5*z`BfZXGfwH&nB8z+FK^4Yc?!P<jmYDB0UQ?{E1@6h
zFVo|jlLWve<gFxN5O^;BWww&`sO$<aj^14i!rcZaQrq&%&Dlsn?J+5k2+pu|f6;J1
zOx0e@rIv)vDmVK;EZMzsJ`Gr#cW+M@VS5RNq=O1D6l4{P2>Eyf{e;>3nY5*h7bExu
z`cI0z5RgoD$V~y12q7TCBTWdQGs)U<9c3p=9{H9lY5_+EW>y7pPVDnEHBfBB{=caI
z+)l`gFp-OV!hU~s;j)3qf<EG`WPRWr)2KXjZ~z3IVp9`muKM*b%RE$x0JZv;Srv7U
z;GAuqbdLZyEqGi=z|H6t58)&}t0nK)-ziG8K9V3+kIuW`%&HkXVq>+~-a)ID8CTHW
zxht>ubIgSA&@EcbhQu1Tg*BW43|mQMS1^EmAB=Z`ZUB{TZK*q@N<)|k_8W_%A>qz&
z?XLVlY%`v}v0AIO9{9bj%u4I9e(3z+U^AI!2E->%7RezMyY@AgJI~XNB&>(~Xf_qd
z=pq<m_Coej$77?t(df(TrBAr^h?sYmiiTvqcG@=4zi){1MirHc?QL+EBzmiRZ72J@
zay3J#(I{y&v<-mggzWw_!?$&aCjX+IsGB+DsV0ydlV&huEN~-`@Rh6Qhk58--9H8+
z-4r63Qpg+I5#^-Pq*{~2HMpc=je}Te0f$;arEg~^PpDVQrn&|821#lN@A&u&=;Tvo
zeyEq(B>ul0NL0&cOc+ikJp;o(N_dmAu?j{5d*39Y(Pi4YVzvlpyAQ2sOmNm$O16x<
zQ2)mOWLq3{-?4~SmU1$cso809z2v#(pD4C)4RdYrnJZLPaX>PCD@u7eJwZ%ReA~%N
z3WNqVSWrk`p60gES#L!Bu&g<v%Q~Gl`kWSR5sHM`#NZV5<+kJ98c(E@7F7`rF6$;Q
z?Zrs(@{5g7#g13lUDJ3_Acdd^`!9s}NrK3=rw{s_`U)3$XPwQk9y*l{<AY#f!+{Je
zc+30}9z4krV-rA+!O7Oflh2)q*3O0?pB$PiWW05x*mN-o)z8zvB=i9K8_-n2udbT@
zTJhy%@f-UY`WXqT4TbD10jZtSo4(1q*};@Z!|JJa3JfV+%Cd-WbrG?nT-YYubeDcF
zVWH;*<JvI)m8*?uFi=^5zLqMnc|}(hb^xmY(#l9~xTS$awattHhPhsW_fOk{m+m75
zTf(R&<e<p1ug_5JSB=2%V-1y(hIIzyaw>(vV`I&m)!}vdN0d3>%pA1cAWul=bL`m7
zC9t|Qh<xi2{F!|L7Qz)U^v=KFeC>GaM0K(3y49M^noRhr&-c34h3!Hl(EsjPcY^2}
z+mEpcCdnm~DA0!fQUcW|o&`ZL`lm>!PeLPrC8Y#|-H7*{J%m#k_wVpgWB3i}jROoB
zi+aHz)$hiK&#1>2V|~|=*|?ViQ>UNTl^SCk7e8Cy60e?tWrbL)tBKwy+A@D7Y+Jvu
zpdbbLoX?#~JAK)YDcDo0vsbP1k8`4feG|nd#6buFF6y;;Id3@$;JrPo*@TX-ze6j~
zXuSXbx@(H>QICd9cx1Yn(}n=Hfc^6x!%5cXfufaV+oLToYPl!_IK1Ukwa3Lg->)5&
z1bAmG<|V7@Z=!=1doXdXN?G>!d#Rpi-y*fFImlRRf23dKve|`+ZoqAS;hJ5hS1yKM
zZ!;3GEe*XS;W6FKqE#QGxk%ANcfi<<^5cmLjOEa0u5Bt*T;0%Xb`Nze`Fb@-fmyVB
zp!KyX0On;*oC`(Zq@Sti`?z6PxHD^Y6i24AqL4bC`Nwj4nMZ_vFh8{nU2LI+=47({
zUxFO6<YP!Qhy~hd%>14uE*U`~zqcgLsxCY{t}Z``kI%ZKn#guKK0|+skyP#mFYlUN
z1D!<-5PATRYATc{<(mIC87l(E?Oh(vuCyB^b^YiY`N=7XtvfObD7=NO&Qj^>vX>t6
zF$Qul*c`7<?f`Q(dFHc*X(6#EN7|qKandPJuElA=^}kVON<0a5Gw-I={GOC;k%f|2
zsd{`cnd6Nl6z~s%mEJ{qhJCoAhi_78bjUj*bTiestS;&i?IU*>!s2`%D!`FE!}fUB
zdxtHHEDi)m>J-Zl_dG{dIgXq<rnBCe@4s$(Pw_j|bWbeyIjR6~cB61eRs`;)WZ_0C
zF<)dEwonDRW&Te*u5Y)pvhj1t)^C~gs`YU`h1WloVEOyE9_J!TW~Q-;X(G3ZxyW4O
z+{Ntud)UtL&%b(vQgID#U$Z=48AOEeP-Q~AZ3<VGp0LN6V}`y%Td)-S0!3z+0McYJ
zMwyX><5oglfLd6ug<>7d99g`UTxeT?BzgE9<+RI{#21dW@J8}}VqgTD1!1xy)dT*O
zZ6u<%)wtu7ny-;aSIP*a8O^PnElJ@6HL7w~I;9haGo}7R+L<R3Pdj*g7fRBcLaOeS
zWzLy2{*<g$SL)9L9SyRP+%fYd^kZtDkqw-iVG-L88E}RnmJi+rbZDPedAUPn0B)0J
zG8k4egIF@Ml^O8!IE~0iw}6%<Ky{{Gb^lUwBi%D_+$$fU2-YQcqbQM^c%@q=M!%I#
zcW~mYns{|ZV_M?O4)f=HygW8p<)&@;{TtFck#sROcW_h325m>S;_4OGTTB<*T1>t<
z!G!Ura|YlwX4%{$L{dc#c+$(*8D`y{L!5CR#Puou(yS*9fUB-^L~VTlG>2OJEVpR(
zxO0{vi#y@aQR*Ve8rDyrG#z=U%<)CYDT;0c>j(s#0?ccRo|6RH9`v!?M3$diFE0kl
zu$^3(xD!WbRH(a(_rr`N$v%3y_P$Cdu9+|Pp@YIEPMTSQ9vS9%MNemzzYM~OR;-k&
z=pJ$Ea0VmCC}?KNl1+so2BR08^ba6OKEk!WVe$Uf(3@k#6m!eHsh#U_CwKRTmtyWs
zOCM5ysLksEXZx$%;Y$H!1(;W$L4u+<{xds|x_c`P9x(_)40AJc0#U<8ylf!N$V-KG
z-f&;}PSgTY-eHpev~5R%#$)`h-i+hD2(u01WZ)x5Ps1>+4ec%Jco1Lm;5KgragRog
zJ{05N_!Ti_0~Fo3(d`d#IBl-;==x})p)wogzARssXY4Z-3nX<<p7|7(3N3;Ed-Mtf
z*~j@XTZB1rF3U406Xxv6Inppa#<EpR$(lklwN;MaAdKJAmKYIKRZ+7u1kV2!@PZWR
z&fCP|Z-Th`tMt%3f^7H~S>dHiCFS3<3OuiHsKFA$H&n?-Ow0YE5At?FF+1_rf}bfG
z%NRN45LwGaZ76>>sK0k0I;3%zyXhaJA8`xmTXWE@!^eTG(!fE%o$jt_*pCgmBwm`Q
zrMKS_S5WO%RQm~LR!Cj<=vN<J0PMYL;c_gsO)07G`>w`0yD=8yP@cx#@#WErw>#4n
zPBV96)cOo+)qQw?Pmn+n5{Kftz9B3vz(!Xb8QgD%R?@&Ho4t?-^udIm`GshTr@$2W
zYd9MPipM<g9XsQ~jEo^CPx7w`G`Vw%dRh}CvLD8V|7=+(3^F>ZuoHC4(e-}T(k@J}
z5O(>T?9X#CZZ~(v1PP8!AwO4v;)K>f&J^royiKNRUaR{mv8UBRGuechWO8<hsajy8
zr=jH9&9^Jdu*$b6kcu@u|0Ji*zAYzLvET0Vzy$W_auwltN@H>!(}hug=WTwk!LB!4
zpdV5@fqkaN2v2T5^_HDu5<GR)S`xxFt!rfR)F@uZhn;i!u@eODb-Gw-K{(=)!Ac2S
z=Ep6T-N|;l28&>ivGC+p(ye|1(j*L;%D?LIYCL?ZSW#c&gENYax;ggZ%fgpAmv|1L
zu<_Xd{RRD_b!*i(n+M2Dqz&>jr3|^Ao&G1;F&*yFnC532eW&L^rYKeuC|OS6lV}@k
z4=hVOzR2vAbGVSbM&$2}59r0D6~`+vHWOqM>XVu_4H8@$M~v+UWykU$@8jKJocTX#
z!sQH94-Z4z1|DUVRXDcR08*VS^>JWRgf)j0y@(=!t(*AUbA_}wEunUGMZCeC-8zRX
z_qr#SL%}63;>E1nguY05l?egT_<|}<_#7(*;F!Sp!#w$R9zY<V$;MhAxj*>NqPduN
zUQLMEsI|A<uE&nsPp%z?mJ?%dedWF$Z%#2$JugIbnU7GV(2Ww+iC4|Wnk)hQxJ`}`
zsv2mRL!Xk!LfR%g5v{21@z5Hmz@B)vGgu=}RlOBV_43~Lfa%wg5W%rG-h<KCdCYrI
z!hu=>cJV}BbLp?Z*^odR@+`<m%#L;TzE#*=GK2&1%SyunEu%#ZRzb>O+$e1a(V%I{
zfVe~z$qw=piC`g#lbi*gPW5CC!^2B0(5PUiBR{nVqiPU}rwdnbPhY9UdQ8dtGZ7ZU
zeb`^!??~bzYj6Cfgoi)E8=4-XZmK0iQZgONW=qdudoEMPsQgRPr<6!m86}X-I0uE^
zHdtEjvWu}B+d%B*Xm~F<@BoBUFk4F19p=2p3eHLK3e;s{rZ6UPN|t*ijUr{_gFFXf
z7mx>DoTP%b<d8h}0;5Pmww?t6_ipm9!|~)E$7}9a#Ic6<@UTEnOCb;pbMm$TYI&yZ
z|J{l4eB9p6y&o(b4acFgdq(fdu-+rl?k?q@u<(RLL-ns@DnKC=8|uq^1-hYAD?S9~
zVp5IS4JN3lqHK_oj5^M8D_7BR<(rs8gf9g0`{oL+g*gP4%IrVy59A=mTHdGGqmVMR
zgeeFly<?>bJ7!oUQi7k~L#Zj>S(hrVMqe=@)4PfOUNn#>Tc0~;^Eco`Bg%a-;Ywyp
zqzSEozfiKb{T^9kWZyZ1i|5%ij{zP2uIlh-2ItIt*1_IQSoKu_jK1=bp8)Fn$ntuu
z`DVy}IvlVASUTS3TUx?Y5gs+HZENjE+Ot_?XGe9iuBVA|Kb)1sx;+m4YAHklY3JBW
z{crpLjneO(`%8KcrJZ!|(gK;!J*CL}kaywS<>H4pSJQUBq+$LtuohsK$>)LbP5CD?
z`Yz2q4dx2YY=T_GD`^yrV}SXb-cwMXa7t!L6+f$W2nSutpem0F#fAAHB;*mTqdw#2
z%oR8NzmUu_^&v<`GJ&Z!Vc$O>z?Yb)*;fv|zq<Fll*rz~x`=?CUoi{mit9TVgdq}-
zKS^=Q@he60&NK2FqhZ-P-5)-6ukf^)Z4wOvcaL940HkNtPk?2|d>Ah<4y=)hZG60Z
zS&%KJ{W{yp-~v^3<tu+&Gr!VHvbPpSLEEpuuWF<?FQinNUI89r#X9uB<zxu-#I*!c
zNU1Mxf%W%w(#=F%IWwE!ZE{VJ$4xQeL<9cCCM%M5+5-P!p9Jh}cNr2)F~a+QcubA%
z8z8dA<&4B?$y|Mi%!q2Ok%1MU2!2xw{;ef%eM>YD-me_J=gSu4HgUjaO*>8qeeMfp
zR?6?m@89q#fYf}|s4p(wTtqDhJ)DMN+?827gd%GOSqcr-m#*YUK2>W*5q2t+1ZEJ%
zbt(~_A@}?*EdRSEX3>T)4jpg)@{yAZn+Zr|a>gHGF7NIPQU7&S`#?*2q?+@{=jW4T
z0Y?nM0crjRb9E$*5@S<1I*#Q1^M(Z@XUFsODpf_UVZto<tO5QcIZl#R2zTIkRlG^%
zg2aiv8*<`u27!)Wlw^A3f>~5$tGUJKnO8_ew;3mibHR#OOJ;a?;jcJje`tL5gOf~k
z^qt8tGi5X?Y5t!e2he@+k0?d2?;_n#A)IthR6KjT8RzYkD^(QrH6FIwKvh*E@H4~2
zfsfKs;igjYBQDzUqj-Q5aDmjrwR0cyF&lN5O9d_d^+CEaBf`wZSKwF0o!#eXDu6Ph
z@)E?0iXj%9$8Cx!OB`8%g}y&d^Ohr26tW>V-UGFLjLDWorn)_?JeySJ@%f4e<LX`T
z_d&YH9b1<Wo-iLnIEJ6g=NlLlcUJ~kNo7G?8DS=eMB%;!-x5b>nE^aYR2K)eVtIue
z-l!asR}+u;O=v^6V*hmaFfc0{-q9=%;5f7^s>x-NOvW=<WB2;VSnE3tC+C~wOlHKH
zj(AT%km2M0%G?gFt<aou3#z4^1p&7mV_suuKJuX2R3npPIuG9J?t*pTb1p~8X}ZiS
z4t(xA`<53ODHumLl67<#BQA2#MFX{^JAdEp%TDbT!|5>G#-C{{qYQf0+^ayYbhXt&
z8TPhweTR40^MM1#Uo9p7ah#>o)uTM{LS`|ivGvu9PgxD<@OO+En-pE(d9F1_k%xJ~
zW*@z>i!iYGv_S$C%&1=&1lXtC&;E_>;y75;JPC)7<}OH&E7V>o+1hY>**Nl;xODWu
z<yD(qpW)}h{|d|1es*3a;V}5=QCpmEbkP={EtCN;J?4v9aW1wd^u3ijru9N>WXUFb
z2w-B|2N^&fjD?F&eZkR4%DlbD;G>Km;N%`j_`^PH;C~lGGj*KJB7BdZga4>nxbL2e
zN`GI`JC!M9;xdbJ`vLHmKW>Kt>I2vW42{%GLnc5b-uJZfU}C<MjjnSC$K5+cLJ3-_
zCAi5Ks{ITiW!{6$qoh(c`s7JUJe)il(Q-SAIS7?KzrT#kwV4`HQZrw~*xv>e82*y$
zC&)R&BD)!k{!s<+i6kT~w3|PFH~n3zv3#;$7K`xQ<KQ4zCYVRV(8E1XUo7!BqbL@H
z9wfP2cMr=cVz^-mQ@nAH>|ccajl;)m0Y)faN%(7TW)r|mS95TnW0ESr$C|-3BR*6l
zJo@ai&L9VivmTX3O%$B`^uQa&&s&C(`8GeZ&REkE$TRT$Sm@93j>6_W4nrA(FTGxY
zX~t*M?ND8*h@#g$qg;Im3;5)EHN9s5jq!JiyFlVXQ^Nydu<y_{Y*=?_N~&3WaOyHW
zv^PHp^2se?`KgZke7n#V3}MBLBVzNjo$-!p9wyIGcnaqc!)%XPf;Wl$j=&)$^l6^U
zwo9H9S>rnViKy;LQI!E^sm#7MA*h0pB-=2e@01zZiK3@wGf3xR?cUV1`Y^e+CBMfd
zw{<x%_m*Wet|(YJo|(yODRGLPJ(a$;5{Z#O7;FhW6qkdPW;%M0>Ckoi5Bo-%Gx?C`
z&|NBp5@ktnRd#|_ZCyNFr{vP^q9#t}s|ClNZg!l33S4${Zo^aExGBU}%et8cu2WC*
zrASaIyJUl|G_Xc4-_};3@j^jwf8}9QJsrg|bKxvjq%CFyZO;Iti)>ss-&Fmtv9or%
z?bmP|AdIH<D4K+(gmS>h_4}G)BXC+lK@OeVSJTtCz-uAO%NC$5DffFWJQo4$jazJ`
zj@?THEsq(U#9Gb>6MSKn;>wc`GU3JiHXL))1V;@$z4G}3zmTc<*tHCCh|vC+*}DKF
z+nmrp(PD}&DPY0ZX*ot_-?FBc76OLuw|6*YsFl%&VH<1Rg}Mi&v3xuT&UTOB%Q+%?
zV^FTP2l|Hz_>D~}K8I}(fp!AX0LYsh)}4+d;v{p#9Lyh>9wb}kcep+6xJHb@QabQy
zQUB(rpGC@CfV`E_+})-p=vW!hqVX(7h2-f1^#qbAT(@xL&4+@RhsL}5a$cjnd0?<Q
zK$LeDTRKkj%qTqt0lFfY^C5%eWf_gv8}L+}W+X=VfUTMGOyZvr1@%!8C|Yj4CyexD
z;CwqyRH7XO$}?`i*Wo>t0Xhin#R$DpuZ`;R7!)|z4R(2cQ8!-L`ti1Rei|Wg+>!qZ
zlgR<CM(Xn)o)yQ~Z_ZqsSmvXe55MB*V{(`S+Uw939madZ>xT7J+p93#BM~r8r+hWb
zRg6fSe+oh)eWo@F`~}n)9hkG^t3===G=VW<`6|-3J?~*a;6$Ml*M~qe^j1dE(08KW
zT+pp6IZ&!=#6Xo*>w?1nr5lU#IFfZhxr0qw*ls{CTEVI0<@*=~@z+<Bzra_-Ru^Jp
zzK@=XmB(<YmK>5OeI18Figr17W{1k+>4>`eYCRt>_5oB*q`PE}I1|ykZ;hl#yI)SE
z@@xbd@A-#`1od=bva_bi{!(|6-RWn&XT4&E!)MZVB=w&V!%X!^aPFQ<&L}nSe((iu
zqh{b$8ruAPq@JR<Vh!4aB4)8l>2>ei)K)%;BZSjd8^woHqV8u?G10`O)(YTU&}j%U
zzb#|Tn)biRroR79SKYM|(!`O?(aooeslTaPAOUmi?PEG*x#ss&DD!b_R#$Ba*=0Df
zGd<y)A}8CVhULc;>dL}I7iSHxgnxj(+op-=U?O2&qDdEQ_w+5OsVg%y7?pde$T@h2
zo031*d<TPCyYT0Pz=w&d%MI!H&P9R<k6i6ULUq;!iyMSNPT`ijIn{b=r<~?hav=1$
z`YB^u6l)7$*HUH#eE0Sp91@Ff(?@T><bWS2U`1Teg!Ij$^nFb<W<<G^a=;wnH;16*
zD>{&EwQ>jmvs_%ywOJ61&W%N6aD#ib7TwrD%mrLaT--MV+(BpD#{rdj_%^yn3Sdp&
zd$nZmx;n%OAqQ!*KRrzjc2k8f=WFJub-S2b8%$1M+TLhu_DE>QbaWYhVK)s)?zF0;
z)1~1kfbRKYEzk5hk=YQG==P#7C8WwUW~c!&gUT-Tufb`+(Vntlk9;PScOo5OW|{7-
zydQzZGe8U~>JQeY?0VXVJc|r=V%AQ*b%{>x>z4%k&o8)HLBnPe)t%Ds#YB_-Uhf6J
zgeX7m`?7W(Ob&nK=%mwX6;F)5%C|91m(?K&hEf-Pzf4Ky&uB1Q)bg=sx3+0I%Wv;w
zWp-=~-lnD<Wr3AyN-s?K0f(51V4Xo<5|aAB`)|;n+5BMFP0kvhei}Hzv!kHPaw9J?
zv(eKx8*;4-^Uwh3w3vgq?Btn_0oSt9r<=S|!Dbu|D>irhB8!AP#(}7*XT<cv8zSv6
zx3TM8qY0CcEBaf}_tbp~@&)=hN)h)%1povD`kbhZP5E9N|6amk<n?<)C!sExW9Abc
zSMe-gR+JcPRbRItudz`S844qp^emaGs$k#J5P7)fqjglBOOMLyn7cU>s)e%Xm06*y
zz@dJt-!X;vjO=nFW@ln;3h!bVpW*9zo9XtYgST!dH!y*7$tMqIO__IldCsnqCO5-F
zl&q08tD&}0p%TU%6m9LXR<S(CZN={2q;cbgztd9n>o&f#J~N4&R-$*;9+o!fn)15x
zQf)|Yx_Lfj8^-KuTY5>hIc2AfXqX7()+2^NGBY9Ie1HA*`M`{@{@DxEU+2G6#abS&
zQGqXmJgG!=w|?C4kJ-r+mz+ATesfhD>7j?edgh&zXaok3_0~!RZVs9Zp_f*g6=oJ4
z0c%buE)a)~UX%Lo=1J}y+T6R^hSqT=dVN?s|HVo#l9yIil3kvuw%F17E)PbaPf4(C
zNST8Gi%3ln%5)QG5eI>aMuMV#Cs}?}{^(qlfHcBsIO*1unrFpSP!C~V5f3vL)6MFF
z6=ps$O1pM%>sZ7Z!Bz;&OY>Z<erAU|N+-FzOGVlQ&?td;v=V^gGiq*9k?eu@22V64
zkl>hI*UvZdE@1qp)fkqpZ?2g!kWUb)nc3#TLO*k~j%Y<O0*{da6;shXQnN2^SU9T%
z1ioaGcWwVW?P-ME5Up+<!`J4XBuhb9NNa*;%o&AJAY{V<av{79Ml-!GLX~q_(-Fj3
ziQ6m2p@5y5>|#DBi987rd75OnSM4c{HlEgFIIO6SqID&$*<nkwuOd#d3Jd;__*ATA
z!pY?ViWPMq&^->xCsFWsMG+Hy0o-z}{NDFlRDOFmYa<)KIq<sJx5TD6V~a*NX~d0p
zQ56~%FZL}J!8wnF>46^u)lLpJ8{j;fBE?WFQ-3lO#Z~hlS!Se9Kup9)jYX$>6oS9-
zpW-}WS37Z^*rYJkSjiaOkHb(@nOW!`UDBjjmjgiFHNX+hYL0_Bt(QBBE`;j+uGg_e
zo+CxCARC+Zk&ScMxgp6(hST{yNNp+>1~(w>SZ{7<t(G+z^D`LQLW7lOXP50RKu&|y
zaKt+n->$sYfsIz?Fy}bq!>V#M0=SOeykR1~2}z)t79oPnJ@^UV=1sla65(rLm}TKq
z+n>jiOiOGJhepMBZ!&@_^5vZ;=u9LSjCLSC1&^lIKjk}|i2((^w+5aB=rCKk;QqCa
z8ILlue-OcW9?pSUHpxk=BYSlT9gGCX63^1P7A9Ffux|2{iXkUzh5+FBr>rSN`c;U(
zZ_r6~Ojniwq|a6)_dh2#B??5GFsT?HXgIr1d!>wD)tUeYH1AIpQvg6IoV4A4TSyUQ
z&Tl@Zwy3@A<S%6$ZU#R?L;gmM4AK$>GSL{8o2ALcO?P~aOsu0dcay@p2v2#+ej9cm
zlMC*X2K+id0j0qL!BcY$fZMG`A_bSQWkqbb<c~-@wzH>J?Mk|NAqJO?MyKQ<tc>mN
ziwA;VFiS3b$5BPx%iq5<Hf8t^aU0_@!=n<%&(RQ}SD%<<b}G|7AB2+)OXEooDPLdE
zJj|B}dI^~nOX6ro-7e$bduQtdKMbCQ!*FfoGYB$E##V(Y6FTK1y&;PAA%k8|?J7ih
zuq@UoX<W}=2*Mg3zg($5K8lZY3`}mgGX00Tvm#60^Iy5e-?UmLngeUX<7YmDpZvBJ
zy1(dQd>+b|b-2~cXVo1XZK4Y<%=M)Pg<$A*hp;^9Z8m35wFG4m;wsVpyuJn2LAmq$
z$wNIxvt83w8zEq(v$QwNL;NW;dy2K0qrmMmxl~+3xI=h<p4JbAVhDc?Nn=9+Qy4<x
z!-RX7wPu1o`5rvG+EMX;bUVV^rh;23>qhS`i#;g>xQ>u%)4#YmeAf>5lXWgpOT=bf
zY*As0ES83ri?~k!hKbg202inWVa9PMN;-Kj3xd%Y=1(D`#)wW1M}&6uD&L@9W9Y@U
zcOBGG)Z&S-0AOk{9Fe&1Xfsz@-;}U#dQ9BuOiDuq-Dbop8MDm%iOsyRAYUWRr{8CH
zIReTbIT-~G`W)@h;3EJCN}gB+vhNqA8|vb*!Pme1ikSdpP#_HZ2I>Xwr*k`IpPiT}
z*MKTe04ns*Ojc!IF4{X(0+gF6UGfH033OPmMc3V0zET&}(L$iMUVrOyT=k4dwh*h`
z!`G$6h6(6M4BqO$2&K8*obLW}trO*8G#w~xgTrT1PUAGkrVB6Y<$Bqlm^tf7mT@C^
zX3K<+WoCdG{%jdcJEdgH*jD~!vO_J<Tp-RW;&36%h=R32@#`1C;@B{A8yI_bT9!)i
zfdlVK{;ZR+`oQG&M8fHHGwE(>uwNd@p+^zu3EW-7KRBBQW-yiujy*WozLLFh(j>!d
zVwLYsMOT^y8+g=_Y_vQcT#NN@{D7`Tuh$4TfEmVar49AxKb3?Sk$5{^EF4F+de&Sv
zLXX8?H@CY+5vXY>KGJtdvDPbh3uHD>nj;fEf2(PDr-ALIJaiYE#@SvwTk<!6Z(-l3
z$yd~H<Hfb<$b3ch<3+C$>)XYAvPw58k}*9TrL=LU8D&(%Qnwy8_s{@`)b0C1K|a=w
zp>a&M!^!bv>Q1rK>Tqn=P+$x%TQ?yHOx^bNv2NAmB$`S7v%4+IXuG!5z5+ZtRO74L
zdFzIt&}++6Y#eM{F33b=n_rJ;qI~=-9kVDbg)VBJcV)L*J}ZrR>*eEq@$ghmBAClp
z8JgeJ;=|)zSz*pQIMmX4A4y82$T3PO<~6+6U!@Z?=7r4_wjNCL(8RqXocyr{f!_v1
zAxjB*@1AFYuw*;n=x;|#9<@JlX_7;gn${5bV)v*0XKJl~w3e@wSo7?|*K*3_G}3Q;
zH_n^hFhFrT(q;+p%lV@%yx^&kialGX)+5wkg{RSVxd0L7-$)6JZh}`>Qh!(E1-gv0
zj6`LrF!vjmKKFvj2tjZ)iPB1-=i3bdiMggyF`AHN*@P-v{;-{@d`twV$SF9;(O}ms
zkDi=bJvpTdl}Ifj$U7h(lrFJ6ZWWS7K1-B+lVCz4*<l|7(k<oKoyL`}jI8+Ske0f>
z_lV3*G%(*}Lte5!b4(VU>G7MECK@+<8Nw5;xEX1^SDP_liW-L@<nz4$s71^V@JKO6
zbgq6y4075uLvSM9!b54}1%P(O-{@8&VFlt%qH94+k~ln|;EmoV*TO!XdX{|IV>`Ui
z*clnA==Se>AUHTMo#FF~brmXD&H~`$fzuu>84P~oaD%EO>^;0IGOA!2U1xU*C9^4F
z+-dI5K|u#<t-@$-j7ndm_6_>3*c!l)&189#4BI|^)wDQh08(v#7>`ie)AUE!RLmO?
zJI3BG?a{_s6#Nztt-}Rj-4#uyMZ0F!H4?MTQR0L@>59Nf+WQ?xel*%c^i#eV?=4tp
zVOU(@X75|rhVziojy2q>++x%-Zr(-%(xk-Hk!2CAdc~LF5$zm^op=T(J0ws2A4Yw!
z6AV4P3BrnW^S|wi^(wZQ5|SPewCCNNw0|W>Jf}CLEo3V7X*67jDDa%KSNv)FzZsuG
z4w6y9b3pwo1j@zxO&klT(3^u#TD0qt*ML<Bq9DWFr@T}{kssW_k2szmCxmEgFzIPQ
zP&MAKeBF{dkDBEO#2L5$vMh}4>sg4XBI8!RtVHci5ZIjCQWn??Ub&S&rj|dLA*p`u
z<1@d*foi<ob!>LIuEj->YkgXud5>|dz6gZ&IdMgDuE)Ls*pKiQNRUt70>p|jO}{Am
zt0=j!3n+AD?A*r#COH{6<6kw;`m>J<0L50~e?_5Rm-XTO(#a7x?6=8&9|+<@H^gUN
z*TTX$z<6}6pjNN?PBzK%DWnEZ2juxCQMu29==@b~bHi7Qt=IkCmH5CEbQ+|IWc#K3
zVpl(#bQ$;izNj|uA~^$ywWV!40fUX)92zDbShOJhZd+%IAHWT0Ptb=}PeKfGWC<8_
z*v~>{arOdW+{yzE9=?M2M7yITmgo3pyatmV8Zd9{PU6R>|CaTzrdBTRj9et<<otH=
z&|@T!1}r+3*<Yl4sz{vL78LiO<p{$cwb)CP)xkG&d!8+lXE?zFG{HpgQPE$DWR4W0
z^MqB*zJJ<H+E2?a$SXu^jY4MCYGtjhUE_XL`CKg<K;m|;PXZv7@=Pl`c&k9w)}-%(
z%9t<Ti@sKN+q8w(%pz&fQm58ag@W%~k?_=S!06wyu0pXp0?DX?qa&3@0&5SWTB<BZ
zs&55)I*8<omC^vChx$oHX|cW=8m&w3$V+5leysN6V4QjE*$M>+`j{UM8lN<C>gqDZ
zL8<6OqubN3B2HnQZHAyPtnv|Lx~<eU{w>>x1p@qib5YhXnu#P;c1xFUBfM`0(&1OU
z(bzkV6W?A*a@YPe^-O&-2x{#}0B2hk?z0yIsn-wgzMRP|Q}~Btnqq=wbMkyz3GupO
zqhK>ROH0zwkyB&7io>;NAY~Qlxfw;M=%tcFYeuk@#r5>bzZ7P$>_eAW+@#}N_RGyo
zL45Dr)iRH7hW*MKE$`*#7`<pQRw8wq?P%mw?pXMT+O&=Sj1ab0@0jyBd!hzz?9wSk
zH%+uuJbVyqUtf{|LtqJxv$oYaw6Tt|o%|`WlMXUSq+N%)6VM;w7e`P#d}nG6M^&lU
zmEUvnvw8}jn%Y)777ub@9i6oEi<$(eF;|H-9TICDk9Lc2tp()gs<v@m>hnW1zZ!7^
zf^9ZuC7s`qn;!!4du+4v_@&IZc=ujPL(2l;U@7?V1*MA|W8#roen5C<Isu1gia1&|
zLF6DQM?d|&BbKd4i{ESZhFB)FO14<AI*Y0S@p881j;_-%mNmVme=4bQ^1YFX7KsE-
z^Ar)>lxI{IyRr%jOPIwY!sbZ{OM&jerUt{%F)};b0^M}(I_ftT3zyk3o#0r=IB*JX
z1p@BYo3PBZ0fU4=0F5`_3(8frLSl*>`jt&H1BxEqzmgWeN|3R2$*H^gG&-uxE^ic~
zEidcT7QLXaCT>uJ_ViioFo}pBSSqSnf@k-6BRi=vs(!GS>B=inXa(;C%KF3;`t{?0
z)`o(nGu@aH-)K?m=8_w1S8ZJu`;5GF`;AQ#)RL0A3&D%rAnO<{#0i;r88hBCb@kmD
zfXkE$X7i+lSiJd1Yd>r*jm7_nsW5B{2f(vF3Lyu^TyFA*enV%3>=WH{?EZ|d79czu
z;QBvUN=!0&r7F$9M|>nP1Wyzn9pg|6Jl&W~#gnB+Bu_np3LXy8v3AM$$HPPVQv4yn
z_H`zY?chn{nx5<c@q64JF>+|Dc6Xw~k$M+QiFodclKv8S`iHdU+Qxuc>!&=Yf418#
z6jq+VZdo{<0_Y=Jqd<80Ax1Zt=~k$Y2bJ+_fMw?PthIcqLC}p}raeg@M2i1zYR?AI
zm4|Ze8pWM9pLV@_rO!r5XG||?IE(t@X`B1b3HDMc5_aeTC|;i2X5na)<PnvDW)9$X
zfnV@LK4>rgHn`ck8L+5OJ$y_-EytDk!mX;=eEVz%O_L&m`EABtp7d3v23<4MM;~@T
z^tgye^e|b&bC`uHOWa;N2zU&x?+7XEc4l{)Vs4ptSI@URv06$m?qFOPZ#shy%BVtt
z%~4Kh?A(jMI0eY^;iz9z%fLSLiYZ5y%iAl3Yz^Tgm#|d7dP{aui8B8ZASrqoI!zf&
zV2=T`8|1KM=oyyYOmu5tr78u-@NT`r-d+`JBcrB?;_g0*=Ws%?66kUu)#AP3M7WFB
zjHs<~K2Ow_jZM#;1prGekPSBxQqEK5noj*3x_ng{BF2u8mPXmm>CtAsb&FONSi9vC
zrY~1aBTuEdriz}Ldq#w+{Bzk4`Jvy2@uM33c?BahU?T$pnzyX~b*4!?fAvT%A*3A5
zHO;3|_gK3K5i%PGmuRySOYt+Io2|KL;FUm2D-xRme}xd+@vuUaTLl`Z)S@BLG-}tr
ztAqpbfBQ?KjgtNN?|r8ayi<Qs0aS0jVzXQX&lYz6lCW7{;dU&vYYOEh`9=891j7#5
zyWL2Y>%bEvWq2nqPRiac%z2$Dyl?>ZeqG8oTy?w&$(d{cufzV;K7nCvqfwWfwXCkn
z5FW6hO8Mb1&W)F7>4Zn|uRCSy5^gyqPl8;N&s3pShCTfo(PfazZ*#ir301U7?x)&<
z^ZF$eL4vbB4TT?}iK@Myf3;Rh5LFa;)BjxPlVzP{chH6feM$-W+L$(h!E6Jco4O*t
za?r+X>{`qiK2>~Z7a|eQilS90g`Ko1kjbV!Ur9J?s(*{mSui`ht(^Yu{27Y$(X1Yl
zFcO8@`rv;N^#Q`@FH;*y^fi)fcgXfzX5Y762wFRK2yY?I6IHB5SoK~iW8yy6b+ygX
z>q=Y{Uq-5$xG|utrjrNzq3-VMrK35VJ2tI{Z$QDIQ1M+U3@_yp`;ugD|B3}@Wzl}_
zhh%e)&R`AfOIac_LN-3qh|^l;i9N2BR(|;FHaO~15v_#P#Uohdn4i>0qz>;1UzzkM
zdTlt>Nv?2byCf4e3()0Kf}+#7&ji-QP)_<ypLNw}8;7}07ai`NQ2gAOz>>y(WG(d^
z&{FkfkVt-Uzi1QWi$sz-DI0n}PJRuz0;+e&b43G<R&aI65LD|eq5UTtSpyeR@Gv9R
zHlUNb#J&bm;jSU&6M7PLn4#Vu8I;f{|0!atpBGlNdLy8(7CNB;nC%9JkmHx;k-WCE
zQE>q6*O0#JWNq_~y^H}L?*n2k{--Y)fyy6C<B_0Q)I*%&z^V%la$77w{K-p>fip}H
z5@TF~z@Ga#vWc#hUPsvHL2iUw>hCtK!08IqV(9S9b|omuU!HJ2{njiWE&3yz{Hx6S
zEm9M<ALr@0G`s&O*`Q9x*^q$-N^J25!Q!nVj#3A+T2ISsr34bZ@esIh5+fy?DT_Vx
zqPSp*HD3QoB&9@{A`u`YaPSta^T)80V4DC@`t&cX?zMpf`%@PB^L8N0HymzeDCQd_
zC#bld;og4F2SCq-KKb;|BJN(ZlS<L0ml`N<&4RYEoQK~+N&%)Ur9xF2E5>?n-Y+5Y
zlTO(f;HC|4`7^7xvsgXJ{(jvee;N}==sH<XHBCVQ!fj;EiTMD3e~gVNarj7Cy@59d
zn|~mWg4(xVA+M-$zup&hvc#6>{M`D#NKZV0*?Fr_$v$sVodKli-CuAgZuy_{$;rAd
z-2ZlA5zBbi*+~zgq}&}!yQtd^Acbk~HyIg*&p>%zw#;Z=<&2G0ktEG9p$**G@b6GY
z2gfaM5gcdc>!@P7wiChTk!(*Ua5bv`W4B!}<1-WpH3CzSxob)k^?-TjJa}+btaeln
z>NE`1wueB=`rGcCltMJmObJ!ptFt`3Nw|V0#^h1xZ1&~$HN>Ps9VC`xhhQt#UQuA_
zN)hl4WBIq49`Ntq8l#cnZj3xExwUxf@Tj~$;Ek4e=a(Q03EWT%*0;FYaR25o(kYVY
zW-MlszKK|UozmOl;Z9j+tc>dx`$X^!tSRidmT0$<VwsbYdVyW1j2wm~Y40bMT?*Gu
zLVP43o?&7>EdPgIv%Em8CWFF&nMvz-0<Rlk|D4t%MTN&di$r7Xz#Z4Y6mZVk+W5uB
zZZd1+qVxnd&X|4uBTY&+Z}v=?a$QC@Bcm0k@ZZXflUb4twt%dbHINNtWe@g-W6gu<
z;FF6hZ_8(|hcs<-B$EM7LwqEhK-8R9TvE=yeTp%Zz$Mp^ZHQtWnELvJrOOy&-?z(N
zKm}8S=xX|3dEtp-77v+k)!1Klr;#`jp80Fwr-WMdALdwgyJ706Q!=a~j3NGZM!;F9
z>gr(+lz{vtoG?rlD6x<>YZDw8+8RP~t<Vis0e<5`G&;u0(gd#K=}}?hpH=IIHD(us
z22`&QamLw4MQbP#eHql*;HMmuOP&p`OM5KrwrlD`<95kc;AP4FJH7={BWeNXjlb~j
z2)UZyx~c~gp0UeUptz5Sz8866G~Fji$eRk&NJ27ni7U&QrrZDZ=}RlK-QV9KEGldw
z9B9DIf*UB_gW6ep25F|H^B)cX`UK<Uc-XPSL+*be5A9~_wJ|mpY=c&NneL`N*|a%l
zsQWaF{HYYGk@N}2Rpm-)rKwrlITs}HvT|pq5qOrsa5a@qsbwI{d(Mpq5_|1S#NCEN
zctu^?sH?OOBqTRzFj^&;+&Z9WU`3c2rk$0sp9^3hb`+*`dK8(4U|4yMldF1T>WRKf
z@pJ;AG}%g}J&$_N?~{ziUKPm)%ZWpYC^nj3w3rHwU?`Yag_(2)?*1U^s3+4`cf?BQ
z7qE+Oc(yejaijO`i+kjL7xA%!3M;&=Qiv)T-DkUAtLR<EZamGYyVF7?+{!`X&+gty
zp}HmJwjgAR&O^s7KRX(d3L4>i<;mv_Q%IsBtBt|VSi;1C>~9L-xFRE?t!z{NIHCFY
zOe&&8DbbZ734OZD2^Zt!Nid}<V3p3IRH8NcM-H>u;-<;I!O2Y^J2bwg*<(TA!WTep
zGLfTm16?9}mbiTGYQ4gr>z5BI%_GW8qyAz3c`a@v-HNb0%R?|XP(_!n(diX75Twdd
zEE50P4)aEINB)Ecq{Tf(=*sOoWPhbpWPTsH#geKu(7g{wU_Mq_Xt?)j8`xm0Gutc#
z6;!g9&PMX~Yft;3V){|f^L~T+KI+Ail{O)%=Zb%E@y`~!S$(%0F;loZq`Enrh?_Lc
zu|k$Ex&G2O5N%wve&CLlEt<lYiNbH)+FG#w7Xi?*0|P;rW`NboFg;6&*h=Yl{HW2r
z(Xn8!BkWKz@z?3Urz4A|-U!6_eDRPXo~o?wVE`08A&`UD;#nnf@0x<I&34X>CTmyt
z$qFLWZKc<uHlK_x^QCu9afx;9$e^6v_-dhK2grRqg^pE^B74$IJ(~oU%gdz{Nh(%o
zH9+$_$T&Y9F6lWy@B>@k1U->{wzjHl+s%SFs@MijhFPH37}mFn6hGjZ$uNCn8`RqO
zFy!^mN#025#!Q)}Sdm|RN&u0Dmp@$=yH@6uqWNAIW_<zN4Ral#ZBg0Wq$JK$X2+0P
z5K>eC!F6p27WC*atWgCQ2E%jaYPWV3I|@~<fwZ_+mHML#J1fuEW)30iJ^mWDz?EW8
zC{7jUcP5p>>p{q<xXH^S#Mx6HH-2?TIjONc?ESL|D3RW2^2mmbab$5_yAMI&S}~B<
zh@ehA5RLCNlcdG4wFJP<=_X=+t-6xf)$PWO%9fc$w!Gwl91&|20`XH>@s|d=Zdg;m
zqi_^!QjDp*a^f26QLO{*QQzf%lDM#`Tu;FXvqw#WjP2v{(L+=ixCzYK{G>@hfZP~7
z3zrIO*xIcl;=i69>ip(ypsfD2H=?g~@gL9MU7OBzrgXIXii6s|tKoe+fm-v-e8F@>
z*qm@;7R9+BSHAx^yY!_kagExkQV35itLSKm=T9krLdT}nZhG0eWqx#7%mI>>8#3HF
zelhT_3@Gumbj=5$IQbnG$~Y|0d>VbBXL%YKg`(&T5-#8!UkDRHKBTlU<=s-)`V^Ts
zKu5SOt5H-RCiSpeB|rw(qUzg<o-YQ2ql(#IGM$52%i>1&VI!`zk1cyZ)Hh#r?+#!z
zZzffnA2{aE*ULijpY4p6n{j8@pBE+mvRHVu7?2K6!e3?#Eq-pQO+OM)z8W_lSu#jm
z3P{E3(#Y%CpPUC5PZ=8w_T7mPHW4hOgZsMH@{>i;&<{wMw0mqNek~)G^ooseV2`vs
zBDX<D0*g)V#C@*gP?~jyV<f`$C_Y)c#>kai3@6#UI^oFz*!cl&-M-$PB92zJaUL8Q
z3R}W<Oq8K;MWmVGLKUMXA#?Aw#fsuhum1(jrF3Z*JpMdO$)LYZEi$n8Zm=>s^E4WV
z6Ki}ERV)ynu%+OYkA8XLfs#3h;F)8{FfSrNVy*7YhT205NXxIh%^N8hs<g}a?A-k(
zBI|`1g`iyKL*+5SKh}2U=%{gab%_Wwj|{tr=3bER4G&bB&c}B+U%SZ06HLi<hg}XQ
zpI?j@e$7;Tv<o6^Iso@hIxh6!seDjtJf-fFh#)YZR}LTh8^6ioE$e5us`=&%(!(Y3
z*Ybwz!-`jKuh}rLlu`b>{OOeoB0v15VD2*oCRmZZZSAZxno$;ePs0=7mjyxC4|vdT
zpRmc(o4&oqvoBX77KPHYB(*{Ga#MgCORV)RPy`$RGNZB}+;k*|3wwv#7G4p#_x|^o
z1Za4Pifain)yj^I??K^Mk2h!vo6IGZ8Cfs+IUdOtm8j8Agu^-Am`_2bsYa)@$L`BM
z&MmQj5nt1B<OwlguEu7{#|ZrUy(sfmtSwvY=td_u6tD<bY_NZx`NQ2a6n@a{1yunh
z_(LQ8>e|mZRV<XrI&n&h08kjYgIVV~985~AR=LZFT1ZO6MWna3IQfsnZOtrcq=y5q
z_U;mqJ%s}+TH{xzZkF`0v8yWUrC(XcH^v>z^TZoxs00K7EC5SDw7*gm^eD#;W*o${
z&k!zA$ABy?g|Wol&&^sS#`UA91P0VZUdO3f*2Q~WE+~v;rA1DFv%NM@h~ZW&*M4_n
zB${!)J<x6m-t<Ut-ZFJBSc?)RM+yI*AyDF`PUjl3+(Wn+EMorgl+<U+sr6r(v~kPx
zdYe!=c*hqOqZ`i)7Oq3x#u0gH9u}LoE>C)>i5xQxRk#Z0@gUbf=tT`m=einj`f`Yx
zP0V_Omvk{4bW;Z#aV<D69@NK9d%-<v6dLSlfb|ZeV+-vy2O6HMYBA4(;Yw&HrTH^H
zz$S-%be&vZ<{WtiTL!w89g^RO19?{+4h-&e(^|FP?)eoQmgvvwBSc#Ky$5EU;e~s6
zgv%Tibhq&+-)skwhRc`SG%lp@#j<A*gSd}w1GX1-G!uehU4<cb56V85*KHUZY2j-A
z_>2e8dbk!9)#)t9)N;wPnbb)E6HrlFV#>Q6wXeyILo>qa48%Hlkm%dCXS0nzpP4$4
z%;f!rtB2H!mAFDC?O_y@ZYU>~!Le%)iP0wq;WY26;XNh|DoG*kcu-=u+lg5%l_7)5
zGoT}si(r4veL$GEm0jxnM1EtfRd((LI%#niRIlqH2Y<_%hF0KM0Z#snX&l-Y0yeLf
za@0hZ_+FzfrdS_Up<Ybh%;}2O?;<^kl%PlA>tatm6i<R&{hhjlOkD%mP%x$Ez%GPr
zx0O0Q-e#vBH(qK+4B_z_W|kd__IAY^+1jL!dSawWZ^nM-F&QpKXYSS@r<>x$-W@aW
zwPT#Uqw4OWFdJ6XN+Jaqm^!^H$VT5`*S9RT$JI;Sns;y_Du(jlru&EG|2@9oae@29
zjyEl^9-=da7Nc#R2c9S|xSE7z=M)DLzPY<__wePO>Fo=8z`Q@|_!4V4pUm6zv;}5T
z{UoeP$~^<7^p_qIiCE3M4;9xS_;6Bta#L7-Qvjab@*TDneH_*ESvu%1V~!UezrLSK
zk$Wx<h92?P6%TG`#>m1{f_ZU+iJG3RwNhF#;+y0It$@I!D140@rKmGm23YLnjzoSc
z;plSkg|F_1O3iQU|AsFYxi*FS76pX?8lHO|n;9DaQAn#CAQFUNTXFovreNo_Fg6E<
ztBtzj3nU#7aY<HN9678ihz#6t#0!2Kv1l1w$T=o(50T7^=YM2EnN29y!V7Bt7vYF_
zx>-LMxE-cxg7GIha|2><h$p@HcqcX2MHab+qT#D3Sj`p#<Em8GW6_%_T)sl$z1CFN
z_4%nrDnKhQqrZ^=+!#7g{%j}CMulxzQw?wDu~q0lsVGKLN92rBv$ZzqjKA*Y6Hz_@
znp8&Ih>?OH_IR%~b^)&~P4ZqNgf<%%`8g;7KPX=OJZKZ^Ep$2fP&mBp7f3Sc@LWyi
z=T`2Qp(7y&p24i)Bu*svXo3dq%kpY{+;EylL#qamUl93ch03&rQvb$E@;A=i3tDQA
ziz_H8xEVU8&~iwhLB1*v#?F!1t1MJnqx3|}18Uc>3}P-x)e>%~lL6-gutc{!{QDhV
zq)|SmEjW1ll*39vMk_3jBRKZm9ncHX*_kwYnKQj_4i2L4DA8Ad1yEf12Yz>Ld^?pw
zm;pz^4WB`DJmMpUN5B+Lsn7vJvhhITcGHqec;;}5_N&|v{o)zf=w_xN_Lpv^NJaNC
zjsnPNz7%#08{?CAyD8-QLw&?N|3nJO%d7Rs->VaKV#vmKyi;nWVoTg_6zf#Z^=xDI
zMOQOss=*-Tw{@i@>jK}&S5o}4nph@^{AknycttJxi(o_w>(97fIo{_&Q3qO;;wSnx
znog;K8ds6hQm+a(t+dQjWNFOsqh91#FpoE5Z6(Kz3}#;j<M5i6G~4yDB;(AEXMFK^
zm#6Q=T-dd=DpXfu`n(T82rtGNub=XQ_MEX_+)+HE@?e1&KAc;Tw|K3iaRyw^3Gx8Z
z-7eh$3JiVC&UQr@ypAp{F}^_DJ3ffzpkREU|F9HI(Bi)a@KmWF<B()gJel?;OS-Vg
zF2kkeE4H3BG`SWC%Had}rEQf~OI5$09r9H7XA&q3Mb^qYZ~3RA**oe@<}G(B=<P>s
z77d)a4apKy#JoB{!~#+1#i!_Bjc1@k3Bl5!-;%tL#Z+^z`gtR+%+VJ!Hcs|t^+JGj
zj3v~;=fS**nb#~tF?$j2jN&sXlt5Rw>2AtsBvE?F<3i6~ik7X_o4$_(2A_d_h`<W1
z(?@VX)awyZtPX&cVXyp7`It&D;0XAaf^aW?MEe7zd?VkIqr}8u{;Lys3aW94RLF$9
zN*3n}A`8c!d!FCFkP)A54S#;m@l6QP{m`=0m7*Zp*?D|RA)k>qsoZ;jJCEe!l&qqK
zYtPX{T*j=_ZBBYFXcDJx3D7axC41K)#Vf+hAS*qo?Iv6Ox9NnqV&;Ce$HjQm*1qSV
zOc?80LXg%IprxkUck3pAkmnhl8T{o4D;1GPOv201Rf;z0C(3S+BSYO{!TZ&@7{Q2A
zF85Ay8wb?NKs^Zt#?0!4Ay?#1U1sSBX1nvH_FNvlwj!AkQKOFtM-?4gWvTH=bMdtu
z%*(1e_U~{1*-$>UEMxJ&$@$QERztdlM|z(&LhaB{)c&>=YgDoXi%p=5CA{7*NT%_Q
z4p`dP`s-m9kk~zf#;ya%y9`+4ad#AbDTEFt(8FdslB07|zvxcZ<7nFG<8>9%2zo}@
z=D`)oV$&oExLR$u|A+nXMB24m<kG4qxBcNc{(V=hf?w)a6Os|=@5Kd*(eVd5bE*>t
z2HzjW4!P#W=ln8zXg%H8w^L0he>~AI&`pRHuGfbq*pVv{r7A87J;UVAv+JbxJtE#N
za}lHWF3KU>+L7$C3~<TXpS}5H%b+Yoa9wnBDZp-;Vs|PDJnc;Oyh|^^P#W>IX0`Z<
zW_VB9WXoxgu)5iC^_#OIPv~WqD6}w(ew;d7x}TdBVeV>iAQHcE_DlSs7Xi_CnKY<*
z0wjl{ez2;hQ@iX+;>crcj0N{xLu;ez7Xp5GcBiTS2(mW{`x3I>R#<vnXkhgQ5Nhy7
z(IUa}0lU71n;d&mgeP%Ne4$6bAWPE2p90p=AC;Qy6@JM!q_>Hl_}ds8NB`0~L_1zN
zc8axju}7lx#(aYG%i_RRML0<4O+4YL`p$C!hPZ@7hX87(Z7AnO1E{@^G$+^L4k`(D
znxdK6km=b1qwX3~BB5FS@DyzV*Ow}j`F#Y~`s;97Yb)d?JBw1mE)U4)=hKs{LkZQT
z=#Z``ZKB+<XlZhNo<qmBdbq#Ge%M}kM8UI9idz{C@*WQ*8D-EL7U;DGoX+A(hIw8N
z@G#4kr#G0n?X#|N4d#$4_y_Ny?A%@VvHLzsw?kN)FSRp{8MR_#g_ujq&z>z5Z7$F-
zju|6=E3Gk+Y#JQ<-<6;~KR3q!C^J@Lib^Bo_jdeAG=|rV>}l7lrAMtd`n5JvKH?5u
zAJ@(|X{Z$YR;`I?Xu!nUaJJ=C9H&RB7hp}zKW9k(=g2`42JbTvZDN{5H{Up~uo?o*
zH<i~Tb$FKp>cAk=itG}+eGxZUoV2!cpT>M>33ui6P$M275J8st6E|;%i%u#u(Zr8k
zhdv?mLGxuF12Y<YyLMx!US><kNC{G_pGf_mQ%>*JASlrmnnFL*T>*?bQT}WwQPL;B
zDqE7uRW7zF0h3zSkZxG*N({Sc@?L{qtiPMn<f=>*PG4-W{{O#}pueU%$sn+dpEz(R
z*hgJYCIa2B*ijsqLvhLG1rYc*NmM_mf@2;9Ilqk3YL%gfZJx`{u}JvDq=dWb7iq^L
zr|BW>NlEPuzhs?fd_7-(GkwyJUhr*ltgn#!6VE&?WYK^nEDkUTWuROJ6utB6p_|mT
z1Ea#0Zcdbn;?W7?v3j6V^~d1u)o7qj>=A@_oU8bSjW*0v7f)o)y%~w>gkvLlx87!*
z7-FflABhhvTKbu+f~I;ZGv*Ymzo>00{tZ2FsZ%KV4JMuct~`Ih8Rw-<t9YikD=!5d
zN1ut=8)48Uu%9L;QvD8~(-yW7E5oD9yw3H|(&#C6i5DwI-CN|1_6Q<9)7Y{V#NA9%
zvrR9>S0GtH<HOQJ!0-(Zqo@rL(!Ww(QETZ6+^o%B-J1}4Ftm7iM+dII?d<=G7XIg$
ziNosk1LmlBujSs>(=g+IAK=-OVPXtI4znk5l%U%5;v^8g;A0X_JJumc{n)S#jbV7l
zA$v}v5MYir6OK9@%Y&s!m}(Qxy?nQNZcLEbS|;4;z=5VC{kSiLl<-p`3U1X;ZgXf*
zcPoQisJVZ$ePy<o5Y@5$)_w_abhG;>!?J$cTP#}YxvSa3B(+PfDgB^y&c!mAr*y>U
z*5nT_KHNGmOJ!@Q*c!8b$89%BSD~VGKip!*(*ng`{Z9gVZlAgM+z$)|?3t`QV#6n4
z9X*}TSv>0l*ODqH{r;3$)Se##d-V*tFb(H2Ar+B>7{EB`M^52N$JsKw+*})x&e#K`
zd~Fj_dxCr2p(D`9PNyH?pmY1aM#dgLs8VUJE;2wbA#+IA_h<ZurpyO#8GMf|rY<JV
zN74!~Pq@kx(y);%Q+sE{a~YH7QELDsjp#VOP6m-~dg+<XZODy7*2z6z7xmp4Z*W2F
zqOD>V80X~EkU`WW-&;%ZcM456Y|(q-lVBo1_PLg>DN_+ipS~>KiOvaiKp_Obe82k+
zLhJ2&Bb5nBU9j}hzQVx@Cz-xyu2NgRFF>rXN&QdH78KyT6reh~Xeu(uRHpwur8Lv^
z_hEr8QA*v;Spg$^hb`ud&EUGxtq8W897xEZ(ESf5h`D3R<aYp6D8d8dwYH$1><(Y7
zcC$s;Hkqk%4=G?JYD}MSuBU$Uqyk}|Ma*)=PXG%t>qF}dfZx~RZsZasw%Z#vlJi@d
zZCArztIx+Z0oRFz7p_myPc7Cp3+RN>4sZ@<l@rHVpjCzmG0r!4vdH!Q`KJK6UDz=)
z#_ZZxGujX6q?a`Yeswh)SI=`9X^^+m8+=J2{q`q8LaJc#O1jFRi@5czR4dU$GDbF%
zRpMtB3)2iDLj{g;Sw2Wa6qe*Wpm9gyWvzoznMASWe=<@m#DAsaBL`bljBjYVoYy#Z
zvL*1#%K=F_SKSSAVu0VTv|Lx2E9$r6;8q^L6GsDMygBj0A4(N)p_t(YUWl|mB!}6(
zEz;KGuMma1EDy}E4-8N<gN~`n?lnC#;wlFO;K@#?E)fiNx^7<!SN;QVy()Z?yKZi~
zBrq)jqprjrqGI-PheSP`uFZ#@WfZXg#b<lM5!97MppMB7{(rF#HjJqP*sx%ksfS{~
z^v3?L6p?2<6Id~;az5ly|KQNsF`gCl>7u<)6UL9QZ(9UsG6!guJfm{}p$Z(d5I4I7
zoWoh0OLfHDB~@vy5=SyLywdUyCSuX*NG+jyVjg`rM^(jpALhFtx3|G?X^&KT+B+ds
zeR-rWv-iNjH`ZNis(a`<w32$3=kAud3yeYZHRp2+c;Tl}%GVK*$43B~%4?4+D1tnL
zd`B=FJq;zJ;ih*V3%-Zm!)NR|T+xlKp#<z7^Hh~&RF6me9PRi);Ucas*85;a*4$5k
zsqTvFlN0w1PtS<2F{jdD)|ihVZEw45f6fvNXeZf#z)siA(1G&~KBvI{al|d3sS%4b
zqiAw6#!5jy#^ZY*IDMmr-&(r1oi%T={GvPFLzZv$2XjBpQZI{ZEo&}0Pj?yuZ;%vv
zc?ET{>UhZ;XzC|1p*QXgUV#`OcoC^l=KZslp!YY0%^OhHBgYx^A{{?rO0B!+&?pm$
zRNS#?=i@#oleTJx+!1Np6+gSnmjcqSKdj~|l|`i^N5H(vsUl>YaTa1@y0i}9!12o2
z1qwsEV<YVrj6Q+Y!OCphy7AUQ%b7IWJRe(A!C_uwP34!JNtt7@_7-MU%UXJIIP5<%
ztDG;b&zV|%=;i2tk76!Gy&^zEzcR10D-#d{Gt{ZNnHGQnA7~y7;ZN)d$S*b7^gzZm
zE1U?AdI6L^u*Xqgws``a#xbfVwX72cOw*)@ONdTZsh6|?>jO_TZ3~upjQ4rVL&uC2
zOc>76F)#Z9W|lrlDB2!1ja8&@AKzm>xDOLkF<WAL4>IJ~dWawF(0JVLth+Zi2K8|)
zi+xcq$le!QKz}%7;9b)sDbp41lJI#sF46;)ZYl-!OIDHFti&8BH>NfT&^`yFfU5rG
z{g@Esx@-VAN%_g>(W^>B_5nHt-Ww19L!mh#Bsx5Zv6NGEHC;HK1)zPtN1w72o7e}#
zGZH$fo*PK?KV59GGLi(Kv37a94f{)R9st;8bPxvavj|dewB35!BZ!%>v<nourZeL@
zSKz>g1#mST=kD`#SP~;-%DiovJTlj?ixXa%d$88>ynq(7(7J0q_CM6RZ!vf1k_Hq-
z?uQTAnw6=B({9U=4VvTL8}rULo--wgJKJGdUEJ_%FkRHoG-%QPl{YmDspfh;X1N&`
zF|uA?dR2GBea~shlIC{gEVt`5&fZAB3gFpfz}caKeBM+ZX2E?$yh=(2p<@0Q+|P&R
z&`gR-=8$!eRv!NpT?`Y;r&F};`-lvyL?cM^6Vf0`E_eTF^WDN72N<a`m&WnA(sqgZ
z4+3{bA|ugH421~7wK!RJnei#9Pkjv0vm@tQ-A{L8*WvBQ0mh-}at}7?w``IJ8RJ|i
zU!V$E12w|jVGI>kV&l0Agm72Zp~+Pj=j&(*E*QU%5z$ZrV+x2nYE_kcbAo)U1UT?D
z?v*<%FN#fXgI6eO%y$i&|6pOZhm7s)<g|khq-60_?HurY+~{B3)bH2q-a;A)dv(uJ
zpRTds=S%9{C&d?Pf%&**9-!+T|A{@UE+oPgyGmvSxvEn523i%D@-}BOo-(88R<dyK
z4GJr{bC$!RPNmbDq5B0T)G*Zrq>G|y<j2xJ+*-!O^#15Cd-uBUOKrzb=e^&`!gvx5
zk%B&xw~Mwkn?(GO)#NQbe)U=H!DW^OW`o{hPYLR=`SX#?ZveFp-)I>iYnIyvmP0GS
zUe3F^_$kS});j;VyOQ0=L_g$rk8(oX7TEkRPh-hK=!u&J_X$L2O_Ph+cGP&7vO2vi
zgn%-bltLC0h-diIH)Ce_-XtoxQ5u%emGvUI_M%4u{sU2M7NdH4ElPv%0S18fKX&zH
zsVR5fqOLplANd8Hg2D1hDtm-#C$H%18&9?U={>D<VmMRp&JUaVKNn{i22dznw5X3q
zsJs$O?(}V0#)>0PGw{VPg(8mG1F1Y#B{xGsI}jp7f9dZd|E(S9Bm`))%3>;8PpoWY
ztfKswP_Fwp+D2lyq*h)LiQ`mq+-tu2CKPF~yQfHcQnmAtG0&jeTp_F0i!>$A&M80t
zYd@Y{d3Ap=IdyslM0E!ck-!^OEvd8pRQdDKYpd7}nR;<!k3puD0gfy;Tr5xFq;SgS
z6++ws>F2J1S$=|%2&zZqjV@8WBo@lpyIH#|c}lPbjFL?~HC~7~8|Z4O@}`iY*9$)h
z+a|xblvNFHh9MnJ;Ft=Kf9bpr9+A;;*(3(&xbMh;VJj@KlDBy`=$B~hUCZM19VlZp
z>k9T~*rKRCKsoBhArk7OB@L?V$W<L?Koe^LicyZyNi)r1-ZMFQwyBRN5vK3Uu5)cR
z2LDE<RQvfg->gMPRV^@pQ`wM}x7VYI`MZ_P6X>2~cazXZI5L)>e-Lb8uLxfv7;=Jp
zR)fYbv}{*B{IL8!YnJmBiQ075Wl>H{V!^u#wc1Ra|ED#p&R$AK=J$({PpYi*rmkLk
zlzf*e0@Dr^yWqd&x8|b1>ZgV>F9(QNisII*(9Fc1mv`wv^Hm@3Kp5Pm&*jKfOrt--
z(&%Bc`@>$6ZGF^L=;&q5!eF~#@RCWAvdy;<1Nc}+iU2DB`2QKECUMym9gZvkiz0+I
z=|NNX^~if8C0p!8?hB957giu<EXa^T`f$Rl(Y$(ipkIY{=_0Q<a;B!5hK?i%(po3E
zv#PRRu-CLbN)}5B=_+<#_2Z{Wa9VpMx%*0$&(vL=`ydqIQy!gd9wp_J6F$A|d@kBa
zB4+dNtGlB6x3Zf9O?#~S-$JZ*2yeVV2Z&Yu+$ERHki{9TVC;*mNrG7ov1n^89BSpc
z-f6vOkc9j7ST>LdQe#p5TG)BTDN8F9`ZR~OWuL+mSk0a|qasRsPW`}TOviBnS|vT%
z^5zM_cc3b?B(?k-Nv%}s9rD$Hi-J9h(~<7v^oAuU5akT0JM>Wl`Ij^spwn%&b8*s8
z&T}XCJr6;*04plX_2M50QzqOOgpQ0z-$N5JfY(cB#;v_W-H5ct7)<6Qln)%f&cMAi
zE|?;lw9n*x1R>!0o^<{35VL9)e81L6%k_i=0!Q-jJ2y+F`vDxeLGf6?W$pV|crV}A
zEI)}Wzp|On1`N!%uk<~#K@H#{3RW0JezPg0oM6>jrv1s7q-;ThmW??w$LAyw4^hab
z3k<?<XA=nZ7`-Gh2Y;3L7=xqKE&fVvnxr3y5v{n|uCz{q!sMB`C;Bns3UV<{k)|6=
z){l|VTM3uaKx2z7)O67pY_7=0L$-T0tsoN~)6OiQj7YG2@7HrA>dkr^mcRv{3NzZV
z?OJ9crxgCW2Tp)%V4n9wP%{38ev*WQ7cEkR@c1bkN-1gP`HV$pC4djGCbYA(a+K$R
z&V)7O(QS_}XX2Lo+=RjSst5gaxE$zZ?!!Qm-E~763y^_q2RAwt^<TT8UPf)WE@MZP
z6X~>D3u>2&=+|${GyZtQm09ZDtgB{_cS?i_(TvtiN=GJ~%&w8Kk3GJU=ieJzvTpj{
zUx)OK1G*~3yz5H~IqhQ!n_a8GkZ&FCC9SO$9+hZTa?x&EZ#UqX7&1_mCkq}cveLto
zQeS&>-(sa$gDMg}0_bRM1RGNu(`(~Ii=%xMV^wmo_B@5EBoZo9$7?a+PIZe-^~~9)
zQ5sQ#wQY4?Np7JnQ|U^oVum7y>~{!ZH~Z&wV2cfEs}*=)Hp(WRC+Ftf<UyC>;F&h0
zK|QJ@ynkwDRG^$kgVJu(xWSoFb?^uanE=#fzf;z?pYb<#)-pFh#0&l9fGi&_^4OFr
zkM6`|gXDusVjG#n4fE@?yC?ObA9Av*GmC+`3EoA%^IsBsJR5R5in<UW|L!|Q;wPC*
zlWwO_km;*HgnAAVqT9FnMj>zy(sE*s(9lhb&DMfLo%>iVJozCO*tJzhRjEm-Zw{J8
zB7NB%+=BwAEDs%{<$13MiBA30#?d%^DI-_!NyJR!nLP3}bYqk;3K8=R-d3FsT@o!5
z!0Rg7bg%e9J~ClMg%x<oWIK6C0oW)VhTQ<dASi%K9(Pa+R;m{VpPwRJ^<0e3%Cp|5
z(z#kHPXk`OIKMPImkx?~&bP-|^38e%gmSz9=US2C$K;}qVUnzv3Asg8tSq4LEH|dh
z6E8WYMaApoYsphi)aYqV6)i1lB|T>ai(yBI?$o|@z7XNL{Gy8kL**>v+f;*Ofi5{c
zxa3sm5bqb3l;K0g>It_iy)TxVzEem(y)GyLx<D@ZMg4O`05F~h`W`4u$|hK<cqp@&
zOuRpmfHbe&9kny9ns}N6Ftpx%k8aGGq}GIZsp0{f$%4NN;AGzRqd*gCnlQNnIE{5p
zsMx`g_~E{G*bX|@Mt<TN8&;^SAD!sbG&<%-nkCaG!ddq654o-Tpo+Z0nC3C~^OcI_
zIO$ADK*7l+GY$)sGjJ1QTF%b>^gHXTwZzpz*qW-jk4}DtaGg!X-VS|3MmNmV)x8PH
zp7d;*5Tj>W5Mg<L%#m<K&E=DKv`P@)zlZo7lRW7HJc;O%I=cF7;C~z`oafs+`DWjP
zlbzYfnH8B!LPfLQQGtjFazB(d#XFnB;^Txjtw{e>0gF?z1GWdy`pDqNYe#y?UQCF3
zVTV$C4=9c-tKc;>G=XnQDMsiTNm3KnB&)Xy`A+L$^RC(;zMCD?v=qW^wOT=NOh=lr
z>MHcD0@v~ei5VG#w}ROZ4j}w%Kqv$e$L$9<Ff2nI6?#`|0SEAPB9=+C#H{$nPDi*l
z3)FRWK>^%NYi1h($OgFr+os{`J)dV+w!lYqU#1iUzVGc(>Kqx;#}uI7q(m#$rrEt$
z<EZN$mQEq3(wTDEe4JvUIw*Zk1^D^|1EIvw&&m!i>-rJ8&c3{oZ{qmxC;dl88a2;o
zBX}e%K)I@8qem+@WHd}?ZtRx8ZL-yQ?1p_w9VsZ$r|H@P_?uLVidy-;%m^n`3gSY#
z?Kmi+O-aAi8a23zluDh#k}b2FOfD<>29CZ2t$!#oRx<tc55|o&ETY}}uxXRv$5(I8
zM>27w5&r_uc`8vWINXkPlKeOYJk{yq8-d#rRR3RiO*c#ceF-nw`*SidD3Ebb<QQhQ
zIqDPzTu)B1j@Sr9dv)A5?STYJG_={f_n)txbK2wgV#DC*|I4VA)UBXjzDB|mK2!~)
zV_>pNDFj!yH+rbfHSU+ans83DR|q4po_-V*e>vPaWg|P{Z>xS8)dAxMXQ|2Yn>f9g
z>+`q#y{^S?la$gp&5k%oGp$z2eY==Te)yVWYHe_sfh?b#knXAHwG?Sg`Jp<rsVbYu
zM?CP^VlA~qf=`1=))5II^uSKrWzi0z;$P5Nx!+p1{}8(i`8t+1YZXLHV&Kg|UUpv-
z-;0^<=oM<9bd9wA0d*&@lu8x^FH5U>sazD;G&&P53Gr<<Jd7+`GoSDeP}<>xE{vGV
zow<ytZ>8t`rqo-!J~mx~l`WdNcp!9#{+JV_V&rn3EJ)@aDX&2UuBP=mSJ}~+$=b#l
z@EWjA617BJ5yhdP&DnZTsRcGnvTv>Vzo&|%iVYEjf-!SSEynU!fGF?a%uh5kB!6R{
z1?;JH=8<VvG3l-e^RN7>xRz)qW#<=^B+(VXY0w%MXwuVz#q8>a{7caPNW&EO`T|{?
zpHmnFA+206TE8a0p)!J@CCq3}RpO|g-FpmsA*E12uKnO*YkefA)V92^#h`LYc(MH7
zj7ObcWcJO@YhPe1P|zC#=iy#n^};P>c_Nhbq`XY`RF*8F$OyCptkyFz%KD%}|0}L3
z_=E1@M+@4vORY9f?dNX$-iiK@v^lyVwKj}oXs(uv??&^Yi>FL5B#<ku660bgspKvY
z<lmB3d+Y49%4f3p*fvH+`SN9y%+sM2btNjaj2ABSFp-yO9xqQ|?TM)z0PY*|bBt>@
z4M4$*93(@4or2Kon;v&GFBQ;SyE^1KC?r`=L-g(u4P3#bA#wH(g_HFJSnP)7KHAwG
zGQll<ol0#B->jQ%=ymUQu@a{d@$_tY2t66ut|@v|1K=Bwi4hD;d)c~Gm_w9>hio4H
zstf8)%`{Vs%)${f742BUHe&5(N97WV_+LBoB9h+|?CB)z4k8+oP^&6^Xs}AxBrXD~
zx2iM0JSahS)kG=v6zTS5wZS^fU29d|H<2Z?Vys<273@{QT^mWF#(7t<qk}aNN$P}d
zZQ}<Q<FL-fz7vbT^;vWcfpOjih!g3%@~&;VgzQAq913K-x~)rcB{82Q6B4X}30bi*
z>MLMK;cKmva<RPV1qF>Ai%v+QmS>1q&r8@@kxrtY&+N+J<OQ7kG&r&xHax9lG#oy}
zyfp)G+&r5D5A@P)G{|O2o5ZDYRUJ<G2p{u4&xj0qwART<+Z@Vqjuf(anR#05CC<&`
z)-5Z>wyhqlD!EW;qiUkAnT|_IPIXYO3Zk&;6l+j-N64>!Sx-7b1`Y%1^?rw=zEtj!
zD?J1|(QZc9q&z@oLtk`AvN0~rSeemj`)2obNT!0`GPHyYLgoKGG%r1<ZP~!}XcAo1
z)1YB%)i}c?cn9h$!3#CtGj?E)r)q5pcEFW^yqTyBCp28)hfbmvw21~zN|zCS=&;|&
zq~qu)0y9Jn?DuW)@qWyNEjPni*v}g#3|;0^o@+0r!0D-l5EX$?at~^Vx|=K9YcIiR
zJP}V5qxdSQZC&84;3LB?1$Z}#yjIX5Wn_aKuKDWyNy7u_TF2&H<%1W*(QF-}m-{Dv
z^K*c02#+6j6)JS)Q0hAydt%TV1JJO`ApI0r!{?1PhT(5%!Xf>xshqYxAiFWxA7)Q@
zq!hsI-NOlXv+PYWr}~N%44O%Oakh=JM(muN8HcDiR+>gHCB+$S&NhW;?i8*5Pekc!
zFQr2={%iH;PpibGyHZfPH1`mP6vCDelJmOZv~1)p<(Gm=+bdiML)w9EY5%_}fZv_8
z0}Us!gL{UhLz!Hcn(vfIPFV=P?EfT7prRY`8wPvqvN;Ba+2rYIQWl5>|9?88RnW6B
zMG=mGsxqb~T{n2@DW8CV*(?|>M*HtM4VMfx))w#%{<Djf>`_uRplj;&!&^D=qptGt
zCLXX1Gd87#Q5#^}Et~CDDOI^W-$jmkD`=Vy%=v1$H1Ym_Q>6Z)JK_WH90$|FRUIYS
zN~Z<o*}RUm!2FsUg-Nbpd9!-tK>#_&M51NJO%YFrhK}v=uh}m$9Q*bDERe)j)ZZa5
zAPCXg95)~RwpcX<(u9$k$ywn<joUdD8wxtG-<1{vmJS^+CHDQ#q5i~G>Sh)jFBVA^
z8?dK`3zPKco2G-R$YOhlMJFuVngG%Ny9#0diINn<{EV3oRaDhqK-!GU=<ft1A?LQ*
zT1AGEhyaoyDR%Dkr%Ml?zkSU~_UnM`B{hLJC`4?O@E}4)aLy>LsY)O|7gmf5ZBuWU
z>P{eqM(chcJl@T<)grT^K2DS*vhFNssJXTHYv+w!nhNIyeDyY~Cak4w?Ho(1(qJuI
z>yM?*|E#&@@jBz+oi3a@v!-5fa$>m)>qDwtgpBr7ja>d#&VQ%}ex$$o`18`Vm3UIi
z;_Xs9iva;k)#Bd^Ux)zFQ0{d9EVf?e#17Z=+${SGg5jJCORGPBEh6Zg^2uKb;#W1z
zFAQhY`Z0{_Vtk@|i9-a8!HcWt*g^uTC${ayh@yQ3GZ<A-E{9t>A{RJAQ8qc)UeaA#
z<}yLkdsA#S-UUH%jDCKX?mT@^6ToxPCd_{Yug!j<m@m-U!Knc$f^#l*+(NYpMKoDX
zzT%1dq;;7)oTsqh{SKt`<Hr$@sI7D53fcFdQ>73!m!Kf%i~H3-6|>T~i_(iI^pigM
z`p-(dVd6$5A-+MQPT465u@CsJaoag9whs3S8H6C(%3!H)*+pRtoCSCz2<1+zGi4}@
z4ULR+#=PlX3SN*@JZ~{A0j{F1x%Uo)Sh<4mi10!(ig!Qh42<?nKMxT9+2OUs+yMNW
z5LhA><f1po&r!Y)8Um$hwW>twgV`&CYAK+j6dDIK#`b=SruP$CSx5xk0t~4G5_-CI
z@+uf6ngHcj4vnQHHq>vKw-QTh%HgyiZj7C-A!M+MF}oRXKV%2<+IDtd14Sb+NA~E+
zBQONLh(yf9Z+|St|D|}Jo5;MZ1Rj|6#$ubn3Dq^&bMBs|hFvXb#{cF6%rz3E>erWJ
z!iSl0sS!O~jeuD0Q6rG(L4Y{+s(mP$D320Aj+w7OMs}6bOUp1pe#erm?F2};#v)~@
zQ{t-pr4%HHy=A6js6dM4&QSU+e{#62^u)19IfxzVZ}c4f5i2(eWGL@v=>rj=S<p<B
z)#6i9;X$C+MryGv7Z;u%O_301MH}EgW3>6U#KwKX<{pf3nqE0CEf^8=ar`1r^0};K
zpDX$Ntrqrz@6*Zk^`|z#iZAexs1zl;F9Zxy2E-q}nwN@MvunZ0D$!tm3Z9bUIicv0
zz8i<cP4tj$cT*=YY&bDv9H6Q<?^dl^8Cy9n4KDqkPP7Yd@s)cPrEmJAcCbEj)A;-F
z;CS_F;^qF#Lqk7`@BcMsNSJhOTT$?Iuy@qLhw!2uOx?Z&5kB}Jf2FYLDP|i$8{a_O
z+%DJ;e~jCpwC2g4z083JV-+otX)?6ZQeSmL2&Tj6ZD0C3iwLCDk;{%h4RKo^SYmPN
zUSj(17>7HG!ta#JSNW)g>GVqoAB8%P{FN5EAWx3a7BDd0|6!Qz0|0=h8pY&FU;fhh
zE5Df>p;mEEP^T`ci%ZccabNMEUcn<h$W|YBh5852)?7S4v!t9axl$l)JOVAt16=^5
ze<g*kh)W3M(JR~^TB)&Amz}&VxKN!E6B7`7U~flN#d%-4H7*cS@tgDCCDP?gcCZAs
z09YHqe}k4gprHAiEOtJHXQSGm^Y)&TWR}KT?+J!xUU&7n^*;8@m&PH-lZ%n;7ivHB
zs%OY@nqTU!n=N1F9EGX3%m3H)?mcFI;B<vKT|zNn#mI~VPI^Lgj;n?-94#lq{O)k8
zNcO09U^R_{k2PtF-fgBHgj@9!)JunLJtS(qh3OM!E+RVr($AL!*$oIS{;D891*PmE
z=JZeh2D$-J#i3tX&t24A;_$ta=ZCP<KHwIxs!?u%VbI+X?<~pW(j@1*rF=CllXFai
zxx>nCq@r{=^h0CJa3Z-nu5_k+oDh(RlylOyy}h|$KOl*NAe^g8ua~+!wT<7`xp6DW
zrT{0ZSZ8b>5;fuSQ+R-k`!wP$lhS|=Eacw`kmN{!!*ZByo2?m}XzKZ$7_zY41sCIB
zb<!938+lc%7QLj(P_6BhY|=@RbgzNTQjhp+#^;Hgz3o;Uqf!@NxOJ|KU2sYd4>XLv
zKip!c;(lPq_Ba<q>OfQT%EY(~Xy3=ILj$dI!WvK*;c{)o65@c_cwF^^s9s8a^Q~a`
zqSZj=&c0}wYzOp=s&B+%)wzw;SMOEoeiUMgLHS!1I3P!2KZ353yfI3t*YH_>#`A<F
z2Rwfi#^fN8@ty6`ekK^0xY6~4$fY*!Md#4z-%EY(^t1#vzMzt&`n=Gfd;k4<5bt{=
zX&I~=PO13DhCwOu7tD~?vyJEDtD>PK9-!6VLC`l+HRj%+MdDV($t~4v2Yem8ZFBq+
zHmhF=Wxi{LIZbI+F!jK>KiSP_MQ1K?^*KyE?Aao)SUKY$^dXPV1#9&;d0~kEsRE+F
zQGG`#!=&U}3I_%uBWX4^LItszt!FxQ?!6{r#l#zvm?1W~&NL+MMFt^n@MO^yz_^1G
zS~{rf#UH{l!hTmL_cl&sa#4Vm(1=$F*Zc^q=rEsU@|gAaFpT{1eajneXk0IUv(4P>
zq*wYNt>`6b3CRWh6re;>p3N!0scR_BJ3Ge$j2E1U2eZ;x(NXlno*UXp?4%+swS}Ue
znd1j78s1mxblL_ig7hjxTj3)}iBB<l%?R<(I20s}YP7ysC%Ei6lf?$xdkxc7(v;l)
z75RE*Yp1G!2@7<0TEE;#!qxtE1;*Iz@G(0;P6S|{4$wI?mFKdlJ19)M1|Ms$OZl;*
zf4WLrb<Vd3+J{!i0b;x!)1>Zhn7T<=jQb~+K@bl=wz55F{ijct7a<&<yTa#|W#}ko
z2f{2%0m0XGz&L9&@t5q&$P|PM?~<-5l>RC8w6k{iM+csJ+10O!Kj$jRd*wIaT+3)f
zhd_TiYQ;jYvH}&ur!-`+@;#*P6;ES8c{{uo8Nwr6-L8-VhO3N|AKY%cjLs_C+ddPU
z*rbtVgM|(-06}pkK-iw{hM$hNvD`)6>SCH0m3S;B@K+XD63;=zZp{*eY#RRAfedVD
z-uM>Tkg-oS@18%YO{hAf*_El^(H90WX%PhIsf#H6g7)X#*#<+fYWl)-dHaVJY*11U
zM=5~xaGq&RAm6PeMCopGIgm8xW!PrX$RY}x=F$Cv76CYm(9y}^&j3xxXs|7so_7%j
z#z!xFFiG{XP=Y;B6Im^#>%N0&2Uw(B$&WijN7*Dmkz6SUllt1wltiCSYLLzPzTwuR
z00YOWG7I~0qN&M?V{SHBEFy!q0ICu7lH%ZOaVTXahbY}!tx?P+*7FLn9EQ1lLWzn+
z5entt!EYd%hg(CauGD)#FOUqd09-snXUC@d%lF(&+z#bvCyoglX`=wPE<xij>$%9%
zq03|yJNct!ea54Z<QftYt4x9N*KJubj?e@@SRkMrV_GN;wls?6d<eND50t)Y{`@ip
zt2kS$q2ChEd8h@u=8GB}F>B*G7Uz|`g58qA_ZAW%r!hOT{Uz`}lp6>C1ZCn0JfOYs
zwE>2n6B&vMe#eF-;}~XPrOQud@*^LIsq1JuBhJh)*Pb<<k$lob$miL+S~(vjJEEG&
z$=>NEV-`%*J)}iU_@05g+=6-|<wY+i#U5DZCkNt@=#=zk=GvLYwA|2&d?I{q<9v4g
zy0$OK(yoA_O%!KTu>hAP$A%ayX1zS%`z(}YmyY|Sunn9MC~BqhsHr_mK4s<<6TA8w
zJbfBH*&RZ>nri@An4m6q0O`E17H#$*K@&BDYlQ8p6ssIm?O14!m$C5HA8%%?{s|-~
z2f0KM!Hp#l%eS*O;8-N!+7}Qqb(gwki4FiAr#yz$(;Qgc@W>oHeP2ZdHPap&L3oM)
z2sQp!XG*<oblqs*Djx<K_fkD;)3t;lyd(Ozqo;>X#Zo0JJgjan?H(K!^m=X`!ogN`
z6E<zuB%=T9|G^_8l6Ib7XhEAr2^?YXqk(EXHxV^A>SwAIBNMu$>Cdf~olHZI+9RN6
zC%Q0McO@g@ps?*s=g<d=?Ms^*h#XR(gm}Kh356A#5u`ABT=Cf_{A$OPmGs!47-~Ty
zZCOJ6@09+HPTl?31R5$uby=e~Ft;+}qPBKeB1ap3i<(YFbJ4-!dg*Hb%3C>o>Nf)?
z8bun}-6}2dl23KzHH;{nj_Qj{uLCQaru@LBaoa~@%%sENJ_d&&DM456E&6oC;bm9)
z&U^+<4h1PY3uv*JAy?!PMyJ7Jo&)#@$XKd4IC^v$zP_%*X+Yr}rg&jwA9cqecx~Ex
zlUqQ@NW&3nslG8@(KDs3HOc<FO&=VrDC;Z5gRitsWp&9S)D1{TqV#-2oQ3d{azM6@
zFBtQv2_<YT>6jz(phU5K?7-e3I-R}~SDG;j>k8$+E=xCmcqRrXZ?HI=8;HrMDS@1F
z#D<x-Lw2YZQasz=0~<+Hoe!-h26gVvL3NuF#~FL)wpyMD7OR$klRukYf=6Jps~i$Z
z60U1%ZXBMq!+D|ZIv|`!=KCi7n*)Y{=G4^x+!1#G^K(}d!*j-qqRXNy%^#Jt)jdc#
zr6atwd{(NfEGTMZ$KRm46mdF`wwEebt;6%;m=Ke~`j#K;(8U*NfbEX|Pc?m6wh$?@
z>Zfn#EZxqbew(YRqdt|m8069qHvi7Xg-&JMZz(K9D%y*TG(<S4;Xf}nh8IT7AbC?F
zXz6hO)|Ea3?F}A5+?Ox|ZjWhc_ZxP$Kw#?AJlNw0<RW#Y4Tgh-fQG1JsHbj&1dESE
z#-TH&+yidn7-zuyZ?2edhzls0NeFq`J!NxeyIT4iU|kY)@cp#AIN_@4>nNMpYz$`P
zG99IyqH)@rX?3ch{$3kKTLvv!*PZH*VLakkF-XaejZzJ6<}SlLIF>ID;zwcmg0wME
zdUEp>E7gq&qz0lbj(0=yT=l^nFrf~a4%NqFV-bw6!@$nVQL6G^4t_%ab`;N6C5g<l
zCH=(3OF^e@IGZ9>gWAQ4OG%9YID`jpSeH=!l=Gr1Y+B5>42^-~hJM8xq>Sn*=v8uu
zbu#|ks&)v25up|JT}4vNszd+qCddP`=yUO}vV<av2Wm(&9mJLLuFwiYET{p0)EEMm
z&fb?3bu@!jqQSB_#7unySrB+>RsQ44)1p_}(g^HCoSDg@t0Rsu5W$Hxr8is9?dTNa
zlpf|@RwGr+<4a$ZuR+zAZ&}!PA37Nz^g2btE^k)c*-=!b&z1Zy70pqJ&+ip@U{!S6
zx*9RG0RgLA-p<$PfV@96EiT{L?*S#9u1ky#Z@t#`_)`}xF}SBF0BOiN>yb2Qk(F>$
z1j`V^=`xSmp`47pmvMS75l;LoT7(MI)%mGt)(PxM%#9$F&i>JK?xzYRlLTY}+iLk3
zDRWlq8)qzy5bmYXOf2v$(6t*qs4v;qS#NZ^T*M^SkGI|DJ!M5vp=rD+ZsGeK_nT7H
zIJnr7J6?Kl4pHTfO;HYOpr3PoW>R{Rhr&~8Mzc!#VXEX<ByNJHsR)HPk;RA8mS#t!
zY?~Anp|1jXHl8LCD6Dk%QluL`OHe^gh+KtPoyiyYw5U}eWyMctz}&e<pUZ}Td|D*J
zVi$A(x%OzG<mzD82#96v1(()~#B2gye2&ljt#qu%uN*xU`TYVM{WbZGW2yXT5>mZ6
zqqm^2zBr_X_yh{lgXE@nZcL^mIhQ1#BKu3KH5`Ze)a0AFEql^bFJw_X=3%;y-C%rD
zK91N5<a>4WhZ(t%VLDec^C|Huy4#86j}30PyyF&anGRS=fA?mM7ozbhz3mvmmtLSb
zmXKlU#1c>}Fg*nb9Ld{HH5zEY=esXO48JMBd`O(M{KdoRtcpIWw@I{*yyVwFeTe10
z`xw?r??CZTW&_*OxaofHtMKN$V_fD#82zUhhfy87rnoMCZ17|!PK1Ni3HCr?=~@Q0
zKx;e9|9nt}4q66Hp0q-v3{sNR-Y>Msk8XXIhK(lhLt+h7*OW$xE1lJqmuX2gvbSd>
zKZ26%x#EFN@oW01a+m(<?H$y&@l%lV=YXDS(ZD*2kq%xwKe=kesk}V$3;n7#?r$o|
zlmI~9LK~gGBxg7j^@BD!Z##xMyq87U5yzs^_Cq|XOOMCuJvc857-aD>=ydLyVaENs
zUH?9B*tc*<P<LCr*wjX?@*0ksvq59DxuP5w1qW|qnsAm(cfnY{-SWQGa6-K{J5I&a
zBxm<kw`A)<s@sl%c!Be2oe&hU#b}7hU!5y`-+M*G)@_oAddn0@JW-iIq>Lc;!HIQb
zh^c}6heZ0jL~l(xaQ@j@(%?;^_G@-jf@pl5fH?->J7$*Y%VhPY<sL^9XR31AB3f;+
z(DkeS6DUEWjs=3W>E!Bqu-{Zog)__lP6WPWpg{?{fqbS+4gWf#aa-dW0dCZv5=3M%
z{D=aOqKT-v?rP)9kaYsZ<vgbuFM|(Oj~PZgttfBl=EmGioT7wzT<_HWw`<f|doxBf
zE|Dzw`FTc2YF~6<c$)6nD~4wa=j#3TC06}CeL`Wi^lA$CC{f_GX5N}Trp-)zd@&-b
zo+OSoN$iGO&U!d0O>Tw86$2E@bQuc}>&~Gm5tf@1)KX${vN}l9;(k6|jB`xXFMC+5
ziPzVKPIDgNlpr}}i)N=avr<le#7Y#H2u7ftx9n@V$KBjtQeDPPI<V}>dB-AC>?93<
z(5vfei)QG3FSNGCECI72;iQ{g)A=~T6OTUV78%~Qq27W_e`G7gUTq9%3%?3NOaUMp
zs+7pAyf)8>={h!TUX|dlPlZQXj@{Nqt}l%#0Q-Q*`sv8mlU<`7tMnaL3|lju)dL~2
zv<(IPj&W9v=&lb19(AKQ0&#jp@0vYvvvvm|<&RX{9c|T(eu(2^wynS$K$f_7Zn<AR
zo(pua%Zz4>-_mluRTIe^$fA3={X8-XKLpXcGm(Dw*{*u#&mZxyWFYz>22nj}p_cG>
zn8?(jzGszw`+78{C(DlkCFQK$f#U^Bl}dT{FkUL37diCibUpVlZ#t2QS47&h)8>3L
zC~Hm8$8#c-R61(D2q~@P<`yoDu8H$sZ1SZeJ1y7BvH#=-sjcu%W9q0!w&Tnf>$>AD
zJh^La^mq&nfIJlzNbtv%ERDmLAEBPFtBC=WO({uAup0Nnz}xh785Jm-{zuQ)5TnuR
z1TUb)+YJn|4?@xNK(xP*VtMc*6$j;TL@iN5zJKk+crnOLR>*>%O#y5u<Q)ti*23JW
z`_sO;z<d4U0?fo_m5);Qb2arr%HGq9fmDlpQlbvJ*6WG<Z#_mz1hHAtfvx6rc9Sdf
zM)G^_9d!6H)voo-VPcg=WXwJ4Y@c!X_vNw=xGVk_3ILp_W;jp*5kyhsN@F)EQn+3!
zRB9EK!)<NQu#n0N_CU(UohCT_<0p`s8z2ccP&p==GEX=08;So>3aIYt@qW@Brr@Dq
z!O@jjyg`YPd)$cNI5OX4E)swMq8Kq13dfj>PAms+t9Y9s=(ER*4Z}<*x5`h}W_zcf
zCA{sODz|t>+7Z6{2oFAQj>jUsGylw+U};u(jUmz4&vh)AjS2Lk(oO7oC0a_Se&o8+
zY&Q?SG^g2XB>+=9r<mLMIvG2<?XGqY?C4*Vvz2l2UlVoQ<-SB2=X$sV%E;nfSk37j
zJDDL}nmbFzdGIL4wOVyf_LUIzx!e+Pb&sEJdde%D#ur|s4*_O4L<S<TF%u|#V5)ax
zGPS7p%gyCg6m2WfPr05$E3JRD+3YO=7T(PB&KGEqd!L07!Du=bTHBNftTxgp5|<UD
zYK7wyYk7m;T+)VldWXl*;wq)#f()S3GCtVms;|gooV5s3rV?4tPiwcM68n)ESRgox
zA&q{US||Z+_=|9hAQ8MKY!&9vQKLi_>n)`yfMe*4=fG?`QLc#7?T)SuSHyU-1svpN
z*WJs}!9A!JPiTO*CaaO4VPtz%0mR|?0HC@JMvu3|k*Lfl2b>4hfip`G1A&tj%KY3Y
zBS@{Gtjxw*m(gjhAp4dv-QJM#^9z=1Av!JJLi~Y`1kmo8v3!)KE=B4i?VM-1up$lC
zMzl)g-#1{<<gX#rP@-0LuT;P@aweH&gcnU9hEh+c_N!Yv#1B|=2yj#u6+#G4uY@Jy
zc_OX8V$0>&Vg6gin5Ov@1w)Q19S?}9$b3xNGmYTtFV_#-kfzn121oH;w^-4?QX&Lf
z#7KOC3@91ut_x9`=vo9%jYWxLcM(NuyQu;wXU?B}?#l&p`fg{j3@s!Qd1RCFc%HoQ
zyAu6IsClO^6M&r9GsXXAM`sKDe!bL94XJFtlj=tRvb=SK(sPT%Ou|1Zg^|v%gIhI(
z!U%sN?2H}mJm@-&v#@#M?xOxQ*Xw>$R7P(7kc;jnmIo^2FmH1SP=j=j74~-k({90H
z^T`S~oXIHu*dm8RRD5PYD#9pz5##*ROGv60LQ`HCX<A*~cV$w`lD(?jA29v}(q)%c
z(nC)QUPld%Y!6!RIbaFTAa3ppx6m-JysPDa7($&sM$FQ?6VYfI@2e<`)TyHz9+9-;
zTiBZ!rycjO@>l<Jt`#r-X(ACEF6Zc~E_`rW9>UD^-+)w~|42VEc2??$n{Ce11(c_(
z>SuwGo|e|w%g=7fJ#gL)r~=T0Jbm-r#<;L{y1TXB<Ax14G-5+uX%*@j5ei|Z8b86s
zMWK^I`29?{Yrx{7j^{YYXcp_Bkf>y8LfG4(1mq7N=u5_{+C|YQ^fwOFsc?LQNjfIQ
z{ec3CZL#HMaujcbYmPs~OMwb|fz&>MDq1N0L}z|``0=OQe5J9*;k*&K5%2`7^eXGg
z1G%ncfWkHt-j=~NwMQf(!5(LQo@ynSgX)%jwG>>04TysTFU;90SC%92QyfEveZ0e%
zvfnsUH&T?$af9R|v)u)?dH}j`I5zZX0NrZC;haiPgq1mj#2T=uwCUz267vV_A-bB-
zd3GnlUe(mwv->e$W0VJFwb~y!fD{G60{uiaYlqtO>4^h{QRJxdlvMEqL$QvyaGp?N
z1d~15N^A8*Dbb9`C9Y5P<}@^0YU85V#y#X5QrLiR)Tv3-x8niy$30DpcD&@M{fRnn
zHdD;^{xu32q2RDowoa6ld%j)*iT2rx;;`ZH7$7_oF`!V2DACRox98azUz7fllZMwR
zn`*_8PvCS;kb4y=lY41FoB%mM#=l}|Zi;M8#TfnkdeP%C2KXI)0KpqpQGn_u@R?8K
z)Aej{H_~x?-0wKP0?T|BS3LbR4T2Y324qIQD^v)|EQbZjZL*@AErmH6S8%*La{7Y0
z;_H_evqZ=5EknN@IC3)+|JcX{N4CNkcAu@Ni7E5&r9+SS&}W46UQTLWpW0%do}hhs
zY=Ru-PjAwE4I|sz--%?fVZsoW5j(VxC{Ou5-+kkaW2V?jjmuA`pt3hC7(TfZZ(K?3
z{h$R^XhARyj@3;j`Y)3Hq+sXpT9H}lwcdpE%&+u!8k?W;onNK_`4Pmk;N3>6;SqL!
zNB!0Q<`=a}&GuOL)lb{`ihb6n#=0*V4?XoB3@R$Yd6!i<K<ASuJq!~ek}@}IbkO7I
z!IRrO1@Mg{hrRbknxE~yP9_|zqQjUso*+@8xr}2u3xB?L12`=da{^AT6b2dy0QryE
zOxV?}ZMp~P3YjEq^Y462pPI*mlRBWksqju0xOFE>*KI`h1SCWJyNt7p#~_&kDVBeu
z<wzR=;91%8iU&n=!sh4>Ai_--yWHrVFOFOfT6J~?eqvf=F(8j-M^54mXXD4DCh@sf
z)-fLS*Fw{n5)vao^WyeaNFgU$rIvx!3sE^mVbv+kQO%?y57bYO%mRlCN|<QrUuFIP
zf*{#(lo8C~MY~$^oPYIkA;Y%?x}lZ*&G2=v6*__X+w^O$TzqFprNv<fU*1eLDZC%*
z^ioyy)3yM9p=l4$Hi7|!SGf>#kLh3?Bqjc$+4A1+Ow)Ct4ldmDa@ju>X{L|dhl!eL
zq*CH<vmssJM<u*ta58m8WjbQD&*kl<J3ZIp`vLrI7Un}Dt=Mc&suBN(q29f09--o<
zZbT`&amAwczm&q({(3BaN{VK-=e8M#d#^KhfoyinevU6zpC5pyfIQdD0qlp`_pB_2
zPY7LRf7it})^KFRv_H{bvN_34`%H3xCGbab$5{38QevgO+&xLt*}drJgU@4C-#8sw
z{lkMoeQb7%%4ryS#d`h+qhyFQ9lz(2XQF0&FI07K6%~-)S9wP3M3x4^r*r?x4b1uh
zd%CndJL22-@8I1lS~nPXqA7o~Zl81mIa^wQ*wPk=$o=0QDh{p!NH;MbcsHk9-cbj~
ze|P`lzh7A(aZpl6a9=wucYq@?Ln$EPTxB45$RTuRfGXKrO%}rL@9T|Wl-jpJUBGJn
zCx+1k{RgKXHySTud4}#l1BWh%%CI|2F2Z#~1HhN=BcIKcfCUEYG#^)IATuV?LOS&v
zN<QojYE85I!CFD$R1AGE(e$aw>!Aq<z3v~JMOd5=vJiNP&NrreO-pCgh}Dv=4yaqh
zg%XD&7PI7U$rHY(DF1cw_Z>UjEwby5zn^t6go#$mfNZ+E2L0S0dy}rK--P_nCa<N-
zKNke>NLI>61c41cQZL9%l`h4n@XFZ@5ZAOXEvs?O@!a85oWg=Rq;YcnIJz^~?<1nt
z1pWF|-DFQ3?0m_<s8Uo9mKeSsgB9n3u}=`XY{;~*EOXd~BEgWp!Z&F+OnWB_Zi4l+
z4<e{M!mKbBMRRLo*W`g#=+2mFn3N0b(zu5)?RmL19KcxExU)Mm&80=pZ8(>abX)Vo
zig?Y?Wpo)beO^It+};OCVuY@%sE-aLz<v_nOI{OiymV4^Pq!So;UE0VleZNFn?tvG
z&Y!{q?@CTcq62I|%HyMbt=zcVx*>HP`nM4Mb)A>9^T%vpfBfv2ss$#>nJ>QEhu-5j
z4nx~wkffeynnjbkF|AN$iDx|X>QA$Znz&BIN9jBKuKSdL7QbcGw5*mJfE$V_?xNOI
z8K44GYkLx#X52xe``-UUluy{g2mC{p^%Bi?<}9U^&KvG%%J^ky*#*g3D{qtE0Uvbo
zOa9zBk-O+?bpk3+O^cf;ydU~F%FT;(U9(;VqFt+!MUur{BP)L7U%>)3z88sGFT~a`
zW?a=$e$T-xffWXaMAA-&!=4pa5F1-$q=CoAP^BCpwbfv(rvq6@DM8(<s@PPHPHeR^
zn{<@$k%BH+1v(cGq(nsQ8r~fY_Kjy=<^7qtHl7Sb2f}E(MbUy$iyun^jhw^-ue1=$
z@{(CNu!A||H9=qef=W}l4l70IM#f^R%d;T2a0wgJmpss0uA<4OICd&u?i!bLl;8=g
zv5kHm5Qg<n@nzC=c6~yik*JS~pAVDlc@o;t7~fJHKPx?Fg5AXG^}oJiC4`um0ziIj
zd1AFB!GJvy+-g|n{R~seUu`vc%ka~i0|AzwIF#I6X106qx4@4S(?ljg5dzG#g#55V
zgl!gbFi=7Cq2(3cNcxssTX_#f80ho9;}lk&4Hp9RhPg`ZFpjK3_N(k;xZ%`?bEQYd
z{vJsoKnlM;FIPXu2uxPDmL&EtI;lP|!tR@>Gg_zzIji18Vij!xjR5Mp4PrG_zvy76
z662Z)z7y`wL4lp)X7W`m&Gi^S_$PV}!OqKsA!MDQ_&snmnSsLI#csPVCtrHiMg=0{
zpMM|DKk6`lU5+&B{?+a`OQzNwTVB#8iDiPOh_{q|1#nV?IcILWKEn*5w?9Esd_or%
z1M{(ojwG?Spf^C&upk0-lI`I(L9C!PPQjTv8t9(1<oxm3+vI<+ngi*!uj_?15pJ8r
z1vf>Cz#FPOrBm8w@B`ys-gg!h+vsD~mL<%idKX*Supi`1<LPObVX91I<*BMwVHoRc
zUp5zdiPf#AVYP@OyS1W2ae4BmHB1&*KG06!3Eho{mqU4CHC&Kf-F?ey<bcFmhb;Z$
zz8+0bql*SJjNdbfhH7N0d_nk}hQD=>B$;(5rI!p1(IFvuL!%WZ*OFfTN9gNmM`z5{
z$j&RRt6|wF;}C)_ja{9{!8y&%HVL3_1Ye~sWb^;uJ*VJfz?>IOl#annsrV*b{lM2m
zgvd2uZ#&0-p3Zc`oPN&weT|qAi)76>U!WsabiXvV>s5g_@8TT_x8)J^(23SfyLMfF
z!rIw{S$eEh>_f09-rEku(cq4EC#lV;-^f?_Mv6usR!$tAh3AWIX>Q;hw&TOyH_+>H
zf+mhzz`XWulLK9;90QPl$ziY`J5LtkRhwsz_g|tcp;@AuBZyLyBwU4*3A*R99wx9_
z)G8U4dcAMJ+XE#O?x$6O)cV={o(wAYJL%d=`tMZ2A&$oIV@WHrTFDYaJd<y#Vcyex
z7fiamaCp1yJ0ig@CA0uD(PSDyR+W>>Oh=wXa$4AzE5Egj|HkGN626WE9KfVtmi0l7
zQ11j?fwdzpQW#mmh)S+Pd6#+qSKYJU`c9)RxKu_vV@5*W??qun2_6VSW=yT@*i8Hf
zo_y5J4w=2Wve=>tEVZDVjwLkh%GQL;z|Ei0I2*=5mMy=L{dh7JZl&2E!IjfKt4EcI
z&iR)uJ*aRy;Sv8eq7v7pfSV&E2r#qqt+i_OSJH=Jzp%hU(xiZ5O51C3akyFbi_87k
z`uO^cmV=z8?#gRG!fZwc#PNW^GE$njKJa%1VBXXmR~$$0yAY4%$8`0o!;hk?>+~JP
z#fmg;y|<{YO9#IZ8hQn`(Iq!@&2t(XkUnpL<>W>Kw0qtNOCD={2SCj6slz8?)F6B7
zsvAk1+5&r3Ple_uQVs(JlU*KFt9<-!@3_1!rC@Nuni`Tf9I@1K!G~v(bsx@_&!*@z
z-R@v5k||+XVNCvgHtppmMcE=~%&rlAsK;fmPD5+P68v^%cmV(j-UR@QSoAu}zA_c9
zA8zO)ape&!#Qp>BFc(Da$Q8U1bYm{J(f~#e@V6f5B8}&d&{0!%(tMA3!k~z{jhIIE
zjL;lAJlerTT-mMFb%0wah}T_<2khbM-SN^obUae$VSqldUza~Sl*YxUsOwCN+Z28z
zInE9&Sau7eNnx{pBugwfLG>1m-+JARj0gp=m<jOCL|t3Z^x)g1N39z+ct1OvRY(GQ
z5XYZz@6*Ji-O1aF=by!3!^k(~V*c{}2{O&85>Yjr)77}}h=`$FCG<urElzU(pBXyQ
z=^opNlhj2EGf}AIr-N4-&^ADYB#P{bdombKNss@EZGFfl47uDa0Odx6Sq<%P;Rmrc
zuWe9f8MUFIWe8GQn!8b5V^b9q^wrOfRhgEC)xn$&P=#A`L+Wwi*Fz@QDro;3F^SLT
z&fr^_U*D?>PN9{qC?i?^&dHLauwDGkVg@^w_3`s924+KrZpZAHfw=KpoOo&U16fee
zySB!{KXdKKmKWTjms!q(0>SW1T!@4iv6_(^=?f=#<Ke6HAHbrp5DHBcp+7pvvv=ai
zbM<)p%5>G3qlo$QhQB5zuE*;Yhy%NM#Z&{6z?NGw$6mJdmsVR>$?_mQ?`k#lP=nIW
zd?NK(E3Dl_*Rk<&tpCbZo!g7;kt)0X-}^9^8|b&$puXB*uKat5^8FJ0^kxV+-Nw1V
z0nqUkuo~(iXIXhZ5s-hg(fE2X^Qut5z<RO9pfW3B2xt9}7orJcuWuZ@97*UT-uI8h
z5orq^#K#`gy0KK`HfB#iZ$EHLbO6b9*-LhB>0NCF!Bt9CY&DAiHE!O=2@w5PM(0kN
zAGfUdl5e|=2wJRr`!V}cG$-%5A{wq<DRSmA<uoeqib$b{Od^qe@}ZLYOs@l2!^5po
zeAS*bggP~bxV?x%bJ(KclGz<BHj=U%d6lsr4Pb^mZh5;2bh4hg#%s<@*-8-ZZ;Ri5
z$Sf8?4~y9&GK-z;7R7P)cg}hEA>P|vV-hoXlJRUnHd{G`ievizv`x>{?{bDj+w4oG
zKoQ%j%H6F(w#*<z$cL<$XCesjb!9FUej<)PsZVpH(igkrc+*Vd`%<aa1D-F$Z%77{
z*0`^~CGB_cY-2ppkM4H<gcI?wB{PWN=T8V6NOEG3d%q*!>>c(sEpH;VXw7B}szn+$
zwt6dsqWjh!O*G#F%Ev=p+?az*c7H&!m#5CDX#@vzI@$~EL);ujyN{5R$~r1Jt*!Ay
zPkN53AskF1Dn=BgQO~96LhKKQImVjOnvD~PP+hrjU25b?YAwE!=47B#GAYatJSgLf
z^Gi}NLA0<#HF<#vCP?9)0r>40Y*t#Ju!777TpF6I$U7=_EADyBfRvL2e8n9FuDk-E
zjjOQIVHmTy_KRtVCfeV8y{^HKtRrxZr>MC4%hfUre)2M;u8rSHkA{}5js%I2O1n5e
z@AuEQ*K~<Vgx$3g8Yh$C4y+#GI*3p97l{40$d_A5aK5zSYHjUJ=Qq4B$T@zav-9<1
z(hmO!d57XJQChevy!AtSqW-umAi=v#m@ZbdN|~M2No!m%@eJw#gT=qLJ;<R}4U*){
zA{Ub;0b=ya(kL~coo4{==wet0!RZ0B_;_SuOQX}Qi-arU6`AWUYS8!JRTcz<0P_J0
zhbdxBcy%6LS72&CYE?Ipc;xDYz=gi;McU^BoQ%Du*Zhyt+eFB7lt%2(UEI~E-Y7gG
z`7;uPO4r3fimf~7Rd9lWBTN-~8o0twJ|cn|(2?lKQug?ejo{ha(3GAg*h%=#na|W-
zZ>|~>K$l5kIzHpK?~e;+Jq=l7o6n(KR{tw&htc$|qzd@Czj8CR!sO48Y{!ls<|w{e
zjB&xvYgF&<*+_n>xdljizKq?}4#YC$3(7qK<Npg1G_Ds-{KBT}&_aV~7n}`E_sEcg
zm0rta#7pG@%AMNHVS9s6iI~q8V~Mpj)!DO7I3aS<MfO<5983GKlJTNe>|QZM6)Dnk
zZ%po4Z8_c!A2@@U{(`$N55oxGbt>|_Z1pu=YnDYmQu4%p7YQG%vzsKBu>e8I)1t|K
z&Cw_!b*smJltGx62>JiDUpyvGcTz-?4ll$;bM4<bL;p|l50INzTcOVC2eyI1Bh3A4
zu|UE5p<JQWKIv<#&Cz?x7@vrPYNbTCX(E^hFcEr~?7LR5v9I9m^!fxN2fI(dM-MU#
zG70l%yx%tJ>8el_6kOGZj?_L70Hd3EjD5V0DAbD8^Ux(>95R1uRCyy$y>f!i%nn<O
zlcn(ix9(Xw-9rX+(f1YfY62En>-g)$stQ%}i5mTQ*z>QALD42zxG{VVA0F<BXOBML
zYwg7=yg&=>l2Pk&V*hQ3_u26zn)Yl2{5<FcuC$lJFY*h)1gh@*;GUuv0wR)3v^10Y
zELGvz$PoMY$SkAPPjXKChSI?3HayP^2=wWxLPrn3m)CM=pSFrk(B~Op(B2O|`Lsk5
zRcm-^zF*rB1crSH{+g^8bvO@TMr3C_l#oFm!w9&<k#?aE)p8}msXTrQSV(4KLc52V
z$}+jpDvk$BBe_eGnY<6j!5Mz5<SkctEd$!zN)zK_Co^{}$_kT?vw#+6kc%qJDdSsm
z-}$%8?&?R;!>ryCHUSH!B^q6U>4;+nc>4j8GQ@QDY4=YiL$E$**wC~`v+4F@MoSL~
zF+ix?qQucs8YAnH^6;VfV$LN64eYi?WXH%UjuWsH0iAGd^Fmbr7%Sy$O0Pxo2g>WR
zJ=F6kl~<Doof*A@Wo%{+{CP{El>vk2i@Y)(<AzpZ;fTm&*H*rDLIULb%Hd5#nTH*+
z6g=5I#ya&TI^BxuxZhEaq^2ACter^6j3(wcBD-0g7j9pp<uT}NrzLu3*vfRM=XCqA
zuOdhwsBn>V`ou`6oEG_p(D4iw$4|?sJ#gQ(;US+R5Q}ycFS~0KdhA&KH7nw%KxUGB
zREI(EA=>^)UKIozAYfsr;>o9U91WzRv4Sp-C2Q+v3%uiL7RCB~LHtZIpFJf{(UEU^
zCXva0h8s<StD%%uJK?&tq=aedShy-1=fEQHl<;Ntykoi>i}ECBKTkANmuBGrDU>0i
zZPRObKZnzY^0Rc#XK^}cAOB-MBiM+3^+X310YPY?U+=;xpK`E&5q<cu#o&kZJU`WD
z-c3n#_i5eJLH>J7*8{aMr4(ht6LDzZ_;Dw>W62w{sUw`Oan`m^qvtF$4sX<=h^tj<
z^{kZVx#))Nh6$S~t>~4(2m(`dli-3JkSbHtU0(S;Da4+%q~du+8@G2KU_waT{xoeQ
zihv;yXCz#B5BMPBBXM}Dy)3KN;>fIkf9ilRV6&;gt%fNah16ofu8oxOe4XP_BB9;7
zv_|weK()HZzH~FT&_P7ze+`n5F&yE~6-evdGZS0+U6v%|ts4QVmKa$y$~52hIn$EZ
zMzEm;3B*!itS)hx%Op_`;PxAGlf-HC5rXV4ddW{v;NFA<xRU355A&4kN=v;Re3%P~
zTb(VRm(7|O)%nhs!N`B4h99a+sr~;e!P34}ucCE8y?`)r47;Hmko_(()mSOhm~C;f
zCqJ|LT7pT64fm(hhrysWu7U)?#q@N`w{g#{>ND~-&|-=mZueV-I5Z9G(r&&U3wD#1
z99;?x27I%yUu`N5I8&MX3i?nHaGl+xH8>-xpdC|&#IV@cWm%Ei`_s9XqrOPz#@t)k
zqC;Zn02)L4Grbmp`sPk95!HH9lZg5W+FfdNvbPB!_(Km}MS4j*xasb-ooN;NHhPfR
z-fnTTRhg*Et_O#FIKXawHT3p<DiE3hB6KT3UOy;k<#XsVqX0MDUqsk>k0P+-qcBV{
z<vhKESD6xS=$9dJK)0O1(YVgXnIn2+o$}-^kzE*DuJjS(h@&I&3Yvs4h`gshg%=|u
z0xK(W=Uu7L<K>hskq?yO4LbaFH@@$mrYbQt<4h*{%UI{gWs*<p!~P8wo$Z}-Na?Xd
z*k!}wDMhj`M`^^9;G)NF>Fr}VOVr7(#s%Q_@7jlG|5W~!ieGi@d&ID5Mm+(@p|=KL
ztjiik)NRp(7_I{tZwR+D2P!}jmUz7TngFTR_#>$~qjiWal`@AEQ(*A!@Pm<?)eD)m
zMjBN9{h6s4N-v%#XA_WQNHrh$%e3Wq(q>TJ=yJ75R~J667&8mR4Q)`hq6y~r^nnRJ
zuqdpgSGd5|u|4WRg)$2eMfmB>k5X!mEhoaAJxw?SZWB3&`<pEQ8Use;yvpy}e3Bpz
zk`a>kv+i^HQo3KHZjNVg0*wQ+b(9iqImW)N3fIlz`%FgD;b1o*WPI*3xf<Is$t>x&
z(gG@HA-v1YzT=!*qX~uDGEScg(Wwo`h#uZ*yQj=yhc9QKU970>Vn$5HOR?)7GyrcK
z+|kuRafBbm4$9dW^0@VRww1K1OP0OPVh4%M?O}dg4*023=UkyM1Z5?}Gc~Z4E&wYT
zZtmYD&XU&iKj~M2;H~LP<K$wf<2U$7(8?s3lRco~aZgriqR-<^zS=m)eHj`^C|T;2
zuElOE4;QUCg!vr-2^cm(oJu$!JvV>g(%ni&=-z^_cv|>wuK+K;N^fi0_RzzjKu^*C
zK4PXz!<6+eKQpz~0wqfN)_egDND3vj0r~qKmSRfKstIMdVg8>Y`o7|?WZ+KJ|GPyF
zYj9pTU9edwE}W|2D6L|g8prsX5F1hSbKK{g{~7&_`edYrh01uI!3DD2f*^wkkCf{;
zi8PT863XMr46gyhqpFe!B=p`v1ICbp@MY>SY*|ie-syvB&(8){hPfw{W3iPZ@Bjme
zVU5xtbf!OiH}iW$sr`zJL{l7h`YG|O>x0yz3hCDgmia1UlK5|Mj@oo<Ng6gTk#RPV
zk|IxKC#}+XUjU$}=G)6pUVzZ0Y?Wh#4(fz$`4(cTW=2lp7VGYRBpW832;g?|HQK1}
zMKJs8`}Lt`il8qY5Y=8#a<mu<^wW8j)ppCqw1;QW5iJ++lWPAUG{Z3%p-zS6s;?2w
ztQOiY_qKlGMhguz*<@tpg+}DX$i0k_Jl61Q8Fx-_RiGy~DS~(C1aGKSN+A`?Nv^$&
zdConu-98qBexx(IS?qvE770QaN!3yquUK1YiQSR?KAgeTCQKXT_YDL1B=~O^SO-RP
zsn!g9r@@3&o!`HXnIu)^SWCJ1Q?;z_bTd0Wj*;JS`shlg);UwylQr4UyFxZ7-Lrj&
zJ@!;OMgYnit-T~hGGpZF<$JMq!N{V6-wCU?8N<TZy)Ib%4Hd0x)ssCiwvy<lo;7`I
zHpGQ#BBH@1qmibb?1V9VA*x}IWy5fHg^^oGRU*tH<H@z<RNZcO!?>j-`popP^Op3D
z8{?D<%UQzzGQZG?6Q~Q0F0<OQIoFpjGm8ljU0U)ocI-b3sT?7WgjY&$r-xaX0fO5X
zd&QQICqmYsxt=<JUGRS@>ktx>qp#p=FB)UdwOC>yp?`k~B%)e?#D*a{UPl&H&;%=p
z)a|q=LHl*oMP};CRT3^GU{G7xpKC*2GZ<<If*p{SfYGvGbe?>#YBR;*s{^&I@4xs{
zeT*PthB!dlUor)g=O`K^BMkD~MAp^|F$we!XF>f0wNSJ!Y@FVvf43->DpRCgH@yX%
z!GDa&KsDnH7r?bP^+?&Y3ZO_?6cAh%W90HwEUZ`cXpI{<jMrh2egA9x7ghvNJQZOQ
z*53gFm$Iha5GD`G!SZQTO1a(FXCS7TTk1F!qR_`3Au80Bc(#Nc8~}~kNljr&Uq63m
z#m5TfArhZFKlq-1-0k0Ib^n;S1>F;6x4CKE$+Un`h~TJxU5SVM>1%&Fa>A-rO{@HM
zA<~!j(0p{Djr<v#JB19>6_;xh$yLDL1iiZsf|NkQXtjp(^^>dQV;#9|U_B-uA!9}!
zQ7ixWK8~DdrN~734%D%IXH*$Ir@T-i)^TLfX8n|aikbGrm;+iWA^+b@kqNyXEg27R
zUb*MK8>l@#E*Lm_)5)ib#J?}E#`azJOeaqDhrstDD~hG@V7?)(b~h}GA{>6R@nf4j
zIEIJrjOYu8;Q8S7_~u6t+D>PVAnN)|WlK)db<2x>zB+z+85r1>MuyPRye~M7Qp<_d
zJI&*uy~cglAoE{=`tJMGdtAwPBP`toAmSGHjBh$z@s+0}+0Nv1Euqj3LM){C!DMW3
zdOSKMt>!pN@4jip3iqczi#0!p>8O-(L5aO#T-q%L(lgh_E8<e?sgWWW1qJZPh}bIB
z|Kx8|=;?)iG4&HY^zlMWp*Q|?+wDg;!PXJ3I5K5EHk)e6-ITWYOHhH2xP$T5Pw8l+
z4S#@)hbj}%x0$QNyj$1vXaZTUI^z#C^-QMKA`teyxd1m~xi~Sdkjt=@BZ{x8@7N$l
z3X&5RcED}yi3SvuEDxrkCwi$XxMCv~|2WIIuHR4x-MlABU~^Pn)Av#kj`fRN(1xfh
zLHys3d|5OwAT6)%RQlKbE=<sc<%%wwXs4sPw~K{aXem`;`Kqewh&JgXhtBSj{b1Cb
zu)$`T@1-<`+TSuJ4W)1Vl2@Z}#oyp08saroy=?o|&k*gMtl0mi=8XsX`BFBBhsAK_
zNB1?ggAWqmD%*+Hos@e8e&ih6c4XODnVjpuEDemZ5};dJcQU!?QM2w+;=P)Lo@Gn2
zVMc1a|8*Es?Y9DZy$ePjxI#qodC)J}f($K{p{aoh4W?&m;CG1p<4KVwI7oE$aJ1Ze
z6XgUtkWo|Vl7B_oqQ4Dy8RAG@90e+mHwxv04$;_s9>5sel8ajpHm#zK@<rP0Z&h#n
z?{z(2Whsk&I?+0vgoXecfuHl@o^B%<<8AK;#w~Sy$Lk@gz0HxwFg-a2Sy~7o!)xVN
zLF;TIS;xEB%4&=@wO7~4sp|mOM$)bo9WR$+g~g==xdQ%2mv2Tq$}jZ+T>PYg2<^nF
zg(6N3Z`LXmmuQD4f#&x*=OgRt7|aeSxBWC+CQEg5VOX`x0*v?i?;XK#_WlN0YrQMG
z0W2%%;F?dgkC)at@-0moo2+!8@mej0G2WrQR)Lcm5b`a&4f`4umx*pve`6S*2J(P{
z3gvkME2&{hj~2<PhFVssuD|>!ArARAtVp|^2(FHr`Vn{6n6Fp~;l2JFZd)8@03-m#
z$rH~;ot|C>1&j^^VLgL!!hT?&6=Xc1)?o&()`^uF5bpy@Soi~U>b}}R--^>a#6jil
zMFQFa{{3bt2p;upOvj_SWdC`W(_gnyopZ*fA++WaNb4o8YZeBnO7ZA<ftJw*4jAFD
zqehk^k*b#f!o;Sig`cVhLVYCpUZ_q-JFl)KBBLl|`zpOn$3_c!g<*SI->npqAvkwf
z@m=Bu;_GNB&mrI6E`u)<ivlOoNSVd5K+{#GB@&y8T1|l*7FR_*0vV2^gJ!QZx8zss
zmY@3zhi<Y@J$2pNCacDaccSwXopzha1!tnr+mU^dxT_j6YjFIaL6}oVo8<0jxL+Kl
ziEem7qX*XVCF&H<4KHK7c*UcC@RB0T*_B_1u7&mUQW1fTC@>iNJIYurwpaz(5*aM!
zfv4JEYH1Hg7f-_4<>MYzGv#<LfDG;k(_1MtqWGx;h>VO`0p(MagNDeeL3xh-b*uw8
zmeslk`oF=?Ef!3k9o2N|M4i9?C15_!hOn{ms39&c(H5qojU(|OQ$BR6+eT;KMhJo@
ztwCUa){>c%i0K(RwS0Kr1&zSx!LWG`+uw12?EJ9ml`9HxSCvloFA;>I+^<z;k0Byj
z_3?O2D^7oE{Cqr@<MT(2F8Zao*BNf$g=?i_n>i7yrk?F<ZE@O4y{>^2vpI89-YAFE
zW1NWP=T;igt|DhqM-<IZ#?=4U>CLHCh)C;y@@)e;$IgfYv!$qY--?<>{u6C8M*k|h
z0hzZVIDA-d>GXiL$fE-~Ety8|LQc;h$E)#i6EToz;*+o~sWt#mcWC|B+d+WA_pxAM
zX~fhT@YxbSdmwcZVQ<Yh<q!?1Atm@rG{^oV@u_`Lm4}l96m`Yql{Y}jrnA3w!<4J6
z$}BHc2j~#adj$J}^%6VY%JN}tWfoOVS<F6uX6nv=G(A&!{$QUtu19dTAkxxb<d$0-
zenB3|e;qUMg<~??cFVb<SBfzzvq5cl#@G>%HpGXiKa6!u>W{C?E0$aLYMusgx;r>c
zv4j)XtK2rZZEbYSfRXTS@|iRAIk|0xEn!%fx83%HC4sdrZHsq7{#eg}0H0vCZeUc3
z*>QD8b#}Xpl|U_%nLkqd^AG8F=LuH-rwiDA`%O;VW$p>;B1RmYHg!zmCU*8h(*X4G
zA=|%HXCUZk<4nn0hjrL(vHd0kllr}R0?e;C$9?EH2A}cq=czN(Mr5kEwqD(V{IrRM
zR)9ESAZH`RD_tIA6F8Tz#$ozsCyG3iCtOSTykvl>yUqi^H`U-aOPgH2C(6=?unE@E
zT86o~r1qqlmV9J8(v@cqE6-yX0`VvY+X~YK=YfYcR9{qIowC$G!IhX&nuafsrnc!V
zBhfCEnT271v)MZRR_MUVj{deE^QI_=@M2))@V2(OUCjxRgmj0VAD(##Yi8t3K%5rG
z4u2|D<;N29Knz@fq50XWM?>ScnOp;tCF)co5=G-cts`rUI(;{r*_HVjCn&}zK|kkX
z@uk$^Do`1gu4384afRO}Fg4HvxCx1+96hc>_32??jke%hiL>0su%W-5&esKkAW+q<
z<C6K_#GAbP1<N+JPf``nG(agC2E}pRec<_+oX4xq6~-s*4bM29Lz9ExBF~I+r<3Xx
z6)}d;Zt7>#IAqr2<CdZf?X8xTc>d|Py>p4qm!dD&Nte%koeFnWhrB0TU&ufaA<^zz
zdJS~AT3ZY{`69rOsUCJ3mtl)+IO&9fgcfc2*o4bpWrhg89f&aVoye7v=paNSV)`B!
zrsE%d-?c_jqZT<wJ<Nm&XZt;SdVP2pV0AcTux=XGjT-5n0dhWC{oeBvhrLoOxiR(w
z^c`#&0uDi9Hdqb9GL|t?uhH<z(aA6&ZJF-p<9IZFcs9kob42SwjTo9ADu>Zwrl%{2
za=W*BMY&ZjIF><?s<-NdEq^c#cpq(H(2dFy+1r|iBb{*>%1(M{t8A&oe3&j39%XL>
zZ+Q-hUyr)HRN^?A8cAQ4*(K>V#gh;`V}WTq>8Ep#{}PhI&`mrDK&Dfh8oO`cIKKeD
zT!zZ5eQ%3a;d>>M9pv=Ii9!DxvFl2<9j3?U!2sR4_Evy=aDJG$hVK{2F0@f85&(MT
z7K>MbW(xj>K+I`aHb@I%j3u^1bZQU5bm6(ri~5<1kVDC}1lR5!J?9%J{7~UIVzmZy
zi+qkB(Y^A{lvWXd=K+AXX5-#V8eTNcCnF^X{>Wjlk)(oX$HllJA?SK*;nZQ5wV*Tv
zy6+Td(!H}f?&=iuCFwTTL}5Bi3{?)t^36+Uzd7Pm|FC6zGc_CG9%fw}lu7T>+q5Mg
z_%Es_<x2dOTi@xL3&Owr1OWl!fAbiD$l5(J6{9}g?_BS5%GP!%3}*Yyoa7AfQYFFq
z8l*sPj;iD1ggr^rey}gDQ(>2C;qsBo`kVW;$O=s63#^X_5H)40%zA#%{5vjFmcPk|
z1b_im7shnq>($1oLxz-A^JOD&;~~8YM9v<v)Z)J;K|}SWqyvTNUG>zy*%-el#k3zq
zhWaGeJDO=YnWH6%vX-J;jQ^?NC`@U|6}I_CqDR2VRM#A}G&FHJN{5qMu4K`?#r!B$
zXSjG0Tzm7#0cs7i7?A28(X@Gc;D`PZ*fF;40OM{$1LcFKJd{5*F-=0tB(gGXx7pqi
z;zi}Xp$^fm=vq0*up6$nZYn7gdIG$!d2E#_VV$mpkJyu78SaH(Tx-q!|0BnPfpj?o
z?*B_|_D`LdL-ZSy=N@0FX(AilG1WXSR3fv+sh+EcR4d&MGZC~b&$3USLW(N~c4W3)
zSBI*mSC)wEDD#Pmxr=SzbtIb0*>ehJj%5p$cDu}Xl%izn9^%-VT!Qe^YN6W~p6wNY
zxf4UOvFN#6d4J6w@i<jOWPFAcgo-C7(Y^vw>xqB4fc>zyf2iZs7-k9|x+B!x$9c&>
z4KDS3J0x<LzKi2hXy`>C#;O_=E7-Qf{iD#<sLpnBPst9c1$|Li3!*|`rhs+kb;Ck@
z;|9Yev>#D#?YZKRr*s+vzpnlAS3IDy+m(Sh;xeJcv)O5eTClXeHY_f`e;uD$OZYRt
zIKW9H&w4=5oxV=-5fS=46p6cQR4(U6ss_SaPyEsvkloF}{Iw{1y1|DSq`7U}52!&$
zm)g`EJa3a44KU`f350U*Ir>$&s}gSRjT<HSgY~-u--L<y3RVKB76fG37w($RZhylk
z(2#xs=m((srI08r*aYmY<2yEO7Jw%Nc0(d3aGoSiEPptaQ;)u}D=?fhD*S^&G3(3e
z4|ayXBC$v%*AA(pcVWzcjr@UyK0hg4&T~|@TlOzp4#JMQROCBP_#QXJj1tq#(vHSj
zpz@GZwr;ewX_+0Ma=<oekxBnr`fHrfgt{^wq%u_m=IchHg@p3z7huc~Rr{MI4)v&>
z4BD2yxs4#q*R+#&n0ku53ih=HZNM*xPLRj?w99;A=qT)lC73bu*rW7}#z)7&Sgkg#
zsNO;5p(t&>jpW_|?MO?e8VM4D$?aRCXG{=C=AXP!+OzDHdn`l6HxZqM7lcU*tN8rd
zu?y$|h)YAWzpjlE<>X{2BI3v7R)x)fU365Q#7BBX=P<wceEm3~vSS}em=re?ruuVC
z)fTlZy&Vg~Aak+Zv6gNv%odSklQ<5PlvAh}=s}MQO)1b@t=&q~!?Q6$>JfeP>Ps`G
z8f^KuvUv-82gCwgVF){-$YIC#F0zBd=1)8Xgdn8EnZ|UVaF3=_kRaYX5FC?_UKFCP
z5n_&#5Zc1I$_5P0%oxxQ<;~YTEgydh{5LCt0#v>)8WTt=Tq!#3jw@0FeC0S4pk~s3
z_Z4ln<P|Y=j|6aan!h6*8TJwTLELdZqq6`@k&)VdP`TJtAoe{VrT#fxo<dL~T&;}=
z6r2X>=5(=De0HmZ*tsg<1PT}ZiiInhz(>&TUqJa&_g=p4M&wlizon8lU|xxy{Ai5_
z!Z=*xohrWw$N=UO9xpvqiNwSh;hM$V_G`?p4ua<1-Oy!BWEkk_m6bJbm7Yp8_?kI_
z17}o*A4Rt(v2URBWLyP988R1fSY9W;MeY?{^aTjWlZ}sa|Cc$xO$Oxv#KtBpkhf-8
zqTxRas)Vs9j#S2YvtwwDV35mp4?=?Xjr3OkiWIm{F@yS=2#!*N1YzWc=<|~$;qEx0
zwqIDEI1s@`fLIvDXu2vHioPgIcbbz&9^3s1`Ksifi8A$Yq{7}15SrRU6M~NqWcjD*
z-wa%giCMBI6!>!-qg61{D`A?*bcEOEumXgaQ;nYzrGH$S8h~hk7sVK7;+s`Kzxifr
zty6ty?&Bw6UV-nO38;@fR>Bcrj-cIOHrfWVhKj`l$iJh+xx<u2`wG#!Knj)Exg319
zh~y3d)P8pxE}vuum;*y!0K(~UB3yIVWhr|d;wG23#$USiu#-^jRB(|^^h^pH51`Z#
zfC?@x&_srd4H}9WDBkWa%k{4R_fwdoot)5g8TFI4Ok^Y^s=cq3UiI-h^+z6+FW6ya
zVw&wR1Es%Q!Jp-2)ym=f8F#i%>&@ljLm?@?D^G^4Ml^lX8#Ny{l{5mYWhb8?{t7+F
zT5&4kO+lZ;FdaQ&hBF$*y<}pS(Lc?`q4i?4Lom$@TUR`Sqfkp3W&yxbh24#acKj5H
zy*v35viTk3)Jw0m3#ScF>=tZUmnU~24qs3t2|fE1);CQOLZXh2+oXLYQ_H;Sj}F5b
z!)%g&<3&s~oO(N?)YVni(_Sjzj!Z?FTP5ydS)4WrAy`)e+*_5dh+z#8XocMKN*Ab}
zGE&oP%Ga!?NE|>V)nnZNw)?FVc2<;2Z;eI4giLi<MAvaMcZ}WZ6zBUp26X9=hZl^e
z>gQIIItxW`flK!L|6h6>P+l3tv*b)#dks8FMP_+dENC+X7Dh9#?h~zRHX$LKH|Yx%
z#=*ZeA<SSpUrAKMaLbay--T}rRq)CWK}R2-5H+)Ox}To&eJicIS2TpB2hu;9w6(n)
zbaqUM;0nf;KNCE}j*X)?IQimi%K_~fC!2?T(2emD+})<K1rgIW!4`-jwlJ(%3FQ(`
zSdf4`lPhLd)|*e*$PJr|v!>n@@Ed9e=?@11Gp4H16Lz5F$Cy=Eag;~>nFT`bsHR~{
zs?z72)ukWGz$qSkDUQ2tGBX~>h|D6FUXmcEMTUyPAF`S>E<!`(qO4$*2W@nf8V|Yj
zsKBE*eMZ|xvUxL@)hTJR<iO9oa44kXXNxN=mP?HIZoP=qNhvD=yma-P`^YI^;2*nN
z22LLdqW^xsOr<tS|NC*C&J4feau`Spz5g={q$r+iT|PWKWfJqZ7MZ}qqaD;~kDgox
z##m$CvqJK32%%N)F5519Nv@G>`xjkT@X({MB&=z(0@&d7WznEiC2Ad=p?Xh4Xw{j8
zTeIGJ_S%HCTpQSR=u)REe*wqi5##gc4#K4_?WW_pW#guZzlc$J_v!8BRr=6+8s(UR
zoe@%gIwWMUH;l-tbwo-8D88#eMNhW}wP*;)QX~5vvVClGKSlJ!t7J68-)Y6$1rI59
zJQK|%CQ9Rt^0HLf&t9VlXA|-tEz3`}7}Cau7zF=s(pBJ{mD|jvOs?LK0Oz@?%ea0r
zWtM~R<nFS43Cntg?)_;eC+dae4ZRF$^q1#r7tJqkC+R7W!i#t21?z2h)Oiv{c9eY7
z3$%!-E6)nN2sIjW12*DE{VMBM@*>gwf3jMC3@}PslBen^vm8~9H*Sp?dsS%F2(Pma
z`q{j-7Y;$53h&B`>PF^Nb$@_y4ls`nu|FEyY<gJupP}vzNv@M~B(OGeXJ{NsV&D_U
zKVev4qM}ZAeXt)*d?4sYgg9GDHKpNnvjUCpEB^|XGi(weq=0Zj?I#(RlNJ-?cF78i
zvB~(v8H^bTEmF$FAKYn14H1%V&Z)(LT*GWFzsO4`b>lJh1sdM-k1J=57qM`R3XQ|1
zbVOt3mKXf?cQ+5}oezS-?iCr*+DKk~X)x>qgk|?D1CX0tjz1JquD0pEyOsbTG6aH3
z6V8gv4a?!6M1Kl2!60?K>cWOTOL<@sPh&2i-)avK_|NJcA_hnN_E1E9-mC@kIbK8~
zx)d2;mPCPy?p+59zq>@4{|B_MYiB{r9|b3Kut&?oslNFJX}{&Wlq~0L5J9g`5+U)=
z<#iybF<2FKKrgs{;v?p@u3>Roh5c%2eozy>u>u+kCLdXNl|&7jv7E;9U36X)9uHnQ
z(3$^GT09*9&8Y?A_fs}SCn%x76pf%kA+a|B-nJdD;^J>UYfq)8eyzaB!ap0|01tJo
zRm2D4{N@Dd4Ia!h11W1g{8S0*K~ywae7-7I4e=%0w!<}lx<)k|BOBDJ4@>&|{=9;~
zbJXX{&88Y_SvFbQEvU{vJ{kQ0peQZkV)?Uo2TDLc0za#3X=F%Os43;I-`!-*nLt_P
z;<L(`PtqNbMaQvwle)|I_Mo>_kEZ$)a<Oun(%vMe2bZOaiZwpxr|p4zJhp9@6Jq`O
zW9IZ+MDHYPG36T@u9&qlNAft=)C7~R7)7x}Ql<HqZQA6gZ9}AiCXB>voG!;}f$QGO
z<90FJmjV@7t8vJ#!_5)9Nn*&J??WRA@a#F(vl%cW3Z{kD;HpotN};44S`zM~3<|bd
zNpq6087Nd{3t|f|pX&wGMsICn7Ol_=>Q*rBPKbOcGicxqd;$tzvwNJj=)rVU{W;S6
z596z@s&L2fr}<jI>-QDeS8eut<5-H>iF;+TV}P=?5PT(xn?p!NGK9y38#eYnERrE+
zynoY;yksG1g<>=|Vh4pNq`a=QEF2H^tLD}wex6Q<MP`3goAD0j2$XMBDSjKfuZ!k2
zS5WUDWs+fioDcL`i&-_)n!HXShAe8x6cZBWtWK}`O*+^={j7YeqnvgBdPCn5@hEtl
z|K&C+&27Ye)z~loX+uA3K-7~$zhGhF79~*e4w-xk1{Gwdn+C`*WYlPXe13y=!~S{4
zDQeO~(jv!ll(@uhndRZZ;pBPt6Vd;ps4Ygw$ZvY+JP#>5&9gxvr-GrZeE;_AMc36S
zGM28SBR7ETG*h-N#J7rH{c0Jsyf?Xq)mj)N>C>(lNYvV!ERrPr^nmFvFr(auQdc!z
z24DAOZwnto9H&J<HveW<Fqk>te!YstPU|Km5buWVCO~_OQeb0AWO~dW_jo&tZ?bLr
zW2j>CtMIInBoO9U3m@;p3EtBvv$Qh#)2EJAbD%J_vfRz{|4C=32MnHqIHmTR@9XyP
z^t|~Ko2|odL`G4aUp_XDtp(iVUaIAafZ`60+LB>allPc`Y13U2>@hVNJg$KsMlb>^
z^0^BEL{gZuWH~CWzv#y4?}NP=KPqhUfUuvge?j^V?VGATN4*T?_BCAXE;Nq(Q;Be@
z_DYGF@<>Wug=-O_Jjk!`XE)q>vD&-s`z?P=n%~{EavbN-xnq#`Yq4%!rTb$7tE_Nt
z)kqbo0`T4X^T8!BpY-A`WaT5~Dw?esUmuhx2c~m?QlNGGrOHh!WiFCzf$VTAAD-7I
zFvS&MB43x4M5?*9JWl;A_#W-^-%=2pxe-R9ZBV(4=;~ivn1%I*Qfc<ahJqg1!N(*k
zcYn1mC|5ZZUOz?i3T|<+K?J69m?VqEplvFR6x#wZ;8lI+{(mf{YZ+T6D_F4z-K>2v
zZSteP>n+WjZKu)o6Ft_1ZL3`dh}9ab;49CAF`FUW(R%`7UE~p%ZtX|v+op5L=|;Z`
z#h&Tvf2Qf;?{Ry&9ZGznpV&Wx-^0#SEt{PLGYD*VFey&<4Dlt0V<&2-J)_TCh46L$
zJq(^J<Eo!V`lO=<3wzwNkRAUpI~xr@U`uyD+zg8pDG_ITt3Zh(S>D=1A{2fDNDx~9
zCY=6OLhi7BNzXi6Q06@a@gGtI_a#<a2GTnL!pDcqgKdmbqt;6B<3D4@+F%>~M+Fkc
zPy6TMg^J4dR(c;svnjS0!(!w5a}Ly<YvTWaf7KxKxq2^P)@0vO#c4G0OEslT2B6YX
zs#Z~Dox)4BAuWQ3m)7FP-sKwXfpI03(z{<}CC@A^dCmn^6;+kikAOW_U7iypS9OJb
zOhd!PqKZ#j5?RDRBZ+*E0#mGws(Mh-R!>}c<>zBQM|`Tsqo~@^<DhXeIwyI}-=Le}
zWA`0CPa}D+vcEF&Sl|3_XiCu4(phUDg>>Js%+mp`?Wv5+=<a^grE=o!0yd~*HG<I9
zLPm}Azw3NAl~wZj*?lXR=_5UHc4T|<NhNtqt@|E~WQetuU+iPbS?#8qWULb_D{ht3
zVntO45}Rpt7{lJdNEmyRh=k<2+b2nFMG^i)sfn$?Y@oTFV#kB1xHo_?5VFHq|Dr11
zqnu&5^R~J@{JMNbb(?Yhn^EqV98H9$>{oYZQFztH#S15yx;xOrWyBtYFh#mM)%tRM
zTSF^OyBCI4o64D~ssqOJcyu`ntVnx8f#@}4XHT)N;r4+5J2P1>f=d{6PhTk#hIlUP
z$0!?0E-^20%g{|aoA+u3c(B}>^eI->RFRmTVczarL9J2_fOA{tk@nHBjyH4a$W)qs
zZbut9kgV*$U3dUUw$E@>_iQ+sf@tStGq_6q_5^cnCmT%zxfOKdU!fD-l|aNmM>dS_
zhT7u~6K*U~sN?(Y#dJWw5*5H9hlR@UN2sM2a2dE->;Pn!{ucKSM%+0Go#|Gg#cYkx
zQaattVDl-|jicl6@sDqD<SHE|&a<~d;0DKn;MMU|w2SVRXIlykF{yI@&?Q9+QUvjm
zAs={ToH_M7)NsaaHaz61tGKL0%uf{_bt>pQ$FAvkO+`X$NKdcX?iw96q_w*MpW-d&
zaEM%$h+fe%zK@=6*VVnE#Nk#Fi8O255V99>c<zaKa|gOPE}{p+4>cbB5wQgL?c3@h
z!-NZpyc$v{^i~{_{(|8q@VQ+q)`~|hc*5!?8jRGS$VgzbgmFo!!b*HVx?QuObTBT!
zfv}$((G7=2fing3h>nsW-UWt-+1K-79PxQ9dTTrwDy-mnJYftyf4Hy*WbF)qyIb|*
zhyCba0*vrlN`OlNGFZT=-Bd`@tWvVpTT$yU!*$~Mmq4EWuy9hdjH0Wwkpn{_r_PrC
zzm&FPh#l64%dS3trD+QAHxhkBxpfJOIf*jZX71yDV7QgDjJe?xl=zdcom-6AuI}GH
zlJa}Qp-uiHi>&aqiv3Miah(=NeXes3QL1!(LqEaqCjn?6u~US!+Zy9!lomR_y>}_8
zUtOoh>)@k?Uz<M4Rs{wjs$Mpy@T<UEnJrZw5oD*1()@)4Dlz@~Dz<GP7sY~$D(_QT
zaWU=KVpIfcfW>C8A9cm57!ve8%hsZ$&sA-qPTSa3=iXBypw+_d2jSmnn6SSlmq7^7
zutxdzk>*Smbj8Q@9w_yt=i?m|M%Yf%6mj!17~g@JdRUd+!(A%>0=u9Ox-2pH2E;TB
zrBW>wd?lfDQnLh$|4)qwuFq7Y8Ht{L(jg_6o(j2W5do<JDAzt?y-y2iK&(nP@cqfo
z5OK{|9@SCmVhrY0q%Bi~NIRfCZ}<q7<}xSltxdW-REhu7TIunJ1*i4IBElTmMYSA`
zwInqEP;*c6&WsUV)>Ihk;AIU?n@{Ev@zupBNBjm>E6-*s>44~vPxeK|tim$u6yQbj
z3yy8YIE~7*`s@P|A)SV8c@C>=q49m{KN8nUm#hX~O=Q3RX=N~Xj)qNG?)H=xkT>JF
zIBVS&`1t_4@}9X|X*hq;e^Iy;cfSNFuYo!1@i!rMJbybHh>0qU8UoL?&x$mz_Bke0
zmiQ_IIN4I<n1osq@}3mHCWj&&c&o2c6+;Db0Z#3vOdml7d?85H3dzM`W~l&5<K0US
zE66~#Ej{stGA)6tRQA10ixvPOPRhy4F5LzQ(n<wiQWoetz<RPGDXQ{~_O>E2i<XWc
zq8!*Aeo=sKzS4h_c2Am4KfRWu_v1pGxiWoUv7EyYj^wuo=*ooE)S5yF-1&KTNRqbk
zY2xrR{7JQ|K4y&O3p4dz(9S+r2O>n0W^bman<Wdy+`}03{Rfl(&JX$BFm99~()omt
zaC+ySVonjxl$I{^r$GzDiH$dW=ON>}>qCQx$+j%OI9f|(;)?KP-1`K={eyy}KJXKQ
zv4Mm^z|eJ}+2em&-WeV;U$?f+(kUYDPj`{c@uv`}YIHWurh1F|EJLn}u@vCd45ex1
zbP4A@@1(T}ynZwPbo#K&QEtROolQwcr7<(W9co7rN78I;aShmNt!KwDU!^uEyry}E
ziAmqi4Dbc<lo1)if9=_$X9kqC<ioKCIdk1pFNmT0uvENeO<f1eTWB-HpgkYlLpVF<
zB__#uhX;F1<Oa{jtanX8dTa{D6h2#0Qsqj+d^W)KpJPlco+ET8Qz{c?1Jey5;S%`r
zR?8y!&6wzb8pc_SG`!JD?u}hT2Bsm9H!pkA22q{7z*eVk1E#X`H7bB!JC~6EPZ3{Q
zsYzK^DK?*>iguGB%eWFoBMsAzVLXoeI7_}Nl$Qt>1+@Y8TgJnz{{<23<kDDt2T~Yu
z7r3Yx!_J$A3IVSV{ik&3)3`?97*{CUfvvt1&1OKOI}{ixKw<KGjlF4CrK91@!JyIW
zCbuA5;YK7!h}J5NbYe?2X|}gy!Kn<L@c#1WE)@qbKQ9K=>RS9ChS1^<8{^6i;B?g~
zx49%sAk?Cwy!}q^1p5ZUL8;bxma1z&a;4<M*e<53X#*em%T*dz;Jlb2(5dAf$Bh<L
z70gE0_3b3OIN_}_@l0Nrg=-8ZuD4{DpZKH*(KdAeKS030G&Q=^mXW(@jIxh{y>JR_
zxYZpN`%>25aTb@4a>+9+m&lyAO(S$yse#$7HJ|y-Et-ges~i4n@bz2A-7f0eQagvI
zqhJDXeFHkwyl-bHh?v}J64_037lql0g`C~)KEbEr&)TAfu!Z2^;MxLc=Yfz>Wc9z3
zL-^(;NSy=_0j6$snEVyGe$ok^*_52oW#{g{+<v|lB@`<%5rF`hEMI;>y^$-+ohE&5
z&k|b&veNryjp}w6b-$1GuVnbMu>&9M4i`dr73y>S=ydO1bNo)@wsA1dhWww+s3n*4
zdto3?Hj_P1HdldK-dv0TU`OSJZ8vugRyN-K|1A?hs`Y-Qcz2zt#;rdWAj8o6QDlgX
zAXhQ$Xd~c=>w_%cNkmI4be?T@VHy*T=ng#A3^|0ZM_g8eV8*YNi!s~lkA+U9LBvOk
zF;78<S`@-GRBZOQ7!Xmj(d*j@W2HQ*qgNX#%*ssxZwYK-Js$;q&5*hi8;tbtp5cau
z*xigGd!kC`8x&Iq&{(CCg{Xvp6&L@S2OCxf=Ot2o$&b`TZivnun_5<z$P2S}Fq@4y
z3lO(Y)9?Q!`&c!J-b$WwD8Hc!FP}z|EFJt&3GyVOnZe|8{%ss!TD{?07A$UF1-_FZ
zByUfjw9oZwH^G|6A=U;$8~w)4;9Welzow!_+HYOd`Y4=IF`7&fgYA1(%TQN#Am*d5
zM!nqoL&uFBAuyWRq0y0p?6)A3k>zhY)Q>(SgF5Ig5)npiq44t3g}k*7Z(%MsPOPaR
zJJY-}LV_?1-FD?FKa>S%T*YuYI-d4hgNiV$04&eu77ss_wVzEbLM6~)VSDZ%tk>=z
ze<T`)8OR|pDUBeFF~6$AQOj++yfDr3AH?CLh`;i*jm~R`QYb)DM1%cwzilo)Y`e-H
zpEm5ISyF)$t(jmzYI2N<mxfVvuGOl!G|>6(l7a>eY%YCpWMII8)uV~ljF+~}0W()%
zOSVQw2O}A^f}ng9)w&R#dfo)Lbn2PYQ!h~ujHc&d8M$O+hX<JZ+}s31PxGO3XU&Hv
zh$BH>XyL%+NQl{C3QB{Ggx*inB(a%$gehSKJ)-{&o2b^nYC_|wO`5NwQ6uP%(jGYj
z$8ydVIaE(#AWIE=K?!OcvAk*o)Kz^9C!Zi{oP7SJ=GjMMA%m*L6K1P=Yfeno<C3)X
zz|Y-Z1B`^L{ht^UWU07LKK_X5oSA&N%pieh-#qoG>iQ|vRes3D$Eh><5|V&^vP)fJ
zmk!-oWfieU+h@L3xzU`Z5jK|PPEUD(F{EVh{A?$@5$p~Hhuv?yWN?5X!52AdEOV+Q
zLa|>gXK3sNY54CA-=QEAwU9)(52{b?`}J8e&%jg;d@7&%#a)uQfsC5&uWQ}xU3qpn
z=Z9*p0Jw<UVG0Vb5U8`>0-7!=v+J!_&9(#UW;9ztix5?2g|9Gp64Q?Ebp@mHg>6Gw
z4Mb@+K?FhDp&>aq*6#a7dZec#G->$Eqp3Y{Mc_=i{8s@@@^u&C%e64p{GC>SFM#WB
zPh!lF4rP3S52X=xrURx-P5vscD)8%3scJ@?SnWJ#H?mm8!^>e@uzcg$4Jpd3Q(Wv8
zD|<6uk9xv(he9<3FCVm$9^+beKGKd;v3C<^teqQ`GiE>m6qv6>VkU&tL|~?I^8UH1
z9eD}HihsB`6iY3v6s<p01`1N0Sc!C!vg9m6t+PyhItQ4A?IZMElKF-Oj*5o>fXbdi
zm<7gP1(VRE@QTZ7bL3$lkp>h}sL`@d5ry~z_tz*1WFW|O&dz(U^3p)z@(Qz<a)C|r
zaH8^2eQOG3O>QI>9`;jZI>I+}54C7NwPU>)5Q1H%TRjjst`r!n>uH>$E=ClZ6mGa2
z+OYR*pYD~|`3-)Y!>f1=*_X%c4RRg=O}Bhiq(z0K9}5%ru*pB*8h-J33SoX<W?<c<
zM<>Y2tMBe^WqD?VZ9n1LWjA_#_`i+i3I9)altrW;KT$BTg7E!+z*)`U0CGAKN^$^y
z(iV+31{>g0z>E(V+&pJ?_{29e#Fc(L-=UkaCp6SexHq<8Kp04aMO;<m2Mm0u682d;
zf~yP@&MvP+O`_n@j;7dw*SON#74#9i1;n-qXjVB_ld1~VhxW30ECKma_{H*%>cN5N
zTrY2KI&dc;^R(vwm`KHaU<)yzCp62k{JCI&T}C;SlW^ULlK|54H|`4rbhm%&?ech9
zrp0SyA+&%Da2cyVCe_X(UA?jhR@llG5enHJ86mXJxwQrby*ZDPX%(P=|KZZg%uQoX
ziL!S?qjl*XZ&Zd{BvVs+>Qum}+9l>4mok>iojjRua&Nn{P!zIjbUMXX2j30rT$CC2
z#jTXF-I|FO%18SeWbwGP+PM5+(bzbs7DhJTCz&gtJPxwN-*tz7wX$%0`km+77Zp;c
z9k(#z&d|W-9yQnfSrxWHRp`M3vZaWx;oC^1nj|c~rIOg<^dD7!+`iV^oW!>+6X&;W
zl+ce3V5}mcQgBL|>b18a%o!)l$%dQ_p>vz~LCMN!E#T8)H>yVaOyMW!5tgcboPHv6
zce16G`nK!04rB|^{E3%N3#XA-F5{#Zl4bZ_=FVkpL5KuMo3@~zKy3KF5$rO<{irOB
zgqJUFth4QVnBx`bn#90`E(#6Id#uc`z*Bh5Bwrh)FZ+TS^gUPz#UL$~bTr>B4!<&7
zrm@D9ah<;mSP}SE<^>*vllqX-^x9_wZUj|?>8Cl$FyV@v($qM#5G?8G$AQ$+m3lPE
zHi!(>d0PUyxEX@TbTm-pdWPxD{1!)ywaydU4MAUk#bP1dCgrKmmqX=yJBLj7SmBwN
zj<yiYcYQ$3bo5r(>^<X;WR~~5XbFz}@<);tiGFc)PzK_0hIRdB4Qv(=m@f8DYa)<0
zZz({;wk@#x%KHhfm*E&(MM$?|vKz2+`QhmnR7lLe!N{WJ*WtYU=}vMiqqfrfhcN%v
zPr(;YZ`puRj2Aky)(-=Pa5m5fNhJo>&cPAetT%9Z$0~YltKrTc6pN+P;2qkDRL9>*
zCFg9HgMia&cyJe29u%6R*By@qEN<r^{BE0nBqzAd3`|fe1<VtZq2ls!x=!rOdynt#
zz1C()<FM&0Dp7?(;^;7>(fVL#oI^$p2+dEudP{u7?^+=DmPFNx>K3OoaR9ZC-?x02
z34H%!D9;NH$_LjGC9SNu3P+Y5Hs5Xm<^k6f_`RWIX?e4XcRm}Bw%&mFJl$T4zi$d`
zNDQ9WN=W~4hyNGa$r|o6Y%$=TV>O<>`nD}AB02g{1J9gz0bZpZE9=ER8*AYpU)BNZ
z%H;a83@O$(z1AZaSt5Ne&UNeX35Bz3^%;z9e;?p?L9U-_^NqnW7UOI@om7MU&;NwR
zSNjgZ)+A(m9**7vXNd7nL)*TN!!<U03}e{U;c|Nes9Kp;P0|lC9qh4tHZfVepyUzt
zN?5u=vPPZS1%Kl%JTRKFj+%gOrZV$c92i98j3<6xR4%{R1ok=ExHxrFQF7`4{wC%8
zTzbM48N;_4`Z2(WvmAWkgAc876ZkKp@jUIBpZETvyXSl9prl!p8<n>t@>kX~0$kjf
zKw(Rh*mydM;cot0Q3h0&U<dMMXYEgKndUF0Aa1xzMZ5YMCGh~92Ko>9c-647xre8y
z60V5wS~bYpWzZ#Whr!bQHs6l^I5!$#H#}cDJ6U=&_x$*u`rNIlatZql(m1*LZ-0^E
zHi9%Cq;*+9S?LDf-7TLsXuRK>W&g*St@gN)1e;`#mx*-nKvbITjOONu9UH0?Tow02
zs?5RqAb8c|Sc_|73gwg_Of-3^ZX5A2*af7Yj=muo8t7+WjOgxZJV%6t4I*L|gWqW8
zQIED&Hqo=ZZJNNRC@MJ{M)J>ZPL;`|9KTgm`j^Q+XRdAIF{<YCS+W6h1fPfH)S%y7
z6Il@s=UhmHY+9QsQjPVj_$;8{2r3%=CIkBiwDzAuZH_176EZ-9((!f7i6Zn*Jv6V5
zWdS4jFV_4?t3L}_{g3)O&gmSp)5Npp)tVQK|KzdZ{SO}iT2sH)QUfiKWi*o8m>TK+
zz{^ando(Y(`1^fX3KIuVon5c7^b;V6+)LvUe-9#6D`AK3cho^I+#3_`$XX;K@o;3B
zUE~P^>NrS$Uy%b7X&M!ZYjzl<iHj?VtoC|^dBLX_mNoi(#JNkCgi?6WS7u!U!=3om
z3A8NI>8RDY{|6O@-;jCa6<kN*)Qikj%jQ!-7dG4txVgv@n5<+M0H98SYdMzdyRJY_
zNqW@>k`dw?PDAVM5JZHkSQr)scEE~EZ)(*CT4<zeCp1S+8>w#djswlcivlTNdHRl=
zU`+(l5k{Hwoe8<oS@KkbdEu0wfU^qy)}gMtK~Nl7f+t0tP<`gBzWA*GC)99y>+kXO
zE9b>}HpBwXZ^Q-t0zDbxyG{0q!1oFO9meD>3(v6wffQB(Mn<i4^5Dx%UzWTP`+vF4
z`S1{5EKS;P77}yMWOjI)HBCyY0b8ri3qeG@l2tnyK#Wc=h?%RzV@vM>zJTH__g;wm
z1wzJ_UZCjAwI0(sD9teV2GB(%lIn;zS_AIPF(1dzYI`jQBla{{78%i7)=h9TeX^L8
zoJudF-QRZfirrni<b6V=W3%f|k<}`{TH<0oMYopS7toh2vBu_Vuwy%3)jrd?+=Dhm
z{GOtDB?G8SXjYexkstI!d}~;jDRSFAMAK=8(5>^f_|`YhHeY|*ImMb9mKNiCb?OZ7
z$AhAs%2pC5_+__tvYx3ijS$KnYzP$~0PbCtX>xymEzdA=jCKv7@+r$JEbFmW`=J7l
zqF1z?z`Q1kbu)_Ls$<g`rwn{e+fSznVQi-Ex*4b^xu@oMIXHsTr0$rRl$|$ZzU0TH
zQ0%&O77~cNbvUyOF<|nt7}Oek?!<o@xT;8f`PgOxJrGBx0Da=OOHiwud809YY-qwy
zMYTmH+RNxSfw<E!5rTitTCq*hDTj<-meG#y@GZji-e=3~w*17Y9OoT)ekc3_c(fFg
zO~>wqCXk)PBgye>R~Q}4V!U8{G-xL~%o3bt=MDE0b|}R|%_j^4DkU|~+PTS$$vY=}
zB5p{)zp3}Yt}E7YLC-l_$N?%kO&Gjj*mfpBE`G%;!YJyLnI!$ODy;O4EE0L<r{K@9
z+O+;m&fswekd?4TM1@Zby;pfx6vx`M?UDu+_xq72J5rq7<<Aoy@S<0xz4ot$NJUhF
zNZwgA-zq-tk?YVkVs01hBV&cz?}oYRqx)8F4a<6JIpIkb<g=r+gFbJgsX)QwYiun;
zn0#BcF7Hl#sRL7+ag9mamDsEO+#Gg%O`;|k-L|yhfH_=pPy2<3tdt?QfYhksT^qjp
z^BXeD41?`J1Li45)ADB>r&9VwcHD=Po1>p2hzfqhtFI*RB>UP5b`R2D;(!o)I=`p2
z>LOA6g$Zu(A&tp$z~AnrH0O#Og1gh$z-`BAObbuoF~W{z7PEiI<anA&{~5xXORV*?
zVO=~48BVvuBmOqbrcsmCS*+H}=PEiP(FBmNC+~>+lQ-5)?*h-=2&y*stuZ#UBUR$V
z69(hba$jClm|T0AcE)=O=O$T`f;mdR@w+}Zm}>NL7rgD{t~z*cy#DMe0$ap=G&`B)
z@0f7&#w(2rY5J8X6>9YOStjI%v<7pB;a+voI-l7(t!sU$R2`Wec%gXUXPr*nFcKzS
zG%^)z*e7K(-)q1At*DRQwm1)z`egN3)exoV8hNxCeQ}rQ;t6IfNh%0|>5CT?LxjTQ
zhu49K)tM-K2Sg=~B>ZQr;|~WsXsnh>Uh%FXm#Ynlh$#1?($$sj<v(#AGmik&I?r+W
zjcgSHhO2>N38ULB+1U4cT{$pKl1ewcOFnMzLgpLNH=<S2cnr+C&H4;_4Nxp$@IUiG
z;(r4a4)56A%YA67x$w)rP?KZ*YAjwI9U{ED-Q+b)`0N1&ueh;3f*BJszva<?y1@zV
z6|o+ZzjEpdxKwXCOPuk*Lwo;bwZh_Hp`)m>Dv|EGUx*G{57pXW0KAsTfxE4heL9ny
z(x*i3a1QuMAux&OMRw}!u=GT+rLw8hKkG`DDV~*_SRekZX9#&*RZf|P62uYp6(lJ}
zGyk3ut?U9@H7^vTr&tQ4qr}68XU*ao>u)>NEmS2GaBMVkkgcgLrCsZ7xRgKzzPy{p
z7u8Rkt*mM!Q-RuUHo`UeY)@PSh#YQBTA925<Ro5`2aWu>STt~fD9>(8U#9<_SNEKM
z?FcK8x7ptK3p$zn>nv78#=Jn1axzgC1tf+bKPa#?wQOQLU|w1*=!xxD{2|owcuw-~
z=!c9MJcpTvDhahR5PlJOqB##9g4FPKhF&tu^igi+QMlUy#Ph}GK2kWECY?2t$U$=v
z3F%<u!Fm&w=OR4C<Fr_ZzKOP5+>C+-#;QJ*CNuPDI=x@H1n(r$f9tP>^S)9sHeM6E
zhf;>jmQ&X`%Efn^eHS`DgNn}~P}*OF-Akg-hV5$y>;}om@<M!8GwW2!dF|lOORS?A
z3+~jnhOUft-$0k|q}d>I&7%nRt9pN5>6^U1!LU#N6BTQmFKC?{sh4(!6Q%8<AS_PI
zhArU_PfQ}#7|jz>Wn$o8D~f$q1{O#vQB?f{<(0_7=%pv@iBq5LRlFMht7qz?ao3FW
z&Hhltwt_?ohNSTi<NmvDxVc7*?~;h8U6*7CreSya<>qvz-TuK)4GAux4CTnum(Ur8
zm@+VQ`g^Cm%eKMcJc<?Nt<NBV*=NbYq?3gU$zpeIKLnX_lmTUs{)j?LB%!y<{jkr&
zB!k$*cDm|%N2)bo{c;Vu?sFyz?QI+?h*D0a!jfengX(wKv?;n17xbBJyZLq}!<_3V
z`bS1`@C&V=or*=~Y5Z%zohFs<TP5MCnPO;FmkN7X=YicD@WkSirdk9tw<4C?^{l}T
z*6}DBz0s#aKWrk&n0F)!5dNuKn1{~1r2@As0ntrb!Ci#z?bhTUs<1|eZ3gEqJJeu7
zv--q!+>-W#VN9bdPt>JqvGBhIUq5g@y%MSx{FgVmL|pKj{PkZE8<}_s&27QNy+N2i
zu2p9*`Auc`HT=MP@^%MvB8!w^)TyoOIgjSE{A&muOQ2OUGQO~C-i`3SDUNB0zdtVk
z1~nPOTl;`VD8^cq4xgo)He~Hi>t`xIFYM^(_gTHsN_%&Ho(oS?Z6qVA3$?uGl$@gR
zIV`t<7v6mLP-AiIuw5J{WK4)#e+gI_t1(#b-@TIE9N>ZfYd>&FqQC6D^h%VA3SILI
z1Z0<S0t95yu>k;A8hf##QA%1rY^-9H`1RxP^o4cvQzD|Qh3MC>!<>Jw$qP>Vo{Z!A
zUbNsv9Lqm5=VB2wF(!$rh+4_xyy9OFXCH>UqassRt)%@AK)LbIwxzyM`vbPLw-wtA
zuX+MpIrA+xk0=j<Qc*mpW?X)C295;pMQ4iB9wl<+R~^gBh$^Msiv_}+XABfobj*$U
zDIOgy!-r6zvqqci+FG$hHv#1^YKJfFaj*s570s1XDerjB6p#R7Nz$Vajg_%Mn#J2R
zX|>cnkf(xa^5Vb$)aMGoAL?GRvnqtJ<4oe|@vCFpnj_AMd%=maeE+|SNo?}(aF0#X
zh&3VA*yJO|W|YQ}xjSE;!Y7+#td2m7tOsn?jhrZ-dwG#qbrj_ic)l6RFq&3ftUkZa
ztCc#eV5$cMBDw~%eV-9V-SCOx&Jq2gOl!pHU=g6M^o<F>!WZ)3Ua8LnmlCG(zqz5)
z@f)1R>AoC&`kA>nR?D+cUC`4^dDc0}u$R!&^+wY)3$Td2qT)*&ry$T0cwT&NsR|o3
zSIct8Hu8a$jD?2>M(H}8A<i+Cn<`sUr9G89yq<1s|G^FhAOGLZwiHMWebZn{sM@@A
zGf4t(I1D^Z>O#vF)70=5@%0_7*xREG`51zRQIsc`GAX8y=Uf3Q`rri?683v!sZlDV
z)aj85NP^ZSDYd>o7=a`Q&Q}!3r3ieTx3kG4CllIZ>h5R@jv7Qq$KP2V-+n?*l4?nC
z+eN|%DCeO+W<6`@AtCn4$&)zLrUN3fYM*iJ<xOPJj0R3|5|5u1c*fs^4o(;v^qVr#
zx@OZJkX;=?E50;Bw|ejVaKtV;Z#P3q-4+DnTTKWQh)v~?h2pFgeEX`uh`8AU-fWeJ
z$mj&1U4()Y%JS5QRLP&c&<Zt#%+6_SoMJ9`uWJ(G>Nt2eDigffa6+FFY2k(NzB>1#
zxnCRDagG|@2Z}EM$``;Yfgt)IkO31-7pfjY1b(-u+>+}p`c4jaYsB~ZZr#pZ!Y|J9
zubRbPf$PthzyfkY?YUU3U$whUT+m+N-Cfo@Bk#L3d#tk4)Qfc=SZ^Q<wT9UY$r^9I
zjIWoaxxwwYfsi1`A;`w((zgk3<A`MHKi;(k_ubhIMwD220CDC=&>=v$pFB_YRwfKX
zC(L@KchJs5pxh03m-N8N{`|4fU|Dh4ML-5fC;_gfHBfhJz63XFTeQ()-`L|qn8?u9
zu!?kj;f#&XD&{8Lh_lgBMemts9BR1Qz4w*eTKK)a(1HKcMhhz2<z=-V5dpVpp?XOs
z`?PMxhpDAfOQ$^#v_(~k<=xthwq%K(sn;|XMKyrjb?r7B6CJ$z;_ZQpXrhns#=Xtq
zm%Ng9g)=O5?qT+dy@$tM#qZpnh27oyN&Xb^QZGSrP(7!{Qopc*yda)G$rM5bn*I$$
zUf!6%6mCp)flo$2?tcBUIk>U_PLKlLdy{dX*@mdSBZIG#NB~<&vq><Atf`I$n9pUH
z;oOoq8tvYg{s3?jHc5+ZX?fak-Vdg9z`PA$-LBl?UYcnql4m05WZT4gLyX68NNA?O
zkw>;;zd9BbM%&IO^|}C~VKuZ1P_(Q`Ja=sMYb_*<B_^GvMg60{k6{3gTen?{1?0?S
z#N~(L`gtQ(Sj#bDEP7!L-6ea{S#Qf3mkY*qNt9bI=9^HJInhQsIK#muUc-))H=^tA
z0^@q=?{JCD8u0WQQ#Pk>7+$t)yx!*8?C-Z<`*UH~gzRQC>~RTrx`cONqDsI{!!sOz
z^i-6rDFkT9iOr{zp%Dypz`f_8+M`G=FhMHt(;XIST?fFW?s(dL{4Q<;&b0Gjh2lK%
z&;Av(Rg!p6dj|yVe>G(@|2q?OM1w=9UN<Xd(KJ=h^6Aa+hK`jA-QQ8mC25SDij@5Q
zH@j|J7BHSN&WSC#<Syo)GggtfB9>EeW6qZke|ml_CmuvRA5a<A<1_T#y<mH<|C}o_
z0{PyANg-0VQ0@ctzWCMtGfQI+-R4c$i+tBDyaWfl26+YYvL<#%a+@@t=2%O>!(Q(d
zA{N@jI}3r`W!U<13qQkY`yLp*YNvcc+WfjqDTCj+PT_8DC%}kjYlW*kv3LOEmN$Y}
zEk96$bieIT@Riyg>poV%U!we?_7S14vfMAt`$72n6dgWCg%ijQ!t<yav?6n6bg;?_
ziu;>5sglriMU{!YF5ZS7n*5VZl~Xn|awt@|6xKBy@|s$fn0QvHpaiNJOo%IX1ufxD
zdrHDc@$A~`bN^KWs-AH<-29s})p1QTY0J8CBOo67FEy9AccB%h)+4Eu{x^<MSOh7<
z5i0=Ax8rEo9j3=k)KOk1;TdERU+Os`Jj;v(aKx%s1QJs4APhi$Ijr@?Cxu^y5N^5j
zm<bQ~)P_a%Mde=SwN*Afqal-^AhlA#?K3}bq-|wcB~bKragPW;_a)TgDuAI5i0UUh
z6_}){PtANC#vDM^ep7?BqmU-yzFS3gLFVSj!c-!azRwm+A>|waxON<Sf}0Iy6IWu^
zc1KL*yg_L8U@0T6Dx)<wzIzmOUf1+K7Hf`^_^q<TkU)O|4FjCfPg$JfIS2tP<z@>!
z((|zTN6stWgqh(5``*$F;jyZGYTo*2v##beJwPNmd3m_3iVtnb&E1QFQ%NlPBb_>P
z#5V}9X4ICQWh^_0Op}7{Z(8+f$VQ%SSm*o*1CsgYayyqlHOA%D2i$c}ao$-G|GFC2
zWOK)8hsKMT_ISi*<~k}!v8;0!mI``<2Ef0jEDCvq00_?r(Jkis63kKr&$hgdj$_}d
ztMD&czp6{Am`D#mP_KeK0D?S^KgQFRvC@83*OAhBpu=6^=Ot}rtR%0*{IlvTq;5!W
zc|y~l9TuDU;UP7}>ON*6e7rZkK6E7Wyrn2mAS^37^Hago$K?*FxX@OBzx?$^Bz<X!
zy4NegvG78@l?9<05mW3J-)Os@8~9@5ohYi_i0?)f2oZVI^p76R+Sm_=y@o_M?vk$~
z);;Lm>ja%u^bZOqr$cuE$;KyjAAbgFhrH4--;&y$W#Ys0M918VU<EU)L`&}>C#a_=
zQRLl?Z~S1M1{dMcWJtuo(w?|~+#6BIh-fiW${O(H!h2_b%IZV}rd12~<Y4sHX7uzJ
zz+;{bKWap3<9r!+<2##z-exO7R7~jQ`7p>CrTL0j^<6sY+#sE0)n+Mn-|RqLI+8d~
zYU=P*MX|)RJ*Yjd?Aazg3__m;wchO^bj&dOR(^J~&wH&Mxyr+D+aT@j7|rB}{Y%Hv
z>aMrNBOw7_NX&s2Jk%3v$dK^GnETxj{X?277<%vv$(f41V6RDXNptHG(q^t2Ho`;z
zAhXm@)zkc9MA&%Aeub&}%WEC~XEXaiU)5gVS?{`JqXr&NYkS8(@+?pvC>nr{PtbXs
z1XKaR3MOw|Dug_w%nAr`%O7|s>vE}*ei0g@iH-8uNYWm?cB8i;y?jkzwSb~Ef@^F}
zoh)23rQiy_!k+p|3-`bThtw3)?${lBy2`of5aif5<UPzrR22(0boJilwLJR8?-j;!
zew`Icd`z4ZKYM|<8y=I>gZ&f75@vTYJp8+nCzkO%wN~YMcJXFKSpSOvta++xb>o38
zA=}cz9E1j0S;b-JGwvz&_QG$45n_Q@jd(ZVI&YyNx;G!qQ9-tk9zl+ZN?~6khI_!;
z{y+RUVU`@WkSJEnD!T!@4`zp~_vfB<;wmWbTzV3O;g4wkWg$hF?hgxD>=;0yA|{DW
zA?@0aL=yiFz>42hm?k;|t?~;m#1c;#h366Zk5dEESA9fw#2LE8^jA9sJBCx9J8UB-
zH^0Tj+gr1xPVk{+ofsO)b<s3a32>(=%&7l8(^GtTBRuk?Rb6AioS%-^&&th=`W9lG
z-`k$slyNy#rQ8pzxA+l@3&O??ArZd}cl2~roX#iU2O6-dQ1tj)&`=|FoTvBg(mG<D
zn6RFT*s9F<y(@c(D}SqKlfZcNH9!f@bI0xvy$&DXM>bj_ER$redW2WYG}?1xjv_fc
zl-X28!d}7yIt@hBuTwFC50(&c&AvU`r)#BFif>JA(j0gaB?*6*QxVQ}C-?BcjgbHY
z`{Uz=+*?;Se2~)cP-Y&U_0Eu!VJ@`d9ZlGr7%g=u(Hor2R?B?s6+(UxL122RudblZ
zyd$(Nni^pYe&E(y-ke7ls|9~RBFG<hbp2b>Pnm%HjMZy7I34GVgI?6v1%)&v9u0z|
znK=JK(rtzq8Zy{__zKP=FT?4qVR>urw<E^Cs2TIiKFEX6Y&FsKma@^Lx`B{SH8iRw
zQgvBN(u-u?P^P$erdStT-Kd$vJ%R|E*nc{;tqq2JqGI182oTLO^{=>|xx8rBn92ql
z4VhU1*wCvsg|5Ehm&kGPW;3uY^(f<}<?)VP?{M~dDZe?;hMDk<KzxFq@|&B)l_$oa
zH7xt1OQg6!tD$@U2QcVI#1Rlvt<PYVBq^2{Ib;&{BQ*gt?#Aj?OIj-C2``WT_VjiL
zt|ovv??be)oHC_r%F0?BXBuR=fcr4oBLaZNZfqm8^H;bLJ{?Hdo{#TOc<{g;Ux{*E
z!kNRE*+|y>8pPG<i3q-ZPdq5F8q;;ErMPLDE*bpDTRW7-ON~iM8D{8ane90E0AlcL
zTj0gOP%1Z{8uf?>Eo|`A48HSmvKe+Z@HdZq7bA^6)}|hqK4_S2A#&Ew$lIIng#U*U
zQ!wH}w0_%b0Pq^KHY))}X{xZ}1$dC!xa|kSZ3r^(H{!Bxr+(h@H0!qO*>Sh_d@Yau
zRVlZf73FwGKly0;6n+_uNw4kPFqzF_Hmk5WK#q!&bj9Avjmm|qN{Y7vleaL3A|=rO
zjwZQGe+Px!84+uC(*SloQ$Qf1*%R9z3!x%BED5I6Pbu(F+K9OC%;N0gT8S(tqgpa7
z&<o)sa(y4veT1GEc<UBhw3YU;6ONu~_LC1gPXYFJarHVs%-|PMLhOc*_@&uINyzJ8
z|I=j3C9fF*!>ZeQ?`YH@kbPw2mM#~6An(tfWm+z&JE{M_r`kFz&cuVcy_c^FKq^+V
z{RahkcB(D6kX0XP-p-Cj8fTb!l!semAvz%Y)z}sBUQBM4;r#((k^F&v?;8z#Kj7;|
zL)S9NQV|$f8!}vZ5Gk%PSON6~xS`NSN2`*k4?I&P4ZeI|!zhiqqIH&#nHDPVAUH=9
zdC6g<4SXhcnHqUhmTH=e+|8PpQB979fpF#)mwfp_xx0pNOo)(jKkO!Ht5VY*BmwF)
zY>z5r&*UK~4i3dA;mv{2$eW<aY!U5(oylv2_YoG)1_BieE-f|hBy+$bhKZiemsBNp
zF_k9ZCUP1>@C6-rE-LB6H*ly=@o|jE4E-bd_3QGZ*xD0<I+2K7O`O8b5iAR5M%!xx
z_@rLOSZf5ixZY=~Q8eC~&>YulxN9}76JJ(l$!%AknZ#Wb$d}G2CkSzQZ;k|&6|p_`
zGX|U0>25ZF8gF??xG82Qep`;;HVne5M(=SF`tH~a{*iBz*4>f3YGa`$%ZJOMCIcNS
zmjq8QyY@C(2sd^EL#IGTe5$GfrJjz`UsC!jf+Fl--Do_d?bc1fvz_c*=|G)HzovJo
zDp#AarY^cZgdF!=m=cnJdR#5>hiLBBeI%yE3k8^#OIBa&(1@R?=8P@1<vsniCX!vA
zvJZs<vT8O{75y#$$`KWLQYK<#-c!6m4)(%%Q3yL+>ZrTh#1oh3reS1Q4;5K;#qno~
z@3*!&`UDhr3NTOqE4#;$=ds0j8WE%rs-Ug{=X%yosb_Gc2^*J}@il`|ojW8m^f$$!
z2Mkz{j=Ps!(i2yj;*c;5RgE)3!{;4XZuNyFI?VKje7*a}Brqpmedt+r$mJUIRt_eB
zQN?Tbrx4=3H2X8yVmFApRHd<N47L{H60^`iI&rD!(Zu<eS4}Th2{ScZSBNJ7GAs^y
zKuU$!CecRClT8*Cubi`&Ha`+gR<6Q}gp^xzE8$#Xt0xaT<c);PW$j{5M=^6+SElnT
z^;oQ|r8G$DWs3355aJ9KX-#piyH&47GJ2974`LHCf&&uy*6g-@RO`SWLUz|#o!PT%
z9ahQRr;jt@tOm}oS?Rx*?*kWBQ;b}DO~kZr_CGk}Jb>RN_?mj<2jfXBIAAShN^@xl
zAbRGVCC?f=5+mA?wA7#QwW*6Dd|y-Jr%`MYm{NGViktEFVgZaa__99?rBP(s=SZ9#
z-H$tUK(J%lig+O}B1PM`<(*P`b(Y?i&}Oh0RF?SkY(!Yn<}+Y%L{IQXr@}?oMR)SX
zpPai#uckT{g<jm%%#EdV2+t9NE6Kk^xZwGR*FUvt$n&9)qg^9S$)<w@NoGQDh;Q_)
zDbw(nQxq~1XQB+uji?OH(KXYKdm6M*%Fk@Ik8&RKy5u!?Gk_Dw_g8_q$B|mI`heZg
zNre-K&ySwQHO1l_<-0gl8okOI$XdY*t-rs9OEk<SJc(q&J-!3ccn9n8Q3UW>1K0SA
zK$680#MS|an+P4WUY&N7U#~dj6bC_S2u`=15KO1M;+Hbr9UR*Ck5S8#f!D1uI2;ou
z8fE|zJal9EaKbRPI!U6tkXC~pa3yc#gI9G}S5D7gE@k$xys%+gx~>SCK#)IK2v?*Y
zWeMv|zju*7{`$aKwMstY*IRG?R?=np<5TE=`1y4nvP4-}fHY*m*e=qhy-sT~CV}H+
zE`+BIgdq2uGGGEyuMiw}w1kEb*j<mSgz`b8Y$38I<z+NWnL3TZ$jiLKS4BOT4XJrl
zHp*$Y(I60)fBU<hdcpsMzoJcEyrF9=RrN`TQv%3op@XLrur7}7)KGXWmSc2ng2Ba?
zvWkyuzBN&dTyvqGbOPHz+de>Vgx-M`2lp8qp;*NdCg&JlgR!wjF%sLe(#xLlmCa%i
z$I)nRmW$#OtIkOtqU1HWinQ~+nAa82_CLjE!d`2)41Q*cv_W;~&sLU<lVOOsWZPVm
z)nQ?(%Hf^}9_SJVt7{<h`6}G)Qz(%!JlA&*cEh)BU2LH!N1W_ebOt&>AO;v5>~bOd
zYt+qo<iEsqeq(5|Eq0NNb59Gd<g)EedL2FnVrq)5Y%PZRa<@4Lo_O}fY6Vu>h}uc%
zPQPy|xGmO?KNADVo2Mrsz`@rK5GBjCU}$h|3Hh(xT^TKv$P;%hPUeF!I?4jv<PYKC
ztK^Y_B!3(>bEpJEu8DTx;6ZEA-7vKPbD24>lnf^Gz1o<WIM$Mb_t3mJuM6*>lsN6R
z(5xj8Z+9FW7(YY7^i?7$-Tq60h4)&q+n`KtcVPTt3ErFGjH-nMnU#)!pNp+LgCOXq
ze4zNy_qch*QZmHs`7c7?YTj<&P0Ws6{1ju|wDR5{py3X%AeqAUm?SjGrPz0($V&W5
z#m(L_2k+flXF6M&jDEU>?@gG@bZS8-ARjBeT_3;oGK=fnmLLm6F!-bi5F=fyEwbhJ
z$x}1*)42(QCs4Qsydr{4px5|ikRC}Zcji^lKF_C|0_BDzZJNbzeY3&_M~+U<1;E5>
zs+fKLlL89V`1Opy!KP|PAs*Au4!XbmTUX@e(Q3krG7b`~jk-8O>4Ms0KdakIrsn^l
zas>V|5x5WqC1o0Esu@PWM(}rWwVUJV@oLaYVmik}Dvm9fTP&$W;2xP2YRI}#&|eQ0
z$ngCtYw@NjLg95Te)>#SmkRkZrldA@b`+WTxDN$y$o==>3of3xthw5G<K4q~pg9(1
zCw(ADepIU61$zHG;dzb^1!NHYf%o9us`P(*F@p2Zqu%;I^W9KUsH8q2Y#p1cC+p@I
z+35Cp+fY|13j2&_<I1D<D(l+AkEwB-d~R6Vu2gCsxJJr;R)nrl*`!Wuwd}qfc8)li
z;YS0=xYZalFX|SJC=m(a<~vOX%zzG#xmCaHNS;Rd>^+xWGC+0F@P^Z)T0j(oCZI`!
z>g}B)uR3>;hy2VIIVCKX%JABR(Q^a0$u9llmq@?5qR5Z=M)hfu%Z8)+liVV7|2_z9
zS1;cccG;Ha5BHd4xDw=ogYQOx>;>2Gh%B_~+W?SoWq5aiXzB!R=w}yd+ka3;gR_@u
zzK<N&!Iffg(E?OH<RD3>j%SIr8*{i&_3>)N){$~Gl1vyW;+$jojxE4ztqq)r7Ocvq
zIEp%48!&kpbnx9IG>I&}dMW@qJFFImtgXDgMNn1Eg%xLFsVvzG8-B9=XjnK`MK-E}
zwyaj1OZdeZNSHQ2>QI&Pq6h}t3bEyz2zVpWEynm3C)}|6A;!t+T@L^B*Pcaw)Z2H`
z?^e0U1m_2*4uiu6V-Ap`X!p`;cOj!XMPHJhj9K}T0U?4wU#obDpF((7-z9rW@VUGY
z@A8}4UjzKQ@6>%)UtXkRm6Z0DSv57?Hs$7b#ksFOvXXItu_|c{p;)s$(JxxX17wba
zoHX`qh*3dD$o+S@JNB(A7gQUGVb84LsS+X_(R}89iH9R>B#=+udYUmZcCs1z-^@s=
z1?QMbMScrGHme|s*GqbS+|hpk1qM%DZd^9lXnzMt`)4PLU@pX%td~+%h^yf7PF7IK
z6-iZXYaBuCR*_C>tLX(;)IT$qX2-u&kY=+5>ynAK!p)!G(uo-#+`WO&iS-r+Y;Or>
zQFsfO{4hEGGCV27;8$GBDw=UiESazbmMKr~(+dB($6a{B2$~ZAAIVBO+X(?HMazmr
zB!EK4@;P-fSZfn6qiRl^dc6ZT^||Q-xiT@OQz~vX>5CR{r6X3BkW{s;*c=9mURwux
z9UC5U#mFTr=9kViV?jwPl<zb)-K7oj4F@i#A}_AD^(q=HY{At@m<N=8+m<*6Xil#R
zN^XX_X@`w|0bYoy#)JEaWtT~Au9FjdYYUk$X^^o)@-`cPe2Y5z-x9FYr+27oz7(=8
z-huX6x~Cy6b{~u|G>wM#2l~oQyTlGO(W|m(5$mT!NcY*!pfmcBD57o#%-$+;)bhJe
zSM<U%O7s(t<P3Dwh+@Q_Flr(JS+c1EbalZWq{w?WUwg|twGawT69gqj8D_+SQm?Id
zP|K}yz{KS#J<+P#A>(F<4Hy=gxXC)A-C6GgB9gp<@>Yy#eN2)fdHN&Tc?t;2BNBiG
zdReCwi^N+R!oVqOTQBW9kN-ab^tl7dT?LFC3hupu;b{r4b~>>^K-?8KkirtxXX*l2
zVHXis=nhi2=fn+6z@c_ie-0w5;Um_m!o-xlBPgW!2QF@KH$IEG+~;(TI3I<0w|}Sy
z=OCddrJ~p3`-nSt0#P&aggxVq!IYe*g$5UaJzUWL{f#XbpUfOs%U;7J-Lq#`ifVk~
zoEyW;Q|E-O3mk26oQR0hg8G&8N5SusnX`i)#jCQd>Xh=+%FO!kv{I)1Tt^iN(7wua
z4A}QxdhTWgKxM7jIuES(Z_%Y_o#4)^--B#00RO=uf8D+g_*{F36fm`etHQs3tW+Z*
z%~#_cg4O`gaDJW-d;LDKIP<yy)CvNVI=a$%HPFPGZ)@YWP8pPA>=}syK+fS{Myg0x
zEi#*l_+Q`Hepg;yTTJ;n$#x$;(W)#!PT?Vsv6<l1$+Z~Z1c4@my3o5U9$JtE9XMc7
z7&6I0l(7Fx)_$(ae>pe{O=C5ev<;<zx#^i+ms%dM)!#%8D>@vQF`Etn&R;p$VN0<<
zZC_r3J{R`xIaxHBLB-~UlocXIrHUGl0Kf#+l2e&WmD;$Pj5xytgm-SUm=k~&Ge+>U
zAF+2@d)KSw7fv!P6EVzYU`J^|_GSC(SQ%hKBSf#7w*0hshYrt2B)8XI6Q_`l8-QZl
zEc5S<?LC#%TBzo$KH*QwWH-+AVWbJ4U@K{LQn?~>j-8o?O2ttub$TA86hMD>rnErL
ze1Arr32fp@P^(l|!Jh2tah@tq`}!_sioHGJnGdCf)A;<Z6K0DtmYu#?`M{!&3&8eo
zr_@2Z4GZf<g>j|Qx#JJda|UnN?|g02{bNp`wih_St><U=!p5&jbYlhxKr??o>5Z!N
zW01{E%*z_b)f9}i!u$>7w7j{XT+SQutuC`gY)}8B`nnDvr`_|+0y!Hm=|(C_0<v;!
zBStbfeP-XgU_UEt2gAqoAz_AG$U%%Gler>XlY6}&%>~Yhr@}QwuEs0eipU@mS<4Ds
zK#)e-W5EGElOFG7;MhHEBq+TsH(R!nb*aT+DIYrizv?^PI6ic4ig&LM=|E6eyn9Rj
zkWHE0pi{okTb8Fu;0|I9X+9-~1O`y=)1VGfR8V2~jz1m406UPVsfI5`g}HYl$)Z(!
zDtM#}O7%jTud?lfyY!DtG8=(ApWTmiO54VfN)7DCCGtFsAY{!R&?mN8BCe-f+%3O5
z)lvw+v;R`2?Ny~RZj?w0$5ab=-<N*$yDr!dysck^umHrfr(o_Qa?MFgFg6^c4o%Cw
z^au8<AxIPf93$3J|0^LKXXybeEuA15x>r1)?v$RC*CI!+kaM`AM3-TL>$2sS?A~WN
zSIqyktk8*6g4BHIR9FIsQ_4B(^(xL?%_1l}td2>7sk<hdeC^LR-Ily0uG=IZs;epE
zy{(b+Dek^-Yio9Ub|p_dvaq%QsIb&^W0g^UXjSNnLsk`9>S(A=ih;B2B32mTFY15-
zNrO?WVXYDE_~L93BGRQ1I_8u)Hk=d1^vj?qFd8lYXDMPB9NQ^hUFKL!Y_NE|F>JWt
z^=Fg9Ay1*7#CQn{YjRLDK;<~G(gRv0AN2<P{Wm58?RDmC>Sk1;ID63`uwIzF$56e+
zeZM-w&qxS`G*~NUI;7Uq5+NmE{dLzR|CoxY{f`f=26|FH+`y}Dctr|X*;FPlR8;{J
zfnF_VuR=9hMC(PdJ!2L73R*zuJyWz)`kT~8xke*LD&gyE7LWsH!&oDOc_2Tne=Td{
z4Z4&)O+d$E7aU6514(Jgr1>tV$MZx>J2r5Jm(i+Kcjn*fTGwplBS>u$<qMoFj;#97
zrDEN{#zPDbiMgg!Kz98AFnhZ?FJ>y_W9GGw$-8$)8l_4ec^_PeXPK9l{cn@wc`N`?
zchf*(mZCbdo9`jqqk#|3K|03Dce8cOU&;xzO4m!JOZAX?tpCgri%n^)eQ(#Goc(q*
z<wBDHV2RPkL5!XLbX@OE`!_uz_ce)Xu<)LUkpAlefl3yB(q5VlwbyPcj64e?5c|gl
z^|euLGu$o8UXL3RCSonOMj%QyXm9H-5iz+s)N?`%NLXA*Zy{~$t@G3?!KdHE!2QPe
z^_Q7n#j{9Ku2I>{Zb&8h0FO+JSE;Bmzf!~Oz0DU4|45IxL75BouO~$DPbZ^s9mUCR
zgX^PaGNIxrMtH=~MUdLQ;scOTJ~Z9vBDm#?nsJc40z&C#-Y<?d+ic3ULaBe{J$URf
zl(>~Cf|TjDGB7pso;k7MsKAgv7)p6>i#i1*{vDd?xG_wOLvhm$3Nxic*m%^Kk?0QH
zKjlrR`bC&VdBYe3{4!tX4F_sJk!;M~F>`bNVjpb=*#_jHX&itX-c<ocb9YT6q1A+D
zimZlEk1ikz8ouNzc4ko4VFpi(Zm!xjt@>C5e%6=w2UDu1Jl|?!ob7NH^x$@TS(Z4Q
zvq5Z-mj7@2hZhfIWIqu0x4dj=ljhTYVIZ>O!P62?^DW|9T6?dCB*lu|ooN%2Q!zns
zQy+bO!GdRZikDQQ>|Grkuw@bPOh>j#YL@Iow@k~7ti%YyqAlTmkqu2VSfX{~sUu5V
z;y25q#W2i^{U$bezKQCGp;Kc@R;w@EttRE*SvR6o6Kdj5>(2Dn9wQE%qd8g7oq>hi
zEdBsk*t-YwwZ0EkDl{RZtGwQnoVo$9hLvAkBee+IT`J-tYwR#q%em9Vt4{6IWHW&J
zwO{uoTAv4fG=tLDvKLfnbqF4h-Y&e%r#`eQhC_%!loI?B3MJnCltW+cds(1%vB(nM
zpYkF9nmk{61Fu6O3R$AhgGK~c0BcER2&u9W{MslP7r+syp?-Z~Y3G(t<5~MHoc6}p
zy__boOqMMrruk;_nT1+EkZ>X$_fQX^x)XMaIc-@FZ?qHp!q5<g-&Xhp@9Wi%x_>^J
zlI&&>StlQu_D^7z`$Wud^Sbn_ERJVrk}`G&YuQ1tX2U1C$L`ck1fR=b$!|hU!WLRj
zF)jHj!-g2t=xFH*5)|YW3!WeZrzh9+RCIO`zj~~HHYt0>TFfJG*q8fVH9hsCYsFx&
z1>a&t!K{qtvXhl#6IkDkds3>a3tE52p6*hKus6wR2u18ZuNqGFnoUwaSsphyT5pYF
zxgdoE60LgHf~O5tZ9XS>AYxoPElaKrNsPU9?bHw;x`d^hPB{yJKll~?%cT7A*jT5D
z#)<o@NY3;PvPqR5)3QsUxc%n3h)r=ud6HtB1J_AA!<TIofp~<UA3V;5yk>5`N@Fg^
z$cBwWRY%3TY0b^m^r$@{lnaQL4>nYAuq~uS!v@GT0$i8ROV$|gvLV#C(35urPj65#
z9U8zA+j@_tqCQ)>&V`*3lXw%&?rHxTh*{^-<kg%&QuR7G>xuq857=)ksnt~)wzZfw
zs`(#Qp`rB=jW$sI{W7fm0aLpsgBm~yv(abJL=;iY`8O{o*dm%I98E-&;DOhC(o^M$
z90dYtIr3zurCm;r?dUFB9kRujjTW3Ct_pbaIRhb-ll{P`WTL$H)yRfMh1QRt5D87^
z!&w7~J`uz^!9|TR@F(+&he>zjgJ$ra&i@^d)Q=ysS#Lm-J$0Yi=ISQy$o6GT4s+!#
zIn&W(H0_NPpLuZ!@uG4-JGnlI+*g|?M#qK{G{Iq*f6r}!jFWG<FMLwP@+`r>|9w97
z$ls$GLxOe&Ycacn@*F?+-LuI9DoE9@_S4C1P-@XujfIrTM+E#^Qe)n(*(bb@wBggO
zFWzh~qA_@@ik;878cqhOv!i3tDwYER5HF}enzJO2JP=+EX^zpg)^dw{==W@=-By@j
z4<!BeO8_^$iIM8WACPw|lX8Kn@Vn=O<Ep(9j3{ffXEl}TEVv@bRu!nj>iX8(^9VC!
ziu;4Xb2v1W{)HuY1)a_CTW;?m`!+_HoaxrYy_UiWhGrFcbVD6O^$7+Qj*l-q6Le_{
zi<qMU{+NQm&b<GmJdaCg?j7$M)MLAUC%pBr2Wm+LTFg|t+y?c896+X1<~yZN*;4=b
z9qsS{X17S8fW_#hiNR#-^ohHg`qHB~MC23oAqakFsi7GniQRA1LY@-i7+-24%IFr_
zAq;3K5F5Q!*Y$7TLiCV9ps}g7Cbyy^J$?&4d1WE(>y;P?IA^mU>(aiOZ`j(zmN-aP
z{s#Xm2x(K|X4iLH&MP#1gqc}y)rU@W0pov6lu8(YK-S_2Cp|wNs=E+gCT@t2x#9?>
zDHI0fp4wtK(Si{3Yh3&;p=wT0VMQ4H;YEj4h#kF40AzDRv3>$0fF@uKn-KkO-4O?>
ztMJ%SD`}G7=E-bUnQtwTi|}^v+OMxiwPg?-n<gvxmk`JRo<xYH5@z1Prepz&XPoj(
z0l6Q<u0u0DU@#rB+nYvvalaEs5McC6v%|9afE(itw(BdN9>3VjsLxdNrrM<cOq!$r
z(a8k|n133KASZsQWV?>2Q0hTY<P4Ms5@u_oQf{pCS7R%o>gHWX3TFBpd_Yz#QY(&+
zK~4^8bNvz2UEz}b@Oa?_(*EjP{U(a$(PObDI2JD3hG2-vCua@zT9LF6J?+2^EA{L%
ze?LjXa+W878AJI>)sD<F7^hK4LcG23r(Rr761LZrXn5;H*4{Vz6xlV&+|C?=hD9}n
z0-__m`?Y&5DYNNVux_c6j2u}uQ_`%1`u<QPr8I<y-Tqo}>6DHXSqp`}gysNmfE%4~
zHW?!`;rrQi=|`tviaEZ66VL+MVo2qJ4gnL)kWGtfUst!!geoG?lmVc!tNaJ<<xvuL
zWRbLs-(K8<-2i<HG>l&dO9Xz8$|%6H|Mo<L3p7ua{f1a2Uze1O-{*kF2SGRSH|U?;
z=e2VpbOa!sP5`v1><PF+ZCZ61ABH?`kz9mXm0ovSL;;<*8pCdOG7p36mLXKD*@sOC
zb5$-^l{>k1HL&+rpXTZXjqG-eRV~o8eLaXbbWr2Ax5lioLyNn16q_^3lRyS=iuC}I
z&9QSbW%aAu4;=xW^_+B<NPc{eBcGBjY><#T(%%=95+~&zAFgL19rl2}ymu|AoWVk7
zz)2?uVyaIo_E}A9Bl0KZR>wZCL`A*;cG_s=H!?YdbF5w7HM6h7`-EDoi(kPd1}E}f
z?PO+lLjL%3FnT(j-7LZ>uheinO0jv^2Kj|f*j8Qq;N*I<A#vK(2`XMU8G=Zs?D_Iv
zDlP^WN1R+^>`d8^HW<ptUvMBgAW&3hC;M;Ld;j=?kloz_I187kC88MgPF>Vz4ZEEH
zML@d01okLWEoN~F<+p8pRMgYq3{gczEB;&SVs4}^>cXNPLbk<|+zdgM;t<ust5%T%
zmxHyANC)$OL+}|q%?%+4I~E7$+2V>T2y#UIQkil;EA*Q&CGZl7;T3K@V6;Q3iX%ik
zM<8*&Jy*aAL7@)CG+c0zk_34_{<4v4*pXXtURp}9U4gbV5;lXiW>FVExiWkJfytxr
zoO=#CbJqryV>}L}P7kPUQb7NSD$MAJkUphes7LGe!z(N6$+YjA%BCn!L+DTNG91SW
zIV-p_vpJ})m}lLURHVxc{@{^$3vxG9x5pX;r^Mr9(iFa$ghPm!ykhInAJGSVIc;L)
z$-N!kv`W@vT6)O}DpBMqPP`}>q015x#jwL^U@Yw^D|z{Np|<6Bl6}YA2W35vMNVM4
zsk`x?H%JnqL)E(O9apI;^?@~lW6Y3%W^N2qhldD?saVeFf$-+}-|+x4>gjx56M0we
zC&zwR9K+xm%K3*8LzR+(XC;v!u6ci+^&u(V(7NjIL5pCc4odiM&FD!2pW-e37F$1r
zmvow)OX|23b+|to1K!*xBX|`f?c*q0HfEMhPZ`2k+@Vm>>ZQJ(_c6&Si;Qg3t!07M
zg%8ei5XcLX5)OJaIA;0GKL4^rX%MxFREYuKNMT9YtvzUOblPQK`GvIkVu|jd_o1n_
zMhyBrdwn=d9i8CHB!El*${wK@yX%e4SMZV@AoIRilSfx<2aph8%A(Ghv7c$yUf`O*
zw=6vsf!(>eLw$|(0+Y2=<msnUMaU~?UbY~)ULyE>mVuhY>O6YJe*ZUfA6eaTdyp2*
z(^o<u`10&>rFV#!LNLnBGu6oRtl<(vJXTw(BprBu9KaStXzli95T_Y>-a-~_U9=Nd
z1(gth4s{#tu4ljV>!#2xs}}v?M2+=cWWs37YvU~$GGi@@DKgRcR(_fgUH=*|Z8fYx
z3@W(1LZYyINcrK%>^OmT_qbBVm7uA}?8fq<n9_XuNEwT3R0c7Yn#DE;pBQv!ZJUOq
z|Jsim88_)b+1R}4nQx#Jr>3{BTUdC%InDX-I3NQ5y5Py5K<P|JhnS3MvC$)e=}sH!
zZ{ClQX`&aezLIm)CO=c=i6lExkKzUR6FV#k;qYCAp4XqK5V9-q5L@;h_(@-i3H!Yz
z3YBG?#oBR~e5-Xxs6x3pf8cl)hz1{gMfnt~QFCz7iT1|4><dKd3=eTG)2pwRwK;lC
zuMI7miRgG-y-vB9HhRY^zC0_b7)xjDhr+effFHV55O2u5B6s!mEuMMeLKio$%G-W$
zR2SB7lH-ttn{)#tT9XKQ^7cu$xr_mMhq#Y{rOMH+3Yk6~!LK@f$6@Si(P8&Vg2s&>
zp@=rjJ_gaFW^?HXp%AK<b*!N)rtiw4!xEL1H<_12bi<U?Oywlmwz>u4DuBnh(v4P7
z15$UDqKO((nMsm2$1QL=x>3Xb<{q1IRo9_;Q@YGu<&v(*e{n9sTz}9Bu9Dqmx30o|
zN6N4P5YaCA)*ULYEs!!g#lOg=6c6mB)_sD)r1DnV%kCaAW(5!OsucM#G}aW!@yTT|
z;-p;_?j&32S_u1m4aNZT^gl>=T5mq?0^aRR1&^#ABMD-UPeuxuZTK_ky`PF*2@t3k
z?6n!2J)2_w%6$8HXyd5dqP`l4->*0g@pvv_9R?q-d{uYkUp58bD-T~`E$v=BkVGR4
zB+6X8%w0j^7X;=iHNLS}m~z5QklyxlzA!Mm$ihv&k-+75()x<eqrjeLuRH9|6jiPl
z^kvS~QEYEfO|5iw%Iz}~Myn-XG(UDuOJ2p}rMhuUM-uLSe7)~RkG#@}FLaDvAg!Q2
zm|rD5t@|>&CZ(v{@MaL|(N{LgO=Lb7^>X_HQOC;|hH7UPsAE1<DsDC^YfpH>JcALt
z<lDeyr69=2hL#A(D4J6C>{V?U=JS*iuVV@K-lYOuxPHj)+J%jTLV3Ht2SSD_-lh#T
zru;U&P>gGpIzIH_t7nr5Nl(|AZK%V?w>2-Tc%k?)fXbod>f3w&483-m<;3RKWyQP6
zDJl`&6;VcQs{d4MBM_pXu{W%3f_F}((yT!rAuK|<&wrUEU)A3p)0&eXP1kHBsL`z&
zK9cfyM2s$ctPqiL$ey<|W51}+eTeMKq7;c*S^F?;H^C|+hTJHF1Wo9vsUO3C)+hER
zy;vrsk8*etC=-iy0UppdX^YC{RU#veL>l6YFfL=C%M*qYHr$Cd<7g}>7Eujaw_Bg?
z(-t(W4LrT%&Tam5pR^7hMrid*moRPo2i7KxT+G)n&FVFt$E^Z<-w4DzP=Dd%Oz=}5
zq*W5%qI0=u%hv4}+@qr@SXXj7Dt<VpUL!o~bTCiLxe$Ep!M(F>mZ__W1S^tzniP{T
zGT8gU2iw=Qy3;YnMwy0(%T%r>&64fOg(D8wu)QxWOzw)v4?=$on(^8w`q*`CLf-%y
zb~A?`F;vAwDIbApMAYvz=8!f<asK;w=1-n~n>xFYxKUCA3n-=@GT}{oME&SlN`9K6
zKmnb9u620cm4i{^UDQvhhLm}(0apHu1BPk0NyKVXHI&Ratt)N0Q9tO6=UOSl-L~9k
zL%><z51<6e(lkzE*z{VD5xQUgMEM_?mSdbm$Ez*(mItaS+1<48suzl77P&o-?^2^S
zvkt3=WK0Cnm;h@n-#G&3-Tzb|o(at%m`#^hM?VX&+?RL~uqZ=hja=aO7J%lf+e=d5
zvP<8G400y(*I(m}zv%Pfw}>bih|6(!h=|K?{%a|JL*|gESMaw~HbSI3SV=LcvjE&d
zcci9h5LZeLQ4<vnh@5HT2R+~mKCE-%9r)%F*&(y#D6pm+<L~V-=Y8$I1KnUiu=cAO
zH+my00*?Q^UH?l3yXRFXKDQ`usBg7q(Wz=-wUDiM;vAnA5HbllDVG%}bsHlvr=Ga#
z&3=OTC!O(PX=%vSz`M0~_5j6Qd`nIEA>BG^?Pfw%^Nq`n<CJbVWe65+fwGt6V5WPj
zQ)q=q3qi~vR^r6)3f}hV`Dpw(qcM&_z2V5TH_oh$OwJutYf!$re;*s=wPs?^;`L1}
zce)?Y>p=!bM2^Jhm}W-|_n}VR0n-)Fkp-QkApQku%!9eSABFDlWC^6oC-8E$=A0*U
z(1`cG)@0ZlRYRkO;*AvZ2mvmJKR$JyHz&+24aG>)X#djpHl_9cn6$wQdtlVKk=hn4
zF8KWS2gD;yc~wr_@l=A;6&*z@6Lyob$@Q<Z>fK^z>ZaXe?~NF4sQ>mUQ#!HtxOl)Y
zH2@LlnM0lAt<>PXea6MmsE9c|M5s~1H(RQs%7EnSzg3R7=_hUWURY{xRhe22pHA#f
z<24K;UtQD#@FP}m<We~Nk|$!D`wmLy)&BD2ed*UXc72`R4uUlqu`>;6Jdcb7x+$Xa
zA}ppn;OTB)#3aJ(QV_hPg__St{+I$KC8YEEYM}2C1MHvQU1$$E4^u4ji8?%jWg#gs
zd)21XRH>QTdHn;?&1iOlX)?Y2-5@C&K*j34<75lZc_Bt_t5*rGrNaT;rPc<W9yIqW
zTLNZIFziP7Q~p|Rw)6l8K5T<@)%#YO{cL*<myzu=K!@%25$W^f`mSJRA=~DapU6st
zTH{e|0%H%+<leE4U`MQBNIrutIScjII}Tm-ZZ4UvY|Q7#Bi}$x`e-Ru#!>!TtMrtT
zH(Ld`kM@Nq8>ga3Zn6SQ3tUqdSvd)}MNW181h7oUluVjEVudT%%@-pNCF`;0(Lg>a
zeb(jc)5_H8YM94pfi1z5EG>YmlK3NIi-8ETbE2^&6t}%4k%}s5aOAYV>S*@qc%DLy
z!0>WB5MajcJc&M)0A)7uPzLI&#>)nsXd?GJD)#cbLn?j;uPJ16QhW;UMt*f)ox%GV
z-DrS5p;caS2(U+t|GbAnErQy$kjjRntu;mDy0f=X#D}@MN0iCyHKnil8euz6;^m<9
z4lpt3uy?>U^y3H4WhNHi!E}j}E%a9#5OYD*IUPnyIS3wckcQ5p9?fH~^JA-2qjVBG
z{mta&HOS!_JQk<>pwSxt!~kNAkyw^mA|(0q6!up3UBvp*THF`o)vKi<i0Fl-M?%+R
zdzvyscraFhTUrdy-e@x?gV=4IRX4TCMSuJDpZ&JqI(UxNoDzNmo}ir(8AS<S4(f!~
z`<)-nBp2)W6BrbJT#4R1IWUZdc5UDNdS$7?cxXsh_p4<t>z0Dcbe4dp{F)`FqczS`
z*>x5k9l?x!aJzn(p&|N`xJc2(@ME_}%uZ|wXnCynDxv2l&3=|_^E@Txm^G)hK<Geq
z<8r{0zJREHVkz<mx!hD-$%KP8P$;8DPZwhiee9D$l(>38+T#sbyS6El8Rd|<l^urf
zgOWPVEY$mE;-rr?#KB5XX{3|$CH+W5(=UzbFP)lhm;_zJyL1Krve8hj$g<xbu&0^J
z50Gl{<QEc?Y8DDPo{LhRaKW(2y(pI`a5Z<WSOj&u@EUjd(l!BQupKLvpI2DG`f>_l
zr+<*N(yE;eqnY7;vvpqp4hN0104oAPXVM&-v*Fm3_sP(xebcbd20e-`@yT_coRF*k
z+ATz&n>%0PoUO_jd=Gv?rb55Ujb~1FQ0@}Lh_kH3_^`;6f>@xEKve&@*l+eA7p3F{
zGk*cL0{*nWX~BC;<!jtWy;vKrORA~z{w_Rgr^SZlA&Vnu9?pS`<ph`Z?1>KZ_xEMw
z5xxK%eY*tJgT(#9eZ@Z0!oXheO5TYbnwD()Ds`F99}fgc*SMWWdjgJk!t#LBT8#Er
zUN&+mGnP%82t6L}gQR6s`x-`QR}dp9p=ymQVFmUvWn^jzdelDny0q1*=DT)HomQ#d
z#e~iS(0+KofV;@&7jk(AZHW*gc{^Soeaz<Ys3o-83$iOtlf_lo3epr)xWBl0uCNk>
z<nEEO7FFp&ZrI*hVWm~+d$q_WojtOrnV7>g@iY4HUtWxRvADlkrAVq=v+;=;2_Ha7
za4xUkX@?;LcaagA;Y%?(qDWWbi!h=`o>O*;j~OV609q@~gHt&HD%NLGa)FT{ri-+F
zI>1Jdklk6pzuDn3`C>9S7$j%pOC4c5${lDA(9b?|$FfOQ&@Oi?(pV0{fC%uCIbomr
zrD^=zH8HQ32fN~%MsQ>!GK{4?pQ^osv<=36VK_?+XZfkW#;1|l-%}fFW5o4rSXVl_
z3}l5zm~$Mv%t`pwU{gzxqYw|si3#<pr7#(!I}|T9F%R+p$PpGg^GV-Ja-GSK<Q>ue
zQtKZlF}WppbagDM981q0SX^O(1(;pr2+>Z@yp1%AYm6>G)SO~Rp7%G-kLqvyuPUrp
z{qiP4(wD?b)KijTPw9`<x<W~okQsU;w%JU0vv%;Z4np?1AJs=;)}vK3sC-KNA;>L1
zd8l+<^qek@zv|y_=-*+fd#p_{g(gBK{y<z(Q(gf`GFozQM6^Y!ZtURc3NSjLn_8la
zZi*{NG)-_Kj_LW{&A`^-j=TXpG0n4kb}XotId2hWXrmY(W$bm_8UPIOMfN(sA*O#n
zg!mPlNC$V^I+Ns@4$yj%-!W+wWRt}iNBp4e&TM(Hq=}}GjEs{$kk>`hNZ77Gkxspk
zi0%w&i$lXPH}JVr4Q{%IdmJNyxR;sn4Ifvi#53*d=2)!|u!6ImOqH+IyHdvWzG=Gz
z+h9{-Wr&+K@eZDMktZErkP4|olY(O+6X6ve@Q*=ERGC;WB|1%}n@BP{sR+BMUChCd
zJmQ3C(_2}ep?%izAezb<(wJIa!{gP#foBcbwY(osxdvUyyj#vsVMP>Ue=yc_0V+8Q
zV+{f(04gP@%b|P2!m_ujo=LY;#oN(9Rw=Ju7s|dYQ%L^9UYX9KxuKv=sR|0Mm~4%0
zRe4ZU6Ag<!4;QiX>m2;6y*gYKY__kswYM3yw;EgfdE~4W5YrU0-Ea|6W9)ywd$JGG
zUX$XQF&l!_UXwOVg4mt5MhM6RyGH8{m>n9vaN#P17VNWFGif3=b&-6jyunHd-7Uq}
z>K)Oyd$;GA^v4I*$jCBsviqAaejb@R(`tJ1I8)JD8@AzsmtE|>Hs?^L?DMvGLivEI
z4KA*lkZYJ1<bvXvc>X5VD@(qJ<wBQ=OC>{|L860wG>;SC)VmXR=+jfj-_CQWGqc-F
zDYH0NTHjOAT8f!yDCi%AQG&Rqq8siqu50T%<pY|niaEA6z|Z9+8Tp^gmoWV#0e4e0
zC3t<al|%9875QvJ<;5*vl{8ZSPQXfxMz!+M?<XGN+92jlK(aLVczd;inm)k?sXz=5
z0#~Pi#?3ndbj)}Oc<m+T?i<w|E{dDd(3$%Q`}gI=+9d)jD7_4rLd)tLURlX8<4KSs
z#~+2Qq|owk`Xw0}=H83m0Ro5n))~!>5+gTAlD-Amio3@8LHqjAUs$@81%D(3mqlw^
zv4DvFXU^h_&}7~>0heA^chZTW4u8hxn~F+}9h*p^j57@!zYtZm(Ax1#dMFQIl8RF{
z$;ImP0TFpTXcILSSa6cOLzQ0<I2lp-*josI_{j~&t7gCyAt*=4Dc-AR`w?s9VB$*a
zom}4OZpo^_`$1Dgnnhj?ta<8NY6Oi72=B<61nPDnlg0t`<$Ps%VwF-*NzwGZ-$iD^
zH|EdUHZdy;Zn{0jIb8Gm>b)*{qc1?B8ksMzvePP3L}-oaa2Fy#1=_XM$~%~FQ0~HB
z=V(6QfHw_rQAKT3<+@o(MgbOIOfm^7f&@T_vR?&W8GB!#T0<tP|H@fw)z@5){sO_$
ztaG4%?Y=Rrl|Ke{r7PLQQnE-vspe9)s@A!K!)dfYyY&X4#5X-gPkMJLHIwg)<|{Z2
z?~VWICe(WS<fxL^4ngwN(nFT}8eup$AnS0zp@LU&Zf@&ERu+)`d=tBwYL{M1K%6M0
z&&^Ix5!?vUin02zCF@lCXP)6seHIAXr(4F#3#|XRIF5&C>h(P<&FJTe)MwZwW3;!D
z>HuCJ#JULOgHl2P>IEJsr39%Uij=#D^)@-}g5N+ih%>3pw!H3x>CO6<33mL|fz(0t
z1Lk}oQJLkUXc+H1^Lt~^C%}A6aMs|97bdC&IT}tho<qZdaBZ_{RdhYia~fzUY`KX2
zg!ji#0ZAKN@e-m@5K!cnde#3po3{_P0*LA;^L5+re5DPs7lt@oD`~|ts(Po?Sp8Eu
z?9GQwPWVy*rxVG3@lRbPSS@xt>(b(+Xt$a;l_PmjR9Z_q-zJ>ulyi1PCiTo0K>xVj
zLduh*OfR6nR!|3~@#YuxDewR(cp!WbSW#Y4gn^!e8S+IP=ZYuXwuL$VshzWWi34g3
zlWu^P0cSskCC2O?Uw5+kztrL$R<oj!&a{=?e~4#SPec!wz!vcJr4<t`wFk)5xgWTM
zwJzxJz<}~kLs34{LQ1W03UQ<V4FBnN-YPUK=f@~(%60U#DsW_%MlU+R1Ndr!f(1Ix
z7e74u;^5IJ^ey*OI5Cq@gbc#V{gkN|W#4Ak;mdcYQ5!IDUOkC+@0Mi+=B3_H5bL)-
zk3n|)Ou78ex=aJB&PKE#uyRAP5r-;QDde`qP#{b5_6YH8+xt#AB$M0KGs|vo0b~2l
z{e21#Pu=5tc8}1I%)T;c$ka7~@8+LJW@CXq00NB;^r2bp8|KKef&wIu=q&*HmzdCj
z$K?1~NJ^3ZK0BSV)?th0-DDfttqONxk*z~v86!wH1Nb^;ZCWki(9f(_4VH?itN{sp
zwn;l4PcXJ^{ZF2C9o~sh9kLi!5TCT~#gMGA9B^ybyHf)m>tT~kk_LB>wn`^1nW9lV
zl|NqO5E8lXP!4p`ffULkEFy~$j5w>=B(>f5m5_;IkM+!%P(6QC!%lNVjvjCBSO~dx
zkx&IRC1>sT*r6sTPT*ccw+M-Qdmn;nW-@X8A|bNtp`~J>rX4W;^|fi7;cAb}S95hl
z@$QIM-MoRFKeb8QwQdNaOBN50pA!|lp9ZXYuMvda&k2`B0*cXe2M1}Jn$H~~wGMV*
zHD_La1V*V?z)#Tvjo1)wVKTMoO-wFkc-!%hoENC559HR7PEN^y?KA&|e$oWZng<<J
z{f|2XGhgv6tp9@Kb|rc`D$XoR*b<=29a$P6weGi6!aW1%6QN2QDq$GQ`|<8G;Fd`M
zdX##u{+;t}MGUyrycuxcAoSxpHBX`5oW})m1`;_gh^}!v7jQ(OshSB9JM6@Zxo59m
z$mr{$Cjn0ew9ZV!jMu4AF)(@ChpCkrG4BZxvy7z3+lFR<z@)Qlgy4&BY|E+ngcf>#
zS)|z}4b!8xCF%(m^w<D3bvp8%4$ErbBdD2L3>D3el@*+RkS;<1B0W#eBP+T0?QrI~
zTf76j1nOsdAND?Qr8mJeh-kHE$9pKRI?Z#wMDO>vY<cwH#~&wMFN{_bGuXO+D=CVl
z(ZvFb?n|j5=HWdTOkAPE1)e(D&<qv=+sPEsHYDcS)Z42U{H6#>Q;Q!RBzJx--9NeK
z&Z{}J$?46---Yzm>8~LX4=FbirU1|Evj3*%P1<1S%i(KpnpW0|Ob3q_8(reRGxIHG
zvY+{YH^N3F#lC$C#K#Q)l3&q!98A6`+&D_6r+Sevj6JD%LfT#Q|FOVnu9E88#-BbL
zqavi+9a&E^p_diBWRnfbn9iv&H`pPBXXf;lBV`Biy-^D5ukcsZ!C?dw_OZhJcEy_H
z10ll~Q&BVBK$ouChWk9<&q3OJtVd%^M`t<E=Xelg{IDl&N8ZZuSpK)It?BC4J?}5)
zW5<ySLpyo@1}QY5_<Kl^Skara@R<9#zyx<OL5foV(EhOr9jhOWo6$UGk$on(Pg(f?
z>CP4yD_^XxyByDhgcc((u*B<34q91)*g{@zGGGguznLZ|`r92-(02Z)I1Z;)pR;W8
z9qZwE2nUpRLBkr=l6S|2ZIj5{nBlGF&3WEplOW+VqzU;b67~`!O%Nw{^?2}fSS^#U
zsW={A<`}s<_5@VXj?|am4$jM9+o8KGY^&ke2{W~%*)fC`XdMWa{x|xDL79LQd0@x<
zYOKjrT%VB;{1`wM<br=4U7(QS@r-<1Yc~6&jm|nM^<Rh6l=ebcOm^A1ES3*JMBrp}
z(K$PaosM>xA@Yv9e=mBzR+RV+v4^Vrn(%<|Kvn*yOjNU{aYgIZN(%~VI`8a6*I77$
zRxvXqxrpO#l!acDym#4??+8+2=9KRc+9q^o;;z=J<@<yO#AWt6f%8h!7hwRWe~MtA
z?~W=lrJVh^N|8-GI?0GEt1;*i{NV7~J4tK^g$bOIxsE3`k!(t?t&CM=D`d@pVfgzG
zjqIz((^-&x?54#m=HY?E_>ibINzjXtg}+P5M92;G5P;|$6PgXggoLGm)2&q^lROfV
zle#+`SVWe=B9fBaA@nU#rV<r@Df6s0N}u0|G24^^5Fy9aZ&V%<yEv6|F?tTirvK)g
z`y>aB6@+MkFS-Bf!=G<Jr^Ef{d&{y#i%57|#vC!Y-yDK*dG2)!;#@_KkV&=M5@=^a
zlBkIVyq(4I*+&q-jq|!Q8~5Ko>r^gVe`q4GZm1uB3v)GpU@c0v1^vwuO;s^|RA6bN
znS@bEr5EAZPHPJeXx0PR*N@MV)Xev!d6>0p7rzNB7=&P!@$!dHu^?k#P`+9JL1)@V
zN$f?NP^`22FRhTjWdJ_R5$bt>ODEptKnW(1je+s{hT#R%2}KstD68oXuaho!SaM-s
zfqV%|h&W*q!W3{C2^~g8_2eGCErEdsPO2!~$jWXn)ImgiFv$mg=h?hp3J{X(e>cfA
z&ENhaQ8$4Iqz|YI)t2aAnJ@A){_+%$k%2wgAI=xx@K7Q4qD>gPH9s!|N=6ld$985Q
zh?b>ol8~bs>e%oWh}j}|`vL*cI1xF6Tgq*&T|X`Lzjra$w#cG<bu?MbyjPemAc>DI
z7;gtA`T|Lf6*8x(V-ba;uLB5x0T<~k(hZawdx637WUFO1`y`$s3tA>9-AsBSs^bVb
zl3C9RHNmrD#JLq@$>;^*G@)re)022@BU(<(cv`5hlBp+Rb`ZocH{K~Ty!byoMAm3M
zcHkzYE^j|{UACR=lWXh12FUuq^Kojaf{*CHEjxee_!k}5ef~uU$+}|#(1s{dAb-wk
z(mLJZ?;s=GZ%vN~7J<Me8RE7GAOPM~P^ZrVZX@4|AxxysjVn#ts@A2VnC18nzicUB
zz)SNG-)lJKEP`Iev_thgk(_;D_J`e)@!bAQ%cF=I%@-Vqdx@~Xh|&2dj$}%ld+T^O
z%JhbwFP3GewW{uWsFk3&?-<SV3Z2wH{CgSPw;%pN`n{RJt)}W0Vw<WC=)_pBGX$rI
zI)LAY0{E}j$7DF!$qJ*sMG{wMu3!%?G>vXUvwS5wpUpZYcz1A@7|+au&`Bn9P~hMy
z5&e|os9U<~Z6rcIHIp^q{|=gIIP9x_Oi*jX$mv$Kxz6P^7GGEI`wDNrm3JaXA(5Oh
z$aIQC1{x{_c@bWy19B(Z;~+9+3ZU_k^jbZ)P})+bwaHH?R1;B&@klaDBTfamdn|Zl
z9diIeQ~JBkju5qQp!M2{zZOPVT?B!^Dkv9s^J0LpRBz$Nq{Z*L?0e4AgTc;`BM^{q
zUxQITv0MtW!NvSQbLCuEL3)pU!FeGGQ;YJ9f4X_@?seH3>&LUdp!?lN#nd2}u`mpq
zK|qrn1!skxJ#v=;?&^^Wm?Sa8_peuwa56Mi$KBgUJw`izzASW`-jd_<wO=90>x7FY
zQpnnWPX_FV)e8$Db+!<&JCY2t6`Lf0Vox89qKbd0DqpGX@~<Hc(VEjC5|-5a)gk%#
z;=gDbVt*>0JPGF?kVM%koP3}V#1Y;>lazQ~H?r&QAQDTZpvf{!aLe!L$A%`;H$UJ8
z5x{#kmrz0>pOi+=DX=Ode)M%#0oY%4wnq6UX+dKG)m%rJc~V>eJ4AGLD>Zn36J!Jn
zZ>zdo8!&?mTocKyVUmST0Oe*<7R66?`9232HO*1>t$`AAE%wjiFLjsF+i70DFhU|z
zqe_(qUBxsChalpTlfY_(2D<AVR>$)kEu~ynkA;}F?U)+ERYeG;i~&HQZSXxWH`f*u
z76YQ*)UqSak7+xY-?0Zd+n2iM+gezk<L&D0gBh!8UYI$$Q2pNh^Ap9+uFIqx9>N}#
zz6&DH<1MKb4IVmzHu1J7$FXDy!M0^I6u=7pG(L$Rne)htWADxN+*a+@{vlX8cwmyn
zM<QZK*@F`c^)VbH6*oZ2V!-5uhVZ6?kQ{(q&$O9Tx^gFf!l!DnP9JyoN6^s|_n5_U
z@iO-l;-dq}bHmWpVGz||f^vs&30zK0GVMr1)e+tju1|Al55Xf0b@C4dQkx!>pU{y^
zcVjlUgR~va7Z{4lN>q>rBI=o(Be$%fh*Nix4hR0}Xh0m|5~=Bhudq*qP3y&6Ulb?t
z#>*?!H+<{zTG}D2L}k|ygYniPapHQ4-6KG_f6N>snK{<VUE1qe7lk`^gl$#p6^9&q
zyZ>v6{!Pv|*ZIr;s;65MYfV<wTrt{lK%*vRlGXb|uy0J{{2faHvE!RWTo68+WZOah
zjY@FpMLN&0V=RY#tjB0a`Q^Y%s<oPufZt2{kZtc;g$Uw8BiS>LI|RMK&Vp<+TVIcQ
zs!uR0gaZGdVV!^;mw*OXyBe25I%2gJ4tG=L=MP;G^Qg>yf>G+)IP9)axZfa$`}*zm
zW(eO<-Nm$^hFA_v{D)W{->n<j0kaZ;eFBb|kPbEnptnTRk<vRHVeMHfkg`KX9J{-W
zhmD+iPPbc3qY<Z=LA|MKHvf+ss_SWEkp~{#CX>cD=<@UPM<0NhD07v=!ohLlOjST7
zfCK^ruB@X5&M5?U?qWO-{Qw+nViKBe76K0FPG{n%(Jr!%-i@sA#-+>=VD$aqF*=?P
zLgQP;mv)19!`5wY4LNV{CA$C{v7EE#%^r+gzhv+JS%!&BSHV+TGkbVVI^#|{L}82f
zzgN8^lc!jA4S?VI7Le$n*?EVt2*^4Zms|ItRv!vQR(c-Ev_>Z4Y@ipLIDVxwVrhp<
zmLRydx?PKW-sz>lK%l&`*ax_o>Y5wu{_0o)TzDVijvADAJyObgo<Uc7#qjq(gLSST
zs}Q<63Uq5iY09)bwc4&=<A=!d0Y3Iyn`NyK(5-is4eD44FKQbtK_{HakRQSE)SOH@
zvb2Dt7)IkUaaTi`S=_(~>>I;E8?K3o>>_gbi_?Pt&K$QjR^e~7gQF>iupbnO#XS^E
z7~0()7NVJR(x}pT=aA*vJ9C`&3V4zw;!O+)dI26{o??L1!TW+KOC_}t`ytLR@%C(&
zzZs`u#l~Fy(677rX_Lcd+l_3im;bcJ#Adci*O@H9Vg$Pn(aygyAw$d0dV+Ji#`!9X
z7&pgvqwa0%n6(r-LrAouk%m~3{+<XZoq0Ud-0IHRaZYM$>gj4up>Q)KrEXRLo5;WZ
zK!OP4RRBN38hQpDzsQ|J#DK(3nL26ox7)MyJgiy6rqEcA!B`r)9aD$R6T9!%EdXW~
z$9Zh&FC$^MmAB%2l>dKH0z%hyy15YH2GG*cLU<q-$G^f93#H17AiiDX9`k=<&Wf{*
zCk+V%H*5T@52cqMuQQjvw<5hSBgn`}T?%a8xbrG3*^pSd^T&u|^KC`4^zLJhz8M42
zIv?+gE{pwK0$&W2+-+#O75VP7?bw}-IsfYWC-#b`rDf8t?yRQJfnu(8xOfZ2u376`
zm*0yUMaKom)VJseNIFOCV%aDH2Pof!X1ZB)to=ESkIZJox~gTS6`+o37!*hjNVFj1
zuTbz=3}-gdI%A6~nh#q*2od<#UOvKyx410?07n+sulOrWUp;5fb~~zTCP369nKTzv
z72h%JQe}{yh2-U$Mr$>5LE@UXcLh{9P71+lsKUzL16ZON1{buM#uKsK`l4=S7kpj9
zlsQD>h5$&HLn>M$AM<JFGSz>c2T6#OXt2i*rFH5=a0i_B_HV;d$KN`Le~0~0Dmy-I
zi?ve;4a>|}JaVwGQohv907cwIi(JoG;~S{`YC@jD>du<LQ|41MzJ07LNcn=`(9M5j
z_{i(oAdYE3qCK5hCc?<w#L>cjMG`8={9(k3IOiq1an0ZctjhISbZga_@O#7m5|a6&
zb~q}WVgBDQG#P*$sU|EfP0Be7OSRXREXzjT3}o?X27n>b2Od{aWNNpOUTc0wTuJ&b
zx0KE}^W|Y2FC%5EXNl8%1l?>@W3R}Lv5PkGDFoMtuM=x$=^6q%K?!9J_BYzT$pzsW
zq}#t73bLvQ>$2Y9z#9M0=*a^ZMF+I16KnDUuMb`9paOp6`}x_QcM^Wl$pIF7JX}A|
zu*s<4IRG5Joy9Lg>&GLYqC*{lYHdyhS(Zz5|BV%Q)vsc`+sR=O@AnKBiFnN<J1+!v
zuY9(w(%$f;`F~|c+~2MqYExP0ihk9_<UhJ$^MkgY{&nf_wXCk0-kCz9)I;b}W$;(M
zHr=Dlj&B2{U%0}VXlOorI(z_apDIw@WWHjB!vh~hj1e6+5gW9Km|Q{cetZIB6)kGS
z<-?bVbxOUgs$F2<+}=i+8{R?{frim2^sx>qg9P5YCVS1*fY%YCei>mfeinC%E@a~R
zEGm5kjIJkIM0Mz_HV$kvN7REJ7ew1ZRRuOEC<=eF4-yuk09OFo5PdCNDlwqEbZQ)v
zZWj8jb9{xhbLkb}I@-Ycf|p)MoufH<<L>mn^;vxES0t3Eb20SkmPiwLU#8%F1*p0W
zMN>nk`g@~sdzLnN`nid+wz_Q}Qwd#y50uIZQBTJLVt}Qq`nv&Um{Ed4AR)~u#3@5?
z;Lr5^KcTk>?;ei3B!)$o@vbwq`d`67tj?g2I-6pSmx%`G%k(s+mJtLo>Bf&nUV^;2
z4|QNNy$5vMGQr0a1hjf1ou2nnjMSo@(zw@O#K?2>Rq1e6Y})&DNydM0MZ`Bmgcr2P
zr`hnG4b3@L1IK&=r5K-z25S;sn~;$$>weiFJl9R;oj47+ICb66H43JZ`sAGlb82z1
zh=Lk3o~Frxoo5~%5FaJL^ArF-o7<^l#|0V0)Dl$?ln_svIim<TN^<{sf;X;Y{JUzO
zlgP?qX;&lBJhinXBx75`Xpc7flchuX^Y&JQ$I2kM?-n}V4=nk!!!<$Bu|PG7spsK)
zHetc+WFJu@^ufgLV9|dR8x^nm$G3^ZVwGJf>c_(6fP9C=1-6W9dfGh*;1e59R%nGB
zI}#y5s`0<o#`)j9?ZhDdIYTA%ae{5Sc8pBPZEFU5kQNJgCK72dxP02j*<kZg5Z&o8
z30r&}U-*jTuwO`8fF-=r^3(xFq3-p;f{0?#qy!Pp3hf1&PSdXWe8<j6n1LAf$fpQ3
z{3#PnLPJW9CX|nIVOVXVfp@c4&W3<RYy~4PAAZsm;Woea9g0?KFC|Qwffpnt?I}#I
zfF}@>*YbT&I1JS6wALY?TJc9dD%+jjJczdw(t!=61V7xp@W}L*`;#GCMbALwA%M{9
zZCw6c8Y0%)O1I!69UlcrzVoKfp11uuv>6p2e484^Hu4eK7SB6kc8`?3bxXU@59{#x
z!J){&^aQ9>-dLzXFxGJC61)rSIo(D+uy-EBH)q)f^~S3cCDWV~imy%9<7@+EsA)=9
z?uGwb+>sEQL>IOB`qwFn24XY7u*XL1u5-jylnRN1an3Myy|SQ1bvvX2QV6|U$$clY
zKQe!eCpyNYK&?tJm&M!lLYD{K#fA0FpHqMMo2#2BvJk0lugC$BO)FOGhAKS2UwA91
z8}?CA=@lc!X1&3o;}VFeM4OtF;6iCV-5gYy^sctnVb7WN2JlaQ>en6<4&`XU{jaC~
zlSU)BR29N~1tu{w$LS5$P|&IkkcONw#MawI^s0}5HW6E{_%KIoej%>yEVTT&8ptro
z2E~~Jc+Ws0R$bSO&B|{G2i(p?H!;-sPnN!*B-QoMdLVK5F|5$UwVr1p`#=!J*=8K6
zB>o4?m^kwToAgpg@X6zV;(U4f>?0b3>WQan>=$MJmKUk74_pTnR7q(d=6XLWWQBSl
zIo72W&z(M$@deKnntB?!Y<?g!1s?631hE<VBcTYL<+Q+^xZO($pUzHw_5H947oD6J
za>X<XwX3jHLJ))Xl2i1|XfZv6z8RC;(Vj<*ctQUY%6b0}6SF<NWEWsu2=(P~?w{)R
zkwR*hgD}>9*}*uVmlm)oMox)(zSoJd=G>E?)}6rBWT>oAOnoLWq4c5c-<ffg)B#1*
zu{t(e#s8J(oDjcRhmF7{`5;6;ev)Y#dYWKfrBIWqnEMP-ujz~D8#XhI7&1fbq!SIn
zq%qP0eD{PVX<6Nlwe$-+Z3!&ZY%)^bech)(#OuDZVA0TPkA=$HZ+8Zn<HuNJ&?16c
z^_)eZ38VSCC(`zDiYkF(k%lL2_Cl=C8R$XZD3f8W!EUE4kAE@m60P`W5Q>0$$Y3Fg
zC0$?()r3B%u-H?|SJ>OOAi*eCZx+_2S|Mv(Gw9VZHm<T#Y*P1?eZNl^wmen8Ec!vC
z;?QeU?r$r@7fa8vaa7aD{B{M@W&K59kp@BB>5ZP<;$rl%P6V-_?d;V^0jHrH4>`v>
zWFLQtu14YI=!^7Q*;9rsQ&Z)E`ru|JSr!YlbZ?%X-j{ZR0~DF{aD@zDFOPZ*rgjlK
zWVte{HSWyUMy37j^kB2{B^`~O_@~|Bgy~X*ma><G6mJ%VG^#=<Ji-VmOAp-wbrWs<
z+qMq2tW;I(Wyeh5f$rPIaaniQSu5~5nAPXg`<ikQ*U6kdp-iA!lpvU`;jhavt)Tp9
zN@dOA;J-APTbyz}J@=P2Hv-;e74gkedokAmgNvNEjAhz77@FNM9i`mHk0ID8Mc{Kq
zF{-{qWZ*ufTu&Jy4yO_#L?y(CdS&qn+WAz8wxD}g)Dg`Ku(IbSS)->JAZ-w}w$j1s
z`X|#pip9}Gns6+Z8FedQWp^k;g5<%vJt1Fzm0opO+GEH-mGTG&Dz|H$B%kbWK(L|I
zUyQM4rGK!4fT8bpa0fhb|9fgPTw)?5kT|7+ZfF?7TJrZCo<cdKpYKpUa8N93(%HTk
zK11n1P~(^pkn&<n=%?%#^sWgDxRaYw&(eF#somQdym&Y(L1x(bO(`p|2Au7RKB`Y0
zI*{M-Id2|=eblJ>!GgiL!L@5KtySU9pTyWUmI4)2ESs+wD#KEFTIKAlC7H$h%i6+x
z+alIr40wJL{c0J0HpG7^cp-VjixSo#Qk$ws`{eE9RiiXui1^f+zi3Wl<8ATxx%|5>
z(odpTOTo1@{$y=XFd%A$RNb<@<}WFyrw3@sxZEBjZJRYCXx%z4COIMZ1s;|%yi85{
zkV+e~&wBpj>NP~-L`_*3<kIUg_D*#S`8A;?fA0sY=L_m;G5kGsZX=CcuChvYw00bO
z-D@*t#QUiul^hEk?%edYhqKUlnu>(-@+k+*#xtyhbT^T!6RN$b&)Sd`1KxDR@d@Ur
znvMom9)tW#=(=jH`vQdtNQK!|u<4|;mkbFR&|yh48m`H1y0^fgUOR6D^k6V67YT8>
zN1md;gp&_uBlsT^PRWK(AoO~qICX|!l-dDqj@oTR957yNXP-VUw}$dc#W`uj1+(4m
z)f(G03t*bsLu%%kS|z7P{W0AzdT39k!SL^*59*e$m;oF;^<kdtFfIL(w%~>Nk5oMg
za$;nGaON6r+=sz+!x4;Cz1>U5;=hT~lpC2;UX2Ak^SP+=r@bHMC4jUoDBx6M6IUG_
zZH{sqEt%YyEcLi^O_u~8(l^V}Qaa*p@%9rR#S$-v0a00Y5H8*AGg3-6hBHHFLun7?
z8U`^!9Pce>PH0~9ZZLNTlT|x+tJ%wPc#8?-`TyS(%}I=cqp0WGiNPT}@yB^%0ff%;
z-w+?9y67NxE|xA1!i`8h=}K7(fMlRpo<p!LoVc-bNC-+c^(%5$8Z^^BVPd4`3$j7j
zx)!S(=Dm!v{}_JSN1==y<+yd60=7A#J#Eb{^xXG<db=NSXtKmq()%&uXAcNZg?UvC
zbq5uzaV#o-2yp81AKZj2J0%R|dEcoQMh49AiRV8QGmF|MC4%45rd4V(dh!8i@{C-0
z56|<XtFer<4kZ^`>V3xJKYgsB2tj#d?2f1*OUR-lyLr&3PA9Y)SnF;*dAVeDhX?|y
zXB7(>HX7%PATbDxw&;~B29rx1RVn7;89rq0VU;!oGjaqtI$3{<<b>qn|3tl*t(Ftz
zWlp`n<N(Q8OMP}7IAIzIx8^&Ff#P^x)n_`*Q_bTnf;L1J)3U#W;K)HC0vmhjDe`qI
zr`K=a_aMNcoM^S<2j+Vt{?~Bg>Q{B8SI5~Kux!7a161*;(8;Xa$;0R%Z_JXC=z;VU
z+Bl|6`<va;3(r;1gD<LI_7u)AWAIAljy1H2n$+<cm`Ga-BPp(AU;#wjN7_i!h5YJO
zM6pAbqZ0BORS54{xv|1IVHCt8aAqhB<w`Ecc%Yb{OI22W?AzA$@JUoY>(>l^Q0oJ3
zSZ+yEz@8~Y=6q2S7Pv2olUDanHPq^HGkEcsCYnWaP9GAs_j`qWULVE&(VPCVTUv?2
zIcpEfvS=$mG1xb>sDq72RWKEC@0dsNtYH1d@0RnEV*C%(RiI5`%+DCIQZe`tN#3!~
zCsoB3;#zNRE~@1*Of3i!ziK}Q5&F(rJt`s{M{ekcTy$KuO}xtVJPNNj&Sny=Uae|g
ztMQbPZ_jeQA569tu}X=)VC($y?bh2Qb3yH2cI%a8$|qz0U9trfc0ICKU_N^FA8(5>
z)GXnVmVM^8@-BB$(w2zDS*N|Dw@BMfoB0IbnTvcaU+MJ#)-~J=NIF#BA#riI0{|%<
z79ch-{57|wTcGMfX1eG{9=c?4apiL>JaSrz(g+Z5TI6<&UQs4n;+?|CqvEO)sf6~b
zjU7h#Z~f6x(CtoYdUfP<?91GiCWJ^{u2|oXzX-pgo%O2S+!uyK;PKFHfZo<QQp8Sl
z4+xltb=^_pws*&jL^!t%NNjL9xab~QvEo%&HQU3Zj-yUpmlhUKEANQz7epYYEYFQ@
z3s;AV&-Nnx$iam?%hLzRKv8!a5-3;l)~ktbthd~vT5lD-!x&y$_g&N?x*5Vd(2y@0
zkJEM)5X&VC`}^|3l(TO&jix5b8eB-9$Pkj|6APJ-^Kgxk?_8M%u>mpqRnLX1dYMC$
z!NC96XNXrrPNC(@Y`Za=6C|#pzr&a@LO6#{Z$D9Ci`&Fm&lQ3Blbk4JQi8$`mEtUJ
z`4zn1;P117fR>DK0+F!pPAhL2(D7TUC_CIBFW_|0^`q5oEORm5Big*p=av%+lrews
zLAXYgf!XaOh0W?5{%k!zc8qfmSlTXGV6iGT&rj^hM)(gJUzRgw#Ue^?4y81+di;F~
zX}zPqV+>T9LyXD2aAleCxb`q~{Q<JAhz}A4glaW)?<($N?V8zkT&hTyB#rkz3yb2e
zF7}p8rFU`BHAK&ptez<|u~q8S_@89w`tJEEre77J_ds>~{XpkC!dhZ1*W4N79VjS0
zv}v{B=zK^bySX0T3aZ_K5;XA;@Q9cn=NCsoeV9>rheglvi_M!mCl3t+_9FQPYUuEL
zq$SXF1VD3ZR%4cIWcmJ|oz01A$X+~HI(+?!R$H*`6sw0!*=k=mG48_Baeo!kQK>{Z
zpXs(G_x?OKX^NQ)1hptqZRxVnX&3bukoR@K_&*khoA-6%i=?urvd*{txn4vbEG@xS
z)X6rpZxpKi?#(A;r5d+VVyM~DaBnU<ogUKdM*!f3-M&3VQt}>a6Qht>{%+f?frWo0
zIGB5>u3E5Hwa7izOm@RH1^Z3(8^CW)7Au{5kau_pH-*E1+{!|ccDE&1Xe7%rG%?4b
zIAG^Fn(Q>C$$Gf==5NOLy6g8YnwFDb6*D;<Nr{`1{nq(!CT&KEPr$N%jfYuv5f+LK
z_m#G=mXu$B_EhrJDP7{V7M-C-o$F-vWkc%CgiKV&bq<l66RU$Umv8ZWYt7c!ujz5B
zeGxLVY2}al1;tKWYYg{~j62M}<zHB^lFX(`d{O<4wPqPE+^;IOz1yCFX%(MS(1|eS
zXT(>szisCu96$!9wz(r#bV*6FG?3imo<2aUUWN{k+9VgL1)PB#b3kp`CRc}j$sb@q
z_$eerct_PP)Y_Z9K`8SE^#L7cl8`k)fo5(tF|z5AeKdP>Vxb3a5fKM#wiBGEmtr~d
zzqJ+P76fy_CZHb~gXBNu$!L|~M-(chgOVA&p{ogb<O@f?_dJWjl+y4RyKi<&f&*WR
z%ib7KE@1;gBqSe>bZsdiB{vg1n|gy)(9Gc4k8(|Yv)R7V38e=hG>G4%>|lXX6v!eD
zpk~hltHN9U>M%GboN17xihR2+42bQBThQy}39CGmfh5X~&Onq(XH~-*aOXI5d<#0B
zEw3P1)>m4}3B0=FBUZ6br52!UK;EE>pu`UcxDn~gdB0Zw5D?Pcv&}_O_B&npjt9<7
zWrLJ_xcUly;DsHq8XK1oYY&Vsq@9Mw<N^thuBSoA1Q*d=L8bi9&R+-NovAjA-%!qU
z7IUFZ252CsA7|NJmbRTxg7y}YxjZ`C>6hHvIw=VdSTYmaw+I2GHh#X!y}Of}j61}I
zn^M=mKeS-%WW%7;92sY;Km~g0F<s-S!N_ux-JAZ#wH5ZCEr0*7z>{}yNMfsZ@`?5p
zH3*4U-aLsm`L1%&xb@f9{tQJDqyy`IB8oY_Gi5YWc0o7m8C@6@vKc0WKn-X7*J`&(
z%HqB^^SE=OyF2jYz%%xFZi?Q@Q)FvLx>;b;xeIo1ZJpKE3(E|_6=wpwb?NWhyU6R3
zJXNJ~E&rhHfkz(1!r{m2yQ4TyfWDhI@0LW)y750*FhOxQmdJG>dggZ|&g=EzC+Mtj
z-*<xAvl5nucZ_f6F@z`k&@NVMAbe|{p`oxJC`NF)h;3!*9S%<*cJ=pJ4AO66C?slj
zl)CqNU}D3BUD#$Ourc0p8#30g_w&XEbsvs^WF3jANT75oM8^ZE2f)NdBUYxcDCqEb
zzB~d!@d9dy8MKVk)D#Zg4tUn)E<{2B#FtZ`<A9#wWVa#vcs&Yv#ag)THDSsEp1{h8
zS}bi7utQu~9Oj+Ag58Xct=Ksxpm>a4x1OcL4H}#)B?wdmKHafSWxwnEcPn@W+<5n_
zB!cgZ4{2d2y-5P^IvZ}E%lDhrZm_7y{f2~Zsl!j7TKGe-{PmiCxpqu^FKiPE7gGR-
zq@bJOX*-4IP~ZP$y>|IorozVK<4SoF+M0f8(e4ps#JItv1h(aa4hgnZdcpU%Q3bW%
z!%NJU#i96C5nX}E`zlYkjSl?8s_<{@eH(Wp&LBRpE%RP8DqDR5q`S$d&te<6EKzzh
zAO#bvqq+wLTU~@w)y-Ws?)&pdnfIP3>s`}JL^Mo~`%TZWEw8w+3dKv(PM=A-0=@&k
zh3zqs+te;5P^H5=Fkm?t*ofu{APG92vgLX+zWA%Y_#u-QCUBgltj&It5lTWR;E>B%
zn|)Phe-5@1uYuErbcMj`n2q8XMGEu!{?k3fg$Pqx#kqx3S&^3FcN;XxK#~YQlAgai
zubSK%^d`4aBEcjqD^zx>R*A}(pKEcu?ffS?-omamO%$Z{Xmh&7O8%(KC4TV&1$6`m
z)vHqNr3Vx%M##3Q7APKxEvDDXo-7l1?`zN-fSTEIx~}3u<8O?oX=X(wZhslVif0XE
zy(=^v?RpQr)kVgTPF|Dn&TyIEUH-J1Ed(q(+#^cDZ7MCx(|yN@@DLZ*lw2lAXYOGb
zH8<UM7c({4lqrr4M`g4c*MNsrw$!X&O5O6BT&_pBHdHoy6a!muc#F-xe%w&OXE-iE
zG#!{utP~QQuIbG=#c#n|dp_d2(9X!kady*wmW*4OIOs=Mje7hGuewN`00_HN+DFBF
zp=GGwFR+kufG`D-Z$AmU2k~bP3$dKw-M>Y9Y3-ySl6`@TS^?v!$-SXCk|JDoE48Ee
zC;P;T$t8$a)PyQ4&TFO`w5F@y?yLm^{*?YBt0qxqyFAgq#m%V64p2NHJM9?xeACY#
zA7?i(%rT*WUx~77w8BZb2Km@ZF)Wg!{X(`&rdNY3t(^GU-o!2khM(<moMNulK5BN3
zG4e>bRB-+kCSt?v7mh~VjfyDg0%VTvBr2oyc{XrIwU^JSkR6*IzFeE=IC<J%^~|iF
zk+9XWnxN=Bbk1z13jy-Bd$R^zPY5?`5`^dhp+h1AsRimd-w3ZKVe*z@m(%Z%_rJ)K
zDekm%TsUlf7p;ekG>DIw;;wD9l$woAX^x3=#tgWW8;2RV5gN=%b=F>iv_fUpGm$#S
z2@ul~NmSnvujR&#+GrXw5d>YPj&|21(!H@#3Nt0u2oHE+KIBk>L<@x1fEZjpwnc0t
zTjruAC22?P$cevP3iBm;+gXfjHk<%q&f;SE)=&E1{WtbFGB5?>%!6`OVK&}F(_E$j
zfJSV3uQw+K9JnnkwN~!$JjP#>12k;4jfJK1Xe>;yR*jGgXm(j{UKOGX%DfnxD{9AD
z5(CvT!~F`IPVow=6|^Akitr5J39VAEPD%`;XUmz+I5h0v^=41FqjB|m%x>)@&iqrW
zijRc79INHR_G(KI;R{*<4RVnZej8=;r~olQ&cBJ4U=m4Su_Sr(Wo5M~^0hjyBhQf{
zHoD6jU)%x_&_c0nyCZI1CEtOdiQG@20eB<zO*{x0YDN4&QK=5$JxVHlwE^mEZ0?2&
zW37zl_fg7*uAtytE@WdS&EHb>hoef*Zs(X$D_2M}($K`P5<#r*OFQ6kexTAlMQEE6
zh!kr@*7tPaRSc4OW44so6<sm($U{A&^Ip%;znpG;G7*hkWhynjt7L7_QSZwMvyPEX
z$N7y1Njx4O<Tg`L1^5S*a93C)X?vADk30bB27R96rOrUA9`EK(GgYM`%rw{_p(^3|
zBIPe_)6M@7w0phvbMjZt>~Q3$aRN~>F>^1Guvzj^-BZM#poWl5I>RjpLG@7m%2Bag
zqRXEpUH~fb;ShnlLpLuF>A#35U}4_fM{VTNp|(@QACnmZ&n?MNQWK;-B(nu_%^1St
zGc@AjaPm*`0vhvY?OLNo5#3$oWsG&X!v=A;kj4hhBriVe$D^QB_gVGp1-fbqqs(n9
z(?ZzRIuQfVZ*lMwYSpEx=C?NyUS0_UjV)1cqzu$GHqZ4|w}gT-Xl6a|AD%U4A{jTp
zHq*0aZAkC`^~+jK(!}n#GMb<Ay<ph-Fjq@FYA>_n`#+*X2nuV2N3B@s_fPHrfLECf
zAWpVMjtROPEoo$)4&d6(ge*|(jUl!b3i(u-h|gXJ3hj`G6WU^M4wT)fY+pyPUHt`^
zf_hTBnBFn!TC$r;=G!JsxD_-ul}RQrg?Z$lBXRb@Mb8i5?mt{4y=0W7b~s%Z9aV$Z
zUpNB#F0K|Rrq*Zh4$&ifoe9$@y}#;yWew;KAy4&M8E5#Eh6KMe?zXTaIK-O3=t8u(
zGXr{}NKw`eQIj}26`o#pk6CfgRKWUT94CsaJup&H-xP546J|v)=<812ThH37AYn&N
zq5TzKZ4!mh%O<Oc0gfk=s#@0$jo<i!N@z9VhfrvyuyOw_)X{$!-8;FKGetG4!46|k
z)~C45GpkH2tsy(~lG)yiR(>YDM35ozd$=%iY&U8(h{<p%F8@C?<f-ap8>v`G*_D}I
znf?0%_fyPq<3lc9B`iP*c7_31o0}Ig<klm+966rYt7ro9vH3ifOaYGq^fiy@IIiAC
zeE*1dQwsMT=JPnj_}@_}a=w7&;35O*6VV4pnnY?2MJ!`9b#I+VQEpgLJmHOKxbm>%
zN-^WBt|N>rjZW3JKnozi*^g2-2NDI5LzKDg;XH(DFt<)RqPO*X3GTHXc|0au^gUhT
zZ%p{2Ib+NlRmDVj9boj-#o&FSSgW>0+@_zP&6H0n_OAJ~3v`P?7q%#Cks%&i`~TNd
zePRX2r*hx?66Ti8bta9i(>xO_8hjf8&EFN>U4J-v0%`xJWoM61MtEFD#+&}?#U~RE
zR={lbSg4`ctc(S8D)sEdpVGi>@denCqk6>6MJ2RszXDQ5;opmh57g*&%E}^d>8GU*
zNTAKg4!5O-P0=&u?}|O>o~kwjdZ9|HxM_BJ`|Ugznogpf(x6T^%ivwy_?-7-&eO4h
z^5)IG)Yj@Qa5kX}*DZO#o0Qiy2;P8EFHU!^6hR=SLh#^d`V?CgQlM$r8UxGtSkET?
zA^sL>(|_=0eH9pHlMiqcKJH)@awsl|HQ8t-CNY=Z4R1Jed#U^?VZ-VYMLv;OK#YLt
z-4&f*%_$iwTx}^KV<n8$zGZ!dl7r47#3Yl+>4s(ad-tA9T|(}uvW@e{XE@|pUI&ww
z0|Qe`R}`{Rz=#(bHe6agE1sb~d~MdXBWg{V!39Dbak|LsV6Lfh2RBp&MzHxcD_Sob
zm?19-w#OV62TEWZn&Po*zc?esOW_b~h)v^DLh{)T54}j~qu08|1V`B6IX)D}%_h5c
zl~+$Y5*Rr!g&L03WHu#)qIcKEm7wQ>m3Xq4w@`4X+$qaZCCCGXr4Cp*Fa<hBn|MCN
zL6lS+3XgWkWG+yL^u^Y0`5k~l%f#S_DS!a%F#!UvILoAS{)z|cOZXj9+H<e%u8KW?
zy820DPWR?M?24`=jOKZI`-o?`b;)kSTt>Akg;Na5uQ{tf)`J#voEm}xUP}R7M^lc}
z6%Z2?wpm5AI$vW6#Jz#(5pP>Uq@raQxG<zu{pS|~m-uT>6-AG!C^QCxgOiTJ(qm<Q
zofXM~zJ^)6FaZNvIzv$B4A{Z2Y?V1rVXK1ZDovsTFOEePeK|-__bg{iiwLAJt)|+v
z%&K7q=0Np$v<6h4*L`AeAk~#M#>bP4>!T-3Uvu}px0nOq@Me~lT8Ws5%*z14H=u>p
zxU3Z-+72BnynG^eW0-Jmhmb9#WSVuL>;j0vH)ma7dEQywa%`)YDw;?kw0a(?o1g~J
zCg|o7lp9jeB9w<dqb$9}hYGeMOu?ft`b~C{%i1%m0C*g8vDJysFOG)wZ{A(05C5e-
zg!LM$>ft5xE+Ay9vx#16Xmt<i+Ac;Ndn<10;^AiLRjZOMj2=o)n)Xm}Z4_K}%Oh2|
z3uWd56BtMx(V+{|_hGAtAEX#}nzIe`T%_`M68Qa*;b<nH-jyln)X1k&M8w0}XS-$@
zX(jouPV>hBV{ZKd5Q@#@Qiq1qb<3$hZ~$&eP|S>uNne8Q*xMHqgh^j54=dDxR!)>*
z@mYQ7?I9AbIkN=H=3fPCx!mO1%%7N%m_M9-@5o46)tE)`<piSf5!p;VVE`NQ!H>eR
zkHCV<46-B(M@b=&d4QMV0d?;Zki}DJc#PHyNmx7xoV67HzbxcF032#%nh~DQ@bN!_
zWX|5=A*PGQy(nWu6X`yVE{^OL$zhs5Sc6e8{wxIJJJ02(LVBG2N!;`!li_103SO|4
z(>sDzv`h&;LJVv-iRbdEzY?0<<B4nkHo)6l`{~cVSKD8rRKGb1kEgAW{?$k^W$QDU
z&tTw4dZQDL#1a)svK<^&(V;%rnmI7Nw=<cDB<dr}+ulLsj$>TG$J}w;4)q9;=wE<v
z@DiGhB_ha{q8ap_j_fk^p1^d+uj<C!HU-H^vrJ5F68@K#)Cg!e5Moe@g;Tr*$amQr
z0cS(9i{jfa*p5B1Yz8lJ*3>%kP6Vj$@OAgmF`HBm*Sy=Staf%(sRQx=<5%HV0qfA~
zAc4}NOR=*pAac9b?%vlbjq}G-@+&;Zj#^Z#Y-ficr<N)<SA-x+eP_I#T&f+|>8)5S
zrHJP}gstQrPToZ}4P3T(w8g0TVs|pJd)_yo$%|4AQ`_p3$}iCde=xz;ag1HhJ}G47
z5$dp5-?xR8&|=)dQ&$yCrq2u!#X)YZ&MYg$n{wY?M_64Rr?_${cBST2Xf_0tAzO8f
zPWO2nu8;+SGX5T!hCM1zYYrE&PN_V5;5)W+gQug|TAS*BH3f76G9-jTr1Q7!lINBX
z?mWiHX`*g#+{kAzC(qJCzk!gi=)2nDn5Br$X2Ncu*E1JrV%ig)ccuc)H7D8fygWWG
zh5?(9sTw9z6M9MCHRKl;XSMeVm&o=KbOJ=YTtnK_02_hN&+x2;Euhp8ulVd%DVxSi
zl4VN?j|kD~ODmBPs6KbkmfX>mG~0^rHQ78V#Vim~WsHfc2gCPMpI5h?^Rd{mR~E*E
z5so+uuZh<-#TGMr`XTtNY)FuNBS7DP(|j;10Ky{)0mn?)!0S1tj5?E2-MuvePjMIh
z_C@5)$Sp)8*IuijXN)E@;psqJ9O;j>b&he1gaM{_>kci`8nU+~a-s4xvNlm4Gd_K<
zNrK$z;Ss8H6#^%z=UmiT@fk;XT;0)KhA^$>`WG)tbli}o)|we?Qr`zwEx8R1k{)wS
z=(BhW1H+<>uw$&R;6=s7CZNuUmeE#onttQL1`c}&@EoSG9IW|yTYLIK36bu{jyy4p
z1QO$TFjTX?&nGLf5r=nCJ~CtzB}5|dIl>q>K#0kbUQiu*KB0?_z7P58Of%Qc)9RXu
z`%CnsVB-r69@-zsErM}@ptdSr<F@H%yoNAJxz@EN-NLN$?n4D6tK`^ogo8u8%dTkV
zB25Gxmio}<E+*~Yz+RfLC`SP(zBgG4u2pQ0j_oV39XPuzdu5AAmY^*Y;gUXn10Q4$
zHVKYlwF4PkKN79#DJVtCDH|puZYL8{RuX0=0zfs_JO83RLcHFNEphD9c&ythpk)i6
zM_bV@$yH4~U5@#0!cM4mk})xuFt>L@TaM~=dHApw(`=NVVOvUuZ03$q7>NI)9}H!Q
z60EcQmH4SrcmcXN0*>n^gMUSi(QN!$_2>9uL|SbF7vVS+pegqwhpB92azqqmx-t2!
zfPWf_&vW*1rerJ^KyVb3#u~$RgHxx$>&@xhM3Fn}<Nvl>1pIfqGf89Ji3LF`SD3Uw
zfp-@!1UKG>r!<+0r=D1DLlX<)^1d)?VEP-oAXj3&I(t|(OSsK8_9BMK1jXM4xZqVD
z`wBE!lqGZDWaXF|d0Y3w58l@ZTMK@ybjW}17ucfgd{4pdAgr@gkpGah@>n*2$XQor
z;fXrZQ*Y=y`2WGsiS3SPiM`>6^pL{vxyNIg3euJstN3s0wYaAp|KbE`e#PJ*4ewm)
z!XB`)Hy;eM&YGKx<58^wguiuixt%G~6ePpApdAe;;-!=LKIT;2ZrU+re}C>NIwY~P
zbjNYMr2R%r(V<p19Gx$D$eMUFOFo$wn3J0m#?8gInKJIn>5Mht5dxipv*6Z*-IY?F
zrg<>KzHh>}Z)DfUr2rD@_<iSlO<il6FG>9iVxc*tI!XSYYs*_vwZPW@OW|Z)pz=cn
zwho|ex+XuY+CJtP2~dmYG|R%sLvKDMTzs7u6OO)w;YDSAfv<tW#<O7hfLg*pK$I}L
z@q2M(3f4ykiM^DOLY11u94)$<A+>%(gYKa$Fyzqau-TtHo*F!wf-=Q8JyjzvZf|~M
z7<tLzd;t{`MR?J9D-7QQ)R|5;M@Rjw(^OMmAYO-ldaf-zz%-0660#5>4Lq%3$@2tS
z@HB5dmX)0W2D~zzVdDysJR65Dr8rJ9$Z6L4VEl@|wYL$y@pO!|Ag|Ql60v!nbX8+!
zr-rr6h<0$Tmrmu{t^)QWQc8vIi1v3zdfp=trj(89Pz{KfUnv{gk>{F@6b{R47K)Jc
zhW$awpfV*-_!s6Chp(4cWuj128F`tlQ8#79)8~{bTW$|9M&dI|)a<?Lm^A4|dl7DE
z@EHqzY##eS$XBS2%|*1&R-`25vufyN$}!;R$N6B-wVlg<RTZ_GhMqsgd=<!xY<`Tr
zBvExLIxYlOxrX@-O?W#38wfUq_-3>HUJ6f8q=u!e=o>F&ZwSPC=mi7`iUen@u&ayN
z<ecczZJWlxxC8$1b|rw-)b-YJsdBiWu-n$PGSGW(g~n@dD+6A(A<R7$&m<r?I1al5
zRwRQlUR=?IMncei15w)%=Q4YAds}M&&n5F^5X0)9IGV#*Hlt1pkcO6&)5ECPh6`{Q
zGv2DTF@GNJu6-*pR2WDZ+I7J6u_bFJT^!qXO8ra?JQ7|7(XB(Kg8)Ytg-Jo>T|1`M
z^|lcuW3?ly?_`Mr+GFS}52|RW<f`yqh0rXeU|1%Tbr7T6T-JJuOy#$dYo4zMXoV$z
z`o=E0UO%S3kY~MGVV}z<^I?h^KqM3F_EVUXK=DCC75fGan4koLwSE;iQ2-ZZ(Gg?=
zuBUKQNC=>S{+^D)jXDos0o7+A76eJOGDG8*X$f(O(?3qbQWSl{O5Re>P|~Q*g#kMR
z#Gzd%hypX#4;&bfLyN3ZY?`m`C(6w7L4pDW(#J~j0U#p2_^oT13T^9M66R{-%jU>z
zMKza4@WKuA-LEu4CDoPB+MJE9f?J}>wGf7A*$I0`k-wBC2cQ&>eqwrF*N?5W<LxD+
zFNnQMVn|VFpR2bWB?Aw}dXA$tcJ3&Iyg-eG!p@sfX+ltQo?)-EIJ8rwPEHiMXv(eW
zc&w>55`%UL;h3c6`i7=jsVwzB<oC2kZv&b!bRd;LE~imcUVLl);RNiVQL*WS_NFh6
zN<-4UavoXFRO~B;mMC<;n0z0^Q(qexZ-Fv^ba{XifkXotr_10npS$p}c$rK@)^^Cf
z-h-=ZSN{SCfd;5udX4G4(h<JSjUsf?77^&$iq1VmLC)~;>WY}W{=HgA^}`-vE{-Pa
za3n?~UzBH`r)VGPf-v;Cmw9}wM~`_?lPEtLTAl+$_-=Y6g*J!4|K(-GaiWH|rEh#6
ze0pgiIot)aPQ`(p60L?BB2o<;LMxk+7n|8H{0e0qoGc9Nhm7d%d0&2yR`EwYr$3Mk
zs#s46@dQk=j0^&yxRE{c80|jfA8no1dg#@$^ZoB2J)INvi`(@O?J#ClQHzN*s%Lre
zSX2ScpIQ@D(Ak|<r7W;>JU!1dqU$M$cr6Qg`^67~uNiKpXPMsE8D$+2x&;06;w?IC
zAIDEF5~;BQaQUz7fS_CBqbnsbhD`<obsKTV`4l}Q9ATs<^cwNYhxB4u#?7$9E&xt=
z3*dtpJ@55naNdS(<>T$L$jW;m-0&TyQgc5SyG0`f)P7<o1BzICB+84&#<f6|UK*6$
z_F0|?v(>-J*2jtL6p!|-scH*a?>7Re**%JzraiywXhpOTNU=R6+xm`9%dR?kP|#i&
z2WiEF8-z5W5G5{`L|$cmTs;(i8XF(Un&q!B_1%&Pa)g<BwlR1*=2`;W)|MT0;ZWo$
z$9wP??YL;Q<jG-$%1g@0i)UWaG`{^pNTKW(OC4eXN$mm%KfG0w)iQ<u0)G9P9B<#_
zAbHSA=7#8S$(1S7=JA6c6hZ>cPB_H9Kyk$R6GW%(|H^F86tPq~c|P_*L`FJIIVZ=(
zgMJe@WT`<J)$(%TTvZ_^bg9{|cd1Q-Dp?r%?Q(zLbCr+sa_<Vxnb-mFR(1hR6(dPB
zKVq($WBacFLsyGIrU;`ey+~q+i^K3#x_)U)C>-#5@j5z&UGu*nVCgq>her8ceFYTO
zkk3#&O}luzgb>>7Cq2*g{lIIbh?~OR8eNNsafxp7jRU{&3ftCOc{Afx`)CaMtRn0`
z>iR5qgu=x(m=f%j(a}0vzo|km_{tDLI!?xqt5DNT1p>+mxI|iX1z|=OnH%C5jum=E
z1gN>$2kETsuF=Q|my4yK>kg(@b=w>r6sie!6tJ}$ZY)QESHz0U$c4#_UHaNFJVOdZ
zuagkb`AK0NdDQj$)do-;W>VfSYj9armo3}34AV@(xZgAAJv70H*kzk!MG}n-1pm?S
zyprP7EC(zB@Alz|ub9mzCSEx-s_jU}&eGB>4Qw?m{bY3fPfW`IEV-WWwauxn=jj~0
ze=6{;XNsVY%xmL{c2uJ2m>~PJ@8>!rC#b7TgRIp3PTUdX51;f=ssDA3Mn{dcnXsl5
z)}VuAN#gx(0xG<2v9G!7gDjK_gqeK>H!ueuFS1Q&ogB3xUU}TeHMA+OPuStMr|VYf
zdVX>k9~(OZWt!Oq7LlK$rW`h+W%#Z2+xRxym}8@*X&&O`+D?@bFN0!#&B8UrX6J2K
zL4;6cN0(MWromK{Hne>CJb)!uJ(hm%Hcq*%l-w7Kx(H?-fSsVEI1cS^qFBy9*Q*Wo
z3mlOi&GTSt-enJM_~LUFAU}kw`x(V-Ur|J`N9(-lW4*DJs4(#`&<I<1HMJQiQ_~aR
z6IvqDYdPgEQL57IjGt)xXQa~B?LIwb*b=DQSh6%SXkUxsh$wE(VN#>dTFsZ0p4RU&
zeCrMV&3)#4Ul?4w*}^yH6`)D%Xx-heps>ue%-qE|d-o)NApu_s_3Z=ibS`=FKwH__
z!B0p$x;ZN9E$K(}>jWY$@Aak~Y%Cq;I8zOr!O%&l<8a(-Y}xT}kWIoFq9m}YeHuQ<
zy;0gwqY_MZCU9qqAJ7m-xu%aXjVVXu!nw?1!9QqOSD{#cCC8ml{i+1-<D9DR54Ty!
zNZonLbGN~qUn}G+F@Xd#&aiTpb`%47(DB>k#cZH8gROy!=Sut4lMf7(FWNt2Rw`?7
z+~=ehGUtD8VZ%8`bw;aU=kkxEg-9rCHA50P=YOd{Xm(|r=#vieW4QdjZ@zsty*B^;
z#>a^hA8!UKU|GfdfH>|t#4*`V1Pc{wPBhu^Ix82Od21A{q8Pr{)Zvz?A5&A#_Eh1W
z4&s+7sc!rTmd+<INc6gLij41prESQjpc3Q|-GeUXSIT(D#3;JOieaY*L*TFz{AS!?
zYDLwQe{o138g@(QvDf=LpgzwTcX8XIw5?84C1S%aC#3Jciw`U8R;2MCPT#BZHnqO<
zwJYj+7B>?$x{&jbw;9Q?O49=aQ1j;9D*mjGzd_On-MB0Lg~44gACV!jmCt9vC&3FE
z$reg@)VKtB|9P1y>4LJtiy|KC-H~gAkRw|R@IH<*iEMuXdkR?wA*qR+0EbCG(aQDB
z)$l8v-<N#vsHl=Xdn!fI1ine|c1AMs3cC%o@!7m;m4qPUgS&4|Zw)%ZnG(EC{ZN!J
zlQF@p6izSjLUW{y<O%T^7WRg%_pn~X#I8nbvFrtNA9Ls_@mSoqdX<&pv<+dvC`{Xj
z14Ha2JeC0mI|>e2tDzM~If+$J%~HvT?Jvp_bKe%kuYt&TZL3b+xl@1SOR-{kongOw
zjuf9kF{nZKh^M)4q^oC}5x}(m2F8DZQ_$*$-Uq3Yxc@=<*sOXXXa$$HilgEp6{8BZ
zb)WPmWq&()bPmvj6!JVBe>)MwyRzNBHYl?5b)5%3hM6tc$|HiA++CRwd}9aMfawJ*
z@+vjSX>~-|>D!dovQ=kSnCOQ$5D#6%RK9k0F;9=h(tx5H;HM3aRBG!h+%*$%n<jg9
z;+Z3z<bP~zBj>i}NqV@=BulUua_)Pxdoc@iZVx+1AAq5C9);DFBXy^|t{E_uQoeMw
zA?EC36k&5o!^93oYPzJ{d0me&ygzd9nb}opSG!-N`;Av-obCBASAA61hjM5Kas9VG
zF_^X;Ih*?2_`>jnWOj6KHPw3$!bkdYBx;1GADAdPkc$;zL5&n(HpQK{*-1vno)j&b
zMa7iX$Sd|fRvpf{qSD>eWR4To3K?bJl_0_;MLRs`uL2#AHOGfcODAw5s-Li#$*eqD
zGnHMvi11w8zEWXF2uje#Q&U;bJ(}p#CCVA|SdAFej&mBTS29Kg>&<*V&3SoK3T;o*
zwhJcY9pRr1hGfxaJ?|Qc^P@hpNUz^P;DI4OGmkJ<P6ZD+Q!;0)aG2)l*Bad(kd@#f
zb7e};`MPKbFD`MDV;qh8S)DghR$S3KqFdEtWB(cdreC7PC840_$0<UUQUcu+EIkOw
zZXfFpR<Wb!^qqu{IT}IjHXJqnk;J@xUj5)}uRx>gsv*EH@W3UHeL&eHn^|6h;%pCv
zbRU6Ei{UVdnIP4~TOnI5i4pu3TEr)>^3n*~)p?D5u@4Q}Mx**w#dCQA&3vKZlU9hW
z8r&FpyE1c+>KX6u6F$)AN;r2WHSnu}BQzeRFgS4(jnGJ-ImMK`Rtp64Ejmk#SRxm1
zAAsdmFHeR|S5sb$FcR-F3wX_)NEuq!qG^9C1d{b0rwSWrFL=~$SrDizP^@M6D<0N1
z1*nN4DHU#6c{YuiZ4%Ljkg6OvC&u#z+E-=;O$w{2J(nI+SPg=&Bq0o(l&cnNzlpH?
zlqo-xVP3z2F$hSi$90pavh$pVdhdeq2VhINR0!_8^U%mK?R%iq<g6f>voDIm$pCqQ
z&oL;pEG`ue#K~a@ktOtnZ31ExB`l$zxpQ!RJajRL)Sa_kmfeD;&pnh<ZTm#u|2z5R
zdV91twTI1b%Nr)y0toNp^oifUntHbZp=NiKS{c^vCBlI_YY!x<aKvX;HOhEPLYfYC
z>b9WET{SI|b<27y*(ONpHereUV)z;hNwnU}m~zMZ2#(ZkSx`<2mmbN_o8I<})>IvE
zJlfmcmZe!!tq2~?`PESA=6nLfNc~0+iz2qDsHl**?&|JAC&zam0CorY=W@66!@p-9
z!s!_|`Lu&nZ7zh<dq(~4zdcn=3HquoikD#MeS*C}Fn7eZM9x1!`@_55GJUsSOt0)4
zmh#!P%a-TqiW=G>H>6V))kiK3jRh*7Hy3^C+dH6Rj39WcWD|o2uMYvHk|5NaDR=Px
z3RjS92X3KkF4sF76~I{1CSg^!)U>f-`NxFOhl<D?wwC@-n{rqCK5~mh257rX*i*sE
z&?g@j9`SVEHeBT>sYMAz&;|Kc_<|310|PN3Gi4E=`xY(-Lx>^kQ~xymb)kBF7}13l
zK6!YK;xS9a72x`l3JMxeLYHtf+=dT<NCJxd>^I5ItHTSS@uA?7?}yhBvHLK@gFpr7
ztDX~b`5Jy0bLB@Gj#n8jH$IsXE*wKu9@Egkx<c>mf*3H@aItl8&Tpm7toOvr?>t!@
z=iE8?d`GO5H^-BZDL$wJHLk6$E<#$z7(9l4scjq*x$<4mLja3PVqqG}`HuwrrePH0
z`*T!s4T)YK3J>B83-iv^!%Z@dlN5S&7c62buO~9@Z@cD6RL4PCL7cyR4NxFyDTY5l
zR@_)@gfIe)**(s)geY&zhn@1r0HC5H$s6F$bO`L>SRcg}`PUa5itP9!G(aq{Ne<<H
zQ(tR~0^^mNlhQ!PJ~;k=BBS8WHGR+W;{{<oOM03Q7+t<Fr8();CqTpa)xES^<`oiM
zuK>~CrO~80<zeBKQ2F-lLVCmZ%Uka+v{15gTEiUJrSY~(q7i_tuu~nX+n!!vIHHk`
zqIxx*&yQ#hIPg?O?}FWUT#7kF49wd+F@EBUG098kbF;oavG)jYih%h}9J`>di(b6}
z^m}7x2U;)l+yY(LuF+F5*2OXetpKz&OmXAxl03}g=vkwX_8jNKG}9_pqQ;r)rGbU8
z1m_kuKT`gS(JnuI;Mx#`gJvUtkvKgL+k%Y8F(WSy(#^AFLh20eUuSKG9cfCwLRa{s
z|CKvEnz<f}z#mSKU|X_eWsV3c9i}JqlK+_#*a|`Dqr*3@A3*RU)JA_H%=S{=$zuQ|
zy7%NOez`;YXddLuW^G3gO&HnX$uPj&?JD5S2+*D>PJ_tb27FC7=AF+SWb}tsi4(pQ
z^|HThT8$?q-FUF)f(r7SKXI)nyc%Pm^ViuKsK^GF2Z|9PBJ`U`h*pSjCXiI=Ta>|U
zShpk$WYodOZ*7=xKMIJzvd2+bI6Czk1>?PoM0?2k=4fkYj^NaXd=DPv&r}6{nv1md
zgCEOPPxP*OEK`QaUQajHQsT<xQ7lcj<8~P(1s>f=yQSz@%)h!u0#5-kP;l7)jSOz0
z;5MDZ$X!pX8TXRU2KF%P!GDlbZQWC6Z`az|fh@{M#KO_$0Sq#SJ9ZX6Y?9I__tCCC
zhbdy7_<l@_v2CvzmXVVSqLpEOZ`~f{jW~fDIm#i`Lm2XZ;hvU)30V4Cy5OM;Vq8v#
z@qRHJy#as&y>Q?d1nMS?v}*v@Q11=a<*p=YWh4i~$se8Xz&ZQflg<yCqqPDkCRI8q
zcL*IWl8C<6x?JE{Z4}LgwfxUyK=Vwjt#IhcO<ZeCtR2)oD=w#)X^{IjI8CJ9>6LjM
zDf_6aO?jQH5wYFvp4kVsoXXz2H)g?AbClv~7t6k7<nDFR13xug)}KX(S_<Z#R%a;K
zWr^4nHodC%UFN3GNUdOW#6iCT#fjyi`|K^tKXE5=ZZ{KraBLuf^z23U7Z$f>yDi{_
zd#*g+PDQ=;fG<9t4`>!-jgEN>xX7tDPEw1*rx9P%@t~}l=8@c0y;xR6M@c5GCtWnZ
ztl@R0Z+JxRkXAqexSV*pnCbRZ`$bj+kNP4&ufSl=$$L|s(|enu*V<9zfM^drx(;KQ
zdcjBfLrZU{R=UtkZk9{E+zH>u+6$k_Sz;V;Odn=4qfua<SffjD_#%IGg*ej9&%>%r
zlW3fXgzS|RZP@Fl+DlU$=$8o?_0i>*FJxXg7kmc<W$6>yJH*O<Hhzt3Ivs9WhE&@;
zb-cp{Inn=H74_S+M1bgwO_x4_75-+VQRcUgxIH2DJJzlI5(m}x=|ghbx-e@SSr`(~
z<5A}#ixcT4)(r{Qg!X%vIEyq6bsN4-6H$6d{rsoEp?v@#4J3~93ya=C$N-7X0dUXc
z)c&HX$OW4rSR$ky;waw>DY~FTmLyHI^89ESjf^IvfvdMMx?bg-*)V5nmR@|?_om)l
z@duJ@)$Xh7o?(HUBWS8ii%PhMl^^5Bced8_OK2@Fe~0v&d;tJh9eCNbS=4NE;*Ik6
zDiq`q_dg}Vx}&nch#gn^9q(Oj9+oFs(15C~<|9Mk|LmgbpH@J4hnuOXRJgKGf~7eE
zxy3a~OR$;vBIA$Z7^XLDDNP5vka!-|K-rpXm4ZmfNBkA<|JnqRB@|eDGNoHk^i^20
za0}E|H19m0oOSgJ#}&_tXdH4{q!X;afJ5y{l~tX1Yj@kCZTNQO4!c8~!r<=g_I^f8
ziq8wH(xk*)zT%o453UUnY5s`mQ)+*5lXz<JU7*E+$*}quS>E`EsIPPrpO~O`aaChX
zK)~rZjs=lRJ(S(`qQnAnG!j}uO>h-{Ycm)m*Br3#6be9L-BwQYwm?BqDmb3`9X|Nd
z9GTJ4a_2vWZogkQFhD*Bq*-dSUaBIQR5ccT>JmXaB&L*KQadLXCAL<>7FOCka&h6c
zbaMnm`Ro2eO*)QK)`a+(61rkEnh(}2N1Z)1sgo&g4diKxkTm;O7vHJ*hg<Q7pljpp
zWk>C+Q4>7Q#m;-`Vbkdi=NVoJXkG413&{m(7Ojgts-$V0_Nsq#9PEk{KsFRd=Z_d9
zpoc1Z71ZZV^7qvN#kA?9Pd&2)*rxXqwZCX+6|fwrJOGTxvm4IO6|1HZ?4EL#1pe?|
zni2YHKsu`GT>Lo2*^q^g6?*WpquD6PQN!H_aU=P{jeOH>p__(L+iWS=Pan`P2(8tP
z%Fjpdf3mM<)ZS<nZA4Nf4G}4m4-lUqhz<jc-&>o`L!fSa_YFxxoGrY{H%qeW&P+n?
z`_+vg_>jp^SIZ?cdrggCC*90RUR1&jcx^$io(+s-tJqfJ;4TlB(!4q_o~laOpK8~v
zLS<<CUnzxUPHO+vSESp{?cfAPT-c6iag@OfZR<XynWm|;31NPbdl3lmP<A<WY2xU7
zQx#+~#3960)0A?!RQd*WYwfpD8)DJ~u+Ij<xy`d0Ym{~S5q<E>&FWduj}^gz##^mg
z4gr|Wy0$~73l2(qf?<vV<hLn}w*&#i`>--~o-78>rVbb>guwIWtrfz92xEnp<}q=$
zRx8#=3e&WWJtF`sb+!F9;GHm$Z}Swyi0<Q{0lTU+`DI8U{SiCAN@r;4a`Tqje!!b4
z8F#XMA)wBAcv}GR+FcMWS`%Ef_=FR>VN(xDX<*jE^t)sPi>45aCB%1BhH*q%A3cb~
zO3vvfimrtZVi&QXM!j4G2`<C`IxnC9p5TsTfFwT=kz~rxF)t5vY?=%Mt?~`?wxrfd
z|6j9ce?9+pfb6{l36{(M5pQ-JdoJ!pG}2*?xSY(LpQ0eg=OGjq*~a7BYFU_Mz~g`L
zDJ-5@tC(7%&5kUynWrTrJb5|#F~!uVGVnTIF5M-N5c$~Ng+}VMUl)NyULI&{EB#iU
z`o0v*T<_K(+md{abu3l7w83hbyz?=`E0<YPK*yzl_LRxwa!y!>Cdr1w@F|+n1;(Y5
zULW9Emdhg(Ob7?mv9xu+3u7T0D;}bsI73T$Q}7y`E_o(+^6~ai7d49kH-rQCEJYLf
zu9!~8Hn~v;%OBG_=e|TajBAnbk2Dd#9nT8r+@iWKNwpc<LPT5Y=s2+nr~%-2hj+)J
zl81E9o3Tj?HcHtr3RmB=t<lRTz&A?@PEBlJL5Op6;j${A@uF7Q6Yfk0Mv+O6IEBz$
zD;-QaqC1T{TKq#=$xX&mtu(fPr6&3D8KCd<5Vu`*R-ni$_#zLGnsu5q!gncWQfdt(
zv)O|Dz2Op48Jr-q=SiVrl*b|C2@H*v24>GariQO4(7ax#f739ABT;=>)|biAIs6-c
za5V^OFh{nU>D80Ln^uB2TS=#0T&#~*$X}|L|07BY%G8a`3}7@`6EifPiRw!Tw-(cV
z;6Dr0x@&kZ2f5VVNgL#JDdxlN77^s~b0)9_UrAg@yzAsAj+A_D?3Sjb550PNcxR|!
z<{7^MX*J79o06=#yUoadwekRUFC64kG0A1N?VGvLC`^0wLLa=&710IxahM;IHPO@q
z3euL_MHt>{;Wv)5ZKZ|gAya>EN)d3Nxj{3ry~;+$@+a-Pq;)-bRa1!z?wTp{8S~Gk
zl3>Xld7ZrwF5tsX^TT<-cS@C%CzFo5EIOL2ObX4Cp>>QsDu5RHJ`W``eOP*#NfCm=
z35IKR?DxZ`7v(5nj@<&Ad$9@bB%1K4k6@b8Xz`x3`dm#17GzR##u@I=j%Z++FT^k8
z5F|3)E9!?n*qaQoxP7kW{6+XMBY|l1q|tV!e`6?4hA-8}sYOcJYjHrz8f)=EAnelC
zjSVN2t5#a4V5Ws+I+=)B3~4)|hYzV&Rw96RNCb2N2Qon1+0Y953YAy^_e|A1uKjsn
zXE@?T#ZcyEup)74l94MrVT^;M4)LWCn$DXFTS}sk+r3TnLDU#m#lmD^L&siCmXq=>
zge@{0ET|#R%EZU~i#ia`P`4IYhVN}*LQ1y2rC9^ItKNY%S)%`Ri^W`1At;n_H94GG
z8VlLQ32IPdx>`IkM$n`JfI`kEJe9L^c$l7SBDTlcTkoU=)ZMYol`~qDPcOFuyDtld
zF{=nI;rk=WpHC-jiM!;)W>dUcvB46*2-|%Hm%=0UzD)nn&kqj)q4yP0c0BJ^Fy+NT
zc!+UdxNS?58@360rqHr+^fM`NieD28{P{j7EA18c!@5Q8^0|Z&n;oeSeuMJHG2nxh
zJ?du0`&ZT5o2Vy0cere}j>rBQ8AAuL>xnBucr*B%W)W1O`vqEU>-=RAS(x|+$KdLb
z6*o~3I-16^I&mz2-inBEBVYUXTe~Y@%IQX$%*()XxLr>1m5vw!+WVleSgvoJhD+Q;
zum#Melpc|Fokn}(bN4GZGZaYIr3qxMnzH`1FQ4iM!1hVScU?q#{%HcWdoYa@yW-`W
zI)KXwNc753n+>|#pw}?H-Paa6c?LiP!55`{)+>a(!QjHYM2C=~i_#50GEzC|JEwET
z`6CwQq_aWs=PucIPP#;KRKMoCOc{S%j^_W$w>JM0AC*L)MS*@H|2yta+#}9T2_nKB
zy$8#x+P59f@X>!#_hB2P^oU%5xDgY5rhKbc;oXWrSipPKQ<P2juPZ~z7Pg(&UMUy9
zrgA&0mh{{pL2M65?Ad?RRiFOfmm=r^j1p~%g!ejyPh)HWbK%}nUk7AdXNdW~S!or)
zmJOUri6iHrb_RNCWAqyK%>KGcV$3CG<Q{mpvPVLLqn2>Z^1m5HI0?VEUkBJ6lA}48
z9xHHi%b|spo)>eS4+HO{JsoOtvsYRKt_~RUsfo4LmmRM6aT)_PjIZKqXraaTOFT8^
z7A*$R`-Mk~yGXeKTg_@r6GeR$dF|>TX&+t~B#LPH<FTs`U7?v5>QkJ;hSkT6QP<DV
zT6K|t9i@HoeH9cR1T`tNnOF2J4hqY$esjN<0!=`aHeM%yh~V;4!kvU%wa3Q|QToJR
zS4sITo(^A}!1;$QpYg$6;QzM(idr$fke>LsID5WM@wmX<i*B?0+cX<WKZ25=16gj=
zEL_AkP~oenwIyA9BSXJ<?*~zS^OYBzOdE~~5zkHS>Z7@PEOoj`9@IrO>;o05>jS%<
zWk#!e!ysvkm!i3-=||c_1Q*knVBbUM6qHw@iD#i~H(JgFLS)45<0s^;|LPEyYn@R@
zEi&eQo;i*ocO1Q_&1-H8T7MgWT==r#`gF<gJ1l}qsPVo_+wmz%AqFFIo*pLD_a_oB
zC`s}lT6J<}_1jfeBpub5Nc251fC0oc1n>0ZJtdVZqR~FDC-yfgnbX-e5sbVi%Acf6
zZRHIW3#=47G?M%ukt~a>__fi{*xmrize$Fhs$B9d3Bs1TUmac7E3A+^BraHo0%{V=
ztoby1m<%~@M+H55+tF;YnGt0?OklKiJN2Wdy(st6K($Vgjz$K}TC`<wcmey;SLA<;
zg&y*v*{&UIZ9)x`t_w7n&5Dwb98^`)<r6|Z#IiYipq!P8MAIm6rhpRWq|dixgSk$&
z=FS#({d`eKJ2i_8Y?{k42LU4n3vYJU(@LB(vT@x$Yg8?gK9Qm$J)P%#`{RArvhCBH
zrpwGB-P!CL?JaO|-1P0Ox9fG+X}1Mclu)w$`JUnE_Fjhl5V|*TaHN4^b&jj2<0tFJ
zlngjQ9PB6Btn~72*005D0v&fsZ56vRQqGc)C*EOGCaq4M=FOPRmBn8$2pxr9IlD5Y
z*H$2fexURqZK@N2gr@IkFsHJD8{1Yzki^Q|HVO9zhL9rH=*VUvNsD)V#ntqG@m9uo
z8ZA=DwjlV8?lpy<?oFJBV?LM%{_xp5@_*puEjQds5yr9BUTN!D8Pxq;r6xHNy+z<h
zzlOg<x!xZ?hfs?^xiP4_8HgykL2Pe6&v<wf($<=x(a+-^pxcayS!HY%o4_y^NG_#6
z6zw$r4X`9LGdY;XTa~w()hrCGuPUc!<$rRcG!8+b2&Uj>KfGXh@>j4z9WcV)+K3V&
zXJ=6s=L3r|V1}hCj2AOf-VLo&MqFwS3#(EGWDP+aH&;Uutf#oqBXxjJNeBSCTZ?o#
zlxi$H{Z?L?h8Yg;Yrdp7i1spTTO|w5TYc*Usi6D52gDpG=;@__i8+rad?+I=U@}!b
z!b0Ri_L-+AGLarUBuv#wlT>5Y$IADI_%Z!2w0+nP%gGR%#HvqZ0*n&1mUHoy9>Fec
zbvtbE+;Sk?j#$p2(;ty$CK=+;A`<^rxeY~`)t{Km80;1X6E}6+pHBX1xKHEhN8@Q5
zZy0^iB=pt0YN|PZ78ZyAW*FN+ZPE(wN<S9EZ-%B*)V^>vsrMB<-cBJ(%$~?;m)V+-
ze<UOZ+yy)*6ZmtW9(A*4E0h*>i-Ov1vjUgq%DJIq6F44b7<}SrTBXQ&qt*;m!swyF
z#%nAV4q}gBzH+$XP=lMVIKjZ|GP#(!lshbXHEqwrDg_owt-}PyBa#K))rY05L%B{7
z`2K(q=6f;tCU$r{CZH-ma8}v%EnO^4Ptz7PD~&*QR6|x>M+&9CNqTZIBS*)DhPeua
zjJbsdic~G%sq7TLCy%P5SQCrK%Wdk~BzIxJ%^;X%2UZYoCGd?8gOKI%L@nM0Y#(G6
zn2pZha&!fowxUQIh59bGs$rpWfio8t9fT|v@VK$0NxMwIK>My^To}r_bbztVj-^K5
zgTGu0v!f2lMPBf`HDb=wHxqmM<t7&)q5MwEM*~wj1Llwyv3=f&@WHF6@jLbqc-v}2
zC~R4?$b^oqX~<qs8F_PALqP((7p(NwAM2`Xs5$?{pl7SUCO#|v8@d#OL<rCinG}@6
zDebC?)`{ybWTp=bsgewkr-91B>G{%qeTcCX<z{IComP|S;jhV@J>!QLy`@?j>)#kj
z+x@0O`PSSD2MNhq!T2x8V_engXstb5?ci!nPVc4AWkQVx3I@X6EkWT~yx;zZv!ak+
zNRpf5Y7y8$n|0-^5arjhlGR77<4KLo-Lf#wcCgQ*XoMO7$T~s}32U9|yQ(%#EQq4-
zF`s&8bSXW#Bu#7%EMSs_p$lBko9W2Ipf|{s_cpKz#61Dd|I;)lG!oe7_y0JtT(`MF
zN+g^sUN0wK$cXU*a?$ZG$71#>e=oC)aMgMdPc|Mu*chnONYm}1ooAQWg%K+>|9+wF
zMrJzekxzdfYK`_bd1yVt?y%Cg^txJ!5@y@u@0Q9{ja%IHP0QDTL9%|yB6{*k)!$E9
z>CH`|Lm*R};2BskO4lb^jN{;Ea@Gbfo4c%FRg^PUPYC6-Z4br^-2le-Sy@@T&NEj>
z1p3Lb+5~VuD542mbXd3QM=t=-iB}}}%&!YdGk>L!8-Q?945@w`e}2Hkh~3y1vvl%;
zBDafgx>qTDuS7IOVs|#<t_;CWU8Blb|0AHadoCtKTQ@Hpv8dFSQ%=sS8pCQYoS_vt
zOuYGsOuoD$`@wC3v*w|Q9-rG^BXKDt71QybUgkQfhnBB41fgpPSS{JZf)>^D`?qET
z?x)pBA7AN!pX#tw!J{1xegv=)IM_W=Miee|XGayIN#@kN#Q)uaMqmMXDO8`p1K2Au
z*ejJDjOpwQ>-3`>ofo#@QArWY>s|_UI(sCNdDlEwO?B7S5wHOXI$ft6<Gv2j+qiuD
z>+3I|9o!>HsW+Yqw>UkSi2VJ+o(oM>V@T1heNqw7uMvW{D!R1$NL9=r<{p(OFoWcB
zd;|xo8A0qnJZCfu_Yfe-DJP23t1lVA5*2!0H3#EnkEH)@hGNI!)_Vp@Z9BUL>$k((
zft+Mi?YWzC*HCZq$+WNrsPuRB?XR?2b}3!@dAWP-+$_<=#(SdR2INT@(RfiVKAHWW
z3`<s&jw`km>P*dNMxdr7a$;Z>y@o&ybs3)cHVsb4jV&H~J|}v<AI&crL{N5EZj9*x
zEdu$QZhZ)Oy4MH5YfU~{0fQK=BGLCqQu^{zO%r`X^m#3@*^gqVa6Y9rC*0Pv?Pql5
zA|Y}qN%t}HUzE*SCO7LTe%B(du|ZchnwOu%5h6=Bh;tviVA+gl4A)gj0FpAzux<FY
z$!{LJd4Ra%zG=QfSV&0!GhQbjeQ{%VK);SO(Uk+I_(oIp6f>Oww?VXAi4@|SSXV|@
zAD;KpgO!K<MG+Kx@#8AYJNUSU<Xl$Az4<!W;Sr(J4%xA5B<W}v7!E=?aUk0+`*)Bh
z3f6Ul6qA8P{vG-BFZ^{p7Ft9YfuN2^xEJ}bSkXQoc)65QB|x@><wN6ZshKxvIR080
zIyaF;g(3619!iD%L*<y*-85YZ1&&+~H{eU?F7ieWrk(pwV6y?033paDLjy`m@!;7+
zFxY{x@dEb;%&%E^{ipDlTS69<CH4m~pmiyZ3e&PJuyBW?8G_fN^z~*3^60(qDoqo}
zI3ck~Cuj8Khul5b-3GNLK+*GmF@x$0!QhtA3$bs$A%uL0qz8SKWBis2QamCy%hi8z
zJtr<)83QH{TkC6O1kgeLfk#%Z(5TwbZ436YCeeCIeKUyjUQT3rn-(5tEPxE3x=nEj
zK!;l4(6><i<52g%FlU7d8gmlaG>*iZX1?t%Rp(VfBGdNtnlbf!*DyKaT@}7+9?m=j
zwW$!;v=o=<S*f$a2Cai{#rF^eO%?1Z<*-^~NO-+a>D6cdeCgzv{#>@z@4Ny}G8}fs
z{xwuG->M)`lbi-AA?^0wxgofBk)FUAg+o9}2T2RVlLiRoD{!*l9D@F<Z6vziBt%Kz
zCW0p`<0H2e0MeU7$(NQs1}yxvFnR^=LO(pENY8Wr>P{vN^jYbQzklQ%@Z1z}2)%}L
z@&W+Liw*1^>Y(SJA|8HmF5#h8A#FQ-g0*)S*8q!14rMmke!MVa&x;7ijWreE6{s7y
z41z{?Vj)btFW9n7A@W%H>czgyjF#Q}mF?g;&C|9_44MbTWv9QMZPt0$*Yh8#T0Vh~
zY?|(LWZ~(^nO`*<Ukx|}be;%ReBB>6<alK~{pQYYp}A;hvO*R3rx()cixj@aIK192
zj=yEp%TNQ0#NuO@ISP85qQ0sO4PmY$17_y_%L;}=4XA%E7q7tM_590#b_OhCPxhEG
z9l$8n$*7l5=vdK59B80U6t67dpxZ1U^9+LoF%4u72u$FqwmdZD>$~NdJD+`ZS3`BL
z<=D%9Vrrd@R==usxBl9WefU(v){`UD))n&0XhF`o((9wL3RLI?YCp>y&lRzj7pKy0
zXYt%%OwVgB{DB<zNtQ3bkze(p@0$6F6=(k6D^1u_{nlA(g*_3zY%=!Dz=Exfr~TDk
z$hbhR%yuOQV1BQ#u!^vbB^X|jl*!N882b%h|3SkfWi_Ha?&2d`n0Bt2nxk@lCy=Ze
zpKgJ%roZDO8AfjAZ8(<Ir$`+O+7%|9A<j^y%YW$rYQJA^Y>&2uGnk&z8sIdP`-V?^
zvwBRTj-!He1C&uimdZx7A863W!wIFY*RjWG#vq<ERDYbjO1QPl6IV~nm3=$-uM?e%
zXIHy;*rk0&b+e@FOpq*x9SLf5->y%UzCio}D4)wgFinS-DXdv5@!b3oC5JKmkz$i<
zA!8OeN-VlSeqBve>r>A!Hb0OeIKjXRFu~C*x77tT+rO{fH6r!mu!w@+6S$E%(HAst
zS@!}f<j?SX0Fxw=8(ovI1T^RypMZv>>#2T6K`9A?MUM|KVQUQ%hDCR?g(n*|sSc?H
zx7gfO+7h>XB#%R3<jJ}ea~w&%6|&vIVwYj!SQ2vEMq9F>Ta;JDZB^T<KX(mPIeJgt
z2qOFE*!PCWe@5wsxh(EYwvK+>tt0uB+ysA6h}jNMp<i_k$6%^#Hq?h#WIq0n94J-+
zwoEAVSxHFH2eDXuXoI516~tfwTA3&Xnem?*YOuF_w}jbZWOGovgR=9S+`iTwo^GyK
zU7$z90@E~ubdk<OAG3QWXTPs$WO>tGrMdt~!=AXvP%V0Z4qy5f<xB$uzwQtdmPJW}
zR)WIUr#V!AzO!-jC)t$q+0?@Op*74Y6$IM9y&jOE?7wkjP~58?D>!*I@t1$Xm6>+*
z<!RX4#=L{5q8nK^_6}<S*bQDV<gsjio@p>h8G>{N@gXp>+F}?RZoI<bZgG6qfB2o}
z%rk+-r~g_|rt~nYQRKSYm;GYcbZ=aDz6|yx`r(YBARl0k_v&Lo^y^q$G8(4nC_dCJ
z%UMRN<CAf$pAP}F!jBb8m2cI(H#oGTbvMOH!Yk7w4EpQ)$W$NW$mVtHxQ5LgEAJ<a
z^F!aVE|aC~x4H>9^YO(I>EfxYwrS&uSMWD~-9oBalMe=)u`s1J)0Z1S1*zFJW53~U
zTMs_8rGzIBprZ0TR-jGRU<WkQHr!ju`i;mRTd^EsoApZW*_VbCVTtJE6G48_pR@h%
zQQHzH8rA5k{U??4LB_o%D1w?l7KkqEc~MewGyatkm=-2G4y0<|;h+ROm`dGl4ewh=
ziNZ3&qz7V4!M%1q(em5$kz3NVqoPCClY5F07AM7;Q>4GX$v+5U08{8Y=;VY~FR}u?
z&!+eq!BMHce?ZI>?WkTg|KLLA8e!DJ0z+@l*h$m|A(G!T0}-B;dT0R2x*=cJw8ku>
zwWWIQ9FqUqBA-K4ec&hBi?0eS7qkfTU(Zh<wW?BXa@$wNSU7@*?G?d>J+IG~pd0iD
z!zQ4oQ=KjQV$>TX(!ePo6GTLkqcxYE)4Fu~SP2QKG3)6tsx&#+oeLvi2vVVC>kcZv
zH$;mNOy$YO#|JhKPgnLcW*@JvbP}I<<X-TX^8|yJu;zhLNWXU^Anv$i1eM>u_cXdi
zZ+uEUR)IDd{bX`T{^m}-jv8dC$g(TXlII||dkZ$znfy|!ELwT6u=gE}Ijj~E$0pF^
z%|gXaM-&1JXDFlBprF*|4IcC)mUfM4*N5faT3qh1hY=(LTy;p966s%GbRx}81SJ?z
zqAXwXaX@UpVWMJ|CR5A;m4$3mM$2is`2}&O=KE0qJ3z$0AHI=u`X*8oiF=|Pft`kQ
z!sDe{!?G0Ij)k~BnlSA<p$iv60CtK-PUwewg}-tEkmA-1JjN|O+5FCT&qQKDj<L}D
z=}ovy54cHnQ^t6%JZ6rFAWuO<VhT{tELVe?lZ<d25MpKQ@1(9$WD5IFFz2X)E*qp|
zRf3QyLa4L`R;M4kTcne_pS*yRPS42BigvZorjV@Bh>n{iAoeX;QLF`?Vd8~XXPWJk
zju~7Sx>ESyL#N}U7hr-h*=jRhJ;3Kmsw5Rld_U`q<;-@>fQ%k<L0SDy-iE>R+G7_e
zr%ri)nP*9C#7*BW;{~A*$>D&^*C>E_+tbQUVD3(Z#N#+=YPewLOUVz72P6ymf0$&N
zcoE%ejmY4R3|+E>>0A+xyH(iTW8U-JNWM{kX|ZcPwE5S%MF74D3x!}TXJ|d%Fzx()
zN1u){9`^NYn^6J;e%It}d85rJ^=3_7q}l{7T9_>O^`&!Ius>i^P49DMJb7UH)Xckr
z?Nq?f8I%eVPT6hG^|dxsvzx{1t60u_^t7(5OUO;=$fy1ZW*ns<Kya!8lnf;-u%ek1
zrR_fN6zgtfQeW>&M0q$mQtbFd$li0$vN+Qa^4HVK7z(lv-z3a)p`7kj&)>KfscNs>
z&adV;OhXOMrlj+#c=K|iLrxqV+aS3{Mic9p%BQ;51P9d>FHa;tg3|)Ha_0c#MD2}h
zydq1T{A2~A5_tv;Ik{(k$8ge`8vSjPqf467TA5Gz<1&u=qwFn$?G0?9bqdhGhw7+r
zl#kjV@8;SbX=NJXcwDy{N3uSu6KsXK0KC3ts&xo&0m(m3@k-4RA7WxdX8u-MDl8e8
z-#rAk7jGP5FX<5nT*ur532m;Jud#S*gsyvX$J|>YNQ!JI1Xvs&N8})(oNrYUpPymL
zSGbtrQ^ZyfnXVSuKCd8}l<r?sEySJz6wrOp+*9M-7xun<gD(I)BoPV!8u&l)(&$<C
z!|U2i4iv+$-joa++DL?edjNrA%y|Uir3#`ua0<jzS&*_ebwPs~{;FNiG^?x}M?*}!
zQNxhxSVHaWhbzuG;R)?OyVD+Dp9qc$7E_x*Qs!W1mU-<4oX!=^v9@P|Sg3eazb|NE
z7Wkh?2bco+$B1UpeuIqCM6)bSkQ0@8A(w><0xxL|`oZhwE&Hh>bmvQE8G7r~1AwtK
zY1yRB&EE&(fvwE$bhSM>-#ZhfZ_KM8Rsb?`K4s7SHdrYzaL~~G4|D2lhwA5j7IS*N
zRbrDWm&796vG<Vv(ul4y)vOmPSEU2<J>*Wnm3m3rU5cT<IWK%;Pkn|(;d#iqOyBlj
zg{VI%vBj08x^cD8{kOo<5DOWOxV*>%zcaZv*#0y9&=EkQvKeT+VtOJ~n`^*9{K}UM
zyr;Mwu>|5R^W-;iT$y`XlJj<?wI_u00_W)5-mqdNhAx15zReb(qfTh>_3^uoaZ3Dm
zRY7{$nWB=Msa$g190$;cg=No)yz|)8lz0SlTB#=Oo?>EBujY$FYIoNK%O(361Nx}z
zBXQ|ZNd;U=-Bc2AGB=WA4!|qC5^kH*(r7CEM2MVS=Kf<e|E24~pIU&h!WCEHn(YsV
z@3Nn5dS(i(lOI&?J#5z33VpNBDOJeHXju|YBE)Edu6Z<b<#-zF{3d9~ym|ORq?EzV
znIaudrZRB+TW5AoUgD_nQFcFnhNt~wI1j#&r`qf5)L{cL2#_#u?%uGKh0vp=SH37?
z2tKrdYu00@YGuz!E;}jRgl~3ZTJ{xJyB&j$4B2wR2kC|w6z%+)sa|=P(q1u&slb&3
z%iaq*)QpKaWb_lH66%8HIZFSZPrYBw7fvccIPrB;0f1&ZSrSQn1(vILKt7~4z=(U6
zmvf*{(-H|NKy3eQpmzyjhQkfieb{Q{a)5|%Brx*UlLha`<rTLoAUcz^s~Kh=aKi^I
z5cPg2^yRhJ0Gl9UQ?9STbB8K^bhHh{{JevI7HdZUF6EaJr7P5**ae8zvml}-YP1`+
zk<Q9}DX4lOvr1e<m<Q~=tfP<e{K2V)*?pL`cu<heky~$`1@V?{VkO>fS8t~3H|2kh
zcBYOb*w2OnCHEb6xCqa1ldbC)pxXaa1A$qh)LR#|ID;K{BYV0lg1bpOL<lfY$}k)%
z7ny_YU&ZT7;2kJmZE3_;LgC5!2sU(nFEau^*#ZP<tH=i9WtAlV69A;~v&adsyl>(M
z7KdK{8XgJN_g>Sgs?1l{fa>+`qn;Sz@TVID=t&1z7fp;v#Uw6Jfcm%4t5K<;O_BT3
zEQl#LdS{D>mIhAPf~Ht+;MMJWRH?}-RD=vRVlTmO4zdnI<z`s=PzTvpZ`DzJLs1u@
z#iritLf^LqBzNHEYQ1np@G$;0GLbE<y}*5D5M2nxa$EMSciH|;3hRp>ky~c)OP?`&
z5Pjf}c*6R$RJdcTO6l@Z6eSNhTRcP`jd+G;FF2{xvA?+4!6owVoxl>_kk=a&QC(D*
zd|2HuW6HKt3!9+`#Yr-nf9-%&*Re2z!ZOYgQgdfv7jR5ANVok%$K?=hh{rE~OPY03
zPj)Wi^nNOW$f1Bu6jQB<^t|07<O+2`<xCR9O_U{pW+`)<F^fLqC3WMzz6|iMc6J%X
zb@A}DMRMgDi&`SMP}K)hQ!RHo)Yetcb%SPhm=l#XmjK_)UHLaFYTOuao0a1`f!U}q
zi9ccdYVfmy+p2|OaG}d$P$vV<veJ*$zx6HQv=oX^AV>*1{XP7N(!sGA%CX~D!*d#-
zAX6q4(k_9trU3=EYBmPW$k|#&^qE)f22PYvaOL4v(!iQc|KQoE375sT(t}q_x|kHR
zmEcC#X>cnoHaIO2$k~=e#o&jmx<kur^&h+{D&gxcQVJ4Rfs25Mf~E=GWmcG^ZZI50
zJv~XnX{DO-6*jgjaEqM!%~O%SaOTHe3mG2wf8wb?GN@CrStKYLGHLJ^z-TkVA5_Ze
zSIr9h+^@e=yejm*DX+^sEABY3OnDc9#kswVM~7)3QU1D%IXB=dG|pzC7k9qZrI4ml
zf>2d^>L$14A01(31X0xFLaPQMAYNN6^7}120DivtY=D{=+;X!@iZ$xukYF^tPLuZu
zj6a+Q$pNclR=AKs`rEVWP!<O$RE1xei4ej42<c3D;bVJUK=^8Bz&J!n&7jk5Y<p_<
zbVEWum}ENvCp+^`@ahz<E0QDH+maRKpMdGP2O%si4fsj_xV)V&Y{b0m+9YM_9}F8b
z22Ftntq`*yZwT~^X(KJ5@hj0;5Rp&_6LHu2uk1Sjm`Kl+BCj!q_CZY&sEn*1MiIXj
z1p19OjH{qo?0$4X{;WIm^U762HRM|5FkpRqXbJn`S-39RKSx&E`tn4wcKvZ!ojV4V
zpdUO3e1v1ZcX<7CDuDF{!$ZjTl!JK-Jy0ddjcC3tuQ&ye!O(=5l`I%*j$y=X9Sg6s
zgi9>R=9OyBB}^Vo2y1yYigJ^~rGX8TV>#9UwFe^`bmX2CHHH5S)-=5(**-{$;O%J;
zrFJf;u9kIm;s|9D7o8q<*#7VIBvs-0^P*H(tDD7_!d8a)?b!rob=6}~gEm}g<5tT_
z($YUe#U(T}m6yzlai1Vv&|wJ8{Ql?uI+LTNPAoMXl}w{c4LF?}-=??0D)8u~-VRzn
zBkvp-GsbUkI(pxnMcczd_Dt^A{oWx=e?Pl_YW3GNrlNTKE|n*LumjL)Ea3zEyMA4o
ze2h;^(NnyE4??e?#3>X~=i8OE3yZ3Jk-1z*`gvG={48|xd$|V7=x)WA=cSId)&`t~
zWT0Q&FIpAvw-loff^d@;>6Uqjfx3|;JtFE8Q!Q(9l%2pY8D_rhe{WQZZUcx={06Z}
zn0m1FrpggXURC?aPZ=%LHW0@hSkq2MKf^?yPf4DOV)rxLI_{Hp2z?};swwSaF!!?c
zL*E-lj;CBFW?{A$vQDw3;g#81eA1By&cgS)ON;*^!3EVa^FLwdYX}B*@B-1UhCq(x
z;)0V)M7kSrs3K0WkC`#4j@{OT@|U#W6T<!wYnu~<i^4?Id~Ez6_zx9;s=Le5qWWvF
zj*1h@J|68cpB876t9iEW+rD8uwgB%`vxM&&%56aPj-{vtVXG*F&j@8W5}CZ(OHxci
z-BQArJMmh}H`_6f*B8@~pB)%f&u7%SvJrB;G92ndKN5OetUJ|gUVnx#Vj4URNyd@1
zJv%Pz!aC4y=kFYe*M_!cE07eX`+p>zhnG9ER$gr5JvpgnhidOz3H11C9ZAmd7F>pp
z%Md$g$@DF0r$@3J8p$wM$Yt~nQ>Jbe4ePfDp4Aw3`3Tit&C5!nVd}|sb;ZD2xab4m
z9tKXT6s84?<fOt~#YA|hIfJdABG0w#L}2Qro$1G)h)=x+o-mc!yDhHj9^H2Cmp1H-
zVCZ0hlGMLUhy5R5m$l(76k}|^)1L5hSxSo|Y(WTM=a8@?!2batyE}!tO-&I-mx2Zm
zr1L?;{7M18qHQ>q%PF8}{@uKrS78RWTGI2p1h{840ghjX(Np7v4l!fo{y-CraI7te
z$8006NlL*6pxx3ql^uui4IdY&O}Z_!+Gl-NIT_cL4RZ96Sl#p%a}pu`NkGro@*Aj(
zbdMb-YXw4e+EUsURqbqc|A81d(yUQc%Xz=I4?+B@y|kL{T@nS7Ttd@AGzpIRC~S&U
zPOOYxdK)sEdk0~G2X|G>-6<z<+T+)Oa_v`%(}uR`ee-<`L_B?*Yc60NNt=<!3hMBO
zW_Gfrr>qb3L~k8w<O9`Dk4p$aYCP5YoUgL5b3(`Vk&pSWOx>8W$uL$Y=%d9C((EB~
zlD)ZWCMY!>gDNs<Hm|MamVLC^WCsKzKsp&182A5_+tsNe*Br(~&KRA&QpAZCcH6AO
zr-fKFw4wzBC8$VWnEdbJWCsUUZx27g&!U||me2IwR=LW3Yj;SSH%k|_wsNyKoO?j3
zW;gnZaMFU)Ef7<*2<}h(tjKA+4PB~KP%H4Tmf0jOMTFX`5AUX<zZyRsV0+I!7JdpQ
znIez43m7szaev7l6b}`7FYJ*biUWpDI;GxBdpr2$dn?nvdm}%`c2UnzU!haE%ccdQ
zKU2UJe=mXi*Z&S@MBudv9UD<wieR@I1*SUObW(y0(GP7<L1RMV3-A~eK|r@bq{VTB
z#NO1z;5#dltQO17@*u+KnBzw?lrYDK_*zNEdU*3-@a^CTpaye+*3yM-OiJ1uHoMtm
zbmUFw+<wHH60+gba&A@hsN-8~zrq^Vb|XWTl#cxBh%8W;t*6FtfUG{d^hpDk|1Cy@
zBy085ggk`;90EHDj`d@>mb$1o#-$V2ZX%q-93F&plCgKhWh#{LpP~z0A!#4+bf88$
zq&HL5At&fGe)04{E_)3g&i?4abUPg4_XsivcsI8qw)A%d+CS^vAc%GxpwC{RPdD{-
zLKx*OnJswa;vN7a8_H}uZqSv^vrAFG=^sMKBvK8@2=1>!8Eb?NS3DNd{{0~?{A$Ke
zpc^`t0O!6nuHH%}IP~ea|093$>Sdj%`hm*_uWjUO0yUDI<H)g}K`YNhPBH@~9tCac
zQ+6q++6Tj{!6ovStX2hsE-VR<CKxAa_WP^UuwZd@Z>Zf@KC1M4kYEVg+BWfLUYxOT
zo==l(ZI52{JB`z2H<(;>5>kKspyh}R^%gb+yjK%B1R@=-VA}xmFZX6?j?XvSF`MmG
z5VmE{z>pRKmv`yrOyMEkrEg{swuooalA*mY4`8DWAmK3$!{X9IV8>S}BCE;efY<Kw
zX}d+Aab>A$@S2sHHOkZmE?It($<a)1!je}E&UU3?s8Qbx%76mEWAp#Ax4vn3mvr^T
zyNl)P+maXjF8W@h9;DHWvE3&7_ZV{STY&i%zQOt8ltz(V0j|)+dU=ajlnujtHi)i5
zm9iQ@!!ncq90%6f(BgDyvyMbz<z-23$F^w+G_^v(-n;y08vn&p@-TwVyjd2*7ZTZO
zBh}PwZ!B=s$_f=1$B@jedK5(liGXH?kZp~ff)l$v*AMHf^yNIOF6^P1%9*TxMEHuR
z^HfU<q$y0*1G5I#|A2uJ5Bij&%`~Sdl}<x}KB~0_2xTR&13Vn?g2A(02RYs23M4FI
zB?zri>mLm87}2@U_{?7`OJp-Mr6-T`3QX+|l|obY5zMCP83pg0;9l9Y9g(UFn~tz)
z{;{W95`ZY_Q3finVm)azxaXkARlU{$$w#|cywAKSF#)c~_p4(jSzMG~CFQvJMLRks
zBIg!;$L}XjiZx8OkTNkFya2dlCgXLDnoZrKWccNzJSbak)V2+JhznfxrXd=aPvb!;
zY};R|8=<KT>EKaZ40iY#d%nS@ZsF&yDSCFO2LU*~`UcgpDxxbeYI0-_*@O0oGtved
zW+vQ25TNHQQK;KsPjt86P!Ep=WLpV7AcpG;(Uwl>WvZ_hd@<%r>=N<;!{Rl-CZUIA
z*!%tdz`Wx3n}qrJiek|TRB5er?4GfV{s<tMDtYJsfW<MK3($&frvGW6sl!#JmkHBz
zk&eq)agy(qC#nLTY{5oDm6Wp87xoz~-$Pw#&Z}r^_ybPe!^t|@=K*;4bp}sG>ebvv
zSURX?A{qv}@PUvWy|HTug2hyvkY3H)78)~#RO!@cd~1UeDaX#?Z3LORDEc9g%{H6Y
z4Ben+F8^{Sl0k22`#PH*8@|&_nuTVxq0^^eWWpkNpis+ze&@b^Gwo_3Y~>x1?t3{&
zV0D7h7xyuKSey>7c?)f>TaT&2Ctl|$P_gijBdTCiYC8nH7+Vxm?@GPU6m0nM_TpzJ
ztG;JxvGkjSy_d*9O5)3n8jL~cI)z(p&k4>RqE7vO<E7fgUbiV2NbuT$Dx!M%#I&!h
z5@x5)MY!iv6srE5E|&>BKU;3Ru+zn<kI!t98j)kz#^K2I;I$q){=Lm{L}5h1{<He>
zQ=zF=z&s8IQrtHcFvcNU!hR@-DPuQzI>&o?XOP8e_m%1UD@~u=)=O|&2<wa*j*P6q
z5%4c}{h^ZmfddONgA-g&Q|JI8#E}B7`6g2eYP<v(LzLwxB&*tim-YC*qHyq*9V{1;
z3js$c^*KhOLM0t1Nvj&L64U(etre}8Mjc<zm0QbY?5)B(k6G0!G`0`WS;VG=_kh0z
zk}OF_g4b$6&$TNhG66iAZ>`^|wTK`byhbwHH$Cy77G++g^LkO#+?d~0S+~bY`Q8jO
z;yIIyFy;5QmXc21F+OWRH(78EGxi+`lOI+cT2t)sS1-9Z!!QEXrkjW4&!PC~W@m`|
zsD)C+^#&JG8EQ@%T5k?Z6|WBw(GtrJ6BPeE;6tS~ncIM!bf;~N1sH(Gyg$Xp0Ja$F
z{cSarusF_JFE@*`aH28-`3M!`AfrPy-ob#xJDajET&nQ5p8*VCvrex*7~hLVs(C`C
z_a7GjfYwiHsrwRhTqLqwaIN5qHs*c`4`vPQ3t72Hr{8QW72{*&p$_A{l4O`EPYoaU
zFzDDB<|yvE>_x{+f04oVB5VkbbL(=6Nq8aOx;Ot;B6#!wh9J8PN;?*BwH6gJoE1l>
zL-pS}`s;1b4R=U-Q#MmDcxSV^EUd<H2GS5Y|5p@m|9`!S1_}(@?o956OTsz_IgRTH
zvw<g5l|-HAHVn$g8v|1=X5y-9thRYM9LCaC^MpVKl4Dk(X1e^zn<IfOtGFQAy$xv`
zerpasRppq#s^3(M*f?P-E=zqRX$&Hx4}h<;rNg3NpIrB%igG8X*V6@!uVXE>Rm~v!
z-km`dn$ej*@mi3~Z2ZRpo|_cxK;Um%er6j@9;UWf=IejU*MI}-b(u<#iHQxREb6NT
zX_1{!(I8`gGDTznHQd_t_u83T#f3wM?2G?|qy_fR*%$DUU0T^1;dA2THvlW+sS(wz
z0p?;!=tYn<gW8sZYgDOZxs}N#&KC5@zQ=i}SJv6dfnm#`p&H`Td@gqhsJgr-LW`KO
z?m(A@B*tv~-hGTYfAaTwZ0}&0@7(A(C~kDV=!Rw@Vy*fjQa})l(OHM?yEDQJHA1Zn
zcb+SoDo*EQgPih(I;sP-=jX)j^dM*7Tns6bK#$@KT0UgKFG`b0Ag<&t+J%d<S`R*m
zOzg5z*@1^Y*$MJzQ8!MJhzjq>k(O=f-GW$UxX)~^iwFLbVpR>E4EZG;5S=SA{!D<-
z>s3-O@zgG><zT}LWLIXsKB<-`6ZnjfRDl|fgZrV?{rbD_qpc?){B7+b)S<5vq8E-M
z3I}M9^zdTF(7-Mf*^S=ht>f3%+Ix@}_lzpjHDiAT+XAz`tuc-pWSx1J8Y-d~zCdW6
ztWgm{)ORwQJN6vGfS0xy&aoMqpm!7_5RrPl_w*+=y7D=6aliOV5+k*)YXl?dc3*8V
zy6fmD#T?~T*mawQioA8x&u5R4*d8HCyp?L$$4$ridf$Il5uVWnn{Y{KCnm8@6#IOJ
zO=7w-`nySIm(JyBbX~tjDop!|4Mn7$p!?82#AY|qJnEE45i*{c%N`>#g{0Z8;CrC$
zQ+mIS>k|Mfy(4ioNeB_+?(-u9d)kOX%(vYN!~z^<bqx03*w41hfbICWRt|db#5kZT
zpIgZ^{>KyK!ckG<K!n`!&cau4(R={K>@G5e3583=OR-w^=9H~Z{z&4CWDH6ZcsY(B
z<09@)*rETYaP9Uk4iX!Vd$-3KmGH@Ls!mfCgIaSH=Rd4ITQA(?voWcwlNCiEh5S~e
zm-Z3r#TX|>THFt`9(~xQs#0eP0pHl4d_pBU(`q9=pHfWhx16ohf!=K6fHO9m1ydi_
z60jIst);c1YuJREG?}!9+bv@lF|{2g#J<g94c31Lb4=fO>r$@ksCFfdt{|9?{PYp&
zI9J{QqR$RRNrgVy)tt+YcA`i{#$}PKYYFT`GHDnsWzrD$^TJ2-1$b)&r{m0yDgTHV
zYQIc^wXu&iQX8GzClXdZDk#cop_?fDJ5>gEY+?g};GqJ23gyi7J(Vm}CH9&O3>^vU
zUV|d7=@_66p;0E;3+L(~TkQ0Za5sYPhkQMeX85}mDBYGFn{YDris3*<n;A0uwix#L
zE5-e02XxbPB?*l>IZ8~M*R++?ot63yyh#qGgZ!oYlZ4$nG$`^yn1`Dv`p=ruV-0oS
zzX|oi<&@c2!{}oiaCgb}B02q*G{)4}sJ0Q=pBH@*2`D^7ML5um;M==z?I1GQqh(k=
z4&6h3M9f@UfiOlkNHaf2);Q1|db~!_w5*Ytf-<hVtIqb?1KQZt)+8y}rPY%zIfmlK
z7jSNVxKb273pC3vw6R%00-y-xw>r!^R-Gn42TeiDvW?&ND#p|efhV#F|9s1%(~oy7
z$gjrhwu;TJv>y=zR~AssgIf}eq%MI4ZMUW)10}${Fx=>*Q~e%z@pv#Z_JJ0&E~r!W
zzSFfJmR5~b)4qaI;Bjr4g(Gf{SdVj8Hk7?R8{g`uAn@rK!a9Iq<<8}6>%(#{qw+W~
zB?NVfzrOzrKtU!#t+6?6ZCswFK8m|=O}^iDJ0t?mF^Q=2ZT`t-CxjV;*u;ueYvAwA
z#Xs<LhMTI&lB6ND^jx@9>L!X(OiYigm5@|o!;PS2-D3rSC&8vv+HE9?8(n*krz1y1
z&%yL=ru7VC1@9TfZhhDMj4m~F=@5BQ10KQYuMxuxu+&cKxZCDziQ3+HK&z{)R=niG
z^YKYTz&d*5p4N6kDN}drP6bb)bW^v+&_l{#!A2sRx=xF%X2ulYVL@pbABpD$XhK&z
zUa1w?jw>z)=0=dkko&5CtGJGGwJ(90l&VP0H;sv_f>_Knvz35k<5S=G#8&NfK^>@V
zo;dUU9AVY|bZ;%xB|FtFT#suGVFrM9m;xI~e90<N7$3yG>TJBsO2?;}Kt21lUcK6Y
zc!h3MsEAh6jJu*|u<SC4#M_a}NF~6WM|3-oeV)ji!g#A0ld#3J+K`?~VH!&&k+PUF
zK}u6v=NU}&$Ff@70*Pd_9A6q2)vXVPR}A6Z3<xM#W)dG6JCz5PV2GWbB08VL|MJTs
zPDKyE3qnTV@`f8-j~^RsTSt{ZnZJ#*a-$+okk@h2|EEXn%ArZ{W>MCsYjrb>nk;Nn
zT7bRO6B6g8b~dSAK{IQ~!GiULysq`YO||;>KQ0luYWb~8Wi;ju?OJ}5T(T7XuPZ2L
znk-$*JO6b1;`8#$*VAUqZmf`Nvk<{acSsPaz1#(as>pogt%e!DY+9(bkt#*4k~-?B
z3U}<TB)rpaznw8u!>G~p0W{6EPdH%tnvb`EsLl!_1%H{wqhENd6geB*paPXDv{T8p
z#T1GYV}LTvOTRee7!Qz~M6=Pd2F+$)Rg+uw7+C(td;lj%o>=!J7XNx$G<CaW>XNp7
z@llhhXn;iG;IY25MmxP6yJfk{P*)VKOm9+EdSU!_Io0HSJS}0kS3YoGXtNIs6ykFU
zNv{Qz;F-#K$VT_84T^^zpREQHgAHB~g;__!E$ri)WFcicHQAQfjFI_nO*~M;EpV9!
zIt#LC5R&5$MZ0P3Gsz0WhOe9Pf9FA5MEA^WZ~QWwPEOo6OeEPOLHutchCc%I?kKOk
zfnbw$GgX<n#SJj6l6qp*BpJrX{cLIWIQU9UkoD~|!{WbV^vqwJhp)>zY@x@bo%URo
zQSk5TV7k_A%xVg#7%<K~<(AAb3Y5FA)Y<7Pdh=ipLG!}%B{smcct5cQph2bgzep2q
zEm7acuUFxzS4)@rxdzVp3bIM&=-WCAx!3AZ(R2gu+g~B9e_j7Jz8AA05e)D-fGFVh
z3_LF{u7ZYmeBf(iMBm_uOe=RSZ**Ij+&O!0Td-ub&M3lz^sZ10PD@8;A<QQ43fk`;
zVa&78%Pj^VRQHa%S%lcZYoM%X?=zGZk$KM%ka9sf_47(DsCjXC7zdI!KS_NpG%$Ez
zNjI^eP!&V*pB)+o^jDw0xa?<$svmTd8sJ8ULN;0Fp|oQDw*pBFzCHZg72P||c9Q7c
z#TSYC>i+OmBeB3<FP}FUX?d>$KG2&0<c$T2SjcP_p|T@!5ODcno0gF&S2~_VMt9{w
zM@w^wdA}^(m6yA`dO}3{EiHO13H+2v_~!){ADhjb&QuuR_bGcL&EHfR=s)vxL6!Uw
zc+=K8M9_Ht9Z75ceZxKt67iy2+=wrn8oX=0KHMI<<#LNt{HYZ}v`r*h7Jm13^N3+@
zm-#>5_UXdixY-YJV9N7Z+${NFbi?ZD-oibd|EVdC$`15E^zt6fY2ec-wCiG~|9>M2
zpfTZUBu9rMFbzEYnNbnz?rIzY3gcc^PjZ{(Iy`NeI*I}~$`y;PSES*uNtjGLM@7=h
zLz8#2KQqD5{v_dZ;#SaoL|Ahqpny)i#u}OX_F^eyR$p3+dEXIYOz?+U9o-XO0a01}
z6laG_=#ObWhC4uLi)DDuGH3=&0g}VfDGGbiKz;NBw}R9&BkS5B8AifVnpGyx&JkN>
z*6y{$N;^saZ;bbg<jpEb2AmrxX5@Qb&J_IDAc-J0kCmrk=6bFPK75(Ur&ov(r4FVk
zd~fLVT)AT<hxfRZ^IyzHg5UwK<0-c)*7<@FE4J1B(V<$>p7YznBnQCg1}|n1?uKp#
z2n8}?2;^{oWEZiZtyJ*xntPSXE>4m6w`+h3s?gkL{iQsJhV$ev94H+7n8lwyG<uid
zU<qQ8eX?Dz$^fqh=A?yoPQWr2{;+7p2q-J6VTEfK&&i;Ps^8OS(?csmo3leyU$<XM
zc(NQy$uk*T#I3wx%NQWuirZrtWwuaVSL4g|J>CDae0Q5#KAmevDk%zoQAo%@{Ua|V
ziRI;&NSs5JidQKd#X!uP|67;G#Vm1533xnMg}<-cYZx=r6E{g~{FXeI#cS1n8cB9<
z^R%gesl)TIEbE#iLu@eu7@<HNc=LWW;v4)3(^r82<w%&XjEA&5Bc^rUe_l2j8TCku
z4@fc!>9K5}P10MH^NjJ_S6`~f+Hg{J=kGn>D6>R7wu&c_r^tgIHqY7$0w+&goq`}>
zZ@kp8hx1(26#ue0QWA0h6#Ecn>$+K%u!Jt9DlWB~4~;+-*qP-aqET72L}}29Hh6<j
z6n)T&A#JtmCA<!U{Gdf9D%zJ&3Wq=50B3Ib9t}pihA2LnXDtnIXDhCE99U7?QVeGw
zGhGqFB<VU+?d!7$y;GWD`yx5_%+gjZB@Z&oQfRIhJI)6hD6Yj67+D|APD-hIJ~Qup
zmFnoME7*CS<uIm@*D=>`>>Pz`^a;}lL~&1ZyjY0bOwmXW-TbFmB<YBqpdMEbS3vZ$
z^<5aPWHP1MH`v4h!PQqForqa~uJ`@mF6bU3AYvK26UO1K7c?9Un+yOM1R#eds!2%6
znptu_uoP9z&H{93(!vKL*FYj}m-7Z|GyCUK?d6PJ(O%pwb~j?!v#t3`7D*9$2i`CN
z0a8V{)Y>xB1<Rhl`>&avjh8gef4Z}?i&EoIYJ}kw@PFb!(ySGkvHCfU{;N@9TCJT0
zM&f9L1eBc}8YHCNk7a2cBh6`^$63;qcf2^}{*aR!fnd0ySh-*Oy`{$0V023yhkGrm
z^y7Few2q>rXH<891;rt$<q3ZL=MWV?cWYFe%GTix3*cj*yxOo}t`F0ORO}v5i%%O^
zhv|<0S_15&RwlLaS&fPW6S#DooC<k$%FoSL8^3A_?P$>dx#$D%D#JrC|6h)K(18Y(
zNU9MyBuK?DhKf#~$0EbDY&r$kk8waeeQks;qg|Fd5eqgXJvOu}KpEi0_gTVF-Eby;
z5iskJO(~0<>B{qmsYW=Z<kzeB8ZjFvF4&lws#1$`izOd5OEMA)`N}nj5+8jgE<)2u
zb<!6Z|2BO+4~K-estx4n{7E3~?S@>)OT3M4n>bjr<2wS;aZlOE7_FB^AsqjEap7^V
zkj}T=@V`vXAIofOX-?*b*Ne-**mxXD<57ijdUE#^j)5GSd0WK<^hR_Gc+-&%Dxhg#
z+8V@X0;zML2>p>VLle;*w{#m9aPSC+;mdm6I2J@Sf&=w&Z&gvTb6}sRm+?T2t-ju;
zzfM4q9mS7AG`l`cZ?Y3y!VelGQ|E;aq^=dNtAeESbH9IAj~6GM^#LNs3W<6x@ld+`
zDmu!Ww6n}aGNRGPs`+({rnJ}}p5sadjxd?0m@nRaqT}-4KID9!kvt$|09Ve6h9LU@
zitZoLgaT$}LKKg_c9Dl=8q@EhCC*!<f%*Zk89(`I*r>&+5}YVhkwh7Q#mBpEVBI8M
z?m?>Q1g(4k``e4$mUYe$7Y#fv58xcY$zJj1k|g5T!0nwT;N2eT7<Rv!$2;VjWP7fL
zDG>o?J8>Vgk!7tsWYdRxccWTc1m1-_WT3ZF_UW_KJ)f;%QvQYG*pWRSszKKs(3;`+
zuu^1-WPpsLMd9!1+|kr9t$-*1K-lJ7oJFi4vw6Ym4I{kQPPF{{rzwevZxLbn@E`#R
z;}&2V4#SOT9V|9k!L!^2l&tFs&jy`LFvZ}PRw@i*ydYF}o|Z}0sS{9<aJw{-0Cwmc
zv|y&{Mp*a@S_@;pjGNfAE;8k*6l29PgQcGR<R{6~A+)F_>KApzgpIK=JA23F2gU;M
z3-<HoU<aK}PV1(TBkWr$n>Pb_im~?VYm#A8ou-POIWu0noZ2aWACd0vO_+X++8F^i
zc<;Kdp8MO|Oy+Z>7%<HB;Mg);wmrZn3n|?f$}j7}rV%3tdfuwh->{Ae&OJjx6ix0R
z(l7?1F+f;~bWXP~$(6q)kGUH9Ob}D^F1B4iFx}>RdI$zX&csY0+V%QDkL2LN6kq)F
z)!&;(I|mp9K;y|GUAqZjx2i;nezeB3@p)lwfr8q`N6Nz<O}LwFxYRSCh35WT{~5QT
z|6Qvne%w{_aM1F99#WY5=Fk-iX|LpIgWqORFk?~xb{4;6nTe1)M5lQ=Md8DxM^kY_
zvnhlAqT`8MsQ<#a0;!8*NV8Mj{1CjL0stYBdSl+>_tiO%c)Uiq1h@;>!IIcxt1N!o
z=m<)waP=jED<^vRn#YCR#7QUfr($exWDtuE5l~C$&;OR-EwHfzp-cRl)iNFJ=;Y{Y
ze{|p(;<RP9%$^)mgztWSJveBIaiFhSoptJ|Bb$6;#*kEtBN)rZHxJ`DzOvL&_R+PC
zy|0M*4JzxCTs>7C+d{mv-LoYq7f7+cu(z+lAF;i8YS^qZ@p+o2MJ$L2@C??FdbP*o
z&yWoev7qf<X%9FeBrBjZadzkf9rW65NT~aAW-A47`y-~J+}=rCWp=vOnR(2^&KweO
zgT{0LL3wZ7o#K~n-XDgf%Dd`CtW$ua7O^ERevaU4c4M>u+GG_VAw)S|AEp{2xk(4!
zbBl(UL4m4FKj3k*8XM>h0d9Yivkv`lHuyz?ztVZ>*PD8SO;JBdI`S91D$<CX@&A%Y
zwDqQOt(#kxZmZ^i^vuua(MT6lH#{vK;3u583K|quj|dG~kL7Xp6gn|UV7Z3NR80N?
zi?B{?qDO$H4l#uh2(wM3^|-1-&n_K$kr->-t^}3i4%DQ2Bdfju)`2mW1M!v-t9p%g
zz#Nnp??A!?@Ng0>BonBa18tO+U&Gy)Jdrh!c^q;PHoBewWYh{R8DT+hGpAtXaP1cy
z%{zM^Nd*!coU^WpKS69HWCYqQtQs`Zrx_JxXoYOLQmC;LFt~|g!!NJm@pR4uz4!P%
z{&$Ukk3KHq4#0(bBI1xG)+bauo-U<i9d#1v4wTV7k<@4IX(id&D0;X2t;;9=_R_ZF
z*p3@~+Hac+8;3(9dorCiepxj9!KDZ-7uap%3cLsX5*U9U{$RC#oFJkAs!rEdjN+|5
zIZ|fhBCDn4>|xm*2=wrH5D5!&dlurdi9=!78FcG;TL_0c-+81TzVqV({hQ5YG2rcd
zh;ss;jjC?>d=nMvT@xSRi(lSHynBHOy~2W^2*ShzFrXEN0^HZiY}^hYf#K1JQ)xSE
z>uOXp#xIW^g_&Kq*3aU?N$AgWF~eD$<t`E)ul}!_s?ezkcvVAp0Lls2y*)VwUTm-p
z^mX<`)*}-y7~=iGUYgz1(`^mT!=tmT6hko3L8{0WhS4G7JXY02f&gY)SPQkkf)A>O
z5B#5OT=2CsUZ)P4DOc?g#}{O?DA?SY+_YW6%)%8!Zt!gWl-hAm;YNKl8d}Y3a~1Q)
z4|8cx6yv#Rjm<st+`ly+?SM>0kOT5d8*yg&si~5qf^|{81&}F(lXdw{WVyG)IDfaC
zy|fZWuDGat=BhV#`k+X-iP}X2M?NZvYzVV95MHlIQ`KH6(Ufjvt7Hgf3mD!hSEZpv
zna+H|NkdYi-huT5(|u1~`5%msRTM;>QUly_mAfv1Y@f7lqw43nU+TOFwy!H4wCUZB
zh<76r#9iY-xA5VK{;2JSlr_V3J&!}?XQ)VFzZ9d|pR<UhyE#J1{thLHu*S;2hX%QY
zHja4Ure)3h%|Bc@%|0dqW{HVwsyan-UCNZ^*8zf5c11IGgl#y+WGkPzAQewzYye8;
z^Z1Wgw9XM+Q&<>^#`@B(#&1tFmS{toP4ncV^T{<@eB2Pmg8{ndgu07b6_)_xinnba
z1g%5&ua!rWXTpcmYTxtgLY9{9hqj<CohG^0E#7hd6vJ={K9C~`s{l@xf4}k$D!Io!
z;i1nYU^_esRj2g)PJ*s-5l$}cLHmm+`^pJ|iLvb_1hsl)cUGSA%r5TA=ouJ4CxpJx
zwSMK<hEq-wrfIZ<dnN!^RljAzik;n!UBF-`lNv1KxwyM@PRrc|r3^nx{^=Ir%lR{B
z0+iPzEd1sORDoZ+mXlLGfGtt;gb#J752k*W=tfQh$YoL$Q2k}s3>V9|VH=!VH`@h-
zA!N7#LvcMP%1zfN!D#Jt5tn9Hrr*8*k}4-eOwip9vk=!4_4`x0_OU7OOu<#(QyZ=3
z|LRkvFNUL+Nz&FOY{hrr#pm6-9n=u0O(sm^6W%eeo9;y!zuln@({0Jrv<vWA_78|(
ztFI}n4}-2B(Ef$*dvV%lek+~AZo~*^PO!4xw;R9c$P^)L@_{b5SPkx~cBm_Nw5gaJ
z83fEXPU#<ZdaMO&%?R&fn;lkWE+qSy_}9i!V^)6-rklm7=!*H`)6Y`55=hz?^=8h5
zA3?~{s4Ac%mGHvTgxzVePD+SyyP{M4_U-)evTUIy6Cz340c%g%Z~%Zu{+%~jXgGTS
zh|i>$;vV*u2D}8#@82n`>0ULKoo~73s|DY&88kXBM~;JlBh{Zfp<4yIT2tl$PtuMM
zJIatyedE@@XzNa6D1<}7G?%zYTcU&r1f{KG(u*+A3lG9?&t!Og*y!he2l$K|-Ma^A
zepoyY+|Uq*AOw8Q`Ng|?(i40v6939*LrW~1_&VTLFt*Yt`MpsWy>f8*<sa;Wue%g7
z_K27wAnnWtRNym9=8mxQ0O4sdzZ#J((L@JJ3I0`!2n(8i?Bm<WR+$G66DT9*hHdt9
zyuH?MbsyXsLS-$oQ8WE@85XPGCnYlT`IeO341frj%2*0g9fS<AK2=VnRIIDQt`V7}
z#r5*NN$KbbpIUG8Llk9fjiSLM<nLFmMVy@l5-nhUjK4K)_AdDOiK+{M3RorjUcoWH
z^UTKsKULY55LY6fs*&hp!BpeW$_lMU6<5lU$q80<>a(Dt;*lS$hc6G6>A|xvs^U*>
z8MjxTM$t^n(Eez&=Z`qTJX@0Pe;}yD8Gp=(hddq?Hg1QzLiRr7HVL$K^&>t1gpio$
ztaJMI`rWW&1BH%*7~?!~%-bk~>A-nHnib4PO>G4f_EEB9O@S7KgZ2-YXAGPb6d@c)
zPN>2M<DWq_{fL!>jXbo2?=aR%OWt$3JIU*#4zIA1`vc_su<x7ei&{0}Z=ZpuOS%A(
zwDQ$tQ;@@fIsR1>lq2Rl1~LEkBtu;B8`UQ2U1Pw}cYyWpB??pz3wecvG~XYp_7e!q
z?(EYO@%P?43Zh)Xlwf8FTICoW)<$2-Sy-3TGp9W@MEW;5U7(jCY|<(M%_#Ie`tha0
z53TT=&ZL?R*Q1XuNvoAx<d;9r6r{zMgpp@LJmP25#S1o%a=nLPU<%L9MAlEgz8TD9
zK!&0<;ly4OQ|}0Pq!+a}LPK07TsrGgC!D}GD=wD1S5u(rNwXJ(fwpZkPacEqw3PZX
zwUE9Y>X67<S9%0DOVhmNNoVsflBp#?DFt|!P^m*FW1SZZ>x>hL#LNn}Ye{h!W_Z|i
zT810z;Kfr)Tln&UMWv!#tmm|n;^;ldSfTiI5hT@+7*}t(D9IOtL2&pTTb>$e9RLMY
zurTGt6wp(QiaH>4KV|+IS7H>E`W0t-Fwk3pAi*+@6o*;>vGy8rZ*7mw3>L!eU--rV
zLMy{cZ;YloqooH^sK-X~FLnS!(oG0XT6mD<R8BUT_Md8D1g|mi@_oURYY}5YwfxI2
z=F7<>A6W-)kDK-Kh=>9=_Ya)RNX{OTm<kEHOnH|9X9mN{m4rA=jD;JKC4&Rg*^eTg
z4_=o*g63z9*u*LFCNfAhwf#C3wvJmV<>?alJ}f+U@wBV-*s5X4{(>M$>}4d$r+En+
zku!B+Z}+8(YZ1mGqv=&Cv8F?}!|1)^eiA4lRTXFTSPn2mdMqm%F6^t|QfY<B*!VJo
zlr(n$#QQ8&t+eg2wKTTs1(eI@RAcJno4Jn)vBHMfK$d+nkNRXmKHxosPQpkUU^Hvr
zz>qFwE5ashq=N>R_4sp6`-t`nlRUR@mWNaAt>VsAR~U&z9N~<Xc<S&6(N-mX0eB)3
zxuzD|i0pv%4)*r?I{mKuH6wnfZvTIVmUI_QmMD64_004-fkc%Pn@-BjaBbnOg|%k6
z_&VEfJ9CM}JuV0%5OG?;KQeL+4_=PKugpf)QGx-+p%Zv>(=XZ91;RFB*SG&6w_Nlq
z<p&-W6mL}oNm2r_92#Vrwe%V^5W!iI5BI(ILb_kO^dIOs%3Hq|JFN3cS^FLnfd6tA
zd`Nz+L)Y$sqt=ZZkjVJO5s#D(Kj^GnQn&9${T&y>!|@Iwqa;|IS+Dkb<;Ek-kt>l4
zn$snTvxLp1mT|7H(zAk-jH9@^{Y8F_FKy0Wc7mX68wZxXu08-d=B-3bdnH_7`-n(#
zRs8P4g_sI7xWd><3eA}uV^bFWeBOzeJUDXQ5Us72(R&X@_ef4)U*$2Iv5tX=Sw;)D
zmVr5-;5}U2Aobk{mDDPF9J7b<Q#k?WLpi`m;_OnjOmj0fP!rIcd|>IACj0%L_(p~k
z;0ti%$DkF(PN`^oQ{>@J@4W~v`WQ3$d=?$=&RGmE6J-&<-2IR28#UX#ZK4Q7+!#>4
z{MYt8g{qND98?2PQ1SG5W#?^!;S=L56X}cZ&_1GFTtBT(EQS|`hv43&nYAIYG(FXK
zT_iOGn_8oP1@8wEN?9%HMG)xu#K2^3;bPF>V_)VeuKT8EX5dSQwx&54TL!1uawwEY
zmj5miav{`#8wzLAlq)xPWu1wd1Ocn>SE}r%f*AB@uSJs4dd1{^Z$Xp|uF0+Ay_1cA
z7%IUwBgE5sGIIIdVJA6vncWw0Pu*qiMOlag<!hj)ndWrK_z#tljjEAb4fo@}rkL42
za~@P0NM{r{1Fm-UE5OGBVGO31zET*q>-^|5v)!}B;09_kvXM?pV4YmNJYduhlJmmn
zCBVl&jx19H-z}gG9T~Hj-0(`Z6$loffU6(THbBaP#kI01nH+n?p)f@mj@=JQlgxbv
z(abCf)Ry>B=@^MlIZ0g_hpF=#mJ3obpy)>f^*DYiRqyRjZ1gVz!b***oDBHqtvY$B
zXJMcfl81w4EDJQiy>&c$ij$to6p0x;xZ`zDK7PBX%_dZu08Fl4()!y+U27pMnO~#(
zfbengc(n5RUvHyiB8iv%Yl~S^vRtEK4M;|UAyhtn<(=)YFj-!fmvsRM-2DVq)u>9?
zNJfrfJT&>zF31FqK6@-iAEGGxoZ@?0VCAm`GntA;P8qA^!<<SNxXo4+C|ohEviz71
z8P(JMP9dn#X5T9z=Tv;$2ei3d@l<wV^&k;Rrti0AS!-w-=-H2Cp$|<2qms50S-cy2
z8jiU{NaxObgm#xSbIPQh|6eL8pTifHzg>M4UZ=c7mjDZElBAj|(*tLN9}l^46_tkg
zf!UipAwqcy@^rn!=k2)_A>!@D_^SndSSc-F{3T-@GLz@DiKYA1J1{<~1f>gZrk9H;
zMi|5PIc!c7=g1~Ou;BB=%*^Zg0)39C_uD!)_mL1pNpBqY=0XhtI)#=7Z3L(=O8F8*
z*qgDmKtT|TR9f>@B*1W8oVr@Mb@?=aL&eOze5Z51o06hJH11^o3ss}-sYGt`qxvS$
z*>UVdSFI2*&y+KV4b=zQj!BnumLFIeOnE@R=8ga2l=bQHtg+qScTdf~>B(?_U#m?f
zBUxP*<%@MMHkgi>COpG9-$wE=tG5u_#Qj4SB@32^CG88n1Ugl-HjQiKcc-dXKUCt&
zX8)1}D=>GLBP`NS?NOU)*q1_E?*T2Qt<;|^w72bBtV!0o9EaqPBd6$yQEhBAs{>??
z_T7@RG+p?%Nj^GE@<<wbj9xxFTF5hwG8!HH$$%8>iYw<X@in6)t`N>699|f^<D=iP
zmc~Pr!3L7VD-<e4y?Cj{c`1?AR5TigG;t%m+NV<`DXRjn%k=D3VaB~h19-R`!ovE`
zfqS{+&_EIQNUlBcA=!-NI_VgX0Z*#5y<vy%o;M<sQ8Y9cCk!rKRRrjk9&E|LFA-?l
zt{%z;(|;<F%r7zJYAq^HUR<tJG5MN4@O1vXRY+tJzynd?^4?{&x)M#k_Mb>>>f}W^
zna`<Fp>A0ijh5lUq$!gReMf{=N4xTHxBS_?EkM!HL*jAsds2E#$|3$%t8LygKl-yH
z`s*-g!aQtuq-}v+!We*<gW6lpWpWhi1EX0k!_P(SzmBE))w5+P6@s4g`8GF%;yKrw
z>py`Jt@>lvK=L^>+hhKojOxr2?o0WfqgCxc$x3+zu^>DW!`@-f8Mw4Sx;8oD^ZB?F
zgPQ&wri+ViC3%efB@yj>wfJu4Ih<G`cTiYFRNnz4-mBB^w)XgBi=6n)h;5N>NSiGX
zLB6S3N1&fy2?+83DRXXucum$G#f|uzNfae)$6G9^%E_cP0QavjpJh{BS(>%KQ)$fd
zJ;`qMw~NM3<*V=KRcN1$j1e+$?1CD#i(`P9WEDKXIi7rn;L;=FPv_`+K|DrHFI1?|
z@<`=rhBzMOx5K?y?l{gpYA<%$Tr3*cMwA{gKG77?6rHe5*5_ucf7=XEm&6r67y;+1
z`-`?4d<NTlrhG54=J}4pC9>*02Kp3gTIzX9s^cZmCMEgE-$SBdU0VrB7D$xHJ*Bhw
z-K{gRJD9zJ5;XeJlv^||m`(8<4wu#Z;@UF*Jx^m%)VVS;W%#^-$a_7u^bpEs(r%b)
zFK_%(uo+1h*pzf0jfX~I2kFU}bj_|Lgdwi!qg#lD-QYR2X_*{R?$*uSPrZg<U-}t@
z;1VHxJC)YQBcG4YSAq~Y*Ukh>TqjThU^d)byB7Jt(ZJi{eaRa!aXG4NW;7_yqzfF}
zfYqMm7Wx?Qt1h1yZI>#;*~_V@9HD9Z`Yi%80W5s>M%NU6F^lXs1sC)0mH$=5uViuj
zdv#~P?@2{7Ggv}kjL~x0@{0~_PWCGX#XW>vppYmD4a@}bm?X#UE&|Y`>i1wAUm%sK
zXU4_JhveT@f*A4@)6aA5Wgu>wX3<R)a%Sulm=Ea2N-N0f7MWD)^iceqWK0*OweFts
z4w6Otm_0dSFlIAp=vZWK2PAu!duZK^ax-BNvL)te{d9V+o!^3iR;|J!v|QoBQNjU|
ziPF?6P2^94iwB*&2bO>t%{)@Hq$g!ZXymEY5)D>|jij1hki!ZBKGQ-GSn_iFPYv`;
zm^x?vtS0JGh%|GJ0(;$`-?Wh5Z_Ea3X<sWpdW>iqYAt}?+d%<39UH(Nren(5S*3Xs
zOGbN&I7aO>!!RM@``BKawOBJBJ!~j}uK6`YPmCmDVbq$aTvNiE9<A`iiS7Ia^EW(9
z`XKk4Qsd|V^2If9w!Kq{4}n;k&va|BoZa5rX#U6^mp}|%AzBT?aDw8_&IQBk;vi03
zwmkP|)wdSRD1&<|LpRTr5ZWB`zz))UNr|EwU?#vV+a49qw^|<Vis`J$A3E}qZry$O
zfJ=Xdhq%V9zBb)T*a>fP{0H==E?a(1Hu;?Hjvq8$&&$jUZ#1{K3pc1lt5^L$_bux4
zF10<)Y2kPOw#XqXA>n}7q4TJ>rt|E{g~Luq67AJKj5uBFHT1!B4<QH+=q=OQgo)EU
z5T|gww`s4O<*)Z!lK+K26$-YE2IB9vYuBx~@F-|Ptvuh?raoZe%*-bh8cRWV3a)J^
zH4Tbo<tYTBF;y<|==qPR@;WY1WS<(@M``R38gTfwUmm!J8#Vnlo&p|aFqi6ee{;Qf
zT+*TwY{c?Gt*n2kOVSL2<HdI4T|XVP@oYSFL|D>4tiHE;->pjmaJ$JvUOrN7|MEJG
zPA|M;o2>-ETAznQ7znrBa+^6L8fBS6UOKSLhD$#C{J&gkML8i*b?CEjo^}H+c6hB0
zOhqAGN6@4RUrpO);_84V!x)E7(No_STEmd*En%I05jr6<hg7y>Gi(BI8N4+BH$ce0
ziqQ9-hyz3{a26qXF?)U<^Gvir!|EE~rwmr0!@)pXT1#F@$urF8ubn7a=MMwz?-sC%
zXx?sQe)wxpz=UR8P8OZ1fyu6vunyuRpLxEJ4)C2nALXiQ*f6TPK~rDtGI6lRP5Hck
z>1A1RH0~@pfJ@6Si%@cMgCC!y_a`cPe(fZO)>PdJaG(f3wVY^va3dMVF}EN|(NLHC
zPk_O3c)f7h44^df63gO5;AM9$f=bZ1Djomc3q?Rr-`lKk141E}5YttHY;CS@=$Vjx
zIs`BQAwM&*oqIvj<R$~eXRD;(A^&w}t(H}zmOKSsKn>Jnozm;=EfSeD4Og1eB}CUS
z28Vhy-ff)mqXM1F%=YZ!ekuqAw@T4k;S=r9u}uDUE8Mr>g3-&_n`T(!khK_p*Hwy*
z+gOel9(Wqj1fwxMcwPp-;=1aKCwj*_l>HAHVT+)-h&Uy(w*4=?D8|!*M|_2dOl-~#
z-_&f=1O8QW<3>m+`%5jf1b_@Gx8v&XhJ*VZF4g(Vup=Au+^=t1Hj3BBD~k<RsMC}~
za(5Eqq@4<42?d*3<Cw-$RE#xCFs7UY$&=cB;82gB;ku3QVzn9ew$Lj<&}N)sD%G94
zY~Tpm@OkjB{V{Kj>GZtPrW<k0kKX=9H6sux7GJelhwv14^v_1>f=|^q@_kj+e{att
zfd2M0>cQi$fs+@}`L$iZEy78QyqV1>_dV>n+mRDJanU9&NVZfUJUJ40*h%!%@9FV0
zafP9y%fc55=4YN$ceq2lo(bKBp%<>Re&ZEKszXU8Pl$&l)=Au+-jTt?t8s0FNC6wR
z*%#`}&o~&g60VW><md@bSQn>;f3ALwJ0Or%Nl%0;o)vM28xFBH!3aoluyE~^I&c($
zO;z1yH3Kb;CvV-hSwB49$G1q)H_l76Ht72-@IbDGg#bcoPWT>eS0u!1<o;P0ab*?d
z9kvI`=c9LB*u#ZnXBAU#GsGwm9tMAAE&NoknTfqzS<d^@5gX_(7GQa;@&zl?g2y_L
z8`ltN;|)bjTpq9Hy_kXDBw_^};*u-U0rm-9mS2<FQwp1M3bi&WXZgYYJyl&D7!IAe
ziYF3#{>0M>PQpD?4pF%G<i0NXyHY4q7v(r|j0F(dZB5bYg@#yxc%QtZ8TEemD{Juh
zU(}-kR=y)8Z}GOtPmB9wocsm8#Zf-p@TsuO+ss}uV1FV6jK(RSTizzBwec=qr-_Mg
zZ}gK{F6gRpNpJ%A>$Ejae)BeRA^MZsGjdO!yhJITuD({L5hn)<{=d61ZTq?y6s1AG
z>AvO$DY{+IERl*0C{JR-p8IjWwsB7%hPQR>R8XB!;TA;vu%~(;R}lK@JQ_RuZbck_
zQb9y5hM?oLfg0~q99hd(E+DZJ2T2V1gJw2b8BTYawg`6)Ppexg2Yq6HmK_VBIi!|{
zPwa>2F5&>N_<L+)YnWgD=G|FQ`(C68ivH0-&7{*7Ml=osyWVopg8X=!beYyi-+zI}
zw^<c#%OSlgDP{cOxypA2b31#YEp-@n5(4Ov!4xy1&$fLM7#$NVOF)p-eX*-SuZD6b
zplpE1J86e9=-~F#;M?1&*yMZsvPKZZ8Tg5_x;UXs)tnG1w8&ESL#}{tx1CGoQf?L+
zgzwfuuC2b}+sbs%j()#oz5)?`0`YQOKGOjqF_frZQ`06nwU&u1PXje-rQStp6DQT-
z;eJ~;jQI5aHCJ)wgV%zY8F!bZjmgF-mj3Sz?kxLN>U((eLh7`Xo1ptMNbUisS$%Rn
zI||rZ`x6wNvL0Kb1jg(9+p|{c%bUu{+k><yW}3LTW^&^aVI<P|eqyF0k9t*~KWs%S
z<FfiQg6ziFtF8eep^LCly2bnxCr8-SqLZswT3Ls!3xsH!>8e8P#Ff?eZOXl$sut7Y
zqhwPoIAVLZs?a*g)<5c!?t)_8(cci29UdKy@0>ICVBK@5{*;>V0(J7fak^OE=!VyJ
zkr#n4YTkvX;9IlEB8hzAn!Ai-Yl&3y$Mv;ba1P+)Gzs~XI}3xX7a8dX=XW!=f%*T#
zRx9~Xc{*5RQf85RiVfC^ALfr|ZYL;{R&R3S;^5fCTIplJ?(#Lf1N-WZ8`TgI1NDDR
zjjuL};QPz!Ju&#s`;1&~kAoDIJ5&}u8#+LGC+rTl=adtgVDJxwLdMz&Bqa~K{=1mw
z5|Zc;`78+##6Tk90j9iyvSN4z@3LgV16J_6OdSW0YEb9Z6cvMS+=C>Ci<fOxd>S1`
zfK5`x{y!J6C~yIAmDN}-w_W!4TocC_@bspnXYAmON1-cdbrC{$ma9LDH9A#jRxl!n
zxg)>y#)s=TR2v3<VJY;PGA4}1(uQQ$hKj4CH&a5GRHn%_xWg3h5Nh^kCwxlTTWmDU
zeWgz<rK=b4Uv-Kg8a<(qE$?S#3Hn(@WcT>MC{WDTJBjh<Y&T;Qq(*h&WNRC|s0)GX
z1+1YA)H$vEi`6!nhoBDOo>0nu*Cn1YUs5dtO=j!SE2B%GX{QxZ7(u$&B}UY{iTQK-
zykOv{nKdrrlOBn%N?P5u;)y>XI3Nnal`G|+rZ_GvSWL~@<a}rZsY!J+&G6A7QN(E8
zuURa4?mX$$v#4v=m}(vNZ+P1^c7pWJhH-J(iIXr+lfI^$G5^z$@A*s3t1mqr%#;g|
zKNwq~eeY<~yzNzoRfmB#bTj;w=FV~2DJtI#M5~O!2BATqFG_20qP5jT>e|WYs6UAZ
zQg-Qe$9>1pV>Tqf;>e5}^0%_^JMK>+xpPG+qQD1#T;)ar#AN~vqdT|1f*iRcwQ;N^
zX9lHZo;rUS_XUU+$VbVr<ZWE3htgm-kh+IkKBAj-DBB>2>Wdek(Fo7O6fS<@d@t;G
z7od<6#I>5pLCMlT09~QJm>)44bbD~*Aq>uC*yOQP9x3p^Uoolj@7P|NcHgi>A)cEd
zP3(E+cKAn|WxNFG(CLZ!ud^zb4-d3sw+`Bt7=B6%H7Ci749#Hs@c|skoYc$kuD7P5
z+}v+qi*ED5YA(6<2(tD;<|i*cQ0GNgbqkYKS?>%TL>qkWy`4^Por58(UE55DOH~p^
zqXqBBK#{tQKF5QNnU3rj=Dxy#S;<J*nL{}_yfXEQ3SZIQ%uD&N#<?J9_@6Nr_N9rs
zqo+ybxgD#|0E3Qu`%Gf|4-Lr&tK0%k9{Q9VOm;B>1^e?ltp=$V-t1BnoJ+TOP`?}N
z0~1Bf28=NnBT3+hdB38)CT5kpd<)zA<rb5is#i_j+(M|$<=LppqwdZ+SV`B|keFrK
z9%WDg4d`k4ULgw>Rb3NR^h1^43dmsHzqje_ESJg{a)go+(cdf(U_>>GEbNq!rgB3k
z_MKFO-%?bhHi7DdTS|+1RESsbW&hZXGwJRBfw17z5-S{`4wiN-0agdU#<1~;#;ZL3
zZEJKr9w$60H!ezK1Fh-OXW0)}dZIdz`qNc(O&i8ULw8f|#2H@0nLic;rI^Jc)gnKq
zr9{wJHz&#b&m#1s$!EcClqsPSco@@{&msXbznmTnZq@{w9*J(m%0mY2n-c;8m17F2
z*R|S9$nL*qTvaM6COTuPs^Pm!I9olI<vFu9jHOKKGOeA|au6Cyfi@x7jet)T6`+L%
zO}{+(RDPQ}UA{G_Cg%-rV{_m{<9`|#VW|CO$P?Jetbjbz2<oNO<lf-U1FTQhq8(@R
z2H2gK=R+P(n5OzDX#s<ntZan}#`Q@P-6QQ4El7#TAZO&&a557OrMl*;&#mdyJa1@(
z(D}W4D?g<f`d3#2Q%v1WVXw>#X;QuT**iHZE?0~)%Gbo9+|PKV{e;l>!JYRM&Ue!*
z`$~!Z0=TOnwS&o_9v2hYkr6-)_rN-!lgm6Ak-qy$f8>cR#K|OXw=sa6M^m<4%_#g%
zaQY065<`HnLDUhqJYhCe9V7vY^vx4?Tj8{!`t^}_*-ZIQ5RYe1l;>-!9rp7qNmQY3
zXwKjNMo%%_vR^B`q0h1cF0+YddEf8M9q>AZ>W?Z_4=k8l*>(+)g5nE2k%gdAO&W21
zaCI?E1eSo|=dhET5Z<VQfR9Gg4!-TQ@n95UKtHT#W)wq{dlSlWziy=sqdqqBW|;Ul
zu9oH_r{=0=qjZ2*EY*;MV+SUV>{yNL;+$`L_U+baHv254kiu_EhWI<Sq5nc=z>{NQ
z0w84hWA={~Io{YGIjylLN<Q}yr`EroAOoxtT_jB(Kp{vaD}Rl2-CTX*TRu-<QQ`u1
z$yw&;6(tPeJ?3-el<Es5^&jIq;yS#(CDW3Q3Y<)3N!qVgmPLPIYW=>tvs<sjij-1y
z^^*p#{)9`<R=lY%4D28|as5Z*nFzE>YlMFbnMpPS3Q`Pp@7es)ZpUI~a}eRa|K1uQ
z`ro64(u=mQ1CS*9hv4G!E#Rh7vT!wERqOIL#}I|vrA)9b_n<3%BAF%(0^ALw21a$-
z*xrLksQyXvgJrks?jO#sd(=n}+&+O{2jRqc|5=UoLx8;|%|9GX<Oh+1Qg4j@GQ;PZ
z>YAuwn=>Zkgg3P0gRDjB6K{~+WeJM>{0jPAr<aN9rvArde>PS|ubxW7TESv#Q7e9X
z4=%f+L+naRbzH^%%eJ6Foy98Rb0vin&@28v>b01?^KIn`PBHJGCOpy#-2pN&SJ3(!
zxua7NS!ja0WXo`KXtWZJVuV@y((mjqx?pIt2EPTEBZ~3a0QoslI}cwr7L3<1QdrOz
z@DRqdo`vyc$}jCBD<Wr8Pz2@P4`u`Ap-FZ}VXylgrdiYgPQ0V(SsDXj^5qtxu7Z)!
z#)Ny{hUWT+`9nX|=jQhnCGk59*TZCXqCe(*SGZ4S$ED;Qtshy^%8)2q>G;w#dN%gR
z4?chduAI+NI1XPfnoK}JBko8-*l$Ep)MC=cp+Q7CiV2)aGJNu*Q0GNmnU!02oOQR&
zYFW48Es=zGV&FwlYn)6av+>?EjMVGwycD79aQk`QzQ6DbCllgltt^_X<$81Er6r8m
za#HaA@Uu<X)<x*c*^ed!OobnOXHg9zGe@iC30gGAM=1%_k1vK>ZoG~a)EksweC?fd
zO=qlYx`8$;x^mxI|IMoEA2Be*2|;KxaDv|z6;LE}E1KnPKOre+wETn|a!*lt*bvNe
z6CzN03ZH~_qaVrI)0N%{s5`5sNMoQ(OYmPM&z*1{{)(@A^cHqYNKBm&oH?o#701Av
zU#_i589uifo>*Y{w}EIoeGQnjXfgMsSY+rJ>*T;bC|gIU!((a0dxwCb#E-gNH)LZi
zEqFED<R~04YP0Zs>}j2ZBio9%<uT@poCw+$=nD(qk-#i!lgn)3Y8}FM_Gh@Ht>f<K
z*H#N$ThDMJ{KoRIe?Jh%aFj_xHY*G7b!VQ#{Ynw9oj}DjD(qAnl`kC%y=b--4~XHZ
zwTP>LLkZ*6NFZN}EF}=1(ms?AXP<9*ut`T+ki*`u{#KJqcAl^dOV_qNBVxw42Wxe(
zzYl+@4Yg-0w!n-ICE8%UbQW@wCj=o|%7oameqzy2esi#@v1GAXOc#~oAG`&&HtsbG
z3p(_@=}#$KhBBq!lIjN0)x`#keV@dlWCufA5!?M<hMP>g4_P#gKDxs(i)&~8x|Vle
z8F_~zL4#<hTbu8kGKH_S5-<Jy1whgO;pMS$cyZs@HON{bR04%o{#o2o{OWXe+?4SB
zBfm`G6?#Bx?EIX_W-wi9KK}sC8wmjILCbg0g77MG%SFXxM$8Mao+-Abr=1{G-CJud
z3+cd4gdS6cPvio}#E7o5sqf4hsKLkc2=d#jUEG7ZoAiJBgCbLYmD<{ZMXw1qYU+Pi
zEVW_-mvuHAvZNP6?ZO6>E3^I9cf)$Mt~t{MNmm}cn_WU(3NuM$%PH{zUHnqv^eLad
z^<i@XrNfk4U!m(nWrsl`V-vEb1d#x-=}{?^3d}*)QPwI>C!HDGd+ry-%{4eeuS=`#
zoOhXnnkaCNmTOK82D~R~0<jwrM539yq&%DhRMNP^aIE2bB*(0cDGJ197EN@diLQ7e
z+7+-EtE<mh2t|~|KChxpk$pPG%N3CB3C{Me%zCy?!uj8VUrczS1Ekd@1MSmt%)y_Y
zBi2pcTXw4FU7QG1*s!>SZeGPv)Vga=$`|(BeEh;{-{pevO&DLwwT+1ADIuprTv-P=
z9_p7<8kRCqBrsh|MP8tim7VF9%1`&yDZ_gj1Yq`b!z@ug8uGX71{_GKcZx*D+jd1j
z%kS^QX5t2k0Ew5ii`D1{l%XB8)o*rYX7`di0Ze_gn8rF<<zaFn#Rp0YIWWAa)3Qy>
z=xhVkvz@ZS)WE_Df<plhVG?F<J9-}I=LXz@mbtY2zNNlI$BSyd7yx0ny_28e0AugN
zy&}6Y0rbZ;a9d%GGS~NQi6Xr_NfW@FU|>VXb&QrQL{?Dc=7}@r(v0%D<>S`hHuIYo
zGhBTd!wkRfXN9AW?0M1IBYXDFkjFTw=fq*cCLU8@VABhGBT;`UMEO7wEMqG*wufPe
z2v&ZO!dxqTgMw{z<LNo|EXf=L5=oTM=Nt{H(I&Kgo;{V8*#8ZnT4G&^-cE5U?B=19
z*q?~L5NjfLN+jwM4_bQS5FNKZjX;dqO62J`V)i&qTSJPRejWNP&6Ji{4V!d@BU6Bq
zPPi2f@J!}t)G53eeBrMTt6EjZS5SXft5n_O++`g00f*#s;VE={=lIeJLR^(zfsDcl
zp)@XeXDL!#e!FAp+^y+CYDo>fG5<8-<xhHJ&OZ6j<(-KS?y4es_M?3jMW9`jPoEt&
z)nzr=kAk0FDSj3vf#$9n5;?Zj0G`>$)W}`*%_!O7-@s3{!5Z|N<~fYt#=A|XN*T@A
zY^L*2*;A84d0YcTRej)Tk1{^Zp*`?)MdU!_fd*Zy#U-A}NrBewEI(1#$&21_nmHN$
zRFSr}3T3g*SI6+8Kt)+d>lRu;@BIM12o}dlPY_&ceBAw2Nku5r{C^m<2vnlJEN%#i
z?yXDT6&)iB3*n-vwYlELqM-g&A*FW57_z#l?=>A%c=BbB23ucFRHFCUslFczVG?S1
z`3rYo_!ljtdsyPGD{$_GxI5SGF0}=AJ4=gC92sHb+zwTm!ZHN#rxhI@$j(l-P{jD|
z?OmAAMc9mbqEP&*B=xxeBqT>Y_{>o4=u9}E&x_La>3m#DMliQGrV^zlw1sz+Ms8_%
zr`TnAxX2wND+^B4aWov@pP52=_Ktm3`JvrfX5)d@s)56|LPf8cFw%L+^OAE@Yj}@<
zlX<iD$`zM4KyG=~_g_oqh4t(!Gy>f3tH>OaHeHYDJ_3az_ZrQvLNwpS2=I~XlePDq
z7rkJSYuab8aeq9PlK@l~<!6G!miz0jqcuiL<!cY~9qZQlJatst6ZRQK77ZQHDG+(f
z=u=!Ea)htJ+YW>y0YHpx50EfnEdzfM@%G%@7AOeOp*9jEoA`=_P5%K2E1b&n`S;_c
zpPXq>bVBd?(^29mvLFu`Kj%^4iT^gy+z!vnFv(Y5dL*q0SOErv8(&GBvT4n(s1|p5
zvPh>`K}ft-gDdIPhm6wV##l+P|J9DZN-fW7qz-6$yaDW|Xicn3sN#d`t_6E9^g1I+
zvG$Cn@-*e}U=A>A5+lA}BU{3o9S@-LMSDlu)rArxS$!zKY2~l<w`Shy%X>hNzx>({
zVTfBDkALXHp^<tsjJCjAAsi5yKHjUFw1ynY=IDiXcg4pN#~2ahLxP32sn8EcvFW2<
zz|ngf2I4A*5a=8hj|V+`+Qeg=k=?^^;s?|6AlxxF9WAmhWoD1>Z1E+B83%`OE-TuK
z<Fxbw)de2v5F(r~_b=Br-0f_mUQ9r6#Xuq9tbV_l;XSQ3`6O@7A^jF+NNLjLgW2Jx
z;wSWS{qo=s?je<cm-0$Tn_UM^bx5j_vi8~Wckux*q&{Zd*j`?+=4`)NH*Scn#!HWI
z>*5@bD|NxyK<YNX<A7#%5DF5lR_G3~`G=0<TNvTH*t|;Jy1F(Fr$P44=MHKUs7&=B
zShtenp4Muh{%cs9snSpbHg`G9gpt$B3YK}$xl7!=<bGa6zib}@_fJ!{x(z|S^Scwt
zX)P7=e!%}m*M$abin!E_(98NLKg+tuk?*c6sfN=lgSw|v91l#jo@D3=R>MotwHcbg
zlumMQRtr0`dt;}C!_BNrd^FdcQE|SI$_bkDesks(Od_g9@3jZ272O;B;>?lrS2g7W
zrQ!!gUoLf4dVL>_MX^)J31qIvKe|DHmSAd<N!<fe5XcEBoDHquh~;h${uR{eO|Hv!
zW)%(Y8pjG06qj+sYd~R{NukV1@X}&_%v+k?jE&M%x@>}OBj!!vg9ZD<8E2|#-CzP-
ztIC@nPt|Bua3+@N5`Le2)x39*i-DW1vr8r(i0qe<?D&phc&AE|QQE?v=nV)FCnc5&
z$JVbg?PD?<(}jY-VCE76+1&oN4kwawY5JZPdhaZSq}O4x6%rlkdQtY}9dT~@Ss@t^
zs<r&Yi7*01B!u|fr)Mwo@snD8e?jKT0o`^_0}qQ;9?pv;A8>tgJ=uFlTKDuK-}XO~
z{x;qkWa!$a^<_N4eA(~n#~21Jv*&()rDxy4GaZWM1xCdp;Z=m0{D5Ka30chxM(Aa}
zuA#U{<nOSn-h9Bj#E}j?9crCv3P@o`NpWSnlnupDi^BMTr*xRBVw&rH6zEEaiv)MR
zK3(w#THhTOs4$$Y@07)y6o4<Z#Fmsd*{|F+qM0FGC6Kh2ozHJjiex?`$OLOyA5)(4
zH~<}kNS}h_;2UTmIUulTcx4L_!!8?j+tz(Vi1epHvH4V4GMGU)%x#GDI6v9$P^fOK
zjwCqWXmr%|e{=}{a5MTO3tLs2WH5mQN>cTauZc_$;YLC-PtPEm_*ow$&(XBzQ>cX{
zyLNtldWX^Z*b)PI2bzD4TuD+MfUD(tl@PyeS(U!{yUw&=&1sn$kphyg!myz@Ibgb~
zj*hscj?jzZcLX0VZSoyL^IL?~jio7fP=mlyv`%Z6F=H%4YHx6jCi~IXoDM6zmE2-c
z)WERhu|cE34#GM|Yv|T5pc;xuL~VT?q*QIXX;cW9T&zOaA%y_AST3BlM+r9*4w!O+
zUW?VSH0(`u3;jFWbQ|lzz~h<ezN=sw{zKR%i2<8<8sa<B-z@LKm<W4xNG`mj4UBC+
zK|K6hJz=tWZTApG6)Yp)^)8?CMkPrMdi<J=)bFh7m&Am2-d+JjFaIL{a)YW;VSJFM
zZ2rJ22l~!|V<?S{hb0F5)QKo~=533?p0JRRgV2J-QQ&d<Hu}AbX%E+1m@Ugx{UOcF
z8V%gY&r@*@FB0I5Wl5J+^#Un~bIJ2?RX5;_gwk?*img|hI7mU)@*LUT=3D+2bM3#H
z^Od7CR_^Jhl@YtT`j0Q}GhlR<gnV;5I_wW*do(+S^3p><fJ1~l)olt2HntitoD?sD
z`%w|Dj}4msit{fc(u^9?yn4COjU#W%WmUzUMs>~z3Z&J78_Gk_ne<pCn0g8DMLyH?
zF$5pd{oP~6qx(w8@rt1%_)RqN>lFK8x=)E9er0ZsC&(5Vrfk8a+*b~FF8-c5Zol^W
z6c^i(yfZ=|Y{reqq?DQbV)#*BLqW2YQ*6MB6^u^p$%ct<%$-`F_5+i1bjMkuHJH?3
z?Ht(bRvsx?Hd}G#->wJ|^kc))bWaOOnke7tmM~a#1n2<Yz_yf*Toov3_S4Lwr7qd3
zx-rmo#+(pQ9_u!1VWhQ4*$B1Sx+5c_@f|l&9#;~0BDkhT?5Pr=Akgn?=(C#J^S!%P
zR`~_Ec0M<9UilS3=$k*p`R^yS-M2cPP}oo|_YTuZ*ALY0MKCcMg91E;=;>KdheA)f
zz8xgaAi^);cDQJ;+`7x<41Cgj7S$zIAsp-F@;XAM%#(DY$Q-%xu`YgD8Fgjf|NgAw
z{RrJ$%U**Iw68iq7u_>MS-E{B%rKgS;wfi5R4+6zx9($+wuViQ)9X`Tpl=~IH2^!0
zACqi|F!5s{f9w~xS(Y-(+voLut$1OtLGVh{uef6mq~0hbQdr2_#}j$VsQ4Fz_EWzp
z4HWwm=_qWe24U6&)<UD+iB%(r0G#=D!OvA9dPf7P^a%C^VC!Xn0>n2qY2$u)eW^p|
z`ReWjD8#z!&CP)JRkVN&wBY+XlA7M<(3VQ^kc|3`M}0zPF+rpifJj?86RO;rHl~&v
zN--50R%$+wWBMoA9uB%ks{0-sqdB&_9^BD+-(iqC<^=+lAO}VVazdFK3>3R!fOxin
z`xbPFC`(sY-oz6fLhyjOOSkhmCcz!w{NyJ8+>wj6_zJl|69r^L)bCNvK!u+wDW)?_
zFVdAdr)SatJb;JV<5YrW)$@cRqQ*tWr*Y+l=x@xwq!9Tej=J#Gd8A%eK_fo!zz=F2
z1I9h8)LX;*PIw@}XI0CTWVJIG^c56}$>HlQaK&i-y9#0*)n93eMe@J&>wbexLB1eJ
zDv#%1c1k}M$C~_@CZBfn7-;D~Q*f6A`5BU7M0_oCt#GOd9JN_$lMeX-z@F~C4g&#>
zz1{coL8`}1D<yB-%?;1$<0^z;<xr+AuN(8yXK%>Blc<&LkGXt=FZfN@wLmpKk3BQX
z0di@4<7f#ZFg2Z_KDh-W{Iwkq>$lTTWJjVVi~CX;N8N+bU)3#SjuZYoiTk}em^8qr
zi{BkgxR1QwhTo+xB8WZl_F#)n6|dzdcPH}!r%$ir<O1QSg;u(fk+anNc2?HhJYn|c
zEM6<&gPo~sXquN{@H9yPiEMi*Ibr!JX~*dbfhV7o;TRSKik@kzE2)w0F&_l&aedna
zZ~nUF_{?>`A>(Nk%%jpRl4rIjI*<;*zD$fhih|+BmfsYV0ION998PrrQKevKudDEV
z<WD@;u=r)S8-7-ch}Vmc6@G$8k-OE$l<~NU8Gf2)rO<MZ0TW-KcSv#!iF9KUc#{N8
z<O4iHWtH`pRi>sjF$J1eY}xI(K=hCA<wes^6dUpL#<F@j4X$J|&||drQhbwY(^}<B
ztw=;(VJX>|ei-n5-?w6nkHq-22)%6K#!NIJwP4QJlu|MLJ8G_U|Mc?Th8!rJfPgm#
zJ>|I5{Vl`<m`i{>1J^G(y-Q48In8*}^05CLzbd-~BlIQk+;x(YknBGl4NF+Q!t?_O
zj|*tf?ETqQ<!qnZ0|EMMZ2ow%{+8V|-G+$x$by^qCUf^@=|6$QOxmQ~GeM{Jq-=;R
z)hgY`OATS3GwN%m@=&1Wskh>zWu1N<%x@AXGzl#s%WUI#{9l2}e)`D;5jp|_q0jfw
zcjBL)ALzZU%m-$4*YANtaK7e$DYjgb{sULB#gtdjkavxFbYmJDgfDVkQ6>`g`4IJX
zRiN9r%~et)JnmuQQcS)DQGiLTB^}}hy27xFN#ymEEF?UgprlgndTIU#9*wJN*IPiV
z<Py5?!o3?|DNLaXM9#A#5$6V)kCOC16ASBtNVz1-*hhk`_)`Wj$>g&3r%h!u;@M$^
zG{OCHCB@dVvHL(K&yCORwNZe=Ynn1bnzCI*IQkHOPefAa?>tK_ROGvOlL|x(siqGP
zIEv;f&~Y@&s+z(d0-tBtC4u*z7AG{_iwy)`<;HYQ29ePP{Lw;W?C!_7c3sa=O(Kbt
z2@*MBx*)euO-<=6YERO!IosU%hKS_8J?MCaNiLx2`G_XBJLhPR4Z|uz%FCKmTyO0w
zSK3>Xx)Ik~dKAu+w*A3&-+P^J?mc%1rCv)K&c5oe5(F%wDy$O7;dl;c=KfMC9kvh_
z3FslMh7%;`+F?1os9u3Z3kV*ip*G9&<#zB3zFN3@;CubYM3d-rc`m}6r43#z+0V$9
zNW4B~CnStp4#WI=w?`>T<Y<YxKYya3)<G*+II)b_D#~TqdwK0U^wd&c{6xymxVc-i
zYVc#}7%tUXGKMc1*cK~7OTB+QwYN-STe_-PZr8Rz9bnR3()+O*x&=tMpyMB|v!4Tn
z)KB3q@mrITR^#$cd36?4zP|ed7lM6WOfHdQFTyyqSsEa<p-P)ZON+^5Y#~M$&&wlh
zzjFNVPhQ#8tV~!##9tfth^U2%=sJ`f#h*(8Ghz2>s|PigX?(hvW2Vxj;9sx|0P;(k
zCpqJ!fr3r_1F{8)=!Keo{QYlcHV6xyah_r)Re1;+>{nNrW0t3CHin<79MLkK6d8&0
z1Pr0ZZgB2r0tT}knXt60&x@4lhMDup{U+>#ou*Q)+R-cC)dyP2(&<gybE90Rq$L?c
ztH}kefEP3}Mf18ypH2tuyuM(6(c$XjfZujPwz{3*aJ>yKf#%})RG=5SXU(Fwd^A?{
zHuKh|v?c$?U%T7^fOiW9b?V!5gc=i2J42i8wmJ&=rrFnDWBn<Cgxy8;dl)!YnN?iS
zEI;6{cJ`ow0j<^E2ajo&YEYl8Efr;JSv2X%wn@r+%8KGe65Yw`yOYX)m$;`xoWcYd
z;Zw?tNWD*P&~bJmolKl*>1DLH#UrxT^u@5jkCVaB7z`U+BsaCQMcFd~I6#wLLgzDc
z*9*g9s%)AZn+h%FvT<T`#sE&a(MDttET35o1=3)I|5@vr<mXJpk(}(MSo2Tl$u3M|
z^jhG9^(2mFV=U5!>q^$aSC_Xbqj|42F&=e)LEhPjrFH!VW-hhj%{AI%#>u$WD4G@(
z14k!20U#c<gv^FfXE;MMEs04N7Lx};W%GRBw*+3-r+l7rz-^KdA#Of;uk936Suu_9
z7(syaVP%KwaL_E-m*TYQyPhEPExYBXW6fV`#&^IrJ{)xCwCc7-(Tb#D(QHX!iWQ4u
zbhRuuM23~UDKX=QR?nAa<aMJF<zF=@QsiVN@c=kFtNGSioj2u0Tx+X)A_b>UU3t+P
zPVh<E?d~46apji%StHp+Gk1^J25Zs4da%SNzpfv&tYd(QSu<RD<Vao!TFqG%P(WiC
zc{<#2n4YU)8gYby{zo9nDyed;!y;aK?_mpFu;#;HVYuo9#~DDgv*&98POU3DLWX;(
z#)E^*DG>_X-*?M$15OPl)zn3#UYp@V^Zxi;&pxd57O0bk(q*pYUCpt^NC2JclRZmB
z?PM@xeg~gC<}Mi=fR!I){DUdJN3?&NA`-_i_gu*F;TeaEck9sk-AIw54cyF8M~Jg;
z&XS&ln2UTWbnM3dB*Vf{Q+vw!9n~ZZJz7wE-OHLcKUcX^x>N}kBm(*s%+h!=5_<G1
zk1^BnhR=GNod`}1u0Mg_fseKz9wqZpr!%x)8X`fP_yWK`zxG?VsC(UTQ+s};Q+sNV
z!nxOW6;O`+VZ#Cj>p#v61>el=Zk^BfDYx>bqOIMX$+|u4Epc0Y3(A9^psa*>1F)=>
zi@FbaTt9n*13}LQ;v2CNb&5r;|5v<FLAI7^U`(or14kk=AjNc{?`>*@$To)M?irLg
zQn93#_<oM{03LhS8q6PR;^NhO3ZY0$lp3=oE5|3oLH^JVZF$$F+R>vC|2JZ{it8}T
zQ9cmXxVuQ_8F2F<6=r^Gz28cLN|VuvUO~LgjFjOfG5til7BkN+2uAXlwMz{FSn3!Z
z?Y_Q-;MXtrJnm=n=2IHm%zw@_^ce>)V*;i#ysPh_2JZB5=w@kEH4vh*U@=yEHN27X
z+be!CUGn}s12fRIQk~n?5Q7DHn}k*3H_}Ns%uF0BOCw}zz)QHC3M?ov2Og7*Be(0X
zcluodRY1+Hy!<g)q;Qw#$8Ypcca%3Rc%u{2e*wB0Yy>0EB?7<AYGo6wWm5*##*S;P
znRgV(`nG9&`Pi&)c5O%K+rYcDeGD9<XaR|!C49+C=(T>(7v;W46*o`vhkW6{>Qn$;
zV)IZCtex6<Ux}(^fd5aw#W)PSQ8eU@Vi@L(Pd^xiWI#Ug`NUVR*+YBFz88cu2WNU=
zJ-si<(p;*p_2biAOoCY#`pAn_=lH@M{Z0$!j^lrc1}3!5y1{k9*urQJJ)WjsTilPK
zk&oQyee|FXYhP_#?iUQ}X0Mf%RR1(=p@?%gCSZ2!vVHzV$2@^xxluMy%ouGhWyorZ
zO4e)4U7$7VBECDv%a>UP%p&Y-53un&F<X)byE*7G?SVS!%O9Kn2;7ZAxWe1*tVcJ0
z@YNwRO<mnvs@%gAAyI5@k@^~nxC_!YAi*=3;_k+GYbEOW#vk5GaEZF(FSWHI42alk
zwp%SuB|X;~x`{t4kCmOHWY0y_-E6gMBdFOV?;(PyMlq~&W?op#u7?v>O<cq!ja5yV
zvN6?`h$W^F+;phe{|-t}zqe~?abnc8&UTe9S%+wp49F@s>;gh`Le0jjT?qdlW5&Ev
zFw~h^L7WOrEWQCAxBaF(Jy@d6&2m*P4mU%1VuOzWp-5wpM-P{KH*cd3ZeF_^qA=EF
z;X^0Ubw*eJ9ZmZo*Zv*@K|6p>LX0xvYQ7hzfEGG<XSoBj&vN9dVvn%1AKtfqE-(@?
z&5F4-joun<Bz3Qoq*IZy-<DqBpY8`%4{VtQZ^C+w*WN?tKpfeiuzv({@C0y9R1k-%
z=v~Cd?QXhqT#^t^GU>@$Qo0s8o2om6SY1}W>26A!F^RB}Z4i60q=yoCnOrA&s*z?c
zj)Spf?KY2dfhaT!%wp38;EZWTln5dIbgoPjCux#=kJl=TxeBoeM*bs2FYMkM3RScL
znLz{T^(IW~w}ObH3%tNX&CfVRag|SMs6RU6)B8v*Q+qIi)f21I$O5p#lR6_@Eq}P}
zYoI7RZoRSpbrotLKAVfu*n|hGEywNyTIs(;8XI2-r7vT8JekooWlVfhWjb5rA|Of}
z%4uFYIp!F5N@?aGvju~Jy!BKsmQq_W5I~Ia^uKyr?u-3xj2@x4Q3DWsJEGpb2=F;>
zIL(~!?eGfMKy@<_IvP~1o#QD34_!1;v^ErO7Cr^2X3*|(adu=cOY%`@*<NRYgYGWW
zm0fBG`8?@jsw*a2AQgIrBfcWCiiya?gkEF-zmA+cOr3a93ju%E2vvpjsR)mNK<@wH
z^qVBmp3_JW?6drIM{XWDkKD^ewO}g3a0Q<by-t0HQf@n#1XR7)X~y!SHyhKyC$q{h
zpjR#I$X+1LRk?(f+0qc14$70tS`^wSZ0%^(7iAJ%))tM_IgE|;hgGH+DsM?Drlonr
z-49T7e&$%e^iJZ3L0XmV!ym)Trk2kM00jmfYWxnP2VJ<EU>&#+*8%#eRMrAotU3)A
zQ4ihpWxO;_>R(?wLGycNKVf<4q7t#F=A|t-*GhY8S%Bxj=I`v2ofuqG+#Px^r-zE9
zPFlM(A)_v;A6usCJ>m;I#dT7&@X>Ai>%?D-;>AlAAsULWY1&o8`?dCm8sDW^qsIA|
zh@jOEV!Qd3aEqXD)INHv>oaG?Zr4IO8+3;UCJ=hou2;5bR1F6Rv|54WEe6#%{d^W)
z+O?Oyq?3~rm|wot!^?BsC%EP<>Zyznppy70@wPRUjXS}575!IR&`9i{;ZY7|mPtEk
zM~$02Jwc~tN=`(u)WH&Aw#=d(gt2GIYo$p+1c?gjS8T^+jc0dg1_Pe{9I48RvOgP0
ze)9;d@x6L@0%tIlq`qAE?i+Kch7eNj@uoK-+X3Yg2S}lUzAyixn5nxMEbGoXo)O^>
zTef8{u<7f$rG=PUf+x5elVTEURcyyC37J<r<j077ixxQNP)Ib|8G*`u<Gt$I%2xxj
z(v>B@n&H{#t>7gDlO?0~cyS6<J_DK8={B8VtY0#I;*LqXPKVOu!*xgv0Q~16GcplT
zvMLpV2ZXi~N9U6NJ`ujue5@Ov*y*S(IkG%ST-GrWN+9DL-TXV+e(6-&r6EKBmL|xZ
znzC#?WNc`D8&mM5;beNvn5M~+Fn~ZIIW)0Hq>eHNb0+SiB79H?+F&V&>zJ!i_!MB;
z-)Os2U`W+4uzh1LNu5875<8wL4{|`qM01bm+S|*1ehbt+eR9b1VOkrANjmW;JBARC
zoD!OKw$<-dO-<-2IZSOnN60&TR@X+`2fg?#=Z6(5aq0K5Vt-6Fec`gej%wA?O_Rg-
zKyT0&&AIwGxXa>Td3y3fwO(k9IhE_DGC0!hdcM!>m0FAIA<Tv!1Z*rJ1vcz$>QTfC
zoaF$L0R3J_zBe|N*|wT=FrHGDWnkyWM;<l#4mQj|nM$nmOuxpELi@PUml@VP=aO~_
zgn%yFmMDuvYJ;8$>8%-H<9?j{3@ndn{ZN4C21hrc&!_sGRD!2vv|%Wl#FNizKLg#^
z$*H>dDJ}RWhMZHkZHKOkjT}0XN5p>zP0)@X#neHgdXiC(i=X$sT3&ALWX|>S6Nm<@
zcQJ(M9t*I&sP7NgdnpWPelu|jkQJ_Ix9HzstI~~^Lw=u^$a8~55X0ev_(i+GEyRgR
zY{Yqz)zFujsEz>02;wI$8Hkpv=g4BMIusb2eU}(Y_c{pO&7ecJVDHW$&^QqD?ZE?*
zOln36P~iyom{A}GG^_tgYFKMvuxvv`HxpR$eazjyb(X#;JyUYOfO^!vZl|Alw~~x&
z+ls(lSOGFI<c@=U3QMUgciPL)i^>Yb+$QOiygh_F@b&iMO5b|;4^`U6#`{_x{IVee
ze%~un^Egj|hq3bJKGN2b^Gd1FMPFR5-cJ8LJioEKBDxcx(r+)nXWv##5gQn)03S4z
zUY0>9C2_E_+^gg^%HJhtx`O0SDY$k6{*njG@yH^sK<XftR6_sigo+6SvM{$ml4oU=
zSUaPpwu#0AP)~~}dO&Ap>+z}7x|~aTNzouT&sI$OL|N-;rVpoVLv)B}`c?WNbwyDp
z|K7AN(JL?*#f=8ebfu^}DYLYb*YgbE^kWT^qNz}q3m-a2VX*!6HZ8$B8-&w=nZlF?
zOyr0r$A?uG`1B^j0y8!T7!e|A{I@*thfFnnPm46lHM1LmVoAIgqPf9J(cJ;30|DFG
z=$gpH^ED9r(PBY1_R#%N{-)H`SKC8Srk;6$WxrDiQB)rqS!?wGg}n{FU~A<Cah<T%
zv@0}t1)}}`%*{4Uun~{m7rTD145reF_w(UYVJUoIIU?LJh1O<B;G;osi8tp$>QpMC
zeCDc7Kel;yM<nJBj=wm3N#n{*B+4p@l-eb<bQdUpbERU3Yw%EcwcX8CsMu67^rM@n
zt(bR(hZ5z^(Pa718D9sSa9nd%kq=4VqDVNZCGK?WOti9VE5M_GMaz1>=A>xQi}~p)
zN-&o!^VEYs_6@wdqrEwtN3LYr`>~ufVbNd@cvphOA*baXTzl6kopJzQ6fWPz>IOhL
z7e5ph%KcCt^nx3c9;7qBB}nWRooUz)QO|(vl(hFZpGP2wqzP!Au|My1wCSMi$+m@~
zqQ1VxwEF0K(VM$p%<Mvuxyp(0`1qj#{5NOB!23zTurb=AA-kq4T{XbkSaT+(W4Jez
zU)gtiZCjQt$F!KIFU0@1!JS(0Kx%Se&$4z6FcsM<w`>8egVWyV1zohxg?33J>>}tJ
z<gwq(xTQkxTHi}2BMy8*#>oDUwyjI}vb1`;1(MLy;4WJOh2zm>ll-%K+vV<yIdfdx
zqhtd9MzRP;B4e<?XJP^!+a>vOYngiK_y$vwrtu3}m(zC2%<AYz+RF7)W4=be{N-hz
zfp#c>0<-Wn0kVkVH!H4rLWlWoTw1*9{V7SW#sVbU#>px@eq;H!X{h92hO)nBgvIyI
znrI-L2jGZYP0xgeRgk%+McI?m&*LG+4R*Vhb2HIB7JPpFnM#U<Fds!zY2QXE$OmFy
zm+wN`v(6%*Y3Z9!BGhU4mw}QNxnXzlkGbWbv$$BPVfsg?D^08jj2x4yeL!55qmP!$
z<zaJ4MNccn1{VM#)EE<jBfkXRH(>;l@(^sQA2k;#tONiEiELu%-nqV5-Zx`4%wM7<
z;I9E@0v??tVruJEnF}5>en>ckUxd4ucC|z%MLahgEGBm)Ro$WE*LE8)9L>i?n*tPA
z!=^?_*<m{?up<DtUy&}Q>U?^$xaWNJ;iq=LA;QJV$RJNn*SR)9)>fRU<=HIdBJkj>
zTOq>ffB$)~z%b=8vmPIgy$S{>!`Y1RckJ(*81MBIUtJ8kzr(d}&bNq@45oAZ3Cc|$
zvBROj+j@_Nk%2V~UUBimQi5n`MY_wIq0vh~o>O*jM>!ZDcD-3nOt(^>97e(%r}BR;
z;5a1TUL?D%p>M<zSMUF0BK-?gXP=BVk^v8yHd%s`zlj>%ViEbZifpo_(|2l3!Umv^
zJ%&#e3ZjHk`(Tb`3bP-I!(ESf&r{W~)=M)NubaT0n;N@~8593<hkB#8U=R0|>8gxH
z+-gB8Qz|^`i(2atjXko(%oI~|!`v6jlJk4Yym?bwduVNqVu4f%MBHW4yN7P!xp+*+
zGX@JOyOf99VveNWh1ICkP-Yu^nGI#9+ZF*qUDi;8PIh|?JBX0&MU1qV73~qnUL@;E
z^i|F3tp(_l8i7ASH~&s?Tx<lq@PNXCH5zp}z&6}lj$WsVXErTfOGUQ=?9TVp&3Mn!
zHlK?0E9}2n!=|$eL6Ow#j#3*ZUt5QPtsuGlRj0%ZOE589kNg0T63Q%>+z?@I4gWV#
z4hEaRdJTzZXq)YrjwHmk9_&%3q<F>XH(YLYd1mO2J8+KyXebhkISTeFZo|o$jU^p4
zVcH*YQ(OD`8z9;EDS2BB^5L@^5-;F~_Mrla3dd%AN9m@%;;7?yb(z+fnd4Y@H^^DY
zt#kg!ry2oPZtME+r6HqVTrbplZI%0<`SGD&*w2_4i5aQHS?(a`Mp<ZDGeY4&Lb8Zq
z?U^t`(D|kV&jm})MqUzvC9GH2rU5rgjGC9JI6ki?`)5J6tv8V%^F}_MC;gF<Z-D9p
z<fXPulU1orqdnkGJ%KfTZug--*nxEy?!pYsBI^qRQfFH;C*0pY4i<OXEE2cpz(M9e
z`LQ6A4x?g1efM#Ki8lNu)pMdfMuBF_5i`HfQ*oa*UJ3u94jo6kSQDY{kfpYwt%`J`
zRoAP3f@8+Nu7kV9|3{v-{=>oQyTU|cI-*{<E1Ipw;+<h<O%8d#%0)DVCI2*)77GZK
zSi{{=<J@saWksalT*L3s`E~Q7;Jt23BL5YaaI^Nq)o-xS;HYxSB#<H65;v;;-)|%1
z@$IbzUvLL{4LSrTcH%x0;2is#e<QwftS|g{;~;fToP70*50xPQmQ$?esf62)j{4_C
zR8?8}mA$_FQBhW)FJTw8za#$2I}?LDn0GWBMb42G#o#EJqeC(31Rg8qVS@=)xd|yR
zs;{ey=rHAfS;!1|MncA*XVOCU?irwBVjo7tLi0ABm$MT5ld0n!H`S?3N$X$<>TbX&
zzI75FhfUElP!ld2hCxqk!=jdxgL(#ij|ztVyxG<AE>+Dzr5hBcP6xp{V3=rRkn)(a
zapJBRS4BRk{N;1VzUUdra*Y6F7S|CUk~uGFLXCBvJ_ZKB(<OMa1HTckVohgbWSR%X
zrvJRMJT{kLoVAbj2ZsyP#&C&rK6v1$FB(fF8+f|J{<LxNf47<oWn|Ca^@tH<s|&?b
zY4TQvMv_|lH==y6(O`#mw438XY$ShQ%f*S*#Kc3Gf4RjsHw)WVe1ypkJpfH9M2}VT
zLS<k;N_qz|r2PkEi-Ww6Wukkv7tN7W_7cLDke;DWk<e7S?JuH<^T1hYS@e@^?aV5&
zF=7fqA`E!#AeO3sUn3LZQKX0lQ^dN@*L;twRQ;)ONHmk_D_sY}lJxdTP9RxEIeg_=
z<;z$eLgBtp!vcW+zBbsMBA2y*8O1~R=udEPiP=N~etY0H*8^&yyQ1n272l<kb0Zef
zns+4qMFVKj>=(u|x4Czk+eFTO7dGBnf8Tkup_40KK{;{y?v~@f<{qcy+(fKeA)|6|
zi&^$Swhng5Lhc|X=I!6V^JA^pbDusWwz-oXaSPgOa?YaS0X*f3M*-%q=$@$~LC=JB
ztJ4v#A?1vLoqVU<FS#>Ti+8h+2D?;>-Qvs$6m2BCn%CpPV}(zoQNwlxs9JiKor=50
ze2e}^*ZQ7qm##%P3oo-NTvoH@LP$45>MO8S!4}+o?N1R_yk2un;1dRxG&_Hd{J94m
zY~_U11<pKx0z%k-We6cKBCY;m_3D0(g|9VKNbP2cZ7NrI@Wic@N;mXANJ-e`Ivt$j
z`mi6VWLfYiEL!3C28&ch>}>IPW1KrC8foJe=SxxK=RCRq%Rjy7SvCY8aQmuXMa%0Q
zqFUyy%R0JX&{TrP^J;+k@1&>m-V89n2ee2FTEND4GYsqs0Lp~Ugg*LZcMvQ-TSf-C
zoGQxC!UPC)B2U%n4B3gQqF=WRxB=q+SGcag1Q0{3RE=vfLb2L%j`FVID5rd!N1sN>
zeOV+tvmkN%%k@1QM5w4GXT_@>!3s}R1GQcntf}pktlpVPMoRfu*waz5T;aKdi4)LR
z;RdAzm?eh+cwaXGPcS;`POm_sM4)&Y)$Uz7$rhk@O+HYZvxj^7;>5!*bG?fTxhe98
z(Mt{{n|I$!WDY7m9qvXeG}Gi25UbYZ9i`>l_RQ+6?&==;Xm7o~w50=%^!<wk@i{&X
zA%)(5INwzoeGTk|MZIX_O-at+Bs_Q##h7hN26<|9$^yojNiS>TH8Y>BIx9!`P6w2#
z)MBckm4h6%gfsYI(6cRGd}mXetuId+A<aQ<oon#t#`V9uQ$``+cwv@gUcOSztw=H$
zw8UM1Xz*CRMO(<6xN~ER3i)YNe{PkkUG|A5DeQIcri&ZTm6y?O<(Vw#XFmNuPT?hd
zDXw!eXL>J~JFl32)%ellO~^xw0#{n0sx=|iwm6-wa3OwRoij}ybo|EbD*_CjJ#KS^
zU<8~#m&i<zZ}ZJtS^brM9cW!y{9<nw1cAyiVHtNG6lvb%e3UZSQy(W~bEw5Vmwo)E
zn8~`iW>ZS4o}&mJko&ZZ`~;*H#4UyjtY;@yG#9O-r?A+=an`+%>?+4YV$u|8S|!tM
z@@nW3?T8h--tIgAH_IggRCIsy9j&i`I9=JFk$XNn)Q4TI+q1Nralv#4IPo9(>I(b-
z+RU*09d)AWJ0ZAW8?X;%8g??jA8!m=oUBgpHfo)MCC*xN**?kTK&-4G#Fi(9I={AX
zJoN&~X^cH0UGHI6J+H-#UG$Zvs4CC_vZ^j;_jut}0woKyNS3_|qN>Q`Q+lxSb{4-u
z@PbBZ9s}mRU$IpOIT$SG1HL)AGh1C*zTSSB+CqdR|H&3&wWQtGbJd_l>UIJJ<w6R)
z8cIMXMxR=OForUhGe91fS&2VUe&~t!Ea*W+N79sOu(iiKoUwAMUKqB6ZqR@28Y7Cs
zCy&ml2-`P-52($gTFEnN%F79)fG8|$@kC*qdje{1BPv1h5Bz#ETmS!*AZo}L1AXJe
zeezSNr6T`}a%zVNQ{f7luXR=y-HXrI+ivI^9&;*{Zt&w1_7z!UM%2;y@4yrLIkDr$
zzjW}GH`m9KWnw^*P#G2XulG@v7=GD@YtKu25ugft<7WJbI=Ht^wkE<k^se=c_tsrd
z?KBw&YqtJ1HuIU!3XT_CB1e_&nUS;<j(Ili8D^zt?}EdrtrJ4Q6Rog~Ri7+-DOICZ
zEZ>VpF2;GtuU(c+ck=IAwSdq5%cTb~z(;~9;U80@Hn{f00Xf=}{)p{xFbAxb20WNW
z<43~;e9*}NKS030eR(M2%T3aW>?+Z*Qd)r;@XO#7@T%ow$mp$^If+!&HpO8t!*H6|
zlRdrYDXk|Q>)nN27^Ke~6Vv-E3|um__=_#N&qL$W>9qCBeZVYxS&c~%g9ZZcnMj4{
zU$1Nuv*9>&v4imcs?hBKCfp@mh7N?CtIMcO68*R|UWvE2Eb8TOm8R74v*3t|y1X33
zYQ~C}`}~{Epy~}iBE|m3@aem<Ym2Sug_eUQ#c{-XAJpa49f&V;QWosPQ4N4LM5?3#
znyF?M;P;1n3^cap=tOEYMmhk~teUj-cB1fACRSmE$!3hw6;^!&pGn*G3WE)g+LJSE
zw`IHJsM8oYW8ULsrt>$dSevs~)k8^iRAKpmXuDn%iH&PuwUJ`d{o5(TJq9Wq+(fml
zeB&3?*h~SiE##A+C&VJO(IUn-TXkd1Tj3ugdMX=pYd~`CeNhjQeomSrq;-XEn$`}4
zR^CQE6@?(wU3qB0Nv)VL4|#{S%JUZTmQ2w676A^ph1mOmn#on4>Ihja4sVu#zwW%?
z%Z@=XPw|9(lK2b~-On;YR-g?+0zKO*r!@Yyz~91Lh<sVXX%gF{D{OJ0QwZ3IT%#(5
ziwFF0C$~vWla~31u|R*KB3(l>StYq`W7=Q%{m+f=6TwQsWm}yr4)=?6HFNiF3z>vn
zR=m5UHJ}9}DxVm2!E@5cL8x$n3<6q7QJmysu#_lL<TCn)igGH(y#K=R5Eoe-f?F9K
z;&186qu@1H3%#+%`}#&_IM15F6f|>a!h_nSEksEH?ngDpYcW5}wS{?XTm?ggoJHHd
zb%i0KQp$iDZsW-eWa$4hx5Qk99tXxpQz>DBP4u5o({F0Q()yG75!cpk8Z<+)UH^uV
z{~%lE)t4V&>-k=b0zAXVG;0XfxMGCE3eB51`v4kMdYrx9frmka@0ISnzPC7^IFFkv
zd3jp*_`yrM&~0cTl^XFn9Ak(UoY11kog=3xnODapmv)s29wJQSH&%Iw^Lz4`t3UN+
zYShlZ8PjHm(9J&y!j6lRO@A52nF`cC3cNJ5Go<YH0mU{NYoWFeFd4{)3xQ}{4h!Vh
z1G<%baOHUu^5^%%b)okXFbS6tHXy?4=ibVCy*mNp31P3lpf9YhD}<u&k-nKw3p<eU
z6sfj9)xH?X8=8SbpKx!##g{?=*RU@|y>Hsev{(_E!JZ)1*6g4wfU8l_OFz`{UJfwE
zD~kGLZqc=o3R{;DelUQv==i#bDv*mTSGsb`kL<POf3UZ_)^3`WsMUmM0m55LBo`~g
z7H9d6zI1P*@+vMEi1ZjkT?^1sU~k*^r@~N8!@(MivE#s)mLNkTfPZ{abxC7Q)e!7M
zxN{z?q56-Bc1%f*_WPEks>e+;k#ihcknCsUNaX;otCWf=Oc%=!C6{gm)TB9_(W%7o
z0|txEmqUfC=P_Rq6!%R^D4{#gm(O%Qv$UG=ZB@agG9<r)@vmMX<y}`zJxq0_`5`^d
z|I!gZ^wFkt1Kw(6g?$tldM3r_N=fjGC(XQpQN`q3R)XBZJ17|KlFRr#yf;~92%llp
zK@bNxx`XN_j>&ql^L#Zvem91Km^~X?A8!t_U!|aGRjzknU_<fk*}v7OKa^N^bYRU3
z*>W3d{}ODr!39uYQjaKw9fb8xvOIY^kJvAQ4FQZ+dWh%fOBFyiVG%%OV~u~a@KAox
z%2Q^R%JC?VqHYpX>UQFu%{p=FWDUn$^Q;YcKzuk19C(O)zT4@f7yU&yq=Xh`G73^+
zE*eZ0@YHmwh(6_tiRi+K6nz1OkfGky2;uY#ffL)gTw{!3oQn^RpnePiI8d{kf8F@n
z8cs)Zn~gM<dXlnvdqR4wAa`C^#aHx^yH@(xI#o2mT}M}lxDKiC#(Q*~wDiRYp+h%g
z$*zkp(Yrg{4PFfLX9)ni^qE<GGerP5l*C--*$;!257Oaix6%QHq02?;4Sxmp06%)h
z7CUvNb66kI9;<&<9%fcv%ETSCe<R`RGu~qg<JcE12+uu}KGpT>VUu@cURB%qgj+Jz
zCBEWLV0FWGPwwRILk=&>KU!#WBo(*nPwQrezf=0z9XTCN=H2-Af*@h#T(nAAC3o>N
z7o<pg?u;JSX!{~0k$$y|Gbrs9`IM8YN+~Gn5*$)@fb-}K`eiG})Gg?Ow2wzC_CVxO
zq=sQE6eJZupY?C&=fe~vDKc+>5kv8Zjxns6el+MfS2kT&P9zTmQrsj3IGb!7hk(`A
zn$z~555?vu_b8M+pND&J_q5EyW<Og)NB1W2snE;i1Hkoo{T>LJ%9H6PFK1!?0Am`#
zb9R1OC<ZH#vE5Xl6ChM<wxqi}c6}XAbB5u}EPC#P1!q>z`pP`<I))QCfAOCY5)cu6
zG^NiQi+>RL`5v1V;|1EsM(&hW*Q7gnUnMig9n;9BXbpfj07A|L;RRCC{mdCfT>^2~
z<`OJixr`KS@6%avjP3lo9mfcq>y`hby?RK2xC;1@v1*^!-0UWsX=xI+Z?4kR11CY;
zr>K+5=Q;9y*Lue;wSqKu^vnBH?g~buu;BseuQH#bqS1`8Q0x0`Ygh3E5Q^1&Yr?7+
ze@&wL{1}e0%!GbM&yvU9xd>R+TAN=;y>A{#=P2FV3OIw60-8P@|0`oYtviHYh+T5~
z>E4G@hSQLw-I%SzF!)t_$`*Rbc}w#|L1$*x)o5ecG<|vd!Y6@i`J1*!mJ}W<O~upU
z_?=UGM4eh}ifLX~{(EiMgIhQ#%cjPvnh@@G<^~rDqo5yFzeleLNbTi^*$+|1YV9bt
zUpyW{<4s~^1|qOWIt~4VIX+iqJ8ml@)uwu@?xbIvj@iFCEx>VbS!)LeiNgh`h~{$B
zI`AvY5GT#F=UpS(%<PW+PI*ROlrBJPFD$|x@!C@%>x=kTB|1~jX_xq)fujcMq?qU?
zOQ7LTFR_UQDBtf=&%#u$6tM1bim(YM6xy?~KK6GDFJ<{(DZ;N_#dptTiDH999BQBJ
zmxncwx0!575VutUkK)aeL4S#B(Lwn&Gn5X-c3|jX-@sR2Ryz9jvjaUgP_j**kp40>
z7PxBoQ^08#oBGZ6VH}9C4I92!DW9C_$M~FP|7(^<PPMPIFb?d=ZG>3>dH{#z&2`^j
z21Af8Acnj_SuT4^pHU_69Fq*$D`pfqUef9kj|JZ+!5Zs)%uMMR9xE{&NQcBHdMc7q
zbbKl<@cdD%_+Ymlse*pD^`i#e3C5mo9_~POzw{rpWqc&m$xC~AWvF<a1OZkk{pqyL
z8Q{~`gx9tOOjD!h$!%IbL8P%hZ~J2|xR=f}b0lXrF&5h@%4Y*1{-8nb-B2=oq#KbX
zlmiUClp}kQwVf1MDJ-o&8p&YHYZZUuKqi9sf=2G@oMuane}KPl%}uZ3CJJDUR}!O&
z%B+WYMW04JK^sA<?<RqS5+?EI_(QGv9y3au6>C%-qTa_Q(l}bMgP!#i=$x>ZTMe_8
zQZZ8Ut2(m~48K6gheT*B>~B{Sr6X3%NVSn)Gx!?|PIfDP?Ey4KWo0Qh8JAY|4H$Bz
zV3ZAG^_M>>&*XBVG@Xau;zIqfVD-usx97%W%kTF<WNcfdQ!%+Pn%i-MB7M%vI$#9>
zG{()7E#3z}6j)apmHM9H+4b;{?<slI19Uc2>g!2uSjj@OOTtf_d>(Pp>VL&|xa8Nx
zK8<TTiP0gW18f+>ts7mkSnem+Gf^OD#~*ihZyitSt}@P<?Nk=`h&`a{&`G4kCjg<-
zj2S}s58+|8?{v<Ip1rJ_dpR5J%?dJmO;qzF=ZKGJ<#V~QC_ZFDLVBN!0UR7HX_HHR
z+gDLT4E4}d!QiGHohhm(gu+aISs~bO_h>2ee31K1x@&<pUI9rIFGIyIo)%OnrRvq9
zi#wz^9V8#Uy^bLY5@1>F@;aJ#GiPmp_W9JDgaNrBe_k1@mubYtwnm|V+lC8oz2aI~
z!_*MkFDoEpoSRG<04j|oKHXuXd$TMI-&9Qp3zrO|(y#gwt(1+d%Ppi3|Ac8=$M=Eu
zTWVXHu6~207G=A-HUo!EC^{a(rNRM!ym)8)Pr<F2^}RS{$B|*4oRg6<Z^_l_iI@~h
zo2uY@F)n9oO3G&#X$bWvrWYHX-yMF+d3R+LZ)}$}4^~uy^brgS4F5`>L(w74`sYtj
zq>j#eXaCq>%VH%?Tu_^i;Q#qV-Km61f1=Y44!<rgUQqc7cqdT@a3?lN09MtHMiB_Q
z*0)et97P6{(qZej=mjyt)M?^-dkzeKJpV*#P5S<-OEpO>&1F<kFp<plEYd={^E%zA
zWD-z5)R29kPJDCQiAq)}6%!_33{-O_;x$@82<oU;pvkj3)(50<(ZAu3n@d+S+=8gF
zC-w?gWlc9A=!hsdip(jp(OHF>`9>{(Q5ULg^UI-EVXpfUI%Y+-bVJZ?raEBCu1o5r
zTx5q^CoRAl@EPwZb`LNrsqZRr2W3(~iX|T8Qek`EE>I6cnA$ln_(-;Hn$NafO&b?<
z19ySu2#rECFAx29{8Sw0i<y?=*p>2_!chg|)@43OdTY>!i9Xva9wRe)#%mooQmm00
z1nmNYKoBl5311NyRMQHa>%qkfd<xRfr2ghgGF9sO>F-ylM*+hUR+&j@z%0d*^f0>R
zB@7OH+5({{r8*Q*(Hd0C`lseCWBr|h<&%vSh?`zJ%5Ri?!7R>g?<R5+UIIo;pZ4ob
zA6py;vp4EJ$j8Y8uw!A(U5u&G2HR=PG&^|%=L{CzoOMu?$l#6-0QE~)WA><c(z|V&
z%hN*SmQ7MUxS75=$=M|aJlYwd>+G27U4M8zTN%VB@s3T>ob({ba@zV$%#goGtb?vk
zsHB+pGgGyx7)prx--TSNK}$gE4E4*TGf2Tf>5NT&?dBuP5LsQ+LcV_X30_kdBR1;V
zDms2}+5bq6mDkD^<#it8n2X#-M9$Xa4YB~{CxQ%tZdUPK?v5=y90$skhcC#fsMB%Q
zw=p7rXf;BL=S%AaE|<D~36%CqpqiPGTyoc7qylS^If0(?U#~(3^8m$7w?pw;%;w?J
z!@)WCkL$p@i>sSR(%T_nLt-jUs_;%!G4nh_0^LLLegO)>;g&~3z)9CMo?BRf&W*TG
zBt~D6m9fz=Zg@b&b?VSVA+Bz+v1ui91roR`J@(IX(DHb2y;W@u4@?q|ST`}mq9k44
z+V3&DxxjChwnZ}FEL=GDH|0(HO3_Get)xC#-%iF?4g+2&tkHMd>y#k!KIw9EH<&)A
z!dX}{^9B)qMnt2YeDp0co$blHvkiEwc5E<|b+9{GDvBpr$J~5PGiDWv-z^FL<$OCf
z<OiOL;Mro~rmzYzpy@H1t#xLq;T<|WS#t+2eACVRa(r1b+z~s-0%%!mR4QzTKftAv
z1u8L7A#|PfIpuOUec_do)p);ooJYZ6iw0YV_dV1AeSLqzhp70OooHZB^IXRduBE|j
z#f3cA-QD+IR(a!AN^XsAqZy^4ct(=0b`vTYHw&~&)Em9LV8D%`t{Ci%Zk6uH%8$}6
zANrby=10ztaA<euy|9F*eTA^WDH{v<nm?L>*f84KYa*UtYE38?R3zYg6_VC1@FNMW
zgoH6WrpdO!#vVRbJMum#)s1qtaXOpILv=ZW*y~TP5Ulo3dVHG=@g~49LjM}{Arey<
z-j#{AbwKYq?17Euo00L<1(pIm{>b$lIO>hds%h3t$>RYX`N-grhkQo9NAEAMcmc+C
z#BS+i!QywTMV0lQGxES$+UFylmkj>^+GA@RP$fI^?U|X?OfAgu-~a(Zqph*xb^w|G
z`>F&1CcUH8JGv(dY0DJFXm<~WqM0W=F-yJ@ko{Nn!Y7u=jq2on{d){NM{A)5_1ggL
zBYaaFqx?%R(Bc?flD2!azjNdHXKai)?CuMT7JqhY8>8gy=OaX??l7tPH=E9YVDEn)
zJ^Uo?KrG{>G|2v<F^)?v-OLE+o&O|<*@{k<SuNY!d&{!Mg~!<F(;(OD*BjY2PV9e<
z54iXTdqSTfKE=wUCfAe~DlmB<T>qdODY0%*Z8R6EKzNy`T*{fald=*S2Lu}|08j(l
zHV$XH$1F}2dejW?5)E<tee#tXQ7Cc_;{-0}2hdaGr(CE)2_?1daZH1h6{KgXEeC<Q
z^(U-jWMsAS=;1xa;1`IT_2O+ipHE_V_zaD406&*f6n}k^>(nu`kF>VY7HH}dgL{(w
z{mf2^bcu6r^?(uk*t}$57x~%o`t{kKs6|QVTj@jkwD^>|l~_>3>6dX5#p_UDhFK#Q
zhxuTIJFKz>y4rjZBVmGShIoe|Dif0^kDIvTBozf3ssDp$uFDoyEw>}{eYVgu$4qh>
z4tVV+y?Y-m)X)p90(iE)PQ!fHf68D;v6SRO0e=jtK5+HUWRDyy@nDAdD4*l$w|?mH
z7QgcBSba0&s8|!_R2*8M9nm8aS$T28Bt5dqihF1`Qg3&N#FJgg@Rdl}0QwF~>;aHA
zy=4qd5Wu2VG5&>oa;d70_6Ihw7U3e}Y77oJz%D)cCZE`)H+BCty~wzSnW;)X5t)sZ
z)^rW;$CzGOM%Gu_WQx$tV_;VlRH2ZfX91&|gX`m;OMCV-5V=acG9zldUL(543J>}7
zMuu9@1}<rITh%=N5}%UK&&?f~oeIc#;sIG!QWw0lhZD#BEuCp%set?X2Jfw4OyLe1
zHXOsCgIZfHu6f}~xIIb1Dxdj3PWN#=e>~R|Y>I3R(;a}PhTy)#CqddoHEB--3c!ZU
zu%Zv&#Vss*MlXP^T{b&8iWda0-RDticuJq&N(F*uL(vEs>CQTE(b_%H;ryEGd&6x5
z*Uz*6kur+S3W_3uPP(wF3v^rfFh?{~(A>5($Yn#@Zk2%7sBDUp3<QZoG~%^oO6|qY
zMulBZPZ)z?xg>|u&i{)UVA>%6>dS_cDC&)Z$prEYwYaM8rT?%qO(HZr<`t@PO)h$Q
z^AlJI*SZ{)?{V49I#S!FZVh;LT4{R_1Q2p_$tb`Bj!pkZG$obfQJuvQGSRTw!wM8x
zjk1_>3!6+B*@m*;7;g3%P=t7PlmZ6`=cceeOTpeDH?4_c%L5#95@kh=0I|6@!2&7f
z4ioZN5Qy~srs3hat?sxF$K%QV%_C%8u16*STCWy+W%rRQ!*kXYOR7vS!G8TY8%u=Y
z77L?>d-9|Nhx=tAm!I+pjyGH8BGhS?j(Cy1e}1#z>G*Q;QoDtW<4tte9VQ>B{H;wW
z(8U9tkwd;GRegnd9<fI<hfTeVg*PA#QrpvrB<Vh6DX=`9eH^rLARKDpv=$JJ&{ief
zL}<11z$>I@Dm@VXO_EI**oyw)eMcvbB_;bKBr<W5oM~=J9=(>hqxWHhDfCb=*<?wv
zo}8aU%g{D6pA7?aU0}m-%i0)I^9hXn6u=uoqaWQ0V|qdtdh&W`v=U#9x_l+jcJD(&
z4!c%2OIH@`h(8SAqLU83^ui}4RSV)dqu>>;SVrd{b{7}!&<R&>s;yy;<IQI%Cgbxf
z6SE*a5et7;P_@jYMvSGtJ;IOZGnfe^dD0AB0KM)wmTX(abc+l6EyS`3V1S8Yw&hSb
zfyQOvdf8@#lGC`Ch~EhWu?-8c8dQXmHvn74Zb+{VqqGE1MBIjK;dNRkBwO56!eT=m
zegG8|k^S;rJJ)63iuB&C4~apVW9N}NW*%vLcvOCY^2T3sL+#|U&KdXxF=&XEfS1Jk
z(svz1ndW%DQEL2fFN;ui{JtD?uJgho-{?<3jD|J@p82Y>n^u;#THiw;her#am^3$z
zcO8At+Kr)(N1_EHcXe6>hcwREqinV{Q{w8X8t?A$=!+M2CY14}5K$r^7ero`XX>36
zcG4$}Cz-U_K*$AgY$J3OHx!)W;ekUEJuTy)j8h;&rcByI8a+d7I}qRXt|*YV&%yeq
z+@d3a=xWs$RG99n%x$B6F$3H}4^o(tX=OZ&#R>I3>AaD7HXH&Vyg}wx>mYiV0v58A
zvk>9avNho8JSE?{;5viq9dC+8cq3v6W;h6o+o(EKo{h-0eOieY^)|5u)N3)OKAPL8
zDhK6Yhi0Tl@pB%IOf_<BQ&mM_4HtXIZ#Y@2gx~BeRU<9!#g^t^KiPYaEU2jP$hoM?
zYM|k}NZ;D0y5rv7I1s`^=4QMUh_Q9TDK4&BZNiiH65;z4;y$vI2gWrx6Hhz({A+>j
zAE@atVBG!7Ts_s74NA0qI)c^cErAvGJLB|kCqTbabvr$S9up?R`g>BA9wo8%zesd)
zJybzmB=Yto-&wGYNwh*<8)DE(c&t!Jpe^ze+Sbw4@8c$}%d??PMGXA$j0a1?tCD<v
z!f?L!Ar0@83Q?eP{Bz~v4V3qiW)HI5n79XHpuh+GX3Lz8i%S4Tm~VbBvI{3l)>UG>
z88;<Y4Zb6|xmrD&7o&Kh7hOsP#(~?T*g;Us@<=sZeESgjBn)~TfK8v~O4C{pb(~TQ
zwEZ41oe}z^;IaC_GKboVeE1&QU9PbTSjIom4P-&Ab@Q{KQ+vOgZC(UGccZtm$Vf0@
zaRz>4%{eUsS6EN&-&se2qL&dg{0AoeVS+#u`x!N)554;z>2RQdq`zpTk@ne?c7<li
zIbMYPaz1_UfehOHPx>jL>FLe#N3LMvom>n^(E@sdxzlzxX^4{7DW*Mkg9L~+wA((w
z@pcehc5k5RJ9%toZPPJ_k$3UG&XP5>^?wRly|)7NUT<N{u$m<{e9P?QHU-g=@|Z%_
zxo<g%NFA##Hitd7n*XoM`*s9{Py&Hkv<OxWj|%~Gu)}{uLO&i1g@E|NgT?^2I=!8b
z=`RC=9>nDaKMs}9{g}ycqRcR2slYKFD0CYF>4*HB@X9%-MO1r4(wIyr`5y<@9Sni6
zFrhjN3g#oz3syxbf}J%IALZ;;FNMNpb;FIcXiLtwZ>&*~qs_oQplgbW2B?{<YqO&~
z8@b7D$!DN@B0B_j1mOv_SDbLx+ii<46%l%>WU(P}PB)3J0jl;HUyfb7A_-3v(GxW3
zTGHWGc<AA5{YoO?pCH6$S_u_m-7nc=sUZAVW5{G~=47H#!Kfxr88e)NsWXL4l*${j
z$%f<EQOZrv?XdKd_l@9k-E^{RjbH>P@Q<x;KjDs93F*OEFo65{yDQ9zH?_Hf%d6DD
zF=QwL9N>oN?g<?_aMF`~(xExd2tVVh-)j&J_Uo3SjbBY@NN_<~G%h`a<)dv+>y}p?
za>my8sF0(?A?c_^nENcu(gumuSxhBBP=)L_rXo$_H2QcmUkd2;=j!HNah9c@kx$`m
zLHm7|>v<d{>pSbLLv~8GrZ(;<JqDZ_FqUB8h*Xz+pzSDL!*7=l*#p3}&aFEL5!mVL
z_x<kco%G5vL;RXo^h_qhy_F$!a-%n+rP3BpJ_<94EG^TOkk&XFYnb9M#ekT3pyn%v
zqyAMb>4_qGd}(4$C-bkeFfELkv*71@V_sp8^ZLp67$8i5{OZBA6`Q=)#=R57)?V0_
z`nA{#>)WO%*a7I%f%@H{gHp|Z#aqv7s+`*&gjTEHr(*;oTr^{_@x}yoSkShNR6gI6
zXe#X5y>1umRb~_L^4++UXm>fd$A@X(`gYa$2BTs-WNTP$Jd9^-?F4t7Ms_Pm@h@86
zG9E2rb}^L8PuWp?YFCkZAwQg0IxV1C=*Nb@;mAw10*<k|1%HbbD##XuzQlsQf&H5f
z-5zzTn#d<X-8It-!_%oiyzlP`^~(imEmtc62k>&Ad$3HJ#Sfp1CO5+5-ORS2*$b1_
zHNrmZZ^!fM6U3GRjB6U$+MgOohK*YeTXGWy^n|N}Fwx=G5BC4ua=)-Son$Kd-YSee
zO;(EC304em$=(YbLoxzFGnx+#`1JO-Imp%JNoy++b#QL8J0&|O$sJ9ohUi*@^cT4=
zv7^BB{t1U=5Yy-nSR+*3r;oD0I<{qkf~HPWJ9!06c=*flEh%Lv;^U!tiP&#+VV)Cw
z8=n}4%3R(Bl~BM{c}Jf#8|6`eNN4|(#5a@>$ndA%yO|*LDDBGHBJ2DQJuvvGN{}}j
z1B1LVG_ExhYWf*wJ>JSFB0zn+kVRuLK^z6bR3TbA457UbXpcon9lduZMVxVj{O1dW
zFT;9KGOW+aDPQ~XJqH%}yQgg)hH$W7pseb8Kovs`8e8k^<<bA2Ddx^|w(-rDrcGQn
z0+O%#^+CnF&v^!~Zs~Ud=sysakse<RpWJRUf%o=}l$;p-CK-^vFfNM@Yb|M}^R4vV
z2f<Bn^4gs{@)=K`MSS>*^6S3E3PsV@+JhOrW7cO4`s1sLdut;6nVPwDW7Q`UZOxJT
zo1R=a&_fEtl?BXwg=ri;e9W$j-M;E32+6i~h~$7ycHTo~rfYSvZhW6tnlIj0lw@NR
z)g0Ygx(C!+oF&i`*doYH^VM*GTDLD_kCHg5s_|@R1(7JT^^aCBgVFa(SNMu`=WXd7
zq9RM}$TS9<Z7zws9`upW2fd9<yO!~+bpIyX1`g4%np5{Bk&}mPD$?b*TYx%@Bp6PN
zUAIT!Gg{qnG*%C9ewD80a-A%XFwxuoC7&N@5|JFrO>;zU`AWoKL*|FAnM!COX^aY6
zGSybk`O%wXe%8It9UMzy_ucd7^n1Ee|L3NtgARf|f{PNX0*~lt)-e702`mAWq=tbO
zr~aU3&Mft6YtiSP@;dr{8THtMNRXyIK-_P*DNo+|+L?$H{rw~c1=9m;O8L#EuIJ{g
zkYMFfsc%SauusT63Twt@UhVM!;tTpsdQ!KHdiogUFg3Rz`KXcdTY1%DP`!U#A}{Pg
zIDLgO{#@?E+TIOHZ6`Ht{=u|WSAs1(MDc`}q^Yca0)}z?2eUz}sQ;A_OMcFny0VV?
z@ve|ma|ha(RTMMBQ)aPN6Ao|NVO7p!9_&iM2fwa_-a;yd7cblAjdRdYo%^=|MvqQR
zW5Lzkvy?cKf6u_x8QDa5M#s#0hiPAX>GMUN7J&cX%vq+JkN9xyO5CUsQ>&+80YKWF
zJ2hVy`U_<O|73?*c}7b7I^4u#(hIK-%t_;nNU2Q4FyaxykBbP%N@N+;uS&O0a`6xJ
z+41T}udsL;{#e}ZtZp}Z?Iu#5!TPEv6aBB@Xr@%VJ9j5Ogejn3!D1(h^vYh{JbL{>
zf?e<(gu#|eWyie`l$lyu4sYx<4z#k0OuDG(ee_3UaUyY#*>MzLkJYsLhrEQ1;PYBc
z(U6VUjEZ!}@SF8-3WD8pI1KO>zcoO*lz2-<%?zlC9bIfwa4F)P5m_eqKI~aubTU!9
z){@+??G--#h2fa~6y9liyc*+-=1X-ncd_4@^ARCQ)b{l)K_(z@_Bh{{6xjkSMUNVZ
zc4s|hs1@6C`f~_s3{mvZ*Hwg+Eeo>bziD8~PCK)CLYik_A&Uw)gv)gXSj?cL(%Xek
zL8Leg#9Sd0taavA%`PWY*e>WD4p~=l)<hV3Kg)Q?0*|ukJn{zYZjOTpnO*(&ooO5z
zVt}<qfM%M50z}*@Mnh~8<bLtAVNw-oU?m&N8B;o=GCqoW1CHl8Zm0=}W50IikrnMa
zsmSXwESqnLT1V^UR$J>KCX0~0<$QPr=@9kj|BVX45neU9`-{Ct!jKqF^PGQ#bgC1K
zx61d&5Z3Ic!tX|}6iaC#@2Yxeh}V>><l9dq&2?zXD}QO6AsvDw)c}h-v`LhXUi`xc
zNXT(oDicSkT@UiL6l;&50<Cq^x{OPH%AdarSjNw!A(ys*uS+OOBaxm(ip1~e-8+@?
z87TEXu+kOk-BHZ`y~aUv8;MktbmD(Zc#?Nu9H;SW23Zp10(wop!Ap({l!&%ogOxn*
zq4BrdK0lPuY-D)?L9)zzo#9NY);gC_XDh7RSr%36tuh@OxVNS$qkxKENcwbRNKM1$
zP-3gVayoKNv1gCEy)AzApmhe_Bz2ZW%^h0tKY&`1Fn%M9OhVgieS_y-r*V7k?1U0@
za~H5sL3l_qL~4#}Tf@Lyv4ylsHe38^g*UYqH+B5&Sn&foVkc-V4SDELi2b72K{muc
ztPY8NG040;4TO^&msoGC_K;*Zq_iSFQTO#T4MPTqZIE!;X|EdYFP96m!w9uCD{G?{
zIhX>^@&Uq=(NH>vSq~ADD@AFLm>HXE?ib8Hvw-pE1>5*LC7;ak;?wS_KhQ);!onu<
zJk7+kruB3|QWnaxSXX?nQh3?|CBAeFfOOyNW{BJ&Z6FHA2)3gYHehck9R*{q>3of4
z3zd3(E}F#L{G$(!Oa)!ab`_-SUGD!3s(cybuw@gUtTOM;fy8-t$cGn9tHAQ@l3DX*
zX#d}KHIIV?iaT!;BA}vHi6oCfJZ)5N$ZbgcfB{4(L8(*U-8wyQXQ!G7e-@#%3VLIw
z*!QMT(Ik}2(V8l^k}Ht0%{x8dm(Cd9=jpsr;R(<6K!|RAKD%f|!4-<Muoj@161&y3
zRg{d8Czcq})`W*SYy*({TbN9mwj3(}%3%@Mf-1FyCuDcTzSD~pcuvM@hcN!vBf%Ut
zRggb%(RC6?qVH{8!C7kH%rtjXTOrA~*Al4nhmA7My<8lHdmiKuT+l_UVBPO%c~HA2
z^VGsn)fiME-m;MHrHVaP+@GK62gp$3MCez)MD{@942Ah&>d;n#`|FMtyZ_1dI};=5
zT8olHZ0>qtg|8(?56o2x!oe*m%c>%W&ob`pho&#+5;~Z^4?X#2%2nNJwM0*<`a<tS
zl}w^YmCjh4A*NMCaLUtSw7l*T{ri{q3D)eJ8o%hm;F_uM!(`Nmj6u9m^KBU0*kJ{i
z-1<o`5+CE#%K<ftzqL1Ds{<R4au13@hUzb&0_YbN5(Kh$qK_^!hs4szi&kOWnIbP<
zZ6W!@M#r(qXslg$=no}|_Q}7?*bZWC;<S0}I;tGv*X4q760_@aFa|<dz2c#BtCxui
ztdQXd07<Kij=8FeJ?i@ycehyCQdl2<!RhR4(CMB>+P1V<YUsIfZ}g=S{L`S#$KR@3
zfflO@iIpU4Hu({mzufS8wE(MIX-S(DvYcamf!pBNZGAR1DyW`S(tG({CtmfoAX-na
z?Cb@4{0b!xeWO#INz0k~70InOT+IYkElIdEx93=Iir^F81!J?izntCYBXUuMlxIL~
zB9{KP>??vLOxn*j-8KsGZV_E(fPi+=F~NP*-9ZYE(54+QRuW)%Ghr_46}yK@z!ws{
zi<pa9Nbd1Eqft{5X2IH{g7`;)uS)cDftN^+*DyiHsfKi=F4fYgm8m0dK%5!t#zt79
zwS5g5{VoqnPhb&rh1`Ea6b;f%m<XN<sCk8e-Gxt$EePGqD!JJlYcL~EBA$I)ubaq{
z2prv^tKk%eMI^uD6&eGqO1|$#Xlub%<m0i-+$%Qyby8(ezAx;e*ihyDHZdWQ^K1nL
zo+swqhA}QV1v~^Kuq&9b5h!(LRW8U+g5|ELf&*$wq8`_xaIq8n(!+6Hu`{d<o!EJ_
zNtqg<KgFJJdJE+%Z+6~JFpO^c*irPvMoxg>=Jv0Mj}hy|5-ML^;$l@cs1^RP?S8i+
z<WI^07aDnBeIqWuV0v%=KJT9J3{+%=@yTR!jiw9XdSS2C;}RA`q`Az8VI6LK8Hzw)
zu2_gi@3+cd2)cJf#S9Ixsc(~);+dmJjuiMOJj0l4+0ko@F}q@9gJ$3tB9hjus0!_B
zm9K>KE#z^EOT}$*a;I>>wHzZ!H=A^R3MhGlbXiZt0)C1u>U`->NDX5ck;%I2qmiUi
zRlxLwCULyUP9jBT+ao@<B}C@MV);qj<sV$(@+*n86WTL2cKsnG+}YX{kIV+(bMH<&
zl9p9vl;{vvLH9JJYF|R>=WN(Q-Y8_}oATD>7+B>lA-T1-e-QX7vGb|B6mwqy#~REO
zhiJp&Leicjc9i^)OUZz28P61k!`;gPplJc=a3euRVr|zmi?D6F;?naLi#>y9#Rqo4
zBi7>vZ!{G&M-2;fC06ICacnIH%L<~bZA8+Qc;YAX$h@Nev0ZehX$Q!f19C?&UUE3Y
z-9&axPR9aF^7Bm$59X}?SE<m3rhqf5A<i^`5}UerhW^YY);Hl^BuCjub@hr@lTZ(w
zjHunYrAMo5qChipI+a0vi=?p)K=`8)RwYxT=vUZw;{*?J^}0k+wWGtRf=_|veUpms
z6{YV8s?+!#YT?=u6PSR%6ja%TOp%_w2j!wEKVQ@m4ApU>y~#@I9gHI^Ot^U&U-)QJ
zh_5dxcu{A{xi1xz>>lXzj2gSx4QP0XhXAFoDoWaF0cG+eIH{3MtSsw^69X<4^b$KS
z+6yC6sP!UYi1d*PWp&saUHDZUN1smPZfDGJs>%7?`Dl$5``g+L-T=WX$p&O!0{mv9
zNJAMd^~?~1Zigd_(Y6vC45WyC(FN+cB%n=+@`!r_@~wB^k6Hs<udfmQI(X@tO|$0d
z(8%F4qvY<K5Kk)9$nncOZyJfRSyKAGaG0(Aqdn>)n<ryyS%7U)fIlbLf)P=5Z_TB3
zSR&IqOEQG2QMfjUJXw`JN_e)91rvB6cW>BlUS4jR59%C6VDNY2933JFB2i@0%?PN!
z4*+anOu4be)bAtmq<j<<X<f{4ov4_nhh;lT&5R=CSgIbV*LNA;uBtGo=PGk^Vs3e7
zDaEsDc~F6i9mRouD$Xn>$}BPP?=56vevCFnI&C@)_MD6Iy|Fo_3(m5uL<^fFV1M`e
zmK!<X6~a_)X7hvH@LQawSTAV>=u9P_`O#!!yYJz(%M_Uh8-*jTJiupkM{@h4(5;MZ
zhB=Qv#%q_PAyNvSG=u52dY7migo@`Z_XT+qdyCMd&*8xuY9tSkVLmT1v7N_G(wifI
zu#5Ga*$3n)^f<z3S-hv@jHsJ)#Zfa!8#Vj6oON1e!Z%S13Ir)J7$NpXSZjB(=g`c>
za)&;$5|1nCHujWGPO!ot+r_Dgd*&MzA=GZ~J0Q4hfMt-YZM_2!BFliC6g?!QKweK6
zib3eDB$TBR$92-g&95JUX4aMrE=<-!P=KllO{6Mo$aHa~BayA-{*9~&Q8kyGF7j*H
z9^`L@MWx|ocz~xk%k2CJ{|3jHPug}*vkc#|1I=G37^wGrU0^bVx9pO01hIUZB$>BC
zRnm$!Q8Sa_0@o~H34@mID$i;uaVU2bsp0r0Mro7xT$>ON;)z(%D@w_8zLtVM_R$oE
zB3(@fr*ua`#Ga$Jsz)Xp@kCZ4z}*1x(vG%M6qdODaR_^bZWRN0;Zx2+CrZDU1yIQp
zym{>boV^>c8!@Ag_ZzOEp`XbFIpAk%kCydTIK#}SLN4I**bWf3i%NAtDgpybhzDN@
z1)2Aw)*d;N)yK5FB0oBi<&AIndmUaN?ZUjqLwU!fgqWw%tBbXUshXL*S-~R%-UlLt
z8UJ-#ho*qXD5TmQg;dCVRy%ZxG|Sw`t$v~Su(J56`v6L4S|fXy$|8m(RjEtTNmI)0
z#1@gDBHx4g`f?OC%V0}y_Y>dAyJ1F6C^`;oHhmPz(zEq^plXmr?^sr@za{V)w7Bw_
zp)U8}p`#cEkz$7Y>E}(@1%Tv=d5%HSt-9QIRBqzNOr+-f88L0X%ej&ll9a3H{ZDuV
zf1J%uta!OImRjG4#bYg5V>f>62s+!}vbWa1d8;j*qV`s)q`sn~7cxmF9F9;`0krt~
z>Num=K_C$t`F70+kV8*40Eg+qcbb!#za4rI>VWb01z$Y{wj$4IBF!cF<nbX#odVfq
zO(tr72FB61Cl5Qd1mrg2$5gnv_^Kn-=f-|m(o?r_FdbgP+XS=y9NJ)50AXM~eBVGJ
z0HOsFN&CEHS||YX70587N<O<I=rv+$@HZ}`w8r9sJ?MR`q;!=Rvm!t@m<URXf(G+b
z=k?tEiZL~D5$xKAYBTjki=vp8RA3=yW#zt-eQLhZv0jre`VmQ3qZa~$?*KkR{Xyfw
zP@7#`Z_S!NLS}y2k4mn#JmgeNbm;WW744Ri=TbdtQX1HyKm=AteeXN%SOLZ}_MjpH
zlz9#6OR_33Z<T<_sKWW)yM3ZzBZ=n{EbWYEPMm0ali8WVxT7!>Q4z{>S;cPowm}kS
zrv@m9P@m3T6}wcRw(Ott#`n&Gja@EA7QcoR`kQcYmzEza(Z{5}@>h!_;UCSuk@t=0
z?_b^dukQ0*&UW{-0OfL`o3oG@+mot+vTJ+4Qu0|=cb2Z*3edvO(4r51PHW{0oj{)P
zrl**K{}B@xAZj?Jn^E4oUH89KC!xIs{T{Oy>2u2A1_2jYmK$mN>^<@;VV;^TI5<*f
zR?+Q84*Jmi2~66>@wM7B4CyR6W076r5C#R=Yaxn-^ndp&Gg_Kr+WZFj?gFI}r+U&&
z+>Tj1m}v=UuQsEJDXhNw?KUbUA?EFq_h@us1~1-deIyGS{G|v#HfAY+FXD5oU%?Mp
z;~mLiv5By`H;KlIa3whm*C`d?h?pZIW5A<<oGu4Q1bPhmc#ZtM^I)a@NP5L;aWrr;
zI_-i^Erfv&UPOG^#u-h_URQ`}h9|AT;9nJXLtJRV<hnz$YD*{zVfQ`Fv`OE#^fY8^
z@%-AceoZvzo8upcojuF^vN3q_e|#{<L@4yUTrBVOY!LwG7qXYTAJHBS)ZIJgYIePM
zaA%d>MMgSi!5Z(xU?q@(#$frg>75uAI+pI-P48m~FsC$&weX$uM6z+6W$NesHJF~4
zmhw1B0q_+S4E_Vxka!)OzP(TiEc~-W>T`UH0|UPTk%;ZiNuxPiXX_M)FAlb_Doy>*
zsi=h@KuLcD)Rc$w?<59@mMhg@*QUF*fv4jy$0nodk!ZbSUTE(_WhvePv)paG#+s}N
z(&NHupUW}2k?Np{JH-Lh8^B}(bO1|5uhScSxB`Q<$G03f2f@HK_f!f^oCilN!vIby
zkytkAEt}J&%w#=)788SCLFDaHeY-Du`Krc@b9-dzPYF6oL90!6_jj_kU770bGrIgV
zr_<(X8Uaorb*q|tEs|f2S(tdHd0p^0mf0JGA}USg9hF5wysY1QQLyI#X=mP5%+&|g
zYwS}PDGH+!6Esp50^hcT+k5arOuHM6a_&p?-%ar0#EYD=IJlD^GM#t1IV&}4)dk(;
zB?W42(1~!22tfl;=VDM<A@+s7HoFGw7)S8RQsU&?DPTvY-7g=GH&IN^ufmAoi1vXT
z_<8hu;W)>4PaJo4ApDFwIjDy#U5VYp7C$YxhSvRECx|IfE*>c8snEKhz0&6K-Uw)O
z=zyv_s{NHd9bQ5LA@ArOQNqgQB^=M@DX350f;-{?%oSTd)0w~;?65Or0yp&NggPnh
zj7KVqGRPQR7jme_Z4Wf5qUjl|8(wnUsrN(!f!1tdOhk5sH#kK0WFtTuhX=3;l3hoa
zwcCzA=q>7w-~eRJNqxXG-jVy9E=;|}O~3GWCT(s7k`n4)#xK(FCaB~a`f>>mV}>#o
zNj(80T+jn!77IQCj@XmBsi9v*nIbAoZF#}KpeTrSTF0&hi%v@cC&9q3EAzV67ka3j
zFzJB_W$tda;A-?;>cD;t`4hQv_DwB00AEk?_2~4~Pk7zsn$k5`IPE10s4!xqECtrO
zn_b`vF1cYZy@ck4aNa5#Jy_N}Tq#dx%i=bH`}av(Y&-L|<D2knD}}0&$Zq+sFO7<(
zXcpG6H~>YZn9)8vkctBv|HASoQmp<M|4W4!Q@`m^w;S1_=CNq$9bB_k+4k>UK5kba
ziiUdBTWp?*sK6@J{*Oic^K>t3tn{7ejhD9Ccw@T&fKfj()QPu=oFYsCTwnjK6%Y<;
z0lP*w<RV*q*8kF&UxCp|W9Nlxw@z?n3N3zB-*_nMWNoFE#X*$e_{Q3(4DfECMP265
znDVw+#$<_2%vM};kX-UiJ2HkNSCXl@0G#8P0y%M312??8fY@C}?ucx>ZmA$pVTL%o
zB%aX!7#w<B|J@fB*SXCxHZk9Z0@-*0MMEyoFrxn7TGx*<&KVAc7SM=ry^seKp?bJG
z51~xczKl^Z$RkO#_<~;WKgdc)F~4|;e33<s2ZMLOXZqjZ_QnlWkXJlbX6MeCoiWPV
z^0(K@$T7*MH+M<kKX4iJbzoUZl&yh)I+rhTgg)oo`^htJ)hBrR%#n!jg^gat&{xs=
z9?OmDnRx=3!TgUs;T<PrYvPfxi5swz-Xqtok95J_`r6=W5Rp+23vds714`ry*~*+7
z5D4x;acp4&xr&dxI0$P{iOa_&<e{LlL=JUA(8WrP2}KdUD~WugT(BdB^PH-HQIas?
zfRpwy(aI+)6Y-ADNgr=3UUOvI{B~Lw23q;;*D-fia(hwT0*M9_Z)P>Lo9<jup17RD
zg7e3zi)7s0mq1K1g4G5#0V1yZ8S36v+0+H9hK9jPsgh1(MLqLOB6x_9x!$6HqOKC%
z4t&z&E8l4Sx3v~&va5zr7nMXQ<pZc@S^Ils3OFpNvj74oxPm3YUyMWD6udbhs3k4(
zI)m4zo}OiZgMb)goTT>pt2zDUL5J;r3>OHU2wYN9ylUIa#tX*M(N1e#3h%wKqgA9C
zFK}WHUYOt_5BLhN1_(G1a<{l2iJvxMA4FqZM;_}<+SiBCR__+L2-;gIwpn@0W<A2<
z`OxJq<3eY5-50{6D(wBHd28tc{_C*76k!-mL=weGsGyf&eQU~^%=-Viw~4+0Q@Eqw
zw2$|JKnhfN@7D{U2!*CC-Nzopr9M}BIynfXb=E~YRd9FFpF4}gdk!a=Otr{{bQ%j)
zV-LwrRUyWYd=lg7lZg>r_d-O{c$5i>_O=^=j5&g-meB92d60)0UiHBmS$4)#nfV8L
zdh5AcD&$K|{7x*Cay$p?m2m@V`HuQcv!gH1hqm9?fFRG$NG~5#pO`Y{R%BTr-E!AO
zoXw{q_}Bl5(o`pOtlVMjy@#!1E!ASmgVj2c5-A52w-M$+IM_BjNyB8!BlOl?p=^5$
zth)E!f(JJDh;LC*6LAMoJbRT8GHrHK<PWl*VVEzQn&d=+^FgIdeH%ie@w(!^0})3S
z1I*DVg43iw2#i2tWbY93Rl6@1XSo;l64k4jl6h_D79DKEC*k~8m)&+M#C?1um_Gt^
zem4JQtN*)L^hsYMt1Q*a#dh{PU9Sk60RE88CClCR!u`O?pLiT-$EXFULo$z1W7O3%
zA0p+j<1l1aCG(n>Xp}z+F#ngsI^>3y!+N6D(UJUWy@0GJ=!yPuwGKY%0y2(EH0aro
zUdE9HD5OuVppqeNW(gc^!a-NceF|${t-ioS4ehjqHQoY6$fbgzNEHyFvM@6T--ENo
z2ir3m3#3LQGNJ#KyRvZ7ehpdIB1-?x<PlKBF5W#mnuTFb$%qeWEJls4HOKcIc)O-o
zHHE(c0+9|BM1+Z@5QlJD*iW`Kh-pT@>2aV%!%n#Sv~SztbcHO+mQQ@a72kdz%i>Jb
zocNb6=Exj)?LO$!Oq5}7TOS7S5M#YMj^&iM3B@66ZmkwuFEo?px<*XSUVrDZMaS8C
z=hi)PG^@&F#xM&)KFa3=E(9eZ-bt0BLD|A+!zR8C8GlFXKVFnB0-<mTf7jylH$LN`
z##14lyQbEhbd6IhRjCRbwZo=9-&DBz_-gNIU)L<8&e6*diz`lVKi(wad$+0z&4fv+
zp}CqJ3$F$Kz?$i8Nj|4`AIRAN=HZlvsLDmJ_ysRGZHOlizM~)CH<}NC*M%@pm(TYo
z!<*vG&N}Mk8u3fpVEwN$Woa3|!Iw~?WcwEUS*{iBFrTo%h)q4s2fz<tW=GY^xuiNM
zyjp+R*pM4;!KU4X9pbRGcQ^n=)*qGz5-95+wi!(0HGRUL_0QBh)6^vY1_s!zQ8NoK
zc;%7c7oOP=6NT)iO7{2Rmatvg7^4*aty_DURXp8PqFlA+2S_LZ>lyb<`c9pAa>uGb
z1gSKkE>>EQWt4I+SYVP=m<q$CU&Lw#`OnJ-ag~t)ya2K&VQne&pa!umC<Y0ZK(mfI
zCRMT_6|znrs7F3E2I!3!e9L`zyfm$Em0Euy9BcWHb?qy{%{`5@2i-5sJWT-xwCFD@
zzC=oqhLaQdT#>o<L_09Ij32&yXpq;=D(5dPRxtfifVP@IWk986@<1wPZYeso$c70=
z4TotN6ll2>i(cns)!09lBJ#|`ahp#9p%%MdOrSaW=Nn!5O&4p`N=JkeOaW)WqC-gH
zNUNo}<9x9%fe{o3_<rD&;j!_ZWKz1L)E7}-#IS=S+^Qjx2IAzF)BXqlJjoP8F}zdk
z*$~c*HGgd>caf&?(?aJQY1lc{q@g(ZxEd7WwyNMQpH-?GY1?N6ZbvOCPgio1?rVpi
zynk&@1Abtk`IdOM7lJ!W{(FJ8VJg6vBW73|dJR#CdYcM$D}|}S7e-lY!7@xyNX@B#
z);~!t>Pup5v@F_z@rHx&LvZTl&ofea5Y-G54l?|rg=lRJlCXie5@UUg_>!Rj50NZq
zbKQcPryLDP7G2!Rv*#>Ct)Dp?$}BYY;Ijc~i{HaaU5E=T^r6@OZ&MuL2VI?61x(*7
zD*U~FH&61U2WxWci-Zr9&?9jCi?DX~x?6>SLgc}Lz2r=yh71)S)v$Y80cl&k=D+6I
z&(~GycrAqs8QGmJ>ki}ec)ak=i0SUR-bNn|8VFMuhrHB5!ms9wKlJU7Y9=Hg7%}Rj
z@0kmn&|A8rLiMKg6^LQf&1^4>{LRA>w7~)w5-_9@Mg9T0s(9I<L@%w_UE(dJ<nS3a
z#$2~XaH7k}$H*VMD#KFEZLYU(7b_DQ#vrG5&Wcr$mQEJc8U-}n&j%OJ{8E7nuS`nw
zO7z%naaIjBI&2_6b(?VhR6aL-8VWM8ZZ^OK|3;vVPiR!N^1Zy&neeJrxoGX7*y`$}
zh4PvV>q#J0A$O{Y)<F}mNaVC#OWzvsXp7!iHvrlT@~nrpdRn<TuT~8|m#bPlq1;54
z`DGVxZL{Mcy1Vw|@eEhZS9E4d=#`td1U_HImvSrgDsWfRPA}1gz@g^2*e3KCFDTY<
zjXyIHjXAyA{`m$d#`z7F`juhV{VT^hwR+lcKE5lw7HJF*;rhiidS;q@Rv7~j667Gw
zY##!j?JTJw;4OkN=KmymDZS^qa&Ch%MST<?ek{1CY6g5=88-US-AHe0GFTLJKAsxB
zFg;%qxVqGcPe!Xe50vRBmz&GoNWT%jZaQ3}apUxZlu|yHz2Pik#3>N@VgVD24nMMx
z`GuP1gIWoS;CWo&_vnQ+@vm*?U90ivZ#0G)J6|K8%2P(aK?Ap@IVU%$$Ok*&ieo{a
z*q6LG%eCvml(TInZq=k>S3+ltzjA~+S2E9%%j2~|4rwPwAXBYQksiq)vDFt=`u5d;
zzvji!`;JIvuES#+pW?!cDFJv2=eamUDP(~F&}}nyDV*~%2txm>x{9<8oJQ)o$l&WC
z%rPDU!n;D~KN$#WA)-2k;vW2+TSm;Y75~U?%V6!fN4|tMc~Q!=!fRK__3XQbT&$##
zPMgz31>f;pxnxw|;)@v~`d}8XL}2uvO2L^(>&U?E5SYX>{!>M!(1&fMA94*~R}IYU
zO<me?%=%L3L8nl<90g7T1lB$QVL1L-LXOSt1oledFg<Ws*-<dx&SwKT7v}e9%>Pbm
zyX0aGf4}XZC~lX=EV$LzXa<bR>__UA^7p|2GeFG0R~zC>fR6JLPKcrsZlBbyp~i0x
zf!>6@EEnTysf*dVSc^Bv&Ejn{@~l~&Ru1pU`gJ`W0?}$v4)Wcr*s8~Emr+ChM_-zH
zyun~HVrjY?Q0yPjOzURDK5K{OjzG;iYkwnpobbqll^pQMe~9I|U~K2;<#hKlV9#(A
zj0J!x%!bZ&-iWSqq-6vZe!Nj?Y52ZH96gRG(bvd8BvWT8O6+rX+#BdrdS5V?)rEx-
z`=(0Y8kaB_p!{lL0Jk<P5tQ<4d?-^I7(C!hxr9){>ytbn;rFfgak7<RVt0HHF~2i5
z-pN$v8LJ#vZ`^sAP|Cx;NN@O-dM&YPSbP-7#S6^q$=}2gR45=Ooa!mu?gdrPpcR@%
zC=T_+xA^*)<jbCBcp=mDeqix5u%_s-k9WGP2DX){R7@Qd<8m1t^?T0HoCR?mY*DU3
zvmZ|MOdeSt@bLoINNtjVQXe+Ap9R0qcIT8*Dm(x6aRM^TCpPV(qa0#(rdrnl?++*9
zUc3Ra*_tlG<j?Rzan^mEP%CMO9LJuNtIZ<!t*^|czU{Urrk~Z66YUm!T3K5XB=F66
z<plpwDoSGT{U9W}q8TOXT4=~DdWD;<+xHvekwvG(6#9;p2+M_YB9i%)20B-;vX?+4
zSpVOpPHfK~iSU7#RPQ%sHAI{9r}u{S0sF?5m1G)MW-ffcO$CCkPigmu-jfXwIC=`3
zBDbb=>$kuo<q|MQo65`1uKL4md?B9nHKK(rx#o?h=36!o4cAeDSx(B+{v&&T=}a-9
zrp^)YvPFGWRL8wpt_H>r8LHHMxRF=V$>n^8UdWhkBp=#)YmLoJ3uZ3D?J{4I!+N`H
zKw}&@Ll3f@B5%H|gUH;&qDG(*SxP5q+P*Db4UjKZ^16e3Ya^qPa5`MPW1w(<dvx-M
zvb9p1U@<_<)mnfe46=ASJQ^%oINJ`=Ts>py+2>8oRh4gT>`BMkU3ttx&+MJ3&7+D&
zK^)8x`M>D0)koqa&CxS{e9R!O7QpmS3LyI7$?eHemt6`wH9wggwoS@H<PEy-2n961
zb0XLYZ$g2Qa7<L|2G8`6M2ICvh3Y7j;+m}Y?4m}SgtxXzyC*Oo2^&M)14vzrx4#i6
ze_3VKSgt5-4jkMS`htn9a9v7zO7`F3^xiNj4B}M{@G>ZWOD#T;JM`mMbH8iA#|_+l
z<!sv4C;G*HZw(s7s7x+M`or_Q1;#jd616l20o-r2;Sp(cv6Axocu~Ei19YqOHZYXI
zNr->om##3aloKi(hD-!Mpvo*oexv?=y{p6U`KHuq=Yb}xV@k}>MbrpxVQ=W;PrLtz
ztH{;6(Qcos6hX2L<OAUNzuo$QZPtur8FC;FKa%#mNnIuRH6t{Iz30X1k_9Hmpr{C%
z&kB01{7@zki2jn=cW?mk$FbJ1u%vLU*vynfHT3*k>x;cTg93qj33m@4)R+jZk0BlV
zN@PML>=NS)e%GueDC>uh;EbT!tgpJJRxFxOsnf6$=wtp`+CPl%is{S{1Lom${8C#-
z!Y{TE%L$M_Ff+c7yX^hf=N<}S<*1SRg<Ngy;0A@mA{sO&y&CkFbDvJX8Ksu0_`il!
za4Qir@Ug3kN>-HhVH^=L#ut-hGJ^}(B?KDW$$_?vObBr178#1UT|b8pq|oDr9j=3J
zX-r&*II>k8cdAn3QD<Hfj9=G-rKwuVjSOjy#19gAo|#nvNsG~XRgUqZwv8sAh)e>B
zVZC!X+zjZb{akGfzs;~tzp=O?hG)7`3Q%UJf<LA{4B-=jhY7NC8bM!TUQ$ZBfb^y9
zV*b(@o+gIvu08?-1_<Vot44eZUner10?_ylgno4+qq(q&`*Mfg*Xq%VH4`Ae@A!a{
zSXzqx&Xd&r5B~fr1W7p;3p4!qDG*9{f6Ay4WmWPU6PK3aPi_=xn_UoRuowb}krw&{
z@JYKrZ*!<8x!B`G{UoY8LayA_z@hTCn0oYjqr>3n;w!vOL@i+;#4J2Vz9~M(H2t)J
z_cNgvJv6Mq@gm%O08t3v6Cuac+oM+MZlK<srZ!b&+rw1EwBbCSo9v+4A7&fCRLWYq
z{Kdmi7iba>zMg9>C8zDuf9S9%_zw(x0EsCxA5O%vN~XQ9a4J$2ojm~(KxAW+^r?Xd
z#1GGz`VgMyZ+AiBYGX=b2z`s@g)>#-I^RFmVvNu%e=n=LKQ?w`A{PS!V4~aD@ynZV
zEJS%%)!{^nH;4^4aT&M$Ir(g@o`-Q$t&ElVvWt^Fr_PsGIyB92G^F8<Q`JXGXH7(O
zrh$}8Ol+C0SRS0pb&iPCl5Qv%{DL;y>#Jg`JY90D?;!1zGOe``U|yD}>>6^rcaaxP
zB3m6K=z<GGX<m1tz9Nv1&M8z%21NZd8mR`n8t%#8<q_sN_1jI0NG4|q;%021v<A_x
z^$5}(Zzo%jqg<0&5mxasXL*&g*RSA5xp={)@>N3YPtc@tjCEj^gR2!DxL_SpBxMLd
zd5Ct%HbJekz$7OSd&le*rA0!?<4;nytj>|<wCREE!%In)yVVYviDs_sQS!gh{a5-F
zZPt+Fq9Xk66roEj0|M1S^x0yfOYYicjL>Hx65AW2$LKtj>Nt(uUb}6&=e^83;S73<
z;k^2vX*T$Dhgefh{I(Nvi2ZeayygF=nr=d3(y*cF|DUC}m!ckYzF&tUta*?p(qCRP
zf;<{EFbSepNb1bpqb#1ZBt-#S;}j=xCu|y?f@SMw(X3}Ihie9i&GhEG8TQhM4c-1U
zbREWk4lNvY_xuTBrB0xKsX!^Q?scSo*TPmVll-28;!DhL7jMJ{TfSwQG;j7$od?SG
z-LV)kZX;B7;qTbXbc9nMYC$;@NpEJ(CPuFn1E3JF@^uAACu8cP$#iGjpK!~NNMD7t
z5NZe6MybP@q3EYH*6t+f$(+nYh3luoTAqEDib{U6b7(cuv6N}RI--TG$sBgh%IF{<
z6~JoYD%i8Yl=*)@N6y<9`M1GX@;!iC&o)KhFO*ZFtM6;{q9)W2KpmFt9#GGxWIOd8
zyl=%6>*X|-%R%Lr$X4TXOf&QvtKGN77$^icF$QMlXiLHou$Ugc?{FGXAGR=EvOKA-
zzBXf~Aj;)Zfo(iVN(L#7J$`wIA9{e{x+y&eOhZ5GDqLH}$0WJGgx6?kp`6CzYAy@O
zDk0(eeYbfvE%_SK_-$=}Iu#mDJ}sw9=Wt{)7i8zdGhDZwXeok@Dc-!a++~pm^bE<C
z{r|DwP_t4peCbRjB66GNf7iOMzT`)r2XUAVh`%>fr)#YInPb9)Hqet5&GOI&LPIAv
zHg}&5f=<r}0dA{6G0`R_^wo6`KpJCCGkMF&K;fU#$mOQnqIW*~JNhsDKK<l*u;XkE
z?n#)b4xe1EsyWOSyHbvS#kBT+2M?gK%#ZdpFisTQ$8Ce0pCdS(y%u<n3H}k}IB5U#
z1`_TAGg!rfFH0_}7OPmTP9br!`q&I%^do*9{sQ@{BYER*_W%5kW%1&~rrGC$@=QO3
zkq8M_c7yrkV$UY1EBo$eK&D)w=?v=u6Y%}F)QE}#K6Hhd4wAX~_cS4(n$Ij8IT^!r
zR4%>F*j;<&p|+JuF7;B2yUPnztRaz!^pT&qZa@Dmnot;5R0y(SH<+}xm##LCdly*p
z2#t7PT?U-nI{UB&1KRy+cixjzSR;jJq+)o>cUhwA2BWpMWiribSU_mXu};?cxR0jg
zpDU7K{<?#~1V5%dBo-r*+sGAk02eQIp})j5SK`=Z7mwR8k&6$=Eom(<h+<|AkiiQ?
z%08-H8=LmUvA&bKLhzXhaY(p{%QuUVQ<<F=M=UHsUS`Fl)C+*wefpp@;J$3YedlwJ
zsnRWz;pR+ytuQY<!K>sxLzhu36zU3Fl*-2G_I#lFYM9AtiH=6pEq40Y|F2}}l?Euz
ze#)@8b139AG)ey|-lm?bp0t4FM&X`ZL*&xNo6!<n+U`Lh5T&zf@&AAVPj%9#<LDH%
z)q7*7*s@;uo*$4}CbMus`ki~V_9A8`3(?wPu3TOl%;Af@P8XIDx5Kfd4CJ<QCJv`c
zs5VR(^tl)xm;(axnG4CV*II{txs|*@w>}6XHwi&4H73U0(o-Gm5yX8U*ELGz2;(A*
zF>u`&hjb#*4PnArss2@9QfhLg&d;yu%gAy6SqU@e%pGOxxYYEHx7-!6>c{M-c;?7o
zF6fGH<JEH$0$gIU!5~#bfQADDLV8%5#gh3_aWA3xMxw<Z6I7&$>aL^!O5ikcw?1?2
zX;G=_lB>p8mk;o>!_xv#N%!1CW|MsZ5!g#|04AwC(c5kkFbZa_I)F^Mz~@|c3m*gF
z<By_&Mp@bL+ebl&%$9wIcjn;L0W~Bsg4WXsr)z_G{1h0NL03z8RRB=_L2Sl;ID>@-
zagha7mWmYM8eb6vw&g|m1~%b9z&wxyUev)+NbvX>Cvf(|EM&jEZ7<$UlnuVjw%O_#
zyh+ez;tehS51%on8fz{TwhA0If<lz*;BccIYQYLZ>=i#mzEs2wS*X2*?bx3HL07o4
zDZFy*mn#8eQ@J8wf3%#zhC4TZFqWxU_bA#-N!ZeH;wz^3n;X;3tx@>lPu&(5$In<?
z6JBAHklkq~KP%$@Pq`gYAwlf|2IUd7iAgZ1uP2<`mLzCdbT4a&z9at@9avUY-Z&Cb
z*>{7@gp#xVE%DP@(#%9)?`Vxxi-vTd`>G~^;X|#V8wVn4R=8LP)RS4zi0fZ**5}(%
zn95MaNK&dQ6(I-=RY>Gq8cpbVL>cZfUJmsH@o|2MZg0Ps6TwxL0|xNFtL31s%H51^
zzXG74{q~hJIqyQY?H8)bHO>`W<qH^5t{$lPKfYX7$bG+%2+vII?Xto-m1TN$zkg2v
zFbgP#MnGO5p4SNgDd8awP~EW!o$(Idw1dK(%U|2f%_*#}&chI^fOaUHFcoVHWA|?k
zRPnaO|7DQ5ZswN?Ww!L3jz3ax&|`4B$hbe<pVGDl7&PH)0`I@dN4F#UmKvD#Pmk}R
z`mw`!SFF6-`((y@Gxz<rHO$!!L=HifwBVCNVH?|lvV{EfvsYbb(_4QdqS-njR)1+p
zN8$<$y-LL1CJOZb!Hg0~w{pc?$p(qCSDJ3HgtGl4afjoN?+x`rofwxHp%Y2CBJ<Xi
zG<_CKkf41+FfGG88gMQmu8XL+8!c+Sakc%S-#x_eQt)S(5yz22vR88f5snE?RXgDC
zMspwst9sh)80TEVs6sCass7JJyNZ+F$y!0afB@8aL5P$0_b-f*@ya>FExi!6Pk*fq
z>q&QhY%15s=MH2`L*5)Du)BgtnV`L<LGmFcebsWXG~M&ksvD^WruE1CVYw*uiqXCH
z@wAGoEtuChUxXn{9POS)o`Pq-Kc>wT%p~XzEQAO6_ZGaE`m4Eqn=9#M@z}>5A8SU4
zJ1Py5Sdp)R-@=>WOO=xwete@DF9&gGGP5^=kMq%2C<cfW=CaR5Mx8vY(5~Fx@3S<a
z|5^71+s!njD`M|&Zypd8@-yJ1MsboId^FS|uTyySyy1Dm9LR63XAd#xfYX^NsZq_v
zF_eC6b}UEb&YwJy+{8m3?r7F#%KGRnAL3Uospx-8T5Z2er!Ev@t3qu>=NAjOjM!|)
z&r&j}up_MRaJRXoe1s$tA{A*Bn}h~k?VpVY-Yco~Dt?9Kmj=X=pY*jVr0851cfBt?
zECP(l63pG19O66a-J}n(^7{1tWoIfk{AjPeJCHJgYZ^Gp)`DXg+|<M;LuhKwDpm3J
z#&M1PNO^E*H~EVisA1$l(BG{VW`1R)eXJk#*R^`Mkv>rIQHN)I2bKyVPD5Az<Sw)7
zQcE{nAuVL`OTl#^X<~;K+Fy$pm<7fs!V=9fwQe^bYUKN$gPZw}ozPyw94KrCj(Db3
zIOOEe|NrxF*`6L9hgFI;`#w%5UqPCZTI!W9yzCw%5m8|Ben&>hggQm{II;3_$qt-l
zfz-5j*dFb9A%u(a|5Ei(`_7P%F`U%XcoTFk&rT3JLf*+<7o{&-cXdyW9<H92SNIuO
zvcFQmu-Ld)k-am9M@w(%oNUM{Kh{hbf)CifRSbmbRh(*XY@sZ|x7W$J5vX4>)diwi
z*Xn;v7QcE)>?}Y&v*<ycC0PwZ<1^?*EMw?Qc9~TgetK9QiX2dK>6kO96!OhNp*mxR
zJe`_1{MiR9y6Jo$Or{5Tg=AAg!XO-^%W!@-r_P`^VHEzm?x&zfi8B}amx%-&6%2s%
z%lQr&RF5*RjC}u<Dpomcg!ggdme8C*d8tSVcJFIX&^XDZ_Lo()b5Z%+3mg7IW2zl9
z&NE~v(IDi*4XnsBwJM8Vo?-8U6gevovSgqD0WLA*RM#ARE0z#$Z1BBoq2(^{CovTY
z!C4F>P-|sYZB`-4U#s#>9N2h_pqxc)CW3(yV>j!V-n*Pp0?E6a`TuESL4q90T_B^S
z-4R^^^Au)P!v-p{%>#y<&t8N)vWTh;V{|n{-r=gS53M4{Z+;y^QjiuFuUYojU7O}4
zjUgn(<YAD9G_bET*Z2bpTIPEDl^EA=&wM)3?@Ae#!E~dkxSETwdhx;hcx;PLRpyW3
zpXkg1P%=3A`Os@<{9ji+NJsK_Jnbk`?M1Q$Yl>}9dO7mcv*agw#ZdV>6O<2gm85bE
zQOhVz4R6zt=?Q=cz4^?!mr^sSvH!bD07Yy{CJKz?+RFX|vuJ0Cm+Qe*6O~lj`gNy#
z{O~O~AdOU39`jqCU&?(wkcMvns&HzFL?{P^mQBW9ffI1_V(+S1-ae=ZOf?5w+n29s
z842L%`*OD*kUQ`kdt)@B_EfBIm3@!~4FXFj6+|}s)r~j6rh-%h`IfSvmDb{D4{}Px
zZTWylA-$<o$NCcbwBJI}Dxt_h-8#KU6add=G<Z=%4^3K*n863lv<9mVAzgty*LLHK
z$QdVHS$eE-PH@-#M6M1M|5W`F(bmd^ET+mL<tm;6Wg7@7jysC4W}=VOjW@F?fWl7^
zu6fM=3Xc9saUA{|svz1zEz253(+q+~V()8{F%7YNqRyc9St3dgOjBmAOyEK%&8@c+
z1AJtjd(xSAL??Bxtcn7G#(FJ<+uPY~aYo?0`NE*%#l@}#8<^Gc9gFwjG{OxE722k8
zP7_LcnU7bB*!L?NLVDEk{^1twF8<y8%H?ls+^o9oCzx{Vby<vsiy)V;F*tUn&iS-5
z2KsDRBnJTU(5QN~*fn}W*||G5P&bj$Jc-tYzW@pKmv6`S${vd7G#i$8=Noakq$S_O
z4Leg-2l0(t1>x58iaScT|4)H5QMZ#H4h6-@?K4qcHzCXOQ_axqE_|kXZ_1&1xrHV5
zw}++G<U>sVchP0MI-1~D_tdStypKjzoDs&UnYDbY$kxE=Mh(Qmu;}Cf^V--SnI!Ac
zij`JL$=}WW8kxvZ)_*P7nvVf9a{p~n3YNW_QN>Qv<oI~A5fD$-g4H;wq2jSTQ_NSK
zw%xd25$xZb@6_v?FTLw`Cx>fCr}8jir`jB(mC}UvV9(rerP^SJklQ~d5{yoiovBi(
zqF%3|hWNO)M=(hM1vJwdMQ<ckIwMlP|0A~Iv-J;ms>}6&EY-wPY&auNuiiL<XlrAP
zS)KWQ>$747YTq~Hwwgf!>tMKHJXS8&tig%eS{qfV2Iq&(YUirm)i{rZTP7GP=%_yQ
zg+bi1u8bM$UB_c0)pg!!yPS8X<JH_2lB<PKA02aR)CNGX@}wuO{+tP`2U^D}ci^p`
z;VZ5TRDot$*Lashj2_KtvnFs2?EU-2pCWVsim;2LOy{~%Cs<hbw1)~&0+*%+P!EH|
z*ecA5D{y9JbV;HKQ#t4Ajr*MwQ|{U6c$*3MOP^?7`L7J${#q9HavdXbHK^=c|DUGe
zX3PNR;0*GqA$%2LmapW<B<|(wN6wo4#^tNT%MEPz;axO!miQkTV_0UGDs{*k<s8QD
zq}ns*>27<<PE|r~5*Ai0-JaFoTRVKk_*v=9>-fu_-+~b+wl#fly!n7QZL{x=*>$_(
zE$PLDUnXBfJkY-c8H$ea83v*3(aNI?cElSdg9C8P+qi^#*6A;$F=Qvnz`Dc8aoBJj
zhYN%Gf0zN?c)w5EVID+wGIjCI=O1s|9w|Io!ze^`0gj#>^=B#kP0eryTF6OB#w(l=
zHY(n_6@7dE*Ccx^+wJYNqQ_134kPWzVOR<JsZqQabwEiXT0MJso>ULY9;WM8QXGs)
zr5HZ2_FK>4TsK<tiY#LI-raICqXZpw;Ousw`qUVPfkF$f3BO{ph7pNVK4P$L&2w94
zcr*EZ5kI`>8QXpM&X@&^*Nv-a$+J}<7b+exMlF7emB$&HLZ0idPDByLU8(AP02d|L
zsbsIYcyf>0T7n;k7#RxkMJNJbR<%0lI0A#pyB|Uyk_4eBM2uAstVUM=W87^$=wt&i
z&m`2gHPAXUE>qK@yG~|Lb3Cs;O3iK;wHHwsDdAfY9XPSAX8AQ44^K%Mmyj-7M6{ei
z3>t%XGx?TsqEV*w|M|@_!ZJI{R7r%BhpF!o;$EcMleF$SPZN}Lq<N33P%g}fF$4=H
z8o@i`P9cVR@KLA(379yVXoNS)lj*i<HGvffo&aN;>}Vrh-#S<fqd#HGCx*r%u>85@
z$rIfPtd)~6w=mty*Y}!SWCLEU6#f4aTfIJHZIi0vo|~QOfc3KwS%MGh!ajRlTFBb=
zJC;YzDX3dzt|JFPnp#&a*8Ck_HW69S(Es^qj*!%lP>=Asg=&P@x5u5^;{!6X(^o%y
zKdB-+Xas*dp!CjCiwhQmNfK4#m3f<OVfVnN1V>=SYFcBryVD$)MZV!L(gh;-*P>IR
zR(Q8~!R#lbMV-sAn1J;AdBpN@tat~XZ-a(N;az<4W{jwx9zQxn3KN=G0PK$P6W9hm
zz@mteR$77%p^?Zi2$pWCPNyzW{rEHt-Gj1nq*k_C7=@wQ*<hlpjH>vWBqW9{(QQv!
zuxK=1=;l&(#XACX{7t<4f<ttiuaY$UyIKiIrv|4b4|R}H$VG5rh{fwV0sHY#K=<hd
zW%_u?VlHd*&7@r!RCY@37oBZax1Zn{y=$}FEKbB~;3p+M=3Us-P|Z<H$8UN`)k({+
z#zp%Y_hBL`R9mRL0w4+sG)*CN3}jFEq7P%1m8yO+prt{GI!B8g;+7J<mp{W!?G8to
z{L^Xgg56ExY>C`P;lsKv8p*NkHlh@_x+cs1Kac!DTmL@fBDYsaY@bB9!5}<n_>~$^
zPDPNyDr;+)r>5(_L<N0RE^4&Nu1ire`|BQNmW`CGZ2PqewKq=@b-^;Cok##J87SOD
zMwb3{by#qrlQ&?EBL+Zv8po=$rnSuROGlrSyHtJeNdUwbHAcs*>7c%f_Ax-&*AA4D
zy@CY(!3ODVga<MxrZE1yc?xoE&Gl2EWA?0t)BapruVF7=cBBDdoS~{PI;~p6FwDV4
z<pc;WN=n-Ked!*mwk9lpJ6m~Dt>cIHB}nv8Dj^i}z651)JyNJ>`CFvjxoMO5WXH=c
z?D~c!Kj<7tcV5~6fQ<ZfQZ6wDee6q+bXHtfXG}K4O6y#K;9*a!L=j})#n)ybAnMH%
z$Tr?vqMRz_*V#=guQrdijSCs^M%C31qjF+Mo!f1@yc)FfLCk3C@Ty08f)C)IsUQ`=
zXlb(HhFvxxb_nEYlcvGxD)V`MJL}&BW(OkP!CuzXXzWN<jTwtlGSi>0$vi5SwgFRU
zz9s5)8C$d3R;YonQfLo!ZAjBMGY|DTcI}Kvll+KXq;tJ{@oG$-d7sY#M6iw-wYdRb
z%q{+LvkgfD{v7?x|5NWlr9(h7LaM8&b&_#9gnl|8re8|9{w!Qsynl{!zU&=^5zgNr
zxA02U-%7cEFEe#-E5L=8e}$Kg$@#+~RpuVa44>Pc7{{zqXkO)_U&eq#u?M6baV)gW
z{R;qyTP@(b>sQsppK3;|zC+(HXkpYfB3;)G0yaH7r9N97f>xAw3$er$1z~4zRexs4
zicBR2P#sSUwJn6C|L_(K(UUPdfj}6vv4pf4)C-$Osk^JA18j`PYQ|{#CRh~56g#am
z;>m1193Cz>Cco(hWXZ)bjl>-4T}eutgM-NFT5THde&lCw$<9w0a7omuUC}kk{!k~E
zb8}w!mo|Uf=~V7tFoI*`D1$jJJ{xbM!~}Q*O<Wr@f<jnP$cVGjh@;1GB(K=?pM2`4
za?nbErik1Gs&w^n=KYf-0ZyvnrI+m|1@4k0S?~Vr%PBm&vFKlZEPXhr%Yc_esOqPO
zKqqM54Jl~aUdIy+eA)GscA|(VNmAiKz~VSJBDw-gCZ}pdo>#WFJLMC~odh7cMlPZ^
znjB6~LPq_jw*3r}FX^MU^G<HQ_BSxP*uUip8Bl-0Sz3(V%*@J|nHLpq`i%54W)M<h
zOsPSdxbQa$kH$K##a#Z=Bl6lE>ce4sK0_`ewB~6Cvucsf|0qDCgk(|WuRW(jB-CSo
zb#Boe7~A-j^&Z4_XB#4~8PCFJY0>E2HIt5L-H5f)TvtLbxs$igENZ;{7YAwHZK$2?
z(m1KFuhr%{z}vzCA$IJ>q^O5tF55bjEnN#<;ovYSQWR5{E=agZP`!oR&R*0sQ6=SC
zLGi=R(oineo(uo(3QIt50nTvAm6dj}$E}V4W1E?Lic^iC7jcUM-8dddsMtuHQ;XkT
zG+#h$D6123_Bq69&(gqhi=GoZ@z^KpCd)X0E;V_vqX+FCvwOVlO=Y~;2c!mBmB@yp
z$or~CpQh&apaMKk69}y<pIe9bN*dRIyOtpY?Q4J{X(&rlxeP)mHGVjV^ut!^U<7D$
zUqVs+FP%Gqy>$U+l>k7txyyvU?>APtf_5oO3jv2H=2tS-y010X@>9KMIdT_YSs3yk
zmzPX<x0QfL^dCL%({_uxdBSMUNToWVGng-)#D#l^A4P6q4-hAGPK*}-u!|fTj#`Xa
z`5t&fW{`z*TA7|J+O*d+)WQF~mkqeFe6M>hBN1CwtM1t<6JgWxdr0`@gIW0gQaZv9
zLQcu>XX~om3LmI0vIANC9V3QfQ$h0YXc7!Ew1zc*9P0APF`@Jq1<6BLr|=r4zpclu
z%@<K|Sn68p%I!iXVcsd90Mn~~>(QjSn)|<s!<vr{)SKxORGt}`Zmf^a3l8Dg_|Nm$
zsJR648T4h$kq7Cd>IiU~F$7npB}kGg#;#Uky+wI@=5uMJ^RC=jRSwaxHoG~qHEKPo
z?a_$XRrY5Jc9g;BlC-Mv>VHo!$Ne+JOZZXJ+kspSa|Knon0iQdQnX1VQO+J_J@t6T
zAJM1n^y&^c<Lb$i6GLRR(COdZ87NF`!SEM6SnQ8{Wr=A;ryFC8UciM34JtHA=G!aF
z{gH6IM0Vq4ZK{aB>jXJ4^}F)N_uB(D9b)1g)rnOjCRJa<jLP;RUN}hC7UVZ7J+=3q
z+}WXhItj-pkL;^TpTva<Pwj@|@qmm+5=5xNq8CBCEFu}<sw7p|jID=t10;h4Qmdes
z*)RF3EM~lJWj&K*t8Kld*|*^IxIqF*N(N%Z8Y2i}+!ZW8i3KA|C!Z<S%^IvsIN&CZ
z-G%@}fV>7u%7)|MXavaTwoeJHCl_sqI3BAqt@R?(i?ybOKG%S&#He(5Ww&)hMjh?9
zG=~d&^B16fS8UGn=p*7~n?}zDOMbiLFvO^b#X3sTnK&}T8l%L@#Kd2Aq18(quk~)V
z27NKdilQJsHK#~Up|)0^64F=1o%=omCt?D-F?!0<l|*)6#=BnP(<k>j^8>XHdOpv0
zrxArWlmOU`TyS|A=uD*5xZ!$9YH}5%zx{M1)}Ae*af$S!=eDyR2-{V635KOzXe%hz
zBn0~U<n%>fVDzJ>57ATquAokWrbPrQ_jOAWZSPlXX4E8O+UF>403NEo2}MW)k{+f;
z*x-SZ7x7~qAx}8;qCv=a3Wb;eF>Q`R6sHGi6pKa%OHB2Q;OS*IqlQLdUY-&>@*g4g
z0u%GpkKK;*T>nG%%SrV&zD3Hh406$V8vjF%uqA?l_;)(FC=LKR(b!0|_rN12GxmaL
zrVQm~#DA_nfb-g0Qt*E{AMkRNzg7#IBq+m}E$6WI2ML4Xj&S!-Se?no_)&%0Z^*fx
zH@O}PxN3puZ~@20Io}x>xkZl2@o}O}g&Q9+zO>gXP|&c?C`D*N@*PRFsNwUm5lR#d
zffoIl5Dp5K{PAkz0X4}41lcE#E{b=55tU#D_Dt2gD-_mdCmgnNt}kUD;JE}MQD=Z4
zmf(BTWc!FS9dzn{FC9nn)19p00O3+gxP3^qsh^6f0ypPa*89Awpr0|w@bs8YbhRqL
z(0v-V<p8VF4Osj3^{g$1N>I!9RI6=E&6c3EoV;Y)EQtwmb<c5P@e;{KaC(leCPKgn
zrmZSLxNV$|pvbj6x(5sKWqIyiRa*wobJgjtguIfGXvSUc1#>N?E>}m(_V*AalvBGV
zp(9Q`rq>$Jhpy8wF`3-MfbK$UndJWg8{<!BNWIMtT4M1VWuW4S4A10s<?SMdOL2~c
zY%<-DA$lyO?E=r9{UPm-6Z9$T0%;aLiWaQ5Tj~@w!0cJ(dKN)ZCOs!uXmB`OnB@ew
z`tXh!VX~p)3n~iBiCdGQ>kEk~+<GJ5nPxqSK~*BYumTO+8)#0UG_4=FO6Q67!mtYz
zj+XxP+M&gt?RSv4nwfGk5+o)4m8!Qis>G(9sWPOS6(V%%&T$S_Ev$l^g<&{`D#D+V
zY@~XKqjVq==F<YW_h#_DAMfd})sT^8QhO2n_BPm)H#0ZlFWFi%0J$*G2WCkCJP>|0
zO)fnI$|?!<QOWqp<vL}1b|9io(l#+Ts)Cr9pul=E6=p=|veTR|qV#=`Kd2pVU?m2*
zh#JBB-8Ih7HQl_JyrOZ(ACIUMg{Kr|=xp9OA`m3>Fao;r>>wxb?CqS{>qy4bt}R{=
zd-nb(pxBU`n({TwKaQu_;B`g#jv{#_;J>gV``qS&mywXk`99-VZRj%-XfHf&C5bI!
zIK-h*u3@MTs&wzPvamKMX2X|;Lkmyf?@f8-o%sBIJV#lLNzboHlH2(>9uXw={2tQ7
zxpzjeE>L-ViGrz79d>oSq6DYQOy?%pwWV;NHz0iOMqWHLUL9fUvH2pc0SwBB4`16_
zP2|1D@F|tIJ&ic=qS8{gDXt<m&RFHiZ&>S%-vHU@{z-l?xs9<lv7~pjq4$^~4if%U
zd$2!SXUFmvKIOKw(%w}-s;kZvi8^tgeavR;R;2=h@EKLxoh-wo>$3%2PV(74DWh@e
zxBg6ocNG?K9XHiX*)Z(RpEpMiQgNYTIFHYcd&|*z8H$hWD{T)vt*@bUK{<_QBHJmK
zldjas?RUu8b1oM~b-*FE8GnhYqz7o$=3I3DMrGiSM1wosS1&v<h^$ybCjf};mi?t8
zX-ue@+(rmTW@5LGg3ALwo6C3vZ#MJpmH&J({m~mG(qb3QMTI&Gdn6n)g7li`e}JuP
zNX@)Ay0V+<j`U~bq@OQqY2dml=mN_e_jNPuB1UQViOdn|?5a&Ctb9Z2fVLPp(l>C?
z&}|s2AWXK1Gp8iO$ampdJbs^hxq<IWNh%UT#F_ovtlw@xSzTe-dtY;PXAM@H_2yd>
zQok{!(WO*r(tTz(NdAd;VIhPW@R*de)24{{q}ih_X3J!8;gplc=)qPj$)qrp<HZj^
z;l3QQNjvVnUii;~B!m;(FCOysfU~b4R)bPlsIdL|I%uL;&t!M!H{XnoFOL`w<wL-6
zLiaHMPC==tI>F)}iN%o_I;pgMiaO(mYdo4)x(8Xuok8kwIKFfUDg@BgAcOSTez6!Y
zy;yMZe#vGx!H&paW!Nu2WsPGmb&{9ZAG;}x;S`wBp7%tem*PuXj~qdXZcf+!{--`C
z`AVM%{29~UG!fTmS7-M+7&;h<PAab!R}Xpl1(3CHIY7LZUg<#ObYRAYKlKFw1Gps-
z*Y)@k%>|BLxk&id$fz_4k2LwkD=WGhb2q4pz1YI%s!d(Tvx&*bxK71)d@yip5t3=!
zgH@(s8L=fpp<o&wO<-PLf=w`M9Vy33F*6@H^l1QTfcHf(7lMZW*=JLLr84zPGJNgZ
zY{xXN=o+NE4YGI_^oqO0SC>m+-n0c!+xY?Iy~OpW+5<D$Aou*_joR{S_LZLZ<;B#O
z{Os|@ku3IGy@k<OFC{`1EKqP8KXm5Hb9O*N<JK=(H&v$cC_R)MC9$0rit7}=2y2?w
zo4RT$$s2urFU5<qq5XKzi#tC+y4B|UfiK+6_HVbp|FZYU;(YGp6-Wcr;@=)Qe~?S^
zcvRV2=3!#6KCDw|+qIu`6KynBQYy3>8~&v3RfRjt4LbwvHH>rQ?_`d}7>Z$WdG+je
zgtNlb_*Z~Z`;W;=U}0zK^us_H>DcJrODmU9N&NYYQoAZi5zU8Jdgen#Dm-f0Tn~K&
zjoyT~*(!ki(x;_!C~^rgLtd^HgdIVpN_YK*&U@tTEu%e@C+T?3lXKL!g$I5E6n}je
zbL)wX+c15f?GyA2xgfQcOo!$C?->*UYI-GHf9ndp;?1P%dZ{nnC@eE&&@-P2#86)*
zb{3n#NQ1#wlrVFEuQgTUpaA9H`WtsB3CknQ6HBuXD@CoP8%^Eyr0ee2B-kY8ybzA`
zmsLx&QpXBXXmr;FOxw5n8q-(nqFJ?5f-+1$3zx-Bc3LCPDdP5w;?xh~|238LBA!8%
zmL5f(h6?vd=Z5XopjpK-A1AM@32e^@{Di>+viNX)5uWi54>v9){m2amPeKG4f=S%@
za5|=VDczfr@%V@Uv>g@9K9$l{!Tb0Gz%SE>v%D@i7JCDXeEGrc{L!SxNB@mbXajP?
z`C1j7pshwO2)m=R?w+G1cW3BV7h(gMr%Jl?X4z!@am<wy7?}o=rNPo1u1h65+<Wc5
z+K9yat%K+&hFW@u=9<`IF>n(hx9QpZPg7dz8Z%O8T1tjcB<YVvdlY-ZSfuBQGarl?
zP;o=Fmet0B4x!yI`)^NNKo1*{CTT;oDU(7Lkxn_x$BE%p9dw%!Kk=P%K+|*Gq8g?i
zT575gEb`{gn?=n#WL)(#h5G+WCh#653oKy8wyp!K?!;8dzSk`LF_>+O&!?bLt&^Z^
zCLOW_u>rp))<-nQ?1u_-1qU2IedhisAjRC^CIIFCD9owL5Q4H-Y|xs0`*?#eC?PAO
zmd5JkrU~(beGIDl8GkGfD-GkuM$x$JOQUZyXiy<Iauy{7985&Nva@Bu$hN(2qhS`a
z%%=p}CchvM+vjGFZ}L!idBanij3A7tBVhhnV&wLjMdnIGVi@IJkf3PkGtyn`!6k5l
z6KhN?bx-f8on}M0L~>#t3N^?AK_fm~7;FUK37TrJ?OnIY|79;GVEUHdh5O0C^J7MY
zLQ*A|#c;T%2*_XhF`m5ja8~VK4)68DxPsP0`*u`-sPFw{R5*3)(s_o?tBA17M053n
zTc5|+)khD@13{;j_##L*YmTd*ss_lqrFc5X@In>2`b%rQ@i5U`muJ7@t&GAx`pY3P
zen@0LkQKamB?1fhmFV)qo_RBh?W_IZ{<Uw$*+2Tday3G9n@@%~Ns-ns<g2S$OB;~@
z^U>Yd8JDMU1|ZoitP32iM>vtnoAAnu--l%G2E~|(NKs#qT)=(}^-L`cXrAV%ytSDK
zqCHSoPOhSuWJrcRB}43dVVC6t?n;-!)@rZw1gaJw0YkF0y2_I>24^w5P&k=h;?6}@
zG=I~x6H}wj{?#P`anKB@9`4;<+dR~`PC8bjk6{=8*5$_-vZNJjPT}qCA1NRgY=U!b
z1qm7ros+Qb%r8Y$@2UGOijEHvA*1;fibm=t1PT}ZoliHfnYG+z+-nX^s^OytEzL$Z
zhsP8BP&Bk{ka5I^L<VlUNFA60yb+Bk_MMz6d_U{5O7T@*HUp{P^M1QfM6d2^VkGO~
z#@$_vv=Bk68LH*1mq%UILR4TEuALkF>a&+i7r4gSMot;~Ip<3f`{<ctbkyRispWO_
zT;=a^9CbLXt&EdOQE;5I)M9q}Vc(E8<V+u6361$kek8U*&hvz7*;2pcDp1#S?*=f~
z9jtYW<Sx-L$PwgAa;hVCZ+(z*p8hjUFp%W!3qHA8RY#->?{IE+j$He)%HMsQHsrzz
z?cxZ-4O2*(X|;d4^+bvecwd(K_*f(g<RO3N@&m1p%wliR^lF%0;MDM&U=YcDySg^p
zTYQ~o=92tY5QXT9V29_IB_XW#fgs?UGH*_vPO;jpx}`I$WG@bW^lY+24i%PuG~NBw
zkjU{$v4l32{>iE$nyD6ZGfA#1Pe<*UI_S(Sqlx#{0kKSpQ1Wz3$qTTvc*V?yIp~>B
z^5uw+MZhzKgrM7l<gVHC88VzwzE#rl!x`^~=3||V1)}_RVnd|kO!8ljl=5#XO$Oyv
ze)bc#r8_}VA@h?i=-tv7O9lfoHV04}UBKyK{^77iZqrT^^1`kyJ;@!-h*CmvFxvP6
z5NEwTD$)3%&n9%_$O{sA@*gG}-zRWFe{QarsTu425yXalJiw@6PinjFHEm-Om{Xv3
zN>$F<iUtP%)#a}~{e0|K;$7Ct@`u3O^50Nr=!1-=OYVBbXaHAah<IVN&0;*e)~F*e
z9sqmC%ZMLU^VuVx59Kj8;_Ru={Vx%_C#uqP#<cGMWsi@qZ;<1!tNRKOk|GbU{KxPY
z;G;=_m7*Rs*y^<JVpbx)@jO)|bKvmO?2RHwW3~Z4OKD484dP;qXrjoeVEblmvll6~
zovASb$bS_tS9b_=x74-NgHxo2VcBZKp+Qb%t@3I-lB%TUH1@eqMbyEu)gc-Ib+Y^<
zA8dKWP0sCW@~)2tES4(Q<Hm;r12J%4g^XA<uu?J7bsVpohMMsfr$*TxL1|Dml5P_)
z`n{};rBgbMEkQk)L39U>V_Ixbr1*VA42_i2N=)?;&^xOGjhl7XZ~!#mj*b<r1sQ_t
zw!xPKO1w(M;Jc=q8K6o^_fS`OTK7V78_GHPa*uKRyfZO>WMk31q1$O94DH$rQo?+X
zm4iwM*Dg<VAOr~vqjxy>3rPHN1BD)zSz<>9eKJse$GrXaVQKUtA{uz2lz^iwmT<BF
z;RC3i-M7)0e_YXIx~Eqp*Wa9sw{_<&oQkTN#1kNsZW--dC6>I!;34@+%vqeRV)^`|
zsdTCF;+8uWZd%yC2uE9kcv)xs(OJ(L;ue<gl(5H-%Aa*^31X1Xb>nz0H`|u;aZ=Ak
ztFtO_#a(+P)~p;K?Fs}%+wJToZ-8c8<BZX~lb-zO57VNAN@}hOgC|+ka3}xJsnXQN
zEAPi_&B6+29p8@Ansi>SSNWq_S$RV6CNk=RZ$;__(FRZSbFVYOgaQw*AwEhx3&_E?
zTUJf>cZ7~ff{S1L5(JT~3I$p}=!nNHZ|USt%QtpLD9%EczMMzHcMHv{H}Uh@O)WpR
zEQ<tgYT36Jlo6ThTQ`9c)4gl=64o(oj;rs({n0&v1_`!oJCd{M6j^vwqXR#B%}lwn
zrv~&e9V1q#M@)C?AFxeNi!f!Y^ODw<(HbWV;72{pXrAW9mQiYseI!9s{`hyb)vn+?
z8^>I%iOorJi@*T3$H5Z3z!{g$FA^xz<UFgJa*L$(hP?GTb%k7vro@=PML<yFxsg;e
z`=><a`2q4OCg}k}NCe@*z`3+dDvDsueB1k9rt^8m9<!xuDRcc~Wv>>|s%O8Ln280r
zg>!YQvA!xEds^p_zc+AW+y6$IwP9g@4FN6fesvBpgW`5vIf=ohOLQuJT7D9Il@7SW
z&xrr_yp|3AlFGku&wFiv+Zn-ur*i<v<OE*V*iEF=QMrf}@pG~+pd{j|eLrG2jf~p}
zZT@Y;hg<Cd1yxNY0)9@r`2wFH&|@@V>R018PJMPv2NAP3e9wlAB-D`ko$SRui_lVh
zE`(zl)dMRK?xmir^NdNOL}M~n59G|N#+rb?0cp?cjPUndIx-VXK*7mTj(72V^$A+q
zVik$8(hNn#l+~ZTAKEe-%04Goh|AJ;8xH3;AyJT}7eA)f=D7+oqu~pX!(VbGuJh2t
ze?_7!w-F+R7cob+l7q=Uu2%OW7v%0v=Rm}=gGt+OgGB{<b{TePeLs4YW_M2KRc)f(
z?ekE$c$Q%71kzGe_E{m2LVIVk`zt+fT@o1l<;dEO!9ftX>t@Ms&k5@EyuSZ{jU_A<
zH4r+)0-6;|S_HP1XlS&n1i1g~ivko<)L0kS%^BH7a+1nEpC}3ZEpmo`+u?sW7XR-+
zbSQ<xMcZzo@PR*W(yH^sk?IrL6-E_*ysz3qh^<Osca-~r_(M#cJUd$XyMQyPS0=id
z(;0Ojsx%g}*=d?Reqy=ASsuhe61AKM0Ttm^93l&km%FO$C+{tj0e~-&{*qVfv&YcQ
zSfPtd3Kpw6B34rlS0=0oHv&YN!vaR&7#0>!-3xYH{MvY&C0LsD0z5DVvxqYs>PRFU
zy=u3z@3(#5ujy-b^~6*wkg9u902B^>q0y0|x3ow}wJ*L!Y2;+cD<*+CYS4QUMoq@+
z6;VFpm`eUZcuxbi=KFG3%xeSedAto1ZGFs|WIWwIb4BfUGFkc;D|v9GHq)048a(x>
zm9z)$Wq=q{MND#lgC|Ef{gXi4F7>rR;02LqjC4;`o(jR7vagy0|2n?Ze0rE=a${gc
zOq(l|fg%z3Svx#8dt;{M)e$8}V>hjQtBzcL3fg5(n%_yB;`lVu*L%z5$sYYpl#7Ru
zE`Wq}CeoUfJ4Zm<t$p6eny`1{7_LQ|_f-+(Ab_BRatGvH4R$+XVVP`Z_@ahU8#MVN
z14DH$W=nG=__~mL03$#QvGSrM<AQ1~1SJDkp7Zk0F-*xmql}2yR*ZZ&eN`8g)O|it
zvHNsOW!*b94B{uNOWZ6g*4HDxm_;S6h%n(&#?wNBV*1GyZwwfvw0j{t7e`{qKUWm2
zTan$WJ1)h1N6SAu7$2<VPPh#ZO-9-@O%pdAFRC1B1x+*AFQUfNE%aNto~!_O{|@R(
z{__Z0;BNh*g8T4I=i7LTe=`6)alhhXj+WO&zR|t7JB_VRi2Y}FKNUVAMU0d4(+d`n
zWr@lDxs)!m)!aB~X=Dm>fjJgBo-uLPZ#9RIl5*l^#-aneWH$<&78a{12dww6{M9Nw
zHmayBpgp5$4LDeSfZRUa25=B59o;r%(e!}7#MqJ%pO)}@bmL=c`tTDlqEJI1Qa?xi
z1r^`<_FQOsJACZ#JxJQ|vIfz@s~!!}wN=H7vW&HxZhBH#<JA;o0pMCoDz-SZjZfUc
zvx6tYHhQAylsnv07(fIeZaEbnxIE!74k8FkCE;c*7kHL)zu~R^1!k2vp=syETkA6(
z3^%1+mg%FT^mxrV>a-`=o+3tVz{(IQ);LBS9%T{Yg>8omz_Ok=$4TAY6DsE^cL;LQ
z{zrrY3H6R_>*R-Pu`9}>{9tEw0w5_ArmfEYFb+BHLwVR2?(Zxn-x)*J6&*V@ZibM~
z0k6WtvZeU{H~;iJ-#!>QP|U{)6p-kkwt%|mi-plBfc6?Xs&iYH(}Vh$&M15b2?bz_
z!Vt<;ZdaX)E>cI)V}C9~W+c<t%7C*+XD=9FF|i+LDhP<g#VrrDJuPWau+-sSSb@cv
zf>wzE%N4Q|@wHk>NaQ0a?uAubW|6f?Q%cxtt8KT!CYAZ=g}&t@G=0>od&ZE8^zEzJ
z^-e@h&SuH!-#yU_5jB4GquPy@v+9CR1$u@BN$AY5@ttI#ljweRa-&V1qH;5GgrDI2
zH)s*K!Uk47aEjGc3G;k~cf6POp=0`pq?&St5TD^{YmA`i)au@y6ee{gK`N;t9LjA(
ztt;0$ynKfi<<@_3*T0MczN#51*Hy;6yYtK1Lpp(Y{?;1-l)QWSph3c>Wpyq+dB*C<
z5892SrboCETj9SLQWx9`&uqd@qAH)54d!y@_XIf0XzndtVZ@`!OjfLLPY68BIi$x2
zWVeMP0F`ObWB_1oenN)2uwv+asW>k&jCd=TS(^j$;edzNEc?7$&9^n-ASjEA#0n_g
zK}#AIIWtw09jM%aKP12Jky(FAotmOyv72RDSBTF|kF7^zNo+7L);)eJuta1XWfBLQ
z%|Hgx@|-*O$Fm%qb5jen8@i=trqfs$YW>T+!lkSdKwK2~1!4rdI5bXr>XsKFRegCV
z(^XS(I-4P?*vSZYX>Ch0WmBP1`)rhJaw2nfj`0Ku4PU}ihF|{0`AxK<-w;&(^or%@
z`X@N93b5Y40<>N=k1<<cfWl!J-$&ARA3xM9KEX{G(nc{eWyb#$Wh%<Mqsgk7G-gQ(
zjDmZ{&Wv}go%jJNDfk?<y3Zxurs-)nUfE$v9|xibe|WySqC-Bb=vS&ynz@*YnB}=W
zi1(~`L<zH%1fq>4QT{%F^$celYx=G940#T8(#wDrikq!03diZ!*DQI;x&$d#=%TPi
z!Dj`Yv{UOI&ezFQ|6?%71<wW8#&wg>lMsY{s6uu1mVg8+He<3DkKk$rH*!xFCb0Ap
zPZz{AymI43A`Xwt`V9SURtjS*ZG!*59UK%m>;>4_EH0Euxx#}Z)1hAmdtk_f=?gzD
zDc+EVSegYA%9~SDe#f6ag7yE0EOBe&GmC=62!6<B>FMOfGs8WwMP2WZNOuy2L;Ctt
zzqip%?VZ4;S)w)f-wldK`6y#gfHOCcuLX2&_0WR26dnv69YFADx6M$#x6@vA?p*(B
zZ_4EWU6zO3!FdNSN`LyhS@n{6+dX%S(>w-+OFnbVQMwtsp`_}ybjGx;kExnZpf+~E
z`&RN-;|*~i1<$p^Re04}yW@PfS{{bx!vj2{3PZBOL!Jlym^x0$eIFmfF}sxY2Gp#%
z(&ah2W8{{vHDFsd**{G4H|XJB%k9enUqf<3DytAc@GwX2xsl3uJSg`LJ!%`<=@(<*
z*1OK(f;({2{Uz>zpMx(^Hn4T^(V6sKZBQ^*%p)4buiQ0zry`5gN0kLEDI`Zf2r35P
z2fxn>l7&lDKC>;~UZRy1ZG!PPc?mww-jm+ZVq!4)5a4(7ol-U>O<8hg7!2B601{-c
zN==S8d=~77>o5Lnc+AvGE*lapC*Qh3l!%+bQ=2Be^xQ~$^L|^hTdpLksHv%J5Wq9|
zY;LA5?^Eg;&xaI2Yp*d-#^)sr?+Bxc{~#o%rWTgQY+|3jt)a{@+*xh8WIWncrbY+d
z^cPB8E78ombrD%y<uF4YHyND;|6fLBr^1jeV@jBvifby40mXOvOX;bCP$QdtQJvC3
zji~%KuV2rbt=Y;$W)tBn@t8CqV-Ivg4cWh45}6wPJG~H1WujGaUTmd<Qlp%xJb7bI
zh#7l>6xq6b+KJJ}s;zU@7HWUFL*w1naQ(39P)MSZ!q9^X4MmYsmiO}?le}IJ2X|`W
zo@92XU|BJy1ALZ@Sw+fnaxb?@J~;gz8EkFGU3229nxc_fW;HraMG*W0ToW-M<fqXk
zpw98-S-1#?y@9Mp`G<jKtUT<4*t0nfQuGGqNut(=CgjcQtvz?rH`X7gzpxf}F!RXW
z0Dh|;mOmro<-f{F-pu~jLK{y%5d$h+z9wk^&C_Qn)2A>1GeFG0=EdX_v4#=m{MpGQ
zY#{m*(HLRd0%jvB8tM3g`)~O?%WVUL-##|tn;CmF-V^&NxPQcOJVal_A1PDCnsE(q
zR~9z{z)qW8&TNyH-UQ9T>P^nFt@~wNEyWyVX-%rMGF(-No;dXp*I#Bf<OV-k<-=ry
zPXBz1#&KR2Z8vKiBl}4^bnZRE-sXJdfxSa(K!P?MIU4}!hVvYR5bs!A>x(vDbX3z<
zw=CPq7X9AqfSm{^WKn3o6lFSEN@UfCA+96LU|^A12d<#TE(8n)XsaeTyK(SYW*#t-
zFCIRvTF<l*RW~cWKUqit<pa8NzianyvW@-*K{(fr(+bTPG1drl4iMZoaedq#l~)VG
zsmL^C(0__cJ};2KKe|=w%(7Vd;ZSqX1TNQee_8;-4yt2p-eqrAi~L|b(h-I<1O6Jj
zmWpS}F}EVoW~KE&JHVi3kh-+r0A1%?c%c9|W^L3o45IckpDj=)V|*v;^ca@;YG!k_
z!@lFJ+_mP?ji7p=Ua?<BRJj9@t9+g<gVsVGWH}R#U$LUGLXSyvs@Q?^@iQqa_@A(0
zX|r54ue4zO$#DM|GiS7PPD*t{W^x!`IWcaq9y4v{3)PPZvX;)T-~G7gHKRO7v=!<&
z%M8snZ6T>{@N4#9DbH!#iCD-d;8wzw<wyH$_0p^AEHelpgqD=)l#hV+|MHX551Q>t
zj7zLEGmoOKzC(r&c@cGXT0r4&=m<i__G(*cC`&}iz|s-tMB&<}g=qU!ODae3sRKac
z<%=^O$Mik%hB5f;@78p<@p?3li|Gef$W2;1iZ2I3dF!PRkGsl<yHRoUw=RbOu_d1$
zTi^ovwY>Bvbs07AGjeM?cbt%uI6dq(^_*@9^K(@h&V~`Ae{Pmy3q}%C2i_u%)z}+i
zgkz`YziO(CY}7727+d7^Rb}EAuEk^XV!}Z6n3&0m5Z~T+lTfW)^4Xb4=oyc{^tSjB
zjRLDwe0iyip2YNN>cqq=njWiK0vk}0>bVu^+T`Qe$%>_6HKgq_w3tm3JhpecK)gh~
z`VVCB3=0Ud*$Ng5fSI~e)<)K=efg}fe}fk828sEB^XJ0!j0iPc$ce?aR7P!a(DLjS
z+AZGN&mYsJWkS{y9-_qFfrv+A=s!Ye9bs+jYZ#n+r4k{tsj((6Xx1a6-Zbn%-21ff
z4uLdoIs~L2QCa3$?=P9K3?22|L?A6v4`>Ccg)LC<GN)tN*5``j12!Z9w<Y^33O|TQ
z`I=_{(y6~tEuZnuFvp*}s`cdO>eb%I(iXj;4dJ7bx+YKQMf=&{*;)Mw!zDq8p|N0f
zWzQ3;1^x++Bv)T3PBBq`FUbvDZ&@o1cH${lNFQX&kIXwOZnfWlF<kzf;GEkmXkA5R
zmEJ3TK!7Y!M0n4+w^c#LuguZbleo<M-eQhsl(aVyA1Q-n*DbwgTOn@=-Bn5zhPo&E
zmW{x-FhxZ&XQuGe?;fSpM&!oun!6z_Z{fNdI1Q{ZctCP7PV#dBsfWYHC6fF>UsiH1
zr0v+0+Y=zI5d?k8M&>K-%LXY&2(6#FpmEoFRd#7ku!MiFBAp$ShPD6y56+j2stn$D
z`~I?|=<1kwKNbffkmDDJS`&dw3mIe39TG-PDV8bqzh$loy*;j24~u@;7I*SfD5i()
z(21!Se9#KSu*RTbghE_`>$5OL%06%2`Ebl3d8(aRyDgzh)D4;H=R=#NwM<e_z6*fA
znTaK5%b@cDEw9>p78m+LZj!2v3JFbMV)UQm%MH|HJJc}^ms|C_WBU(n!Zk)YDohnT
z{w6)}so<|~zr>mSG_eqVk8@YPfEeJ~vQsAdTT}gMR1S$LJCVXzp0t_>WJg9qSLwNE
zY=lC4;O)4zF@>Uhs=wT{`F}5*ujK8|a^~lDrJgQzI<u>O(vVvVyS&D8(K<;?%h8v}
zxSGPo*$95vWZgrO!Oh&Hhrjv@JQdWAa0;ZW)8+iz>{%hbj3TX<NDi-pvmu`$n|QHw
zsHK@W-wP%AxTcZ1ZIh)!(g0(HoVu!n@|Ff&z--R>{Sd4T4Q4u|p<R|M;PjB%p>Dav
z0{Qx`6+jjs--+iLj*C`TMF0!a%YxYOi286M%lFxy2QU!ub-+Xl^#gMp@zU(|R#|D7
z?$mfs*CG{y-7-jB%2<w766$7lTyud&)k5uxS0!gD@0iEfi0Y)UYfkA~FYM0;qiNet
z3>UZ1))d_Nw@e{aV&xz;VYMj^brA83SH7<&@mKU3jPbG+4OKLjvwDtC7G%}+AP~6H
zc;p2F^48mqq%Yl$bc}<oAbJNR`b!v4W+HzX9#>_VOsFJvw3#t1jsiCnukKf4{(81K
z_kl&hkGIp|JJ{;QM2U5&tPrcQ_`zEYA>qw|mjIGLS9IwDMb;bn0);W2i$wLOGx`c<
zN$-{sDneBBhVYSu;dF)7SxdK}+sOi)1cDw8fSU#T5d?MQ9W#LyI;Hz4V$t(Z6-4p|
z*Nw{gC$ohxhj)A1+5ig970w{Sa>a4lUDbP~{4Op#oQ7OF6FVx4sob_r^Fq0uQGGND
z^f6m~bp!7s_;@riFU+O_S6sY@{(ONw23Pw6R`NvGcyo#(qY<>WO%p9B%K(Ib-#0oE
zVZ#!?adY)|gwj9|6nLL<lo%fwdSD*w**T#TS?Vm~(I5>tl{T{roj&lWPCzfB78&Hb
z#q?$Nm9?S0v{+cscqn3q((l8uD#}YT3&U=%O07go@Cd;am9sE+hYv#xi+W2c<l%^S
z7Q$U+#c^E(hbjFyG6+leuVOzg-^*w#TGFw{<(kr&{#wv;wtN>;>q}|LcmzAmRuI`(
zfQa2ns^uFKL0}3qx+v+txZvr(U+rHxpE7yJOA*6LLyuS)*L=U*Txz`ei|9D*^{zw|
za{D)<sznlMB9|>kD_Xf&lA;57o-^AS4<AdN$ihE0#n4Mz`OF?l${_z!zye~}pNP}U
z5ci5CMk(#+57fN%O#oqGtQvH;m-~!yyiVtihQ3!N^o-9-jYCfX%z~?rIgm$bFZg0R
z)6H}7Hp#*>O-2EKwhk8^EoX?F^&ak)9v)5R?=|R4kY2tI($Lt$#@8+lJFj48n7%-e
zeq4pGGx>_%hP%ItPRoHK)yrJHS~A+KS{}PuSUifAO*Lp6S>p{i7E<Gn+A--}Z1A$D
zL-5Dp9zNy`i}e@3D*r@*jgX=WA-la|oSfivw$%)$C}pjR8Ye?66^UqWW@Buy56mKA
zm7qG&E#zrh^%d6nm-PrQkxaog!NV&>-NFp)0JP_`RC0h7W0YC&_zRzBf!wRGn?9Ce
zeitOc-s$?3)>J5aEqlcfh+q^Z)d6VVKNT1%gE&i7%x%gR%3d~nJl%rTc37h{Wy=ny
zEksM4d@JxMhoO~sTCLg!BG^`<7TeM;ftkxq=xGSm3XFvI*}&N5;ylz5;Z7s|qA*d*
zb1(U5MachYyCkO}K1mLe<y~&pPCmT&Q9DzAv20ccC0FWDSX*JSn0s25ZMcfoY-RwB
z=1USJIj`1Tt;6gEMgZVm95K)%-M&FZZC%M}<OOGY>x>@WXjVV!rZnpbc%vCM6NZt5
z*=TD;6LJ<DL#UmF*VrZWj@55US|Sgfj=j+Rywq;7ypNM#N%I`!-eB(z1*pF;OoBu0
zaj<t9x%AX19{Zwq+lX@8@0IPW*2wA7kk)jY73E#mdh4eYz;|{6e~(2bc$Y#Z0_S_i
ze2OiGLmKqZ$YUB}*gQOsl4^<{^1RbI7m5kXKIY%<#aT@v-4fN`=Mu-Uur{{_x8fvJ
zj?zLJT=kL0LE&y_IfwCJr!7utkw5FxtNl<iWS*V*%i{`l(Z{L;R&Yf|tmI8~Eq>wt
z^1h++*OFHU|4uswEBQ`WFpZl_E7Bvq%6V9Ak#3Q{+_<b=6AwM-{I=2AhMbN(pyH`3
zli0|v4K|N}z_9x1nh7tBL{Wl9Dvc#SB^?}gH^$pN+iMq^rd<PU-GD}iltnB;sGTl3
zJXYq_4D{EnAY(OinQUGGBVvy2GjrvbGm2R-rSL?ONjlb@E+4awCqm~9tT{{o9ws`{
z;Px)M;GPkT<pql*f5pg^%gK~<2{ZM7f!Vg;?nFwlbOW>^mU6ii?(Yfo=%Pan2RmnA
zgSO$NHqY-YIz^RUodd?aMvSNW)4qHJeQG*?7N7etCcIJ`dyL}|RAS*j6w{QxP6656
zd?~)Za?y|oi;}tIq|F@6a);%%Ec8Z{ob2L`Ni=9xXWl0N!sOj&6XsE1>fKhX-&QCO
z|NOTt7!sfNypJZoQv|<Sx?n$<*K*R2I?SH43Ztl|Di}&gp{Q4c{ttCU$jC1}gSe17
zi2SC^<+|QW{ZPSCL;Vg5t=LtoBZ>oh(v|jLo6S)hH775J#Iw_tc3JyK5RE}}?gk-U
z`3&cx9q)&DZ>%>pWQWs|`#mgn<fBOdvo~f}4$n##Q&@}?Ww6xn{ewPDp+RJF`51z*
z-3EkNu!_~{5QpSyZ-kt~R2=&<a%3WMqsR8I^FlBL9>|}aB`_PBbL`%ym646JV`Kp%
zA+3l;9{~X0F;D3K9$qZ0Et*ePM$_c&CcQ!ouKm6Yn|%E7+sAp6p|36J`cp>QB3!ig
z=S4J5@s;VjBgb|y@ez8U8fvx7e-Ac0`%mZ?f(0z7iVP*W5aycF1Iy*`7AR2jPB>i1
zGwzwDwVYpO!WDfmlX=AS&fr1H(l!}s5K@ggEbfNX++~vh-OQckvu{$S=Rl>)P^j%<
z`lOWR97Q(u?h26slEd%zuld!SkK9kgUR=2%VN6hM@uUd?Xn;OR`%5Res^|4*$N7S=
zm@(irGNuAUj=2cu@IEk3U5A$Bm$MA@X_-XFJkL+KItb8s;kyKzn9H|4)syKoQnZ#E
z!VwvCnKtaKFiQ#qiHhS?X%+{;<A%EKy&3?iO!7+)^qkYfVzyt7U87S&cJYiTV1G}C
zuHagP3$J#{qPR1ad;qe{jJ{KZ5K$T0SLi%U%bLh!1#RqttY-5X{|(0!N>2vEe4N4P
zUDarpc|e&++?rcBBQLmMEv-!GM(xMj5PIP_>x8N?(F~!pTymdIwNQ~G213WmJo}>&
zKQKQVbOw#G3rFR-k3?4p!b_I?5_ifpuPQVHS0>_3OV<ScPF@P(lK;(Q&pvE%GTxE+
zb2J;Z<U_ONhWfoW*QKMX!_FbYFIKGXo^q@54$G!N;AbdKg1RZ0q3cmmHMMM>5BL#i
zZyZ%FT6Y*cwzw+w3&Gk*0yh;ni5ekhE3t~!&u#r#Il>&0rU0@X&1LTbgUy*zTg_e=
z%nisevIDY=--_JlhA}f34b0~p^M-M{y`x}Iabq_xA&u2+uw0?p+xzT|A(5A#hZYYV
zQB47E64^)lAm{P%v*r#W>qS*dvi{po)>@#nk^=-9A+^PBV5uVsxu<0;mvp1xd+=7t
znHR3K^%?QF<804BL}&tH!7}DXw<>HpR7MF%_}ll6f_M-Le`uO62n+W9-bD-1-)t0D
zXjP4ag}c=m*W8fo$A~Z+K?21EY0#Z>hz4Ktd7X_zg=0s~aEnYF#X9n?Vs8I{4Qu44
z&nTz*{;Q_>%b18qHM{7@>#0xTq<zIB5zM9tRc@LoY}CCWk%EKxc|w+Os9wfXGX$V%
zg0$JvxAlV>UTY0UL_8#M)Vc{b#@5;<A9QfA@Qe)fFqQ*XvaK_=j9*fGKqHn-Baj2V
z=!@nY61<qW%O^DU5X-?i4k#I|`8v*x)_czK*p?9lVo$ze8^C$!_T)FDtRfT1B(B#D
zi4G0PmEG#-n6NK!`WM2^6(6-Vo|~MD_oWGaVppi-KApIT%&9ERQ$g`(5ot`s#6Bzn
zPL-A8V@K0Bg93u@Tgu6Z>M#L#3%!LCX=*#0N9c(Y-%F`6RZVZ~_W9<$ff;D#BpFqG
z7h5@FS*oMonn;7hThx9Qr8n<rp3TkGKAFl01l{0q3$sn}0e;en_+b4hMSJ?cx}>NS
zpWU7C7-JO*2Bp$CfEEUz$0Agtf7O|{zYZyFdcgvLX9KD0+lt}nJP(eyKJ9P=Y2b~h
zNulOXvkLkj%%`4_IfthbuIj73kWWQ^IvWf8Kuu@h5G3Dc$z#+L-D=l!Z?n0d!qzku
z0NcvCKV|O|8q)%d7U7x#9%5ixNGqTrYbUlQb)Nrvp&RolHjzFsjoG_t5Y*{dNm(g&
zBB`AP4nqEH?N5kxa5*`(48B*}@57<uEHpx4$wH<}3@)1?C7wc#960#*7eh){BFsh>
z3M0Rmiyu-YB@n)XX>UBC@S`{D<4Y&P&VL|aG$%Uwk;e`!R5pRnGmQqOezFPSBLSJN
z&BB^<%m_rmqn`0+3L0`h2a7d>f=>iHu0m<bpq$Vjy)^S~RyR1aJMA<3rQM^TEX~Op
zZj-`z^+yNMW*`z|Uj#g_R~e}J_HBgmhzn1YR8wPZMVs!nO==;rAwNRhh;KnE+zK=5
zW=re!hUCS6XbK$oLLU7DF|L|4qsO`qnGL9`#cBPXWB?!33Gn_CQfV#urB&Mi1h=qg
zr*(i?(`8F*Y*#5Vy)BUzd&Eg|hPvU@oJH|}txvOcZq+WPvWCN@^Gq%zs8aVibY+3o
zgWqtX)I$|9;!vNPZL>&lspeaFfWLdun_xRv?mP!>6J3N;6s9CWX}BR88EtGJs4(2D
zt*@~=IHXpdJ69Gal3~_aSOi43Fs@NECFn$3MS*2Ya-?!3kCtCw1?9TyHenAZ|D6hQ
z?wXO%5StxvU%FvKuFE1|dz+@g4k?utK1t#CHwFOH-IBS$v74rt7G(>qjG?tv8p|Gd
zL1VO`d{>D28Z!%zT|#ih-)+S`2~j?fbBs`H{#E7waPkh^CoXF`@Yb}yFJAiJg+*;R
zp4f_Wtml{3MoCah@${nYNU0m{x^D#>)bnHzPzW>tAtC}fA5LV@?9M;g%pk9dls^kZ
zKUPL|z0cTGq&EBl_?7k8K$oi*b)O-Gmog@v8OkV>qf+Izc)%@B9=9g;Esup}5I#D=
zjk$$z(hu6idKQ`B-^;RFIKbb2wWNZPX<*r21SQ6?4f-9wt8B{MWC8Btkn3t21I(lD
zULce!4%<$#Vkpl`Y4Jfa9Y?9MDc-#YGdKO1jz1U-rBdVagu;)9tj8<Fdi@dpy=TC{
zs7fSDQDz^Hp+1)x;b_R=EVVgj1?0+wpRg*d7`oVB@0vU;M4)kkA2BSqNY+gRfw4RR
zx*|Qp`#@Ffgxc8TRC2@MP{3D=bI{WdP|{f1ZvXv2eV70^Kz4i+4JcE)k?!w#`aZK|
z<m>(|GegtFfH(G)KTD|Q442tO8sd4f`yO&mVF*FFsBK@8M5YLT_2(m}cM{DNJHj8l
zyW%&GaUxz3JkCaI>cQ`#(t}FSq5t>8Vkl$eS#w9@ml@lTK2-3soi^jRx1Qnr&Sq56
zrkt>-JRzpx4e`23uC=rrEge*Ug&;)vnCZN{cdKZxjhwi$#3u!$FHws`&zg?04gnJn
zRos~sG<{0sFRhPZbt9}-2_jml`ycnLv5sLCQIsJh2*l&|M@L&!NJ$);(f67SVEm{2
zzHq}&e-{{8Cqr~P;X*+IU&;Xb4m^eqIWrCkV~A|oIKBup^{YF>k9s9SZA-R5j185a
z|5Ip=dNd!iC5OuzosgbD@#ZC3rG}L^1pF`*)6;Ehz(652U>QxqMa(!t2bipqLJf~v
z#hZFesNBL?;B}fH@U7}mr&miei-xzLbT_%vF4!9HE(Q!0_cVoP%5l7_(vEJO?pTkF
zuHTU@I1`1K>D&hLl4r}4fkP8czgER@`J4WRCr}&VA@hkUiq(l;?!h2DL}emen8$Wr
z;P#!qam7ujE`HPx>538I33k@mdpUiE20QBcS(yD&nJ0k{iOMBWftzDGq+gwSoVb><
zIrh1r{5XFtabcz_F$R~|>$O<m%oz!C_A7l;;PCFufSHo;5iqxYKW(0?`KokZi|p>X
zL@&-{q!MnzRF1#0GQV9jKGojsdS-^yQ(Xwt$oZdIE;t^@);m;M-lYmB5bfi<`KEly
zUa8U&D8Xx}j~;YE@!){})N?&p_Pt!N0{MXXwn~F<)Qy2A>bm7v|DtCXQBKlo<n7lB
z%r^qb6NChJf)o@o+m9#4@mrkYqOQVN>WFy7`M5afMvnH6W$z{lgWPS?5$(C_?Rblx
zk*0G_P=sbL06grYW`J5>0%=P>R5@UzE{q1-&Da@v$L%MVZ!&%Y+cTI*i;vLkg-=O8
zUfT`qy7UKOQQ>hW*Qq>std#13FFTTvn%wD8@i<Liyb+B@JfB38+{_5}B5YF_AK;WZ
zJ_O6_u0$QRf35o0?OBbf=ty#qgYt%Vg)8hWU52=OkI!ANK0ct-=uX{RsnH+EfTlZK
z9Y`Ne$snWUYT!DSy+a2s=Ui`{j!vWl-K<SI#7X;QhuPPnJN-EcCB#EaE<Y|%ahgUS
z2c@_daUM`I9gg}SG7awrzry#GZ>gU^nlX!Rg%n_|;7edMDsV^~>BYbg@@{g8Jm260
zBRZBe7PtNV&x3%YGNikZrBg5>X%?lq^t4!mRi*!e_nvNcYD3|_#KH{U<iEMd&k<}O
z&mW&H$j<u~3?gfV($mf#%|6n4$8Y%8K)(rf<6K-J38lmm{NZ6_nX>IrE8EtO??fo4
zol3XH-;whh)9il+lpWH$^3FU=lozCTCwtx!DMW;TLgV{Nbk(vgQ9s{w!uzl5_{WRr
z3eO;~(bG=E$zmH$yYkyN`ya&?_Io$X_*OpMYmcVY-&IKcTVQ+@-8gGMVSs-lzxHKw
zW3^g%X2|G~6+;!r7J7kdj_C<V{D^5Vj*av#Q_L@DOuUkQ!)$E#k*ynBCjPva`zzY9
znxz;0ADd#LX4ijc)@3%j_D=6s(?_ZT@CBuvJDm^VxkGu1)7_A(!ERYUj{?URiT+gr
zu|+w01gLw3`g<gs8g*)4NlP|~(fuo$1UM_qiZVn}Dp9yUT|msY5STb7@Aw^UcE&i^
zBFnAoD&e9YV==X8w7bU6Cft2mX}4Z&Xt%@weS7JlraL6BUz#-f{uCv*V71WKti@83
z=9tluNPTaQA)2;FMPaU22A<~7oOkZ724X!5|9xFoqJYW9@L*<7hSws99v)iYSB1W9
z`S=C#)YgkX`3IjYX39?in5uGJ-sf&Dv{D<u3ZXf}m#?O-uHWT0;D<AP_D9kzUnas`
zwd*p?Lv+Cb_ey>`*#Ae^>~`${rsyjG7Y~rwAK*dW)%C6$XkmKaRPcM$qV^4Jlua)h
zu7K2gFBPs%oS_M=ZR-iq+n4DlS<+n@j&;Qc%28xVoM2!wmPhWlZyHGSwutWM9Vk?d
zND;5z=e7AKG!i;U5Se7z9=oK?QjT7^n~$Bt7EpT?6j}MG@&19*P5gi&xcyD7&*3v1
z?&1nQO1Ibiht6axr5>nr28}C7Z9bs}Lsu14Q{I$XlResh)Bd1Tmg4~P=Jxm(^5m%*
z*fB^*^9<9rD~)KBH^5FC7SQ<Ie%={qU2vl#;yUAR;X-X<Bq9Du55yK<|6tO#weCEe
z_1b7d{${|-fQ5n3UeOzRq9wV-gZFaUFO0pUj$CmG(9WlxG!fn$;xcAS^)j87Ob9>~
zrgd8G%MV`(-K1%tdkeha$O;REO~v+f=OaeTsR@nK2Qqo7iban1pZVhxv)QagHB?#4
zumrJjBg+R9C+XlolTJ#wsjUf%R5k7QU@=tZ^Ao9&X9FiW{@x*|#)@=-eX2J&NJV%}
zKkj8JaQ@#H&0@5`K)8*S(LjC6TFrtcupPClZknOz2I&_O9)4;pi^i0$bwyJGK2$H7
zp%=rl5+GuN_uNX(STK8`Tx(AfzMXLd2tB;;yo}2~e6LUgF6cWS40qD8JVTJ~-F1rB
zM#1RL@s$03MeS&JV+nmWgev^}qTDyWd}j+~(M4`M3pdw_P<fs|JL~6xm6l5JQAY9U
zH{k<8J9-}k5PZUkdxiZiDEl=4IQP{ErWy7WIqU6C8~<>7q>Iq&a0Sr7)5m2q$l@iH
zE=RI7gM!^{+`2WTxiq;NX*`sa#Np$7pv<?tK6{Pgq|K&Z_RPJ<<!WC#lCSI5rzRDS
z68>!`ksKah<=Sl`tT~HvPsDigfdLL=Rhok0NAe`}@ctv(K$q!D)y`C=!*rNPii|+T
zKFI7=ct(I@n80D>qpXkWHQK3+!8<p8=>*|5cFkd!L!qn20g|UqQ$Hj4>T+K}6GyUG
zn*fr;Pv9s<n6;hg9SfW(;heq8g$DoFOr)Zk7#PC(bsjHZd|3LglCS}OkMI;d^xsy<
z1{;aqau%`e<=&{r6H)rWtbtX}V^xO~XzZWWN-63Cch?nw3k<L^Mbd;_ZkrX7aqV-0
z>gUt}HD1XZPnS3WXtbR%+|g)4A=aP2*n4krEBvVs%VS0MtrFU1ckkuq#^4P0ln+s0
z;r#}JVQpbR9o|)4uS@&mc<Cqz1uAh|%_MzIvf`AQ8vov|QD?B43F+WiUH-IX!z3r%
z@d)6m;~hoqB!4ZF7_GnfqmAwU2i*c!0)5aTKY%(q!@y~Fqje)$<`^@0ypkjs5k<dE
zh}WWjolzYaP3vioZDU>dFd)a!DvTMwzr6vNc+qqm*)r#|Y{iS|nj?&LDR5{7=sBiB
z;7BYVJDtQ*I_RLku}8nU75_TMbGp@mCMdiBRJpyN*`;hk(>?TAC->;GKZKfFf<WXN
zK)lvkrU2ZWAwA{0n5d8evRtdZ<^y9h+E!>i1_&DN0`YavzZpBg>vd+dIQv!O5c%zE
zlfzzISaQdgna!>=P#~_^e3j&yPys9gU$v$-s~lAQXHIsnf1qp;HjZLJm?nke2S3E+
zC}QSQoq@vwyr?MDs;+~?6@wk64O3=K4g&WR6xeMSr6n1?Ufh+-2kx~<5g`Y*{xk93
zEYH+&lw*bfMd<&b(>3j6GtoKm=@L^SWB3{&CF9ZE>0*4@Ok)k2L6k7xCVZia_xYuZ
z+<dB^IOkyRAnLXK!9GyM6X#j4oD-{mFYjTG%%*pq?7o%u*WD`9HPsP;@=)&Qdez+U
zU~5Y06gc`3LtAi__NvU-J5<hv1}rccq!4L8O`mTEL-6NtmCb?tr*Kb;xZf&NgwtCM
zoI+%N41nD8$ZjRhXT!5{6{f-2sKlrcw#Tt8M-uVHaX<&Rn+pc{&^SIP*XpB}5tMg5
z<B0(`L3MHlrfOpL;EF32w+{m$+s8JjvNn3lOv+PFa!M_c!ezS5M{SiDIXSuUA7y~w
zx5m<}%gd^h?Xr?$S5vU#_asD6EQEdpINbVKfqx_-#^e|`)itCy)UaOg>vcT?c<Y${
zYbxmi88j!D$5_tqk9qgmts)DV4O`ZXj$+4hwzb55T|ahEI10R$C@XA4$o~tTp7&VO
zxzgI%fJx>+3JgbN1AmIsf6FVMA1|8<N^qTQxBMAt*RKXGwRC4nAqJYmD&BX&sO2~t
zq4`z<&Zr?i_nF0JLut?a)gueWLKi=!&gLtj+^GE>_ShObx9TGm;*(>7YezpFD5OvV
zVN}&ZTPw_F4|3FzOVe>t#aKQ}(cWQBb2K(l)f=uKEmN`>P)#71gX?K7n6xq*bVTF)
z1gGJBY0g2+YUJQ=F%M3T0NcT4Dv<kuMP_M@3MQRrV^yd%gJ@V90!bkdwx8KplJb%O
zSMvx}Cpyqq@uR~htm>#+Y6ahsH1a4%)5eIoFokoE$^bvTMLhbXDWWJ2%yfhRcuY8R
zL@Wy?D9L^2*dvxroDmRGRE0rGm8LR_QN|Rhukwi_A%VFXx#aO;<2g7T{bS+Zw|}V~
z!<eui<634^xd|AzFkkM|BR?{t@JMNydDrBACW48<o@H(}<&X(>GNgb>QXjKR=~-vN
z!a%MZ6ql+`A;j<Lx?$I`OWR@+oQFN?ovJc*UpbLW-ogANMX7CAft_t6|GRf1a5X~Q
zDq$a*PaLyMW%h$;?+Z9<SM7q3R=mc&@lc*6DNGUr^G2)%g=5wJGLoRdwT%#0RrQm^
z5OHtw>cY2*c!-u7bMtFnHPJp|J63tQHEp9*fGOk3et9uaNgS>tenYR`f!`-7@)ZqN
z`!+m8yo9}-H)#4Xe&9bgGx|19y&U=mhzQ}7xxRNA%)0D851Av;Jd%z0CJJj{q5>ya
z#y)3h4|Sz}Q-J;1_h!k9gq1HW>kzgrjg9J>WEp|r!%?*m4GJd^<Q2pqxE&BqyhHdr
z^!ILmKMlmpxT)LR`{W`sflxX(-Mt07#DtLrS}9~&6)qgi$C9p<gITALJk@b%7TfDg
z6_}d!EZZ$(Yje?=oKa-wgc%|N-+D{HPQN=FpjRSV455}%pthxLHqOs1WD|MQwaYKd
zP=TDBrYAmo*Y~oOESA!ihVO|gw8Qyoi;g}a<&TzuV)yBWkGWHSC%TfZZuM-4%*5I9
zc-h+FF_tfDr>>?1u*#h@*DaYDyzC=Qk=SpTrKJzkPIiYKc@>bdPJxLRr_zXOy8>Jy
zr>~xYsAT(Qkt~C212!MU%Jjj1Q^Fcb0+#A(a%pV!;`eHMj~O2LaNev)VZFw|PJtAg
z@p^$8#nlP!?;WnxX}ZV92H$vAG^7fEQqM981I1uJb*55gC-tZB!vQB1f(bjK2%Um*
zto-lPChZZt98;T9$~Qb(cP7rRsFwC6MHwyt^NlSLg?)N_UksvJ9Q!R~*pEO(>{gv^
zH)c5=uJ{(&6(tbUl<lceV*^3!C*)=OXS*Xcnt{3g)ITrOLY`wUjqh61XiJcWIvbC=
zvQ)#{;U_O{jg!D25!D}v*U+wI?n%AB?KD8vo0Q96fF|0C?I$2zh%V3W#^}!ORq{pV
zYQm3bNfy%n*si>B3_~8mS`rswT&9AO1hOm|7~5g;M`a+oY49ns&!yn*yn7+ch>m7f
zhcX~%g?HN6Q^T!2Xy;)v5zlFSL~KRS_?Y>6kg;=KZq}j?38=1;#^suuy)A#f%U;I7
z(;NysUk$-dce&}z2sv#0*1vyq_H#1l>0)?|rRtS6Qk*f^@Vz!2c!S2^)&vU)=$wN7
zfZZIa(8BBa>)ri{K|WK`-B19(#2~Zyqe4U5Z>RlSUn%($zH+Zj#(t!8wzRp^TBWV9
zdp`*huxLy5-Yh&#J^;l4yn@g$cy};(n(`^-`l`EwsbHrLsFP%ZsAqpN5fUWO)1!RM
zIEucZjYHPzbe?J}szmW)YCmrY1)Kh5-Yb)5_=`$G0Rz6w>b+qHD*LmhQ(>>tgd??#
ze9DOUD5;kd!ku2+3fbn{^aiQPZ}mD2xOa9YHDMzg^D{tRAJi!?S|m1l3B}iwl<6JK
zMS*Cqk)Lk7$O0fnQF;V4?*XPJ3N2J3-~KL(Jr-MBtDd9md1YUKM>KJXP6*YFQT>zD
zI$}^sy&p)1>8Cyg{&}!><`610Y}P4cZ=h38{Kli~=GZ;f8A8Us4w5<UF9j>J0%$AP
z^KPak=I8CU-AJx`g-x_w4sD$$2Z)QVn?o39V=%fHIetQpPw|da@t;vrdcHS7K$lTp
zW<BTh+l}{6d8w!J##~d(|9Us5AFxm=R;gQ!^h#2(qD;8c_$m4pw{u3qNpHkX8@GgW
z8y+}4ys9Xg>UW56%G`uSkrNsJqc<=6Gcrqmoq=Qm5C=)}=UaJ0n@hyx{ylKr+1Y)i
z(@}-utjLeK7rpr3Wa$_FXaW9`TxFcdP+12oCJ|16NPZ|#QOgg=#Ei;JYnH9oQCQc0
z@1F^n{4)NVt|`idD6%0%mzC31Oj&npQS)`y#Di`f)wr1TST?m?WI01;SsGqm7cCv*
z(8$lkx*J0)Zd?sKko>&eB4d8Q8X5=3+(-j-<Y|JXLC<ELlbK_qpQBB2_*;mbsk_=?
zh^Tdo1m0p=xZq0MB`XGf;1|fYhnaY=f+Y>!l<7dss5Y}QdigXGSCv1tlY3?Z9>j{(
zCp@nq#9X8_bz(=x8iQ=af0qC|=UJ4MPb&eR+T7k&IApb3KH>YTFp@)l??2&6pqsP!
zh$Kz$v8^c>OaSdc%v&lZ6V{kILP3O98Pl{z$vJS&N7=u*k#;K&CvPD6i_9J!;}39K
zgw#n`=EvoCE{uagJ#ZMm*Ull$Fm%Tvz2_5hrWvg?r~4-gyDb!dncSPikeQJ3B2Xxf
zpHn(*(pBGqVRzk5w$=_=Tx8VPqO0G%O70(G{D<hK!Yc9wplx8*Rvh1^&ka+N7h}b<
zBne7l3nocO-hy-=O^w(d;gp~YBbbxW<o-9F>m$$!_ihN^Om+I<(Psj(38*Y_RL%;o
zN{^a*G#?T}uP%X@NlDlOC^z*P;(ENM$Ig=B82YORwW@(L+|nx6z^?ZZEPFr@sU(I&
z9aQ{ZBMSA=6_wunKIwyP^YGwmDVk`9Q%vN>s@G6YK>pw7hRfLTRP#!3KiukyAkA<P
z?@it;62kU}76A*16YItwha~ws&5}b?+naw0ohV<EqrG?kYdy?^G8@Xxv8jm+wK$Q>
zLAndH+2;DiyUK0+%t>=;)<NwpeySU=%8F(RgS+p`GTG%XWCEF9X6o)kHToF1u=VMg
zXEh<#;OPxqOZXl8Ycw@$VNk_SJ6WH$^Idiw&h_0xrNdp2+_u^HSjQ%84w8w7H{1I{
zXnQ*(7~DK*poPooR}b0=DyPC*eq(MPi4QM&$Xh6N&K7DbDEYguy_q7Ay>|LO1q;WV
z1!_Kh1C4TZZXyT7j(asY>BDT-tbtN@{zGb#d@xk;)%~npBS4sHj_f#zqN>>-?tWu1
zdB{=6yUEm2-B*tz<7k*MBoxhf>^GSc>JBHW>GTDW|A>iGEH6_U!5@A#vzef`!ZTBw
zD&-Nnw-YW6WEQMBG!L+6w`9$iCjcU(l~Uz+$1txu$_rZSXqpo>zR@2ft>LO)r#GNR
zRYIP=ELy=`a{y*6K$FuFfy-g9x_QjdlU%Itl@fd`$G$HnFX1IUTCHu=Py)#nV(aDt
ziE58ubjfSLGgNKx@Hvf0Ouh_VGsoIT^Nw?&Y2_PJ^xpZU)!D2;cw)iOvy<s_K(_9^
z*5u$(6_YKXve7QDc-&_+vB6h93LrsUa?^%9tF@sY4Xl9l`x8m6@j_pcmY`x&0-Uz?
zeVJ9laWia<<tu>>g=Vw|z3lYXgp|elw?AKw;pp2rZkfzrv7MF$S&d_Y*WcN$>8aF?
zH^weVdfFK;QE?A=Sg&!!zXb!wRh^Zo6^$@e06v2oL*LEuPgMV%0k|U~{H#ws4M-J&
zqG#Qb)o>Q|Ep;wIZBCnCrUlz#KNA_LAEH<g#K-4kPOG?2)A`%PVgBtyjk@w7l-01h
zOuP(*yeCeAH)H4g>2?~APNlbVdt$qOUQ8YROVv0Xpg=n%<LeHel0~cuh45@WXUWHb
zc5=3iI42Foo8HJjWQjsYJ`h^HPUohcM$ol3EFbV5<73PTJQN<fJjA7J&0E+wYv2}3
zx8uzpykPNM1qRckt~3|24x2ulF6l=$+JMV83UsLMKR}4YdxJhF68L}{1M8mI5g9?J
zMo49KXE%v8Dhx2c$M4VGmxV+H(p~z+5XsP#NZ=msra=_&bWjo9B-kC;!Eg?OR{X|7
z>U(c+NUR1@F?I*mT}r4{YPlum^N@KyzlaRLWYN98YlZqvo3L^%)>3`gy@JC}x4bZJ
zpNjA{=rTunY;-_~TDnWA`?dn?2Vt&gMYV#kj(pwAgBF+9wNUD8;$hfO1`nblx*qZW
ztKuS&84&%1+M4jD753BXj?DL(%dLdc_@Hc&VZMfI*BfqEJL%&>;}n7%GFHKY_*<;L
zsJ&~;5K{rFIy?gdR#Wae#e#jOvwlu|EW=0}NQ~?ED0Y%e<$QR*)7&?bzmJ}b$l^I2
zRZu~f4$tqIufL{s{rRA90Eo1z8ZX-Ni)k<hN9fqvBxNgZ4mdTr^Bp|$1fnI+9_$&S
zos9-A0|Qi5;0kF0QeIQ#2rsGvLMXrt0apsUU@U%ig0j5CDDmN#z~4m1?X1sGC{JA}
z8IMYfJo%UNX`&jgRQ&J*6h44=Ko01}s$IWD>?p=r^)+APreKiB-UU8@D_H?|;2vol
z#I)OR4qwkuiJnj)y3+@+N|jg^S&tV_gC|Zdg#qUH0S+5}H(fUuFu^tk4**|yB9ujM
zbww>bfgLPj&$Zqi%h~BqokX`SWWRhy0G2o)?x%EN-Sa|e@G+fOhiPV0XzqnSOEk&=
zByLSL)Y>_Z$VBZbI24OjfA-W6Lomx~B@7&gj(G8ngVC#JuePM?Oih8Ugkbva-8?`E
z{Wmp4&L~y)v|<}0`(_mLh(Q!rr3rJm^y?^TilS;*zbiioP?47(#*ee~@;*p*;q=81
zrUtibAuy?~s!CvZC8fwaDwEM7@6YX#h*!ON;BCV3$uyIZU1JaHv`R@C!UQvx?l^%`
zs<kQ|GZr+em^xWmckrNO2F$}dMvB+Fnfe5IYoG<C4DF@8qcH!gB)5gh!h!-rw;RSt
zd8$lfEMPvf8L`S*B5F>$nEes`U9Pmccr4S=s2!g9@Npckq;`pg2I02}zbzU6^bVgM
zm^G%3b3z5?oxYZH2!dLjyLe;O_4n_+irHGPYZ~b2eY7d$jO2zw&tus^F9jK8Ln13l
zXa=j&D*hM8%5st9bh|c&LkP9E?gct>qAp7s;*fr(torjN9uVFQ%xqgs9ajv==8(rY
z;(8)wZ<+Ng3(2TP1>laFf%l7FzTI!Pr30W?EGh`ry2$-P0;z|rf@<QArWed1TDqzk
z^WHw-uIbP9Q){;D(JM8!LQgjl54UBrfotByp=7IE;DVs_aG)(FxotYhsQg&1VNT5*
zos_zO^YL9h)}|D~SvlOJkMnQOAXNzV7HDj*Wt<VH6Z!3+T{QUnb{R-DHX{aEIbJ~p
zc0CQ{jGI_#5G7fnoZ$-!&F|e{94Knl{8(oAt6daweGzrVe#r9`<y)gsK!}#DP?gJq
z%6%7wMP#B{1~hYxs!zehbN<-~etKGTnf_V3fklkg^ITM9cl6&sMN$RtI;GOr!TTj(
zfYEIS4_0`rn%HA*<tb5d`M7cH9evNZf|$xEo6~|u4fJt*9O1QS+G94h2b_K`J!hkS
zSB){(3fP7Z;)LW?J!ex#__l^B?S4iVcQLb271U(ItSiLx{>krl-KR1(Us+2Kuj7a4
zs4Iq)rVrUTxF4Z-$NGPI=aLP=eme<e573Os#h<PPlVuafXG5D-e|W8wNQU<{C;d0N
zA=SEDSubg_728Z`V$b<T%-ZO^YrS48vB~%*0|0KTsp6Qm-XpKN5bTWj9XkCwG5k-B
zW|hEiLC1{OCF1>48f{M?!d=(lCJ|GybEesmwVVhJ8IvL-f}JIl%$R*gBNC~gq@e4S
z*-D+)RB0a$-1+&#yoI6!P>o1Hk=haZpfeI%Y@yx49C$iEc|+f&^h&aXKY)Ze#pMoP
zu5Npoi5&`C0l+V7g#-R`iDSN)YtxNnO#Cua+X?X7VAb;V!DTI@jsfM0v%5~XSH6YO
zlo%o{n?RNF?Vc4UTgf;l*1KqbDx05ziDIuu?u^t%(ruI2e>-~;z0_%Zg4X{<fOA?O
zAj=Ozd_@eEy(?UlFEE+mu}GUns9RR;=qih3W@xMLdzQECLMPql*9u7itw~D-OCWQx
z5z&)J6$MNy(X3JIYRixNQxc3!4lV?ADJ#0GdDJzo)ToC+BL3}T_(W(`@O%ybzhW<j
zFA(?8?FVs<gIx*F00rDE;pi>>Ut-ivV!$xoX^P)u>SQnrBpVk+B0P|b3kiS)&3j0z
z#xXkX4&i1uO;?8G`ey1ezHgc1_{3l8E~S7ob#(;89E6bbNvHb=c;Y=b6FbnnwPBpG
z6FQozSJZJuF#_3yOCm$L`EUdY6*W&gZbuKTn}A8_SgRH*K``ZJl0c2gLbQIMVXr)I
z2Vvey3opqQOneJe*hgy``>(?_YfTxod7+cL{EFm0_*R4&MYcV2PQ+GMR~Om9>`9FU
zV0dRzrA&zS(%<(O>e-^LSJMvcjxT`@kP`*Y)g6aZ->H1Y5=Vduq{lLR<n?Et)htlf
zNu9`RiTT^F)20Y6CwdVlU%wV0(>Ypy>ua~-z<{vI+KP*k7{OSh>b`yOdf?5Y`y8vj
zt24P&3qkiVtrs~)QZc|G7f+#r9ZG*v0~2`1Is@J^<B;7zh)P!>+?!Gk`%X44*GdL!
zRo3(f9@NsC!^x(h$UBmf;5GQKa3Yum9bLol;d5qI_~|MM`8p|VxSoLmT1Es@F?;W$
z;ba+1TFtF$u852jjRlST9eY`DI?t8Ev_#mtqc)S63}4)0d`+q3(5!_+0TmkK-PplL
z1?%tPREaMTg;f#vIpzQP??)`$mk!_inO<&Oz(-7MI<e*6IOR4tqD5>q9xccSSJ6kZ
zJBX8hriWLii#w_(x`=8ay6YyI>&|f_fe1mCdXpL-C3-_wRQEx>nJmqEY%+EM#F?0_
z9XeSyU<}Gb<hB_B)v?sQA);q+XaSiW%T0Ej`EBn4(|#u^3C;-jO*vnF4f7z0NE-8K
zg4~k<?uR26DNf5a&JCDShf6Uqzus<~Fj`IvTb+WqF10zm%(P;*w2Weu+K>#hmtC9b
zKZq18OBTFe%CRN5Z5=7?7ClVJk9SMno^m)#;uoqNEc1RRc5QoWf2*|NTm@e_>KETb
zs>_v=gRI!+_0)Cq2`oNcPzxwZGdGAZfdl<(nL+tTHAd0bKE!DxId==x%jYIb6gN|l
z_vLKnh*t9S;Ode;%yNq?csYmGX(P!H3|N4*VT4%X>!~Oh#6y{5t6Y6GXU+^fKTq;D
zBG3=V5XLghCIg@8VHpWVJt36jnitf!=X%Zq{#1kH=j36cCjxnuq_RND@79h4Oi#n2
z$F8%94?25AyuQ)w|K%Aq3WD?L5#zQ!-Y~#}5Z%S;x=L}Wj_Auztrn4Hbz_m6igRb%
zR=r3e0HAn<&#zig=Js}2`?0|Trl>)>Rfms5>FL!?Exjs~g&&h(dzmNb_L<MTiuh^V
zZK31A8L5sCRQ~;RjvkW5R@WXYE!;cv)CQ6)z!q1W=)bpRJVbZ%rM|0gH442HpFkco
z;i|1up|sA?v9vi2dG3%PDVAvse4sRLO`Ro|1U$eCM0FhZ<LlSLdvDTXm4i}umHD?H
zX=b$wwQe5=>KWxO(soP>e^a_qG6^C?fJ<!$4RO!bpWEMkg35muNP0qgDaxgiHE?Sn
z6_LnHxATA|V%O~r8L4=-;8r+s2nupC_@&aKq;7R=-Gnh)&>wt)xVEx{c)w&8ow4An
z@3@y}74coFxkT)DGjAl$*8Rd(z4IQzN1n6J{<CoF`G^`~F;U&(xak^SV!M>}=01jh
zfZ!I2SwgdOV(xoAxxOiiimtsD$MAxOq)_7y$5~Q6KuNv<Yk7@gjm9_<ebJUDsZ-~8
zrIhnG8+8#+jDmO(9_<$({(2i)n>cjFmA@N3sxe?b;ZD>N4>;d0d}*)=ToI<UG{Wx$
zx;T{dd7Y?)WNBa)z%3KLuR(4&!msI#puGlquZ@*4-x}p%*MSqjQc!Z{SukAmaHh<B
zVIpV|OyQx$D?Ur_KnA+XMY%3F+4DmJKRU@DpmVnNaDQvtW!<#mp%fNqXr>RFw!J3K
zD`_zOFr!uQR4dZ1%}Aa^mCiJ0N}T`c?tx4}7Qvx2Yz!)sDUs|?f`n|`0j#J-4eCb&
zZ>7i^{aBn>Kfo*dcAio7uQ>$PJqQ?|@f1k1;*0b;`PUW@Xq7!1?spPnkg<8u^N#rW
z`TUsTp%@kBA1n{#KP^K;>F_dIIefUZj?21+o)ZOZ?RfUK5%5}BmlWh5pRM5Iv`%lY
zR}yHAqKv=PoTlDVOagr_)Vvu?6b7IwX?IMxqF2O<?3zkF?ge?56c`DM8;Y@ANg)^&
zx5Cvw4=+K1#OB7QWCKh9vl8~uLEZ-0t&#B9@aRG+oAi&?fqjKt*g@W(X*xl?jxMnz
z^W25Df>HmjdtnvF<$&9gXs|Il^Brh>?^?KOq8m=4#aAT}%|xE48)14>O>FoVc3ra%
z(75H*5)UR~4%iA7HfDClwPtN|Jj$rPOM+q=Fdfvhj1dI*Goe^(nU|FvPcx^2*BAG$
zv`9AUit9g-HB9xMj_-)^C!g?Cdge@rcH&B$${Wd;TvW_8M90iAb3%R@KRQTWIpc|S
zB&73+96;Ci2NhD2q!*(krpso&Wul;M@5Qz0+1OB#-doM)n&esdiv!OY3m5*)91InG
zxb~W-1&t^bD}0X;4GV5q{Hj-@E#2;RlnWH6NXgXH0Cr6KB#Nl(*3eWOxo)dnd11Dk
z7PAV>`_O=ZuuczN=ycy(82WyC`T1vdV#2SoNrNc?#VXwWl9|iV;d(`TE`tO}<4_f|
z>IQF@!4o!>B<X0r!^tjb9%SZkDv|}tjQ+Say{fq+b}Hvn=PUng+Gv5}kn}IYTo&`*
zlRO`Y;z?Fx>$TX3|3eF~trZoFK(Q1}14#1YlthwWb<B@!Pl(j;U_zjlP3CPIR$=8{
z#fy+qkwlO}UnxZ6epKFcN{8rI^$vxqaQ!t2-Ee1ldeC98=xq|Xl2Kn3vHrtiF;7I)
z8gFf#KA5lc&-P^030c^zu_D96uGs?SSj+TIYMU>Ez7~o5TXThdfuOe?-QlqaB^2Hp
zl~jVlv-5Qri*i-D!s`1(?1i7~ZltLy-6qiRqhKt;>{9=YP2j#4p2@Lfo8aA~=?uyn
zsCB7=a?pDRT$NmlKANk|PBe=OuJ|`EQ`JqYl^q&~VYc-#?j7O7G8GGs2;TWU5SrCs
zeMo}}rfyuRfVaysm(bqrTa#Z$9+-xWPjHMMv>@Y<OJ()3^7Ed5UYps;r0FTQzSw~w
zcCP^t+)G?1bklbukp*Z2-p*x=Epn+_f7D@Ra3AOgVUt^#4+!*VBiTM*w+hBMH$h}q
z?;B|Mb0|7&s7hR`L_`0LeTnoDj#R;WYExIgaJvYMh>3&;dguNL?~KPOwTmRJ_x<kg
zJ=rZ4O4+#WAMyWNCtw)s^^C%xvOSh60dn1^4OHYlc@(*`%wh_vt0`N918dC)4FF*6
zb}GAeC7ZV}>rK{-xPPE=%O+RYSjXzNU_(k50!{c0Q(-)f!#i7)?wJ~AjV9H~1XY+^
z^?P!xe=<tQ39Z0gy2IZsE0b5H-`cBti0o!Et72sp!A1l_vtTM)b*z^K;BP6Oejt+L
z3ybE3lMHX7fpa^wp86jLkj}%E>o$V;NF*z}FOm!xiX7-9G-+ey)KV(Yuq@nbw!~5X
zTQ&8mlE^YVMMR~9U#=X^Tcs!`-Pb1oV3QeO#8$RF?6ZFLE#wO%v5vM}sB20KK~ttb
zZi_B<T0I*>?ND`!^~DnkW#bq+yh&YUa*wGjgbJQWNm-LhrsEu{jeV<{on^`*&+?EX
z;nB11lDLMDMV2eb={at|5@8zLNg9d2%42=PDnfi~VUo=DF6z@9Kyjq1L<)ygu_s!b
z+`Sx;HT!VUc*46X?Jf=Bj%!=ZDVJbTzz4k+mvkz-I$&KEd+c$wb?|$zf+Gzdq!Nhi
z6_pd$2Myx}?x!3ing_WxkLJ|!to1)@L6cE;@l$_-YW4Z0b_M~!K47?4OlAZ)$mo?Q
z?7_4hj7muVG4hCdGt59V8h$(f+{Po*$;Irw0|2Cj*s$*9T%w*?e_g2nOF*>0&-at3
zhldjeV0&5+^Nnfkv}k-6or}wKGs%M5Oey#1`#{f+CNw$;900X&QLdfF5+GywHL;8>
z$a)z}t$#>8b-kSY3`1@k!<@h0>Dlsa2ZRGbEpP^RiFsG5m(u);dNe3r#qpKg^+I3I
z#$bQ3`+VqWK9w>bZRYRm3q2-)XE(RDo?k&;HS(i$mak&<&m!^6XlKLwW-@LpTEIB^
zHd{e!7t8&+iDKgg9O6}T9Es23-je&%aXj^}^W&#RrlTOj_AIQ<>MEYx9kclczvx<s
zsXX~2G(jIL%Y-{|nTj*^xsqCmL8z+vnruk<OVK8*ySiMFbb)(nz4L|$Wt+t3r7rd_
zDgscIIg+Fve8Mijjx0j+aQl;Qg{m%3MR`zn1?Mgx4}jK>d8R>JU>e~c!JUW6JgK!T
z&#k_*6CLJl_nvDM{;`C<dPC}{Z|#T#V^pr`oBc@S*A$%|N!uNU@XGF8ElF!Dzrf<q
zu9PL_-qC?NEwz`X@wF_~bibG5)RP$VwmlBnSx-kiS^#1@T%We6k5UbjE^vRvrjpV0
zSNjQag;zE??RVic!XV{0fRSq$-FyEp9ff7G$*3?kInkU@{%V_-tIhv7%~{$YLExgH
zaw(<{Gk&bI3Iz_HkNI2o;@Y>EaH<@{6{#YOw#qric&sqMd-4`uQ6J`qMfwN=(H*~;
ztIrZnr#)(E8e0G611qPe&phMx6~$lg*wDM=fAZ=g)_`4i66O6MLOBuKDw~4Pq(c<3
zL)mkJAa2Z-V7Frzo!QPhv*dfWak02K#F2*L^4IS%iC^~NYieootUPp$C$CjtyvGHA
z&<e5V=ga#^`7JDLqYVGQOrHbkr1*1MJea!&Gpr+fG{CjYr;6<Y(Jv`M9Ke=PnqnJy
zfYb%A<glOLYo7c#%XR)ZLK|y%__XjWE^rfR2JbV30SmREI3f0TSBhVGr=4g&EU$CJ
zfNvm84=?ci^A{U)4p6%MQk7i|AR^6dIKyt?>*9sE`EO!^8gG+J_qv&66S~);?cIRu
z>rqD<?OGpAx?_L=f89#3WK8#Ys&){Q%mLcGvwY@k{5*0I2pFy9yGrXwG5T&79{sAc
z2!b^PN&xTidQq>!(pkYTKIb5w4bz!_P0rTKuLF`9HO<AeCj?w$&+jKh3(4<Y+j&jf
zrS<F$$eO$Q@7tT;os&8-o$N)zZ1O;yZnInu#P``OIDfXyi0fC~<1m7BdY`y#PAiG9
z^-Y$^RKAW7dCoeMcJCg+YMA~+enAkVGMLo;RBP=~y0u87=Q$5MDrn{<30R<;sCRjx
z74Yw$!{i=|h*pG`GzDEsDy9~6CM7udb(uO>IBup0GHtcaS7&{^77+HVZ&pL`2kSk_
zGf6_eXVRrb%Apc{fsQx_xfX_71sJ#FI<B^cuK{`>2$8t9eCO<t<AQGkc?+f++!~_;
zOn7h#iPh>Ta4{#~oJ)ai6uN{$R8T7Ma-0XrXy3fk3oxsJe&_ExLFN=!-e^cOSP|m!
zQUZR{`y*MEKysMHm=&ZkR}L3`!ENBm=lYDg_xLy*Vw==!)(+JVPn74zF1O6&|Df=r
zgIy?`a$J4Igqh<LxB^6HdG3n?Y}3jhCv=dJ`Q>EoV1{hl%y3)zrBdotf`HGwHPr1Q
zN*B`>D-KL^Jf0&;hN8i&TF++@UGrtnIrDJd+4JeM&hlfIH*geFS1>c>o4k(LB6HA8
zmAmSWZi8L=2n48lMsndz+J9I<j~+&UPvY?2j_i2dty-C1Bm_2Op)L8UD-(8kCgL1B
zg&?we6Y5fZ5rci6){bQhU$Os6_7ef+YY*AuLJ}_=bV-JK1^j?Y#Ip#^;5tA%tm&VY
z=K_Ied^ED}*9UPjf3_N?8iT^YurQ`3YpcTs;F`D}2iX%HX~5V=ZjC>wV3+WJYKBJB
zV-=#C!e<cOn#-rW8>*6)xeGaodQLiXB5Ot7SH2pZ^dSH2^h)_+kP61lT&ee>!(1ae
z%b|xK0szyM)$TFeNokPhxFFdmrhUYRvmaiUaNGDAlAwuraQ2Z%%DG81j!l%s4cQBD
zPT>_-A6Wj7$k4V}!Wc`T1h>tt&XI+Kf{4Ci>_SeL-rDr98e&Yrw8OLQZl9KEN1|fF
zt#_qX(&e-MrQ||q5jUZ|muqoB5jDLM$oKS!6&l?c@#AM0qk@CO+GzKyo)j??&yQMd
zH<JWqYUqp<(8zLwSLZWgX5OE%V?&d+eE3{LKtv^gj@kv`@l+ZzoFcQUKe5$+y|`^C
zdv;6{OFTZ^DR_t_Z;e?Y<+ZMx8jQE8vig|zvd#DX#X;Fq9fKQsxDMWaE}&MFH&4y6
zrihNLG$=QRu{bUozvmV4ipt)bEY=DvJK}iG(^)pibM0}q!bE*%&hb_&Yg)A`q-r>W
z#|Y>aQ&#e2=~hEFd&WCKfHrWk-V7vxL>7HX3kC;$3y*e@S?(Z2V^BvEx3%~N>(X|D
z6h_hXbKF<u80#-bvoy*5hv;FbSsX9o5)ue2b5vokGbXj#ZYTxsYHYXVmCelfpq&0F
z!y*g^bx!>H?ENf*a&OJ<M|Wl6k{hd#gU(767eu!BoGfj*kODC;I~cGftVX%v`jbtQ
zN;aH~eKNuWV<Y(m_J}ZtjPfXNB0STess{JYF)ddCn*gEi-!;L&;D$#+TEle$*+h)M
zUeUo72}J3*SJS4_&DkNjof}bNHN}7c!X<(7<O3BOEpd;*AM|{^;Ps$O>NyHtwW+lO
zR^_0DuiWvScJA<x6hY?A(CK+Nf4oB%+eG3c$;5}5TP+Ei#aPE4`mkM4Tno1}I&s^^
zR>zaPifn8snlYF(=g9ImR<iT2N*c_Gx0Fva%{%GkjGIi?I&bgy#A1k*1P$UEW<6ta
zMz60C6h-|*Dby2gDDw>qD#rDjewa2tsn_x-xnt5PMwuAtrghinddq?YCkQh3tnsz_
zJYufeK86_|tOzki$w#WA7#V8I!3n99(6+K+`GK>#Fqc%`V`r*B-vrQDs+R)jJ1a%p
ztz57GaM`1nK#$<dSDHaK;<XuWoFeFbspl|Z@W30lr9&>v{HbuPTT`wnu=ES{82B^2
zkc43Zy-T*p)Mm6!mip&vF^hQJy*#)1EL3#Pz3dLRSDrTi{@sZ2XXb#rH$clSTV{A;
zNkrLN<99)L)7Au8A04Sdi{`&`5c3OrT-iNBMwnlmQ*{6%k?ORync?aSn|0-Z;hb6~
z+D7+FGI5r8m<)Af!pljCAw`M2xv9I97fx^5MdoAM&+d#WB1AbRt?<k10BXIs*Zh;@
zRSv@Y#M7dIv%8t|P`=xrqy~WxkVCj11w!sG7)%0EsSguof|;AJ)tz~63wf<`y{@pV
z6BZi-CD^M&<c3de$zlR}Mg9L*yBpt#+2_O{=h81+8(~PWfNL3+_&AU9=`b4mSZJC=
zx`ee!)0|dg(Y{{)rS9dHJ5hW{y-Vz`sKoYkBFDY6d^wsj5m^?pPjF01>%JLgMZu4}
zZJFho>-fyG)Yp1~?c3=XXWdtjknic%<5zPdR5qsd{EtVi_=!8`jrHJyc@2RwQ6JaB
zbdO;{kVO|s6APqzp2liiSzeL!#jc_9-TLrTe3%aI>F@b^hpuEgg3>YWye!Q#%5KiJ
zE6s!_#&G<g?r%Dt5@>&QjTEaNV*fbh5J51*72#u6h{y{$C6EZ#Gh;U@>Wb9kUVV4%
z<#VM%0z{c9X6MLlL6Pcv4}d;CN)Sftm*(wRUzrVDN|Cxj5z#u?aEO_^E458uqSFs|
zes!<u9ig4(Np1Tw?3@gtPPYf04IE*$8KZq%K?rh<8Tp2@$T&%CJS^%FQg|@r`*02a
z=-g+)GJbAN72^ih=XKheq=^nIx42a@PZBMn#Finn9k8>&wx8#ZgiB2>hK1tA1e5IS
z-c6k>pukf9#qoh};&Fqa0Rem*Qv9tU!=vLiyG-A0k+ue_`F$#2umx7Y#D-6ahfR}Y
z+lG39XUMJfnCB$iUNDyixi_A$1_&*+4AuVzt#RXE6~3YZvXo+TEKyr`La$^k4cTOz
zOh>;+XJEq18sE=}nEi$5KfEwLVD{0*%k&2C0FD!S_i!<%>WDT^8S~@ySkdz=HUvw&
zXmsg(b^)Z?G0oD|-Gjzc)CfXgC{OniwE{z7`TfqOpGuiV$mwhJE<7?xQ3LvzYvq(S
z1Igcfe8IXpY+(G3P!AAt$<CNWqB^SKRiC~WM47>k0V9B#M+EC_t||3e$xd=_$CM9c
z*5z=Pb;UtjL~0$|oC7<x#}xlG<`D4lu@$gY5m_B_5=>_&2DOmE%3zt5P?EZYIPZ+N
zI_;%&OCRRQMTJmcFL38Ne20=ee2q5>Ma~|~WR%VLT+s5{fD^IJlJ&!F`vil))?E4^
z)^s`om^7u;Nthj}fd&Rx7?fs)_7z>7AJEy1kmye@ZwM+%5;fZmfva~=^kjA(v9XP5
zl1E`eVlQ+e^O(B3PhpNtwc$amB*vVeBg23(->FHowUiWbkgN)^)<)DYmQXzPO4HjE
zVZ72QaLROu*HUP{7&Mh-*|O9b!s6pI-&oYzcE5hDeVE4C2%U;mpc`^0ITQK5sLW3E
z`-I)1lQU)lT^u8a85&2)xFXM9zPfl%@#IQ-H#^7Ynb!O_wM_I=orS3ydJAYf=QjU~
znV3}nUwJL2^tDSQ!&MxIQ*@bat6DzS?e^!(d+7?O(KH@lee7G4`D{$W#JA?p_qA_G
zBr|-n`)p6v(l$AuS!>DZCd8}CRzkZ6^bUvGK<}2j90_mAQ2Yt44)|ISqKA2YBa)TO
zwv#uUSdw?8RqZYad219w6Fh0o&JnU=dTs1QQqS3mv(ltw#IV&F&pTxa&)TN)^)%q@
z0t^$J)K;H@<f#COkd3FO|D)vNnXpWFjA~(jzl0MGXO&P!R~;CNVw0Qa&7+<dK!j~2
zez&*T96W8DwE|(3Lz@Cc2by59lIh_y9sScrl-th#aFAt@KF|Q2_7{RWL%IgZkCLS`
z9R*T1)Hj%K$3_c=1)5AcH^f?%Z3_mOPDZ!d9$JWB3B$`ue61`SB+kqdHPf0k^F5S@
zDXpo<5%r)=i)2!6eeR(3qRU<(#s1*oHM}LzoVUiakDRUXk>mv&J8j}=_^p%jxO?yz
zU&qvZ3*6_e-26tVb<Z#*Y5$4lfc`ToA1%`qHx_II$3=O$@F<5gW~X=~Y~dOJUC;wh
zs&k5l!zgWx>rH4JRhSFVKZN4l*@5uxAj}oF*S4(M=DO@kvjR;$xy?)q7Vr1pQ>Eu}
z_TyxyZzsxXne}?5gO@2sKKvcCT!;@#?t!2)FX(#fi>Y?O>>>{FK%?*>n~%xcU7k_F
zT8l`19I9$5iKMca*)I+^qQJb|kiW2$3NyF;|B#Gt;dYt;#r6HHV)Zj5Q+HKxkP6jR
ze0sOEralMI$|13-3in`Zma52L%af&h`IvSc&c(lzdu+eXW9BvkrFTPKFnaNGeB4Mv
zjL=Co{SErQf0<ICiJC?XCx|*5(;FbU{RSD_+Blihg56@NboOwVOb9xp$nXu^ZI@|c
zo3N;PKE7$rJ0gyFwPS9`Y13{B#q`*HP3NwgZ#`CxX7?f?hDxw4Yw<v(V9}%9(NAC4
zTH|JPT;3b)Xk@loXf?veUv$n_3VojXQdPyD-p*!^-mnPEP7nYjZIKRw6P1?yFs;%&
zkyV(3WIg0x#oM0(s7+5KbcwFV;<@ocI`_z(0S#9Hgy*$IH3r!GqnG{J6Ha_mr84H~
z<295=_VCWWeM#OxJFC{y>6*7$!=);Y0omshwl}Pi=Jve=36UIy_v(k8=2KhR1vu-7
z#PFF)zIn5d&yN_jd>7>@a$Gi~{eo!U3x_u(B!}Qa#6c-haB}_iZB(|omqKB8FV>1q
zAHSr9c`VjUaD`~>$*0)Aie)nQmJ9*J77#s(azF1Y%(DV7xe#GT5b`k~$$yQr(zE`G
ziIv$Gk7ZZ$(s7jz6qxP-W7Q5s|Ngv9Z^rEi9+&f72?`=Lg(@qJ{F7l?kIODGFH>lE
z0X<gZ4Zi9yA6p_2$PZu@QVbW-Gw`sh!eQ#qyD5nS=x&`JcL=#<&EFb=_zz|?+ax9U
zBn&}MblMEHn;QCLIxy#%j-=(87TisnAu9K1)h`$5N#XrejHkFv`NL0dCcr(ueHd6j
zH-c(QlHb`R=}A$gz{IE+qA)OgG7z=Hde~Z3Z<~Trk5>HOO*kC}rm;T4(PnL(E{276
z=Ycux)fPZVTr<b5$0=0_H41xXZ~#^kF&_OUbhqD`yuwZ=?E`p9Z)Yo?n;qeu{5M@X
zrhH6{`FEi5ZJQ7w(vAllIuS6FENH-NkB-EcH4~7BN7R$eU8&Lj;6+uWBB>^^fi|tB
z4%hT$alM2B{-!rzfq=|+p^Is?M7G*Zp*G1TUZiZCS!O1|caTho3&L14I{nUlY9Z#0
zhK(Jp+q7d=?Ff=|e|s#rdsNka^fG(`7o{ceR{zp8D!#OXiYIMandJrG>yPaj?S?>u
ze_k$;&*Jf})IW^oXQOgThH$%j#O((<>}K@909ebN)^uxOb}I-6c>{CcD*u%ZhriC1
z;Ke%x2AlI6T9GBF5W`@-)-2l9H^E=Zw5@KK*2Rskfnf(RL?X98ca!*844Q?60r5lL
zI_iTK9j2*WD5;TVvyxRRQD2AJxL1)%r9;5_!!(Kn|4u&Y)iw!nZcTAgZ^b}`DGN8d
zBrwncoRN+OwFkp;A1F^bR{xTAF-Q3Cfv%f`7CV>A_2;Y${djPO05+jF&+x{G###EQ
zY2m0-;^qqp&V!>#!Kn7;0&9C6+Eh?p0=uA~GfV3mf0wo%Rvh^WqFwgm@O`u~Q|;S@
zean^cD=h7c6oV!0T!#0;ieMxqAT$WzMSdR6zAO<RNu7h#(6-bTm&X`SiN~>JJFUb3
z5y_@S-x5jGX(4b-hr0Q8VH1p!KMrd;+7JTMCHyI<gq72*Si260kcXKiRw#SFMu2CO
zL=aq_Sgbr~q|{E_Sq_3@(?-=ZOdIKFr0tZcE_^ZbeVyCSKo}8jAL4Z)z}(;l<7qSf
zD|^N|u11g92rlDoe<A86QP0LX3T%qz>HFONn0o~7y>g?6)sZ1FqIzLieW3`p3)b0~
z`l7osN&VAibk+x`F{I)WL%67sCFck5LCU7P<C{TZz`1w=MVCf@6VJt&u(SxUpQgO9
zqr>*Tp%>Ff<3iO>Oun7b_UUQnB_$hlLa`Ztq9&SC%KZP8=*OM`{xniMOEh6#h%JXj
zNgU9Vtqscb(29!riHuajFjzNhJ@h3Rgl=pCM))%}y-V$`-uYo}tcs~`c4N3pEEWT3
z^!1`gfw;G@X_%m@?>(SES%;)!lDr!$)u$0jiFRtlm#o2r*9R}<*>}Km807dorQJ4^
z?)ip)N#2UzfSFV=nh7J|d$wQW&7rL{a07I2c}cG`P;Jcqpo<KRYGJ9$&J!Ty63*5}
zUYV#kcU>wvU15W++tMo3Jt?&et88slwr;Ju__Ti*tYks3g}3ar%JX{C+3zGacEif{
zm+j{Lsl2y~I1>h0Rq-|f(|of7&b2S{nf1|1J>nRz0Chy}Q%p)%xfq8-f(fCdtUdlF
zrUwUPawC7;-eH)h-vMkTxU)G|nWB!>5-RXMEgKuFe5}!Ek1m1+*M==>V24^<cLrID
zMsls#62pKuBK7okFI1`Zb^ou)2LGu1UEbtY)mzkHL0RUZ+-fe>Dc5d!cJS(T3xq2g
zxU?hletK@LP=vo)B?GHfqG-lo8r~olZzuco8|p|h5xEZ}2pO#<<?Sje!)>?&jb*K_
z4{M#usss0t*oSp$tyj}x$kgNtKZc*a9lWH88Ppo8xmFu>;s^#%fUw%=Fr;AqG@+p(
zFX4wDpV)MBpM&GU6!W)y*lF~t*ez$&eyHCjX?ocXW>p=lzbLJ>MtLHysAkqD(eH0O
z85ng2AJ2=DtA9ZU{X)Kf4eOh5FWqfWJO=~M3`*5l2eEs)af?Q3H346sQc=5_ejJnU
zyCU1b>8yZ@M~pP_Qin{84}5E4-b@uFlDThfdqu4H>wz!icP!@*85-)VR5dFwE!vIG
zD2v14VvBE6LWJ0#gMWny87sQY+1&w{Evgz8=p=SPRo$)%QVI`C*)+OEe!0^{&M{7s
zoAE9X)s21`Q-(B+dH8nh<<B){*NqtRA~5-uO^X0hI-ABD=QAD`Hm!)iu?SMf{b;Q4
zn)VjA0UAM$e&>K@+Kt42^(GE#J&|zmuJx2;i8>$lLhE^p8FZPn6(DIuRordDxvEt;
zyvY$y#;%Q(6$ZoDa>?_(ZUrUq>QAg7Ir@IW-`e2RBI#B;O5+o2%@0I0{#Ds9k0o~1
zt7*U6PA^;uFrysXn6>bY7%6adX%Q<X6>s!T`-^vz6#DrHV&l#YSt(fwmyTN;+oA`<
zmZ2~{e0<h*0U1}IuspRy^{V6teY|$A5Ew;zlsBm#zSAdqQr?!Bk$_4R=@7_;O`heI
zZkLyE)-LBr<QiYK0<7+^Aw<U_+9~UU?wQEjSVb<&&6q3-7J5QiLiBP}Eg{aA+1>=m
z&Y#CoCf+3NguPh4_;lXZ-Fuu^ybM;WNzudpBU_7POV_fv3mG=u@A2IGI?~P`CQo9&
z++o7eKqz$!Y6Ohy7|K)U@9%#Z`gHlkN4vhY1?FZ6LW{!~u89obpy%$uJ@SqRHL4zL
z+4{AP4cknqHyO<2ejAy+fCe((GEJX^_;S<&42x?++oi5J#Vip>URr)WOsXep@C~Up
z4ON(f4r|jTb7`EGU93)cO86s6J=7(msFPlOn^zC@dJAtz*=rMP^bQsd+QxITZFE>9
z?Nahq7c+Y*8sU4M`rWH%TG;%Uud2`2(%={-Ux}3>hGNw^g~A<vR=LoeG~x!H(mwvU
zGM!7%0gNMJ;&21t#O(#6ir@Y=C~glXM}yi9VoT`d4a8thg8&?zq5wCT=k625Tj8En
zrz2g4q_mX5#X88%2@zxFNKw4jEu~+=;5hXy9L>#rQ?lQ!FW3xWg9A|1iO8R<%1$so
z&)>~MSqF<fF~{V5;(YyK6sPV{v2{E#IJ>yBKPh)fEGzg7yLDyihuvo-O!r$WOw!XH
z09lmtQ=?6_q~2m)DM)Y4T6E<~)m3uyJHf?yywg{Hoy;0nC*>v4!4L`~_y&!(TT)BV
zwW{kEz1woY8x22Pcj%I1&y=$Yl0YvBHg!ju(HcwRyoP0*F~6X?JCjM-jYWF&wNpp4
z8P$5NjGuO*S;>wkx`p@iXDNnRjvIqla&7sJX!WYP5B<w^FX{K?&hAejiFWI7(T1n*
z5Q}m54bMG(dY&0q$(Cf?+<2-75(~}?;;AB3xsJsvbz1W7=r66SD@H?Y3Fe%)Ri`Eb
zGuoM3BeF12S%@P*b@1o5tKCrri8tAL9e1eS^PX?dv#C<+WT&KWY(dwHGM7*S#vc-g
z@bti13c#bPaUEpd4Z++ago`Y%f3YfY<toxS`jfd3!Q-f`QrZWa)SO`cd2gEFk{CWP
zRm^@~6EC|5ZrYgDYoV!_?=Fz<sDMBgO7kYS;V`V@65F7~(drYuPK7&x9E1gQ`2$%n
zV3)z&d&aK%w4qX6YqGA64?QDZ+8t2mEsqBuPIh#(f}M4T_{3b!!r`_ZYC2EBQoe-0
zc#xUE2wwdbhUp+(1EqNI#A0u_58E7(eoXNYF$uYu4UUC($vk^MXWDl$kG=dqowQm^
zpE#j<$N=vVVsFml_77B^y@UKBeIiEdXZ&=q0+^nosVP%HOTS8;l~9eEt})FL8h<E*
zb6b=p?U%QVKH^LqsA5~Dz0VFMcxkfFnqIvrXtM3PFYV2<NzA9Sv1eti<t_KcQcX1~
zh+U&IIX@a#(EapC45XsJ_=|}D!KZSu_R~C2=5z%hjFOZT-uZG^AUzC8#dZp;bV>w!
zc3!?DfX~pVmcrL5rs1tZf3MGN^i&`M7P7&xk0Ih5se5@_;+@k9OIgVE60wJVJ*s;v
zEKR(VldVemDAmbhg+32|DMoq)pg=fSqF`G>q^A+4*c_;YimPe7gS2pgLg-&n6oVs6
zer4ZJviS@sSqz+i(Y64KPSgGG0k4yCOYnhGpGqu>Z1M<O`vewbPX&M<ZNu}Yt?7RY
z5K28X0Fv2Vb`u;J<IUNbDHnQ3K|1O-XatQPwYr0TCl3*}iKJImd7T*WO~X7}(Gdit
zE?Kl-X#lR^Lv349{6m{1pZDU6PrD|V;Kl%ngr;9F)h932B@SBhK4EZ`+agkD_*7Uh
zrLAVvSS=F!>w)A*^-Rz-q_qWl;QGafYeo22_!0XhEFcKw`MIH@SFihpLNd^V)K!UV
zm`5PI2Yg~ev`Dp|?63hjnfFwZh@`J|iCcoi&oG45XmNf)>K;lSl|V(~Yu!6@)1iK%
zm1qI55+2X)d<0LY<(!aq1(U<phj9ES!rMN3fO)rmV<v=n&c8!bIKn$66!aM1$`MZ?
zYt9jos+4?EhOQNa6Jz1i%Xw6OjGi7OY8dA8j=r^K(Yg^$YLu7K=rP1UC(doGBHjQ6
z{%#8c06S+j&BBkoRVA9+Modr1XJ@9md!~*KUms=ew1{ltfs_x6iJdl4{C_jBGba@8
zkF{2&5mg%|)Ov5CYPcH=bYNJ)oWm@(k67^mLnS={+C7`yk0|B(bcO`X*;olASk76)
z%4qb}>D=@;&Z26;PD5oAn(AGS+_<4^$&f}>6%I}2TEceWJjct`fj3cL#@eiNyi<hY
zh$V8e3*!_~N#}{G(kcR&!_G<zFM@%^?xt=I_92fer8E6!p>W1^CQ6I0g`3FD{aLDG
z>lJ6exXX(@J-;%cVKx){D*joc0w$Y*6U?53mBLoVA(1$f!#_@PpIPpBTi9pg=Zr-I
zZkGMPcZ(kFL(+Jax@80ubd8489MYyratpnJv3JUs6?zgXXH~S|L26Pcx!qnJ{lH*q
zEV*TqYRB!i_#jirnHI)Hd^^$oi|4%LMAo-qO1mg6jQTNkG9IAe09$Kd?lu}?OB`A=
z;k$GnO_}x<RBIK@y<=UDIKgu~oGzOOt2@)j${5=1i88wO`bmJabLps_po#*b%WkK0
z#8T({Q#5V^Ag5ZHfZRdWP_-q7J!=D(^+`CBYIXAz`k@KJ6@d|EJloj@{Yv|bl*kbm
zBlUSZ7p`Qexp1zck2wUQto*d1v;-)_o|vOv6Kbx`Qn%EMFa)1JZ+AKd9qVZFeV%M@
zw^0Y_f|M;W+&@Jn_+Wckh79g@lule+?qD+N5g|z$`~VFbnpnNCOP_c|mW9c|cx~?_
z@B?vzJi<F!6cz$h_gy~(6!w42Vgm3un66M|ev^4hD^2adcZwyd1ye)8SeYLV%TA7q
zK`aTZ!9(J0w`!|g-S7k2LW%l>x$ZhY@*_Xa!OS`nlKd4Zs*EKpapvq@V`R>X{iCOl
zwA@;p1O%~el6{TZGwzj=Fhjz0HkM7(APRvOD&<MPs1dzI!Mjl2>JyZ(l2@hx1GF!c
zpd)2^N};-$3wO-P<<ldQ(u(3RtIb?m?31lqK++QR_S4=GCM%|$8hlMKbj6&>K4*g8
zuO|Vx1&NLHVSv@BoqJ4s3~P<G65(ljgqe<)Y!=ARLunG`d=TZ_Z!Z$b_Hh#V6Riq!
zqiv7fnNXeJLbHd?C;S+v`}^vVKMOrd8ONh)lF68=-Jwa9gx`hNLkH6^JLv$~C^@N!
z^Tm-9reu2#&N(E)77vSR(xeZL5x$)kNEX;+dsZUK`p<idizekQ)|D0B6LNxtX^L{P
zV7@@Y12H)jnZEXg^FqvRM@&sP`NT*4!V+I;3*a)Johnh-eRS_|V5M?lp)@w5tkmoV
zr4M@rk){(Ll;TEW1A&s&$_a$}dt~hV*Ng%UVrJ|}rYD@cX}&Z#GesaVFq^T%L_k$}
z_PBuGi6LKffchD~^~C!@I$FY-UGo@DSzOMbaoofPlpIGli@`LC4vUp!idywEC3Uh-
z+oHPTGh;=Y%SOn8`Sq96OFD0wtH4Os*&g4`#-f$jLDx;>L=A1y6Bfq%s;2R{2`JW!
zHmp86+xj6?!@t{jMdZ3kD5E&u)m)y$+*k<eIPV`-r@&VKJzL5t^Ys@m@0==s7%eJt
zqW9K@!4pAXL4Ia?k7*trI+MRpx#$^cwA6g{g>w?fvJbAYuE>z&=cg<fmJhJVjHC5t
z^(@neXz~_W$&H-*%n{b9R#$mpbm0oxn{2=)hI;et1Hd7Pt@Fve*C_Z3C-2AwzYhi3
zIF56awi-g{Tk3aP%cdnl>AIwq2><qFO%dztLi;P8nkuOnHlHL%{2;L^0B;B9B7me&
z=XoFBldTH4Ao(=Q<v2r`QG~;HS@?fvnCk!J1%TcMb7V7tGP5E7jpTX2)`%QNkPH^|
z-UGnK<6Ifb_F|sFglKlY<zlTPj~h+718N}l`;4>FIO1p$)EOB&gV<s6g28(PfXd3D
z&7%vtd>ciPQ?y){X{ZnU<i=gSllk1GeUL!E=9Oiv-cytTX-1a`>0+7>4%07x_b;kC
zQ@$hyWr7=}N(^-yIHmnJZ3wHrLJkmFiZ&glhSjl@7YoZ4TGs@~O_Gn1!8M({XcYVm
z{_91c(7_MsEaK;zJ}z8woFjregouTCaNUf2=Gh^URW6SL3jX>Gtnig6YoAPxmiVTr
z%uk@}pTwFK5-{{MKL!IIT}@B>1b#n}*ezm12^u6LIYD>qPwIs5$ZqbC58n!gl=mJ%
z#*~$C=VN}(r(##Ia=@%v`eAzC=E-?wH??J14xQRUl4yb%L%r^(J}NixkCxPCnknF2
z(*{W79W<J7$&LJA5zaUulv$jaidv9FUw^iuL%@RBIm&i;FlEf%t_6>~kT~Z715>-M
z744LDoMHsjE&4(3sy+<DP>(CfA&lV6@kqCXQilWV<q8$cuWo6GoT7Kw5WmpA&PpI{
z_Zryjdll#~+hnIt7#{Igb{7zEVo6%UQ|77T*awA2Zim5+TiK$Q7JbY-&2kMjbC;?p
z_rtE{>!v6Vg{5u80QcU5t!{OgJF~6vPZdT1DGdgLM89bQm{RS}1@HB(xgUu{q6`cE
zqI~a^Q>R1=gyOr7WmIlG6_e>I6BadWlOUQ2)BSK+vb(w|Ss$R}ge>fJo|8E(EuedE
z#xKmVQL3%CK%9&3Oa>0mD}TSAdElQA3Ii5%FE5H@TuMV{aLSrE*;6W+U`Mr`7WZ=K
z&Q#WmLGKwncZZg^@Q)k;gDX#LGyAT_k`=u=K>X$ufe5D6vJa2~xv`KD|D@nMvt+-#
zRPo`OQri-IZSR7C4h;vH19++}xx!Fq;3F_oL15kq?P16~JM>gi6!;t4VVWw_r#Cq`
zI6d7$J+i|^#2^jlRJ06TOSYcq%WsOU9{CsScSHJ0lBw+t;+)AI;=*We;DKY^TXp%%
zlV;l7OnxIgw~mHY1rfqWu_~9Q%uA>NE7z1O5Ak;D(KkdNyzP2RcLmn{!bv#OJ!Ug|
zK53~q`t2A6Gjf}|`qE>zvkU6ee9h{OkK{5WHm$!>K8m~21sRJJ5FWNvEa9qVnvEvF
zxN67sx60-If7oCz5Xu`+<46&!@S}&K&tygT?}}Rhcr#*fB0JjlJvR<5<o66(GysVo
zbVL|W4{KO$HnR^cgJwf|#wO=x86Kv61rW*TA5I?Bj|nCyJ*&1h))sw;C~ZW#Q-f9O
zRHMl)DwCibJya%V+{}*uUsE}DvQ`h-<q|>Q;b{DSMo5GQ<8t}@@+C#c|JPcPjiNAy
z9kY<WlUs9sY}hUN=dFpaBD+1qWouno6!H<}<{DD3?(hz8TP4ywpm}DT2!<e{VkDdI
z{5{GObs--j-bxL9ouR@!NASds%@1!u^+e_Z9xbc(0)C(9O_T5a`7BIUDiPj|FcKvk
zBxx35lt-E|_ZL!BlmwDZbuFipliFF<(sWA%D>OUFy%A52wOL<k*89WR&;kq!$*syo
zfzW!g{~vRs`<WCkYV5IqlB(@Maa(5Po7f#4)~OzayanJk5o=J9_BfEV8$SVQR1vW0
zXNg#wgKKZ@ZPB<oV^BPE5qx(g{I~D2vt_lMe_{{TDdKN(ht|vJY3}ubOo7835^%y{
z>=tbc#z$~BQ2CGx+~OoAlgQ8|Z}Grz!-u1Ce|vMxwVIv8))I#`?OV#fKtqtNEsub_
z7INMWd9NyI&<5U|KbdV{4*wQZ<{ox(UckG~XR2qK#9OGo9UIpMGc*C}xnFQsFi_Y}
zF9rW1HAYqDKt4m|ib_x53!7q9=@l>7uolKBTx<9Asubh(YO>9u9T9_6z=NcjQS}6^
z0uni$T@XB2x~(<2FZ<(MRw;JL+QNgwL5M%V=E}}VC&M5cha5S$S}wN;2KvmXTgOy;
zJ_c`iS7H(ErTXV6uUFTSDg<yhA)tRA<YF5)$b7-wG;aYv;CD&J$EK7qWi*<go{9S7
z()6NjPC9r({7Mci|6qs_4sNuYi0Im9&QP1g=Y+q#5K17ez8C<Xkh(RYk&ZcmPFl58
z!O}JA^tW0}m=<_)B8&K1n`}M)c5iw2pJLgykCWTy5IELcySPyzTdzL)q~HllSOw6V
z%*?>Ji%0xb@-SINY6sKfk0iw4<fQitOeMTe__(ZOrhs02U9gf-3kn*-7x|_+$>Ns=
z!wGP?jh&hjcE4g*x^Y3FB=eM9ik#kDg%T2LCPjo^2fo8T9=PRZOc92f@fAKjL{jxU
z)Zhg<LFxd9->@8H5aYEUAu@LVk^OzQ@4x0WH8p-kNu58LT@Jc=^gZyCWpGHJ;%e=l
z(GRqrU3`cJh->7)4cjr*m<B6-K_ZgSEO-Y`W=-UWY%7*N_IPi|lY#5STt^cPrAFGW
zg?nqPkJz{~h?#RSg=Kh86|cv=C8%)MuPf!S`tHJ1J4kxG&p7R)XfD+@P|eTry6TWG
z_oKWyLpz>r^z1bRDDGPXUCY>{o5Pz8AkzGkT&(F=;vYtpDBbGUw(Bgof%QcN9*k-H
z{_<XuIyvS6?1+r0UFuMypNRN0&%jN9%=<BPsdfeMh6X*EZf&@0DyzJ;Q&DD!<0~+m
zS0G2T%LdWCu{!9`kU291+u-k|TwNC7)l?n1cdkx5kAT*xfgMP`^8Rh6{6;REI3m&C
zGIwQiL4nxDW3$ERSE|wY=$^HeArB3UV(=qEAqg<8qGOyFf|R9oYFKD#DANes7W})q
zRB^)`yA6X0QHs_Gi)Z!r?zlZUXkH&lC$!!VmYN4r|C|k;?!Qxx6fV)UCRVouLe~vA
zEC?UvKB2A>4(0F(%&grxJ<OI_f-zYeF0(Z5xMRg?0~kbE!_6KOvU1B&;l;9oFp{Ry
z$tJ5Lh5b0NT@#BCDMA-a`kLfU4=1SR5ZmGTTO~k2c*R5tz+TH+ZJ$n=qE6pDH?HHT
zOs=^a3)xXNUR%RDctL_sG1S06hQ32jzdD;K5`w*Cb9<Wiw=W(KLkb>;*>p*&hu%yF
zPKw5)U5iVrr8pF0^b};L6X45nQcAkxUQWJxVS5Prf9GByvw*?<6{dA771nM6vXZ$9
z)J~^S`GU~{ZK5s?xE*5dm!+NkX8vrEtw=#cwc@&PTTzd73(z{DGx6g+6Yg*|5X`it
zL*S!ID#lvQfjdU`yl0Cb(Yq3#VjR2Cmd#%+|2A&ksazMrXaVFB@OiZw@?fC@&8hyS
zQd>V37uC{rGO-^cz5sBn1)*ZwkTQT%A<_m3%y7>v@p6Nj*#EQ&47EVbQJW`D>KUvn
zTwyzM7jdYa&6y<rPWON6Z8vP_Jc!#I($^z{CaWB5e{hmXmU)BIf#=&8@zASaOIH5s
zm##td%snKh7fz9M*(67*IqG$fpJrSvoDp5!^YHsZ#-k`=llGaV+{|wAq^)Ilf0)D1
zxr&B+rsKxcpy8u!@bWCb6;B;Ti}?sfKqRcLzk`g6$-xcpos(E64qdi<p5UiPd1?6t
zNRe3bE_~Mp;?mkeCf8&fPvKJbeKO;^?r%7}$BzMt<<P`=yhKeSFzS?%3iWp(MU<JD
z#9*DjFWQpnGSmJrH%)0ZOp4m<EfT}W`{aYzoM$#ji{eWU<h7?+(w@E86Hbb3KBMoS
z@mOc?G1My77xGIGmcG5?e?}KYPNqL3l^bYnw~A503LrGJ%!~b}0!(|yABq{OkJK7M
zlqOIQbBX1w?>m93t=&{h@=Rvw68n!_THtZ+I<)UOCA2J{UwGRoYS*HUaD+%0=P&4_
zO4LvQVmvK}XHbBib$XwlHP&n!+D<+SL2cp}dWs}(r(cNB7A6BS$7z|YqIivsdMO==
zgt&ud?d{f1DdKV4PRqBM&_E)1FMkw|%VLPD<JijXAHgSV!APa!2cEm}oZNO`H<h(L
z)Bv|DU1VuGW8qpX#R<3D+lcg6Ex`_e5NW4|SykCU%rH+tn^JXuV8^@9tm3Ygx~E?E
z#_`xb;l$NC>UyIdBW?h-B`GYzMQ8qkR!O`4KPtFCjpBBD+=F`-AD(WCK+3t&C%xC2
z-8E>%@ew`!S4MRh3S^492HcKZ94Bnp;_T$f^Dv{)+)RCd!m|sq$DKGmfar1IfVucw
zZi(WzCBBc=HktYz<h|t7?)I^C$#!yg;B2ugr)LFFEAoo11Ib?4<@}|BS2c@lKOG2(
zhF?ZPM!+75t<?~<v<3$^gdBkJ(HB<mPl6!rSWJ!tL1n@lqwX<{>v8aTS^nYXTJSdJ
zCS|20+O%a_j<J;6bt*v-9np3zw~-@5muJJN7$1c`8^rRg`?!}XL5+<AdQ=iR6?QlF
zR8N1)(wFor=Q#yN@ekjRS40^Vf`L`yq-9KKK#ovY3m|w8xpumvRVada8!~S}Gl}iI
z5Ooczs36?b(Jqtk-^ok3BOm;SnkeuEzqM19I5E;gfHvZ)R`WgK_Dy@~5s~MRD&wE#
zu9_Hbu~lutkjv9Y>cO+(>c+2BT2T~~TSCmfyS}G4igm>gORcsTujTpD$5OGhYo;{{
z(0pL{OTLDPgABVzUT;xC{@=THI%NlgJ*vfA6x{`jhUyoOim;wuQ@vKFAd~8|6{x3#
zGRP!eRw)>J?w4qJu<`Q`(hx`=`i2>%V3f1h?27z#6xSYy72?OQe6@TO!i8RMhqPaX
zZ&KpycM>8}l)%X^YSuUL!A#*Tk>2IP0u_<lP!}ioVafE7Cm{k$Kr;S;H!mi6kqFJa
zvYwa~dJ(eFzwkSO_5h+He@8x28n6Mu10c1BLiU8%={&Y!`I>#x0}OO=^Q{i)|7b`Q
z#|8EZhKt`1PI!(@;~hQ5VBr9np#A@ib%l-?^FCL4pgzfudsmmRoa*PVTpPx>!77S}
z;dg4A5b^t<prLe>H!%4?#2TCMbJAkz)-qR%D9e^x<-}d-?lTarr-B?w14OXLRKb+H
z74&w#TOjfs*|^qlT~~#R?SzkZKSi;m2vD)9f@PA!3ql0@3@9?S*QkfE+r<)az(~%4
zSoU>F&{;uLaGV0h4&~jgkyiGT-8N{4csKnO*<MWy1!&O=_e4Rl7zw8P#51+J>Vbzf
zHUv)mB5Cv{YrfkS<YeI;-4OpQs1#2y<zkX+P0FwKdHGaLV8qARY<H%tQGN-<G<=}*
zj1$vVfI#C`!?t5c<l&)bou=^0d7qb&%e+5Kb4WhDS6SaDifTzomfyFq-m^gLGN|GP
zLG<(*|MRPAwk)jYhQYlE&#46l>VBJ!Yxp@y9BC9ezmiCgP1Ly$5^YJeAw^vukUS7z
zstgz?HlrihYYHC*y3-(63JU!H(-v`AmJ-lwBTQ$0)MxN?*x}7&1u@(X1dTYSV_J;-
zev?PKO+spJ5&#(!0t~1SgA}h#9c(_teLz)oi%M^aS^|xp24HO`hwHNluA?(l0KL%J
z(4=qoyn$XQ^>YMfGlo9mDTRew$@P)_-U=5vFM6>Ui1%pg8&3oV{{3>-`w+2<Bwv_)
z)c~&glu{9`i$_Z?1J~{#g{{HDp0as8v~ftpwDpHAHcB}49xM~ZU=zPW1u?O~>9Na`
zKrvu!po9y!8BAJfl}A6DviqW3_6V~vdajjbd{nf>IWC??#!`ALo5C%H=oco{kd1d`
zI6G>f|BU6NL8eJz83&3L`VO@Z@B?#Kw4yE(HZGVX<(f-yx7wlYTZFJUu8qX?O-PI-
z&=b~E7gUB5D6}sU+|L=8+VUpD=Hix``rZEi;n;HWMUOFWJ#At`S%}~HHBO(ULP5!_
z?u8~aPC3w)LM>!|I+*V*BFmr(guufD$DyNAvpJ>0gPZedv{_$E9EKj&uPm*3psAwS
ziZLcAlgy#rotE;aHZ+)Cwn}SD+m}X2aQ8KeXDXEyX)oA8dL`a-uHA%TgVe`ARdyhv
zf`sby4pzF8468E|%WPjtoW)q$_#5>r&;nny-}779=24x-23!PJue|Pdn`uA8(om+)
zFq0|a-HRofUlWqRnL{4it9b$lh2U~y6?0sZmN<qRrcykZOz(%v=S0{m)x-IJC53LI
z={weEW9|1O%Q=oO#jt69g6@wpJqA5rco4n^%RSo>a}G>D*69j3b!lyU%<I0x6Dc>S
zWX26Joznv(OGYPWmU`$d|4C^FpcM2uSsqjDj33wDK1G%aRXMVk+4U^uTn9qqCViYD
zjdl;Ig2VI(=N0|CR{|RVO<d1r+W3p7Zwqon^YrC6p)>8;qGsZ)uf!)D%MaOG<$pvE
zGe)>9gtR((vENsT6v3q>c}Zet$#5E&6eV&>t!@J-4!ePz(DWP?Ox*Zz>aga0ez1|f
z1+x;krz(f^WU{lYfng2FGRQRJ(d7C2IGT_u@7JaZDb3m#clrkiVH$;;csa!sW@pjU
zh#LK6S4@f`MqML+PVK6A>Fsx;k)V*_nimPpJ8DaGZPHZ}^kfRj!8exNqo&dn=SJ%D
z#x|}I4@QHq*Kv|{hE2`k5#6*2pJr04|BB>nn%HX-369c5<ev1yb*t)rp1L2EDywBK
zQQsD334+;{D#HI6%oW2!Jq-#KP#T-`Q?Y~Cont)BV7wt7h2E6A&qX3^J81w(aE^oW
z&!9D#S{nK>SGSC89xEyfC{62@Iy~k)O^H`;9H`7DGsAiN`Fa5fLqgR1EwiOHWV?7H
z$9)AmGZ_EdC{r@90|Mkmk4d_S%%!rSlFoVciH=mCBV<(|ndlUIRmq#YDGg<>1nK4N
z0*pD7tFl|U0rsL{d|7AGKCM~M3>nf1KKO%}PVvS(1l$1SLabkdyh777RR=MGHTnH5
zV!ClVs0NoxK;S$|P1uQig|xbwYWe9RAWQIVYOX_cLDVXj5dlofd`B8(Qkxo-THy7o
zfPUPl8-{~^tG{O`w0{hh{qH<G3A*YOs>+H<NCcKl7Yz+LJb}*Hyww+ZS3GrlC|*@V
zb<e6n*SG67BjEs6yD?u)5#<Kb-1BUd?i%=^yEkXS{D*1;&s$am6YqexR9s(Y1dK>K
zKOA2Y8F9ro^F&StQi*iX&;)!0OFtlA0D@W|O@LGs{(+JSmu;v!+N&eVcYNIB#~-k2
zx?MP*{zaJ8L+)U8eFr9QF?)}8Gyp)B&PGN2E2N5sX)?Zhp0j3Y|2Dh4ZRcCrjo4b%
zy;>9F_cvGA%4(fbUeZyj`HJl(2Zd0uM*6`8HiEl__Wg%Y{Nev&@JlS-@rL$tndZn>
zOqi)q*E%52ijqSSq|q7rt;R@}eCP__(m3q!iB2Fy1i0y4OA`c&vPu@)KB*#okfO=|
z?cn&@^Lod@;xdn_$$h~PP=Vguw|K%#3_Edp;oX<BtKvUjGjiQHef__XJN-IieC&!b
zR2-<{{Juj(<rt+ozCsBCtpo50?mytk7`3q2I`EO7!oT3vZztQ=de^5@g%^||e!V!(
z(2gJqRomGPnO%rH=s;HyP0q@Y4WysD)H8-l<Yc_6Vt@$ZFa8)GLEZV54aBv!GpmH~
zM^Vd86HIFdJImlay)A5AmoR;G;YP3umdO#N26dYT0Ct^RI=CgqplVAI06G6W-(gR9
z(IgCzZx@!bXFab)>152W$dDDz-tk?#?8*Xq#<!&k6p{Y%z;xW6h8!lAe?GXvPjVzh
z4|tgt@G$rHvx3q0hER!s9j&bpMD|MghQ@UxzupUc0x(-<C(eXmNV7wrB^~!n;4Ly-
znGLYdDneX6TbFpzbh^t!xLC#rYk0>T9RL_Ykxf(u+B_K(eH0w}I<iF9V+Ak97HNlZ
zliGF73I#Fgafl~m(GRZ3NZ=nN?cq@Yi2Cr_Sn(@D)h&4Fx;*7X0BnstaZo|s8A^Y3
z-mnpPyP-q23#1r0|8+T0xJyTg_Y0dg>P*OJEuNH;^f)Y|q(snXRs&)-rQW2L6>R;A
z6nlF}q$ki`cwi1Yup<Zj5}f{tIUmbr+qB9N_kY6F#%I04Zhwf^jFzFxh(2i-W-U=P
zgD5986s3&D9i1{6vlMi_;zf3Aa;Zbr&aW+?ZC~!t-*HXfiq4-*r*Lx;zoGe=dlF(y
ztcE@5bt)Vo>Kt95Z9^Oyr-oe!_Vmyg(H~QB-481g30jk7Sj9ty;pi8oM<iaEMAAiz
zWEt45W*-a-&uvku|3lt7g(eu)+{P8hQ!R{-{4=h!e-EutPF5rqL!Q=H{ybJjI8K7G
zZ%iE?Ma8em$4C0jjGb1WVoRl%T7T}3ey7a_W&HI9{?adYdAtJOf9hW=QS&A~PpRo}
zsS2E<1-Fs=ZpDu$%MWOKNETQ(@w|K_M$;5>S!rFvrMITD9F3k`q$ykg*~Cr|g&FWM
zVq!pyeMS}c?p5#~__htn(3h=J%K6HVX$%qy$#S7-(Wt2{VeiHc58EBs(#0RLoM=QI
zD|=E4pX7}q;kFOPoD)U*0G%i~%Bk4e<RNIqYb=D4r<xmq!$#s%c`yG`4vvK~k#$%7
zJ^_$J>ecBs?du3|kwE&3O6Lp>Bh?J$KsIgmRM8hnB%zpZ<*6@uh~Mz;Ia0yW!r%^4
zzbuA~I<d4F!hdpP#)7|bbs549q!m!`s04d5pBg>ra-6-z=5cFJ*~4Md18M+b8t$13
zP_CjnHh*Nsy4xPP%8EkHmHJFWYH_gqU#+ayWaIViPG&`zRR);~IA4g#eK=Akd{}m1
za&o4uLQM(rhHz!bqs>rO@Bc&_yD0%GH*+aapEPo`=axN@`}!jHoY(8dK?Pl(Hh{T3
z-&d5#NKdCaE{8new{xv|5eY~W?x&42j`zT6kgh^0`;qV3*1&}AXm>Q2afxqUafBLJ
z38n{aFG93AGu<W0(YDw#Xd%fwJtO%(;f*=5@Csg2hss%|NveS?;taZpK1|c*8<qrL
z3M7ni_wKtq*PVuG69LUw02F<O#D!%9;Is!U(;h}Rhfc>`Ued?iSaVS1M}uS4BXLUh
zDF@n&kS+Ju_D*OIgSQfmVcyjkRp%MV6)LvZ<+ac_JA^H+`%lE5k{Wyo8i_h`7MX2b
z_}R0zj>M8^f#j~m`mP>?8Vku*-tli2Wt|JN0(nAl9@1`3t~>;wx{p68(T6zk+2Gwd
zSPRJKHw=(fJ+T#gw&XHk5B9dg{7Ju&s#-!S28hR2L$f1GwM|H+d4NgkA+)Edg8a3m
z2$*H2e3suoxUZ;kMTaYmM0^8Xd$r57U-(Q&_i1SjdoEnmO;=QB<kccu3@(`N_L2w6
zw~Bf83}IQpwcs2guF4mWG&s-$gLn=AIY7q0T@l?1T-8QPTCwaPcv2;qrkHyj?&Q^w
ziQuNlDNk;MwkR(4JMkTLmr0@?e*$BM8v64u-+lD;8CzYR0f4DOI@y9<_UCn+x<qfq
z*}<JZw4$tI|611Tp?g-ysh3jg(eLrLoW^htkEXS0%oynaOv9)TBagT`XfbZBn~L-W
zWMlkmqi=2Mtbw}5m#R8*6PLnjkds|H1C7og{n^6+@?RmG*b6ZAFT~(TE`7}vA9lfG
zJklReBf>3}3b54;T>ZgLbBZ)+s4s-zQZz9h07*8UhA=Aq=#P9>|K*Qxw)BH%pHP72
z$Y;O#e^&g=N#fnyo-c=^!+8PEqHR_M--thw6C&k2-Z&H?wG#pB+h&orI%TNmxd&$S
z0Zzk2l_UIOc^AR|-i@Nb7>C>4^*~TqKD}j;kdn_LGX7;>OUkYX7c#S7`6A?Kjt?ZV
z{(d^X1sQIs|44e6)#U6BkZvuz-9`;F7!3`+R<^+Znl5<5MGQZAhQZXm)Ccrp>mBJl
zPJ{rm2Ux*4pT9ExH%-NT_5kAU%b0g}|C?^i(6Uhk&u^BdMR~+cx++<Aly~5Wkm!(`
zuQ4Pmjkzt`jK~QR$ff5z$}+EYcdj0)^$9OjHa(~>2)END(I_!$`5D;x*I9Ez1G<R8
zp+Loc59`x-9vy20Xhzs8m0uj{&aynI+2BkM8&k+fiz;pp5?O%ZFXmVq6ZH#HmD+f^
zNsw&l!leh{JL_4&9pQayvGOADa|!soK;*`-_&KTkmR_oeOJj4hy0V|VMWRbAO+-j%
z3b-`l87w|wfxZ}A)il;mq!v3)IFHMX=J57p+Z6>6JSSw+(1<~B>m#)cZQVatMov04
zu^MQU+3b<tksQ~$SuyATl||pY0jIcGkENnsQ|`pY9+{&J(FY#5!E7s<31fBL$;F8Y
z-!~_gT)>w{LvU5{K&2xCOh+02#+4R?O1WZ3B}`t8ayH7j7FNrk52DI;pVk(nPBqv{
zx0YqK^qzS|2YWd>s-$<S@0#^4H|zjBO=U-FYR3!IF9vR2-Id8aAP2>NCd1$L-xrpi
zWpK;?@K720)woZ+jrYlzNc(aIm%8RJpPzO=b@sv^L0JBl%~9u(N%#8y<vvbB89=72
z^5=VAj7^b*s6wNN0byx4k#`0&Fd^*ST9*n4vnS@B6EsF$wE>9@^7nyBM;ZQ3Js3z=
zZ-ls4z_EJka_seaOTpc6{`}np1Wq~5?ifL<Ozii(hvbjjrbr0~<|_12>*kPZU2orw
zEkK;P!QMc=s{%vv=ik#^1@dCu{C3vFs0B)o!OtLBGFG-=d5KT9c0N7D)r-4FSP;O7
zgXpec6k|p<q@ULa$qIA7m;To?wB$iGaSh}(yNC^LW$GaeFqk+(yQwNd+F@8(6E9z6
zTv3Q!DY;p>ua7xsN!L8mS;&B#>GVQ8%zQH1!$kej9Lu07NpUqy`S>ex8?f%Q>coDk
zcJUi+vDiHiOkN&MxF<LO1G3zou6v)z2ykNvBAQG~PpTwG5dTv$f5leK`_bv|)xe8(
z>{bUcF|X=qI`<Q?=dR+j3p2xu<T6O`3jEUgWrwGV5ehs7>`+whoS~3VJix1_3EwqJ
zzh8&_CAhEA7Gb}B(A}c91ln}IYSSY)a{EDj)3H<+Ew$uhDuw-WWrJ#zO!5Pd>Co(^
z)my_KO&Zoscnd!HTXm|A0(XGyS*!>n4pkU-P&LZbYsSK(aZl&*{s3#+7R+k#-c)%}
zPSbTY7CKJ)P%&NLYMxjfEqTb(g)F~oTNbpad0d{D6i&ZUJZM*k0&jqOFjP~~VL2!m
zJ)cxcm3oE{ms2{J)rE|W+}5iB$4TwuLR2&A@n~^PHEMmmkF&;;Ry6feE{~^mij^@(
zywQWeQ1k>ce)Hh~@~tRtu1)b)9+lVJEd!VR-<|NSU<&ove;>33JXo%lF{tzbO^n2|
zKAlY0*gH(gu%pbm*Qls3CNU{9WC3-FBOCgkd*yh}W!ahLwQdN49xJgnC}(#)@c9a<
zv?`tX&KR2@$6X!k$dl4EYUPul5z9lLZAPHK0q@sUbUVwiC#e;txBISbkn^iJAz1IM
zT{!l)^L&u6YQ}(g_Se9dd2m#x<)&fc|J7M%vYb)>hVvKrU{q}UJ%hh6xJ54YLk@fp
z>1%92HiQSm$?6vUfjyR(!jxj|1yY7>&COntJmEqO)#os=?iIFRNpRb)1G6r+h?Hm6
zt3cT)L>x}I!6`V$9&N6%SZ8=ouDL%TgP}%}?7ifME?vf4GC#l02mD9tqn58opjB3%
zTMe!Ek_t;N1C&SSe_>%BY5>r$oI`TU?^&r1)N!^3P6Q*tRvnYlJ@1R$zFOQkhA&}k
z;|<~L_T#WmxbE>b1tGKlosdV;pC>4&%9GcOm5L4P&TwY^5(A#F)r7S7?lEW9+Kf<d
zH4)Wp4IGp+%HqHFI{G+QSM06^n!Y*%6x}7oEcyrDH9W}wRPgh75trA5g%F(*hd(^I
zPyjl|99!OYGELx)Q_u@EWTxeF8<>PTnZSYicPyz%Y*X7KGc!thuY&ec4NuAG@muy`
z^#eL&2XV-kz@UT+rRsO=pQHg}k~XhwLY_FUAB>~KOljTVp7;T%+=T>>7WN*6J83dt
z&#-uVe^ps;hTyeyfJ%(CBM6(-Wc;sv=hYftA#T5H=Pc1`m6=SgZRctLB(wGO*&7p|
zb;7%zP4F_$0kXTRs4^8pK6{Q)M=*Wlc>>)ZBp+CI(H1wW>_kKLn3{%Kna?Z8VhPt>
zo$J)%B!qxTfnOdWh_`f3`}J%-R$>SYaB`gtZdRH*4ivUQ!m^tVtRYJP^-e(R&c^T9
zOa1ClYR~zKxE(@#AN7&$W`^h2Jt{xfvL6^|CV1wDC(_wlu{8tfNraUk)^iWt^`}2<
zJk;d&sYy6Mg&^q!T?rA)3^tK?-*KczP0ea`@F1;#C<xdf-LH&l*!3j94KHu|?EW|d
z#0#_NYqhG3>}xGZuov{Ud@GO)LvTxDq&u(e6lvmH3ir5dJVCt^G1RZ{u$fppJ7Y>y
z%xkTO>V^@TM71wKtRyxQPbL;Czxx9s76}U*-f&Cz%kD>zM~28nf18D01Fh;V2)<H~
z0&sl2n;z_(SX+?M{0M9FslcZ7H6naLE&nI{_HRNj>Q6wb)^j^3=Pf*c2J3hcE|#-x
zV(kFTmOdbupx>UBuR_@n8``PO{P->>)Btle;`0e24HE|fe+tQm%3u7_jKLqFi?IZA
z8eQ>l0IZ&adDm=nV0ME1mHvI5ngI$zu?UGs>dZrcjQ+K~{6-M!WZHEtO*fnYa$0~z
z;A`A}sJ|G6Wuoan6YDte8sVM4*@!X2#;)q&733_W@@*0K{F3=*K5CQmg-^$z2;H<L
z?SLFPQB-x%Ax&l%lpgek5%Hs${-eqj40FOv5~t<j-_nZSE43=BYq@21ixD$;Mp1sx
zk;VT5Jue=*Ru3<mIdY!(GD`ZG3vw`R&@P2|d^;au3R7n+2E1#Z4m(_z-0R--mtm8`
zMpcV?+VfAC9vml!LwLrW)fXeKVHNxPb&Nw4t7nUWM46!beNjVTa!2W@I&@_|e6zxC
zBa5xyYqO0s?Pkx{-Af^p2iG)NV`oJ<PLDb-gI}}9W@@_`Su|rErZc|>hs4^K2H@~?
z>5a4K@J5<Wv7udm$GO7N6&<h|#!A%m?5-*<(3}*x#$!`WfbfgShya%;IfB}3{j;-t
z|I9voGT!R@3N&z``r4(8lW`aXd8{#jzf$JQ_s|Zs4II6IeUy2ag8?}2svs=}q!g{>
z^)4SHXW0=wRD7PLMM&;g@vzhRcS-m4<7f2OOJYAQHrL3i@jV_^Q|!RhYy~l|HUH#T
z77*0xI)?-p_`N*U?)N)Fd=w^vswB7zTki5Dj_y$OZ>T6jp_Q9VIcDaU+I=K=@&(7j
zNE%b)NXtqcQfc0w#?^<mGPTp{;9B~jE^|7h20PFZ(AhZ0+hqguGnbB~FWmy?%bD3{
zqXT<#$8p0}(A%o|Cv(9N7E|i917EwQ-H1P+ety7aZV*%F1|Pr4N~FIln0V5cXb*rs
zU|KGuXusZ_m|DX89-(Wb7uZAN1XE-VHmkL?9Sd~J5=;kx;;v>3x&<uahYrcvTvR>d
z@b|RzR|!WM8ve|`_3)e<z2mpob2kxlIm61g>KJZ6%sHwcL9sJst{KL&-N*Onr5>Pc
zi|6+*V5UgjLS<Zk+cAC%m6N(oN2=4dMgKd$frqUds7OkG9EK3Y&1fr}Gc23pG&v}L
zY1Tij{8yV2Kxs{0xe8_6%ZFu~+c>3ZtQ{g3wCu6_4aACcOw8AxA*gLhVy-O)|3Tp+
zX!3aE2yt-zbd{Hyt|D2J;%?hXq+BCRuF_g6z69wB6|Su*=A1pd#+p`F0PsqgsH9b@
z<x%pMg=I?mlJr$@>B=>$ZpiGC>V1u}=LRn{_%vJNe1P2^FQa=Trp1O=Z!i}PuRfaB
z<PVxzVV&7?S0Fnn-4j!J$H}`|Xug(Ys_*}*ivCcSBmHlML{jnFi+S-anju-mU&p=<
z+F(yHBB6!c;;wd+MIih^x+W}s%xl`wC{Ske;jU!=dvfgDgenL~^TzLz8BnT`xj9}^
z6vv!S!2f)(v8kXxTw*d}@pZ5I*sSpT@OG6YJD?GC(dg^r_tFjwe6=c#+vXbFBJ`#&
zxXXzChy}NB7AeGCpGE+8G2i=fCu-e=?}_p3;q@39X+HE~G~b%ccS$eO%7N0~DVjhK
z_CdQ48X?J;++~eUZt}E!78*G*1J};-h&VPmHgKM2kpUP8!=($nqpSw48SBv$%ksrj
z?Zh3z2=en!MS!HR3S}O;Xfvlu2Fm&-jl5*{uDzkZxXg~J6fxzrL<TaQMw(ud(^u)i
zzJ_FPakqWv!m&&t8N=8bM74~&09b+2#g}M_a@S_b?Qp>=D77V;eIJ4?1<C!<cZlFn
zz+Yv*MzUG02aV!hR3Ac_(^dD3#Ao8@R6fh4fxR!;3g+8ftR2cuzY6`}D)*EWT3Cf@
zizneNyF$6F>mU~gY0m?sAvO@$!Cj?^R@>tnb}~uxok-zGam*<G0=$H_8*SN$AV~~-
zc5!x2>xdxXU6L!Mz1Q|-&%q{lhv&b50V^1&kc2MjO!9y&3jGE5l)$7+_|t&CVd27}
zk6r&`su3Y>{D4}v0nn&7u|xs)8A!Xq-T{w?iCXIb<x^ffD);u@jiY%q&e&3TH(iD3
z1PTc*7Qe7^m3F)+9m|d`6q>11V@_@jWB3G>jr4#yIP2)B#g8ejS@`>cb;EMrnKe;P
z*3Ex8s9%>4z4*J74RV0=S{F5j6(?TQH;mC*%Q*3=fA_(@Xs&s+D;g0b+Y)p3_O;6~
zEicNjbfOMoQclkPx6K38SG*RWL><u8rIZ>WjlQ3rmIXTUHF=M_C{BAwG7Sv*AlB?;
zwW0-p>47A-QyF`*XGSFRCh?hLhUyxtlDzO12FfVlnW%hw!IirNBnid)T*1}+T$mor
z-^z3L;+?chR^?p%NK-_;&~7SiV=f4k)4$Jhy-GlK;p1sgKy&9Kv$V*}n5?e>)Ewh7
zvJ6YP^Ec=u+3P$-_7mlL&@tIBQ#yS$A?BH*g@@^fWP?E2n5(WaiR-=2<_ExRQR55B
zG_Rsif_=_T$fPss;5*u_XlFIf;;w@GyAolB3*Gpg8=O+VXYK?C0>Z(&zKOsse%q~$
zv^heEji3T%o&iNvHwEK1vZ^dWw~I5qicGLic5y?iKgk+hS%buGE;G%MeZiKh%ni7D
zQ)Mv(&!lPbWj$ouG`^$fbajn*DtgPw7qKLjV#fWTD0B`!3)_KQupTpc+l$?po_0@o
zI*umdeld?g1Y#*fEi@Mg&h(5(H=`7iy^EUHpPZqAs21XzGu(UbYyV8%$8js@?n8`3
zJuh7f@D%loSGa9@4=mUF8%}l>oQ%wsPO@vP*e1`0)&&W)&EVcV8Ts=2m8kc#NZbZ*
zSC$j14)KuWD_Km7PkK+*p}Wzp3lE~E5ori=Ocdg92%dPiz{u8~8Mm^yqOr1-!h+Jy
zvK(z5b%<b};PW62@=GOf6#@Do^75Hj0A%}nH4Ho8R&)uFWlj0Rcq~O$+X53}!)8%L
zvb?1V;OVMdE$hGnlPB`@-GlOaO;C{;vNl1uwJSI({K?07g{gXZ$sBl7o%+U>wXIlY
zOLF%GK7C!s%vF*#EI~Cc@|uH?W8-DIVo9A>0H2^w2&Z)7fMBN9wDrkna*t#C`#1Xj
z@A@X~mt{<{lw8A~wF}X{hW|m;XmY(iRRR18LlBLjh{;Yb6p7MBB-w*>v94XZuM|0R
z#LYEs%YM=fa*B>bWuLihC1N$+o}b^uQ`g^|ZUpZl<uLA;Ohbo%4{*BplD1ro@0jjO
zwv39FgI$mUGJiM2z!~_zq)!nZAsM4iNqdhAAt6Q=aD~^fPOwU-m~0VabV^|^e$%|z
zs1FXOZxNLd+<{nGW5UgF9JUeLZKn%%6mI0Z;$xD6b2H(*rqc^>2ppZ&ZZ$>Deb`;)
zNr?EXjF3vv@Y4_x#E8}VE9(>v=udLzz3SZ^19hbR@-wL)qL1TRVfKcwu{0*9`@Ujt
z>ic4mUli7S6&TLE_(_msZw&R_Xk~C%;hyF6Gse74o5+6P!2N-iIb;7WhgD*cS`t$H
z`63qUhS-qiW1}?4m-F$H;63WHw3RrJTJU4rF5zQ5PbfYz;%1dIVu#Ohm(Hj;7W`m-
z%$6L5gXPQX7Dk9Xp0Oz1Nd%gV{o7xk46}rNLiaTiZl9dwJE2ainN2aXm@6Xj_koU9
zn`8JR%yU>4;0Ba;LISxn2gdBh*IGY7mtaJvg|S9yOF!$k<^YCGVU9|)r9R%Gp>EdO
zof2u@vPbZiO2sR-m&0u46)#`RA*{(it+AwF3TOxm&VH>^YO!B+2-zxoM!G9WM<dT*
zzffPs<1=~&eh*LZci<StSo_NM?*kGWoE3I2HAS))dzH@81%L_$hH?awqu1pI(8<sD
zjk@~!I?1sKPQsa8U+er8*ykWW3#2j!tk<N_jYEFi-7ez$eI>#ZV=?6e;sl3_EHm))
zYb3hgWaysmd}Yx6WLr0+fdUC3{S{RJObjCi)k?y)V&}8|D`=EAF|Ir_SvHB}Knzz%
zH8m-&)`icMBvMb=Lg*j^I;J!jN35-ej2^x0Qm`mhrq67hi`FF=?==<f^wMCRb{9Zu
zvQygagn8VvJq+A5E+(EK5%V-Npk(GcGvT}Ob7IJEiIlx4ei*B0`V;|C&BYafHfS>V
z8H;&0G0pGjaQh3XQ&SeL;#dvNeoT;Wr&9#doDtbtw#4rVMizJkZ7b9HE0lZjJhT#5
zrfZnu{?pyTIM%(3mAmMKV}#rma`Q@S<D<wi)$3ayRs7{$oGhFcq_Ue+zS*T^>cE$=
z*|GwlGdVd|vRXi|$=wp->1D3ON|dCh*_j!=ct@Ri_o6)=-s@&nj1!eB2K&lhwp(jt
zk2gW)e1!yTZ~f&?=&8cJ!B9(~{Am%|0-l})VjVFEvxyOwU!~T$N8=%t`ZZCCzIy@k
zqS@yYtC*EwW*k0@krcW!V|v%%|9S`$NI-a4#V(2WG4(*Zd&<O$x|!hwh8ZozCDp{5
z`jd#>ZLFX7%9drICrF|{Sw3>3=+53l0OPEmw<dTOVS&Uy*Dy~;bS0rv(XNs&OUK`<
zaw%LT8;gf2d=k9=frx&5zag2PqFPM}<(EtW5^L!X?B2{x^1l#MjX9t2b&gamW<R0}
zY%)lg;|BL=B+@4&$XR97)in#$7=hK|>ZIha`H{-$idRK&1)LKgeq}+V*Mm}~Vo5T4
z=Gm<ewV2%o#F*@7=P=uq&MyWUmr1sP+390a$zyQ@v0dJ31u>}*$5{6{X845}aF02F
zEj>>3kyvbmKZYEvTB0wF3{dZru>M=$LZpZ}kc;TpD_i0H<EVUsXY<=;Je(FE>Y`q{
z43KfM&OkW}Fq{{dl%RtO`2G{U#x<`yi5O}6Nd7gYFuWxos<0O*BuLSHC;wTKqzafj
zKZJ4ed@L1J7#S^fthGF@n_(I<YYD4~gQEGm#3TsJ*?zcup^_a!!<*`CYCQv_?M(4|
zou-mS)v@;kHajnAS2vU~>&p3ng)<IIfR>TmZrA(<2c)|rhmo-ZEfte}QH9fXQrupd
zEWrt%<M3^;9Be?-FT7OgV#WG`Kw(!J_??cz=7yq!N%R!a{iD8iH2qPNN#FS}?d(qJ
z{}U@HTIj#LZa%FX=&8b@1nDL$Kn$fl!T0}-;>R0ta}f$}iR!~GxL8Pw0cOse%2Hy(
zcVF=H$_INzUyL6m{7x=0YIA6{*Zmxeb9aE3GB|}bY{dQNa^N4Gji7|;Xba)Ek4IP-
z3P7inJuC=4tUU!W5EoL(kh;|~PXeL0Z8%3um$DAE+6~p+gCAouPq8!4-xa>#>oXNb
zQ6$>AZ7t*B#iP<?cGnwx#n9}55feSwg-0#UwvR*AZ60&otbH7;6=>TCp;?%641w~J
z(ApQt?^rf3u*J?k*TJ8JCaj<(4OxC;leA+7q}B<v@b6oYv^*c#$P-~kdDrwhXPj4S
ze%Vd~g(+{u#5V{?KDvAjqs|2>7=5wPj1{cnw+60YdEgJNj>Hq1r+N{Vju>!Bw0;*H
z7KEP&8oQyeJ9B$fd{ih2NM00$*S3M3s5*|B)xQ(|o>mZ3+iq@^`duFZ&;XZoow~c*
zz<gU8=78#F-a(ygYa(FLtnIO<6yJ3cXjJJw$;J0m#lJzpk`Zj%2rv8VDgx5Z@^7M1
z<S)2J)um7GSPZ)7#0)r<NOe&ydj^3?l4X;U5-LA@wr`}`nKYJJOedQ7oA6W1$BSXa
zozT9nF*-w2M;9v%zX0}iV;GrMI8*g-(X{DS<J|Plneo)J!>15V70Hi-68&H<eBd?L
z)?wnp*y!q~0*3!wHSMZ<mwPX=eOtP}E)^psNDr%+imCTb^@r2H*Dg2saBYmr#T4UC
z)5p`Swi8wYZoXb>&eXKlt`D8z%mgJ6u}N_AKAw}idfqKL7tsP+Nr`Az)Hr{t^AZii
zzVAMTNsm1dE2Y^dx1zCd08)XYVmha;4sYwu`91}Q9LBt03xZ?9H2WI87XL+Hw_41~
zTX~pCB^Y^p8TjK$tbE~qZoCt2H<XG>8CrG?9h+PJfL(#f+%Jz=mB@7h1BR|IhhBHb
zFTEu}oQ{d0`~Jk-7V`ILe(f|*X@SGw>?!!U-JR>M?Zt@E$UK}&@Mw<<Jp;QnzG5!{
z0PSa7Hr~PtA$p3NKL)@TE^Y~$cc69pi%iR1P3;1C8r-qm7e2y2-Q(O%_LnJ~;-dSl
zR+I$F;Vx*>?i3iHeJU<SplxcGI_J15rfhufcFxO${)IpSTNn^vT5ocF4iv+!si<xx
zBf}D%g*MT}6*5?RT#ONmc)#$RD-!Cag1`HJr^DQjL^o+*=tK;D-m3%<a^E`h&1|xC
z4=;u12+|ky7c$P!gDcY&-e!&nWw~wzyW7^*>7CCpox^Z7+*A=vy^4}=?iB(&jFvRq
zj@j@!W?|+$0?}`b1E4>&g_4Wc&X3wgz&lLOCCbH<Uwe>R%e9H-?*_V>nU=(7;`MQ6
zlOF#$@}9P+yvhDX_|EpT%qv-xcZxsq@=q&c-=5aD;%uW83KHh%{{ug5-;Gz`|D*IF
zIY7g@4z9jFU<>){ghSe97c>2foqUT|`kfnM-+g5$=0OkVv%+KpH_l9mslq6TOaLha
z(JE=Pi`-)Ed}kuk#7ku^(cW?g)Vv&h#1`dJp&OPVxtPo<`5`<RC4|u6T@b$CO&*h+
zoPaZ6>MbeyPMuOmrULihXe!j86+?LTK-q2cwU%Nl)+$MzNBKT5$)}wL0_Becr|Y3i
zJaLCF_HmmgiBv6BHhzu<2<k-d9Pt3RBXjNO>Nvj_Ux(oc1Fd!WV-dy0hjeqslc?eW
z4L)?3;^u6C*M^(clZ!kem);XIPK3St$TDM_i3<rrJB*AGOiI-6Qi3;O3Hm1mB`Eg_
zXDtW{rTWC@64tCu#PfTjC5iBXv>4}FWTh<+xepCEY*gKk{c<xRnQD0}tr8U%Tw2e|
zCRdWqIiP;Me}_W9JnT4?;&5gJ*<cJgyrad>7)c9rzika3x19F3BtPV0L}pU~T+Lvs
zEFj)JqPE5I*S%*B#ja{8DM2jzhdg;gIH`!;%IpO6DMKA%iF4FzeiIQzVV-miFt-T;
zw~6IQT73z5W2_LoDK0ipcRXaD1Vc;jB-FI!5~ZiyQk_=6Kx-tOscdLlK$U-yB>_KH
z!3xQqnQ((*u$9Nphr7fof0$Bg{o$78DNXmCsgC<+bv&h}$J%KDf~>N`G|j{eP7pS9
z>OSsbhzcqIJg#23IW$@xTmVd(5g_!Y=^7RGuj<IM1Q;i`U^zx>9_VfNGXzqVYwl#?
z631Vilj+}=A6GftFC&};685%TLExEclCnP<Q%{{QL6bNF<NCUjOIv;~LONC$Kbt8P
z-rl2_^l?9&1y3bOfAq`QRV5U5s^zCJuR(o4+e<E=@v%drbCGGplwH}Ttm<Wwur{D9
zV9dpkW|^HsdwJ!f)jn1Tq{~Nmn&1*XU8N<EJo%qX9}OIJ&y)1+(RLLmYX{mTaN8dg
zve_7E))Q^5-m)T&W$bdQZk72Q#kQ(xq7zcD?%M{=+#~Tp#A?ry2iJDH%2(xfs^91f
zd-p^mmdNfjww77A#)ri#WeO?XUxwloMk?1=mD*J~VM5E%d6XCt$|F2gZq+DO88Z-d
zbwCmFX|6z3_LHu?K?q!AvIb|&lz~Tx|L8e3C?dCl?RjDu^b;b(0e2$3u$Oep!cnu6
z*b@)Ra}FkzaiJm?^qO(u_cv3z)E}lGA})rlboB;NK(_L4tEHZbb2L9!A`4?_*ommv
zFQs7Y2Xn~6n5toL5KtknggJ1LDoyZM8uPIv7qVfEQoSyC!XvW2L;Ojq!FHvEy1i57
zF3vTDWHb4{A)V|OlyodEV;<CkVuc8xmb?unT4NI-QH0q-I2E=ZIK}W0=o0#--qYAB
z?guB)DEH|5!`4;ZpFn6{lCrXWK_rqKsM&dA@?iWQkHuranVba5rwu`QN~n_P;W*_#
zVqz0Da%Aln%aphh3CL#RO#G)*XeHdILtS2OlYdT8c^1ClusmKF?AG||&x~+*v%d*(
zGq`I#`PAR>r#8*_O4zy2{g$4`7E#lR1i2e?J#2KB>W?^-h+m|3A`imR(xHa!^Q(T?
zvq59|B?jM)p+%;yOvRZ|W2TkeCk|!b@C?ybY&LC<9g42YoD1j&n0~m@p#P|=<EhdH
zwq3B>(!mK3#+5#CFg|DUN*-}%mUwpighy6c*zx&}o%3nhDos2u@eVG8@AE-fv^=$}
zs}?YG(P}+|VGva+37>tjVQBR*^q8Urj}^G)-QVD)ROg~?-g{a#RM{4w`A#P$qnBVr
ziOqV?`mJvBPkOgPDI7-vml@QiBldhPHzV)$8nD~6X?|is(usZv_!K{JO@j-Pt)&lW
zKs;GIs!u5X_To1ye`)w6@)~3Ws{yp$UMXYNvFbI^2ahhht!5+s+Q@Gk)Xj<sZmQcY
zh_@ir!2@8GpHtID6n1?HcD0J+t0~7=I)CTc)st=<gUdo>aY_NcmtL@<c*0*Fc8n+A
zMo4gu_R*Ch9@Z~eG&mvhDL63R=?%`!b>>&#bX&@wm#S(A#YO>G;of!XQSV6PP>S~w
z8&zZ9E6;vJm68L;UpdktgI9{Z0MF|6NVy)PLKa52A!{jxzTHnb*o7Z7m8{QZy+C&7
zaH4mfu$pw}lYi$m5TFKUm9w_kPk@Hp8FE#|3$Ih%9C_T0NC#es92bnUMxwWRZ9@VD
z%X?9jm=iYDUuIkZYudrTfkTd|t{8qiE;EP{kDP9lcM{DppPhYQk0mKksu2ob!{8xB
zF(T24FjejTkRN0f%1k}fJq<frPt8>wG!^rgS7Gpw6*gwih9N~8sZdhJ)LDpYGx6Ef
zW^Yzyx8!MDV=5RBJ07=~3MH~`5>H_mCXxxwWFrqwB!sdCo%MdeC(N||@52cR*b7KY
zdZa}nQ%zuq38pVv4kV=+UJ3vCzTOh1GD2VysjsXrUP`^6zmT*YcvPb|U|}l0t<9WP
zkxQ+=ehts{5Q|0(74y|hnA>k*9mdmS>ijVuT8L9D5x50)mRc+-s%>J<8^JJsY_&;J
z!fIB4(U)oUkT8836i=(2;YR1B4r=aaH|4#h$;lmUiM15M<@K5^wdE5rl2sbbD#*j5
z$dYA_{JMj7F=X8VcJpW}hQ?*^1l%RT?K&+CwB2*=Ok0llFi0ZG?zZ2c*uX(`O*!PG
z4q)bZfa0O&t{#cCx%s{r4FS=WQMP}R4xY2IkrvK-#GO+bV3>+ByirZ8KbSBqY6CxC
zm>QwTv>Y1r25hQ_2kG!|sg5w1fhve<WOh|xUv*-1P}vfnt;z!=4tW_n&O_QmA;+U3
z6%-j0zF?1fP->=AJnG+UayGbbcnU+8GsbAt^xg<Y`Rs#vP-E1}mU7l0R(^p7N=uJd
zJ51Z}q9-r2s{1FZrCenQ>j}wlXE*w|ex*mI&@-OaYGZo!c!x4=9Md4!uqhCFDJGNO
znnn?7E|J)}*n`}>7Dapr+;LmpkZ11Gfe~VX@heI&pnwY{2`vY}E%Bjg9!j13G)0`N
zn}+LD9<)Rje{PAnT^^r*9%SGXA>h~s>}dk%p`CI7-c6=x>8oxlt~#}yFGU+YOJ4s$
z9n!j)=B0?k`~UZF0!pg=G<r*iUs`LoHNR67AtcWdn-HT(Y27$F;~6A`N9~tb#l!4t
zdo!;_7+H{IW&;jsN08h}PBb8=<V{8$Yf)2)IUY3#zjGKqR&_wHrbC2dpvh@-CmhVH
zboobREo?N>8@h<B9~@54v1$ODg;1@HYNZ`s;dv|~t~j~wmex#z1Gcu0&b;&hUE&p&
ztsX&(@Wh3&6kjOhNr{F3OR?;XEbj5MYceK2l*J+a!I!RxBz!V{i5+Q`xd}Fxzvuug
z?JzmP&?Ly%+%%O26oA%K>;1CKdmFPo2I#Lb+mHN+AMJl~gG_#JM&?4xa1}MHdw;Oe
z>mEjNv|s*|X@te1z0~qahWJms8=8PjVdgV98~)<BdDw#Joj1%)vqzlj_OZ##@#4O;
zOTpD<!AaZaTW3Lz7x9vp*EIvhvcJp*9`iT|C2-d*z%U2Uw`=DA8DL!c#$-jvtG09n
zHW2MNcGzNX7yP<4ioaM}%-WuBsF9@tWWds^nZ--3?(XjXxgbG^Jq}INvk5yuiqnD7
z%cia(a<u4kC5bMcB8{P@qJuZwIfnU#>hiDejZT7<y|LI&#a=K=Uv;Eeq)<~@HH=fV
z<{-#x!x*O+C-%k({(zKWSZfG;SEO)Rj!Ih{)>A$CH*|>-KZ!|XsN(wp)h-#E?ssU5
z&gb&P%V(8WD`!x$(g~DZR5d|=CFqndKItv-4hI0hOfHfu_w&)~ZL%{o>xim&huP>4
z*dzWAfzFO1^`!fP`PL%XPKE#f)-4X@BREC=1&$@y@2C3(GZ2I^hMT?{1GNB^aZ^L4
zbd}i^y`~j9k+uSOE-S1R2Dr9RHt=~{Eog4x7<94HjeM8QtwS9t+tP)%4qApI=BA85
z)cYx~gxpcxM}W@x61$P#UQK%dJ4n#l-1cWjwNl7yF+2I-1fT7w#8gP^^g?v0y)ue)
zI6(-rX&l4NU-I5ziAJE`f!WwSIl@9^EP82v;jLYqzRt#E<^<qpyrg?t*kp}TPy;yT
zVvP7ftD-TqEv9T!3My#nrt3U#KNi}Tp5<uD34!RLRYRRIi~1oSROGm&E~}g_iNiXj
zP<I`tfdU8MqS99gr~J0C(2eoRlfI1D_}o`xqS>v!;?>MCv`NV^IR)l;<kq&ai_&sL
zC=?TJX-+ExL}h)-u3pCBoN?WbwH;KheX*EslA^KxcX`SEI0es)O>3?%oT@l_uO|T8
z>FI`GPfI|MBuus8#lyUkZ807Ct}`060?}puk)boyi3{>q`gBCne4geh4fKZd*-vvP
zm`!A@bT^tux&q>2_76>=;(tR3(ExY3o7oDy*_O7u?qO~??aR-;5};4Z6IefgtMY1Z
z8ntYk>C`6LOUfG68aSlJbLyHYFIr>)kLQLa3{b=rE2qIAY3i(Bgp6MP&~0cDM#hWH
zG(ctOt{s5gC&<}T0#eLAso;9k?N(;0{`L>?yo3kS0Bi2A1}Z&9N?SnZ0WZ&f4rb1S
zmml80A|U(*a5b3ZXD~*tD!?E~C{@yg$%$_-Aiif&2_qbi$fj>tbBy{&9O#Mw-a<`R
z*f_mES!P2lU_mY09XtW>T3n`+6KY#zw$l8^MJ!$O#;~`p06LUF3I-lg9H<@vt>B!m
z4?zs`aQ?HX$Li05cqcl2OSv2yKhPGWUCzBr;FoM1i5cVWHIC-kFn&IXXhCpmQdLqZ
zvzQKCd_0EWIF%7urcETIB#!C_ugZAOtjFrr_)t1q9JPmzyz*j}a`xg}{)|?O<7AvU
z8Eobg(ET@GqHT^?_vE^y(ASpBu8;{Ly@5izN}zph{;fNz#d3uVVKqv$SPs_=sTrHN
zow_x(5F76pAl1cWL5F>K)W4a|rq(n=$#@BD@o>vrTMB`2Hm|Asz5^LJ{0fJpS`<C9
znk!mi`4G;Hf2Eg^B{KbbSf!q;ysLYfR^bilZz4HuxtfM2^1GlJrK4U?U*D+YcZLB;
z-Mr8_2z+-UHpzHDqD#!zeyE(bRwEj>s;jXcUKdauS40WF2nh$(ThUw$GhQ93A;CTB
zF}Sgn%^(?*|0Q5-QjBs2U40kc>c>8=E+;-72ASN!4Lab(!O9+%u*V|-)iKvtL-lj~
zIf60?rezF|3i9;}>z>#*d}YX$6RQO>oFT?W6DU;)^Tq4Flj1crMJ!;jQ?Yh75ZbEM
zr&!Xlv9H`fq26h1nRz+Sp*MBeg5CG%t0<;@m0Q`7kZorr35h%rYj!A5y^X6g{`L4~
zhO49Qn2nR1vrw(2MYmkC-W{AaTa?8abOI3y=8ImEaxOD^PnQ9K9}%rc2{agxAXZfz
zLj@Nmr^o$pD&Y|VzC3N6l-o0=zp}_4?9%%Ws_~GILF^iPgM<9pr7;05qwxQWYkt*$
z;WbDf!*#Zad9qqN=y=uvmJZPalHKWmnd*Om&XB@#uCxpZOoHY5^+h`?22|Fp_1`3M
zx3Cr5>SPY*^1YkG!!=xdZ-JIwTK)8vhJKn}9JK3JL=P2vBbwRhT{$dCXv4=W-KwK0
zu2JgiR`hf&KZSGJzK-!>D_yO|{&mjf8rpYw9S3jtuo0TV%Oz9$QMFgWMlV}@V6~4-
zc3vE@SuHC<FqizXuGQkxwp7P-A11U!JWK|oKWRhp@K7pUm2ZgGP#JgECvn#QPSAu(
zM{Ir{vh}gL<aF@Ad5QrmhdMtQ+9<DU(3ONtX<9>daXAXd-uyfx_*<)mLrDD0<~5(w
zG7@u;^~1v3af}Tq?{$17%Ov18<AEMBR^)^9=dX6*hAA3y&crStH?Ct*HB-9`+hWnl
zE}Xgr9MXA{2^MGG-htloZ|+2+3KHoT+~DMU9ti4*<R%Ap3Z<5y;T>*IdQMg`LDccx
zRD2!GZ7SG|RX$f5r`j9Af*VI{#^;QnuyEWIWw>|yM&oET9UKPTs4OF~-0Od8m%?K|
z-5HcK^^7I3*DrN=_E@`SnI#FLk6!Vx+L>Qq^4+w{@H*>4Z`P*?X0!)1d1o0aWG5qI
zg9=b4ROy`~^UG>NOE#+%-M)owYL~6*((^6l>8^Ewj9%M$xN)PQnTpVjM>N{deisPP
zH)~8Kt6RFtG)JjKOJ=*$BHkmhG*>#a7phfe6T6T^mY%oNjRFI_c7>bpt?dzonn@K1
z;3dG4lUSe!cyvW8fp{6r8EWIBc2~xG+F4R3Y1oTu$RjQ*LkLRy;b;9<#CNt(l(!Y?
z`*sfgw1ZhR26c^f-M{22;I1d=*k5h3CFJbaK2j&_{ga`W=P!@!Z{;*7#mNn@OCehK
zq1_L7{#0s>I4(`EqHNMPmxk_DK*bbdG0ScsUp7rgtq~dp5|M(Azi^BXLv0~PfySJ^
zrQ~%NzIly<<^(uIG{v(K?)bay?vnzqmG(w8FUAv?T9;)g;55S+ebEy8^5Bdh;)Zwi
zN=koH2$q6?Uj5=jg@AMLJMd=Rlrm8wvnpcjpAWgBT`pbN5KVjR0jLnd(dSOTu0_sz
z1sVS05k5JwF~+kb0mwWQFh7@t5t}8yL)Bcwd!1WLx#S$)H#=!Ln}}hD*Ac1?3+k|?
z3XP2y?gn2>veWuhl``l}$hS&+bGO51dgA)lvGrsQ!gno6DXW6ljMe~2KYfdl<2wAT
zE}b0jaL>RA@&eDIr!_N*<U3;xBI@I_K}3JM`p|*<H*&=yI{6vjvIc#ZcQ5=B(<vDN
zsDc{S`V#HZ)~kV0zX55?a1@h!kOEVdxnS233NV_JVm8e@Dh?FPR(F$V<bv)LV#-ra
zNB{`3r}{DYRgtzr0+|CQQaau89p^7kAqUS~T&%l;8#pk&(h()d%ijMgAvO3y^xK4^
zlTaOLrAa&oCS|80_)!9n55uE*9QZ~JEZ(MK)QYomE1V$hQ@&m2b)bDGSj&XmOWSb0
zX<_v@7FJ!ED)LF8i6<Cbg9px{%IdK(rP}yVX34m6zS&Th0Wa+2RT=Li;{i`#{RFS_
z{Ez^~67b?QDJrA;Xqu6>4q&;cf=LDA=!|86`1{1|mG#-Bg~lVx9hCPkmFY89$XTVi
z*G}<A#)X>z`EW1RP!6mLsVl7dR`fJ2V~sOZpK)Sy;*x)pQi>gbwb9+@igX=~HNOTo
zDWxnM!08xOaoxtUIY}9>QqJ`vI!$=q^<NU{B+6NZ*x(2f*pWU++U;NLk{LUbY7Ow%
zMutHR1x#X;-TtcIE8$Ym3TSAD8b#z?&=0_WZx_G{+viXNf6LeMhhIsMjC~96Tshu~
zALH)kh!_M`&m@Njwu4-mU_L!sU_gYszp#I&$0o%=dKbEgQ5fVyEGx9<kOnv&m!B`9
z{5gG_$>s$c*o(NLgWj~$ek0Y#&y>BHd%&*{N0@?#X9=rVb(XYbgp-)%4w_8OZhc`y
zGS+QX$Wyg@coRb#o`sPHjhS0%=}&+o9X->b-Cp&;3tBLMFgKlCf4jdGw=d}@2Qm5?
zB_ncQFg$bquujp#txe~CpVCt~jS+y5DOGxg=GAw^`)yA7@xb2PI;wLN3RHfve<yz<
zq*tm@i^7aN)u@=od7gj<zq;bVH+-`DE5CQlI8r6p{NW9Js>!l>03hHwlB2EPC0$bG
z#;I~z*(t?c5x;$!7y4^^eaUpZYHH=cOG}brt8+aBT<1SWYSQL;;>kDG_k-Jbgc}Kn
z*14X=@GcZB&g<KNT;!t(NdOb;Esd=(0x{(8PP3<Lqd8y!aJPyc6^xSlSlTEsW^3`c
z0UM>RB^Hkw&1T%2_PRa+r?IXgm<*KUo@<L&zkzW9Wa_x(>ko&s$uN;d)+M8TizKW_
z`<kRyGcf1Y{`)3K2u{$#oU-bA_>IwGZ+Wxbr$PbTU|9KyVkV6-SncW1A_t1Z{Ms7k
zw|wEKzeFa4u8h<12AE<4q8qN!a39Ymx$W@A|7QLg{xGOWKxd6ENi#txADMqQHq5(;
zMo~Hu=1sqNymhyFJYRQ1PXvGUB}t;1j6%|AYk6+b%~wc~Ug2mSGp?QsVrUoK!oF%N
zF~IcX<u1bQ9uF!;Mpl&46P=$@_hgM?*xwZEk)YWt#+%{>=}#?g(QQJR)b7~b&0AHb
zrfKJ4?UhtYxxeLY0kcy)AyBzWQv)MkSU``=3Kj>hi~m%3!4*I|P4S0%@3qcVu%>vX
zjfr%#<2ZMY;)*O1VcZDA9>$WK_Br8{LMcz3N-iNEm@5RZWogP;Vpg(8?`RXVrch_7
ziFNnLV%5QWs6qQIbZ(xKLwVv^usK$hiXgu4tJFmFc8LHcmpu$6q+MH|zHHXVuj*<s
zUWI;g1p<{c2M`>z-+KYxPZQC;^QUrXK4&fKir=j*&|$?icZ!z7z2ZRJJS3-$pY1tF
zJVJeeb!>Za@16cOKl@G*b*@_1gIPDD0S@tM>a7}Gv(i;Ae?=k8NTqWwuZmU&n5Eb~
zYTw>18&gc^I#Y0Vd_rWuh&{tw?V~&YR?4tkQ{Eqq=}X@z;qB~(dGySPW4|~4f<Y-&
z$Tqf1AusfY6Zor#?omK4j!71{(a2KVA>9Y?jq^_=l}6$BL8Z0uV$p_8^7hJKZwn@$
zLGcT((R+lp*La%I+0RbVStr}1sjEK9bD!Xtm=8&HXF{?E_3Q{Zfx13tCL;v2pC^^(
zsF_Dae<~pa1thlE>mf{1lhU*;VjV{*XwOhXc5;D-M;vZ09-%nwPNX9ygGGEP*5=|%
zD!Q_I4%}u{7gVUZ<$1*QFA$`aA-;z8o&VG`i)clMDpsv6egtBQ(WV?a1>x9}S%%3)
zfB;IMnScM5=GOSs+crFNrVebTJmUyaioeVu3>=3_55_2TBycQ~`cnp1Vwu;qnxsHD
zqcAPPtX7}Pg^a{%iB=Oba_`wHbZq;i-)G)UC@$}q%}BRnXT$_}&@54xB}y-T4fWET
zgCDa?HEIomA^>6WX0cvAKy1&`bCZUc;53LU0#wq}^3&6kx$C(-eL2mGsK>m>seTs?
zz9cpq4#_5|Xti7SpnQZ=k9(+Q1$|>JZ_wcef1;sD9ylJ_D5w4zY;cu@yUg1%nd2oi
zPZZ?!*;%NY5VEx#`mb{?^xb(40R_-CC*VR4(7U!AJQ0&;?a`wzYm0k%b7E59pi9Z&
zRWYD`H8yfukjkl&p8|)@Y)jSop#<gd-;1#kQgC=kbDAPAk-31L8D?2#L<)2r{GHxW
z;s~9p-g5|tspg7FRHCyUQMRS^+f8i<e^5afz|K|IVR%~4l82NPsP7LpGIOtg%LZnn
zz8GFo=!ueGUnSV!$Ef?&8`?xy5M+8D_u{wEC*BN$An|u<!422F+B;hT6j5U4d909!
zCF8oiLivcA3O9iLvNW!rMP`M~jJ-xD&#GH#CFwlC$R}Vr8L(fI%DsC#ZkFF~IS{#y
zj2&wfZPI5Gc6klBq-c|OI09ZXi%l;}pD^TG@xN9ZH;58&@Y5ik<SSEs*O_{CMGR^B
z5>V7V&_$WO{|lnTGF#t@9V)jMS%VP5AA`R)d8+X6DN_vrxuW3QcENTR4Le-=mtsTU
zT#LjYY9)wlia}vA@(jtDSKfQwZ!mL;DF&?RO`{bxZ0CU#P%Dx~Xo6l*Q3>cKT{Ni@
z0UpV0&YtV@L*$l}%HQwN(_`F36{qcmYv!EKkK(EClN1llY8PqkLCC@B<q8tnPzPW`
zG3UwiZH*Y73s&((JraWyX&e?-^EZ*Bxh7CrUhREL!F8LCx6Y?uDY6>z(A_F{Dl3Y(
z({{+wHU|!JZe!jO8Fcnxyn({}3ACSe9*?+QB0(+tx_%fYnc$N=uHz^(VY-6Jk*h&F
z^LCqHW1_aLn)KRGqQi5*ZZ)lq?TfSW8U~mFhcqv#=1Fle$*AHQ6*xn>x<Q=t#SW&m
zHGnOE+D+I&MX3LS9Zu~9@lI?S_3ulYm`sE>l!qCf>TFaMD=SRWQw*9omxN3keqIfV
zLVzwB@-d}{hZ8c&rbQcC;{HH<$@@3nFKbipb2qu?E<?|{Jp@SHF1Ph{1WQ6Z)}HoJ
zBS<~Wk6WG*SOFyqkh-5-*j%Q7xFUeUh&RH3&vH%!=tbROE<|xGuQsXNuijZS0f=|h
zF>`lFXrdfino_zpg*eF0U4Pba+w<UjUkhzU7g&^%m+C00CD0rrjp#-k&GikFF7$@i
z^Bn)M7{AMQ6fzH>ABpXCwZ5h_>e}Ioag@$Wp<sP7{sFHiI-bj?)|V;yYhe_&q}9Za
zC$7(~Ze{GurRm;j8r)AA@LRR*X%{EY1mc4nRqC9So&ogTuKI^i%P>khYl|ojP)D})
zy%xW?18Rw>%5Oqgn!m+1&k#q{2(R5U!kZ$-Gm4ba)0FeI(^3x09Qmp;lAh^PZ8HH3
z8Wvqb3d}z1U-K0K^?}bq88<pD`^1PfOX}fZ<NPC0R<1a}0KhdqDL79dFtoOH{EZCD
zd-B6Ga%LWkD;El@j}WtO6Jf)%`16n2DETNML9k|m5f;yM_2Bn*^b~N09aLP5saa9U
z>=Zifrtlvz)b3K=>Q?jIrI_%7VaTouk)KiFVh=#<E%U|0Se4Oj)3`xVa~~A=z_^kF
z_>fi(_-x0wPj|@0%u(_ViGVnYKMMV{^N8|H{)yX#qQyr|aat~k<k&S-o?o6g(ZGIZ
zPt|2}emm_&P<v5^ErZY6V2ocJTy`3BY15as(fXYZRhwZIto;XedYaC7O%ItY7eQi3
zqu9qlK9IdZIgtie`a_#fXUG$dZj;ZYa6NadT1&Ql_{M;uH>p0z)f<aGm<emt5C`O~
zB+AFjLR~=`C56Bl&6}j!r|fN-auW8)fWBg#UJMs_3G={{=Z?yMScu64!TFkW_FD##
zv<A0ncdpax(B-S=R5Vv&J0CjtHxU?-mf-X3CO$gqgsYw&RHAKkh+O7G7YySp#0lDw
zXSI&QGFCTx3j$6QBE9b>Q=e$zYG-!3Cpf7UcFDy5c8REz-=Sjm7YpfJUo5hR`E67H
z=S)PVjrQBs@BuhVGkR94U9)3`Y)HaiBQ{h_t}Nw2IMpgW2)4BC%W*a3UYVW12g=`_
zPhqCX7g5)!epU$w#Ly(`8_mIaWE+r`MGfkR8(9}i@_lkA&u0Rzv8r-)i3(PIX<J8M
zr}xhz6^v7Z<}=V|u7x$OdIQNVNOeHPP?dPQGzat-!TArsYj>$A*wgts!yuFqQ~?H|
z4IlVQ3y`!*IzEbA@y<msYrG9dEA6Ow5axlaynnxC^trgaBZAK2?*Bh$pIfEm{tZBM
zWAoPDXEJB-!XE=(xFAs5!LTzO<NK|c2LX2?f$9Bev{@5`CNub-GV7*Durx2q<Vja}
z&|iegfJqsm7M1<ctt(W|4gGsJ6VB&;eSPQ2!Q2`or5ZnxUa_%lb_r0|CvYH(4d=Zq
zj<qt9aMLpwv`5U6d$GQlC*wVZj?x4(etnsrAnhu?Vo=;Dl0R~8oQhCeT~%BuuT6!@
zS6huA@<;hpcT57?;JcG&WR#VU*6qYBFA91m=SyTht(-mNu5wkiRLVD)iSgdr!<=cB
zbva^+ak?3|Cy{z*IHm9K{xtTjEPNRCU0^gOkA{6e!34V1I*ir_&=i5d-mc7H%r$JV
zh_0s!Pwjp&V%naA<^w}Q@>OIV29Sq*xyu>lq|$Kt?*+#vr*goU(<ckzBr$i!^Z>HJ
zzm&ZlGMLm3A<t^0m};q`_-#w^SKXKfR1zL@5((}u__af=OTaT}p>Yjuxu2>r{`P-E
zjfRe-lEnyq+g6J#ouD^TIS(GEYJzn)hE%HR$FQEH?1hl;VzV_l7l!-n*CSIV{nwLu
zN7x)u7iFm*Y$5sF(JPLmta7*Ny93w7@OES^{(C{orpe%$Hpc+)|G^W@PS`z#_cZ^L
zw(Sc!7+pX(f=5=h@Nx)g)myq6DN`jj);2Eo`>}<jv15;9{Qx;Y#=rZQIXL+|v&K0-
zEZ6ED>GzSK-d7^mNBW-VnZuoEOb8QQ_$!M5jf(IsG&!}Z%e$AxX_4`AW&yicEMPIF
zm~3#mG2dgWyMhs-e1}^@)AJI|Vf)=#ANYvD<hflo7n)E-7uN#GD>DqOK>rIhgb>Ww
zcSq)0kZPsB1s;qUt1{4>cBCczRdux5j-IQbhR9H%n8S|>ATytJ)`@611%_B^EUgLJ
zI;vsvPWN>F!cT;GdYB>RJBSE9Tvtx`d0k-mh#<VPR&J;m!tY`AZd(qC>jM09>P;yI
z{q$Js3gs*v7zx|bD4NnqX$`qft!r}-zsrDJ!~vf1{fBy{Hp$()bpJF1?OT8CcMhcb
zA>Ya5Bq@U<dO<L9_HJ~~^6Da1-Uh-GB&ev^fg)LN-3*N`szV*rmJkADQnB7#4ySyj
zOZM{!hG*1o@%=50jx6ZHhMoN-Jx$|J;j4B*FU&p9Vz*3ss))N&f{p-SDDw^4%4PJW
zc8c@9C0{ilkX`Rv>AcE*_zc7RluQJIe0Cgs49hpH^b3lQZY@A-QWAf@=<cehjY#NH
zY|I1eh$^$WZhG`62u5_+iVDhW;+2Me@+jLJ;8qUIA4G=@I_=Qz#(o#1O~q-~rU^WH
zb_Q5yu4KwfS~em4LgMu+z3k*><B)Al3&HX6+N$R16Q@Zah)&pxgbG_f+wkP5OXxP?
z|IRNt05lv{*yZQV?4HUT4RY5O>S`%U>XVv-`Dg!>N~2rR5LVCc<z{p9`}9953N|Y`
zS9kLK(>3&r;p#d?iwOz=$hZL6x}(`?m)wpX9UuYCl^=N8J{amxPJs;cYVY0srfU*W
zc4vJJlJ$M?-J771b>O~#UTJPQ4q9)C91`+!FL&?o#7+lHqr5rj=Yg6$D(8^UO0}_3
z{c-O4&O)S^NjwJElt6X#qk=X;_6{{v1<(Kuj;nH41W?Ov2`xS){3k%s?81ZILdJ%h
zL`jE66JW1u=^N>uuoPX^`ZWt>+vtAEk4~fPms>fP0x{CwqqvCFgz=j{WR55_XyYW%
znr@~CHG9Zja{Ew)ymaikADAy|K@J>f-t>=Wh}N_9L%jgXvkS!w%V&4i1eh)6VKu-&
zBMnYXjNt=&<BW5Sa;r3GO$GJ8*a-hi=2bWwgCh<Q4GH<Kb4cI>*Byk|evS%Y)cLo)
z=6UJ&{Pt2+%$`Cxs8)Ost0u_!@I#`i6-o_i$wHollaFevvC(FpzYKPNM$IHOF@g<{
z@AwwT8?Z?*gE~Owkp!-7%$I1|j{qCeAEXt#kSRvkfC3q50%{0NW%qp}iH(7s2z{k_
zS3U6!Z2FsjuTl<v7AY!tkF$XspGnT}&aKhx8yzt}L-Ex0mG;<B+<Ln<!%(fdy{eB`
zvsqc@X|bc9xC***ydkEhZp_8+s=zXj%T?W@e`M*wo#aJPyx`Ke#Kx;_iYazxm^Njl
z<T(Fly;3n^*%zf1egFSnM`i+9>IT_zXQ32?S7b)7a2OEX62Q;GBE5T%c|f>KOI|%u
z%@;uSImO=zA!D@CM|Luwgosg-e~P9Ps}h$v%x20vUAubMU%4B|uCBfT%-Pox?y_<^
zYaIZ!YzvZ3cF>MGxPuE}<gPM60{4X4R(Cg=B!V;ph^E+KCYEVgaiA~C{5b$jUy`8Z
z!U$xmvAHvItOKetD8h2(9zPod;9%=FZPUdi3iuze9n*hU)6QF=ZoT!c@*Oi}69sK5
zGim|K;t+N$MsYH9Bf`lPYS`-V<=k$w#TC{<`PcPc%qh$nIwMj#$;(4^hQ$k_48pi|
zhW+G?t?8Hu54PG13{i1d6`ShLHWm|Xu8}vtBjIl3P_@0igU`d+MOPQG*vHk-^y#uV
zb1{|}2rAdq%_OabM4hW_e`(?L@Dex{##m4ZITtVwnPu!VCcrK>^d~k{Bg6?Yu_?82
z%J>QNSr=-Y&h~}TMd@Oa84nZAIv|_iRg!+z1gil0liE&}?hKUkRm>JN#vxXdztRz-
zjWk%qlwU$d(zxLN0T;is=c_~iC(PWWIwe1kh}fMnQDMkAJh<PmmEJ7CL@(J6j#^hN
zR>TiE76tV2am@fZh!pW4aOzb)%D5Fgu6Q51w|j)uPZ4Kp&m^9EH5`{LzLm=Sjptsq
zTGbfk*(WE-e{?Kz+uX!8@o?6Cd?4d=hVL8{>}26QhmkpzNiYcd*r_Rm!0qM{NylR-
zVFKZt2{;zrl87|T9Yb^jj75HUD?*cMG{G*t@Udd^StjSM?h8z!gYyjs&v{j_3v`4y
z<<$Z$sejB}m>5Y!j|N^HS}Jx}2#F|EJYIXS+O*o9+>MCrlVvu1S@xsGmvEkQmXG>7
zv%$9g8d=He7--HYHWz{Ub|hv@KJ608;?h9mv;Q(39K~$D!i(+jh$Py596i}5f00%c
zEZH<`{xqQ@O7n0PxcTeP|0#lARYv!z8Nssd)Z$I?&G>uF+T@1Vw)R>ZD-<`$0hVt;
zQ@y?FQ8OG)s)t<z6TyBg-7f0VzN9$le^Ud={0u^9#Og*a?M;;~<^v)4g_pIm#Onii
zcKV6RL~OIEGN`XMT00??*%Yh{HvD_{zte3<o*60Nkob2Wu5%{4@<c2Iy4DTM4P1l?
zj+2k!1uEM`=}xNXyR02s;czG?!FJ$A8_F9Cb(?8O&B-)vJDEucp&@JZ^pb$YN&UyG
zbuAm_4-3Nis|*6{k+Av+U^zmB#{undZ3-uDP-)qX!&9DQQ>G9U$Qsg!nkv_RUMm7X
zbsDSzy9Mbx4k4gbrBsBmI+^^>IoU(*PBP;V)i7>5GcHBU87d90F~No2M@woGn>q*F
zT0pyq9VpDB;5fRiOYIC5<Y38|H>USi4)y(XXCSur3IIbZtb?~f9<k^`Vf?jU5<e>1
zuO7pA<otlk_t>scbOr$9InRr0i2D<lAkL@IML>*suTBCFTx$g`4tXQ^3DA(s5Nrq&
z{w#5Ps`AEk7|$tS3TsI-Vp$fJ^B;Gt7J~0b+Yc*Xg?*RA<gRhRr8A1(So1In-_ZM6
zM%chPWaOQWn0^`=o=*(Tf$M-{@+#)y2F;lo-8Xp*%GYj_x@<ZtTWh&X6|xA-vtR6^
zxzy}kdS6WlMp5+|b`us!Fn<Li>=t6Mo^XLDrTSdRBH(7V8Wqj)Xn6|*Q*yL60<da1
z+UM3N?_*gEbn>_xADOVdmNJBw$U?zRJ4Bdt*lRfgerUdt?uu#_`M1?ya3g&$&zGC@
zH<5FGFSg2MnmFn`G0^PL>pHIc9piPEoMVdjjX_34gmH)J84DgiT?b;Tk5F6048_kO
zY9Lq9h#^k@dy0bnGwP??erg5X#GG69QuR{}Zl-oHiLp3~vLXOnzroDCa@#_diTVxC
zCPEJCyZJ>rTzFz6A+_9Ae0VsD&i|`~UC6n6xUGy|6Qz2D(0r63*QN_o8V^hG+nLT_
zrj=m~ldV(HcoyEL>$E<JZpZsCE3yU@p}*+>%(c>S4l-p{6rUX7#IprQ1obw$GGwDS
zt$b*+DTBcosdv57jHrxH`F0ABB#|E}p_4D=UA+JN^TA}dW-3E0dZ}4q?#Gh~m(T)6
z#${SgsR?+ZKP;jv?1uL=L3L90#x?h|MeXJTOTL@4%7OH0k4NQ@mJ6Na)Sk4EX@rY3
zCVtX3{=sj$gim(zL}1WcCkZ>owync+44CslQV&Yn)%3cWb*=`m6E#8izXQ*6B1NB~
zA`YC5X6=JIG~ZMOEf|Qu)>6@)1S}E~45cFQS;38xM8K_-M&x$n)w~ca4akL<2e&DT
zv{%kic?g5V=>;-rzv@g{Eg3vm98<&+eb|}7`M=@~``z@-%1|+y!|Et}?zVqWe7>4-
z8N3r%@N#z(BHm1=S3UiO!O<8PxIWa+sPAyZ`<?+4u{I^Y<Dt`9OWO_N@=yxu|BT|e
z;=5eDco8f*;naM9!nZj$fe}5P?`M_y^@Z}xHAdP(nu}@eY)8<sp;2QEWztrfC)Sv6
zyJdKJ5Nagwc%%X%Cm9EMV$6^WESU;4{Y10OcZl(d7W!4;qjz9yJG{Nps)8KVW%VdI
zb4OmFX7p|3$Pj)wTzNLfZlTxXT-gH`6hkz0^oI*(kEe|`8s`TJK(pe%*a1=++6^K4
z*}69juy9AUN1Kws><dw@3Zl&(OAQ;@qJP%*W^AidwfTyQ5h4x%RM=WhHFq^pJLjWz
zAf@pM<K&PQ03M^#j9K&+qa@D9BHM3%Qx$#t?%b?gv5n5o^NDD8govB{n)KY~-aoAy
zK!gnMS6|ua*f~=B7O*uWAm*@UW9vm5X-4hnuOJCYX^fB<0K(nOCO_ihtiQrb7?FEy
zx5P5onxkYC=Sce_#_-K#(kep(4cUu9Iz{rCzUsZe2sCfxKOkHc6T8hA@E>2L-rPWD
zWp$ncK$>Jb2ftUUQKmM9$=e!yoyR!RIS_l-ch;4yXSul({yFhbcUP|ID<vVXxX-L`
z$8c6Dc(&HaI^nfd=V!xSqLmI1GiWVRB6erA27mV0{6wJ@Er3sHg@ZPI3V7+?T>QZO
zQ&n>Dg+sb0F9|{B(N@ssQ6Z%r;hDr&N-Y{BmOmNJt+66@h-o8`#+OOr2a1kd^6k)d
z{LL?pu*yMv)pj1;6s+bXDUBTZ?Yb2#a2?S_GSiY2i4tN;D@6Sl0T_^GEf3AdXfMil
z9Pp5xlO;^M(sANiR#9G~!o3155A`K(9n8@(tx-dFbRDeY!~IXUGF7TmgtsRjI>{tK
zF|u!!YESKDOwkHA2kYe`T0i~y@btR-y`0{aL#ksxw_T`fm_~8|-c+h7KjPm4cD&n~
zn;cOj-%utY#WpE1-srqbCf!fwzDGUs+Kj+6pbyXBd4%qzG51-J$vaP&HamDq=FiO^
zqpe`KM(TZLd!|zY9{j<qfQ~p~baM!4jH-&MybZlszBWvy)9-kmn$kVTH;KWCa}~-%
zNopkD@^XG^xV{t(D%qAq+6&xO7Uq)71WvzafKMskHS=l_@zrW5rZ6C-Vi#x6_|TiD
zLVZMeiQLE5!NB|YL3S_JP!PW`zaVSkGq7ANvlLRpv2G6}HY=A8nIAPS)+n%|6Is^m
z7+&1SWz=LKy9o#ScHv`qU33WUb_2vBo{r~TsN&hg9n@3gsoN7~51TKJ%hybI1_yQ&
zi21EbWdM%czK}K$-UTpe1M3pS44hKwR8AS1#sh?BlC<91BYD))!)1%d*_7=wQZ|}B
zMp{9n%un^Q0g?aQPj2({03~I&Sn6>fbSc1z(SGn2C7!ogtu`(7Sv+P7cI4J~8+>i3
z73ruizlGZOxC@A%mD}Gva-tai)IvwY^VCx1Gvvf&q857hTq=On?JULxPY=37#wDwx
z1|ft0cJ@pLpVH1!KH)j)fJ;TWaY66b%UHl(q?&F});#s0sBrkZq3vk)83xI3cFbjx
zR1KWRQljgBk?{kjT86bgz@q-u!U;&U?SV=9CENl2t6dpD5oK!FX#7pM1Ax|=JKy(+
zuq2k`lR4~uw<(!zl#bfQIs0y>IJFnlO7C!(ASq>L0~A<~V&?oji?#{aL8M+LtztY=
zeZ9xQ=p&cbCth;hKccEQt0MvZULkcTO{Nh<!$rpyj+Nt$^mK&~9;ZSKi8z#LSQgZM
zS8`mbQJgc^3uz#flrFIn5T6`ZLRIQ}cp65x)FGig3*BJ1FCSYWKW6Ib#A>c1`TiN4
zp9QRG2{cxniE&R#VdthCOix&M`q8-uBJQ6=+5DZetbeP#pB0|{-XKpcv7wKyJT7UX
z!48J3kr+E|Nf(&#RBj425o|@B)|s2XHrY6;ZLPx@mw~ho$JW=}I;SPv+PL4gbj9IP
zM2;hO!EVLGX^GJteMfx!Gqsk1c;w=1Cb;9-K%J`Ezr!bh?0;Xo3#Fo=M<k(OD*=*z
z+cd=_3togy9ljY%LZiMf#nHFbwn@E7^Fn-eW_1%5ehqY_%%bPl?4CGiO7BNm5vUNc
zQEfMUPmr0}5-jz<J!26dZMxCuFS$JX!m!}7OJh-d9wK$-H226n^FdBv)u&CW<`_e1
zT%RxO5`R{4YG;vaEww=V(n0{-WD}DkgS=ko#V{U9>dp;BeUnGY;Lc@Yhain8vDgn;
zbdT=lAA}lGT)?2W?$pZTPg5*pFW5hw4JmMEK`cuEEL^+El$3s76kd_7BFS(9yUJ6x
z(hiR*^P@oZm}bh`)o8m9nrNB%lsJ7SfIR=W4F>Q(nTgKc86e5k3z=#>*IdH+X3I@_
zPJ!{<aq3Y(tsS}5N;1ZXTDNF;fyCnxVN(?pgMYOKWT~JuYVAGpgW6RFc!leEtzeTa
za(r9<CZ^<sf^_C(vVBnMX{3pMFO9O#HAnEDS@I&OF%pcth5w1AA*_@<Er}-(=GpaM
zT{Y(ZT%6+5Q@q%JW|}8p4+!-wn|y^s!qzr;!W$Y1kre9!Fc7f0M$l6fpvh3BJ%Ff2
z>}AYCp5R7`^X@JNH)?DB!o=#k!G8EAonnlUC6gOroyCy_;JndGJO~|sHawS4{IW=<
z+C9;jor^#wQVN;6vrQ}~@FLrSKnOhj!M7QW!_fq59&_Jl?SDH7@J5xTewPiY6-3e0
zmA4ncR_{Dr#tW=zsOM<tAuo!}qOuT^E<P*MavQT@((qP9yF$3lRVbjQh;H)V;eh9H
zzT;u5zywA3tixSu%KhptH_)9O+_qzei+z=O2SZMb*5it{!{wc)mFXB^G5W!>R+Cw-
z4!T}1Y9#7G;Q%c2cfByK{4rcluG+gdrFmctr0hb=L1X#5U+n%aUZs|ZcddcPIb=d}
zoxoZt0NvuDE~N3yJ33E1C@A$_Wr>%?hmJ(A6|ulc)b!8scW3pgp;zD)B8W3Lc;~5j
z*g8|=o3W!t@3rY$ANcvuyHtV#3XQNRGtdbL+DQkhnT-?^3HjaojW(IDLSk(>T<hx}
zqTsy#hph!vC9=E*uxlV8m#btC2yF_vHd&EpT99?FeQ`aCE27}aH`_<L08g~!rpYyk
zR@y8ZvFvY}k*gTa0(ia#Pys1f?!<F}bOWt1wF&HU>nTwm40qZ&j`ZjrTWxH%D+9eG
zz(~1~=zt<4W8_m*x{3o150Eq*e?8?_HVEG>t_#RHsg^Z3(@tz^Wk#YYaDzI#5@UMS
zo8{EK(U-ko-{EDdYcXN23%<fBYxc2bhg%yv&iWtBi^T<0WQy0JE~sj371VWH5b95U
zgvS5IR&=pcQ~K^<W%c4sPqDM1@n!G|AZ+|JX<Bc+%|KYNij3YsI1zIJhIR^5)|*=v
zii6FFko+=HdfBO?1K|jC8iHng7LiHybrI2=LN*%K%M&7_XQw%bfx=revjhhrX(n1`
z2ie(_${bwC#^Zqtb7spuHYdTRa{3r$MRrE;4fvV3=yx(5Otd`FwJQbnkW0o_5jn`o
zGeTFYo?d`S<mwA>6DL@y@ofM737h<L91Glcbr3z=2?xaMzYq!*sg6)%AzJy60Y|e5
z(G9JtE<fTQuDY+bS>wz-hjUJMpw{{sNl+AMO}oT0{3K>UTJLvm4b>1_*gyiDn4URm
zlb3sGN43`-CBky$=?T0BRZ<DJh%w0Myrghzq%rIS(;BOgLS}q?rdr44SmS3<?9FXH
z$FL3rt~=R52i|;=*U&mCQMmJ$v2tqFXXQmlm@fFvhFv%bI}D4S#juWP0=r&SaKVnG
z5jSgvsBQuwm4l+0HS0;36mq3yKOUA9UKrb;@g`Nr+I|wl1lA^DAgL{L-HF{zKI66K
z&Vhp9u*Ljn%da#|yr)i}_o3UcZ{r8{gK7Ts(qo~OW4LfrsT7$ps6eel_uE%cmkVvG
zDDEeL1wSKxgXkZoZS#k(rD=rmXy5FFY|SmKh`?(WTNQhNSp3Oeo`U|^Jp*)i*dN}I
zr||h}0^iIX)@WH<$CaSDe-yF8{T1gF@726QT6wgv`Dm~sJO~x{xS4>bHBZ!6D<Zrv
zRko=aPttfF+|}kbuB^UR8#Wh7$HB&yG9S4o@_4ywVy__*hIXMloDC}{GE@KDAgU=r
zbxA&~nNct4wD9!aSHB^eHulr-*H=Ca6y4c%e|T9feB{;<KR}B)Aat9?Pt(c)P(jzK
z2iW5$u+l-}#{@h2^esWPf$^+xVbL8fUy54@ya$L>DCrWV8E0%SzED-O_3W==CNBGS
z@-`=_urs>&keO+*PDNj597_JDZ4I8P1d0d7n&oY~t_smWVf%&nxcf%zR2}w^9{Td9
z=C!|;<n9Uf?NQT{1r7=tV64yrd(L`^>pm}HDTuZ8)EpzQt7Y^D>POHOY~f{<71^Pr
z$ngWCj|>96f~5l8?GV$zhYm?}{y<Uxr8`)<YA-9&-ua}=^PQh%F_XaaX=b>GP|Z}C
zb#3neUXklIu3y(A*AXUzO4XDqzGi(opXBQJ`s*5mT>tdUK|ZqeWb>yeM%*gdLq+4Q
znHt!RGn4fw1u38KR2J`21SL>Ka{W&8Wko4boXq*WdiGBOYOJa*|ITx}0u|Ob6SSrY
zGtIOVz97uHmt!YA;SyN!NGzwfp*EoIrY;(Zcg=KV_%>(n@|T<m%}<)%-g1GyV7Zb;
zn<IEn+c58$1W0n-VnhQIu%!le#ltL7{R-I3E*mpZqbA~5$62DIiSbdTyjm9zrz=D9
zF``cb1TZc4Im(r3sRJ+_WWf?9fm4vBv9N`}`syCi6MOy0w@%WJnOL7s5{MR=?i0}3
z*)Lddysl89eABx7j)Re><P8#irH=UEu+sop`Hs(>c<3Vvw)Uual*%4gc$v97jOPe9
zeE1Ka_2$~@Y=E%<oicr@egg=njFnhRAOP<slEguClB;07J-?|zg(J1kdO_h<_dh#u
z8Xl$R9O%@bYoUr9<e*B~Plgl*X^5fFnrhl&Y2X#?z#6sOmmK+aM5D{w=pKdXFl@gD
z_*HYwnp;=!djJ&=Gw-tIZL`0$;#@9!BI_2HZ2*G$`mCA1h<I#$Y0slX!zKXYelKZ&
zLWD_qM$H&l1xqn&{rSz^%sAr&KiRmA{(lo|nM&OuJno_}^2_{$yV%#od<Ap{U=j=3
zoD*i~P3|*h{?$3qxtSw7*o9vYYCKc(VF$2K6fC{qE%#7(jL12p`N#L1YoYN;3$hDP
zrPN&P%OTXRE&Hbknx>XFb|%zb>%k1H=1aVWf5F3A{~0HhE_X5%B?#&4OIxx-G%1|)
z5p=lIg!=&h_k*XKSI1=<m*IYK?xSvVcl$fqA*h_eceHZ(`tR2%m}!KIZ7qFd=-(b6
z(AcAPY$7p3{p6y0@<K8%4S6B<|I4rcWUOY9o*odzlun~GkI2yeg}2b%toTV_pOs(O
zk>ii*`V?fD)_=lse3qkn8arVCfbn-cDNFe=3{}C&sZG3gGzBP)7C@nnaE}e)?2l|o
zqq9|kWh4u%<`ymkgaGuoUES$K2CLh_E5!^6S7_wFVEy+yL6|2)!h3_W9Jsol{Z7^S
zzx7<Ldx+Ul&*#cL<;s)NteXo#{3_GE)M>bYEo-=5VobS?G)4;_urMTu1Yiw-+!Dqf
z)>ve1RtWi0s?HORFNDepsh@cWPKmKul^k3T&@TO89HTx)o2N^+9`<5@`JZhbqF+^<
zr)io0A_RsqydD?YYivjnex#gmo53LD1*BiCNk{+5J+o{wE1Dt<F`T}Cck=HJ;eKs5
z;M~DSng9*<b&}jEl0L(DpI@-QzELECp?3;I{Zd@2yJn&>AXC1{c`(O926NX2=T}H8
zq-l8Km;TebBlcfxUp^K7MMT*j$NAK_f8=zhbRz#x4gH))N-XI4xUl~6IHA>hLjQhk
zp0!r5cEm9n@zYkdSz~Rf?#IcM551ce)n6SS!mploUOO?R*u|$l7RFeq#Y|vyUGRr2
zN^ZfNO$F%~Z_Q_oJbDa!XfB)11+=vW&-mUA)JPDY7$P=S>jd%>wV*9=nXqGp>%x?{
zh=7Z+iu!y^?KHtZL2;pX&(M#vye`c*HE&k4@@Q^dA{&MKN=rGqs7K)PdIE#vz=G3A
z>bMS~+$Vq3mJCCfVJo2@sH{CR(ctwN3v{$xm063$-%1zZOtK){`EqTeG2wKnWeFF+
z<Ao!A^PH?epO3D39atnX(ufR+X97CY=?usrZ+Nd3#9(Upz1{@+-_iq1SUe1HVD={2
z6Q4YmynMzb5i!tufr8J8WjA+!XFQ~!Q=v11SRdAYMq^J7F1Hh*%{q!%WYl`!;-q?-
zJq6$ZkRDg=PzGAZT+C3K+5z0w=>#Lphf#~7WB&@KO!(iw?=Y~isJZxi@u4HF6QAp^
zef<t8hkc58RqZ^Y_4_9R7}I6=ql?<9+V}-t$t2KP16?bHg%Z-Ix$i;Gwe4pNzZDmJ
z?9i}9p~QJq`@wpn(?pwMAVB%O#NM&mrG<e9Ea^>W0JgI9wyPd<A6GTuAFtVQKJWS^
z*KQnuvknnwBoG;<mhd(GfClD;kr_tQT?6G|TS#wSO|4gC#sB<vq8VsWgA8V6qKa~K
z#28KbzPZ;&myoLNdeXa5!E`$fpNQL*fwS`XXKjKGB@Uy!1hS?!vL)s&WSQ?mPxv+g
zcNsoC6w{rxWkFKatDJmcDZLc|L4ZX43}%Aqyv2Yp4G$S#=_0Yubc=J)7ZVUqP#KWs
z`v`7<Lsob(VIPzC1{KNso3Xt-6W$DNqX@mXP=%T9rQL-h3&!K0W^^~z4rSaj;(D4P
zmW7Qn@@0nFKa-Z(qp54MIi6U%-a{z2G<2DTd~yO(f{xT5^xwLI7lEiJXBWU+neyJa
z6C~0za*fy+=jQr8p4Fm89!c4LoYN21ha`8R(FyRO9wn~F9ai5X8Dg0d;rUF})dmZP
zfP9;P>0y)jLkeSjdSYYgUB6M6o}$P~gnu8{?0fPT_aUi;Ar&aZykjtcMv(-NqlIZp
zJ?WiiNR;O8w67jMK-Y>7UI}dEMWmzOAZ`1a7;6rG|K0cVZ%RUjWE^m7bD)n&AmwQ&
zV^2(t!x;vc$)vVJrqBz6bL)`3e=c}uvBK6=Li3X)uOVIkqqkn>$MzW+eY{h&#vZ_h
zmVp)=zO}!ykOZt~d~iPy!ky23hysyte(FzMfb*Es{Awew*&uJzC)oEMcvvAkUKk)C
z0*!1%`%pwYBN{p#c36<~YWK*+7+Rgh75PUQE9z08HtCus={LRcFRgWQ>0RHPni>S)
z^!?3HA7N%PLOdY0%JC&$JFiW6W8)PbAXlFQ({B<382ikz6X++<28g1GRTizgzU(;5
z3`OssDw?7-E^MANCiK~{QpPF&e5hZ}C`0%8b?42?U&$9hNT{tWL(7Ehy#25nRj5d{
zsp`#QdVu5~i=Lw6Q*TBy`z*%ZqLS_`z_nc5(p{6^2RPX~oPfqo1J!y1W)Gx`TVCu5
zhcY4Ws!Qb)I5i!3%dVM)Mzaj)7erCGH=M$R_cGrY-3f6mpS84*GNDFBebtqEj?(K{
zxMIfqv1!=G0k!yv+vxt362EUAx8=y$qAa1*1<Y*f4mwvo6F8SwIkQT3PcZmkwp-!Y
z$(;KlA?-*aIY7K+t&HGX0euH%YXy^+Iw+P7jQL+8v#eAKFocP)kq4;mtS*S5T0;-&
z_kU5$V}>1{bvDAKX3am8_jJ0m(8x+lRj^XFc(HDLqKRJihVD4kK4eED7wYgz5E8UO
z0}CcJ;k>^y*+Rq%+0gWy4ol2^qrs3Mt7`#Q3GSr6TBEmLYnh~H8S=*|X{(p4tbpe^
z`BF>r1yK?$wg#MI5L$Bhq*gq28g$XcFOUvU(ZIM4-AroCi+lG{A!wmTf#yX_oJQ;r
zTzkVYbc4(3Ra<viD`Tz?wBYcC4AEkHx#>T<*qVY`6IlhKb70ZU$9t3x&(@=_4s3CO
zovS=743+$P+T|Ln<f+9IsY5BnnY@FAW_sgC<@h7JZ8rX0?8bj|7U3r)6UMu~&<2X%
z<{dyuw0YY*wrhvSc0D*nyrw}rof%CU1cPM+?e2U-6<8HoC(^)t&D|_}2U)WzQX8J1
zn|E@SUI(uW91>CU&nwbV9s<?^Z7zjylv5CC@B*e*IH}p|EUgV?C}sw(P9_nEQJ~bo
z`q|$S$@o-1C{W%Jmc}s-&t;gZQ&txw(n9FxVvF2Kf6FFcE!LGhFZT{(gh-{{nuhn!
zE!w6Po@U~3D2hVMX;}|<SDqV5Di>~xYT=lVL%-=O+-B&P&+W`RA`FPk+ZB9~)K-Nt
zDkvu`+Pkqm>ZqVko`|$yhtLK6776rysvznCFn-m_pbX5OftJx{a!&tAe~daR(@asG
zxCw0cVIsq10f*aB?-=lstt~-pOsA8&zLAYS#m#=>)aTL)r7J(EOwb6yX1%5)u&>t7
zeeV^biDAhvFXyJszH0my;%b3UIS({Tew%&6Y{xl_`S;2GS`Wg5GFf6ElI~LI&QN2@
z<&S9tFqTr_E_1rUUjgfu2}^sJEFd1pv|8Lr0rMJ|w>H-u-u>6JUj;kqsmSgrTHNld
zVrsVV!w5P3Y>5(y_7X<neio<Wp4KrI%*mvBtxwCG={^}@R<sxkO{$o#wWJlGh7SVG
zB<T%w%B+8nf4;jonox&{w&pBs>`}JUMW`@jM_-)elGWZJzZpQI&<kd{LI!f$_G)dZ
zF^l}flTSxhN;fQ~`YGfB{japOzj=C_(tsc67oJeDiXzD_(|=NC=uHauK-TKf`(>v0
zCf?8TKx}FG_QRB_X*$DHMLN34`gTYK7tJ7p%<fCXBgbY66+(_d2}A%ilcB!xTgeGF
zeWnN@m^73Cf!3-@Q_GY?v<s8-Z8Jn?2$kCx$H`RGwiS_Bn}qR*Z!^i~2wIdW6#N#|
z!!V9t{>-{F6kbS8r5bzcYFt!KeTe;q^S$T)`v6m>sQ!-Gq#9SqU0?bcMNQ`QaFSxl
zE5NGbJseBjd${kBpJcq6@ew~1gmmmCs;8qJjP$X;XhRg{R;>$#-u~MrM*8v|AaI(d
z%a@|MTT^Bm(Lgl(CY<7jky2D8F^bHW?n2IWDuJ50jdZy|vzh3ZV-N6c10lJoHa>uI
zr?0dKn$SsV5zOoc#-`_mx<;EoyCn<b#8E|y$vs+R4f(Uc56;&r;wL)GVFFIX?wued
z(mg0Fr8k7-y+4qR#X0Fp36i=5#@IOFhi`0*txbiGDRBg*kLo__@Lgid8xEx{m}|Dr
zMbl=hJ{$I!21yKUEy{$*;E4S(Z5@wA;$V4=55a2iU$~S1h>9YplAKp~w*TFL4w=Q3
zNK%2yUm@rlv}(JRg6YDHGMqQN<u~~TAS&Q?NTVO&&4t1m8VTNU@`2)YOVO4KUOIA5
z*vNd!C8_yHoLGv$_@o@h>$4rkTXXK<*-xSxjlsK^ksD9JV!v?%FMC5+H996k%Y=*(
zWyQsrTI(u|-b$?PUID9^iKfLw24I*NWc82~vw&}cg6X}JNiNsGkxlF3hfchT?j+_2
zkbuQS|Duw7SKxhgo#YdOSa{_5J}X297UfLDDfkPS1z=fdtXMa%G$@C9-4`N)I&B5t
zl8AhfJLr}(pOoM|L=?;;bd`xyUdM=SO)Q61_}ft)75OQpgHaA>HCUl`Zs=Xt<@mt7
zbQM^qK}`Frgw$?@y03#gkX6Jm=&Z}0s=RnNQV;6eXybtvH*Nm3D-q^KpF*HBMW)e`
zO<mDO_2ph)*!$1TNQ|cfw0Z86s_cY4l$kaPIiRpg%wm-==GcM^9`xo#@vCGIp5Ek2
zmO&$a#_x5y`9&F=?xwUpMA-lR8Y9p~O+^~Mnr?RR#T#@<J4a^Jpo3gPbhPx+J^sId
zo9k;3J0l_@EFIF^b#R80-X=BrIVl?j`ACsYR8Dc6ct=hSnEnI3N$`{xaV?|-)^Qrd
z;7p#@&EGiiUdMr4R4gE}6*H4!+5m<Cqf-A<wU)7|8iuLC>4`KCum{~|bj|!4;TD#*
z-dVt@CDFMD7}@ZO;)rnaNXcrOfledy)`^**=iPEi**zjfGpd`I3BYm9I9D9Gp)POX
zj6Gv8JHFXmTL@PZbT5+gzX`_G6p=QDggM=#Yk5stEgUC+2(^AwM%J|1*u)NttIecM
zT<Mj|3zHq@ZvNq{1y#c3lX@_dM}fS|l+pG_3@4ST42WU_yfjA9Fs<0}>RxFGtoXp{
zUud3YFnKHaYzW3FOy{m_Ft6~j$>CIV!1(eXa+z<ufSrTtv|~vs21Hjq$RMkEH3B#5
zRS>|Cj2cVv(!VPcQ;QoKHD>=jOp+4}nr_oisqbB4m>EtZ?ucNpHQxMN7MvmU3dkFr
z<<p}Ds5~kJX*%xKIuqlZ26{onOUu9?J+nEJrf9OffJ@jhsTUCFSey1ts8pW}&!ikC
zG)1vqdURw@gRhc<m@^748kHxi{<d;`mfu|~3N3VwYF_Y&fu^R#{J=LR9ctVN*z}zI
zPr||=VO7h*04x?_&)*Ruy4xl$uLN6{2;}RUBxHF!H?VyK-WF~zD+;sA;W6^wh%0Kv
z*bi3e_LWy36#C(K>~R4yvFA>VnKJ-i?8S0otMt;3<>eBI2T}zAEGB6O=ic5U1)o9~
zmWsrNV1;oy*!CzlG0S3hD?|>Q_VOgD>OSrnxbh$n>B~0(uTwj%Rf=Q^5cKhA@IQSm
z(x2J=zu*6s?(K^V*Yw10xg7y;Bg1aS%rg%+Qo<D7x=x~sh<tKM*ksC@71$PhSpC|7
zv!EPdLZ)h8;fsE^S^8hF1iQiB4}w`tYov6gj216y-&(jXn8G>PY$}3Ui%<Vm-)DsR
zvVET|0Z(^5vGjSumlD!tYcm?XNq&50$q%gs!mRL`Is>cv_Wb+oWj7t+%;-F#+iN#s
zl~HVbL*;Q^4xbq$SI5kc<?We+{#k!ja;;UxIK!c@g@vm-T+14R-pb>|-EIDC!`soh
zl}YD?8V9BrHMvy~{$SejZYb&ZF6GC&JLL|qiymg3Bc)|rd3o2vGtt{i_Q}F9&FT3J
zMquN|w2E_jgDT8!XGlc!bmAl3A!YS1SBDbINb~x@14YMQbL1$fO6<rY8J7J_VN2w=
zEWh1zTk4Y8T)D|sLGNb2ZNb^o6M=rrIxk#FPb3*lCo>bW;-}l+Gg@OSX3J!@j{i*K
zV+h5k=z6}^3A|s`jfi{@CxvO;aSoYV<*{tX)&7In+f%pczt5jge0;2ixxJm}D}4LY
zVSffON!@~?E(n!!W|880EKa$_b|lO#Le%sYf5;Y>Vb)6%$nEVgGnn>{U>eq|6Z(y>
z4Cq$%4BaN;!Nny@S#PFOJCq2dAI}`sjV_kmP>kV@9wIzcF+-#^I!l;JPGST=9k?Bx
zUN3DJB)HSZGazV&79}i9f$OSEm3;P+Y}+fq?R=?=2CZSQpTLrbjlC2@rS%M=qiJqx
zO!yIUT=GF{s0ClyX1~rvx(&7RVu1}74RQjn5Qv6=0?$rgwN9{rLjDE_Tqe}olH?W^
zJ=Z)i=|t3H2bl^5buE_C2D$SSD3&jo$@FT)pY}gq<(dcT0l_Esdwnwz_lDok{&iG5
zlQk;nGvtDq2a!U^1Yr~Hfc55bZr^Fiuh(BWk{aP;&3;pzdyxO-FHgd~fRpIfnfhBN
zH*KHL7XDQYtGvPsCIu2H{PLOTio=?#;^BAV**sB|^27hJ+@TF52?&J33j<#feVOaE
zQ_t;^kzMp4g9tp|<z1Q2H<<nyFD%oB422`8;bHvVu=H;d$s$;7wmBl0D1M5<Tvj46
zo0AvUnkO>O`I%69kHVYv><)zb_rbrpCmE|F^Q#Hx7H3$oF!aujjKPg5{*egd$TLRM
z4`bwrWz~k}`QbA3DqbgAXcTkTGHA2q=@6PP7_TiIT>E`ixx+JE_)RGx=Gf(hH`Gdk
zhrHV-WcrI$0y_UJs#bGUn%Gxb-Y`GMG}RN&_CzRwqe|G34}c2an~h>oEWqW*;_RPn
zfx;lqcIoqqNHXil%oJ4o!Y@~dXSkCQxM~D^`c8u#5L?EtkMS%!P_qI&Md^-<fzuWY
z1gTog3x{hS62!fXyU*7Bei`#mVgp`DOKyY2Nyjj;>i}{9_yb#GhMW9p!Pd1cS2ATa
z)VQf)&8ryD4Kd)tZ7hi*Rb_)yF=>hzrWB#Xr<5DD<??b~iUYf%D()Um=zBO*07&JS
zLKF?|>D*r}iTx4KXJb;j32AEu-9>|Yl`LI^d?>?wHu~rCN^zs>gI|sGr`3X}^0;El
zij2*mBH#Y%lHYc4hMf><GKr1v$btQoge2vToh~LN7c|g;0qmeJ&`%%OH0Mu1X>GSu
zm`Ec!8aj=X5p)GAGfKh-PN!6&wcXE;>&b5rUZ9j8eIHz1x1F}Za|}J8RC$gNmepVC
z1Z^xPVkn#vBpziLb1a6dLwO1_@ib2At?A0MJSNBejQKM(!xhA!h@iy>;y~nmb^x4X
z2kfjgCMliO51s8^l5!YFK;4l)SmiQBtrZKl>5yE4BV09tE*^Icq^R;ugdlwtWcUu|
zHE>UFaiaqK02ou$MpJubW~+-+KBsy%u8TX@$;hIHOz%(?{hiy+R^O76`|u&S<aUYa
zH#_E|O8m?bi5vZyMt62BClvtC7v`pgG>-WWsY|1kJ!-Y{+9{RNLiHx<W=isysU+))
z=b65lyjv=4(rXdr^~Z8VtX}dOQomVY*BFpUtpDhv=_msj86nRaxl*}uX-LZ}{st62
zHeKdy#=tFH{tfnnaW^InM%f)r-^DbnNK5e#T)q2l<|y+8Pg-GF63ykOLBDUNS)Tn$
zIBbfE&EeZTcI@(lJwu{@zkH3By6Cuf{r~v8V(YH4pz|E~z^!dY4!6@Qf^Ux6{V>BG
zV-HA>Wes6Dk(Q^pRzGAVnxpF!tWGPLr?W|BI`ukfi6Z4VVZVBH3|aPLr`6gc!%6&E
zDQgR!du-@&RH1jtm&?*W*VKUAU|zcaA4q39G;QWu+d6o-+lkT<Q4inPq*?PvtpMHF
z&RkX@`Att_{#M=}$+ZlS<JnUeqt)#w*qny<K#|L12XSHdX+cn@<dAlTiK0%GTto4>
ziPWG*^5_NAh%PIRFo*A8duy;}0&JCOi=dT+0F_SvB5j|;+jRs~A4+heObp#Kj-n3d
zLK*<JmWW;QtiYBt+3ODJPVpbG;idy_Fd`R|h2sfKU%uC1GZwFLrtA?T49|<T()=+m
znqVA&{cMV&;Z4S-O2-`OvgSSr`4wb@Quy$!A4McHNvb1Jdb~an?0}+58^wzt@iZxB
zXjmn!Gk;?_dHp2<WhN|bZ&wVAlX8nL7+iz-2ciYP30hI{Ap#z`?7=>Q&?u&eCV;N|
zeDX-TiMNb(?B;@pM1RasSpH8UNT-!K@d=GLe(Iic=TJmBxy9$8NJ+h)BFt{crJ^8n
zO|91A_72h<^pit6g-eLC;5QR7jZ|^S<O23`@{b7Ghdv;$O(mZoJY0uVcSv3Jel`kG
z>2xHWG@0{*4QbC3Mkiqsis86>Qb)54&@?MxnL@eLvZ#hw*H`W_?gasNf>!5GF|s%0
zuma<UpRv^hjMgO6jyXJsSiFvp<?=*xPaqFN-KpV?{zZyKvckYHJE@mYoOtY%mo<L<
z_>@qWP~k$|#OBY(Ue=(-9nc?@pO1;nk4drhmW<x{MvG%+OLIw<bxU}*j$9WXrlZ2Q
zM;)5{k*!h;Hy|saPVy)d@p2>OY!*ywvOf6|Bj08sS7Wv@s7PPZ8P-ap?!C<LDG4Bj
zaitJlg)Rxb!iv%G!DSS9a?-Tx3$r)iOgE8Y{$#^$UU4^ZAt6KC4wY77z(*~tg>mkz
z`8gmIABVzqdGZe>XcHbeXpkF4Sw}*t-Z$*^O++&iu?q$VTN2@88_ugVC9YG9VjY@3
zHXQUEDJlw;&5}$Ks)EQXdRy*ZOtC*yeT*i<8Mo<OtChDxnNT&~>~l-9DzkOq>;sK4
zaPJ|JHI$=Ie43UHp+B$<c;Jd1&DQMe-5{_l1p>{OxU%Ofr*XQA4_XpZ$JDa&3Ppby
z=LLSjNrE1eDdgDwC2v?9p6Y$cxMnU{lo&_|Vq7uq!Y=~uNQb}*$^O@{%lHjQ)o+(+
z@M4!J-&(n8yWlXdV{ycs&jjoO+^6eJY2DDnOXqkt1=Yn0Olypa21Ld@B8s6W1E%pT
zQ3AAPnq^l8_kFJ{Op`t51biGHy9sK1apP2#zwxn5RGT-vgZuy?J+rv1=UDDz3ifCC
z)D0G!ulb^gKNzJGpCFXeqdMkgo6S)k4CMCtK$S+yv!3xjPR~1fHL^khH|GPgn`u(v
z7N;hX0y1haz{_dGse?B?*aHIc0{J73?R?8zc$uX;YtRgZrcmeH-^Jy(?)A>*4kC@;
zaj2W(u;*M}!}OWt##8;>%J1Q5hLKWWu$I{NYZS-fc@`LA&)OQz1oDyZ!Qj*GkxKY%
zFy@VXY`>;dKU5yDm4w)n<MuomNoBDho~gM~ye)iar>D1Xn8=aFcO>HAQJ#MJKe=-_
znA2;f4Py60a27M^6n0guJ9+Zlr55%QX;+#RG#TAWuSVR^9fa-<$#3ou4ETNIGkBkO
z&!#{U{%BG8tnSIcK$Qvz$a$Ml|5Bdn8%s4iNeSjI&6}6PrnC(D*a_C@KJF3(S*%;m
z6e1`nN)HKBaEo1R6TcP9Xq~n7AB>HNX7@M`%25-pbY}Y)2=Pu6fYVFf#Jc(8Axi@;
zFF7TB-lk6G2-WK<+L95-*S`jpmzvpU@BV_G0JC5#h<wrTC+CAq!(?-SQ-nR|<jDB<
z^%%ABa*%g_ugKkC=o~<lz46LmjvENvb--!kPvS`9q(q5lffD3<+Xw<DjpJT^1>Y&8
z0b&6Z#sY|b>=k)*JE3TX$nd(uBOADNzwBW?dNtZ9uus_~0qUFo6K+eUl&CW%OD{et
z)a;5^1Q>Ile2<d||4emB-YW$4-i>}qKURcD$>MntBxb^7Q#IUV=O3C+!aP?1Y(SFp
zPD1j7jSA>vdB1mWFDYkQKz+x?zvaXFUqQr4EE~a8@XqlC9yJHXe76wE6so@ISC2rH
z>j&)CLEa(y;n}G%jjaOa21kI{^cn#c8ktaS+Hubc1My?*c)Y2d9oQ&7vke?G`tA*m
zz`stbZN!oT^KpR0lj9DUwY$jI_~sQCSR(2bIjv7Q9&I?j9sagQe<BFOyU|#|!j}yx
zF*u6b020@9@lN5>BTSxM@i0%+z?~xFn~Z2|GqPwEZ_<Nu<Wf)v`HTNr?!E-unyccO
zG$Dzez=^C~2!<3~is1VN{QbW<&!3}WyKMROl)xq*Fz%55Z<}Osg=W{#Z)u6xjV~6{
z&<iYILXKiGdDkfC8K;P#Bd&D%#A(9Qj+?uJ5GI~>%7vpmfFwM~=CV)aX&w@10Z?E6
z+HmrAOS}4ugMNZx=hV2|PYj?ol4>agg*+tnVyru-0du%3Vgnag`20)1o3NRrnNzsp
zaw2!=^l@QJ`AoY<^E_2G;hjHKTm$-^wdSui&LlpqP*ye$5y^*;{4@HZ4&J7_qlF5I
z@$awfI3m5eAnrnGdx#X_<yazT`c9pi0KEg7P4;U;GD~CXb%laDoS<w{xYwrpl2Z(T
z&Bm;yZs$b)z!8s-&%uhrwWZU$rDCyhB!HW%PQ!g?qdYLv>s<(PekA&H_c{7Lr!#f9
z0gwC_mb#c4`jb2WLNPZap?q7VgdzJ5k5CH=Ih1Z*YKv2Oh+DU@XC~?5wnBqv9w_{l
zG@bYYFoaqF1yaLU;UVN+{@nD;v0c&s>-{dn7Oqia70v45Q{&_Ma~mq1&oQ7;z?y}X
zQe1)J@Ua_XUR<-|m96F3bayYNB_b7<z$h8jc{=)Br=M1BkYKysSp6jJ$;VE$J-i8@
zx1rij(jA`bIQaRgFwqWX6rwrHa6aXk&TA0{$Se5>m&tM75z29>b#m7rz)~Aby>pon
zp@;9Q+9HQnhEny>#~J!u7cMFE>^Y0psJiqu6mD`uJxahl91Uj^2neB)@#7V`2Jkf;
zjZHC6Moeo5Qqff-`<fy4VB@;(-)<bsq*#bR8re~M?5y^Y=9(^0lRyKoAZ<Xwu%;vC
zRUPN}=g4bPtX^xsCo6ie#6a&|)i-|e^{?m)@NfJrVucxq-UmM<nK36Aw4kpPVE{oW
zOGk%>BpJ_|rw7f!D2HrqnLMkg&G-;ZFX;^El|MK)^Ssdu^jX7PawRv-0pnh69Cu<Q
zJJ`v2QR*$71&-!r@+^jqZ*Jnt>7)lKnjxE&{>D5DaK~AIC$^`@`@1xrO5W_D%69AF
zw>oI^4#<;&QWyF&9#I3+@VF67Zoe7%!-3+f--3gIZ;*_gwM>aca`&6BO8DBhfX9Al
znVzZ(7EB>CN{--h9~!=Fm=cOdp#JRcl`UsaTpjEijw#;bpT9%U2#qq2O4MZ|uU1Z_
z=>4gF7mvfVkuz+wG^W<?y=?i~)%y&C>ZT*fPD{lI1p;9AsD9545*!p4;#2&+ZYPj7
zNd)PjQN$QK;HWRuH6pPpb{|(j$-#YIat?wHR^fT+1?B{YUia*6`m#9aV;Ak;J=p23
zM|Nak|Kh;+6SSaaZ&eDWHb_$k4Asoa5T(ep_nHeWmK|*J$3$yElO4zIpYrRua#H{#
zVkmaQKOtZWj1+nW{>iFL`TY=jBs#U<C-b7&`3Tj_jVBrHdKh?H+_9TEhx6FTB&bsc
zj;b0*-q2dy*t(Ry&iM%cAln?&ewfXPL||qY2lYc#$WO`%&n*1KamOySv{qdl<ZNL`
z&`94BG@=5s7H{m<n%?UhuXfxFs$b38Kr&7vcZZ*NGMCp#mZME4Ot?EL(BJrN!i}s+
zk_BZE_KFBa(=ek@ftgiZaa{&-%2CRH%px^rpEpaAS!j|j3Rm7Nd~)8i_s=@<gz{@j
zFj=>dfT1xDKnGSextxfgQt#eO88Xqdq&UmfHd@!ZWa!TB|E!5axjf|pY%Pj*1%m6C
zUnQYK6M{zKB;X^wX4l$8Q#99|N|*n6oVJ&ZMoL`^PFUJEhmn_pEbu#V3X4<%a*^t#
z22pu>eYKTLjJf7A*jt&otaB3ne=%4m?>yZ{l3VbgCOi+Kq$})6W%#VpL+gmZdw!r|
z&7+81tYc@=z~df1Xnn5S>pm>dIhDD@7haO~YeMvW%w0k4@M;y=v>~xYAFKZCEPcWA
zbN_jr7tJ{m!_oxCnN;q<vj)3^;bR14O%{<}%V$QZveG(|Q5-@K(-xP;VEqH|j(HaS
z0Gi{SZ=*b%>Ccv6ZZ?a!IO`J`xZ<AIs;wK^Q(5hFe?Jw6&9MTQM_LM5(kz;+KSQoA
z%z<5+33EGcODKMv0l=a?G!(1^BycpelAm{2%J6O{dZxe~0;zit>klZq!fqv|u#o%{
zV0SA)79^+dJKOeu%^^6&>X6jLA-hXU_j2nOjXed0L`+76t(qGmE(#*=ixnoB6}V{=
z4plGL^7tF|)@$bu@rJ)6hiS_+#Rn6es_9JzZLVmYe0F7{D>Vh<S9+~FmZ>I6$=vGm
zW-20YzS#wowu<z00+O2NMvmvGLzvKj#<WNOnTAe74rWSAET#ou+Mb|L!Se_cO|jK3
z(szKuT&z^aSl($&>i*JQNGq;Q1rYN?B56CL4%#1aGgk|h7S&O}$HuHpj>J&(s15P|
zHfSBCe)Hjj_MD*F21mo}CwSQ5fK$Yoe*s=?UZ~%@<<No5heg^vW>U3~eeyJv>sy!r
zIY7q0DnX@J)j=|}!0~e$1KC#QkpG_~)lYm@DYMS@|5vIS1&WMc-G~Z9uq~$LBi?*@
zUkI{!^YY}ldlG__4n=a~7|m1Lk{&*lsC=|_hpBu7GgI!*xU8{|0v_QCnxybwO>4L$
zmw4gex@x`^(pM>>Ae^IeSZHdzRc`=CwUJ4<U*};42FKEWZ-39~0O-3nenW1*7`h|t
zer5h2P8bAZ8DvWCgo`QeZVj#Z3$%}E^HRjGWv$IvjD!|kCdvhI$m?9cd51z7@#juR
zUj>n-X%|eUb0mW(On(Qh-UedAvTH4BwZ$0WFgb}p!owmIo{YgQ_y#y=d*4_t({0fr
zAia5WOJRe<Lj&RBs-t)dc_!;bw!|ry8M^9lRI-DpsN#|mb16gF8gGxona_w#Jc;j8
zscrWaSI6OY#b(?uKt$vrZ*l5&Qpv}<NLH50-&}$wd0-SF8e>1MkcA0AH_Mk%rB8|i
zxap^$mCfA@L7&ELm?gw#G<Re_zt&JsqDpsN&*89{_MW-n+;dni7k%Z&<zN=5v}vdq
z$O3OC=Pf~(eyxE|nrg&St>oJ<hI&vO$7)qH_&tjK;yRRKE6Y$5j5dZa2=k&P?pJe&
zqdm#YKEV`)B8YV-q@pE12`MIaP>Uk~U^4%AH}1JJPY0jpSNoTfV<Avv<zpS0epcbs
zpB6AX+QCGyO?Ez^3@PAM2nly55dIP2m`rYZGZrl$zxkiH;w|EUP`)S+z?m8v1P`8_
z3Ak!D(a*UIF<|g6SMI?{y7BZA;U>nI7W8*6lGE1lTJz#7c$6i?vKwEMhL$uo>>jU=
z)+Duq+$<I_q|U+J`>^aTXy4kIp@+|t6ltO7OzAyeoeMy78Ng2*gKXC(;hcu4^KXv*
z_ymx8?GZ~oIENi_$D&IrTZrJ;NJ^}lXWN@DUJY6)38Z{OegIj5`K&`bOkN%)l`nER
zc(c?oV-yKjOJ|gP(HJPAw-kDTx|r^X8lISKu2$N*W<sXzH>`WZ{TFGRO%H1&Mdjai
zQC*x{d1H&SohO|ZZ!aTCJHn~nv<(MeQz3z=5E4p@DHp3gK~j(S!%mvNJ71T+pc`+_
zP(!i^kj|CE96?sJnYK6LBXSTuC*ece;eZllmQ`-e8;aAH*D2%p*AxEp(3lS)%j@IH
zrmSJ5A=S}2Z|;ZxBXnI{IT%no_IwfXN;C3fIgZ<wQ0&tomBUlUSsPxAi>$+~G2%O&
zLhmBXkvC$c^u(cJ`CVb)phK4YQ@Lk~1y6TmS$4Fa_<Pb?QW(W7|7Vf&HNJp*$Jq?r
zTY4OESe}AFgf{##R-D7M1&Sa(Pt?x$mq9}{Px`LJ?zW|lsiH51=*?j_=`VREc|uKN
z4mqdzlwNTRuF3YggF`)mWgnQXxF+N+T8uND^u}l05Xfa|^7^zq|Ec&;5!G-~b8AhK
zU8O+9C&+0tRMg<7>tR|Hl_7=?V@2gq+n_e-RTtNwvPJ=SYXFVPdCK*E0&K-gXgq3h
z|MO=KzHe(NHZ=u2%qBV)4i$XF#{)?EJ>NL}6mhtc!}}1y&iWkNuUu-XNb(FHNj+%a
zAh0ai%}e&}C@sU)dT)7PS?(Lm%pVK>)>tT`ij2_8E45lpKX-wQvm?ZBGb)VDMxN(}
z`wk^+D?=3e93U+06DA^VHdSujVlKG~w%0D_bto5%239Y@V*WNZtga8HHJ8NWDw3Cn
zN3IHspq#qw`qE^gCQ_nsm;M!H;{LMEqZSZokYdTnY&03>6DzFJ$fVG>9uW1HkW#KZ
zGF&vJuZb2;cHbnMYurKJvHo-oifzK95DN9b45?}8o~?j9cTIQ{$uMxbj+e1<01G93
zCFhzUO__p5y6UPcsXh%2ja+foBFc&uOoa^;+m_*fem*Q9NN8{>nx;O8qiYfqPCAr(
zC(MP%X<b>kw2UA1tqSzdZ0`nykt$w_3)Lg!o9ARn;Vab*)0eeAuH~b#%OW%*OrdSW
zJ_Wr|t|9yfL@6Z&ZXS~orjhljU^oi*DFu=(-^$j&zVJ6zO2Z=&^9F6L*#3wHG7%9g
z*Vm73b7I7!Ph9OEo_L;!y`6F#z1)&bQlcZftI3K;QD<74`NXeeJoDDmQ1}H;TM_ui
zOp&*8S7I>Y`LW!gdm=3v{UDf2{i~fn!i9AY%l03;3PE*wPWhgx(<RR#O7tTKM*<~3
zoQeWJyYHqbvc!nkz4WE}*cM5uS?Nz*FvWOY@w|$*ViSc=Ku7AA_(`Kyc{CIuOpX8H
z=cGiESOKoY=blQ5W$_jwmW%P6Vs0hfQ}iCs&po$}1&$Yw;F`uc(Ls2l5cqP<B6!Pg
z{pK0d!6Q&rF!?0BFF#GEhaTV2IOC8kP!W$S7f^r9Uvz)-cX7hz_{(3+np+TYBPU#4
z4-Vg=i>T->k@!v<7%3>GJr?J$X!A#MZ-#Wp8^T-NSZ2E`zT5wWC%8z{it1k=Y@{`^
zd8f<vfyAycNG0o~?TbV8B{w>nJWwEJpqo|VznMwAMLhk0ttIzyC3>V>iu{RGVzd$!
z^gxlSpqh(9l?FQ=e+D$cm`%6cwGfISfuxh7U)>KyFTF?8%e+r|?-|W<Qx?w2zvmp6
zK=vK4v7g_fB&he7k}?128=}pflpZ~*taH9E>wlOvn{9eyF1!8Ucv7Orf)457vCyu-
z-R2;#{SgEO$PkbHm=|ddKJsqj)G}fHIC8YbI9^spDXGeJsmhzPIo2jeG9}LCuz#^U
z49PFHcNdW%y+_{le=<1B$JS#HR|YRRD)nbK45cHQ#&#ZkqogNvfYMp3EHtLJw_`N|
z$r%Zc(uN!gzq$Yt6(05+<bPg$-qJ3yLC!4$0bjCL+_KWx+uYyek-iZV@Kye^)!O1n
z;)mg?*CogQbja2<yk2^qK3D3=Nsb5<*Aif17*z<^F4%ynxYp-+F^by$W(6z4GcVN6
z*Vs8>q4hH`!1C~16q%s0)4Zk45>Zq*6E!rxt3A#|sj%kcyoc@(7x3|YW7sT<pPdaa
zq5Xw?t2OtE`VSoWXR2d!`xA3x4TtdnJ&~)urO6VhtP{11Pk3_~l#6Q;!*`CaC{X*)
z+PgWI3r0aeiekZR{Up5jLOA+r<ZKpZAUINk23f(Zb+4C8G;d)}xkRg(z5ip9nb5k`
zcP0D4d-)Q`H;O~xfrB`ln7>-U56t(W?Uxe08hIGNr*f=sKGjpdqWQbG%C5l`Kb*A0
z-OW_X8WodrN10nhA~b9nl93}S<9R$Zfvy_0rGD(Q;Eiz|WXG*nf-47-=31~T&to@M
z!lLlLZcpbyZ2C`uS*^WQb3N671sY*y9599oU(ZZste=w1X(m<qXP;>yeJRx50dxlP
zf45}a5NDbV+nK4@-$998$C?CT;J?iZG+LDg0gW7)yO>gKhI21gma*s+x#HHJ=DCLV
zg`-4Kc%VMNY^pm&EbL?&Xwqw4!g5LqWRa2y-lxpv-f$GO{}MCKgXV#`(c`iVW~K`k
zNnC|jWNsy1G^lYqvd1r*VZmm?!9wDmB{w|WwRQY*n39PUto^4xX-WV*Zf@@;wlko1
zvh3EEZ%yJ~583Sv*Rj{%!P`unw_H<=dE}aRC?QFW#6pKvw)F}%nI`=r!DF&QYKC_1
zqbZq(P%hJ1XN6!YW)GZ!AkfXosvUS+{)))pZwWsT;o+O!D%Yfua@2p3byY5biB(-#
zM1~xt#hnuke;ojDvR{%mQaMfEIC|=Rs8nV|dG~l*Jq)R#h6|b>2{~CK6z=ZD$s<%o
zM{-%oxV{ghGMSoTxv%ePXyxpYij?j*o@1<Ljj76{9I9fuilCri=Qr8C-ZZ%VtGM#V
zM5jSxP}5Gml-<f<*1X>4V<QBE0x>hJOh{9IGgu^DTa!aZBO)m_aKFvk4Y1qG{CFXj
zFN^Uq$ObqDjkt2o_>>w^OM9*8^{8N|tBnLG1Q9K_LKOdJ7S<%5QI{uH3~%a+n8&P`
znXf9^44mZPCyFi<^V~6nd#rYEv_}VVJiF?)cawL2r^6!_%+QCXH6yGe&~dWo=0M!Z
z?*_5DUl#f*gKfXLwkpLYa;O7iF_%=+d$Y$5rDmjG7N9sUVdvrzMdrJ-L9a9{hd)_O
zm=qMyh&O`~ReygP>X*4H73WKTp}o8zdJ=+_!Gfadi`4BDvGFq1d{739U|2s8myI}^
z&@T_W^&_sh!spxkB!(2SqD~IVe!uaBhI&E|@(0U(Lr|IYOR%$6S_(DRe;OnV2PuR$
z@=QL3!kEV>eh1x{pr(biD8V<%J>KJ)6hI9WMr?zmf}yc8wqTJkeRNd{CoRZ!9(N*f
z*oeXK1>(aRpfV@InWw1he~JzYpuoDSPs$|rz_k=P!_5gSDiSB%3u=y78coNq-ywo6
zg|S!^LQtw-F!laL|2zlagh^J39E7P+I7!r}IzKHUcHn`B_Vk_$eA5?(*~qGEN@MuT
z7Njb__?I&o%4V)s?t<~e-$Bcb;2RvEs3A@)BX#hAmMS_QQ+Et#q&Vb%zx?WBwLjhH
zIs%XB^)X6Bi^5*-E;&OL5~Vd|_#aZld1XP>R$>$+o03S*v(eUZiTe`|8%@cwh6|H%
zK81uYfLlWd0BGjSRlNZs!RmXAw_Df6w|jKddn>fd_Yckw-Jpt^=n1D^Q9aigS>+~C
z(y}?%uFsPD)tPQAM({8++_;k#p6R&eJR|P_9G_gZ!O4rC7A+Pf-Z*21^^QIko-KH%
zQL^Z*4W1$GD-3oQjjd$kod~b9hfE0k|9GRZ@#p-X5l>Kvx2b=Q{q4U<v_#Vzy^h3Z
zR%y8gogL#~Nv5t^byulw+MX#MZfxBz`T{TkUuQDXhduMz`jlBF{Yym?DaEPUZqs^W
zw1ad;J82T@8Eko*OabwgVHP?WZWoM~L>Ma#SHOepQg}NHM{o2dFjc>Nss5!{jiC*G
z6tET?WmY)HpPas+BRqQYacGl9bxg#teQ}EPZ%e(Y*s7R%wHVaQuKp0`;`ka3CX|%1
zd0xIzJJ!46&i$Ah+s3X7fCs{B%9f^|AcAUnX`SgQo)k$I?HF7MJ!m5UL+W_a6!3sJ
zUkelyOPKcr=v!Z)ydojD_A_orG8!S8+%pz8+>+V(?E|gSYa?3{-&|k4%92o6DEF&c
zIjNq<zH5(#Zj(gGG?o=D*qGf8A}wQ;>{>tSAx}hcO3uVvQ%Win?S`2JR9)YsbP<FD
z!zRAGyQ)2JlVs(H0fi`)(}kC{$h~4hF^MJ~AiPJspHrYHp$ylL(vvUIPl&4H<@gB#
z{ES0d5Z$$Lj*P=mc97;l{T2;+*5<VHE&+%98A4?y?ag%6cju^tiQ%}M(Ed1NGkq0~
zq3I7~9=c;Xc5LrzhMQlXr{j{6ayS2(N7yeZ2iO3QZYDYS2s~DG58p&apTtFgj`7X)
z|40@BzhM2H0_OEQ8mW(ETT7-3VYFx<KZvB9WbdREQcRcRaf|r%8UTRH*SBxthNj6$
zYO>9=?_Pocf5Q_BFe<-5C$j;_6w<Qo5)-VL6T6;GSU<e70HWDPZg6PRN-AI>2`c#F
zXSn<#-nrZy)S$54JPJ*f*<m1NPL^u9{<TZs1pR#pwOM7>Z2Sn3rkcqU#q%R^>3@W)
zMV1s%4amybao(H#84_TJ+PI7IlKewo)NhFm-Y`a-dBL-^vc?&j8*Ww>RU5=#UbT&#
z-Lkt-j;rY4>vu?558knm-mt#nZNoeNAw|_dlDN+EcnshcyexLY`+_3dgMlU$RGvqH
zVbb)H1a%{0BxKEx%6aJ28f`=z$~j_M?YV3$3FG$1?zkY};Rt21CS?<ZSk2pJ^FQN}
z9GXdHc%F7e920C0TZ4-n(&P636BsTT8PjVZc&}Au>7gl|*3LYWB>H>#fs())y#w&)
zp%pi}N%5v&r@S)yCcYLov|y4IyznP5CjTmGbVNn0e_dzMhYH$4jMRFjI}*q|{h{$i
zM)Hj2S4w>0m#rN}A*8okxQ*9pj?tN5$Ho|y*~XIwttvk~V(;S38Fg}WcLlFQ>&a-x
zv1!XwM`@u`pRDhKDA@f*O|EYwti33Odr#RG5a?$s=22~DWBq_NO$i{#VnT<3PHRKl
z-6ydSb8L9G0~4yu9CbJ-=cktr=dbqkxB^TfOoLiBR!6YcMOdO}^*QC<dl;Zf<j$JK
zQZaL!P|hDy+_z<RXSJo|{<1XZ30^d;))$J^9BxV?s_Xg~HxDNKzPM&j_?^#pOosW<
zmic&XX~EkY*pp>nCmH3ng(p<iRa_Ex3%Rxh7Sl~fVt=00*_P@Ji;BP*u1-Y(F5$xo
zv}`(Dw36XbA&}OD+lJZp?Y;m*A}l615N?Co=w$Z!P8x#kT7h~I94|%GyijF#9TcST
zb<B7imGoNto|Yint6>ruCYr#_kVyf+^tTx>@G0#DPZXk0v%#+*It;rB)TS|2<H1UL
zFnP)0y4qIY)(*QH0O)!_w39;FU08E^5SqcUkBAiw`p1H!)q|6<IT`wvGHLPbLOHYs
z;T_9jrI8i>5A>D~(f(B+HH77FQ_fN~TVdl18jI8yu?ckAv0B|M!kZ2vmnXw*_yCyw
znKaKbWZItSmNWg<62)^G`M8z7QU)&rVn7(MCe}d9RWaPIy}eI1UI*6jsu-xotBU6m
zXYY&t2VxRfP!LB(|BXbMGg!^Iz-_pf9#%?c5Z`TB%;Yb%=34qq=|1Mf1P|27*UQ8Z
zu)XT`^gd9+vHeb2d3V3)LtZm1Hbvr%myTqZwSdy_3xp416K_MC4QLEa+hvfoWnjlc
z_xcum%EfU;fbyIA65DjW+=yS;geV=a!sqXwvpSlkM{t-c8A<|THj!a&bd$B<&|;1a
zVyE)-HT=A1h6$xg47iL$6~g!%??H{`#&RJK4-Is#N>Y?4PVkE5xsjr^)Um5Y6zOc7
zFq84rGKZ6gEhw4_12=UFsk$>33V@qA^Wuyq6cxOGnKWM*pa>cM0XY{UMm3BETf~NQ
z^Lg6{$~{WW+ee=WJKd|~%|Q?o%w(nzKU|p3{y4=pjFUD6mS;qDdjw{?-YS~uZ(kqT
zpMSTQeRR^4KfCP%O)Yf&Blsav?Mxb`A3%rX1wmt#TiOUN7-%QoN{|60lf9)-IPewT
zE&96c@A2xpXovm3gBkPz+bH0)c9!*@Mx&Aq2caw0_K-KnxpUg;x+CMmhzDXd93u^D
zo(CnJv`0?wc5*?hK1$@j3fcT48|cBkzc6#+MiKQptATbD|JHpAJXbX?o*3+fowOo(
za?|7P#IRkAPV0PO4w8k4Ib1wp!t-N!R>9=q*~~h8t2z28ULW#W8u$QDT*K^8dKc+#
zi4qd>>;D{0h||b@<d2L$VEpw$+m*c*axyTE4t@X%q$Y<dY5jlS_(Uh881Og5i6~#V
z>7Ar{My0Skvi?i#V!Ow#1h(iL08Ro>_a!0BUVmGY5CKpPnfF)q70mCk#STPY0{y`U
z6gdSP3BctwG;F^1tgYdh4I0q~t|_K~OEudi1(Edls<n$9GX_>xEn5Gv_qQnL$e;-t
z&5JXYfW96eZQIO)%{RWjaFEv0P_<m`^xu6pdK@T4MxS`ne4l<Tm<^BUH^Z_VC5z1@
zY3)mKLo$oO_YW9Aq4tLIIetM-TKoP=><W`$u9^P8#NDh-(e>{Un(^Mw@JZGcHB9cQ
zIdrssU100SE{}=FNEM!fOdZex$qNSA_5vEJ>kQl$K~5Y>@EOxQ4#o(}gcVRP_AK4t
z<mi(D;kKWd?-dQVn<)(Kdfyli2&uLCc@Bz^5$UF#O<sIJH}5cq9wrJay%#~bDn7%x
znQv`|RA<P+)C<TP*=uc&U7jO3IdK8#2${6Q8#vOfSA)vQJ-CUe!@>F5T!X`P5)FQ!
z`s=y4Mt>Qf3vx<`kW!G)Ho)m~0NHec<Q0F}T!?>iHpX@T+zEEC$t2UYNTA~Wo&15a
zg4sn~0$=8Nxft&F69V>HevD9c;sB)b);j`(o-v4lWk!g53-CUZ-ZMhIYlDk_y06p3
zg@Zz)Ib&JeECO8}xD5405Hq_dF39Q-jd2~imPRk4qP4=U@WX8Xt~?&dBU9*C23ac7
z9gc;|t&=;)9tD<DSorLF{8uK0ggp`~87`T$DEa&*rE%yBkXu_x`WF}YU;1gs&;prz
z`}6}0^=VS1pyZHMvX6T^I$BQY68lm4#XAXO(CxT_I|N7~ThM8v1EVEp{{%rgV$hLC
zZL2U^)f*vppa!OC3|6hm**orjDheJ!Tdj?e*?DKEZ~d0#!7#6lnt!OK@93;`b%azG
zof1&8hvsMsfypJT<ya|OvGxbT%R~{Kd@y-Xq`$Fmu3M5`1k#Vj*sxxWtFU!TO&G%k
zWd*u%5gfSBZwezzM=4ot*$zp}2%&F122=56xo|MYV6fxoxBLW4g;B%tDnQs$(GE<>
zCI^U(;M_%YdhInZpv;)SgVD#4QT#bl!Fj7KnSguS&09r8+IZ;CAKo_Uz@WCJiRM89
z%l!7QTX6;5<`a)PI8O%xB@YGd$*d|Y(P-b}uC08jxjqe{3-NF{+gO^o87TAj^I|&2
zTsfQ!1@pOlZSEj49P9bq*<zUp--C86i3XFF({?;`OZh3>EJaH(frk93&jhik63*(a
z&~Zx>R974Dzg9U@e1~a#R*XTvVsgSsO%o<8i)Jo~0GfVg2$go*;0dC8v;%1<9uBsz
ze{wm(nI@DZ0X;4vqe<WweQgXW|9LDw_T-n;K7%kU08YzfGNel9-=ltW?eRdNs-4*K
z2N<$p<~hRMX1AQ8`oabCxU%d!2B+7YA!g-oIU(NqhQMlAXb|<b2!GVPjz6J}+8dZ+
zmyhe1$(YG)b#<DhzW^@sx61Tv&LQiS8Fn4u(TFjo-qz$c0s#1Ucgyx}#SQ)#-l#LW
zCO5-#2>zk%(b*A|?8>N6b{rq%6k^2(V!?t!U;}IfeG`@u)PmfA&UN-f`=^THCz+wf
zz)7Ny4-qu1r1O9vzra2^wha!K>YhVF+Y*=q)D6`6R`lN5nG^bWmx6;E-Fa4i#c7yb
zp&f3`*%=^+y~7W4!e_`d$`mnqxZg+@s2oatV;RF;3oQ@O^DsO6B(r9sMu@0@;@Ff?
zbkfK0sX)WBmf6^>BI7viOhQh&pywMt@i{A1cueebGPYMjAfigTGVn|%m`uNtEo~>4
z1wRvDUu+A`okQZromY?(uMqMuq!<pRV#Q2DKHkQIaSjMh-D`Xv#E3VL>NkrDAh>63
z<w;P(au#bKmD>YEt#s$+k$!+QfHPr~=(vN}jP^NYjl=-tqdnJ0Z#vwSs+EqzW<~vO
zI?xABCM1teo~yLEW`P^Gavy#|p~)&WXMFlqm1)v0-z^Bc>~3xl2RZkW{tgZ{F&Tbl
zPOcK^Ok@s9Mwyk@!~yCYK0DMi?g|dpjFsQDBw8n_hUnfU#vTy{Iu>yb%GG<NbTp!J
z75{jYUqZv>sDluigC$%uK_JXKuVkbPFrF4$R2Jbu&Uf5Ooe?4`UUx#E+OkgB>GD60
z`X1WLAG!?cfj{@q0quk@<o4iSQSF1eZ5~I@ujW+bxqVj)U+v;Qf^FoXQJq+}G_HYs
zDWyF?Cm3~+bDV#X-$$O-TDcHcWB#mo0=`k*_e{{c9|5tyxbnCg!r56mf*Om4AbkE=
zb_Q2b{y01ygjBdUqvJ)od~G9c1gnjv8xw)`1vYr`5!OBe<Sf>D5ipba)z7mT_@8NT
zlBWQgB@>0DOmc_&Ws-5^#@G%TRT~>HZwaF<$&6vSN`%+GX6Q<%xCnjIlU!LQ1kWt3
zfED?dRyt8+JR~m~7!k_C1ZlY~t+K0JNGSLHFA@sFWQefQ@kku!@Y`j*$~p*Jjw#Ii
z1R`5611}V1%T<3@qze-74pjDqwB__xNE(LSFOGG=FpIMJ?nS}yFh^gSX16_c^Rih;
z>Cbk&CG+dW`EDvfRYVsQMljC}om`=Z)rpRr4DsGODqS@Vs`BG1?{(bNTB_wot#eEx
zdfN9dQU&akZbl)`p>0!tun5_{{-!t}??5t4Y3BAc?pF)Gz{2&0fO(>k|6osE%ma`!
z^4jxSrbXBaJsBcQxRMrG;mBkDT%Ib-vwv_0f=uoqg^gW@CZ|iv@InCNh0U$sFACxV
z{JOk9)~Z)p>WNDxfgf8jtbzr^=l90b?pGW2EKcV4i+1GKF(GD1jrZ!b6$AV4>Z^ew
zW9}@+pkMc$u7GASotKo)R4f{B(WZ)tyJ1m6#dD`ata6X_1lcltax(r9(RZIXYJ~p=
zB9Z{H_pBKd^2*Yb>8*u|^{V~4phE0}NK}btl|Fi%kUgv<&ymCMXFjbTF5++qiFsP2
zo?)X7)XU?8wF&J>XTKKbt~T_6l@^0|x0#Gio-tKhbiu&2bGU3;qDvN!HuvIR1a)Ps
z?&?B#qAbC<e5nNWx;Mrz_3v0z1Pbj8LhA=yZtLTH(7^hLpL^*$S#0L+E6ouJ{f#CG
zxNfNXaajN>vG@}X`~PP=D>jQa=7Kl!0D~=`n7Jltt?&dSu+xu`nmP<qH)LYxr_YsJ
z$f6-t4H}N*4+Gsh!A__6vB5c(uz?!QW(z6J*GKS%CFm4=ihrL*>j{xDU%+<PliP;F
z6g@r6tiRE?81IV3a0Q!9nM)kc_|Fal$ffT%)BOkOdQ{{Ghi;`*6mwT>b3Ee*7afWF
z%WB~>Xu5(vc=#7*2E9x<5=JN=f5DqjD8uptf-QJ0rV$KMCJf`Q4H{zo?6<k(;*tn?
zOkMsQe|}@?X(R=u8bA0Kxi>RW_WM1o+-xG|1Bhl5q(h#g><MKLI#Zm17RWa|G89$L
zdH>Oiqhs9MfgErFc4)mw1GKr8Ei5RnyX<S&I(Fp2M4k7#vtEw32LxOEpeR&HI2vH4
zlGt+6Xbe~}GPIk$vg2lle4(Q-VY@AoHT8($(|SJ#pI(2(ntP=oe~2;R>Ggq3A#;x<
zoz2~Fvr7-C|Im%^12L4(t<`P*?YrW|=fRA4Mq}^)Tg=-GAeBXBDU{@IrFIBq5M%8K
z(3g^V4I;RVc_yHG_4kDh89?j=)2^75Lh-Cl5dyPL)K&PiR~;8=^N=8Mvrs2gKL^7$
zn~nx_&-f5ra{;lz1x%}{szf~8nJ<zYD7;xL3aMgG=>cb&g0X!+ZUxO$I?K!u$J|HX
zMM3s_;T8c&@Bqa#V)H=Gl9TSYF+?YtWvrL&61Tf4>i6beH>B&KWw2uBsSxVt$%p-e
z_t}s`Jb%MFBR4=049$-krgv&z#Bn*LKXQ`(Pji~};PMFq-#K!E32}kWpNGYDJ=3W$
zWgL6Ns8Hh|XzkaV8F;w)&k<y)sXPJfXmt<yK|F%B7t`(RZLD04J0bmE4qm1<WbA?#
z#3es5X`2gpZ@SL_<AyP+yE_n$PB~Ft&yN-0VB1P#To%3x-J#WZ<9>}i`c_~XzPF1&
zTJvrarPEXFwx5<ca0Ur3weub3+q1<6MZXLxPZVD_<^FWye_?_IGOk3-TdyNAHayd&
zuK;p0*7q<OWA`L41T@g;9>uEV(spOrd$u&8h}<*eg~Iq|1K=j5h$GfVTOQ$LEcIhd
zzqhk6aER;F<W>>3`|{*Nx0}s6qGX^YoCL5as@+#vnc8GmHwk0}7)tbm&i2AW58Z<}
zCRS=r0uqQgk#PJ8?;J0ddzrG7B$}{auR{zKxy2G&BkXrd@j?^mW?FADXOXP{KE(lP
z?E&_CdlF@QR@4f>s%|h(6O#AJl|R|o!Y8hPj+x)xE9=<+<{RkNaCN`D+JSgBp_QBy
zd~~uN_H<TuM*gR7oyQn)NT|gJ_ThW5&~n%t>vroMDZJvp3FX6$DAGO0gfzSHWIxzq
zeWNr?u1{svMkNupd*_HZy|;OiBv~JLn40vjUvR>o2KPqY5egt#t9sweDH?}eP2RZq
zGw@A<RbjPx3$q45Fx1hjGe|iG=I=XtP5w8o9>r2xyX|f_ocoR<&a(6si4T`*ZtR;s
zGez1%&w+^0jAV>6p4SJLUxR-UB16$sCF%|06KFB2rs6P4U5sk9SK|)!Mu*ez7Yel)
zr<Se3SGI`j^aQ81SY!^CMpI-Kfd6d=B>*U488Q5+KdYA3iyhRuVW8Rtw0@ty0jJlB
zT(KbCh)wN`Lz1VOgFturgWTPA1)u@}?$h@%nCM2@9h|rdp>wDaavP0i5t#n~bi;&g
zLk5pKd66RHGm3LZZ`HfI(<JyeM{vKDR0coY1L2Lh)J<1YvJhXrZl=MqH^{Im(rGyr
z^o&b~q3}}J8Lv)|_>7b#cL(|bUs;svQ6y3H7I??%l1~R5zx`K6c)wGP@p8aK9rX4V
zX>)Vbp>T<VNR>j`Jl@BXGDJR9EV1F@z84em>&I3E%6ij4BMPXrcI~dv0MJ89GR`MG
z7h_{85pET^`u^Y6+pE`#j!^5^)%ZTq(B9NEID`s6*CuSRi1BI2Lc;}PVm`B0vjO-e
zp!9V=<+-<xzvu3}B}=Xk54l!|&wBkZ#<IQtF+TF@t&308${1z|i-oK6Zf-Y*Fk>Q7
z(^v*2ocwp+9YSykHl9y5&eJN2((2xAkbaeN3be@A5X%Q>)MV*k_=H6Pdq9j9q~Ivo
zd)7gW`h`o+Cp9lbY-K*$j<UxN(+shD5$|oe4zNUUtKezmhY~Cc(O!C`KQc!W0HGF2
z%MQxV!eeZ4zm!AQ_~3qx`FH)ylLI24r*OCh_dLjFWu9_rOSuU`4NOx6)v4~(vu^&D
zp2*nzdutdHIH29y|4-Pgv5I?11#Y=+PY0>n+L!llHfJTvKqV!B#C<jtA(|cqI?IhE
zLh*{*#e^k79tQ&4=EblfHb%u6dZ|Q-JrL!#AbOoI2j_9hBsk&yRKH?hAHt)$VNVUf
z1sV|6GT@=XS5;1jfIo-~of1awd<XJ9YemWpV73f7Z;8Rb*ojXCpEh(ax}$684rQll
z&iy4k$X3$^?FAf3h-*DYVGKD_c{R_22?dXDNot9!0LG@14*vv0q!eod%9%y01;we=
z_TEU>YB*?v@fuw~snEV!orcu0D7NDd@iB)Ks`AR|jpnx_H`*Vvg&-WG<Ag)9x$h)!
z060lkMO#G#*fn27+U(*4-grS1$gv+*ygR-1ad>v}SFja*gGzO!cl$SZk*%7j4E1l3
zym<hooqmN#i-y4o9cOv2!-OOM6s=LaCceom@K*d}8Y?26J^lqSjtC+DeBC~eVW?f!
zo(uTk09yo|RQKd0E%T~2Rij-g)=e)jl@Tj8>1sN(VNR8@`gKwFq$33xvpe%?j7|{0
z%h9XzN#mC;?Jw?%iI{O4T8`Q}C1FV%c``$i$LD+gH&+vlXL|;`$sT%R{s3p84}M*0
zsvS^4Q^Y@cC5KihErk?!>rx-c+D@cnEtotSarHyzg8TLVKs0^~XYv#hbOJ_NZGGm(
zHUEIkn}y>jN>&{qhdg`udWJHH(yuwu>L=UQ6s4cfi+Dlcb`R6+fPJnp^$8$ILtQ=s
zmWTBpnJDNN<_i$F_;e7R**nTD!hXoN*RFMwj3A9Ya%gxehg-!F;H&lYUR!p9?n#C%
zr23T^Ey+MyQ=s;tof_XuF1QNaxQ5giFHhXMq-g*C_27`mw=r<M2)({^whYU2c_0pj
zL`jBT+Rt#JA!2}-P8!0sMu&%yrK)f9(IT}H9htJF#emaNPlenDkz5N_!cE!qUdD!V
z<X@4<%ayWqe8~}WQ{{m&%E{;2kQ=GP02y@ZkFk+z(Zh*S;Jebqpk~8n#@|P9OMPL+
zJe{ezr}+ldbioT*!!7mn8~`z$l$k+_dpNZ+nuB=H7#MOgZe}+y+v35JSp>+3t&WXd
zb__XXnd5(MtLgIYmb$lES0asjN&{d!fT2~nD@&tNMY10_E@<85D$hU+A!snoyFsQ1
zuRGTfx=hE^Y*&_G9#=hA&+m+TY4roh&{ZZT@Tmk5kz`-efz>CXlSm7xM`6bw{;vk4
zRM%9F^9}YqcfId~--s=xP)B>hakq7t^1)pWuHN^pVINKu2!{5dGwm2diI43wOa@hg
zGsUadJ9w=MyDQOjr1hZ{+oaaH&7RpfHhp&%Pw)X>Ij7ol{MY56EWrG{_57fZtk%rN
z6<#p;rU@3hT5}uy?baALQ@R14T`)7u2K)jH8ku+h#Rw?iODSLnHQu4oPp?OR%~5mK
z3uO=pT3Zn)lU@10f7I?FN1R>f7>yKv(RM`wnEJe?tDnqi#+n%vP(a*g<#p_EIv(jJ
zXA}$6K$rk5Z|PM#mLCr+`x8zU>z#S+DVnSGeT|w4Gt2{M%G%#zlD_4mAwj|x=H{Gc
zh^zNJKIT@NhSIo5`QHN|VQ$7q*)f+}+cl_Xg~eW^>D4XWStPmTg<5hYBz#ETw;*N&
zX#J&QI~SCEntyW~pYSms<7qBE@j)CrvAu;Kf!BUIs1<^B^ZhtmOYwH~j$%?M2zO$k
z|G1(2W4aLUF)3}-^hA+SM>Wlk9YS9403bo*WR+D#4}t!`pYDF}eH-4DxMWP<zF1x_
z!Jd77M;V3R4(>qg^R^Q#6)hP30pqR?cCsScry@aAl*jgg=cXRP2&8att*l&mgMGUq
z<8#r{a)_B0O^2m5X>s{%LP3$uxfj_BjK5AGVNk22u#G{@8a-Z!&C57W2F{o@Fq$cT
zs{y6aC$;4n>-U-|<xVo$$GjaS^QKoz0iNqpfoPLWgw6$AsWJ$uxCe=vfUjg^lnQ@%
zJfoGGc#Q>+yQ-e-5o6_oM;+Ox_x!tJP1Vh`U&wz1q{N}<7vpIqd3ba#(#801_}=(Y
zDZUZK<!>LRSc?~J=7XDyjJoM>u1rB#9!(|y`d;n<?C~9zuK;B+0eTu_>JP8uy5BDb
z!gp8$Ynz|Pd#r5b{K1?q!3cgvhr-|W>M0~r@$c_j9xuBh;$4$)s}=J^@%I?|Xp0ew
z`Fs#F09Sdl2|cu>h>P1irCqF^1Iwp7cJ+JHk{LE$yntEdulQfeBUVVu{W+&OY4eeA
zXXP^XjF4EF%$!KfTee;jreScA7_}byKT+cGK757^DH;n}-g`%;;bc=O6{l^axJR|V
zF6EcmEuTgo{NPO88`bX|J8U5|Y$V$S*yEXJ>g_1kFvxy#P!?xTLf@o@>yOoVv%wcJ
zDD6!GrXkW#jGwR>rp);C47{ai0DhhLL;`ruH0m98T9<(HWH_nHuKWLV@K3~Dg7?^h
zM`70Q{=eH2ThCW86L0Cx?bZ&gtGJqg`F~VA7V&<-c8zSY!sZ&C29Z`xm){U!<{*h~
zCW+w>9N*z*bOj#6lgxoM+7wGYl7H^b)Z_PjDkLC^mJ}Vk_sgXga5a=DoI~e(sM1v1
zO?b{zXa<q>i{cxR1%{nO;+Xr}fk*bsB2{R9fRG_2_0MKbx^w-lYQr(1&rdTVq2KW_
z4vXgxTN*0RoVHg@ld^=ts^=u|WwAk(6^uLGZe~TP^Br2Qv$eBuC^ARQnzGGBRl+5f
zqc|XAmK=pbn@al4Kx}t6Ob1?PEa<`$bm6Zr-wDeMggFVQW|LS<VP+iU99@w}((R|#
zO8ieEyGT@kT-|X&E`Z5|A5OKD>&>3g;ZWb8D@%r<_l?7z8VC{p*xL(sqe@b-+ouNq
zH1Rc032si3ZbUUtQ%OR<`l9tUU8YrSh2h{fGUi7WVI9P{oU6Vy&jv3ZY*%(#A`iP$
zzt`T`<{=5s*|JokfI2JTA%tcurCDV{hS_w^>;f4*<i5j%?P50e1XFbfaOl7e>H}Nu
zFYu?-jb!N_6MZ`C`N|;&@*xZUqAZ)xFHo4)Sz9B6X#>bMpvav;rT04);`+`bShK@B
zdGeOELkgCEEGa#@yT@n&ucahja~7E77raYX$t`_=8aM^MjNc*6Y`xuM0^Aa-Gd(`s
zbGI_G){H@RNDO*Y+Xcd>vQwfCCp4}lVQzCzWh2DOl~N|vpZl?xNuLmAjlS-^nJ#N5
zFy=E-GH`<J!!17p#`4}#W|2r4vIjd$d$tf{lQuV{*4v}J-eh}q2c4_8kMtM98jarS
zP=ZxW#`9!~&W_Xa*VbGfv5F5WI;ON?(HWX6hI`CA`2gqz1C4r_05`pn{CP+Fgg>Uh
zPf8~y)i_bHUbHC^I;p`+`Nb5}u00m5c`hL6h$a$n^dOQW7N$MCTeC=97t<D3sLZ^z
zKNn~fA+)s|unzc+uQbuHej_0XKC64DWD@6nktS(WHxGR3L%6GJGj2sWH_lxX26<UI
zR=;pupPqcDLa1`SJPC!57&fo+b=SM14xF|@)=$DfM?aNq&Dw@u8(0b|W=2FKIjm<D
zEiDKh9S}VA%21d5DWCBy<F_sXr>8c6HZfZqGlP+)XyzwRgo-B{M|*8QV5sQ`vd()+
zfNNh~iZImLUM<y^9e)Yd>s=k?YschqH2O!{#;z>tg4S9e6_Z|{Eh_djb;hD&?)7K4
zcNqI{Wc|_M?h1ch4n8T&OvzzkAu|}ovp46+B^)^*&&zH0w^SEbjj0=#YskCG0K}7A
z+6;YNueuEJ#mwcxU75_jRkK+xQ+*vw>7^r3|Ixks7pEm$3Vn^Djpe5n7E5U~dkEY2
z28jzSP_Ft=A`$!^PPy1Wu7r7Smg)$QRd>Ss<DWt3X+bvc=^?g8!>S}+Zb?HEttiE%
zPUkkXf~76+EKr_(?Oq!!(B@vAz7_Z+#XxB=@j~<fj5wNhPOm-8iMy=L7m3>NJ=le3
zNK&FSN&~K=an5$LgcR^-c*&<io>dJ>g8S-&b6dA9m>E%t;w36leMV!qjnv}*7c=q3
zGn$;Z2vjX1hqifHg}kh6g(O939dRUN+;L7$SI)mR)#9N*Su@@q52Fn$c3}N5u>!-6
zd4^IS0>1TBU@<jI@tu6_S%cNrIUGN493$6?n@_2gd}Uu8?+=k>vNyX%!te;Mz3r^A
zHKW8zYBqG)$meK>Q|wqD7j3$5!zZugAojR2tc8YP5<LhN{1vMe!)W7nS#N+OFWy?&
z1~CcEYRHuzipy<^``#&~-YGP=y`b?y3LN&c6<hP{Psw`~#LRAk;Ea>=U^0WR@xiI8
zsC}@KndKniE{OPhD(aeWmJt;phMR8?qb(J{+)&1Fd{ZtEJOH0B`4~YM^6NiFEl7(8
z^9^A}x@GA1r<+p`I1{Yhb(X-b(ZsA_MZ)6Dv=U-f#4>=)GVAw-Yn^0}0y)}(o31%a
zKw%GWN3Rf*f=KzP5NY<<9U%B8-HA9$i!%JaCt?KJp+ivfYLu&E)08Tw|GGKXs@aAV
zl1u~VS`nKfH(%>RNSd}_?7;JdsU(=El#B{V=sUD+Q!*3E>)iuj`bK5!&$~=b0)4IN
zcdF1n50OcCVyc}x_=?2}Aob?Jnz}<$7X4NL`p-d^m%(WW8oCezVPK9h#iPKQYY?ny
z_ykCXJJPq(tN2}njbb)q06e)?1*V5(7=uR)RV<MDzu=5QOr?<+`|O~)1kYqQx){Tc
z@YLwl(yV>tI=fmV2IfGMWC@CNf&>Kt&h66<FCaD<@ml4%CkG^^VPqKvD(syRpD|{(
zgUfh=-QA7Pfk%cU8l{=6apy5i|A=FEWs)7&hl=SL__Te%aGwkv4MPfaIT*pLbbLU_
z8p=jwQ<-cqy6_R{-BOiHSdM$QvAnD8jn-|FEldu?m$Vq<^Z*u?7PfRpH;8IHM6^Ux
za^N685XWG-<w<f>V@w9UF(?hLSK@Yo-EP8aaMV+|<N;l&$p65FESL25xtp`?R7jZs
zEotO+4^I(27E9YS1s?4PDa*Y3-ImgOGQEo#(^~xIVDPtQ%XaZGdEtD0meamX+ST0z
zeH^D{M5#Jr6&h*(XbDkxOOMdgyzXgFB-kfA1Cg!u5i7^^#<y!rAMn)1pfs7tT^6ox
zlKOn#p=ZzIE3(S8{AUfaZ$Gx`q(ts{k7x404Fma8Qecz>H>a3lmg(N~j&~tdmRwap
zC+g8~f$#fiq($l#HH#9#;TW93t)2ZK;=0Ov@b%liux`v)Bkh8AP(k4N%;z2`ovh2Q
z)mNIxa{&v07SeP@W5bffmzd!@Ss<7BH7BJp?d}R;2gmCm=PfHZm<hJz8$IK2(uW~{
zwq0~)4VrIOTy(>lM+7l>A^cqE_0PNxHU64tUrh_GjcSX52(hAdh)BX%eJPx|(5^*e
zIw1;n7i)O}itB9XBv$!#3b7*%E-US`pn4R6cxzgbYMYI>OMI}(gs*(+ULtkr7wp7k
zuP6ds_Id25L|b<L$OOhX>!8azrJ0vbRDj*FT;G({*7y<m7;Fn8EZ~qa?Y~)+;P#R^
z^VGFOet(`q9D5bIDz^Ni>~f>XRVIf!7CO9!fob9+0uh|j6!Mm4#S@v=kU6D>DWh?H
zv<9I5`Ia~HWpW)~RF5{*EOQTkc{My@HCI)ecJ4nw`zn+vAhXtvGYUYpu@U>F8X1G-
z(*L(qpxB<AO_0ag$9%FZ6L4>?8J$Nr|KN4Phm;QRE_;KzyX|}o<aHsM8*69)ur%6y
z{B~c82pp|joXNm0u2F(8K!WKwEbk>lca9%}U)qIF<fJkMWs2kWipOHwhMW&s!wFS9
zN<K#?Bui3ZV|lhh+((#!skKC@&=)N0Gh`_j<S5XixZ1@6SoJG{pyBCMz?h;!g|(};
zmT5l5Nn0`dRncl}uNfOQ@%CS$s49XutkqQtDxLC~!BPhgyggOK;qAlfqoCi1!~<54
zPX-IB=5W(Hnmbvi@E<;H2X-g4asB05YRFjVfWLNa+I(my_hDxkP9gU>*M0p{4OPGj
zUY+pYseXQ;;JSn$J8$iAY9QZ;PE$ltuW{5t)2^YGbfL2~M&ljkasB;?b5psa2=0(o
z4p3g~z<uT#B0XBgJJQo1eR)0F7l@eCOdHvMy~gyya;8kuTErhxkCVh(U^Xmm9-X`f
zKI=`us(wG5E;d<E_Mc(4(K9~)V=o!!aD<QiXLN2Wt+fqgChq@2dydq+=$n)<+#)N@
zL-CNn$w+kLU=V<H=ocxSR~|^_9uo(6xj(}CJ0yZBa$AobJ;;bC*(d;*vYMamhgfsS
zDQ@rVEf;1Wvu+{LxHw0$aV;kd`X3FpaHPuUil9WKIYlStBH|YaQlH|Qvqu+h5hK89
zcG7<5WugOMTX@yC{T}uFR+vvg@6=MtY1A5K00rJtf66wt2TXwqKooc?3?Uf}r_HQN
zNBbrt7=s(`1rMe8t|40!nl=s(-pgVT6Yi*TBl-gJZ}o~RZ)df+8yQRpL?ndks_SYy
z`Bp|pv`&VPRXl>Mh3ejX&H~PBMdBHOBij3aIFn(swr8Z~V=UnLI)z6M3qw9l-QyFx
zN!RQUq}Kso!3&S5#RzY*wpWqrDaCA59k=`$#k=vjo<np!hwo|K3xuUlb&}vfJC@>E
zKf^`3vSpOLwkNIA<;GaXP9o$4x~Q#*Ig_PB=uRR66q-(%IXdpLqBIy09_H-)q?H!%
z&^`z_3ny>=e^E$RU`Y{iY}*P{$;<G%rgDgx%+r{|<Gn4_M;3I6Ctf&-IHIr)crj5*
z1?0mPTuyMq9U|G3(bG}yMA9V6H{Az!snS5`Bq6-6F8H8yv8czMU}5Dg)UD8m03+B4
zBY1~v`S{|*CAy_QLU-jDr8;WiAG0<$9%7|!pUZehYmJ%z*GG29kI!*QXT#zUXE#=*
zJKR|j3dRcwUh`!GGt`U5&d^{bx}ZS1F|gRA!sBN4Xf7>@bulrW(WW(r&HO)Xzyg8?
zX77}sy!G{bqet<ktz{ug2G`(Ozu?r48zE#vsgkv31hyo7T0UnmeI2JGYDPXUXVG7V
zi#)ZlQRpX`eMZ~3`$SMNtoV6JuwiN{V)d-=3IiVns;{+mRqSO`?H?nV%U_|qi~{+Q
zu;Su#96dR!0$f!L{SVtxC$HlUvxkyDg#n)6iiy_?srrU`$C<QmwIvb2D9;@=c9G)e
zki|+kkK*2{AQ>QSn?15qKmx6!HgXtHtlT{~B}!fx)1eGkH1YRPuj}UCh7j-$<=9ZQ
zn%GbB22?wGNJ~J>DQUyN^&1V3rQ#ZS1uy+>yodKcLnPvs$!sqO1Q2gPleg~0FIDE6
zO^tx<hh5nFFjE#ESpHZE;3iWy7zSq8rs~>?Czb$IUWKr-ek;lt@Nd)-crN1$VDgC8
zwW0W%AjGGSC4`Vc*P(CqOePY2OB2RA^lzUn&d8d$=U>xbO<i9SB2sg}q^XC2F3xIr
zlw)CI5un+sFR|6@l4cJJV^drJ(RBg}#=RK0${X`bH+>kdZ+%y-&P7?tEqr2+PMq)4
z>7W?)#97Q1A4Eb9{Emwbg$RLL;Quhk?V4hiUGgeFQ>umxP#A?#kVvP<NwnD9J8t+N
zQ=8YhA5`e4AQDv%@WN<^NJo2c_MMK=z84kEEtVvc`#9D!j=yM}h(v5nTW^Nko<?k!
zzSIY%>?r9%u-8z}?RluDhbv%3Z^QK>*{zg*;TqZM;U@&xAJg}{cB&mOjLP7H2Ok%6
z>#)JmIKpYR=dm<8ViHqPm}mMS4bDLzN#H3Pu*b`~A+mw(8cpENauP!K3yK{3m8vj=
z$@|<ei3E?{?EED?sj$1{+g9B(3h<Y-Q}=1{X~LoCfKiZG)hM-uBF$A6i}yS7pM@3u
zJse%DAZm7#TV7Y0TkiDpx%NIJ1K?p*z)lTF_b$fGZOmeZR7#8-yOftNtaCW=76O^u
zWCu{kAo#9scKc#?9SYs1N(fiBDa!)V4rKUNKgdSWFSVdp`3fPVW&9sdXH{-jt#()D
zuDffeNCiZmf8)iuHPHUa<mdqaOBTC^8nBb+)R~qDtbSva<F$1j0O-9M%kVq%6EYFh
zL62v1h@<D)=?#X@0W6C&kab;vx0nQgcW8!L;+dL0EeU(!`P_=H-R#g%PCxIvu42tT
zQsa*VK8+<Kt4hjI9T*2v{e6Rvl3l9q<6Rof*e0<OX~VA)VSH|8*DU?Y!jGogg5?!2
zT6ogvUmNHf7xhDRAt1Ps<c+UwnD7wVar>?zhS7*kA_I#D%=JMsNV1{)Z#)21#0+_=
zr9i>`YsSFC$f(sLwNyCFCzBKkmumo#OFjtJLg2yPlrM5(T_P&}oFyRBA^a26a72Y$
ziAwdKKQ4~ZM83;u_=~sox~e0YP332B`IZuX_7k7zJ!k;{SEY}LnWu6XIId+nQeU@5
zpfcx02}t(8liS1HYT=P&s+6s9>Atwn1SM_&s|VHW7-u83tas>%p24z=&b%Bh<d!rV
zto#FWWR???Ng@&~yHOZD9$>Iod$wMMui)DGHv&u8pI2MgzC@FyHYKDHq`IlE1}|U+
zIwAS(n$4_Gu+LjxDiat}Kq{t$yJ_q0l2lAV)NYANRQ9i$%hbykB(y2q545ctIYA-3
z=G<JdJOkY%1yIxkt@}0!t)65CVYEQMDx4j1KKd#bhW;pRQG)X6asbsb$|%E`DHd`l
zH1<E^Tbm$HQBQ?|^IILi2prbg`k=Ix+4}@m7B+ma;y~8$CvOC#yM>J`vQ^JJ;mr9;
z1!WExpyJ?*u?v2;^U{im$`j@#AqrJX%~*}qUZD>QNmW<O9EI+b7_^Y|X&u@)a>6u<
z?O~<1s_3KKx8CUjYUZ=86tfkUo5#<ZP91WPp-)C9ufYzxS{NRPLy>f7HWXl(#o1_r
zPhyu<0MQpL`fO7#M*uBA(!T|T8dCD5f9Rwlb#fcHL3R64wX-|r`=559ohCcOcQVx(
zs-Wb-ryVXivKT@mgp%=iJmP9D2maKg1*^M&dGjb~0weUz>vWVqL%>~Jk)b}ib8Tv4
z3j*aq5{HGXZDyBRc8K<HoBc--{!(-onFp_feokPEvt|7-(FBI0T1w2Qv_p^9<S_v%
z$_8?#oS$Kabrk_`6CRx;>L&~8V-E+sk)XO)wRpIgy*TCfyGz<8{=IW^S8AQs(h%1;
zL6N5&fHfSTpeoNwJX3Sz)xq0t95oC$9XPluV;VdA+g>JLquDGg(l_fVS+8k*2fbL=
zXLj(lk{l{n3W_|b+##Aq4&d=sg3}@GQVy5!n~aGi$T|mpbj94WS|-*gwC`fYxFbFz
zCJWuqnhP;yCD-u|goIp?zT6c%+TfX`P!`LmCf;HJ=}s%@2PA!;&<Z^$&W3F&Hb1OQ
zjGmd{TDIfZg6TD+(b+T9!<OukGRsIfi`@a)_rS_Vcw29)^q`Ud9CP_~NHGD?ed@8t
zarltr<NJsCi^5z(oE=@qT$8z3sz{1ApABhM)i)mpJ2?jIpMCL!74#Q`n};<$opu}C
z)Qy5p9NAUR7{2n&sD=(r4~?F}I?eXz*O^34W_^=7$pXb!k%9<iCxEgHRcHVUlXZo#
zKcd_EX57JT7AAl&Tyrf7-J+09m2q-}j*T!doWG0dO)8Q^RYl+Lsl>U#Fa$}%|AZ(5
zF=n-P0#>5#=RUg`i#8@lO(}tA_3c#p9Xoyb;T=2Ai>tQ1=k*rJZtFLg<-6RWQJ7|y
z2IR!=8inU4l3o(}a&_?E@xyjO$c1>dR0_;TUcw%lij45(Y>|3xY&`qVUaKfgUbdRX
zUp#m^T8}n8j3~o5-+=XCm8T}m%;~iz7_oI<Ur-z1z*g;Bx<?Q|r1CGZv{9!tlW>6m
zLDASfzW;`IQr%e`&k;nfArpMMs%72`C|gFDFbbtb#;=FpGvGRrGvCF)8JRUA&Rql=
zEirHRYU=v-mYua>*;nA7f;v!%*(6594J_Ew@oYoc#)uo|z?5nJ2=*}*<*n7zcmf`F
zt$fsve0t+U!{DR4D}=XeO3ea2x)ZczTR2RsU(@<h8U#H}d16osT0`;IHcx6dnH?(a
zUwfo25A)pLtZwx>@K<J()}K_V7e8B941)tG8MK-cVV>Xpwny1Djh!a3X@wFPZ^I{$
zLGB7YcHe?tTTZ_A{bs1Gv`cO$5vT9j5m}-?RV;pKm^2v%ZaG9Ebmyb!7}EDm7b5nw
z&3ir_e_BKA@WDrgoiUCZQwj0Yk1|rVifkg9$<7$^Xwv74xN#d~3g?vr^k4<QWM;%e
zra>i<W}OrS+cT!^ZRIdrsD|`5;clSCh3bi;nee>R55GTKSxuQ+m)t}RwKO=wY8=H1
z<jo*7;j-l8I@)c(gsIJdjHLqQ$sx_W0^_#_**!rz{jB1yGqhgqaY(20j+BsoKi;u_
z6TKRJhl6n+zbLqipAfy(VNRn4=`^=^W;`xMlg$^`#<XmPAw2>Y0G?+<F;+td62XMp
zC-aQi5J24Oc(Ecb>7tGA+(7Q+|9X_j8+0V=>9Vxf>KwZCOv)9ArMVNDx{XdA%!>pU
zg{4wq$Gr`ms26LeNrwj>Wem1{DPu75&OW_%t)T?Pf6pM3oKqnd?pxWi(5O~S6gz`T
zwWxOMVdeIV6qo7xXL^qw5^o_MtN~%FNTdB?>L@FO<l(o)NG!=8)OlA=Q$HY@n&}8r
zRyJ+JNH)Qt?QF9Fftsl^G!*Bk{-vE^FWWpK*Gh`ePsu|>4zXhNc;9tD;pX8ROV5st
z!9o*qP2)+21vnUrLZ95VQ;>tNDHKRdI@YAPW8n5w?rFIV9jN-?;G1v5gaaLo;j|a6
z9MQxqVEQK<Ugyd*-RM_~n22e$%#l1~;6?|bS<P30d$*z~#C>{Q0Hfo?ry+cWmBHCA
z)&S(Q*0tIqCbxX1%AFC~FIhFZu5F+6M8xQjORp;_5Q;oQc>~6NOETs!@iI^^{F0eP
zde*&y8RWf8jUOVvC-A-Li-gTkTip3dX2mtfu<wgsh&FbACx441hnWlTuDn+-?E`dA
zKwJ_=(`8?BA_$xfzf9%Usy~*(@!3&81sKWfV8Y^*+CX81Dubemb@ZlJF8L1?J`9Pg
zE`3JHgM806Wp2KCobs64YibE-`j&6i@%=z(agt@H!!AaCmUo<P)#A2RGUeyEyV#H3
z;QYTe=~F$fYk`4qg+&7p#pgN9hW=q5*J>*zUO7QSEXZd*z4xQEuW@k^gG{ITkj5u;
zsc6V)@AeL(jL7UqZ>yi}0!gvDwL|=IjJ~t3(eP(@ez~)yQbio)CwQ-YTF774CtW_)
z^yGvs<5CGR%R_M0#0l~T<{E=(Q(%*U7N#e^RV0!|ulVo;LLV$lTbawEHnBbk!S1Mk
zBI;C9Ht^PB0pO7p(-7UVR)|dz?c|Y5^?B~xC%;7o8!Y&{-sJv0q?9^^pKQB9;Rpzz
zr`@|#v{xn4ju4)$H2d(6G?J}x0(<&?_886TWKeb(4@;gW)hD3_Nv$_^`xxyRjLP5n
zR2%D>jx7KPshwKhWVgm~#vFML8|?ql<GM2cvduFqo5B>cnC6D3{X0gtsjjv`z3ML+
z0`a$1Q?bT94ue)&7_J5QlZnV+O>&j>&=sk5$}5ol*vcse3!rdb5paxUyjbd!<@qRc
zWS^l9ql>eey9m;IO%Od?%vP0agt-MN#_oRqR9Zn4(Ums9QP^(<?dzkTpnuS&_)^t_
zlHeXOUDy745q8dx>;Uzv?xOuoNvgqtIXMHJ2_>zI26hD=W6>-5HQ@U({%};ZwA8kT
zDPHEBR~U<kA~8l`iX2r-VVds;3x7<!@OuN8&9M6;YAI(pxbtD|N+m~b({Qr~_Y-I?
z|Lm;Lvp=GFj#%x+yzs@kJpKNVnv4qz_{Q|~*dw3qbSxKvYYd$4D?~l3Du2?vN|Z65
zX=S{Oo%Iwh-uh8$<>j3sTK>ap;(cxj0_mep95W`m`wxV3=9F;`?dAn(2KQPt<r128
z<NA0$Nz_U$OJOqL>GJDiDP8t66g)3E+fx!)Pvja`KJp?YDhh(S=+ub}8GZ|4QA!mw
z|3kB|Ipi<905L_4IwAc1Us9N?)CK1{`->^I0ebieA>Ivh%XtEy8o)V%pTY@%dUZ63
zg%J{}x*)o7j8(r@KAg{dz?=FL7k3db&W#cfkHJ$QqwLU8zTMMGay}&<mouR=+z@}~
zy>iK2yKflyq6#Ws5gj4gr_MdO#(;wiT$=VLahT{z03RR0+BHRp%E$FY)`=0O^LMw_
zAU;s~bm89vBPc_KeU~l|x-39o=#pu#i3fR%OVf&8c_?bV1bMWJGW6Y#PS6hk{q8f4
zgR^x+CkBH!iX)B_BNpvW2X>O!SBQkYHX}z{Jm2+<kx3WLHM(2@8UMFFT<Xv~-fFj}
zbvVTJP9i4?wK2$>;oU9Ta|B0y4jT;m0z@m^5Gq-ki;c5JvH2V%aq`I5R!U}qUGfPQ
zOd!+G-91X<5&}+bELP`h<`)m%P_OG))TM<-!qlBFfjp&WDsub|O4!^+*yJcq20FUR
z74*}Sl`%>ZEr-Tcx31y7R;~vm465a~uO6T@N9kVa5m9Oap{+nBdX^{aliqcMiL|Cm
zQBB7s_x$~dP7%NL`@LjZjT+gtl@q?F*eR#FU$QlRRsa`i?VM8J2xu$16>%~jVqbmF
z#0_SzD;l`ChhIcKQeXOqF#n+Tw70TkqXE$VB=Ym+FySy;iXwchsAm#12BxjB<<ejp
zH5gb*>_{767K4yC#QYh{Cj<rCPc%dZ><xM+EK}_1=MosDnBES|s#<O^s2xdA7p7WX
zu!OTk+EN{OzD~sH%mMs3rMsH-f+Z8EJBxJ?4m@?wNIoK*+cjL&xLVu<&zIMwZaZn%
zYAi^LfX&wrz5+Em?%iFUVpWCLw+6@GwNk2-c69qDhSJu^Y-phHG+e#^xPBq`<d`ME
zk4xd7r05V{eP|~+W6CO)Hf{z}8p`dI-?I2NL`dS~4XU77z`~Pa@^6rna~x>m(TMIX
z2(QR6%&Y70+z*9g#^N!;5t7L|d{aeH^3{9##@L@?KqES<nfApACE5L>n6y_7D5u)*
zd-jJ!POI5maen~WqOM77wPKNyveTW8f@ZLpjGykae+wD(zIgKu;+tYDvui4~B|^;=
z>bVQ%isUqInz^5DKw;w@lymq~84s5}Y@e?6NCi-eOtW>PW4#=B8)Tw6G=LywX&hLF
zlTuR%9uj+z@aKZ(2+iGKmt;dm{B7`Wi3P1nW7MPAnHQAC`^1j>U8xQdUKr+b)cmZ*
z@}U0($kR*NMIfqiG*$J8z!AQKCI>jY+4I*QcNTy=DvMK#&&vuHUd8BwC93YGFp^T)
zRRdbYGH_sk3`9>zhR3CUskV`~3`K&Z_QFDdU817o5x(D(F!udmeALu%SwWYZB9Lww
zVMk+^+`dJ*^T-fov)%BMP`n&2gYe#}ve=9p$+#EVA-0slXS5O%BgM(>9kc4_U3LpT
zbg2iGIw{dYEJ^ElI38<0DtTOvq}>eBxQGf`YM0qD;)o<b350pHsI0rQD;y=TViEfo
zY6#5hUG_+RCp;mYF(z#fs}ZliK%GSx4VUrCQm`EHPk=ElL6>EML}s7JegoE(|8!jY
z`#oM23A>{*mX3^CdWK&*gb~gaDPp^#{d<$Y4g2v$mVHsf@CvOa-*XW6_~JcZ-VgV6
zio2KaE(XToKZ7Y$gZ2Exyv*=?S>qEc%?`*Eu`wp}-q=WfKM^aVTOaEiOEzVEspB1$
z=NOo{Hx__1K`=2Xh~RJ=c3ikAxq7f*G>GUHkAxl(VpY%P)P+5pM&<XtAZ0WAwx&p`
z6IPBBmXACzJMtkR=*ZX*XtPy*hF7*%M`!;R3UVa<RSBqYS}t$()y9T~8-DnW&+vRJ
zn+nBvYr-0O6&3UYr#x;|BSar>cQ7eKE!~<Ma^k{|kpa22plmP#hMhkpg?^98C00mf
zt(oQTpmr9hR{`9o(vTznpf!fe3^*yP_c(sZzP+@!=xX4C$JJZ3>2*;T?%Z_T9Y$q2
zAnC8Z&<Y*??`_Pigsy?qm>fapRCdT{dhnY62%J=#g4MB~$fue6bYHr+{Y2$M>qR~_
zL7p0qa88ADqU-Y>V4K(t!EL<rL_!!glcE5$QPap_&KP10i3#+jmKHcLx0#z{x;v4Q
zdqI&XHp(T}=$nWw5xdu=7;ZpuZb%SaCxbdRX~(+$jh2vC)!^uJ54><ZBB5O4GFF(Z
zSW-i0V$x6&AeNq%dKcmK&*eyP)4+edh@n-aw);to=X#T-Sq@pAaEkt(M0+roc#}5(
zb?}YpzfAN_fUBj~T++-f?Z5uRWPv(Nv;JG;ZW~UXd?$rSL>Cp}tpe(dyf3HSnLtf&
zu3S-ir&HA)8V$^#k@vUtz=sh#*Q!CZK=yA);pC~kn_eu5pm&?1_yQ4~V-7H42tXa6
zkHOYZexP{HvauA08o2nUzHsTB;6=-<sZXca9mn7?gj^sG{uMXQxS*SMDeBJ_rdec6
zxKpGg+Ez<!m8z6JUw0+zkgLgFQd^4WH*L?B_Qm#VK3Su8^PQhOl48&B8Hr|<b7kq9
zxge?4ufo2)?Rw=mw4K+`O=QMt=9|Ft79}XJpzQ~_ji=%gfLk93_+GX13vL$|_y<+K
zl8iv+7uU+mwfh`wZm;Se_F64Ug!m&W-S;OHkXqcQ%QtXzpe?T>%wncRAn%@+xDxF1
z%Bn=u>tyk1afu_KoJv@}K=b#msoy*NiZ>!P^_cl2Ms?HXKeI1w)YBIO@oD|k#6vw}
zMq|4Yl}}G69o|y)$V!6e#~)l^jAM85;iecW_!kKZ24TGBIZ>8Es`!MYkLO`!)gUna
zUe@DV^h@G<Tz;g4hdIz71&fOOs<6>T<@Fgcv@i0#h1pUaH{q&O(wxt^8axx<uwCF3
zHY`wWIB6y6^{ATCL(ZdKu;osg&1mmsr6%|9n}yVRSS%~HjFDeEoY$=L>s9}{m&UFA
zdnL%-zkh@u-M4re*7$>bKYm34Y8}zh`juH#UU}3dPkiodCu(cWEp26<-5L`|pd)#Q
zkC$6n5@W7h<*R8*-b@9Ya$y$ekfI=r%-bj)c*DvJbXn>=F{VBv^a45aqAsAg&v=P&
zgTvrA93<C`7q?>seU0}#_OTFNV4eE(0l)8ZwrT1hyX4tmPmu)k=x93PL{=}+#MKbo
zV4gQiG9kDfe<^x-t|}J8tc2@JSA8vpx>0Z+2);psUONl1bn3b<Jc}A`3VI~x*Mi@q
zE{8Vw7c(e2`>i-X<%ZlmScsXPgh^cy3XM)EK)LlTm7UIN1mOuuOI+lsg;*wqQhhb%
zeD$pi8{O+)3gimL>kNBnul84A4^5}$!2F;|DUos@vd~;2AIxzeE8DL)V=8=MFRH6%
zj=;~L$KR|L%knj={l;YE3&*9TeCEH)l7o~uPLR$n#hXEZ-393NFXqw4)0x+!0Txp-
zV--2|rwR*8|5!iWQytp)%7O3BpMZj(efUVaA#YQdITr04o#<ng7ms;ffyuTugy_$p
z#COKxdSh_ugtpLlocF?@wgHf_@V61LwzBrF3G7}W*VlkRSaD=~IN?Po(%RBa;48H&
zg!0=3mRL!}a?R?yDP<O(ugX^m!7Hrqda9dtLD#y3q@5Jv?y=3BDyay&rS&Mgzv8S?
zmj>ePYe{oaA96|5ZUt6t(L7})$!X<a*c&^VbX-STbZT+9G<j8CCk57(;9#7a@`fo^
zUr5%{zR(huj;%uxFh`J&f)$lLQ&>oqJji^w*szAc4woJs0%ut7tjB9~6^@NvEeJhq
zJ+!z$it;d_PkBiB7DhEeWd14Uhh*-K?!Qq=K3kv4+vrGMOpEoT;>eI5$pd*YDYGN~
zv2OyQzfuveT4DAmrYb57z(H&&aadS>Nd+NMAEmMADykcv)YcE4-mfjC`aINAE(loO
z>%CIC#^CnRaNOxeai`go`8H*VyMf%LNYQfvsKmN6LUDkLN;&7nnub;z=a<WV8J=40
z44=N2pTkNXN+aFHW)}!2c-2vL5Ubw7YtX=H+b@C$1!o(RMfX&&%9+K}G&hG7Of0T4
zIVuQb!o{!ad5OXynpBB8pz6u%p_E#p>A6kE^VofbmUo=qT{!UjbDyaF_=y}BTsFe!
zF_l<T0lYWTRcptS>qpZq67bs-yC_Zsa+tZouygO4Z><B1+A4q2cBwmJnZ!rS&nM3a
zHCfqNIWK`28x8UrotRUBOMuFx7oAgcsfq0|TATT?;rgHk#XpSAoNs1ez{LELXaxKk
zbxaObY-lu?gu2l{S)0K&HtzSl?&gn+hd2@JZVt;O$VyyXq&kqd;WordE%I$TJ6szE
zo(e_$umEqR)03;&SN?G2d_li$_PDq6&2<8b`ipRxZhestt)nXX1dJBAHL|)ORAMF;
zqT{}W-;R6<-)Dq?x;|CYQOt*c#@sU%_4uzzO@CH;(Sdtakp+%rB|0oqIhA)pm21R2
z9eT<5Dbh(zv}3cdjeR8Gjh!C9m9|8{R#Tm6@WGQQ@gY<BPb3!W`xux=riUn`zjEek
zsJQ5mu;7T=0*~-olDGQL`vr7(j3|UF_s+zHWE8N&>)zwLD9fyM22Y*?jCED|65Pdu
zf>%Z)LNd!s%E?PZAc{+Zbi36nKbGCWB8)?92qd^ORU55WOsP1nb(-Lhf7$FfGuojd
zbUI!SXI^gpkIacfX)yaoDEH@JY_REq+L?|O?Vj+Zf!<jtckPJtf2l*6#3mTLVvV=?
zaT1XggR%K{nSTYx7gh~l5~uhLDZdCMEJThSM^)Ai3S$?$NuBgaVD)zil=jjro;e|4
z2eOjkfFrVC`f(rwWT#{$pVk70I2aCRxQam{JO9>f#Pt&yrRGLS{ztf3BO6KWxXdld
z0J9vvr*GBMPDqUL=2A>)PW?%!b+V8DnDK<$;UC~wo8((NPqkmZWPo6me+KYtSN7B#
z)VJ7VVS%!FXpmzCo!$B2vS3A;yl-T^?*B+Tf6}?WJ2_}d7;nERr+SAz!FFm-e^0aC
zCoaUR2aEikD<^gMGV94zylRa}m=j6t%=u!||J1sXPLxNe?8>!zve7j;0B9OtzEx&-
z??r4u)EHx)zV#9`J?R>D8fT>u-tn?rBjOQWP$-Vfk5$9Gjc+d~;3U00FL%U@9mi<w
zoeXm*OXUW|%NPR(uyQP+iSOe3(HU3^zvsfYR8=w}Ik{QWk@$SgVciQKnZ}sYk;eYP
zS3md8#91!M_$6HRg;mJqf>U)V+$AM6I`ohl-I3uGM(|a{s`M5x9s8Hf!?Jf#G_KPq
zR}>P1#`EhtZYofu?#p;rFeMx0#V=qbnJ-ZxzMS1cH8|i2B$6Y_-^d{d5hbcmLGo=L
z;jWQnGmSkjW85U%SMy#|)%|W_Qi?be;E#^#rlu7?I(U`SOWSVp{HQ0WC1s8N(U_?9
z!J9-@(%j*uxWl=8oV@<q$4}i0ueN>arH$2;pqEZ~w$$)AXUAOT7VS8;D-Ja=8b?aP
zaQy}ANU#-GDXPm;mM_C+bwGnP**?av%68ApMycBq_AA<@>kx(VjMG^sVevCOa(Wb=
zH=u)A0H%>8N7qRWhVY65AxY^Tu?rV{z3rZpU9;2#jzhcNzaW7gQFtxHu$45D(JWpC
zXYM?<<i&z-&qyxM7_H(x^HJ`9H(qFl_Qa-rssC@DHRoII<5#vA1%LXBUBXTW4t6v=
z!V2&e3k#PG?IN2RX`V2>wo9|5X6x7SY6;JYHn>E?uMS@43#?wr)+umzO3Y#19AP94
zs6P`K>ilgynzmuB#Dc3mHWrqHX4;ICOa?$26JdaZmblIG{}^R?4RG;Igu`~VDu_%`
z!b&%yKcVC)QUn_JEWPv(7{|=AOl&rRbaRplwnM*GIzJpI_~00zga+klo@Gq0t@hPB
z$0H+XLEIjhVcXiMnYEQxE9>1bnw03CjN_nsf;vs9(U9$Ld_K?{Etz3k=-|^0@*N@w
zyx$$^UDkfjw$MH+fc}uYAU25(uHn}sm>u8(A@2OWZ1FHr-#chRZxioMPle8U(R~f=
z?!wOdBU*sTyV(Mk(35K5UV^4B;I+Oy0&}*p8F>4f^D^Em0Im`Z*5iEJYJ+e!!yAO|
zF9=7@bH$6cxW}h!(er^IWSvfcI5bUomkEQ(LTkWvt$Oc`0_*orE#0o6$M|KqGrO2+
zvzG0=;iOSZ*k3-nwdJ`_V*6#Zrw{z)`CbdyAnOgV-yI)3pQ_G5TF&MiJiBXj^pB%X
z)-7W>ba}U{$Bmdvvq}OMUT4n>xY_!oa8vzN#QiLBy-xMgBfBcps?l&RLpGeKtOY*G
zwZUH=nRpEg{D!yTU30&8UX$4*7Jji%1OIuO7)l@<>r@X@QFK1WQ>OaWbpH3#24N_D
z-N?*sLKvr6<YK#1t=?u<XXX5K&fn_NmLKRItr?uVu8}bJShk-`@03$9C7dNio<St4
z;|dN2E3Z!8$cwOiz$KzSo>u#mG0!x+Y;7jboYB4veds^h8a|TBE#@1>HS&c4yL#;k
z7f-n!)*7R0pnj<<R6~21{fA6(B2q$JxRXBK65son4nYw8*Js92lEsYs)ooeeV!^TH
zN`8LR8(YI-$AGQlK8ibFSKy_Nmkev9;FzQ9pjL2g+(Lrai<~;oeiN$I4ROtFD`VzP
zvB`5rK@?Csp~-MFJY`6YwZ-G<5Mo+F`20H?<n1$mcPwtAjp1+#gSJE#rG#*h%@Pw$
zW^%lfx`@L9IMVzK-Fn7C+CX4nouG@lbL9j}xn-C~#`KSr1=Vtof6Lj}5s|_|S58W=
zH9cE454^38<8G0g-a?>9$zOKh`@7CejnX|SuTPMv&LJq+`8tW}dJoBD&?=q}rcHe!
zoP3aTrD=LEfQ(YRFR6+V`Djs?q=d;bn*L8#Jdhqd@XT^mZ&y$Ja-&t6)_;`?&Q(Ue
z(B3+nADbN(c`7{IQj$6UHd(oUKhk&zHA5UNT0d?<_G(gYKHkhhPPQy(?}B}}XKBjF
zPcUqfX3-n~GR4s2ZSryWevrP8QqzkgjxXZ%&-B#gX!85y%DO(##fsp38_lH>u8SiL
zr<!zaXT$<YxYT^5E17q=JI$L*6BYeC+mEX_lB^(^G&f|Cwo|w<+Ra0&YEBoppv$LU
zkSOfUQtAKhuWI(*2*}TrMGEY?RYZbUPXVK(8yzcYr;`v34k;8EuB|wQ%E#Qn<$dib
zF;lx!_DdWCOU%Dh2rq4c(}L}DsxH07^7FC65myge<=y^BLw>_3quvoXMlO+#&0024
zFt$YjoD~AasyeF=<$hzNcU86-qoVl*N}A0l%(x#0=(hw(Fy<M3R-SQ_AJ_dq;%k3|
z)`AtWYE0%A;Jke(rxJlcRLq}`5J2s&e$`8l(lm5)RkDlJ6LDJ{yxTXmB-l5LdCL*d
zLw!H^BAGh;?%UfL-daw4N)Ij~#c!DatQCo%pY*RP$={SfDOp(8>E;q_%@R@Dizf!=
zGpz6hA2`Vyev5nM{8pyFGJ}X|D5D%RzCo=by1VkGzwMTEv7dI@zvO)hLzsi&n6??9
zm<%8urv?(y`}i%slUy&V`5Usx4PH&BwbRqwpgYDr0#avdNVr)|N40p%A8avUK=Fin
zP(>{>4?HorP7`dJ!s@Utjre7w;2Oxvsq$X8!+fmZ{(!#&l-w*8k5!EhjRL^o-&y-N
zlb0Rw2QglqAzpiuto)W?Y!A##tVsn=g7Zco70n$@u!a*d#<dT`Fsxd{H1$C%x@0(>
zR~lpeD;2kjejy=t7yfxu9!XW+IvNia^;PJ#vVEjNl^GQspx*(4@f7xM=L(xM7;}ew
z#+>FmHh4=`<;H`Dbm)+9Pc=lHTg${Oi+gZ1=7Y+})NxHqf^A!6GvyU==QH)Ql%5es
zg=>N%XVGf#w+5&^FNV*;iSFZ4KT=<~UBApZGe2)9g(>MAj*AQi9bnOnmd+rh_92Jd
z{3ymCX!w`_`TT+h#|ZbNHgc?=xy~<Pm6AZ0g!sa6z_sO3PgT}h(-mo<O433$Pp}`>
zk{^6Z5pVGFk!F=!<(d=Qbq|8Z{@N2%zfTzv84FWO3z8Ab4*63f{F#B*qw2l<T?Jwi
zU%FVO&+<8<SKiOhInX{gs4V1(`<xOxFn~rQvET38@(+|R$^z~+Mo5qX%6-MMkWyWv
zQWU+oTJq#e)a48|YwL>}^+BTAEPNV=I@<<hcnr3k!un`Sbr#d2W~K1}`3oaIObJvB
z`d<;Z4C47vWD5>64aFq-Qx$>VGBNl%0ofnFYDWu3iaQto^*2Mkf-Ska;_^~#KFnDy
zVcY!a-inug;F{EK+ph7RonnVgD<3u8G+obRH^<D5sS?hGo4P~F@&r^3@K_yNH$Bxs
zNTOV{3}v{xY#fK$a`l8WJ%hH4UY{*O5?>@En|dFMH8G1VwS4Vvf@Z6yURW4}4-}}7
zHMvvN_ghs|VLjFXF+U_xkX5Hu-r^i2zt2Mo@k>J6Z7kZaJDSwAF`yg->^pbgf3j?t
z^rRKK+|$Az(k#H9_5oke&GeVnckl*Rn;QVy_^gtj5M=CMp8<y*>pb>X_YPj#&|Vvb
z)TL&{<vM;S*u`So<q(?wmkpg0;a@4EnF%HK?3WFxLkYMjphtZ>bLt<+nVvi>)^H17
z44*eLt4q9XVKT~tFn2AoCIS#%4OLlmhP3IhH3S}zr77pK2hOCjPrUIjgX5Q$mms0G
z8T(Sg-0Vh=X#0twlzW0fPk@l7)PSjQ*YHH3eXoLCYQfY*ZQSug^WfT+Nv=e`u!yzP
zp8M4av$VngW>$S;T{~DMllAr7pYp_F>zccg&zq|!mG~_;yd|pZ85a6f|I3$0Kk1tk
zT$yW1l}$^ZRqGTd!ZD0*yXtf4bXM6&$y2s|pgi7u4VR<BHB#^v2IT0pP7bxLBv4^F
z>9oRI#Tu4qb0G_h!rjxZr*Ny~;=8GS)Z7p&(ADstwJ()G!MA$zm9S#m1NJd$2#fua
z?rMm=?u=SY!fBJtgRb(ul)rvqg2wK1vv5I^{Q2Oc(*LA$ODoif7<j0b&xMuvp5ZT(
z{X}i+e4klkhY?zkh{)&i0G*fxtvg;L9pnn49$I`%;wU`%y^aKzQwz)yGtmQ9+FYK}
zY7zBG4>(N-n<jW;!BNG5(z7r|kGYqnCU$}!0J`1ZY1tY#y_?zE{>Tz(*g!c6JvGXp
ztzrbZxMyQVcHGp(PESGJ*@~=Rfgn`&jML7e7gSVhwCP;Jpa?HiQW04(xO#|X`^8U3
zej67u^d~A8x!Z=lO8qoM3B(X^@aJ!D^%vORybbQ5QF*Q;nd&B8mL;`0JT*-?YGJ0c
z>-{g{TkY}06}4k4F_JU@his-ZA2_+7fq!L-NT+Gh;T#T}ysB3^@JlaUIu_Rno+0xH
z0_mhLLg07(go*8%+=$xwHvK4L#{2hLZR^r0xK!VmdG)~n8TLY)mLkISVPG`VCG^Ld
zu4{8(WJwFqM)l>%N+>A{veeMAgpSZ`98z%Fof5<l^qGr!tP&&8laahp8i3GM7X5c{
zn}K}Uuy7j8kDK{|P6q8he4glydsZ=5bB1q23k$f_rM>rPHbc}s`R)}i9{y}Gcal!h
zTGy8N_Vuf5kZxO9)|7cb>sB<Xq(z2sUSHMA9x8;rdNe~NOnZeJbmQE1%ACA78mJHN
zl7V4&>1h5~+GZbtTI>!KsEz#%*#38bsb;)keLkO_S;k@77PXwnXUmo6F>pW>1!Iv~
zr_xQnr&iLMrtYxyh(5@9H_e?JU;Y!&^rJ<a?K#LE>yFL)KHBx8Z>oD5GR8POX`RTK
zh;@zXELkxI49iATFWcLM8C^H)322jb!ZRW$$ox=xT8x_Y)92OzsHi2h9DkN=(yEHw
zUV3b>f9>=C&O-1FBD!H=Zqj^#X6Ev<G*7w0B#JfYx5}JoVhk*neKTZKcd#<{M=ZRV
z$+!`_(8ps4RlwI_fcB+!{aJM-U?RWi6Q-8hA@yr0tOqxI(npBwEW7@flUr#zc-_^c
zKM(00#z~d*Ee0zvayPTZV5gf&T_=*Ih`L(CjN}mUR7I(Nc^PF;RMX%tu@`(BGl;B<
zl0?X51R^aUp*5cGzA~Ctej19p=dTkv{twH~7hl4J6e7=BE>&|aF9n_BBdsIPKkAL}
zp>r(>84Mx+QW?rL-YjDo{h;c!Cbjj+MwXqk0Z_DgfRh$aXLVJ6e11=!FRE%T+UF_2
z`%h$^M9EEvI90)LNSF7ZXAO43&U0|k$1M$%`V$dD*hG(%6d+8QCVmUoxz}dMwS)Ua
z9FRiw5R}S2re2l+3K?uyfH~<<p$<*3fh^8fv_X_ulBsDlZjKOxP6USEABEKwi$AZ4
z(;Bd*r8EVe5L9lFtdxwfAE;4yuq5CV!&;FL^k$RvZ&*!7MYO7}@9HgT)RicLyJzFt
z_29Ozvg<=q^4S&9QBc%hg)wudv-l{A4cuGJZ8#XG6;)R~mRt^uUHMjES~^0ApuO@j
zGPknjOmwPbpZtDF+<UK74bv~>9NT<_lx)aSzb+Bd99k_Q;W28gZ7?W!_AGRcgeU3E
zE>bM4%dM{4d^})t)`|&<BngIcdKUl{ZMiB+y4{r+iaw?S@CY;%da32zf1%!yOS-F0
z8XEs5-Oic(mOA9QTZwK+;Luz!DCtRp7c$U80dS8wsFA5`BM#0I3?<}B<#IiV`AH3!
z2Q0-giqhU^IwxI*CrAhEt5o)b8;qw7)8Ov?OtZL1L+T<rQO5m71<i}f0SPN$>b@zI
zuUQy}y=ykvRWsVsK&a>O3WLhMNzX{S<<XI*G#;{JdqU+i+eSQn=VoxG+O#&+#ISgc
z5iGUO#GW$HH5zO781+Wg)=@lS=fC&{d;TTUG0tj<HO7}R0}NhV0D4!UgA0ZMS$2AW
z2lR33eGxeNKGRA8Z9=pS2P0M5X96nxwB=>iW4U$!R_m42>74s$^^|kZO$lX=sq^E^
zSh*AL5;DsUD6+Zp<`fBl+aUf2ojx*V&~E+~FXC(THV*HHS{f&0vmF;0q*GGt%{0Nx
zs_ezBF?rX~Icme$OmFJ6im7f$$QXYR=H{9>X5VE~vYl8U{vIgd+WZgbnL}nEub`LD
zB|_v5f>?k(KDm<?J-ZProqVo}h(cC^eNSFZFq!>9MP&Th^J-+xu5Mr6MX23Q^6UeF
zFlpuivEAkCvot;PcInqxxDt2nJ`X5U6p-oot(L~Za_5Kh)Mrv_C1U-AI?Zxnlv_{M
zf0p;lYqyVqNGV8HI&mQ^i8*R(8*_PNC8v-y^D&$?=YepNqmhDgz2;dU9K~wb$wC&=
zij8G4j#S<#6#}aF1mX-d&K1p2Y9`b9VxxNvHqnOBx`Vr-*1C#^PiJoa1fmX<Jq(eU
zWp)Ls{<rv*9)iqu%SB4*zx&acofnFh5Jln5PjGlS|AP~<Q65Qe5e#1LlF?3@Z<EcE
zHv)v1mVq&Iq~AV4`ezY8Grv1^!QYJmYQgyo%+2`dM{bo<c|$|ayE<IS6vk#YkJ7vV
z6Phd-zWDElW!`$kevIR`zg5}i%l@xGPNF(b$=Q1{dq#%lG*D|>vgolwxF(T>P}ik)
zK1V*J>$DYVpbWN*y7PxNuwSL;ID+}ykRoOq{dKAo^xzb<?Oa)YdQJQHPs_-1O#~%A
zouR@~P%P2tG5dG4NF@0s@Cx-cDQ-B!+C_!oX6Z<AaqEb?+Z0sT=4QDT+eP;s(@s(6
z&)mm47M*{K;AsqWx<Vx=YwP-fbfs9&vKtVtWz0Qq#0sjIQY=2-{AOI7CUIx2pHb`R
zK4<k;$<S7gh1gXCZg9kYICy7+f-YO&UV9Q7T5YGemLsi%xKpeKJxR^N&T;dx<01Q*
za$`mouNOVTmzy-BD8<lSh|$360@NPx=FC2|8kBjX%)psO+|ldW)BP|lqajE9G`;zS
z?-T{Zt?sjM>suwtDxPgL#&)UogK6TZiml^K1bBr=0{I*o6L%<e{5JEk0KBaZdLYXM
zQYbCMQ!B31G(K%o**_4<pTV)twDKDH71E@}twK|TG2!XiV_YVe(WQ`|vrFGDnW#aT
zZ2fM8d~@jih~@ijB<Q_bmI?1*vZNYHVf+tju3eXH0ykXv<)0R8CTY8uq8-kH(7W<~
z6<VsHM{O>kWs($9aK12a_^ca~Oo50-(WTV%RWWl7KN&q+_rjH(<^mSZN;Qa$`S`lJ
zUY-A*d>4hZREO6v0Z})W&h%{8Rjs#r#%q^P5?X#sSsDhVj?z~fDmTjbyP7SQi@lUh
z1^#H(dT_DmH?uMT_)SDre?r>8{~M#(t+0Dn{kSdtkFG;8Fp<hiLm-icY{~u(ua$W<
zJ?Lz5JC5Lh6A0s6BFM?tYN1NWZm!>n48aI74#UB;<pMg6#B!h0zOX#?Q4SE6E!y9l
zwti<i%v5_fqSq*)oR-8b-$+#iwpZ56!U|Ox0!84L*_a}GP6hJ3cwEoHDiZHU>AF07
za;lQrdFG^BPsc0RcKwy;D}NdIAw`a)9+unO?@(EuzcO+@;t8S#)M1uC(^6}1T=LAT
z@(uGGS!KlBz=;Nn?_9JPYV*<<;nkGa>UDl9z-jC6`z#voQ(1{E_GJ)-8?!YrPVUh_
z0HmR`axAM=wN<A&#UELn7dy!A&XHF0^V6h~Yssb8P5zlUE2<uzm<Rt@!lsHXrT{fM
z^KJkVAO<c=#e;UeHU!%z5G`i&BEb|>7ReIA$CPtDYS26BmSAAqW1jvfZ*G<L9IOkK
z3U&$ggZ!nB@>v?ZKRzsq(FUp(=ZAR&L2o8Ve~mhp>~%Cx5QOA%wO3_nwmsB}h;pPv
zpR^NwVkxf>s^oQz5!A@sBX4FUU_Q4H%jg(H%+zc)AA2LC8xTx%qVVc?mJ&A4A~<F7
z4Ef{4kY(&t$o2vaxp9Z0Oh_DI_>wC|C08S_orq*&^b@?#SV0pu^XJvO(vb0EV%_L;
zm3S_ONl=`w#LOU+w>dG{V<1;aHUXN#<xI1gOQVqAGoO+U0G5ByfG_?6R_Z<E+fHp0
z15#Ysm2b_!r@f=d>!XgnwU`Rj({G@&lN{~5z2xC-AwAnUq%^*#X7K?sh1(06%t>3%
zOj`>+F|*d*+SLP4s!)=3Zq3#8H!YUr5%Lo(LTpI2<TosPM3}F!lMAn6^C)HdKt)kA
z{+OK2yoksNf?0QIa)Sv0FEjfz&Jmm`uD5x`uv$8crs8RA5G_W}_2g3t61Ga<i(1$$
zg*h)P72UVO`ubJ7ymhNiJQ^gyv*bJZTum|g@ee*P8YQQpPs(l^HOB_|8sUrCmN5ra
z;c2MYuycLaUG)_$i>%t*n`O2lq>muMV7-@LAav`mOoPiFL%ld=b@fj8+QxUM-*o7D
zx3PH(ccO=)hzUH;TBzDwT%YSy4rg9BsUO}H*t%fM+;9!E|F&-ysv@@N&UL){8<YDe
zWvcg*|FbAr9)uHlhb)DZjfg`R?|5^ShivPY)184EwlJx)cn}dsiE-1ffN3?05qyyv
zJ{V7Oophiw@~>|^h<DzlxR*Z8HW%EUZ==67d5|U-4FXDeVqtJ?c_9_Kh0c9fXC~7$
zDm(1}-O~tB!1ENR-%>Gz+^gw1qd(JT86>l5+E1)6_e(hi|K^KG1!=n#H=fs*5~aQ$
z_Y35t=hiW}H0>)5z-v_pz;8=m&jfbEiJI~IfH1VDzHhpj{kBNS5MEn;kYWqQFT&%2
zkBZe_fYru2vO#dLJ#{vX{h*E#W;_u8tl}C$t@d&4Jt##X{ssRLc|)P1p0y4V?WD8J
zx`^WzepzH?iD}o6x>e^9!}2I_SWT2*v`QieV~lKP>f>J=scug(s#@vugBxlq;KXzD
z7!c-n1-1VR8c0pa_qk!fBDLC2N-HikE*ka0PwgEpCn(jS+sgXtbz4H0s5RX}ES&=N
zkc7~%u)*KKm{<$=6r;-n?Bs!f+&IL}N^aT&bsj3=MLysb0x5FJBI2u@*`Db20?*RR
zb_2WCVLk1B^Ao|%(=c*plcnYyVT7?+%~gwt;6WF3;tnT)NfH`eV>w*eeYNI$<NjMK
zqB(h};J1vS6MMWSd(7$v5>|={Z_71k5BVze;;M*HdC3HE>Y^=176Gh^6s;21fr7Aw
z2b(u&y>T9|T*Vi=<DxU0Osll4_OFcZ%)FOo8H)1{G@Q|tMc*oC%)veVqpDy+jL<!e
z(V~K?89+owEV8X*Ff6ND<n@4otoTI-K|%k!8DHk-UmmE~wR(dj8?piJ*b4}o+a$o7
zH}M5o70i8FGB5%?AT4F$q<X3Orqw#crsvWM@3hcRg$ROl(-UN?Wp6rE=IO^~JPZEm
zvlXrYgdUquj`B;Ah|z$ptPK20_3=Oq>rH}-<f7Ns>e`)M1!$s1gw+3<5XmR>VOvk9
zcKAhgoX0tw9sH%~fT~gT-GHP^IQ{?17oPwGR5molfm8F+&OVH2Y6*5%kVrF1<JKZt
zZfOW53eJDQA3j>V(=o04A`5fI-Te8zy?@@oO`|lK7|d0+f^3CO@Od6`@iRKHYTpqU
zSOf6b^CrEt?6<t=J2^&KJ1A@GZ!?i3j5s40uof8xgf{M!9+Qk;+Nk95xxToCSN|M>
zhW=hzh=#q9v@XqnoRWcbB^hqipFSNWdYkvbX_GmAS!2=;k%tREYLH<eX)Hi5Osjf=
zQ$-kfLY&Te2s&5`!sno_3Mu{co*9ZI<&#HA3r~@%KYdjq7gIX-a;Ij01nw=VH2yco
zELQ9GsH}SM)JPVYxZBu3+u-D}d@Mhg_x-@LQ}W~54-G28!P*jm=U@KYFb<Gq^1pbM
z68Tk{Dg`$TbV8TnUKAJ)ywbG?SFg#gQzLUp8u&}O?cv~$bj-N4EKvPqy&L2gOfL3E
za1<HGRIKMC?@*rVg%35G>GjTfaHCx4n5qJVY&Di%9K<07k8Sdvij(9VpvvETT6Nk@
zT!AWL6&1#l{wy5HZx8R|yyP%0su_zbi*v?+@1{#neIY(%DW!SXE$e!lPSa*Iu99Uc
zX(9>;IS76rq75BH1uaz-|3~|MX`d}zQG+DFrPT3I5w*23<#wUcdnZj{J6tyYk5-pb
z(;xC{U)NAq^SrGk#2xPeg@HD7zx;p?82YsFZ}T9!GRT%VQ~=i$3lx=D7n+lVBc9m0
zMXyBnKu}{yOEe{>?&Z7$T6t^{A4oiJDPRJVx%PzCCy|ynuZjwDt^M2&AgBius4uS&
zN1m$-96o6b+Xzn?1ufXvZBSXFMFw539d>OV)!)_}(39JznvcinMFDY+Z*ZQoH8<aK
zVC_$cMgkC58Vvo<_hx|W_|SVT_ZD=KjoOb(h_X8+<1>?+&QsbE^C2ih5bVU#J#*;a
zg>*}Kj4B<?20RT$(5yY&&&D!KD8qmM_E%omu*3-GNK(TR`u7d8X^kqTpTTuov>^M1
zV)8!J2o+iAt14{wp2BaGmRqcg_USg?E{DuVzB|pQs<GM9;eYqpXQEng7k)()5H+G!
zQah!prgdb*y_da7q!K$m(lIED+(%pIr2=nk&<p<4NnaT}#Y));)e937gKXi}=2#=;
z9^BW3nU2yF{F!c2y8lQOAG)OLB4MwPMnGnO9*l*VaBvNbvpX|cH4(f4W#XC#ZoxRH
zK|cN>!9Uf3RNGBmgK*Pmk)4P4!}xNW*d?zIruXD(mh=ck?F&U1>CEQmgrA0Bj8~at
zh}0fC;4B&`cNZ^O<c?>cKgGiwkDUtY&_Y!}^Y4B-3iD2QJN%Lax-f6T1@%amUs*}I
z?ldl!YhKc2V$LGla4;V^zorT?jf6UJEx3UKVUnO5yyh~edxk9MRxqQdBZOi*;!Nx;
zrE0v%0(`Y;b)vlU)hcV^b>_<xCFnYHoX$QU{I>ehu8Lk-Olwd<o9q;y|E9h=9jwmU
z_s*(o>Jy%+s!ztkYMrqNG8E~idEd64rh{nlq$bkMk&_%B6ah#vh?2|Lk%L~ZXW|2&
zJNy^XW&Sh2yLD1=39{s98Q)Jg1C=-s;-?d$Gc-!PSvtjt7*@!Was9MjcqZAU*SsU6
zbk<0MP*i-9TYeow$1$>-U#ZFm<@!ydrzDIOjJi7@5i&k+egla<0l(s}zn^0m9`<yC
z#CxE9>_gFHwBK97;jp`x5Sbbfa9S3xnYmyC`2JaXCOL3<95wGXzD7)RPU}RmppZIg
zH?Y~*ik=jOoC<#lSPIxScQ@(+!MLq9Ww7T*a-%>nhG{pT;Bgj`(UG3~pj~FPl#Xo!
z)t!Z%Lj8beCU^0W6JOnTpBXLc-d2C5qp9hmK)S<WP26WR&s5u9X{py-)lu>{$6*aP
z$UKT;2ZYx_?pr(-SBo%8Pe<tfaAOJ+43kV-A<;ufj;Lafi=Y~4g>^nKB3?C7X*x6z
z@V~dzMx4}O+4VRMdhkI7O$#RQd|-hh^m2y9>eo<#t&(nulY3>_h;kEk(kO5eORfjG
zt<kR(pTqOdHS8U6OYi9m(;J<^`uc1tq;HCYADHYZ>$|wjqOypo%k3P+<9+D>DA`JT
ztc(q|HTLm{0Q6&%TcddVty-c+_xZYa-_e|6Wh_Mbf%Ak?MDX^<QM?60sn!pC8H~Lx
z(<6Ltwl?mNZ|Mb{d+H%#K#C-3vH?^9!(n-$vsIh;=)5^LUwS~L<59rjq0caIX5oY(
zNYH`nNw!jGHW!HrmFg|Aej=&1`3>}7?^*+mQ6hJsUut^}3TpL=UXYmMD2NNF=99vJ
z?iz-pqnB`tA--SRIq-~llgf0jw!Mt>s>7}A-!q<(>1W#Y9UD|*x+w0X4)1b<*2cp!
z86XO?;1q7<deysFR-He&dg$(sb?){e{M10(A6u>2bRLMAfunE-h(flGBn^qewB#hR
zgj%KMq9N*ZrmUGw`@gombsxxP^f(<S9d~|Na@RV|%Zhp+z2OnR<!9<vh-**xiiO$Z
zise&aWZYm`-UUOz=KARi0RJ5s^>%qewEo3OZW`)7G_=m=(H-sx4vrB$m$hrz*2WqG
zH20Ow5{@^-73`Rm_a3<^z|2N`7}OhK?pDC}RF(TKc9FpYcdv7CLeKaXYR17^#YQY^
z?o)zALM{Y(z1NW;>or~K0CoS+L6lt4ro{^Gdp$uBEI@hlJPpRu!I#vd76`H>DU3U6
zU`KHwRb&JRjQ905cl7z!CO$*V-rTUL<<W#WQ6%?^mw*;YOPJcddHpcW5eOoo2aAE3
zx-mr4S=DPT)LCYTyNFfU>T(J;8UAVe0O+#gJgeocqozy>Ui9`81ybc+Bs!(gfp%0{
zhQwd%50CPd27e2Y`8E(6p&sc{0pw;|oY`Yu@`us#@sJx|*Og$G2AmsQdwqrBe=s}#
ztjGmj1U-r#PcO7n?BAAMMb1lW8F3|nY(a&Pk!u?aQ_C?Uo_H1|n{_xqm~)W$$HbDz
zw_7_waA9ifmON;rU?ll?i1h{^Og10R9SV&klWe{sg?2xDRi%kYKd*y%3kCb`$Nwdi
zUR^BpP@GKOyG5b%(^-d*LM~QIWtu=Ma`tmRZHOHFzSiqpx4C6?WH^NYD_4z>>=DUH
zpHxyelF5_SRw0QlqW5pnu#O)IYAVJf&mVy)SCYf^C3FfTK=)hT;go*eD5YGPZ(iIp
zd5?pW;xGkSs{cOV*BaL|sxr2d5h$LNiCEx>9kX-QacR~PL2$;lnq{pjMTPm7%GxTA
zEs_204KgTKL57X$+~z`I-P<_2!I<JmT+=6zZy6k7$}N|@pZwCX?rfy4$?O0eJPE3d
zj={&mq%&EYTQ-r%TeE`W=Mi%lGH?npL@Z9TlnlAB5U)ww>R>AMh2~?3+>OA7dDP8Y
zs6#QrE70{7y>&ldVgRAU91kpDtyZ_X)!pF=<aT-Z8xE}g(`ZzyF28+;33U>BhSTfT
zFrfb>?Iy8fbKu$$mK*i6MpJxQ+^?OA@FMn7?zIEm^|<8+KEUfWPW35B)|Z(2?&i=J
z%8KM(Z1R;Mp5YS%eL~Q66tfeQI`@if>i$kLjG^-H_wB!8-exw&ul!?YFahT}<XY$k
zK*rh6i-WkT<bx6H;iBq<s5Uh%3Jv8dW2*k)*wkHFN#-g)FT;j;GPCJGRnQ&WSJ#N>
zNv$W$$AxaEu$~tQXbl{aV+LQjvYgo=R08+j1pn~iD5bT_%V~D{b1!R953^kwCm)p1
zxS8mPV7I$~cSM5We*P6eG}CK(N^b(p>bM5S6jD950n_sDAkCQ1>JOdTk-0dmp2@G=
zMUx6#?f`81zp6d0Ng&u9=-Z?J1W<y9#H66{D-mN*u04tr=}gbj5%TN(8Ee?|70nHM
zy%{-(XoPJN!-a%>?nE6IhL|I997RRSTJqRzscx8_wtyASC(7n7fKJW)mu-r`M&1og
zz%8cQX>`;$xy@`QNo;lWQemTNp}>O1P@K_XyM8TvvcHhO11GC=eS4vS(i|!wU)|Nd
zEC}0XPmVu4tix=JPY`Dp73Z~wV59@LcZ(?C%`QV{HNg<-@j0mZ#J)UVY`uYs-qkMa
zEjet(-Q`;|px9vC7rLhaJwU?0U?E3quUfi}!rpu&$x97Z+HQ+BO${Es+0-$+^r`gt
zIY_eZ)4DsNPOx-*t?uAK-wb8~AVb<vLzzE~NHE>i*+e*>zUff?I3gJGN=%5oz#;=K
z6Qo(~ot%i>eIz62DmEEH@}!JBbA~ZuMYEsk@<e?hL7z|Dn{BwLkHC3L?S?fpLZ<P;
zDJk7aKWiapzF3g0dVrb&r!cZL%I!-#%Vj^?4-+1hwWW&HEA-Qi_<5^!oJ&g1Aau^f
z{JZ*bS2?8hJ>-=-GR3mjzk*ghBK8-x1879xy|{?YV%J@Jg^<e*rzI+N-YVNE=P$w{
zrFVps!K)NSkHgs`WCGk+GS`u)+u~6>pTg`+>K!LsgT3Cx>^<mI#Le)%#b~gjZBt8&
zzFyMKu-#l5c$3iNaGmb52k6xSYf6mLkJlXE(cgqQT&A!kd5JWCn&Ib;#h3#L+jU}m
zFl_(Denb)~{VoSjBJ)u1p7`qpchd1~knayW47@4AZ9U3sro1<5JY3SjDWWnwYmL3h
z;Yz>!nq0*OWD8G(o`9al`j&%M)~oEUK(Mb!if$SaM?+QUaNZL7^!&FA9%jGHAY#S1
zMRL{fY;=iQKntu|dM7Ka8Fk{;zr`kDKs=A!*hFO8ZB{VE1b(^jK5LN;<F6*-^YE90
zMd2f)f^RR)STqvset#!SuWYX2FXsJp%JeRPqF10{5wZel2dP|l-O`r3oc}+@CMZ(U
zb(IUZ?33ZhnfWn9dP;^bOUIGg!eI`GvT`1^a`}};WOm0bXSjj<cPNx#hAj)<pBP;C
z0#qJOvF4Ji__vRQqDGVU0!CeqT7n&+XK(fEA+rIjU2VjF1k!i>scE>=2}JedbOJLl
zMyq*rGN*I4FgJL7u{qhm7Tf5+M@fj(2PS791s2B2Sr>?iEx(gEt@8QG?RWh9%RJmi
z<p0e1PS}k^V2^M9Q}FL=m&3}1(rvg(8ENigttTjpF(cN&qZh7GHiRONQ)$}wDE$NR
z>xUKVg*FwU4%Kp<K?@O6`j+$Mggy;P$%l0>efa+`+nWk{@?u(rHU>pL>hR(no$Fmi
z=Re>|>Ss6IwqUWr_!-zCxN-K$)j-eFZ=egOp<^2Xq`gTQ{>isLR2}$lNLCi;>=_e3
zCjZ2t*ZJ3(k5EDBfLZ|n+{q~x%=8U5@oyMtetr$8MEc_m;b5VS4Az2Dj_L${OAS4R
zm}?g1Hs+U<|9;Qx{^pAbAk{k@hD>b8F5!jNDM=O2e1il2k6{{2!w1OZWBI?gbZ>pf
zafV0fvq@DsmMoujLCfDv!qlt%ygwx6TRuTr*JG9D<$m7`?@0XIE-)OODqrfr5iHTQ
zZKP^)r6z`*v=CR(zU1Y!MDNh)HSiXaTq%1F>P{elaxhB|*B)f!RfQ9otyy>IjkV59
zM64K3kL>uVenW?vB7K1Bxen#uDir|Z5SOnBvZ?V8_PvPa7q%*k)Y#qOY($^U1j9Y%
z#cDA?hG7&ss|z4<P^G1g^y!{j@Etqj|Lw?vz|LF?1?|bgHegc)^GJ(&a6y<JV(EjU
z!T~7{B|tF+&s<cZm0a3cc=Yp*ZP~|?i>v#G&=>~1t%?ToQuW&L$p{+E2A&`ES8|8e
z&cM;4U9H+;@%W?gxM6kM<9|Mht(RfuLFh}udkiS2Oa%xz@h~2Td=3Qs^DN+&xX)-T
z-CXmX?^_o?K<*_<leUB+gyNs*pS@Z4ginKgX8;s)WsS!0+eiMr_m8`8MN+J%IdOZY
z^l88tx$1#nIa)IFtn>IFk$*}j-KMg-eaT+<)o~9$k`IsMW7+>t;J}V9;!u@6(Zj$<
z3I*06-%Y*@$Hu09=^xRCY08avy$XZf&mRi8m3{jK%B!$FYZ9yC*qI6sX479V|C;BJ
zIYXKrj#Ij<xC+lhvjOe|BfR!KJjnwu{|S#ayap_X4F-v~0}J#AczfyoWAJ@y*0`Sj
z4*c@F`N4c!ak6Md4)%-oP@aZchq?7_8qEi=K0hylD%55*nEZr}6-FQvah&00g4$Yi
zJ(?@usCfF2DH+&xU5C7~H1+Ydk1eRiouq6;;BD19?txeD+o@ZHXvUcw7M?kqSCYyP
z4nKp=j&bObE2TMz>*A+{{Nk0(U;3ZKkOtxNrw-Bn7@#Z`@b=<YUo#Kp)auur<PbG`
z5q4|10h%qZ9q{`l`nv}Ys>?odV2=yC2n}Twfr)pGn!+(%2x^w1{QPW?*DcfD!d*5>
zbD)#+q`}k4cmi000p!Byt#WWeC6QF$V<;kgPNm0`b)nf)(|TEglbX)<c3%4X-48O_
zq?vgCv8MCjloqsMhOjr=1Ae{MbB_U1Bv3b5Y@zI=<L$;o@Lr=gzXr8-odtIa^F##Y
z?ohSn(nt+}(m~JvA8cP#8pjiP9{7GACvy0y&szlLO630x=>rSf&8-hUeOKgqa6Y{r
z86$Pc+9Xz8+^w6_BLe|*rc=-5xDibvkiEJzZpo`Y$ZLST@KhksC{$4iPtk2d5w0)~
z&#@K2&r}?ah?*2uZR?`iSzbj~fY?MFLZGpLI|D?@#^I^<L@1eFGVpoARv|VtRsN7k
zpotw<*LNv=Dj)L*!ApcGQFHB<(YdAeXne^6s<sBTblkG>%~US}Gc2R^C|~r?uyoS=
zn)>J|XI{Xl`Kv&({s@Pq%O{YH<;@%`e@oJ43m%48b?Gt~glKXY*jEvbVZ7_PW2gSe
z5_79sZd*CG!p`RR`Jn+Wl9wVx)n_p6BldvjqTm@g!#YdT#C&UxH<x63(X_m5>22uN
zPZwouUCB}2g0%GC1Cec|AhP`R&!!I^Wj)s-mFO^h`qKSh=tMoHcIAzTnS=e%aMN2V
z_*!u*ID5%I!m2W{F;+O!wes-<Dl#1Q`&B-Ehe2X_2806=kMH`*h?_$0K{krhkhnKf
zaFrX)!_Jz@0}-MI5CLyvp60E?z_~?aMK})3i+eos(l+Y-MIK6QSOJyk9o10~?opUC
zq&x~`9B;sJaY_n6gt+}6)5eKVVEk>4HUw^xcX$>-)Bp)|ZWk>nz;OI+Uh7>BXD+%>
zmi1e4R)cZE12@(;Wwl++jNPRpQ2oe%NQDTDy;juHUxM30MJUnrCI+{9DwS}TPgy_&
z+R_O{W%NP<%GIl*#-qav3<S#^s`OOBFABZhU#DG`>%bHtdV&|OfTd4NpUgEpS1S^F
zf042vq;8x7?}1>vS-<{D1(qt(i8N=Rx;rvz%ikYFu>G{APJLUqwcWIJZ_gLjoYhX5
zX7@QVVh)yCZ{k`!5HF3VphlmvKV0q(USBs*^*W#FId3(mr4vp>0o3hjg%ill$*I!6
zZD2s`;xz-LKC&PZ64uS@3yQrKU2AK+sa?IIDOs&%pZb_Iy2bybs8QWRO#w$-;Igdp
z%3{hi1MrsLb~)2??-l_0Ef;ArKioM@+lr^ACZOC}!x>3iQf>W(dRS=sFOQIFBBrNl
zeLwdttZ|<RK_#s_V2m4-B$>934#|`=OIN6ehLm6;AKQ$sonH+#Bdn0mXZ>}4fMWY7
z2_I??%CE%V<l5w2-v`gp@d}=qF#9G6G68R04-Qzppv>?%K2h=>gbahbDRr*WK(}x#
z&M6M?t%FZ{MEeRN9WH+U&b$|}u~vgm*0*$C!Phz$1#@yF@vGKwCVGk~6CMCw`k<~b
zgN_d<bhE_ppke~B?5B?E7iQj`N*by!NB?ZvSv(KLukcE_@so`|5-K-tY9&9v+(2^E
z3spoMU{{LaIR<~`is0ZMMVOz{911A`j=Ph$&}^pKY)ebaD=VH;*uN8Mwrcw<OBk=6
z5ffbrA#V^xr3yIR^6w_?W=LfG$Z#b6%!~iLNWVHWYmt=RQ|p}#QSXx~Rlv&|#@U7p
zjMl@?iV)WJIX*|e$9hJ&+0ohjHgt!M+ozT{^>fPu70=GBSuAGD^KafOnHYyLd+?Q?
zgK_B3Q7Ftq86-53wa)v~Ep1joXfNzxmy<ARTV3-Eh4daZdmyy-EQu}oR}5-bo~Mb2
ziLjK!+uaL;F9ewJGAK;1J!U+q!J!7&O!*MwI9DveaNaD*OaoHkh9wPjnZ<|+gIqlj
zFb$IYer>F=;e!m|`1$)}FuS})Z#FP}saFF~#|_RGhfUpx9z-YFWp!>Z5fKGrTy;_S
z4{mQi9r)OSG&%<<q#PbxUk;Ta!z;EU8yP4b>M0eF`90+I<RqY8Wk5q7!r?0AxUrST
zO$OO&*7S7b{U<_CKEx@Jj%s#Mwt+i`q7RW#pz9BVvjhR$lGn|Q&XrCR(hv)AnuU5+
z^U3|B4}3iFz5rvs3&F4Wcv3eViTBnXd6IQiR^Qni@)@6&6NeY>N#ZHVzNGVQ-nTW7
zGd)w1p9>KK9KUBMKaIe}fLv6}<4*U0ge-7=UdcLKL0g&twY`&Lk6hBk4eepIDy#9v
zW%5rM8{1&7*-=@X4#Y@Oil&I?s`sOKjgr9sdPmXn=Lo{3BswRH<{a&gV^EPp0l2IB
z@p=3W_S61tNkz`na_{(aE!>^Ig2@cucq^XY^0{q*H@i5cf`fCOPh+i|W&`PmgGomr
zXQs<;+2Sc4T=ME(X0Yt<0OYa^U;f$J0Jjt4uM>PM`3NATB#$PsazYZy+tq|sa_h}S
z?Qpb^FcmgTz5@4twOkDlB`hXK<5vJF_P|W={1ZV4C@<J}!P5z;lRG%M@jSiDq+i@C
zj3r>P=*hIbWZax)89<F}#pJqmH6x1!?S{3P#*PEB(u>I|lhBHV7>R2(wG1i*u7DCY
z;+ljzl&JJ6-cyFUU<3P&l3;zu2`QfU3r!dKFJKQ|2vAzrH`{)+qfm0+CwRN}LA6A(
z{Q<%GT10C0$gYdVQaFn5nyRlK9vQve@qJuz(Sfc4?ynv!u}psL+A24X#o~mlD$PKe
z)Wa(sgvksgd#$EDVO6NGHZ%hIvrCYaR~Rg>JQb@@w-Sdd5(b@T!-GTC7t0JgP9zg{
zv>T1)Fyr5C>@CLJg6|^6$S$pzwXDe#ug+*`xmJ|qN8eXDq3jJ-uoH~10!G;M-Z_fX
zc!k7!oz(+K$VF4BJ1x2i9R`9{1PO&WTBe%fZt`HpJ(}ToG2n`x*n=y&iA|;oPOitu
znXuy>NDV^-lnqb%WW#+h4YS=Qq~|2%P_AdAu{V~P-FMdU3u*dOC~5-)R3BGbsj%x^
z=|m^+?H382LJ48tHAa1dWLcf8{J&LgF@@c+Svk!E^LB<JXoJyIj(R66;Lmz5Qo|o8
zx#|_|#qn)Q_Rr(TdbSIJL(^07?2$lCb6sCaA1<aJ(CiWqV}8JQhC+<w@&DA@1R`A1
zO!#%+K4C|{NZBAGLTLRmS#Bpd<F<>K+-FT<|84TnCs|xy2WuWyjAL$K#`Ew7m3lO?
z=gF%yGatf+>u$SwG3>GO_MryrL0yATTTV$=%K>MEQh)?+J+h{1)kV_T*JIO9zVrst
zgUrRIz^ho1#ruFEg7n;=eJVuC7l4k}EFvfF3Asg}SOM=(2isO{%A~ui|GfO|v2p(b
zaP=iT81_!j%LMQIg*f(VBE(*qpP7nIwt16nP)s@tE*G8CSSIXXB9`pWoYI5H^FaY9
zhMQGOEPcz8hB>>0F=L$@O=4Bw71bWbe!c#EXu=Q(NT<ND9JHGS)ANI?Ro23>Wv##v
zT5u3}8<-FxIdfO;6@6JluDCx7*$~ZO#|)wjg}!h@4+KEF{N2{>*Vs{PD4xPxFm8FP
zLvii`?C$V-cqxp7S{^O*l1$%`=6e;E=Y7F?J8Yc46?@Fo4w_OAJ#kvP$DkDQIjKuz
zpp`*?+>1=3SkO46X)<$Io?DG*TD0KNgOUpwrj$o<{y&_Ud*1|j5Wi41z9)@<QM6%C
zrF#ceRIGH^VKUbRs8@lav=CH4VWw|(f5O!|l{R{-gm0(3gjU-5Jhz4;EtM;p@)t!~
zVO-Z|H&?t8PcnR<8d^5~R40-~SwG{uq>QH&@Yr`(c402zCUAt_k5c-?<DsxKy31H(
z&DH!(fmJI5L-k%oYJ_AFw0I=YSC0#!Zkc}fmPXv7+If!a`>#dNAT>(a6${WCE)jM2
zxH{k_YbXIiGs-F^C9TL!D~@fhCx6`Dabq<e0K}v2rER*zg#u}Uc+<V8l7Ak}Mg40_
z+b*sa*?8szC+RN(+Q~dhFrAVLeU}F4B_IVOjS@ESlisg%u0N*=F2p}`hVtidX(|jL
zjT|<aqM<JTswP<}+jfl>^f$1|j2-zco2sWw>9p*o<(q}#N-FgwIG@3_v4Zk)LZqEI
zq)YE<JvAtWhJ0H(pJVU+YaHN!!IDFnqTA@;Cz$V-d=#iQxT!7_KU6OT(xD$=I6jIr
z>culFu;D&bt@Xsu*mFjLmIJTS;;QLrR=6|OZ!ct=;tL<&Vdh+RESUrH>|r|NH;b_L
z@~4mbI@-@Kt&<^o<s$4$V94!ahfz&y%8`gcyjqXys6ZKf|745x2?A9LthBcog$(45
z55Q}|DXO-)jY?wfGX&`CE^qkgb`dPMqt{w9F9w-c-5{28$&;#K)iYKWS}JVFku_x9
zw6PyIRkL-S%H3!MuhDI5Iw8Jk41jQ`VZI7eY?NRk9tDkWS|%fEI6!&(m)k6I-G+|{
zA$Q>}Vm^=Tg9DS6R!sC~cu?(;{uN>ZHL^cITpIk_3Nnm_Q`jMjj52dlX00*db>}5g
zA$CU?O0xNE?4ZM0)Jt-V<~w2Dv|Uu~EO<nk{z6C$uJl5uwu;!0OiNS<yH55>_y0@|
zqR>bGU0TadY<oFsnt;sYGeXsVf@8EYuYR{TasiDy)6bM(lg2f0S+#HL`t%&0i6SvB
zG0D*(a%lR-Fg~AfGrxqqT%wqV6jAq)p?dr%JF<*#1M5FONqL-exTzhBA9vKiKD4j^
zhW&m+-D{itQx4KlbLLg~8;aT3+3=3M4RTabf;oGNO%>H9Dzy}DM$nc2Ux#H0!OGhj
z)UHVGv9T9{{8&k1R_`_Z62=emF!foOUTQyaO4z<|BAw8SWXfY0KBuF7=+A|z@yeZg
z7Gu4CX2VJc22_QfC*>V57e>4EB>af`xPdJSp6DR=Wg-H3su&+-o7}t7c>IMn8lq_b
z1`{Tk<MecP>kbo|%DlS$$-3>bX$!k6#VH2zH(+qgVJ8w(^WzO&Ha<V?&ICOON3PKI
z-eWwW*@po6mbhU{P3u3x3B2A-@N)dWVB$HVf_|(z$j&Rqf{$bKCr8kYwET=c5z%42
zVTQX%E3yH%S=SS#;y4f;WL;>J`Osw#+Zl?A*cA;JI_nq*O9i2NyskWjPriKDz&i<4
z*U5=n;%Kg(BNq_q0(x`Cf`v5&#wtS!96kFSR-B6joyEp|uF^Fn5`6C)3$0i^kx_T%
z6sVKTi|b`}K!ye})sZsnaJ9yy3)6@02_U}1)P6M63m$rF>xE-yx6!bzUGiHyGBXJt
zA|Zp9Z$sZSM?$S_Qr-U?qNe)-e%{JwT5cljQ4X0D2d$>9ta?vr6X*IS++UL=Nmj?J
zOc8kYr+@j28lTO^l$V7*fL&-cTCJ;6V_L@QemA}BGJ@O_9I0>40!}N{Tc5Ide!H)5
z9$E|KXj2jU`eY(<b~zvbSK97h4x359psg4JEdbpdpEUmu;;k4xFw|sgpOoj0f=>HY
zJ|v=voL9r`fKGM3JGW(n?O3HNd28L{hVl0ZHRfPtwZy|C0cu!dhluC5Fx9Q9x8qiI
zJ3fD52}c7D7QOHg1B7ZWUWM=}0V`*LJH~SG?KW|i{>DAS`DB><^sPcgsI2y+(PyMV
z6%*j4bnl3%)l`=hRj=hO@&o@_#`w~BF~&X@I%x&-;mC*=N?EC=QBf+^H;p6gALvp(
z!Ih(1K4ionxO`Mn$3bqE=0Su(%^O5wndn3L3c_a-`RTWafb|HpD*_|IIwH-dCK4B|
z5`#)ZqSUjEGX)35!ttH=W{Uu`SNtB4;XT$VUzOENv)$u37tF+yqvr1gqA}F}|I)<R
z(s^7aS_9S}yV|xd1jrLxIb&^c3ug(Yb}%Gc?~Rz(apNcZXbn*Ec*QOEp(>Wx@m195
z(Bf4(Y&dSyrw4sJ$*Zj7*#b73(^zT9KQBv{`6m0e?aLR<dtKPas8#(^0o{rvxt=vj
zG1fgzJ!5-sA8OY_AfR&qamV_kW58_0gya3LE*z7Q0Bm{tPsfucz4BT&)_{f83UQ&H
za3?5GROp=&oV7aT?B@>_nqzSz6b*6iA|d=orGo_cNxg*c?WKdqccjY097+1cbMP_A
z01NV(KN1H8Pj|k1yxU_kaQqf6;Wt66Sk^SUBg6h5CtR00+FQhvR)`zYnSAJx(#-?H
z6jUTxNF%@`p%mkt6Jj<V<i{URq}`FPE*u9w9L%BX>p_Gkt>}|0IMOA#uofp%=4|VW
zNx^eGGaQcDRMa%cTf)HaOd%^Je$kjqIN9fw0KPe{axoTc*Aw$V*AlHNhIkaQhC;=J
zIM)09jlF{h)sy_jjB@2@vKo*yYHHrK@;c6ikP!X`d5@j~e<#rrI&E|R=pkZiyl<NM
z)Q^`}CGjnxe1>5=F+aTMa9qaZwA?ySJFQ|;PwU1k)Y}xtJd&oi`jzMCdycPVI<DLw
zvByEA9KV&)Ubr}5mt=@IPBW7>?0z=;o!9nJhi_Gfd;*wJkeM9TPj4zlB{{x~d#+V}
zB>6M<Uc$Ylx}wfpFWxdOh`;9SfUrbB&!x1+c^x?h@ZRo}|2z}9-U$H^qTuv$%HTTA
z5qdBlJ~b}s54z3;6&lwPbGuColO1CW4<^cAmJ()AhqQmR&gf`d3q`#1+O=Q~OtwqN
zTy*6ER{^ghW}0zMTdLel+kG$npIwK^c7jy1r4+<cdhBl;5|5nIwNW8dkp90Hp<C_3
zPS+@FEMtmX1u1nwh<tQxPftZJ5;ZB7hF3<l>L;Hq3aiA|uogQy6c@hHmZKBy^=;W&
z496C~m5)gQ5gHJ-+Su_>{Fle#uoHzv5IL$u;v{+WbXdK9v<^R^!jEerd9ybMj$Z^T
zhS_lR<UQ_iYK@nisWWNatHH*`a@{yz96tmpn3;FbDWxeFa(n8B=&^lUDL@G>H$){_
z;882<m903{!5%#9ojaEg=A9?R-HrcV$(kA<<DPoh)7UBbTqi9^2N<mp(h<@FXzOa^
zG(2a1k!KYpzWbt)j<U#dzd;2Eg(Xr7?Cw$(F5}>j+6T`2H7diC7j3xhP%0JDQ6y7E
zPU%O=1uJ6m8*oB4B;Tz#8Sf0Y6a&~(V^WDxblJ_SV&t)4b+n|Z2Mq{ZpxT4Eob23r
zGm^os#hu|hrSs4a2TnwQ?|zqm;y7$dXH?Nz;7Vi3kS+56IpLe+1$lil3^~3HUTW^J
zAF84^jQIqvZgk6jjYuGiVg|mlXpOkf3vfe_j#D3AitKzuP@(yhC9QnGzqBo;-Nyo&
z^Tu9Uuc`<pIHfF9-32R317m7>#ysP6mhy)w48_?b_<~WOLzE98wUJfLs1A>HJK%u0
zwvVG^{oqW0&$s9^7Qadz5=64@)zDQYgD7Wzrj{Dy7VV!FVy)dp&&U`Vcd<95e@!SB
z2#?e$>i@Ks{^s|<uW>q#r$jwEtnLpH%hH#4v_!Wn(r3)6*-ENZ`X{xbmDw?D`~7_t
zV{oNzP6BK2*O@6Ih`NZ(`eKHj>pMa#bYp)tJ0TuXl#|SbDY>RvxM9c7V1I}u{R(w-
zgnIqqvAtF+BP^1q`}q+gvt_;<n_+R*deWyHuYK_d7AdxZOkZ4qPy~f0Nibr|_q{ns
z_1~P#hexFO3gQ@5`2@3~Wn!zgBAh!3nbeIh<%IeWW}!CcWsAr#H0tf0ZayMTv-&;q
zcmhb&<$(l^%a!=6OJ3E@^VvB`#T^rN3>$!xTC>1d-OK<j!%8%*d8s6MJXt#Hm$9>5
zol6Dxn!7x_#R<`0!LI~eIT}5%)dZVKxv&Mfx<z^YU>>Z>B%Y)1hWN*XKr}ot$e6US
zs|vF$&%yUUU0W+Ft<!0JyEms7Xlf~v9*br&RF~hf6$<c&!)7`AB@W3kYHuT2T-I|S
zn6I1pOzVeg3XICG)_DodykJB;dOz5*R;A-hLyvMZ=UYlKSaKQl5a18ZydLy-tQU-x
z!u5SHCM^J|Si_p<h<(j4#O)hOr?a8SG?Ntd&|Us{EGBYbuL&(?=V{mIW3bsSmiBn>
zu|Rb59fFg=!au!!mqaIs*>bSN!WYkQLFR`bCuWj8mVuR0=xv1+&YiMItD4(w6n?G%
z!u;DA(P&Mj1aPF4iJoek4RE}L7Ov_S&;zGLg$<p@_AnIAi?gzPMTtSsmV>n~m-s0$
zXDI^HbVVwspg?2i>hR$<|7h6u?jk+*kh;uxIEOAEdA^Aiof%4eX4w>o>6=m7!~UOV
zLUG=iDjU5URLR##V}V@B8s?{Y#jf*g6!gTt|NLUssfr;Egnl_b-r0vvE2G4@rqO19
z*aCD`H89y1Zu)8!6qlD(aU+=AH}3nR(Fuh+_hrR#%2#BDDpOZf_6ZDUn`y4!JFx0f
zsou?Qm48Wb<_Y3{+gAo8>HLmkVH+5|Q4$Ft4y}DG>NKEIeS-TJWVh@QknO?WddPL{
zztNO(!O@D?I~q%#D~r5*#rad`{eO1*xnj?~6se=t#mo-PkIs8WBl!QHY3yHUY>W)t
zM}{{@DTg&r``c)E*M4HMQF#VbG)rXj($Z)-3bt>O+yZJ1!-O|LOR2A{^pb-SgvCPN
zyie|zYZ#|Cq5yINDX+D+@|aP&nf3SPL5M0<gm{%e;>^QX*C_^7jMS*2S6D$s3#?w%
zDg!{ZRSa*pBmCR0+g*s$)x=8Oz3t<PPrJpDX`v@&!}gM=^hxv?<CKRFy9azd6#+Mi
z6azCP*x1~6(=8H!4CCl>k89+YxUGdhU4xroV*ymgb3z|$ILp}PxpaabvFkm%&E?zQ
zpL-zVyoI#5aSy&9Bf!skW!RE!a}bL=!<CYc4k-EN1X|g&DO2VXNfc{XK~Tw2%r%W*
zzfP3MS%QA^v!^~5yWsk{sPeV-(;I5G!(&#JR-uS~t;z6?BcE<)wa?(ci~s&h|1D9D
z1ONX<_5~pqo=gbEx976^9!YE?-fqNCpIz4gVW!k40~_tfrao7+j<2s2Vp4ZcD)Ysq
zH{`CP{*4Jkne7Jv`jFCW;lrR1Dws`jI<8}kqx^Uk+m}Y}G;-&UMZZxkPoQK>dihH<
z6Bf|>1&ie#?3VX2vN}1org#jyhv2YK?VuK;X5$XC;bdriDUhK&14%!&N@JS$h*Rlz
zhaVnkw?`B=hVDza|10;x<(Z1Mq)dZ<O_d!^!=P%YPSIKk7d=<;l6bW__cKH(+6J<~
za$j<R8AUl78lEp0cKCp*AUH7A1BBIJr+w6{48039og3?x%)9+zp#VjDxpMq+<D|75
z`Tcu};;~18elWLZjBaewF4(JoYn7ufoy%Q3bR+PG_dOE0GLyGNna2{v8z=f~SY`mE
z2c6A1>Jm+%oWfJHM=IuxJ?SQ4$@M;lkzwDr!7U2B#LP}3d==9>6^b#p5Gw0PJ>q#j
z7{lkHid5Ry5F7Q=ODC?C*P`agBej5P#Z|=G+GLLF<DF1%-aIjX)$z1JDc}bhSx@vG
z_@59npweONF%X$)sIPC?7$UHJ%h`?~vE-YakppaAV6>8THAXlq0Ws@$`?ktGkGCW5
zR|Cl+_br*hpuNp_o${Mv;w&ihX7D|(GtgznNU_ACPgpBW;`cYhmQb>~=j2s<yG;p9
zcB26n!}?I9V>{bZ12o!S$Y@AwL4feEth|uupol1VXESj9jLm~-aMqf@;Hjv$H@U|W
zZX-x^OW|4d*4D}hKb~2HJHeWTq0WR70p4fnpA#RELXuJEJgH+dj)4&M<FjEC=U;j#
z)2t<pywq~{(Fp1TUO`!#+k@L=g%=$;@P<uVU$fWAR?Nj;U;1lI`PPo%+#FoQJBceZ
z2zH*KORb0C3L@k<#WrrbfC6TE48^}oPRH)wO3JrbEeBm-7vmcZL#dAH_l30(gy{DI
zC_8|l8lx4wKWVWGbUaWHG`Dz3kpi&owa8M$(MC!9SJSRzk1@(Nm)uJa|MRJlsmJ*&
z9Q!EZ2UYtc;LpT1hN7__@AqwmzlO+1--JZA<RECRfm_G&9WlloD?MKXll!}>a1W9w
z8Lfg<fI5mX_+|eK1Ubh%%h+$jB@(|-5#{fBmzOn38VO@*Kw%l&xTblUotk2LY#17i
z-KJC3kx?a+NB3*cLK6^mDn+6m)r(`$;ofmj_%&GD_ze^xv;O%>`^$)H4?|!~bWIv6
z$}=+3=c&ZIS)%hdPxcut`t!8%(Z5tcwsUf@&9{;P!2{Y!4w<oU#Do>TE>q8gHtHH$
z0Ux%_R0+F8p{RaZm@K?lG$>UUh}8`B3bFTFjq{Xu`QW9$mya;kKD-c#B#j_ORb3Bo
z%{r$w=BuU4n)Wa?nk(gFZaqs3S@b4Am4ApwIae@|h{^pp<O#7`EO5{W7k!&VU(>VR
zBUW)f1yrANg!omJA*xUeUzS#!nzRrA)W*r}YY_d8&#>EG@v1&riY`R@t#s9ca~^Mk
z;IJ@4=hY3U!r|3%lk<HphCH$ChiUOHrclU4MP!fViN&qeg2}c<P>{uHef}}Ibq96t
zd!N)W&`p#<O{>L}!ISl?$Aekk1<i{5r;_DB_(eha2;Igf8gD_SxPvtk*^|tN(g<YK
zag()SqIF-OZx)nzTjDWFP7aezeojHEiva;siVe1gp0N|5go!gRlcjO~<su@|DKhDt
z_F?1nO0!U*_5WViqWsckUv6d!%|V({;C)n#94L~$h!BAjkaXjek{NN4&!h2`^hhN9
zn>iS;^5ahtE_EBPe3|6yO(IKtbs>oL^%V@I@P0R@I=?;}b3^4V8*;sv?T&=rXvxf)
zE$;OaTSs9ZcYxFcTLc&`jm?Uu=b2g_0N3fUC0tj>aVaF<@Smeer@RTwInY3x50b>R
zt)rrP=lKqq)B4kit->d;Z-2k?cZZtA_vzPE=?YAMwruF{VWbo=FuVSvNP|Jy$1LtH
zI&v#IcoVarYBB)q3zDfrR)8?vJ}e=U6}Q_;lb0E}jM|OA9lE?#ij1hJ`Kama<PI@E
z>oOYw!Z+Vud4I*UAq@MUyrMrPh@=FA51qB`s#r@_yUa-6U2b-t75?)k(MY5sk1vaW
z^&C}VO~7ooq2%cI->E4uF*nC3*6!3-oHD`jf5lST?@1{GS2}M4?u=)3C$PA67@uc}
zgz2$();a2;MfiW)Eo^R7W@4G?o=Egp>ctB)r9N3_=h!j2@6g9TMdH}HuLcYg3j0%4
zbEZ)?&pvTh$M{#!_yo%v{~jpUT*>JuafbwVCM+vt?lngw6b`ZW2}h9kDVw{S&DyoN
zc~<S4o=?v#cn6T*L(-c2Rs=)GjjyS{P`gFM4r*zhg-t<{#Ym7pRo()RfAdXVE*83y
zC&DNg**2&<-XB(uHCzn7ofPv2$oYs>pe5WSw$9Zy;5vI1=+-ZxeGSWUvi3dn!`b~;
zu2^s2LbR>#!sZ}K=jQG6?*QR(t*LYH2t!j-v(+XG73me#SrQIbl3-@t6F-ewxf-v@
z?)jr7F4?T|*Dvv0rr>xJ42(&lZ+>$|&d$jo&FOX=$Gx6~#$uhs!BP~h5|jQ^<u()M
z;(cJtw&#!6kL~N9gA7R`ZLLSXcl0#ZsqHw)YKgIF8j`OEcD9|qcuHI%pucldMaEQT
z(fkrsjFZt1AfALrbDNCjA<w=ZD{+V$sXG98NVcF<+XAstoy$pSZ*yb`j5oLLeZU;+
zD0S$VJA+IYC)=XNcfnmA{8@+Vq)`#7f^5$%Tj46$XZ~$%x^mep#VA@(;h&u1q%^Lx
zYWS?SN)%xqnML}`XPa9gabJp~MZ#?@;;o_-E+M+bqoRS&oS9%2j4JEGW2Y5?a|nQ2
z0<N0?(Jo*UZV)7RmCHHw;Y%~u*Fjk7F2R)!^7eiu8bl=KC45%iv+hG;LpQTjHzl=D
zshE``q%#c;#v=BPufGRAeVkChBrAiBi5e=R-h72BMinCs1Z8t8wSo!qLy)0ztS;hc
zQE!6uzmL*$k*{@znp+!}$>J+xR=7k#T?a@gnG<Q`KyqR>K3j9e4k=&TA0X8WJZ$DM
z;5$KOm4i;ZU>(<B)&8P_4vRd@Cm<>7<2P<lBvdK4VG`k?`i|8QFO86M6IcA;*_>@{
zEn59A;5c->o{d*R_3QX1&<<Yswa?fHlf=mxNQl>DT`*Y{mEUGhB+&lS>?eY<ojk&j
z+23*Iz8Cf&4u4_pxQ~IWWXat2aADDI=>Etuv0Ccw>@j=K!$W93v;XOmAr|kM&{I@m
zo`OVng?OMAaOM-ubUhKWj*mBEg<PppI7Uv)^)nb94YDoN(lPQg7qm;GnSTQ#iY@!Q
zUM(}T2BJ$CGCkl|l)2pZfW2pa_E&hcDO1}~fpSY$3T9@G%h;4R7FKP-rG?g9tniLp
zPYsgKolK*#HBdLa<qdw*&5K=M-lbqxt)m9#lM_~^M)ws{zAC6+U+O<8sU(eJiCi%{
z2d)I`?Ko_!Z<x3zgIIByDwKXT8hM(kLuY9%z2Lal^-tqWtx;He4jFsa{kU)VmAFw<
zar)_<!YWyL<U7O0-=~(I&om91$L)2#$q%A_8Xu!El%0|Q5=&(ung8)oP~*6eqi+2>
zmelQz08IqWVrnhBV=2LORRiwvdnRquY9ITq`(=%Yz{Vc=68SXcSqVs_iVCP-9A4y;
z6B%Lv9!)*RNATimrGk+BJb+lT{j^k;Pio{a-=_p!k&2V8>O;WN7Y%=t-MDAJRo{hb
zG~wazbWKM)U5=Tc9HyKowXKWKNnU+S^J|GSS2Ht`;G^zIh3a&S6g`<hJ`1od)PzxL
zHI3`sY`a(>h!;I8Bwaiw9vEQl<~)VBUe`G{BJ#)nuz=EDkQrNP5DNV?#7eW~IU7y4
z!IZ=XY$NoosaE#?3lP%8$kR+n*fmG=!mn<XZTBhV;V1lKZeb8X#xRI&W2()Q>{a$Y
zBcus+GU$Vd{_uJVJz9@>HL+iK-l($cC_!p>+lBu&nP!s`UU~cKFGYvXg@vAo*3hPF
z&&A)9?@R0jhqi!LEGKOH&&TpD8KD6^|DLbBHKJ7~>Dp4`4?gn9d)8`bp@YC-o;=Fy
z0<-j@+BsjfS$@$)%-u^Fi13k^{CH}j@`7B%B$cr_@g~*>JQNxBXWCx}X<#>YaDCL_
zt?UheZwy$@0R$0F`LzrznLBhYxiPWb;8d^)YYM09YFd|VyY^11bin?PAr5o?pbfjm
z(YI1FY_G_<=`Aj#9Y}RhUb{ITiUk)L=CTOUt&hpNPHK)Uwh6ce(%U%OZrNQ>D{xkD
z&KhFmK5GcSlAL#L9Lr`GpzxX^_I!NAFhD3w?do<E>Y(f^uVjIj)5Oq5?|tM-Pa`ke
z@u?}pqaVNwmbQ|aW|qS*m-*d1&4!0KX7oWyiK#DR2I;iK-kTL-8{~A($Nf(L_&ZU{
zDN3(Z%^Z0P?+A)_(vmW*DL-zIuM32HYV1<Vpmt-wae8MQpL2#^cTv(|NbU?>DD0Iw
z|4r9I*$52DDD+Tuc88t`#TW3F-SJrU0hobz$55W8G~JVPMgGxlE(V&-gZLQ*_zJN_
zW<!0}5PEa#e7}@_m_0+AcFUNBiyq6@{CR9d_W0!0*!BbyAo8dY=i~GpMd((r%Laq{
za)KLi7dRbyh`B)rL%O))Ko@@Arn=-vW3|pxYNI&;@?eVSd=R4<8wxD7X<H-Hn`Jj-
zVsnK6TlB$`=0sTHAeNl>FVNBtGY);q<3Dn3oMl-*g3u^DG(ORkXLmeEat*+kCLIxf
z!4lNpZqd$6*~ui2RZ;lTos{vmFGAYwL3fR^dCs%MH-~)-=b@bL9*E#kx+I1<(b)tz
z&<;p$b8ZvSP9VUY6ALOg(}Ke7YyEwtEpvT*U61z^{E>LlsdpzqFqMC{kroE=@zQ|q
z8&F#V9N4(@43H462C75D^u<UBaQ;}&ts$YF<}1oGmNHw17PiH#&KNgM$Jdyds4tO1
zZgwOp@ibCC@$uzbha_3x8#qBR2FKWYeZ(?u&oR18Rto;Ei+i>%MO(l|L<?_YXVxrc
z2EytkX&D=Rod3$|sJoHL4a@9fZ{HE5knykM@f3p@ZbUs-R$3O)<GWYMn9DPJyT-C`
z7Pyuis)UGrJfyej4LTOVJ>xw)4bxg};<FFW_lZwzyRnKu&(z`_^hm7TXs`5Mi_(#M
zleeUt1G96zTnCn3J2mU*PxHJ-EF{6ctD-dTfo<8-OY)S=B|CQzx#f@C_B0{r)1F*L
z?@PRRNFVn`7|=V6MxKuNX`d)?(f$?5NODqH*n4Yu?4&U=R85A)+@i^<53XO6u64N;
z7YASBLln)?R^5OrW-f)FPohV84+u=(7||P68XISl={PN6x3j=+nX+rkB<gW8QYDum
zMAG)C3LP|tuc4JO$=OC9N{P9alduq8!b<J_Bvh_Xl_0LM_7)V*Rqur;ROL5XWZx+r
zD{+uu={bC@Ba8Ip<Pl)+Xg}qSfwVifVl;fjDq1E1QCF`m5R;p=p?SorYQ9gGwWrT@
zz*47%yaHkRvgW@Gc*uVd2&O-~K%YwOvCyNP2Gi-Pi7tzy=&s!9OvM~M^$*N2YPO$Q
z03-DUW88=wP)ZbDoyW*QX85T)WgdU2NKiQc59r>m;_~cnff*cBa1u~|vZh#>jU2$q
zzvtalro#tHamjGIVgg1IhH=y$heCcN_AH!~+wR`g)PrE#0CN2^j)Mr+mEixT;sQF1
zDbHeXRQg@UlSosF!INGy(SDKk$8V-o5fL%HEmDP^#oNG6^nGx0e9rFZ(!QT|B>O8h
z6oa8TFx;G)@z&72ruDT6C%yiMJ#6Fxlt|e-g*F&!C@^kEPh0<D&5(RmK7JN=K6Yw(
z<O_V>s8H_m7`0C`77~NicX?#j#@=B1@zt7Cng2ku8iZZe%Op0cuCKNd=R$d>^{M&~
zlUBN1N=VXz`Gz7@&Jm$TxXP?waUo`Q!Xc-2xWRm(LD-Z+shYvhJv_vMHh>GyjzNg8
z<vP7=m?I5(1I=199188!_(MW+vCUWJ1=^!D4q>QJ9<@w*2>rBE5x#Vy&NTN2N8DAx
zVIFGYXsyWogM~mkZi#YkL5Rbz`bC3?kKH@{{F?vXLZ4`S1d?9u*S@Amv>uVOc+URh
zTZ{0M<P4O%sUvkfm?F)dE32bLq>KLd&DLzx{n2qXhQ3zAAxW683J97GIhwmLS5?{p
zdiOYsQ`O#9JIy~`+}!;rcEOyVS8jqRzncLl@>mm*eF9nvEx@6p%TGwyi^H|yL~?u9
zE$=uGA_VWyNKTKcH^tTbM${vqBB;t(x}lg60q?N|9KaQ-hg?OqB|hf*HP|8vz-+cA
z{+Nolnw~Moybugy2vo#-d8@;D0G-T%Ek;v>DzY%A9}_f6v4`&H@ux6<!-`IMG-g|K
ze?AlzKbg5FYcPDoY3QES926>_wO5?~Y11#7{t=QII_@i{A0AnM+gc<y<xgOjSrA#;
zG=iu~IQb~yF+Hff&^}`F<HB539jt)KR@>p3CuG`#eg=yIt(R<4_|u121FQSaTX187
z=E;GAc)P1o?LQ}kovXXqjO>9r)c!Nb#?7Vzea#Y+?`_*y94OHFq)!J&h8cJ&DYtq9
z^y^^+^&_lAwJLxh^1`A3c;)~!mW`&`=t%i4m-G+E4+-e9Vz0}MOs$^X{s*GD&yEcP
zo$up5@mkCy^6lMl6|yp%y#`|1zBX)BmzgSXVmCzAwCcgS$Jls3)H|<+PNBhpE+`9>
z24cVCOWt~-ogD)DHDvN9IQ7LKg}MIkK4LJZCTdbHi_q%O;wpict?V0egjcN60)cnz
zTGdOlQr7KAYf501ihF;r3-kNGWq;=;#ZBYP4lLTtRoCk7ggey0ezc6>k<MS%2ocG|
zOq(G4DsN*_Y+<&I93F%(F%C#5soYU&4cfYe=o4~+LdlpCldJxYrMAiyVTDEGoE|9k
zy)63WfltkU_^EE1RK1f#j8Lik>0l1E#nH27+pz|MnUxcb5i>j47tq!PAR0+4snbnQ
zX$pfz4tpCI(Ejaco>qLJGVy?4!72Ib<MdB=ofqhQPi&pBFQl3mXlhQ&cjQK!Erh^B
z8%C7cs_)5)<1d%53!d;yv4^vVU#DGG4t?l|g8L^YNvQxl`}z!>9OtuzWc}oV&fA0F
zoBD7a8>zXh3hCKjWZ_xNm)mJ|(!OS2{qgk7=+@PH?8k2?ecOw8DLfs`RZ))ekz2s?
z{jX=n6kiUDF~M0YUagO&9dB-XX>6E3PD{qo!ecM?nL3FvKsF=RFWc@36Lp^D=SX;8
z1)uCmDrM+=%h_LaH1OVR?@z5L;oZ3_5gtUn@#J7rAk>t4KjD4L-}_9?Z_B64W+zoy
z1;{>?*hh>8Ei>X5d|FmY>XE;*SW+Go@ZMH@U~*361K?qAxUY&<{%#?9K$-|S5WmtB
zN@*=)+%CoVsoIfivr|+-2IFOFdow$+fB>Te(+~Ak+cw#{4#~!K{tT&vEa6KezCOqV
zFoiEhJZge;AqSO~^_xvIo_C}_lj@hoD_3(8R7P6Ws~RQyEDY9Uu6toZ)D(%MINH<P
z7mdbI`~(WEkcnzMc6?_3a0j(}s2W^4v@BiUA$mw{_*HA@Pmfz)6|ys)-3*|}uKWGv
z=~W-88*m2F$z=WMgl|aNolLE4-DL!Dkd)1n_W*bpO!)YvUY$OHzV>m@HjM+5kfi;Q
zoS=Km-Y5vw@RfUcETMpf#&akE8_{Wjc~pY}a}7d|Jx`-WL4NCYN=V;VGdPNYhY@B9
zS^DLLh$qqK3+RZtf;xVxAz>@QN?vK6gW!L*!kodSELP{S)?2?FQQUlfNA`n!mwDhv
z+gkfYro1HP5KQJL2;a9VO*9X+L_KVCgwbO?y;nUO%<zZ`STr39n<xu05rRwc2sB*3
z4aerFWW0g}x(|1^uk*hSWTHkAHnCJ<KYMwxcSmlK>Xtz(MgKir!7gsE{|p9Yds}5m
zvhQruu8^98ya8^Td?lnanG=dSARo*?$oVh~lTpjRNCn~!U=jB}@Nd<!kigevfxX4$
z0c;k;fJ*vp15mjNCmDuy+e7_6oj{)65mCNCE?5usDuKDHP7DqnCw#W%N^t#A1*dd-
zikZGz%I)A9Fkj@scr1A$Ni;~<ONn231}b~D2wL;SFVnejL$xTX5KD*SV*?Uy%VSOL
zl7nBbc<JRu`OzMF?9A!khV#L4l45PQsT&ib@f3I%s?K?WSKsVkpV3FqdQ$(a5Uzrw
z9c2+1@5n3YzjP5m<#D|YXC>NqYU*T|P1LMHX#AqZNs~fG;z3hd8s1R{9su7uu4})<
z;^D^|^E~CqsnTLI&fna(Ze@mir^^*c1YKSxbf6yB$Vqc4tR1Wq=PFf()j)%P(X2^e
zzr%!KtC9*{rA@m8F6WO1E)>=}p)v2sKM|K~)faQV)6m?t4V{-dp^SH}2)KQa9<ba4
zTnHmaM59cN_{4O|rC;W(#b?d1h8D$}8MsDa1zJYl56y0~DNL|7!qKr<iX>_4mXF5+
zEjg%5tcg0Y{~O?duMKbiy2S_CDH{H0SWV*UWqvtsQkMhlZe@dNro2kjk4=T;1;a#F
z3p|`nxy`i)4apB}z7i#WLk*xgdNKTnWDs<idDt>{gdyw-kgZ39r5}7T7V!M}LS)w9
zH6Spc!(S@p7e6mF1xMBz!K>uJcaR+VwynL3`w_F7Mi5gAx8VuU;GTkM29snS-f3)`
z8Q@3o^B6f41mF<}7RP$#p?$bq{MlCxWm6}<{cQy*Ni12CL5j3bSSe$U$6hSBz5!eP
zw-ehJr~fY;m2FvB-=IL+b%CVvxeU3!zgL||)Pz=^G$`IDD<nh8o#&;&G)c5+jeDEh
zwA_VLSeOAGfchq#3D&&AJW^d~+L4FaZumgkZdaD;bWKKCME`nn=;3D|9wK0tU?5I)
zt_!S6WWpYB=*xYWo3P>2rt4qIz_JAF^rw{hC;?mUnylu-e`;b2M+(xwSQAOKTyE~D
zFPaDZl$5Wj)4gw*hhMQmQ&ut8U2*#3dn_pO61NJoHg88`#IWuB!9DO|tL~yqPOvUu
zGWZl+mj*=sqgo5SXf=>f8W2t1@I<LO=M6WPvhY$t;+iuUY^J+CCogi_=4=<)trE=x
zkk!4LnmWWsX>u)rI;Dx*y$7jSV#<gb$UeD1clUeA-$)8$+VWWCs5`M@-ZOCO>H(4W
z-Pp4pbjJp*h4h9vK5_Xx0KgPgq|WROJ<5WRw5Dz!kmZx5?aQQeaE7GKaYFHT;xk)w
z6+5ieg7oD_fsvue-5>a4OpvI>BQt7-aQevP*bonV^^PUQ1&2T(O>d;O2lb`NNQR)r
z)f6MhCV?n*2Bx#v8~(;SC4K`{lM?5$eQAT|_}&gcW$P%n)5jm1W>|n6jE|@;76q|{
zZEYU}>}$6Ii6rsW$Gi5H?UKYK;^bww7C)6!<o(1$q8g`u2Q&;u+Y@85O`grXw&Y2P
zfi<bDG9?VGAWcIj#+kF+_{EgK=OwX%1h*^k#u6uKX|Vg`>1>bzm7=y{w9?)%hL6cm
zHIhuUu`(yfAP^$l<gu1vWd)3{CbCKikt<myo*`sTMPLl}dj;J$M&H5R<vinfVG=sH
zvMVZJ9H8fqeF-=2OTL)wmpSCaonMBg`cv>YZ~gN0yiEO+p5zzV+(senUopUD9a5YR
z{sCpuC88{nD>dvytGf#Z-%pJ681)$H9>iUUCu<rI;)YUT#8aqwnD!ApO#uVNP%z`M
zmYFhpyW!i{jV(W5y`*Nhvh7=!(Qhq*Gi}?SAqH1LhI-Dl($b3c`VF-m&d&EEKM+L}
zFk@T?`{!QAZWxvp7;o*67ZN?`E!d)_1BvCYu+XGYXG_V`3#bVLRF>i0G*Y9+;ZM4t
z=d4z4H;ZB+2iU+l6AZ9k%$bdU&cA9{3F0S85de_^^lY;v0R6hBsxGJuws35P{#-K^
zQHB}CwIQAZOy5LQXTA388vlg2d2}yEXl_Tuk~<c^D9xDuq}LnR0eK!-xTB9<84nKb
zXE{8*B(*&cRY0J3)7L}?Y(rAVVSm4x7^y1^K2`pK%qTp}Ys|Zc5d)#J=X$hYD*^?4
zh6)=2q20bhBe~{39l2nhyp)lLYtXYWOb}QeP@G6a!a%evyQxNn${SOJa<4?6I-D&J
z`bC)NcqH+xDnnB#Y5V-I&JK(bGw7!lm~+QdzY;aT3RSqmv&f@~T*QDG232pYnn=Fw
z2g1uflT8LpTpyCOKklVX=@m(erV|O}nQi9pnL*XIV=e3IU`oQ5dHTSIkeB#Ti%N5S
ztH857<%^HDMg^-hcp)Y<827ZZsSC^Keezz+SSOv%v!c^Lki)1kqlZ;ca(<xiW6O^=
z+jM!gDJB5X2q@fn#o^auArRCeWi78NiC)ul$ht7xW5DE!`~@oS$8ZP*IdL;ifUdqF
zfn$~q?saD}q}5}vn*_{EK3Hox?+->o@5u)Cdj2xQNM*ZAAWn+5%N`{^9Y&*QU}PpC
z+X4|SJr;vvNtlp)^5^@5N1Gq)l9&xriDHQ^8lDZYvH(FqzQ6hu5>5uimsZ=Zj-yPB
zJBqxE?cR6xxan;agZ5a2DTbG<18!uzE*YCEr4a|Z0~x`fS63+9V(`{As*rTN`_R%h
zU^bo;<{DU<1iL9De4<Oyy%d1SHlyiVld=BA+JDN+3%&%vZhgXh_zd7sJsTI!=w$8J
zSY`FfVPTZ*V;MQdP`E!MB)nGN9rTl3*svWPDfRzIIQPd07mj|q-*gDubNFDUu){6j
zauzfcCcv>TD?mimZp+sX0LlavWj+6dUzE5cxYwgla04UEZaFju*=o6bk@ea5e(v4G
zDXzFds!@vu|KPN15WutsQY|tbGk-nB>)#tiaJ59+NQ5ayH?*8;p_agPX(YyJV_UF}
z)?y+gZ0;ay$hdhexvOkeX+=cfJxTOd-1#6(0ZuH`1;7#{fri3Xk|zVJWS87*SQe#!
zP|h!Vh3k^=5Ly9EEUPJzSeD309%pS9W(7(rrKA8lU`17772L|Ec3_BRLpHH#q$|bq
z6%9Kn$F>3nH(Vj?-@F81GjqYTw#uy9!HFkIU2-Se^3&iHRiwxI)DpEyA_48RTu@Nq
z=1!{-X1J-+RIjic%HV+mvCd}XDc)lG{dim@F+CRYe*aGHcCPn6foJkHHIkhMBCf)D
z50gZx?wh6nK`__5oz$eOJ7INbj#?AZh1?7#n~t~pu+_`N>!l@Z^k^gO9tLR#;|9W9
z99TdX(P2mpn%z-p5*Dxc7-u)|?g6yv`(x#I8oHd<#}8ik&7tohiFn+&g`}&Y5{Wa#
zDB=8lqU*9SJXdyAHW_=htMpT>N&&;MColWiy>so%h8&1u*W)!{d*~m36{1nluOPol
z0FR+oE_S$RmvNTtY^oCGC_do=rOmUzBqDF{A2YVIAnsjWQOTbfK|HvUPusd~C)$Mb
z8T(tDQ~ZY*1mT(CgQpo*nj)F+LZS1y{X}8;Bl|sMi9sgpIHj9yjS1($XU2>NRL$0k
z5Ig{z?gCS>J1q8z6wGy2?cWxKXinOHY)lu(OGbbvX80SyI+)~e`)%pqdfGtdV>(gh
zi%TH_+&uI|m9u)^s%Uy9QDy-%;?$PtfN!GNgx@ete=?iYccgL=PPMu-q?3Y4eS9{Z
zVPTfrV+UDwaNCi0Zq9VtvuCppDbgxi<a9@Ff37<DwG{o+QKs=C@FFka3T;IIzfx#Q
z-&rQ86=bQTg*c?toD$YBz5dq$!FZWGr1YxmUpnC6F*RqqVqL2-X(*9sR<+WS#y3v5
zln1~JL>>^5OC!%V)8<AM)kz#+SF^_~%V)>KAZ0~}qKbkXD-^&H+zeb`^baV$5PW|l
zM!MIjLQMBB_1hk>B5wY2m^5NH>jk!6lPWnr4JxMboEuCw7v4la*A$Yh_v&mX$zK&6
zSqg)^g@RX!WuYS?^lSM*>fo2-)|(2JZQ*a;hxBvQL%?V{Fbic$lU|8_0{YMonUjBQ
z?;~orB`R}%Axs2~-mM~6=8^4!NG4G79r^%J2fZyiU>t@z)tddk-P;Z74+50DS*l5q
zCsJ9;36IvrE<#l6#PuB)C6e%#WWKH4xe?75^zgJ9Dp&=NkGG7cwAAfP>3Y`^m83F{
zgB*Rdi@VO@qOvI4FW_#YP_pBHYK5r_v11c0XXer)`?fdk>#kv6m&hlPA|$l?+<+oW
z8;B}oRj`Z4E0p7Aje+S^2nqG{+wLo<c^0J+`u`Cx5u6i>%nFMiQq|BZ6zl|$?lm>a
z^%EwJjWA>4olI%-bQwmpe9L8=xU1U_iOB;>3K4S;c4;J4?C=9zrNoXi5iB6{HA-d<
z2F~XGWQe}kt&L7TwDy_tjl(qv()I1ZXNoa?e;FbQ`2W8CLYi=ny&!8*T2hvb*+4D3
z>)J5>EzcU)mc<8!1f*mdOYxl3;8OJsOUP#hJQE`>k+;={<xL;R=EB>j_{~p+fw{xe
zNUb#y7Sdf-Scth7TF*?p=s@EuF~5`r{3jQCi6Rfe`Hm9tRl~REVc41+4Xe-n|GtC;
z?%Fxg-SFg1GISNEpb-Ao^7FCm`y)!yA@ZwwoD6{BAjf0_yj}&6Du=#tryeY;d;YCI
zFLatv$+}9SRHst6^p}KP_bEJSmd|0qhpuG^QCS%$1Zw!bktxe{kwkT)<v+txc}vsb
zRj%UQEucZ0oTK^GTe3-|BS-we2!CpUT;?}B!7~;zLYIYXi9Eb$E0l`|aOg;b4*bZI
z_i0tbF=BtCHFIuPwnPVfsbU4kgG`jJ@_s;3UU7-3z?zG7f5*LF#=-6mn0%;z80X#p
z6hWsk7#3i*SD3mI{liRLE+9YU?sxzIBOGB|(c>R&^9+fBKX~DGlYgU<I-E$VRv_3-
z#jmmc6QlkvAi4@R640HimJgN|{fd04eMe5v1$ZlO6$Mk1Rwzc|ES9Av-m5zK7bYa(
zNQ@D+fJUClo9~S8vG`bwt8&|5R{<^z)wPpAAvGw5Iul>6eyt)!v!2H>6Q!aIU0GJy
zb8uvy(rH(d^|y?LnITA%RU8^NfC=!Tkb&iFN7M`<7k%=W-X#w)Qb;CV1~k!5pI+fI
ze2F#CsFO3Z9CPG9*}MMBFDN%!JkvR{LN!2ln((7(#xnNTj^|Up)*;@)e54Rx4%CJT
zZ~M3N3R(;X=($!jF3nl)Y;j9gSGAdBw_1_<+$jcAT&*nMN}Ue34v(;Yzx#4=@gEhV
z<)%9Z)!L7T0%@v)OtF!SaI`S^E+K)!d&f*2hHH~u5-wo_R{wEPeO8I8N%=VNb=^P}
zyQGd)tXFG=;)H=qqA;~Qe=v*OSVydF9Bx0GLwm57;UK6o{N3hNvSEnUxV8OXOcb}&
zpD)|v6i93lhtPwNA$hU<Z{QAnNx%jep6Pd;SMfH3HB)-4fOb&s6V=j}URpD#sMdQi
z0s8ytZ_!x>B4BMQsG7f$?#*|YOBcx7nEqQ%jUFv;Rb(MA)c{;xF4QT!vNLf-I$apU
zFSeorajzfG_Y4u9yCke<TFzNK)3XVV7b7r_CW%ZzOL3L-I%pI3RgZ}8K?3#JpR0f!
zSyYQsG7`Bvc(S_GY@c%KoGEX}JoRdeYyjzecX_5z^+RT8ny8t4owf(ljT?{?j_coz
z(2>WN0Ov|#eE#0tZb{?QG3v5w0OAoie_Bmku76O}))r}xiMgtPGL3*1pMi7YVilU}
zbX1ALJ$&iV7gmvMfZGagD@-&&iN#TR5RebF;P)fFb!tBGHk<9&r$V}j7DL|-c8xT4
z24FD=TWQgVft`<aOAM!~znR04eSM&pQck)!SxE1bqi8)lTMOV<SA86_O&*g?1HPyU
zuk(MX&g?BQ3`SCaB%t2^>Vy%0qLH8r^0hRoVvRbi-v1`)&M-SX3Z-g>On^X?L}9s}
zm?Rvhs(I+}H$UZ(5jeL}kya<FFmY55U~4FmSg9C}kQeMd=MKfcaEihP$u{ZsmPUsZ
zD{hbSQ<Ec=+n0Y{8F2+5mtVsH`2jv$uKt-=CxJE*e%U&E(=R5w)Iv0w5OPOS{lD&N
z_gxqxN~MSDmfJ2{qz^Nn680f6u4r=|20^ytgA=|11y%npPp49ZT!bDq$O`71E?0wK
z0y;CD`5zZAR%+*Mm9w#m<sn#lL@6}sVtG}gljt1mXfFFBrzh@c!GM-$*QW~84UYmj
z;KdKBJaEMUBV>E(yxN;G#%k29IUQCNb7yYHqk+i+Ja@Q+Z+ll?VY>ZoYU@NU$&T@&
z0Jo*po)}C7(Lv0bFr`n16!okKfzW<CkEtR!>S~m<ZocSZmq8bH#%(xhYOn%G3-Gwz
z;VFm9tr3<4P>XVKtaaRt2v6_(X=+<Of+r5I7wVSIC!rDfDg|stO*g(QJ}f3pgpJ&C
z5~GL(bo`SVSI}I{9{fP}QeMTr2%k~8f(O#Bo6wG7`z&MWlYYmp3^q5Q0T3itVCGaK
z#{NZ>*zd<-EfK!V`w}GpW#9xEnBw8e2iT;qv*!%8$&3|r0&ePP(3R8=k4UvZO&Gfx
zw+!m20@OFZyVG>Z;&GfWX;w^SE{%KHmJ$nT0+qG3VTl?qr%&;YfXH_eOZJc%dEkUZ
zrI8-NS&$Im4BB>vJRNV_;Q>TLyn^EomZ*w=RY1shT+<Ly49awu7KGLF9*)QjIo31I
zeM+?zhG}X9%9~vl7Ut(ss#GEWgv&>%P20<-du{;T`q~ee;h=WHlr}(g7%6~z<6<@^
zvQ%R|IlQ;9&bXWXlGcKE5s#xxmrkUrph0&0%$R(PlDJEp5ETFa$;==+>QvrakPZ(p
z6=AU4bZX&bgC_VNR<Cbkg4kx};YH5tFF*66n7V<LxVLg#|D)tZiryS|f_ZMGN#Ubo
zYY_mv+Anfi+8#d3;*8ZuV`Dll6i<9pSB(jaa!!CXI$z$O#0}-H@<KU*nju%kn4?k)
z5J^x|bDV2MeG$|YNugq`oxQH!N}mpuwq|z+3sLGe2u!+^BGkvg{dGxC!o2#VjM6rQ
zj=07@7UZd)O=k=mUIP`QG2ogTNki(%s~Ew2U|!?-&R7<va7wwVLASR@6<s6ktFhpu
zq-~Ch1DV0%4-#l{UVkopzQKg<_~uxVDo({+L4s5GM{ZwP)ey&##-6xo;m8+G=`xNo
zJHU{eTuM0nk>4$+%qW8~zx^L$of{6JSEBiaME8eJlOS`>n8n%yPS5vf6D20kAB)0H
zRa&PIA1Sc`;m@q->LWl8JY}U@McjCl&NMZ8WC`}}_2A^T8~Nz7c*JH{O1mm*0A)!j
zTd+?K6C`S1Sf${tjQL%P%yljmo9%OB%Z8Pm(=A~m=9uy(c1ICvGq793iWt(iC0AM}
zl2j>(sX>ZsDHr?kkvWC}=cg28FvOGqmhdsRw0>wzn<U15^c+vH>}=-Y&If`wDql;y
z#0RyUorJ>E4gR86)S*&Y?NH!1Y6<YAEzpY7ZOW_VP?>S(dm7nd^?=JtTY2)}#AAu3
zdLv204C-;QXYH25$9+EH{>nx-kV^v;?F@NYJ{s~z%2*dMMU>If6Cz(Y9nyd&YntDr
zGoe^_x^v+95yfeR^-)i}^}P!<dGoQgg%vX<i^l46&iN_2)oxst3ZoYZA`JWwZ+3*N
zE2X6<*L%n6d4&JrZ3%*`iA3*y7^CF67xWlIcMc?INdh6{x-}5x`#BPTzpOHrl_UsN
z)J0EgKoB9AG8-w`Ug?j8Bnk+(C4WA}k?XP>YY-)t{J8j^X)VvCqqCF9L?J3&GW9vV
zn^=y-<VzxOfl~xc%}*RJx;pPK<8?ezFG6jzEM@DBp<sH+|6^dhQ@ARxNs=(b4M76H
zRMSh^23MoMt8Pn;=tEWRrpU_zcx#X|&VrfHr#^;$NkRupVxLX_NGQ2H<P3|+e7ij}
z2hJLcgUPvnfP$Mx)EAD`R;U%Nz?sgdkKZbOOdBAkSK=x3x-0l+%58x0xp4k(Hf!E#
zT-%~I4Si>%+!QtBbJMfwY7ATZ(P%PUtgg}1bR;Y1+bfH)TAR9-P1P{9!#hzUy2hfj
zX7FI0!RrJ8{X1-((J|j38eP2vgJdCEc&xjC(tF4%m5|N$<ij3yn-TJ4j&GLw&&7gA
z_nRhX-IoMF-*Of;;~{}J%EydASOIP?FT@Lvgwc9b8kiN^T;?{@iCY#gZfOi5H?1cF
zgi70AxWqNc8IyUc0e7=d+)M_CguQp<YTmM-fV(U<ra$EqL(?}xyaJ4>!29ohMu0J)
ziX}m0=5R3};WA;}Lvt`8amiTczE=xbU{>$P%5FJVIq&;HU4?<-5)6BEWx`Ppwu7UC
zhzBbZf%*^AFTz0@knn+r;V4<sCH-$7+-?m}n4;e+6daa2Bd$)i5>#WGnMtV!V7*D}
z<8KV40r&adFSWhZ<>c$dlo_g>ZIGAEl3-Qq))YXQ`f(F*qC$KW;{p^GmJQCMS{cA`
ze4(Ds%{%wAy&2To<H`fR@OZM*%u<f@#Fz~cIuW#8e>uJ!u<45g#o~G_TYMVzD}CI>
zt8KJke&)I8<(9=&ehIVk{5jLfkaQ7!&%cza%(JTL6fI{;<SJ|3joG%D;y|NDGc=mZ
z2gstX_E!4`lKwNZUC7b%pE0Tcw{Z{8VsV|jiD%0a$#Ivuj|Yc7fCDsw1dpXb?i(J#
z5npF}gfs!ImsaPbWr$%l#qa)L-F2j$7-Vq4)8(F(TBYrp^ywWKz2f&tS;Qsntx;XR
zD!x^pHF@SL{dw!G8<p^q_l2Ug9)55ZT|R)a2XPIPLN0*G&L+QMIdF5Pv(iuLxY99%
z=F=^!lVM2=u_5lAIrm^xKFSy%a*pd#$Tg=Wn94L?ap(<ynMe=OU#gz5NRRCm#~T4>
z!dF8xoof3KrF!S~L6$xx9Zu!6G}goOVhEqG>2>|HLk0HjO_!#Zhf*#m6yYmxP}GX`
z+zIJUC(&YYUGuYuIla;Q?epA(`7-Yp+b8sO0@`}SNMTcp6h^WS^EzZPrnl=_B(kT2
zBP}ITbj6zn%sBKL<2MoGyNz8vi-kb<&Wu0D+pSFsN|<2)<}yw!r_Ni}<&?6f_h||p
z;9B1U{SCO)F$Jh}VKqL>K6t`1DvkXhu^@h|jz$<p-MxE50d+gT2mzcb={E@HrcQ*%
zxe7#QWeEDBBK`m}?c#=If*>O%!YB&YC0+ND=M=*o4#*N8Yp5K(S@OR+iFUajeqM;|
z{mwu4W}n^Xt2T>luq34A1Df}Z+WgQXGI(ZYttOiMhn7tyyrmL=>CZ<$65RRwr@C(U
zrS6x&hmcT?2ueJS6N(1|JPAH)>`$K1sGQ3&`$7he93J*pxEz_ACNc+Q7k~D(CISQ<
zJGPpjHC#0XGeem#F-}C!kipPJuL{RNO~9;*1}=IFN5z#-XSZSRh3h+u%QS57R>!`#
zsKt#(GAen)RZ<lYS>~8^iTCO3+*5!W%JTI0p;%Wgh}CTVv9F{~z0qe^QQnRngvfO%
zATr*?$(a)k)&w2Xv+pWdk=ME{Na)-AtwvSb0W7?8?J|nqg*#t)NyI*s2`La86$1zp
zQu?K6hR)BJu5Uu5o2cP^9LB-3?=zUN&5&T;O7L_NWIA5-rWH)&B{A|KQa|ds2o~5z
zGk@sMIP$eVuFh_K&e8ZEM4b)D%TBJ^J2uB5TavfKrM9|j`FN(}2=9`F8TnzV-eZ6S
ze<7n3K?_ZJK1v`5pcY@6ewXTSk7b=$CJyDo0uhc$<laK4Eq^nYU75A=K*_VRHi%|Q
z0(LkUbHU94uSBA=JI{Q;=Pzk7+GX6OF(&RyE|}~U^w?<EXPOGj5M>cJ#Il~M!+>fS
z96}ia4xv;Y&i>mOkI(v2SBmUmbO2lO)tlBz*+ZKlH;t<n9cHnVu4-+`$ff<5QP<DC
z>q)Fn(NBu(J~~zym^rOMs6{L&gObPS`{`pgxH-tMZDdq(3VX&GKSlf*bNlMB2$63@
z7obl>Ju@l?qC(N;CTzi2_CRtOqQj}5+n~e{Bg$yh`$QF=S4Zv}p{DkKxTxtB7Nkfj
zWIQbGQEp$@C!o{vi8f<1(`bQ-6v2X0RBI8&(A+S9QYuLxuhM3TPa8_W34NOF9{_-r
z{KSIVPsv3ZP84U)JfREgIYOsK(v;r3@p>2!Y<Jv;Sbd($jKN@87^+c;Y9S4c*}GS{
z&NXS!%q6lT9%7Q@h)(0piT=rDdvGBpzI6(m3-rvXC!qX7{1C5Dkw=8jO-@P18TKbm
z8yrT**2%ACN*3fkd5(IZ7tEFRrtHEIrT6->LndmjIAud-!f^-^so7PKGO^v8%Ppv&
z_j$bzoZT!gWaJmW*+IRWbi_HZv1_a$)HK8wX1q?0Kxir(&L{o(F-6U9PB(3Q^$gdb
zs;K&2IPZSG8Vi)JVH~<5A2uC;=&&CVcVC*F`58f=V7E((bPh)|vomdbFuNxuX2urP
zwHCK11~D%7d3hn}&5xgea*^wH&Xmq#hHI@texlvXjCKj%wbX9RK?8nHvd5%OYY+!X
z2ScVkcww|^jiWV{y$uV)2o_UOYV<ZU2HsfA@R=%b)E%URvcCX$#?Izj&ibOmdJy$4
z>?)|{E#zr8_DJ5;cDQP53?x`dqL^?0I8@%`h(XcE)2wfzlys|1yDb%O3K+Czi7dj`
z-cBBcxM}>wkDYM{c{e1!!x>pD+ar)>t!O{zSl=4|B-KAK!E5>MDX8jXQA-n+46DMy
zKQM}rF1odRfhssnOZLZw%rC-h0)W>^yzdDq_Mqp83>v5oH?9JBc*vh+aOM72<_0GK
zvSz-cP1@%T2C3Y!IAH^Jhh@!IecMF&4bf038TFQp6GVbXT`|3dn9moZ+c;;^cbxdw
zuj1hkCAfAWra1To>|GKvm=+g>5F|u(*j2E{vJ)j8LcS&sNG)UdjqRZrRwXj^eKBqj
zA_)1mBOk6qBY8?<(t_~U=#_1<JD3%U*dFP(4MY#VGG`YteA(W)4#|Qpm}cq9@1;8Y
zxIWRDai{bM7V~T2zB=*>;-g!-#cx*t-&1qq$rBoq-ADi`XF360RjpB8eQmrY_N4(<
zJ6|2~r>%(v1jQqqUdeEIkt$2(bam&p>>r&2(D(15V5u}#11!mYRK}1O<>m_M3qi6m
zj|IX<iPN|kaas>POP4OjXKH@1oy@XmTkANnb^MwUv1ky!1I=!0;@#TdqX(Zc13^hH
zitI1bUv#q!V&?L@fXn2=&T>Van_K?}y#TD~s~9P}4P#$i-X$u$(Py2%XG3@eUE0Tl
z;08A&f{`X93**ou6553pDoFQ_j1Bvd0w=^IPI|=knG`1AQ||hkUHZRBC7=UW<2dx}
zm@CII;pYgGuGXYFz~dJS9k#k7T3X@QMa%a%wl}6v7GWf5L1vrcYu7d2*{oZgg%|Fm
zh~kvvD|;9-YfHMc)prl0KgLEd+RM~*J@FKIqL=m*T`}a4_9_{>6X~%r6x4!VZS^Le
zq#?o-{@%@Cl>j(qQYFr~8V8`(Ui}`|p#5f3U4Ioy0+;pLS<oByM9bnT+sdG#SNzXa
zDlYQ!OGrE}YNG9^SyTnwq@>;wk&ZQXzof}k(+t<UtO$`@%#L_zLXjVA+LYgKQJU&~
zbm-+msugD5^@*q#9QvZl3cBziktc)Tk#N=?EfFed>|+8sy6{Ma${7<fSE2-y5Nf`<
zZuE)nlbvby*Y<(lJ&%ak2yX7BluD3VPElA2vPdK~2Fdf&UsF5_djERIcm@2}P|ESa
zM^9sSHVPCzLus7MCmnUxiZaQV)hmovqE-p`e>)4gfI-IPh2$3F=o~91Fc?3_c&!od
zXc;q(2FU=hB(KcH$#6;uH#LUxC!XjlIb_*ue$V1wBsHKEJrCMuBZgGl^JnOs4=$g@
zx$g882&0pUHHl^=AME{%tG_#3IG4j69+pZV)PorW<$1fF>}5nye4}J1zu6$W0J!|*
zTYey|{y~XeoT<C>5Am*&BC8`Gl950XW=`1Nd8Rah$P1s433}8zm`70j|FRGs!+!TF
zk-4n==;#8aIaTQ30;8|Z`PQT$?tzIiOoQUdu!^zT3wh5YZ+$!%KAfW^*6JEo!9zpr
z?Yun5A7wZzD8N`N7H%1J9+whV)TQSV$xb`JY(<mMLyO#mPQY&JBgE(<&9+8V1<`;Q
zp4KJ>xN_Jbv8-n>km!U#=HivmBp6fv_B?STJ=9aa@F|+kSW-u=74VFcO^Q>Hp}Y-^
zq9fk{sXpkfP2Liej~(@a-OIEfBEQSc-p-xP63bu+9yOOS+(Xpyh%TitAFy=u0gZBq
zId8Y^*bb8|iFd5jrV#Kp{fH<F2DD_ueE<1OKo5edNs3G9Y_4lCN@4V{`_60x>1}`T
zjnzxo6+BN1?qhs66Z`|*%5HM*S<#fhr@BN*Cf@VBGq5Y}aWT)+%RSKh$2m16JUAu%
z?}2#5n6R#3UT)&i+*QTJD?6MmJ1o}ATK(hgG+i$06{)Q6EHrqB=(+!5>DTmJPyvW4
zVfh(1jxg)N^-oN+FvUzo-ohjwa^WbXI$H})z@Wo_%VRApYePLOw0_P?Nla{fj}y_*
zI}lGCbW}m-W1Pxj#LSZ~tYr0O#WNXj!eZNcQzwjb#mG-V9bk!OEv!6w+JMN~FX!2(
z+PK82fBb#gp7Ui7&WLIdu-Li5G+J7%Mzkj;wTEH5u?#u)rk77+#fW$)n;b!oQ1Fm)
zrchH4PL<OxcK9qKi8<!qw$>Y@DLCx|=0TM?c0`xlOgYrD;+F6+f#RD50?Ut{o^9wB
z_7q3reU4Ekp$7`3(sDe`&7kZ?3$yuH-_3V>o_W<^y@n5uNZyeSQ3m>ULs74aMQY4$
z?J1#cp^i9Z04E9)<D1c;<&SEW{6XHz=j%5cPadSLJ89C|eL87cIBB!;10Ah6+vNJ*
z-P+`@U#Y9hA_`UFWjTBeM1$0gU+ln4U4sL==9yn?V|XE&ug?v6xUQwv<U(dD6ri-G
zdDLIvEdN8nMO9R(G{)-3u&Jl@Woa)q4p)FsT81C3EkZ_4*vN_sJ6{k|-XUnGIe`SN
zJwwXKjL`USkLEDT0!KT{TN{TP$;C(a{e)$O+75jfn-ce<8Pb<DuFFMKm#wp{V@w5I
zqR7X}I+TuYEow}LXw+boNG4IBxCn)v$xS(zNVqRFYVim1l|ssMPzYamZr{bKr79ye
zo(s#USL1$;zeq(S#C`^ty31w=zTux*SBY_W78oS16mT)7SOJZMC5Yh#TmmSB=f<d#
zD(n69IQxBuVRR#&W2GN-Ib*!Ha-<^3))GWc#^AsN{;&#^Ccloq9}J|}o4HJDKbh?e
ze;9Hb*_r8opJTirjY;<SQwJt?8aBVyM|2-+jNV53UhGsrf(3uoqpqYqO7oPL0#ZHz
z;pls(N`75Od)03^N{ds}g~p=DJo1np{RNdoxWIkuRozv6b_^N7dVM+OEc!xixv0BE
zgn%_v^KHV{>1M-2?;)@*6wEHMy78*3BX!5R$@D+yN~ucwjmFwuJXV7eqh>}|8JB@g
zE$#0OIH?3QXu^WFN6}b#GUl-?mFk#GQk8T1I3rA5So5;Y6S?Hcv_Dha%gy$ikDTEn
z^JX^biN49_&hd5nJb}fek8(`w49(rbwmUevT_>@dn@w}UdMaH_8r#G!M8gyTO-2K`
zJdJ#-tPVDyrJ*E#b7>mfn&_v4VZA&qVG>o?oM!D`5mGE5&Pt@CY)wxsAS5g9{_C+;
zJYZWocX?R}OQ<mYJrXoLHpi#*acub)sEh4KJyil7jRz;2se*K;f-qwoV}yXB7*Zd$
z0S?;|ag)2r@7$;M><PQE<AmGYM<(0vaVPFd033-Qx}lRcBB|`oIS$<0`0zo*rl_Dy
zN`I#PRDqTVFLuUKF%vBK0%5zTP?U?S?V5=6Xt?1=o-lRYOZ{w4{-A9Hfr);+qH-4Q
ziIKa!7WsB#;cs=wAQ`C1j}25;6ZF*-(r#&tvF}XjY^d(0hdwPu#5NC=+*I|5{A-{x
zw13c&4sbdG!_6!?<;x~}oza5J7v4dsJ(BcDq^PC>Y(=?wMG?tkTuFp4VX;h@r+f)L
zI}6c(734%av9@18j!|?@yz_8Ey-I>y(WnwtJ9s}$2wi0@x4F)#m35xD36RB@9d$5j
z2IIq<SMfuw04(YFnb`GNpGuUtwnWLkgR=IF^u*k~EPmVNc5VX}N|R2cQk6ZRnE?sT
zdXOU#W2S4aGvKt28lu*1e{yWM1i1@(K4+j;Bi=8N@1gT|@s8DLbK%|b&+759{Y^Vv
zxM0%P@znP7@Ty{$17Wi~x(8hl(oF}MqmHvlLM&8?`=g|G+$-5>A~rE*00swKxzqWX
zQ)&zoJE!QF@<|Cflt|9RkWTES8cP!%LhO_-oG4`yw3{mhZkDZ7Ma{^WggOyx$kMbf
zVjp79i}v-=c=lfcETPwZNcUmGmH8QhgXm|`LIqFzqy`}uaoka`F?H|%T*rBU(h=(y
zi`0Cvo3u*0-7kZy;>y@~3_bEhQNo47^8<In3pecTdqMs5iUjYJXAeXO|4qcpS>7<G
zm4o-#|IV0ZciLmAOPyP(?i!hPueopbjqUZD(aaNFle2ym`B6+cBPU(Fqme~|sq9@K
zjc0u3e4Tf>y{@G43|h3PokL<<Aorb*Us-c}^(YG$*5oWsXPa5%eAQS}1ThQ5#7$hx
z<8JolI=KGnkgF${TN2+@dC_$QvyQIVX;f0Et_}`~LW%L6OJs!mV@@Dd(>b?p3f<zM
zHuCl|`)(rYvS$g*K9735Vj|;BWQz+9v$ZPCsp1hJX>Gcv0RLGImDm<<SMVWaUjy0p
zgot~!d7_|`H|*(eX-qdvEt3*Y5EaHTA}SeMBh^~AZ!i((=hw{OIm1(zkTZ18aAP}w
zq(b9}b|+zM{!KY`INDpG56IjyMM-%a0y|Ec>=pNAZ*0!C=PCxSuOCysl#)UB3_<Yr
zSV@oiz(OnXYWFB*CiD-cL@o&%pQcI2&EW{a%W(`GFfk*3#c0*d?NHCqbZ~fc*rCR(
z%jH`8D90&GxL+)bfJ*b>JSIf8d;ecAltu^%oR9>M<?lmSe2>Re(sw{{HsPa&;5>e5
zE}Gk^YqjJSU87NfpR26E>ZqENvm<E4s{mC!zb(`ryeUDuVA2?T)6X*H=sksFGk9>h
zXq9JQ7Xl*5M!K$K5{x^LjP(%5Se@Hxg@QM@AwzcMd9hz05cVdk$+Flkd{472K{}f&
z2RL&Yutrs83F*7?oEbIe`aPkp0>ODY19;fch=02#WJwG0i!SxqV<?5f>YLZWeiV>c
z3Y!ARBX(&8Pb)6_=%YUDW|P0-Kf^0Q%x8V$S15wv^FhJ7IHf|WupJ#Nnt142a~?zs
z&5;6Ob4m_gO+1DyUN~NtoY?5m8j+_;^;ORFV_<H9T$glH^jCvx;8VWhvBt>imLk=g
zrgD@(XA8G?<_@mIII1i%(r1<kQS+bC54G4x0T68HXG$mO<!h{H6=$d@0qYegBE-%>
ztsP2uLq{+?oGXci*PS{<2wOOA_gP}=@&3=hEFE3B4|+)14KPQn<Y+l{qNb6@f}>5x
z6}__bNd95A#L-0y`XOJMAIy5qy_Ldeh*T4Vn14KtcR3dzXvPGiM0tF+?y&?9?wre#
z{W4Gh7F}cfKpwOpuT5Xw)&@}$N^-`?P{AgA5$a(RO}{TAXmbUzH@mR(i;KpfK4G^Q
zUvhUAelRVmLL;x5MRkX;WjgzEu6XQSxNtyn*m?PNkmjMaRteXr^UWpQ;K6~AUYmFr
z7e)7N7DHpMA@Ny`wzpm~qO*iJ=bauOY8ui0w;4k~>B*@&w8soyGZ%m-KRA;UHfpM@
zBqE5ec=V?>65-Hz&=uO+cUsDC!?Ge7eJw&EVK!?e$R&A>38}SiCqMhR%>8o=bPuUu
z!u9MTnqzh)lWgKKTRoRn=UgHRghtlVwsux$XLhX}`W|F?C*Is|cqX`(1m{Vr^g43$
zt#Iu}hxn{*Pl{J|n^}$z*=a-5wxd>p<wxhzB=W1v6j0UMzyKH~H|aCnl!1ZUY)7vx
z50gyVU@FQU@&sM^0@ngcMM%rJ<$~p|6=6wRyKc1ZNjJ~`boUWa1dhf}F$+Ip6yWd3
zh>lmSg7$a|fn|`NM~*7CO-r+SZ}OSg@G_3Q2=U7$zEPn4yd5L*KbT;a!!Pj0h$Ci#
zn-ZVvG$zT`?HFrnrFlL5`fvF7IaOudgG*;og^%X2|MZYm5=;zlhTO?7ATYX@GCN&H
z%c$bMEI8Oe6(fc%WW=M(N9n6(F{Ka`J-S+oPyk}Nfy&1sXbM|skqu5J7zW0lrV1W#
z3U}yogQ;~QOhSv?1TpUL(ZrR8>U<TR^p3iyNmDs666<cbG*v2sM!{eg13xF3Q#iL^
z&(*L94vx@LD6kogc!vj|fJB1=y#FDbykI$)bNoG&nkAJ%t;)0DJu+6b>V=7vah_}a
zGSP!La5{Lm4y4cF0XFeCl@<#k2X|mNK|O5<kzY!aM5j$xWIw)Ym1)FMAp;pFX&xm*
z2?5Rq?9Wv5Z3`8Kk%)k`V8np32_O5<o!mv$?zjd@^q&N1)o=>;h#IrMn>~+KM$Hgv
z9N59ON|{#ayA<=WowWxVuF_=ePU}3!gN8#g-8uL&st$2{epCT2C^59brh4?#+>L;o
zAWkv=G4=dA;DAXFqn6xCCQRLV=(0Bhy;=3+(17X)v*{CDLAadCFg9gI6dbIuy8W%d
zzRor8JLmFFBzxj=%WN_x1F{t&EC=kco0LI=)dNZbE*;!76kkT(Z84oe3vnJ|9Ec9P
zw8#sC0pfD?3^$iK{m=t5RT}$X-}w!5N*+537b3&%hoLjb#);rb#6}RuX6ByvjM$>j
z07HptimrF+<FFaH-qD}~f6R6&+op7l8?IYUD{R2dX@B4TJsm~Pm_34v5jgb30pMe$
zNy%6&9J<Jy<!e9{R5<!HE>$A`dCQ(%g0frw0hZ?02-(LenE!jus(TlRLa_AT+)kE6
zwiOTi<9NdXBU*2i`e%nOUohbe@Od6-u=w6ex2K#ufI+|B0H_72tXwft8f8B8FlcE3
zC4xO4uP9q+PwEatK~lfV5r>Jq#RZ|MsHv<`Vv%?4^!Q|!wPMa~Sk|R*{q_)KJouWo
zc%^Sy-FEf+C8m)kx%_9wLqsT8s*20kK=){dbRJ-|*8^sjm1${7z#s*L=p9MkgpYGe
zpCTiub1LT+XOd>8Zp1xP2wHCm@LbIN4Xo!5uWk;m+up1}BrGq0xKyr0G8PxmS8D1?
z(pUO}-ibHBD0G?AUzv$0tU}60%rOLG=*)95$mAT8I+`b(b|&Qk(J?6Q4u-dd+Quk>
z6fKj%RmDnPw0y6Z31kVIAlJHtVy3B5sQVZv7ozeFQ1OPI2QozXS#!%Jm2}@n4Jqy)
z;v3cL!8Kz%k%_x3;B+$K;b_BwfC7g~YXul$7vBEj2pc;De`}@_h_|g(DUFL;juGoC
zb`^=-@Xi_ejtsA30j8V<Jh#9@S`gmr1==6?JXS|Hs#)JFTF>{*8PU*l50>#pG3Hq`
z-ZMEosd@UV=0TFL$%_>DyX!}55NvHR<z)vqo*V!7cB~*C#yH3z6)HCSf3tTuDZVSA
zLU@U6UV+fU2b41XuZOKqc$YOUbZbR1O#}=zYnkB4*|P55WM<u^P#<kpp|elXY4`)L
z7-r$b_9s?uoMMNaH$y&q$64Lo$oHZe?03s{L;W0lD0ayYs0#syEoEVH22eZ#hHwlc
z4NF8JcqqNv#h3f4Hz=-{O^Ezx^N2zo#~dxg0viXVnCS^CxLa&M0o#D!#!iP`m~+uT
z>B*fEY--Glz?lQ1425!weXi&F@>bib_25><Z3Zd(8UR(QgC08Q9KJ4p`yPCESKtrY
zM+E~o5psB?v!7N-;U(Xv1x(G{wtp#$MtpPSNvM2>2sdq1dn=yZ3qJT0ld5T(u1!03
zl?={D&<R(~AO_tgkc8H$5F?>srd)$8>F3Zbt$x67DaPJ7Tev0sZ`|2KW`-WpiJLGW
z{C{e4Ga84Ih|r|*NBvf~KJL#(_OYDec5*#*Q)={`#C`n{3H&U(0+h5{C@7FhQV@21
z-r26GM;22h|GwMP0#5*(pUPAum||Wub|BpNX)SB2{&ZV)y?ae?0Wyq`MbqrfDnn;;
z%@6<j6G4WCLW2W*nKL?Ae?p37ADmWW3!gmLGuJGM3WC}(6c!_zc(F998&Th=M{Asl
zG)%ybdd-#_t7iNLn=_&rM?r<jo<n=I<W*4-ngT7OawJ77>ihN9P#$tmsx^}M8Ua(J
zy`)updjeg*fm?g{7C^ee8=#6K1_3$9R|e?W-cS?YsvR&7RcZVm#q1!|0Mi)AdvHXG
z1wLK9eK+-(4le%`NSbl8R;^T>8ow~l)1GhbLpCNFDsLsngWvt{>_H<qEM{|jB>&Hp
zpACD6J83_cQ}HT}f7k?>>UmzJ-Z6U1b_v@QK35h<qK%68CiC5wj|U>FrN8tHPfnl{
z@K!THd(x6`;EH)hyDxPv$tHljQky+q!O8~j3XrdkDe2=EbeE4=ge}e^6$z93G7iZW
z&mZl{K#`}HES5jrU{^UrBDG`k26{wOkpBwzc*_bPP<f6mMc^bphRBby;u?QHREkY6
zAK{LIW|}3^OuvYFJvnxn%2qsi!%d&M;c`8P(Za9E78lu`I`t+btH(Q-YyL~%x{2Ou
zK{YY9+)4QJ2hJokINJ;kvtOuL0tR!Kq3V@hUWI%CQh3%Dfwv{rDA&oIksDR*1q7KC
z-cc!nA@OIcf3+EMfek#U+~_6uFTbN0`d!}OhV%Z*`t}*rN}aOqanY(>=9z3<!A{_c
zq7e0BLQ4OZ8_B#!KAL_Ea4bRlejtL+c@F)v>u8|9dsZ{W7C(5~lm+YmC^?CdhEW`J
zwh}+CwMhyM_XsDP0SQlrBCh5FR-U7J1$kMryIg53XDn1%BS2rRH|vat*}%+~?d3pH
zQhPCIGK*!wRcz*w40KGI7vw!+`p~b|V5+z>$nWj;6G#zxc^~9k+}w&=e7}(Rc=%x#
z4VvI*Q%TG+aUer!G!Xs3!e!ea*lS_cSd@;RL4iA4N1;spH-c*8oLq-mosL4>y~rLn
z0HA0q9l7(Aj>I{og*wOzUO&s12b96w0k~M21$+9Cx>c){o!MKBa1A41sA(q~(~Lnn
zbsLq!jA^#8I3Iko`XD#o$3p;s+uus9-mH$>b&?)QKyqxW-%u6-*#M~f6H|=scBGgg
zQp<Ib*;vsg8db6C-QV09cH}hszrQ>G2*eAu&eh@OwiocTQYyEiVWeL_KlvHCLL6*N
zSOUtlgaR#_apXgpv*`Z`_2_jjg7nF^6j>qtK-iz=0dh^XYhg^bj4#K66holO_`7^s
z-<*KWk(>?F-=v(oSVBA+wjV_KdVobUJLtj_v5SGMHmAbH0lt?4lu%g+rKQcWJjP<z
zq3t^3h!g7LVtHBNtKxe8wsdXKv?PF1_q8urxmi;b`}q6c5MyrLn2jLyWid<M0~T`;
zY=LreZ9<@Z+uO(b9HG&@ogA2b&iBSw>a;#b=Erwqj_-<NUEG)iPcQK<-?8_4VoWC}
zjo!XM`DKNoYbf~mdL(L4e8&8}!p^|!<wz4TS*o@s*|E|)i)T9*zH$Kug}b8v0#G5Q
zUYUg02#2mMhL}te3$kWqBl?ALIRX1A<lOS%y?UbgIN{Rt52Ah?Tq*2+ccNZR94o5k
zw#a05%{UVN+Sfsz-r>8E7+dozpxyx@t}-a3rCpL*=t)e-Zzgq$vePOVAAZUAt|u(z
z>Ll{)g${_CbF_|Et8>QJ94k!h0x|D<n#!35gIz62z+@(fc_mf?|C%}~Gjbu6;)OXx
z3Y=)@00gG=`0fo{wDc@ocg)~BE2Q++l;Mrno2Lgr<F`*O;omD;Wh9`>n*0NJndd47
z@3^qx2o*65$o&sl<-B6M(i8ELSK1k3*FVy5VKEB-gj$^4*45!|L@p`X1LLClAmd?@
zU6$n9O_1?rLuq~~U(x8$Lo>d6A!au1+PoM+h-(wGtkH;Q_8{LzU0u8WZawv+{2Z#U
z|7n1tXkau~p|f`$+bK9WZ4}6A?>Fdghul9vzjh9o6pVPUqOfcl)`bRYEBw8DTHD&s
zBR$I|C7n}hembf4av~TyND5c`1#lufz`cWrWVyu3dqfB<L2SWCAmn`Ox?sC@7*H)@
zhi6zhVFptotR|>*g&tMvdXKYbJd2tIHB(~-{3hLt(FQEF@pT~;l$nX3<MC#J$a^%Z
z`q~^EUXT{vn5+XlM&Vh5gt6vh{J^NqrWn%TVpS6K>-Wx-OFo&;jU+KZjvq#tmHCK_
z>aai2m!mi(8RR!L(7^w|Iln2ELjbIIu$Ibi12$+40TD5Lw2KI^y<AI-&{e(TBW<IY
z-khC$8E&4Ht$RU4NeM#=k6$+*&WuuV%IGYZ559^`@ejC$sw+ypaE*A;duS>QeqqG|
z@-Gx?P||5(eALyjf>Tw@3Lfj4Er_W>$Is6cOE?mbAFAlBvY!FWYV+k5t9iU@L@fDe
zC4)|2v&mkHR^PWh>@+?1OU?l?Tk9nEXQhAdyCi=cA-ij@5M%RIn3=S?F)grG(tfR}
zn@kv<%d7OYU>h<_N~4jlXkk-JWLXq4nW<J&44)#ox<!$V`PPI=(gA2S9453|g_JV3
z5nY8x6Csg3x?YPraFz7Rf|>bZKL#Y5Pr4nKArysW)nfUBdPczKR|%v8fO!g42!rOp
zuz*e{jXwfV`iZEYCOjd?!%1YsJuDedysp)g^229Qs!)<kCia&?0kK98TtMN9Q-pAl
z!wlaavpy-bQ9P_fVsU9_kW;DcH$$Y*<Pm68F<4k0CI`-}yq?jv&&6_M1|-O`5E1;u
z>{C%v+VL7*V`arr|KmycY!YlDI!^PfWz#I)?Nkm6p(fwDuj6$z=|<lK{aEoT;Swm@
zYuFJLnf8K_M~>S{B9}m1bi<~0Hjo0~hZun~^D)UJ5($9BSDzY=q+;2F1yZf=J%ece
z3fhsC$(u#DKUVF1mG9Tl%ppKIssExM%aR3#+LMzL-600HPF(`-=ID8=#U*P>V~A^v
zO}5ZKVZM*~oaEGl=nYTBJZ>d*(nlzo1SXjqz=tX5JH>=nXyxAu)qWt~8un2%<zsVJ
z02URNJmnyS1(i_JPU2EfxSAj3+auxv4j$7E{X%DMt%v~YUn`fIEWyQ)>49PmAkT-p
zcj6j+(u98Y)Lh;LZOQYgLssd)mQYmuPC%f8UIPs570buMGO^=77kYr-wshX^AZJWg
zBnxf9y$tnXuG@!L6utshK*S<OvHe#4id=uUmjdHG2tjemrt?h68VTm`r(-%}1Bn%1
z%wT|wk{f6o9|>py24Z+%ygknpd7gfqq_$oAIe&Vb_DE;9YCvF4f>q3T@q&j>EX#`a
zLnM^!j;fS|rZDrpO6lU+$P+(78lD5iJJdpk)9s=}Fyp<+L!!Kwz-ShZVbg7O;bO9V
zPFVvH@_?k12{RA4)mbUhZqNxQf28xQN1PJp{tNF>KS-)f6AZms?X!l~Xxku;{v_)_
zLtqe{6dNeQikz(YKHokwZa8CIHZY>Uuea8+h<$?m@=ATLqCryH=N`VzFbu7;AghKn
ztSP1};Mq!efJ_*r%*A<92fKJ|-NTPFrc`ENEkumzdrX;t)M4oOncS>b^Q3cR|GKbQ
z-|_=)23L$~=+SH8qgE_t%4vPeV1H)L@CxUXpdEKK-sG6rN$-E(UEtq(tA?v6bOO;s
zAWzGSL6SuHRjwtO<dU!Xrw<nL(B;5(|GCPj0L-z_v47E%eX#N6O)|LUg?9WP#*AsN
z!{4JHiAG9WQ&KaVM5an=(qEi&NdI2OsDI~vnBOdHN#d>!+t2XINm*oWDP5BU2A7I(
zvdnCx2UkNxGdd;~M?3DHhWxX@I5guJI!#^VE<aBU$;r90_PbuNZb>M|4+<n{Iyj_2
z@~up}#Bs96(-{!~Yo?<d&g0~?$l-!a*XurH4)iutHs19rv#>aE19Tai+0b9UXP^j*
zqn3xnCIq+O?lS!}c3-Y>28eD!_EN7Ii$1z~&Xi76o0e{T1K&=zFW2qLVN+toxphA6
zPS*ZGSMkgFQxW-w$?KWZwqUpzZ+7va$P}Npw2cP-E6YWVyax<V6dhtS_?rECI(BKi
z37m)pSaOXT2KQumzHBE~sD*ca5?O~85ax{>YV)ba3)hm5xI?j1;<T6$lg|D|P<J(T
z<>425YR05fANXm>15Wly>(LbziCUz!UxZQ};;@+QodmXsFc|n;I2)M>-Mj-eX+@?%
zHzY&<+O0{n-WbHCsSxYI=&SBH#&jrD1ExhxB;G+l*z6Gm4vs8+eM0vd7&c(s%sQTy
zfNXvMybxSL7YA8TaJq%MC<M%jHT`9x{rl8d1*=H7YSLop@Y7djw!U3!!}yqZxKW-v
zGt{^PoOk`TOoHt;$h=u7tCUV5UOL`unL5nFhZh^#(HmdkbccaB_=C-i1}X_wd5heJ
z>GChLHAZ<lx>{+on19S0{(EJ|yqj!UsBvMfb%|)sX>?6*o}OFm;=zEKF6X?ho{$71
z8F|m`MQ3^a|BTklK7#kpacL?U->@Na#i@XpUx}(W$|`2xaqMK$@>!2uGICC(-8i*-
zszc3zoz{Byrc!;bCD0z({1hsEs<o^lr&D5NsHD{!a7x)Y;&2U<W8TxC7FKttPEvlD
z{>vaVt)6v;<jp1krfT^R=m~5@Xa`NAJoFk8K7D5HD0kr&seYdB)=MRZ$i~o{J;={N
zt}rs!5tXn$Pb@pyocf4YtDTf&H!ihJub6~Fz6_#S2D-~SckY1$29pJldVZL0ruAhG
zliCF{cVp2NkvFu*nFnj~xj*2}H4TS(iNX!3$nuE!0tBdCi`fV7(>W{lzr2JZrJL*=
zT}c8rE4BPr<h(~uAENDVncPSG#P5wf=O$l%L^nO3?wLw}JE%RI4~QZl|L~DS>kL_}
zR#OTatj4bsZ_*xF*@?DZ2+^wGHbZ?1xxg=+p@lXdYrYsru$5Qsf0cHJd38J%6owZt
zXvdpU`C%=g8OQoPWdtVpEtFclOVbYRd`mcU(>fvCNCU<;O7eA{qm_G9kQZ%Y8IR5n
zOOkNgIKO`%_z0&mL%)J%Ko(NYMy^{pY20}CIjA!P87tZu2mh*|NYoO*Qrj`pdbz2g
z5fqIE^eNSmE6uMeOn|naZY$Glt!inEtD#~_-pAK#tDeDidsbejZi!lSQ9LK(K6sVi
zLu2cBSTGI;`{s0AyDa4H?PJ+uo;48U4fu*j7~>(!M-1txu~40`8}C8e%yUcx|Et=^
z79bTBMDZJ)-}wZd_RG+F42YTOm6Ce>Z<A(nJMU|UW${!=01j~r9|$%iov=%o2JI|&
z{13hE(XoG`;CfYsR8_D3?RAH+2Rt0)p~_LurvN{Vz_z+v#k#_TW~_D^0e0P~?3-xV
zR-rv=@#0!!KJ@)F3;D9Ox$ggPU_6Tu)5{49)I*2+Ik!*z6Y=q}JwLKJ6$<E(5}eFP
zsvf=dTHiV*aT9TQx_O+(GKHu=e^I@~=h>&>uDl~hLK=fk70LHoI5q|0P}>gF&S=(I
z+YMu`m=$BTmtF!&Fwm=(_-W=4CpE5k8MR)Yk-a3jm!i1JJ3R21SmLGnR{q8OZW4TV
zhcTjooxV0fQg4Z>-cb?*u{>Bu&`qUWkKvT>&eRl|k$Qa(l8}(2Sf<I^9t%Pp8;V~t
z{@|AX(JiWP<5_3E$MrXsgK}t6ZD9Z&wpT0pMyExCh?*asyV$GsD?v{fKxHDxMYr9B
zofz-9s9=_mj~l|v{ELYG)1?*t^TvILrN3fQ;Uf5T1PCT7-C}+3yvr7s1?*}`dO*h!
z=+iM63kOB%(S3jeE#d#L(Cr<E5f<mkV0~y3$1{-yB*GWj$<3U)MYR}crYS@G@uFYh
zOZ4RMJxP=cp;edMVHKejRI}y@|0qPrMp%{Nn||%>;9kRbTlw<=$0OMhbBM&QP0#>e
zBTOy`M;f8IVGW}S=G-2uj`?s%uM~bpTf8%8p?Y*JF%00SOH(lyQQ8KXi5UosfSuV?
z-_&kD??>$1+uAarZ_rY)NBN*su%sOtyGzCtXqDl!FYzq7+i44k6KbVv5Q2kyDKH9&
z<RfMPD?rr0Wa`neT)lgy64W7YI?IBcdZ=;iPu$%}4aO!`3FiwK^EG@oe48?vq9{s=
zOKYIP0{HmVlaa_JS8Iyn7}_8(r~A<%JSa?{X1G6V3e_NB!!*g^Tc2pz<?AAI&Al_A
z#R&^}FUA8m_HI8g8|--gi%gxVJ~9AjA7S*+sFdS06Whlpdn!o9I(^JNa!P_2HWZq<
zCA9+scBbyUf_zOvto(zof<WqcGgEwAp(9(4M$K=+`<ib|&67-|QNd~o@x~&}>|u?b
zoWb3)-IOg$kEm(xb&zblbLwn?b+aMzAIvVyn)poeVhX3)34$@-g3~(K`%oMqu%)un
zDwzcP$_V^+-ZUjItU6zuw&}JlMl-gRSjLXx6yi^8LF=VRd~cSNRl@E@3$#_mKeK5Q
zv&Q9*z3O=|+)KZZaOomRn!f?1-AIzz&Ut#&Zj6*`rs(oF70fbnTA8ix5zlD~N)Wh6
zV$)BjI8i0Z+hET&fwi(MW+8yV1Y!P4Qe~8TD&x3x8P$%^#N$~7KtJ3Fy1H=k2&YW2
z+-nCsJ>PHV^5wwuCUkW^8VI$ke+k(caB(a=>!xVVCj+b&Du-xQvXd>K`Xq!ULD1yf
zWt``_U>0z)7VQu>#5y;j_(9(ItY1BmXA*02CxL0HNNs;_-h9#f(c@fho0%@LGDR`&
zTC`4m|I1k=;JY_<u*4*eM&`zgLyD^^to<_fvq;zw#Fz?JID+0^s)ZST{H_fa6&lWo
z^8wf;QfiHdWOlj3*Cr1U&8}+SwQq`%&d#La#&Nld7C};{z{&!?0)!NYk`v0+pZ|NR
z4+pI}ZZ|t9oUYh2D&slbBHng`gT`g`R0pHB0W59^)$>!GGb_+y14k+GsfpW)sNh(l
z%D*WB7i-MPfV58i1Xaw^W^Zf&@IItI4gp7?@K~e24g}tc?c36l$XBGKi^&sj{>VJ%
zr_>zX!NTR#Byhic|3n#Ld2yDV3;Y~!+T>Ys-X_!$><<f%wAcZMnI?)_xru}X%*W1o
zcc^fT&UW<Ygpvj!ufj{&j41OAQhDA%-!uLJ>!aFk^L5*;LmX$gqDWHQf=~NK6$ga2
zNKk7efJVMTe`N}@jYaijS9O0I6_$(W(}y$Gt+t}iN^&+4b>5G0x*%F3^dvnGhOXkF
z7q(8fiKw`Oj*A^fRl~z4#{^mtq+M1Zrw_hs`lb?7cKo5t@wkMvc9Z~U;w9Qris$sa
zyP;|2uGrIq2yK!`9<c>u%*rfxQD!Ocxw#}@NfSMWLVtFq`-|&>BtbCEC9<J#8E2b`
z>C}m+Rgoj^aN-<xpJ9-qLzNL7GWHOV&^EprbLTT~hab}t@oxC{aIv!5ascVjkxv@I
zem3C1nKjWDYPL*>WoB6qOV447itz!NM03-KZbg7`f<z4we%gvC%8Kn{LR(L!e}=ZV
zM8{As#+`^|NU^@3V$9Uj@;L(7iE0Lyc>E#Zhm6`OpOFp^qPG&4B4+Tvk{?DrAotq^
zbhg7jRUYR3gIWqFHjqrPUTa&CkCS3$eyZG`9+$!Q0{=eq=M7{t6*;JO@VwEqd6nwA
zoR=6UU@_m>0v^^|B@obwMnLKFf6(86PNbFzi6R_h@t3b`c~H3;3RbC6u;Dr*s7_?v
zz%h1iugcn2d-3;0-8f7(9Ck4F-{F;mlee9RZE`TE0)ZzS!ccFA>##@P0xpW6PrVaH
z7H=wuto+N@d!Cs7b4&cABq|bT(KIQlYIPeZ)7W6u?E=Lg0f7jA>Fq!p=rV&En}fU4
zTeRw}4}T+fIjb{N^6z*MZX#^#rA+#2VD}le&|BSETC`$J4!+M}NkyG7hCUcXB1ty%
z0KU0PN@ZZv$t}wPk~f;tc6HDN|67%PWzGth)y-5IWOR#iKW#!;yy;7FMfjY*)}=`~
zw+Xya4knaE+NC>&7_Rgh1M;6m*WKO?%go4Zm42OIM$)(`!6*Xv-50xT@>d>6Cl=qN
z5VZqCr<<G5lBHcE96+N|k(FT2Ay#!0m69P&p<_!Rb0q<~V=gBwSrn0VK(aE1b~O?<
zYfynLQsuaB$9&cT$YNsuB}2KepFw8%Uxs=fXhY$(GHIZQK_5)SHKL`UTa+BijdELt
zwpp~XV9#0P^|P4!ifp%lj|Sb<oB6R)!I|cvxUYD+$~K@tb_nQJPI85lbtj8AgwL9(
z=n<DPrzRX$CN?lon|<L+Y<7jEFmWC9QTP1vn?sw&MUV9zTimP25<hfu)N%pU3j;-X
zZQjPYfH7Tdnw&rW?N)Z=+?P%g?W3<7nTdDU27v1%2uBic@wp<n_?ad3ATVAc)7TF1
ziI_9XsDLS@SW{&TNvpQkOS_7Z=ckUpV2#&IA6o+pUiUJgex<$SXjVbQp4JjW^lH2-
zM=h`#MX!C%8-`>@Y$itGR(8I>(>ujgyEhuIHdnZfzlH;o%T+fC+UW|H5&t|bRXuH<
zeq9nj$JJRg<Fm`wqLwnJG5r1Wlml`&6YZ3|4uZps@#cy$*NuXr($eRxufcrwCja2N
zWT)2t*7U<#BE?t>3ZBz-tv8#n1dFQrUN%@^>4#R{n*m7udR_>!LAn5)-Gp)H0N>cr
zi|6LjjWb{_py2TJMBEFFX2ddC*<02@Skw4C-;tM;9mSnJkLDW`mgfE(X7n@IeVrXO
zZ5r0aBL(5knOHWSlJ!VU(O(5eEJL2HUUYOt(eaC%<2!pT$?im~6J#1k-7}2st#4Oc
z7x*2^=BtCPQ*j>I)bb-#VqYQAz;=DlT!vtR<11`0V>1j2xf!NE)+sIsnfI8!Y{62@
zMhc2k>dHFINBEODaQ*hOrxrf0?@`w?^BC!}Y^o#cDa(;ria4WmKIaAc4t<j%ULXX?
zl%vz(Ph?~_WJ!|hfZpW%oh+ZiQWjV03Gfc3@HKuy6UafxKDv4;e={}uV2Ri3UNzrh
z3~PI$KLg~3lgofniqNS1`|YYJxc#?_k`IzW{BXLDcLffWFB+qsU+GJ2v#P_NbepGq
zU<zo5OE=MIsR{b#R&M5KSs6q*KDl2Y^*fiPcvfZ!+*V`hp*5601?tmN(5ug%dm|_}
zN{XiFW)PmhD*>MG|B0>Nn(fsnrK)Gn&Ux+#*udbn3FPOeNod}o2~-hO7izAj#Sel-
zh##wq(<J9V=z*Qoc^43E?>~Wm2qQkS#cUJ`xXJUFS+AI?z>&f@PPHxAqz^=X!!xp$
zxe?`;)YIUWw=vR$Y3T%KFfniw<J9EoNa<6Z*tm%XHge=!WfkP*7Ym+JpO!p^124mx
z6b@h>Cj;1OU|%w9ciL!krRs-c1sz=J>l6py8qL+V>nS`bCq3IWjX@vV?B!6U3h-(O
zZQ{GmlGzvA{SA0)Rubv4MlM9uvwB1xjMeg_vsU-`Ru1;25m40;*J9jxg6$8P-J&n9
zJYcZ_Po0QR$d|Zov(;)K$U#bW#UL$f38fimMq|-;P>^7@ChnILc4~is$BpfN)u|b8
z{^jMSM%I?OC&Xyt{GAAv>Z5lmKWejnTWhAu83qTQ4Qe_A@%Qz1#q&&S!$w8dR09uQ
z0;<!dVh@4L<YjHR7HY~d!5BAIT8#atI>(c)7M?NkUKrWzQ6v<v48|a|AQ)V<+Y9iN
zTzc&O)$Y~l2C}sPeXW`Mmyi&Q8P}=iLCD3gq<Z|XN_lvr!hfou$_k6F6|E!dbAO0a
zUMDZG1o{YO!Lwr^*pjDSe(QGdpQ=L6BA}QgHLCcn0|`C?Krwp%xV_wi+QrsgJ?uN_
z-MVt{!{b*|D`$z|ssw5r_VyqL|I8;L%FI$iAUS}5cT#?R6a^gOQTQ`?ismz;4Dzfm
zpq<p_1N5<08`=cpAf1t(XSwsEo~xJoKo_)1#%U6)s{0M4Hq^dcvd{$#gN?w)2-o&X
z@&#TFEkkpsJx6;>sY?NbO5%L;>wRzT-bp62@n69N1&*Mgq$fP(1eDy;wP+cxYQHkJ
zdWGb>#fs6{OjrwKyL<jxE<ni?5xh<?m9k|rlntfe>twY9x&fU5Jd8p6i=e(trbU1V
zidswuls(umB@p&(F!rfgR1t4;Q>2ECZ{4sDZ@0Wfqs8Q7eT;g~fa;NK5YAA6o>DM;
zINaQ4kh&8T@JH+u%s>Z2@()4bV?(y@$h#3>XHozVgj0QAWPoJ9i&%+JsJ-bPlAbYg
zivG}>3KGNSH*uS|XSgHZamq7`>Epu)z&<O7m|(D^dL~veO&+9}fkv%=qKufJQgUjP
z;&8poiaMCq2pCNp8G2bT->r>Xk(j-);is`12S1QX_v1p2_($-;2Z+h$R`FFY$Pup{
zht?yZWKy9@VaEge0kxOtbzA`ldWc%r>huuQU(WQQ3RX%xTh>Me4vAiK#{gvZq0oD_
z=<gvhA622$Q2`~ym|W$`a>Re2!uLGf;;D;N7-+MW>(iw=-xN1|-LzTwS`X4(RSio>
z_Xq-)3Z^GAwpx1E^($)SmC|3QD6{-#@&mqWZML8JjKDl#eiW3Bl4d}B6dDlPCHDz0
z70A^Xmbe<cSg7l<YY&Yq|F*gB05{A^Pbmw{QZGm>pTcLR-+8(-{s>oM{}mMsx6YT<
z|G(AC19n;DF)Kj*o(zT(X2zX<$Jf&S9MmGJBC2AVJchC)e*p7U*grSxDG~Tgl0Dl}
zdWneWEuEVLC0K`OI+iUAgo=lWkKR((VRyn)N;~uF`Lg`--MsFrxuQ)b><%N{>$&8e
zObgzh@+?|#5YH=M;9n@nUCY?e&)d4MUn-Lj1x|)G33-gO$4|=KhD(M}@-q!)U&VNA
zCP1<EYM{I6d7=uK7fIK0%;8ASkM2*u18#C?kLQ{jw5S-s7476EyMwH(ueBsy`(~HU
zjWDERAU}z@Syn#H_DYmh7E5d-%_|Txe8i?<cHCm!9QBJI0ZKo>o!a;wyzGNE9+9mu
zgH{*j^K5<AB?5-xnEYF<;TUPsuDtMl#Fna!U7f|znNg@5ca$<_O_s0t95g>3o~w(J
zDW8s8kLPxvLtJ32;C?~~w)$SMMAfc3k9DUWoH?1<=qoaz2_+R;j+vhK??1^u<tE6G
zWB&@bH-Hyj<;&Ygeh;+>y15Qibhd2HkCl3Sv^9rr>`b)Ct?FhN-8hHQ<4VPktJB@N
ziOZSb{*`A7aTQ6J2@^XW*{ErVkw)CI(AiZ2nSN(X=LANI*DYzTae9!*y7xxAYp_!S
z!ScBo-{c1pF6Mdaracen+tN_$<RugJsZ7JpMZqil2894ZCa2c$taHGSU%~9ghSTF|
zSDHT&+Unh*R7^Ug18PLF=-|0Lm#at$JG}6kWQ*FHYbZ6t=I>MZw~nDO4SJLmg@p0X
zI2gf@#kgC8V!&kDcs{Ve7M#zxb4ps!yhYB~829EUM`VUXnI^a7Myk5by|8u<+qAl>
zdufikfX)E<sYgu#<IZ+Qcu_E5cIgPc&DOZOFmFRwVOmH=_TOiv>E~xK#<Kl0;{nlD
z`ylLTe7GYlv71g5f2OTm0yW&KG#A$tDgQ%%Wo3H-?l>=7npHxFK2E=lyA9cgI}f8J
zT=quQ4!DOHx8nly5JY*Ap)#5vtJjexAlB1UzCYTF`vdeWBOe9GoAcx(HY`aQ>k4^X
zL&2X7`Y`L@Tj~<Kx2Ho7p>p-$K=^l;G0o2$92nRI*zcFopNG}~T{mkJK=h-w;YRKh
z(fT}2vje^q5^nDym{+TvNH&(tSzkwFf7_4_XEi<4nAgK2vvvlH=o#0YnG+TUshfuV
z_A;Q%HQa)w>Y$WOhntPFt*v)Xp0p5)Pr57$8Gdjkutei1PGe=nko$qyh#!?3I~*z!
z0w_4Xz<wOWDVw6l@PQ1eG8*}t_K}1%Y<?*}s{;04`-Q12wSqx%Y#CYmbf?7mM<Poy
z6k1;3S2A*xA2?nz=&qUwm#5dH5s~000dGRz;|LMIpKDUme1l9dEnZFwz?>r&7lNG@
zYztq{8Xh+dwzHu}-%B4N?G)PP1tq{L+u{nrValg(NzC?euhvR6QA*x8L3;En<H|3q
zqAjx_o2ev~WH4pUJFb|&RoBQr?xK|c>YXU8heLCS2r6M#In5*xI$3crHyK1{^v;e<
zfHMf_d3G@(6A?NM2yl)K>v9%QSPoUdMo!JiH$tLuur1K4J)o5k;osZrRo}L6W67Xi
z=f!+6+a5yu@X9+jB<UnOPIV*2Y*Fw_NB}W##L5oYC?%E?1-{$35ve*o3ZV&-y@pRV
z!ebI{{{w9~+tg{gR2vQ3vTgblrz}IbpE^po(DCs49;IcjB!GUFaIYFhfJYe|0ew@)
zTgnuG)yMhm3*C}5``b7xXmaCjx}AKjql5_|_Ghu$aWvGfXS*|;yCE>{i!LFk5;xV#
zjKA)&1jg1{&+om4(-8F=HO1p3e3u8MKqKk0RXfRN^o;>6s4209x<KX8s#5LY*E;cK
z_5SD$b92Kr?g&ffvP}h!s9*i7*N9Ta@Pv6ckMEv=xv+yBt2DbDW+5XI%S8#SMNBqy
z_zknP8sr)WKaM_e*Lrs3^6}xb+5Ot_;K}H@Xs4dnzs|az)NT<`RVNv<v7yxa5NfMX
zopFv4l>XzEx+e)`F3CnTAzg8L#&+b%V!}3HBjdN^iD`A1=cSdj#|v@TLUg!<>zD-G
z;>pSa0Mz>YK66m5t|-s^r@l9SerCWH=e2&8Yoaz<u{uKWHC6-+&6gT9)vRe}n>a4K
z?lsDHz_wW4$dH{9!udW*g*YS-YAmGE;;p1k=6L)|rUY3c@)++prYhQxl5nP)iC8J=
zhi$YpTZCV(@0|a~Y&J^8DT10r&yT%%XSO+Z`hyg5m%FHsl3sL6gvc0c<>&E7f(El$
z{NCsOUBS(b9MRf>9?jCD6wnB|H6LyM$L3*HQ4#zZj*7@jgE@s)gt$l+WP{+VK|Q!^
z7m?0JoAm=I*txRKb5hG6Q;47{AHyx@R}&3F3MP2D(F>p)9X|Z6gM-V;P01<TgBhTv
zF9x{?I&4<A<g^yP871B%_CXL1OOCfgq=h6$Bt!i^-(x9Rv(8#K91tlgcI~N#5|7u}
zs92i99><(hy3#iQcDGrV4&fn!gun7gzHl+s8Ji%DhZiS3xfppJ*jyo8Dbja@4-4!F
zLkna3qzYFwFUFrRR}ky`I9UB^b{$<7Bo*VD6W!B<tIQ$HlFN*BV;3z=zVk^0Yu(=v
zHeF|N^I$t=5pV?J|ATqeKD)_>n829<O>_3!p0CBtJPQD8)<or-$q{-<xP!p84D=R*
zG$d8o0(A|Tr`~ucX2EzUC37{gtu?#D>#s;JJ$<G3uw;^x#x6;(SyGSA+Yy;NzAqT<
zXc*F{>>3+{jkcFk6L!><i!lFwWxs{+aT)d{rde9fs^e$Ra#>>oJ{9y6!?VG3`j$yz
zqJdH~7nq&*(SqY1)nXXntp&YoKC5L2N3=IQBtMlzXUQByEgpR}oFRR<WIp==qnK&Y
z$%EPAcIWynLkITz=XhCUeeuCDnx)7HI=C$tFOVIe>;hcGUnSo_LywDx_>hI&n^Axy
zko*!^AC6V%N!3d(Qmi-9HN2(6hF_P>iC_mrm(^j~^pcv7EAhC4lD3o?JaBS8f=P}=
za()K4_L<JuNiTjRv1%fSEQZQG{3zjD0Wz$FOCO5#V0L0+%Vkn%zyKlFe4}p{(`2Sd
zc2Lgt&61P9kzu22HlnR3?rD3&`XGKYAdsoE)X5O_X&5N507UgK1>HLtXUuw(?>@6K
zl`3kBtV#~Uat}kh{F)nwe50bR&0`(;?LpYKRNuj)hRGVi>iq<jUm64Xu{xOJMKK*G
z@2(rcs7DF6>sZ~tPQs%NWe>+}7tL3@B-m+#nSdtHxWGn-8~TJ-A$-WDrur<k{o~RS
zbB~RLf1N@Elni<YLdL#iomQh1TIuR%^=-J|u+qm}y{vcqX<}>hQaxanlSIHsPa9d`
zcKVh;jbbA>Z8ZHad<|#5s(#jf{PM~>*d9464_lsA((!Dx){|g#gV$P|6c^u`eB9`J
z!Ng%J->8$dICUkSLp)FyXTC&8S6^sPgO5O-BGXuh^c>-_nDKwxT0kB(<W{zSjXPq_
zfa!`(`pJ%T{f5$twws<In{4-c#FszJ8nzXk?oIl6(PGF(W-gh!+xdZQG1W9k%-(X<
z-hI<)fc!(~q%O|ParZ8XMV6+!=i%$f7G5cyMcxP8YSOum=&f<8eDa_yloWJaz?0TO
zg106(T<tTfW2UyP5+mdTk>qP|InQEn6W2LpEB)RlrwAf$e{sb>CkHV}b%^lGZSt5j
ze#9NkC3z1x$&bO5?ldY6B@E&v4~f5xBotg+r{@!Hb4Dg@j~0cSUn&(K1_S~ycl+Pt
z^ep+BOn^lv1$w`$Nez27#Pfc5zLeBL%laU}p=Uzj=^fY`GjB_LR@CNjGB=W#Xh*Il
zW{;t?qLF7WrV1OLi}F7cac5~!bX~#V6c}rxb@Vf+`nKxfMt@>SA7q&AW9Z%3v42>w
z^=TiL6voU0n_jzXCT!BpS$-{(lteqSy%@ZzZ>lqnY{U%Q-C<v&#wFxQK(prGu7FNY
z^idw_B-pM{a%jd6BB0<|lUtTI$h(nTe-EsqY4km*uDapu5hw^=*103NjX|9`d=h&t
z59+bIyCI~Wr<6^FQJe_2tM-6AMyvcokD=r^81R>TijRct!arz)chxS^(0Z^a9N_Yi
zIG)HtGfN1w<Flxn9<xmNUoY*lAg(lgi}d*T6bH^ygFB{?_fp>Oa5<Yi@rKh|Ii|5s
zXWR;;Wa&Xf|EAG+QhTh#lG@58!x88RFy3#5M}(?Ci|^{x+>bRB)3jUz%3t%}?LrsE
zG8#ekJuYbf#|R!LiT@XiRFvP1(U%)F+P8()@3&V6D$qvoqCoVZ*pdzki;Edrq{_c~
zHVikgN|(+%a%1Xb%u#Hf@OEiHU@!IayA#T3zL6GaOg`>~Nupj17T)M>KO(&WEJBJu
ze1OxV^STfkbktG0Hx)Yj>1vrn-ju~pDIugH^{MrYdFn^Q_TG>?<gvKa1*UgUL;cj7
zuDm#<ng}%fc7Z9z=J#f1vfGC9r{jXP(v;$tymwb*%pU%N77zGM^cQdoM*n%sO@MqD
z4q1AiG{*@;;t#p>j#!Ro^<zf9c$qdIVqa;g^U1xZSh!FVHJ-_u&)TghAmgOH4<&ZO
zlQuEV<=E@&>>yY&nVaL5{Wa>)wEgMh08wDB7d46Wqb;pq6c$)8FG6{Nhrdv|;{^Pc
zH757s&GLp?|Fskl4sNlZMmkrg7#iw!yggG_Xy%8-jg4}0YHrKWbXQkSMJJ3|<aVT1
zo%Z?_--f<}KjRf{w+b1Y^as!bKvB>R{^0mv;IpgzaHZvmYd>JH>`%N#thGr~u#r$v
zwn99la0U!@e;}ef>7f!K$=QYUl*V)#fs4{;HbAh+M@qxhF;o0cSSAFb`l79%9QI40
zuB%$VT46QU(_vJ_d-5TLH*Bg-tp6NW<FzxFd=5E`nD=w5n`RB2Kc>RW2y9FQ<y?^j
z=k#aqroONO5y@E;kuHMINFg&wCoaRSzKXgOr!XXI*e~B9XX3orRKmJQ`B}Hvu0Yvm
zVC{?_dmB$PZuIG~yVu$K37p-vNS?;EDN5j@LBW@cIJ`*5n3sbU+ra})2oge}P%>gt
zw1uW$tCw%$2$^PXk&RT*QqlP`3+SH2Jgy~k?2u)0ZNTeUT%HA-M|VB<8tzSNNP;%9
z&tQL%q3u-?LC)}fS2vVw^bAK;;Nx(M>!*}bb?K>?3C0D*(dxZ$Yds6#ZrQGB(ufL$
zU1o+HwxlcA=3p3O5TEy|&4dj%M;KLq#@Hg2+LQ~?VaQsPTDAO20*W5JGEkp29F@`j
zAyVX{|8C-@1(lWI-X#pu`ChMjm1P<LLoG(65jL_OO_4H?D3vB*#F(>m2Z@uJhhP}K
zsmz|!`<)K~F<T{Se=5;SKps=5ylM-hbr@F0f=uzq{Nl`K02al*-Kk!U2(xTM6w5&f
zGouqGr3E}}nNGEfk2oq;D<-u2f_iZi`N!Uxm4T)3V|ZZU9SFEhc;&u4_#FegBIze;
zQ*2!kC6~M+Zd&8K(?|A@V05mWo+^O5Afv&wpk4njz$)XxL*CS?G$$SO4Vxj#;Z6Uw
zst2JDiPttV<$|10>~oO?ZC<AMG5Tb(p5toObyh=iT}2DUkROvM>7o-_u82bSgEoNN
zR@9S-@u{cgDf~uXA~IBwaXx2nd)Usd4%g)Q>>tt|R8uHql0@P-q6xM)=?l34m|Ni=
zw(i^gvNQa<f7jCyWSSlHYnJr?Oa3<J2H#)IdmNRr7Bn4s(+auIpzpRmMOoG#id5zH
zh{MpN{69;I(Se}U`Qw1R4=!GD0pQaNXKJ||9!%};vKy)6AOk)x<#=>jnbh@qf<zBw
zW+Ia^q{n18^S1=yb8nA?z>q=G-ed0Op(D)ch=}MaclG`7a#7MZU9yr2ZE8K!8}emv
z*f;9fAUwv#$*k0Sg6#ttIHK<p`nN-0moR$ShP8zx;B5gU0z{bISn@eQ-}xWzG6auo
z@nh`ig?t7PJhxbAFz=Rl`X0&en3tR`eL&d+k<i82+ZT1yBQNRpx}IKo8vjO%A<9<`
z#y3{%>GRGfSm~7%$#|-#Vqk^qRL6pE+PRbG4&_?msLdWXwps?B(j=LZjVLd4npS(Z
zsZW#3d7AW+Uui<j2ftiPKsQd5AlNxwJKs1Db{juh=~u4Ab`*a{|4%S%2A*}Geyf=g
z$H%>Mgoi^M6}Y39Mw)yrN1kW}Mx<yGWnpRxuAnTOgwxkHiMw}Q>536JuT56ORDGJh
z;!~9Gx0NK#(U;np*&=*JLqg;iWzXPJw!=?L($PwWuvzq}<fa3Y%_HvPdoei{?Q=wq
z9#HW{is-KdxUO^oTZ8aVge5R*W@Kr30lE-U?;m_JEI;oTzOsR#c+O~W4_sM41<OSG
zt>QRHg-;je1+b1C>EB6Y7a*#9A75Di0$Rq`;wt`z`_<!>ppLXz#(zUSzDEoVn$*fi
zQw*x`F=o;OXv`*A>L6^l*9Uzvv;5P$Iag|oHSAK2PBkmk5)Re-kmD*(b*a5!h!mj-
ziMXZzDPV`=re))NExpEqmcif>(&HZH;*i4iwm{`R(<kV4yR{K{AJxCgr5MZ<%xbxd
z9R1~6__3;1XdCjMolnf9JL`qfpECD#@Kk{!OYpjTx#hyslr+Y4yXk)sC8Q;Y9ngRL
z!a#1Tx-2vuQ$X-fqKH8ip4fq9z{hnZQ_LMO>@u-^-@4j6`^3{pj&gs!fhTXxC?9n0
z#2m8wTX%rzU$}31Aj?9l;uoJ)Io;t@^-_O@Qp3*q=DFKvDu>itkJmxm`d_`Ei?Xi2
z!<$Uwpm;z2sZ_{_1U##gS_9Ip5e@FHMCslax72|AuXY%DG{VL<DTvC+zNHrgbsyPz
zoJQC<ljN2+{Iy%$G{AZuqvE^wC3SP19~in{^rMJ&Qd%*0pqeIgnf!1Uqb(QdGV?(J
z1KXf4TPv2KQGdA|R&Tp<x!kU#a1-pV9?CZPC%x1FZdcEA#pbKucJ)JL;bt8QJGc6d
z89e0WC{R-kId_R_H|QUEKIoXKQKNmRkmlOY!e#4t6YFSHg^UszR{RP62ixW1TqfSP
zK|Gqn#7jBZ+$7@#k363Ew}~Ee<%D10k{Q86Bmx!?5NsC6eGZqxDlhzv)hTCPA<}%j
zhhF%y@qTW?13=l(gV3Wy_Td^s@y~OS2|?A6W6+~m%>HbNz$^@||B!-6ih8krH@$Uu
zP?1xy!Xjsy3hdc<B^rRL<A`2^cgBb9bEo<}^%b5;*>@GM=cexoWn}B{3)UX?1kr5e
ziq?TUtUSzjkP3MF;@YQQQ`h3rbVh)c1PTJ|xSmn5V~c2<46OpIxcMKEpFI<Rapw1R
z9^Je9^9I4oMnFLD*XJz!s&Wl;ez7_rL5QT&cN{eqB=e}E@4@B;;f`G#@CU=@g_iWt
z0XS{Wl*4ZcMPzGtB4B_zR9HmR+cjusn+E<1A%V*yJuuaffB>fLWIZEHRGo{UF5apT
z$x*mrHpgzZ%B}YGlT)*hMl8JIAo`f#-_YGYTiN-jLgZnxB=(0s+(+_ofF-Eg>4v`F
z76PSR^X0!RB=xidCtLmRX>u@}MJ6WO0+R9`IXfUOIk_2b;N2#sWR|&_nm7^J@o=uo
zr*05a*hTXj)u76+u3t?p6?K@w`E>F+zsAWQ#l4^4B5EDY=bi$OnC~~2Svq_L?y%{=
zA!e4CyJc^MC6B5$M8!wOPjosE=P%hJw?pct`2a5>`Ml3zzp)HEnHrNQrJekiqX<_b
z7swy(IHgEX9GtY6hsTk`Y91)4-a3Lb{5f3l@0pl6YYL^v+g(q;?fnUQG~>OS-!%MR
z&1(v8!dhdS&zP?HI03?r&+uYh^brS-VYS2{`IVbGv?t1neRd>hawf(5IAb=breU*D
z`HbG<K2ODw(OwOb+~QGY_^JUyvW85*@^7pIk&MI{DUXsV6^D+{3O@NLaM}~XQfWAE
zW|EA}oPUpq^U2OYa{KuINZeTeHJO#(j#d!-eW2r6YqkTPg!=Cq+BSH<?X>*asF#1h
z0iXj)Vm_uai*_dRSo$&k9pR+UIi6T}YxLSJ5!u+E3qAUZ=0`>x_Evc0NkEeqbtE)2
z&TX_$s(9tpkp|K;8KaRk(J3ff0JEH9r09Dgl~MRV9Ld}K*&QO@mU&}2ZZQhn_keJ^
zh6`g(-&W{up6S|nyXlIX5>$)cea5z!%Hkh?jQ|NSpPA(22ZJ27g-u5s_>q+Mt3f5E
z{RF<PhxB`WoC-Z%sC?hsL`4{&)h_QCJ|Y7f_Xdo6!L_oy-Y6i!bHscgxziI14k(6~
z+#|0V<nUi1v12;FF}b{DP4zxzm|cI#xRZbRQ}{7-I3gzXqXk@u27L=`FjYp#dY^e0
z?U58ME4}paqm48KfI-Y8Vzx;&{iUz3k+=ACqxwly_{!O;>cByysJs}BGxH~6eKP!3
zW*YkdL7gqeZn!E<s*7Td*R%el`v3Cq3y{td^C8$jF94t2Q@GdWVTur6g9qO`3V~k&
z(f6sQiPJY`@-$!~g5liXD%zsj`ym>H?f%stEx*m@2WBUH<#N9cJV(!QQAQvcZsFcy
z+~_*XJ!{d<P4A+2k5?5M#=el{TCArKx^;;|ZXMieTcFi7XReO;GTV#n>D09HjjY*<
ztzQbK2wF|2XByggDY_=%Tp*|gdWFF6GY3S))uAFL8hT!f**ILr7-Ia$7NJ8)v9c65
zJwkjpXtYiMt_bvN9POkfGKGRs^hGGNODQsz=_C4z0NBv1-z{@xvkD1{BD%%YSkutt
zS<+TRJQo<OqN-LcV(=@73y6Dx2m?yOH4U!1-O_s00VJQ`^ofbe5$LX&Wa@R7>v)hQ
zJ&iT5F3r}i56NY?I>SsSsQC=*%csnW6`+O4gGW_N4^izE3NU`}YO3u=Ib4`ZlK<PC
z#^+_|5G$I^!-jC$g40CciNSxa)+BlKX%^?Ue<gl`I08>c-;0+~ei4=fbyCe%ddURR
z8Bj^xU5zdfQ{Ta09ZZFAgje*8-&rshML%uYzmNGh|LT>|BL8QSXjq^_<X&_)`^?Cd
zmUICoXPx0y%N;Pxd5Qys1DMrcaAI`{^0G<UkBF%lc>~7dND`Xz#J?qhiIT$<VT-3K
ze^=F{=F+XEyw}xhMd{?#(Wr<L_V$qhYCQc%OM@4ovxFxTIr0NnvqwmJF8K~zeL?{t
zzX^YJ3G-w`^Z({Q2JH7j27Fq{t-D2)^oVizY}WN8NCs!fjZ|z6l3LNwM>hH3Ir1&!
z(a%Cm*wWmNFILN1&HYM-k|xu-Z{PQdFn4T}y#43<0G3IO=?KukUl@C{S&S0-X*LW&
zIX!-v=$5|CjP9rJ+$T#lhc%8BacXShbJ@h4dJHO*dWVKt&flX%^-hzKuD%p<H|0Le
zGdH!v7>xTue(+_NA1x03q>^u%XC-gi$75gBB_2ze*c%^wK!gT}^(VE{5a=Bkh>{q>
zUAykPqdcdQ#UY8bY-HZB_n&vZh#H<^*mku9P4B<!p7h;=o<iuXa0hDSU8JpDmavDn
zD%Yf=MCEnF(TSAypgHtqo}-0~81t2v07@m`bO9&}Vy-;}9xJR_raO$c+afuw$Qi5Z
zK}<;1MzzQQQ>(cCL9JP0xQjddDimwHlCum=08y8p$&I3uk94v?FvJ_>754{A?(Vm$
z^Cz^-ymJv~1O5|7w%VuB28$?nzP>aizXaD0>{#^KQsc2&td?oGH=ETtPh_*$P1Y%^
zkO%rd3Y=#o+!1@i1s_t*&!#+^F_S&?@*7v*Z&tLqR_0_Q^%&ys#7y2jX7Bk<S;jr@
z4_h#6c9P0_kXJz?2uAWy`N?;C`eJMxvUJR@R>(`ay-HLktzOFU0a(yyom^7BrWuks
zm|K@T6?aTFe#u46XCY6_cWsVt$Y}=pbN$cYx7#TFADD4(|9-wl$e7ma?Yk)GT2+8+
zP-H&lS}>0WmDn?DC|!#GlU(630>5dAKuILG|5CV9F}wh+=QNct0|b>Aw`%Awz68&>
zc+Nb0V&#7)$b0_>XJOm9(FS}5xcrW27puO7t&J5RCqa#`^435f`Ul0DROg$Ik4)*I
z8l?{^XDs9UUJb0%=y%JnS%D@RV8AKc>@W*!1Ez*Lr;=z~HTmB!)XQ~@?is$DbaNe5
z_^FuxQW5sNW;2LUv0Y(lD8rk;k0eo1BF-+vq>UR#%8OZm)bZLT7ig4WN;4HsU&MsS
z?{xw>Z<r>d+I9Y!7;47U90H*+wohot01tfV%4>wI4&I(rKPjLk*BMQ0#+MByN`DHC
z{aBOQs#PuM<MW&dp!78jF4EX?XIyRVI^WEeH&gv3)3KL653OZBj2ev&!+QTPL@;dq
zeH76=NltCKf0P>ZHYVW-C7+I^mZL~qPeaeJIIekD^MZ4y-m-csm%Kr8U}VyJTc6c#
zR+Wk8%zyvel;V4V^ryNRUHcN8y!LNiN~BKU-h>LYgQCLEufPVtTA&kUx87V3Unj0;
zo)m#4YH3uNq0)*7L8cy=SqQdZf&h_qClj=qP(9W0LiTO-Y~p!~Du1?v!_8ehd&1V3
zngNJNaSKh{&X3phi!Jw!_ijzQxxuLWKZ5fsUTq4iN_@#>|LDel9crbe`FqOD<<{$|
zsA!Q);Af>2n?R{%Bd4sgjYtcefKNpu7%ld1Oqm84ny}CTNDRszVR4ap!YU5bI_IBs
z+~_OEWI6b)MA#nuv82@Y_SljSvFc@*h7lErl^FHu-r|Hqgk&r0!-UIR;*5*iRYgx}
zkq1Mcrk_GskF9Dz62SjNdxXf%fe>jhb2rDsc3ir4BPS~mGz5PgH;ZF`3`ifdVJlEA
z-x7cT;GyTv=O0OsIt_*Qe=4-Fa3G^q>xKmF0hI7s0i;$6Iq<7+D`@cT5=u4AjO2(R
z44Aj@08^mpo#WSpO0_qHi}B*sWOB{bmozb6=HnuO^*P{|;-!W92LrqjH_-G_88ZHc
zASHz}VTV&j0%9C06x_queoKRp6^vB^h#r=`gi|UIi|iq@A6sIY^fdQZAOL6hfTF>r
z*t5PJatg_+<M9V2BPN28N^>~eHa9?>_|XpY)@l7ZUlAgOYyNKl%w8jQbm6@L5R!Xu
z-)IxU$iagp=h)ZOHCfdn>Zt?wal6e|F2Hq(wQK6pfQ}Q$9V)OB@2xMI&jeL>@inj)
zwOWtv+bUl1et8ph9A#uUiZ(!H>dav$D4r>(?5FQxmthR0pQETJS&QknbM;EuH7yYx
z)%$>5*KDYLlG&M)164y8R(p4vEoP9v_$SdVt#3dXjTip+f<B+x-?m0%N5cdXT~wK<
zs$O5RSzI`u1##L||9wJQMN9dvq+Xz8jo_bK5eK|9Q##E7sM4uEY_tt;#VI0;7?+Uq
z!XppXPT0BqiyJT<0=E%vHUzUN@U5o6N)6Dg2yiwZgPSsX2M1f1Ed>_o)73j@<ZA@@
zK^2hgBg}Xbw9TR54maBSo9Vcz@zYf~=LQO@th)(ixA8ojXqY<BoDuWM0Qw??Z52#2
zNOSBHC4hZ)?Pc|O^^)e!Ev>_$_&&w5!fn{_D#}Q{vP1lSzm7=v!s0*2&n=OoR0Y|q
z5rFo!pA18Sugj@%xq7$zP5FCWu5-+>6BlSl4YL(^yehSf&R^3)muZ#1di=W6LI^B&
z6#)zoq71sQN_rYvu&wALm)xl`b0lUUEx<tx3VH%YYojgJ3*&X&5=vxV{`|XsCH>>}
z8ZEKh3z~vs;4<GLb>%_j1{;XquVUuXEOh~Exk$iQ310ew^8v6Hr>SX}GKzZvxywYQ
z*os?Im(s%85Q{Yt)3?e@P%ArQ>8)a7#+mRprWn`JE$TUy9Bhme4wr~3#fJI>X_HWJ
zpn6NiZANxIWv_OZ@G0NXG=!J=iDRdkk@t98$fTGIMXzECv`+aVARPqK>SB!6Tng3F
zRY_xz31=MlryEENM~^B|D}tqwYaTHoarQ5edzkPc8?*Cbf76WxV#{`ctOky9TkXSh
za0GCAXQ~GQmj!z7hT5PTNGY-N+23<7uLxy+&+q#pj>xcwxineB8k$K!dX6;e4qPtX
z^nLh)9H@VAolG7V#R4thVH);u7|%iKn+s5F^HVLcq*xNfF28Wg3Yeg}uYawDpve=W
z$WVl&>07?;)fI`jmQx)A9zXu-LIDs#pmGLB@+*auLFoj$dMB^$lf5P{pbN~))Oo{b
zxZufOgBU*KqG~l=kyp76T_f-h0mvQsIQ?V~oG*7<5G2MR0nd4NA7P*ammrDlT9;Fp
zf$_Wp?F@VP=geR+(ZFXc>tOC#$mORYztd+VCs$tV#{?mDC|TbGl<lwQKLQr@)?uKZ
zQT=oHwX<A<!0o@#SFd8oiJp<i-rYO(hulyykH(<ue&B!G6%OzMCqXu;&q9@I8&dT6
z4%T~~X+eE6U&r7gUmm-cc*z#|3d~r2n$e`dd-$7?rhaqYsFX2heAG00t-kO04OwYC
z@hI2V#AYI&B2WUUKuq=VHnfa1qXANr12S2_`m^L%2f~sJE4VkGt}ij~bC2Dl8y}*d
z6RjKic<ZJ+oe4o4PmYo%04_-zY2OZSt;Xz8@&K;4J%R9Zv+MBZYN>4eE}C~TApd!W
zZPt?)xIU73MC2CSAZmHrPI1dz8ml>~YviZYg_E?gvs)5#*fV5>DZ27HGE(|&0&71V
zp$@~xzHE&cCXikW5G*K)+>WF(2=tB42NP-%N;(oi45DJYY-JogDQOy@!(}<6Y%gc%
zCtQTA`%7h5YQzHjru|)$97Ee$?*SGFtK%T&KW4Qk`%$i3EV#Ikb2I=Ddbp%Kk>ogg
z3zBk`5!6pH7l?Z89j=tfzsOBhtZwEsj15e;t#Q(J5AVTWCuWB(QoP0Qgj(*9F=a`6
zv`am>sMVxr%x}V{Uu|pg#)pBGa#cuwwZw_V3|x_CCnqGCeWIlNi7ao!c2-O-<n7m+
zXzY?$Xvskm+%)cg1AA7bzExaFkC#9C(`w8Jv}KuOO=leOXD@-gm~#n9a7)=x_Ym6<
zb&`k<N-Sv-Is?V)Q_8O_L6N5nemSUQVl>tYvsG^#E<~;nsv`U$6T9wYJyZJ>w&(fE
z1KFQldm3(j5I<z0#&;pkPNnANKuC!FB$AT^v<ccrR#;X2UrNTTuUZ7U3KmDRY98zv
z;%yV-yLZ0?66M8!rRY1(3*?ogW?CpzX3SaGA+91KQO_f12SdSgB>*F*e)G~^ok@d%
zjBzIisgPsyvbdt&VqmKYFHBh>FHf-fGRyv-Vn+Xwhz!y_Bp3fr?@weDB$H&X5cE;T
zi(r406y7mqQ@7Ayl~{+cF(}hQDWX9&A6@7ef)1jmHjH&E1k1sM7L_miRuzx@-zZP^
z#@ymv5c3)x(+wNI{+K4iQwW3@Zx6;YOxtiYo9k<L{RFoG@Jf#s&}Bzncec3<vqLeI
z>g-RXBK;KwVb_b**iFD(q7f`6Sx*QNYOng-H}TR)Ky?YJjgtPq@Z~VGYYmL<o+yl4
z=b~Ial)a~8Y+w5=wwTr?a90nkr>HNgPEv3sze$5P{EIp8ijHy!;dN(l$ncqikX;%_
zr7w2?yYnF+ufu|eJ5Ml%i%NR*G^mBT;pel5q#028-f1kSi$91)QWhDem_}mCuWA0G
zCjPVG1)fin>s^7IiRYmV9SP1&CVeX$P6%-#9$BIeALEwTY}GTE%2btufh$=I!H!tU
zySZAyjf`b!q`dTMkA<2}HMxwzR9xPgn&4Yg_|(@!7s>e%8p)U?M)I4-J`|{EG4pbd
zDsxvEI_)8qa~Gu{GVTYs{?CCu1W(!Rmd1q=#xp*$XQhO-l0MmANsjG7$bOajwspz$
zeRaWT;>`6K18;ptlVV0uMvSdPw-V9|seHPUxK%wbu83|oKNzE~Pi*9kXHBCvM=f}=
zdKl?*=xsFQYM+q_uimVjb-)0CQk6<X@JP;{Y(Zz9f)Kofj)Y6vJKD}Q`+T^J0jGCe
z+E|?&FDA@1*=;F2CAV^CL7B^Xn^rlkHxR>{-rwMq8K+R!573+A+nv1i`7vXKwN%-9
z?YCKI%Y8pf(B8Cl2~4Naha4w&Yh`(pY+c|G2t^w}9v<L7LCFY@Cf&&}8O{8&@59(t
zzsDK;sHk|_LVxzvhq_H}?+UP4cOP}j6UK9$Q*V1gPTj>9dtLK*4NAonx6fj}R0%ec
zyLPdHbdR;yzNFr=&p=7q`_e|mP0$xDnF3&r5s}EWb+;_nPq#=)9R+fzb6y3ejN}G7
zJBy^ix3S#=<{C$D!*d6Rs3hH0wNtb#DY@)?dTsR0SnCmE%-mS0Zz?K+YW%{|in_xR
zgRWPvY;P;vm&B*|T;ot@Bx|+?nhbGixl;&0P4FhlB~BI0bcI77VF(Rx37O%S3+IdK
zD;$TiS3RU_)=Suh05(DSXJg~utzF1oGygJ2_p-s`t^{2_SV&1NK|DOt7t+j;LA9wQ
z!L2-kP#U9PFVDd}Z!NP{<&S-8%K}4Lut%@UgdaszJuX|K%b7c?EmBQy+HrmcY!f-=
z%w)?{X|mZN&%sbB?;oUQgf@ybeB+`=m$2r}DAl6cH?NZ#_X<sBS1An}<ixQU8uGsL
zj?<6d$=|w8oZi63RpB_rIuPBQx;s*h-7yZaOj#NZ?YT002(W&L3O81Y^2?x2_g&>&
z#=v^sUal^|YbU_`e0)~+3iwb2^n?6tk)i^E&J+I#SWEhHw5Y)<8P<k8UuL9mQh{+V
zzXYuc`=5)Pov?)u*6Ob9AS_tAFTX9`FnC5B_VjPR^O$j%1o%T1R52nl$08Rn!mdOq
z!yJcJzV`OOV=jX6H#-5(9{c@(VS#FDQn*A`u5}{5nNw}Q*yK@?k&tX1eHjye8@mAa
zAFwlR$%}uR0a=9%v(Us4w1C5LQftuF%dLao>6P>}YX_C?`U8dY<KOT_)a#TwmcifS
zrDDM87MW3K2Wi8Dc)GdT%niAgup>ai83u6cgsTD<EJv$xt)o+7>B&>_jQSQ0VnnbZ
zly3A?u1zP*MvUc&^UfRQ_T*0Qw)u#SbYzOadmz0QG3QR2`wS4q_cKpg<ZD*#8tawH
zFC_p74kzg+{3nnV6&G(cUYIQqx_2Oq?z6WhRo%7JvM@OQetT>TKeMbhJNgxIUm$lY
zJJy>)hGA*}Gq@Rv84L-dWx=K<?9i7aE6;C>j6y!{Cy%kk675xJw$1NGmCe5U;3~}(
z*fA-_K-V_on`D-F9hMI&!Z+H(kOx(c50P$)$`h}E6g@_zSu<nlmsUSj3|wK-UJN7K
z&B#*TKcetvOP!9$aBBiYT`m)=9@<mhOUuGNX@pRg8<*c#VQn`pQI`KHs`{uR<PhNO
zpjOLG%VtcH;cyacQZ5BE^!V>1I6|Ig)tm>vCQ1qzb+kMq9O3P`iww)DNN%%r`%??6
zjEgrb<z@uIs*$`V@8jr&oy8lpz-0qn%Hy5))CF~8FmCtLK@yL!fw;Gi^sJ&oLSn5r
zpUwjo4khn(=fY?!PO_m!=q>Pf6m@dM=@F9xZ_=O|9}iwkZ8I3<CTLUNz_4}7=#B3>
zIcH?JN8S4q*;rP=&+A{uHro6D>w=`_f<#~*tlGtVvJP2FuJ+dWN*!cPy1lQ~<mGJU
znE){5C8J<?_OyqL781<?PqR$zyq0Z%Fv&o06UEZlY|0x@DxqKLyXVbsIbS>7mY0#r
z{|{ewEo2Co5?6tDEEYz2;b|KI8GH7y5dCF$tR^N_Q$v*wj+Q7(gn;fJgcvm6@u374
zI@0RX0z-kYYKWOFC<q{qn~R~k&9wRZdP~(&FbGM$USxl!zjb)rIQ-`m)omgh!oR8A
z<y2cP-X&zRoC@TvL{A37TVs)#1`I(EV$gYF`GgP`6w&yXMp9E6P);oF^YJ3N4fb-5
z+fjx}qx+yo7VW=)K3L=sS8o1KW>ldVFfz-Tnfso-XQn2mRT6@KA#<mqAW>fx2#s?|
zr0uu%!-PI^YZB&2rTuYWrT{UQy6^_e@ovZDGgu-bMvaX7iXfT0j(Ic`U6_UI_AAiY
zl2@w$rV}om4?VM1UU$oMc%<H<2XzMAGPx$f08$5iPDgV$IKU=G_><3f(wUR3A62)Q
z>17B}x*LhV{n-fF<P~%)uMcKQ0R2*o-;hmsUPP~+?Pok0v&0)VzQsP^b(V7gD<W4(
zOiOl}H>KR4$Ug7A+yBnn*1PdEuT&j7s~w+q0e_0}aMD)Z8eP@#g?MZgMAOn-@|CAe
z3JtE8O<#<R<;ru{jA=LWM?J}6#%+rq2VnCv)l_eOi85Lp?#-11JQbhckkxret=Y0(
zV@M(-aY}xky%Hz0a$QKShVz}Fps=jYpsE+~eF0^<3a>I>*oIxpkJUk1W;c0RR|Q*P
zEVcHSxQDSy#x|}tfZFbZY2<SFJO=ge_6)>9;<nEaixeg+?YUw*PvSrLb7sraW7hIm
z@xNrMn`O^}7b|D@$MKT)Q2_GdYKn`6Jly0{Hy^OBoV62VN}Wwu!v7JPCzQ0`9D})F
zS*%^?4xb`L+1(}^r(IXQzp0OZk4&H{+sc-JqZo09j@E)Yt<lleFGT)4;}0V4X0eM#
z?HsE!+FDLq|HsdVLdb{i)E#0rU&ppN>88-^|5n_nzu_W6IPkk5ek%r!Ov*&rP#47z
z_cZ1#c*p?<t}+;gH`&5|*L~WOBQ$)I_NX-jiSDU1g%N0lcoxcq3Shn;1B&W;yf!yZ
zoBoW9Y_|Q!lZ=dh9MP3;#O-r4Hb?%QZOly|A(@}?g<W_5HO#v~89F1m-WD-YAE8is
zCI(js=TxkC^I^BUC_`Bbptc*Zv)55^gs0Yd6Dd@|PaW>AHh<7R{x<alM{2)EhM-f<
zZB1ab%HD7Rdya){)KxGl8VIAiA3^Ji1w84>b?1(1^VCQC=Fp#M-+CZU7xVC$+p^4s
z^%u${ZPCx`7{(R~33hb>Gf0m1r70XIKDfxOc5?jHOv>0f(tNl%6zs|U|1OH7+5o`?
zVAShc($(D+NiOogt0hEmm=^tzr@@TZmf$Z+qxr_7H0c&%qrneT^EdPeg58}sI?U$S
zL~R=YJwU?0lWhgIsZFX@vl+mCY~MNq2qpZY<!&3(84=0Rbythi-^5GJ7I8&tfxLkY
zO2Jf>rQ0-*wtz)`E?%+;#Zryitg<Fq2IHP9*E0+*Nit14H%I)dNT5nLlLBEA6)pp3
ziDvO!SF)hd+7q*^`d_cZ)TM!tnYgnC8Yw}w+&CiGbqkkD!R=v>rLqMQZ!)g4TKfd=
z2PsHiv}pOjT?JfhFOwgh^L<d{hc16#w1z_euty&;rhpAf6i6M6$5Xh5T?)N>k@1Dn
zz_Fj&Hl<wdLh&61&-P89SfP5SRvRxvnTr__1$(~aqDwiX#(NBiI-@6Y*54=q^F&xn
zhWL-%qAn$D)KH@p*?cz+VjQRW{V3W(F#qp08s$UX<<<)m>{A?HrnX@qfK9W~v8T0g
z-#pK46dXHnLOa0qaD>sCc74vnv@<c4glweXcjS-#@AINwC0XyH%U}-4pJ|8*uZis+
z*bsno5AY4OzYY}>7ux&4gf?M6cCT(WIxHZC{;v(g+&a$80d4UK^fY4Kbs|T`(#5Tn
zNZ0ifMl(%BZw%<w&%!gNgJ^eFr-fU6aZ~8!@Ui_m`a^}3b+>OTHsOrh38@{<p>|iw
zR^(!@UikMh%8vq&D#6S+qiEc-Y4zn7Fmje3GU@~Po9#?p8>+Gke>pTz9*eQb+aj4w
z?F~h)^Z8SV(3Wf+f1$HRywS-Z<9WtxEl&9LBJl_8Y(5j&{FaKVa`<lAmfTrgszDYi
ztfn2f@Y!o4McZ~PsBLXaNN7zo%Q51^D8W7~{L6zsmiD8U<O~>t`m1}AZ8w`s8W8FT
zff@nI1+6mtdFJ`)$}S7Rt>-fdcAZKLigtM+bPdHPMIgPP^t02?k&=ZT;l?QEtsdcP
z?~pcK6WwRy#YW0l{p>wNeopa#0ntBAw5mTLsu@pT3AOG95aA&=i1zjYt&U$!KX>Ab
z&%Lv$Ri^Xx+6Pl;iEsX<+kcE(HQ+YzZ-l;>gV5T(P1<`bk{~b^+upQO2CBf*z`x)>
zhmchg7_8O*FzoJ=xQ$3QQif$qv3XcmTFYO3Crd?3H+-jmw~!3mA63Q<T5T(wPK|pP
zW?LK<PT}6i@xx~g1)jmP0?e-bG1FmVX}>8<apE+Ls0na1Wy{SS=PX$!b*MT=GOg|x
z2jcDG!;;wYg?k&tkIg24I$3S=$^I`_8Bze0hnAD^g*_D=gzYD6EZ<+GOM8QzB~rv-
zY0Ga(wfPA*0<*N?$ju6>!@QyiNph0ry>j&sRuICCdYG#N1|usqesC)3EMd@xPGYR8
z$_f(pR}S0bUlymqgByLW^7F}PPqrK)amj0O?DReq%|;(IqjaXbRw3qGo<1{FZ2Y{h
zp@F?D%$dbuz`|ZsoNn!UWMIWwO-waIe!~O1A;B9meSz{ApOv#8SmZ(Yq~a&Gqb|#~
zy8vR^R)%DWp2z3RQzHubOr>$`xGbfSTF@pQ+iXEk0x7`q&R`0c=qa4aJ%BhMisG6s
zBfdtyO@GV3D~A`G;u0(cayRY%6@?d+#-k;8_e?BR?Y|zqX8>-h7lyiekuiBaz8hga
zXT5u#9PfhDT^H)H`3MPTGXrrNQMsW#GGJ(NNK&>Hhd$mIC|Lt12?tl16}*^hAIC`q
z<eZ_1r{Py3q0XyQCp<!z$XG1dwj{FFOAxI!#Eut-JP_Si&u{O}gv`l1{XCh&6zETt
zU@(d~j<wMm>>IRUybxvHpB1dPhk?2daW={=PN`qTlQ(&^XV1XQJRKxwW4nIDkR>PW
z9@&!*JQ)57M4m&|JBhA;;#@UNVEclxsrz9%`}65Kq&jxmkvK_NwZ!3#Equ-!S%L~|
zK6`!;77zN8Nt((V?{T)u&-}4}q-{~8bWDe1(Xan}B2|1zGSqlt_3Y)V1VCq;P_-WE
z$Pk!kIZ8-D0&Teb%Lu6UXGOO98UPHpn#AuL(}GN~Z7APJzQPl&KKxp}!S#5cLwY$e
z!uErY-E;S3x0aTLbTeX&y^VcDTlQ)<2^kQ3Y9H6_thzd)?ZKjRXDpJ?IliF+LcI`4
z|8XhLtn7DFTk5zj<FGkCKly{S>^+|^bRORUYzXCl57K&B1#vQsC}Sr>e))$>8%rH&
z>KD3V`pblCxA?$1KuoTkwhRq5PV-J+CDz;%Z)NG*yAnJI15AU+LV!tTuQ%B|<_=g;
z1TV&5Em<}uAXQ-M#~%ov%u1bl<bke=xmTB_Y#WRTSyCyj?FA2JYdXT6F(22(*kk9J
zzEiHJ9rEWl>KnpLx<I$GJ_tC_po?_J?J~w5W_AePA&n=(G4A{s4RzI5xDma5g*E0M
zRpCB@g~S4o0o6m6hvG5QZBjvk(mR)kQTaAu`L0hjHIJEs%8z(*s8ASWrcAz9Pk<q}
zZwi@vy;<Lw|Mm-;xaqc>7sJ?28uqVNGfPc>@V$9^*%DL@q@DsR6X9{Xwbt;z(5eR<
z$1Wr%AmJa%ppC<r?lwFHu%v<qnP%PJcqL?!eLO1dmw=T#YLN1NjAS`#%^u}3FM1Yh
zs}}LC*RR4?Zbh^u3OPYXg^RSoWD{$A#Dh&LU%TnrNDiKVan9-WdC-S-tbdxmQ%v}W
z<h1>KRqq#gbP?#Ls9=-S91raET_!W-#y)n)2Q#dDB#(ptZF~j=W>LSHEvjH|)JM^+
zKM>9-ac1J}6Fkd166381pFK}4k7$tD_r?pc3ncs|c7Z#WAzD;YK1u2CU$HKn^R3qa
zuViW<FEqtP0V;lcHL+;4cpN=aibpldQAZ7-7cqMFSMcH{5^3R)bp(#6O!ta_$^A*H
z#Nu42X<dnvfH<74PcA#I!DPUAy1w<H@|l|<$FZ3&*|j{90^#LSPTib=!5K7V(!ELp
zeK|a-z9I#rbHLji8}oLmjiW$FnyKSkIc;C(arBIwL82_?hmbyZQyz!@P(*SXhZ|hr
z(@F(Ol$wDxF)Oo1s}rAg>7zG-+4{ZApdQH`;4g&KW91eYJlBw7LMEvN4nh0D!r`u5
z<)HpuL>#ul-Bf(tEw`-jwg8Eu7`QaJhZ?wk8y7M4!9zp6nwD?$yNP5^p=0jmul<4K
z%RY-RPNKUpB=_YziGz<hI=I^|qx?eFlZaAhkJ>FeLzISq<*h4s?QH05?yVlaWWUv<
z^22_vfi6u;y%`CG`>ub*92P!(A!EZ>ysKn$7m^%LgO~njE}C|E#(fVE)7HO4>R*4k
zNn%0~{B>b*C)$0>S2q@$j0>o)aP{ay18-r(T!2D>TH|g>Nj>+bg}o~|<9p-+R!l@7
zV!v~b0nSJN+(nO0LyiR(b7HW9VQ>+}$y?(~Scd82dk+4PE6j@zUYD7b6ZiZ&EgA+h
zX}B~Qs0b(5Yq6N!8c)TVmVc}PV(*8}tm38^0D%LvHhU~^)>lRWN2A%ccpM=Yt7Cfg
zHlhczw15j($EjGReZVIf!@8?t#P1i&de4Y?FVz<so8!N%SU=7SO5Vd5A2(XgH<}Tp
zb7|C;23SD_X}!fy^A?`!dW-f_*G$nAQRFoMlUDk{5em1Q>>Zwkm@Q&j5OMvhlygFE
zTHC}1b_x(G@%dcIhYsEUuiYNALWRD}S8GjPxZPx*V_jI66pfm_7vyAt?+DIi3=Tj=
z!CKxB*#WOJ>qvo*J<I*|4TNPyzQOMg^o;%=eUY@LO+57zbt>RKn#ABVBrXcHc6GHL
z{j@n-%L}TA-9?^cT`cG|!FgvF6p$(fkmj(wrAgZNup;-9lCzjd?<^F`?CD@wLNnjV
zY+|c60brNvYM@hb^8s$A?pf2BZ~%RAXKYv?iZ{WWAbDljBK7%yu!f5Ogn#G}t1dn}
zooD&0nbFFZlQSgDv7N@j0j@FoOXB31yp02X^TTx<?vtCm-{-yET&3iZ-f0gRqaLd@
zN`^L~A+am!?@KTS|N5y6hSb)%^p5qz4ZDOW27dkxQetaAYiTH=(<jXfAVgb}Q;oHq
zwo!4KUV`rXK_8x!Z&iL1A2Lj$aeSeuPEej8ToBt+UK<B65t&jo!i&tbMB_ng+>}$3
zp`kirrr+mOK?#*KAAdgV0zjik0*~CL&HEb_cpt%xm}`60pLI=F!mc(`#zBN;RM@pb
z!X3X22G}Zz;Da2<Ra|CvYjEd+s@+^u+?-<|G2D1>Mwd5lpQ}d|tA6TAR)tWiW=S~v
zjg=uWA>wO;5tbO4OI2{NH=Iel3(P4ejez@8Ow02NG`|*eMt9nvo?O`Z28PmKLZ>(w
z9v*Z)Rsf$^ao*P7!CJDWL4$#%Cboe;sv37&Q^5-BOn`a`3#aT4T~i+5!RS3HHfSLC
zpV9-7V*6`qdEq%{<gY1o2f*NpMhpLohxzsMGCxc*=HPN|zVz516$J+d;uOBMn>XII
z^P~GH6uz`RumC8L%DmITkoqU<wO^fyrNn<x!xVa?%)6wLkU%i~a`O!Wh@*NUDM#jk
zAy(H{cq)KBwdjRbE^4A<t*>5%;M9fbbebT!z4%$A>aDXqw9SY*1mQo>TsEtb%|P~t
z%cepmftcr{bwkv~$BOGdOk0(oY+p)uHE;CE*)CuBdB2U*^OBeevfKZ6Etj3+%o&ZZ
zjG#!NgRd+?Mjk-8-{oN<$5S=R=mZy$WF+fSq%{N?okrR*ds&Kbs{M+?ka<0KtEWB&
z9||9#WDA(&qq@R1iRIZ({a(&1>ZPpbED>1jd?Hm!s=Z81Ce|D3z-(+Gpvi1<UHhI{
zwKP`mD`hl_X*18({<fG1Hqh^jVC9$II*He?#|<_~5U%>Q4+l$>kS+7SDM=4p_Gs<e
z4zEY(-!?Id%HlOc%n9RRH;X6lS9%oLdX`Wy55g`nZfb20SsCvML)!YRPwB)ezBrmH
zQD>m~R%X;j6py<bzy|VS+7X|s)ZC{~1Ba9)ks%65Z!oWSE>xnchGqP-hL$Z1{DTz@
z0W_elm?_a`N#0`hB~zFy1*?(ezYm3Qe5j0egf$b1Jmt$wk%3$nnz&m|^k$Rv-y?mr
z#G=ikwL~+j>YLPsZ(p{p{P9O@cGgA{8p`(O<rGS=hNE}hPkyTzB!dS;&jk3+v<Q3_
zDz)S*qLQsve>SLF)JQNi`sB;&7ZdEh?*8%YK~*^Iqdj4vC`Q{Au4BtaBKwGCfiE(f
zxn!)V()I-rpD&aEP3=@Xc`8|(Ko;lfhiFUP`>bM(=6pS<DPZ@7nwo6##HI(}!5WJ<
z%K@46SEw>O7V+jblS4dJXJf3?TVpc*?%_NrT5PQFdi*=GY)1Wrt;?;2Js$aHS)aob
z1A{1O+Djy*Lw^lV<QyD^Ko>{R0u@+kQzUMT5*FHpcRee!PfkSvk5-jIc2?D8&`g4?
znlE!Ps5~D#s_Sr1OB%aOG|jE@at?i3&-tSj{D{o7ItviRZr!83c*<MD<!XGr3zD6s
zUfhkh5`z6sPl4shpB0U_T923kAv>xw-c+uzAH}mGj;sJ651t@SY0bX|46Tm>4gpTZ
z_m1O6hpu{hFnV4=+Ft~XQrY}cy1?Wm4gWG{8X-92ai!pss~(c^ks^Fh4#C|EOD~>$
zOnHc~NIXLcO?wulMP6^0-Vs*aGpE};ofvS;`bP>Om~qIv1zMIKp}w@9uT7eonaT@o
zaAQp7Bb>PxHbA5S(~@BZLaS6dG9YmBU#TX@eJf%THDJ(wYts<BdD~R0{Dbbl+Vt))
zVe(**Rsrj%x{kUui3lg+Pla_-9cwQ691lIrTB2YIni)OBYLX_{&o1ArC%SGB-D1z%
z6F6@0gf~+d!zFY$i)|1Sqm2s+<y8;U;+^kB5Lwvqk;kRxixscT)xx`=vU)`QTL(PZ
zBHSX#*37?@ByRNWC*3H}*w=m+?HT#QJ$<ytYu>*3(>7Za6X#zUY<ww6w)pEHl@+bU
zrHNSQMe}ay_w%I**UVoQ3peTj&^-yF)hxNm_7TX@kmKRljk)S^t_iZ?Pd%Ld6l=B^
znwH^MIfD)%>v`xuFfx5Ad@AlWOIghYvZ>kQHh;(EXvmu<ELY8|%EHec7QKNgBUX|t
z=Yh)5qeqdSsntylpH1M~jvzunDH?23+UsfPuJI`rCvv!qv_NN>h_EcNNOu(-KXR<1
z%cxSO504Ah^)~d+Jv<ia;kNMc;g742&!NS+K;?qq7<|nUtbx<gHDruFR_}Gv2!dC#
z9SxM~>#HL(Q?a~fz-Z2k0OGp9WEd;m!q%Y!uX)C1HFe?iF3PDc0yFy^F{bAo?A7vG
zN&{qS<5DEBt&|q^^=OKqk<;M=b*<?rlJ6QN*M}hKt&U$uT!XKSmGVGy-~Oq*yZyvw
zWf?X#iQ+rWezxNs8k1WiKx{$f01e`G^bLoPMbQe_WqQIacX~q?V^oF{pwC>2jek$>
zLXgaq&8n<cwXo^f-82AlBk$x07H^3J8Lx>XTu!O!*vb@MO3>H-ohzuQff|?{w?}fX
zbgRg5PF;PJz~9aFYXAcu9VjrE%$n+R@h#W*hVZnHcI<}zZ6#xGCC#9U0QdVBc*q`e
zaC=P{JAOWT1|+l*zS|8|Yg+B22i8R*L`{@RrTozWq+YaJ`4>329?U%u&+UIdSRe5Z
zj2e)7l`hfT-)1KI@M_$c18HFF&%5)5jr3!TSA&ZUCfvGBw|tmeOI1yF6vq#L(kJr5
zO98;4yROuk5BvGei7V95dPVFt*p@dO=teY*q)qZi>QhjK9e+*N8R*!7y+&c>4yG5h
zP2jN_m>KL)=BV-+x31myXqywi;MxZ-;C`Zej1idw2$*LQl-tfCi~#=gp2y+LE&K|D
zJlLpphn*ZS<>$>@BxNNVz!aXKz7r#n3;iV+7G?%aNIu|8{QtYGrTurc^e?nnyYYE;
zOAg-pd;~(hB1J#uU54v_qb2#Jn6xYHC}`?3p}2!QQQoBQ6>FMkwq*{DY+r?f&R?!!
za&a9;*c$z4OEW^@PgOCv?hEK(#~}-P|GhpRpeaoLF4tEKZDN9R0PuhQqFqNxq}fEk
zxkgT)Tzz1i>wN-XH(01y;xs=B<5DLWa$w!BXJh{IMx2$}BJWSB{*wcsemE|c6OJXu
zvCwTwICd3~T)3G3Newv-`Uz0?q^u{$w2G}V#d|s{zZn1jh<ut<@27n=m~RV*FQk6j
z|E&kPu&jv+J7H-7$WpQT%z*=7XaRo7p2Qx;j&ElL@qf0>!~2phzGFxi#^<_VfXat}
z!Pecg@^8q^YZ16LNEQ_5(P-?~tg*%QnHYQiqXFGK%+B-4UVKS2bn}sAs==MRI?<=l
zyawm2^1u6;tkoHq)+tJtfe$UP>Z=ZXn|qqm$Cjn}RXXU9yT2VFvnN+XPDnGzT`;Jd
zzT?XJ^W$?-vIg!*1yzmmaL*Gpjwn$6uM?Du@A)ZVY{FnHQ;CG|t+2DFw&X&E+rx%I
zgyt4c;|I>1N$nB$f%m!(o_4b~gt$rp+TZmz$L~Wkew;_6e@*K>mzt(K_CQlEL*VF#
z){`fpFbZcGmRp0gE6avL-a{<jEObU=zAw{|f!01djS7eSTT$9gugx|PY-4Jk{S;kC
z6QIs$K-qZ7;@hL{sO?BK%ciz0Bl}u&a`x3^x#u`yFq@7aBT(nW#;tx)<7}o-XU@ju
z_tEzOpm=WXWfczD#(^5oe$5ce{`ST6#bOajO6M7=nf>gtmk)IKWHI!@@Zzsg((qI8
z-s`ta1@UCnhP#$KC}A_p@!&lb*4S)54=6e%@Q61Cy%9>96#1VngMz*S8;`E5wdLQp
z+{BXN1IHyQO^<PXgul`rw><+;>#P2bw_@C9{uEl~x<&2ePRN{Q{yUalav)h266>Pu
zJ`h1`2et56h-4$vrHO_(P?PtuClzlCSth1hyM7u&owLBu2UB*=Uv-ychI-sX@(c3L
z3z2^V<ZZ`v&^JrjO^b<@Gk}?Vuy2hfg2sso;<gN=NQ%11B7B|^<sI0bp}ncnXcpAm
zO0E6A&G*;v-8m*dr3}}RAD9;U)ZzxT6CJwPGq)G3-*sC4h@#QDfS4C;P)NZOv7Zj|
z$NoeFfKcGUA*|sB-$0;7s5qn3(KV59%{-`7V$f8p-iikAfUPNCov-iBRW2C2=nh5-
zD1JW!WT*{FuZc=8(P#A#7#8vxa~#~X3#pa}`~YWI99OX+mbg|Lvfgn?Jj4u|{yq*n
zq|8xzZYjTDxl4L8TjummTW4a~n6?EJfWi!BoyOkek+q2QHJ!a`9Sh{i<Rq#B!R+CA
zS=Il0WyIZOYh|4junPd-O93=-PjlgYjX9pRP3`AQZ28w;5*VaS?yo9f@tM+KZc1O7
zd(Xby&R!3Z_sE*dTT|^=kyF#+0wI%)O3L<IZS(meQo5gXLP?iqeP;fSQEPz5d4y&-
z_63@XtH{Ub-gWPJo~sUM{DYO7`O6HBT<s{%+MS2>$cu05-E&P?`#-JH<@%3;Nd9vR
z)rY42rJM`tCDxI$h)-1#I%&p$K0iBbxq^zS&~Cg~yIX_@na%Z?mX!LXti+hGA>{_M
zu<<7|;BSHo16mK}x_Sb>*|9|?%QCnQi?H>{Xr{J$VRoJQQ3Ar4rfGT<i!4W_ZHFa3
zW|yc{|44kh?ziEn`Hh9RjcKj^j21Ydj-S+Knblm*ZYiA+2^t_Eh@Q>PZ5e_HyvfUA
zF%UFTUpcr)j0MM*TYgTpb&coIkJp5|$-cni&*=!rYy_z>+)tDx5iGQH0Y!&nW(Yq)
zP;=q^5aG*s`B{FOz;$e-+7ILD<C#^9#i+wn?>P#gDiv;1^CK$7XF{_xFCU$tI_~N-
zw*3m&hg`578hw~`3viza;+PjeAVHam92!ecvx8(BDZV#2-2)NFNNZsxJ|iPIX?GE4
zXFDKCP6pR~dOTHYUw-;bJm~#`@>l<7-6mofD18-8XPq1Ja6tU^QQ_5W@b13hId%k~
zBrywfFPU5-syy5*9xn&QsisNxyQ_YfY}*^%AgM@J{bE!@CWOr)e~UYsWCGXFP*lCF
zOSOy<oMjbb$ylE{A{bUa#cZ>G3bX(O!D4CfdQ1sCuS(jUcBM;oT5lE#)Ls5t+*u%a
z1?C@}_X1P$x16T&y!3N-ajElS=NBXb-mnFO=Jd}$SBjDjU+Z24mpxJ&`va^85ayc8
z=KKC$4lC@j;SQIXug>MTpD1)vqXnspDs?vKxoth+>4SS(Eq;aN0|$Da#4fm4nt0?4
z%Y18Kh-40<65w`G8Z;~$9YyQv?0e5k=tFo7Y=%+%rF()REspHC_UUW0&`{9}fowmv
zFrQD3faT&4XGPb0^D{WO_Xs`P?~~?u1et_=5bQCo@`}(gq%)ac4vso~M%{kAiAxal
zr@%X|*YJwWX_D@b*;02RX>+4xuQZ~Kjh#bY`@g|DBM~k~<7o22tD|e2G@3_*jJAru
zNZ0-({Ev8xVAy2HNNaBew$_b~$$Vp19Xc`2h8MExGblX~yCqwJgY?GBJY6l_NUzOk
zM(DGLn|Hl^_nmjZ3FCOrz^$8TF#bWL=84$02TG)$qc(6HANO(BQR~#v>BJbM8pvNl
z_q{Q7KsfwN2kTVxIE`k_vb|wKa5QgvlKF<O*v+2LNG&}pxIt&jh5iv|@_PUK03}Q-
zL&Yw?8Ua7q@%wl6xu+nS(~=+qs)5}us}SQHFt25SoVq+)hwX4?aO<tmZ40jFIDQr(
zA*M=9RiB(#rZRL;cwarb{MT0^{i5H*kTS4gBFm$IuC2eZ5>s*I@*j-Nud15<P7#^<
zDgT@^Z|3alFzduQ-!ohWy4qI%K#&cSbIT9~Dqg%mz&Zl?=Xks>1yLP1+|xc;AX-$D
zT>G>O?)+w?I_if0=W_34>gwRV-4O?K^H99?#^JF{7s$g5q=oL~<gNH2>Q_fhBT;Rs
zbW@ftTt&fpTWmUs7*SHUd9H{wSSRN9QHEIg@PVRFs{q;VR0$&=YI;q&X<cEmXve12
z_V}v2is*X0#}GSPD3U%&T2y0FmFrG2>Q};OskLOebANVQY~%#{&@l6!qxV^I|B0hL
zwb{szGqS^6l7SSCkaI$qg}JMmGAM+A#)Sb$R>5h<RZuFkR{(9c8;;q~&**WK_u^+)
zL=O-+zPKWvE^6Q4U=nz5Q@uGXPF^wXx#`YZJ{mrl)cK`G#CC+BQr@cVzc>-=8hjwW
zzR1q@_3EeIvv{=;Z+2lUwR7^}jFy@$yI}SaFjswi!OOM3<uYk`Kc%#4v)&W&iYIoW
zNr01keRoy(V!-Jw>XWKg)3}L`n0weV>08^rzAqw%<hN2Po}kRDb1(r}A;&f&U*4oT
zF<Cs+0n?VUL;XUnvVQpc&4;}H^Cb}3<C75iu;bZ_!<nW4UD038#Cq&+do^}-bF7`0
zlSEuiz{bNHD;4bK>hZ$@qk$_oE!0Q^w$aT!k=u&Kb7=z&Q!*Big}u@4C*~LwBI^NK
z{XlXvt?m0aX$@g=dUyIN<<#FsBAVdxV^Un(dxGAJQXpH|49ted*o6M~Wz;FE0Jw8f
zxYZd#b;mZ(L?8Pkyk~XHiS9jqfk;mc;YLg(-HsocE>63{qU1>je3<TTQ2t=SMzC=W
zh_@HUiaB63$)%z6=z<5Z5c(?DdSdxlc?l-u_5_Ni<lTYFh@74f>}a~B7LK;Tt*QYm
zlTm0SvUvj=2x;yM3)%&Qy}6ERQq>jia0#UEHJfuI5C2_&ucdZx*;@oTvPi*dUbFB@
zFR1W`OF$jBuC%wGV60U}yn@;aP9XZg^AMEQbJ@4BQO8W8*d&@<YA#zi{iq-^teAdV
zK}Skh`1ng|5WeSML8p(%zTMz2V-SOwGw}9U+6*~lL47!+u*Ov8$lf{TlR?(-BcZa%
zP;{iNjBNeItEHyq5huT#IsxLLT?KJ@Tf(LaZa6V{yyRI**ns(+0`cZ#-b>v*1p?J<
z*Lqr^=;=x+F@HT?%_?UH9JeQJ_IswTbUY^O3n!0!wE?s+)|`w=stZy1;TCRGT@qf;
z+*W#8qpW>HMWf&gzUIQ=M;&7(@nF<+>6i^@teVpV^E!a%Nl5weB!K?14E)-BJat)Z
zZ<_a}^e%zOPL=CY2|r^ef`;juG{>GwZUP8=)h^uD>4?nQSVbyk`3ETq@@vk_{JDz9
zY|}Du>KR}Vg{<RoUCTU0ls7?-9ATsii<MLGG3PLRRTitOCWKBwoV9$$HqjIVY7Woq
z5iW8aAmSuiI;1#u#*b4|iEuFo(*NDO_TK8vAQV-dx$?_^_FIzGj2NlhUDH8ZFto`m
z96-ZhHL;R<CE|9vR`HnyCK8jB$hTI86}zehvV)hAjMqvVQk=eu;8S54&1F_IzLDu?
zmJP1F;JGh`JV6tY;^_JN$haYg<V|AGh6p~CBQ&7IK~eqqQRwtsBAd|T`!?ue7U@b*
zaC~-RDW#!lYBS`}^qznm>KcOI0Cd5FqP3N=+fX6_;a1^2=%HF&Dr&+~($5qN+@d<T
z?h#P4uSI3gG({R$6ROH#qM>oXUclT8W(gVCM+F=}#GnLP4d?fnv-q&bsj<!ktn6iD
zw%Wfvfz(|aW2)w0u2|1WEbgnm+)S32I@DAtS-9w2(V$_UNS0EO4G_QS)NC|#$vya!
z8mf}Iy3C3InXedp0IW9=1Y?%I^Vr3KquY_ULs1&J)lplU9o~U-5HU1w=c779o{K+#
zK<3lCX3xFt7_QoX#OxHRg?`zXUh##xV-Y2mW(ArbUU?S+Onr|nu!P%%MYswh>H%8*
z!kMG>9a)rO1~6_FYYPw}s~_tE<Ub+rbMxSQJ&R=qS}0splw7ZdxPBC}-C09U{I8mP
zuVd1FO>ErHeBH6?Bmp^nn}?8s&M@+DibAaN4$R$MaeDv9CcGwy$yO1F#6F@xs{T*y
z(U@JM^<t&<ByPV$BN#I~LA#9@NBn9z6pADhmHO%%A}a5ZcVn;M`l<<MSnjO@aD7La
z+Fm!8FM=Q4u&&mUe{Q4gyRQS0Ogj@$+S2%JOPD|;<n)1@d#iySl2J9QRb4a@zDCxZ
z(fP`E4?A1fKPKpz%z`x-81S3>K`RB5zfWWHVHq8#=`*O!!WH2T87^%>ol4iA4YH}T
z!4JMndwa=hGr9JYl@k`2y?IcM9Buz=xnkf#s6q`Be>qCaBTMkLWq^gea#J|*lCbjF
zy$-JmZVS)hX(gKm<{+uOlgFwrX{K^%MX#$Dg$<`w&Q47(?pSrylYqarc2LX<EH+|T
zlzNnj3l~#eJtKOnmM4kq;`1?;De=+nOQq3^@KTo_-nHmSUxHM)J{n~Q?i$%Mz=zD1
z;%spIWjOfuyVm_{KpbKx8uZD*w?r)x2xP@S67+XkDN7p000Qz`piriWtao(x+*tl_
z?O^>PwpqTD7I&m1q~lL5Dj>)TR6-m>NB+w6Au38Kn>t(7H=+kVaV7EllM+~BNMQbx
z!*W3|-InDhVcgzSA&6!#BgQGHtMC&^$1M+zPng;>qd5+Iche;+Ts3oB-QF4!mmBL2
zpn^UmuHV;N@rRBwZ-%`J^$`f6`cOIB$%VU^6a;D?Y+V2CC?y}WEYaVnN}NH1?Fv63
z!(?*;ka^)ZzKUin#66Cd#~s2M;wbYmA&4ogBfR5E8ll98a={WRx>M9||9}q-H?bpt
zT3u;8!aIqrhCS-}5X=Z86zOHRM*28&1C{CFu3@Nj07^$0oGw{a4>Er9V{!YHE4xF6
z-J~P(FquO6pLB>5vb!Ddh8Wh=bJ8W2>Z~@NRI1+9;$WU*3eA-dmJ&WtC6C?eR4P4=
zEKj+DnWuX6iJnWiJjw&!Y$e3(ep5)^6z0Wr8jEzTxj-W;3pX02&sAV-Iqr=!$kT}a
zjkxL!XK#jHup2K^%A9aNt!r(mo+W#*8lGb7y{I(JKs;M(V1@mFXZUo1No$+Sx}kMe
zW6fHl1Okg~9=f!rF2Gy(pWmlgZf@g#%6t6V(9k3D22RWFtzm1d=@i@dTgL54)2fe_
zZbjbE7}w>hSfj1E?E;Xzl(ZcZ?N8Re>;im*NkCpA5nOxl^_WkCEcW~iS?=xpoGeH}
znJn~*sFO@ME4$lx&Ik^BI&MoEA8L{0NqMn0&BP^joAtzj@H#;QQU2gktw0BmNHs#^
zcO-{4YYaBC@=2y}m4UBee<K-a{7NS59nU1X>i*kp7Y`x77dFdMPAcL~Y9sZ65H$T!
zM~Hybe)xnD)@@;L%j3Enh+GX3gE6lF4{WqH;2{YXq+TTlk3%0SpqT_-ZG?wsw`~La
z1ev%#Ci}>(Qz&6Z<xrDzL6;X8HUN*^+c+<Ub)ki_*1M6(S`m1TM0lj5BtwCEYYf%j
zX=I2YY{~4b93?1wms1gjEN#VF!Rs2P9nKiR$C31}OEq*{2Oy`@&t@X?{8{y7^^CkN
z#NRWzn=52lnHs0Pg1tUDbIbPqv+!dPuz1q~W@Bv%N(QizAAAngoX9#O|Hv9+t_gtn
zeNZ*eeraFcL=k~}m{ipEKTjIYRY}ryx|ZmG!=F3z$cl&Y{u_FfECCP7+LpNJ5440D
zSL(u4!jV7el|B>^e$YcwP+>8lq`l7)B@J#I<#t-$1yexzTv<BviUdfK$YZMgRbNJz
z8nFolt>+DaE=o+|J3hcy>`nz-1ga0A5D8jcD$7rl15T9igS)dBR{ITwvh0S7k_huc
zPpg9I1gB?}9<r=)h&Do>)v#aXnv>iy;}w?P_9L(w5lij~LJ0FVNV#sV4MSI(Cvdj{
zB*oBAVSpdeU<aFtT7Nr1L*gwV8#5~~mJ9Ob77?|J<-L*+Tc<>~QZw?_xK~}M9$L*L
zy&u?uFK6yJiba9TAii=y^E=V*puyl8TtqZ{Sq;~%U&CuqF*PGE8x^QSJC{rFdunbf
zc6d<68DFTvAVC(v0!z;9EdQ?)0=$#8CEnPvpz1e{;f0~yHS@#E;i5Ov@7dfG<8x`u
z$i(PVqi`R%!AHBI=0r8oVREh*TOnA3)?@NPS@*ErjfyR~b50<b1z5#;&g;T0A4eEp
zRgU^$I5pG?TKu*uzvQ4b^0t~h#?pdr=^C+T)h6VY$uSCZKYiNuUmU}%$9FoWT(FN0
zW3QIM>1>b%3TnZ{vEZ%|-p+?VHp{!j?b*x;N&DpC4ExgkdGAbXy;M37RrKg*G%Qbl
zL(4CneQUv^<_Ak{H_4kpwwykGtDFQH_wErKGN_dw(d^!l;@=vrMG0Y75S*(zkm{k(
z@LsKqm%-!3FXoHAdVI@-2x*p`I_kx32P16fN37eLHN_A;`<=_yw}^SdBBM$hLU;>=
z-SIPfm%??)l|$Z<82jNUEnvI3$hO)URiu6pO8T)Suu$qQM=+2{Z2Z0}Kfo@qI}D@W
zhC86=ivs|yBUgi*))Nz<X_5c{lgv@h{lSr>4y}Uk@J9juPc1*`TBHeTvH8zT)2Y!}
zk7k-)1qWi^m^d6i^W%Tr_t&zF-QJb=KwX9ra5s=@I2%!&9XZFspwQC~S4^(Erx-KJ
z*(OUL=EGB9T2-zX&!|+*PL8Y|i}fT{i><iZ)F&qsi6~<(Q0R|~&{ER{|0<%VH0hOZ
zxOk;Yd7;l#5;jZdB1FB#Hdy*(#~dMK%1M|G@2<i-Cr-aCOQ?b4SSR><(fn5o)IFjC
zRkwc2%0jnZl<epslUR$a82hf2;oXw&`U`Q+?>4VI;4zI>R78vrNL0ITmusfOsF$@8
zzl?2|nK_7#DpA)=PN<+txF>HgVa|lSx26p1m}=gY8?K-YQta56@HsF_NjU%XsTbAv
z>{_r=V;j6u6q)wC9z^8O1sWn{Bj1-Xhv(dWyM-<JN_}W*9Dj$W0uYzG8Npd=C2q%Q
zHe9hSxjg!s(c0J4W@q@|qI5KOc{M5h&`|Vt#SHPn-_sn&6z}4>w{Gb<iL63l4s<5@
z<1Nw1zA#un1jbbFbn}`G`QRGst%gqdprLER{8B=LuXpIN@ZMj89PjaJjtnj~TWxlZ
zGE+TAxt`+)HF+hpXVMTNF@~fY-5m|_C||MyXx_-M%9=-w9u%;)sHwaBEznD#xW$xX
zUwgSoazv=wFv7vwBgE2cUnKoF4)ztf+&~=+P$6GpwTbp2)_5U&LC9y-IWZM{rzb3g
z0Uv$Oby}E*h4q*XAmh#rYY3`OM}HVjtVJlvPyd)0LCKBXx-{gh+)F}|1m=``25K<i
zD#!6*vo8MLsZms<G49~9;-GQ5Kk~+HR#l-t`+p{(h+B#Kr~^u*T$C^eGPX$9(dhi+
zydS<Eb|-neF;mSg8_zpm<%P#>KNI|o5jP<@O0<BTG%l>^T-xn8ErKyF?=~+!p+cRY
zc;Z;U<-pJ-EYqN63A`0`9m1llQ4Cfvgt8k<2Hz>&4jE;wPP+9Fz=lSW$J;ZU52VUn
zmIE*^E{&sQoO28Ys$s2Pnen|X1UXh;1eD2bWKkSU6No2}EfsFqq^2Il^sDj)SeY~z
z#}umkg2t=B5tXf9S5t*AHuA;%LvYBubXx`v7Dbkaj>J;H1cUrVeHCQMQ8=)4f2mc?
z)#NYgH`Wkhfd-hm5h*cA!4C}C51Us1`{-W)G%&6^!I+)cvx8}`Z7AJqwC4yI<$#rG
zNt_4U51_)x*F!7C-DKhK-q@NQHc}t17-!m)e^HZ?okG+yQy>r^f9c9#L$3|bVj8R4
z=iHTMMz^hPk|S5IrV^@f#xUV>#L$Cvnf#3>AHMjde1LH)AnO$YungOj*ibp2=Iaf!
z7_5zDD34v%S%*>eI!%ucS*`lj|9mIP;p(QF<&uJ(+-V5NEd>wmXw4I0iXJt7lN=hP
zWgjuyqU`^H-@v@k+F3@1Bu|<vDJur?`ns1NgB^Z1{x{t{Dq#BE$}Yoii(poC&&8!-
z*SK+nLmpRLTO<Oh_p2hpXGgKlg><tOSiHW)#L%EJyRQ%VP8uBN`czxWixeG)HtQYB
zt{!pRO}3B$SJGQ~=ek(G=R++~+uga^gCmAG!T`Pj@#?32wD^8bv9i`Tx!~DlLgN=a
zw$~&)GxN5;lMC&`x1fPs=DoSqy|+4J`H9rjd@Y-8HeX_X%=-Jmv?{RRTrcv)W)`j|
zot~g-zd(8AM=(jlzr&Ap1g?!khUlI5G*MxcXR<*KnA$-M#V?9!#dg<sx2={|Jgn-w
z#AFrVOB-04DNi|>DdlC71^m1C<r;YJsmYa1QXTu4Z;SJ>2X20a2;L5FB+95)c{bOn
znggrv*_0oK{p(>>4kqO&izFBQvAzXZMUn+c+i#m26Y#fWZ!~{_;cC^4Kv471Zm#|}
z^4^gylc-JyWLW56@Mm&Nn&=g^Yh3?GQ6|v76x{svILjEfRqHuYGJ+^d&hPR!gicb#
z_UbOR<|y!!$p!<iMpg!O%QPeOoKKs)-!v4(?Dn?e`4Pw9T$Q5yM+7~W5NDN+IFrUh
zyPY6mSdG4_MvyvS^1_nFy3z=77s^>a6I0i>;gDtJnejYnS!xWGN#b2`WN0MGed7#m
zT6@fjtKz|1AR+yQji?g6&&a*L*2JM6pA-y<snx`;uas+M_F%ikpO?6=E&yr^7&S1M
zc48V#qp^1%Sc$S3<7H-&h<3ByIEVlB!SAH38Z7T9ueW=1U;oB9zMEYWLpi_#?10^O
zwo1w^^CBLpP?OjR%i7Gg60o*yKpXLFMM@+<#P>UoW}7<=KRJo**#!tmhTF6xVDZVA
zL{h^;^a`&0G-gXVWz0+oum*UrkY+bKG8>74GVJ+%!Y@kRzFpuCZ&bWY!F4?R9~o-m
zgqJwn8@Y{e=$8}31|z6(z=lTH_+#hnFF}EoTVL)H7iFQP;K_5++%A~A(!cS-Lh%u}
zg#W)rHdmuC)M{s(l&JtmlRi7Ja8U?V8S<9}-1?xq?&mpaL};mlT5@qMc>|BuFRtvZ
zC|JCMW}VubPBFPz@;wJz$x<}JgSo#Ar8bxlu}j+G;n~lb?nqsV^0rb3IFaRkQVlXa
zt?@{s36NBQc;iE9Ci<gn1?#?>SA@}Kdv}Qbxt}Vzig3GbwEfi`x|gI`|G)*hWr}Ar
zqr3Q-kGcw11ko2QsE#^|Geb5o806hBGa-&l^qOU*qw6g#S=g{|pzm`2EE0)mU-lK)
zdpv3J)EJcv3%KYu;QZ&W5`+~<>UPttaNY!gj<V<SkZ^KI2f~>_!eD1U>^3dbDke+w
zYD-U)p>sZ%$umo~UKtV9xil*VQ&G^^8nCNG#ZWsM6vIVq2zI<&-KL4K0z2nt2VnW@
zN}U&`p0D9)$SypEKd-STj*>{G!{-rCXZj$a%jBlF|A5c9<Ly@UJbG8O1!~kf7@Za{
z@h<a<7+Xrr3!2>;;R%^np~XJ>sz6%ESyF;5|Ft7XHxh@S>b5_~Q!CLC(7Q_~U|q})
zBX$+2`gU$HuhAGCAwWy4t_Ci_(Z?1B(I!RqN^&(=cKw(7KY)+_IQ5fCAf;Fa*==hr
zXZcpbvD%Tz$>_vMaJDpKIaZE%oA1Z0&yp0(M!13jMaiRa*s}cgEo`j&SuM>0@)7Oj
zrA1=ZULO&8p|+M_?(B=M!;x89S~eRGH%=w)224toNWvWP99`2RXlRS&+;-A|lZZcN
zyZ58$Oo=gE+?|2GC*xKVyf{17{6<!E3g(N}hnO20NlqVm5Z`9ew2ITdX&KEM!V<|L
z*@yO4oBnp;9vw^<-fBJjhOxS5h(1&5y;{#bV=@unR`yjQQ2iF&un!Lwv^3QA!pAs!
zFG2UpFRVXwi3ecP#XnKQG=a0aUBSnD=)c!5D5Zf5pvUlUTs$UCU;rWmPo_@;U`PmG
zLeV5E#(??{I%f9Hzc^A84EPQ=kL&;5I<awtf06>4hX7PhkcmD?^2aRSAXQQ|JEEdW
z2v9Fo7i9*OcWWDaRId-PG^Uy5=f~p-j~{8Z;+kw}0~vKcTgxd40f!h8n$UDOu-Fy8
zFCEzIi`|^bI>c!#hcUFz`K@Yd3o?JuYyZ20gc#ZIP6EHq(L6mz^|tkH%(;YbPACp{
z;!|^Beew!E;!?RW6wYA)H@-Gv#_|j^e+}c4YR)%5Z8g}2LhgRiow{|COzX#gTVyVe
z|0@~yA9Puxhw*lc#w%&Nrs7DPFoUPE*u{w0{27pX`8{q)#DLBb%1nRj<?5HJcisWp
z6Fz}4LlyO8*DT?mYI(A^``OPSS_UBh5L?)rTJ{|h3Ic5iZMv!{GDw_bqCSLW7-<Q>
znlN}?{~VM#GUZu$Ls#o}JlhS$uR@tiDQZq%K?4@0#Hv#6$TRtJv#nJ-^8pNN8%jZE
zwDlHQs<zd1F8|BnK`0#7-Ny%vU!wk|+gUbx0oEZ-ovY1WkxD9ra`oYFP!RJbfJIMx
zVX!U#9>~!FcsTV*sfHk2cHe7~r8)c4NhDIKldWDd{rkD3UJzG)!QUqP^pF(ocbRUt
zjL{NR&*$BuP01F#C4<x3M<da-ajOjPH}Q2paO=PKc$EoEAMO`NY3MHid39gwQ(6L>
zxY(^ZdG}N2P~usp!srS?8TG^kPlJJMs_8=5g*;TPsWD&k<Zf+=fg}u{^HT%kzH(ND
z8>s6vWTYvpr<HtmKGcNcTNAzySC<|he4khuhl~=MsGLz2MRxaDWM%hZ)7U&cyp!WB
z>4ZxtAkT)|)On^O?5E+u5E9aso0Ia;;6fjWb_VLYFIn)~-ts48da8a+!9Q$|ox^~5
z>Ae+HZy4MrBoi=Tj&=yG(sVK#s`nvD5f@y&5<c&WT5+I<)#n$pja;iD+01f9`k{mo
zviCFpA2=Jd$JHd&Oj{M-p->y>9sh>OVmJls?QQwnQD}fb^gLeI>E=AKOO+C+pFynB
zr)Gi-%*bD&xF|m_>OUe->odaOSrGhz7n-l8G#9>sq-$sz>=ZYj)bguVC}0sD?W7(Y
z+&I<Wr7`vHruWu@y}2=6tu*L#O;Xa@%%aGEfH<CL3ALlW$y-Cd|98C4=p<H=wQrO7
zcqae8;RQ$FP0fUJ8#+Tr8iT;NDDhqCOptIkyawd_n=X)O_{v#)KNzk8KD&9?1Fox4
z`SC0S-~N5Ow;k_|Y<u#8^>6+oZUWtEjY{e$bU&h4S-AaeSEMWEy8#hkWDS;@$y7WQ
z7qCug&0t}4A8Y1Amo?MW5DoTq3vw>C)tA+a2+o}?vws*{SwYEz1&^fMw1o3hom=Xr
z2Oy~TQz14a+Kh1b1ArkN`M21Tyr%?Sb|e{)73qgyOK}Z+iI+{&nzX7l!*bWb@w({#
zUrpRKx*cicsfNnsby?j!aOQ8nj?}^@oa>!CcUH{TW|6sUR;nEnCA@p)H(|^b;ckC=
zsnw(SG3p~sU`b^A2gKWs-z2$ERO*Q5li8_lm_d|f#8#=!`#&L|mr&n<B)n0zl?guF
z_yB=V5^|GUI}0xBb{YlX^=|E#TjA$`b%+1DYgT-8zmDhqekW6mtQ4-TtxTn$r98al
zd<_V+M^Zgf7VUl>gWJ4>eQ_I3e;r-+EJqyjLE*GNDQ&G<;0z}dLU7(#M-y4)M_fb{
z#xu|j6-F22im@AdKRAq_Z`2cCjY|dZ@^6FK7G^gC>Vy(C1h@QA3NX{3Jf|U`=DoU!
zP)f4Hcq&{7bWJGbE6l)=FlLvj&S|?Penvk-6dg|-uj+g0N~noDX|n+StyU@2CK_$j
zYomzw2G{XV-6P;`abEG)V(?rKBo~Bj6r+R<`hTVx+4{~-61*(Wx@4sTRnj4aWx_17
zx^$DM*PBv0<g{Y*r*0=s&I}gjk6HMkBI>m#^g4*zLF$`+dn!wUy13S!rGMOF+1~FJ
zTnT6~!tchnbgB<_*vt4)1tDynHNn(2JQ?zmUwGX3^DJ33ZEng5h6mV`XRNqTSDdPB
z;rkEC`on&?$k_1Zo^@jhqCjoVu|53)=2OFML=<1K<129N!Gooa>q3zDDAPON*WhLk
zNXH=_slq11l$jm0o)pMS=S<b@B26$fAE*IF+cp~{-pvv=g^TiR4ey2SnEqEbY`99t
zfiAUe8B#J#<<DX^GV9xIV_r7P>i~sI{J24mcy(&a3`TNz;EubOg6!3-6^98%(!pL3
z9cKIVTTR?4$$!q@?hQo36S!yPmmX%3Nu1~-N%w|=;E21OAG?V_ZrrUx|IszBuyHF*
zl7WG>6&OxHhLWIAN@a1xiS<rM5`Mlwkg}9P6831;TUJ!dz94*92;N@zzEL;Cgir7b
ziLD8xhp@ndHXmGhYq}px&e)3I@RIigv{}I$b-Wl*Wdaxq6#UR1B+)Gw;6Y<Bqvy1x
zj7L3^%+-|FhkrR>t*T#B7O5_xxmROrV7|~RF4_<7Sg3gMsz46}&hxddy7&Q_>Bk1k
z6-br>$08mS8*j*It!$Qy8F-U^$kD?zCEW+(6MW@PDerfP(R&^?a+cO6WsH{kS*~s`
z&f|<=(yOo!2O37ev8gxdYetfcldqaWmqrhXDvj3P#ci$$`&P>%Hze7s6u?xjq{pA^
z;;^tF4bNtia!#pee7gG7SXa+sq-!5G{v$IBRjQlt8lJDn44>xH5ohvvP~*ruV$CKr
z>-u~{BYI&5eF(6hq#&pvQ@kg4#EWu0c7|eT4`a3fkw7D;y6O2K#`(ERHv{oTZ>4)Q
zwKb&)+#6R~%~?4YTHV*qE@=gR13Zj{0j2@&^UZ{pjFY1z9>8U?6y5B3PdUQPTqvyo
z<<w05CWQMhUOhU~2Enpmb)ui89R21e%#iU?Ko$yk0vZ~W&>>*i4Z$7S?Z1Qy18~7q
zCPosRS=+P}U0O7TL4c3;4y#xDO+YQ?V{eh$AjmKU_n6FDMDn@5rfu6JMr0d%)6+{o
zEm7saR>2W9mlS!_h-jk}?QnC*BAfAxa3(eJRar3!ph4xCp$ufpQRq5e?xH;fgc;<I
zjn;_6Ehn;Bro_`*bN0zKYS!A0N)d0`WtmV7g55}r91xb4a&Ss+d)#Ge3GHLU@6KDe
zQ3rPuA&%I^kp-fJq|N{qe8O1=Q(qf{NUTK!`Hq&dq~(ZCt3mSqE~6(mf3p~(!oB{0
z1nHVUQMfyNQdqt%@u(Xuy)G3<mF#%2axBeE6j}aJ<2bHHtsO6;u=eSvfu24D-b%cd
zDfYe69Yt}1%_+qlw2si)NwLysez(FVkq+->%|lY`n!n#IYIn)_*t~R4ueHQkc9g}A
zh(Ph&KOA4&#=7gS^RHY?RQD0QcK6xoa}E^=gt&q1K&a-8juFSK+Ny?@t@009&z}wk
zV?!jjVvCqWHHUeB!5Uz7!`SvoxV)$@Mt9YxY@9N2OcHfw!L3MR>k?9K5^o|@$>XSv
zbT?TWH*9~BJ>dfTF=Ze7Y!A@my-4G^k7!jv9A+%vi>cL)%avFygd9<!dV9KE0KC|A
z<lZL|ne^cH;sY1TyQt3%Zk)|Rlp^J*NIm*6e#CMj5dvc<M$}(!M5gGy*|e4<m(vSg
z^w7E@Pn$U=ec=iWjd5@hgZ==nXYBr6CO<CHsjsVdE*v=9seJIZlN6`lj&awp*YKm_
z@Zu|8KOOqEOd15Apv)2(5(Is@)BBS=?xs_A@%BHj2EqFhD(lgO7=^MERs-sEgFro2
z4#o;y9_%v&%RM^UC2Q{~lYy2^pFta50Y-L7Xm>!W*5ZJ_D~W+J1B*#Kjyv#3(?KOo
z6-em8C+DdqF4j?w<^X#2b>MqzrFxPfb9QMwa*Sm13<zOF40elbAMwmWc`*-Octc3R
zw92x&>woGVA(D(s<Yz;Wd5@7?;s9Ylp1+z{Fim7K5Uxp#eN{-F@7Z1Mcu0Bep=SHt
z4g~uvDo4u=i`PmdlCBFOt*#gwf0G>50p957{s}|OW_t60?ei#j;d*Y$qg9qrER7@x
zkrC7XC_0Lolsel+_Ho2T-S<k$AKYdq{F*+9b~k}_Fl^s$AS-5ZcPm47bi5(wPMp}3
zT~FCP$33*(1|R`Pj*x7&l}H)EFQp_4bdksm5t(&ir7~wgpRu{K6Rh+pDpd94X00jt
zXNI)5+!?zL+};B$>q0UfBYD_q!<SOH7zC{@oMa2JFKTYo`i+pJt_>UaQuwqh=!)lh
z`7~s>44i^Vhn0Wf<!3A9lptpPa2O{>T?+N7RQ4a83b3;tRCD|LAYFVHz+QTzG{g`w
zOtMs46A+3=neY-Cxlb<UGr~27H(EFb)BFyyHEUD0cqKk0PPL2W^GYwAdG)&~M?kBl
z*pk4SV>r|o4?o)-6b@Wz9go?v`U9lrQ1ah1m6c4?*L3gsv9(~}aWX%7|B)*NnJhUC
zShs;KLd7S{8{D7oQMTiY5T(;7{543{Ted-q9Ncsj)*~G+ZbRhwSePIzuK!Nz=63xb
z=|Y?6&UecZJ-I%Mrj))fg#HOM9s;%A0e!^-A=T=S(8%A2$ik`k`r#8u7)TmU;kdp6
zfV{0FQM`r+-6t`BP1igA>?{P|zv4<Mqs5p+&amIw$TvtKs^y<|e1$tcb8#bK)+696
zIh9W#h%d)fd^4N>(~K5~36lYEfS#~ltcb3en5dfS+{fu?Kdnmi)%j6UgwkgFjyZ;o
zCBb#bU;Z46VCi6#!g8>4;hJhDC=`Jp_zf7}bid~nWjz4HOQ~jZI%7C=Fkz)M74B3j
z#*TEnB_2ZS8w`=)MGi1gNCYP_;Cg|2dNv((gN9*yJPO(4_5C<igcojhf4KbthnJjr
zTNUGV2^Zq&q>flZzH72HIH?%&1hfRQ)5RH+2%XMKW(AOK?h2sF4(uvN|9%;V4`QXC
z4pkE7=kqPgQ;WL17e^<33@8VN<TzUb@9)<If5xk`a$O0Gmoy4dfCr_zk;vG5n3z1*
zA=MD;`IwD6{q$Xc)s5&5TmxKz$r4~5lC09i**B`st4Zy~X~$gVyx|Wu6vM+p!5=>d
zf-pRigR;oq&$17%BJ%abXRa@no$ajQnThfMa$Dn~DuBqoHB1rFiA^EFPF=(B{VR-a
zkjc<0m%U+(rHqPj0uK9LU`Tb$J<h_8k_ik*!#R7LzL<*+pmC#afCnf`RzesZs+_s&
z-mDo9^dMqM$G;bfj|;fpOD%HQib%9R5JNXRnU~Ui&dH<0%1Wc?$ngb0JSeeLu)%X(
z0&Wc0Pc$M&Lydj}?h5vDG3esEwTBk#MbJ&dF90g&k8TzUs-_-KQxM%|3MOe>5ICk{
zMQVix{X`$xy4-rbN!(4mGzG;*YDi->7nz}l-Ai(ij!~xlDtYx6wH93wqcJv<Q5(oT
zGQ{OQkgDT#g1S3>0T^?u*7h@1YG1JcHkEY(ZpRmWHo5+V+PFi{%mCbuyii1c6YOsq
zbl%2Tv%r&jl^xU;ys<DZX9=01YA+)ZPk#yMftLEi=aqR&$Nx{0n{)Ua4rMMRak;fE
z1Xwf<#=H8usRbu=T5-K#PKH^RSCk^gM-r_a9qpY=(lAa^$tbCalbRp5zT6&kk4gJ9
z;CI@3iPHSJn>N3MB>+<*39xRlx!)G<u%yQ^Mv-_vik1(lfnne;F+tPtQ8i24mmx9j
zP6>h$33BF>zPynAaB-HhR6ZJUwwA+2&B3#UA3B{dKON1AzH$~o@*<#cvhE(!Ul&6P
zOCYQ7QO;jg`~gAib%U0}6rOXOS=b?2qB{OhrTyr<q|>^6DIpB>Dcu4G9lb~{6^#D=
zn1){bnQrBcJ8`&z$Ta1_E@i*6jeuP5jn+7}#7~m{SjAkS0z9hIvqybTY@;|h^@g>%
zOXRfQTR#K+SV4m^A^(7SND)1L%vGMNM&GjBbP6I9{(6^4BE4JFP~?hG6b^l5>W=IM
zDX9@HS8b)_Z%<~1I&)XFKd>$@ASsLk<-JJc*z%UWN)Z==Fqlt?qRlx4Hb_SjrDPgW
zVrSO+IUymqltqxPB9CnW6fGRFpA{e=#n``wgwxDtDMM73fFXee^X}51`|G!{Jve)M
zu`q1TeN5(RBF!Y8sIf0gww7tFkGJvi>XMl_YH42wy<*fY#hMN;>IS^9OA8Pz1|s!>
z@QKSTvRL}gPlw+^%Z~i2O3cV%FXH3$NRAIBtK|j=i;LKYH%+vCnqWMmsvynGu6QJd
z;M)PFH7&~bWM5)5KD0D%n>VM3&`nGOg}BO<$+c1;ylm@4;40x-F~<!0;sP~VM&r4U
z1D6JA_g8zYYJi~BvR_^2j+%bOf<ZwGU=n?G4U%sZST!^2!-g8c<RHH`@m#1jb|J&D
z^lss01fs<%ui=EZSEzW^#n~RiqU3bXNe=WYAGib79JM^8+aC9bfY3#fn7SHyV|0gO
zI)j{oL-!XP?#>lDOKKL|Vf1V#+!dD9%~@GNlrYe;Kq4BxJtP?T(bHe8BejC1GYT<G
zG3@p*#a`aF^V<tc4uqgTFQSf_m56<9U4lSlAwh%la~_oF*Oz>c5(2$#7(b53GQ-()
zOpGc4II5*>KHK+Y!MG0@K6re6+rfg|ZixB2oHBY@>c@l&FmB_GCtDy9$wfD>TSq_x
z&D33{Ize)~kyv1|qBS8qnPxkl>7QRc+0+ZS6uU4AP$I~}@VqZ1pLLAnn2wn(<x0p7
z3PCgtG*($FPPsgflfUlqvR9L#pOw56E!70|WO!~>LzmvR4?T!_^(#q0m{>@9<39#O
z(02E?)1%GUV%xxgj(I;#|CT7WmP$S6J;!_eIOm22j6n0Z3q;CkT}AERm)lbgU}%&Z
zOz<N)mcIC}JdLJjNDv%i!K6=f8&D&ZgTC-tGXYzJN(?w$0nMixh?&(j;mnT9I=(5r
z@ny4;S@0F9d?G?Br5(Qdf{8#)lJh!eU^os2c5f|UxbU{d$3#>OT(jUc2iLDeH9()D
zN2=U*KCscbgT3SA_rNm1xN0Y-<p{vEMLh}wH%?~u;z=+Tu{Vi;cz_}aX_H`6p<7@?
z*96r3PSnz0LLTzx<eRY=v2VubV)TH8kg*R@b!IoOfoY*-2J{@<2WJYdpC~B0uhksd
ztov=^=tTY7JSb9TnPP9ZS`?hp16P@8MVU^un{okP#5aPo#^hpyOc;{iw7!_0+hr^J
z#UvG8<Mu1u>=I<c?3PImX;tFS|NE_9)F=enn^BA`l!wWjXN(@=$I8&4^O5j7fr8TW
zz+LOlHJu!)Gwj<oN}xEiKts0)2yl_|6nI!gVzIYH3Wr3G`#289w@U(t*Q>@1Jq$n!
zc_*RxjIwNK#=xjmE@M$aX0RQ)tfNPptCdd^NorwpX;rJ~lz#B6=0F`Bm0mAUI<?PB
zb-mBik;>k+H^Z%%o7;HRF{UkXwKbfqGQC4KTx>c)psw7pykQGrN0S-tV3Q5AE$T%2
zV*yb)p=~i;<irCNI`n$^Q*v&msseyJ61R$QJ_TU8)G=Pbwm?0u<K8T|PKiVGikpi#
z|7Vd;r-&+LM>Ig_+!llLB-s8=A57<4Zb{EK&@m6A5g47)1o>@OKr&M{eFRPZvuQ{0
zPMA$%F@tLGVrpKg3{oQdB+JXJ!Lepqe8tYHLexM<q8Ms8gn*Hz>5H`qzsO&c8gK_l
z-tjq1LJ~~-p=`$_Cn59va7Q{&RjgZqjWula%#nk(ncbpf(&SN-XNXCev^{Plqg-nG
z%h!iEg+5Gck;1_rl$!*fOpKr6OWV8ZF~|C=dt8Z<y`pjM8Sw!uSi9cwf7QlvoXZN6
zX)rd5u}({OJ)PRqE^t;P7|YYI8msz0Vrk7wdb0n#RVZ5GXL@Z!Y$u0FC7?k>4}*(y
zjX-_<e1xs(dzuWeKTV#de3k&S9wdXttHc5o^UD#BNHn&8F<|ZcW^!d*1MJ7S%cum1
zk{;Iclk8V*@pO9kif5=hy#eXy1AC(8@O@$yo@He)z|j-61yDHrrN&kmC4k*I(h+f9
zhLQYN54P9Tm}O!gV;qQ2U5rPT!2mRN30?&zG>E#K)`$p03198cXoVW=jF-`w@K0RS
zpTww;RkI7)Yd%$oAIU(h*W1xdQp~v8Ds~?vaa$A{C;CM_T^0NQ)qNQznZyU%x?%1^
z4DRd`xp}uir~KTdoz4ea8ERLfy)M<$DDssTnb7ey5^-qnxsT~1TBKdY;0bi!vyFyK
zyBkGkdjbluGID0fB)B;%1n~RCeG8@=u@%7(AGS>OsxCI{8fbzhZ9YyhojDUmZEy%t
z?x)#96#lo@W4TiD9;^mI>I~D$zC%WZxFv}deq{yLA{<|3bWTMHP7t+t!YrwnCT*H4
zqwMI5(Ul12(C9Uu+EUqG<su0aqI^FmJhLL-df3qG6f~Z`*YB2tl+R)@OX8j1+p{2n
zh$rNvK`8$>d?czr!&5dF5*nmd8osT<5dULsxJMHYQlIUGG_}G+QTX+&iHKiq6ndve
zW5-JQ2Z890!&jk;{^qK#wdz7^l0+0_fChn{Zqnwe5`RpVtO{6q|Am<ZR>bTz4opK4
z!pDY<qx9u4x3$;IGGnwrhcnhalc$5X3_W)+eNo3u$n(^x@7P41G3d!R#+j9SULn##
zl?`edYYU&P`ELj|NofS5g6Zzs0yVq7v}UJv=0W(V#$Qicxmd;^wd3eWla|&{f5*No
zvp#k;o6;vlaD|~J=4sE*T9za{?FeY<!%AlLCKH*6H0~&%`G~2l%a-*h#`C2fsVq#T
z_@5)u7=}q7ncMQ1^}ATGsU$@wECG0{MXpM6%7;YqrXuSlYI7LYg(8tujS3_%sGef0
zfY}VJ0!WuX1k^E8()>X~!g%cBK8=DTAWC<c>S`mjC3emrkA$R;;_BnnKzBp_-H&Q+
zWd?{^C~=s)J&G{?8*4DP>lS4m%-EWK@MzP@s2UiFhpDO;ix3XP4`u<ciN13=bOy?l
zYUw`HR=1Di^65+95yD${QLuRb-NIjqJgN&3QM?`cOA{b1<M)P3jrgS{4O)<4(e;An
z1HmFegg)^y-pvZ#A;d@4Ptk*>NO|NSl^0O$;f%u)Oai`0J$DJXc`q&F9&obRuztDQ
z;rXME<UXAYz2DQPAPoN<!3Nb#!k&}$fy}gy!K$4Sce_p@@?&Nl=)A4QvkvgkTvv{t
zp|rl43&SH2MaL{f^&nAaIOm-ax|M<MldE4qS|MLzs)O?%a;v$yPX<muZl~)J!o50k
zp5ip5Cd1`XAbj-saG8S$I81Wm3rQz7cGSj(6yX3}mD%-BXZp|0n@|*{(3W{wRLxsu
zmOJ9g!)<vt4}><E3{S<eBfpZ~^d+=>$Bo(Ru=WjG2;q-usOw9f#*E>5{0bp33e~}O
z3%&J6G0TOxL+_)RQ3XxNJDI~wFMvXTR$Q1CB;MBFqlQAaPFk$4YZ8d;(nUKSetU>J
z-nH66)?AtOU_(w1F)2w)ZmHglm&y|vbOnFV%UI*yxF73_M}>kj4EwW5`30MbiFTRD
zDZIeZCR^^;chIjS<?7=>*^f&eDyaQiAeH52(qkZii@TZtHcm=~q$L~TMzhY(h!<GT
z-mmnaO(`s9lAJ1R?)Gn|3kG>fcP@heU=t;b8L7;S#&QJMoMaQwCd)^3Uc?l^Pxhbr
ziaiha!Xv^GqYNPT>`UFA{~rU@UiD*GvZA;gS?&iBJic!_xn4@4s!sbST2eY)$#&lD
z)PdNCrIjrvHhTX7Rtum_wd4NAKC*BCT+(5#y_NE<9FhN0HZU=q9&Tnu;NW}B)e<wn
zHIxQVy%=|w;0T0;M!h*Whe+KD&R7^F?A`w6lX0{xmDWW&;z>dKYORs|2G6Yjz!}OA
ze_dawb&vz=ym505-_WLv%_sGwPzR4*fgrXh)?C?I*s(uC@Rw}R{(WdN1>dhz;23Lv
z0zn<|#6PFL>B<;9NzaiMPGOPCyt9-(@Occ+$yjGTAiDb-Cy1}8n4ex?-i16q`|bAG
zCGTK%cqM@J7)Qv+ab<Odn3uX~n;_^QpMG!}l_;5TGg-Y{TSuhPLVQ1#aCJacdzJO`
z=tSqY+s$#)cf-9B{#^RL31!jLQq$3mw!JVeq4fOM0tuHookhk%j<Cv#4F=SZ>23ua
zH8{n9Lgm>bJ07uPw2pm`xYn%<HMSI4@rVwtxmS+6;j~HFks-sX87PaqDb?7^$qD@U
zQy(*@8})pIKwk}}B`V^Cr=Gpz3K}8s(Nb%Ra6r&tX;u7YC*jPmc7P=E@E<+Pg^V7Q
zfdDB8f6d{~Aa@mcE0y%SZ;zDR#}p?wL1pZ`Cy*Oaf3~iE84=0-@rva%x_I^&OJKJY
zH2?5;#*S#RRALMF=3M)tbJgg$)G&!m?hf*;;#$j+0rj+zvz;JP3UuO9#_Zg%3<GkC
z<b{?2ag;ZEgL2nr@&cVoxCu(7PW*K|EjUE_3GZVi{5%toJ0##d$!OskzvOQ{dfR*G
zG5@yI21TXZnvLP)Tjnbz;Gq!uU7Y9h4ntK7kakEp*blhG6FaYm4B=w60J!^*BaK`V
z(t{PY!Y$~6K!X5)*=DLf{jd_F*2VCCDjn_EHz-!C)aTI$DYaI|+u43N;|mKkbE|jo
zt?%%s6-QTRN>82T19XJWnw6XGFhrB6<FxU(!^F8Hh~#I6%zkcS-Ze<(3@XlltHko-
zZnD_)%HXW#fajRfze%>@4L0E>m&zr^B};6Kv{X9bYt-5c#=^r|g@Fu?ul*-;0STQk
z5CAqTtstt75W%CrAvb`<w8}!io6tVlQ0RA9ISO9Tx@kY<qEemGW55SNtB}9FL_A?C
z6<vg|hWh#VAP;<l{XQ{>@wibTr{8Rx0w2^%LZ=GmvyDqq3Mq*5{(EybVeKO}Z;>ie
z31CQeUJcw{`%Fa=KTUS~O}FG<oRsqG6v_;3`_&nD<esyb85y90$2mc%tt(cy^f;58
zxio)QW$oa@h^o%<cjF<NEVgjj!6=zI0R6n$+Y27k-PC^}?tJwHQh5*Jqs`V;qB8v^
zH!cYR<{y0uWlfmTNAwZtcAQ-DXVo9XvYlChQ`oQVu7GBW^xV_apO6a=8HcbI4qhHs
z?0CGsg!0FeegQr@rt6n0f|TSt;9yvwr|EBBsF#;CHI)N3@ky=3C~@U@!ObB*;cc5P
zBXZc7a`{4er+=IHx1$X5sw9J@DFsUdSp%ecB;>tHhR}CX3Udeyo%>L*E4LjN4|-eN
zir1VWqNgrtB4mmpXWN#h2a`?c{geAy#S5cVYxuTnhd1xTO?&wXpQC$HY??+Gn1=kD
zp+gSD*!AuXLUIJGN|m$PQi4N7AS;|Xk!j){w*~1QEb{(?%80^ly^Q<6A`HPK_0qgf
z&97Lm77zo!XxNEYhbw8?k4wU;Ame{$#7jMenD!12z@Ng%t#Bd#Pl!dS8r*E$O*l7D
zv@XzwZ^Dfytxt(JDj5Va4zFy7L3gDT99vj)1Lbp$C6Z*0!*7muaNL|<#V@iielxA<
zQ_Cm*k=uFd)aY++-_lfWN^BD@IIBa&2##`DYYYkr4IDSa3Zk<jQm-F~aYdPCuB~-2
z6l8&?9WUD!!iZDD-J-Gde%?NcHj}Vjzz-qLjPzZino9mC6Jr#R&pI;2$T5`$iU4=H
zFGy>};TU~U&L-%|m<EQsf*;EFU&4T2LRo3)(G^f39BkQogE0k87oW&?6jcAuVEV1*
zdQUpMCI4|D=1~3<zws(7o!9suSnUk{EmnyM!i4i|r*An+;+tz(q;+5SH`vPZJK=24
zXS|AD^c78$uuVUvt;q}R1MuDM_Bnx?@oag{v+6{#^Y-{yzz0aj2bljhz?6B*4Dr62
zhT43HWVIJ$Xs8+WBNREiT2KPqkA6PQP|PNSB8Y2U;J2p+YqGL6#cLXDBsn}XVl~OM
z;SuoDG%LuTc#l<7>o)ZGNr^w^QX^Zt0xPFa^NOD<bkOXpi!;4l$JT2&R#-+$=`E65
zX9IUxV{G)!En6TakXYxbZYmpRS{5VRa(FR0<!b-PsMy|vn!MC|1ofO?Bm{caie=45
zJNmsLS74zuUzRVb#!G}K>hvo1Gt8xE`?etZKt^DmWOoO3q;%=rwX&L~*hw4ytC7N%
z5JMsjGlX#uS}=FtOA2xlc=thm0^p-T;u_4wrL5O~2UzsOcH0ec0>o2!!!;MuE{08u
zC6em234J<HHLc<UnQ4ATC|+i72I;nTOK(+2(&wy#$dCu}M_6H7TcJ8ZXCTUfQ=VoT
ztX0WH7GS9Hjd;@kpv24#u!A9}=5nE^Q_)pOmYyCNJBv;33YgzeEAB#897qPE{Ww5H
z6<2odS9${3|G8izc(PiH2C{`dYO|MmNNaC4pljL*?#C5;W!XHbL30>DqQL{g{Og%i
zz$Bo4<Yiy-;Q}&6Ye0|^_165Q_%t<BbRb=G08LSa-)zlFF5B4|hMMhfCO#~3PF3c5
zQXbt8Z;wQr;kVT0H2Dw@@8h`f(ZE!jz7BuNwONJ;iBuHm%A*ueRXm70Xu4jCC-7g6
zPqciu7}lOy$}ESin4!4t@+qnZgifO7E&kX3dUs=Z35{DRQ=6)c;1D^TT1TTZQ?!jR
z)rM1P8D#-X6>4(}{ts>nV;^Ko>MBuGw=c)-MeF?v0WcK2$4U25{U7BFjpB=7t{Z^7
zxS0RfsM-d!U(}6a^p|8Epu<r(&VMTmz_nzN-jT-9AhFTuXpTs=ne|skp@~98Bj|x%
z-G%#1aFz#NC_4gydU<ig#7`!(z_i1ExPHAE|Go5Vh)KbZOxiKX&%3IY(6LN0WB3+k
zZ_x6B@vDxga7cpva&yz-O*Y(d55(YPwSTDQwuc*|?gsKVs;PN;`-z5<cPZDqh(cb0
z#Y4n0wCa<pX(oUGX8+bj8-WjdkzCh|H=bg;jkDO$9;kpN-7mA-60B*pV)?$#7$WpK
zK!xF%l#p<EXoDZwzb7MhBB3jr9p+?U0<o`xgoqy->?KyQR<0$HncUnRNEFW4403xl
zGN+e?iu2@I)=xMORHLS!L@^Kmb2asXurnNPBZRGdCz*5gy!?VbzK(wkIA#E$2qQl6
z*ab-ou_wmD#C*FV34-`M5uW-%;h{saYB%rjnA&h0xMZ;+)sIS9u%uZA2Ge|Hj&FZZ
zQn59Xw>ED=G^e^^*O>_@`Gnuvsv_YFmhTm@V1C!nm3^sR!b(SO&M}2|bWH*cL$+5r
zBo=A<CAEUs1BK}PQHV1BX{@RCShI^}(KFxH8QdgW;!r*h$jMnf5~97f{LOJ?tRYp(
z+u9lOcf5K?W{aoaoxH%(=SQIGuOdg!tvRoj59OBL2ft7^uD(@rf$h;t9V7~dgTa`<
zAu{n|^Ykn)O*)|kgzlxBa!jw@5LZ@rGz3>yQ!Osfp~e2YcH`7-g4erfy(HH-%DHn<
zXb#<tYvICjKB|u9RH8}!(M<)Z6B!>ofL|yl34X~Z7OKOzq9n2QOMI8Xo3A@<XJMm`
zKo+KI6_o>YoLXAfXCfpT{S<cJQ+iQfHz$(K+<4+w=@n*V!QReU4g_KtNM~>Cb{{4{
zJdGDO)}~`Aafx5$EoG$@ROE#JMZcK8(fvBq;V&MpGzi3cQPd)R)9MP_l$0f!o$3V<
zRURUiPXa6uH-<;0!A7`95DkS&Cwq&O*f=CO(g$$YHGU<P&h}$x@UAt6ML|kDp<Rl*
zFnwg#NH&h)iyWmm>gj#>gJGZg;~~a#M5}f(#uqCES#!e>V&0v;<X`YDO(9lm+2~1K
z0*S`1Uqqv+hua%_9=4@u;qnfqu|>pMrNH<`vPe1G&z$2Z#=}fdz%~e$-|oSuqSHK?
zV+py7B7p!*;a#~4#Lxl1w^5ihYvMIaM6QL~CDc>;N`c3xF<BW45IZkAP4<g)l2pj9
z4bsIsrR1A|;OHm_M~NNR4@|cusH)EhbuxPx5Nu$6+}p=}>ktJ}|9REsrIBsi__EnQ
zMG>E<)Sdff)v|KrKS2E$>79>X4oDEE!{Fl<Qc1~X|G}wVrTxib!w#R;Jbt~OdZDxt
zHCOSkntjX*Et91uu}=G|&J3GbkepzK#WrfjbONOHT=zEJheYT4R?_pRaB2USN=A%t
zI(Zn-cc48t3}=r0KONjxb*LPGJ9S2tFa|8;h(UY8y$Ndq11-_U<WtZTk^RqLU&Pv_
zUZKU%y1|#kjuxpYq%I~JOFQvJhH)JmW7EK#=F&QNZaFaIZrVSxiguHVGrdB+`m5SE
z$yPl@@5<Z)Xk(YR90$j^Sq|sx-aUI3nF-N#rL$M-EL>0J6=0U1wzN`+Fb(2;>yxNh
zef3f@`r_~%z-a~L)AJ>WI}g+Z5SPYAi2YK_!Feq*G$r?jF|4~k89kF`&=KUKb?r`G
zXf#>yC2Ncz+WBT+>yl39vfkVW<!RG^Z1cNODuW79iMv=QlA3^P(l#Ud8ZYn2nj+BB
z*I=EH8M{U<mRt^)YC14FbHIx>$mWv2gKY^Y&oBx~bI?!aSQ**g9s}X%LoQ|@<G&uB
zMr?{SB-POc`gh<d;q*e}&s#PR1Q~)WTNsWpcfDn8KPj>ZdM7ScT1>>PVWdp6bO&dl
zz5pN;Eh93(p$2e00Fe<xr5PP8dUrP8{6$-JC8>&}RJB|zZ#{c)<h9)J(qk6buM~Pn
z^++sn^*O#|VY6x@-dfESXD>Y0?hk8Z1GmcNe@5nhYxWs8@UMmD0ycnHF}RoV{jX0)
zmcVTsMyTAZ9Lrqgb^=XbNFmkTu=89&0_;{gk6SModv%~l)IJhx&My^lk_!%Jq4V32
z+O@7nGj57_nbg}vZ@0Sk82sUUzZVetVoQ$?4{*bf(+$;spFpud2u4NQs{doNIB4WS
z<ACMw{JW$mPK%#pOMd#Cq<*q8!8#5?R}DfjiVZnNq!}w9n8l)ZeRk8Q`<-y&Ism`2
zl8!8NF#(859(B}Wr+E~82df)4v6{BZuC17WAE?94&>3j~GC0Ogs0uj)2_;#Z8!R)r
zr?t$pM8jB*8U|&^ee*3XJAo%u*@eIu=galG0=s2a%*73V&+_5*2#tn6b@D&Gd=;h@
z4EQ+>@76idQ$M^nc(;J2rVyNnYW&5JkJb&P?E75ulZs%^#2E?_iO|HTJzax`$5#qk
zO_BXU0Pr?^wF2pZWAS!1p$Pa3Ks@|78r8zlV|F>!rQJh<kt$MClS72(mQ^D7mNc+M
zr`^TF^hEf7IhDI54JMCy*=}wv5?6X3eb<5Cl7p}KXqge3sVyDIauXVj{;+tIL1Ie}
z#C|=)fE1Bd>L`nBA3{=)QEgBKe*YwytAUs{+JMRMr=!M0#6k!0POg7<0V)g%+%8H2
zZ5_TA{eu5?GCF=X$E48b#WA8;sebP%3*F(ePDe|R*i@UCFv-BaOG=>N(M=L8FTTL4
zchQqA7J-UVLr{^X98X=7DRN(m8f*>H1X`ky%N9LxgpL?r-gpLqLu}^#R1W?q=<62#
zN~zFKN#Mo=sc|g~E%1Bi=|cGyS6VYC*V{==m;%PO_UUk%-QW-Qh&<2F+6Jd9Lms(p
z;V{nB@mZ!&+6Q3TTCJCV&5X2TyX76;YpD$TXx_l5J)tt4`@M1j<Z_Mcxp7aExYpYT
z^e2|dYIF6wcIjdLc10Qbisec;i#@oJLI~Bg#^DLI!-+}zJm$@lf{{(Vgl=%oll7hq
z9nESMk;{|RBf&0a)w25d6ZC?H&&Wek8yYDf?M=8RA$8aW8<uwp=GBq^$0)ZgN8;yB
zm>lWVk%l-nuIoQJmS|BQZPFZC%A^BJMfVkay;>PORmalHf@0>MJeEHY#~Sv{bUQru
z;Ku9oc^jPi<EzMA^7x*nri#nws`EH8<sRgc{xxFGbx;myRT21c6Z$7-i7o=29vIGz
z!)2}An05|8b1YK9*p;c{&l#sc(m_hxI}ha9*4mGONoETjswPGMOeD=*d+_L+8DpBs
zS*TAvvfprB)FvsCnmb!Q`%XG0=?b}F>I28FCk&S_Y=GDi?bU`;T~Bv7GgOg&FSmKN
zj31ScBOW$A#Q!5yy8*u&=J>)qmMsyJ%ts-crCg}IvBeXAWEUc038y*r)>48pCS_RL
zLZ#A@zd<=Ko(Im%nopUH)W>C)0Cd+r6=eGlo_GP6BSMXPHwZ0^FAB~?`2Te*-F`t6
zV1@myc%9z`b`iE2cuH`znu}T{F9~4<qG4Q&C?n7^4II{+v@Jd%SEWPHA}cmvH5S?R
z4DK$D3`~J{;r&h9`NpMGaunx0>Xj-C3RhaE;kQGjx>I26lvNFvq68myLfY3srA*v{
zKV69|Pg$TWze)AZ*P4kfJxWTWIqi%D#m;?G-x07NgTDtq({T>b1$z^>q&6JMrvk`0
zJzIv$7Q!j%K?q?*8Dql?v%%I`H|C`!<#&!m|EaGW29J#NOWP$y`DR)Wdq`wAY~k|>
zXs^6Uh1r~Z@2b5Y5z<sOVLxLr6SLswi16H2HuH>diDu2AX|&Vxk~V+IDy~fW`aeEy
zz$fhXo)9S*n|K+!M@B#2luJA0AJw~*>gGDcMhJ!dryqwVL8Md9bV#h-9i{IxS8qH;
zJf`1P?-EG53V(_dunWz5kNBf7*_cl3N%SZ8`rE>Zz(?%Jx`s;;NOTy}>FJLpq#!34
z1IxXK4fvb699RFkX&b8?$H8-+t>-0FLA-YN0<l+BCclpuldN9t$0uTC4{z;&%p%#+
zfIN1?Q@^SMa3kg!z@vwOakTNZb#W6*g`(}e2dhk+E9|1%N*C1o#*{b^+r;asYuLH%
z{znr<zCjwFJ55a{-fmdfNdsdQE(zrv){7<yfds|Vm7G-#18Z}OW@4peeW8rDaEoKs
zl<kpJBzlz#wi}Qt&uTV#wv#-s)hFNABN88;(ff<uP+l93gZ3_TK4XI3oE><Ep%}(7
zEzl#tiu}{mQqNNAg?&rZ271r*Yg21M{U!&|?*U%rKP9@4i_JC?UJ!)$p_<kQZR%AB
z8b{oCiX29HU==TS9~Fyh$o5Gr;Gp)$-ho26q}16D-YIz3Cf8qpeDOK+B~~5dQ8oX6
zha;k}*TQ%V<PH%IgQK)iI_8h?+ac>d8tHU~!Ba!(YY~hB_DN@-)|L70w3mwMp`;Ou
z{@9+B(b9h=S+Tv~UAI?n#Tqt2e?PDHDB;x2kRoDeb~LRTA{w9z$-fkDhkYJo05e*}
zx!ezg4Q$hQ2R8(`zs8d;PyyJ(aq0?onxQ9%LYgECZPNlvbdXFT#obN$rs+CWy7-~Q
zG#h?F!C2qGKZvoA98fJQuvNy|&b*+*zVVR}j!wR7Jv8D4Nj)J~fVW+<E&W)p+6}ps
zV43tcnwg2VD_R_l*(m_zYOg@av_p2C;+uOo#+-eA!0Dc42_2z@0ZNY+ozB)fU823V
zsvH-j`E4r|^?EL+&6n`rrx&s$@UYp(bz|U)u_ReknJ=WJ13mEjrDFwSF<XcXN+!uT
z%`qZlKCt*i`v<n0!S>>gaCdoWVU~&(ye^0j>lYTYCg;$~_l%ly)7T2b5HNJts>9p<
zqQ@aA1ipVYg|FeI;uwtNTCFwcyw18nc2z~N-9N9fbzYLBhVG^=pJg765A?IQvnC7o
z>kGWU3hQ0&DU4a2V5W40y6A>zpKj)cKW)y<riOU#LD<yUcjy$CUv9YDU}2y?=t-8H
z@=E~UQ17>`xq3V%hv-|MUOgRnENjb~^}pGNQx8^FL$eKtQ>CMC6Nd0ta*HUjgxC<$
zIm7PBc_@}CUxcxRL7DjBOj7#gzV}z!lApE6EX9y7e3M6UE(_GvLR)q9v;Z#S7=Tx4
z!j2FXe8w<`m^H$aU2hb1-smsPLMhA<-WsDvzT4$gxkaZC{S<=aqsmkO!q8H`H1$a`
ztixcFYv7>EYD9dstR_lZS{&f_NCWErgDlrAr@-H%wf`*{Qz^#oQ&w$Wg1VibwFEVP
zHZEMgj+z0{`EwjGnu1Ji^O5(IeGW?>JPUwK=E;}L0iVCe>IG<ysB#zq7OofpO_e?B
zfvN-@Hl-@-2^2gMHJ1)LG|>JcR+1#$vdy8kGspYr$z780_!UQ<6A*AFe^06mW*6~B
zr~RVHhW6;^Z;&UMXL%$39|fMM!|^WSmrxh}-C~W8T2+gSfpCoGCV!bpxk<*H3cAr=
zacazWK#qQ&Gd%h~>GVnT9&<6lc}dT^nkmq(fRoXQ<?v@G&O;2e4rlMa{@*=;1*K_R
zbi7aMiW`!k5<wX4scS;0?)Y$Qd{y^p-NoDe`h3WRzLG6zckgU3_0+3pj{GhK2qa3q
z-)7!wKj^}Q{hj8)M^0jjcGF9D!{KyFpZ<SSQzOc!3uk^CnGXuQQq+g%xYx}HASt>s
z`pW~*3|u_s$&4EvO2$o`9J_(Ct38TbIPFO+b4X14Load}LqJSoL_NLSLDIN3M=_G6
z3KhViulwI)%j7>F=z=p(lDGWw&t4R3nG3^~iqcQM{HA4#(4>R|SI@pGJ8=^CtP(8P
zoss3y!FyTljgqDyJ&$~(_f|`rR(Z5icCJd6EEq0;j_xjok1B*d72_aedg0wgM(6D-
z`5lN7CghYD$8!1Rr3hpZClbJ0^m+aVM>LDop8Q<yNF`B1KLb-lE1dU>#d3#%98Jt?
za&Py!wFnMy;~<?yBwk<_mmDb8rOR4Ude9uI*2*EYo>{#4TXSUC6QZ_RR*;QIhfpKc
z;e32U;)5Js;|_B4wR=+pwsKv!fg{z{;)qvT@AjLZ{;r{XXPhw&;mU<N6lQ{o@4XQO
z$pChAYLR>8nM18HF~1?cws3K;yiz}zkB`O3H{?;<eN>iR9!!$w8N+2O#jYWgG^|IM
zma=RJJ+s(87-Y<r6hA3n*`vb@XuhD5>&Pi!rQLVWII4tQ=IWS=oue@UrHs-jDnGFm
zhP*dLhgvCtTY;v6-%)7DPV!0V@NraAohU^fJcck}AGmt%SQXy>#E+O(<J|ovrTQS?
zN-Gk6f`%Lulp?I<bE*o=F_Vy9=rTAZr`NFgvFNY!#s+-0?t{$}nYl>PNETa8T1_@u
zvJ%IPglI_m19n{*NAQJ1K+BUO#T)|rJf~Hn$^ZBxA<06bveN_hUM9e4vBz_#vlJjB
zYtrBZmeHu@$RET1yPnOVbdf=#w>C&a=WipCpZ5%_YkUpIgQSXS!wj=u!-y^&<+%zD
zrddBYLpmLzn%!^k|1PRsz&`VVsMF(0?-Q;z`VtT0JmutfHZ7l>j3!29V?^p~W>fs?
zVU%Wm@h+$+XRaEpt}tTNb6e5LI;e9;W8~>K+z;X&h(PDE&R)sv<1)$TB&NeJbi#p<
z3s7gO*WNMdE6zQvgTD6ukBs0=@wz3Q2aGomS7-7y&(HuxR!LQn)rru$%}4cT$zV-8
z0^)%&$AkH7IEY*k_4fXSEsq##!<JNZq0X2T@r$N{V(3A-OyC@a5oEDPaF;5MAE+)S
zu@FTr@^HjayfXH|l^~L2Qstf%JnaA)x*Mk}?%ohQn*!FD3A8(9)a;m30WBU)umsoD
zBvr1EX)RR`J`&KIFNe=p_fTG~W#Kjknk`5e*K4dnQ1}FTAYr-AH^W=lLvZj1KAI%T
z2u_?Ah*Dthr%y(B6t#BKevuroKY>=U*`<7)zH;v^6l>|(`y2w6hvw@`)e8{_-x@Ph
z^Kkh^ce;~<j^T)qoh@_f@y2&j^gg7fl1s!yG}O-cLZg;01gkTg1IOFyr>AL%FG=m<
zy6yw#*}Qa09i+sG!eeZMJLDJ)sZQfE)Dj$-ERu*sdMT?VtEfVc$U2|HJ=AyU!NJaC
z?}pX3iv|=j7d4BUz9<#B&V<}PTM7x&A!CV%<$a;~X!rPFO7zjSbMrb|#1W`{S@zUC
zIp6Z-q2Knwbe_bM$Ba7P{2Gzo1}u>_E6ka}&CnLW0VI*WI&vQ>9!)AmJ{V}*Ai(>g
zS|ct{VJ<q!O9|15YF1CbwkRH@G;9v#iYl|1c>UZ|2x#N|ODkqloYpWv|JIzYKX^hK
z4PBn+tC8yrQ2z})y=biRQ)hV`*s(lfF5r_;JJXoTM^o<%!D>Kxy<Z{uy3l@p9&RSc
zl{8t5(@sfsrNocIAcj`Czm)P@r`^Xu5|UeEqH-fii;UYkzY2v1Bd;3xm+#w5SFYPw
zy8JVlF;AgZ4BM)&B5OsZd*?SXYi=9<Af~5Qa+Qo>n#(8xbW{n=AA*-cC|YTHs?3|h
zXcNCW22TFb=EX=k<X?QzD?;SWD&lg$lmqKQ10)dlWb_D>37ttZN1uEW{9S<dhC%GC
zKaFG7PJSf63SpRs%DX#28E03WrT$m$0C?KZ{%fndS-T;a)$vS`c)Cf-;Q9sNY4>)Z
zQkXO1RV_mOTS4m7TpnZHn0&9_n(9`doO{4%2Jr&&Q=cW!gBe>aJvOHWP!mY65OIsa
zbcLZBO|ARouS{`|4Cx2hv%DS<wegP7;IPu~)_bf>BTNpOa<xeZy0k@ow5CS9aOk?G
z-@Y*Wa<TRs9&N&kOY&I}&~_M(<~!uQ_o&QvHFaSh;!1kvd(O|aHUEC%VPHM5W7Vtu
zg}s^=%Ab0RX<ys-_rA<AN10>j<*>wjqpuO<5X}+~bNooH1qCg7fX!(cTY*sA!T~%P
ztej2aLZ3M0jMCq~xhk7;fwn2)I;u#nY)+^aGsF80S)L3J#~yv{AxuMVStHx!|K|FS
z3ki+PCnE0*28&+`jj9x5aD?nDo0X%xpI&WLmbz_J={5}cu;w0==(zO3KOQwA!Bi@~
zz(!iyqu`z`8T252Gp()sL9>Y3;cfr)QcruDgSTlH(DP>82g|)=catVS-HBI*h@e)=
z4GUcTnt%?VRvTeyclvx-D$!=`k4t>am_$AR#xRL8-qVx$#hEF$UmV#p4|pSiMs%#f
zaHGMt_MlaL!M{KH{DNu_h1Ld|7P^Dfk>YF8@`OC;iAa;AsLN~G!h4d?8Yc9swkvP@
z(2Vtb&Slf~-`5P++p$?(Ch^eQ)ukf{aWk{+A+01A%aJ4nOQcd6${%FD+%t2~hAuZ7
zMq1P|hA|!hD&k-qV1v;)NGj`*j5;QOi5L$l!Xp<IN-6R#&d*o<=(U~+SoQ#I@aseq
z7z)HIEU8<ENa-U4>TIL?xR71ffFY!}oWgR&C;gT&v5`KBlSmzO+o5=+uq<$8(|2!*
zt!KYfbz5oPEjcpU!mTs?HuZSbReqxCjN&zBZ0RjSDlOsV!NIB?@mxGCCb&(6L#(fK
z2qH7orz@0!TS>#<!pE1l=fk(>S{khpg;b<PgCQNHU=`FtBJ81)=i6IR5ZZ2;+ls-o
zfR5WJA=3UPyj{`X6@glYEAfmJ^kd7tyYp|hT494h2XlJxeXF4l|H<EV?~lTHZeoM9
z{A<x42|~SC!tmi7>G^!|9PSTvhR^idLPj(R(}^Ew99%3z@<(Z4*(*%zB{v*PNFq$;
zut{^7gDJEJHh``Mj)c6%n&i#QGiRn^MaKmETQ>3-frJY9H+aU~tBO!a>u50eC@jhM
z!vVrMcc*Y1C6m)7a6u$>PMSu5`+xF6DINuIpgn+o?iK_}3>kO)AVm@2;?yY--jg#+
z`85;GQ@*<wZ_(XM)=kQe1|!DUfVxZ(P3n&R9i3;Zf`d<~fw@^pBN_~lAIqAxTU>CI
z#5CkE%dwZRB=`a#*NH|~o6Hu{g|Abyy@8hvQ7x-O!*^a2tm&~1ym~aL3EDq(0&~#@
zTk^q=4mZKrrPZR9NGaPgA&q!P22?4w7vqD`4U&wLrvIgKxpoUTD?~=$URUH*>7-mX
z$2}T~1ur$o?W{8`#J%kRlbH{9mS0on*%^g6gI3Z`GJ%!J_(h4m&<s$Eb(cL-{4kfG
zq!@X>8<1Trp#wW<#`r|J@vyV{#^t4%RQ%Emal11|CVcZ5Zuv22gHHwnn!e(d(Hcy{
z&&`ry8&2?GF)kHlQ8|yc#9r9@$)yFp_wb*f!@Pi@`4{A<%9+DD3xAv`;X2kJHK>_V
z&TiI;T(Ss!=0#2=dQaecl7JE$beDZ(sa9L?(pLets1dT>o-!a0rpyE^5i8c6L#>S{
z;ji8l(C8cXa%iPJsXu3Hze#mGK4^Z>7K?ReFi7#bjtz_Dz31$++tZJ~M08Je{}u^=
zxFjl2aZh47A<2Xe8%dr490O>5TQhZxbE}loPlEx@xJa}ZpqzG=2r`UO!fhs(b|y&%
zDmQ5lHY@Xz`y(Qud_oo&%&UNdYvD6pPnB={DTX9kPdx*f^NDAQyqC+fI{=(s_-W6f
z9Q?bTQ+m;ICNA+a`duksv2KSsY?V=M5*OXR0;lyH{p**a#RiexhS0+s+$)|>rj1qP
zne$-0<r8j;%G_}7@h(M;W<1NG^ojW_4O2v>uWkH`opFr&v)*&v<k&c=%~tYFqmM)Z
zZHZ2+@%U|^@|NZ-1G&nj-<|KnGewvVJSmc^<!1HePtgd?%DTv_gA$TLTXH7yq25AG
zspRE)=9VWxw%i60)rw5@3kipBvTp5r6u{zve8hoQPd#sB4E!Fh1%vdIr=K&WJnWIa
zgY(uIVy7KnmSf}6v_%HAMUO+Pahfm1ScVc~SWFU9i`~(KHD5mDpVp3tH0LvT7o_?f
zb?Kc}-MMoMOD*e7_GQKyAi63HhVMo_d#>4N<J6dQVytPS+RFmW+M}Mku{xmds-6{E
z*i3{=6N&iJbQ%&mBB35ZqS38uD|v#LJ5qfs0;$q_=Ir@~nTv|2m1i>45pMxkXAz=+
z$Y<vX>c{%(8j&P(BOg+~)jNLLKNaoJq3^#-39YAe{4FG)3?2o>=_kV<l*n)C2rpX#
z3BJhL2LsDEK^Hkm!^;n=#c_GSy6lU5j3m`~9->*;*)QDj7>b)Ew}3-_EP{BC!3b<v
zK0+$<2L#e(vWt{65^2b(J(}aS8sq}$CD_O-NNP2-21bk*7;!oYE6agSN`-REZ|QKk
zD;7=6BIH-^(K{{n?#A8md%lqD*(n;KysaIAS$L-OIDisoIPm|Y*3XL!6E1Q?eYaZ3
zY7Jv*!53C+!A2b4cOkpDIC&Q_9EOBSm<9EF#EO-PZdvpPK+SPYw^M@)2pl<XV?#AK
zyv$yx&XcPvI^}ijYYIV2g6mb#F9Nnp!Ll<b8f_}&q{#P(!4YZ7KB5}WY%Zx!cIX&|
zBh%k?GT<l$;9v{vWb9P4CkvW0Tn0^j{_6Dr4_tr_joJ-;$GUAUzz&<MT`p1Ba-m@|
zycuU(zFV9TrMWeg8FK*T`zHl<2gL}df+GjHmdjp#^Z%XXG0EDID*@XeSuxUvOD~w+
zb+}_#L{!hkMqy|}$0gYyt})!7)%NdNyhecC;}7XBz0*ZT6ClGmmJ;1et-s#1@pp!n
zp2qRj(8*~o`bKLiw5bPmE8qFGo;*eLWp?TilEbj;<NxE(yYB<(o{%#8-vG{n&ql`s
z&_M`mBZFUXJQo?)zGn82;GaZ>sMcpo%stjNkmDjaYFUPvbVFl^RvAc6eVL{WCK_Cd
zF%u2UrmX7e^R8h-)C?c?7iKn*Mt+yR!1*5X=U7`GXa7fpg1RZ6P`c#Tgb)k6ANAd+
zxB4j`Y@mOGe%H=@LLPlDJju7I1GT!bFn+6@C1p``+6?GSK(n#+O9leC6Xb!RPnH%r
z=Y6kfa!r(MB6TDd)nk*4GD98??n#^CZG!I1$rX$*p*g~d+eGxMfrhfZLrm6X@93$W
ze7<&E&8oX*zw#6mH+b2|<!+xrcz&H#OuAI;xs!sO6`Fs!<6=@3>%-p>gKEt<E8U4?
zWY-u4`DbhK?zV6PLJ*?btLa1{BR1dc%3|}e4F=_hCaZh7+P%8I`p}T1=(qfQr>4<6
z+jLocmwTM|bC=6Mh_kI=I!H!Ga(A^$jYPw&BzA|Ssn0t*wC0$LQOt6~H6|Tg9B!e_
zW9qCE24P3%?|MGSAsYj5XRF>a8I+S203J0o19#xZtL|<<(m$Uq6mQK7bnJ$=4!lj(
zV70cZ5fCrcH|YEP`9Jkn>P{<rz-(71!wg77D1b@p$4TF%Y}Rks!My4I9oQ3UF81pY
zUpDRsdxQo~VpPVvoFLPbMz(Z88Us84F38z@=xHV+^)@wVHjX;*px}K;Y#V@}if?Vb
znmb(80J|EhftW~%rl1Sn^xtqC2uvM02)ddi5U3VT$(Q3CqH+(=*GX--^f6Jbjrukn
zH2b$7gT7TaC!Bp5Zu>ATtfF++wt5$fxe7Yz?T+oYynqvBR&sjKZ|ZhKE0=*L&V{=b
z2l&fV1teBK;X);~kmGC<E#eb%3vAunU9)It)h6jLRkGpm*#Wpl_6!hWsS0DG8|#_4
zor)fO_!LRA>8x#oU|VGElzh*r3j<<c<D`vyh<1ST=lgP@Pe$m;n-I}?Ogd<`O>t|m
za!7|)jPaEJ_?5b&yHbizDSF2gOr=BivnFBaG_lf7qO0P68QjgSo{bcKPRp=tfdSGx
zyo~<_WCLBnk*XVOr`+#V$;T=?nBEP7=-1_0WHS#}n)zXVA9AJQF~eZu+8MD?^CEp_
zb&&?hNaq%#L<df6WtZjybDn}yqRDc7@{hYRME6n9E&dfgY5kVsWmR*_wie+)=#{RI
z*b=5b%9x@si5-=d$VocX#e6JTzSp3;MDWcEq-HhR^}P%^L=UJi)CuEX^Vr${x-B2&
zz#mQ20^?3@C;60Dodr|~9q}-QY(psd<ow1T8b#A-$nS1(tA-gr*1TJR&SyB1K~fH<
zN_hGI(wb){PF)D?yZ`kB*T8hHOCeQ~NvonribIH>u}rw2T{>%hxK3*6&6IydAx@$q
zYx9p^-*5oFWgoG0{@((<)OlZLiPP2Ay}m#n>ua#lzy;17Ids@dE()1Y;@Fdi?fPYa
zXj=|@5vrF_pH7}sZjMjC6{O{1(u%ogjK_0WSFgz1Zbb|)X6f8GSuu@DdmU^s#$jq{
zbP9>Vg%ABVp9&a)ChN)-8)LRfhAS%Y#hq;La#$BMhB1$(Gg`gDC$zW^<?2OW&cH@d
zqTX`DpHLBS0t_z1pB`d9U&V!RM$4aG-+u6{NMvGW@CZOk73Ttp#wt%6s>s;nawZ5k
zSu2ISt1$Gmr#GYtQ24IKZngUyT^FCFeLi1E8`fkKn{;t_ZPax3dqvX;%ZL06DxWFr
z>zRU_PdQs3+wfz<TraSPjy*;kv}U)NUf>s(2d90574UD>gI?42^Z)z$h|x_eS%4@|
zD=wFgBJA~(MbSQ$1z55*s1HS?WRvD(R{Ky;CAPec5Vv3?ek9+PL^+93+GKnMDj6gr
zZw*5!Db@5b0N|eq1<Gv!VHC$LmDMOPtVJd!Z3GS1P^WXPQ=mSknP1Hws7WjdQ1NA0
zvhF%*{SO)l)M<ZBT4s8!b-1kqjta;?7{!{*p<~9Jw`|aVosKnQJ7)lbFi?ltwx&J&
z3+NgMT#YZMNy@Y->z~IUS=UeTeol~}y+2~AeJw(L%p-F6#q{6Yy345S1i-iK3h>2Y
z<0&xc@f19JM(nntFLPGQnK?aR12vRzLk)wZl}r;NsuY~!jP<D#VADyv(%xP5Xw|TO
zQNwagRJ`<7h*;9amWKwUny98Cub>7S<M-mrF(onQI@-}z8uDm?)PClD3<HIFPOo#-
z5$B3xmUH>T9~;@+;`~sba^mFS8IpYfJ3z$0<BXF73MYYdhDFUy4C4Il+jF-<SLj*z
z@CW1D6BNr@M$)SR2psa5wZS6kEnkS}o0o+nQ%?CX$Y|K9Tacm1JzH2us_%^Ef>(oX
zqTQda^q^bFASiK-xM5jHE@M6Pa;IGQAFJ7*63XMbEaD2hYds6dcBaF`AafCbGwvcj
z{X2kTdSrig6Yb#7G_qZbbN70TQ%<*aHOI?-q;$wxE@tirgCks4t9g_i*UtjNAv5OX
z^92%Dk55J_noi8wFtHXH-1_0{^zQtY&eb6NjTZf&jh2>_=?BSs-V9GT>~T(UXVPB#
z7ksZooWIPssA3#zXG{wM@AZ}Yq_x602X-Xzf2Rl|hG5t?2lU+(EW`e^NrRtyS3Y}`
zdM93t;?iSzaWdbW!XoJG?#&1_#o2|tVzgojzH0G=D0$UDrEE#uKhS75@^_c>6Yz$D
zyj`pUoVUD_3}PU6HaUYWJdSm4frV?PhimE*c`rA{OZt~&5BAO#Yl$P;3HGd~K(jt6
zgQmAIMVM3*>)`I-lCn_6A08pAIN#QDuxJbhM^jZ_QV+WZkdN68>H<43Lz0z;EpORb
z!~qIg*zveA27DNzt@q&x0heY($($bl;JX=vv@-^eYa}fN2)UyU2K~hPcc28&-uj>_
zY_38#V7>klQGTmI_qN&+DzO@P+K5FadL>P@5d52_$J8F=LgB+=<KdV-q!sfZ^<b4S
znM@)O-1W*z@vrai+WQ&iG(kiFNqGPp<?58mp_2hX{Dey-RZq3$U(JrrQQI?lj&gHx
z7wA$*gW73OeJvI>yH<cvFH%l1Me;;hp->JeM2_(hRyBRGe>U7`%Q}vDTo$cEiVJF6
z1emee$iCFRq~z6NG-2j{XA90Ed{`u@^99v+vHO26o&Jcra&1)!BpLfw8i0FQXeimT
zN`Fug1eyj9WJ8~=vwgRW3@r=^O1@7%PuK}Wx`xgIrBcHt*k#Hn*F}T?<m=><CHeuL
zlZ}Z#%M^AhTr*>XG#&Z*<u9UvUDLs~9vNC{%Ub_ykY}trZ{@P_2bae0Lk4=yV>y#O
zjvq<*X#^%sbVeXndKEbtAtj^`#s|ca3w<S!5nmvLY2QJNzzFcA9g`Bb#cH<vVVR@H
zRKl1E7Fc8*C3kTzI8|zA1n%ike7?4I^bgoKU5qR>x*H%pX#d@d=<U{gUis*gN=fI}
z8$gPa6P!z3mGKskO)D*xBDN@H?#1mUxE}Ut2{ChTtue^Q@<3vD5q!#rLvSFy><teu
zD%J1%ib&JC44SELYV}%X%A{g8t*ajj5-UOt`^h>Zu4wgBE8~gS%4SoR?DXp{tN7~i
zbo+$V<2qGsW#>Jr0iRS%0gps<^%=EKC)+8^HOFfVl<+jSW}_6V03V^N(|^_Iq(P{3
zM}XI|r(&zQ)B&szJ@_!Z-7B#J%@NzXW1Nj93zDKKkSqRU!l*}$zJ=bhEU1nq;puM@
zVYW!c51GA>Ny6;ZE*daW0OYu$?adWigv``S1Y$G5W?guia>{1#u0}3tNr2xyDFI5S
zZg?t}x83`VZ<j)fYEO64a=TZvpI;P`Z#p?p-ycY=jcsR%wJo&mz)8ee%pU>8-W%5G
zNzV!A0Y;b?Zpox~lcfIQAiwB5)X@5sL!hNCL~vSkFrdTwEc8Vec_Nous27S~|J*xH
zPWsrO8J5Kil8~kb|H`~+)pcsRjb#B0#6B3IcYhW<dEFZ5E_k^uke&9jLpzrFKFRG~
zz#GxnQ^xR-yfk2Ay?5h54q@LT;iB;TdfH3w&73-&kuW&BSo^f0O3r;Y4lIft?(i+*
z?RBGqO6_rX;riS!Dhe?dDn0YTbiGy}1TF%d9Jx6K@jM_1ov5TE1eH!T9Vi-|YvSC9
z49?WY%0zB}b)ZCNMz$Eh*G?TV*lViuYKfpjaM+%0_~HmNq6GWP{-9I2r0xD}0LN3l
zVm2@Pnp4+;O;^urf{4OSYEh!U%1^^>$#(_0LmJG7pbH*aKKnSkEDS4sEKk!i7oU5+
z#wB)ELFu~Wa)Nk=e};vInehS1Bf^~OkaL-<3n`SQeS|7W*?=0aMCK2bN3#Z75@vdf
zPC5(-TV$zjZ?5Zh=H0xQhJne)1SiC!XNh&S&JhLU1lOA!_LaNpy@K%D8B$=B<&cNq
zCxa8{?dOdn1))o9>!`!s2LkF*wUo-C_%NgwJS$bT4``HRC!Y<dp0ACb@O0fOpAkw8
zP7d^&b@J)lmtVNON)B$RVFHO;X-vECfei7~P(A5B46XfrBNjS&X**<H{DuJAK2#hz
zlMV3noTe#Lu}s*eU+I9nF~LZyij5hx3=33%LkLFF!}eC2$TN>kw<Q%G6O#vdNbtI}
zDE-NYr@V=HQa`GaQbCwYIB+;qi97Wk3zjfaKIh;c=8(5Oi?`=oY=YF6G$J1d(Lgvu
ztqWgOaM}@(HEM)GmEdaw_#IXI+ySn1_QP?-Utq{o`fci7a1>#hJ@SIWZ)Us@N^5kp
z>7H59-6K5{e4XU=16wH9aL~>}>%3%KxkQ#H2v!WDK2u^(MNy~7rUreW7j|`vLLK_8
zN7rGFRmwOY`dvMB@Q95-q^brdUNVW;_3bG3U6RCNv50e(LBrkCIWI~sZ)gZ5RsUab
zjV|amE^5q()Su^NkdJ{2vzlb!1&t7>ZiVaBv_d!!KGaix5?0(bjQwnXqP+I@t(S_N
zb+i#qzwTq28+YeVp!uNG`o$?!(Ir8wk2*()G#%l|gFVSwz}%{sSc{;hmd%DO8=A3K
z8ypnJDjYUvM$jfCh$70kmG3#4uXA$cJp4z_SVb}#{w7REFFO}#`LR>td}S|UX8K=~
z5P!ioI7?!(kEQsCulB5#?V%)gLg`Mc7ZZ_<yVd6>JOR(i+a~A<(fp$>B;-A78U=nM
zyRKI6(hq<9r_U3zQ*TeD1A}CR>z8njP++cRZJ<E;EOcNV95(KTuEio5#3Ku?Kj8BX
z5W4^Qq0311CAtR%VnTp$(8i2~HI3k=R^A*)_IydG?ugl;Q=}QDDCa&!hnZ^xWSZxm
zDIH+QG!mzZJM|7Ei6usX%<Z@cYH=%J@Sy2I>c|ck2;!572l@}ujBYyw-DBYrO;yfk
z>t#Lp@Ej<R&XUH)#7^aK)~X6K-pE@ZTJx1i(*oEL8LMdc=y<JTz(JB_RIMyZXpuGo
zhxC#zeg$iL7>y}wF~C#Ym~c}U0@J)F$k29y1$`1ESpVR`_v&AZ*Jb+i^MsBOpyufA
zd4{yF6iUMsedUkrvbkGN!768|{$+YzHRcHp7JO1@hg03jx)UO(o^3v6o25$~nBoVr
z!(T}yAB1j9TbA7;Ul5)c){_2!xK!njp>w%kOad;(#jbc(V^HY^2_c^ky0CoT7qG}S
zpBwfJkNRdl+B~X2ejr_CjCTraxqPTbe;-=i@qm%)Cov%nMyi7<r2CCh0h{q{1}9$*
zz}wUvXeoMiXNF#Pu=*N4&nB11+s{Q5sS?kHIhBPpKPD|Nk=7BBbT-j0U8xBRjPMFt
zZABSUn|0#_CWM(cq?i<|{heNwT=AW6HcOXlKbDC+p;digRhIPC<-a&lWC6Y-u&5(e
zmXpOF78?P`REhwjj<)VPYqM|pWkX9EHhAy-qHUC2z3-~-3*={J>!QF>{hbXBAM&78
z66uDSeheA8skk$M>=N&C9=CG@ou#ehd|fq~ObbPo^8nKC016(AE1}KC6(A`>e;D5y
zKf`nAiMA})-yw3cy|HC)8FU*`3|(Eh83AM0SCoY)OB7D-Fi$<k8IYa84JQlnh!zQv
z!sYZu0t+`Wo4+zY!eDRtGe$&+EaEY0QYxRFW=s%_oq!zdg>Om5;=}3?E&PW1E@WUd
z$$I@nFOW8UI(cn#A_y3E07U#gwY!Owv7H?9qY>YDP_4kqc%%o`3}>_`hQcF*2;+WM
zdtdC+t74TR7;EW@n;2HYQxj?Tb-sLo2&Y4=d_lWqU&iULdhm&pV)(ZHqO>{c6F5Ul
z4ebbVpDC}+r%~yyALE`37pWGg6<a@|c~p?1(r|9^_L^Jhe}@FIl3mp>vz7!$TJ;M5
zz=~!8V;bx0;gI6ER^Oxsyf)#p;A?3YBa2Kty%}*;v_&<}4mb(1)wloe?hY?Q_>o;<
zOR#UC&+KiZRACR81z}@37n>K36mTyL7jQqMn6=RLRb9LL;lE*oN&|6I*|*nV;nbmx
zx3lZy#HefKi_@n`)xLn=okpyru2v$=Nt9(T6Z1qBNy*g0Ry2kLCa35(oE-00DH*H<
zr|;obGClvwAx<fArV<C<D^@|~2ICn}>jL(H|8WtaW;S41>6Brr10giaGlO#54^cro
z=Us+v%gpvT+AQSaN5N1Lbua?y-a4YfClkRt&;z#lpeTI7J{gsDk*bPEm*NFYg^h>Q
z0y+9_4c58OsS>7wGBDQ=U00?s%!xbjn@9rM8zmtOiIL8n%+05P27n`tfAP_$X9F<a
z&IxLRWiiu3KFPmhj3-$_Ez9^e2B+1`K<Z)Od$9oc$oZ<DA@)}*+>0jDz%Pp;hblp?
zcm9pbQ7Hb@qDixv)6`izH@&&uclUk}_9i@NjKHFo)8&mO^5^FzW58AVM|r(DZFvU<
zk_G*L*)8AJxvaNWFz{$5yQrbUkYYoO)@a5m3fNBVXFoMGE)j2DK)qJUQx(s(^Z%Mr
zWm|mbeQFku`bR;~2!J4z_hV7A{)#deEDl8td}zKI`89b&s0n2TMPT+!;{}tsxA{|_
zeuw4lEW*qvBAZ2G!Xe9Tc{Q1I>!;IG!ZBhKG<^^~AGetrso~lLP`w_xwFp0?fQ-d=
z2!e+PBFhE1#A8{5iZLv8D!WI@)W8}^9EB?p<ihI4ju`$qLT>0m$NayI@l~jRuvx<#
z@f574#w=#08#jE<mXK$LZYR38PP}-5gtQRO4M{45C5TvbcqmYD%SDKRQs3n--|nGA
zF~$8d9U(B+5NMLiHX7V#3ksm1m5cf+yg|XuCC&KtZXh<RY3O35{Idke5~%jj(mKC}
zH|ExnAe+T3iG`#1m~BIbK(QcNPhI<0c0NOFHuuP?7n?F4IRNV11F)#`SAIq))XQxM
zXWNaxr>5dy`pE6Je$9}X!HfLB#sh(h3<-%B7VjjkRt?jUpKAOBFlqKwwvA61?QZ61
z+)W#JXwDtj8tvqA_0Sn?SLzJDh6L@7bI1^!%Cj>C0Ab;+4?`SDBBBP>GX=fMNWu?f
z{?QgoYk)?{sYV+&kh6z7gvAp1R$I_v_MV8C-&Z@_3?5^DErb-MFaGE2spA6;g=+C{
z7yGg8vKW`;rjK7*j{Ja{;gUQ9JR$d}Le!#KslgyXSqwKLGWelm@VOz*3c3`R2qDwk
zF8mQ<-!!y~4VjnIay%)l#r(cFx6_yfG*_pv^Y|lBazZYXz?sjLzDo;o*S5xRQeCru
zglm!)$cjw%{a=l1?u4mp+9vz@de<9Vq##`>wHSt4@~%)}U@YO>xPd*CFsxg>f6<mR
zY@{bfRhCG|nvqj6{o&v&dZ}2{JZp(i(cmiib|B>sK9g2F+Eyz6|3lr<Gptx8z?`a=
z_)0Ms((#Cw2-<8B))Cb9{d&JuL4bojf4r4LK7z2qDz&4>sRE$n0U7iB7n}L|m<CPW
z7qZA&0tMqj;OR@|TrD**W7tp(`S3bE^8Qf+A#8qX$edWIZXZY_qi|HJ!b&lYST1@a
zm^FoaH)wFN&jaEu<C#nnwq<lZaZVqB?N}}A@<PQ?>WmTsT|L(m#o!R0Q^n?#&|jd}
z+Rt3f1vSPkfTUt)pqlXh_Rjj5f)zorIieef(kt?wZJtItkQp7X7$q)_b-(IkmPrO$
z*ll=+QDJ!&kY?W^E3yD#HSakzMxJg>fOu)C@0XA;lp0+5cwa!__MmFN#pHNYn2Qms
zb}OwTH!`%e0)ONd_4RDV9XtHC+qAL4?shjb4eCPgyy}^cT=v7Sxf*CqxO!HvPc6Fx
z1W(SIv=;^5%~B^$Gz2NK&H+xGI+3<U!A3ElWQkuSfZ}y+s$?ai;|+3cVs4%zD`u!c
z%rQ~35Upz$`pdjg<tw+>9rJvu2gYo-X<r;uw*z1=)&`N7P0um#F(`z^x$~zgSN42|
zc8++PS_w#vk#(~NF|5o@ka63~6#PO;S=^|mQA}%|?3-do`qT%o;V5S>?#0MDo7;Fd
z^j6EA3z!cS=E2Fa6Fi7yT?6-A0r4GQi%w}ior@OT<W<{AIZC_os3$+kjOEFVcW)F(
z0?O+vL6!Vo-KxH>p@<af<O2}+0l9nxJx6ARYW3T1eD`^njkh>Yw$9e_O5y4Si1OKs
ze{X2Fgg~K}$nOyyVx-+`A#LE$1i9FU<<_x-`=IEqv|N*(iad{m0Jc<U$kG+b>y14}
ziaYyU3y`wl5<u+-?%uSmczzz6srVf-RroS+Pt2#2yem-l1O2<(0{WZT)@cYo<}Lr&
z*+hWV5`w8wbGA+{{CT6l%i^n+Ys1vwO9#z!azb5W5OhR1n5-lkTE+x77p9OaOMgI{
zoVXdO#{W$u5jA!%uRldhmt^JG!O_r!f-G8zt{FQx4fgKjYsE*!SJQ_D=Ri|ByZxC^
zRPH^aOpaO&%-5Y;o>Ru|eI|VS&{pR;|7pJIO7+~bF5KOP$a*9$bR_6;8{iHZtm6GT
zr8EKjr%DR-LW|-LY^fzYhPBbJ|K-t|kB~BtHo+u8hktu|iRr;)mc}v1$2>7A!dJ%7
zNqW%OTOpyE`i?@FH@b<Ei;F9Y`*RynRI>om{_0v$*nwC+GbK-8Mr|sZiJ5d28WlX7
zu^}0h?mUYV&dw|4&M&QW<EEXGPTj8%mn{AO0VimteBXC6kJjWTVvU`1#@;=`KeU?3
zN&DpV4#CBSmP!Snu=ko?nTTC3bypbp@u;j?8sDZQkoWm9{kFB<f)xG~$^=>AH_WdI
zz^|Pv_u+hnF0E?feZ@vNm@sDErhskM9QMBEolMp0WM}K)j-Opro*8@$e?X34c6U%b
zm!G{&*Dx5fU^QmGg=H>{E<WpbRoQ11Q4Fj=rg7y`cFXl?m7#+qZSeqiJ6Hh+KOw^x
zeuuqK{}U8@GkLOEEulC8{*6>`DCB36%kcxNdMa#fhx`Tour%RbUhF(}W&pV0lmY}_
zVx-NjKl@Ht_O7jR`Ne7aSb}{|pAI#+vc-Rxe7AXwDt=dq3z0`PZC`zxCCNwUQ%M>y
ziG%+3-C6kBTFu&t)C?Cklv|wo>DNNzH{<t1A!p^hC0bsQhmCoHQ$$!c_-c|coELLz
zsIaJ#bg$~8IQjN+9f5IMG80_K=tx+^@_5!<N#%OF`ot@l8%Crt@vIBNwTmU4DLU%5
zjdfICO6Gf^zvcv34JQPfc5r;k*p|*Y%sN-z@x=Kaw65ukAdVh&_vw$hX4K33JY(X@
zOfqu_B+R`tgc+?k=#rEUCz(+S74UA-hFWrnkG98wc#=D8l;rFGZsa8U$g?%&N3Bi<
z^=&w*)%GhcV*D<ouyqo&ZgvA~^prLI5J>W69+ht8$GY$+drVk3rvf2BJO>qSjoD73
zi@Tcz@>s!^Vcwc5w}7<N6NTn0w;Je%{~XpfWiey0@&f@`%+{O8Gby|+!E4#>UeH(=
zp|no?6K!tN%buWZzWp@xIDk%35RkvGv;=Lk#+=E*yv&~m56*^p8GXfiH5}A(2H!bS
z;fH&~O+gr5u;nu$q0ZVzh8wReONeUMD0P8x0+kI?M({%!UY397alOJ%W$5wdScN7y
zMB4kg+-=jgb2mBY&u}rH6duoKN5Z%g#f!xN0_`KO58C!HhGFo)Vp+oN{|JX}&5y)d
zp=F=WC!JzGWT}R&^dMg)F0HEXXvu(1sWX1;r-ot9cOJ3~8*oYa;d?tN1Rz7&*EN#?
zlN6Sy`5_k?Z)#_f2W+SIHg8G)A?`bL8zLSD6hY{IZ7)u0eTTx#wavw|m_#kW(;17e
z6G2%2E_~P!T#bF*PiuxXW1)&(B7w~kKLl%iNNEQ49YVu;=si6+eFzP^x-g!}K7x&%
zLUu300h$Ns3>M0g+ltc0my)|xV~wQXl@sGA1Gt-2qSbkmOgM(B%(Voc3(NeLa(20v
zjlX<q>eVkm<YLOTS?%+)S3Z)m?ve$8E>%VS(tax(n$gGgE6G*WQ~;>`J|`p7j#8O@
zec?LH*y0Rp&xC{g5)QvpoAgi@naT33c5*f_KuwuTbMvv=YrxG5TFq43mJ5LAmNB3=
zXX-fBVl8I}VbR^dMbR=_9&=)QbeoDVABv!f0aEdInklZ+Nr>v?)BH;_<*tECGpv?N
zk|@S4z-r^E!179Qkg!2XW6-KxEiD2;W%$0d5MAk;fimVIuDK#|dgp+cRx3#UiNhOY
zNDYUr4_wdN3AkcTOjEYagXN5U?fgu>`93^l#a>HnHcJ)F(j}vAQ=e+9wr4MSbW{t#
z(Etb+(%kC7bD*qN{1z`}DyS#0M)bN+ym3ZFX<4-~$>C=<c-o=9^s!*aOWBa*F~rfo
z22Jb(;N8Xy<HTdB>|xwF@L9_{qFBL8PxoJ3T3WMGL0u0q;#_AwSgaK-%d`u9awQ`p
zK%Qe3vJT1m+Z0qi;1i4CHHwq4fXVqJFy42sk@Z={b_pOrW%xkMZ8-Y`Sh~i)+q2O<
zrSu2*-^>Z2rKQEpoQ^$x0fQT$m)3d(mcSR}h#21A>(p{bfTKd1=C*l11rDQ_HkpF;
znV%6vWGtwbo6~X3mG$=BrxPnshT<~L9N~f&lA@M;C6!d=oWjFM+uhJV!!k+xJ&jGa
zJB`0GpNj5*JSt`>`c(Hvk&PL}KGd}odm12KQfS-?#M^ZP-CAijGVwuNFZ80c0CTS`
zxFFTNvlxclzR7Kxbl>b_Q?{y<Y|4%<D~H7lD4;wrQkuJAs0R7bOK&HK^E1FI=mu=V
znLRo>7HkL(MmQzJrRdqg4uoHd=oM3iH2@cc*Nw!Dz!cJ^1Zm-!b*OB$q=dOxGfUT5
zCzV*TO69&~pmjmHlm#VtG{N!Ev;Qmtc!D9&TYV_hZ7dx(2Qc?PQT5~%0GM3=%gWcH
zn&(JcGKElk$&hH~mhQNFVVh*6chWM`AN=FRK53+ezVCD5cT4s{;r=gq(F1>?+2rWX
z76~KAcTY_o%S+%%$&q#U;HJW^>l@#Kn=EsyIM1nScC5<IV*MSH66y@k@{$6zCT`=B
z6*gFjGCoQJwokDp{V6kM0NXqa8QRDlzY35i5W}H1=Te;o;7xEy;R7cPy-*G7s2d6X
z_6%n-o)XwNzQ>xf{B?HlHD>IXxVM?K|9WC*MrHKc1ifdgPZ149T-y0I`NF8tR0O7H
zBp4~eQ3%qY+#qtJJeWfn(@L-3(DMFMVl#EK&X|F{T=ifI#u{HQmjtXdSW2oB$%35u
zK{(EUa<D`L@~>ERE(B3-NV$n;anX76%hnpmGQ5jx-MAl&U!)-2k-ua_K@UU+CrH3|
z-vbZ|C-_$mNRv%dq1BUU6NTheiyzFnmHnozdss^t{_KxMKwQQRYsqeLmHYKfUWcMg
z7HPpoY&y_%PWW`*P1-9mh}v5xlA28*ikYiex*UeSfV(X9XwUcy+P!3$<vdL#rIHN2
zfi`9EgJm!u0?(f<3IIpdbEjH0!|DmR>R3{>TWuLzy<$b(GGSL3i)*}i>j6E-!tPkJ
z64vi=<c!Ibawkw2ZZEzx2trX<w<jFXJoB)TgtB8<vcVkj8F-+ZNKq}tSjs%J!9;I*
zr+Yo;_wik)LZ>RrJ3jgG?4=so0>X7l&ng1_Ud@B0Se2R?!SlD;O05Mt0$H$NH5#pl
z3RwjHsWfHEo@OB4H@ocGgqIC#|DY3tx~-I>7r~H1g_H#hf_UA^2<VW&IG09wJx9>r
zOS8`01S|KG0`J)vrt2*5I<=;ufkA8fh@)UlpPH`SPR1|U&xQelSY@{2dNjM<M&gP=
zGG0XWaTC915x(ir2}S}2pM%DYMGyl197PH9H^H2kNJaNpokp5!7=R4yf1sq!3=%8o
z|Fa(z6eyk%v6+k<%yy(h&+6&E4uhbyqYhxE1O)kYlYjOVNXT1_&?vt0F^HbQ!E+UV
zKcJ~+dl99LJP&+)ozwgoXy0arxZsLY1{!_Z@ZdLn5=+O5F`{n@Li&21h0c-Nh+W=;
zTd47VpI6Vc9a7{Shn4BtBAI!(33@Dbo~l80%8#0L#*bq>2_T0JE0Ly7@*r<=aIYa<
zmK`>9rkB%z*-@OTeHZsUnL-*DeBT_<R!pRhESyZTBXv5lhH$V7zEF6!Q<qJAA+!dJ
ztL7drkWtnVXStIm=E<!r#3;Z-QWr6|b2DC-@Gc1HkJ2uiYYUoMqK?JyMcDWlYddfR
zq}TQqoAB)2Pn_Bh9AeZ&o3dw{f1AZN&|>E9R+QnnFF@xJjNVX!Fg{wLl`0sy%ll*=
zTVLmP()3FvQ^1;L0x=^feZXilEO2Edn2E9&2!q#+eDVA<zt0jon{fchR=v=@r|ce|
z*$x2U&NBg`6#?qC1By@Am`Jz-_B)g@tb2+W%N`K`wYLV*ksI#F2@8O+uEt#%?8(~=
z5!0@!@B@B-OcU`;5~HBTqhB3o>LQI1L^@#n23~Le+pD!^F5>Z#pqXS`H?k369|>z2
z$=?~EFnV`*yAVS0HG9$2N8(Rv`*{Pq=qr6U$dn)lzI^KED242rP2=^vA;cYa*Go~B
zf@C`~X9}QQYCT{H`lf5t2ca5~uG1B{?Kk6y$*mjqB5d=Uv4Z&M&wYDACj})xHy|{)
ziixSYTqwcG;r9S1+o&v>;Z-UMvH#1VYiJY1a{?c~5YL`yK#h0YjDk4Y(867vuQQEZ
z)Pk_Gd3x&+f%O8ne={<8JAa~0dsdqESvqq_G0&ZM&<@gUtCpeIV3kyfYNyg<wlizk
zEZkN0E5JBV%Nw<7-L@Tq0Iqn3Tiy)@ua#}e6R7pact(U_ZK(X?M)En`BCPC?^(Y;J
z@g^xB5*=_a^gX-}JgsGGlj(>v{`QSN1T`%fs5NE3G6y9MVj^Z!Z{_cvR?^DlYg@jN
zGaH3YZHYMutswbabA-O*Mz9v;uSCd?el`s<gj|=3EZwR=k(nAPc|6h?Q20^Xqvk=8
zzwsL`vG3el7psP~PGRa}ZpXE7?{V?mrKC)f_FnyQtoRVGTP(Bvp{|)Jj6mk$ji4YR
z&tl~}99t!OGAm#vgbLUK&jj6bJ=ku4!nOjv;|-OLkzf_hFZgtl3ndqD;AQH@0vwaQ
zuoCO@6$yiuiAJfnP<tYhZEHv1-1QW8zjtdYBN(6la_~qZVhMCW2VxdZ^|@Jp%oF2_
zaE+98E?cH!t2b7@`BKd_LBTt#oETXWop*ch+6M-BR@|UBTM)cxjZ|f)UF-)$ai~0*
ztcAF3-GuJ2z67A1Vb+0(t6qy%(NC2tiaI~xzwX|PIN@7>@}JmAV0N{CL9_h^8s#Fh
z{%Mz}i;+M^y1(!vpt|qB{lAfJ3bh6C1$f}?<rm<BF&T%8b9BeBykDBISRpmgW4!+;
zq(^vipZwgb^gsnBObO9%^>w|=0z{wFtkodT?3O`UOeXYt9f#4CojGQn!aP%`Tz~e+
zK;3ZBd^UX)*JDlU8rL|p*IZDl4L7Zo$Q@Zll|-q-!|uT0NNbvuEXBbimY}X5(y{;b
zhQAz-8b_Yyt`+;x#!e&Yo7B3Rx^&AYFvqRP2w;KX=O8BhagnGs)(Z>d953K<vGx~d
zb}Vud?t^r<`v%sjXP2uiDlTOBHZ{PRW@ZhdbU=^ZYO}gf=(S-4w8>HCeFyX(-e|{^
zA<VacG$(AAJOzp2+OTZL322L?oF<~B?2Fq*F%@?rm1jq+fRzHcS<?f;9Qv2*F+t8#
z9!V54#EFNGfw3D+mRTG@IbueZ)Y34vHMS7cZyiZ<WY*rcPreQ}y;psOwA=<0k0@>t
zu0k?l+zN3SI!LDkEmVOCN}4Re+sA~~GweZSrGux32vkWuZcY;y6na~@^vIKpkp~CR
zc$8|ae6?TlX*nz(ynZ6kr3@*<&wXYKf9}wHZz#lNQlXwDtW<S4dVamjlLrU?OK$A3
z%W#M0B~uatDvR=+$&?4GVj%}(tMq6-d7V1_iv2%Leb*#j0S#R>>7dvQC&3!1=pmSp
zI-HmLZ7w6!G#g5u4spLLX)kHo4+?LTq5#WM86cAsaw0;O`mF*Wmf>e&Rwlolnau>V
zhEqhmcf5jO5fmd6aNO)+d>Mxwi5WQU`f7@pP@zM8uhE9F>Q-oT2ZANBK<>CSa-KdY
zZw$&y#|*9=ML+9S6G*_+EAo&#IbxAQI^d$mPog<EMBoOE&30fx;8}(LQ}{MFeEeN2
zZ~}<f6L5S69up)P@C3-qzlHAt1_|bS2f1X15`f4+m>I@?O^;Guh$INVBL2BB$zbMy
zP+gkC^a{$61X+a=DqZ5hqsRlAahM5%`~DBI+Fqvx22S%<WV4FD3WnSa`RVvsqb-`j
zyps?ek1v38Z(1RA6C%M5O_v4}$WFl5JQgX>Yx<*&l=zVo$BJxz#3~<xbavKyS}`*Y
zN$aj!c@g?Lac@c?(dj-{Z$oq!p=y;fI(o5gkfLIEH7C2n050xn&p$<W%xgG&Ld+z^
zsz93pVdgpj2v5AX@L$4h&adv({z+o=L0G-#Y;%e^h|**)S7+?gdkTFBC?qoe!|lo=
z1+lw`=|o28i8ng=D|#gq5;p3+e0WZSdc2{HDbaLgstLka82;a3@>HW%H|@!$Dqz(C
zlP%1;Ccs_XObw({e3!u)+sqN0N+ZA2tC`$OMDQyHS2nyMBpx!yqfDB^qyEWUtQ6<i
zlZefBMM<-($u#^Q_#A?}EIxj}g<j?3<j#-tYx{{>_0Klc@KLb|P8kv|iwf&+8RV^X
zt`Bbv+W_FGqc0%LBw0&cKk40MPWKI+1&e+;eqIE?e3l9VQF@5Q9Wp@Xj_!`JM6?S&
z?m!;4jM}tl=}HihwLr(G$cM91#0J(0@E@rWs0ueeU;I-MnUh*ds-ea=)Sz^{*@_?&
z_Uu|TWeD@aA)<~{!DA1&9e=4;IWCGnsb;@v#txR#W{<*lE=@M7BsXfnp$~nR#*A4b
zB)uC$Z6i_?D|yA)D^gs;{zS>^(-I0CBbVlIS}3Z~v71tE{EM)7!U&C7{5+6C-YZRJ
zfX<%yTCUBTLi6*T>dxiRbz2?thmFyB;jkDJ&Idx9%%)OBWS8P)P}4f`S;M|zo5~b7
zGtDp$@IYMRP<-FMoa7M5ESoJmKEM2_%Z|!qz00UP{ZB@gwb#p32aWd>oA~!{Yjo-~
zR=1fo!5v)m5k2`oF;<m79txkHH&$VC_HyV`CLggS-6-*t;S9%9uHiD4?KspL@}v6d
zm%#pdX6+~7*-G>bs!PFIA*yJvuERd?>@qX1Rv*x+WPSdP^4(r6uDlTl%wt}Y-KgvA
z);=tV=ri6(mLdBAeiy7^j*5m;=G=(Db?dP_L?Gyf2vFG)q9W-JLjd@qd6r>(RB5nL
z!*$Ajp7T@Qan*EiaP3C=wcoVj#2bgM9;Ac5@#TK}S?9DuoO|GyE*iVqc3Ied`m<-H
zOF++nKr79jxDFMUOzPfSfkBo~O8;w=gC_v+vmnMn;}>oMZVU2A3ta(FzGD~GY3oDG
z1a3WTmWVB-n`ZZcy5=<<dvnl1apcrZYcn(rnpI|VKiP`j+Ekg&lV>l&?wssu|DtHB
zS-L7H_+vJWv}y3+td4f}?=)0U)&E;l#gH_IbPlJf0+Vv<$W@O`oCfe4rRqK`JV;*W
zt(pGEknq(O+MDM(nWIc6aEhv%I~l(vo0-A>2QhWWbJ?*zk<Ac~+BKV>CW0t)GUPNS
z_~+Sl4Wt0um%8*F7EMx0s}+gf1cF*WkhGvv;;2N3_V3e9D>R)w?z>8p4Xsac1=Ba?
zIEnlNY5{PzGoy=OhUIo;g+l+C31sE}EKMY-KT%`h$(>*NZo}fQl&jve<jF4my2Q~b
z3*`-S!o)7+w|M_By&`-6)h6JtKlv1@L(5_yG(hFi-D+#ho|cj|`qwP&)0GN?savb4
z)PvdZ<LF;BaV8kEJoamE-rZE;62lfYd$hUnxB*E*p*D5-$+c6U8M$hO$pO*T+Fa&{
z#rbx+GY5%UC6-J7Wi&AHJuu0`L@t<PnM)k#V?9prL_epbrYu(z_^S#;4FJy;?LQw!
zk?eoRs1mEDcHY)?W1(v@_Y6*u)yX-@?eZ#>4Kul)rbI+d#wQC55A-cC-DcrNw413V
zTo)!TkpI<&b9de-f_#HDd6p2aU#Ez9lf0hq55J=GGy7J>=Ph6CQ7@R0z8QV7tFkz{
zKV9mIP!GhmzCYi(2MznjlyGZC#Y^Qxy;;?k_h#J#D+^n^0TZtXwte}rTwN4a5X?9>
zE+X-EPonf0S%rD$G545#R;`e<vqjk7gnQy2fguNq{A>n0h^zv@z%Zd>$8!v^`p3G>
zK@IR>b%6+FXO5BSuLF?W0ZKK3lW^l5VvK*JeKl7o30DZ_?}q~YV<G1-+%i4GBbB3d
z#r31f_QxJpH9Ndg^vGZzir5yzEDFDAp;1419^CB*e$ZTl6=-C}o`pXc14BMEkkYBM
zw{ZA^Pi~DL-8s^ajXwcuv_zhT0CW0iIY{*PaaZ8i?Ri^$Y@F4%XY4QrO9G}WJlLCl
znukY{xP`BxwGoemwK>WNi;0WafdpZY8<<JJM_xd((|nXulMi%;w@J74GOxK<M`vZ|
z>`Fz^(hJV@L4lGpU)9}V$EvJ44+r^OfpD@SNy+lAO0k`9gN+PYf_^YNyxb`!dohm;
zX;{=DTHcJMvsq+;T=fix`k#wcV==FjA3Q@3iHPe*v^fqB6woP7NloH#rqHXq!{^m>
zQ1qM?uIu^)aIzh3iYIi|pH+%69wS%{i$F&W*s3{K7iPyxaaeKg4(+#aefK`|w?jA|
z-&T~<$XKsrSwXXC0*SLB`Gomtk{dFO%WfdQS#FECeL>^Ox*{G++PMH;eL44-{;q->
zYRWs9r)xx3B-`Zf{t?Oe(5t~7i(GZx620A@(j@Ct8x^`njhaq9kwW5?NMGGW)lQB-
zRW1P-4IS;Rm-7XO6Q(imvc<$XMRT~+=W$x!_<Y~3l*P2`_z+y`1tv+CCc}nRHSVD$
zN(2Z76O7K}%PjfykK{rbnO(7F`RVOC7097!GTptO5bgBB&5$5zcT&H_$h=!+Da3G$
ziLQz3KKrx5ktZi-1l;#MeV)sT$V_$Bra@{am3)YHSWCADdw7DtOuOT{zbG5=MFDMX
zI6l;-{uRH<B;znl7=eXYU^Yt1XP-?4aJ}Fo{hkzs=F?;Y3hJOu4xT4t))ApFixO)-
z(=!?A7&cvMzc4mtI7iB@JB;i1<n!c|<85Uy_^pLC_c(HoKQ0GN`+p{%mQx~gs}q;C
z<`8m;x3q%ck?|<2vmP<JTT+BTydTOS=ONiy(MQ&#ic@|69Am0)Cv>DJg9c*(lJ`8)
z1nw5Hb^ObAUrp*yBa9NjWwi~nx0O-=(`ck!?ls*!?L0(el&nuOOzL2L{s1Ml0DJi)
zxsj0bMi!qux5~mgMlJ&vzyG-D_O|8MB=QMax0OS>UJLA{W}M~uIqpmeSFPunh|RVZ
z=gld7{Wh^h=YD@0v<RqQ@1nG$<#OAd;i0frF0(BFZ5l+7!fbFb&ZW9N%cgxUfOVSx
z{}pOAl>F#yN4bjW!vZf5!lDsucax^e=hQwW)T`4+JZ?6=e>ou+(jZ+1_l*x+<jdJK
zA1UZqCzUK(*gFq3+Ipl(S`jjiduNtrCmBV%1q<q(a34Wu@p9AQTf!E>k`JiDI1`XJ
zc=!In!4C(VOCS6Q7RPbs7A={xco~=~;wQUYPP@%MA=^#bt8zQQH3bKO1iSIJJG{Ri
z?l_oLL@ecmZ{Requq}}B?KTwHIsb;Hs}Li89?sG;!)3TDyZxOV`aTU0rjydMGArMb
zVWy=4%%A-Am|*^(FZIG7Fc20irX%6D*O~T#d{sZ-AHG*6Lxo9no3TlZ2>&CV8Gs9u
z<~fV<_va&u*r_@ayzn>vGJ!Q{?|OZ1KdJtPVFQE&NL;8&-8n($fJR?Hvo@065AIVG
zelCoUA;Byy=7}g;rcwj0eRPm4h5jQL>9NtHanvy2P_BA`$f|8k14(o)_r&vyPa@yf
z&PJ;<rX|WvN6KVOS(g+N$SOV0tYp*~pZn20Et58;s1%Pney2|U4Z>z95HwGZUrdH&
z2`@8>#bDf}{m=jW9jR)2ikrxGE<r+j9vXhNlm_q|39EA3Lu)&pv;X}cD^<)3IG6_`
zSq1K4*22u31^)e-w7mzBJFfkPPiX>q^@tr2$5Is+i5}uIQ`W1_21oQcGYpaZ_FpZ?
z;RgHc{*Fq_O5i}+%**!Iyr2E`PbdU-O!<6O97PPOw{S$@uT)tvboH6V1SC9-NV~fF
zTzlZzM@TLyL;1J6Y*?LJ>G~SB)mcTQeCfOescNn`>+W23<CdmFFp18Q)hx-0gcqYA
za$yK|4|T%jcXgeX{C@bP`>Q~+eEYnNOc6MFomys-iNHI>31pYcE)>P#M=!T^PUZl(
z*JCLFs<qZ+kU6tdTs%4jvG1dIs1*f%lppME2fZGQl7V_X`X%TizqA57Tz_(VWe&|X
zaV%03W+<lae+p<zj$`T=44!vHT<v@s@xT|%;Pzd%#-^Ax*bO0LDH6}{kDYJnP4V+G
zZjycy1?TgV333F(^#eB+ABzBl4?ddh+K)<RviC9J{m!SisorY@8cLb3P``9jt2c7l
z2F?5$q@puT`-b8hCPA{<@1MQ|YF4v!PXVm@mMEB=6+x|*h_Beh2kyZ$)#B8$C%S=V
z86zzxKpG%8x$zK4Wm<})Odi&2qlWd9HghT+WxS5jhex1oyrcs61MJk_igp%8_aaXJ
zu=uI&9^Wh(NGZ7>Si@pyUq3q0|Gy+INvlSR@AA)@@lMIbk;fUE1J+r5C4tBgc71nA
zAXh=3+S4Ad(JjeazM+i*S~NvFx?3k>BCf2!-Wk};J71m57E{nKW8Ca{XDVNlC2Poz
zfSXGX3VOE2%M396Otq^cfL)5|oc{>N&i2ui3GE#tnAJM;pA?WetkidujNtR)GRyC)
zYA`NL)xdyN19bGF2a(X>eqbmLgBxY-A!%W*vXb8se|-WGiL)=n7@`Z=Q!2s3GpM`v
zlqjMcIg2O%5e}({V}?om^a=qQ+JB*A)H78JpWdWnZNfn-vPPj%UT0j19v!6<O|1Y?
zIZPsRi%c8Ox-xeM-97-&Dv+xwW3;=ovOyJP(Uz}16l;SlTLlBvd#cIkUH2D6;t)4y
zKj*@RHt^!`89-VV4XcdU+tNU>cq>@|L9|dsH{R74yRM1OX435(gvcFUZ$`zrg`l?%
z0-qsJdBANc9%wgJ4zNSAd?S`<$1Q;2-Cz9g4+Cptu{j*95_=V(b2lj}6UktKb8A7L
zs!<xn>e@3rWly_oX4Jv!1e0D|oGcwPyAZ$jr>We=U6j^6*PCRp@B^`G`!rtV#z06g
zZ__)i5NNzEqN#~$)^ZX6)^U;S_aiS^10u16@;))__iR`EcYulgfMdRc+<vw&8jN~%
zatQnk)E0UCCx28QJ{Q58R*t)Qm^|i$0H|Y`dEfTXyIp8-&<(HzV5zZ#pz^BR-n<o*
z;it2ttn9mnGRVhA%J0A~fWZst?EjQaOl1^hJ7nCsona~OWn+%{G$R14T5`ewr{Xk6
z&(J$M0Q$gtkt-47pDX0CPpi~Rb*<aR$-Ri?4QFV{pjx@a^RrmYE8mAkyAd9N2d}!x
zj*tj2A!ZxU*&9a>M1qSSiV*GP3-HEtVp@{t@2KviYgV#Ql*iQP{>cT^Sk9~cp6y&}
z!tc&)W9zwulYhW_!1tGIzQ37i1P2(NXgbMD`%yUiB>r=wIYrI*&OdNo1(DD9!7OtQ
z8jtfJ7>;y>EdAILjSrF7CGyMtbVe}gQ=}`<4%g?dV)g^?c?sa98h@8~I`3U3wALzv
zEhZ~=C+2b64ew1mK&nO-PR*fXP#K_jz^>r-9d9~Nl*AqI(wUM*+G?d}>%f-8e?S8l
zMvgP6$SEsVl*vT!vCNc#!mdIzQbu<6)*6pwEDCRNf?~>s#vKXcqP!jJ8WV~%FZPPk
zMU1Bnaq`Gvl3K@{Ea9DRESQNbdAFcQ0nfrLD+IyV-AY>4%`I7K9NJpr;~skIaX-|U
z@sffJ&j`INWr}L;;hhfDwAf_<A;^HX2*8&+ivOdu8w9L-1_#7LbxbmaluwAK(^>!4
z(Q`WM-Tp2|KKkD*eW}nm(VAF`AM?(57CH$=%e!%DN>5vXl1fYoWA(3dZ)+`p)4}OU
ztLv(>G5jGA7&1LM>dihmdT!Ec$9E|0d2<QW8Y|U(wh1hO{v|){XztYWVN#RU+YnfS
z>&#twvxa^-w^n^dv&iioy5XG6NI5qtG4<x*7%w0!y^Y{DBDH`=2n;*>L3-<8p2~p&
zD-In2Q>eR9=ygaQKNsZ;Nz<X#@Oi@B0{zwCB4<ASRu~w%rYDO>9vK((>P%ZLM6r`h
z{8L};`EC9Z<l~ll2lZH?57buh_SrSC2|^=jDdLX_4Cwao3d+YTM2e#>k5a<$g)3T_
z=nE^M^hnK?q0dn(cX+d8@4nDS8}!uTxIsoY-60jf{n6wR&5`+HW}Z%kE!_INk}3pz
zp*l*WtmP{uqY-Z|f2*^H)$dkQ=_>1H<g2lz&pQ#D`foI%05CKN-loFfEaU^z!~7+|
za#!&Q+2*D=|Bojez0-@3v2d4kMU<5@@Hc?Nes-WIr=<;O_0gKX8+nK@vu7-<4wm0z
zdAe8phDa4$o4b-1W0?kNQh6EGsF9Nqw7i8928Ipz&W>D#l6_ri+WDiJvj@6cATic%
zO~`(;Stl}$#eQ{Q=6TfJgx9MJ;^vSNwgG^@eA57psh7O;ZDb*PK0;Yp%;@mwO=qQ>
zt8^zNNpXq~CxBYm#`YHl(nBnxYXfAyvC!s1LPiOp)xYa}@P#I6xSAFu#0GX@fbweV
zJUy49G^L0=9}<2OYg@TiM~Z_Hoy9aX%xDk{wB1L<OH3s$Uw`mhL<AIA?EF=3WkqZV
zfq6KI&1PXi;Y!Fpss4;toNngKx@-e{bPxzYqwkFhO^qiv|2vSW6|r<zJxJns@_fp;
zIUfG-M!IxJLy3VmhF*MM<tNJ;)(SeU7ZFXe(d?=Eo%`owrh)A$ED$J{?$BphdpDk{
zEQ?g>SIE)SCJcKu{-I-2oZ*{t?@NpW72SlB$Y==-<RfY&Fx5e3JR%*L1N*ck$mv~`
z`(sqaSr*71wF<-?zo5ev9(Wj3&uQ@}zsU|U%AT4(AA|44D`{2;B$0umAc&?P2E;iE
zs?8321lYp1qjl=M+ax>5_q-q05JuUq6wLu=S-p$#Jm~kM!kl(r%jt#d!#7-4MPes9
zsY$+Ti2l3~Vn_O?Cw;hP3Epe%vr`e_LdW@A$9l#K`A}I!7gKH8duhYb2ko3Xv}H9I
z!OO^rd~x^ltS}#g9jdbbE5i|}!t3=|UlwKCPAG2l?WRV`t$IwsAd!mVB(ey=H0jlB
zx$($;2sWIL10Ng$epa8u+rJ4F^xsh+0?p>p+;UERg$ljq4NS&9@gN4QdABAw@aW!J
z5DmBz9b-3_$65AD)(lS1WUPJ#qby{)28X4|NhGjze$?L4mYep&HYG;k`b$dif(A#5
z>n6^LwX5Z|cWPCgUZtD$Bvvh=MIX%?WlvcS25uneC7I~crP=ny+%q#VcQW_q_#V8Q
z{J(^GDNMp)L=j<q(nMhpWSNyBX8|n^FHQY8nJ)H6Gq9whRNq4&G#{H2WJuCQdU7y-
zqQmnj1}xakY!qbc=!hRrJBw)vZ7q83=j@-`9Y%2xKgU}hQyho`{&M<tfdDUZ1(TNB
zp<**0c~LzSnn_AWDqnCa7)iiQxg@)YFlCtz^slz~iMn-X_}J%EZTs@0@MZy$qsd`&
z*7=21LG&XXDCB#HYoR(fru&WR6>Z7ck3Ynej2n?8|2d&N>`=f^-(DrUPFsR)+iN}M
zZpPK;#{rBr1j+{0A;yuB##3oBH-9XB9GPM3E_f}*;aE5OE5X$pet{X}MF&Kz<+BF{
z-HPMU*X!MLh5};6VF0TQlHoT|aj_J@U#6~~RiN$2M1yxbrJ;FL%m=T-;})o;zc2s&
zA9VJAco?dQ4IH@r-Ak;DdT~~UmKeO4&M|_4hl&*RP~C{Cf$=tpXM8{ldlzSzB&YW=
zktL{Dqn9~x$BFSi;r0%T&cPxpb5K1~Dmh|PjB_rk10GOT+s_e&--@BLm#?vGMUN|b
z;lD#Y8?XaO?>D8K5bzrkW8a;j7|!sBCULU$>S*wIbF=$IP%hkM*2nQ>SAwW_0Uw#e
z-oj>Ctfkbyl$KWltjl`7)7OJ~3Z0X|ZqoVXD~{$y^*CgJg;1&#2s}WmAmj4gOD|LP
zUM-&#Ralo1Bab=IGu(^}YlLS-Shz5=4&E(kBDUrhB$+>tu?u@UWmSFb#95pSDQ<rF
z<83XbwgKHiH23zwbsy>TB(GMlJr9Ulf}s_YTNET(=AwLLl~6Z+YasL4)ABsOMi0z3
z3S7~8RH0x}3YZgV^1KHDCR~4DU3L1_fq|}D+pbBH;G*MV*wJr%qCh3g!{_mZ-xeV3
zvlbxFeOPxnLkEcfE5Xla?l?q&&kbMBZ$o+z%U2uf(@*&`=fEA}({-`ktu5d&q6vol
zvfW>gj-2<^S0!8E#hj0h)cSUt*4hy6qhp%(Y_+A&8+g1&rLtAocXIX@3XIcsY%wdg
zw;XZ5y+w2|!^X@ZJNCikqi@g{x}fzAl#!l}SVG4Xvp~YmgdHxU0{_e`v6#VM?XcGB
z9@<Jq{*ukuXp0igNcnv=q}UqroEeNq%UmIt7<JxKx?T>Fdq-SXHpY;eF;wB1wWVHT
zBqwrXsOM6&vybvY`Rx8LOY?b)E_scRAmVU4C5VPjIfW%Dmh4VmK3&XGZ`c0kzud*<
zKl)`Xu0Jn+?He;}zaCU*$__J$nkZn2HpOW2s>LHV(GhFdUToXmVgdXiF?Nf5v8m?b
zok$mn-(2kqJ#Zn<DC_@$IRERK3%s>%;J%a_*#<TvdByrBtN`0uEvYx`(-XNuU5$zS
zx?gsPhK)<uEb#bK;PH&J2ZXS3PFT_yr!mK!$v)jt{m`%eb6%;6B3a^%YKh>WEum3s
zU}vo?kXgN~b?E@i&?WWl*lB2o-mnClFAZ3tvttr6Xv6GqO_}e9VC>Z!@i$yX8<gp>
z+5rj(6*@8U{ZE*<GxS9nGtd@@n)85&o>13#KT&(4b=(jWz@~GrMf0;afXil%QXn8o
zhj{S(=HcVw%Z@z{zo2pP9E4*KcL4&HgSxA$Q`K{|EEwJ=3i<QM$vSc=Pw|Vo?d~ds
z<kE?iT5tQy<YxI}71i0BmNGV~U!<2UWTLLT1uYf-_Hu3uKW*d}P|{+lc!-ZKK$gZ0
zXABD55&Qe)6#|;ur{7*2#;*QVEF${+#^|8DTmi1^4Wr(4k1+k%D)PQ%-O5L_N^;5L
z<V>q#s@j1tFsd(wwI{kn2xFA<KJNhb*$UgJm7x*jM-!J53lVt$H$ce0w?=VV5PHhS
z=O>^!v8SBygC#GT>xjJL`$d5!Jin){B{<JEPHQmG#RA_xUq)agu{_D}8rR>Zz>lLj
zTNrhwQ4bWCn#clcD#5k&4+ksK7mL*QINKt}sM|pGR(-`1r%l1DVi|Gur}4i=Q7nOQ
z*Trt6>A=gzlJ;pTl0EUiAPFI~z*4?b5{0PReCJ~&2~oEIGZvTJ0h&O~+SKC-5Ezf)
z{Bi3UdbA^5QX(@|7CWfnP}v#Lvb4d5Nk{Wj(!!S$D5?!~yn4qUTI2y+VLo6KRTk=2
z8{hQ{Gf-guZ@?U07l`0vhBJ#)ycSP#@Lu4+Mqv}Ad9Y1>b56NN?K_JYPKF6uUV?1w
z!#fJ|5{PxI<fEPSaeB6?#{joL^|I~1nY}7gjmCBvV%Ldm5k~}1PDk)Qs&QE3aMY&K
z_~p({@tQ%7DsgMR&juN^CoUxKO0Z`mM<RE<h<Fch+G6u*MlD^J+<8QWw^rC$A*R;9
z8S0~Oq5njs3Q=t<*>j;p*ID*ISezpbT;(U4Sm1+HPSP3Jyyb^O-|bPj-F3IN&m?af
zbxECQh^>VqcVO-Untv=<-25K2tyAC7eU@WlyIj3wMej!p{u65qt?wtHTyf&r3=h^5
zd8oE%UuQZ#85~G*It#aqm@RuW&bTPhABQCF*byltV&e0?M3Hf#e)h5G0NAg@ND+o8
zi{PN(b!*c-;ADIa#os`dujbVKNpdhrQk&p2aR4L2YXEYcD<I%iM@AW3=osa7V9V}o
zbYeH|b50$Q)7y@fs=n>{%s0eMbgCxqK%#x;UIXshZj=elky;Ypr1uirzl$(m+!DVO
zESnn9bQ(K?(ZwsaXhNb&N@UHl@OBfuB&IuPX7ZKm-zi5Gwu)=R_J?j+{2oREun!c5
z62ugJf}l>A?yA1t4mX@r{-P_<xTY8T`r0nQucSRh6gLl#oc72@)RVJ(vN);if<?%h
zMj9x#9(A4^PgIv14ex!9H4YdeSw%-Y`fpoE2S52(sI1Z#P3DjEF+Y=`U+UIY$hnEr
zXqNN(2R*cYdH`6GH}cHq0Q{6SIN{>{O?V;)nXB+hsS$EU`PFOrt!E!+qm@4XkBsh5
zqYJNgopaXNol+^Sc5r!CEf&luQP){$CYSL1xyrA^&Y{?$N)@4t8u``E<6PHc)Pz*P
z>v*qHwG}~KtJR8t!jqxN?;_0pvT)yLDRGNr914ew`ovCa)qUfu76-97kxra1YlZgR
zcrg{F%Mq<DPU!@yd<`<RznDXRVX<xmmo6pj$Vy|d{Z@+c)oc^{kHvwWL>kBTM5xfr
z{PM>B5fe<+PIWGWZ?+dT{}vda0wO1kb+&))1CqjA$TJ}U3eXk}P`%cuE?FuFbQQ=a
zn)4higRq1oEo0-9V|+TzCYUfn->>UT*@X1)`s*%*;M=#|?!NqvhA&jE+_K>+b|oX!
z$Yg}(adEq^<B2Fp<m9{cDHCx)0VOe(Tlbg}q-e3HZHdLC$=IkP)S-OQmo>3ka;FO%
z=Fm?dRe4<YcP&Wjj(ca^n9Q&E5S*_yZ^_Q!HJ)832{ifQ5Vuw~Az5k%4XapKwO5*M
z#K(`slmdCCXpY8lX14m?@*)0V3O>z)rKu{MU|UN)1SJPcd>5(u-7dr68#yzB+=pgX
zW^Ti5aGcQ^lIUL#Jt-Y)?MNH68~=9vt%`n_g|$a-dVfA&ms6)PNB60gA`7PgiYKd-
zcxt6gH&EGS!8Uc)NQGER>DJ25q-oyvic_jMiY|qbh7$Q$7cTSA0u2mis+{$IHp29`
z$<*-h03B~2ojj)8(koCMMsGC5-rl*$(|FiTa^vX!p#G2i{1B-8w`*>P>xCR+!Z4~w
z``F5hy<pcAm!)c01HGVJc-5gM=g5gIi*l3pU6tPaAM1qjz^ysCBKK?U4EA-{a||4W
z6KAmoCl9-=4w16?P!k;IPyU)W1W6HH^S)l0ju5J=_~3~@S%>->m3(eK0hP(WGrg>x
zhzUwft7^ODcSfyrgT!Sh38(tj+`WMYQVHhso{{#5UVlYp`%`+C5kZ4{<y=%{33EkQ
zC)Vn86U*L3c|Xq?S81&b7CQcm=Uq1}r8HvTS|8-Sb{LOxU{IggZt^>BXfAc6$o|Ps
zFmda7Z4Cl`uBrjnha*szUzxccU{X(`$Ah$mPfR6-j{pH^>BqsCs|dy#c-PCUsVxOS
z5GXiG*89v}HSlfrB6{V~j>l}6Rg;KBwleHP@smS8^VJLlsk}~!oRy@bfolQL$Uy&d
zTP)GIsG%FmDaq{N_eSfTjvPLSau##E#zI;Lu#6t5c960Vys{8gK8`a2!&q8r5@hRN
zJ++Z}p4Ianc>f2nmpfzadq($P?)Q1lVcu=dyFL{9JvVtLxozC~Jpxa9H|UD;_8$+O
z<Y`*<%Yx6stH9ZeDb{aZd;@#xtnC(Ea){f>qd?Waa{WDL4n|qCh;n8hzBAw9wNMCR
zTwB|S3EmOb3S}kx{hICC<d&!0SOO765kjw~<7kbYm9Ie<-H)>oiMo$@Shc+wnm$YZ
zLJHXcr_NHxvWn;{b!Al1YHRfl`l@(1LUpn;YvTvm6Zl<OmJe6*!{Xa0Kz#S=xf8b-
zg$21D7op;Dev?GvCASKal6nO}vKeZp42b0msUo)CJxs<-WoD4)7S{$~((CWzQNFfP
zSnRFt$UM~s4e;Thnv>KbdT-Q4O)y_`48X)ALNhKlzw6*56X}mgsWn(Wll?E`^g6U-
zR30i@yOB57^IL(}33O&^9pY3=%W6*9%x6!&OHUA!L^$kw$dz=i^^w_`PsQ=joocO!
z&*X3H@eIaGD3GG$ACS`KlaDS``cMNqlEdSmi(|jC?K{Y92F>O9o%)3RPQHtBo?z0x
zUCzxM0~3DIcT_r|ysl@K@jKF-412y@yjvbN@d_kI?z)%)0t(H&Rv{TTiQ<}oAt@)6
zzuhfWr1CaJn@q%f@GoJ0o>le2GwAMp8B9?FXFhMbJg&H=ufXk@D5Drcs9^Gijnr{k
z@rRa7Bl3x{-z?ux8-^CXxIdMHIMC6jbAqb*bN#hcG4&i?(Zf97o32lyd=tImFisuD
zM?b6?K+?jpmGWfOvbCH*{EM#77WZntki=3A40?nh{7BV*Q^6<~u>L4@XG$_7WZKeL
zyiB209b!z%y5fiKf0RL&kC~l2T`(d~#wowl${fo_ay?fKk{7Tk;DFon7$eb3?8Vpt
ztB=7eJM6gohyUPqI!Bl_DOf2`)OP(sH;7lJAOJo1T35CSc>^od*uhDh4LGQI?cIdi
zT_s)%B}rs4x8`g6a0GO)CR~r7*WlR@%-<td*_i{nRisDR>Av6y2Gu1R3PN)^X<wQJ
zouvFPtGRp8cPG`kFNy^}h;Pf?D){Uh&67QVc%`olN@k1Hl#~!+l#8DRV=Q8abEes>
zW2pQ!ES;3d=&sUI)~mlDWfxJNWsI6Cpllx5FI{692PE-16l}J_D8YL55E~?}H4niQ
z+Uj~cKnn2b<zR@?@de#={?Bf$ZIg>RA!m}j>}qZsp(w(^9Y3@{H_{fxz5+Rf%#2{4
z&MJ?|-%LHT5E;enVPvuOo>8gNywUt{uWYywS(u6Pw(pye_;{L%Nlg3ZQok=z`)lHg
zD7tb}Pu={JrX0+dq7Q&{us_m62|o2Pbf7gm_=uhLp>#?+`PoFR$Obc3-!0?88WFKb
z{mz20qvpC`YMKz8qT-UTkFerugg3E-v6T8X4?D493&<|G&&7O+Wk{s9lWwq%INMqN
z&h1zu7Ma<T00b5*JVIcv+MZOoHCz3TqAH%w2+dIj#UshJb74L@xQc*{n2}IYn3-$D
zWTqD`4?S9(?SN>qa_S#Sr#-T>@bw4Ta5>ez@}NJSFDW~!rjN>3I?{;+jnYFIlC(k$
z0Ua64{<ztc&NEszS2}od+f4NUP&Mv~dVF;Ffp5GuN8!<o8*xWOgLuSkCDyeR+*Pfi
zyAX@iz4uC6H2d+W0H9DDmX@r!($u7Z7cH1X2Q*=ucqw&7ORf3>6$gg!XePya{>n*F
z-on?dtpoMHxKQP$osu^6q$;Tjw|K9}f18WdacfnR(5nvn-2+!+#=*oXIU8RPz*^3}
z@fnrjS@Id1qF52558!OfpH(0-m;To4oS(KtdJ8|H)25niY1#`!pnz_L4BU`KVAexh
zUQ`~T#YG3qK*l}Cv$)I`%vpg>2gZiF@y^f#6Nl!WAu-8Px&W}ESO&%;hXi;q*%z}>
z6@#gJaA|O7*UKB0!ikG%D1t(Zk=E)WfP&np$gl?**PHjWI>CN)$NnP=X1-(;9&Mso
zAYeNhcqB1l9^c&l@tKMK_zP<<@iF>Xw7^0N_Xfw|nJO5PYMw0Qd4$m;pU8nfyGl7y
z|Fh<(3cSAkmRx`In*WrY#8vY!)Gv1=h}t^^c-0FHXpY!)GS|d<gCkX`k7RfiO!rKV
zSH}%^z&E)ua^o_YFj0S<2b)#6@^-(C9v{+&#uu+N5DBRWP~I|Sf><-=tA~Ep<8b&N
zxZesM(fHLqA}9K%L~1+y(ArEqZ^25t2>b*>nK{VUUw~8L$!s8}xWvlvU%WIW5X*?2
zo1s8iqb?j?i;j6MCq_>#+|E?fTTPU2^`RdS$aQoTqI)eoG-h$AcL{-uj2!YdTW|`}
z`a8yUP3$htY;IV{e9A(!$F)Hpjs!EKmLd+-nwwketMQ<+scIiMrZIp$=i|o2gHr~k
zepX^JK58bQK3eWsm0-{=?O4vb(K|Jwz96CT!SH${Ip&ctQ;R;V3VOX6n9a+ae>Mpw
zxV@LwkLZP=i6~4UNv&|v{5@)7*)0o_Y4n1Ou24lDLsM2Ph9#C2=mc5cc3==l+~nFl
zjyqpm8>L^wbiZ9gCqw}Krs5VcO5GRGQ+(J?M@UtatV{QsqqbVMWrhkPb9dI<-a!*V
zRvez`W8kBW4Bf6{fRXG-vc4}7aXB9ot<B+sooxzZ=yDD1nB$<`OXIyZyMK4zh^F#L
zw7N?hy}yOf$82mXC>jAZS1i$^A?LW7q+i5cO7hYsjAnpCSJFNe&vL1NwEjsSaWP9)
z9d)9P@1@_LI*56NfB4TU0*V4J>+q>xB6n$?{ZAxaxOM`;7JkJ1#ocIpG4AU4?D-Q#
zfeIV6Cq)f72uy@>T%LVBSdJfFlX`G6Ku7Dr@@gd&KJ}Dg#^5E_Hc!~*WczosZ9s-D
zAmLy0S=Z&~u6;a=YcbFl44H+pNgU&@94e&C=FqiE`c`pF^S6fV7xknYF=RD^sUR&^
zoJ&DC=zbfl5g}@cWNb@OzS%X1VS%5CC=orl2}!4`ReP((pj1fw&RpFPKD&#a)giY~
zB9`PrYfQZt1Zye4i;>?ty|x|ZVoITCBJ9C#SC1y^nJ}brENOXpBG;48QrmSgYRNB&
zJd-i1+j+-s>PPI(GlZDv!J&!wI&%{hD%$2%a!$ms$y2-*Zv9{0x9Si+)iEX!#Iyh7
zh!*_FplisKM+d)&Y+&CA`h(N7pSAiMtJe_gpq2DziGhSV6i}^WZLTL21NaoMV;lof
z5nptn-H#SBAKcbkdj^8(pIah-mp1_|Qu;K2z`O?iir)?(beCACEfGnIY%bJCRNLUR
zlztOQV`Yof=>+&qUOK_~3#il+rxQOvg?S&5)iQe!M4?8Iq!<?@jeT}_PKG)c<Cfhi
zg$e`GnTaSm<Azl47$n=PWv0W(Z|ze)o=ZMZkG5{4=JGBIlzo+0!yx@pUDf*Gtq+sh
zmL3_Vjggt$qv`{jM5sEbCO(rlRrU#25_QpDgz(71D`F)nxhiWJwZt6vPOXmJUO>m>
zYEC*H&rIKxrUD^q6)k+uvso1dFv-~QN@x59qvw5aNc6mbXyW|QA28QAW;$DrQS34~
z>H(@6&n0Oq_v;;VGhRcagOKL|=EB-C<kp#8umZwEW<eO4)iMvTxMV*aKHF;SpHii>
z5=*N#9-@8G>3C+V___HBQi-?RD=&id*aLYKMfo>bJH`BKs=5i_+Y0#@2gzkVD(MM?
zc%xs%bJJ-KbQgh5%Fex85Dt9?aS31mOglp7e9gB=&q-^_2psY4A)6^=?p@=ng~X&i
zCLC=JR7YlK+Fxu2&P(6)7QduzGV%0f3Hb3t0c~4N%#1pMlko!b#b;LA#cE`$$j8<K
z=-qmA=bmSc&8h{{eSJp@B%Q#|np^4Jh5!g~7^@RYjn4D}NRPuD$D^TyL^U7~0_x8M
z(lN%SGiQE_r40U4Z%+pSJTM8(r_nN5vlgtm4aVhu&&_DAP=`I(t$S1At27j4c>VCW
zwgDz?Jy&DI*Ayp^miM$}q?!lWpZRXC^c|Lr#8;Mj3*cwFvU%it`3~jcNm&prnU-pz
zUfSt2ad1*`%Qmubncza9;4^-(9))(RZ3b^oh(a$EFaILEQ;T~NFy!tDh8i%$ci#vZ
zhyNY*<gZZYY!C9VCX&(0;4KRgS3(w+q3Wye^fsJH$j4rV0L-wY{e15wYpIKle;uEb
zfwRG{7jMfkv-?~yOVB{0{x@nr^j%*npG&V84m1<~OE&*0gTeBvw&SFPy6OehYbEj$
zU!$rAr4kLzfV#)JK;_&9@@NfkWKd3r+=Qm(<;`3y>dT{8qgx`qx(B##+Qdst#RAWK
zt9cGfHdlt=kk3KBMAM1#c4hXuMS*~VE=w(4ZI8!=XUBbgqCD;<W+~)f&&S&TspE;b
zkZ%$s%(WocpZ4l-ZEFv(dsu-Hc_aISHk;;!)AG&YdZCQh8k*I@xC;AKP>?GGa+LB@
zfU|TwdFoB#X~{Mc$*|mSrgX|;yHY+Z8nSP8gCARUrgPNTTF5A>lUbSd-Q~Bm)H@C{
z{TJ;30Z-vMhmw{4%>d4=+wZe*WO1&^`km;Mb_!zN|JtQo-W)4VHw?M|Qw6^-45oqq
z6@gSehL<BCF7V(ul6*VB2Mj#i0c&ws5Ij1JAr?E`XE`6<LR?tOWD>%pm>Ow?976Xh
zeKgYf1o+wmbK_m5w9VyyXPb1N)Vs1|K^Qe0DnR|?n`F&zp~VxyLT=!CP^0m*myx`W
zTRf>2#zqufg9^Y5rK9ZBRzcDxlUmQKb(42NhN6re=jm)HO}p@5EzYPu!Kmru-<bPR
z6{W2O&Ti1VmX=!{^e``i1PCyr%po`mZa0LM=+wUM_24&hyyeJdj`;QHKtJ1Qj9I08
zYWF1g5ni~Gg;fk%(l^@wHhp_`GtiH%GMNbv#c?@fbNWFYc=>9K261l^fal~1ks|I|
zEBzO1<2!&QH1OxpQ4EK=<ypm{A<My20a)K!>MQ!F+xLl?iol$veDv2sr9wYXy<T4M
zhwU%<TA#+^c65;9FQVHNL3c|~796}JMkWVI?Ft8nO|Gg*AE|jB(~dhJKw4A;Nl`38
zld)E+>eGi+tMS60rzBCsmmNEsMr$Z2?slK6lfA)Y!k+a-RxIQQN?jEe-``Bf?;9C9
z46Lt&4A@o-vD-snqk^rmwE?_h2bi`c6f7m)MHacqAM*dfCHe(z988NlUw}s7(H(3^
zxJs3*>{@Uw{AqZu)-eT-t^9O1tcUuO+K@3?tFCwr6z!+68I;b=R%Kx(wyxorB8gUa
z##+nO0{zX&rkD*^fZ#!%x2T82YLKcKex-lp`Qx&H9e~Ia8WrXwnC|V7v!QkK<e{(j
zWTKqr>+^jHHGjHEXLFIXuhno^dW0&%1_pm=YVabY6snhSFXp24F|y85%B<`keo*#G
z#v8Lv0UGk*<K1jFBd79fvj9p?K;J~VsLOCo7hHmke=w6g?%u)}&oa$MOc6+Ox6g8s
z?%L)XyZV26l6(zD>h*!%QnVo9Ao7^3Bz+YPPv`o8In)n2y30yHJ#jFNvsHC=H~lr`
zpK^Gx!5E47fmc!<yr`Dg{}Mx(EyBJYjkNR#M0icbE+}>$PFe`|L|tH-QK>#N;OGBt
zE`E9LK;RZ-M-3e>Ojl(h;$lxz$=KyFAo4+oE^jE&8#UflS}HSu{q^ytwd4;@h~_UP
zim?;IsJ{`P)+Ff7@@T-5RJN+HdR!87Q<NX<%Oygxk8X$~;y7!x%xh4cdvBrdV}|pm
z9aOXdt8jWh3jb`GHk5}iYf{&{69J1v-<tB~cc2a@7y;2!s`ka>(w8wu=0I=YAlqWk
z34#rq=hi?T4qeQFchl^+1H0Lt+Z#Z+;g*6rZ2w9RpB1S`_+H=1wP&c-?KumCBz7%L
z2iaE6D;`07j8AhE_ik2mKg@suzNw0*1jWn+G;+baNuu_X^932^(-0$p<_7u6M&Iw*
z_IjkmC)UGerdHQapZoyl9XM~t=FW=!f$;FU=PbpZx{vpHAUpb8-TM}zl4%Mek$#4`
zOiWb@!a|w^S@PQq#Lg;JpJK|mKBMuHcqmtqS@aqAR6ig%BscVfvF5G}kyi=jC$nEr
zA%=iXk~hkv9m{2Z>b73%302wICbNMmHi4F$P6#Ti_ZA^R@l^1{KV*fP6OmxX@@<%J
zY`TH;e3<;p4wcYB1Fgi9G@y$E0lVT|W~6z?30Xi4e%z1g<xI(7gB)KWaAXv@k+-k!
z`eRl>zDIGe&9~L312X&cMCp{dF-qocOC<$*gMUSf-Eu7{*zS&&1ybe_?vi>;r5iMf
zvP#=w`y^>8Juwm>>Y)o77Jbe%`+^HT(~3~*?K85GR>sb*^2WMrBaA$8f3eLt$u|%E
z-Nex!Ss3-)m6|)2R6`mlo6$%#JN7n&TIp<y=ZF2A0$XcGG&7>qi&v9B08ezk_Q5JL
zv4CSaVnI4pXzk_&t7@V7jS5^KEY&=2{>9`TeF{6>bRE^lSM=aJ>8FZ=lOS0$EkjRz
zgqBru^u`Ctxp9>gNMz`Y=DQ?zeW(_Yj^6HO9725Fnuz+V_7d)aSr)TMp~9sOM1gxd
z3{>GdtIqnV96X4kmmru6DIq*Dm9}y?X5r@{noP>J|LKyX$cV1LP;gi*NBz?eS}YLe
zNldQZ2M&UfF+so>x1a!LKVezh^;cW&E7_BKJs0M@CI(~T*okAKxC=B1Ozo2G(A&<R
z0hANhDF2wWFHwEEY^v7B_elWolDJEq3c_xA<R3Xo4=TdB9bGb>Eji$t`~<nuJ1sUD
zMZNjyvL8lyMYH&-V`cDc#e^`s?z_{k%gJC{Wo3?GUggv02r^KaB6|WPV$b$2?5ML=
z>7{2mohFZ%vT>2i-sqzVd5^32vjC=kuuh?+`Pv%=ely(pVKX6rO<$hlJZUq`VcFPW
zeA<9`le+G)CagPcVIzuc*`4nKvA*VWSGPrX_q(?|BllV7<9@ICvcd!S7>;@gZXBuJ
zf~aey0<`y|<YBnOythMX+UJm17n=M_G67n?UX>fn6PTQs3sVtTH>2kWA}!&tH)@H$
zsin}RL)_=A+;>!MUheb1@lxt`h*K%Xc+eBCxMVlXXrjk?0UaLs6G{a{tTXU_0MVoE
z2Rp>WtuQPU=4at0qR)4Gp<U>BwPIJ+D-pnh0DyJjVkz+ve=^?C-ZJ6hg&BEDW7jZg
zeYsI~kcm47lvNVtDU3NNkd%>ec|w2tN&ql!YAd>l4HezX`z3z?X$dTwMWo~Ydg)1y
zub|>}V#zkix)RZF$P!+j8oVSi(Uq^EemRNRat2{r*CEQEc~rF_@Nr?eZm7Fi2Rain
z*%Sa`i}zOWAC_e6o3Rdn-(gN<z1mj~A8CX+)8$q^90tIb=Vyp%k=E87eb#K(=Q1wk
ztYlV(Xq=`c9!`M4%wQvx3YyB3RdLaS%!o`dLUj_x4h)|MPnj6xUxGIoMg;$Ku)F#y
z1N}4Y2X0pa=&^<)F}_eV56p3mi!1GI#TO3J_K|(lQk?tkEBaI;(oRG^^BIHA=>4e0
zGIK{5L2q5~O{rn*dkaTmd)Epf=<IOFI~mskdMWGm2{UuoRZFO(eZvp_V9ttg0pBq~
zd?R1uexm5W|K->{jiWruRt_hwXne1S3_BzOV5{{nhU}j?%8MPE8gsK!R$+6}>Onk5
zhB|}H&;N9<w68Va5m#O2{X0E2QO;917gruIWVPWS*`oQp5)XOoSdY%;^9$#fyEF9&
zwlDf4jVr>AKOKYoscuxX>vMC|I2qzxlvkI=K?6`E-_DuYPr+SN7l}9AxW5k-U(X#6
zBL1qtmrUNNUdixHVseS;6S^ZoCFiixrT*;<-m6Bjo!TQffY~_?v5$AT{$|DLk=!V-
zCkWhFVpfVMzNyXwLCN`lU_eEAO|+0w+hXA^?{JeLP3>}?;!8*x<=vb$3_!kGDzwTJ
z0JviNL2jq8BS5TkwG=7>j?XcwalrR_u1_p-7%3r$-@!asKJ)yW*lh8^SWg2}=g%!S
zQ>tdZT(22?M~L~6N%y{Y)0Jmw*Z0ExRTh-f?OPrUJ+83n$Q>w;Q%m;Czpzd9CJxkF
zSM}Z23z$j#L_(MaUZFKuxQFG|7{Vg?<B(nqHpPwD6i;9^hcKo5QQieB*-jM;UWZ<e
zC8-Euj7f>O8!#3-Jwf2+ikLV*DDT5rrb&F-4gy<(LedKqGw;@YT8YKZ_&YKXT_c@i
zdL-yDEe`Be??Bi_+JOG^x%{yLI+E#C4Nbc_my}V|#p<lG)?&9m`otYsA(A8`rabd8
zNt65U=r@a)24T{1<};m>bmI$t_?#~NBp_{=tmHI@4h-GJDkR|)vJ-=1^uk!r@Pubq
zL)^eV+0>M#Em}M%_(bpft<(CHm(BWr{Xq1pIenX@%2DYwRoN96yNe0-&w~o|fN*~%
zXZxg`Ish8*5rO-4hHpMV%8cW~_?Oo~EBh|tDcRbNmBR^t&(qOjrm>RbCom3@n57n+
z%T(ZkUOueqK_@0Q#2IgBlL!R+5p&a6ychFWM2p~vNc$?J<UXe&7%dI0_*W^KfC6Z(
z`kghTiy4EpF_Aq%5!H<={?u{#UGl|ypy@AI#~dSV>SnU^fUlvTmTi+NM9mdA$5du2
z1mD`|Y@izfoWD+!zq|R%wdihtGM`VN|2#CgOYnuY`!YRb2St2&%+fCJwb=Ox6>Nzq
z-=28M3rbQi?i*b3tLH}?#?)uGJ9G59c%uk*#O|cJn!2VH9j15u?>*QI_<|k(6$pTm
zAwN#zUAKQUCu!JzfX2frsqc6{)Xv`aGzvMOE9EJ7b!o57ocF32Mc1%6Dq5_Gc5h95
zNFc$YhrfvOkF`%DqRlV!XlB8G7h5NEwmW_IpwdpWt!vkncg(YX&lge!l%ykKOuw<a
zS!$g83p5`QK~ha(5tNF1es^oDJh(@J+&x53+7npx&q^f`PcY04bMGxoD^dkuyvXiq
zP5*^;GaZ{e-UB;In^zRu;TaJ!w?8Lp;C4+a-t_5#!h2{|sa%8^5`G;PAK+2TG)2!+
zVQ?uAI)sID8f=jwe`-@;f6^AHA}Y`w5R7bHsth4zASciQ(1s;9KjhS(DiCG-pbK6l
z%z1`SD6Y5<hT(p&*CR>nZ#!EWXsKW@%af;G&QX(Ioc@1ie3@J@Gxg1MLZ{hycbruJ
zCR^vt`I|cOcEk-&7dYh-^uM)e^Ew^UcH%(4%hWr_*kO(lcy2#2Va_grf_r!K^?gZ&
zCgT%PYs2LlG?eP8F<-p>B$Y;s<}$V$#d32*9#yglftFeIl#};&m1{{Ia4OtL#!u(A
z3a0OyUut8)sXZ{Ey+pFERvxM+1HJOT#KD*FpI-B?j>-0S)Ig=gMw<2K7x~~}%odDC
zJL8HWqc-?hOVYY-uewtBa_|*RQYdV1r5jFYh`YN!lGBtZQe%9!zAT?r`HSv|EYWT<
z4(7~EgDK~@3pP%;qZ@sZL_}+_Ix!P<Pa@?o_VS-()wVDy{MAc`IRUj^%wnO>AmBXw
z6pC34UZ9Mub@J3|aFe#BG*FqG<qL&Um<fuvAdDNHBaElL<|F4U#w7p+_bvY8)u828
zO;#dpr{9yyd+M$gVZ4%p7WUcI4!!M`q!kpgyST7hz%FV@uYC{emYBl^WKKfqU~vyj
zYYj_7*0>oI0qDZdiR{n56gfMao0vy}m&{03S)?9LV-8AhRCC7S|8>ulH*9X!A?8t2
zHAh6N>{UpG2_?*1)jbR!waH&6`ja~rEnzWN<xoa#S8kJxzT3xMqmUR~@(m)p-~nP5
ztJOe?9Y?x~Z6pW?<>Dd#fSF`h=xMII!XH5}Qjw)PU8`W~hbLz?P0PDdatmL;wv<Be
zmD<QwJ}b3H5jFPc43fyjf1_q4ppQlzG{$(9Ey$U6YCKJJ6elvx`XIiq#90p%df~QY
zTMH1oT!HTub5A9sk5ZJec&p2EE1lf0t?fU@i#bhX;WW(LiJ?Zf>&aHiiD&MFYj4q?
zW*QkfaiFoKWBWQ<xda{uvf3gdEgRBWKb}-SzAlMPOO$rzW!-)hs9*;E1e&5RTD?n`
zR(+=+nat71W|K>xp5k^fXTX|N&|Eb_tVT0f)qq!yZaBSPYH_zq>AO4bq3Nc~uSzXu
zV2k$>6C{qNf^Kdm3#%R)>f=Lbx&*$K_^br#RjR&6!lY4RX(axI?Kl>z4<4Cc+9G6W
z*sr~We>bm3&6=Ktd!1cL+jvEIWi_tVwdH*6`uj-2s!HKL{cT}Ri1pRNttncdcss#n
z3xm0@9}x-nekhlxv!gWF=*kh@=~%Gjwth|oa5%p)2{5i|t2mhxEnLs}w=~tU4szyk
zoLpw!od`VnZ9(*_L+<pYE}#fY$%k8(^+S~hutH+=Q6fQ1!3+h8Pv0l)Zw);+HYC$R
zf8l&nc_XlDm-#@op%M0qP+6fg7|*@TJu3UDLEz6s_KUzEjNM)9c#k-{nh17|Muu_P
z^w0am&m!cxL6$;Mf0Yk+aB?x&Fg+K13{S#JXB+Q)vd_8x))$KY6xJA=Po^u4NHU{o
zVBnU4y%-TG^c*1zH@O&{V^2s`h{B0!Zv5}AU;DD;1c278V#)}WQ@s|8!(BD#GT-!x
zVyVdxU};Ri-zI!L9Tvf-&$`a}H79==dDq>uW@|CmJL)l1uGN3{f^<fk-D7!&lkpI|
z_ZfjI$Ea>ya?sS<)tVf7Q7g`G1{aYq;^cMUh!vO!5&9|Hg8qbiqWPObC8yDM$CC6J
zXy9?xVMVgR1eFp==(9b8LEK`TxZUWddd!!KBZ$Jrplck?!EsKSoYR)4;24&>R0Dfk
zFlEg-7s<<G2MAUmouTnCw*LS%-gLK&Z6(Po<oqEUHOb3BPz@ljq>EZsGEd<h#Wyps
zPl~`C0s_#9>w0nG%KlXPRao&&gsXUQmD?3rh{Y0H)!1~wr?%W8XM%z**zx2)PtrwA
z2HP?_HCM*;+xNoP8RtDdG(1u9<k>c_fcNpSstIR-6P4VFwF|>!0u9`p@A$|^tf<s%
zzz8xclnzTYdt+~7c(bIM01#ng@~0{7FjBc!!(u{w@#eiXK_^`*mVtEz_S(xDR{Ty_
z->(`qODAxhOkD>-lKMFUca6k8zv)edh2o~5<8vyNSbv{=*NpM%0LqN(u*ZlW%AcN`
z)QOl5QeAOI<HQ!9@YJoa$0%{_pySC5LIZ#Wf8b@+V!LhxO#vPzyuG;rNVG|!4XUgu
zQLZ^qC?ZU3;1UDC`pQv7G_U#*)wBwM@#+<QiohjPgzXflN{c_;*8(a9#@X=IJv4CT
zxiU)r&xlrUJuY=~!AD&Z7;iE6#-P9p@x1Hn?j(hErs2d&Az&UtkonN-Z=a}x6O@Bb
zwVJ*Y;j2<zmEui!RTs@eB)4cxzxdYJjm*%!U(&`wQ6$GUNZxE9B%P9-f}SLoL3Kx?
zd$u_k3DSVGjlP2nLRXJ<HK)_3-GH@Ick6aV578t4|D+b}llgomCIuwN0j^__tCcN?
z4a740^X5Dvx|T+O1fg=-y2@3L(+-9R4~I7|JwP&}ebHgg&CrGK2#N^5L=GS_VS=4e
z1A~5d(-%q!e+wj3eM9s?)L%t0@GMT?{LPm&;I{{>5fPFu{yR>=ik@LWUPrCgX{>Tn
z%cq%=Dk4-TAH`at!E?!G*rb{(>HEjYRgVHO`us7;{N<@pX_QeKNNXv<67cqvXNX+!
zHgTR|49sq_Sot21dCl@`-jKjOHd=A3n{^h4#*qV~;MiOTP1QMM+Rd0?RYnND{hkJ@
z5I$u*jfH8TYBju%Gdg)x{UJEz>#4*ARPqebI?M5nGlw^r#c%m=cZqeynI|s}bIk;v
z_PjcJHN^BuOMZh?BIW=;)B5~v>21qS4hi##+V6&lqq{)Z3`*ieyWW;4?jN9uWuGVV
zwVlDf|GxwGO{<}lCI1AVOqI%ImR4B_s6yNHa|F!UPnZ4Rj{dWB=M01NGKux)X``>v
z>*+wO%L5L7iAnUa%8KlI73yiYrz|Au73eQP?BBW&4L@%{fJ&@V|M7fG-O|^qKD-yn
zD8)Zl9+GChF#>rn^OGB+CD~@*U2&0Lv%K0=B&fFlg#a4>w<nx#fCeGYT8EG%WO#1N
zWiFykRwZ+Y)-)`}U2tk@RA@ZJfFISJi;|`()cTOQnVVF_;{yHkC0}?*LtCh;gXM*e
z#;%~RB651~LA`=F^IaK>a+El`W8{kFo0WKBpU-%mOMnj8VUA6iE|u1rS?k{z`&NM?
z(hJFW{B*`s2u$kc<M+NEWxRX|KC29rs6)GZQ#B;wMPbi9*dL?8H)eRWi`sgjxgjmD
zwVvLK>jMHj-Pg#+?F{2UXV(3DszZrZzzcrgpdI0><pvKZu?!($6{2eC@(a7vY13nB
zzNDSuK%-?8>`DE8OFaPvqEB}R-7KMHD)I2n2Bg#U(x_J~jFC`+TWA7)&22cLc9@CN
z(?ZNXukmrCJerol|JfTV?6I1$aBk09wCHqo)2TJ@NKN8%HCgrdr#l577Mg<XxTc1(
z7|j3b9*Q7TnG}ny;j`Apfkrvywe%BIiD!F;#^PY!Z(JOL>#8UMjPidiu<Xj7{WrQg
zp+OaTyW{f>!VRCk6`YK7ojc*oNti=8c)D~8qn29dB#M1ZP@b}KAR;*`xV<B;T(&F#
z<3C;1Lq-WhTdBtsN--i{^-%}S=4G{+tVSa2+imvAy78qzZ;-M8mq4*5sIDJlh;wY+
zuARU5L#Lo9gl_~;!B0M~$+6>m#Y04O90an+#@ms`;qK*WHN>OJJI0;UAJObZDu!o0
zp_zsbG-=9<<LY8G4yvGb8@4=OLOVH!y?U}>FfPIJ&bO#ErJQ4)h~J@M%e{IQNR8Rr
zrH>0(U0o=)TyVYsmfOgL|8w?&9R*=iVmIi>W5DtSNMO0&rm%!^h&x+^6C>rJsTX<T
z)hV6Vr;Qbnn}r|6`YH*nPlb7%j`AatG42l@fu{2{WWb#wH@w%(V={(jxcfQzTaG4I
z?(RGk2xFE<WTl=Vba<~bfHe0w>QsDwi&2(0PC{FiAE8=KWcMK}QvMO4$6h1swetIO
zY>^Pu1i9=Pc#;w7k|^Qnd3RVL<RMY<P8Fbf2cTM&vh_Rbh$l!E?5FzSeG2rIJ_e;+
zk;U%W-^|=ln_WZ+_U%0n!c!thxSO39W=W0+wVpB@sSCSD>fb_3&(BZa4kV=dgPfF&
z<|V!jIOtxO?5sVIU;Tu>p10ZxCh6)TYwE9l#wR5wM99!R^JiAUm)U(qZZ?F|CAc13
z)nbe#gQ5=dq?A49+qoXrfWssMQ{B8WElxK#uK|vpIEC!f`L5#<5?>Cz^dFLd+ZQM|
zefbf)8$+da!;6`CA<r04*iaw?6iVmV*#?NyymB!c7xO*s)@R#?$g@MRO927=P~)-I
zS8EnFwuy^vMB&VHk(*;9gjd;K_i5hKy8VJT{E9YV;H|?ye=J8;tC`)27sOnVW@G5t
zEV~NcQ|GsSpq4G6VP47BKRg!&otQYbloLo^CP~VUXaPA97|u`XE#XOR&K=0e{StUT
z=B&CXEJ`N*%Tp2sDdZnhZo5cnE*V-s3*u_~2bijX$Y+DP7wv~^9cL0!yuRH2(6Xr9
zjlu2SB_Rbv(AGfC8A$&FPSp<Gb<f>|zcT!IC0+y)$nP)Q?3`DPB(^^+NqZ2o;R<X#
zTM@eD`BI*|w6V4D<+{G}9&i(ga)^%y;vdh@kOwiB=<To)X4^G>nN3`$LCdkJ^97Iy
z(7gg`*Wbiko6es)MWUqhFes2*J8XJD0Xv97r;x*N=v88pqJNKMmWpEnPaFSWAy8ys
z2xu+ao&bdoyA-p)4?mrnnvmhMN~4e$Da|*IQ{&rp(@z)R_XbKc0)F4!+<K;nqcS+7
z2?itNy+NmQ4;PmqdEa&U+z2hZMo7BN8_ubN!|Tx8T<Mv_3hg~B!{ZFK@2f#zvLMD2
zTw@Wy;pqGQ3ZC{9Rj6iwv7RBjQ85?T!@sj&Q4~c~v<dfr^BjX*^#NS*wdKWAml{jl
zwe<|~cwV`eXwcSY&ro05W*6;L>FfJCr#UbM{|PrzKk(W=SED8Tu8X%<Bynv{A_$%~
ztxlhS84US_Cw}OAw;v-hm%X6Y3@7bRFO7$mdKW<j6CMKtERcPjcPvKbf^GiAt2C2d
zC<h(?fPI`(KkIU|ux_y95|0fKiyvHipbd3FY0xOl3h@}T`|vtN`_@tr;ZZ6xY;piG
zA}i1q)rc(Yv%e{e1&nLL{Q6uZwKTEApfaWQgQatD+vr7L?-XRPVRf`mgV>!`&SmgM
zS}2+%l=#;yr(-uI`v066)D9zY3tW&cgV^bLWX&NrFh-4;RRT%y{i_})Jjz6LqB^BT
zarUj3x*Ffv`K`pfsU(?7i$SQ4l*2dk;*iM>NJq`sjaI;3-AZb(15C>yl+*x6o`;MR
zdz){%^}#f?ZTqIIl3@N&<@Udc$4>Syl>J?riVg^SLrfQ<WD_P}MKex{Nqd{i;==)9
zw@HVCt;9t98=sHbTP+Nb##BGp%3bjN%ro07^yxim)TG#!<G9Fa)hSQ|6aa%S;w^G2
z2u@f_!qy<8tF)sWArl^9$GwyaEMhoGKFK7S7!BdUpnGuIP188-hQ4?`YIJ=&M(u5L
zjNOjT6{`Cnp}#(b;Jj;J&YB5Y#UZb|Q#s;d+(VA3oE9lc8fv<86S?w4*rAl!#U>nT
z{Rx--U+d`V)8>!Di0UNVG9tZKtD0Zv;>;!bxEE#%kj~1Q0*-|JeJzVldE^9PGXye$
zpQM+*7)`xVFIG6Cee51iZ`2;&wP@$SvLV<^+NUri$tu-kmJ4EyC4FcX8ZQGLc1#v@
zs_Tom&1pB{_LRNVyf~P6lk2DRRR3Y6dY5kQtm3KCW5luQgmOpSe@AiV*iNe!%28%@
za4Zpx6%~h`7y&h?tK80R<{}fx4|32kMpndPsA5>`F&Pb9fV#A*M6by9hIcItX79!E
zP9c=g`H2heY3U*A2<DaXRzsl;4e34tJ>q*?*Am&O7W{9a`QX!ato4-{{grF8*x)Uz
zDtS|9XHY?3kEf(LP_2ELV+H?k^dz1*uh3ufC1|O#e^)Gx+IkeY=Z5XFjP>PGE!?SW
zOHL*<lp5p8$!CAaZ50A`8f7+wOO0A%0OJt;*1E5<`VgTIrDqG4(qFBOREsRDL^1LS
z!EX=;f?;iE3?W3yJRWm4OiJnxH92C(BN{r?%=NI3*&Q~uf97T3IK+kA1H-mPQBY4I
zLR3s^XXg3TCnTU!EO$;|y@ARmW5`sRoi1egcg50KOqH7c?|?50(c;2e22Gs&YYHsS
zUaM~HSEbW;cWBZv>cef`tzB7P^>BSRA}@iS*XOLJVgO+F7r-G6ojuj6JsHpJLS#Gb
z6~5f$^@m2+RJNrJN}NxhMS)}eu1(_S^nr4>SJfu5>tBVFoRA2gy-TwyeGkP{GJmUV
zXP38$)!ZbEv_=}~%L%2gq-8$Eo(VW<Oz=@O?tcCKa!I$SZ10N2R~b9iQS%_-%*3he
z?0kWgX9!>|cSYEDXaa3k&A+0T_{K*r7}}jo&nDzM)8zJVvy)GNmYpY}58a0RfXEb&
z_36%qbaq_H`&s@F(EX2KX!a1L?s%ZPTKxmWU`1rw!pB};O#V9&Ap7gO2y$kKub+}(
zj%eTLO*xM?7JP@R^KQ6k8<LX(2?ee{QiB~iX~PkTGUV!6kt);HfX3?aX^x6!qk==_
z57TvN7if6dK7_-91P#YF#2#+jIn*Q}avZxi31_=>0d{7H!{SVv!wTVaupSEtPZr9{
zNy$5nwu@S5W+Hw7D8Xpry&C6=@umXe&^K{yGAD7}U$U*v7g~g_2GqWbR2kE)*x5)y
z#y_hUrsF$dPdfP&-+wI@72)mX?r1vC+~maS27<)VdbK9Rf(z1cW3wPLtfo$P2m8fn
zOxZ^}P*TtDW%3OpK)^P<_Cl0OCpzzCnjq)hte?gqX~&ARo~bytfoxAIAP3!pxTYX<
zu&>B!54xfZrNIam-95+uxvn0ON+jjDPZ)y`82JShQ!I=NTS$M?T)G*v(einl1#{Ig
z88or-KuDuH#@dvdVOsSYN*(d%+xQNxx8a&-Y1-k@MJ;Air8JVBpt;-TLx1pg?{>^>
zIGyN;o`;?+AtdV5+(bpJI+>|W{n^r$PRBd~2LL}_HZ1Y8cx?Gm`EPh1`#1@Bp6zUx
z7VtHu`TO<KC6su>AJ-<%3O$1!%vm{#jY;|}@_2WdMqA%X9vth@k;;-D^N8?S*xq`a
zQWo{f9!{1+?)j{!_3C~p%L(Ml_iW?CX^Pt|tugFSK}Ye^46L_k<?m1xw&b}jO+8x*
z^#ALm>@GuREF91jlMyTm3vd6tSRWn*vbzG-J{8y^@+?W@4&ArcxKPFNJd5YdPt1TD
zWe*XLO>E*c(WC_giy-)R9<LCZ<Ug>}QA_Gth5DFrz1--DFN>~9br7NoDF4_)7Ay+F
zxBaCF4LZLz`&Rk`fs(e*g)-qmmSJ_aK&=*^?t&}Wv*m4c&XsE#GjPW!utk>L8R7^+
zEY2DB5I068D;z@}M4iQ!QugNbah!8Y-AGvKv0WaK!(45bUmo4Vf}Op>YD>G`V?LMb
zB=gTcCQZ)dYnPugtf+57qo1$XyofoaQzYHUUQ&$2!32dnaorept3jso{#7(@FXgdF
zzaZgsY?N-^Evf6*>IJ%3<h>w}oqh|H<BSX_IzaeL;%@=m1kMIl-Cmv#uz86FDMa3m
zPU#OMv^VyK|EFPT5IH6Y47IBfr>;OAqp_vBOfs_L2!E=9%hWzxSJ%Ku%Y?=JdP4#Z
zLm9O?E6P>B5{h=L$?;-?>k`R4B&jnLz%>=Vxqj_qWVdpId&<JhHz?<K^Ini3S?QwQ
z_SZH)xC{h`$0UGBnVQBkF!}D~l|jOS!nQjW<RjuK^3DaKPc<BAl}~SyOqXL=Owxo~
zgvrp-wa7F|IAayabOkHtRiSUun&qp^?g1M*??Kr-QVeYO_z7p~ZT&){e~a_sxO5D-
z-8GA?YH+Iw8I41a$nhO1J$3`wPv}Dign6xtIGqF5#UR~Bhn#+U$i}=I(x1=1vO1Qa
zC51?K$N3EWgSuZecMx)JX7}W}rYs}3%bgMw8_1y)JYoJAXbJLp5BbKKk+^p0ym8oB
zB)N*fnWU6{nzYnuV?0hoDa@O^xdeau_%NbSStwmF^FPxmDy)R&J+Orj>c|}jZU<y8
zz?d@#NJ*q0DO;raB?B6dn(MeE5@Wf|C@^xi9mo{ucUcpk>JV`Qis=EHA21eI-Cpm6
z?hu1z24%Fsae4ev1&VQqq+X0m$0ksAX-J}cf0T9}IQq;d+kcMdb9(DhZi%<;$X*;3
z5#PfVJZrC3J+N}-2lO=Mfx!FU0La$;on>Gj&#FpvIop@yo=^@Xx@Ca)khXc);_Q9g
zN(ZZ>q09ye8h{pjnMI12PS?X#DVN(mN4P^uTFMZky0Hv279fRfw+E{5=90`Y7`Hqb
z5o8(%JzGlcJ=9_zuJ+}!>~;g%spO=cd#!`!fES){3fAp`sr|rfEV1sl=7bjcj+uUd
zourzX@L~=dn06P37BYj;IvG6eF@njCSi56wC|x-m0aWX$?|YA4W>4+_q{Gj8J&`sV
zvB)B5V%q96mS`_jjkK}qo}#?4dsihC>Nu72!!vyzVODedL#ZIwD*y<s9BNa?PkUh^
z2p<L)zQN{cs(fLs*mscSe&b}A)U~vdR<U*>h6-OdksRYd>O)KLeVDI=nZW<_1;aoT
z<Ox!j5e(K1Zu32{Y$f^Rb@_FcY=NABNg?{_yO91SPy3Hg?2@hwMatV#rINOOvXK2|
z@%%fWwHwqdmQClE@S_F4#4KV8h^^eu8bwpj+?qWC@L?kZMyexy-IyX05FMjM_aA*6
z=9n9uVl9#vVWCpJI#;01u_SO;Vr(VHc5}qv;;Ut~`ng7{!Isa}651C#9Qnn&FelP6
z%Ef}NAVgAd^fs`@RKyb1YIY8p2<#tV?7z#_#e-9+M;Mi4e+p9-xBBn>QFi?_3PDyy
z2xiS*S3yH8N-vnYXKI*NW~C};|2oVSLQm=xJ|xpbwh8VV0f<zB`6?`1RA<_-h6mmF
z?x}7f^q+YB(I<c&_B;A3)gGbSqmibZ+c-o}ellzM`%K4a;z<Pc@C?1`6YT<0Hmj~g
z$GybVWE~7oNS;x{lhzD+s;-maTXi0lBQ`V66Y*WuV}XHD_3#*NI@!j-sxrapL(pkA
zN3Q2iEzx@(1^NTB8}YQc)o)_FOMfy?g*KEK`nrjF+M+&S_AccmnhNWvo{1kFjmNqo
za_W)WIXel|C-<;cDgK9uWv29I>J(w~;i?+uGZz<gx<jP`;xHD@bqLk=z<7QjF?Q;)
zmq*owcUFklcJfL^nJd(WP%|C38=Nuy`zOi49zx$pf<9V17d_?YDLYg*DK2XWHia1i
z2`OIyI-3Yew4FXIrzxKp#@q3kK^>z(d=M7lZJ|vIFlV1Z=qWy6xfmK*9uT<L%JR0i
zrO}qO&%>|A9>+w5E&Ytg;NEf1SWM$LHey5;jv}Z$WO_4<GaIu`1VfCSSCv(VGM&`B
zI`aUU2uBt;5~!CEi>-#`8u{gkAS3O*odbsy$N;ar_VmB;CMeuE)l!2YQsAZ%qKEu{
zV||yhw12UjQX6<oK`^YAlsk|F9GmfG;5ej&n@Om-fGETZutKiUru4%q3eQ)qd<Goz
zY}IrdoL%<!GAY^g%!H3lU`}JuPd=?K!&|>>L-!yLiFkdjCo<K81u^cpGsp=dR_5g`
zyLrG-NXPJb00mIUZj*?6)kKp38UUQXz_;-8{f?_{80!04^_lNz4iqMPEc1F*-Y(?d
zUP;ze<7(ZsNz|^kVLLRI4D7O#tj5FOO+|nka+cv8RJa_`dFRd1>A1<qu1U1+N<Vk=
zgy3scOIgufYX5AmUQDcRgs89>vyvnEb`Yh<0TGq)N2zm*4<dMbxrpl&HEiV>y8Mdl
zyky}{i0XJmm^JdNU9ks0y&u4Qr<Vy%vHN{U(@Z&ABJM<Kl3o35#TP@H<aV4sZR(d#
zrpO$xjN=J%XGp0-6W&+jGXfmpu<$oFyMIRGa~K=^`5sv{Kk_8;>aLVJ$kR=!2(-#r
zB^pYO>YC|3U%it2aSeklG!evjkeosJXn`Heu8>x{#g#L|B6u7vLT)cJ+-d~?0iogQ
z256?WC_4%zY8kRmln&xq(Wq+bvc2ivp-I6Urc$Y~6~$F_3p#h&a4c0Ir!PCVYH|Jm
zM?kp0(81ba{;p_tj!2j*RBY`34vwWM7RoT;1Vd?7)HTl`-p>Ml8x(rT<mnlt=%Ra}
ze$o~#qUb-1I{y!<)L9!6!;FqwiL`!5VbDm}>umRSRmLFcPgE|rk7vLoVu2$;8`5Ii
z4UOKk3wTZ%Si|-j$u5j0Gtb8hyi2^*pOwk=S-i1Q9hv%|M0Vep9@-Y$Angyis%r=s
z-yNxv5wix=p-xN5Kt!H~O1`^c_LCfLytRDFL9T=8tlTYQx5d90&~nR!mA8dhIhrgc
zL{NqPTU{DXo!Fqxc-fv{t%NBWa13{{6x>=f*Xe@w<a6#se&o<|5JLUvZ!Zb|p`Pzi
z`&nB&v*&R?ap2qP((VR*w@7cs6T0i+G}pH95CYworE{G(+pt(#JU>O$dUi<V*^KkF
zPa2I@{_xja8$a(AE+~B}T|jhb-(Qm!l@H63e_FK>pj3Va8u0~Kdyg)zdIxISlAy6_
zA3UU~y1HqYyX%UkZW4F)3nG)@QrDbbn%Zu}7X!^HmdS4}L+a+Xf?omY_VWxsTGn%V
zi1mH`*m!RU)>RxeG#0m?_+~c8%C;;hfd$+%4tO!2<{dQu3>Jf1_rtYlw<qML>VFXe
zW<b?ppF1|(v7UmAYaC8k9Xj>4dn&saR@c0wZ4yLM$~>-UZtW8O$B0c>I&tpBCi?BR
zp+Vw#AS>0o4Z};=kb-JekMDlo-@rQ4<ZbmACmtVLp|M6g;1PQxn_*g^#1mpP5J|E$
zT{>w!Kc#;{W;gQESssjt++fm(sYFdn8PxXN*-vuZxxlmcjDH|yU*)*52VUyWhU$-k
zwHT=M71s`W8fqJ%>L(kTY6?st^bG|sH~nrsvc_}2Jt%Z;BDb(J&Nz<m;qsAMM1N`(
zGoe=15gI{28)wz0Kj8)LG^t<z$Kd`eSki3HtM(4C<)+&%(1CLda%Pgi=d<8Eal)i{
zspl69g2cC#4@t0E3F^ExvK>~VMvajf9A!-2maPvefEww0V^>w+!jl7Ol&*+k=Yqyw
z)s0b%QZHx>l=8^_AjKyB4ltr+;RopOv(MhIVjPt7?w{m6cw?-ul@cMdtekWGTrzgi
z*Q!j>)!CKM!QLiCX7?CeS5L1f*+TRu|1ujWsz<^C1{V{&Iq_S;CY?>+&)&8z$;@L5
zA%FBKk>b5X4hin0x&d<=09T54M0-BpUZ+VCH`reP&w=?ly=Gnw?hrq0f_`H3&gXX=
zYhTc#z^@JE4^YdvSdE4wDv&kd5$>G-uo1tI<y=#w5a~$iA{E*Lbzq%x4&A`5f+xzV
z#_zJ{F%df<3%H#hKO1e=aUNWQsVS>@mu%;ca=cWc@jhGqA{ioiE{kE1N4kB3F?475
z=Y|kva%_P~zHVo#P&8a>8NXH%+ot8&hg;P|wE=?v?aLP~8Ga60l}X^t0($IdPcyR@
z72Zsb;KZr&R-4lsoH<kxX`(;+h-p0jHc1=yP90b}LaID$g&((#*fFlXwPu<}I&owm
zCKVM(jS)H@);34oakaM4o?hF02T;4_EncV5?+y@v&r_bDt4rRLK<LUl=emsCk&zf6
ze}tw$|Hh>e(o|Y8f?aDl6D3Pj!x*l3;Z*kmj|?$E){KUJMP_1O(_?Mp@kJ4lzJT4@
z?2KM1%#=xuakYThJkZxf?c7dSWy$R2zDY>;k_t~P0mUEWcJ++0@q=D^#4|8R@O=x{
zdFYv<RxNVK+d*4v-_cs!?ffOHlR;~)gj)^UWFqldNqjKKe(ZQXq}aBEyv6!-N}Js>
zD5)Hj!X8K7E|-K-<#Z<bIU|Ak82zJ1hOU4#gu)drU=rA!jYq}-9fcq@5gbZIZnTAR
z3h2b8WPJZI0c?DC)B`c!OnaB0ew&_k(jJRn&tPmWq?0h(w=KPnp(U|75Xfx&lxN1l
zGIbq3D9SOYGF)4W*y6Y(*F~%fJLYu<hOZ(GVl(G-gQeg<FS#GT0w?P0Cs=~fz-16V
zLio;q78u*=^}GdQA^pGO-d~5}9v-OUTkhr(!w+lUL7Nr!OE=D2(AK;!=U~LP&LbPs
zp<<W4ttf!!j-JyFRoMbmQK4kCdI%bI20>{C62PwLVMd3-aQ)(n+cHFCV+0cVkC*yh
z_+(~2@c1!(Gc1rZH?m7)HIlm->cvtU7hTwg_~#FybTzzp9hlK2&q6^b5fG}38K^8{
zpfV2Po~h$|NIJjm@GH)k+`PFcf_?YZScDi|%aTF9jIZTdjPR=3<_Q(~Jb(|AYnjZl
zH2>mcddJA5(A5c4W2ry<=7e`0mJQKru@}2P^30yqV286pwV`v)G>hf?wUnE9J_X36
zF8#>6aEdJ0Yg^3`WtMFVR|AP<3cF|cxQ;ehkkx?Jo2wc{gemn^o^I#@Exy!Ch!+in
z0Kj1xm_0%XjZA)k)A`Bf9@^C<UXXOdQF~C@cmkwkD*Hw;qE~*&JPX)0wT0XST8FY9
z9<&^ow9z*@A`;U#L<#dYmd{Zp)-nIDp@Py$^9aBn$i};$GB?Z-jwIQX7+juyHu_^I
zd(!`$R1kLa=6uKa>M}IeoBM|w4aSsplra8~@22fcGc|7+hXf*5Kd1CT@xWpH4qB93
zi{hPtlL<IXlxheQ@0|YZyNdWR!sBu9<p^o8O>?@^(c{~?%n?&0_s$C1?y&n{z8+N>
z7rG)0ZpPR9)OByu2C<?PEoDkEy~S9rO0tp%px+KybcM*rja3fP7!pK&jp(gbNpVhg
zUTDf3!#L|vnuR<h=7M*1x#J2wuz77D-2Bz{3p&^?c}T(Bc8y=Ff^#dC|B<k0Ei2gD
zYG{MuJ>iKrB>_Aw-;$hA%PZK&tLkbDXlhMYWC3uL0pw5;s{wq_>Fk%#e_=mc1_Cmu
zUDOA_-V;$(<jUz|$R<004l;Y3!nFD!QP=MqEPyKKIIgJOpHHBlE3QAn(p~}i8V<kC
zD1+B}wx9qpJEtyg0}&hoZ*CV;2pl)BvBAu;4&-vpm`-9?P^dzH?xCNm!fvzdGj>Xf
zEX>As7)M?)oXe^Y(7Oc12*SFcz+{Whk^Yc6mXw5hrJ-vO(Q>X#dK@!rcYGjiqHd_Q
z_9ngZawT2ECh}D*-Y&Ycc1R5a!Ke$ITi6B&yXrRb4RX|SQ!Mw0iOJO%;DiqT0ogs8
z;#NfA^0n>TVQ684z1IpHh5o^^MiP4Cd_#$#Wo=<1(Wg_T&@kL7y1)(Vs2vD0i<tct
zy>=;-pSlQjIpI@4XFi1|4P0DZlJ*RvB*pf|qI=Ta(^Kh9eJ%pyyAaq}lSY$)QxVND
z!_6V7(|hrk3*Uo;T+Lnd)f^T^JqFx!XHFR#wdxyFMz)n1xjbOJ45DrkC$8+pn?}yR
zQUGhtecpoc)ws`GOZ@6!_T_NZFZ06o@ZDQWY0~EGvly*BK2R!^hZM-q&KW=OoJ11(
zzJY$)>M|91<Nfj$wbOHcPi$U6p!mu&)H~r#CcBxO!`o8I1Y!flk7lEA=-5^3^eNKd
zD*eSan@F93!Lk~Tn6X|u^nG0S$wZI_XQ(UR)APFyeEWn(6HqmA<v}3Cnc1;QzFhWX
zLm&x-hKEZse|pbH>i5}3_>ASzD_>><aVt4)Q?4TDG-jcj49D$>1gp;uN>|~R{5A31
z*>ksq-iBqUclTG|kEO6A!lZaLd?NHUGZy`ZQfpao?s?LAdTrJppF~fAFt<cD>>t{a
zpXxS6>RtdE_Yg}ZLD+E%eX)%RB%B)RrmM-uP$hIPrW)T9be$R?6`jDK5jCLeQ}i=C
zP2!KAhsaHpoV!NQv?6+|-C{8V$3$V5_P=2Kx<mY&PQJH;6wRp*!5G7Bs>{BdY&$yX
zxU3KH;2rTmBtLh*3NCzy(W?1C!y+tk^F$eG6ryinuO|tvdsHI_g;+u)P)-2iF|h@@
zhhK~Dq2G6&i#!!Q#~QLmyF?ge1ElzfmPIkxcbgjIiqj2UIuKNxo)sZ!&!JR{Xu~vk
zFrgp-iuJH68l^P4J~j=2;(88~pH1;JJzejk=;0fff9p@Eq6yGzAy}5};RgDQ=!F#h
zqWt&p#Yj{o%05osk4F%*6%Gu!ruM7vElJk@gNPZ%qO?l4pkB=-@x66&#E=_bqHlKk
zf9S+wGxP@qB2~6JOkDx1{C8{K$t8y4mAYiYv_SzAV8E&NEV?_Z-lew&XFInkcZynC
zksunvk~R%RdF$nIiTvPj&LG|<)mgAvYoOeqgvxq7O=P23o6HS)RQSQo-vs%QLl<qk
zOH;&NM%f=pDChu6?Z)PU>HjNBbPv-Of;ZGwiSM={5L`ZW9O8JmR8R&kKu#JK#i>QN
z{q<WS#C#~++N^<O6un2?|6NqYPx@M|rqq^0>o0B}p7wG)C^68ZkE6g?t&ge$5i`x+
zTxbs227|xDw*qzd<!Tt%b94XEUxp7+3tm<@we{QDIIP{Ok~rZ}TxXw1JhX9rSsw~!
zco}t87&yeSyu)_pKHbnSyZV$4lI3N(8jJXXgUqf(-7x<^MloFcvzVwI8U-N~023v-
z)_=4KN*F9cLx6$4mbN|I*)E<uwBxoQV-u2-cohQNKXVs_dso^9h$xz$SSqC3E`RfG
z?7`W+P|#nW=r@g?+4<r})``$h;PVvy2~^c;iW5sTn=7M&%FJd`Ieo2q2e69$ogMY7
z$T{C6{T4Yio7;{YCT8VrF1v(9f~YI`Vn|JS=<KswfO&tAfeW^q@^v8yR?$&-gMr3P
z4AV^Un2K!OdnZ{v=VRFltfZa)D#8*52@L_g_U-_H^v%9nSdeq><1hx7E$JDy1iqau
z9Y`U3hhqvEvX$V&hZd4h^As@#k5?PVrf-0yoCl{5#<V)N=GVTx7Q(o+=ucZ6v4N`X
zFbh^C<8V^*x^s16EeP=%SH<QX!lAVob&raz@Ft!J5B1K}#EmdYfHlRn7$o(GN!Qvp
z#GXDd;|e|;+9m1*OffYLpO+|qyH##_7&uHLJ)CHLXvGWZc1$ZenPaAQMAQOgjNQ3t
zQqlp~4I0P3-k>V=@*OkZb#4La+}(sret6JT`1@=de+PrRM83XBW<v7@irFzV%UZ;T
z|0P%{rzgb=QB}N+rRk3Eu<-!`*J_3R-ZQ6xhcJ*0M-{J>LYAbLEAqF;f1(R1n0EW8
zp94><Mh?!pTjw@+`>w+13|SH~20-y>n*&oUuOu1n2s|akkIL?O&RNNp9Hags8XkuV
zQk;g?9NrooNUFko(;3zxIgpStxBa>NL|~;qsHDs1&kwyIVbQijsJ5H!)^7<9`Aezf
z3#wC62Wvj*;(ya-R(^8!WFJc3`j5Yy)osAcVMi~to@7<!@FX^2byoX-l2zvlkzODr
zi3Bxp;XKLyyd)dGhi|*e8CVw`L8p}5y{3Lrg>&DXi$S_Ie(a}s@$D$rFVPdHVE=X*
zx3e}f5pi}G<8YG;LTC^We0u$dP@S9Li$wl8h8>qCM998y`BhtX3;%re%F;(89f&aL
z5I)?J5A^|b<8CNLpS(~CijK>Eq<(dg(Wbg^)m#VOFhSd?@xLl`zjS)i^(Qw|CWfbh
zOvvoQl$c;v=zrAOmeThEp+!3%TZpFow1XVI7%Bsh7;Xg_5sRZm7z%HuY$3s_MPBx8
zIq8sfy?^oK7-Tt>^n^$YA*K&wKjj|_hkJ~Z7-pZOY1tx3tJqSZR&9%L(b&80#G+f?
zn}H5QPc_8VP@l#KQiU@p>MmbODeXSco#^A=cb0KNqLFPZ4x&zgm+ZBZgLHpb;xlc?
zVXY&LbH{-|MKA0Bede0zTTr0{p6~(X$VPKwS(?n~s+An}`+|lv+3e+tmbCgqRdv+>
z`ibjvRu)UM#jLpP<V*9GXeXg4iW`N@pnbz(>}P`k&a_RCm<{;A1@EkTcI=E+TS)TK
zM443Dq6k(W)k@9CYt(rXp9uT#F_u;>v7{v&x&Ig?!c43Ppwc=>Geg}B^g(+hi{gG_
z&ixhej?a1CO6Lj@a;=6o2KZJ&b#7rjOWSEea6x08AgIA91PSNyKSD)mbcM#w0&QFF
zIF7TfAuvzJ!>J)oa5uo+z@9hs(Jf)aP&I~e%yuI&B$Y~2`74sddB9?lt-KLm!}QaY
zB#VW)9@G0N9MRVwsEnI9b5AQ$%j72YPsa<!0d6!4RiYNwFN<kmtMz<wKE`kc<FG~;
z0`99ZFD!lGsG_0!XHE`$!zUHNY(-;5{p28VtFNzciY*uFuU%%u|Fl3Mf_osVO*;s9
z<Rq|NG6kQ#unXvuEq{-dWFa1`HSPT=pCO=t#W!AH(IUhs@R2FWtx%~mKncBF{uPeX
z<QJ`N7p2bBsYokdq_WM64H_T)_S%03q&=TsezZKM*pB_Pm*T5<MsqACG<XBnhM<AU
zoK8#<OyoX49T_h|H|El3jI;MVQwhB-robxB)}_oXtb_B;jqB*S>g_~jpUAtrx-F#B
z56^s(kpqf1se8MO&m_n33?S<SLvZ&s8Fkm?#H&3#mGj0IIIq)9P^A+}@k_^$<;*39
zbLtkxYJC@fN+wA-+qf)g(oHb+>!qj5JY3@>`Mj;*Wn?xThC0tCuO*2*sA-j?$=Zf5
z*Hqvc*vQVm*qM4ev_PeZ;0O1ebyR|<0ZqYH7z!^;9*+ao*9h(x_TF4q!#1OVEw2zE
z@t<$1{8gx#!8q!}2<2f56DntJ@w6@Pq>?Mk@1E^0Z)J4A9vM$Bs!QIi(1OZW*+Fq|
z*qyCwZ}gnY<m6<jI-FC3*Sor@t3#FuKemLmSET^JlwI2H?iJ0EwkfNo;6QU7q=RuM
zQZmNVW_3F%b3n=%07H`AfmLA-U$pI?-a&hVBGx=(sIW({kJdm+C64)z88aBZo`B_Q
zik3B=9h`AoB~ocJ9DAWqJpzo|yUDl!LIW{y3MZY<HlVuV3$pB+tpi7gYP?&<HDb8<
zWRLs3OpFXOw%i<+|Gw+1AVg_3+TZe1(g2$%9>@Ve6ZpYascMYpzA$c2n_!{I3_uCa
zmO0YvF+r_r=B)W8rC_$VrIEO7B+A%$4z8&I<NM+Jrzwc)P1FHx{Q$eaS|*x1j@`%k
z^|k02(Ep}M4)EN`UDLKZ42|Fzl(<Q(fCAQ#roRLMaT2SZV#5blrnG<n0>hSgzG=(|
z4vGD6#Wr;8%z&}&iU8M9N=GN}2^_E;wLWCodK#k`M{81;z^DS-XU;bK)$bqD!lN9W
zn-KTCiXouVi&4@Flisfolc;QmP7AiUtL=>HVyDd+4}sfm_~5)?0q~^<B$CTg1Mh|F
zwDh(?Gi@CnZl-ryXH}r-lSdXBsO2s&IY@x4&-zzR+87o+A0Mo0iX4uXT?~F-H=yx@
z@G*Km3TEHMhK`(Q(2Bd(uf(SnI|ER?HSxq(AXqFQGhiIja}Z?JONDCh;gSox9AUG1
zcGjny3SPBy6tzsuzfpmmh^8yZSSNf^zwolScnp2hF{Of4HM*4=S|yb>!Rus@e<}3r
zv)x6?lMRCC1%wA-9Xh>@mJnYD4=_#i60!;J8NCABO$RUz>K~3dofP;HgkXGDr$URA
z0<YA?9B$#kr(nxD*)<Q|7VP6v<OZ=FC6+GAU`!P4LgZEfCyn<@t28_yaQRYAjhz&?
zUt5p@cBO&8ZDT|#=sz~fdSFHPupQS4-ZI9Ega(zcc0j%d_tLIXVADj<&P<{68B%F)
zuPkXv9gy}HXs6Q25&k;Tt@dD@cmYdda(?);2@DhhD#Yc#I4J4H)g&2IVRqlMgRtfZ
z=^iUuya-ja0&p9T2H8;Y*3nnN>aTOm(Ak^pS6;4t5zi{*Bk)a+@FlJ(U&XqwjmB{p
z1<!{aBd@&V7i@}%BMgUT!?XuA_}A_E3#1p@B;B*8Q~O)Fq;PZg6$L`%VcwvC-|D*H
z^$FG&?~<=;Dyy|q12U9mspe*karj^?RPdKV@diIzNsf5vb2`3J%mCf}*<;;~4%AmU
zp1-Sa_aa#~YM9Po*GC}nwERL2%*kY>$?@vm8Z11UagqZS`{OpcT$lW9%*~b3iEx-N
z3W`72^@cj1IWrG~Yer{OfxXJLAitNN@3fa_(?fvwfko>fW4xf|MRw3ybTyQX>36@H
z;CR`;wDWNIRa=q+gHWpf3T_brrf!8qFei#>^iY~P5feXtZ7zNDRRa7mx@R-6-4L(^
zH4j-dpO#*qlPb>Tz{JG$I*2;PsRYb3FM@pFBI+=%kmDD62$D`(pMZ%H%Ie-}lkR_P
zhbyA(qM9E)ni@94tl1PJn8;3b*G{q;)wJ+DH-e|0Y}h70z$VJ3qBcM`WvyNga_C~d
z&Thly9fJ6dD>=F@LMzym7Qj6QtQXGap!>@RM~9VAAdfVMgsfp%rm6?FYKvknV<ukm
zOt(rFRaiekFL4%;%_FZvfoKzO=dzE|squ=+z*je01UUr%vfw=1r5He65jPEBv6Bq~
zqeU$)YL3@oLMPu3@YrB6|1FrD<3$Q6zt4zxUJdI7MotX2Ib*JlI`S|T-GEQb7C?%d
z_F)8*bL2d-@|g+LZJhOv_Ztm}n)8LB@WZdQ@Vj=w+J%sX<u5f}bD$ssyUAF#benl8
z;<0~9*m(|f<7tOTIwcw;(pL+L@ED?Pb>toH;xSeLG!u;$+Mg@TD_b~*emZDPE;osQ
zxzjqp^1}oxh2C~K8S&(-nwNeKX^Q1p{O?V-z$(I~dQ^m$VWsJwZkB$4^IYmw3c(gA
za0m$q-A>D$IbaeiP!`?^0siaks@^Kz2g2;%F>Two=p8UEq%=lv36|6s+&;27PXYA3
ziO;6ulhK4~qTzZL5A4r(WQrsd0{f>gThS+#)R*8n`J?9h*Z>6Ij-L&|%`MJKu!Xy3
z(I3=D!txok@UZ11tprrMALksVtF!z5c1KYs2I^zpL4yA9oCDf@d&0WE0%^cWLK?u#
zbFzzO-CLiM4)IH3b9>(2LL}E6Ee<&RE@S;)6c795B5HQl@KX9s&QbJ?!vELx`0?@O
zBj0{@ic6nNOopZZXq)~DgaTs}Pfi@~R;+(Q>#<}nMtm#h*+au;w6*>NkWJs&=ipD5
z#eK8kw1gp+!&5LRlljtVLqV(5*g779H7Ra_6!>=<=z%pT)%2Htt9Z4^zoGMVk{Ot$
z*(pkzNT_1m)MuYzW(Fp;@kY6TZef>IWPQt9q!;4Q)$&8vqrZ6ZOujHjXc6qJ&q65v
zD#U@m0g+^={(&_r;`Z6IyYYTu|B3b39I^!`IVl}KQBiX;z%}CCx7Up`leWq~NAjCD
zU3U4TxV-yukNVlKT*wXi_U0f3&qUY4TYd}3RQFTm6Rt^Dzv}IPDvs($n~5nf7sw`h
zjQA3|7WZX4Q<5mgYG8R8whSNE2uWC+A=<0p*_+n})j?GkqV5Gj-Hu_u!hr>N^v7#u
zMcr$>N%+Ao0a`=0j>MZt@+h><7TbII@*zPt4JMgWp$F|YP%UQ=iiXBCHTg*5M^zuJ
z4W)w+U<b6|h<-1FD=lzUaXFxew`1(-BvRW>Be%T<hG#&A-YUDd3<bc7q4~3Dd>Iab
zRz0`{QIyFoR$oQ=iRfhj_K>x;EZ1`#nCPQDZVb$K&lqM_DK5g)BTf79baNPg&@ewL
zA5c$8E$bKCFIz}E5y$v9N~5U?C)k{u3Cv2JBpmJJMioL&SNT8#o0sP$bY+&Ga76k6
z^f_SQJj06_bvpSXvABWJRe(cWrmP6rIg63De6Ea&MVta3g@4=7H`#5@os8*6^qxgz
z`gF*PjKK!QQZtkQW98UP!i*kuY7o209epo0_CI@-_Or&#kW8UD!Q1F#08kPilasfm
zGFYSW>fzz&p=fY%${+KJ`*BMRMo*G%VeBF<kRjOw73PWut4nbAVncMZeEl}#y+1d9
z3)dVV^sz)V#EBB5u1!)%plba^Yj{#OP%1A2I~^EbQEa<0+a0sdU>bWV`L?4zX79{*
zL=vps6qs;nR!vw^#@p)C3E;CWDPw;asSYbeneT226^<AawZi34XtePj2{u3;J@4LX
z%C!C}2cKI=O0sW~mp8wwPhslP`rt_Xs`2)K&bM&O4`xNSrgDjK)w_%rpNcvRefe#o
z+#$p_b@=#VBRFVw!5l;-1ynR&XeU)yD2iSi+QsjQW19^E9`0v~nfs9vxqN)wla`6O
zM0y9Kcb<MY(LIL`$14T=AklrcppHGU^6EJAGLP?Gl@H<aQ$8i2?@33#xL~OesWQSO
z?SJNqPxGsB!T~Sm8n|xYWFinpo4+|;DR%xgKcDhS8D5w|SgU@_frm#2GD#SkZB+n%
z(dybDD9HCgwq2fvwmj@Ly-lXxaU%V}-^<eO8=VfAx1r7$$#cNN0Xi9|-vy7X?^@*O
z=fZZ};0AMz>`3b?68buFy-lPyT@mc4RTVT(wKo1m2=t{rof3-VN|N1@b<x3)W3kk;
zq#x2HI3+SZcfY@}z2CS;*QndW6K=pC8jsZo8KPbe447h>w#99YRNH~Q75fhYP?>)w
z_~95Zp#3otzXH!XeYE}s$nH=$0)v|gK2%LQIRbelBO6aFe|%ifV8->c)zz1Lk0-UU
zcAwh1-}pmqqU<?mlwCb{Aoc`ta&KUtN`yI`8jirJ9a#rBMlQd^J4&aHxhoT7<5u)I
zPh`P3;mz7R`RQl3`(@M_&WuOsZ#DH~3-V20IEo@ikNP=rLf#air((s|G5Y+LYu$Ol
zD6m=18G-Mfqu@I%d|^D*M@v~|_kNt^;_gfFnFIUQD&gARGR2u<E>cqL|0pL)5g=&e
zCN|m1HjKChLyg$QE9-GK*HV8M^k@rSYJt;NL9$f2jj=$7;HAAc=SNKX2Adx?K;9ut
z29YMJ(`OB6{`1>cCU=@zIHLG@GJ2w`5|I498jGLe!TB?`J;8t7dsgiR|GD(gQ=gvT
zCCWAv3h>oa1c(T1-BvLt#!Ca+;4NNM9g*A#n~^tWl7+O1+ekE;=9&KH1mHSvVn+KO
z6?t7phI`feD6Y~O3|<b<8$ZQ()S_Ga#W%fznT>!1r|n^vLjcv_<M8)f2<IX&rY)(N
z^)y}yfj9S?oY~r?tD2X_1w%nERB*|GPUhFXYQ{MA6tSvFz#u2g&3hFxWPV+n-sgO$
zmV$eG3K`*G9d{eB6Gj~<V-*n@E>~n6z8Q8LF)YK!`im*<{_LEMww5UtCr;=a;E$S_
zj33lYIN&()|0aT&cspWmr4)8b-*7GPgXikhTlL2sRyN43iD9*-3b0F+O1Z~=YuE@h
z0GUQR4u^WIiaG`5_*)#prL>i>p8*|9*4>})Qn*fk6i)?QEOmitj~Oos@4Tn7NFs$d
zrc5S`9jRz1iZ;fchU|Ew^@~UVVI`UhqA-N+F4(`9!N5#Qz}n3HT|s!%w0;1IM2Gri
z%e$P{VcZ*)Zt{maEe1~FdOi<@x{?QcM+r&&^WCkx6n6_7dd&&UCNKL!cOvdT^}J>r
zqyO-pyKkpp!q~@*C*Aw!0QzyE2!T0b>aC13GFlP0^mtc-Pu<AMvi=fk4%n$Q|C_7)
zOVtVtl$a^%h)#?aQDbaWhz|;M`VAR?u}`;G;4SLG+IZ>GJ^yA#Jrp>mMA!r;UhnH*
zv?I|G0=a7nfsi{mxxnP>6i~&ZvFXs*YzF}<9<jnB8fl%*MZS{~oLw#9vlP7W%?RZQ
zM69|()Z=rEsOOY>Huaa1x`bGSW#<o^#i3kO<DEmhU%tQ^AmdhxRI~HS)151XqA&)<
zd=7<dF{ILG9#$Lrlg~j$2d+Vj(Ed4+4F2LoJbba%F=UxFNe&L84pP^bit%&w2(7kb
z_sa1>)OxrNYqBbBVPk$X4xfxXFj#rb#wNFVE!oOVv=Er`V8WDvu!pui-5$maz|K>f
zIQI<M&pZG;CtzU&@ue;$2MhfI=7y2v4dGHESV3lwJ0Q;{z#`GqeQ4LbramGyreNu7
zx;IN!5tGuWqQ#SJ^g?XrSzs2!M|d<E(2!WZU}ZCWKH1%(_`Xv8gu~lL(aoAByG$QR
z9J2v!z!9ci^8R!nE(%0Eo(Dk>bH&E->$l29>8hKt`55Fdt<dO#%F_Dv91)aJ4{u!k
zd8*h|9CXQ#Tkhh@>;jc&S_07hVD67&(^nUGYc8dZFTCw^Wzh3d4@HNPpNV*Y^TFCd
z%y)V(|Lji^uLltD6d7j5gPV;Cc&e@QY^|y|o<!n|(&ni-VEexUsNk`z$>o#)c^I}$
zCfqE|^umj2vpzf=7)Lj7w!=MO_}ptg=-T>gsQu9i{4i~UU@B%&go_S%v9)&|px|__
z9H19jUfw$@xd~*$Lq;+Pc@gTpAb$)0Fb(N(ev1yP`^+2p-C%BnDRt^=QoSI`pNFr#
z`w8y$eazy4>>MbmISDsAu09P+TbT#G1<_}}hlZcX3Pck@?|T)HrxhBo=Ky+T#Irmx
zG?2WVBe`K=3WB)?q#^S@c$pQa_9W;2_K9dA2<||;CVIT%VAyC^WLT!K8Ft1gQkUSC
zV-L_*6WIFWTeR!F22f#ljXlP*^u~xX1m7n`pJ*<M9VJacTGXgn=ch=4sXsx(T;`}^
zzsSJ!V=>CFS`)=5U~!JP#qK%rB^_;wsd%4x)4h8+m3)lzle07jW&S*v0nlWZk=#Yz
z?h#6Z(=X6!eps!E)Fr68{*y1e$E%rdN=Abw?Y|)*zuxBa*|KsR!&36<V8fl|yJ?@U
z%9%+GD}xCqt#%oZSX!cBm4^*IWBPH`mTu(4vDzc<9B8}mo6lPDHuxL`N^S(}Z-k*_
zY*FKY9(_2mxB{3xUMLjZNnH`<KLSvmLI}!De}r+hb}s*9B<Ywp<ysn7dWs|Iu)`V{
z>g}xD><D0S?FjAgX3a9QD~QK>@Y|IQ`&c&7vFtO$QWyi9<J2Iy2^BxbQs^?I*m2#F
zdvnG8Lmew$)#HKubqgPentR{hFSLrfk1J1I69jkZRsUJXuqnYNa+{|>MzSD*9KMv{
zRrYIIfUAjMdXtUK7S5aPHiEALwHl3t-c^Cjk851-4Cm=e>WFTIwCZ^TtwkS6#?vSh
z14&t#SiwTuF`{j8mkMp~20DXH;lf{ZKY1poFZT9IZRq5q%H*ku;fd365|JZ*;RlCV
zQ(lbayzK>-iS2ISOD_!?Z_ZDz4)6$$GezmAJhaT8hI#ArZRX%wEaBHxkyBcBf&vg=
zVmDev56ICV!_?*uBA%1Y*D=wkC}gooMlH7e%6GTZ&hYw_X{v5!cz7uw>|>YweB$qY
zut3%Q(4cT>IVYP;L?-!lLqnPoJ=D0Zc*GRh39uih+5F_lF`qY^47djFEy@p4GntFh
z`s6PRYZZi!xoDu(#ToUba@CZb3e}hGylIWw&p1Wh?GQR{u$J8oEGIWMJM=Cz6q1o#
zTL59U!@r<C`R+Al>o8y09nQ9jQP+<uSxzmUci+rQc8FmjmZK<pt(~b%QOqCZv~(Wi
z;`ib+p<5>|On%ugZ@5v~dqQG7w79Sa_L@9I`N7Bv`$uNhQ5yXAQ_x6-NWI0Ccf(5d
zGfn#*U<aSw3d6<Kv*X8suU~$i0ZJ(Ctb;X11Uvb1o)>`_mQV+r2qzxz8w^9mc82i>
zpR0F;W;uc!0t`;?7-y_m!aRZ_A<rqIC1;ERF*v97FJW~B)7GW+zoGVHl-1`mPX~P!
zB=1+Qd9CNGW^HMX5UU{YOSXd@fiSH32x^oNFUKe*j6OEWf@*}FNC^sv-N_YlhYA;L
zS)rnqoUhh!5bg|P&17#{sT7V3ZM$OwqjcJivy>7ljss=hzHQ0^Nm%qp1zIk~^rSJc
z@nA0Ac-nuaZ&gf6pEy|CYNAY;7n`c-rz{IhCI_2O3V2(khQKWKGMbVg6;@X)Dvy+O
z^=;}^$&@uG|0j4B0zK>Mf+>t#6$_*{InQ^oxo}M9TL7;5BPlSlaa+WaI!Xs{{SW0o
zdSn1JHjM_wJ}TR_NzOXMif@iTG{=2q+~z?ZUJBjh$Xj*LpX=keaRTXt5)a4gkvczo
z$`2S&hxn^r6qadXq+!J?tm~W1jhTows=41HV$>x@Desk1sx~aAR_>XO@-e&I3G`J(
z?t@@G^?DoHNkqT>KXZ7BTp$eEM)R$}-=URApN#0>kLZI&XP{^7Kaqw0*%OYv`FmGA
z0n<0U-0FWp8IBiM3~iGUOGul8X-Yp#a@p5asM%c-><zk_l3!cpml!>@X^W+sfpPTc
zm%9W;pWXE~Pc&?#g+gpkz-_b)C%)*Q%3u`dLo@2nXd5(BAjqrek?>i@1<wT70<@<c
zsVeNLsRv@2hMKE%w6&0+`ycmAnbI;=-`&b==)t<zWaOcH>%$>Ul`(#TXsB&01|`0A
z-;wfo!cc-Ba%M4rq81|?hcp;p;ksHmZvDGniE@^@seUKW{fJ_&4%sjmd8e!=Wr5R0
zvdZwn%v@mW2_k1g0iY)E@Idq#wRyw8N%_}8ps4@i_HAIsA%_syQL?Z6l$t8TQsDI+
z>DI5MS}j#25Sk8$+#{FL5=kC*t&IGWH5rLZgPH}%(@kzJVJ!R39OtM<>l^KoHFn1<
z1Lzs8_;Vo*2)8*nXW))MsL!9Y`GSeND4_4nXHV(p(j-^C?%`Sbu7ht{#&!Vk0pnOz
z2kzROQIpQei5>JYOn%*ZQ^tu_rc*gfIHj~<S(g^cdvn0nvrPi7n6m+6K1GvQ_R+YA
zU#hBNB*G+Jlzw5tXRAAD+jICCdM(Q&IawxM;rd~g)MqV5xbs!ZRSQAy=okfT7X|~w
zFVr=iYI>-gzt6F*`six97<L0soRVhY-s4C`XhC^tp62{3h(t~QCK%6;C%}qtD66vI
z7<25<@=jvwf{kr0w1?rVyDe$)EwVXB-Y3170K5Vkg~HGO9dV0~Azx9(1#rn+fNo~c
zH?l&<QlbJ#ami)}rYgQY!b@YW874Z%q3(2%ISGm&NhzOr%DQuInpQj2bjev!2TQ!L
z(PzlCMP3|nfn~M<9XR#Y;;Age=V+DI8Su=%Lr)>G+D;5%Kp0GGS&~9CGJ3_YSFCQ#
z%fwcqYG`*+rNVK)s~C@kP$e~6tNGrf09;d=SjZtwto0|dyjgDfk3VUe{KmQ*i<_`+
z%)?+76cc~k9$L%E{hQSt;@hRuiQiKz*7B<D=oK9;(>PxdU>XeD5GjP)3bZE0^B;s}
z^oE+TGK%cor!e8Cj4z0I3!Jy9q~=p_iDcyyrtK$^YH>iNDy@7#zcS8<X<3fArWpJi
zKOM4H>x_~{(cUb`XJD8P44C6o(%_IeWSe6cSd1j0y0@rtZp{{DfF2w(MKt>kJF?l5
zT=oVGevK#DL63#Ba*Mmh<lm{L2#&dsy!VwJ!e0;`J^!^EnRB?4`m$N-dP%L_wl7)?
zDyKiD#ui;SEX3`Fcg7!<xNhq6k!%lBFywj1SdUUV!=ScJW&E$HPP!iwTzUx65ecL@
z0o$jr<D;*-*h^5XKUCbgL51m|&x!glpTNk)@>+)8(?Yz@dm9O?*g9m|PEDyF+9e)?
zYY_1HVgUFL?BZfIt`2VT!P>b5C6wlO>+3Js_2);S?JlQsehP)s{;l7SNHmj`oABGz
z&W15Fy%gxep)-4y8!HzH8@_?v$HtZ6gW2+#o_AwoNZW3`lqjQ-isL%r8{F4A{lD}O
zd+U+%{FuoQ7?}{G9ud{o4u=5V9-uJrV`JTV&$+)lyCR$`JP5=DqblWH!P9s)4Jr_j
zweU;TSlX{}aUS0L-B0^AsF(rbP1@3TpnN1C{ZKPsI2-2#{svy<=*;p;`A#w|vIN^1
zt-Vj#OLWb&*wb6L6d}zed|ndPoevNA?(lZ90`&!>b+vfO>625t@BR0S^b)pa;=Uw^
zSkr|$9mrs5UWpz~m(O{e{)iWI>LTJ6p;FF3$;>Pom5Rgqnmeo&ro;TL-ov)mu!MPx
zaY)mbvq;sWh7+Yq2%w!TG6h2L$=tQHdmdOT?jreIH(H@sA%kuq;d-1boaN(Qzyl$M
zhQl`_G7i(3K;RYjj)H6}G5L1D->4g-W!{vLJeu0G$tVMh5A88BI}(0COr-U^9!b&F
z?y>+8qS5quebK?{N0Izdtik6;QblsSoa4}(3&lf}iy|ye%^e3+{^uy`(f;KW&qg}f
zfZysF<b}M(ghl(QG>McV?DRItv1Kg6cp_gf>-T=BR$9VH(NG0hsdPX!ygPPjYZa!>
z;zz28dP`t<+FWYtv$LI2jo5Zn?)Ra+i)g=m=@c$`_UtGNmhgO5wqWS#RGlbpDlyXv
zS$FQ^S|CMy^cPr@U(11}nB$j-y1%HBOM!IxS7r7`LWNCOi@N3=R!&hLN^H7`aJEi#
zQwgCBU$)p&fw<mvvb-zuM<O^uSNA<q=7>OaC*eU{_|D(`GFuw#JuA6spC|_>{KZ)3
zoyCIe{I$1L$E_hu$J(hmXHOyjc1`-YI?~Hj0Dlnm%g;f}ec=ZN+IUj_=6z2VRto{<
z&6Fg0X`<1)P2UWfa{*6U2_wFU5c#`yZ4C6OVQ(DQ==j#NmYR9x;tyAd22vEi7@;D(
z#JrD_<`r#ZYRwzEiQ$1O=x&9;t4zuCOZSkPp-*zA(RI*x69+#L0d9(bfeiADs<hA0
zn|A*ho98xbWW%JHwS)CO?Hf$M2*MSSM*~tibvM|bzT&m85EUvnlOc#^Q5iU6>3=tE
zsLVp&uU2IuXb@3~38oZCd|6Q_VD4zdL2lJ@6g0;C>)#CGFAF$g;h7PWYVP)t9OBLl
zl|T-oB4kyK3z!yp#ZTh9T^-7DyX;n7j~@HU+%D2vrp_?UUtzB@f9d__f;73Ib`;sF
zhZ4}+|8U+SsPNIiJ`XheYmBAKN?NXM{qjsz(N@HIBXUsNdHAP1(wG+^BJfxm9RpCe
zijVa7Dp{Q-d!*GP>>OHO(vpAgny7q$@UofV<i?;S8`qkTx+#B3_q$;!`Xa+Y55r{i
zWp!;{^m1P<0+br0x{!EuEqkrLNo2oU207t413>P}Hq*gk>6%;TSpwj}Ejk!ifN5C&
z(ChwF7z;`Dqsg8omnso%3Phw#pIZ_%6=Ofwf3Y!haAu6m80@#9ufOXCMh*X^%|Z8>
ziFs1GaLfyFwCxV8&Uhk!gTs&@k9*0E8W@yTvL>tP^xQ|4UVcy#I%4+plq>0OW68@J
zo1_{(?IlXtMEmhVWc&#uQC*j-d9!;VSF_lWhhd?O{@m5iENd0~FE>2J`5piv>b9e?
z91`+jOJ*p*E1WS8sl4#?CK5ulw5R<MW{|YV>M)#WxiPFh(7EZxfrFo7gs05|l<C%+
zmPuKLw-mN=07s<MoG%%enms%{YfW-7G7{E=L?+F?RCT^$WUKsa${P>e_1-9JoAYO1
zN<fC98Xb9U=9@qE?o+H)f+G|r_#)k!nhG2Wsgs~5W)QAuxDo6Sl=2-N4@t9tPGDkJ
z(Xs^K(289RGVs1*G3ddRqkj(mV1n43i;aui2>yY|#x<;(6fsm&HxQ4+XfK5R)mD0C
zlL<SFe;9|)sk-Mhc6W4=b}jWqAi-ML@h0=|A$}+bfss=_i1T+Rgx@;`W~;`Xx@_xo
z>nR_F{0<DJ&}SZ6?%q-c677W8K9IblU|$oe{HJAv#ZI-><@2%RpzXSY%+N7fMne3@
z7KN;pkmoy<@`~oZbSmw}G|dUjq%?{E5v25!!EVJBbU8B^vaf!IcELw4-WUAL5n)g3
z+O*EC)4EUq5*dw5VX0Q5$+QhWtey&Tsd{d8{TFtrG=BG=H+u;!jX9m*7n0L*&Mm9z
zH$U8h8Pc)$*V&2uUR9-v#{v98ArJfEa-<nRu(iq3p%OkTtGa&>F^(sk3EM~Kodg?4
zYYl3Jnys6+Xh&UL=^OmjV(zF)GthrnALg;aY``Y*;`HVUnOyb+ZLzQ#NccTga^0ji
z1GV3T04@iR>3-n#4lK;ep35MJ+b{U>m(mv5HMH#4Gi^>?NB7VPgXQ_7iAR%>AO8d=
zfG@DnNK$T~vF6xoU^gd<1;Ak5X_CJTFG9^q99Tkf13NB#Cg}`IL%Ue3qE=(lpZpVI
zti(v!96rGbEz3CMUnwD-PuG)NLz?j={yT=aOc!VfJXBN4^@Y3OgB*bMo{6hoSRo*u
z0#Ov?KmGh+m76~`0JXW~19VwkDjV4u_T>W4x}Uy^7ZCCbCkMhUW<QG>>wz9ALgRf=
z9y6?wsB9+-5k9*YtH@Bt1BS0-0fr3>jD{Ss0;K5>t_1*Ib_>NBbHDJh)cYddHQ5P0
z9^n;#J7QEyDRtb%4m-+evS#lTDM?b35sjYDyIN4Do5IkLu{yBtAIGVC)KcaUr(O0~
zuUdDO@7hr7xeyl*<&|d?T_YK-BV>W?mmXGS*1a*%>_(pSl$^eFNUIj;?&!d%4XJ%8
z^dQrFKpcnLHQJe^CE-+(KM)T2`FIivYif}YcET;II8DV9lESFtm#~5qqvyhLv0u;R
zzR;?%cQ{1kU+Q^t#SsNSxhVH^-=rs^HcJeX*Y(3=-xj5;u4oC|0=B#3>IO5@<f6=c
zq(UyYVi?=jVKQU7yMhc66`2tK{Y-Omwqc4(CjdUu!*Z>9l+!iCC?wHRg7{N`e3F6j
zB-(2|zq=8(sHtUS&->s&u=aSo(>mNeB|k?1UMAQ~RdX8*oyK1yU&n8A%-JS5$uE9k
zqnDRV!b%A*MK%M#TcsVk#Ye)O0N`cXh13+De-s`GGpB#i0d-^YkRv`b1Cj3Tz`z=;
z1E6wXnWzesDWtN))>*jzl<h7=a+x}La}8NOjcpoZzNbTsqD(l;Pb3ZEyJ53`b)rqE
zk?EJELo{au?0IGfTW}ncKaIcy@s$F2N4Sz6e~W+%Ui@-r8n?4IN3GGavP;Ab=YWiJ
zctnjfy1XohtD{Q9B|(Qwt2Cg44190LjsFkpIdArlMCk1J)W~fyf+;|3(l@z;l?x5?
zCJRYK97h^;^Dw1&767(7(onnyyfWI@Rpm#;zYFi9)GUBu%Nh#r_k*=A9xtk(xSwgb
z<w3%K_96XRD!6{0PB+zYCD!NQ1Re#whpl&R<)8*-NZ~JWPruuzTypaUjq?E6&PmUM
zO9N~FYn_*kOvH3OZUD<}HNm?4c{^z{GTp}l5F8*}VL+jPnQ_>vMx*w*Z)5}T!ATgJ
zO;ggi!A(XH0kStK;?J@mQnWb{4R;bIgQHfbG{l;!RH&N=ewp~X2`IREGl-su?ctLu
znhKw|m&%pLh^A)5)Y!fz#=0S<+~&esDeRng6P2=&zTDqI>S>s$o>cezMv)$uAjX5O
zzHd(l2V&f7mlbaN<8zqxYoYNXPxaJT;ZhHxHU^=R>x!@U#hgXbPzw~6-HoONs5`S$
z!5lv;id+*-W>cb=9*}eXJcASPda6f`T>i0p^XGpakfR|5JtrRz-H54>cok3jPLCt8
zLs948fEaV%EavpeegHe#BgD>?L5<{|2ot8nh3T7$9P|n#h!~5*8#heIF3@V*G`5g`
zhPm@$$eC--8=ZdzAS3rAcqGSy-b!N1DlCkDiL@;mGc^lhr+X|IZYJ};HAI&_6@3XH
zI7*rpz(EHKFx*JU=^^vRB()PW^k*bxUDSgN_UVcM$f10@u(Na<t^vcsClpxzpHnQk
zD?*VdSofM#c1di9*qvMhbYemIC7BYRv=QCeG17`fEnwKT=s7u8u4j{pohW&E3M#&F
z=u;u@X1~28Z!@GXmD5bvN#xua#a>knt1Xsx#(F<yh8dFx3bpX!6V2hu?g=PDtM63|
z21-OaeCzx<MV*aEn9Ff*QGYhPyGz8-+Ev^$PMEVN?o0FxJ#1@Wk_0(<GF7vZ<mey|
z@TS8vyQMqQ3JMjR%qZ&eYNUG?q0Kg40E8YLQBQUOSGTdv9~$5x()Afz_jP~%4x9XA
zsf6bst@WTkB^u1Z;Dp#Rko+Wk>JTbAn364tAG|qTT$0<1VnZcxq)t8CD<VIMZA~=y
z3!Vp{`d+K}{zV9BEyGKaly3cG$cpx+y#`tw_RBKTUT#B)oeg=9Z!T&n7hpY1|FoYe
z1SrB^BNpYxK`%H!eA@%o*W`1OJoQ?97qnw)m$is}?)fBqeGXGj)9l`?FT)iLR-Q0t
z-Un%cfcUQ%UI?Z<Omu-ufEBp0$sQ*<yK6;+7hBeh?$yM<QfYB5hOzyT^i&%_Z_LOT
z)se)pIzy$5E1VQmQSO<>MdPETGJ$BeG@Vy_dyTWbj#C*sso5hp@w^~$ih8j$Kf<bD
z5i{#zzFpbpwa$2cu=tkZey!D(RRz72E9kjdMIe(+&h&|3Ih^OT9#5&Em3pWZ1~`yi
z0fcD&a0<)19m^-v$lPtIdg)HMH!4*ll{qz8qDabP@#}`k^R-&jeT?y%{*7m9HwTy3
zgVYm=!3U5gR|w|vutSbGC7L*7S|k}K>v4Wx$S$@e7!(P{m<%|}MDEL#t%Rl#y{qk3
z-WvELPa{~&qSs5&h%=qB_~|{oTV9vu=)}oy?008zj`sF9d$JG#%5(<+Y?h{P{|W5)
zdHuMh(z?Rv5&9KcJe2Vo^iWLm0!g3n@{0niiJMKewWVK?$+&YJ=-ajTsMAt*e|%n9
zN?oSQL=*x*@DS>O&}(rLNT|Tl3lY+rTu(9owRUTo(y<v;5R^$;>@X))F?qu5oP~e)
z^>~8ytD^aFhz1utY)2ZZnj$FN5(@-$drLFG1I}$SudwFh5*ci|?S#?)X5x85q0TcD
zTerB)QhB1*m7>1v1u7iZ-WZHmqyA6>Um5UX2!Ocfn*e1I3xYZ=$v`U^HyZcxB}W~u
zHtU;CzLN~xPQ4i926pcT*>3jKq5s?`U~*px0B1{7=>%4Cu)l8FOoWODKJr%d5Rkxe
zW@v<|d_2pkBKa5$JL@dys#y_U?@c?j82?hcy)ox9(NE)_{Mf2I$Gi7*SFJm&N_2|L
ze7TY+<1ZF~M;)&H1SMQB*tCEmd}YpsE}tG;fnW=yKwP_~4o!4phR|iily~nn<$#_V
zy$N&3@d}3=6iSF|W#5Z?Nw0~b`Q$<;%-WNYiBI!W#^2vsx!mw_LoAj`yLeUJ_>L&E
zDCM&3WI0Q;@j&=3-5?I9o>uUtKVTG`FF#Shtp|Cc(yjgJ#W8PKf{7(^aEL_6t@3Kv
z)`sV4zs|Fcd@QshyBg`vj!7QO@8IY4w1`2@W%nZjJ!s*KwaDaq9^w-HrI`L~nqA4z
zM)P^5(&1cLrXB%9db9Jg)ZLyazCxgsdHb`SwpWb|HN_SAIPP8I;;-4Z(G>f798R6s
z({(YGwD}SMNmc(8Gf`#LJ=YuYBOb!D#5vj*yimGIXC)iu?jX(^7HK1y<UVWDZ;lyK
z_4bI1s|_r&_XEW{S`(4@(U*1sA58>vV_N5srRCuwVIBMlV3a*sNyj^-8qFY`y9F|<
zaGW{sMLGf_0XU01nOC$!C9GlYT2RAM;Q2~uRKHxxbZ^9a+hXgWXh9>Xs3RFNO1A2L
zc0qo7b7pl_8Wu|OM#8!EW&Itu_E!A9XDp8+r*gyZtx_#r<}baD?lm#bU}FN`xGY%*
zGRj<J$tcAJ1~v`6565>3{z0<~5ixaL`Am)4p!@!|qPre)ZU%i|@I06C=Y*RTF|)lI
zq3Kfc$!8{EZVUMT)fyZpDjtCtwWdNI!A&24$lwj9f&2Q%7^7FOU>5zKUkDjj_HQ!7
zVNTWrI_cN324}vYQFmnjkR_NJ0t-K%)^LdcK0v|0?1LnJCE4^?<67zrGY5zHjUTIz
z=Hh+*X_Ji7z-&6nF@q@n(^S;;fl&2ndL=GyYUkoEUJhZeZE@elX)dMSg0&h47oe{g
zQl9t(tiXylFwR+%$+b2qD1awUOYXz1C7y2lzszvtl#dlj$3sY{spTHT<S4lL0w;Qd
zGoZ>C5jYxYHLZ}BObGhAlqI+~rv_2G8y=VFz4QqD`)TLnDkA3ih@}}cfQIIs_L?a+
zp7WyyLGaALSI*vd%Ce3R>M?ssZ4MC?N<1oavMX$5jYo6PM<&&_d)9cJKrgQ~<G?gq
zi|u%<*rdTH)3a$r6Sk14y<dG|av$9X*-mst41bJGwm2LT{$`ryqxK)8oy=BE#Vt)0
z$lS&YaYH1g7)#mw(UNYb3>}<@T25#gN6X?x9O%BapADw7lgS1;;mx{OdRJ6&*F{R?
z>>h4$eK7pp_og~q7ZKiru#fTm`)CJv%rOA)F3G(w#LI8>ITVG<pI&>i9$pU#Ip5kY
zqX^Z5p&5=82)-^C^!W=GC{da#6Ps3zu(fnc!<8;=+TL%a@7&}DlKUw;_foMZr}S?6
zD-CmEyC+~d<{^RzK(NmA(G*YzD0|fOzWP2<dg$LwZxi_U!zqr^X#+WMQc#oa?iVSy
zR;paaS;1wUB)cT{!D+U(6u5JRgIil5f{~8(`VgG-5mq!udS3L<T6J4x6*Y^Qn?eq0
zT-=weFm7-=MBdLKWx0|kR3yfnPcHIMH#Q)liGlWx<H6v(K1hEUxGpOh!LslN3){JQ
z9u_Kb5?dNO`U#S7-VJXG9MGhlN=fQqf*m+698r&22W=jrb~d^EgZDbf`6c7ru?K_B
zbEjOgvP6D6Zmx2)DJ1>~?azc{j+ju2`U~o-H?Z0@dHQP(jux}x05-?pPHE%%1;6L<
z#`yw)pbQ#)$Lw-enr*Ba7ips0m3?XQ=Y>GHHbYZ4dq12GCbo8wVqF<ctm<|VxKneA
zfwG1RV0umv3W2R=LykDIc!rd5<yeJ9>N>%pti((BgPM);Hw|ghQ5HZhY(uAGwN>IM
z3Z`!Gq9%U~o`Qr(zEfP***lJUHS{jfBHpp+8q;XJ!l^%^q-}ac(v6{k27y@j&U<~)
zWC%8sp9xT&?sKX}|L}!I__<Y%-C8WEp3q}XKZdalrjhp=+=7l~mHr@d_f>(!Syip(
znlE?undcxMRQ8i?-qmlgQC?8<;UC(0Z9Uto)V8B}TOf?xj@lRr&)yfC-a^xvWPWDV
z2`Pz)*HRRQAI(>}F84z6_h(y!P^Mh%C15Mi>W}Hk!r+LwY1UFJ$niKD$wv0hzlxds
z%B*{krO1KCEfp@OOM=X;tj?w@)Ju{u7+}>@6|^&?1fw~^#Qr`&#tFqEjD%4hX1&9H
z_1qhdWR0uk9jC<$l^rO%1<GU4#!mB6K@0HrtzUKF?pyP(!-<*kpvU<J>Oz5-*=8l5
zAe)ql&Y$kn-OIkFB0}P|42NgbCX7<$vQN@_nOS`<Tgov>30FcvEZC=WxbRKk43J%x
zZy`omzK5_fW{b%mUKGMNWzsWZz?f8%H#@5PZw0OfFUBSaxB*;nz4QMUW|~}SEu)#<
z^=>p)>myvhihURlscMIYyIR|_wA2{QPzp3M9RWs<y5$g-Sw#x^u_09Ua>~V}j|k-B
zlw%YynkRnQ3E9trj$Fy{nO4>xkq@z4{@;Q!2@-AVU28TC{M+Y91yU}iI-CAoaq@DW
zeH~O96Bi$2o<adN6>NNk*d9qVxJQaBQr({0;OVQQ&bqMSs9W6;C)ZboD!4@}2XO7H
zwa+2u`f$5G%`g{n?9&d?d^~+J7+B8_B-De=044!<hVfoftBXRNqyP}iUm~F%cDyFP
z*-5|f$-rM35cm>w9h`_=ydg#jSPa~QC;wh9urxvJU{QA(;#TmPkecnorB6n*J1Swe
zuzhKZ8n{5iF&VLsa})J*|2~j7KNmrdG+cf1kCsEZG&8D?y>bf-s{XyqS&zYol^C-h
z+^4fX#n#=T73Q}8mjL?}mxCzUiQSj4Y-~}8GOV()7E*&oKB^6z*n+1C%4K0|jTWm5
zZ569|1SP$v$C`Af87#(?2DUa?nl7r=xA+oO^jePz!~{I4JvnNs=OaT8r^|ZUMk{+5
z&&byxAVu9C$A3O}q77P_1cF4Bgd@kac*&4km|cHvd=0@N+e|jrqxGXc{t!h!suW^p
zYO8B$QjRkjWjF#AMbAeRuG=Fi!zL(PW{OxMSRvORNSxU+pSk?_U{!0ju$0sy-l?A8
zrEGKf%H;l^P{6NyXG?d(`mcElWsuL2um8zAA3#O5Kf?Cx+%}T2k75>@@fK4%@-+yy
zPHP@VEWn0MG*eo<N9Ql6x&9`m_$cDBUmj|R$#gh1HYx50>1~|Vj0sqk?gR2qfdiF@
z7FLuo)^L0#X<QTz=aM6T#cSEZ4B0bNrmVL=6@cHr2-5`<0P$kIiE{>_t$vn4roD~V
zqOuGj9eoaKdVibrSK0;JULDpsYC+2S!WAl`^#Z1EJq;L^2xbWCTKYoyWGiE8%|uQ6
z26<nzC7lfWVsdFt$M!eD0iAERzb9|hP{7zD#h3nH+PS{zK%eOTkbjk5rwvSU`}+0s
zq0O(Q6+r^tB(8QQZEdTYn`6={m<G{?#sZ!eo+t$#l7NK>y;GoBZE_u2oO}nng&x6K
zTf&%$exu66fEVhju)H4nRhG&^wjiN>-gE4rvzoEEWhB87X+w<&UYvbRNs!@=7^R~(
z3`P?6A*$EXztIYV6^n&Ept0x2T1XP{IJ21=3@Vhsi~BI>nxxI+Jao8Q`6;X_hJffY
zj%_5zv|!KawSLU%ynrPSAd&JeOhCrz$xk4Qb&GjknEPkupy8QHon)6cC&FE7(A8ke
z&_|qf|4Rq3bDZtp%N!zm@Z43VB=f%*bZ(E!wQT76FB7c|_zH%vruQe`D6O~b_rTBa
zJR>8X<WYUSB8kO!$_}JF0w^R2c4S_}P$9PY<LEZPvu$oB62(|BlRJt5RUP<&L1Xcr
z*QXY-ruRrd3JNcsgZZ#S*(UYo`3{xg+^`MspIvM030V6n5R0^o(@pi>2^{o|4am24
z$U4|+TbLYwJj2YACPMKi6rT<{(*lI9;O5A|w`)mpxXaB4{h&u{T#;T-p_%<b#hZ`a
ze=Ol2&D$St#fAT6GZ2VPM3+3g&+|Y~8Jyr6G^{EEOPET7RtI9sW>ojF6+OMoRGEJD
zKFeN7wW5g8U<B34{xn_*2a56w>7Yg=63jCexM$BU!~0UzocmuT>b3ti7o(R3PD5B$
zdlX}^oLkOLy}7dJ3Jtll&J0kigLxRbI|ccs+NTlRv#J{>ue^^rlG`=Bb1Dr#@E*4B
zLc)=JaS(z|Z9S)^1BeB&V4V|+-$=$@{oy^MSc(6T=oaDy=q!vjkI?y=Od`)LLWn(%
z<M|U>@;nkZ94O-AIimTUIRXSA*eq0WLPy%(7BRkr=kFG+Y<6f<+hWuphj9Z@AJhH~
zBYWU!0$^+F>>x_%n%Bj8;&9o_C{Ei?WJ$h?1yP{k;=}Zc94}L?Le;pEyZHEuG7lDh
z6yXP%0_8HG2bzlo6a>^4TCE`dnrB3bh~BDnJeDlM41lLf<jTO;t%3K>RFc$>?cN|m
zL>ft8a>ty&POl!`dGaucOrK@+VnSpzX5{5y%=v%&z9?!HV!faYorvWJO)4h2n6@rk
zVrm34M-iF(nH$531d_)*xiJ<VR>m1B-?wv({FFm3BD71kdq-E@$6WjK5$9@p2CwGy
zX@_B-<ZA}WoG^vck_>D5NQ12Xh;t1ktR8`+gAw^;3#$s+FlFZ<={$Ont7Lp;N&Oj=
z<|?JMm^{o>J`lMBdWv!sqBB{`fQnTAW2LrU7?d(kg>R5nQiAn6X-xRr)7ryUb^-o2
zsNBf779BQ7mn(FR^aTjH*4-#hNz_mmJ(eX{)dy1EAF`&Jy~grrZ^mcN4GRaM%Yi#F
zEkvlGi(k!y=Lbc7oLCfiIFq?D)@f}}Gdf<3{QscXO5`q1Du^XQLuPR>#G6C7igP;v
zXZ&7p$EJ;7iL*}61N{Bpom!9!nf3Jwqx{`rWrdi^F0$P$+riqE{SgZxCDFSd79?73
z`X6V7%Y92PTqO>quF)t#Rn=!pfvDfiLu}W;i1W?73C~m(?-j)=Kv3~ZLxU(cN3z2G
zDP^UP9fBbe<$V;?xwsY!aa|Pw334`qZUEH)Xw2meCIP?Z*7fa`_HWuF!W5LFG4e>x
z`D!=6y|2P_N=r;>-_lcsnw~4o*Dn<)1S?*4Xg+y=dh6*1iFi<dEiH)jqcBIE{WJ}i
zXzo}6HTSXYF2$+4dL?{{o50RD?Aa@jkc$ZJTIBi$pIq|Z|7$(;4zO7EL~bVPhZL?f
zZ*lt_bcS7U2mp}*9igpsDPc%mfJvK(dF~4~WyV9{W#z29=TpTi5v+0xx!o{r2mj3X
zhJbpO@i(mPU6^R%(2j}x7q%1b##2IG6OaVwZoAGF%rDV#sx}%~{X|l8VVl<1;nsMA
zP*k_MdWFE<eLo+~&^U_dxF7%sSnAZZd@Bz8x(d-oOiqlbkctq4<VR>Bz4e*{R|K5s
z{Fzd9I9zX)$z`)9g1An+TFy@tZa37iY0BgXcBjQyATX#Q{P55I0rE^<VMx}x-EwoU
zL;W>1NJw0pB1}F3u#v0fM0mJ_m;g2AHcqdov-3rjA3j$p6VVG<mni@>HYGUE7@$%C
zhv944=jW>;=EXG<?CfHR*qE_0;`oNG;+z8!Y7SFPSjRdPp7{qc-Ex6Yd4VbtBjAEa
zT=sa>35mVq$?(Kcqw01X;E<4>_qWXznhY#!sfKN2M!Q~HA;Vn1#mlT97uk&@z5`PD
z{+-fz)h5A{hInS}Z~-Q0?S550LI_y_Yex+U@)Ee0Nb<7^`-b?KheB4q?Zn(cQY(TN
z$jkf*`|s$AQl*-fhMbkG;-Sx7bp>J+IFcQ+&4#4{+7C!jO9J?%A^Kc4YGJk}j8tSC
zs!@H^u5d1hq0^%YN;+1Uws3>q;Uo=wwEV}Z&i-$hJM-g3R%5w69ZsIgH9G=i;NvB+
z*=%SJS{ZFOuY?+2`XWUi9@sst!6NQECE*ETV#gCdusugRa@`ju5e4T^F9kO2+N;u%
z?*!4C*c{>bZu9}YaL>u#sxtB^W)+F<Ex;rzcysQu<`~^e>r}Ozk24tWOukY{89l@*
zb+wL&5VR|42L=irGG0APsWJ>ol@%y`PTb6;+=08wQxd7DaD!>Dph6~7C6)>dK~1CY
zPH~A3{hcm0p@quLTFjlDVLcn;Rp#u^S)KP_<rd0u5fq6=E(&Ydf}Un!%|h9z#fm?f
zBH5ANcT+St@^$eKtCGpUASF%btCjTWnah>hAP7AmC4F#Rj8KigQ&bPePz4XN|0)^E
zp5v~Fa0z{lW2vNo@FKxMxKydu;0w->PHZ+iKG-~FN8=UaN@cwXH~bb*r(qxr4*L2e
zK#AI^MzT#z)WupOM>*|?L!I(uR|jf{8mJbFp95tT=_%=?Z-T%;e0(vIal~7Adk66d
z$?G@^3zXms7Yq>G!pd7Y)5^p*yG}u5eV~4I_C3K0TJv?53&5RT*?W|Ti*BXkBa-kI
zIFz2(Prij=CZ5WZJyhQW`RJ+2Ouc@fXm$E#5ZzmU)lhYxoa^^r)uR+A8L~<V-Wxoc
zvxp-yU-9o(Ogt)c6=RzLp6>}AR1U>6W!R((l(-|=Vcxx%SBMYfSvQ*z*{pLhwc@NE
zN#?O+!nBT&+hQV<MC<zutM`z?vAGbqbUU;2w5|nh;bhBpRs5+EA8=>$5vZ|*W_a$G
z<96ArA5F$BKMAlCFl3~Q<ws9t&VssVy*qL+o)1`qlRs}0o5ZeOj#>Oa;M>!y5`<LA
zsJr>OLS&R4dZ!jWH3~;ZQ_D@;+RkytmD`whXR@GM5a&XgqbfiAB3tND$uTAVeil$O
znbd(R__0yXq@hHjlLs7^+skF8N7AD2X^KIam1V45C8cDVdwL>Q9{t1q7;`C5EOIyg
z^|3o*?_wb=9eM~rrUzR{HqmI`=+G6J%qwbElK*NBI+v|o4&&c|NWp24a9gI!wOQJ=
zx0T4;rhZjbYXv|cero40NS_kPDu*(MV*5q<x43+O;KuCT@-uz|UN_>|E3`?quBKt1
zp=IM;T4%a28E6B=V=~vup9u_5p1zNK6?ZO$5+L_v?M*{h^0OGC6`owB<A(kZ4;Lmk
z*%V&RN?<@?yNKl{Qv)n%)i6a<q-FAIj{MrU#R|lUGsNJH$=>KwnpwQLz2mv%;4(^S
z8z>cq>4HO@Q^2|n<~Z1sL0$>IcC(25RARl+$l`Aj@c8de0EHtuar?MMY&B$t&4<>D
zrfljt#iL}!0kaU0Tmlte#G<<WZ}7qRnAhhpI{Y2sfCMrabdSd$AAFQ9@3|13&jILP
zW{w&8H8Ae8NGDAq#3(2?7LY2@XacA9)D#_0wM#TqKo7CwC$&>~*FXSLcPKfIojueu
zmNULF_=7E!9Z@koH_$wrh)Ui~ljm|9dLn;5vaf|-Q_qICyeV=&RcVoy?r~>T4RXoq
zMSZv&gpf?11!lcnDE?k-SLO=3bd|U;XDeP(e#l^NeMT9qMWf3hQecY&u5S^&MX%o1
z=tnp9OT(~7KP~dODV{U42^Q1?<_4wBEDltgK}F8*fI%N+IgW0|W4R5o#U)Zbf99XV
zmk&4qr*X_1{dSL}k(pW)`BF5%Pd*&SlcP~Nxy`Xqb5BcGR>}pGr|Ozl^I+oxEP+Y*
zw$UB2Mfc<gpXtOGNhti~jMmdey4sFc1`(FZaqNS!Jj;!Et7_BGvm<7Adf}VH&CVUU
z619^|gpNgcLhGPcQ2~)a56RBpDR>g~o9rSMwAIsHR+OoxXn2Ln($8s@f}@^wIL8M#
z$>#RPqR8H3)?^ZuFfx42Ef6R?B*X@pRKe*b##gS5DO-0KgOUpdw9FAz#~A5h>P}+B
zyHG*ub~P%*_*+*|K;;A4oxP3vGX*6u?Q2(;GSJ9E3>`3Dgr%+|5f;)@qtbgvM=8Ph
zkEI|Fy~Zqo)7+G<HRw2v>=&`mB$KcGL6Aq5Q|9BUwc_=rhNiu-=D0BVdbE<DyGTJR
zsQ296_+FfV@!glWAmtN@lRNrPu=-`yBnNHa-l!^9XJy>C#L!S%@I{B=hgQbiuECXP
z4JmpUOrUE_QE^G<!SJDM43NQZ1cu)i_#rvgR&lro%}jRd;wb@OMYmm^B7M2=-!n{-
z+p}(vTHi%W7ARnHfv!9TafH>t#<wzn&lWf|(0y>m{TC3zixN{F7dS|r@6aCjCkb{;
zFkx9oKzT7zVK3=Xy`zgMq2VDhoir;EC9he)`%^qYh-8C5hf_l{tJ~V1bsk=*LsE6U
zi*kp&!niQT!i3))4ESBcnVYugL*IH<jp|(%wCsU(4J*{tq?!%oImE44fsRP(LYUSt
zCgwB8w>bjTUXkaP+hVGnF}k%MU3PCyiywtMpG0baY#yH09p}ga8x?}5&HcS0dcVRX
za{4z>5@F1o&w%p`N;V132{pIixRlRu5z0TuuUY>qPM2nMJ<60I975ylq>GPBbDtO=
zm*?f9P>W3~mdoio3+EB4r2*1}Qu^0X`a#cxL3Rwmq1C_$8=lFzME*4}!3>&<Y_Jtu
zWygZ|FV{YobZWcMQpt%*t+H|IMrrippR)#n;AmA_{UzXFUfZ&sH@IHT;rbiGR&auH
z(~;pVc~lpVTEWUr+*t2!7R@+&$5f1(qn<T`14}AQ4NS-R?0C$nowIHFE<bgJT>=Qf
z7kTV=u?7Uv=avDcSv&`OGd+l9n$c0vU4@t%=J{-qy0zJ{)l;_tdjUs<qlgu;9iK?L
zJ9;s<8=lNcFsAfex7f@GT3DK3ZYN~3JfL`uebwkvQor=+6w;Vk?}|PFpxuQom2{mO
zm{6M!VOn|JE@naGYw+oy@v?-?99Nn$NCU4|EO1Hi$emW55(QVNDcy8bRt&7E5*))t
zclU|ks0e+^F(QiZuWfF60sHHP_J45k++X@B$a9xzyKx=%aGBlS^3QFiOQ;Zc2NGzO
zNpG*gIu{FEy$lOcXQMxdu{2&|Sj~#K33Ea+sg{(wPK60R?Ee=R5{+m3I>p#o&OAf+
z3H28%Qh}gU(u!uSKG;pfHNH$orp_%xPxL4?QYj)dd4&1%WP1>tab6pu<L13piN{_n
z@aV`8jgeX@SU6;J%n`U{<f|7#r7E0cc9r4^J1a$DPfRqTJN%Hz2kj%2r!d5f9kXzM
z(bsV`*|*oSc}!ug$u0HqBNL&&twJCH*Ybx5kwoe-Wb^Ky#ZR9fZv_%0Nw`-?cRkuP
z$9Na{j8XERY7DluxSt4(ZtL+NT{^vDtZv=KpcUmM^(tt4`s-hAO#PCT53<Jk5X;VJ
zHhILG-0gPu852z|^*}*cyT|-g!E8-_TzAJKsJ3JEu|f!jY6jl5U5o5!8D&Vew%&Az
zVaFd=m<6-d*z%3VvN)Za;!RjI{7|6@3DCZaAcpwsUAuX5Ig`gn=&~iL38MM7c|qIN
z^jC~wQ_{;nB%|REa8+jc=WJ*GtvV@Pi)6F!<f7z*LtnTqNGVr9)PX`F@?^u*7=?27
znM6W4k&K3Erpy=*2o(JI8nTX5hi0$fQsecMeH5H=Fs)DA-QFira$mfSL-i6fq+U-4
z6h>XJV?j{dPk&Y{4aH6MXT&|r19M`n6jtxUmLSP2W9xo|DtVEE3C7eimUm~~E&S)7
zhqyT>yizK!VNMF*xLs{1nqpZiVR4hr=Gu2h4#80ADUFKq#pemz+Q|&s+oCf<)q5;#
zVmBJC#$}O-2Sc%rK&R~D_Rb_en_y&Bau~t`T?CIly4HQ9Td}4o0dIPKw^U8F9>q*x
zous4RM3i7vMrP$zylRR_+X!wCWP)IjmFo;J7~|j(uBHl()h%R1*<N<LY>>;1U#P!=
z3Z|hgN+3Izeceo2pdTr8a-i?VKb${N+L;?!?($2?9wuQtE0UJRa>U1MDzn#aR{s>n
zo~apjph!l}*xmp98=<+mzIuZkMczRsdaV}Z)RnDCgMdhw4U8L9gp<^B+xO_RO(O+W
zgKu@*u*%GUOH}1PTPsVAQ{njukyHWkU)75+MGEeB$uJ?DyN9zesjEwEbUh4p?sDoP
zPKLkKS|X}yijJqHt?5%F(X;8<aphYCqP*82X+Gmgm&lE@@3?wp;(Qr9;|dq@1jh%f
zy7d^PNI!T={@|)~+_qeWU9%wYq7K6?wxVArv9A(7>?Tzk8n$2WubAm?U2*{VKQTdr
zK>zNHX}aew7euz3z7alV$@xGRRzgNY-?$CU<4n$rHk#XBrLd}GtX=(lx2MRJRfEf;
z(qeDbhO92KY-b1QX{A+`7P(Zm_Uo%4!%;Y2a-Yba%|*lq;<dN`)(kWx^r>qbWUHvi
zNW1eJp~jNwY}53<iNq=au$8${{$fA*dDKVIA>%|>E2X}r8I9%E_SSl=Mq}|YfH+ev
zu*uTi01Pcl_A3ZA*d<*B$*W%NC5s27j!L6_`%APSXAdp*h>q2jV&*1eeJ$hO*A!1K
z+U6efn)T$5FN*oE8l-~yDT~@<%I)i=FVlFSnYk)8OYmOH3!e|)00$UH+fh{Yf<-FV
zt_P#BFWEZCbaPX~6DVkjsHvyEGqr?3a;6?yb6K$sOeOd(*4O^JJ-kfZt=$hR17T^g
zC00F)wG@I#A5om7u{r|MBZEQVHnYpn;p52e+K~16F2rrR9I!2=gLPZkwTA5jo3%T)
z%jrsw=0xoo<4G(m#={`IoDaKHJc)B&ol3YAnZ-YKCl@J%k(j$z)KE3!inLlqVSfw~
zEU~Dy9{dQ8FOM$h#DnmV#tlP4B986FKDB49jtMWrtN!>YSHX2|?~!4V7x~^-9<u}}
zvpMI`%T{TYG-gJPQpk0o)QHVpLcK|3Khr&8y)6}Dh1A))zCI?F;N&d{J@tFK=DFuM
zU^E?+0jh|0=CmZZaZ^cnlHvKt2~j;79Zgj<1m8Tq39<mm{HC>2zRjb?dG^ON@DNW|
z0q3UTeeoMK|4?FClA@8ye5$&2&#YdU8lPKf!yqoV6i_Z%eGjW!9m(#6r)A@gaBOJJ
zOh@=Ao?^k|smRG>o41_If~-)wJqln210#aqQ+ZT&*_6dN(&SKzG~TcenW;#zm)HY;
zANs059NH(_>S_Bkq7sdsBI4I%ctPlCgEbJMifiQM7NV$^*nn~^u9Q-I@Cy*P!B#mA
zA3zfU99iNQCZImtX|eW@tl#_Up+NLE%ruhOKVSg6;gjBSkl@y)nupt5j&ZJBr-p*O
zP<_@ruW{ce5^dOQ<|9$Pf`y#>+$6~3S|HNa*$io2;T1FzAv5|b#<{@w-2^nUDMv93
zr(=w{dT*A^No_eDAs!c<WdbpOS9y;Qh~W_9HQ?1dC5YD34U39hRpMSJA$CACtKFnY
z)>ih0588y&?TDsswDFKM2}l*H5OMHc8HkR?T_|jr-C9(M39JIQ*!C?_3^Csfy5Z!U
zg@>~gwEi@ZxjnDo9W!>N9k)`k3lpjsPDwUDEI|H{&rDV4PFm?K82s)c5vkAfRAf+6
zj;cJ5xw25X7_}wzPS&|~<uH?BYKIL3BQo8nRr-z9hY8}qt*vlHJAWZ|8x!}_{LqI)
zd$9sCLuCd`u3W`-<QIlT9@|GQhCjR}lX$cj=aVk+T(~)`z?ea_m6PmJn$MGGtJC<4
zSu`nMh#sY^5JiPq+(}Cv@*OlA<qu#hA+x>w3%nk8;wbVb=rG=y7CCz5he7s+Q8o&4
z?|Y%>NKZCab0%@-$}3og8&G1Z9>6@3Y!>4_n&i9a8a_0@k97m83BlVg9w5CUPFquk
z5u2Sl&o*@{X?_jHLQ1ugzI4?E7O%!-y4tx9x`b`1zLX+u!>z!2CVf}^Z0Cfy?1pls
z8bkC|FrBN41fp%?i-<$+n#Jd@{&2<Lmg7KC34KT<d{7<|CseY>K(apx*WNmJCoFLs
zSPBm%sKq-!M|Gy~G0u#qnwy~~e?R_^9N&z6)#VwBc=ckr)B)$2;kU_J2-h=e*O*Y2
zhI{IkP}_mpaI5tR9lUTz+Xa}e)qL(J5~K{}2t_t)GOpK697Fjz*3Zr#adIQzkF6I|
zGGpISLi9)Iee>1;=e-5j_JvbFA{{;+LP<ab5?gP0-m=5*M$AHH_Pik?{ojOgD#ss_
z>zPeo>9(FD>q=RGq_leBm`{h-M93+%wQX$Yo6kP?#TOd4mUM+Q7fsdTH`2Vg9y(`b
zsy;s)^2vH9O@~&czK3-gS1^OaN2JT~XJ(A1L?n};)nqisa4k%Y1?sO0{Qyi4aJXaa
zxnYtXXl3QhiZ%+E%F)_Q9v81HdkL@<AIHoN;0P7_414HaDsQ+~aF$P3fPK6W*Q>>X
zD!l7#yOolj$Boq=HGt26v&9oSd>g5fss)){La3-4W#$Gjlu48p5Xlkw1h%UG!dtj5
z67Wq3iZo3i8-oy1_@9c(b1nw0$_ZT^@Gs_>V80O_{7J-Yh*g$By<;-2F*)nYTZ(R(
zdy#RyWnq$p5SaFf5b?oB<dGLUmc5N&aJy?i#ARm|tHPN2iO@()jN3{GNUAtgAL%DN
zgys@lig%xWLz@>R0FhNt{nnX@k-0fP^=9a&DGtqR24Ol8A1UX2i%C>1jwQDlW}sY8
zl0JvmNt}0XE+p;YnJsjtBUeFL?Pc$afr#9xu;lL++~La6Wb~C+rPIs_-rl)>4R1X<
zob*>6hKG9&Vo)<b<i%^Kz3^T}YdHBit<PTfXOX&5y?byf>%idSe;h49vg2^GMh4_J
zi!M<0l<;pYG8PNX2E^W%P4Mo(efP1il$7fYt~n%|N`Tau<fR5=RGt2kgz<su_`W<F
z41v3MBb1R;_ti^Cl-|nyUG4vzc}F`?u*`7tQ8z31JGYg@R{z0F(lkve?rc#U=O0Xk
z`d5sYbi(%1Sm>d+R8Y^_Caa!~;N0pcCjARvC#8Ch*P1;N@s|{IC`sH@JpC{3#$&DS
zu5L1-xSa0^t`^@I9W&{WRqYzTq@aY5Awaj6myLz~q1ZVNh!h<^2Yu_p^c3-pKSReN
zcL;;Yp#r+=r>q6SV}C<_bGmmT$y8`KU)y|G2keom464jGbO^}g!o(hO0E%Axi{?K{
zzTqGIMK76`RSQzd%59ip0$Li7CA>B$*xPKPlf9jihe&R9?6uZ<OjS`y0RXCbz&tl;
z0NA}A86B^nzU7(9wGd)S7TV*I(fGfu(QbkJ3_Fj*K5XTa-&YykU#}T|Xk@025A2rO
zSDn1x$R7>bisgWq5Z@CSdrw#V(>shsdX;#pmg8IZ0n485*zqBn*;+P#Jhh*4!G%%e
zzLd%2p4`xcU(9?OE8gxgMp4B6OmMGGy&kWQKS)-V19;hT)oorNHM`JoIvpEc+k@kG
z?2UZ*8>zh<&slW))39y~2e^eOO!lOX<FYX-%jT^U7*CV%$yT71dn|L}kr`Qh>|_qr
zNhKiTJHi{sk$oBSKh^%`+l|tOsbOHQ>tO0habFV&FiVxRzZG_1g>+^78SdUf%8-h1
z)69oCOXwnjgsQ~;boL)t_JLOtE@Vx*INi0juQta3I<C5F9<}}fC-KlSu3>1Zd@cO4
zp*>PRyyDmbqlfU(Zwy+wDtUQbn|u%0m*iYESQ@`HD7PGbRL=V-R3dueUUh4U=m>YH
zObXT+o*$d_D`PZ-#g6H)b;X$${Z7)^L~#5*Gj~IccKVDpb;jX?rvUPig7aglu$9Fd
zog?iHph;Q`51^Shfrv|Ci|l0ms(*M;dCm1rSV(eeg7r~qCj^%wkFKMmO)qN{DrQ$W
ztxB@FXxYwHc$(Jf3!!-1<M_bcJJYliNBaMh_6OgP1<p5aZ|a&X5psKq0HVZpt*6ny
zn|{^r$DhixBi~Xfw5G6$p?>RJr*}RY#;=2}J=hg8Ju>Xgf4|j35`Y7Fg^p^2F&F}^
zR#Z<8+idxUQJ@f@E<)ivN|vsGO&f+W)0M_JilZFqUpFBrr2(;r`D1pDI|Cp$6u%h(
z+gJ`~G31exl`nfHI_l6GUg0P%ga9p)pbHe~^X56Od;K_;4jx6Y-DJQqyQx)mJ#2y<
zRo;qhv*kq5opO!5-5fuBRFI{UIWEVwAMNjvuHojy_jmI3TNTmIN>KKd><AT>Z=)H;
zFCm%cGE^JDq$tS_1{}-Fc?x9R-uchG!+|;Z{>k+~HBhk@4Bsr>Fv2zp8#^+1V?G79
z^bVs-*}<k0mr13&NMo8C33rJId26FLC;We5{N5*?!j^yu&C!wZGL3`o5of7r`=SOC
zpUQP|T*oo-P;@S3e1iyL8bATex#a&Fv!2d8(0_q)3i^%KZ<+lw33Iehu+PHcy^l52
zuQ96PE%3XcubvptiR}VryA;zBgz~T(wYlzVAsiK0Ic)5|lJC8aZNC}LX1=YLs#!^X
znljaFS3NFMFC`BO(ys>DqcusgQ$srsYhDY~4r+XHvVuu~n;;?(s+kO*C6wtPH@Hv#
zlV>@8QCK8hpj4Gv<)U$UO-w`?AG~tEN@||tyF-FuTu$Lg^r36Xy3&xq>J-kCxOyVL
zicCBlo5x;YYOTZ_l9G)=J*|nhQuZA^9tQl&16a(m_&#l{z2*t|M+5_jt#<=l_m=NB
z-l_s*Gh@(x0q1qh1sE3Rf7f!vOl)wK?Ab8GbEY30VKbJ-9ODY6#*vJB6LsNH2}HUO
zRHDRmAD5)cCpbj-^`aX4bk1iIx-4<M-01lDbV_Z{gIY}cOl{W7GW{pdyDGZ~ste|A
zF3jDKm+2MgQxCGawKmc8+DnTnNg8U(tqCy$IMc~#e0+Y_jcp>(mLwb+%GLkQ0L=ke
zPZE9+R#E)=?aG?5=k7R$*b-FI($*+84pujJnZIT!pk6dCU^rkLdDnBw*dNPzihlFe
zkWoco@e>*FzW`0C-)Ia`e#D`;P_05p>yYKy{hD=^<kro9HlXDm;_Oe7&xV9eWNj@P
zo!qV4`g7$mpUv`GGyQ#w^*7FiRBgYpD#jMhq)>kz6)8U+O0h%QzeHcl7N-ujYGZ~z
z_7SH*3z?!wPI9`*O_9}G)k_YN27G3Qf0dcVMK(9iLzJRr`ifNfIhIo|99iwqWzoSx
z<Q1I%#HRdFL`ENgom^v5d?bUjjtp+;^^VE+B}iD*ahdHp4IY}FWWd^#z?~WT4_Oi9
z`=G8*z9AC<M+J1D1QRb@DTn>6@pyn<dOf`(UN=HoC>ygqS0VmaxR3e;0lYlZsk}4B
z!R#?bd3%8%=O|0*LKI*R2B|Mo5k^N*R^);H&^oKGT(N?ac1I{ENOk_=|GxnOwT={}
z;0SBT5CObUn(&}VEIDiFiKnae8kcg82+}@j0}9FbJ5VcZlb#=p-0^_3g*a0kx%yO{
zAdh?Oep^!lg6@kg90Vj8r;Hvh9)WxV%bJKv@!59oSb0KOFR>!!g)&!(+zZLo7pB&x
zP>}DwXK|f!(9y7dK}wx#a;*{G4tLt%jO|z3s8_h;_xQ{fv36Yf*o~#|TqSZ}?Sx_z
z*4_zT!x?G;m)mPCQ#dink)pha{BRU#gs@lCJ`tKSR?`xTDwC+@Jb%-twi;r~x{Xn}
zxB=}F_<c}ZMrrg9)_M@;<YrqcA}@$G7u)`PDwij)874&kNud&vF(0d$1{V43<7V-S
zM=}cm2YaJO3gQ&yh`^56RNbE$aL}(bEMKcfG>oW<n;2#ik<mZOHvsDu9-743Aw!cV
zav3dANF9yn2cy8i1o+~Gk~|iwjoeAR(%3(=q=b^Rk7beC@x_@HbhhjgDvIdtL$~Z<
zSISdoSCmT~eM1NCbYbjP$#VH|7EJ6Tn9Kh_42Ja~o=GP*q(<pcdngkEJb-`ZD#+lw
zknse9pBQLw9akVq?7C7pbH%Q(Wb49Jf(-gwR&d%<whV#A*N=!FCk|$8o!g{<0b2bN
z8=`h(=&mf5&@ip02&bY&axUSK(sM!`5F93HR8A*^Z>2giiz<nCUZy+BjT4fh_17EQ
z?#A_oO8m4v3#^g$4~ZiZt)fS9O()=mnu$r`nrNs$4_&F-m1gm6VcV6gWTxn8Q&3SR
zmjnzq!PCFl>}e|<R%Acxd(Knn3$O;5CP2@ofvB3MafrA}@$|Cl?pvC!-Oln>P(-y;
zEsYe>Mv63d37zy&X~9-_ca?M={o@N`nXcth!@^VvtDOwUhYUdhvdOZw>S)kVEFu6J
zxpJ@l!~BiuWFtnJs_*lP6NA({4rm;z$d1)?T>XB)GF8}^B-&SVt|b~85M&#^jD{WA
zo8~r1vTm8nk;ga#ss*;9)QM7cLpA33j#5(<$A(ksi0HDr5W#;__YwOqe<|B)+_CxI
z0dL1L>0Yfl=4fn^aXkzgIiA-4a1zv!hkBfW9;o6wZ0&o+4K))A4$|Z(D%2HXDnm2y
zQ=ZAU%?QsMOcsqP4^!tc7^G;{iZnjt3RL@###4826}8a#wnh+dOh?3X8K)o`(0TTF
z?4pq)Y|V8-v~*tqwBC$>Ta>BX=J-xX2q@c&L#<fKa(}m&*w%U}F>9~iL|Pow0DDm?
zy3j|WasjZo7dnFZ8YeWR@UXC=LBDc%{GRv$?hjSaz`uHq^u6EFP8g~D`^ZwRTy(H%
zC-f<2zwk)(y^f*RLP0*cg}K$*<QxG+P~X$&VcHXk0r%6LEZj@KeLqCsSo|_?VgyLx
z81`^Og}kUrW@*f$Edz$HS%HXwaVh(W<E1q?i1?S9b8ZVI7i_x*6n__3L3f>$1n&7l
z?B_)nSRWho$8ymhaNIF9%b?ChodK*92pn6f`YnJN#HGa+)UGhQE+o=VogwO|%Zi-@
z{)yPA?qcGLQHmt;0U#Ysb3eD9y3SJ68)DV%g|I+Q{Ld^C6Zf`=k0Qr+jv0g58}H$f
zsQR8<MW(3g-f`CZICD&gee<;*Js}@39(r?qZtMez$oBB+FxZguXD`CdMup394R+M4
z+g=!GkoE{4svN=tJ|Cl!DYf_vC1t_5#8fnYJ%)~2iuIpxE=4hw&w~w~Ab}#TU37D?
zn{kxM+N7ShWb~wv(C^#DUUY>-55f!jq_-{BFI?SK<E_K(E;6(7U4T_k+6~H)(7C<k
zn0d0hEoB3ZJA=8YwwSRCo2C5v&`SUt)}Fy-;_Tr4aQC7(#ueyPp?0o(kbBikLi$i~
z!?3JyzVE{-Mgy{r*dG&Cx^G1@7D&)^UY6oZPqFI3FCH|2fUl-}BNwaUYQW+{T~tM_
zB}ozeR;Nhj)>_7WYf&W#i?#3;J)2hrLMSIrXNXa;+GL%08(|qLhYLl7g9!YkuFx=F
zXXGA_d0s+LMQ?k|GmYBS30h+u`(o-ugaY3#Ss?feC@r{?yox-^o@8ByudhiJYtW1l
zv(cE<x3ma>mSm@O_Bc3WV6skQg0pp2BBl9)RowVZ=eg`y$%xu=W+Qrpe(5}repdon
zQI~H**k+0pTb{qnP9A=ibW5#B;ZarU;IeON{aRylmm#8UUit8gt0Aw#3;(}c+l(S4
z<u$Gg;@X7F`tr+&pig%YV0D5O{i~H)mkE}!#zQE-%?Imhw|HWHX_~q|goD7PEqMzq
zSLxNd3v1JQNsx<2?my7bMq%?QO*>wkM37O}h7f)gAaAfXxb4NVug##)a_i~IMqA&Q
z0-3&W;Du)hQUeHFu6qN;kR<x}S7`s)lpt7BfJ~%`QeIG-4HFAy<Wv3aWf}|4TF%&l
zl&ZJ5J8S{oo2g2}uWUV*b)(k5ybEIdlaPeg$pVjPjTg6RNAf?s-%1;H`rYw%#JO<0
zu1#%*C}n2$b-4!+VV%JRsl=sh$HBBBBB>IBMR+P<j0pJhq_mMBVGKiAyU^cBB~0Ql
z5gi~52(O7MX#S>Hte9nc*LD3#PDwwEtuG;wtNrOtOJGSeNu0=K%drg%!Mou1e2&IS
zc{PXJralrbIVaZd*}H=Df2<U!#8sV>bp14LpBXz7S`RNtqd<M`V_}%?7Gj3--0^-g
z7!#4g_RAvq_M!6U>yY~JDmrS?8ddM|C3_E->L|?Nsur#w^yy1`lN0VEI+CY`yb2=;
zRa0?PX}*_hK!xGM*9bF>##|4Tfl>Zw18q*Kw-w=&Tx+CpI?X(Ah;QP4I`#9Z+rQaH
zA#l&rx)eyB1Kf2pI1Lk4_lnC(klUdUR$G0A{#uQ#xwij=saq9a<@ks%Y4a(bd^Vp(
zOD&}M{|Vg&p>LVJgSAeGX84Zl(2*Y4Bk0%q)t`^cp^-G?yMyw7zsh1=C-?>%nB*?_
zW$$^+Xqk&)Z%+#Eijk{^$IhD}GRng{ze6r`j|ihu_}_F;%lckImemt^*@mVt(K5{t
zbQnCN)#{YWi%Z~WpU(Xw0sicajMmP4qrWxQ2<G%(O(q3|k>(izKH#3so>Pd!jxo1G
z)7<fX<du_Y(lAT>HVl%SreT9>4BZ}?5gX=8Ywe5lQGn#~fxoLfi^ac`GMSg)v-%4p
z=wCrASD1_~*#-l?^=YJ{+hW8r{HQ8#)8@Jlmi#>B2*E#gei*gFUTwIZ;}^?3cSayZ
zWr37-_dMYLyYb~}ThvDY#;s__%vQ=E*!@O;U<=$+s`B`>8v61cS7z8pa5+2kWvk&+
zy;wW$QU~HBc5~}Fwd9|o9g64J)_Zbp%f0qaT1vYP2KHwbtRvG!u)$W()U5C-ATP9e
zmtgXtx_NRC_bG-voEb0b0h)DNMbV~cGaQf9!$;I(;IK}CMLM@9Wd=j8sW%;fX8HqD
zHnSy1CGw+9PpIwmze=!gJAG5KqwZ#)7l|-uc%#fsc}55fyDJc0@ILB=5aME1N0$@Y
z3-;i8S$4ajGFHdA4H$1CNRr8P|Er27Nj$h0(RMk~4>5#G%qh0+Nj(!=qrkN>{5%Yv
z@2VORMix^=;t5=>fBB5ehS!_#FhYn|ZG42lOlmTt7hC}f1ZT#}CPGdjG$R48sOUo~
zo+u~}v+ok%0&&a%s!TJqqe<5#AW~bS*8ghS61hf@#$z`IhU&bGaxZF$ld5*dDjovu
zQS00|22bpJZj;qoDCqZ2nL%!$S&$^NBW;{W_<hqpRmzWjr#Y4P-4=cCy%cU!`4j2_
zL$V<mHVMwVYxhX_M}y(pzSM@bIHDRRIBNa4oRBY|WEP=-4nmy%CGZn0n#JUue;Gm|
z<R*n)kK~TM^G0Ky=G$1OqZBZF>Yr+SkOJ1*!;l09mixQKURfm~EIC{a;*Jv1G`txz
z(uWk`@i@rq0t9H_5xLJN8ngk&hSN+yr8B5$0t!=ANa39V+t}KIiujzwyn}#f4tXRW
zia${$#z(!%c~Yy@Oy-Y8_^#>mcZ=ZgA&^DQb090icYoQyZ#D-u+~U-hP}Z_U1R9+-
zq2CiH3jP{UgJ3$5&(GcW7*ywKpBwf%5R?=Fm{EHDUdN;LcBAufVP+l&u4ziBEVbnQ
z+;ao^`=kl_;IQ~a52=Mz01Y>cQC&;^Xb%?QLOX#lZzG+O*SNedu0n`+zQZZ<TAGkM
zVWAA1tDj8pYp&*VDgPW?S-2L_!U8N4vlz&1_6p{6k8NEEyyAf2+tpk}#<j%`mJ>Yh
z8rR!+3pLNBfbz=_JtDmhHfFXJ(ji_gngz{)iIx7lamI%jpaaOzN@~2$FK7f^MTkj`
zb$A&Cs)w7r<mtse#h0GA^BVvL2!^MGZ(70a9oZW=*QbT=E6z(_d5$LE803$VcGeB9
z$RlPTWcB5{N)41$mk70hKP^*hk_`u>n~gu5ETwu4V9Y%XM=bSQbJf4acA2ip;ow~9
z|8)~PG9l}+{>Sq#bB`Q`=SUA3EB)uolh2FTy(G9P%P#ZiBcmzG<LLO}*SpfK*C#GI
z*>AOB)dAaod^tr7F<HuDO2~|Crm6I09tGW%luitq6?|H(4-noca^`kjJiRV%jhm}?
z2@Dp5j_c-6c|<_@%}7mDSZbPhk>bD&fDzgep?MH)J7)1w@0meuXcL?QDrOL43+!G!
zlKIR+176Sggiw078tEH(H(qcJOKu^S8Y68N9Ex?dl!(*g<wCDu%TI$012w1gjZLcX
zH7TpJKXF8doO4%%0pNJLH=XzQDnk|JttvL`aEsfKO758Q(6g4RSXkMK0`y|OL25`O
z-Xq6_Ile@j_Tl>y@!T4di5AqUEUP3|4pOm;!TGG%CuU%(9#BW~A$=)!mUPC-5xD(@
zyiy?XFj<ljvsYl|rRu;_#pHSy4pF!QeF$p_i>d^ZKuTwByLxaC%`z&KTBvE-F1N--
zPtxG41+WKay3AQt07joCgj0Y3J(6axWBA7Ji@v@zzXQskKLah-U@kz*LzT<yZ*f|T
zeKnmV8x7|Uc8*z#w2!Pxcc%ym2ADQANZ}(5acM;ySS{sAooNcN*XrXqez&hXMM5@8
zKfyPqm13d>G|I=l8frgX`+fi@AmVILD0h{tj;c#x&=2Os?yISS-#B;qZ3xhrKOeZ>
zjQWdLg1#o68lD4%Y?$7RRJhtMRL+kVWc>NND4ZwIzz|{+BC6_%e_vDN`i7ZtwP<xV
z+Z`f){fMxToQCat_fDH0z6O<pYdCDqf|;q_OH|%n?f9{5vl}u08a|<q4c}uo?Q!SR
zbJ*G!h(zQ{K4HB)Zn@B#CF_Ip?0`f@XkKL-=(9br2Rbh`f9&Ar5mKSp4MTykZW*no
zcIh86anu!%U1j}^>X*(x(#n#b#QHLeNloX!Sw9bl;rE>M$}Kzszjm|w+eEjh>IblM
z&Bo=a1ZzBqt)bP=YuSaD;_*B6TA@*39M3=_V9z6C#T`>gy#4ZwWeCc$<qt122f)90
zo@Qvowv5jl`_0{}7uu~*k4u|~#2^aY{DvA(4*9IB1$^IncB3cJ5+Zgd_ss%DM=4Xb
zx7|b+vgfU8SspxD^i^nMG7r-wvV*eM<KX(lDH#}aa%tx?+BH=J{{&JQ9^`X)<el9&
zz{n{OQwHC7JDYSB7PEiEM~DJPom?f!ZEb+sLIGu?pxd8$B&6zDW_f}$wK|+&R7ukO
zH&42G;O-CBFs{eIx~+i4+c8(jYBo*;v%cM5Lp#K!sX$=KXIU)cKo@1q5`P7(AH$Mz
zx6_Sif)q-4qZzKeMem58kEUqS^}*)cD&zApOJf|v!B%57`-&1n7u8H2F@AhyhwE9`
zYCou$z8z5$|8c3FyM|6E<4^+QTPy|j{G<cb(u5=q3Vu-$3EjE-VKy2Fx*s(4g@Q#1
z^6k$za?|iqz*v)~hT+XXyeT5OozGS;YlB;4={y3H+-OTac~=fi7`u-Z<Bg}RFYUc0
zf-a#WrXDdVwi|vAlvpKRgRT?{av4w~zUQ^)IdGYCQhm617hlfuE>NMGIQQHoug|BW
zBYL<FCCoN8yS%-Fk6`<?7KypAMFp{A)b7J22_og2n-BL;0mLNyb=J~|XG*W)300Fl
zdTUj;CQ9#iDn7<bgRz(8|GQSjwG&BI?-B74fbN^JmY+*U$X5p#RKkK~)t$ZAg7u|{
z_f7|#h^x|GLJ@Yad2-8cVd$vE-zFHD?*iN0Ul4bCnzG7C%ZIP&4Aw)G(y=L)M?*yf
zZM!>Ux?c}j*P}jI(W6lz-|g{8gu#TlYkUG>Li#sbdhvr>ZB3Lnq~ik@;0iA%?{HUc
zKZ^)G<zmn{M5WJQk7=w=*x+a{#Cia-VmsLNXp6xgc_9OTtdGfjv-VlWC7qv3enoO!
z8~Led+UDg^Aw21O7A>VDfda(=Quxe)BKaeMjhv470N7d9f^kYB1F5EPt=<v8>*%l9
zYomVd=oJWUw=dS4&%LQ?5iF)@I(3Tur15#~#ctYaczwQgAPs)xrW3Mm?qB2UFq^ZL
zF?%0`5R?Ubei`jICEt81Uq>YEXi4XC#;CfD0##9G;ZOS(%HWwwhyQsgy)|?jF|@J|
z#m!)HlwV`j<;o1kTdr9bVd(CV$Suknj*0Q;sv}wr<#Ws}P7&dvf8?(4m&R?kmVGyx
zY}aQqE!>l(f<_rU##cDAW;G7K6=+KlryJP@{Q(VT3v~pILu%yX(mTDdozq7*+w46X
z>$FFQ3T0t7>b)_FqUOk(^pL-BI@dS2ocT$bL_|P6z0c`!{BVaixn(_=KM4HY_#W<U
zhjc%z_3;cTax4senQ1LBj$}?@0Ix`Kkx%{&ucbO1Rj*b7HkU%ga)y)LE9ePR^XHHU
z4)P;n@=|Xa1R^_e^7zaFiyz=1z-$-(7CTpx1}i&}e(bSTLamBR5O!wzou7Gk)jy{$
zyRr|6T+xP7o9#ZP7V4`8wR?zlyIP?M+7;tne(;(=1y^Y5z_}KU2bDcD3v3Q=v{w=z
zp1&lfWa75p{GUVVUpw4QKzOhCnvBOE!k(!RNgmWtu?3?Gmq)%gj>~Ux)fUS6YZwyO
z3W_y5{4sgAz#t(4nr(QMOuiU2!DVa`qDX07TjnOH?NJYQeCQEy@wof*c|4T{S-nvD
zd%n${n2a#SrQ?j_&xBVr_ann-tg0KwLc*fAcwxqML&+4%b_|b!Eg*3&Qk=Ezp$tDd
zGrGw5g-IIxTDEv(L7k*N{2T_foe0;CjC~Eqs!%Llr>9{>oX7&#w&{u{dxropK+nGd
zF+jzlPwGRaLEdcon8VdG10C-H?1~xNxwQr%k?mmjVvwMQ-2<woe^`_i_GHF#)z_PK
zUqy-_SeR%@UZ1n`AiGS1l#Zz~`$SS3t~GFrG#_mTuNGEDIE*{)97U0-HBuV3!<hl}
z3K<uK9h2gJ&q5E5y-JA^P(*7=0vxO9Fk0X#8VM!0t{?`@az2ezxQ#zD!a1i0POb(z
zOBabh+&Zjz86&q323^M>um8`-Api6I%1}a}W%fwsGB<stM5?U>yzMYkPgJ{q3YcJ@
ztOmO=ErDQFm`rT{A7Iir%bulR-%gduM)+SU!=YDP;&|@LQ6=<2-{K=FR7K~zu#HbB
z*r^2`vdR2<LlB{-*jU%c#VWz69$O5QvMxCa{`RSzIh<42OvM7hRsKM7&7?m4m=BL7
zHf!2^2KnL1z>H3!2=Imps53G`3^?g5nRgAuZCR@F%l6+so0x$~7t_8Ax=qR7l^W=k
z`?P&@N6fWl7boq3L0eHg#hyF&+-CCQ_F=e#_SR3&{;XvhfH;XfT9rg4b_?09pm%E6
zv1<9&F4m{7WAr(QHb8H2AC#W)1Fy0=fEyCsjZJj)9SDO#>#MoiH4L*360`e0#$KNF
zw>D}226;*jcfIYiQ8QIYSUux8yV8#%@3y^&!jJy$>Awc_p5zg!yu%szJ>DH!_MTO$
zQqF`ZTd*Ea(RuY@KZMhv#{f_()6Ag-Q+i+w<C7AwA*#bxmE}-NTt)Xv)z68$f+dVi
z=en&<%r#g77{kG$vp2KGblw~v+oP<`j$ikY+?Hr()qRz@7G2^64n82Jl3hHb84q>i
z;J_X$bBT8KQPu8RD-A9>CU`B&4r{OPb6U1M-U?l6^OQhr+ef-3I0P#tL|#lTyUeF*
z)N)thXi|0pSJBTC^x{4dej#BVmTV2%ox+tjYRV|T=!j(~M(PsA6Piw(3ni<PxStD4
zZpg!e8*&Se8f+%QMsS8yByn0HYyJ5A)mtQT&wwyMd?1>iwCvVspt(#+Z327t%pjAQ
zmC}TR{SETe%Id2o^87tCwcjBem(4W8G%DN_*F8DZcefhTJaht2l`1=Fd?^n_)mWw|
zgyx`{qa^aCn!mizHAv1s@~@EHIx`QZQ@!OyXbAlRqteXm$UYGT1?}jzF_HnIAsh+D
z_9zx`_TB4!FE;iog}Zy<2z*nm#uV2zLEK&}@Z_*AtNp-UxULGBGO7XbWl`1Wb&h|f
z^Bm(S4SdLjm?{|Hdfhq}7u#Ln1o|q=t4S)Aw&XJu?MCVU$qRurs2Ch7dqdoy))K7j
zd6VE;jcW5Fx|MhXnx@;(^|@QaD@N&G%oBI;$1Kub*@=;Fp(JM|3J?TD6=YP6iT%P7
z1OG~*mv=*^OO~fe81+!Bg6c$5ZZ`NvEw-xIUgd`U{f=F;V%3p%rbjYaDeom>IK`&J
z7!)4T_174W%4I$14GHqTaX6D=8Io<**l=Nm`IUa3L#qJ$OJsPJ{d$v~$1nj0*%(qC
zCgQ8Q%Z5J_e;on7r&1CvBlrzpJ}6rDjFcM#1=-^XGA7KvO`hNsrL%uk&CRRjc?nyZ
zvrvqsb0*N*d694Y7I&znN3}X$tc++=lJFM=s{|INbn)34I&TjGdq<~o>COx6VS;jz
z_2kmA5#D*|>&+<uQQ8-9lkR%OAAQ*xm`y2^_pt*dIPzK#n&|K9i7bz<wI}*ziS@gz
zmb<#049FAXYcx916;|CYP&97!cGXlM-AcB}C|J$~K3>ObgQ!eKTSl(>Gx{lmg91gN
zKvhflBfdqW*|^)pX|+nCMn#~k=Lh?B{O2!Cc6)6Re$LM&sGEwFe~c4<IJ=6y)EjWg
z)S{046GfmOuwxqJkOiqS+d<AM57g3JV7+a0ia!$U@q7SxAz|*EQJxbn%d-$G3nh;_
zVSa3-@@)Se+J6TiA+Y!-MP^4<_rdai?JzPEC<7L%7ZiFW&ozE|=@9e(KL}^_LeP;#
z9Tl=zBs%?h|3?WNjW@4sIt9aiU(1iHY@W}3(nMh=nghMcjT8J*PPQ9aFZL`faq><h
z1SNKR(YyF$F%iHyzN*x#R_%^5qj2wQ!e}k_KYG&PDfbcX!*(G^aEs1-mOCJljK$J=
zZ0)^d5$$t}t&Ed>3Q6T{Y?vPV+i^h$oPg!?##|1uO!4?-X)x4~f{&^84@DSf=!k-I
zQzp+LUq-g7i!2*u;9guX3PDEv-7oYH#5yOIWtSNwkU6AweA-&ic|Y`1b2;|$J{=Jr
zA_{!9g73biJ0F|tDQf9K1be~N?j$tfXmI9ZO7;gCNvl*(W{llMmBlTm63noJv=n-(
zn||Zd>+8fCg@Son2IHzPN7Ma68!|s=N4?8t=u$C5Ea_cA;t1+Jfurw0jTe|0WlRI+
zNWKW0sP<%u&Q>rZ02C|Ud3y+#p*X=6bEgK8tLp^0aCItM{tSx$gObd){*B0DGAz`@
zsl$qwoiGAdq(TaAA<sWJqQ-2Y5;^7@7wO)Nb2J%nlx8p$HqYdm^WN!Uol_TT;=|=C
zPy_a^&gPS<Y$H_S1!F~5Xy#8Cbel5>%s?a7EhP6Y?;#;eo&19cPiWycGEnj!No7&n
zCsDg&qRhTZ+C!8TK=C5XfnV@12uS33h4@w?dJj0UJcbHZvl^C-YaP6MCKFucxeoS7
z1!Sp7;FdOn>qOR+O2;FQ$Yq;&>~!9u=MBb1uelR$<Mq`NoR}W|F1p|okqN)KkLhAG
zUohPd9k~I*ED(XKzOIy9c$n#(I7=z;nwe&I_+ajSE-J2CgeMA%X|6=ZyiIS4jA&?2
zTKDhaV82tSDCrEH5g%y*KP0qv{E{3Kxaw(|(U0yb$4O`xXr}lH45;5{70T%s!KcHY
z5*6&fJf%Dz<|ar`({af%q_%Ar=cK5sa>@3<xwL5yMaX_~Eg3gYVRzm4l`!n4O6vK3
zL*!ybMIpfbn%cLj6lWzoBFc8Cuvlxjq9F<dQ6VxtYvR?T0JZ<s*5gqG`DL##LjDdI
z9<h*f=%41m1%?SQ3i~KhP5zaAAZlU^o-1v78MeC-3CNoTv$M?af@oIm-v<Fno5pIL
zy>WsYO)b)^>0gvNULRE*G);?gijHzcd=?MeNdLCcbK=aiL>8X$bNFv<Y6v~$GkC*(
zCrej?J@Miu^k50xPs%trkz1{q3(rY}!lsOg75qABat`cP^(Ha6fgZyEXToFQmg$?E
zlNbU6N(m43tm}u6!%U`|I=|pg9R7e^+<_u3$iiRRFMf3veap^#e|{K5{T@l2pwQwb
z464H=@>6$>O@G*oK`Zw{OB2xrRYHu5h<ZX)^MQccZ)SbLe;?0@iWztS<r-9Wx*^H5
zrQD-joYuu(L)C~<LXc2aRSKmDhAYVH*xxH2st!~&PR@uP5s>EXNa%!r7G#F9{Gv<V
zVM7^V6(Kn&SMekRXdGK8(hH~od}0WZnZvQqsv};?ph?tEk;8+qImn$s8SEBEcqIyw
z#LD6WJ2jEcufEv;lBk-7=e-;kBHjBkliS)4P}E&J0+dY8{tSFS@Nsl3U6-#5B!FPS
zN=WJVryMs|NDu<Y@kWSB>Mx0xr2PANNkKv@r@rRN7xXIB+^q#Xoeaq^Boysp6>`gx
zx4nZbo0N83N9+-O(5}ab771BjlsbVKwP++%LNniCjZ%0y{QczmJad5cZ&)(HDzA(R
zhghxPXW9J}G{qLsL!LXc02)bp34ND;ohvfI5Et?JUQ<4Jg2J_2&~mL^EHp4#+d~tm
zm{uZgc83=DNI@6CPN@oEDsf94<H)6*`if<OqQ`0u11Z)(QISLAi6Gd`3^eCGrjZnw
zEvji2tRdHe2z#gE`K9{&kw|ZCj=NeNR#5NMZY#DcPGyb*Or{MYKN%Zal|$<%{EQfo
zb(pyEIVcDWl!-p*ZDB&+g&^k8t{B5o#a2KmpYhJ+^arE&Fb*7PAE!kZ$;ks-8=&e(
zKN_Ja@CfkSKs)DkxE<dIfG=<*PDSvPJOt4(zV`eZADDb=07v^rw0z*QXl4obS-|AB
z+G1z(3$>hU0blDT#tMrC7|Vpnt7mcCZ6L{rOv-m+g%Q!>PR88$V6%?T{taDIg@Fn8
z*bZminc%xkkc}{qqL-{na%|pIMmt=xWgZXf!X}Q+Y-Xp4{LE3pf$dN52Mw7A8fovO
z6jCK-%>k0;K-bvxUKc5}C(}DPT~`p{gX~gQJxXtG@kHzwR+MtU1AI^DM<4t*IWwaR
zrh2g^;O!8E6U)Q{0JJU13F|V_D(K!1aGcl7^M}#1RpqPF{t;%T7yO_=?gZqYGEE(C
zPPn6Q2a$$A5iXG+o4|R?5_lC)WE5vKOCmmf?3u9`&rk?<I`Ep55$d9oGdGgfbGQm8
zXJC{wEUlZ);3j+>q0e5)RnY??$Z70n0#04__~z)x?Dq=D9A~<u6iNiSTA~4Es<r!>
zs1I+cZ|p0HE>R`RHw||e8H(BNQKBmG_Q!7^E3zA`Dkl7Onq8s6XIVc=u~Bv{9sS-Y
zP#7eoP3p2w7%6aUwb%@-9-BoI2+MGX1UBCtk|wY`V(PliHQ`-s^LkzZz<51@ZVD~K
z<Y(*X;=5KC0HNyxUOW{=G`wz>tGCOuJ8SXmw_yz{#=lI!Fys_v$Pa%u_~u%f>WXe-
ziuziwG)n-#9=GJ@@I`wG-L$oait)NDXGZz?wVtOi-OGD^t>T^bkslATL3U7zp!gmG
z060x3-IPQ{Ho+ak9QrSK!<c%k!&dokd999#Ki=()Yv;(6^@WbJ@UWDpc?C@zG2I%4
z{L`K|n9wfcGT^Sa(kf1AqQc5aM*4T3a}ov;krSF!VPDQKNwE}{`|?PSVrzFj8pvm}
z<8k)S0Ti$&jtmHFB>16=D+Y^2k=z~ZRM-H37H5QU1={J^GYkKO52?)b0+VNviGti0
z62hHvB4&t#@7f_O1Zuz^C2QH$a8eNePbf98Ma7m`I(9iCtH24oZV5o^yt+9D7)mC@
zN8o+ws=l?U^s~|ND_Vj&1*Ax-D{REh=qTwpl~n$;pjb*q2z;(orQM)24a4VL)*CaF
zXGUI}cChXiBelDZHE8V1u@`y5kjFgN)k5Y0!DA}>EzYOS$*B{w-c*Ksr~V!O)kmJg
zyVxwSLL~R~n$g11#Ou$xt(Im>%lJ+}b-kx%aVuT1yoe?;#CxJQ!P&=1MM+WXon6J`
z<5JaHolBOa4PrpGe*lV0GZF!B8x9G1Kfqp+FFFG5deq}$DGs-W;}MSg!;u>Pfq6r(
zy!vYZ&g0}03UxgoIITu+TwBU0Ae~AP!oR^yIo;B>H4dYS?=`AJZ^h_^wy5xaO*APf
z{TSG8N7@P_#%_mNHoIg<y(cePHG3S}0!mbJ1Zuen(GI*|S8CP4(4~={0O(!xCUYW_
zW#yi|nhMqiprXjWl9>yalPC*Hz4w4ZfqM}F!R-=|F>t6&ANBjlR7=Sw=~)t<fK+9Z
zgiB_0Q`O#x$YV@Mk(2qtfY9um&=j=A_RCl1!|lpW5ENQ44MV-0%+?_)(fN2Z+%UgK
z45XB@oB{s3yo`6X)Q8N8>z0C~kKJF1G`CPa|C-!Zz3r2q0$YhgNnK2g=n*7}3#8B4
z^`LnV-gHK%-~?ImjPj?v)RZ<ePK(kULz(kavb6m80`hniPAD&`8TA>PS~b}eBG2fc
z=v=#vq*$^|^9Fc=`lyp_cNUm78z2OQF_BoB5FmKPcJwIC$daCw<>rV*@}wCb92RQy
z7scY0I+K5juZpmr_9J37@6d4iKHKb3imD5IaP}LuHDQXlg%FU)l<gzu$E5>JOiw?<
zh1gO#V@BN66I1$rT8Q6t4rMDyr)JJiHKVa6&u=7)`a9HPeOvvXJ_$_ke9Lep!dRIi
z`w>O~9E%p-H;_~fU7;c8LXqbTZZd@_UKuHRLMzMPT}co;j<<B4B%hd|q9B>OD?{Tb
z6d<Xz!#NeQxeAe`D<cV^PVlXXW#kA($D%un^+MaWF+%jqEDLENHm*bNH|hP<CTIN1
z(jxre##o3MZK#v!?w=5taYbro1Ei<}7I&3CH!YQzNWThNiWCpg*5R$xkgi;4?@=Pe
z0PjPSqGRn`XPXyme@7aJTG|?G!S7;j?ot7<;fF$jt>9*A36Id75Zm2jjNJpbUU*Os
z|B;@3;rylE<9F{|#3tBPU9=BB$}(^YV_aJe`C=7=wrB)}T}_i}XkR6^E&q$a%xcRB
zwQhM*d`+`@-Yyki;uh{U6RtESdrxyw$}3+$paGoF*yfSrA^eFHU&^sBc3%6o{c=M4
zfH_(b#S;Bo;9s`AiFh~qqgxhB4O{U%XdYy|EFi>ro4^f$zZ`Ia+}Wgzl}4dbdRJY7
z0$E4~?@BZMd@#36>UHDrYLmpd3Ut{@2e~61=DBlJ58Ifsd+y+QCo!{uXG+0l1b#k`
zV<Hn~#c2ZNEyKA6gKdh)Oi=YzSG;0!Suuka*M)8G&N>bR&LY-)zfL!*E57QB*`o)k
zsm8*4;KE9b=A&I&iX3@#tpoi2$S8EL<^QE4e}-$m?3Et-VKSRePy`r75LJKR3(bV>
z*^T`Bn9Fh%@$6X-j-59Ovd=FKVkRwd!{kd_rOtL4yA0-J-Nj<;X<oS{6#y%vO!vjd
zpah9U;BLww3*wfaU+y=p->+LOiDge24qS-z3e|u#E@cG(NVLAiil;A#R$U%ol!r0-
z5$k@JNmcF}`e%S?ckv*8>-jR?shac&JcM4lsP9(X(gX}~bV&k25k#1R6=L`!AJ5us
zMO>gb%(NXeWdhqZ3izA5o!rtafpX4#l;ZoVCd_o19|nu~4tUbx@s`k6%&GUCoIvf#
znjm`u8bOg-Ni^#Rlxg{R6-CS=t8a`Q$JT>rK1rp~9aC!kYU?4#98xG<M6nIq0hFp?
z1$kAOx>bARHRd|}LC&;X>C81jp90Qt-mfTA$Vhz`=#=J6?>Nd&2UJsoK-1~QLxEHX
z#-P$xQ(9gOSd050NDa?$N!C5Jj~FNx(}Zm`r$l?@P|^O_E#lM<?3ZGp8|k3M9UOXR
z*4Trl<#EdP_e~w?@K)nRNmolOVWibk48a{kYh`Q7$oN_{FAtb!O~udXd4$rg=N)7K
zR4tZ>SN0Sz*m^HIXGijW)Tyh+di_GGb}Nc^P!ObYZFi`UvpMX?ID2Ti(W=^(9zi+>
z-1J5@#*wMyOaAK1C85YnQ%DOA1)pg-&C2<;Hj#~tR(u;t9947iNV_!>E6Hk|?bO5{
zNOJk+7iLKoEozFx4{5FOBP}E4nW|V|wLjc(He-O%>85y)2+(+oaI0&liYYL-GaoDZ
zr8aaBr{dnWSL}x?ktH+nLg*77kehQB2=*Q#=hd?MJ@ATAf2I=sJ%ab$1E7!@#IbsQ
zr?C@+5#S7m6UK4N#Pq*U>Yo+^Xijq^%@VZ!xySW%3vizGCbgEp0ULs0Na)8D?X4_1
z`dJp5+^;GJ8EH5$cv+sOhR!HzA&@q+{~WbYMpON){qk<iPnh*3jt%NOpRS5xW#y<l
zO~fS6^eP@8Dl~xK>)UXJcHK)k{56ebU&-xR<Pm+Dg0Pg8k_cw-xbuni6PtT7Hx3L@
zU84NjnI6GBc}6&uAubPfk#M>N3m<Gq_Js(mvkZp|weQVB*+u<sX--2Us99)fa|!5)
zn<1UF<Ig`DcDh+=Fjf(8lcVRU>K%7)1l|4!P=X($*7*nvQ30H8AVYMNkeNoLWTixW
z220?$ygUz|-7~z4C=l-aoEx*uk^I+*n1k=A1|>A6^HCKI1av`~!^pqbwC=)ji?I@w
zyI(?1iXH>X`gpZF_3L<->w(lzZhrq@$5T6A$0pq|GE4bktnuE)l!dE4z<l_>gO)wG
z7qU$o9v?<`>6L`^>_y>X*(o7Fz>Sa-G<NNAW9R6Qvz;dVN|;AGP)yx9Z(8#wOkK-;
z2M_XD(@U$>f&VqY!f<LER-e44Q3p)%_Ozm6pBk-qszv+~GF+>seeW2h`_l2*YdWE(
zaIzI}nF5_oZ1gDpwCOUf9e+;(r=AsqV#2V?`rH0OcQ&@1bShK^Yp^1J9MX~|2Qo+e
z+Sw9u99RB?c}1Pxu4zsNNk9UW;%PH7p`i>!TSi)mL%kcf8Rl_VJjPf9g^n43Y{UyU
zVF<>2&fqIBo}fzst5rWLK!$xNZ<Sm=a>KoS{UF4Sh=Uaqg?30^N`VkDGszg!(|@uA
z?-WivUA%Sm8JWW2ZTZJtG=KCkT!_^%Z7wwWIH~)8u3VutClAXh*8{$9W#W6}yBtd(
zqH;w^(Klv-<blXiFtvfgNL=eac0~OahNIn>W3{TF%m4twi!%KP`ab2H#;Rz^y*H7a
z=xF*g%x9=-v?62aI$K#rA+XVKe=gubRlU2II2BU-1*n$1ti>R^HQ)|L#*`I^vmW(X
zKoU+I<lZ?Vv$~fbM_jYaI~+lUjHMH49HQj6zOyjP*~*pp=<rB4K^C7r(xS%gOJJ9F
zD-tXvZ&vgnGvErN&hS<@3i2aXGnjLhjW$)f$*mbk_9pO@H4+SI7bgS+We*_+$0@u~
zZnm}oILWhzj_rfQgzRf<(5f><BpeJTaL)gO*Crj3nkx~v8T>_>X`;>YuO7-3(@Bfk
zJl}G?Gl-&z3SGppqMD$Zz$lp>8)By*yRfmB5C>V8SoA$}5grx8_fhfp^mb_L5zG)m
z+<~MDqxwrQD&6|MVWNu6bZ{b)$U)H+f7zmuIK}j{`-ahJ6-m958>s9_M06H~)&lAB
zmS!eOgkN6S6mYvbbd4*a=`a*+MC)p8R~VHO2q>;ZtXAAnvow#9)zRl|rT!>{omHfR
zGdZuE^5-T6F52T2ebWuJCgg|Qae=4qj^SPjh=TQ)L9;HkXAq=LcaSH_lXRl9GuDg&
znLikj=c>Nj9-JZh(|cr*yaEE!qfF1v%78BxSWM7Uwz&-D9MeE(GsJ!?j!%)BGk;cu
zDIv@MF4X?rVote>ju;K{Qp0#oboqb)k}*S3SNKxvf_BWZsRTJ^!b+ZifK6d=ZPd$k
ziY8Ik|BHNJ^8D>N?LG9~VIjLA3^akUfCFZ~O{zF(SEH-ICV^XWbw866TU&W&E8kg*
zMhX0Gqe+u}cNi-)BA~KTeoi29p06YtO`_#T8gjgnDyWq3(G@AAeDhPr_5y@a5uG(X
zFuI6_(GhZbIJh57K9rFS8reSG3^g*wA4g4@E*yhby`y+R^_z^$*H4h<WWuOZL!u0%
z+z&0VI2V(p<4oZCnf-hI#nu{Cc&vc*9+*eND{^1e%?2U(_OVIyz`i*5l<}MoY*HkB
zVqoBV{SqVx{If_m?G|(s8x_L%q}x%ljW*1Ic(N=jjU6W7sm{BSvS94&(v`kW6WVri
z42}}^1^bXkX-(9$Eg3ApEQSiUBn|2RkMo1a05yaSCj+Nr!d2()4}Z>VzU!}`Ru3Ko
zjM$^=;y4>$Mxut%^F7Lt)+%$rT<gEoQC_Q>Q^NZ}EB2nQvtBj`pky*{h(N#N+oy<f
zi5g6M6IDs}7c0Abr&d60?VO#llHzlsiB7b671!f|LPrp5t&}rBDH~WVhAw}>ptC^+
zbFNe?DfBYBN#E~a0%O&A851<F#VmtaWbCPIS>WH2C$gtStip*E7p~34>1dmI3pxnN
zbu*w=EBl+gx~{8SjJy0(Wt3Ls829hG+&?QO73<Dc!O%mIimul}a_S!z+YOlM5M8im
z>xlC0ATn)7%NBcdCums^!;+Ib<6nRj83e|Tn;_8+@}94bj{Fsv`|HdJrht<PS%R_F
z#CacT_xJwej5ICDanYL0PEvb~-E?G@%;f?1S4-ZiukuRKWIKbF6cR~50^cZF>&X9j
zZ|7@=#mE`3zMMxf^&CJ0K!%*&_McD>3AuPNOakTM?1p8-MnC?)y{bO_Z}Y$QlnsSI
zCTcotVS@t$EzOzhbVw(pN?W+Zmt!JZhyl7FmE8wY0OrR&^lf~7AHf;t(Ks;xC4woH
zyfYRif;?}xn^=Ez@fl@_uEBpup9xp1wYPIZ4=b~m2$4V@Mx6kLvK{iZ{N$(ArDIDG
z%Qbt!cxyerlM|6i&3aT(GVinAqyE@p*WzyRnnepW)xLJGjSi)iq48=@ls^Cj8O(f^
zlbzdt>R4rR#1FKr+0G!{ns;HE`Jt8J%+7ZPiDWImx*rM-V~QRbm&~1m<@lWacqf7H
zV^r@uKUq>>fO9rkGOJosEXZMA69n0;yPH04Nss{9O6&UlWQ|c?^29uYmxM6jh*8*t
zC>dM~C5C}rB^Vv6Iw3^GdVHgl;4unE0H}&_p_e0M;1MZQaf&8iE#cB9usS7)4r0KQ
zj}Mno<u2H5>0{oy8=k!@g5++z`1+zh!xNseof(QGfv0fYXcT(`@?CDsI-E`tFu)nD
zN@B+68-G1^5^9W4X7+r{sRvK`44k2_De8<ni1hmK*eTJ)_Z_j-RFjpI>9(hK-`LOi
zspoBHhvFC%B4=PrDyPmea#fh~j<Eo=A%E8jz0<w4Ukhne-&Tew(pPUiJfEHuGb4UL
zGq)o@XLYAh5Vt>QM5huCoj<*1mw~Mmj{sf0Y(}D7Z&{oK(J1C0=zgWbLnnqi10fUA
z)wtzTiXAv&AgqbZn8NT3*L<)P`HmXsm#!i%BJs2>)OG`A=x84@RDM>A2$cq`+7G<B
zTCnbj5oU(GW?1$2nCm+dgjTY5kwCo;pTfPf1eiZlwjNYxwiBHe1a2tI5oV{|3cy=8
z;~Dzb2;7(GjQ@b%W8fAOzrXaMS8PAQ&rnGN!w)ASW_lWF6r8&3aNyfpTwrb<M<?E^
zs&_1#)(%R<g(HYk9ckhxVWTteZmDBr#Rq)DNU*;0pt_}`=O0@bj$LsztoC^z&nj5H
ztcE228sV3@)EuPIMc8za^2#-@fYo*)uvEigoCVC_|EKaXl7ex(OWVPUl4vzt#KE%J
z^!v(fW)-(&)LbbAOR2>(q2IO6h!%audqYr@8)u5vceM!1>~cNd2s)$_d7+OWUA!eb
z@Q1@<1VV5%2wPZ(#no)S(-ntKEPp8Wvwe~-?7cx$Pzq3!=n*i~H!s0~zpHZUBO?5O
z8*`|INoN;;qlK4ZD@0{o?_bdl<#VIhA)Q+iXKN*szS6N3?F^05Tz^>qN&*F(<??$V
z3silAnxY}KX(|Rpqf;CPHVroCHfo$UnIhJlsz7AhMaN?u6Gse#I+8)dZu_%<EInxw
zYsh*KRaGo3Va$rV&M6pBb-krDSCmb13yY>6by3oe2!smVuO=!0qL`9imd|?H(<N)*
zDCYUcyG3Ef(UwE#^V7f<v7{1u1^lYv4r!6=88h})<$9@Fd?*U4<qw@O7FKqI4dTAG
z!I!IZV4G`nlM0(kzUb*=iyx5Cvo0a_dl)1hgBVdZgjf?nX(Ow>s6YkeXw=HuS(IFI
z4A2=0jXD>MnCQbam_{vs|N0f76?jpO{x-%aELzi_wA|#%xf@k;NEg0u+{LaIbr*rA
zGL_cRg<lxT+*0rA>V(XDA&+-#83qjhd&Ss8zx`B@=tF$#wleJlh?D`vwOQnTymgS(
zCp#+9zdH-0py*59S+%Y|id)%jUy6|erCIT)XRO7vp&C*7KXoROEA2=?Az4k@XyL%-
ztRy{A6@8C4-Eo0UH)m<c-ELw!zeqvNP}rV`h6Jcve$aH2;#tLlM>rIw1k|O@c<2$p
z;d8eUZfs}74&L1;IIb|~aE&!!0I6QcsA$*fP>>xeyX<NCIE|8;fj(J)834PeZ-lx`
z<{=8H`hAWOK-sPoax`!@q81_uCe5{=8B(voZnnx%1DZI~{4kuZdRlc52a!>83#!;$
zlo8Z&2tG&*D@)*W>Ph8s+rqZjY+${eb$wv4`Np(v8R#!5{^G6PV5rtu!9hITIZ~p0
z)fCt9wf=Id?|bGlMZz@86Ti@I*~E<I;3X?$fS#y2r@n_+VxS-fU(E}<1A-Rn%<f!>
zV^5=LpqF?ViB-4vfeW7)tS)a1)DERRSZ&{RhB^cq8-+J1_Bey%-m%W0P)%-o4V#~h
zUon{BUwP;}5g3<`F+vYQuKovEYeSARk2}<##k@e$eB3gPtDBRzZram81-YIL9hiq3
z1lWBB&e4Z7W$(k|bW1)^(+5aVXV?CoFR<h4OjO|vx6f!9m`V@{9^umk&FXp@Ue<M=
z4`$a;`eGSJ<r1sj)mYM6qn<o*R%wBV`7@uy_akGmnF1njUts_h%0_t7oz8O5hb5oO
zr-5V-&EjzO*+6?_JZGeOr_t__4j5l=mCHB}cSUDb1gohX?)G~Vz<cL_lwvyAqxvSl
zd>LY&(>#AJ7A^-WPOI0H#BCR7PjCz_8mMSUIomid7J~;+OmSr;uC{6>$P@kDWIQFi
zDSbQ6oDwqy2mv`)$hB6vKvPaxMC78ZySW`;gs=m=3Iz@@j!^>usIeOEcVL4pt!xV6
zCA~&#_0;4O2TprZ1n;()=1fd7E_4gmVt9dy=fLgA`xt2BDWtpbt0!b6c`~Q2uuns#
zArcDjQW;?A5ZkIz0ing@phZdipU1+Zso&McegnB$6p^MELJU*(?$Goe?%f#-sdnEK
z6p0h>TnTTY-9D8MQKYx|d0mHzuz5BwM90*(dCM@e;WwE4b~vL{BxBod#Jxagh&qW|
zK}arwaAj7^^xTZ8GC)kJ=8k6IwFY-4raT!ZEFi-D7AZ`%b~il2!J1yn^tMQsvoD=M
zn?vcIWge(0POypUiB{U$0>hwaQlPbn%2BcQ?PIcRLn8|IV&u{>^RhX!Nx%=pjEtXT
zBaMlS!`M&PXmHi{jyq&QitRBQ`3L_A&zcoqx@HUW{izzdino&x8zQ1@sc7@y2Gn$)
zUj*+3=a8CE!ww%g<Ue^%4)i~s*>BTdo9GkSsapg%pHFshf67XJEa7A|Fus<@RH-XW
zz4}QGw|`Ejl|8y^B6d(Pi{z<3LPOywqPFVUTV1+@1jJ{Q=5Ib-7YY$F&*4?P1)`s?
zNW2}EbsSQ>2KzfpWzWVf3*?YXZ5E+q?`oGBFjDZe1FJ}r5Uto)EzG>Sfx>^clQYdw
zG!q%-!IXifAo8qkzBW0ccYLnY0&t-+Tq<e4w)}_dIF9jvYPRAP?#VXK)ynUe-e`1P
z-`;RgHVj?At`i*V<$3u$WS}Pm`-^bRi6HAzZziw1z(BG6mv$8z&YqNxV+h0Pa{^R<
zsMNEk%WCAT<gKuwW-;;F1+OI#-2%@AW!cAI(N~h{nK3EQ>l!i-Rgv#6K%HwItO^bn
zdRc7(Oji`Mh^3DlwnT9Br*@QKC#Q_F&MjuJd9)}6UbX`VJ<dJc8G4fAjoD-LUyeJ>
z>YX+KO>x{MmlN?#V6~C@nC&vW^2SSc-P=_5+QUC#@tEKAF0ErjKSrV+@UHPcj64JW
zQOA)$yE;&;|Dsz<OfV*3%t0z6fUw|E;1II^MX~pSS6=jYWWS?wA>}F;hkAzp5s!4a
z5{x|-czX8tI1%&3v>hcI^IM*lq8?L<!aU=u6YgRSzIcdG{vJJX|3!OV5KfN#JW_kd
z)eTIWl%Kj0Hd#}+@>dK3H*b}+AZw{H8IQb}m&1x4t6G>)PT48*`_cC<Vg6&&iQ<1I
z4OAgbA8p_A%7)0}DPqdK2{|LK@2xlr37B4<sA^XE)yqbP^@?Y$v={|UpMA`{53d#F
zyO|@Ht!41=wiu}LIC}L6lBC1Vw8vj?mwagnyg7D(G*ZdgQi5i5=X|b3T#twHmEg%k
z&z<+ATh+Q|P~^5d$MU7Ug`;yd)O4YI0Ht!mbqs_SrvScSnK2rqxAy0>UNFpsEAT;@
zD|tEC$At4T>LS=8U8Ngpp<59?Sj%6H$|b;?v;eYrNc9jnYS>@PN5ZoWcr`uSKVI^2
zG_>W;(o-298FQ9@@zJ#5kj^orlatq<qPmd|Qd2GIzG9FvA{S~NXhM50N~PhZ(1mj!
z2SyvcxNDR~&4W<qo?A5cj|(c(*sUcg^;nQ^BVts@VU=mnEgj0}iny93<Vv3jM?Ly|
zsD;EeWr1OKEfhd+Pxa3?aq*Lg^=HsV<Dn5ZDC0CFjCJ&iv{iy<1%XF)Ci)fH9yU1T
z*rrOPZT&7M-tx*e_|^)AY~%vlgt7-z5}D1C`IA2lILAcchskjV58Shia-Ww6HG*xW
zAMw7!);jaa3Fm&s{AF0;CPVPzj)d=SCsNwy-N6E5MryK?{3)fOf+dihrN}~Ud>zLH
z`r4UV`ANVL52CInZE^XHX>5L?=qPfy4J)<Bj<h{=j&_yLD=a;9a7$bVWSPf!ku9FD
zNk=WRCe;{iJ1FJE^yYUs{)Tg`u;|q=J(-BOc=jok3Z{8gvcsa&CF<X3M5}qvW}c6Q
zHVOM{O{3yESBqNYO51nx!e8(Stxfk3KU7ZoYHsJ#_R(!|gQzYvW?hnOD|!^P;C(|6
z4OnKj?r178odh!E+Pn8e>Sn1)tD|?--%e!@Uj~|QcEwF0qxR9nj0yzV+0QW~fQ|dP
zUCNGI&&)xg!Rn(8;1&>mj-jVKAA9;#rFx|JJL_o`oY}6`5x-Vrfj5kVCqjBA;)KKO
z1V25><J1IS+)oqlQ^H(Idx!;-Httyax<l(~|LLQfUIn^x{yUGdb%hIeYQ2R$fqfN&
zd%w-VPuwp`jB$|I*=oaxeVx;ZXDK17jXeBm-J__}M_2*ygJ(S57ZPy8pWhEWb228!
z-6(3u9GL3SAPe=B2IQYl6zAQ^g2=8(=NkfdIbjuiNbnbDx3B4#t#40LaBuF6RJsU)
zmPTHfdrrrfQ-h&cy_;Mfi#C5aIu^^4e{8AEwotGf#w7*<b4ccL<<W}LSw%7zqH4{S
zS7BUFQ<wo$#)+|}l&WlTv~7^zA9P1yt(jb#%!`t7oTrQZiBN1ebwU^U>1NM3G&muq
zjnE-0HVBVR>$qu~OSipAoXpRV*%qcC_cYBd*BH|p%BWY0EoU!7UsnIknt-?;CGy!u
z7#<@i3+dB$>E{1xWN1R;Z_?p}B(J0Wrp+#<%!PIz4!Zq6b$2!~WNIyH9>;L7wA;B3
zPcalat6+K|4GQz<AI*n|E(WSc>#9UT34sEo1E){&_n=q?unM|hCa_ubcQd3Yb$6#!
z&)3`|@VOjQ-ZcWm$SE)b-cDDHBo}l-D6DuSqA!s&VQ-1BFR8$Xk0R$>&Zn6Cl>wIc
z)hvu=UfEXZsq0H>RhKk-pTmzfXa_xp&GYS9{0E{=o(R8$20F1e==L~d-82|IMADFZ
zTNV1xh+Z7mEFid-YT#}jJByOW$=7Z!{Zy~<r}Dds(3A@rS_NGxx}5n!ZfAEOq64rI
zg#f%vlux_=k?K?G<^-&C>;@wEr{7P4pmaF^cw95|&=E4*Ds%C7nHR6qy*pzGd_V>X
z>8!L{SbErUxX2knuj$PB|JDKS{fQ`f4p{YBpJ1$lddlE9F#k5DmncYT{1J;UgG!Eb
zc)TD)i^wxXUMCu-im@CRWX=k;&{pCu+;OrFWIBYyi-5%oer5GX28wy_Q8Z7DAS`q|
zGOYhtu<V2*%Ntz4uT`K*%iZyZ(gyW6B3`UMITw(60|fHDQj^a!Q3UvktV&rmg1eTs
z^`T>rG?i%?)2@Yr4fBQl`WYg$V!?_{_~ks*GJ3d`up^I3JCi1aycG}5iZ7XtC?e9!
zz*MX7of3pMEXzM-Lt*py^`_Xf`59y2c{}TX6x6y|hqDvqx(4E_f^qMGPOa#pPDI<(
zu%sAJ1#o@)0~X~vTP3vUZz|9gw~5?YtEEmtTfIZlESAmylxk4aOT0J91eib0JWQvi
ze~CT5eDLW<q=rKM`?cmzTy2l`clp=FRV{mS;W>v1UjSKQYBD|If{$p~Q}@{Q4YH__
ze<-r?{1p|VWH5<k%5VgVao%L!xQa$-(u7mS*3WfrSy>X31Myz*nB1#+`xOAGq0U?E
zZ>&ywsgPm@ZMu2RB!W=5+rRF7wpKnen02)e1)IXCq{B=yM3r?p^!`+f;!IKNCf9;o
z4EGhas%+OnSRSitp$S|i)&j7<2TNKNLM{uYn{%rH$zbyb01*LybSVZ~0QSZz0f%v=
zS{H=W_8yagfr&>*Zp}WF8<N1$w>k-TE%d_IMeP0yJwgefaM<uGe}e3qusZ21F0tt#
zy3xo2C*KO`+S=IBt_o$>+@3~@<C>9sq?dp(8HT=^^1Xd07xi4MWW_xy)!;Ap%um=d
zOQ%?K)m+ZFa==b0Fj4tBO&BtUX!e#S`R>vNJ5oOcLCh*4J*}`T-`CGO?h+scuN=zx
zd~449%&Td!5geGSzYx)C#$L8vJ6|?%h59@+zn(c;Bpi}?tJRdPWEHZ3+Z`k&2MD%r
zt0@1BX`~S9Yf7HO2Q}?Nhh{oO?uXC^!~KV5qZSCb784g`;3=3E?bg&#W>f9x@@n2K
zKzd^5MrI>ZKeTK1y%=k7-pi=w#O1W<vWpeU()MKv22WJQf~$CRX_fhZmJkTG7<<x<
z=+tb@HGljmtXt+FFmurvYuBC@$0Nd^S$I>lxGku3U%&<OL~a@_<p(XXpUYK0kyTPA
z8he-ySOqSDJT42JTYyObzL0cgrdtp#h)rU{&)w*P5<T_Y06MSy6T-I*w86jPh5y{X
z#llXH@Jt9hgR#9OxUf!ZV5_9F3QMRQ(5*cK4m6gd?D%fULt+hX%cQJM#&Sq4PVn{w
zFyv(y!ALwm5}z8fqiB&MGbb=9J>qCYZ;ftr(zE?I<C`L-&N{X=rRO!9+Bz(GVu!V#
z>F@^qE7AUo=~By%?U9@bK(9h>`AR=JMd@@X40=jln=8PM3}vM&#!wz*wd>&0#dUlv
zcO(R;X2AfjD8K>VSONIPZ7C;F(^Va@23g&1SHCz)GisEULq*Y$kB4B^jRYxkT^Yzt
z{a<IVTs*D&-h+S;a{2ABWdlj~n0F%0W>peeS-y>cn-Z8`z91>yC+-fDIjRBtwl0R)
zF@Rpc00e32C~;0ay&D@5%Eiiu1vm5#sfHiJl_&q{?&q+xvonv_D$L43gCo^%WHUi>
zX;W!No9|(l?&$55kSicPkn+Q+JCB$>wd<}mf*B>!K@vLV-4bl)`<!!po4cT8d`7NK
z?%teZ{t+-8FIodLaV>EeYN%Lk?=W3J!0jer%&<RlC}4f8DaE8C*!Xi(BXV)6t`M7H
z+|o^)xozCG>qin~8|nvV*|W-|!K?aya=HP!QiFubUb6O;MS-Mm-62V++|tHMY1C@w
zsAL1I5A#ZgrPt$Py@ZWdQ38E%G^(Ma2LNaFZ!dK1$-H`Mz?17UfgV?BvgWj@p9Cd*
znxqB4T}>Z6dDT}CnS7mPUaG32&Oea>vZDX}al|x0RG^=Tb{9YXFl%kbqFRmcEot7z
znwPtYXPpF9ddBi!I<!Vn%z^Fq4A-`?2@BCtiNkK_QwnYKhTL~(n=W;{PKz^rDJ)rI
z!)xG9t#YaoZpWAq_``ww#sUh7WQpq=NDTx5MW2oH<A-_ZJGo3WcdQ5S{@+?DOV5Cb
zp|P|oaNK^jG(o&4@p+#I@HybGx6>0dI(CL|g3$)y)(PqLvLGU3Oav&$AG531m8J3V
zt0k$l%3^m|JkQIMTgItU-@lN1wc}wB?{S3_x#pRDy-S~c?ew;Guy3F*cm8FAZWec%
zlw(saG%`}*6k2bn3Z!oj7ncw(QPpraB@ED{^@EIoS$KX#t;sKPV<7endrn73S<so^
zaoe}VRgT4d<{`4kExk}T%=RJkH;6+@+d0V2I+uFQ*IC@@Sk9Z-DHUc6zJD$(WfWX5
zyjrUDTN5Mt6i9e^4$3IjdirR^)zE66^a(D9%?2o-QT_|fi~93L(m~_$F0P(n247>|
z!iOcFJq*~)56%7(Ki)w$JP7O_>Nn3Yf)*5y23RZ_`?(fyZQ?D(IDJXwheOH{Mk((l
zcu>^UwX7HAmYCtGsdgzlNVZ3CoO}1QrGkJyh1w6M!sP=N2J=}dYWE02z?r&p)h~o3
zw0F~zp-ptiVjWz~)La#WQg)UvMvp(T2wN9|fiQEo997-YgFryqr46xqQ4#4+Ep@`Y
z4X0)_RZ*YsMhwR=1(lmTOzQ+gD@w@*=`)m9`s#?y>js-!tZ65XE$I0Vq4i6effry|
z#0%K{|Fl=-$asJex*gAu@(<=MtF_}Rgb!qcRLxx`%T@&rWS`tRwcqN$k09e-E+XeO
z+i7{bQ`}L~^_0IvJHO8r*{3?nLUU}~m-Oax_7!eA{q<N~%skE{BId*@Ict5!KkKy4
zicM-ek0|mF>mw7MEAMzU2XKpY>Wk1!W*4pTE5!t_XP<)xqNu&f8;IT55O}pj21}&I
z)<6)gi$T`kJm*bz2;8o83cbBP{L<kE%{)NdD*9~=EK}$DDW=<u-td@it(-OmEL9dZ
z#vxjbkgO$DR<Inml$T|9=UNq%fLvGXTB$55XMT^-4`<Y&-ktc7KhKGU0Bsej#>r}_
z%IRI{XKbv4g!+qWsn0w^lpSwg&-6cL+cOqc<1G~Om3R3l2G7>ugl2k}Y*5L01de3I
zn!Ir>kiOZV#079~Yhc&y@pu-(bWpRhY%n`^!^a8{xA(e)nCeRaw!6_Te3Qm*W=bdF
zuT}~nBsj4k%=03VAs3X<Zp$E4tv3t5(G5O1PCT$c@m)0#!o<~xpC4nyFYR7;%m8xJ
zxdXjpWe(sLMC3xiLJ~I{2f_{)(`HdTW5c#(r>#S^nr9=r-=M3MFdAv}tG>)1d$&G?
z(gGcEcexUg&Dp~gN{>s+Q|A{O_B2k)DV3mlxn1U_h^6wA`N}|c0g8WfZuW&r)*ypR
z90KjFq)TD5BgkkYWmHs_n?q2&+ig(MDjv&y>ph$tn<-n+q#xsT9*%~4bypaaX8PWQ
z;t-AflxjN~^7L+_%QPnndX@h*&<Qz$T8O3+JLD)^d{+9s#dDqhP$=7?5j&+$bqN3i
z*fj0BW=Jze$4|gBW)6DMt}*gEMk|8n00~-~#M_F&sOq5{JixFAYe_GM()_(ZKIaxS
zH>)?-5_$XUC4^`OscOVz^Y^5p@$JSdD>d2=5^L-n7ki{1ogvXwkek)>VOS)?XOQ&6
z`pZew<mX3wXl})Wvc&>_(_R3db{@O4;-5p5zRJ;^E|CYga2zYLo0wMF(xNRv)Yj!W
zrwMdii-<ls+mMFyVyx|;8<;1D(pz3UP~VzyxMnxe%!NQcB8~dp@$Ao~<=<rz#WA+0
zic`|-v?&y<&H)tj@s!1~w0v5H-gAZgV6SqRSqj$Jq7ne%Z!@S=p5u+9bi;?JQa!Jo
zEWB?(P4~qk)Opg8)0}4VPMJ3u&gPopuu{9yA|`|Aw~a%-`q_M-#JxD-f5qu=aUdsB
zhJFj79@g672Z3SMp`*JuHlN!>&yujxV6#rl`}nh1-v2DZShD<+V)+Q<fl^g=M&A~1
z<s#u0TA_a{&@A)3Lln8jyb!m<0GXQRKo8FR7QAeYk`T=o?TEXy_WVQILpHa!B(=z+
zhhuF}*dSm##e559heZ|dk(qBJYXVmM<m#RBqbM%hclV>wpF`iDu~ucXRKQq!9J-Z3
z2<_L~AQ-Y+9W!n8;*NJ^{iPYG6KBP_r!Nxjp)&_Wy(~$%fhPEKg=>BnYN)`b`6er%
z4sf{r)sS=6f#w{(w^lW=)I$HdG+U}3KO*_4kgS=I0-~OKkhn3KP$Q-mChHp&pBzVq
z?S3*-kjGcPRg{Yt`&5F0TX?0R+37>kWIhd}5iLYlxdNTr>&XbWrXFxx+W_0stjx8y
zu8QcwwJrEUl|2*SwWX3?R-P5Z?{mk$NEc)L2g2Lm!n=V4jB)1xNT5Yzw&0i*-!yT}
zN<e@t>1|oYaLVSoAA^c0wu+r8a5#N?PfuSJb_+lwNr3srYYZJOqh!U({`89HRWhr3
zq4*uC2lIlUQNP*tbXa!X(w<vyyX9S((MW4&iw%T+PY#hG?RCBp^D7%*ajf&FW|be9
zA?ws3Cu?+aY7S;zL)cSR+M@l3=kA5a#tlg{ja1pS3q_a;61^!hUb;qh%W@E0hg3Yq
z!&v(A?$3?Cg6ikW{qJAmsSvaCFhhdwTz`(I_%qRyRW^%4dwd$A=EfUG$Zsg&gT!r^
zOK0VoW~Y}gtbCLxd}~-GkooM@n8C)f?P)GzZ(iI+LM2#_gVH16NwT)+9>vedW$TO-
z^|j^GMMI5ECbwsKi0+wmgL4spi!{^`1Y(#7I8v=kYf!~iGUVal>C9}~iKO$9kv-?#
zUe40uIuIyWeUX#nW@6FE(YTf|W1?@N-6D~*xNp5OMd$vxnddw{V4A(XB7|#`mN*k1
z|9S`7uQM?e6d?rA+5LYa#M2vF;sN<Vi=x8(4#ji`zI+%(M8=<Y>rsy0HJrzs>Nv;|
zg5UWg0MH5aOD8x0WbG{ti0v{A%qHQcr7sIk<g<}!k)5K7#5g1L>=zS)l&a1lBsU8%
zoegv74o+70Zl~|wm+^QT!Zq{h1ob3in7TC}#$UYW&aZE#Of7Pwyy;UrL&@VzNHX3p
z8f%QJ|ElbgA_ltjs7<5F2nvcy(J`vR>Xp~?h_lZBeLcCzGs#`S8P@1OzDv(#S{-@_
zf+l0i(80O3hiA|BdV7dps_4IP)_1reA;U+Fv$BbbVV;|8Mu=%?5%o9+P9*`ujZ5og
z@HXu)Ei2h49Bk`C-#YZd+XA!g%X(Lw48#HJsPEN1n7^=R?w3#?FJXhKfXC+qdm*wv
z+<m%;W4WDuxUi^v`&B?|F_>+@UxN@q0JNM;PXfJ`HIJ%@=(q`Hm+#^<!R@vDROj&P
zwJ4tah%^TW__5tFy3}4mEs=1p4w1G{g1V|2$sqA3a9t)&IBj#mOY6B-C@_?sm%;2(
z+>LV!-J*#s-#YE5AlWH_jbq`AW#h^bPobhO+;Br7eUH>+uVdJp^wEF+T5cgyaD;Gf
z2PFOE3QR<*;Kwa}PG|3}LB4ge7S^H!tZ-u?@s1+9O#AXb1u54<fskQ3x9-R9SxFKc
zS$lPGHlXKp_OaZB$`9ybLHo$dd5wcR7i$V&RLY}x^9bef&F0AgL*FELvXvaTTjKE#
z$`@zs){K@&A4Xg6k9O%<?Ps8+100QI;S1XQ{pnkHH*La*u~{g&ZzoE+7pbE7GwNea
zl(IP4%bU&vfubs%4&u+Mn;N5x&~m<c4}w<A+&LlwYB{*z2|B^DkY8eH$SC1OpFXFI
zB6n|I#2IC&Nc|F*&q1N+{Nv~qO%D7l16hd>De$U17XR!os-~rtg<3k$WhrwsuFoR{
z2I|+Hf<52#9Nh*wPY66lN5f1Zen{1SLZY{rYG^0FKS3*HguoI3W$}cuR_WyAy;myv
z<x`+gfi_E)@%6?(WT+C9XI3E%NmqJJI}!zXzKoLPz{id737UpqXomiK<p1CJbSmih
zA}Sp$T<}c5Y3v&;)>M1Nri<6E*gl`Zpy=hNx)N|OeNz<@wZ#wA&;`S*{9!ioJ3x?&
zGcs%cexj(jjWCLj1i4IC$IVHHo{w_WjVt9XSU%nZo+?&B2ZKZOsZJqib>{v?U~Bmc
z{l`aUk_`RDDLLz9GUE1FB<$6LFx>P%w=nBtCz!bIj;sUXK*pxBB}-Y27~3d3H3DJ)
zJV3+0buTsPRaRvv4n<NH!Lemc;#_$`_>=liu_C(YE?{jT2jI8|QvPfKWY+nPqy0Se
z?Xt`1(zfM&7z?Ab2kMTA!FgF6NV5TOoBq`hP8);q+Y}nk>oGo;*C#Vv9<_-!?YmeS
zJka22x;Wb$MBS6xoF$OaF+Vf0sD11-<@P*8GhvsISd;NlI8c1Uy0T4qvj!asuVNCS
zFaV$M?*UFN@el&h$j=hc7}Am%<UJ0ZNak_?(z!ug0p~zW6?B)R8`d13&5as?GuZaD
zq{{toqF+Q0Xwc#rCl1!|qoyF42@*q~0NiS?Mw}56z4G$|DyH!5y+UJ{*hcPW$xx*Z
z?dqVLP{^tqr+kO$bUAZb!6bcQoSuDx(b!LD%#imSB1Hm}IkL9?oK~<$B)WL{w!Q)X
z@4kZXXGr-h%p8<*jMS$fFa~6ai}WN9z{s49Qlq~V@y5-AkbFkW%ug>9FPcj47b9c0
z(>&<RA#>}l4ewsiQESyB6QrA5S|)X~L{yo!!^5_7T|W!0uj}Lyn+wCqkxSV1f&4?K
z`4wp(?-7xy-YUlI+2s3MV-d$dO3u~vLyP_JRZ1`v7GUpgTLW6VuM|RLu)Mx98hWwr
z4{MY?DN+znZlHxf3Ea*uc+SOjW$O2(?XEx=g{R<KpHKeBr}-7$Q|zBmJuXEmWmN-e
zstc4<4&ya2ootk;ZuTd(l1-0ic@u%V*0OSd!{un63|I<UBsN6H-c^Y2LAnuhq`C8-
z-2g7p)UtAsPA;I<r0^`7iQTA9_)3`&>4o1Jn>AB{4Xtt=X=GVH(T^_so*)afOEg$0
zXk`0W06f6gB;M9i_EJbd<r4$k;==(1n0uiz&~{9Al7)s?&;IG;EOJy@TL5NqX=LX^
zGKo4pOQ6`H?yD)pB0iHpvm1TdhcoyMjY>wngMl0K8xLLPGppJ}q}O{njfcnP^GYMw
z3_@W{6-YXJ48;tHYI{&MHSBX#AlFsMldt7ZosVMg63Y)2AAhUqyOtDAQ+?|EB3=}b
zzze09e1|-k#f$<((zsfYx#-mqZtgbXw=2o&kMt6JYOQ>be;P<S1lH^VO58dGNcTli
zwEvQJaBwca2g+N4zy$1?t>fJm&k|=Hm5h-FnfJ@<PFHk0)r7ODdp{`pt4^v(iS)S}
zo=^LW)`l>Te!lHov_B%8ZmU*tZ{)%&!+xX{{|WS&gZ?Fur}n~Y0~vHkEa~F-1D?|N
zVZt7&rX65m_rB$0>ItB**_2(g_C=g}DQ1oB@!Vl}!cJyoBy@&$pbEV|lpr|_<;{mx
zzM)xJQ^RKt!bxKm<^nzGsy@40h;_S@9;Rbl{SG@HI7PFfTjk(fcd2c-c9<vr&H+&t
z<>o3E$kwdeq!}9!82fXjR_zl|dVj_?#ovNj&6B0!*%%_xwo>wd?JdL?hXwfsGd2)q
zdcUk35ninn{&~puR>OJg*(8lIXE+aPdkSYG>j_)&0PF|1lj73IM^PQb5{0FldzCQa
z&ztedRDZzCS2J{kj<6yeM>Y$fj&%fI61pZ$PsQz)9mfns%Kem-48kc85BMqoCiow`
zkENO5f~ZYV|BZS0z1y<GCId3JpCee;Gb02#RGg};r6FWQ8TM^Zss0Mx=6sE7)w%p-
zOh48(W^XM?MTb6T&2nXZ2FeEf`hSA<z#_uxJj;R-BY0sS5SeXp4ZZrKOO27lggWzX
zo2@AG$6N~vb5M#jce*f}Os=7R8@=}U=tej&u)-1-#3hxq#Zq`zm-);TGqGW-8ulli
z_|9lBgw=_o^QF0fKs5_VokC}$p0*Z%esO70#b;s=Vu1Vl(XA*A6DCsGiBxZ@X(eO3
zuiBRmgcflf_7sGYeu&lv@LG~KDY`@-pjL*wp6T?XH~5k%?JOuSg7s7-nNF;PW)6WZ
ziM*wP+u`+C2a6fQsEjZM9@>(%7Qv){=0cJ>H73KIQKH7Io5wwBHRu;_n5Ec4k)Q&Z
z<+Vt!x4J`r=eeiMep7O9N`IUe8NGt8NadzIxK(D+3Y?q*c6;{@IBF)ac7f0A+*K&f
z^)%vp%Nvxy7Zu&bH5FbEQV1~VEam-A*(aMOpoX{5nkG`vpRVSd9q>G3LrwMh^6dPz
zblbe<e`N@S^hnvp+Ss4w$`Awc@(l;wv79kAnZj2)Y+<LAfef4wM*m#P6rkNY(J0tT
zC4<bb7OOYev71I>hHWcoc+l|W3G|J9nU3=(WF^pMFg@rS2$*EbO!{D>;$0j<W&zA|
z@d9!V_@QR+2}3u}`D<o(!XOL9!G;B^BNZ1ZWn<+HJ>`cVJtU0!qk`{{k%Go1Hh;_<
z;LsZaW{9<`u|gg~x8p5qqEyLb@W^l&c5GT}=*;`^a<jJ8i8mT?FqC8>i@tunZyA+V
zgBJnVCz@)?u#XEaiq_Q%<(?=rGXQNtgKVNjOsOl!vp^4J9WY7-FRbC_8@merCN<Yf
zb%WlbVEz#MHBeTQYG1KtD+s6@X#P>l`=5wdg-lRV^0TLowdHQjCGpx5e{i;0v)k2I
zpKsq8n_t3Vd^w=601-0T>hlZzfkXu;n*vo2n4I(k&!MEO9F5PDI`E8?sxJWO3>ZfD
zb856zcg5o!_z&gw;jndPrWhKNdUxCZ42LO|7#@wK?0p^tgKNm2z<tfBU^^{mTc5iM
zA**eVaK+$TpbphuoWRtdLcOvp@?5buaT@zr*$NNL(hc7DTM;x;!iCYbv#r&VgsrX4
z8AY>XZX|WCk4orMh%&Z`f$+$Q{XhmPfzyMYElbMw^LgJC%;+%3xWn-6CLus}$4{<|
z&GKtsl0t4Ihz(f}S|UOgau<a`R9CRY-k1$L2xx(k65a=ADqqP~25#6+tW1R7;ZA`;
zrUCtBQT}+sV~SViHus=SMFi)-7(j37$dLf)b4gm>)sMI(n-0P!_&M2?X`G!cCI3Cm
zTl4A4RFGiTdoVYgOl|vPj_IM=2tkki!W|1`Dxv*KxO}aYL2|(vw;F-xfjO;F-QYUt
z^hx4lwe=3seRt|qREmG^8FH>O^}j_;W&`LZerxk=(Q3#r?*||sXFqgFo+xtnUHVSu
zAzL5#L1IcOoU(OWT^|ZnP9%#0WAqeZ@qjM@cQT`NY!7(}mWIo+&AcwrtWFnoeFS25
z0W*ZV5wk(C;TFXyz0Zhz>K`n}0Ud)Na<3z`(5t!@_SGOkY>S|9&u;!6Rd*coo`e|o
z5eZIbNRknA3aW&J`Ug*ih}#YcVyKIPW-Gv3+yt7&f|vkS%rM3FWt|>gN4e<#;_yxt
zW_)n%ORw8%7van0@TmBkM53&3#RPL(=|w5fs}IUV7KqPcB?E%f-P|B$=QQZEND*R?
z)nxI;rE8@HAnH_}&Q*%N<>fkx>%d-re!TXwij_ZA)<KJhj>L0bhgDEbBk0ntwARgY
zz{6=H9INxJLm!S7*3S2TM@^XV7hrZN0;50KYB<j-&n2_S^r^?39WISHLF%*V^*-!+
z#z7W_B|y`)_ednZv_Vl7!UdKp4budXT=j#gAHcEw&!8W#)n~|`u0uNE3A*LgPT{yU
ziI~G_9t!oBDrR5tXWMWz+lSL+7zo^DK}fs<L%hP`a0N=zVjg;~bISBi-5JjQ-{8Lr
zdRi4n1uKciFs&W~s7ID5@Ot{-dE(`i0TjvPMBT;nM6`fGYR5jqyzpi7YrBRQv(MrL
z7nVUZ4y}<g735>ILe+K=1APNQ7}Qh#6yi1&3%43l1~p{>S_B}W``Xee1cKLT*Zut{
zk9vyD)f=-g;+9S1)f3$ja&*n<hqE%+2<&nLv$R|Rqous4+D>-(fNA~0_BJBoHt(8u
zpS<i2oN76T%F~0hL#9zGB}jsP4JR?cTrxE{xa7c&Zd_Tss-oDOmb4gN<*z$E$kT{)
z9y|`MV`8$Emc8%Y1qV3=kEHPa>Sp2KOU~`7_m%QtO(;L&@Z0io$w4XOGHP%0x;;!)
zOP}n9N=uDTy;~W*mN@$bI6#VB0kIumh@jviayA~(!+BFtl1EFA;E1LtO*C&T#EDSX
z1d@vY{E`Pht%+#NFtrM;V=uq4>}`xD>cV;x1f$d|8*hn_GRa?!&s1yZKd~y~ZH*Dv
ztaK2y{(7)qo&T4!f%6{{kl(u6*QBMiQtw{qUy0lDIkEpc!-N0U0H-d%H%ssJ^zq6_
z2lRe4Rq-21-x=|-ZGorUdR@91)m8y?J}BXAu5<}t$eLzAmT^gb9Z87lfs#`<p)1V;
zGOp+MO;S}H(n55QWTxklK4!~wE-O8rLk8VkKz%`hCIwXe!5!B@UhhO<(N4&XbXuT9
zj3hasXjV%o`qh?^13AaWw5`#uTh+|ZZk@zi_OP0d=@^;imw~tNpu`hx(Y{><tTS4P
zaDV{ePBgF6p$+gs%Y9*?94Q*k2oR13)pFN&R~k|C_jcM<b=L3LqHRpc(I`nA;o^1_
zwG#|j6~I&jI3lrMD`aA*f;y#9wj%puV~3A>&(yt2)7>v(gNl>yqXwYiaVT3k3pv2h
zxb|KNZ%cOJ8xc3EC<Mf$xLwG>Xp{XDcEsg2W{G|J-(NC#0djSvaw8&P-stY&w?mmN
z$P&(Sl~99gNFlB}cT>sC!xNxxQ>V<~ysghv@x|t)hM`xIJ@yUtzY`8VHT+o@48a|{
zOf97+RS0zrV57;XnmMxcH;PwNAD@8{=<#eWfqR;zy96bW1m<#T=Fy$uWk%)#Sc&#T
zM-!D3H5;ncQCNn<_i)1|9%Zfb9uH<BDd!%N(a5oMDm!K~qGj0hv-1KsX$@#Kh+EE2
zce{f<H@Pe7^9zkpNqKoU?=IM9F<f$O&ZUXJWV5^HIpIOB+~e}E5AkN#NvA)r1fEx{
z!ax&8WNNzAn?v|d)2T$`*=U-ZA^ZFt{7AxD)b8anDggw$L{O}QG@aj9rPWt7J?{e|
zBz24kmlV0n9X|2IZ^bnOu5iV`7_<a0C-6CX{3-Q#Rroa+U)jw-@7>VZ<7{p$-UV0}
zWVm$Zs})jPYX<0vcNxy%Y>a2YIoZTkb?87$ei~;c`+a0YL$lyIpQ~k!D^{jvd5w~x
zE<9n;eUc3%I$NmeTk+gC8(O=ybnS_ti(}<D`d(oa^aV%8dRS=QrWjdZOBrkd<j58x
zCAHQfO>R&<r<e7TPYJ#q{pC94rkqoZxF`I^AD)e8dmY^vdCNLM@2ke7%w3dOslOFW
z^lzwuNE@kr^bcm(Rx+$EkvfW>vzqC(1HHT-gJbqK8=bEGo;sv=@{YN2B^jvrxxE-t
zm{G1ouP*XaQdIPdk(92MS?3<Fa3{H83=m6W``Bl)l6>uqiAZ6qBJb;8D=gENNQwlD
z<+QUMbG&f~;??C^FBy`uBphY>2bu%rQNb5*W>k_aI|$F_D}Rkz@dc8?^bwTq2Rz}*
znXpI*C;a)cQp4jYG+yJw86n`L6JLR|S{q>$n{h7wEKbB~z1zrA4y8_#OAT;#{PL{r
z4Oc5)&B+d1iTf_g1?YCgI$1sN4sW}8{J+E@<#*)=t)I0HCdWEhZld#JPIw69(&Rj^
zL`u9kJ0URzZIGfKd}a@|9x~*ZL4)`qd<j7}r@JWNPCY@|u`asB2{Kr~c{#4+s3-Dd
zu?sd-btu(xi;Z57o$phA4t?9@kKaf&!SH^T0V2sy(@Si3kX#LsKTWc$L$?Qtzd><`
z3N<ek3zmr>xT91_qp0O?n1gRpMUHLK@GnJ*dS47br1XWq*}d4P$e1jLv+YoUCBau!
zh|JKpeBqu_y6B5P`}wBdKD|!B+H109)6-RlPm_C;P}h%RSTiQ9o5WxWY}j({PL+oO
zaLe<i!n;#%K#54_b*uvzPV;yP3U{=Za^HdQ@l_#@nbUU|X;`>eU~|m5aCWvGt6m6y
zTTO*6i##DBoe^;Y1a#FixDm;0pBj12SBOIBv+#H6)d)<FG2>YGG1hTD<fm)rdf=<T
zS5_23=K0sy86-Xcv05COha-Pm(*#%;%Nh=&S_XJt_AgdK;~8O0T5(>^K{u-EW|vGF
z+XRW%*V-f!6`Y-bkj~%(<q3hST!#!6*OA=)K`TaOU331RBo^|?*`JxNwFJ=U<pwJ+
zR=v!JP?4U~R;x09f;Vj!|CkSc6&F*uQh9N3kr4e8lt#r)h*02VA}E;}*z!`$UQt)y
zRE}6L6q*#lF;eRk*EZR2ghvv;RU9m}Q@i7M-F5U(*KRDJTC8G`QdY@kaMTXj;+GaA
z#{-7I(&z%?gYdw1rT$H723FL=9>d&0b#7HyTdo@jEz4dzmX+>l3YSE;iOm)*k$FOG
z8yE962_4fZP`&wiXewUafP@QB3@Q2KR|hn$t`VQFx0RlnlESZuH&-GBCE9fed>*${
z|AJ$>xKhaiap%dBk%J-orVmEUGOGKy4UnQpM#|6&Iiwk9=~`|r2KtE&l-@!X;07RH
zMED_Y_zYD1>WoLSqo-G2c~r{ob|DM9t)Xrz+UR0QYo0_dRpeZv7?%9>@a2GlV?=c?
zMQmGMCqF+lc0R6hQidRsG_to2!%+MoH_V(qTzinKI}u(ec8L00+w^Qq%Fzc&EZu&2
zL99w$N*R{R_^rJA8C~^n0ov6H&)gb>oHv|-2`_05=H-3@a6)9p5coeKF8YxRGGbVs
z+@BhiI`UN8(h*>26dLC3|9{Z9Zu~@j#w+!utFu2#mTKQ!^}$1JHIU>Y86CK{6Wsa{
z`+%4__&xjYbONww@YgrrwuTkxXEzVng}?w-#xHiNI@wbb1{v7OYkQ?Hlv%^lFYbjF
zMm3Y)@*<;nTxhs6(*o@FR$4KnOLP#CCy08}iQ*~Y6`l;!oVc;#Ux1Evq6~2ijXpp~
zl-OG^B<;+Hz`%RoIU^Hn*j3j^+y1dIz#_jjz#xycgTCj9$BA)vcogf;TBj$_-GEQk
zpN4XkdN;d~sD;`L*0fKwtKy;6255$&(@g#g>mD*log*H0!>DnwYY^~0Boe2hP44bY
zKbz~a1lHrkkhPo?k@a;eXiDU!_Wk|hNOZR7x^G|KXlV(bgzC953_(Erq0kH}vHF$)
z<v%N?S<3;c@&?WivTkdtG3NaUPJ&oggs`uvv(*{70MevFj#^vJ9N|%;{P|5Q)&piu
zX$V2?7wI>wtQHW&EOz{#3$ALhge#^J$ouRGrByNbx0gKxIq?AK#m8vHU0Zhjd{aBG
z`0C}P?;|M*ASIoVb3qm`tL+F2s3D8UU$N0+%e=xZxdPUO4h;By7NhDH<cA*&AHO>8
z_x1p^p!<d13!y11c;vaBGPnnXSZ?O%il~E8`d-)|h2LHO8_*ev55l@Yn_^jEgHB|o
z)1ve9lNJ^627`PIxQru8#aMGtqwXtYV~OYq8f$<|A?{>|+m*+RJH}KN0KW3L4T_^q
z3`L$eoa)-{Y?p4%vB5YUU1na`Mgd|R>a#KpnOdorSQ2`kqNL&N&t(%(hk9Q8Jxg{S
z!cE4erKO@<Y%DPNLnWTuUUFWly^rb<K-{w#Nw#Pjpg2w}|5Br^miBOs`To2MoBvHQ
zZKakMJ%&I2hJFqlJ=%F(WNI0!Q(db?44rK+aWqSa*_pf@l|qnm5=oN~c%l5`(;rwA
zVYEt(U(*sZqJM4l^P)s=nkBu%Wm>za@2hi2M)L{KjJitq3Hq<(=p;u!cu^BOn{azY
z#(yFQ^w%IG`bNWGpB@*#`qTTFmDWf}!iwEG%dIA+E(>a0ZWH}OkG#{DPdbVTpW^7B
zis|pPOy}j%vhJQlLEZaxSYAu{4kI-_5Sw`}kh@v~n>FQm-qxriU~U@<OiH9<tW&b<
z0gjZR?Imc*lVR`LDu<}fyW|W*@1cp+7Tb$zVn2Oxqd4uaU(*e53cH%}R^RdJi))_X
zaG>tGQA-gLqXXWT8_-3IS)RS`AD_dm76MkI!<f>vaKTb$vK9le6#<|f%)<6?p0^|n
zP5s#W=p(j@Up2HnRCOzOy4<i7Jdx&HD!yhQlQXtDVwkn7#Of(v^DDH07*{U>;>&Gp
z!(AW+rXZ9)gB>dp?sA9D2Nzv0j>8&Tn5MF|?<FM>a{urC29#~wZ2eg>973Ngr<nNy
zO!%<shBJ0$Fvs-86Ak~Q<5C(^lHThyb|Nda1*Nj)0`5B*16Ws4BE5Xlq$v81RD(0P
z9dK?U1K>&WCgGNetJ(%H*$l$`8Xhv-<s{edzfP)GS1OkC|3L66Bl=$?I!}7(>4k7W
zj37{Lbbr+qUMCPJl?EIXJ?Q_K0%m{AsOhi)+mTGA;AXrrD@3cYlyPg%0RO7D&2)K%
zbPAm<gIq6B9IS;zgK@9t9#}Nx9k99PZAu_gDtt>vu_>xLHx$YoHSuTFH-4RK?nUvV
zVI-T6DHgzw=~&JmC)hBM-VTh30iOHbCP2FL_;?Q-%nbQ;phH6QFuWmNsMDRU+lJiT
zw{<k{thkgap)6bqQ*QUrlVB(bIO~<rqbF3qUB@zdO&)yWCk~VF((fBWGFDSa=HnSI
zrhI^Q5hAmun$$K>ke0ov01|x>KB^MZ=0+AGlg4`W)pfk52t}HOrEgE=_pI0{F0(kv
zzppdUc>SMyrhcASAf9|HCeKne?-XgHKJ4gFh7!k6in4Eluo|a1n-S{HzQ6GY1lL`N
zyxxfZ;{hLKg#n&Q_Iu^qIFR5B6YlF@QS1H3ODcpp7X2D(8n=ui2G8pF4->b~v7OJe
z>*;(0v}vY-#K6$1B02)$p2XERH!BBXN?@9-O3icT7qrF>=HY(gkO+NXb3X8iqRm#E
z_f4JI3mU$q*g*<z(J~D~9jk2M)8+=lWP3B?p>#uByybzwLHZ)q4^*01sV1nKJ8P8C
zg7joE8#9D&@#%;7lO$|~Y9jL3e#rkx2s+fTjn(v-x@!eo6;EK%oOb)9sLjQ%@Uh}3
z?j3IL!}(}Bl509>;eNk$rrgwkYga@>m;_ZuFSwa-Df8qC^{071`Q3O=n}TI*n%-{p
zDsEpql6>1md2o$j98F3LsAm?_-3BD-%gOHs8*a9F|Hcbjp^0Uo@@9%isl>FwHW|~B
zCkjM)uPdkqx0assL-d34P`KCj0DVWY2)V|VN`2iyRtD?a--pCuewD7-hxvyf;%_wM
zXA`c1AXfXL=zvK?vGLN@tLwdZgdDn%9CMr)#o8k_)HHc=nu%4=33ef~vwQ)rBk4w`
zSul_uQqi8d%n~u=TgZC(SHgNRiq^ZUjWG$2(O9h!1IULGLchNInZnPI_9(I0W4nw&
z`49)^7Jo1incEn-A{00uHKs!PDY+Wzq&bA8p#Ni2TEFhDxB$)L`0=k=i?}A=-&M@5
z@nf+%AwtN+Skd$qM~xv2g>o!f`j<&7M?k|f(X^_#0bYni;~u4kuE<?>Yq8JGe;oS=
zN(MOCoVYqY;Y4138Q_KedL}xZ;;+aMCPC#1&t|Ij34<j@+bDn6O9bKOTqmN$M->8_
ztSB4>v*^8YEtgYfhh%ampBmC*V>tjW(R$xkK?;hRV$0|1!o|4jSw^n_QcXK|DE~)x
zE1-W-$h9%gxQ1Qs2Jf#8ERhlb;Z#M4aj;cKK~S=3`NodTY@JX{^!f3$c$v{O`M<;<
z?5C!|5zglT-gHs<+tdngCpM7~<6FzODETg|Cs-aBvV-r<q(sBi$UY(-WN71D5&v)a
zZZ&4qXc?(b1?FVJ(zXb&IHcJNlsg&iG1%$dLg{q&=QpyoxmODRdQgQ~4E4)#N@At+
ztTc`f^WLA|IK1}fAZz|J0Dp2*8bV6P118KvhDbc|+iYM7i$vC+*Km7sJjXw3niJA#
zwR`dCBd<%W9gHI!CVgO0aZ~f}Tgp-H>a)0p!<^1tc_I*0oOT%aQ<rHvu!de4$D6AM
zR;4NymX?uBzmo<-GemnE!tvMnlSyKp@Ra834F(IEZ14wLuFPn>UpPb-q_tVQUUIgf
zoWB>RT7H9>@ZIIKhmdFG1UL=a7_xdUFsSSV7ONO|shjh8*u*w%6Gksvh)mg%J;!oC
zqG(4zk_yG=04R}u=Ui=+5sBYadCW9?*{DdZoN-_<n+PBH{;6^=>YPm%3DJqnbGFC9
z35a)9Y3bk?|I}s@O!#vw;+Ug*CgOLS#4blq%cH(9Lq?MI`sgAu^2gt)>X*MQ%xKJP
z4*3&Dpx0DCvog1iOz+5ZQ+IA3=Pi<cz2FsYyvQw=)Z{*rQ<b^fy7oMt^H0Hh?al#P
zM+X3Jv=FJ|7-rT53fIzv8dY~hbYQ|nW5n>tfM)Ugr6dQA)Pg-mHh69>r~uk0s@7Oz
z(uSa_(f#w%g%o}XZkN9XVU6I2Ivz|szFaRMpoI^7ys*LmI^e%7OB*tF=f`sV{*nzV
zG^rB5|GgT6%jCWS+K4;VV*6n!KYL*wq8N#tsA`hrJk9YoXMspqJBUn(m&>c?GJ1+F
zCMIQdPOMn6Y_FhwSZ?t)>*8+(AX__}8FBoN_`U#`m4eVNnhq2!fbMlP%(2q6mrj;X
z1E=VQrolf(t{jdzyd;)2U4V=jsxTi<l&yd1P@n+;qy6eJ{5V{a?>|Yx^741U$`14l
zkql-CwO%@PG5Iysw;^fAQiJHND;GERH<3<fk;=t0RT)z9j2h9P2$p&avykgmEa;4f
zcKX|WEVC%7-S84FVICJTM%%Pwnqvrvt8lq|uTIa|;g<EpD9v^!Vc8S1(Shb*_vM+`
zjol1kyf&q!o)zU^_N<L4S}~eGOm+3^J5?@TbxF;{6bBg;nvZ8&$#IR4^t%7|8`ay?
zG*4(6UzA`Xjr}&$#}zX6(DTHms{hjzT}#yW7X-fY^I3lZdC_GkYzFQcabz2bst%rU
z<NMpiNF|#t%gH;(KmPAGZ#}pNCdT6sWkc3F4B0#>eOLGRSblmIdGZ;^4`1km-#o7}
zMI1Lqs1#H)NB3@%#&wRv%XB1~wVIGy62=@?7n6->{UkM2;*xbfEy29j8@y^JXbxQG
z1f6|oR8y|BKKQ{rUw>hU7}vV*e2IAW#qBeo`!%(iBjRvHC}3A2vzHcna}G0k6?XEg
z6+aCm0}8DG=T!8V4dvo-s$=*dfqnW)HVXVDiI@U+6gUdJDwQpW-JJ1S5J-z2Fwz%u
zGOKFYX}Hl#i7IYascb?GDaiTT-zwTmN`BTIR_yci0Q2?xFI{~AHHzP-5BwmQsN$};
zB^O^vPclJLPCI$o9%(=eA;HM^>gX-G^rF+SG*G}oS|vsk=BWrgJ&?n1XSrfc$L;*j
zx#JRU1+NhY<Y%-zs$$Z0LRBxg`_^hj%)YN~v<ZA|fd&j{#SE-!#si=x^ta{)W3JR3
zmWe}0hr11U4w6wKGd*FmQSp%f$KTD6>7~$DYm77A97c<{ejbvXyK2ho8v@5Zj;s(9
zU}(Q*XM|F&TGDT~cs%)hpQ=qe;;9f`wv#i~S|*QMD;LY2VmRzHF1U)Y3vRQCJtDB&
z?udprFKzqxRUIB$uj_fK2k#(l!&a7he8Oz!iROMtd-e~+Yww6>=jg{U89K*k#M%Gk
z{13M4dpo=OeI+jI?EjCH$;0x)F@pAFXZcen1*HPX*vX6l1jOKYxA*dn(MQRJA3c~F
za04p%Bhpp2FxHY<sFbj*yiwzn;VRu)uTPd_uQ=kq2)1QbJ1KWyvoj=5(+~X^Iu|!}
zRXB)|13YwbB33iH>tCqWP0sfuSli~{7D3)k$eONAeirJ%s=6ouCU9_wq`vCxV5nn?
zwap_z+uL7M+QIo`%#}@g;=iVm?Sl}EFyLVnG0TW@u9?NwvK620qGCecF=XD;R3%RR
zquL+c7or1_7yK4?h7nR!BK$VCn>g(z^FfI52g;v0^T~wl1>^X=LTC-^(J_cpUr^xs
zke96(R|hZt_*@;(sn}}Sk&0g+6{D#l1{inKy_$n7Xj6j@m%gEUAw9K8mC>|l`mc0f
z7J|M)ZhH)@5QE(*Na4=|oEm;P%HDC?*4fASfF-|ObBp^Lecwgd5Ms<{%xy;`AsbLr
z{P5a@`w1-@m#E-Eg^-p~qiuls$N1Cn(k2heZjs3|O7~y)%e4QtE2jY^Ypv>|9^dSB
zoE<r$yn#)T*^)+TVW>e|8cE3k9Cip>`Z&b<J|>oDhBdI<3L#tdDDi6$Y=v70htg`-
zzce-LC~H|{e`GaXgUdh^00CkNV!M~LhwtrM+DeZtndFy7bu&ujctd#uSX48>!CBpc
z@)gt^64~o7s0mB&e6TTvkpQkdC#Q`309G?Bjv5Czr&Q0GjHq{K`(p!w8`VAT;(JOI
z<)3(saCp#S_@x8kbJoAksdgBA&-R!Rm(I<-A`)0M$55anGn@{a+Va%H3+=<(H*zO;
zcU_*<%XKF!La(y+Q#T#0I@s-{wXw%c{r%xK*@bLCo7gyb(B2=?IzDoFUioBsz{>e0
z4-Ez%{Vvv-6IsaGjA#sQD<{~*`?bBeMc{IpsB3@hR-P`Y6${HWo9RaM&f`y;Mr?O3
zlv<&k9eDTz<&TZif#K&%wm&)jHFF`H%6_`mL3!xJzomLqliZzwkdT22x0qeO)nxbq
zkrQ&7ya`|htfu6n*_5Nt&&<82j%n*hRP7Nkjf>o<frUfqaOv*MYj+v7Y~4C$G7$xG
zp4I6C+bZwns!?-lYpXou&OE;r(1m#jdZ%3#+YgBD7-vRLkC{NN@;2CuXXrBvy(S9+
z`j5v(c&f<BS}^0+%$RslUO9YkV3@z|`l>+$GvAX`U{!WHB=V~#P@r|mK6F0vexKIz
zVr&leGf|FQ=G|*Ss=l^4tX9@%Ma@&<z?`%ph)FUhgr2X&Z1l9`Fa?r2*;#s{Wf@@j
zH3@mBuOst=b90HK^eXlRDh2U6sK>Uok_pJ-%l_&q;5c2lb@4~5X(R_nF8s7~7azLc
z1}V0srZ-LqVtwQ{UKlO#6#7ohOKlJ}6DgWR|0}Bz_Q(G<+e6un<x}x4I2k(xF#|rx
zD0&fsqsZY@IF`$8HtX&=G63EBTq;4ZI+kM1UrG>OZOOE=TtjnjBcYdr@A&X|ngl&*
zzNnR!TF|IYxmlW%j^wQeo|eF1Z_vvt(v|au3d4Of{}m{tEz%-D5=dCtMJY%`(E*a8
zPt12&NM#pGdQfDV%E_wb1^oln*=6dmEUhpUKoVrWKeQr7=Na>}!*k8MR_sVbuwGQ@
z;-SmH32#z(hh_G_dpW)mQHB*uw&0uXjBR4_Vabp+R~<%VUVR;6AyWB1=q|~9BMqbm
zo~~f(`3uk_=Pt4Fq)!dsuk9a1sZ^<Ykcz_XlGf%0`zJ^B3Yctwe^Dt7^M{>0>@dHr
zp=)IeUg2Y5AexUtjQa-@$3G~TjEyn}m(kxQ^PUTU_y;m-<4_D)^NJJv;U8FbDu!JV
zMPwG1VmL%;I7mIW2Dsd6D?T*A_>RRGh5!YrIp)oI!WGN$PxSwa)Y{|9JJrzMT1T;X
zX}PhrhV1vJlpC*F>T6JqC0ld(sy5J0kglB%RA2vRv9+D2(_nKrdh@$NK&vRbf*uN3
zD&e9H2PKw`ElzpnZya4h2h>oWoY^YT&-(RUq1-RbTN7Z|Rj!LE!0TD6nxO=+w~b^X
z+_1M=u>&59<~7kY&K048dm6KI11k`Gi93R<rGsQ6LPpCyKU_|v2|R#ij2MN1%_wU<
zZ|oQ_lD!58J35>-lqURsYgLPNmgY~?P)W)6iavFO$D@->cslhYudqFv4X6OfaE;>c
zY|GdwbHOr(;<Bx}1U`muCGbw50=l)Eq+G{eV=6w<sM4c!e!ISsySt?+JnP^YAleGK
zc9?iG^RzqfZ4^Z7l@Fgii|S`=EVL>LC%oUq)p_@MDFiiI|BgD+GXiEnLr#0fYcCL2
zT|V5cBdMnU4v+5<2TB~DXV;q?gX_!lP0ib#wXZ*9EXXp}e&2DW9Jd|>w2*QZ++4A!
zknf=ug2}XuiYcLv(KyxWgW$ncXy81Z-vi%u0J3U?&Kkbi&OM|jcrRM-GSz;Bx(caA
z%wd5(yDwOT?90st>EYby{ju6y7>8PnyBbgKqCP>&xqC3MMDQ_5vk^rGVE@Set&XOY
z9NaX+2fU6V)lgMSqOY*)V8)<R)mhg9K_IFa4_v-jTWI_O@_-&x=*yiJJ<Lx--)o$;
zxVwBr26L`d&oWSs^!ywvTs@%2Eh@dU(&?sK#R@e64Rgn1H);kP@G+xw=45D7zLLx3
z@J87Q-0=PZ5>@5|vFvkHxdFOz9i7J{qv7(0eyiN$m5lOL+dy4@AV;&n-{r<}cEE`k
z$|X^$)l>7s<_xRSm357{Q(fj956u8l?Z>^SLCJ%d!rlufxTv!Mac^qiJvNR+NEa#Z
zgpbFEl`^nB1Ad@0pWya0(=Jh?&q&FvzL3p=&64LfUXu~D7FB82G$xNT9*V4HxX1Q`
z%Tw9OHb(6#II3v}*MU{7{6vq%znQ?1oC-Vvp-xAM9ViBoWzAzP<ZS6TIR1j?b*66+
zO%40&149r>ZO1YFmKi<<;0;SC*3-Tr^FO=~e*t)iqlx~aRQtgyNsUBGTjo;qYcDCl
zRkvZM@dsQ5%hj<kz${n>qC2EM@z+ZMLr&LtS3K<sowH-$g-;jU{L*eU7wh^M*-L!w
z{L*)~cbxCy+A><yj_lL|kLK|n5cJ&;+d)nrorpdy!9E3udm5oV?xw2LZ(ch1x<R`b
zPjq4J;x3}m1IEh~`bMS%zs+BiMgXqvs6yUd%@Xt;<Bz6clo&|i4}qoD5EkL#pFqbU
z7xLVHRW$bsRNQ)mN>2*<5*LcgE*&0Nvqw#rzJ|C-YD7h@>~y(Y*sq`nLF0Xw(R{p1
zW!on_{-4f??)-_YKyvSk%+HP~dtbPoudXJn7>2`X_#2?^7a#SW1JY;q)1uUqY7iE%
zr-9I<>&Z#s!fTR5S%rvXLjg)Y`6BhY`2Rug_|nXZ^zT0BwhYAO$v+(!v2uGh)M?wh
z3ZE&L9EvnI6;g@#BnjDXrnqe7@+s2qZp#??J1NnArt20zB6D>b<AbjMypSFA=`n~m
zUiyV(0=r5{JMkBBvt6V<n*>1GLYjTV6VZB(Qb6y_)I9vONAK@<PMIvNq(^u?aZBJi
zT9)Ia^?Uz;N*Ru9IP|vDLD?BpXE-xiij+$~fmj7v?r%?c6r<)IGAJ3}%T_U9PksQH
zlE)riI+aFQZjBYpKhql(?XSa$5E7(ZX0@D~&Ktg-@rHw9$-k%IR6~u$Yw9_n_M$77
zWBzuhRy5;~C%JiW`5C!yd%6KrJIKpn0b9a1?d-#vmV`)B8+Gt-Ib36<QbR`^ofLN}
z3}sNO<D`NniBwlshT}H~$`W<9t(IS+>ZtLl10kiy`*Y3$Z@nf2I^8r3ya5|OCLyup
zSJW?7)$yK<CNZeC&03xdg}t3b#?WB>`k2o6lo=|vP^(yFSw3o(EZ)@eGklFYp{)f%
zLPNByt^D%VE~rPxk7*AtI6v<>4snj(kr!1~>q5Oh{m+`tm`I<a65*ib^a2%-_`}97
z!oMN?#S`*X*C8FO!sn=KDOcxiq&!Nbe4n=MvBnF=f_)P#^dxw6_EXL{$yCS@e1LOh
zEMBNRxTVEmAg#k?%Ecx;JDY%~Nz2ooc@L^wAJ33eQO|71WvVj6woponVa$=OG0E?g
z*y_=N7k=2z0#(mP?Fkp*^#7&?%r{sav!ypi*1&JnZ(qLm70htUVQ^dZEGVd&gl81#
z&|^B#2MQACXus>(ol{E{5ETt2%EcD*@*U#Uzj0B~!T}{t4@{ck4jet|8fYxFrsth=
z#Dt>1Rh}XW01ewvpfQvb&4ex^cLV2-B;HQIWRZ)aA|<4&50=(@C)Z{|qoWPPXC|K?
z^nYDja8>u3NxsxK|6GQCUYaA9&rFTKZcvkw*mZb)&oo5d?n1b%=|iwhnotA+Tsh&|
zeJ+|jkDlm)V|4Q<>TwPf3sHuybHh<X=i_wMRXRdVv01^KodMMvJ&FA4Y`-jF!A=cA
zt_ncMXy%eU%r)#cH+-{9IAR;2WJlTr9P{JNJp?`Uguq;Hw~f{(4j^m7ux}5=%<|oy
z1j+j63fYZVosQ+EAJwxg{!7@8>O7iyF31QJzu3GZVS9E4FyhP;`!K>+KgQvv<A^0m
zGVVX?9JIYYN$Trtj31kQ!S2`2(lZY$G-UMONP&vs5o&-&7M8UgSY;s3To{kngrw)C
zmP*s!T$FF#Ec^r;0?8EgcK@B=%z%%_Oiw3O;fGmQ0^Muwy&-`Ia!fNq{HgdV-n4f<
z{|`7f!e3C_=1>tMj2D^>`|k&E6HioIc;dq`Ke=LP<AuU&MB3zTj4arQclKA5E%@QO
zs#LqN7J)%I1p$dNLYW#0<?;v{9|+laa_FF8_>K>HaQ}bf3;1u1*cYsc0CEca!v!Rj
zStV{RHLp-J9|-xl!-V8yG#QK0BhEO3nSji^H3X10#|XGG67z@)xJH5gcT#7|GOW)1
z97uD*Sf?&D?@w9DE4pAeXlaq*XPME9J(J<>)LjKa7~ZS3l9CvtPC`&3U*E;=3_fA}
zt+hE`qj6Fad(ns)28AA1uDH(i%%OSlOHPVzhZmm0L&2R)>HxJB0cgzV+@P;#^D1VT
zBTvNFWvvHB2{NvwbGKeRhw&Zp7UqACWsDf@r%S&Mb`~)Z=%d_x_MF>U)pqoD^eYA)
zCNe;u(eY_9A0wB&;n)i?L!>E$(V*9e9WX?#FFro^-JUO9%<cDhFy$3u|At(=ix-9#
z4i}RviauA5iL-I2yjo*CJT}Ym$>*N)I~nOtbf2|Ja)WHhLd(z%&p%K*(HDLq_yi5d
zIdN+U<Gzi&@#V7dp5}|qYgC03@fI>l=4{Hy{AQ_Qf#B(Nt>u=m%~NIZ$Ry;A<+ZyZ
zF@MIz$3-X;ja>QR>MEc9+S;IJ`f}ISl;FxYoMFtA6Fw>JMPzFZJM~W+#-(v(DqYwP
z!NhwH>V2?Hn2<U@g=%vs4mPwqCHsA4#UB5}hAoewffg{<jst{X3#Iu<g6Xt<-ilN7
zv4O|IO3DzJ*KNCxSLvsb9!XJuh0BFvt+XOTiE{U_3Ux6H0K)E!A6d^4NS?H6ToOm}
z`rp}$?Z8TlvpWW}q>SX$8V4zpbHz{h?oU?swA(3YRJk9Qa@mDJ4Vq_03l6BEG$BrE
zidnbVl4+PKZ2#-(R;ut_4@*%3ui*BFL*{P+54<I&$U(hp;RsfV3#*O<hvsN2V){dG
zAh2;R8~jbsJMLcxCv~oLN4;Wz-asK23Dk)Bb~I&gAg(+j?^21sn5<wo-LR=&%SCZR
zU+!nfd!B-{zOu4c@c_e;x2R<J`SA;3OjDd|;hqa2{AqQGvDjv4-!dcp{DRNU)2x+e
zQBl<9t?t)qN0i8EGn~P%%2yt!X>tdPi3;^Wx|n(EG7TlVVMDX>nKjj-E8ifdop4MT
z--BZH#yWwIGCn?K`xB#xo((ODjJLm+cP1>Rw$y?&bGU_gS6EMwpMD>+>uo?mUwIGa
zHn^OUzxP2k77!I#n~lOQ+BLv^%@^{pFC6dJ5U?hn@c{v+HY3H)IjxcQag+d?T6#@X
zC4(QR>$n(ktAS>NauvJP|DmKru>lnRBRf-lm9ly=%Tl3syb+j!f3)4a8q0*!J7Ec8
zSG|)Q%X%{Czxo!2AKY-Qimcve;GHkIOk&a%94JDrqbtzG=ZguWF!JhBTuckPsE~dR
z<-B$kUb2HgZxv7P@88aHpy7w~704!1papj>Fb!lm1LS1#S)1e{@L$j!c&YDSl$=4a
zcTmvgzV-h)4+1Ag%1)NLV=^nTooe|gsev^79DK9#`BzzP=^DY#DtuXS+h_XX${=qP
zLGVb|$KK(@D|bN(eW$Q|K|~<#rWzl7;!wDg-E}HpakoS%9|-F?7f^8RN|~l@ivbl(
zL9L1kD#Pt&(c+W4Np8J8AE`aU6y6Uu#r^+t)}rZmXdoCF^Pt81OrzVOpzZ0Aqxo?y
zfaWogn@aI{dIU3LxP-}9U3=nRP*%pF$!)*YWtTn8<hGZ9YdYz=`XKs%qX|DQaTON^
zKLt@tR_TrBoB&idvs8N)%?EG)roZypOV=kr-^J(X>Zm6n@Q5pFibvs&DllxP8)EBS
zLkOJY=<pXG^F;GchFwl`yaT(E(&#I$Jio}Qeho=gfGpme&tlgr{1a7r;yUZ9#NS?k
zoAwLV&dNhP)fcKY%-$hzQ_pDw*4oHA{jOCwXTC7C{kh;ju5r@iw43q>SFj}35@2cu
z@!Fo`POpXzc{Jr#s`>p;+|>>*6>pn*S8rQYOKXBZ)l3`vWJDF}qjRkDE)=%`I%MU5
zQ(7CX?nBKeOVv1FK(E4y{f?x&rRA1#SD#2*vs^6rP~c)~0lyz@+XO50-xjI=JJD~)
z5pX$`9ZLs+xG(B?y&;LLQg<1?4%<rR^;#t`ri;NF_~0+dD2}4^eA-i#4CD#APF(F-
z2DKAedOkqt-cu6;VjXOp$0Ln|z97=SqSc@DYj{Ez^%wsPtv0E>pQOH{GiAZ5OA6rh
z3%fd4*)=`XXLLlptnM>b^5<80<3i9(Yt$Mo1Fr~>vi`Wea)A$ED%}IUWM1v((kywc
zl*V!-2`CRths0TihQYS*@@sfyOY0@p)0cBqQo|&)J|TZ?7zayC+}4VI=SO9-zsDS4
z6*IeLBCRWWb-Z<LTCJEoTq@#6HRtB$A0(zS`Y{G1jbN41#qS3Dm{Oa3K%%B|tLc|q
zlco}M&2@VAjyvb!RJFf*&Im&<m2v6Ek1S&Uy`%)x@GO(YvY#bEpFH9>)XV0fwY9dU
z>qLVxA**m(*Was9!$KE2;#0~~1VP`$&xi}6h9+Mg`{x7~9IMAYhqWf|Xx-wr%&sa>
z%Os@z!6my5G0`cNbPLYAx3~Pwk2%-h((9<LbqJWL*RoyY$A1j|ZBHnDEHzxvIozfM
zg_dr4ZJFBL3$m`JlfRg46sans0cW08Q=yR{jM>zy0@i}0lvsH?y#DJk^9<87iZt!3
z^KBpSv}qAcD0=T}R>-?5KF!>CvPln)6W#Jf5-5>(&l!dxewI&9-s_k!z?%F}#z$DU
z7lKhciwS5WZk}YG6;-^I7G~(JYcmmFgevM51jvHd=)LJjf-|UU3!(ouNzLbv(qBf~
ziMoh?!dV{8T0hUmrFf$&eCEq3dN*h+18zeJ_A`=>70lMuSbpPfj53M}DK5#}<jv-h
z*9#Qg+3G1S4>JY;VWs~QaD*U6n^Q@-M}D_$&chr#Gx~A;C%gKUUpzpTu_C6sE>Dc+
zO=+V_q&{288<8xNtHNzLGzcXboFj_qnNKD@8=i>8(JxUCxSeLf54sOTeefF5zA%Fj
z%=uczLT|C$Ip2XKn$*bqTi-A+6gWL1yxHX{Vt#wO`(IT)1233<hq@Pd$5JOnTBmzA
z);czk>zqzoMBeCj$QWU%^euR1%dqjm*{vXvQ`=^e!P%Lv>sNz(`vix=G?+_<ku((H
zJQ|uq?l#RnB^>tsl6<!es^QtMWiC%R2Y;n_40#esAzC4V|3he$3kPHWJ_!Oa@RYgR
z=J^dW)6F)2FAuc*AsKWsycAp{4gtPj$Ff>bAYZK(#P}UL)at?45Sfcq4`ng))KEaZ
z!DM56rQua|#umcv(DYbGCOz$ATJ;lh_*#uqNzPo34%a|Ewc^Pku+*h<RZXw2>>guA
zj`TA1^G)y`b6%khe6MvfgbY@}FqBu4SwdLQb9HXel4>tWN4;GQ@WhH>@kCtm`YNhF
z-0TSBQOzNuJ%M06*5u`%n57ULVDTuslHPt`mo@m#PqiXk!0ceF)$Fy#IIl%B2FLdw
zFotEDwGn))(9Plf_+7j2E%4NVCGBx9$i0dQt>MPc{eW;^tU|)3k+ntX_U88|C2S9V
zSLKf2_4wnM7o475l-9`9TLeyhBV_=V9FDHq(5YY<RWFaC9Y_7+H@~AwpJ6Sie4c_v
zyF8E<DKfZytdvN;-|(+mT7EgQ&C=${G0>leVg#JS`l;p4HB59FcL~0~i_VcNqk>;>
zNQv20Y$$|4Wpn)Np*I^DMhlcwCfZ&g)(rm))KTx?m+gM^7Wj*SN45yjbY41Gym5V0
zkKwR13-jNTZ2J)wG#oE^5TdQCSsbIyvERzuAMaTz9@AaIJ?V17q=v`h#~9?W7?oY6
zaCSoh{CtUkn%3&&Ax>GbQ1Swt;@T((Wi(s3LH{?C#yVKj+S%6PYFyLjCsFY#@Cs&?
zcQ@PvHwZ832-F#kt^Au5y`SDz{NqDj7fLsdOPPQHWUrY>dO#zav_=S&WX7=MLN2Ff
zUAjDUPkuqIZs<{3qI^t*BwTK+M0w!WofeD7td%VK)j&>~lv`8L7DPHG2om2=^NJuN
z*W}u4?}qd8PYJ`jG5=u!6KCQAEi6D^ueTx4?W2SZwm2_gKJ`o!p!AJxel$zu3_WNh
z@mQ?I-&r{FOdI4WI%UN)ekZ;gy#yH8J!1m+S*)t=U??P>R8hW*fAbcqX^Wt_Xm{U5
zdGc~b<i88DaU<#eT1IUW+W_AMdu8lQoQlzz=5gjVS*q`DPYQ`eZe{6G<k}=jR|QpF
zzhxq#n72Me^cN6QQ9{CqGlzvQv8rzEDU2?fc#xq5q;xBd!Vu4!T>ehfM$W>bTaIR2
zh%AbHQp46hk1F7tk|FwjD^z4yEmJ9#By{8M<CVrkHI(70kOSL-o#fKB@Id<6p*s4m
zkWRWv#vo~vfarP}G~mr^M^Q~T%El-4yd7TOxx3J=LYuT8{Jp8V>HFJ27d?yVgLzUk
z^+vP&tb6)${{xNDKcs+7oV{7JtUDfVCu>)_$2)FTK?;vutAU5HIjG7j*VqHPt#9tK
z=0Cw2kC_U~>kC7R5x>WvqmSJGtjJGu50$2_<QLV(qxbyeb9;CYXvuWkXtdEhqGLBp
ztNn{9ep_Sv65|5<lZdep8|0|%2s*IHfVY3^o4dz$O(mIVh3I#y^*95tuFr1NOJvr8
z=7eY;Q4W@90MFS?S?o14jYw4WL8mM%{=IewH8RwvV-d&qo{PN(cKo(EV6i8V^jOSq
z`$5)i0=t(C9E)Qi=xh_&H?F`Pjq-@%?y||`MkTe5tJx1!gMniMyZExsCS6&~?t;{0
z_H2YYOo5aUfz-ifZM)J!NNLqtmJ=rd)+z=lxx22PwAGt+GB8I#$+63|W3Hk!i5aU|
z9*Bg&)*z&LfE4~_ZHUl)TL;#%$7Ca=y@CxdKXx-Htofx)mun#N4&S4HX~!^C&8UTV
zB3|4LlPR92$Y9Y-6t0THnoOwYHiSQ_Q4P*=*H^vF>J>OXgAkl%1|Mh0#6r;1I4aqA
zwlT>#)N|SD;GuV{uGR;lPn%%v=DJfz2c2Iz28kaMr?ulsAzrs@$_3Q{-%}4P_rxZO
zMf6c9;{Ox8h0i)w=DOm~thW;~;RZi6JE%{&6({M*=|vgVH{$zf9PX!B2yvx+D>$!N
zF%B6qNC~Vau@t{reiAL~%*wLoakU=q@ZeP$Uuo=Q{u(0R@zP+s(xYIqG*l4X&wnD@
z;FAEi1cI{t7cTaI`0Rn?J)Y~=+&`GJ<r9?sXeg69uySAI{;kLxSWg<ay|FBvHD`n{
zv4tVjeHG=@4=Y%|(#c@VoQ5pI*`|7wzhyTWQYn?b*-d3w0+}BiHB}2*$GL4oMAX)Y
zWD&BjK0x9#eQ)8Mo8)b805?F$zj);LTO#nl0o-(<cG^&P^r_{jUuF20F2vkbKewSq
zQMk<4m#ngqcDaD!Q#MDA;!kIuOc9{T9pt06!m^l@UjWDZs9_QZ@1#*)8cmJwqG`((
zI_MO|y<JDUmrSf~gka=C5XVw??^Pxc;V8GyxBed%tVb+!<m~9qg?d2n&R=f18t@lv
zzjFYIFk8tiCE(#nJ@S}d>wJRiSD#Ry{EzbYeLru6WWS2*eQcyDz}YFCXifDz-Wcnm
zCE6x-Jncs*4a1PJJp!RIxJJ7x=a~2Qqnm*1T%9F#F%gmUx9U(ExOV`$u_C;-asBLJ
z?7xHA=CnWp&LD(R*lY?%t9@Q#Y-`;=G)!<t=zdT;t2Si{Nu~Ti_x-)yibHA$fskyq
z{*fXZ@2jCFJypS%zb0oQWpCtk{Ye)jgnWyzTFJ^cuX^b*9DLHxlhPri%=0*K<4p1Z
zfMw_rLidD{%VdaimKxon{cMwY9{s7*hmC#i7DLD(uRf=k9oyQ%G-GYR^Ode?h>hs4
zt(AfMsND!D1A{evOh}(iusvUy4cC%xbu<nQ)H`n?M>Sp$P*md%q|kJ48F0-izV^A~
z7Wv_4m@BXg&<u1{jp62`AJgxLOw~tyU+y)Vf*{Ai0{ChE15i<Xxn)D$9}^*`$C}wp
zpE!R6tX64`4dkk!^fClz<BnO&aotN{8#aW?qhD03iu6?mzLnyc3b5V0WcjopD;hIe
zYXd+WXW*YPFE@hfD0{`^G-QErp|E<>VnW>EKFRi$xs-X?F`QB3SDCOsh+DR<iv-#A
z3T$^wd%b3^YFdzS3RzcT?1_4dnzwyZ7-CBN!5lx-o8ni7dHM&bC8^dp!wz#X*MLnL
zc`}E^q&HCC1C_-h-p9O=X@d$M4`oE8vY2hZA*v8Rio*oz63YmICj=<KU1$WKBYN@=
z2U6H)vT6<p7AqK!@iF3ZSPWP_?AMOMqO8Pm<i5JiQeBpJ^&;(5siEwA2%@t^8Ttod
z7s!K%t7cww^QgV+(v4AQDX+Vrvxg!pugj`UwYjdx^Eo&V3BR2=tF2fAiQF+^(|~KN
z7Y@%s&9_I-=^Wu*k+*|ffsJ^{7um-ms&f%RC!D<36+U|JD|R6i(x%|GPV%E(q*(KZ
znq<^^DRL8s3Ranx&SS$FmdsHftYFS~!k)3F9FD}Ju(Hl7GXC2%#6vBX7vKeYsCEu&
zNzpEjWj@;aF_22N@f-O(W`Xaxc(>S&_3N+*d9Mh2NLTU$TZCuI4xZTCz}>eFoLN)O
zcEr{$_4R%VNQ2o|r|WB>_s2HrD_XAVC<4X)JbQeo>uN>^a88g=G4!@EVLGnGNT_C&
zc@5beyLRf$J~&ao$add*7EsVV3ZAN)vr%5G#T5qMzX2%JPA(PAiGNY4WTRoy-*PDO
z1hC3E?FuW_XnDv&&9;(Z5{9NBm~FFghwI=mZ$%Z@diQr8yJ@WGmLzv5%1e3Dodkx6
zdvrv5`jWkmZX368Lf9uo;#g)FUhsrQw7)6<hC3#LJkiO3=hzU|Q~`n2PUyuwTjn5j
zAx&e8c!cEhTaWsNuSEj$7bXL~`HO>ab1#$8(<uR|&Svluqb{JzukHUW&HuFNsfpGJ
zf0extWpKYPT0slVDEbfWx)HvRflPb8bf#>^P?RyrVtC#KZsrbAj_V|o*X*$*WyM(?
z0P=tVp7a%Y7J;5V;Z{YJ?KIV-CeIv4l?LBhn6cns;NEVm)7Q-XZ+r{2xY}J_dnPib
zs4qPaCF2|bcy@Ke;Wj$#r4Y`C$h)C4aC&!wN(C|wh#65YMO#)J36-^3CMex_T#uc8
zrOGFJh7sV;O<)!A)knaR+WxG7m-NZ8*P*`{jb28=Vhk@Y#SNdvvXySUvB9tCCYOLd
z11a{Aey)d>BiqNP|6beKf_>u{waGa(<c3=Us&jAxA94^|AC(B&W+<{_`vTJUQkkNZ
zmnuQ3(wvPJEpsgcPvnV2aw|^g1A#DZpIB8;UJ9xDKb9qU`9vKwEfs8HQj~=FY6+B8
z`Tt<P-Rl%$S7ju?v=`AJNNV|!UNY5UmN8xH_BU>FcghBx#-aMdgu8v-GeV8kq6&6j
z;J6^_Gkr$ddnbenOp1;t1h1KznEbS)2qLqT$eAYVtUcG*%>ZsLxWz9vd#kJVE2If<
zjxz5Ifu=V78|ICmvEENOrCHa)<L7k2=!4`rj?VfbjgFkxi*w^fS(rO^hxRTPe~BJz
znOYMv(r8xQ50fTdL)ZC-C!3Yag=~Hyi-*ZsI8*{ao`5hcTHf7tm%P!bU&n&WH$1F5
zR3j7+s!}ct+X~wTemHM_4}fU5Jv>I-8ioZKv9!eW7DYS@5lnPumI5+qKu4J1-MzS0
z)Ua>J(Elx8grZgw+}k#V0<Gf-jqXdUpW8^N%Yk_BD0^zXeUo^fWGu72{NOtAqjo$*
zBu$-BtM05YXN=nOKDqo!NKqCW!s9@oQP0j%dr?J!r3-LyiHUk7K&rBujxBAb2)`NS
z5rPxNroTfw^CzK$;m1^sShD0J@|HKWie>u1r7!)W=dye46Kj+#x9vr<;hQf}0%dUB
z{;niE;QS8g#T3<2S`{?ry{BPm;Fg1ogu;BEb>vU`9xm#c<>{9?8?<}%Nk&s-e}fY@
zPHwwx7s{eLisLH>*uDF)@OC>lkOrjz>K^Ol6+~Lu86rfJ_rxbIQo*^iSt#3Nhu7sD
zXli+ZrKY#xRQgt4$Ki8IK%$60Uvnp_QmaU9**<mDDxcP9EzI9R8zUT2TU{(>k*{b~
zd)cxoa73rVQq=@9;7@WLdkt0UikWp?E<My*jz@YU5p^))Q-a4gzD*rph27tJ%Jz$j
zuAYH5x1H(u!&sx%#3mAcNteR!T<kF7i${Godv8hW>godID-Pt?L@OL)3_tA^`sbKQ
z-UpL#C;H5p!itaVjD=JTx);0Z&QthHlBc1Rbxy(YY(oayOL`RL7tDw{kF7!MVHIbq
z4tp8HA$P@M7n8LyYz->HB|wh-j<^xYoX_ockU*`6f&OzDx|94Pzv8AlRKW`qU;c}N
zC-lvQ4tZv%u84UH$r8EWXISE0!lBS7(3$Abd<{0r(RQ=AlP%1idVyiMm<B&0=lMiK
z>x1(abx}{_zSO&r|4#%yCv=`LD6Y@`=Q4Fe%4jEi&huHgKKyr5ln^~;sR!o}q!a*E
z97tJr_*ukG@M1IlSc}KZ%dA1GW3K;#61q5_h`TPy7I`yPm$|3=5gEyWmhU<vT;#9p
zhnu#w8ygZ=n&h`-WRmHnM0VI1ujmXG5foYL5Omx*?K)+m%_{ewJpZp=Yj|v(yHhho
z{VagrW!R>gw73`8H~cM1l1}U?rB@EULk!f)gTb$$%q2K4Er4pbav<aNi0}=9@S}^e
zjSDoT%i0S;<!J<nb`+?=$*b7b14H(?Cn9NM)vwgsH$qrEmeoTf2Lvi`_<H!@(+)0i
zU~ZsjsE{52wiPJ}Et7tqsDEnZwuu`>-4|YtdPA8-R^ABwT=j`&-Q|lx&v8hPU?i+Y
zp3)_5GQBmbzcP@h62%V>gt{1kK$YAm4GuT;)B#mmT<}Q~EohFusGF!yGeXT~>YCA-
z1~=Ejb7o_{a&gx|>qxmKt61L|;D{HLPMxuh`Gf@VPV1mF%|)_ebnMbRXrJjQk=?er
z!dO2w{h~`ZZ34(0+?S6Y?6l~?+|i!glFB8z%R3JpbIokwTBzLsD~*h+{p6dD)SObi
z)e5Yv9^xAdqc4hAmHUyug%UBzX+Ng`_c;X#qlhM2bn7QBetVY$dg)bsG0k{Q=Kc9}
zZD0#e@MCP#NL^6emH_2-#Vu6CsMKS#l7xSw6tz3v6!=EoZZ7nykAq_{cUi?`yp{(`
z8C%owY{if)7U&ea5&^@NueeSxQh6U;lVBkw3q;ycD@{iNB}Xf%6}CojDGu}YH@e41
zjwWA)iUC3)ax-)iFwrUyR5-TJeG6v3sA{ibCXTFKrHZ~9(;)p3D=4LhUni(!sF|^M
z<;|TSV9hg10C*Mll!O3b?zvRGOU$UHZvh2lxMMej;hDp1NaZ|CH`D#lj|?)=xT7Io
zn<cY0p-*R6YSsG2Wvxt$DFD2w=Emx|Vj<TamR1v<l#iYB_O<KlP;oW=Z|B1fhX%&!
zDF|WRsYo@BSRvgEo}jRSk^%670fPr{8eA^s&^B599tX#amb;0(nk!_b>Pp*oAv@fI
zHMfP__3RsQ6*D$Wxn?w`lfsiS0EIjg?FY{Icfhx3@bv3j3;)Qaa0Y@1C#}Zd>>+Wn
z@<4kf_Bdo=aeCsBo4u@tqNmfQicmA(az4*BHH;dI93e>U*|JX4I5FS<0Mb&o8O|Cc
zu3Ao5vX`LDmxr-c`~tb;+qQW3!@GfMsE!oVK<lBw==2W6BZLg0q?JI(;0!Dwzb>(K
zFa?_+!o%?tvlI{Vra<8^*j{&EB_R|cdQu&!<eF?{C12)HlvzPb(w+~4@;bv*_)v#B
zcXR@h(>J3<`YpiC0lYq0?^A7hI~MqbFTf}N0c~=%c-B;~y8Kl)Q<#5?r7ewydpLjj
z@Gkwr62vI>0ykePQbWYrHJd2K9*ASSlb1&fPYO%nBQdn-wJFEBqM#D&0Y4AGV@ZMI
ztGm|g7f@69(ce&o)0Q=CN}&EReLbWv)_Ap(0N6ki1Zh>lY7N$)wL5h|1Q}>{w$lJ9
zd+DK!lP}B3g89cxIJ&)ncwkom*Gbx(m1O#OLh2&FP^iV9<}|v6H?dQ`w}4li0`uY@
zN@4Jc=h_PJQhR<0K3;ud2&Owle`a+Z_&wEjr`0GE)$5KbbxLCq=h(=AR#Ezemfand
z@lutzugG`@aqFzW%#Yu%m+F`Gl0R>Th_w3A95!l~lqpGQ)_w$v<)J7uGm<|4b1Tj0
zcJUNaVag0jLUsNLl=Xf98gvczxJ{Vz@pDn3qFcWd3fETAU~i1#It00>P_4|uWolhi
znvgl9IjRO%EUcpG4<PZrSkLRTIQig}^;bXS?l0hbOUjBxzM|SJ#i}}isLbgLGbASf
zJqO-K1=^0R_5c(Uf<0vz>;7800DDA77hoaZ3*uRbI5)S>88TZx%2cS{&(CK4V%^)z
z&xuAICMFNW$=Y?~S*r;3)hH9MxlA6UEZJA36aa?3s1Q&C;@Ydq@ZA{EiQifOwG<O@
zjBA<AN%1X;M_t<^^!oUQQxsI;ZbzOu!Q8#&D%N&?up;`Kl#~;T5oxIgbM<>ys(_V<
z%wo9W1sDSud|+|hx^BG|R~Vfb%DvmKrVs(}r|2DaO|2EV{khe>kcwgDqpKkaxyr@3
zhu}F9g5hptjWe8J2+e;o3F>aO4O4cYd0YppTw@y6YE}U6e`1Me6b(tpSi5Om5nv$f
z&Iq81`33R47BnGUod2|L&gBygR5L(=yw($lmEz+K4R8ICopfBz*6j2lkU1IAy1=9S
zvRu))=WjEHn;52qDg^sP!BO(u5b3o`VpFD&T8p9EYH!;67C;szq`ET7q|+}>S)>6*
z<@U6G-(A~pcR+Tt$VZHH#faFxxyM4@)0U$Igr*{z)B)dt>k<9(trkP7C3WQYL7CT$
z=&K|a(1AJ9j*ifX@M9AQeR6bPXj3v_t^$VMK{RIMGP(`XB@UBhq(>m1(l%;~U?lD9
zN_Q?XC{nP_>19k6dk%QmEeE?$S$>KiIk8&05DmzwKpoHXR9>q4=}iF(Y3JXxJ)7SG
ze+GGKFO(Tg9(F2G3=vpXanh-fMgO6FoMMPg>6XI=Cn^dZ^D_Xu(p)9y<PZfqA^83W
zNAP<mq^Sdj?esfkQ*^n0iZe_{!zbSVg6m_Fb#omSV9$d`VNmWxE>hK{pR)mV%rQ0t
zajUbCWvyY}b2|gx9%Q*`-gHAAwO}QhPUr7=H+B_H!_uUCz#qd<7;iPq0q57?6$F#2
zp6&-N$>SRsajIMdGTFczVl<$NmGB$6OzdeGBH-35fv(;5gH=MDzzk<WCcEC=*;+j@
zPHWJba&1&4WTEx2;vlUCo4;E@7%15y8V>zbszZJR?r$hC7EP$|)ZsTeAsA<e6S~5%
zDIEi3Xpoi&FCf2Nvs$N&Ei#n=wZxi|XkWfJaQB#BClRJ_>&6Fk^OWqz3R895i9S+4
zqLS`>9IDE<<HD3Sl_zGn%S=GD)8nj+Dxa+lF#J2;%Y%r2T%NUPDXD_;R_2}POBuOn
z&;5SyY*T?SNmZWkLV?ZNEqm8ql-qgH$eE7Itz55#+Uv^ve)<1)k?zuIVHBGPMe7kd
z8bL$DzmIlxAgta-NX)s-mQQvSO=mTT6Cx9KV8%nsJ8{u?GLIc>+7v&VhvPeNpvJNL
zNM9t@7Lg}-1IQEz-f{)SSODny7Q%*#*^o-sIm;|?fd<#KD`QlBzzO49D~4DD^!{`7
z0ykl&_rgX$2({doBtS>@kUu=J!)bHAC%d{_XM1!}>=qZenOj<M+GOQGKD*3u)S+JH
z^(m38SYe&Tm|0?i;?!8A&M#l=3#Hz_hdah(m9`IQ4m4A+2gDQP<G?ToKc|T{ksd<h
zXlXr=%*LtQ$96|-=IT#az9w;y#)_hbNGA@YRNZ(mH0j5T9q*+QS2-drviHds%!P{B
zI*n#Wgv_%g35#CHXj<mg8j*KJo#Mc}0Aj3e4aA>t2KS6Zq|~nD+*V7_7vFmKEWf^H
z*U^(&5D$su0jte!960t?^XdmWsl}e-aiL>WshIhvQEj3(gtfQeWfT8TRguuFE{(h<
zoF7<VbxyL936;85ExG-Wj%Ld_A2Y<o6Q*)5Vr2ZCd)VET=!z($2?nJ84ZgyDf5m~<
zHX@}-RR^&)8W;jz_!!%|W|E&CpVd86ml6h$2}p6gG!b&ZC4b!Hewb`Xsw_~$eoY&#
z1!+Cmpa<QFS{i!UASrFr!x9eot@=fOI0fZqe-%`l7T2_;S*4)?a8w6nZVA!AsN`Nr
zV{H>xt?lWDZ=hxUi1)lexB>H^B`t^2I$|=D_7pEo=8tKNa#4_}>{U@73a%_PH;@0)
z!*$5|N2YfjC;^`SWyOBE*w?^v{|%pwQ8lWWt$;pTAm$3y^;|=HoKNKH=>ltr>WM@f
zc)b=_N!9lq9Z6Y9yFJ`ntKNITslY;YNJm&-D7aXl#RY8CCx!u^y2oPx<0l3K<efcX
zZL3$Ra2N9V)0<{OPnITdGXGd^+i6#B8j#l7vi9Ild}pdU#0mN9ko24NJB_0VblfZ;
z+1e5XR3qhJx$rhj_wo#Vc^8jg?swcWnVV4GA6R;hQwb_lLsD`KTc5B5knv<*w(juL
zA^0rs(t1n%v_*ch=<A_&mYYxGjs%1YmxQZu26kaYia{$<s%SzfgBPh5RSv0Tdzbhf
zg=@&YO{o5O5YA<i#^y-z{L#60V$FWG*z`sv#yyldhK7<q3mE9fuEF!{xs~`g*j1ec
z8UP&~<<nKi#VHv131$qQr%NMmSmY1-hrf~o$_2zPro%WlClWQz0@$i&*eBj7L--7N
zQoHF|#kd>*?lysMIid3Ge6LBhOC!?6X{7sg9NZ-28dX>szIJuj-+_n@h;0!gi7SGp
zT6Ep>@+Dp%!IKKeed->;FDM$!T~t8yd)(RHJ)bG_HA=jg|2dttA+bG^A_(zt58#{#
zoFq&O0q087v*xGR5MVs)PFH!8a3HapR2`$ffy)_8c|i?17V3IO=UsPLGB6h!iocH@
z>JSD6BYZ&r!@YIH2#bfl1x7O1Ah$dTvOXo|tELjNnG0+MGeg?eeW>A?sJm2#up%D(
zM_|5>*SNS{CkClFe(lM>iJS-mZKbs9%2EQ`$ju}>SchFaaAgqH+(J3u3$=plXraIU
zVnGOK>rRg{U>bwZh#vs0>r(XY?piux%QZ#(07TljJ4Vk&msX1SXZ$6Lu=#)1F8psN
z6Ztk{gvVNJmyv7kb4TwDk&R1VKy_o5=_20_LJDtuD}_rGLX}|2n>iE9%7Ic?gGW8y
zQ;8Z1Er(C&kJH<f=^S$vx#wfW^ic7q!QYuEu=%nlU{92!lvq<)sBRCQ7SH&8F^JmM
z-kC~Gq@GwH769tL!M1xf<TB6%J3`hW&v{M!(xrR1bqfGpcUi7F^@rj88Pik{^*jt4
zo$Y<j8;9d(_=i};XW`%D7J7u8Zv!wWx!S>C5VMEENFqL16i@89lh8^vk*mCyT_VHH
zIAvJwWz`7Gl$Kw!wwToC2N6ZUq}wVb>?l8@Sl&X7hU<I$|7ib5i0QJIfR}}1KkX#|
z(VL5?KbF<<?Q}riwfOpG60LfV@iO=hu0tuK`y8~^DLXY?P4O8mgy?2n=S~nLo~cYP
z`)%*KfSwUjt-KY<wza}wCYh9P>w?07$1@2~*0u%Fx|r%(we+kIA&I4jPr>?z1-&tT
zHYv+xhF(YBf<qg&ugjXMeM;#Nr><jxy9{IG=@sBPOURhzsBn!!(&Goa#9n52%k-N}
zwU2L*`oVbvvUb?bUHwnZG^1bf#IEnPn`N8lY7hZcqU4O2chSFU)mik@7AJp~R~C9I
z8MdFHYSk-qRC(9P{qhx_Yb9xgCGekOmo-X1EQwX+rX~Jnjz<VcJ;4x3{-+Bo(fh7}
zaE8#3e$-2}Og0q2{{pEkBn|}g6`>YRG`Fb605gD<|J8Y?XeEj<#TIWfoWLXgfGWaH
zTZ5V9KmDnZHf&6-ld*kA`nz+1)`<GXkXM^eti9>@tt}Hn1&#~FbW^Zc?`{%za`eOL
z34TmfwsE{<elWMydARuriHAztELi@xuMpnkc4?g4cev7z1n8g}X}vA0>De7@EOoHJ
z>mVmdn)%$uy(}k}qSz~I+ao-YQ@Cjn9hNqxyaErjB;ss=g1r;aL|ucp;?}al?OaDS
zt>1nnEQ_L1F3xi{RJMT-p?5EbAsk+F@?C4bizwuFqgcY3-Pzo32{KvgMEdKYs+ik;
z!Ua_!lYVv)+A~dSml08zr`q1GTMU>*s1gBS)1d~pW6(ZYs)RFwF}1W%J7@4%Ls-Kz
zLiuU#D$cYrhtQrm>3kYd$5~vZVwPoge0i%&s%+<rb=7>~fWi~j#kfsA*j&2FvP?!>
z)?o1X;aIQq-X*r6oWfmA`q~^Ap`_f0(N1+=0$PrX%oid&#3aWf_G&p6=@!QW@QBG<
z3#CKl{4?37b(<cHucbiI^8ez9=zL#qo$4ade;H)0qy_!pn<L~Z57*PBg;8iuoa@Xr
zSGHYz4?(F7vM&417Z170bFmrSqL?esiKm%z+armgrOS@QRymg6ZRWFv@mSU$>k{{h
zsTRqNM7U1>&m_*s-{ZC^2!Wm+IQt_J-q=I&vuZO+bUjH!&{E%coSVTu>9jriB}d@b
zK^U=%(#hGB`&nomGo{r7f=26EYJ<m%NvAtvhEMe-K6zw-_!>;^d>gjEa+1LUXFaTF
zb5&2W<{k#f(2IB6xGkmVpPq$0=k8?S*guPv7D`hMRtuGlUIYPsR=Z4#kQqXl<G)s5
z)JcxcA47sd5yyM7-y*csqSuq$4)LD=*h^#*pu@zg$fghzjRi^-v6E4!Y29u4$U_Z8
zN%yJKUuV}(D<jEt!q^d=r0*FFTX$Z>Vgsgq4iU-zpp==E8k?q_*uot@kHq;nnwP~%
z5!*fbPc<z@z1(4y5U>UH-}QkM#|v9HK)A`iFkY#^>I^r!mtVs9bvTUm0%Nj(aaJJ_
zOknCisi_|}_@fi`f*OaH&b&{m5v`GDi0B_ERs(82>+S89LsMm~F_z610O4)|j=z^w
zQx6y+yMI!;Tp(OuZ?`<vPX<U9FZbSCRIr)3X&CzO8LV^r(=?6a@Qt@)z%O!S#T{Bv
z>WM{5n9ZOpt2D)X1^t9mw9*0f=^aelJF7|l|5!yZ=5=X)XG?E1Y0P>6?yqH8nR5%D
zo8j59BSyC_RPnRs(5?KAB@xXj4~2t1lI4wFgvIbD)M;d3i6CTxZn;;%jOgw<ip!4!
zJ#jWEXh&Z&&Y)4@JV+hLk2cP%9Pm4>AHB<!DtoUFnX;?SYGoEJv}V|q|1hB>65Ha_
zTPBxWOH7nb`t10U*7r+$NWJh+&OcgE7^f{3u)O|p31$NY#5IEid4A7P&|GTk^SYf^
znH;@7FmiCgeDTV5p%OHKxVlG+7t(hOeao!1$%o~adAL{TSi=$)30jYJ!@`Xf_!7WM
zB~pNO38r}w<OK91<%n>FYi|AqDZP(7(_m{!UGj4B;Mk2l*!Fi}^1e--*6ne2MU*^x
zU?5>P7z#6R1#^s6McdDP=e6%B&RNob=qC4&0$*={<RC6z8I_J-5cYUcm+;HzB83;Y
zw~RRAWf!p)fZNt6R&>FgDGy5Q)v`&?Nzj8mQh$J8Sj3f?rA4~nHT!h!*<EI9uu^LT
z8%r)xm~3YExO%;8nNK#^cP1Z}LA9+zfpSQaTg{iL6>)QxG<)A7YYZ2pCdQXro?Ywr
z>(-PHrr_XP*Dd;V@=oHQIHVB@iuNUh{~6cZ9}Ig7lj+9IkK$MMQh3aLT&9HE;+(*7
z_1zu$TeeP-OmUpoQ*T*Y-5mr9?CZAKFcv@6RQLVRy}jQRqiuV0jAv`IK)8|zTSI=%
zj%SH42kHuedAMx|pm|9JBzPiFD~ky94a=l(O6Fbe;X7xl9w@^ICGvK#Cq{DCdN0iO
zRy+BX{Y(5Zl0N_2WuSizLmM30C|^+`2{3q^Q1QKePv}KEx(x6JrL_l86)B-6C}4|x
zC5}tC_DS&O)SEF2z~|5lk@HW$ytO~o9S`(YETWYw`bDbpMyT;<m53gzk;eDuKr=f9
z8!_)iLj5poiG<&Gf1!d(q4}3Uy#rGut2lp806As`T_$vN)wf(nJrEp%e4Ma2aa!bX
z2B|fALmZkLHL*nNuY|z!%~fS;x0!c)#Ph3%i{EaeR`KIs5OX|XMh#t;U4=~LUj^P=
zKpUX0G_};~vgAvxxtG|<c3Kmy5xPmw@1REH2q_mDkVJD~wi-M9vK}`_{$>OQ#U9TS
zji6;3w>6V)D!rY0Gw)p_kG_Z&O^++6<-yU?DYRBv!Pb-&*_5ntnZR^RgVn|F(9BLG
z4fO!sC&Kjr9o8oH@f=CaiiaU{gL@Bofs1B^8JZ7zE?f}k;=}*mjrx;A;3`>>lphxk
zD*Mt7Bs9jv5Jhb>BV)bmuAhAMb@-$}=Jds>pu_r${z-ICA?`*YxaGd;TTQMa3U7`j
z4~L-sqU1iC8!@fTFIjo#<6gg$Ko!R+{?FCH8cK<^`pCZk7>@0`<hXCOl~M8>Wy-jV
z(K?KUSQ(~$P`R43vfJfDa6Q0UAblj+Mvb1t8dSYOI?ahTgf0{|YK##lXGBavUC7`;
zH7Fe?0IhJh6M+NAEf_b+Z7V<4gQg@j%T#W_{kYQh?zGFrFR8W~vr>Tc@m1-kDF?X0
z)|Gt|t2F%b;P9t6f~(M}R?>e4lW`A7p1Tvv&TKSA$$JX-*vveu_9CTPulfZG-U&CO
z`(3i(N9kc9f(u6U$8hK1Eo-V26PhD>S8v<o_xROk5z9fe5urI=`z_m5Jj4niaCS$i
z2KXt-d1KE>P8IW6j(r%Qg1A<Dx5Lb2U=I?$dgR$>PVBF7tk_sTAtRDOcMa3qv+9#5
z2q817J+dARTUmKPk)k6vM$bLP47zl?F(}-d|0ZxcG1ZBU6+db38uR7Z82(Z3dBn*{
zd2sNXL$Og1MWl1HO-#?)OTSR|5E(+!!56GNUP<)^Y7#Mw{q0gm_)-NisFAv+Xi<$)
zd2g<vt0y;kP)Wv?3khc^`VGpQfu@m`u%fXinD<J-`{fkG(m=bKf=XSI>?X(ivuQo)
zzD1O$s+5UN4qsrUY+XB`m{}D|CwN?{B!@=1Xz;E}_Ir3-4kqen&xp?|#iZf+W2L{B
zk^mHP7OU}y40LBRM4_@fncN@AHVVaf`_;lxH!5_3GqcIT{#q{+xd6y^LPpHm-eD6@
z9`;ffL;e4uN%ZMgpc?Y}Itg1G&v6DB0*(Q`X=xDMT>YW3xADP^Xo3pj<Rf)|$c1et
zFE~JK@E1n?uDjKdy*Y+`s03(%I<?MVb=q(iHe?hMp3m4a-lH5lL02CjY`#7rrLE>l
zm%uB*+l?CTG!kgA`&c?DJH%l|7;acL9C3pV$B4?0v?LVG9<T(`|2o2SByQV&d^7g?
zX@Svq4cSv*JETZ*3bq0Z$q2yx)K}lc30|_$v=3bMcw{-`FkFL^i7+n^QmiP$^oJP?
ztTB=gz4^Phdj&JZ+h;hH6Q+9^C3untk@q{`S(9c+d>xTBeJe{DKx%6g#seicMFL+b
z;?cO&%@V!sX4*Tpk>ge4Ne+!cobJZIxb?ev>+%?=4$(FKNuB(o?SOw1K^nkC?7vg+
zv{yUHuZk@ln|EsuIsxdDt8Jc+1q|m$8ixtJHHW}`jg>##<6gtqlOvo#tjg?-8(S@A
zmW#n`t)PfQm!pGPm?;qZ7#P+<9BWI<F4!-$czaMkav#99I&r@=iF>f_hXBcCBenjX
z8c1(R+O=3rI)E7`od#Ngg0(s3X}>8Hz3X7LW(hV*+*-&dWf1^vdi4;;RVlkSH4k)T
zR9EGH-&N`@I?r>wEbH4-_fq5U%L@Vv{6KjGIgrctZJOJc(!-94kx&D8q3hPGcm5B~
z@v4o_4ze6uxkX!_uVcIwkEyKT-+OJ`fTqTQTknpQ$YWt6U(mlOHCxXo3bmso_f@QK
zZ`c(~ZZnz`Vq;J!W{u9g{MEPxW5foGmG2SQ9;B@F#V|;CfC>713Bvn+1mk0jjI7nj
zU${0Kpg6wN$q3RY3uho}5zhW9#x14Z=B5+src9=|jLue-c68!KX1|wBez5|$ooa(Q
zdI#>C|0Nau)^cKc3=azo;&^GM83g7{-#4_@UsFm)b2xp%@P1Yj7-g0wNE-s%rQX_!
z@%!LKP!P+7d}b7*?!BY}^kV9Ae;zy(*iU_MQN;xbGD^~24u<O~`Z!wFbUrm29<5Tc
zty#lI#FYo>B4n=ZrZMa3?Q~5T^t<fbLt^QGgA6J12MlMf0{lGq?PTKcn5hQFFjt#|
zFuT5EE>{{A;?OUmk|1!1O@l8_awm_OvKs8QpwaE7bkET(UkP~2i>_r|oM=`+ZPZ}M
z>3SzwYx!+rMvCFFKuzvI{kLhkaYtdGXSr9ynCMzR@N22hL`l+YRxV6B%vh$Q)h9m6
z6bfhi8|;(U5Nnh1f$x0mgkxkL+7a6g1W0jD6LIQE`CFJ3l7yv-VKr0_CT&z~qKBxr
zZKVZ8-lUg=CW|KBgHTiMXLBo$M~&#BaP%@8T3t~+;RU7R@AF}vf-Pq{G9QQzy908n
zqMhQ_tqs3rrqSR?ttD+8ecz|Y+Zr6UwlCdBfoCk7aXY3)*FS;<U7`n3;Z`eR4HGJN
ztk72%=~=_KFSh#ms+jelc7$yr<8$NkwtUUfaGg2BUoQaY`!p3*cmKn1th{PgCgjpw
zaW<%}>}#OGP4V0tPJDt0nabh2O&0jv-BZ)h*-oOr0wL%*Y0?+>QvO3nycRY9jTiGL
z-*mT-1E^1hK`cF?=)&Rq5K&v;rItqxs|N7!VQ%h=UdOrdck3+J%3dzuhl5zRzhMa{
z4t|Z+v{4ghKVJ0pig>GJ#;w_HXtao_y|0$xKNc!UNxO@RI6Hhu8^)6B5KEmf{1{X*
zLe*42QG*}Fzivn(GICn`H|ccXTp{A_*R@(s^R3V4!>R6R$6hf`dD<?X`;DR_cmECG
zv8NSxxpa`nV1kdB#`X)TmHrSzYYZ0oaST%vTT#ZBY5{cN6x6+I{!d{Ne(<}yL!vBr
zbyEFNwJtsOQ_9k(C60t?qPq%E(|deR6Ka;qzc_fhxz^A~o~&^72fI~@K407ds~!8>
zIK(4o0Zliqqap@2^^?|X@^^A;A%`I<$uzzT#uG5*Z)=0C;H=ZfQ#R3SNbGBTMM8fs
zP$kGw<?V_W_?_zgDG5fyZ&q3}=<t@8_tuiHj#{huaqc!pm`NA>N(pfnh9d!N>hB9I
z1K~QfHxLjkh71;kM(u5|Y02v=oV&fh6O!`7SDNO3XmO~UEO;H@{OTjahP&7g=yH2m
z1ZsFwzbj+N!nLuQ^a{g@;`$ReA;zK_hsVlWXF)>*-|+m}legKc3Z>IgOz`)d<8{1n
zb;1-Vf@e7)%mCW^^k8})Gp7}HbQW4i(7~+bSJ9E}16j|ZC)HMHCf8GFS**s?{1+?V
z1JM!qFj!)Mj?{e{qjm1Rs<^1IrEs58flE<GFao+J93kVa#_4C}4;Dg1w2b$se81=>
z$r^WLBB{WEf^N}ZeDIE?d9~wl!RA1+tvYe!zgca$rU|9OM3+Pt<kT=bPG~jbKWB+9
z=5Uc!bS*9pfBAzCWCohb0QxoFviynqyAh_NxYb2<>y$s$h9g#m3QT}k8QTF%_ESbN
z;8b15wu>fHV;7fbX~p9QmQZ8BiN40=cmq2_sQy{~WE-&08E-UNJ|6b@9VaH57`9O}
zzcXGfJc%68&w4&U^XUVbIW(3Tm{UknTrugUey>l|0lQ%2optFOgJb0_<zp$uYV<=I
zdferzR@nc7#4A2&$;_?9TY`jY^w!3$Cs(l%fs70qOv<ttq;NnCq|&phfl=n7CD7-k
zyNqOV<}0{Ksk?cAll#*A6@BKx?UC$K<_<AE?#nPBlho`yQ0;#&6Mw2MQhq4Z!?yl^
zHTl<1QfRXScELZDN~8;PZrFsr$yP6wD>J6oxdL75JAgkHfeRmz{UmE5c9CwzBAZ!C
zlp<EbaA1B66*hkh4+<K<S}1<2s?$(V!q|`<Csx!xO2uBgMGM5}S{8bfFq+b>Ix&gh
ztVr-24|>UZ#&$`$+8cICvTr85@k+<y$J$;mw%kpA9f|5^CV0r@ltRU&o;z)IwB#eZ
zvf1yk|1b;`q{6=xm?YoiRcT{Jf@tCb*&;wL%j;&<8;4icdRS~7j)#F~!Z>hN@4{u{
zU!it<{37;<?Ub3^JuMeq{=x+@lF|&Lw`;zV2s$f9hW|fb#=(FFwokDoyPk+OG8~^j
zUrA>oUmAS(j5k?Mdj6*Y%yJzNrmZs)9uB^OjaH>T_v-uR0SqR(tCLKq_bvBo;9hhY
zsvu**2a~LL)|r8GSez~1a31K0R075miFtMC(@e;ns_;XFy@AZ_YMS_6ue1Qe@TOnD
zMyrE)(uNKc_YrKFv`hT);8Dfo$&)lk*h8wO4vtTQr4JFmkM7fDy;}Yi2fz`K?og2N
z+_&9K4S9dgR&%?Y^Xwn%#hEow5RzY%yi%xX+{Etb;Z1_;0uxwgmrsI<EC}Q!I%I8j
zv>&onN=+obAy-5HTT2Q#7G8BD;)0GlHPz;6_`O^DBrVI5R=Q^@i3Ce&qq8|cBaX2z
zW?v|%*EM<RmrjHO>7nV$J=>DLv=x0s`H6@{n(|C0>nV>CWd{MSwhC0J8ef`co|psg
z1`>mg+LIgq_O6QTjGEQkqIWx3*^_D)Q*w?<r1N@prteP^0O8>fB*?`lRvsOpA;_7=
zIdwlp^#m$yO6FerYh1n|v9PJAV_gL+?-R)4&^bE(0onu(KV+6CSkk-cODb_V@(ss>
zpV$;mz=nLjGj?R8uLsr<H{%9ljSuwb_;UD-8v~ZEac2#1KW#Z&5gV`}1_GP33dUe2
zKV6HaL|%3PK^w~huWt5(!It!nK=rw`*H7L8=}TR>b{v6ZbgG@MjiM?MW0m3Gap&t@
z)GM$iB~}z(WNp7Xo5gAf4W(Xz&MX%3f=j8Q&a(i0Rj0$v|4Bon%$1y6y_qo~L2T*9
z6CWum0;XaC`!Fg4drW}4>lkUaAv|I(QY=c(Vrjm)P3NI!X~#u5km^2k$BbI3IwN2(
zU4+mMguRQn4>hQOf(dY~c6a<giP3DoO2*8f0lrgPL?;mb8k?@kopGu;y<5;x_x+no
zfynzJX-<1~xVo`O9!ne2pccPK6QqE^68zJN@g}z}ER=9RNJ7wt>0-se)+L#0lu>8F
zPwlM^1Q-;a8(F*y00!s)`uhm0wd>-Ez}+pQa~X|U8vF5K6G`MR51|XN<RIUk5|yyQ
zXOdLFy-f+8!qQi@-3|(=I4n(s$W!|IH+oNf@C|VIzhtnD%+P<7jNFJPo%S+H$t2ha
z5-8z@fL@|{KIAslMALQgR#y0cjj0I+>p|DfyP`XLYd!T?<lJOaW$+ELnn+Bb;b^wp
zCkYmLm^^x5YcsC_B>+1cp#v$|6i^d?iBF(wFmv7l5mESMKxCi2enQAO;4opFe*Hd5
z+Lk{xnV_bOqiy^87C&*#M^3{^ITr^@KMv<))R!BJwCjRuN4hI&x;R?CZI<ujj*>`K
zSU}GSLv$?hsxp5abPSq8g$IEoh{8|R0zuC!Dk%Sa`z^>XdZW#6_uWoB1qK0lTtl`~
zK43RLYc87CVzS8>hw}np?JpEBgeSD*?DVuyfCXXws_)ZH`9^?#561#sULxV-6*PT!
zYpL9`wM4}KB5Uk5ymPn}Q%(#tIF9Mg+$ZdzPN-E<nTe8H#O?#FtbAt0v<6dq2$!S&
zB0nQDAfbJ!Qol~(+kU;&xS-?5q5EE@UEb1jhQ{GVu|ahQFxykM7+bq#plj8cS%WQi
z79!;h$lln~i;FTtGXphY(M7Ke9YwgLrYVHYvQ^SSHd3JK`m^>m1Y^*?(~D5TOE`@2
zI6{t-<pPlLdELxRr3@PN7lWX}Aqy0uULq<uGH;B%DgpS6)jYreHu+pZFPk*_lcUlz
zz^<>z?z;Z~1p;Xic}602akqRF+a5BzVT}X9I{zJ$^HmDfXNvsCo)O2^E@826&`Ys6
z6NSOPOY)5T;*|LDu8=pZ15#(w5}y<dD)OIU54#dxk!Muu@N_t7aTR%Qy#1Nj{{8=S
zzi4{DVMvqBgl6D}m$JC?o&t}0T=A7sV=aoV7}z+Fo~)o8(@4mCQUoT?>utM}f?{8V
zHqVbFY$v*6{BlV(7wEJNchrC+cDvkX4ZW^s*HC~0cgHo03a=iCXB7HFdU(BEc2AOt
z8eCyov8?Y$qBwJxQkc@N>S^|dFC&f~qlYP;<M<IwP@&Eo{yO}e@9wbk{ux*lZ<kF@
zDI(hp+R9a00IcFA2xI%I$D~)%lg4ex>1xIa#FH&<%R6z8>y(UKlBI7cl4B5#yT!}x
zB;eIF0Ep|^1uKr6J(|__ZxF+8j<HW-l9!d0VGbLjsN#b1p23!}!PD2i(#;E%H<>??
zOu0BGbBEQPn_i{V1mz?#l>L#h169@P@=E0v7)w(HVlW3OW2-|pRFqR_n;xzru#iwB
zVS&kaOQt*Bsv*xKXL<O6<7HnAQl%kqx|vAR=TUSKQE&01m0rj-fz4?crT$KelM7iQ
zD@??Z<`yk7Blf4)`G3;pphz!usVW4s(m#FqyP*YRwWsWBUXZVYmNFSP;PZb=Pq{Nn
zY%RHU;%M&x7r(kE;30NF41cNf3|qh(-^W~$cshrbG<U3a!t+096MDsm!T^TWo<Qz*
z<WVORM6A5`GJ{En!#Pi3rhl?`8_A+=f(aOfQAUN-#H#BP^r0UKns9j(_<5@FW73B?
zLRYuOKNbwli~m`Dw%Vv7vi#X#;-7RTi@OvA1^#KKJ@zr)fd6(vN&7%JMLA>^eM2Xr
zG#yTm;YEAJq;iwLfrNl?HZsV=Lzx#u;tJxbjOkGfG=~ZS8H?U?Qc5Z;o*>sRpJThh
zn&YIy*%1?W_rMaq<_H$eFbx9v>UN-YI^EG8mWLkYR6mq{+aFZFEh2BU(;LUr6yGTl
z%@!LoIf<ZQq3%mWRRSmyazA8AUIY>efgTcM-a$NnFzw2i8}6;>F25A1p_d6%wg95R
zw)SO~f*z$xlWSKkXn#J5LGJB5%Y<{NRM7@8rPEst-og7Ebtb5!E8cK;f$@)yXXi%f
zxtiKzC!pOVTKnSgji6uYByYG#R2lqkG-Yz>;daCk#y>ang(Af2H71}bmU_EwJyNRf
zel>0lO%ht+p1d~QO%1fA%mYib3FLaCKNdRJ0t-AjJw*M$#S@ARE(&HsgtxVN>uiR6
zg%qi)XGRSad$r$eX-4|;XQh&9;S2<9iOOF|_Z&_aTS0;6Id~wKH=!#h^Gt4tlv-Y~
z1ST;G4TN)MMt<4<Knk4#N2;0}uV`m9c}}V{k*F0UMk;%GezdW__I^~$t3Gw9?>qMf
zq7)&N0BDmNQb870_{L<R234FdTE<Y28*+Ga;Ps{z;B2DDgOciQr9zf+6U38c^5~md
z)oB)~`QRJ+Ikseu2#>Z|RK0-`@D)!1M<x(4Li2p(Z@oQ(I70O;IEJhQ-9BRobB$1V
zcgcpqJ_7*P3!dfNe^TK$@7T*--c;rvEbP7Q$B;<7cbvy`fkD!35&NzyKYmbTj_C#-
zxe}|)0CGJ$XRCokFPRm5<)gv*f7<Gep%bC;-%=CM#|(5OG%d7MPAW7r*5|bb`ekz9
zbx-rpkQ^%|qy%$lb{rbqW{;TKXUrY*)>E&1iOjJi444?8FZ9Ly@;Laj8Yzd2ebhM4
z?1P>1*hCPT*ENbb*l`y&i><=1sVriu$m^p*`eRrgqePxUa5m%yfCbU%37pIDr}2qD
zAR*scR=tT31`1x$FugDiV*PmT6PYz_HG*(+i2)KTLGFa^oCLan6akwlv_zp&H1$8p
z^n=V~h*ap_9-1@HcEkX%hs<d9^<wL679D9D<y20prnyGJXS~Knisw*1-%*lEuKP2l
zkR{mYpeVwdNAgysa)#b^A>rq#2k;2A_#L_m*QNw)iCajB{V7S1Ru{rBT`Q1r48Yu_
z^%e}g*=#~Kl)t$*Ojya7eoE{O4vNfdkJavN^wl_Brck$!j+_^jAbT2}v4T9KsCsFw
z+AJR63h3{aSKWMTzNB-x@C|r<xt&3L_95?%-D$-8Lh%p*!@5L0H}Ud;Wb2_Hm7-nu
zHjRrq_U4>=k&w%WF+lWlV~aaoESHG1FC09pfc`ZdrGhSEpt@gqHqbG$;)g}JC1Loj
zbDo|d>n~qc)u#w`Mb2|M6SOdYd4jWARjkN9`U5nlq*hB#c<q$p_}Z9;WkByL-BmsF
zB?OJj%k-wxy7-B&NP{sJ_`@cFBej_6h}13@Yx5Ky`d-+Wd-20u&AaNV5)($tQ+g^k
zEc4CE>CwB$l$>ZN-9D-<E5L%${p%r1Y|NL-2wccjmk`LXc8)7CPbDQfuAa~k2`A2V
zW<m}=7OjEDFJy$bH&Xab@bR2m;8~g1>xo)$7jIpZ1~+Y4`vCF19old7TT<wBL{_^t
z?f2Kfm`nh#gCv%JkvgYvOgx1b$3=}5r_!BwSf=e~WC@!sS*5Np>o<Zhk&lNKP&;;c
z)dIAO1k1D4KN^0pI?-I9onzi4Fa!V<@%1dali0d3Td^CS&@BQDP&&!8L#@PL9Kgu+
z-#BNg)#~vm<Dhc@I{Z{U>0IsStay`!&V(+jYB4E3;Lxet)48$xx@&`-)+XyGQ&5yE
z@*6g?(whIbW4fW<kv97+<6^3$bok5;IOD!bC!djZgV1`my03-}Y?8HW?G=kxok(!(
zE<Lc9+x6nu>v!}jyZGHXy`dN*-V*lDpp(n$8qalS$qfKwaIBNc+3lxgI@n=3X3zVt
zF^E3m*ysS~{HtQbg=25FuE-_2679a%<}uT83hJR$eMRK{Xt#)T<OjSBHYVEj+-Czd
zqWL|YRCrkK`kp14Pz14@O7+CEzF4c05sJ>4TR=#|_Ix#1iIxX^C^l9JO^s-h>^Ixk
zdqCGgaO_Refr#tj7+*|~s6wA4@>m|piGGZ1y8$j1p=z7EkP@}zSG!BQ9hsz|<3kfE
zSXtAt1LixFPHv#qxxDQ}id<XfOMxzs*vwkKkg9S_B73OhvRKdpmI*ITimdBEclc3u
z1V1`^F`-U?IF&QFq4pV<Z~;~9O`n<6@^lY{(!Fp2u{rdjsd6!zW#H#EO~-*+SFjrc
z%gV-`JPmRQxVQngufxrLKJ2?YQi!fbr%KE64gofg<w>DWh$;mgBmED=NM<3U7M}{N
z{j?^OJT^>}9f={PoQov7=|l`gvRYCTh9dd%>0T=j68FexF$mSY#@x3UMNwv$mRShZ
z5KCtqViD3c3RA+~_$FT3ma=CY9;moC@^pOL$J|-k?^e$<T1`NCpf_iRTcZ+W;tPfJ
zw~K9Jciga<vMO*l8sj4ICJep?6`i5U=(Ly5*S%8f1Pe1hd}VZ2(H3_}M8VgQAmu@O
zXR0ky*E$A791o$EH!`NJ{u2auL%hsbwN_)wTQcK*Buwprmd~$Dc>9_xANo8<tO)}F
z995dm#(>bnUpeOKu`*~3@oQ9GhP?KgkFQs~T4(65!>hHFI2esjAIfXUOQSA_MSs;S
z<UP`(eQ6L<0NbOhPVJ>L7&czh^+7ahsf+b`bZeVbyDwAjt+07JDK#HJ3%y!=?(JI2
z&kV_TqmN|UKH{+h0BIMbHL?@N1~kq*r|x)<NH%8W7C5y-V%ExjrdNx!*DaTdat-^x
zV6VP`OI_U}b|Adxki0d6ZmqLb`d5B`VHW|R=`QMm3p~%VeQ8?i<bXk^2TUTIm@z&g
z&-#_!A-aTlna(Dh6G9+i30|gQSgeJo;XuHqrW;+j-&dt&=mTV<Hb$@9PA@H#F-1&l
z>0YZ3QWhXj`Ha<wzsIBq`q)wA1*uBqm<GzKw#QXT=r(N%jW$Dt>;ELhunQ_5CWQRB
zg_g11pm+(P_wo&Q_X%tU2P%>Ml<sX_#6vSzWL}rru{A=4mhwSy9o_+0NSql^W5e-9
zA+&s!qDJg33GETLnOpoUQ6CxIav&-Ndzsxy>a~=j2KffyL7~;8yn^1U8360tk@tOW
z&35C!OY82C2Jk4HjIYRIA3bZuGHEx)P|+0)#P_ZF+mOExUMxa^IR#@$JX{cI!z&CE
z85t$h(%Xc_A;sv-UPEq%b?pKSV|Xqd2p!mBo?7n-)x%6t&O@E?oz*F_0+_sRxT83h
zxmyE3Dun{#a=H?~7v&DarY-y#^>TdmfMZ4gxF&^$sgoYho?;9JoV7}3V~w{!P8JBd
z%)tMeLYU*+^LwB6>y_+?30{fdqhs&1tQNjbIk&D2)1+&2^$+C0i$)h;MJHQ>&L`-r
z%BWbSniQw4rA3hv@?DE!m3btKzLyBeym-Lb!sXL<m`5jZ|4Oaztiy#bUAX}y=JClo
zw@20|*rgd{Gc6ox1qTRrq=Ud1(YSh$QU0P0fMOO#Xr+T*dw7c1Fj$Ka`9?%<-5<U3
z*ivt+DH$Y8Wsz_w$XS(}JTe?vi-gvo)h2G5kYO@1{xoQPYNJh-!cKvo1$VU(To%f>
zjF<NE_eoLhBZ*r)e|Z7-3dQ)vw`#nna0g1=)!V{uwWyVXsB#weU-;fk{+@89{oD0B
zxy+0WGOc$rZ8l(VqB|~UnE)ZDO6pGNzpy5v<4ln6NRAg(q3@~zp+g1R_OOYVQ@z)J
zho1BgKkJ9M_1xjV&B<o=b9ggdoR0E(c)2~YlNp|b+123`2ow<G*SmZaIyn>PMRF42
zM*bXyM)zjrj7(Hk_4YkI%n<1PjX4{3_hTHFQ%TZZc&TI$U!mrq9#H^wspxab5_a|%
zw50*}2pSefcK&2+*(50xM%dn7rk01MTIX?v06##$zaXi+`*gGEAs)G2ROoJ?p+z&5
z95%)+8GtI7bwQWI@U_FU4*fET#5ME&WbM%;B{$R>5DwBw0O^+n4&44$6D(x%@#2Bb
z`R2`p(TMmw+!g9>%<%LqK~u(G!>`+yFY^12nrTuDSu89ZOxK(8bg$i$u5`g;ex-2Q
z@z{5_OE{bIIIesvmpOg*1^*sgd9;!=)38gSKl-;gdd5!TAP*+Q=^t73Leg#@theLm
zQBS<`3TPDt(!j3gUr(uS4qP%_)D$}sc58M|2D#hxYDl}BDxLmryDJDUj^EbMy%UP)
z5j#@p2DAJr6#6zmpFy*Nt~8aPzgPSm=d#mhGtLQSm{Tw1ewR%<G#ju4U$hYaUm>FP
zN2j9qqGAjyF8TE1_yo3(AD`qbob*=hFARt?3s2`#eK82nD5*MXr^3|oR?WoTFneph
z(<#!RhMrw4uAu#iyQ-uk6bg!vMloraz!yMCW6x~E2C24_Q+5X%;U%T@#6?=U(u&`b
zfijCCbbtDaQx?YJlvk(QUFbT$>8?Gn;x?EkIGK&Y!2iRMUeFinWZ0NJf=eC_GpBx4
zVQ0Q3FG-84Dtji;1tb)gi%)JOr#<f{zDh;tJtu&^Ox<i1Gl+lfyvx9^%cAq}d*zt*
zTAP6-D66y?l?KW#UP>Y9sNQR5YC@uuDq$L{EgzxbwtjXBq2FC~z@p92D&;JM;8t4X
z1VeJCP-|>_3%OCxaLf7l;Tj`ExW@20e{Q!Va=wQ)|Iba;7H=g=XwaG^zke$0K9#}r
zTq36`0{WSPK2#i`$%d_&BDrpAWc7cKGP2&fZB9HOTeF*5$?;}d=+>71wzN31m~SQ&
z96!}dJjD<l7?ewHQ=naa;J0br$u*O7+1=6!mQ2o$0=WW9jMN9{r4Q6A9}cQS?K+AZ
z%`PR}7`c_V*ax9m)*=bDsEvDp2L|6XFJvYu1UZ6x^td4J0>h{dEP5ACF~;KPYvaY5
zMNf5g$v;Lt8)-%c>;fkko%Un9u)!F=+$oJ~l-sT`N+ZS-Lrn)p8}@tG5B}gEMbS~f
z;i1|b+0ZFo54P3am0-d&>tF`87Rse_<*K)?c3bA7^T?NwlVNE=^yZctYZ!H{8Zfc>
zodZnZL%sEWC>vXYwSoMU<fa_u`l?Bc>Yt<f*_4~QmM0V6sDPnZg}BEUQ)BFjcYmjQ
zbZyLg@ez9uqY~HLF^>C_*tIDa7gr4c<##Sh!%2E~S(<GDzPr1qwqOqi{Qlb*Rp5rY
zW*kN@CN9j_yBWK<E5&%uq%nEOod`ghABPlioC$cf&y#u(xUbFbs}r$5l6&+agFNNa
zfRuV<Us{2Hy>Uwaxzllf3>zS`hN^cxR@HZiSd71>5A&DW<<X;l;Qgb`hU<Y(`W?9P
z77L7BOkR@rq*$F|*Vn002l`pn$0Fjhg%SN-*0%>1N(tAH#hnc8zjF#{YHnPPZ!7Lk
zFS)of3kRqrNsX-4+W5H`V6Z9CgGDf4^nJy#+f!2EK3<x^Rh%svWp*M&_Etp23aP@!
zy;wUDY9JoP^qL`;mfI@JX?vh32_$T4D)d>?9kFYphR9D5U9Oikaen3R1heO5pG*0j
zuV$g)+Rpcf3NmUm@yL9y|JY|VWf-~&;kngk9uXp~&h7hz-JuP`xlX0&+;|lm?6;jT
z_cHiCEA9I@CQ2J>=TTaC9FQ3n2+>cJs4Fmp9TncK17L%<bO-{l<w84)HoQBhO7SJ}
zTc>56SKq(DfauqP@CPCT?|o*rLqdDMv~#O{skgKv^D7;GT%O6>H<BbuoAI5_NK-ah
zKVE|JH@m%caDeae56tpIC(sA=Q4W<5*v1eb|1xXKivc^D-e!y2y}g#8S5b;*AaZ%6
z+Y3FB7b&<2FzsM;cOJ9N@8UfXWXswza}(RrG{CG0UAo$zWc)^Q?&}IH4$P0`O!Ybx
zIUh*vTW50s<)Z!2yga%kb9L3&-?scXypc*&xp-v_+(k1K&Q6k#%44f-;7*|j#Ra~L
zL7Y;A?G4&iiVRA~e+D;0tY5D_pF<sQ%e9)_t>aC<oi|D1{WidqjD4Cr9euKDc0O7v
zP<2zd@OOybWiTYhLSXS3`xW(1CLaUvBIZ|Z%M4?lVeJo&xW8Xe`VF~VA30y}>~VDa
z`u=3Ke|YgZaShz0O1%1c4M<^dk^#Y6NrdjGPDt)rp)(UOa$VIJqF*0J3aG18w_Wk0
zDvAJK!=EnWB}VGO68lu5bVp|;uc_ATIJmrwim~x8z6SpCbYRP@;-VMU*lu@2QG(Z9
zbg+NC8)nh#Gwx!ad=(5uEG^I%NZYx5er@uYZ@z%My#+$jD**~?jjq&Fg5~LBMj#OW
zRP)amFyA;A^i4e%Oe}jQ=kT{`Hc!Ofz{bCZZV+Ydcz$?INW8C_T7nK157kYmA@n9W
z?f|VFXmqQ~GA*eqBAUPq3!&v`B#{si6Tgq#O~$WGc0rw=2l70r)3qp{&S0z6y8*dT
zKR?(_$j1?Q<`IdTVj27FSP*N*+o2*c8QYd!{Necw*+C=d>@CvoRLfPIyTf8RLQ@cJ
z8#(a=E7ND9{0&B-g`(Wwr#Sn%1zPaLneJ(@$3<+jNs3c?Or|^^mO4Rh{h31BQ{{@M
z{9_b3%A3<T`g?TCy&WH8f|0syhq%7>cAmvOJ3E@~mHvSMTC^Qq5^JDVZOK~zq8gDm
zwlZAbAWa&n7avw&O`vbKo2H$&GG>XOk$wN1$7GTzz+!?bD&>9|JJ_aH5pU3^m*{d1
z;@vYc@g8ZpIdNUjq}(3E_8M`E0b@M?+=6;=V4U1S%jKMlx8pG!yymT&Kk9!kevgs#
zw+tn_M=44t@7|o!cR5+f{dz8IE)M%sL%I3xPU|4sh2e8Qwas^W%3Zjzjn-dSKlj8_
z2q_-%8}i6CDHix%pgU4q5}U+carur2hU;+B8z`57IyU9gyYx=o(8QvAAoh#wOR&u0
zZ<U_8#8+Q}V*ObVts+yUzgH@G-+V)up0l=0b&r@|#ec!?G^lML`HM^yJ1yiGxd{dZ
zgwox24=rP444ggRcw-eS5CxemkW(qId%uX=$p{s`SQYx-CgBt*&S%5?at-*wLY#`q
zB@1^I6O>wBKe}rPk1tdGHzdr4GGX!J3aodPmLqi7J8&8O7VOR8J~RKsZsn8(Bi-Z6
z9VCfHraZY9#C+lhcIF$PQWCrOM`eN*du4q{Fvp9Kr+#4g;lB9uPe)w4*HG{{9?(j+
zyX|3as|eE8LF$K-b*?<fSAOEJa%QZ2hS=I1FT87h(`5Goco0sut*GU!Ch>EOB0|gp
z)|Da9VsV>%gbVXS7S^MW?ztVWz=_F9=*ZPrZW%MI5w&2oh<+}5(6b!i0n0Yw9BU&0
z4=VrFDVH4r%H1h{Q-mEY(6_{Ju7t8t`C>?F6~#u*V9j7#Y6`iedi(l<r9;_{$^#f=
zL}#4aFwzY`22OJbIL@y2R?S$ryL$t@ir^|N4*qv+tqvs$E{0qZoKmv>$c)EoZpP(E
zz4lM4M2ljUxnVZ<#AM9dWqfT>V(x$yy1xE46#@Xvg_TR-$8EMh+t?$Qh)HPxxHOyl
zXOHEp88HUH?$qi>0i^ov>T9whz9K_i{*rw<M$>EuuJre?E^3fI0(f}T2`fEV4<MW0
zPoA~F=RV{OoPD(}fEOUh4Jo)3QK{B)p?kw4Dx!$xg?ZH&+|?0-ZOPp6XD3WNHLx2A
z$c&W&#la1nsg^5AxPp2t3XRo0Ra8fBEV$2*P$>~HlbcUgjU32_Y>MmM73yt*Hphw3
zGX<~M!i_?3-w6?~B%Qu4+t%Q*d+MkMB#p2cJ`kzFKLotDJ-hp0QR=rdFPqTQyEDG6
z6eP$vBM-&plf$cJot*RXpiI9PZm~PxO#QAOZPJIcQkF!)qCmpDX6=D`6)#%N4@f$S
z2sF^H3juNiETK+&sM5<L=?z}EzyMRsRh`+^NAr;5QVcjr8)X|U99J5cJ3y|EGI^<7
z{BHVq(_Htvd6o-ZAD4uGmdg*acL#EpoZ9wvKT^_y@uXNI+-7`mgN1j8EuC&aMhd83
zE$Vv5<L9)yvwR_~I3g{}g?2k&xn@n;OL`s&ANlg%RWm9QkHLGngJBHvLy(@VlEe-3
zywvgn2oG8T^|LoCubwH&5KCEP;GikpF)HHO>$0sBK>fh3#ZUa*W_eo?V@s%FD45nD
zykz01K92e>)>#>_>J}#h+d~H$S)g<tR#BwxCBF=Xgi`+#=z4WJz@DA`@mbo%@S~Nt
zo!aw&t)@&<QcwpD%t9!dvPP2`*NqHLsTSt-4lmoqT%XNrK+TIS`~To!6$kHqN2n@;
z6uJ7a8D_@|WLNNHo~_m<Q?@6vlr202`S_O|NMI0WBD^;kD3`Ge)-{0qVlxz<W@X?}
z%jhvL@(F0}r-y-0CFb?!yHs>N7Gw*C)w6$8qBtda@tda(Y3h~_K%6;bUVT`gAarOK
zwED*-f-1dH7IQq^%MmEZR+(J%!jjk2xeLS}3l<{M<_#s;*46F*uuPWFJ5S&HrNzWC
zvB{Q5c&+%yuUg|et*+*b^xZRzOdT^_ji3m~V(Rm+@>&|MN%P9lWBC-CFcc!!o+?7#
zWU7t`P)KMmd02|G9tbyrjrM=mINIH3Cf(q~t1Js18w!D?3E%lAI0|HBs5>!M8d4BQ
z<HCh^PhfxggIP4*n(e%{+jJ3qDi~BPbj*RL0hY%;G1z`x-yp|mQ{)ws_KEc8|0uF+
zfYKD0TQ(>B$1zCtZIs!3k~qA@5`H?d^zAHEo7?ax8724Ha1_sD;ZiC!;Nd%P=(1Xt
zDL6j&zvK(mj!0%FrKgO8y0sn(Nb>HvO=K8|kJ5*1>L|h$YO2G?h@&8Nic!+5q0@Rj
z>(h0${k)MZBso!HTtJZdhcbW>UMzPm^Zu0PVc2)Ol-RPJ9;SMaBN^xk`gtD>@Ao_e
ztyK*f&2FThQ)b+2bHpJhxGkecTASdOS@pvw8QTY+FAVpkB;JDbZ%~mZ)qA;mX2F-V
zQr$o57yw)GvKD*4`j!M2?2g2ndJV243RZz2FJ-lNz#0c#0o%(??<)Qgi+)uNPpJ!&
zFO+#5*T2@~zc9LK-2lhVEUtZ^wkHtw6T+my+E%v`vs*y^VBN5SsLVP1E^k)5ac+OP
z{r!nNlSUxm37Ua|wx=w~t!G_FdO0lqnJ63zk1CscTKTg{3@F<}_xfb5FnG0829wmo
z3{&7F0&)QZm+v%w*BT}Tp2OI<8!fGxS*^4Byl_AHH+^y`@}h?kH!(VUZ#>F@W11Sh
z`|D+8Y3@pqfIDF?X!v$#d)++Hfn?+=z;mC&{MiP!>X3uG7&TyoW6%rq4!oT|uQ!7F
zYR=E3+XS883@|mp1HHi>@Kwp6Nf>O{6Me^L@61)JIjBd)aJ{+l9Dw_=+`|3Brmg#v
zR6A?Ca|wiiAx(vv9lQ$qB9;5b;g!FuFYkUdS3~_Zhot7-`}>WzuYNFuMqF>OYfD(&
z9W)1`!w{pn)^6?)vGfd<5J=DD15`uCK8Ykn`!$w1Uy;G)Ntmw>d6jOr)|`*P*7xNE
zj&7d}BqS`4@MeY<ve(=A>e0!l1TYk3)LU^JY_O}7CdO2EaHzK^{?}JnCO%tf7T|E(
zQRBjAyRP!mJ4yd@wVEz{fyw4h;&4S~SVy^%%Y%%!U4^oQO{7|cR=?)~q1s2^grSRp
zf%v&?%;2+(#4Si#F<S}{w#*S#&gFcQ64Mp`G3Z0abjP+fStcduD0Tkc#Vf6>N5@a6
z6aJLWM`}!ej@z{m;A8H;T>oM_P#E*Sy5}yEs2q=WboYSqyv(%EuB9Od<#JK_zKoSJ
zT@J?TBC7I#G-;){o3}b<K@r^V!W3jKBJAA1qxl#fPXRe~bbJo$+j)uerYX}suCWYl
zELqU*Xh4TvJ1P2{tBumu;}B^+0lW)uxKFWak3QK=XoRZfr!d9GueQWxDdW5m6Ykoj
zPjIB20*Ej&y*<UvZKCHw7~O>^$}{e3CZDxn8{75a!Dm<KCmnI&&U9FH<?dLD`Mz$h
zCeZ#Wh1Of2nH8s`8j#Ju?wvD}14HI-bjc8I03To;wZPQYp0QX1X3pswP9Fu}f{m`Z
zf<4v1c57<NcE7Tslm_J%R)rsifv_^|?n+>$gPtOyL}oa>_JW9%Y;DstCakgLq4jxp
zA3=}?KJQW-E;gut!WAjnT)s#Qu<|QIz7^eF8$V*F4yP4Q=!Hde>SH8Q9j)h>(0Ohu
z5V)OllTRh{W$<^&jZ{K`&EWcH1C;;K2e?JN=~T>Om4u73&^{-y(7$Vx+`_I;hJ5Fd
z4X!>&+@}IWAWbD-IXbH^s}575247&^S<t|*r0}*|5E>DSyF&|7uuifLl(0T5s|I*g
z1=@pak-a95BGU+4lJSjIrKvMGR-AnfZ^)0=|MSTl!SD(j3AAub!h5bE|6|JvVd@EG
zM{yV|f3r;ICruy6hUO}%oxxQAU~Vk#-Hm!<<_YnSXY<?mF=}q7WIi59NJoc{hRp`2
zWN2y3G_^|;0D`9YuS;l0E@I-DhApoT@2bga_{N9xzlj0U4wr=0<U69$mO&M>TY|R>
zTlKF=+b`}|y|*2DIfDY~%&{6VBTha#@#+aw&Vt19L5jsJ>Z%V9bG(GmziiptkDqVv
zv{@$|kXwybLw>g%yT1mMzRArAi5ALHZCXug8{+?0mZR9_m*mw(#bg@!8OK`jrd%Nn
zFZTs=Gv`%+(^vQdXN!KP4Mh+Phb;(3?)fdr>VdwwjiH3^H5xuZ?ds3Y!)hMH9wi!n
z(Dy!;{`G_Ci==UYd_q^6rv+heZTu%U>I*oVZMtz#E0GyaHC)g}D?cG`tE#AP?tn7A
zt@Glkz@w_}i@74}pLilkDvC!PJ=Z+&Btx3IBs|iuLlgId&(_8Gc=(lMrxY(1UqZVr
zaJ92-?favB19fd4497@g^zBmD1zGQ=#_E9{pmYq7(#bIyl7$!=-Z9tyA#jICZj@}^
z*5m^=7O)H){nI<NVEue6le&1oby-i@#tK`Shk`MgBq5C*kE%6~Hv%cB3L^y+*7k<G
zQaJ(b;DHkMW9xfW;xx7_=(tH$r_+CpQ3q4figu9Zaj!(xn<N&ZmX5X3VijS*2GYph
z0sODfPP<{67a{rR6Xg~O0X$+suM5BH3q_?AIn=c5nwR}-Qoi!{UtzeIvfMRwPsFhV
z*Q%$-?go$xPB6qEz{VJ!M<kDSY7=O~$js{?-FaKN=4jnbPoM>|(-IbV3u~$h{8{=Z
z;V!f8nD<MhGmZq8fhoX}%O~RSFyMHiz4@SCIO<mGo#wm%kb{BfmRjQZ&9h|)cCLi@
zH#T$E2*C2nE=6<G5__u2>8$s>T)qs{V}S?I3vo~@U@5ku!cRmpW-JZ#omM|lli<p*
zspW(5EzZ#fqomfeC$6wDi>%xzaOqxvpOUH{;>>L{JM-T8%Fw0@x6<hJ%9h&^N0upN
zvjl&mRU1R@?Q{Ve{EMicim82er-p3=QP>Ka!#B5Hs#`zT*M{6&YeD2RIvbZZ7Pm~=
zr5LL?nk*?b9wZ!h6pfJUlB~P^eBALRP=3>X`7z*1Ads9_3iT}`uCuV`$=3B}8PY51
z0Cm^(2#+3+?1f~7xt=r~4tO*=|D22DY09l`(AVMyBu-~#@ZI(G!-i(a_+6)Vk@bTm
zo}erT%d5s%3k3}BJx5T6Ax48}pBp`NkDJ`B{3C66RNeZ5m%-LG<7axbuhyuG);RvC
zy^*bd*RWyzKj2ThlRUW$K%ONlHab);s}x15R9Xb;xuzWP(IjdRPxC4|U0UXxBHiMi
zk17@z@K^PUr5JMhq*{N2GxN{CldHZkVcS%$@19(uh=t>v>h<7RbLO=q#W(ysVA#~J
zhNJk@>~G3@1Z!>6$kk>&RaH)2Gj_k*MMu>O1BVAm<BG}S2h!9YEHYEn@M97ok68{x
z89%+iR4KXi)ajIwDS8@(=d~omlAw_S?~oudi`vYAU5Ay4r~9AJkKm<H#~o+%*6}(j
zwXwMCf#KQ%O!%`DAX)(8r4AV(<<-WVtlgLw?sI(>`4Pdp0QaNfo4TlHx@wnsCUqTj
zj+Y?7lB}9gNSM?Nr#c5?8?9+1f^%P8H_j-IqXl*Hl_K5-{L;plN$-hOROG*aB*h{<
z;0vp;(i7?!cy{&zxVppM-Pb@!q#l-LrdbFUba}_(dW~8mT&Ks{_NEGsyckV<GKPi#
zi4;e(sKnrDTbFVJ$x1MF8NurevDdI93Uk)*PJ+#M+aeB=WUm~Uq>4<-q#ENtLduUt
zuO4Q1r&=8^$cCn}N*+4Rz*BiD4+f$5oeKXaqIeMM;q;ixA?WjM`EQ$>&pwRGmWASd
z^smDuP59lscbGBknKq=Y)qL})UuzQ&3oaZpj*ye&m&KCaqPmmY1B$kKjyPHb60#iK
zxu&Qypjdok{)Zc}wyuV(hQD3hfH4m@j(~nlqh!q}Tv4tiAs+;-W2mT&2Hes`fS<&A
z^^NOR{xYW$?Cl4kwXjJ}3%!>e36Lqjv)B@{)s{2mRqky)5H@dgc`OZrq1?2_mt;G@
zxk3Z_cC*P^$u!)2zoC*o17s%fD&$~EGb~uvzeT?}4}D32xHklj4z__wzOS<cFpD;X
zRy>a(&wGEo_Ti|7`oSwxa(<yrx2QDWH88YN4_TPjxW=UKEUJaown7k4dZI=a3=jKn
z(C;UCVVG;n){oVGg8P@}k?d4empA>>W8~!Z=%w?l9-ejfm=O3q*pNHn!b_nGK3*(x
zX+))e8;egBba+*I=(A}RO<5yJlR~%WKyGw1Wtzu+#7TNaZhs7{+Wk)Xn%%XQv?fKl
z4yhIOr%at{{qqyMdzHyJ>3h0Ei1OU&5niGL@kGb8x&h`HsG?*T<f4H223;y2h}al^
zDv(K*gm<wkUO^lWH$Ox?J4(kyMczdIVKIF7CT-kBzY^KqgtDyzp?R4Vxw%8`z-3;1
z!TDH^btIm$YMBDHfor0(|Hn)FT2}C?+TwI6QgWkeXCP+9Zwp^LD~;zZkKKd@%|D0j
z(1q%10T4ft%5Ao{dkwokz`vteY+h$5HRNvpZQuqpx*Z>m(kbey+D`_O3whM&3*4jU
zmt0`|^yas``-t(hmxSjl9Z~Ewzc-16goCRzbXMpa5il1uQJh~IxF|qshy<k^I~U`4
zJfRvCq!A9*@zpz^4z<^c@OR1o(u3UFb9biSfUSv84{sPL70iad43|*bHRyziE;2&4
zbA!qH$DK7OTLyz}WO{3?Mg=uE*}gV8;^u}_CtAnmZ_TgtyErp}?DeA=Drb8z6H~CW
z@CfzcumR=so;W}Gt+!YP^htQAP+I#YwRfG}^P7W$*Nb{rF9t1A*r(vctj9xV0WnIj
zjy1}7hn4jaMYO0b20r-*GoQC{ONhpz9aqO6c)K5s42c3Q3H>TyzI^g0s#~@WK00JX
z+U4|7e@AjiC(Eu-4ptOiMR|aqc~q{mai2Oq21J2_&ioZ45MI+vG@<O@aK{jG$_-Im
z=m;GE^a<WDP~6)(ka3d5*foI1A=w!$r@>Q;Xk0(kR!cW)sCwQcP=gvEI_Js&Q0@T@
zzD*HX3WT_{9sHtyASvcPjo%*FyP08wq=^cc@ig(=Y;wP8m%HrDXL)A55|xWVEd0Be
zHUIevbMz{dL{{VKCthnF!;UJOpze$p#L^Q(t^4TXIT@+UID@|UU#f0H!Qd7aikD;I
z{zqtn5ChUd-A|my)J`}6f~Az&R%IQZ4(Y>`OU}$=)kS&Y=A;ozD6AB<NZ?SBO$saU
zFYzDA_*Y0?Y+9u+7M`18lUmAD^}@=raRg53?Ti8B64?S>Pbze>$vpmXnf^Et>v>+*
z2qh)tuSN7<-k|)IfZXBuXK}v|d%Rh`Dy;?wPnFg>Ne?|IF)Igj64R<ZE|}}#$GQ{{
z&}!Y?4DXnxHA(A59=4|2+e4V#A#yPhe`I^9yBtCqP=V={9(4s&-XlOtkcRu{uar$&
z!gw18%Rg4`1oV&V;g!pW{=;%K%_N}0i2^M{O>`DY*B|mxWT&|E{M8Q-v$uNYauBy}
z<G%Q6I0&Cv6(VeK^on#1BjnhaJ;%oPwEjS50D!QzxSN&$UhL(FT)%CBThwvg8t+TL
zzn=QyY>($@0@-3;vO>!Gw|EOAY@5XOF9NZ;o$UO<%_>yW>5Uc1L(FlHi=UWFQTvaN
z;?tl`Tg-;baB3PM?p%w7zwHmVc~8BPozT*A8vcc&IS{94QX~n1yFidFgpcgJ(cXFJ
zxjwA4I~zgLZ+U-!S)GVN8gUPO&G#lGd0K-2<EgA(tg3$z3i;)1XK=_$hkqpz9q8D;
zZNHz&aH#LH3JUr1sO^c~LZaitO17!;(UTdt$g1^-W_7r{RS7^z>T-aPIIvYQvmBn5
z%bn~B9)6ub4ID5em%0ohY2J+9aX*zG$}|R3uiDgE7BbdwEbB%X=X*1C{5TRI%>y>7
z)q@oH$#pseC4j(iA!}LL5*(pjx);scK(?JXU)nmr8j{A)GS{Y8@15Xv<cuLRYT?oG
z!($D$y09GpW||`dC8>o#&UT92Od3YkbKaGJxU-+m)oKk%&GxOus7eNKn50or4e)Lt
zDt#z4skxuTl&kSah}K*J=z~0@Hs9uJM~-be2Q&iFh3R!7pZX<9-DR~4CvD}0&v|Tx
z-^8S7)(<?_xX*qCUAG!TUdS;)`xEGg$K-bxP=u*bn>y<=imQBZoPJWXO)QUQ8Mq`r
zwvXV0$)gN6C58omOZjY_uGBj8T)<dvtLl|~+4t`I2Lvs7zkH`lDN_volJ-2d*VlR(
zTZ9MmiS8OCq|L<mzFZcB?Fb)poUbO{TL>F<NW-baj-Dr4?+5mbAc(0tK1M)^pem#9
zG!(*j!KFp0=%;XSCZJG(cSm}!riFo<Qxgk&ED<HPm_mTo<E><|k-T}C5g?dZGb-<q
zszqI;eDSqXVVxG=Z6P;Jiwa<pdWYug5dYE=3-%`XiHIj6LEh+VAE6Bz=FPsAB)#6|
zX-^z(Jhko%QW=x2O7u!1wox#N+ab<5i^=Zm35;<f8$J2^gD@~i31-{9yJn1IV;pPu
zz1}4)@0(v*=788tx_#yKVmQMejytz;s=}bQ<G8FbJb^g{5FvapZWTwcKiu7Mh0<>4
zZ7-<*i|W+$Fpw+UIW<jb!&B{+cE~<|*9L+&uDD#ytThg*;+RvU+VCNKAtQ_*c4trb
z*5O|RCJHJ4!5s+wm_TE)IH`|U`pvGx3-~u9+7<fga0qVX{9P8fxTFx^Dpa^`duC%%
zVyPd=B<o8p(~mw>oVomWmNci~L0KVZ47<Vqbr&H&qM9q{TkXU0xNH3?hXQom@>Spd
zyFm)zUxF3tA8mXmM`hMZA<q%_7PHvIvjklllR()-9>|BEYK%q#0j!gG*R3xI(>tJs
zBd(jAq4;vz&Q^%9N~A$vFG#zU(5Bak5y5_<ZG<dmoL;ZE;FUCTg=g2jQeIBo78?Me
z;}=5WA2R!n{J)GTF)KGG%OIF%xb6QJGh@2!g8ViQtH|K72F1F!I9VZWAJ3~>m#l1-
zOBDRgdj19J?4fXiH&}(7d~eo3%WA0(jm_hl>FDgTXMTq*%cMd&C2C87v!e=4|F8eL
zDvt<c6HH6$uAOZ3d&Tngos_ZcotF>nPvP-uJ9;Cj)ROJnf911yq`6DhVo=>Z6>_+r
zvbY5%s_2R(FYvt^tFQNlZ)w=}Jy;C{Y*N?Sq}HSfZvChUtcntf?HmWL8S<SB<fxme
z#>U$)Z|3>brXcnAa;dJrwM!P|J@$EzXFMRvr<x#T2h5126JVXYyF%a+?PDbkrgqJd
zuCI!<;u(!nPXhbqlbg;3F_l)<w~QU%uX%uyeI?Vb<!W=~3#S?%JYDRYzMCGHsi1cj
zU217LpN-M{9_dYk$@J#_gN0`!5c9_ccJBu!pAW-wj*Q#aaOh{_J-bEwQRi~X;RJY0
zvsV3!%t6*qq7kj33tvqoq5G~e$!~~|i^3(w8&XKr>PPdi60lj*Wst3CG9Nj96;fXd
z%-#HuJi33P`SEh0rdUI9S}`xGXWuI?S!S$?rY2UZ!}Oc|EB^X>ojk5t#1U3dH-$D2
z`(&EMZbL4pGT!u<vSHVpFSPW*flRr(GdQ*~;G<SjiKR5zI|0#fNH4nehR5{Eu#hMt
ztw<ZgTq9E8TY(NVq=S^jzH8N@fGdxt{*)qR=+ph0KJK9DaK_xi-snwh1G6^k@G5jK
zC1RW^y1v$X{I<<PH+_P^(Ci$)D2%_UjTNjSy42&}H_^a<TVzyv7a6o_uor_A<CAuf
zXL{`dXBbrripQ?)jMBTp+bgePSa|Y}qqT4?K#I&Y`+o6064{;I|8Mw0+Taj;TDR{#
zdznb#Wu31RXV7?Mz-;@k%dashG&TD!Bt(IW!jSm`%DNP29dSoNo8UE{WKOoBxKmQB
zsj6qQ0PdLvYu8`&HiNCZ>{ni*3Zi&A8wsw|E;ttaISb}}hh9~d6ynVOt{y?>4emJ!
zf^CaC`D@tWT~g1&^2qU;g~Y3;h67PAghoe$xLY+|vha1I8OZgaOsGIlFjz+QJ|E2|
zzQkmNXRT78!GLp9#gauCkiy+Dt&CPUX8svmLOz%9>#Z@Ysd9(*X#ly=<ymHkA~1%F
z8SUkz$QXUW&UQzCChVtr#ZUX<?Qjv@IL>4z-VW{W$#8sC)(X9tPivo}LJ6U?!j$+4
zc@Wtb$0X`Q!`z}STk-uw7`|;4gAKWFctoH~h}&P?gnrT!t4>K2P-vBV&2+;1AGbOJ
zz)+<~qk^^=!6?{hZgBc4Khvz}Dztp)!YnVQ#PuvFhdMvJf7f#s@9NP}SWfzpUE(ee
z1=Zz&rh$cyE5AqSPFRTr_w1^W(kl9<qZ{g)3S2^hl^9WJh`@~{jC;Ua0Z}bdr11Z-
z^$FnB3sG+qc5@7}!`UceT(8rm+FrrOSOgm78>U|UyMZFT@QZuHE&N^FwXk%cZ7&rP
zsUt1|=$6c|R$7O<ymc>}3r@&?q`y}}e~OTsCF?O+90aCQn`Kr{&cM;(j_h2=!1Gvo
z_T%t-d@7kXMmt{yu92_jNW!~{I5=kL`YlV&MxJbhK7xTi<v;S0j=mz62xU8o<D>4B
z3Lz=>o}6wxbkS8);bh?D!d$eA6xi181vAH8LrA3^JIi|}=C+^S=odjfaS~V}u(&G&
z(>cvhoeYR}Y!jS_6$}a21W5@Jeb3BKU$G9SZ2GcGrK*KBRovSQnLLlzFD#!G<PP~m
z-X901NBC8%3@Q%aWWACVey4n|YC=+y!Y$ciAp`1wm=|}_D0{gb08)F%)Ev;k&U5M|
zjbnlBNH!Te^^;&{tCf)k0wzbfjfa1^+CXF2OmGIZ`kR4qoc^Ohi%s=4vRYNcz@!h&
zzfEkYQ^A_dSh6_Dreajb6hVi9j13*#k*Z>&cbE}C06NfRM}9n#%kcqnvnpgjB>Rv*
zF4-h@)K25BaK(HEDR<F9w{Y2P67%-E>Kxy<Nhb}`B}4xbidn?U);8!>p3d*gM5}yP
zaJnw_LJSEpwAEl!L8k^^XQZq6Sk<*q{-!ozmR>1#zB|c&|B*9$$!h|v!&8Ms^5|<u
zrn7m(iMnUmK*}u8lIE6kYopyz10gfONn@3YF&oxO#H`nZ-C5DSQtly9pGycSO|nx(
z_OJC{f}h|M=-Qkp_sTFj$N#aBaW%~nuBOZ0hA<r^N%tXIk_RmBeNvu;i^@QDV9H5K
z2oUVP>q@q%H<o$abH^Otqtrn)f`;^e0@F!4lX}046+Xk~i@-uno7`(YwLNO2LOwTx
zlMPE0H599$FOo0^z32)HCuPvlPGdal*bI(T56hBlC{*mLASKdH5pi7VA_E#dZkY-)
z1QW7`-#l>7+RBlasKShf&Jp5`MHNVp)v)`XEYhh>Cw`KDT08?bIw)Co;AZiSrKIk+
z7upInaKD%p;1i1_g3UdI+5b}4)j9|(w1DGSizl|qGS$8VUSQ{eS2`S^2`qgDmaZrt
z1x9VD#vN^W28mcdd|Hr@Jq>CDmh=`Uw8sJ8Q>^W2f4yHv`}AS&WHMm7omi_>2|d3=
zYm4s$mARPMV!b8*6?h=t1O)r7QROfeN3onoJL)EDbpnrcJy9W~SHLc4N8Py<8EXY;
zHblsq1|HCp5iPO*akP_Sdw(MrZX4TeneLB&sV*1xfI&vrppSbX6wZ4->${5wmpbC@
zSMe`M(7}c2PfKhpdLqJ>$GE*o?s8=WVCetY#VC$FpgHq#YRaAd^OB?JE}4PEK_p(i
zzll?DqxSY@<Kx6Ib`D<^{<n)lD=Nzs;a)_WpbcHBLTS+atLh)4A5ghL8&e9<>iwyp
z(8v!!5o;AG=P%nB%rh3XWB}{@I9tJ3z<3cRcOwq^+d<;L+czQr8bp;SU7atY(Rv0X
z!<Pk{_^ALnR?V~sR379mxkH$Su3O96ME^F4eN;_%&w5nMiIq26_FxLn5tr=9`;!P5
zwYB!v_;_gB0%YNIbNvU+%D-=bFjR|TliGfse<;pYhi0RnZs4yU3R#O}sdy>0XPwUD
zcjH0s<;eXS`NcdnN||VZGLfBC<{M$xQt*j|8ZHUa#OjRCE?o0t+4)Z88qy3&+k1*`
z3)=9b{49vK^yKBN#OiA`X`k01SW>)^c^B%|LP$hahv-HEH(3Cm&Gl|2*yrbN(g-|J
zlooMPh(8w|Rp4%cUVaM8JQ%mXz^O_YhLLRJxeBZ6+Rk(a_tslbGd@f;8eRl@_1n6Q
zOxVSk?axAf*G%|>j{w+br3{my9wXO%tWqs?g&wiS9;GBY;3ne|!Y|*is)I{BQ5w_F
z?5GJ`gvR}izH>zfP1Kn+wm+QQ^I<brfQW4KIDA2-^(e-BMPO&AYjCIRaQi@E3JTHW
zosOS<kJd6HIN*bCr?9%@4I~RM$-X7cun6YKy*RwGHMc~uEzs^6$#YA4l0b)0;Bv1;
zP~8@A{gxi{ny}&pPCbLg;#TwZP@Z&>Sga}zRf^j^*E-*$4(Oj+Xq%;CfOBeP91j)g
zzpVe4Iv5#T34^@V3nw+iTh+gDC{G;|K*@s~8pyXl{#(a;;H$$=x7k(!-=9@|nYn^9
zD(k2H4&1HP3b14>jr*V0j~}a`>ncr!Qr(!j47JyW%ATRe@OIHX-T~DtihW{mqNhwA
zXdlOLY3}`|izFstCL{Q7zj#q@&PtPXL4*>iBZCY1{vMj2VB5)f`!&odsHwj1&NB5N
z>ls)zr|$14_O+b+4yRM#33J2`SRNQ<fIAqE_?o)KPJ-!DcZ!NXIP$ijo&sT+(G4lC
zR(@eh3tHf}xTWHG<iTzj#&!De^&+SpmYGrcLP%4DTgPkj`hvK!-++MnwR5Vj>4h)y
z2>RRd{Sf~N1Y-h9BNhdXhuBbFIRk&g&76=_YGI&G1#E1(o{Q?=nnPDDQ=CXPjkq?>
z2Sk^r5l2upb$AUQigt&t&z{wgEi9<Z&!@}1?qnBU5ri^n;W@PHkgp;hqP-6=w;sef
zR9{@?_vXl$F|ye(A{?}Yr+fQ3(oA(j;knL6Yob0l@2wpaVjE+(eFzO3Bh`G+lq?r(
zB-deIdz9(cGiQA0@dqVi7u3xHThkAG_-UH--S~wE4avx3@GXi}7RyVd$ET&(8#7Ln
zRj6T@--AK$g_uKuC)2AOxb4jr7KX38ku`Y_Bt{TW+fD1OXm)%~9-YQx8k4`9EAJ9}
zC-9vnnTPouR<=6RM$P%kE^+glwP9-0mc8)He$Gx$Cbc?m^{-muYbx_y4D6@gEtk~A
z$>HuO*`fnedaAs|&K?OgoPtIx?bfv#nS=OCj5>447_Sj95ABm*ay^+}3&lZ}d^I+$
zC9A$p1WfP;A48SZ<b86=0+_N56nU$|r>k4}c4>FWZh);jdo4+~gOIivzJco>$zv_-
z{Jv-D8WcPr{XdT_mslu`z_UeEZ!S|FaNcP_ldN@iWFS~Ueeo;f#+%$V$^wla`p6)o
z9Tw*&m*iY(@U#yhQdvj%Dsf^%j|D-f#R$uu!)Tmn_G|Wk$FaFNNI0nRK#`r*%^sX}
zf-F?S4jJTSJKjfk1_(k9N(lwGftAvRBV)|Sam%Wjo`;9gh_So4ib;U9taa;{DpIur
z`@fgcD$L?<f9R}Hf#xVcoE2l~6uaSM>Cc6GkaP1YZU8eG0%rtT9ou$8R=%f!`Kva5
z*L><^HH=(SO`%T-7z392?hL8Ap-8>b=Xq+^J#0v~*3KxW4?FjQSn^3ASPUX9IaV6X
z6i*l(D5)ztji{$wA5pvn>;X$|QG<NK)ZzDr6d$4v!Y2wxunl6Tr5Q-xdJ~}8ypi@*
zGcw4~PS#+@IOTA?Axl~T(fVVty%H3kU}p_d4|m%}G*g1(=@^3^dgK})NL%BmVn_yy
zQ1PYD1#9?Rgta=UXQ9M2htUAUZQLU*diLVE=6`a*-+kn`wnJdql&zSDPzUR~@Gj7z
z-O~eox<5-%qT0;^B|}oxoo9spd07o&K*H46q~&o&&jl@N`h5S&m>~5C4L`~+6T4NN
zb)B|vUlYu9?l6f13oRO&$VUk~AJVv^B^QX;K<TJ%OTx0oS$9*U(PSbi29qD9w@1D#
zdv}Te-QoG?cXp*+;~Wvwvc(8MPH9q31WtRIpqZq-pP>D5;KesLq8)MEhm+H-4u^Xm
z27Z#C7ZqUaXzD;5!Z3w&E`9b^<T2%?i`MVfy3iB~I%>jZp{9Vr2ZPn}$xF-`Jl$rv
zhM(3<Tl+iGvyx&^x^=m*1wI%4vY)3HRExBVUa&xWW)=#Kw!VKhg)q|{meVGOC*Zna
z>@4(131F~_EUg2Su(#;MFyNm~SxXU~9>}i^@mcJ6LUaG+W6C@hkgTM0^VYcetwwcW
zPHd7?>`vg5ZtzX1)I*bX+l3$0vK_EQ)tscEj(9Yj%|Kj-+<+|5t<`^|_1ma1+nx8h
zd@-|)VWt11NVi(u3NebI03mC>d@;Tk)~z4YkRFQAn{&0^@P2cOdH>-R84Hgb-_x$4
zmE8<DTM{rdLi=*A+7?VPdQT(VLzetsc5rk(J86XrD0Ho}e~}Uf9?x5lPVm}jKozp`
z#-e92^sh!Re@i?1P&C`iT@G7TQ5zl3A~^>7>$X!n?(FbMb75yXw<n8@Y`Zm4ddCx+
zT4tOkouXibdSjEod><v4Y9j<GwQ|&m5QiuYfis(wDl`szh~tDrEj2{RgcBBS0DTGE
zh9}w+<p|3bUP6;!K`-oIi{P&KK_3O1w0TyiZi{i!B9z9HP~DtxomCbMl3xyul3jp5
z(f{M>tm<m1=s<T*E;L#2K2FfN7c$lo>ujWVEO^bJRF<ni+=@VJ@Ug_8rEgYEj1vFU
z`xX9FNCkD2{JDtD8v(-g4xrl$Kpu^1l{pf*3ZD|2d7keO>QtY$X5=e<xjZajQ8}ae
zo8RP-46L=#UIb6p1qFwf{NK-Lwn(jG1aU;&&(hOT!}F_Nyxz&5fXi!%EF-;ho4ef{
z18Wbo4E{X*xpKU9vl-e*6PK04r<I7lp3vb74$FqXWe?!C&^PWxl+KUDX;sW;(Hf^?
zbF*BqWLd@_Qo4tEmw63QR6kZ`+vN2VDU+X`CuNV2)?N@mw6RK(pwY)uW{q*%6X=y(
zMug=xd9;x}f-FB@Pp>WDGzf_1A)nNsK9{2L{-)?NbyJOUj|;+cbB7~x3WkTM5H?Aw
zCZ5}Z)BCQL!a&$^k$dPjr5LzZ-`0+2lx;J)?t9h(W^W>r<S3-Pa-|TZ2|w`5r76?v
za7%9+f^JBTQsHbjrFrbQT6l?1X>$X6cpG4$?^G*44!nJ4pB*OwuYB;2Ey@VRuzr?1
z<9QE*eP*-_7+zsflI`J#OeM@S2Gt?67p5(nm#>AEL4S?+6`3cx3@CS&$o*$esRTx5
z=L$Q_A<1_khgBByUQyy}Fhe_ZWYGiuQ^|8(m0vd$M2R~ElGU}kM;Gtke#mc8jXB6Q
zi0MuMZPMlh*!VhThA2^L_uGhsjq|E>Fs_#EVPG*jhTBci(^-@FedNY`gQc7@6+9XY
zuHgB@d@VJ6NlZWdvPvt~xxitjQt~aV;dPI8;5ymusVZ{igZxxi($T;EL_mi4%bMw6
zs~SVEnh)0t+)xn7z7hM|z)tAvApDDGO_gU6y5nRGi$NVe_7~hp^WL>M=VX=8*M{1v
zXpb|FRSTLeoijHr3;6Xz9uKH11xGyO2|C8`hSE9YSq-KSyzxO~a8m!tUCQ3Ni?x?V
zXG2y=5!jB^vaiR?N_WY-LO?7#%bd6?m29Cf+cO&DPXqcr4a(f_fqnm(9U=;U_l`4O
zUPqU-`g(Ttcw0IWgq1~db4B}ezw|x;B8<CNoMav+hPvCv94YGfXENv52)P2xL)B<W
z^=b*pPTul($t_ioxwqX?SShcMIs+j!!z>Hg^duVY3Ke^fif^7iM|U0~vSIIcj0hdW
zUoAmBu2G{pj!CcbkvpQ!1ClZyj93XT51kH#fry?nAmuN~2x%IYXjs<+jldu351{VE
zA4Kq!D20|7u4~V1rdd5~g)-sHzF?_}{kyI4J;HlAjgbKv{OL<M<89L;fEb1h2frN_
zsSbm_LqMQ`<N>3kCO11$3K5W=(DmVvNznp>W*qTjOFG$lt;xK6kSvuIU==}+qBPKY
zAPX_+*vjdf4uI7+cg6FXz>Kvsyc?B(ER|7Q?$@HqyNJ0-6El99D?(w}ijj}7@|iU<
zbrfibW;3W$9Dn6gELYv9Z|6VaJ4yvv+S0I%61iw9{j~OjU1XHsQ75x;Jjf)J_dNH@
z?UQ3Xv=^0(p8|2HmRAOgrIl~i@a}cv$c$r+!pQrT1LGDy$%y_@Uvl0~EI$Ui)MFO~
z)0d-}^zqD&R}qiMfvA3OY&z(gWcWrQ{}_|!Q-i_jG9W7}QIj=pbU3uSZxGcYA5Z5Y
z0CtQ`M{3s1=+BDXx=Wf*R{30fEv&8d&kI%Zt*{1Ra~+k!mraO&BSY|NHqUq`?#J7G
zN2LWv%6Oh;;9HVWB(Zf_q|HUos`Q28lGs(a+LZOY$sgd5oL5<`zD2s9&S?3Hoqg!Q
zL}Ng8L7V%I${R~PUaw5Gbh1bTw3o6$l@K@(3mSx`$31!cJ|MX#w$aoKmO2?f=~B_k
z+2k!EOSxqo#3cn<Mi)!E@9;GOG79lC;)-M;(LTT}24PNXNFysi)|t@?G^ERP??m;{
ztb{f~gLpzQI%hTCN@!SolTKoEfV-&O?<ndz0rj`B;He8BR`hE*PK2J5UNU^oS;*|W
zD#Q{@r^~U%i!<jPDFXzl*~j?hfPC0&ns$38;1XVb`CQ_{e2OQ~fp0jEja#mx&icl@
zM#=?DZ<X53(FU--RL5Pby4xl`5o10v(KQc7hNJ+2L~FqveDKTp$eF~PHRIzGSgkT(
zi8PnM{5!|0GJ0U2pw^KGwJ`G3OokK6u2Ln3?9nY(n8M4{cV!p*U=xzIC{%;0rH~XQ
zCCX>Np;f+iZJF5I21>l2v+<&Js|&k(_D|OunOsJkY>b(?!)*%~s<|l;R_JT2R|En2
zZaHUz^X;7Bm+9xRBckd)ELU!uTz!j?rqW6S1?}|HVw}ZC^QM~&O}rxhzvpaSma6uM
z4%W+Lgm=!_yCgy9qOrNpkkN?tjZUF;06sI7UE2w;1>Zl`?q*WbxcF2Ds~}2K`|mj#
zca{$-5~V1$$)rQF%w5ir{fgFup5MfzT*hzWlYDoxqRPTdcAhAIq!52I3hHaK0N9+7
zcPc#~AZGNBahZ<}(q?eAvQaUhba0l*7-np7aKq-dR7#Y24b;e1hUIK*FZ075YQ%<V
z;nDq1_@t+fR7iSpe2XI=1g0@(fCmy0yVOD)_?w`(ms>;KW~$l@TS22J3siD0Lg4w(
zMwiEf_+a4lZ5fF-^#iwSw#V`4J<<Y{Tw0kO8u%jsbE^!YG*4O>m3=+~M*63_FC=)_
zFg*0vYu5=F4DPf)oFcf^H|p1@@_j?R1hX<AF=p<F7&rW6=yB7vQh`>W>xPqHqn&KA
z?2FjX)hAM8=FPui1!JOjUnu?NXGvg8_D{07o%!oc8{@_y3U8|hrcva!l6)ytF(wP*
zh!I~<D!<xe3qbS878RD&5frmB@BL?-v!?#SKgg1lI0omHI|=^wVu!<(FZFyxQh5j9
z5>-US4nyy;+O(JZb}D5vF2wa@N4!~CZ1z=~ca7%n$4G)^kxX#Qmsrbjz!JRiu>~oZ
z67q)3$AdxBi;^uA=(fy6=+;1e@oZXIRn^dqgJwr;{fD`*XKuNdP0+rjwkRMm_hn5<
zD%Dk;XL+`))#dH@puzh0R~%{qY??c{v!5GJbELM|xgbg{wN#A#x0^5|1Gcm(^{a8w
z8O#qrx||3UG!gv|CE`<!uoaOs-5NFFv4CW6{+@c@<Y*<1ls8<ncIc)8d0gb1;E3`a
zYHZ>)={%blS@cD;y9p_~hT;yhJWuI3LvM@^^gu4H2|@}=e@kxwfBpf3D85-brx2Ea
zNLb-1xzspng3U24Ci@+v4Y$A0fQ@(E5kWVzkm}Sy6(uJZToiab9UzdUR6;^%-Sw-8
zF%XUVM`P70yAvFlxYDgcUOs*a;yRH5!Io|_w(?lw)^v0L$;0t4G#WP{bYpGcm;19F
z%eJb{FUB6cHGhb|%94E8uO0n9BANv;0MmC09K51lO_K4|g)Ft$<-%AJh#CpVBaz`o
zq4j1p)GYSFid8e_LzhqK^~|l}9vtZEn|6=2`I^$Y&!yKFUbL^x-2e2s6k+NGd@~4P
z6PNs1>~sED);gsYd!oBoBuL`!^ORP`2v?V!QHvz@I24x%h1TyA^*8Po>gb}-<{hcK
zD6U)&jDJs&!6M{sH$c$URllaiJu7VoS@H#3=Y=Z77(?<8a(Q-bk=tj`a@();2Y^@A
z+-05W@yPOa)w4!JWAW90%$pHPcKZxvIWSg>GE^fx?*P!`<}3vnq6s!DY0D}S>+A&H
z{g0$e%akFP5i;4xsA2jlN-=sD&DZN7Pmw$Z1^?C2C{13`e#Oj!Fsyx~0I)$NgOOU7
zi<}5B!V-0aY_@w2Z;KCGTUxoBS&e{SUtz*tx8QmzTdnqwDLM_u<S+c?u?o8o_xG`n
zIVG2a%flvydus=JjPNlM%=UEMZQjfM8$|9pR)ny=SsL{-ayv}e6ZN$wtOg4eRu)2?
zgH<Jvcz6HKq?!$R#K^z*)y)_qe-1$JRS#_hB?6X)^$loM4b#UG$u^FZjnfo{<?GD<
znFv03Xn`)r+{i{a0=VGew2Ps1s4JCtS@=%EYi7VHar3RVi2`BvTEmJb0~k#MDHH3M
zBq6(U!7qScE(t7Dn=xYBCj2-S5PrG-+8|K<G{qSo5L+#mnvP&rCSfoBqu{Y(lyWl*
zLjbw>Wy?M=C~Cjz=%N(A>GCl`!6negS_p1eJV%Bhf|v!5#S^RHPeHX^H_MV`(~l$y
z$dPTKE&?oi85kZFTe)<XofbwJ66qeOJxXn#0IaOydmh|gnp!GGVc_=>DiUi_rLpkZ
z^nS4+cHto-O2CNHDRTxWj|@nNk8*3@Iq)HLMMVl3+8VyVQCT{(m;=%f`&SFP07*c$
zzf-Xi5>{V1mw{gtan?v6N`KMY3VW@&{?a&xKNboV2ZXWkEtPGJte9BON3-Y0I9&)*
zYQ!kF0d-doUTK2=Rp+emFpdlss`S#&j$>jgU1u<yucNk!3~yIA(@(xltm3=Syy}Fb
z8!$H06Y+o+o>>Y>1!VouQ4cn#mSU+WY(7~K&=#5EODQv!_!%4N#C%vHVs{NAFLiN#
z0SCqnu?kUn^@8CVrGJn!1aR=dAc@-8#B>BPg}t;D5965yC#Z=7c<M8~<zYuAnV5}}
zPf?j1lPdkh&lM$hizVL7$~=RP?s8}J_#oqXRO-bWI}FAN*p<Z!cGBZ1BCJ(<wdPaH
zIdGQX#u*~PFDGcA765m-C3z*-iA@^R@rO0r1sBMe4(~TNGlW|ursyDcDn!6_qipY=
zC@SJOLf&6U+le;F^N+<jHzLig9<Z%FDmk=wA(J0k;1snoTd126f0aZYB)3M>VfPKi
zJU8(;QrdvZCi?YLo=J%YhLjUx6ZC9<dsL_+xRg9-2V`)wvW~x<gB1_qPsFQJVr3o`
z$NUBQM8dwgeJYMKdtii~=?|6#hi51PFh9@6udR4du7S7VSRkJ%7yziHnj2c`JCyyN
zl{__JXT<7CW~$%!>6^*;k4+KB&mP|E-jTyCEdqbG?YjL0tmz%_fN-J6Jy`M90k`>J
zII#q4vV?}$PY??~nZjPWv+zeRTKOO2DY6}rBD(anH0LX#xer{)uh+71coI{V3Z=Ze
zs^aEtj>2BWL;`=VkYbi*WQ5V^MPklvRdEFJW(W-dPT0aYGtlcIcq+4h{-Zz|mPd$*
zeSW6^bL$GDWvDBOw^z#aZkt!7(*H#Y0TgsL;75inEnCJ41|T0C=g{z<!{P4C)M)Yi
zBn0xkgEBBwdRBou{`TCzJ}io?lX%ZsdMjrkqF61)mhX%W&-+oueH40G$gOIw1U{^Q
z8zF_aFZ8yzFbr@mU9y0r$axd>GI*x&*qCZltUbS<k=9*B%YGS+{G22ufg?oaWK$)S
z0oZIhJT*nq(x|^@H*w3-MHB<kXC^fh2%L}{>$0z+rT<oEo$SR{+;K3-w-gFDgb?PW
z-tDN>)X=o~A;QX(87lWx4`zXVRufz8!M(FlXlXPX5SmxI?U5%ySu^mfiAu9cEuIDB
zAEXO{JXA8F4e8oGmwdde7P7q@4@B5kShio6GCMvG$n)(Jm%J!FluG*6Z%cpgbj=;0
zoMO+sR85d$oF2Ms5ExqZ!n7oN8Lg0DW+~YM!R{S3T2=}gfy}f~>tnP+b^YdQQT4Vw
zp7R{4l~yq<@D`zh2Dw3ESN1xQH5wcD#gGW74(OI#qyDCbSAqaJUr4hji0~bFi|j)o
zEr?~N4Im!z^z@0o9z3JkqoCe%@S=zOcf<`DA&{Oo%|cF@pzwZ9vas2Ljc|h>?}+c&
zZ#6J*V6YhT>ZsLuY$!LN<Qo2lSg1ti^Q(IV$SpSFSjlkdzIV>-rEQ^}m6c~n2y4S#
zbT6!!u&M)$RivUYL~08Vyq9hlTxK})!G78fe%>G`wA_ho>~B3x?p=Mm#%<|0-s)EZ
z{D18wAdP!*ZGZ`Y5}G%mt|X@?T;_<#o;$Ktn2BGHoq6neyBqR$wjoHngz@=H7I(4;
z9C=xgupL(#W6ewIEmIAG|2U9R8}2LE{2%!4ZRJyeh1VRQRmp`+v0h8y_`q&k<Z#aE
zfno26PvQf8Q0uZD?1x5=&s6RAJkh>Ee0%Pw=2H=HERar7rBv0~asrMGl0_0a&E`4U
zm*9^<e4o?9NLq&Mv^OICN6YdQ^$rQYslB1?SyrR{P0AJr4ZR~_^@g8%p_<gyV$8&M
zTD(TGidY);ZsrC}WiU`fW18yDXz!(O{;4#2^x)1;Z!*%R|JlPKpvCHnv=j1#^`PJP
z(b#`}iN_&qmB*oo2C2kf4qn@`<|7yg)fntv6Z9ownEEA!e9#U9yrZsWaa7!I_>L9p
zwLZ&4=3`vJ=ak7so(&cHNZ5n#3gQ>PL=kH|wZp0}9ZFyL3aq7A@B_MFq16lPF5!Dl
z#>#^#GiRFlLhSJ>hxB{#LGj-Lq>v#(fi(mzAL=d}1=o9#RTMFPe)^P)Oc*{0lFQlG
zWHUWed*a>DbIBoDM6QEqWK1q+!i7nsZE4*Xd!mDX;{`5DsWKIG6DArLAZjA)IWp&o
zsLnp>add>jTtbZ#-T)cH^VO&r6_~mJlX!2LyAyr(>`)%og|$nHP`XWDx{MxD!Zuti
zS!&&PZ~2JiHg^Bp73Lw-ID0-;IgC*6F}7Eo9YB|hZ)TKd>&LHBmj30;iZY&7q2Q(D
zzjKho^)Mjl{;fN=PHg3B_m>Rnha8oa^CkW|kF*3l)X?zzd;g3lB_^Rto`8(R9^OPG
z!yaiM9YZn0XI!ol=HM2F-(Ksa6?bPpRaYrWPj5edbf4M>Tk@@Cp+vz40RJH+KD9uN
z=~K?Xj0vLInE*L8g<!GyWa@zLT(0$cgW)My%g$v9)Y{MfwM3T8ApZBF_&Fd6rGSCd
ziAC1ExsIH7X!MiOnkI;j%t&#dP_%mherSVu-prYpDAZSGUD5j%BxO)#^f<hYue?6v
z>@hyRQYWvsx^(#~PR!eMo2*T}EmXJivIPFO4hutn7a2qa#p~_b^2@H$uQmD}!vKJ7
z3m}Xbvk4bS=x+!ktGp=(G1;t`_H>J+vKBxjDy%7ff{-COv7oP+R$$?@5jY9h+Io0c
z^s%qP#I*T1%D;<Ki<V=##*GSey7E~@%&G-7LEAcVfE@uCDt2A?yt-SH7R3+$1A@95
zLKG+94QAFM>RGAd3{Ls@q^fdXfjp^(#nb)-&L;a4X{mfJbFNHdp+$%*b#qS&tU(}&
z1=o2GYs4vUS4m4(v@stb9V;4;;LhZ)F|#3$@k$Ahzf*0L0zmi(zP65-fiC<a4H07x
zt9W6c;})_WnCUYqC&gJ~q2aZk)IrkW*?bYsF{zw({pVX8YU|pCUy8`S{sVKP@Ux{n
zZ=Kx%OuF1_R+1yW842nsJHz!#A?MkJuxC-xD~=v<On(SXxqrxgN+0OW!Z^sRmVBkb
zI{Pf^kc9KA1VajbR(Sq~LO^|dxL_pWM+1JH>yOv&_jtjDduzvDY^?^Qq}HOJcLQZL
zLT19|X^KU$<agsPr86Yhy#u%2a1m)y4L+}mVcs_88i{!7gPkpydCscUxG}~q`xG7H
zpP@$d>>3D0aYkpq2vfTvnfn4&q(O&Z7y>5VQ+22#a;sF;1L;77A-nSqYEj80<goyO
z4SSiN;sDS94kAmSs`CH@>uiSjZ1Mbr4yqxU!~(0V$c9gPMHoRLuUs*NhYvrcUc;sW
z<6<~4vX%Mdb16Uxa0?irQW4(ucmkxHl-w<pg>Js?DX>K^xYuSTH!ekKyH04@?&5K0
z>J)}ZN}2OiH{=;oHR_nHvsxY=KQh~*R?hWtRs@13lHCD0Kw^M~OVz#zgEKBDSazP`
z*Q7vZ#Na@7hW<(6wfN0^cJArR4i{Xtg<o4m)%xssg3BsJ`dZF1i|1Z}(q@8hcmAMo
zE#@C@7NdzM1vWf;(du^O>>Rlnb<L1m0D@&_h!Czy`mf~FLJ7fhZ5|+=)Bv&Qi}+n8
zM;t7o7oug!f+vX2MxIkDw?KcMqs?*$lBCg+egG$?1XA?|sV51|z&ODPT#Y3pQ87Qi
zxGW>Ho)zV^*RR~FPw5pM{x!{Y!*>hZ+ES{?!V_>CyH6}!RTBt~rI_^qCzj)Mvx6Hq
zCpDR8N}e{dAEfXF9=*Vj`fh-sI3Mp!RNVQ`{OmlX(RN*7O<r6rc=J(pBH><$PO;3Q
zC#pgne!?k@LVX5)-RvR(e+5IJ;w<Lel=f-*F|SA6;Oe)E&D7I4E4w9;`87qpg`v_0
zb2hHhPTo&&G|)X!LsK?c^JD6ee{#S^{r;C#`P2ggV(HH}>JL_HS=`kiOatkEsjSVp
z!(vNHRfr#g=u-n8xYWPP2Eyxm|KlMI#*qxdcX^Utf-sS6AAv9iiu0N`b6Nt^Wx4TS
zZibzE{-y?q^dgizSyx{rm1B(Pj16NukOW{w7L^JbcrAdRM&XbEk8N~J?>Bt&25Z+7
zQfMfIQg>tVs@hzUhXtn;rT5!NKEY%>bz!CwYB9F4>#h?dhKh7tJtavS3E7Kt#e8O!
zJe|O1w~6W&QNo!>*V@Vg%t{6BtSJ=1cI6*QV=GrAm%(0XfU)jytN{n?=l)mX#cG}W
zU~0J^ba2opt|+l&z5vjP!0^PRb4y)9@dTS2kTG-S$HQG~*df-#_+7^+4c62H@YraA
zMX$(EZ6T`d5RDQ}%&=#IJ><S}DMJ|V-rGUMT)6gZ4ObBKKNLzuAFUSpbg8B`FrG1{
zsn~6ldlqf>0(IdCo~9V7M&8MfKx2J^0sC)!yu7H@Yvi%+@u$c2jo3=_I#iOj2xB~)
zOFfIf$hn2$lg)g!AEt+b`mIb`#x4QOId}?6nw_%JI!4&@ha^LOG`RD`7iYBPX*q*o
zRmylt(><M%f3~!0!pX;VPO?=7=lPOYj-ukf{-6fR*<SO9`<Y)E2tovRd9&AH+sexu
z?9G^#kES*B9sVs@isl>;`V^mLb%!orW%Vrl$7+jzN3cQPg}#7CKY8Gj4Nsv?If0x3
z%a405gqZB+p1vN@6CvV!p!6FGi7X?sSZQWJcqxa<!UQYhmlh&y+afpofr6Ln(Kq-1
z+)c;zK=_EeiF4(c-oymQ=&jgH;0Wj>ts~sVheEA>@a1sPM(2*D0;OFoCmzi9athJ!
zt558960ZGd0#h^DHZq?hWwetzCT20#utEbP!ne=w(Wum9CYn35<uYP6_};@${-I17
zCmI}RS?BM7wAgN}hYda31Fx|cidVQEbMxt;5VaNGde55cu=T~%<r=yO>P4SHia8_Q
zl^Lcst0)Ix%{`MZOrjKCP|=v231?Z*LWyeCq>?N$N=}wNS^`mw=NPL9ZAXGp`Gam#
zxJL0qQ5e3-)cRD=r18Numsn-k5_1}v4D?YTF~dW4AxW<wdKqpi%-c&m*oKL(0fWiT
z6v;2(&Q;Jrb;%XjuB}G>={)Enrc4oWhvc_QW(-HKa>u2fcSk}_V@pfDQZ5JSiL46+
z@8{-I9)4<ztq{5;-k0)9&C=8Rll<&8ws=P0<c_hHmP?8`N3*HprwXW0&W+(Yjz1-5
zkguL-mf6EQcARpIB0`9TxC244AS9`jjEtxH>CjR8fGv?5$d@*0+k!ht$t87ntX|+c
z>H3s<S6{qrodM=gYt1(wt%T+^Eq#(LcZB<6L{|HY+{)i_hAwCv>*2B>wyIrif@8wT
z<7lws^cIohl9_<UE%p=fa}`ixs#*k}T=W%CZ)SI`)QkOqkfsZVXsT0tfBY66VU9jI
zIg&w|l50A)bK}~XPm3lSJkQ!$UomFLxED?-p-WP;W?iOOAY;w$qLd!<5zoO$h{dcT
znBFv2nKYfXX3F1IcTl7P)?&POTVRr|td7!A1PH2Zo_F!uH?f8=nHG~b6?Am>TD==Q
zs5%C<4ujW$^$)VZwvO%4&y{WL4*_OC1?a?nYPG~<fu%78Zz|J||5%KR4^X@=vDR}4
z02s4>$yOl#_{5n`;wR3KH4<FSP3Zb?ptUxRKNJ`7T9SL!D2;EwAQ1{*n3*-sPu9BD
zY=>yQSoxq>uJLTH2J4&M;t5Hu2LQsDDI$>G0#u|YFw~h})i1TyJOl2{(DXR2sN=@w
zAJjtct#oP#nBA`s5rC^(YDj}Ig|c&gWsTE*Edk4uAPl9^U!9%lsO4CpqJTis*rz?H
zC6Wj#oXY;b-Xd8A!anLTp`?!i<gek$RrOUnwQhUJ!?QVmLqn5<!n{KSeq7}fH>=&$
zt87Erh|j4Tr$+Ii&<j$DMC0m|6%WHz&Uq|;cYVGi;#*VK?Fn<dQ=)|aw%@<Km)@Vc
zA>o0GNOvXD8dG*h^OAVZai;$PRIoH}cA~7q%s|E=yIt}N6?F^X#?WH;Dc=+4o&@b2
zBYO=TW-?VZjRnO|kuqZ#*Z4qXG6@9?zmzgPt;>mV>wA8_Cc9mErp?w0K&$IxGtzEe
zthvtdg3Ox4MFKDDNXf849%=t(+sH!9G<E$}U1AVO$mzEqN=yRK;n-nd7#WcT19sDP
zaZ0dvWA^QJQlV!hY6{hR1z1qbd!sTAcj0;eIKPcugMUZe!SG|UaAT59VqSgtxpPds
zlErNQKao=0Z=&!QG=TaTn?C3?_14Mlnh=$`E6eANBae7qqj%JYFuE<M+$Py!-g0lt
z`Ng{0g^smI4cW;ZEd2(4x~TSB3*Ij;0S_CpI|w8uoD-3hj`hW-1*g}$!>`La682D6
zui)Lntv*E$C?|+DCkliVW{Fx1q0;mC>9d8xr^x`Wl-7l#fOnQTc<V0L+O(HYS;l+%
z+%Zx+INbUZRMqzEI}r!CQ5+EJr)jg%lRN;jDH>{3n+LA6628wuC1Q1)ltzQIf8e}Z
zqX~xjb(d;p{OA=Qrg@*_Z62}Xs|dc=ung^g4PQ=8L21T-|ECd8AOGOS?9S(jO#3yX
zCSF=j6x<EV_bb}g=nQ{4n1manIXq;-r)*_6<xiQYCB6UvgAE7KG^Se)si8T{s5d9&
z3NwDFFUe2CAHJ1611E>y(1585WP(-Ni~XlzcT66J7G*@>e-kJDYgi@AnQiTiQ6JWX
zXw94T`-h2F!Ql(<h75Wg7>pe*0YI(n^4{2Wb5@KCq6L^*LG+{;Snu`1C0(PTjOdPF
zH`wAJ;J=-27Izm}@<@LE(C*nJz*?zVVaMTjJ@BpDSSE)tTYEvc*wp2OTi0HpFjBMH
zg{GiIn=h2%fcovASItS8Xuy&}Zl&siM)VM*h1<vJHJ0Mox$3%|;P`xa<WDHQRJA`F
zXM4`M!rY2qj8km184@BRG*x7pKb9~=DN~MEpzMs)a-cvPRFc1o9JvJ3eKx}pkKRST
zg`~wcsd-&FFVihP+68&m!&90+Zg20FJk`72qpS(rX*oic5V#On$cL>2CQk(wV(_SH
zyFa}OvyNIL^9dvvr5C#}^<WMm$ROGe*Wk!0yIR)Q1WyC86`l}1kC<}PsT8kw<|QY;
z#r)PeT)0qZD>a>gyExWo+_T4=Vq>r7DoRaYr0_BT3=L526xag*V`=?&+4(w=J^Kkh
z9%~zT3W9zm3;Sx145xul17)GG&)zz0zoR%2XL!ml3UE|uKtfvkY1}Qo-FD?CO5%=M
zlEYb*zpF&KhaO?U%!Y#+UaXeDX485Ahhp-CG{4Yz30>hyEskab3ZTs)4vM(OSXzJ{
zlZdy|&U1ud8D8oa8f?N}$-@AXgDXoRRF!8xOS19}f#5B8p=x}h{@#`>XccCFTEV|3
z6d8Du?R)h!#4^*hq!e@^3`A>eBr`-*deH+#EB<`1=$fl;(p{Uu_M#D3z#fk=mHhrh
zKhG*mI!qD#($8{adz)NRWh&IArX`l3AgaRvIO-ra+}F9Pq`lT!f1w2^kW=;Ab9WJV
zJZp3a`ygc1X{2@wA@JFKp`=lu=1P+4RR569kIy2<$=bQmqK}D&0=$o}h64~~@vL@W
zIbY}z6Hp`;JWpTO>a|@6T`X8uidjCL5QR<k#PKVpTwv#o0x<7lBgJ^m5UvnfR+0`A
z{bwRZ%??K`*QV@fVuqTQ{x))X;_wmyL}V-6l)K-S1Ba_a)dAAsT?GPk!^6Yk3P#8=
zfsZ<xt%07g`m_bXDMCQ=;B;%@&1+lckD;!*MO8GXu<}5P!Sk<j-`lD=Zisf4m=uX?
z6#BEQr~^ATTO*77O4dU__j=R%r|xzC(az5l`P9^ZSYfDr|70CsqveaMhI`*Y+mi`_
z)Z48uW%3EwM(;mK=TOt-KU9x9NT6a6Cp!k?HJre<C%B543p;W`2Fix2Z>8ZEoG*Sn
z`Z?dL2e;oIBwK_LO|#RqK0ZG=kLNQ(aBEBhpyl`Im9heX`cMqZXQu)@sS83wY?%Me
z(o}`LBFD0=EReJcz`vGgU__4xu_x|#G{h|#uJIa)KpS9e-}Ww|J;uzR;ZI|FG$Hsm
zNpq5|L%>Vlu|02W$7R#FKys-0Y@FGYkw;5@Js7tLv%scXW%0^F?A6|;!2Yfq%Zszb
z$_rg6eVj88v&H!Iu6_45N&cjfW%1;h(SSZ@yS!09T#Sp#en}IZJSle6@0pW&-1-I{
z0G|i(0myVpIIY6}HgFEf{&i?g^#Ih$^WWXCz+GRS)%w9<kYaXj0MKaUHVft(X_ZQQ
zOltt`O)c!Nbv7cbe`Jj=p#GagpnXyl?uYXU8TyQs6EJ##hqRwTY8~C;Ey$r8>sQ{M
zfIxGW3Hh9Bu+DZk&PPbZ{&-7~+0ySV3x5)ZBLo5Uh2FV=To6#tgb@PKou(aqafWfV
zbrP2f)RnOXIrJVd{o1p|LQRY<>nQFWSdH*9P!&{miT#s-$YVKGMBNP|jsfXSO4AQ;
zQ?90sR_yH+wNR8sM%-K51=ntrG`#qaO2`(i+(A!9Tbm|;5zF;vk4;qUk~y;oacw8r
zmM@eTQQPq$m~i8PvuE{vnW=FRcRUGaBBpDJr}<119J)IOgkpLBI=nlFv8&$FG|(bX
z8K2u?*}A9(c$AtoRyah1s{AzCk)nxyuA(3OYQh2EBvRduuW1v7^|2ZTnS_GpY3ojX
zt})97^#PhUtwD=HP+E}dYo+Gi<UTu%x+hy$Y-@UoHB`rFj8}0pFY@#2Bk<Y`VbcmS
zC6?w1X70tVl`nD^RJ`Gtf6`53FQ)V%#q&in&a3Vmi9F_Mrf}|g2JPWA`ns!6)*bOx
zkj=JwDB8Z3VD8W4F+XHEzT}CT`9l?QmE^lNBhXCSq_(-RoE$?{pj;lKht1{Ld=3qn
zUA6Z_5$I4A-zqQolS3gCBUfPQj|WTnX(Fxm#rBDz=a*Tl($l{Pmz4ritebeqxwT<p
z8u98aQtMsH>4ZcfL$Hcs8=oJ0mc&Mn?*BUoex;EMKA$X75Ui!*=k5>t$^?$7b)c;x
zhk?$pYPQ~6?R|;;&URRfu9NaRX3!t}*<$(!!pEEUrhkm1kVj@J+|0Wy%dl}a1AnKC
z;wvDPYx%Wb)Py)ktS!4SViG&8bzTdDCZ93(zW34UR@HcPPNC$0Ajt)!({#0iiKopQ
zxuTX>HfW-hvs2g;Zr)s&YL^jF?bvwg?FVxu)~bsA0ZG!mfAL;Y@_!=05_5SsO{US-
zCuoW77dAcrS13rK05_?m#rU~|Y=wB-xiana`jD}3t-<-I`T5E+xV4r0YX|i>F}=9M
zgZq7V%MC{vBW-`&IEc^Q(b{d7`-e8HeVj%`S<VgxsR`@jQ5;)Cc<>GZ%F-bAt)^>`
znZPGaKAce<6yXMG80DQI_ghC$ur_@h(2wTzF-(cMEo57dHIX!0x--9JJu>6Dr-p)y
z&5G_@QO2$M5%pN-hc@H1Wn4WlS2g2PTzJiq4|O~i!mEZB3y2L-iBGV2F6J(Kbk3&N
zq=qLF8S;2aar{LH^XIqv$O>GLf`;Fuva80&$o(fcwf^XTvs>E6^eIsfv$wHtczeg?
zn;-?eto#Si+)8KOWOSrFS4oKx1_FHkhr`*E$O+(h@fKjSfuHJg)cICpz0EpC%j8pl
z!%}z?5aU&o{zMAxrDOk4-Kkl<;~=^~-sUmXM4+|KD`cvj1i+yWoaDbU30*A#>r36|
z&N{z%^g`rwgS7%(M_mw9g|@Wj_}MZmlj)FL#e-$qF+yA>Hpjt^B?3C`SlWy194AK_
zkq4`2J=vwrL}^`~ie2oB;Nc6x$=%1^e|Q8$phRoB#dNCve&eM>7s_>lur*JRPBcvH
zVJ(r;8W;}(u1ZtrtmF%4ExDAzyLA$V+qcA#=yBB~K%kvwEgRQ6%Lu%0J2=N-WmcQa
zs4C?K4-o?=LRzUs=+NfO{lp>=&zvHE(lGl|${`X7w-soD&#SD~zd6;kEC|ZV)jgvw
z3~4IYUxtjupRzCMx2P`G)@KPjW8*@Ll@?#>7S4nP&f3=7C@=CracItHY_bQw)-GAx
z7CjKYGh>h-t)>^NK+*e7i`IYkQMLLdb!ppWy)!pqoEZiTU)n2KE%J4I&0pvp06Wwv
zsf-Sb#P$m$8fb7zm`3ia%?RyPEiKvhjE#$^o(QCwh<fc_rC5=A!nM|;Q)lk+DR&|$
zwflSK?MuR{*Ra1TFFl@UA`t*mYZWM`m&9oLu>=etyay647wPO2&g+zy0*-j1RY3Md
zt*5|p=&svf$TV6b-wqRJPpJt_1N#dn<SqzMD)3uGA0z#=qBuiqD5oGOuz{_A9IYDR
znP||8xydq@G0ykt?70vL9Z0zl%Vv9UL_bH1(t<Ghe<JzTD{q#r%Z>=h7Ov=*8y^h5
zR;ovD^@RvI3mdmWe)uMq|9u>q6U}PCb2V--tbLH(gpUo;K6WI0KgEDzlHn`U9*~`9
z!Ngt)|Nm#`TE$&|b9^MN%w?gK%?;{MYHuSY#c7l#AS_X(uD;_nsdQo;q)>5R7A~<1
zJ`tBwYS+-LY0W)NUz$sGZ@7x05{YL(e9N8wk(Bq@2jkLn6<hYN*1`k*=8usT1W={&
z{AwIyaQWyEW@Q(<<zT6cWHl7KfPQr;S&HJ^O@poSAQ}nhZ#M0$Yq<Vqx`|0k3oA|N
z&fhyRYQgHUA7`Kn_kWuH3fq#!P4K5sM~^!D&2Es}Ini+(I|Ifm&YLF(Saj6S&urWC
zef%76WH|@<U(%nQVF!8Z5&}gitpTb~afL9s%7YyOy2tFASDt*vO#tZ&1p|1wVOhkU
z4s**f*v_sCb`f2;zs3yta4-i&*2N0{EPpCImhy+G2QEf75-v>GVQ-iJVzrJjsA&R_
zC*Lk#^I-D`{&{6Ma7n9bc^O1r9HiGP;!D3|KXtY}py>qxbdmx$%a`cs2uyIl<NhUK
zl1j`sLG;k*Z&-I8w++lkSvT|qtqAVqZv(2N#!JF?<(D@4$2ZDfXO8u2YeFn{jhUPE
zKFP5<iVWEl>d~ybrj;SfKDgy;1LuSO?rIr&RD_JFZ`u>OS+w)jUDW|!DMPPmIDaII
zI|5=gg>ln46xE%4s&5j@A>s|QZL`&&Ev80qF1+=pkvofiPVjgE`D%m90<W#MPU>3w
zN!3{tx)rJ-M{4IlmFpD<!q2UFiV)Ue5sUd_<#p|MKARqRVjF$2{*`HS)V`AHm<ij5
zxEo%%s2oW@S%HDhlWFYL2~o68xrF<EO_K3qMZ}{AV0NpjE*|l3L%BcWmOO$0je1cm
zTUou~5Vf&)0dD<^LLMuQI${J9zWkT59J$3w+A#hUt|dIxdfW|_&tRXr8IZ)IXrYc}
ze;`iU>~J*-cV6V?)#rEGtVhCB!lfMr^+w^)jcQ@*Hbf)lpQSr4`qQn=A-c-MQKR8?
z(-|MVQ36VIMOn)I5la^EISYE`BiF_~3#H%$J-{-EZ>@B3bjPMAQf7Qg|LpF6(ZLac
znNnS&cK7I**b0}MZ1i+8wo&#`1$@F@PGlxe$-#UA`R3)O*zrGz{b7-MNO^<gDT8vm
z!~F~+Hw~I!imsNkxGa)WISt@(7(U9UN7e2aS@06f-#LLT@^<Y%t;yIYJ|h#Ipgv+9
ze4QSKe0nH~Sycg_3X^)hn9*T8NpOf^3_X*hQn#nEFoPIZMb?_=mf{YzQ3M(yY&_=f
z8QndPm0mM2#4;j9OGr?3n@jD`R(b}l{37GEkfKLI7M6BYX>*^w88MwQ?R+-de~&nH
zKP?+f6ISr?8A9)Wlf{zSv=b0a2h*t)^c(a~Kw{>w{Hf8IWP-0fj$|TieIoC^A_b$s
zs@V|ql@Zyqnrb)w|ACim*?Ep=O{A?gNi5gQwgkJOSI*EFb9<~9Iod_u$Ia(skE#q0
zWbWL9FJZ;Bz+7=ej<Fx1=>T<IR?WbY%Z?4f!6b;0&?|bn-4L~)c5h)z#Ie*M-=60#
zzpkQ))eh0Brku<8RJ3?|!zWSWz*q5i)dU3?Y}vujZ@VZo+3D+TY`{{|*}3h!_>{yA
z9m>RY$^6&;5N~1Mmsng)bo_h><xS=ZUr0vb$oU`TgN|e(9Ba@lLAZN@nGtNI+#j;!
z-Ls!gAbFJ9y{9glyEwt;77QfDafdjzSJUanep{Q_{ykmhKX_LR#Hs0dM^S2h0~a4u
z#rr(|Zs$SSsnd?0#mEry<hfH3>mGa)e+p+_nB>hjpwTcD&JhxiuLN4q>^`RpQMkZ_
z$Rn*|)Ruw5M~>Fg$6^?fP-0VMG}-(9FEu6;JdQAOQ40HVOt4<|#J;rmDKtr%8O2M8
z+VdJ)q?~NEQ*YKOW?*++7T^@)GW*AH?rkT?l<@Vf7SOux-#`C7lOu{pSZmN*6_tC^
z5^Bhj4rZM<d%)vz7xMR3=-#;MGcuN$;u#XK#tGB=5F;#bRm_MiZbCKh;&F{fWoubW
z%Nv0v5^Ad(l*{#VTIS?~s>RF|9O)P>{;I}G$+K<?JWu}JAJD<s*+s(?bKYvnL#O3P
zv__9n7D5YiH&8ajw+@nt4i8ge`&&Ht{^3A+1j!d~YdSJvsW%1wj4}|aGl;VvR1`2F
z6w(LJ7oEnrQB56?as^x%5Xqx%;~#t09^=@tRDRVQ)bO}x<uqDj%!6@?puQpYt$AQ0
zac+#i_&8R~|80NH&S3UIT|J<Nl06S`rkYnj<8nfVsBdnb>$r)*uj^i#0zc5RBN5El
z2w;!6tp{#{vdgX30Vp8vq#!Z5@t2^{ghmktPqvNpfdYhc*Qy$EXb1D?N;|ZvqwTBg
zXsfLle%jGrX^6%nz_o^^b+1OjB%?SmJM6iJKhJzxbrCbVgL_qjM5v$|vm^53D4y43
zRtRcSClbuNgd*rrv7=>7<51C^`L`@<E6aFd35C(0Q_bc^5H71oICMK0?Dnwt8N9I~
z+8ZqbX3q(K&jD!Ne&LF6jW!#(oCVa}DTET35KRBNDsr<KbheO{iM7>=NiiW*cj)*n
z==FX_5vBHdPt7z4Pq0#rVMt@DWHX+yh%CT3r`Zb!dA!!+&aQrGT?W^{xRR`_JB#Ej
z{Ik@K6p$Pi6OiCs3Bi~$u&snEkz@}(=+28OcCFx`*Y|mqBF_H1PJB}lK~SU*HCx@;
z4b4io+I&<s$u+dq@a2%5gh#XIK;8DlyiTjvLeyEI@rAI^onRNZ6&gUw4xJy{Wr05f
z%;=FLV&LYI;m8ujf+YfVwNk*bV*UrHf%~-7+R5=9iFd%!uDJY(w<d||4R8H>?iKHu
zjuR}4DyGNP2Rv<R59s#Sh?I4fe*~KOWL(W}e`?h^@b7>EcKo<(j1`?=cBF((7hnEJ
z?FfjC{$n9S(_q_&!s(oo3Nn-;%h<_N^I~Ve4B3FQp(49*%2x$8-_UvR1<clS-i_Kd
z5AG!5M4>*!BM!CINS553%|7>#e3D*z?ZN&j8r}lE7;xcB?(7f<%eOCa+c-}7RK!d|
zgEEL;X@uN(YxAIJ^O~fAUr22+WZS`n{S^*|C2P$0$Rd%0f!jP0L=Lfufmhu`z$AVX
zr88A0!Ft*s%jS;pADM@?LqI)CsiSI=rN{}_&KF+QBSJI6pImA<Mf@c&{Ei^Zvdspp
z63?74<NWri6+wNJb98ei9b9pGs7gG>I?sI}w~E-_R#XJkJQH$GV+_W;q21)BaYY0A
z!Tzd;9>uiio(C7mn4Bqg8!aMTG5EqBReaoUo9+FHQS6XT<-Y{!<t8E?Q_$rh<+v(E
zh7jSOic_}aq=YVZ>~!rw-eSFps>NBgV&S5wy;E04ChiEzcx%vJS2OlyAF}KqdE%YL
zSuxukZ1+ktX)FpU*EGEcHlI89oC!x(HP3%HhYXbMFASbrJ@M8<NZyIp<0~}JFqAwu
ziJX4lFg`?Ckanh`cX$k|mi9>@#-PRo&}?<qr5!P>5?p;6scyZKYDn|tVRPIL#jpJa
zc6^ocZ?}S2cs|ucqFHZcYUV7#U-rnsIW_(&9*2ase0pb~nU#Yfa#8^fpaNXOjOtXS
zzhsU^npi#Yt%}h69k4!q^M9@3U;r}Zc=}J?2G2{b&SOENS>w?Bk!fMbdYUZ~Kv-Y>
zqHXbie`K2(a-&T3d#EA`zwB_x{7Cv;!$_S+V_UD*yWLaN@Dt<Mfu0GB%^A3ciMCDn
zbDgaooC6#6^R7~9uonXKqNyWgMx?mq4D=^T)h<av%HyPZDR4lmm#m*PpAa1mCBXpM
zw}GMIurtpy-y-*H9qHEHJ9}gD+w?H?XaRb~9rw%?TPkGFrqjlSiLVM@jmSX5a*J%m
za;{7;O0wX~nF_w|GZb9e{jTd9LqJ%b=H%<&S^8md(6O*8Gga?;gfW5(Tpvt*Ra+Og
zbBde};-{&mApE*FeFN~RLgjeIpsJv@p;NY{NWDiUP1mb~`mc-MI*R&@xLi1SGeC0y
z!b;D>mSjZLr0qz1XS?*yxnK{df;~{fpYp}Z?DCD`7zqa)+r}ZHT8HUxn{qN08p^WC
zv0c`=TDVv#U*e7F(6<>agFk3gs2e472mcU+Z#BC-5;#Jn8?phFpR#tMg{zrz9hqOJ
zUYm#9!%_{bIrv{Yde{T@rg~$z-t@wB!-JAcgUNT`&w0N*L#AQkuqgdi2}o?Mr97z}
zQh1X5i)=M-m**l`1Gsdf4G;2Bw2`o)d-8jJs=U}(n7{Kkvy8E;z?obsaPZoK90G&^
ze}%sI_hL(+qowa|R2jeV7#}7Ql8F&OxSnsZmgc6j7_`{*u?#U%z@ocwpCKd8c61OT
z36vjxbWygIR20EH^02*An$-Qz3Mf0!K$2~#{+7l*Y0*IHviX5Y;rI~y6BAWKReM>b
zT8jO6YyPv;QjlzompAIyxSUEU+bb~!*-IGr_`bQL@>$aTo#*0|-R-*1P`xVPNLHI2
zZ;#vdFm$c(gL!lLO>Q$Qg&u$%#yG6}!Wis<liW*m!d9vMU%dyYMQ&tuXU(H#VGQR-
zNE>vstI}#LIOjaac(tNKlNea^Qv4xAUI}Rqo~MyD&VQS(Z?1*jI+$Bv=7~)$U#AxC
z!m{_4QUJiz`vr4zSORGJw-H=F`oMORdWLC9xDY;bH{)eTs#h!bhDXQ<81jI*PYOU>
z<S2lnR;Vda7%7oQX~_MBy+0~zT#3X{ykt-&04b~X?9+byxR+AKAl-|abtP!;g}tA)
ztvsL&?e^aOnNosC`;`xzA*3hOCNb{^{eFh+40W!9-_fhyA{aosetUHKOA*0^e?0dz
zZhXtDuPrvzLcS9xg;T5-9C!H$BGwG<C!@%gp)AnTT90A<Sq`;%BcWj31cL+|l$OIK
z2n3F30pfWbE>~Pn#0jMpSEThufXk_6E;|i#>+NTVqFR_M82J}AE4O8f`MoqlWP}^r
zA1b>77SRUxz=)Va6NBmtmzoNg-kJjg)!uMcF(Okgm&S>&Gu}pc45F9^h@Kk0*Z7>q
zU<k6tGX|NVzbvM%F@>IFwfUwbY6DbHErwKHW%lKQXpRqIs0&%e(KAi582_#l@}ZYU
zu21zHCGMvZX6ocnoVVGaiX}JbKX)V+%&lR$2~XNquQ<O)8;Gfc<T_#0*ITHZS&qR%
z=wNbvb!;deVazvg@DE*G*jH^}{aiw7N1QS?2pT8`N^T-fj+$IOYQj!5yqQh;+c@D`
zT$NOyHiO^Lfu!w|xW5*-wxbB!kOOE2;q5!YO54XVJk@W5lo3cLCT7HT@&)WiPp3Y-
zHR%ep<JDl(?pVfdcE$RTaGWflcUd%AUE0OI%1Llawx*Os!%hPOwXJiZ@GpEPXx`$~
zMP8mZ_SkSw6Mo!>OP9KuS9)qlbQewo7%oy0EMPvf4x#JT%eJH4N?&F~^Jd2k??Ec#
zjF%juZibAwOD$cjLvRIcPMgU~n%;KxTp^2+X{wj<L3?vnsfx&e|JcB@j-EO?EC-mf
z0nTB+%ZfJ73S&!$+yj8E)rmhJ))ASm#_>I|2FNhD#cFp(C~z061CyUZq50kM(OMKG
zxp}S_=t%Vrz1|Js+er1K4y1^(571R1z}$xURozIG<rd=3f?u;d_d;$ZRsXSGLELo9
z_f(p$5I%Kdj$b&h25-z4gGY)VQI=Lq{<pGd<TiESL(MCvb@xA82`9o>$@u(fri+1p
z;svI{O$vn2NMagkX9ou{+La15pzp-7e2CGCKUn#KMz|i9)Vu4o_26^>Llogy%eimr
zf#QiBS3q@U%k58sU9IATUief2xYw<K0Qrcu`ueBxVhP<kx&nZFh&*WX(=t4ImD)%e
zX|9rafb3&Xw;J#-0`$LVSG0z6S!r``IU~bCUi!}+T-p)^=<k<(?RsGexY;dzjyS8x
zW!l0H{+6D2$hGx!(Der$iVcf@lRfK?j5m_VYLc^f2BLXRJ`-yWjI;_6lWi8A2z6vJ
zaBi3Id;I#Wh5z|wV!b?MpO{{&kJbPPob<EKng>bMxM>d5Cs`C?@}jYOGC-frObxQM
zef_i<^;QPMPMYgFi(fV?_$b2nGBRJGvCh5%!>e>q!7Oz`u|Kz-v2?sdQt9Rw#oM_p
zA?d;Gdq4zZx__@;7UjVHIRP9n*{&791Ap0|*1VjCF*hLm4N_Qll5Kx%qXqd%cnWRM
zx4XoZ*EL$+WO#FZ++VdZqNUj&2)N;%>v7on0#EwaJqNJ?4W(#iP2Q}A9vEx`-(7=G
zju*ak8I+O{Z9X?YT*a$ws&_IYRorC)SKlr3!C*Yqy~e^~`P_HRuBcGI=hEbp=L3mK
zYeOOhdt~yYKUC9ES3B58@I!hr<v2uemK=RJ*`0ju!G9ZE2tkM%1fGF2cxa7EuLPYh
zdXI0VAB%qn_6nI%kRq^g;-c8v9P1x+t{#X79aL9P@=wj{(aPd<&uyBLchMuc=QP}d
zMZ-}EC8a%s*n38(pe=4UfCe0R6MXt~1uRd)@tzh#(1~isprhx;`tx&%5FJ(ilTq2@
z9!?L-F(^itYBr?s_Lk7T1c}UN@eHQ9b$eQz2Ah{@-(e~YAYHaK9-Qt_>erZy`W+~o
zrzDENKhWfQz9@o5*xIN*BF<zQa?6*yHokDgvOEqzdW8^6F#p+~;SGzlX1(|0veeUV
zFQ#N^S&h2Ns7wYK7(CJ)Oe5!JSujH*l<?nx4S~iP%e3gxt(da@pf>_9F}1b$h^ZrN
zqrX(bjhR#RJB%^N*U7%PoYo2NOGVpK2+RYP`Cp^mcnsQbDrc6>2P0BE3c+eN>#Stv
zfz@zZd6L9r80{0bH6YMTZ=NqAS_U`jh+gt0HgB#t0GO73;Y3K0E<$9nboDO94o)JA
z6u}GPk}Hhr(%+OUz}y5^I#vHIW$&Ot4W9W#s$g}4o$nv$V1(~+w!neVAM-eTZ%xkR
zL#`zPzg=cW13;xIHOeR6sqyra#^O8Z5K(<^FPVgovllqBqu{Xr9u<P75y9r?Uc%1u
z8Aa=az;z#(G+BZu{^41zEhd<SzCM(A^Bb$&HC46!?4`Q1Ri7soq6e#^FUbiyc|Hjj
zgM~CO(a~zUKGkAsDDj?~(BB6A&4~99F*+HQ2?C!qWVLmDlh2>?FE~|4=@HZ7m8b8_
zxYU*gkonRXXVLdh#tYEXgps|=8IlGaC(QFy0%B8^hPJ?D6w)IJMFu-4ab4j{HXe8U
z`sA~}u#G<@?jRNnF&EHECy`Php!d(PPc|~L`WKs04AsBf9CLSvO@r5vNj*{t>DEp4
zSa>|S95fKXkktKUlmu<S6%BPdw~NjJ&1)OsQWMKO+M36^|LaeG<Y@iRs-R_0$c6`l
zEEsYa2TsHBpjeZH#$EtF=0pTRGp>q)q$zDA)7m|11mmpo;*3YQY&W7*cBA_`+jgZ4
zQIg<Mrt2G3U#Nv_7`=PGBhybOQ?ak^Emfs1Gjb5X*vMp;EuP`H&x8|QGY{_U!dX`>
zZ(E}uaNBM%LMG`vTpR#fkI=;P=mjs6-TZ;IWegn9WFQ;acH-2CQcZ&Sc$ay6`=)Ag
zIxVr7D4kfm3Y<9{#pig^ZtxZ*$)cpU`7>vTJDl`7lG4DiS!-%3bRv;(CoVM$MVKZ3
zmYGKm`Qut5DV6v#NV0!c?>D;a>Cq4sJ!rjBe0T4iuxXtfO!#bJwWgsLo#Su<(;0v<
zI_+bTs+j1L6oH~u(RY%y`xc%05SM*kDKAiMN5BwG3grd(L=V8*?$2{@Z|ixT?IVZX
z(_C|J0?Mb|F((C-r!4mq=dqg4slDapZID}E)fpB<N^S&<NBdY_igd*-u9xNEPTeT1
z!=c5dtxx{VA9-OrWU()zJo5_!%MQY30IOs!{MWELqfGJ3rGQ*%Ra{RO^IM6IC)od$
z9$M@hYeWaninUb!?6LY^j#wSM;d?3-vP#%}A=Xg`0rwRzS+gKbO0+7S?du>dMYPOq
zV3cE(AN{V&QhzoLvc)v-lSSt{oXH}#19>b3Ljw=;_hwreQD6*INGM*Hp$XGbYxU{&
z;R({((}7c7!0P=q>IN8#yynNm_oh=fT6@_!UA_-Ew%29#FEq)s>(sOnz#zvN<ZH-Y
zRg%|qhjYO*pVwxIp}5zHme!%kX*n4Q;8}UMC$N?N;pl04@N(^deiInp3OHctQy?O{
zwh~^uf)I%ML+}wIZ#u=BzB$Qj1#kGeRP<P(9Re3J7DwIM`}+-J#k2#c;rbl*zXA4k
zLHD}Q!RX7T#L=Uota#NS;^MuTx-KcPe~;SjCDr`gMM?g61hp-|;4I>pX4&^P;0R@-
z?w)feZ6m1zRM{GDV~oyec@$gdlM2-^ZM|r_HZx_a4Gm3oO1q#wD;PdZY7>@Rwzhv(
zHMoxOn5I3*6@Qz1<YW>qBf~D%s8$r*8$6Gpl1X|vhGX)ZCCnmBo+-~F2b?yy&y(&+
zm02T0$&+56Fbn#`b5zFx)~&`I*fRy6*W%$p4(<{`(t~!O6z1VOoiXOKV%mXW8AfR6
zr!CaMy1IO%o*?SveT-orEAz5bA=N;>t@fDF7g5(wd<mAfTL4I;k`(I>*&~OPFRUkz
za+n%hMM=8n?}mb#d6m8~+D8>AgxtHRPIk~>Ws!JAt6IsdQ=tEK<)QlGn6P^MENH@9
zCPS^ztByx`Tkwl<G@2S#k?QwzxnV;l1K=3%wZ{2{?{3X<frQ2?yO;9>UG)LmNEi5q
zUr-9+Bv-<XeNLk}aNHLJZGK@15`Uu6b)Qr-qv+p)KU=-QfHFbIa1m^vZ!OBdTe?=0
z85l#4ZIUe1O2?xyJ(I)>3%n^{VtD$vu}&So<SGIq<`3%5`_j_RTBT*@>He}fbEAw`
zer{B=WKMb;m#lp_wSm90MmUg^qRFQg0RxBXH{`nKXY^Fir~g4P6Q#6~#Jq}7cPgH{
zYMB_m@>ZQC3lbw94c6DoA{@xpq?*L4>5B1N8$VsmzQH}5k3ms53bq2ON4OA!^UQ`f
zkp?_~)y}v`J^vfrDldy|PV!!BcM?IzOqJT|R)QSyvy=avu(tZC^-3Sd!&cIz0S(d`
zEHpQRSF6m+#DFv+kv@bXk{aaD5SrJKlXPwNo{Ink_J!o<FD&5B_Rc-{pUnH9P5@Gs
ze0Vi+3-fM+b!g;{_-5WX%J16ie<qFPb|#3qu*8@)v(SYS*KRazTL4)2$Pp3NQIlHx
z{{2Mwt|-Vmfpq#7FbYlk6U!1|)KjxYoy`q$(8YcZ{j&+nMyBlt#ufvcPo;l9_b;@3
ze}?Mky7xtSfNnt$PjZbQY$^UXa)%Tpfk0C`rSpL7ad-)$ev$$gvZB)+IHGvC0Dc<G
zuw#w1oSSPg^O(r(<C)^;BKETcN&?(P@Z+S%{xb(jEfPt7j?)wQPAa<MRE}WMO~NyD
z-No6&E852LCSQgv+7;6>Q|#6w(Tjud9EcK!oJeGb@DxCP&sXcw8T!cB82o9qH>`*Y
z_H?_Jg?Xk82M7<{8I%JC`FK$ORjL(XGiHB@yw{J(Yh-Hi?{Wd%H3m{Q84?RrHnz!b
zKU>tY4@RnK&Sd0ai`-X=N%u512v6s*`Uuc6DAbTA#_`134i78b=cZZsKV}Boztm*8
zN^SSt8pj7c^Z4_H{~D$zelp7IB>_2C_}C-!CW5LZqj(FrzB*R9%F37qK0rlUu18ym
zmM|OmJ8z#h^MRtrXU~dt9isQ2CVG-=y(bDxg1u$4{H1EQd5NP|=Xdn1KdJ;98QgAe
zQmDjDFJO2(iLK+`7v(lDd8v4p$rYiUqIb8pyGi~3%0cdkMVot}pZNNC_23D8Ou>g<
z*(Jlw%Y*d2X2(~sc5yHkp8611_TX5%jQq+3iuV{3?SR)~d@vqhB)TEEkaqV`YkP+O
z6av;D!b5#DSA-xoa?gi^T;ax-DJ`T&nPc~Qz%};|7Qt)ZIx*ym55Twj^C{Kz#GDc}
zEa2Lj|HNgF+EjX#Sb6Nw4ko1Rk4*qv1n#QP+vU?cy-gT3Kefg0?{6sS#%-~PY94_@
z_!_H(jqv>Rl#^<*gb3Lj)!tsfWkK1aRvTr)i|q8W_g3DLRYC1Eipzzode0rWPMXNl
zVR5y`F8#-n-EKHv$aytFD$YpZ(I=Zd$oM>ofc6&Qchlj{!yj6DlXiSKJF|#}RMftm
zQ|1P>#7%Oepnl8op#z{WfQOL{srOF?bgeG}Oys@-;SNZK%jrGBD8)PBtFbWrEhL~+
z@_-qLs(-_WTHmW*EN{D@r3QmKe%<X#fyA9~naSuP<pUJ-eF$eDb6vL7H+-88)69|@
zX>C$blho%$G(*bVF6o4KM4eX`zM-MZn}1%RSVks=^93kSz#hW5DXXwbFR@Jccq&=q
z@JRw3qZP~LXEUwOvTyo;ikjv5(-$H^O@yQOw9E9uUa*{y@iW@IwhL_jXrV)XLg@{)
ztLBwuAYtP1d=WhyH;UyA65=MHK6DZg;QX6vQkAN82pq#CTD-Ttri?vqQrq_CIzjhb
zVB=yDzggBXG{R+XhU$BUGt}E0Uj*dmE)e+uEjAtfuHYD*I2_o1T=uWI3GQ_)<0FOt
z*;-Nz`hNc1P$s7%3g3x)lP)^}I0M9I5;8Dsz@oO?#zYO^Rs(Jw@DK-QWpbVRjrPbr
zO*pU7WmbtFCgN0OGiA6jxRDo$;FLkmF`+>6a{bRF9`1OETF#=3tCj1h{9?|cn8Erl
zxqylSSTv%M`hnWsmbPq9$(&VDDy`P{U}nXu`Qn@5vlt!C?WlSC8%f-A(s~Z>F^du3
ztj71=Sx(2aMu#AmIO~CSA^>tB@3v<DxSvICVP!`q>Vb^aH=Hm|ut6=^<0UTHc#a$8
z#mS=2)yzH@p4SbqxqeJyhIxZ72f{0mC-8Ddo-D)tHhm4fYze2<oxpTi<Ezaat3JSq
zLAuU6y$KGS_YX(f0|dz~e_YK={`%Eq<yY~{cvNxkqmC|<86otz%sG)Q&*m-JdP}KZ
zCLZw%k7aO_1DW*gxbV!8JHbl79g;s@0$J$yYGW^4O|BkqL9QeZ&O_o-ENLRFJUx*f
zJsHC1k{RJy_FqW6NYEXDuibfwcLq_zTsf*vBU|Zpl%_B^z+R%u{h*=#o7p_{O~nA?
zDxc_67-1sv2RBd0m7Df&@9U_+a`RGl=KsJPYbX?Wmd4Tpc551qk=b8jSWzCwdqm*9
zz9K!Xy1VwJRf_`S*n^D?Js78puJzodVLkvmK*Yao>#!ffBzAP*>L)mr=wzZPF%Boh
z(B{D3dMXj@W#MR(G02dCS$BWL{EmW89Vhkr1yq3yu)hl`(sMZG|L{t4!p`o?uU=N|
zDC=Ukx+}ON28DVpu&hS0&}p3<m!}2F#eE)py<|ubQQEhR<95n)tn_-$U~PZoX93Ok
z#%3!@B7RKwF<YiuxA9xChQVo;BFgjp--h*!Ij~o%h}dAPl2_z}pR3b?+;Q<h8x^__
zK0J|oST*ddL=%vr<zD({?+TFv`VRam#CCq=>@;0QE|}pm#Q$qirUuFLQ8mGl^u%!d
zv;;%`AzXNC&1QWgW2z!Rrh1j71z7Q%R{r@;{){Z-qgc?C|Dq^_&|D9cWL2?91D}~C
z_PbT2c#AvZlIt9Mh8$DxU|A|+=P0X46x=vHm(#O22vCWbYeFHUc8yEe8tfngEXGDA
z6QW3#cR|}YR2sdx$LDrnjU(iZoW|_1Rsfl>%4*ZS|3A)Pv-@?ls&hOSB7&*dFOw)<
zgQ!7;!E$22J&xpa(HRfDihpRnQ}lEaxlxHub5>qy_<?P<4y6T158exD(>DZk+WmHg
z(|%gw(X@IB8O3<Rv-wuE)hR!ax`~WVrtCv0>qv^&su5zuP;T{4Y-4on5X3*#zj!Wj
zihMoxZDSTn8$VRCP-hZ~`5Tf0s)R*r?N)o&t`Ylwxg^#Ex;2`&nK*%9y$d`1V{){O
zRTdNMdM0WS;l*eTDWrZJ1N?w%W>>nHaR|4x$gQJ*j%U1CkeO?mdhlT{a44TWeIcGd
z+rf-wFgNnkT$x%;&u+q=2$GFL{BYY=U@$B-FY|;_Yrrg^wFc*Skz0%LGic~J_bmgP
zPY(LG^DlRHb06)|-oMzKT90e6%L6XhtFch>;#UViytG?N7h4zXrJt#$8_4W}ZVu_5
z3yC$%!<AqYujCuiFOO9W%=YCp7$DgbNi<u6Eq3XdlJUQxJNq%%0jT=uV7im-e{qgI
z^|s7|A@y~yFz<SMrxjO4Q5jj$Va=Q8_M7XGw3baB@<3Ki1DcRZ`tGRno*eD(+^nQQ
zvGYH$<K{F#BCG-zkr(DF4H3_cQd(JtBaZ3JL7f=6n-IS)X(=t7uS~7lePU41*mnib
z<X8W@86qu6$;5(MnBt|>0Hr3!;&sQ(5KtCUoa)2YlCs8Ad)S_&Ft#%16^GxI|2mZD
zhbhYd;<3|1h^`<bm~2NfIJSTB;hF!3-DP!NW~Dx-W`%~SR$6DuIA0|;Mkv1%!ftxJ
zSt8PL4nv2nWo8s%y;Is8^2ZAGP1{=Ox$+MCY-cmb-u^H^*!}fH4uq+aPICnZD)Kej
zZr7vJ_=)&333>onmGu53H2v=}rb)MNANWv=kXoZbBG3%?JlDu*nVrl!p}UI?+UOG$
zO>4uZeVvy#4%oa^UQZ<s$ffC_YIUP1k;0Z>nziOp+dl&<J){$9&A3wpMHQ>3HRrtt
zlUg1zCdHW>nNgM8j)?*IAw|#Ls-*FNbr+^5Od}C-cE-ElPZ5{+m4}$-v`I^Ota8#j
z;i*Sg(E21RR`5HbgZBZTm*?2pFIhj`j|5W48D(7^jDh<`xAFqJu$HNf8_Q4&?-icI
z>92&HE)cmD3Rx>=hdPxe8uB#;sGvf)(ThjF640t?Rar$84y?mlwbKEH3rp3w?X;{l
zg)L#ClnfLB(i&Mg2ES1f&hw(}bxJygu+aaGrodsg$N}?M&l|~py4u!yUj`cl+}^w_
z6V1ZBP=$&B@gEFM2VM@xiKAju7Lk>OovQwb6BwZVX~twEj`7RYqYVbyY)tXDP4@a*
z0{P_~HNMNuF5;UMqj^s+Lj-LE<d)&;@ucSYSIv*5*=g0|3^C;5)C*wxR#V)7frQxp
zPW{el`qlAE5FVpC{Zc*kG%X*Hi%($eN4NA)idJACvDmPk6VwH6K&Z)=)rz){>H|h~
z#g(i&@L0ODV9L<zz^+cI+C%Rs_&rLXEbI6%zb}>lQ7P*0{n`t#?TYhNX91%bs59e-
zptYf9Oahp0rLl0kqqTuUN`N=_Jh|APyQALD3z?o}C5mV)d+<dp?&c8Q6JHcWPQ;3V
zT&j$M{y99t>CwqYdpqZzzAtBY#l%%j<j^#hRc57}k;H@M_r=7wipx1p$nU|GeX_5&
zD=Phdh=(saFi>HYuUvc$-yMY*`Ely@nt-VZLG?dbAak{@mV&@WkH9v3Z=+pQj6j#{
z3UQ$cHCfw^#SrD9Lr^PRxH<SAuTc8LMcIM5MS3{(oHeN`oq`;2KM*$^0I}})+-52O
z_Q3b+aC+AZoR?XiU<z{-I2#p9S~ai>F?T%(p0o3F>Q_E`&Gq5GkNNX;KW7)>E?8GT
z=uZ$^?7F^PPww<jbmrV_Vyr!GV!AINYK(aw?%;dxRAvPVgwMCO0n=6zeveo0FsH|w
zmh9tv^gu&hacOvEwO7vFJam*GilH(J!k^k{2G}K>Nh_2f^5=KHdJhmN`>!VNLxhyM
z1*3%z#p8x~Uc%Acqg_k!hMS2|I1SS`Bgxhnm}F&&TjSnoKY64ko4jSd^I2TGoBd}!
zFzrEialhdDR-1)pdje}X!I9*5-5gaR&N20e2f7KeMt%-6uE{5t&)v$Y#O3y<^oTBH
z+Y#o2an`FUfO(cNC*B{AC1C3APlQ|rZb~qga|=)#Q)gChUKjThyyPHv3>r9M5Zgrb
zD-Td}txMxQly5vxx0xJNJOJYo=82bM8OnM3m*I7K?|SX|J^gFV$LFLOm5h^Cjis#U
zmB7e>WX#3?tH*I-0fAY#rZ}071gfV}?dvU@D;nXYQm36k3w)iQ=OewK9Kc^180{u^
zOdGmIdLQ}&4na-!<HxQ1w$@)^(ZlP%mXJf97{iGvXh!LO1P@?<T?Cf~Ib@3s1Gx3T
zw&-&Cet7CHMhCPKC_MQRiM?~}I9!47>!<Qvv?i<_9^yAd3aq|uy=uNbdJ{!8{M!2h
zgzfAw(ai>6xXy2LtmGo}LbGL|5tCK1Z}_S6Gm=Yv?S^vFK674-leVzRte6~}z0D`R
z!O5rr9yN=Tv==2aCuiCHD<yDVL@5`h+s0Alax-+(ePJxzcNm;_1aa8|mR2xHxcRwm
z?k9dosjsL<*_3~4HD=7L&cedAhD2?CxZ%fbgYteY)b}7L>IoMb@_m7Bq)BFIFw(^h
zY|+dVDLd>7ajGxo;*?nb?1AFT29r;<e7jr<V587I;jWqT#5FG)fK(+@MqfM{H+T2l
z6nt92hhUWJu-cNh3D24H<e(&|u;ZAhf_TBWWTrisdQLDlB;j?wwnjZhGp;V;bT(Zv
z1+<fjdf{ZY5x0o2qKW_-$i7_@PwhZ=aezyLE>@@S3U*WY!^khsh7*%?3rA0{MCk^6
zfP#6xycsPRdW~nq=5KZ_xdJg>WTdZ13*Z6vYNe~ND-GiOGwU#f61V|;I>GArCTex?
zsyPaK8bMk99VBE-ggAHFV!vaGzRS7e-2a%446ZjWxwi)mSU77vsM)qTjH`AL`=UF0
zY-C#WJ*xcN&{w@o7s7IJv+X%q3NG%uEbnQ78zFeAT8?65I1zsCffkWJy66qsc3X@`
zd5q@JPmFwva72jrA8<RbUDUVU>qp?P6eTyVqkcaQuAky!Vygs@G=-LqIUa4}0hI4;
z!+{DUFFSZuRYc$R;K-I}!LJ+6k~OP7tl4@5F0hsn_`Z~0avOlj8tM^&HFsbFoz_}N
z)O?IL(6OfBg@QSMqCv8taKqv0u^Re@0WB^;M9e0;mi`#)m+jZ(#2%;+XA3`+f+c@!
z|7v$iVQOw)f4NzPQ2)uSm_sbz7jwS1_tsNdjoL8EWwn1U0aKE5xW9OI8w1SO*UZ9W
zipfx8!=3c{YQkBv*-MXizqy<$IW*!ehdiMHw6irUhgX8-m8S)i1&6%V5Y_%Qnzy^7
zENjnbd<nupUX+UFgax%mJ61iDS-$CYW4CWkA_otsi1(9R_Y39hIM@*}3>^q~c~I7f
zneX81{RWTPMn+Nm<sjDO?z|9^6k&W=g)(7Mx(!K;g-Znd8Us1gj}eC}3W_>`+v(wt
zv8q&-L-WdrEO|{$pC?XCqN4sd*~`B@E|no=^tl33iRg?e@C@PazByTNRh=vwHEuZt
zaLmsHxvAk|Zb9YfF}ROPdwY+f$={__aq2kGAao&AJwg1F^fA3^gqXtP*EK6@>_1K^
zMf?^7d#~AIS9BX-s{4vo(T)dGdx0t}bzM3CqIgR3CAd4qrwDNodcWu`6IDk81~;9F
z0NZm|kG?+u_*YRE=1x(;HLOxBqu*=)pbaGXzFwjlyAQ*(MvH&mQD|`ZH4GAq2dFwy
z@S6k8^0{I25rsW0wo>aWMs0RFx9AxJ6ps_Az1XXXRXY8(a|WzAght?~mIyZ&-BlMe
zI@~PJd&W~v>>?_6#KAPy!&M8Vo_b?Y&L3SSE73`fqFvkSJfbz3GdzKkJ&Be$T{3V8
zhxFkRq1QsjQ2`Dm5oQUVfFodaM`fXD#BW1h<$gQlGWOBIms#|IS4NzuTA!+q;4o6D
zrGPYA&OgfWfeM8d@&YP_p>_FSN1h)LPv6t2M+UpZP>bD$I{=g;SF#Z<GFxM**V<u=
z^Qb;W8XI!lKt8l|MwQT(UWT>H<9JfHVB8zl%}!P|`w}mCrg-U}khx#Sp{_qDq9%1@
zRX2{gzr=vZfd2!N<12h_%Q-mpooWf-Spbs4@NF+)WfFt)q7Exi`%V;RV*~N2N*rTS
z%N7JCoQ(N*qQsvOPXL^L{RTK4h6YK<Qz|iFcIhntni<Km%8IhFyw|P{^3BViK)k`%
zbY+l-N0-rngUqhUjN1Bom-z@gOm4u4LS7mg{__5F0MGuxis^ODZ<xOEogVl+-4^?V
zeTum+Pt4P8%**n?-b@Y8Z{PB%)4{TQgb9;mq8sG@hbkQTq%~KItSDvBbW+u^jidum
zq(v+TwaPmKl;Yy_xmy+I8NurRY!WJGcfy<&r7F2%^P6>Fb5R7B0F3FV?0>oW*{_YQ
z9>C>N07|{gq_Mi~L#5H~-cQ{7pSc+DE^+}2C1mb{^FDzs=-Bn`$zYrxPpr7YJlO;Y
zv&^*Y5Odr=;!-s8q#}O!SfaDaw=gq)hZFr3nWu9H!_y0Y&L(m2x-f_YPhkdWb_<g$
zD*dL580;_>f@}W|_~y$2BVBF#9H9)YhFE^n5g4HD!?|C9feyWwgFzpuqfv(ThSjEW
zW22&vJLsUKr<j{rNj|9$CYcp9t8+G`_Y{L~B74p*7!81P;rlX-*SJ&Y10#Olk5Y~3
zW??9m9h<DAhQaF#S^M|L*u%Y_5c=o-K01{savH}Q2S5a*HJV-7U<c3SVF;R)lE{ms
zCB=Tz`YRg7eZ0rNsoXU{%r~ogI-S}J7xF2mFAND=B{s2M{qT$#L(U<W!G3HTXP$iI
zGCuAfkR!3=mCD0v_Sfc`xL+3iq(AXK38aF*QZ|6?R%lUFq>4Ev@^bPESx5vD?50S1
z15qeA##U6Wk3y6<yl{l0<D(<SA8j|)`z!+p10qnBWxck5hR5&HDEGS-df0jFZ-=`8
z&Fv36a#hG3NUv3KXS{g=G?@(xdBwhRp&Mb0S?oyw!Hsrl^kxqkp%jNen9J!{XGE%*
zm7x%51fa~+EpEN6Lk&BQ(OV`mi1bytHKpLDr1W4mYYc)WZxu612OUVagWZu5`%JzW
zhn6letb_1HBBCjp^^u@Y$~Z<n(e*N!V1272tZA3pDGjkB?>frE)lj{Ns50&1U!$QY
zKE(nShg(q$NeJN?0fOKs;)Fm)etbPmSjaY7$~4>^{uVJiC*rEODI-&!EZ~^)*}Jcq
zXLRL2Og7%ps0h_Jyzq}0#~EY_L;ZM1VBQRMpK1!Nc`lI8*?rl*uIh{dqJ9S=8>gi;
zZxG*2Yl-El7)yV5FjmrL@kRhz$86$ze+N;~#hRbij>9EZjZ4Dh1rEnoI|9yWnW%Aq
z2jtD2@!#?&zuoyZ66XT@Tr_batleK!5`HP+0Ij@bqTE@|Sw|2}A#&7l2ovvVyWK7q
zRp08%snp3<8YpwHK)yNaZ9Ux^bmY|yGM@}L3{_7;k^4rz`}q*GJ7bpWH6nLayb!l1
zV26e~%HB@sL)1E|F!%U!e$PyokacdoS3;PPqKjg7_4H^am-Nli*ZdbGrVZ<P$*$0S
zhlSX7CR3RJfl<oIoB6a4&x77%O(DNehH`Hzu`^{cOM0AoMN3$6YD1@#`ltwA=ao?T
zGXq@joO((h&wZThBXXb}8HsrRU|$u+Ws*z~J@I-J-sX_U7fL*uAt~@b0If@!#z^4;
zk5$`9=iBT>75fx6drYxm&Jkm!km~FyDzd(!eIkRsHj|h#%jAgsdV^=It^}WO3s{Gd
zg;%TN4Ihe!`)k7z%P>7usJPcmJr{>L<kxx=qEV2LRtc|*;FEM@`q&UUY;w)m#Lw||
zB3}z3mXSxLV-59B-Reu8KHvaJDh#TtRcuLJ5bpyfH^DC}tlQKgw!v6OL8f>Sf-~1^
ztUBR0TYcoBjA=x|jdidnPO#EKK1o?;2ggqpZCIpK5xmhRX>Ih2OzREn7sV5#wv$;i
zS?p6hiQ#+)hvqZ>NAop|YjNO|q>f%KM&~>#RpNVLx9mxSCTnG3_y<GB{o13-s|-e*
z$clM)tUe?NZ5z^iYbQQ5wWUA{Gl3$Bupvc%L>`M_UQ5{=9I*tN7qH|nfnZMy%A9nd
zV47Q?{N7V@!B$Cb8mk4~I%Cn_`VE@;ohPa^%0Xntu1kpO)NkFlX|;(^=~Zk%hnU9$
zs0J<hy8TGEQVS41?3%I)u*2S|9ac3X0M6(oyP()kckxgPTeR{Y0WzuEuG&{PPhtE0
zepm<y5z|2MS%aLq7~TNAmSf0uPaIhDLtuLD4NtmIbH-S#aLVAA&3T#Yu#v)V%>Bob
zWU;{;c#J*mZcs_0*F`S|ip5|JpHQy>JlTiB4hCD}F8l#T&jxH3BE55l+K$v<l4=t3
zEMYvvEz&|FJ?dpxFL_qhpWjH0`J6Qe5LzM8Id%<khdn0lJz_5w+%*@MLY9qgL5Q;P
zf`JoPdV=>4N}6HpJ%(b0Sih6e4O}iYzH8Mj!S(UKaHxVqFmh;kD>-dp{X)23wgU&l
zwXMpfrY%)1K}BG8Ms5DI{>W?dXlyt|__p)klbq}P7OpU?<4NiysSM55Ixj2RjFIL7
zUpTBv-pTpRGom6lwD{_3{D2{$IRz7Niw*XYHKw5Vyki@v9R&0O+m<e4-q+l``M=CL
zV3ATVJ!ka>skum~F-llY*wDa5Z}7>I0QGMOQoU1|HML%(uufaWlk!G-j*J%3W11*)
zd64)PZ|c*G%A?sL9|Ogo7Io@nj0}SxK^V+dLEPc2;2#Ue@p$}8oOMoo%G|6)W6(f$
z6`*9p!%gJOfO}5_GCMAvpD6v-I=46BLP>wuv+!KTwKhk_d0;UWoTUVMng3g=CR#)?
zr{@kZt6d-oA<IWn4R-5QYlhz;UoG&GRY|cCSd+;-T;!h^1aqzBOc_wSJz=1M6SG6B
z`Gtod1}jSxDmGnggKa9&Rz}RronGa1;lua!y3-qP8Ripe!m=H+zq8*sf_k>asr0p!
z6#?{$7Bufw+p6XdQ1D%~7DOAhN4Zf~LQ85uQB*{#jXX^MRwL4ujuHj~Gsm=%+l>SK
z-V!+JIa(vgUb<2qY^K9sUxXWSFHUc%8>eXJjaJM{RC4lMDe=jD<XwfqzDEKo?%!Pe
zS>GC?Tnox6ze20s#AnqLedK3^sCRJOMNPI;x?CWOFu^8d3Q^ykXc<!&@QO~RZD;Tc
zj|I-`8C;tD_D5{G1O7o7^9eA*P!M9nZM86PFmWHOTq;jo$#NRk8m+8k(d+q4!RQ8H
zq)C!P>*_}0{z_$_mzkB{mm&v7aY4zY*jXSC{6)@m0%vK8z)GUYEUc7~MPw5)FD~kB
zV^ffi;fr;7TlJh(t(3h2sefcDFL1PL2GgOG-f=_HZ*ZV&{QHs0mwW@0tU-Z0`is@q
zl0v}?=^>tyuJeo*5nA9U6{{>G0(%^=qPNvOxzbeQ+T~2+8-B-)tDLiLx2Nh|f<kk#
zb-E68AX*W|`g3I*0lDbF603SM=iN~OD0?~44XQ|e_Vr=TvHP7G=8ke9emlVDsFX#;
zKbRgR79d~&z$+2E*vZ{0#gO@U&%TKd2#PHP)A0(k?7c9-?Q8M)XvnCZ-d+C>|DpY!
zYBoo)-Mx08p^nlKe%*U{zAJ}&vXp?(i&Kc6FCm#wuoVgQHP@pr)-z1J>T2o?Qu~qx
z_RT_s(SHs~BQdv!)Ukc5O|Gg8c1dXLYRE(UYh<C(T7HGR=5h)IKYZ_iq1JtChXf5Q
zQ2Z61zVID;dnzSXfFzy0&_1Ha*)pCmRgZF8NbD`>Qg)kK3~>(QoHWVd4_IX06gTQU
z)Bqi&c>C{KPWqb&Z{z-Q!$_yl4yy$(BqKE%Nbi56epOw!q^``<`AjokZ#rWWkoTwI
z0v8B$V#2Lq9I4c_V?A~McIJKNQVZ$s7Mpl87QUa-xNs&MEx61M@Q=w;Qux_e3+Wyb
ztZS}&o6%Zx$!aUi6cvE<2qtQShJM!FB@kO2GGP7U&m;l}ExD5h?;GB<DSxesGlE1}
z?}%F?l_H{U-J1+jq%mx-pn?%rW_~jt1olod>4t&YXb;~7{f0+P$p~~$kqhq&97ceH
z72d2pJvoqtC9pRABth;*{+zBiMfA;EUUtRdD)MvAZ5^-ntP>{#(yH(G7r~Yb9DQqX
zP}Q~oq7t!vEESwThcs7N2p|h{avS;&G;=TlmbX;YP&wzx`#Hlp_QV8N_y!Z)IS=Gv
zS*<wyRg8x))WG6)wnpq!>+4aQzf_YuzZZ*>$@g$xHpS<Z1#11QhMoU=+N7!_Fdvdd
zex1q>^-aBM3Gop$zPU*DHS3$IsR|m{1V6NrmmdIN6FDt-Pnb}bEiZ`Vk)Lr<dZWYo
zVfKSAj-XB;59rFfA#9k*5LvD0&j-#8vrZFaMd^y2rYQc5@eg?_n!Q2Lfw)9GXU^lA
zyp`mOD7F%ZRLyH>MjtvC!U*2z*3(D(^k55|%UK{51^ve7x^-e>Q=;!mYOB4+k5Zm@
zWwu8(v8;gtKGQq~9rj7m9MGc)Y&;X3kH90&(t@aD;&#a|)O)a5BcVLD-vS5GxU_j)
z))wip9(0milh2gL*Sgrek8w}B+OfPVEx9SL``~XjMnpXhI<T&;Qq@*O%9}N#@zULN
zj`4>L#47%X+-;9f>aJgC^i?o|K|iBp1Frnu@?nP(?Yc#g5ACXH-*1e&QBLrSX4x8S
zGh#CMr2_}`NW7ET!jSYyy8^s*$$RlZO|2uZvDEJ33xosMeI3pY|C`a)2duF4LBqhI
zu%l_eV$S|7YWn<Ie9z;_xsb|?{+GjK2uK_aiUm(M&p|vmbIh<R48f~rb65I+984jP
ztKB=gD754yO*`GE==J<j&Yi^>JCDSdXvdBV$t#>w-Q0{5#bW^D6LF;XOK5<LCl>DX
z+7#=W_r6Rh*B?8j|Cr|9s-rzIY*M74yAY_b-LdYJFFTQqF2D)S;wfCg<C5Ph_7Awv
zJJ2Pt-#_3FcC;!&{YY5uR;olFj~CF6K2D{o=sJy7{N=>YoK*goiB=5>-)+Zx;r(Mq
zVravw8F9=bw%TA*huXE!)k%N~1__sg^vIrm`UYcnsZJYQU^G_E`j0!CA12~n$?IsJ
z957GN6LnXjW7vL4a6pOYA1!8$9-cDOZoNU>Oq0{&Z<nYRvmOE5#T=b;TZ~8AH2f1y
zRI=xbeBEkdvA2knvAuu93BJK(%Y^TRa+P*SS}O_9T;WiVd)a#+_?=dF`_oe2A?_m2
zO>Wg%yjG|iHzFA7z=IL%xYjnluX&(0fxNE--S52pHoPz8p#N#j3@rBPU2B8(1^Rww
zD&~!<H#UxrL|^=9tp1feXsRa61h6G~9U`P8uNrOX48!8u;A|L#jejs|*I^@sG)`gY
zwjLGY@XFLN8O&UKxId^@SK6@m{%iY*A!XDQ&Aw6h3aw;(x#>pT6F)JZctV^=6X)P0
zV(?{m=P_Nwb{i{GJo|s2<BS0~$_(1L-_Ws6TB(Pigi(nqOtOaO_#4@=H4)_I9FE`Y
zy_ZR!(F&-1g)Yf8f+=dc`y-oHiW_!&*_yBolzP)aRX#=<TpO6EmFRP~tffJ;^>D)%
z5-j<(L~jBMHxDuH*SdmQLk3+UaPJb)_FV3Bo0RvnFZqyBU}loqNTp#vJGxntcIN10
zt-yB4&xootBMB1l|3_RwqX?r$xQ^%o%{8ZpoL=5rm4d(iK>>m<VGxT@u%fdU#(-G(
zK(;3k_V^{d2}FwDpuv~sy3KGfKd-0&e@^!NrKqGC4qFl^&?T;IPX7KdD)qx5fkx5{
zjw_HRTc6`auNkDGs^)HvWgI3uo?j9Q11!L28+{8OEoc(&hYH$F!-p6#ED|W+Bs_cW
zyPx5PRezWtV+VI;Ond*vXO-jmZ)e;uUN?5<sJYaW=TogQDc6aFnXA5;ZhAIRo6@9<
z=e=%x&eOJ}F{Q68s_MWUt}i|9@5AQ{MHkUdH9wBHHxkS1>5#guuH~C})0pR5fg>w5
zemt%l>>cuyMB5B%6p`~DInS6$2O3$|7BwEhYnz>Um>^icw2d}d9!uyHl<k)+4C=ZR
z!#@0-2F!vCg`!-WZVmyJ%{bSEYcm5H3BCBfrgWI{p`V8t^Sq2-q1aQ;fi*@{G_l!(
zF7{sh7<TN#8O@up`>N;D;*;BC(zfZ#BQxodXbhpHH%_u<a)yZvnb8R)Ey=5V%aU#b
z63%f=dn@qmP|I(-OLc_=M;u|FZii8A$kLE=+7b$1XJdi#)Q+bmXCqFo5;Y8nUYrmY
zk2We1jIoh5Ktvjbo5ZgifUhY|%17D_;)No_C(Ob4JJkocs{P2kSgDfx6z}nKE1N0$
zVdRXxVkleMT@Txw$CWB_Gz<etO&}QV2dRRpMSfg`m_&a$!L{$vvA<FQ=r^x^EZkx(
zWTTOSMCJjy$wAg_#HM*zJF&|oE!3$M0kh9DUm9-JWifTYA~E~$+EkKNIFF@8Xk0;t
zMx8RktfEwrHS>iS;(OU%JrUR%Sne&G_QB~_jd&Ikz-=RfjyQid7tN*PpIPc(KmGQb
z+IxYxM$*`_Yg*N2rnnm~o3S`gwU$@@pr1o8+n?A`K_NpD2qhM0HM(t!&{GPoLhn&f
z0T(XHBiEAizX75*@A+_&xevr!aT_;cjTK_Oa6G(6-UbQn_nq?BKkSos=_^aCenN-(
zmyCUq1hVy^UFP2@Vi6ILp;&g`V-R!U4?m;wk?O6JQ1`#Yy}^$16<BBDet+q(EUHxH
z>j>(xam{d9`_HqQItp=Loya<|pHAqx*?1+hQo^Kc5Bu7JsJQ<OCHu7Ze0s+(516X%
z`8>@mXjY%mNeiW{*xK>izxi(5SO2L1!IS=av<O8e<sChC6uzG=eB<OyE7Sg3OhBPI
z$8sg!`-2qXunMT{Y5`n{&DY1pZG^=kOr4s)cm(|>(RJu#mpYL0&3!@d!TtPa6)Vsu
z{@O?4%C10XCfq(Q1YYe)rQB(Tz=y3P&{VZp+txMyN*$0;2ksY9dz0A&9yGRwQ>wZS
zvLHU!3HSOOP!jB^7^aw3%^!o`f6(ZK2caEpAnRYK2U*XkAGK;ppI6s*2HuS8PkfOe
z<Rq{XcFM4ENn}BY^K3(3vf5bLxqwjt6EC~QuG7how*g5%0Nt>e-5U#OX6!NpNhr!T
zIN`r4g;EHW-v?S5n2&KocngA`&b#kJRL{f1zPlV)BY0t5lD<D_Rl<3uC3}-*FDQZo
zb<qJ>s(g<NcFNbl3{3BErWYB<-@ue@HOIxc{1*H?x9eA%7x=PEcKP}>!9+fz>)cDc
zt}^|vU+;H*qd;$}9-Tr-X=4ED6+CpEANFSgtZ67mHxI`5pprx{IH#Qb=kwuY0XCmr
zLpHMRjk{%l)i|}Q_64Rb{e3(NlkN7{uXuQtM8y%`n$;oOOQ)b()LuSy;V=Luy>onG
zK{Htf(HhA7?z;x3g5zMtIqB$T=;YVn**p)HZO<;qsqOK?;ycw?q_Mi&2lQw!SGM4I
z)_ETEf&3kjD0b#^_<XdjJ7HpJ=Qwhn4oh!h6DQCrjrZQgi|%0%hjYD&p1Y{o5O5$<
zkvMSy9x#!ra-12S9s`N_tXAlCM5P!;?~40W<LF6B1Q{m>cm&my_hHqU3+rWwpbo?+
zb&+^9bAPP3X~_XE+5C%ZB@JkYIm@R~emP;BTWY?Yn};6M&_V(j)ErsuvhT`HnLY#9
zM)n%&wvT+iSu~MZrU7=U4bo#Y?xPRe4I7i^INR%6f@0mJ`VQXTi7`X9aXuym>k9h+
zmUL@{+myKRoB}lGe;%vIl@DXMd>x>E6ba0wurz`T|B_+Nx$Z5ryGuG47@!I=(B)>y
z0T{FQKs|))sUSL&G=@7E!U@HS8%($Rm)irH-m1`X8oxyZwDLJ+)b{9UlrU~suU;mv
zU<uMS*$Aejj3rGFL;uY{$Ak1}h%^_>5zGOyj(QpR?}OIjADr0)4Xn@0D`ovZNti4c
zfdr9bdvH3)6z3e-kTd2|f_)fYRo`ZmihvFh@Ken#yJ~4o?8#g|Hs3MKA>s=C1qydg
z*j7>}9~F4+=*N;g^J>8|r^VL<hp{;)nCBn|><;{WZZl8Ks2-BJkkcF-IRzGA(bI+5
zDnhLrdl!?i{pawds2nH*G*drEAioFGs*4jj0Wqw4vK1VI%CR__jAOnXUy0rm)ui#e
z54T1x4-&4|nBH#lSuv61Um8!i)_&I1-`W0v4eAO>6UEA^?#V%U^~HrMl{E^_bFHjg
z`!La0@F$8~y`PY*A^7c2tU8a9bPk?Wsht15bZP0i0X8}=s^-w!1$=>ExGM^Wx5!j0
z|IQqJNTid1T86v54x><a4jjclXWJ0}&L7(moN%q*cMLL=r~pA}an}tyHJ!xqHd!)+
zYs^grR~pHOdnn3YXc+#&J=coq4CU{!xd4uvNt5GBkeb(o|LhqPal2PMx%N=DXWt3V
zy~^o7NX(E(k-`&Joy4(p?P#3U=J53#+DU+JU!139$caVi7m%-XAOq@t?y|mXeZh?e
z4<#ft{bo^RAz57<MLsAr446-wBUm!09J}2XOO<TA+|KY0`#4i{cGt?}THlmK3Axnu
z+@%b>a98GGKfSQtbFT6+bvnEJ5olIv)q7b!fe9ku_EW`+T^%VcB+7uBbP8L2p#kb@
zIQBd`u0J>C-H3Z#$q|{b%Ywn#abjz*bfmQ1o5XtKo34<bJL4#sb~;&q!McxD|D7jJ
zyt?ex)f!G^`&)5<Y`~?^G6@x@W8V&ZOQi_vL$3Y^>ehp~$kmX=da~#27-)(AKq?Ya
zUk`S?4P%Q;<c@`OKY>G}3P+@pC(qrb@J|72%tZsG5JTR~d@UEiQ_?<g0O1q6De6c-
z9|{pqWAdk5s>eyPA?p(O5Wrhv_3U>!eSw7>>mi4jRF^Son{>Sb3WqSAndg**VNAJN
zfsLVV^GhPF!bbC_bq^~EOdr+Hz!6+mrlad{@(4SidFuq{M6tMez#@^IV}i2WB;7aF
zg>N?Y@O1|+;Ao_CmTh1Bwcre?1>u1U0R`;MjcumI#bq&gXQ+eIt9)92-r+`~or|E3
z<FYY~3Uk_{1ua}2m^;!kVF<m%i3^MqOIZ;?DCY`Q#QRZjSt<ziouRgZf}W|q$N*nL
ziY#V19wj3I8iHz8aZXf)B(iG4Gw2)R^J}hEAloPR+QoQ1#V@rC?WI=j#Vdr~TI9}%
zu~QnA8CZIzLkk2TgmJo2l=`qWgwU->ug8}NH#_iNevIB<)H393_EEpZoBjF|Zb)XL
z$xy|2jlI8Vb2bv4ccY?tWhIDU*$hv9b{83RQU)f`r;s}E_5l0(1m@IvJQKFLhspk5
z<Lqor=Z>A5#;f#L=f4s5oT_RVM$qi-#_M|9&6fx2)LK{y&v$-v<rsv?fsHzW=rRG1
zwJ<TvobL(|NnD=$_#NKu?}YRMKXtn4_JZAkw{HmcPD7+}m<mk{B|s*x3NF>OeH3=*
z>w)cTu{wO68Lg%G*}6{u6R~67oc*|IJWu;Cqo>uX9uxu>hlXxG4QeE0;HDt`5y@DA
zgK^Pdf_q&7IpT`HkHYv)(ebYw(4?wXz?q+x_oPIlWq6n<{dSM&y}&1TR0M*);?9ZU
z8{1;!trgRx(Q{P>wR$3u;Uh1&nd&OnTP&NNBLkf;((r!UDm(UjHj<{Op46U3t-qq=
za(T%CpD6J1lDye!-gX#i8Ax`14p617m-Jbvg@}^{Xm$|Da#q8(W(C7r*w;tr`0Wo~
zfF8Z#fn<mX8r%DvNDlad7EN4Nn1t12@2CtU<X*Ujb?K|3gOA3Rx|o)A(99**>@;pG
zTg7^EiG)riVN^XMgmXphfZf#zY{{3rS^uxEw;kL5BX=jyJcV;@p-5y4#AJ{J<UWFf
z2yhUN=iviXQ`A@h0LGxQtJ>PaF+J?$?}0muiFfu<*}BNqPeWljl8H(}x)9V&+}2al
ze1kX6vMe|{?Y7QzSDCMK1NH(nM~ypU8Ph)|kgX0_jY;0y2#aX=uh#iElBK<~wwiTv
zE>If>)Vz-=Eqh7Vp4077Q<?La`>g{o-QP;8%3P6X6Y}Wp-Snu_)JT&v!~Bgh>`(Bz
z-1;)?XyZYDFXj=5qi)*jC|z4qXNBeyHg9}qBHHL@#v<>02pEo3o*6)OH^9q*sew1o
zm<EMmv|Myk{;DjvP|I*SHdM!DISSuirN<*+5!L#C!J1N{FAj`r{fg0&uMXzPSMWeK
zh&AZpqM0`ApIRWKy(mdBW9&RWAJTmEpB|8dixAUJ<hxag`8j_Ah0F$$daiowD!WLz
zBKFmjR5jEc3aZAV)>8pVz^w6|`>sv^bDu!VfKNrNYy6vd*RLFS*1zyhkE^xlx(;>U
z$VVHgAb4f^Aw_gV=sg+NfYBezSOrTRtf0$To5XSOQEPx+0X$6ZBuM^6cQf5S4d%_V
zOV{C#1x6q0-IpgVL%KsDj9(gNVWfEz7(B!h`ko9-s)f%AFtZd&X`dxznlJ>us8SKG
z_Ui94^_i=*#PEczsadLdLG3soEedPC`x2D&_r0^gpyy?j4m9RJ@Su}Fen~a*9)VXq
zUOU{NK1I_0Dh?kC^}l$ckw|u`EF;BIDBWJ5CL*=5x>kD-;AiON7-k_cJD^WV{^=$#
zxzk3v5_`m!uLMBi5=6-1NG9J3Qb_|metMo~de>XYrR0=%dx)lH(qNwu{fDU~hDq6}
zW|RiYHe5~O3uD`6VZ*9R(2c7EPZbpo+)#m#27RNzv0Bu+^-GN(a=DLM<}WS1kdY>+
z-)Y(a+c1<eZ+miE#%yPZV+!ubaL#|>wBsH!f@|-mG?1|sprC+7LBi7IEpd9_*jlq;
z_s%BjZadTxMHaenv+{q?ZbVFow`f3ya-UKs6yC}3^t{3xPgzt4LHrc31aj5;?hv3_
zyYO9XBb(B{aykDcO-}ENR#>GTk;5R`y9SfrG%z${vB*faPW~#-&OuMHmPotq*M>a?
z<$BC&Ws%gQY2%0CiY(XAq5My}*JEi7JjR9L2x%M>TYy(lWfcd*7db_!QwxL9pRdxT
zp(MEP_$+L%sdF|ZEgk#u6Q(b34N>ss!gC<I5!LN<xL~jfix=$G0&21f)+=#rarMRq
zAcpCSOIl*m9moMwQ#i0+)tz0mOBQEd_y0J`xqP6X0Vwu^!w1R)XILoSDFQYZC(6gg
zMZ<V>KOYd4m-s6&{%pDKFhLk)Q~<?@E{Y_McR^2xJ_il$t0l(i$kqqu?oy2<mk6`s
zZkKdc6O`G3Q?-FAA9;pnM;#aAZl!~4A=7t<=Yv99bD@qGB#g2F56(vBXLAixWi1#<
zeludyYIjis1ncwSkxrL6hsHlMYu2b}x(+BA?wul~zx{>g-0}c2GAgviB&j53Ak^~q
z7DoTlpa5sIP~bL{DeG<058C$ZcztuS+3bf3@!z@CRuFpgB#Z3HbjyU8Sz9=l`@Gu2
ze*o?<<*vxcSr2P!X`R<zeR!<UQ%6YDvS2lvh=+kL4>B19Y6Z_%FETHbpHd*y^ID3c
zp2u+`<KJ|i^f**!)d~;2F~1C|3%?Pdk>aPpltjc2Vtb+`1D4$mQX9o8gOt3vmzdrD
z<2;8g9Wy+7YAxx+?#^n+P|%p~VO>jpoq4xNxhWGYPm1Y_dN$s_<M(j%Y(o|_B<!~u
zWj13*`p0xW6}B}(=3(PO+=4ug-dY}`eh-nm3*NRim#8cdNmgX8V%jSNexH$cUksRf
zWLoMA1lvw`R;E$hdUcrAHz@5wzrZ!Q3Fy$$E(J`Zg4DjrZX+OUN<-v2Ft>E>bFIs3
zg~$0hQ#=3B(llnv>V?i*Ro2!Ir_ser=7d_yuGl2vi0}%K49s0iPI<J(dibxbWT575
ztG$&axynbii1OOmHoEPJDQVa;o*aRI@)lN2tHY0toYYOA1=K!1!FAa&ashyFD|x~s
zqF!_6hDYE>h+4*{&cL&~C|{@%cfNEYbVXZ(V{T9!n)@Bo7zXdA?;g~CS`i#R<8B9B
zr=Sff4j+?MdQotj&RAXQcCuRsfI72qjEr2us$>K~Rp)_j7QMp@J%j9aNWiLDB$W-T
zkxHC*sPOGsNcI3Fo+}jrPH<0!WIOls>pCOLh*dMLw3s`E4nEkdFc^JPDDk1UOv<?@
zd)C~u`N5dn<G5TZpK75=iyz(Ms-K4>`)tc&spbJ0hb*1F0B((wk>2N04x7uXWGVf5
zoz?d+O}~mX*sF5SUz5cJI>2EBz$8+0B2@wk`r>-;Opkg%8z_stdWGrx9aDAi^y^{~
z-4M~+b%LMwA&UU~X86XLlTuT=4o-RQ?7k&%`+4JB(Fos492@`ECxoX2DhUCM*HAh&
zJfF?^Q}&uwm!Ux)3i!CcnLkSPvEz6EBt?(=@^*OA&WLSY4PwYL;6ma7i)!&-uB|67
z?~}6|AVkM6j{}b6lLwBYiSL2N4AzB_5`*mp-WpjG*-c{?tA3oy1uleBgDwB$-LvaV
zv*|upn<N6K(GDP=9*<@PVRW24!!e*FO3$tcrz)!o8WEs{V5$LtcAUMP`5xeS*80)!
zWWXoDPy@3YFaAK;hkYxsybv`r5y7FGOKZ%G;NJmGqfoVTGW((y@6Hov{aWnOCo&dn
z=OZt3o(7cYu#?r^vM<A1G{(LHd2d27Wz2F#^00v?6H4j<SDCkOWrYG1Z&8jw13kG#
z??lA^FjaF>cnolOwtdE!%GIzo{CwI@@fOK9L!n0D8%BDivB*5GGMlkajKiN!zExrY
zq@CZ#;b|P_B;_e5`e{O(>T6u)a&O}sg$)f<4%ev?GIS$`y(o#ZYg`P5M$p!Nk}AVu
zzj`r>F6y@?E<bm)rORdd+cZCpUmz$?9W^$BHIuwl?YJS#b)I1c=5u1LF$Xq~MK{;h
zCrJhNz)k&$?Ly&qg`#!=%<H${&hM$T=B`l^Hgg$rSlWQ)pJfX36+3@DJV}r&<mTaK
zKDjfJGs)WwAb(wg6_6U|<bGGKlj>ef<T3Um7(AjKp8*6Oc~Jyq^BY0nFW5>-MQReH
zeX2`(qE(7VVmPTKr4a8EAU@AI(q$?Iz5DdKC)AlZDB!3(FR5U>rjJkVhfV+0xJ4^=
zZio<m+J?^<bv;}feA;%zq+G;GPWr5yDCfdT!O_7-VGQc9mAHlY^zlw&!%fIOH9bn+
zE75iCZ(E{0Ylg0z;Y&cih)!nJ&;My2yyFFY20Y$C$mzud1_oj=9FBqSPY@Vvu;F<2
z<zp~-&95WA_@vv(QHHu}2<&{yR)|bp3+z(q<GFwFd$Xm+cG;<`AJGEr^0nyS!7yj9
z$T>Z|zXkf+KO?X%RP=hdM*Ey0Nl_ZoORUi1^tzhhg{7XN2|0SGVf^n$2lEN3>qZw@
zYxHA*LQ8oddWjcnY@x&-yljhsWbgN$P#Y|>Gbh$xV08}Vt^hr%X@TEtVkZ*`;0au(
zT*R0~gj6ul!NX2zS_yUr>iBpa)5ws-s<2}i;q6_%H&j+<K5P@5K=2KeLHrGO9YS3M
zm?$_@-k8UgkOs(nJoaB9KxkaTmQsS&`hH~6;!Or`4KV)}uRVW+pieH~Mb?UQRl7NR
z^Kxqcxo?66^Nyygh0AjFSXpPdgde*AgyxpRRIns8?J73NzwuCa*YO_JR!u48dI#0F
zGa{4=g{Z2(SN7OPaq@Q}z&G}}F|A}@5`n~fmpjD7S3o1qk5~N_h|R={Cks3PRio<x
zu*~QAJRZr#(Jg#=pod}@?FL!Ye3QX$(=`_@&>J}Gy`Xr9m+F&_<tF>Mo{f!%eKx9t
zITewe{r6E)Y9c)e4FhgE>p}F6xfGcWXaSROw#}=**f0c(Q63)?6a!vXK^;5M(ovSj
zUOL8aTrdYDU}6ow$%MFNh!Tj>y_0@}=blgbpUx#kp)@*H{7!gw5OZ5icLgU|-(M@E
zGzRsx-RA4C<GS)NAD#o|agL%&ebO}8sx^Ii9o}%jOe(g!u2M~GTN_6SapS3`F<{&^
zXk7tQHV_R3HrE%Tz<qo)nVoU#V*9ejuCO8Mtz&h(@_-iG;hzyLeCuLjEeTgqX3B{1
zFISu+(>TIV<B>5T&h~wXeS;{*7@o9fBTYe*?1t-pDd?$Y9FrAGX4>mbSvt=KV!h6m
zYJ5KhFrA`R&rn88=Ku%0)rP^|3Mr1t6OML&KqqY;52_)alGn<T{4`rR4JogiF|isX
z%*~TVAVGvoy9dT=du44G+1RqjnU7mA5K8=TR0do|u!SQ~zTb6x%>FghcbZX&4_?El
z9SfbwY$hN0R-WWX+s}Un3jN)hKPtWfdax2DLQq}s=6*t$W}dRf|7}o;yZ$TlFvlK{
z{Fjn(d<mklug{XB-Z|QykzyC?KGJb;17R3_cAiI4Wv5sDg+xz1&_H&00B)_qg?=Hk
z4ULGbZNsy<NR=^cE}LWRDEesrM!mfieF8Rx3dMf5E*EJWW&`p|6Jcl_Guligs!>{p
z%FvRj-S_A$EvET$Y;OG#(pDICke)$CPb=3qjX}($TP?x_zuw~d>9%mpJe7ePUgOd`
zjAl~lEK{U9M|d8KEfQv}hE@JKE4@aRDK;I~tZV)?Wj=Z^fjvrIXaFN^W$3(MV|xE)
z@#2#G<=8Yn-Njv*#M31g{U@K9CSqQox6$ZksHB1FNdNic2pk(LQX=`&97B4@omQK*
zC0Tp<9FzAWszzjB1N=uf(T6beE6jfH)QiP#;}_tc1LqpOi)08fRBTA@@I!QpZgGk0
z$i~-m5Pivuk!Avru$@T4hDk0x#dc_!04(!<QlfqruEjF;&r)*c`Xl;z1wP#$k&u<{
z7*=y@9Al~k%Gi<n;O!}wNOL`R&46X+|4vn!B#m1<dm-V6e7HsyMFK7O?~FS71Ts?x
zDGp_x9tQTWJKshnV9sdJA?aK2k$Kl};)9Q|C-97GAS?WJ-WYfE7kR0shfWu4ye3kZ
z8y*Puzy>bGYnmvjue?ybNEvvpP~37SNCXp@{KT(%aKR+5cK_HjWM9;p+9U4G6niI@
zA`if14GFYQuwxE(+K1YTOF`~@d$McN-2s5Td$5}+N*zeJ&Krst(QHlt#AX86^s`l!
zwv%pAyUCW@WYyh-L-<&@f_gSKLpSKWwS=gfzWszp7qHJJuF<3(kV<I?mr5`n&kdcW
z<P~{rU~$zdUCfH-%^&Z1`lE<sQ&-*1pF$|HsNkKDfC%vKc+T0nUB!qERy4$P>ZOVB
z8lqa~_U{TKmb7J{!S=wYqYIpRq$+2u+6D>j=_vi#?&`fOJt=7Qsf3KAF}KLK@!Tz0
z9g~z>Nu}=PoXp0OaSZaabwER;o-7uG4PYUo)V(szjpJ~Rx}S>}v{Hz;ThMYcGCXB&
zX3$UoB%}kqzBjbL9d5Jo0XBorFEzt8I&&7Wb50LgyoOPt3tqCnhjG7Cx~eVx5jzDA
zFMqlH^m<@bfSqHXDdbOx$*_D91ZKfeBtbuyN;W5^sr(R~U^A&pTbawJu(h;gkzHye
zL+q1uZmKSRpbPkSL_j^Kn4?1}1O|IXiDoZuxF}K_rGGZmE{j`KW4ERIsaVQfhU5&v
z+;p)LjgYof&v|t>(%U@Q1tb8W&`ZOLMxnB9#&y}?{iM(!Qlnewg-98?43+2^DA3E1
z^$i3vAKR?-0ZPNvQ=Ce?lyQL-RGp1dA}*7KEEfEg$|EU2&6swRakmf5dBhX#|7z%`
zsvA9E^?_~$PKGtFYZE^ROy$2}?~991IHng{Gg99#`XV%0X~r(yuxS3lG;wll{4Swl
zQs=sHcnHH~j6{pMund4@J@?LQv5!U~&I~L2dJTDjwHzERe=G@IMT@JYUNfodnTSjM
z?zK>1ugoszdj<u_hr7%}{OPlSBO?Wzz)}70i051AbR`1-j251W10z}t0i>y^ubw%r
zfD)P^f>vKEb4x6{m}5+65uEorKaawLH|wrBDOvIBieU>HeSjT;{B{TM7A4?Oxbs14
z*RKL+xIzl#NSc4wg~jB6V_Pi>YKvb0GdS|ce7l?EUAoWe=#=2adU$7Ghq#KK(WX{T
zsRE}8=11r=<jS7-p}YiNv}5AfB-BVr_Tjn)Fkq!dgrk|g_tIM`33<G{soJW00WTDa
zKC{?%VdjOT-Q*F?OXA$@P);{a@@zB}5PBltYrz^D<8A7%*VE9L=C&br`=}Ii1nwRB
zGI0Pr6yvqYxbV9QEGwP6*f$z{xZETq{n8};Px+E>KfFVUjr>CDO||Qt!{(OiMfDL|
z(~h4vgB486!3?9_RTqM4+pzvX_g7NlD<bgL`!W_P)V(TddBy1LFD*4|jT)*7Mgr%=
zrP7d6cxK|AHRVi*K=FT$UQtAZK6>tAStwCFNBXe4q(Eb!Ufi9UhM8_p9pNc~4W~4x
zFCc-rZ$gF%2Su_M8m)!_digR`dfbQEeTbcsrGTVe^ZxW}3^rYYJ>ZbD>!=`4Y#+z!
zd(s(8&DJmw{Q~_NI$w1@akv8X9(T>wh$PDYvK-7QSI<@`Okpw?UOPm%|2;-@aLOcM
zCIFDu7>S{FI_sc@UBkpM;StH68Hsn|^rl|_q|Ff`d&~At^iMuq8+Cs_uzfg9`wkxr
z-V%-?H?GBI828diaM}s5A+^^+{s;6X`A=a}?Q=Br`?=S9S(i6dSj`;?;mp*m=-kLA
zsNJT7F4p2Iw5d9Q;IY&;#;(v6uSN|WTW<r6e>!d3y0j6yBwgz=%E*Yy7B7b;Anugc
z$1EY$od9%T@6DENraP<=>cy+g-Y~BPs0$NJch7p1nBDHSr=v|ZCJMJS#t%K2V0<>w
z4Bwac4T<%iOPIhQ&}kS9KE2B0JH6ApIKKdW1!d<C`vc|`aqggHXB1@vUnf~_eH11h
zeF<Z2XdA*z;Y$rNbptE-))jMn`HjQeEyOTCgjwM+n{x~F_J_fLOWpmtW$yvOus37n
z2=Q(#^(wiT;DKOOfD=>rCip6Bg5w};%`#@jlgHy0r56Rg6?txpE&>2IK*+yvTO_K_
zO<@{YKFh>@JhF2*W~%mqUk7WD?3>vDCZbp*BhJM$+SwY~aHT!_;#KQ+erk=XwUkma
z$kq|vQ{Mh&2t9=9I^j*!)!;k^O!}pDDjbH{w^FE>yg0#RdG-<5b=m_jL^}QFUSni&
z*fD04W_o{gf9BG9A@?Nub+nk*<L5W#({*A*X6Oh<_kO3p4g!dSQ?plzomRZRlj#Kq
zsL_@A{6%N$A(XJpgy5HF01qUAp<rMfMgwr&CL5&V5@25O6$UkS@}&Q6Ba<B9Z5QS5
z$8{^N;4B__8s8y45~oNkBsmKVe|&sn>C3(Sb0wT2QH^|b`EdB}0I__BE!mZfS$9GI
z6tlDXFjtTJv6$Hu7ZyD!zm+%}s4m$06KHcu)ukm2j4hDj7jKZ2gYjtp#eTK+b1hSM
zPaP|te59jeXR3L^mXervl#UXT<}_QFryD&GK+Cnf-lsCRi{1gCTeT|w?WCFyL}?|;
z@N@Ch8>qWa2u&gewMa#0F;Z(yWp_h7006)J(nBh`Mu;}B+|W!|VL6ZXEPFfn{Ol)O
z3F&TN5)M<>5N3U4rwk*Z@V%ZthEv{BeZhk%?@1D}jGJW?V}lL+Um06Vj<02flYg)F
ze^>Ds>6&8sFjCb>Hn#SrKER0@*EeMxm`S8DkGg~Xr1+YpTBu^xh>pE7J0nIGrB#NV
zwAU=XQ_ly`fi?=l4YNom3f9gebRJqc<_W_QgW8QWYTSa9N2-IYBQB!phY!@<?U<Q3
z-Q=?eD)!~8N4)x+L;E@VHYtQo=;9dL$Vl9{$EK*bG8+uYG>pC-F1;rX@nv~CK_rYv
z6Ad(UnpE?^?9u;Yavm_ip~mbaZ+GbzML~pcqLjIL6d5~7Y<9DafK$sQV5jXpVDj<=
z7dW;}%~(!rz;A(zP1O1OvW8|GP5T=<c(#%99Sc}San7L4(fl?t_D2&>)fRy|0Z;eh
zyUh+1gv>HGF<VNON)pX!JMjE_<D&}oC!Y@-eSi_+Z|FcnDr3aJX`(AAZ6MQIoq|#o
z5m{z#G;mL2E|XrYAy<s{8Vr+%JgmQMPJ;SqD#=!j@j2UW=KgDc2Ru6_&WsgpFR?*_
zC1r>V(sRZ<_6)p&O6|Aj6Vt_+Yl@yl-{yx+E~H*6-Rd?05C)ovCZDZH=d+%GLGOq~
zNQ4tY!14MgHv^aOoGYjqYX=S!=ov8~8}%#@JW?6{<plQkP1ixM%s@_{kzy9M>ySrh
zQwuDz)=YQsS_4e+A+#+U3ttlp(i#Su7BosaV8}wJ<#C=dng58LZBe#bzf&H50%LbH
z0k*5@7?|-8OL)IKXY4WWME*~t!=LIW`{mO|hQa~%zPt+25~*9DCRk=5ufBpBz|q+0
zu>dbFjHu|V1fJ7r{Z_jt+U%L!7~Mf>Fw3!`G%?@-n?!G`1~M>^eurk(`Lk~j22miA
z%!t%J_1Gy+Lj6P-$8haR9l!(oZE5w$jT&{BoDr2d>)b)vyA31VM~mmp35+P5jN{9p
zbqIuMCZ*<pS-J;<NxHL5lr#J@WdH-t(R<|zawVYQ4CZ%;d4WV50H>p2*o#dUcO>rz
znMrFW-*?lTdS(Q9fKpK^5L82xZZB2gu+@8s)PpO^FX!{&8Fxy<G3=);{f1At_;W@F
zefwxgzCp~|A-o<5+u@<5l&V98inCfg$VE`8VP**gLqyrGKp;1zCsRJNb*PEpppAr7
z7J)La)8#f-*2lb3Q6eZep@&oiZi=b7T<>zXGvkKT@Nx(8?WB8YOkk%hMHXeK@PK6#
zc6+Qyd@>XdAcNvRsi_Ye<h!z}hXI4Igag`ApQl;$upEmrCi+$v9x5Md*;?gU)jHTr
zbf%)8NB#dzGW5=H2^8xBa5_2rDt>3%8Axl?0}gW32L@@~#+6S8t9a?v*a|0z?#+*~
zc)kVch{t!GD~N3#A6;fBzi!OgrW_2t(C;i<&16waLcuGLB27^FgHO%_1h9m)F9Oty
z?!_t1jqlCvr)gz2WcSI?$gqAckYH=)$BAyLr)rZaqMS{qlCVK%=IcvP?@&pf(D#C9
z9h{@P7@%Q(zNe1YZ+sAXWmE~{YS^aDqM>VNepis4Uz1neh&*FZt|DHWmnI^n_!IQL
zkT>N#^sl%Iyv=hS??Xg>tknFt8)pxk*ERU<nDOrqei*YZ$&hPLSOhm@R%zeIx+}Hw
zL~*9N{w{U$$wH_N5#PS4HHOvY;*XM3*8?vPN@O4cC!qjYnsQ>L3KYfEFCvl(4N~$V
zQz@@)-5<_Xt5`YwMm-YJ7`=AbVxu5|X?a5JKUgl~3f2`Bd0Z<j`!n|$9FB-Q&&HEw
zJgw=Is%70@ae$^O0NFY#=JV;m@|X8*SFNj6==+Bnw)*XX<hfV@B=D*<>1E{)53M*%
zmYVRU<Ij|7aq{bepd!QPQ`YC8w?MoNdF1<#^CDhxhtI1(7r#9T{a=a|$6wKDKFhLD
z*TcbIza2$WJn9}D<RVIl2ZowhcEN#t&<V$2L$i3B`WMVHh8_`ZO2D;zDI6;PAyS?u
znLBx`g3D9x`2>v>UV_d+)ql$Z6sYOuBk^sT?^>Mx&Bk4E?G!%0Tc?}3<el{2MBX2C
z?tc|Yg~5G!1s>)8FX<D=#t!z8UvK~9A}G2U0JuQg4zatcYe*JK5f~}iSyle3ct{i(
zH|P5mZIZVH;&4&rI~&wPnVHG)?U*Lf@3Bt6C;RLP(Q}_SD(RQ`xIK#LN7X8!cUild
z+EKIQqQc=1v7qplr2IpG!la!v@MP#9a2|I*Ut5dfYKY$5m=L1n3n^S<P!c={n+9{T
zX+U7NF|Zn>&3D8ta4F}gZ)8|H>bJBXye9F@<-fU<2f_VFy#BV*NIXUt{bxtOqJ%LY
z07U!PjD=fheUqU(l@tM0ZsuzW^1t(9kZmB<c6O>qv9GJUl4J`DMCn#`i()6C@MkB?
zf9#NE3UO42trzN)$i#vq{cJU2{6vu*muX{5>N#fR*Z?R%T7O59TUiYCc_`X)RO3R;
zX^$kEcwyc?ex6;*ZGU|KkUNA!*PMKdxD#perKs==7-iLt!>>VeBavakgeTBP<I%S4
z*nXM_sAkk<uR|BMA*OOgX0KrKPL>o}7hCc42QZL$jo*VHvA(Ane$_$(Yd)jSn!*+w
zZ~v4w4=wcs{V?`2=zAUCVM1nTImPdEk-AVP4-wWyv2-a*)pweA)Mz24A^|G-DkV@C
zHOb7N`0-t-{IyC`wa@EHL*f=w&84VYzQ19pU*50wLtF0bY-vOL+5-nE*(R7NwSAK`
z4Vp`e3I);ap|&Mo*Ry{$p;x93^&^nKCbmBq6F66vv8~u9{Q0U09&L6jV%%`x3e9*!
zJ6HGujb|1h-U*(o6SGON_5}Q6WGZAo`(r*o>y6mpp9b}Xx*zMFY7?wlp@ggkz0VPg
zeTYyaSEC#!)cZ@+S^vqDM8l?UFSAIpirqUFIvCv3DbteH1sVIRPX||aBvyv6rf?7~
zMlHw3Dx_U>C*Bi~zjXc5qu3!7(}p3=HhZo)M7i%HYHi!&+<4zpQp>UI24-iYCB2-J
zCUKtY3R6`hgA;D~c#rpmOo-nHBXfJa6(P)w8*=TQ8)0RzcMdsQ*#`&U`#0R)0|A(V
z_6bnmOuT?MP7p-&9G{ZFDJYrraGdM&l!Zt+!E<Xoq3~7B({r`~hF`g4wpaWXq`A#X
zKU@7kO#}D@^Q()_px;^tcp8nevh@K)$5D16o*RFDy3ZN%pJk<XT|I!)Uw`Rg7@~^k
z^vdHeJhFLTjL-D!mfSrFR-qt2BJtO^)EL!DG4flZ`SN~)dgu-Ll2H@D1X@xR3NY5e
zdK&;s<>gnO?$F7m!Y>YY1f|W0Lc>@(Fan8Ec|;oh55G9)x*UE_W9?yp>lSfKQ=j@8
zwZJ4G0~qHTa%#Yb>0*#hr1g|sExWeS{_wLkz(&6b!*~a|CjuHUioy6o=WZ=kp-dwB
z9nBa-U1U}I{COw=*PX*!*_&#=6;=+L(XhczZ&5O**!a@KX6+=TE44lp=8LH`XZ`X9
zC4ah{5O|39_shaO*a<I*B1lno`W?weFM=8Qi)U%uxrQ&?jo|CM25h13zxmr#dVl{4
zvi#s-M1bQovF)-pGaBY_Uf}RJX4d0`7VUeS<Wih0dN>z0AebVh1?LD;5qDS?xvvLU
z3ZQ#OG>*Sa?B12{*@FTo&M;?g4S>~{%92gdR9{%(EaHrqY+uA4uUn{fw^%p~S$34;
zS<dRpPqHV7z=<%uF&vV<M)APW<k+Pr6`O{HwEUW)a2F#}fj?*C%F1)%C()DZ_#xEQ
zq@;`aI=vNlWx7L6Cvl&>J}MNi8)l<5`51s+EwqP=vss`Ux3^7}4v+@g9-~~haM&$)
ziR-?hk0MWnEH)n#PQ_RRTP}ce5%mkqoOyWUSiAVm%%|PC8Pagz&G8B{(Je63qk~gh
ze^cB+C2K~PTDeDVbzTfILFNpbC7m}3;~T1Fk?zhb@uLzaz>MOx#$J)|Q7`iD12&>!
zp6^UmX`{WmYQ0M50ViD5@89eezu?t~XO8ep4bIy)ov<kCv@5TdpXt=%gVCZQ^?ZR8
z3`;1rjr;uTuARczeD=ch%FDwXH7%JMyfS&eU@FmyhNJxqeNxj@ExOWpm^h8m@#uuo
z#x|O6q(h@EvN_>jB5nPxvFJjc7Kt4_;6r)tI4tD+7!K%|F>fT;RjWdkP|wu=+0&(J
zwuh5ln*Dq`=Kxvf4tPr|9%XnKx-{@@lqpIpQK<SPhMpj!^rEf(FM^%Wr2v#aXm5Y-
zoHdI412Bt-YVhH@B<YQBw!FFZn`y;e#!D(naGYjaCn9&G|84!;{Sx2wzE>5)7ZqhH
zS!f3cI)6d?!oixe(w)c+r*lCYu(oj%Ute_b0B|g8PaI<VE(oj5$~y-{_0qi5W7XF4
zKK_1J;qAw-Z4{AFWACKId|GH9`6GZpcQ6*(dIoNuP13UZ<!~*GYs-V8oO}3DqEp=4
zz)^`bYPaDxh1sW{koQ!l;)9Cf5SfRX;-6Xp_@ucQ^Dw4^37?KRF13F2xi?+(p1$-a
zOQn9=j^K1DulYLw^jTZXWOi3)5FhSBc@EB!=_v%;r7S!ZMlQ+4-ei^*9?SgL+Mkp<
z*2M4POHZbPp4f#$_vm6PTw(2$`jLluVJr|@tSWU|Ml>fDF^YfD<F@Cj=I;rDl?+Dm
z_II|Cw+XiL%(X#fy#D`?yK{$)%n<$F7EQHJUREbH=T{bq@Fo6)j7=4)?{yke7N(;K
z5ZOlj7*|aJO4k`<!jVgHbA32!04d@$4H$Jn6PXh_M2x7Jdt53q#1n+M>(Dc`m5^-m
zFV`wKJj<S~NP`A%&VN27X`H(gZ;Q9vL;GZj`(YSY^UJR^mYQGJ%ucNvIlq|E`IEm@
zpJmbev&GTT$!tA(GArkw4>5a|urIX~rfpmbh$jrZ*a76WmaDiRO%r$2M(B2A>(_K9
zV98YXsG3lZ2txv)D-7lPeM^Q;4^Me&AnjtcotTz;_$-(}*HyJlFVqqHI|fflsCLdA
z^T#|H84giFdvMgrB`fg?xv8_x>}?Jp199Z;ioDNxObSv##`$aev8w;0kyQ=5I87p<
z2F)Ml?7Hr0*6h?4jnA>gr9t2~i*8(<lT#4@O4TP<r>!5Q+W#LXDE~MJUHyOs=lKm0
zihXdMDmnzbSov40(Codtmn2KuS_@U57LV$uvbeKAw$t~$FvnE+3eATH+sB>Mo7VX?
z0nSL|K)W>&gV)S10&{Cf0Mn&VaOc6n*TWf*^z=2-zvz3#Eup1zV7GCzyon&AoM6=}
zm`43_MA_N<>z?L9#5kQD8B$R~h_9}8{(ML=c5n8Em+(r2cnU|s*FkHGKO4zMgMj(j
znbtfu>d0UjRy-9Z=bb_P%Pf9jlsGZY>AsoX5`&l-Kp?%D$+L2x`RD59YBcR7at^k~
zr@gJ3b^N<{*3`Ivw9P-zj;O?oEOEK@{tgS?=faG5M-uxXd8zSES0Ihp0NP4{lTR+i
zJ-bs+(+X$F%u2b4O&aXgKb9O3UhkeB5#w|1qfwLN9k>(e5#H{n1vhmU>D7?2xyMSh
zJaS7bddmS%%Eo!RBe6mG@{yMg6!Zwmb!yhsgJ9f4n7qiZJEW);`A@HKUZqSVhgjBU
zw(ZR$o|HF8JvA3@nX0DPRnYCMrRs^R&sB*X#a7hs8HgV~k1l6M=bQ0L9N05BAQw@-
z%q^5@*i>y6!W6=)36zkl;Iv;KRUVU1Wps%THHb%5cVSh`V1~}OD)>uZSv{$D%=64k
z(n>WRz6>T#`atG4I)CP^6$N=&AKk15$tp4Jt|`oakDtUe)?<<bjj(1$1?~bBAk%AP
zR15*RIBbE`;1?<;JETUSc{nUyR2b6E2-)biHAKR#{-volHu4r8P!+pa^Y|)jltXDu
zQ?5iul6l77V}9BCvv>tr$FQFBJC2!G?WvvrygL*;Fo<H}HZhCHviqz7y(n;XeK<B|
zF#BMifol@8x57thnN&RRX*<URY=5sGhj<?mxgfI<c8rqBpY}LWcg;l_@d>h8?_9Nx
zEn&5#yvQ--R;;6R0&LT4m<@d+y*(n04Vf!=+<I9M^_GWy^*3V2F9+Qy<{Z4iP;siG
zT8>#g5*R#VV|F>weTW%KGLBA~o2;4lOI*JMdLTmB276;|l?Ha>8zc9B(0)P@Yb0&x
z=TR;*LPcRZPIA6pTr4%@SIegmSZcXb&Swn~;E4Dd@AJYNIgC==l>jmQ^-`(zkjVcg
zAl(6O2uJ|KQ^!-kcUs^+0&GR`ikT-nZ*B;tgttwQ07$2$i3pl_(MqGu<TxBD#kKvO
zSCXERX712;PJAozbNU$kALb!zf2COuq@i{rLCHCfhfu{7&zGM?GOa0Yc^g6PU_+o(
zL@qIL4s%Oe<~D)J^((65Zh?d(tiQA8e?Bws55IpDDzWES1LUV;tbcSDx)uwf^)A^d
zt^c7lB8<z`CI9+$>!B9EWbv7%xpz(e>%P6eKl*zKjdn&wXMwTritSps0Kd1Id&?ug
zo8V@7RK<vb+tv18MM4)aCm2Ni3SWRBH<0U9oEth=yt|B0_g?BRF%9~`f}i2g)x@pk
zCQjkJ61gn>9yyLC#ON~akZ~z`PZrfCF-bcay4)Uc+4Twa-$cA{leNQVsN{eStFUTJ
zdahtXTSkM7SWcVa%x}#Xx?9qq<^ZDOh}?@awo@>VWCm->f$fkE+z&7?Kv##i<1s9#
z#Nd8Nqf#I@u?Q{8#daN5B~&0q?{}8WfqD1fyqLcuxvg;6@?dqbCMW^0p-R|pKgD-m
z`P27bGJ(>c+u}sZgC4+O@bBMLL1RI#h*5I_bOXeGRwaX=b<er99ZMLphqpln#9n?{
z-2FJx6D={ql(A#(QHoW_fWJ0iVX%BFu8Y?;jJPwH4`Af%MFj~J?^tp%zvhG`my)mg
zA|AguZ%96m;>XMpV2$4cAWqaW;D_|x<@+8Vf|bF(lOj6GmiaE%M(B7AeaVCZBvRdQ
zEGq)}sC)OkMqiVlr3sWdusH22Z75^rw(e~vT)vw#Ct=2BHWVx{dk?H639*y8N_C2m
ze9ddFW}KsrT6r5q!FY_G(>d$4O|4>yB=Q_T7<UEvJ>j?!>Z-4RvNYK!F|=M&L)fkw
z8M#uS04rd|G2LRlhH(0`jA*|t#f<-X{Gt%emLF^)J4F>8LkJ=rQWoVzhwHYrOcgEw
zeS_X}Z77{^nU~&8^CxfJsxrYtW+0gNpBR8l>4^M7%`bdfMqu@$^~z5XkR@uZo=N)N
z0D<DUt5bZnlvk2AP6r0rG`?$~q@&WOyaE%u76ljaK?@!`vf4PAN4$xO@v1dou#yWN
z(OV|VmWgKBwIonLQaB-_^U9V<psE=s$A<ayZzt;UN37*I65X(8)wXrLY|VOY4bnke
zRTV=8^xHtus*)LZ+`m<#+a(x?NP5|EEZUpF&#2u@#ofss*H^BpSkY;ZMIl$Sb*cX2
zC`Q#;^*pAmMZ@h}gOMisU0Y!6Q@GHOO&)i$y3m02<~Z=~_IO5<ZBb~RnQ1xK`iJ36
ziX%`%K;WdOYI+sgzwCH|{f(+*B6|_5EP%X#T;i;{CQnW1eI)|b?-ecTH=br%4Q=o7
zLTuz=A>ST#4c&ok9E)niDkY&+e51eO?!|RVi6yB$k3k7ngpv(oF{=w0X*GgVgqkvh
zg;{54%ycxpXFfhsq7L};eZYVS?ndymh|mk^caQv~xTVwoHKk1xRhGtYgnpdwG3n`2
zME~I0^koNpb@LGga3<96k)}KVD*?8S|2Sz`m#ILhZA$2<n{B~Z`H>a&gRYj<e~njf
zIe8I`)jhu_<a~P~l|L!#IYx*_;LnMh6$%6NkOmJc0G7=i4fo^YOJI`-C!v{Pu}Nj;
ziRrJE+UF1O>K+O6|Jt3ybm)}#Eq0P_s&mN1=vRV2{U`yxl~FCWISoiGGVYz9+#>8@
znzXS(oxXBZ!k*~X52Sz-)>|+znM>A-#$2NojG@e2_{t-Pf_qDW8);vAGR{F;?l{O_
z_5|Zp1V=Mb%hpZ11ShE$S+^X!hRk^;U=H_-0D)wN7KVb@Wptg@Tjm7o`+m%I95wY@
ztO@j2AYD(0As?|BCRpWK;%KcnXM}0bZ;r>!m}!MTuollV>qkhSZ1OvRa_=+b!p5ed
zuK9*-#;Rl#L+Q@T<{GoiL?{&S`K}0OYVgqTUcE#>T1x5so5mWvwRxt`UINEcXR^AO
zD^2t?AIwo=0yH%|B_QYWD{)}$;j}WoZP$)T&1+^voBNFShvO-kn+YL(g|tY9`ILd#
z(EP}jUJde7l|6EMGxKXgoPB1w;~Qp?NmQ$^cm0?_4w^$-Clp91AKPS7lx+*d0><FF
zxmT8&)TSY2H}=v~k!%TI{aIwhBrY>oU9Y_QW&Pa36)~pSp3wC-8GgqyAR8L__*yfr
zhO!aVsg<En;|bbs$xe3*X0`^~udoXA_D<8JFa3+)&ANx+{RVkYWh@8nodl8`v<<}e
z(s8Js-&19z_$%WQhtY!1&oa7ny!>|ZA+!jL=7GN2Y<x3+q9vdZ6x`Z!j*=bFK0(B}
zwe=#v+E!&@bmGD($xhRDJb%-m$^N|SLgEfL6~R)C0~?C#t+^-?m{@deOvVPmSYA`Y
zna);-mRk>I2;E925l!YCHflwc?rhvbNgMWvN0=bGn#y4_Wv8tGQXJtD@<&K#T7h<2
zv%AEK3mKIVoWP?`N7e|I_Ds8%-|M7Emk;U&)c;e2&~Z(Z<Aqu~H;qB3dt3gMHw)g@
zFC-2->DhEi=mn-zDmcRAY_lrutkhdJv+b<E#;#-l*F(hjC!ZN}6ZOs1oYX<A#1hAR
zw_R~AB{6)@7CU;|TIRRb5X8D`0wZVDfB^#W1vsnrmqA6J$>I?Of}mL5C^O<K-$gb!
z&i-ebgT(I>mR~6Ekld+Sf9oFtj#`#F%um8^r6|gH6)zbDMj-Y1qX-zq(vVp`I_`zZ
zE^xjZx|AparR?_PHTR8@IA2*<JBy})51SxnQZa)cdX`YWDo8Lk4c-#B_)?#^fJ__M
zZ`ko(p)`<(DuWFl$SRo|o*%8Uzfz1>_spQQa|A>Ch3JHj{K=GK9%Zz8?x@y1i=;?~
z;P`Uj0Ad;D^s{VEMQQ$FUccU4E$$EqY^s>2SFK>x^eUPI0FO3V<=x(;N=gKc5ZM7C
z`cq<M;ryr`&}H~tKu2B-XD}f;S$7SiQSEXCJLnDb`_>Dh>VB*vlt?-#OwBehQ~)6Y
z5bFYiZhTW92)40;S~tXrA~03b!$%BRYEhuxFNY<y1&R|0J5OFzxzz@3<DTBGL+Jrl
zPKVUgE@t`!vYiFfc((&IK!&$;{K>{$GmHRO@>}(D_)vVpZS6mRev_IhEkJq@PJc-4
z?3N{|;?t6~mtow6DKKNV4oXf^Sgp>dlBF89NKxJbRnr?SdPmAJd&a@jDRKVVz{>hK
zAiaE-)EcY)BtoGLD8C4^B*`=)S3?R@Sa=$p8pVQ3w_#IVf{suQi~ttm#G|lQ7cE{M
zN8ZH=WKXI!@U2IC=Q@&^T8d&WQH{Ol01^Np^xhmwqS*A!0o{;cA@K_E9-N;{scm9`
z7Du&OK|8D!|0)sNH<9ffpN>Y4;+D%o<Pg30lo{gtrP(imux-0yYBvTvG>iya-HnI%
z$0h>Zt-Q^(#c9h7u7k<rH$@)7GaUs-ZV4YM+5micA=o0Dy4lPy#K(%lc@}p6K;Cq@
zXD*r|TGJ}Uoi1?&DbmXHa#(@z3!$7h^Zta--vg*^;rp3}Qn5}7Hk|JP#Y~LJY<yxa
zDI1>vigKXR@O|!U<*K>O<0{cZAF5i4MQ3%k60-RNpM>hq0`4+r?WIL%{aG*(ZS*p2
zP1+>W;b=MI4<!)V$?m7dWZieZZ^r7Qm@f@C{@k0Q;j`5E^pqHuiYj_@Y0KaWx`pg&
zgp`>Dbo`eOLaMqz9t+QAjuQk)At5wGe})3U*GZ+CvOFfwJg@nP(-=Asy>}^dPYKDR
zB8OWyu<0G+9R@3GADt<Vb>~slOS&q9P)XL3@NwZ%JE|sNgb%(D_c)VK6^z_VRn(sw
zep4Sn+t?$6_ior_9R`U$O1gmOyYG!USaqBr_@-hxYCxtM10pgmW{Y&|5LhHKk|NJk
z$hE+mH%Mrji*fj9Ap@bo7ffS_!@SAy?%dDXG^4WF++kRMyQ4dqmE}2B1l@NGQ+CNW
z@7lZZR<!qJjo|EEYCe~9N>q*Jj{zO_8*kwg(_1Fms?L_k7+L|8z$Bgp0VToQ+t>go
z*kCJ;2mm7};>Mz%Jqy@aC?+;m*zJ+>(dCcyfwI`w8>fFUc0L@=TNHDm>j$i&I>=w_
zUQFi?{<YPd`IaYNgRl%2!TsUT=p#ST#bv!fCmniM#(~s(XDsTqW)f-GCzb#7zK9uO
zj~&8`<c45RBYj=mxnb&zK|j?-To&}b>zy_p3T};qmb#tQ2OLkuF%AQI<4OgPZc@5W
zdDfKp*L<lu9QAc}C@3nhSHrFRI#aI9bJj+5uUx1OU9XEM;suN+g{R)z9UW_i&Y6R^
zu~2j<Y=Vp*$r~T-JGYrWZ;zfrw;$ZqT&D(<{xs)7zFM&jU%a9amgO#p-^v&g=l1p-
zGnp7^Gp!-iGsy7s{b_WKVZ@_vQQ0_@Ipp881F$QwwT-T>an{o8i(R9h7_ww><7l2_
zElMR%f$Q_r*(}rw4qUQ)AhY6Kg3t_9gFp|{`Fd4`@UU$zkX5hO|Ack3YH~v_<P<Jl
z7_hfX{@vq4im8Nw1kX)m9rD7YVWbc4EL5l18ImQ^EW1w5QD%!t7as5_{;EW-hUMid
z&qoYz;tQZgLszl29j4Lc6a>25Jt`^g<EI@>w4sr9GjF>u5<Nf#q;J*rvj|PIvNbng
z7ri@T#L%Nxb*Cs?qNN#VG!8(SdqprgrAnW~6VVmCq-CXC$=s7h=;DkbNRb|s8e^B_
z0|S#kyvD7w+uO&Z?p*k3sMD!JN7raLi2sc#<lWYMJ4&EbLs&N-EY{nTR&bCng;&G2
zg%eGfPF9D^92O*4C9&FdRgrtTG7CQ@a;Ga(R*Hu>J|Tm5hF{(8j_lAIStoTmdY`Z1
z$Sa-?tt@9^#~O`TH;B0cNRxBxuQHlUqTSAds=N0Pk~u%$kkm&SxpQ0%P6*<jTsx#S
zx`n5(D5)TgdO^;)OwD-9iVH`>L!d}I3)y{@+keZA7-s|jTA!a4X3!Z#?8($qBg=pU
zee_&oN_4n=egCgpRB%&y=E`i3(J~x_!j35+37TB&rGY5RSuO2{G0=7^!V=&kHoXRn
z@3^ad`FQ#QQ+~yB__^)Q?=kdrJ}O*2p0x)!!0axe6H+KZgl3<Y&{-L)V?%f1x8x5&
zTqQ+bxbszH^Uu}HBZ=!Ab6}yZ4LXn3$`l29NFfHSQ(-Zk%28)rP=yc_uISl3n1`t=
zJr!6zyQMXvQ`}Pg5l1YJH!Rx79xew1UT-*v6m%xHnrO562Wz)4IrJaVu?Qqi3e{LQ
z0jW5|FgB`-mUf2cjQ9rYoENL-%rl#m{X9;;<c<^H%f}K?BIgl0VnsoVqGdUVs%AIC
zMcMhNvgSL{Zu-1EF!Mdy+RGV4J$AJ^E!fFO|BHW<u&G2PwvH_F*l(ZV2wr>dOV^}1
zW@xK0Vcz^Jb9!#Cs>VP|EDn=ObC}mi_rc3fHB2f#N(JYz23@%Zl44acE$cr90`H*-
z>PU)#ZS;m<fU&k*M_nzpYY)5_v<`2d<))LZWtNA<oBZtqIA}*rCqd1mUx>}{3bo0O
zU=)C@N>T{@Cv`R(@Tj(2P_LbGt7CN3-e*R4aM8F|G^=#kKd{7s=1oRQy}Fw&#u&>a
z(`82zH%-uCY~#%>fgLH_*$So8<%Q!mnie{l$&N#B_`q_iza*`L>3!EO%yMdxMc-Rg
zjU1$H%!wc)6KiXKWcW;H4j!>Ncm|zpcisprX8Ev~;nKnMHW)n|nGoY<7jng;nK@LU
zYY^;v6S`RA=o8u9zi;OhN)wZ!AsD(p%D(&o@HQ54XywBub<)4{E9A{_`GG$~W<BaM
zvNV-v^jaR5tqAYxaXWL4?t>lb9UjXBCQ+j9(GQ_GlMu~z1izIvE%S1}GP0$skYc*u
zozJ~(w*$lPdDI7<+!4lqgI60xoV;ROuHC%gZ2sYTEn@5qql>H8eHI9f?@ikb=KwWR
zPOUOervdY4fFx8%RE?3gR=y_Ft}5N~6PIoH`HYjxdd2Hc@m_FYugEXo1H!;2GyHAP
zId1FH(8{i~ywoo|<tK~%fC+2TS1nO)xTyaOIuFL^f<aV8b=>M1t67yV$R{$w!%Fpm
zcKy}h9^M{}Eqk^Kk)q*UT+AX7*|pX~#3;%dHf5ch(Nik3i%{Z8Mq?ntu%b2ba#2#s
zfpTB%i3Z^Ydjsg$dE9@>{H_#uwXfu#j}z#}H@>|MjDl=z;)2-X=-`N=UTJ4wai!9W
zla%{tSk5>hH^DTqx|CSCA;W3qg6R|fKC@u*VAm3#O0A>A)Zx;b^ee5!^h|YMj-eyv
z!Uaua%Xt-8nctMP&3#~7MBe4yCY)K<_Bd55TdFO5MQhI!zt7e643jG(7lGHH=|!7@
zM*KTrvQcYnk<Voet$nC{7U(Vzs@*iqQboTe(@k{O_2)miG{Og?6SYeAvto>uDLfL2
zS|}^&o)_oI(wJwlJv8AwXVW!gprzi@(S&eJJf#grN+M`w4>Mwh_!Wk&SlTh%EI~ni
zimwnV3WhL#FRxsPEoMBlNBHT@4AHRI{gj>sDJ0XN#;hdT{f#oKNqpW*Iq^Dz*S~E;
zr>_cgoKV0hY3Hl<DdeencE(V7FUWEeg-QbFC$2>LsxdM{c{AyP1;BI%#9lXIYZU4X
z#xjkGc=ohKdABwNi>w2>HqWmuLbUskNZf_}zE_n;PFQWC7Ir_23T?9Vt6tPi7|Z!j
zaV~#uep1qmK~PY?bFxRBp4_Q?l+ae(_Ci?nW!umn&PDRyd@ASXKNFei#U4-fukYly
z#m(Y?aC*Oc%FKc(?AEQ(MKlc&N#q1Av7<$p?r9+zt$XS(X?LYsgf(dQ6LmOwJKDf(
zGAr=0TuFAYP})}Ug-^i@#3n>$BDnorpDeOsGi<zC@J=xbmo`^3;4kY#kTrZLD)Wrt
zinWDz^a-CM1yllIJ#Eo2)xdZwhyEisl$WZlvAz=$d-EA;m=#$EKL}{43ajTZp>vhj
zTp2YTqZ+;klE&m-@PN>|iKe$*$4Fq^T2O{ha?~v(pkeE|TYY{ib|;@!BC9u}*ACE-
zU0txO|D`OI+-{3>4wrLSFF7y{0m-6eU$ahJ+7$}{JMZ2OfIiv4*DIIoK}bZVEf0PT
zs3pvh0i`HfYcra_Y1eivoqdj&0Ll_Zb`I(VOvyJb97c}Ueh&%^<gC9krUUGUTH8R?
zC+EvY%n&I2zc2Ggta>fOPR|KU1vh-*w&a<@gtr8^QA*!39F>S4jSAbkpx()U!*?$|
zQ0UJPi}xFHpOEBj9lHdJJLlvR4Qjp)ld#QQv`Livr0VOO9#S^;MR~VJ5ZW2^k&DLV
zJ5^!WA}CZLV;-+9D%>8r*S(eJSHXcW)vY}5YfM0FuQVBr@fsIsna>8Jf)7%vwnDIa
zy!s@XRVQRf0IGCzu-F|~XB8T6y6VURatCYvV@wrk0HWAr%a$&bbVI|Ifvjl0=?DqN
zNHY0<b$<xJ;)a$-?Y47aJ#~F~S9V%-c%{Q@V1e-Z-Tit!0!E+!)LeOeP{xg}cypi3
zJIyZF<BzV6R`fpzb1{-?ihF2}D!S-yjm?!$_ajoRLa7+g2M+_%w9wlo$KDXYp3N%v
zQ$9DX{{|#s>4;^u_l!vdPci?&2KPuwGPgwkr|UGx91A97(JUuF&uucZKksG5<F&Zs
z@UKG=M$zkG6-jXOLA$K{jQsm3d(vrsY(rr3A(d9u#U8laaQj>R7!{a&2U-(y?0D<~
z_uwj6K>AQv46=6Em|YKSAKbW~$5>OSb15%y(GRmgJH0-Hr7TVXKNs4E*6~6@oKeN^
zzAS1TEQAl={yso5wCS?px}=UQ(6<rbY6CLc%+6VPlHx>eD#M5?i~ouE?oc{a)U>(h
zc*VxVhWBK+USjH1kiPp=@E?KmafPI62yPq3tR}$+d4-DRnFkR;r_yipT~TnDSvYb4
zYOfp@{2!8KS`M?k*E9N2FZ_gl>Hcf`rRv+29zkWd(}B`QtB<MpAP5B#FtIUErKX{G
zfzBJwZ)(x%$f+~S4)eX9Q8UTzNK!#T>8YswOESwli9`xSQT3E_l)wjxn4bd>51*LK
z_qx%wvDgSXn#X_U9>Y|ns}D!L5b}w)srzo5b0sDp!ovF$AwR#vz#~yY2)f%tSxd$(
z1pbE*ybnS;=yy*ZiU{D3JH{vBkl7Sc7z<tgs{ifa(#e)GZs59<-k}e;qSKoprS6}5
z;QK=L-jpG<T+rfh&x(`~G*m(GN^~eh8*3wAD4$%Fp?)N3z=5|C@VxXIQ<W3a;ITSU
zLevQ(s$HzGYzXvZi6u*InovdpJwf@^5!^hDY>l(g%k+I{>u~68boBXwFw{!6amgw(
zfXcrz*y&fzg^c>OMG5~!N{N8}Mx)8A{C}GwaUXFR4tQ7Za;5k~rBHC>s>jM~q@7nP
zM>}e#HY2}ael{&n12t88h1yV6ah8gORd6lR%Q2Ma_V1f>1kDb>0_O*eBmHy28d*H1
z9xSizb8-Yvim=QP5H-iF$%IGOnbf#OVZ!gd5)kHxRxu(X4g&??xU3I}GVTeR7ZmSb
z_w@A$G>qNcF3;Csk8<SsT9#ukT96WaFbzc8>tB%V`qC@>;;EJ#PabyD$fo%mb1Tsg
z309-^yk(1RcKY|=2X)peEsh6f%tyR?rM*ity0*_DePtPthr<*pCgYVx5PqUwZFf;N
zOmFqK3BYdR*%^kDQSFeh=GrN%k*Ap&gWTA`_{K-yq=m{U1tD7-F0CwJd_syRgRD+G
zcP+3tw3`0Ojm_D8MZH0zN5WzH?NE0az!o9q;O8HFj;W{t4zcHaPtPRx)emv1S`^Wx
zqyoZR5hRyf!SITP+IP9XC<Ta#JUs3Nn4Nsj)N9(-pr#gkq0SYj3_GB~c?G-H4U2{9
zJYRGBd*#<@*~tDUG4z-9*t;E|4LON5g!#D2HQwx-GABPM!n7lx8WWk=gw-^;YT>96
zUyI2P%Gkl+1%0<00GG;&trj!2J5xd#K*SH)y=J|z;$Py()4QP9&5vjaZ>VYBKq9;Y
ze2>?vc)#lUkwTK*D*ZFwmD<D@iZxjf27*oi+U+_Eo+`GA8Z+$dgiJT%r4gFl{8mbr
zPH}~nFw3CbS*Te$wK8eV^<Vv2G(}Jve}jXB>pAb-MmhCg)YjMJc@NK83NqiaGuD{t
z8KqQ`b_l)fF*w9brFGyL)j54PGI6s{R%g0NCeO%x@<7_qT{F-N@(|!fa}3{(-zb(f
z#Kn}DS<Zz9-xM6+Xi&eN`*4IPoP4FDV$LwW4S4<*2S<ZF$1WM7X9_q$#vY%l8_`w+
ziZA+_obiO`4^;1_bZ1(-)u1}<`CA{<Cd{x8<T({7Nn<+1-w$cXL%2~)O1$~oCrH?&
z19d(90wi^tSpF3f!;Od$EEcwEp4Mswt*V_$@|D350kQ-Xm&gajbg*Lcqx?dx0riME
zY+`pV_?Xwx&Do%OK$7yQia&DA+3d8WiH~56WJtE24=B%)aXT)0#DVdmNNCZ0Wh<SX
z98<?+6Jk1~UwP}lEm>O}7G43^ltFBmpg$>x#pa{UztI7zNIc{A;vhktoU*}HNk=}<
z64I%*X@$;|T>sdejY=Z(9fygUah9L%`r&7r=mRx=k~0chEvpYfBW>4|%b+()rdDor
zZ2Tf;RS-x^<pN1P)xfN2igYZOlVnpePph0D4>&E1HUz4W0B>866EL72eqpS<zqM5@
zsbqwJ>CH3Hw915Q?LKKUrKE@G+ST=pV~7m(3?eMN`MSCY%?jhE;iRdBbd$><E;r>c
z@$`zFIM@E!=qGd_EEIsAJC`V<bEPUCyQ|g$lomZ3b|VOa=ZRIY8z<k0v@Tz<Al;NJ
zM&)klw^y$BzG=9Pa1u;0V{C%Y01qw#7+)H6!!f7wgX$3r8VP8iS8}#(7i4evvPfeF
z;DCzP%TO@C_>a#%@o!mb#l;gwLjytRu@bMz;q%h|ljMvc?2d1y4sO3`?N$VMhC-f!
z(F}A}HEy6-wfmQ%b~2t<kH*O%JT47U2~1Zd^*3cNj+e*1sVH|zr6tCFg&qop89Z+)
z%(4dm7@h95(n-r_Ie0Yxpv>U`>}hF6oIZ`2V2NTUAeK^r&i1ycBPDUp78=b(Ayede
zW{LY3%Jdt9zM|*R8dG!3fvxKXTsF7BlS(cRU}Cu0-h)@?kZ{XDq(AM!+Z>NHv&4ev
z(8m9OY|``YTdCvwu3VR>VZJVR7Gu;92LUKq_u%BqdiRlV5;*_JlE1*qG6BOmWP+Uz
z<#NE|w4B$@B$Y*-H^1hMm?PCl5k&&x>?YB`w6nahxUGi?f;sePP6`$#hpe^V7vS5X
z)EbIHrjhHTZ*IX%1$%Y|`!6^j^7adl?VEGVD#Y(;dT{MU)BLsh+-WmxS7^oDSaPbc
zI~yb`>N4P28VNwesLaGk1AzbXpbxG%1e<D&00Jp|wW!{e;xoKtmRq(X<&KB591}if
ze}yDWYYhDf-{XzAuxbvAe(m+X?((GgC(T&}>j&|br^5}*Wd}<sXQ2Q>Kveuwlp{N>
z6S_%poWtSF=#lkV5~q6Fu}oNzB(H3Z63R&c>cF$UbwZ!Q4pQaSn%A_pK}6^OwQOxy
z85j(V>x;;Be>XS1*vW8t_u;m}Q>kACUkjNbU-Rh1SBVRmogxu?<2C$BkOFu6>jgg>
z?(00mcB!$jxgn>WEuus!xc3K=?+Wsav9Q*)uDauvW5NhA>}}#3+9GdkyK>x}jcOm(
zYqpLVGrvWxV&Q<F^ZS~!7HlS#4h?ta4`cNO;alW=Hftt7ZnpT!@eVx^A2o?V{^^P<
zlYL^)4Iw^eL|bP>D7!lPV}tqaNaekY?n6I?on~G7?h3AmCp}fU!>WI-yr7y2|402}
zf;lH!2L(PmOVFH`IH41f+nVrDn0t(B^>27c#N(o(lR$onB{t|O@)M=<@J_llTwroY
z3<hOE^P*F8(TDkdljl%!VEMIf?et|julA4TEPB+mzi1bf8PJd><iV8$6|Fdxv4R!s
zAAL}Sr#))9BifxPDOpuPiCG?i*2OD_*i9Li>U9S-W)^YR27Hw_bVI``d~Qpytm)1I
zqLQ%@U45iU2#{8ehf{kNDB6)8Npb7hrU9iv60IO6Ion<-PUEwdox#>GCnh);sl&Zu
zl3C9&hN26%#`J$Xn<;T%Pb`MaT@>b8dg{vNHqGX;(cxsh+~XvB54utFZv0ktC0MKu
zn9S9`jk~YeQKzf@=!TL*<TO@Wq{FYEM#qm67!ks(N$t$^-)e&rfGSOgC_dFQ>tiwi
z;2x3ek9p}J2e0WxQ6#xQwD|G13j1=4<aiu{g`JYl9yRpEF$(45m{ylTj9-1}K83^A
zs~|YyLhSz=>S~$8z7T#IrzrlurDV=LV&ycFD>g{4XnE4^^%Bo)7~_g5C>L*x`w!qu
zzatW`r0%UWpublEaRCf^Yi+P{9Wyl`LXhrD$7n};wgUH(2TVhVx%U%TeMCQSCMB&f
zvGW&17))`56Vh>ZEq>CZ>JJTieUUXu`a^G}8gF??t2HW-y-kGE#W|Yixf9@xMxpLC
zg@l7^%YV@x?iOJ9+)th6n=}_b5%|1uEnPI>%p>kk5{D~F#TuWwL@=?PUv6s>9QM$U
z?i@HsK!F33Ncj8CaYRVr0<8PepU}IrYp$kn!L0Ncys7w6eBAN@XuZ%Z@O5pWCLF!J
zH&KB;7V~(<Gs=p4kE~<I>9dne+tyCELkl(&%*Tl1*;4ZggO~7xx>=f+u`mAYp-A%<
zXpnCo6_pniGZ!mTj3&|vONu&C7aO6(KBTd%E#0Cc$YUfoqO727LzF$bhpb6(E(Lc&
zp(W=La<e=b)yug6HLD3H?m$)m3{0vTgr<GxA03gdDuf-I^4ut}Q45EnKEtXTNIA#`
z0i)&k5}>FSjg%(1DX_g&9PzYFRVM?td1U443Ln@<MXF&FA9RLg$bILdaFWs31Gadu
zNFRE>PUEnq8}uY{s*I3dE_lB5%+VB?C==(tF1MX*!Ztt$zwWd2xvZUzv#}nXk)OM#
zeVK2yTX?hRYO$6l_EK!AA19r0;4?fya=x=pnn~{7$c}CokuJ2&rw$qy9H2Zfevmh_
z2z^%DVO@J71>+CZ=*10r-uRfJ`KaTO{r*4J4**ya)v6tgX4PX2w{KBOIORYYrmoEQ
zo}gsQ424IFESgQj;<4j@WJ%J1*ECm<1JS1d^eTYuJ?|*lV1}oRMjxmSDb(GuUELbA
ztZa?}ANeqVN@ZqlHqI<+Yy)e$gNYW?0WiXq5p4lN{5h+(O@cH_t1QPKUcTI5iIa9l
z!r{^4PDiCiY%7n1p%0%Rqv`NyrZN0IphN2mWe$uJxiXA@80(T;4y3w8x)iF>;8hq+
zw0Q`F1?`wd!?Ng63a4idMSF4rkay>A?=ya#k+W0WqqD~<OJoVakXXGKDaW1i2T2dg
z<lc|7Ck-%#&<)|`55I?VoK?4%D*PSG1YJf(Z1!Tl78d|G-b$&@4@+BM;l+kMj$+D*
zPK+ckZsmSsas}54Zw){9*2ZikPYxmWq_6#p=yu8mdGzIFb+#kP3bbpM6E%QVC)`Hi
zihx&-xXqQgQ-9M_Ej2$HlD8ngJw67m2-pS%{{&jem;WT?`b%SS$62U+TXe-PQ<ngQ
z&8%oPd(Yo2s29lCXKfpU7Hh};t-A;<Ny3Hy1IMxkPYQXiE%24Few}<20poO*FiCK2
zPMg@QQWwIt$UStnu9pW2A@Mu%qg3@TeKqO{prP<>9{6?wDOyMQ43MgNm|1873g%97
z%b6Uy&tod)k{u~xkqX5~4WJCGxO6vgO1!LJ_3*Hg?7`3DH4ntSQFx5Y344B6JUav0
zsr<}b5Q`?>3(R>>4cSnl5|-bV;~lNVub<Q6Fdwy*zqvaamqpK{PzxJ}x3<9C6iamZ
z%@1-1KI-&op8XQj%?i7^RJj}GZ_D>)<)WUZ=Y+QAK}`&WiuuI=D!91xi|BTyBi(rD
zMR$=1CaU>C^4Mz?_)tY^$H52*E0$bTXNFO9dykEd4bwHplt+T;Cea?P{x6gLg#i*O
zKu5cXI&RWZGFI~z0KG18J<eOTujw)*e_#eO^k@n0MNATJnD0o~uA2>LO5wx9ZLDMo
z&!(9zYdy_3$UB&j1vfHo#LB<sp?38tCA!c@h-=_|W;HhBS@sb3f|8v5iM`5EodKa{
z7gpsUWw8glr=-f?kTivFB6}Sq^$lVfx!#>fBpR(2q(9hV1djdn+Xgy+`5hE3w|k+r
zh=i;+13`?%`aMe4RNir43nCm4<0v4BW#v2<t9cpqS9VZ%WJ0zqf(3eB%Fn!Rl@x1a
z^zC^=G3;O*xI>Z^Oz~k19QPke&E>3j*(QVd9T4!7Qsz|tPrft_h-;>HnIqixd=xlM
z%(?mMT$<-a0mO0F`$X_3Ugi9*;eoYgjb9`_XIL(e@yc+Jb)+hie}lT$4`LkJrNShO
zz$aXIo1+b9GAcw@O!hwF(EPU#nAi>ytBh68F(&%CB`|kyh%G&bU%;)!RbBc`xA2S6
zXV*kvG_vIe<;5aJZq&em(E@7xm~nH&l+9?W#YV5y(ftYSSrr0<_m8!vrfX|`d)3>Z
zRU~&-JA|Gh*y>e>687@@47p^!M{gMu4N3E88mp*1PL1meb0{sXEc42^a-*_f>#?Gm
zVcvY8GLyXZA+gn{LgL1#y?5)*MBkHDu+90azOuLKZ`x!iE54Ckg`~pr2x_on2ZTX;
z*v0828@z1yzxnROB5atX(X7F!-PJb;1}rQ^Cv@o83{jt<nf}8NyOg8HFLi&o4<J89
zr;$M=QneLwSkP9ipF!z|*Zis~@TQA&)9!fWpQw`E!V6$L{o8F3)-r@P+`#x-*^c&)
zd)!{0nLl<T6^tzvpNACd<}MR=x0uoFNtnH@3&ur0oG?1({PO*=5<D7_ugu|0ogbxH
z-YjKW-KTFjP*PQg>hx~{Pew>a5O<RptHJ6E3ewXq>Wy^*2+}2W6-9U3$VCIv&z$YT
z3RdoHRuZ5r`^f+qi-pEM3MyRR!z6A7w{{3hjWAq37mGp=!GQlG>{Sm$R$edtiLR#b
zIt2A2zM&HI+T7EZiS@k=3}#J<)2p_LO<-D9<~0=0<>uo=#7}d(-Ryv70at(shkV3x
zX0rMEgslv_H(&5iTSQFN`+G)l(LzW;BemYb(Gz&=nx5}${|v)<6K%aJNvj;`D^dEV
zPfQ^Zq*}WCMf-l@m!!eH)F>fb#hzIU`0Xhc!KOk`%N2<_EGo>yQ{X7!GaW0J&od+&
zlOj?A9Iof?vhpjrUF#-~)616dupC#Ed|)wMBPr17S4{OZedVZ`0o;7BUZ)G5E;dl#
zjwipMeNO8b@a-0^2ZFF~D%@;kF#r;*t{%nm%T3%m;u!M}G~cI?A0h^QpQ2yp#t(4l
zZ-P4V*zb%(i%czINp$MLUHse<gMBw;3wSFvSE*zCe9#~BzcOv*X;q(j&p07evBev_
zI{1p_G4(kH@s8tkw^PCyZ?e3%@G5g?0K%m(wm>-Q2cG$ys|Q%%U`n=U3YQ2dPUlsp
zfO>DM#a^tiJsm+CpuOmr;Nr996Li>)&C@?*M65bvZO46dFHR6_)<8a52OlmP(9p4Y
z2~(lF9nW^otm%cso8`Lt)|xv3<4ex2fK50kXBK9;OO;y0qj253<MVlL3k}pi86F!?
zOP2h`!h*FBuVWJ!ppp_JI%>gXvhegkDKrzwiE)h-_Q0JOv?D@?$O06HARQ`Tv@7L*
zymQ(vz*hfRkVunm)RuLhPT)%F5Q5{P?}4Ji+SZVR%3WGWhG=-U<a@>m!b=C4A0dxG
zrvU&qK*_(*V1e-ivGbD9UP)7C5ga~(G$T3ggmBlA#ZPPT_7iUUaP0dECd59UV1ptH
z-~YZ#{<+p#`HruXKR(Uw*DenD4tmsYv06NgP#Jac*zBk7Km}+-tqkEoyov8jF-_2&
znhu-QBJkbr1IE<>(XPA_JhKA$U7Es92Rk}52g1m{`|eAr!F~zmi4!2FpMM&D4$0p|
zyWvY1Mu)I)JX<d5mZaE{pB&772%gfK{aqRl9wgq@^h38sQ9q0e+Q^iT#}r|ojA!c0
z`@l)=AR7A_g?4&YY&m26-8|8~IUplM5NPt=mJZKdPq-2H>mROVX?#Es2DHo<mHzD9
zUC$Ml#(F*SX~P@_^q~d%Sb~-X_AWk#$Q6E>bLTz|Axyw6?2)VzM0>QN^P4t;8ce9+
zF{$8sr##@J;VdS2?)Ae-BBko-4D5kK>4aIBFd_unEl)%4Rz}IH9YGElu`k|Ou@X}}
zkhyUTHIVwTh_#VNM7@KT%2fp3AT(uCt!k>%zHy|)6Byy`;|Kxd6^}8bVx{_a>2AGG
zIk3S&8Vct=xPka($Tfg`u0qau7>kKM$&DbGfXoW#9kNA~u8Z3jc;<>9;!$vT3=+`N
z@6yiuCV($d>K&Jy_j{JRNfB$Ru=_3~^HJ#Vwp3mL{qfC7d2*G&#7oRTpB&i^gn-cI
zQvTAn@|j-VrWnsnn6%|20mcL^RtJkJay|ws4r*h>>(hlT=|(X3Z@<+35<T>AF(>Wq
zP9v8z@Eug!?0f|nN0NNAT-uL9U9HY+s272Ct|a~U%Gd3Y0<|jVO&o^}e(7@OdLd<o
zo9&1FpVF9s)sF;H$c3@=ENW}Ox4h%07d#u#mGzH_45s5FX+}Fik=}RMe^3Bhw$!V?
z#cA}sJB+H4qDVaLXv+I$U}FEE_L|H8W-~h{2f0d#*%1cjw}?M1?G_{Y^Gm4^zLHV!
zF?-2+wA7^cf59^@2G9A`;l*4Xh!Ar}yQ!qTAd3yb`QbaB7rko0L<zA>_}<c8)AD6b
z&J*{P2zObjjt)pMmncIDn5v4@Cg|xoyv^Q2>m1hbMUvo0@DUfG_<OH!SwlOa65siM
zHT~^om~3<ZH?>`iyLe#$FR4%tqqgAOw^WLjs8yzi6T-{+v5$d?XbJFvgq~pzq77~$
z72t?jA!5PVj%K4Pus3^@I9Wk)W+djgk{XGkBN!HqR0)Y3@W?R=1f{E``i&B!!Jnx1
z)f`DC4P<dB&g=x=ilQh$LtdWwlN*$7pAB4V+<~HlW(DhROb}8baQEc#Rp-sbt3RU3
zz<hgQ%1sS{2lr?+b4p;NhAy~Ge6Y?HF;INaL4a7fR?q|&r-(y;ec@n9zIpot!fx1a
z(GvFm>dw&+^+Z0CmFSonUm+n<t_l4?LfWbzN%OvZ4AI>3`S8%>{R&*hViluR){P0=
z(bU+m8=DW53P)hWkHei)KQWR)2mgOk^TN}!x<S^Q;~zw&Ybh&20nPP0cIPx&@D;$S
z6<1Yu(S}gc3MmU9i&Ep&*xjldblujZ)>WD3LlBGx6i<M$URnw)b8@t+@DOH^m`;$F
z8y=AgAZ(1yA5xnuhN`6psHaq@)lxh0cj>XJoH6+i>Dgl4;vjE2_N&7pK|aHBaSuC-
z2T*1S-?}@LqIaZ?l@>K=4@y!7sniu_^h)fn2G>y1L(AdP0&KHeDblgdpWExBS`uw6
z&szjLO7ytYR;Zvv$+qldsNgnhP1YE|6lOq{;VilI4<EXE&G!}1*1c_G<w1%;ZiCep
z^R6sM!cswzyi)stya{|Q0#@CvxD-^5g3Tym*CnBI(1z)l3zGvyE->po4+}N^uTVm1
zra9PfVVj09b)GBj)=&cMyp8M@#Rq<Eh(w$nAo{0gvtNb;pNFBZq?fw-XjqonA@Q2;
zILnIhEdb_B+1i@0UE_T;#6HmQJ!5ynewyj!+QL^m#aj8$mTwRywW07IX+dKcZXn3m
zs*(z*DC3RygTUFTU%uV@yX%`a!PgwGb(3fy4~iOb2ZU7J`=vdY&ZX7Fai1XI22%k@
zQ{ZCYY<vW>W?P^K3mN4ir-{<BXG^TI{p;a}mVK||e*WK&YK$j4O@zkq8tNgIe{0FX
zTi0GAopr<4<l~*|;sFiT!(2Xm`s=F|$#6}15zU(LiD*ane}g`Zaocg%-6w=Dkoim%
zYrB<}0^3ym&9sho_I6(C?=2t*{1l#H;TW_G=N+3q%v!yYRL^>+-Mo@4a7b;-G{>$k
zL9}A$;{*Z+M}ZRMwSl<l?!ra|p(tuae4rYO9aLoTj~+^2^JBuCz25vvU%s4hpO+&v
zthl(1n`TfXFDb>mh~?8w-}K&`q2{}l*z#tPnEf>(jMz=MXH2N?5aYSJ&|To1@>{NE
zx4!_dT){;XiHv2ucr=hUH#cuZ^YR4pkxr8dT62@wfC}nR(2twm^k-{HE<Q*fIUwlw
z@uad5KWP&d!3bHts`6$AC+kf~%&q%}UHMX#`>eLv3EI(6s0Q-ZnnG#)l=1F_ebA}U
zd*QX$j7Mf3M$udXE2gs_JaI|r44ST9(*UEzIHvn(Ntro$eub~Vts3)hoHN{uL*|o>
z=lFT&Q~hO;JTT%N{Ey1MgUpEB6jr{$AhG4K)xM}d-7qh$RRWS^@vt}cK6AizqpdlD
z#*ngqU}V|zYJ7fGGQp0E<PUlEGi_u6+G%*SX%9Xr{^Tcm)LBRw!k(0b$HUTcr@~YO
zl*=tUK8IgyTc+!OfXwvV9KhG8UUU>k{FTquKkDey^yfs8=&$0*${Der$Ca4-YHxK^
zXur1&whjEn<2GI~DcKP~U4!$Eg&;sMvffadnk?Wu9o`>EEhK#7=}%G~S$mn8DH@V`
zLw`EQKBc1Uc#d%&T5QH8pI?f!N*5V0(v%WX|CZd!Bgnj_HVi18R{unI4?fz0rGMA~
zm7>P5Nm!#h+DQ_uFWmFbmch)?mvt8QCLg{6KT#j^oaOwzY8949>vSXX(LIX&5WVgT
z=tLe+(vYSX5H1-dq96Q*b+S1)asiAJnVxH){S{=K3oKweJ)YJ3S&OkbI7UyY6F7g2
zGaol^MZH_(Jkt=4gXCFCm@cWGL9f9{-nh$3&(1)m(2V7qkj4Wqoa;A3MKbR5)V;&F
z(aZ)n8PBc#WfyHq@qb%1cHlNMv~`0q(qIDdFmS^x$8f)Q&^f&ANZuJd+Ofg>qupGw
z3En|`UJa2l8Q$;Cb4$-vqWsWm3^W@s7B_X|R_;5^S^p*sT@^}DhtC!SLdVPcL|;N}
zh9AH+<xe_D>4NZ_5*`YE0%T7M<rdy&eUyix;ZetJBX!8Msw7@<827*5dPKlQ<|IC=
zH-jGL+f!0C$|^%9$N28%yA&8;OVPLcdEFG>fq!w=2|ePG{Ypu<6PxZQJH%W?&(gbM
z`X{D&v7WHp(tqNY(8Y1E_oI5`EIC(-w(5h#TVT#%Rx(`8N+l>Ld^4ssXH13QWHR0&
zn8To`R|j$j@*rU3p^hZQCt0#;H_vmemVRG8p4Gl5cIoPE!)<=qx}Ga(JF28s-ha!a
z4%8HW-+^a@mqXTsz(6iP$<tTv^0c>CpnTv>xtPIX(vaOT>FvC5w6x`QGO0mnnyRHV
z1e^ke{PZh!maW>wr#&ScT#4Dqb1<{DWW6Y9g(ye&Bghfxo7{sV(T|!{d2eH&tQ2B7
zDbjfcuTEgtLkFym*<?@SBI8PwZNv`>AI{eN6RNwBa$|11d~sgmtiv&(@|{})?F9k$
z4m6)t??M16(K1p(KHV<IJf=}W(1}Jo(g)}@^6h$svwu(E6u1<?MUmB74Mr#!TFg2@
z&z-P^MS~BMgosV8CY#V_bA(^;#1QyoI2=@feoU~9s;0(+PKfNY-8tvT9GBaIakFm?
z98=A;A-+IQ0D^Yg-%Nj6oC<f0PWzNY{m@%mk||>DNUxPEoTOA>B24SrBfD7lNGM~?
zLS0CE<0=l)3?ZP*tq7MaPgJ&_(AEbotr?;Z43UGA*xRwl1R%MOxFv*Z?HUiREB}RX
z{;$FHviNYaPm1L*p%6hs1y2>D&7=&SSlVrYDXik($h?-rTm<XnWPd&g!p!ZqdtFm{
zzdHk6!wTHM{nWyWrvAybT|-<I#*60;EWrQRy%}tmbtp56NxL{nA+cS%f;noW8kW1R
zR(7zct$)vLmVV6WFo@OpwIbt3Rx{Cd_YGE8&K=QGht+r6d<z6Cx2kf~f;7G@*jnJ4
zuFHgAaA}65Aql{g_#&7Lh5$p}5Ex9}2nbbezNMto78tOlF=GLj=uy@$LeQa~k8k<+
z`CN)12OOs{VS$7Y-~==U7!sUWv$f|LE%6*3QBMzSnqKD}))$OVEc&+)MMQmxLsbTb
zc@|59i5&^HAF&-z38t3gKNLoKkQcc+`~bHqBw%Zqn6Debe?}yGCHH2n?=E!mU4cD)
z=DGVTq0<uu>E&!s=9y$+<nKxKYMfl|!`+tbrAX3yZIZ4TvTP?pIvX8s4DBW&j6ys~
zcvVIkdJ=_=S#U5wh}jyCV&HLkoo9wotnQ8qNm6dEZ!z;wd0UHuUEI#rInSy1dA|Lv
z2Ut(1jS8%pj-#2?B`_2|UtYw!g4{~}f+U}51ihGm(?#@GIZ5UUZc%y_YoC4)8Y*NN
zLUCW${-B_t=m^V_Wd>AZyfk64VmhkF91Hh7Gip5_1;%IuPD(xh{47qpPbG(q&8pU5
z_qCken2|1|m#rpWp)_LyMAd6lZ#029V*7mwSl<yU4W7#jEygWMDP_`SOLdMhvb>z9
zB;Z%br^-mLZw=PJmQp4A+(_#@V!@qdqL(zMvHA`k@NNPyx!|HC)z9ABR}O$e?&bs3
za}n7oH>n`kZk?wXU2v!~VaU*?FiF`9Yi6+w4OB@<{e*$EmSK^HQ#J>sH*2j)u92nj
zp)8PYsrIERoVd^e)l_%v5i>D;E8#^9We|AD`e4G8yg;0z{LIwSDtJf3S+%jcRDEJ{
zRCI<D15RwF4VU7>FOl4kY)g62;O;t!+M}GPpR|8_BmwmQYbgf|yqaHIwcuv(sL!Ud
zkJPx7#nvB9mfdvCc2fqm7rHI`c^?7uD?wyIe=$k}O6_;=S~%8+hvK!sb_RNQe_WVt
z<pWna;8mg5k;nQawn$4*C|4wIffU5+OHc^Cv>d27Zr(Ki_lgZ0sB<_9|9?aJR?OIa
zGR7fB4Q_PUvc};maaPikA`F;`lNL9S{Y>+u*+#c2iuH6qpd*gO8iEUeW;plKJ7}I@
zDVDJUpoW$j<A?2sjvVa<3eY|cdm`Hr);e4wK>I=xJ<Qej$}!qLBZBA3`r{cOO~)LN
zMqE-5ch)Jw(OwQwQ(k(o3~_IZ`Px~goRR7EHN)5fM-Z%BIhE<4_>{R0jmGE$pjLsx
zvdR(vU(qf#<do=j`=F-=OPP?(8SVdwlf?K#c^&te&?lmIRp}xr;*%Uq&Zi4-4vlr!
zH;$`CQUEq$CSU&X36xvL%2Q$jr}=h7JskllvNPT!g)$8{Ko!oIm8(dPJ6bPPmPKBH
zdKo6t>Jv$jH|tKlNoGh$r?TNDaXd@(`vja;&hQCK-5L08(|Wi)pE$;81w?XrEDRNO
zvX`4m5V(~R67CKXFgso&ljgh|ihWWb&m<zMwZ(w|r;#$ak6lW(Sfj?Lkn1)^K?e@;
z%jbl!Rm5P#TD1D)2>{>_T)D;yG776w)^HJe?y^9WOLAJ4r!{WIZh<q?>n_m>kXpYI
zq)_J60*q{B*0Z9p-a4=8)D&}t$&h?ByPdQImk+!kCd8`EK$>42;FPcVTT@dSIET{O
z$Ap;Km<U!s(b%w>8X5<;@+hRmnVf)P7#*<3V3t2~M!g_X%2N*;6HDa}tai~(V8(`o
zhFb5)pk95B+nv8M|AIPg)T=ygekff^#*ZcO(5UZ37s$o0&1gfA>>Hxm<n8Pd?xLkI
z&?A1>d5(BFz1K``9aK@q(bNYY1>}ov2l*rLKM|uJ?dROy_>Q?pyK8<RNb;r*OP1Nt
zf={6hve_lLy~<=N*1&e|S;TlW6>^5m)VAzM03C5WN(iG6_1!~hofsd3Dr5vFL}lrw
zPCcE<ZSO3^(Pk=erQZAxt^f0M@#VIV`P|m!bZttzY=(5_R@Fh_qnO`hT)N~)$XX#I
zgiM$gfk_ad45OD42r)+}QUd!g(BM2$@NOdlk6fixmAIDUq!(9*cM9=^NS5LfjO_b^
zBx%|dDCA1yl1H&3lnm<R6V^A(u3TltQ9<9<nw)EG=LJ^qx{pW>m^F?_K&oA|^y|X&
z$KusarIgi5hVrX>f)^=1w8rlKY9XT(%ZF7Imi<LBWM;15JwvCWK@iRw4$5Xb1@Fu?
z?Rg6AC#NuY?rgT5r;@VsPn~e^u~FIx52IP5M^mLEFM3I(>y5+}Z(aU6@^>;rtf47g
z05umKqX)h-P?g-`;`2#aMP>&wbV7{rw~-lxZgv_nxPM2id0{dUxH{5ow&#Hkl7j$(
z=Ap`o4WI<{9$by;_1ct9(UcoZR^LNSz(^dreWv{p+;0t+ed_xYXC!7^6rb$qKA*+3
ztOI!NDFWyov-etn5aqgJNAv*tZiS1A4<S?bE}-#se9-Cd0S_}=C`z4VUPqYaNXm8!
zhmQ!mo@IBkNB-V+hjyG_w?aj9+^5$jQ4U(dT(>2i%!$>GsQ*+O&)5le!~x;!XqRT&
zbLQ1&Bxs?vFT1Dtv!{+W&*m|C-uhEc@h++P@!Aw5m(Ir447$Sq6Gw*P!-t*$+@6tH
z&|=cPT_Q8)lOwnF$iwCW3X^yVL3<{^zAhhw0cOQ`+ItOjs+Wlo%7bR##!a{3T#Y-V
z=go?+G0~eE`$@bkiA$AL?uyX*ak`HOHFipk|H9CTe{#fH-iP&k<Tg|~L>Ep8Ks7;B
zVhlvo>^h>bnV6Lb>iNOL*Lk>8l_BB5=lq&cti#TF_b%a!;^>1<OaOH09Qs6qcC6=x
zZ@*qM;hY_lhqB{N9?nhy(j5d(59eu~xmrq1@U->3r2dCV4{!lC9o)z;Y%`~3oxEMZ
z@^)PJGXsl{a^wQcIT2`>ZHPo-?;BUE9^2?CB?zVtzRTi>T!-ok0W^<1oKgkI$mx{J
zQ(?)b)Uw?`-L?@OSll>@Dg|H=Ui0&D?HB8LD5iUdm^Rbp%+u~7av`|0R{obyZwLhc
zps=omP{r&1Ya~}Y-Q{~I34lo+jcK5_oy)SiI=J&I;~bYpJ_V9X?JcSYedhkpoNu&>
zb2J#hnW*q`&~wIB8~hd_LaP!&DvHDnQD%ZvKCH<c!aplVLRba*mX&`d!X7EC3?iw{
z5<Sl_GHD*Lr>RQB)89Y0E;5^20>WY7fPO&j*nc_0@F5C_=*dyO=u5KJMob7%@_@#I
z(tlEm_U!pSOnj-%ib}_j@jwfSOMK@FeS-IyA9nVbA{E-Ym3K{^;Wuq`%(Bo;Xloo%
z=iH@i7sFn!x_&O0e1Fj9;#~xeNn{kz4FbTIk+C*$tk;@R;lHDKr_<qlc)TV*m*5aT
zYk5My4GP;p{tkJe^>dsissB)wPp>?s<SjY!oozF2nfW2PtxzJo)EiTk@{@f68F@lt
z_n?(y);F1krd_RJ41_eT2f3pXaz!@CzT}Ou$mn8(bO2gCnMqj^*vq_WwpHnrDqNQm
z2L>IkzZG9sJ)y#do;Fhz6DLEk6G^V^Kc2%o<q{V1V6SA1+;;~4${G`Lvhf!!;RCax
zy3*3`9idhMQebU@i@MzoGs<1$W{g*kImV|uQF%7!rOknjTQvLr5s)=W*hx=6s43lM
zAz-f@1Z3mx23ilMCLcj2XATqfz$&YY+c_RHhVvr`jm|(0ln5myi4m{BvG~h~nWS9*
zb;~&fWp!x|BME}Yx>w(MpW7degyPkAdz!Sk52{KI3WZUk{x}>8fPPj4j{UD_OIw>!
zf8iEc>?_bWkjXJ_(#b2y4~tydaWS8eD~ieP4Ng{s=DJQas~`7L(btIQ<ii@;^8h|r
z#{St`<+~1o#JoF)-;<Ocw8k|5wVB&TfPWY+UDn7NJ;1k)l73c;^?Rpqq7vcttL&=v
zL32!_npmnj%;#RP8@?%`sv&VX<G*u#(nzR@V`A^YFSxAcFp3SRt?os6q%+C#KK5A9
zSRuvaa(tNNSE@PX<jY9Rx`41=eMnr^PC*ZipD{_kgw>coN<n?-0@+7BPZ=r1b1coS
zoS%sEX#WEbf1^1&ejqM+6K1jlV_%;FKUNT`Q&`pzm{wtHhBDY#OXNPVCgSo_TFqIP
z(XAYSe^Jk)Yh*wQ0Fsb)Est@5Eql@)77unil#%aF5c$Fb)dH^~SWoMwuEw+!{IjaW
z2q!j3vPl_%xBuT3Ibur^I7h>cfy6B!K@HDWsB@qKaBM0)u8x??<>$}r7tAp1#=mi{
zgsR^Lub<UuEON^H9@N!ZQA?YrimS1}JePdV7kYw-bkx<u@}{p(<U2Sy&5Sz2UGhNw
zDW$8eh_APrav+f`8k7I74D1R0?1|#Vy-(yZ1wsF29~1kCsOe*!_uVxFCXo%b1H;&7
z)+)BKao*2JQWuH}D6}QaG~EyXtu;WB#N2GJ2&V9D&SgpY2<?V*+_JFe!3srK&k>&L
z0HGuE-8$e`VMbZljo)J``VpI}P=K)@DwfUD&K3UP+s{mwJf`eyH+Z@K1IC2MZ$4XB
zAV)(iI{u&?w~@Wv>*7MII>B3XI%Bo<pN3Z%NVx~%tYojQ+9Tsg`#B%(+zoT$#1g$I
z&&bDlWAHO;-O1ac&G=WKnAFS`lfiXuVX<(jHYCx~6vOX<7@|+!_4iFPwTj`O^h;eE
z+ikPi`_S@ov;%6cBU;EZQuu+-3^Tr&%FoM2{q{TgkSLWDZ0d(X>#dZ{Z^#4j&Ayn3
z&;it;*cqSO<aE}~=y%X>oq-tbMG<k08fduTWyUEVQg5lXKg%(qCOIAa)eTq?@kO*K
z4<eiR3U|Kmx1j;YD#ek6Wxj-7o(6HC6t*9oy*Vm3;^Lzig&vLzTI}o0ZNVmimJfDN
ze-0R^z8IO~f7Y+DP;$3dE(E{!$cTpqdfC6)hBH`^L{1ksjw)Mq+a$q}1Ht{eqUh)a
z`IJ5vLsNwf(17kILv~38eAHqIplU{o^mH<-&#Mb{bYmginl;V{sJi<rL-c;-<gKx5
zA=$IpF4FEThi;@9E*g6dzKX?H(JP{Yi#3DJcGrd(+qLLZ0YSG%s;V59eC|Wm;sN;T
zqv46HZA()AVz=vnfHZuNyP-@!%X0b1GJ*~PbQ;RrG=?2oDmVK3VSBd_p6fZwaq*^<
zt*~18uQW9^Se?jyLC`X?UaOxy9SXlXNOUu)$j>eIj$2DG9`2lMuJ^|&)isCwdrrUl
zw&Z*wa&40@<3m?ABq~-*A}{e*OC}b{136vDWX;^uGZhFO;mP(e{`L*>0@021$}TK!
z=cM2M_o|X*7?!z1juy#V5?xG?WdXSc1eU}&KNj0~y1B)w)wK4^|Fjzk$7blk$U=Oq
z7*#TDt+IeHXZ>SESE^^a@1~h)Uzwc)0Gy{uJR$k0D};f@fk{YY#Q$o;lHG1G63;go
zWY^pU<-zH-J_47cNWs|3vb&<Xbc#+eLU{0?io0m%B6(vDE)bx~snsd3?!ZPY7k;hC
za}AJ29D?Z*pJ+5ON?kP_6ygw4k4v#_QNLPa&{IYR0V-42qP8>?=RSi&H3IbS<(pSa
z@QXrmt=<R_TXhcH1Ll*1$S1n9_CvYU8F9{>{m2@|Oz8Sec~oG{^I-t8eL*4bzDTPH
zN~^uVoBg|T{P<RO$HQ6NTI3x2WDN%`K+mUcjSb1KGEe2FL*~YD>X7E(usEW<6)72D
z)8+vpoCoc19b+y5;M$xr5&0UIC}(xTnBy2vYKu>rUibDb7R5SaQDRI&>O2r*1amez
z!^OfJR(R<EBF$|jGRZ1Rh@FV+T>mIiSB|59ONV`<TV}~cv*%vZ)=@!x{W*xr66M_I
zwv?+hJ7Q)6zbbB&LlTguolCMjV-B7RD$k5fudJHP?#1M0gNhhFN7S5x`I^S|pGR9S
zCzk3!Is>9L3r8*2Hh#)oN8T%=lNJHf#FxQaaXP&}KQ|wpLi%g#X4)Ba9vW?6)pOe5
zNTbzLY9+cb+Vxe(IgWYTBLj<X%=zMyVfOjXXUr;sy#Ta~GMT=q55qGSwp_eaO!rue
zQMP4x%L3*FYVVEJL%Ix+O*fgl)Fze2gPkY@dpO>1YSfK<P>$O^(BTL^J4G3d)_`1)
z;)gtcT$SagMl`yE;rB#-JqV;<&));BTe%St&{D`yQYPN8tfcmTKdV%+UlHg>G>YYj
za81pTz^b*nvv!K`Tozzh3)7D^21Z`2U+sD9ZuzFyy4`L}3^Y!Y?Qc-+R0LY>B&!sv
zI@LQ0+1IGd>vK}WYMp!Sq6WmRM0&@OAu-n=Pt#VaC?%XyNHk~}dvRi2_Yw1NCPfJ;
za<vBmit0iH(_5m!rx+lLS=>CuWPBOa+s|AIyBZRH^RaDO(}z}X8zASVzCz*Dh>qGv
z-hfZOvOt};70nVeqTF@8D^+Zy3mbKVi58yjO)%%{WVT_2_i6V*umhKc#1ZY<rm8x=
z=h+{yYS+aA2hhxRdGK1%_EYx>_5;@5m2dK-{Df=%500|%#%FC&SVanPDw}1-hPv~S
zRHN5HSHXxSrRV`XH6=1CP42sl_qi2F^g5lJ?BXC`OApS7i7lOl8+q{t^N`>M3HeiZ
zY~=HLP&wE}ZE!7>O>2>3IR>eHkOe?wyd&XOFMCT<$<cI9sSpy`H6a)7tVF*s7#)oo
zw4%-(!u3oF)7*5WBgXlu7^PM`n<Tc1FNt`;n}u@AXaiY9_hK^jn&*jH760<u^&h5F
ziwmD>+eVOkgs*B+e-7{Nesx^9O@*NK)digzNJ>{fOO&V_J>^yzaEK#PvYq>~)pg)L
zufs?+zZzH0r>!k(K~A}S^x!wu5SG1TXx`xats)@_GxKps)8+Znxiw=0CkLYbA?~_^
zNIWPDT&@d@%MT6*#B0WwzlF?(;Vtql{~byd-~!?XFMujfX-)qRJOfhYbMVPw((i=u
zqfK2}Hy)outxBkb^#_q0xFcr4ue2(xZ@X;XB6Md--|+W6*GQg>)zkL5!!bb~-H6Gc
z57UK&LofAkfWF+PXKXRk3j1Ua#m{}Ke57QsN4US#vvDn|53}V!8l(NPv6Q^}x?(b=
zT!ynpT}~`7Oj`vC;Xt=HAUxek>!Tr1PeHBPvLixK`4mrp>p@vaj-+pQDc=W!h(Wru
zFy2lK;hTG^-ER{Ka)j=In1LFxRAeHQxOBISgM*cRm$GcQ9+TV6Aj6gwDy7>MVhq}q
zC^zetUDY=E8i5sLcr!ij)7#BmRuC%4@Sal?sF{}vWBVa$7iF~Os%F}`OP>fmHoN*@
zU1kmpVdq_W#Djf*O)5mYg?$?t$WovwSDd6m?%;x-UWMaQ`17lnG{=WkYdXS6QRd_e
zLTKcKQ}g_%W8N;uT_)rXf5-#YIKvJXAgGYjVW?K{_z~B-XW%r{4}iwL^W<dv*{j{E
zkMnd0ylMrPPWrwJM0{n2YMvGyto98xFSWOR_NAMU&Dy_c1kq4O_Ge9Slt4xPnckbq
z?kCeUy4S$siN$l6yN@H)GH10an7J|Z!PEywAD9O)zl@YjIC=5h^B)73Ts#SaEWm>>
zsj?9qqn!w;nbzMk<2rs2j52T<R=4?m^!<Y4iLyaE-Qkw?RldGd$i7sBnC-lbO02D&
z1~OhuaU+}gt7n60doeWyW?~MNPrf&|STj9TF_=jf(SidigShXKUMq&!Zprem;DT+z
zTn95&2JVp(Z&&dWqzm{JE-UrBFU!(0XEHPK!T9LWLH{aOD__f46ix#T6a#fbtZ;jt
zkpkt4-3rmc`T4b_wGniUphn$oCf;Q=j;Mr7T<RQT*yLnDmrd;!=0>nDJ2ieIFS0+S
z1f>u=1XzdtOw(t+z#=gK9iSNBwEv%HKo@GSidsn$_DNtt+tHP5$Qg|_dsK)lA-+4m
zXr@U%52gF0MW+OQF70r2K2E@+3Lb+Tf#B)nA5qj35rCeXEcPSQ@}I}z90YMH1a`lc
zgpCx^v|sMpLd=KLEi(dNYxQ<>aMn}t1YmxOBARe+^N#s-s1<h+w(Wegk%5GBRc#*m
zjeo8nm*asdw&LO^o<c4VCO!M1(aeg7+$cC$)9RX&hpBcTPb?sBPT`3DJ<E_nyOk@F
z3iY^Ev8GDlg42JzUZn)op|Ky%R0En`m|i^k8?@`AM!q<*5wUurQ-R8$xs>o`p}e0v
z+U&It*EV-7z)7ftb8%x^J$dp^nTB?&S%N~5esZK|cvRSJ^3-yuT;+xwECV7nf!T$J
z=v2Fl-A25(le{f$&ynH~izlLLl*&M^UNhf|khj<hCd89990VBU>E#-`4~X?L@FGlX
zImLyndjD|q1Lo4`2cKQI;F5Sz$^<pJ`6FHmn9BsVcwM9j)m#6@77%01S^oga?tlkT
z^AH*{Q=_BWM%Zr?OSo@fs;~Fj#Sd^-ZoKpY&p`O2hFU!E$DZ7B2qw{mTv-Y@LgtW$
zMBiO`FregAY@V`S4{rcmL5roj)Oyo+-HI~SYm4*YOZNO4K*g};pA&az>tEg%02C_{
zVvWo#WXwc%Nz)RcP=MxV;$isdqn5S=I%rbwmD;W=8*-!Wf^sF?24cpJ==YB=O9`wV
z(~!qGkJL&%Z+h@L^_(?3Rr{6%rI&SKO(vCGF>He*<_qG0E=ml9%Ag@jPl$-jA0*gM
z&Gq>S=qCTzbZ4dexnZAJu908HdLwDbA|s!nbfX!|I6xumWVwpOM?kDm+%3V?tVEAY
zsX5gCU%25w)e=LL>%iA+a)Ltdd(VO694wWdALNfp-BjU;{&is~e>{f&GCw7y4d#`w
z2YZrFL9oKvkY8E6&fi?f{+Albg$W)7(N#4^d_tFZ!utCWj-AIwfpGfm^oSA&1B+XO
zdT)kUKY=Banp)5%cnV4bHPH3GT^=BU;;TE4qF6|)Lmncrg$LH26YKiRh`ll)(64b0
zfp&cWuGib~fN$9ZV0H}ssQxh#;B^vb@tz)z9dGxxxGu7NPd>oBBv77<4A7NFmX#JV
z5mZyCYSG`=6kTcOljrp}Xu7t;r_4Kd=x=?~wqNhmnBdR__)5{`6!X^c-~dV-oEQfe
zl3h$_yLZRN+oZF?9FuRP5eRol-Abhs=OsZ9qlXd(){Uf_s_9Y(KgW$xQhPg4$#d52
z6Gu(_M<UR~*n}U#ic^4$#CgzEktkkhHyAF!@5u(^1#Wq8^DPE`V0jDEL1B=KH8Rh#
z`VJlTj0>15xg-4ZZr66aoptBTd%gPYQgf0D-LkbK=}R@^gmAsDsv=(d$}^fAK^lbh
zvOnv=Y>GXrp=U@6cTI~A7YIJ7X9;_v@T((1|EjR7y83Lwj9(|#g@R?^fSSM-EYNlh
zrIxBljF$M_Z_%rIaXW}5)8*LswUCRs6XBtKOh|=Ujtjw8rJb!tu>@2J`z5*XE^0t>
z@Kg8%x)Rg#jbaw2r=@Ua_YVy4WUnaMGai2SXt6QtYXEkOzwj)oi#F<Ft(l*d_<#@l
zbUWgjiI|ukd4B{GOCj~LbATr9h=ir1Asz~ITb+<AGk9`1I1jbT$=j~<5%NaW&iD-~
z0hMF3eSRXyWc-oeSn;`()4Nj*Xv%s?gRsRgB~1~`Nn(>3%6b0Yr5&CByP$E=>S=au
z{lCxE=jZq>1Lcr31$>oWq5SE8b6K+S02_XjwBA$qkP+5rAgc#VyINU#!!+8ewVzRq
z7iMeMC!g353)u@5>F<*L(FN%hgc>0LR*t9OXO0L3ETTeL<z!d+gMsmG+Oy@k>qKix
z_Zh*XT3uHw-uvnNDfjoG1JYjIH=`D2wj0n!++#(I#AZ6r$deiSEpn<S&h|{?XXJNZ
zQ<jBuNd^3!+`7U>A!D?$-Uy<>h;%lSd{WBBNrb&GLNmlDl`XdHpE-scw}VPZa@tJM
z8hrk$I7!xxGaA>o5N~OJaNrltdbzw2lW}@!e?;%K#jqb+v<e&#@+bybP6W0rugC9?
zsi-yKlvLD3<(n3rEp=Ltwtvhl_|2`}M2Nkt!{Dh!6w?3%Q_G!r;UeOy=4=!Seg7k5
zykIeURVD%cS?e^7#ikLlM~oX=6`;eRJGkV_s7bH0o-SnUC?E~l@SHfH^&5pjI(O>~
z(k}yOnyR_o{ota`x~h6-wYbKDdZY9QmVOYZqV`ZS03@OUhskPp>LJ~<?Z@*V<=j>0
z{9)=Uh%ka6y~!Iurk4LH<*1yOwmKs579J#|HqM()`IKmU_!!$?<#I&9ZPs`x5T8E=
zhd)XX*qw=oBB8e`r0rg?oyoTH#odfbVi!Ism3$*sAzRvyzVoB=Ajgbyd1RyW@@$ME
z57cZ4@U)_T(8W6jjyRB@_spj)la<p(@}(m{u{m;--{4KJ_^B3k{T2}<x+kr|6kN{D
z4@H0zs$h6xfE}j(q@aEp!v17opH%Hos;KtpnA<~%o=L+N{q45b)R3Nx=!Oih)i{yt
zPgAYYo-&tX-ir|lly972iVAir$_o!g6f#Z526*>d7A#9H<|qIS&cw|mnnmW7yjSTT
z=rWdvTv=l<=e#FhW%nr{sHK*Sr1x>Purs`y{4)Fp>u+fQ^yimwXQP|?_@14@{fil_
zt2z$=a7WzWU%2Z8{Z?3Dl&7BvL=H(%ALwXak|_4!1Qu~z&JK2B6@wBjQ--rn&nW|-
zHKcHC5wfZ06<HHDBh^Dvjz51E1!#Q=xP}dn$+eM`4>?*CaI_`+0@?6{n8557<F0UX
zQxlPF)`g+JQ5g;CH)9>KXsXZ_KcXo+N;av0SCk7RfX9rRAw#$=ta6_UtR?f0Re#-d
ztex3-1ZN;+G<dH!pJY(S{wAR`;>&5o=S>~Y0S%s;mbTtl=|*9pfpCDjeoAZR+~Ht=
z@~8$cYTd%1=qxMoP4Mu@0?ms>PnX3A&Ey!dqQ<xvzMQf}qItshY#69-E#2P7a_tA2
zItD#$hk1NKCBo00p(#`dlQc>J(DLpG!Lt8IpE2m^f``uy*>$oRRH0$rqQa+zerkBN
z8uiVwQ#qH*Qs=*>K?o$&knktoNF;hr;jwQU+LrvCg5mFayVhOkp-4B^q5l7i`}F(_
zsNHE#AfRrD%1B9jg?X8>Ogs!!>5HjngC&40jDUWgbt9qC+k>fM=I-JC1_TX&n1&7V
zBMW{U%2fI47rg*FK8;4;PQkAIpk>~_AUJ4rvMrkPP!HT*W+ZzQmG=@z6NP{1Aja6O
zqLLrFcwxN8yK$=oI~ge)2|U_Lf+T~XfzlX#_9jU1c!Q$ohv2R8N^>0Llr=D>Xmf%%
zmpwBnl@>S@uY}Cz(^MON+y~>N949)yP1W~U3TJ1#lsBL>SqT$y&q+BDRQKFC%Ih&m
zBW@>ri*G+2o=^?%115u$Z&m=GKv*?mqnY*>0vRf!q9R$5rS+H_(8ahRqF3s4=w9yB
zr&yYwCqDI~4${OoI>8>;Ne32>{IiDD)68FPA2Wa0SWy%g#5SQ3BE8r!ayp`*hDGZp
zP_Z1Tqeu1#T<PvfqzJUAU-f?2z&7T0cfHtV9;&#!g&JibGspUVFO#<7<tJMTC9}RM
zjI)r(R*i{x69c|3*I(9nb1JP{S60bz@~>13GlT>UdKIaC#5aHJr7=5@C!#JdR=~SY
zlC8z#rO0&hR1&q?N2GT8hfyvunnrBB^~cwnXlh`BoPifjzbv|j8S}ne^h@|Q80fF5
z62h@=4h($9-6Y3>AFsxRcZ>jQ=a#)h{7gTNwZ|SJ<*^wMP{~IvLwI4Q4F{0?rkyBT
zf^s*OsR-YJKRd5V)Q26Y1$km5I2Dq7F8N%3S>2j+k}8U`rTc%*%l5cQQA}Qw^S{$w
zC1{Y1@d<xE^dy4Zq$OkT-GqIV383N(_U`9v6DjgYsZnB+Rruq76<8uW7G9gfgOGkt
zu?ChmxUi`-NY3>l92>XYRz_T1L!>naJ-MkD*&K&AZf{V_+lNtO&o%cqps3VcVA{WW
z^Sr$#(sa81Z$=?5E6t`OGGx*@#VUg_fK#QgM2r-(HEpXsMW2Mq^R!OI-CTaSxZGSr
z-l=2+_y>UC7=w`(R`pdg^_P6XxvfRt5~lf=Epu`Ha&uL>&H<5AUAw-AQ844+a-ysw
zhzIqoAwaY0y2dSO81V}QfT5bdU7qO&x!M8YBIepICo1cA(3xs3qsb3=f--@j?KT$z
zE`_A((2t~*upmF|w?8?e4d~o}G$@M#Y%T!2val<Dr_cNzlJj2D@+cC)by&hD1TRL=
z{olFJ@cgm+74Ds>(W)nuz@ch-*Fj7!sN=jZY;Yn!5?1l)Q*ZuUa8EZ$KRiE@-8RWe
zt_u5-r*@=W-1LFA-&~n{BzCxsBVWP)ogOIt^;DDEV_CLe&HG?ucKRsx|4Z*i1I;=m
z6cKDCxj1Kp$Y{?#pQW1(&r%W_cEwS0R|Pn8YAheJx?b3(#W{~4hFgBW$pn8MqmEPE
z@wNw}(M_o|E&}Of%>%*_Cs1#u(kP^FP~yB@ZHZxKR#yT4w;(6!1L5s(MnpjK%2?on
zJeJV;dl0@Ad7YV5(j+g22I7dwbu>BS<F(W3e#S>F*MjE|Lo;EpVJ(7O@(MV^OU2ui
z4ac%XT{mZn0KAb2%I&|8<04JT4f-3JAURqt8Wa0a>_0vOs5+eEuStjj+}LJ}!|giD
zJB!_air8l6A-{?C2JA4_1;7bTc1BAL_|D|qb@JDeY$1HGD-OHrys<_?vT2={#v!Xn
z%-%(LcsPH;jd=bfxwP#Sc~&*5qZ3Y$5tqxZ8q+UKDsKAo+{`<@TpYC+u&0Hs=K=~R
zpO>0(<=vcWzISvW{udwUf3t-^W7x=)&-e`d^sf95E4@YL>p}PG^XiMmODtN!P@5zQ
z`4LRf2$MhdUQS_ZpPU>Mn6~pT?=yQtmN=u~90o`^CQl@*gXyHPb+@NKlwm){Y}nUt
zVE*0^if7_Z4qXkOzV#{ivAnq`9j(!{lqx!7zg;ketSo7rL+?5)?TI}^%@v8?d<iMv
zRKrXzv`pSTcGR@78*SX$0waHVg`~$6EL#uzP^;<qSFM`~Dg(U@J5WLxgW+q6EJ59>
zM0+hwv^&L*H&j`1!s|`zeCwg$41*ASkn0CYZhv@do8C6eu7H*u<PhF*WP<F$ls9D-
zfbL<Flm#>PF414@#El8S5y*pt)o9{($vXtwvhW?$y2{ZB72bdJB4IZefp!rp_1C5a
z3_8g9;L*^JwhJ{`nlj}`^jFnc5r+N99rKbnrh1#HZ|u%W(dZXdDz)TTLMHB#uXN)A
zqwy_0S_;4%R<=5w`v}|quI(2EEo{5La4<W<H=Lm|V$dD2a$IQ;w7?a92mCZCYF9Op
z5rfieejB2C8C%H>CTB^XDce!D_#lJ}nMn+UkWv_|UbY0E^j%mXoYIw}sfrNSSf<rd
z04Xhgag^J6UDyFpT^5Y;umQi<Qgyh#Mh!f3XJBJtJ|mGy;6}kY-D2DkNMU+?)dvgS
zoo=E(2CP6ZtsCErCyzZ*$<0yDm%<7sbH$$p>O<GX&?cvE%T%Pi&a9f5X*=k3!>g00
ze0mMHf?G1Y@~uILpL<njcM=I-)n|%dGOiP+<OvA2vpmDKktL`V@FT*A@WL`Qn$zUl
z1+X+M?$^on^%K&7w^~x-u%Pny@?gL;-eaS_E?)BBopPGfmU_Y5hBIH8B1s;|^!jVX
zJ|t9QdHAd6qMcS}^RD3{M9Dec`6OY25uShMhjX>J0L^TJUw!Xr-THbl7;(LQR%JIc
ztxeqK55^`|^md=(7sxZc@4UL;QKj4`0QwfRj%!?dLS37M3<7*%dj8->{6h0(>IoD8
zih9UIFjk|hifh{<Vvb-}-tTGii3BoYlUKtywIOf~1!<-jw<b2T-6I#<rojscnxV5*
zq3)sdZiDOLGTs<pJE>&;C5Og@s54+D%d$Szt*3ygZftn&s^mBJ#D+63_R3Zu{8tkf
zTpmz;W$eQj|KHU7Y!tCy)z55`Lf#Qj8;{B1)Q;r^8q&8=KF%;V)5}8gba^pe*g0A-
zW{jZYk;H0|3x;A&RaKZd`Iib6zFjxt1fu0Kmu}N&dxuYHjD6EH`yetT3c{8K!kJ41
z!vEd&b;~hVQ3gT{wCtWwpWcUe^+kU&nyauYL6LU4r0uY^(?U`J=<iYS40HiXqVD$6
z-&sg7l#&2`fy~<tbz<@*N<L4xbHtjI1^i_Ps$Km7_vktZP{ToMy~Z_f4{WeeXY542
zmigcyXBk2~zgW}JRr~p$!+WPO8!QR5Axu1%QUL*%gKRe<c+lKBu+@$NGXLtz@Nl_F
zPt^yG2JUr&U3~R0aaXi4Ug!r2a?`D@toKt1b<bJLj{^iEC-&rQS{2wLX*N9}NR;_9
zu{lqN+vz$jS=5mg0~Hr3>e6d+n!J!gFg=$^=cO$$l1iS$+9W`(v5DGR%Ei#L(TZ_)
z6TtP~=pcv#YbW_BlzU)bc8VR&>LQ(X7@Hab&3Ghl0+?z=14Ez_3h?{OaSf9iR%Cfd
zQFraNpeG~1alFJ}-&q6c(t^9<BpgAQS@^N)2GhRc<2yxfu^BQu{J;cIJP)~AELNLh
z8w2rCpN6N`>HyzEPNKSrU1yR~^;vU|y^UUN=`xEcI}LnXj6NGWD!!|&f%m(#S4bdw
z-_-XO#_Du-GsmKNkAmf(D)p^UAj{YL$_io<t2G+I@lpDe#%|CQn$fQKoMq|M%B1D7
zWI0fqc=}WF1$!m+-k=2eyIao}xDG>d%AP5Lha$A6g6`8KU^HQUs~^y<#{2u>jciE5
z$;tdoCV!qHLg9HMzfTKHhrse3Pc@<kB{@K_Pn0<-nNPtfpRg*tngS#JzPJW#2qYPJ
zwgOEbEWRn>1#lydF4PJNG>+E9I4B`qyL`{wl7?*?h(UGKs27|#EP~gwldJPvYD0|&
zpSSwXoHl|{X+vB|_kP*c%}@=ZtI9;(k`w$79J+;5z4g9(d|g@!RygQANhAakXrA7Y
z#qiUf9;bjH%Jq#38VXLFs~WO|=OPhfgSt4@wDMjog1S)>Yik!-f!TaoJ_HsG7Uo|z
ze*lv^lgNh%HmjR);T*IpiDBc~>U)mG^T~fi56F_d0^(oq^Q$J`4c>0?r21X56Of?T
zw-w^H5RWRvVVO)SDSD~0qV0I&rElU8{kxHDC9yW8F2px6PO|6s+x=nPoaUO&lmT&*
zVSZ906=jXExz4R>tD<a9geZpuzx$Oy<#9eOq7k0PzrqN<s)o0i4k8N5FKo`4Q_+y|
z9P`Ti1@w5q$&F@k5XvTdi?6XJhCCg9mdKuqe(Z)b4FzZn1JL;1XqAazQu=ri?J%)U
zi|t-XoBL4IGJG0?rPT^tC1ChUrSD3+6(b%EQMf8aY2+(-aK33MTwbm;?Ay`429YeK
zJQ{dikglaV6552^%-OUC3vrz*V$MobRq_gb1RH6`!_L$*1|km_vr{r4NYgPCDObqg
zIF0_eShyiG6=MS({_c*WD1r-fQ8`((Ij-2B?SbzyLE-qx{&~1zCy_C>h<O>{X*u`3
zoN}kb?7rTU8U>PXbw2KYa0%kSLYKg`O)}XsAkan8=7}fOfkq(0=*ENZHPT>>&k#%Y
z6|;v+>y1F!n+qyLw;#heRK(oDnx>T|_xVDhGw<G>x8rd0q-T=t(1tt!O2yZxOR9SV
z{r??N09Yk_0UZCMB$Rigx}7^H1phjOM5>dj{wLB`>OpZ??i~$ADuVPCqLwT20X@wb
zFIQowA0xOUmQRB?NX{qD&R}bd*7O&*%5+p6F*0vc{oF#L?l+(Loh;7bpr;}n>MZ^-
zUYL3myMcs|5jP;XdV(l4f_O}VpVICs6U(?>?C)`&G;oaSfBI40T7>UPK<C!mJ<={P
z=TA5@Hwv$i&(+r*+|N9s@>{Z4X5v%Q({%_nk`=h9;A_+9CN4=<J2(VOdN#y!sh|WD
zik(;1Au^OWyoQdZLT<_+O;O{?&mRU+b(-v&ia!Nr2!ejRy0d6rFPD@;o(@^MOY8No
zPp!j@u^IyvDw2*{b6C3>myK9fw0V{06i77lRMjn=GMz2u<X9u6{SIkX*N4A95F_Gy
zOxEqyXD=<E@o`||hDOg|t(`=}9u!&-Ca2=nrw80pM88)I_QqvV;G4g^<6nKHaCwxr
zTipcjio%8=WYTsE#3g#Dk_LjlMlmXt#Yx&au<m0#wc?X7TxlD+8V8+Ts}DvN#ie)5
ztJ;$yR48uH@sHKc`=!b8*u-l4XWKzX#|6cT^h;&SjN?3k5c%pk(D{npn(uM;Ng%8#
zmi{D^nmyKn*NtXtkz!g$J^9C1qI@BOk^6B1iCjeyvbb&AMF3|)YDcX`^NR=C6rI+i
zJ%#Fn;^g;QU`4%iN^H;vPAZlMP>PZ+#3n8HxD&qzY_RbTh|ZYj?~sxG_1DOSpB&h)
zspD_>cA*5a@nm!9RS(GAz1DnA3*=|8`mw?mZVbrCTKTZjM0@G7ozXB=)jKT!*k7bZ
z0SFoee{Oz$4g~mqvmrI71yY1whi2+3%-%LOAO!=Ep{VPQyI0pb(6fH7eM66DsAl*O
za5}B80so|iE;IwSEW=~-m)l>+DAY}pAf?cb#353|BIV3F8LWmdg024d4mQiAxY(|e
zaQ(<Jh3t=%Tpyi{!Wcwk3F<ExoLV_Ta{Z)amBY|pt4?1cugCWyOx6zvS5jG|(7(gt
zm0aEf&kEz77X<z7b`MPJOW%j9ROUAUhpY03W?>^bsh+<iPn<~3U#gTwv==a+aW6qd
z4E|Sgi~#uH-A!)xI`xl+sa*6a%7{p{#}*`=C-cV76R$qqZ)r>-_URPNjVPH^&yd)^
z%VB*RB_>u-<tOL6Rg=dUpDe5^+)(rfHoDp<5UDEp2?#O7wBbU=r6W%MYsK`Pdt`Yw
za30R->N%&vjhxc&jqxeL_pf^epXrnzOCPsV8df^C!#P8lKeUIA;%Ny96(FG_nWcZ>
zk57)&;;`9g{Sv+=S(h9pf)}1hx+bWaV!r38q1z9();qjM2b@U<3uMzFkPH@Uc;twP
zfqf-OJ>B|Ove%I8h0tM$K=KxG2Z}=$RzOfDjmmgp%JsC)n(g%YHd(le_598bW_(%9
zlLMA<|Jh?GRFJz+oeZ%$mQ>S?&tTpqfdT|J|K@__o^pCF-#`i~gf$Wt)-9I&;rUhB
z5KIy-Bg}v7BL}XYVG+f^;Q2dzdmOddfE2&@`AQA?<#Dq?a56EN;DYY3@xtRv7X19h
zmaFz1=0D9q{_}5I%|qwzWh{PW1PBf+L6_j28Pe$#JM<b#as6X0TQIQJZ9&rmSQ-UJ
z`|AXceV<YIP-p3Yqom&_K=<L*Bl<*lKPRYl=`VA-#SR}x5?Iv32PtX`4f8zB#b%_G
z{9QSpNo|3b2ba06#n`;ugA#7re3O^=HG6w(4O5dk84&)jW_^J;{fQr(L><dp8WF#i
z!&qg4aH7lBhc-`}0D^5;p7}*^rH6x<r^K7on*kGc;=I<#M^tr8M5O!9j+B+r6y|N~
zoPJ3tEEoQh^0l+9rvNuV$iMh?L++P2(5hDSKR&_scqNewiBvhQ_9qawd_WMEda%Te
zy4p@#hmuqZajW}F#ZYy)l{>tBa;;FII;4cUqd~!N+$%s@`DxEL{!UltIF5NRILJs~
zVz}6psFfAr>B6*NqH&ym(@licpW~>t?%kI=xk)uAQQjffeifnrLl>!R0@7>TyZ`pa
zzNnPwg3v0B_6pC;9a{@2^_`t1SXB4$sU882wD$<!&e)Xy0slh5);x8u{t91qmvBT&
z;&M1<U0aAMLO3@y+hQHA?P?6tSjl6O8<3@gq3~rk0t5DRg$+wCLUdY2q&Nx=_%poC
zXkN+@6Kg9yb85fjcqd75Mo24=kZyG~-3~y9vTSp(0utJfz0BHqnoPC?jcI|@*iLc1
zQQv9R+pX@b0EQFJXh7f)9am9118N`h_UoPcDctGL8vfpePfG?wpI~`eFdT34qdSg~
z61zd2Z3T+y0jz=68ONx537f%f0wPK%tU4P6g-|gFHyY*Y3|e!f8x!ijbKDC(fFLx9
zaNHl7%|&z<)ZuX`=M1Y<T+`kLGVc(7>ieS)-`KN#-KMK{9qHkg`#k4y;oQtcDK>*9
zs=X`AwdXfTp9Lcz5&F^&INNpt{4xTAzzo~J&~U-3Pk+75{=wc$uzr8kQrp#7c1Pz9
z(k6Ev__iEZbuANt=vGKU#!a#5jL0OwfDr_A8V|nvu{V5f%a8}H_e2El?G(8aiX32n
zpvsw*(zEM+7F<CES|LL{VtmHo76oJ~*__W7)e#7iAlKFq728^nm&fE2$Yqgeo(pb_
zjqH`kpKva@>T!8Y)^f#0G^$_S>#dZJnv8b|IG0WtdX1d!0%J&J=Mi)8t%%{T{@<5T
zUEl!;NjrEY8e&%51hr*^tz$-l1)jJmMG`lG<yQzm)4wtC%aGQVy(ol@2-Q$y>@%81
zp&X9my1@q;R(f5ZbW>23Z3;TLSS3nyzlZcNm%0PVe|LHf0dr4yQ9EIHt}Mk5!E%xS
ze&NVnE{Xa95bWhoEFCpZLmQMpgwq2AQ1T`T*~+3|=PXd+I5g-%bHaZfth`oDoZV=q
z{sc=+)0npj3pE#J3#J(niwfKKVsh+UsH}x`vJ(RHU<AJK&1fw9hgs0};+1?L!_D2f
zki%Fj5$5J`ZdK=C7&m_<NV=+-+GnKH5A}lgPA-xPRCzY20_jaIP~SkT*?b<iBoqyD
z=B1jeObNXhYtPtf72*4$SX(6gm;`2TngNY(1Zeiw5M)Z$M-sniZthHPUyd9-#q9I9
za6fZvdi3t8i&6$rOD64pP)=XeByG}~8bj}0$7}swS~TM0$e|C?KaWkf7epcNBeWie
zG$SqgD)<EbR@Fp~G*~655eJ-}z)BSFn9@7iCYk)?8U>{afhq3+U5sfM5>xd&3)U$R
zSUv*=FWIv#>LvB7e{XTyVJQI$Lnf!s+Mtt4_=73V%tw$B(g*bXqUPQb7m`Nwp-;5&
z@CaL=ipt7ewc3Qx&9<0{G_X&Cx|^+h%eLT@UlvsB0Dr(@2s2r8*58OoDdG6Qlz(*1
zW;G7{?r4a}t4(hJ0A(p@NXM>F@R;`m0y>m`jKBuV>4sfp-b{zD2^^$DsXCle#B!R-
z9Xb(lsZ1coEXqIh>euc;0*bd`#e!M31-g5InFwshqEhj85bQzZovmn=ElHw_yTvRr
zcLM`}(A<RzZI`4@-|3c<h(xJ8G?+$L?fF$9P^jwH)>^Cu%d^QIfL{WROOcigpaFOF
zRKx%^QP1EW%D5~v{%Y|%TGJu1O|I(7-n;!|9EAchN!hNmVa}pXYum7EISMHiU}2%<
zO7Bsk-5db`)A@)cPi5JBEg(nx{e7K%8PTrF+2Ge21p;N8IZ*rSjjFe1$@#xwX0vt4
z-0*--oKq3XB}E2HcaKvU`MWR<D#;o9`dW|&>EzD9h!XB6b{Qnu@^vALsGJ2dkLu6{
zBfQ2i9Ob`zfWx_wikvs*kLUn(+++>o4Owr*L8#Np^O|o{5Pa+vB3Rb1?8cWB;inCk
zRkIHm&8*>vH77Dw(2wPMvpyEf!*Eo}4Rb~>9>es3e%wIS<h&dwd%$k0OCOrM{kBsQ
z0lCg+kPb6*yj-vdV$RMnz{mG-Z;P!pkBLY!2(5fuvODRptEKnTWej$3R?^b;9`%&P
z(XDaU3r_S@RPR2Ry4+?Wbs-ZsfK!5|z_x(P*YY$E-mBTeT|dx~hp*(=-@JgIa;s<O
ztFqHIw`mg%&L6fn)jQ}#Ch7(BW}QD-KRAdc4QgFM?Nr&>pO^S)KNREbTCxS!%w6_M
zm-UIBht4b_(MgTR?)s~`%D@}TTj^eR8>R1KfkQP%Nr}=1C<OlJVQgyCH^eXWflbrF
z4owR;9`|p7%4)B(pq~9#{?BMX2r9*HWk%lH20u<Z)mu|%2?k-32k`DKj?7&3%iQ->
zHsj^Qn8WxaFrx%Dlo1~uX)v*J8mvD%k?HZf%5LXM4j3x&M>2mloqF8MJZ1R0sC^XR
zD(w;KI&Iqe?<;We*S3tgCo2Zt2)}GWgT-79Trd+aQZnbwTAUG-&giPQ$f3q>J0jhs
zR#j$Cg{_CT?Za!J)h%KwAeal<Lf%Yp*S+3^BV33eV*%iXAGqrb07xnzmFYEEyeAp_
zhYZLw8d7neebr<tw(gRDZPc%MAeeaJ`B-(A-#LGY{(UAb6uVYRhl+c<Kihn2TBL(C
z9PjZp+ACs=C+c5xVEHrX|FXt+!$KP7=jEUEh4^x3!eaSoAqv;H;faI}neHu8cg5|T
zNR-0%dTG=9%k|Lg9wwPzxl&PTlKWuwHZTos?=}(2FsQVpUml0F4}XsvG~nF&X(tNJ
zl)_@`@Coqn`7Bi_-EdToRF#(@pkPlab`vTWUTb!$KJ#ApLJ!zZ1ao&YKjFwP%lX5A
z25Y9LfTBZSBDOQAOPSSVJ@rM>L1_DWf>S(VS0y8lR0K_D;~Vx{U2b<>H??+6V#7c6
zZ0#jvoL{sj4KT<yz5cDTWIqiTR0fMU^%NOK2L-p#SOb*nj8KCa9QT~Z`h?RT_a!^3
z@FfilBakcnUY_cMaG;GBa_?F#Ni}k1bxv4>tq0|Eo|KOkQZB|O!^?AxEeNK{k0}jZ
zH|Trepk=UtO)wJHuP>Me{K(q+6P<~>3gYxewym;D8m~t&qpVq}fRdI=3^8rkAk4mV
zNXyS7BQU-_Da-A)!l^$CyF_8$Ns_GGg0VS_RuO0;IdU2oE~#gsDLizxRd+5Wxc;Fh
ziRBQk>rRj9p`a-IuFh4i7gHv`F_3axjeE+duo95`(Hi~d9JuQwkJ;o%zG#=tFv`dC
z3Yl!)EY&WJe}tnlm%}5nLYTYO>Ndc<7h?sm5GbgjDXid0GMFf0HgPa*Q!H5pP{kNU
z&tGjP?k8lL1Y}?gsSt5Gr9oh^VMV&xVvdj3c|g-dSZ$L}sKjgRHamtNs=qE?<%Qaq
z8pNiJqva!7&5EV3R=?kz7n7&EC*@R|d^{JhKWj{Hb;ecW&mi<bbVkzVKQl;9w6Tg1
z7o*7zRzs_v+B?OavBrs0W0Wc=ujlt+eW=jHqc{%tzoo|^*?o`QS4H=gMrOr8AGB4j
zMiV=j&VYRLRjp2smSBIxpuJ2E_vWQ~tlma`q#WL$vcRR<yqM1OX0GO+Kr<h&+}48G
z<JD_(c2#(IgQvdWTS}q;+$bZn+GFprPoUi;s$|a{-9uDWMwHvd#(w~LBl_oGLrlGk
zEKmexgUFN~`IVM!EFPsZ@}p=<V!x1uucEz6mQ&@wFh%z5xUj>Cs71ba{+Yh=T_P3t
z`VM|B3_*`0UjA<`1^NcsJFwL<H0J@Y>qoIf-x|U76qG%#fBI&G7M^xZCrn?@Dc2FU
z-!l2O4!?C){ckp_5<9f8PF+-@h3kXJ?_sp|B?v36x!q2D{b`5%-uk8iCd}Q!(}z&v
z2fFe(0#`cwfI*?+srgc=$|z=SfHbllEmX1q<T??K3;bO)*K$M;tJG!6r^CFt05|F@
zC+BnA3WAf;Ysub&7R{>o2g!17j%E8G)Li{qCTNsK)sB@8Uv+|V_h+wbPp3MJ0!TV@
z5??>_e@&d$nScOdZ{TK)K0jdetmMDr2L%$zQ?p>ZRxxSuz6pz<QhJfwuC)YWw_0Hs
zJB80te;JO%LiucY3L=Uc#@kR+d5dzRbRwObtOy-Ul``wZ7|?YkQX7s#ipU~-UInC$
zg{&mSlN0VgjwS4>_}-_%0je!8LQTQ5B(M7U0L6D^=MuO4P7U`-d8C+sJP_17?dH1J
zr-c+VGFmEO94|hGW(SK76()3Ap}Eg0?%Uu69s-gD68amyE$`Jpl}Gk4FUczR?r)q<
zs$?0DcVfJ^tWooMcgy+#cC(W0&Fw;V%_H(VpTi{q?5Hl~u)JQqGBUqf>@tll@EuMQ
z+iZC+qLa{e;5DzDGa^NJJU3{t+N>-?q1$L~GyYUK!UgJkYgcd7<hRu5!{fT>GJKNa
zVRPSs@R0ZQ!h|Z}*1hU`>%K&8nbL!=d<SOSyd*)D!k|An?VWixB7|5#LER~P$fGMy
z^|)-T^FheN2q7tYByo%kMroy~6*fS>#@OpChE1(t@;c#ak;|(tkk(q<*Rv!<QL&<8
z6KmC1;RdYT7jd#waer2>=NH?}Q1UM4%9Tf!#||TvLw&HOVhJGWfdrk$CyeAx+0h?M
zy@YTu)I2v{^(&(8vJmAHynO4rRjW5^J&TO5)sTyWQVLE42D?@QS#d*3)$o2*=@z`<
za~)^wWq1Sl#umlcLYI?1c#GpICJK)p&<Ym~V8XVt&Z|~dhIcEB7AX1V79?Dgha37$
zP6M&UfyzmBbq!Hm9wd=EIl`T(F+v0%h~yjqm-IA~#^0H&a+-ZDt*H;L{)K=NX9;X#
z%Q)|pv!II1%2UodLS()xLHbcU>Hk}zPb7c{v@>SWI`bMcl3`G_@?$Nz3*QJI!pt4d
z9?ICB<cy!2ylRm)+aUmbz1J|5$$iCB3Y#jVV`zre1m~!9hcHBcktaaq^%bdp&6Vhb
z|5`Vj75;Sute4$+TF3eORr^#M7ryS5ahw9>rRv}+vc2&_v$z;y{_!d0Ox1f`x7Qpv
z;T?VnV@$`4=n6iKpjsB2c#YS}Q{5u-82{Sr^c-3@<{8nia?t&g5fL5qQRb9eavP&6
zW{TI?MoL8ZOH19QMbPfl<R68}wGsw&Sr~=;&6R<)o(26+<=iH9s&Dgb`j%y+k*)<1
zgOnE$I*43GjRU41n}&o;5oZAvKcZgT-}nmx&imw>BA@lW=K=*l%gp>*mHU>m98D4w
z415_38|Jp%AO7ducB+|Nj%Z&JI0VMp837Ye#*Dh15Nh+HawC#Fy9We5@IoSAv$GUv
zJr_e>?pQN#n0|pYz9oC;!<Iqj4v8xEtT?1orN&McX8slWmQ9TBEbS~ApyJT`gxw7&
z!^LHVY8&^f{<|dfqy~)#_A)uQsXEwKQi}KKS2a=ZQ-Ys3@QpQUtuOWT7yCF!9bUEA
zHPAmoqlb@WI!uAACqmn2XyEB=hva(zod!gF2sfk0*EU&|lMTq<=+(<c2`r~03$Cd~
z(~Yl*1T(a`mSzXOm&_+e<Tw@8;;75kTV>Fj@va6~E;|0Y4-ZBNs>b?;Qdma?K@ZPh
zihROO#D|C+J*^(>UROg&+5Rr%HDe37Aa41Vkuq_H+do8?8=cNb8KWpsz?3B9q6aPJ
z<v2Q(^cOcHQP~?&2fLEpKEF5n9Sa-4&X>wX>YP6!kl)0tjQ3%6kae(YQkox2u0eUB
z5Ky|ZsJ2Ju3We}$snLj@>a#2;Aj<?iGwX@Kd&M<qFa%<@#Pu*g)<xo2C&w#QBDOGa
zx2t7jkI>mnaUMgqr=`lXKWMgV>tsdVY4D1XQ*dQ4y~)M`5@N~cb^D0%lY(&z+SNOu
zkX9BLSJ;abw#f;r%jM}AN07WJiMYNFpY(Q*qFrMu6y@}<c24}@-tnDWRtJEm?E+H9
zsOC?(8%Av~m{gn#myuPq;5GeA??Ftfe+^EFCx2nQT*Yx!Ox7i+y+vo+^-WQ0tBYf`
zny&|t*0Z%qXV(hxh&=lHbu|bjcSUem;wx7&=UOe59Osb1A|q#HTMs^qr7p}cQ`p@4
zJ-BF7dlt3WbBKZ1P7GVMLJr>z{dq4+8O_=Dl5R36eg2-J;Q-D27%Dnb_a!Hvco&ZY
z6aLK-jnJ9go%IS>Q)jCfB-hR|1Q=u&#;jd3|NQ)@GII;1pAx)Q3Kizh`XP?)Y~`^3
z?y{LcV8ed^b@{^n-zX|5d1;d5wlo%JGU=)Pp1Fz$?2)PVFLUkEi0QYd3(pjqxXlon
zsB<h(iahalj&On98dk1x2)lV7JBQEZq1`ZW{$-PoBhw}+v!m<y4~VAt07?=(FP@!R
zU`6r7sN}moG*oFQPEUF`OzyipG2mxZQ(ZL!%`Yr?_aKZ!VP)OfK8+;sqi{nSc9LY$
zocm^el7{)I{C2PyxH2Beg{qKWEM;!EAh_?Nld3DA8Bi?S@UEPFf$lv)8NMY(X3UB?
zcv3tq#_3Q`jgJggc2*DazfPy6Qm5Dxdwp7pCL<{GPXR*&yNmHs1=FI)EfJF$hwg8W
z5ldjlW^pjnCOhBD-Y=S>mR)f#jE8I{jB|O+Ume&-VK|$2^ed$#F608n`XsLiH3NHW
z<<a7CjCg5Sx>;90c#EUvvUTXhPJ=WUkY*<fp-6Corf4!6Z@2!)5!(wcXo?!R>Q1PR
z6P~3B58=*$P_i|0kY=aMYxj7{n(QaDc3F*LwhHQWg=={e_>elXE^r=h>AxfsZ}b3D
z-KTkC+JbcvN#3zGnO$`M$0#Q&6zXe%L=5Ps6Y51y*;}arjBJv?=@Z!ql(&v-TbZ^r
zbT=Imiey!h7F$uVvLTAJ@3UE^6y8`~MDz^?Vb;InC=11UWv$t@cElxqVvq?i)%J}^
zL25aL4N&&3_KyuC2y3FT+8OXau3QdM-DOB)0@irT7|DZROSQto-G88*(`s;`HCBMh
zv0+C}`5SK)L$^#9s#*=5n&HZM06$x(2sVV=aQ~<T!GPX%um^o>m@kG&MI41p-jN#^
zxHGD&)o!#USlo=GzTc*zFs(YdG@sdSTMEq_AW*|F>_-O3SR?*(ge%W6ezXQ_O}dMy
zO*^gq=xq4kKqkJqxYGc_e$fFT6oOg0E`;o51sAU3e7qsi*(_J{5v73M)A1hs>^){L
zQ9@?vC{)|2L|<+O6_b)QY-qOnHq!=Clix+@>49+X+6a^ki@>jse5Z<W3bi1eK?Azz
z131PR;V*XIdth>jJm}b1AWPCwdO1xyToXI|SbB)#gC7?D9n=P|JW7JlOepdL6>Bnm
z;#55Ir${`xe}CUKf~*{Oo~=`n=S2(cY>P!<>n~)1EY}m8rq6mD-Dx)le7Qz5<C#r3
znxogr>PAm=ZYj6bfD>Sn<T9C->OHHb)+Z@PGa-q_3t3*qqLcM~fY@&ShLoi2xoy^g
z+(Q>GNjd~-w6h`FQPRaZODeWgV|BhRgacAW9~4qXGl_FO%c4kZE)+=j<55F9{QsVC
z!_~WF@fh})+(!ENPgb_zE-BXVd%i6pPCI0_KONzMSQ(DaR!bV7>F1SGKo&KndhG~I
zGLfUhVnx-HYTLo2tRwkh4lVj-DdH|fcJ-|fDa&1P`i^t<k{SqF<i^yy%cJjr>P(qa
zaOSDq>8l=iP|Y^uk$yz|MojP>7<om`2wHu7uxB-=&MDbGI!4WpFqa9aM0D&Ru}3#T
z#v#mZQts;o)e?321QRovH3Ko)O!cHeIR5o<YGAPc{;+F}L##5qKgdX|K`yCIlbLYV
zQXuNH+uf~tYyPjHJHM7`3WUf;I2&I?!>+z_+s1&f4uKo76h$w(!Z_UC)vqcFIrA0h
z5ZYUHlSk4wBeDpY*zu}`*!GlC&*e=1vTKdT%h`=&{Z%{e%$CHSTlH?qmzbfRF;H;!
zq#YxP9AS)0&ygglzPM3FbP~65-iULJsPlz(*B0wOXOnIz;@I6AnZPg~l_+Qy!D-ay
zmQhW^z(U|wfAG;yI?Q>VGA>jh&&GFi+>LD@YLqx)d3m?h+mm=3@X6yKx2XMjpSUY8
zo=X0fE&paRS7{_*_*ak#^Za*c$?Wk0K0SUInJL_8l?Fx02|Wa^hG0h1a?R1$+5&TD
zbN2cdY}~1I^bmFii(&6$OOZTe(^vFP1?f_=WfEC(RRgs!`!1*v!S8g0%A8H~*tyYu
zm&0QTWlM;z8AZVg*z=mqK%hgdyF3a<4R%SJd7Y|c7|}7>oisZT*xspcc`qq+Gk7~(
z(tXl)T}2SY=Wn3jlxJT&WF?#VTyhAm7B%bQOi2}A*zc6V0AcusbNWPX?GJ1x!ll4;
z(&29eGff&4!F6(UnjB(}m1TQ&XeYqEu7oyW%V^r61|MtQ-0|9~m#K7M88w_}Q^Vi7
z=HxKyd+Fp={R`ZhJdLwa>Es?Q+G0w0AG2iD9Y(PgpgSQP2jmkJ|D=Nx^jzRP&H{&L
zkl7qfAoNBjjpg(_cPqXH!;|Gp@P|e3PLx<X48^@L{bK^ZbDJ!iKd0aib7UAly>J*D
zYUtkKATLtYfyw5A@XXanGm`<J91CJBk)^TkzceP>_^xL@#YChg)VIjgZ}N{=^RT(p
zX%&8cAtw}f7r?0O%6zgj0^(rdK>RD6|Ep+;ck0un#+Hp~dV%@6%)0v1Ir3;tiug6x
zyJ90RgdBDMd0sC=)@`mmu63E!K(;jS?<a<>u8gHFzzra@^!@2l%eq0`U6%;l-`|>w
zkoxT2KFF+O0)B8~_^I;&orMj|6ubJeibL+G_j0k;d_p0j(qt7qba=cZEX9FW##(7t
zkR9raDh=5Mu;x=aO!(_Qv`hqgQ*eM^st`jH3hj}Up3h2#P<dhhqhjO)Z@}T{NXt}z
zvlvqlBi#tfEUFF(2#z1@AEah|XVR;OJ~2x>q#Bv!nZ__BNn3_fan*Id1Dw|_iTV3>
zS#N?s084-I8@JQFZgJ+WWRrSPzFUDPf0AN~+BSgccQu37eh~;#)Cs7pU|jF0UOW@P
zB_pGy{;@A7kbHB9&LWH9j6!s;1C)fU94i=x<z_-b`g|^ppTPJ8a)G2QsI-rP9d0UP
z&D;H;STSg&9KFCT(0p?nhRRqUnIkVGe_uCg>b!If{n)^H-NC5zVi|PA_8yE=rxFTh
zvxxvX`t7$*xNlC6%jr1BIgxMKGobE=GG|<wuH!?FK1f_pLv>Z9Cs}Dy-jWV{yW^GR
zPsZ9o6gn<7_|X^O;Xl%(g|s&j$XOnF2walkez9-=Rgohc-u7{=MMiXK&lp%&yubt{
ze4JD45Cd;MUNVs`B;z7?uOlbV3Z>r{?ppWkCdqR62R=*jz5u?pdj1JFQ3=<FREk-8
zS2+)CnnYXqVcwZI7j-jR*MT|O`Ao698YUTiC{)NF=>m~RcW`KmSBm>Ql%;j4QbDJf
zZuUQw(EbJf0spGl;UMA|V*)f`?yFo39Ymo-C|<{?n1tcIBbfj*tHqVs%DjGNMo<gr
znIsHkb*bj~-A6;!ZeEBZD^H|k4$`;Q<sU}m#8gVCttLB3VRRWx>9sRU8S$8h8{HO^
zx{^9Eb$;gAnUnuv-IVE09d>EA{HJOV&tOx>U&@4A_i2i-kE18Xjv(;`-LiRmL3S47
z;lW6pl>}G{MVTuTglgoa@JQmEPZ(-U<ObnA%Mt)?;}BK?&$JjImZqPET|0i_$tJ7|
zz)wa>)(}<V91uN3HqE4{!kLyQ(w$N6!{*-#Nu!Q|@bW1G!};*s0`wT=thyE~+R*b>
zUOsYw^A!RBfz>aN-%n192uOy^#_XA#IELnfer>>rRz$7*(wW+h_rt~D>8;5z-+@)L
z!?Q<0Ta{*WqAq}tSF^X^Is61(gcB#D5?}vLlxq0b_I&^O2NffYFFDBf+F_BWRwzf^
zXs--P9B8f7k((#z8-3xwZSoiH+bYhUl@`D9<VzI1MKYJmt={jP4`K5sgqn@XfqQ2x
zj+_)jk}(20Nx7tM=Cqj{!4zd%C^`^BKPLQ{u$eBGHF2u-zw2<=+YfOC66%d-i*Z(o
zw+p9z??VTRH+aFdzTfE<QAhmn230_&o!LGfM*6EBuW>VvpL2~MyS!TEAfw5ep)B-L
zP7iC}t)P4=w?xUiH#dJriFxU)v5$rFGcm{Dn!GT<^1wwwAY#aI>Bg!}7Gbk*@^`HK
zrCxgEJ9XQlg6h0JjqILNoD4w#+`C+Znv`=_XGS`~x*<~&K_SQ6#<w5p?N~cZ{KvTV
z+4JUU>PWSvPV4$g`rd?bY`$)sDr)+ev5c9>X@eN`BPuX<ELAcn-X#)Rc`Fk%yqj)1
z9l=Z|FKhf?NLwi~<dg)OrmrFyGu(d7-_jP(dEcoN>^JR&C_FCR87=+ADf$=V4u5&j
zkQ5mS^W1C!8TSblp4rxFfDQ<$KL}xzrkS-JOIbPsoT;?|aZFwx2rGRlrsJ}<9rvUx
z583=eq?dbuRCpH>+6*M&g(;>Y63=n;6S*K@y{(MkomcPg*3=hJ(JTLVCt9Ykelr0c
z<p=tcS9v+7pGO`Zf&bu>rqD*c_2Xbq?P**pOpS-|T5~K3L)eQO$}6_>uB%x3`2JZm
zu)W%Pz^2!@Ae~$sHu07D5vG~dOp|2>Legtn$}n}@PRQ^-iF8<Xqx4C!lM{~W8K4*J
zXy*-4R4L3)V%dSfKoNu)b3**r<r(i?&TbG^AG=JykAi*{kXO%dItw>u9azt3+t*T2
zl0FuRo&7SOtGtN4{MAJnRh;D8$;3GHl-gQf;6YL@r%OM~dVsohnoUxy=7Y$9uLF;F
zL`$3w9EsKYHF{+XK5iDm62Bkm6l?N}M*m%8s+Be^%pkOOF=c;$4kfPyH8?!fHBCEx
zEt^DEg>+dv@XSNBJ>j%wtXiyB_6(@?;b7SZj7O(7!>clUp409ftV5*U9aS`qMGAfQ
zXRGlwNaN&K2*=G!MwD$_;V(5TZk_oPc2}phH^J_;pS)UjT;;5Y_Es56IbnOl#X0G3
zum?`@#H9hX<?90!J)DpdYMP+7D|$P1l*yjCJV1Vp4_`<|66`W}d}$rV;YS+H8du6B
zqIc3Yzr*2a=xDDtb;(1cwF$zNLrSE8*Dy;(z@?Km&{s{kIy64&dgOk9XLQKapEG_E
zYpsEy>owCmdj>WL(+17T$zGz61qjn&9U^pU5=$dK(mXz>THrc_lK7QXL_<(4SXH9F
z_eDi{biIg9BZgCw!)blG>{~>LiM+?S5<>z5f&*LQh-x*_2Q7_hNnLg~UD_+8tXw#M
zR#gd7RI%@?D%E0DM8l23=;UGYdC(?Jc#|C#L;5c#reD9Q%!Zk5?X@LzsmUGP0QRGB
z0MMYFOP;W}C%JsvU9#iH&ysP7c%-GRo)F@>dosP`yo+N-B2r8ew;>6R1}3hMa|d(n
zvyR=n-xc<mT|(Nd4w+APlR&SoNxp2Q(QH13wqarCFTK(!8SWYUcG$+gRcCWW`lbxZ
zC^HIK2OfqtUHA@s(~Y04Az;6$mUiU<H-Dx`((&0KxNBOcPGl+ptFpzuCth6IFBXGh
z3)GcoCqUp|Lq-{eI5*V6S;94dwb&MOTH&hTl`@~LK#_ujeSnI&)c%@-(P4isw{PM|
zsYkeK+SteA`#)eQt_dRG($WkM*Se`x)YxzQrz9P44CK(6g~aJN+Yb<hx*3y6Az?b6
zIQ2VM3ujhMYhHIyYzBqJ6<@523!x-PlQ1op9R_gw+Sir+;wr_g9U#U-b-_6yV#?6f
z>BP~|hl(1ccS?n<=s~N9GF8MY!BDZsI%|XMzq94%blgDi-HfU8-`s9i+yp%@vx3)(
za<ocdRN>n2clrJ=4kL!{dy+P4>s<p8*3qSV)N*5FLK(h_83~6Fy})rPz+7pMxKIIm
zILnV2%$Th_VSz8iaBks5p`j$?c5E>Kz!Pfk0(WQzZ3)s8DEL79rP+C0jME5}ZZry=
z#d8IK8g}qJJGnUKbaXhlh70?3wLUh|D{d(`TEL+Em)_!&toMO@MAx?`xPAIqpRLL%
z6I9N-X-M{mQzVal;k_j@dCtu>dykcMI;vE1L$T`;!x;$KluGwsC7RwPlp}$eYn37n
zm|VEAW2(*{X9s|+Hh4{nz5dA=9O^7N)OV3_it+Mm5Ey_s3Vmkjcg>Z)xfnvFBBBcs
zh!*bcqQL!86kkf}bo*<0s|z<S#GGzZ@f;%*svv>#D#MfEG>Xha<1Tn{s_y?TR1|lb
z6G)8A;A8};2%tf#W=rum&_dvNVJN;Z(UHb@u{fa<*Bmby;}?%9eQNuUUwK!`4g2D&
z?`huZiS=zmY0N7Xp^Vc3?4vDM1CR_y_uy&j^a0){*r82xsB%YQP@Ts+!lpjO9i#t@
zgaI~u$Y7u_4*Z#Tb}x~kXI)#>b{gl=sTB}|ZM(|FB1ftKyC|6!xtQdX@@Nf5to|~;
z074G<L(5vnAt2u6BrDIge+14IAA)WQDQTr-^ZFa4YJ$BxE2x4JrR`+gh(z`eqb#!%
zZZL*qyV54<tJ^)vlKJ2OeSyu;JTYVI<T)8lxW5zm$_3j!#c#}NE^%h>S?F#?reY{P
ziEUQq1o~;0zTP$wtlTS!cObDH9W1K%;R(ExzZm$?84kGp3-;9o6t*T3In4JEZ)3OB
zRevIGN=#WnbJH8h&81m>7C@5}M!g*kP@`KHeAZ|bl{fB86g-C-#MBkejOF4C)_@Xg
zHFC0!cke9#a9kY=Q0d_IFgNFDB5`j>=gk}m5Sp{K-obpIGkN1PG6Liv31(~5Un@>q
zcb43`(o23fIyb8Et^K=&I064XoAo{Ey1`RCWv~SP@tYTZSo*H;dC#~SK9{SbCb|}!
zh)<Dfg0f{tUc~B1dXk;RrJBtCPt@I3U?5X`AENYBr;}tSfTUgXlt^lFOXfdw;+2cc
zNzNgpj$c2~*AXX>F=d*2CB~R-ki1hBuSC!WJV9vheHU$@?nDHqbSCwZB3F<eH7r6_
zR%t6HWn<v+A(N<S&G{P{|8RPM2+kNr?~NpF{k&;3x%?g`rZCW0M~*J6^#GY(T1M<X
zGFC|CGaO?9t^*sIx9OIr_kNM}T-ylP=@jy;s3K#HI2>{~+H@p)ir#;DR@Pm{g+S9d
zwcodsCX7>Ixg4Ro5A&BiDKF(1`|SS8A4v<ffTU7Alra~nLUED;6!X8X28X|;@ie{^
zlFr?%+Ef)BZfeCi2qRHlc4V`Z2ZlM{<166$GSVP>P|vBG&+uRaWHpnd>v$ivApOBs
zWC30KV<$^Sxoa*`CpT9F$ijrS;A%sAIh0ts9S=iCea2^;(QR?xUp6g;<X>1EUy-4A
zYcYNE@TOfJ)>!$+kIFodzZCLN)6lkWyfk1z_uZT`&P9-Xf-3qu-?^0?;QPE5cii%w
zpkit?5=|E6$PRCXshsBJssAqdA@4?wmvpoBup&)HEsJsN?l1A>wvJ+L+ymsaAIrdq
z53o)&D5<fdUNLb$Uh#*U)c2(<kf+J`6LOq{aEY6OB#5nV8N<?Tc%h9V#L38T@w@NS
zekMz}#yNEFBBio0mKU*bvcru_R7xybgpRsb!F@!iZ*Z0hf->z1%y2j?A2LW450Z`_
zF;aKCpEF(IU$9Qkp(4C$7g-SS*cUYaX#)ww$rN<-W3F3s+g~gku{ZpVw#w+_Iu@OD
z9ZuO){Y|8P@s^Xrlq%x!P^<EO|MO#740dTjM+M4zpFHyPEzGiKXjuIk#%7|!DHN8|
zNJ{fN_T_4EFtp#8d9m-9@0Ehi)1vrpmH5Qzi5*CZL|x9IQ}!d$)|1H#+TQWIb`VT&
z%ZwNqYk)?iloFEM#6T~wf?-Bea%F@B9w0j`s)5hIF*O9U+on)rdN5c2Vu4ar@;E4e
zZ;gRG9aGpCao;r+DE{4oG51#c^CET5%ay*}N+~LX={W04g_?pgxcng}uK}z+nW5@^
z;Q3XRmqXC1ey26eC**WezsN!!cgfVQ!B8#Sez|$w6zSECK$sZAsj1P+iEJ;TT`~Rl
z7G%3K=5JQHyNPsx4>R#REcED92fmP0X4WTo(Hw@>V;xTn{S!RM5zay$@!4Wc;(<2@
z=z{0o@bKo}E6j09FoPL<wFLq%a7dKlf%xcf#zY?$!ZuT^eo1xtgHeN<7Q{1)^(3<I
zZCo!;OxJ1);G7IPmmXm~u%MR=LfoeeTueYiB@w&JsvVEIbhg3`r#v>jn7Sj_84$C=
zIKftYDmeF$gcHx9EVr=(j@U1Wzn3WGEV-$pw`M=Iq?Gc47csPw#sg#*@Q6Bvb^-e@
zdgyKXb}~MkZ!RruV!we5Dd){ldNk`lm^CvZoq}tqUHX%rHo~V$Q@MA8W1NZk1vFGS
zs$Lhx)qqxjOZey@9i##cDtu->V-2nB`7$>(?(<u8wemjDD4jO0?qgR!Sp~Lsq_wHm
zYVm7$?RYBFY|&vvl<gi@0ID|E1Kb&N)kPD^hh<fp;P3vd_MEk9#7stk35q!(_-Gq?
zfKlysWF^j@2dUhY^3EWY4ejL2S1ko4rxl=hUNaOey?UIWshYg|Eur$f=q?{RWf_dz
zvnYR3aZs($oE|~5Zw8;_;%jd)XjV<Ng+M_4WpDPS*8aP*x`=1J{kT=l5)q{#B7a@y
zB@D6>Uc$lvg>xqAdaMUgD2idPvC<aBMwcCXVz9tX)T53onH|YxlWw0lRt+P2Fa^pq
zwzVdi=K?>aqK5Q^EPyq%Q}M5~*vN+0bS;UU#<G;d<aqir$;BF@7u)&##~{q1kAsO;
zv*&al<SIoq2r3Nc<#AU|W!I%YRWnv^C$nhM;0~`*7^|s821=0-eB-`t*0EE_B8QaZ
z6A1Z~vw#z=i({vr_m;#A^Rz$;L`@d~)s3;5rC)pA*~VVNYT)mvqGg;ni!s419>LB9
zh}hOr*`0YOg385h_VD&Ct1G4ratL~OoUObI^@^Pm<<GWRohKr@l_m-kTygDEmUnky
zV-HAGb_G9k<K;b1WS>-=K~e;9sa#-Y&fBQ52x-0dS-K8Nh$o?GX=AWSuY!o85S|If
z^-<CRdr;s^ou|9{eS7LrX2bP{)xO6kD-P>iLw7|9%jXB_DH)pK)H^}6e9m;~9=G%7
zR7N$H5jI;L{0MaFth;v_G;?=-#s4%XxqnRlsN{09whF-_Rvj=f%sw;Hh=itqny9dv
zd1CN>bJIm5t8tyNx<K1Zrnhyv>UF6}>BcMco4G62^&n0$vzfaw<8W{20t*qL!xtt0
zt-)Vw(51?;gmubtdQ48sL&l#);1jo)WoGn+#-t^N2lM)&S9bC>yTiun|3&pX2qv2Q
z?JpYXIX3|5t=$j5bzN-oMYwmaH+70Qc1b&qYRp^C8rD(^SwV1bDutk-2JQyDbvLCP
zfmnTqtFGeWatFO<bhT|5wN*lC$0d;}jsoh3b1K|t@AUVVA13b_8Ulj%LbLk=>0%A(
zqx@@14gesF`qQN9*=7(44>}rI-P>(8nvD%^-D)C5pM&u;r?-p{XW_H}tWRpRv$<)?
zmX~*qQ?TD=b8;{HI?&%n9_ggsJL}*ey;j>AiT%viNGQ5$H&KAkK4oPJFupNw!#02s
zQ)~$|y(gF6p(U>XFlT|>SMbAyM{}*l#{14&rD$z5`$MHa9-pP}Y2ijaFFnX*&todm
zO(WaVv|h9Q0{$MdcQR57yO}v+p=vSyLDF%DDcvb|8GwWZK{v*&fvd`55?>4^RgUJ+
z*x$=w`KSkLGcA$$e{!svQ3EYI$id*EHxNi!SaRI#nO<0KG|&Ds#Te%-(Im;i#w4Gn
zs1v^MsOEGMi#A>M)2ClpG$FIsVHR<m3#((QjV9^l1e(kIF@$c-G+NI1n5}=hf;!nC
zm>0uWNtKnFSVd#k&~1JIha?8UiZuKhp_I-@xPG*#<1|4}?<DnPWj)1M$Ov5rMhS|e
z?+!#k1#SRW{Tw~qNe^@5;PTBdDGoptSl5Jo&A(Dv2+`s+&(>d_ym5zZb)}~QJ+&Cg
zc57ikS-2Gx@f>ID0g$bUHt5!L=4JuT3ml2V#Ruaz%VVcI;1w1mfSS^he`lGyBA0t!
z%m3cH3q9G<*)4xYZO8(>WX{@hY0~pDgXe$1sK6LyCsYt#B-H7=iYEUojPOym+q42D
z5V<!*X2G6ah{}D;%F8Bii0WzC$x#cdfHuli@Uu&c%R?SRw}2#?_7wy@8=U9MhG_QQ
z^74n$(JB}Zq67=y%Z@y=$iE#NwLC9}1e<LnBrcYE)e(QRgzt)cDB+!S+rwtpAf7^x
zerLN<f{wzbP5Que9WlA%Eyn+i7@D%JL&X;lnHn^{^$VxF0mgfZx?Cec+nJcBkk}ie
z&d`b~=kpnR#4zymJ&LU_irA~2LHrn?1O+!N%95A7{3lZnVendi&#dh^?_Bq!plT%B
zsoTH~>OEjz71E;&(d_bIZ|Gm>UJ`j*k*ZRE7V$H~L4j*@x#1m!TlCJUsBtBT%4YZ%
z1y}QURpCwnhn3UJyrtHOK+W6PG=J2T17+Y&%druIn9k>Ri>8fPv&7$T=nvY(tN=x(
z0Pb7I7+xQG{%DJN9Be7Hw8~9ZOlu5?!r)slU6w^HnGaw3tO{w3KtD>QE7HnSFZ3`y
zNNZ5>xBS3G1}>H>hY}rtctHh=S%vQ<dUvRY-AJzcvDV3#>Ls3BKls*X&V`bi7X>d%
z<B|)tBhSd0D=>PD^<gJ_Cq$$}m_HJ`)QkgynFjtWxK90M863GIeyMMF$w0?h#r3H(
z$e2y+U^-U<R=tchh|Jtd;^lb5Ej}BwnXZ$Z@arO<TAjnmYlrZK`jeIPU^ft2=KItk
zCpYl<1{3yHt~Kb`6=z1N{W*rLfPUgbucIbQnJxq89&z$2=6wQ)e(<lj{8oQ|=HQhJ
zg@?k1iXoIY56K{o?-zCesoo4!DkfK3w?~CURT-!8xs1fzMZgq^A1)ckn`!XJ*NCCt
zp%Sz3nmHd<4?^LprGuNbqa&K=4+nx^D~19JG)ku*vL8e#2kUu){aN|g-77I7S{p4u
z-LiN!c~FII;Q=O7{B``rHrJ~0>AjI-l-c)sAA+z+M>ZYL-eYa*VUcPthy7W0A#r-m
z>c|eE^2d@&>AddiP;}*PC5U=Iai9+<aIVu@?3FW!iiWf?Y(U2J0`j{1g&&Xp5EUEC
zj!ya_`~#5c@*k{jT*o?h4F83a&NLsZqWihIB%CM0ltw(DxhAkCNY-v~=Qu_T0BP6U
zR!(+K#~W^}-0Hmc7RTL08y@|AE*|eoriRt+lQ_v`y@d#SQP<t3$nKguona}vMD_#Y
zqI5G@mdgd3M6Cf^)0(+36k+4MqfnClDPMAVY%r1CDaF|S9iXQC&EKW_e*t6b(7`v@
zv8ho3p)vv3r8=Bk6|~C6J1vYf*V#e%JbUaW!0P9`QO=u{zu4&r;S<B1_dD$Eh6ycZ
z>S-}8?v#D5lBbb6h$Z_j7VhH({1}3N4_*oPer-dJ_2?@ORC!W{!BbkHAm$z%=c*an
z2vl#($Y#Zl+JVWn@qvF1XRU9926itLh`2uvqkfzkm>>D_z7fJ}3W6a1MC-#=!mvoE
zN4AqR=Xh=HuLn%CXvZ*$zVEp}tG2F(H2;-AD;~01^EDu-vTtZtAM6s#LM1}27qg6E
zfdds!Zsbm}JfXNN_rIRL=-t0StwzX1@%A5QS9>j)DSG;MKl<h6UODUv2&=N{N0=~M
znAu@sFL!06)-!(Q;x|#iI?VG({ZN&H0hKM&Da#y-^V$9RGw&{*-&JY4=#M%;QyXHF
zx$CBe${$&>6S-e3m(x$%7ngKrMrbq`TD36sBjrZEwEgYuQSSl&aH_N3NipK+A721v
z=#l|_aXD_N5@GvfjdQOSUZ7=6@bat{^)DU$umk@H)FcwXaLg*rQXtM_;E7mK+Ek@c
z!+1y}_2ifBzT~BJOL9F*fwMKn3R#!|oCLTPm4|u^W#Wae5O_}h>ZQ`MIyz*!rMk3k
zwNBTMZk%2TyiroEwu=Jet`%hn4zyyzqP0_3+DB*_<N{x?N<1Z^(f9>O@~$YjL<(py
z(maZ39$-&Hps4iutw=ct9-})y<}@CV);^gD-=qkR7Lq$4qb0Fv=l4}ZE1ZkGE|a0i
zwaHmD&GBY-w1s%AYBBlp0e4o~A+GDJI&nc`P%ap~%F!Nj)6Hhmfmi(KtH!}z;$9NE
zR1}v*{Gv`;{G<FfF+HSk4bSR@A(FF%VsQNyC4m;HI!0bX>V@e|PD&49(o}}}nlu$i
zlnT=FHXB)`;vuE?30}t{)~|-E+wB4bl{5|&6*^(n8v2>X*V-PozJj)>ITBIi>3s$1
zP!2;7R?)}gpEEoQ?%fK`>B2_fD#LP?g_y<yZ7X47RfhB)(#I$2Gu)pClgSn}YnnG5
z3ItzjHG)&NQs~Fa^DJ*_5v%F*3DD^ZHtEX1-Qwe;ya2s#&p;yl+7iNO-c(MrQe8-Q
zU;{g*B&Z-1uUO->n;Ii2S_gYox9wE^lAurJ9dAuvm-0(K@V!gQtHs}hWJ@nK37T5Y
zDcC;7nRQn4rgx{)1seW#-L#zx5aAKAkPP4b#u-oJ4JH)y7}M`&kzBLOlviU2Ckj@D
z!gynP`nPO%3PpDjqv^v3+_vet?bLx0f0lz}BKdP@X(&6w`e3Ud>6HS|Z&7<&UaNdY
zv-a@e8PzhPRE7KhdR2*<1}=A}0=7uEU)!4N6ll<o`<e!kH-H;pH1Q%VCS)C&XQ|WR
z)hXq#GWi&xy$Oy}=!fUL0Z;%**E_E*M=TZjanNvO!)`19e>~6KW7eivxh5;gUMQjD
z1wyeraluTt?dc}cpcz0d-_zp@Z6?$#_zM<D>}!Rb?`!t+yqdn>@Nm;10hNURg#aRF
z!F13NC_D4c7oqd>Yo_K>;<+sFI;A(y%59Cof6pUiwRyN-aa81;r0b`igpM-MI_+Hi
zq<kTQBpe%=QQtBp!qd9v=%Url;59$A#{8CL{GQz;@^r@9*+$~U{Gq$hPV$ER=fS>(
z1!+kVylH?{Wx*!-O{z8myGo7we0<>JXZA+R!oJT~$Bzx;K|lt5phL;86nd>S9B8L`
z9HTv%{0v_X=EJ83lZVdlDL+}0V+nCCod-+~Ic{3PBKW9i-~1o0ISI5p80t_lK}<K=
zB%u&K+hY=QyL^ZhkxK8-H6U-hSRHNlCi?#7LAPw+hun{ee~}RSl^);oX1_T4S$VXe
z)sV<WpG{*F_u(n<g}eliUSV6;a(e>Vw^%^sL(b@SgmP(wq%3SW98xRIw1_G1sy-WF
zD+@OUv>*-tg02Q+ha($+!})!#r(t!b$6%XmvrT0KGrY&-?j4uPgLoJyT!;*otbF<q
zPoCyjXm~z1$<BS`osMA&qxLDRiZ*>2Ve{L+xgtRaq&ZFq{x!|PjFT_0>5~2O>+*zG
znnDXgz&`c{MT~K5q{XdwhlOq>mM2ahfKZQu&LvP}S|p8gR&)8;)qaVx;mNZXBn+cH
zQ)7dBJT-@RU3l8$Viq0psgePKK|Gr``@k^#4449o(F8Brtbg(TpPZi%L{gH#S6v*$
z!dHLZMACg3rFqxYqiIvak}cg$M!b3MHbnS1rq<I=U6*7_ZVvr>NLZ}{PGiyX=%TXQ
zqKG+F#K)74wxZf<-kn2UY-mJsF56@u-`*{kGGVpe(g3tROEW;cNf5*ww;XjI@-n#Z
z|C7QA6a~GL?4m(DIWp}UbSvQZx+41A{D7khV>%C(mbmkI9@a+cbQo4Gwvw80nW1=5
zUR%=!neXLzCs1P5_X#0d)Ik=sk4x>xLA0kWELEJ(Xhc#V0rF8EQurU)oJlyrI`a~`
znS~0me^v5fnfNzi2(D(Tceqsd%76%O#LH}!WZjmn0GX{y3e|`;a{XQW3RxUK&*tZb
z1JHQ%I^&Gyl@0;Q?t*Ds`3DDOs8p0UjrF>(EgG35ZyoB`_y<0VqFXqgHboHdSpUff
zVY(x_IHeT#3L_=IMPUc?TJHOd7tI!<$N|@#@E6E>C+1aOdrs5BW2y&?+f7F;Xl5&0
z13nfG7$?M<OX2_DYwU9H_fVa8!Vxhz;JaP_WV5r$te{_hipzTyagB2V>(?XrNmoJm
zW1`Az80B{;9^fNDzT7(N5=Jz0q$Y90K{Ntu;2%I(JKv=$nBlaUVgdSk2uj*~rxloR
z3)j4UAkwNNK@f8bNsL2FSeJtsT?<yU^-}yWBCk^H=U<TeQvs?R8@S%BNfD^LG$>Z3
z73GP;usTwpKTH~$Ss<2(Go~m#C;O)Da!F#xJKxkzy!$p(ojJGzcq;g7C(-SLIL5Yb
zgr`YlYKz>~I5J;aHrWE0_G_bEgC7$ZZQHp`H8({-GO@)?X7QS+&zE4Tk-3EOv`<0C
z_aZBa(IV)I6g%cpiYZc>9~Q*X@Jm1VYGhzn%y%G*^J<g+(t1Iz<zh^WFf;|2>SGhB
zg2Rz5s~p>mxmzhL^B|Lub;`nF*8$KmZl#<EREN@;hklkt``(r5LgJAhre^hGuC+xt
z*g1tf0vE^;uiks&WylrR{+vghKNafIB#;mi235?7c>K5q^huqg`yheJ!ex`v^<I{j
z9|o^6_O<lsyJ19%_WF7UtA(YQ;$FeXcn1R^b+XE0qK;q{0+5VlVyDw;*XGs`%E255
zV_pDt>h*+GD8mC!zB~h6O;Yhh3P{7|6c?Zq`Fi{B2~wARR11S&WOSoaaXQ>XKH(l8
zGN=Yl*DQ$}ZSj3c9)wlHLC#?pcHZ@@1l@3R@8kP?3%=O~s>_dQMTm=5G^|09i5KOP
zP@H=YLndsR0UbYFd$mbcB$IxSv?vk1xo+?xAOHIrZizj!S=jT{0^$!sd|aDO$1}L5
zVR&Guldh!tNbq`<qQ6w%0qI>R*Ubhor$%CZW<B{eQBA7&cUT?}dUeqLj~d@7U&0!v
zU(JECVK3M0t(opfT~%4Ww=^J&u*nPKn%0mXn4}*#gU4{;A8!Zh&PsU?o(BDN_r7*`
z=Q^S(Zh2=Q9+~zi_6**Nc(PtGwH%qv@Nn<&7mc>Xv3-3iHrvwt|1`U4a>vQmHr?S|
zJ7EM~j@8mrWF-IpFTVD&AwGIlgj80FQeIfhu{Jjl7Aw)2jGY*mb+k6gZolDtOl^Rc
zH*11qBF}@a{#u?kwdPXbcXUO5CNs6nzk#FCQO6$ibNRP_mXY(f=VOw%nd9xvPR8;C
z{q~rD&7_?vJR*T_eI&dkQX<?*696OrP2ky?c`<wU+5D?Z;R^>hC(np|;W8|YaYf1U
zP*M=__)Lx;fl^)MKpzNm4Uj+2+x`K~`2d~DMAd-Bz48rmU3|nQCou8EDFH{Ue5r%G
zXOM%9%6|yOXOvT1F&L;s5R>!N3y(hyZx00PL&-VW{i<UGolwFwbbDPSJ=6u{4Dq3e
zJS1m)o(t@z5a$02%#1j!BH#f(w-7-wl|0^pq5Y<ZV(BatllvbGncW{h;M@rTCtJg7
zaS_q*nuealfWNPPKi2rXp$khZ^}J(pZNQN-UHBE|+JISS$zaFGc%5+$`e6q~r?{yr
zB15S&js^Z={q29_=Ro_=CL;5v##haG3;;twyuT(Cvb&3FZP}l_9N3gumv^GoUi48q
zVl!1|TKFu3YCB$!u9lj+YB7sET}X7eBrBu7aX>T?DA=SnEJCHWz5a`Bqodkn>%p|y
zqO#P?bCife7<h55a8+0$10S_z?vS;2e-f=b^x5&8zEm6YO#b<g+waSgMwnV>Xf8fr
z*p@#Lvt#S`1VWHPU4Q33?O-f=w)JIqq`dzTd2Oq$UgOrlEVbrjS{qe_WGp`<FyNkX
zl64Do6sy~Ki%B6UM+YZI<jGsn9T|AKwMR%tne|pj^BG%{h_IP_JKQ4mM9K+#4;4!m
zKO<v(Kd`o+;xkx07bsUO%xZ9q1frM>DQkwk7ju&>(dj(u$LJ<^+Y5A#hVUSB6@2u-
z<cwi3M%5ewI30w#J+@RCTBM3nTF*EcIaMLDGL<o?*1)e-&%^Bv*HlV$j|_B7J%k!r
zP(N(W8nIxd@MS+{`{USMiJheVh&JFsPezw+kEogxsU!5c8Ln=D)R&nWYyTelBX*s4
zc!R1N2zBvKf4U~u7gL|ig2h8uad5KGK$uEG=Aq{W?aFR*9M@#an`pSf8avrMnfYx}
zU%8?{u@<@mpS`|-j8?;o9UFhSjNjY8z((?wAmWt4)#ANtiQ7m+Q2Hr_M+{VI9b^4}
zeaOya$;zZr@O-_7XdP+<G|J=oVK+0+qu$PeLT#hrRy3beS%G3ZBF&oFsmgJR+_t-_
zfc+V&6-V>xtRZP>ykVKWM4J5aBp`hZ_@>DQ7s+tqyRkg+WlXqg_;BQ01g*%0P&SaK
zE$s4*7YHFkTVYH$_l>N|y0}ir%MC|@Sw}St`nJ)jKzJyC?=}OZ+?3EgQHb>#JkQb%
zVNJ5+xbXmks%lU17xmj7$dGL&FAOuu;(++}6Nk6eAXKmQW8t`ClB*<Qk%`c9-Ep5a
z#Np82L42QD@n{`k0`jJYk|3}Z(55BUwhGH@qv|NS^ukdVM(kpk<3;WTv#69p4kR8I
z>53-y>Safv;7tyC78{p~1as*Ny@fxOx^gy&LQ#+B;kTmZdMeujMWrVx+|KvUFC(KJ
z&2kL^RhE!rDeVaO#@BP9i;o`quTGCd?s*;&yE211Tgp>Z?G0<*C+Pxy-vM%Z+s^KD
zeR_jOra7h01uR3-Bs06c4vv(o4F99*+R-tG4I!?j+2tKaIn|_^pDI&mSL*3<Name7
zy1-2I+=gH>3O_w-*_gDpkgufk3D_3hTP@zqj+>KRLgXUdhx{(cn|thiBv8g#4dVd6
zNCSNDa>V-0dc!w&meOBAzzIMUGd~$o*Jm>~E30)lYA`G2c~61(MLEhIXRnV1ODLx(
z6BkF35q(AGZ99|Zk}!FeXqv1|AT87FJ|WVlfl`T}n=@1`4-J4@$e2E)gB&7Cwb)y6
zfk+DRcSLm`gmM|BfW+$jZ1x69nt^{0-zq1{uA=z-7H0;%AsE8gBt4-r4$-Bn2Pop|
zphzZG{4yHm#Xv{`!)uT+3)mnUA&fa)_2w{jn1!!RJx~V^(z*(V#PdH%wsWF;4cTqQ
zZoFpRpVrb%1JQlfvUBvGDT)unvCctBxZVp<wlLjGC56b?;qy}*n-K@LhO9GLRp|%`
zv(-0ifBJkWV>X6^p);`e7w9{LVp90kFp4)f;2tuF+_X82LKd<cwBC{Ph`;A;V{bba
z#+ZmLRluFC`Cd!;EItO#bE%i>tbD=#`Zi?STWK4zZ}j?!SfZI`)4Mu1!%(*7h%dK#
z-h46kvSb+8hn)6y?z}Mu%|_kE8Rd?cPW$W!`x692yi3}M2Vq^UndcS+RjSY5apqba
zOh8L-4|Z-d_H`$T#t6QrFC}sC{{_C<#2dKX94BY|WE%Bi!aaVd@jylj_twa__+vNt
zGO_@de)DqJuBo;TEhK4w%p0MEC!XXGOwLw1;|XQp3G>7hr9OK>dpo&c#^v*RAk$i7
zx8Uw5PjcIGDvqGJr7(}d8{5>iW>S&#6$}>*%^@!}@9b0{Cz9L3e{Xv!3fR&SXej^s
z?X84!8DA5!tnjZ&-tu)BHz=7`;|D4o>0kyY_uf|S{_UcoCIr;L>7VcCdAOm^o04*c
z#gpWOesd*9ki)^dS*EL|*HKZ5<(unGhI2R957_$TEnWZDmpM|^Z8W0<08SCvD>+2<
z?PdXqFg<kaB!4s^LdG>xT$ca?<~NVJV@;QHOa!@ytN>Lhsm1oRGhNs$_ero{n@q!w
z6eM1ZA;_Lz{B9%i%+6gA#yg;dw|V$kM%5dwcx_!e;<#JUsv^f)$S8<!L!^EGSc6xF
z+2rc;(?IH|$cU8iGPZ}h%4=3RN36R0>{~Y)_?I%5y4?)5p0$w(r#!-0RW$mCsBofc
zyUX(SZyyi7D5kto2+FgOtRpxoQ_S!1BJndXw-P`GB~IYz^oC(V$Th4+;}G(*a{UH8
zK`i?_kq4Rcl{$O@8gSfYZZu+%+EZtyW{j(GdiPj&yXZQ>g6){`6EuWe*+Q@n{%FS?
z-~j1YG25RCSr!Nu`R^8;H3aQ<p+LOgh5h-<#d`#>CsxTsJzI46;CvlI!i1J`&<4Bp
z;(S^=5}a=W3f;8#WNHOwS=k2V@;AZW=yh&3{ob?I0p4}Q(2Rj~{=MU=oQBCWlM0<%
zv40a$C#LLrfXzLx)UZp$5y`sT_7*q~Jm6l#aGIQexa2C1ZX|JHKnUaAK+W*Nq<y0O
z#v};HPW2(^7<TFbN$uBkEJ&D_g%3HdZ{>uM>yji&Eg<(z9wI1Vw=MS91F<|nw&<ih
zHKnl?Xo)`%^=8BR#52b3aIrJMuC;;Af#YPdLshGToFY_4sb1nIJ{H`~ON#18*R{61
zW*I3T$BaAxA6(Dssp>5uLwUx`Uc}iIS<xaj{%9OEVudk1=~8LPPggqK5y!tY6drDP
zYh`KVIzHMVp8i;>iAh|`XvNHbh&*2C>Add2Rv3;s$y4Sd2_|22a}9}ozCcR_u+2xA
zS04e#)^&PiA{j7UTV7?9rp6r_U7Sj&RXeW2R<|&~6I4ZTZErazz)PVYGPvr3pO9{q
z(S+Dt0Y0T}g;02h(9-g_o<nD?!s25<oALd=#dVOm`llILwi^`{NSVkmqw_0}6s5+3
z8q(qK$NXZF$7jKgNoGhdr`-8gq_EUkku`E9=aHvqo_^L;(A(Lg3)#PRP8IBNO&N@h
zd=qvJeEt}}sUac?AnNzLTW3(-bNlutT@M~d>WP=OmGCI0)Ffg_iU=Rlzi`Q4#H;32
z_ozHF_kVD#^2EkxO)>e&ryA#3l9EX`qtocg3Ca($#-qTZi+=!r)V-%$;W(#JXx+S@
z`7GqOd2ve)2q6l1BOtJJyEBqw&tmg{m@1fd4X5tPbbF#Pw!_20{@t?K739Y3-lXb2
zT7hVpPOb`cFmA|zJXcVPR>ERZ$vP4O-IDh;gXY7<tMGhZe?jrkM5aMVy%(T(z$7@t
zg}eAmWGkyJh)=wlplW>x#MwShD1L0lh;R$NB7*XG_yUwLqjnqr6M7J2fol>~Q4q84
zuvDFWAkyH+zG#4{w4;C|nI;;&g5YYmZaB4Gvlr==d_AOYI$f|43RCb&n~UZF)?`fG
zVFe^=n>9cadTniLH+@558FwRZnA1LYo>`;ypVYOb*$Fm*$f$1!$E!o3DpM!dl?Fp*
zL{wG9A<2lNu{@quS4;$k#Q;kS-x!x$DCI1HRr@0`hE4xT?`*id#hp|L6yODUb1vlL
zy_O^XM?;gFSo=);GKV0m_nZ7HDo7bp5oC_g8t2^`?S4!v(-@c09qHn1Kptt`8*N01
zHzAn|763k3Cz9SkhpLNq?EM6?UXEn@8pE6qk;|EkPjlc-DN$-oBXmin<8ULc0(#Sb
z#Pe%RRpu?B06%*y(y4FW^$kjc?v!q**vWaHgav>TU8PvMQTYi{-Qvd=D?)yGGz?H(
z^5_%nA=R5g2UU?OmNd`XThMQj-5*x@{wS1OA9-Nrv)HY828xLLIw4Ei@d78K=-I~m
za%&LEI*4dlx-Cw3yfwdjKH{f8d*sUFyTA5wH`J4T6K*8X>@U}exRQ=vNOx|zc0iYs
zod$S0p!0Iyc_UC=|E0C3FU;gwvYSmr_O<)_m`t;&hU`>{f>~_Y5arJju`Luf%HM)%
z5BAZRR1ee+ga7^97#GpluYL5U<d&efI@Dt<&gC7cc5#!byBa0@X5HRG^JwD#1}SW#
zDauJqZB78S)nhJmX0-k&Jg+;WU>eFO+pbK^kOPYpvwkVzyxd{r-Uqh;6jJtBoRn$m
z4Yk#Bp;_J}0G<T)ka)=%Foe?^nWVJ$ByXA<%|bC-5XqfHqA_v4GZ;eCy*3f<!1C>B
zYbd#tu$xEP763vd-ur*dlgKSxY=tzi9b9Lb_?C&b##LmTK}E{4SaUR7PXazl?yZ9-
zw~fv4go6jvs(8mjCx33Kt_Rc|cFVQlU<_Iy<L!Br&4_qj7=HJ=Q#c^bWCjUxogkNu
zYEWhO)+i29`;MjdtHbWSQvnKxJKFy#gGws}xdS4zJu|i%^eMGzCqdtSb%<kZ(U-yw
zW`O2PyHPKA69mGp4e<nsvoek^I`}aimT=ak(n?B*2~5>x_xqFZHzb}S7MH+@eh$lX
zI_b=PdHnw|jG>?t9#%P+4W?xY_zn}$vw8t~{P9agVuAXP!i-`)i%(ev?T~^VTsyvD
zHk^ePz6Ca0w_Rn*`j8sJd_@yq<d<<A;syL9yY^h5(VA>f<6NUh%AT=CP&NxT0BSw>
zC^5o2g+(VBJGjGd!g$LFS`vHxXi~{DcFR3|*Tlx;V&w(4Od;ZPvH-nil6uP5w5VI+
z?WDIS7G?%tNSMkq<msg#q^Yl{^SqENlI)qA2Dm9_IYP6G5$2ZBtsMBOlq)UPHc?bX
z?fM~VQY!OI3bF}DpZ(v0_eh2Q1u+b=!ra^->Tqa7#+%56>ni`C)qZUD&Hs=UEXK)*
zh3&+gI?kr2et#N;iT*<=Ob1foOa3Na>RC!C#mwLCz#Sb}$Z@XNc)~qN^bL<v{oM%U
zOK&o8kv)FVR*&jXZiWBvj$fx(k{?@Ch75or48dnxrfLi#jnkzE2|ihM(7-ts&^p6q
zBHj2PzGgL1{G~CsCepzFC@jqZmMA6clJ=qCIg8a7jz617l?o0f5lDlpP;aHb7P&dY
zZHkkJMAB~Y?E?7hW{U2HG!zT=jHCP87_2P82l!=!P0%XGBYdRl{oyoi&W;2Vfb(9;
z{n=4_{owA{0{Yx|dE3ZC_nX^O&6ULGscl=>tJJF10xxWdq}prywNNTKl7f&G);=r?
z!%N5-8KNX1SZ;GC8Yu*V`hLIF0XLFF*P&!gfEB!kj<Aw449GfUt#fgBhYg6`%w-IP
z^C|8GgIGgtBDZ;6gp&}S9rb7p0q4~ruG&ai*ozexA13y<oZ6`6pU5n;rl&sw={q6d
zX(ZdAPbikA{lxed_Fs%k?)8x99%Xao3}yrhTCAYbgOnAWePiWF1VUIDxAa=imTF3I
z*l#XPI{!fCbD;<!B{^4)pOpjP&s0<!)foZjyTHMLAzVAG=}-!7Z;<dYKaIpBl*JM^
zm21~p$NRDcQ<DK(Y$&tu89&@CBldi-ZJJn=y;0mooH=XbT?RvGtA{SiAk(%?#}o@B
z@Z%&o<hy6AKa?<T>V=-)@STb|Ub{0gK*Mg}a8912QpOx>z`vazmRjf|VpC^8(sCth
zdxac#W?$OLVo(Ogd%MY4@bbJDolX94M(4lOeLXjLl?-2<QT$QJ3-Q|X9W0Oqp%WET
zJ&^`XAGam?r6?-t8fX?fnOC%K0N;!~(XaOu5F-_z{Hen_8AaJ{Xd79V=f)LG!>_aF
zIfW1}yj_2C{ztu-KZtJg@+}4fPPlR$|78!m>rin+GDa+^D<uWH!AY%f%HxidbPxQR
zrKlPGHw?D~Ibr1Et#^MxUKwb9-Y>6sK{isGDugD_;u)=<WYHRz>~bPW_>`7km%*`h
z^GaYd-!djum$Z4h@_X=$(ndzbYN?aqMT@FT5#e0n@&}Be{%1%OF+93nf(fV02qvQY
z_Wyc@-j=Wk2}sDKY3fxoui_XEjX~}JSB_~S)#iJzX%j=@2rq4OAPNa)fA!F>`QKQ@
zm0PY=&I!S4iz1b$?#c_v8)X=k-#9O%FKc??m8%E!k^<mfH-w*a6v^uDv<Cb1h8y=C
z1?zskTXBA?AV{)FFWx#AoKfG7-*{IoJ5^pLuhY1iVz}w11B+TE%8o7lKcVqr_=ryS
z^<CX2x=sI!Laf*uJsWr>d*W-HFrsHU@E54G&0;hsnOKm)=yz(T@xyyKr%2+63YqJy
zE0TvVXd(A@h8`j+mJu84Pxr)$QL-9~fB6k;w-?RgNN9xKorm?opV>Df*GaFj(yfNh
zZ-Xl<2v(bm;MT|%lhcN~w_j32?1cDi@Spz(>k~9dt#^~ply=RDbDP05E6M1*XRrIl
z_vHrJuwfebea$$w6c8D}S)&usD^taS8yQ}5SNOUI?T8db6OeDF$1{i0+=Q{W{(>1|
zB5a<f0%SyAT_z3C5<D}Eb~M~<642`TB<WbfDRw<b)Us0#1~34>cLHi_^Tg_5)mi3-
ztDJ(*Qd=ggE=Y%-^CTU&5l4qh_LN^5RDSIt_fu7x$9#Vv(m+4nfiIn{tJxa_=o+pT
z@kCuw!%H@6dIKfV$ZhIoJ6}W@2k6ehlw4OIs+;Zl3x!2-pd3(nCVVqfPel6Aw6LJ=
zo+XX=1K<vB7E4g_e!NT@5*5A!zqDd4mE{R80$cIm3m*5E6e%OKBO(NR`#`T_DXF5#
zgRfGM)(GY{O9cXnr)Kuu+#l3pkc8~VW#(<mhNedkgYjD1u=UN8LR*diwMn4a!j+LG
zKxmHO32+x^MUc0{S4&P<e!B9v(-O)uF{!~_=)>|+KBcZz)pH}z^vF<9ASNT%UzDJ_
z+QP`@&CJkDI;`ySp*8xYuPC1?0GqWlNwKn+a)YLEV_jC^nMP`&f1WX&j8Y|OX72&1
zkd^=HtBffXCV+Y4D~56+SJ?=-A9u_@IygU&vGkYbOLU!`{Hm_Jup#pB13Ug_p)06r
zP)yh3e>8c9#Z*lO-=b-^YhH3N`OSL1Z6$HVFb2D##r8tla9p%R_pZQv$}>u%ksUr|
zB8y5?#g7+N*4HdaZo#wwV)H{US@}2jYc3w|&-XkwS0>d>Mhf?g67g3ladV$Yi_S@n
zkz!+(3DsdyW@kGTp@1o5fhQ$XlmH~RaI`(ACz&^H>~EaRuJsH*)pg?QWJ96}g}gof
z*yWbRUx_RP0czzs3odIpLeAy;Mr8OFv?DwOkNZw&on-bPqqEx=TtD`f@JsRC87r-6
zhcq-m6;&H{=Un*z`)kcwddFa@Z8|S9*}}gxlYxtpvnZs%CAvMRrtn1m6U%psa{Tom
z9fZTPS(Cc?M|IFST;Wont`#QglOWfJC>4-KdfXa;)y4pw_evaEFBc{%Zdw1pZH!@I
z<TVRM;@jFf$mE}5-BxXY<8LI|a;2R@*Db*wXZdJBzs*0U=uMBk(hSSaW=z||uw#(D
z*^E780-074U4BMc0Vex=X5HZseA)M;U{#yzx%W)=t-($QgNDaH6}A6x)Q1$kO2M;F
zjM*R64d()orUrm10OMWB?n^7e7&6v?{r7N)Mf>97aeF08iC5gfA&-T?`gAw43blfV
z9`=j+eKLx)RDT=K>_t<@HmrHs4R9q;<~;r|7Xtul_t9aCCn!lb>&@h*DDCX;;w&9u
zLlFU9eS+=%YbwtOZk;ORs8LIQ1+C9!b7l02_uSCE6;)@gY+)zz8na}nCSTKoBQbyp
zr`R{8|IEh!+2W1z+YeGIeW25cza~u=r`Zz2=EAmhV1*z-9Bh~1ko5v!ZEQ|*LPv&B
zQXNsLp!<z}Z>}zC;AH>sTH|_qQ)~I`8WNl0ag}t4MxADhy6joGQ<}&IyU#ZZPk76l
zdqcn|9KeWuD$ySG9a<L&?RzQmw~&&4c9hd}(M|Q(XuyFSlL>*HX!zcq_>r_){u+l6
zjpp7FvAR{roFXC%s9?nH?SgK`9gs^0Pak3TUVlj)Y;&1Z;r#@4ry5$bFY~wMu6?3)
z)F9c`<b|mDtH|T-J9ci=Y(yAA)U-Iq7<ko6uP35L^%uJUNJ1pg4EkAU%+ltOA}I@n
zPCI$!D^0gh*~>{Hpd|qY#KCQLy?3Tf=b;?RIk+S@ky4-#or2>;V8;|c2UL(yz%&DY
zCYWq;EE2S(ft>@0cRU6rm3yqSAxXNNg6C5qr#;hHw=kA01a0a7ymuJ55^eApFZkpH
zARoIRh5h&R&bAR-OxjN;&SR2k*bly2Fwv+-Xj0m|03?!Xt7r3KH~1Us7@j@22P+~$
zTQd+B#bxRciDE$Z!hlc-Rlfr;`D2`<xwgL(O`G?xHB$a&TE65qK@C5Vr9;*xX{7VC
zcA0OaAkWPd>#CH=;3|S#=>hj>cQ;Lmd)`yfmr~5ivc*C?q#gFRb(sjRIbEsh;!z$i
z_cjYTLa&3$!S$Wl$#ml2uG)xh$LabmPLfTWlkO1EixEYyzZ?&}5;xC~8r&d<ayrtG
z>h7|4v?-uy*cd*dCfObGoz54==bSQVM$L*VHt<jZf+$u!g9aVJ!0#-#gs^3)Ago~@
z2NT7YB%FX>EQK%z7CzwEBUSLD4*E&T06_(dQ@Jjw)3jHxp-1SMYWf~)Q)kC##5|~}
zilg#fM~e1?VA#(5fWu#9HgHy3<sn~QaAP|-2py1!nJzex(ET{MbffdwlF(K?)9UCW
zpEPTXw^B-8L2&j8-{M>tR)ST0T8S#5ZN_ALHv%#kw1Hm$lRsWg??eA92H4EGw?0zA
z98z%vq{kc(DyV4H3fISdDv=MDd@YT0|0j|3yEG~wwiw{E53*sW*&VX8dUAf0dMq)u
z0^8KC$yjOmjw-|BipKHiRZCcT2$E0lk!->mI_p=U+yA|d_<UtCFmg2WtC_%GB>-J;
z2*K`6)E<Zgw7>!Jc&tgjRc+mPmeWuyb6@$}!HCzg(#t6W!pLPrWWWMHmg?qQ^m3_A
zr??}Z*9iMP<K<1J{Xgzcm3;EK49>-uq_JJzo|@^jU#@w}R8Pf+<ocrGXI*~~#aLK2
z-9j<Mq68tZw8^Rnsx3S}1v&S`iVHuBDAv@jG%AU66%RZ~)G#^&hD58<H}Ap)ONv?X
z$_bO^+A+A(2E)S87$;mMu3I(3Y5#MdT=-ZC<YiLpMf_UkUg^0-8CJknlyNp({f58u
zgirsC&_aqX37Q_%<_6WTi<wQrfdjeW+3KzGg=aZTsRBYe&iX?WnBP3j48cL&IAY0e
zN?4u{&9)wH%sy?#(E5~k@pgxn$1JktwJ)?4PE7yqM9S+i(i{274%PiUjUmKcGgHA$
zC5Rz8<m4X}+}B_feJrU;I_a@^_gu*J6Q5)1TUm^Q?Wzo-sd;>f()IxDyZg{rLup#V
z#nr1eDH2zUmv(sUDI95M%F0inv1Fw-0|kfp-j7#<XeDK#>y#Osii1Tgh${FXwL*F|
z$B#P;frm6oA+>E1HE1{dQ|O8x%D>8UU9d8q?t!rDMFLxUTfxYOf_(w*@Pm$^fUf)y
za&i&G-t5UPgJMmXNE_7GCn{tXNAaua6X3KW2o*l!ONl=@1069;m`$(>9!$8q+3kM`
zYTaEBBpOZ(K&)i~$rmel;MB6(1B%E_IgB~t`Rg2HzPX#}2B0wk=3gd3^mX;{NRb<O
zkl50rj2kRcZ{W}%MBAD$g<N%-wKf$6&`(Z1`n^dqnz&;!(@on<U5SlCc%;9pbLL#6
ztQ418JH5@*T^f)QL=w^1F5nD7&rj_rnG+bHDm%@7*dXL0|GeS9bCPt;h+4PaeaR%L
z{SMI$#E%&7Wv<15>_WrUAv+K<+l$9#wJt-r{|leSa^lN;+0)ru?usN>@M9e{I{qTr
z<r!VEqF*>&R03`@!p~CP6>yU8%v-dng`HL^bDA}tIeYxt-OaJFE6s+VAm+b<f45X0
zVCCjCBJ|Of!MM*oZRsk+HrSr+!y**|eu0U}m7?r8fJM1sKiE~LIa2*Zw}-6!x=$>K
zo(`ZUN?XIWYfNpbKIQ~5U*zUNeP7k6RA1npr*6OxY<be=t<b<%2D58_jm=E%U)UxS
z6Gc`C>?*)CV9da!52~zSG|iLKqrzgjmw*LCY*)*s{eK826QkH@i4tCCK<(I0NYdu3
zX)AnVWFdiSP?*G~Ss`bupFR?dgZ>1g0;_EdIzMihqNy`z?*9Al*v1-KY}N=OX8TMA
z65NPI^S&%_W9~xu>FHN!`kYHir>_e;SU)U{I7Lzv9b6I2vku$f6TKowZ6Fa;&QvtJ
zh++Bl8lNy`7|bqd9RJ*oamM6mKtLt_L$Mo}JPcn$?4-bsrml!4O!AV9q9>H31SmSO
zUm|GFFn~B|gG>}|01Mjr`#~MQ+XlLQXU{vr#_&fz`&<z)@#0G=r-K$hs7TN@-hy?l
z;`a!eMK3Mk0?A6&d}z;Q9xp*Oc$X4A{fCKBdpu}<9la62BOXrF^+(kmaDlMu_?Brl
zg@Y{fC@Z4DyphObWsCJ)#Tn!91XOb)GzG8b^8Kg{RV-&kKPaLgP#pJZ(s#B1O$#1B
zx)mdCY6o1u!R(=XbgfN(N9=b2etm1A2UAa(gUOEryYl(ciAv4UfCcJp8oZ2;Y<_r!
z$<6-~Zu`!g5|hnSJ&`Z<W@=8xk%b<>IxMCmi2{;olqg7V8ix!lHhVW@r1d08t!ZZ9
zppQA<RorFLZ>R{8zlt?S;|0<u8EUGU$!m|CK)>fS!d;;WuxJ7T-!jEnNHkB#Y5~lD
zg5lacA47dE;V{dQCyN+09@2#@Wr$<lV;|cxSw|kU$Ke7ig^9uMRHR=s%z_2E^e<~m
z7xRMZ^yngX`gZ$A9bC|Yt8y@{h?lIBK`?rZa2MG$fElQH2=&qIGCW~@i%r>o&X2^O
zQcVi|+qaO|GldZd)e>wRi8Ve2mWd7Fqy|jk`Y#;vD55K+%J>GrNhi&OId+(7`1&!A
z2I34;pQe>tUnatai-TxigW+=Vkx6XhdIH^reL<uI39!KNku^?c4iINyfc?(W+7g8|
zFw+|KS*CaE?YPnu{cNAA8H|AK1t01{wNPVokhB%V#X}Mo1)BkMV#!{Hcc~QY`a_||
zcROUt%%m{jWC$0+(jSUCZV(5cJ-!LGPc_7xE4{}a1}pw9f;P<;RH2n0NrN3#p6=Vc
z%k102VFXE0{n+4DCXPkfQ{QgjIbl;E<3*k}@joYnS+TKC6NS}7RFFP~(`i*Px@a_X
zr$hw&-ChcsD2=4!>m@it&Z1MQsF8PR(;3>5=2?jHR?rO4<RGg!(CmdduW+efmGAED
zhu<2!#DN>iG5z1AXhC$46xg`NB5Qa98dCmMKRI0^p*aNH-}=BcUyuJ>D(B$v>2a&-
zCa9dAsrBXGmpTevG6=5)V!wyBnpGBloMenE32A&iewFmp&c%xsuIq^At1{Q}^O{H@
zT$hhdQ)@9pADq16xBIcb5em4>@rkV(0>;3P6*C_ZxNr^A>9iv6k-#@!V0~dx_tJUp
z$qp=kXq&j1jsll;1>R+{sg$H>9fWc&K``eCW^_%Nh<Yj8+enP(?KdXz<p;Wz8SAZ1
znql7v+Qqv!?HzBd@IBldoQC!%a9z1n3p&n%WWNP|cdA4|7o}PYs*YUMdPxwk!#A3Y
z3nf^{&vtuuQcl3%_>fqV_!$3&TPsg0tSjaR_?X#dt{d*Xe_q>`ACUUcW5{{gi6!-5
zk!E{JN6(KzJwyzr;7zw|V`A7QOz0*lA&)BduzgkG-q-TPG}9*hB%yX~*(YB1zk{eL
zcmaZSrlGTZ9@T+ZX!sFx{}g0<A?z(hI{`PIG_-@5Os_~1u*giV6_@K=4Wew$)MC=f
z&2Buu3i{vVBZUHVe3sXHDrn{()<p_II9)~H#bzNi*DMyab837}`R|r0t37VkHtfve
z2Mt~K&F^QB%F@aVp@Fj|f8t&Ue@-@QrKi9-%+mqvcw5EzGEJ87yo~5T_<mCz0;py{
z3at!5SP{;kntuI({71Xhfx=6}waU9$1GKc2-(uh7lJZa9X0C$qtgGg*q}F0&!y3>_
z!N1wKN+Mqb6S0v+HK|IZT#9}AVmSXFp$f6lABT9*xu<5YPecrCE=V(U*$2b5y?40s
zA9o@ZTP912;OK}N<WUs8Ed&0d`6fz49oda`8?Nz!4#E9&1J*haCI5D+cF8Y_Q#Nwf
zg%jrgW_RLaR9Mn(Z;@JKAVMKH3+<b0T>6jD)|O=8f;r1MesARb{(0%{5&`)SC3-Ys
z&j$m6ig+jM?(A+^0d`TFp2%y#i8^L`-`fU>75&v)GGV#(b6kcJ21{8Al^h4RpP{55
zGs_cdaw5&dddf1F!zzA%>urA#9mWql(C9b=3Gey#?q$S)o@f<|kia-8sTCCz^q#Q4
z>k#Gxk9|hkvB|p8A%P3+O@T@c*&=;^<s>GxJH~R$fz>FP);v&;>@Vv>Fbq4OOh^5b
zLgJ(qA;yZLJw|dE=SS1s$V*z?<459VGujV&iv?i={7I@GV5!7-HQ-FUQN&oDfe@AY
z?1V1|oGs3!{@>Y>sP%4?w_Hp6Ie&vNFmeIGWQ{~Nu^-Q6MnRqQ3p8JSJ{{pG$&6ZI
zbvu+FZ25-8PKRU^x*l2qN=J5j+m33kDjcOX|426pkVKb*r~FqqhtGTHPV@bKf-qAK
ziU3o$!>AxWVIXpqa5QViEO7hhHm`FLR%~2MQ_a`sUV@n=8$J4BAJvM8R%%hBf-K<V
z8U@EA_zzHSUi{g(gVuKsg9eu=HB(C4S9R`sce0s&XOo!iH-ubBl$AgB>%Gpy$=G(*
zwa`%<2^gh`M66>sK%nTb*A)5T{WEPBdhajSiNiG_NS&(5u~$?qxy&vGH*aHo-#FYm
z)3adfN<M@FPuU_eBAjFN(0g|Jt2y=Zz(qc5GN?_py76kW)zI%LRoqFh`fa9H7Q_QI
ztT_Gz;BZWO7mp?aj^w?okoGF(<$wM|Uch~vO7ou!{I3u;Lz;38i%F!kZ!n#((?m`^
zP<(!8ED(~}%-JuWyo(kihTn%4_&xG1OU1udX%BttylS1(K@rgmxqX9;QXiVbck6;R
z%GU%NQEu#A=3TIggOnZlGvx5QZxKlm=a}aT=5~TfIw%M8<3WjeqqG9leIIMtU|qRU
zq-r!D{Jdy*K~$bry>drs8lzyaRjq(BEs3b30+p-<)OAOTUun}5C*molB(m4}f%L%v
zW}e9~?kX}(3ifulUbe~PFSf#b(^1)uY~rKlnU(6nY0K{+^(P@9Vi*TIM0Y2gM_-V(
zUHYXSgsJR4E6OxX{_o(Ycqy(-lQ2Ix{rF5dO!J5<@e+j%g77_I>`BKS8FrswB`>y0
zi$?EHOlp%KEAw4C2v3YCi>fy}kHhpVuOf`_6~;N20oTb|6jxI-(falTz}A+SP0Bh7
zou$whT!RTg(XH^{bdJ4I_=Mdjq%H%?@H3oNz~~Cv)#VFAHwQTO)0gV!^IU%xaZ$F3
z#N>wjkhce-!5m5}XSEGf1b{xl1}is$6b9*P$L#{LE`TGpY!(b~kvIhduP|8HW=+AM
z_8`4pyfrX~7RFTJL2-nG-ftv`u8Y&$`m9W6kl|;|PRHb3Xe%9QjwzcL_%V|ef;YzO
z(Xl*vTiW?@!@7j19U4zGUm>k9A-|$?hg*Dv{}DLJ*t<iq>kbbxvA6PjXz*8dH6_Id
z>i;hNsrPD&2ekJJrhKJpbL_Uc<jf6GHU~J_hjNxN;~wqt4rl#^inw%^xFBdu)Wi(Q
z(%cLYxn2J{@lGWwl8b+C0?~mXvd{m@Pk-(^Otr(A&f6n*#3{Sj3@9fpObDsQ3x@-P
zGft0xR|(&#jvT-YFsw3Jpp?s9S__)~ZfcK0f@mWg#n(hg1|frLEPah)4hdKKaWwg&
z3b2hyc^D53A^T562`ofJyy0mSSpW#=)$19e@~R~Zc9OBf(Gbt|zlGy<2mBNA!B7)d
zyocjoac^<s%A=A#6c4Ut^jB9Ie(L&-2V`?$sq`Rab~;ZrYM*0OGu34=`d5hzA^O^f
z?n9?%v9*i~t~*NUuwKnX!mu~(NmRvD(I}jT^Nuo5EaWuI4jx4hv2MG>xBxbVQod-c
z&P#Q+Y8ZL0xwMJb)Be~>TR3T^7Wher<bKSlL-KjoL0u713?m$#m#hMiixRM!W(I{2
ze=DwUH7Cl2&)+<8ym%p#H;Ts8{JZ|6w=Dz8*^Hz>ejp?a!fkNd`J*Dxop$>mNE}Xx
zorQlTm)rGk4MT$u793~3^~Wd+ZR9YUYiI8+q-9Py<>vcva%SZcKSOZ0e}QGC*;yg>
zcFnE@n8e92KlF$*MdcLyKC<8D>3)IGz59^|;H~2JE4OlKg|Nr%ily{<ycgK+hiGTf
z(fHVR{Pvp9%uo<F)<ctLDuR-q*=}t~GcS?vT90A{g0&q3E%lx5vN0G!<Hwb@q##h=
zeii1t1YUhF`MN9`D8EB1PBr{)vrj$RS3A4YgFfILEA#&!#GXQ5Qn3|UoFxbIBn<p3
z&WE?jgNR{2O!NmU9VFRU3~PAP7UZaFSZ^gb!gZ~;z;r4I0eHFEF_Dz5430~kKCWTd
z4o_7;tc4Qom@6?Nl0DG{mi7l4*=Db`q}U0v2bRvI@*`D&{ysgJ)8|yIPK{pX-rH>0
zWat^~(#lu%16)H)kr=$h4LASWFW2~FN$o{^0}l=)IBbPUusRQrlcXho@aG5$Nsdt=
zD2%|o$`O!ies+;Nh6W_&*ehO)7JYwH$|1_59vLI>#%NzJ5@;^rYt*D>Kbuq&E9BL(
z+@b)4rKZBJR);vdNF^L@V-mUj{<|kG{oGY>hPMUXP!S>R-_%gN=;{GsjMil^ITnCI
zw^&{}N0&!qB}>4tElo=M3q@8{Fv?#J2zm_`3=+6=a2R-5`8S0v2NoQ*r)=OiK(h<H
zNmn|q@Hs?Y`p4CRH!Ny)#PqtwdhEm?T<!GKHxBmXekr?i_V|<TjA~fabW(WZ8Oxz?
z9j~9f=#`Y;05m44XSHa!OK<q}rp|ql?$yrt1AH<Uj#Z%caoZ?p&x`^W2g2A-Ax%U-
zQQ!25YIjDl1i?G+P_nJkbM}tK7m)P}m>lc{9K_!cjhzg~{%Qc{Y}=0@JjYf^Qz#t^
zV}&H?Flj2mU3ySU{*ti^+0YX+Jd&O;&G|GkN!bqi$<~^}14rDqo1)-TCiK%*<&>yJ
zpFt)2G!&%g`EgKN)LImecWu4^MW{B35Q$uZH$N~OgB*y$ChRdI!s9JS$KYpMe8JXQ
zI~zT=nwIQ`G(W99eWi3v<_Y!-YHHyUYt0+D$rJ|75(yjNg^k3$M!n$>9q$Gs<_YM3
zm2bde97(n;m~BEMx)!u2Q+qR2{|aM|ZWCG6Xj-djo?$!x!qU)N)Y5EFO~zAjrn@&`
zES{&GiQTsXQ_qbL$doeMm%4L;IO+7>7h@g-c<&M%0w{yDWfT5!tGM{XGf?CX7$Y!N
zbyunjr+XnNJ-El2s4klIQVR+o(Cx|fu96oh>Ft1`$*=Y$H)An?eJYzG^f<_K$PKwK
z>-w)2_sjq+k#FW)<&7-P+Bk?Xl)^&DY<?A!S_CMljumu>gVWRCLdslmvC=SM+f1Vl
z8_0^nmv4HAN85awXY_B<snd#Jz<s%gZSl);EcVjb2p+eNF}8Mp?v?~-2E3E#eyllm
zDH5Wg<22TpcM774>BY#fku=8|i})H);Bk7PYi2L#334Z_6#70@y@;mT9mG0k<MnAe
z@=N=zbEhDjy3P-n|1uCj`v+YdMlS#L*SM_5=OHpmehga^48Spuz?Us=`c@rpI+d&U
zG((p&45gt?aqu+qzTbCGSsZ7<?G=@;5{bq;7P5w%ri>H0C9U3>2K#_Bs}B;4Kyw!)
z&exDh6?hF$e$f>x_E3@hJ>^MUhM{H9Wwb!l&_?|6HcY0f%NucVq7AH{c!3Rs^dbpm
zTYX<iKbQu7ZI6w_$NaGO7~Yc2SAB>iec|`kG}5-oa#&ryFX9KHFm*4i-L3n%Hd$kr
z-x_XALW(!yqHX*4B_m=im!55pgslut2br7l4%|2>KLmYumX9!X=Q>0%GVG46pmvAO
zl{qOQm9Q_?A_Dd~S{y~~b5i=yKf3+a>M{^uFS2}|G~ZS(VbpdvUF&o6O>9w2BTzrR
zEJIRIADZV7eI&xW#T~fO{8)x}f5U#7f2pHpfU_p9e_T{$&l&@`H%IuzRU}FhrYs9~
zRGcZC&=WaP7Tj0Nzi&<4ay2U2l!4C|o<Yu!B?Q`WER`v?9^J|KwYveD2+kM%q~DRG
zJbD2%?n$wDQ9Vz~g&6M6|I3Aa(Gl-2^=3Y&KsT&&PN}vVFnp2N9l4bMr+z9|`e6<t
zP~Hk!Tacu75(6*_5x`|GgT*W{2`Rsed+IW>MNYRlbRsjsm=S_~X&8Ks{_lv-=4`k&
zNP!P0Zc74fQvq&M1aW+e7M81yIau$GtxI4`1ddJDX>~p?KV9a8^^h>L*r`S8J~drb
zrKh}^4BtY|IK1*a*Apqr01IAX{5@+$1x0utk(x{cM}Z8{H*dV8zYK<!s&I_cQDR&^
zVp)}hApZ8}qi%FCqadW>KNDTS?m9pP<lY9>RV7f--I_AZ>isfG(cInZCuT^B6r>hT
z5#?B*s4P6AA)(*1wRTxX2XxmOxAwmFFQz_U>+oR{lO`ZN_&l3KUz8dw?(0m*rv>UL
z%*gFxu{G+Fs;+r}E8j=;e!+I353@CTCmT-c=_(Tk;K}FNJiD%4tm|U3ogphrGZbwZ
zQ08P7RGVQV*t}~?cTpAyG1-8nwq@wXwwgo!alk-@cT$FW=qa#>WWxpE+%1YyhNbfi
zjlKvbj@orq3YjBckwM>;mN>2pLV0Sc<pvg+k@|`K3>e#4iwQG3(Nt6S<|dLqsAT&5
zFdmGUwf~e4Rr+8q@W@6#07FGViwzE2)-)CWWz`!QvaG`W8$@{^#z=0%Bq(%%Gbo`E
z8_`)!jzamo_v~$Y%luyBr?AnU-1e)#(h!wKaj2|pQ1`N3w~5r{j3E6rsPom4kl=%L
znRi{|eRy?AdBcfbF749DQT%=tb4w>SuPb}n&s|>e?S9V30vF9lz=J{@aUuTvlOlyW
zhiJ6*y3zL-4tn&*C88b*N_fE&{uRwoo8RU1owNJhCkp^Xs23P0J-8mj)iW^m8my85
zsARxT@uS+_0i{$yHyj5s2ET^Eu4fy+Yl5H6LWLOJ3h@XL2LXPBQCi@ogZ3L=Vvdr>
zw72~b#}B;XA{mY%hw#q4x(s~i9SDqQAfI=ROdcMnHmwwvXYiX)8T2>8=}-mtNN}7Q
zWt5kC1I;rw)`0ixRpV7whTqIdvL~$>HAZs?<>v|WUPJJn&3)?QZ{$s#i9~tm%sJX<
znqU#DYpdKi?T&0uhjl>1sp4#uhh@a#p@q;P?T;F92@D+)acc|G1)F+k7_u@Q^hx^s
zz?_A*V`_2y$!}lxaOVMsq;D(!PI>Xcm+MIiE21XJ7ws4M$8X-Ou^R*~s$h%2sFd0s
ziSsF$1aM3PGYA%&KbxKB3)uO}zn)c%5M2DRqcK3lB-p<1d5ZLG1PbK6D<pltXT<MT
zFR9ly=xO<?e|;2il4c$2Mg|D2M+oRmT=xRL6lR6WtEI1Oi;2)+02~fBz=kkT6AaAR
zy`rs^ps~5IoK{IF8Lx16DP^BemmP2Yz)6-mE~knLGxz+>tM4f2t~L3&I2COokwb;`
zD3L<RWFIqd55hE}<ucU8GfdqP$sJ?58xY`+%QpJtCxo`9BJJY(X79a4{hC=Xa}nuM
zK+cC*EwJDx(yu9tQO=E5t>7{5qpjyT<Cg?>gT#3zmID^(x~O8LJc9l$0*TT%ME~d4
zk`t5)w0I#Fz77N3@l)J}9SaSe6M33HXsZm^xeiKWJ&~2aU5L)?NYROGFeHxA!A+5n
zE<3wRM=3rV`%#fd>sw##I|~BArl?!k8sAPS6w@p4_W1Az8S>L@d9<8pXA%sZX+R@#
z%t%aNzb7=GPKb*YmucV{VD76O!E40~0nj%p1f0}%PE^XX{q83JzY+@TJXUG4R1FKS
z=exy9s`a-$rj29~ETZH<OQ}kA@>f58xS96img}iDsk|tWF=KhOSU{s2u3VBl-HNCv
znw>;7=0e^LskY9zxCQokll(6HdG@~!o_%A-Re&-CgJ3hlA2h}Ov9xL9Yc+PPPMeuM
z<GX-f%3>D<1qa=x-1L&5#_pPuXeXfQq}+Is1YSic$QZt6h%z6v)5k(cA}4=Y;N$vL
z-SN0Oa~QdwE3}Mu<@&BbkVLHA5|20;+MOLm<{3vGg_m^i|6X*SsUb)J=x{`wE~-Ca
zUCbZa6t|fnm$+~Udn}8|Z~Z}C+5w`=HwQdK2pOMaQuVbeOoQIqid*Mhj%oGXE3@W&
z!En}bkQ3O#hm$ndA6IM(-WpB3NY&YaIH#=NhA}QkTo_9*>UCE?boTMcZ#xg;xw1PF
z*X{o$lFnz2^-DeXC<PPeUkkom0drR0!Xd_}Hpk2Q{&qcE7*YYOu{<BlGzGwi18JnI
zMyAONN!j!8-h8bonNVS9Z#chMFoRmJUYwu>DCSeJLFIrRCq?0h?oD;9A<k$lCejVe
z{N^GN;TtoVvNkul^D`0Btn4W3Brn%Tm_soJcjVG*t*$pxN9e+vJ;fkud~Xk3iItoq
z$vysMuL?BEaalMd`V;*5x=W3WLh_&vh-A=bl=5w38`H(NvoZm568xtRu=NEQhctm}
z>C5zi@cZVDOfSN{!+aUoVaEUvipZPe$1pf{#6lWVaB`S1W<T{0=3*d}{+*yO;ZWWw
zRNDjlEdn1<W8`;eO$>P95n^sntRCY~8C&$CHYgVgGG*ihoh@G!AGsSJ{!5NcD75;7
z8}DWiPdqOqI!ZGO1;|S@eVolWxI<3?`vg(Q8;)91Q$urLxa!>!csHNwDXM@VT4DxG
zU~|Inn-G$h@Bqz%7AyUN4syXYn&h^pqP)SapKCqf`vplh8EOR4d`8Zh){Vq#`3|$W
zB!3<2%bVT|rezL%htH>xvh>vZl>zR$2`Z&G>i3}c&!)cNcL5M1!(Fon4oGl{1tZK$
zjM}^$)Lea&A)M@=B8t*#>Nh-*EAlbU^w!Y_wmll^_1`ua>~i)x%V`cn`qO_C5LU&-
zjX{`dw3)h6qa`E4CY|&z*nThhq{Ize7`c>C6ntB31QPdm-+8<*>Wf`mP`T9*wjxDC
ze=q<%I~75rBhUJA(8#nwUzFH#Qi5JOCZBZ9%sK}P;@Ssd$JhNT79$lNKj3&}Qg3Q4
znSOEb4Q_>&2~kraboTY^;TY2^Ba!K4p~PHGU*$#;xSR}^t(<5T`<m4_-D!MB@URh!
zm-0dQt7p8Bq+cu#8rV_fO-K2n-Td_2>Hpsl^wzY9KkaVaSNmofw9;$5_z<bH>uOzC
zn-yZdQgk^ZtHUP{4NnU|4s4Q;U7i4+ydk#D_-5+mj9DnikQ^<-ht%b{P%{1%k9Um{
zzHekq`XRQ%>bUceA5*2Ds8&(i8o8=-Um)1Mq?Wcc=aRU5T86;i?0wrueFaZ5o(wp;
ztu%1ZR+<O^m;|s(zR$)9#a1bk$OG2s5KmLc?r9@v6+-(Wa(-+7WM^P16zTqhZJgK}
zw+DIFzoyz&WW0%2fk#9G2j~7Xro+nkER{%&t^$Wo|Lkum3(|BNufS3Z13%LA6NHoe
zhUpVGa-76U5hcK!*ljl57Amw=_`-s-P$Nt9W?h7&Fvab*XtNiS!?c#SOmVakT6r&n
ze3jwD#Q_VmK}cezmt;l_Ym<h~m|nyTyxRH4>$Nmiyn>rqUU>D+GKzjy)DzKn%Ei@=
zesc-9$1yBa(fIQdvXaP=Kd^L99Ej<;k@;W%rR!++diTf_F~1C2C4no)&>hd&)yCP~
zMccs7E9MDUGF7PKbt-=-y6$Pe!_kx>ZU>90jL_(f0zY<W(CX;_rLmh8V$>H@KVOZd
zA$?O)Tbg+40f?RqIZ74H_aLIa$uJH<i)3s<Lr}w??@quV(El)L#cC;pbB_SY8{8?i
z=ut!Q;Rlo5@BICjjt&z6U65-(Ld?33>e%igBgWhu65kEjBCT*yjIlgeXi+J*pD{;C
z0j&^)B6<LftUX7+aM0E6Q*Vy7X@m!vN7n`JU_&yD)KNOgdVE)?h-XrGU#mSO+$b#X
zFvl50ZrRl{8ROow#_7ygj#)bkIR-xiosZm@3w&q)-F_MlMZiby|AQMTGBK0vBJy?~
zaZDTr(%$v0Hs0h4`!ou?B6@T>m-8%$?&D3fG^1}$*T?uxRPyCpH)kEGTjI!L{`3t1
z3C3Mq^8hW>^?dAI-;2sQxtg!2IWi%8bAa^dEbg>D0R5anVZ)_B)M+3qvVxZe{N(qk
z3*B{D_27t5=fuZ#PA{8O=2)wKlOaJu!6_JiVL;$XcVSdXkRaG4u_g2>&jU}ZRT?t(
z%Y(ta?usDJG~3Z5FDf+5h;tJTTFWfm54U#NJu@>P{`2NDdsZ+Ss_F%fc|Yq!G-u05
zGczvEg@UW|Q_}mbOv%!UVC|ZyT(s_#=mP}<S!g(|<8vEdT(vmx@5`JBK0pdPh0rWH
zULL%xqd5T9hX)R44`8M#_U0!1d6WdcJ#)DOpzPrFV{z2?5vZvza!B9w88S@B?o(@^
z`S=m9=v4lW#zFQtH4{KVgm3f6W`8%aj9{(HQ<@+<+eTuRF@)&38bbLnz?0d)F5LB8
z4OgC;IE1@ZsEm?&o)H{3P-@Y%xkEwhM8CN8X;qlrp#|JkNK(t9L#@nN^K#(h{!_4c
zz!adKIuTk(92dN|em;pFSFC@=THEp&s(nL!IRDaQ3V6Bq-&ERDc~<DZ(=QyeFbmzH
zgD{CbeJ<T!Yf@zYG+&Al&P!*g)(|oNeIo}BF%1;gEX=fO8qz?rMc3X8F|*v{+q8RO
z@U=_)cSDISbJUzhm~c_SEJnXn@B>(qx$ZWZrFH_r*BA5aMk~$dldLNHZNBAY3XvF$
zN7*bNqj)&&4Mm<(&VkP@nIdZaD5?p*M$7`<7UWc>UXZo+n?R5KpUXcj?ea%{nckx)
zA<bnR6ksK%-h^*E_t?3dT8j|0t`tldo>?6yzw<_q%5;#P-2KHWGHuOnTax%;89ylm
zD~so@G_R`nlFhuD$#bI%6qwZhd+WLfY}eH0?eSkFIjtGUf+e`3^Pkbi>CzEtjGpc(
zh67^GsP|a^i8ir9kA?(o$H+6*D4&AuYy+>6I<3L@c_G*catWqF@9Z$#@)E1EzDGC{
za1mJvf;Db9XcJ$%kYB@{!k7VUbg_5r;Ffvb7v&PDnH$Lo<#?`aiPZ}Vq@BDT7rtNO
zPr9;{zL0tpx1E@^v=bpy7R{c!D6Xp1j*6Tl_yyw=Tr`CcgdsLUHXS7cqRiONc)c|{
z0USv8m_|aM`uESmaPLla-_`A|N$!*hl&#!~Y5kh9>#2z0ix>%5#@ij);$qJ9hL1^G
zdzpt>)i@eFq9K`W=j>nsW20Bck-~^<eMkIhL@c<FS5KI$ER5Pav@ae?DtGf!asW9%
z#=k;@G?e_0S;$WrW51EQag?ykOb;{QR@6U#7uDvfV5Drw8G6IfBNZI`+m*a)hn6AU
z(B;O}f#l#_N9i%P6^g8qDfTt+nrUqk0`v$CwJL}C<%O2Q{QC{})mrex1J$wWG&s*o
zVBgHbXLUcmiWclXC|+2evNhPOmJE2{j}!LC1nvN!LJ`|n@|;j>XW&Ue=}8!F$mYoz
zPz2nPV0JU#a;$i6R*r>~hNr>*TPi#?g3QAuW@x-?$a8?)bGR33fvS{b<?M%{(OZ-%
zZq2xR+YJgT0XVL9dN*OOdt3;QHbq%9k49mtpBo>PFIa~q%>B3lzDp<tFY^eTu_DAM
zjfc7$(wGDJSOe~P-*Ax>aEnRf{uH3PtOUIXuu~>cbo&(Wef%TAO0Jd41&OATv(#h4
z<B{$3GjhCqnx!q?3@R)IAM`p;<gaQcND}TCv+AJkfqf8c2S7Q@3LcFz0fa_F2q|q!
zxS9DC!L6NgW`$h%6oJ@$X5<2i?b|4Wu+863qb?J_+13BmaHT$3)11>k0`=Os(mfeL
zz;?tRZbR;R0l1dEM*-FWA9Uk#rLdt0E~K*tz)Mgn9+Cyk7nW)X=Xsv4%?-C<7Q^Yy
zZaKnfUg;W>#vT(n>F4p?q5wr+miyocE9(aLN<nTA7#Z0(ZjDblOygzkm{E#cdUTrU
zC!>?b))^41lZ)BhRGH_>PYb+R1Y{^(EE8_Ums~C<1%52xG~AIfU%z6Jv~OSX1xjx2
z=xv9Iy7Al8uA1@0+!q*Js$jmZ1k>ue-Aob?@k>2dj*)yQ*$Uj@gIN0{r52n+$Wm)Q
zB0puO8Lu^`lK%@~xO2aeSd6~$iiSW>9+~}H6($@2?TC0wqK<9BMs>e!vK|-z2E9ZM
zOYrwldL%$mpMfHq(T-$jthbM0H#{po1bl!Jz2K(*LMWl<)N2??am|3uh#&FUdr8%K
z*iJgv57E91fo}8fB`Z}rTAz8l<8?6N)4f1hNyF0=AliYdIYx-rPGB5kDwE&0kgI_E
z#3`g{OCduG#nYPsCQ=y}_#oPKRxK2)+7gwy-d@9<b$h>bBC51FLf*%1^DOQ;6Ymes
z_Hd*XEcu0WFK&sX78f@PlUXW7_eT7TdkO1$c`7=9t`S~Qax5g>v{514EZK8O<cjMd
zNh=x2xR!|ETD!88yb#|&^AEN0E&2aX0x8O;4BQr{Me{`Xi}SHMf8O8@3by`5XJ%8W
z2X_oHPVw(@2xy_u)8V431Q8i44G<mvc8#)E<sW9Vqxo6tRLH$}K(a8MD_kK?C}q!n
zNJMf%NgTqfXcxYXp<YpHr6u2m@O1CA42(6Jr}Qox@xYd*PZwDoE_dECp)~}-3E5Et
zKjphn5-*you&+SW_#>sewdy^_x{-Q6xZ+>)7mP)Ss43re+%0Y0rQpm(2`ib-%}n3V
z6F>dsTbzTOeB72kB)ATe$bQ%_ed<csB}eA1F53o7BIQXF&C%Em2*0JbXU~I$I6GF)
z-fm9F;qwZx2tXJ7ly8ue9uD=}s>Hqd7^#Nm?zsP<!Ekr=8OR8(dY4_KCf%utpE?35
zqY{n-uyI1z{QwF$4ou|qbC=$n=dYMm-1+qMI7<y+@?2y+<@i;Co9KefV>Q~9MEVS`
zhvwEIiQ&QV#V1m{LF9ghlE}@N|Gj#>b6P5!WQh+<sk7a)#C|`Xd|w{NG$6^{i^d6*
z=4gVzq}KPCe7CN`)@F%(CU;1<u!<#k3{r}C>BCbBQ$N@BNn^QKwY#^3HpZ~#Y|B<1
zCf3uBNdAcG##$F$Z9ao1jAkb@zhdx3AAhDG3G=W|KtDY|RK|6+&ZaEHoDpSFQ(#Jo
z#jf8vu$o(8^|;tVX(8dPpU1e~Kxm{&W^BG~L5k?6?Y}wEvBL^h3QE`d{>SG6rTQk>
zOLEon3%F*T2OY@2Y$x=jN&u4->6YReR}<70oiW8Ztw8iEP^f@prYck%2<oM%#}N)F
z3~L|`ECO{0oDWK+j;&9YN0M(EBKW`J>14sk03;_g#YvKaBq;^x!yObFUms5(wiS^Q
zM!;i3Rb?8s)dTCCUl&qh?nedSIIwdmu>mRREr9z;fqtfbA3%y%F(}XbMI8+rhmDfO
zbx1lc7oBXg#tL}wdKBz#&h;NZ7&~=yMMeDjJxS7p@qQpM-45Z}-zdtf%4&{o;ZL^~
zx<0^Qw69ch(f2wOQ6CHb0n)n@&!`it3t6`WUA`K*lCaDM@3i*Ce;rw;^ehVpU;>Dr
zdjKQj6@y>?7R`elgfv8}sH>$vbOk?-tht%ib(4Ffd{k(%T+Wc5I>LdfPe9r@J!AOF
z!p0{}YyMkaz&b}K$|oz7^{UYF@@0E)r*WxRVmO8!pXI8Aj-N0`Ae#c4nrnD}cC^OZ
zU?s^aw)LGU7IlJPJK^DEhq^*LV5HyNfSZt<RO5C;Ui1RJE(}CPph#lVMnsMd$59dn
z=@dIGos4B~>t0vj&es@t?Tk?Xvj&UD)g|=}P8sb)4YKP2Qcutj2`<l>9Nj~jwb<+a
zCGKDLopUtWlzsnyyY(KFqkGr!@WgJ928PeDh1u-gd@-xUG^`+{2Mk&cTj`TaHLK&1
z_ep8#pKwIVC>($_E7BAoM>;nITObf`9yoF!Y1K<6eU&`0hq-<US%%5B>|WJi{=LeO
zDV$;-qVttBM==7aSo54IkKN>EY00Ed1XD@IJD=q5LETlDhi%=CL11{1qorW<?0*VR
zm`=1{c9>LXL~ueivnC2uLJoZ?cF!ULwhx9sY>K#k1*Sr<Cs%%okM}T7sIR;pbwOWU
zTwt0RRoG*?!-_(wWOGfMRHdVadPpGUw#~s=8VW63;vs~DrN$#-=dWZ8s*$hNG$_~J
zi<c^5Gz`xN3`uR*C+Frjn{xW=5D;Qs@N<?SvbO~LaXuyZc1X6lxIWbq#g5)ym^?(K
zF7YgBo#6i}tJRKFztPF5M$&JT)$Ug8WBhF4tM|dreSd3I?wc@%)yf_lca-d#Qn3Y>
zTkF+$(%fJ8&9#>GBNgKFS&ve9mCoQPW628nTC~dnVuoRRyHJi&Cqg!Y(XAfXq0V;1
z&Nir_DOH)}(Gz#tGO2+ALr~^96CppE+SHup31To|3cU8-@NwaK^(RT4yWl@)pn=L}
zytUPx9hNT!kQg&}N_=o}(sBqZGfzs17<lJK=vj-8PO5-ML=f$i#-Bo#DQ+D#WCvkS
zak5%jmSQm_*|raG;AbXNIy8Gdw0WkbA%3i|pxqwDG<XN6k6WFspK-2>+{hd-Ybh|;
zp!dYo9wraN-2u*#{!;%_gH2_e-L8NReP_OZkmr~Lq$G<Hml3iAWM0qR%p{_p$5C67
zLT{<;;ysh_V;OI5hb>;+lpR`NE_dxY+If?@YZ^>TRaiubIu2-8WJ1Su=W0Xh9_Bup
zdGo*@tk%$`jt2xaeu748mRPIS9&p?BF1$_K`w7Y^s4-%&FV<OJO(svD{)39BF`%mh
zQL`fa7}eBX9EOVBoW?xEV?10QyTyHqj>)Jm$d8DMP(jb#iYI;_hHdB6&umB`ziqd}
z82k73dqLdS^nE^Sle`=<HhrO#et!0dPcBO3^+~Ewu~l(N8=G+)1)Glk2740993<ND
zY7hUk;<dv~u}xV4pxh(>M$4Z!>d*(vidV{#q(lOha^^QxXKn)_@sgo>6<iq^xB7N1
zS<Ug^l7_|fb(_TJYx()T|C^H#3|H32_6%r-UqO8>U*o8;C$dfG`$XF;-AA)3ylVc}
zGmK(|v3(rWSr(REEZZa@^jwWv)xfOgiO#)T(xE_E%DoJ=q;jQFD{o9gdsma&ZX`KL
z<W`SQa{gu~=@qt_Q2pbMT7w7mr%mtLn*4dwfJaSO>k4AH<<qS0a3)V!nIa0Pg&lgy
z*)FmG;<Sw$5p{io@LWh-s0TJykGk_)1Gj`==@^Dgu4}OH^tp2uJ}nd>IP!@8L#rJ-
zUPVTa(Ar~}gyp%r!zt!=lkB*5|Ij|du_GMsn{vGj1K2b}bjf+w9=Wb&iU(XhNXTNC
zEeYqs#4k%Qc-^v=vVkKkIXO_|T7qznwmLi&=ZtqGz$it~%teTOmqTJak!q7=Te6PT
zC^ncsKjbLG3BH#bkGG@wkKMD$D&8Tr5yHI&0`8qiBd)Nh0(!)s^595<HBN63qVG-=
z3d>fNo|x0({i?hR4q>CELBO9mxtAhh+=c8++9nRmqoNk|gxQbd-fF|IOV+2mga$Y)
zMpbs@)CY5k<BU$b+u@jt<EfV*!|$3Va^@qL_LwPCbe{0!8t2v}CYG$RP@S(~@hOht
zlZXGlWmDN-Bv^f)s>|a_Txgk`X)J&(dFFKC>a^2*el@7ygO_86KMxQC{~QXEyLsZ4
zOoz6#`^zxn6pl*lcW;l<>hds$gi+ScnobQf=+vJW6crHJ@Gs6NymY!(GqA9=<xVGg
zp`ZutQY=BtPsBZ7>z_I!%5*>dO1s-Xcd9QU-xe(lc4psyJNKAj8>N|?7AGqs*{m_Q
zXw|nwvT6HA=_amQXJN;N!7`b374g4AK&mE`Z$?5#9gfw1tCQ3kxo=QF`Oo&@^3yHS
zD9_~prO)K`fn&{Cot^jsE&lIDprGPG24mqmzKw3NtbVu0K<I!>q2?_PTr;F#!D7x@
zYba4NhOwH0?Cw}WYHTx9l4ws4>I}QtSz+N@zLwM<S!E5hQL?xP69%$00tCyBbMpMt
z{NKdon_f%M6~*?Ua8ncAYyjZK^(toxGkBjZKd-#nc*%u_ez`fFB^QEzZpdnl1))+@
zowx5%aT1nU&(Zm9pEL3{$?ZSXzvWE2LcTRyYAQT{410j!Q}gU}ZFMBuVS)byyJ5^G
z!>EG+M&8FD2SBB|K<ZT+X9bxYOXa0koS=5g3!DwdfSX+%;+Z47B^ZR?Id3Hkvh!bc
zKT;H+kP-XKZx~!5o#6?8btaJYpcSe<79-hnVo0q&nEw1w0fBTrV$#j2Jh_d-BoY|X
z5k(m0kRrpOW9s5epY)^Th*vlM=a!%g4zE>#xp*e%W`(lEdBj4YTF=kAYf~z1r=r3u
z6c!XO5EZDAMW#>Bts{===FgVuvQ_@qrAEt16WKAw^1#N^0b8BBd6n5jH2{|vRjq4U
z?%mf{@P=VB!q4HhVq?RmtQn;4`8LiRqA@@A4EWnteM8pC2OfXQnFOx}ks3_APR85m
zVvil<#*gU{6&*f;=RSJ5bLOyw!d}o~(>{p;#_^+LnZ1m%k74}tSerJ;vGAx|2-KsJ
z;6*wQMvjBia#9T-L%I6-CLT=&bdh2(C^YDkrEJDWe*GZl$cZ>Q5f&-pCDG^TEEE`B
z(ZB=xpTVhg35@ot)0ST%Ht3{qUQZg2tGfEaB4M73!2%L7SCLPb)(u)>3Ew{aCLEl}
z=zwen!d%<oAK!P>+4t@e_)`}lCT1^?o4b^rGJvrE>B>cXC(sLn9IK;cN)DAlo|;P&
z#a=xxA9f5iHWn_NBe<uu%Qt*JZBHzD4;aQa#N}TC7YpKXCV;ust;##i1Mr@>W~x^d
z?0-KZ22ti2Dh-S$9~(KS;bbVHTy}Nrd1Wbnx(5(g*e;9166DQn$)aB@sC{kqC+}|W
z;n!l+Yc;-GgIvM#5<qg8&Z$n3?nS`a3;nP;;St$+FxgqUE>Cb1kz8&)JvNH13oQKi
z9O7?`BJaOW5)ElFzZ_~4jQ2SusimsUL~~Z{ZS&0q;1UjlF#Tx=ZfaKl1H~rJ!mQuY
zsnW0B3RVge#|;c{;LWcQ1;h<!l&^T9cpGY)r8s%^_YG`GZB7{udpJ>QZ3)k7x<=Wz
z6DHoq=M*EneZ|cmdAnIL16RxS1Z?#?vsxjZ7#_aIrVW9mzS9qx4AD-OGJCqq17Zeu
zDm516PMT-?B1-S7=ACXS=)m3%y1SB*`;*A-7YB=L;99ve(Xfdjih|+~<OZkl=zT+m
z5%x*SpMB0ne<WxXe;IH3!9MohY?yTUq`o%$HN}jD(tyavN{&ropUI(LiMQ*fLC$cm
zYl=LY7vwCvrmV5fny{s|uXiCw71E6lh79B58Wm?`p`(7`oTg+qD94ucHs1Qmxrke^
zJt^71w7|}z*cQ{>=sp|Pw@nhDFRN80ebA(DC0K96Qvs7qjun|^zJp=#44RA=`xBm&
zsHQM1?r&a$GBpL;T0+-OgnCDm#}!?E4*3Nr2cpR8F*PeB?=~L}?n0Cc1E=wsz3Hh$
z#D&cNQEbY+yU2p{wH*jg00OG*BA#v)xI94CN!4CQz?ZZ-{5|0>{=GYG8>LSnQ-g=+
z><*WO5pkLcwJ;9wk+<hb^R7Jh{S29Vixfwd%-00E<(~LZp&__n*6M=zV&<YW(GCya
zcL{g>M+=r#{0N@QhAS0$Mn6p=#_h7O1)S{w_FWgj1#CJ1V_wV`B3YU>Tl4tnj?K@o
z=&ukkxWIVc*5)ey@ts^ut>=L*1Lg99y{XHeEgvXT>$w`;1rjFCLn;b?n$yfn=-a~s
z`IsPz#cCtPS!!21B(>@w&hhLarf|~$#vcONF@NGNlH^bpmfODsl0Tqo<Z!2XDxXIz
z4-C!?o{W70*Xqhcj{PoM3j}?sA~YhZ`3hhW#<0ZdG%PSxMv8=-r;~jhT6Miqii3xO
zgfa8ybS8upmZ!6<i`z1coc00vOL+8i!8RFEOe#3DVu;<Jlmoe=aR@>PyK-@AaZWR}
zUy9UL$a@>V+}}U66(Ha57e(ga`}jn$U=(5h``buef-CX8=h0&dfy)IPna4t|#-6Wq
zm*DA>Iw~@fC4ugmX_wsg(z2oco>IWE;3lDfc+*g+yvSUT*ArsY8;atzbqkE6Yy;Op
zc?1l$su7ER`tb}hc4|E@Od`ASpooo<tm?9`MO-Vjh8cY6=ew}$$iFd2T(vyNg9QIQ
z=|PT2?%NCXotzNC1qKn$9&WY#<yRZ-dKCOv3M)@il~0nMbKr*Z44X|70#jI>iSu=?
z56Z<Odpr#&jrE94Ap}aTKgw*5vRq<a)U&2=WW)eP%^lMc)|mmR%j|Z<z}6ZeT0uOP
zuBU>K*G)kTzr6J{h+inYS_Msldop=FtU{Z~-7JXm^A)OQfk4HUS>(iZAUnhHkckd)
zu1*9m@a7-8i0F3J)&<hNg-4u=ffLNx&;A)C^Q1rdqLk|{_C2D20t)<RL+FgUxuY?)
zF7;jQ!Y;shs`U4=<EWzC`g++d%%wpBhN`-Lc^&w{%W&UJB7sek85Lm}vs7e{XG3|`
zOCAkN@PYz%Jt>+^PcR~w>>0q}y@qyJ1Jz>)WKy-a@+$-$!*>9(^3<E7zam7^C2*Jq
zHw_zoxO*q)4}#E&f!Z=i6N8r=OHsK3EK8v}>!+zb#X5Q`20ut}$VV<s9?9p_|Nq0y
zw6KEUqdb+&Y2)i4#pF$*qL}a^Vv*F5dI6K?Sgz+64=9e~X1GP76XR5M!M6QHy_F56
z^EN&^veET3%##gk2n^~xUAj9u;iRLettd*MH(4V8|4cNX-U4fgUjRNH>TtiR4`P@)
z#oc4S<CaNBXx5QMK6rR(gu@+h0k2#>0;`2N#6xZg4)5}+<$b*8Y2~l-_O()X$9GEL
zlLLggQdpPoZ#Jovo=HIKmNj8P#zEG`WyaZ?S6G|8FUi^b6{!C+KZSFyu~fd6<-~y>
z*pW7%h8ZzlKx6_|9eys74IMYT>Aun{EOY6CpZ##62yk}9k<t`9$Ao9gC|^6W_WS{w
z^tsU7OHGReBH8yuf=OgX2jP*~NTtTszj3y5jBRkYyrnsR3YU#q?WHj#3H*zvC#A%B
zzZ)V!jD}JJPdthoe@euf+oRMf{4TRdtV^UW`@#^iV-s=0y+@IYA~6mWoUy+B=K_FQ
zmHgi+(P5;zpjOm^QRDJvM674mW<`sVy8uWd7UcT5vqn?0)t}%nsR}{c-1h<5^^q2K
z@bGyK93>*k)C5EYM5+eI4l=fY@prN3P}U&#C*f#^%@>C9_Li-2#+#RYm0yWrbgN!_
zYb%e*#1v=N<Ns==vB$xLkf52ve3js;G#jm6^f#T&z7XZ3AuzwDMw!7K02(*<S14q3
z?haRYN)}d9xo{DpgQL%G{9rsr8W?7Hh<Hzq(~srH4&4GL7}<{rjUaxxRX>0p{8|rd
zjaWn-SlHyc>%E}T;X3=CUfDEK?{pb$p>Ta2YM~la^-Zr@*k-`&T>80Ch%_MV{FPd0
zO|Qq}Wmo`|H=BXN`c0|m-9>rlEC4HAEOwu~R436%om9D>80ra~4D)nC|4p~Br`qle
zWU(-sWZdA&Bq%WBFB-VH(L;<w0zZXXrYo=rE;L0eb9vBM^l@RZshVsI;rT1GIQ3e{
zw=K#wB4Dm0TSI|gL9|Y+K!K>0I<k|}HZC*`{kP7EWy8xd9M)Q3VJ5BDY>t{jGm56Y
zSOOXT^OX^@xVdr6U!kHx{e%8__%Kd9r}KFWPSf0S124l@l-E>PCYh(lBKH&bM_bzL
zuJ*>#qHINnmjQmjk+k7Rq<<w1D#5+Q)&6E$==3a+xj2y42Vh}SZ5M~3)lvb9p1tM|
zjIHR>S|{6M(5>DF96=FADHC#1+|ium>;=}Z^8`p6%48<gBH~vJYivxMYWX67c~kdV
zW1CUG%syw&jr;&dgr<kgT~GV+BZ4AOnSRUU=3%Mb$VlBd7_w9f{;o&C$$#uGd4$;i
znd0(mdX_5=_X~F%LThJeu(YHbD2hNZA5z3T5s%ShCaEN*&4C=W4R^S$X~}7MtO*Af
zco2Xssm-`}z}kdsVNcC7^aw6HI&}(-JeFWjj?0?w%<O`1>#k2<6n(kN?6CswO}vK`
zi4{b-I5-k#e_eU53Ka}PRxU^$cCO&b?gwkmn`0VK1@DxQ7Q}2;4U@sS^(~Z5jK~iJ
zML8UU%8o+Vxd_bRK*mfhPhx1k8HUqyY=t4Vin;DVkHOuQadU_J=ei}a?IpSxm~-`I
zGAvkjyG_wQ{Uf1Y-|dK|Eol(+lZ#p9zt3*Sz$oKY)`R-93aIsgvmd8NQf%^pVA8}c
z>>8PT0b>;}wOiDmy2x9XdbVMzdVOkx7rCJyqr+7`T`q%IqO!H}`S-{?8T=`Os$veX
zhef}7BIeMW(+QrYO&L`hszPORU=f2dnWv}9VWC5Ze`lAuHT2$xOqGf>TuOczjoLmu
z@$xf64p@AxN^vy^LCNJg28gN8PJdbqbWszoB;9%xXgu;>RhEyFQ(-?jy!M~Z{f4v~
z?vtGEeI)uwoWB7*@|)y^ZoNPVd!%SIKV~1W^p|b{8gTD=iy8^9`TCZ_ON(bU-4#Ac
z#E8=#u;-=5$a^qrROvi7upvOMYve@nR;3n(|7Lr00^hrWphEQE>+3x-U)*yHG^1|>
z`ym>0d%O|LCS~eTILBfEq^)oL+DB;-&g=R~BZ#&V{h`BJ^l?7Yez19iZ8hUbeBt>m
z)I)yIDffQBU&fwv#$IQshb~9aqs5N@d{_Y2G?D*Dt}d_qyMChDhh{*9Y+V011Q#I*
zSfs{SldwTd$>}pq8Ez0&X3ttT4o<P@SI*sr7{X=ZhTm_*Fm``5a1J(^p74%OLklX^
zS+>&WV{Jsuo9G<?zrVO&^$f^&dDdRf1=Aa9o4;<lPac4*3A8A&uf`MiU4akPQ$2Qu
z92KH_4~+li|3^4<5H#nnJ^(;WM)`~D753=+GTTT{F2BblwM)0JhFT+?Bre4$X3C8|
z7Gl@Ys!rx*F6))U*e?(RFyChPF95XKJ7sDfwJ#+@r+&wt<@)ngH-I*Izb?*uQ+NQh
z^u&0+bvWnb_$r}k)md*53g(+9ZFGUrjPlOM&Q}Bh&-KE-;K$6H3%RcM4vg|rTke0e
zr$*h*Woqq*F-+MxR%X^FWg7KXv>u$^f|+GxnMST$P#W8MnFg2|!@={d&gk&iB?{jr
z=-0P>{9+#0g5&{M;9+yosHxBVVm2qsG($B|7(V%oH92dSX~w@G%XO~VB>rEzD$knh
zzw+)_@Z8uP?yZy`++X7k+3Q&WfN4Un*Mi_S+do#f8@ZHjhUf>n8|$PrpP>?Go@eqL
z{p<4v`AaK;6iq@vEe8OzquD1{CXT212K)*((Rz7)LmDFB&e6B78sQ!oAUj$Z``TDL
zqmZBU6G(uxb0?n>P&=FQStR%!=xYETjGyFUZ@eu9&`Z4_vHCBBiz34pbfJG*fUFZ%
z{)7Zz-03@=co%IpLvV)TT){M}D@X?2auR(P4Ynz4HWcWL#)iy=E_{}@rP|I%Sv1l0
z)o~Gl2QH2qj$^@yc@|PCawat`VE6|0XzyyVkPS5M9ZqAf;28$DC&fQ#S`>{yeBrFT
zuw@iMb7G#$!B@1zI_h_a!#nthdI#=LOKKx6R$C9p-SWGK<UXJu=d|@|J$LCt6aZdY
zCF=gB6Ayn==;%g2P0?1t&XBm6e@vg{KKDT0z=l_KuoOXE7Yv=2G#=^V;jLnBYlshM
zM{nfhUFM3O_)UdE%p*ea_9p<R*sgsn3d|DyFT)}qGD&0>;*%$FyA+O3DPrL%jpE}F
zCa4jwjj81P7c)-E$5O#>Q`?nCU~eI8Zz?}BJ61tfF<<Dug4V9?h5ZTU7*#V-3@&e-
z)mvYljnd^qf3A4KsgXHlFe%wlzjPP7@)go1P0?*_jIHYl78A*;!e2|z{u7vSLJ01A
zw=M{omrS5(NL*A}HDjissbOrkw%=eeTyKYm4ST3h=k}^mXqa!aGC+M@f{`?t<j*f`
zX9$V|xBUm&UAiVmt9(`FL57pushEKNnqvZu{3~lT2WiI7!!%%0<jaj5VgbXvP@i-B
zW6~0$a2#$(w$8|^<?RxCTRC?lO1ztv4!kCU8~r*hO$_kT)$L8-X-YU{6PWnq*p9xB
zb&r@KhOy$aLlLW<5a)1ZUj`|i*z3W(dBOeyqN;lB@OSm*0o0C_j=4VhrX6ChuUiqJ
zxRw<wF4n8+-;`siGEnN@-%^+-TF#sk+9aYxQ6W77YDZfqoR-@@juRJ7(}yK+ISBEQ
zcr!N9y<;mW3wO=_0sk<j1fGwwS-gb@jixkLuz1$q>_R!ZZ{-lI<hl=hrDR)bo4+4*
ze(0ZB>j6*cxPb8!EUMu5N<u_R;AIcj2eo7YYz;eI-dAsa0Chq&RuQp+7zDQVp_`Tv
zJ95;v4&jcQ<JCZi+re@lO0V<I@U$WV^AZm%VncVtQ@nx4bN%hNK}mRJbkG)=VWkp=
zS82J2H=^l7EY0m^m8<7W(90HS_IN1x3ayv=9l3h^RgH+4xQKZ)gHrs=YMWk1*FLIN
zy&udND0>x3ZyQ5`wiVia(r45Ye?+o2PBPT<{9fIa9mAeYd}NF^%zqe<&r`G(n06=<
zCFU-f4imaZ9eFd434fkl!<j|grJls%=`hm1df7pDpt@qxXtKU#3t9JD0J|JEmWhA@
zS@nx9l!J)NiuQRMO;1Y~Dfply86T2&{E+%)%ntq9+>@$3q(BI26lT!^^)b|a#C}dI
zV!=B<GL1Fo^xDcaEvNa0B0!<8qEK{KsS10ozj!^-#s^KY9EOy{GAD;Am{7MLoppnS
zhB&1?c?27BEc%ex+$_=Nr7=kl#?Qy!BBn{hq)<YigY#ZTE7L^@aJF5iYT3S%dq<FX
zTb96_sh$%UVI`2kz{B|8uXZ=V&K@>Uw)bC=2KH0Y75ooVYU+l|?r{(6L&tE}7NUjH
zkuWGIK`hxulD*9-tQMb)V55aN3n}v;T~42lmh?(f{mV=@YNQ4v%Ba?!IyB_v$q%un
z6C8Mf0?6GYV8FA+5~FSOm9UhO1>0iZ-7*=Zj(|I!^AIDO*kKxQ48&O?+Bi&k=)Cdk
zA)g`XsL5!SYIdW>7Y`5BO~|&&{g|0eT+6z)BL=Re(m;;K+%caXv*&??o|LWP3Ad&E
z3d3AcV>exx4Uv6iyd%OBK7;2~#d?Bb0*0o8^>$W$8~WS`D@$KZ8|}h{LH*1m3uKi0
zU1=gMD=2}R+Nl=P`A!Q}OGipHvWx>AC=Wm_-i!S7KgZ~vK#UVy|19^4t36By?IAKn
z5jo_1Fom-^Y|LRQ8CSL`mlO6onv$=1h_Nqo>ay@C{ejnp?<9~eMX_KS4ZdS*Tz!|&
zTa$Y-d}Np0EIfN)3de2*q^yiqCbf0?C|sSHQYUC3)3f##G0er;&?=#4en%Qqr;_sc
zPDMnR2ZEb)kO&UYiU_HGkD7JqcR}}a$3Uu*1tQ+rG+@dD83p$(GWY~`XK?sl$QNv_
z_oB>yR^VDwHvD=w#u0n~5&W4yS9cNthX|>1yE?-727ngnovaWuTT!OvBFre10L;5D
zKG=bSBQhXa_zgQ?&2d`%hWTHjCb*XS;f&G`8T-%Rh&OvBqRY}?J`tNJKP<!xe!M3J
zdpVTgDR)fBq<B03V+f;UpM{vviz`vNGso5^%r>PRah%op^7CdBfjSwUzV74e$6R}u
zQSC=_go6S$=UzPZ=J^cG7*t@lgW_?CBj?3U6cL+Yy2h#du>e25twE8;2hbX|oy>O#
z2QCRb9D}%wp>p4BWsuLbvj3#?8Digju+x&%<y`Xz8yF$Z3np3&Br3^LTLXPA{h_XR
zr#VK)-%&g=NI~;S(cPA0sc(1bXoD&2u}2xh2=^-bq%-|kH|#R2^a#n0f_vZ?V764h
zd6z`)@gOtHr$fv@&sWplKF$|%3xy%_!{D_Z*e*lA<;*@Vj*dA)0G!EQu?`>|Py<?h
zuIB;|346q1NJO@k;LKFG{?9RL9jnZ&$h{N7&4_!B;JzTRy?6It^B)4|1i|s2{r)ee
z1}CG@qx^9T5g(8{?7+NHM&_j5%A!O<7%<_2!g|$IHG~C-_}&X=n#CNHQGTY-YIL(>
z)v$62<@-FptfOwEK6c~LEug3?%Yqm#q4$Fo;&1#WCRDT$LlswWJ4MJIIi`$AF?l}$
z%-P?Ow!=bbAB<=CU`aV~@QZWPH%H1ihkF_|jc-tV50t4Lx~BOv$ItR^$a$2Ljm=+>
z%Pqm8t(h=k&f2W{Q8ItxO`wv{)Pvis(4>*rx`UQu)v@2>^{$uNUOl%{aSokvC5K`6
z{lyLx$Ts8(u@uGQvq~d~*Mc_|`--bf^ery^a{srAwmuqp=eC}$t9D!CFViM60Adu7
z=RXYSsC(yz9)-gT`VuLe$)N+~6k=i$J8Qpjc_8w9xp7MNgPIkRscyiXY?ICcygFKZ
ziHsUuedkEGNrwwHLW^4rkPGl3XPNWQb?m*gW&5R)ec)`dNw|eOuIE+<uhAe}Bn2oo
zhS2l&RMm@F%B(5mQ*>T)DNe;kUemxsN=UH?`e+Iu?N@)#7)uH_irWL9fpY`7hiqR%
zgG0=r%mOC%E=0vzi=>?u`M|C#8dtp0aI^nCD(-{;sDPOzr^&>)wUzs=dWqq=i7ZtI
zye};`&eg46v(0|bERxFN=rA_c#!@NW7e~28yfJTE!`?w!$8!tRI%`)V&00-lTqk2;
z|1O2x6UcEmnej^!jZ%@spJojq`ZASze!$o9?IlA1ieOdZaF@d53U*nzq)IbXXNq4_
zm4<`*f0LylxeHG}6w<>34-OPdmE5ij*1@Z8tr<%tkqg%EKy(ZdeRAA%J=CjT!RqU9
zz{1>VZ)zac`<C`xHP#V+{l?rq*YrzXXq|{zFwJHFEEy#H{`H8o0Ev02Mq(Znw};g-
zGpiDWl|`|tvH_cZeTm|`qWc0cPoCT|^|fz2jat-vat?^DL|p6WO8413#Y<Pwy%If@
ziV(t+33h-38o=7Db(YL=?r-;_DdS0FE-V}k^mMpkkUtZ8sqWPkk&f)vl+1CKbFfsQ
z`mMsVqc-v1Qz-*wEmWXeLh;{Mt;XHH#Aowfs{MvXD%|y5^f=|Bc6zRs$a0PLSw@Dr
zDZi7(l$B3vQMbBo`&Azv4$?>m6|aQy!tr-0vf4rr#P1fObP#C-F7w5ZMz#xN%|vsf
zD$YF?{dc<zd|-&*BXKMiwZJVdE!7@o-m0MqJQ|$?v03RiYDU*PMOOM%zJ=oxgCzwH
zq}R|Txv?ORMUxU75Y*-XE#dPYU%CXMuiv~~x8WFP!_c+B42UWN<kQ6OVtC9^B)JAG
z>p&*uW)<V;)A|z#SWA}i-z_)I5qA7eT#gk`BZD)@D3w(_E`dFv|0c7lIT&6@=C~8^
z8zeK6D^$GHgd{frInd&dL&r&&W%CxRtHSUhhJ-`fACIfU1+W~r0ly&*zar?sD|>Z^
zij6%=K`T_vlizXBtWW4vTVCu^)|v#*)pgiOYJkM>RPo-3S{S{mp62;`lg#GMN<?*I
zF)G2}lN3egKt3j>Ls>P`m7O}l_^;ayaAtoT!h&#HPvl663IZk%YZLd#FKUcDIc}xZ
z<3xk3XT@_1#g>}F1r|8;_~#-AZQeml&GaOssE+0Ajz|E2Ubg6Sl&kCnmCvs{9yHqc
z&}UX`+I}_poqdMY=?*j7sk0yV>nwo5Ju913y4J#XX9FRzaugDoU*$4bYiLocQfo<#
z`rpic3d9e*O;MWE2f}9}T>&X+Mv)Qf?71DY<YLpi=y%VbEEyP-%|Gpr4B2e<9t<}c
zdFQz5Ds<=QzGtsE7FUVA{R1R$Xw%lDFN8be)y<iA(zmT*5AU(5cjgDb@<XDF%CxXQ
zslVcytVbVItH{_D_D|4}5}ER~ON&`$qKPwN0>LfeDh{B;jC|&t5Wg2t*;fX$@pV;3
z-mIUeI5@TvW!j#JJ=>e;8iy?cc$(Y|XdJ{AiNV*}fF#?J5T5b!rBX>L`G=8qqU>7u
zPWZ15|3n&_s`+xp@`Z!!{CyMZe>IvDaS9Q?E);idf5{%l+#>$4#WJ{iqyF%7mM(Iu
zYRGG)r8j$XbBcuKkS(b^_3ep`yPiL`QtAQeF)`2O{xUdzZ~wLLIK;wSNcajCu$7Y%
zp@f<Hh8vyPBfaW^-sNczola$(gnZuZ<-6SMfMWo6l@hD6>Hi<GrO#D2wPi1q?s}K^
ze|0m`jG;rS$I#$W*P#bc-b*2b`=T_zg`@i%k^p#;ZSIPP4<U6ZADmHDQ-G&YxG@Rt
zE+=}-)=Y|WaGvU!`g#pS5U55|_84<vth+I2@l_lax~6yOF}tFaWO&z&;a0V)*ig(#
zIvFCQ(D~$%{Di7QCf%(b>#nD)Cul<=kaDe9TWwDHqxgLCw>k<zGOBK(gabtbBU7k!
ztOmUu<$7sNr4Gx=YgvCo;jopuXOk5gR-0HVXSmf0<&tfqLr1}~>&PV-CtvI8K}h)0
z<=K;FI$U>k#?VR<;CWdSK;)@;F?Y)+!4`|7*Iw{B;Flq#L1eaFrz6*jUchB3=0hyy
zYF<KSW1}{y%_7)`N^)L70bx?%5X&6dEIkz2-AT1AW#F=J;UUCzhI`GOCl3IT?!@|Q
zHF96g;+#N2{87mF>Z7uFC^iz!`4!p#LMEOd1BvJwUjbabifaGq*pP8=NBCVDTAkWr
zFr}T>2u8(rmc~Bk3dJ~Mcj%k;z(1-%HE0-w*!ac>2*sHZnTS>g*2>QYW-C1m{$~=S
zQ3Mb`AMIbq)U8WUQJbc6Kix-C7d#)T_5#+of4?(BXE(Z9Yxbb_vWLIsBVP6*rE}6s
zgvp7lrY$$my(p2AP(0Ct)q7>9&HuZ)EWRNhsNj3LFZ?Gqmi?*>e1*kc`|c}Yc&?a@
zpwrPAUzH|tdaf@+bn{BiEWh#{yxh41L7unYvHSQ2zCfa4z`G1)=^O0;qmuY@PgV1l
zR@KR=W|~T($ovOP=Wf}bw`cfhDO?p(l2=`sEd5L?At^%!ycgIbUmdqNT3wTxqd+<s
z@AoC-0a8`O&{?^rll0IBrRx5fR&U=r)9RlI5xf(zJw<uyIvNDVW;hY$3`iAp@8nSj
z|C<Yn#&y}g+I}PWjJ^;Q)&Nl2^Je-a&2TW{ZB7PL@{P^Fo)W8ODsJw00c(l|e$PAW
zY6^m2Le`@}oJ(I=GKFtZupMn76X1MtVOc(djWNh6DxiseJ?;>cIVRM4@|s=mmB%>p
zpUYn52b|0Htv+!31X_dEX35#@-sc!;)IKhEiu1|eMOoumo(DU)3q0VWFn3ad&5zZG
zqMfHKvRUdVg&0kttZ;8`s`{Fuz#xK4Y%s9JtHcQOObYGD1;|@C4Q+~#ZvO<K%h-+K
z8Ma5^RaGe=#Lx+YJ)y+Qa<r+h<4_nN>I&bk-3M51CMEbu+$U1JFz}dZA|8l|MXksr
z3rG@;&z$s)IpX!d?k<L1cS5}VfaT=~x`R?yV^}H|X*5RkKQ_O}+uY6?Zd{7Erc+}~
zJcx9jLdueGcJP|o;_95*Hs5_W&llG#ZHPkRaWUt@IXw>Zma>n#@d*ggN7TA@x7VOH
zf69YREm+`>Oj_9Mz9(NGpvHo+wc|EZ5Vx;=zO>l-b<8Dy7{Aqe%xTZ|CjFHbPs`O^
zMMXsq%Mr`zw6z};Lf<6lQ$L7KB?hi+F|D~a<OSt0tG#^b{sjvVs7c4LR~<!FhA0>8
z-fUp<u)N5%0U2dXO1}F}k01I#I}u>ZX;9tl_XL%J-5)<owb+p~+LqD4a&>QG94**W
zI*69+x7BEcEcGq8Xpw!X!)nLI6)d4XGAO1T@+G<fLNCdSIL|F?t<R7;wMAX64lpV)
zQ=gt=$exRoPo{J9!q3$a^nPrEY@}N}de`~cDaBjaoNS>aP2=;r;Co3%=fEm97qLx4
zAOq^L(v=M!(suLavW0F(PatgnGt0Gy-hM_?35|4VM9Nc3ZBe>g0=tQCM*g>;aq&3P
zZ|T=huW{<Inu>db1^k#-7@he89Ya;=iM;&8xdIf<(Xdh`C~`P16*djxW>H?Es*M`5
ze3%}MB2fMl6vbQ^k`d{`H<fuh7ejd8%QrEO46(}Eyy=m>+k?qFy=`L<5A5dU&XzDS
zD8F;6q2|M{5HSH$F)&v*j?-i3Z;7HgK)OkX#;Jomq?2v&Yb$Cl3`Y_%DX?^RXgh^@
zn-&Bgp8~|bnUbOqguzA0-A{S?_T>~PrkEk66sA+6RZ`ufs3~;Mq({sgJ+Nyb8dATh
z|BgGiPl29<R=p#phn($@HB!RWk^aycrunazv+H**)3Tkd*{#L_YbhO81VxV%za3|k
z`yh2R-s&+Iu>P?*9;EbAJ`4kj+QgVTiUe*B+O_=g5D&SfmbD<I5mw{<N@b7qD%2zf
zquB+#5y2YQ*#3z8SICT6#`vX&_%Y=Lm$8#=rL_xUJtha@)5Ve;mtvrd^n_A4)t~~z
zEe7U3Q>yx10MiT<VB)-^0<ERYJoccrcKwPfEPDQJdPRN;+K8o|I(rARB5X=FviaK~
z(F%<4f&0;JB_DV>0Sw+?ihwo<(W#x#B0bJeRger2rdvQERPh331tl4V9>Wz}Tmtx>
zq=IVNh&o7cnixidlk4KzlJXcFMMQX%R(3Z&GM<W;*mQtE=I<v{*X#<=TXBsGI%&J7
zMU*&%s>@)~b!gj{H_4ITzwV4mi=l1C5VWn<UwNx62VrT(HO^etk>jT66~j3qEzzwg
z+*UHC^2{pCPqN36>!c9cNRQ4nF>zdB-}PRo`g({ZjPDGN#O^^OBFt_WYu&wJGa6FZ
zp_7henLm_4#8K1Zo>O6%0Wu|1ue+SQV?<sYXNk1g^Zwacm!VNmalvRBQSAfvU|<+k
z>s-~2Py$yc?t8DW7PR%M9|oxjiyE47yaxVoH2H2bb^HP=_a-?9DtN<#aa6cnm=E$U
z-hn}(7#qFDYrr~>!{k1=V{TEVitRTNfR3XjsQMBc%dY+>WrgKvJ(X)UzR);$Sa{@h
zd>F|MnFtnc)Uzu)(jbBhOl@<k`}vMpXAh2){amnqhx-cvsg%A_QY@YP3u9RXq&ca&
zjNVqQ-FdvwhFtYM6+)NB_nQe0r|MWNEqV;Yy|XQ|lWr?t=yb`9X66!m7>QYEla%^)
z-dn1eYr{Ld)K;Ryp7(X^9%iNtm@naWIL`YL2^dR3*=<@M2toz;BQ;lQ@V=dNOPGB@
zHxgnLC2lvg?bAj!QiPNFmf~8hPPt=<Uf_3UFTfa>F_@qLhwB^pV4h^HvTXJ}_7s9%
zV2$Ea&lp_nZTSDPp05c}JJAERXCAKQSKJYeVN_$_&5!ZQ$m%sV;`#Js%?w5ccrvaF
znA5Y~n<wHR9P!y5Au~LtPP$U|Vz0P7OGZ=Xi>tea8lku5^nC$09Z>X`TNI&vbWa`m
z%&*{1A)5sd;gNtC(zO6hps#9hqz^;_MwD@ecTM%qWzYuaXh16jxO4Y&O-JU<R=O56
zGc+tc_{08+1a}~co0jJa7LQX5<y1;TuK*@=OsqXyS8)j;G`Gjs%DK~p-_UEO)+f>r
z{D}SU1a>#6J{%m}_(u~fEarj<>}pZ~KAtNlbJahT5-_o#J0-Xqeex9eg9MrzjJf?4
z(}Y`4Y7{cIIkTy35<@f8tJ`tcQ(j)Bug5Nv0D}?s!7r)0yoSK6ST25%#mDW%3-zdA
z|MQQ;F1juatrNzdf6kbdK5<!o>F%r>DBGw8!gs<hi?ZlgE45AcQp7<jUQ^1$xi9vP
z0=cj>xy|cU6YTeKYTms;0RB2Tn`evnclR4|{;1E`xZoD&V%~f=Nn<m=jA=|f*O2y<
zkq=flTXbw!uB9dj_kWGn5CaaEK=o@chn~bg5ijy6q$mWkGDJ*EYKNeBWMUL&{Rs*D
zve}3OY5>Ws*z@oKSqd`hLnW_g|FK6M<qYXVfAEh~14cc#SvknS?WTdmYz8zvhj*{C
zKOS-;sAIW=LN&fVBf%IN`X4USE{P`Yh{VAZAMMt+4Z5-CGnh2gk$hE!*gi)c8j&v+
zFdj3)D&{X?>IHL$FwjqbZI`O7#RuJ&q5ccjCDEV0tvR|Ff%@4G3=KR2X84D6OAv(h
z@;#7TEfgm8*{sp*IB+zi*i^!eEliEpC?506b55Sv-14#!ZrXVsj1!h?^cDH`O?%Zv
z3#Ln)W%pvg#sdoU*%Y*aQ<*|%8`I<K>UThjr78w4qTU~6V<pWr<EjzGY3nl|z#6qJ
zyxg8)tIY~3S;F|%Imk^=UT{Zd3yS{PE?g4CD=JuUGg!fYvX9nFaIRP`1h0zj4)zW`
zlgH+LviZ)%;%g_D{tpA5dv>z7x8|gHlDwSz4dc8|FO?G3@LjuzY-{)$rk2P#bZ3XY
zJ!jaA$+dGS<Lwd5^>`n%Gi5YUfhP;+1sD+-oCpJSXh{qHO-<z_q{JBkG_aK;z0ux=
zI|>=C;%!OQfU8-WK{HN^b$4(htFU}wnLqfw%BI4<h4nUKZf0r|C)od{U5t%RI@92^
zqOCdXr%qpHs4XR5oxlM(Ma8Ua8$58lKd@U<hDg}sgk{7(g?PB~iO+&mo0%up<GO`3
z<f>+}eGD1fry2_`HzRbEdkHjN(~wi0S=Wx?D+5k&;Wpmh?lHRIr+RI`hG|6<g;`;}
z=<;LX&aRd_ZVpdp%S2-ATwQNR0TZ`*SD#Wn%9^dKu}d3`Ef^9XUjGINJ;YE0j(V+v
z+ZhW3$_r~vwuS(Y0st`KhM|XkZd9B9ID1$N{uS3vZoyEeeWh!tdVhYh6;-Ys4`ndf
zcsZ@h&-67^=L`aRp5Y?g?mkDYSH;h}Z+(&`&k1p8$-ecMr_46iKByI1F4X}BBF~@?
zWu3Wvk8d8-9d-weVIYNx&#1FQZ{kr~qJc=&aU42XXPs;zM(ogCk(b{GIgRR-NziFY
zre*yN>ibk9Tf1<=E?wjJ^TEH)aGT+dqfnUBwoM4hro4OS5~)B}r{*s&780mLzd4Gt
zAdq2{Bxa>cygWr`gJgd4!K%yTubMhckTTm70K<oroe^%UV!TyLNNnjzeWbRDvT*?w
zjXEwFJ6xhp9htULI(st(FzAk2c@l*<Y_KkuVmxrZkpWbum1ifv?ar#d@YpQM1#*ae
zND34>g#k*gsqF85^e85Bd>|orcicG@ek}4Je1CKZP9e9p<DyI>G8gogmj%XB=okE=
zbt<9*aUmjfIEaI2o_Q%8=^ehUr7*pWbx8_cWEr{-c8i8;koN1Q9PF=<11E7k{u5o_
z`vjE3YH5Tw7H5R&;e}gn(cJnS@EKS$mrl&jsAQ$Lm}oCkhDv;VY2-aTMJU#bm@jqy
z|5O)+@k=S5H6##3^5$On^j)<*v2R_cBK6}2DfGg{&BCZlaD43|L=O~7qIVCNZ2^Lw
z%NAV}5vd4CWi*q7Q7$`K(SuCuBwP&B0%&eR=sx2lyoS&UHo$!@4TgBzwoc<&h93&;
zNmXv<*H4r}jhpgx*h!SC-}CHU4zpQuZj_`uIfur|AI&zGz}#CC*6i~#hZ;25^MuaZ
zeSbqGUgEl}5gBbb;fQ$)SwQu^+%v()yuaUsziE%^;6^3ihWuv>4u7UeftAO*%pN%8
zl_!3|>}l77&06i_3aNnqq9kZ+bmqQFKj16VtZ|2#70hYY<r8Bdr&udj$B5@s0m<PK
zbpc(&$qcaLyoc?y0}5CRzDCjk`iJ@78PWu4)X9b^TY$)YVv^uQrGfSgn3Ca7aQnM$
zAnMlhZnyoc!y|%rQ505%_%ZCGH@O;rH(OhtAV7(;i&l~(NS{E4WTQylMFsfrtkUI~
z)*eC-u(~BiHvg;YvQS?sec*tyvl|igOx2^IX$7`M*KSI9nW`%z9U~CUa-#@F^ERCe
z-A)}YC+8`AL;Wgj-;Vlr=$O*PglN(~E{zy9{h5zhS4!7cf(Uk#J<Uo2i*N+9@vJ-k
zL!_$@Jiu->v-wqCkXr9w`_89WDHGsaftUM_v4P?ZLYltkg?^4{5g9__<Si5d1s<s0
z2sm!5j0^^HtksvG&`i39_bmoujY^ofnY>xMR1)aA#(B1GAzp;1S!e?$Y{~zc)_IDH
z%c=ixA1?lW>7B%s0Ttm-IlM+2>9isX2jvHO2;8Z2;`*w2+&)QI&hmFgJ=QJEZ;TAX
zjkLpH0{7L@${H@B)R<j8_SjwBh83O;PB&zm!jo{W-!ci$wCa_DiTq^5z07#S%5z$e
z+3!VHDy38<Xq!yXx-xKV@|2**gfRYBbsMt&mq@4fy5VlU1d1gTst8Xt4ZNLEm$FP6
zH5_hySVYFTE7_6nLZ);kd<}GBiau4FJC<q-d#5P&RKnRZE0UCotlK8@wJJo8uM5_#
z%>@+1JldH%0MvT`Unr!(_?L?mFC3$G({EZKvPN!wvPqan_y$%o!!TxPD!me<K1@7D
zN9vlmH?LL>rbDm;ymH$8IY{N$LrRAeN}*J)x;@$lB1=3910!WUrT$}0IKkQ`RY&=x
zHtZY4HK5hh`rzHCb=zygCx{baX<)ddON?CHwA$RQRqDHlC2=T*!%fJc(c@VH8l04g
zSLJ!5X^D>)%K~=&8pjPatVP1i+zOs6gpV^8Jy1e?k^W?5T?0RPHn@=)&d?UW1kvuO
z((siK!DB5s``F5w?*JqqP8sud?EZA!2-=i4HyQLxf2vtSQCK|uGX0=-=C`iU#j_h!
z9r8uD0J5X@L&C;?HU@?h^Q-lWc2aGod0fyw2`!3Dv$8&FmBd&*+~>6qqduzIblbyJ
zg)g)xO1A{w11ZSbiniz%HjnaG=CE8V2o}f2TfrTfLW6!@dc*fdAoIxE@dLE+sbvt!
zN?(T4WzP@%BF32jK0v|0DQ{_r{;dMhTCe4Ts!(k*c$MI}co$7&Gqd$*gk|VAPEasn
z-M2QQS<&;KMFgy=UERBh&c>&>C>fK7gZ=mgVG>C3n_2QErYIsIfAk-!4?e>870?1J
zcd*~AjlBO(>{LbibgZhkWOI+o9ef6RQ4Hyak-Vw?uvA}Azl)kImOm`u9E%-t%vE&M
z;x^Rx1;GT~&`!A8?c3qhlQ2Ov-i+p!c0?tlCS(SjoGRU|sAXcrg#@Okf7pu$q_2a?
z1%fd(=6C4(yb@Fb@9RXDYf}7Lg1K{+HJRq$znCLUFU*qHy1B`hl|zwT_gA~H5wWxO
zpcp~q5%H(2cQ2qJbPzLU;p0u9Dg&PRO&(nDV`$6f5Dl#Hxg)qQowOoU#B%Rk9y;4@
z9PkY%p3_>DCViK}^-6=oWX}1YsBvxw<vT;y?8Y0nxuN3Tm}2^=kxzmUg<ntZ{<Ep!
zJ1(XCQ->FU#P~NUM5B8l=r)0BfF3V+bzWAD6SWV!!?#0hX<R%|(P_gcJAadK8N>CE
zF3kNZjx?BaWyQ{+N4C_Yiavi0IMjxBD7yO=cacfRgc}RpB)VxSOZNj*vDrKFB%UPw
zbypdts$KoJx*L8ayTU2F*iwLAU*7&3Lg*)C&9uc>itT$rechHpN}*n~*8xe|wRKfp
zzFAmD4hx|j>r9?qaZ>r<1Np-jB7tc;^dp%5#%(dD&~3yf!^%7KLvY7kzGt}$4gy;c
zQ%r1DU&<k(hQry~NB9O0=C|wtOpbM6?+=uVUzA{Wpx6^DXw;o&%AwEYOr5DpwYp&O
zH+_%@-qLS(#u32-e7@pEzlyS)Al-k<t<NAcQ+2Q0hM~8^E9yyu%tepq%+?y|<X!#O
zq&f2P9rZo*b&y$Wi_|l-s;UCGlgVrPw5b*Q!w0I9t+zW9I7w;$xHVa^^Wy0^-)qyj
zQp3w~E0z{A*OGe_f!DjKl!e~$;;M1au?1Dumj-OW@~=#Fn3~4WAe6B)eXkis$4x!7
zBN;@`Ci?e|;VZ3K^)C%zfOVhVTI>v)N2}+vf21yt0J&8dqxhQJm-n70R30|vrhx2$
zfG^}oo(oR`=7D5_K;u*ZkSzycrM(8g3o%)R@1(zWVwCLt^G`swNzVS9YRczeP|ze#
z+_|RnP&%QCa6vjwR0AcrQjtvKU(Qa6rIZG}DTP~8!`qX0CX&$iAXi`?ZucIXM^h1%
zmzjy{2vFBv=y?<dZjnVsL0qkM21lt9MgJQeHSTm5V%)5W+0Va!K6-W%a)VWB<-V4|
zY4<rZ)71Y+n!jKk+%sRu7_V4)fdi*f@tWe=z;=5wY!G}9DE}Z7teLmz+`G&znt=%<
zj(N7j@U{#7u+FP!(!|XC7m_@hN5ZKdp-&V0F?VZ2D`B5jdN?+ahvC5v?EqVkIMa@^
z4)FAn?7l-m@CCJU1zhF;saQE>l9o>CkZ-zr{N*hqMlAYOkeJHoToSZXSr>Q~VBEg`
z+q_snx>|C0up=Z5u`+-8=;C$h70X%Dc{bUN_hyT^2DSJsX|rq&(aFs}5>e^bnoq*X
z1I%zC^-|6Px!HED^PN^AtFUc)ODouqce1W3j7BiqnMOECd<u;(hKs*BPwoRj7#(0d
zF)E^b`v_?yT%Bx6m0l1Y^rjbXJ1u7uWp(4ouLkr_0yVMnAU9t}+b)+G=_tw2z-S+9
zy$6FSCR)E$D+qXeIYZ@w0{rWi&|-X4JuI7X6NnD5w<U}?<{9NM9am$rTa6c``~5&@
z9G`v29j#*CcMTmomB;|p8czg|hsr04a82M?Yo_7@)z~Tl1C_oJyu?3ZTtAGC<PZcQ
z&cg-9NhG$|*==Lg{N~(T&yyR}Fy_ftAW!#7tS=S3dCVyZrl#F0UR!TG;Yk)oOVAXK
zF}}gbPLedxNCj1Amt%VJg*krTT~shdx;La;lDQ2^U$C7y<RKe;oqVo|dKOUQqYckn
zM~-ELCPPoPPRzMnU^etygfLoGuQ8aP?d!qv1KX+#^>8Rm*$_4uS~Khg<V<|7e8>Mc
zOx87c{mXpELAR2^v?uf3<Y^)&a>vO}qePclx}2G}Mavy>>E9wS+`j=w9OvHIeAS!2
zjqnS(V}uNZNx#lp<!h)Ah)lj*TCWyc22VW~plUPksm8X;JOeQeJfth``9p$#k7RD1
z93Coi7I}uvLmkb(LssCrX{SZz2|hOYPu~5|P@#Tv-9xiDD25!ZP?^W7u`7Wl{w+#7
zVLOY6MR0$hgMxo+vGky-n6H%aC7>ZGXWDJrr#;GH;D3h^zmo`HLRJ9)4!#GUEm~ex
zq}Z0kfQo&eyBSVn#mBkVs|}MkRq3$dD=kdwXQ1YnPvb6I2nuvowOF5lI?iCDG!Lkm
zPE(do_2FvL4p_LmYXyRlKHHHn6>a9>3#Y5CI<kSaDe@66B(g>gC(XQP>yBnuKJYRB
z*uzu3D*5?gNhRcX)(Cit@EWu#21#Ww-ImcRbK*Rj*%cEvb~o}`sT-j7&AM}=Ho90p
z*v%BF$HluR#eWj(#!jjbmP;IubaqglZnuY>D)$6sxHEM;APU@BoGx6vNoYo>1&?FW
z?T=f_l_D9mwgTxO>RwPaHalPN))3B%RSk@7kov=D89grCDU?{Vdu+dzZS>7Kz^Py0
zDH8{BgBq2aYXNvgksBd}p9|d6|InavWJ@b}p8XSl$nhcQM}RxOJV1ZO%1vWq6Zu|?
z{b1x2t$_?hN1CP~v)>GF@LrbC*d`9I@7yhBHCvLNnwbgF3_3G62QpX`vx-AE>{~UN
zTfPhYW=1p#o{94QhYA?dncBNs-&BkkU@5q7+CYR`*|I_+Ldnt+j2kOGZ@3`aN;sU?
zFygm@p*A+prt2v*5hG3+tytX_9FE=<WcT!d#i~KpZIoq4!5a-zx<GwGriPPSv1<Jd
z<@DC<ghQ*p1~G{Q%Nyzwvp_g%?}K3$tts^FjvIUbMzmRC)Lh|>$;-wA1^N?|ebp)b
zVuxMZ2;!&}KKynKs}m$K=%;{c4)>f$Fm4oSvBW@k%u?C1L65Eip@aSIdmr|&H+Ty5
zpk&^4<ROR#5}!#YTDy8uv$Qln_zR~?Q&X^D<ZeXc0o{O9Z#9b~u!RUM?R{3q$&{6&
zq5q~tP=u=s<&B0vW4Q3z#W4a<5l_TsP{_<(H&U2xes-*yuD$8*lzF59&-bw@#YvW!
z`2tA>yByzlj3ee8(aFJ~^zU9Jzju#AO+65s=1EE?h5YBQ@+F-ef$>;*udBL=aAJmg
z1pf_VqiRUiJkCpHS|`TCf`l^f;dGCT?tyrg8aVey@9i(~YKDDUY&z|SdZ!V69yz?!
z#If3Q(tzgHb+$uQGGA51s-(HualHHUG@P6Q3ei<i&?Y3!W7;rdF0M)>%mXm$Uyn5V
z`JE;~2-LW#u&Tb%&KKi!DHM<IeR~nkm}XZ%3JxI@dUc_jho~wal3$JIRv@Yhny!cS
zEtq-`m&x0_>k0*;MDmzWhDKk4k>xx`#)#p085{5?ldRUIvRDC&&N57o7+BU_@B9$#
z;jCmEMzruIAemXAw91CY!wuOoqaCh9I}2~t_`%Q)Ja4$Tja2R)5(i#P42RwR!lW&b
zz>f~jJXaV(QAL%hD`i>#bl|9=Ny-7bob*Pat$J<&U7khAjU0BYPn4y#Q71eJI~&hj
z6RAsD+L5wf;aui7^xAZOHtXc()<DU08Wm-sZss}!eMrz~z^`znZhyaz;8`~`Eg;%A
zIxThPG5>&3a+YwL*5D#c#E26Z;wYM@Ca(bz#UR)?Zv%zRXm1B}9M(5Ao#{(teG&$%
zUdJUx$Jd_?HWyJ-0>lr*VI(H+_m7STkcCia!U99QPdAFwWTfcz|99tj@I&BIt*{(&
zfg?t`sNNiUtnAk6cv6!Vqgc=Fc`6()FU~z!tRmPdV$2c;)+No0drqbU?Gk_fqG`lo
zD7L4LA0hKtvQwMt0}h`r<4YIMQ}CxMXw2(8#p}N%!W)e3ZwIS=n?0nj@(@dVW^rOI
zjc8waQoyMSg<gqG4!$T|o8$LKR4l;#71O+F!)?&MV=V_bWxRi#5QuAuG!KNTp!^27
zKxucSM#8b4qU?;W<~jeLlu<vM@OdDggN0x$cFts&`Qeu#n`I=xM1pY>%cp{tmtU}#
z(@6T;D9^(a+Vp4G6>nNFlPGWB!fNt~GSOsGu%k_kQVQNnlq#v%)?LCn@A6+SWai?8
zArdMqmO{*key$fRN`#6<i12S?xP;Xq#g!A(oZablj&%D)o!<Nh^KuJ)`#012J-@uz
zV9MDN!(CF3hzERFF230Mm9h%f4FB>?SR;#@VgD{Uikf-h_jDkt@7O?%8e{ML9*#P{
zNGi4VgIdO#Z_9$F&ko`Kg}4xvOH-iPDOk}_df%Vj_<4vojt?{I35NoQ^WT(+HRa7$
zo9V#DFIo4)KP&Nxr$Y1Q_B?Iy^HeVIx$haxHmquJUNQvbd~fps4>b=8NE!@+$`6Bl
zGHFB0|FJu0(yiaiQ1rMl<iWro=|#n$pD9Pm6tsHAH`nAf6><2>94x~{BB+=)w+)C*
zsH(lNxo17N-F*tPJh)PGh?M{0M0ed#%aNy+S_Bb77E>u2K85jK_7ATd(Dd@GW5BH%
zUMR?GI5{ts5F%#1U^8U~`}`m!K=kg}0KJ$227$lCY<*U9t!oRlQ48V{&k2S>jQ#n3
zyoRQ*DJ0+0Ab_8MCsA%A6{@&j;Mlo;+Trr6?ag_j$x(?SQ|is2K>8XeEjv5ze$gjR
z(K)HwHIf#h0y=dv7zNsTnM(RT(HbNg5p$?(Hup~T62V^M!S@}N?5az}$;q7CRw5|^
zu?b1A&B{O;V~!c8r@c@SYd(azafFwt78E}IAOVlXW3D^C9lRBp<{5kpNAhcO9aPxM
z$SkP#^OoC*y~W0S5M$KJ6-ezISH{}#qpyvXXv}8~rO*KN82cC)q%3y6fRtQna?0t{
zeP}KVk^QCH*EY(&*r@ii|5)iry!TY+6?!--!>`AjvXCf)X$6J@kdB_SbJE;jF~j-m
zh&x)u6;CG5>;3~&0Nxaxd;Pzu`;(lKnCy?s122gH*pW$?n$G?c+%1Ra$wV?{A^5i{
zpwczjx-ZFd=#fSplDkz5Y;OH|N)My!iNX2fxZ#yUx$q6i@XvF^<2K_QbW$5}y<Gey
z9{g;HvAh`0rI`Dl5%khJv#jMw+ZI~D=nhnTrH|MgMQrxwfy0qAe>Kj<-Ohq%Tl-Cw
zn{nSzY4m~^{TT#@q=sDKNCii76VotwHs+3+rRjLFo}`YY(&*@gM#ve!QZ0*Em+oX=
znJH8SkDUK;NXSdLr0(VWHJ?%WZ_a?5jdpKPOwFM{b}0WF<C)lq+=BI~1JPoOEAHf2
zFGwZ|_nzv_8exJB4n>nLiQ6RZan=6+zED`cNO~Nby6A>XtyE=U+AQLJIIuE6hfUNO
zhDPmY|J>F<%S_6Gc+i08pD_g=I1%cfjvG7QpIHFy$&Zz_)iP5x(jdBmTC!5Yt3!8a
zlzR$Re-uwog8h4&cH;@m;NiXJK(f9emMPcll(;Y)5qi>nT}iamLYxB1NL=ld12JA3
z@&{tsWI#qZm978=0|YO`dlA}_)jUpufG^<B0Lm<thz&<ZM-lQ-u`g30iB!dRB8Mlq
zKkLMtSoSq+0(}Y?h|xjPHZ_?I7<nSx9n~s!NZO%oW{l$r8G4}Q4*?Mt`Ne8&htCm;
zM4O7gp0!{z^_O_@oSeGTu|*ql?&8Kq=OV*KX5b!?fLr3ZDm99?ap77V*F`DZ{!&}o
zFhEo(c{fsYjDDH51rN?OpeU;+3!KLt`~B5l*g<nk7ibpJJh*M^w-iV7<jl!I^%)w8
zqQRacK4Jk~p@q677GQ!^H*;Cf3hIx~#l?~Z&v}>$Od6icR;yR#cSb5n$D0m4637q1
ziznT?`gd=5I)9Zl*l#+n;Py?xWF+51S%9ohv|53jv6D~=y|~G`aLgd&>Nyh@c2QY`
zCnje5mGrThZu4S%Nm-hk8Wm%MoH;`Daq_wH9L{CYAR}i=%klC=e?<nN>*kXvU<NFK
zp=?1$X7Q+G);?1c&mu8*dcrK{vqbf9$*IbwGZGQ<JfWnDnHABJ80~R)!V~d5_;LVK
z2TD;{x0x0&eL2aW^UTBC%ozDB@*ob00DQ+|J@v6UrRnqehANB}=a)QyNT?Jcdmf)?
z9KeGV!tMR})yvwR#r&Z55BTnw1jNZL8LBc6n>MJlZ42$GuMo1tm@=z=>PRkm*K_u?
zHL{`rL5TGE9%RJ`s51pKeA3iLjUv$}K>0-Ned)*CQ9a!{%bzbZe^`$Sy3k=mX~1F-
zf1mw+>`C4BBhE0lYQ2BzW1BIh&qH<5RTnb1bmw!7L&+59k8SkG*e++wd6g4Vo@9$L
zWlU#ic!m0EZYFGFd?G(XQ~-`nT>~EusribNt%KG(`ecxT%Fn+qv;j?U6ji!U2d|)R
zk~(kN269{*46}fx{4LHRaT-2+Sh$vfNFD=zi-*T9(p+L;;P*|{teN6wr0c=dqV@x(
zk6M33$a9ETe*A^zA#+g9JKu)QJ787>&$7e`tX5~blDHC$CVu%s&GlEpH9Zvp{((B+
zMf|Qbe!s*&R`QI4P<!tk+q$R`b@y%eGtlZj`d~vpoz2P(a!Y%bn-EGdP3$At5PE;C
z4-Ys8n{bLStOfy6#|h+aicU-GwWElo*F{)1j>N+XqIQPRtl9>G3j-QO;5VWURJmK}
z0%N^_15l31(#w!TZ#SGD$VPcwD~3y@@IOV3S^UhPeN8Iuef!GBME*693v(!M*Ghk`
zP)w!jBos^hfTVSyI-cicx<YTe3(^Cm=N}-+Y9dW&Z);}$pXpYpPieNKbq1PalEP<D
zgNz3RwX!8!MuZ0dATN%uqj)j%cL}n&RJNty>*E@$?Zz1hDBnJK%Q?4Sig_Px*ABap
zflAZZV!ZtyK^uZEg!c_UrAiM0J5+({;qf{j{H|8X4HiS3ksCyOmGd60-~h?LgNa`6
zY9~t=i!VptmcOD+A}HKZ2EKTK4boWu;1pg%uBs(O%<Zj+Uh;Ne1E+#0SI+Eg+8F%G
zt9j%vS6_WP`wv#?kk@eVuGF_vDx$Gk-p?v#ECS#{Q2rdIOmsg-EANiRv~i{s1LE^p
z6b;Jooo;@vbFxPC%7s|#MUPu|T>&V91zEY;dj}@{`VY(B!q*~`$Sv-`97=`D$UeW;
zjsKxs_L0Y+hd0-pNG5bBSAM;)snHVj3tlAanC7ye2aZSIY`az|DJJEtSyjca82!-S
znBG#L{>8<4@y+_Pzp4X{oEnGM>Kila&0)v6f$lNYtTKeIQfsrqI2->slVPB35QdO)
zIWi0&j(*nYWC-zIz-(nfXzDCpslR@hOmAI(Q{{7OzrhrSRx&6}WA?etliAgjb?WxX
z1;<)V*kw*@#H<4X_mD5y<POY14-|&q6sip~Q5C&OucBsI+&F=E^7Sf>i@>4$!EtTo
z^3KeN81K6&nTj85`G#)zGpIUjQ|Y(4!16~OU-GVyN@12wPhaLFT9PH4A?6P@N+c~t
z+Y1dtF<dICZvNw)7)4V{^8*W5&(~#VLOWhs)fcY9{4icrK-Wb-v)L;$v%B=>HJ;21
zj9qV)G(dJ=K4Wk_!|gmQw0vF0^?77qb(rg59uh^#NYVuuaU%bk_Pz>SPV;69I<uOd
z1J?nz<=W>Ys_P+jP(j9^QJkSNxa4{_owP}(>mzoS#AMcv5m3c8xczxAfCML)6(@gM
z#3mcwdBcXLQqr^tIw5SA8fS0o4#JOolor3G`k;>iRAtNmlwc0XN%6a+fV-CEYW8?&
zL%96S_zMQjbggNQBiBkmjz+$##;>ls0zSX`^(FMiGlY8$G(5&QKJ73RElUkd=uNZo
zC<2s}s#4XUx$jw4)<X)~Sw_8_9Zcj-%zk`-zR)p{-_1uoYHEq<hgc4J4bBuQqRnTm
z?wnr;bp}*UHN6d~kW-QA7Os&z>nx61GEo7xrMQ*f()c8_3_f6wsTSQx04)pa_>q&?
z)vH?_+FxN`Y3ee89Tks)j&-I0DHbgZ(pcM>qk_xuHbJSMru1zLlI`3nZ-Khi{c+00
zzkszbXX1^4SB6$vjdw)7@0RXbhrgHB&3FSy)^IyFExO_5&w3+d*#YZ7TTev1w&fgw
zLE7ZO1noGezwyewcAp6ou^rgwnG8iwd#dicH#^wO+<sEcu8;!U8;2g|YGh%YCX*L*
znAP)pI_QAsx6kN*!%vkozlIBFmiLEl4s@hnhiveEG6eTSO-=L0kpH=5e8F@V-Q#q=
zo%?o%af{$aXZLIF(ca%UE+9j4?d0lfpS;pa&XE$$^GbH_O9+K41PDX=6zp?CQKQ=9
zGa{0I4_S>H8!MmcWER&ISjHpEh6Cr3ylMx9z}fgAGz}z)i0j4ieNQxh?J?o5qIv4!
z$LgI>KN60r)g3(l9f?lBz_v+E4!0zYj2}$!cWO(Uu0pYjR4CVZ22%Avs<^?Mv;S^P
z2xojFy&lrp>^fnsJHwcx(BWu>iyfG9LnuN!EYSg1!9zi~TJ85zIi%n9QsBX5<g}d=
z3fw!vxCkf9G2J6Ie7LoyZflqO6~iR+nE@;R=Y*L30$<5t(!4&$QW4A8u6%~sYrT3z
zsAFzTQYWC*=vm4gto>~wyH?T1Xh!rQ76VdxN4HryU84bIUmd9hGq4%a@H4WmQwDDx
z8`Pu`l6=Jcdmr&5U-7^jiH>$C6~6V3@>OpO%9ntXd<0abEE=e*f!yp1!CTj~fy9P?
zvN}wadk@*5EXsfM$u!zq*Js&dom5_EGB9N4_xI4yug%*y`8MI=Pk@qrV;`v8@3P6{
zO&>>8bEdNuacduB3$Yt(ZjXS+7=}H57{3Lx-+r#`{MVmVws=C;s-iNjW>X^G8R;~5
zAMQam&JoA>y(}P!x$gPzyH}Sojt=*6q42@8(cE%ZM6?o>kF<<BTw(N5gt=kC*WsQR
zGTeV38`Sna|J7f2(SpSA3tgk2THUKe6)Gd^QJ<<19P;{R@p#5s5S7PDf!^x%p&(3A
z24xSFhRcC}*fdrS9wCs8g`azZbuzp;L+2mH;clSyAl#RsCE(*AOmVNNk{gyA9`$j;
zy~<uPHp%^gKB&keZs&)JwOYEpn%AaR5>xt9#TfQgPkU3xZB;;na=lXyh3e7_LSkc_
zQ#&kCM~}&53?9&q8V)M8N6}jeR}4!il8&A~RGVF=(g<3&L~nq22F`WSqlA@{WoPEq
zHr<0+R*nLOojAQC$n5BDGm5jG4K3XCU9Ry0Kn{_0;gbm-g(|mc>h$N3lCV%vSO^<V
zoR~qFbok-RVEFdo8MghYO|lcUxzZ@XEh4-!t2-$OMA&L)stZL6Q)LT6{}6p3Wx1E{
zUhRf^HMzVOqwX^6qqF=E%8h|1nzSLVTc?N(o`aHY3W20?`k+<aSKCxR4MeC^+Y8r2
zJ{jkgv=*;ia6s`pbT?z=^C#@bTn%C$F^QU{TAMYlMeFCf8*Ud`a6|73d1O^2(-oga
zU4Yci%uCw=IE&sn#y985p#C`Sw*@1wRHBOgjQ~wsM&npmMYwott=~I-P_s;jF@cXE
zd4U0>Ly~b&WzhwrI5wXfydLF?lBN{QA2@6_bkl`W!>q*#rz`s>zYH{Lypq!If)bhT
zurg8jh;gX~j$qZRDSvRo9O?kJ>X=`o{c<SWoo~a8nX7j!KzdC;vzO52s65ofFs3@w
z@{Ch}6Y2|amPyjA(66Axx^!lOdgO_nwCG<wn5d@NJUUf@&F8Q7nj-ZslNGY=3zn4S
zUU$X!zPBr0idH`6u)n))r~Ec@7gk^j5I{#^%Hs@E$e4T_&%@PO*8(kxTqj=5@8fy6
zXEWO#?0}dDG#TzPTHb~LwZBVGYTq^|xV^al**Ouw8hgN7B0G_)&}I<F%4v9Wd+LSu
z@qf7E@uib6d48h}r093v9M;+8BVlhKdg<;pTuT537}9ms>My!pO5sScfx50Kxh8f$
zYfbXqlnwWR?qOa#9oMb*b<&VH;dc?$-;oooHYoGqriQo6-dl@iqa_o&C-bl9mbZeQ
z30uKYp4-l4SL-lMrEWMp3)c<{DBm)A;2yN|%0BL_9et0$($z%JK#)eVYl4>p65bbS
z$w}K(-q5$6s(*W<0MAYf99k(1LeJ2_KVxQaoy_qI&gE0B-TL0AvB;@U8biWsL>dey
zz<;66z5GwVfPJ7khI&$`*oYc?byO5QYH?wfw3Yj!2|>{na&~Fr70AI1E{?g}k;wXU
zET6Y8tAk77K+fX+z`e=?m{qba>vrz&|NTQB%iw+H#ikMpZmY~uGap6{rk*qomxf#3
zSl=xE6s(zut&N#qifFQ=Uk?ck-s|L-cQKr?aOEmo74&B;-}Tf~eUB^Jofb61p{#7W
z4&q|i0mE%`0=%A+PcL;`35-(t)@}dD_kFDta(8zxdDR2izVp*l^mTRl(rQg5dXw6K
zKGqq6&o-4hymz5Oqm20U+e_U#`F8n|LA8T0E5c1s`I$I&3j_-TS?)$t+Gxa^d9{^A
z#yujIvXNeE5S$dgEp;?cJ?dw@+mnaLT~uPTV8<J}y-|as57Z8-XFB}NF$^m@gEIze
zPdx)e;u9A^A*K^?Gz)>z_K=kztYBca`X8RG5qLqow!KrD%-_rtm`I7xZHbH2a5%X4
zhe*7cpb{K$UvyCZg87OWMWny_a1C0&J1UPfg9QYa7w-zgPBD?WRa2M@{kM%K9_C*n
z**yg(p%>YZs!x?Y3m?It$c~*ACTNOZUNprj7n5hlleD2_2w$YZcO2fyk0t!_0p!E9
zd>Gmk%>KFi(mWN%a#l1iz{#d00yKqu!(bNQ?}w=)950yoRAq(F1X^D~_gaNXyWVNM
zE#W%q`Y6r#o6HEARpo*SgI#e$JgR|ABC~&)MwrLel96Dao<4GpU_Hv!PUx{!_K8Jb
zL@CM@a#`||wbg$JO?Yz7o0pRbRwPnWu;P=$t$4D^=YMAlC69lkVk8g~v#Ed|Jifcy
zgcTA)quZOcDhyV}e*KT!JE6*!gRe^>#rnQX+SAvP9RPsZM-%`WhC?EFn}qgzu#6xK
z06fX_zd6|zLdhIEF6aCdELqcD8f^0Vs4D*^OXTWyQ-|&THjf;@XruBNJzQiSl>ZXZ
z>K5+M8UOKxslelaj6nV;g<BZHbW2uxPeC?Ia!NbWtxC{T)pX6Cvcy53G}Zy1vH@4l
zQFnbl_siW$+7qE{Nb>uk7D|o3>9KM%P!2=mu#dDfbg{m3gHq*b3=X!l|KOu=#34ji
z&xj>I`ZH@aqnce|E&m=SGk<3bO`RlRcdtOh$!@tr<kuF>p)V0d6jX^C(2<ZqtOPV}
zmm+6~k28d$kmEXT_spu=1vJ-BEatp`ej_u>htW(&Ful+-VZwyftD(c}=9QVZ_DV3X
zBe>|=H1z8SKyr8F$g-mjW>yQRc;(POD(rG$n6<xyLI3dM6;}QOtlzK}`tNK~ZzNWB
z5!K8OgGy!}zuz&YCCJ)@jpBKi$`ubS*Fx@03D+uhMOFEsP8ic+o)EA#+5_NT`7o_z
zrQ|p#-wrY;TH9fiM@bYkYJ%bDrl;9Z@PYxh&_RMFX_v!r?rK1_dN9lq*vwb!=Rurg
ze!iijKz?QE8Xdgf&S5SNs!;`TW_R_dinVuxPeasD0HVXFAAhCvu)oDfYgW3Y3JK3v
zs;mBy&OuW@2=)x#ry9D9X_R7-&8||SrQfT3RJ`A|rGh$sSj7+C?qzcsn&3L+X9Rs7
z^CYAh6|IhkoZe)nQ)cr}BLdEi6)FX{O?9~Ibpqr?tz-H%lVta}nD2^A>U+l;2ZUMf
z)~w(ebS$5{YHXGjN!8nX;HCMZ!1*3N{MpcbGA`qyh;$*WuzD=1rQv^}*NWT2`Gcpl
zc~;QdoO&ZvQAx>JaGU#9g;I#nUKg$Uq2gE%9V!SvEIhe`QlW%WVMx00Hlyz&4yukm
z3@V}#eo@xFsdxV55Xm!XKK(asyPv0uCOdxoT!TZ;vfS(8<vdl;ILSPE8DhA@xSd|5
z$IOI3kP}(yb|NKer0Z6S(7-_2*|*exXu&L%)Bu4NSms)!DRS{gBK=7fsOuZLA*hP2
zC`p&`pQ3K{tbrh+c-`?O61GNTXJq4|7%PaZJNKu%$x1gL(~kdBlOi~Sn3dwwibY&_
zbCRP(;}|z}F9F;$;aYQRxrL}mD04|HER;+bbpk3)s&*M`%ky3dD%mvFHJ=+Ks|T`j
zh}p<zX6mb>NR`iNR^*9~^jvfA_VaJnBFn*keFZ6=oC|p)H=bQ0Q7MS%r9psDe7Vp8
z-KZ#Ih@@oSbh#iKP0Zj~=*$mMcbdgk^I%z4-IBP*>w^IU-8zf<Zxa*O(#P%>7;4Xb
znxAK&`Xq&-fl#`;(0K1#`Jlrhm~};PqkELfl3gmd<=j{+s=#}sp2)F==RAFVWM{@L
zZ)G0XGrx|so}Z;`330pCgn|wF&mFjU@4mT4_e~&FnH6OH`=F1{4Tqw_1a~vJMq44l
z^iIrof_ANIcrxb+(^YbnH=CT7^n0uzZp07V!Pw&8Du4CMaW@=5E&J9RAv3xFS`*n#
zJ!a+1fLgPS<+q=p>2LN_*S;fw0SZQ&*8eNcOq@L8TFHkaZDB+rz8&YugTffONbsw$
zwcpR4{8R>H7dPSb55w6f-uQ?|77Z3YI<uh35xJz9uI?pONRG7fj}5{lWhzML?}O4|
zh#*-CpLqMAZDEx<n7|4S(u=6!rt!+Lf_RF;$foO45W{D}nP&8-#G+H4kuEHFs@&Ax
z_9X)%F|~aCQ_ZVu?&V2I<8FCo=B3yiFSYNVG<-ax%J{X=V7}>D7Z2Xk73cUk23p`n
z3%-+F`koNOg!{w_;(c%Xuvm3KAIGhL{@Ulb%i8wyVKI^NNUN1q(<$HGJI?hDpdHQP
zv61GgJEOsj#fe_8P%m1<=taG@!j<xc0iC@^iX}A8zbr=BEvt0{@cJE>UaPK?W52{d
zs<?TUNza<E+O;P|G}?*+^dMGK$X5gYKJ7n#Z$UPba9x!3aD}82jGGSrwyUeUkxwdX
z8yh6&b*#e{!Jhh5-JM%UE#7$qBHd2@wYJ`a81U)S^UEqhY*bK_i%dz}T!p2j934L8
zR?!?tGEY*4YKW#I@2rx1)W}vx0|*p#xi8nfUMRpUs4GYuMb=y!@&c=2=sqBngvkWZ
zZyC#L9%o?xS|go3Km`b1%{3KPl0x`SNDZpz#`BRj#1lX)LflSr)Vubob$;4QN-!Py
zLNSuOCLm~Z0UI0z4LPlZ>{i^ZLVWYOQSDec-QPyjs|&_u<F`~w!$8~-p+TgB<9|Ha
zvJGI+33Me)18xX}I+KW{?nRIIO1=K1nCUBUY1ijyv@duPI25om{{4gub!;{S8&Zyw
zGGQF)$l!C^w|q@l5btQ`KOhYfE^74jeQL8-7f7{X`w-=`Y0;@{ICObGo5nhM|7V4O
z)rn-Jv<QGJigmhfPG7;dFd32C@$!}ykzRU*GS(B2C1jo%3Q@%@^@giIiO`H3n66}p
zb&e~P)e&O83e1|@<KO0^icP&Zj5FjkVa%1OEeG-2Or29dY*ySN9s`lC{lm`t<*m?6
z;Sn5grZsCNd||?`eLoM$-Bs710Z)(SFZ{RfiIg%5|M5M%R)|wlqKvG0IZJlUOb<`4
zRnbgsYoHI;ct}ApW^TmH$^Z;Bi^IVmG1P@JC@BHWC!LYWbH_!*9GX@mYYJUiegRgP
z<Hvemu7^5uw%dsk;GkQen=Jov_|%oL+-OABKSW)Xr{;wl7NI>j)RV>Pvy-O&Ug$gd
z=>u}1&zwcT!-T5kygctbH7`h*JR;`w&rt`=ijI1$c@@*}1!CgID}E-RQhDr^lBEwm
zwWA6XManNr;20uu)6GSJmb?AHYfX8Apja$f(kLr+*)2eg?y1!!G(gV)el>Vc7QZHX
z)1V{i(}C1O_w^Y)Y@iDTGR{+=78f-ZzK4?955gQ)J8~v)@)QZ#+F}6oid0F2O^2mJ
zu2T>^>bJutXfn+oFQ@7<!{OK>*Zw4C>MLVrrP(epd;WXN<iRXnX#6i7q^C8;X7+Kt
ztSjySoAdupH=+y|QKpLTrvyqA*d{T8a<Ncs`w%wR&w<ui``dQk)8arvG66#~TbfKr
zLI<dNbAQKP@A^CH1|5%wE%5%)n~~QUz3Opyl8nPN;{=LR`^AH@#xazyiY@lzfrUIO
z$khMaeWKiSE9gH|`531vZcs48LP&C(JcE&CDC-)bScq^JN(L392wFTr)E>Q)5M(9h
z5<(gioR4D;RK}ot-qsRINn&q+$D&BW@!q<SP;tJrX;(pcKp7^lEuD|b?65%ztB-wT
zzr?|2t^D_D|9bZCr3t|lCfW^z5CM>al(j6nX9MJfv9~rbp^1H9hrZRPkokD4*sAy9
ziVyx3bv|P(x&F8r4X|y)dK1G%Lpsh}DuHLhnikbp<`8~$Ub(SqirX<v>~c*bY(&TL
zNMFi<sFA)hNU3mCCB<%bC5`$~-cTxv<KG9M$wu~)Ewg@p@g6W^ja=f+ZWihj)wpc*
z!1P>v<Evxm-V%L^&i<qxQ-^?==Q1C$tzRtLU_5*}@duRbHFVQ9{KT|W=0y@HTEOt@
zr<x$duWL2HeLV#B{Gf<zI2?}y%77loeekI$lfprOW+9s+@cpHLm&IOK%DeVj)ezez
z#|N1qzN-&{xRgO#tOzh*y5YoPy&F*f1ct&LQ2XyxA0}ZIc?cQzzjg=37t!H=+6tTw
zRw*1u!XSF71t$wlkCO;VT0ORYv4uOKyMu{5JhCPGN{2Pqh%uJqb6h;|;IU@R)5Bs;
zj{)`hmj4!<5pFgr1>r*OqS4soV%i2aCwXlHiIp{ez096X#~+n2@k+eX^O7j|8r;nv
z(D3?Js+zGD9utLP<Cyyi9S6l7)&OD7e>JXH(u=}@;$ld92MS8nKV@!%nyJ!TRLJe#
zIWlPTzVds$`L-y`L*&(*!`pg0kb1%IFZNq-pT?w1oM*hq=g#~^hztW5k|yH;IQI|P
z%pT1~G9eM2noCuwD>&qf2YNv;)(Ao}`0%6NsR}URczK042snX0r^c5(vg2n@uh6qK
za4J%YeNEbaPBO_4WBpJ5M2!CK`jV1uC@c_Upxyw$L1K<v)>Z>|{MOP2m@^f<gxcr{
zPFc3Syqg0zhAmU1z3wZMx>7%@&e&REQE+B>mya;cR`RGRlDL9(zCBjUx^E^+DH=q!
zpvN)n8(yEl<Z->qt$`+rB1dM?6>f=HOl#B8(@$TISfgmxZU?19?QCOc@)mKmAd=4S
zT9T|6@0|TLG}g|*1c_k%6dlnZN9V|}{LSRY+}W~;hn~FpHXnP;_aeAh>VGT%?w>mj
zD&$nnsKcI+@B2b*Z5_0iDr8!w*I;D<h1PCbF0A<Ruju%=QJ~bl1NQS{D)=EJJcWlc
z(bmE%{iwUuz+}<anDnU40Gz2C*^6)fK(Kq~z2|(-BsHupu~*IAkVhZIEqc`vrXUF!
zPo~bkCoC+A-T0?9KDTbtF+~6PRpnq0J+mR4LygSX^zE(E?%~t5+v#0EZOBN#2g;VS
zlB;MuK9Yxiq^Y^Cm?DQ1?I<5e#Ea=RhD+vtP4nl<Z5GF|VGY<A+Tt^I8q0E&h~b9b
zwxP0CE}+@aoS~q&HFh;)pkGp`Kl@r;wFm@Zan^Y@ah3`epgfsw)CfYPsxW%9TtsID
z8O8kp(>9Q4cOg;CM&mT(i_1u*EX;dPa0#yO5<0cvF1=?&BD%e^uu8G@NnLv4xUX|o
z7C3OlJ8^i?kSu3qJmBXYY$(GQUy#e3T>=WKG}b}!zG<A#l4i=qJtUCUYS*jp;*!BV
zJUck4vCj;{oK0OZ;hs69tppcv7GzPLuW8q%R%(JC(ei4ugW+w70UJ0j^1O{c30gdD
z!>P?|=n`)+hk6^FJ{hX{t%mK8p5I7XUoWIUpN(8GbMKQeS|$XU<=k4}gV=E|%m~|&
z;)or&t=l|7-}5X4PE1R~4t4jSRGD$<UGQm^vt!F!E&nLJk*p1xtTuouXaOsRx=PHk
zY^utT0}?;?C765i+=*W)Xc(2X5R7%K$A(}r1H28Vxt+-V@)9>=1P;jKo0yqC&hEQy
zUauQ!JStG(qt)5s@hM$noZy5Lgg>IXwopLv!?R5WX4TUfd5G7gDg1mQDjj@;8dJEd
z1fGvwXsUd62Cirn3)d%6*PV;-C;0UY1?ES`a(zQe3oMRDH+BWpgohiVewCT<My*0N
z(+X$M8hyu%jjv|m&t-tNqW99f(+3g^Qhci%=hwciWlZMsQ!rpWop6(_?=cy~jIYVf
z&-G`Xj2z)W=iG3!FOo5jUvmMRoV9X~yj9I$z}pgtxMDGC7{*5|y?6$!f}G!u5fLO)
zH)-4mZYm8xatZV;{)ED$w%Crf);ZT_Av!1I%le8Ew}<EBwC@1aQEK}bHfhCC?a5b{
zpI!j;0gG?OWAI(Pyo)x}*h&HXPwkD>3rya<ZKWRIXF>!gX!<5cp55sVbhrwrvD_Uq
z0yAVS-XC^N!z+w;LO5+9w0?!}eK6^6*%&<vPNLUw^5zG~M9esiAsn8u?@CCPgcQm6
zeC$UzYxUrRJp>lAIoOx?oa@omx<-q_<E-+4rSc~Z1@D(n?J5#%cOX=+7>=W#2)g5z
zNp@)uuZnBV!l;j9xB@NxHIJSk(IHJB&uo&$yV*IWX3-7&s5t#QhpHk*obFl1dOWNT
zn8Zw&SZ^p~0W{a#=wuz95ha%^ujvHK)}mmnGsBwGA6<J{%VJcd0y2pCQDI1E)uqm8
z%b*EOVzv@@y+?KkC1h(vcvV-dhdojlCBDH9cd)elcry%6;)q)x#lVDJhh-FBfHkmA
z5a$i1bXvJ*espUUn_cAkCh8P_d434#t}V=;dr94mevvrA{O`g0n2~n~XQAnNW#3&G
zdk{%BzxoOpSNy1!GlUaK&bl|K2%2)S-VVqWyXY%l=c)!(nyr32TPFE7F|4r#Vwu5(
z5&7=L@4Pc|WPnuhzs{dNy4@}1X9$vogt{s#2IhiG(&SZAkAB9yhGBkD|I!{4meqQ3
zomi=VP#_!AAB?RuE&*V)Ex+OMX7<%XXJKq$9CD3m)bl#P-AwBc5JpK-StAojON9Bl
z)sU^93(Pn`Esl!G7|!<bO1sS60#1$<EvCIFzvveTsA(sys&SxLG-89d(`0$FInmh@
zneklm(9S=PLmmwxKO*tgt(Dt*vt*TC?F>}3;N@aq0_Y=9dB1hr7+T0IKu&m#^gfHc
zd5V+Bpre1zfPTY0_+;QZ{tO3C+!a+Qwk3se$+&B|r;P%ly+R@&F^i(i^JA$0N}hYh
z)%j+sZzz3cO7V$LS2Po?iNKEjq<}qKy^&yIOB{}F=IJe&8~91PrO#2zXV%F6@jPJS
z@H4Xupd50SOKN8R)TDnoQAcWtOyr6qCKtBTe=Qo>NtAPBiCOnP7%LvhK0$a`M(SQe
zq$#By>Y}T|KP4-ab-6kHDZc;T3{c>@!XLB`1Wrd~&NAbFapMRr1=~`8=Oyg@os~S)
z!A((;_lV3?LA_TD-51zw0R9v~K#_cq-|*9j?=Z5tN<7{>opBIo;xvj%6=<#z?g?9T
zG)~{8^985tspFGxP>g9h23#o-j?Jgrku#$i^0pnOA+6eUArijhR)+dyCU7LfNUly4
z!qj4*pV|tzlQ;+1*e5DMp_1AJDej8uB?pHLEdncgQO6z)@PoPaDhcYQ5l#8k3e(FW
zQU(o6z{e~jOsnIYf+XZIht4MXdUodF52v{-e)1UKX23K6#pF$xl<e-1eO{e>UaY;w
z<Yt(wUex|>jxQ7My3T^^^NPV+OGS@7NWY)sYz~6w1|eF3@=%cv6r}0!g1{Bz+B8W-
zGh7cnlSeBDB>y$yJ(aaAT^{xfvpUin;nShwDP!K(kdG!~c|bfVV$eI@;8}Mf!;^Xi
z6|G4^e{4#CaaA~P3kB*^B5ZzLNTI_A*}cpyebKx$B`rqe2;*$b6#KU}_*X#1rI`j?
z62)P*#<)QYfV3rhT|GhQo1!#8O*fzxq4u&>vl9HP2AXY8dBHYIPUAd8E;P6=>6H?p
zly7flk>TuBNo)jpZERTk4PYJ^gRYz|C|PSbuByg{{y{P+KNRQqQOni9SAm?}8q2l@
zf9<51nnjNs_I&`_>%HM6k^H+f4*X{KHA9pSQt_}LyXGtqC9&<b5J7d|gwC&LV=h)9
zhArm<ScNEkZL0AoDI<MJHt<-stZDqNclRi()E930v8bP%y%0HlgCw4Q9>0NCO5ARg
z>ivm<KWA_Fx)<BE_S_$7Wjdg;r)Mu<Q#|{+6%C%RhT#0#;$jpGV@OU^eI>CXTl3{1
z(j93k`1WVOEd6UukQ#8y)_8n(G$wXC=(Eupt(@~SQ*ihA$!IL)++C4SZQ-{0+N#2H
zLl<a40|6Wpb1&9rC`t!alQ(}F!Yk@R8il;@=HZ4?zl3LVb{WjJ=Hy_d;hewW<d@BP
zb9iRVM&>T50YRS0a1OJ0DR>yw<%Q<V#bhMwaF53>o9hTCoTpMS&IFSN2KK>0geq#@
zxYcXUX0upk&*rb#q?F_<`mSDE$<TQO2~jfF<@z${PmTgC7tnh=SDAtEIk3l~xOwv2
zVWPm&(xo!(nsZ|inbE9W83^rw9dQ9;RiPHPLi@EvHspYZc<yhou&!=pc<}=z34w?j
zTuoTIu5G>_>!u4zrSq@_hMM9+iu{*6T%ulW*lCfiRjPA~G_}5B!#bFo4MIP0puf>@
zr*s`D(fRwv>2HN*Oi<QFfd&wGquzO)WRZHxKf*R}m3r$F$0XH=v`V<1jk0)+fnjk3
zmr^JN>$lP+6pDE$aWu>6B1v7u*YCE$#|r~nlS=s@;5O{`Fb2wobz+&KsQ{-H8<-Gn
zfJS}UFDV}?{9J(zpyKQ0c;v;q^=7yHcpp$a0*Ny%klXq|h21Q^FsgELYUAux13YDS
z#1~Z)%W$Bx?4t>YwYo6}iRwcxR8ymAO*Fv?EqQxIaAK;P8ONl{6k63`&~!-MGLjCN
z_Ewbv|L;HEKrIxcZNI0cl9YV?m+g}Y5I~<ihr+gp=IN9it|E*LS8Mkzie4HG5xN>+
zin^H{!q7Y^83QX6jHGxz27N4SL;yoipVY6D%{&-aqd^yEA5bw;iprn%GT~P&%&7!=
z8v5QO0CUjz&@Dn$jF&<a_DZyVw3+D{Pc(^a3W?C0TQ;yJxYlHWCI$?WQN)8v^^glx
ztm0UmiX|2dFE1-Z;b<5vRPRq>j{+nAa(XpAdTC?0=2U%Mwjht4_sIT}N-9G_zUdY+
z^kU2ORn)Y(7ZRdiHpq~OIgwn*n#iGswt97i97)@?WvQ(GWZJ`1Nd~2A`fz$2HYB(e
z8IMP~Lq$|ll_WzPKOmd_3Nu*RnS8?#Q4NDHKoal;^rS>xI}{|3T$%~g$wu%rg--`z
zs?F6i#>!a?IJ#c*hebq>*Qk8c1s5ri7Ir&Brp$N7bA+OYd<RsIf^3wBKzHo<i_o2`
z)H248a(j--iL<X6RY96-*{OPSMat{m2I>D$s2g)Iiy-ldcl0Bt_-l_Leml{{3F9UR
zmr=0@V`sGA`J-+X06W`5;3^N(BE(-8rcmMk#5B)7j^l?L{04Y6K^KGdat^7}KlJLf
zg<oHyTT=%;r4Cq*I~SH<G$pQ|UJCc)Kzu}!o?*^^dY2k!o_e5J|JG3ikfo)s?3*K7
z0&x&S8tLjaPLGt^O+*e!2HgLEKACffyr?@yd#_~3tu%@;C|erg-h=c8hGv8qR+9mo
zS^WEE43Z|G_~*<~@{_R#Qpf=6Yf$RJ<G0np>|!oB_A4jfyM~NT+Z~IS2cP&(Gy&kh
zu`ek~bSpte94doG$P0sVYC$`YraWJa3LXzT7flRI^(YiCI1b5*IMO{sVp3j_uhJVj
z38CEYzjwqp_;9}y?k(kqYc{kSp#VHgEA|Zg?_y~1Uk^g7mCfNKxw`#8OLBPUrOZ_=
z5FqT%@Hukfk!jzWlp0ARayi0_hZbXt@QnCZ9pA4qDjNPs-=tW%?kcHcy}?aynDrM3
zPFAyO;Ekw#vdF{5<i4J8HNbw+iP>lkRVE<d>O#(<6Walt>2NdgwzV8!?$HBKnW2CN
zsO)#eEai#j%rLj=z7WMn&PEMNBOgF9%%Aa3bGbKXX9+}=!;{&54)rK;9!}7p&3^vd
z2CDWGOxzu)fw7GX3ze2W=K~!>zE%n3+Zd#?5k*KtI~2b4;84`G`=LtE5F*CG^wu$#
zbg5xzqf(vs4KeDuFd8SO*3#2le8CKwW2AI?bbjMUO1s!U88H53fkv<82l5cqNPYdS
z@NV7@fY8{227r)gi*lLx=;~7j6%wFFRIqr9bp&$m?_MeF+MJVpK(hRy0{1lWR1+6o
z)zD9&G77o@{Vm4eZxu1IcA=Mo<VLdP9^6^_oR3C%m}QWcN_d+$h2+cPaIhjFn{t;C
z(2@xlvo^q(D@PMf-qv>mK<gyv1_Cb21w=%k?*3`chv_`m$w1{nYtURW_30$H>ucyv
zH0Z1xwPuk6<Tb30ZYD^9zCEQ7b4*ALi`WqA`fS3U;o~Co0o6?xc|xPv9xi(!S4rdW
zO4M15F<Wj`*v;smN_6pIT1Y4$;IrSeF^Pu<<4X{9^iUG{JCZhgU6h0x%;dj7n$#{D
zOF2pZuikN!4<yzT26B2XlUp)s`OJ#za1NU-J&WFW7TttR8OFdTJ?O6Q&|=7NYoxM-
zhRLGu{S5!4Q<Xr1DNEvdic|5Tc2C->&!qPUgHLF7dwrXDHO<HUc=Aly45*7yC6yq2
zr4;X{)|pj%2U<2ZVP+Cgt+eUlys4F2w@R(Szz-4}1WV|`D;_3QbqD3$i&Tqdc>MK;
zyjWq+M(xC$?d;J=V^b-@*~Hc?%5}gbV&ux4P-Q^MoGD}6b8>&07&Df#chRvr#yZ<_
zHP57?9re9~`z2rHJ&rfi$~t-pvmzD4S`(2Pi<z;4p~5N#F|{rmEjQ9DXRGxD?L54#
z3?pbrNcoN3Z^-uc&MTI|r7s)$C0_5W67uHZy=wevnD}9HLL*SEGyj!Q?-ZqhM;o2u
z4`$N8>oez>!xVaJ5x=TRm+3a9nF4{?O?|kp!P@tq96e)IaC}^zPd!DnS;%Sqds0h@
zQ_#_AQYj9DU%c9kc{3>V-_Ng&23FD=Np$-X&4Q)z8*uI;C+pYSij)lSq!|SBFnL%X
zZQ9r%d*B@ZXCE?vSL~PHddGrqL(0n^CX%~@3NgfV+f}6hZw5aW<KEoZj9JT)o>MDP
zjWb2aAwNR6b@nfw1*YU%A@cpyzK`sK!kf=2gZ<bPV&<k~dp)tA+>GZa@M_XWLPegm
zg-Ni!J&@Q{*S<h<m7IcaxAOoFI*fp9EScA&X3u25Zv|s1=4DQJ-L2zn+pdM}>>Ka)
z+z{Gm^k-al3=CmvOXwheVKyG+1O^uR$xqynkeKK5I@<b`Tfoa05&wzd52lATbHE`!
zxdO@o=Uk31za~!n`9mHqp^`Jy{@a#`b{awu@m&BpK*qmVqSrz-2-}jcp#Lraj@#~p
zqfWD`jFccTP>1)8;aN=gAO_F}z+D4#b)I7j0ZwaSG3tN)kDl(!-)E}rO6_Ob@v8tS
z?I;3j#mu%V^43nN%-=$7saQApChs{##Tn60N}(EgS&2{L4AoY`$QZ2^(MnXoNeuur
z@OcZ>hK2~OD|Z`3Sgb)dn))i14`CzfE!=npPw6~MgfBq($azNj;us|3au$Epiab0W
z)br)(kYxv%a@}WtvQ)mKb9+0MVCV6d+R_4w7e1j&%664TR>y*5jMrC-OPJw7G1G12
zaHYcwP1D&jFL04<tw0*3A#h!>iam>M{mxzCD|Z(ZCYF?(Hi!_4d6Pf!zaES}P^d&H
z2RA25vB%IkKx@&)S>l1wRcgT0&#r4Sh_t2TF7`BJc<iVh0u<+--8oZVxPnhZIDeDx
z2|-Wx^=p9cIsrI7Ub=9%)yBg$e|RX>pGwJtw((VpTYO7^%DS2Jm6=+%rVy-ACtH~}
zg$)H+BSOKB2OobKg-#no!lfrfml_0mWI_XTbX<{)aaFJ?h)2`?*HXAuSmvD)v0tuK
znpvDFFT0^Y!N0ZQPZgm`R#?m*h0qGkx$-&5aj~wetk3um=rZD9Ppxr0Y=LkJY^V*)
zHZ~+0FA19_)y;jXw)a`OoY9L7wqN1d;{s-}3R}s?SMSJ7is4ucgi0PB&30wk2MpFo
z$@s6MK)_O#6aH3XIHKQ1yGdqew4;<LiQ(R%y!;gXI5HStK8_6kid8SpGvj<lC?28l
z{+$t~*8sj>3wRe_Xrp&zs|!)YHz_aqhJ@ZQ4mT5+>Y@8WnvDuc9L~{+#$ZN55CveA
z<nOJ7r6m5Z7cA#ol++vp;Vtz5S)S7y;Doaw8t3n6_ysaa+?I)R6Z!FMDk(Zg<^N5X
z!_slLri=xf(5Is^FJH2<8|SrY7hZ;vv7#~WGPWoauVaH3pNQEh>9f`QYBOAILA@8v
z8NS>}@G$&6DX2I{jnlLhQeWa3gTm-Yt|FTppT#pEx)|XL<Aed;emwJwJi(fq$EL3U
zgb<&_%qV-BihjEj?5)pf%Zlw3mbxFqAyPz_ML<DZ|GxSN917=A@uYhKb)P|~(j}1T
zW~ozZ6LZVYZ`;GLE4>=Xq!O3$-F2CExsfo6O&$4bjv^MUp;e>gFJOBDQJ55K3vcv~
zH*dAzkQM}=K-(%jO&W_=I4@dn`N>Csp8S$@zmZ(#=PW?2C&6P8CCxw?a3b5)K!*8F
zYo(X1?6<sSD#i5|nFvSy!#k$~9yN{VDnhbWOde+xy^<mn=~>!($kWIBFKh@72*(v;
zf7QkPSxF(+PTcFS&P&s6&cTt=@Fb0<@_JxO96uCft{H|w73fLhTH<^MdPE&67f?(X
zQ6TTX7KEXD?PQ&N?3aAO79_MXs*v-gmw^~>73TsTKz)%|rn7{B>is+$@YX9`uOS!n
zJjDo5+OH#&0hF(H&1O`V9N=1fm?<8u2;wuf%q5s{vX3SZN$JAX?+LI|MpP1lmF90g
z&ROji;)m-h8&TVHj=L@7`{3Nx^!#&+RBimbOgm%EGd~P>SMaqHueMDyumBG=5!A}P
z^1WG~y_Yh4$HP(&j<d9cLmFG$D2hsk<J&CvQ%{~duey&uTmuan9A?Y8p*$|YSepwR
z+0ZGCeoZ~zqFH|KYeg8mvS1&x%>LLc4w>-WsRNl`J($d&4k7nnOde2E#zh(zO7bDy
zR+NwKd`(ETche)yk$R0Hozl8k^n~!zGK@LINIE;mbKkbIgo~Myxj^drw9!%J5%J0m
zQxHIeESvg)*J|TSg|G2kyAE(K;g3bh8kqQb0(LI?%w|DY@-y!&62aSme6bt+T*gM?
z@X<fZ2d*XfLHj#2g6SLOzutK;C*h5s1!H14Kop~nAS09Q6@b-6dSLM`*KkZz2IwLL
z+8!{u(D$P*Ckd;Estb7X?}bR^yyOxo(vY114_~R{w(5c^p8j$+^OUZXNgE~=3;<%c
zDV8Gb2ma3O8C+CpOvS}x`_@Aalln=iptYQ!6uc@J#Uqqy5d@9E+<z|g4?eK4CMNI%
zN@_#hhnRc-n37l&>}*bEQ&#jCqP&Gv#ieCN^D#_e3TcoBg4508Ls`F&EaMkB3R1ha
z>2C{7tl9ww(a-q+d2jXGNrFWSPk)G?M`7jO-EU~NkQQ&B+svqVN6CD^AQqtLPRSFt
zG0zB@L?Ho$)5m~fr7S_>=GIY5Hq?Ms@z2H`H)gUWTJIhMbQfmWoB)+cnH(Zb5_G4=
zmTPg)mXVBZTt%m)ZJ#E&%y@yMgs*ri^dLdiU>rNi$YA3{r0_u81S9$KBi3_jxAEor
z$`)>gfX|dmn|he)SLAC4h~8;+*4Y}v8Uz8k4=8%RQS-r299GqCa(}9$(U+<9Br8R9
zBv#>3yMP2;hxW7LoHrvTU{T`+==C;*A$~WF<F3I1SOnQ1N|Z0bJqX@Fo1q@uWBWb4
zT?k>zY{w3m)u518<gBKoSBcZCC9-kH<}y#XHHZrL=!5v__BzwXPGDSk5mK}UZ@kxo
z&rkuMg1a7O06}&Hx>60tKYzSJ5^uOq&=vHL%j6Y_UF#lBBx%toEN@lYxz-$|)+K+X
z(;PZaZs<vP5d0pAa;;X{t@MoyyC}Js%28T1O|eR+Vw<(l1e~g4fc1@I=%)9ec4oz#
zWtb0jre5(bKp9EP5+&3=n^F7n#}aO8|Jvi|WJP4nJN&t_{Ppw)bN&D;n3VVi5U{f;
zaO;Gci2d5ScH~X3nW22o<Oo;4&G@ZuOgOk*&nz?6Y@I8405_c2?0LGWB4X1jXN>qV
zNpC&4BmE0-&S7N2l@nc8axSonGl9C4;>23XkVXT_v&bVeu<?ARbR>SwYQ0LKG502L
znZto7o?&r2)j^&Lt;OrBosoWQ-^a>%?!(!>HohWOCi6xTX!ZNex$VhWO}*zu)+_2&
zGR^PRnb;un?mVC6_kD8G^-_oKX$CMZZv2QOn`5gS;9;qs+fV7D2vYoCcWt`St00gw
zlo|_HEPSgc@#RBdESg;)fcxT)S<{oNCE`v}c%@&NNG(qbHiPYqsAIF-E+bwwU;FK7
zS<7PvQ9o12-IbVep7(0~2SiAA9%d9C=~!77Yj@rZodx`8wyb}Whd$rF3UqZv3h(FU
zz&`MBim=;vGNml^8<teLqkb@@Wz+%@6JwuQt|XQoiptZSs&jc5khXnl^3J5yieTVz
zTyErSj9OzB<;x!ok=M7zNiPL_HY#@#D)k+Bjss7P=A?LoljYnixj+8Vj@_o2E^Vnz
z7AyZ+w8quLX=r2qq|Eze)RTcivVe~^XFw%zER%QvTJkcAWhEZb@}PE*vBmN>+Jm)s
z@v8N`HYp#%v#_oORW;b{AQHGMz%{YN%iV{QTz>!+=k|GQwhuWyXLom*qc);&yYWzM
zQFO!G<gnJCw~&%x%MbtjG^OPPd_nF!L0I8FotY+|*O}?{_)Mr;9H&Ks+I)s*gw1?*
z%y`*;v6xhGf&&bIkTnhF*H6(sMrj1Q*J3C|?YEX|KFB7?X3D5?O2rFDyy62b0r3>c
zOE>f|STa%XU2`wz^3%F4qPG6cU4Q)73qCPp_j#?rm%=9;M(cGD;MFz}A>0}hd=KM|
z-cYBtrS=tM0g>qj6r01ec$zF=!=ay%+Sf=YTi?s}0D2(6R);YNdlZJ2U>F{Y=E$t=
zc2Zbea~ym?C7ebbaP8uKq$d*BmFnJgQLDWBp%H9!@uXFWz%uFfuY;}^6>b|O%jI0L
zyjf47$!Uom%@fcCLRImMt8{-1vlv~rj>!0$%Yaa~KJdM5gChEMsOtVkc3~FoPQ>2Y
zI{&lcH=p}f0G8GJ|3Y|pkj410C+YHOv93)jp4m%j$T<ufhF@c3!wbDy;;p-w6ljo{
z<~ZQP`muwcw~rx1ZN=FnvRS}**3o3wK>N^X;{Em%Ite$efCHjShxr7qupfFweu<4q
zhP21}f*F5djm%J%EUIc6?yrXA<PRaJ_A68&U<Am4B@V?;Fmw8r?X2+cyn{Jjtelfo
z$&hs>f2eSh!`Uy^1)XIJ4B$gB|K@@bxeEBL2ZFW7(l=ohz~M=-14mwVgg3fTg0m9k
z?%8%LbN6N#Q3I1O>h0+#qUddB%($rg(T=c*+;X&i75oRS8~MDl#J9|?Eu#<0brFzX
zTIAQ8G}EYlFR21;u}7cD=<wIfH_Ac`R!Zk@@aPLzHoLv^Z<fxo!8Z1C{|4N`pW&TB
z{;tDgCz)NJ$Bf5Yekou4K+MLpdLrkikhRvVGCYmn+uj*~nzb%DnbOT;`)el$JF5e@
z!(8ZM&lxGl8dp9&A-7z-pQ;RQrcF7j6=Oz#BpA1oW+8Ay#nWUMWhS5uZOY=1@fpBI
zHkEq&ldz(Oihl=8?gUh>`rhCPg4GnqnzfYPoF895UdZVR+((#)xJse$-QObrfVd@K
zdqFEzG`pLC*l@8JqKCpE@}P=bdqb66M$fbW8xq_53sR~*&^IXYf&6{q&$3OnGDTFy
z^(H~z#WLZPQC@8P7SDd#{vA3*Z?IG~-5pVIxY==ji;l#!EBVIGy2Z1(+MO)r=(p*;
z1<7rlOJ5FYHRX^xaB*mS6e}cXf>q19WbUmr>vD1FaXQ}YKqYrP!)au1!)IgvIhR;7
zGxKyEG}iBv%H)5P+htnH%dV1nLl3X751MbAT3!p!J1O4kB@)Mvkya(~pQhYoBnv19
zKe+Hj(9!>P2C8tNAEe8g>Xndc5WgwOVOW-znm%nuf@*=Z0`JWhBH`r2*%03%zuG+p
z+1Ga0kgmyT3D6+<y<3(<6&+<@x_|+LROOffri$aI0<!U^1iW=dl`)9}Adu@1so~YV
zVkZVBg>)#XV)H$Iap=xoM8NQCItiUN?EG_bMI`twQV$?p68sfk+YcPiFMr)~1cZrm
zi>m}xX*pzOf+4Pjv$c-3S;eNWNt1o4FTuy!LnTm&zX<Iya&ZG=eBuha7S|P}tRjXR
zyA4W|e_#|uthfkC|J$nHNhn`=iMFH#g-&I7e8f%5U7t8$RPXqvE}eRm?~^r)aJ^uW
z1Yagg?Zrxm_{)@cO%a*jL-1n&u0IHE&$eEMu$3_MsPWloqu@_3b5N%3L&=Z=uU8=)
zEG3s=Xy(B4ADn3_ryBDI3D%pk#5JlO8*?h5CBz9*Mbx3D7PABBo7$aLse70Nepp&V
zeF8Ku*HU1cL}xj-Cgz4~_F22@?~RRU7(XQ5D0e<r*|)@BuGQ?C4F39C)m52xIkYZS
z_yneiJ-BDws--B1E|EAjhV&(oRh9kT+yzEtz0@T8>Z)NFyhr$d+q5*0{}nE8V@5Lw
z6x#k+JNz0Nz*8pUJ5g1~z;M<7BeAA;Dgzo^y9-FRfqi6GkDm_(f?9K)_PU8;7v-1U
zD4|uv(4@Jc<c-KZC<rS7MgrtG8_W&ns}1E^JXEG6b_{AYBX`|Bvwj;<+o;unmbllZ
z<Ifp9)wPhN9g<^Lo_g9CQ`XmeVgi<QB$PGw-G8C4givq4Mo}|sglpsD<5+YHNe{UD
zx`8?ac;oa$F+~3|sDy7zQ+XB#^eNQ@FhfTMr9Z@e^pe0slLcfSc!$;Y<f5@8z0ua@
zl1jvb$!^X&+&PvK5AQhn4o3K074g3t{6tC<^*$qKp?TE}+jNb9KcJcfoS5rsYH!lU
zDgs<inF_I#;W1G%V|s4N!eZNO>C<H@3gllfy>3!}a<xt*6H_+H>{Kb_F(MQt8*CXm
z{g9Wmu31dZTeUQWc*K?$n%w%_9lv2Gl{yJ)1mk;T1IzwiX$XSi@)m#Vbt@NdNrp5~
zDz5aJHw}f8%b%+N1m!>}-JjPimAqMJoOgFh<f3S_cT%waEnE`mE#8Ax^OqL<E7FiB
z{EJ+_6$1}%fuQt^a45{rh5!kTD7V|HAET0^i?ymx%cy7fEOsc{oUOJyAn*mVr-xxb
z8)*a>d(t{@WAMIGXbNq*YJCj@gP*)s>^O&7PB!i*0HU|c)JpxeifcSE>!*2rk&jwO
zf)CczBaUYFM9+ajR`TS=-U4huDXkJ)&H>*mQY+xFON7U?7!os^qXD<tB2a175@0+8
z;Isk)rV@UuPPKlAKL9L(0^7x=84$x4TlL2#Q!i2{pb|R&y!3To8g{_aBf2W_<IR`I
zwqEydM+Pe;Y$#TEWk1_S*h5vHmvxI1?yRJ%MJw=FpsqclCC^3S?=l|zoF2z;n|*EO
zIHVLX<G6V{U`s3MEWneL<NSMpbTWqXNY6Xj8OI|x47^vw3a)gkk~vWEf{1>Oz(*K(
zl~C{~ySEDO$sa({inp5784qI)EJwqXN*`a!9k9ov;tbVnfS#&~`1*N-3gqcyFg~g_
zV8x?dKr*}IA*eUR_`v3TEoDK?{@OPUbsZ{=N%a$FOK(4Aim0p1r6Y-J0@%%p?dypW
zBs}p;DlcOd4_Q*;NqXtIjCjmrW%9yoT}umV&IYQ3tL+IMY@%Nc#h_Rd(??$T@xO6e
zMH{=<7eaos?aRgOq4Qe-M<qCw6>rAE{dsjSm@K2P8aSJ!0(HrFkFukSx6CE;SK;}2
z_b|3+o)7uAB5X5^7Uf-lK`8KyngCv^S!)$@LFVy6tupVrQ*bLhQadz@y(~{c{_|_!
z-^f<hWm9oy|0Md3&%>?_Y>}720?<CDY?EA4OfR??qqQ8j*ae22KyyQW{B*rHbBL#%
z(>rxyrf7h5EcDT1@^SN@4kncIdmkk`ltC=7sZ(nBNkcsK#FmElJzvUh8n)ABPdcUe
zSkTUlI;sIy!0P7Q%Qn9Z)Aq*p;IqPP9LwwkuqLO)NklpK&26zQRbr;t(6xyIJ)^OU
zRd=`nKt?$&o8U{*MuQp66MvKQi5!nP+#zv@IE`V)z8P7}7E>PkB*KVfQ#RIin15+(
zVZSGJWKis<;Y#a6E%;Z4ECsp$=*Vu@TEIs(5zaV+he6#cu<?5ICEMArzOR<H(6+YA
zN)=})Ao!$RPp*Jn%Hs!J5RJh=bJKir$|0Hw-t4FiXB~-!94nznm*xnu&@0Od>lLtD
z(DhX&ZoK{3CZ7JLyh!BhLl9PQEkQ5^pX&qT8N~pdicpf#o8Eu}+~@V_Jrz^|A)9;C
zDMlNy{tn$p<_g8rLX2cI_ckDyS7|SMB)<6zO7zW*$~sc0TD^?jxFw4jY_Spns)P1V
zBf(~*k$Bn}xL5nZ?BOFZI8xlSE3X<QG*1|ewOJ#{@9N|%RG>_G=8lpaJUL#EHk}za
z{g88NnE0DkW!^c#CBfb_t*I2z-wPU`=3b!XzTV#M#^equq)muSb}gtH_8~)-*87TD
z9H_*40C(#^pAKpMf&MHZ_ey9QmEGwVq^QSnyJzp4rLnpS(6Zb~|3=eiHjkd+HZ>M2
zNGrjJg{OXqAhf7sTu(Zol>P(Vg{^#`peDv%w<a6kEy}`_pbjVMJ7_Kk-H{$uzT=}r
zi2OT_R)RZ9DC<U&j7>iEz?!5W72|8o7g)h(UKa}_8v^aCq&aN;u|M4{IS&f|lx_Xw
zr#@ModJ9fIqILWYsLb=soKkM|R>UpDS6Z;(*=b&A;ZfLd9AqGtN*=`*7Ide+s)Iv=
z*?K%M<Ncl2SZcfY3a&xO{zc3x!>))DsJAk>4(_g!Wp!W}m-ag2@HSCHfd7gZAJTP^
zvV!on2iv7w$`&l)T&@myez!#ZuccGw=tFJ>TyLoAJEylDdC4%e;S-~4M976<fE}@&
zPU1m(ZT>1aN+2b~)`H1Hxyz7*<yH>72+})`l{KzryBK#S0UzRkW|2V<;LL7vE5^Of
zyEyCz|G;G+dKdFLaRjR!^s=Y!6)T|^b3ku$q~hy-&!U1LTnlUQ_fbp0-#^96Rf)i8
zets(f1*ixWIfOQ#ab53E;DhYS`c6{@)rmhh00<p%8FiZ=d}YHf>N#^F<(9VGPT3Wt
zoM+lU%uW|M+_Om?U^(d}V^K><5V#kh0+|bom4CW|KmV)ae^{gZRSL~*-fO-C`yJRk
z10qu^V<Z3?FgqVPPjaJE?O0VnJg~*fIwU=C$-GYKcMX^r_zBtyLgl$m3{1m2<9Jj!
z<A*AO)zj{T#b*O@bHCKjxvQ{=365HnYgYLBfx@Bq8)LN~k_cU`tV>->#A@^n4P3c0
zRc%8HmgEC38^%Q@WE5GyKKF?Uft|pfh*uk)cz@SOsgJx&+$2IX76*+offCB_C=gA<
zCEBFatn@5XJfs!pK!C`sZyq6b)V&HDK2KBE@SuRU!Gsa|s}z7C9~rT75cKX#t<fNo
z*tep`k1h7Z-V?NoIV7uH*WO>UPgN(#ltCdKN@=pv{ObGG_rPblMnxU!d0`D1m}&cC
z;B&P;S6NQ>Zlegk&@dhKePs)EwFZaEApknH&YeRjQXpkwz_tL3%{OsuLkA6#opEC)
zq*xQFGf*8Iw|h`p6g^Me4ytG)7$?P+1^lOv188NZD@)V|)DqD|md99W_{;t9I^0VD
z6ZTTMK-rP<X@fUnli^C@#RBjMxSFVd!ENsf#7eb;^Tk;vfJYoxiNaPL#5~aGjNYC8
z5OjXMkp6m&ZD`GTuC`|opF=)}K&FY!GatEF1a{xf&9s8?>WA^GDo6gn2Sj&$I$`1&
zg&g-LU<b#jvRKLbBf)jdmmS|0-KbVQl$SAd!T%V5P1M2sCI|3+4<!$K+fFIpVuOaK
zwpa{87~O8@^YF|rS?Pxg13>eAacA85DNs~ck*v+}C1WABW04Q-GDL%7K$Og<^>Aej
ztux|t(1E+4#<u733}w|id9(|vv%V7tbzf3etwS-!H;)(|InAHJb;Z}T3`c5Bv8Zz=
za?Qv8sX9*jkP*qj5dZ2wI28X&`h6<Vv?XZ7pF&*_$IKvsLr@N`7nsmyr*fwO;4nep
z^a6!9+#>cDEsOfoQ_>CN+6Ea*@Px^?;n9{0^=;Y<v1W>=6ajQE@aKr}Tz;t>M4_9H
zp)TDl1JFy!?;QtY;zN<{zT=$x_Cf>7cMfl9mbiUX$7^j>HJD5^e%wCKfG~b8mP6e`
z!X{c;_|dtLyW3Rlp0%S?xj-5`Mv7RYL^MPX9p7<%*95kKj`OUfzaOI}F#ceC>?BwA
z_6mT=9b%(ozyV%dDXjRI7|DO-TV0=<eBqNpPOjaMTwv(L5ZoZfjQK`y!Y(4fUDSsG
zsu}sRUcsHRvS~2D_b+5ka5tX3ZPE3ZcY*<Gv4wfBA#eh01Wcs(8J&G5I9iPxI%QDG
z=`aBD-lXTP=Yf5lDpc?IKsKKLK<{G>1_i$)12Bqu+O+VAcJHL*^P|)$#W0%pIbD`_
z%%ZTS3!^p+Gx8|3XwAz+7UqwoEwx+!&jBRx^v23>O+^BtnEkh$CfT3emb*adir=$t
zSIyP_haZjT1Ax@9b)tlvi*Q1^9`bI<MlZ;^26(2}<{&+lJ&BQ>Cc54jx5oB&^AFt(
zOZP@Af>izwyA<7wCm!%tbkxRA2e}T!gb4V^C`<8}FQ~)e{;ec-u}G<GxAAos0pk3e
ze`yOHG*$-iD*eG;Ov7`nK`Cf4RJ*J&OH?V<Kb6(^d~!MnZ&XTD?dXcZoZQE@-rm?2
zdKzGV^8YI`&#Y3Dr^~k%VFEEL`cNP|QsR`m{6jQno}W7Uz#WtmkBB&f7_>j<s9-4|
z_V~CKNFk{eB9i!r!{xc8^TvB@#WrPN)mBVGp|yKs+?n{&;k<AL?9&XWn+l5Q5w(X=
zLJ-2!iI`*cYmbZK<<Cz4FJEU0L=aqnQd=Gm;WpUWm6#;1WA)BS+CL;_3(tEKgIVma
z8qj<oI6p=P4Tfmg&Fz8^41Z@rjW|Qu@1YO`p3~-F=)s~(N%|RnGV!6*Q%^^aOEDR%
zfTYMNHF;tWRS%uYCW#L$4^NjgWMc^L=J2)qk~sjhz^jSq$27OW{cqf#1j%emN*(I+
zUvC0EOxe}}z?ak1eToaZ73jVRncUZH=R?kfV@rt2NJTZ+vP-*{Lk>6YX_cBAP*zf$
zw#A^V-yHr}7U3<FXla3kqj;%1IGCA`b@**I;&ps`xr^o4J}}6#|Fuy{*@joDFF#o7
z;zV{CD81zIo}RB>wW1FrzBYKZIrmP9D&)=SF=Ha1COJ6Xpz*TjkX?W3gtql($-e2{
z-vGcB#{{N9P_mpXn@c;RBTUCWoSFzyR|ZY}Fl}}51PUV(DA|=7#<?V$41SjyI1x!w
z{AsTu%-`_hxP0RiA_V6hKoz|-xI6K?yyKh{9PhtMq50KDSslX?hS(Y$o+R3<{ffV#
z$IN;J_qhULR-#jqw5*j4UFRnzbp5?iBaUQjVg(LASeRwU@5644A;N6&SyWTn(l{Nh
zsE$|6cCH9M!x^oUXjb`0Up``0<;2+3Ex@ks?<tN0cd>;(=KY<*8F+kG+pL8WG{$Fb
zrr+8G=6{jGetkOt$8t)cNS>!(F!ubHWvo<9rEQ<8Qxv-LzDo`B(Z612nl{BrMKl%p
zLatDVhSxNew)-DfDFJjV94Sz55{IwdvF9<3lqFztH$1>pCoT;=HtW!uN-xX2iG~##
zl@A18&kLWYbU6tI#ijfMx>cWP9J+{(FhJ#)Fr;-0RLD_rIl!~^8|f_M3$+X+!Si2O
z$|2WNxcJi{sZKq7S##JUy(_-?Z#SRb(d|MPQEtkeOD@GAmqfF4%vdnpG8!DynNRhf
zN0ACaR;8_RBt60A=d#AXNnr0xCotI=x@!$K>KtK3cXRE~52xQE$T*gr_X>eOhG*!g
zeJXuwWfO(fR>Qa$TI`lRpIruSF=4ou`F3K+d;8@kh1(#O9Qv@fDAoK=s$m>V94&`<
z<!!^#`s<Oih}bX?Rm8QAwnn&iqa}}<WcXILS6Ge5n5~@W4PjgtkeLfjo!jimzx;69
z>T`99VkOFzczQi?6gTerXX_u=o?e{?<vZzamar<WD01#<lB*Bcnz|8Nw2VqQlnzC&
z-_-|!nuK%ueql_Nvv@5pPmNa405r5Un)j#2Yg+80|A+kFeF#vmu1paBhyw6@r?vts
z2A>pmp?V5+?|KSCPe<en&3Jiz1kR43myG(lUOotEE+!Qj^eekVbXBzcI+@+>{T=+k
z5!MIUY9oVW_wBS_9;tP*JlDAd9`JjJxktoFpsEG)N7rHAn%x<y_4YuZjp_Z9*fCS@
zG6&N`&*#rh6&B!V_GuRFrI7#$!JTWPa*`7(l5U~&z!YtElsWds+h&M#<>xQO=RgiS
z%KwWO5<6z53uBfzQEnv^m?K)63yrEG^K&@cx6I9{r$({<8pc+(yy-c~P$LB|zzb`u
z^5dI1U<A_r<!=)t$Bi!;#eR|n=bk`N*nE6J@jXHhW|h57v{QZ4dYT-{`t=6X1+X`m
zE7d?EAwTl$f>rNUxe5+Ix!ULiyS{swIZ`}73xxC)3kZt%8_Wo@(Xxop82<ZQ(MGl#
zwMU*eW_*V|h5_0nYYndg`$5leQ3#gn75_)8YnT~zZ=m>7xmCHJ0tA}!@%`k6=}S<R
zY}YF7&T+f{R{iew&-C63;<d~v65dm@R;ob1)~3=2_#62cqVQ<I2MH6+L0SjjQ;;tB
z@J7jM5UwYk<AMhgrv@HKxTlst#wtU7#A$M~|8;j!V^{x+DXkk8)^&Xq^i#+7Rr)Fx
zYI6%3>G~*3KqTML6eAKcPi;;m29@`r>&fFPI^L5lw7_%KrFP7iPwCb*ZG8k|C~SEa
zC2UNs(eheskP@K5<Z*>=OJEz9D`^qJE^NWslg%{8@`d=WnXl^9r&AoLvtOu_vsWs4
z=3JpeyN)%m<?avWo$frxyz~a>$BcILZwDBzslEnUR-?=J35}VWacIOu0qC%)u1d<5
z*RZqp@SMU=@3^E}Mz^%oLD@Xqr6SrIQ^DYI(G8x=lm{vpUZ)3Ri@cs2C`1^ib<?>@
z1pII_cpA2Oy`(sBW1R6a!J8<eODwE;5~DdwJf$5wn_6-X^mX#Cj{$jrsC_{Iu#M|1
zT!q`awqyxA4)-&A)y4mt6}_pCrXtTWC3jpunW0{mlCvMaK<&^IzEiOsX3E&>JXjSr
zKd+m`Svs?jk?@n27lQ`jNG_pq1MF62NJQ4wclnZOW5FwrZHUR$%$xkvESrBxui)^h
zXsQeJbh|#m8MWyhf28P-rH1G(5E;Yw%nVuWd}uc%fI_|K1dBQs*4Q`>fxvU`jvMHR
zqQC*cW?4ifOLIsclTQPxniNW;K_CmcwS&)RYB`QWPJT**sb<j>m^<T@drmBf$QqnB
zO<|oEnrEyqAC#EPWfa|xDAc3JERh2n$8+&<BNBYl%oW6h=h^=dXwk-}4HE~w@O#!i
z4Goesc|Y!7mOBxRS2~_J*uVu3G+1R^q^K;pGg)PH*R<kWC5v0y@2zkI`7DA`dRVmJ
zd#~Y`(RkkRz=ZxE?Cp*AlmHLh|7W$gqD;Y!iMwaTgjW5n-L$FPeCFCD8O%2HOR4iB
zTT4NaW?kY7q$LbH<+m;#-GPK$2-A#=VmB`nxr>uPbU=%fWe9s;F-(Xugb88YX!Ag<
znRoiE@=}WVrJ4GS;wRFW;Ek(VWLxv~RVo3|(1rG}bP6p*axR%_41O;N9FYm3v<-9J
zeqJ1`Ry{#!@5H1)F&^TWRm86kD{zm{%P@XfsxCJAnpyKYAzBx$#I>g|xH^9>Woh9I
z7M`Vq?muycx#<W@8?<sGiYY!;+%!Luc5yq5?#)+tV%(f-5ys=FzK!5M*WfS6jl#n$
zqchNAxI8#76zUg?B&LfGl22-IM!GxZFCKaCFXlzH7RyTRq8h8!>NcgSju;^<1swT*
zZ^1wwi?_G`ReaZNXnN^rIA$b%&tpQUG=U1k*6)I007FcjB8F9fhg@`|4GvK}-3n;f
zVhTUX>@a;t1u{2Z3aM!^77bCx0kOS?Hnl3Z^4)8r2RTqcU}IxtEPg1t7K}TVQN3*p
zQcAM*&nEp!xPLPY8WJ$fmo+DFt3s!kCNCyv_yNQb`4QcAIz+MZNA0N&-B<{T$BZ?J
z|6H%nv<KJpG-O$;{3VHt4(NKDMt3S(>_{p*gh??L2cnd9%8Ya^Meh>_(}P8kl`z(3
zUWsmqsa@L_$p@0j(}@c8G5goc&gr{P7t}*;SEg_k_N*~%>@WsxCG67y(Ythy2BE4L
zWHz0i<0B4VCVO>!*dDj>3JUpL8_DEP4LUnkGYKrJSI{Y<EA4e8Xg5O0oj+eS20Jy-
znE)IrZTzlZwBMxJ)n~LVbPvLMzlgFrnFP!D7c7YIC58xi1&<A+@+*yByC*<_bi@lR
z*sh_b%cyG;OSIqOQofwa2tP)*g|j}gev@<0Qrt^UvUL*HvtraHy>+WxG6Mt;&gN6o
zGJ1nFsob4)^?t;1GpVdiXMOU;$17EX>TpFhZ(2rQTrXQ>bgx@Gev}o3P33Ojr{AI(
zLd3@cg+j5C4Liu==gz?|FcV)-d_zi=;<mL==0)B0{$bYI2j81<P*yN1Fe6Zs-Q%?x
z%Lrh(n3h+{AS8oeZ3{xv*Eo4UZK3NMW5^`%c|1kJujwN;Rhk)hbeuX&-*uXWMsDER
zM7P6KbN<jZYzj{4pewcGVfs!>;YncYG3A9*DXwvbqHsv>?s5>y-Y!#7%4(el_vz$j
z`821sA7(&M3<F6{SZ&<eOkp6L;Na9DKQ1DisXzzkgYqyyz>aTm&ES*x=hrNG%(~xh
zw8j|SI4}zAPb~Y(@0ExYnhh=Vpb(Os`-JSi2kY%9Ln#nRYb|IGTNPeVk<JP#U-gD_
z2$WFVZ5}-lYm(qlk&zW;62NPyBYZx^8OL1;<=U<HR`}@lKR|s<oSq=0334AR9gQ!e
z5mY=ISYDT)i~aPm_3o;Vk`dGFIBojZ0~~|xU59}$m&36kzde?qd3@pv{ylpH=dUeh
z6ph8?*K4+^h+WbA!!PkIu5Ca@wDac6S=&6<vTprR+2sbmo59l`lye(bN+VlcCwfQR
z1cBrvR9jMt9HhI#4(Ua@Jh4y>4eUP+QvUMS{FeEh-{i1sgYpvx1QfXE5@<4C_FO|V
z%X9)x%OIZe;xU)%;*sIK0mN8h&t84VX`zp5c1F4Z7pS&P5iVWZzH02&x`>tuSqcXj
zr+!tS)&=8(3$_a^qTU$7*nN*dRF^ipz|%>>stY1V799V#4N?}aOoK+-bxUUWA*O#P
zl7X$_sq#cgSnjJtOqO<HC2Fc`799fX1FM>7ht6Mik|UP$4B8=ZZ5UDXWB4D!btVJ#
zRZ<8y#i3z$Rekti`Wi$@A|f`}E_DyP!h2D1xqMCbg|jUO+8*=1@gxrCKkKrC*zWMC
zEtCN|$hu1H4d@WreKFFJXw~A{G+IfbfCod0BYA;*|80@nj$cVnBqtuwkn6AbO8=iy
zf=6fE%Ar;`W)jvn&t}PEU!j7;N!NGjxb<q~uYod>J9o6<qd8ueo*@)pg^yebdH@Py
z;=g<UXq4JoZ0z05>|-DH+^IO*pO|S~f(16|zM}eShz6W@#`KY{U#>_~q>YPLx?gFK
zhNLfIrMaZRZj`3VpsejMAhr?XFxBFWE>gpB<dd;%Y*si9s0?V5xduP!2W|1pMafm2
z3cV2n0c&(1OhV}8Q@AW$Xbe&@6*NO>5$)aqd^^)Nbl9HMrWwC7h*;W<8%?jZI<0ul
z^6;+{^^8nc0R;V^7w>2ZXLLik;rihH&^HvpTMX+444M}ft|6i#9PAShON+$h4buq%
zJFi|jY}<dv<8Z;I;3X$JRCZ+vZs}teuK`MQ2rsI{1k=K_W6th4wqLT$Sn1o`B6m~B
zECoeny#>ZExqYz``7tRsKgN{}Kp^2S{#<I*UTMKN>vYqI{+yTxfpi)e{12kGs47Qm
zqJ_yx#^AaLi!ni?SEqkvVAJ|+v9l^oKK0Q+Q~h>$IZ8^3>aK+CG7#~KC@6$qwI|r0
z1iqg>_9Vj5txSL^*jU5Q(ssk+FOm3eE~YQLC$*{2k=%I#IqxTXN!h6w05~tPjq?yQ
zmSfZC@bAC!U$JaHz02)s@!ss@)d5ZQMEdGC3V2hs;X<AS4iTb1dqWaSa@zn242!M)
z>0rVm)Dt)NDNDgWN_1N|-$l7ckh+$MAVsIt$(JHzpDl|{sAbx8tu2Ix!x*|EYs;BB
zw5(`8JX^3g8Zuh$Kn12of3U{&i{wnC1g)y%2!DA#*AtC{!=>?UdYZw>wG(zA#EAG9
zP{@{1TvQuo`&+Sh7KPD&*#q1!S!L5@IgxS|6%cZCwW_Fcs{q&fx!EX=yGo&hL<WrV
zuML(m!FSiphN@rt<`GjDK1!IBXDdsI_Us8KT-FiR779BA=&Adh#pJ~d{9yt0dka%V
zDJZ;gqSh#JHJq*HyK06o)+T}wq0~m;g9f9+ln9v&FGZb8_~c=KLJbrwy0@#()f?;5
zuI4y+-jyoiD)Z9$IuNk<uxiK67eW~N^t*AnMpZRwTRkE%;$a=$EL5le6*Sp`+%};5
z7y1$Mx<EBCR&AQM4uZZX@9p?pQh==xSMk1B?!VDnXodrr5SbfWF2GA?8drjnkhdve
z&8l#`DO}>n>t#91#2%Dr&_2}|0NJG|J>aG<$jWw0(I-2^ncL91N$NnvK}@Sb_(-GH
zXsFdnKT<PWj3a7pA43aOV~dOasC~6f-f_BYybn+UJ&+kb4R5&DwGubpjy1wly_zaM
zXq2{=M9dmriECnL4ph_`u-cA?Esz~Gp#zdltz<olry0J0e#Eqc%5Fm7Y{D@j>JUJa
z)ieL-HkW<aKY>y)z<>wiD+3M5?VQ-J|E#0wdXZ&BTR`v)&OaQV0V}iMZ)oA*!w)GY
z?dNHE@kTDyt|z9`vNK&2gy(a)&`<8{8#f%_hNSARK*7He6ZnTXldH)ce0EwF=l;pF
z<@NK+u`bzl<dj4st4to4_d)y4Nb-<0!A+ip^VyjIObZa?{{n4d7p=QbDjLY1Xe}C#
z_3HGBJqu3`f!Pf^G`XyQAjall+&U0%-J)Q5ZZpX81yvV1yq||_?FgyDv|GG(Iy$je
zdU%YIc1H7Oht^$Q<r^oBJayP1roy>!@hoN8!!E5+0tW4&IE|bTaWDI!5BRFc8AhgW
z<UqJvUYaREJlG$;qh}OIXLvnkUa%AV=79-A;KO!mhRlA89($r-DAPI#+Mu;4dzrtS
z{ucj7+;aQJ@4`;f`bYT<o?-^6+oiWU5Tr}86hKw-ljJ#CmoAPbQRq2StVjeJJQltv
zmpboTm<f_%!xZ28$?Et&M^Nc_lYeOD49+p7yJkqbQWTVkUVRB*#U8kgqmV$VcrhCR
za1YLrpd!Uij@vx`WNxu!NitrgiNC@-0VmtJmP|_sfp|j4FIy}@jL{cNX@j~W1krfn
zu?#+EX3ao+F+dc<kRo@bPiR^wu{W&gEg**tS<%sNEMOiK9h^kPTO&zW*!<%&07ZR~
z+7WL&5BOg@39NrGGsDJkgafkZus5od?Hlvuf{>W`sLc4>lUa<GiCRrRH1#MpnG=rh
zuWbjAwJ!vqQi^<=8_|xSIb8`bMpo?aMQv%EurvIT+BKkWc_&*|%u?kTauo^()@>Ck
zb!b5qZ~2_O+6U<|+g#;{TJ>A^LDKn35Lm=0nsarYX%4<2rRSwuyn;z6JeS}|JP4DG
zvZHiK^JySSp9A+Ypc>E!Ixk--Ah$t$s$!@PjLZK^<t@J?OQ4O2Nf#9>aD#0pVoE^h
z!>Gos{a-ZHb1kei&;yftV3}r7@s4CsERtxva*VQK@;}QF(187~1>tc!gtw~H`^i$>
zS{1aiIq)L^d5xUHTe17*P0ONy#4nrJR!uI+PI4W!do~J_ilQCGAHhu6m`<gFD9A|^
zo@1uNZ@;~KDP0?3dSKbrz_ZHiE8eO9*%6D!9T3Vc5`Qt~Tb(F+*I9csTOCQfnZh-=
z)KjJbSnme|iMbX@b>HwW(H^PhsPt+D37<!0>TA;-JpK?^Kp|VWuGGV@%QV8Q2z%Yg
zvo!`n93)YGKN_zwf&ESzCv5+4KlR9WP6mc;^98bHn{`@rw&-m{+&ua2NpmxbILBD*
ziAz@O$Re(9Z+5Go2MoU+V2887zRMB%kk?^RVO0W&717>_z6;H5{|Vke$qy!JeFBK`
z4jH^mA{wPSx{DdQh{~~<X?JO$anGUeAJS&1=xzu1y%U^qW7z~m_EOkwMv@y`!BZjH
zdb5kq*5<7dtsXDIokV|JWiQHl+y6)~nIDgCTTPAAtvDw*=$bx~(0tY@t{Fep_0k*P
z7fZgQiKgf3R??94#6ZAvK-jHn{|S%80WuSC9k;g&tt|A2BbE-zjs5-QS1JP+9%Mw;
z$oL0<a!ZE~$kc84#a$_h^A{+@A$7Nvq?BXiUy%>jAkkO*tYcEH&IbAK-c~Jl-hu=7
znKyZ&W%cWE6Mz|g5>bjJPK-3lc9YzNeJ@-NkYeQ|*JS$npP$>#?qc89bh&)T=-9-K
z3V^Gpj*;7!(%ccZq=v2Ed#y0lT%I#F#S^mn7i0IXueuYTn-e7DOY@7`jlJ3?);n9h
zj+`w3w}syT_S$cX;6H<c(l6+tSQ^Po?-z*d3}9?FULWI5;2x@|{7Jp^A~9pO>jp;1
zNpB@9APngw*VjvT&CoZZ%sU=K2`Hatd2*Tb5Bo9YH`mGQC;O8_V;^@{gNgjS(~4Wr
zZ?Bzb8;|x2>OGj@#9@5jAf~Tuz=&hB0&jjO1iB_eBsDhc`ol(mf4<d)3<OmWy*wcr
zU8elzArglq>&Bo5L1wz^Wt`1kAMljgTLZ`t8**axaolelvN9sh3v$zTUa~m-G`@9I
z+ZE`@u8)N`cQ1#>bu%1UY-Ttj2QJQshhvbVI!j$ALBSqz&rQP3PSvUAWCanWDvU%^
zSwa<3bFtZ%)Thz3d}EQ+_qC2od;}-bZd8<$t{9c!Iq`s~?)>)NR}_7K`G)gngmN?v
z(rb;9iF3AHHE<ufJ_=iMxfM7}@2V?2HwEcP-_jZEzq#k`rpe15c;;ue6H;%MZsar|
z(FtPSyCr(y(7^EfnX}Q*BqmH~q#L|P-a_VMR$GDjc})ktM37A<5D(oT?H@v0D)ftE
zdp(#G8be(p>5C+_tt*x&ZogqFrksUuqe{G1CT}kUDSZoFjv@#D<sJl(Xr@&&;$E#x
zExIK&_m9xC7%7q|u^Vd>+<+`W-nMWJl7w!e^B@}%YFlxNYN)pm0S~6nG$4IIiG%n-
zlNSy9VvHuyJDRY9jc~x`x~WVbUt)0eQ5k3~ifz(xKiKcc%Cy%$ih}}N=n@{vY;hjG
z@2^}451_*g7ex`}V=9aE1MEJ!(cy6fTe#B0=rP__$DvLAk_Ph7xMhz-V_;<fv<ayA
zgjck0y_BfPrf>1McXZ{XdGn0k<@@U5ZJg`*uk$<QU|QW4R#KgUBWDa{sWL|Y8--T=
zyB%i4VFaB)rYwCd(zn+g0e4L&8iZFsL9&je%z=KRzsd6-QZq|Qf|@)0x%^cwrRVXo
zIYDqUqAVCk=7PFWM!R7P_>Km8)C!jgWv6jNs)99E{GPU>`}v1X&z86*d`-ixPw>z~
z?^v-G=)E}h{ww?lyR`D>m^^2`cGB_4p(Z-gDxQf?(s{hu{*|V|*r`t9Z0<36$d7eB
zE>0BlB+5@?D<G(}JF>G;N)3RSi+D1b3SwZU@;ncZ!!@P7L$_~jxXkiMl7NO=HpS<s
zfIGlpq8z7IY}79S;NBRy2tn({2T8j|?=2aUMW=C4H%G*)P_X2e=kYG<9~Cy-YCZ3)
zvUV@EpZ41-g`nyM0|DsvHBAtB%HdqyLia}as!T#~!0a(g`6Ipa^vu3L%*qL#N<Cq?
z%!Hz940C)|OP2UOv>Yts8$U6w15H-$CiP$&es_vK7N{AYDxKx5L{1Q>8Ho_AUchyw
zt5Mf{a`PYbofLT^^BU^S7CS!@y6;S`y}j=oF-tu7BA!>ieLu|LIhoj!vu%)PiL50o
zT$4<peEta(y|7jZP_g356s~<yU|n0C00ZphbyD%BY#(A>U8ANZ1U<Z(9E5_dR!3@b
zX6`!SU-X9|4}TCeLQ4z6(J35@Y9H{#z%&NuU;v~9DsJ&VaA&^orhD=7j?n{LUk@2(
zq2fw|#mn5fUNV>#0LZF}8n52Q!v<dZSaO=<k-627JS8FtW-Q8D1Ck?eeKi#5@zn>9
z=tW1_GeA;bx80>3)k3P3X*VcAFz~l@bE~mRFBxER!WbZ<nEYHW#8NquuCe#Zt||qI
z2&8Tv<lCZ)>yN^%W)Hj+<f*UIr5C$XvCLiZIbVxf6tI}BJHSKe%>f(}t4|cx2Q)Tm
z3GSh~cao2I31tJG4b<Q)N*%1>H$I13<EBp^I&-9J3{|7tDIY55s?D&91s6%48f)Fm
z5`A~(Xt;=Z12xdMUqe2RV)(jsnzeccM3oCV@2t$Qv|w%d-OKCXwl?>-UrR0y;?Uv?
zOkCfVn(ul6usZ0zL`d3GM^hGu^l&r#%WRag-;;b-2%!R+&YX{!ynWgOG4(8Orr7_e
zUazdv4~9M?Y*$pV+U!G4w?evr3;nEhlCV>(UWlP`znZqtGIfv~W>Pb?q4+W={cH`*
zWbcK?Ok=Q^wZz3#47V-Dubz}ByIJm{+1HI-)6{420{Nt%p$<yC89=jRIZ|OF!5KE`
zwHQ775&CHI@=O`ah0XhNVeD4DvGk_@Z*Kf%XpiDL4)sFhaEo-7N8@XuUiMT0BQV8X
z6%TwzxsTJ)dE#nG6G3Pn@)n!fz|2gQn0_rHkYGA=VsC<dNuhW#$vtHdI%n7#@R|C|
z4cyYTu}mNpwC#T`7rQ=?s1dw#Sjy)yI+uUFM3g^lv52fLc9q<a5aHg*ZdD4f9DNYO
z_2PEg)lxS>l38pt9^h@Eozv&nUVuK7OQ@G<2!cEuUE_6V%_2(gy@Gcyiz!u>*gWyY
z{lE_vF|7~%v*Vm8M-}dA%pSs`V=CW$Vus2UqI0wPa7BV#?XG#+?<L^SZG&^|$?%aw
zLr+ajqZ@i^8<?xC1Q~Q+VjZjHK(0XJ{b(t$1FqZ{P^Gs6up@m5gwlyW3sC?+oQK4?
zu5((q)5RAn1Xdw^wOA4oCz9aCu~LyNO$QLR(9z^}UQSu2?NkQ1=M&q2rJ)XbXi>iw
zelD~VBA?l1!ucSxpDa6@#9`rgg1*D^Em>ANpvN~^{>3^ohuyIomBhPBFSKVnR4+Ip
z=)PS`d8lqbT?XC~+w%sgIlGi(=~54gTsX@zxw?EuQldH?caNyd?ZW&|@j%)LFg4%o
zOBtGws1lFREG8lquF9`0mmKM->gY3;*`(~GxkPS(<U)$j@(IA?)uNrhXc#db=f2Tw
z>#u?({uvby#R3S<meA}yY`3O+VaAF$f$i|bttqqq5Te>WSZr3I02Z}%?uN}xuEVJT
zal*|iyG5a>7hGs$yaWr7<VNxq8$Mji1L<*xs|Zb_rhu=+8BdYNv1S)c55*-XV6NsW
zidHYY+`cpP>1^}CR)c!)*m56D5c1i%1crWWB4h}vH~qhN;Cy9#C;xxQm_aEYdzYdX
z9AJYLQ2Z=nr9(P<*y`i~D3r2n&t7H+gwFzv5YX$>U~<#^=}18(lT0@)tW~iYWY2Ff
zo{YJWuY85{q5HlKU@s}-2{l(4Z?=c<T->R1X+;2lMyak{+r|f4B5f;Y&v||y5cX#{
zY9>EzAxYz1_>FX#GMhyMYdtDIls)3xHq&tNbreC#eAAR`*2Fn3g7XNI1?3}oLSE#_
zHu+Y-B#C=HPCpt3$hYH77P^>S!9m?CZ3pHwALDqxmX6K!hq3)cH5;I?iO!I>kz0GW
zW9yiVa=U)Bxd0CfanN}~pSKY!Eg;KN-GcBU`v5a|$<24l6iHySNowlV3|sq|dKD?o
zRm&oR?&LX9*w-sTsH51RIii`#0V;{vLZ!Gl9b^6h0o+SzP4n7=(DjpmTkBP^etluw
z2UD%L=9dHe1C`Ole<mu*pf-A$a@ScK`3E$mf2=MhXuPQVmCFTVS7=Z!)-&n2qhljD
zP&c}Sco~EfGUG!whw$N04Wc#L{M1A^HmUGGGdypr(uum4S_&+DN+ZSg!mUE}K=NA~
z7xHCD{+Up>kuaNfhDqn7QWnHqSV#OFkDWt+TD^C@7!rMYbTedH(C_8aMWZ-r|Am@~
z()<SUbE*5C?80pb<fvvl&g{gu=@BZZ{v2<5j&*zEBR=7tCXp^~wm$B2Q(=o#FTo?t
zq`)lfSeWcY1(ZV(jQhuDt}!}GQ>`}_OTtkTIinbXv+TXltB9>@I76hgqg`%p%d{;>
zsNz}v7hKl}+?~PR{oK)n<SUY7&^Fu(;qKZtRMsgW6K{ULuj=khIC4muS#9>QX`k+K
zk-&R?!u9f%Qmy9)Q=4K0wna^m+LbF@Qc=q6gynxD+&C6{woFwc6~EUGhi_R_BYGJI
zy6bx*aMzga()se0>Y`R_aQNAZp*P$OTCcOYe7EA)BG_xWjfw#pJck$VGXxY<!=rv<
zi|CBx=w`)4+A_iNX_+MQgKkR}VR#WR%@!V5!n5*4#J#>1%-wt6ostjA8i(&t69(NI
zv^A~|#S&W#2aa1^vpGecMW89i8pr&V-Qfsp9LaVGH;!FM@`|zeJ0A6=04YG$zt59#
z<tIVr9)3?b4Wb$6GfECY9B~K3?!64FXN@K8@exRF#QyUrmQKM^^w1t~os)tCN63l}
z9v-$j$RjHH)&+;AeM4LFijo9*)~Z^H{)+QRLpkK0)aJ*@Ow8@*ky%SGpB-e|Rj30)
zfBW7ExR79nPp&B7x;!yQR!i{fmFsxA-g>bD(f`nvs;GTuZ!JtJv(OLZE|{9lIp^T^
zJB!@`s@|U3jVv+~c8V*)c4XzJWC=>nNU6pC6FO_R8R!i{WdRqLXwGpaG8eU%J5fOq
z&W{iStSK1sTfB5?28v={Yl~w|jSq37WX68f(-Kk)6cFI47ZV3ebhx~+x2v&8QyWDN
z&<rV}0&CxWUG_yqi;XzY*0X~)tWXOYy#UwM!kF}++DO(AYDpo_xh7%K{X%I*!D>m+
zQx7WUTki=SpBAO965mmcRfO4k)cU2!G1pJpmxJ%#ZxaDdE29uEBFcQbadTRs=enO%
z@ndQG)KE!cU9cH|v|348-pnRu0RMIh2Z$=|DkT*5(hG1jj8KlMDGA>v$d5We-V^_6
z8u#&S%{CVHJ`}?_&}QsV;})=3L)Qyz?}1R~*6I<P?2>fM8ksV9c(QjdHgmP1(fl6%
z+2I(b8QGWkQ-YV|CeFOSM+U#m=K~Mfd#-cEyQgQkPG=(ppOKj;ISrH1kB+~3R@$Le
z%BrRw*-5@3;^5*X-EeY)SP8bC>Ud4-f&^|?0>R{x01ZYfz3wgLOy1PC{cs)XW@j<F
z;sEBPqu&vq-;jtfZ8}ULdK&=W#l|C5<G46s#p0scn)E<ZinUkY8qK{r(N$jtqwy+v
zdvJPsjGsrTw+MNOVi0^O?=8(f29wc1)AcQV_8sd@KhY>Y>b_6b*h$T(>so+JTIR>u
z$Zj*+V;Ub;(PKvoN0@rV-Nrpk+>w-SF(}|jIEH5K3d?9WN+7;)R51sjT-m^}8styU
zPfX3iYC);3!oIX)KAaS!YP=Bg)4#+61TqdhYa0EXvEeXNDX;IdsX2~rri)0DoQD>>
z)wF5W$84cobLTzX(pGEo<&4P9N?$7!T1a!p>{8?4`gAg*GPM71;l<KsidvKLRL}S*
ztvrBR(O!K;<fuGtaA;DTsP{IB)QdSABF!-36A%33@7NS7BPw!?6s($WlU!K%YcV5B
z_6Q~eH{874ujrskiO)JsXZO`~6@luCZ}82Y#MtaZ`^ur^8Hyc!_b=n0#y@%1bM12k
z9xdb8eL<98j8`fiYcndX2OMFP()U$PM23!k!ng{NXq>&O108f3s$ko>xlEAc=&pj^
zAXbT^lK|F_>>4gXWG)WCZ}`H6V*OJ1lTYL*L#rZ11>qXRcFAZYz{h4zLC79HR>U!c
z@MA+3W)7LLpO{I^_FT2{S;TnWM-ri|fd?Y(U%n{<s^RKBz8pVdDN`2xZ`ES-AlS#<
zowSMX0p`M6EmP<%N{4cd8eb0x0Q5wzHhVW~LaV=d0vRj{ZnZ)BEY#m$YA*8ae>c`R
z>=#yE0HLlKmAd=~R8QsPUikC3?EQqhsT&90!%P2ovH056UhuXH$6)PN!)=efqaA>T
zVJXK-V*KU;5~c8q_)1p_^!ES^vv=B0r=spm@z54rL~9mt#vDJ=2?6IEZA+SezUBiD
zqqaR`&rB8wRjFOXNT?f7r+r#PUk7RcPLoU*9fLei_ZdhV1~tm<#k4@HgPT0m{&-<C
zVKCw?-Fy4Gos8INZG;$=d`9cQ_XW{<tvIsx?Z3`lkNCMf4nev51|Ykn1iF~MXKRKb
z3;@gPsO~L=pSHao6Qr&a05x85krBRF<*+xW5<{dGaYjyAovMcvPO(K=H-LpsQ?XZc
zj-&Jo#Tb;&>_x5C7f0Z0B>h*$+`ioaCM9hQ^vDQz7()<76?09SQzT3SQ3B7q+0Csp
zL6y_gGCezWW^k};WO;ibY>9_rWyntTX?$(W7gm`GM+Hw^%Fkjb9pU(ucJ<>-t=Z29
z(23ZX%~j-Ld315{`*v;jtgLP6r=aLhiKM=#Vo1k#6@Ppx{S!+z0}>YqZ)jOG@go@9
z@B*{%cr|s&*ha+?*LFXI4;0t@Zq-zciq27R{0losc=uzQ<Caq_Q-?}lBFX1l#o5@&
zv}*96s@V+^GACHj63UsiIc+Vz8ll-@qKHepU1R4Mw(&xyXqq->c8vvtUSmy_5pW$P
z7!cSqccAu>?5*8Q&-G4b({%vNrxBhA9tJn6ykW=|&64iU$wl=iMAR|3o4EN{qZn1H
z==c_$<uxsA3*_g-ph4CTTZ|?KuFVDn0l%&mItSk;kv7v5)aWSqi!{ChW~bZ_hK|Gh
zor^N|aQasmw`n}}7}19mE=WKX&qIlD)Kq%}zY?&3f^}B)c)>T0!uWeP<Ya%{1w@2B
z!O4Upx<zUQ<9y`NU83*%?RZ#2Pxa4|um48?w%v48BJqbTkjPjzFE(oQLG${nBQTw5
z-5>6xLLQul*)YDQ)m4&Rqt~o|*alIDJ6o~8oHJG52VJDcgB%l9S%k;oyGFYBlTb;$
zswHM%H6Sx-#ptnL5Wb3v&46_-DsF^7DL(zAW?#v8wsG$PO#Xv`@C3i-#a17}zb_H9
zHGb2X-#PmF0Pp!71w3B2x1+F7+9rzvR$o1Mq*$?hkjG=IDZp4t+%fLnzg-7u@7fM4
zhU22h(q7U|qBu8#7fYau9{KS<DZ>Y(LnE-G%O5E>?Blgu%NXDs-7Wq76+0+O6<AI-
z=~(P7P`?(f^fTmg9UKNOh->BIv@As6%^>xD7A$V#!tn%Uj%j6I(bTL-ADE(ZYqt;M
zT9flH2Ga{pIuxi<j*6d2x%!ZbscZm0lXHkL5v!LzWTQB;whPvy^(ILH7y~k-@R`oi
z;nYQp^Depd#t#2RvLgL^kU^1q=vq5f9FPL&R6y(~WA6YHJ%U;E5!s7>*rnn-lx}o=
zR0ynF`8m%Ex|=S$Yn{HXkgJZ6{Fx&}u{&ii9bggT7};ddJLxlvz}{wIJFKva<kueg
zx%c?F?DiK+Q}|gIeFtB)TpySl;`iaX=9MAGyl%RbYUy(JMx0#4<cyT0FZ$G;-ZkPv
zqG;|8a;kOHk`8w|Qn<AYG0Vo`FaBxY4`vswmth&9+g<Sqw-XWO;Ec)dtGu+<Jmfe*
z#?(+5$9GrVg7jTLj2Ij2tXamZ<hW@j9~L%Gaz2;s2+Be{-lhgyw9N<5JL_b1^p;tS
zB5iz)m{FIkap*Q*%#wfce2%=-=dX|<GO^r+FZ1<9XJtn1$j#oK^&2^yv~8`T;KPs{
zY(%562uvXHy}Q_x{1W{PtT@ZFExsSOVnb9h`gEao>QF+PXl2UNJI$H1(OED<)ZnAC
zWty{&kRTC9FJ$WUaw(&`FCsh|t&nZtL`W8^7-|d?L^Urt#5kD)#nPASTVdmdiYQvy
z(UDR(!MAq(5rD_M+r!GI@>7d4Sv`7{$f6M_XEHz+K8#Zub{{liM%8bf=*at0Un7ps
zY;I0y!CL?ZOxiSPY1}+xPU#@EteA3Jm+Aea^qSg*{S=N&NR+~kpnva--<7_B@6Xx5
z(x8z|(-xZECPf$2U~Zysn1c(e1fFC`@rzSwf3u;;lw+eCxxbTfowygHrXt76*DO(P
zNfeRH)pf)}Ch0A$bL5C@X=E#pjr||17xkfS;-oc>qZxQRwc2$g%=YFTNJ3r`F%}<V
zch>^;m{+A9iD&#kATQCg{)aM+DY^rwBm==Ck0u~gC}nKH<S8UDm6NZ_Mp7U8e`c%U
z87gWA*%YwB#24J*W1KBsX~2_XsMpq3L^G$mqHk$vNWK~d`beb=7qih5cQ-H?%I4Yv
zh|RRjOV+{PfVTu7&eX7IHxkiG6O691#-!=ymn<!{oV#!g=Kh;c-C$WvnJViC5M*-(
zK+8G%h<&Ma3?BG%Q$7ZnrZ|0SY+%5MM_Uq)fEnbgW;8}<Yu}5DMX95+h3SblXtrz+
z3LM=v#!z`)h3|;h#XfA>W9etnK*{j-!>93R>Uev<dcmw_r-x<5+i*K%$6i7!-8hWX
zl|uB6t=19Fek);i8IdD8%p{~Fa^wHtm}jSOF&UZ~LPbc{#KWMR_D7ZCsfH*jpS@Pk
zX+%hWDdh)nZp4${Qh~Y(Cqu}e8F{7Om+LD`2SZqk9_X>dGya9=#?1;YE9bYo_WXz@
zZ?HP8ZN7MMwe^QSE{rjWpa`ZY<3`m#ibpX#=*N{{bJ<_;(Z<SPc67C1=VTSee{8p%
za%fL`l>#O|speC{y@yIhOSAk}qzBdzLNVQQ1XBmi1pO2T3*=}X`oK*GLNX&fYbOp?
zUZ9ceE(N6Fm$)X<&J;bSm%X+dInc{24mB%V-304}Hpc>t)trl=bkMHBT$ymyV%V~Y
z#-b@m>M-#~k^oXoLCX}e{WD??YpMPA12aMRMCFAI&3PmtKCEFLq#8uhEH2qOtb2J=
ze(ZM;E@g3cRVjfj)f&Xf9+lHOFJrO7v3V1-Fkt?;cOB<J<4xmmVxfnFHTbYB3_uu7
zYW~iisXR;IOMY!}u*{cp%|pnqS)cyw<#1^3LH5KINg<sd0#r2k9H0zwO}O?T;R<7v
zDig?2-^WX!bPB#b?`cWZT`cpx>-*<`zF=M%-XXC&`1;iY4+Z?Y=G*8Wyj$RybDupc
zIe<1$CVhkV=PG}F5yHeebQ2#Tb$>r{5G20Zjz8umU6OOl0+!J?UMIhH7$RbRQ%CT!
z%6Yaf^`{cOHZ25m82*jVfc=I~M5NJa&?a&$;G!}t55E44GQ0-1`o00K11xdXkM#}%
zFj!l*j&}RPObk~cCBFY9@NcFBhKazJ>C0*1eAQVFb7!HX1dQ<7(n4^XUw+peA=vKN
zb>G<L{q}3#)geDI(qkB67yls8EiUD-KyupV%{K}0YCD6^<4jand^+l{*KsLq_<1p9
z5S?IxWFjOF-_Wt;z*}A22u9;Td?R`(W!FKSRXMsCX4SR`$T=^xz*tMq;u+bMKks<i
zT74qk-J|DuR4E(+=M7gQl*BxLX!Y~zVYwW*LM^XKhNu2v;+VWlI?JJG-mUk{Ss@mK
zHpuoiE#s}7iCf-HSPB%%=~N}|3!BVc*(S#D*}`<22n=3}Wg)7N<zY~?X8RiKGC2YF
zLGM4X<D!Drjn8=!K)<zX8+|GTo{;KgfxTrpH*cWu;-)#t>#m=pm(Rc%V~#0tc;z%R
zNV#ih*||r05z~9ot<fLHzV|b>VQ1zB84YHu1X^@%F{VQnl^kWXYG0DJ%TrG>b^a#a
z1r*gAnsx?6m=g54X#LvVqD4t9Brj>qTXd)rbGVSGXn16{Ah0@eU80VM<lB3r<`a%S
zGCwEQeCa@mo+W-?TfMJ#sB#AqCl2B;6<7qBFm91kokMMh03P=Xe*XTx?X9%Q39rM6
zuwk$){E*Vj*;i*MZbwb3)JIZa<VL@Vlwf@ER~odu+17%?P$-Opn0F^YAzaJ+PXIj%
z#{;cp(tSJ9U)P9gYx$;IKGoK)vz5iazJ{Kdi50q>$h=yYD(}w3s=%zKXRd|`Dw5|W
z@ryON2);XGtT~++w09HUz|t=n`7H?y97vVZsg@ZP+|dT00JWjpHI=2lm5E~BVU{K9
zr`%uJ1$EH4IIlFYVG8kBiXA0W8lcwLJi;#L);m~2y1S|7pFp0ug!}8N1g#Add^}UZ
znd};P7}PirHzQx@Fsn1CGEgF@`_=RUR8sa?6BeU{;5%fw&<21RMWxT9+<uFgZD7Lu
z7>-D4J7mDaKHd#eARHPu#WM4CLt)-0qt8uzR3-#wXB?xM^#gkE#SVWT@%EM60mvP6
zq9nv6v(+5e>ocNDE*IWW|2O1mr5mrDI$LY^itw|K`gsK5{`A<TS89q?1Jt{hMj^N8
zi^-}vQhSdj3?vk_Qm^&xS+Q32?y~}0i|RtuE`55J#|gt}$a13LWC~58XIuG|XkPB?
z1yoOUa>7>IsStPgZ5+P)ldjM({$rlKrg!G+6bNUx^6%>;542MA)KHU2i<R@w8XG3g
zY4kmNj;mDIUcJi(4^*|T-?6*zDYs}rSD1Lqd@K;83iYfU%pD%vI3$xgDaRKLa$Fl5
zQ$NBuJA}T%hOYh9+Rrs1MboCAb=C@eSlqhT$_h)Fp3R~gZ*K7RE*xd*FhB8Mdct;d
zP#+ECduQI>tKEQh0F*m*%|U4sIzl<jK6{xyH00~Jl1~kwCx-S9#-CBe6V6xCp%}FC
zT#}^ckwQP4oe;o=@bH#(fpRp>4MW`{TF)JZE7L?jsIoP?tx(GBBZY%OI=Nm-#0j^F
z1L-ENuhrET>i+>8NxBQog?GwNu$QjHh7=rWy>u&YqWS0)1|qIKArSyVDG2ODRUXW!
zGc;e0jxAPmK3u_pD55JllqZ~;Ck{Acw)soOdHG|h`p<%Gtv88p`40fyE@)@lCt$fR
zhN}?A2d4GUXJdHDyaCX9j~o0Y;C#I;HZD8aT>N^~Sj{{_@wD%T#150>!lobBxrsjG
z(sd(F&NZZrWpeX{*K!SDj&H8Tx>e-A!8Ke}ffyvThm>oz<7`%DGb3i5`C~pX(>3=X
zBnYr#X4}Y<BD!n-kUw$>wmtlGSA^J;?ayBt4^f)t!W~J??4Qa@iN@ldIVIxRu1<9e
zde;-WeT=ZH%X6Vb_bF5AN~^Z{tTo59FpFAc{n%j5TciOQ0`LH{STqoIzZ95TKBUGQ
z)~ssJlUl}CUh3mM=T(Mdpjk0=r5S|gK5SxA(~Y-z*4r1@M}t^l3g)G=8(^InD))Mb
zkghHuu4^r3!D#IEqHnt^8+UJx3HH=BwfD<y%q||#=3o>1A|GII_)SP8#53FVj5?zQ
ze+8+SH@-R@EG><n4RTRKg6*7B^}ozbq7l69rG^4Mz#<}LM|j8B{3X^B&5#nRvgdwy
zSmDYeJ@0wci$HXVtdx;A=}^e9w0DQ?NfgD85Ddf%H|&x>q?JTn>Y5)OChLkUE+FPS
z$Aos!<4zIi4>AqKf~9qB8N(@%#Z7cc|B2{$jP5)#C5hL;_OGETfMu+rNP1n3)wreM
z%i<KLSvv#aBdrF_IOKeb&CoTk=bEq&U1@U2?%ZDZVY)~`FXaN#c??uj*5MTXxvv-@
zYuM1o9TmzDhf4(sJ&a&``FzE;K43dR+lnN;PKesn9Oe5ESX%-vW^^I>6dkutH%qfN
zN8sU&SVJx8Q@mv)Z>CDo1`kzu;RTux00o9b*>ZI#tZ#Bu`c`D;X>Nfm2{rvcz4QHR
zPYSoi0~lk#7aDZnv@ySnHcm(}Ug?WpYk|GQdCTzJU<4wG>Lg$p_he6d<&XPvMFb_*
z*>Rla^ocg4)cJjAp9jKT&Is$)Zp11np(Om<i%59zi-a8X|KufYt6mYCHd~10Hy;Oc
zaIj#Qa_<TN`s7RvE^)74@4csLaB}9JZyDqpgwTGdnBqlG_fp(2M5Kf?6P0O&XDI+W
zt!N44b}8ykXBC&NO2F{SXgatQ#tZ0)5wzC<`?27w;2V<lHd9+ieQ+thQU)J!_u_UK
ziq_^dSD&hUf6B5Lwz(k`AB8MvA`M(2^AX(ZqdN?XBTb0ILli{TwH+@vmPgZWqcH;~
z2Kfu+`+SM_U3GYgp6t%enp_uuota~@YBcJpQl&Otfcu1HkA5+NhMCl8sjC-5u>)-`
zqCnbo@alh2_F#2_gXpwHUKJF}@_*c@Zctnc2H!P3G%^i?M<BGiu{fg8C7l&_9$T%#
z@}H|q`kl=sTaI%pgc=lU2g&0SaU$$et$_gIGqkqB_Sb1lSAw4GxHY{AO-h78Ul)0q
za(QfR^Wgr`Se2~)t}<xmX<ZyKAxfZ(D5R*ZJH;F|B^mr>7hi(yDDNh)QVyia5hSeC
zxw^HJ3GN^cAyTYP*2|^WfHM0JHI~f*yC5$5i<3I5V`tJ@GoVCrZs+O0DqL(|WP(c?
zw?0b9evE2HD(7Q*&Dc3Ez4_Llm~rugxlQW15m)?M{un7tuO=Rat@-D$Pa--<KLMW=
z{PB^7=HjoK*WD`$e^J$F9u+y7bex`-&-AB@uFf*YYA7yn(ins7NU;N&iT8pp)(i5n
zA!cjek#$*VRu7cWK=KLCeuZYaNf_e5pL{?;zk%7=$S$z=Bj&cz!8WM4ho>lm^k3T!
zYCNzFHt>~L<dGX^fmu?aamA_uUu8@fq*3$QOc$WB9i``PNYBsVe+?}jZaQGHie*%V
zYY9Kc47Ar|f$qW-SEk>WsLr0+al8+2pPK}feuJ#sZ`aJFsIi>TW&ck0R_OvcDgX9q
zJ#*+F2T*Z`eD}rKrIWoLRKosq3HyTOgIlp-2XZfDPENXRxY{}Ar(CSmESeM_XT^4v
z4w_C~ffL1C@GV7}n+nH?cjf8Tu$jgyRnMzWXqh+S<VZ+~jm*mt7jf$zxufe82X3Hj
zhe*_GFw#h>pM`Fe7=&kEn8qgn%TiDbQFRBw?|Bq~WH6F{z2PuzupWj*xg6n>Kd<px
zE~6&cMeHB$6#q8Z*)d@G_bncGpY3kn5h|ndB_5MNMjE|CT!7c;4ZLxDvc78N1SODf
z2Ffxf?L^jQi=#nRo4#M5O9i25K`?n0Z-3|sFF|V9#Ea%&cDKYHB^^o?G}Eh@eN37k
zBBi>fAg*$TOp}$+wd2_rFdsiX0NGf>;&xmZGe6@jVZP`_F;2DS5A*ILe<;Vee&f1?
za8jMYJyg)QsNGKra&9+5vj4&zwfZ99@PG8L*y~aPpU4#`d#CQfw7DlIWJ>My7Dr#%
z6Bn+EuKqrF12KNU)YkGtmg7!7%xb%!t>1PldFaOO#hM<~*=#En1Q}Rj9FWAK6tx?r
zkcM+_)m;%?qiI+B--M=F4<1v>cQ=nUNMuc46Tg=t3Fm@dD=|a+18?`u2eZh%1e?3f
z)=kw)9WG46Yi^18z+bo(7=m;OeeL7Tqp8c%Dhs3Q#sT=X^_=NTv|knr;GFxo+Dua|
zlMn#oAw+h_X*6u?uZRL`!ba3SrEBF`>@lRnRURVCWbcW=gEG-feM$JO1}i|n1+m+>
z&)(|3%+E0~Uo()ImR$UKoo|0Y78h^XZrq$L8~4FS8wJnwDW)w@5cV7UG9TicSfv?X
z#~Vcv6ZO-xKAIQW8E>W<p&T{dKf$7uYszwGM9-RS_a?XjoAssQrDr&2maj1to*oTt
zqBX(=-OZiShnaUZ++mAUPm=#!o4N$`6S|y2#MO&mgr7*CL)eu%o{r`!CoKXKSom3H
zl@XwYDjolaGyX*vMTr}2|AuM`>OXZ33Oc!#f{vAIB@gYlWen!tIllnRQYe7H+GE}o
zJufta>+`1ISD5b~57q<iQ^3huSA=%ApiHFsMos$8)6B8vVXZafZ%n+8$1cP6lhn!5
z!MP<feN!r6NX6&!=Nz(nVBQp8Ufml}cbBzn)D6!PVW*=bY`ps6K239DF*}|2r1l&J
zRi{{ny4z|Z7kQj2B-O~NfU^iCK#Yp$#SJq(vPswKPI1s1wi^`y9wxz$U9T@P?*6`J
zA*{00s^1W!**3ZOz>Rt@1%~GRZD?1=mp{Pwl`-<lnBtlyiwMP6KPza^4di}-37bBV
z{BM05VLcaQpEvu7GT0l_m}je6L;#I_@|{k+)Nc;lNccpl6*N!Zg&`GMUa$mfV`~-N
z(Fa4x4QIE*+W(2QMcULujcuo6CxA91PWwLvcbj{lEJ#F<w4R!7)kdYK#%kdv$KKB}
z60NYc+8$akY&^#xqY+$>l<};SC<gle;Rzu)4(#&i342?s&z#>5*kE=NjTJ>@LDJfC
zXf>AYE{{4)KnpVhyXtqoPT(7D71c97K5Y7s(E=go0q2ui$FSs=wuuln8or<HcW^%T
z{U$f+4}OQ%Pr9?1%Tq`*Wpu9`|C)=QoZXfuW;SlSdbz_Zcg7ev<7ye8&PT^**C(jK
z$J{E`M=%Z;a7)IWl&caM&dui*&62pwdNHWfYfRgtSa%wY>X=wvHLe2N1JXG~7f{yl
zyZ+I#FU~lBLiTXZgalX@X_pL1#SBMRbh%K4FHFF-o9thxkULTHqk&A#KIs5VMt>M?
z7BXEqGkICw1ptG9D3XXR8Kc3Wuv#fyYJe&vCBf(@+umdZ<==;=%E;`!HZGbhiS=k;
zM;-rY4u@pkh;jHu)em#V{GEWPZbND@zPz0BB;?si;z(7ZC41_n=Nkm?f;&W@Y3$j#
z!5r*hI;GAQ7mKUOk2l`v$W7RIR%KmF!t>gckGw6|u$+6&cuEHiTDmD8&(l-K$PKDs
zW0z9qy&?(316W$90m=wADirT@fP&*fPbH(x^3y#d3}4%DHLD^2a846<(p7fZH{12-
z<rtTptbE{<fLsZ^gMXp`f4?Ez8W+gkOP-|dK1|$i>oRRcj2o~T#dV|<8=ZkotfjoM
zS-`BXz1)kuTVnE)-b%sR>B=!dkHMRNCJP;OS;T=NwWLFhxth9wR_UHwOc0F>ez9~l
z)q*UqAJH&P+@buzU|KTqYypo9<`3pPO=yWc7c!Dd;7PeLu^T?+&toYPoOA_9d|)q5
zX|m1TX@EKnW;k*-R~%eV1AhlPQ?U+JGqgJ=;vnFVwBzkk)145<{X(FpEzacK0Wfu=
zWviC0Rr{95Ne2=gra<;}MsJ?H&rtwGfLgLgi&b=1W5P*!DzR0D8TrQbQZAQ-t@H9l
zM4I!tia2e)D4rF2|F0lHR)BxAjmM9gfq`C>I|!y#Ei-j2p~n84;aj0uPd1I64+TfK
zF@U=?wG&@Zrp)9}A9T+$s~%aXp%Y94{A*3Ad4vDEkKl}NHZCm~6-0kStxnBlq<L_w
zslYwmq*jew$wq`^K)o`4%rFVv7E7rK+?&b0q2!M9NumA?A!ik?g<WU|`$cNi*3(qM
z&~>=N6rVnqqo7ly+G+t5W5?1tWSnUZ<hX684`TR=K@4c96Cru?Kg^D{^J6p6{ngn~
zEoYukvbqC){Jvvfn;I7Ad5Bb`>)k;-_}p82)%aG1k8g^j2IcM$hxln-O3C-xsA`I#
z4J+OoaZ}K63H;meBmr;8MHM&k<VAn_%`x?N78FwkEZScTYT^p@)xT%p<lX3LEET@6
zKxk%78;j~6QK4)Tsfi+LEEG}D1^Ge&WfbtS!;EfPL*R!gH=W=*={~uE96{1CJJ-U!
zgo^su4Su5lP$o*oXHd$BtyUl>k&(uE$`~go$ur>}#ktI;W)0h{V7I^Y7b{jU>;U<a
zpwK^GcgQGAFU(NvYtx!1r@!gW=jG~cRS47NxZt-aSp#WoIMU8y!>^YJ9H)COG0x&A
zoKS-J{e*nE2t`{~vVMSyZdKhPea&&QGS#k-(mFVz87_v101)%MC5b~FBw=(%8=}kU
zt?zx=TWD-eYaMcuieSBB@)s0NRmOly=C4UB<vi|0E*L?6H?>QUr~oFqRWQ>_DwG;l
z`Xh#`G|z!=E-62|kHf>PaWBvN&ZVEWh71%9+$NqFv<njxdTfWvs<YuYfPSAOY9?_*
z^)V3CZx|wiDw!*njokU{1!oMwQ+7bV`u!lHvXp{dv2T*DzoHTmG@34hkyhn?oY=jf
zmgPp=GOYJ=9Z&46IN~vYH$|koRgeNLIl*N_#?`^sz#^IUZ(ddDcaH~`pIGVVkjv9p
zFFW<FFBL|VrNGY+Nbyw}bWzYE3YiQwzlu4DuHZ8ZAPWbUQIC2Y)4T!|7TNZg7Qouw
zXGmZJVUF@eAF?YPRc=t0LLRgQK+l8ML(N0c<uyBtrm@g_xLvP-*O7bQ4)q8PH)w`5
zzINy`?jaAhBJu7%)ZR2Pb=rvuV&z8S%0fn0ZCL5q2aSsNlA{aDX+W{hP$PGeYorM-
zJ&SbQ=HO9dDA;CieUfWB2|Y^_me(eg91sMsub(8NqZAz7bD>T>u|=Q2I%y2@0YO&u
z{p&G<i+qdo0fv3+Cbvm#HZhw<S|*Ri%<C!ME+p8!m#X8155LulcT;!VFu9sKt19s(
zr9&ao`;yR#rQAewq{xb<3)Ed9I7*P1)ICr9=&SkpaH?@y%~r^QuR=$#bi2grVx2_g
z$WJ8*v9=N4&*kZEM&5}BT<+qIjeCTx8yHwTRDfDxO6++!o4(fvgUaL!0++w|Ra(Sm
zxFHr(cPeP0wO#Jm159np*U8J9Rg`(hn;4B(Xy02y$|}+C16%g+0<qX<e*i(f-k%9+
zJ|b?{y#|e>>yT>yE%E~1w8*}xmjz$?>*10s&QCL&8GSIo5yaK2P*s}&f_j4Dm@@Op
zffq_S-P8cuKb5E>KY3rZmJ0`vUkG;m9TjPA%jN%$m1d=nTT~<9!y%eJObK=P6Jx2O
z8b=A8{@^WYS2Xn8g^KDaQa*(8wVGd3FOzreFAbKq^jo0l0jEr3M+7Eo^ucICdCP}7
z%${F)ww!r3!=L2YfV@}~iwIOgAEGTX(;%qgUHFNO0m0*ct%yQ7>lh?prjr(8>JlXr
zQYpdOZv3G|lp9nrWnPqMz-DobEUsGpbwsYwu0XT-G4kXvKHT;93u{j9>#~Oc7X{lE
z?TTwF+|^`@L??10B;9-1CS+(j>(z0_8(4Fkr3X~c>3<D|?$7<5Qai1Wh_rPyUe_@h
zC>&~qpH&4;DPZ(04?aqbK%TW1L~Ta%VARZ1<6Pqg|BL=d4+&8pq!u>&Sd>7K1=%Qi
z=^F&4WYrok3bvKc^V0ilyJ-wZbFRnt1v1NU&w#h_`&eHuLI5}2X^KL8wgd=`810iv
zP6EqNL&+8NAo1lYOAiFDhJRh$nM}ov4sv5d>lTdG_Ov-|2hypXMALiv5V~$|@J2(P
zMwoR$rMALi+(x2`vRX4=l1wraP)4Go%}>fogFv^x$<D^p2G8L>b)kl?<u}=!;|)YY
zghom9hd6{fTrIyj8T8MiEhabYUTy>tYsCAty9Ao{a6SzXL*P6kps)rxpla<BB3rsH
z#8_3)L4OxCcFtu}7y?;Or-(rqua$*sNLHF<=PlTKG*N=tKlR?A)9_xd6$g1K4GY<h
z=|An)&}!upB@n#KI$k~fHrxM#@l)23nffkdm0ax7g8BEZWW&j$RQ5lhRENb``DX#*
z_lT{nVEb$uT25O`s!)Q4p5*2b2}1H0JH^+t19#E@)&cgDMS0V<iJ4qT52<(7%jP4H
zbfW(}b#&}eQWC$8cwqnqIN;VR4o1K0jdsI><p5#`C}zToKH@(y+3QbBHf7r6noppV
zx)=puy+h}yhlsPsm~7VWMVVX4k3N+*qO{uSIWbL2c*lY6CFvaB_5zE!Flw)r=KY|E
zW~!t>64mL5N>L(?p;0Bk9%Ia(uSbu_-i71^qBvz1Dl=N&B`zS)r6W|9X5J7n4fm-3
zu~a|bWc&?Gpp^nCUkOE;CMdT{T>%fJXvr6G%o{U3@ktPj`WG#=u*~Ia9$1V@K8d~B
z11bFifpp|Tq@Y3~N6ML$n^ZT{r3zB;Hp4ctH)@h(q1AB20C;V*(>qyMc_HcXa%%#S
z;XVMP^hp}?SPx!wEm~m%@%=!855K@@QK9z$p1U!J<h^YGn)nZwwySP^v^{8E%@pb_
z@d1t$78%B$f?^Rm6RmOevi=M>$kC9_unEx++gb#_gfoX{c1ZeIS&)B=2`BZAf6i<&
z8bM1Q+6$fZu!4(<7^g7sXL&Y^pHj~BLs6_S1oBmZJa<L?Wu6alUELI_p{`o^g^C9w
z_YGgP1ZU?I#8ZK*-=k!zOuR&q%b##mp&q#!EwyYT(uYG!#4c*ktRcU;EJXVx(BKCF
zDkE(C-@5skSEQcnwO?mFR4^4d%zhn?UR9;^Ah<@meT*hP1D9D0{fZh0dnqz)=Ih7%
z3QL#sm_hbE@`}(Q(%59}NX_@!_HW)7Y0^`rK{{vprn)Zne3&Xuj<fF$j_hI<TI@^J
zQ+$qt2x3W1F{qKNKvW6wtsvOjCFwkf0TQE37=zQ`LmX2m4{*lEM(WFDR7*tMkdbmn
zaYO4nqk`UhUD*G^^v^U%@GcV__>eQBx5nYx_Et|%7H!bKzam0I#)rT9mNamvaOwdF
zrNfpO<lfOm9f;s3W_Ck1o6Zx{Zd%cMXj!Pp>+HA`?c$DereLRkYf1NzTl>CVT}%H$
zj%t0F(MB#l>{}I4n^w5Xb1VEHN~0AWt^=pB^BZ1Azx%#Kcy2uqG85TJNjDD20iZK?
zAI~ZJ$?4nm-^YVLEIw6AT}Yz}u>D~S^Bsp%rGH*L>yduAhj*>7)6XzHx6h(7<!@$G
z2ciFhP5ec-MU_;FUe&;6eyu&NwG)uReGz_S&irVNdn2Kzz!m)Z4Kv10IiH3q##N7|
z5Mm5LIW|p0AFCm5_&~LkXcPE_Q`>gJXCcWST~?&f@cZ5(em0i@kjSK4s}{YlPIOdn
zz#YlWE}8VlN{wb*q*wkohH>U;wDHK@;o(HLL)6U6+a0%ROsGS+ZO`jZn0IS|^MA&R
z0+!`LuFQH$z=2@3sCiPxsJk*X8|k_6hGe?Tk=P)4W*aqIBOEoYrjCf2%*{J58W$Kj
zJvjA*>Z!W4Vulu%ri{4fnM-K(=r*v_d`XXq1f+Xc6hYy9n%_qUaZxb2;w*ZvAfWOA
z^F+NZxu3WL1w1s}1rqU|#LXAPZHYWP|7B9xp8n2$za1<<W|N%4zNpg~Wds-=ILxKJ
zGtr>fpU^fRq_`bKcLw>ncD?>rzfj1iwfs4QAmR3gAf??Ou%t^35(!W;<uo*9mal0m
zXw$r6So4I;sUvQ;SOq8pZ`jBalg8n!uEJ2K&bdtfz|9Qr*KR_6Ids6Ck_*JytaB?p
zthQ(wXx<`1($202S1yN>agWENgE$kgfaK*z5yqHyDbe54Nb8a~-I~(edk?jfg`OjU
z156g6Z^g00c-cEAme#JGAPs*8y%PSTBUaf1y$D8FRn(17n1~k9nIgZZKo-;V7p&PJ
zu_`#hnAVDBHGN@l@h#7@Zik-|Gz`tN15#XvA4__h=1$;N41Cw2qA?nyaGkzEoY8{u
zWhk;QAA<x_(XqcN5O8&jzm~zyLvOmb0Y}JJIY;ByH){$?6UA6!t~meyvcI3;2%Xle
z)0fG;w=1H_x_kuQ$_nF@mb!Exrz0cEx6Vd1h7>*|UZ-x8JMEF#z6PxyyOK_Br&MsK
z{Z2W7*y0g5;IHmKDaluqi#`dkOk0C3$TNgDSQ+C`KI;vCYL#j1T+4^Yt9Q5KBna+&
z%1IY;EUHNx1;SwrT+^h_=T}{<d?mc%X*VU+@Zpuznkh9j`NzRw$k-7>i_mksR)M7H
zf1FDmJW?gx$D>ty8r@SUTaG^i#Yk*(R3Z}yQ~7{3p_&N%`PIzDyI7-hA}a_t{pnim
zn0x}IoOR$*O<ECmU02&zEyuH8q#)A}n6QI2Yx?w7@O<W@$V!p>>QVrcb><1{a`I2$
zB#-#2LZw_gv!pIx3uIJ~O4yGu-U$z^jPetn+5^H#M@G?g>ph;(MKEk?%c%%3<#=fJ
z;wSW=I;yjR5#7tx#zvz4a;@;+Jinvkc!-mns$JYLm{3}a2bfTIhmDwx9)|CV?gk0t
z7y8yK#qmA6AQa~ZjmorcFD8sBZ$ylc+$P)JX~s4Toh{-J=HVhtorkqB7-meu%Lb;R
z?u1d<Ag%1xq1O1$vfHkQ5Mh5@L$?hmy`pa7fuOr&ld5$YBL%a`%Ys&kp;YI=>jyr{
zl?%iBKcqhd6#opAO{mM@@I|@>)<fhJ!KGf!?Vv0v_Glc!I9K~$NIc<<i5}Z<1w`<^
z<Q`QvlLV(Vh2_>Cmr;Qn?4kNU8o)Q4;QSB4uMoJkv!b2(W(}YUb_Z@%N6+3ECtCm>
zN6xS}9Lxw#5Yu>lUAA)(#&>S2#1&lsYIjfpglCqCr+wITQvPC)tMPl9$>$JTjE*#;
zV-$mjWIKAN(Xp;OeLQ?3>7Rq}RAVJD7NnQ5RZv5>KYeCezYW#4-~qM4DJPGG1TOuL
zP=r4JdKI0M#`L0>?$gs~C0sgIzO!{dKskE8%#WPXHB|PtjF+tS+8d(lWb0&0bsMDg
z_#ttTFNj<o%7J@q0?qv<Q%>xUeI0l{N_y)Zx<E;Il45Twi4aG&mo)Z?h|<BvCg@l4
zLKYL~bQO6@4vjOz9CVvbVVBWQMSrJx>bvHz>O@t!WLtuMig!h~F@}OS&esQ$%*-E>
z=vOJ0bo?lH)Re|uk$)Z-zB=Gq?!Fv3Qe)n+$U^Da{T+@27FD!!#Vd>&!)g)_3JR*~
z%0++}!;2Y?=~4<sGBWp?-x`|z<SOD*UjET8qEC|HmZR!+gi2Sg@p`$9o!UYBPuBVb
z#3)G;C=_WkS8<~%i4mDNnx8@B2vPZ^$eg1yKm|1b?kkgeS?M1ZMe7@`0=X3m;2ICc
zgOIP*NLW+>6=7AIRLulnQZj7Vt!*8n2Y%!wF+G^~tCrXK&<;a^mkj@8&HxSL6F9qp
zaM{x7FDaOCpoyFou+W0>#KS*f&~TT~;j(!w9HqaSJq@$_vvBO5G40gEU$e-!?_2Gy
z2CSH<SZEzh2;mv|p*7AWXKcETs#KIGWwswM2OlM8cYZn_qs(sm=uKzP|N4AbBw{6m
zT55G*iw3T%aqZbb_~7Y8i`v`<<jL|O=nLSf38Lj7)~sW*WlYB{)av0II)WH!HX#K0
zO69K{_8w|rbwMxjIB#-d-D3Z<7s(q#rJcylGBrWU*Yi~WAp(Cwe_V5)B}rce!&F{7
zrs5wHj!{87rijx>**bn|YrZ&9kO;3WnwL(Xn-qmJ^s{YlCXkHd4_bCQyhW|5;v>*&
znXQD1?+_RaFY+mVp-p;u#Stt+rZfh4rjhpLOU2H=t^`x?oFn&eM_!cWZDB#X6eJu#
zkq6yTLId3=c;OyvAEyG@sVHgA<yn<rYMA3t`%5U(Dk_McMV;hq9i9x~FH(BOjivS9
zg$W0ML|FmdA8!jNJ;!~?aTtK!@?*k$KRM~4jwpE0wf%fZos&6C_tBgomt(_Ozu0cI
zCI0>N-lNA;yDXc@TxHWMC$!Yb?h&4!*qQkHqWN1p@i!vjeg1dBfjUraK6+49DoNo2
zVlyv}St@mJEG2R!Bl0_8*#{4PRl6Ngc>d!$U_-zR^(5nB?xeB`G$0awG(+!;IC!5h
z5QRr`@aJOnEs9EKHt|pds-q_bYw-sZRZznWr%YdWqceYzfoM6R3Nv|<5%8h4c+!|f
zj!|8;vpBmMoXg}8gcN%n04x`Ls*5r$GrT1rp_rQlfpLJ}y?i@o`2lDLGTtFKS<-;+
zxs%d5=im%WX@J=%I(k}a#6Z1wkasxEY4Z1OtK|>DR_SZ@1(kM?5P}YgtIP>W<;${i
z0YYjZxelzW4}Ka>xjoJeW<Q(FF8VV+a;lUDSW=@)Rn2xZV|FtQB6@zl;oK+#9>4O;
zPPIuNs#0aoFKaMSJI1KW^S=r?PWe_J0Ev=B`MXAP1~wQVxK&-bT4Ch5e7H6Hk&HVM
z*1w9NhJX!Ne!>^?vbVm&fCI2nzCDD;iLlE|9}WY|jOcj-vxB`x2yOUX)dJn#hy?Mc
z3gyCJoe{C`HWPsW5fO$yvv#X#iZ)#7<bt{;8_;xY64FJA{8L^2B6&31x9ko+ksr>?
zp~d&SSuK!IqX-_TZTTa<A<2z$_VZ^OONo)h8708n%VIieo(tp)HZ(Jl&@`ooex@ne
z7rjTVHqzwaGF=Fqg_S9qW$j_*6{RW2c|)M^VdHFm(3A#mF$5?*dG*BvX;}n6ET7yC
z&O6o@!Y_6h{Iw+m4O`7I-AOjCjUC?p;G5-*g8z4l&(r@!tMHJtBsV~WeRgJ*%(Thi
ztMwJ@K))v&jufzr=uo3$t!fVT`bX=~x}dp&L5fnnpeybHij1-og}xCE7|gT9R<s$z
zlU;xYR7MAue$ctbU@0ALhl}+n|B9piL&NP!a>c~ThK5?<A+<>mJW0^UA_@#F%m<X^
z@ICa@qk|-Mdu8Qqf%VsDkaEOYXQ0rxncH<BdIkWHFSFxg2Z`w(UXdomZ}^t4=3goZ
zI2<?7+zkB$m-H!+GG-U3?Nkzu0J)r&TX+>=oTIrhm%3mWJ_MEnqZ^-cGJ^(3GQIq#
zG~^?1angY2tKrml{kdH)t8^0Xio9#Q)O`R&?btpX1_{GNbTd1>lG0X3xR7IE$hGe_
zf5>c*e67{%xJUp9(Yc=btIn>3*VkQObG{kG)~0tJzgwZS15_R$LysnUl!qYbFLVlJ
z)c6w`dBx-f>Q#Ig1y6FybQz$-WYF`~J70ChS4C@;+1af4hlKIJ^RpUA{*u9^%J4wB
z29JLCMBuey;PzIYd}wJRvoL@XopN|oR>O3LeDI%n<NR`q1&NPZGRL~tT`=0nqa5An
zo>S5#QVMyo$N5c}@>Eb*MN$JmH=lQxuhWvi3x#ut!@_E)O9*Z-gTWT~IVraA(GN!3
ztQD;K!jNDKj;iLXO2ZOI5G|+oDWX($GtW*sVC^nH06WRvbWTBm9ez<a>C*c70|koE
z8S5CD$4w5=B{n5AjU&VvGSV0aIpw+rm@t#^0#HWTI8O2-=!F!_@+^`Be+KmW8YqI1
zby(L?JxQyHHqq1hI;W6JH6!c4U@W&$^;Vx(b?&Wt8Kh-uV(wo4JjxX!b=i}07}a6X
zMGy9cOa0E3S^{@piu8{FU9ge_@;8CW1H7GK>I+goXJME@hl|-?2fK|o`vQIlT4Eih
zo=+^Uu<0H=Mi#e}ac1P;JV3em+MSNqsyLorU~0v4=>JB|r<l&p=K!l6k}6Ao+-=_a
z3d-a4$tCe7+>Wr{o&6h~UnEWRUk%uk_xLMpYah7uE>`XIVEG1+nI9dcah|ihy9kLy
z4_h(#Jc<>_n|&7qym6Vjrngk0rwdPQhw~Sqq4?#yE6S<q&!hd$##ZI13)6ugA_!pN
zEo55qV2UDAJVv>p`t)R`zr<wN&#*d0IO!>+&cD3Sm#LF#H1x2l$-|RB(ksQ~B-a2Y
zR?-yHW@Dyou*RF+Z}mO!z#&>Cc7@RrRP{DY@gklS(33mkxRAHL`;m-mKR8Ye9fe?h
zrL$;TFp{-?naohsnwbIyEcVtYAm)8?MY()^;X>!Y`8u}!zE$vwAiJB|XlZe~FuBtg
z6!qc?xp)h)O3m=-WL8XKp0x>%U={?nEmu)y-e*nNAIv#>y_vv4)8y)L1t@!IrdEnZ
zpKINX70?dof;n835%IZd^mbaQI$>Q)R4{4yau&knb1F8ac!zdY#lVi^z5u_^iSK6+
ztA+0{qneN=>LZTzN300<tN6p%ke9xYc?lC0k*>mAD<a6Ahc(oxJ}1dY21+q0?@YY&
zR+;_)>Y-jF@Ci-`BwTwaAHwEDQZe#`&z@seK(`SkTZ`KCS4ax_`8z{%Dz6U=?&1Sw
zFd6+evx5C?!^okJ5R6UdfF^Mi!bi{S<B5maq~xPJ%`8V&8w!?8gb8u$jMmmyN)nH#
zp50)mIrqBi`@!#cH0UXN)1k2O9sr>1XqJD?!SQ19^TJFhr5D`dx1a4|o1=^uM|!Jz
z)qyh5r?R7^yzPgJcdJcI*_*9?&W(brw=u+i&#z`PZ$Mwk|22u~yTq(w<xf{|^n9lY
zAI7+KfFK{I-aW1|yf#roysK|fyo-Gg6S&0QulYT(g4eoNc-i-!q9YqJ9WfvqZ!<DJ
z8a9kp1ia_8+}0Ete1)BH4aGC{)pD@{*wf!HvL}JtSxZCeh}6)aaqu}&%Yfqm95r?0
zz1;0jh-c*hWrmQF^6yJE19g;6n%UQnVu!6v0cGx8k;Hs%9t1Cmb;u1+*-_b;OWSHb
zQiu$WXNopfx(5JmI?W?boRf8&3(O&P?XaUE7yN8pah!wGKLIWeee=mY`Q$gk8LDg^
z7MPv5(6FzZ$>uJu5NI6VP}L;2Yt0-CHz_W#^QPQ$2y7wOw=!x)6X@Z(OK&Oj5a?+t
zm%eC%2P)~gdY*uB^)16IQi$?LQPmC*1BqRHJh^-~kcupn9c#war6<zELX~Lu8+FXh
z`k`jYi4k!t$-uh$q@Y%BwgvAZ#4&op_7C^gk%m-h$I`RuK%t#Tjd6L2vE??jjtcN`
zezPB7kI?Hg^VQ{9Vq_iQG~1oY<A70{%x`jc@ITh6&2I@Xg$7KH0^<T93*{2YDm(N8
zptYs`@(~sv0L;wIdyk9ys9L^aBCai+gE1J7;1QI@)DPhW0lmK;I(R%%ZS1hJ693x$
z`Mt%A$;*mw;E-O`f`Zwj91TddumEVRVVWeLi9ruHHJ9;|d#s)2H9LAdRMhCPjB0op
z6fhQTK8B=N;9G8O*RyYzd?xv(<y++Kt6Uc7oq2d<RLB47mED0FE~fe-|J`?v@<4B%
z^XEc$PWB45kjN#{2Mx>kSM&rwy;%+N-TE1X%W^r9RUq`aUQltkFM~2mjsH2jU)Lm}
zI9`k@4^RU=H-yTANk&5RgvSuQw!*_l5ba}N?noM9Nrx2=u}KVc10yu$DnDlnY6Qf=
zhk<kefm?g6&r;|cp&sIJl@>c3Gg-i{SLH(d*HFK7Dofq@r)mO<$q(sHbXW~VI1&vH
zE=c{TaY1-heVg4lP|NP`uKHphRh)8MxFZwHjcsl{D*u2y&=2%tS{)*U3E#nVZ&ddm
zAjB<|w*bcsR=GLjg4{p~t^yue(XU9v&Gt1*INNx&Thfc@b@R);_viC^?(0DIQv|3*
zK2wx}zh@o<*Uv14n$LSgy^XtP!KSJT(Vr7e9MKb{L_EB;HUE;Sq_!$`E|2-@3PENT
ziuPtuViCaRv!rRP?l$QbK3ac3f#C>zrRX7Ei~n^+r(D%?+4{0YSrF9d3h8oJF!`Wm
zy$Fo1@9!rw`F)0Njnxm@S)Y7{{+AFlFNDusYWPoL9`C^csIc|S;>uMrN{QRMuqHGA
z_fOl=M_Kn2HE7b^!s<&<eTH{mCpwHNc9s_Z9lH%wQ+`sIxIpQsK$ETQkmVS*x^}qR
zA#x7fgbHW}tSHPgjd?PCJvGt$26|bCTqZJ#&6`igrP=orr=RG=VhP32^C+nwJ|eg-
zE@q$DJprZ0D5;%E$~*b5ZB7Tlml+`rTZ5>3D?J!WP#qSQsG9r%1Gy?d<vov;UIis|
z;jm%SL0XrBJ@Waf!jY{Trr5F4*?*5@2~>P|TY6NmsO=eE9tj>aVkF*5oypmz6#To=
z_JfnKa{D~#AESEF&byg;*hZtL$zC=z_UU!apGWhOgE-qjOM{B&i*1MF7>rWmmA!L4
z2N4=~-4|{$TI1?nu(5pSn$N^@Xhynud1k~8>r(Uj!=-3yRXlH-UAu~K5jRRa99?>J
z#cTIeH|#d7S1T;U4sE6IS?XU?TyTe|ym(ro#BYE9)~S=TgSJpAYj`-E!=1ciK;<z9
zZ+748T*<x-8!1t>Ub>L(*r-k3w4*#+$mHgurxj&L4zX5xL;s4cw$xa7eSI_J9a)bP
z6~8gXM`|`0T&yY&R~6r5FuK46u;JI)DEIo$Pxn#~K2`8@GfLL|1#BSYgL#*bDVEd2
zx+~HzjE;DXWU?VN+=P5D6As(EY`p@ObQ_>4c+rAf&h7=x);xBA+~G|$W{UH?!L%O)
zHhtK%kHOG4D(ZCyn%yO`sAj$_B|mNv0_e9nke&tv-_4j`BmqSYQEmWJK&-!mk0Zjh
z*SdFH#+qB}%2V2a>xW!DTMFGi_b{8sT6}gImI#vtU3?yR*LM78@b@um$b|9=$trOX
z^}TFxTzxK#wYC~i4O9CG$$x6EziIu{?(h^+)X@<!qwZw09WNx*6J4)`Xj~!jFu0o)
zoHDnY0f@hx*h%y@udX8;u(SeVyLn&-Ny?r@L(z(W;+$Pl{CASG`9r+WgRFFidx%4>
zT=F%r;+$OS8IW#Og1V#>05Tg^!+Q<9m=p@QDKkxQL1r|$2Fex$>*qD49zrfEoIQEp
zf26P--gjzo<$1Dk;Pi1lZ$G7ThF7?Ba=zhsyRRaxdfDRQ@CKBp7Rlk&3YZ*mV4FlZ
zpr(-mFVY<XPz|iTC`reiMom_5eI+WV+bv_KO7yQSpt~vi1-$sN9=JgXO?Zc&qBT(^
zUhR1C{pUe^aOt2AW6GXoJJ5pZV`Gc#3+r(cg~Kd1L}goQ#!Lh3?T5_FJTz$EJSvNe
zin^bftmaT1OIFiuJ`O8j8tb5soDRo5oXE6w4P$mbIRO_S(nkly-%T*%@b5chkKDlf
zkabThFq|BFYW+{S-;Qye>(}66BM#znV*0sKskx`@(5%QwsLUE&LzXL13ej&!>eXyg
zN^~k_`1sH*5__o2gs#(1(E!1R<=N)cN-V*{_)jf^p91+#4(cpy+Q|m5zR^Noh(-YO
zMCI=fKYw(?D!L~kOHnJWfhIHboZ3W^NT<6yU%pC^^yoM%BssyTL<VyM#(^Y}=5!$d
z@$XdOr)b_H(BmBLtJTv($fRl*Cacdv^R4IqEK+RAcvKVp?!DyIZlhY!9O>V%51rHK
z<HpoaVy;Gm-aOWM7-Nep2anE<klnR6r-)nl7k??|B$vH>XVh99g_r7NFQbA5tG?X{
zC*4~RAu8NXCl9R6?;yQ6$pwmcHP4+sQLoP&kQAbw>-my5lYC^%GN{K{0nWM$-JHBZ
zxm5KKUUE!Z4wthH2<?*RG;Ud4JL0kCL9*VBi=z&Z7VMfMj3-}Gy``+&%}GTnLpaIY
zQthIRdk*(smIn`~)=?uWoXi*lw@k@aLS(><Y?E2&F#AnW^`u%B?-BBN=)OrM#195g
zXnsgBYs1CVAc+jFNZMK^^kE@@xwd+cm|0>AE&Ztz)%1H4u4?QhwQlxrH8pcJlz&L!
zKiUG>6hxpx8TOqDM2&H4nly_Lv7iDbAgfL&FIWmcFmyePTI{&)v6pNXaXV=;cs=w?
z;+37Xjh6$1KI^|V<kZ)D`4=JPx~=c~uH)PjrNe(Umy4L{2rtvP^<%={Xb`j@C3gm6
zweXUe;#<nA(%)Bw!s9MH%w%G8>I4RW5EhWNF_C5u;9!j|^PtTOJtyr2^yZaoCr|r<
z@p6*}cZ+l^Qou@WEDHXhs#=dx<7#<VE1pq|D6hN=k2K>3l6?r?B#Jm|Ig|zb#Beqw
z-uDs&M+t~)Nf@^XMT*ih`34vx5?{S&%t2xhYsbE51n}0`bjNg%COTgLquSlTsLavh
zUgE#+0s`M?pv^hDOl}CYUy*@T#s<+!{zFr2ZupCL@W@E<XC^>BQXpLQO{)0XUb-c~
zbg>CBk2n^Llf<5*7*<YTjZY7N9q3NVk7A5QzNC^AYPaTF0TI*V))$anbfNyVU%W4H
zEu6**+;K8tGmhfW%dBad=43lw^6E`s2MG4}W{tuzJ8{uw_?vbVQr_!`*z>0-k5Pc+
zi!nh2uTU2Am4>mlLkfcFW5AXY%IQ<XH>QZ9?vd<Jg5gUCr2TD#vLY?j{_5(7X(h?J
z)0@!5x3u$yGqD+M1Ap9jSP7q+u)QaVv0l^4Iij)MmGq@piaCkZGZqS--_v8m8%xT4
zZqp}*y>^Ss2xd0RWk+e{fAjJd;nTC^!bmDJc`lqD{OIb%c+AFUrUK=KXwmq<|KA&C
zn%sQT4F!cMqYmrA_cfMUKf@`=jqg}ei|!pE1lnu|ia_6TE%pT_c<|FGIHoi8%@?#p
zKq7ex;}W0oj97vK`Bv0vYs`<71@W-thKeSG$r}J8njWg-WOJ%kOdm4UmqNR@;lS2K
zD-#Q2Xc`xTTh7E3i(3Yw2<yp8aDY8Uf5ElGKaTAFsj!HE@P53b<~(hE)GTU?f_<Rq
z>{vTC%O=^~D!1}1&IQ-{=@T|-61cV>7$ZlJC34h9jyX;tr9a^NduKS9EcUOa>D#gt
zE7EZeJ7EaxYT|zvHncSXh7r!cJSz&?be%Benx($Vv*fG53%IrK?aPj)1Ss$uU?fL6
zu)a&Pe+n}=pjyZ>n+dt0&Xj$U&}2cpdNqI<g?f7yT0P_vG5;OnRP{i4wkB=r3ll^K
zPMxBbOKbAZY%r|rc;iGGsv3Q6!J^-cW9!%*H@vN2u|$%|o$ho24!s~Ti>82PE!rrv
zUaUBnciZ2>E1v{OC5%@hbel>y7_HIm+f{0#hH?Y$<wt7FXw0vDRb82Soj=g7w1SLH
zLim(Vl;hf*xA%R}2uEzNlGZV8`_pN$`vbEwe(;1|Iq97JQ9EVM_FX|Q(2WeE@^hke
zB?Q4Ou2YTg?|0q0|Ed(9=%3GXZMN}LQW6hd7{0V*z0`7D1kYcI9kC|&)rx9vHjb%e
zMWROrbRQM0y7}rs-T)1B!`yCDZv{wp4=%gb!bF^imqb^+5%hI6JY)BYBYq~`pmNAr
zhHWvHM^WN}(1w@jvLq5D0ol?R>J>342#48iX~4A|3A9{1+enHJQrXV}K3rjAA3COG
zarGMnoe~SuAJ+d!Y%a3wHZ^`G%$B&qKov>0I`AwJejX@dbGQ<2B<xbl_N=3>?z)$e
zrUWLar-Wwa^@@O>--4H=e4;2nRzdpTEfCS%4#-6cSY$=_+-ZbMRSA!@8e#X{2fq)&
zH;c#SMImCQyI$#D$0Wr_k_JGhk$xv}Q|vu6v!I`<Xsc5{uDNb@AaOfs1_Qrm(kh{E
z+7AQ{Hbj2*%$0*S*x`nSfocU|*Jp>SIYH(z!bQ;;mE=SFxg`{7rVtuOUIDNOY&=@W
zK(%=FY2Rx{S^kQnT3VV-DIZGFB{x3MzVAZqt(ft|xOw25lMC1G{7`w^pJIM*RVTJl
zIzmj9)`mk24B<|P`|OgByq|TC8WsQagLDu>P&jn|zr2dLjpB|cr+Mvq^~2_;lK_Zj
zR(wRUkeR3w7k^K!#bl`Z2Qv{|DkC@qUSUZ=>0t_MqCip*OiVq%xS%jr>8kTYSO~Jd
z6s?A5#1vK3og?ef*ZZy>Q-|9>z265n2#VET`O%NU3!{$U%dFo+2(W``&w9hLyIRmH
zU|L8Vsdm3ing4_cYzM;pPsDt^=6d9gfgg6z`z5256r%5u0wX?;sHY(WpkOi}-@%7~
z@GFsGn2ei#sJ~ewiyz>1bWmX}=t`M$=(=qET<tu|@|mN_s7^Zl^637m@~iA%3ZG2Z
zCfVr<W8WkH05W2~5Y0D@ieetY3vayQJ)7y1+~x1|ahUn+gC0W}sGEM!2#E8v%${r$
zfUgWD_CX}RwUYf$kOTvY!OzX(*;)g6xqlm3=wB1Wh|N}<QpBZYWHsa6vBn#``}iBE
zYq+^N`73I8`6M$Nz9A1I-aFsgHT_+PlY|6QnLN6?izoCufU_Q}CybOZaare`EfpR;
z-0sg~`mB7Q!KQxAZf-aUuv=~=+xLW+^MGllvf;o1?cp8;&pNf9MQ}WuDxdga8(2L@
zWXGzRx@6<G`<9R+9Mll)jQ<N?qMT}kz#PJ-Sv(^uZb;}Uf5jnT`?@IbJe;{Q&4PRt
zvF_~iK=U4SMb2nKxkW4r>5eYnYF+0^aa$xHp?zhjeBH~L5b8pk9dT`U{?Dbd;lv~&
z5I$1(dvQLEbBytiMp0(9=LYj-Xsf){kHnfWz?%5O{uNq`jvIypalJBG)Ai`D(sJ~(
zj3sW*#ctEx`J%~KiD8N@VWxWUM7rowuKvnYcr>}Htgyl@JDVBODeIL(@7-=<IJ-gj
z0WbJQKQgOg_{;Ybj<?;C13&10UAVM%0Wg^(#EMGs3E-~_)*;qZ(Ek;^0-|WgV)d-#
zztX2EYOzIs#kmC(E0Ecq6wiDs*-tQg_ALfGNcCjN<;reC6r2z3Y46w#;+hbBCooK?
z#YhwrpPFV;<b)_uux5camR3j6zoC&uY>7S#b>}qSpuyS^>{=IPpg&ySL4|a>kAJ|P
z5sF-*YLs_St;7H4&3M9hI6^G#ETbw?)UJQ$L-1()Ybks6pyggw<|-j#=7~X}>cwOI
z=I6CXg_t9KDv?VFzKl<fZ%(D=otEE!v5<Zia5KPBh}~S&*<##&pOz1xMb@qS*NgK}
zVEU~ynJ-gysUOrv)bXSb8Rq38))2=|rmi?_u;8~iEj}^-`K}_gt5L7%rkN~n$;&f4
zn%6EC;g$$T_?9ftSgJ<{!F|{5P$oN;(3#EK&5M8^oY4RWKQu|`cM`j$(Ifnuq(&yP
z7hg(ux)wo6O4!)N=@+2@h^1OERZ=Kp<2`GGJZ5*seqs3iWnM^Y%*A3J&c?F49zsOu
z{`=99nHR-C&`w@Vp_<2h?W%k7##WjfnSAmgJim}!;gFXoZ)3&E%)hw}=LcN)@R$!v
ziT|K!CS87jt7h0f%`aNaNA2LsqFS$p(AIVf4C-011#kUdj%we`TwCJY|CXFuU4e|?
z$`J-?=2NL_ZH;%2|EPe)Sn`~894K#@&FKPvU>YRB5VqMYU_>ip#*xO4gfo&u2FtA2
z1;5>vb7hf!{El1pm~T1wni;0j7Z+pri>7IW!==aVi~tDLFWZM~*T?zt8bQg04WrWJ
zMW`xD?|{KoC$Ly;R1uDgqX1?nZ+4*tWPu(d=)E|X3uDv0RkQ55umJ0zfh`2xX2=r5
zbsi1i<<g?C>FBixXV0f<*Ba}E%5hUh3ljDZ@oht;XIRqBhYCPZ51i~w&$DH*x>1Jj
zXHU3>cUC^pdSZf@Y~rN;*YlxOl)kLC9O$f=FJ4@=ml2tEAv?z%mV{ovVVU%V#eY^f
zHQfLt5*`8y2ff54kOp}zqzi-Ll@JHeJ<0?p(jJAi#F%(WZw?yJ-OG!iHn-c}EBL2J
z(e!8Vd8&Odub=&`9sTdMpVahta9><zPbB%6V-6S9B8Y7IeCs<|aAp_uLBT~&#HOO4
zFQu0DuOCiVy!c30Te$Xwm4E2kI(ru0IsUF~RmwH@k9_oC?0+Qu|N62Lp^HhzfR`oJ
z5K29YBQ7^Uv$)RT&d}e4cMBQ~y<*}`yr3n%F(=E_WBRI4&a`5>yDD2Bku58lQ*Lf1
zf0v@-<Yoyk9zds%uxPB*-D_c^3|Mor?667rEBGIO%(NwIuK>>2it3{-EJA4ZXXS}+
z=~<H9sZAa3#OhY3gkjb%t;1L>vz8TgvSoZjEVLj?<Is4A1VwmfluGaa2U&Sy&khV+
z3d)m4`46Id*frg{?3B`R?;Yuj$-@HTSHij9F<+nGxSfCzjHVO@Ds!|ppOsxs%#0zl
zU@PHR8a;nqI14A8Lcr*YuI`G1z}VHWzfU9=ssn-9EUC`21z}-&Biv1jMVEKyYv4DT
z3fnQLx=PO>htp~_<h`TXj@){JF>n7F@0g0hK_%uefX732{By71ZfGLB__S;8qu{6r
zf7c+&jnKSR@xQaL)(z4+_ZSh<?@vD>)kKS;`NCN%;LEvQ@|takvh>zH8P=}RU5QPX
z^lz6dzQfdxFGz_dm9XKm7BMO9UIa=bhYnlD2dVSndk2&@BWBGP+92;HOO?BT6Kb>U
zO0`Yap;gmr<+)+~TbBZ|64<i+wU7@?>S?CciwO47l~;|p0#`PJJb9grx`KVfCqvt)
zPc-lI+(d4-jjvZq@3^YD_5xJ7{N4wPb#`J%Pqeql10cZsp+2ScS_SKJE+Z`56c77x
zH1|S5JFWSxeN$soEV=S}PHS7=fyX^~gyf_0EbvJY&r_z}iigWzVU+GxaM@Nr4sf`S
zq$+cd%&OB)LFb|A-|dU-WYk4UN+D6|xjL4hCZy(cc_q_7%DgzLoO3w}ii9%s!3mOb
zG?FoAKCyU0ws$5LN?^LI44Gtv$MFT%QnrMAq9X!%7=~jCHPahg=2s=*^spqDaE)6;
zDpwk>6nP;yu2l6YvIiC$IIj2^pmfSkQL|N=$=m5>TmmE=s4{?S^Iy!|M3E}mOoX!S
z$XkM|Cn*-|)4huda#l*=t-VTOJ)2pmYw9BW<~;d-v1(#xIZJ)ze@Z@f0m&qnXf0V1
zc#BceELHX%P@JPKyQA{;13+*j<)?>|3&sfEjx_yg>71;lptOVGx}x-&APXCl;7G|?
z!-u~<98(JE>oLSmnTA!7VHgtCeD*dEqUmpUVQpo^QL-D$ybgA3KOSI6$SY=RrX_jm
z;CIB7T%SE81(=D7bf>8G<`I=LvC_&}9Lr;SE!CdM(~Bot7$MbDhi5>dR1p|)?d6&l
zeqi@1mArTTJT_O4r6(sK$n1O31+aqJHCmDJ=$Y-;pe)1PARw=&Qp+tCM(FB&d2p8u
zrl)|21|EDE$ZI;h)wjQ>K4K%J$FKolScRfZq@&_Px+DnInLm00?D@h_Zo{=Ak<<7s
zbC6x@(3>*d$U8uOTuJ6$$*^ACPn}BX(8rFl0%;OS)E~)z!t@9o+?lpAYY6~zdFMrE
zZiO&GD;`VOuI{Jyh9wKJA8*&}bM!bYg60X`6#`N@J}=#jrIBj3;0Z)+fDK5XtcXmM
zquR?+&u)blcXz7(RLesHO1l>MS+VnUe?dqOxo^4l1e566xxcHSg?i;zUifJ;(ZAVl
z(>o8q9W6db1qzMjINEpI{@8^8p%Dn2(NM}?w*Pa*yJWb0%HmLBB4#}@)Wrzmf-LVY
zi4Zm*0{$^kXhz`JMDJ>D-A~4nzwLJxQjm(%&i>P7+pYn6^_TKeRB~&I`h6YbU>+xY
zTyCYh2GbXRvCH(D|2gXty9WXnaTQR-<lso`o<e#=_R_L^a`w4}Yb+>o#^%*{Pt8{1
z`-)#X-e;dKWzhh|7GSou=EOkXi+<gG$&;)aQkGoW!u_}|&7*Q3T%1nUr03fx+~;Jn
zdY!|OnHza(#FK#owTaMFAgyYAMh*E+&~MUkrasJ_-eBu(vi~(V0IzpwcR9ejA&!dh
z<c*+LhiTg)rrok41ihRz))wj5`PAuN`CuZaoBPaK9E1=Y!|BY2`dn?W+EeRO)I5Hs
zs`1PBAT%MBZyf;s3kG(*OP}Go&CUGwf9NxX`51*WYL!R%kl<?4y~b*D;Tj;qQ7MYZ
z%l&aV8cTfiWs{ZqWRS!W4`9En&a<&pv`v<LIHYTUTYzUUUax?GOZ(&OLZ~t-wYb4U
zTY#kw<<a-4+8an#aS-j{>7o%}Y{pj@(yqDl#N%x_4oYSKh%{<zh~0!A^Qmsd^Xz^n
zSp<0N1JpI+=zNNrn^|gvULF-viYI<|0gsYxsWN$jM&X`h(XTe85@&0`3Ptq{kpfo7
z3OL`^XkmZCP_9TVw_RaI2u9eWyn|KV1!HDh7o4aK1iK&Q#IN)YODbrO*<tFoKdx9=
zcE$Kj0N;D2ct~;qCxwx5jBV^cd99&{7SW>wa$fy>9>c*BQFjaB%M09%p3)@rE5$YR
z5tIFi-0vpPRA#1p%vF71%Jz^YkI2BBXYl3^epfnl>|q&qzZQ*BP34e05u@(;2}Z#C
z_em=PYxZyF^uWQuopmhoSaQ}dYKXAlZ#FlI_A0i4GTOX;dPP5goP4f)mbb9nM~OjF
zc$PHIw&@%)OV12KA3qit+BX_V!&>Iu<Ddd*L@c3#p1&c`1+in_9x6kXqrt)ExMVQ@
zsM2SXFS{SU7M<wE{L*?wUE6E%x+F)*_r&z~g#VGwc^3T*Ag|h{JI`s{bGAH$<L=l4
z&i;tJS%6|jKqXk03}f5z^P?`AUtOyC!pUz~c$AfR92p`FNG^b8&YAu@PMw=S4#>z;
z*tRIGzR%6p3k7nZn}8ZtNx8x)H<@jCn#=0>1`>*YE<3S^6*pvEepg)+l6d)@h_LGD
zv{tlCkSTH{tgX20ISjzcJitrEp=38-VHG?9f7H||;G|o!4AVfqPB2jnw5A&Xg92X^
zZfnTB-YPBcd=*)jGH&8Pi++x&XNFjApWSSlwBY9tgkeT*!;a(w(DUn1{>~5upe`ds
zrNnN>c;IdP#r)*wCE|B*#UlsnRjAMHqE01)FxVs>TTudg+U4NbwY1#M^0a!MI0srQ
zcHM|oQW_k9BKb}(>tqd2TXY2TDOa=5n5_)^<mnE=)lvwl*<NZDGbO_J+Gx0`#esr&
zx;KNp*XR73G`#S07^?241VbZeSM}wS*hA`o<)5##+zzcnpRU6i&+QX@jmh5B2|F7a
zwS*At`-HP2!!YB!?;r5QzQU}N+YFViI?3Ir+B;ZmT-bM``FpZz$B~50Br=1uW0dgw
z8}5YuyV0`l4F*<cTCRJ$5mig~j_h=r6B{edhA6Iri@%hE_K+EZB6H*OTQzzT4@|Qv
ziCS6gb*58qx$+*n?%B>3`faNwTMSEr<zv6ipGBx?@&m=C+>J3{kK?>J&XJBJc>^_%
z8EWUnNnf;)G7UOtE0Kh`iUA_j4`1;Xh_irgC_kp~cyR+T>B@Q%J%9=5$am*%G2@FO
zpNLKOUMkz((jmZTkm#zQj!J}{BVK)DIa+A{Q?XX1hZXmX!oYk7<H{r#b4nX)MreNm
z-X+|>{>R^&l|2tQS)5wAyTag&Gvc^h^o;SUP>me$KBaX*s{*?<(;V<rLQhA%M^gLs
zgJ2T6o=Zslq1xSG=4-lOuy-X-@Z-$;{I(?v=S~7v4AD;%ljZTx5U|HR9b`77eI56x
z*edU(82hX>JP(-D!Q)jMi6`*x=s7Vc^~DBEm3U$!ZKo)`c%l2w%r4PCUZ(g-(U;SR
z`H!#Lr{HY(^-9aY+__^aITg<>qnb!Uj8C6q{SkPmpFkk$HDlce9Ze@mvqR)GkfHsv
z$JGp+8Tm9!fs3Zy&)M18{Cw;c#*x9uq%hu7&IlVr<spT-YWs>7j&`ux>}1!?3#B)z
z;{OIgxrkPA{Po+8a~aD?e&=A14VaE7;|duY@+QFXZKpt=NeQp|Dhb}*`=mA5hM`4~
zkmnE?#7TF1*1Z#X_4zK3dkcg5;)#ItCC_KxWjHPY`y$d#L#2qr(xXHF=m-p=t+}Kx
z+WTbWy_$YQ!n*hgr&o`Js~@yZBP2Pd;sv&QTAt!kA0!tr7tzS!UwC9!knC_k`RvLS
zBP0b1-XuB@X^_dT{w{<P7Ta^<Q75_qtcX-pyPkKEKk1MThxWW}a`<Fke03z(fmH69
z8J>J?B1XNY|2HD4&}}NRQ`1Yq<52{cwV3y?9UHh=Z*wq2XM&G^*?LT*&`Pii{Y6<G
zQyh+4l?=Ts+(VK(G*_wXLnjPCLWoGPw22Z(jE5(9BO#}=3WVA-#{#iu{e4K*KkY1P
zrw1bKpmne5GK`=d|I8l{t^Jg?wG_n;+kydb5mWBgj6p%iTr`3ryue#)R}oBx%!MK$
zL0+3T$Tp$5a2YA%NrZ_U7^>^_&try#RE7=;)d&Cx?_FDf;{%*}H`DQCWO9(iVPjy!
zg>nNsOD$KE+Sjv}DZdz~Qo<{AbB;Rz%wSZDIhPxz_FAEqjbXf6rK<OW^A~fH+r!Oo
zoeHmkcMkF;po6%j;XH8bzO#}=(G#x|h~745%Vl-#t-LKjPdQmhtFEE#f(PW5qxw(@
zbiQD^Btb|XmTF#9@$%3%2${Dqc&bER>spJxAZp+65w+`{J+~d!V*Ne<NHZYc7yb#!
zd`;@q>0f&zHzfLx@1@1L@va1lUmr9C3{uLKwa(Z$YS4qVme~8TJ0H>Oo#Y>ESnd9g
zqimrCkBnYB$;7MsiDF&p!pO=A-+0gfgzR5oRF6)@NEaeKBb>R!7EHeGQAJne>MA`k
zfoWCy*Ivreu~drt_KU>D5sMQhHM%6b0p0NDY>3bv61<quib6L6KbT^@t&cTfvG7uC
z>s+p9u*r7!`a9?$oC`|R&aABFZd?WtZrrtBH3OJLW-sRR?PREEmOUKj5<vaAKG#{W
z;s=pM^3jLo{CmdsLOo<UtuEH_UpOiF4N;TOTyLe%^^O);7rR1gYj!+E`eaBz(Su>O
zKV>YwC}XP7yrSfl5~wryvYxYT8QZ+%L}UD|mzeNAentSYnj@J2q9sOUK*&0Eb1eG&
zi@R0jw_yNvI<ISW2nvilFP*H@3&|G;+IM+yx}6M(9m{lED9ll5vK*3!EO^U}E;3T&
z?$<%-LyhUdq+^R5QnT3-Cq^X!5B4Tnr?Wg<EbSoN6Ri|Re{nt(QTGdb?1GD8EMx-H
zLYKieZn*$i3UwC4FF}Ht5L2@X0m!Nq6Y!?!0JF4pK(oKkgu_|=S2FH^_*BU*iTz$n
zP;?7`3GG>YfsPCsdEyo|{*snJ_Nx{|^H2)_A)79vR!nP)-eNLu`q<6V;WUpN8ZKh{
zoRE+3w2OT_Py>4n+a;$)!d&Yv-z^Sf`bK-;eK=wnd-rLvUq=n<O(UvXl=T`cYvTzp
zsE-79JeQ{KjFR0G1|Lh)2Dwq?A>j9S!TYuSHp@fq<6TM4b1xjPkR)ar8cQxvy0hL=
z<*~WHMbtBy@%Wg2mlwf+y|9ntqedqL<sTh%);s8t`13bqu^`J&zUv!<G=%8@b|Ef+
z6cWv1&@;x{ApbfDy)IyY*ZIe-#(tGWnq<P64nKfo4BWGW<)lRQ=5e3)tZ{fNwF*AX
zt`#90Eu~H{{9>yMpyc5{cj6}hI$GDzong}DLWh6)SWP&mn$JW=PK{9;I|Z@+jv3?9
zf@|Y{Ihp`ICKYkxm6wM#8A3Tmt$zsXn0wX!Gb5}~B@9fuSJY%zLC!i#nkWx3>jF``
zoD&XoiU(2viq~;x(O4!0V`Y6&z&7A;jnLq<h=T9G>u<&C`Kf&z*tz&zLFF*jR9*)m
zd1dj#zem5mV>4Ka)bG-lcw65#6a9~kspw+ExDUH|20AYI%M6L+c5$jxf5P1&U8!Lz
z6{ZEKT%*6v^Z15Ne&U^$ePPU0R(NmkbiFv~F%5Hk>r-t*tqa+m!cz<P=NiEXtZsnJ
zB7XtXstuz+0t|veEDBGsE*<ADx3-om3y*ijLvBKRsCkuabtw0Ot?U_7kc?W3m<+~4
zW&P*`b!C<hkp{E64AQs2<ekjd^=c?JzW5{sEPuAEP3gqXO?cZ{Rr~M$X1q*`%v)Xv
zeYs;b;c;;$Z1g^Xc)W|lH!)T<eK}1#?=qvtLD{EWfkGERbk7W^zsh}qr!pC4C_2A;
zZ;)N8Faxunommlnmi)3kg?cPTEnTwnjY6p$xZ6{ZMknX?SU7tf7Qp&S0^u1%zWxJE
za`M?;G1a0EW!SYwExtE33oVmGLi;GL+wTCcSu)&^<&ig0YE&Kz8txpS%P7?l=s0sV
z>UYds{)%i-!bC?~`ZSP2f3xRc3rt9?#gnVKd24!Kzq5-NF}fRI=r?)suxz7eB1zew
z4UH6b<d2Vy%gM~WtA6bV)<&ED_Hn=J%1(9)7hiF+)bo{*XsMcuz~uXq3bcasWB6g8
zeDvQzn`*&2)0Uor)PgY9<R+&&GKo!r!tvKAPeNgL0SH8~oObgJ%b|p3zsOQbB$V*3
z_6YDsq-;3yD3=SZ7KFsZ<z&M~{J{725N_qhr&)aVGTzya0zwtOy*Xt@!mWY_Epw40
zf=eA^xymbj-z1E@WWb}mK&C%4f2|Fj9L>FK%%*Dp&cF%*j3EQ2Xl*Ww9i8W6M-!?5
zWQSlNA@Dq8uzYA?pZ}}wrMT_CWwE8sAfaHFKZ-~Pf#79y?#e<YFPmr9M-4=;u#Pz2
z&Is?|fXNZ)NX4;&*B-wVQ9LC<M>t;B5m^l09(?)Qqb8sD<S0d8a;;Q%(uy|;i=;3o
z8G+*_U}E=Wzd&5(+gjf??a}^Mi*-$InzwN_kmB%?`}@>mRtgg?=DaSI+I;TVf{M@B
zc=76nw*mD0F(NBn_Z!@$^F{a}4y)zA{?aOADLQj8T!;^yCx<a&=>N8Tl_hK|`~{9G
zM_l9)s2m=eBt7V&jDs0xJ^%}2G{Pp<We#exjl9$atzxkbEEi=O8fn!kW05o|r$1ba
z!i1``VgG?epP*ut1SfAqt(tqE#_eUx#ibsSreRNXke?;yqh^Oy^X#SWV{&f#qwyC(
ziscq;tau#!%E&_S%4LOVh4{b0$KM#U|4tp72lh>(#}Ya<SgFq^Gh#Q_TXiLahRGiQ
z>Q>1J`;vsJ-mI(=C3;oPD+M(&@6^vJW(Eu2Bt?y}C8&|$LU3nD)6R{RUA0w*-4|@_
zyPL_f2=WjSj?|Gv5d$k`$>@j&rtm}8cbkC;2iLq5QzzZwQ0ev(zh~|=g@g#cNNaqz
zA5Cmb!N+Z#%JxNP9q9l~e2;m78QT5N`=I~d8TD(YtlerAwH+o2S>9YEfK}QY1AV<O
zx{41#J@+E`ud2Na%q&?R?S@JeIj)(LYxz(_LN%Z}&-tAR^|;k@mxPBs{o_NiCr--D
zgsUTZ4-ReDGuMI@l5~b7IkYn0VCS*e<TYzH{-z=7JdJ=Or2_LH=B)2oLz--yZO>YC
zbJc%B*eQifY{~o00Vp6q*+EWr7yltxF<w%Xb<1$IOyR!Isi{w$F?oA&^!6o4*<ef}
z*8>mEbRP=|3eRI|jBF}0X$i5?|M!k`m!GtQ#zTtoqiaJUjef?kx_b(WuVnmh4YcG`
zN}&LQ<uZDe*)2(m@t*o*!LD*f;}|Eo?}(jZ(7MLk1pWLFyh~~ej+HnbzN9z^LM|%J
zNgX=&@&lvmiOe=rcc?K2lW&7<nkTXwn<gzYC2ZxNE`f}=&NH3AZF2x$g<6-NRe0>}
zVUy?~-*~!Nt>+jd@y#aA^v)q;V4JlL29jUI{6O~k)ZJgUzp;%HLxBq7r#nBQ`Z8lK
zT%tBlJ-<7{foo1Rz{{rpuyE~m2yI3adP#NczYopj`h&eTai%iFGA=m5=BBPN^#1xz
zFl84M@AmIg4Pu6b#lULB2%SbtKuOKF#Mfk0CzGJvt-GElYdByyB<7VP8|&yA(0u-6
zPx2RVc1ffTYT|JL;6p)VH>2|POX_f`eiiq=^Q2>Vrvkt@fyIL<q8Yt--|OzMpIs7l
zfHalN=vN8qip|;y)Q~7o=wV>?R9-92g^(;=zcZu<I1-#xm5`3m@|V{&fOq2I;K4=}
zIH8ft?_Cx<<(@7(?oT%R<K=Iayl(-ke+Zs8ZxT%%j!&b)QPD6y9}fmv1Y9^D16;5R
zC(XRt!bw2&I{NHgL4qe$&P&j8>cI&DuJrk}YjKe}{iY1#;G3YYqfM1^G-Eywb^b*?
z4IO!&&%i97%n^IB6YUT|){6cj=?|@bd3&_4D-Qhb1#_9<EY|fu>?(w<29{!b{xbU7
zl;5Llo^DEC1gNXzewwFlw$*YTHPG~gLTw;uJQa_=r$)Rut@UK;Q0OG=ksO#?uvABD
zkE8MuADSs<T}^0EB6S#R*x?Q-mw-!6l%NT$eZL6>N;lt@ORV&Jzm$?hP0)hTWs0?l
zKWVBaC&_IPOW7w&cHYeJk;Z~9<^pIc6y2pA66kuSnL9MlKvTVK&Kx;ILl38m-~qW8
zb4zXu!^oUeJ4V&)f6<4L?D<Fd&2OU~FE>`XG{Vi#uHx_yhTsjCJ<H6++(b?`3j`2_
zS{wqw2j>aiHA_EPS=amVD!uXm<HYOHM}OE?Hm7na{y=L>BYg^<6$wA;3&ZsdSYj6D
zY6I3ZiY4Cgm+^i0u8!!9X1i1!-DX<2PYPSN<#8O`Xqom;0DVKip7~3jGIn`j@|5wM
zcR>AFFz?CHDo+TA5N}VXitMVUa;_9xf!wKC6B?Z)2N@H=L&zZG>Xs?Rbc^4X$|Gg?
zqEiA3G%KczfIyQrdd{5JdrA+O$_f+qQ))Gv&?U32+9%%yT?TLEvs4jbH|Ox^RO1E;
zmCgS{LfmUtl>dGEeY*lhClTdG5yNwGCOOE-=ab*j3MH~`2{WKZxSt?iY-#Mb^0o1s
zk&Ja@NWC8M=A^|ySbGtNe8VB){0?-2`AyDA#c}c~Iw&06N=!E)Yj}njDO_@kpEJ{g
zzf0cFA!2wcXiMUlWw8~gfO_gG^^vJ=ft1}Np|q%U-Zahb*XA+YP@*UfQ_ci*pt}_s
zJii(l3#<8HX;R0Aqxy(%ntT~iB**tW+U8`PW@3-78`19TGJ;Nw@Z`cSUTDQYlJU*I
zyk1(NxUA^<(975bBE`5+sv-T!Ymq-rr5*hf<QYVfA4hQ8hDhGdYyt5GV%Y4e>h6Tt
zA$rYgH0b~v{hibxQAVvok_IHLEpjrGALsz{hl!CR|DS14Y)nASf?<3I_=iE)SD2>>
zjO#AIPC7QGV>|INz1MFFv>&p(BwSgd2rq}sQOA_{)qrX_%tJ*PbXLX7)=9q{loben
z6ZcmXF>idEp)o5&YtyJqKTJcF3DSS3jNKaq;8R%_qD6Q-@Y&f#lsjyMsY55q5AJFo
zzxAF|K$eNxQiJLgU9RbT-+<<sCy72+vAj8pCZi<zFOW|<Zd4YO+yt{wA<TOLedl}{
zxO3JN@~FdU-Z9vv+~x{$E-_>C&kRx6&+XG&Ax09(!638Ihvq;1IW!-n>D-zOcu66a
z&Z?KKwKJtV_!1{=-k4#UKxiTnlsd>uuUXVjp4o}s;uyVb#Z#AmOD}}h7}+taCCX*&
z&%P$%t3_H-J|;*fTQQY;D$t@oA<P8`rpE5-cTx9pk}M6`rjX0LLmjO0MJTYZkbfX`
z+|Ia6CVY3+qd!?G&)KQ{N~p2R+<^Hg4h0P+zpRPz#50Nx>WpiV^eJY%OwobZ*lYd~
zHdk$CRDuE7kMcDhy`Si@du+ogg<a+nyBg6Ns(!=7Y1ewXsM*KlD^>yl%4P_%^?tjU
zRDukG8rT41tPYw&EyAV%x&5CTvoz&51UhsfIGk^K3D(ubC~>n2j$1F9p5`ljI{LV-
z2YNB{zMR4!O5(ByCjUA_5V}h9YHmFC-Ou(YcHWa_xB|6T=eN}}=G=z|#6dQ2yh-fE
z=}zJT7fZYCO1juaivk{Tw#GSLkRp&4_mh1diaEHU!~XG_ik%@TdV!`yi<`6@gH{m3
zK<{&em0FoGRh67lEY8!c`&kMprrv$2zRYZhsu83FIABTGE5>HS4xCkCO~=(#ylj(<
z{6e1l^)>A=SxDJ&s}DiD-zM%DCU&Ak;GKiyN3ZPnqwTm+9D;yU-O&t<r)AEQZ-)oi
zkSNp%1w&>`U81XeNnb}^a`P=kJ>*D6rM_PNMfzc9syJ&fQt62kD+cEMNgRM&*JL3$
zg)tH*!3U&0MSrU|RTl{!C%_E=9S$V~D-k0uZE19RHERTsawC`p*t&Y2;o0;l)^0HF
z>7AV0*Z+F%Im81!)H|3882*ezj0zuE0r>bsCucOJV>IJvFJ+brHieMs&joeJ^mFfG
zQsbMH;A=PJCGU0if#jqLRj5;D8Et{j_gNu6eZi#}TAF;aO%gn}P=BJ7Vrq#e99n~F
z(?&Q3%4td5a!SqP6{!2730{kN)IjY<lg(xjRv^Ykz>qW#Q<rxWDV)v#hw!KU;vFsp
z(9>z5H9@py;}1$hGfVEK(%`^#p5IL7zBd}L(FxZU9L}^g!On}`_na_3b-#b9Ph$EN
zl>ha^VF=)HOmZVk)WCRgkfJ2Pp3{FkEMY>gMJ(Xqe4P>w+!an&g!Q#eBLXOMPxtD`
z?Wuta#x3PWnZ*G3VA6B95fOK;9IVf`eT~c+bmN8UR}_zMqF<y7xj9?g>uJl8OAkVk
zN!$t#7uUk`pi0bwr7={{_jScN-LU(*njpND$^LsB`DPq|;5yluUS8yK;<*?k6y43}
zF^)2sy3!rOO#W8nFO`xDzr_OUmuj}X?^>q{zonE`<hAbUPCC}7nyt%NTizxrocbfp
zNG0!A(nPW5rzKf2O+hPN_O|TQR^s+Ont5!+?<59G2Rv(P_R02BC~UiFi1k&qE}_cD
z4Q$CzthCAll$tuKSzMe<+{Z^vWnA%oShALiX24h~Hru03!;}|7H_*X3mO2n7aSH@(
zPKdS9n7N^@Z@;K1S9jDe9B6nmn#!(nYZIeqehX?zm~-JQT-n<qY!fHAC37W~1)Ny)
z_X&HM@5Bjg*s8srwYFPiZ>{4q4osv$VaHD83PV`b)NojcRkz0!LYU^C2lLZXT`J__
ziU9Se@auGh-tYMAHUeesws}xh7m=+}>H(j~j3qO3#%1%AC_!n&YEL64Ki>exxe>es
zVJgvMu*n&^!?ZtG6)UkmJHl{`U?0>>O*tY-dng;|G&%LlA(qC%pORGF!$W^HH!&%1
zo=bN6#J3038X$gU**47^>g&J;yo*X=-hXbUXuIX0qaqwN@9MF%g3(zmD*&_3XlC6z
z7RO?l-4nwpY8p(>1$*0w4?w`P@oVE=W;><bK~y&B;3@4!aT`UxY^9A}O330m%TW27
z_}+<Y91uR<Uzkiz&ymkXOkLG<<cKQS1-KNTJ4T5_3=vid54M7wpYo|}K^W3+Zjg{C
zk_QcY!g+bCDS4?K;{1SEdK>mHhd1=039lXrqne`4%uFRZ)r>FY9O#mEWV1|{3&@JO
za76sZDM}5Ac{tz$TbwQ&wws+4+~dPtQxNCD=`CMNotG!<Ul*xX(fzM~eG<W%%8UzK
z%7pi@L3LJcbYUAPbQ1S+zXIIt$3%6&t5%}PVdV6!>=bq%XQ);0C^wXPVZCQs0r#u*
z5mUufxta0E$A)M1s{yw`{S(XdbPz4pzTW-QmQFX1R(oKkt#aS*J~MVV*u6gm-Ra%>
z5A8T#<Ei);3}!l2l=56<pLWx~6Kv==4}>*|Z_EeU{03{b^QPHz)-b~-DJbvL0wx9+
zg%x@20GW>@Ptd%RUH~f<CaE%Jz95SIEwDGtSF)v-BAc?lNy*Ugq9nr=O5&Vr52#9c
z^V5t25=ZQa@C`j=EZ!4*Q$h+NABL)3hnG)@?Dnq1EFV;JNP)*;g5=19nO&{tFJ*Y1
z)t5R~jvsQb?o~qRn`I4iL(41(^{n-DxG8)?F1#xDjVGO~wV{((*{K;MNzq~L9|e(B
zhNy3|jYN-BS}c4WP@YhXCBBiDoQ4tB2!%DFR$CXqh4KT5`)nuwWbL?&CHUly7y7s)
zS%a`^SinCzr`^$YnIZFC^i<M`B3?On7QmO$tI;)eg_jsdNHephFh+?aQ1x(BY7*Kw
zId;uiXB>Lp%<Pzeo?J7m8_1{lGgTDO(gVoLL247T77ac;#s(<k&zLPh^xj)kI4U{E
z-|b0O(ZACxgoV}IFSY(lAdjJ6A=|Ad?W>_9RE5T?75Q0AL&Oa-sp{G;Km8Dpuyq2&
zoO!5%=Jbk~KviiTSw-82xDXz)b_-S_^`7GWCaNB6Wt@GCBcB3E!qqKIE1aU=YCyx>
znP!jS$OwYWXe9YU&9MT;3VH71A(VZ@$uG<d*i41%mvI=1OFQmAsW9g4oZFXCx0B!Y
zXi2doU)6xGoVH^<4`Si7KPrH~E8~hNa{`x@4AL36d;&y!epYlK#QAaTHm<TAu#cX<
zAQmwn2fs06n$#-G42os1G&%Pz$<=+C>{32*eH!$}<MXHZP_}Qq*ubytBquY1k%YT|
zU3SpQ!IZv4l%1<Bbr+CWt!IX!@ORx{EioqxpsEs&ewWCdCQbCG7*W_H5p0>DMr32)
zW2ds+#W3E$f6X1(k=6#nX*^Gh7Fe+BAZ&7;)c9-V<Utu45(o`ApGU;AZY~`qmHLuG
zCRNxz+2AV9{~^3r|8xt^%h;wq$^AvuF$-DCZfR_<uU})XG39ynpjyXUM!6vbRDs!Q
z*k+-GN9GY=pbNu&(?Z(j=RlN2lpI_;M0+ok&m$c*AwVbR5>M&{tQ#=JDXSZ!HS|Oq
z{W1G6-^{mN%Yf+w%G2LUDN1)debpUH$7^q-pzcW*jm{sdo%9isC{%mpBYr;$Gy)C&
z%jXT*A7r6>?jQw2JBB^Czm~Mm;pxB}O~O3C%xIxPZ!CfTK0~Y{RXCUAxhw6vmNuo7
zpsNF3f(5}IT(#ykJJ#V2MC5Ibs=eGbzEv*B;E6-uwJ?@U=#z#t)%Q@f#jXAZ!nidc
zZMZfylN=uhg)NN*f~YgX<eD6g-Q)>jm+@rEef2@`B=htIf*D8xqR6voMEWS9b;tLs
z3gNtA!RqfDWcF`Qx7yEGxmvWg(Q}XzgALX89SOp}r%jm-*qU7D6+P-I<9akdt&>H0
zLD`2ex_5Cp5{}l@t`IhMg2DUXE4x6N|JBJk$(Wpie22}vw6x0Fl1LSI{7@$MZTz5<
zB(Q!f^(CH3GNyxw|2|b>a0aUb<NPD2?_;1q8L_UKBG@Sh9*CQVA1lAN+!M`)EIKIv
z$7x%V=QI3l`5fDFjDC5gMyFBJ)@tZIG(-2%iCT_Hw*l)mxkNiF^QgGjhNpIIh_$Il
zjHjuy1oO~7!Urj5`WVxpK3Cb4|5(h(Y1L1X8}NJG*R+e{5dM675<>PSf=3jw(V5zF
z`C(A%&b~86iKp}s=-%WeU_LZ)31?t=i);Lnl5>z^O>a%zG@zx=0X(T0^D6C#Fm&~$
ztAPiPgBcQ@?yh3qJ%~cv08uIL7I0e-|Fh>bQNy(00w#6MF}9%E>b4XW3eynA<TqIv
zphVE2YEJ!VI&QZ|Szj9Vszz04=)|(9Nc79?Tm*kMMhxzdJp#0*8}%ct8<Fk+0zJXi
zTt07wS`I}S;1R{LU<JZ>pK^j+tEyd;b$0b#;fL=EiYtmXX9!Fb_b<M9)jj0s#F&Ut
z`3y4^&TkVSmuj3C&GVZ~0!PvZZT~8F4Yur#&M&;%-*2Cocpu6Y-yhlS=pN^O>{y3$
zU~7C~lu33=Ek{S7fVJAr-l^o*<S|1H7S=w=u}lFo3(BU~M2ij1|Ek+jmY;h!#in>J
zA;ts7$Od`^iQ6I=QL6{Qtrq)X1sLZHtYSa%ff!oyR&BEYA&CQbD5?pr0GnTu14rVn
z&898qrFkV3P#LV-Hs#F0c+C<C(bYR05kBJ7X!|r;fSb!cSI~Vf4@{6{$1@zfv54po
zz>%PHF<LsIL9QLL{|dYQA!dP2=KCHvBh5!oq8=2q5#jFEaV)hM^Dey0Lu~fZZz4U@
z)ymp;k#gZC=N{;*WsElI&(jSQ)DaIZ#djti=o+RDX#Q2Zk2tQ6wpTG%p7N1uXWDLt
z(mGMx%-X^i+rkCU#16B*1EYjvKtQC~wh_k+jRY;9G)BN{!@oE~6?c9`8R}U=&|Z5l
zGr^9;0Iw7&;qd=wRt%oui~y@jCZ_Z)mZ0qf3Z|Y264)Rq$72kUrho2;lC9KI%?gM~
z3lL~?Ww8XT)#jS`Lp#@JY+r;W86vDfyU(M0qv;~5OsJjQCz9ve<dqn_^CYBMeF>ZO
zS~DaHQU9FRO~q9zj?TN2ZkAPR5Ai1Ca`It<0UGg|8HHBnQ*|-Us76Crv<q01lUvH!
zF!CByARuoJwEUdYqcd(r1oU)h>ex67N#Ei1+%qyU;!(6f2!3_Z7?<=zKxznCT|2Q*
zU9P-Bt$Gk^4L#u_9oG~ve6=a6?S^|P*r^jZtZDv}#xK}LK)x0ovoTxpMF-n{&&OOY
z0qM@B`@E?DPq4pMmjAsN>L+55xLwAz89gv}3#1~FV1My!6e?AiUTb;hbp~RHQ#t!X
z5>MOJyhra|ZtrqL2+ZK~^X@9J)8NVJ9H|9^U?gD=<r(j*r9Vh5;Z@9s>8)a7-Plr9
zJ+i{v6RAZ}oe@+X*XnWoBhlKx<OfcZE_<%h<m@vBB{2nC+Av+g5@8y##RFkP)&_}P
z-V4duku;jDISc2=-`ekU55SN@>${^ytW7MSw??Zf`idH~_-2XVT~y<`IOGYyw^Iu%
zZ>$o8g-90Z|G2X)qy#Cn?SE>q+Rb+R1zFq8`y#4PmnU-=IBzS?rP1{W%tz5wQfAfb
zjvyQ^>9|p)JS7A)kW}Lud@xF5x6BzE{EYj%xI}Deq~ue7VHp@J*ZOTKoyMo?Y5O|H
zYqVm=z9eLpIhLT~ZUU{H<BqcC0*`Y!Xgz_oHI_Us6oBaai*7tcFg9gsg)(D+5CT$N
z!X0~QrNI{xpz~^Q!>Aw#wCuIK_!AbTCPC!+a>*%6CZtPL>qm($$bU%g$9OrqGmVea
zzcR7$9*C<PaLt>LLwxQ+6h=O^gOR>-bH@B3ha^YB^8%0RR9j`S@!duLDjGac5N*{A
zwJzw%{Z{Y^=K^awDgGq3OEuI?KO1RTC-|Eax^>m4oU7UskxSr8utW*LiZQR1>nR=a
znS;iZ(iA_gc2Cbp-m4Q}19=f{1sT&CthDl+BV{4))Elato5A;p1)G8WLThU77=6O+
z)V6J0Djsz7KhQdPKFE3ciZe-vw2B+Wpl)W?$40;SOQLPJ4Y`<hxev@~t~;=W49M*}
zwXkhC{$ccU#0pPCoh9#qM%=U#MG4kl1KOJY^@d|YM8HELZPT3cEY5+H8-bJ3be+9X
zNSyb%MLTI|2lSZF+<<9qvd+6&2j13!fnjY!C*KyV23PUuidc(W&xQwTL&?tQl$lV?
zC#GM|G5sDV<bf%+IlD<^=@WimtPaDOTSLFuo%7^IJ*Oe223rcO<cvPm=YpOfRMy+9
z%E{@HgHx_OrZy2BneN+sDRSMjd^gLMT;PylQcTE%(Calb1Zdrx3@HnXE#T1ZY&T5S
zfF}C4-fLK^A7_brwmb7Qd(T58BC1x^a89w}yF?D$sQ2OV=P$V+S~U?W(r{YcJvh@*
zYI&G@?9w}HdWF*a_)VR-7U){adPZzPRdD@*G`6=kV;y{GSi@3lf>TyE$p|S*L(PrG
zKJ%?S?sog1m*QIU2Oyk%{E?Zb&03LqY0pC540mZwe}l!Z%bCg;>*Z?6!5)AitiYBL
zXUH|l3^yzqf_9`-Mst5zx)d+Uron(yQsU-F0je3zYGA4Xg&U^Sbtt;fZ!_z$J!Bqp
z!$bOlsoZp7&XPlKaA-wFAXy~ngaK=!HJ4Ga2Zj_6Nja(sL|z~X4qVs$NhBK;8ut*+
zYrYBlg@UuX_XtU}Ha7`KI(Hx-7(|Tqd1<g`b%7<-gx(^9TjGN>c#bn0p7FXWJBCXG
z8)%y0x^wLylcbz7-IeBE6KMeLlk+S>{G8=CddLLhAjUm;1IW`K>Eo*+Sl%fw^hR=3
z6J2weBC|pl`y9}rax(`lCn=A>MQfQJw{pUFO0TK;2mhsl`pd|9pIg`<WTPRIVNa_U
zVP}r0jEy4gGz*meZh3?`gCLrR8|5&^_<{Vf^7MQU#Za>MF~&=FQgFw7O=1E)e3twP
zgxxbDYf}jb7WrZRL3G5)(VOi$EB*lo$0-1$u_n4R)8O1OxyKCbw2U(})=)Oo8c2(V
zKjXOpMbqYrNkd2udj;JdF^@~b#i0KjQ+a87v9s2#3Vr#Zb|z%#gn|*RMjNxt!s#a7
z1c4o^uD@Zv*Mt&h^?yQvp|W^%k6~{91GmH!??n_MFQYNc$@yi^79rh09dkq4wQW_@
zRJ6%Cv0h^sDRyad1`rk*d^`-Mq1XBig`vMT3HB!V)ghAucl>}66i+o5lbDa%Y_>IM
z1{P9x*XRO}rPeB><ar5U8g<j_dewZJr;16OCF%e-K*+xXY=?FwC}*r#BudARLK)Z5
z+@d*gAvy<|JwOA(*%I$N+D?XxKva~Hax}92oA+vvXQBWgi#xR>w;_`{o#b^-zi_Fq
zx^=0OEtkP;;z=z4H3EcfHy106wzt39Y?rRY*pAx_AzX~=d{DnI?r^<$iX!K+>(APG
z77QlsF(wUcfzQ~rG&g<!5E?#x0t6Q@d+%j#xW0I@c+li;Bd;}p3D6;&vYo3CP$rzu
zgHMHH%vCfG_~4tp^K6BMnNgu7XR28U&#>GKQ}Y2y>=4?@%Z&c+PEFt%WR_dMkzE~V
zDA&$~G*)`k#CO(S!a#NmiU}$PG?SCbYo1*eguWSJy-8k)E#(xM&LABn;N=>MIWQ)g
zRr2-S>YBGN7*9%IsR|OIh*sOM9;?GaKKSN8le8@RZXM4(L{eZCZM>u)sj??f=%_Vs
zHX@XOq)O=q+UWMh{4r8peVlP`uXxl>`^fRA%fGv}%uzsSlBxVy5z^@Xd@b59HXch!
zP#~odUVfk5BhnGc8PnDVO5&53YYXl~P|V%#n0Nz1xs&y+nUODGOt4D2#NNZqltY<L
z_S(C{T&)+oDsBV@N;{_iW<!sFvstL-F$e7$l%{x0x2$+eNa#Qo3x&JLj~DD1=63+q
znMsQ8ofQ;8aQo%zDEg+^UvDR&As7`x1s`%|1ShSkLXZy8k|HaOo9s*ZA)S`<+iKe+
zf==xffx|+L3ygaBfo-;isSg)$k)e<Nl$QLUp;+9RCVuvIO@KFWk!)H~mtTAoH44ZH
z_c|=>>A0ad4xXzTR-|<!I#8p{7?ufYQEOo$d@^;_xFxyjH#nD@gJCk6;sbj2j)>a4
z<pG{5ztXIX{d@W)GHBZKaFY>N_q*@!UyH)iG)N?`5d4&4P_!cwz$(1ho)ksNR#Tz^
z$YzKCaFVKma-oHqF*YPhk!DdNehhiW{w%Xm%<E#DTd8R~du7?+A!sJwOq9QkaXAEo
z9>qs69nBse4HvJr*D5Tyo9H!~OD+=y{}6<%(k{T8Pri!l!dLJW+-LNazAiS7tMLeq
zcys!*#*)ckoLUbpopAC9TjdKPVPJ$Eu6Ncfp<rXpD#4;tk%nm9T<Tw1I_Y0Rl_1Dr
ziz&Cb94`9jE%W*;48q`Okv^e1AcDdD#<Fd@d`E9C^e~?OVozfjf3DpKMq5xq)qYqb
zjM&FTG}2Ex>>|!Wjyid9CB+ZnqOY5V+!mrVslzMmcP$>muHZ3eVTL@ZgjJ3fU;i{y
z!@wds#$ffo?2p0`y`0cY`Q|U`g+%&k+oCdqJzE#$V91q1WRe{H&-wv!kYBmmfdC;6
zoUv%s7HFO3U;<yp*9z+0LxBiPdNKu^VgV;~uSuE6DrvETu7G!R>zUPhA6-;H=V@aj
zf6i|NSa#FpxRA^w@!!8KGLQ3eiSqD*3c_QUaUyd|N$w`)?i01Q89gDx7fpN@0Of?d
zYexJevhC;@WUSbhKkedk@;C2pe)ANvDJ%rhB)-Zk-7qW`e+T@kk$B$(F&w+Q7=YrS
z2E#une_sbuwDlBF5awBD+Ft<hAalm*%=`{NBy&j3pt?2jAgT!{4A4^FdZMxxizcmz
zLH`O}c?2)g)IpQHJSv`7Mqbs2w$`CBFOAi0lMNUay#<K?N@wsHiRN;bcoNQB`I%F{
z01GqlXz+KJI*?O5Tc69L&v9y@<R4fzB1#v1;w+52fWK1)$7ldXJ8K~oi(m8`N^3Dz
z+<npT%M&=nu@1Td<$g}%vCbsVWEJ~~{_PH)-+Vx<QJK_S(nXC`To6HQtD7Hbx!y6X
zPk<#Q+=c{|$ao7q^kuQP1|0Gj0WK~eYe%i#gJxPtqgn0VM|qBKA|@Vyu%QS;-~C48
z78e7@J43ZYwf)MnCkJQhlu(-PM^u^y<!<^9ax&H8P|}9PI6&KdC>#0Cp#u2R{4{hb
zt`|2Zw<e|5V2==<Xn{fF>Bp~=Y%}VvU0!cF)12Lh<va8OBm8@Y7UB{ZZwV|E`eL3o
z=SaB<$~xhCnhbEoXw7sn*ln75%PABO?C=BA8U~1~<JWmE_L&iRlhAE0kea3p*4?7d
z1oWqRa6Qjb;F4EmlS_FFG?jOBXCBdgkQc62uQL}oC26|vR}`3vsRa51Q?=BBw=VRd
zH`sT`8x7eOowJRr2|SUWB&+8u>c>CQZw9e;%Rm`pq;T)WOhy4y5kwY}CRXJ=insK0
z{(_<TZhrDeV507DRfVM0%C*^LuglIu@yt~HrB{na3gh%+9bh~(6I>E~NAkTxUGSe;
zz6SvSqXIV>IRG18oJ&+v6Mv6TAs;&plNMFh%Et-eO_&bM^qNXqj7H1QL4=;Noh(f4
zWkb|()F>btRCpnw_+h6Q69IvwCF+mX0nH(hCCi!`uo<*-KM&tq+f&xA396Jx`Ccj9
zXnN&^B)P49q3$atKu7MkD4jvarp9MWW$7{3lMYa&7d^%KpacN7dS)5j$1&xI;o$|<
zsNow_@`0Q;odX^tsh(?nl9&V%^yeiA&+9Gzzx|v~#!~6{n>7&LkJJXX5O2}I(MKz>
zs|U6bHdP5GI@G=&7;0W_&f8_#LU5?3TU@c{D6M(7e}X5wWK1CHzF(=?XLEdn_dO{#
z*6e+!`(wR~l;g*VMS%;HQzTTBaYWL9!HI8>;1A%aTh|SL8V30xzFi(*X>S<?b-P}a
z|Fj5ZeaM~B{QC^EEb*oJO&x|c8v2YlEIcfI;|M|;wVNiKt7JLVmXat5M#F<g;j5-+
zc|?<DJC*U1*b92e7S*taXg@X|n=+qAJxQUS_Sd5gjG5LhVv1K;+}9X%SpRT0nVQDf
zK@bqCZl<R#_-HTs;_A=la@>wVl=c|_Z?FH@Iv}YEVd@A~_iN8p0zfCgtlCSK)V$Jf
zv7cg!|G~VXZ@wk}n$C$3u!;U0vb^36&;fVK5U$qN*{Xx_TgU@}x$fc;d}cC=k2H!!
zvauLyXI$4&;j_QSO+H5_h(y%@UnK`)Y=A7d(m%;zwfpsEksO>;hAK-zo$yaIXtk?e
z4L+n7loOv2bx&=3^H2ncV-^!N*`eeZONpEgisflbcO>EIqbi2b0J{Rs4#ce{4=c&{
zE6HQr6MG2~5uvMCxnmBn$A)SVd>UVbRvE%T4wv&2nsjopPbg`A)DxF95jW}Vf>hQY
zs%s=2GT^R~#)yhXR;q@~=Zm^S*ZpRxA>ZFU5^|@o5A{n4+0tKi#`hZ5rpnBal)Pg7
zR1U!~J9)~nj@x?dZM`@oe>i1FoE*0n;tuDA0}&DdUuQN}8y$()!VNV|$!U-E{pM>1
z9ZIG=&r8dVYB#Br(M6zWb9^_{<hwQ^Ws4LvlR}aRr#m))psx4-mf_S-o=2L}S@&8`
zc8~Q8o{0NHD<spK0~*+0Ws>1ZE_FGBZLNYmDhf}Oiu+7U-o&avkY};luFV;AgEaUT
zONsKs!o;|Z3Z)k@-!8;jzIq%M8qbKH=|J2&PftKWG{{J32o%a8@z=T+I}v#P-Yx0(
zXl(TvFxP-NFx^0eYoS+iZ|2<A%YjIqc^?hZz%71w<etq0a6e~Ia53gdQ((BPFpTDD
zMEK~W7Y)3t<HZx%MvPxA^19^9HS2}1&#Q(dEPXO32g2HZZvwQn?8g*Hg(tGMcP3ON
z$Vhw4Uuq7q2s}JK-+&7lJ8J?leglfi=Rh!6a{Ivbi=JH~an$>4EK@6e06f4&H=S`N
z%SHzKd|tnxqMCzn!!u!mx#sS@5QGy>@$ah;<b2`ERqzR_Vz*b{UH2sQ3c>~pdQZ7l
z6_d{Erus2I4UrHa4N&$V5PSjA7gwnz*tO|J94LJ0P8-St6YT^wFc(xBRhj}HeU-Rt
zG4F|9U4>vuVms_!9h7+q*2F%H|CMv%);|T=l;7(t*B*6#wx%ji6=AVzh&=@`8$JxW
z38FRy<uEz$8cofTN7$PSFIHk)Ke}o$M>ii_SQvcG3_-{t$-iH^Ri-Y1a{89|w#oB#
zJ=uY2{l}6jOULW@b%EFYQQNRm;*%OHr9%Gg!o1+zXyCwJx~%lgRFVS?BF-rZPS#zL
zh0!2cJwbEQTem_6jf;H?u%bzf%#MoMmO^a8fM^o63r(ieaV(P_&!QVLUXzW_dRDbi
z{p68qS3Shuv?yh(Pm0iO0fvA9$T7w{TBX$6-$N$JM`bXjkrt)eXEk-fJbO^%>{mQ5
zo`H4ba7VNEZ}$9k=s5T2xjs@Eb|fa`g?NOi9gDtP@$*XYYb0siq^(VlJR(%H;Kaj(
zhib=74dJ#$=i%fs(()!*z&&7mu#5m+VIq~?e~|ocXzx{ju!Gr{jJ=0WX*!&T*+q81
zW2x5)`Y(2hE`?-B>_oL%6-K@86jg_QlaZY=*F`ahOjTT<Jr#e`k&n-ut855KL`57r
z+C)CLLm(`DJBz9MJ!-ojBa7iSRKc(}l^kr+$TC+k7xSgAH-TCRpniYMWrMvYryqSU
zBSfMrCs`EAAIPr);|pHhJsF$DK^)*?xa`rW;(tly&Yq`G{ajT%wNuWz?zvXgxcRTl
zq0fKBu`-Dw>ql>^fct4hqZDGs=4DI!c6~~jtCp)Ep+|=Eay5&!0`?O@<;xMjth*Ha
zKe}_|@05`D?mzy7&H^5{JAJzrjFFZ{VUU{CV!skz@331g&V_OxEZ<Hfuk{mguT&n{
z?S6wDtmwTkD-yN8MG3slG6Md-&l?Q8%3&jruq#3$Ku}70gKj&jlkz%&s8R*J#P<O{
z?L65dfAdd7pBjdYC&>0=T>MB)qL9sf^{n6!Ec$^RpXYh~kmf{S0*>WOB*YI$OJDcW
z$>g*FB24HUS(>L=0&_;2Vayqi?=2ApfnF11lQ4Kih2$$0miW<NF@T}>o>QpY!2!PF
zBZ-3B-eYm~j1A8pYw2hY@&58dRA<g^*nd8q`n?Q-Z_@yGJ_f8STr9<fiFvtDZeRaW
zdJq0wT?J7i@N2y7lS{sPQC3FY9kl0Xs@4<*NF-PCX_2>+pr4~V=}>`-#sHk_gQ7$=
zAy?5+_J>UzJmk8yAekYfs9HoejF+vD@)RU<yGz8h<&{dr1GsWiT<SWZf34eFg4qv0
zC>8-39YmQUyUyNXEX5zd_&k+wUrK~bp?<|j-ZUynGPYBFWfJxgnB{xtOp<O{cglf(
z;vAtyCLB}YN$^f*#AFvKz4)rfvm$RB;dzeAJ3#O6^DMQ)4KD*j9r>ldaEY~O>7dPn
z5+7%FjxKc~$Tm@2Mo9NRp+rGFu0GG8ji(rMEc@ka62Al~g@s;z$9=AnCB#y~j3*cG
zq<e$;HSM@fdqo>Vz18g3iE<=(C)qV)q;08P0s>e#b4R{rYGrI_SgJZs@|8i`M5a6z
z<ITP3uJjVzDR`Iu$XPUc<f&jkgVT}(-IWc%efGS}nY$g!Wv;;!6X$8Ny}O&H(?!1m
zZJoj@N|P{l((kDZqWRCS^<od23ShtEEri29u1JyO%8LAEIDAabCY+&I&ZK>IEVE{%
zch((0RL;Nu>yK)50L9evMaOlwgu-HIsA&T<PAAq5?ipW}zZ*adp`b3~Ks}RzDzjnq
zU`AeAtz}$p0>LjwW9%W4mC7-FA_gp~CnAgb)O%`6=YZcHseJB1Xn9#+M)!;`EHvhh
zHIixCoV{;-=;kSAzJxI{35a;&w|vL|x^kjj^h=L}ylafFXTf0+YXYz^7cYUwjp!9?
zUxd}P>E+9DIEpY$WSVl__Z<ghSl?rWuLF75$4AFYCwwW#0`3>b=`cQZZHtfWJJz%*
zda=ziO8pjYGSWm*vdS|O9iWcBLuF%L5stkA$?{(xLd(hr0E)p<x!2*S_}Y!_|1qn{
zr!RfKaF;{;x6O*!GsZ>lTK!fPKc4QkWo(i3>!s*$nM}^Hlh92MzRWEkDvZCEKwRc{
z1uPp(Vc{yRbA4C+$TIG7%kY_zqz-lFd!NunTFfKL#Kx7B&g?41oEM$|5UA?r))V_V
zA`j|y>SF$rv1}|-ZE2^uKr&B5LSeWWes8Z}-3Bzon)Y(uF5*5T!lnEiJEVDI1?(vI
z>@{9*InC>5RP9mu8YBuyy6(%%=mjPBI^P<v;V~u11<W@@2=o~<cZ=FV>00#)c;>M3
zjo=YSK(cKrzuK7^{jgTu?+9kt)Mg@m`TwMSz08ULRY&V1qUP$yv2K0|ZgKzH?T%k)
zC4qCAdma(n3{9BD8$|&u<BPFj;J8}DYPWQwr>>^9VgiNYP@EZ6@}!TazZisrxeO{&
zSfF>OasTz-=Nti~0l2GmHLX}ct`Z6$nczIY_)d8By5yZ8dYfg+{KCSH5iAe7O#n61
zkwkie^7@o~(#5PYMlQ(TU<a+m5b?jm;&!<08a4Pze^iD~g{f<h42r;K`F%l0luV!y
z410G**`d9tO?T_fP!8TN#ji=BpX0ww_XuU8ojx*1?LE(&tLp*)>-<!gXep;pUj-Nc
z&)j@DF5=V6s|w;k-?Si<CiYQ)Hua=vaS18)d4$&U6P7oC%Pc9Atzxp{gGvH0aMy}R
zbF!YnYux4(HSJpI>X)8?8i+R7rHo}0?rb^AArpkRBr~yH0^MkH!x_3pE%4zBm4Ai5
zcYBAGc@Qz&Th<TIG#!cJ6%IxVH0b+?dg;E&H%gZ%C~KaM>U+*K@05}ZR(Y^KMq%LL
zUK+fdDIec8!p;Kw^k)AoCNITeu0w62!9<2!&$JwbruBYBIT!`FepGB{$g=cAJZ3-&
zRAPEmiY9maZj3{7z#v$*Zx|psOP2EKtlVz-Inb%+0yskCp248QW-H7YTuI#krW$@)
zDYJ5csQJ)JpL#<#5CfW&m|MBiB`p2&GvN&g|KpZ`nF;@-!tIx^XjE9rD)X%f_K1BG
z!m|WMSz1V#h)0J&_fc`LN}m6pm&07KjLY_uV~YD9uegyb0)bT4$;-f3aDC3yp=i{A
z!W<H&8TJGeO{CH5%ENQ;ED#oH`B{<8-KN!pdE;amQm6rz8=0Fz0^`K;vOMM}4Y>FF
z9oOW`?cD2~y}X?5QrtN#1)P~;3MqSD?s&3i6xvj)xRUkqhb{xPcX9ujs_8m^k5?74
zJ|FM2jDb<#VvX_rh>#2EP6nI(j&_FSJOz*0!n&x64rICul%}2^4pnWB;jgcM0)@F)
zyx>3}J@qiMs86qwymPMgWi|CeYl5jSeD4xGU`C5M95MMd7;=cGQuq!oTfvvx{`WU3
zmT}lSumNUbNbmxaH+oMhh(I+%=-$_gh7I}yv5cw0x|ryDV2f`E=ekYCxen}t3FRn%
zW)9sW5%#I9@4{Rt3sxBWp)fy^NiE-Fs@960A#z~zkwLAGV}hqmkqM<2aYhHx+$yQ!
z0p0pKq97ORBK1>lZ9Cns*ONpFAaYJZ_5VGJ8hbw_^VsFg>p<n;-?6hKWcKMMo~Wku
zWYR=0RbrKsePesDMMedgBu7>e?5jv--b@VSloGlyERTw}++TNC{gX1sbXmB+{>o5>
z#Nm`gPeIasVLQ|!dG=zt5I&HDba0^yVf=oi{1W(s`$3E=E)MIX#g}Xx1zeln452hO
zGqptZSdofE)3An?#D`YURePDu6xN1zz7s~z@F{<SGYFDDtYbIk8X+^?v`#o^2(7*t
zkdgqU|GEwe3T-T~nx=Bvr7F?v1SLXF_fgUVKs=x1n;dd35djEla?*X$kO#r4f8O{c
z{<&@#sX>fK$p6zy)7{GFv+|-C;8r_wsDT)O4NQ9DW<{(d*RgVSw-STu0k?f7ao_E4
z1@B09x+Ao0y1tZD%tSnis;OW^^&UOMuTc!4i1wf!+cy9Wz~h0Ft9dF0I}5?~t@xHJ
z@(cJg8cRYX$U6AArj(vp%H(baTx>d)OoK3wPfv%tQSVn4Q{9e_m#4;X5r0%9ptsOb
z1p0@&Rmjq1D{Vy7V=u=e2>hRaZxA3DDUjSj!^sF&PgjE~>{j+R=rkH%t5+8%UB+Qy
z%3n9-0aaLCNUh3Xomw%**Sob=Vef4NF0^*V*7u0aSQpesEt~H@5vOsRM8F-d5#ns9
zajVxrePyta2l1}IYaE-|SJrePPAzF=FIjzvs_p%!;LoA)A|ANOjd}D$X<V~l%QGtk
zkITk6x9`&SkMMB#!pPP04$?@ExTdm&uZ-QF^1qznsi}r6E7Yu*l-fOSC@6~SW&zfd
zAEgXX5oW9t2hrY8FP%7uHM^|cv#$0lYW!kEh=tqqFK7>Ek{7I>f!*)_3K&5EF6#g!
z)pp>a*8v-gs}bhkA6nSijIu{aNXn}3L`@|r-l9FWG{_b(v|@(h9C5^uRAJ^UEY|C~
zN%}<vN@w36A<SSib6{0iKRdtcT-fQXlwc{1)ADbOC5PEKULP-UlR($F_p#7&xtZnd
zz8_B~76;1cVvKo0ML6`~3Z#m{B9+Cvk`54T$!z!i6V%utxF-LXgnWyO#-6BSQv4Ur
z%v0{R+kiPul5L`(n~A^IaNiNQ19<#$-80cEmqcF}7N#}q#;EQ5vQI9=HS^l#^?hz*
zG>t&i(h-ba(F7A`mp*4#%QzCQgtVM<|DxTd40D9K3C^mU$`v9kxIQn@B{I<ZCy=<H
z?oPuGO>`z8$^2A4h+YKEA@;pqOayY3)Ae=Au((adx3o60i}r4g9$%XkF-L6wAeXik
zR97DN;ZI(qbboOSS4N;?Ub%ek((W)9c4zwwr#-{mYa=iLq!TLn_D^%wLfv>Err*^l
z9$mN=2@Ib0tdVuh&Mx{vapaBTq^tI(hQRmy<I_9xABx!N>Oi2ZavYY25eZc3r`poY
zPNFl?dDr1(I}_FU#}%@ff}{xm!Fy3jxAt@5wI}1+K%4mW^94jB@Eqc$;zIhzC0YPt
zQ@HO@t{CBh3+j%@gJGe+IQgYhl1`PvH1NqE*B=*|YEjDW27dAQKnXx=cRB0ZAt`RK
zIil>R;-20T*scfU&~q@lNe?$~#m8-I{UmR%_<sWu>c~F>w@dAN(-Ue=TmNu?yZ?ic
z>|(s%GJf8^(BcB(zO^&Oki(E*Heojs*#a6}T7$_tAq|QseuhfymTt@7lZ`I$lNtoq
zh}vVH0h-*YNhaBi+ql#CTQ+%U^L8_uK@do@zIFI<j-7~sx`|m*yk%8yU^qI1F~0q>
zOkp5OOmJuA?CD|q!rXgJm2+SSv5>zxzy0w6P{jheTS4ki=_`Eg(L95TIFJZdt~o(>
z8SJ&=?$P@ZL2$$n2n^{mR>51QEJvVM@qRRMFzO4L9gXJ%73ZO_EWwNQA=41{8V&-j
zE4#J|>L}1OU=$m*-O$UUuk3BvG);Q;E)PqEwoB|6Ah(9xgb=)s<Io%fTW9H7{!+!d
zTL#F8-?F0&CIp`+TH+15swkkLYQ*K4G3!IclRJ^;?jIGy@Z!mHch;sc6Cj(|e?m>~
z?4bdC`M{7z4u_cy21XBM@=w!QW*Cx<CNJ|K^a>_kK{-F{yVVXsax{p^HW3mNO87n>
zmm@vgXUD?PM{TZeA|)Tk_Dblrv^l(DpK0M|s?Y=x7_8mt!ln9El%bfh8K|qP4S$>%
zOF2GJGZMn$D3aC4HUw+R!6L;1>|CzqeseS99Lv=;4nfeUT*GKVx=9%uC({Gl%$3D$
z?WoxiDH1?pCee5i0aZ1ZC+)V*Evm&cr7mW*+XdfydUFu}p0@8c*<-PgYrqp&yc}~0
zzdqHk$1h;ShVRvnZRdaP_~jim0`WM-m2^eiSAQ|-vpoiypy2SuU}N!XRx-0DJL;c#
za?3weA2sN24sHhVSKmtijr7c8T+Oc1Q&X{>fk#@wtE14OR!ALo)T+~yL&B5Ltb1`C
znF-86G4wH`d%%RGN9sk1Jw-9bvzpn9LKf#A=b0>}vEsLw-Mol(<)vM*?sPv2HBsVc
zoZxviI7PiL+#96W1o?^_`1U~I8h&{O7%#(BAuTk;94SyHsVyUp6mNF>f};I6+wa67
zOjW0PLY~mp5r~ZhvD0|^V1Lx#+eI|p<uB6Al|JW_7bY0O&XN^kU{XtN*wOYALFz0h
zS|*UGKDt?kUfr2f;guQ0By{BkeB9qS)bGX@UIp_WZ(t;`r=>S0^?R$1*Gey%mF!mB
z30l_K+6c$%InBleFRXPE2w_Ic9lK^5Q#tFdT4BqxhI`w_7oyPC9%vChh;?o_5kxRh
zR%<RO_W5tTr%P*|OX;wCC-&pFF-8*0DRR%)d+0a&1YEyom#Y|>H>&?fu<!AKo@Z?m
zPqjx>Z6O4iA$<)GZQ#rMP<gNoRy{U^Wip<tmO3olK7z9Wmv|8a4QE(Pbj<jQ3MDcf
zDm&HafNq$I^jXrV_{KCBz+gH;J;Rr4b~6$`$=aCS4F%~k$n%ZhL*tF6HboCEvU9`@
z_>$qbTt$DE#UuP~Z(lU`4fBeEVseD~aOf{69m&&t%l*hLu@+u-zPC*Stieg`L9Z<N
z2%e*5I~JSqp6}8Ka8i=byqA0a84ybPN&+-?Es6E~1~-waU>yxQ^tBk3h}(XZ!b_?@
zQ1k;J#(JT<xGW9U&J^us<>OqHu&VY}1kOMgF}n#_q@^VW<C(l-1&VwDbtENPB4t7U
zv_W8vp~__Be{uIycfl??uo0%U{_lWyyR?AYNJB(8H&NLU6zL8x_Y~E`Qd4mF5VNF7
zeT4%+dr==Sk)KsBlAE5P#G!O6PsdRp9fHY)pq^2#8Tj{6ia0eC@sc}Jyhs&!b*~N)
z){bOPQ@wo1x=Wo^Q!^#;`Dz;gObUp!65HexMi2qxK_(2AaGb5@fbGxw$fa_XRziad
zR?m9$8d7-b(icE>_wR~WsaXiutShb|&7*>~Vc@p`45`SHL~pde6>Ai2r7232-_tDl
zTrfb%+m2~4nQRvoUdGieZR&AN^ROG_D9W<v+CLfc{!or!-#H`JsNWHAS#hBN=!m1H
z(K}PVJf}OX#-&Bw?(6*c%2tIPRRA%0+V-<mmk{)hw6FOW!QD4!)<g8EkWx0FBkZh&
zL5>8ky_H?~;becNeE)~9T{=FKxyY~N)BRrmsgu}Et6DsWx6#@Ld`WVW?JEKs6)Fv2
zS_=uC3Pfp8UL1r(8%1Dn0QT&RFId>MMti8;jh~#PsjG5O<w5n!la6H5d=o18#Cv!f
z{q#&UZdCk0nwCqI2Q8I<4+i%sqEmfS^@=&-zg$@Ts{BhT)ppsM{`8e2gaW>GTHhn9
za=mA|p|(m9C=6%Gsm8NQRQMD3VXn92jMt?C%cGxl|2ZdB^F$n!4Ev~^2TVR_$7%*&
z%_?dy_5`x>Ts1xMtYutpx{+MXO9{|;j2%q#fMxygr>^9aT0B@aZc#zua#9x!2z<cE
zT+gofiN47QB_rPvRP{Vi|C!TPyas?>#lO%Q629RALz@wlL$Z~p>)bC?@sV|v?F@Fi
zRoIcVws-(%m5ZT*p&nyPc`pkC6otZrp)Iy%_}roba}kmCoMI=jd;^j$O$|t;>cke%
zw2HnXcij4blCohosfQ=l1><J>R7`JBdKRu1=+}epBbQ0O0_3-^`MXJ&rus<By$GQs
zQZ%sPu$8ngfdcQB!Hn6$qsM0?1*Xg^xVsJDVWTO^lv7jN-@b-D>~0T4D_1GCC*cb5
zt|D=r0aNoMv;2V8rV7-o26!;;KdkzwdHGKcTo=^~Y#ZOJXFYx8Cq#Su=V6*ev>q|#
z2Y}>)_qfv4KdemUbh#1}v8}P8zigGn0}q?KUY<n#*md`DtmX7JKKbJck*^pVr0$zG
zzq_dju9Klrmzmo>oJcv2@|)qqtT;wo)pYnU!G?2_WMu*)kli#I{5u*H??5$$ZI1;D
zzL%kbj^aW_;;OeslpPCqxdn(4j;AoQ*1crp^z`fJCvtqvcQ=fI>h#$(NC!knK1a71
z1Ds_mXDv_(8g=LOkWSxd0@rroWyAOF6vex44luVG%43j*p+pLMlVlC2`r{lQ4JdLk
zIg34H)Fpqt{L#c#n9K*WNvw1+?72W_Vb53@+eIDRh!Ej^T5l4#e^@V-)M9FsO~j*r
zq2kaaGBecqW$o4Q_Fl}MBT|ZqEGx?w9xCr_fG?nC5Ar%rtJ~#d1SaQ^Jy^|{IPyWh
zLovXJgym#$<nf>Dl(0kbA6ok?%*A=p3?^P?F_ISR>53~3^V8e^)`(-i1W2`;3q%_4
z9-Hd4+?GUOvofBzyn!wW9K*@s4;;36V&2+2Fa1x<I?==$*m+54OdnYd`72%UgmWh(
zpf<2gg?rs%$x(;%Ib%-IGT@Ms_)B7?a}ZPrb<YQ=Rq+a88jAkCwXp~;bE4v(H{5;<
zJ`_aoXAZR)hGi9hX}Difov*t=_Nr$%{cEkX^gL2z=PqHZ3v^GLfip`;p>eI_<Q<rF
z+ngP$L?&4+@+xO5EU%y^!sH4}n2}hPE&K!u(8*~U$w(xs$NK5Xb*>!rx#T4T>&JVk
zm4J@pxD%JopB^SSG$XIhNVpQdP=_QquVsQY5gC3SeBk4SOR}a=a&OJ$0qXRZ&B0Ed
zN4l-t_47vlYF7CBxt)YCDG!XKqrW}zX3c@(bTwZT)5XW;*Ria}7Zy1#GS8a_p*@h>
zxF&@1X6@C8v=wqze{3=k)l)x|Df}Zrv>h8y%VdTVay#CC-2`L;_7<w3tNZOe34&G6
zMD8KyALjm{C7iNf8CvQ$!@vQirw^KzOLfF|yU<^4R`uCl@L(FF;wqm0Ks<9`1uXPx
zr#WKLr~jP_<j%=0exR;k3ZwK3r0F>sk4U<p=DrblnxxG!4%9}Yns`la_bR}4+O!1%
zR2ObmXcsFhbOJQf@5~}xDkz;&4=X=Gg-$mvH+&z?Y8SbT7J&{BRFwm+lp-V@EZ1C{
zY*kGP31cK9%x1+732apl)sL(BhX=P{t2LOLs}RIDx=azN*bGS(wBl!UnvK^;vherL
z3k;<xa<!8-iW?;#8&bO_W|5e~d3>>yT%O+(P~cCg-e&(xPemRBiU<*dpVDuv9W1zO
z$oJzF7i<!-mLyd1D45Q&DUkSwW^02^l_XW=4O0;%3~{`oW#KTGsUG){4)~=yqYQlO
zm2&(h@AV1`iX|O#!fozL?s|<~E;x97EAM~b3=>srlp|}Khh0W`7@oskb=^;ScbkW`
zMTcb~WhGGyOq&Y(a_MdlD&t+N@!pQqhWvf^yyrEz!Au)gPihEe=!)usKh#(pgdY_(
z-HANbqGbV3U)iE*Q}$~5|6)q48*0J65{qXxK^>xXI(nhVOQtaCA)sLw!?1|3{H!L%
zV>s$g_w}K~E+u%me&9uZwn2aFt{<iPj2?zxB!;eydMQd@e2o=me{^3OAQUmRBPh-l
z#ZW|$$8#@ov*Cz~w_qbrioVRNC65`>TAO>>1*R`%H9lJr_x+eibHsfvCX)xq`a|C(
zipgDgUs1>o;kg1BDE$30V;?;GC148YHi+1Ro}xFv<8jEVOuUs$C6bArS#)e?hYUBf
zDP`ykn@8!e-YpMxLv<XqTV9LYFHa`L7x$N08-c*-u#H5iZbU@<Pp`~kX}=FHC)`sY
zHyz%CUjw%7Eg12QW6XXkW`#|hn732xkVI&mGYmIXcD4uAy39<dyKiPYH8{`=Nd;1-
z)y=O&6J@XZZp&xDQ&e=8r)>u#ft77^i5!rHN``X@Gb}(jg40LEFUZS+?(o`9KWqZg
z1y;6hbY6<Vr<l~6C0+3+C<LV@_t&hlhwsU{e?VmhIKnqa78AY_bk@7BC0_w-3ll9D
z+$`{a5-pW-%_N}>Ku@AbcJJ<P)iV83p(6S4oIDHmtY*!PAAD#$%8*e{EN?qp*^N2s
z>Gnan2~^&*nU}Jq%HAH|X$}{YO)Q%;F46KX)?Y$^W`p^I*Ol!#ClWZ+-`;(i*T9#Z
zHI07$C=V>hkx%ZWaQ>&My+Qq{%vL4uX_f$t>|~?LH`RARVvj0!wZ3Den9p@iB9HGR
zu&;__B`$34y01gG7+7aNy`BGv!SN*=kiEWm^+|n}2P+Q4t(%V@S=&U(80ze4RgE_`
zJveEC!6U3tvv16(9=R7?ojs3C65o~!AkI~3VznkxB^HictXQ-!ZMi@I2PsH&`^O`v
zglQdqL0^9-a!_N6IZ8U!FTs=2Y5M>BxZ7qb&Zyp{2<i80viiH|7(WhOVq(4A9?)BH
zYK0*c+-7!dY|SoM@3C~4a5}lr?d>`A*R$4(6|+AggjT#UGwMRHs<d%nyHv={6w5S~
zfKIgC-B!4VSVfCjzVvL$Qd|LR06ufy%|=pfxU?qRYCB3u>kZ@TEsVIiW76Tqt*WH+
zQgdecc<}zdcYsyuqfibzYN;0d(bhs_S3S28+<gcSX1Ds49e5oCl+ESX_$rrbo3&Nf
zfmbHaI+E0ar=j&H=w{RDUYWr?pYt-+_4K&|5(fbjdW(3n{58hO1M+}*AdC2xenkdq
zV8g`imIOl=nU`D}s^nJDMN-H;(HJ=tEaD-VJ&7p$5~*`Mq`b$MAB^^Jb3A_kq3wSp
z=J!q%){KiIzhlH*UkIzwCm?c0+avk+X$30LIS9S}gwp0tE&eA4Wr9OvJiN(-esd#<
z<*so`AKI0NJrM7NEQm@<oiq7%aJ}!g;hU(I|H%uaFTDh)-S(SYyr^W>UB?#UATyDD
z9Tt*vR#c8w&iWT+qE|&<66>|?@2XAb0K{~wzm#U6qPu-bYgdcFWVB~WT70=(6?9*_
zJU2^>%XDCL>K{O@1Od>#Ia|u<QF|rtJ^!z?wM15oKk#l*p6@GZ%9*}uOSMEgxMR(z
z^3;#5m=k7WyJE}N<q`+jr}cR%rOh{|1M^-Q%#;3!8uLmqiY~4av&ZlxAZknB2`>50
zs+@<XqH^A6WzGdA1A=z%^nmJ$>_s|RJ3I&)U~ann>x)ANtlWQXAvissOeL;!g^6gN
zAqYfN{(Z0p4Um&Rk@M2^VS9SI2wW~IYbVD`f&`F9d(@V)q#{#pURwqC;EinQ^f7L&
zlRd*a`N=0|^OiLhSv9nkt6PoN0p04CwzUCQmmkAUz-=*89Mu#1R1E`+ELh9p@ENAa
zP4{rU81G7?fMRAIIbOA_R3`n#$C{^MWj*6RT+YZ~6E9xXJ9l32C<A564<S_$CwKZO
z;}oFUQLp|2M;rW6@mJOMHe{gBC~FQSs3nmUNODD0XQ9Y~M!N&!C0F8E$p~pr5;wmH
ziMF03xoANy;x6PQ>o!TrKm=U%x-iplz^my;M`m26i%#mf--i<$yfp8x#dARy6%03T
z{S8-P#EbM4ZBl?9yJ^E4$30Glxn#8`^!XSQ11IA;C79#SXiV=)-Rj=<yCP=0`e#ws
z%Bu0`SA=(JwoG-qvGTS?gB<Pg9Shll#W<ak$spf7(x?JHzSn!H0bzBRu2(j><a;y!
z>w(`jT`&fMcKx5s*cof61~9Hmod=XJ<!ydWi1<RCtRM<8(((@S(D%boB5bx`JY<YH
z(3MZ?vUgkZ+|<O%gquXnKcy9({@9H0FaRl}U{uE6LiI+r>|!s(Tdn|m(37c`*k8EO
zTme4XtY!MR>H9Csz%pV(OHdFQV|ohEXq$lWety*Lk=&2WutVMqFcC#V*egR~?IxK#
z05D?*<}vte!&un^|6%u@4KxJ17v%&n%^UwroeX3U^@O+DeaZ_;->brp<PlQ1Upsp}
z>>jYq5wsOvGujgzetwtmE@kn>G#mC$PJqo*#5Q)fmicY?EOZwG0cFU;&T$Nz9e3MB
zu<5C2j=@9&fc>n++Tbw777Ie})mfNRa*=E&CR|Mnsi^x~=m{C@fdQ`9l?-y%^LqI4
zYsxm84o(95mrmVMsfwM3Enz~Q-IW3Kql8~)-EodWwWaC{TsQ*Cv$PWHtdzkNHO1(_
z`dj|E4&<kcX-6#l9(DNV6G1+G4Z_%SfiBP}=w+^QJ*q98ka;k54-r!OSol{TG}W(e
zM;s0ugt=af`CHW<6c*9cazzY6u0Nn9m1twRAeauQseehHDIX6IeSjlTS)D|~&z3(y
zQ1XOT$0-fH*~WSL`}Yrorzhfuuo_8NHQ|eihxKLR$=CI`R7A|<19SY503Y{#G}`gP
zRJ+o3N4CT{COVbG5@V}#%MlPcEHE?ow0f6pQAlj<pN7>d450oQU@oFytI&Vo_peQN
zwS}`Zzi!JZD*EnBQmTTZC&1g7$I{;2RG3$Yf3OzvKERWtn~E21g3>^+L)d(%2P_$M
zAtal#+CW{c_-4-*jo+i3&pc!X&-j%ipcuP<Be_C2C78Kb#4}ds1a!g0_%MM`R_6wB
zUgr<<=uCB*sz2P@a!5}W-KU^y?rx&Yc<}zL`GLFqSuD^PtJ-Zzi)3#6K#<Jd?uV#O
ztCXh;X9CymejP^|L%XuoXSyR}kXkq{N{n5!6GICg-0oF5<?Hr&(LeOWEjgehoIjv2
zBWA>?BC1Lx+M-xg>y^KX6}f-X%zkRUyfQa^opXphrhY;*JJDD$9j0d?fR<Q}n-nt(
z^T`URaL@?7B+`3d&*#j#L&*I2WN45JslcO>BvAadFb2?>fu4D+OQ_<(Z>8@=jOb(l
z%^2;cSIwvZ*%95<v#bZS^Z}fJG*U_cIwo(lt!Xl<_2m4HJiO+zKeGuW<9C;9&f<b#
zfyloO(-8phmZ8ixh29Dc$o)NNq3S&CLY=3JB#o^`3zxlby*P;bYHXS#4RN|kQ<pw*
zD5+v~5Ps!t^tvy3w`zSZJH{(B!a!`nYgsI*`l1Z%F%6C(8N$ARe14MdHFRN9)2rrp
zEgj$c@_I8>t0RsBm?ae~kgq_twu!3X;yDLtD+XG((gtJk)3t(!Ps}ESf~Id|CrZb|
z@)FLK1kKOHwLIbD`_0EyD#%+%?Jtz=kx<OB9^;&@YdQUsAyl|~xn>kBV@aae&Fv^0
zQ*0ea<)ryw1XeWK_`*u7?h1$}wpwK9ScNUfFbhGvi@63iU*-bnK!C1A97EHy7I<Xb
z*e*T6tZzA>!<kQk{tR_B<A|C+{)Z9xJU9oph!>nZkdo?jsBku`rMj*Px2SvB@O<8H
z?XnzDMGt)G+f8F%ud;=!wSd|B(56jM8we%ur3Jh6Q`H3F@Fl7wmJK*)2QYepqB<-h
zA#}Jl73+*8b@d)9=U(2KHUz|eh#3FAvf<DzVV2}P-~OkVm$7i2(#jpL9T~)#cg5v=
zOehtP2gMb4b2yxg^(i+wWAbbEihF;JDGA*>I713ZwO*KlwVq#<4hfy^d$E=-{7JcF
z%D^kcSUg`{u2l)Nxl-cq)!~~@MGf<*|9-2AWrzD{EK_$e#j)SplmTrugSubW#V@6z
zC=w3A7Qc(Q03y>ozvr4rF=7<&PBwIAp_OpK+*LMAI!-yM9i=HvTD=#gmy0;*QT4M)
zv~w^otOgi7fIvy2M>^msNnmDTIWyV;RafI8t2@puq4wDVSKT8lEMS-GLmEdU(JLi^
zAN4e!-?KM|7U6w3*#zNxuYz(3a>CM){`{2x)DTOGY~4;LXd<LXJlDm}&mX5Mz%I;f
z^Q94`OuR8j!Nf^}?$-b6XXS_fT67KN>vS0^l5VS=iI$=eR^}M0%3daCMhKDBxg^bT
z`J4c6IohY4e0b%1J%igW4Rpk;Fj6yY`3(Vd${#{$7^QkG+(%$l=$RQ88MA)fsx%@j
z*^O2b*1pPF=OzM9M$A1OW$w`sJ&B(g@83=KZ;nB@O_e_tZf(U0Ju2)I_Vj^h0t&i|
zOT3eqXI)$`8VhB-ctT_y?B;=zlO7U~B}=m&-R9)QZ@MG`oO>~|WQ;(YS81R@i*Hz%
zJ2oAziIm)+o%8^t1(28Zm72(iY$p_krv%qUNz5{Lmur&W9!VxsgA%*%%L(vw{Iha&
z`p87eJ=C%3-90C4rmZC1%esIhWXdA}p%5d$kwvWNP4p8H`5P&!`i&IJH$qJPcLj|2
zM~Et^2&Oqw$oJucq2+;10rE*Bv}eRD4S#9!-KmYv&ETnEbB3j&Iyk&-#WNEXKfgSA
z^4y2EC%z4O2q?8*(qK<(I0Kq?s|e_*^3$LdZn&~zqaWlSK~CV_{mIX`^a^K_EieF(
z3_{Peti_LtSi5q5)VkB!sVicu;Qz~hs&)s-@G-_KTtRE%&0*ZEP!c-&8geB1hxg3%
zioyLYdR*$=XMMF_khcV-n}fcwzrX2B7Y(%2jQz|mh9^}dZ--qf%O*4o<g^ZXuo*>s
zo^MOvC4W28R<T7E7IC#116V#d=+7-CDLL+HuWqI&6<?$GbKJL3)Trcj8`Ha~^T=^d
zaAC;1QlZ?oLX5=t2ifVAK)N2qwsiQ{9GpgSN(ru^1J70J`=rb}FtsIX75WiiC!@gF
z`zC2TfHAbZ8u%q2wycv;#m}(&Y+pR6oh{7;L$mh8QC$N82bkAeQ%FHBY7cpWR%(S7
z(fJ6P;$i*xICGS4N`2%oU;W0`6!kxPNu~YGC|)M6TF7!VXN`rLBP-MXU(K}+gxJ$C
zhnU}U&52|QvB)SSpfnb&2X51GS;Ny^o7cYx?FRNfcmP=!rKuW*J#+)~gAi$|(<+Uq
z_{wc@2#+0TIRMpn%2B-i0LL5WYAu;szOBKDF8}dj!+xH?MT3(I0N^Ta(Os5MY^D3e
zz;oUQ!ZynecdSvANK7VXVr(7+Pk${kFSeONeKJdsxE4O_^Vdo$xFflBVIxUK9?ZwY
zsU~CKu$L)gzHcW^$ssAh<mQ@A7w>iS0ex(z=}M~N=D$}f?Dz4!`0n53yc%MiMXFT#
zlo=vfk*KLF0c_XZbJ7=lB!>aU&_JKST7N)WoDZ9{J5>$#PGI;I1zX2@J56&5K%v1&
z&@`ur$E(MOmko)Rps*q<PH3{7m&3!-NEsdL>xmLQH6<LcRhYWb!BDWha)IsJ<mC5P
zO1fPjbC6sC(<h<g7Pz=chk;V#>Op7oEGFIcnbFA*%+O_l0GKr<R6bJ?c@{hrKn2aT
zfU+C^sETl}3!d4{1V8%Y@6eD{g4_$q1Z7<ab_;3CB*DN3XVF04i3x1VV=mcpbnZf>
zIF0!~F2&GrG;mQOS19Y+0PeAaKz9d*PQRTji3G37@?wyT=KBWfsT--!wr3ps41IsO
zGu{0snO38#NRH1CZZ*iyeBMaq#Q$22B`oR(`T&bqO8K6lZXf*_F}xd^CwxlZ_&<%z
zSuS8CQFPud`$Qpkv>Lb$#vIHRkRdWKM$kH6b=2a?E8J^JRftM=zANLMfd$}c-g+fW
zw=8y`R8Hj>N8>~tvU?wef@4!A@`r8aOWVEa$~!DCh2uE(-1%u83lO@HO6!NsS!r32
z!YCeeUjdQ0s)-P=C3%zw&E}nKdGaFW!U34Maxd@JJrP<41#y#pF9XK_KRKLJ_!SH_
zCEB4aYtc!`GB9R)m100!1%!hT?-S-}^&F(+$e{F)7g_W%5R6Q}S|FY?Ar`rnv^ISR
zfz*X&npl_Yn7s=J@5lPCe>3TMp|m*9%nO<C6R@ZU!L2ub9FN42(^(~Wn=Xrg0L?qf
z%W+Ljz!%IVg9sLR&=DQHB$iqtCS2=iaN@}c!=h%9yI6svsm5h8XWs4zPGu|jfN<q~
zz^*h5L^P$Zj~%7M6wy-JA9mNCaQ&G%+hEpZ*$mkZuk<6mwNSIPM)X9H-RAQLwE?!W
zoNzj<x>`yA1=C!gLN@8i!4-vODe>;73n}81?pR1XV{2+@vRee&n-RB&QB)}Cp$>A-
znf`oPS2hjBYB_4(yZyA1Q<NH(aIg65Z3es0rwh%X<|rSCA1P-y(k~02qnYa12SxD;
z)pI(W70AoVk(A>;HFy9ESa(1{_7=T$Zx6K?!sa8I`dD<bmC$t^f!XV}*Y@wA9<{~C
zm7;&BMv_!c!5e{ti)&8UH0#~x+V<$uz)iZBUe!oye?Rq6L`(|cO()F1Y5-@qPoio(
z6G|aMELg3@Wzwb+H<HZN?{p(~+pCdY&U>$w7`gs>KIw3q(EIbxj!rI@vu}Wn%U7;R
zOU|jh^!C0b{Wh4}Z=L|`fke7Se%k7J-8Xg*GrUH^1KfdAsZ-;@FYjt+_!koApIL&>
z3W~A=n@B;?A?at=>eD++SzxPQ3?}?TX^@~njXz^_@`ok_P@>u`fw%sC*xY{XZJ9c9
zSWCJv5(BUH6%86#Us|8yi`}S`fI4q0T29b8cYo>6W57LIRwh64qQp6iL^8PukWU(o
z<)4B*ch!zsB)cQtHO7*850S~SO0Iei3sbSEWUSh|%Pu!ql#hg6APZ)bSZW8~YUJ+m
zTjeS)ale+>ROh$>uOrUbwIw~~P)p^0GMW%!?nvr*mXq@t#`H6%+YO<e$a7hS5}-=_
zZ<9r9{}gWwc&~~hB~+|t{Qp(Aax!HSzJcOw%*93dL`T#SUZN8Swak2eT)S)^K{2*^
zFNl*WpKSVGFS>j3rNJgPpc6xjOj3XkvAK}$n?sFRM}q@WIM9h`Yq^vq)%~Zy5>%zk
zv{JU`=>-kQ(|c1qmhKNob2g{(0w;Z=&;<X&>@{K_)w1OyuwvbmLIgoP{*_^hexYiV
z#H(_mFovY}l3&O0O#Bchy=jRn4SfqKq5PJOT%oc^RDe#Nj&TyThUuSB!dsC_Ug0G6
z&Hf|s`PuRX`0H)Qs<&TV8y8d{yYitzf^K~~`Nn8zaTIp6o5h#g%_AfE5*XEY(bJ$M
zroyQ7S%%9_8QPlN-BAtI0qRW0p_x>&QPJSw(CKD!4^{<KeqqQJ+6*U9Hz+_-Ng8oI
z^A_fCSTk#>jF&}AE`3$dQ!u9)03VFXt1PH02s9IW591T6dd)C9+t<p;wc3310d(d7
zT`#OoCJ7N~hXf^-;|yZtJo=;T$oY;7@JQq9HrES0%;gIUS>1=sTyC_|&`#La{@(W&
z`kcC-2@!c=7#GinyEBvD#YaK9_e8WJta(1vZ`wi0sRwy4m&OY5%-)_FS6Ovnd4t$e
zbvOJ&ohLB^R7RcQ@pjjX^?=2TSBZhl_H+(&0Ug`*pr_XQ?;oJ<)vctU*m-}2-!`v$
z8dKY)HuutGxQa@pY`w~GrE@;nJO`@u1Q5z(RF)lKJwmgNPXJkGAa(9M3)IN!I-%xC
zDD{PdS!fy1Jg<_S{9G)cW`Ib5!wSXeecox$nyt{PTUYb5P?AHhWfz4d5hln4Q>Ig8
zkkk*$wP;gzr%B<?_KUS$cp)8$8ra~>4K#ZQ648(4>du$AN%Pqk;bXeQvfa%3wsA-z
ze^a^)kpRTiIKabBdr6)l8Wv&nAv>7BKLgeCHX)mXLfcRIA}iiQ_}1m@|3X1bl7wgd
zuEa8&lu2b&X_j@_BjY@30?p&d)xaxQ@kQG*0&T*qAOnm}A23g30~2~o@FGg2GcZv>
zF@K|B-K=Y@%ClwOj~s1`1dDu$>};KB`IwqjA52vdf^{;&7k|-95!Ga2md(S#&%DkD
zAM*bxF_8~l8;$@Bm!XrlH=l>=N6HR0qvRaMHX)qahj?RgO@+r+^d=-DNydp@xpX+a
zos@Nt%?r=h;@ENZ6g9B%!mPV}qkO$h`LaMlO3}23Wx5505NgZz+`vmQ4+h0Gyo^i<
zfSF}kDqE_*xKfDo7J-<p-_VnPm$a9uQVYlD<_lOx(b{}pHMw^KUiEd2#EuT~fHtwp
zWl4B=v(tktdoFdNi)O-`ERkKtq7gA^L6}5kt+DKXcIl)+DpnUWxi|nrK)k<_cdqLz
zS?&<$%o4PbBkH5R4w1x2lvyVyRGLW%2WTY=53ll_C6|HryaK98f*nvY>Y1n9mUmd0
zfK2@!k!w5@g#ju+(TLJY2b?X_sj;B$VtU}wa$8;op)}S}-NT7);`m)4ev!GslXPnl
zaJIT@6h3tm(}FqcKT8YSxnkBfvIg7P0iSDmtIpHei`ToD>-ZR>N^hKS&n96&DE+p9
z4|=jZ6fPe;=l|3psA1-Mua=#Nc3%V17_2j@bMnf%&TI**G8)G|!QBq|388N$<znGm
zBgdaDo+kfC*=k*A+2%c4Ht5rI{IUQ)p{#D2oHd1Wbq&w6+I3670IxQ_X<^<c(Hbro
zl->UEQ_%zp6Jd+MgUdx{Q!!MVO<lh|v?-lIaG(oXWl)WDGD1K><KVvccF{D-y?P*R
zTo5Met=nrl0bQh!#t2izH?4=*mRN^ojm^|tNt@qNUV7_UGy~;YDb9nLn`f@((BDlc
z1>cZC4a^9-nbZRJx3=X0T#RcO&hbB*Ij7TC6P9LiAxrXBpPPSVYI+Hq+0<+pl*;Xa
zr)kOXW-?zxV=aSw&0)8BG?mnQL)S4L0@^@c6qJ=Ky<IjxzVdx~_9k_eI>mhdtxG-@
zI=(2Z>@zy{rmp&7RN+R90aoG)gP}1BK7J0)j8@kjfynSFI>^YdIIYL-hGBAZN#~^6
zF3t2G&#z33av0!F67mkuOu-09%Rki2W+}L>!+C+BEXuy={Nu2@_~lp5<#QP6to|Hq
ztToxKJ1HGP8p<@-f(Tiv`Wb=ha`2IqMI?u3H7diR={R`dzA>1fI`70>R-Wufjzk<8
zbq|ugK&vZ>(({?q%xcPk1%H0WyS6Gc6W`M!*_G4`8pf{m^4Yda1=7;I5AVt>*w|g_
zV<Aum#&(u&?}oVM=TTFz{73$#Rpwe{z^Q0%MlC?bX}E^_nxIDm|KD5vc3tM{JR*WM
zKbUGp(?F;~lc<MQre4A<2d95l(}Y=;#kkVzo08eM!?0l66i28$QNP9@-1ffki`-wu
zgZRIb3|y{{0iUt-!0|~DcpzOo@BJzEH5XD-C<V?}6t+WHx@MRNU^o-h1^38dy@q}x
zO}Z)!GSr~yL)Y@whCoLyI|1!Dr69Wj_a7O7aj9hsC2Sg~dtCKZK@Ck+c>wL_#R}w#
zB=#OmHfh79BHn!YrDku%6U{poF>b2T*hReZQK!^FVM<7_+6WbP?ujLB-ei2p7sMpj
zxd#n%elMJ{dQ}fNXvcLj3*zBZ+9y~NNy6n7wzp~q*Tm~-%|Qb1n=#wTKJx4&hl|>f
zrr0tgM0GA-;4ixezuv}AV(i(@v64xLwdM&EHLQt&gP`c*SxzqX39Eb$vx-7!#_Wh(
zi;(!E_ius~=Ruyh-ZgqY>`CI^!dR{hUK*o+)b5|AHn;CJMwMFxN96@bwm4RyQ2kh^
z%-m*j21-t`OuW^gsW@oygX6E*BAS;h9MN8DW%Ga<+D^<Ve_KD8qst5W*r_WP_k$uf
zclmYAb=yz}=$tI-OU(J+K%;E>oG+@o;Qaeru1wQKjKI7fLEUL_YdM#L0<d0*aq4%-
zu)#66chtYHZTO$zS%lYa`rLGT)P~+Q4VH({GDE7OSnI1Dzv1=9nUmYBYFVWoOo*2H
z2~aok81a1(Qc}oSw#mQxOWTLW33^gy+&_`iOtmz&A@3Auxgb;5Ll<jY2ho`s{aEW!
z@)+97TO(-(W?tYT6P3hL)37rgGK}XT@3%BR6#MQ=X?^uL)s5`>i{l2!E*%rApcCv?
z5@PX-F=83_+(I=qO4s2sKS(B>`KqZ5N^Fx4e?HEr44^^&UXfApR}a;pg+@r`Os0c7
zUSSyzm%*Q>gVjlKW)*uq3j%|^zp^5Sb@@}zOkb=P?4@;_t^a_VyAQe;3nXc%yV##|
z04ufj4?9p-CtE+7W`O&;tbS}VfjR1~^;b`F1%@wMVAG|WE**i6lr+6jtr&AebLGTi
zO_gFxWP|=9h<MzZxfM)C$->&`bw1sx>B~LKC!J6=WL}kTGc1@z4PKBLm`=4u*6uEN
zbvjnCFek2sqDn2Q&m)T$WKZrA6xA|T^~MQ~bx|JYAJ)DXJqnV6&rLE+gl;sDUg$pI
z_45kV;#2eb`$AVn6VKbAR%D(<)+(uCOnA(QC|ecmkBaAn-nic7?0EZsQdC(N`U!<q
z+iEu+=}+ux4q#D9Vd)rF>^@$asD=AdLHBlgfe7YtTu2Wt7Yxzq-3)Q@>Vs8J(LOk_
z5vPGh1wh-`7P6g>!Kq^1{^P`wlaKa0T`&9+u>Ivm-JJxQR#e+Y+IaGFO03kwl0H;<
z$rMWWMez;v{D6pR9AP}px^hF}ae^<)Qj4nawC&vfL+1FY1-Ob*sGX?<?_rw?d`SI|
z4;+tYLnTr?aYq;tPFG}@suAR4ZYp(;G#<lyMk<-1xwHtH6UEo+QRk#|sR%wHD2$m3
z2WeuHkWw+%WMr~aHDE`CJbUoN=S4Nx7qjHJjrMv7fm)#Q)cbs_?jcTUNlS&9SD=kG
zHuvV2+vOsf^<}NcL5P2kPKZao4KenHZ&UNwsoz<vquDawN5Ed%_+;={M)9Ln_#1@-
zf7j^EM<BCbq-@(6M?yV*xBO%mqrsSR4gql~5gi!=|HzgeZ+kkRl<-y@41fu)r8+|;
z;Go{OPUc#{{L+DsAEM&PEMdYaKY%(Xp_(KVk&X0UM4f}J8DMOSMW=;XaS~{${?yvA
zSZCn${kAP*N#k=?tG(_Ct!vk50>Ti<yuFQf!=$Fw{v+YUWf=i?)}C1qGJoU*0}(n!
z$vJSQvpomvLFkZ=KE0L7?9zsn7)ax9%p+FYRL7Gb&s=y3s~YM9i}gwXBsMl#I@miJ
zBe7m#PUyS0;@}*<-!G6ES5CW+BQ7_xEwXD(*IzRc+1NXRO!3lsNF&Hrzc|10#qp?@
z1f;QXSqZ!~6v}Zz-_!%ha<RCZibf{tQj9vV0&r}E=6YFQuFylIee-}`i0o9gXbEb+
z`!eQIq97H9)RRn3scZ(BY;lJf0M^*GkfGj&eSt#Z9jBt^RbXO;Dlb~dz&X=^M$;oe
z7>B^IXXhW;dF(#kT4Xi^Dvrjp38M==5Z|3oJ87hk#&jWE5@_e!XvBUKVL(|W4M<85
zLWw)UPr%$&O2owNSl{4GXY#wq9)Axxo&X!b?ifJi;aAFv@ka(<CLSw(c}%p4s@>S3
zYwH;NUljhflUqbzgc8N%C`@NkZcb^EdZo!E&Bgd$mN5M3%h&znVyzb42(-7KaWEHX
zi0kt?Ck!PS1Kf)8LRJ*)S>yTUJS8(#)xUjDrnS&1udbHw?8Rw`Xbi+^f5q?wYav9i
zFkf?5EK_^P^|wLDw=9V-U8z{zG1Z>;qHM6XP(gG)RaPbyGZ_%YmF}Y_YUy{-=`Hco
zvV{?y<U<+jLaP6NF4-Y2|C0EDOe^;A`4s8tQoMGIi=4vDrMwMVyEgFgeI}$3bedB#
znlZ)NEaPiJyto6h>HSvxxlGf7mqQ6+prgv;0YSqA!<51yU^)i&iqk^L5}DW3;X$C&
zA<S58eDVV-c1%<5_BtS`K)s`Icdxv5Q|ZXoT)=_gC9v>J7^va(mD3>nsyvbWXWw-H
zTa)7#p9)Ls9LQMRA5_xTC7(;X)k>lw^oM*8=E@zQ0Ri~3kw38W_xzy4KNyv#zmAx{
z78)C%<E8RnzggXTA(ha(f_IrlJQXefJAy;aw85<~K(UWE^wN=?SLbKk(Q_aIV&8Ko
zBfAx^vR<a$SUg3P3yQCTWR0nB$aouWU5hqiwa==j^dS)HP%3(t@ZHuiSj5XomY#Rd
z9;hd5j}NQTLxhwE>KYfK5IJPUCEMmN$iZeqCrh>asz`uwX-$sQHKw>8sW@?F<|I($
z*8L750`0q3Zw=0{aUC-Nl)`+fZ9X6Y?g{?Vr#FpI#<=g)8kZBK?g%AydTiAM2b`dR
zlID#1I$gpq)IQ^SvUXk{d$8*LXb<6`XtdD3c*Y>F3gacuv{JoQ8t#oovU&x#Vj6)I
z(}$^J0-V+>pNQ7fExFkFAy9|<%%wBk=@gB-3q7`(>(QE~ls1V(rRydf(t}p7y$B~f
zjrCV00Ym-j?D9sms(n__@E=aFZ;d`(!pIn(O6{ocIGlYGTEquVksgEpj7-dm4neCz
ztzd=o8pU`B(pNqZIzJ>Y%iu?%(HQ>nsRplyDV2~m7cYE#toRvOgRV=Tfs8dz`CM$%
z1koH#>#%<zhf6R$Rj-(G=X@b=)9I-#N@kfz7>wyuW@!8)jXjp^gG3YOT{0}wPh;gj
ztqx<N-uS+=dxK@=5vGt7uThH;IQXnw+~XR>tx6(TwpJ5F>E=3+xgL9#-2_ka#t4Ho
zYMUPO@_&-mHE+A5T(p`1%v(V-aO~a~6B2^U6v{)sMwnPQ8TI>&t;~89nZwkl*!z*v
z7=i5YSv_Vsl?p9*eu49N*lHK>E;iR4wvESH9`osv>fcg*y=4o$DgBOrntmSEzjxK(
z#|G7O=4Jc`k_0BmPm&OO45&R`JiiftEAA25Bpr?d5WkzpIbK1`p80V~H!paRPYGgX
z1_(d0@n@X0G4yHZWV_blw|IGH#nq7<z8eJb2StRrswKnfC||pUD_{?_TCB!mr*z})
zjq`bC_G*17PDG=Ql>d8P))cYj!yRu|X<OiR%)b#Q<q|DF`T|;o?_m%_w-_uneQ4G{
zj(u6@F!_KdN@87J)+%zPzy72;Qa%-{GR$Cc2;12HOfk1?E>uXtI23w@5Kno}M;+er
z@Tg8x%r*}Ylm*(fbr%Dbq|hpDFPIML9oR<`cl^+wJ%Sutk3)|{Av+3KXUbgoPwoR!
z8=ynN<_&xpustcIWwAFO#==VJnM8&mbGkWvUP!(dVuP&|;!AGPb}zm<kR#tw^!&d8
zna<x%liaDC!%iou#e%ua3G!dVA|orawMT<6cf(HjP!kSIt<ODryc0N*;<f-^@aKtj
znj^S_W)yD9^~))LB1_oWIQ1br<cPN-B4~MN`*py!T?Nk>Jd`M`Xr}aOPIC2$icSNC
z@XYF|0w}#i!StQfCO~ltx<W}?ydVE21bi2Xe4r`3Gj(jlUMtSTj6f&Ct@<aINIa8a
z<0}F(aaMeR#!*A8nO_Gk*L?Mu8q!Jv;Y07eiZDpD9J{;EW<jfyT4bTb_YoUWN$F7u
zf4{1RcHqd}RH!j#xMx*yS{7+}k1<x*rHQL>*_pH&zgub1Lj+MEUS8yRag=BAr?V2j
zQ!|+hx$L6{_u>Ee`V@%VbYwnFWM*YnU>PXOy8!^dixq3bsv2MstYuKspcX9a6I!}w
znLfO~u`%^(N`Z+H8`2C!9~Z7)JPxo?yd7foIWa>9baVDkb^{}IIK44kTU2>R$Q|tg
z-Ca?c)|WNU=7B%qbXV@RM^V|qX4Q!w)R|nF7SyUIP`JOxYA`~4waORhyPl6>Hkv)5
z4?=KR8<bwYw;r#n2aeq!Sa*>{m^ju1{tlu4yaJ_vvYxJ8EO{oNu@z3V#<we+Wet~H
ze%0KneDU^+O|{=1B0RF<82RE3;p?vyi%(kF!f9=je5X$~wDJ29V=~7IX#ctMX4N|C
zsJ{KYe<MBXOiqF2a>g~xZc@1p4{%wLORNjRE^Tw=hOtz?f>CSfPx35GfuQN!=v%V)
z<&VbCvCvEd4e1xDxBjZ*vbK&6U3K++87M0-BY*Af_(q-f8%!8imLVHc^~$nhzHwv_
z7?r9p;fI0bqJXk6_Dy&kPTq4r6W&4=_Rm=i>?%d}kgoGicg0dIr%Km$^oP&+Be08z
zs$;?xsffihYmeaM<DX_~U#&?EUqWgVIvh>rYbogRP$N4B@@Lvo>IH&_c=qFeGql=C
zr5-%=XTv^~(dIU*JB{NZ{h1w=Sxr#CkZ{TnlkOy5@{lh=;4BGbtiuXV$!7P#MyZNe
zud&-OD5MBAeObelL);H(V~XO4cam=khilq+s`AVQt_ecqdS#_5Ul0G{kLXWA?=&SW
z5Xp<PPac4O&f;lwnX*^<I4*wpaiwi=t~o2jXfpFxw^RVcapIeBrE!4A%=Z5N<p)*N
zS0Omj{)1i{Kc%mD2?$O{vi^<Vai}k9sCy;x5#F2SZ$0-}FQNGtv49{G^FF63OsjAT
zX$v(eX=KXe=%V`%rKeFx2;0s$-Vk7ChpE%@8(6h?EcI`bfm8`H^?C4gp;ZoU_U$nF
zB`r7zkoaCR^{g1A@Qe`Kt>S?oOgg#^Ui|lyaC3ed$`<3mg0ifv?a;55ESwsZXdWHf
z*&pWfT3iwlMdp?Q>}9NV<|c4xgFy#snt1J{vLYsRuKa2b%>m~WP{<3AR*p45a?toT
zMl<fq@!3!gj4dWru_sV(Y#TzGk)EDw&cP3=ojhHZPf<MYTiOb>P!38}g1hOzgr&R}
zM1<a-dBMc!8aErP@uUkaY9~u?^8{?oyy493YJTDtH>|VLF|>E920FK(U;~^7(cgD<
z3^nKaE}vC49(@Y=KJMcptxh}7mQSeP2H?{*76&g}KB>M4|G`i@M3>%XW2MGh@t|<I
zRQLVry^9Q9V+D7Ixki7^8>%?&Car`&W&i1ohG%PdoznMi$Tvq;U7S^1l^%x_xd=oZ
zfFb+L--Bz6ucyD@lEt%xIOlksTS0c>x?8Qu(k@7??PXK}3btVE`)+!0C@3n`%joOS
zw%|w&!-I=Q_{J0{c!{RU45|~9>g28b-hTD4+NjAFh9l+0_g}Z+wC`rysy4u@R6>Nk
zZez11;r&487r$MmQMFl$P7ONLfM7Qq5U!wG*Qk)*=!o)G8jCdr$FBTD^vuZGltDy!
zeHBeZ^FD3a7o%|xwhm~3Pp(E~UwWKo5aIuN=FQS<1B1pL%o<(1U^eYD__OvbXwT~x
z%nK#<317Trg^8H}i<U`<B|#4ye>kfOH5F>l+;|$zMNP2os#^2hA9ql2FR|LzflB5s
z7?o691qzHNX*QOcSGJJmvqPn}-*ZOi^$+rnr8%sHC~1)cSq;}hgg<62h&GBMMA@$y
zGjyy#x)Fd+cWI+Y0f(RkR(`3`VO8Hma(}m!iV=SQEvY-w_vt{mze<>u*EHNFjlEC_
zYQ*S7Wgri!^d63KEjD=t-gV9euEiuDG{;W6i`!#P5Ly&WrM-!~$j6HK_ksgZl<YHK
z7;juGYu1*kax}Hhwf3&=ZS-U`=Ra-r+E!i%(jk2kBPF|A&}W)P()JNa<b{wq=7)I7
z*1s2F=u7wgxw|aY<)E?P88B>ZQ)K0O2hUwtVW`UaLVz0cVRcJCPLQUZ3e&4+!y8vF
z%OtdLkP@7s4-3N;d}NELY;qf#g(6Bd?V@JS7%A_8yY|lLWokpSbWg7R&hV0wO_?^X
zWC_*^_yez5v}l?bvS4;~5oHD#`^UcIQWZ0(jDCDvm{wylzNgGOQVW01&_QeF=g_8V
z33hfPPi1~x?xyNJQm$-5lSJVdKbo!48fdiDLyVEhyU*oT5+s$tJB6we>U+n$J0|9U
z-%_yg->M}5OA+XAnD>xkyrcLp&juWFjm~;$NRO)ceMYa;F0UU1ZSgX$)yLI6R~5~z
z<;!X%o$@mgC1QPkLnQTH!3TgHoy0B5f@cIg2lffk80??f4W32diz(#HyIR$S%8;Ng
z7jC%{^w7!~EORU)Ak&2;tDXxr=M#br4Aw%Ma~4CccO?!|vUbD5-+i$I_cUrcz2I!2
z{OIqMyO;<RQjYx9sJp6@7Ij^2BRnz!Fp=c3gRWax{4BDEy}iK%hsJT;32~8}))&%(
zaRU7|TVV7}l4img8Zx1{Eeo1)%a0-!&4m*A%#mvTS<U|<o;v|{0_38mc%^b))yo>&
zI%jO~?X79vT6j108M=Hay?h|eh&d0AaaVPC<j};Bb2F?U*Lqs$Z36Q<L)+8{JOKe2
zD-57PV2hO{_w;)u$F{_lqS2|XX^bWpSL+Z7o=U64rV~dEAF!8+bA*hFU5>t6lb3G+
zu;#1acWFQKWxhcn{jbmh8Fkw3F<davkImyAMTQX3ul#_98AyU{nCKjVwRO*ZZreDk
zIMo}4OLMmba4(j!h#yI2%U)tt)MeC+W&7m(^zO*0yWV$xpk6_=Ej+NO62!z^RG6`r
ze*c7H67?}aYz_WwQSkL?Y*^K#OL#v1!N5d=fe2h*r=6OcMSMh`Qn%PM@_-y2L@Ja-
zXy=}*ut8tdEW`qq-_8MB3_^wNleLOioc3@HVspi~oJnV(DIo)5N42Zau4QFs;A`mf
zhK=t8`%GTWXg|eW>$grM%ngg5uQJ=GKtT%^u66_Mbr)niz%8syjcKANVg}C^7&Mmm
zN0drMRNQRWkJj2~%Dm^(tkc8+SWUhjO`MOd7rWhcTIw_5KG(udOe?Xg<@!j^HR%p+
z6&B?Q141X=<{NH~y0s;xSpX2}pIcGuYy7)BKl))+k?L$jUDqJJ%v&45?Or$Qgqq3c
zM7_9QVz1ZiCed`ZR=IL65_c_H4`l34oDu#B!fb*$Bu}}yvNWn9W?nTW7B|I<5buXw
z(HZ<-ULhJb<B*;49?4Y<#Ai6o4d0l~79(@Q-M_p!k|6&v#@>zz3U-XkIXG_nRbHcI
zp*s^lp#3x7mT0g3@}g&)aYYnerd;=yPnii~P)n*!=Kgw)J5R0TaNt1c7Ta#_)kJMK
z&})jMA#+}!#KBs}@gVDL4x}=`#2cb-Tg3#`Nw9$yR+b^Is7mW|v)wUK>#)XtgUWJp
zDk0~Xp?mgK&U1Smb3*>fiPxGqCPALd>Es2VBZ6UK=~J~C3bVDKu+e>_A{s#hM<ipN
zA>mC=i|HQA#)=@ym)JfdDbbR8I^<;PGdI3hxYXgEwKsmI(&^QgZ5S3CExntiBX9#9
z+YS1XYY-UZpZ5)wRr)Yc7?QguN6#E*C2Jfq!s8S2Rn#_?tp&THDI%PRot$k;RD(T4
zmX%RpBu~)5vcbWrYUTLoQlQrz=y!$OK<!?mO@iQs^;IN2h}<(%8zEV$BY@FaU~owx
z#=D=(`sXK^OuOZu2^neBP8&L^%{1HwzIod~F({oUI<H621GNWNYwKs9d-&I@{LgsB
z{IrGQVY4AxPl$#Vg>wy#WM&Tk<Km)a6_a@9Z(W0R|GDT_ds5Q;7^X`X<i$1=gQ4;+
z>8KJs+p3awTLXgo(9Z#TDilQMS!Jpn*LxqhelXcBRI0A}2eIk&v=stdKPLo+7V8MI
zWfG2NmwsU!ff%g)nI85<2D{4>5QUAM+q;@+Z!!sqi3IH>&#r9!4vnTle!#%%jbgi|
zj!Fev4wC8>Pk?SL|F1AQMS#YxKkxm#n@}RGEGmtt6~7n=7?X2F8iEJ>5YI<uHrFcQ
zXbBA<5fXcKcQJ#5w=fQl9t5jE8Fg7iGP?4a7XX!wU%MKrIzU`%o(PWTG!Buu;}Y-U
z=uk)aY<Dr)>F7_C9?5A&6p`tmogXPMpwRP$^M9-3n3(6*!D1_AiFdz1)7eP}7e}Zx
z<C7Y%<THvC@+{7u<O!{vqsMPSo*sUKIM4_`WL6kr9ut|;&tAVn)L%hjt<@zM?~9nf
z-({j|CJO2>*fI&=BTf+?=h`U8x=-qiv5efJ;bXWMliJ^SgBC*A1q1FwXjUm9wCVS$
z51~rHd-*oR`Lbj#G(~o%k`3x?hT@B3S6=|LOU#&IZZixfrej>qox)iLkPR;G@_yk^
zd;^-n1(ZSoIdPN>I;#Y~)=kS3!q^w>u?U|<XEkgVIwY?C7)5qxFguZT;Yv4oBt`;=
zM}zzvR1RhW)_NWs^ZZ!ijq$x6!t_BJt0kDt>mbWSg(Fk-tsXkQxEw0VU69sNmbLt1
zA+$oRF<kzo1?AJnTY3R@R^~CXNgVgl3^G#z;Lr>OJzKtxm?a;qKsAd&)%>uyjS<2X
zQTFywP`iEKhxbwL#S=|zyUz2BySlOxF8NJ#TcuIa-{xOzx&xy_9zrrZynNkP_tV{*
zJ*PkFkIm0B_;6k&YYXV{r~HJsJBHfhrYOuD_<Btqv>Nnv-m+^oi6mp*(jgV6ay*S?
zoqFk++MCzRT^M<Hl8*^A)_)_$Zp2LubV;@F#xr3gBXfFsLHKomUf2wS6G<U80|?=*
zTd{D&g_&$nwI@_Gv>nxd4pZrp7%u)zksgHs*U{i4SGb8Z|AQ8mh(^RX1ifJSIU^jj
z7f1<w-!GslYdQw^rg=Kw`J{X=p0>A$9zF|Yj`F*UPTwGjfPzc2&@tXH40#Cgo$UA1
z8Vjopq!DPYRXq<m4%Z<uS8J>R$A{=X=-brQ*KDv>b?Bnp*z3X@sh$#lq59hpaq=O7
zCUZnIHC>2CO6HF1Z=vI~AAx#HWkvK+oAJuNcMuf(w={*J>Hw9nDO3bnrf47++Wr8|
zud0UYDx!I7_W6S%8EuPO(=iY{sdo&JQP&Kc63Nw&>Z8BQ-6t6$WsI+bBKpbh9c@__
zeN44e^9#c1I;^qdx3asDFS%CI^5U6~A297IZ@~lH8C(PylT;j+J~Ht4aw9KdFv<@$
zZBUJy=n%rCUsfo@zGI&egmkv`dfaU>N=la2_VKh9`Dg$|!qd{FDyg7i)>tzzBhBXV
z@>pBOt7kuH_^&lX69Q)1Q_vmbv<#B^6@A-YHB_%|<w@NNSqtX-K3e_m#FOjx0DoNI
zqZp|6ma=cADV}v-Tz>GX8~Cf7EpW)*`K3};Ih4*3;dsrqIfRHeH!Tr@ey?0yet={k
zoj5RvNC2j8qPzt;HRu6>oLZu;bwgO87qNOQ!H_m_+&}<ug7x|OY5+tYFDy=NW_i!3
z0axzT5?2DJC{esxw=M$mp7Ii;+y3TTEFpk3Tfnhey3zX(NGLZx2zUHQ<bAX4h($&`
zE-)KoAA}!;i96M1mlh|T8KML<z(|_$h4D>3Xv9&AuST`I@Q!f-+t#f12o-p{#^itc
zc)viKXWueG@q;c#bye8Zj2Y=QvZq-5kWu-wKWP5}$|}ixtF5Jq_yQziAH3(Xyp?VS
z{k@c{X_4$_6HJaPmhg&%MOJYB*M(W}2-$|nB#eL~)51kW%%SFqH*-eLHZ51o6aC|a
z$4Og#{0P+T29om^rqDa=5|qDsW^PC&YP6I1vn$@Ukv_DSFttccHAyA;NFl=J?HIER
zWy3<gu!V(tL7P^)KS9Mx>b?E8mF*VYVAeel$fj+z;Z0nZT>kgn`R7QW3qI<ollcY$
zh|um_u%MjEm{Z15r3rVt{H-NrJvnKDNEl$Q@g*PmU3F!y+bJ3YY<-X-9FCFG0$DJJ
zID}F9GZ?pd8nnqE0BI<8ACoXLwvy=$g=P~DEnq+~)=MlwN!Zx%%Tgwi&f8t}Y*F{2
z9ytlSZ;*D-2v<Oj8ZzXHD^gKsAM{D)p3xKy1NZumU+FdfYPzctc_i94^6ky^;aW%m
z73{-7iGPie_lcQPKUf-2pK_5Ke-}HN#*Y|x=)g)?@hmJfr+S}p?eaU@EW2)p+NWJM
zTw0p3evp7uD{;5jG^lMHRIWcHjC5GAE{>@pi^2$MWP!ISJRpCRnje^9?LLlnA~mU_
z=<knIZ?<~mQ_1<qF3fgK4<niZ$L90+7jAR|2P+&aHXf8d($Y-zrH|9Yi@9_-v1HgK
zzHVIL#N!rO8bM0GDR{rwr5E)l^H}i!X(`y^C5CqSv|pnz5+d2wnO`bZhFY>IRcK;I
z{xnPcMZe_UXTLCvdI9C7y8V@j;Ag?Q%F`40v73r`rx7E?o$^P$T)gc>XxRyeABxX9
z?3Dr_sY0a;?cez-M2p>qZkR@ii?L<~wIT}PzNjwZLsK6ik<H~@6l!GRHxxsA#~Sjd
z{OmcwlvL#?Go#4u%Ks@q@Vh2bX7N%4W}9DmK95lmTC@jvRkh*wKBx;j{Nc`a68UT3
zm~t<_XTo&KQ-2bpFm*|!Wb%Z8(>rT>BO%voaBIpwMQDG*ZQ*UWwMm1K6&HE+;B~Lr
z&fj?e#(Q}(BTr~hNk`<Z;0~JobF)DuL`mw7O70~ajD%S5o?l_b_VBD_k&;*JpCkX8
z=*JiNQ81u`FQ#SCEnI72av2=WYGU*pWH5XWy@}TBv*bZ>Yux|M|G6V_LD-VkZ*sJ+
z7KLIZtp<%2VU1C&X71J|o(>B2?H90Sa%#KZoULAEZN?%*A>oTzaIQ&k=fZLG?unQA
zyfEuEgKPEVY>$((5u)S*&jrb0SeSi%vRd8d@XKJ|l#%Lxu-=Mqv{~}7)o8ekz}lFN
z@<JUK{(uU$Gum&9;P7r2q4020T;7-$Sc_1olhBwuqqS6)#dT2<u|@R7_gkm@C+iy!
zFMROt&Z}1HNy}EdVYU`F7s9;9-9ZMA4zm|Q)kBTr4)?3GI~BNf2jmNn#KNd;-E%OY
zslrswUKYkHf2AQb@Z8wP%vQhFCPymTIM}=CX6(X)w3J}Z;{o)P90JRdKvDhypS)MO
z#~>n&QbhcK9mIUL3N6>=s6_BNEe9@Jf~XJythj3d=|UFf;Pzrg?PwyLLbu4}`D};P
z!NF_;7+eMvBsBR+UmP;vZigojrpJJzcLO=qbi;dMHIn<y%WGdW>+W<d@)!XIo8YJ?
zRFw1$Rj3T`t9)y*@SGGZm=6J{zcAm~U01hHmXF;hv{SBELqh!)_Mr4~LLq)ypsPyy
z2qzwlz3tAAGWTCl4OhI!n?@LilDJl+7;;%dyIz9!g4K|^G20xHd<YE3rD@IDZ)W+#
z$u5?1;P5^Qo<ad410g*)CZE0&aOb!OpwSr4_MA_r19pA$6zb3f*y%GmH1I&cGet%v
z7zS8d(g~mUWWNKfC+~1$UX%87OJ5^;>9SoKrDWHdwIwDtaRqShz;2wEn^%pb8UW!}
zA)mP)jE_k$252dmERCxNb#vP>b*pV~T%d4Dkv#HD{E2w`nx}wb6bV>*2NPQb7H|yo
zRU25@^2Mm4-GkLmA8^#>&p)nyq(r#)rEQ|!tRASBt|=i>^?hDMm=Z?cEd%T8y2hvK
zU{tvnEO+JM3~aRecrueXS^$4wkYm_SuKnf*D)yV@#uknt$DPk}Vs6D+^c#}kVL3XO
z`>vYw?7#xd!nIPzChMO31eaWwnOLt>=uQugxbARQ^L?`5(Jhe{(biK&;D4<ipBlEq
zOvIC160ZeE@%`#S%GA$^`d${~&Jd3cn|7|Tr&ee+H!%jGsIagC7&E@2Azcs1U~rvk
z#ewu^h+11gPBvbgZ}^t%<JL`Nq_RbK#}r!cgXsH5Vto_s@zf9^!3h$1?_Jd&YFeD_
zWU5O|r&;_Fa!%TWyQ;onIq9Gr9i&O=VSy(9&_ijXtVmNU_|sl_2=7rVS-@JIrRZkq
z%UWW(BID)Wp!u4Q%@1!Rw%x&KOvmyW*nr<+0JOaXyNvPTr`6GoFDmtXuvYBaCtxlt
zTD%0t>f0ra5J4NJ9{-{m`q`>+_@%#Gqp6i*v2Q}&S3%->ES{l~vw?au8<-$$`TRt0
z-H6hwS&hK9FRP#uw)pQc{xIx}dIB?QjAqgy$w^6n{#1S&98urym&a`F*h=RW6PFtW
z`u_noig)yrghC;Ive*7-kfo+9??nTF0S`MVA<!2x)W<;eSoc+2DMwi<MeBhImybm-
zcfkt_E@f5?RAC3LBWeRgmC=Y9g<y-^(CRe>A_!$N?rQ*)Mc86ZTAlb9YKlTJPtty0
zP3Nwj1cc7&+jUm(zh-T{C)~TV0~83O=)~al3@t+Nv)ZgpkJqm|tCp#m<eHC;xQ5Le
z{2Rx?_`ZFFf~s5V(Z-E)V)QlX=(pv%MV;!;z%Go~l~g{ciKzXSElfGad<6bU$2WW6
zdHJ0KkbLv%VleI@?87pIqc`ghduk2jZ}|_9ep<Wn#q1u`^m$Cn$<b9~p0;)l2aV0A
zsR<IsE{bZib^>QU0D*I`I^nuPQ@;|TZ<r*H6RPVE0m^@}iitsRQ*%|9<@rKT>KIxW
zWs&YYR%O1QCohobA_qsx(lu7_fGT{0yh&-oPdf4GROuTk*l-O28Sup};7xFZAm^}_
z0stX&68i4R?|)}km*DLMCE{Hi8V2GDb@aki532@J9~XOeZIW$o!C4GAp&(5hoaE`=
z#Uc^10VebdvP<X!ouMo0RPL-BaSk5gW@)xB<){box}bs;7+^QOhiCerP9p)KBp!9#
zpg}nsWlxj;26U;@eETtcOp(wsVB4Qk9`iYD6d-Wl@Y6$*tT>bEoy=?8Nogu6YnzZ5
z(GaLre8C+g#GET)FcU2Y4yYE3%&@Z9D<IfS2`~%`58?g}XgdWgo<dDbTIqy0Rt69)
z6K|k`XL@}sX=Q}O<2IVKTuiIXuFoX?#}XrpG1G^GceU4gLcl5=Y_LDA^VEKB7J)RA
z?UpSRkQd;usCu|iFTb;tN<mWyI1pGyAfD|CapEk1$pt0EsoJF7-oMkP;^GO#r<Zfm
z3l8@#tAxSt_0|f!y_qd`o&{>!?i_GNJDLPiFM5>&Hk~uL^vM!^Qy&?or}PYh1VzBd
zvwnC+^Hv|)ZP%}?5m#E5reY5;4ekVlxEkP8Ygd6ZDptC7q<-m+d)~64Kw9>YW$`u_
zE7ma+uGVGijewVS;Mck%#S3liPRs}B2wHnV{m{r7D(u<&tC=F}b366KZpNgN;I>PK
z#2=~Es5f@isRxzK?H|sW0KyvGh-HvlK>-k44X@J7Fv)MtmJ=3SsUV3JP|UpTVV_UU
zApJMa@eK!I#vCL43e}Crn?4G%E!Oq%4C_F*l+pbJ9&n);v0sBtp^nw3zX&7!1UyE5
zZ6JL5mSph0Vj}?N#r~ph#2y4=R7OS26H3hnU0cORcg`1>APElE1nVB53=N72iq|l$
zjCX{~P~uyUNqy~5)F}J15!Bo|x}k4ZOA>-dsUn8lQP(@Ea5T=NJh)@5aX2zUrbmd?
zYO|9Aiet+RL(J63e*Rk>v?<&v?FE6SDwo97<*MCp1WI9{%IR;6K4gUWznFV^T!|T1
z{UhGPn``(148-yA1y-Yo8So&50XnZ=ez=o$9PV@29s@LPi~!!d$O$Yz;K5!-4tIZI
zrk8!ouoPhNNq)|com52~k#TY3mIPV<RCZ;pR(rZAQ<`#S&Y+g5CcEF|<Eu`5^X1Lg
zX{)Ys!PeyVpG?^t<2Eob?poRVI>3Xuqu`Q*!L$UjIXcRMz=uRL?eI?N+Mi2ky)Nrl
zmTxh(4<lhXeAJ?kjR9b6G9Tp^nN(ha^=txDL01F|xG}rvv`RB?n~;uT)ra@*#}WlE
zb`xG);92-iRZC`G_Ja;4FA@WpVpE+ojtz}BsfnsAs#69kNn(G9$4RZK%z|3g9&Q0{
z<dEyVzeTP9;7wUcd|EHj<Ceoh8<O^h*)~@%qn@fnk*8|N`sN1Twbu5dL9Z!YyH}UA
z^2Y7!S-Z;(2f$r}5Ef`usO{Ne?P?S9ltz9Y%;s72qgZlk*fc7%l_Jou?=<tcl4OA?
z-(9CQH9mNI^l9})KgGgG0^xHu@e(g2i_aoJ^LZu1bohXUpE<5E>dy&kX$V$)ezPpr
zO@r{`SZa{B>NSu(+k689Aq2nYkwi=D);;azjZ{ZS;k+i?cW@{$;^b^{{&?V5rp>A{
zHb7ZwJtNV>nO|5BXJ`A)dE8|45eS}(<Qn0T%N!QQ-243(s+KTGskFM>iHTjh2I=(J
zDdlAtKuHr@9qvKp+mqwLGGY=GPu*iew}UZsVW4!j?btqMJ7IenkOGo>LFhC2-L)dk
z5B>#84EG|%zv!w|-YYvnA-IQh*K;mtu93_rJN`rt5>xZ<msOdU>AR=SL(jr{n36Uf
zAkN%Xgo0o#gFxqE*USSxn@n&)fs|@c5eLPz!FT_0JvcEdjng351LM=}srI6B&-6n)
zid-l*8lbMDE(;FYE=>X14<{Uxj5nh1Oh%)1`6GlSIpq)*l@B&FqFbLfIO~#x-+OTt
z&YzE7C5*a>%2O_fuh!_IpG=w7YsssnzDiIR9Ah`#zmYA>W9OX-mXFCfDv85fW=+Yv
z%0RlA!l!0+1P6eugo)<92^*8?H`Sb6Yvq8UUkH+H(i_KahDe}o1!?J>QbvIdpG$60
zk9Pc|&Dg)e%+GchWVe;8q92WaM`vPyH44#_Sy%fk3Sso;NNJ!mPvvq3&Jf<2KF}W^
zlU_&S2?CpxqttE+vK)Z8Jf8Cv(uY`}DDP(F*t<066UJiID-)aN`qK`Q;VQ(o)_bI`
zR0VAtgmAzIFU(9uJ+gJ*M0x`-lq=hYlkp_!q)(4E=HRY~Pl$5>7@j+wa<eQ>+$(Oz
z+WxTDyG@Jm2~)I$MGQ=91DQo!qGJg1(4RFkEh)GSBUE1@k(Z!SanN8?FM!lCna54R
zNu&&joXOJ7IR)o{US{ZHL+8oK90rmWQSWp#C81_Jz*285bRAEX7LOZ5GtQ)b>;rpE
z{z#J!8J`PrYC&fhf**(%DSO~zLe~RxZjrOj#yGzCtgGM8DZIg^|6@21BP9m4F+)NI
zK?~}jzJeK+04y+iIUY7G#btlLyis}AEgs68rHEc@0_#>;(XWaew^5HdHY5+{$xbev
zh>1t&P4Fll6H6Dq`flotqN&kpcb!TujcqNFEzHU8iE6aDn3F&#6pgn_c6`|-a<YTi
z=~^NZsv8f@rY6~6dTwjRFfUNiFp5g~23{ZUDPb37Mj6@s^F=s5cd9T+YaSdWBeZV~
zUUFlkTwOk$uIT<3l$~j>D48+@T<L}Dli%<2j7{}l^a;&Wf0l-z+rCvEhNDza4Eg(_
z=pJ17xm#z7N;I$@YJ)!^6H{YBD4!G4ff@=;*UfzJ_ouaiO|3z1!%^SFosjf4g2`Lt
zd^P&6J%+hlIa7uHKa(nOP77ObATkvIo?fi!5gqjHrJm$4dg|aTJOkYKiBYb(*6PA?
zJYbD}k7K8lK0j*gv6{MB=}d25<SCI%BK5<8I|53>F)1E&kgE3#yeR&q<G!YN|4P*r
zepa~2?tzdIm8Y1wJDsL!7+TS}wV8W|2B(A2BDdx6(>vM$WtNCPX5S`{7O_S#Vn;b3
zAFsH1k{gv>fx0%2c6Q5H9&PXDPlL03T}Wo+0HH?na<@(&^uQBG=7CG0=L)(X2nmy!
z)K|8b;q{9xwEh;^AXFplj{(O<QbllHa`fgaOl+u{-pVJZQ*=$cl4b7hH}F*rdrL|J
zvf|r0q7_S0L;`1`x$@%Flm7j#jh}6L__*5ER(CrF6%RGGleguF7!dj2hODagaCoaG
zqpK}EZvPsi0m|l+58dbthh*cD^#y-0-Atfx&4m|iNGzikergUU@<IYvpmN2fTMtBK
z{vVA6oBk3Bmgy;+M9W*<u;I;%dBNdLIX6du*SEpKb#OF}ska}$2=8?K#Y^W|B}+1)
zxudmxzHa!p7g@2BUZG@K>*UGhz1#~;?9oKyAloSSt@WD(y`Q=}xyE`bhHrd6Vf^=8
zolHTvM&Ciy#2R4w9`a@}67ulX3v~V{q$fY&2vGD1+Dq7gpQwcNeHnZM{)uvH-rNM-
zfU(gjpJNW@)DGKby36V=Lj|TI(B=9t^<t%?Qeamr(({2!53glQpL$+^gWBSOcXiiv
zaGQxt!S9*Bhd;$hEVgS|-vSztpglVwZxhCQ7Wz1-t#x+P1Z8cr!K<gYm;k;;RdNUW
z_c&gU)YtrkYC|Ir`|dwf%b3>#jd76hbTq=%ntak1e@JRT?7XqqJUa1_%esqQfm1Lw
z3sueX=hbswEXr@~nFe_k*gX`R(}%rnjfD92)5o@AZ!(;`51C3EBI>mCWIotrc*8Gy
zt4q&CFR3@a?|c^=4<d<7kOcq@)><=bY*e8r-Ud-qYCJ#Z&h|9)8s>LW|56^=YAKaQ
zRKlF`{8N5^5-BIPtE(r8ANasa!R?V(!9+o5YSVeDj8$YY3~(Zu@5Ey}JW7D9vY9Qc
z%W7UGEs4p&&ZdM^uABHcZ=Y&*>6LXFK?$OD-gf4X%E@M&mWb%m5+Ps`?;|js_(3WV
zc_YMOG^FYDO@oE5;_jhI0*o#`FgQv#_|&)38`6RkdOPhfDYgcN-Q8>4QqYikO0QLh
zx48q}Ak<+_ky$c>Zcc*=AMXH_9BXzx8?5%D)XH?%tMUfuwcgSYFHYOt6urUlaH^PG
zXB~g0u)C_Uyk6JDEUU*Ub%0R=@DzyivdLtF#vN6jW@ewG$|zJ+Ph`F|NsFe6RVp@I
zYJloRb81vvOEdQCgwhuEL_0DHj2D<T$1qFqz(~_55R2?^<N&fR{Z{hkzNaz|V01a{
zU~ecJ=_*?a<A9&pJAT>49vur}I^yhXRm28`hp!JcvadxxQQwp31m3RUop70YJkEI-
z%;<J)?BHvkYiFl9A=VEEVc-oF`E{~KyPvLjPEhZ>{}7N|<oU`dUmQt30vM!?C-hcE
zl?dBthVDCbUh9vU^S}Ne1Mn%j1~j1qiaz|^0zz!M>+Y$^Nx#yldTuIedKoZpzA82D
z!A3z}Cw34FO8zO*7d%SJTr;lh=rmvF?tWHkVLYG<XDInD_#*G3-^5>+?tR=`_#|S`
zZqhUc!0=^le;Y*f0tSXBFaR74YAcH98Q+9KX+bJk=<GJdTB}uY7DN?VMh0Q``v#r<
zB0m-3$YzwWWM^Xco$?+!KJ$%^@N_am0KYPojK7)@E5qM~_8x*oK#qCK<JX}-I$u!`
z5|(hpTsEV4&P3Hm?l6HGJj{A5^cd*bI6_hxVo*|vg73>HzPha9-XY4DpY;@aU<#|s
zP&fc-cR@>TOWLJ17eXAzO#HxXzUUy5&>UQTa4FMUKX`FP7FP0HeALm1ITV0iW}rw4
zWfpxQ%3`tcMh_k^v>6nKWI!3uxcSAj8D)h~PrW8t3Z|wg6TVUz%++OC$0Awo*)|Z}
zujKZt@0s9P13q<6Op?G;3c46~2^_PN-kV$^5CzX9Bw(Hz$s8dOmvg7o2{p^d5+jxj
ze8{jjGYF{=rcD(zW*&hR>FQ0J>L)!Z1MFHp2_l4kblz6)tPGdl>1;M!7|ADPHNH<D
zDNfk*u^v~T$vh>-CtYvJV-&P-8x49_DU_Y9h}1IR{!%hI7^Yg~g2$yKOK#PW6+WlM
zcz*NXu<EtQ(2q93_t||$*{8JljlZWRj%h38z3bwNXM3C@C=e+7E*~ECirRPlwJ>#f
z9HMA2v8-Vr;cwr+lpe!D4n4JQbEZs_yt->+Zok3!B{KS^6ZdXa#gJ2~2VYpuD%tNT
zD^5oq!e8W|xMR{5xrYdt)y`q`AEB0FvYAa5szKAWD%ZMl0UuquqexA4ippr`sn4?7
zpIFj;^&XgEu`D0kzN>1HAWslS&zA&Dj{?#^TuHn;hY(_yL*KEmEHKw9^=M3|2W5fQ
zQ~cnS3)AOW(pcoE{}$4{em*cVIKVm>mg`YmC6X&%pH^E%{qkJ;4=WOpSo_2I3j_Eu
zhR6H(TfGQkjiHZ(2t~0TeaZT~PMz8jNAv#wTX``9%wPB<7ne0M=J(?jS3~XSz*=_&
zddlZnG-69Ww6uEoQFQ8pE4-jKj%{b?HNDo&{xY51OOQhdcaL_?F7{$u+_eIc%I?d)
z-Y4WKNwLo+areQ#gRRAG@-eI_;OsJ>a2dSKn<TYGb#8x~xRhtD^)p$Jh>f>K;@=M?
zu(kVu6r4GbDi_=}2Z~U9fkh10nNLLbjJ+Eb5HO@9$`hg*A{={oW|2T;&B3;3R1sBL
zKdCmtWs=l~LYs$8oN|358HSQt$I>sSdvQUFkyBj<W20cTtO9cHaC*&|@=Py%txOUk
z1%;&KS1;VRmL9|hT)etaOYY%B%YrXKxh|hJtkSVA$_gMYbfcpj;{#ETRtSxd>pF#U
zJGOp~2vf}`LJEjvh=nOx;f9!m&HDH<5O3aKm0?}yymlnn5z_iv305IIKO00t)Fk}T
zY~IO+DN*Z{UKpz-^CD!8nVfj+(X*c>vBT)~8Fi%jO!L|&ABZIjqtS);*gZ@X2D1$M
z8zlsgs~LjZ35v}}g^<6;497<5HtjmlaWtPurnf$Qbs{FS{|$phJe5b_St>JE7emIo
zHnITR6h#Sbk-k-lL;`dCVAbcY_~fuq`E_7qZ)%0B=6WtY`hrsHiO`qEQ>3Xkvb*&i
zN_zRj^)<ppQ8w30)8<@S`hyGMJZd`0>3F{%91IbDXdY=*Uqh=0kQ4m>(&7uowpJf|
zBKj%-rl{l&w}h*}w{&g<m+ld#J%InC{IN^mUz`dc%%#cOnRYB{`*j%Wvkd6y1m2e!
zI6r>|_H-#Lhvv3s2C?W-j-hczre>2;S9<35-Xpx>eKr$EKDp$5@;Le!qMxd4XKP_-
zl!4pNNFgT)=v8ZnG<EDa;{SKtm9VxQlHyyNd1*k$LS(OjDacbtzk%mltpAybqKP8?
z(@cA&`!6fS$0YUMz}5Ls<k;HoMG(iW%sPL?HK=tU`{xWhm7$|kNadqf04y|O8&tZX
zlE=~ZC1{X6iWdddpbduQ`o^SDNIMxRpiTp^UQ9-KCZ(pg#^v((2_D4Y4eGcJN!iU)
z<YAF}No3Rrfb=niabVV={PjNp@sb1eM%B@oU{><uyVtAKHy_wo3=;h(YI<yS{o}CK
zaTcrBS&^4V{w9)Lz#0}H9Eo|B<clBD*s~pW)m@{!8mO&>{&zxFy&p9xpbKfc_Wk&R
z84fg1^t|reJGBj+rQM+R!{iMy7{*pUgC$c$oDYgq9i#{ur+}zj$-iO5Yby>Re1h*z
zG!Q`idMLPbK@L?l#N{1FPE(z!=xIXa%=&p{)yT}Awp+pJEusKSQ+!O7@35>IZ`e1H
zQQu8<w$u^PM1jT!7i*=N<(ex3LaiHq;itOxOR9Rnukk4Eich#poPRzIrfWYE1`*r~
z=e>nb8K0q30!{OKZN%b{90QZ^ajGq}Er5XYv!0&S<YF|tQ}j#bA_h*(iFPp`$_K>c
z_mt<jJviMx7THaxWNL-{7Mu1OFR$5wAJdHg>vDc=uvvCo1b1-_KV_x`uN;2VBC#jf
zJ3fxmC2vsSvM0XUAP(4>0U)-H5<T;XF@X*A?J(arINB`KB9?yk?wEW(!JVQ^0(oR*
z{@I+za}&pRtwkG2cFeypuP#;@<ANROv`go-QumUC=mT=5l`gT0jg4yfj+|@2L4h2h
z`e$RH{KbgIbi2xACAEI@PN$vkWB`pk*B&Z6R*UHP_V?(JTp}&Qhd`TG6+}~`nbi2y
zFLblW^LL~|5U&2NpQV%fbrl|H%N(KHGFsudjw9s*`(5*&Qy7eEzvlyjVhysf>|ysH
zYlF^bjBE2J`+f~f$0nFUDeH48w)8}Df3+J~LBexay-Ss{<koXy?9#^yf4v!Abmped
z@*VrHk#Xy)Xc4dkl=g2Re{3g2Av>F<X@2|eEt+$^0MuzUg^7Wj2b=&J$O{K!eCM0D
z*-VuaR>Qz__CJZi0$2|2u1m>$6&tFXvgBQUrA;~`uhW%a;@yVq0XQgB8MT=5M5%#-
z$LK%w9kmnHhRM^yv}|RLn^E&CXHZ16NvSC-vo+(J&OmYp0Vk3{6!@lH)3*<l=<sLA
z_j<a+|NC4Ng7@75kWZ1zmaJ9$TF0iFh2zq5v-2I*B{K%7So>mG{6vxujF9(p#B3iI
zhAAqn$Kw>7;Dg+>Ku`coK(oK!JjhPgjaA9M-8`JQW?*USWNfm(I$r+l<KMmKlUAJB
zy-IWqeks$=SZ(Xp)gN9md`9JKg73CjfWo7M%+A52L?l5{Ek%4z5}A2xH-SGqU1mMa
zBM!05;U8V+A=fKLQXD0qvR*tyL>k`|5|TBhfoad)znz;B35OcK9_D|}Jamw6<82=6
zb&d5e$Ld^hv3ZGggVfEXSa)XZN3B5-${loF+{D4<I`D1U!|Kc8)RC+1IB}WV(b2If
zgvI|t6Xq=l71EvmuBW>0;G-uH@KZ_K%Y|k={H%G@xlpy3h#{e>w(-BGbiI(~{1NsQ
zGxOlKl{0LD>M0jAH%AOXp5%|lry}T|`3rDP8XFUNOS74r=FE%zWK1|%+H<_O?~9#e
zX2Ag{1!OpY5b0wWWTY>GCX<4phxV{<lqSkWsUBJZ?7?3hkX0^fiYvl`%3gg=Jptvc
zN$k6KG6l6xR9f7%M3%FaBILJx97cGpzfm3vpC~A{NYoD?$jIWtqcjLXbE2WjsRP?<
zfH8$BOF6f6AqZlml&rPlPWeh(zX~64qUh>8lwkme*SriAd-q>RVn3Y^bfwOmL-ytD
z#gDzk`j^6g#d1GQ?9%#o`-`-i01DE;L1unsI^LG>g8>s@TX+iV0qWV@jHB_)%QM64
z0srceD{S~9Co{`g+38#z$7WHEgb$8IWfudGEE~sggGSs6|EH`+mgq=D;W4Ea);J2g
zjN}+`^a85<FVr1X2M`ol!l2K?5$p^r-_~%d(YUO#adx%JeC>t+oc;t&LmTy~st9<r
zop6FiK&ZCa;O20;e7mJvOr0XwbJizZszvrC?a#q`n+g@+&LBfT#_ke#NxSwPd$QtH
zYb?u*F45?q@sEkmP(Uw5s}}Y3#)mJm3M}Ky35m-cGykmT99a}=Pyd<1T8#m@%pvuz
z_o&v9j28>lMDNI#PN`9Fm-hT~MSb?&eL|n4J_TE~UU3VK1UO~J3sG*Wird3r*Iiay
zhY5)15%Sqgtn+AXd3Mi7^X4TBKy5!oSL$)0&n4V{i(re~eP*lVl!btV3-2+#-pWcG
z;~;8o?8~|RP8llKOfe%dd(c+&N^}(|CO`l+M)OyLw>o?IKk|OVskbv*b|GU1#Mb`2
zp&W4Xm6vB`R9k#mH!*I#d_)!fl%`qV{2Il;3Z$e#?<7nJ-G<UBtp##Fod^_Iy0z95
zwqYE7I4xmM8j3LMABpeK82IDhYj^tvZ{h1Rsxt!T?p7pvqvG~H*FRMHoAP#alxN&4
z_$ojYE1lIWCWGBR^7CFGW_AbgXI={S+`&3z^z1m4XZDzzI2N=IS^Z?G`07pFDvk6v
z*D-ya$T9XcVwVlPA}P$9P1vyzyDg9v?tf(sKwNhGWohp)GaIW1Z(^j83o=B3mr31@
ztkt31>uGW(doa`LuEC+t6Y}H=YPJPtg6wf7OzYIB*Iae;-5KY8!B?I`-XCji^TUt6
zAo!s4@|!Og<>BFMP>zQa;T!<C^*=HA4U)}IbURpWFw(F-oofk)M<R)PF%Q?vBr6iX
zJ_W;f#g1N}9|3k&Eqz7PwaQ$2Dlf_qU^0me(S}(}se0W3!V&q(Btl|;Ul-yO@uEEp
zUQXFo(w`rUv_etKV6HtgV|?vh*R0n=#82gsd2RDoMtDa-#{{u^hdi>S<WofAqKLcZ
zFa}b`prLb;#txS@v^C`ZK-&^ch|zCf0Fu!guydEuergEdDKQy>ZEOCOu9SY0KI&Uh
z3k_4hLq4_9S8Vr{;i-51(zg4@yG4~BBs)^1JF}1ogabudPZZHg0OIC(Sk40MMt=Rk
za2ff$Cp5OOm-Kc7$?xv)KBuA<HWk#0egC5+%dB|=yG1Z#1BaNeap;6=jUQr}=E2vB
z{@nz&>xDGNLN)?H<;*@tsR;cZZr8!yr=$%2&P9bzcB-p84ygT*+cTMbws8fZ%0x~h
zS;g*B#4r9Z(GH=B-J}E_kE0=_f%c?!J6oqI;jJ9DU$H;;*U4n_YKq5QgX_RTpb|ub
z(bpK6x;s6}Bi~k#=&v_v_xn(7F#Ja>q^$r&8<+Rkb3hIw$h-(PLo-95fTvD6u#{~j
zlPC#Ha{ooO;6)caJR}S|UMTgUb6DJ(2NVJ1K1%(%huRvQ_f+<P@GUp79UZXc<Cg#B
zrQWEp=ZYsFNJ-t1jc5i9E-zmhvD%O|^<A^AtW_)PDhboaN7atu9%p^K=n4RC=Tvm4
zC7%L;f{pBSc<!Jxr<`l3b@x+XYky2Rb4{rabK|V~^O>J4Yp>4vd98<eJ5o&enJv%K
zV&u*Pv?Im*2soozJRvuMB^%70AiltM`b8%7I|u1$@D}1q5Rky@G@bOsDN2xyUNSVS
z!T<F%E`gk@2idosWpOn5<8OMdLTu=pcGE0ZU0a75kXheRjZ1-nO+<dqUQ@%!mQy|P
zjG5`&+IL{ZL{`9tcFWKEVAve?vh{*MsCLj^8>%v48UYQe92~*h-RPr>!p{-H!!QMu
zzDcH23sG!<g-JTTnW4c+BWMnZ>uc0;?wYkyrfZjCc6kCKB>9wV-%%bunB`(ie{I7}
zK9^^uzIvbX?$DC4Rf`&PWe`Vk8(Whj))IB+=_c4_=%SC8{;T0?j}DAynMhQ;e=bc`
z8qBcqGJE~SL*d?V%Dq$hQ=|@G<lkU+)Bg0Z0sQx%9bzSQTo%#)`}V1ZkfR_fRlcPw
z6mdgs{})`#pM4PP4%%d<M{xL^^|z+E@6=N)&sE*9&BwhctpoGq4yA#X>#Lo?VV4E`
z+oNY_Wrj-UpSWyW(7{m(PmU{kQbZv*d`VhG+CjikUwV~Lb`Rc7R5|Sf`E*d<9GkfM
zC6OFkYUGcRr#$)!o`NI!yp9c=V5&7ui-ku?wf%jw1SB0~O9;hSle|>9*>4tF%&q-$
z_uP{bXy83i-ajeA;o18<hakwRa$)OHj9&EWOJqK!d2AdopzC{CJ1?PlZ;@`xI1ye>
z{%nCmU@Yh3(bIQam$hk{UoxMQE~fJ|-W+%aIORwV8kHzO7L0(#dVioen7rBWj(gGT
z33Z3UXAKam4m^P;xgRFY!#7}#Q)wZ+hxNa#XUQUtg*|}6F?y=4A65V8ZcKxpF(RWc
zk2)72sd#_sB%>A<Y*z>n_fTpzY-e-`Su^il-P#@-|F{^p?GTv4(}e$)T1yQgAM`}V
z7jooInL%#9czig7Pz{nfte``Ho;gXH4}?jX`q9Y=Im1ODKoB9R2CsFSmOIMMZ*#0&
z$QSAuNaIHh+iudfCeZhM8y5}Cd8utoF0h0~GHcD9$Um*5^yuD&efQF9tiB~4!{JC>
zexC1y(>u-qBK#H<<-uh<n730TCZwjIqak2)eYoW27Jm4bz-a>2_`Sg^;G<%0(RNdZ
z?Sq93zi;*GKx#mC`|zSQG`P!$3nJ12Y7$bvJ>4zrH5j?L#l#^&)4um3hV5{5g`dsI
z!Oo2{yQXiw)ANIunp;(?UfdTlr!)&IGa*EIxGnsiu3;8veZ9$Nx8Oo{jKh1iX@j`S
z3)HDBxN#m%==Welr~YTC<<kVG^hs+Pd7|`}3N|~oW(8L2>tH<#&1yhe50xDbw+qT>
z@U?TCEfqxo{K5)Hbu)3|-yUQ#@L8S9J44#(ax9Us#X=SK*0Q|Ij+Jr;<NsX;@FM~>
zpgV5A#y*XNX(~-UCauoDEaH;1d%6Z?nL}{el>=5RI`lqKv>3uFq=rH-dl?l^qT&-4
zu1Ojwz~B-^C!4*ofI$7NSM##X-Lru)s>I*2Es3B8YyW>7WMYxr4Ic}ckX>jr5vLVX
zi-^{t#&?pXBTU-qz8yofyU?4NIc{F^l8bJ!6_3e=by?CU-ScFT?e2<h^d#`vD$ZWG
z>i=05Rsb7y3xc?9JSem*Sa!yXsAGI|n>kG}P^MggDD)hzp$wYujnqQ>P+_pY&!7G2
zd7#BYQ3$x4wu}BC&Au|pmF%qYyS%cNZ95uJ0Zo1?h60AQq~D9xriKC8>7Hk%D`x(5
zdLrg=yl<cYeu-QH4o)`m3uV&S%M|g^XTq5G-Ez}_c6YU4V$=;P5!SWDmBM)yzo>nk
zvaLwm!{mvOIF0HI2usRL#hcZgnPD|Q$|Mgu1OfWh?y4Q~dHOgTMb=8l0?*7AI^R!h
zak0Qo*QGHE>G?XWlTuht-FMc&K8MM-vEKkRL_R6L%;B{|<z(yk4ss}T(^Y13m*T|l
zO}Pt|u>_AEF=TLY3@GZbZ8D3#zh?wLivxOb=yWNM_rm^6Yq*<O^L3X6AzjLwW)&2E
z*BT=}y;W6nHTqc1CF_WhJgNFJWl{xCpX&P--IU@D$c8us_)KE));tE_R49;~cZl|j
zE4Sp<q=QItKUMOaPQxwTc9+<t@52S{-X+U5ZxKkcyqvB80TS$iSx&mvt)d6s?OVBJ
zX49J}zF3^w)7dBWoU7OT?5^yl_YY%;HVP1b1I$}6EhJGX$Av8uz5kG1f9rcWTAG(s
z;#xUh!DEeud7V7(6ZOw*SD@YvSRxPn$V0PRi9@pQ7&o{DFHGEQR#~rzBPA;nu%hA_
zqvld5`PXg)$6Ic6OvB5(xzx!TTMA^~MY5*vtT&lNc(6OuV*kxrsP;bpxC$VMYO=dq
znl$!Qs&+XOF-YvmN&#V232K^IL9GjlB^<ldWw9YQyJ!hOx>Vk0Qk0=KgWWd(cQ)#6
zeHOwFB@eWe7SSzAa`Hf-|A(wPEbp95@ff+|v*?4xXGlT*e(HhMN*sJhPBuyb@zyuN
z#w{s2#FRGiZ=sBWNpIEXLQueBV>{Bq1|BwWkS$~)BEx#(SGY}8$wyFLO;OpFsUdF+
z^%H^r1Z-qBC;+H8b69mg7U5=ej5HiFv-*Mpk6~0Q@lncgI8*2SCDN<UtdOTW!t@I%
z>qOSbDr`Cv5t74UFpnFFEGQYJ>-8jjvyqBcD*|(#USJJ)Uy2}QOI=K!pJGBxe(c+u
zfSw7;hWm|*Z7TGoci4lsxO%z6R7jq3ngp^e)ALLTCa?F6fu;rMyp{EH+$Y$z@gg1T
zi2Szo^TE0-1OiiScBmJ}ObxJZ%!vAqUCRCU50KD#Iz7I!cFX+BGGLN3nRnSk^i#TN
zk|Ysd5@Z%VKEPn2jKh6+tsBH*gtBf@HWnyxCZK=>bY5L+1kH1x0Jb^esju`$wJ%{e
zlSY+p2|VDo$J*ebVDgA8Pn{TO5R9#oLqV4bJo|rKx-_=g_uV48DV|_c<=t=XVDPvB
zLJ@v^<ur0&NpDc!3XjjSp!`b+`BEMYl=brnok}2!+b9Hm`rIJ+4&{!~L6P_=yCX9+
zwz5t>-4ID(xl}5dU(DJT`%nTq&pA(|XLFbW>EjZFEb(%0{h()??WFVO60di8x#)k|
zw}AHNA_Zf8X)EAAa?{aTfg!$E?VUp41L;T$l%Vf=^1E&}dGns!LZG`D2`MGVI+MRJ
zklxxp+05d_5d46Ag<gIzfvRa<ZfiPJOrex9%b_J`DGoa-%T$&Me4Tiq6Xk52!(E55
zvTpDR$0DD~)T27r^1~0JkO*cKh?@PxUYF~h+QIpvN{@;X&yOwb>Pk7l3C$_YBO_j_
zc{C-WO;Yt_wY!7ygbZq)G;ZC;l(ap3&8tIBbZ%UOWBf%XjRA9S@!grg*CIdy4Yo1&
z=W#{Z`qWG5wj3O+lwN!DP~`n|C&uJNKZ^hECWkQp!0clv2;qyX6?pSiPP6HG1H6fP
z;6Fvs5u7Dfkw;1gFbAGbD#qTfS4KfAlq`0Le-U|p=Z?8vExNMOdYm0SGN|l@|7^**
za(AMlE8dEvju})vxn6~o>07fUvAjyNq?f_T0D}bVkAq_75#wq(`W!yNTP^o6)dNlL
zZed!3L@Pw#+2}wm(835q+pdwbDbZE^Y!a&g%q2CJg+tl_0u)XjaLE>YBC|3DsKqYD
z28dkl{;b@VZm1S~;s|ja0q6o!NXwsQflKp`!#Vmbupl;Cew&q<nRKSH%9um&4&?U#
z*t6K(&Ql`nkPcSwrhwol?$NHaJ>}V_ekYC}RY4^?01RYJV<;({vTfetQ|t9$$d~pb
z8%q33M}NxD@U{p=@79z?PN@ru0h?qar+a9qizEk*ev)=1tBAt{*xlyPQBh}?E-oSm
zOxX-;h+X8igCy*kFo?yKBflh&Plg$_o1mCWTd@-wSsef?Qt_$TXv)?Z;fL6<uErEG
zzrTbapnz9+#B?`PH@WlK0P_aBsQHdZVIPbVZrUiY)B{7mlx2^bszv1mDOMYw-Dk`O
z?}(=s#1gIl{32!sGp-#~vciQe{i9`~2Ssi@ILbRBKfeQL<+yqt$_h-sGPUlX3JJZT
z&-LzL#$d|P1N;Z~I{u#=q~6lyDF6y1eNI8h^fMXP5+NV8XL}G?dbroxPmE64)<e#w
zP#L8h1d`_M?UJ4>32u5S)2LLyMczGYnIaeB0qza{9v5fG^BP>`V#GYN3Az>uCOkHf
z2%=4%c_0S%_Y3!``n|^#Mm^=fbr-DqCc`A0Vxdm%Br}C@nYJENC(5De&Z~lrE99Y#
zgBf=sFj2eOQLbE(E#swvQ7OSR!^SD~Z&SATdJtpXgVnQSK{T|%U9+YApuZD$o~XG;
zr3B@VJ_y8_sfNGr>_xc;fHdrCWl{x+xi|uTDFlc1OFfqfX*GuZzpi<>O}!&GqpI>u
ziF1{*kXui7`Jk_$PGm5`B26)V_424BN_{$-55;jt!WV_8O~9}o2X$HKvl4k9XcKJm
z_LuM6#6L5*S5iPCeECO}27K4;@pWvNoZU*rNR(`in{)jVXCb`2D~bFPSCctKstPK4
zM=_6%4`ij)%J+hBMk+PrUF(jK3%8tah~0mPuqEHX+Sj3zt%DoT`$E(p991!ev>aRR
zV&v3OEqbb`ovIe7y{kp0uuicF$FQ%RSQTi}!d!hWMui*IR9}ufq&0#*c&P!_4N*~&
z9I_9=AL9vB433?YdlbD$3FAtk`^A9QT4qCa2K$}=GdQ9=IJ2ZWz2TIoW^b93D-VA_
zP3<pKVbyM?mAfRubj)_8<ZL?SOh+zdPP8WOQL!w~tDpMO@~iz^Ri<?5KZ!S>4c#W(
z^D$FLJ;9)V@oj0U6;O7~TmROts6RA~x6Se{)!T@!a%z@a-G*MuxXO6vv*YB6N*U5E
z#w#HBO9PuFL}wBBv9jBh0>-d%x~gqR6H@w;p^$rU-m8Bf2n0!zbRY-yGUPALAJ<OK
zc~;H|lR(OLxA#<0SBqwU38cqLKrLU8b{vVifhpY&$D4Yef_8yo@1>sxwVX&Q+0)aw
zLeZ(p)WGIObTlyJ8*m5^DPERQ%6gL4#1E{+10Rjq`C}fwRP!aEfi_WdSdDU1@V~vE
zm3}zT7!)EYKFnx7#ge%Mk5_5)66x)H4neK(Ud|JW9<lfA1y*-s;}9|5=<06=IGmOh
zV9gv65tp0HM+ZxzUOrB68R8N?EG|7UfuBrks6to{vX!vd2~L<pXfWILyL9HmG33<3
zMK_07^7MVf?_Vpkyw&yHFtT<g{KyLGUK-mqo<q@b<Wsp*5s`ih5JgQl35a-~=zihX
zszb_o7bc<rz8x$|C=FQ5DVHv}@Q81)O*r?~m>+Pk0{WGR;I{Orn>E(zTlrmj8>`jt
zC;+pnvfLC_H5c!UWqaEcJZzrz9GphV<n+GxWVM}>QW!uJS(;VS&5~GLeIN#94afU|
zLe*f`z6R%Q7h3t~kcVW^_M=0~w=ZL<at_iE;47RtzlgA*P6+^Z#cIOZzQhQF0zbU9
zHYLUWQH_W#``SVt>oTUb1CN)TmU`Q5479+))vd6dhuKC`=>QuPncm0gWl88@hz<X}
z%yB(OD*b@|vRt~1N{~AV<gT!4LwsovR^YM!BJzBskYNf~Dn9oQnmWgYiBHA*S*7?d
zCDb2AHHG%g>7ciJ3jpk-nHI)YB#@5ey%<lrQ(O;w3TYy!<+Y|}2~)hgU;Du6MvtG;
z)IQZxJet@z_n`%1v*$_3t<5!dOjc5D0vG4*V;VR=E<drawz&Q|pwpc76<1i$&VCnD
zt4BjQdK`j4BWSvT(}N~E19%#&-N+F*VVtM`-k{%hf@9P-0;qq~x8eNgQ4AMfwoe*v
zdy4SH!nj*vl#~r~AaL%Nmv{IZpR;Sg6<HxBU-=4V(kM&pkWTnjrkd^5_<b5}07NHv
zUtLdlJLnS|?>s~Eao0Wz)NI0U!Lhs4N(dENhbRFt=Jar=h8np=9u+61YO6k^BVWN9
zvQ?h+oAMw7i}xMSxcvJ?_od{V{$TeJjfBr4CHTWi1Pf~0*d5Cq<ccdFs45J0Ub`^J
z=cKO3^5kbRzNl$C62Uk&UoybEcw5?YhqZLrBWuuay%t+>A?E#O^P-Nn(kUFvNd-~^
zLg4n}-Ou<?YN<=j+R>p_Z(YVwv18{4m5+pT*h-+0zQ5i-789*nj`M^<RK3Ykg6go+
zQYi&U{6}chfDjyot{rMF`819Aw!Xx?<Lcq7>9I^k{QO{yboC@Jc~k2KmP?PwuQxPl
z{LIjM7lnN&l;bpm5T<x(m}h8hWR%K6-m486O@xm6fjyW$y&6yAA1J6<0y2RVQQJt^
zwc-u;W-1QW?M?naXsS3taEr*u`zk67wM=<@WD{SB1fi=5#FmZ}HAsU0GN8EY@KI+f
zVXP%^XcBTUnGS75<%kss4!*c;r0oPYVbAX6;;-;9WWC7G)tp#*sLr_yR3s^~qSMA8
zE2@4XyrU%S1izqjY<~q6R!zOFsbPBf)i!ix>QxR@|BvzVIOKO?+!kqICy2Z<CdiKD
za`$yt{hU9PYt!&CxV%IDCWp`%=dmke=;CU*nxG6;c-ap~W+Mssnp_qpG#UA_Qwie?
zA2s!>fcuO%ysqYn5>O7bbe!fE?F2PXfc;6HvgEjaBX;U5lb3G>U*+zp2SW(q2oSJq
zzcbWL<a}_EpKO~wpS&1nciUl?P5I+rTtm|>Fci=$ODd`LQey_YRYlaV+TsQxbW>?P
zA&@eL?4(XKca7;>%IM%o)Nryw32p-^)6a1?)cj!_*W}QW)1-1N=~*$<E5WiNhk$fs
zctB?YYc4I>qidQ*mJpJHQrO4|M#v+emJu*w?l>tE2|h#d#}{P);jvZQ;*1!#D=?;v
zb4Soqgp~-$Ri=l8Lr_NW^I47F9jxB4puPQ*UbNVg8%>%NpjJABQdJj<{U^3^uLUz2
zRtom(xljpMSl8Z;&kX%ln*oyaTe3K@WnPj9bRZkL6gL1re;{wqR0s~~B+yRP%tCD4
zQ5rp$G8ZJL<Ue(u)<RbQUF4_H4GoR3?k16^#p+-Gn$6DWGFaLNQ98Zn;N;w=@rgPx
zsvXZajuQZzkKcu>{*?OF!WFkmr0c^aTm~pSe@_p{_aXOiI+{)su=<k(rSMyAJ{Gi@
zGIO<KLJyx3oj#%rL7rr>0*AJ^y%jS9?Mq3)&UX_2Nfa)Lwt@3`Hl@VVib;C}5n4*y
zuR{4vz;y%72#xbTs^#0ggOMr@)Ob>FKpvYblfg7&2(%Be75d4wi4k#bNc15A!==Tg
zgY%jkZ)wB)!OYZBexXTkoi8RlN?i}dBXudctY}xL@kuR39)9JCz<b><bk2!Zpx7ap
z-5?P;>m6<<ezro6zaA&JqZE9-P03)sDg)2mCeE)^$7aqfUh6&Am$mxcvf<^Z_{}oa
zd9J7+x9~+E&etH018$$C`$fFzP4t%7kpcY=uzPZl+2vMR!<t!ecpI+K;kP&<PIfr-
zF_TCK<E6Yi1`p}oGx)Zp(aawwgfr>&i4bIGW!XBb-AE>VI~0w>1yT?8w&bc1qkjhp
zay`ck)pMGEYBiduu(%WWWEHz4yJApjRm$oP9soA=pzJv4bcLo<E)P-|<fH7~gD+L8
zFp)meP{Z|^$y<TDakA!bngLGE7Y4J|TJ=!|l}L;EDAL&+rUOUr<s^rX`MoYL<<P+b
z$t)lz7}z6r-O5>I|Df|EaLoikF&D&@^b$GZ+}PUe72*akeJ>C$ON=P!NqRJ@cP&r7
z(`PiHTyVMrzBxMEnhsRX5f(do?@jL@>{s4;B3(wIOPAnRdqt^V?{wHRUd|bzDanx~
z$QDBUd@8v@ru=4m5p17vhG5e)$JS&OxSl47Vl}GN<f$BH)9%q!-*p;oQU|z(6|@y!
z02V>kzRlprI0H>CSl++JdNbi1k5_&7K+;TMN-^B9UHzj0+VV<IpgMOe7z+p^03Fw%
zWN3RoIqb<daoWr|VU}o379plOGfrg`n<Q41J?j&pRuN3Y0^5<o9BB#TPBT!hVVs<S
z8mzg{N4cJa-55~e{nv$g>yw<%o(D+;h>@~9A?tr57o3n@<$a*q1+mNRl)KX(m5b~v
zX%92QA4;T~^Evqx5h2NnRCw%b0;u;3+}(>9v5diaBiXNp@|*|-A%i<VEB7-Z4SPH{
z=~({w@Sga=UsNdBw_S$P`r=4{Fvh5&AEB67MoVdkZ2XZH1tF;Q@`*BqJ=*SbA@`=4
zpci90?|Dhif*PE?CU1%Z%hCHcB^m`Z>t5goM?pw9!B}T>Sf?(^DyRuh6l`LBvFK(3
zdzoc<*&~T$0k6}5TyLNQLltTK;1hnuNgH-)6^Jpw%Fda|P56^`C`&Ye(!Q6P*hF6{
z4zDzCfE$37393$%e-}~oq#I5bV}eQ9bdedQnU`qzuueDxNj1#c$HnMq1oUv<(~iso
z>Sno?`<a;p{jg@P)l>>ciX0GhmR^ngbm785DWA2oH5`8m4PtPb<M)7kS&ElXNMGVp
z8}JsDV>p%%nYKJa1ZH&t5O3_J#ZC`milRTt1f$@1wC(|9xpm&(XtIXN2JJLZlvku$
z=}qTFth!%$HNw<Nc1G?%<3kURH{=%FHRlDY0Fa?#^NvWcTKuhB0?qxyw61@gRF__A
z{*3jSLF1%LQ)TaWZdhr$ZjMZ?1bZ%Alx1&CvI%G-07SB4eU@c-#z`4$CH(YHZpPny
zPX;I0X-lhNXN;Wj^W;rV0`9lZg(j_Vsy=f&Na_X4^fcjEbL7a9_}x<I7$qX8C!)5b
z3Em%AC0C;7o|{YG8>o9XdICavehUBn{XG!wo65l*^&QVxzQ5vvfrRQlsbhU{29JY2
z2dK=%V^ETv2dv>rc96{vJLVZ;M)1V!pFIOXUz?9yAy^3oXE$&qe+y^Vih4o1_tyDH
zQ>~rF7pM?C&?euAG85oQ=016EwE&9uqCIuA9vo+>nt}P%C|Lf7DRkPdh>d%|r;eVG
zq3`%L$wlw;UB_}VVd1@W3X=VjZi%$)c;-vBxfdU9ApHxA^ZXJpupaV9FaiFV^pKZz
z{;@PIY%*jWrmyoX@pX7_(I-{AyP`{wr|1~PET%t)E#j0`c#m+ZkEwiBfM~1>4xMl3
zmLy$AnRqsr2(|gl^x`KamlLV4x96xU4LZ1zA!UCiMWg7=nYVwFjL5XFsPZn5J*9K8
z>{~docdTU~7bCkM55$CEO-X;-$y>2)A*;?SI0o<lKV-H<)4}-!a85bXkGb78b$fjA
z)zaiJf9U>oxOlh}OaF?vP#FJ6i_Qcj@tlRZsjIyH+Y4K_B{1LJ25lSVq0DnwT$V68
zx&c&PYm<vg0GIYmeDz0kqD@Y`&eBFJcV{y(10pL1b_n=BKI|4#;k@(3XGT-s#|rel
z?Pf6~TUKbuJlc?sM)xp9iWTA6j-)I=*@`3mmp8>0Mqo3SsE|#xtT|cM|8|KBpFO_?
zKvF@%XW3K^ThY7%rR@v&XF9SE{MgqGIe8rVPB@j~vJFvF9)P;=ZI+g>r%lfiQb>uF
zVfofP-vnX-u_Ry_U(tRU?eMj=Os-9Xv+&We)4%k8ct<)D^w$;06u>sryZEek4E@4n
z5i5Zv1J;-(1kAS*h7amoiN>hl7LQ7RSFT;PhQ^01#R~t$kC99$R_o&Q+k~L1jE}Bu
zuYU<5Ex_fM76hlQ)#=?AS2jnWqf`_Wsc;zS*j{^PMgk1<Ln~Nb-C9eO;Wd0%@nk{_
z+NUIk6RD4iw4D7eho!O`AcXzqqe-3~sX-$+ywUKF(sbhfh3tG@92DDf%@csMcQV-)
zhbHrM?6%5L5^^-CdEB(K!K&I;fTi|;zU5_GQO9woTCe0C-1DsxObBd^&I}<s0(CY|
zPE>vcV-qC#*fgJXs~v00o%*}4<(;nAPMq<Wm^x&m-g!-?N8GJSH&ALhi`4=<fqn5p
zK{sVzQ94LDB}B7nr<aq_c9Tba*b698ZiPg4hnRFcC%kEH)Rb;D=C`NEfgai|M9p5`
zR4<VY*irkua_bESsCkszFC)6<euDrVZ{vE$$jOOtbu3Qdegvc(?;HyEIi5pa7R^RO
z{QA4{I}5%atJf0*Bq`$LPiuoCz~K2kwMEt{S&PK@7m-Er(w<Sw#|NdSfi-;eX4(n2
zEu#3iS<B>N$sm71*+l|`>Q4a~vGAjH4N!bVfi=*b`*PF${$EDF(@lN}j?KSpNI21!
zz0!Yj?)H_ezAGx5f%k=K3jh8#QJ_qb0&jBKX;&!ssbr00-nWdI7Q)hWV<gLh;B!Y6
zsDc17Yw_M$dXH)z=F^$uMQmluQ@plzx~WyN1*W5O+TFukgz0^D&a<r|Ky*C8=K-G_
z-A~+8Q_)=shW6%LQ}1-J*tuXZbNKv1ucnKxk(1MC1r~>NA==12G2QS;F*)9Tqp)Tm
z@!09AeS|WfM%ZEeH*paO4k>!-)R-H+YN?=sy5ZWRjXz8^R64^;lV)Nwj8wu37f=qE
zp{=&pRs}yr`B7e2uZvgO|3BSdMFN*FQ|=)opskoz0OJ3xj+p+e*vZVMP39qgZdd;b
zIo_f`q5t*#ZAHxyk!t<0ej&PvxdkT;J1ujGjaOuUKk|SBQOpN!O$sN;)l#-zK6Q`$
zSHo%$6$f2J7cLiS<s2tr4$465UJh5Pc*U6yQzwcN^p&hS2tse<)sG+`6||t>-!N4B
zaIK}lSwwZsTx}E*XC&T3Sd0=VnR3Xc8vc>XUR0!s2_=JOf5oSWu3Ryy?)UN^e0Nv3
zKO44m>%GdA&<B@NqA%=Wo5P05*4%s7O6EzC41AvYnp&8-S*Md_Yii&8GD?qAX)+HS
z&X0S88l><RIz82!>A3WdXJ^4pz3QPq>jGbkAkbQ}1pdG1P27LZ!hC7Y<)zqG?Ejjh
zjj}C7@?P0MCvBjec{XcT#5`J}yBLdemqw71ins{afx&2fKqlQ;g-b~dD;Xk%kQKuM
z{Jo*Eo>*38$~^Y{sAe3HdH9auL;h0!rem!u6u5C&zbG307|QBysp1UOuy_<p!ZI{j
zHjnq4fEG*uV1s!TH4kwfDeQc4w`-&E$Pj9j3VFJANO*{eTpQnEt#vEa(t8)F-*$*=
z*#EsfL!5*7=9A|m{QFe@7xcaeNhk6-5va?Qj&l80hDMmC6`;q~17L_ZJv+;qEawQ{
zFs4&Y?9HaXMG$xzz_Iv9PHxk0dT1-Q%5pDLZPjPEewM$S@FZsVX_t(Wzrqoky7j^Q
zE$+KV$245z%5*d%hi(c*Y~~Q(KkJ^=x%N>aKJ?^V1+H)JkKn*Vs$kBPyHEP+;_8Tn
z1Dnxs)NK@Aj}@mw2_x7V?<(fW<0u>s`$XQfKo7CZHW<nCpDlpvaBe@4GPtK!Y=nej
zq&&44YclCcF7VNsWT0`d<g`XCC#Y+nEz|wbsbq}SEc4Du9)0&D1n&_-WI28gy}5sV
z_ZI|mSaXEA2;q`S&U^2n7AO@CTON?Q-rz7-ESq9&F!#yQ*Mgm<kNKojM77(FY10_5
za`z^gAzw<e?yILu^s`@F5Q9g_N0y3S!KU!LcW#>!8b0N`KoK}5-~E7U#F%}kVGXCN
z$YaH)_=Q_HNx8XK7+6%J9f1f0m3G1GghZOBvR8r=`b?xXna5lBE;|yK591@N;cU{M
z%KB|h+@lJ@!l~1=j>fJ-oj9+u?KpcX$A@17g6rgNcpW5qrcI|iQFRJS20tLKTsz2R
z->1>tnWMlh2;O``gXUnCqGdvDOa+W$V-S(_IVl_@w1b?^pSUKwL|JHiPwwOoeeEF_
zl`|`yv*Zod^UR+gN`yJqvHjlSPqKFJoB^Qs2j~)+Eb#zz&I_EJxR^>W<FC$uSn}<>
z30^YRj}Rl7NdbOKnW=a!QX*Ul6e0&1^$^35A&gE3`BL)&(n=Euw3p@M?f#3#N4p~6
zVg=a2ChN>fJNL}r?0R>sBN0#kTvb&<-^}0ru9bAc?K#q1zx76n%b8#^ZQEl_W|yLs
zjUyV?X}k~~N=InVgOrxsu0EYq&f~;_|DV2fGA5LP<BMcxR5NEJL@Lx~e&nSF1XLnZ
z>c)7zZdO*?h8y17!wMmrA#TL<-S+Q;R+fDFs%;&x;X`LF38Leyf88{g_V;F*ih30f
zl3hq6l>HI6@%BL8e4b*;ZIA@*@m;20ssn#dyu;F6I%@5YA-w7k3{1<?$m(=&sPfs2
zgP_T${LnXP{1+c6rjo+23QZG9t>cZgz72GYdP(5z*c@&-PD~dpfJ_PAhe@_MWY~bH
zmO4Vo2<Z;;DT2kWT7F5JuWl{>Ciwy!g&zE=4$H3dW~{%q<I-HfI^X1IG!ahVYI_T2
zTqDhCs??!9%sjIDP5zTa{mAb85)MZBZ!<n*Z=46wvt*V1Oq`7FP5aHQaD73uz0Ruc
zav_7-ee&46ts6A|3c#Z(-N@}Z_MF?uz9yzfW&2Bi;h5BY%~0@X@z+ZIPcF;<r*z$f
zy9g}nRon7V;TM`|@RA;(!i#Zj^(%tYu0-b|A#^UDi@Jqx2kdEZ2N2843v!TnXgLo|
zG@{;a5TpJwuY}ZdkpYXnrHYrVs%7J%)O@*V?Pic79q%yqGOs6W1CmkJ@+DfJ96bOo
z#;gtlgRA?nDrl)dUl|+<|D&g>vZO5T4u-nreLk$Udvipy8Iih>a1RO`AQ$rmJacm8
zO5*6}tFX&Z%5M2V>ruPW-o`9daxEz^D#;}Wt|OX(yL&lx=#aadpy$kli*G}juUP6m
zRup;tFxpCtu($r8(Ghc%AjN#-Rz<reG&{Wh?MR~R1_yvv@zyEDNMqhv^tRKgm8S(Y
z6$<fx3mW?v<b^=IU`IVwy(Vz7t%)v;f*3KtVF=)20-Hy>gqZcgcX5>EFP3(a=^o|?
zB%=xF6@8+8nssi7N_fqL!TmETd0$t@cZ+Fd2XJIt-cw_rjVVH$7afpRSFT$A0eVHB
z^?|FF&8(4U$WJ#ZHso{*S=P!eGdq}9GyH7j)39QB>>JfX5rF=EK0LLLL4dHJDoRui
z43BXT4>l*ooV7(|giUJMgKY>*H3%;|P-+!XAe8_0&Hd{B<v5@IT-D?AQ&~1vg_Wq&
zj@`g`in?@Mw9A0>rt#yPD_$%$gLGwil^FRjPGS$Up5t02{Tj6(vxd!&L|^RNm-PAf
z0bok97?^J%y%M+vyail=Wt08)BcUZlbSV^OadzpAtT)wO@2pA{IkIfZic=kT$$Ky&
zJii1~jL)YE&nHvk(r4;<uu}Tb6;<?yOZBiaI{j^*%izOmX-ogyI5uL?V47omS&($@
z+jbPx-*%pLV`~&V4_=>JQG$6QH{_lIZU+cK7H4ayy>T!88HwKAL}@i(ov|)nfcihf
zh3}h=oXg%)XT2L5iJnrk&^@5+%N2pfjceX9r}J<FaA3rL>xOLM5Jo_nTYs!2J-1&4
zV~vLRAXKvcr2+@;Mb2oP%%#B0hgi%h{}WdTq32B1^<jk$#Rqp^2{a~sn8hvM|3!1C
zKB@gspm)VPFN4Ba0}Z)xHYjEEYfNZ4B%x;wOW3iwstz;EJk`~L3q~=_KxdytO2y`N
zujQ<arjuk0v9jZr9fibbwI>2iL$^>y@LEjnUv6=4k`+~Mnx$()cfd1*K|YtQzthxF
z3gd4#kGy27>EF@>Q-UaR7!PcFglKY`4Q!tIm-nx^!~hlIBL#(jt~X`<xbbe&5qvG^
zu084I1a*!|lC+-F;uqaYM8=6!{aJlteTpcFMxRMO;V3f1N>e{lmH$#D_qmftbGCW$
z#nl;Op@6@?6LB~b;jZIqVmIX|-JcUg>E@B@_#bK49GhI&kIBG6=2m8A$ENi?1j;x+
ziVK8KQKuWd4ae;G%rrNn&7L`V__3ksE8S?QZh0@9@eFI3KF^;({gQTr43SlhQ=#R_
z=o<C)F(ujSVV;`fV4n}eC{*mt7&wZq>0c8$ZoGe-{bm>~682<itZ9C}zgu)H9eD0|
zkxq4zS<)mg`=uCjbB`<36vVXb(7F1RNi*rcQpIJ+$qk{QI&7#sTzc8+oDbEOF@x%&
zS2)@S)Q|-XEa(jwZgboYC4N1Pyj{<XI@B7^F<z4-SU8Lzkd>z3K8VF}k7*PF?i^PO
zbXMCVe^x|t_<6+?8@2ego&v5C&qzxw#|j50p0>vQ7?K-Jx<05}LWOOS((z?g3w0;>
zeZ5&-=$=XYCd#ewrJ6C>?lms8*xxwtk`E+%skYnsC#;g>>BdD?J_Ec->n4xCVRsH)
z@!6Ca*ld%ZqU8%>j^ylzmw6wf){qPu)r-SY3vEXM<8WCFncxCO<$Xnfou?6gm_PGy
zYoFl7#i&S{I)#5L0g9f=j;fAst>w_6My}9x49X@qVySv3(5D${TY9yrG&Ca51qJ?f
zHO0J)s4fd>kFnwfdS-2roO=Lf*d%Kx%x+1Webd57n>LaWAWxyKXnQHc!s$~{en5?z
zpk~i^HMa7L(Nsz_BK5wrhR05gvIGHRt5k!o$Jt_xCv6gC+C##NOL%}s6tvs$?Pfw&
zR-%886?*%X8##Gh!H?!r1_Jz8tr@)_9TYmS-WoC_3&5^rtd5As8@-8$<nV=<XG2o2
z@^Q27fGi8@PJgP6mP<GnD<GhA+&f@wMD*fc-k-bvfv&1xb;;fGO#&thVIQE|b$xQ4
zm7|AH2`>^AS}aKSZuB!zE32A0yhEJU&+smg>84h}j$-VTo&Tx)pv=A5Yw8Jp?nw(x
z^bFY3V_UKbK>tdRW^<RTt%ygsY_DSnDz>Z2fA71V^o)yMDEV@nva|0S`>X5U-V3^l
zxhU-Ke{gx1`pC+o$Yf|!EmWSdw6m}P;4U~mB#ogjGdkIU-WQrmK3_gi=-9RWIZ{J1
zweHX9IHh~use+lx9|7F&zphE_;f+~)GUhUwu}m+UX)}zq9JOEbYR^LYY&{x+%VFY&
z)P*3pBm#H;p>NKDk0{G6IqvFUX6oHh+T-RKyZc=XpP4(=zi2}k${BtVn@n6-cp>xB
zYnMF0^(l2Nj0H!6*z4J??`xM%NI=?EQ7a6nUHrG4V!{c1_~i-Gk`#I8#6qL#xM-$l
z{eg=IN~%&s%OL3*$>ydS9E(DGEMxh*x<4xWW<#ZIkYp}{K}?|A=sR!fNUbiQYlzYo
zdua20fYo?KIR*X8!BRZhBO64k<%i}Yys?NL#0A<+(v?vx{|JW{2y0m-u^b@da2WgW
zK(>*P7yv@(?o9KL)bO_dIseGF>$*%VOU}}uq&|}12viDKOL{vi8POf{oK$~1KriiT
zt%fkO>NbA7rJ;A}J0o__B;7kktcNxOk)~=7&3HMUw|j>6pMs-+0(q_xC8(2VaxM>J
zs?Mv5=Wt(*;>`@sPB7^29}6tqs^yo-<OIi+Q?nJ?!taX~*ib5uc(;q_eo+dA-L1c?
zhie^Xb1Rw}#@1@7)k(aWV6zBmnNAkIJQ6#Cc&VkotI@!EV0G)aQvebPFP2BG@&3?_
zM%bY#y4g?90s#t_hrDWd10P!>G}b-KQkfzC@{A_$-vO#T?!k;Tq4u4KuDMJ?N{WE|
z;X1a-wsw!pD)N@>RyEs{?5;SfG>OwbqGinoimqtd$kmh#FMwX`3(sj_ri92nCL`fE
zMQcakRROH@?i{34Pzb6DWqa0Toh(a}eN|L&VujT&98+B+5`mTYU4KfE`N;vb!cvv;
zss6as3FB~or3Vzb_O5H~VnDaR`O3|v;=w-dnTtCmb!DH4(8kwYI$2a%O1BS&d&J6)
z<<t!rjcptn`M%Av{s1$Fc$^u2LXwL6f!K{bG5RNNGAvr@nG)P5-B$c<yTtKIguMmb
z+TGng67qD_@wQU-9V*Al=S?E39Bxgktm>;ya?D>gi^KH)bM4%CmR2unSNW+M+Us5S
zy*Gc(a0!=Sr1X{&Wus&qhtU(|C5W0Z_c+h;Xt<P>x&~%Z(wDhf`~fA)NMe-<uoMCh
z)J){&&M+B^Xx*uWbn|DKNXtq%fi|fZs<{6Yz=Lfbi>}wQyK4~u5P^@b?R|2UM14@#
z*jSDmPAq*PL0&OQWXX1^{AyKf-<^?zUgI8S*8d7j6+Hr<AANG<I0aM;N7wiX9X=W#
zFX=FmohULr+)|xv7~gOi^Ay$@CXkvTu(?Phag9_<K%^sus@X*VQ2Tg~ofN#pC7wCc
zV(X7RQ~vKqQNL}Rb@ENmIP1%v_y5fj96;1>=LA3G5<vXCKI>T>+cd?H4%I)S(~Z;E
z2=OD2HTmYfae75vyF;wIV2J5du;a8a$8NW`l?T0oyS^GkxSE^_wK#sDNKu=<y~`iz
z_O|;bWEvGc)BE8qjH7hnG%=2JZh-1reS1lE3?CH&Yxty`R%GcCvd2qItd=%Zcijip
zmi9=lvccHDEL~_<v`d_5s7sP&GdX>^;d>60@#N7>U|^peoyK=i{p|q2))~b3`Lx9W
zZ53@)jv{eNIzh4;^FOsKec^^Uh`H(Ofr?vS+88Xq0eLCPCc;PBOqMJT(b{aI7RgjU
z)>dUW#oZ7=SZgLaF-tvtQ}CTl>Fkf<4Z_1*I@FSJu@O$5TI%L!`ySAKY6Wp_Gu#be
zPxlF%!CFy5zvh0F=zY$4NJ=`}V|7fWXPkhd54-N5x*a|Zv)sP=6StSI;<|_i)Rc;o
zly`&Vs$8Z}$@B1Xg5i|+5d2T0y}DEagmEV$MznMapa!VlxnCnzL|4hFLQ;>z(k_FD
z5?3iNvj5kFOW}W2kjAx(f%u1~(uBcw&pYE(YXw+H59_Fnu;Z<p^h#6Bbx%q;NFi4j
zW>V2xAqtPeY|<**aW=t%G<}OEK`?<=+<kP$_AEnC>lLMylQ0$lqCfxf@+1=OIgs4q
zqammz%M0Jcn;HCB5j>=i3cc-D8b!<S$3?I>9f-=u7)3Eb+h^@+_m8Wh3ytV)p2yY1
zP)BL!N<hSCtA8CHEIPj<Pz9mYuC*gGF{4t`XO1RJ48}(T=r?UDj(pY>RVL8gLQdoE
z%KzO2$p#dyPBzYzarlst?V#*P6G76KH(>iLiQ52EdklIyS8B$b76lu}v}7zLECz@J
zNNCb<C^{TudE~MAEtgTrO$;Wi{d)y+wM{}y#8=wX4ymr(++q^3Pl#_?z1#Pd;1=4D
zYQDxiV+>Gyy}cR1tVyVz4}RmP3783dmWKEf0FI`!9I(j`dMDKp$D0(IL68)O@rpdK
zmT#@`ZXN)HMlKHaecQw_;H$VA6}&UGI=6P-Zg=2`)@JixJlL|49rGuH)A(8LXpqjw
ztP>SU3iCM{?&{RfQ2}VV+k*dq0TSc-;0^0(d_X8g3-@XYf`}3j&=1kgfaZ{%hQSIC
z{VP-%{g(#OBKJ0PSTwJQ?d1kh^S;6z^9Y}UUCD&pitKC^y=C@vW9mnWm5zSoU2AVY
zEetZRAt?m1*<MV?kTwwez~z5xzOw$U$)MNMWh$(d_b|DKa9b*xEpb|xQ_dOIrS6WE
zy)>IH6ss5UiqpSZ)@aIHehMt(WEL28(3v}KsoQ%K!Fovy6B%UJ0dANYW%&ujfC(2m
zZLJzLG}HvmOo&-`GcLHB;tVU6IM!5~kEs&C8l=Q2*OU|9nXVf-KgVY|cYT(}m*#*G
zI)Ny0j_WxWpaNFU1G#kZ7V{DK)~GBqQzSzGNQeAoJuEYyRTrA)NZb&1IBMoV<HRs7
z_R4S;e?7eu78aCbwoY+g&WPUwZ^T#y0Y5E5W7tq#Wd!`dAGRJoi<6rWUx%P(@hWO{
zyk*ufn7msG?*i;0h6?m&PyA^w{7M)`Q4ZM0bdbdm>^%F^#FS3mTE@O9e2%cl!dVHp
z)H@X!yHJ|z&>DdYJg>#h(YT5KN{GxjnXO9*ecSqUFMjfz(GV$h?}mDA6-^3E&_nuD
zn#k^9=FUrYh9)nMyJ6v$yOF~5MY**jLRy}aT_{pT7S$3P1<=-7M_60~F+v>G=~$x$
zYf&K3iXs1cSq=@&>Cy`qGL3$^8cz@A^5C^5lS3Vum004Xk(^+^%ay~B6Jn~-Rrcy3
zwzQu_;ePQ<R5*G*cx%D0j~|b+u(+lZW)J8C-VezMCf{<3t&gY<?leiwlbH=q9FSI1
zEl6a(^?FPp{;9Kq5i(EuFu*tO9}3#tHkRyA^aI6_r?s>Hdsf_@m<GPmTu?`gWtc_(
z^Tt4|5RtL$I@G6UY;rF~i1?s-h+tTiN)1zkX=_ceGhr2dT1=;^@+-<J%9XSzL{tez
zGZtusmtxYQt_3NZRpf1Fo9kyms$CFNz@X8OL8pyX<M&V&i^5k!tB~ZxW;AJ<Webzf
z(x`W~c?!q^in!gC620Ts4>k`S1>o?Q*tyix7p6;;MJ(_>9vv}=z63I@vs)l3U3|q#
z_485PeX`(KqDz)HaJ5{Fl?as=gs40!yg6Z!FvX`4nj|!939=o;|3TmB2Nm9a?JS^L
zL2~4g4;gv7YRH(z%}DBU;3CMPr1O(oN(i@VCk0tJni22l0cgluyLE|J$fK+X=8a8S
z<dnshkhUhq#?uNhwc5(-0k|xI;!6bn_7|xKDByHT{Eb`bRBEe6E>v<9D>8C22O6%d
zt}CQXX8O&REKrVTzU?6DjIXW*HGlUEu>W4}dZxm|ZL{-U&M`TCEoQyjSutgJth=$l
zb!XQfkYRn9tW-aS@@Q`HeM8F#&6LofX?XKJ3iH>)pSt8@SQEH7>5jy*!YU{bB+cQA
z&AWO>+zVww1nJrX<qre`<UBqm81?SZ%?pi4)Tdhuj0IGtL2?rbPt@#Z4Y@U4wYa}2
zo0`l*R9}9&!;`1eFXp(j@_?QYYD~A}M`n+x#f@yJiv^nf9s-rEDT944WULxt=eW@C
zA~3+i@Aq4K3>%c!cRZp90L>9D?h70MgJ*828MvKk&m?>s#arB;oM0qvC)c6p?pW#U
z0PrYFYh!S~g}V}O5?85BsMPXns+0gk){-3TYLZ~$v@HhL<7nA06<<I7;dwn!fjv^$
z3*>bS{UrX<%Y&^z<%}sN3lQFVE|~}J{O@kFZZpcnFp9=DNM9mc>V9@<*R~#WVz#WT
z+9}lQr|m@JyX&!2KTH&iX|m)rnClIN`aF9Cw2eJtyv6gSp^@YE)_@P>YH`<k-a<>K
zPq1F;{xX-NS$!U2zSb&Pxq2u*mwQS{RkP?+RD;N(Dkt&1`B`Z|hIHYanP#mycyhGd
zmD!TixFb`p39qO{UH23<n#Mow>$h`>ysah!v-3!7^7(cqJ&B>{gQ=S2*T}@?^F|>Y
z4#Wi-ih--GWNw8O@6d1Vu(Y4yLVW6CK>t6%mart{aS}KQO!S7e5gBA9>rJqs2+_kZ
zUYK!7SM0DaA_%)FHT@1Vs)M!YNDNi?O8e^1CCe?G6tN7?9qfQ>(aOZ=;7#fPF+k40
z?yA0J!RZ%xk><@kj8B&R>yp@2S`0Folf16VHgJhV0Nmg=tFo`s21h3ayvHKxWr{|c
ztc;7c3zJ62taE}!@STmWAz(N{$&;_vz|UvXgX*`q6ppbi;q&qq*91|yUp2~p<~TNv
zOQHaaG5JBIV=C$*<te#M$RW*IqZu7kFQ#f(DF%Fj65o+Y!t#YrQt;^-%07i!Ls?wh
z>>sy@(A#@0yKhm5nZCB{B4FT#7#soBr|}2S{(htkr(z`?m8B-(U_W92bi!(lkOrV#
zH~3G}tHL%?;8_pkW`+mq5UKA5|7(uK-c~va=k5Ms@rnG?9c?5tgMw&mo`y<?_25O<
zWVQGzEe?pK0H*!p)l*nl<U8ufeXWbn;O_U(ajuM869-05gUCsHt?C#_2soOy!dU1F
zcd*6LhOvVO^@O7;|2)}2#BdksD3-^1sy=ez42r0%@f`Jc7Z1BXuO!{o{eTDVGW_88
z&AL@Oz3ntMc6{SA`DSG&^9K_hBLMPQLwG-8ojQ#udIBg<^<O$@MBjfwP9W11A|211
z753#%sEPDp=x5xk(%Kmx4_SWPIa-e5t0S1`EIQ9~x_S|IaqRtYD%Xe=lWP1)2)LxU
zLBfh-tL5-ocwm<Sx*jz*+wKjd-t4#TSuA<WrIwkajVpzD4w$@V;kj;&+z|M8b^ePh
zlBt;e|MBQO=Ji0C;ZKig3#LNN$aFXAR@qoEotLc5|Eb5p)j*KahGVh14!Wjo$*iP1
zO?1muAgKO0UXy@aDkt(86Hb}EC3+e0zG~pa_n|-lm%O#^?1bEce>$*kXO{*sf%7vh
z7tGCOL9|BJwF1_YISaiie0NKup5rCZahupYAIT=*TTvV)V1ms27+)~F7>k?9M~sf-
zR7Z1~Jc=2tR5a7!Dx1({<&1K;%9?ZV#cQb^3h80#!8JS$wFzMAYj$~58bS;DWX}2B
zgT~S61IjUy;ED_u2xGW)Vg}+&#GR_L8bBIPi2$BHsvcCz7{=>kQRcU=(+&0F5o_<F
zX~t#VDgC|-`>(?;PtD}qC>0b;Ul3tMJUhJEBAfZ(S&5C5ZOCF@RJWU&epq*a?vi>3
zp$OHfL@?^#N+LcR<?K%*|5aQfh-DDZ&%=HR%h77sgbGf_Fr<4EUBvYuY48GWI@jDd
znDQFA#l33tWfoF{+lW8M0|bb3edNSCXW9s6+I8^Ch0#{(!+{r=%T@u)TYpU?pbf{d
z=-3D6i%1c2Nw<Dd4ePyx*GJD60=ngqz~W2y&0xGClmkPyI%P4xvh!Y9%y#-Ylxq@h
z{@jYSn*S!KjQ<+-jP}978)3)lx9F_;ox^_JW`PCTD^04TbI8TCv@aggXDH<eU;!zt
zMZEzyA_u_N5?H=mTCi}<9WRB)J`DL|B@tj;Jbj)yk#6AEX?v{iRJrV{<=mUe@kjQu
zrWVtCiVSw1M)ZX{oTOeK?za)Uu*5qb(W!$Ss{MJ<=pZK9>^yxc)Gu6hCAaqB0Ki>n
z6<v}&>bgi#|E>^3p})>et*|cp=>(g#MGaI0s}t3U<Tsso4N^4(Z2OGEtKc`4Ur8AK
z5VSzDuW6vSJLO~PZc`aPu6H}m^VM6~mK}b1m`#~)^NZsyO=sN;8V^<O_Ni-oNPuDA
zB-aO~6$-bd&z(nHNAx^)?bZ!<HTCWNRKDO8(4}W@<~Lg9l_Ts-W;U~SRfif@e>;>%
zK6~p_78UJu#UATkbBaz<?ucEJh1nJ1z^Zl_D<geNt+-lD<X*Vo|5h)rb`*1#x)U!T
z5mr6kxvcOMyf$OmZYkRwnwue@pILZXV7)cDYtW&S)Z-lO3jOG0!_E1`H$~L-B}IxB
z)b41DCF1^Xu;7yAFkPy8^S-t(%2^P_!Y*yV?xobC)Oxorrs|5w4^<wc)8Uuraf9d!
zoS<pRgBQHbl?Y1j8>^{2dEIhS=twcNx~}CxFn(BMNp{Z%%=w5F)iPP+IX;M|%8x|X
z3lX;XVS9yBEsQMR5M&qVL=A9D6Qge|O=@{p^S!M-VQ~wWrXwf1LGsSp13@PIb-$2o
zG*FodnoI#PhK3+W{>UKc+M%RKqx~2k*T#()S!Y}Pz_lWuD8Sg(AOK*}nI7-Zfyf9p
zHkrrK6gIFabL4qKK{CCJmGuZ~ge5zr4Hpe0!}&^tnz)Vb;OEk-t{`LEpi5UhptT?O
zh2dNDW%sFufxP7I5HR8?jb%g887}Bm8aK;f+zBHAz;c@U7E75(kKa{HhZ->cFXlZ>
zJ3SvP^C@8ea!)_-hFwfrbtklyVZNg0nFs`F%V+6C|EPADNh>cScet4GN#Ov605=mu
zkwkyY@+YA-8>7k6?#&~UIMOn8`I+X!Q%i$&d&_uI?3#UUh1j{~+bv<t2Zr{Hpxr-h
zLAgLaB)WLnB|mvz#!=8^SvL%U*r~a($|7r1QNYn3p{SKgjNtBu^N84?Z3;h2mb>*C
zdggJod=Y_Ntg$1HFPlUmHQ0SCwFy=Tb(9nbAm4x)zj2~RgMgTww{XI+N^JBRq?AT9
zOAOL+(8wSDuQs}jY;uaV87S`n%Y&$sVoU-MeP7g*$z7ZT>uT%N()4W}>bcOia=u-#
zn8=`)O}Ev-DZA6=Gor@&<<e22J@<fCYM;!0&)L?B3LjFpm^lO&c?Sp;U*<^XcauA?
z6)7?bfbzBAMAgst`wXP)7bT1)rFx@2O9z?<78W(sC*go&65__JGD?tAk4ZTBXWKvV
zqOB9@p##lc$3_^?I<ukH78SlOSKZ$9hcb1Ve3^55*XrTZYjTDQIXLoK(wV{;CW!#?
z3}k;6(1SO+f~XY)vDCo(N0Q=0p8=UcOTVHS?rrh^nEr<tvg*D~rtAamvcBghnWV5|
z4i=LM(*Zo({jIjII4FtoLpeqlLT&khKr>$1j*KH0{dOQR`JS&4_khu2QLZOI>&MG~
zYx~|dr5YHMQHrjpCb?K8U}}AvfyBjryAB0l><`cLsXt6%7Hh7KsHbzdw75eIhR?lj
zB;`qFQ`)ABSnF6<Dh|E=1enBFXO)(na4B)O``}|Lw&SEd84B(|y*J56U=PSL{tq|>
z%l+)I+K01iUel?3DWjv<7mL0#>M|dntKqFo{*K;^11V8B!4=rH0Qeb`xJu}mVb(TQ
zUeOOCwwhmD<)9e|-I7TBrjFs%Z$YpKai|d}yKF1smsPX^y}EnX#)8h`>bfmhcOI~<
z_$;5c?49`amd~c_(vJqhC4bn9Ccl!>C<0Y3g)d-VrwWLb2(i777}FUWyB~RmXL!AG
zOP8=SLu8<Yzyg~Ex~`z!biT9ow9ImD<4>BwhcXmJL%6Jw9-#cQ4AHS;2CUNH&AE#l
zx_VEd)jr#Zz_C1rXJH~yKVNI#|4r^TrBHQx_LOA#zw&Ypmak;|tvwVVUmX!o4+*6J
z=v%B3nBR&6bk|Jh=Wh4-R$>S0O+k9D?7ymh#9gk-b@UO%sykx{V&>mLQ9~=X*L%ke
zat8Dtg^(Q3UmlC8MNo_XhSM@AvU1`_TRacb(EBG3QPZoww))SGvF?bYrfCLUYy3|h
zG_u3TaC*^3kzOEQB`Q$vEhS;I6sHeMbE7{;!^}u%JiYID+vPQ9NdNhW+3jQDz-ftp
z9WThwTJ)G?ZFrG(<>;uBQJu?kGz<$Y0)9>8r%w7$u&c`w7$w=-Hh{)?_iWLwiJxot
zc`n%M-Wfv9z_r0^c4!96J{IUCvB{rMk)E$)Oou-z?`6(|dqEW9rzLHrZkgsz*p4QZ
zp=ZVNwHmOp)Ri0BAdW(-sG^(No}0YdhB8-IDOQiN_sX>n!r~WJ*F3>v>B1>rjFhhd
zua^w+R?6QuA$8N*>8l#E%py^k$ag9lAG);Y6~hk?-HpO{20D8<3oLu~G<3#6uV#KP
zca;Eab3vEGRTYRduS=3J;E{aS9)84bzWy^b!dr-J;&b(Gr72b8w<w{%G>Jjwuu<O0
z?-4{KLdm@A3VAHew?kX)D}n*ErB-itJ!)G##3w)tpggKSF^nyiXP)Bv4;l~3>F7p0
ze@0<=3S9&O;mTfTH9J2coy(_JS(ecy?xZFV>^=VHQCi~qs%TnTfxXoQPDkfW3mUIR
zEM5<1X|)ouSt`jGAq&MZl5aFPAk|o>J=Iz>8f?YCVqy`vXG{4OBZ@=;zakgaj(4#O
z<B5_bY;X~#Q+(t(%7NN^v)(3s`6lsiIMLg*1~NHAvV#u1S8?M26kj1MjG>##8fJ<-
z9-a_dhssMLvOIepA$1zNQE1M~V*{LqOe+IGNgzmtS@{EVB*Tw4PEHmIOe{%LeL;_c
zKAkeYt7s~Kr9@AM|CSlT`z4~}U#Dt2Ysk1o9*>7Q?k>AeEnn$t<^b=6eSJ6teU}%>
zQ<U#q69+(DHydI85q{X{gKBTmh<XO55O0bFAkOH}lV?RS65z5|4;fKmH_{PwPpbjw
zeXYSyi7{Bu;j#kNFrq+pnHQSIhB1ii!IAy5=)rxSH&2ZL+;6!82r`UAa#5*h9t68)
zQ-^UYq?2Pr>M_7PaPQzJ?P{D9%e?G{>Bs}sTbHliNDYQoere=~tb<+Twn2bqXs%I+
z*VNq?UoN$sux904<Go-ni*v*v?(0(#I#AH~`EX>kMav|u&V9eSF+#2<y3@><<<^j=
zPm&_CV;!91{NOOZePH7);egJl!8O$}p6f^e4?<hsmU+CCiCu-JB%w<mDkj4752OR4
z^Iu37$TA{W5tH}<Sif)Wgw!hJ<5wgv+2OwRB128>7w=L<jo;<@Xj6?!V<P1BGGGqV
z<D1$cLha;sg?U6d&81ofmD<%6)#E<;hEL%B_IP&@xG87J(-w$E%wwPl8wEopKu;VO
z$%1>3yMe*|Lw-1C2jo*7WIf6pG4r8l4Fgrv4S!9M4fo}q!eVkeAlDE*B~WBDlhzPZ
zncRX)W*DLa<P{c=Gl(MpNgw{<QZ5vL<Sw13UMR?&YOE}5A*b0z&>{zOZVk`KSeC?t
zDfYo;Pm;wQt8KS`{K}5jt+GK!&Q6kD9auvAzV@bAEJMarw)P7Qu%@b_OIjA5p-rKP
zcNGcB1!W>z6lx`fVGC6+Ybml`H{Z6wF9YT_#ewt@z|l=W_8;*%^05-EZP0H5DY%N%
zv3S2Hk!)<see(1Jh;hvGcwms4Ek!VWMCn%aLD5PvA)V=L<*;gqpxtHjJSo6zF+;Uf
zd9rhkDumCM9fv$53nV#i+Fv^q##@zg3)@c%2F0gN`fMTTf9z5cAS*~SS%#GG1xZh&
zqgU}W4c{muAii4kjN#bEI-~fsCokJ?FXcB2q*!b*;;eQx0C8q@hoFMNPx<br$<`Vf
zj6@DO>%^?3{5qfd0Z?V?s<w9+_8`4;?m~W(l>w>pB(rnj7?m~Yoj(&T6)82F<lHg)
z9P!@!4Ve4R!qRwreXXMyG`Z5(Na{EY>E<@u+5%_**y~ydQcCW15De5N>YDxfGi=@8
zxB{kv*9L4qB0<NLD|YWF*3W_7$n=)sG{p>BgLiBbpiMUAHYZg!^E%aa`KdQ4&vz`w
zOO{5{8<dime2aR<J(2(BZcopYeE()I%n@Uu|H-fL&jd-ESSy<TxR9Z>`x?AVt3Q(&
z8V}^=hPxEPoM-<^NcN48VEUUlE8k*-tE`M>O_WmsRTm2`s@tV3H+bCNBdmj;coVWM
zm$A!B23-1P@*zQNGN*+ygP}KO`Oqr!3Y-9kNa07||8tcKy!o<#??IXsIouC*at|lS
z6%L+xiE>tSSlCo%{<ZTOs;Z4^xq&fjtCSPh<))<Pqv_4chGX#Df#r?!dq~(SFb%TB
z>Cr5j!#4Bcm{%5h<cd{~2SoLH4aJGbI;jb2cO|IC=lY&#HAacc@ByPg!>L~m{@Blr
z<W_(#+lX7}_afkNMhsZh{B1{h91EZUf%leOq5^H2uGh;ri5iUf#i$W}hLz_6=!3}I
z$8IW^il&ym0Te7mC&OZF_v+tA{wgYG1W^ZgQt+smYFlc95GKiHcdb{%VBa{JjS5^}
zhyMk~H;QeIx^Zg%&eZo$=v!*2?G{tiJ#S+XglT{q>Ro&ODj*@3F-h{VS^5ZoOAX~$
zv8!*t0+QyQ>TR9_%9XqQA)7v@qZx&!k>E%Z2U-IP15<%j@@h3^7zpfbp&HnAKd;iZ
zo-<y1FJLOv0R}pI+ORgWnP1B>sYq&3p+f!*2on7K0(PetyZJ{VZ-5$(ZEC%*IH{^#
zTa|FnK%0+C?ZgMak<YD@u2c2UKf%duhg)k4{B`FQwkCR%?+JRyJy7}5h|{}3eC~yV
zwX~r8NLh35>8<v>bK3p(T=}vP;Yt6EL1+uJhJ4A3)}ap8!BkCoW_9_sl0=rD-@+T|
zt|);{Pvy@|7cNRHthcfX)#bd%{NDrZ6NXML0i`GI*+V;3TorEX+lDfcP!h&o!($ZP
zh>~GoiMirF6O`Z$g&vL22wlVnwfVW3<PQtI!F-My!f?#{xu*120(*T+y~RL-lKsR%
zO0Z8gQQVEb&O1WS>u512`ZO7y!3HzTBIv0S{ct*!L>dHd(y*Ug*?A-S@;00&_dqt6
z`yXvG3;J`m8)1!$=GQ_v7<Z@O$;v8UMVpUSn8xs2#?Iq#kJGw7EdtiO-qV`<%X&5%
zO^us0XaC`BQ3sOedmgx2Vr;u*xrGCb<jS)wy`wPLwzDIigK$G9XY_anhQgW%qU^69
zvbA-CBoR38bc7+7Qg@2`9kMg&DJ;3CENo<Ue4nuy29uj)195KRltHy8H02TBHCnU}
zp{I|2-l-0l*3o<Wsbg4Y)0~>5mEw=-U)kW{Poqu-C$f6ogF)2sDUum8<A}4j^I87p
zL*&*pfltcUrKKG&_=|VURIM1Wkwu`NFqA{K*86kJx}y4T86V~WMtj7dSsL-}TcvE&
zv`)UyhTm?^lyk)PA(`p=&-^3Zq^}r$*Hp;Dzou&G(F?}w0-s}0&^#zuhG=1()Om&a
z&79rbYNEwn9~4V7GR{n<N7nE+w|YCodqI;u*Hs{uE&i3*?!G!=bs#szM(aSv`&%iU
zrq#&nzP!k#r^NX3AVzhYG8cgsI|R(B>rI--Hu&x39p;B_7;QEPiir&<=u-KS(?40e
zLaYn5qmATMx2YM??uq3Mq8p$qE{Qx2?d{FC8nyiZXedQKsa4@EXcp#Yx`2x~y3&n(
z58H{fvwjt4z7Y|!_ieoK6i%m@#z0JU!H=*c6T#ht;YDuLSo%I?JPKl*OxW@uTH7Zc
zPlY6qWZk4JXyrApFle5AXjS1^ysBMymrFuVBy$~|anjny&GHriXcxmLXiq5e8vw-Y
zjrQmj4dURU;Gmt2i@jC9PIL5+#R@<S;8d|iP>i^Pr#3f?3|H0aLcj9yn8Tn4(*2p?
zmFOpZzVS87gKdzB4a*@dB;Sot;CMz9D5@ED60yHm^OuUpeu0injL}$B-gM~abfHem
zdApzMMr8?_ye)+JeeO7&Y&d2cKA*JIQ3u}nPA@7(`>vkgeRGS(m^8SUM!RqJ2@t>X
z%IQp7V)h>Ma}P)h?;$82ERg>GHL1&;Y|pEAI@6$IO9#$9{p||ySk-Khyt<0e6l2;T
zS!PDCjW{qYaU4M`#7@)Pl1xUW8)0n9@ihE#BhQBjCyc{rMLQaQ`aVOTma`2UKZ*7Q
zoLDSGZ~>}Tb4Mvq?z|jK3}u_{Tp>FcRvWdOvH;+W$3TKz(l|YD`uhqpzD=}Yym;E?
z4t(Gq5E9!=%yYpK^4}Q&YS=aFSelj{lh%rJo%zDWHm0sgmz)ND1nh8OMEG9z{Y5Ag
zCx*3!(cbTW88n15cZ@*yJNqW&&sG1m=Qav`CYI{edPbH$u|jgtD$OfE42x?Iv5LTG
z#3AAu6}v4Wmo|Lwk9ta&i$t{kKGTt30_>IB#f76mTYfp>Zr80NU~Pk*Bcw#s7Bk)B
zBP||VT2vK@8BzXO$@W?mBYQAGO?h}DHg2`Y)oWE-#Ij&4FaR~xyoG=Ux?|s0wSejo
z{Zd~E0+9f789Pot6F=2Q3z;eMoTHV>?x`t2VA92g7-&N&l(LP_EKIehEr0k&Bx!Hi
zFN*>dXw}2bW`Vd6MbNq29h*Tr#w(3a@WQe=Mj2>^^?}}c5``K|<St_k6yQX`P|fyH
zsun8zN^XrNe@jen?f>pR9}a70G|1YQoONF^V06H`(phnT7#{vm{fcbJj)s8hAqa8d
zetITMR_3Vr3(=dG{caj6vJ_eoY%BpQRcW{7rocW{LlQ(Yutf7SfEAd&-*4c@on6T)
z3_O-rZz&@m=VJ<VXDtb`4!0+o28iUx&hM{hd`(&oF+N{JK8M$FN-=Q}8#>e%RO1!F
zSrI=12~5kpPNy)4j)79Ax(mmPFNYY%iZ56ls`te+9q#C%Ws$>i^sega?`w>!U==^}
zqbj=698rRC6w|GG32q1V<Eb4>t{{}qb=`%|`=jwj4(IVti#`t=J*Ta)3a~nBPCHpW
zapAFo|7NClHYK~FEDRu#8841LkQgEaBF%|%D}{86)R3%K^B5M1`UmX6wyKTzfFRPi
ze1E&4KoMQLaU*dH8%sp18T<}F8@?2<ug)3lIMHasbXT-}`09+mK7NL3^rJ6M6u(->
zN3<QQBE1D!lDTA^hRc+Tpxo>!v=KK@8yu<q?-1Sf=d}^Czqe#4*NsX4vWi8iArp-d
zPbDZOX6|v-pv4MvWNe2=d3TJ>?KNIv643CH)i1I&JZ9r5Kilj1w+6@{jlXWNy7ei<
z9&>P~<t)}femA$yw+0`Qq}(COUf!2;e#2{?>r{H>pj?J9U6!21SP(%@dj2=F*`2lS
ze2at@N<h-E@4U(2<oNU48&w#=Si_No8}I+-akkJd^v?IyqNN^tw2<#T`{AgYt1-F%
zQL>oh>yNucfp9&XC7Ah>R+%99V&$oqL644*$KWm1E?-{+7&=vEQxq@+EPT93v&8;b
zExN5xNE<KjnG;sMregmFcO~;cQNMF#ZYN<s87%Iz4jmgDw-EdSIOG{R+I40NO@fW|
zjzi5Y1Iuwh$mu*0niH%=SRG!Dq$P3v>tH56&U0PJOsT-mTMWKxWnAjag^Ju97t|{*
zL3?I_T{`C<<k`6U5ASM+L)Rf1M8g`Lm*bbiTIp+Sg^Q2V{1K-r;6l9{42PR+di-2I
z^;Y}#O192=0@DNE`)g3ao@Nvy>g#9iFsAT~v(Y{93NUcxq*h1Wb<aSduB+3l>}=q7
zyWs&@&4Z(2>fNbHsdmGH=^uyybAkwHh*zdNkkdbiD5?rT0Y;&{a|I(Sse%cvFwD9f
zpIX#elvGtwbC+X+lY8i8kiH0HfT?#x=+^b4sS*X)NlanF#yplO>UkPw4C4>SrVaeg
zZ!*&flDU54#sEpJ2_VL>OmkB^2YiIM+n~WCS;|VVa%sLGBcF6hFN3wI$n6K&(bU%0
zzqj3!*b4oy7rds0iOrd$T|LM{qoa%NB9m&@sS%NF7R%3A&;41QNGy{FAkz2lnUC+m
zV`<zY&<Mwd2Rf}?K~2$XyKtS%l8Bstm-sR79es#E?7`w8UCUZ+qA0q_>&CxFEI<Y=
zDlNBjTDVzPKQv60x}e;s<rZx}?NQ*)D86{n+<RpC+T&&oLdz&wwydO*Au^kdCxv^L
z_YOMQ*2*o5`GtGu4-eyoBt0_#=9B(G0h)8OrwU&`IUy|+fk`VzZ>CV+DmF7)QUU<5
zcj?o+jv+YSD=>U$g$Av`gUXFY^654*lTt!f5qUPHBWCvS2YhAX;FlXQRtVO`k0G3`
zlU~O_a1~$D4I+~Tw1-z$AuIAot_;>}@c+f|Z}ImZZzd}=)*_IZ^ZOos7d8XE()nI)
zu$Wm^m+fJ<DX;UNl%hO-@jN6I!Z?T|k*xK9DFeEEyYQx>Ky^DUn1Zj2I_q`VU6rji
zN3d|gK`k$!@w^6CX<AG6O0>4wTG3>J(_dfUE$UeEC1(rR`vcgmPmIlFEc`-2IB7>F
zurNsCcV|?RX^>E6_Vek&D3fiP&>|Ak<?=&ZiPOAMg#$vZL$iK{T(^+_qD!6+UQ<=f
zvZxNYwbId&G|CC56b|)A11yoPlD$mfFlCBZd4{mffkWK;iT<kPwKOo?J$L$B$#){1
zrCvQr4>oW>Xx(<J*qqQT2yv1o%|Cr=)sixx%?Y66hiKxr7tjPMKpWMip>Y$~k%{ok
zm<Haum${!lL90L{VP)DE5-y<texouJi)1V_Y|NB!3Q^C=Ya(9YRp@54+9fYy`3jG)
zZNN6@-G3rEVkAirlZi9nTrIyNsN1p(*NXjwsue0|_f1O_^DgGY!yZF;eCE9wYMux|
z#r`m46MXP-7<VjSo^)SZg|FfsoMjb_QzWiM^WEw{+*!Z=Jq}RJvV0F4K}qBk<4ki7
zm~n&>e=Bg=Bceh72&P+vFX9kxm1avCnCot;LBle&bCC8x`>0A@8bZHZS)a6DZ}weh
z12sZ|(O(>NF&@mJ+AXRL%fZ=3+~I`tJ47!<g<S(_b6C@huYF5)>E#<xW|JdFFE!^3
z-{O9QB|g@OX(<RidS`a7OGE*1EB@H$4#c>xC&y`?l1;v+JeP=(lU9f%6^1grd!X<!
zavm)&Zk5I8Pf@xJ$k{5J=)uH0bX{|t^xUT}Y@?s$hoG>O&Wl4$H4pm4Uneq5`r0x8
z<mpw5VF-T|hgG88zkfVcnNU8!R>RR1p+;W!(T65a70laXz-S&JT=pumreL_qdcN3!
zEyl9ga4~L2>x~?fKTNA@LwoMt@c)a#MHQvJW7&S9!uAcFh`&S`YsFHBnXqEb$QE`y
znC&$usH(_qdEx_&joUTp{0z?qHURV(%YZI}D3uFVL6B6r2U#zqqFJMg!k$_~yA7<R
z67sxErmI|_+MWpHsQ=0iBnF8pe&T;axPMl)UhV5E$-)g0tfm=AVVi#S0iDZ;0mZp!
z-Gh3{Zp|8c959lKB-OCx*S5(#%%-u+wM<;?!<6}L@8QgMq-%5s;T*_4Uuu<WD2v|n
zx|{J3u^a}Sv8Zo+v{$1dFLQxMXfW3P?jMlpUxn}Cr53!RoiI?eb74tJe)hrJ^!z#>
zhnSZf%6C8aQNnB^x8VB7mlF6`etk%CO}cQ7Qt?6yvQOZOtLHWc>lKZmLPthro}s!z
z1t)p<X5+bm7{TKHA2L79V<)mb1TVYD^^~V`xHwURGcf~r|Jk1@Srimqk$EN$F(PH?
z05Z~@9L1mhK0dgQ)xRLsgm9H1utAiHvgEGQsR78HXDwt`<W?+EbE~e=)N5US`bGjc
zM)s4I#c0D(xrel^grS?h7S(;}%Sg_+^Zd<s1w>(ef8mLD=%A>{=mIEjn@btu+ZQqH
zj?3`@X1{z!uebLB=%)N;pVgK*eR9`Nc7+mtz4yygZI)rb+taBm_4V3h(BhvUc%uk*
zLt|;l2q0YR_fgeUnc}I?R+2NXCo@wx3`v1Rmff`$<<U9|^Aw}{By8d6lfyg5)cUE2
zkchT#LW)i--(8dg%$AW$S_NJA&8mn7Kk9WxsoFnXO^~z6*DwSq*9od9YbbaoL3DgZ
z*ljMd*WIym+qWAdnW3_DZyYX@yZlv>YC}%@{J4W0CGjnydaU(EDK1;F23hy5Jk`Iy
zd&Le`=%*r{>X6|p!L)OBw(mH`xyYu{17jnt+9{k3#J08p;INYn!mSd&&gZ7x5^(jj
z0#p#f=@IhGfbTyZXeL<$g4d;i077s%z|4=xfu)_^U`vF($4`tJGk)^?ICc3qMaHe7
zc1SnWD&l$9kT>0fGgh_KYfObckgd><p&EBY%v5bUC@apvexQZ(Jui)RmJP~n6KD>_
z7~O=OgGI`hcSK!0c`X!vTw&xaY{w^1$vLpx(l-BNKPlrIB5C0UmCBjaZ%FoG+&c2v
z8m3<0hp8q1SI&lq!+-Vg7Pz0i@l)~c1Z?y{JI`gg)+}z3u0)Bkmm*S(!_-L^zjM_|
zY<OWihCv=f5%9seWX(bVoGm!i&i+~7gP-o8I&f%<%181z?sl>nFU;|`@c*_%;0(q)
zrB0JI80xzn1=pbL&A*nK*o)6Cf=ilISQY*CG^+VkpYuEZR=Ucr4jzEnfT2Qo!ho8(
z`1t^wU{e;=)*mkP@r5>Sy~dsssup~w7FA_-hApspuJ~=T-6n;B^2rC`&QUl6CkAq}
zQlMET){8UxF8=fafyRJ+HPxBXbf1!HRn8Dt$+JGV3eBqizK3dRrp~|tJCx0Hly8i>
z_)(i}X4uU~BM!nYEs-bB(q$9XL7<KZ%toMoqdPy8^?q-Fy|;*i09zxZ;UJ(KHj>0w
z7;W5#ytIGQV^onr`&>`~k72e%Nb!(00e!n&)x8F91Fz-HJyeC+W4ATTdyz<%?uW#V
zu!fM7W+NQZWhdw0g7Q(iVoro4QRb3JC2hHMw!3n@^V|^=T{n2|uUumL1BAum)`t5+
z{WM{-5~>;xMv9j;L!E=;(^iUo#r&y<M!iQu_A>o01)DFg>%Q@rj#iznsDJ~jDk?S&
ze11eGCISA!GHP7(V*p!{)F@#49ilL>p~17tG{k7tP2+gQOb@M-A&s|G1cW$K`FQ@D
zyuY<b$oD};@tcnMZ=R~inaQx7=d|By#xKkNU1*XeutC2qNy4TLx2$dH>ZB%p&w5y0
zQr?{^r1l7EXAlP;A&E`O%By_Sv!w|S;G_2M4J$k9Hl!lKKE+g3nxs^<3+1n8)H&yv
zyn<MT*7<U4+U=Tbbvd(+;4>?<CM_$5UnS4Wzhv3$oC>i8HocbYrQP+?pFxt#TM>kA
z@17=8WHQ=ox+Bd0mvMMJ5E5ymBo8-<sC4vjoHsxxMMkJN8^_8A_rK8z0?yC*=X;Bn
z#l<uHm0OH7NF0~2kbqB(FpxY~7@~1&Q%aljHjQtBcnP?_kyYJz^6gsGn$;;-6E^KS
zO^Q_-P@xuq7S$`NkfX`jvBumR6PDR2$SNu4Q%%yis{Sx|7n*u;D{jjuqeysah`aN8
zBK%sk*HjGL^_Gq0+K&gS5w~<VdOuLX>^lBX?UT!OQQh`ZL*tKT4w71kVhE7GaamVH
zu}mno3mx6DB;vq9ryuZzmX~up23-Kd$uNTbJ@gc#7-QiBUM-0CUMjGAY?h8Zb)PJj
zlCXuvg7s$_%3|afp5!RZERp6y)>on?!Tgkjy6Gn2wbQeepk!<narDY|588n-ep!@}
z+>-lTc^!O@&oZ_leQxI*6h4}_3#NcS<bN|r{`CM+EX2%}tJJDJkx+nO3TFBELA|-#
zrVY@PXq1=;kE(uEj(;m{5@+sg*7jK1=Idhr%aHeNnt0wiQvn<Y0oaD+FYM!dZVSVf
zhftxw1T?4LRX+~g=ne}Y*)IJOcQ-#bFOY;4G{72lJ+&jDn(PO$_S}D&@w=0LCS6J+
zh5aJ`l;CdxO=6@!e-KUu2F^-Z)t=8q5<7SvcSLQRZQT!Y2>UwPC{tjTq5MR14jNPU
zsH<{2KSx*Z;=<rfLYG`7jpq;`wzNsh@DQk_sz&inw%RgNtt1ox516#QNVC2u-d_V{
zTDcLkOJy4dqt-t)-?Jy|HQl-io~4tny?w<X7UyZkyTsabS>x15<jis6x`I~*+Gt9D
zN#i49L^LA1QQSxSOyF&E5X?SLbFCJ)!#2jE2-TPZ=WpDZD2!A3)>Z`LrkmV(O~Y)B
z72+X*w9E+!<b5%p$UflUGucD$g@*{IcEX?2jJQ3j7>yCBVG2P6EWSo|?Z%;-Gp$)J
zYGC}Kpwq!Q{vMPYya-#11s<CYsG#Q_-9iiW-078e_TrLx?~b9IUf*iz%`G#-rz-Z#
z1DRb|i#z59jWtCPpqG`#%!b3TE1EM1`=s=>{if)=_`4$uTrQ0is@<xeLleJ$LFjMf
z!AsrX;Uk9Y;^zG)eLDisPHuQP<EX0B^dRGd?$<HFv!r)Wb?3ZSnnjt!0R|Dk>1bV}
zbT8}p(jAn#KiY`TTrs@Jg#d`4E08$rL)5(m+dd+o<5Vz}O|+v{;;V^$(626GF?;qn
zE#{DuY~pG7(k`3N`^TpYQ}uZ+(uIE^^n)<5D*>9#jN}G?8PV4YBGW-PCJ?(uk~MQd
zFBE-Zc^~KhN(d1{vyoNn#^p~}EY**=KD!naqUMjQ#=07y${d5o!fVupk=%mzrNy8e
zl8lL0T^gsnm^tAhp%IZ61-%JaejxED<@d>?(rAr;6_6N{zeJn**Ouq)O5y&$2~7vW
zWGMmsNx^`i$-~=61<fXVj$vpI+ZQoT(Oc7BF4X%WTXuu~DF{ac>|{)0__yRXYE$LR
zq>)Bu4j)XXp%R!q3YdmNvpq%@<WOX;QY95N!B(ncE@vG*nTEoDR&YDqX+i7MJ$npR
zgivMpA<u@xJxkJ1a;h0kt22u%x&zxgrSS&FbzQ)~N^@QPL#$a_Ox^^FAoPT=XVr?N
zALpI%wW*f+_ZdjH{<?kHp|rduNKjH&B7GnlMH3ZcOF(2W`ElZdvBM3~vPqXYZe8qQ
zEO)aAF+QFMB-kY{k>^K`4ruvI)Ft3-UEhOaIYN~ML*O2KJQx4$*&x6Cln4=Laz@QF
z!_;;&n(y@Ca?qe#O7B!y_9SH)WVJp0QC_ozgdFPy7j5SPZ&4zLYa>QHhzPi^^G*aC
zIL4?fnzG)}*N~mW=<&K=Mw{{JI)ChzmSnt!4<<J?O)r4pwzg<LbP1Vn^;YKSX|oAo
zvV@Dmm?G@AYO$`G4ddsfM{a!`rX?K{J|ivgzGl{WHmDdgE?eqS9Y`rjoQZR@b&g{-
ztjBu9W}_f_wIpE=w)o?CbWaS&BR-a$Tq1kOwm4LhA}0Z~ZeHezO6y$uIGZH`SeY4v
zB$@+0S-qpH$74C+O4!NU?o8HW0*rYEWyxR>EIv8z+ZVl^VplAkBh%(q8x0Ogs@<S2
zAw;=5;6q4o-vb{^C&<x@M#+5{!{7UE3gcJ8nIBL9wtVZK=K_nvua{Kd25o1Z`e(zu
zgoDZjr0?eTj8v__<$`(h)q2uii)PBE6E-|rvlq+Qos*_%4|MYOhGT}D_fOfqh+QIO
zzW~D+sRs5Z)DxTAiHfKx0xzTHPNh52DSd}uUAMT}J}C9*jnxnJBVWvOj%8qz({|-N
zG#fO$Ca?3bFH39;f+^BY0yV&C_Eq$xM~1Nt!NxEjIVHdQF~HBSjA}50r^Y|uXl5)y
z>Y|<nRFnfE(sR*S1i2-xk^HiCT>j%fpD<-Sx$Tr7qf{&Kcl3YOSI(IisVaHGfM!8Z
zD8zyg=AeQYuOii+Q800vd54JN<m++G=5sQr9PXLH^LC@X(Bw;?H^$;kdnogRXSQBD
zyGxhYO&|Y7Fddgou%4K~P&`-JWL2YkKcCLD$tq)`N4Ob>HM*aLx2b+hd{Ar*rtcJ5
zBg7cE6bh#r{+V6iLmNi)1~ewcfyFofup<(y9w4$ffHEg&V5XiL>LSB+Vz6C;%eNtY
z&DTc@Z=#XEa%?kT+C$=%i&XM~W*ArsDxnc%OYJ>Iy|&$+$8n=p2G;k5b6VxrD{DG)
z(+;fDSxFl+N=(NSZ6V$Jzm&K#hKgY)r_C>c8q7TC5P~bao(=B)QTjQd0Oq$p4FE)m
zW2?(NbE8Pl_JpdGrDadvVQ0No*l0)_EW9+Yl1=N~N1iuLqsZPMW}*)@N?`S=+){G#
z5!t9Q_9I5>^b5*d$LiU*S=~+0B8n$#B_d2S1!^kyu(&l}!3xTYe3^f8UIAfV`uhu#
zW!NVWmY=TXY%&SJ^tkntd80R0sa6M*CR|Gb55^%Qn)yg3R)g;J-9-Q$&I8M`Y*aX_
zqU9sKJtT6BdyT%3c)ZUgQ-#6z7t)^?m^_?sb(0A540zxS5n+D_jiOXNznp{ag_1mw
z-SGX5|EdpjYO2A~Zf=Sg99>m&Kgf=t#DNU{5dYf5S?AK+B$D&O6}Ycz`7Ycb%J>Bf
z;6tD{aBqA!+`HybayXz$^``o2u}%0O=sAzK<nvZO8TJlCOYxyH=cEB8)jkyi+J2aN
zW$*hLGEW-0L1U<lML<a?KA6()EX+e84Z(%Swi3UyOEA~#GE5Ol^>7rG{Ew*v_@Jp9
z)~oy@QjG61V2bT8<>V*Q?1KF*&q&V;x;$f`bLZoA-1gCrcJFlBYcXYs5e$og33ti+
z`}v~ckSd}7jO)~S?jA;VAIoVDqyya`cU3FIvAz8AAcV)qPr#hT<}E~2$+9*Vg)>5i
zPBQ1-`vUqb{JW}WNY#Ip@P5UdxtYJEs8g3f>V!U-9$CRR$kezi3h>Gi!Ntu+suN{x
zz`KH8{YicgC@~cp|FF!tM#k@P-J(otoZH!c1>ZE^bJd_AAHrC;QZC#S>%eL<nys_h
zV>3+(OuLbmu_#3-FkIa3OO$Mgl`L>$isE%abqlv(!#5#W_#6g5Q?CcDstpPmt+4(Z
zKVdP3k3=Tr6<P(CV7;RX8pJYJ7>=r5O+2#NgQ(es0dWH7rdj%KhP7I+n7(;_!=$T3
zT+-D%s^y59+JImnRsQkW*jSvJh$|UF{Q8rPG#T7hd7R+bZ?27uwAUg`dd~>TxCn9-
zmV$msZi?L#Q68q;|0B8XH&GUnhdCmN?Yi?1DO2|T_2e4*Q&;HLG)>ZKG#zxjv7=J`
zOp7QgpoNqgv*_8)j5)_8WJpBCjehxjf_FWS<TZ~=I?@y6kV>fVlMPN`1*3l^qCb;4
z(uMXVw^LRuoMOj6$AT1Di+%m~;=>j+U_MLxa6ltNUi%cSePy}j<}cIDx-xh>2?dsd
zP+c*y{~`l8E+CtHHGZ<hj~wltf1v{urODMaz?3eIk_b^riIyzLWFH_4T`a4f)z?jk
z=89bXgO?kl_fZXJDRa!OJd)^S_hY)k)s*!bwun2eOl-)7+&>7Xf#>~9m-7NByQaSA
zpL5SrtOCk+wAgS0UrwmLfF5@@1%o2E1hX=X3C|?#q&Hjwax?%c?Iz+d4N3nPXRn0p
z-GQnD1jmj-c*ljhl2_dsZ7{OzmZ3OWdjpiZ?OX)qyU@4G4jZ*1Xc7u?+8=8ZKy%b6
z-0b8a1PPBf&k*qsuj<!%VcYhulPhPIwpW|yZ%yi+9Vk?G!8Lb5o6TmU-Fc{n-1g$b
zCxPpkkHU~reEPqUQl5Q0?Kf)<{Q!cAqRsoT@{<}qtAH{~Jp3f+N5sI2KoSs@l>#jz
zyusMl<;z%B3I{2pBU)#g@>Z9Z@JeIpn(CBjtNv-=)VGm8e1dAxP`)|@$EJxI(nw{&
zz0@4XimCPsYZEmA5mtlzz;f%85OYmFrp5W@`*!SctZuY#B;jMkjZf-eR|V)<o6@g^
z-bF5>&+l<7MM=@!2t6U!JhK}+UA<-SBnWUdFxrn%Gy@aARk1PK#f=~XY{T*=aFYse
z&%%fQ1^4VG9Oki5Vfw|P3=BG3KA;n(=0)Fk8yYVhhx7od8uV<ucrw#*SU<(Ik+xp%
z;BqKt7=1c8sriO3mptH|esy2xAH;0eqoGcfd~eB7A-Dk(yN`loj*)p;$S=3I(JT~E
zzNa5Ty6#g{n7~fTNcj<-2#LR7ikT!HPX5nl;&Bj;`2@mTnND=C;vh?;pN3yHm&C`Q
zy*pm@+!;`)bd(GR+{zcL!b8Sg26#*1!x2+7iBKQfsqh#d&s6;_6Mj`9e2w<KNG|y)
z&L&3Jo;`hZ+kM7d6a@MIewd_ozJW$Ow)lGHrta8s2_CB-T}+-UXg#$}qC*JOMtoZj
zt)?-oFvE$*RN1_?VvkQD-6YbtJwhK;z~xyTZ}Y~^sx&%fzenkvDYl`=#Vbj7DgZlB
zF<+T(>J}0r<vN(}IClvVETwd364~I3|92?Z9h9P6s`N+1hI?x{@3*LiHAN}Xy>g5$
zEI*8SsIuojLG{6Nk0(2_+l#zv_?<IU*z6n88qzBl*srB_^n%D9cPAZ9jkG$ZZ2?WG
z<^0tKcV7Na$hqd~n*lVyquR-!iuC=7O)smMR|!wONZzI9c)Ur<lxK`6&p$b;cXs|B
zT1_8}4HAK=$FNWaixVk^V?F5e@rnh3*a4oT(F}*kEk+tEW>`1urqY}lF;@-82{QWp
z<#+#Pl}y9Qo@Xy{2qC%TPMZb=^)<ihYLH<}kHC-Y<CJR-eGpAuULiZ9`Z-H-y2g9I
z0{9k1vz3@-sXe0p1xoxqI^bue_)1#&2YzwwAEYn;Lk$Jm*hAQQKYEc1kk(x;-hGOl
z`)E=^voI_{AIrcHs;?IKMdpFKurgMcvSxgOWd;QJs2&mL9(1mzIE2WHxuu=$%{<K3
z94JOq>XGEh2a>YLp|M++m$I-GBRivXLsjr33UN$nipc<fbpS{yzm*m6JxseKVuX+T
zCkVGSoR>jh_zu#=LA#4qXIvyrd%)}<q72N^Er68v%_N0E1inTW!y`V^^#cQ&bM^AV
zPR-s${mnbE)#-m15nelrRU-&vL2yFWfR2{J^y-p!*K)$RA^l+HuQp_$AaB|_w;!TY
z#*>+JwYDn*KA@#aO${-}38%%-9J*o^!EO1yaA=OfopKG?+@-T0Dos@mUV)I{!9vLG
z&DyH?Y~Qi-qkk>L7mO&Q9YzvyVpY~+j%<$6W*8!--APpsPlJap;;CwaVUr@23s^(4
zB<gCn70D~F?J#QQyvJG_W!0&y#dL^h18u{_(#QRGzXTgpm7=R25NqlN?^yb?C9Gj9
zj`XTfwV>%&5JI`@@cm7a@bF5)#nb3%a`E*~#x#a(`3J}IRi=T4h@*h%#qP2PZhn4W
zc<Sd8QUQHof$RgH)E&%p!OJt1>r6_R-skm*vLlENacJHT6c&loQ?U}o++j{ngQt21
zYtuW|yp-f{R2=~19JEj~8^c^VLX=UTZ2%dQZ<tAr16F?+Mg3tT0_=+eg;_#KmM!`|
z?RgK18cNoTWB%Pj9A<S1yOA4<G8S~c6I&AqI|;U^o(G}2{w$c}HVU6A(P9fKTo#rE
z;ub&HPAejRO$1y%CH~|K{L+<11#!*9!d&0F@tnVwVd>YCq&1=f5C#?`y6HH`fH^Lp
z(j{NfUQVm$*Mk`)s%;xdG||w)_gzXmGSxewnIiE2-8#6zFQ)M|7NFHfaxBPq=7lN5
zOjtvVVFl11!A#MJRg^DrQ9%QHtk*5x*cwf!+O*CXaf9NvsI1th<mdv#RfzNy742#{
zwej1+bHR#RfQs4gXPYstneleUH3@@|M~s$60>K~$w^2LCry?c`8L|x}h|wb}UK?d#
zDE~u*sDxJ&unYC32;S*`M;B?XJq0CHJ9qWpNO7+(ALH770}*@GyG)yjUl=YAi71^%
z$MjVXDS}Vz?_IQKV)=MHNR@BUr`nXmsJ&C9x&%be2tdH$C~7orDLO15^2gP{Asa%$
zS%BVKhGdBpCwM2?WGvhgLhmBGbv=pb;-*&4)B!5AeTRMCqrI>{c?X3u$(E{+%6)j{
zJSZ$-ipCdfUp;QoRc&d2N<7~$PARbS++O$e2mGLM8#Nou_K|^^Zk2Rj9+nTy^<ixv
zjPiHwx+IQ_C+nBbQky7Eo)@UP&>oB5wKjjV=C&ux8}6T1;{}s%x6tHz+*#GZfO4dk
zXF42;Ai7Po9I+>0h>knK6v~Vo%Xm9-7<`VnPK<1o_BY9tNYiRk9Ly2$L6}6shdspV
ze!1k)hB8ouVH$Y(-PR095KS{x5YQc!JTDsc5Hkd(cb2@^&RtRp0*~F!keUjsZG8IB
zqY}hefUi{)raXRL;O95d^#NVng8)z^_dpN~Vm0>Cb>llQ*<(@&L!eB~A&7H_R0M42
z5#OeSiA&4|lt8n;XJsKk?X463b1oH}(=xzM2^HMQmr}<E$JB}&NIM;xCB6CEn`9!5
z$j6Yv%nKKiE_uM{eb;}z7p?m;DL@~?7JVOh%4QjzX>WLdkh2nRhwji=I(vEG8M8iR
zX!|wi+8#+ql*zZA{zX%HP+%ST>viLSCWsi2;nB+C+>WvoJPduI=)<1rsdBXjMPmv1
zgpfjc<CH{@f?PEs9{%ibqDn5sN3bBE3(!v8XID-n6X^ECGBKBq%<V-PU~+#CGYs=u
zkLV=P&cIwhre8JJsa#7txqdxvxY$RZIa3)B-Hmy9>(c?brQ?yYHKic0kV<fqek{28
z?W;=b8JEq{I%g1)qicPvl?+A{ZC~Nnj!pI<6Z|8_ovn0_zjnxk#@`ZYkoK|dtJ&R7
zF{zv%lFJhRGlcU{vr83;cuHB3EqY55B_QN7CfsD~ui{@PZq?y!zfR_!;?q%J6b+Rs
zJ>d@=R`|ZH#hj@ad57w=D<&^2j?)7mu8(;wQlr=;=!fG;;7|+Z*jY685*DFa83MeS
zQ$~sL3q~YSlb3E@`pOph1J@{&mFd28r&A>+m6jV(ul_~bj=fHj9ekQXgM}l|w<PIa
z;-8ejc+xs3q6_J41@oSDpetZlkaxXkspTbe(3YsBgh;ljH^TnDet)y(kAYwnF6(GA
zCFm81j+E7&b?=*f3c4IL8DY4I#`M!^Xw3(FXM!L+m&zR-@|#H9*<!WM;-E27VnfMv
z$5tvE9Aqy~$s|l%ogfye6CMRGaV~7D3A(VhTz9_QfRU&-K#=JtkCi<r^5L9)|ICgU
z=(;J!6yP#;$XJ-cw98D7Hrkxb6C8fo8lpG<!ieYElNN$X3d6Z)SHs7rNhKWD%!=3<
zHNkEQ4&VA_jb)<-ICiR>iGtDTt7<hqb7ayCc5g*F+oNzxKc^<|kux<v0)YyYuPp+s
zH=ZUB$HQBZg3SfiJpFhvQhC~ju@eth4gc{5+)O9uQ<jdzb2;%Vg5^rPb6^xlP9_o-
zAeCnELoNst$(D9cM=p@-_C;!hZ@b}#SsRGY320LHi%%ZK#75KvF1h#a>lELcQa(S2
z<uXsk&$<BoTS5gLnB%|<L5uC<I+@|sW>}F6o)6Ir<_JLuP?F_XeRqj8u97Fc9{r}F
ztV43$v#y31(h8giy00*AX~-C<p}hzPF2kC#`iMNDTASWtj2xiI{WUXzsL5;UQCv{D
zs~K?cpc@4@48gCe*SNaq0sB%CdE_KEvrLvl?cF+)znP{E6oYsJ+TJV0yZupCgPM`r
zh2-46Xwt$EAL8rm2z)pJ+=P*io2$RwIS9R@s#PHVG+i<kUrX$*fpY}C!Kds-Px!X8
zpK!h!6wrn1P=M<cFWHga|0GSE0evozE1&jUQbxaf6{o39mH}4$SW9V=;NY9=vyJLH
zP1d-&p9bK53?}B9d@wl&iS$OiR|l#P51OirX7x-d=FB9Z>T`k`R++M0%lIlKzKpTw
zUK1yh;$DFB3We-1D)pBX!r!Br@A%`{BPqG~3p^ycE`;XChr$Pli>BdCX#YPO9^#Sy
z)5wI&-?-@95eG|y!Fq?o<B~cNG^pUquD5V?TJ(=|z=6j4XdVI+ci3Rd2@Ix<HZ%=$
z5*z!+<{e6`mNv9pjlZ8hlOIqUzBGq$+@v^Ol%*Q1FOj2w4;QJ#OzOKjXuMI$pssMP
zX9kr2c<ha#C5c9NTL;wiZ%>~l0JVMYZb4SZp$5`177X%^f(l^m!gg?vxWF<F{^C@Q
z#p5kN4!M={osY2}en=x~YX@0W0&FrXAR&T?fR$IAS!f7n>Nt^A4)VrH<q;JI2`1Iv
zOaMhdy1#KLQj}v$!&gTfwejJGb#_wDF7UuXH0w&`gf}CQ;84ly-J*w$3XR?FgsYsr
zC#h6=A!w96mJr~QELuEiORv+yKCkzExT0f{;-~Z`G@)Br>K6NfNFH|M0mPLUkGarg
zO7S5CzDr*$5nTe82S)PvtxP^K@r=RIuR9g$yv-t=_6i^I|1YyaczqFi0hhT@zpnqO
zfS!7@CrEkSuDDQ}G8T;)rYI=Locqa98c15xsFswk`Q~u>i-eFyB)oL=rLM*BtbjSS
z>HqR;mX`OUSUgKVTb?(H9FS#NhkH~Cc&^s=PcFA@dPu1{Iv*$`uQK-uGM(<bOOD_;
zOvh`288R9<&HCS}6-AigH~j{dqsppjk3^tUFMIx8!@NV-akJFTArGi({R0D_akfWS
zy3L-M2uy)~F9}JpRXuo`ukEN9lz(UErQ)Z*+~kJO-m`P+s=6%56QW+J*|S~592!Y_
z8jYpi69Cve-S@`qRF~b2OOh$L+wN{Oxbrki^)$$|v)?*0yFh1BL;YeOb(1<RE;v@!
z%2m4*dY)xrDuH*!F&`^57zStmSmb~FDP|y>1pKzv9YIZ7+s~Tzvd^nbKh6;b7JS<)
z)fm$^@ejqZ(dp3Gn3c4!CnnjvZQye*n=pD!j?XA82uI6x1(IsWBzGc+(lxKd=&UR~
zqYr|r<|xE8L&{EL)UxWy7XU830vZog>1lpwN37?l6L^)BR*+bTjsnYC>l|rb_|)HG
zeBM1?`x@@wD|gr?GuQziCB1?HqgBwL=T_J(eVmUeSYSo=@!8ZWTSx%?{cm7UjaKRi
zHpk~YsBTyeZ8wYVl(R|ge?mlj#Y~$w$yu0k^aGk`ky)7OkkhS^ER{otuuF!RS`NZC
z4Y#BfUNIT<dXq};J5FB&2En@BcYfx@gr{wXmu-ro?Q6;rDJ_WlNxf(^uGI*d9;OSJ
zR5baht8Ke-WW5$&EdH_*dpSN_S&Dwrp05)-atmEfOI&4#>sAOJB~2;jCF<;S&z5HF
ze)ggxfWueSB6K=B=zCQ&IV0)!bm_3@`#OuBR97&s8LQp>xQ+o8<|iWxFcU>%I5rvk
zs+MLrgyT2L0S8zb4oIFL!ngleS<26h?9V?0`v(X&&_|AdZPRjF!bsHmY@0zH&gD#6
z-#_v>aX;ATBVt8z@d-4f4#}*^3E9PxA?j;p?k*q=f)A?*q2fnQMnO}7yLY8#?=55>
z(slP=44FW2m}QkDBb$&*@?3%$YKrZ7&X3t={32sgnh<uakN2@m#D$O?i|>Ir_Fo4!
zGSY_UqGfjO{YwkE0^rKF`1X&<%b}4Y4{4l{;XoB;^d8yCI69vxy&y)3aa?XhLeSlA
zZHpcfdHks)mfP%JKLH@Gm1RC2;<$Z9XP5710L*#Bmt~-GZ&8=6KAp%be3%Z)^kOj-
zHTfFzbqnxB7%Zq^>vAVG$S*W|qO~w+JeY7&+m^&-be$vP{Y#GBP~JIhK42qa4*N9c
zGAb0Xd~c#Y{f?;5i(jw7t|nMZCjDA&1HBRU1BN&aN<Jy1q<u3_Q;-Q&!Q{*AJb)%Z
zjeITk6H9F>nFNUwYheA`*Uqz=Pd}D)SIxiGkEWzF@PObe=*kSYXBT$}v_>$)6c)W_
zSPoOQ1^Jc9MfYnyYbq*)qQO2<o~*lGr_gEGeXBM7nO(bxtU@_1BWgfRj}R@k6@Xv<
zIS);HC(^@<@EfMuQu=33ccqK~bC<V{bNhx6i^<ct<Vf>nl>=oDamo^nF<Ek$BbgvV
zC8n14gq95|LO!+`KM2hfVFfFnMw@IiMP1&T67n3p$#zc>wZ;Imai(2co0W0BPPr<A
zduHqWfdChNLM^s$-}=~CUi64cnb87i>{6-1;qZVW7b)Bk?+7|oJz?s%SKi)~8fHfK
zMIYOdG?X9wg2yx3Y5^>V38J^+*@FO9exFcMRkgFvou40U5B@Sauy2}LuRZR_FEZu^
zKN`CdU*me^Gb*7q0AslTc3PNnW$ihf*;y|>s-F<b7nN(sgfo?|wIb(dD`96R0{@A8
zrX_Jy)f`2@kWk0EYZycnJ}Dtyc?+{BAdi;kTxXMYTpfN%c-Yu{>`3-wk*qcbQ?pLY
zWUw<rMUv$@CFC*<>*Dv}W#MHAx7=u!7VPcumo#Z;q4q$)RyE0?HG+I%!_NYV>XcQ6
zST1V<)ned5D<P9Y{LQ<(o(d@0mc%X0IcXP74yQD5rD)~j!kt+#Cv?31QR8k*dr@32
zN4`a~vRlDdi1oZaIJYLcl|zL8_ceAHBA)5`XweaW`jQxJeAihEuek;S-Mj+A3*-^<
zG%3^A1EaM6nG&?53Dw1!W|imu-wpiR2GPzx1p<Z_8tu|YRIBh5poV#3c8x73EeL*~
zj{NQvBA|4UXPO>IUy;0g7Ta4J%iH#Qx6H2Dv}Ey!C-+A<cKv;#<^6f*BXyz+5FBI3
z>r6-d`#Y#zkxt-VlWiMjN!eA^56!l6D~mFzmZYgnlSXBoWuZsKfk(PJ`8|-|y;!u)
z);Wi^Lc2yH35wCOoT^xJj<PXQPC#&+v#THS@of%m-J$$SxCe3u?=6yiu#YgtHI4Ej
zIB>uuQ*aqEk}XCDY!AU=dRPd63avA|=kPx2)H_*c5oih{BW@*)>XLw;%U>5OQ2G=L
zuyJacN4k!aCYTxu!ZQ4zc8-PbcSx0P0oCxTZ*dr-T%2p^d4a{_X;CJnzW9m81PvbH
zz=075SMI?!zl}uD<Hb!sU;-^XHwTEiywLmn*=dau>2>u_%~|&V0VpYt&5|0|^kfN0
zl&@VSb#*?wQc$dIA8BL-K|Z61wNsox=A23=b(<#HG@Mr4$R<fRM`wvB%|X@k{_YX>
z!s$i6B+s4XLtShu^YaZ6jXVM2loGK+QH}0P%`Fgd@NEtpG$bcDH|A;)J=x@Q*m4iR
zNIfgH<w3jfif_9f_d<W7T<?`g@t*HRw%y2)YzPzQS~>ry202MDVzVGErZwmNP92W*
zq_C8=(I2m`*i1W__yRd9nC$NI30xcU(K`*!<eFQ{lCmdsg`=Nwc5<)mEfj9D*+^EZ
z`E4uT{;e6MUb+-%d@B(1I+}-=$!^UeQ1`)VwmW#waM4J<js$1m(U!wyk<7_!v7*wI
zC7Xi|$W3SO2UnKscIe@?{dNHaj7jy>%*V_iHU-YUfxHqcjK6yxm)-)&f1sFOj1EWU
zWd<exIc796BNq<+qY_d7i2qa{Ks$-tdR6V;s%i_twB{poR1J5nO0A=DJcXMh+gw>f
z$kL3><JD)3+9vu;aU+>nnaHg#i5)eWppZ`@(Qdb|9QJ+v;LXW0*;<F<y%+UvOs#Ot
zQ(T=vtki^Z5qg(U%=y#yAb#N&cQht0X)tiWe78+nyfggDbvW)%Birnf4KBIOH_d}F
ztvR-`-`*<@$*%gR7dSQ-;X_ECUwfnwetTF`0G>X2Pni|X)0R{2YtycK^$`WiNHZ={
zQ%c)3Y{7Q|A{yh4Dz(>*->Db+5+ux!NlCMqBZs@P(@S%tb;t9&Nt`;2m|;2ttK!S?
zU5TV3d9ue$(3IPAAv#@4;+|$01w`Wl?@tQYX0$DuPkNCJfF4!K@!T8pOeh0*J@(#4
zKI9+7SPrfRm#xf;Fzv=Y`oM!B9R@bgBZxwN$eix}_d*%$Dm(0CLxmKa4yMPmY1o4}
z77GWbE7Ur2Y=27Hg-b#sbc9~O&zNPbpNRZVe<ph+XweD{voXaJb!s+Up9Kb7iFrIW
zy{t)>We?Pq{@Hg%@2eby^!39b7mpc=Z=*Hh1Zi+H=YE@zg<o<c1J0v37M;^qJGTj{
zJzigEcN9*eJcphey(s(6dLdV^z%ECyGE9u@KMoTCfI=y#{(AA$^=lkS=jLtxu&z$0
zYW|y}FPOHbnHGz)YHq`XpE$^Wp=bqlu2<|%QkSxurA_#Xv`|E-3bke3z4_kvA`Kd_
z)XcMAVsYt9g7=g$X_#vj9UT`b($cvuMQV}5rQ%JaEEpKA$pnSU@DN7&ONvAebaPdk
z){wC3mCiE8R!CI`D|-D3M6Jv%eakLP8m}T6=cy@~nxl;sQZ8d@T5?VWRI}1B)F1hU
z)+<7AyBfU*z087D(gUUX_zc*~$jcK?D*wyz9nFD;$imnmlvlcL(^-MPJ2if5dGqfl
zM2m28sjF&8wX_G-`2+<1#tHD3oP;EC(E3PmI-Y<z0*%BjhCBg$(_URd=={#Bm37Vb
zD;^oyY}Lte2W>L)^};T9{1aLFwuk;<KIE53ZFUvtIA98Mf9*kO=}cde$!B^n0z}Zn
zhg#Defa&oN(nSKAU3xP5X!PAsOn_aU<V(&8x+bh!?;I}3Kg0^E^9(>DYLsxZGO@cb
z?4Ln8MY|yMALZe_Xf?2XosdQS1Nn3lLsso-%g#P<#3AQ=6yL!>BnME=;<vyfU(#_I
zqsytGPMqk(n|4@}`EEXC^v?Xad80QSeQZ%IksY9o)*cc4<Cidk1p@HmNXD>^Q$EaY
zxrf7@nYt-T698ArWkQYT?egWM9U|cEIXUeo5^=V-`5`Mp8Qc@W-gBP7>*5(<UxABE
zs3!B%$xomWHThg(vz67rEl*Gk0}u_0M^Pp=5tO;tMiXS#JYaCi0&6U~8t{;oK40??
zhmz}2X{)2hX3>Hj$@Y_GZi>R<Q@s}|QUuhk1Q4OXC6{+PCw$f1x@2OH*#y?}6L%V!
z!Fkkw?tf~HcA{|<HOoX2b_p8&s4&;3vU~X1zF*|+;RGbYbub3sbVLZ9173;wC({5e
zAizEPm-qF^T*WUEUOx^iv4#+R!^QSSX5{D2%1^_|#S*YaH!R>^?Cp**jEvY4qA4&r
zlX(0;AsC-G?U5&z4kN*A;}Z1v<i}Bip|abH<S##_PJbz2up&i{#MFFXRFcCoA<eaK
z`5u^i1OedvD^&uv%E#=nqX69oA;I(tGNgB^K1r4LLQvSt!1o+^rcIjZQS<Qy<RoT>
zCS{n@?TWu;K$>adZeSXxgEmx(cZ}Uv?4E;ef8<-!Va{dYy*I<s;bfm);T?svm;7=k
zKp;%IgXp_C{HU+5!oLDQ3_l+j9TTB^4C}Fr@6PA$-|I)&tjpwg*2|{N9e3$(WAxcO
z_{}Si6D2AjCFh0)v-8IIa7be4^iGfP)~>R(PTG`9-?O2zY;Uqu>&UbnL>&qnGF6KU
z!UQvdAczvGSZ4RlM{O^JKP}*p9QeRqYxA2wZ1Zo<H|Ds}{!sB`{oEdr(&W{}=oBU`
zkdp!Msgo&A;1`a8=Z;+|7*Bc+-AQ+K=omcEEh8*A6Kmn!CWy}=mQt=Q-N|yacdDZH
zKU@)mC_)l$2~t(G$|{Ox#Em^vGEKZ9L7o^0lNP55jd%=Xhe^t>4wuSCJa{lc-F$NV
zTpwa^Av>LcepyG^W?ZDKDw(yoUVCiFA18YO#TSjbF_Yu1r=wL^@NV<j+7Zal@x0&H
z62$3{Gslt0-$3v#dzG1B4rlJJ+(dJp-J8jay(s7z);fAhEo14`Xlr{Ga`)LJZ%8ul
zKRai6*Nudz3;zTv)*F@TH8J(x{Ur~ydQYY`IbYFEN~~8iWHlu(rI29=ND2KUH-G6t
zVhc^|k}#`dfEyFPV8v)KDGGsZJN<z#X?Dn&U15m!%&Eh2xxQ1o_C>rq_;nFKxS!g#
zmQs5Bugg#W1)wVBd3(F^g^!={frGs?<8HMu>;K&U#oMoCInw#qzqb9ao3HTOsFFCs
ziTk8!(&`Ub>MA`CU>9#*$K}g^pCznnD@lz0zeW;e6K=1#3T<4fP3-#boK-6M#ljoI
zU2gxeaNd@2;DIKmx9;;E@vb!EKE7s%0Y+B$j_4kY^e9INgq+RHe7YzyhL<jlU&x$E
zID+$aS7@xp;R*S+$9nlj6J#Wy+a8}hC%C2@PO{Yn;xs>;9`@G#eFTwGt~=)ytPq6u
zNQyTI5r5Z^ZtQmW-k|Pz4V{UyICVAOYNy`-O<k16LHI{4C&<~W2zdq4&>(^3of$yY
zdP^}gv1KTIiVV-<U+^pAGrE{O{Phk?9de3xd08k5e=7+h0BmL46bcUia`@}PTinz3
z5fjBW`EvG$QwP|`0kET_CEW0^M9iia%f3`pP3R6PvFiYIbWVh)YQ?3__=kgWWYM*@
zUFr^AKh@i|UtX^%EU_?_&B$%FQG&v{E}^~nQ>pyV2Hy?hEWGQK2frbq^#%C<!TC~7
zLd)@2S`x}{Ex=IBQUB>}B2ow_lO-w#O!>Ed$Rsw*kRdao?%ND^f$QHtGOg(bBA{y{
ziB~C#1!B{a?~w48Q#>f)(baAb4YpT`P~8vIpr9@J)bZxFrqIF%{CZFP2;Tdl{;O`s
zOKUR$BvhK*ka<dP*1!*M`}0l{x@o(A|1#moPPnqu{Z?<I6hGLWi~>xg>kKE5({^7J
z&lr1CNTK424Xfxo246Xm`TXgouU=FBC2pMlMA$HzsxZhd5&frC=UmK9tw__(YFJgF
zz}K&98*WFYdn_kT?92p_gc~?fkYgL?&<&O=(-tqv--`WpI|I>Jc@r_JKsmKCl^&Z6
zOQ7;*c0>gsiCpy%CLI;Q^+9IrH{jjJOoGjop-@5gdo2QS(qKP;Vom@n!V$l@$Q`uJ
zrzd@JY~>`o7K7*Eb<W>JC2|{e+Tg_e+;8`EvHQ1(A_{e}9WROs-Z@}*rCY_Q=D?QD
z1)Jjl9v6#0-9SEpY-I_oi9mdjs;01EjMcIMJf&2)Um`J#N!yj3B2#Jh;fua|Ap6`~
zG`s<j`fLpV0Dh8sDkHF&)P*mR)o_5D{%~h<g}2Aj=;15Bf_}+;(P6AO4rY~ZfQE*%
z?>@QWPX1mNvHULWjr$!GQ9!VS6vSpxB}%i_5-~4ohN$HOCLlq+$QPw@vY1lrpr)=r
zQgx`1+x1uFgon};<pZCO`Tcoj0BByWDJ}sAv^;?^`yU;(2q%i?v?ec12JRDc=5NK&
zko*C(UsJYAkw_w=L!MLV!J4RSv~t%u^b|H{9tD8Q-yI#*q^mrXMo^Z7+DqNW_=l2T
z4xJUJ!zOWE$8Ab(nImOa9fNT8w~&XSh8C|@M&VfdbaoiF8>gtte4R&#BDIID|2|Jl
z<)XkqQKdTb-uk0xYk<(KZBabZoBzK4(UuBf%xfSUT1fqgn&}%y^X~me#4h5|#~P}}
zeb?A81?rbbo0`7x&4TrJ3G8U9LmjE)Di5mx3sBUUtETfmD~V#EDBG*f<)EU}2v4=n
zT0yt;Hjko(?+H;8aB>3lsQZ$#-7~1!K_;T4eZ?2xk>+R}o+vNLi3=iF<`~BKjH~)G
zG4QuD6BH->(OpWtsWq-q6yRv1%>c1pJs)0h7-exyF?C|MgI{hm-y)V!XnVWuyTff5
z!9Z!<{MIXEr3{R$$4x12W>ZxQ*f~FO*4yc*ETNrPhJXS6BNX#c&|UWtA)_Q{SnI8o
z)Q|YxA`Gf=x#@^_4?2QF2wGD@c0pveQh~<dB`0*u4~M)(c*wtzg$l0g<0uMHpQQGE
zWPH`83TR{KtC!qdBwQvYjkr93?glf}6<OUJC}^kUI>h2#jKY$NqP!2bGm0iriQAtS
z4OUG-NG<9uT!<Su5?v*u(Jz_r81&rxSqS7qTpB^jxH2I5-$$14{dpuhF2!#74ABCz
zxdIodm;(Rx^|HwR7|XzL(T=Rex!&h<fN?(UcS7h!j(-)(Q85c6$br^cZ|=6>FtSs0
zOHv5>0$qiB=h+<zp<8Gb#%}g@j)4MNm9&l{aBOh1YE>SVMaE2Pw?05YRHXWnM3Yd?
zio~iOL-UmYMp)F&#2MvB*VK%H?VYsa32Qb_yg<nLpQ-_Ll=I0$tm-G$GRyqFvd@GN
zkZI?|P{gICQGT{YQS>CW`|QjTF>5M)nLaS8N#4FvKKrL)ZevxNgR-L`)#Z&&I1je}
z41S8fF$#8f3-rsKRThH-)?mt$|8h$3A#i><oUD%ES}siqi5bmYbgqv2C$MM|CtAM$
zP1ovJC@9ZV>|bRSt2^NJ&jF(SK+Owu)0DI6K{Ca^VVm=TY#>$8D<AM=*EMY&IkMwW
z7#QuG4&+RB{p6K%tR&*nMfkic`bw|Bf2A7-8R__-(nt+~n5pXJTDk9kCL~;i&TK`=
zOGfeI|D!zWob}k8#myp%Nq%>^qIqG3Q!^ZAYhZR^q<d*GYd#3A*0OIx)slH(In+!b
zCa7l#qy{MZDYyscsSU~30iOeRhwOr9bplf=Y*ZBFwuJpM*VE2{Dc3&Ia~G784f6^N
zV+Jzk$Y8VG`|}%`>^z)x`BGtPu!N>ylJy@Sjq>88rlz)l%y}dA1vNY)`?HDzI3c~e
zEku>NLV9+jxpsyDbM~QNe#pE!Lcdn4IEQhlTg#k$JW5z>;!bKeL?$G2f;2VfA8efb
zh(x0*sQ^A{+Xfdtpqkh>FN~0#8Qlc;ohN<Ca7^4h!<9MI5&>yGAb-l3WNfce2iOyZ
zps8~Z6)8&88{zOl{$Haw_@$#u4dLDV;1eKnk$K8e7m>jx{Lb6-Rxs8UBEiRs4=dp(
z-818}XJ6iqlTt-;O5GWbSHOix9^c>WEkC<cC=!;d8uwW+$3(Juz;X%P*>;f8DD7s)
zs6Z-cX#Ps*dddtRy@hX(CMQDZ37I+~zMN=ubx<U{y|OSQsy~pSjWvk9RGC*khgks@
zrdtUr1!a!$w;*cr`BWdfKDMT94FVoq3(G(JWQdBqrM)>E?Q@8AK;R07!DFQbYoZ-a
zgC3t+f$dpEZ?z&<5mohrQXE2$K0z07Ks<pXFsh5^gs|#$!-RZGty7j7&(|ccy+wq{
z#uIhxUOX2~idyo`qN)a&bO=Dm_TvC$$Z_XxtyW|U_le8%*UcvJFFZf{B~=|jddJ8N
z_P%-cS|qu8Dg63eHhVX2ZaW7i@$mMHEkcZMZV-th%wEd$H^BAhRJF2&;-Dsi496i%
zLRwaZY{@8BO)R}g1AM4#Xx;tKQZeg!wXO0;$nMzRI6*^i_cEEd^vZie{yWQe6wM=t
zL)9K!0}#!4(<(43Wj;gk*uZV2X&mPwBPr<RGi-yV%xeOsnQJE?_$TdA?;6UKEE*<5
zc#tZ$>Jiy$b^fmN_08)=|K8LDKKb$9xR(8Za$u}NO~!AH+zq7idZ@T#CHrC{@@!|W
z{A113isFi1E*|tO{RG|NJ%9_Nzd-nert^o0IGOi793QWnz6j5>d>mWV6uX5FRxx8~
zPq(Wm{iO~v3(k=3q_|TFJ9qb&B03HoQrU#hQLGr@I<!PiR6mCBO*_HYwdrOIugCfE
zj&BgO&>GRi*u3;HfMo8Fi$jA!Q;p?ld52b6HEktT(hVY07RvYcMN8_Zf8a+La7?ih
z`jcTY5Vb+9$bdvzn<;?#WY<Oui_JuRFT`riW+TSP0+gXkq=D5HkdI&Tj8o}r^r|8V
zouC8b2W_n;l-L^V21-wSw=8Xk7q`US4<|`2tUjOP#2LL}ElFjEVABslIFx$!k4Uq?
z9o76)1dD@*0`d%1!N01;iJopOoO+eGhiL`T@m&Y1X0Ec|P0KRgC&5gmOGh>eeg(0e
z1gpjMtLaqtwYvLRvtM<y5ayha-|L9rHf^k7AywXkF1~B1)OZ!}T`J*HO9-)FHZMB_
z@{{vIrk~z(Fqgym&iY)Lsd5p;er{Dz8AeFC14*$BNpYWruX@Ya)uRfk=Py-ABOwe$
zgzK>`9@O>bWV;VMbO=vu0Mpw0^#2<Scto**bL^hi=C$OS&Z;WYs$t=EI^~6#uLCfb
zomS8liUQ?@;Mj7erKA?e5qB{X5<xpJ5%*)XvFtm-N34eFD>oj*3>RagZsb-hTec#^
zAT7MZSN|;G>#eNE+L=<jA+2OaaQ6nf&K&p}fapd_@J^vf`J-hnV0*SQ=$)fI&3WG3
zM8wcJ!&?sKz>&aGeetQrvvW}j)Foer+b-HpazYT2vk>}CbSa+iQbsRxKdPY-Xz&nh
z7^tuLW_OE4jPrOubSC4fSL5@31}Io6g$}fwPcY#O|8#bbvf!8}&+R_EQ{kg&!6DMM
zg#?!tykOl9R5hi5)tNm_)<v{qC<i%i^=3GYLCQ{rd+G|dy`k~KwLhjubKyG(S6LY=
zptzna%=!#)3-+nxAFu~b$j9ilG`fV}%x{f+PMS<%>?IK9x}BDF78D_AjKz{}ix_Zu
zDmHj0el_pP(SJ>G?$wMEP{R9zry{6Ayu3%51@$2$W0Ad9i(%;B;I?_ZA7Xsa*;W3q
z0-oED8t2X{h=oJCinEr@wF86;RrR04f4cjfg6Uxf&L<Dsno$*Zf4u<+E{NE!{PF?!
zSr}IBL$4@Pwwk{=B|Kp^-L5O*j$g~ozKSZspl*D%aW8KwcLxCLA1G0a=@|eAs|;pW
zw&>_uLL~p4j4(ONe+M`}c5jS%E$zwUVnW8|pQ@HqBs;8qvqN|$e>~P8r+pJ51+211
zl+N@?5kB=|e%@Laa`Svle)|TkrQoG^>+d5J+0+WT#awDJD8cdI9lz7|Z%3puKp-mo
zxmrLj?)EB$g=X2kZw)flE$$&CRQwzD^85mal)X&HUy3&cu8SJnu5OwZ$3VM*+Tx)p
z0~pOawtRdi=NANf4aK<NRMbce1SWlP(8JP6&I6YhCPhU7fcDI?Y1#+H<FM|RY}jwB
zZ4@R=SDI(NaVt{w7$Ay5+t{8Mintg>CH_d!yfz>vOP;k&yGHumq~pIG$FJU*?>0cq
zxaqht0VkwcRQbrisxuVw&3hrj;71;4H$40jEs55`cL$PEgfIf^zAEhZISUs|62c=F
zq^I60U8xz5dc_3JwRz6`*Thbbb0Q!wL{)~-a!RenZ@S_BHK?W!-B#VsIN5F7A{NXm
ziq@i@yqvC;_|;(9IXze0ss4ky*T@9!v<wf6pHQIOgnWfluhR^eVEj*oFqTJ&!DT}P
zcL+|)_tAYkrLUlJ1dEI1fhV|@*GXD+L1w~c4p?krlYujL9cyjE8#}%fbkj1iTLTU#
zkCjQl`Hiwa7T0o>(`VS(yfq8`HD|&PUsF)cOBipfYRUE?CW4qyatarre1cqmF0NBB
zN_XE3pl-Zg*Z+K{_#p1|-c_s<N*G#~Mgxx@SCoy=@@|NYixH_*40i{jbZ6zBMLKg3
zxH6BTggS`yec;=#LAbgN_Zri>;+R9S<1~VoWo`*WQZ9Fw%gC=PTWTE;rWn;|(Iz$e
zh5?-oWs@37*$~lfbv32eyV;^30<*#NS|GF7!VwwocRhmGYLGwM3kH`X7>|&*CvS$d
zvk6CgzVLKXk~`m>f`m#$&J9o)S^_+jC2IYYlpf#TYbq@Ajgh1Uy*@*k?c-a*LBQui
zD{zQ@^syLwIOJx&<bWf`Z)Tv4|Lqjt<*VDXFx`{bV4Gv>e5XK&i?7OC4rTuZDG~i$
zwu{u&a6bk!(6!v0UcS!A0fcSxb?g^xiQM9sYj<|@g#@$x5Ou0yN6lOkONDg&T^mZg
z%00=|`dok_BUZ!;9*krThVu+XC3V&lIl>vll2g!w#wNfIZmo0lr`3CwUz)yA1}&_z
zXDJY+?*=1F5z*=r%D#B}4gclsB`L#0<D1c~BU%O?g3t1ptpX^Bw7QG0RF;z>kO5b1
zEOyD>;eci!#$}Y=LQ3kGo;T|4`^*l?QjSeFj(=<)WD@5r<cMTQ-E3;wDT85$`G}$J
zGK2|(T*G*v@|xD8wR!U?tD~idw+B=Pcp$`BIZB_OkS_gwEY?I${e-~)qTCH?iZYnu
z<5M|1!(xk)bU5kB+0Z^Gjh|&+FxN<(iakSP5o)y3Gbl&d6Z)#>IULft$wS<(&>d#L
zOKdn?fU>yUj}Sm>q);?D-n-tMGkeNFW_uia8psu?)`eTYOD-1jdwYoF{hc<_@R_pM
zEs5FRXJ82`Jy1p5EwHl?yGFHSYrl_0&nDinhF<b@$`R-8LDL}^`jO6NTEy;2ni$HM
zKf6p>OE?rjFoT)FGoJZ{S&;;$IxTH=RxJDH#0BYAkYLXg#4jWm3kaiLj*NpQp;nRu
z>xWgj(nuD>C^_t5Ht{%V6u+Q;5U=_smYQMtsVqO#tWi`So8Ns9KpLo$#d7q<v$n|F
zAg(S#4dA>g5bzoj9_T-ru=S1?GH5u;#$KS*K`_%j>(P<?0i1?PyUEP&(efMVcLO$<
zKpVn~F8IZqpXl(LY(y3i0so2~%}agOs#tLTX%E9zrJqkDD2bsOua=KuBUZD%nOL|W
zZ203qjsa$tWYtOOx#|dSIt^f6$(L=<p$0}J453Qo61FVR6`aNQNQo})!F$G6)`T^(
zhmN@4LTfn6seqkwz`=6`dn~*^F-zc5r$eQUn%giUW*7KgnvC<olFYIP#|70)<EK4~
zx*#gImGck=Bb=Y8H}L=2NN<b?df2ISqZ5s66MsS|vKjo6dAn0zMpSJcNGc*95`hRI
z=iVRn>u$3K3VIV{NH|pJgXNp{;Q+=X1n~B>9*%x{27qt&p3K!9_3~WX?lDgp1cVV2
z!(do8bbq8QECQcJaDYByc%?obQg@mJrR?i6xxp%J@_m_nEByTw3A{N*=Mm00{?OcY
zgXK##U=_qHL0w`8%c^+&|8^&&NQTtQFa{*IuaM+J7+sR!6bL|wSWc>y%Uerj5K+2H
zHZMZo^y&(gs-1K?5)X3&pZjJT@wO^J^_zio#6T>i`5@Fy*){D6jv45O>=BIj{A+09
z&TSo@{Psr`QeL3QsAu48Wkr=$Ogc07SzMpwHV!He85vz$*YEk17F5#s;2%$zj>z(Q
zCblAb?ZM5s3k`z~f5j*Q*qRvCi8r0k==xj8V6<c<FdHb23@!P4(~vuD|Dae!>E{V(
zq(J8W#N}y<Lt>~oGbvT~2@(&8w$I~GkwFsMDKJV%xC%q5j!5XgTFO}F;u`}tLY*3s
z$Q*Rk|3aWd_8K|P=9-S-Rn<D5izKPj#|C6%_u~SO1YQ~aAhCJ|sF7*QR3!?z^&t(C
zzC41My?72=VN!JUi}l5QuY4J9%$jy_q7%DMKT)l&cfM|LG#Pq&$SDU15%0wUdWE!p
zPl{jjQOeFejWBs4#kW0h8+I!9NQgyJEjrA-am~VEfaHbWb6Q-V>2+z^J06i8AlXbM
z$<tW6G1VSY9F?_Ej8)C8VknyzTn181!9;bMO!~n58;2syNRgsM*RiUl{?|wI?+@eU
z>ml@;II;(>w=h8++e#&o^|wsotqo>3fUJtgKChQylU8e;cj?G~q*81oE=LzjawUtT
z#6~0t>1k&QSaE{&NY_J}i$O{K#y+{+kA}D?#WO6SS^J<^{H>XLJ<wA3U{u-wX5%ox
zzg4s`0<tV?A6skb#f-Mv&LJU5#6|=Eypk@S!UxgG&0{+Qz8;)J{@A(Bwb=ut3}CQ}
zv6ltJCm8MnHd5ZrUGGqd^zOwxyo~K(&=@5nPbvh!dd4yZH)>w?c-l}Xs9v#q-3hpb
zzSaYWd!s+F<IBu`6FP+;_P0ObCOM#&3WyIu$hX<Dk?`57gSuoCgSVlD0jd7O8vym1
zu(=Q#Z5!(_;aiYWg7-+SvSR#6w7}|)-zA#770tH=ob8em2{>U;x{YW?n=j8xQAd9n
zwCKhUV8FL0yT$ko1%FC+)lytYaC4?*W69#4&bq5;NIPT+Vd3ClBR};3S)H|&oVfIv
z;pb;;7_^zC<}8{$y>Z^;IG?`A?!b@Y_?Z2$h!uOwt%oikQeH=~xh`4Bz>SGIVU-_C
z*p^JUw7cR}Zn827R|3u0kYRIp(oagwZQagOuj%f-3NKg*KJaFD*Vor2#DH0$5)6B&
zbgDGM&pW2vD_Dey4x816Ibb5YaKIPLf1XwJeQqgk?#scqK@VGEd1EF8a#o6Wa=LV_
z<+pL|PW{{-`Ob|Ja$QF(`rNo5-r5{_YqiV-H3#}(0(W*zoBSsu=UG7@g^jq0uB>?P
zrqxi8u^}`y^J+P|RS7Bp8<J;X10im19RqvS4~hke(D?}_k^V>%A|csb;oG-5*U^y1
z=8Yv#)mt0&tdw4$+XSpR3E(7pH-&7~CggD1B$U{YvWK4B)eKVpVYqIo=f>m9A}&@7
z2o1Lm`@-@~F_3eHY_+dTpQhb?3ubv}0heYLfcfA-^>5t+y!oHg(Vjvt+MyYBIso_j
z*)_g$DaXI{npH&O&Jb@0nVv7Pn|Hg0KB9zydFWS(I{DMrz+n)ZBla^NAdB*nE=Ek;
zmM~CTgnCOV(z}?%RjUik=hAWrASmvwUF*iuVx)nvloln#GBn(#>PCt3O5C0BoU~YN
zhwECb#dE-0rQuK_n1*Y|*_58jQ4(npHn*q({>pWZ?5!7I_Y1n5K&p=@gk!E9{;T*E
zt)^*8U$qkvy>~`k`b)QpkG5czQ~4~0J{JPF8f~jz)1;bvTL}HPWG^B)P7WtWu259u
zer|nIA>nHSfvp&{<SnZ5F#_D1uvy*h;y(OQKXn!rtKQOM5qU<viuPvk^*56UtJu7g
z+q^d2@iS?S^G~f$$e3F%JJvb~`~eY(6Pt~<Tc*n66FNj)<i~f}ruJCT|DEu=D>_Q~
zT`n3gNX0lb18j!_W7ES)ROAK3x2yI1net-wgdYloW8i5^4bSt*8Ww@vsXwiig(I2@
z5jK|_A}d4kr{eSJqO{aDVOzeB%2$G*(Jy&TeQ|TofdT0hV^;CiU#d5B8I!HO>{HQD
zoPlTq<GNo!5FqWbc<S5L^IFojHkZl3+}E2Wyq0`p@SvI#o)MH|2=+f*^*BCc@|(y|
z!?xeFXNUu=Oy&98-3X}PTL%c^da%w+=W@CO-qsx8{9lUPyu-g`2y#=3o}hQ+1Sgu0
z<p#rB6_0J5X{fqo9#oILAn(P5aXG-H)Tt3TX@4uacfr^bT6~7gR*=!+1dt(g%)yBI
z(1ynXNdW4CLpuYUrEfrG)^!L&@+-i1Ft*je|5i5)KwLhlf5%k*djgc}vyevZvYk!n
z6?%t9Fe}EEPMb(!XB%(=poUeO2M&BeLujdyY*pcv*j1|>p{SPSP3tYN7G*}fp3diB
zqlf5wS66D*H*vbyCJg7sZ16zx;ip8Wpcf}#av3P4QxjtY;hySm=4|6&&>HEZG$SMI
zE%PsB!2UC+v`d&)H<4&CRG))`dPr_L^2j+s;G^q#%E9vr6U(eb>xq`;jpR@_^>x3G
zc5-lQ2#nkVWz{ps140OA(2Lb^ZUXhRvUOGqtubvyNWeLk@7xl6{ChRe8n!LnKFO4?
zfDY<)6IETUlZx=@MZ~UNcmn*~nam!zfn06&&7NidHDsbxNyj%K;2T0VGr!(3r!|Mr
zhuvP|cWmlBiB>tM!JS7`TQ{G3maT(YIXBn`G&~}$-|X<j#U486w11L@G9|<ZcHVnG
zO`V^Ch+1N%gkliB0qL5m)D$lW#A4eKsC-bWnAmT>k#waS74(UU7hRp}6uEN2bjvMN
z;o(A$eJiw{h(KIQ&u>t%-~L-3TD!)K5VL}$zAgHnEaE{wnFx@LIF#6LV`FV;XhBx2
z7HB~My2D9U#aFZ^i+IUYKK0GdMbPpJMJN6Ft}>f0pD#_FL0J=+wxJpQ<+8s_#R+63
z+^KOTmG;>+Bf_Zgs{#s@crUu(m8tK`pWP=-WH)k2F^tr}sXg-rTtA`ccNe8kcOf0U
z`td*uDS%OjdD6CDsmP>wvS4DNUm?{9Sd)#1w2Ug=$0oXe$e4hMp8Gy(prhM3VMMoe
zt%5@sKe>d*O$w=sTxva?5?TI^LFHc+y0U{WDZ2RBNGk4BrOK(BeSGLk&~TNPC$Q^M
z^pd0?QfkDTC=xV?5;Sm7w{vh0Wu$G$saGMHYf+o6=W~oPWb4BYJNSR0k?|7{lq${i
zT)~T2C6U&)MX!DXE2#qRahdSy2C3ZxYJ~0l_#Bi)S(DmRB#@=r$&%fptrOL2<<bXx
zK2addVRqjwIc2x~OiNlqH8QHg0a@O1VAxp0${H{~TEo+@GyrL(!#Z-wD#4wk2aa^7
z8gbf4DT%f`EM0^hv%$81)tKkbnb3ArrugwK&GM4~5vuXG``(I%bB#UWM`DrKam<7i
z<gi@URg1hOXJ^EU%9+C<Zz2Y%d$nOlE4L{%l5r?G>JMda_>tc`f|FBW?z87Ce{*`K
zv_Tj$b>>Rw%6G8uqAM+7u7HT)DaTDp-TnBX^GtniH%}`0xFg5=C~XB_d;fAsP!-IK
zNfj|fa{~5<ZDh1sbFnDhQRP@v#(G32*@r<Aj_wK=E{hDN4XE(yaOKmL{SY2;I~t!<
zYR$rh&pf|O*jmPngj2C$6R-Y$qS)_{T^|4ZkhAz|C}^PmP|e}n!<g%<I#mWUek|Gi
zliSY!zG1miw+5kCI?%QmX7HW09M*kxIN=$bzd@vdZYzO|PJngEgCtllR>HMCHcnA4
zR%c{@x^0O8A}#oN1Z9P(*@o&2kcI0;xXS^hvhtX|#m^6s4yv;KeJDVz|FpoHW|R{p
zo;0qDmDqiqCyt2=Siy#cdD11vJ*+=v(jTuH>e`2Q#UvcDlky1?8lnXHj;%^k)E$mz
zMMhn;;Ghx1p?Tw7pOCYx6VDQ`DmU36V(B6&Q(>PpGDBax_o+MQK1^E03}a*OpK1yi
zVu*rdT8R`?1$%F4j;CK#rrq(opj)_F+a2mOTxFX1?BYib+{sC92~4^L4;*+5yRMND
z*fE2ZBX6>v^IJO&sbZw?m57?EmDeqJ2<<7WBI);H&>30qek}XbN~2wFyR`5>`fWM!
zcl0LBeplTi6|{{SriITFNei3F+K7E`^+MU9tWhqv4%+L|d5vF^YU-C|@)0>xpR^=}
zc;i0eSiJa4z+o|-hM7(=^JV;xeJbR`*Ld~*)m5AeqOm20$rTXNhN>W1Chh(*VuE_<
zm<!P(LNdf{T)uELAQk7(wSqqR*SxdyXqN5GU;ysgGi!}QgjYqv)UG5#aj@$sE`4mN
zbE`}+`npWOXGz#O2a35O{n#Mx#aeYEPj>PZ<tNME|Hl$@e3O5gPl^AES9I+_cxln&
z`lAGh5gMNu!(~XL5Qe0keDX4??9p!(=g`g6P58Pl0>nU7$*in`VH9+JkcQMOyKL6?
zlx#06$1AW0(I(8Hwo2Z9I*yaKIZc=dPjrF4m^|Gf@1Aq9B5Ea}J@Aud#Y=Hl)7*;>
zccVv$6`pI*BN5tt74D~XeIV#64>sieCGxBVNtSvyCG7}@8IUU~q?zIC_8iZU^6C%t
z=uwzP|L7ZC=Dv4~?wq*y>Y9xgh0?aeh7yOSQuUVk;J%$;+zV&1X)@k|OgL32#rQMP
z!w)YzP&Ti!H`enuaa?#2P@6lYh_&HIW%9}^2Q}&_X{jK-e6A#}??B{@Dt+p3RTzgx
zn1RFNOW+*%q+c3ypk?Nou(+ok_S*MvAT56D`+%fHu5D%872;nlT6AS}zh^I??rda@
z+exr>i+EgwQ;r$4b-^IS<3Qodf&v<(CfHF!mSM~z$RbU>f8t7rD-<jkrnpK6+^AH_
zf2aVOU!sJ>HbWsu+H0#ZsrP%#m42#gP#pD$Dpv)FJz^vcQhukLor3dTh8uBmAP|f}
z9A@hO1p32pxU-HLZ4@?WV@6OQwaVTAS~c1zi2(;k0bP5YN0!qhZS&;V0Yu!#vk?-$
z|GLj$-@s_aCKJ0Ju;e)C`Ixx11<>;~nJ6zwbEyZmuo0oSQp~Ypkfg9>JtFDo;y;?A
zwlLmz95Fs(R2c%oiXH_|9O;PGV;FyqXv?xOfH~Sn{t$z_szvs@hmXXGok_A)hRY5b
zXe%LDg|DMaFdd$%T!D1%&hT#=1tS{xc1D&3Kq08A=+Hu%q3BxXCnm-K2QZlrrugYB
zD0#x4f)4$o*%b9oaQ0(L<>P!s`NTlVea<8petTu_{h9wh_bZV|Yy?Iyz^qV$AFfnz
zB%do(4eH)aj3`;DW|g`Y9#gOGJI`6^!=AstcXwOs@<vQeW<DWML1a0wryf&S_06&r
zR(Y&{H>f2KcCeZ2ePGn}faAlhG;OtFjPpAjqkzRr*EASg0-#Xp#CJ}j2GVM%;@PXe
zh%O``pF#@#vmS`Bq#3f6PGp;ExCj)PEiL3}r76{&6yDg$QUw37--X7ISY#-kMJo}w
zm;B;a#07#EDyK%HuqNFH;9ob$n^T(03+Marj_3`h=nJlN4h0sfvoc()e5->4LO1n2
z;mqqq^jo_@H2n7=Hnkn^)m^*0n*8Q(E3KR?+Vj1lZkdG7uZ6J}0cU2-jSxNAkYaju
zfL8HwbO)#uI-UdWOm`CVwGHAm{v<gsKIx`Z_uwT8Z8{SmpCq%9b1xf10LUX+E;C!u
zo%#appgI@YAx>8Jf%=EZ0|%D0{jVqC|BC<_ud}@YXmaBgV)m?cTp*joZ~W8g^s9G~
zLC=TmH<oLAb$mtU95{5d8HwTF0h(a6^^4@xX2p8l*UPmMjx0(yy-XUnepBcFTR@X8
z1rXZ)Q$f%x8PfpqM^2Yz2Sb}yq5dAzwv@zI#>vzl4=xlw0-X`+pqAf@;ji;53;w$y
zzE~c|XKdMKHP9fb%*zI&)(g0&uSQI&y4<$*CFby4wICYTD%FAVIoM1_Ba>H7##3j#
zgZ5D`VOW9+utEg#7#)Vfe-8w=8}j>|u#|8-4wd0|%VnY+u14oQ1oJ5yNtsP9iIDDL
z=7NX8VAs_g@NzQqwwRuBv@`^Z8ln!LZmW^;?5;L)BZ$qJ3jF%;wx%h{OA}4`MqtMX
z4$+iNsMypmRie&=Jx>lScH$HRjLM=!;wv<TvEYKLEPxZ@C^$tc>qymt4{_SB>Lb|J
zM*7JLGd;y39ihhprL?tRE?U`$9Igo&660WogHz^zy?2HDR4KcM4;fDGytY2>FXk5A
zj1)4Y<8F%qq(-Os?5?E+^}>i%wxT!D84m#3K{F?svOS#hwtI9&-(4?X0aWyROOB0q
zeD6VLX(ua@2;C(k2r0uRuL;DCS1=JmrbekBdi|!vLyEBk9%tg`@pXob0SF%o$~;?d
z6kDiu>E;q$y-x5};xV<a^Ag;HSjnp;z74p;Uvh1Oy@V!~W;1K;$;7R*7iImxn?|>V
zvusp-{-}{N6aG}3b1a3})FE<uZXJ2ytG;-8E^E(0n{-Y{@!=m!qgcvE8=^s}!}~7t
z(FXPMI`*;jwcT4BgKzI`*6HH2NHeYTG8)rw^vM1+!&C2y5oUq727$+8G+@o(dtH97
zn~(3o6^IVD{XoA`8zdOEc_m!V{c9YpvSwBPp)+YTeo^{i+>UL@e5};WTc;mgMnLl!
zP?Phmnh^yRz9$v|KXol-7A#YVKtFT!higi(c>S0=tZ%qFosnwjB|!yx35s2|^IvlJ
zqyB>kXS6I+h;Db|_vi^`U(y09@k&6X%pFw~L)bA_NKW(i337eys*cFXdwPRE=fG*L
zsK<T#RT<ZuCF3FNc}i@AjXGlmtfWfmCMA2_VLP=S24SSKLjUA=W54d^W%DLqoxFu(
z(VAE7Fe`83CDtyO8|9NQEmpDGfoHZe@h{?(O&|*}n}LIaX;Il@nl(j<?0Wd_8uuo#
z30l&QI<imtQTT1Jw)AqM;(LE{wVBgt2AX*Ud_tW3F|9WHr>AVsF{aI3-!6H@1MZJ-
zn=BMZ78kC_C@Z&JpW=+^lGYOCF0|1m^WYmHOhU$9{t~UZbHg=0bDfdc@02@>veh*A
zx*q)W5$9`kf6~8x$+&KA%g5Be(Vh%y_#wklka;Rh!bdTb(PRnjJ30(wg=)I`6R|0U
zC8}6rreTq5@|MHs_OudB>U*&M3EQ-2%`ozM4|Akj+o*Pxh&w+_P}x@1gI7!pbuUye
zatTrjiB~;Ym`O0Bws5PSN*ga@EEStOV?ODtOGhc^cV1cnhc3M{MJ!>-LxXOg_cLvl
zDOff3_*0dJ0iqYPU0x{J_%zIu8U_;kW7sWr>q^-YL1PMzLl%d^hZ`GQmp_XFdg|$x
zn7#nedLv^+67iMR1VdE(*vik<u`+355ZWU(rg;iQ0OKYUH{le5Gu;yT0g8*yO`$37
zj7{2hB!chfIW9AXmQr?@SsPfi8?>L(=Ki>8C+VsoE=qD{?scPjR~g<p)w`nCteeT_
zHW5jJ7_pA*?M^ktah;qlWe=NXetq18NFt@8#!(W9W2x+Cs2LI^oVFcz1&|VHDQ{bq
z=%88sIh9xRlbdN9HvHFB0~DX5UFGB$`uZ{LvrcMkEU!tf@WpB+Sc+~S#oS(m6wwmx
zb=Tql&TUk3VeDaQ@j(r6e4at4D%et?@k0?_K5C$uDzbxwrgUb<*t{5vOJA}T%_Yx4
zs(!dGyA2AmjTKvb2BoqwwB!!Wd8Bp`Og9)|2E<J_Hl<S+SZG)XyyBmd=oC<C?&ZzK
zFQ71Qw+rPonvR|et#0iYFB4ul1@&B3^HF;%4|raL5f4ThCDd3b>Gfpbr#`}pX{G9Q
zNsS=G8CV?$sKw86vJz+U<-|kWVAL;PP?CNaDdHI`1>W)bO7fO#1W40%saKyAwUm6K
z?7=hY#^))cS@o3EuFrUN-Meno1zP*+*`O-Y?&ciWCwabiGfKcmN-6M6Y(?8`8PlBs
ztA$;pO_nn&U3CR7!Dh3Rv5=%TFR0@4%P3yzf0|;+*38S<L3hp5h460DK*QbVTI(5y
zKE<-iY6=3t4Jpa95Y>&)Np01e;<|jr{7xTy6liiNNx74mOj{VQ&pAWl${fjuZH7#K
zjg^bzkw+}tw||{Cx|{{?fo@t665K{}+M*cUi>4n?w3p`<&_%7e(4IL*GgE28J3xk|
zYeO_VQ?;1i$DV`F%znF+f$?W|-i{R@O4^dYs}D_f^s<@bz{FL3Irbe!@7b%__qSXs
z%M$Smp-WXEtzY#<Lvx2zLW4U3hG+d)x|ROEDpcCF5xDHESyW2zNh61)geF`?5U9v=
zeTz~DD1+S~KDa!|01Cm96TMpFco9<(;6KRzJ*Q}#&O{>(!Ybik2rnNM)y-i0PyIEY
z1o$AhT(80dFs532^hMZogL<`~@bp<DQ$M(WPd&%^xXHkKm$6DYqMtZd>|V{$(1L{q
z83@1lE;PVe;Qrbppr`B4eEV~^%YxvR;?t5a3-Moz#$%*rb0Cn^<@kA;WYR^}MExXG
z0yf%7r~8Xa9@VBegCOo(GK=J%nDew1Yjbq!lzVBmD-D!i`LK;OHqD%jz?l~SO|X&+
z{=NOPGnNODvSI8bxBZioGSzpP3C*!&ZcqSlTO`&<R`Lo5*RoDXv}&6dq?gma8qefH
z4=>k?=^%=armdXjQ6<Ej?d2w)d?EsR^rx}|KgvZ|MDIhCa1+P!+L^_~HCJhD7K?!U
zMva$4D#}vR_S<x+E+$h@v45?)Nb!VecK2(P=VGoP@5rr)q`7vInI>+kX`VHXJSg>0
z5l)FS)39_-Kesw|HYYHs74W7%<NP6}c0hu70TxaA)WcXK2=<a48bLY1O&>iH8GDPq
zl&c?PcW}Lx6#K+_gd+}?PtF?K6%HdyaEA>Ea9}T%fx{jOxhKdb&RVU}++VF3o<)-$
z(1cSo$I#@a-&Pdenu+%(s}v)w-n7;6JI0oL(>>z3+hU9~`=-f%MjwVKhrWwxRps0P
z?pL^_q3L((&r`2b5YJlBz^~f5@MmmI|I#7=Q9!Q0fW)zl)pHWfVZ_siv;ggjAEQi>
zt-%9<dzQBUc`+^WmazZ1)leL<Ju-`PE0CgdAthUhQ$u81trSJmmvELnktD)66>+pr
zZbW|8dIAe(rg?=ke(ugQh`7WV7>4%0Fj|QcLv?c2*5Zpjp`ql{+iLv+L!4EbFs8w;
zLLr_e2(lpI&@xg`k(>qioRv0lI5eRYUU&)v{(>=VY0QLQwZscR@eGEDNY}bf+O<OR
z>EjhIIxNc65lgDkN?}8`7!8M!+4k3L6>uZbZKenN{lx){x)TL-e3e6UDy0uA><W0p
zXPd3>*r?Htooynkpqyo(7l5R$W*4w?YeVhsY4`JO>_mid>aPC4$iFw3X<oN#-y<@-
zvVI0~I*%hYYSfsMS8Xe6nkE?25bh`0W!jAy<7%0}Lg${t-=}|i<ixDby!V17<h~q5
z+YAtSD*UlKluBh~THk6sGlRoDcWyN-$vi;+d;B;iL=MH4Od8dWEk+UnggzHB0s0))
zebl%r@vpem9G70I03ldu8<X8fT_2j;J(XT-&7Y4}ibJ=Lc4Y5^F81IWy#jI!KAt=y
zRk+>2_NSF+6;ElWgZ!Zl2j6|;aZ@YcE}yykxbBku1Nv4rn923v@j@Fe<Q5zns6ZO5
zGv7TiKC<Ks$8DP#A9&pQbfuaKuo;rdQSlZL4%+#h1fQNk1A$Damw(Lt!}G^Naa7em
zKf@N4P47+U&?hVWR-Y5>`-=jyvhi&pErEY5{Z6V6&Ig2~SOqkv!nhC9(2aq6w412o
zj<6(aAG1h?3oJUcZ;U|pBVPS0&x|ihsOni^){5gD6gq%<J<jMHdCcM2sxTn8ZaUmI
zjQ)KgnzVhd^4p21uVw3%6lp6eU}_KO)v4aZtbmS3BBgGuiQAwA^ChiDe>7XHBxJa4
z%efhC>~#X=_6F~c$u|dIu$?qs6Z)v;(>)@sNIJEb>|4DM)_#R6{><SjMCa1htEsa%
zkk<6~KYIZJz@PgXhAHmPXGOd#@ZCViD?ck~SO!e{c0*7`?6FAivZgE%l=k;ZM`<jK
z|9{;SCAy@dS&QaLgLk2K2l|ufeE&(oRS`*5LdoSMqW*!1v{`+pF(=EQ2_32ZP-wQQ
z*G#<FmyT7PLm&^p4Jq>Yc9N#%ScdDU<>3Xf4WJSd)}#h<TUgW9%TN+%t8Dr_*1ZLe
zs+Bd}eLtJ5pJc5PoCGf#Cu}1@Qz_J>2^4r&QtINl;iwP_bc@D3xrj-*{t&ALoiI48
z;w?{+_)3Rq{!)7F&U^i34>S=K397OMDaP!n2o?k}@wq97hJPpu7sAd(E3tj7!QgD6
zmiwzk)47Q&d=sjv*JSgqO9QS7^P#TW^H}qqY3_(_>t)LLfJLKBXIEuXa1fITE;df=
z)a5kQ$#IW`IXy1DbQBkKm-%Ui0nm&Qb7nt`O9-92rq|qx2dtVZ`U)eWyD+OQ74XG`
zrCqm`P(~V%|K2aE#qZCAe7^8!TeH=0#>+xt3MQqa6ExXVfsSx>#$Yr7UHVmGs?)KX
z2xe0a4afG$(Pwm%SOwZ`n@k2E&IfnbPPK)pwf{+Zb91&wjYY!|am8kq4@hl!F@*UJ
z^sl5UpX_%we|C+bOsy{CN)|rFuR~sB29*@`-;hR!>n)5T1CrFumpWes_@O+dBrj8x
zeY~9n5Fl{vSJEf6k*J&+!Ms{R2Zd#NZI%_!P3@kH7!vx^BiDW7v&rOIWp3Y^Uq}&N
zChGj&2TZj4RF_drXM!a%@;v07cBDW3y#U@0TLZOYfzWIZZr3A>=d|?})8<-A+&&SL
zh$GA0elzWNn_M1a?hvsU)|dMR#%lMY*<-o(Lf*B)WPd}>ilcHQ@CD^JxKUA(uv-tP
zFJ>q=)oG$tNo+09{C8)LezlVcRPy|$yb9)<Xg7Wfwe*;32LgvmclP%sRN#@viaG0%
z^*Pz6#R7MvF$c=-yx1A6-0s+_hCyAWP6u@&cj`oQq3^s8ZVk_wK+_;9{=W!)M&V4Y
zfhKwtwT|#|s0P%^%e*Of=@%S)nB9+#f99cNEnYawYd#KQ?8|=@4;6J<fqm=D6|64k
zYuZ`=YnKDgQXXH%1Giry<v&1g^O1TE^o8i~af@nbI!7D1%b1NuS-u(S5>{d-Vw}DZ
ziUBAIn};M2_g}?kU>P)rz{ta!H}_x_l|R_6c69lebqrjM6c!UZw6T4A#`u~Jma)#^
zMg;e~dKQuo)XRU;-}wuSMLwy8>)Ks2!5Ta1r`)D^i!zjB<gr6;PdhbW0oCRW7?M?s
zJd15yFn<SVv4K;3J})LCN;ub9bbL727b=?b!nKF2^0@KlX(4#J>SvmuaIi$<+Sg4W
zI0qpoC5Ar8qh7?$+M|!IU`_%P{Y=fCoS)C}u@XVxN^woIN<kpzE92wT5T^ghht}-2
zDc9Cn9fWPVwCx6TVn?-iP>h=omR^TG=3NM9*M1jkCYJ~Wk36TwSnC%FPjX%_D3yvN
z+ij8VH~oiPJV0nsw|i*Fsx>N?h}Xotnn+k09b8OwFd}#I7y4~Xw_npki0Ql(FOg`c
zp_`9;^oDAAp)TXKA<~sRk<4tM-K^8ZfhLOb8Rhw9qqt;EIY%y~Rc=JYo6`88dvfC$
zJ9?%@EwTrB@4=a<LRe+S4?ziM6zgokhPu{$(w`y3-ZKLub)CAe5lEiKF)@1p^#on(
ziwApHy+mfL5K?t-Q|JP<>rr*=fO=uIN7~X{QLJct5+fKud^m1EYGlj{6dAZO7z8pg
z<x3fWX%8d~lCdyg0P|cBCXKE2D+n(Wo^(5hM&@f3<78fr>teSS@BhBnxHY<)M1%Zs
z(88`_({*mAD{Uj3W%oKbRHAWBn1$C0DfRt1y-NV_bCy~hM<qcOBe&bU3~*kkL_AT{
zPzu!lQkj7uo?_n@|LfvJZNP*QfFjeZMUCBjm_CA`%@^c}`6rCLr2XG(+>{(c5xFxL
z?MO?+m6y4x^EwK8>K^^B=)8v!A<ha!6*Yz{^w-pfs3|N{MRN=O8I^GV$8#htrthwV
zoK-~;Pr%=n#?nqNEeb=<LuK`STC(GMfNG{P7WE`k`)L{2$;YxrYll4?aK-7oFhLUT
z50R6@sC9XNw<f=LS+#gww37L^5#r2^39)y`hy)=qtp5y6f=;#rX0`#yFg9c1(%;BQ
z)RP|@v&R}9yJ!nmo~~n8sFa<-8j7+8XjerB`LOJxyD%g<Xcyb_l|~|f^SPRE7~!D7
z#)X{wemf_q_G0@ko9ZT9Ejn8B4I&bQ7sd4YIZiQ;yKbxh=%{637m+b-dx~>z4Xe~6
z<$7w9`aRk9^pfMA8L#k#H)?l!c4+9Iq|_-D)%2fucPMOjjiFB}^KEwR;P(NOFbqlB
zCM7}qng{n&kx5$eo|4$oT%Kb|^5*gf?!Ni{Duj53ph2i#>-3r6*$RmojlokH?@c2r
zCzyM^dL(XK3Vi=93=Gt#4%OPxqOOd3S{75js3Pn^lBFV0HA~R{Tbr9Vj?t#D(_-Bm
zD)(J(;N80%eU7S4)5<bQ2n5A<kNhIAaKNAA<F7?nP`Yr6O2}Sw6N#3p=Eg9)1H&D;
z5&Mx5gp+6G#Edo4EPFF-+=FHtMmI&2n92F%ySnz%jW!>=n<bQiC!Ig77|c>AU>W!1
zzi83xuhk;mlS>))D!mMzli~IMJx;-_frL41Q@s@3+*UPaQE^#NLFq%(OF_R;-#7<e
z$J@0X0q1%vjyWiC$3c|YmDfPqb~R}gQKq)bumg_8h;$^MyMgH(3BvxrBf7TYwx#<-
zyK?w-W7!E0{!7B`9(a3Y_0=??ap2zMK)9W&2JH0C5zhIj6hvnUcW^5L+>fE-PwnQx
zJ~_Z~O2MBgmHY2jy*utbL{BO%yz?ZlA1(@xQdumET(0m{O39;p|0)MV8$HQ2tsJjE
zg3n9P97FdRJ8+ifiJ1{;NLXcaJ~#}UvaenrfK@h48-=1i+;SDD6w;HZaFt<0eCOmJ
z7mwzshG=G~JNH5CA|NYvol~2NMg5u^c^7?hk0F6X7)VXq0rMA+Je)DzbXDf}>L5(J
z$rsJi0FTP4jewJ7XXjm#EPzAYV=mztq6J^*0Y=%_FXPdjuRQU5mp1y_lG`nEc7F7s
zB}g>r&aG*;fX0-0S{uY4rgJHZiifMIR!3Mb=VKt!Yng*II16Z-kkSDU@O{;!uY_T>
zqX}IZ5yP4f;yJ1pQHYd<zwhh#h}jNJfklsL^T71MuE)lW#z18N-)`s~X;6hgk3Q62
zhNsTV?Gs-ROZ|0(fzv)xKLB4-#HO+}cZXc1YvFu-3U!xPlL(-RV;sBb`tP4=4zo<O
zXob%ID(jKbc>yE4#rG^g^RDkPb*M~y><SHOU7MiamZwxNtPdP(GpywIWbaCbCkzRV
zpy~8?9rKZu_9)TMG8%^M#Y`4zQ`ho!2_>|xj!%>m#z4+e=<B#d@pV%_hS%Hkl~45v
zGur`S>bAEFOo9|0M!#Tt8Pf(g8S<Ug$$sD3)b_Jo;f>yXvkv2=?T|eUo^UAdx_l~Y
z{OZ`o>$-ojXa*ZrLPLSu{+ESl(sa6Q67&Yy`LQaLd8{>r=6gslt`u^{BA1~~)fYUU
zfy53j%#B6asxDAd>Ayi=J^uA<iFwZ71z1AEZkj-U2Pay@fY<N?yT~@v91BBnOX;5l
zgjpdA-$DF|xzNK>L=Tt(ls{#d%322J$?w!s*fN|n{uz14G%Goq%<8HmrWv<pa>$Xr
zT7nFzz)^j`$>5{tJ@2lOchYShFe0=;xuN(>#`vfD$c`;CR`l+2gSmJgR*2`zW9{A=
zsB2%F$;5rw^Sl*lM==TQJ<Z@){J!~paO#kj9z9Xo@)95D?-`1VjU18-HDpVzU<d+`
z41Y#5%RPQd*s9^o#yf0h2u%kCl4U@w&GxFyTCmP-F^KzQ>So2|vPE14?{idr{Bo6k
z+F0(-o+k3ueC<ET5uyqg-+|SuC7ix&v5~G>CxK=A{kY=K*~@m4)g8`VQ}PAojtT|;
z8aAAONi8PP5<SNyMv~S@U*O8r!AkQl$>(H{SL}>&GOFwta(cZqyfp#Rv45xLiTAn2
zsc$=;w=nTgE%&jx7QJg_Nn#s$_HQuc-L@61Xesq9&Q1A7*bLH{lwb^m+KC}mJ>x8x
zvDs#&TEl2VlCL`kNcPDU9vN{Abl-8AQ?0Fcj_tn^-d`U7n*?5sRZzWb03yULumJHE
zbhfRs+kPTh(iUv1S7s1-{B)KON8MyGl7X<5^&7k6QzSizX<pWXWFrc@B2B;c|36QY
zG1aGU8(kkuw!rZS);9g;)FPPfzCHI$&{!GtlC*diwOZU_+l&3=Lw;6#gt=oNc#Fn7
zX5D<4vg4u12{fkttRsV$3~%GQ66S%C5}tBo`0;cXPSoI*R<YPPX-=Rh-tnZK1X}Us
z0~!9yM5~n2RvS(-n2X_0`g@fXJ^QMHT=v#|Q3-?UsxbO2D*NI_5acHP>}BV0DM6Bu
z0vDO&d68ln2Jf{U*Qi#`w7J9X*y|mU(p7Z9f+Qj$M%=zZ+v#q)HaoE(RmC;b6$<>w
zD`eQPZ79LcsE9hv4T7$m_<JXj`&M|^1ihGXt*u3f7B7AGfJ@KR3_)YmPwg^#JSS?p
zliC60s#e&E03qVxvx!G=p%>G70Er?_CA{A=Wq;D)C*NCs)~moMN%m8awD2-e5P^rw
zJ*yWjd);H-`^>OZ-f}qGFcJIuXccUdmJVs<txGim0K2HoGeX%C@}qT1epp0_$fP{0
zR|Q6ivejlENTv+UT06!@Uzy~2nb-ZrqXr?QLqbmWk&_kG$>!pY{OdJj?fGDi6}YR6
z_AQ6?C-Wg|M9Jyg0p0BB@OHPAqu3>N9T%0?(v*DtM<s_dmP2|RiGK7Cd?9n<Ogn;O
zeK5h^k;r}S4PwvAk&ps`_<O{k*6}VesHKx!B8gqoxBhbANB|<aD>b7_EQoWVRSRI4
z`$iZF_I`zFK2uR);p3OC3dmYH(CFovB%0Om?0q$Ye<l_0`JBYVzI+YUqh$q|M+r(;
zU(QffhY$l-F-o=7A=Q(V>amqX+iPN1INi)2WnuoJ01cwKdsXf%Fu;kC?@i7RwuZh;
zfVVJouzIerzn_|}_FV*Tp3=jce{p{)W#;FFDYQcxNx=dUNE_^vp4a!0#CMDMV-Jj}
z5#_~=HB}qDU*}Kod6A8MzKo*<VJsQF%M8zvSo59pYpK37pkd*?jDgwEJ!3v5XZ+%*
zp9XxbCyZ(dYF-f}Q{P5ZbDK@je>|fh2J`s(E)cOu*u&;~m@Ab^6}i*yq@P^mqitjy
zYJ=A|%R~`s8YJ@L`vXIW>i`wQJZ$94{c|r!$nIUa0JRBW>w}sQW`Peut?T~bWE!oo
zD8tXT*n3n*`gl7v%z3_O(vBX>^Agc9lpkwJjqemksHFp?NSh~s^=GSy3xlV1H$0oG
zM%xnVVEUc19;o9)E+!Lh1VZ_4Kx?r_kWn<pj7B)y5WLh9jV+p#8$l8cL;6|`<-!h;
zDV;pmNFurRtvE)iA0I1CVzqu?GKxS=Z+$+7qGch?w@;rl<EDqpe5vcYXo(V_w8ocM
zSKmozOQFTxGC`A}%(deQ`p}EBb)VC-6$aZ`H0lewWE}jyrf^BGLuz%Y(ROmF``^zI
z@)7Vw=H8_u9l_(rqT5Y;OaF7HUy~5oTfjk3`<wtk(~`!s=ZxhlWP{*oCnozeWZ@3K
zW~RWlkJB>Ou`>)KQ*AE{m%&~Lo@@)dba4_zkp;-(4x19MxA6~7{|fI9bzlUs93D(K
zwPlAW)9=jw7u|v{A!C+@Q6V(zljXgL(9s&NtK(~qahPs@r|dVe>3qmmchn9>=?dJ@
z3$t%pd|DSpl^?n@%T3qxMJqP{b-8nLxcMh(wI~p;vw!^MX5EI+3_i9A1C<VrowW5t
zijMqk;FA;>kVhKe03Sjcb-A_pnfDcjffZtaB3pO0@Gw{y)})U_n6X1o>84gSqD<ic
ztCzgAKQ$`WRLH~wy+UhN{5cbQN>L<OEl`ICgtb5wf96#w@WBi-QwBI{m1Ed7-79{e
zDhLDabIiqxP+{PLZd$*6W{dhQ#83%)-7UothKw7;H)cCNdH_IXIY#kL2M{FyUKv+S
z0*f>GX2Wx&e-mV>fe4bSRU>Y^E?7C!xiP6NN-)x~G!?*iIkm$CxIhu;Hu!HhIecSG
zXv+5is)|$JgnX(bEvBYQJ7U@AnYy$|>GC{C@_qs&onC2IEO%$}LPNN@tgDMj;S~*;
zK)Dg?6+_jqfNu$Q>wHo7`<1tLaLddJF?Bm}80sLVpRZF~W8(xt+Gq<~X<lohAVDfG
z0tuI(czgQ{sN1!Sgip>pid41nUM?A7jcv8K9sCBNI}sA-dM~>5k*?9ud#u*9nk~t_
zwXMmZd&eAV130kTWNdQze7-Y`u~N^XMaV*nwxcnQ>4~XWFX<By*tyhB4)*DcT;}^G
zVmAwmOMc-Hw2aOgn1j|b8a-RcXqu)e2sm*1!ZYnCk#whx@}Cu;1*{|4$u+*}%Zm~U
zYp$Ledi?&1oP?i~h$4*4omX;xFk(Wt)6mEv@)#|y3!Rf&REtWxS;S^Vu80f-&bET$
z9K5EzHAz4}Uixl{xZ?u?SitAZ3QnAT#uCU(PFptk=ErifCv>yjh!bg4G^Z8xxGp_S
zbgK9jr+4U@P6IJk=Mm%TE5j{EhvLKCtE5&)%*nt9Sg|78Fa&_dB8N=4aZe{GR7Uk<
z&LkkFTuuW%{$1+Qp187gfzg#$rJu{elyk<Ox3xcDgAgYg7Nm2>&A}jf;K5zs*Y(-r
zOxk%X!Y`}c?n!?0gE|@P)!y;c4r4()eQIiizBl#T6H`koe-=|jtkHmDq#Z_6^Ds9H
zSH3B%bH?nNOwdSrSKM9a+|93#j5{aS`)B>}93L=6eP+7ynxIDN@e4bo4f$TMlA|m+
z2M0oedEXJZZnN)SpC})ofoD;4)==5T9xe6WHemxqwL_n~CH`)SK!)5z96ckhrHz||
zf*37Y8r!sB3fqHzP>!XQNu%ZLEVCt*L;}D3k85h;yG#31AoOc<PwFgh--}G`IqLVB
zDa^hPvL3=B_tneKA#@#I`VIedy1AeWSW{dk$fU%xeTRC;EnMZ(3Sis>Mw*l?<&%gH
z$W2+P84sy0$l3hyuqKfid6$98jBz}gR}!YQXaF@?;V^E_-ZU7oMTe}8NiZ(12{J2d
zfS8DI!XNzJXom8ggP8k(>0%YN&pZrD%ru>ef0G*eVsN;Y$Q3;#Zw~YQR{gAxkA&xC
zkg35Ay0H_Jc*qOdydDK*Y;)Cd;3nZhN+B2!L)I^>`p0P{EY><F`@mZ6hDc%iTd;^w
z8GQl8%o@8jW=r3z|4u`Zp?VY^{-~j$MQO*vB|GZx61O=z$7&KCK(Q$<Gzbukeb0vr
z0q{c54VcWDo<W5QFmJvnOlxbcj~Xzv5CKL=y#rd>+(cO!^zhx$7}r69w;AbV=WR-@
zu>G`|NM>d2;WSq7kL>}^SMZGK_TBy#UHT#tSl}Q;-`lW(1qE*!<J;=;>c*oe0bN&A
z63foWV2IU7T*^0X5+kV0TRjmn!e60VLz@npZ4TP$>^Tr+sgLFc|2H8bOKA+sXRgQ0
zNwJg5R)Psc+<#ceo1U&iJ?U-_n-9SwZW38GT=b~%^tqxUmL)8;(#}NzkOk5e-?uhN
zj=n2qhn|E%gaoC(zBPBYn=WVcH-O!0+yK<Q!p`&BAKzLPV(Beb+qd;6#Qa~J@>TiS
z7<O4rz5dO+w0+1oL>erbMQK^)4We7mY-HTsf#23_n13QOwa?s=e-m}zLvVtCX=3Dy
zu6KKnq)}xX4EZ|*djlM(t{;)U!0}LSGBI~qklHPUJi$P7K#udJe}ZyA@}$LM*F~75
z#VoFTTs*)A0qee(vXs*v(*^JgS0ZzVl8k8af~fvd<7q*`$)(sz6VyJCWxNo+g?}8J
zkVFOVR*TJKN=kWwA1GKVx6cIx2YooUzx(HZpE6{Zi|AZLaW!!6UTdR8#$<Z2k-L<S
zK-|Y6Ut)1Mi#+l)N!RH&m;lN(@2m?Htd68??F_JQjLQyLSk%xD$d!!pGeH4*WYwMR
z70uW+04(x)^*=2L{PARm_3j9B%cT~jJ8~9RV4raB#^mv@FFc997NL=wq%*Ff!RUje
z8py{gt!h%IRC=nbjP~wF5asWvu}vTMHkS?D$tQ<)^MQzl>(J%+oGIf)^m^m)gXK8R
zrW3LS61*Hg_n=ov<4xb5Q~7J%^Gv+t)DezmCcPLTY;wJ@XT%6>&!tML76jzxODv%Z
zq9E+Zr8~Ovu~7Y81h!d2&B=_6b*~hA^Qcc;t(n-Nd~B4Eb&i^fe8kzfkWcH@p2-Wz
zGSt?OL%RGa^f=Hf(@Nxv$@1VqBK^}OGVdITTcxIMZ)Ske1wO(+IJ<SHU2<CF@4f3<
zN>1qp$Tl8`T45>e`dR?cE4CU?K<Az$Sgb3Fp&D6jT%W&pm3l@Ej@7Bt*`1Dmssk9K
z!uihxAm#I|+Xd?IN@;#8`6s7WlSpC~B~Rl!VQi_gthVnpCDr>t@xdl7SblDovv7Q|
zoYGs<ifQv%VQ>c3a!d9cRfJDG<n8BkVQ<5tE2E^y!8p2@`_V#4^tfH#IyShiEYASY
zyWWU12z@u02+`&w=2%IfQYD}oPyTJx3z@Z+ca_x&`fYUhI*RDS1pzy+vlBWx){ZO>
zXdlA?B#G?Ws_|@unAxeE_?cHtJSwL%{amqS>OBQX0{w2$L@87_BTBUx@ELzg7$g^4
zr<KtJA`l0BFB<mWYZnN#VaC?66I{=Tr8R`)U9AK?CJ`vu+5u($qJ(GOu#1D%)Mxe&
zP5~<f0Ny;Fne?XrXw&LSt_;E31mGs;e?ibg(eXKF2OFH0XOH~F8U}z+B#A@0oV18I
z0T~%Y(!?Q)4k5hN02!CVJCq7fYa{)*ql>U$KIeMx+P<`xxQZn02Hg#?0hY>#TE66G
z{b{u4rA-of{1QJGu5+<h1<T$^=7jx-tKoNzd~WN(5(JNdovM3*J2HwS{wWR<UgWNB
z)f5e@MQ#p72&|5IUc;OBJD`O1tTzX*+kDEy;X$PtgVBUEo*E8jvhEeqE=&}|7M%vZ
z$-M@}QVf4+fQWM+e*%GOh&Rx$sq*?JN2bdl?SKaQ!nxEvf{Wiz^*W2Y*}rKwCD{lw
zWYUPUW)7l*bJ6ffWm479UdND*1m3Bvb83f`82V06%y#yM0TUbLl1U)FiELnNwa314
zy3#CEm1@)VP?>JDO*$;KVMP7d50|w<)|4UFESELjIcX7PA_!G8JXvA05N5M$$AcbG
zvaxEfBXA`-dat#*2HZ1H=jm3q&cOEV_tn=t9WQK=y}tm_g4Y0Ovo?Tw<4wAOa+^WC
zQ#&#Xy)_{=_#AcZaahP5zJ4_)fJnSM+X>*#ZZ|x=AeVV$O!!QRAH*>LHf~{yahMih
zX-<{``Q5HWYS>GSR!R^VPa=?#v3CQP_i3%>&ezf1>6;%cdL-j{z65`Uf<s!0sd$z9
zu4&9iLpaT^r`fY_F6w$o=q05rpHLA|9B@%7le#M!l65z<;gRLTo#gk2Sh;K}0C6<N
zcgk&yw+Wg-%Fw@9RPCdNvX0hYHno8q>s-9Fw*|Vf4pujIXP)Zgk4r;4l|-j5EC`Tv
zb8Y#4rWRIs0Md{yUMlj86}lpcxR?$Hva!oP9^jp4f6u%?#C8{3>rhRTPx3~zWL_jX
z-OeQ#fruycG_{KJs4px)y?&Y{X1>AdZVGDigJ5_t=RW8Na8PIH<d2xVOiEC39gQw~
zP%@<)fb7dC0j~m9VS~J5rB&oTUsq8k)3Oep%k>Ai0H_zuvBBxe4DOoa8M}@ZCHOrD
zgu6Yw(G}8rDZ@+e1&CK}7A<7*Zy5IATp(AuDWJGy!X2s&hoVETx$J*PZE)%|UH91k
zjF=;B?+Yj6@VvX@0WYD5f2$6D2|(bay%{u7e>nmFGT+{A8q?bww4n?|u|H%NuE2FI
zhPuh}^WFD9gJAC`mmf0zl}R3sQ9=1Bo}sSUn7MPN7ekqQ9^K)i=66pp!SjfW&Wu3X
zF=Z1g>LuvWo-UH&@eeeP;8=0c9H!kL&x%!br`6;$PQE5m9BT!TZ%*!LUQC9}eT2%a
z0;#7#h2Jwdw-Ttfu#!p9WLdty2ZnDvK!J>p*!o~K3Teiyu@CoHlkjK}FpgMETbE9S
zu`zbao1OA^t#^!KH#Zq?wSiNhhr~3Lv>|-gVL>PJ%sS+g>gM)@m|y5r0j18_LplQV
zRzx!WU?gPHa~709xGS+nf?u(!<_dqE(Vwd|&Anjx4Tk<%7S!&6L;N)LPYn(h_k%ZZ
z)K<GkO~Tk36xF`xGLv`DbMz;@HRp^7!ow*`JXzhNj8w6T$`p8S|EfuEB6Y^xeEy_V
z*aPUU+J1B6LtRK|0PN3?4-wvJbM5?2LOdaS^9o9!n+MJkY#k$=KTIY7ZO&LT)o81m
z`_H-D0gE>MpJBcJYj|#o;c#E&j_uYt42slefL$V+eSk$Mx`5y4Z?%LZzobFz#xfmN
zSB^mMHKOiHIp)|!tC_Ou8O|clf5+xBvqbG*h8lPub%#Fy02w-wE0w2#Fjzi?e1ypc
z&AR>Q87cf`ps0typ>Hg?mxx6Rb;_RacJyg@Be%77`)?Szf<6mts(9_%BEn(`%4p;E
zGKnw*Z<ojRbyzt9^WVmpl_A~rTzAn3|4&HO;WcA5gKf;-j+)UjY&w2_uT$j^63>7P
zQ`xTHdkTfqQ>>L}-+>Lod8Q#`u4&*wKY~<AiX{moj`}U=d3$H^d_tnpo90Kx)WzB|
zAM^5yd@wLuv&3!nTml9USxeA_nGP$rt(xjscqFCGUB5V(LQr56{kt8~R5>3tJ}1u^
zFy$>PWOiaPNZMT-w=cxQ@MUEqF#z5U$KrQ=w3AOm%kium1oHX$2GNoZGWrSs1cb{O
z<lE&{q_DM!tX{{ULInO*Y+g4AjcFihztUt4IO4RnxSeWytz!_sZv+DZG?LKh57zqv
z_!R7GB@ds=WW4QDoMIjjf{tU9^%CNKe+c$&O_Ibzkp=5~!l1jkBqB%zTW^Ensb0Aw
zdlj&@niJ@$qp6BjPI_{WJt2NQ7%pMu;5`4IqwfU68EJ1W_Xe^;{GjppZ}>Jz`V&k0
zO>l=~>GXhz<!o7otn^}%b00XZWLJ}URA+E?OJQ<5>`jk~A~8eCfK70Gkc8{#dVikY
zb>>iHiHJFGyW9n)ZAtjhWA}jZHc&K;=v(qH=eARv$e=yFY#!Vvq&gE#9=3LqR&{~L
zb<ehBjRPu(xqBM~Mi*eE{&XSy8~h^~#k(Hgrd($2G1XGeE}08)-f^Bmi{R^WSx3^g
zbX|l6Q#v6=LTY9f`RNBjevA1qs)HmhN!sbz$L2m>d)8@^V$Kq`0nG9Yfr&RwLBA2E
z$+Qaz$~jL7=`ZeS!oq4Qal>Z|cfV~*LIqp`$M4->$JGW?jVdQnm(2NUy?|b<U0Gq$
zKae9~+m9<E`X-%lXs$7Y;jE6AfoU+KZFkpC7hUW_v276{n#B-+3+tw)qn*ji&;W-p
zESAJXa=X*?YqI0|#d``Y$Rn6|a+m;ofGY)i3);X#(bC}4AxZq)lbZ+PCfn?oc_j6(
z^ilU<eGhLEG_?K9x029ud;;ZkmoyB9)1iicV+}&g0*9)zbNEaI##unHCp@HBn+|zW
z=w$ZYvLBxo-ORdFW;}9t7GCJTKVGD^Xd^b6j*my4O}$`SM_b4RfQ(1!qAOPnxWDP^
zMbQ5&Q+~mLHvvTx$MrnXHm63zee!BOMg5Qx_BDnMv~lM1KtbO*p+yEh+DN_i#1cFo
zmKdE5cTI0`^_%0F%+(lTjX48f{tL)07X1Ozat#fhDZlG~5Lr6Oz`6&_Fjg^<ZbQ@i
z;yDF}*^EntkDZk9sNI2=r6|4P^+w%9Ye|botWe(ol$|#&K2gJSJ?4?rc7HG{%4c*@
zp?*6|wfWaicj<0nku`e+HD<y(-*f41tHl4(AUUZ^(kCp*u7ADIPc*cy7}eP9+tHPs
z90e~2x!kmL;kGjE=&v{aeb3F4(&pX|BFB9FkVU4^p~V2o&srJ+Pv2fh44`Ve71Yk{
zoD9kU(u1R3gy^)+JbzDjsy|7YVrSCq*i0M;uS#+{u!BdAg^Wmkd6+Pd(1lyVs+>rU
z;<gD(i<f0htld&@c?jqhA9M93Y1g>Y&6=}2+@CrbzQkUYb3ZjdC!FY7(>X-`gA9Vq
z(?8g}kGpG-&=!YOd2xflljQF=P@4<~qJO2x?e>hgs!Uh0bHI2x2!6NUjp0F*j%|H-
z2`sXsxZj4_Ytp=byW=8Y%OeKb;9;cWppL`Nr14Z9Y5ULg_3Z&uPkD@AgDkc@yd%-O
z3k-&m23ljtfLDqjnp%%wl1an3QkWsaKaGaf6_&Uw@EFLqrVByxGku~Od(jR>$$(8F
z+P26$YrhkMrtrC%HCOSL)gc<Yg#7Fsb*2Mj{)2(bUw6GyVP}SUg|Uk%M>q3A9#sy1
zg#6aSy-RNi5}*o?$~7kFk=I)9UFZx*icvRS-wGx%yUqm5aB(>j*QExF=-$=YsP}Uj
zumFd|7bx+^oR?N5USl1v1QMLnpKF|KvqMX}I$;>}Y2qyr`H3&a$-sP=CjR=8ui-Wa
zG~Y)Cw`^|=m``5Hyl*w<Um9*?+DubB>e8G)sh;~cl#qg>cgr`+6}mBzqzMdLY62(2
zT(t^7@PSqeOQc47+69O<Omi@jeGBiK55C#=%NnF=K5!p-+RXR-w$;Zg$;tEAaH8J<
zKFe}sr(G~=JDZCN`Ua)@xAmCB@y}w(Bd2R7%45;WuAkT5RZ=2c1#O`OhqN(@uswDP
z?l5HFUODE58zpAd6wDa8kB-(nTteYZk_y!g2emd{z*E?h1*d7OkC+;;i6|1m0N%Ec
zY%Yn08G+7hO51SDtqbx(JWpvPRkId!9R|m6p7-DAtmj`9&sKZu00+^!RL~tCZA)GE
zF#65QICbBsetFQ2aXdb-H8*tCR(Qld%82|6T*22|#;{<PC3P8srA1ljhhQHZ{ZaE%
zle+r)f9=3CZB}Pmchy*+%5*zYhyhYWf&>aea;Sp*9Kh*hoda<9`@w(qk}Kf#0F*=Z
zHVc53JD*kei__>3$bKX5bf>LpkB$h7nS2FgD{;U`o<Nu<8P#i9j@YXV%0dnCzwa2?
z$#<O8^0NZ=ph(;D`49p6bj9&A!i}QNp&(*jCgzy=6hevjl`h#O`ELTM!sH%zJ(sQr
zH4)x3;ppN>Ik~|^Pay8#fly$iHqf#5@p00Uka5`SV7VwtZ!3iE%CQvPP8V=DFS_^7
zAaFYaG~8$=egHD5OYHyG-5%pmNa|!u>x~MAFakWc+}3y7Pb<aI=uYjeW!IO-8H~5j
zH#j*FoTf^)=RZvLUl<5b4Bxx#0JU-?-s?*7&Md9_icL=iNH8krvA4cs??Z)eNYGIc
zOguxAccCtu*=*H{qf?hzW(Y;TcP(QEuubQ!y<7nqTh|LRPYka>ZWf}izgl7OpCqoH
zPXA9uz4QxQip(NWptrB3weqGUQvjWkaU`H+;vg`M879Q<hMs96QP+)Ya(^?z0aR|r
z^5k@S*=PO|dU}rNscvOgort&Cgb2nwZpZEdR?aIk0f+#6_kDOoOx(u!Pste3DPHc>
zxCdt}Z_T~38`*Qa!N+1NSsS3hNd0b7psB80Q2_lI9<AIXil*o_F$sxL3Mt>KaG!sN
z*CV5v;^Br-+_kl;X(in<CKSI;hIMXz%2|8~q0%aU&p>g!^9Als%5R$=CMk;~C^88(
zz)2Zk@XCp+Xbrn!*2qiOvTlPsxR^h@V$NsN2kbKG<~bVUYP*X{2X~W>yXTP_5<*2G
z+8eY9sL<-ZGP9XW9MfI%bETUBjLEYztjC{EQX_RROPaSm;v~1}n4Pp1U~KC6UmI3g
zSW`TRdWoJC_l9VG@#D|xr1pqOoPBp7qz9F*UNy`lSR1Z^iulESWKwPCO~$blFCGYB
zFPEMlB&S~uF6$WFruZ@upMDNJWK<-j!``h@?&<2|Dr7X^)E&RVyeLe9qRnmZm5Hj!
z-DZoVzp*fBD;P#u>?DRgXC>T7pt67%j3TwL&X+_Qr_N|&ej_psBIEY<@<P;y1UEXT
zVHDgo3qnb7c+-lvP0KnybK9V8cK~H&Vuo~a_0d1|To_Mb!<mLmnsy0ecpZdborXBC
zb!@i`rDZm1Jx)3lE27))w%s&=lm)q@7>)gJC-C{96;)X=`dzXzyHfA-;R%~VbUIpi
zQ6MJ#Z-(9iom<RYO%vYWZ}AWBE$1$r_{F7d+V)G8XCB!eA#7(!uRw>78gAvK7jrB;
z<cvQbS9RgI$h?)yMXckqW4A8>rvlYU`t&9IO=3<scw*1giTYd)gco4z1nj0SWneb}
z?dwdCXyEr$|A-GI1_Dh{iaZw~1}rm^a%V~>3<AarJxOA>z|)P$YRl|y_cd#=Y@8ZE
zA)vWjVs|Uo+BNg}|F-#&^e+%WZLcmqDKx*4QgRNJ7}<}p7gP<wA8U*xb8E1fDcN9c
zay(l{eJxu;NXKBFR_CWjc2Mb_UR<%476{G8nY{7=gv)e$Mdd*uZR(<Bo832zT|%i+
zDGp6<H%Uzmd+)62**j0vy8z+ls_2SkYsu)WeM~yel&f&(!z$Lyr(U9IF7WTC2!war
z%I)x>Nqqr*-GcBGSEu$O#&MXlA$_XslBm<2Xa^<58)Cm2)K0~nsa!sO!nj1p+06*L
zY%~53iyv0Km1`GG*K(exmA^FS;nu@Fx+Nf?>1@kwW8v;pY)5j0j5Z1S4=-?1^7P1q
z1*8-5U{U|ZW_^%p--A*AC!TYxr`IYJ>x3?9LhzVntW3|k%9#b9X$eEk0jj^@q7mMk
zKZ1T*@nM)p8`TVqIiO4u1C~uSAC)CyXTedUDQD6;Qy~+<?4+QQN0G8awsV>p=styy
z{MIg+xlUUqcHHNu$q3p6RpZ=K?A{0$J1gH@nScueYU{&s<8*sbjfstnmS;Qq5N099
zlRxm>R_VKX-B9G=$4kKHbJ0IS3U*TtZ4~F1Mx#3QJ$s#KmrCAVX5@mjn?dPc(aKVu
zz@b|Tfx;llPV!+2j6kLK1UgJtOZg=PuaLw4?kbf!i0{d+(u6?E_cV;XXC~+w({Q-G
zu9;tjssrS47<>Bm%#ylF>6W6Ja5KA1yS1vUVZi~q^l%a7;EgX*9{(M^T{Jx`xwKvN
zb89Te@@1q&MHcNTDmPc)rM(q@NTjQhP++^Rjjj9I&a#DnEvldX3~*k=_8>-Y;d{jL
zgRX@kY!$XRP|}p?C~e&}XNqxABxZ!QOwDEdo%>6J0?FpU%dfwH2+l}*Xuk%MW>X$k
zpCW|cPrKBt=*@sEr2>1ju!I)6(|JPQtK^^P)-#C~{BM<93s=CzKm4OB2zblj+YMuu
z<)ZTA`HWUkV!PQJ4-i9vo+P!;Mrrul&<_to&6zJxGW$1N9UsjQ;Q;e;-|z7huog^n
zXeFy{5@tVjde<>z(pF)LNehwZ5G!CX(xNmHesCZZv+Sj97=V|*g+|)j8opLl(&x(f
zsSqYm<~1O_M)18_+Cgy3xf(5Gx~mA~DCAY_;p8oEh7xh(9L%hvM-|y2Yj~Z@Qy>W7
z(i4-lIMyvaEB49dQ(mIV6=clF2y2T`VSLX5=^gMx1|Lkb;9-)HzFn#qc8tD)Zfcu7
zcCcLPHMO7WZ1Mn(4$v&FqH(ifT(skb9dP1KLPs+_rnhr{6K^msB_6jp2^Z8@CATXJ
z@*uGo5mX4u?Pyjh+atWDC`>|AG>d6`J{a9<yoa;U!9~E$ad8O`K*c1Rcq|K`1Zv-I
z2Z)bHcY3gJ-0Xo!yl*otu_jj=xYtMNn%Ii9odQE|i&yO(scy1keYI8OcO?qIdutG-
zS?+&la4^)7+)J(|XP#yBWK0!}DcHgu2>VWg3v6ST&UALWO9`26tOrbB8H!*LVi2}R
zSIArhh#3G8sMt5Z6s3sMQ(VN?jL8k?qxe*(1dOD@;*!JrRVc-*shC@$*^Oaobd3hG
z=cw4o+oWL_@zgQ3#0LtVWLlK84YFT~m2Si&oRJnYNNW`U<VtX(f{j6B0z~g$`rqU#
z-H<T#NZ*!M#JEAxPApyZ%7f{vr~=hSD!g>hU88H-B}dZcT8yMlw0*k|UO4lKmP)qE
z&}JJ+L`I;5Ye&_?O@oO~=IUmt;Auc~KcnxTHu<g^?8Ifn$<J}{r@iUN;epL?z^oBs
z{MRIo1vWC>d9Q?qRX=6724COnlUYa@In2atj)!0Xwx^wMC%hkb@e<pF$l?2LWlAY_
z|Gx0EXNgcIT_;G~yw5X}%gU$H*;=@Cpb(XNm=+q<diMK>uAsZ1TaEY^wX17d)%+ig
zUX$q>>Dr_h_YB{^06HsfzztUO;Bw^G=+e>n$JXC(1H7Oq>D*jZGgpQ1j))O4n|pG{
zbV7J%2Qs|e-Ad%0i8pj3@JVA4qRk;RP#pFPiK4V>t%~;VJvLp2SGt{~a`Hs1$4{iQ
zdJr{bts98$qPA9;Mp`A~Tj4VRgX5AKM-J9XO)(+E-T(=7RM2{hLRdcSAzJI`L(-AP
z=N)}TH1TR2eoSY2q|!oN*5d?}8aa$~f;&HSCh@Fs%cIBS-nu57z@=3}HFImKCDsdz
zHTPhLSnwj@`9anQ@9+=o3b>r;9ogSt;mMey2eB)i5<&)PDA&jrv*y|7&hes|ETNW;
z>wb+((q>lP$Aaz}Er{RiLbobEUK^Gg8gv)H%MO$-TiL6UF{Vz#7YHkv4VY)rJFFmI
zNrdEQV|y=2+||2Nwq{?-$PtYjiiQ#)Ey+zA2(#cg8w=Shs*i}msziI+tSO%v#=8Xo
z<^5nD9t6uP13{m}=@pnBs7M>6qwR^Ab_>KzR*M7--bKqYGe(`bA8;x)Y&p@_v~giS
zBQPlK{F~vpLG2B?PP_GTWNu#6Nz?+gjSYXmhuXoM7&Z>)sma!B<%bF_^tR;F5)4$G
z(BD^jYv1qbXOArmsxSP!sLzM)w$fq>z0%*zH(wtL->DS#wi=#a%}=~peP*m1Sn_Xg
z{NFsU?>(xDz=4F6I2r|2H*HUGrmoBg`I$EQ1G3u*GwD)b(1N4z{zfccnr3Xy(4&bD
zfBmh}V961R9&&aK4T-LMsNl^Auj6dHr`(!j!dC2da69dR(-9iq{7vZsdAe}QuZ{mb
zM4lApkUQKCKl2^8p9kN4H@fPrv-<#(h-+L&tuHoyguAY0ALhi<W%U3U`dd?wu&vpz
zSZK_6JVAbthP>7Wf}4f4TOw!OpkiolGe<~OKUR%v$YSZD7oMsh=Lag#EJ?xd!<n{W
zLed&=p=4b1Fuus06}LU;!YvhnLc{<f>KNrwQzX8ToX_W9`ldWM-sf6NFJCd{Asdsw
zoR)6iq^MT~WA20oQyGGjKk#Yz@!NTtSw+y`C<eoY9~Rx7O=Og2h>ROtIh$S6>N>lx
zGFc*_<7s!uP0iAC&*H4Lg!*)}9_+9ED9l$&i1&*rG0oZEJAS~kZqgs`-r`lBDU@M#
zrUMf3_RB2J*Oj$X=RrlacdN9#hhs|d)sV)UV@tnv>;hLhs79>3)4P?79AT6bYxr!i
zh|c<gg#8GsooM;D*i;@70J*CSPFk8Y21J;<ik2Fzov{mBL;Hw6ocl$nU<^Rs_+11P
z`!k}XoV$6q{97_IJvc!vVR!Bkjlwk!ef1)P@ol+NWe+l?1^7H-=HQ}6)9c>CnCi9)
zYq9=m-E7M8dw)0=%I4T-C!JRPGYk<t@csS&J^XisJn<v(3U4|b?KTPz@eH+S?ETI6
z_$i4)c$z6J8akhQro9mMTe@;HKsdGG3;(p72cpYtc;gU~<y>Ea!Bta&Ham(BeE9uK
z;R~s+TE>^@US%Mh6=@a}&%LLr5vlQXGB_8$sDtr_c)a7Ob3RS5g21BC>9c1mI5!+w
z8kdcnFje_G>DO1T-(T3?zs~oLZ>{u^1KAw4J+tl%?KhUPh=E5s9D*k#(ltl*r#^ZV
zj%F~kU2=(Y+UL#D&mrVWNBZpCfMRxWi4)(<-BBAZd$K!l`PjM(1-Wkm<ObI2#`lU;
z8{wr<5=B_P6vyW?;JfzZydS$HfL)q&$as`LLzA|DbyMdS)S6aVl21B$o_Kw%90;#`
zoVHsjf13c&%(q&Zv*(u8q|vfG?!gut#Bj5klgPe5*imqRby2Iv>!7HR{I&{>rj4SI
zSfP{mdX}I^QxgvuY+>o@CEpN+CTT*j$$po12(n8RP4B7nwWw<=>!u5B0hz@80mRr_
z^IY-jf+2Uyw7Oc2iBe4UL7^TSnpF&xDqhKG7tG5dFYGr@tMZ$z#8qK9ftkOCNQE!j
zmEtxJi1VfOW6;Zq$Ndbw_-t$x`TfRoC><y9N0Yx)*7mdun|u*(Sr#cpnBA>!^bNxE
zx;DUJ{~-FiID^)i)ldW{f<?3|I~&7~RCGs;WGxYq(6FG~H5s~T;iupi;xyxc!VKh{
zQo`Z6lHBRt3-p7!ujk_*4XE+PBFZXVWuin^H<QE{ynn||n{}_qTO`3|MJOGLn%EV=
z+;r^=`}cUxlfP=`Nd7mNZpwEkYTkgI&eHG>gy|fcPzD#0#ukx))ywdi&mwcm`4fbI
zLje;{gW4M5rm7>+$BJh`nOW!A{A^r(wN0)q4NouDQL1I&T1>emZDT`t1GWQ%;%DvG
z^=R<jG|w+q%caA^&Z!iMV2TE=cebqnW9%xA(Y;%Dd5$&jf0J0T)EN|2x&=W(E8E2(
zWr@qanIpq+okF$P^E_VKmt^jr+91LYQ^`hhmQmjiW!asD;6n4Qq#Vp9wmg63(GXEx
zB7vd278qUtaqM@`aN>LpX(hk5w){}Ye<vJuEv;?g%(xO1XRak%9YC(4t}(Gs_?^uE
zxUs5tr%;N;G;GW-gm8lo8205DP5qbC-85TK+<sdZPg677iZ#~}n@>7CTD8Vh(NJT;
z<SH4)urf70DSB#-2UA9$YuiQ))GoXiNBG>g{qK`_^N*rjFPKD*HLb9(Y0_(lnlakL
z)>%r4wRf?$GMlo_&EjJX8&<(_7Zsn!Nf;6Xx|dz6uCOcW?}XOQt9-ofkx~{wJk`jv
z;~zIVTEGsDoG3kr61sknVi{`tpu||R8Bciy5`{c~YCnpa6`?s?41?}EltU@T7=Yxw
z@Cc0r`A*p?j~Y}stNjqVp;Zm-?$y%n%k-d>*Cvd0?BzXS_w^RO03;&8tM2Dn;f<hc
zx#sR^fLe~6M38|c@BW$fF>gH76;9IA@EM9ymmcx`qF76Xjq#4k5C`%V6v=Ob?s3l*
zAYN*<5QO@+A*y1pBJ?eCpkraC0%WA#p5m(6kj)WAej8cF_iR4_c_;|u(vh_<HA3+p
zU!+o7@T9|PSy7bDoR~0Rgolc@k(Z#0k(VY4TBv6jF%2OOAT#cNY<H;LCInXQ^7@c`
z?Gh&&0g$KAF^83Xv9Iib=lbC>wGJOUs)%hz<QQ_~3A0%f*xP?K?Y99GK)SZf+CyjR
zV%t_&aMrV&ER$9blf)?+6Uc>)O^Zfb7*3^fP*S1Lj^j`=V0)r9m1|EmzZ~D{c(M`C
zbgO`iN$7!c3wyGs<CDlP15!Q^fA`3~+ch+5gC9>QK3uB+j0<vW-{$QIzy|T9izn#X
z22ts$xbtkI2*IEM6@w&n5>6Ga(7Qdk-S!7mqbdl9jC`A7_CQn|3SJ_3I*LqKps5su
zCKgofaWiMnLEeUpZodG+|7=$!j8**9&-x!U6tjjZHoDEkVS?Y14zKZMW0Gx-cABg6
zBI*-A>ylHCw^dhI0~6ksy=+9lmy1xwFLXin^&9~wSDs+}b8b(i7TxyI@nAlHxLoN!
zrlHX)9}u-JX&hbjzgu`x;rD}NApBpo_fGgIdBgU9v_eI0^eRl17Di+JqEdjH`b4^W
zx*2GgNH$cCf3`e6xo~4^>DPlUQ(y{~=&V6Hm*HvfiYIgEB&v09T#Qn4L;MZndarTD
zXXj;+&LU9P$)w^tp`?5!L%~xk)hf_J`~vq~*%KUrmyoeU{Sk7K6}XWRpLVqs;}0oP
zJwQ-o`&nBrY$7Ho3eJR!W($4n-VnUG;~R%JBX&2)@8TUQy2jgffz$v~ksDt#SIx9@
zvS-$Wbl&6PoPt`AS(iS7`2QIpyIVatKMbJUdSD_o|F469?9m`Dx%CdwSU)4g#V_iU
zj*{R~w|5^gzNOx)_O2mG6TjE`WwQO}0V^W3M2LJz$J}zZ_`?Qnu~*{|?4m0cZ}+W+
zR~4Wz5YcL0M~&P*IrzW2$H=l|f!DdgGEb48$>MasQ&>KBdw(v%)j9hJfUp#hag81d
zusc+rk;z*275a^Z%&vo*?+OCJBxOb%d>2e^d(a{DhI23DDyVglH8`j4iElh3liNXZ
zmC)iJep61%!k>xZSzM#byHV7XuQ7q)vD0Zn=9$!}xYbddg|ov=dTi8r_7NSg@}S8L
zjUrp?dh*_Ua6_vH_){VR1Kh3hO<nqRi$G`Do4RytMTek-;=eGEPwdC9=_^blkiSiF
z7F?Kt3P%0WGb=Wo%m6h&%D?KPtGF?^le#nvy7-WtVz0=sMbK!8T>m@DXp>Uxco35L
zcDA7yDEt0eo9|jGKt2gd(W)gO-$xtR0pH|3YPp*#8HZf!Qy{mO*6h#7^j$Yg()-8<
zfC^B<;qao<enpebMNnfFj==;8uvn58na#c3%1{4@VGh!$xS&nlQZ!A$kkg+_Qa>79
z=e7H0<}hWgJC3lrA%XHFDrwXJ_{;}yII_tysb*a!Y^~rC$Ef(fKAER&t4ui`$<N=<
z-vK2W)gM1s;Q5hq>8F*jp6HuFDRTQEFc8=z`xkSS%bWSWvpjkdndD<8e(VHlwlTHp
z<GdU2(`F3~5R1)qEDo<!kG2+A!6$onF@GYR5f`)J?S&%T^Vk^2+)`2*$Fxi)K@6;r
zc;<F^^Y2d?NVVS(GWLAhpGO7>$>vNPX^5t`;U5Lhk=LAdQ!()T3PO3*u8X;b7{0NR
zXF6#%j8F|V>dvrrd?oo9lbLU1;+di^xB4tk)7z+7Q-jcX&ydd`>*)5SW&M<kpVu$O
z^PTxT&AzC8O`&BfC}09&kH#Q58E<6qi0gC-&VM$TN|J%Je#e+{c`qxD)JK)A!G=su
z&GLKbY%(+n>SzGCl)W8Apu6#^uhbc`K|&)DwIJRj)g`jJ-N=^{b6_JktJzZ7bM#Kw
zcfqY~JG_!JzYL4!2!U=C&1~TMf@d3I^#G-IhB{%xN4LK8EKo#28y1=xL~s|akZ??}
z{v(cWx;lfx5;7A-6v3tJ7$QqkT@AOyCZ<}-Pq4_LWT+G{v(7E0yqSF}K}9+SjY1Pd
z8^F?7&B3A}<NkDHbjyG!EcQ^8Q@rnT%Y533=h&pDqZoWyaUl>&Am}LDi>%BU8N76(
zKodf!S)&&qod(J8nIoRCY1A){taM$t6>Y!KD89|xcixg2)d(q;gDfm_PbrIfR7I>U
zRi4?LD3<@F{-XXm$!NnqxgEqjN5tOC+QhqcHFHUZXfq$~#sgvf3U;J`p|s|fBxxxR
z_^RZO-4uQ+l$41b3Tm4xF;3$T`AJdggtM9dDwMx{wG(-;PQH)KlXdqC(v4!9!KNYu
zTbW+6La3(VBuHv@l!4oETSAKQHBzNqKWwp+4d14+-0mjSSK{O8({-k1ct=AGrHs_@
z=Jg*5gaP#&XK|uJZr*S9IiF$8eX+60Ju0Ut49wV1jR&IwSy;qeQ_3gngs*dj_Nt80
zJb$)78u^En^e<Zp`J$c44#e4cIdL@Nqb=NTam}3>@+KOr?|g>SRR#@XAkC#7r2o@v
zXoN|HhTIGTaxdH0#Oy-JXf$-)6ZETb=ayVf-*GXx7*JA9*L2nuBmiCKWFP8FQ)|VA
z0{ljzKG?wYNDW;2^?d!-YT53N$rMOpE<AE<-1P3aCTjh;z9bvx+^uOXF!dn8r4M>j
zeee7p@JfSxS1<<93LDcBH{^PFsva$7klkYkS%-N;1P1e7V)d{UqbLR2m*Y=9{#QHz
zV~j@ZPjI+wBAys(wca!*MvJ-st5qGeEDB(#_6U<YNlHQEacv_g_(TWCwaH11N)-CO
z(<8OLJ(8YVLUlOZyC#A_$DG^ijg>?^?g55BbM=&!>s!)`XO(*P_|*mVrflX?2uBVP
zEKas-=x=tdCe$29<_EBL5!#YIk#*GJ*%Y+IG-KGiA1_8^UPzYI@MGwG3Spdd*C6)D
zp-Z*ojN4gG*5;$O&WzwehzYzzCb-BZY1n-9{^J5nv&|bY&)9yWpjy!L!_tV(T%OKj
zN~{wv{A0i10XMhOk1O2T!1c;=w&opvl(b!`d;LUqg@|B6z7+I*o8YL)2wwDB3<k#e
zSmJG>{2)Gft<Y8mB0e8C*bkkW2&7L}cM!58m@5bS7AK=>519Ile7));@%Y4h&>RhF
zg8>CChveK81lY8mVRvIFjp;sU|0X*RU2=eyyrjQZx=qRD5dX&cTe`$`32KD!mU_;y
za9K`Y!iF-HQ1Np{Cj!`{cPfaF56%Uone5NSNN}8M6&?4?pxf_nTHQ)F%pfxPxq41X
z9oycg7^Z^RAwGSiw$5UM8*3P$P`Ep9g?_&kpG;UJA~eJrP5Jb=whNg_?+w;o?1cT=
zpCDx}22wjXrpuXRhoRfa6|4K`j*GKpJh@M_aoyMk;v8w~OBb+jPmlm6TQ?Z6aQ1&%
zA2tYZ9p7Ha5Lz}iYX+0m80#uZXb6gs#U&i)Xh(f?INPxQFM9-Fv2*ofbn+Ss8e`D7
zC4Zf3S-o~6@J=7}R8n*oqAW&ps-fka#Ia@Ye%`8%7yrrEdcM2t71&qiBT$xCbW*zQ
zl9|j4Oso!dc**U@XK`}eTPufs=9Na0XWfJG_cP9&$N|&9+wQb*V?Jba3g#@UTLQ6?
z*FHB!S=)~8<xP&l8y;=B%#>nL&>!m*qoxVp-l0oLh+14Nv0)Taz!Pqk%JGGH9x5_T
zH3l=E6Ry%Nf*Fbsh%GyQ=RYXiR)W90q4L2z;QM&WvbkI=Sg@qK_qKXlrytSfk3P6F
zJps6&<oG#?Mv`N1jJzUf2}zM7xpIrpJY}`-94)({@b%E8ifQCX3cVoBwApwz6`F5`
zAf5GpbfR&fg(dMLD3H1oBbrO_Vwzpj)km|!VSM}O<3ARBp|-~feHmM)gP8z3K2MUE
zv}>te!bVWjKm*22Hb9HV?9?tm1huv*14B?)#afS1XaUTY6~YXd1~0JqHAw@BRqrOt
z7nm+FuF|*SQrbH1w`wWCXe)ojzz8Lh7AwWexVXF7Sh!i>xgO(<n%+0jO<_`?D#yS2
z6%q1=m6Pn`m(zcGj<yI;QyF|d?2-F}X^W-M`r8QQBCP1>^fMR3t;_EZk5*e%(;yoi
zwgA;D#!=Z0e@btHco&TuBWGtAK8+3ZHrhk^|AaN8`&xnn!uwA<8?jN8Z`{o-r@U}9
z+IVUHL)9iR?6pnWwHm_<w9X6zF({{|wd_)~a;w!GT3#w#F(J|zLIb|fc7h=smep)N
za|z|lF1H1VuXU<rA`I~6%$}f0G4=_IcDO3HnWflIFe%W5vy-#9=Ga}A&QwUMG@|Iv
zF~|S!v@LncUtvzyQna?L_AVHp8P@YBHqBEHK%CPQdwU*kmfet{Iug{W_BJ1=J=cqC
z`fNtcy_Ldf@e-u}Sh3gmH4-({Shr1b4{%?q{wFWcL>0-s+<xL4x}9Q1v<^n$iV_nK
zvtO?iX}7jTXN%roBjeC{m~l%B9%-v-^as{x1SK=`#3I89b{Dg}42X*yR0F%(s16`V
zOrlfL?*`2~fJ?HPzCZgK<R{dza4hcVff?QoB$^(8edO9@m^&c989B}1|IaqSaR_((
z%rDcrE=#L#--KF@@L+`jrph$%%$GQ5qQPgATSp3h|L^<=Amr+;ALV`+_6varXCE~e
z=gunz!tgac8vIw&D^2c#nnA*`Ca~_2wFtXw4twgTL}fe%n6zCMUfcAu#JWma-Ryfl
z@2JsgV93sn0x3u^)*bRv#8J976<#FU+7DeU`0Y|J-Y6}}Rs>gn{aryQ5<<$dw2QkA
z4VNP7A|J(ken`vNpY*9ovw`<+0ZN|?J@8r`!=;ha7p1x(uSeTp6Yevu6`bYMA51Z6
zvMJcozEe{}0+<Yc3}v@PnNyj(ahBcm=Pn~};B2iGaJ7qdIV6C2-jP*qaKr;+Pn!ee
z<`_2@<=@a4ndpk)%}t|;sx4e+<eo3FkkP5Ri%ju70Ok4nZu3GlI*U*DVFM1t2z4>x
zJtEJa)X9_QRf+?@PFKILvIzK3Pe?MJhxAAaVVfO}g+cOI`eVnfJ;zg*c5O|mXb>L2
za=1_?<?G#_aL%z-bkJo1>9L~^{fHBq63%YhV#vSvdMXe-0R<qcpY}QZv!;jGTOUoE
zzkAhMQw(B))M6)D3w8jEx5~|U^~F7~fiOj4T1{do<KJ+^UMxe?xLA@Rpz6hq9G(My
zPeClP3DhO3j1g#(v<^5DnbBEK2xDm<vV}Pw(3PzP_C5E7$&E-!Jo9asC^<m&qPM#g
z2;wRCJqbza+bq8k29!FtJWuXQEc^bgsZs@-MmMc^pR-@@K<!t%yxf4^=0;_Y8CekJ
zj2zlN#t$hWj8><&_2x1KCeKgD8dX|(Y5WeXyf;5QvA?r^wSHYa@)uR`3exT=AFmE*
z%Nv)<<XM7HAY!P3hda8?5s}AGzC6pp3fX!oj5x^pM=lETX#qwlCHSJN=eup6%t1vG
z(bYgmysA^`aGryQ*(hg}i3reD8oXjniVSmNd)B_6V360Zz@O<&Mo5|N^S?uE?8|(*
zfZyd`;{1!bG7<nKM=e1vhTXp`F3Bl@-z{ClD8;_R?#$V0owYO$kOz><quw!(MEGUg
zL_y~mdc4k$xjn3(HxAUJ_2anL^tXjsqTQd2)4{x2_E^O={Uea-6%5%nC+c>?-Nas5
zRY|54c82TYh<&zBa@EKdCydN&z)J=Kfk#Rvj%8wn#Kw;-3yTb3pd<e1LG)Ij3NNCu
z(+%uY4?(+claZ#J<XdV8gZ{(>ksXD4=6xOW(#n=)V#D*o8ST{T25jj8@nl2Fa}0NU
zXcc~D7hr5rZuL!=I3q<g)8)1?>e2a7XRgqn5eW@V`cRbo3HwV(D}iUJVBpoShm}O?
zva}<*)I(gwfIXwDviq!7_#?(e=&?k<asq^z9u$&(E>XtS(N`EYz%#}TI(=L&9gxp#
ziv%_H+E!BmF!Ekh6Aj`I=%Znnhq&vwCBJT_Boz9+WY{~0{FV)vo?vmER<Ef(Zt~vY
z=yA~vfM}Pztk+<3x8-3WMVEE*OhRzs-LS6gpCJ7GJQx#iPP9{)pu;JW6si3*eJ$(k
ziip7xZjO6#xuxe5jd2~TDY9Jg;ThUz26~%_3?CW-TglZ#C@SRXMRd~M5j)jSu4C%M
z0?d)e+uGuLG-oi@0(Ca_!;ZY6s@3|O4x5i9dA@afPjRo<vUiNi<G|@zJ&8NoP;`r*
z1ba*~Dh)!F^2D8PJh!#8ZK^QsJg`jZogoZJ%f$(;+^J0c^;asDwxO9O83$~MFQy<f
z2$|MPMtk%{&`nSU68;Rkme<K#bo#Y-ga(TRrku5ITacLHA?MOdX^rO-nk=@<V~{mv
zP9~kVFmJj=BlSdoP)8)PLJ-#xTCuFZBRP`;p)TP6%Jl+Ltn}f78GG=#Er^qgpLjxv
zJ0cc{hSO(-u?l=c8`yzTJ}ZC>md4nJ#*W;Xw|wz|L<o*NCPTs-eAWS~jo~orcr-hK
zj%q*J1wO~Rw2_o5_+`b7!GVjhFB&&Wb}Xzgw6KcD3-8i3{S(cjtLy<yK9lLKE^aDT
z^w8udqno1HF{1;#FN;J$0q|!O1HJ<($f!86HMJ&S6-?MN&*P;UHf4H$b>I!`O74db
zDBM1(ZUlvEOpjX7U)we3Sfe*jK9Yd0ySW-XIbB~b`oFpHZs566@Td-IVTh$VhA0|C
zf9SJe4=cAA{6Lv1w;lL{5{$53N_`MurQa`)*a%Uic(~zKzo;uMv183Di3#ztebMH7
z9JZ3!z!rn;HT6>97oIp}Z_B4U5<p^Rk0T0t9WauY+VTAs*tmrpgqm`UBO930j}vN$
z!abT0H8<W+fygD8P>N>w750Ptg3;^Yx%OV!oqQc1oBIjz(XpI&6pRtTMuXIqUxY4n
zLl3hXl2d1)8otXymC3C{KN)wstC4q}c|2dSHrzyt^6!%;p9HsGUu=xEb1*zz{Sca@
zLdf(shr7PT0(T@Ci+;H_@ghnr|AIP_a6=>SIMDj>0(O^YH<;C^!9mE%j{)P^L6<CX
zP9srx79N^BXx5e!G?1(A$8=y)oclG1=3PaVl{G|A*!q-UEGM)yo$?@NgZR<tYRNGS
zXO>?+;8X6G{mTJ!V)qvXnxTqy8CPHXms-E$a;<y0rBokXmL$p+`?>xkxVnFfzr2{?
zm^(1G3T1l45}@=WVhCwK3J7^mb0+rrWMua9dC3vFYysbV6`km0+iW5i?b1^hD_^zH
zZ?4w1idp^Vt{e=yPpTrjaIt$4@b~mi-lJdz{)0_N{2$(dmWLL5Wv>lIp@W5RT>2C2
z5Wn!QVkf@`RDfsPSEARRXMN=tE>$vLoxk6$n!X?GYmPf1(3m`K1rH66GHO7u{~oy7
z&J28&BYe+v7n`Z%7`Am8q9~f?<dhj-R1Vxp^i{x@F0zw5zE=ug$3)_P-;n<;wk5PY
zmhOnzKM=(zLc;XX5LqL^_w=2MzUr2{?awfY+#x@}JxR3WNXgHStabFBIQS3snhxW$
zz`0mikRy|wt1n%B;C^iz0AZT-IMy#<3HfceR_B)O;p8Lc7DgP%FL)iE)&fBfLchY?
z=Uz^o@$?$Q<(02x_{2wX5zbQ#8aFtmKCGAz7s9J82Dqn-=Y>N%&P_&gp`yWVOA~1m
zBhel$ej?0dYB`Tv+^+!a*5=2O*dp07$^=|ubS|0RLQM{mbbkv@SiZ_<rWLPxQ7cmx
z#V8@+s?);`&<2J^v}Uup@?Q(7)&~0NQ`8|L{_7>EoPf^n_G`~m?*;p>n^9<+><u=O
zId4d$y$}G=8LYOoVakKJcMggbJ`yD49d`zm^cou-@BcJKzv57Fr?O@bZkh}1-9xSH
z<i%v%8q^)YdJPdbrjGh1W}iHLr<eUvhaSnho2|Zk=&CQrrZsKmr*Z}g<bFS0tOk&?
z^oF;n?&daC0-Nx9BEr*5GDL)CRP9*i+Ef7o7>-Gw#kEW5&Xq?J3mypZ1*_J`ku07Q
z1Wqm$rUsDUe`Ep`2TARsF$%c-fv`gZzmEzvb+v5th;!gEFOdl)+UwLoXS?3uRBbJB
zi+WXx$>xUu!sP$QmMB&mWI9achkPYf$oy9xufF+{&77oCs!Y^_`_PYO%$l;+?1vV1
zveGhH*HZhI+uFGv*k8qpc%w78A|98MUNv);%DwgNrm#g+NcnyjWyOgRQea$^3Rsz;
zz(k}iXR<l+8`2i*G94oEgI5;=<@+5()R6&sT6x8x+lNLLB)d*889&VHw3z>B4m)S;
z3ug%XA;YAr-;HUfF(V`^SFdyd{n7p&RpMECJL!eYA%qrVMQqDm6TlMe$bj=?MQ_)-
z;;NJpXe{;iR#fqA|5+9<r&=v)yMkEzz9&j_Gr`<~jZvH<f@GGeGX|hJux{Avv4VBi
zxD+LOz8hH1Om}gKNc49OlKYoDGuLx6CA>KwY~e@vGOj8oUVD}!#YE7oI&S(pRUK@Q
zH8>gwR5j;YZHM89I!1uWnC?Kme0QN4`ak_S%W*Nmp+~`YbgO48+eozJ?4(l5npLdD
zgHL<4sCnr#P+*VR$2}_le%w}LV`iu_=1$<CZu|AweKR9P%2(5;AeK1Ou1hI}3OZIH
zIf<RV%4jF(pvB)pI=h~gM1U5{sAPfUMIM?XztQbMA?9u)TM=b6^r0IFq>9=aAL$=7
zmE2xv^QHNV21KYNhWevczH4pzzm3Xp@Ee6^9+lAzYvT(9Sw!QNWZ4CEAtG4QoIer3
ziKOS7-kmvY3^kSg3RB{X&8dx={&YOfm45%6|MpxCOCj_YO3aIo7;j_>nXWVT`43dm
zb&9lRa=HaclJ8ioKwzk|BAtMjC&J3jmjUAy>Wr9jZ95{NJaVlGYY44KU7sr9X^;FA
zO3HrabWO$GTdmEKKnDDnec4z%gUXp<P3}NRmTgOE52XQ}D>t;M-9N~Hk&+AY8r(*X
z<#7G@TNfJh2Nr&0_yI4uFNcQlsQQ!z5C3LsCXjEcaMgt}&Y^bAH%GKNb`6E=Ov7e&
zvM3jlmD6Je6nZj1;XH}b3Ef5F{HN=H{S&|N8Ts6=5uQb$c`n@=+kD}mksnV#tS15C
zzjdO=J7(^g>PX!`=fx3MTtq_ve}PcR7<*2bMPtNN_<WX)!6sc5WnQHo4|G0hA^uMd
z<mog|H%c#Z806Yq%Z(5wO$6C9^eg~qE~u7Xs<hDE1*Yf;#YtvnX1NjwiDMt7L<0~$
zf9pZ;jzpyK-5Si<E`&Tx!Ws7dteO~&fL!~}a9m!ZE9BCW!4Yb~X_a=THd(Vv2D3Ix
zYfm2z(2qxp<eQrx`_Mj!I_scxl|PCw$hS!wVSJW~=o1HQkphxz4TVY!m6d?UpXa$w
zaj;(jZ0JO+CU#6hycJnT0>kNCiC8Ti^Pf8bN&NPMlM6SJA)-8T!Xl-y&8sa+MmA|+
zh<W{K8r;`r?`lAQ-$k)hkJDXy-mB^&FMiJ@pA@weoQy~_E>W~_PyZ#kR4k0e#Kafp
z9<~u^!0+Osb2_xot^+5m<o7DQ@?msZ^ZnwqAU+zBwFjRS?|N@1*=eM^@~b;=P)Qgi
z5yjh+TqcgLAy=$`844crecGLK_p)ULeE>E(52|G##n$@`rgg5HFelX5(@bGh2Ragq
zvqoyY{IyW~+nfB!*52eMLJITxd?u!DELD{s`p~ziD;cgsa}2VR-A>5ddf<c;uSM$w
z@*KF@IbcC(a@cL->1(yn^S=-VGu4?jd`bNEuX*f57ST)Dq{iioA8Qx_`P^OwM4a9e
zitL=UPhya(^)SSCCy;BH;0+^&N$3<|TWAPP6<y-6OKLP_;e<B^pd%QG9W*6~-Hm@U
z<IvAeluj*CjLswC2>eZSy`<5pT`BvP-D3-z;0M{U><&$EB%AS}Jy<+slS34Sul3Q0
z&XT-$#UB))0CThwl#5Av3sb>2_45i?Fu<XwS8@5AZT`dLz}0Z&mYcLF?&JAmrWr5Y
z@G86S91Y%<jPX{oWw|sQNi6G>YzByW%wQ*p4x%dclyDtnwBYxBsYHDy@b81Yvr|vi
zo*LbkIvi*Fn(v&gLD#V4-a+#LFS>5jI>Er6+Ksjf?1+FC+$A2&w}KnaEC9I41BuSH
z^4m-VaPo*@4KtxL1%%=V!7EWGh-(rI^77H+0@YtUOP}(>A4*3_{z-Ym%Xbp{BCZYR
z7RQ&Os1Tzc%t@F$P-0jMlnUIXp~us!Jj@zW?TR?{C}^5F(0bzVf<A#<%a}XN1V0f#
zlC-!_?Em5rE2c?Ag8+6DPi&;?wR3L+^mRXJF;!lIg_ObJa*pF2)0taX6BOAa6GiP`
zJ;#n*jQ$U@dUR4#37+{9g@3$R_6F7gFQTMCu~Lw_Wq(CgY1%bRuzk##PKkJ4yCzg2
zJJdXNip9|mSi>5xVaQ6kDe!QWNY0-mCCg1uFMyfGCoDPfnCt#arr--l{2tY_w6!-v
zr>G)1?$XbI91KYO58D5l`fN+(X<;5F{iRTx9SGpL(1<!GmB1t)_*R|U=SA$&mn96r
z;1fHq6<d~9Yvk0beD1EV)KaJJYN$+Ns2q_rDG)hG6~%tuobD3yqIlW`-4vez#7y3d
zz=kBg_l$mp`p;BM#XGW6CZ({#Y?X>|?V_g6Ix_skRy^;1dYs98QiXyi?9fv0?eS*s
zqBB8acr9N+?DM!f$<g_P`oOt?cjOLYfe5{tSr8N_OjGWbl2W8o20dZ7@tSk&+pbgr
z%WS^RZM}Y+7VNiM^>?(mHbULU$Dd-V&h|Y_y-eD@cZWIpA`>Bvv)6KLQ>O2Ax?q+v
zB>oxfFlUx-><kRIX6m-Z`K-wzSaK^(Ve|M-dbHuu{(}LO*9N631SKAK*5Wb`0L=Jp
z!Cy$5(LQek6Kt8YZYJ-+tMU>xq;w52d~t{bDF9Yd^y2i$XTQsj$}6jXRnau(3l6%N
z!^1vU>-{QyEtJEdN!+(TYvgnkkV|lIXu?dJ`R7^>Td_EV-oRUUNGy7u0HSSGzJT-~
ztS$&_OQ+>blKijH04#_6@C<=L_&EZY=(VI1rZCI`fq~%NZq@=;hGi|l&O7d&SY&D@
z`>_fkH~u9$wF!^VaSN@6B&I_R#Er@n=uPeFPw!xVNs&f1nnx4y-<)C$W2H8*J_^8<
z0jnsu4+BN7jklA`((475^=AexROB=Oi8?Kky2SkVotn0S!wc7{%yEIU;;~!YNBmmM
zn>&Iqo}ML~ZId)XTg=P5&~|%nDi>Q87pbpqJW><X<~)t7((s68vVzbIS-yB%VXj!v
z@g_ypHr3uAIT2`^UFGVmL9hUziP`xESnDVXZ;~5Jz)$TBzl^DVpD`u(S5tfqclSwC
zVM|W&sn~#_vSYREFxw95M=xMjS!M~G_|7N*cX_<tI=fi3);KSDb&f+lPqkbWqo=sT
zmLZ_SgtF=bDQLnL&rYKW*?4a*+WXVT2Pxd?f6u%a5Z|RkMtK^6$~|o*KcdF>t*z*!
zoJ|I!fe@9KqO~1R)*vsfAlx16Mr(wUjVro3J(x*jtWT=o4@ze=jc)}8SZs{s#+3HJ
zb^SvwKQcj86gRi*_5Q6F_E2ZO)_nTEO~<2g>oc6(+@@D9fG4vFBtL>pT)v|?_7e9(
zJG<z&u>TSP>?ArdH5)Nw?H+oEZC~qEz-`IK!6T}mVCMi8o`u6-ZGLD}A}j<6IyB}%
zcH#)+l6-S4_X_QCcw+!rs|>}dY<ym+iwGoQG6r#b*rsJ48)p~8^5u_IFwIvW8q!Bu
z`oS*1Sse;G272@1`Kyb6$#JoWvenH$YAk$%?W@xfTCU8W|ACiOJ=K?naTh&OU;w2^
z<eiY|zxdqr#7nC#VHy&MH}hSldoZWqwYBFdhpkeA5j+Zvgn{ErVeRWD3gDdjI-MJv
zY}(B+T&X+R#J^m$h=Xx!#S27Hc?g_~EKnOH_MXA}MjI-S03k}RWo(#c{$$Lc5zAM{
zo#xn~WS1&rQz%?2EXcJ_96IqvkulA{yIT}z?KVe0MxhqXN&^aVa|4e$w=y)Cg&&3e
z^4hU$nPbj|3_b?PzKb@+!xxysgg=rxX#HEBNio)NeI(Yb2fX&Gph$0=NlD6K>r^_L
z)B08=)|`YDq%6QMop1`v;1JU5v*%K5&bA~*@ZCcgjcF-gNgQnc+n>g=U^_)$eU})G
zkC8Y21tejwxIg**;^DEZO1AR!n$a&G*fRl%F~Um{7ca}jH%mAd-}a=``*jXryNifF
z{e~iXyC7bBD*NIiB+x-k=?z@0ERF!?vE`NyEjxx8l>vM<03`?;!YEAr=GXX`rT8}<
zQ^DHevv`rMnT00UQIQ@R&eyH!+l+AWoQF_9+%mL=!QU<ETENU;r7g+dgml+1y7e$7
z=5hZalH48zP2(ErN4zVrxF8;HY`>O11bNr@!^MBK!tqG@83v(07_-LZ%5jlNp+T`%
zgnS28@+~nM1<MNk>X01B7ekC@2RaGzQIL^^8Hq+BYgv&kQwaOy!h3}OoCntx8##?^
z12i|;htnfNtWlg>Hh8$N9sD1R_E|ChoHI*Oe@-WMEMEK*3@A%Z_{4^QkA>t>^6$bC
z!o5XwJEVDa!uF}J*w`2HvAZm+|Ib<h3?VE8TA!~uC-Grx&$pgrNH~3D_>^vVa7^0(
zWIS<K8;Z5~S_F)!Y1l4WylIhSd(x?34*qj`<K}s|ZryV{1yM$QEShzrge`P7mv}xd
zRm#F{qDLu_ZcC}Yg*Tql?S^m(Tq`yqU=AvQdd!Xxfb2jPlR1kq=O_ZXj{lUu5p_>V
zu$3&SiaFQW^7`;1%`#~N`lXZGgxe{+(@8F_`AYd}5NUKa1GlnS#bV3bh7&KPJKB>V
z&U(fsVJ73Gzy<=X_5Cnu9sMKWi-NYueuP0=x77f(P*c9b$KC$<ueRfe`TPaw9C-Ya
zdGs99>N!(KSAFBOh)BUa|EgFRQ;1k1Od0BoQ6R29t8q+)<nd-7w4Y{5MD<20NaYP=
zB-NlQw%k#WBcqJtChv-w56>`}7(Wu(*a#zpk~T19q-x3U7Oh+twqZ1!kh>Jxr~0G&
z8MB0xH^SI2slansjl#w_vJj4thk0&HhwAb=#RnQZKOVg^FC_2qSVs5ME_g0_H2Tt?
zTYIr<qNGwEi-!}tW@qOgwbYGE{|-5Xq15f<ylstB=R_M3smUx*{Lan-(@y0QxG0T!
zftrIomRZb-(bdWg-VGFaOZLoga?YNor>LsDEL7JEh7dAEaCDR~C<GeGG3lF$)GQZ>
zQ+9c7)iBn=7z7>K+G1YvqKK>ArWuRY1RK^`3>VuPOwY$F)mUEKQ}pV}KxiaMYOwpY
z7lEd53f`UxMVDKAj}9f&Kmo%!VOE*GQazMN|7<Hhr2BP8I;uhqO5dEUY6@UlwDC78
z2K{gBs8?^`Rl$>jwZ*U6vk;Fp45p#*{BnUhXQK%dd?r8tE%74wD^TUnn3eNx0x-ws
zDYQZMaTEirD7HxQ*lsP@I~_yBo$B}Eme0na!L}_n^ut3g+rU|aC|MSG8_r^wgxnm@
z3Q0BmLD}pmTx2ppC08T!_Ji8sDx)Z^D#*p#vHud4=F1Qd<#nmcq&+!me=38{2m?$>
z`&D+3vl^jYv*^aSmkm?dveKx-$yurXp@GDYF#zDVT#TdaBTM*6aZtE=&10_QM~Ns$
z=wFo>=<Q_Qr>^*^Y{X}E@P$P#s*Z~xO?#HsJ^*R6O-~e7C_971go%5*;8eUIG+!i-
z9Xzh<$1lIbTN;@RIx&`flSKCm&YsV2lXMs7*<|q(Uoxb3EB|}GSRqLhNVTuyH0K0y
z911o^D(e*T`%4^5^w|kpaSe;k>RXa}XX!AIv@L`0;a`;2=Vo}6f7cJQNBQ8>=fBP2
z+6v2P`QEcY$<cF-?I+?r0TQK;e|@E_pa{5E^ADXM^5oQm%CtD)B(a;&S_9SfL^Xz;
zO1Z!`t{NRSx2lN=Q7=bZl?6m`mL;yILKGCxNJ6nJB(H8ci#9SPFE#wmcZaap76-{=
zuIHN%j6ZjBnprUexM&NgP7y~Qtd45s^iKADB#8MiwdBb*UPJJNAb=|}rW6N!iLDLw
zxjG@FJ#h63E$ODi)d!Zo<Kw49^%O3Z^jBv#QbS{QyN(76ZcWXlR-EC!NLpIg46Ks-
zz!YObawP}3|I#5by}iO~07uD{v?3eDE;054!(a2LWF<eFf7ub_jI*MX$k=Sm*SKK;
zqx@rtV1|a+o`>)WNQyI#7cO=F(UTab8@sn|SHs=*!9MT&wP(Y+0K(=Jzw@XeHdh=O
z4zd?2WG{bgk$=f-wH}(oG;7Ibo1<gOOCqybi~NfC74YA+biBm%0N|7VL6*wIMpwC&
zz@!sqNPS?4fi}>XOpA`RZ4Jy|QXEnTDh+9_oV|$6ZfR&5x?1YU=Smq^p2V6H+#<pO
zqkHmOptw=C;p~<{5LJyTJSdHs?lu4FR*}4aK1^!uWI8mkV@ME|h-=4&-JOw^;8%xs
zs{*H>i02UZzT<BhK1ye$8prb)W`dv$M__*T58BcvW2+p$+v}m}NBNb2)UyS;(%GRy
zU6Y>xB5#Wka?Bb+9@CjQPL8;q9?8vn__Su^{-PF<pBDjzAZ{%k(#|3Ig1=XWthM-@
zx<ogN@<<)L67^o@khmtpjK2pdiuB!rQ%-pQ`qb-*2FdGe$+~3J>xeNc`{T!KH8Tx!
zEgyMl4fI5ML^!ql@0gMax%LMA3!&RcpP2$FcmVFIy-n4p^+S-qv?KRRh@OJ>an~}E
zdBSO6p4dwJyz}x$JhLTF-9sut5%F0$HOFQm=2Nhw+w>A((0Y6N9)1eUBPINPN2A#K
z`0K@Crw+k)uHN3GEftM7T(g%7mzn1MQR@KEv-5N~bgw*63554|L9%gdw`Pmz_+UII
zl)&^f<m=?3Wr-Cd*FG`lLd#=?E@;qJRxIj|sL9;x(b2^^<yZU@p}mCn>(jtNQN&2%
z6p(ik_jYIy16YY~9MZwo_hrW=_s!Ee)#v#0+?_)?vMAJD+Lxw_pe&-Y1*sWJSe4hN
zLz9yIt{++}Y^EomplGXJ2i-7`%tg>8qly^}$f;Ss;|87;gJCKH3>s2IN~M(MEdMO0
z!8ve6Y1GMcw+fbx1LFAu!OB)jOpP_VSS=bcW|mG9|5nBRMYvse9u<G=db%aYg3|(!
zJu|*fn`7k`mU5Y#d#l<O^0{V(?;>YEGvR4}eR{!;mP5u8X1_sa8tGSqRUNn5ynnv+
zDJiVc1^uY<0i+NKc$S9=Jy`gk{e`k@@$jAlV)p~kwSOUrW!k8*?wj5T3d~J3?Z33(
zdu#PeC@AmdnLc5UuyNJK-<lre?Ij-t*VNkOKVde@(}@NAm2RCqQu6eT6JrQT{h{e-
z2#7v+$H{Gfu=plZNpy1}7e*3XW;LO6j)!fY2tJozTz|BP1kBiAb^E+34XtrnyN_O*
z5H*b)W(`>+Cfo6K@308HyMl&NNIwRjcsCX&bl_3>l;To`Ws-6T62eSOd#un_5*Ako
zoJh?)%jqBp?gt&+*MEsm)!TA^LMHo6eF$A3cD7A5p!uVHp!^1}w{1NZe#^{f4RP&P
z)Oh?B)F$1Y5^^*kUmygA?xTRPXHrnA_+G%ytmoqt#HQbiLdbcmeC|ViJu>Ner;3SW
zi@m+=p3eaZVlg){#s57*`_Q+iD)Gw-26muk%z26ZkA;hBTw)tC`qg13)-&_{^7s5G
ztRKzuu+g9s0ZZQ_4UO%9+3S5HD3%2qlM&i_*_<{ngCDTQJIl)*5rR9Y?7rWK2eKVi
za(sDgc821x;k|A-;NnoXpj;9*?X1Sd9{^y%hcqIGyrscjvU_#|XJ)LxXNO7w`G9a2
z)*Lt>Yy>W*CYQIjUMm=@6SLkJQp3=ACmBokT~~W#=pLTl3%d3|mx9kPQnYB?BWOk-
zV6Nw8*@91mG^9x&WPhQO{f}jygs<k_>D;&B!&q7dGiwNB3as$yBTO-d6U1*0BIT_}
zEYjo#K75e|U&kFsRCbkL3C)jjF{lf3sm<CKS%UTwUncwFD711DK&)J%pmfS8#agog
zV+~i4r*Lx{EJ5OQ@KxF;cz+!puf$j;dhZ4^ITjK*F0Fakkc`~Dc}NoVlhT5h4&RB{
zQ)v4${LR=CV$h0g&h=ySP)@#7atp>E98IpgMpqa+R0|Q+bD?#IjJm?3IVovMg2i}Y
zBHNULY8fSYmB?!&dF6Jod)f#kd~?e#C-7UUD-C`=I7&>&0RPt5$>lUKq9v!{RHZh8
zY7OnO9lm>QV4f{RuvQ;;Gw>dZ^xINM+T??U-kIdt@;&^@wf6M$&CfLGzy<~kM|g2y
z&#^5iDZM`9a~_6_3&^`hD+B3Q^WW{}is_&8p7WBpJF~O0dDDqa0}x7_MT9k0kU%Hj
ze|wE1hu7pDlNfx@l-DI$2F!J7>zA=0LD&u&@2WI(*4SUJUsJ7SLp4Oa)VVSjub}@5
zBRSaS{!IYI#yyhA-V(|p+dffXHRI*tY!=*(mxsjAt60F{l&{K<=6RU|>!8c0jpRu7
zE6JAIej&nDRj8G@T~T3g8VLeLiy#m9V&R(-sJ)nsL6<2`C*w(4i&z7uwYqBjCgc6;
zxWW2TB^DvO1XI0?h|r`^5?-GFE#s<Q@luJbN{cmk2-=X@Pd#Az!h;gsG&;hzv>-|E
z$&4?suVN36d9iN*<+?5Z$<P7kolBni(7lFU7iTR8+~<~UTW6nuu!k9&+Id?=Z2jXy
zOU!p*E3D4{>CCOD`%V6K7fWl5ELh;b&te@3(>IHQH}Cv0d3>sY*p9x;!5Qh|K`NA<
zNx_M%?GO7hv`&~$?gY4T2jZNz2#;VN3AUiq4xH~9hy0{jky}CH>&omTAC#O*t1ypM
z|MuAZZ@DbyRasjgWvRA*fz(PPzzg*g<2rq+r!h#N95RIBYJa`aqZA6e7csjuW;riS
zKSoA=QIJ;|h#kGB81&Z@t}R0{G|e*omL@IOR{6;3g;l}aPx}H!E$XKWz^ui@)vg7|
zi?JtKGPhQ(c{=D30y4q2|4y9erkEC%SwP-am(4spmLY&(Le}?y0CM3yE52Mirze5<
z+Jm_>b{cq{GE`yH)3G2n@nsL1xvhAx1-52yo~2S(B7OjySc4)tyrVUW>m0+>Pp)a*
z;!D~i+SEn4LH4PaaPLX)aSw=iVX_)mEq~rJh@Ep>QwV0bo(>;Hzh3`X@K8CmPB^@=
z1Z;~ppnh23ynhS=p^f+<Yt%A|piqccD673VDbu&?y&10Aov>>Yfjs|dJc}O}jJ1On
zro4{?&w<C~Ex@zUIHxORAkh_OegYj_B1V_}Ixlm$_o-%n(`h=-OFD0TSFVf7dYoyP
zn?t>Xz#8UZRN~<1L6+Nix(6v}Sl|V)gR6g5CGkaH3;rV`^K2);16)shcuAwn{+why
zDFM@eKb=c=+U|!ym6X#p>`P!{;|uW_Gb+af#@|;2?MeA$esOg^KdL2Y_v}iI3wNh=
z?H5ko5-RKs8o8OuzJ$!#M7$Tb;Cv0qZHfq6=;doUjO>$!uNCJhpXFpMh1VYSzeAe8
zTQazU<rR3{GS{D7Bn9%{zpH{f(79uq%-cA`>KrDORk;^$qdgX{{}2Nz<P}$|80VD<
zOY0CBMT^Z$^?B3kBhiT@btF?ZGanYqIn`8VnylVxjWIE8h;n``vHAJ%RJLq8?l;g3
zi5yyAT^4@v{MTCMi40WAv8m{A^tOoNGv!v*$EH0>n5X;k26;m7Yoj&WL;@_#o177!
z8SviQ%TKA}{%e_*FELbeUK#|fZ6_Bo^-5j0&qD$`uUzuBUYpbf&_u3IFEW-c`(Vba
zdi@sCeQ~9&=^n~`vTjzTr)tRF*VEPcH`q=ZES{Q?T{<avUl!lyQ-VlaOS`4BUoHsh
zXcU{FN@G6Kz(WS|3vyRwQw>Iu_Ak>v&i#9LQU^s&mGEcPJL_zwXtuuj7VEGvEQTYQ
z@`#F^z*J;fO3Ms9tWoVUbF6&%x_e@2)3Mjdel4!!E@%&SFq<`9^}9P}iOF7m`<_|l
zBb({#w?YGKEh~lELgxGox>J{HSH&jt%3?7H3k>6Xo*5I}g~y!&IZ@qW4ZY;t$6%x<
zHCKFfo44^aK)y>!5eeK(lgI?{t&9E)CP6r06AxC|Oi(liDCh)iaFqa;&-!OY(<SIH
z+u*CtPGC(r!KZMIL`oQ5?15Coq5h~3)d+(s{&eaQmimET5`cbvWUey>VbzF5QC<}n
z10PtL^;~OU`DeuB-A9mrS(T<L6~KYfp+Qmwhyd94GHYLd-!>4ZNF^xzA@d(&6!mPc
zkyGxInbONPknpb|6Eb<?GY;=jSF=4+3*dbk%YdfN$f{x8MwY!s7wL->^(cJQ<B0yy
z?n}H-?OOH9PM84JSdq|V6Jtk?Wp2!$Rce?^@XLFA&{Qos=>0IugLXAkO%~xbm$4}?
zC%>L@QW4|)m><B$8boeAXvc95&5JB^NNI`sO%v)D$luSL`f-bK7#r5bDcG{iEion@
zHVQ`m`+nE_;hsbqg2xLN0mNU|YXI4I5!RsZ!1NklqQOXP({>Ir;x;T=AP+gh(FwjR
zk0B&2FeGcZ$S&rbR8T8|RUAxmgNq1VrY<!ABOeEHMz|RFS`ryjmGI1`cj7i|0tRi)
zT=TgaWa2x39w0MvoNB94yRU%z|FVG5e4xcvGzt27bTLVbfs*#N0m|Wd#`o2gBX)Z3
zgv#$?m6+G!P!*MC%{DyO2>W|JxAxomO|bOn)_uyb!;a8%3mjrVa3m$C^G9(i2=+JL
zw(~-{_hc1~UIwuj7H)pXxBwU*n_phz$<^ng^M0d|Kktdq9aWU1S@Jm{9@avA-{8Q<
z{2WUy=X2iq^L;i?10LWmdn%YHWy%R|OtZ79g(_-&5CoamUY-sd_ZY$Bkks%cBn%-c
zu=9d6wrrSaX*UzZ@shf+^3;+1&<jd_A4;MTx-iuQ7zAvb`U|#^PZ%Mv4aS}o`5Wsq
zWS;DDFNgv~u}m+Bzx!hXcI#t@nHgXi6*LTvjc*~>Z;~9zzhcx#1w^I;pxwMzL15|F
z{p#Z9>f>!upyJH00SZJ-nYf9Uo`43UvVpz#?f7Q!OyI#WA@r1`p7NVZwC;Uw5H689
zFl}wgW<6=O&X@F;$9tS#d;_8Og!$=oo7_8aS?fDn$x<%Zea6gai|K(H`VS9=arFl^
zm;d}_{4aV>joc6xva2n#SLnFxq!nESfam1*IwffnBhAo)+g9|_5pSoLjE<$INF`;(
zS%S-EJK{~!ErwpKbq8KvGcRBZEFk<n%NdE`@D|LFGprMP(f9{QIU*&!a=#KOSy3Q(
zK8z~1SCKfe=z>42Ksk@j#;!Bjp1Y>ga~V>c^`>}i33;#07QrA}ZEvqA!hKTHr10<4
zInV!gi8sYb>ad!VmOHxW$X{FHLipLXxs}-*jrJF%8!9cn%VUzZ7N%5kliKlLa+m-Z
z)Ea1TCz$H-E76Q5?ccGbWQqTftpIPu7!#frYp>Ffiv4AY*aHU5CbkH^O=}rf$1Udb
zO=-wWeHjQoSYr)rlRhoLH5g`-o=n!Cpt7A`@doJ_E`CLxqBk4#%jbLXK*L&VMoRYL
ziEDy)eDZu7YF#mqiJ!A}&2)o0TQSA0LlfI$h~g12^W?{y9bk{{+Pcrq5O2f+eU%@7
z$G`M;>bo=o;kjVN%Bh%)k!2fJ2dkbP6=O9#VwnVV2AAK2y2qI&Ut%6~aSWlcetpF{
z{b(5tJm&HEo<277N#z(kawHn!E=;Y>D&U>0m5neX!Y>f>ug{vW#|0YM2IgV7d&(8T
zcLZRARtXGSj7oMQDEPEXQL#B%C-sEh7`Fbf|6`_i&{l1;<ARg;U0gh6D4(B5*NiV%
zH;G>-HRnw3n~rX^p89VC-iVnv_-42|aC$N`u4B@ar7*qsa?HGrM?IKX8})|yZ%&RV
zVrf)(zxL(Bhp$4%Tw%X`CLK~F?|0X5P>pdXi^xv9Oh#eeE)}|cIsm;e2t!H3bQy_Z
zvZ;O57%OJN2UMd!%z~9ochGg8vQ9X`*sX2iTp1#pyosb{^mFSS1M(qDQSMkyI2v`$
zCGJK!&rM9;<o%^j>!T(;4MObAu&z=QO&gVX6T<znd8m0b?YihsEt`kBfQa$2Tp}(B
zHXk^BBUk%UZa0gD6}Fa`Di`<|IQ1LHN2(yjOHve1aF0)^5%;Q={IL8nxK-+11B}9+
zvW86i_ke?u+UVN?sKi}0#62Sy`xaTA7#FsC!?|6vxwF`*J(hitOli{tG{d^}b2Aaa
zy61kY?7zeFRB0X@_O%GnxMgPbb>wBTB0m`V4f-<<lx`d?h3H<NRMG`QLJ%Tl0M0M+
zB%J6WK`31{TS@xE$cE3X$@0M!8llF+QmiffZ1tY>74GVhuU#q8wO|HJD+;OP+p9o?
z)!h${Qnt}^<3&GFH_2lQNYK&i&dMw9^}^vEg!a2Zo64S>U}mR6Bj|wAU=kIcG@zEZ
z*u~EJDu<;stL)R#@zycy3rh+qC=Y5T=x9`MRVz&nJ9P8nle~shdQvk?5+G4VVKvJ&
zMMI`P`QxU$%YVLUvJsk(4{^M+-AgFe!I#Z%`l>&xmffzzYQn_2?<GK402__ztnu}W
zrMBfOQF@x|(84A`d^W(j@73}Efu%UOQ2#u!gNO-CkEt2|`LDHQyt|Vp_9lksBQmTB
z=wX3xyml5=G(zrfDY-3mZjwCvIPOV&;>I<htvD^7ZQ<3%%4h?P`eFBIw_5kynQyYt
za1s09Y)Y0E*b``tUPJyaiPd$=oFbWA)1K*=^T4o(Mt~ZwC-7P+57PF3m=HVckgxhZ
ze6a9S(B)Bz(go%G%gXg76^iy-sg!g(%rrh%)nS;jOqTH$r6s=3eK1qWV)E|n7>eb#
z!R7zir3wPJdp;`Hv~&`Bi$CY1_M}^FT$%sG7BDlY;`f%QMoyZKpsA=@t{OtUJ)ksI
zL6z@QJ+_d7gP}8u2PsJxxmV+((dKp=+P5AnmiGHH@yy%d+leYNz&ogRc!%Zp_%+#6
zvn`HHbPx|Ijp935hvqZr7j9XZqfyfiPQ&@62*DY0N)fHPzSvFPmpeNZ;)ZI=xP<K|
zULN?+HE*d)PDYM2p^0)?DCIZaYgu|61e^R&&A(2e@yBe<I2i;<Zzvb7|D#wMQdjc6
zPDZT0zt<w|?&@7MO`z4c^r#p;W70xmegiN#and;Nm*o>8GloH64ti(C3DB##@;iL*
zwt{(%)<w<&aCSSmOjTG}m<#?)R|8oNPpvwFI3uwr8Rjp~f&#k&rVk#;e%_2yY6;$n
zqD>nzh$=Io>7N>c!0tI_E~cJ(M|IC5%Ry8<t!9jPZ}?{7#0Fv@lt<b<^SL!vVz6OU
z4A?7$@o!-P@BV2JUVNu!0j~r$YQ(lkAzvbr$w)<q<s?BU?80>gE;Y_Dr<RMkoiaiC
zVihEDcgx}$El%*|CG59v49_y)Wo%el5d1bUHBvQ#D=Em(Y;g#;mA2NekDe$XL;yVZ
z`J4NQmi$w0L~kOf14r4n_$F0Tq=_7Dt{Ik!w|zjnZ0GrVWP%;ELmBhqrz9zjG9L^B
z?n=#x&eSp?q?jEUCM>soG|e^r^9qkgf1rT7pJtlE-IOiIb$dbdqDK~PXm4@Rm9hMu
zSPYvoPE5u7-`F{N#sK1-SQ}U|QZg7)MGlKD6q8oFA)`Onq}KiY&)~^ND%YVx1JQ_^
zvUo2A{-k2iO-cQ#a7&~nyV<9f=kquo5lz_V!#JeV2SVJA*pasW45NRBf~1{!&Z~$U
z{XTrq6K}{mKM=Uw(pC@(5C%$!dyBoVaxnkd*@}(4*7u}>UsAOl?67fC1utpk0{%gx
z_)@8Wm$C2PGz*dZI8+ZD|G)~xg`@|LCYn%S$>eDOXNagIF<#FJTEG2=uhpH*zd%M4
zHxx$!;G3$yZSE|@x@e4sH6QIoyuNCFB*nV#CegurO*Qi%3Ur2zcgqza_x0>#ddK5h
z7JCW4efHqb1f8A<X`U0|WTL;KxV_F41~MjdKz)eiuS%8O98^2;7u&c&-1z`t7>TlI
zmdN55XXtuksM)@L{dP9~J5uKt^#}b*7`(c)*Wp`ue0RmVn+5gxJ?;Ii!>a$eIK^3E
ziZ$XIn{KJRmLTa?FD~B?4Di>U@rAqBJ#1>FyG=MBta*=&*l*o3l^E`9-MQVWW$yGu
z+h(x(^gY^IH^e}g;Gvbu1$~%|-oAy6hbxYc3eMpGgM+)FCW4q@=2Em{h)ABw9?$et
z01p0}OeW17w3}`Izjb9L8A*5jH9yZm-Rss3w_!8h3a;$#V|^T!BA(xY`1vE?tBBu1
z{pLb#V-lbzgjhg<zTetOqgc6=MoVeYu5(;4C}y4p4jGKUXBjOlno8jpxysw&W~)~r
zjEBE!8w+M38c!+xd|p#QEAL*pJI@FOy{h}zlScHxxU8LND??_V!*4T>6F>(Zs`gQ%
zOv8nd^oM)tY!K^gNn1e$2xm!rYr2#<{wg)wk%eM~eihmd6$-E38PdXu2%P44ja*&_
z@d&W0cA0WDH%`EgV;-?Aa#Z6BqM(DtPgEXXuV+7N6m51B+)tP+#oa`)>lQSCJzmn4
zKw)&jD-3Q)CfWmb@T5LOxZEu)2XL<Kwxx)k@JBP^h1JUv-?=cY+*rHkL7&9Qyj*8q
zS@m6jF*pDEigr<aw}nz|$5r9Ur{}9^t(B<x0YNrS|DTSzJG8=q3}d`)VU-ILvkL*9
zx4+^pFnTw|ENLm-FQbZg(70v$eFqC>;WSc4dOq63N30!9uORArKIBMIczT=r1XWw{
zPwYe1yCU%6=Q2&KF8%UOK9Z}(oF0n+F+k40n~mQrKtI_?ci@b(RGK&xXf!W95$tsE
zZ9v6v+5Q<<YQ^>JGeDI8)RMvL^M~TAkB3#HizG0g)Zqmj?3>!o;Qqp;6fK{fYO(D;
z=Vy1v)L75D^4f)qEvLta9E5Q#p{`JeJqs0Ok^n)c%&39nllCKM=*wa8n)=nyA&Im*
zlCI2xcLdWiAUO<3)H6eUmw{nt7=+Wko8A7ShJBHlApfWX1Ev(Tonxkkj8#D35;H}{
zxhLH4d)yGIZ&#R4aJv*WF^6xT#e{Dg4J1NJa9nNxQ`kICuF`#rRwft4MY_gjQuR{c
z6fic=z9s`02+WZKm#rT-3niuq#;$SPH;ySqJ;>KxNsq7vUb4SE1#rTtT+FH2i;@T+
z;zbQ03TXAMz=;ngr3U0Al6P_S7fdYuLdeau?jik_bNc~tvo5vuki`3ayA$MbZjHz*
zS1|n`@776jm_Z??0f>{cmWS@bGgKs;DfIB%RIv4)iq4wylZ?JZ=&F^~^9H=IO?Lty
zP!xosVP+gvL73oyT;Y+(x^`03+yj?~5u;=IxSpp<KiqL#{;Et~Dp0kSmMO}2k_R|X
zd;oCF=xOec*IRICN{APXTLIgX5HMmeD`ZkuXf1{52T1USVJ6xO$%Hr>G5}{Z7y?fM
zn!5~BjZQpYGy5|HXIi+FLi-sL$`1_!@WHg<`-ufd2y={Xyy|8DUh7QRF8BtzJF<1^
zLgJ|%0Q@oj=BA?ZuHn3JyS9V2cs<9LIiunB&HJlOprhuD*~nEWB0X=>Dbs=Jl3Iu#
zOr1vUEwq(j$}60-@BS!FZUZBCtfDJmrY`ZR$R4h(!OnV=n3@3^F`z!YLkXm~RG}Lx
zV3xSR!VVB;1^*S#MdFRnO2ps5HuDv)z)nRju8I2>uwonY$6!1;(GQ$KH$9xG@{X!&
zjZhGiJ5)Nmi!RpCzUvO}MR)NaVsIOclddj~Rrxt6?PO_SH~?gVE-^$N<R@V-Pj_`J
zX2`O>ac9GG!<uOR&mGA=5Lv>r^!UJ2NrVTl<PQJtC{>1$GZL`|B6de+HzeLcf*b>i
z1eY7~3vM=yuMfWL-I3x>@OLY*#RyMroMwqn3Y435TTr!<xYQ(-i2oHDMkmxyZLAWY
zIeo+NW}YF&RYC_E4%EK2!2yR)T{?e%2+{AkA(f8aaWvrg^YTXT>@5G`sBB)6)3+A}
z(_Mw;JFwknxL<<B;kd0D;s8Y~?q9+j`6D4>2j;zk9C+>Td9uB2B<5Y=8|FN`!|@yy
zpPIZ7x?*{J5zL;KE8&-o35hLD6w?#;fw$I3KN~zbWTTv=Mda`f=fZ373P{RZc9E=e
zs)A8uZS*|y=VROa2~O^x-pQBN-W1Sx+mneSpBJp$t;Ln4H<Z|ECh@3}#`p2Yk<CJ-
zn4h~4f$HiOmMO5^#ni#M+#Ejb<LQadb;5nop4g^!j2+DCD7=L(gK!v$*_!zPuz_H<
zgL~3SArR9ohNV=GyCuJIfi~YruhA^zf%N+Gz6`#T?|$Bdg2ajie^{>J1PN*Xvl)Xi
zg*AK5t^Jgb_|-)&M8`|Yp-iZ?P9x&QMClE!+-QT{o}^YS+1;`EXm8%f`3Lu}VaE(6
z%!rcoB4V!b^!z7+^J|WBb~crMSdt2rMMX$lv{LzUd|Q-p>EL0-=4d_2jlQrTZ{#u&
zPQXDz!fzRR1H~~Gw#L~(8<*$V$@68cb@{j)W6T){S2X^mR^kG1N6+OPdh+5go-!*h
zZ{{GN;_L<?_qd1Y%Gq$&X6@i;-!XmGZTe+Jio+j(QOCLK3#6iCb4NI%q^m%b7i%RX
zGU*BBjLC;X+9c9CaSwWJOD~Il(%{>`N+`gAwD^^-GH>N=LfVuVYds-nO_ev!eYXsC
zholbVe@a(BOWEtl7IEJyloT|G^9lM=u7iS_bC8ec)?f@&Csw#Wb%Nl9;-nPw!{J)2
z>3+FdDjDVrX|AE*8_og$8b?|hHJ1R857#tMSDR0^9{9}cViV~wmk5q`%fmt@Ww3|R
zh@YusUW(b3k+>K7ew4-Ab`4O}yUl5~=z^-}W-6SGQSYK0cD7U9)W4GgO)h0;dHIw$
zlP>}i5AAQqoui@}G92EWY%??4=<p>`YKE31DG)ER!dfED_Yq47*uFIh>}AA{VTl9W
zIqpmfg}wU8q;@Ue6E#I(zNk3uu;I{?o(qq$O8#4r@VF2Fjd-m>>-b5@4fz1jb!JUf
z|2n;ql!IG^3lT{mXXda5pyo)MA=j}gb=A`AzMol?!5h8nv7F>;7=PNEpr;q=Q4fAx
ze3Frggd6&BkG|3|5k!Cw<gS(#R1zUjEQ^N=(hK<syj(;LWX$0dnvIQo^64<9Ft9*$
z0)?%yFT1|+NLO4>&BkO}I5$;Hjyj^b1n}`v%Bn{=6Xu6YvC|~%%qmqJC#n2E814do
zqw}EC0Y{aql;^b;Jr=0qC&*$9P@|?H%0@g6Vmmq_*z$|cVewfIy!Q!-e<m0@&3ap&
z2jtu_qA&YmyL*HHUAyts{qlf}yntTa7#H+v0>x@Zwg!MgkzFw6G@dYDX~|NCn5bq$
zh2ykd`{E*=e;3b_GuXqLF$@V`Y<|Rne@B)~4fSE9F8hHdSfaec*r_e1@Y;~I@vv8~
z`($wR&SMUs9G%yYFPGT#;UupIWu}$M)%bkK%-x`j?U~*tj}BUq(YKzLp<;}azW^*x
z%~Jk(CE-8S(rosTfwvDz@aL96r3`C>YkOmM(DftfKM9s4y(qh?BXu=a9aP0PI`-3_
zEG_3ZePV3@O(uNUjPZd!n%ZiJ_Ee?iFrsQB-!49c?M4Ypjg+|wV)an>%nD-7FYI%i
z#A~pli72o%I?%n<wjPnLB^QtHJpPX!V42<z+i)snQ6u-45~MS;)j4a`c#>TSGb}UM
zvv@_CQ=~S3OVE3#D$1w+bvbcYvt@Uw`v~or{VeK#$ButIS{RIS8jW_u1=P*Y+TEOT
zb$wwr;iU4<1=!*u+QNTiH+GZ~Hs_9`MhE&hk-cP%LpEOx>r<dtUp|cB{cunaF^)_X
z&{e2hmuU~UCj>L7tDe(qA28QSzgaU(`NUdg;rx@-!m|iJJ<0P8M-Y`n*;{K2h3|$I
zbbfh4Dlr@Mwxz-&%#;yyW5)E#rx)!<kdb1SgHc5pFI{<0T?KW4@G-!Cyc_aYf-4qH
z5xofUFOMdruG4LDo}q&(knIP_8rT|TF1tNp{=oI@G~n9YZy5n&d8F*qa_dQj%>$Ri
z#bXyfH?fD>B`TF5(U|JhU_0@{dFN#$|F<w)hMo<&i0WAF?8erPSbKucw~s`D1tCy7
zEX(0BOg!-ZM1ytj=aRicKt%|FcZd7O<Y*q_MOwVL(M>2EWoe9|`v)6|Nclt6NMpkY
zVgF47XUf$1G{=&UOqVFK9a-=aSdD7YjS%{9ermT?JKy9bb6(cyR6UXRlkL}U_Wf1)
zTzf_+W^nO<kT13phU&oC!pg+{c%ZBK(tF%Ci2TdCy<$5G8L&!#59NKW!3#C1U3<cq
zVzfRezhNp3r6MNp<UqsIN?}D;xP;yl^~mA&-s>iM64^>q<DD!7=!A_mz7IC625(S#
z_tQw}a)ohBqpl>T8&rxhvT9itWc!yF+z92V_*v5XEC2=15VZd_oYxW-;lUiHe;lO^
zr1HhEq&wc<WR?X6%I1dKk{^K98wR;2Ge9A)WEbc~_QeFr0!vakHT9Yfj4otlb8f1Z
zBVt+$0B6>j@CG1P7o*xw?0COaSCj2|W!<6`3conVJr#(@Wg#N|xU=tWly63%PtJ~8
zT&Fbi9Io4d(0dqVI%An~zlDxpCb9cnRr635zT#gbk{CT*{WTHmyXVK@K*0~c7nNmT
zYu-b1lGFvWtHwQiNQ3iY+~X3J$OcaL*pJTwjh6|Rg4>AiQuk-ms5CbgB!#vffqco?
z$k)+jf|SW3JN7$5L)PaNEL^Qv5L0k1N&MSf2(zE!qR|VjFDs!fJe4i{YsBunX;4R+
zekUzwdh1?5%x2bdZ#LJF7GS6VMwoyre?lCa{+V~-Ur=o8$dk0o^(}~!^m*&HsnsGI
zgM3lE0xoBC?7GK5GgAG~i5Y|=8tpG+RQDqCtvumB^c0Lcy9YYkTq>dr8-YFpeH#r1
z)G2H%<<WoyRa)5>W55|zx;#jyaB>UY+GB-lvnUoOM)U{t#2cau0qu?l9e6*!HVk3G
zmaVd9(0vvl>-Dni*~bUzs4cVAP*h%xI==|nenJ^%Frva0=zFyq<~k1r^XaYLt&*jj
zZ$KnAK515qVM8#b#6k;-Y$ez=-KJHnr#lhkM^cecd(Ja1_*{c>hyD@|?l?ow!&*@7
zXfLe0ZQs7Coz7sMi~Nn|gig9MUqUL0NME(SmAvw;M2_mm@!x?NNn#G>4YNAlt{{3^
z*4<=4s|x<HrE}4m;LDrRVEJo|<tXk{EpxBYolRKfEAZNPI&Yu>LdtM`E5|UZ4D^th
zVmLsc)}$7J%QDJ@$i1xy^8`o|LNPf1?sS8xA1;i%6C?|S7sLB=y#5<S*+tmKLChUe
z&pl@-MYoeh(cA;TU4U-s?T^ev0#>e2BN9zlga?Wt=4(@3;B?vM&itR>%Wmw3nnxW)
zKP1Yk`Ur=B1H7WG&Gi#}{U3F5D9l`Awut-hmyhfA2|-6n+Z0`h#kX&98LxWH1MQrg
ziJntNQ8@F{*1ePfdKA8O<3|+m?EaF(3XPi+_tgY-_a7nMVv{AZ9=l=))|j)fr~Gvu
zD~v3K^k<%V$!7N!YKmaT1Eagqf~;(6ZKwYCiDK)_7&Xuv$Toq&=__}Mn$XHeol+y|
zn}&A34YUyRQs<;Z1w<f3IQM&~E6l_jd%02@*v|itqL8qH^l-eUK=}Ld_FVfH=sy5f
zK7yM+tG_E}=w$CX<CPoe{x2rTH0gxxX%Eg6Fx}<_Xj<b-t>hE6H_V^tD&XGq=<UXI
zi8(_aH>AQp*^#NuIv)jIMln}cMIPQ^h^^PelIX;@f0Ns&oMTQ@J=YSA8_WPsBvT4^
z5ZmC;gOZhC2ux8r5=-vsMyKep*V(e4wt^{|iuL_Yv>VN=fAFEd*wlL$K30jGuJnmN
z)dzQ?v1dP2yH@tL$r$8=O?&6Cq_V}JC6@Ye9AGp@53%{bCgktDS)y5epJFP`n2D31
zEcDcvU2Dtr6O_2c9unT@+$?%*(4|?5rgj;fj<03WKUH%LBbi(cP!s=G#<NBnJodC+
ztG(Pb{HAD_(EbP#=z1ti5_nm?ccp3<{|~10UhMkZ&BPle&vQB>sZA$rW2M2^fH<CR
z;MhEgr>*6;YA^A$=|`UyJ3YPLR$SpAN89zTY!U&^C+(eMtXW@o7Mt=Hj@V4sJ=1hU
z_dBGq3<ktP_+)VG<NA?7NiB&TgfXbe)_H~`^HVISxzMV0{99tPSR&}BF~eT+dhI{}
zaV;H=k<_I6K4*Hrj&10jP*m>2vW7m4_iD%Le5TK&HnfRK1@Ae|AVpb<f&oDnH;=pj
zP=kr`%3~>p8O_YRQLU|o`4U*rORIqh6iHZfT!fE7Ym9C{&lPlS1UR*p4A0s(Cc6q!
zKTS8EjR!@wL8=S^I`3EFpN?paJiBv9Pui&*5ZW7;Fjv-Ub9c2#`Z%j~95JAyBn*R`
zlm?v(WT6En5V!;99(}%J@qDrN&`u}uoRR#R8t~55phT{_YJ#KlHX;0l#KN{Q(Az+G
z?fSCLrx{AB>;P7f^fu|I<9ku2!MFV&Y={{!t?!|1FIfqFz(rz{j`0lZeo80pboX^U
z&CXaSd$Vqlna%C)e1DMJf(cOVC*}qRQHpFomtst&sP38X5eljr7sDV-xS26Cf)W1b
z#Td@fs<U5*nA`l@p;qIhwD;c^DNw3PAT=7;Bb>+H&3|$m3B>b6XWVnBieRCKP}SA=
zz)*8#>}6|nXNt1$jqY7mCNc7U>Ze7@qxPvmih+(~Yp0lAUY6=mb`3PlpwBFfOEKM>
z1ck78R^?94({=xuGPeXfZ_N|h?4i%Va!3XX#u%Ynpx2P?_21TS>5cM0pv2+>Vf_NG
zAjOh-HLg^?MdVD#+M+Ag0vhMFFT=l{-Qr`cv{&~Pu;U3Ze1m!k&452WOxEP7il3LC
zg`!w@ZiQQcdz}s4mKicaiNKzh2wdmqkfXqRc}rP=WaU)<c_eD_mzs|Yf&^;c!b!Lm
z490#?Mh6|Z6lsaju%Q=7O7=9H7VuF)y__H&Zz3${%(tO%ru=wHqy&@O3puCeJt=aM
zCsp|w1m(XG+og*rh*9-r=hX(jGRW4gdUM`v#SkYCB%9u<z$3O^+m1kx0bjf?wKE;`
zOz~>0h8Z#6D~zRY5Ub2KcjoigniqIP$&vHanS5fKP|sbjhv!{>qQAl7L!?IO)1SUF
zO4i6%j-Uy{dP8P)MsE%>uN0JSd7)AyZ$XEe{F)uior*Zf;uiZiO@Aua&7B-ZRm}Q5
z>H~f%R+D_8k|<I~`=n|YXfqm@ByccZSTVQ~mgLnAG8w0%;{_bd6Z}L{h|i5L(k9tO
zD-}bALb6cU2Yw(wMK2LUo7|v4DI=o=x=Fv22Q!IM<r=m+k2U_An{s)bQ8OCPKLfFv
z^odvMW(J5wP0?8LtW5h2j!`}NHA9_pyQOrFMAe4Pc!k^0J!;jUU!2(ye;yJ*=Ku7b
zVec!&M+$yC5w2SpOZGd&;xpx4`;o*j37eCXy@D%AZGJPMSKO6RT|5H%|9ZDTy3fq(
z>&Hk0>goQo)qw4L^`mpMKtU(7$}P@&3~j;$U(wvuozoJpj@AY(faX+hjw2!`0gR{r
z8%1PkDk_f{nmlyVv#H$kk-<E+x&FF&Q9*d^TKhTGnEd-(fu)bu?Bq$3v2NSYfz(h#
zT(Um4iJf;T4s+|;ObFw2*A`X6JnPS_eD7%xz?pt-*T~1$WsBd|OdMZc|5be&S)@U<
zxX;meli3ejRbV7yrZs&_`)^q2-ia!Lfmy!?)#Fpujw?Ca%<Bd3nZN8SzEOaz(vEq<
z=6S+AsFgoyxc`D!U}=e^+Lw-Sp64t}79twGfW@D@FRpG+paNV^HIKF^?Z*gleU)6(
z%Bsi>?HpQ7a`zVrw8R~Hnp}76$_2hz52i^(jU#IC7DAM>M}7F4ln-Fma8?;({c|>R
z@<yyDGSB&!A$EsRxzM@?FpFdlwjU$Z!Z4$}d|WY#CgC!)0zK^pjP&P=p@y8c<`*RX
z=~;j^KHq9VG^|k2ANB=GgkSNsV2_v7iXUl2^ve<5?<0ail1%r`i&)@k&syh*QrE+Z
zOw=+zz9V{|d5N1=u~Day$Q`W7I2x!@x9zezD%HY*Z1qgj8tCWvm>>Hk`rA+*@KlY1
z>?`(xQj^*@kbH&5Q0Kj=;<6VW^g2qK)eOj`%}6^SuU^+xs6G1^Htt;6%m{t8iRMkz
zcbR<3n|e@xLJ151Qrc{qiPT~p)>-We0;zWGm8!Zu$O2F`ORKwo|NF!1hP$)47kcPO
zG;b+42?Jbra-4Z)FmC&O`m-roVbY#y#OEa1M6TnuCa>5N&)@Z~O?_mH_Vbq>ZD1?&
z>d6l4pvvrIH=crZ!rgLsHs+PaX-1EsF6-P`J|xRiVt*ybJ9`mBhTi;WQSF}R+m^3v
zE>e(>Zild^bfqr@Uq!wCma<73QUYMjxF6Xdd-&3*9lLE@ZYoV)!{LU&54Jge2SmvR
zdkC>s|6i(ugV7Nn|BW!=vwa6E8d5|Gl(i1oPeZ?7elfWBf4bctsd!3M9|m*NpC5${
zDi81GPWO1NhI_m64r|5@-0Zv*XGQ4kYRf*Rm_=kC@@t5`Ht}ZTSbP2Z2kQihaoRR5
z3&~T#U}DBt3%IW>OD(uiw!l$YhNBiH9f2}7)(*iVi@7BWpQ~V<*lPI;^m!%mjr90H
z?I7eD4E4-=up9lf4T0&#+DOD^jU(xdE6E@m%xFp~o6z+PQ^IhlE@0p%eAjwG(CS7(
zuB>EPZFx2|{MYHfthDH!XM?G_sGx+;2eWL51Y|*$AWle#S;-7=A?>fcxf#6AC~ZXg
zuzW-h92nTiDg_d}g<kUxT0m`Ce)p#o9rWh2I<mp8j{&60iKb8Y$@&d9{m!IN?y5dw
zfNB9!m-G~`ma>ei_K+LaDQgw9={PvTW)l1pcf1Qm>2;%5Yx7pVFQW^XE3Y(L%Fm8s
zUT?aSc54*HD;ua`r}LTsC5YhG-e3(AJ;9jyyE5TrBD?>KmC>S}6UyrNOCncL^=eLj
zxMjp^XOS=1c4McHp15;q>X`UF)o}5C+m^9#u?DA(IbbL%aN)OC4{aCH#A-6Y&hb1<
zL{k=(+1w?sxD?8=-GPtQdTPA^q?772k-goHf+^QgSE-l<LSnwobTIQ<@0wXDK;->?
zFo1EujFPi+iR$NVQhI!6$NeDI9Vi056HJG6E-=hy?aS5xg9Ee3)LdxU-EblLxHbSs
zDelIN&==C6l0|%EzrhfwbYhjb3GAnFvfA(osyvn2%=+(Qt@|xM9{k&Bwx9uP=1EdO
zowwqvSAk@YT-^nSV$t0aM$VG!u)#!(bK5@7VHn`@pK*FY)|d(!I*A4`%$<yO<R9%R
z{c>7gR3;^Rt#;!;jTr$ebRe}0PrP4es9X_*sQYmzU`2D{cohRA=BBOy`gf~!fWcNP
zsi-YiZ!WG^dLYNUmDRZvEsg1``mQTsPl)<EGUUe`rtg#-Attw;29m!p<kfOHT(|qc
zye192fVmUMp}ma+8NAH}&Wa!iyC5Ya<L!vC8ti)~=|Q_#Xm#ur+OQS_4&LLrrjWGs
z0+*9lbtgENLyT<GTIl6J*)jb*v#1HN*Cp4uDYH96lg-f}lt3%Tv%JRx^m4=(ATmf?
zjrrH^Qdc(zw?rw{G1wL|US;mmhcnL)xJul$ps^FCgmFwj&xtCJY%C;M|BbuaHgub2
zW3(|CpqjKW>q=7sgB+QK{W(!jD1W#K`3?J23UOjSfK521xU*=n&^9PGWr>~7f;MZ7
zJf>ie1UDbPM18otHEUQkJZj5A;Kdv)FZsvtHj#o|Lff+4OR&S@V5Q}z>4p13=#j2^
zTiq;Br4qrn`jelm<dzJYB~KF^Z^l5@thG@wD-@6cx^x!CC#uYWK`_b03H+~2Wf}mf
zwaHuRf8x425Z<Qs0Z-PI```vWkBhHL2+((7OG}YiM_hCj)6z;+&1>Q^F8#RV2*GN%
zv|JI%j@S362kGZXF(ZN*r-oBk=X}mSoT)s{Vgtt|k*_+{QT7{ia}(~+P2WZKS8_}y
z1+W4jO7O&wpZ7e@!8!oefcknxibQv1(Gz3B_E$Q@YcZ=#yl@&^uKN^7ycXkih4wVP
z@+Kq;%1jAWa!tYSGhI~!OCo`lQoq2Xv#`f<a^i$(OVb&2<fw&k+U_TLZll9MNySd;
z(YXOwgwdb^^DHHYY7rqjq{Sjzgt0uOgc#ru4L=!I(|lKCbEw|W-U>5Bc0MG1O+G~4
z?}fGW6OtMNroK;JG<sYo3y31I;ahX|f=b@?cZxmy9Lr@a{{(mX5eEmT3M6JBHMe3B
z{>EX3|3u@Q&NY@mPBTD6Q3EO!-)pmC2~dd-Ri+-op}tokw976KaH8VnassD;Rf1s{
zjv(1>txsQ)rY7Y01rnh4CdkL{La<$@4{??9<k>r*_BLt=Hd43E!^%TAg1=!R*Qme-
zAz8WD-zW1IYC(P(xO<AjBEgnr!&ZuG87~13=LgLQeoU0$xah|w#3%tiQXhQ1fCVX*
zHJCl!8o*%=yE5XgfeCEu+9VXf4~o7>9w>3f3$<HZU{jKVwgBpE&xP5aYi5NbI~=Kx
zy$gxXscqmDWqB?_At}^g6q+f4%H3O8m5VxPNNMIx{SM&a=`YGd-5#%xuhT+`dqf#m
z3G4XVcWDXRVq&o734rjCUUy{T+JU;_SW4lr2b)DQQmUxYI+tF$Px8b09a?+eguXWO
z038Erl;FWA@ZH5$pB5U&RNUqHlDeegBYU4^<YtAqWM`KDoPx;p&Yzy}s{J`%-~!w>
zbt*Gd{2Nqs#IX7>&H~-9zeD%i{31B=VxVV)jPkgla5>~0b-d1Z(kMOGdFeiJxa<P0
z5=-sEu(K{O_Dum6?HI#9cE&-ywQTI%@UPD{NIbJJ(U}w(uumFI-PW3awLMeXJcuo#
z(eIpX`&vmt$*qv5Tp4`xY^Z#s-Wpk~tIwlU916KL5f7h{R76ZTY_<?xorb>_z=GCC
zdwCS_R|fee>}iZW!{-lEbpDGL_C7&1nvk4DhS6GDpYcAO^S*A}DgXXMnV+n{h^4Hq
zbkqg)RHqwJO`;fyK*mU<l~y*JGv4*H<+NyDOnHwN{C+((q`0be6aCg9?xB64BAf6e
z5oistcsQ(8IS!*|(rBeh=2iZi@Pi!B3bE&+B7}{gANXWX@ej%I+lKxjoHoIDiRk6j
zmE`I=*A~9~bIGj6%TNOBK!8}kA|PLy4~Dld9<-i|?J6$&=jAA-h>>fhj^?)#q|kL;
zAhk;TL7Hhx+vEi^GHTBPINg~DxH3RT(bE8u23acKijM4Eze5N=mmP3V{o#;rarzLI
z8?oHo&^9ULn0=pR>V9OD%EXXYcO6VAQH9#<61{HO;GLotBoE$LOGvATd9^Z4NfYYC
z5~t}on;p)OIX_C5E~AbNjM0X8j{$-TL5=Hek8Qa%Sd_$gNUd<kqw?%~?EwkeYVSb1
zV|urhPl}Pe$fh~S!|b#qL7>uom-C$6zTG<8RBh>%s|>MOMrSq=U>-kzRfJ(o(HGs@
zTRWxiGPdG38P_vmFr6ya_~5`t$Jmroq`g+#wVhIDuFX--H9?HC3jYTA&;1#+<cDby
z6D|Ocj`9)9@)8k!_zrfDn2r}RydK@7`U_2>?t)!h@$^-x<9UR+IYv=3&K!dd&L4*<
zXx|5HKzZZcR>cbAv~Al>m(uhZ+BNKiQg>OK>QJynJZb-xnQD3%hEnF)X2uDQ=Sr!|
zS)3iU7iIL^nI@RB+nD*$-c>W$K%InER_cxr5#c}Q+U92PT$->^6_1FD<Sx~x1gHtF
z&Rmd-4xpI%uzquK8<F#aXV8Ci#`Ii$&?B}z61TWow<UNx=5D!g`I>@d5@#@t>dR>i
zLFjV`I7Y)Lw?Pf?$F;)_EKh~}4${HhahagwK#vox&Ze2Ov{)oM9I2fx<j4gT;PD*G
zR9KjBkMf9*_+ZCAeC!Wh>u=QRbieT^v0C>Aa-=$Qroyk@&k(Q^r&lJFqs(z^zn^1_
z#&$HMD6HOjxiHyf^~D|mE9(Djw|_Y2l00TH6S)cHj!}SKT-?75c+(B!F{pq1PLeCf
zQu!Z0WZ~?WeJ)@a$v|Rq;DYG~_CvJ3>t6s%<vpaR_!(+p!5O57M1>s5L4hurdE4w5
z8nyNhbn0-12U(49ZL}P!*3?L!=D9G{AY9yG(kGbsk|g4`kyV-*a}AG_L$dQ>?n)^y
zBk8<L<f=f~FB7k84Z7Y^&h=(KI|cZG`_ZBHZQ1vjnH~Nn7KQtlTmVjgDQxjq=yWc*
z%2IK0X1Kj!=%Pl}K6sWcsOk1zvntJhoS`$llcI2BO+NUpoH~B@T}SPGC@TZ3rM68}
zqWIs+xGt*~7|%NB2o_Lf8W5|)$n7xCRNGO6xA7^~jEqC=Q%F)5PYXo>q-eoJNHWYk
z>BFD!UdsnL|E)HgVhC=?5Z+L=(f^|8&_qC)+0u{jlTe=ZbrH_O$Vu03a2RH3Ssx>W
z9MdKJ8t~xk-T$(#w>=+IG*^~HFDvuXK%ydBg6O|Zaw3UMTRrVu95kcHBNWB*9;diR
zV1xA=l*e+i7$_!|)&$ubK6P%Ym971{DPdcCD&1Orst|*jY0mwvaG<g0EsPz%vd%l)
zTQIBEB!C>`@Syq&`GU=~y6dH0*kWe^(~9KpR6>Mp<O(@7<AnH8IeH}y(s}sb!8rJK
zvB7t+wBggJVnUf@*=nC}z3hgbC&#JaueXoB>avTNN@@cUb|$fVU3y+&_reK3SpD<x
zpQ){#v2X!^cbuGRz2`y(OGcW@O&PNDb<bA?9~|$3roFjT$>*sZ)X1j3@k`;EdzMmS
z`NJ+Y%+muso3ra=qovSN&(Mw0sejn(G8z%9m(Kd2!K;0h%d}gL#5fO6cc{rTQX4Y-
zfRu#e(|Nn3<sQn1nY-B(-mmTS0?>)+%M61n=QBJ4^&UNLISL|KJCDWH77iu4-9RPq
zQ>NoeiRxY<d)oH0kw<Z4i7--iKPLoFbeU<8M)UR5i|EQP*1~1^WDZ#yDEQ=t332N5
z>2VTdn1R_~Pzh5fI+0p08UvJ9t#sqU`}1C6#!?^V+b;IT1G6sl>1G?59L1Iwi4r9v
z8UkbgOIaO~jkiw!(A(psX7hl4o_I|HhmYW?L;Ee^IUGMP_Y#+jf6EL49d<mD|LH9;
z^jsY{-nJ9sXEyu2A!dhhB^5)O!thvPZ3KJe0c$Eo`*a;vagRsujfpD@vdTDbIAl$v
zxafkbQ9Tkg=J}BeU<TMA`WvB!TJ@aBJ#{pY*q})ZT*dt*11ESRn1>&0(72WZB?0dt
zHLM*le}eeGf*s8^*6dkdvPK-VXL+3QZ;f0HceY<t&XnvQ6|}Wb8P3Ob;h3HOM85`0
z*?%d;-ex(YFs0@?1+e(1sJ?gmYO36jn9bEm-7)ATJn8QFr+Pl;GK*Q#+(vClB8;Na
z5g*noLMk-u>KO>Ic|vPU{{0}9?u-F|cxRZipBHprHuxYFnysZ%%-iZ-($&FyR&$rf
zA4^FX`JBwRW58!C-X*O9mV3)1Z#T1>x_7_T+^eD6O1aOwv2Ewfo;iOR`3=K7!H#N0
z83|Q0u9+*vc>`E`@ds5~VBdmegxUC#4{%4@z77M-90O}$6R)Ra1LA$~S8jQc6GtEX
znwKnwwliSsm*F0>++zK8|D58FY1l2e(U{s!{X!1*?*eM+o{0Aj#<F-1<Y(+6I-D;2
z7}1+S6v|hxBx;w_#V%+RA@=c7mbu<!kx&ZXG@Aly+u4>tMkBJ=${Ea%99#?M%5ao)
z@!()IGOcR&OF~;FWn7Q5mT>&5F4S6~N9;>~j<QZ4e*jB;hgFt;c1n;EHnbKr-if5C
zH6@G=k((^yef{O#alRFmX`5|Ar15<WFI~Ff2K$kj4mBAB<l%5+H^jfnEJbgT`J)=d
zgRW^U-wj=M&~R@qiu0r;WZ~nKlMOJbG7S1>%#Z7?z0uomh0yUgix)L~lcW+a#nicW
z3wf`@>Y?UEQhPj>_w6|I?Btm(v>o>&1tiBM(z;2Kob|zWoA&#OwjoeE^zfW*0l&C6
z-qYkt5;3BCfKe*PAW^hEP7^Kh8B2Tt<TcX8;y(wMSOq5yJo2mE*e%nsY<>$-p)~8o
zG-Hv>ll`K!1IG*08W$e&nFCxuDOP!>5fc_OvU31^4ileS0%Z;Qvo+>1*ZqHk${L`%
z`XsO~JzQQquAHz;6%3hsPwdf!w=eK&Tj)$kQzN@5`sFwFt(IhkmX{X+W-V}wy#mi-
zCu7<iPvdns)VA|HN_K}NteaTmFKvQz1B8;pM5wl|qXpXh!Q3j;^qfp!udumoq^hC^
z)257WR|Pux{?*4nrZ&M?h3oS}L#<h6KY|WM0(j4GEZ^%G4NpoHJ6lq>Izmbrm5ubC
zV%AWfAr$L@9rGm|gI|jayX!vP$*T1bZh&-qoT*DZ?#ryBHB97Q+|zOHr}ogyWyct>
z|H>Z!Ieq3|U<IvMlnyu&YqOI>-H;2<WF&X_wnMeeT*C34Yk{Xm%>>`8bGZKD{yX9G
z>H$3vd+{wRxFx8RcWaIAgCZ|B`QKC++gs1&jwFmjvA{*x?8FS6yUSNMu*P=NSPUZq
zgccAwHyvFlH16RCF-znVk?KP`s;tRFOE1^*a(iWKtEC(XRkN<d%qL2VKpq|B0-SbQ
zvTw#ywx_PfwMd@JR1bQAsT3)Ny)Gfq$hiIi1QlAo;2WeTt*)`E1j0mwFvZNuzYbd+
z)1(#8Z*3Qd>?s9WQ(I;bcCq`NOy-B=Kwa|3g-?%T0>`WCUaf~XOiVbdd^5Za(NmI(
z_Eprjs5<)CR)7<!*KkVn@=^%Iue`NwqAsu123UMP`=u?+V0a_Jo0Ff)EP<Cw2djTr
z!d@sv^OyZf0ur#@uROTOFH8Ql!--z&5GO(rT=@>|8)qn66vn2;HrzdQ1m=uA=k%-C
zg*}v31qXrMZPcLwV(`*cYxE6LqN90QKMElFWg|(+aM&{+mQPNVI@6R3x$HVxmE8FM
zIF2asPsvjrSDHr`q7MbD)}%!DcpZ`=(n1gO$*#b5iMM}vCZM{_uNaj#u^!ZgNItp6
zAkxXvt_*AK7mk13!qU63iWCsq+YlSVCNWK~2W3P?r9H$8@g4DQN9HJJ6WN*ZUag65
zOY6K#UW)PHdi$heprkp#w1Cb=Saqx0qBYo%NitYFa4vxKnH7IsZ=CEtgJ&90#bw>v
zq4i$n)Lxq_UbBFUXn!1xMjfG4&7DPF4D5sr!+{NUTV=Y1dd!~k$=I>P!kg%zon&4-
z2^%Kq!Erwk87{H_b+4E8Ubfw&;(vO(;b0Yin7U)!0}X=I8;SZ3(}lxDr+MfuYrLOM
zS)~qzm|I!R&yM!qlya6NRDGTEx?03cTxudmu@6Ryx4zy#_ddO(z_MD%oC9INHp<w{
zUZ=GL6!#D_?G89+L^7i6q;Db9U^@&Z<j^CDDpbzQF(=TdVJq}@en=;5+_ycU88A_t
z<#;ovL5CBSjcbxctXSj2gQFZtTdwKVoth(;=RBQ>_SKo003h1q?@1U}T(D)jHOc=n
z*8rx_9E(*88&<kgE%<)+S-hBm!>Uc1`Jv#%?*ftLs7vnWrC*O<qB_70?|gIM91}Jt
zGalys1KP#l@`#(^iS55b&27_9jCrAHr}O{BhFp}R0ldDeBvi=0v;Fp9oKO7X_hxgl
z;moxhn;>0=JB(R(a73N#!C~xXbbUB`q2512h7zg8?eXcDZT%pkb<Y8>QQQ2(ePlUa
z(3*19n!YVIrq2SnB)v!VgqQRp{?Q1UorM}>24&)Lc1B(m#?QXjnhyhnrE2mWteB<D
z2sR{tTbNjW=YjhCyMh5=+F_(bk8j#zak&m20Y_j|vN%`UX9FMaV``JyT)<`#gt&=#
z5YI#PZSQ(jJ}uS#wAy_z>#Vv*-6m!yo`%q9X78)%GO6qT+N~H61RC<rZMq%%Gp4sR
z2<g++!4jaJz9XV;xjODKt7``$-!BUM+mP2MuArz4=cRVp%73qbI`p~y@VvKE%Q;WQ
zY*5UWnc1Mc6PWG>l5U6{-%QFB0={u%xsu`;;k)FLQYlO{;nW_rgaU5}S&77|{4x4i
z{P3Ft8&<}-wPO%!zcHw!hXoHb%V&UnQ%OUPd+Ei=7a^5K`MdM!8X204u2EC!6!}Ia
zMGhwS-^~395So{UQPnAq-mw204~HYruham3GL18^2Yi8M-XRf_9E>j7BhEIMeFfS<
zW5em%K)3<X;?~?S5V`{Z-#g9o$)(wHQnXuRw3ql+dU^C8A>zn*BJ$2mE5f`mXv<!w
zsi`g?9T^Ak`5rI?O-aRC6loUO(Ze=ok{n;qPT8qPuD#<YXtO2LZA%u#mFnNmfeDyy
z=?#oWEkL#`u_;m{JBkmxZz>Sqha%x%sN=z~(WOn|Bn|u0Ho7Btcm<D}JI+%Og^v;c
zyT(P?$Z&w}`ZySWgi5K-?tf;)kSS3x&~U3kYlh0U7mU&6?#8&zp9?(2HARE6wc*hj
z3!e8XBv`+iBIP>$5f<<;qF&Nr=l!jp@Xf%PiL>Kg)hS$&F6yb{6oW1fO5Wu^4%_o>
zmM*9=T@g`Xj7M^xx?CFzLfA~Yr{1|KJoL74FIjMGozdRSU-W+nXPMTB#`~spropiq
zi`BgW-?1H@posiaGt6F|GI{IdADUJ;zAM>UQ!dhPunncrKqoW}dHD2@V7b?rox3Pm
z*dknntA<6<wEW@+L>6pL5iwz=@oJbRs>*seHI0@_<3`Mssk7BEjLR@cX2=QrZmSS&
z@l4d$PzS5lCN<V!?n11Tprh?XO(z=>9$ccxA7`h5WSX7Zsi&hGoPz;pD77eZz}2NY
z$-HOC8WzGFVT+_xHoalO<8HY)aNH`=n+DmO1W0~)#|G8i0`7S%qisAd77ua7H!Wb2
z4&`{ZeR_9&yiU-$bI=cHL-Kyj9Yq3HA*CO8i4oE5sL;3_lsox@a6}l&NAY0Oi#vi4
zq-CE;ot<&=AZ$%yVHox~T1eU%;f7*I?NsX@Uk7K8+q2(ELps^_JRaJ7@Yb?<XJPW$
zA{0^VsV8IR2vbx7G2hUY|MO8mM`-gf(h074FzuI=DCKVjB&dLZKbYHyWpi*D-1(jo
z$t!6viS-u%UXQQ{TAfH9#|?=GQp!xSmMTe60CKm`xdfyMdOM8r2was0+{2#VZHVak
zWMh4i0KM^)bQxJIfaKUV&v7(?dj%=i!WCKs3B&hgQ(Tp5Q@!~OP9+w-Yl?6*X)-WD
zsS?UwSj?1`3=JEq*-qj80NC5Eh=S&(3srFYm?x8teoidv`=2IBmWD%g+lJ)WSw;gR
zV~zwuxIVsAHsJIdN?Q{W7cA=s$i*a!FF`oM1)5lXAOC1Oe(DY84!a=i3T&7mRC&&J
zJQAE4{%aK*RwsUjBC~@FWIIldiANs{1zwWmsd?f3R&d$9<(k-mf@RG}|M;fD`qq!9
zkem|4i})?rbuk80A{iOB)oHZHh<kO4{XaFvL-rEV(QW*Qr5W8sae<N^G1Ijo4baPF
zTk*t|lrxtINWN4wtG@!MFXA3+HI!^&fFRKWz^5;Xy5W_aCf1;Kxl-<I>b&dJ#ZOP9
zldFG^=}3&5e%%Nn^&2iGaZt-sLql6OG8f5J;?t_U$AI0Ut(j0~b}IdocZ1DLy#({A
zuQSo;0kF4+oI{Z2GB;Fmy3ysoG+OxvDcgZBnJ}ob@=z>dv7NkRCDeOgohLPG|8$Er
zPZF6e8~8AjE>B!mjx#VZwfgu0<Qi}9kV~yb1kBbQ_sM1*mpe3uj@S%bn);asddGK%
zvDl^;=^Y0)UZc;dRn}2$jTVG;7HxLtEWwTU*Knni9SlN5hqSPB5r3kn=o4gd_XQ3e
zddZUsnHlP>qR);Cn)nYhc(LaP>t>*Dd@~D|ZXvn}22kTSSudQQ?IB)v^!8>^gO~Es
zIid=`U%j2*idm>Pf!PDn?6xI#EyqDivSb1)SJdKUUc}>tK*yWt*&KVjt?fbV4ZLFd
z=P+uyjdYKDz>{S!a+7D8;Cf5A%*fY_tn7HEmNoOMkt%e%EVFiB^>OCw%x0#j)@Irm
zr(oT&9Kr0-T{k0$!=lY9VNTXCj@wu<i4o3197EIGs`AZ{{HRK&M`=X~B_$-Z)hc>P
zx{76~JGK?~(Ltho!KdWFy#=b-*XX$MhAPSrHT=@(mrfL>jd`{J?<s@I)551D4#W;P
z+%S^3Bh)XpmB6}{1?K#GqOpr_j5GN5GpdvJfx;5VnPJu+x&-V`Pdu4yr;Z$fntNQg
z8=wzSD@CZ(FKnd9TXj&?^%H^2Mv_{Z7Q(}c7-f8nCkfi(*K<364m{ZF(!<Yjnm3@S
zmRwBR6xeTg!nW^yM2nlZ92qpcj*<?s!&J{e+XT1rUc=xpUuTd)Z`Y>PBmu+M7(VU{
zL9TpQ8jEDJ--`eD37;Y|3ehm`RQddziepI0qdgT4WWZ8w@kC0UhEtI0OvsY*an1kh
z=nn(ukYZH42YudIIN}ki72;l<VqhReO7Ki@7y9F#O)pYasW)FUgDU8=;6c)bm%LMF
z$roEXJx+1)%N$V$nk?g#OvERYJ;uwyXa3M2ew&jPfhTkiDQ7G&%qL0Mb8;pk?FiD(
zFQOAQ*RUd8$$gr$Kr3p|L1pC=8INjy2fg5P;DS8ke1`<$@Ca2UBI`}WtG`o@i6qq4
zf!i4+*6yoervzwdMvO46#Z^*ZPd`B85IU&OZ8-TaMnv&3*B~tv4QA1eL?-hTW|i35
zT<;85tXs%IC7+SME(0JKF8<n%sU$a9gwWypY-*LR_6>5=I@uL1i@1r2KnUFzyRNnS
z`&qg7rl^4Q11?+fdx(@6!{Ot7t5sq~03r$`5w?NN;9Z$;C-_f%H31XF>T2Nq*HC|&
zGvZgL#Ka6wyjwQ*xa~$`AVc%2WF0_k9BU50yx9FUkH^hzq8RqGpaHj`nJ!D)N}kxW
zgN0>fXgo41y$jk+nw?aJ3VeOT<|0&L*Uvcw6~>YNrt|18GzYOJM9C*V^?<l6I3#OT
zL9F|*e!=Mz;^F${gFGaenQe|!5k4SkNFlU{&BfdsY?ba?qv}Lppex~n&IwUIf}vId
z2LB;+08Qxx)LmbQl8h#Thkp8@DYd5?m0EC^0=}ifmg#hKuBcu{_AS3aK`ebo+|njC
zH;}AOs0RvsS@SGTO;Q3@?vwH*Wek$323Lk_`t6V)?6Pq@qK@|aV$7DQ)SaRDGDBth
zGCsUQ5SU2(d^15e2zFx&`Aj$kA4zarM%!_w@bj=3*lL_gvo7=cl=MH2cdW9gn1G0(
zK0XVe3#)KIaEc*L`d~7dHGKeeLM~DA0BkEJLGoN}^|GM4+qRXJD_(MG@Of21H1&bI
zC`gQ%$n!owFAiH(aTOj|jL(+>o2-P7=;0&w5DzO*+LRX+QvTQKbU9-gL(rv>s?S47
zpv0D4%F;bAwWU8~E!*C>$Z;S{)i!Az+|&*)Q^n^y2Ec7@gQRoL_?bAYbl_bW48&+u
zOXWSXmwbL&hIp(p3PcJb5f=jT3pHzS5h1dz#Lp>}25|t7o4o~WEo39QQA`xVJq%KU
z+vCw#aOvo;1{L9LEbpe*z1tdfIbLC|g3O_Wgdd`6!XAAM>q`u%5aBQ!aa`j=Uwd`$
zR3v2b(}fDhSE2UZW@#_BIqQ&UGfb?G1>%kR5WiShJb<L@MmU``gb1y)8|jx=!761L
zmVAD~AtuTuQ8Ms0;iG+kcFD@qAMc0&-yI$Gt}do@6Hs?m*<WvMB}-kYf#e{H7(-Od
z_llTNE_ps3_>h;DJs4cRGGmc5&EY?9<kYc3V)!AMU7;I{Rfvh<kER`Df-@T+Z`-y(
zk5}aF`?e`&y(hFQ*`Nkc9hSyr*)D?vr5#S;Hr<l!P8zf>-p?*$A6Z$HH0Sfo@aIx)
z%Fx3Lv&6V(<P?y$HY)Py@EF~TNg6H98Hy{GNX5QARaYbF<>`qHKG>`d-NNnU4ZwF`
zr>Fk**P|RC+8Uu`46QXu8^@1;wvR>G<r1Crv8!yjRYF}BS5oxh11Pj2W}zf|N#fY0
z=zf{P2o!Y#2BI1$Dmx$8V*NZL&23WlBeb^=9t|9sg1imxiP~~uABvx0WCLJ9hMzED
zQjb<IxM$o!=YruLbpHTy1_~Hf=!@pmvVB5}P?`x6dtFLC6*Lz#%R-J&^*xY@Dz9I$
z{bM6Fk-ZDvYo~0z{?<d5JL6@O#egqmN&*0m=bgSJkL57|CM6H)LOX}iV5C=${Ymz`
zsX)%XEyP=uiq0>o&`DB(E0)_tyr`Yh=G(@SPd+fs6YsHleTnMcB9F;3_wa7|`ckR{
ze?o~X&D<~%+zJvJ7=8eyHC{#_zjvx#hm$F;PBRTMm_LD>!rdVM#0J?xv6$J+8wcd+
zQ<zD~A`D^n@Ux>vXpvv<*FN2U_d_k83{}58Z3Rc|4g{^iBF49+Yqy=YrIx$Jgw5+e
zHFo*~G!MBC7gx6-k!^njh;2wzZ+alzyy@faFAv6@DwC;W3#Hm{+TLnAdy&^D&D+WG
z)yF_rQ#EhV#Q6|v$N~87%b>HxX<#|%`ZiEC^H?r6!PFNbP!Ib)Kv@&=7>R_Ds0s-r
zFtBwM7Ut%jfHpv@_m?#VD?S@MgJcsPc{5@Lp!kPY?z`k)#XC0&kIMoapuMj)hnmn;
zP6$L#MKQjMaOUwHdrPOB(|0?ccTf#nwm-)rlB89XZ&+|e1t{5$JmhqB-Zg_R<qCh4
zG?EGb27K=}t?$-A<jErXSzT(l$Y<zduxoU3(qT2dITc$rlZIOYcHu_Vui{uCX$c^E
zu?OOOC7hGeF_e%!l?<vri|1p?xW%;fYS@S8?N)g!pXpurvs)s-I}|U(v?hwV?bm!A
z#}0)Svz;6k!--m#Qig?d;dNrdq>P81*8%eL$CaqoSy3aL_SWK_eXY1^J}=bSoZVKl
zs??E2oeGYj79{D{Iot*`S2+iNUVfon)@w1KL(iF<6{=oJ`#qnFCYN?+<nOgTR>sX4
z#d`~-xsW^O^mCdnz^6oqfuz4eh8EVYe!@(^Wj|P(gvOFU+y8jdyK)>Zr2t4PQ$Sb&
z=otB6?6TJcZ=E#{rAT7$19{@qW88Q7jm7(r*jd^(3FLdvK}kJ!@B>icg_$0zx=Jql
zonYClOv)4Wz-JAiHx!Qd5;E#0K>hj<>%C7T?^};B?G2h5r!1~Rqe{AjLtdyeFDIrb
zSBT8xtHZGp>N{!{t^O`^qi)qly6AWx;_=79kZJyQ7dWh>r^OjFqAirs^FJG#GR83b
z8$f5++rMEMQtSYH3`-3~;d?El2x&l4)AOQ%{iVcAy}}NSE$vh}5luB6N~Oj<bNe3{
zOOhL>Ez^Z_bQ8CI0#n;OSP|pmmqsCph{M@HY2K|>8?6?fJ~50ZOV_ubcoW9S&8Dzz
zNLk;3^ggwNfGuX{ZeI-(loJHJWRDD40-wx@#4wuuBo^Zyi1>dPKHU|v;v<=0I?-zs
zyM=o6jwJ#kw>==8Ey3R1Z{Dl;2fdYzrOeFAm1bn=u##y!TOt4H7~-l(Dt6o({YOoH
z(jL4n@(ZagVY4<q{l~9HZsBSosG#tK3#;~}b)UI?H8EpiSlP_g5LBDF5$3Z{F3j7#
zn5A|GOWW~DS+;VxQHzLx2cDCC7|G{%b%$cT{Xw`I3We>IzlPW>RY$W@T`H$eG8tkK
zjwg>j{_lIcx`OScXw5)CMpzqnK0jW3!sfbY@@fLoBRcsuyK9tL##BGpVV9t2iR5&F
z6ojWKe(63tq%Op00rF*e!}+W;h!f>s1#`a@Cfj$hn<Z9lz!14thm3nfwKtVfa1S(<
zg7v6l&w0BDw+9Wf=%N#^>HqkHnp}p|S3VjtFjqwq0JQOgz#KEIpUWOHLm}oA{>ntj
zl%sSnCM_H`HU$PgFa}iQ3<in6$jGSiyLZHl+Uj%CB38>?Dglg~Qb7Iu0o+=sw9U`n
z^bTWfm#LBL7&$BK<m|hdG<?mCZ9<fO>ogvc61fX3gLfTjW%7tub|T!9pzM?H<eT*K
znk(=<Vj7isQ*~DD$=rfgi9v(jgl=fEG+@;=leh?<P_nKL5#zcVxG@fhZQeN3>MLYa
zsNa<rYVI1lq}-!sopTmlP(`ucZy+2OcBCO#p-HZQZZrBZ+1s(oq7CP(=5^Y$LYGYO
zVPP5r&`SpiRRQ@IDyH`JKq+);>f`ow0x>x8M-hZMLsHWa$@sN<Tq{axW1f~oco7P$
z@pN%afz6vX=)JY%@ga)2<n}$NR06GHl4l3z)4t*4|L}uqEwyuOy%XehB*9^mExS$w
zh}cLId0k6M8eg+$$T;%fCAN$DS;IR3GLa+gmH<9L!M};uS&D3m$a{)Px$YAC<mEs)
zTPGapOFzw`Ya~)rmk!63;YN)#6EdKdZ^ms5N`?DmueB<_V`@95){m(b{_w5gkU;SO
zKq=h)1h;hea6HY#*KZIOk*$#}!ZnkJEbaD{3vzSKpMxb&Lf(imnR=D76lXcA(V37U
z5r76MR6MDzSE)st2gX3v_KHv29zS293fiWn?xbIt#0oM*pvAmkVFfBtiw!@oBsk!d
za=W_JFx;DPO`Y((g{AYL3V2Bv_dEAxAxn}QPwo5!z3~JX+!O#bSEUnY?mAm$K<|Yu
zhM2>`s>QHzRsaA+FvDj+<$tLL`KRWj+SO(dv67vZK<Fk}%+;=ShyX^3k2eH*%<nM5
z2SM_5?WS-e*ZzQ#jm<mAkn5GRD3J0&-7xI3<6-PI9eL>n7|nXxp9t>R_>(epiKn|P
zkxHfmlq@fdJd%owG_`(GtBm?Op*o4hbQ1eRaX5$b&W;Tq7I)pjH=<T~mYs5kp{<Xz
zs08XOcbzczeG=shaC8k~&JQS2+IY)2{FEPPR8yMuN%z0pFS~M>$p2V@QcJfuR?#3@
z88oPuEHvM};$llr8&`~*wJbpqdkiDz{fAvEhlqmq`!UR>BFf(k1XtxvITe{CS68)C
z8m6q48YCQO`QN!|Cu;k}NWMV!{#=vnL#KjQ7+`w%kt}1d8xixO23r%@krqkyOU1ND
z8CHYUVoL%Akb`iob5DSky{Y|q=2_4VYbJKIqAoHVJ{VZeZ+kv0B6XpL$7%XCAMYP`
z&TFYTYo5Q}pa5d&EeS4j#+tVm>PU$vo_YsXox!g-5ElcK&5(rkaenR)zU9q`9qmd)
zba2CoTxT#M&GzcUyhzZ6WhJ&||IV@XN7G(ar>Bb|lP*ernXyR-0AswDPL$L@z?XZI
zF3+%H;kwV{6P>Qwf!Dk~gOg>)+fsuDg_6Z>5bswwdcB2?t6oe3W~{Vw0^VyJ)1pjh
zxcG$#!{vIqbo6UX51M)&99zXN^7>nuQgHgwNz>Y?gb?%U79A(Q=l4wd8Z$`=`}_*V
z3+~X*Q6bIU<#%5XyTogD;5mh6X|I4MXLbPf0&1?+p?YV&f(TpbkdI5iBd93AWq*`h
z{o)t)OVmM$i3vq#T47=bnomq)QL?{<+4+Q?G<ciEKcz36?xQ|hs?4s%do4>v3TC}N
z($pK-G8*lH;&P_7KmP%IG9VqqPJ}Pbd*Fngs26&U!rFBMELLsIYj%%DsM(%!v;?m4
zqWe`a=X*w^A6v|0i=G%`s7At=nV9Uh%L|PFaII`z<13!}y%vX*AoLHgFzLhAnbu#T
z*5(yVldsE8FS%|_?<ARtj$jugm^zo=Vs>*680AS}@QMGeQ17+2A=J&!5+fMFzc{uC
zu7b6f9%raS6jv%oWwBM8My=(_d5^Moa@Z=PMO|ZFv`?T}+X3W0lQa&?mp}SX0u8DR
ztO`ofb`Fyf`i*wgM<^&sWHNvjL@_9ZbS%lu7YfJeGX*`~$M46K4oOQTm*k7G9>{%;
zI9c1-Lk<&{>wt$YE+zS*v&Q^%rV!YDTUML8veI9|mXnNvESTwr5<lHnOW`wVIJ2j;
zqH@Y`{37@VK%2ZcV>Vs{uhSQZML;;HFEdbk#z|+y_S?j>Pe^+O0`Q6h-<4V>as`K!
zVJ7CYak6G<={|4mPe_(fNJy@2X)2{Hr*SL+(o~EZO$q~$I;}m#x<->jt>gF6vsfAy
zWs>{M`XLzITvNL6A+yA~-|uBrn1cHKBs>$VsjIlxu^tt+@hx}T9z~Bx>oi0U2gx+i
zidJF9i(uSFA)xllRxUWvtyP54!E-`U&T)$yhbpx-w$Pobkl)<r8MzIOsglxnD+_~H
zkd!ZKZtnP(jOlDXdNbSj{GiM>u@(iO2Y2NehJByM`T95}5Qt8DD-0AGchnYby{?z6
zF<}yA;xu{w3Rv%}3Y+P<Y+mn;#A)W|0g`TK1N@brM)qrJnnq9TFl4pl*aho&eRxtT
zf?A&l>Fn^fD#bZ3L#?<s6rP#+Vu2`Ww$rr1{_R%xnR)V&XD`6``x+=rtimQVn}*6$
zN`2u_IEI)btT`h;`SW6l`p|yjYxKXi?OmuALmletSqr56+wFxXBE%vZ39Ctw?xS!9
zCXt-gpCt5Io4fp-v=&!EJ_zGdK){;UdP=DOgd>}>Nm!`kW;>w5$et6z{;KZ-)C27F
zx3MkyRR<@{STP^={=Yv=4$TA)F-$-FzDy@w_#X2a2B=M7RFfe=apk;)su;xJrSegD
z5+-Z{y8mDLc9BQP?^;#DqZ_QfAd0?h`cyKstjpn4+8VztnHO!^FH83f`loGOg1^m4
ztdUV4m<zWa=?nN{ge!Bf-%M8n{IhQFX5}g)Xz7R_$!kKbqclVvWwh!VrU$D+{H*VA
z;U}7jb&!@x8pvZUfdMguRP{i=d68OH+crRlX^PAF(S<;1b-wsJPCh-pH!9t##0;WW
z|1)A+!6zRzEoAq4bE6Ol`pbE^nQ-AE65cZjxws!<Udo5V_*E~}9$jjt{L<9&w&ljy
z1puHP{NdjVS=op&G%G6mTm+=c3DYj9hLMxS*@W&Lev)M3vK-gUY*N3LrkH{p8Gq1V
zcokYq*{QzDc2wDbKK|D@ovAI>a#}F_Kh_xTt3L~u?M~Z8UaJWs82dm2G}k~W6uqrJ
zy_V-G`Zb6`A`AD0=>1LqOua^}wuIR{8F5_A@#ATaC{#qEzFhzHNJpbnN)HB07eG$i
zz2T7Sl|&qQsS_+YObucPgoi)N5(vrIjhbk)@UN}LHDw>DY|d;vt*8745GBlU?%;#!
z6Z0@7ExK`S!G<qjgyuPG_)<DajF)jI*Cp#f_|D$T2|z{>%h23KM?pDRV(j-6Z%FiZ
zRQq@Ver9e_FirOf0Y|`fB_H&~m6jqW8gyZXiv@eDo{;AsH&vUgsOcKe{HDO^@Y`@D
zxSXc92VCBP*yZ0WZa@Dnjrvs@HCYvTc&W=xGeCokA63`cG-QfC0>95xbcRf-&-#bI
zb-!y6*$S537c8YKlPyJr004Nyg;^{)gUVIDxq8HZnsvoahcFLzeIG9$Cha=z8H4G9
zi!lmNDXlFk`0|1y)!)7t{||Y}W;Crw^K(|xuPuQxT5G^o=2enD9FaZ7{}Kb$Zw6Ym
zV<zLgc$FJSP2;!?$RObBCQdz<5+``QbO6-5@pkqL(|(w5UTyOB$>qgn1L5j8+)TK-
z@|PplIpPn>7BA*UvR5Dc6<`z#;l#LSY8YL5wWYc@o*3H*aBll}lv3ND=NOfNtbixJ
zwf^Zh;{JUvhzn822d)Wq)Nd&N1{ZQ+Gi!{mOyjH;1GXufTf*ULLV4^;+mz8Jf3Hb=
z#B0HDq5#|VuE<6i=z!-lC8*yLBj)Pe!o?cg@fVEg2-dDoq;*HOER#y2bGcv4%~+u&
z-S2P3$P_6egCc%0otYcN2WK1e1%Wfwfkv;JrSN`0awMki6#HbEI+LP!)=hCcQY##g
z1xKOdlC;;puJm}gQ}cW>RNKvPI2M5>`t^9N6o6Zt9KuN^_+^0{J^WfbwuH3G%PxcM
z@HlbfFu!ZgoURhN!Yq$;wRK)?H%?8ugRZ>Dlw_(M6CiS@bg58*I0mF$x{Q-xn51cr
zA(t;B6bL$uF@Ev3j5Gh(sXp<;f8qb34mdSyoqJ6A(F(9IxANt)L=MA$-t5skK$-5-
z!n;Z5vNYd{vZ@#0e$t|>1`>!eg9oKC*K&%F#@;#ujRqYMJq7yiF={)Ru#9mSjfIC1
z4TcazA&$)L;GJwN>^MrhzYAp^I$YA^du3G!mDZ@5aSk55IYLUiZr<{)@}=6PnHnv3
zU@1<nJ-X>yd(v-WBz*OAez4+Pr_b)D9*v-~WaI;3(HPQC?(zvHCa8SZn+g?zM&W)~
z^!TpdICnGJXI2ObC-j(}fG|jS1S&gUp}{s%H_^!%tQ)5_Om%c8B#N^Yzz-NFddse*
zAums}uHi5vzw2ekW$@SRMyF|dMkkVW`V!0aDCY>$f@2)EJc5@{$c#zZJ7&AkUZ2i@
z@ZbhgKeQWgxBFWO-w^zEL%vyfH<kyvZmBVhey1p0*=O0=fr{itU~1THMVsD#VG9WH
zc5O1O=EW#i3<*OAI&g-F8<1!<lqM8t+yaB(#P=0#VALZY^fCgA`QK7L_}zaa+-U4Y
zrdr8|Wmit&LsE9#9Y4qCtt8=aG}CnFT}@jE`L@Ai|2G1~&c+Z4Gxb(3NxTfp(@4@}
z5#EHq{SxdS^+!I*pC6IWiD}@2?9!GrH(f>bth`xID%0zNR7{S8CYG(To%~fAQyjAX
z4afr2Lt&4NVSsB(rR{Uu^^Hyx2Jm|Xc$KZC34JdJ?&doT;K4>$g;Ana*n7+D^XX{U
z>Q%>aClA|8q`>yi0CH^ZIx#et)qD5mYnYErel5^~#gvG~&#cFSH;mofocNe%?AK*>
z(>c<vmP_L&oB;M!)b%~eM*ux(n*Z1BT(3Kr!UIy2cp(M?T`iDrQ_r=Boa&l~^qTp~
zwlw7+j$#%_{V=+FqkoNUI8wc0%^iydgBT>I(Y#I4v@TwZy?_ZUf`+3X-ZeAX5@15@
zvst?|nJaLU7Z`OzmBkx7Vaa*hE82yF*FO{+wYoE70nYmjRDiF?^HK@Ya*qY?Tv#&`
zJzI5&MZl=>spuqa`J{(sU7NYU4mmdQo^|lICYvyN8H2HUA<LuB!%Y0my5sqbHBESE
zVT4YF?N?@f6TA2B<T0FUd!tix7o82f6Q)hgWaxsjFW=C+t<Z6fsT*wc7fzlnKwTm0
z?&4zvY1UAeI+$>j>lYy|KzE2)@I?lfVeC|~n}G(lZ`WUIC{;|W3nho1$E!qJWmX@z
z#mBJD`38SZF@P<Y3!CHqejs4zIGyMG)uAuUQxBw}-PA;*=kG}v$*l}+K=q3N)e$ad
zU5K3|I3X7Tdn;gp1gh>wcr`%PyAoep4ZmY>xnL)%boe*#i9&5dnVzSLv<2;rTPH;>
z7*D}M|IZ!Aio85p96c~hkjdW50@{WgpVMMr8sNahC#jafsQY@IMS@rYK*sR&b-b#x
zSL#3V2)O3HGgkUd{X=ICZlbeDliJZ854<>Y)6|;z!=;=l`o~mR^2|Xe;oZHd_~f&`
zv@P++hlvFL7Rp6^P{5f7-tp-yIU#q~?M?2Nx|c8s`S`gy2(rcKjQ)!81snO4`~D1q
zyu8Mhs(gY4(Vc9z&pWiIUM+sq2RKk)`*#KGM8peeX&RC*k2Gp&Dkpose>IFXc7-pt
zjt!@PJ1MKt;Ads(fy$1&p_MetS!b@p+XM%=C@MszGFJ+g`D%$kx_vA@BWpiv5|e`w
zwg1%^0+fF`HWKQhG9FiyjSQ$(5VzM)A54Y?DviXE)AmiOLWbFpF>g@=4TnZ(iO9fG
zHR50@y4sj~9a^1!Fe9{K#mXi&7TWR~fcZ!KhMqfcVZLxj<C+3SXZ}J$B0qcV>Dl$a
zLTibB<5bYHcl1M?2~5qtk`_Jpy=h}v)K;kDeQ!`kYuu>)b=e9FaF>{+f;Y5Hw0#Zp
z^9BRTqhFr@Nm}*<Hnl9Gid=m!$?n(UF@RwcV&(AINLeA6UGpoSW8S@u()xmrv0D$r
zPjUrQfcLsjyZrtB*kn4ni@HF;!Lmf!ps4`~*P)0WEOpUg32D?*dJ<}kv5YJxa6SiQ
z=ch_YH7)XEjQRWDi4p5wWO-vkCd1dboYTI12+~A8t@`RfbceQRS^Q;-Dl{j$_C_pm
zxg^ikBv8s5LCJsb9|!o#)Z9@z>s%xY&H4keMu}k-%T{TGgOV~stJ)y=Td#vy=E0UB
z0B7NocL6cY#F2m_FrtGMwS(asiR)mJ{YR-UCK;gfI>Ku5=(zCx(oY@bvF%1mqWdX~
zSGiG2g$`X126obU7BbyEk|ffnTp;oku&F%nC&m>0WZ4>a|4qlB*m>~HtCT{3hb=NN
zb&q`!Dfk~J`kM&L-%K~T;c7yUFLH1LAAJbeumJs^(%Tw`_7QikBoXgxgh7^qRUG>7
zzcXT7B0#Tr;<web<7CAV;?U0?PEnD1MTR7~boy+IxUYBS=orDSuZ4gz09QNpJ>^OM
zPN?z=-Ay|N$s5UKn*J0)#h<V{U}#J**Fe>axWKKQOGtE55O(mEK3ce3oW)Ccz{o*W
zi=P4N;;qSYRirrX6mx@}1%RG9*(tpms#ECNFUH4knXH|<cpf;&{Oi~QRzs^;q-8+=
zJ$bbCnLG(qdU9?&uDBtposne?uXkzr>};4&rx88hhh_}%)k?H)oGZ(T2@G%v6}0Mg
zTgn>+OpC6k+{5I%k;o0SV{pPDn3w3ccG|~0q?y|}JaT(?hpSA63{8R3+CH9EB4z4m
zeE;xLhA4I%xE&%m3dSFemO{XxW3XWHp1X*iz6%Im7M-FF1cYy8a=uZ!R@_O2IyQD-
zjJmoQGjiumC9T_SU04{$PJ=h9G|`9gFotp~5!EI##NtryJK5-}Yjb9Q55(9o9hN*z
z{bL%3x5uT(NQb+z(1h*9mcWKPbfZocVo$72hOg9u7EOa&T|dW@o;-ULC*dUK%sm`%
zjZ2yA_q^8OAbpCBqey5#b~%y`#|`&bY!LGQ=%i2yJaH+%rU_|+q^*fJFua&`8R$==
z{pX?GfwlJ`f-ynoEe9NsJ9&m(HN}hiAySaaR5%}Kj&hn#?qxTCS5sXXHzu6RVHAaM
ziIQ1yz-UWAP3U>4J1tcAbB6i~s4x8IiblmuC$@uO5s0}`j<C9d%mqkH{%|g@Mz2P|
zDjRD3v|;JgS()0fzwbA$x6@_4VJ!(Fsqdl@00upe)(M<bt+aR4>aX05Ze*hWTO1&I
z0p-$ZbSXoZ@N9{ZyWG~blqib~=@Y2YGYSsob=?HE;1j?NRN=cE;1EzvB-Kh`$YM2d
zZm9owxO5c+W+gr1WRv2)Xeqv$VU{e@GIrfQv&F_6zoGe>mt3UQ7q_elc?kPr55*?l
zu>hSWJ9JW~yjv_tu1nvTmqmc=ehXdNA=dc7SlQi)v)(M(e1}a<yKBob_-EGsxrg-c
z2}ob3mOJ@MK@eEyCmn6#ie#lV(tFYPvt-#4M>E@uI>+K=>(w_)(e&t%Kfn2s)Y114
z5SounOnGh^)nKDml&-q6eley~CPYECMJ>hj_pX`0eOPducG_z#4m?-lZw}Gye+(H{
zDIcWr7QHME6CkRko#*hx^9?_1uC}j&WCJ}@#I*oOI;yn~i9NxjVR{ZQi)_>jwqZ6y
z7eG}~+x}pIw>JBfp-ZS^X1mZ9#LUE)%0GK>71z4Lg}Du6NA?!g>tZ%s@({pEGSoRK
zDxXxMvJO}4SiZ-&%f7?D3T*eS3`+~1z(_#rZ<_1gzF1_EROCWK%CniotqoW5^O$hc
z2cxnJa8_T7^D;+N3JtU(xa+DhOC{5s?rE?j9dAURgJ$y-(#jeOv^4q`2Wn#TsdbC`
zg+VUY?JLr4>*!h?F+q3)d9DB35RIyDr<nxYfJfHer8KmLh+Aa?WkL|81s<!DqA-*9
zCO3)9|5^ThUfe(>#!NZG;Pi)Vj^M|p#E##(6};%!W4epA`xgn2qWUG)>6A7eL1fRb
zt^|o<#9(*0UE;skXxXdOLbU~;k75OV^s6#<!``H9VXeEW4?LrF^AaLv5)zgEPfiAB
z{5Q#j)`-EU$2G|9)`oa8*>QxtqYpCoDjU>z+@NRsj%&cr1*S7^o9{lqnJy=-7esq6
z-3?1~d`G<#5$>VRKN+H>*o$ZJ<*C{~CI7}vCcgT246&>{UKy;D8biqtLrU)k&~B2s
zt>}i5(4bdC*V-n}fd5l_0bNO1tAcsxh-zIYdn6O^<flFuau7J3_?bo+{tF&w%du(U
z(Fl=698!^|m(A)fo5iq;KE`D3^NW7K3UU3*;$YaQ*rTD&h9&rWXGDqObGkm&5_f$P
zQn+aWV(x{d1j@%V^?-f{+8Z_l9i^sP-QmOWkxBo&Yn(-H6nP<}_rm&QrUD6h18k!~
zLz#^MDya}6qGE~}{GqV3@ojMd$cnA|D@M)cKbuN45^l`I-`!TN)xQBrjx)Uxm(}hL
z_;F6Wvj>SFi#|ncnHw-XX91M+kMy1Wvqq44#&8Xxzc&?W&xE23lQT9(qrRNJ$$n?@
zpDf4REabZ<OmO$cZF(H8@jogs$>iSstVNJQi`s`urUsKMjQW(G8F?&8*j4tm{sR1~
z!3*$isSXo)@ArOFCs?|G@kA~c0+e&kGpD`r5qYp#6N^Rb8LfRI8lCcp<1c@M6L_Q@
z8SZ%$7FNZdC)lR<?I`>$r?zTvp$)LATRu6WA?g8k=H^p0YO3k>s&KA5PcVso=(P!#
zN5@1IrX+KAL1BT69XHg~=gZ_BUYbL8WPV_*k&AZEv_B_Y%_=2h=-UT4LQ%Db>NEKc
z^x?c%lEvJ39UD8b_|bKKE{@&ISL)6=V%))0p$qlh*>QS_kT~q+We&AmAYK`T7#q`P
zF9LKK!H>m7&{N-oOY#_}rGBNK@as3R%F$I{nZ^@n-;49$+K1zBs8{`iqY#14P!u76
zzX^56M%ewyV2Y@%?QecI$h1I}JhDUK=S!>TrsU-|3B^?&3m3l=$Y&^xywoqVC+jpd
zV|*Mv_SBQZ(UGSX@CaLP)TfR7qe4P+M;t_v=qZ?NAuL)Dc;e*guAWnY0zxFK*+x8u
zFJ*Lm$SWRvEiF<pz^bzj_qvq%xor;K@a%6$0ls-PRI%&E><nTAI(bzj<lw%{oM7i?
zD<rzY0tl3;bILIbADvi^+En5o8^$d(kXs?;v*Rz2$Q~dIR-BeX;uC@$P2?^egpuBi
zcOMJ_hCkP4pvwq$f;H}xyyHwQR|{stxzmS?NOtYhXK1b3P`3?(i)F3EyyOp-FrDt0
zKgXzZv0h)Xvk4Ba9qllUi<Aep10~AlCKA4CFHNeseXVf`M6X9LW`^qqmQ$wwGD+G$
zXC`s@!mk~j3{XGBsF;Q+KD0ZiHgw(vz=T56uvsgYHUs>1U<=7%@QL>d768F$H11(q
zu$V+VW-8uCGU=I-HRQxP*d)fMl&Wjf^fWx9e+dE%&T$lx@`+wTXT;qFswaEjN&iNU
zY%sHEwFz&e!=tHlT^kfj;ofJNU%9z(h6*MK%iWg*E@z|7gu_>Bk5-QA@E?p(@I?=j
za40zG6p1!Uwm>CZu;C(^_rX=0pvO<`D27MC=Uqqx$D8Ib=yrR1T^mdREQ<3!5Pk{B
zfu+dVTK)q;kJ>kvAG>$aX7thxLL)3n`QKb-D4$n8AO|jc6*OGw$JPW{9~PIuNdP%`
zcdJTh@G6h#)acE1sn}bng@m$J=GoV=_F_;NKLcx+NJ6-8!Ylo;EwNEsuXCDQEq00m
z*MI#$@nK1Pc;(cKPrLG+abimz{0CzoI6U=72+F+5T7P5Uk~cUQ`4#-+2@P<NNbcz@
zjTL1pVODU8xN7-k*HGO~+{JKAeKP816x?AuT>{>a4V#>Xcv+<$Z5@AZyH>!hJndU;
z${a9ccOQJ5RWQ|qvSfVRT9=R%)Qj0Oo8MQ)9v-k59Pb;8ZrEU3bm0<G%>43FPTCJ%
zJcDJMa~;P~Q4vMvO5O|yeEo2^b?p|)OgsX%@eVC1mkA3G&MBQ9Cuzo@!0OxvQUdTb
zM)tKTp|RS#yI#aA>d!>8?mJKXC%Zi!fU1d<27`qzS8Cr@%RiSi{`uR7*cA0|0?uva
zdyE#AD$+H8^rQ%?*AaNix+Fg<$!mMz2$2g69U~vVf$<*8k{{!)98ayIYzOB|KLPR}
z6)5Ng6^v5jN_0GH%*zGxz9tmXsRizv1g#9)b3|ToZzw9<;c5i32MW#Xzpqu4N`VaG
zp5|_X*9C))eNnDK+1SKrpyO`%of%Sz{Ixn1|M(N1YIwLlcIik(nz04jkcds@qpo58
zQ@_>E-lWm($}FP0)!%-ukbYuD1DO2K;Dug17Q;<q*9Vf|F*UgV8T3cTMbodAKY{~u
zR!YVa$$<C@IYNEzVL)een0U`?;Gn?Xp4MsL$>3$;Dd(V#T^hd5@s9&}5D{-kXYARS
z!;tbHzi-$F5;jIk8;3VA4W$45!m%pSLaoxeM!N+V^*{dz8pGI-BaZ?W0i;h}eGoa~
z3@?SthRK`&3Pe3}KA)9nC6_u!tqUrq5+I=2(BLCkETCp449wJ6R}Nv)Gt<HH#$k0(
z7_(7a0A_)5P!EYDv1QYylCOGxE2G<;OAP;ur1#oDQNYZOut>J12!vxQ5BsP%$TAaV
zN-I(3yj0zorU8yv$Y3}V(mCy<qZe+KFPSNq&q!Gva0=b{eM^&aRjIbY#%&&RESR+y
zl~t}i*W%7wy1SRnf3etD0Ap%V4YWP+y=bb>J^3cf>daxOoF*#KG8)56y*dX3*?F8}
z4heXVNZgFHNDpE-yg8rS8_hi5PEJuIr6L5j6@jp8@!U($NL7`CtY4)XP(N@{2tBAg
zwwRGmIT32ISJIj%T6o*fxV~N3ZZSc(wr0YVN@Oolp2}^5**7pi8N2;7IgvVs#q#VT
z1AZ_Ub{%UNk|^xlJoD0-z$Hs8Doaj>-HGui=59h?H(R5ifBoHGpls@Q{X#+da}L6j
zFcn~vid`zpZ5#^KD$-?kPN*P;$<^p0+H=V^c3p}@!%#!Oy^>;nmjHCEC8QG9d@=vU
z$69<qRdk#2mC!2nU$h^HHjb2rBFMe%-0Zw?&F<t_B>NK)(>#_c^M3qQz0{^-6^~eS
zjD_d?NW*RcMS!sAdM+l^q#^Qq9bwyoR@-wD#Yta*Y#3TV6W5yYf<i~#?W%aM=X}x`
zL=rPSORDssVX{T80l#Ij$R`{`l2G@`>{X;`OF>=Dc((9Okl=w{s14iy58C%oVVUpF
z9q$W490JU}IXZ|O_eX5sUu|NanOCGbD3~J0i0<tgm1XtK*^hC;j<nBOha0!%B9zwx
z*>U@T1|@IxdWk6{1p~4of*nOWJmHUNu~+S6{idL^iHDZfM%R=`rA&DQSkj+PqOpj~
zSB6G<ZeTE)TwQ{|x3mTr7O!r(=ly4r$}r4~r2r4+nvm>-jVJeN6h^8++(AE72f(LH
zlRbOWTKyQ2fn{{3AN|b#d?Ro#qM%GlN=Agwn_>;|{U47GQOI_AV5ZXWdvSRy-p826
zLROG;#OVDy%=q2P4#@cA3pbrvHxwHwimKPS27N3D<6_eic($0<1Hk)nZPZWL8}{6U
zI9u*MoC2hYO1e$oanu5iT6iwviRSb~n1Y8g^%wG+T@jhH&iC7d+axLEPVmlfVK4PW
z`VBg}t7I=gn>!UZZtp?7ySIAg{Awi)vSi=pn^;V5_{h4AaPgF|$6I;$vRk{ylHBpV
z@G=Cv*U3i(rj}e-uO0)zY26;eFgTl0>0gI!Ju0|j8>k?3=zmnlQv4!H($c5imi?!A
z`)~8-XFX-Xb18y-7sgqllX)FrroCv^X3x8DX3VP~ajWlQY0-9Hzprha7Rtnaj(Fak
zLHScH={$F8`ZDxS^E5Vmv9kx1_=0p$zEJmk>iP&RfDT5_2DvF>(7w302|OSAjlCOk
zvW}k&5BCmT9^!m7sblw%T-Dk;V@vFaY*yb160?}npU%8lMW4yeU#NqTv21o=eNiw}
zmTj79|Iv&1F~7;j>T&@x@Ji+bw7>B1t!~nWBeY@r;>CX_Adg|2(Hr1Uq3?i?5D^wo
z^eH}}c(j2?-Cn4^?%|n1wZHYIUw=|U_PGC4bd}<;L&sBm+yshqdSyQ)HcgX5n#32#
z1(awa7+s4|LQjsU>tSTC=HyG8uqo3WF^6zP^rTQ_gLo=-l(><X<jx)t9>*yQ5BG4r
zE;~`R6S0$$3&;=$Bb^547Y@9h$)ITim@K(Tn2RPnJClYzQO#L~^Vv=`$EDR7dl7XA
zfOsLZ5sFu)lV7Fp`IZQd9k9-$;00}r=M*lv3eh33+zC`GXz;Qc{a)M!#Uv}fq%%fb
z26GYdA)!(mN?8yOq2pmqgpu6mw*Y&-0iVbAbAV1~HC;+n2@wMNzwm?&8g-LLT~l21
zzRWJkSmyab9+^Vv#m^{Eie>OB1<%Xf#&u=620}$&7c0|tOHC8bip-?;?)}OWwBgBB
zC+t0?9$USB&1ktV`oegrMn=H@4Y<F$nz<cQ$wr$FnBDKi6L&=|f>40=iCqU8;04YU
zE+C<^&lh}a7vk}wWG-aCL!o9J*wSPreiwtRaZPx?Zr4t?Qm1!BxN5ha*QRn0#Z@_m
zk!b_yAQY$02oBm_D;4kiDRFH&6}+GpoP2`1K$Xg%)1;e&-j>-hz_$N8Zo_R)CJ^G`
zFLw(H*hDH<gu+;xL>)N?L48pYHA>vSel}}?vRHzf`8b*^gkQsd^t-}Lo1(!?@+Ovw
zn8&b`H17e}>(0#wz3zv0By}uz&lIhMBMB5sDP0)X>&Kg!j?3d~s$tV^ckzQ+N7nLH
zezAB)9pSa+MF8Mtmvi950S@#7k2C6Ee7*%7sMWmhIKYbvebm&KuI|ij0ob(AwUbml
zV@_u+xmIycDGfqQ<ZYs(e7PO#=84VcCu*Z=%i&rx>hKVsvi)nE+=EjPsJJS(xF74I
zp3wAd5(He_df$GwANC_gGS_Ok@g=U<Nu@IJ_a>jS@s&rr4W=(+HV%y_<BQm6uWO2v
zkYQty#gUbvBy#PCDLPb!MW@mtsQqLgXjs-pXle+JNqog6y<Te4{HQ_m$F`G2mb!p$
zujzsMwLKrDaFwK*a>`?ByMsoYq-rSDl!h*8&>9u(C|Nqr5kS8uNE})WwF*RQ6%5}S
zXUQ|+lj;Zi1fq<I20HS`l4xh77^-fP=#(Gdma@c3Qi{QCz2Ykp+umg^$n$kg855d~
zEe(hsd+MLSpv|ZQo-x^Rkv^pV*T)xeWjzx`TE}ptL18X)c74dQSmPIy*4?*SL;<z#
zBDqEzt<EHf!LZt?W0lixJy%`((as7U)tC&%qXSq?DkV=6R_ZWrkk#2{QR+8v@<YH1
z_CcOa;?3Ep6;0T;1&`AoQaXmbw^>1bm^4VU3d9+pIUC5<99(z$Cz|7Qh!jvZ#Ifb6
zSg6DV^s$XlQ(oiQ4Z;YUQFiEMdC`KkVx8G>ZsUZzV5ETWib)p`Vsaru`K&WvKR|+8
zq&vaYf3PbRKL!scOME)bGy_|e84=-WsGy%Rnwe%4e(Ywava*_JuXp^oupNxUwhbw8
z5WR@@R8RrA($LTY=XO(>?WByzm?Lmw^Le{eC;?n?1-9O<Pp#)B9lP|E?I0z0!`5^(
zEB$xV*TrdLGp%*4GH#!=5|PW#1-^T_JKhB6(}bANU3w>O3<|WF!HM2qD>biyD|M;Y
z;%ZZrFVI>Y3m9!+5A7YES>0tMS$bS`hq%3;fb(1x)aHeR7H;>t56JBa$CoD+PE0?M
z7K-eMez5Mc_YNtaA1ASM90S=gNw-MUn^a%vXA##n?1_dKfPtK9YMrI>_mC6sDC`r-
zbx<95<rhOcoc<*=Ru|d}EtbGl8T#EeG~=jw^^Aje4RVl-QwOY|{v9T?>Wv~$L&sxK
z()oN_U50y)wk8qSy|0IWnw51s1%DK>xNpRmWTvO_S-gT86(jm=6<n5!`xWq(I?IpF
zmMK3ADl|wycq^$P=X!U*LLr9aW$~Tw!iO?ZM|M`G6N(~(u{Uqd<EAmhENh^0sTgA$
zq;R_vAeN0+;cJ%S9ASwDA!@kTWpR0a_?Ew^8&y~R6|}I(1-?~ENQ^JfzBmmeBbVs&
zFkubkn$K|Z;sH<}fa~ylv6`4F=CAIgJrZJX!OPq(36Y>MHTELh-5)ffms4UHlX>)Z
zxmcdSSqyGm3p~VJuqrLT|5M|vhCr!0e9wu#6q&ea8Z2uC=I)loy?`Co_SqK;D?3Rq
zPk?Hwzj=&+tk(F*<z&C$;mozPSvmUODleRM4M@a=BxGc>on5jE^H{Xv^m!V$eP$c`
zbZS5U&}*Ys!4LN`>Zw(RjpPX{^MZ&R)|h9GWn`+>n%__AnX_Ly5&e_-=q60>ix-tb
z;P6y`vD+^i6A9PD+j6*gm0F=^KZ?tc76TWEcD7()aG5W!t1)qa1T}}?sY5i3t;)M)
zyHFmlHH0O8qkF}h8iY@#v=lf0zPZHth!)Z&k1bXX)N8F)h2baK^SO&Hz*$L}#*Vg;
z(HMN^_r^4$?z%4|L#UNPt@pij?ZRqQ^|LmhAeL#&aJf(QNGp!&!4@49*Pt@Xk=O`!
z$6NVvsyq&vC58W4p;GRmf=Z^I^v0$IX>Ue`31XDkH#Kh5hQ=RcKmfC^Lw^(-8!LUp
zwb|v)s9(<0V7XZrG}tnWsAQzvnMN~dZQyeBy!-1hTa!S94;f+;e!m35bashdT9)TV
z0=N2J|I{)fWuC2k=%6oIvq}<~(nc26BtR0YK{HiIgt!g>gFTA<goL4!IllW&*M=#1
zo+`G~Yjs=Mgoe6+X>}E2fC^a;>G@MCq!HvR@D0ZHXF6vF4Ft)u><0I+A@_dQC`1QG
z)MM>O#9@z2^=;PsM&Cm|K3Dze6a+YVp22tA?4{pvkz?{Y@N=h#T`&l`sxrANcvu&H
z@2`1at9c2tCpf{t?y6(I08>=3sf09bAXJnkS$jLc4<%1yCh8~n{0JI$Ow;O@M39w%
zQf<@ytD|OwDn^+t8r>E5tXv~i)mSGpi!de~g`z+W7D5sH^0VFzwFfoZECjgb7yL^T
zSUPiBU~m&GEmnz61@M{i;1Pkj7cjc;dSKL~I-UDev<ORl672*^=RJ~sC%6qc`6pNc
zF-V?g!Z?Z8_ellcbDEmq0p2lpYfxCIuEnO&R2e$-+cZAVD*_YT42kOc|MnTX7v9$F
zWrRt+`D1yuv;aJfa6K|PcUJBGXgrr-@4KEqXK^KS!;6BxVBsA=-31bP&-?@wOiAQA
zi@UD`z3{wqBL@PfZM}#I^)Vp9tmAOM909;B?s~^y)p1jP6Xy~e-lfnR>&!v6O?zu-
ze;?5V!kl04q4N)OvozYK*@c%mA&XMsDjfscT+vW?>~)}zEhB=)Z@6z4qoYV9Zt&HJ
zMRRTeN5Qs?x}Z>IV@{6iMM*7;RZde&^M!%bN3dVS51l9;Neue_c0Q_@+2gZ!{KHDH
ziDv32Q&3XL9Ows_r|~6p$fxp(*YO<e7Wc|+Sl5c|(Ann+we#D`%v1*gC4a)YjQ3t<
zwMR{M575sh2qmBYCkQEdlWyuAm%`pgdJn6g5Q%BluCx8BSQ9yikU&`4pJu;xp538T
zOlx!;Ap5MlmHNNS+iP#8fkhCWRa4C{Q-K&abD=w7u(i?%RzNZA$>_{badR?L&Dn>h
zWtQIpr{`oyEBo1?LKuk~Itba^AciWWt-ycRcY=3>w>7S{Nu*&eKpk**h<52J1gud%
zS7R3rXc&@J{v^WgmhsV(!wpk}N%C&=H?`_QWtm{#gQq-982#&r6JHbHnUpr(#Ik?6
z25mGrUZOvHz=8(ehFua75-4zMf;I2||H7UsusP*gC`uR?fc)Ho46aUEui9sw60i;S
z!F5!Xmup3S+$<2LJAV17E5D0=*8wd_EC00Ff={Z($%9Gru6poLGou4Brp{-d*qQl%
zpZ4i57^&z)>CLzL1};VLni0rA6^Qx)^u+^#pV(ahB@-`LYE0TClbD?1_dkVcrIpCz
z<Bk$g0%zOlk{nW$e3=)t+_?59?TC+2zciHHE^ZZw0biih@cbfX^9g=~4=A141o9eU
zO%>W*(mkl~WIP?Zqu3X6dRjed7L~vPV*-d~UIjhitlBHF#=uFlxFxP+QR>GOzP5vn
zzfEd^`iVA7;;(l6SJ{LHx)}nWUBwqceNfoyHbpN3Yhms+5Wv#AU7r$+;40)VX|;Oi
zBDvF?KsjUk?F%hi4$s}~4~O+J^bVe1%0+on%cXIo$jJ;iIW7XBXH-u_0!qjXr~0mp
zac9wz{;Mj|oc&WDY@*}v-quf!er{=}^-oEjV~yjaCsaC+OY|ug{=GvP19YRoEQpga
z+7&CLeF=e&X#J;~>{d?#kxv-?6C@f#Ya?oM(Df^2@k#3RD+Rc2?`(!motld*WZm|+
zK^SgU2dBIQ1Hm+kq^d!|btQ7sVWTiv-hBxA4*#=Vh+GTvi}1^3a__i?9^@F;SnUL0
z`QwoZ<LC)d9_w$xx`xQ>wtf~T=HLLrL6H}si`$#B-WdM{S{%UnX+mnt2Q=$q6LA{>
zXqsuUmxZ9i8V-_^lOh161TUcM3%3b{Bw^)g6W(w|teOyl?~*94v4(hChs8~VHu{1E
zx!}!Wvvqt+8m0HwDX#)weJ_7e`6RXmBrK$?Pbx&ooeFag22NL8Al6e=fmgAMl8Yh%
zFXn!LISqeQfxeNAzhGA~5)YToDNNC)yw$}Qx-MB(sZJDC)wt=!R4*=eVcKh|lg;TQ
zbY9vuq2EnuM#1$L64s+TREJpc@S9dGoN(b}RIWByFa~wzi^<r(F$12fl=Fr{5hAlE
zeb~a+W<}7Ek}g8%+l<<6IZR`2?t-73?$mL4;={jgCjgNqXHdC@O}5LLIRKl~UUNie
zL-UvfAvyDbWfCxl!YwwcWL~(1^+-yn8V}pR;7dO?-m!{mHRcQBW=e@t#GfYrA<TFO
z6be>LeTO-oejmil*~{*R??yIwvDe87NNoS6vDqXU0W@2YuF=R0kf$n=DLJ5hf}|`G
z?R>EiAZh%lVrQ;wJY%Amn}muV*I{=D$84biEmf?4CyVabcEVgY+LQWnH?v{XMJj)A
zbgq4M)mjVi>h=j~3~6w=LGian00@@j5XXbv2|4apEt&1UXri;Dzq4>{hAg!&nRt?n
zxW*}R*_S93=>R+;4)<V7T(=95IT@mBi&GVO&LG1F6z16>24a%(G<~!SlP434o<4*K
zPs4meF{T~@1@<SjO<+TgmJpUEgk~vdqsy5r_=yUUT1Nu25~u@}3{VR&@&4U-@bV5%
z)>d#MZo#ij{mg1iPd~T9alsd)ZqWm_VYDT&S4#g;onflS?-&`?T+FyzVGf>u0$jiL
zqXKP<)P=$&-zyn0qhJXsPhFp}Ah*UXe9?u|1;dpddAO||;Ox_aDp-+9?LV)Vbz`iz
zv((~5t)7G-RWqnn@H`qo=bta93Z@l3W?~*-Evrk8=sFW?*_SS@5CIeuHYuTw#@E1?
zOmai=t{e?*G8dE?((<k5U!1rm7?;i9h70-S6*1wUjWW%@18*!N<b`1E4DF4<93n|4
z8epNbrx{?z-%mLmbcJdCNa6FGb4Z?&9n)BxknmAjPI_6>?5F-jFTH5)*7f&$%trr7
zgdfcjlhXev$WLz6AZ0Hmgu4f0?5ObD)xeeS#X(gEn<x8XYg*3i=;xKE&*D$jbaG^n
z4Cip$)ZA$Brh<kSrVlZOGJQ-Mh#`he+_`O<vrxc1#vb1g_Oj7n;;a4&e*AA;Ty-gX
z27C19^6a|!C%%yR1a_Kju;2MX43pjgfQ_1k1-ZZoxW!=$9=HcY01>5w5JRu}YL9_+
z9M>ld%;Oi<5eD7(LVZrt)q5&wdBP2FIVgw+H<~|;;h<wR_G7{%9uf-tK$UB8q(5o7
zZ|Bvx$U2VQo+xV=FHS;G>jGp}IlCYIufI{lbztrjO_+|TZ*6ekR{Vo-ZT|8>INJIr
zTY(ugEKQckMd$g(n4#ht)8z)UQhGT{JFf!AW)h!Mj|qh#t>LKc!!~E#DP9Xo2y)Sw
zYN6Y`g<C(n>T||TA!gQDrS{kOT0IBgIU;}F4Rr`gsei8TqeVsvUh0~UT)^dru~Svs
zEt<{j+qhI901%m$X15$ejpDIg7!FKUXSyvLHRQ=53vhI)IGT-uZdp8lAKho_Q^1@q
zuvX5a23Yk);x1pK>aN0|mI}*~ALB(gMr8O!l)^ZYtN|!Gc*88rVOIja><^GLD*_oK
zpXeMd;KGDq1c;@<LW30-224Yh=&zOK$_)5t(0hO~udrF2<uB_7v-2Qz)Xy-hTM?GJ
z&yGL-L4<kV?<fh10!$(y$s7m545#iA?|`alHFvQ~)3=zWqI`v+*I6qtw=w1N9{0mF
z+rFVgmC00fOU`Ne`u#VqXft6o+U=A*uWG@!6OZL=x=f&XEsEQDtFiPTh?7P2mrev)
z>qIW=&STad(%aABz*3ClDChhUYMJJkowfW=&#B@xE>;hzu=NCri7ykBSlZ|UN(WOl
zasxI56j}Eibv0qc&LkY;VJvYoA_~5~=^-YTo7LKrlRF%|ZnRK_<w6l&1}m+{;0QeY
zC;$;O65o2s*l=K>btT}rWvlqe_QE}FRvk(#v?>&+e~|9UL-QU2CzKy2lPXtWRu1F*
z=4A3QqjPfRN=JU@or$WU=@=iCUo_=+v1I3(c_RPq&ChFC>H5At(5{&>oQCWo0d>Ex
z6kY-frR*{uGX!>LW->074spz2B13ExN?6Egs0%Rm+(r9Kvy0G|B>U2&=a`A5qNvYm
z41F$zD8z6Ok+Akm0P6SoyD#p_krJo}@dBuQ2bO6qFAis8$)tQeh%3)0w~D%hzqYX@
z-Frh8IK7jDGZ|M)AvtAz*{hdJd3<8MKv`T<A+2)CBr`)mB7afx6>4loAqe@jPcx25
zIGX|}mlXWfDP~K&FdH=V*nJX}2(MYd8p#dElx%CgR+|MW=BaNh5~Jxe9At};jF`J^
z)O?efh)-9dhZQB<vme28U|F`sp62%+g-KG?7s4?in2s+2w~FQu^AE@P@5EvFT{GbU
zzrx~K%`S|U4R^+~{MiM=@V*peMuF8Rg^}jd0sq_*&BJVI)xJxc;bxdCrFVCl+}mL=
zJkCxHI)1=BrWsBq)?q^6Bx%D0Ee0NbWmE``R$VQr?OsRqarN>$C7*kl!8ql@0dXOD
z=Ii?BrG*ti_}iwDNGJ*WzxJRkiayQ<DHQ3lmd>gUdbO&~9V~W-aqCS0N5@8I0x?U<
z9((bo(UPpxSJn1011di<Pv24J`0rd!^9Xe?pGq~87`As^fD?s{z?g@0Qf+Xd#OLzZ
zfFcNzB@5f{dvc#)?7iX*Pb7~-s@JFd2vwVV9=v0ASOZHH8S<39v@8n|it)z;3q&Bb
zD0|&tV?F-ULq=tn^oz1wAq1l{Nf{Gt62g-rMf@EU2!hUHYZK+4JX`|hd#;{Ri1icv
z(*z!7kq=e<0*Y3y-v<v0q^8Y_%0NOUNwkTt{j*T?G~2)eOOqo9DT=zNjZm-LV}ya@
z==y&kiL7s={w3us|C-Mrq$qmvv?pj&$y5JdW!XoDFkh6GATT-*nq;%*$ow5S`GE<>
zD#RW92n`7y@90d&jJ-MP1x&%IPxOKYZmf8GJTUhtLaOK_fmd=No2c4LI|0lX193P4
zMF&x(6{IGB=3;kVs|xFpq82JJzRyb?<(!-{$WN(6P^24Uot50<&=x`bx6pk!?y$ZY
z_6BnGWS~$_0#_%k2Y31p!U689a{$2PTiL+2Hj9EIEt<vtLB!J^%td<d>U`_&Zb6OW
zamyAim%rx{C4j9ETp9k>b<5`s+9NQ46VJ}An^3WPY{whrpH;`d2=3NFfMY-93pvBq
z?Y*Os<vaxb7SUqA#3Hk(A9~COw2-0E(CnbFb3NOd_YdpgIHm>tI12y4Pghdu`3A~6
z@{rVJ0~arfsWPD%oiqRAQUX$m(!eMM0tts}gP`0_?##o#_MTHQAU~!2?O*F+w&I_;
zi901H=cj+(2Lg{>&_L=hQW{^cY<B&-2PXXEjD!h*QuW5qCQ@@B;klfgB+8$#QR&ec
zhXzj@sXdub=y<3cM#F`}|DyG&d*GYb`s`x6cGXFMH-{Bfc9t|Q56b?BAq^Qms$=HW
zG^q*kND~1#tZ2*3dS(Zi`BN!MMM7jhoFfghBIrgNu=n+UdqIWgaR7ds+_9L2)j!J1
zzXOOVk*&%gzH`!^^Zhxo9h4O`UK9b+AvT8X_EIoG2|r2r{YnF+C5@-=1$PPu<_&3z
zl$Pm($vYeL^*lCPByh$T#RD#}UEkyun{d3RIFy1PAp7QX*=oW{dgfUrpYuS6tVr#(
z3wf0yA=oNDnmrnnzjK?Q%g$72f{E87#q-P+;Bg8fdlG`1UE#*AKIxFksNq}jFadCo
zchrcr>%_Nxv|10x#Zrid4Z4bo`?yM)TACE3=QnGUG*!&<@Rf6kz2gb39>yXJ7NSCb
zvI(?Xi%{^NmCE-L%<mDS-3f0vsXLsC&iwehkgd>!J=v=8BG|8yubqtk*j_f>RCa}j
zl2P>%@`IfEqs%LqfL^~q9p^<SPKBZz*)uu0*gT)A*|>NZS5oA{Bb27B!tTx)LfRC5
zRrLj(GinJai*xq*v!SY3*O{iEyIxW1)SfL^4%Th5Q?6ev4n3^AXa5Ru{!j_0MjSmz
z>@sW!8(ML_k~+WDI2jRI<6;Ts0l;@1M7D%JC;>imu!Zy!?fAbb3+m1G5hWMDCi>R(
zEwt3s!s8=uHjqHsLbkr>3M{tz$qA(&Xe2MJF9g_M!!Vu8*|*txgb$A5?(6-r54<xs
z*!zXAy+%Zd9hsB;(UaPB$U?1&N)LVI*60Tlu8PBfoGkUU9R2xrk3$=X*vl91Hc;j$
z<+0CVnF*zB&2}xWxxjv{C(nDxGoT4lVVqyVK`xoFj^Xk2G;`ka%SBC7`KW|LOYFcu
z<*KffqE!;(*7gOx2Wdb+IJYQ*aTL7L&EA~bs0sB8jV47<S}VcmSy>!`)y;p%_2!>r
zegYZ{;=cicm*?*9q91qFfRh5=*QrsnWUY|Bikb(Q2}RLEVMarO5QTejjPdgWtQnY8
zS6{_SCtDw4;t>|hPNJ5Ja*Ffc(8=N7V$gE!v<E8Q$Ue(obSL>!XuDeU*SueOPxAyd
z43C&Ym;00jyrn6~MWeXg$w3n$AN>tMGFG!M6OY`sQ3zGi@0KJ77G%I2#;Fp5<S8Nm
z0|W`@MfY=(!Is}3p>koP`Q~=5p^_5BOlkxt)XS^Ysn~sn#;-<C?YHoE-CL6^anHUS
z?S7!}D7){S`GjVl@I<w>nFJLUHmmnxD3VAXpJJ4=m&aJO^*}tizP|gFn$4GayDwG#
z90EMzH(z0^4Tk;c39_9sH>E72d!MQp!N?bGFO&&VYa%qPKuA<^l=LVVRQOVb9mqp}
z7Cgsr>Ln9_%gTCy3^zVdC4Kivz+qe41m#a!9oxLq^;N-Ia+tM>b}al8+N%YF{<Ns6
zr>~A=O8qQg2<7Z~ZVo0YY8p@W)}!5r19P+XP5^FsA4#qg4p}!o7{aV5&pE{bYig%3
z(yPb5j~Fr0Kzqyy3!Q3v5O!4h!B$11cg>7Mk5%v$LTsbAlM(I#B|V@WAu^OB;t9=N
zz9<nU^gOh{DV|6mUahY+v5D3>2@(G0UtPJn(Xa-~zt%Ik?9}sZGz!pS@o~R9CiM!}
z-^AU}a&~%B0V`#lM;ZhX3pjQqgmN0H1I^-H;n3<+PYQd6>A<l&WH(Wve-&#(!A>{O
zasyD35GV<6$wG?_aw(oScGB<WI~YnXnfEm7!s+_Hd9Ozjzk@uP-RH4VAU4G$P!@;W
zLdw8|K(Smz>UcMjOybBF<Y@|!ZkDt(EVDb109}6oRYWqOfAaI?2YKUuB^-Ur08~J$
zzpQkH9{i=q|E=nKC-W;>E3w~=)W5yg37~Y8+oj%W>O!Q2@hi`usc&(Xq2?<#cuQbO
z@|P1$a<HaCH|hWO#r4O{xf(zFy$c4ag#%Ldwv`N%r5Y~fReC=CtJ;by6n#0hR9myF
zprwXFH^*&}WRuC+@MCr(2Pnx=Ps8RDI}Z=ac2MnJu!ptuOXehVP3h%hkT9y3W%Q7=
z?DsNfi-M$s#j}W&#~+u(dX3t<c!`cCAyI>f8Hzp}{hU~U&MnyXE<lciK+u8j+n$v6
z`DyR=o2+t%Ak2+Lb-!hIzs`-YcIsLe^rRm3Dk{`t<~E29^unrCD@*6rxbK$Id27ul
zggV@!WY44=r8;Odk>8)JW8Qk$z_HHhM&C+7&b6|sRAQ+)RK;wLJXW5g?C9>5>JL?G
zFjpG+pEp{(3W*~b6zbqOuE>cgTeyAoJ@@Mij_$wgA`rC0&yTA|t{Z7L5Zqv;pS)T^
zg}0Fi(}?Y+pAc0DY~VGCzW1UUQF1Y#Crvd2-IUG&rbB*+3WG3r^)%eJ(P2q6oMh>m
zWhQYU+!@Sk_D>oSg7O_rqLv{6v>!6{mJpk1)a;-B35;*?krx}n*YL$DqI##Io$-(j
zQ8U&;i{JtM*V2Dav?Qn(RDYULA*~6W1H$%oW8X(#YFkH@h^%IOXb;cJ-x*=TWKwZa
z(&HC2RtfiR=WmTZjT|QG6T9U3hz>D0Ew$5&Mn@F?^ORzh5aTK{A_Ek8MxlLc@np<-
zdqs#ScHoJ)UmWI}KHfPNF(b~h<rjI2O_1igk@*mwty><6;a$WOmq}g!Tz46^Y#Vb-
z=GY83EgZM+65>yVt-`eE$j?dFbEt)OHHmv<f{CFdOZGR@|9d<Fu(8vZpPb3e=~ib(
z%C47xygaNo#jWBXtkh`AkJ}?Q#})m1LLcMfLJ8)guAT;+y<uobTK~f!lzZ7XphkO8
zgm1^cvKfk9%I<9MVj%0E7DNF@a-h#sfo|F=-R#`%Z_1?^D@9gkU?ua_0jF64eb6Jb
zZOtKW)VQ)ni9yj@0lHRSf%=eYhwNKG4-oz;qlpiG72og}3uyHIXw&l(nGKlITA1)1
z0cRml!*)sihTfW?>X#^#&PC8PIK?KM>7h&p?^+~zTrZG@%t<N6oHF*<1OVg6+QjT-
zCwU(W_)Z|UsRa>$n7Zu}n|Yy3YIW;!raz5SXL-5w02$=Rt?}rU<ouCiI<0gb&Y87w
zyJe*RXu;h2VwPo;<Ga(qQYn8|bO0(Og@|007Z&NF??8w8ba+N}217&DX9~McES(Ti
zb#t+x%pcl9HHbS9*y2U`AB)_<(D;OQo~Y7~3iyv#vrzCWeK7}JQEw}wEfa|1(KtQh
z>f1WgOnxMi??Cl(Dz;YnY7`G0w|~}P<`>!mBdfg5j6R%n5)1_@WnS9sp2Pm^+XNn|
z^Md3|4}dKs!JOTg@lp2^zKaf+vij!)lf%Xku&oS$x^mi}70_7#UM{Vj!rdrZwj2-k
zUo0_E>{cFf>%{(sk#IzRIhqStO7o2zIfk^R_pt)zwF}}nnXyZz8GggCWH%1<_qDBD
zyCSwoRfW!C8~?YQ-?gp-nD|`AKS#6wuHqa@_VkIpkW}7>IXZtaULB4H#|%-8w=v${
z2KO5UQ%U_-ZbgkUQLC1thCAC6OLr>iJI{gWC-6E#l`J}Sh+soNd#IIl;^;;?t*&B!
zV5S&q4<Y@=Be!O)C4dp4dS{psA!%rUw7Zj?3p5VH-xB<+JM`raKXcm!Ed4BO*+m5b
za})_y+q22}O};3U(;daPJ$pfgi&nO0!E_cnelFx`Sik2XrB>$4ropcwYJZ>FyZMXd
zA}7>92=?VWU0%Gp<e2eqpKduxRh+ce%%T)DFH6HQ2*Kn{(?b_x#Tp{m{q<NPXk0Lk
z(Smu>ncYn1ce{bJw9<|<&oy|;PVXi=Rs1%gH>jFK4yz7Xs%nt|3M(m@Q6}X};#B!^
z9-V8WWr@T)R|ZL|0=4jQ8#&rfx7}R1k|rfvP@w=r1W)Vn6BDk8rF&wxt!|xd1()Th
ze&KWQ`y@<sSzx=*GZufdg19SD#=<e8b4O|o?ac5#=K6diu(}k1&?~Hade1uq8v@$-
zaO+P#+%al5BT2v7o&nF?SNQ{uM(vItqA!@*KKVjoqiC-dPA~eK6qx-3StPQM)D57d
zWMU-ws#;0+xl~R&I`sHv8GQFZVTOOT8dVU+P(SS}lUKVr`jqqATmBi7QJ0KsT=?+X
zao!zZCG{c;mC!eJgF2Fqbd1ku+MSq4NxvXi6z|gTl3>pUi7|ozAd=-tF)~5)RfUFq
z2WLc=%wN;p@SPKMG;H?xf@bB71iK$0=c}qrf2vo%mQZF#{QSu`x5D9wW>a0{#9ry;
zvlgM;Kbk7x{dxg4L(EKCHAm}7Ck9)VdqIzpKQCSGT_Zy?fO&M_GKJJVO7jaWppu>+
zWpUnblNA6OW}0DAC0meR1lx^tfUqaOd6lSNVO4h!MhU2#3p5#Pn4=&9no}%@HpJ&F
zUl&phfOJsjF~5{9IOnCMp|F&}_AvohwXcP8qEFHVI|IO?wgIqU-pfiZQ^{%^?CBXl
zZEd|8(+HKS|4*9Zo?=+MhqpwK$G;s@J|3$lWV7STpZBQcyWZjF^(H=VV!sVDh;kl=
zFvvj^N>=Pax*TfZlT5$gwKB4Y|8i}YwfDAV?Q@|ipUE&Hw$Nm^wtq7}V3%WLtY#f0
z_u1PuM-gg~mH(~QK9|_!xx3Muklp$x=D7BcsBx$oe(l$9df<Hb8lp2iZuPG%Ma~rM
z!2$xypS}m+_*s^l2|c&p4oxKQsXw(dGR{Q*8`uj;Nr^8C3KGdY7M1>-pi*Y0ILplz
z6ljt;Xqu6ogA6;a2KZ}5ryQ`%tKD5~*Jbjf+XRyd4RV)rkFyN>X~prX8t?-;0WSTI
z1E4V!S&5A8OnON{|K6~Gq}@QN-0L1DWyAv<XF-`$x(#_hjA#+rKyh~w+8%&m>rYDr
zQosGR{=N*y>uTs&M&QKD;Dnj!WzduQncz6p*=QCnlhBzTrOIV+okAyfUSYO*7r92*
zrH_JznggME064mG!K}rLX&RQb|8T!GxOMLTGLuleLL$miZjH-Y;V5YOXSKuYQ$&q|
zmcc*i7)@n7tH<t;RXca#owxG647GQa71AKn>I1Of$s=!el6fLe6eUl1I|wqiJih$C
z+#1L-JVvc;NwBFWk5}h0rNW}nI*oc`1zpr_Ww5?E?rJ3`&`ctzCw|WB=v5lU=dJHa
zlxfVUDCQ!OU-`aF77}D)ZK&@nniGTFWGIn{LZg}(3-GNfJDtADf;WSJXaTjrWv<~M
z@Hno(7Fup;XW+mb>}o9OM<O%cDqtqaX+NCKL+okkzubwbZ~}B{EcVyfP+AGxQI582
zJkpDvFv-JlHX*nGL^M6wXv>NnLbq`GbFf@re|g$0J?smGkzo8{rBFyQCm1~i$Tdqu
zpwrUTJv=d8zTYRM*&oc>YKvnvka!}21+?LNd&s+A74`b`lU5<0Y9ur&4E~uW_O2H=
z{#bt?O6TTiqUFnaPAC1##PvMEHwC2llq?RG+HC3uA6PzFEoyA!fB1_eHCc<<1pY0#
z>E9Kde=ozZPpUSS>exoHVIA=IX>4NqWh;D{4|N@W;=84q@Uf`JT54L7KF}*9bfa7q
z{Lbsx>>>=OcB0BxBA2IShQ5MX4r|hO$MaH*ulE2^j#1YEP+jejrOZ*I@}#$6L2O$C
zi^&+8S6x?@X#vk9o#g^2x5hc{I#;3TKIWuUA%d$}r=96Qtd~BdmMP7@|I{hiLE<a_
zq6$V)Y{g_yRFygwQdMJ5&vffmVH#wvbSB~6+ycS$m)?jstlHZQ@ktC1WULhsPwNw!
z&Yi1atRU{xuO-E;4sUQN!%WglIKDbi*zg|xQpmi(f)iZMHsPtLm|eMOT9tm5>=}L)
z*}n*U+_+>?BP8(nUjs0GEcJi0>i<V)yzW#7CjmHD7JtYL0$RqMx2|rHRX7Hi+aO=n
z(fv!iH*tm5kU0}iRLx68Jko}UhwTTT3ocOLZFZsz+-gG?$5ZZ|8c)Q83YHCmh^<L=
zD?f;{I+1=(+f8j~=RIuZu&s6pPN<0Tu~r+F%#?1`hoN*T+9}!bU0b-1`?im#pe#hK
zFIWYQ*U_2j7MQUDcNBBj`_=#{R(R~h-I(+8@eG6qSyR$|@-y|qMl98wcRzHE*gDec
zYE?g?NS=Ai2H!{x0LOhrdv^t4=nw`jiTOPK&|)ZSgVN;oiuu&Tu=WQ<h6>2Ke3cRc
zJnUWJ^?1aOk6i~|RrdPodzq%!hYoYAhwYdA^0p8~p_B!`msg!?aq}q_xu3g?++4M@
zUrnRHm&Lw%n#71~`Q~?M-M4qNu`|_63QK=o&EAsudG8=P?}R6VZ^<+|oQ+$u1GS3k
zF|u;SC=cj>hN2T4svxLVQii)f$sf(#!J?z}|GZzUEQV*>x078<d1-K0WwR}}nX`G^
z)zqgL-%baxoI5T3y8-nSFZssL$!PC&AbwZ((&FY6dQ#JwO&;-LkjVy4pWZ#jK8;ti
zSJ;v%9ep)A4D!ZY(UOnKlymAKAya8VjjBiCexqNOGO-v)dCvif57{2DJoU2%Gho>N
zE(Mk@7L$Y>E*1}ZNZ>i%XDdUJ=lN+uRpa|`umxvbaMn2Yv}eHH(`A0QQ8?9N<Tl6;
z%>xzHvmesHTPZ4v^ihI7d}-ff%-)9n{dqbIN~hr{a<Myeu^6uXxBMNx24qb~707^r
zn}tKZ|Fo|+#2nx8N{DHVNoyr`^2pIRdzWuu%Z?<StmC0JXqwVWW+!5o-SJu)twMc_
zH1r?3V{Kddj(om5jt_R&kM;Tg#Fbju@(A(66_dKIvVTD(F=4q$OJS;EQ2Li4chdUN
zIk}C;JEsD4<TeBH`?IkGbY1E9oIXg3;}XYWo5mhlw@IYIJ+apkNMCf;+JA~Pg)yjc
zRx}<6A=vLwXPr0CAWz1M__NvTg;)XG!B(DRK?4+ykVW%HuWo;fU+3ICGG9uRY!yvI
z@pVm(ihO-(mKaSo$8WhQE%<USLdEch=wy(LK;Z;s7#T8r@HSS%s)Z6mOIj39sn}iS
z{lnaV0^k17Q~h&k=~k2dqm^qn1~oi$Is=Dzb61&$g3=+qUZYUV_+!(l_D_OS38=&U
z75*g9aV?bucFqVs5Y94|8pL-gA@RtJhQQW2pZF+bXp=aZ@S&urw>#lbJ>iW)l<YNM
zoAE%}?Tak0aA@?J+m%{GGfi9xmJYMGYY{KBnhS8xnLXQAnU>O;oKQBTh;Ej@Icgug
zX=ivTna`WpH)~~d_A3;h0W&`v?ae<0`dBvZC#hZL6?G#Bj~R_%V}q_L@&Db%J{c77
zIUGw3;GMv9-J7<}1cz}@>E~MAC%4Ie8VTldw&0fIS=77m{8H*%n9(KT5jw}Tq_IuS
zP>*Y_J`6BMSjPB=sR+4J8L5Sz(l}$Pd#U17*Xs~2R_HK#xpcXaiRk@;28w&vyvUu!
z*P;Y+UY<itl!&?jIf{!*&81G*p{@ja3%pQlvAagsAnC~>Fhw#NB9Tc*wq-y<M@D{s
zXfOHaYy}`va){DPQEjd)+)4tj`GR7RvQ!C$gW=CL&!nhx!RaM^x-j;)Z|2uH{GaE{
zSB|GO-*2~`m&ol|a|oZwusYs?Qf_Yy_6Zs9Ss;3>vUJb9wcz~0hz0i!XaL3m7}&>}
zLuu9OT;wO?-O_`F_%YTv((P1z(c_k)jSE>4?QxX0Ty4*!`-Jpxl>LF=eHo=-_JtO2
z>iL#2gH!crN-$u^Ok1U`Fo=W`9ocCi=o5@AUaKs)iTmOPpi-Cy+_y@eZxviXzh``p
zz}$Mzws||F3sPb2WkDixW^*~rL{1qKP#)h33+{FK9V-i#=He-`_^L$Vp{VQ%S0xo%
z-k~dzZ_TOdA^moZA$l6Li00=Jb9w%P1@fP<+MgNANTh-NyZ`hV?!7ykI@gPQZO^|8
zZl|Lhhia|seXH%aLx1e!suEGzoH@Qqz}K)b>3hksARu3JA%Uhk%L6mzsXQPB0ZjP3
z4zDdL{T|RCdS)TVhs^NND1hYSq2ViqCK6p(-<h><rRPTXuJ6_XQ_qU-Rb~oY(d1ZR
zsO=!sG|kj7Yo8W>QA5+QcAd&TTfzjZrBcZ=?5;^v$qSCd4Hk0%AE#&3W5v);;Kgk*
z8ojZG;NJhCt}bZtS6fdna^S~pkOKj)9nEe+{VT>NP@B0`FkN4pP^KP0y7+t*t0+Ao
zn?_0g)aO<wS6@&~#6+n1r+u|e{5XC~UE*h-y$FM|5`t}8Q*q!EF`T8-59>kcn@{Ju
zt!3sj4dR=p;}-n=(`#XHJGGXJ&T$&GJ=r+|gQ?ZIkX(0c%q0J4ZurVQU@TAZ<%?Q#
zd5fba`(2W~qg$En&X#k8vI9VEsP&8SO*3uY4rqUG8D|T%?q6XtyKTNa3hwDgv1ot^
ze+>_8_(a%VU`*W18Qv;PTzh|eS<!cAY*EjY!;W|#&7j#nNdVU%W#N;{>Nn|oi7A|^
z!(!)qauKQ|rZ<wXz*uvqvYIu@Fv8C|#JxvAWp_V`g;Ip#Dg{zoRRjy-Q$~9(3UA<R
z2-pY(lC0(d|6da0S#8;vlM}D+0t9Dq^ll%tG|$taWwVyH4Ap1`{{h&{Mm*4@3^3*}
zc$RV>oqzu6HW{VQ4?UIJ9aB|>3PqhO?;mURhnwyHAp-bSmWK&ZMoF8ZO>(({-)!GO
zgzeu`rsM4859N%NwDgjI-;k<gFWm_Iw&{WNwIr~Z@0r}L35F~K&SMREoE8*7=|ko&
zVjvF?sQ9o5JCZe>+WL3|MVEddNh-zfB$(-#VElS1>HTN=P}1p%744=nvx$+lp8mJA
z(<nzD!aOj97ai;Fx8?m>FM6%Ex8kOQpUq><Y0QiA3MCmkBm!~4<1cU2KCHI;huf7s
z0~Hm7dtO#jiJb3P3-HK5N=P@jv@CGY&ARi)z=>k=NuAWh+uT8m6-O%m2k`JDm^pr6
zPM!+U4)+oSi))q_EkxNO#wLa*ASwfHnQU0_dWrDy7{&Nw<L<8yIdI?4jJ4!NhLznW
zXPL`ihr@IR5FUQ$zRhNz1c?3F-Jc8$jA@In*KV+U-}ccl2>nL2+<j>AoqTXdhjRrY
z2QVOf77Zg(S>$j+*Ddi^invs&gP~lp|4@C+>f~a_H;AQwET&yWa?e-i$WU((A2I}2
z4EY<No3Ja`Zv4COG-obe0<uO+zweB=Fgb)W0X&py0)_Kt5C$QQX@D`9=S_$N!Hmws
z0`*f_@nF65vRRIT*M2uhKL$-6u^AL>{B^DShkDr^V=(9?xu%%pACfpX#-I#jHkO}i
zX`U)&mw-SS<#gHm6HO%R1-da47#Y}Mc<-bPQvP!m-<=9bHCR-C&1yTEjJms5Yn3-2
zOLSIm+UR&@P0A~-ak{&t{ZMv=@eT44^7P>7f!6w$Kwc)3q$fc8E6uupOht|Uk1x9Z
z<LPv8GZcNivkjHG$Wfqd>a7^#-NYvj9-^1<V49{->e0{OEiZzw%+6x2RWPL{Cn__m
z#*LA&;!LhX@t@04k|TYkeih#|x?FqktWLh3i;N7&{NigM=dgmCN_~bg#6Up7cO9^6
zOA=(mpK<~Mc|?~#cQXD5K4<@rn#+^bN8|?H3q#5ZuJkW7V(%O5`#o4<I0*hV99+e!
zZ;l|$-r8QWCE~y2Fi4kVnwnhV=?NU=UvcWUED;p70L7TXBdxRn&%*3pZho-qWOtg0
zoSlOGnJ>ON=O8Eh#tK*$>A}>l|LM6?A14JrM$po{rOKhU8Yli|Nd1ahbgAc|BeegI
z#lURsj{JA}Uc>bfCygu_wV2pS7xL-HFuhDumKE~({p#%lG~z^Wd%sw!&5;LU8UuM%
z3T4dM?lKi7NvhsyRzde8SZYdhiokP5?XuS^wjJbYzw*cO0gsBca5+R|!)(5$-1kSl
zP#^bs-{*gPujf0g)#oL070VaC{b>p}pCW`g*}Q&Zuh8`%a$JOV=In9oSKV_>=yu0)
z{|J)xLAU%nz5#sv$DA{<xVU@IK@+fF_pY?1#mXFey_2m!%4x@cwk1nG{$V<Qq`@B=
zJ15ny2p;B=;PfxRiM^tBFSKRn;8D297N}SL&3M70%fg{bpFO8k3HkE-NhH_KeMz;8
zed`(p9;Pk;O3LDs=}S88X(#&W=;ijzE$>X_cfICLD9u$j11j-}l2AxjYzuZ7xO<AY
z9ASxlxW@bS^(oyM<JNY_7@-m%N^CpxH1`%_0B@w%+BnTmj+8|GFd-+rsGq?pm8q*r
z#Ip{kh+VkL1)00IsS3e#WlEPG&>pD4%T?-{6rP@Z-{3cN7m(URo9IT4orNQvn6J4d
zn9Q9q?Ww?xx<<*N&sc2uSnZ6RNxouz=lQVJL~we#T1Su?cf{*D=#!u}H;*S8gW9Oy
z-zmNa^3_`UAc3tw{DQhOfEvIRO_=S{v^nGr^a}?&$HMz>R~?w_i(Hcs$_D=?xaf2M
z<dUBgjDS**8f8T6woS1n6WXMdt8<^DLKEL*C8*~6>6IgzvIg}PD}cWSy@^}2kP1`2
z&C9anE7(@pVDl!k4Z;~Q><fciiHfyai4;o%NS>@wibr2BhVZUkot|F(8!U-#E^dsS
znKd}(%c_BF0^rqbsrx>LC~iVxHilKfJFfxW{%6y^U1ZD~ZPB~`nIz8_M+_ahQQV{J
z9@S;<MX{K@p8Wy;jAO`ojXbl{<G5F6!x7TDEaz6*d_4;bt5$wnF5KBz>=`b6p>p9M
zGhuFzT-myA<F&rL;>fUXXPzZ{yPwMye9aNxNJ2DZBztf~$y-H_pdYCwjnfZujd*ee
zrp1^gK{e38SI-d6?a)&X`^F_D^>163eIabO`7JG68>7Rebx@nYo#%6$%4DX`4V7?#
z1p(6r>TcU^O_53zc#klGpUwO<RW;T}>Mva&o;51II#s4f)JjUSjkOlnuXe=9gR?JX
zmiw2YL^niXUJ39B)f78YYQryf7vBmgP-2){#8W2{$>j*w^xftS*B5@yS8?I$1!}gu
zEewhDxb4S)KS)lZ#=Gt(JD4O*!`pC6=Oye!Lqbco``@o~;k0_@@VT_RxN85}o2q$Y
z)}~hg3u*`HRB3p?1Pf8N>NeNh7F|tw_lS<x!Jw2f3Dz!B)@o^ok9|gJdDx)Y?*lb^
zo@wI~kj@+Ek+^REVvO+Y$C3jCpk5=V+uSK{0kD((4x^Ovz#&|1(CFgPC?N-b8H?ai
z!Ie#nOqo6&T9HRI_|(M_@qF91ddxym+Ut^fgXVbO1;QdIcw);iuD1#Q1>z}szHWC+
z1<E>Mw>`0~oAE$|+T^>=+o#Q3-C`kYi;`NL$c-O8h^*^j4u=8fMKYnOZJRJy0fwM0
zr&huctwsF8nn+L5&6lgxkL1g5`OliW75POlWrKl5*x&nu<4jK0fA+I&4?xD~+17C?
zRhK54q?*K<;ibfU$X`T|N(j<PpfyWY?G$_Gr$guM=4*;=H1Iu`5ir1VnCFl(Hxc?a
z#gRKb?cw-Zsr!KlELcO1ikP}Pw1BTJ<7i_7rk?Q`^m@FYK70dX!<0a2OEb{#*c3OG
zkeyJ_Q{;IDy`-H#FzWsi!EJBjZ$&kEyl`91McB?KUMAEG2WA@#c=StAa*>473*!p9
z^K-J({qc)v&5K3Vs?H!1kj(1_TE@vWUM*l|>cgg}MQT@C1==%TkEQUmRA3h9$KL8~
z@Uc{|eT7}%=%pG0ou7v)rY~%i9`<=8M%OociiPRl90)$pJQ-ENG$BtW74DAM+!3;y
z7!Kfa-tkwCthvFk;Jc&(hF90z=ds%kZKgdq>87d4UCHrQge2}kwM4;@c5u!uAQ#Yx
zNcUm4cC#TMWN9ME&|N-{$P6e9F(|kg)e+3#Yr1Ep7z&yX3O>eN{fH4OzdUK2d`+7=
z(u&|)`iN9U-;G37jc2>BNGq@~)v5q0;QjAi)b>OJ(cwcI*XNddtBC~rFuO4kQL*5r
z=B`bxj`<uEWWdLJLaG~)|I6URKF>9r=;;5a_#DrM0Lxh*H96q|6nYwT+rPW%u5bSj
z#@FG-B+9eA+Jb(t8qq)5oU8HgGEw-;!U_`~V@xxEJW9%WX4RVHDta#_Z9Ir9-ulqr
zLGX?iFi~|@T!LhJ2F)5@k8*dVOE~e&+<et^sNhHW@QomheIv`gd;ff1>a2^*fVJH=
zetM_?qn-&R&N2V*_D@?<;=>mu?*Ic8bb3s_sLm*YLc<2eU08S-FG8v(3m2y{*<H8B
z^O$8#UTNRtchY?jfE`>}y%-S)$?=3d7;%$suxmfr1XgAs0Ebh|&GA$bC=YaiCS1&%
ziO8`{B6T!C2Hc;ETq5)Zf}&T0W%9-2uY8n>|CYCZO$w(UfJZM5cXQd>f;34jpy*S9
za!==oBL~3VxdDiBCD#|5Q2ZJdXmi{q(&=*e>Ivpsbnf4T#W%8o@i84uf8PRrpRK)V
zrR(DfEF6xZ?o&eIDngrg$wWcV1Zwg-rrFa!fk)zfnGqQDJjz1=yp!KcEP7Co(ff5)
z-(kxLW}fsI{^S}c(qwAXBMFY-7K~(dj>PMKRpP}Rg~gzDv3it(ZzcIcIR!8BokgB@
zCQ$^7q)L0qV7`%T`EWn<DB`ul?4!Jz-jF|XiqT*=5JmBlG+y<+y9#9;CUvFW1!_Pj
z3D%FA$7s>)(qeDR<kCG@bY~hGyyp}4Kx@L-@+b({%F;C#f2LG&4!D4G@1HKeCbRO@
zeLNd0TsYyQ3#qsW>nViCnhYt^Tog?6AnYEQVxn6Ol>sG(TChc|8{H9U$B564@L8dU
z|N8Y83HVe&(sw~INVe6ssChQ)IJ+dzT|x!+!x*bsa%Gm~Mq0$-+4_gR#GBfD-Po&o
z+EUrWyAfG<MO(dCm9GY96Eyof13tK_jh-5Ub?iLUAg#}(7PP@V{eahsfMa*v)1}hH
zaSyX9%vHjvq6jw1+tQ+6ZFpQGVTR~}UC?qCQ8{|==JhkdDn%1j|F4wA?Y-mu8(!0e
z*2_cCU8>vFT-eMj3CQ-o*Dx~ZjGJs`4{fh|>9vZmGzNB=Ks5lfHv}4_X9H|B4H*E>
zM%-l6C6c?1QxX~n-SOhijsDeo>tDPg<@AkDPYN|WUUGyXzI#;{d8kI9&)tTJlh@ub
zKE^)D9&JTg;qUUQJ(R*YD7vu9LPCz&eAH5Y^`{j`we`NW4e6h2xR?P>`?lpUPyu+^
z#?~F7Cy7@;!uqsy5+m}ZHw@0OKZS2?ILihGFMh2@R-&KszBCzFoUf*7c&;OnmM9}q
zz&ZyEgkwecTeSO2ek22f4o~ZF&&M@8?Jd>`AxA;lC5VKp!OgAAr7TV_2eJw<I~qt3
z;^_Y!U;HpiO_`{F`EP5d`hG3!z(NdXe_|_^awQppd$c6e5b5AB5+kM9V_V#za~Q5H
z!qN?GvGo89Z1-%Y!A44t9IwtW!#!+jXpC0JO{K*sqVa7|Bp7SH9A*a(L{MbHv4*3a
z=yEc8U*t|GZ59;P*89@9#UU0YxjQ+!U+uF#5K`d#i;)~SjYf-C=Phl<`78iT0g;|e
zP>-(1(3W+Ft#@o|KW6>5@GAUy2rZZYKoU%j%w^428y%-n<>-L*fScoGA;~}kwM1aA
zs6WBTAH=p@rFj)~{;5IkitU#FUm_zxo>!;<&tY(MHwcFM2(&wrlC%K+tAfs_>@sX*
zqu3Va87nVjs)8@csV`yoFvMdf@3EIQ2m+k|UN&7?#|X>4jQ<LbCs7>V59Di(T;z(f
ztnQ2l;ZqyIp@Gu1{fJPtx{PjD%;)gbaDkZ6O-qYn@5uO~{lYZ(-Z;GT$M#&F&vRKO
zxz#S3W6P#&)kj${I{XEnX^~OS&1W5|F_MXZZ|~&lF~v?o&SLnTn@~<wCtw>{aveGo
z9Rjc+Br6TH(S&N}wdxm>FSONPWk)BrS@}oJ8#c2kG%cnXu$cpJkgP!%F^~4CfGDkT
z;}(Z9lQ{w34zgBp<0_4^{$-@~EwnB41d2-=_RBXH_TB1tv#Q=@6K`Vg1X(iDd|(<7
zJd?C{p@(nSfN~+wBlPfIVTVo45RUlFmPKG7vj4begC+xK4of=k(<Yu7WYj)%l8ERI
zf?<t>kPi8{{NQE@>7)~MGhSD}`oDVbzrj)7%}MHWfxw@bBAK7X6OvV)X%nm4<L}!U
zDwVV`H;>8Fp$dYtS$rBG0jZz3J1Etu(Z2dbgqnKcxC?3J?%sduj^J*1$IQ&H9B=o*
z&{Tb^afqQ*K^$mcw{I-}&5Hu4UCnq)pKSN8;*dFs8Sd{U&iYPWul<*bCcsGQtzxwJ
z&VSolh7l3LtJ#AnY=|ftqKQBb0nIK|uRaZE6~?sXfxCq=(D_}>=VZ*rv`Hx+gZ80l
z^%Q|Ar5V_k`<p!@^|HOgEQNy`*H*e|$=V*$K;{E<+Rd0ruoTwW+MO}?-Ljif?bbDk
zD`o;XQ(`uh7}gJysoQyZN9DrJ^&-at+&H3wHm^^_$A}3enNg~b3}oj^^DP$C9&o`o
zrDrzN#*34sekyAdl2OIRY1qA%1!c30X52M&h;73me+{eO%E<T9=W{zaR8<a!IN@X0
zv=~Urd%j2hDu~;i&Bu_toU~w`ZTW}PtO@kUaTWc>Y=<KY;9A+V`;TUd`IgEm3`YA1
zIybM5xyz^SDA6LQm0pIihbj3As86|zIKPFR%-;3??O*G*Pxp48@%rasZ8wZH0GPZ#
zKEYQpGZCx(0caz<2wEPM_Q?TS5}FK*`}$^-h(kjzIs@RSWYph&eq1>_eYTU@+X2!z
zMz=gNVss-GHq9A1iHrL|Y!^wt7Wk8;Bo!s%==r-xqizSqwx%c$!bNqXkhNpsxPW;#
zxxzVjtyOGd$DMK04;w(snQAT(3+TUUE#)_VA$-{G@!FJw+TF<M;9!UIVAXgbj~g@8
zgwP;QJ9=&DZbx&ZWuzt5n9Qs1>IqQO*eNpgJB>GtN*h0Mx8)uOz0Y;jX~|vskc`w)
z{fqH>6LBLE%#`mK9#fVD%wS;UMCW{>X<eLPE8mJ?n;@eltPC3Kc44=az8!!5*FaCK
z$bq5AG}TbjYp$=v`PZ*!wMB6}Z-oLQs=Xb4JO;78)^GjRBOh$cS+-50PLfetFMCe5
zM4nE*)21)GQ@@;{jSl-80E#7+hson!a2g9!h=_&AG361;r2=g8dEWQyUsMhsE4-rE
z>uGueYP;u13kOg)f*fR08cis}egQ(%(z?Ps<Ot=(Oj0r-qk4H>TM2u!dTcp7QRS7F
zUUQ=MDV&N6kAdtz!^W5|%s#hMG%wM%3a%Dt4Iyn>Zii9X6*F$HI4VN?3F%*7rKP@j
zdR;qHS_@g}?rXbwsKX>ln|p(J*fEW9B@aisZgLEY+vx=46_o;}SjIXAalkF-+Y#Za
zG<*@~<w0iOv!L({CuWH|2mn8^)L^>+*U4NXA7{KQch)`{-!^jwdzz_Eqc39f!X*c;
z@LLs1yG3HXh%weZy+%S=8|}N;+^e#4>&Xahz(rTP%LVn`AYF?Xp6->mY|H2!1iv<`
zpoAF&&AXdRywySJoP1jeSMz1c1wgq1xXe^DY6N$RUdm7~7MfWb!=`Dvq)dpNWa>f2
zi={mEST&BmGyWyg9}?S2!=^eJRX{kTn`T-AY;d=qGE}El0-NLmcS5zzXFN55E1YeW
zO1%TZqz|Mhkz@{u2|O8L0G5P&IPx*m@dCf`&X}#%(-SQws5`q07Q1$OFXIPKT?**$
zchVfX<Org*=@Ub3SD)hSq=f9yooW7DjFn16-R9zxlcY`y2cTgzlkkcJ1*P`9eFe;N
z3B*=P{ph<&oH@kX2b174Q8=%l{0C!8E*9Vft461_9OyP7#w*qQX18pv+%R0hPz6q6
z73BRK#Y-o~dhIdDM-e1&T;V)EdO*Md^*$x;2bO6Lakvj%`dRx}HHwt>wn5VU19b5@
z#*Q1Y)MfncQ5syW0~@(YvQ|T{9E6|w<m|35tb`71dPI$!jM3o~s-)EKSVl+J?}pX4
z0Hw$8-()1j2m1TlmS?3)#O7kzx7a^R*Zb<F8KPVF6r;S&%a_11h9F>grqqk+{|4}U
zZyQ(?K_zN{kQP($JkSoRj(T7x@zR#BbmX-;wrbRE-0+}G;E6Zu!<`!D{&{X^-Y6l0
z?`eZGxUxq!p&GCD)Oqw*Xe>x|xsK~EQeEv*F|&>azqd1xcLxCJWv2&rscm{{3s|=t
z1*dzPPyxx*+9qo>?*}N`|2~<ahov~Js4H-;BKT1_>rD{hJ;<#5@;jheyhrwb6H}5Q
z$elwVl#hx(5kPvLeIE%gzhhS)@7^voN??+ycjEdNaf~R?R>rkSpBgc*P&#fWQMPR2
z0j-|n%&!`%o@&UgZr&IIxRk?Ei^d(*gaw|JFJO-=_C(!CrhzXP;ooYgXPN^1VER6W
z{vrR%UP)`^emV0d?-$?bj*wrC91<1Xg^8M)sV%L&R%4FX1|vx^k1IQ0oCE{hXgR&+
z_UUDt;2t+u-^?5xjbDio8gzrrpuH?JiMC))^&<y?TTkK@dzBldPEi;I_?nyzmC9Z&
z%M^gQo}^zM{oyqBbHzN1Jv1?+(PyW+V1LVu@^pIT5U1Go-nARh3rf9mk{~+j`3ANG
z_ZEzW@IGE7W`P#;yM1NhUNk4sl*!;*F60(Q)>}1&%T3m{mt`8PUdW#|B!-bEz*AGO
zI5;h})^q8q=(ZSHqLL)2b+dS_&gvWcQ^w|h4b54uRwQv%wy>!fJCP}eo+X?cToK{<
z<;S$G1Q34MFyij|tEOIxe-}Yn+hm6D3<>f`aYxw5zifRJZTR1Zjr|<NAv)N7zn=?;
z#hIu@-leexv>f+rX|ZyfG<QY94Nk}J5U38ll0^HG1>Qp#H>^qkp@6e$lStCoKdEk&
zSRC{6mFY*oi77wchR>RHHfE2g;RWk6z%37K$jj?0jF-wkw5nw8NGrh{Vq)#nbcVlP
z?ZJ=RA98W~|21_o&x0w7aEqkH0<i5f=htRj!_b4|qDnlJ*Ngya>m{y=wIOsOpBAl;
zfKb$qp<hBmUaV*suHmEhVUeB<Tsb5rR{uKwgu*EWNZVd$$+y}S5F|purIhf>>&r|$
zd>@coAkcBMEw)WjD#|F0M5i(LtzX9<0PGg_PxM^RL%+hSptYCilh3F@$poIQ8R&k2
zTXxI&Fv<hRzV-N>qV|oPwKCYiv8T!cjCq|f-HpIdc@E^#lii=!e-z}y|4-$>uM{(B
zA_wh<xU$??kne07oCX?wl}ae^{?1#=z79jEuo<g4Hd%sA3v$0Wu%lW*ycL{A9e@7!
zJ!&%#(4gcM5J)KPM6lgX5UE?t3&UT4SY$q`%XK*C3a2=HKA|<kIwp6!CIskB@<^n{
z`<k3ls97P4JfgpeR7OK&FvF!<`J4iWozOFC>Ui?8ya{H%{|l6}2ZoGbxgam5FP8=X
zj04TkM(Q7Ha*nD7#B~=+C?T1J;rMdCy39Aer8CHTJuy}b@HAEj2RK6MB6=gi9(T@C
z_4+~xhJHb;XmsiGuR)I5k=h@NL4RkUti0^;6B`zZ^f=$|#sItDmfZ`@_izfx+bo|2
z4xG<nrQ)(%WticbVn;gi(Jo27xLLvXG!h-0^;x$WEsjqZs3b=ix>c{9LcA7Ei!u8h
zo!P254)B!A%5d&bn#Kcfl8ET074lDEYF82>5B(<y;Z`X8Gy$XN`-|CabA9eFr)!D?
zRjpI_FkF!$K84gDndjbKO{Pg{QyH)8T<zC*66HE(SqiEL)@C}UfF&`cZ77#@Qmihx
zybg?U+ijn4ogL5oxH)YS>k)&@jyX6oz}UIEbBa4S);$L1?bmF5Cs6G|H*M79oy7pq
zVh1f*P-AK`dYTFX;ij~Vo+Ec|p@<TtFkiH=b-|Sly&2P}=l0RPU^-EVxaa|JxRgLA
zBO$!V<P@Ho6O3S;^WKCb&U<)k3}oo)02S>HE=;wew1>23afFweqefYhVn#ERxQIOv
z=JANBuOaK-{8Kd;ohEtMaVqm@{!f}ql}<NEB6|bp>=5$WN|j9{`M6u<6i(hqD8Kw0
z>6)T19QTp|8d4p(lj6-=|7CkW!(&xqk~o_A`c8B+yieJBkB@^OK_x7)>r)6x9SY3m
z?ikfI8y6KjzFJuAbjYJIPL`RkTr-BExX>t3Iq#n6i+BKzP!U;yROkyaFohJy%fSXV
zty0pb(%qjbrVTFs>LQ6bHvW|yl3Gb8(VJ}m5#lGZj0mP$%tt@!oi?P8AgRTIb9KHZ
zAeGm9eTnppT0>krjfA`^b$zPpXvc)U9O=mHTRt5KdG+MiIkXX>V+E4KOZ*V5Q>q0d
zP%F5wcybGJ_&fAbVAesU?oBn~CkkX=IABwAVi>jgM4|A|oSqwKKY^n(Iukf_Ymt43
z*XcEl=2??*C(vJPy!PD8m0}l^SkV$dy1B{QS0f0>sduawRwFS}9;T<<mxziHzrL2Z
zyte`0s}4E>c@3&c2NyQI9K`&bV@i|I8_)Xn>zTD<xn`+8aJ5KWy#qwvI27zf9<r8(
z<!mZTM26M#9%DpiLs-qE(XDwN>5WC%+I;BevnyjqHrgPlut%vsGf;{ktm?_!LG_)S
z!!Os{#M#NV21<XWYM#C6$aI=tQ>~EVUs95Zh=D{=HKFHDdX-PDB(LKiFy`zkKXEJp
zZ3dK<^KR)mPZlzr=y=nh?+Gi68}LXvW8(LQO@Uv|7Hw+Gt*v{8w`60{xYyjsk2&LD
zP4NI@QD&!daSL6(9sq?lU*OdFBisiO#zwn8sNZ=}3b6jlq1EaUEM@A~DNkL#FVfh@
zrvL>Xyk@GQ(ew(pM=0Wooa`|G$GYT}$QvTeB7k@kRJN4YQcOzB>20U=`%x^m)lM~H
zpQYrT*s+R8^YKNlrF`xdMpu}htq~dM5SfpnefIxj`%J<?m8^N##(ub0ZTfjZcFf14
z{(Bh;<#qk1`Fp}J_p2q1)u5_4G^~WQyyE!6aHu8`nJhY_P<wG&q4EC3CgGw#I2Tq7
zC|9MKKY_p+{^%B%-U%c`ULpOxY>xx*;5zpkoOy02GdsB`i2;R5!|&mD^e@e*0v~o-
zjObb(7fAP*VBB_BdXNR6a?MQH#cxQWi`fZm*IU5AdBLcE9=1~w&iNGQDN(pdbg=iu
z!bSbi;b#6f-0}nOoB7lRrD=5tM9<aXHo`AE+2h%d_fcGwd!|j(F_rd5U)hF7TD6l$
z2s5=Zm2bU&>e3T4U~A?oc<w>XdN=_lf6$9GNN0Z1!WRnt=n)IBq%h75Dkv(4&pseJ
zC8Dv`0ND(0rdAG5UGO>k)wuK9k2D-%lhzO%p{52)7QoOB(A>wpPd1+6pGU#4P6C*5
zfZPRvrucTi$PHYj$Zb=zS7<7gaGI@@C;oxZc2m{8%82onXnUIIlLHN(EGh&TZIyrR
z1(Wtu$|Dky^|;AD?un&O&UDM23X}~ijk*bIvL=Lj9_lBtC6=ic45W{PgvX7;Q!tBU
ziI`lN`l=`wZ$hAyQ?oP!EYN|l5R3sJZNf3IAek6WrfpW0a^4ZE(Xy@`BZzJ2vG#O7
zdlL+XHb{b+RUkAg$Tz<56ugrE5VCIZ7gr#)ZXz{nE!|%G+(HediRc!?446N+$mZq6
ziFK15u#=Pm1f%lvGSvm}3Mco&&ag&Z;4|8?&DMjnqT(P_a!V9yrP54b(C>9Nz4=Tp
zq=2TQF>AB}zv_fYB#9xouSyke=^@jZihll(>H?XtTN5lc{*UtWW(G{ULLGpTQ(v8b
z<rT-2K?q*wigh#gZ@(nsX;8jqfFI9b*#ecX6n8Ml3zRva{*-oLjya~QWAF(s18VHH
z$|rCe+c!+3z7xTU^NIq#R~MOpmm5}D&}Zl*e2R??wVfNd=+X7-<iXwg0lqK7W_VzP
z)7S~dl1>Rhxiq^g_fm5c68%$vkrXsWk8Ry=MYUQq+PD14C8Qz;tRQIc*7bu#Jjv!-
zgm&NNQKZwM18fD_C@H%+`p(na>`fhCu3PRO*YdZj>bpC9YZ64wTNt@|eg4o>2x677
zZ=U`*H*gMk$cos*iiE5k_Aeb!{Wq3V1V;o|JOd)qX36}Ce2-f1(nT%-@TBzr7veu|
z5*MFRX1$9<h;V=2B+3rOrnuPfX*p_Q-cR>1SWsQwL|5d1$4$uSX_7@|^-|KmW0M#N
z7-Y1e?-j%h9-=yOOut`l{76b2(%4@M{)FP-2!u54Myc&B2xoZq^Jk8nO|FXwP}dLd
zJFU+wkj|z99kB_R4(c4)K#}W3h;L{t7E=RCFAzw}Fg<82l)h>wWzC*R?FCV>Wg>$@
zr|W5hQm+Niy-q3`x|2KXMRNv6hqiAYSw~~Puo<xU6Er^|)^{(+h!3u~k6j4UCIVIq
zOK;NIPkoNN%Jc`?UtXjK2K6EjSg(UaF*Dl?VVc&QVl7P#X=2X#<Nmj%fVhj#{DKMc
zrNR<KJ5#k&&zydF#3BWHlAwVm@uNxEa_Ib@<X$j7e?!q9G~g`T8RId{O$5ETrvS;b
z=$@x$#Zqr5_lTIQl4)uJ(;4McGjXqD+@_)8^6^5}odV@1njmd{0f#*<xkLwA4L`<Y
z7<2fcBxIxa8U;FE&^frSR0JV}9=AlOK}wsWlp$KuUW9#%Am<#QG%dVCH@_+6U8Yt#
z^0$ZJXX9A>Ehq+*08XHm9s^q#`K5p(k8mE(hwX_r_tfJ{Wtia=X^2@wqha&tJ_b6c
zCq763V_^)A25;i50NO;KRc<W_X047PQbsNTv~7mNJS*?vLdwGOc4fF7)Dj6*Nyshz
z3=~6e;*>fLum8Mi;AKzXQTy5ClK3TJabJGSSB}x&4^96LmtE)t0nM8rgLcWOEk!mz
zS&UtQTivZ1R{o{*=Xj_4L{1Qd1&TVdXk1=7dilBm+e_e&217OP`xg*rkk5R-dqqUj
z9~i@{12J0UIZ}>G#Gtk{Gads53v1#7V>ItsR+9%ecrxPP5Q|rPJR4c_EB;{~cU!|f
z53ro2Gy|n{!zt7NH8Y6mDd3z@YsdY#&|G7c*_!GP;z5M`{D&YOB3kH96y;{%h=h8V
zKlglWm<{C&L-e4KL|7prOBtG4%v%a3WQ)7Gx;+t7A6vgh+*l#-5(9TBdY<9Yh^7=j
zbPC;3>(pTqXot0n<v!=eiv4_KR(F&Y^ANoOK3#HK51b*8B{lK&gy){%m{#ydKr;O*
z9r>kz#xiZ`M@X620T<E%jXrP8y>Rn6zUQT2d!A4o&znw+e1~BIqH8#JX+HP;MI*u3
z8R;K$XrB@*A<BQpxAi3D%+lOn<zPm~k3n?FtvD_M-5<2<`?6xgs6y^x;1r^v;iAMZ
zF5G+?_i{S;$1oOB0(2!74GVaiUPMBTBVlY9#uJ0P2*tG3#g!3@uQw0J9hdYchXWlG
zjtKY9C_N+0i<QpLv$+2M7^1f4@^3jUXEd4k2V6S)zfq?Ir!5k3`th^A_}lXNui8M9
ze;rqhh;NX%0Fv^fM_lK520i7Ls{}(4gg+W++-$mBzqr}DTKB5PdG4lg84UQXLt_ci
zO`6~l270M9JzRYe>OGuR4Dg7JCWmAyX{?_7jV3F~tL_Q=6a9Iacr?sPPYW%fL5G{-
zsSL$CDX!qYEdQofRt|Rl9R9m#JfymZAJV2CEU`@k?n|o7KU9*Y^wQES<QK)4n_k&L
z8esDojJ~B4cbla0gx&3}R+4aa935;IE-aBDy{U?JH=%1}qJC=8;KE^E+rzZQuoC}H
zTg^s8WMciy00I{psy&*H_Uc6Sdxh#UY1MKS&S+78nlIA;qwPnO1k*)QJA^e~o10!>
z!OhIql>C$}<xgT^a)9m6)r@8uu8fOY0!8_uyn#@^GTK$8Mb?G6`QeGZ!FjO^q`L8v
z7^-_}u0c!_Nn0~8Oobb#pi%abNp!1B$E<bC{A)=iFtybce7mvH*v?4J{~^ybJ}yxY
zG7lzrZjLr}-`J<1CUPveoAvI2=3Mg-KHuq8qp6=?>9<ukWKAttE_n(fPq@c2j+EYh
z$|oCVUnbOpuSGgk#pIWQt;}oyp20EMCpq)9x3vIrJmm#-V_shHPF}j;!7EHOoAdIY
z{Yyz1eJSW)VD||7+vaC8&Y5!!ztXu1kx|OV7B3gb7iFo6#?=53R>8qLoJ6AD;7L3v
z;LIovVqM0U=?)zx3ROYqUL6mf(=+?3U=)Q38}j{!{Y%TC$pZJ1<g_e`&c}>KzHH4d
z%-;L*Sp1>)m(sD(t`8eykb;e;EgfS*C&=t0XL2!sUkLc_q{ATHopSY)%3FvKw^$Cm
z!RI<L4EcOA(yMPR1s8T0l32#lsw&ku+o|KFIDf;KcU52U>eYIPA_oJ#vPK7d{|SSZ
z7(bZ=5rQdf)I5aa-SjAzc_I_pYueH7v&5kji7#3-#Up}60tso(>+)dk#uLW)e1EKp
zZ`wc$n^~L<r^6x|=^B<%xxbj(6ml~kJep;xJ`Hqp?=Qah43V;gsKm$K!}Se$8;g&E
z4p-JWpGLj@f2coR0Tw$+A9eV2{>vv)egD!VDt+B>>QcmyM>=L#gc9X4cIP{`2@MeK
zayQVfmOS`|dq0NY%w%&~K=>vlhE#g~Y1K?H2By_*fWVR%NJb7z@?{_9>4LQbyo_ZI
zZkkI*S!gFMFEuFE9@(^@Yeb*p@Yj%aUFJ5dPo`u2hfV(I`#!CWaF6H}qlL@hitoyp
zQ6iGx1;%Z2jXA=KK^_=zd*AfbXkOIfsnMHi-hp%#5lg#qMgtq^DqoB+;2*$Jw*dS3
zhI@I$qG@`d$Nt;j-pCgw`2Oui>>tgP-QQb`gI+xtRQ>b!rZ)|l@Vl^(FRA%$@Ho^2
z=wcQyW8q_7bA=@~b>FF2{*5_*HKUQN{3^c@E>Wi?IZJ(Ut+%}}cd11=#v*KQrtzQ$
z?Xit@DY`l`wzXjq;d@Rz7;pik4X{0Xe|tBCj_{P!r|LxcM4a9MUWbDZ;cAQiMiQCa
z$m{Ie4oUIWSwf3C8n(grnj34~sW)jiGI70v+W<1&Qm}7RWf<;r!EXkK+0=EO#qyCg
z$n-F5^{n0E8UoZ}N=Uu|8xXx%aabert8s=j#zIxeh0An=G%fTvcDs!<$6yP&c@Grd
zG5*;>8#e6eDf_hY?n#usnuG`M+@gYyj9xpBfjL~;#0wVjRK#DaooM4`-r4o34OFi`
zKY3xm-m#E(<$K1zZ0VlmU1n(gr|jt6wE%F2fEm{@Y?+xWXV^t{wo97`#ozume4mzC
zK(_64i(+9P<GO$6Q2l5dPZ4L-R-RgATM?ddQN7dKieE*$J|fF$6vEf3q~27$FSMZ7
zjv3)_Tphf~xK``o$7-`122Z36yTr9O#1{rrg^|pC)iw|92nY*_a`Hy4OSNH;JwGN&
z2NQ%VS$@e=VmWRJkZQXp+IlfTeRzOn9L{msxu>jol6E<S-+R#B9xUS5NTk@JL;$Fy
z_-<pDN!9&$5Vo$>&@I^;CG71x!K*mcVyViO)?hgD%{ZXuUT$Hhj(g??_8Oj4DVjmc
z!jlQ~6u4!5SDE}$?(ZJLo#4-+s_gKcVx9jT)HPKUp=B?Ep#V2P$iHWnlsz1NT3n@F
z?n%6M?}Qz{MsW)#U)foV=*`CS;(3p`M3fxQ)U!z#BOVHnzA+Ds_lv6$5qb*RfZw7$
z$$OMvvbqTpPstliwSv~No{G285{6Ei-25T2t)g8a;GD5Uq``LGadAU1$0ov-I9>fz
zMo3oj+I7jQ`5(9h0wX<gZSFXM(Zonf7rODCLM?$29e2k%?{SaexVUfhBkgMxYcqn!
z)H4a%9b=lg=AOA|L~SJ4%+Foo0hewqRhVA+*dYLLIYB_stZpnWWTO64%b2dnI-O<;
z<KZbh5I3?00$Pj=T$T2J3vo=1E*pBH9REo`kAOnbyeM;(9~wa)u^5Pg8T&&<f;bvX
zo3s9~R~Y2VNLDX@p0f=3Oq;I)PN6BIT%ElUbo|xSHcQ0dv^d_<>B+N_yR{Z6*&ei!
zN^1>Qq83xh`Ddw>_d<TcfIdZZk;rAmL~Rn*?1IeL86=#DSMAI0Bar@~Bh2aFpMan(
zU(dkRD>gad9{K<EZ#}-;IX>kWybsK}>uPuH!LPJ)tFG&;BM*$ngTHOj$YQGa!l;pP
z6pnwwM{KZnSvzjiqEgXWpDyCwq)@_yOXBS?j*b-^MRp@ZVP^^pU3QI4Hp6qn-V0RD
zxQPMKjmG4T!P%YTQ)leyo!T-1NP{QHz(Af<z+a7?t_J^AEJ{jNK{kVIZ`C1UiOBzo
z<rQ17VmS&E)xoOI>}P3Y6HX&Zq-n*s8pS^2r>CC{19jlW3jI2;Rg$u1fovb!cRR_h
z9#>_{$x=%K`o+sJ->w#VuwKA-oMgSp>FdACwp1z%;cm^MwDySFgIY@k@fQ>_YGS|;
zHgS#;g?yI779YU*NvmA7^HA7Gf4^{-O>zJ;!E@9H2H-i<Uyw86#0wK#&NXZ?fRU>W
zJvH=C{ep}jskHt9Z_)dd_H4eja>$E)Z}POHi;7)_AK@?X#i3R9pWyan1G5G<Ls7bL
z0pM=<AJLN3Z&3Ak_~;yTts-GF;P!#yFNm*`9H6avBB=>}5rbnt6Kesb+$O+{xbEn?
z+TB|<Qj_VG4XFj#Wz9}>3SWG-3ul=wBJP>SxNg!pJr(RW*!-&vV=XBipwh?)ND9)&
zq`!*f(Pt0aF|y%3s-<gnc=1Pguy!A{eCFKJu6MR1v@AC6^>o7qw%nL4288fRZTkS%
zkx*V*QNYt3$6EFkCf+g@b75t5)cW2q2Ki60K>;NUh$jESOmwRo$+Oq3#cA!J>(SUh
zqs@k)mU64Ehd#GoVJwuIM;zGA^TT`R|9=sD=dW@h!4gwFlb=r^I?0vG5jG6e%7i=F
zR-J}On1o7BPIyRB5{O`tt~Z!Op%c)227br83mDeut+3k^1(0HL=4~p?D6D8Ym1TbD
z-KvP)nK~dS!dkelYdpVh0FK}Mx(YM_sU^+qpH{g-V4aW6x=gb;H_E%kfwsD|s>~F6
zNfqA(rBchCP_DHB`9LOT9pETol*$oyZEn=2MSN0rTC^r#VG`TMvI>r4!Zk!jp|$Xp
zaPmeYwunB^#xElg<G)2<eJBtP8fggR_v|gaD@Q)L2W8amz+9ybvJiQnxZtc}gFWNY
z1UFdMfO5~T&{ak+U7x---3|TfZ^psNajTE^{=^8hPGdf}pEn|xTDCv+UoTg)9DpT!
zbuXKL$mW35CmWbfR)Sp?2*#B#xENkU=oZ)eJLP%a$E;}H4{e(mia-7_cDopwy@gdY
z$_6@&z@P{uxz5vqT+)D?53Z5RkW4P1V@oe0e^~VU@Ah8T%Bn4kIX$ir35zO2N=|-F
zUDi0`le`k%hfuqtYch{xJ1*jXzD*M1`5dm?mXkI$nit&k9}$;iwkgG`<aV^->J_*;
z_45l8P2RS}B_Dm1CTINE&6SlRZ4}2Z0wj2P=|!xHBt7hpJTsMJ2X-Tprq42I1)!48
zL#72eg8U@Dd9x!d9IgC+R1T-HZ*l>Hn3mV0vFrhq_wLe=Hlw~6(&@k}G`J4&jp*?v
z{|H2k?^6>&ZjP+WyL2AZfcnIOI^;T-SJ%uCpOC{#jo)4HpMq#3Qx~o1U+X77oojpU
zYGRm;OK91{ylC?)?;ambI}E#?1o^t18tk<|askr$w8@iql1WGz<=ijKv{R~E;es4i
znn{iG38a*|p0h5FH9^gJ4W%g2qm}COmSfG?ChV|^J1<J}^!c~RnEc6p{v_1d7yml~
z1Q}yIs>0nOHPE!ZiO8%jLbckr9szHYx=i|1{8HQnyQ#W%qz+6J<l#eG@R|hJo{$^6
z2jAaA?_g>G%Mrd9ur73*gRaly)K62ovjvVsD^C1hllMBbR-k1Mp7C6X^x-<h<)&iB
z-Mus{4jIVgvt{1QNR=sid|7?oZyBxaK9DIxxR%pClZ1)CP5%@x!UXVH0|O&h60gc@
zlN4!To=3m5<~@Jj>ct=JBhe$hKVZdd3S>i`l{xl62i5Von>%Gk1+nju5dI}Ow#Tce
z;*CaN9Qiw_AQOfA^%%6eg!r}S{BtF9*9d&m*Erl2kQ-aM)0!{PHU1zuCZ&|mM{6`U
z1#S^9gWw~bcVoL}oyYQ(ylTV>+?(-whkK-{S?6g$Q=XW#SX!=wJ3z;P;8=~}l@xCG
zEFKH7@Jj7?SdcCQwdV9Rw?c3x0D9jgb{_>oZZiT;u}iCd3<TgY>Co_P4T5F91=Pnh
z7CloXvo9+>8(x9`whIfm29=dj7l&TeUpw<((ym=<4FFl6s~%PCF|S14MvwEgiAy#H
z1%t)dQSxTkM%-e57SZjJb0J*wv)e;A;SVRHBW5)Laj5?QG0fTo#*DM!#E2+{!F!|y
zAif(nQ7AA10x?B}-<-vEQ=6x|o$9r7F0+V3P07=oyPx2`j)6_NC7TwoNi|P+JSxZI
z(x}Gu;i^!&YkQLYmED9F>NAh(jx)e)5@7!*JF^Cxv^KHSf1%gWV6@+sM8W|5Be#nf
z?gSA})aCNt_NuYISJv#&zSTN+^6}RopQ_|Sk(Hq;w+}QR_5MpWM*?~kB;O+woYVsz
zxvQMq5!7Kj<B#7McZr&z?qFb&f-wbexU2oLHKds}i_Zi2w}$|zkcR3bEc=U&KUj|W
zu)Tud8k08KP>X%H`im$J5RuU|kHf!P3(kh^mu9%?l<ka4OD6Z^OihyAz*zd3S%2&W
z4<vwKN`%}sHJO0#Kr7I3%$+)grlGNE-%swV=w`mMDN^;uMkaPXJpMi2=(@vPNRE4L
z_(%rg$_xIt#(8<euCX?XU{g9He8|H-Y7l?!7e+v$58ctI4GP{g!Jp6dl|qXK>tfJT
zv^t>cM~3P;xKBK<>J=3jC1Q_6!Mlj$T-HJ{2wQ@DK&V8HEXhY3nJ4-b9r$pg$D~|L
z)~;}SA1F$#lY^v6=4zh9`%EM=csH<N>~6kVzz>b^*VKD3Lxa#uT=fXF%Qyynjc=if
zB$Uns!aJr#H-%(d@ue#lwM#|FTqi!MI-oYp!@{*TK)zCJ!9(@4bMxkFjzrU581dR_
zA3gs5bw-$6bx4sH5x7lo;JKY}iKJaVWwan#Kw9L1?NH+ZVCdb??ukzz)_ab6*1&_g
zNtPkx8<7jujg+=>zcxQ>$TXSi07_VAb*TT)tRj&mlQos_TAhYkDj>6+;rw;>{y6cu
zXq#~8uao@H4w`+&>WH=UeQ*-zP#zMFG=z+j=(8F&Oi0`rGWe=*eI<^t#h|-KoZ&%^
z@F@w3eV)9i;zlw{WdTnzGoXThvcn%9090WGm5@O)|IXs0AZb@qyh$fTIOtiD!abkG
z>PSgX2pZD~PzHScWZ933nT4cjHb|$l?+x*w<v{#FkAz?NP0Hu|r(B=FPnSzYYEc=D
zT95nwirhgAY{kaw(d*)X-jVoMp_|ICUc7$&(@f{3lHD4)!WC6`MzU#w_L@v;&L&51
zMyfCpOZO0dnsy!}Pg%J<Xd%`+eertD<ja$U99xx3?EeF;0UyFaLlHyGK=W4nf`VJ%
z?;69-Bd6qWL!)B}z#4L!rVA^?A1&-XH<=uI0m`r7JSE=aDut!-b&wWi<@Qa`{*P%c
z2Y5*8os6XDHf~GEP;GlA({x8wO(j4B#&i>dub3?aUoiJsRR4Snb(HJxKx`<<cS^FD
zYFjR8g(jR$=;FL7NF2|5yew9s;mts$c6-_;wjmyhf@PCx_HHf>qD+HYDsm7@(c<W(
zXac0gtFxzS57)qI7jn86XtW{ram2CK*YnE{e8ugDQ<9$}<~)wd&G<9J?R7<B7hP3d
ze@@^wFWG=O>Y9C-`AmUCt0wyzhvMgoh96ND5kP|7MQ+`c-9e*aC<eqD{ACiZn?f|+
zoPf4Gk7Yv-mykBj`gqsmTdtqAsVGRQ5b<Y;9@lU^lRO*pDxKA(6p_B^8!bL!2zNN|
z>txDf#cBt%<<*kv-jb`?z-653o9$=q5_T13Q4aVpyY$QkWZMFYR%OroWago?PWIuZ
zEUa8n$DHGZ8j4U3-A@$u&9;PV7fdc9`hKIf2#KZFHOQ}h1s~8mIEJm2R9KU^COIq=
z&y`@0WH;%~sYTrpzH9}38T&d?J(*AQh2e^Sjr&%B`s9c|p|;#>*r{P+@J-cWw4={g
zEDgJb*o)_{HV<Oq`^_i@$h-P$V<vi3;pQ{qyd_Q)sV9(?u?jt9W)r6P>|Pp#njM6I
z;(k62P36Fa>d&zLBy};$rinqFp!&R%7Gj&S;SDya6<_(3SY5Vs@5w+2_>DGAFbl{O
z@&VAK0+Yux$@TaCHE!13nVQO%3xXTm0>a-~{HopO?bX>-DAi^CaRA*LBhZ>9ZQzcg
z*8`A}=f4w@zjeIx-KDVfauvAL>SAUYH;uHnq^veD7CSZyO_m9&D(4&QZvPv#og>+l
z6F#jNa--Yiz*|L1Zts|MlM$tqjh;h3T{jKDoIhf!W~bhbvik$sHjc<VF2k*pbrnfc
zY?NqE9C9#VpUFt+IPJ-r8uohI&grRJB?&zcO^ENS<-zry7NZW7{&H+Rkr6^3#);aL
zB4QX~;SP=1lZsyRbPvqs-6_xhbVc~lTI?k1ge?ml1Ci~68djRwX%1Gr^~Xh$@$8rG
zipU(1PT0KncvIr~w2*}9FY-#F&zo}%Ys_kjnVR&fwQsyOL{#ME9Uq~j?eGEfhr4e4
z#|FoV496O$&<w8k2-K|)dh;fqNU9{)II;n+$cJSbMs*{5TK3^Nx`ep}-Q#?kv%Uzt
zucIU$7Yhc&5F4)yIG5|3#8Y*&53nm$Cgx)jvD-F~o7&Yc3zw!&VJF<*3-P9%s=E)c
zh|kf#;ghW9f!*Ys7yPC@y$udg9`p1O56G&FDpKp+ZJ`$VgyfI4@th$}O5Wo4K+)%%
zW%?^R^uQ6|RE$3riE^m#G~YuXy-c?B6Lkx4efxNBwA4?p#`-4p?%88c-;RX(R+FA3
zcFY=MCgpS)%_H@tOuyo};6n#6!G|+VtPJ@XEgF-^F)R};)_;nh+)Ms|lg?0e;JhY>
zQ54>z1HDiCHU3ZS+-2*Efu$Gz!A@Pzzp|Xniuve1=H7-+q!uRpCQ`9nFdHV9_EEY4
zm4h_LUM8XZE?o+q4Bf^6KXdwO5zs5}P@D?ZSuW8*RX(uMYxlW@yb%8T;9HK1IAgA|
z<ywU0YOoFP2HU=xq);>sbDBId@f~apPDK*-$jO_7D)XIaPf51rgH!nL@ro4KkECbd
z-mCgcnoY%e__c>IVk|-11Ksu(m7mSM6&D>a1p*(sILYRKr<UU`??sKvh#aaXmQVgv
zdHRF5&X`SW<HXCRvx7UM0bNoxFO=CNrSP=sj&pEobyTy(GeYM_V#t;tP!63aJILBs
z?L;+@)KKAXT1_ZA&w-v|0$JR0$Lx?r>Ql{gYR&J6rqdnxS79=_8-@=A;qUo_<8OM4
zdQQjBf#Q#sG7aUl*hq2|@F+NJ9o%&I4_LYOjO~Yualk<OP#}#)IS^MDHHB2pU()#B
zh=?D8i<laVM37=Crr+r38*CTmZMgC3u3y}ty5(3q>F4+lEP^z?=?0^4@;2o0X0mFW
z`&3PnXN^V_^dpQJA6&}FX-uHgR!?^>_eH0aMRVQd!D_BE;T@fWB99xFEy&LVb8ND6
z)y(guD*x6^A_JTJq1^E)!&&rplhcX`b*V(lS<->s(1Nq_)^OQpsQEIU7c&fcxS-b_
z7A&(V>ufPhyLrZ?5!x5^<Os@If$mEFOQar&<y?q{AbH&caA#SiAOe*yp}OvLWZE@3
z?p>L?&#hrd>i>XS`^Ch#9gr+_6OOECpr;B!9OXw$FcmFXdYMpEtL7Ixs4<;0vk)&e
z!zTti`NThiICIh;a*M@Rq80?Xhz0v?7X9zS_NHnW@Qf6$iKQOUtZZSkPG=n9_apcc
zHg(r>45WROK+(H;Yk|B6{Sp1vEP1d=!@p$W)GyG3$w3MsBBhDW7|_g@8!n}f)+I$^
zMe<37K`e$TYN%L8MmvqPdJIwXaHE4B|4gy^Q(SfavOQ`Wpw0X>E3@STij#g~B_e2A
zv*<KR*gVmLc($A=@iphKJey=L@`j|a6)D6`tIQG}>DRpu%MoofQu=(@+_3I@9m#${
zX=u}0${jkOd;H;ykHOkF1w38~6`#^47h0;yB)$ajzrr1-JBNk;_t(_XZiF?$8c5wC
z<PM^!kW8Ufj;rwLd2>M!bAZ9ll9>=~CdPIN({nWyaSeBTz%gQ}NkF)2i06H~pc4GR
z#%*+wN=_5PE{3qF5C9AzJET+gGg-<rlL0mjqk2`%+Y!x&UjS*P^kRHj<{3|4HvC^;
zK&Ez%wn^q+&;fp*?^OFbQj`2!v9I0TEr^XT^ePLqZXoyj>#^<2I0s8!4v@}`VEQ4C
zB)od^<A-n*Fz^HC`??r6ljxPT$*7oO;?dq7x_N=V5#~Et0)p9O<bkUMe)jO@)@A~n
z6Ozhbx0U8*>}h)g)=8<Nw=k)<3?AxM4SnE;(>IPpih0oma(N?K+8~pI)V{T%&@;CB
zE<<ZMgI(39+iop2X5nYGzHDYev&<cM#QyvbQ8*f}L(AWqCu)Mg!am@oZ*-%}`jn&v
z6oFly5<&Yn9Jk0o=lF%r>8a%s5Noee=1IR9s>^1xZ7AWGySAM&)M0RhgHk@FIdFKG
z7%V-@LPuwdt?J)Xz^GfZj>2D~PTrO&xi;h=qsJnNDrkx5LcesO7LVw`(-D~4mM)d1
zAGw6K!G`_i-KsRBW!=(fBs7ej2J%OUtJ~>aK#(kGc(%;?`~_+tUf{@`9a!LkgxaG;
zlCORlbN%tGR#x}k6<>7PKo<b^{^cJk+@qU4*r8R|{IcbaI1>b^xiG7UM41pAa;e|H
zL0l0-$zIRJ6(E4!roxRx1pxbY5gy%EuvAbGGCWP>icjEqN!v1R-j}~0_C6*~4X<bF
z0;(Sdu5tb;3L8LapCKwEpBOJOnEKjPg^fA=ZJmhr#Ih6b0l}UIU=}*tjd1c!N@;_=
zJF;dFO_bkL{&m<w0ZereGA`$-m6DO(#1<+oMI{yo604sjH2D%=#9I6+#6qy#QJw$s
zDs|eCOz<xqz@GE3{D$a?f*BM=bxZ$%sb{o}1&t+0zUCi%Evr$myG*D-m@LX~1*nTM
zSKWD9XFg4Moq&?<KEx^pC6RX>*p%&zYV^0<CXR?czlgpRa{g=w-=2rAPc<pag&J@1
zdQm_fRJqzfo=C{xi5%g@KiW`2CA%0b7e9O`nz=$G?pG}+SGTDCpOUZUG87}f!~nQl
ze(cH!oSr=Vn>GIXEs6VaEkMyUIhwh&a0(pMmwWf_-HC#kM#=8}TY-Xv8rU42KfiEC
zB-r3v%ukjgVxE#OE<KF%e+B}}<qf?)G#s+;%m$MYFP|<qoIE-d;avXo&;BYWVOmT@
zIA^SMPC<BZmJhzdl?N+vNzc1Be9V+3p6>tVP*!(65A<{9#Jhy{iYiuZd>tN)buN!w
zcAIa{;30LG-vMvQl$%aC&uALn0*r7tl3F4V4Y9;ZM=R+4`fVgjbXn{1f3Bv<xM_i-
z4zz2sk*Uz$7hGM1J?p9b*S=#T05i1oxpV)0J2p$o3~pcw&4xnL)Y@zT5!~m75(v^$
z4}_jh2&5#3+R0DDv<!jltoHM|qJ2b|F6*KiyWiCShb+N~Th8ZDF!DT9X@hy;NxJVx
z6l0AC0u;za$I$B)pGcZ_EMTg##YFKl?}n~u40!=|1<7MpHOw1^l(1a&J?pD?Z$aE&
z7cnqB!f&{Cd7=qqRUOdvx2Uj__ggb9R3Zj&9T4O8Z!y?gkzm{p-hY2gLgDM^6j57M
zzAFlKk5Ci{v$Gw{?P?Iz7mCGc*%9W2BW#;ZZ|av7ga3)M8+!ol0$qU-k+Dsx*+_MN
zM3jIb3_$ZiXm#u{-7&fD3_oitOg|Rn4n3!E5MnIfjF2_2KnLgZvbgtae?eKZPbx|y
zpPcreR5GWwzFf@G5-&5b2=`_fJSLzSfM0X4^M3VTgW%K9Rc`-sw`?M6WQg{=&?R$c
z<>X7$vW3H@_uizI{#m$=t{y|Qq|iVck7-`m3$~$8*VhMa21fQ9O6d7Gd@~X|8i23X
zJ_&}l>+hb5oKL7TMA>%ZzH$DAnJgK`0&J}iP}M=|s^7&>ry9c5PfAPLX}&I-Q#&w%
ziSeO$pph9IFyN7^1E9+;&_Yc_A<ejU_#f$Lgxf`<^vOyz8ul#O>>D)&Ufi?)kKu|m
zlU`nTfRml`s%j4ic?~0O9`+vj@3HY>=KF5s$hYeOeP-NYNpA*)|D$LZTL=)4BSO(7
zE_IpM%Mw><7=4KHli@_qb^?rW;1nYB=@$+x5QR`($ai;z0DR1~GtwBF!5W7)D%7sO
zL+-rh{EW|kbpZRo_@S&AV!j5(0)I9zapAi#M^C$$I_iL+xz?d5SqCrWH4(Du>fUQb
z^wx|07bvZ@fCSe2&)`J}AOeOFz%2{+PtL#ysR+ZC8nymXw4H<agg~wj);?MHqQsJK
zrHVf6*?+*zKc~t_NQLhJq|tL7cgXM1;M{sdUvek~pSNbQge?&bq)zk$#4E}Klw--1
zO$av>&xwMg++G$nMHn4`K0{f)rXQxXkueX;La~y3^guir47TTP$i1&o(=e)T==5n5
zF{0hwAkk{y2gPSN(_+DizE={d?L41gE0uoMbk3tiHU~Gux$~R2?E<UAX1!CwMtLjt
zAIiCoA>(*Etmb_4Q3#NGkI3hzq0r6MXevyp<YwktRff|E9tAN|gsxfxVx(t^n^_z@
z2prhFc_POeoi)gDwnyC@IHN8{i;h3tk6H2DSd`DKzf_2-2!C2{fA5v2Emq3Yf9;z9
zAC>ZM=6jaR;ywm%5zZ1K&51d!zXly&QYsjl)0mU7PT}htLP9-N7g0sJXQP~8{5<Kd
zDSu&Sk<Bb9x<9@|%;S{**IJuJ7GVS{`m7kyas&Tyt}Tf`pit{1qKxnh)ROsb644SF
zY(vmYH0p{gGe{URpYO>!2v`6zc9<I9pPyJ74oi1YZ<zIEF^6vz&7xc#;-^o$>rL?9
zt^-nr<cB=H0#BCS;OcxX=&37kMFe_~f3}01*tu;2Ie7r%G_qg^aVtGKz8=JUxd=QM
zXVVnEi?|ZMpC=4VGlrEyb94<y$-pu;#RRN`=3h2=CV8GE8=A!UMoSYRnEGn`7;@{}
z)Bx~VEq-Y^ZLKz&qiX)pB}XvHeAF@!q?Q$QEp9rgX|QbBG{Qh%@662g=J5F!6iL6g
ze~E5sL^FoU8DPme<U@|!D!S@NtG8(!h?ftlhicjj&$kG$GAX^m1b;|uyMRQw|L8|-
z^mU|>*y&utaq-t7JHY$B@xn(8x%GQs`iaIcvKGmzb+z_f2F&uUo;by^#@0BN-!|eT
z%KzXgwPran0=)i<Ac)Y*iG-`TzzNXs8|6s*@J2K{J)>~8zJVCu^<ek2(1<@yF3ViR
zPD-o6bfKTaPxukcM35xOlz@@C(X74{L%a*_#f%eBL8RH|upacryQG4y%eNPcTzv^h
zqh<^4b3g~=<Q%+Yku{*$f;h|ky=&I>2W^HJ=N@0jQY@s9r5uwCz(LJ`Y=^F7q5E_`
zQ>H@2eJ%+DsX?Q3h43vF9Ln1L9qTq;?k^QYKlvI4R*q)0zrxiP_}O(f&gH-czzzDA
z#Y#PmC-U*rb$2Y=-cryJ455Gzdm)){fBv-%<ZM|1t<Sai=~Ywveii8r-OLu%v&dYN
z=XWH>gdgL5g)-yT5V>p!3OB*9*$C@a!eyeBLLT^hu#?3WQ<Fpe3cz}^Ef8IehemEo
za)i)!lDp2(%~B5=s(Ec6l$Pdg?=2r2+1t7h1(S>>Ynhl{s4RZE{Fkf*X!YjP`BetA
zRhoS>E&2(?k~Nebw`_fd@>8YcrK**=GMqiuRHM-tIBx9_EhU@u$0SWzR>EXr=7ko?
zG)k22ZZwU2Q#5x;H&?kvo9<r9!)vgsZ75I>rqKw6nIDMf%pSOlJF4(tbta_QE0Imq
zTUfD$r_l2mTQQ>q;nFSrjPv<A)Ddr^cqwFTlz*`Evmp6`z%9Yn|5v&^4YrQL#|BiS
zg{={61&R~qQaQ(!8r9R;gQ~wPY$n#-WC*rG_0>GhV29d<CMz;WxEU<_c)#qSkwzg@
zOp5G5G1tP20D{{e=7k;)P2bt+L3Ntl*+QGn9x31o*!CI|7=fC~OjvABZ7^u$U7<A^
z$PR31szWZ4d-dLCx=!bA%ow!TFq76D(R72rKo)_cW~pyhWg~VV1oShCmGQ?&aj$Gi
z&o6eH1+S0F&4olb6_!{yerPw?9H+YrlfJEu9g@u;5!m3=te>2|b?UaY-7a6&`E;k-
zna~Uj1}0W`s$i9~NicQf8=cOtR96}0zetI~c?Cxa-0wl6AN!RjKRE~|ETzi?QpG~~
z$1F`HE_DqQ0q$6!B-><}e#TSXx08^j#j)(XV7D`ltG?R!`5OQpgI`cJX+@AHeKgQ2
zc$hZ}4<Jz6wZR$1K&_NR%JM*^Dh3*ukXZky)S#sX;V6PUDCXWK&|~(Up9db!x^k8n
z_C$O-K*py8@xuoYGG8$~=3Qe1a!KXKvs{Nl;S>;#2YUgjVZe=wJ3mB!xC}#EIEP#0
zDBpiFDh0gCTQ!7jSmSl!O+5dc(CMh5B2xu*@-y(Sa)o1Ph4vF0=%^D48JJkzXh~;k
z!0=F*@8O{g5(3fIAzRmT{yxbM$0>;$Rv5@HA@4G^y%wx4;-Gz}9`i5Cwl-iMZf~C%
z{9da`?}w9hzYny}_YC$DD>G{m=U}@<QYjCpJRh>RrXaC2eNw;fYhklCPRfHxdrmhl
zTfaUDyDSq`wGCfGeH*YUgEGKyr1+MdQ~Q69JS|g|N~S#zjRn_d#o6ZeXR2-AeZB@s
zeoHz1A^K!}fL{0FC@x|r2zc&O@iAT8MWAd+++?AEHQ!6utfMBcfBkk|nh;&cpOTxW
zIweO1LHW#%e8QQjF3mwA;QAUzZ0DkS5$~va^=5vYT2Tv93d{K%nMN}V);7GURtEzi
z;_>4la>pwGpP9csz8Tj(L__Mz^2%<{Jgd^XPvwd&%`4qSse7qwJ%m17>%ga)HIbF@
zS73{)sAK393^Bs)em%*YcCBv04g0~})n%PbL!3kK^y79p3FA`CZ}lKHSWnk50n@g;
zZXS8Z$ZW3NNc0>YBl5VN&<e-sLC1=J1|sgiVY?>f*qtQ45L^g0!(k%X0xR;T^=WDd
zhl2%j@FU64b4hPGHBrCYLz*Q5T)RSUuRd!}YabPha$6qUoLrHD_}bA$<bXixjt$s1
zM-(&f65T#I0gCb|!Gt0<DTte1jIYs&*G1s!@E5reTH5hMGdD2xcaXcoVI#MiOpeA7
zB@|^%zrbjT=S4j}$2H+Baajs%v4u$r7N!ky5U;4A=<O%?DDD9Xxl9Cs(1fly7*xV4
z9ehPNRZK$I*j-c|kFq6GF{0&vZfg1eRKCPs;sXS5Y;ZPER&X|1>%4~Zzlm%Gb6MHe
zkZlQtkn6UyM7R*J7J}q}#%32UJ;!nR)vaae7`eYf6acg}j+VK%xiAww?iBHzNd@g2
zJqmk4e<rAmJ6?-Cvo>)#c4|Tl+dm72HK9d+Om#G(POZMg;{la4UEm2rJt*z-z2@Gh
zmw^FU^L}G>fXHveM-TxD1Y!m}0}od!<$(`u{`5>R@WrhtBsZ|GmrN%e_U+h5k7fEG
zXdisx0QpF^D?1Bdup>4&jXf*z?Xf`A16m%u|2GT#j%x$ANJ>aSdVY@g{4->!s)02}
zh`)H7Asi)gvY5b(a795JG2pEc#TVqfY4l|`t>ikTb=tg1zv<l10gE;t4$j|9#H8U@
zj0TMH9f_Ju1-$SeUMh177dc2L$S$2qYv5(B{^#^;BuAcxR*Lm%)^Hjk=`NZ}fkz<P
zkWgReyj>PWr6T`Nkbn&0%;DwSA~MMW(&sfreh#%I4H>rc1GMhhp<{I*q!7<6EQ~z7
z9LcO!1AGdktA{{+tO~R7`;|yArUh+UZQ4_WMV2(Q`o1omR<2Z^Apr%wP=Tfuldekz
zuT(Ufj7!L#09TBQMqjkasqmwwLH#Z)w6i6O_&DqvTF;paz?-%744^W3mY$H_w~3%(
z6w*{JvW{Ib5)j<p&gCErC}i7PCZzsqXKblvfNW#@X?Y}HHEP-TlzS4Buz9B018YI@
zN-TU?g)MktD#*rDXbT>Y6Vp4&t|ZRX28l|P$31CBhEbC6Hht|EbR!?nKenvP*PqqK
z&^k_y7wBWF4n%t4;3LF~%zP@*;=@)!on8XYaP?B2Jnkrl*u6g5u-X{ryN1V;W<bsB
zud61n^8-lkjJOxngPCo0chMWEY{;00w3AeG#&N0SeXHa!SkoMJkLF4jLCMVh#ipq(
z8CPZ<uGbPa=$FxefZBm_OFnM~j1uI7u+Oz<-iu};b<viHBskK+rI(9C?6FuP1YstO
z%(3vtYa{Ixaqr&yCaXbO({3{QJQkt>R(VwgZtu50Q+lnlj4fe4eX0H>K>TZvB}Ftr
z{jFHi;1RTtFS&iC*}62XsgTP>q*!B_q3&rmK#Bp4lLATT7RvX&;4%BpQ72H+DnoI+
z9#MFKRuuiklf3mdyeNpEsrS2H_=pQ$c(6`$lF5ceI5%94<3G{?iLvT~q)AK%E%>V`
zmHl5T4;3ujy%;CUdq;IPN2H$xR<aUH7SEJZ+nL8DzaLaSY;0RoCd-`T)LA~VHpBM(
zFx_a4i$u82Mw4^(^?pv}@iBdTe*<(7ID3l}w0^iexkVR_i7}!_J}8omJ(7(_kB%6j
zIe86avC6`Ujq!vONzHecG@?z4=ZpaI>)=_3eP)dgTft{bJ&U0lme>=FLWjHZz6UDL
z|I)?Gg7kO;anZQ`w~{U?1qWQR3QQc<0%crWbJr&wUX5L=5uT%NvZO~&`{Hq3b_UKO
zWd_Zwpy9fOaoi}zxPJ@t^lH!-0MUMyuJuB08K)&>1A+G#pf)MliV>v7#~5s@p-_DM
z%e|Sn0vDRYD@@)zo=!Qog0|JxzK}QiNh}TrHaCxvPhV#^*~0$|q*fG7)rfAhBT<#f
zi?_!AP2hFzO%4zP8Wr%@&ZwqGB#tats}=BN3g+xD4fe`-z&hRNXPX9UOLdZlbiF}4
z!^(Z|;-hInQRCBcWjp%}TqoNFC=Ata`s<QM6^xJkWiC%9&L3LlWl*CJvQ#>p159ir
zIz^lC^!EnNIL|o_HGRgRX|cLME}te4$i+l!4lkS&ooqM^2ITb=_c07TuozjBm6J(z
z`9p@&C?~U1#4=7QqX3rm=hAYcv!%-i8BmfOQimyMX4%3Ze<hCLauf+;GgPv*CU(Tw
ziWk^5;$ok5Pw~OHJZY^I&Zo->z<sRl4djx_Q+eBIdi;wiU96my?PN!qp+7nTrX4v-
zykQGn%7C0Zj1>O(L$@d@?WC=@am?0gtYpnmk;MBiQcz1tjQ21M_J6gtGh;!W=K%L$
zbZaK|Z5BhHG~>1^y~Udl1*F|&Y4X1d9L`T62|2{qQHIK$y>3h*{rNDJ=$t*ZW`Gb;
z_$5LApG74)oMVYA{90|#?RgWG>LJTsyCHQNwG8+aV<q6f+N#Yq{aN6~OVI-(n2Idj
z3_BPH;ZvcjSgf9x+{$dQ@ORD_B*ky-3r{Bs;E90GD;%Zk<TdyB3M$)SOdUfSw*XIo
zBPb1z3-2rV9n?&YzYI^C1TvWLqJ?|f<Juw}i_QsH-ml(XkyNcz*ILW(Dpxei-eBy!
z1A)~IBoXTMxo0O|$A7o8G#HD&{i3o7_|)l|u_3p3`UQVnpQ_gQ_|epTWx}O<ci&j%
zV>|oR)6rMF6=1w=B-0B$1J%U;oX4tIeb_)xJ9t;kNGP^xGyAi%-dzf;f>Ss~rj(*H
z(w_|Cy<6vbF5*01Rhv8QG6FQWL$>1MbbKfKh_qaTuqr(RYZX5>D?4r7!YT1S<x4QJ
z)@jI2Jccd$u@jAprfJ}VSnZE|RqZk(SpAya;2yHXS01X9fUdzXyG!S=fF17(rjW1h
z!H}XW)tXpm!5rz%Wn<T@AsQ*yB6G`|fqu8jGfa<{U%UfR7~?)eN(jkjZ+jVa_oQQw
zs4z`%gObzvuh{$MSFA~SF<yK!V+`TbfTu#u#`OOQTKTG?mR2kUT8xb9AL%Ni&9^a*
z#(f(cQY5YFz$G-u-m!~C%4un6hw8^_7>Guu*v0d#nEN<s$FkxAH8kbXJ`!ZUHyJ)W
zx~{HmzkYB{KRW5nY7W1>w`6r(6WmQhqEk{`(1ZH`y^%l&YVR|fIn>{LTaEojxW|gf
zRl5kiFLH)JQPD=&u?C5P!wqP_+ShggYu+yt5!&LIpE_1MExDqlE94pgff||0RR;ZE
z`djxNtes~fLZfGK_Qj2?;2~=BOIo;uMm|isKrPLLR-h$Tn5_EfDYF8B{(^TuScJBk
za06J863l#!s4Vb?g1@TW;+1TL!Or~Cr@_j#C2&01MxIF5?t_dhOE}OAAqE%>7Yn!_
z<0L!pf)oGA)TbU$*6*%JT&;1P(X>f(xV7z|v8))x8H6Cr5O4^3fzsgbft9PGIGx<3
z;d3~^v>|ApVrj-e&2bszDt(BEAEcNf_+vG$2g*m6q{E=+3KZk1>TW|p-0)mEK_u@d
zn<$0qNw{8ly?)Oc-V!kgS$k*d5qr!~cDfzW<P2T#1{(!qu>>dd$H)=Q2rW2N{|A!(
zu8omzMm{cXcKjtTsgC5NKAGhdOGF*{r%k%__U^Pd@FAf~J;Yu`(w=Mz+%j@@G+ZQY
z;tQ`@(a{1Niqooo*3^7UB9NjD2+POYFfSUuvcJ^ppPpShbvl7fQ7u-72s|rw9#@3h
z!iQB%NsMZGU2Yd+z_83}Q+>^Pt&IT$)I(m}H<$KG?wdrswm0IZb8Se&UTSLLysam{
z)azhamu{i6s==bM+k*-Jrb<0S1VJfn>~9Hn_p_<U;X#a9#ww%6y?GlhcsJN|=uM&e
zQ=$Oe9YfIFjZV~T^j(OXw$@#A|EeCPeG&Oi_eW#V$0YJQF`903MJKlWQeM=JFiW}D
zFeF}|1(Pm`=gXzi!H!OFCJ>q<-9a7qY5^!INS?E|$&Qv2#4;@u-a$4v@_}7#*;@7m
zu312hl`aZr1pY^i%pd3Y1j@!14-_AmI{dtv)$LzEH41zNz;AgXUo#lrhvYNv?0Swj
zi`9~|%+@Uk!sw4*3uh;PTa_vwPbfURNP=}BT<UfTfh17u09tisqDgXm^G?81`lc@0
zaw0qF?K3L`rb6u4APkq6Zcx?e61{o!k$5;1Dot*8si)vhTUbCo`(=Fcba&?$viiNn
zaw;uOUo#ca49VyKlniAz!ih<4d>lFlVGsZ7#eo+nB?A3SuXJ!7l2cNMdOC$ewu&1%
zU4UJhA6~|BN*4i7lfdk;TP4G&ggU&^9wuR|9y;ZdZHV5Cf!0l_<RT1zfx92cbmMUP
z9-{rv1~!uJ@tEOVVWDl1B%~rmPcb_0Z;pOhPPpvB!mFYJ85=DCqn8vii$g!oWgw!O
z5|1byToI@J4)!<ivvnf!6r-7DOG*7i2T(P@j)t}W19)mp6yWf$=_+q#NiIqnbak3D
zKhN8oUT|W!EMXsIm@hai(g5kN8^9lk1oKf=5J92b?IqWvCc6P(_-$4gbi8-PYKS5D
zqLW93`R|JU6NV=^Sj#jO4^RG5^W6F7($yR4RTF@(2GhbapU5pr;}^wSzOsACEpO$>
z78v<IYnYaK#eog=AP9g;bc!Dm^OEi=_>rh2+eqb%x<#uJ8f4P-q}1r@5gW4){MCb-
z!x?TQcAt-n^*Tt;5P5q4JLL6~GzYpFT>vX9zNuv{pD@dd>^htq+Kd<%I|*@oYt#l1
z6ESwrb_WOw+C20-B~#_^fp7!ayZ_jdYQ@fdR8t(Ri>=IWuAXWLRfP}vCgnwP$%53`
zvQFhz^E?iGtLX-}PP7*@!_<*1#l&de-AI}Da8xa~J8I9m637By^XhegU!OV6ecoPx
z)18??c;UjeQJ<Oo>PC!&Z7qAXxZ?nPgzUxRo;rI7X`3=wTo>H#{9#&&m)KWBBul91
z*J^Je5gk)}x{?R17_Y@K@)Zzph`GTfTyf<d_kWHYPIb+9L3ZR3N6)>RsSb!*9(Vkx
zlaiX2ims*z&s!@B@V8f$KfdFmw%)<*pB8M{A?HhpW!P}+D;caGN8q<yRi)LcA+G@x
zRZ;bj8Z9Gj*}*@1m~S;l>^4Oj=?_3%3qw7kkG6b;Z4CNI%sL;$1So>zovf7tcvE&(
z`d~%o?;=$LnV$%u?J_@}`V1qWJ^0!4sx>o5E0WV~8TR?yq9g#S>u23q^uF!V^Px8N
z=LY>;sG0+=r#esRh<wywWuAf`OR05eDYXAB-AQDfwS~*m9uqTvzokQ~K{!l#$jReC
z0(X0oZ*wfTQM&wmo$iU#>Nd2OZ^I;mqSmBeE)z1D6!R0GR#=bzqVQjQbm&azALUmM
zZk*ZAv8IeF;|99%A&sQ(fhWsupYbHs8V7`}j||_M$cKy$Qu(p*A`b~?VKnOy8V43C
zCqA5U6ELK4s>B&HVyEc`qZ`MoS+c+X(-RT~x@bcEhw&jWyFPc<Du}LI5<ay<Qoo5^
zt6onh!1hW{Qe9@&20sz;u#M6*yTX#W7RO^(0~R`D<Exrv5nF=FR(?e~0aZG}bglB+
zps?4WH(L-z)Awy|4PLIgKwA`yqVl9crQW_SrFB!7&_8H1_7t&R7{!4Ug)<)F%XcXT
z6ARpa)~b>A2i_>F#;!!xA(mj_YjOVXpqA<MrVn=Wc9+4*pQ=<8ZvX>GeUY>kuzBJ<
zq)!%bk;WCMwhAZ4%t_ulM>fkIpM?6^coXt9L~pyKPUCDOL-Q3j(!wh*Hr)+oyQ}Ce
z<+s5rq1@`!k8HJ%ZsdRXB?#+sO(vg7`<n|aS6gxBuo8UmeymMhl@L%|tsnyFuhr*X
z6={>s3&5Iel3X>9bOKF`9989-^^xiEm$_+PpJWbL>P!vN^LiZCCnLk63t?}cMNn~q
zLsHu1S>x)S_+|uqWoy)K)w65)3rqoA_HK$F{FwGur+o69-rOXti!qqcqDQsu$hCgc
zOfR`>!hmsPH%yE6rw7NGb6<6&WY<AqrYWJ5FRd$@7%o#W-*Wja2Sr;9LOm=th4Roo
z{}!ELSzbt`&+_lzlDC#BgQC$F*_g{y{gz3wu3~qnyvS8#^ux-rC+aj>b6Up1^JHVy
zPv4(j_<XDg3u!ZJ#=S6UVmx>bmO-1wR+r=VY*!07JRJ}t`JWvc`bmhfIfds-9QUH0
zW<*&JatGT4^S|YbHK8j|Q`Q4<WlKUz8AfZ&JEfq<_i$XvYw~T~cm!%=7$0ALZc~4(
z6w+tqsff$T0{}<=`x(_lX8O63Ind_=jd+A+K&c4RmEL<@!@#Z^qnoK~*n4f^Rl+Nc
zZDE!1F|Pk;1M|Pa;8uE`Q%HZK9q1q<ewXiV%Zm6YJY;jYuu<nQh4*H1)+bc{)NPsu
z^8@}Ahg2o4W!@|mWqdpVTvp8IxetIrY0|a^d+-mhlgC+c21@pe8go1ToJidfns1Jd
zXb*b&)kLry`bX|#8ZaYX3<-lJ#`59}rhpMFxylhFC;)3@>KM)dK=#L>HUlq?pUL02
zA(iU|7g%`D0uQ20F`0H<P1NSb#<qDnd8R+_hKnmDA(Lel?zsti52{F2obvba>`+uy
z#`c+<=v}z!P;%x#Y}}iyv3!%TMsCj-!&E=_OzOW7Z?3OdQ|9si_<D!W&6$kM{Dh7|
zOZsMhnqdTZ`lo(GUvN;lDavC-eF`jLZM#JhnQxj|H-h*yIRGXjCy5-IQ#UVQVW_Q(
zuw6#|^b&s6JVLZSSy!6M9Akml#J9b#SI^FoH+GHF&;aawLh-`u`S7u##W~+m$WI8w
zl_f)ruWAAy2n~w$u9%&;I8mbHkkB?+>s#EB8RRAoR+W_)byK7e&2tNKQx30W>h;M=
z0NvxL`8QUG;HL77T7>G{Oov(^Xou!Wa6=9e<+vDoV)I;;j7ka6X%CD6v2X#&4HC}D
zOEhP<tL|V$gvj-o3Egwo96yvpzrlu9WtqTh^keNE-ljQ_XQ`_DlgfYKu)8g;JoI%p
zu0fhinObxWolGYYWBtb)#G$D#(9VgLda=3mENgfA&7BgPb8B_Ei@B|;2Ic${kToBf
z*h`f-QMoe?mQ_?M>gU~A`Nx&m92f4u<y`H*LDzfz?9YqVK4w+AO92Tro}^f2<R}05
z*lESpvHb@X@0e28C1Yxy2ygKX8Sk}yml0oYQ_D<9r0?hPAV96$BP@$OuD{(@HWNy<
zmti+2uNDlg%WjJo@WS^VH#8zrT#DO5S(G*shNEW;fd~olqYiEDTLx(Q_xqD$Txob_
zRd8ipoFzLmZ4(Wv!ct#|+q*NI%`GrY^(4K9WW8?5P@92p0T9WX_H|`b7{87B-@QqZ
za8iC8QW8e_KdP{k$F*K$Ie&j$rT}YH=YM-r(|C^uA?tRUdfWR-Fet*vXJHx0mpY-m
z2lR%}7uL(KG(GEn`Frr6e)=b6bs*q!@({e&yQA0HM^=t#Ps1y17(GsXsIh^Yolq)1
z-`+TR`$W!>iBF6R^GP3|6OaG!^~kwRKs~o)b=^4T<^JCi`p@{hd>cgXi<aFs&(V|1
z#bfTpjbq8mmF@C}RoJ+l=+tj~s0YVJF>2^y_M1`we?-^cJnRWc$ea+;26dPti18Vr
z(U{4ZIEjGt9to^sGp0IQ;+_LJu!n`|(%o4G87AZ>>b^<g<Cmn3L+n2oYH!pzH$yFp
zkW?HyEY5ob`j@vwERccj)aEJiO19e!UU>bt4|8y2h4%uY8lge<8nFnPJ#Z?-OJ@Cl
z2S!`|)7Ew~<qcxMqp3O^x$xQJF1SU&axUEzX{UlLk9{641r1TLCJh))PmyC>`9|fQ
zmp-aBDGDW=Zm^AotgW?&GXs0d*xFwS26H~DJ0Ps9!i1<*CTSoLzt;7oibfCs;%Ax-
zZ0Cr1al&pa2t2Ed3HDn%)6pbNqDcUkzRGyVaxt=JQ+F=mIvjmtsxVI(G3T~)_mB*0
zi2_R$vTBOr+!_KmX`zg)aukh7ouEojyiOWS^{D|xjKu!^O_OVY0I|!17PVXFG%9Gp
zrG$NFyASZY!mzxF5DNqHvne*%APt9x&;u@s_LN?@305i~`p{*hNY<b@nN+EC&y<s*
zi}K*2qg9RP%o@$Ptb2p2+~DreD|k&JbTFDLihX((Ynj_yAc|Wv?cVmDo*#hyGDa3+
z9W=GC*mj%tw>hUpW-QcLPE&2AT=>U2^K=p1E9GpPW_0Ldwwocoziq*8BP4PACS7bh
zS%d+{GbV|Xvrwk1cWiH{Sp7V>+gO64P0%$gh0*DB(;47Dr_2(f4qH4R;8zry_s@a(
z^aMhN^|)&weXVaD^WJd<stp4s`oS#1gu#nb{0>um3i$x8nCYrHl!hRFKsACa{44;c
z3K1XWG=be>h=&cNl1obc!8WYYG{9UBJhd~ae$|fL_{K^JzEMU~yr-;{zJGlc60ox@
z2=1rgkF1O**DM-ZpufoJlVact&h$N<OjPz^+$%pYds}JC5*8emNbhtHbKN8BgL3|#
z(sz}mlEeF~ARkl?tF?bBPxw<ki-XdFQ#o}Ky3ixYz<mfzMQ;Z^$O@)hYB<gGV2Ef0
zHr1JFXFs-@aQ#JEQm02bxd!XO^{i&QNQq6j?zK(=*x5?JFV2|=<n1>aVK1=wqQut*
z;H!U^W&cK%U~DF_=$%fex+};W%_1W?+3=yW>+IiWOk!iLj+Fv(qqP6E2@oIm{MM>*
zvFjHbLvl<(<~m}ToJ}=NHAB@PFoXD>%>(3x;LnGp_%jrq0Mggk9*GKQtK(T5CDiK0
z5_*A6jl|Fjl-1!-_@D5Tdv<frqkHDFRP%2mmLo$umpsJYjqPs~2b|rLaR0|6(3IHo
znYq~Sz~JZZhDqdFBs!*GJ5Fop_(?aqj-c<}zf64^%4s=s;Aw72FQTrdG|+Jk7=v9c
zve*UAi?jIJ=;4ux{EXQF^m@lurIFs}fR<(4_+djw^{EN>Z+Vc1`8Kik4OD{NeB$aj
z4k3_QPbv5%6T<4X5<}s$uQp_aooS`CTw^F`=mN<exUmla&$<rrpmQhw`0cnbGQZqH
ze%mX5$K${{o#(5GLzibH61=UTq<8kR?jg$koE;6Ny1uFtE>ZNHpJzuSzrG_sOd*zJ
z^vki7bgilu{ubfwgPQ(mvdNZUW4;`sw%W<SVMqZTI7*iSnJirGY#1W-$act$rmWh3
z9mt`I_U^E3p$t+qTki}oDd~9l`-X8Q32h172Q1{YgY%QNEyY_(BgrtuT?oEz8QoVP
z7Nh45B}ykWdq;aWIOvVpB6RgpCJRWX;|Fc)!ewl&Dp_xLl0=>6Zi9`}&xJ^DAiEMl
zSs}p({Q;nPFz2*<1KtEXbcVMyW--#cC#V?Y>vHKc*^cy%#SF(R-TkqaTA(BCXKIhb
z+nMD3TUvt=z#^aWyf79tsNpiy*(0~<<VYY*8->b0ec!9c#sH`Cx9A4B<M)%kI0f8w
zG>GQMqhmJbPh17@BNi#UktL~}L@%pyGW)K{fimk7x2L+Sc9UEibV5f045`MA&Os+G
zce|*<z$8(WSN9qIEfOJ?b|))#bBxfu$e@!OgQJ)u@Wl|9WW5`QcuMK4S52cs&fh70
zQ*Xa+5AGbW{k6G}T;Sp=)nbkFrPF=2%aH5y6)ncho8-)%Y#^ZRdc=c*Z43KY?NNtB
z0|03q-C1~*r5%C;G`XzBbRp5`^yA(36i0#s;w`I>7FfELuQE_wp#8-WEE({B$ECQr
zU$>#ybvyBE0v}mX@3d*30EAc^$7f8DLd0PqZSdOdc#y#Csk9;*VsrC<3g#iYv@%ij
z*f_70U;)q{!Z+}oY_haog@}-Bsu?PQ13Ds7cY|}<w}xFf1pcgEFb=E<s^Qt-$uQ9d
z`(t80Ba%BB@DK4JhXW#UWxsL5$}AN15r)kReZOsqInJKAU>tc4bBt<+Z9}xmI;yx_
z?N6j#ny;TzH+k3LfP)&4SSKtP__(>GK<&d_@o`?ACT+$6YDvk>gOPo(%c>85AOJ}~
zw!bbNFQ(8Qj;MP7KspS6#<rO`K`-N#Mwd%1i)!Vb86@x{2b0dk8m|5WUpYUNotn?T
z#p4ebJC$VTf>To7OupO*fqX}@^yN3rqH3E_S6zw?=fQ{#@~i}^mI5xrylJI6WSz{>
zjIEB>NJ5HGJE@9QOHVD3J!ceVMVlyzoe`pNcUE-OnDEl=CvPSNVO`HL(qX~f(rY}+
z&R6hYv_;g))v;%t-K3dK)zyyL5~NxJc~UOF4XPDgKF5x&w#){KmGKr?JiJOsp?NY#
z!tpD>&jvlP3)Egxfod;`>&JN+{3QF22<&kXIS%;+T@xcq-dy7)mHXh)k2K@d2qx1B
zHT3Te-lGf9TR+134Xz(WNDXX!63bpN^j%R&DZ1kPZO9FkaJ1`G`g~V8qtraaOfb$r
zl5Su~Un-+PlI}p@0C?FlN&@a}IovdkSnii4AMmWrg&ye=kx(1cd@v{W3WH`(q6i)o
zf3>tg4aT^!ljjTAsFco00WO?fFI>I?m|mR0p!ydYmtNP-FmG&4#7GcC296T*&Dj&T
zJiua5A}hcZQs3UVw+iSQ&WQaFh{({qdcT(gXoFgB!FBTaAre0Cva(V~;kx*tgorkB
z$}prW6Snkl2#B6d&aByW8_USmt!tN*z-}Mjp^xfs(-kb;xc_*wMpJlAd?0IG3zXHP
zHo);kjtgp!l=m}8DR`I}m#MJ?bY$m#E6t0q%fDLKnH`sO*baJXuoikCf)BG+w{?1X
zq(N-h##cmFv2%baJ1KWGZs^7=0pJYPW|boId>ofbc0OQSBL3M+EO~e(R>*my9VKu`
z!6F5ehK+6`$^IyN{t7bW<C&}g?G|`y;7Fn@fFm<ZmVYchYd|Uv*a(UXy+3iBc@g`@
zp@n({a+Lsdgkb?wqM^^-c>hO!DI+mlB<+cs`wQv?3_~YS(U3Z+Her4^J=gcBf=y<K
zAruYhiLxFa(#z)FsRDkz^ks4K;u{#^aCEJUVv<&U>C!N$6j1+#cDE1Q{7^YY;U_5l
zDKGKdSgb3p=doQ12d<s$8mLB(IO|;rtWfGy-;pg&3F`{C%j-!noa^-WQ+sqs9Ic|3
z_0z~gx<Fo^XVzcb?ljUXz8hvR8(D%Iurjc0`d^enzBku+YJMnW*ZJPg+VMd`k9rER
z9XF!+;0++40nkAya9QM#Mv}2%N9ATKmNjo2_*!J043vW$>zH^%vEu1tf@VXiNe`ui
z#Q12+&VPZ05;^+Iv5iZlhH{?Nq|mv9{LT^YmIRSZ76Uq{S0K93TraT#I=7xR+iYlR
zRGv))KB^=Y8dGI50TLYb-W?OyLbP%z=^wODbH=m_)f^8_l5$^ig;u!LV=f6UQlPp^
z?Mfnwb|SuX7~K<yYPsKuaq9bm^)k)odu5(1*|Zu#fT<5v1<#%t2f&Sr)a4a$Ig%rV
zzcv*A|5d8Am>{anHgl&RhejrY2nDc3-=~*y>pVV&uR`s*9q=aDY(zYaq_4`Y>|Xq{
zsr;nTLrCe-*kfE{z-28;z5RS{mE#Zg@<$Y6lm2U&={Kegjun2nw=IA=&Vm~RhNwPK
znM}*0$c)aOnAuW#3o6B3)a=w?xRm)8$$bc{TkAo;yduR)(8A|tEgja&2M6E5q=_Ro
zSeyV+cJ6TP+t?orfCmQYbgl3`AQ|JuKs$%xE=F>sA3=0l_J96Mp5Ea#qTf*y?OBd$
zMWDQY(B*;@M(b;xDso?BnKeJ%8n$6kry?)zpsh@2j4#<~SFT*d#0M@~IB1b=&R};@
zLLW;Y9>D!dx}6!@s*Pa)y6*B*c?Sseo%<*WBdi1Mg25IuIb$mgX8nf`ngH4!((?rN
zGp=P{5BdyrLPVeS9!5riXHnxP{!O$!fb<HW%7f+Zk>OGSs!hrGGP!hmcme&;_NwwJ
z8C(zp*GSJY8RB9UF^^&Nr?G%tc~1-SXklWSDkBV3OYp`7khN#rx^Ji<{1LO~TK<}a
zn{VyqT+h6XjHG|e_y)!NDynv{3HmIlp#`J*7%PBW9(DFc%JEod7MWBn!5%C|!BWff
zcYYSXx)F#93ol=A=LI0(r&L<7kN`L=WSmh9^(aqD0rtPTB>#KW7965F>w?2Mcy<M5
zkgbx-n0a5@z1-Vid737t7;BnkHU<69L+J>s#&i4+vH|r8AjSW)ru!9YV1{ZV|6GGy
zFA2ON<S7t$^f@}YI2hCpI<TeoS;+d{ly^S}tRcr{2_b@La44ECiIP$FA8<t*q>4q*
z^%PJf7r-eYVnjd5GZMEZR1qN;jT$UuOCrvsMEhlVfY&#jikvY0EaZtk+jmH2U_IXH
zru@ABFWs17EAU$D^tT2aa%YkB8VL}4dtoUJ#<M<QCHKON;Ra~R|EKX+SrfgW-rG8@
z)zEU-z?(YNVv}g6awu|sGr*<J*>{4(<$?eHoL4pY3tF!+2p#vE9^ol{i4EQYka?ZI
zUibHMI{f{xwi7ZQu%B1hz}3#Cr;oiDY;6zycU41utsnP@ydZ2wlwC2+<x0o_r7)kq
z_6EbwE*-pzL?gbUEzWb|7k$u&Avc3V*!f+W%(Z|nVu#l;IFG=a`QEV7uDzF>M|&3F
z(v;|Ii~Da#fgT5*LYNjnAMf9tG0x%q`-xRi<#x<ipj__P?O1a9U=VcCXPT$pOw=0h
zD#8S!kJAD_P$;SAkiNxez@DGpMvhSzGT~>+TZ|FD#G;>ZK*`p_n(JpE3smv|ST(S-
zgRIXKQL*ALdj!L^Ppu*wmm|<*a8i!{4b3{k!}L%W<}w3yd@4lV#zi`JxoB)Q`gaq(
zhQW;N+b`o^hYZGo8UO{f7ap0}Ozy7Ud)&f4-R~@lvIuhTmT3EgoJ;#D9{Zkz7CMpl
zkB~!*!ZF^Z^CQIbyaL0sUtphX6g)gBXHzD6fF)i><urx~ef$p({tWw}qd%MGd<8~P
zJMpc{I^{o(ZJTfU`l5&wz;CGn+}BUHsVLo1CC!Kj{pfio@}Q)V9!+t>%?un3akX3<
z-7>0+A}l)7=_9{50++vL3^AUr_hU;PlMZUcb;`!{8j%PfuEt%?LQZ!m$EM%vA>`{l
z#$xbA!|RGK+X?@j-|dS%rDARV1jCAdRhwm9R<^L9MW?Xi{612ykvjaDGrXy8vH8*I
z6%i^f_FevlXwns^IwOoOcLt2)6#Dxr^=|Z&j-8x9WO(iM?=0XYgDMX-s$yB&<TLop
z`QuC3&<3`Jhj4(5<TjU8S9YxWMp6d5d^)M9Xrwc5t{NZ5M*&DCqjr{p@a*YmR=4<e
zu*0HiiE{H>%sgO89`e8Tvx2TQP7C&+T~BDLM#(7uPYfbF{!lsE2cxz2$+N_0K#7y1
zLAp3ylp7EE)e8MZ498-<u~A{CHab7`J#oF-)vovTyEiG)AhugLUEQD)@sL|twv^vh
z-E2~dW-(&yp_$Yan^W^rcQ4}GM>;orSg{8YSr$>^`Kf#i>39`xw~iF(_ZKBXwH(O0
zgE8Ug0g+^{#QxL7N?=aAXQ_gS)XpBLb3Zb*_v}>Z*+?RfX(9S>VqMgV70am2#dM2q
zf3o%V&T=F%<cAZ^@3@)AwyTX43<`UVF+N3~PN>6Wv%p->%G3#vuZ*2R_ikjpP8O$t
zw<x$<tG7@orSRQHc4^U*f&IU$F1}6Tewv=#)vkrP5SEQFv{@Boq=XGfJtz)fl9BOx
zLwfW00K%cZbu+u==sk+f<Q(F_o(3PpCd^{fF<3#L>4}Bq?Nj>2r4t$6lG`<m3(qz~
zi$KAzhvgiCd~O{3@~8_akisP>@!e-4vSXCBhpGcwR!c(K{j?)M!ul|KFXdM@OU_Ii
zEeRi9B}@Z<dzm(x0T0ZRZWppYJhN2YC>i)Vx~g~@hyWD8V=U!Ivhi5lSpq%2*QG<$
z$JQx}(Sz06^_euXg`*S91#&?|)lDw(jdnfdI;=^pF`R#*fY~zkQT`*GQ>mZoO|Rmv
zW0C0GD3EBc^(N9#nJI^c)4*Yz1b?-ST#qsl-7CD}8*8s4$YCLWKWAV{rYI(VWheMa
z32J*NO@$x}YP6Y6dJyIpuCRPZYC0+`d7^Y;Fh?(e^(pH#b9DnqWq!c65g86QJz|je
zA$xk~mB;U2?iJ_@mx~@+8vGqc`sPbwiJqzul^Yi8?$>G<OG))pJ#}rr(CmCmio#6^
zgElb3v%TtuovE-)pGR4=R{__lh~LsKHuT3q`G5Kaarg(M<t1Nc!acCiFZfMqth@o@
za#@D|yV#RRb#RRA*z+Z!hdhUfP8A&=(MZy6=PY@EoXbL7&;ZtG`SctUCD6*4gv|PK
z_b^=eg7>iz!`YA?&Fv|4c53*Uj4!-@(R&L8o8XLWCDr}?-AWf3>&5(OF9(0NN^y0+
z_9luZl}~_NiT->U(f=jNBVxDRFXfHSf7}1rs;kU%Kc(8ftS<4;rIQ@b<*iwJx$*=>
z(N+<a=H0ZIO8iiy*<|T%5xS_D3m*;F?tz@@3H?^#;gg}iF_gi2t?*E^6yjOb&adFC
z5?}6+sZPZFXdO@G9Mr`Xfym-y10pw2nu1ZO-EhBRacyq24p^eXRW~Vg_`7()W^&(E
zlGFnG{)i}CetP3z=@pGg_m<zl<JCx8YO9cNl}~SE@ziQ75aqCCqOIeYb<r03xG952
z;VidvZSi3!%{_*q$QG85Pmx~=V{2QHeuB<wn0{rgP9op~4I@NCP`4yrd9gQ8Vw+=#
z-@OWxA8Jg2U6FRPE~k0*dHw~*@b2*?7J*nY9HGjq5%KB8s{RZoo$`a4X8Ep~WcvyW
zWt1z0srJi(y4P`|M;DSbN^iK+!^UQ8;E=*w(4c7!XyHb_$4XNDB;)3Geed;;<$VGC
zE?+7xBB&L5e`tqUYlo+nd`uBWY8)J|GMvrPX*dtlg&ebqr%aAR%uB9Mntpu)cTD}(
z+251a6^C8>m}ny8cAcuwT#B@bz>-Pq6Q=2g<oM}+hV-Yy@r0=Vwz<j1>;9G;IqtTY
zsabG^|DW~Lg-sJN$-|RqFuNUYm&Ok=9jKRVfJ?1j&tD4ineZ*H4$HcZdMv52^UvtH
z9hH?YDvlP9Ar)Jx4!}#a9BuS!ghx?;E^Xc)ng(+aGMO$pYz4DV3f@++6UC<EO_`{j
zr0cEhAu{GkSyUMiq(@#oCZf-T<k-OHk_xUhuhbXdLx{3lsxs|M%VlV^U%4pqxSN%=
zW_u7nfog>REnyU6iLa&sDShGPsIpg0ZI?k@o{jhnB9sWP1i!SOdU>BG%~g<y=XWL?
z8oA5JiBgL}h1sTP+lGl$>tSiQtbe=BjSB3VoZ)~^HE0H&#KvhWK8Y(aTr^1cWB@!{
z;_QV7-ug+3g5o^^CM45h#&29zn~%10Mhbk=HIW4>$sU|@xIC-UWuJqeRZwXKTOR8=
zRt_;%uC@kZ-sXUKn-fYgUo^?VAgm)!i0+Ed>9?SPnH?Pu^>5sk4ECbRgNAkb8qLRI
z5>N?MicK+epQqC^a2P@tlD_<z%IIPlIRLFdQbyssqRbBG`pDmw<@Z+Le3jVVxe+ru
z)&i^;B&aE+O&LI94(YO~nf6=~Oup;$;znU`U0zN@JC=p2K&miMt_d{IIP2d{UV0R&
z1bh{pIHDhG?Z-aP?ps*PD<;&5kz=u+cR_?OlME@Qbm7?e(4K!|AlPT(rE3)fbo`Lc
z+UEc(OX!}zu)FrXfG&gf`w=wbtZ>R5bL&26_ok3JQq%@_xw1c1#2lR|vAKd?d(CW7
zxvfaQA6f}>p4cKZM>Yy6z9?!QDlLA{!gp4oXBcIA+Z1*)vA?tUORTXp{M=8CA5fr{
zuA@6{HZqjqGF*2}P8K0Ggq|sSmVbJKO(Bvqc~#J_qi%!aGvKK{8_XOm*tkn2b-%fe
zXj}kMYQ#Uo6tj;dv3(E;y(2?w!FZROGZ6P*W8mJcRaHe*QNvIFGd|O86gpn*mg-Cj
zg&0R_`Z(q(8dy}1G>!GL{kV|T?Xt?PW?R}MBZ$PHVfs726agHK1bV|A*_A$hu1r)6
zbv<mWe7h8M^tG_hGV~x-d9Qz%9tElb>p0!{@KY-yTt2S{DEpeU1p5F0(<J7ngiPXL
zDTrEB>D5M~<2ZSXQ#;6L^C*T86&sf1=F!==zw)MGPDY}<ca6c7eEEsCxls*M-|^rL
zUsY88!dxDg<l#Tpc0X~U%%s7aOs0b4tcA3H>0)<4Mgy<75Op(K>NA8bU>JZiPBUXM
zU<o<=bPw@6<ZxVDm%sDNta)CRk`5Xx0(ki8ceVr!Y3^ANaeFyfOqqTL<Ac+jFyeWL
zURZl>hhcNVr18$2LIcU~fa^u~;2x%g9o(e+W9<BlIkm=72DDZJ<P^V5htG$={zIaB
zztHn0da^ckdbDd-zG%T0l)&c5fNU^tjJ3?(#R^)&Y>cW?Lj0mibxNl-gYFt3Qw(#B
z<+H`&wh)`}OX;hfiuO^}<EC`#S+uU@O=@!yH%bWu!R3LYvxJyq35da=@z<rwr@JMR
z-R=ddeqk>Tey!`-Ic_LksTLsZ`PnX$QjNYD(!!G#Cms*iXe)U2wpclJ{knrSTWaNO
zj}-3<$M7pf3puZ9226uBP;3~9Kq@OvP_2W3^yY~iXU=%7NO}6|U6khUg?JBhwl&R+
zQgAyF-u5<zlaL=Xc1E@(pArU!k88qg#?i#g=eQFYYdpoFCODP#z?F#=z?KPY2Vo7N
z78{1{$Z}{zy9U@Dqz_)vNRh^>`^<IDNTEGtiP!vxz+~lHl=j%3KFPsV!?<%eKEt&(
z#y68roU4rcaIdW!9DFwI5JIWE0YuTADv;Jt`1_lNH|__1qE|e<T1L#nsUHd&b~va8
zfz+G5gy;lBVl|5|$7WAU@sZYb3U7x}u5l9*<?eoC(&SWYeFzcjl7@wj4t7SX-|dxE
ztOyuerLy_NE;n)UVv6Perj|N-&l(JUYmrl*PgD)9i$l+QU!`o`%D_n37j&P=QV*k_
z5eLs;1G+O`x{1=U<MI2Gca`ammV&5N6X7Ky{mcD^%^|$b?aAToA3Kq2R#VV$+$~Q}
zIRa;Ql6iu0rV%ptlK_2Upj4~Z<`HeCcMzo=@pd`Cf@>C*JpNk=@+P2F3caF2=R=-&
z4V&2Qo3yp$8@y4XjOokmcWGpmppo&jHec%-1n>NeT&-2TxcNWGiQs!d`=<r5qqq;_
z@auWN-iD9IqxE4yKb}W+=cB^dA+Ll)o?iw9<YS}5Kd}C4o4TMmZqJ~{VAIu|bNn$I
zw&4Gzc5eQg1td!{AhzoNAq+L99PN$<^{Fwjti;tt0-FW}kzMRB>!TV6KdY&f#-Ncz
zD1%;Py`xd90sZDB3MUVTcQmOmFgC@UuEmKX2{TkjCYslF8^Ga2Z8}>wIPU%USB?@A
zL%dDE3s?S^N5iRpuow>E8@Z<Adu$!6M;2S4*v(Tu#v1%^2(>0X0S=0RcH!^;q?)Wz
zZ5~jzk{&R-67Ar#k0PFmfa70fpdko5i$nc#V-+Jc3}4UtGRHlS<Q_lCSEFJ1qi<Mg
zo#lB`fm>QuZd?+{i{4oE!6+R!RYW3Ye?sV=1+~fTNPB9SoeE%M$Nvtht=8zBEW^R1
zOn*Dv!AFc52|r`9G5|ktpmaDw)i22eYbdazYNacLrhQC2>7pP47M-F=n6*>;URdHu
zn6*V|_t|<QfrFt8z?nkkA9QE%f*^|txA?>`m-m$mVfd1NSU%Bfwi;6aPxTnZhXMLb
zBcGwpMJHgAw@TqyG_ww0G*pcuv<~TEV<40;Ka>Ms7m~Y2h?a|vN6-N@vXL3gPm}N3
zj_qrl0?GcJkSvh~MK<V$nkR;w6iNmMhy^rpLGX=ze--Xf_pxd8g<Cr!+0q7~tLZa}
zDF0U2(-dv6$0E@!+2yE1$kZ&e9W6FwRw1|<ho+;HlK!xfrTcxrHC6sz$@Ak)jqRVD
zPX=xLbXZ9dYUj{dw7ZLZYS$8__Yln6s3A?q_UICdN>6kPPU2?3uhvm4gjvg2ysg{G
zp!9K6p{4<2mW>xVFhw-1g9rzb^#98U`ffn0pKp+nx)60~&KEx9>qOJyGa$3c`g)^9
z4$5}8?!H3c)b)S)xm{*Or$1LPo(p1R7f}*d1p?ah!x70yS1{K?Fdn(+$nN-Ayl)AF
zi*@cEh4ZK7Wfmk|@TvhZ+nQ^x%VDF-D&BM0tG7T*r}8)p;(&gJ)gS-M81bIg+!CJz
zao%(3CjjTtA}|vaN#Avd<$xOEF#cWQYh5T0w|D*^7X!*9LB!4;@aFdLt?>r3m%l%5
zX+98?E@i^)!AzOD5PA?x7mccPDs9x6UZ#n!7!CsgNLNZ1GIoT;Y<>fFFu48s-OZF{
zniD=!S6SwH7MAG);f%6QBBbyYgecDwegdxD(M_f6KwM@oH(g@sWdjFaw>r=T5;Y=}
z_p59Y(*DunU>?h=<|xsi&}T`pBR2}K4J7qJ;=KdP92M>bpHhK?j3Xm*lyVg7r0qPB
z$T?JCFEWiQCh&}@NjhzI%Zz4`OOpekxEC~(q<Q=>_*jvB0`IS~AUZ?dL;;3<;*5E-
zkB$OuA<J4}*U=**rMVI7|EqiO7=5_sT>?{4ykqX}7o6|Un!H(zDo*XWJPhtRn!!2n
zr!_VR#Q1SFUa45yfBWHoLKgsI3TtN$N*0zh=4+})EYV)Hgqaea*$-Q}C~S#7NQVhb
zYp!mbnK;)}<jssan~aN6f_$ZGux)95`5YgFBP;ZxZeL~`)^}XUIY<hXJCQ&P=&;4b
zb-rP9?VnPuwOwUvAx>BxMw9fEIn-5I1ap<j0N)wKfb4?IUy2g3M7;rSZ)+PHSkHY?
zE&O_SHS?;dfp%D3*v?B`7^K|nYqOB8XNP@3b=#*SzSosX$Wj3@`ZAW#y5@V(vV8c+
z&>_srX$Wd?j>$8V3?HOD(tCOoshE%WH5g!c%Qqk3z6#aUy;Yez+8`%mu2x*(rh&;r
zGk7>-?tQ$Ktwe4JFBBpOW#hdB#GwwX7wJBXiZjkN7fGqAatp;=au@CUlO@=Cf{^Ph
zZ{@xCss#D(dL2NQx5WS7Etq#o)n&FGD}xWOdMu<Qj6woQvx~|-0cnfkw>QzsmFUT-
z<KU6EFt`n76sVs1^w_^=an#xXKwfIQ^+*j}0=U}~mfRN7Z*{T8N69(xj|xZ&=H?d$
z>r7jo^k{{Qa})ri(p)cUV+TlC61q8Cxl+%*+{EHb9^!`|>;c3N^ZBu^!DtEb7Tw@z
zl?Fm<HBJ9tfuP=TEfT?C>jea&C+g!Vgu=BEz;nqW3NPSa=5CVi)AmhFsb<*cP@&>>
zdI8<mJ!>vmN85n(9HpO>NN83(5{kf)kbv6tuXrN~Vu&Qo$PWN3K5W3aM@(;g^AYw<
zhsxFfIZGZYf+Z(_B`8U7uff%nD+s8@!q(kr&X*2}J+j7x4B7WM{ITNklj3R8acmy8
zoxM9<*7T-k1fRH05=3=MdJT>j*!nS8h>4(Bu%>GpeevvVkJNh@jT~@76}^nww-;^p
zBfX8yN>)Wp=Z#CuXg9rv_n7|`50^QD8mUE)B&bVi%xY`bkWJ2gIT|gV_}m|yOpt$G
z7-~@xL&u>ZgME6V#$W-THomKdDh+p|t2ZVBHv>?>|7j(=n|T5-HLU$}(j6ZZnX~=X
z@m8aPAI@2$Gp*V2#-vzu3X~VI)Ylu>83kbXwxvsA)}qFlrH~<p#;$4S_yx14Wtj>q
zPf(rK#^ZcD4e#C5VyV^{iYJ2!9Z21rza@J;CSpio)kZAvUKh%IV+=x!X+l!f&#6|8
z!fApChhPmt#9c3_{80hycm%z)IT7~PWkkaO5wWN~_Ij%0b|9aG5w<*1#aAvj1#wIR
zEh`jzr<(MgvubT!GH*vNhh`itwUprtiCRr{dz`$pUL=JWfXhmUhKDVcf&#DSiaGA%
z$OlTTO=O*&KUH+ZV*sbp{JT#%WYq6bf7V$(h9>+}g<TdTr2cBkZ?oRr&oGO0u!Q4|
zy@=>8g~TXncMtJ_?(@(8B6GSMo#*@GS+7oi%2LQ07GLi;KTah;XT|&1zLemXj3ciI
z$}MvgL?;q=p`vmj*;O@wE!Yy&f(d=TKQ<eJ!aCzf4Nvw&l8n9T$qDyOCkN>C@eVpR
zURiqVdf+pU#$CU*{2=e&=<^N)P)?}wk~bE+&b>%N1!FMg5m|&DJ+FVG4&*@Zz*W=g
zr7J;~C-u(2A0`?NnR{H|mxJ+8mb27Sv{q8M;^JarWT3BW;V`w%&^?P_@J>4_&5rnk
zGLO9_GBbPA&ZTSe>HHdb1>WY%A$Lg^BQ|RQL9o3jLqlu1Gt(Y8f8;F3il3o^c<U<j
zk|{xetiFl=n1-!5xCa=Ew|Dz7<}&Vzu-HS?>jWq|8-)oL_F*0A)OlP)QbW~(M_d>C
zYgFh~82YDBI`_)|Lq+f_?}6;#?ywP3S1LF4HuXmachJEzpJomq(|R{_-pvHwD9+dV
zpqsC;<j)6}kt+F?JC~YJ1z34S)xp;fmR$<<A|Gg3LAWE14taC&1pJ#r{)i?I=E^3e
z08VY(?)5dvC8UD46l9+EYWH#@JCHe?3n<lcdaTHDjhF%RA~K3(FpF`EVOKr&RsDe-
z+Y%1i(CFbqhNCi8Leq|^v&vjikj0hN%SOgZXL{96<7Hu}oJPJ9HjQnDT!%7sABA0^
z#fUM9lbn-A#yFQb?NHiTR}6_xGYTD=(^s#I9dM6*Bp=t~meRjfv?%bugmkkD!wgGq
z;s0&=Y<^lwg!5B_E3Ew5;ZNAUIEip?Yiwi3ey8)%%o<D@lGwQ{*CAbyxNWf6QUr}&
zM#g&b6R~$X_ideHc*&@B+J`b0YM(WHZ34U0R?<~FZki$Ngh+@N=dNk)_oQt;owTp@
zW!MirsSQs_gC@R}9XMBRqBH15%WZtIKj#MphU$7FNErocf?U9|O4{1aZ`GC12~dT%
z0mO{_9vr3qNWEMe#eFcFq1=8_W3Vn_x6R0}r%#~tT~Lix3AINlX(2K$Q|4kbm#5y&
z&pp4z`$L$OsR`mm(WbpUz&l6Jj}u@lHq6XrG+14XQ7{%F)>s@nX5KVomr%GV&p)v3
z%`tW)%Eq{F0v=|8T;K*Rfs%1H09;bHW@+`nsut-joGnM6a|EvfYxU3i_VQNI0PQcP
z%~(Fth4P6(_k6$4Y5*YFjhsWoMYC=k*N=G|Rjr^$u1*u7uMdH@CU$l+373#nUzy<{
z9<p<3lAhRX2<qB6l5m`4cHB36k<90NUltKUeVGH|L^3*LhL?9hU|yJ&yk+U5pivBz
z3-QU~&saWOuaW&9JM}y)jZcZ-LjlSd+vqgI;uC6wQ8TQJcH5ot!~9NDm$0_6ofm{n
z70hJ;*l+x``@b63W0V;qW;M2|i7Nah)|~G34eo?#6VQK!BzoN+TvtwjI$0sEV;Ku3
zc6&Ok8^@guDvmOVi+K-E9Vn*YPXu<>9kWYlU$Npw0RFlpOXJ1E5J53-+=EFI4ORhO
zC!xZql=}4<!ip!3yA18X_p$Rc3DP-s4H`lyo7wghwyf(I6VjK>?v~e}V5bmVd}3e@
zFufQ^+*VJ$#%jVo?V14{))q^mgji87R)QuPb|~+_C7LOP3s}*Czx)hzlNWt4C!3<m
zi>mM36FrPN=hd5*$fwMcDp5jGGrzbIDIToH@|dIxtKxm1lxWZm5(<~*FI9iEg<rOl
zV{-|Op&EedlrF3wCd?N2djqSf7C}`teztP~YND)m%pZToi^F83TPu{eFSx1{Wqs`~
zd$^9ZxYBy~1`pb<{zad+Bxr6@^>6uZCLvyZ=H{A(E=GELUS@utA{Knl6ZvTgm%OM7
z!Q9jX|45@Cs}{OVAbScTMv5H$p#B>33Mi5!gimEpC<Q%=A_hUXUG@d(g!s1$m)Mcf
ziP|^7_N-``u}qtnIi??6*sZ^9Qd`fFK#jFn#$M^jAM#7m^nhn>I@Mf$_Q^gfy*$ln
zX-`fN<-`3`?l$jUM2vE;rryAo#+Sz4f(}u<z6&WimT4cm;Hze}2pGD_?dBS;ndNE6
zYAajAC(vP2|2lkW8L=H?_z$#yLs#{?e!!BOsH`X)ds@TH02GZ>>+de=?lj?bBVd9N
z9bw-<z>cwJD5UZ}*I~~;t2N|}_Yg0S#Z|z&J1nXgB0Vl`N+&N=MlvslaF;FmxT%7%
zTZCHKih(#*NE#~YWdBb=WMneozwT4cG6^m}Vt?%YChd-AF@lbbrSF-l7obd0L$0AL
z^r6?lV9z>GRq!rw2`yD!#1$!8iQldb!6MfX$htJsf7K4I_Qp_U;R{yo>iOjjd<47t
zSizEnp?Pbyi;USXCw|!6rg&XNM*n3B#u%&pR6jD_;eA}swOe2kKd$aQv%9nqW0#g$
zq+wd|U|#P!z_zP|5*m45eb0q&ZIIVX{U}eUPCb!=6K(7|))^+2q5Tc;=S6FGk79xa
z!a}Nx9bC*|WAvFreF5ZrP3`d0ZOA@$&V0`P7JmZ?$(^Mj@5BhAUX!Bl4iwh70;xi$
z5ch)<sy|)9wSW@83P9IUOUVF~gbl=3!Bium|EdpE2$~!^;8r)Ar8U=J&FG5m9GV><
zfcx%pXG6MvoWmn3v1|vnCy{^{i$RrVrhh6M>hX_}OKZYxLKs)K(#%?x&rcWgVqHXz
z2ywTJ8j@xg=7JVMj!5faSdHPBi}PWM3rGfbvc1C-0Aw$iMM<iUdF=I>yG$=tzP|}F
zkRAZKsNptWH1Zjk5lh}zwou~EhV_w<n9`H^3X7ohG(kYZ!HyL&Mj9Ewh6gT;ZQc0r
zwbSjn7x|M2()P)F0v^idAt?#142N~PI%hvbtNIq7c3r27;&(h~PLmP7{K%pwfyDUM
z`ztmx%2@#<tbKWP;sT6wHYGvq9)@{zY^B+yo`w7U8lgg)z_AlDMVN?R2)(lHWM0il
z)r=dsQ^lkq>_8*lf$$0dex06VO>>+X5{G=JiNTkFcT0SJb&BQTgNOVU8dPc6dGN~d
zeZ&$u?0;{++bsmSv(BSkZ7=a=nX(MhpPcFxDF`ugd3$7!rUG9dY4t3X)GcMCSs6b|
z(!C>a@*D;w9&<rCH{x^i->IWAw2G2$6l>N!w%d%=U)Ac|QCQ0C>x1)nWA-?^yUnwX
zni!Bc4+2{NTx8~i^}eYG^8Qx09S@JN#F#{+C_7k@p3$Y6W|28aj1aAR!n$)%{vmNx
z3n^&;t~?^`g887m<Y^;#>0(q9Zpes8`F8JYkUZ;}cIOB~v{vtr3Zuc~tHHGTT);7O
z#UpH}dK9JuEUl)K>_maD=^|z%xUoJXJSuz5_7tK(VmV&U_|^n`^tKnp$-5~hzirXD
zP5x>_QIq7%j>Q<JO{Y@sdxX3^g~>JnJ;W-j8gP9SKiA0~WxKNyW8azeQ$s*j68c;-
ze?kou?>G&X&H!8j9pK1=Ef8%Ul5nNo#j1i<g@w)K63ETcfId{k`uaK@lW>Mc?5u7U
z7!hN04-)5*gP=_yUZ)kNJ=d+PcZ}{yfDtGDIM$%@oMLSuUByJ)$`LQd^)6eJmR?DY
zt7o1t5;x82bq^ChQK^E-<K5A8LL1yVx#_QGd%Yfw0f<^t4_r%}K~l|&w4>c36j*en
z0@WR@R}}Q9$8Qv1yP77yy+R(aRH|b|gdp<`YyF0;8rB}L_)Ah8urPJ#KJnYSoyMDG
zhAemtWlIU|@57UY(Ibpi6!k+KyEkl1zU_F&J{bziqsGn2Y7(U_;bUkG2Ug%E1+unD
z&45s1xxzH(AMRH8x{QMR?|V2YY%Km3oJY_s5^6ijnW&7UGyzo{yOu+PEpZ~bba$dz
z@j?JxEI9=;Hj0F=@`2CgGqD?JUy26cPWJ`Qhiq;wjlmP+j5ZR;BTj^rWCIgc{`6>Y
zmsh{#8)+c_ejTO^S{M#~yEjPm3lPk9kr{SRa_G|+HF&n&X+~?9d*Ne49x*Ra*BONo
zmQ=t2vt^3Fef(f=DMi<xRXcAk`SDiz$tjC@<>fyLsyJbv*t)>BmW2b|h`;vPUB4^e
zZzG`)An4cS5SU)tDxWAJs7Cke08N%mJ_C>NmR6I7oh#D*)iiP1q?)t(F^nmzYx`3N
zuF?LtCSkIDNISXY5!A}ktpn<P@xMBG>G68PQ#cdzMH=l!Xx$BL@2%Ti`zr5knul89
zm2}v#`{CZ8UgiWNSdF#r*npSn$izwUr1<cGcX`uxMLKGi$~)>|j@aI9J3$9U1PREH
z3_+0*q^FJ5{8t8S<S4?&IMt1b2_vzk*il>{&yuCfX)F{-*m{z=6-VZP{>+$OtXT%}
zAupsC9&$^gz6;9^YB@h8E-xC%&*{*E?nN9J{NKGrb{_$t-L&FWQb5f0DPuNokU^uc
zmbTQ3CI`re&VYhd?jsboqSXu%rj^K0kCL2gKkH``d|?z46yhY-Eb=V1c;KXDp$2`{
z(FfArntRnorMyCR8o-gd|Bn7zy=-_)69(!v3Rwe9uiqqCAf^S&X5ne(_lB@DC1fz@
z;y0q@d8Lh1FjL>VV4S6&>D(kc<^!ilov9s~u!L(=*kF@<qL$v(NLHMafe~$>mW%8J
zq1CSy8Dkhyn^xjTw2v2XiV>Rn<2S38z0`q}-nMie4_YF>2qm~7)zSO_x5mt27ku@Z
z{$pjx$84xK8=}S-YW>m2R4=UP8!6<aBOb!;>^}|1zcge!2FFyumY)pk^V8myM5Cn8
znyfxJ9A7#;G1>ojct9IBk%q!>;l!>|Ej2S!<!Xk1=;PK`q&J_?$qhu|hYGj1MtFYG
zdQU4GC;Y~|YtBgr{`8d5m@|1qQ9rM2jw>Pxh6*aiE9;5adYnyMOkf5h<L5}edTWeD
z<FIr+tufRAe%c{tss578zM^3V|Cc3dz&<NJ7Q=-9eZ6{jInI20M>qOOqWA&W3Jdc<
zv>gI4*Bx@EcVm-NDP5Q^9_!oTV@z3^z3mN0O{{XRn8J<D)=d1=;5EH_<a&9M-PSyr
zuk4XxP}YjU_+4xbt*4PoD3q#HKywSOk^2s3$B}|7x6uHyWL<y`7v){P1-@QAyTL3a
z?IM?kMnbm1FvZ&#rGbur7wdVrn(bHhW+WofF`3~;erO|s)r<`tooU7NcZ6^8w`A7=
z{bSCFcd%t_M3q63{7JrC*W2O{svEf7XQ0zoH_liP(LQHM{}&;zO#CPrPgH*SA6=$^
zxMU&a(r_DwCq^Zju&d4kP6(qzjud#R!U0OFYG{@V?3hWc5$3z5xB97IukGvAuc^D2
z727l6O}|UEEMnZN#AI?37^|Q~UZV{7c;C;#a;bgTlAT*w6fPcLkNhV@HB$n%Kr!a%
z)q5z9Bx)Hma9<x1MKIKb+9?ui<Ln~gQRl?*!C{+R7Bb)BADV{5CPnq?;Lgz*OH)-7
zIii_v8q`P?uVe18QwEbYcP)wOy$uTCJIB`ss2+pl{Bf{e+$W6kociU3z##ugNno^(
z*$JO*Qm9fS`B+EO{P4JJ2G@?`JfIg-(Ed5lXNfLlGN$#SXmOAEuSKE3`C~s}h6=3J
zdvG{Vd;ha!yaTPv35))xH}s%7o`YsZzAX;Rw@Cl+B>C~1o~dB`j_L6_INy{U?xdGM
zpYcnQWvfnTks^BFn5;>nG?6X177L)%#J+prx^#rFZ^}ncGTXV1-{kn*Bzj?Pg^vYm
zWyl@6#C{pH515^?y1;o9Gd0?#7n@Hdng)V18*?>#ep4iWRUId;2EHrZXYHRr5X57K
z;PEXz!^Z}}3F#Y|(TCkEobA?g?2D3TH&#Tipk2nNFh<>YeMERr1CdqYb=eW{^K9eA
zygyzYYmOj=V^hS^R7M7DA84>M!%YrngsRj^`ErV(jf*_#7oQL?`cms<VL<7m^AwGt
zDI6N!)!2rwFvCRfGymn3D*SW|HJtN}FhdhL=LKy$>z$IMG;r^=y<|yeFmqP>Y>x=s
zEFr_5(WMEyi@a?bGMO{lEW5so7;H@80(TEL-HYqD|9)F8$d)d=D`f}<+iFKl8~l-{
z>B{{MiAXjq82<X{X7Bry)z>!=@c3W93CAZo;9M`Q;41vkWPYmZIyLhwJZn@Kb`BXj
zI?xwsqvbeUaOLbnKv}O`Kr64S#p`ss8WRV8vsGP-l5#r=X!hZ!7A?%8yHLnhZB_@~
zI`e-@d_p~rdrNo~**L{%Z5ZpN&P3lQaWLg8O|iPWp+I^RpW;apnfR>azh_*y5WZVX
z32+CW`*miDk=c4TN|&|Ofydvjbyk$1)6eW(#eVUa52o|%d5C3)h&t%_8Or=Oo2-b?
z1&sx31ZUt<sefCAmN*Xy@Sc+J?BOk9oZpyD#eu<BarY8S(AHf$s4>K$C^HP$*8#iZ
zdp&_!xw7>8IIK`W9&Z@~K=_dAK>T|-s6kC^Qng7(nBv!$l)gMC)b>c-vh`H=$rZL+
zb$`N4OdhxCq^o0Ln@&)TRVf}Q6<~202ghk5!sHTPfvgEI(Kr?dZ=^4%Pd02O;5!<Z
zPd%D%w}vBTxkU6t=`z-=O528mgvHtMevZfIY0Z4KMQ(Hex_5{Uc}9v9lal86`@!9!
z-fM!ebW$7aRZ1%X&Xtbxp%yng2aZ%>LK{9V&6~}du~JVu=n=a2=rO6Q7PuAmGZm@x
z)Z6G8*Ha&d1q*q(^sSPFeV3(XhqqI#+E>HmgArc}`A`)ANg2pk&co;nJlZTDdkRz9
zCAa}PlALYBIsa~+$j7ckE>p4SyuPO;#Ijdw>Hz}>f5)>*gRgZh%n$&%f!7By$vEUt
zZmd33@Cx4upls?n-{$vHXuD1QFNPcQlDdw12!IMblERT`a`xSk602jn^U$jrdn|y;
zb$KTJ5diFEO?ORVaPi~iekQ1)&hma(Ex{VfwTAc!i|Z$;E3$1P(hmm?RckCq4OLM$
za(1mS0bm>{&v=%dkMCUb@Y_asyLdySk0Sq{#!XOo8ob{~ma;(auXH)NbDuo9o=<wU
zbFwN^@n)-7j;KAW9ofd}L5?Qv{}hCCYy_<aSMRbd=&H}v#k!(%V}!5hqtR-`d_~}Y
ztP|gP`a_E$slbi(hRx7vE3TmK+J9pQ@itqWerm*H^q{hpHp2|Zj`S<<M9VG5<eE^+
zWR`1AT@V14qB|Cjn@LkKH6klt(P1};Pd#~Qatdw4idUJnM;y>l1QQq8fH+&T!6+jt
z_z-M-3T&6YVXm2YS)_D^2&phVQR0Us+Qq=ypM-1*og?snZ)ihLef4+`BcG3pl9#;J
zLd^a-0g_>#wrx=0AZQeC=3ux&Aq5Ik6C+Cu+>3K9+0Al-bp_(LMg8l2c>I0tLrrni
zlv@2lJJ<WRSwrRVwrVw9wEhI959lr?+~aLsV*h~4c~`1X=t7ms@cw_<3hKltb3UBX
zYJ2!|2{<?8!)|bvaE^r%LVea3YlsR^={uPKmO9RcyUQ6EqJH=3`QZ?^_2dvn6K?0-
z+ukmY`(2PO)!>=H--j6=M6&lHDZT(9-=OAGJ}|%?{_V%2`?j&$=6;%}P2g<$je)7P
z_%RT-`QJf!0xcvKCXzkwxV|C0r&<pDvJNL355(-~iRl{y2K(Ojl%NqidpS9Ix%RM_
zlhEa1dkm-CfApgG`gd5+@If09!;aI<oEWn~5NH>(?opnzv~42QFr57EbC^&p<)7(*
z?AZ12m0gZDNALio7iGt5HdA6hPwB^19WEY69(I1mTl9Pb;Z@%7oAROa{Q1Bj_I1t7
z;q;?&xs~1Da5qM2VPOyjxj%!(e3BhwD|GG;gA&9OaAle4MR7nf-}{qXnv#cI?8ey>
zY@a1~b8G<xo)a76*VUZk{dP6mEf=2X*pHz%%X_@wEx>A3-borx4hY(VV7!1aG<;o@
za{ci|!~4lT1=N5aG#bNH9J4D**!r#0DsE)msdQa&mdUOLbSC>KwEv8#IRnqerheHY
z`l(c&;Y?rj^Vw`>6Qlf2)3_1$0f-61*$GwCIK$0<kJaIewJ2Nq2IF!={)zk9>vhty
zu~{l4A-7~8qLeSBt<N6|(j|~y;+kg7Ao+d^3bG9)+Z-GxC0~i5%+^>iSdZoQX*QRS
zsAY8i3em<ya%Fk(V=Sx}>C&ow2!5`Olk-T}gvQ*6N&}T;I3kwpB=71tz^1Bpo+xFI
zI$0UCGpB{KWVnTb(kcd-a-fzYC?fU8&=s7P4C%=FI}Kf`+W@vdUfvQGl+Hb$Fp)^I
zzo9KM(*akHOf36(gGckO=)Z{C5r;}n&BZm{$bv_O7=x9DB<w{_F;!$nm_YU!G?~l<
zeRB&XS5jB6%{S7B|IseMe|?+dw*6an_W;elUm*mfenc3FS#h!Flx%#8F0o6C$*Rb%
zn{y-04)iMl<0fv&)GdtCb~8bd8{V5O_>t-x&MUF9)`bf+ePiPLEX)=d)C^9+HEh%M
z@}|?6>s^;axMgNsvA6J^-4PneAb8?2O-r?_XG6=cdLPm^FmyKGG2|8MBsUmZ)nfs?
zGeP`>RJ)&-4UkY9wdd$x+Xk`#rd6*0(};;lYG~8z;%dViUREaDqt@2hNm?H_+CX?A
zdsi(i?lUQIDHLx{5S&~G%cca(LSg8zMdt6C`Fa7YH!N2WPWnT1?RFG`03O348is;o
zmwg~KE28LJm=aU7xdL$A3R`N(n>{|V7W@T1-@)nR7AuQe|FYE(-f`2PTA+s`C*lWM
zb|9dAw3=?w1T?E5%Bfj(X<(HJQIB`kqM0cvbz~3G$2~jfKLwY!g&{4$AJPQE3tfd{
zmJAQRtFtg+^lMx7oc<^S(rmc@+dgiO-ZigG?&(1&Ryd8NTGQN~xRVye(Q{s5fwl95
zVM;jms0+!Fxiv1apCme1aaWG0iY!S7h)sxbh2GnjL+0y>Cnc*Js|AkKSXT4}Ra`5$
z8uONt&iMEFxXK!Bg-8Ixtk&~xZUYuLgJY}b66c-P-v1A6AZ!a_<~LB8BAx8UbW&T1
zEXonexeThlFZEwNK5+L4uuTYeYsBUr2FFUNw(f+9sg1~90%X4tlpd4Kj@GEq+*K#y
zu3%;_NGysvR1vWS=8}x=k<<<IMI(3Haj?h+x~5&4c=q1=iVkIJPAZmtuv+w3i2sbl
zjW_Q>dack8zK*rV{~vI_3a7GOu~wZg1Y|``XWik5qT5RpiFy<=7zI2uH<^309RE^W
zNX2K!RMO^*YwxU(FbR^5y!t#H9J#80(EXz~L3et|n6D@dC%8dBh2V!Tm~&T#9wn9m
zeNYId9w2P*g|}Ayz-k<a%>Vng7~HqFCSX4>d-;NvEDGFwp4O=JO=>9X^zP*gOiQ^q
zL3e}h=J(mJ_2`zJQi_p!TUuj~og8W}eF(BfdMC+wovdCo!2^J5*-$?2Bu-#gJ}tb>
zzX98sBpajC6Rm#m^XhaP&<MnKEHhI4xIBI%yG>@#TMZrMu%DlrB-UszXyGvu{_B+!
zpgT0aspE7JN!eTed6JUhuKg934u-aNi=A&74#~$y8<C`0b9E&7>ufqFImJvis=0Lb
zvuu3+LVmKJXhk6qwXs9_UJeDPtJvyw@Xb}gWhDy_Q}SA#p{mJYB<nic($Nz;-o#j%
z3UQ{$9(n3wbBM7!><{|*N{^XpjsW3uAzNOK9IG$07(^FnFYmo1WHWb`vx*e8<x@;X
z<sJvapzZZ<JUQ$YQ?XNc_l57zg}VEy!HFyt=6EQGev2Pw+E1oc(xEVMAIf`fcn|u7
zg!)4IL{YQtz!N!WB*nn{iSo71TGZ2E<xVy;?RB#z-X(iL3wh%QOMBfAwnlNlEh4t4
zm~T_^aNnWlfCsfZ4f%|}+$XFV7C2k`Gh0Jm)u0L_8$+uZ9Wf9CREJU9IfY<{S^ou~
zvoo*fR*i=Hyb8F=;n36u(BE`GpM6dp-vmNEr1%q3r#7bWNTBR3Rf976l5gJC%5~}@
zIGe!rjt@$d29!B7oUq>(ud2N~z>)V+F&CB4Fw<9YppbDfbYfONf#y%bv*S~}7RyuW
z_D-$3o;p1e*09)S<|`xM7O(KItPV50*8*xWGofK1VM3tJ2h8c2I~G<|G`XyO84v%$
z4up=I<tmLLwXRXS){bpgv8w-R7%+jZ--(YQ4()uE@J?79q#bRqmR1=yl`~~(E3v?p
zeduZyuVGh<B!w#DY<oQ$4Z5+f?AL6B5d;HOTjm+5+qqs_rJgssJA%d%eK|!CvA5kG
zr)%zE<_vJk9u@T$aYVrWo^47GCC2B$Wl*I@Lb0<`K!yzZbj-wL*m;DC=pdfgN2m47
zKe8-#sq~@NF9{D+?`k;Ge?q}(kXNz(D6`#x?Yu<tdU1s6Z)}$EJS?}bnGTK^RsPf`
z;E0|)$>RMTd<yAckhZCDV5l_$5R%{Atz1foR*n)tH^szyeLqvAMdD2oF>!cZ@-p@-
z=YhH^Px#w9cNc!wJfLVjNhyPtJH<o^dTx+^@3d)1T-=50%xy5T%$zV0V7um_hN&2?
z@kyagXK!=Pkj|;9iRe1R$g=wj&{t<MHb-hO#f$u&!_G*QyQUeFcgqwI3i-~mWk67y
zyAsw{Sr@In#VZD0mw^`#4Q@7OLaq$kf`Q7E!iMbb?9LYFrjzm&)R%<RF>5mH;WMzX
z`<2%eYyz9>^hN-Z6W|OSF`$D&okJ6<%=t(D)@a$(61n;Jeml3tdedf$zsID_MFB7C
zUfr(a+1X$(Y5kdbY+GeZl4ZQh@Xyp=8-E1VXMN)&bxP?My<>whRX}kPiO#mb)ufA^
zLU`UkR>Rd#)&U+kxv^#{AWtTYM7F+Btv4F=9~t**a(xd&Z=uWc4{(Jp2B#qvA3>IH
z8McIRvI9*|mw_hKlD5BMWFW5$-AgZnbIA5`2VQ)WcKY98+W@&(_Ysk)ql=IF>x8Q9
zT2ri@4_JD6sp5$8MBsfae{LJI0k&C>2#D$hP{~D5(YzD|s5F`RAg`$8dX%kYg|gev
zok-<wSd02Ek-TB+lOG9$4swY9*$t8xChBHMH>N_rb@L%&Z%^Q5aC**9u+dCf9c)bX
z#g3~@sTwaoi=c?RsP=1zOH)P>>0@TfJNu@R5Kz7vTJJb&SN{myG^xvD2!bU>j2mGX
z?C_P<fCE13;~AHE$B;>9COO(myD=BCAMVM0)=EOMF;IY>Fo7JJ#07{j*eCKl`y}CE
zO+64ble9elVhpD$u;p1?{uQ&6<XaA9y&TluXkl#Hc#UfVdtI=b*9$ZBMD{D3EAf~=
z&M6#f^_(Ln)kKNhA2acZilDdEcklwEjE~1fhxmCA&9ThKuCu3;f7JN?IaI{z<eY1Q
zb?K0(dHx5UsBJOUE>rz$xxPE8@1=loZHjHk3|CCf;uS2^OF8AG|L}A^5cIwMI286m
ztY>IX=A0aki{S33)%}lg6yR#DV?K)I+4h&eU~N3SQIFcf@~Y4YZeiJeGn*4^M_=&b
zbgSI;wwZ|eXhd*Fx=LAX-BeYc3m8=!Ip!FTQJQD;0DQ`2LrIa3$2A1otD`c4wCQuI
zAVs;d;*`jSZM(^uLWHOg>_M^Il5)~#rdF%p!NLP$i$9pE>KeeCIHtNmi?nVUy^KeN
zG;hQuU!XzeF3|HBQ-Z!lGl=h7Dc29f)v}dzz%8#Y7L2KHKU2-t<#C6f$L^o9D){Be
zCBYBE5@&6;(z?y5vP&~}EfMf)7J{zj-VGA~JwU?0!&k^c#VR(ym5exFxm^(T&N8~6
zr$~JEAX-Jw2|rMat@L>jrQaz^PMEjI?7uu-i~A(q2y1Dv5&;U!Y_g)ptrB$_DQ3bc
zX%6td97pL)l$sSp<d9|R$=_jj;Ois2S0U--0i_MCf=n65P748mIW^lIXEWoY8(asw
z?vH(uXz_!X9hd*^ox=N$t!L>1%SXCJ5$mRTZHz!g0HBjxaUeTk08Yhq&BFbgrY-M$
zK2b>Zvb~~j38?j2=9R+q92fC;2<r%{<8EE6(f+FfhPtPacLao}?ayWjdT8Y99Epx_
z53NOhvl;2RvwaE)%8BUR?z^BfH+Y0?{#?kTMfYWYu%8^vB)87HAQ90KY7(&Ooqt(t
z`GC$_u%QEy_;FqBvG0s`D|czihjI4pxflApWKk59r~27{h$kVrhMCXt9`+?yitbl5
z)L>v^aX6`Y1*yDN{n-ryI7Mza)ApomWS{T#Gc83E$%}Ghr3G&my!K(xN#mA15@*e0
z8&G4Xmwc3T-0Gu0CI_02Cxg6$rr;D1!@_RaT2o-qaeR62i}nMH?W+YlTuqMRp!CUm
z-5%}IeZ&+J3d^k}@P=6QFfNl4doRJd*LWleVdy7d@V`q->rWhzvM#mldE0jC!|zxh
z;c&P9`4GLFmjNow5tK7Z_Q93LedWww)$IPO$(Qjr%kWdm6pJU<`@fovpb@1qJC>af
zsWrea;z{1g0;-}&jJLrv6^3*xn};6Def8ADUF$~2k%@Sy6#46Qnm7Hx<`7j~G>+`+
z46(uL(EHL&9XR1R;%zA2gDGj)LR|yf=3$<RO3^DW=RTl%fY?%+kPLdv9-083=V*!u
zx>1+Em$Xu)+@WEb4A8RilMuyM0;CUG)J!^~zBc~zH=V-1rEB$KLdT*qb0iV&&Kh<7
z;*s*{PR9De3elbIynOHsiy^IF;hZ#N#-yD6?T#lR8<$U{kQdU*xRD4lwiym9sjJ*K
zLo#T@_Io<G2<&@#+V69ql-nf&S_A_#H0MsryH#4%o2Xd{G|T9c<yMS5MQdc96q3?t
zKTAVV=p`{p49Kn|Xz46k#;zXM{~#ez;m9%<9Ayx3CK%JbJ~5&_@3esr*tfBqzS!rE
zVmf^!PKc7^53W#UC@6{c6olF!9qG&GXZJrtWkMpTgm#_lp1k1*w%m`o6Dv!IymU05
znVxZY*H{%GY%}r4-I`wFF8&Q}wR^rh>I(I(v{>a$$#NNjVCm+AXq>jiQ;+cQ_M8F|
z@i9yL^<i-`16sxMbddecdYq-zX7&Uj&+W6+cf+4;RHaZq-KxGt?y4wMc}4P1lfE;E
zDikhNtqJF+WVhrzMYpaULRyrgX~`Nmf<=TRQ*Qp0f{Kb!lhA`!0PI$|(rG6NyGUkL
zy!5L~>KYiqN=5(@<mb!a4@t|*wuR#i!$;1Z$#d(@m0x&x_=`@)29Fk~cg9NmG{}pf
zjw~}N@X?)oT3>2a!cHw3T3cU6eG~z4i2}|RHZ#$m?nlf`LH+46oWof1SB<{^zL5>H
zAzeZoF|n%9b&CT~9_|%??_eQGVED?WD(S#p#paH*z1%7f^E={)QhgxiV+i!gRO{Xt
z&T*n$^mqXaop-j-myjwtBqiMt7q=_mN|Pw}<~k=)p+o{wG!Q=Z%BDNO1aVbwh||M(
zEF%QzB3&%*n$_hr9VOFXy|9Luv=3VoadtRJ6@)}D-{-OY_uCbG0TJONL{xPHK`D6e
zh;n@p#l%(wS+BO6DRG6{P2*_DR&(%Yxg9E|p77+)z$QWFZ3nxY*18+8!8_g~zvJwS
zLMgh<%~yRm(|hHSEXbeEKH8N_+mFji*Zr*JCK5-yG~338=;MySg?Dg9)I3m4XQ7XI
zS{v)+rx;3^LJjN<h!v6x94uy5I>7&TAxAMTWsMFJ?XVCeMWzA*mB9hco()nuFMvXV
z&Z24Z(|;yDAV0eC0<46foAPDm7{WjHmgsaJdAYtmw1|WKXdM&;&Ip9B&T&ggOaZ1_
zv7}u?u$C6_=Oi&8@{fxuds?Zl2=Y1~UG{%f+MVD%O$>2*+l4WstYSh<zIYc>j<$R7
z$`~L7ep#moo;Hq-ffgLa#yYJD>IWXGdD)+ZD|{=Mwz$<rhb{&dV2ddf3v>yhRiD^R
zFSOvTYuFJw-EVnTRF)Rt9?7@2@V+6_G@FCMrsj~E3Q+AkcBngsaKihz#T__S29#Ey
zsXwgi<?0zrR0>}7Vny6&c54H&6;zubzHCBk>F5uI6_OV>;dm9!>n8sKoNSc(QU+(4
z5t~#9Qyhg#%;VVeG-t9CfNC?ter!JhTVgPd_gY`%w>n!HRiNW!X?it|ACLqBs2flE
zuG96JAew}seX-`7hnA}*2|Jy|FaM~{ciEGv>}q<#Q&~ISl70DuRd@qMR=c@`lU~Zu
z8mQu;`^oopS?P2zQfGv8s5g=$H9RGxC<meiVA{X8QAw^vDaJ_i@_Q#?x6d^oLtZpb
z-uF!@Ncx?qzC5Xd3TXYa>D~>-x98bTVQNGWTY{}iEKam37Uac&F(9&<e`9IdAX=^3
zzl@Rnj@UttnA0csfXNL2c8wQ`o)X%cQ^c^+<p2vS5Rf<!64tUGSWr90Gmz+UXHYu1
z=s<NXL?-T@)`ax)Kq1RrU*sM~P*u=~n+#QrV>DdXTY&p`Ks`vv3^3t8I~M2}-w8Lm
zjn!v1M8R@l&+=9hY+HlK5!eQf;TP1%8le>|gTq{Rp=kp)P;3ou0%zPDAA!+|;%<=C
z^3oZqvT*SLCqwgZujv8N?_G3wp<LHs<oOn*SDoH=OXd^$fm~k}<d2iwNAR%3w-wQu
zboz*~>q-#Ig%W|7U<;J#$bNW=&YpOw(u(-ustU616LG>t9GWTWj4;zBLwczK^Jho4
z=2#gVRCFfdg!b+!RQQOxv5@~08^VWg4f_kcN8+9Hf}#|xS(0`))<Bi@@(qd`Di|JK
zp90R{liIlU#eF-(Ojzo^_pzC3A>d_HYFB1@uw3{=q+w?BiSOx4ts&+^-@rf5bXCuM
z{|=zGRqku^)O;qs80bR-&Oq8s&O2{u!P@!dgJf?JoQ3gW$ky`ADTkwoJB!CYU8@7N
z=i2*yI}p8-m@4+2OsfrSK?m{LLwf@Bs}%L#G3?BU>!!yZes88I6lpp7%<7eIF38K<
zHaZGwaLckjeN>J&?xJY_+PWvz@w6MCPKP+X;@VNRZwy31m8R}yay@JcZ4BMiwd$a%
zC^?A{FVG`Gl%539*_cZdP7;wGS^|E)LB{#;H<`c$g;=!)H*tiWL9}smdN&z2!192c
z%Qf%KlpgXtP!<8)HyGRD&oAPLnCHpW+B0n%3cydVvYZ2QX-EUsr8eqYHeH6|`fj(!
zfe(=NX?xn5?1|=-b8+u`k5QFupaoP+9o7gi<gS4+AEI8V4=pps@%am2AolJOuuH`#
z$E<OmqhJz@KyL2UmDF;{m#r3oC9?FNZ&Qp$n<CI8gBgZKG%T>6Mmf|~#I}=d92#2O
zg%<E-sl@lOATu-PrzEbC@u*3A>Y*;T5L^p6%{p5xFnITrI5s1}YF#y3W&qX89eAv3
zh$zcE4hn>zb9bTDnqsMHOmn_ThMWK6$CwHh86l4r$bPFb+D??*UBM%og!(t!e@SBp
zMq7mVv6ZS!qSQ`mXo)Y6l4K*{j1e;3r1NkAhWq3CM4Y`q9aiDZAK_ycjpk<zqvIuQ
zgCc(1J>yfhN{bmXG&JV-Lpo90#&g}k3{|9YWKS(g_z^fbnxVi6@gZjb!=xEfi-+?s
zDO?qr6-D75JJEu(!z~&#R~(<??WAwx#XBnc{2#^w-6o}p{_Fz0`4%Vacf+lWC1v_D
zvL*l=Upr+|JvM(7ojsG_WO@1@S!gqEG2=MBcZ1eh!F%bSv>Uz`s^K@jQiw<?Eh7+G
zQf6)eQO{3d2U5`4ooAv~4sF$60j4$7EgSZsQG5$iuH9k{=m^kKGyG_1EW&V8t0AwA
zW7FbvA$ffKMog*=xa_+$#j`8oyGEL5+=mL9!oqBZy=7;Ya~0~06m>jj_Qr<T(G+nA
zetH(u>8ze-R`;uZN4CF6oR&ile7!Ao#h6&8@&y&K!`z!z$V1i886S#fb(INxXXh$-
zL|7Y5(e#FZ=&JLaMx6bRQe>N6$W=;Nvb%F+UyeGx#7G5LCw#_<+IE?)1u__?EKmft
z#wfYFsFo3F>QVHdAbBY-8sUd5bq;T~@YC9;b1d~_7s+1Hs?9gB=nMJ<hlj^Gu9;qa
zK!zK+k(EXS*^|S}q_i4fz8r@KyrzW+(Wh_|SC#-B`!?oZ1kL@U!0vsC6>3Q_^py4w
z1xIP77p9e3Nzdz~gL?7K^aryOWW)4|x^qAmsh}ko)MA#`k#?9<rBT!_k&h&vks%hx
z6H#ibO_S=$Jynuh6In2F7;OrEBxx=J51GopD+;~jQATAcYQXq?8IdyEt?w^HC2g>=
z@sPtm^m8P3HABhEs)m{%{X%KsimOE(-R{l_M+F*idFBN}Z7qx7M8mb97+sQnn#{O}
z0pjW3m(me$|Hyp2aJ)oEwGW0pbMm>$;sAA{>{ZxPF6z$va0zjl({7pVS(9gWeD!$`
z)VcX`V;C5K%@i`}tN0D7Jj4k(cAllC8Em1y^OUVkd+OBOz&!j@R$>Y;*xH(%l;pE^
zJPB0=5E*^-i3CCh33Dx*6<nXI3Ad6avfdPYgrOBv#Mv(cilS6J1M|ZorP>?DowvXV
zkHLij3o%&OzlO&m#_|>hUfy+A>cP4RBLp8^NeH%r`t!I&Lt_Jihy^LsTRUl*t7N1;
zvtPVZm6|zRUD(sX8fZbo$ABgZ;3np-NVqp@G;IuvVdwputT$pc_mc0{_K6R(yo3=W
z6!w}x!tqqY<(Dp9AYo&A0Dhhw#d2Ib58Q{3f;B0m_iY=AMDBLwn%^C@g~9*_PqV8H
z1}4#!&YRFS&#OlNbh|qrqxeW4QiE%74LW?5j{}v*z~n(ETV2uhFP4ZJbpks?3EC~Y
z3f(>5lY`lnJc#l_9^TC@K55em<;s+|$rzPKS#{wYlVJ<@1+`A&9)pN{CQDS?{`rTj
zG&hsM-RV>Nc0y$&=_S0C)ImU%j4lrP#-uI^c284lsUb@Dc=<a40Gq$VY157P#f4zX
z2_s4sGA2-1LHx_;!#mn^QUwYvYh`wB9T}k2FMKyGFgBu>bW=;G{xL1b;~x`TOf#N2
zw&3K#1m?`Q_1y0r84<aqG=rSe#2V>LpHA%IStl#b8z*<?f3^pV_&_?qbuV7-c|EQM
z^iM69&JcEH@56pV#aNk_B4uEcM9ymv6Im+ISxQtj2-#ELknb<8uFBF!H!>(_Ti9&Y
z5Lcd;10HL5+SRBeSv1cvX{hxp?P<3g8L!h<G0d9mKFAeFbgE9D76&WwP-ZnRRYsuM
z%_W_CsU89Ixbmk1Z14o~s||s=$}SRnYo?ZgDMp5&U+y^~1Wt6+W<lt;L;ZNV;dZ1g
z$we3FB%mEQLdLF*2o7T_mZJ_#3Rm<GxgA6su<R|9Y1HO;Mej}3^28^B!)q~p_@F3{
zglpJ&5cPq2PJzM6>X!Q;)<yYuw^fjYl?%OTcd)2`)uv6NK7mZ^Whj#6_%1;XDeQ?t
znTU<lCexIZXpC#3mE5g-8C~vp^Y)SIN=9z}hBRBY+CBj2!XxtF29>%;fPdWBmDco5
zZBYHO+4nAGoUWY}lz)bLGW4GCy906J7Q$AnGE<3w%sNx3=&6~dG^e5TdnA&UTTuFH
zBq86ObRvW(&lWe4XOboqA=Dk{fL}?ChG~=@Tc8PZEo&F-hHO}4)`rmwX!SvmwPJ-6
z%nNg2Q*JoE5SW~O(wJ^zgH4@=WWFJO!N)1}XJrR3L9LsVB2H|`agcvMU67}<m8iDA
zX*_j@w%8Dj#!Z3b8dFuz_vYQ39*XH3atKJv%}cVL^2&G`ELQ#_Ti%ULwlP<<_WwHy
zX^CZUR_5$tG0i6kksxdufV{b2sES;+5<jakjP7u1(M&xy@_4}~LABgE3Y|?mEFx65
z=+RzfN+WMA-J&{8ke^(m$H$|8v@3n%g55m2@C=w9Ui0tfJ2Nb+qY<&N2&eaMML7gV
z@~)z_wW&;#YuMMQdn=rV?>9`<T~#4#$}i^dCM*!lpmsndRAM|}|6t`MvAe)Q%!O@o
z>e9=Pf~RobuK*)1)`)(*^vbH+3jzrCgbS06WX%QiPSJ-Iy7bLBo9Oy&Ym$6#Rd?TL
zzvO$<831F?%~ydeGhc~zBnFHM<3ND3n+X^wkc7STnNA|N|3+)E2{QYK?w4_iBlz2e
zYc?^(w_W6+o`Llajb*j$2{qhReo0?vq4NU@Zt=&i@OBQLX`C3~1SKTRbzUiOX_9yh
z((E=cs*p$X&Je9Dp8cv){`QNEiQENVoh27D+F3tXT+WyO4^+{W9=WE&8#pVgJnSA;
z#20_KW3vvkGp+iZ?qD^5NgBEylO5U->bz1yDW2usp#%ocArgGkhEl2x2BS?`e#anH
zMIxVWMXlTMNM-NL!QZBGrkwej>5~olMz|-PL|^kpQG7$b;TIal4?8MJ@ARzwvNkzP
z+5haJZA<9mYQ(RE?~#DqECQod=YNt052THX2jmZByei|fo!I+91PC;|{vLE39~Hd&
z5p55aCQSBsR}r6z2sqi7cmw^@DC6jGT4t;fT@>}IT~S36VB4U~(9>$n$It#Og6^^(
zf+tj~M8qMOl<??Lp=@o4U~mtB&IUsj3DrC&a^nxNVoI_(E{I;qn!Xd4>5osWj9$f4
zyqx?(@$4gCmzL(h#-X5#iXc%k;cKXoCy}Ky!%>(=96m1JN8Ek9QgF!8=%X8N3x&tk
zr<i3lX}Y=UN2sn+o$iPHF`)AoI$avxZ0(Cqg{gCqHg3~hvRAs=f(ymaYPvRfYuQv-
zmtps-xZ+Cz_1`xON-X}m%$D`tOQd+B9l#oevfKA-hARxaQXkc*LF4acl{J0uEP3AK
z@3~4~Li5}-IIJ(HyZn``8dZY;&`bQ8zlC#3DC-lG$CvVQ2&PR!qW5+$-L;b$iA_R`
zDCXxKaw+bE-oH-T-+Nvj_Lqo=w;BzIQw3R_(E%$V^|9m<npFSIp_*{=lIr$Y;XjPu
z;XqZ^$ma6sO{*BHvC9j>pzt4a8#uyPizJVM+t|U~a6mwVjY4>%zCgzg?3ianCc=Uz
z98lpu2g&lVif^Av*3y_{0OeY>hp9_<K=2{oXlFzES*@vNA5X7xQ7=!+j6MN7Ua=Eh
ziP=x`Q%mj}<|LZaHf;_1sst!Kr3GE>!~M`XP3U|!iFponkaZ~!Intqo=C^_a!0g8z
z-8ELZ4)EGI)rEqk&vWBIw-A0?J8GU{k1Y925{KmsKR15$(1ahQf!8X(OEKteE!3YI
z#9b$ObHg_Yh&pCHQmhrnBSANiQRO<%plgdRU6*(FfmoOno~M*xF*BVN3EhDr@|{LW
znd0F3em*3DLPu`0hOd4cR$s-~BNm|A_nXGTuE_IdHCzJix4mr1|2{g*asfvO?f?sz
ztTR5d2;+RO5sn~}XLJ2`24E-13IZ5i2093)(<W4=$2H;Q@Dj3tPtGt3A9FJRvwo6n
zgrlF@^bdM9Al1FDlkasqx22cDlJTJfdu_c`qjBt}TKuP$>HR)Nj4+Tb@0wU=P5~{)
zFD5Yw9P25?#<5GAaNu;M<)bw%2)c@k7p;G|MJ9jZYNsdITSL*UQ)mo;7bNbOb<HKu
zNc3*HB}%9A`KToQ_@y$E&7sB`y~f7dTLP3z-=CKAk^P`(8N;Ib`H74B(nJPadVnaY
zOmSmTEBecA5arO{+!KZjbh#NoX<9Al)x7X((|QOP@U@ZW9_u{kvFi!LCPneuLk-w-
zP%{h-0$YfJ*?G6UP~){NpsB}pS3cBe(<1idN7jLV)O6w4$Lps$hiqQLc$qUZ{@R&V
z<rjZeAdEM>FdjBr_&vN$2M?q<Ob^8L2BZ})+V))%ux~b2ZcT4qb=u%Kt(5zG_kfHz
zjCS(A&`=U<5Te%EENGHuxiYD=<Pt55yBc_waHWVL(9z|7mdvkUYo2`qVfNz>t+HsC
zYBRyRCM7{)mO^nAof<0--Bl7EVY=jp?f9FR?_VsQ{0b*4gDkIrgK}8y0ylyc;%Ld=
z;tMgW3uw>4cpLd`!Y>|>tlwSPrmUq?3!lJ(?3I}34FAqd;1|NI3~+kZetwxgk6+1Q
z!tb$g@L5^xX}k70TALpEK|xoc3`(TYUt9fSX2{#cYG0{14hp1k(pGtbbRTq01+H(>
zQxP$KXDKVL8Sk=S0`YUEh7b6)Ac@jx5ZY1eE6A8CljB;}PN+c@o(?6lVL6R$G-rjz
z;f=WGvMVUNzFk>CQaC{BNThVaD9u=fw?)21fZj<YV3do|%BmVf0u{H3QjFbl;s<|3
zq3_l4XTaoA9^w2J*?~4N#pR#*m;LEqXwG<^B=I;-!t!TiG-RWkZ13X=+;2L^;EVp8
zrCa8<DUwgyarHtCv5VewYpg;&DTEr9bwy;0I!$w_MOq_2`fH2x6aM=pg7*=$Z@udc
z2rW)s1v(0xQzY^ckehL!D7KbBm<!|*zR6%@4@brQ_6X=jDPWK+%5S_GixuLIJ1!V|
znz;93dO0h}*iOZZ0WN8MFpPY2aI!Em5{|sSmrJ?i%#CT27Ws*@UOV8C@dx`Syw{4!
zG}~h=!33%aHs|Kw<aCik?J0+NRZOMyL=aGanAHl<BRg25sk=OLj4(@WrhEg0!2$DY
zpZ33UF;5M*UfylYp<;)9Ck%OU0!w8pr)<I~bzq(%qVzvMvA=dZHO3P=R6tLuupS)g
z5j?+dVD2ebjDTMgsaWj#f=jH_oJ(=}mG?@6bP2tM9hh@CQ;?P_qjwfK3ioIRK+_I9
zfc30qXNJ4tI((J)bSY*sWup1}s3oG{t;&2m=~Ea2@xAHPo*gM77|Zo7AQswCxt@A1
zYy=r;(TZlBO@#B*N!kitkx=4A$F12*mWyEg5q1-HKJz?NG?2=$<{q07?1P)wO?h+M
z>%8Wc9=l(o>l77zH|#adBcs2&&kOwV-ndHON|o9^Cu7?aZ99-z8%cTA_;mA?48ov;
zGyIIJd_P5Z3H-!ynR4#J&5KdGPE{Mk#0L75th2mQi?`WaoTlSjfS?3+A-v7M0%1U$
z^*!KSw!Ck`U6Z)1kjL-W+D&lZ>#wotOjm{bWJIt?y^74e#<G(nBdI(h?rK_<?Llw4
zjaP<1qHdI)6&bLSCEMG-Vn1!hk=F->l2Fk_Bn}yw>w3pXueC8UE8!J0wy4n&Gc(`-
z+&d5P*3VcW-qnUH?dc&5$oK3z*~dX%Ld0GPIwvo%V`Pw7HpD)=ThcEE1cKM2MMhT+
zFY<#KU+|%2IT>xhgu%g0Y?OQ>rx~L4!LXyi;OES0slENT`W5(gk^3h+hF-GoP9OE@
zwTZ8%REH3dWJXtSu|Qc@r2&St#^#CLx{#hdY=(VOBi!MUF?Acbq`lfszl^j;(6pP~
z&*%<PP_8o&@#6nI$5yfJScFbCc+*SDA7ZGDz$Bxz%S@d&U=o|PZtQ0h78w=ojtAaU
zpiq<hPGyn0*Rx5D!C?;M^7JJw>OXCI#S)O%4z$}ZTSZIRrAi=RQlVxy4D{*lJ6tL=
z0}!#WPe_58d(XB6wE$jW0t~*T%>w5Lg=kzidBovpiWSs_w4EYRogev(w+Mq!q65|g
zXRK9<;^rICSSC%-uW^HHa#*GR0bPywVfJ$E^6ozdY5yWqfo$RD8)VZYT`oRlJ-xxs
zk5%NY3Z&1C7iCsbR*$8F>{u+u2x_!izw(nDgU0yt`BOG|^s`zVMN%uSUDET?ARx>q
zIm7{ZTUdQCh3i7dH3FoS?Cn38^gbQDVTZwHA&DJLCmryR%4w_T*GQ|jeC@vlD+>Rk
z*!5Gz${JU(oMnv&enzI>VzASteX+{irt8-dyAIm5qS}yf9!j3u0y_(kHfYRJ!}nnJ
zJJ`4Q1Sln%6yyKzH=i*ma<6Z@JO#RK?Ry%+W81t#6zIwkul$L3&?^PLPivA#sdAVL
zB+z%+S$4JzP(~|X)p5c_i2Pde7mQ$yK8~C;p~22)t{;%|$djzr9kJ134}Gw*Q$&%1
zvx*iucbC1x+zjRrvUWEpJaP@6`>@^k&=2%*J)v~UN8=eA%zv8P@BQ^n`n#z?Q6&c6
z%F(m_hk{l?%b_wb9Z*Edd+&<fpRr-ceP@F?2FngOe&=%wm0C2wEV|^Z^?>>zA*m*-
znsjae@9-U1o}+Dp#ojQl=1-Hq0iP9Z)na)CS`J&<kd^h}{t|oA85)beg$07%VVBgL
z=GWxJgzxLkBHIAVPoWU97RJSEeWWtyuYh2Po;-f?F=i*4RR5&w{H8+dA6!R)?jc8o
zMuo9y#CiSkg&<|3M4ky%!d83uq5-JAbs?wl(QunG9$FN&!7;g*3i>6NynQm0`bWcg
z7z-21h$g<U2{&i4k(sApX|h||D5A6Z+r-0Gn9`}ze}!Wya0{j|c9eaaS4Xjl3|-A@
z@yO{&)!pwtD*_=@?dShok|qHx?)iisl6qJ5e#KtfT?Y*!a4`I35n^vily%_O0*)`M
z%(#XZN>>Jisl42kJOhu>00(f?M;w+@!Jwe+yqDD&u@Er9TKpLA{#BkG&s4-)9s==p
zu%-t0+3-lRA(lDjVbQ4Yrw_&0uk>&1SyB~?+^b7z@SK218_yDitT-r5J0d6xTVa^f
za+L5ZGe`Z0K_HLB2Uo!yZHv5*UpJ#4O|Juk;*^<TLTCXn)cbTPl|@iuA$n?ijQl^s
z6k@NM+kAyr5cjRkmE{LBbr#e-Sz=uf#ow^LNI<{ucFcI8D;A-dHm-LwQtRqkWr6$>
z6a<vjZ!FCOJ5iZ6XcrQ&z*7G0QoEjg2}G$^4}q9l#P=}`I<IR#uSx#o#<SRrV8087
zXt=N)ts7nuXD@nN>T8%cS(O&5y3i&TlIr!;M46>Mx=<$FFGNBpYLwxo;<?sP4_RK5
z6pz=nAVtOtJpGS!zs%TWufHG*x-YvBeK#lX`gz7IWx_17z+|B-!qY$sU@Zrn@j%rk
zpHH7u)6?rrxwMSrns5O`kbKyX=fHYpW*SRFTeWb0lt&O5)BZA3$7#U`_#5~}qF0|<
z56L=s0r{TUM~36Nkp~L|+kcJ*@6tF-y^6!a<7|C#K+0iTgk!;z#d3;RIk(`bDj777
zben}T3emNB-pU-6=0;ldtci@?*yxk=@FkaB8bvT`hI_<&r)%vQjQ0N%1I0JXG^<#>
z$il!8o@e5>swiqOJaS!}{!~En%*k@2MyM+UO)y;bXuOg@&RZ4^aQAY5nUg;=kfD#_
zQ=PDZo@p1Hf}OI2A*VzIIP6c@RCUdyjW-0BxjmpwM_O#{c)G}5{g$wJx7A~9TP7v^
z1TeiIQJxa;N!aC!+T53=VCN$3_Rh+sR6XC_6d098r&@b6I7~j0^xb3={2X*obXezl
zm2AI~4U3sDJ)(Melk-BeF+roRqgQkajRJr=Hy#5j&^|oaq3=$<q3qR%ObD|Vm_H|<
zqk2%l$T2|VTm)gRm}qEX0M?rGY1n5z5GWJ7<~X(BTj>5M>UphR0BhNE-C^^)Ywplt
zgt3F#A3{bntDKGs7$m|zd<dVD^fW2*cchhjxLq5af8kuvr%^kV<F$TG+CN0*%}Hv~
zymk52P{90C2X>AjHlR(FVG6LxyO@b9i4}Q>WsU%Nrm*V%`_x%S+OS_ETb=tzDEX-s
zV?9jV56wsK-y<~l*e5%caBB%{S&=6!&YQVX9OZ@6sfq`cVBM5;DS`GBm)n1TkE-$|
zR)!-^O1(dN;u%qkrBfgVj-j_z!?;IiA+z0n4RGoQiiKLhDzv?le0<Gdlg{KgaR4(6
z-A%z;<hT8efPO|tf6Z?*Noh+FLnU7v$D$?0Tr}{`NkKh)-ED(U(hPAT*P%ElI1rGJ
zz!Su}^=R;yW}+V6cGIc97k0e1LkvY%<BhG!axt&*+p`A15poms9T>JC_1v}7^}!VS
zWAU@8<MXxV3eGX3)^Ek==)u9FZRIJCKH8XHpEOP!hVg4{FQU~GiXzmeB-Qqdp`-Ny
zU32Le?}YAk^Cw1cT38<awXFn%FRd<+uy<4xz7{OH;&U<&T;HL7&Xenebkd8P>~qsx
zSETE2jR49XT?{t4Nd_g7yTsHssp)vAD3}h~vlcwAioXHa_q^L|e^_!!NV_>nWD(wn
zg$3%qWv)~&*e%W%4mqkS&WJ%+$w;$R%e&`e>;kIjJjGCI5p4$&T}H;sjlKr6B~7$D
zqw-FmtEUZhFQDc+T@6or`7^Wg_NG<6T|?Pg&fWOsnBc~S_=r<YN;W<KV*eic07EF-
zzd3#&5F#9t8MulM#GXa@)xm7+dmrzzU9aAGw(IPc6gG|IG<$H#>L=Y$E3uTm_m6IY
zApnrqq+t5iQ!qeqMPl?yNq1CoZN7Cm+mIU4@|u*h(udoMds494@!+HNBm;`H8RHqN
z_i)OUcs!HCW|(_l7%a_V8JX}h_rm|462|iL&F%E^Lj6G3G~;R;;-OM|9-wl$iN}lq
zSn~FVSsQjO8HiUi*dD44vF|!<kR^>)xa=a$!6~FjB{tZ%Nbj$K1UN^S_C*p{tA&3q
zGf{!4)>9U_g<%L+zVA_$YB>A=-8)EXl}fv570Vhkto04K?nOsRRh?x0n6#{=7gy#+
z>QZ0!O_`O?55~^lfUrhmmhc(`Y*#D3ol^09K%k!OB<QK9JP_*=*ypEvPk-oOmpw;f
zH(+J%8|){tm_`Sd2jmW@2aS339d@7QgMYs0oD5@5)?}U)-F91|HR(4{qbSlERlKL}
zOOFj#=7#X`?=JMFmNp%$O>Gmr64S%ulfY)$`$jUr7|%KU=zMHw5Y!Gc`#nxJz=PYR
zU697&PDq=wd)=Cj>TQ*NQuqMErVqqeWG#w4;jZnS7Sn@_dswkS6HocKm8g#;6hD~L
zU6(^MOc9D_cm2ic$|*>_ic=;Js+OL2B-FCxL-?PVjz`NSQ}j(Rz?1-KL0o4=#K0Qm
zAQ?&2Zv5*e!rBnt^2n&%Z(ZOPt}!a*E^}a_x<?^Af@Q(tw|7#HM7fb=q1Rzb9y|Dw
zDjpT_!k{7Ox9unhaVLJyu%6PxYla!**eN?H$|Q-KIwjd5#0kKHo~X{X-uY$vPjU6I
zzJ{u^Qp#MRwNtY)X8IKnB`auS@oGa!H6?QB2?|gMDV=+WIMxPAW1iM)LvC-XI_=(Q
zjL?}Co&D5Z>XpHa>(_5>J|?h_Ndn6A_Tt2YfS0A<dyQ_aeW_r##o$@Ut*drC*G+S-
zVPnq8g%;B{<?L)iExv9`&54Sw!T{m+JV}M?^O6@)HsDOj^QNLTqw4WTv}*BR_*0j|
zYD*z5Nsd>m>c9>klV`_YeNzCE^`?(IK)un0tyg~p1g5HH)oOzpzWj$z6Y<6KVN@vR
zhcOQeElq%PMP%p%(k+VDQH1f6w_`P0+^0YVXA7dqr~!j*0Y0%-+Z*Y0w&l{#I{P>f
z9N~*RTT1BAt0E|A?RZHZjJWo)&Suo&=NJ6z-{v758y1sN)12Xo!QhJQWelm+JzUo(
z+Pv<|ek`o+biq|)t~bj^OZ0*X#m4|7&3-tV&s@?>B(*15jxq~vpR(L=J5qbpJL}rD
zlxNqUP=3gBD5kQV2o0*kT=2v8rovK(QFmx(g!mLsZW@2d91{$fc0~b&W(p!~B|yr;
zm8Utl@Gt=JaHlMF<!;i<h`2Pb^8@g4o=u2!z!4tMD|86L7IQ>){N(`XW*Tdq`vkL}
z&@S-T7q7i-sGLU<CDtO!&@I*<I%ZW193!<2h0<4{1>kVmGiqG79m(d!bm2;-eqfXi
zrDEj}dCEr6xOA`>C&zZi<t4ogeXW-D!*@D`LYWiz!0fgSF@UKsZiA>fmjR7D6CPrV
z7YQvSLMx2d*LTV0-PG9&dj3%|t#gqiCU7%G3Dw(#u(hY?1;QD}T|Sk~7<ln;0gB{H
zS3ED5hQ}YZfC~eBO&Px=X>h3@-CehAeE#1NX*`f?WR?<PoC@r*$5NA#(RPrN<ehVL
zIAUxcBR3<Yh1Tw~k|E;)K}*0<lRop?G}{0~Shrjn;wJzqS)nPga<uk?((`)|V!k(L
zx%R$Gznt>!yuDIr5~k#M+-VLs;G*d5efhsH(sW#+e~6Pl8<l+=@McsUIImfZ!G1-h
zJAjoTa(QBi&x{wR2}Fu7*gbB^Nh0VRiJAPFf7#!E*Nk&z$%)Y5@VgI>;FC*|o?|z-
zlE>TI>Pgr|_t4Zk{vHimFCfr>I<lSuu<P=c$uz$R&6WNTWF}!H5*Po`Avo|7&{fQa
zhtn}S^TZkdT)hGMT8Hh@pQMt|j}>IdwWXRhqNS@FE~C~agE0Rc3-=t<f1<>Jwn(xa
z$2zG}*a;x09O5l!!3m99qSU#v2UlKJdK)i9dBHY@pnQ^c>=l$x$#1FYF~E!STG=)3
z(U^uQOSSU|EkbxZ{{0IMo{FM?e6V(z)+rLrR83O)n{NK8Xb;5`IGLHkz{pTfwjYyr
zTEGifdl_alB;vBd6_Y>8ZBi98f=DT`VS=S|IGi5pV&W5|<I)1tR_H@mC~fN+IiA>?
ztl7J3Q4{a5sdWqZW5Hs6BHvQ+^&4vsCUJuKtki;CGe~gbS^taiR?yAYRJVxhi2A1n
zJd-auu)F4xB?44iwv*Sq?qB;0X+YEHP;J%PCX2`f0IuEW>+md*GP@F8F~*#J%y!Bf
zhQ^(%mJZQx1kYV&f;|-Q2%72CFzEZXGQtwsKI^SiJ?7!065_1*m8((T1V8*cA4P7K
zFL811RW1e$G3oK6cDF#}8%1DC3#9XY7WFjP?F6%H8OpqbVWJkN6*T_pEQ#05CW4}$
z76WA+p1MW15@a|&nBymc5_Nf_)29(lxkCLifaBuBxuFTDhWQV?%({QX{U1Jn4|8C#
z<R!QsBL>f&0A$@Z-$*;4CNZzZnRarI8(65TShDMqVZ~_e{l!e&S0WeZ5W(>pd*Og(
z-k!vxu3Y;JeK?DJI{sRh3y_}sHu!L1ZcRt!SxrpS#(T0d*X94-m1Q;=?J0GkL-OjM
zU5*w`O}N@WlB*(U*Lg8~KtiM!JY8W8sZgOksXpCMtea^jq}?f8sSQMoP!gd@q-Rb2
z*kF)7bzE7)vTKmr3PnTc<w97Veqj0Qd&fs6Vl|%ddlos?l9PdmztBqIedaA7sP~Mv
zD{H{{d{t%1Np*QD7l|OCH3G44BR@;H<<;gY%X&OjtUyJ!mEGVYDpN^p72GU>B4i?S
zx?JrFjS~W9>n}b(I=$7fh<x%p(Jtec_oPx|to9;|(cr;m6PXLXnLoF+$6MO7ZYtZn
z8VG$$joDmaahD|-O%Dyfy!{UrtXw1{3<GsLzG_UoZ(HT#WLk6Y6gyHaog<zS1D?j}
z2aDx8qVVPCu5ojG%I(tizp$F}lCPkYAHp=c&&5J9aCCb<%pJAJ=*usi_G@%RM-a}C
z?)9y)Es2xdns@2|t5QMsP7nOew_hbL)1Q-e|A1WcS}dP&kd?yV0*sC7ntF&g)+y#a
zjq@BoC)x>-JU<(bNR#j#!JO8zyOp(z%W6Fc+dag8$YAz@dA*T`JO#;BNsfy`XD`tw
z2As@`$;(uP+Ww@kGr=e^^s3VMzOR|-zHq5dvg?&t8L?@8`c7Za{ke7nDcmC&pIZya
z+@$G6RZYy%AngqSTuFO{i0i)Kbqe`>u%$`Sdw%@m=AF|uyS3bRw2!|j22jBgndJ1L
z&8<p+y^P+cB!mV(aru?AwRorUc?jQh&=UY*DkPfD0!0H{eqL;FDsP1hViP{ot%C@>
zGRb^tOt9VD@9~?4YdZ3{H<QClO@atC^xQill4lf69^p&|ST?73wq3^+wQ`4!Hk&-r
zUk!}CKfXQ)+RdmKu(_wc-|%%9=ebU|oRq+HsRfW1$<)Rx;>rajHzhTCvfZwRhT&F`
z<(U3X?I-<&wby{Ol`EC;W-?3cUXv?_<$0kC1gJQms&zl|HqybsD8I>d;6^lQ-uJ!?
z(MTA$fq#PUm&utlDG_Bdk&(f<gDUUIqNoF(C_Hlp;(LgMvJ1s@fV}m~xp$VNFGx&j
z-ChQpGLmCi7bIv>yB+vm_Y&yCbGVp{IB~?EkqU=?^V<;ca89d%6jIFXfmHoY&0f-?
zBuZ--G~U!7Z;aAQn|rxOWSkT28e^{eskRm*<F^gphI~R||8pkvbqWbMeS-tZeSKE7
zX^W6xCD8XaW*6n_IYL04*N+|52%ted*~B%v520ya9AaxN8X0ZyeD|BM2mD_P!+Mh&
zl|7EEGGa*QnzR^oAEY4}L(5Q1?`qTRyob8ADr5LX-YseGD3+pmi4`&+0o<NOUVNu<
z??q~NV)~D(Q^o&x@tW6*ziahry+FSm{3sgTQ4ED+CtbC4B%a=8g{{kC8Fm>e))Ww6
z*u$2%JsRCPXlDSDVDCvZsb9-URgJ5az88WO*#qmS^DID4J7?`x3^<=PLCD-RA`^7x
z*K%R7P4T{SLI^kne;tC}1GeUwr0Ll-6&*4n$8xdvd4QmZfW%Rr(`Ch&5vW>ytb)9v
z$wI2y8zdrwyF$oR6ulIOEfDHn{Kf&<XWYTByWIQ*TVQ?mZY_^Dtkn@E1mXjOcic5N
zg8)QsDhM@Vxx}!RI6)6n@zi@i9~7zKqq745Vc9URnf#^^*?B6fm;-gFEg0b?%m8Q5
z6^mxBZ}Cc*H-r2jMr(^ny~oX5%d_5FD~q_?>1+%>GsiB~u&1jcf>I|&6s2YAwYkjp
zx?6oH1CUXie-}mh9S`-)Z^`W{d20uU;G;~EDUhVM`*oPqNHzu}UsdV~9#11m%ljX9
z`icZ~>I2tR3zLb=m9r}!x$~1PyI_Vm0JV~uC@PFn+w;FIt8b-$(N=i1fp~mEM>>j9
z=n<*hEWeVVQ6+#Yd%)4G9l4dE4-+>UHQG2qguo^el>j;Rmr0Lt1px*J#EyO~JTf_t
zKLX~l)jVxC@nwU?1Zv|44j9{9!-5_Y!-1aTc6if-%r|gi#a_`pWt5L?p&!%DwFS|_
zeAE@Xz{g6l25?jA0gG&Y^}f}<etj|_ZzD6DxUO@CY~cODzSwTih^ohejvLT}@EoPF
zG~OnVjZW0(h%wYc=S(SYgx&tuU$tXh7TyVmLLvuYu(){G++XIWy;{O)VJ{eZCiaB9
zn8Q6SMKr0+ZhMp-9!}5GPAaaz8B#t2M(?}|@~R)@ekHLl5&Aih>_ti!fQ|2{xQidt
z9!?b6f_{%hDq(xY)=wR|wTpIP;>8T3ax(TC13KTqN_Ma0b~$dd1%5cPoKv}<9Vs(L
z*7bi;9J`2j!b}lrPL}a&*dmsB=4@9dOQF0RTZ7H}GtJP7fKDXXX*-#oG~;+3Q-AjP
zzn6yN=7(<oMQ=dU0BuV`SLqofs}OW_Mi<X%0A(w0dZbgl#e$!$mxDt6SJCCdg)YNC
z)il{FO2i*YIw*d2Z}iya_Y^{AU?kdV&qX#$oS))@7A#q-fk{YeC(R;2Bq2>JB%bB<
zfZc{Kmr9);I=!L@wCZy(5nqqR<(E>SRfhfB-M{$MWYC123{*GYi;8hlsFJ{baEoS9
zom|Y~c9DW*i4+vWrzJ2Hx4C?<m!2!QJ-Lp&(wpcA6%lStGmmAje5N*yqQk0Mzs>BC
zJCp8A+wXVQ25a#fR|&{q|0aQ4#kND+&B==Fmb;GH{1&;#)cx76Jhz7DP*=lUo4TjQ
zv*>`Co1NVQUK04krI2Ey0@b-4mY5FJk*jy8kr9H@wCz_Nm%#j}OL@$`9aG`g#v(&-
z7|q9yQ>SOk2Qn}~zBx6YN%JR9r?$N+s*P*nP|T~Ia|d$WM&p+BgehL6HZT$<AClUc
zJ|(k%Jn5)T*Z{kV82I5^z(0=@Q>}YkF=ge*5_1Ibv=Sq*ARQG${~4IS(qF5i_fGy2
zdUoCf9+R)8&^Z$I(@!x~poAZ;uJU+8@Cr{8V&UD}b$|=`ddizf(+Y^VUP2a0Uh_m$
ztiII06$$&<zR%`u3rgNeZ%U_Ok#jmuSk<|_g~uSlKX59>5`1RG=}4S5dKW?5W4k#K
zCDh=249;om#R_?Y)p|V3w+lGUGykFiN~0S36aKVm%zL^&0jI2G=qb`H<VJ4$iI^E`
z!kyG6SMqNA*r>l0?J}ZFYd_ptfjXcxuE<B}47|~k3dI_!DP=XO=|yD}4y<&|3KtLR
zPwBx_b!OGf`QDP>k2LD|{LhIqDxG(FyPoIvyDujV@V2ZxRet^;AusNc@(IDguDf!W
z(d?LaIK~D5&3Tx=y^+J019mwljb0%pZBAhX5|#+Qr+(yWBN<a&3%bqTO(om*;-!Yu
zLQ>zc?RBfK9H?bgN3xvYwd{kw;V82{x0Zwj#J{%$TTfAtNqX*gL<Yh+Wb2K5ZE+m8
zg#*<y%C(I>Z-?zP`4mVq$2hqUCY?L<CcwhL5Ut0KaP5XRttG&A+(6#&vzDxspH0`D
z5|sX9^;>z~94gaUV_N%0QteP1;^HC3K)k(!92SQPb(L_{B2V0)11DAacZFulVqy9#
z3+d03Zy@@JL)vhxOr6YkHG|CJCpw$g%7i}j!K;&+Q!qbGn93vvcry2+nntvX>hNPD
z`z}{QTzzMtK&Aqq$nyG1;Cco2Czef`+1;h&qiy81H~m)~3$G0Nr0s<*x9Kd2LbS!I
zvf|k0pQ#@zhLg0TZj!W$3hHTIv+^)lQU_%6#g)EU5_Wcp?EESU8*{4tVq!d;?S2Ej
ziioT|W;zLT0meR!suRG?)=UQLWxI#6k^~-v-ydt^h;=EDNJR5Asc}%@le-VIjdWvU
z4H5bn-SCFN3vII!6Mr(9+@Hw<fy_{kR%`!9c|K(GA-A3TxDO-y@Gi}75>q-rS>R8T
zE({~y-F)}yXkskXb&Tk2HH5vafSX%@v^!g825u3Xb^HkegiO7n-d8itMrX{LA0n(Q
zYNjUn46_zriL`za#3tiV4AAK3n#1C8=>nZID`uMDSc_i7$|J@pU0|80{^d$Td538f
z#p@bxvLk+N@~E@oQPXlSJdvq{32Om-og+;d!Yf^s&RDpLZ}hV@6E*~?v%BDU7npf`
zptSgV!akC#+$8o3O9jLRXR;ZhkQ@Xr0no1nxN^z)gyJBQO8Mq)+FYk{C;Do>alB7&
zlP^bMy}vvl!#geQ(pDkH*$RA+Ma)$pD)ZJ*RyYiud)Ek{tc|Zix_}A`_#_X#qe_dR
z-TVuSGvc<!TWwk0$A-F$3C<UXBh*FPvMR*npgy58&PZJ_P|kV~&qL5QF}3w)!fkHi
zWLM4x12Gmd9dqEiD$OjB<>uo5S!CV-n6-bs%Kd#7>v7uqE=Kni>T+hJ;Z#feQo^58
zEU@V01x_4ey@1SJwE!>8hapy<vD})dMx1PS4@Vm|_9sP}brQU@<ylg{y#R5uoue&e
z{drcq$+6U-0xi$hZH%;VJHu4L9!BM3X?E@bPs8E&8#xH?HWC7Dv?=MmV{hlJ&A#bH
ziV>UHdNixG-N}-P0_FXj$dff)lRGC#U@~gk{0!&8f4jT5i)4fmX(Um`S&^Jx+BZr~
zSq%WtzA-x&J<ShrQW!ss#^5fg8}(Z8g)sxZOELjo%$;mJhc>}PUo1MDgo?$ddy#S_
zmv@L4j$&MS5WOu3VVt=rch}?i-36k9+E@bwa$(%8ii%GICa#oAXGFf-?(`0-tj7O)
zp8_{>*7Z7K?sI6HT3g>PEm+8}AG7UlM^d*quIhr*t@wu1G@&+PbhH8+O;1$oPgVS>
z_5z!x0Neg%4VM#pK~EtP1_&50TJ7G{;%_GTUNI@ge6y^a0^|KLaPO!jfr+ZRk+($P
zMsYubJ}jNOgj2HtN7o3m>CU)U#8uDqWitBuAKUb#^!LIkJ}AnhFQcFDrcVmHFr}eT
zj)j0@`~QbyXqAtpm8-2gEU<UCVwN^fY(Fa>fG<Ur!9AykDf3={{9VE`7n63vEO_vT
zRN>qo3TQ(2{6K3=X&kwNuy>#Vcv=s&P>|eoN%QfjeJl5<SjfUfl|O5QfZc{;1J{kc
zfvj(c1pahg_E4#KrlYC$XQ#-90KK_w2vP@wm7mwjLtPHuGrR(xRkXOm+@8Wz-Vr-c
zU<43jEc?-BgZDBTfCdns;O~4`jUP7MQ1L)i?gyf>Yy0{f54vWbB9-61?inW}uS(;W
zioLsEeRecrCc{juY)9Nv&v?=S*y$>H*{M_hu@DEpXo<ZS>4Xv5Ch)anZmlnQc4Nch
zcsK*d65k}rTWsma?|hJ=nt#Re^ma<dv6A+qn-?6oif8yiw(_<)yjgm&)W+swiz(_2
zBv`S}f|#z{l!J&QnQwV`1<<nM408?aQS!Xg8o}&xn2{Pe7*I?j=5i;z!(L@ucL3m0
z^h|c=&RJ{@d1I9?a&WU&!l%(gAVDK(wN50<cKSrK6H6}NX4Fd_t*fHHv0R!151v%3
z=N8<sB><?><(gM1^5l*6^MtD)44kB#-?hb)e~`uTS&UY^`v<8jpUCIvijdQZaK{F3
ztJC&Z$9i)JOU_d{3MPS0gzh?w@8x^rwo%U(%P4ZX*b}+mvAlkRI$9&es{1eb70Q>T
z=nR<)L_4TlF0*V^au)i&YM)9++(O#|0*1$Zda|Tje$nJ<$4@z%!b67`G#X*TthsxH
zw}`R(4f!9`v}LC|902{r3tWzUe#uq4uQn@FRB*W%+rKBq(@DjXLG!>QREV~PzCT=#
zuAL?yNJ}M$M9vNY1VE}-5tX&ZEWNa-E&j83C(?4IVs%K=I22)Zsv#&M=mt|(0_wWN
zUlgkI-TRcLTi?niUG$Yl`m)JPDWrCZ#7#(9W9sN1&qdl08S#4N_ju)OQuU6kZx>i6
z?z!=Er7>8IcmW1Q1V<lop`ANho~RjlZEPTZ4=&{-5gXBEKo^xsWvq{V5!Rz*m`0Iv
ztM&Qv54(M=**0FzCIWYVcjMnvZmi))?Jke)&ji%%hxHygm|0MhmL4%|v~n*H$Pijl
zDCJy7<kBJdY^Vb)*#4fKF9ViyuQHp~7RR0!Ch@`nVk86uOd*4|$)(k9uA8+|UjN?p
zCEXGWy%`|#q_B)L-lc+<tR3)|$}~{;gWCBw8?hPhhmNRL2{r!oEnLE@d8CTm!<oPh
ze|?kkw|9u5%}kSE@QdPCpaca4TZVXPX#UZg%I`~Vh(z*V#?7hsJktiQ2>>up8PUm=
z+M;g1=J6Y~#B(_FT!9n&`16T9uFWz1%Zr_v0wVA}0?(vfx)l1kntW+b#nv_2T?U54
z3k70Z?|IHuUOWdVokBbgDt7DH77fy$txBt&odE-%v#Hd}%>prUBv`}NX0suev`{dF
zbpo^h`ibwZjZY!HSnN%GxE58lUY5~i=-^*+nME^4o=p~mU;vz;#Uk%nR#;~`JKQS8
zeimWi577S>WbDd^ZMI=5UY0w^)nV~Nq5Jo%4wl!sLIYMA>92J{+Ug#;{LO%voxn}L
zcAD_kweC%0XyCE)6l9VCjwms-Nzc8PE*pj<5OC*9<vw(sTjQdDIw7`k&jG^=JoJgU
zJX=-9rkqssNxWd(fJ>@Ur7LtANuQtN^^+9KpFu|fSEia;Qo&T6DSK+kCE{i7?S+Hz
z;~kkaI;vUlyhbgr6i+KbsQmCq5%qjCYwg6Y!&lx%8l5y%wE;$EX?3**<eWK_NT2vy
zw@ES^%Gu-K9cl8AdK-(?^2)FgxnRs}DFx!TC%WeN$MG`NveMFX3XScr64O|Q0{GIi
zADOjwwb<7rIhczpnfS#P1Z%lN#yQ9Tfv6*eO~>g0!>avjr^nS^slew>$ngI=5DZ~?
zc7*c0+x<nhAu!BGQ!}SQsx6m4=)KPpLOR}=IQl=OpIz}B1Qwxqv<Yav`TDCEl3}Fa
z1pl<s{Vf{K@Ljgn0<kvHepqjt<Vy~X)COlNxEE9KOyMJT;C>C=sB4Vt6=F*_j-!os
zz38^7YPCG8Z{mpC8&Smgy1HrF*x;*Y{R`5ezZE^_$k#S%Y)Sz~XiXUiO6$`Eh872r
zsv-<M*47SV!Nhd}ihvPKA^p`IL25}MLPoTlE>YP(m8hMN<j5I@;TwN*auuUfw(&vZ
zE?G}fdB3S3_G(c-Mm+%`DW$rkM7wz|Kcum#n3u7!-HBhH!ZK4O_4cG1dKuDD@c{uG
zDxgr`NaS?IZ#<H9Ha4e}cAU|r{!^}qhUTiTJVa~^*=&oCQ`zyqb>!*9)%{Twvwfz!
zhQyESzN2k9odYN$jguHnyq=f;o1!kyDQz|F-vZ!lqg1e0xV~5DA0L)xl7AV<t8cEE
z$}VQWsZbi4bunFPnjnU@WE|Xv9#=nu3*ru7-i?raWY2uy7aS72{uEV;7apS<<DJ5^
zTG(#oOeGjNlKpG8Nyi@5`(y&MzutQ4T-XCqJ|$ot?7~<{>K(Vnxf4HMfHV5fNM&4S
zBr@RRj{?WOYA^;oL3?(A{}~ohYrS?~d%NXsFe?BO=B>0oYUdKje>Te9d9ot!>chqW
zq!Q_)J)t`--Ol>L<y0X)b_^m(2t9%vw3YQ{J%t~c*%l=xyRO-}xLi4@4*x}{79D#A
z6%HP;7vZgzJ&3WpcCNr$_<!55c#G{ymSC~a%i7P(8KL0#*OD|dmj&pQ_>v-S7LkR9
z=7LdnP6d&;MX5|HPKc`+eQJ87Ts>&x4v1~t=Fyg-C$qGc6~_D$87_hGMc^CEbMn+^
z6=s;t^;YLUVzSRX@b14qB!=MpNo=sUrn04{-%9*6zqvPdqBr?Eobq>dSIY+8*#`+|
zo{$qwc+-#`W60_f_UcTNnoza#zDS3srp*0hF>(LdBk|1@$fvw_#sXtiDr-#$$;~B%
za0CHC6^TsNs+^oLxT%#%<Fn28i{&H(X@Wh~>2(^xl+k615pxllt7s`OW}h`@q?|8`
zFC>aO+*@{kJ{d1mZ6Jo^Uy@;LNWUa@#e30-2~$X59c2vFlWxcU|0|1_%5!tvjLkj@
zpx(LL;H3FA-y}fhP}IK_p!&S_{(xa(*=uNuo8oftE4up)?gpi>E&M={2tnhCxC{7O
zS@q96rRxKJbx`qzyxVYHxFyxGFC657aSB}Lw#t~=9HQ*Ioz~$oS+rydyJUGmDaZV*
z`5wwjGCXa(OSUk)zEt)Qm=_9p#SSeQbc(bedz9!FJkBSkejTBcFfK?C$`mj+{Xe2t
z0OUwgjgB}USTco&0%SFu>7%p!eI7M3&{i+7Wt}G;AczpHa;^nTCcl#^sj2#U9CM@L
ztWYwapovp~-cRA8+8@yN7WFpRhJb=OtIP6lUa|sazlF<@13-n)4iGQs1MG>EKRF2s
zHw+@CR&lBl`p<^qSPZH6)EiyX#m4o_6#R!_lS%R97g`M1uzMZhRggiaW|K79*Wgt-
zV@=3Jeg=uk18Ep$`1-x}?HN<oT*D9?anJ6GFO0g*C4%@|f>>;^W;uiS&c8m{%#%-g
zn3}<7_xB8I*ciO>0K$S=-k#X7<0!)=YTcYMY`^Mn4<MN@jNveAo!EMi2>T%Sf5v&?
zCZwVcZlOf}?}$Y^6JI!M|M|4YdHEaYo+{GGgV+&sv9xsf!J2nnxeQ@73z^l(b3Tlk
zDY&(|7MG~SK|%NI5*YSgZ#gtCM;H>0^yN3*2Z8O@jybq^l*W$>bow_pk18apW#-|#
z6*B;qkPOD){0l7fm94RB*Xrve143JBT%}|NVi)T9XM1PBjQYKsXx-f=6-FD)yDFl>
zLg~2x9v8;!5v$)pPz|ODZ<h_(#zZI#qub=4hnlc9rGX>@Dm8lrLxcZb@DvTonP>Nc
zNa>vD`8bkzv`y&c;Oz=-WJa_KL2gF-T?Hs>iI~<K!0~616-NnH#MrB_J<4IiFqbZn
z*(=Z~yoM-)huLOWu=E_vabmqi*ydY;%36u*25}8$FDrihO1J)8oVpGoP^T81<D%IA
zgX0dU%k-z<g^-=?!vB+6;e8!`d%mi1LuQ@5sIhDNl2Lwt2Zgp#7~`XcccJn-UjUc5
z0@F1pBxm#@*?-q=v6k(&z1N^EKD^wzi{7<7BW4(vfIqJ)tbQ5jMI~Bqd2sbg=q}XQ
z^JDbnPp;{@G`VO~YA;=(hm%wut&ighaLOCTLG<I|AMU63$@|N$r7Re0zFye_*i$Wq
zMlAhA=Qri-0i1V<P4dRGh~!_+07xmvKCuWc`J&_>Y)?4y|8oci!qFKzJ$)s`l~jMs
zSJXQqvvMny%-?#g@!$W|Xe7VYvJy}uRaJ`;JyguX%W(o@z+ylFQD6CoAf{x1CB+T4
zP4q*QZYZX^>H$J1KNpoh?c`<9(O1uf#cmgijDX5~<-$EIP&Xw<ZL&_k!-*b>>8zQ&
zGMJSF-S8T2jkJ8Zj$#iyt4fjg0KD5|gR~~Z)y&US60#{L0SMR6Dbw;jc#MToP513K
zNJRt6K+XYp^T4n+vZ<ett9mFPJ2mmHT_3n&quZE-X_9~)CxmZ*iYgEt_po>B=OlO4
zsPkTbym3`|e{IQhe8%5C-8CVQ#9nh)MgfB9`*@!ZXPlC?3$=Y0D>G-he@!3B4qoyk
zt40qOL`-Y$T+`vOgM?u^b$LTPrLIszW;zH0u{CXx;tgdf+x%a@+%3u(BX@kf#Wz?D
zFKOD|^z{t|zqYGeGqn89abHf&<efdPgdl>P?6;PwDK)lWRDAYb#^5EfPD0G#>&X+i
zc=jFCC<bPf-Ai4>_SfFIop2W>MsuFKf2zA!b)I_5<^6x_yy0Q%;iTS`aIpB`Mm~)-
z)1Jqb8ARS@cm*8*;({#D6HFC!=7qR3L*tKmbz~f)JLxh}<2w;YcFL3Kn+6<p{s=OV
zDzmTUf+bN#n3+vf`4w&8uB3<}jH?Z*UaKGvn<tir5g!YCArB@+Q8ZQn&Lsc<$k;$p
z7dltLqCjuXzO+4vP9y6QuA$V$s>!isdsG=Pi6NU{h5t(2srI)MQ{QUBWmuaS^wRDU
zt{CrhhD0vRjI4MMvQ)r!TLf-_HKZ^4y%7_G=lAd_T`5<*#NzRuB^RuZbS+apaxZu1
zLE$)=yqOB~I#7L6WIQ~QOEATze{9_{5&fJTfSBf@<6^PwQWSyWjU2Z4MbUsI%RyFk
zsH`hWlhCUJ#pw{A<s!@3s$)#DHi|01(DO-DQ=Ax@5B27eTuQ;8%TEI8`g+ihqOD_k
zRx&keNZn)y*GYgMrA`(i5V2}0op1}s23El^nIr}F&qH>N%zBLP_E4C>lSNYhKz_Mi
zsOg9k8)W`7buFW6G7@4~!Fky2W$)OelZ)vfH_B3xw&_ca@B=@zpB!boSs2@#!aR>z
z=(yrX@BTKc%pUE?i=0ZX9R1GxD2Rk&{TD>E%NW^l18>_JBz*pB1>Ci4JwsPZ=7Ug<
z>jOzS&M~cXDteOQxjJd~=Xqx#GFdkNCxOp-`1xrLDTB1jX%iQZ9B(4Ge86-(s~?A8
wQyw@6&Sx?9wX0b~8n!F`<^k0a-Z^2e)N4;mQEcBYeys1?$+wID|G@Ox0P1N15&!@I

literal 0
HcmV?d00001

diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..417711f
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2018, FB Pro GmbH
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/Samples/Google Chrome_20220902_134320.html b/Samples/Google Chrome_20220902_134320.html
new file mode 100644
index 0000000..175aab3
--- /dev/null
+++ b/Samples/Google Chrome_20220902_134320.html	
@@ -0,0 +1,15 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Google Chrome Audit Report [09/02/2022 13:43:23]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	margin-left: 8%;	margin-right: 8%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;	background-color: lightgray;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 50%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}#navigationButtons{	margin-top: 15px;	display: grid;	grid-template-rows: 50px;	grid-template-columns: repeat(4,160px);}button{	margin-left: 10px;	border-radius: 8px;	font-weight: bold;}#riskScore{	font-family: Arial, sans-serif;	text-align: center;}#riskMatrixContainer{	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	left: 10%;	float: left;	margin-top: 50px;}#riskMatrixContainer div{	border: 1px solid black;}#severity{	grid-column-start: 1;	grid-column-end: 2;	grid-row-start: 1;	grid-row-end: 6;	position: relative;}#quantity{	grid-column-start: 2;	grid-column-end: 7;	grid-row-start: 6;	grid-row-end: 7;	position: relative;}#severityArea{	text-align: center;	position: absolute;	margin: 0;	top:50%;	left: 20%;}#quantityArea{    text-align: center;    position: absolute;    margin: 0;    top: 35%;    left: 40%;}#severityCritical{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 1;	grid-row-end: 2;	padding-top: 20px;}#severityHigh{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 2;	grid-row-end: 3;	padding-top: 20px;}#severityMedium{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 3;	grid-row-end: 4;	padding-top: 20px;}#severityLow{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 4;	grid-row-end: 5;	padding-top: 20px;}#quantityCritical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityHigh{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityMedium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityLow{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#riskMatrixContainer:nth-child(10){	position: relative;}#riskMatrixSummary:nth-child(10){	position: relative;}/* Color for each Risk */#medium_medium, #medium_low, #low_medium{	background-color: #ffc000;}#high_low, #high_medium, #high_high, #medium_high, #low_high{	background-color: red;}#critical_low, #critical_medium, #critical_high, #critical_critical, #high_critical, #medium_critical, #low_critical{	background-color: purple;}/* Low Risk */#low_low{	background-color: #548dd6;	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 4;	grid-row-end: 5;}/* Medium Risk */#medium_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 3;	grid-row-end: 4;}#medium_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 3;	grid-row-end: 4;}#low_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 4;	grid-row-end: 5;}/* High Risk*/#high_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 2;	grid-row-end: 3;}#high_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 2;	grid-row-end: 3;}#high_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 2;	grid-row-end: 3;}#medium_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 3;	grid-row-end: 4;}#low_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 4;	grid-row-end: 5;}/* Critical Risk */#critical_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 1;	grid-row-end: 2;}#critical_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 1;	grid-row-end: 2;}#critical_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 1;	grid-row-end: 2;}#critical_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 1;	grid-row-end: 2;}#high_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 2;	grid-row-end: 3;}#medium_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 3;	grid-row-end: 4;}#low_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 4;	grid-row-end: 5;}#severityDetails{	margin-left: 8%;    margin-top: 30px;    border: 1px solid #d2d2d2;    margin-right: 8%;    float: right;	margin-bottom: 40px;}#severityDetails td{	border: 1px solid #d2d2d2;}#calculationTables{	float: right;    position: relative;}.calculationTablesText{	text-align: left;	font-family: Arial, sans-serif;}#riskScore th{	background-color: lightgray;}#riskScore tr:nth-child(2n) td{	background-color: #efefef;}#summaryTable{	float: left;}#riskMatrixSummary{	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	right: 10%;	float:right;}#riskMatrixSummary div{	border: 1px solid black;}#riskMatrixSummaryArea{	float: right;	text-align: center;	margin-right: 10%;}#systemData{	float: left;    text-align: left;}#dotRiskScoreTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#dotSummaryTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#quantityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}#severityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}.severityResultFalse{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #cc0000; }.severityResultTrue{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #33cca6;}.severityResultNone, .severityResultError{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.severityResultWarning{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	background-color: #ff9933;	color: #000;}.tabContent#riskScore{	text-align: left;}#severityCompliance{	margin-top: 25%;	clear: both;}#complianceStatusFalse{	padding: 5px 10px;    border-radius: 8px;	background-color: #cc0000;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#complianceStatusTrue{	padding: 5px 10px;    border-radius: 8px;	background-color: #33cca6;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#referencesContainer{	display: grid;	grid-template-rows: 400px;    grid-template-columns: repeat(2, 500px);}#referencesContainer div{	text-align: center;	margin-left: auto;	margin-right: auto;}#settingsOverview section{	margin-left: 5%;	margin-right: 5%;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(307.584deg); transform: rotate(307.584deg);}.donut-chart.chart .chart-center span:after {content: "85.44 %";}</style><script >"use strict";let AmountOfNonCompliantRules;let AmountOfCompliantRules;let TotalAmountOfRules;let QuantityCompliance;let TotalAmountOfSeverityRules;let AmountOfFailedSeverityRules;let SeverityCompliance;function startConditions(){    /* Default-Value: Display summary always at the beginning */    document.getElementById("summary").style.display = "block";        /* Default-Value: Disable all other tabs at the beginning */    document.getElementById("riskScore").style.display = "none";    document.getElementById("references").style.display = "none";    document.getElementById("settingsOverview").style.display = "none";    document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';    document.getElementById("riskScoreBtn").style.backgroundColor= 'transparent';    document.getElementById("referenceBtn").style.backgroundColor= 'transparent';    document.getElementById("settingsOverviewBtn").style.backgroundColor= 'transparent';    /* Initialize necessary variables */    AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent;    document.getElementById("AmountOfNonCompliantRules").hidden = true;    AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent;    document.getElementById("AmountOfCompliantRules").hidden = true;    TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent;    document.getElementById("TotalAmountOfRules").hidden = true;    QuantityCompliance = document.getElementById("QuantityCompliance").textContent;    document.getElementById("QuantityCompliance").hidden = true;    TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent;    document.getElementById("TotalAmountOfSeverityRules").hidden = true;    AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent;    document.getElementById("AmountOfFailedSeverityRules").hidden = true;    calcDotPosition();    let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse");    severityComplianceCollapseBtn.addEventListener("click", ()=>{        if(document.getElementById("severityDetails").style.display == "none"){            document.getElementById("severityDetails").style.display = "block";        }        else{            document.getElementById("severityDetails").style.display = "none";        }    })}function clickButton(value){    let buttonNumber = parseInt(value);    /* Disable all content */    let tabContents = document.getElementsByClassName('tabContent');    for(let i = 0; i < tabContents.length; i++){        tabContents.item(i).style.display = "none";    }    /* Disable all buttons */    let buttons = document.getElementsByClassName('navButton');    for(let i = 0; i < buttons.length; i++){        buttons.item(i).style.backgroundColor= 'transparent';    }    /* Re-Enable fitting content / button */    switch(buttonNumber){        case 1:            document.getElementById("summary").style.display = "block";            document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';        break;        case 2:            document.getElementById("riskScore").style.display = "block";            document.getElementById("riskScoreBtn").style.backgroundColor= '#ff9933';            calcDotPosition();        break;        case 3:            document.getElementById("references").style.display = "block";            document.getElementById("referenceBtn").style.backgroundColor= '#ff9933';        break;        case 4:            document.getElementById("settingsOverview").style.display = "block";            document.getElementById("settingsOverviewBtn").style.backgroundColor= '#ff9933';        break;    }}/* Calculate the position of the dot inside the risk matrix; Will be calleed, after the user has clicked on Risk Score Button*/function calcDotPosition(){    let dotRiskScoreTab = document.getElementById("dotRiskScoreTab");    let dotSummaryTab = document.getElementById("dotSummaryTab");    QuantityCompliance = parseFloat(QuantityCompliance);    let complianceValueQuantity = 0;    let complianceValueSeverity = 0;    /*low quantity compliance*/    if(85 < QuantityCompliance){        dotRiskScoreTab.style.gridColumnStart = 3;        dotSummaryTab.style.gridColumnStart = 3;        complianceValueQuantity = 1;    }    /*medium quantity compliance*/    else if(70 < QuantityCompliance && QuantityCompliance < 85){        dotRiskScoreTab.style.gridColumnStart = 4;        dotSummaryTab.style.gridColumnStart = 4;        complianceValueQuantity = 2;    }    /*high quantity compliance*/    else if(55 < QuantityCompliance && QuantityCompliance < 70){        dotRiskScoreTab.style.gridColumnStart = 5;        dotSummaryTab.style.gridColumnStart = 5;        complianceValueQuantity = 3;    }    /*critical quantity compliance*/    else{        dotRiskScoreTab.style.gridColumnStart = 6;        dotSummaryTab.style.gridColumnStart = 6;        complianceValueQuantity = 4;    }    SeverityCompliance = parseInt(AmountOfFailedSeverityRules);    /*low severity compliance*/    if(SeverityCompliance == 0){        dotRiskScoreTab.style.gridRowStart = 4;        dotSummaryTab.style.gridRowStart = 4;        complianceValueSeverity = 1;        document.getElementById("complianceStatus").id = 'complianceStatusTrue';    }    /*critical severity compliance*/    else{        dotRiskScoreTab.style.gridRowStart = 1;        dotSummaryTab.style.gridRowStart = 1;        complianceValueSeverity = 4;        document.getElementById("complianceStatus").id = 'complianceStatusFalse';    }    let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity);        let summary = "Current Risk Score on tested System: ";    let riskResult = document.createElement("p");    riskResult.style.display = "contents";    if(totalComplianceValue == 1){        riskResult.innerText = "Low";        riskResult.style.backgroundColor = "#548dd6";    }    else if(totalComplianceValue == 2){        riskResult.innerText = "Medium";        riskResult.style.backgroundColor = "#ffc000";    }    else if(totalComplianceValue == 3){        riskResult.innerText = "High";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "#cc0000";    }    else{        riskResult.innerText = "Critical";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "purple";    }    riskResult.style.display = "inline";    riskResult.style.padding = "5px 10px";    riskResult.style.borderRadius = "8px";    riskResult.style.fontWeight = "bold";    riskResult.style.margin = "auto";    let copyRiskResult = riskResult.cloneNode();    copyRiskResult.innerText  = riskResult.innerText;    document.getElementById("CurrentRiskScore").textContent = summary;    document.getElementById("CurrentRiskScore").appendChild(riskResult);    document.getElementById("CurrentRiskScoreRS").textContent = summary;    document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);}</script></head><body onload="startConditions()"><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Google Chrome Audit Report</h1></div><div class="main content"><div class="host-information"><div id="navigationButtons"><button onclick="clickButton('1')" class="navButton" type="button" id="summaryBtn">Benchmark Compliance</button><button onclick="clickButton('4')" class="navButton" type="button" id="settingsOverviewBtn">Settings Overview</button><button onclick="clickButton('3')" class="navButton" type="button" id="referenceBtn">About Us</button></div><div class="tabContent" id="settingsOverview"><h1 id="toc">Settings Overview</h1><h2 >Table Of Content</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#CIS-Recommendations">CIS Recommendations</a><ul ><li ><a href="#CIS-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li><li ><a href="#DISA-Recommendations">DISA Recommendations</a><ul ><li ><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section ><h1 id="CIS-Recommendations"><span class="passed">CIS Recommendations</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all CIS recommendations</p><section ><h1 id="CIS-RecommendationsRegistry-Settings/Group-Policies"><span class="passed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.1</td><td >(L1) Ensure 'Enable curtaining of remote access hosts' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.2</td><td >(L1) Ensure 'Allow gnubby authentication for remote access hosts' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.3</td><td >(L1) Ensure 'Allow remote users to interact with elevated windows in remote assistance sessions' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2</td><td >(L1) Ensure 'Continue running background apps when Google Chrome is closed' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.3</td><td >(L1) Ensure 'Ask where to save each file before downloading' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.4</td><td >(L1) Ensure 'Disable saving browser history' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.5</td><td >(L1) Ensure 'Enable HTTP/0.9 support on non-default ports' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.6</td><td >(L1) Ensure 'Enable component updates in Google Chrome' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.7</td><td >(L1) Ensure 'Enable deprecated web platform features for a limited time' is set to 'Disabled'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.8</td><td >(L1) Ensure 'Enable third party software injection blocking' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.9</td><td >(L1) Ensure 'Extend Flash content setting to all content' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.10</td><td >(L1) Ensure 'Suppress the unsupported OS warning' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.11</td><td >(L1) Ensure 'Whether online OCSP/CRL checks are performed' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.12</td><td >(L1) Ensure 'Allow WebDriver to Override Incompatible Policies' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.13</td><td >(L1) Ensure 'Control SafeSites adult content filtering' is set to 'Enabled' with value 'Do not filter sites for adult content' specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.14</td><td >(L1) Ensure 'Origins or hostname patterns for which restrictions on insecure origins should not apply' is set to 'Disabled'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.15</td><td >(L1) Ensure 'Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities' is set to 'Disabled'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.16</td><td >(L1) Ensure 'Disable Certificate Transparency enforcement for a list of URLs' is set to 'Disabled'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.17</td><td >(L1) Ensure 'Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes' is set to 'Disabled'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.1</td><td >(L1) Ensure 'Default Flash Setting' is set to 'Enabled' (Click to Play)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2</td><td >(L2) Ensure 'Default notification setting' is set to 'Enabled' with 'Do not allow any site to show desktop notifications'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3</td><td >(L2) Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled' with 'Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.4</td><td >(L2) Ensure 'Control use of the WebUSB API' is set to 'Enabled' with 'Do not allow any site to request access to USB devices via the WebUSB API'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.5</td><td >(L1) Ensure 'Configure extension installation blacklist' is set to 'Enabled' ("*" for all extensions)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.6.1</td><td >(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the values 'extension' specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.6.2</td><td >(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the value 'hosted_app'specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.6.3</td><td >(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the value 'platform_app' specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.6.4</td><td >(L1) Ensure 'Configure allowed app/extension types' is set to 'Enabled' with the value 'theme'specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.7</td><td >(L2) Ensure 'Configure native messaging blacklist' is set to 'Enabled' ("*" for all messaging applications)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.8</td><td >(L1) Ensure 'Enable saving passwords to the password manager' is Configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.9</td><td >(L1) Ensure 'Supported authentication schemes' is set to 'Enabled' (ntlm, negotiate)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.10</td><td >(L1) Ensure 'Choose how to specify proxy server settings' is not set to 'Enabled' with 'Auto detect proxy settings'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.11</td><td >(L1) Ensure 'Allow running plugins that are outdated' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.12</td><td >(L1) Ensure 'Enable Google Cloud Print Proxy' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.13</td><td >(L1) Ensure 'Enable Site Isolation for every site' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.14</td><td >(L1) Ensure 'Allow download restrictions' is set to 'Enabled' with 'Block dangerous downloads' specified.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.15</td><td >(L1) Ensure 'Disable proceeding from the Safe Browsing warning page' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.16</td><td >(L1) Ensure 'Notify a user that a browser relaunch or device restart is recommended or required' is set to 'Enabled' with 'Show a recurring prompt to the user indication that a relaunch is required' specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.17</td><td >(L1) Ensure 'Set the time period for update notifications' is set to 'Enabled' with '86400000' (1 day) specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.18</td><td >(L2) Ensure 'Whether online OCSP/CRL checks are required for local trust anchors' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.19</td><td >(L1) Ensure 'Enable Chrome Cleanup on Windows' is Configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.20</td><td >(L2) Ensure 'Use built-in DNS client' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.21</td><td >(L1) Ensure 'Update policy override' is set to 'Enabled' with 'Always allow updates (recommended)' or 'Automatic silent updates' specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1</td><td >(L2) Ensure 'Default cookies setting' is set to 'Enabled' (Keep cookies for the duration of the session)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.2</td><td >(L1) Ensure 'Default geolocation setting' is set to 'Enabled' with 'Do not allow any site to track the users' physical location'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.3</td><td >(L1) Ensure 'Enable Google Cast' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.4</td><td >(L1) Ensure 'Block third party cookies' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.5</td><td >(L1) Ensure 'Enable reporting of usage and crash-related data' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.6</td><td >(L1) Ensure 'Control how Chrome Cleanup reports data to Google' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.7</td><td >(L1) Ensure 'Browser sign in settings' is set to 'Enabled' with 'Disabled browser sign-in' specified</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.8</td><td >(L1) Ensure 'Enable Translate' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.9</td><td >(L1) Ensure 'Enable network prediction' is set to 'Enabled' with 'Do not predict actions on any network connection' selected</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.10</td><td >(L1) Ensure 'Enable search suggestions' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.11</td><td >(L1) Ensure 'Enable or disable spell checking web service' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.12</td><td >(L1) Ensure 'Enable alternate error pages' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.13</td><td >(L1) Ensure 'Disable synchronization of data with Google' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.14</td><td >(L1) Ensure 'Enable Safe Browsing for trusted sources' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.15</td><td >(L1) Ensure 'Enable URL-keyed anonymized data collection' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.16</td><td >(L1) Ensure 'Enable deleting browser and download history' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.1</td><td >(L1) Ensure 'Enable firewall traversal from remote access host' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.2</td><td >(L1) Ensure 'Enable or disable PIN-less authentication for remote access hosts' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.3</td><td >(L1) Ensure 'Enable the use of relay servers by the remote access host' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.4</td><td >(L1) Ensure 'Configure the required domain names for remote access clients' is set to 'Enabled'  with a domain defined</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1</td><td >(L1) Ensure 'Enable submission of documents to Google Cloud print' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2</td><td >(L1) Ensure 'Import saved passwords from default browser on first run' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3</td><td >(L1) Ensure 'Enable AutoFill for credit cards' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.4</td><td >(L1) Ensure 'Enable AutoFill for addresses' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all DISA recommendations</p><section ><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >DTBC-0001</td><td >Firewall traversal from remote host must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0003</td><td >Sites ability for showing desktop notifications must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0004</td><td >Sites ability to show pop-ups must be disabled.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0002</td><td >Site tracking users location must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0005</td><td >Extensions installation must be blacklisted by default.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0006</td><td >Extensions that are approved for use must be whitelisted.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0009</td><td >Default search provider must be enabled.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0011</td><td >The Password Manager must be disabled.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0013</td><td >The running of outdated plugins must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0015</td><td >Third party cookies must be blocked.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0017</td><td >Background processing must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0019</td><td >3D Graphics APIs must be disabled. (Note: If 3D APIs are required by mission, this is not a finding.)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0020</td><td >Google Data Synchronization must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0021</td><td >The URL protocol schema javascript must be disabled.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0023</td><td >Cloud print sharing must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0025</td><td >Network prediction must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0026</td><td >Metrics reporting to Google must be disabled. (Note: This policy will only display in the chrome://policy tab on domain joined systems. On standalone systems, the policy will not display.)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0027</td><td >Search suggestions must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0029</td><td >Importing of saved passwords must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0030</td><td >Incognito mode must be disabled.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0037</td><td >Online revocation checks must be done.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0038</td><td >Safe Browsing must be enabled.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0039</td><td >Browser history must be saved.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0040</td><td >Default behavior must block webpages from automatically running plugins.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0051</td><td >URLs must be whitelisted for plugin use</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0052</td><td >Deletion of browser history must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0053</td><td >Prompt for download location must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0064</td><td >Autoplay must be disabled.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0056</td><td >Chrome must be configured to allow only TLS.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0057</td><td >Safe Browsing Extended Reporting must be disabled.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0058</td><td >WebUSB must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0060</td><td >Chrome Cleanup must be disabled.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DTBC-0061</td><td >Chrome Cleanup reporting must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0063</td><td >Google Cast must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0066</td><td >Anonymized data collection must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DTBC-0067</td><td >Collection of WebRTC event logs must be disabled.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="summary"><h1 >Benchmark Compliance</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>5.1</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Are you seeing a lot of red sections? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >CIS Google Chrome Benchmark, Version: 2.0.0, Date: 2019-05-17</li><li >DISA Google Chrome Security Technical Implementation Guide, Version: V1R15, Date: 2019-01-28</li></ul><p >This report was generated on 09/02/2022 13:43:23 on DESKTOP-UTMU75K.fb-pro.com with ATAPHtmlReport version 1.8.</p></p><div id="systemData"><h2 >System information</h2><table id="summaryTable"><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-UTMU75K.fb-pro.com</td></tr><tr ><th scope="row">Domain role</th><td >Member Workstation</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 10 Pro</td></tr><tr ><th scope="row">Build Number</th><td >19044</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr><tr ><th scope="row">Free disk space (GB)</th><td >29.1</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >13.8%  (2.7 GB / 19.7 GB)</td></tr></tbody></table></div><div id="riskMatrixSummaryArea"><h2 id="CurrentRiskScore">Current Risk Score on tested System: N/A</h2><h3 >Risk Score calculation implemented for Microsoft Windows OS for now.</h3><div id="riskMatrixSummary"><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div></div><h1 style="clear:both;"></h1><p >A total of 103 tests have been executed.</p><div class="gauge"><div title="True 88 test(s), 85.44%" style="width: 85.44%" class="gauge-meter passed"></div><div title="False 15 test(s), 14.56%" style="width: 14.56%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 88 test(s) &#x2259; 85.44%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 15 test(s) &#x2259; 14.56%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">CIS Recommendations</h2><p >A total of 67 tests have been executed in section CIS Recommendations.</p><div class="gauge"><div title="True 67 test(s), 100.00%" style="width: 100.00%" class="gauge-meter passed"></div><div title="False 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 67 test(s) &#x2259; 100.00%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">DISA Recommendations</h2><p >A total of 36 tests have been executed in section DISA Recommendations.</p><div class="gauge"><div title="True 21 test(s), 58.33%" style="width: 58.33%" class="gauge-meter passed"></div><div title="False 15 test(s), 41.67%" style="width: 41.67%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 21 test(s) &#x2259; 58.33%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 15 test(s) &#x2259; 41.67%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol></div><div class="tabContent" id="riskScore"><h1 >Risk Score</h1><p >To get a quick overview of how risky the tested system is, the Risk Score is used. This is made up of the areas "Severity" and "Quantity". The higher risk is used as the overall risk.</p><h2 id="CurrentRiskScoreRS">Current Risk Score on tested System: </h2><div id="riskMatrixContainer"><div id="dotRiskScoreTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div><div id="calculationTables"><h3 class="calculationTablesText">Risk Score Calculation</h3><p class="calculationTablesText">The calculation of the Risk Score is based on the set of compliant rules at the quantity level and also at the severity level.</p><table id="quantityTable"><tr ><th >Compliance to Benchmarks (Quantity)</th><th >Risk Assessment</th></tr><tr ><td >85% < X</td><td >Low</td></tr><tr ><td >70% < X < 85%</td><td >Medium</td></tr><tr ><td >55% < X < 70%</td><td >High</td></tr><tr ><td >X < 55%</td><td >Critical</td></tr></table><table id="severityTable"><tr ><th >Compliance to Benchmarks (Severity)</th><th >Risk Assessment</th></tr><tr ><td >X = 0</td><td >Low</td></tr><tr ><td >X > 1</td><td >Critical</td></tr></table></div><div id="severityCompliance"><p id="complianceStatus">Severity Compliance</p><span class="sectionAction collapseButton" id="severityComplianceCollapse">-</span><table id="severityDetails"><tr ><th >Id</th><th >Task</th><th >Status</th></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 A</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 40/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 B</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 56/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 C</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 64/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 D</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 128/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.58.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.58.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >3.1.1_1</td><td >Configuration of the lowest possible telemetry-level (Enterprise Windows 10)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >3.1.1_2</td><td >Configuration of the lowest possible telemetry-level (Non-Enterprise Windows 10)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >3.1.2.1</td><td >Deactivation of the telemetry service and ETW-sessions - disable service DiagTrack</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >3.1.2.2</td><td >Deactivation of the telemetry service and ETW-sessions - disable service Autologger-Diatrack-Listener</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >3.1.3.1.1</td><td >Deactivation of telemetry according to Microsoft - Windows Update</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >3.1.3.1.2</td><td >Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: disable MAPS</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >3.1.3.1.3</td><td >Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: never send sample files</td><td ><span class="severityResultTrue">True</span></td></tr></table></div></div><div class="tabContent" id="references"><h1 >About us</h1><h2 >What makes FB Pro GmbH different</h2><h3 >What do we want?</h3><p >Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet.</p><h3 >How we achieve this? </h3><p >We implement in-depth IT security for our customers. And we always do so in a state-of-the-art, efficient and automated manner.</p><div id="referencesContainer"><div ><h2 >Check out our hardening solution</h2><a href="https://www.fb-pro.com/enforce-administrator-product/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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"></img></a></div><div ><h2 >Check out our Audit Report Tool here</h2><a href="https://www.fb-pro.com/audit-tap-product-information/"><img width="250px" height="400px" src=" data:image/jpeg;base64,/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+4ADkFkb2JlAGTAAAAAAf/bAIQAAgICAgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwMDAwMDAwMDAwMDAEDAwMFBAUJBgYJDQsJCw0PDg4ODg8PDAwMDAwPDwwMDAwMDA8MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwM/8AAEQgBggD6AwERAAIRAQMRAf/EANAAAAEEAgMBAAAAAAAAAAAAAAACAwYHAQUECAkKAQEBAAMBAQEBAAAAAAAAAAAAAQIDBAUGBwgQAAEDAwEEBAcKCQoCBwkAAAECAwQABQYRITESB0FREwhhcbEiMhQJgZGhwUJygrIVdlJikiMzs3Q1ONGiQ1NzNLQltRbhJIOTRDYXN3fw8dJjVGSUJhgRAQABAwEEBgcFBQYGAwAAAAABEQIDBCExEgVBUXGBMgZhkaGxIhMHwdFCcoKSsjMUNOFSI0MVNfDxwtJzJFNEJf/aAAwDAQACEQMRAD8A9/KAoGJMmNDjvy5khuLFjNqdkyXlhDbaEDVSlrUQEgAakmg0VqzLEL72ZseV2e8h4ateozo8jiB2gp7JataCSUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQdBO8l7RXkP3fzNsEC4f+KPMWN5pw7HnkLajLOuyfcNFsMaabUDjdH9Xt1qVHgN3iu+rz47yzsmDmGRf7fwd1QLPLiwFyNa+FKuJBlEqLstY2bXVFOu1KE1Kiko6Esdk4wAw4kApcb8xQOnQU6EVBZ+N86OcWHFH+1ea+YY+lv0GoV7nNtj/AKPtSj4Kouawd+fvaY46lyJzsvNwCdPzN2YhXFB06/WY61fDSou+ye1O70NsbQi5NYbkhR6Tsy0vMOK8ZiS2U+8mlRdeN+18y5goTmHJO03FP9I7Zbu/DPuNyY8gfz6tRctg9rrynlupRkvKrLrG0dOJ+E9AuAHX5qnYyveFKi8LJ7TLulXdtCpeYXjHVq3s3Oxz+JPjVGakI95VKi68Z74Xdfy5SG7LzyxMuuaBDE+cm3OEno4JwYV8FUXRZs7wjIlBGP5lY76s7Qm3XGNKO3wNOKoJVQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFB5se1WyzKcR7rPrOKZHcsZlXfL7Ta7nLtclyI8/CfalKdjrcaUlXAsoTxAHbpodlSR8vyEpQnhQkJHQB4axB167PBQWSj0EfNHkoFUBQFAUBQFBggKGigCD0Ggw2hDKw4ykMup2pdb8xQ8RToaCxbHze5tYy2lrHeaeYWNlG1DMG+XBlA8SEPhI96rUXTjffi72OLKR6jztvdwbRpozeW4l0SQOgqmMOrP5VKi7bL7UnvS21TP2ivD8iQ3p2iZlncZU541RJLIB8QpUXhjvtfMxYATlvJOz3LZ5ztnu8iHt8CJEeT9arUXJjntduVkxaUZXynyuwAnRT1ukQbmgeHz3Iiv5tKi7LP7TjumXQtJlZPfbAXdOL7RsU3RHzlRkPj3iaVF4Y33xe67lZSmz888SDihqGZ89Ftc/InBhXwUqLlsPMHAsp0/2zm9gyLXd9mXKLL/UuLqiX0BQFAUBQFAUBQFAUBQFB5ce13/hTt33+sn6ibUkfM9u21iDTZu0oLJR6CPmjyUCqAoCgKAoCgKAoCgKAoCgKAoMEA7CAR1Ggw2hLSw6ykMup2pdb81Q8ShoaCf2bmrzTx0tGwczctsvq5BYTCvk9lKNN2iUPgD3qou7HO/D3scXKfUOd18noSNA1eERLoPdMxh1X86lRcmPe1B71VmcSbpcMWy1oHzm7lZksEjq4oDsbyUqL0sftfM5ZQlOTclLHcnBpxO2u7yYQPXoh+PK0/Kq1F0Y37XbldLLact5T5VYCdO0dtsiFc0DrI41w1H8mlRdFk9p73ULu8hqZf8AIccC/wCludjlFA8ZiCTpSovGxd8vusZGlKrbz1xJBVpo3Pmi3r29aJgZUPeqi6Mf5iYBlqUrxbOcfyVKwCg2u5RZmuu3+hcXQTGgKAoCg8ufa7/wp277/WT9RNqSPmd39GtYjOuvvUFkI9BHzR5KBVAUHo/3Ne7Hyq5p4BkOXc4kzEJzDJ4+B8plRpL0QpvBiPSXZA7MgOgHhTooKSOBWo21Ygeet9slzxm+XrGr1HVFvGPT5NsusZY0KJER1TLqSPnJNQXjyG5DHndbOcc9OUf7aXynxB7K0tGJ60meGe0JjE9q0WtQ3sV52/dVoOu6FcSUq004gDp46gsLlnyuzfnBk/8As3l7aE3zJDAlXJFuVIZi8UeGkLeKXJC20agEaDXU9FUROz2S8ZDebdjthtki8X67ykQrVaIaC7IkyXFcKGmkJ2qUo7ABUEov3KvmhixWMk5a5VYQ36a51mmsoGnWtTIT8NBAtRxKRuWg6LQdhB6iN4oM0BQFAUBQFAUBQFAUBQFAEA7xrQJbSllwOsjsXQdQ635qgfAoaGgnNl5m8y8beRIx7mNlVjeb/RuQbzOYI02/IeAqi77D32+9hjqEtweeOQS206aJugi3I7PxpjDyvhpUemvs+O97z05781shwTmhkFuv9mteKSLvEkNW2PDlesszIjCeJyMG0FPA8rUcG/pqxI9gqo8ufa7/AMKdu+/tk/UTakj5nt+ysRjy9NBZKPQR80eSgVQKQ268ttmO0p+Q8pLcdhI1UtxZ4UpA6SSQBQekveqy25d3u291jkJilwS1d+Rdug51lj0bQKXksx0yAF6aeiO1Oh3pcGtUVh388Ys8XnPA5o4qrtsP5+47b85sshAPB28psNzEA7teNKXFDoK6SJt3Chrj3fD/APSCd9WTSB52s/omvmJ8lQd+fZtfxPQ/ufkf+HRVgUT3X/4neR/39tn+KoOyveD73feVwDvCc4McxPm7eLZj2P5VNiWaxrbiSI0eO2ocDSUPsOeaOomlRs8G518u+95Lh8ou8vjFjxvP76kQeXHPzHobVuls3JZPYx7m0jRtaH16IGzgJPDwoUQsXeOgfMXB8i5YZjluAZVHTEyPD5z9vuaGyS2pbW1DrRIGqHEFK0HpSRUHafvE4Vym5Y81uQ6F4c6zgV35e4lkXMCwWd9bUm4OTEuqnrZddc/NuuhI0IUkA9VBvrBZO4FzCyaxYzaWudGC3LJbhFtdtS65arhFEma8hhoLWe0cSniWNTt0oJHzC7r/AHScRzHJcDe72lww3KsVmKg3a2ZLjb0llt4JSvhEqIGkLGigdU0oOjuf45Y8Sy+849jWawOYljty2hb8ytjTjEWalxpDilNtukrTwKUUEE70mgh1QFAUBQFAUBQFAUBQFB6g+ya/iJzL7gTf9St9WB9DlZDy59rt/Cnbvv7ZP1E2pI+Z7494rEH/ALa0Fko9BHzR5KyoM1KDt53GuWkfmT3jMPVdeyTjXLxD2aZM6+kKaDFo4VspXrs0VIU3rr0A0gWjzE5s9x7nTzAyjPs9xTnBYchyaaXrjdbTcbZMiuBpIYaW0w6eJCOzbTokbqs0Fhc7ofKTmx3LLHcOSOQ33Jbd3Xr83DmLymK3Gu7FovhKSyrskpSttta2uFSRpogjemgr/uEHWw98FtJ1cc5Pz+BsbyAJGug8GoqQPOxn9E18xPkqDv17Nka95+H9zsi/w7dWCVEd1/8Aid5H/f22f4qge72v8TvPj75XD6wpI69du7EKZcdZbkRCH47o3pcaPGhQ8RANQd8faMhqbzgwvKjHTHuWb8rscvN64RpxynG32ypXh4UJT4gKsjWd+v8A768kf/RbDv1L1JHWvkx/5x8pPvrYP9RYoLU76X8V3Pf7zL/wzFJHWGoCgKAoCgKAoCgKAoCgKD1B9k1/ETmX3Am/6lb6sD6HKyHlz7Xf+FO3ff6yfqJtSR8zu7fsrEHgNBZSPQR80eSswqg7ZcnOemG8puQfPzEYNtuiub/N1iPY7ZkDTbaYUOyaBEhBf7UOBag48eEN6E8HnbKDqYAAAANANgFSg7odynPcNseYcxOWXMy8wrDy654YdPxu9Xe5vBiFEmtoU7BfdWo8KdCpaUqO5Sk7aRAgvdm5vRe71zkVccnYGQYTdI0/D+ZEKCtLzcu1S1di8+wpHEHQ2pAdTwnz06hJ86oLkzDuCcxLvKOTd2+42jnfyovRMrG7xa7lEZmxGHTxNxJrEl1vR1pBCSQdTp5yUHzaUFs8p+VNz7jONZ7z0543C3WHmVdMcnY5yf5Zx5jUyfImXBGipUhLClJCElCdSklKU8RUoKKUm7h0m7q3F/8A0tyFK1caznFoK1npPrA1Pu1BvO95aLxH7y3PGZIs8+PDl5fPdiTHYryGXW1KGi23FICVJPQQdKSNd3fO7fn/AD/zizWC0WOdBxLt0P5dmkmO43b4NubUDIX26wlC3CkFKEJVqVHbokEgJV34eadh5rc+cmm4i41Iw7CrbFxDFpjCgtqRGtSVpW+2obChTy1hBG9ISemkiX9+v/vryS/9FsO/UvUkda+TH/nHyk++tg/1FigtTvpfxXc9/vMv/DMUkdYagKAoCgKAoCgKAoCgKAoPUH2TX8ROZfcCb/qVvqwPocrIeXPtd/4U7d9/bJ+om1JHzO7taxGT1nxUFlIB4EfNHkrMZoORGjOy3gwyAXFAkBR0GwanbWnPntw2cd256PK+V5+Z6iNPgiJvmJmKzSNkVna5qrJc0/8AZ+LwpUk/HXNbzTTz+L2S93L5E5zj/wAiv5brZ+1xl26ej0ob35JPkrdbrMN26+PW8zL5a5pi8WmyfszPuq47jLrWnatLa13cSSny1utyWX+GYnsl5uo0WfT0+bjusru4rZtr64biw5Rk+KPuysWyW7YxIfGj79pnSIK3B+OY60FXu1lRzTMQ4V1u92v0526X27Tb5c3ho9crjIdlyFAbgXXlLWR4Nak1Imrl41kl8w7IrJlmM3BdpyLHJrVwsl0bSha48lhXE24lLiVJJSehQIqDuJC9or3sIrKI8rOLTemkbALlYbc7r4+BpurUQbmd30e8dzasDmKZPnv2fjElJROsWPxGbSxJbVsLb5jgOLQelBXwnpBpUdVloCm1NjzQpJSPBqNKgvfn1zlZ513rBLw1jzmOHDsIs2IPR1yRK9YXaUuJMlKg23whzj9EgkdZqiveXN8gYxzDwHJrqXE2rHMktV0uamUdo4I8OY0+6UI1HErgQdB0mgnXePzzH+aHPbmhzCxRyQ7jmW3pU+zuSmSw8Wiy0jz2lalJ4kHYaSKTqAoCgKAoCgKAoCgKAoCg9QfZNfxE5l9wJv8AqVvqwPocrIeXHtd/4U7d9/rJ+om1JHzP+OsRg9JoLNR6CPmjyVahVWo5UKSYUlMlCA4UgjgJ0G0ab60arTxqMc2TNKvY5Fzi7lOrt1NlsXTbExSZpHxRToSiBelTZKI6owbKwTxhWu4a7tK8HV8rjBjm+Lq09D9a8u+fr+a6yzS3YIt4q7Yumd0TO6Y9HW2M64NW9LS3krUHVFI4NNmg16SK4tJo7tTMxbMbOt9T5g8x4OSWY781t0xfMxHDTZSK7azCL3i5x57cdLIWC0pRUFgDeBu0Jr3eW6G/TXXTdTbTc/JfO3mrS86xYbcEXxNl10zxREb4iNlJlzccipU3JkOISsLIbQFAHdtVv9yubnOeYm2y2adP3Pc+mXKbb8ebVZbYmJmLLaxE7viu3/pg5kERoRW5DTaUFpei+EAapV16eGsOUai6ck2XTM1jp9Dp+o/J8MaPHqsNltvDdSeGIitt+6Zp1TEetFY6ErfYQsapW4hKh1gqANe7mmbbLpjfET7n5Ny3Fbm1WLHfFbbr7Ynsm6IlOFWG2HXRhSfEtX8tfLxzXUR0x6ofveT6fcmv2Riujsvu+2ZcGVjjPZqMRxaXRtS2s6hXg102V1YOcXcVMkRTrh89zb6ZYJxTdor7oyRutvmJtu9FaRMT1b0QIKSUqGiknQg9BFfQVidz8autm2ZtuikxsmOqWKMRQFAUBQFAUBQFAUBQFAUBQFB6g+ya/iJzL7gTf9St9WB9DlZDy59rv/Cnbvv9ZP1E2pI+Z3YfBWIxQWcj0EfNHkoFUBQbex/vFn5q/qmuDmn9Pd3e99j5Bj/9rD2X/uy22SDViJ/aK+rXn8k8d/ZHvfcfVSP/AFtP+e792ERKeqvon4snrSRbbRqfNU0yVq1/DUNfKdK+SyTOq1fbdTuj+x/ROkxW8h8v1nZdZim6f/JfFf3piO4iL/mNlS2dq1tFok/hI2A/ADWWf/1tZxdFa90uflEf655cjFO26cc2frs2Wz64tlC4oIlxgRoQ8gEfSFfS6j+Fd+Wfc/D+URMa7BE7J+bZ+9CaX7j+z18HFxdojTh113+CvmuUzHz9vVL9y+oluSeVz8utfmW+GtenqN2AyDEc7fj4e0/Mleuumm3TXo1rPnEWfNjhpWm2jk+nF2ru0F/z+Lh4/g4q7qfFSu2le6tUXuwSLlMCd3aanxkDWvc0G3T2V6n5V5uttt5vqYt3cc+uYiZ9rXV1UfOCoCgKAoCgKAoCgKAoCgKAoCg9QfZNfxE5l9wJv+pW+rA+hysh5ce13/hTt33+sn6ibUkfM/qPerEB6urpoLMR6CPmjyUCqAoNvY/3i181f1TXn80/p7u73vsvIH+9Yey/92W3yT9BE/tFfVrz+S+O/sj3vuPqr/Taf8937sNBbI/rM6O0fRCuNfzU7TXr6zN8rDdd00p635r5X5b/AKhzPDhnw8XFd+Wz4p9dKd6cS5MRhKUzFJSh3XRKklQOng0NfLabBlyTXHWsP6D53zTl2jtizXXWxbfWkXRxRNPRSd2wmI/BcCkQltkJ85SGxw6a9Omgq6nFmtpOWJ6qy1ck5hyvPF2Pl91mz4ptsjhpXZWlIRGXG9XvKUpGiFvtuI8SlA+XWvotPl+bpK9MWzHqh+L855dGh8xRjjw3ZrL47L7ou9k1hMZctqE0X3uLgCgk8I1Op96vmtNp7s93Dbvp0v3HnXOcHKcH8xn4uHii34YrNZ74al7IoaUEsJcdc+SlQ4QPGTXo4uTZZn45iI9b4vX/AFN0FmOZ09t99/RWOG2J9MzNaeiENccW64t1w8S3FFS1dZNfSWWRZbFsbofiWo1F+oyXZck1uumZmeuZ3kVk0igKlBipQFQFAUBQFAUBQFAUBQFB6g+ya/iJzL7gTf8AUrfVgfQ5WQ8ufa7/AMKdu+/tk/UTakj5nhsrEB3E/BQWYj0EfNHkoFUBQPxpLsR5L7JAcTrpqNRtGm6tebDbmsmy7dL0OWcyzcu1FuowTEX21pWKxtik7OxyZlykzkNofCNGyVJKRodSNNu2tGm0WPTzM2V29b1OeeadZznHZZqOGlkzMcMU2zFNu2SYE5UBxbqGkuqWnh84kaDXXZpV1eljUWxbMzEVrsYeXPMN/JM92azHbfddbw/FWKRWs0p10KuNwXcHG1qbDSWk8KUA6jUnUmpo9JbprZiJrWWzzN5ly88zWZL7Isiy2kRE13zWZ2037PULbNECT2ykFaFIKFJSdDt3eSmt038xj4Ymk1qnlbn0cm1v8xdbN1s2zbMRNJ27t/VMOZPuUaXIhSENuNlhQ7UKA2pCgdmh8dc+k0eTDjvsmYmu7tpR7XmLzRo+aa3TarHZfbOO6OKsRtti6LopSdsxt2bN7l3W6QpsNTTKl9oVpUEqTpsB660cu0GXBl4rqUpPS9rzj5v5fzbl84cE3cfHbNLrabIrXbthF9BXu1fk7GhoMUBQFAUBUoClBipQFQFAUBQFAUBQFB6g+ya/iJzL7gTf9St9WB9DlZDy59rt/Cnbvv8AWT9RNqSPmdOm2sQhS0I0C1hJVsSCdNT1CgswPNISkLdQghIBCiARs6jQKDzJ3OoPiUKBwEHcdaAoCgKAoCgKAoCgKtQbOqrUY4eqqMaEbeigxQFAUBQFKDFY0BQFQFAUBQFB6g+ya/iJzL7gTf8AUrfVgfQ5WQ6Yd+vkBkneS5MWvlzjF7tmOzEZZbbtMut1Dy2W40VqSlzhQwlSlrJdGidg61Ckjo1y+9k5yisi0SeZGf5DnzwA1t1tQ3Y4eum3VSDIkK29TialB3l5d92XkBypZaRg3KbHbZKa4T9sSoibhcFKTuUqZN7Z7XXbsUKtBaczEsSuJJuOJ2O4EnUmVbYrxJ8a2jQRyXyh5Sz0qRN5WYfKSoaKDlit511/6CghVw7rndvunF67yOw1ZVsKmrY1HPvsdnpUoITP7jvdUuPFx8n7fDKvlQZtxjaeINygB71KCISvZ391iQpSm8QvMTi+SxfpwA8QWtdKJVGJ/s1O7ZJ/upzC1E66Fm8pdAPifjOUotUJn+y45PvcX2dzHzO3E7Eh0W+SAf8A8don36UEPl+yqx0qV6hzsuraPkpk2SO4fdKJSPJSgjk72VM8A/ZnPCMtXQJlhcSPfamq8lKCFz/Zac1Wtfs3mjiE8bdA+xcIx8G5p4VKCGzPZm94qOrSLc8KuKfwm7rIa+B2GmlCqOzPZz96GKkqasWOXDTcmPfY4UfF2yWx8NKCGT+4v3qrfxa8qX5wT0wblbH9fEEygfgpQQud3Ue8vbjpJ5HZadumrEH1ge+wpygjcvu/894KVLl8mM2YQkaqUbHNUBp81o0EMn4JnNr1+1MGyK3cI1UZVpms6Dw8bIq1EXfYejEpksuRlDel5CmyPGFAVRxS+yN7yB41CgUHEK9FaVeIg0C6AoCgKlBipQFQFAUHqD7Jr+InMvuBN/1K31YH0OVkI/kv7uT/AGyPIaCB0BQFEoKCI53lacIxedkioAufqkiDGbhKkoiIW5PmMwkFchxKktpSp8KUog6AGiojL5nOxE5GqVa2YLmG4o1l2RMsvoubS4jr8tAahyWFsoccDcB46lITxLb2+augfsXNyxX3KziqLRdret673SxWq9Sm4/qc242ZhEmbHaLT63klLKitJcbSlQSrQ6jQhyrXzUstzefCrFkNst6b9/tuBf50BLcCdcBOct5RFeQ6sqAfaUCVJToBrQoYic5uWdwx20ZVEyPtrJfYEq5W2Q3FkuOKZhS48GQlTLbanEuNyJLbRbKePiVsB0NESROZ4uXcajvXYW6bmUiTExe23Fl+DLmvw21vSG240ptt0KQ2hSjxJGzaNdRqKuIeYmCJvNzx05bbRe7LoLvAL22MoqbRwOuadmlfE82Cgq4gVDUbaK2Nyy7E7O85GvGU2azyG5CYjrM6fHjKTIU0H0tEOuJIWW1BYTv4SFbqDfFxtKm0FxAW8T2KSoAr0Gp4QTqdBt2UDg27B5xO7TbRKM9itR0DauLTXQA7juNAktOJ181Q02nUaaUKkBS07lKHumil9u9pp2yyOriNBwJEGDMBEyBFmA7w+w26P56TQaWRhmFywpMvDMflBXpB61w16/lNGiUQ64cieSF21+0uT2FyyddSqxwQdu/alkGghE/uhd2K5cXrHI/GGyobVRWXYp9zsHW9KFUXkdxfuqSNdeU0djX+ouVzb8kuiorP9nf3W5vEWsXvlsJOv/J32YAPAA8XRQQqd7Mnu/SNfUcgza1666BNwiPgf9bDJ2eOghkz2WPLdxRMDm1lUVOmxL8KA/t8aQ1QR2Z7KuylKvs7ndcG1/J9bsTK0+72ctBoIdP9lZlqOI2rnRZJG3zEzLPKZOnhLb7vkqUSqEzvZf8AO1g/8hnGFXFOp2qduEc6dGwxF+WpRau4PcJ7oPNbkBziyLLs3m49Ls9yxOTaWDaZrr7wkOTYjyeJtyO1onhZVt136VYgeu1UR/Jf3cn+2R5DQQOgDuNAUBQRrL8XhZlYXsfuLnZwpEy3y3x2aHQsW+axNDSkOapUlwsBCtRuJoK9zPlI9fZd2Xi+QRsMtuVY
+									0nEMrtLVsbfaNrQ/IeS5bwh1hMaQBLeRxKS43ovUt8SQSHDxnkpDxPmBJ5g2qdFTdLvkF9uGQrVGV2sq13ZhoR4IX2hAXFfYbWHNPOTxJ0GtEqjdi5LXyz3e4v8AqeMRmZmat5U5kUN+4faU1lN4euXq8uO6gx0qQ29wJW2raQNdlFRZfdyyOOi1xrbfYLFtXiMa2X23NreYKL6ibZFyp8N5tHGlMmNahxa6KDqUrHprICcZ1ytyi95FEyS0TvWnOXcO3yeXLd0lGXMnXFu6JuU5MqZI1Wwl1MZiOFhSiUFYV5tBqHcQzpjllkfJ1rF5ravXn5tpz63y4AjSkSb+i5B4tvOl9uYlpxSl8bCm+NBIUpKkghC7jy5zrHeY96vzz2XZba5ORrlM5XHttju1xkRnMet8QB2I6ywx2SXmFtFSWg4OEdepCwOaFm5gzeYOLZrYMcZu9h5VN2+5QYSluJuEuVcJnZ3YW9pCFIcW3bUFspWpA1cISSaFVVZ7YcjnYanGo+P3t6XglqzVrJEpgy+yfRc7rHVD9UcDfDL9YY4nEpZKyEBXEEnzaDbv40xduYNhtdlst0hckrnfZarJZuzuVsY7ZGN3Fyc600osPsRlSRH7MHgQXkrLY26kDDH4eHK5AmTcZV1mZFYrMzNwyRebp9sx7ndNQ7eURHXlpmMq85MtD2xlDYWjTzkqCUZnnt3tsXLLRb8ncYyi05Vkj67Uh5Bms2WPjcu4RnQ0rVQjoc7FxKtOHi0GuuyiURO059m96uGH4XkGaysYvbE3HbRmV2tvqrCnjJtF+uLc1hU1h5tKZ7cWI6rzSAoLbGmiqKsV6/5lfOXuI5Bac7XbprmVN2F6/wAC329+PeYL19FpanBqS08lHaMjtU9kUpKla7UcIoIo9zoyixK5iJuclM049Bun2I5cLYITCpzd/FitvYOsLBlsqUoKlEJBbVoAoBYABpnvE3lQt8h20Qfs664jZJ8WehDqm2shmTZceXEeUF7GVtwXixsCuJHConiSKDnZJz1yTFGJAubWNMXxN9nwX8UnouEGXBYiwpk2LFWvV31p+emMlMZ5lvsllR4UKKdKCZT+djcGfmUByyxYTmNW60S4SblcURSt+c7DZnszSlt31ZMBdwjhxeitdVaDzaJRpIneLt0qLkMoY0jix3H3L8q3N3eOZtyQ2ua2n7JYW2j1ph0wuJt/iQkocQopG2ipC7zthvy7WzjuH3TKYl4u8Gxw7jElW9hHrk+1JvDaSmTIaUAlgqCz0LQU79KCbcvs4Z5hY8zksSyTbJb5nCu3InPQ3XH2HEBaHQIciQG9QdOBwpWDvSKCcUBQFEok2KafaL2z/s6vrJoQsKio/kv7uT/bI8hoIHQB3GgXvA1ojHCOiiqt5z3GbaOXd1mwJ7ltkC42NhUxqYq3KDMm8QmH0+uI85gLacUhSx6IJNB1rxTLcovvMTAsdl5NeZFuhRMjNwhRcsaiNKXCyZiPHUbi4lIvLbER4M8QAU55wI4waDiYrzO5jRjFky7xf5abmu3XD1G8LgyBc0u5eLYv7G9WQpTMcxwY7jbxCwpbSkIG1ZCz4mX5vA5XYDzXXk1yy2fzCn4kqbikKJbvUmG7zNYTLhWtCmmHAtCHVMavyFK1BUSlVCjkDOeYd/k+sW27O4U05zObwhNhutnhyJDMN+AzJDr3A+v86lalacLhSUqGu0UG25c59mV/xbPcmvkxMpzH15Gzaof2E9AhhVlnTorK25xfWmVxpipLiUBPCSfBQaKxc/pU1q1wLhbT9v3W/wCIWtkMWy4m3+rZBb7VLlLVOShcZDraprvZpW6DoEApJPnBDofegvb9ksNwci4hxXu5WyDIvipF0ZtdtXcbbcLgqHMCWH3zJZ9SQkloKbIdSrzdCKC4MU5wPZFzDlYE7abfxs3GfbRKt89UiSz9nQYkxc2VEWw2WYrypQaaXxklfCCnztgbGxczb5f7xjMCLhLYt2Ss3OXGuqrugOMMWic3AlKXHMYaq43EqQlK/OGupBolD965oG1XrNrczi8u6QsBiR5mTz2Z0RElDT7Tckut29xYfcZbaWVF0eaVIWhOqk0Uyzzdt1zvDFpxvGr1lSpP2i8zPgGC227Bt8j1N2cx63LYU+y5ISptJaCiQnjUAhSFKDW2jnFZL3MhRUcv8tau13m3Syxob1thOPOKsznZ3FKlNTHE9lHcOitVaEnzQobaDmyc/wCUWQ26I7cl267wLllMnDGGp1t9YSu9WlUhDkdTbjK+ENdk4UOKARooFJ88ahM7DeMfzSzRJ9vt8hVoQuNItzdytkiAD2QbkRXmGZbTRKU+YptaBoCNh1FBylYtjSpUGcbFD9ctkl6Zb5QbAWzIkPiU86kj5S30hwn8IcW+iNPO5bYHckXhEzF4UgZBKjTb1xhesiRDmruMd1RCgQpuU4t4aaeco9elCpMHl3i1uyBGVNw5UnI2Xi81eZs6XMfQCy+wllKn3V8LKESnuBseakrUQNdtFq1TvKXBnZUaeLWtm5R7nNuzl0bc0kyJFwmNTpAkukFTrZeYbKUKOiQlIToBQaJPJHH2DkjMHIb5AtGWRXod6sTa4a46mnH5chAaW7FW80GVzXAgIcACQlJBA2ht4fKbGrbd13a3PS4XaZr/AL6XAbLfYJuCrc5bnGW08AKGVh1TpAOvaE6Hh2UGy5cYK1y6xtjGY86NcIkMIREks21i3OqQ22lsKlFhSg+6QnznSAT1URPaFRRaigk2KfvJ79nV9ZNBYVBH8l/dyf7ZHkNBA6AO40Dg3CgKBmRHjy2XI0uO1LjPJ4Xoz6EuNrT1KQsFJHjFBpLjiGI3gW5N3xOy3UWjQWgTLfGf9UCVBQEftG1dlooAjg027aB5eNY8tUBSrFbiq1nW2H1Voern1hEvVrRPmfn2kO+b8tIVvGtBpYvLvBIE6ZcoWIWqJOnzW7jMfZjpQHJjT4lIkFA0QHA8A5xAa8XnHbQbY43YC725tEbtjeEZAXQkgm6NtBlEw6Ha4G0hOp6BQaW0cvMSsLd9YtMCTEh5ImaLtbTcJzsRRuLrj0tTUZ19bTKnXHVqUWkpOqjQJh8usRgW5Fph25yPb27naruhhMh06S7I1FYgq4lKJ0bbhMpKddFcPnakmgjcvkvirysXftt0v2OXDDo9vi4/dLXNQl9pFsjzYkYq7dl5C1Bm4PoUVJ2gj8EURvLTy3sVmvcTIo0u4vXeNd7henpbzyFesyLpDYhSkvhLaQW1JjNuBI00cTxeChVm38ucfgItMdReuEO02682wQZnZuNSI99ltzJSXk8A4tFthKRu4SQdd9Fat7lhHfzCwZIbozGtGJQJcDGMah22NHMdqbFMR5l6akl16NoouJYKQkOcKiTwpADQv8n5P2Xylx6Ff4EazcrmbUhi4m1f50V2stA+oTkSUpholttBmQjs1hTZUnp2BwrpyYkSZ2LXBmXZbsvG8nyfIhAvcKQ5HWcjl+tJSj1d9tSHI2miVkkK38IoIpA7tr1vuTd2RlaHXkzY92XA9XWiKLoq5ql3CclPGo9pIiNx423d2ZV8vYSq4eWmLXPDsXh4/c40Nly2sx47b0K4zrgh8Mx22VOn19CVM8RRqGkEoHRRVgdVAe5QYolBoDvG2gwU9XvUKkkEUVigKDOtEoKCTYoP8xeP/wBur6yaCwaK018jqkw0tpUEntUqJPgBoIwm0J+W+T81IHl1oOQm1xBvSpZ8Kj8WlA/9nxP6r4T/AC0CTbIh+QofSNEJNsjfgq/KotSDbI2vyx7v/CgSbXH6FuD3R/JQJ+ymuh5fvCgSbS2f6ZQ+iP5aIQbOOh8/k/8AGhUg2k/1/wDN/wCNFJNpX0Pp90GgSbU90Oo+GgT9mP8A4SD7p/kolGPsuT0FHv8A/CgSbbKHQk/SotSDAlD5AP0hQJ9Slf1Xwj+Wgx6nJ/qVH3qFCDDf6WFjwgUQ2qJIG5pZPzTQqbLD43sLH0TRSS270tqH0TQY4Vg+ioHwigwdemiUJIQfB4aBJT1HWhUnwUUUEmxT94u/s6vrJoLCoOFcP0H0h8dBpKAoHKAoCgNB0igTw9RojBBFFYoCgKJRjhHioE8J8dCrFFFAUBoD0URjh6qFSNCKKKAoM60SjGg8VAkg+OhUnQbiKKSUoO9CT7goMdm3/Vp/JFBgtMne0g9fmiiUIMWMf6FH5IoNpZo7TUpakNpQS0Rqnxii1Seg4Vw/QfSHx0GkoCg5FCjGgoElJFCrFAUBQY0B6KIxw9W2hUnTSiigKA37xRKMcI6KBJBFCrFFFAUKAp6xpRCSnqoVJoooCgPcolGOEdGygSQRQqxRRQbS1f3hf9mfKKCQUHCuH6D6Q+Og0lAUHIoCgKA376DHD1UQkgiisUBQFCjGgPgojHCfHRak0BQFAHTQk6AAalR2AAbyTRHV3mb3nMYxFcm1YlHRl98Z1Q7KCym3MLB0IU4nzniOpvZ+NXVj0t122dkNd2WIdMcs7xnOC/vvLTlr1giubEW+zoTEbQOoLAU6fGV1126fHbG5qnJdKt2Od3OCyyPWLfzJv6XAfRfmLkoPjbkdok+9WU4bJ6ITjnrdr+UPfWjTJMfH+cDMe1uO8LcbNoTZRHKt3/Ox08XZ6n5bfmjpSkba5cukptt9Tbbl63f+NKjTY0ebCkszYUttLsSZHWl1p1tQ1StC0EpUD0EGuKYo2nSAfBQY4T46FSaKKAoUGw7xRKMcPVQq2NqBEhf9mfKKKkFBwrh+g+kPjoNJQFBzBuoMcI8VEJ4T46KxQFAUBsO+iElPUaKxoR0UGKAoCiUY4R16UHFmSo1viyZ06Q3EhQ21PSpTqglDbaBqpSidwAqxFdkFXn/zn553HMVysexh522YkklD7ydW37iNxLm4paPQjp3q6h6GDTxbtne0X5K7nVCUNOLxbK62uXGteM3vKJZh2WEqUtGnbvnzWWgelxw7B4t/UKxmYjekRVdFk5G4/CSh/IpDl9lg6qjIKmYo8Gg0Wv3SPFWmckzuZ8KXnAMHbQUJxG08GmhCoyFHTxqBNY8U9aUT7AMif5ZqREx9gM47xKU/jIWoRPOOqlsoOoZWetAAPyga132Rfv3srb5tdyMcyO15Ta2braneNlfmvsK2OMuAec24Ogj3jvFcd1s2zSXRE1b6sVFEoxwjroE6GisUBQbK1/p1/MPlFBvqDhXD9B9IfHQaSgKDmDcKAoCgN++iUY4RQJIIorFAUBQY0B8FEY4T0baFSdNKKKDoxz15pryiU9itikEY1bndJkhB/v0hs79m9tB9H8I+d1V6OmwcPxTvaL767HViXoQfdrqaZbDE8GmZfLUtSlQ7RFUBMnaaknf2bQO9RG87h09VYX38KxFXZO3WiBZYTFstURMWK1oG2kDVS1HZxKO9Sj1nbXPWZ2y2Qn9r5b5Hdgh11tu1R3NqVyiQvTwNJBUPd0rCb4hlFsy20rkvdexUqHe4sh8eiy42toKPVx6r090Vj82EmyVGzGVx5EuG+ns5MJ5yPLZO9t1s8KknwgitkTE7muYomnK7KlYzkrbTqlrtl60izGEkbHCfzLg12ahR08RrXnittepnimeKI63aFzKACQ3BJ6ipenwAV5k5/Q9ONL6XCXlEzXzIzKPHxH4xWPz5bI0tvXJk5PcRubY8XCr/AOKp8+5lGks9Jactlp9OKyseAqT8ZqxnnqYzo7etzEZdHJ/PQXED8JCgr4CBWUaiOmGE6KeiW2jXy1SjwolpaX+A8OA++dnw1sty2z0tF2DJbvj1JPa/06jvBbOh6DtFbGpvqDhXD9B9IfHQaSgDuNBsOgUGCkdFAkpPjolWKKKAoDQGgTw9VBjQigxQFAUSiheeWdqsFnGNWp8t3i9tH111CtFx4Z2HxKd2pHg18FdOnxcU1ndDXkupsdEJg04hpoBu8Vela0QRj+NSsouiILOrUVv85cJYGxprXo6OJW5IrDJfFq0q7P2myIaRDslkh8LbY7ONGR0DpUo/CpRrk4qzWWcL3xrEbfY20yXUpl3MjVctQ1DfgaB3ePfWN0sohLFzmGtAnV1fUN3v1ouviG22yZMKmynASk9mgbwnoHhNaLr5lvtsiN7pvznQcd5gRrkkcEHJIjTs0dCnW1Flbh8I0STW3BkmGrPYiy1LaPaNq0cbIW2odBSdQa7t7imXbaG/63ChyztMlht06da0hR8teBdFJmH0OO6sRPWfUN2ysWZk0WDRFGRo1Amip3gLz32rIYLqyyIqlBoqPCCFpGoHu1v087XHrLY4Yn0rcrree4Vw/QfSHx0GkoA7jQbAbhQFAUBvoMFI6KIToaKxQFAUGNAfBRGOE+OitfdLlEs1unXWevsodvZW/IUfwUDXQeEnYPDViKzSEmaPOvKr3MyS83K9zie3uDynOz11DaNyG0+BCdAK9Sy3hijmmaygEhp191thhBdeeWG2W071KUdAB4zWbF2IxfG28etjNvaSHZ0ghc51A1LjyvkjrCfRH/GubJdxTVsiKL8x+0MWCKVO6O3SUAZKh8gbw2D0AdPWa0zdRnbZMtyp9170z5o3IG6tF10y6ItiCQOmtcs4eXffB5+Zq1zbxHl9yjv0y1XnC5KEyJFuc0VKvdy4WkRHEEFDiG21JSUrBTxLVqNlfM8z1t/z4x45229XXPQ/XvJXlzTTy/JqdbZE25I2V6Mdm3ijpiZnpjoiOt2P58Q75Gxzlm1lUyPcsqZtzzGR3GI0GWHpiW4/brabGxKC5roBX0mni6Lfi39Pa/J9fdiuy3ThiYsmZ4YnbMW12VnrohNvcMi1QHidS5GbKid+oGh+EV6dk1iHkX7Jds8YUpWN2JSt5gMfAgCvFz+O7te5gn/Dt7G7O6tLeYIosE1GRsga7qoaKSOmoqa4D++ZH7Iv66K36fxOXWeCO1cFdbzXCuH6D6Q+Og0lAUGz6BsoDhHRQJIIoVYoCgKA0BohPD1UVjQigxQFB1/575EY9vgYxHd0XcD63ckj+pbOjST85YJ+jXVprNvE1ZJ6HUKYNOLTw13NKVcvbCJM1++yW9WoJLUEEbC8oecr6APvnwVryXdC2w7DY5C1fVcXE7GTpF1/D6VDxdFc191G6y2u1OE79u3XfWiW+1yhWtkr/mxzBg8reXeTZxNCXF2mKU2qKSAZE549nFaAO/VxQKvxQTXJrdTGnxXZJ6N3b0PV5Jyy7mWsx6e38U7Z6rY23T6vbR5q9ynl3cOZHN6+c3csLlzYw11c716QniEu/wBwKylZJ2EspK3dm5RRXzXJsM5ss5bttPbdL9Z8+cys0Ggs0WH4fmRSkfhx2/fst7Ku4HeXmhd1xm3BWpiwX5DieovOhI+BuvrsT8Ry71cWPVNht2vRH198k16GPww8/JvdxbKz6vZLMzu7ODHT7vZp1rxMs1vnte7iilkdkNnoCK1tsGlo27KKZIIoyqQqimz11FTTAv3zJ/ZFfXRW7T+Jy6zwR2rersea4Vw/QfSHx0GkoCg2g3CgKAoDQGgTw9VEY0NFYoCgKDGg8VBjhNB0W5h3k37KbzcEuFyP25YhHqZZ8xGnj0J92vSxW8NsQ5r5rKrZKFurS02njcdUENp61KOgHv1uYuwVntAtlut1pYSONtKUOEfKdUdVq91RNck3VmrOIWtGjtx2W2EDzWkhIPWek+6a1S6YikOagbfDWuWUTRyUgnYKwllV5Yd9/mW5lGX2jlbY1mXCxJxLl1ZaGpevMoBCGRt2lptQTp+EtQ6K+M5/q/m5Yw27rd/5p+77X7R9POUfy2mu1mTZOTd6MdvT+qdvZEPQDkHyxa5R8rcbw9baE3hLZn5S82eIOXOVop/zukI0S2nwJFfQ6HS/y2G2zp3z2vzfzDzaeaa7Jn/Dus/JG717+91q55XZN2zy9Fra1bEt29sjpLCfP/nqVXpWRSHzl81ucmzW9x9NntSB+dfEeNp1FXCk+Wu7ZbbWeiHJw8V1OuXcUtpbbQ2gaIaAQ34kjQfAK8De94gdVGUBW6opg7KLBpQ6KjI2R0UEzwMaXiR+yK+uit+n8Tl1ngjtW7XW85wrh+g+kPjoNJQFBt9BpQY4erbQJ0oCgKAoMaCgxwno20Qmiig0OU3P7Hxy9XIHz4sRzsf7RY4EfzlCsrIrdEJM0h0LmjeDt06a9OHKexC2CfkLDi08TNvSqS5ru4hsR/OIPuVMl1LViNrsDZY/aTFPKGqYydQfxlbB8Gtcsy22RtS4bz4awlvPN793VWEiFczM7h8tMFyLMpYQ65aYxFsiLUE+sTHfMjtDXfqsgn8UGuDX6qNLhuyT0bvTPQ9bknK7uZazHp7fxTtnqtjbdPq9rzW7qWAS+Z/OOZneTFdyg4c6b7dJL6eNMu7yVqMZKirYSlfE8R+KK+Q5Hp51OonJfti3bPpund979g87cyt5by6NNh+GcnwREfhxx4vZS3vesN6u7Nhsl0vMhQCLdHW+OL5SwPMT4eJRAr7alZo/D60irztcRIvN6bXKV2z82UqRMcO3UlXaOE+PbXVbbWYhy3TsmV8cvLcLhlMZ1aNWrchctZ6ApPmt6/SVr7lZ6y/hxz6dhpLOLJHo2uyB2jSvGewa4R/xoEFOyoyMqSfH4aLBhVRkbV10E0wP97v/ALKv66K34PE5NX4Y7Vt11vPcK4foPpD46DSUBQbgbhQFAUGNB4qBPCfHQYoCgKAoMEA+CiKw5uylRsOdZSdDPlsMnwpSS4fqVuwR8TG/c6dTflV3Q55TjAIgRCuM4jzpLyWUfNaGp+FVa8s7oZWrlsjXDEU5ptecPvJ2D4655brNzq1zT52ZFYM5VFxSYybZYG/VZ8V1AdYlyCQp7j3EcB8wFJBGh66/OudeZ8+HWzbgujhs2TG+Lrun1btnpfrnlvybptTy7j1Vs8eT4omJpdbb+Gnb4prG3Yn2Dd5DB8lWxb8hcGHXpw8ITLXxQXFdHBK0ATr1OBPjNe3y7zTptVS3J/h3enw9133vn+ceRNboq34f8Wz0eOO23p/TXsdW++PzIRkGQ27ALRK9YtWLgSrr2WikPXJ9HmJSRrxBppQA0+UpVeP5l1/zc0YbJrFu/wDNP3R732f085LOm092ryRS/Jstr0WR7uK72RDub3e+Wg5W8sLJZZTHY5Bdv82ykk6kTJKU/mteplsJb8YPXX03KtH/ACunttnxTtntn7tz888084/1PX35LZrZb8Nn5Y6f1TWWu54ZGExomLRXTqspmXUDqH6Fs+7qojxV6uO3pfNZZ6IUBj8Lz5NwWN35lg/Co+QV1Yo6XLknodn+WNn9Tssi6OJ4Xbs5q3qP6FrVKffUSa4tbkrdTqd2ispbXrWORp01wu00rYeqik1GUGzQMqAOwioygwpNFTHBBpeH/wBlX9dFb8Hicmr8Mdq2663nuFcP0H0h8dBpKAoNyBsHioMaUBQFAUBv30CSnqoMaGgaceaa/SOJT4NdvvVJmIWLZlrXrmBsZQSfw1bB71YTf1NluLrUvzbdddtFtU4sr1mHXXdsbVuFb9JNb57GGpiItinW60TflV6TiWxiUYMY5A02Kf43lfTWdPgArnyT8TOFn25s/ZjKUrLSloUQ4nTiSVE6KGoI1G/aK03RWrfjmlNlXTDmHyAyy3iVdMefOWRFKU6+wlPBcAVElSi3tDu3aSg6/i1+Xcy8o6nBM34p+bG+f7/q6e71P2rknnvR6iIxZ4+Tduj/AOP0bd9vfs9LqBd2nGXH477SmX2VFD7DiSlaFDelSVaEEdRr5u2Jtmk74foOO6Loi6JrE7pWT3beXCOYHNGDIuDAex/DQm8XVtaSpt1xC9IjB6POcHEQfkoNfSeX9F/M6mJnw2bZ+yPX7nzHnXnH+n6C62yaZMvwW9cR+K7ujZ2zD1Wv95jWG2SrrLPGGh+Za18511XooHjO/wAFfpNJmX4DWkOlt8kTb3cpEuQvtptxeK3VDdqrqHQEjd4K3xHRDRM9MpNY7EudMt9jig/nl
+									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
+									xxW+6I7ZiPesa2cjudV57P7L5Q5nNDunZqRY5wSddx4lMgfDW63S5bt1k+qXm5efcuxePUYo/Xb960rH3Ku9Dfyn1blJcLchen5y6yoUEDXTel6QlY3/g1vt5bqLvweujydR545Nh36iJ/LF13uiiy7V7OPvMT3EpmW/GrG2fSdl3cOae5GZeNbreT6id9I73mZfqVyeyPhm+7st/7pha1m9lpzHfCTf8Amnjds1HnIgQpc0jds1dMXyVvt5Hk6boeRn+q2kj+HgvntmLfdxLJtHsrLKhSVZBzmuElIPnNW20Mx9R4FvSH/q1ut5FHTf7HmZvqxkn+HprY7bpn3Rate1+zK7v8NtIud5zG9PD0luXGPHSfosRUae/XRbyXBG+ZnveTl+qPNLp+G3HbH5Zn33Ssux9wXut2UJ7Tl67fHE/0l1uk9/XxoD6Efza3W8q09v4a9sy8vP8AUHnWX/O4fy22x9lVqWzuw93i0JbRB5L4egN+ip21R31e6p5CyfdNb7dFgt3WR6nk5fNPNcvi1OT9qY9y0LRhmH4+EpsOKWeyJT6It8GPGA8XZIT11vtx227oiO55WbW5838TJdd2zM++UlrNzCgKAoCgKAoCgKAoCgKAoKX5td3rk9zvgKh8x8Ig3qTwhMa+tpMa5McO7sprPA8APwSopPSDXPn0mLPFL4r73scq5/ruV3cWmyTbHVvtnttnZ373k1zp9lZlNpMq8cjssaymDxLcTiF/UiJPbRvShmYkBh49Hnpa8ZrwdTyO6NuKa+ifv/5P1fkv1TxZIizXY+Gf71u23vt3x3cSm7J3A+9Ld22luYFDsaFJHnXS7wWyNnShl15Q96ua3lWon8NO+H0ef6hclx7ss3fltu+2IWXZ/Zl8/p6v81v+HWFHSVTJcpXuJaiAfzq3W8lzTvmI/wCOx5eb6ocrs8FmS7uiPfctiz+ysuy2wcg50RYznS3bbIt0flvS2/q1vt5FPTf7P7Xk5vqzZH8PTTPbfT3Wysiy+y05axilWQcz8nu+npIhMQoKT+W3JI9+t1vI8cb7pn1PMz/VbWXfw8GO3tm677bVq232cPdmgpSJNryK8KT6S5l5fSVeMRwyPeFdFvJ9PHRM97ycn1L5xfuust7LI+2qzrN3LO69YyhUbk/aJjiNzlyXJuBPjEp50fBW63lunt/BHveVn8785zb9RdHZS392IW1bOTfKOytoatPK7E7ehv0AxZoSCPdDOtdFunxW7rY9UPIy8612Wa358k9t933p9Dt8C3NBi3wo8FlOxLMdtLSR9FAArbERG559+S6+a3TMz6XLqsBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQf/Z"></img></a></div></div></div></div></div><script type="text/javascript">						function collapseHandler(e) {
+							var targetSection = e.target.parentElement.parentElement;
+							if (targetSection.classList.toggle('collapsed')) {
+								e.target.innerText = '+';
+							} else {
+								e.target.innerText = '-';
+							}
+						}
+						var collapseButtons = document.getElementsByClassName("collapseButton");
+						for (var i = 0; i < collapseButtons.length; i++) {
+							collapseButtons[i].addEventListener('click', collapseHandler);
+						}</script></body></body></html> 
diff --git a/Samples/Microsoft IIS10_20220905_052811.html b/Samples/Microsoft IIS10_20220905_052811.html
new file mode 100644
index 0000000..31afe45
--- /dev/null
+++ b/Samples/Microsoft IIS10_20220905_052811.html	
@@ -0,0 +1,21 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >IIS 10 Benchmarks [09/05/2022 05:28:18]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	margin-left: 8%;	margin-right: 8%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;	background-color: lightgray;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 50%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}#navigationButtons{	margin-top: 15px;	display: grid;	grid-template-rows: 50px;	grid-template-columns: repeat(4,160px);}button{	margin-left: 10px;	border-radius: 8px;	font-weight: bold;}#riskScore{	font-family: Arial, sans-serif;	text-align: center;}#riskMatrixContainer{	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	left: 10%;	float: left;	margin-top: 50px;	text-align: center;}#riskMatrixContainer div{	border: 1px solid black;}#severity{	grid-column-start: 1;	grid-column-end: 2;	grid-row-start: 1;	grid-row-end: 6;	position: relative;}#quantity{	grid-column-start: 2;	grid-column-end: 7;	grid-row-start: 6;	grid-row-end: 7;	position: relative;}#severityArea{	text-align: center;	position: absolute;	margin: 0;	top:50%;	left: 20%;}#quantityArea{    text-align: center;    position: absolute;    margin: 0;    top: 35%;    left: 40%;}#severityCritical{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 1;	grid-row-end: 2;	padding-top: 20px;}#severityHigh{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 2;	grid-row-end: 3;	padding-top: 20px;}#severityMedium{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 3;	grid-row-end: 4;	padding-top: 20px;}#severityLow{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 4;	grid-row-end: 5;	padding-top: 20px;}#quantityCritical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityHigh{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityMedium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityLow{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#riskMatrixContainer:nth-child(10){	position: relative;}#riskMatrixSummary:nth-child(10){	position: relative;}/* Color for each Risk */#medium_medium, #medium_low, #low_medium{	background-color: #ffc000;}#high_low, #high_medium, #high_high, #medium_high, #low_high{	background-color: red;}#critical_low, #critical_medium, #critical_high, #critical_critical, #high_critical, #medium_critical, #low_critical{	background-color: purple;}/* Low Risk */#low_low{	background-color: #548dd6;	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 4;	grid-row-end: 5;}/* Medium Risk */#medium_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 3;	grid-row-end: 4;}#medium_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 3;	grid-row-end: 4;}#low_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 4;	grid-row-end: 5;}/* High Risk*/#high_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 2;	grid-row-end: 3;}#high_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 2;	grid-row-end: 3;}#high_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 2;	grid-row-end: 3;}#medium_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 3;	grid-row-end: 4;}#low_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 4;	grid-row-end: 5;}/* Critical Risk */#critical_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 1;	grid-row-end: 2;}#critical_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 1;	grid-row-end: 2;}#critical_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 1;	grid-row-end: 2;}#critical_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 1;	grid-row-end: 2;}#high_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 2;	grid-row-end: 3;}#medium_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 3;	grid-row-end: 4;}#low_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 4;	grid-row-end: 5;}#severityDetails{	margin-left: 8%;    margin-top: 30px;    border: 1px solid #d2d2d2;    margin-right: 8%;    float: right;	margin-bottom: 40px;}#severityDetails td{	border: 1px solid #d2d2d2;}#calculationTables{	float: right;    position: relative;}.calculationTablesText{	text-align: left;	font-family: Arial, sans-serif;}#riskScore th{	background-color: lightgray;}#riskScore tr:nth-child(2n) td{	background-color: #efefef;}#summaryTable{	float: left;}#riskMatrixSummary{	font-family: Arial, sans-serif;	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	right: 10%;	float:right;}#riskMatrixSummary div{	border: 1px solid black;}#riskMatrixSummaryArea{	float: right;	text-align: center;	margin-right: 10%;}#systemData{	float: left;    text-align: left;}#dotRiskScoreTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#dotSummaryTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#quantityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}#severityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}.severityResultFalse{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #cc0000; }.severityResultTrue{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #33cca6;}.severityResultNone, .severityResultError{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.severityResultWarning{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	background-color: #ff9933;	color: #000;}.tabContent#riskScore{	text-align: left;}#severityCompliance{	margin-top: 25%;	clear: both;}#complianceStatusFalse{	padding: 5px 10px;    border-radius: 8px;	background-color: #cc0000;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#complianceStatusTrue{	padding: 5px 10px;    border-radius: 8px;	background-color: #33cca6;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#referencesContainer{	display: grid;	grid-template-rows: 400px;    grid-template-columns: repeat(2, 500px);}#referencesContainer div{	text-align: center;	margin-left: auto;	margin-right: auto;}#settingsOverview section{	margin-left: 5%;	margin-right: 5%;}#invalidOS{	display: inline;    padding: 5px 10px;    border-radius: 8px;    font-weight: bold;    margin: auto;    background-color: #777777;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(206.352deg); transform: rotate(206.352deg);}.donut-chart.chart .chart-center span:after {content: "57.32 %";}</style><script >"use strict";let AmountOfNonCompliantRules;let AmountOfCompliantRules;let TotalAmountOfRules;let QuantityCompliance;let TotalAmountOfSeverityRules;let AmountOfFailedSeverityRules;let SeverityCompliance;function startConditions(){    /* Default-Value: Display summary always at the beginning */    document.getElementById("summary").style.display = "block";        /* Default-Value: Disable all other tabs at the beginning */    document.getElementById("riskScore").style.display = "none";    document.getElementById("references").style.display = "none";    document.getElementById("settingsOverview").style.display = "none";    document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';    document.getElementById("riskScoreBtn").style.backgroundColor= 'transparent';    document.getElementById("referenceBtn").style.backgroundColor= 'transparent';    document.getElementById("settingsOverviewBtn").style.backgroundColor= 'transparent';    /* Initialize necessary variables */    AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent;    document.getElementById("AmountOfNonCompliantRules").hidden = true;    AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent;    document.getElementById("AmountOfCompliantRules").hidden = true;    TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent;    document.getElementById("TotalAmountOfRules").hidden = true;    QuantityCompliance = document.getElementById("QuantityCompliance").textContent;    document.getElementById("QuantityCompliance").hidden = true;    TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent;    document.getElementById("TotalAmountOfSeverityRules").hidden = true;    AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent;    document.getElementById("AmountOfFailedSeverityRules").hidden = true;    calcDotPosition();    let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse");    severityComplianceCollapseBtn.addEventListener("click", ()=>{        if(document.getElementById("severityDetails").style.display == "none"){            document.getElementById("severityDetails").style.display = "block";        }        else{            document.getElementById("severityDetails").style.display = "none";        }    })}function clickButton(value){    let buttonNumber = parseInt(value);    /* Disable all content */    let tabContents = document.getElementsByClassName('tabContent');    for(let i = 0; i < tabContents.length; i++){        tabContents.item(i).style.display = "none";    }    /* Disable all buttons */    let buttons = document.getElementsByClassName('navButton');    for(let i = 0; i < buttons.length; i++){        buttons.item(i).style.backgroundColor= 'transparent';    }    /* Re-Enable fitting content / button */    switch(buttonNumber){        case 1:            document.getElementById("summary").style.display = "block";            document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';        break;        case 2:            document.getElementById("riskScore").style.display = "block";            document.getElementById("riskScoreBtn").style.backgroundColor= '#ff9933';            calcDotPosition();        break;        case 3:            document.getElementById("references").style.display = "block";            document.getElementById("referenceBtn").style.backgroundColor= '#ff9933';        break;        case 4:            document.getElementById("settingsOverview").style.display = "block";            document.getElementById("settingsOverviewBtn").style.backgroundColor= '#ff9933';        break;    }}/* Calculate the position of the dot inside the risk matrix; Will be calleed, after the user has clicked on Risk Score Button*/function calcDotPosition(){    let dotRiskScoreTab = document.getElementById("dotRiskScoreTab");    let dotSummaryTab = document.getElementById("dotSummaryTab");    QuantityCompliance = parseFloat(QuantityCompliance);    let complianceValueQuantity = 0;    let complianceValueSeverity = 0;    /*low quantity compliance*/    if(85 < QuantityCompliance){        dotRiskScoreTab.style.gridColumnStart = 3;        dotSummaryTab.style.gridColumnStart = 3;        complianceValueQuantity = 1;    }    /*medium quantity compliance*/    else if(70 < QuantityCompliance && QuantityCompliance < 85){        dotRiskScoreTab.style.gridColumnStart = 4;        dotSummaryTab.style.gridColumnStart = 4;        complianceValueQuantity = 2;    }    /*high quantity compliance*/    else if(55 < QuantityCompliance && QuantityCompliance < 70){        dotRiskScoreTab.style.gridColumnStart = 5;        dotSummaryTab.style.gridColumnStart = 5;        complianceValueQuantity = 3;    }    /*critical quantity compliance*/    else{        dotRiskScoreTab.style.gridColumnStart = 6;        dotSummaryTab.style.gridColumnStart = 6;        complianceValueQuantity = 4;    }    SeverityCompliance = parseInt(AmountOfFailedSeverityRules);    /*low severity compliance*/    if(SeverityCompliance == 0){        dotRiskScoreTab.style.gridRowStart = 4;        dotSummaryTab.style.gridRowStart = 4;        complianceValueSeverity = 1;        document.getElementById("complianceStatus").id = 'complianceStatusTrue';    }    /*critical severity compliance*/    else{        dotRiskScoreTab.style.gridRowStart = 1;        dotSummaryTab.style.gridRowStart = 1;        complianceValueSeverity = 4;        document.getElementById("complianceStatus").id = 'complianceStatusFalse';    }    let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity);        let summary = "Current Risk Score on tested System: ";    let riskResult = document.createElement("p");    riskResult.style.display = "contents";    if(totalComplianceValue == 1){        riskResult.innerText = "Low";        riskResult.style.backgroundColor = "#548dd6";    }    else if(totalComplianceValue == 2){        riskResult.innerText = "Medium";        riskResult.style.backgroundColor = "#ffc000";    }    else if(totalComplianceValue == 3){        riskResult.innerText = "High";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "#cc0000";    }    else{        riskResult.innerText = "Critical";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "purple";    }    riskResult.style.display = "inline";    riskResult.style.padding = "5px 10px";    riskResult.style.borderRadius = "8px";    riskResult.style.fontWeight = "bold";    riskResult.style.margin = "auto";    let copyRiskResult = riskResult.cloneNode();    copyRiskResult.innerText  = riskResult.innerText;    document.getElementById("CurrentRiskScore").textContent = summary;    document.getElementById("CurrentRiskScore").appendChild(riskResult);    document.getElementById("CurrentRiskScoreRS").textContent = summary;    document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);}</script></head><body onload="startConditions()"><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >IIS 10 Benchmarks</h1></div><div class="main content"><div class="host-information"><div id="navigationButtons"><button onclick="clickButton('1')" class="navButton" type="button" id="summaryBtn">Benchmark Compliance</button><button onclick="clickButton('4')" class="navButton" type="button" id="settingsOverviewBtn">Settings Overview</button><button onclick="clickButton('3')" class="navButton" type="button" id="referenceBtn">About Us</button></div><div class="tabContent" id="settingsOverview"><h1 id="toc">Settings Overview</h1><h2 >Table Of Content</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#System-Report">System Report</a></li><li ><a href="#ApplicationHost">ApplicationHost</a></li><li ><a href="#Full-site-report-for:-Default-Web-Site">Full site report for: Default Web Site</a><ul ><li ><a href="#Full-site-report-for:-Default-Web-SiteReport-for:-/">Report for: /</a></li></ul></li></ul><section ><h1 id="System-Report"><span class="failed">System Report</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.5</td><td >Ensure 'unique application pools' is set for sites</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.7</td><td >Ensure 'passwordFormat' is not set to clear</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.8</td><td >Ensure 'credentials' are not stored in configuration files</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1</td><td >Ensure 'deployment method retail' is set</td><td >retail is not enabled in machine.config</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >3.5</td><td >Ensure ASP.NET stack tracing is not enabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.9</td><td >Ensure 'notListedIsapisAllowed' is set to false</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.10</td><td >Ensure 'notListedCgisAllowed' is set to false</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2</td><td >Ensure Advanced IIS logging is enabled</td><td >Advanced Logging is not available for IIS 10. See enhanced logging instead.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >6.1</td><td >Ensure FTP requests are encrypted</td><td >Skipped this benchmark - right now Web-Ftp-Server is not installed</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >6.2</td><td >Ensure FTP Logon attempt restrictions is enabled</td><td >Skipped this benchmark - right now Web-Ftp-Server is not installed</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >7.2</td><td >Ensure SSLv2 is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.3</td><td >Ensure SSLv3 is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.4</td><td >Ensure TLS 1.0 is disabled</td><td >TLS 1.0 is enabled</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7.5</td><td >Ensure TLS 1.1 is disabled</td><td >TLS 1.1 is enabled</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7.6</td><td >Ensure TLS 1.2 is enabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.7</td><td >Ensure NULL Cipher Suites is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.8</td><td >Ensure DES Cipher Suites is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.9.1</td><td >Ensure RC4 Cipher Suites is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.9.2</td><td >Ensure RC4 Cipher Suites is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.9.3</td><td >Ensure RC4 Cipher Suites is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.9.4</td><td >Ensure RC4 Cipher Suites is disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.10</td><td >Ensure AES 128/128 Cipher Suite is disabled</td><td >AES 128/128 Cipher Suite is still enabled</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7.11</td><td >Ensure AES 256/256 Cipher Suite is enabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.12.1</td><td >Ensure TLS Cipher Suite ordering is correctly configured</td><td >TLS Cipher Suite ordering does not match reference</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7.12.2</td><td >Ensure TLS Cipher Suite does not contain more ciphers</td><td >TLS Cipher Suite contains more ciphers</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="ApplicationHost"><span class="failed">ApplicationHost</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.3</td><td >Ensure 'directory browsing' is set to disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.6</td><td >Ensure 'application pool identity' is configured for anonymous user identity</td><td >Username is set to: IUSR</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.1</td><td >Ensure 'global authorization rule' is set to restrict access</td><td >URL Authorization is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.2</td><td >Ensure access to sensitive site features is restricted to authenticated principals only</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3</td><td >Ensure 'forms authentication' require SSL</td><td >Forms authentication is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.4</td><td >Ensure 'forms authentication' is set to use cookies</td><td >Forms authentication is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.5</td><td >Ensure 'cookie protection mode' is configured for forms authentication</td><td >Forms authentication is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.7</td><td >Ensure 'passwordFormat' is not set to clear</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.8</td><td >Ensure 'credentials' are not stored in configuration files</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.2</td><td >Ensure 'debug' is turned off</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.3</td><td >Ensure custom error messages are not off</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.4</td><td >Ensure IIS HTTP detailed errors are hidden from displaying remotely</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.5</td><td >Ensure ASP.NET stack tracing is not enabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.6</td><td >Ensure 'httpcookie' mode is configured for session state</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1</td><td >Ensure 'maxAllowedContentLength' is configured</td><td >All Good
+ maxContentLength: 30000000</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2</td><td >Ensure 'maxURL request filter' is configured</td><td >All Good
+ maxURLRequestFilter: 4096</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3</td><td >Ensure 'MaxQueryString request filter' is configured</td><td >All Good
+ maxQueryStringRequestFilter: 2048</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.4</td><td >Ensure non-ASCII characters in URLs are not allowed</td><td >non-ASCII characters in URLs are allowed</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.5</td><td >Ensure Double-Encoded requests will be rejected</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.6</td><td >Ensure 'HTTP Trace Method' is disabled</td><td >HTTP Trace Method is not filtered</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.7</td><td >Ensure Unlisted File Extensions are not allowed</td><td >Unlisted file extensions allowed</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.8</td><td >Ensure Handler is not granted Write and Script/Execute</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.1</td><td >Ensure HSTS Header is set</td><td >HSTS Header not set</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Full-site-report-for:-Default-Web-Site"><span class="failed">Full site report for: Default Web Site</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1</td><td >Ensure web content is on non-system partition</td><td >Web content is on system partition</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.2</td><td >Ensure 'host headers' is set</td><td >The following bindings do no specify a host: *:80:</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.4</td><td >Ensure 'application pool identity' is configured</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.6</td><td >Ensure transport layer security for 'basic authentication' is configured</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.8</td><td >Ensure 'MachineKey validation method - .Net 3.5' is configured</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.9</td><td >Ensure 'MachineKey validation method - .Net 4.5' is configured</td><td >Validation set to SHA1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >3.10</td><td >Ensure global .NET trust level is configured</td><td >This only applies to .Net 2.0. Future versions have stopped supporting this feature.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >4.11</td><td >Ensure 'Dynamic IP Address Restrictions' is enabled</td><td >"IP and Domain Restrictions" must be installed to enabled "Dynamic IP Address Restrictions"</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.1</td><td >Ensure Default IIS web log location is moved</td><td >Logfile location is on system drive: C:\inetpub\logs\LogFiles</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.3</td><td >Ensure 'ETW Logging' is enabled</td><td >ETW Logging disabled</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table><section ><h1 id="Full-site-report-for:-Default-Web-SiteReport-for:-/"><span class="failed">Report for: /</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.3</td><td >Ensure 'directory browsing' is set to disabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.6</td><td >Ensure 'application pool identity' is configured for anonymous user identity</td><td >Username is set to: IUSR</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.1</td><td >Ensure 'global authorization rule' is set to restrict access</td><td >URL Authorization is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.2</td><td >Ensure access to sensitive site features is restricted to authenticated principals only</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3</td><td >Ensure 'forms authentication' require SSL</td><td >Forms authentication is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.4</td><td >Ensure 'forms authentication' is set to use cookies</td><td >Forms authentication is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.5</td><td >Ensure 'cookie protection mode' is configured for forms authentication</td><td >Forms authentication is not installed</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >2.7</td><td >Ensure 'passwordFormat' is not set to clear</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.8</td><td >Ensure 'credentials' are not stored in configuration files</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.2</td><td >Ensure 'debug' is turned off</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.3</td><td >Ensure custom error messages are not off</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.4</td><td >Ensure IIS HTTP detailed errors are hidden from displaying remotely</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.5</td><td >Ensure ASP.NET stack tracing is not enabled</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.6</td><td >Ensure 'httpcookie' mode is configured for session state</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.7</td><td >Ensure 'cookies' are set with HttpOnly attribute</td><td >httpOnlyCookies set to False</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.1</td><td >Ensure 'maxAllowedContentLength' is configured</td><td >All Good
+ maxContentLength: 30000000</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2</td><td >Ensure 'maxURL request filter' is configured</td><td >All Good
+ maxURLRequestFilter: 4096</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3</td><td >Ensure 'MaxQueryString request filter' is configured</td><td >All Good
+ maxQueryStringRequestFilter: 2048</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.4</td><td >Ensure non-ASCII characters in URLs are not allowed</td><td >non-ASCII characters in URLs are allowed</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.5</td><td >Ensure Double-Encoded requests will be rejected</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.6</td><td >Ensure 'HTTP Trace Method' is disabled</td><td >HTTP Trace Method is not filtered</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.7</td><td >Ensure Unlisted File Extensions are not allowed</td><td >Unlisted file extensions allowed</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.8</td><td >Ensure Handler is not granted Write and Script/Execute</td><td >All Good</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7.1</td><td >Ensure HSTS Header is set</td><td >HSTS Header not set</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="summary"><h1 >Benchmark Compliance</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>5.2</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Does your system show low benchmark compliance? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >CIS Microsoft IIS 10 Benchmark, Version: 1.1.0, Date: 12-11-2018</li></ul><p >This report was generated on 09/05/2022 05:28:18 on WIN-T74AI7HCI62 with ATAPHtmlReport version 1.8.</p></p><div id="systemData"><h2 >System information</h2><table id="summaryTable"><tbody ><tr ><th scope="row">Hostname</th><td >WIN-T74AI7HCI62</td></tr><tr ><th scope="row">Domain role</th><td >Standalone Server</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows Server 2022 Standard Evaluation</td></tr><tr ><th scope="row">Build Number</th><td >20348</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr><tr ><th scope="row">Free disk space (GB)</th><td >7.9</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >13.5%  (0.5 GB / 3.8 GB)</td></tr></tbody></table></div><div id="riskMatrixSummaryArea"><h2 id="CurrentRiskScore">Current Risk Score on tested System:</h2><h2 id="invalidOS">N/A</h2><h3 >Risk Score calculation implemented for Microsoft Windows OS for now.</h3><div id="riskMatrixSummary"><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div></div><h1 style="clear:both;"></h1><p >A total of 82 tests have been executed.</p><div class="gauge"><div title="True 47 test(s), 57.32%" style="width: 57.32%" class="gauge-meter passed"></div><div title="False 23 test(s), 28.05%" style="width: 28.05%" class="gauge-meter failed"></div><div title="Warning 8 test(s), 9.76%" style="width: 9.76%" class="gauge-meter warning"></div><div title="None 4 test(s), 4.88%" style="width: 4.88%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 47 test(s) &#x2259; 57.32%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 23 test(s) &#x2259; 28.05%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 8 test(s) &#x2259; 9.76%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 4 test(s) &#x2259; 4.88%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">System Report</h2><p >A total of 25 tests have been executed in section System Report.</p><div class="gauge"><div title="True 16 test(s), 64.00%" style="width: 64.00%" class="gauge-meter passed"></div><div title="False 6 test(s), 24.00%" style="width: 24.00%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 3 test(s), 12.00%" style="width: 12.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 16 test(s) &#x2259; 64.00%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 6 test(s) &#x2259; 24.00%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 3 test(s) &#x2259; 12.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">ApplicationHost</h2><p >A total of 23 tests have been executed in section ApplicationHost.</p><div class="gauge"><div title="True 14 test(s), 60.87%" style="width: 60.87%" class="gauge-meter passed"></div><div title="False 5 test(s), 21.74%" style="width: 21.74%" class="gauge-meter failed"></div><div title="Warning 4 test(s), 17.39%" style="width: 17.39%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 14 test(s) &#x2259; 60.87%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 5 test(s) &#x2259; 21.74%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 4 test(s) &#x2259; 17.39%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">Full site report for: Default Web Site</h2><p >A total of 34 tests have been executed in section Full site report for: Default Web Site.</p><div class="gauge"><div title="True 17 test(s), 50.00%" style="width: 50.00%" class="gauge-meter passed"></div><div title="False 12 test(s), 35.29%" style="width: 35.29%" class="gauge-meter failed"></div><div title="Warning 4 test(s), 11.76%" style="width: 11.76%" class="gauge-meter warning"></div><div title="None 1 test(s), 2.94%" style="width: 2.94%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 17 test(s) &#x2259; 50.00%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 12 test(s) &#x2259; 35.29%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 4 test(s) &#x2259; 11.76%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 2.94%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol></div><div class="tabContent" id="riskScore"><h1 >Risk Score</h1><p >To get a quick overview of how risky the tested system is, the Risk Score is used. This is made up of the areas "Severity" and "Quantity". The higher risk is used as the overall risk.</p><h2 id="CurrentRiskScoreRS">Current Risk Score on tested System: </h2><div id="riskMatrixContainer"><div id="dotRiskScoreTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div><div id="calculationTables"><h3 class="calculationTablesText">Risk Score Calculation</h3><p class="calculationTablesText">The calculation of the Risk Score is based on the set of compliant rules at the quantity level and also at the severity level.</p><table id="quantityTable"><tr ><th >Compliance to Benchmarks (Quantity)</th><th >Risk Assessment</th></tr><tr ><td >More than 85%</td><td >Low</td></tr><tr ><td >Between 70% and 85%</td><td >Medium</td></tr><tr ><td >Between 55% and 70%</td><td >High</td></tr><tr ><td >Less than 55%</td><td >Critical</td></tr></table><table id="severityTable"><tr ><th >Compliance to Benchmarks (Severity)</th><th >Risk Assessment</th></tr><tr ><td >All critical settings compliant</td><td >Low</td></tr><tr ><td >1 or more incompliant setting(s)</td><td >Critical</td></tr></table></div><div id="severityCompliance"><p id="complianceStatus">Severity Compliance</p><span class="sectionAction collapseButton" id="severityComplianceCollapse">-</span><table id="severityDetails"><tr ><th >Id</th><th >Task</th><th >Status</th></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 A</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 40/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 B</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 56/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 C</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 64/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 D</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 128/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.48.11</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.58.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.58.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td ><span class="severityResultFalse">False</span></td></tr></table></div></div><div class="tabContent" id="references"><h1 >About us</h1><h2 >What makes FB Pro GmbH different</h2><h3 >What do we want?</h3><p >Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet.</p><h3 >How we achieve this? </h3><p >We implement in-depth IT security for our customers. And we always do so in a state-of-the-art, efficient and automated manner.</p><div id="referencesContainer"><div ><h2 >Check out our hardening solution</h2><a href="https://www.fb-pro.com/enforce-administrator-product/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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"></img></a></div><div ><h2 >Check out our Audit Report Tool here</h2><a href="https://www.fb-pro.com/audit-tap-product-information/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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
+									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
+									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
+									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"></img></a></div></div></div></div></div><script type="text/javascript">						function collapseHandler(e) {
+							var targetSection = e.target.parentElement.parentElement;
+							if (targetSection.classList.toggle('collapsed')) {
+								e.target.innerText = '+';
+							} else {
+								e.target.innerText = '-';
+							}
+						}
+						var collapseButtons = document.getElementsByClassName("collapseButton");
+						for (var i = 0; i < collapseButtons.length; i++) {
+							collapseButtons[i].addEventListener('click', collapseHandler);
+						}</script></body></body></html> 
diff --git a/Samples/Microsoft Windows 10 All.html b/Samples/Microsoft Windows 10 All.html
new file mode 100644
index 0000000..c3b008d
--- /dev/null
+++ b/Samples/Microsoft Windows 10 All.html	
@@ -0,0 +1,35 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows 10 Report [12/07/2022 10:32:32]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	/*display: block;*/	font-family: Arial, sans-serif;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	margin-left: 8%;	margin-right: 8%;	width: 90%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;	background-color: lightgray;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 50%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}#navigationButtons{	margin-top: 15px;	display: grid;	grid-template-rows: 50px;	grid-template-columns: repeat(5,160px);}button{	margin-left: 10px;	border-radius: 8px;	font-weight: bold;}#riskScore{	font-family: Arial, sans-serif;	text-align: center;}#riskMatrixContainer{	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	left: 10%;	float: left;	margin-top: 50px;	text-align: center;}#riskMatrixContainer div{	border: 1px solid black;}#severity{	grid-column-start: 1;	grid-column-end: 2;	grid-row-start: 1;	grid-row-end: 6;	position: relative;}#quantity{	grid-column-start: 2;	grid-column-end: 7;	grid-row-start: 6;	grid-row-end: 7;	position: relative;}#severityArea{	text-align: center;	position: absolute;	margin: 0;	top:50%;	left: 20%;}#quantityArea{    text-align: center;    position: absolute;    margin: 0;    top: 35%;    left: 40%;}#severityCritical{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 1;	grid-row-end: 2;	padding-top: 20px;}#severityHigh{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 2;	grid-row-end: 3;	padding-top: 20px;}#severityMedium{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 3;	grid-row-end: 4;	padding-top: 20px;}#severityLow{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 4;	grid-row-end: 5;	padding-top: 20px;}#quantityCritical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityHigh{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityMedium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityLow{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#riskMatrixContainer:nth-child(10){	position: relative;}#riskMatrixSummary:nth-child(10){	position: relative;}/* Color for each Risk */#medium_medium, #medium_low, #low_medium{	background-color: #ffc000;}#high_low, #high_medium, #high_high, #medium_high, #low_high{	background-color: red;}#critical_low, #critical_medium, #critical_high, #critical_critical, #high_critical, #medium_critical, #low_critical{	background-color: purple;}/* Low Risk */#low_low{	background-color: #548dd6;	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 4;	grid-row-end: 5;}/* Medium Risk */#medium_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 3;	grid-row-end: 4;}#medium_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 3;	grid-row-end: 4;}#low_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 4;	grid-row-end: 5;}/* High Risk*/#high_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 2;	grid-row-end: 3;}#high_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 2;	grid-row-end: 3;}#high_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 2;	grid-row-end: 3;}#medium_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 3;	grid-row-end: 4;}#low_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 4;	grid-row-end: 5;}/* Critical Risk */#critical_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 1;	grid-row-end: 2;}#critical_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 1;	grid-row-end: 2;}#critical_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 1;	grid-row-end: 2;}#critical_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 1;	grid-row-end: 2;}#high_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 2;	grid-row-end: 3;}#medium_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 3;	grid-row-end: 4;}#low_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 4;	grid-row-end: 5;}#severityDetails{	margin-left: 8%;    margin-top: 30px;    border: 1px solid #d2d2d2;    margin-right: 8%;    float: right;	margin-bottom: 40px;}#severityDetails td{	border: 1px solid #d2d2d2;}#calculationTables{	float: right;    position: relative;}.calculationTablesText{	text-align: left;	font-family: Arial, sans-serif;}#riskScore th{	background-color: lightgray;}#riskScore tr:nth-child(2n) td{	background-color: #efefef;}#riskMatrixSummary{	font-family: Arial, sans-serif;	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	right: 10%;	float:right;}#riskMatrixSummary div{	border: 1px solid black;}#riskMatrixSummaryArea{	float: right;	text-align: center;	margin-right: 10%;}#systemData{	float:right;	margin-right: 30%;    text-align: left;}#dotRiskScoreTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#dotSummaryTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#quantityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}#severityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}.severityResultFalse{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #cc0000; }.severityResultTrue{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #33cca6;}.severityResultNone, .severityResultError{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.severityResultWarning{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	background-color: #ff9933;	color: #000;}.tabContent#riskScore{	text-align: left;}#severityCompliance{	margin-top: 25%;	clear: both;}#complianceStatusFalse{	padding: 5px 10px;    border-radius: 8px;	background-color: #cc0000;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#complianceStatusTrue{	padding: 5px 10px;    border-radius: 8px;	background-color: #33cca6;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#referencesContainer{	display: grid;	grid-template-rows: 280px;    grid-template-columns: repeat(2, 500px);}#referencesContainer div{	text-align: center;	margin-left: auto;	margin-right: auto;}#settingsOverview section{	margin-left: 5%;	margin-right: 5%;}#invalidOS{	display: inline;    padding: 5px 10px;    border-radius: 8px;    font-weight: bold;    margin: auto;    background-color: #777777;}#references p, #summary p, #settingsOverview p{	font-family: Arial, sans-serif;} #foundationData p{	font-family: Arial, sans-serif;}#foundationData section{	margin-left: 5%;	margin-right: 5%;}#contactUsButton{	background-color: #A81A1B;	border-radius: 4px;	padding: 20px;	color: #fff;	box-shadow: 2px 2px rgba(0,0,0,0.5);	display: inline-block;	margin-top: 20px;	text-transform: uppercase;	border-style: none;	cursor: pointer;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(289.548deg); transform: rotate(289.548deg);}.donut-chart.chart .chart-center span:after {content: "80.43 %";}</style><script >"use strict";let AmountOfNonCompliantRules;let AmountOfCompliantRules;let TotalAmountOfRules;let QuantityCompliance;let TotalAmountOfSeverityRules;let AmountOfFailedSeverityRules;let SeverityCompliance;function startConditions(){    /* Default-Value: Display summary always at the beginning */    document.getElementById("summary").style.display = "block";        /* Default-Value: Disable all other tabs at the beginning */    document.getElementById("foundationData").style.display = "none";    document.getElementById("riskScore").style.display = "none";    document.getElementById("references").style.display = "none";    document.getElementById("settingsOverview").style.display = "none";    document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';    document.getElementById("foundationDataBtn").style.backgroundColor = 'transparent';    document.getElementById("riskScoreBtn").style.backgroundColor= 'transparent';    document.getElementById("referenceBtn").style.backgroundColor= 'transparent';    document.getElementById("settingsOverviewBtn").style.backgroundColor= 'transparent';    /* Initialize necessary variables */    AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent;    document.getElementById("AmountOfNonCompliantRules").hidden = true;    AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent;    document.getElementById("AmountOfCompliantRules").hidden = true;    TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent;    document.getElementById("TotalAmountOfRules").hidden = true;    QuantityCompliance = document.getElementById("QuantityCompliance").textContent;    document.getElementById("QuantityCompliance").hidden = true;    TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent;    document.getElementById("TotalAmountOfSeverityRules").hidden = true;    AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent;    document.getElementById("AmountOfFailedSeverityRules").hidden = true;    calcDotPosition();    let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse");    severityComplianceCollapseBtn.addEventListener("click", ()=>{        if(document.getElementById("severityDetails").style.display == "none"){            document.getElementById("severityDetails").style.display = "block";        }        else{            document.getElementById("severityDetails").style.display = "none";        }    })}let buttonNumber;function clickButton(value){    buttonNumber = parseInt(value);    /* Disable all content */    let tabContents = document.getElementsByClassName('tabContent');    for(let i = 0; i < tabContents.length; i++){        tabContents.item(i).style.display = "none";    }    /* Disable all buttons */    let buttons = document.getElementsByClassName('navButton');    for(let i = 0; i < buttons.length; i++){        buttons.item(i).style.backgroundColor= 'transparent';    }    /* Re-Enable fitting content / button */    switch(buttonNumber){        case 1:            document.getElementById("summary").style.display = "block";            document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';        break;        case 2:            document.getElementById("riskScore").style.display = "block";            document.getElementById("riskScoreBtn").style.backgroundColor= '#ff9933';            calcDotPosition();        break;        case 3:            document.getElementById("references").style.display = "block";            document.getElementById("referenceBtn").style.backgroundColor= '#ff9933';        break;        case 4:            document.getElementById("settingsOverview").style.display = "block";            document.getElementById("settingsOverviewBtn").style.backgroundColor= '#ff9933';        break;        case 5:            document.getElementById("foundationData").style.display = "block";            document.getElementById("foundationDataBtn").style.backgroundColor= '#ff9933';        break;    }}/* Calculate the position of the dot inside the risk matrix; Will be calleed, after the user has clicked on Risk Score Button*/function calcDotPosition(){        let dotRiskScoreTab = document.getElementById("dotRiskScoreTab");    let dotSummaryTab = document.getElementById("dotSummaryTab");    QuantityCompliance = parseFloat(QuantityCompliance);    let complianceValueQuantity = 0;    let complianceValueSeverity = 0;    /*low quantity compliance*/    if(80 < QuantityCompliance){        dotRiskScoreTab.style.gridColumnStart = 3;        dotSummaryTab.style.gridColumnStart = 3;        complianceValueQuantity = 1;    }    /*medium quantity compliance*/    else if(65 < QuantityCompliance && QuantityCompliance < 80){        dotRiskScoreTab.style.gridColumnStart = 4;        dotSummaryTab.style.gridColumnStart = 4;        complianceValueQuantity = 2;    }    /*high quantity compliance*/    else if(50 < QuantityCompliance && QuantityCompliance < 65){        dotRiskScoreTab.style.gridColumnStart = 5;        dotSummaryTab.style.gridColumnStart = 5;        complianceValueQuantity = 3;    }    /*critical quantity compliance*/    else{        dotRiskScoreTab.style.gridColumnStart = 6;        dotSummaryTab.style.gridColumnStart = 6;        complianceValueQuantity = 4;    }    SeverityCompliance = parseInt(AmountOfFailedSeverityRules);    /*low severity compliance*/    if(SeverityCompliance == 0){        dotRiskScoreTab.style.gridRowStart = 4;        dotSummaryTab.style.gridRowStart = 4;        complianceValueSeverity = 1;                document.getElementById("complianceStatus").style.padding = "5px 10px";        document.getElementById("complianceStatus").style.borderRadius = "8px";        document.getElementById("complianceStatus").style.backgroundColor = "#33cca6";        document.getElementById("complianceStatus").style.color = "#fff";        document.getElementById("complianceStatus").style.marginLeft = "6%";        document.getElementById("complianceStatus").style.fontWeight = "bold";        document.getElementById("complianceStatus").style.display = "inline";    }    /*critical severity compliance*/    else{        dotRiskScoreTab.style.gridRowStart = 1;        dotSummaryTab.style.gridRowStart = 1;        complianceValueSeverity = 4;        document.getElementById("complianceStatus").style.padding = "5px 10px";        document.getElementById("complianceStatus").style.borderRadius = "8px";        document.getElementById("complianceStatus").style.backgroundColor = "#cc0000";        document.getElementById("complianceStatus").style.color = "#fff";        document.getElementById("complianceStatus").style.marginLeft = "6%";        document.getElementById("complianceStatus").style.fontWeight = "bold";        document.getElementById("complianceStatus").style.display = "inline";    }    let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity);        let summary = "Current Risk Score on tested System: ";    let riskResult = document.createElement("p");    riskResult.style.display = "contents";    if(totalComplianceValue == 1){        riskResult.innerText = "Low";        riskResult.style.backgroundColor = "#548dd6";    }    else if(totalComplianceValue == 2){        riskResult.innerText = "Medium";        riskResult.style.backgroundColor = "#ffc000";    }    else if(totalComplianceValue == 3){        riskResult.innerText = "High";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "#cc0000";    }    else{        riskResult.innerText = "Critical";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "purple";    }    riskResult.style.display = "inline";    riskResult.style.padding = "5px 10px";    riskResult.style.borderRadius = "8px";    riskResult.style.fontWeight = "bold";    riskResult.style.margin = "auto";    let copyRiskResult = riskResult.cloneNode();    copyRiskResult.innerText  = riskResult.innerText;    document.getElementById("CurrentRiskScore").textContent = summary;    document.getElementById("CurrentRiskScore").appendChild(riskResult);    document.getElementById("CurrentRiskScoreRS").textContent = summary;    document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);}</script></head><body onload="startConditions()"><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows 10 Report</h1></div><div class="main content"><div class="host-information"><div id="navigationButtons"><button onclick="clickButton('1')" class="navButton" type="button" id="summaryBtn">Benchmark Compliance</button><button onclick="clickButton('5')" class="navButton" type="button" id="foundationDataBtn">Security Base Data</button><button onclick="clickButton('4')" class="navButton" type="button" id="settingsOverviewBtn">Hardening Settings</button><button onclick="clickButton('3')" class="navButton" type="button" id="referenceBtn">About Us</button></div><div class="tabContent" id="settingsOverview"><h1 id="toc">Hardening Settings</h1><h2 >Table Of Contents</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#CIS-Benchmarks">CIS Benchmarks</a><ul ><li ><a href="#CIS-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#CIS-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#CIS-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#CIS-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#DISA-Recommendations">DISA Recommendations</a><ul ><li ><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#DISA-RecommendationsUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#DISA-RecommendationsAccount-Policies">Account Policies</a></li><li ><a href="#DISA-RecommendationsWindows-Features">Windows Features</a></li><li ><a href="#DISA-RecommendationsFile-System-Permissions">File System Permissions</a></li><li ><a href="#DISA-RecommendationsRegistry-Permissions">Registry Permissions</a></li></ul></li><li ><a href="#CyberGovAu-Benchmarks">CyberGovAu Benchmarks</a><ul ><li ><a href="#CyberGovAu-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#CyberGovAu-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#CyberGovAu-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#CyberGovAu-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#Microsoft-Benchmarks">Microsoft Benchmarks</a><ul ><li ><a href="#Microsoft-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#Microsoft-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#Microsoft-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-Logging">BSI Benchmarks SiSyPHuS Logging</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HD">BSI Benchmarks SiSyPHuS HD</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDSecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-ND">BSI Benchmarks SiSyPHuS ND</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDSecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NE">BSI Benchmarks SiSyPHuS NE</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NESecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI">BSI Benchmarks SiSyPHus-BSI</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHus--BSIRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-Bundespolizei">BSI Benchmarks SiSyPHus-BSI Bundespolizei</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><h2 >Benchmark Details</h2><section ><h1 id="CIS-Benchmarks"><span class="failed">CIS Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the CIS Benchmark results.</p><section ><h1 id="CIS-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.6</td><td >(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.1.2</td><td >(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.1.4</td><td >(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.2.1</td><td >(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.2.2</td><td >(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.4.1</td><td >(L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.4.2</td><td >(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.1</td><td >(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.2</td><td >(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.3</td><td >(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.4</td><td >(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.5</td><td >(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.6</td><td >(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.1</td><td >(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.2</td><td >(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.3</td><td >(BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.4</td><td >(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.5</td><td >(L1) Configure 'Interactive logon: Message text for users attempting to log on'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.6</td><td >(L1) Configure 'Interactive logon: Message title for users attempting to log on'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.7</td><td >(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.8</td><td >(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.9</td><td >(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.1</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.2</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.3</td><td >(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.1</td><td >(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.2</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.3</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.4</td><td >(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.5</td><td >(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.1</td><td >(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.2</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.3</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.4</td><td >(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.5</td><td >(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.6</td><td >(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.7</td><td >(L1) Ensure 'Network access: Remotely accessible registry paths' is configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.8</td><td >(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.9</td><td >(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.10</td><td >(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.11</td><td >(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.12</td><td >(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.1</td><td >(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.2</td><td >(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.3</td><td >(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.7</td><td >(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.8</td><td >(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.9</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.10</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.14.1</td><td >(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.1</td><td >(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.2</td><td >(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.1</td><td >(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.2</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.3</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.4</td><td >(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.5</td><td >(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.6</td><td >(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.7</td><td >(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.8</td><td >(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1</td><td >(L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.2</td><td >(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.3</td><td >(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.4</td><td >(L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5</td><td >(L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.6</td><td >(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.7</td><td >(L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.8</td><td >(L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.9</td><td >(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.10</td><td >(L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.11</td><td >(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.12</td><td >(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.13</td><td >(L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.14</td><td >(L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.15</td><td >(L2) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.16</td><td >(L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.17</td><td >(L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.18</td><td >(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled'</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.19</td><td >(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.20</td><td >(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.21</td><td >(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.22</td><td >(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.23</td><td >(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.24</td><td >(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.25</td><td >(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.26</td><td >(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.27</td><td >(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.28</td><td >(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.29</td><td >(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.30</td><td >(L1) Ensure 'Special Administration Console Helper (sacsvr)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.31</td><td >(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.32</td><td >(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.33</td><td >(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.34</td><td >(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.35</td><td >(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.36</td><td >(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.37</td><td >(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.38</td><td >(L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.39</td><td >(L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.40</td><td >(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.41</td><td >(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.42</td><td >(L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.43</td><td >(L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.44</td><td >(L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.45</td><td >(L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.1</td><td >(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.2</td><td >(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.3</td><td >(L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.4</td><td >(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.5</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.6</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.1</td><td >(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.2</td><td >(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.3</td><td >(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.4</td><td >(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.5</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.6</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.7</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.8</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.1</td><td >(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.2</td><td >(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.3</td><td >(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.4</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.5</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.6</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.7</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.8</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.9</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.10</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.1.1</td><td >(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.1.2</td><td >(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.2.2</td><td >(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.3</td><td >(L2) Ensure 'Allow Online Tips' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.2</td><td >(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.3</td><td >(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.4</td><td >(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.5</td><td >(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.6</td><td >(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.1</td><td >(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.2</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.4</td><td >(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.5</td><td >(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled' (Automated)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.6</td><td >(L1) Set 'NetBIOS node type' to 'P-node' (Ensure NetBT Parameter 'NodeType' is set to '0x2 (2)')</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.7</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.1</td><td >(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.2</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.3</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.4</td><td >(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.5</td><td >(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.6</td><td >(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.7</td><td >(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.8</td><td >(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.9</td><td >(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.10</td><td >(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.11</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.12</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.13</td><td >(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.4.1</td><td >(L1) Ensure 'Configure DNS over HTTPS (DoH) name resolution'  is set to 'Enabled: Allow DoH' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.4.2</td><td >(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.5.1</td><td >(L2) Ensure 'Enable Font Providers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.8.1</td><td >(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 A</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 B</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 C</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO),</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 D</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 A</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnDomain)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 B</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnPublicNet)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 C</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 D</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (ProhibitRspndrOnPrivateNet)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.10.2</td><td >(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.11.2</td><td >(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.11.3</td><td >(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.11.4</td><td >(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.14.1 A</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.14.1 B</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.19.2.1</td><td >(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.20.1</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.20.2</td><td >(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.21.1</td><td >(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.21.2</td><td >(L1) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.23.2.1</td><td >(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.6.1</td><td >(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.7.1.1</td><td >(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.3.1</td><td >(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.4.1</td><td >(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.4.2</td><td >(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.1</td><td >(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.2</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot and DMA Protection'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.3</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.4</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.5</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.6</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.1</td><td >(BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.7.1.2</td><td >(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.3</td><td >(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.7.1.4</td><td >(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.5</td><td >(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.6</td><td >(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.2</td><td >(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled' (Automated)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.14.1</td><td >(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.2</td><td >(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.3</td><td >(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.4</td><td >(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.5</td><td >(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.1</td><td >(L2) Ensure 'Turn off access to the Store' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.2</td><td >(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.3</td><td >(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.4</td><td >(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.5</td><td >(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.6</td><td >(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.7</td><td >(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.8</td><td >(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.9</td><td >(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.10</td><td >(L2) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.11</td><td >(L2) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.12</td><td >(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.13</td><td >(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.14 A</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.14 B</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'</td><td >Registry value is '0'. Expected: x == 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.25.1 A</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.25.1 B</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.26.1</td><td >(BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.27.1</td><td >(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.1</td><td >(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.2</td><td >(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.3</td><td >(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.4</td><td >(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.5</td><td >(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.6</td><td >(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.7</td><td >(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.31.1</td><td >(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.31.2</td><td >(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.1</td><td >(L1) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.2</td><td >(L1) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.3</td><td >(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.4</td><td >(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.5</td><td >(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.6</td><td >(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.36.1</td><td >(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.36.2</td><td >(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.37.1</td><td >(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.37.2</td><td >(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.48.5.1</td><td >(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.48.11.1</td><td >(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.50.1</td><td >(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.53.1.1</td><td >(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.53.1.2</td><td >(L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.4.1</td><td >(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.4.2</td><td >(L1) Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.5.1</td><td >(L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.6.1</td><td >(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.6.2</td><td >(L2) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.8.1</td><td >(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.8.2</td><td >(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.8.3</td><td >(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.10.1.1</td><td >(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.1</td><td >(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.2</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.3</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.4</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.5</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.6</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.7</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.8</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.9</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.10</td><td >(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.11</td><td >(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.12</td><td >(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.13</td><td >(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.1</td><td >(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.2</td><td >(BL) Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.3</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.4</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.5</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.6</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.7</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.8</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.9</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.10</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.11</td><td >(BL) Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.12</td><td >(BL) Ensure 'Configure use of passwords for operating system drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.13</td><td >(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.14</td><td >(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.1</td><td >(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.2</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.11.3.3</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.4</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.11.3.5</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.6</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.7</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.8</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.9</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.10</td><td >(BL) Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.11</td><td >(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.11.3.12</td><td >(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.13</td><td >(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.14</td><td >(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.15</td><td >(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.4</td><td >(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.12.1</td><td >(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.14.1</td><td >(L1) Ensure 'Turn off cloud consumer account state content' is  set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.14.2</td><td >(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.14.3</td><td >(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.15.1</td><td >(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.16.1</td><td >(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.16.2</td><td >(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.16.3</td><td >(L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.1</td><td >(L1) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only]' or 'Enabled: 1 - Basic'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.2</td><td >(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.3</td><td >(L1) Ensure 'Disable OneSettings Downloads' is enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.4</td><td >(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.5</td><td >(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.6</td><td >(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.7</td><td >(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.8</td><td >(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.18.1</td><td >(L1) Ensure 'Download Mode' is NOT set to 'Enabled: Internet'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.1.1</td><td >(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.1.2</td><td >(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.2.1</td><td >(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.2.2</td><td >(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.3.1</td><td >(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.3.2</td><td >(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.4.1</td><td >(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.4.2</td><td >(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.31.2</td><td >(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.31.3</td><td >(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.31.4</td><td >(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.36.1</td><td >(L1) Ensure 'Prevent the computer from joining a homegroup' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.41.1</td><td >(L2) Ensure 'Turn off location' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.45.1</td><td >(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.46.1</td><td >(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.4.1</td><td >(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.4.2</td><td >(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.1</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.3.1</td><td >(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.6.1</td><td >(L2) Ensure 'Enable file hash computation feature' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.1</td><td >(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.3</td><td >(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.4</td><td >(L1) Ensure 'Turn on script scanning' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.11.1</td><td >(L2) Ensure 'Configure Watson events' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.12.1</td><td >(L1) Ensure 'Scan removable drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.12.2</td><td >(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.15</td><td >(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.16</td><td >(L1) Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.1</td><td >(NG) Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.2</td><td >(NG) Ensure 'Allow camera and microphone access in Windows Defender Application Guard' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.3</td><td >(NG) Ensure 'Allow data persistence for Windows Defender Application Guard' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.4</td><td >(NG) Ensure 'Allow files to download and save to the host operating system from Windows Defender Application Guard' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.5</td><td >(NG) Ensure 'Configure Windows Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.6</td><td >(NG) Ensure 'Turn on Windows Defender Application Guard in Enterprise Mode' is set to 'Enabled: 1'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.57.1</td><td >(L2) Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.58.1</td><td >(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.64.1</td><td >(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.2.2</td><td >(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.2.1</td><td >(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.1</td><td >(L2) Ensure 'Allow UI Automation redirection' is set to  'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.2</td><td >(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.3</td><td >(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.4</td><td >(L2) Ensure 'Do not allow location redirection' is set to  'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.5</td><td >(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.6</td><td >(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.1</td><td >(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.2</td><td >(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.3</td><td >(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.4</td><td >(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.5</td><td >(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.11.1</td><td >(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.66.1</td><td >(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.2</td><td >(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.3</td><td >(L1) Ensure 'Allow Cortana' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.4</td><td >(L1) Ensure 'Allow Cortana above lock screen' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.5</td><td >(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.6</td><td >(L1) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.72.1</td><td >(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.1</td><td >(L2) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.75.2</td><td >(L1) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.3</td><td >(L1) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.4</td><td >(L1) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.5</td><td >(L2) Ensure 'Turn off the Store application' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.81.1</td><td >(L1) Ensure 'Allow widgets' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.1.1 A</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.1.1 B</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.2.1</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.2.2</td><td >(L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled' (PreventOverride).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.87.1</td><td >(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.89.1</td><td >(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.89.2</td><td >(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled' but not 'Enabled: On'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.90.1</td><td >(L1) Ensure 'Allow user control over installs' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.90.2</td><td >(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (LocalMachine)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.90.3</td><td >(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.91.1</td><td >(L1) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.100.1</td><td >(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.100.2</td><td >(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.1.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.1.2</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.1.3</td><td >(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.2.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.2.2</td><td >(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.3</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.2.4</td><td >(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.103.1</td><td >(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.104.1</td><td >(L1) Ensure 'Allow clipboard sharing with Windows Sandbox' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.104.2</td><td >(L1) Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.105.2.1</td><td >(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.1.1</td><td >(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.2.1</td><td >(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.2.2</td><td >(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.2.3</td><td >(L1) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.1</td><td >(L1) Ensure 'Manage preview builds' is set to 'Disabled'  (Automated)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.2 A</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.2 B</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days' (DeferFeatureUpdatesPeriodInDays)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.3 A</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days'. (DeferQualityUpdates)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.3 B</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >19.7.8.5</td><td >(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >2.2.1</td><td >(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.2</td><td >(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.3</td><td >(L1) Ensure 'Act as part of the operating system' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.4</td><td >(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.5</td><td >(L1) Ensure 'Allow log on locally' is set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.6</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.7</td><td >(L1) Ensure 'Back up files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.8</td><td >(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.9</td><td >(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.10</td><td >(L1) Ensure 'Create a pagefile' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.11</td><td >(L1) Ensure 'Create a token object' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.12</td><td >(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.13</td><td >(L1) Ensure 'Create permanent shared objects' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.14 A</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' [Hyper-V-Feature installed]</td><td >The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.14 B</td><td >(L1) Configure 'Create symbolic links' (when Hyper-V feature is NOT installed)</td><td >Hyper-V installed. Please refer to the corresponding benchmark when Hyper-V is installed.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >2.2.15</td><td >(L1) Ensure 'Debug programs' is set to 'Administrators'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.16</td><td >(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.17</td><td >(L1) Ensure 'Deny log on as a batch job' to include 'Guests'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.18</td><td >(L1) Ensure 'Deny log on as a service' to include 'Guests'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.19</td><td >(L1) Ensure 'Deny log on locally' to include 'Guests'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.20</td><td >(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.21</td><td >(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.22</td><td >(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.23</td><td >(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE NOT installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.24</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.25</td><td >(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.26</td><td >(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.27</td><td >(L1) Ensure 'Lock pages in memory' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.28</td><td >(L2) Ensure 'Log on as a batch job' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.29</td><td >(L2) Configure 'Log on as a service' [Hyper-V-Feature NOT installed]</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.30</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.31</td><td >(L1) Ensure 'Modify an object label' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.32</td><td >(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.33</td><td >(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.34</td><td >(L1) Ensure 'Profile single process' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.35</td><td >(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.36</td><td >(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.37</td><td >(L1) Ensure 'Restore files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Shut down the system' is set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.39</td><td >(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.1</td><td >(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.2</td><td >(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.3</td><td >(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.4</td><td >(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.5</td><td >(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.1</td><td >(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.2</td><td >(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.3</td><td >(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >17.1.1</td><td >(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.1</td><td >(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.2</td><td >(L1) Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.3</td><td >(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.3.1</td><td >(L1) Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.3.2</td><td >(L1) Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.1</td><td >(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.2</td><td >(L1) Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.3</td><td >(L1) Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.4</td><td >(L1) Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.5</td><td >(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.6</td><td >(L1) Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.1</td><td >(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.2</td><td >(L1) Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.3</td><td >(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.4</td><td >(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.1</td><td >(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.2</td><td >(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.3</td><td >(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.4</td><td >(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.5</td><td >(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.8.1</td><td >(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.1</td><td >(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.2</td><td >(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.3</td><td >(L1) Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.4</td><td >(L1) Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.5</td><td >(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the DISA STIG results.</p><section ><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-CC-000310</td><td >Users must be prevented from changing installation options.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000315</td><td >The Windows Installer Always install with elevated privileges must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000320</td><td >Users must be notified if a web-based program attempts to install software.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000325</td><td >Automatically signing in the last interactive user after a system-initiated restart must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000330</td><td >The Windows Remote Management (WinRM) client must not use Basic authentication.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000335</td><td >The Windows Remote Management (WinRM) client must not allow unencrypted traffic.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000340</td><td >The Windows Remote Management (WinRM) client must not use Digest authentication.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000345</td><td >The Windows Remote Management (WinRM) service must not use Basic authentication.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000350</td><td >The Windows Remote Management (WinRM) service must not allow unencrypted traffic.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000355</td><td >The Windows Remote Management (WinRM) service must not store RunAs credentials.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000500</td><td >The Application event log size must be configured to 32768 KB or greater.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000505</td><td >The Security event log size must be configured to 1024000 KB or greater.</td><td >Registry value is '196608'. Expected: 1024000</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-AU-000510</td><td >The System event log size must be configured to 32768 KB or greater.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000005</td><td >Camera access from the lock screen must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000010</td><td >The display of slide shows on the lock screen must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000020</td><td >IPv6 source routing must be configured to highest protection.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000025</td><td >The system must be configured to prevent IP source routing.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000030</td><td >The system must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF) generated routes.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000035</td><td >The system must be configured to ignore NetBIOS name release requests except from WINS servers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000040</td><td >Insecure logons to an SMB server must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000055</td><td >Simultaneous connections to the Internet or a Windows domain must be limited.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000060</td><td >Connections to non-domain networks when connected to a domain authenticated network must be blocked.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000065</td><td >Wi-Fi Sense must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000037</td><td >Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000085</td><td >Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad.</td><td >Registry value is '3'. Expected: 8</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000090</td><td >Group Policy objects must be reprocessed even if they have not changed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000100</td><td >Downloading print driver packages over HTTP must be prevented.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000015</td><td >Local accounts with blank passwords must be restricted to prevent access from the network.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000105</td><td >Web publishing and online ordering wizards must be prevented from downloading a list of providers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000110</td><td >Printing over HTTP must be prevented.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000115</td><td >Systems must at least attempt device authentication using certificates.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000120</td><td >The network selection user interface (UI) must not be displayed on the logon screen.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000130</td><td >Local users on domain-joined computers must not be enumerated.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000030</td><td >Audit policy using subcategories must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000035</td><td >Outgoing secure channel traffic must be encrypted or signed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000040</td><td >Outgoing secure channel traffic must be encrypted when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000145</td><td >Users must be prompted for a password on resume from sleep (on battery).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000045</td><td >Outgoing secure channel traffic must be signed when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000150</td><td >The user must be prompted for a password on resume from sleep (plugged in).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000155</td><td >Solicited Remote Assistance must not be allowed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000050</td><td >The computer account password must not be prevented from being reset.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000165</td><td >Unauthenticated RPC clients must be restricted from connecting to the RPC server.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000170</td><td >The setting to allow Microsoft accounts to be optional for modern style apps must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000175</td><td >The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000060</td><td >The system must be configured to require a strong session key.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000180</td><td >Autoplay must be turned off for non-volume devices.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000070</td><td >The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000185</td><td >The default autorun behavior must be configured to prevent autorun commands.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000190</td><td >Autoplay must be disabled for all drives.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000195</td><td >Enhanced anti-spoofing for facial recognition must be enabled on Window 10.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000200</td><td >Administrator accounts must not be enumerated during elevation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000215</td><td >Explorer Data Execution Prevention must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000220</td><td >Turning off File Explorer heap termination on corruption must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000225</td><td >File Explorer shell protocol must run in protected mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000095</td><td >The Smart Card removal option must be configured to Force Logoff or Lock Workstation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000230</td><td >Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for malicious websites in Microsoft Edge.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000235</td><td >Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for unverified files in Microsoft Edge.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000100</td><td >The Windows SMB client must be configured to always perform SMB packet signing.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000240</td><td >InPrivate browsing in Microsoft Edge must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000105</td><td >The Windows SMB client must be enabled to perform SMB packet signing when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000110</td><td >Unencrypted passwords must not be sent to third-party SMB Servers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000250</td><td >The Windows Defender SmartScreen filter for Microsoft Edge must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000255</td><td >The use of a hardware security device with Windows Hello for Business must be enabled.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000120</td><td >The Windows SMB server must be configured to always perform SMB packet signing.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000260</td><td >Windows 10 must be configured to require a minimum pin length of six characters or greater.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000125</td><td >The Windows SMB server must perform SMB packet signing when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000270</td><td >Passwords must not be saved in the Remote Desktop Client.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000275</td><td >Local drives must be prevented from sharing with Remote Desktop Session Hosts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000280</td><td >Remote Desktop Services must always prompt a client for passwords upon connection.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000285</td><td >The Remote Desktop Session Host must require secure RPC communications.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000290</td><td >Remote Desktop Services must be configured with the client connection encryption set to the required level.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000295</td><td >Attachments must be prevented from being downloaded from RSS feeds.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000145</td><td >Anonymous enumeration of SAM accounts must not be allowed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000300</td><td >Basic authentication for RSS feeds over HTTP must not be used.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000150</td><td >Anonymous enumeration of shares must be restricted.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000305</td><td >Indexing of encrypted files must be turned off.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000160</td><td >The system must be configured to prevent anonymous users from having the same rights as the Everyone group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000165</td><td >Anonymous access to Named Pipes and Shares must be restricted.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000175</td><td >Services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000180</td><td >NTLM must be prevented from falling back to a Null session.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000185</td><td >PKU2U authentication using online identities must be prevented.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000190</td><td >Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000195</td><td >The system must be configured to prevent the storage of the LAN Manager hash of passwords.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000205</td><td >The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000210</td><td >The system must be configured to the required LDAP client signing level.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000215</td><td >The system must be configured to meet the minimum session security requirement for NTLM SSP based clients.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000220</td><td >The system must be configured to meet the minimum session security requirement for NTLM SSP based servers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000230</td><td >The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000240</td><td >The default permissions of global system objects must be increased.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000245</td><td >User Account Control approval mode for the built-in Administrator must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000250</td><td >User Account Control must, at minimum, prompt administrators for consent on the secure desktop.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000255</td><td >User Account Control must automatically deny elevation requests for standard users.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000260</td><td >User Account Control must be configured to detect application installations and prompt for elevation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000265</td><td >User Account Control must only elevate UIAccess applications that are installed in secure locations.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000270</td><td >User Account Control must run all administrators in Admin Approval Mode, enabling UAC.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000275</td><td >User Account Control must virtualize file and registry write failures to per-user locations.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UC-000015</td><td >Toast notifications to the lock screen must be turned off.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UC-000020</td><td >Zone information must be preserved when saving attachments.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000066</td><td >Command line data must be included in process creation events.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000326</td><td >PowerShell script block logging must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000150</td><td >Structured Exception Handling Overwrite Protection (SEHOP) must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000038</td><td >WDigest Authentication must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000044</td><td >Internet connection sharing must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000197</td><td >Microsoft consumer experiences must be turned off.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000228</td><td >Windows 10 must be configured to prevent Microsoft Edge browser data from being cleared on exit.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000252</td><td >Windows 10 must be configured to disable Windows Game Recording and Broadcasting.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000068</td><td >Windows 10 must be configured to enable Remote host allows delegation of non-exportable credentials.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000165</td><td >The Server Message Block (SMB) v1 protocol must be disabled on the SMB server.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UC-000005</td><td >The use of personal accounts for OneDrive synchronization must be disabled.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000238</td><td >Windows 10 must be configured to prevent certificate error overrides in Microsoft Edge.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000204</td><td >If Enhanced diagnostic data is enabled it must be limited to the minimum required to support Windows Analytics.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-UR-000005</td><td >The Access Credential Manager as a trusted caller user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000010</td><td >The Access this computer from the network user right must only be assigned to the Administrators and Remote Desktop Users groups.</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000015</td><td >The Act as part of the operating system user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000025</td><td >The Allow log on locally user right must only be assigned to the Administrators and Users groups.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000030</td><td >The Back up files and directories user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000035</td><td >The Change the system time user right must only be assigned to Administrators and Local Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000040</td><td >The Create a pagefile user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000045</td><td >The Create a token object user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000050</td><td >The Create global objects user right must only be assigned to Administrators, Service, Local Service, and Network Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000055</td><td >The Create permanent shared objects user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000065</td><td >The Debug programs user right must only be assigned to the Administrators group.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000070 MW</td><td >The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000070 SW</td><td >The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >Not applicable. This audit applies only to StandaloneWorkstation.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >WN10-UR-000075 MW</td><td >The Deny log on as a batch job user right on domain-joined workstations must be configured to prevent access from highly privileged domain accounts.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000080 MW</td><td >The Deny log on as a service user right on domain-joined workstations must be configured to prevent access from highly privileged domain accounts.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000085 MW</td><td >The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000085 SW</td><td >The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</td><td >Not applicable. This audit applies only to StandaloneWorkstation.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >WN10-UR-000090 MW</td><td >The Deny log on through Remote Desktop Services user right on workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000090 SW</td><td >The Deny log on through Remote Desktop Services user right on workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >Not applicable. This audit applies only to StandaloneWorkstation.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >WN10-UR-000100</td><td >The Force shutdown from a remote system user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000105</td><td >The Generate security audits user right must only be assigned to Local Service and Network Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000110</td><td >The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000115</td><td >The Increase scheduling priority user right must only be assigned to the Administrators group.</td><td >The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: Window Manager\Window Manager Group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000120</td><td >The Load and unload device drivers user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000125</td><td >The Lock pages in memory user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000130</td><td >The Manage auditing and security log user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000140</td><td >The Modify firmware environment values user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000145</td><td >The Perform volume maintenance tasks user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000150</td><td >The Profile single process user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000160</td><td >The Restore files and directories user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000165</td><td >The Take ownership of files or other objects user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-AC-000005</td><td >Windows 10 account lockout duration must be configured to 15 minutes or greater.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000010</td><td >The number of allowed bad logon attempts must be configured to 3 or less.</td><td >'LockoutBadCount' currently set to: 5. Expected: x <= 3 and x != 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-AC-000015</td><td >The period of time before the bad logon counter is reset must be configured to 15 minutes.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000020</td><td >The password history must be configured to 24 passwords remembered.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000025</td><td >The maximum password age must be configured to 60 days or less.</td><td >'MaximumPasswordAge' currently set to: 120. Expected: x <= 60</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-AC-000030</td><td >The minimum password age must be configured to at least 1 day.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000035</td><td >Passwords must, at a minimum, be 14 characters.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000040</td><td >The built-in Microsoft password complexity filter must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000045</td><td >Reversible password encryption must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsWindows-Features"><span class="passed">Windows Features</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-00-000100</td><td >Internet Information System (IIS) or its subcomponents must not be installed on a workstation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000110</td><td >Simple TCP/IP Services must not be installed on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000115</td><td >The Telnet Client must not be installed on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000120</td><td >The TFTP Client must not be installed on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsFile-System-Permissions"><span class="passed">File System Permissions</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-AU-000515</td><td >Permissions for the Application event log must prevent access by non-privileged accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000520</td><td >Permissions for the Security event log must prevent access by non-privileged accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000525</td><td >Permissions for the System event log must prevent access by non-privileged accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsRegistry-Permissions"><span class="failed">Registry Permissions</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-RG-000005 A</td><td >Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-RG-000005 B</td><td >Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td><td >Unexpected 'S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681' with access 'ReadKey'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-RG-000005 C</td><td >Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td><td >Unexpected 'S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681' with access 'ReadKey'</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section ><h1 id="CyberGovAu-Benchmarks"><span class="failed">CyberGovAu Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the CyberGovAu Benchmark results.</p><section ><h1 id="CyberGovAu-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.01</td><td >Ensure 'Deploy Windows Defender Application Control' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.02.1</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.02.2</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.1</td><td >Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.2</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.3</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.4</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.5</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.6</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.7</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.8</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.9</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Block executable files from running unless they meet a prevalence, age, or trusted list criterion).</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.03.10</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware).</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.03.11</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.12</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block process creations originating from PSExec and WMI commands)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.03.13</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.14</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.15</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.16</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.04</td><td >Ensure 'WDigest Authentication' is set to 'Disabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.05.1</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.05.2</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.05.3</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.06.1</td><td >Ensure 'Configure allowed applications' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.06.2</td><td >Ensure 'Configure allowed applications' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.07.1</td><td >Ensure 'Configure Controlled folder access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.07.2</td><td >Ensure 'Configure Controlled folder access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.08.1</td><td >Ensure 'Configure protected folders' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.08.2</td><td >Ensure 'Configure protected folders' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.09</td><td >Ensure 'Do not display network selection UI' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.10</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.11</td><td >Ensure 'Do not display the password reveal button' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.12</td><td >Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.13</td><td >Ensure 'Require trusted path for credential entry' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.14</td><td >Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.15</td><td >Ensure 'Disable or enable software Secure Attention Sequence' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.16</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.17</td><td >Ensure 'Require Ctrl-Alt-Del' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.18.1</td><td >Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled'</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.19.1</td><td >Ensure 'Use a common set of exploit protection settings' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.20</td><td >Ensure 'Prevent users from modifying settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.21</td><td >Ensure 'Turn off Data Execution Prevention' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.22</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.23</td><td >Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.24</td><td >Ensure 'Allow Adobe Flash' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.25</td><td >Ensure 'Allow Developer Tools' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.27</td><td >Ensure 'Configure Password Manager' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.28</td><td >Ensure 'Configure Pop-up Blocker' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.30</td><td >Ensure 'Prevent access to the about:flags page in Microsoft Edge' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.31</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.34</td><td >Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.36</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.37</td><td >Ensure 'Allow Automatic Updates immediate installation' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.38.1</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.38.2</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.38.3</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.38.4</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.39</td><td >Ensure 'Do not include drivers with Windows Updates' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.40</td><td >Ensure 'Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.41</td><td >Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.42</td><td >Ensure 'Remove access to use all Windows Update features' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.43</td><td >Ensure 'Turn on recommended updates via Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.44.1</td><td >Ensure 'Specify intranet Microsoft update service location' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.44.2</td><td >Ensure 'Specify intranet Microsoft update service location' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.45</td><td >Ensure 'Turn off picture password sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.46</td><td >Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.47</td><td >Ensure 'Maximum configurable password age' is set to '365 days'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.48</td><td >Ensure 'Minimum password length' is set to '14 characters'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.49</td><td >Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.50</td><td >Ensure 'Standard User Lockout Duration' is set to '0'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.51</td><td >Ensure 'Standard User Individual Lockout Threshold' is set to '5'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.52</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.53</td><td >Ensure 'Turn off Microsoft Defender Antivirus' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.54</td><td >Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.55</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.56.2</td><td >Ensure 'Join Microsoft MAPS' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.57</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Enabled'</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.58</td><td >Ensure 'Configure extended cloud check' is set to 'Enabled' and set to '50'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.59</td><td >Ensure 'Select cloud protection level' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.60</td><td >Ensure 'Configure removal of items from Quarantine folder' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.61</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.63</td><td >Ensure 'Turn on behavior monitoring' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.64</td><td >Ensure 'Turn on process scanning whenever real-time protection is enabled' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.65</td><td >Ensure 'Allow users to pause scan' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.66</td><td >Ensure 'Check for the latest virus and spyware definitions before running a scheduled scan' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.67</td><td >Ensure 'Scan archive files' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.68</td><td >Ensure 'Scan packed executables' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.69</td><td >Ensure 'Scan removable drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.70</td><td >Ensure 'Turn on e-mail scanning' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.71</td><td >Ensure 'Turn on heuristics' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.72</td><td >Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.73</td><td >Ensure 'Hide mechanisms to remove zone information' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.74</td><td >Ensure 'Include command line in process creation events' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.75</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '65536'</td><td >Registry value is '32768'. Expected: 65536</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.76</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '2097152'</td><td >Registry value is '196608'. Expected: 2097152</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.77</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.78</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.79</td><td >Ensure 'Turn off Autoplay' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.80</td><td >Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.81</td><td >Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.82</td><td >Ensure 'Route all traffic through the internal network' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.83</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.84</td><td >Ensure 'Remove CD Burning features' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.85</td><td >Ensure 'Prevent access to the command prompt' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.1</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.2</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.3</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.4</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.87.1</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.87.2</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.87.3</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.88</td><td >Ensure 'All Removable Storage classes: Deny all access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.89</td><td >Ensure 'CD and DVD: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.90</td><td >Ensure 'CD and DVD: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.91</td><td >Ensure 'Custom Classes: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.92</td><td >Ensure 'Custom Classes: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.93</td><td >Ensure 'Floppy Drives: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.94</td><td >Ensure 'Floppy Drives: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.95</td><td >Ensure 'Floppy Drives: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.96</td><td >Ensure 'Removable Disks: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.97</td><td >Ensure 'Removable Disks: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.98</td><td >Ensure 'Removable Disks: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.99</td><td >Ensure 'Tape Drives: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.100</td><td >Ensure 'Tape Drives: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.101</td><td >Ensure 'Tape Drives: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.102</td><td >Ensure 'WPD Devices: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.103</td><td >Ensure 'WPD Devices: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.104</td><td >Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.105</td><td >Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.106.1</td><td >Ensure 'Hardened UNC Paths' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.106.2</td><td >Ensure 'Hardened UNC Paths' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.107</td><td >Ensure 'Configure registry policy processing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.108</td><td >Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.109</td><td >Ensure 'Turn off Local Group Policy Objects processing' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.110.1</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.110.2</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.110.3</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.111</td><td >Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.1</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.2</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.3</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.4</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.112.5</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.6</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.1</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.2</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.3</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.4</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.114</td><td >Ensure 'Deny write access to fixed drives not protected by BitLocker' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.115</td><td >Ensure 'Enforce drive encryption type on fixed data drives' is set to 'Enabled' and 'Full encryption'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.116</td><td >Ensure 'Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.117</td><td >Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.118</td><td >Ensure 'Allow network unlock at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.119</td><td >Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.1</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.2</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.120.3</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.4</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.5</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.6</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.121</td><td >Ensure 'Configure minimum PIN length for startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.122.1</td><td >Ensure 'Configure use of passwords for operating system drives' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.122.2</td><td >Ensure 'Configure use of passwords for operating system drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.122.3</td><td >Ensure 'Configure use of passwords for operating system drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.123</td><td >Ensure 'Disallow standard users from changing the PIN or password' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.124</td><td >Ensure 'Enforce drive encryption type on operating system drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.1</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.125.2</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.3</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.4</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.5</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.6</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.126</td><td >Ensure 'Reset platform validation data after BitLocker recovery' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.1</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.2</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.127.3</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.4</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.5</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.127.6</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.7</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.127.8</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.1</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.2</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.3</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.4</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.129.1</td><td >Ensure 'Control use of BitLocker on removable drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.129.2</td><td >Ensure 'Control use of BitLocker on removable drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.130</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.131</td><td >Ensure 'Enforce drive encryption type on removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.132.1</td><td >Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.132.2</td><td >Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.133</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.135</td><td >Ensure 'Always install with elevated privileges' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.136</td><td >Ensure 'Do not process the legacy run list' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.137</td><td >Ensure 'Do not process the run once list' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.138</td><td >Ensure 'Run these programs at user logon' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.139</td><td >Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.140</td><td >Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.141</td><td >Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.142</td><td >Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.143</td><td >Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.144</td><td >Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.145</td><td >Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.145</td><td >Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.146</td><td >Ensure 'Require a Password When a Computer Wakes (On Battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.147</td><td >Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.148</td><td >Ensure 'Specify the system hibernate timeout (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.149</td><td >Ensure 'Specify the system hibernate timeout (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.150</td><td >Ensure 'Specify the system sleep timeout (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.151</td><td >Ensure 'Specify the system sleep timeout (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.152</td><td >Ensure 'Specify the unattended sleep timeout (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.153</td><td >Ensure 'Specify the unattended sleep timeout (plugged in)' is set to 'Enabled' and '0 seconds'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.154</td><td >Ensure 'Turn off hybrid sleep (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.155</td><td >Ensure 'Turn off hybrid sleep (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.156</td><td >Ensure 'Show hibernate in the power options menu' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.157</td><td >Ensure 'Show sleep in the power options menu' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.158</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.159.1</td><td >Ensure 'Turn on Script Execution' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.159.2</td><td >Ensure 'Turn on Script Execution' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.160</td><td >Ensure 'Prevent access to registry editing tools' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.161</td><td >Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.162</td><td >Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.163</td><td >Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.164</td><td >Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.165</td><td >Ensure 'Configure server authentication for client' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.166</td><td >Ensure 'Do not allow passwords to be saved' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.168</td><td >Ensure 'Deny logoff of an administrator logged in to the console session' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.169</td><td >Ensure 'Do not allow Clipboard redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.170</td><td >Ensure 'Do not allow drive redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.171</td><td >Ensure 'Always prompt for password upon connection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.172</td><td >Ensure 'Do not allow local administrators to customize permissions' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.173</td><td >Ensure 'Require secure RPC communication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.174</td><td >Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.175</td><td >Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.176</td><td >Ensure 'Set client connection encryption level' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.177</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.178</td><td >Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.179</td><td >Ensure 'Turn off Inventory Collector' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.180</td><td >Ensure 'Turn off Steps Recorder' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.181</td><td >Ensure 'Allow Telemetry' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.182.1</td><td >Ensure 'Configure Corporate Windows Error Reporting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.182.2</td><td >Ensure 'Configure Corporate Windows Error Reporting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.182.3</td><td >Ensure 'Configure Corporate Windows Error Reporting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.183</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.184</td><td >Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.185</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.186</td><td >Ensure 'Turn off heap termination on corruption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.187</td><td >Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.188</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.189</td><td >Ensure 'Allow indexing of encrypted files' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.190</td><td >Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.191</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.192</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.193</td><td >Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.194</td><td >Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.195</td><td >Ensure 'Allow users to select when a password is required when resuming from connected standby' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.196</td><td >Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.197</td><td >Ensure 'Show lock in the user tile menu' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.198</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.199</td><td >Ensure 'Enable screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.199</td><td >Ensure 'Password protect the screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.200</td><td >Ensure 'Screen saver timeout' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.201</td><td >Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.202</td><td >Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.203</td><td >Ensure 'Do not allow Sound Recorder to run' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.204</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.205</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.206</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.207</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.208</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.209</td><td >Ensure 'Allow Remote Shell Access' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.210</td><td >Ensure 'Allow Cortana' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.211</td><td >Ensure 'Don't search the web or display web results in Search' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.212</td><td >Ensure 'Windows To Go Default Startup Options' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.213</td><td >Ensure 'Remove Security tab' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.214</td><td >Ensure 'Turn off location scripting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.215</td><td >Ensure 'Turn off location' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.216</td><td >Ensure 'Turn off Windows Location Provider' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.217</td><td >Ensure 'Turn off access to the Store' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.218</td><td >Ensure 'Turn off the Store application' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.219</td><td >Ensure 'Determine if interactive users can generate Resultant Set of Policy data' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.220</td><td >Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.222</td><td >Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.223</td><td >Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.224</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.225</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.226</td><td >(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.227</td><td >Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.228</td><td >Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.229</td><td >Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.230</td><td >Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.231</td><td >Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.233</td><td >Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.234</td><td >Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.235</td><td >Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.236</td><td >Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.237</td><td >Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.238</td><td >Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.239</td><td >Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.240</td><td >Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.243</td><td >Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 65536 or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.260</td><td >Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.262</td><td >Ensure 'CD and DVD: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.263</td><td >Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.264</td><td >Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.265</td><td >Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.266</td><td >Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.267</td><td >Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.268</td><td >Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.269</td><td >Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.270</td><td >Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.275</td><td >Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.276</td><td >Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.277</td><td >Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.278</td><td >Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.279</td><td >Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.280</td><td >Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.281</td><td >Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.282</td><td >Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.283</td><td >Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.284</td><td >Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.285</td><td >Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.288</td><td >Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.289</td><td >Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.290</td><td >Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.291</td><td >Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.292</td><td >Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.293</td><td >Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.296</td><td >Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.314</td><td >Ensure 'Allow download restrictions' is set to 'Enabled'</td><td >Registry value is '1'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.315</td><td >Ensure 'Configure Do Not Track' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.316</td><td >Ensure 'Control the mode of DNS-over-HTTPS' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.317</td><td >Ensure 'Control where Developer Tools can be used' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.318</td><td >Ensure 'DNS interception checks enabled' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.319</td><td >Ensure 'Default pop-up window setting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.320</td><td >Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.321</td><td >Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.322</td><td >Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.323</td><td >Ensure 'Use the Enterprise Mode IE website list' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.324</td><td >Ensure 'Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CyberGovAu-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.241</td><td >Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.242</td><td >Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.244</td><td >Ensure 'Manage auditing and security log' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.271</td><td >Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.273</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop Users'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.274</td><td >Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.294</td><td >Ensure 'Back up files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.295</td><td >Ensure 'Restore files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.297</td><td >Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.298</td><td >Ensure 'Act as part of the operating system' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.299</td><td >Ensure 'Allow log on locally' is set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.300</td><td >Ensure 'Create a pagefile' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.301</td><td >Ensure 'Create a token object' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.302</td><td >Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.303</td><td >Ensure 'Create permanent shared objects' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.304</td><td >Ensure 'Debug programs' is set to 'Administrators'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.305</td><td >Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.306</td><td >Ensure 'Force shutdown from a remote system' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.307</td><td >Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.308</td><td >Ensure 'Load and unload device drivers' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.309</td><td >Ensure 'Lock pages in memory' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.310</td><td >Ensure 'Modify firmware environment values' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.311</td><td >Ensure 'Perform volume maintenance tasks' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.312</td><td >Ensure 'Profile single process' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.313</td><td >Ensure 'Take ownership of files or other objects' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CyberGovAu-BenchmarksAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.232</td><td >Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CyberGovAu-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.245</td><td >Ensure 'Audit Computer Account Management' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.246</td><td >Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.247</td><td >Ensure 'Audit Security Group Management' is set to 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.248</td><td >Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.249</td><td >Ensure 'Audit Process Creation' is set to 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.250</td><td >Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.251</td><td >Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.252</td><td >Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.253</td><td >Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.254</td><td >Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.255</td><td >Ensure 'Audit Special Logon' is set to include 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.256</td><td >Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.257</td><td >Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.258</td><td >Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.259</td><td >Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="Microsoft-Benchmarks"><span class="failed">Microsoft Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the Microsoft Benchmark results.</p><section ><h1 id="Microsoft-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >Registry-001</td><td >Set registry value 'PUAProtection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-002</td><td >Set registry value 'MpCloudBlockLevel' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-003</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-004</td><td >Ensure 'Turn off real-time protection' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-005</td><td >Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-006</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'.</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-007</td><td >Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'.</td><td >Registry value is '0'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-008</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-009</td><td >Set registry value 'ExploitGuard_ASR_Rules' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-010</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-011</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-012</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-013</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-014</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-015</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-016</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-017</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-018</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-019</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-020</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-021</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-022</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-023</td><td >Set registry value 'EnableNetworkProtection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-024</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-025</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-026</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-027</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-028</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-029</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-031</td><td >Set registry value 'UseEnhancedPin' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-032</td><td >Set registry value 'RDVDenyCrossOrg' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-033</td><td >Set registry value 'DisableExternalDMAUnderLock' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-034</td><td >Set registry value 'DCSettingIndex' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-035</td><td >Set registry value 'ACSettingIndex' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-036</td><td >Set registry value 'DenyDeviceClasses' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-037</td><td >Set registry value 'DenyDeviceClassesRetroactive' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-038</td><td >Set registry value '1' to {d48179be-ec20-11d1-b6b8-00c04fa372a7}.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-039</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-040</td><td >Set registry value 'AutoConnectAllowedOEM' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-041</td><td >Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-042</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-043</td><td >Set registry value 'NoWebServices' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-044</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-045</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-046</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-047</td><td >Set registry value 'LocalAccountTokenFilterPolicy' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-048</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-049</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-050</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-051</td><td >Set registry value 'PreventCertErrorOverrides' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-052</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-053</td><td >Set registry value 'EnabledV9' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-054</td><td >Set registry value 'PreventOverride' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-055</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-056</td><td >Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-057</td><td >Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-058</td><td >Set registry value 'LetAppsActivateWithVoiceAboveLock' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-059</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-060</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-061</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-062</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-063</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-064</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-065</td><td >Set registry value 'AllowGameDVR' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-066</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-067</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-068</td><td >Set registry value 'AlwaysInstallElevated' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-069</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-070</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-071</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-072</td><td >Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-073</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1, RequireIntegrity=1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-074</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1, RequireIntegrity=1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-075</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-076</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-077</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'. (EnableScriptBlockLogging)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-078</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set. (EnableScriptBlockInvocationLogging)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-079</td><td >Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-080</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-081</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-082</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-083</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-084</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-085</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-086</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-087</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-088</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-089</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-090</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-091</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-092</td><td >Set registry value 'DisableWebPnPDownload' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-093</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-094</td><td >Solicited Remote Assistance - Set method for sending email invitations to 'Simple MAPI'</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-095</td><td >Configure Solicited Remote Assistance to disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-096</td><td >Configure Solicited Remote Assistance - Allow helpers to only view the computer.</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-097</td><td >Set registry value 'MaxTicketExpiry' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-098</td><td >Set registry value 'MaxTicketExpiryUnits' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-099</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-100</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-101</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-102</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-103</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-104</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-105</td><td >Domain: Set registry value 'DefaultOutboundAction' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-106</td><td >Domain: Set registry value 'DisableNotifications' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-107</td><td >Domain: Set registry value 'EnableFirewall' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-108</td><td >Domain: Set registry value 'DefaultInboundAction' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-109</td><td >Domain: Set registry value 'LogDroppedPackets' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-110</td><td >Domain: Set registry value 'LogFileSize' to 16384.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-111</td><td >Domain: Set registry value 'LogSuccessfulConnections' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-112</td><td >Private: Set registry value 'EnableFirewall' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-113</td><td >Private: Set registry value 'DisableNotifications' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-114</td><td >Private: Set registry value 'DefaultInboundAction' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-115</td><td >Private: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-116</td><td >Private: Set registry value 'LogSuccessfulConnections' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-117</td><td >Private: Set registry value 'LogDroppedPackets' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-118</td><td >Private: Set registry value 'LogFileSize' to 16384.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-119</td><td >Public: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-120</td><td >Public: Set registry value 'EnableFirewall' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-121</td><td >Public: Set registry value 'DisableNotifications' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-122</td><td >Public: Set registry value 'AllowLocalIPsecPolicyMerge' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-123</td><td >Public: Set registry value 'AllowLocalPolicyMerge' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-124</td><td >Public: Set registry value 'DefaultInboundAction' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-125</td><td >Public: Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-126</td><td >Public: Set registry value 'LogDroppedPackets' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-127</td><td >Public: Set registry value 'LogSuccessfulConnections' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-128</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-129</td><td >Set registry value 'AdmPwdEnabled' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-130</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-131</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-132</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-133</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-134</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-135</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-136</td><td >Set registry value 'NodeType' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-137</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-138</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-139</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-140</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-141</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-142</td><td >Set registry value 'NoLMHash' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-143</td><td >Set registry value 'EnablePlainTextPassword' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-144</td><td >Set registry value 'LimitBlankPasswordUse' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-145</td><td >Set registry value 'RestrictAnonymousSAM' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-146</td><td >Set registry value 'RestrictAnonymous' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-147</td><td >Set registry value 'RestrictNullSessAccess' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-148</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-149</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-150</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-151</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-152</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-153</td><td >Set registry value 'requirestrongkey' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-154</td><td >Set registry value 'RequireSecuritySignature' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-155</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-156</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-157</td><td >Set registry value 'signsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-158</td><td >Set registry value 'requiresecuritysignature' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-159</td><td >Set registry value 'ProtectionMode' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-160</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-161</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-162</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-163</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-164</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-165</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-166</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-167</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-168</td><td >Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-223</td><td >Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-224</td><td >Set registry value 'NoToastApplicationNotificationOnLockScreen' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-225</td><td >Set registry value 'FormSuggest Passwords' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-226</td><td >Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-227</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-228</td><td >Ensure 'Remove "Run this time" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-229</td><td >Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-230</td><td >Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-231</td><td >Set registry value 'CheckExeSignatures' to yes.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-232</td><td >Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-233</td><td >Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-234</td><td >Set registry value 'Isolation' to PMEM.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-235</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-236</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-237</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-238</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-239</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-240</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-241</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-242</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-243</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-244</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-245</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-246</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-247</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-248</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-249</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-250</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-251</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-252</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-253</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-254</td><td >Set registry value '(Reserved)' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-255</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-256</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-257</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-258</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-259</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-260</td><td >Set registry value 'PreventOverride' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-261</td><td >Ensure 'Prevent managing SmartScreen Filter' is set to 'On'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-262</td><td >Set registry value 'NoCrashDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-263</td><td >Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-264</td><td >Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-265</td><td >Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-266</td><td >Set registry value 'Security_zones_map_edit' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-267</td><td >Set registry value 'Security_options_edit' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-268</td><td >Set registry value 'Security_HKLM_only' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-269</td><td >Ensure 'Check for server certificate revocation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-270</td><td >Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-271</td><td >Set registry value 'WarnOnBadCertRecving' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-272</td><td >Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-273</td><td >Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-274</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-275</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-276</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-277</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-278</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-279</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-280</td><td >Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-281</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-282</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-283</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-284</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-285</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-286</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-287</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-288</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-289</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-290</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-291</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-292</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-293</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-294</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-295</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-296</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-297</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-298</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-299</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-300</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-301</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry value is '0'. Expected: 3</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-302</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-303</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-304</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-305</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-306</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-307</td><td >Ensure 'Logon options' is set to 'Prompt for user name and password'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-308</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-309</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-310</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-311</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-312</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-313</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-314</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-315</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-316</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-317</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-318</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-319</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-320</td><td >Set registry value '140C' to 3. (Zones\3)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-321</td><td >Ensure 'Allow META REFRESH' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-322</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-323</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-324</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-325</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-326</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-327</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-328</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-329</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-330</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-331</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-332</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-333</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-334</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-335</td><td >Ensure 'Allow binary and script behaviors' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-336</td><td >Ensure 'Scripting of Java applets' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-337</td><td >Ensure 'Allow file downloads' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-338</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-339</td><td >Ensure 'Allow active scripting' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-340</td><td >Ensure 'Logon options' is set to 'Anonymous logon'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-341</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-342</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-343</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-344</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-345</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-346</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-347</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-348</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-349</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-350</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry value is '0'. Expected: 3</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-351</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-352</td><td >Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-353</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-354</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-355</td><td >Ensure 'Run ActiveX controls and plugins' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-356</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-357</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'.</td><td >Registry value is '1'. Expected: 3</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-358</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-359</td><td >Set registry value '140C' to 3. (Zones\4)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >UserRight-170</td><td >Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-171</td><td >Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-172</td><td >Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-173</td><td >Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-174</td><td >Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-113'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-175</td><td >Ensure 'SeCreatePermanentPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-176</td><td >Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-177</td><td >Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-178</td><td >Ensure 'SeLockMemoryPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-179</td><td >Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-113'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-180</td><td >Ensure 'SeNetworkLogonRight' is set to 'S-1-5-32-544, S-1-5-32-555'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-181</td><td >Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-182</td><td >Ensure 'SeCreateTokenPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-183</td><td >Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-184</td><td >Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-185</td><td >Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-186</td><td >Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544, S-1-5-32-545'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-187</td><td >Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-188</td><td >Ensure 'SeDebugPrivilege' is set to 'S-1-5-32-544'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-189</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-190</td><td >Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-191</td><td >Ensure 'SeTcbPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-192</td><td >Ensure 'SeEnableDelegationPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AccountPolicy-216</td><td >Ensure 'MinimumPasswordLength' is set to '14'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-217</td><td >Ensure 'PasswordComplexity' is set to '1'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-218</td><td >Ensure 'PasswordHistorySize' is set to '24'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-219</td><td >Ensure 'LockoutBadCount' is set to '10'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-220</td><td >Ensure 'ResetLockoutCount' is set to '15'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-221</td><td >Ensure 'LockoutDuration' is set to '15'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-222</td><td >Ensure 'ClearTextPassword' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AuditPolicy-193</td><td >Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-194</td><td >Ensure 'Security Group Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-195</td><td >Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-196</td><td >Ensure 'Plug and Play Events' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-197</td><td >Ensure 'Process Creation' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-198</td><td >Ensure 'Account Lockout' is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-199</td><td >Ensure 'Group Membership' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-200</td><td >Ensure 'Logon' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-201</td><td >Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-202</td><td >Ensure 'Special Logon' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-203</td><td >Ensure 'Detailed File Share' is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-204</td><td >Ensure 'File Share' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-205</td><td >Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-206</td><td >Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-207</td><td >Ensure 'Audit Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-208</td><td >Ensure 'Authentication Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-209</td><td >Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-210</td><td >Ensure 'Other Policy Change Events' is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-211</td><td >Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-212</td><td >Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-213</td><td >Ensure 'Security State Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-214</td><td >Ensure 'Security System Extension' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-215</td><td >Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-Logging"><span class="failed">BSI Benchmarks SiSyPHuS Logging</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >4.1.1</td><td >Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.2</td><td >Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.1</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.2</td><td >Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.3</td><td >Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.2.1.4</td><td >Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.1</td><td >Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.2</td><td >Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.3</td><td >Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.4</td><td >Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.1</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.2</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.3</td><td >Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.4</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.1.1</td><td >Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.1</td><td >Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.2</td><td >Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.1</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.2</td><td >Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.1</td><td >Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.2</td><td >Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.1</td><td >Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.2</td><td >Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.3.1</td><td >Ensure 'Include command line in process creation events' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.3.4.2</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.3.4.3</td><td >Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >5.1.1.1</td><td >Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.2</td><td >Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.3</td><td >Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.4</td><td >Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.5</td><td >Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.6</td><td >Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.7</td><td >Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.8</td><td >Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.1</td><td >Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.2</td><td >Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.3</td><td >Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.4</td><td >Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.5</td><td >Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.6</td><td >Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.7</td><td >Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.8</td><td >Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.9</td><td >Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.1</td><td >Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.2</td><td >Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.3</td><td >Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.4</td><td >Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.5</td><td >Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.6</td><td >Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.1</td><td >Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.2</td><td >Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HD"><span class="failed">BSI Benchmarks SiSyPHuS HD</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >11</td><td >(HD) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >13</td><td >(HD) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >15</td><td >(HD) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >19</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >23</td><td >(HD) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >28</td><td >(HD) Ensure 'Enable Font Providers' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >29</td><td >(HD) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >30</td><td >(HD) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >31</td><td >(HD) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >32</td><td >(HD) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >36</td><td >(HD) Ensure 'Turn off notifications network usage' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >38</td><td >(HD) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >47</td><td >(HD) Ensure 'Turn off the advertising ID' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >48</td><td >(HD)  Ensure 'Allow upload of User Activities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >49</td><td >(HD) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >58</td><td >(HD) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >66</td><td >(HD) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >67</td><td >(HD) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >69</td><td >(HD) Ensure 'Turn off printing over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >70</td><td >(HD) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >71</td><td >(HD) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >72</td><td >(HD) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >73</td><td >(HD) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >75</td><td >(HD) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >76</td><td >(HD) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >77</td><td >(HD) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >78</td><td >(HD) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >79</td><td >(HD) Ensure 'Turn off access to the Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >80</td><td >(HD) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82</td><td >(HD) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >83</td><td >(HD) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >91</td><td >(HD) Ensure 'Enable Windows NTP Client' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >92</td><td >(HD) Ensure 'Enable Windows NTP Server' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >93</td><td >(HD)  Ensure 'Allow Online Tips' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >104</td><td >(HD) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >108</td><td >(HD) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >110</td><td >(HD) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >111</td><td >(HD) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >122</td><td >(HD) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >123</td><td >(HD) Ensure 'Allow Use of Camera' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >125</td><td >(HD) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >128</td><td >(HD) Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >129</td><td >(HD) Ensure 'Turn off Push To Install service' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >130</td><td >(HD) Ensure 'Do not allow COM port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >132</td><td >(HD) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >133</td><td >(HD) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >140</td><td >(HD) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >141</td><td >(HD) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >144</td><td >(HD) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >150</td><td >(HD) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >151</td><td >(HD) Ensure 'Disable all apps from Microsoft Store' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >154</td><td >(HD) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >155</td><td >(HD) Ensure 'Turn off the Store application' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >156</td><td >(HD) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '0'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >166</td><td >(HD) Ensure 'Join Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >176</td><td >(HD) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >179</td><td >(HD) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >182</td><td >(HD) Ensure 'Prevent Codec Download' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >184</td><td >(HD) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow only signed scripts'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >190</td><td >(HD) Ensure 'Allow Remote Shell Access' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >195</td><td >(HD) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >225</td><td >(HD) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >228</td><td >(HD) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >250</td><td >(HD) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 'Deny all'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >251</td><td >(HD) Ensure 'Network security: Restrict NTLM: Incoming NTLM traffic' is set to 'Deny all accounts'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >273</td><td >(HD) Ensure 'System settings: Optional subsystems' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >274</td><td >(HD) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >316</td><td >(HD) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >318</td><td >(HD) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >319</td><td >(HD) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >322</td><td >(HD) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >325</td><td >(HD) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >327</td><td >(HD) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >329</td><td >(HD) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >330</td><td >(HD) Ensure 'Microsoft Store Install Service (InstallService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >332</td><td >(HD) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >333</td><td >(HD) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >334</td><td >(HD) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >335</td><td >(HD) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >336</td><td >(HD) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >337</td><td >(HD) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >340</td><td >(HD) Ensure 'Server (LanmanServer)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >342</td><td >(HD)  Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >344</td><td >(HD) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >346</td><td >(HD) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >347</td><td >(HD) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >350</td><td >(HD) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >352</td><td >(HD) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >353</td><td >(HD) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >354</td><td >(HD) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >355</td><td >(HD) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'.</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.
+
+</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >281</td><td >(HD) Configure 'Log on as a service'. [Hyper-V-Feature NOT installed]</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >283</td><td >(HD) Ensure 'Log on as a batch job' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.
+
+</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.
+</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. 
+
+</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 or
+more minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDSecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >249</td><td >(ND) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-ND"><span class="failed">BSI Benchmarks SiSyPHuS ND</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects tooverride OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '0'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data(when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 ormore minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDSecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >249</td><td >(ND) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NE"><span class="failed">BSI Benchmarks SiSyPHuS NE</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '0'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NESecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI"><span class="failed">BSI Benchmarks SiSyPHus-BSI</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSIRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >3.1.1 A</td><td >Configuration of the lowest possible telemetry-level (Enterprise Windows 10)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.1 B</td><td >Configuration of the lowest possible telemetry-level (Non-Enterprise Windows 10)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >3.1.2.1</td><td >Deactivation of the telemetry service and ETW-sessions - disable service DiagTrack</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.2.2</td><td >Deactivation of the telemetry service and ETW-sessions - disable service Autologger-Diatrack-Listener</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.3.1.1</td><td >Deactivation of telemetry according to Microsoft - Disable Windows Update Service</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >3.1.3.1.2</td><td >Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: disable MAPS</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.3.1.3</td><td >Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: never send sample files</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-Bundespolizei"><span class="failed">BSI Benchmarks SiSyPHus-BSI Bundespolizei</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0003</td><td > Ensure 'Configure Automatic Updates' is set to 4</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0004</td><td > Ensure 'Configure Automatic Updates' is set to 'Every Day'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0005</td><td > Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0006</td><td > Ensure 'Specify the maximum log file size (KB)' is set to 'Enabled: 32768'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0032</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 32768.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0037</td><td >Ensure 'Allow enhanced PINs for startup' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0038</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0039</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0040</td><td >Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0041</td><td >Ensure 'Allow user control over installs' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0043</td><td >Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0065</td><td >Ensure 'Enumerate administrator accounts on elevation' is set 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0101</td><td > Ensure 'Restrict Unauthenticated RPC clients' is set 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0109</td><td >Ensure 'Allow Telemetry' is set to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0110</td><td >Ensure 'Do not show feedback notifications' is set to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0111</td><td >Ensure 'Turn on MSDT interactive communication with support provider' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0112</td><td >Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0113</td><td >Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0114</td><td >Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0115</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0116</td><td >Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0117</td><td >Ensure 'Turn off the Windows Customer Experience program' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0118</td><td >Ensure 'Turn off the Windows Error Reporting' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0119</td><td >Ensure 'Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0121</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0122</td><td >Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0123</td><td >Ensure 'Prevent using Localhost IP address for WebRTC' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0131</td><td >Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0132</td><td >Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0133</td><td >Ensure 'Allow InPrivate browsing' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0135</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (On Battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0136</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0137</td><td >Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0138</td><td >Ensure 'Always install with elevated privileges ' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0139</td><td >Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0140</td><td >Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0141</td><td >Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0142</td><td >Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0143</td><td >Ensure 'Configure Password Manager' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0144</td><td >Ensure 'Configure Pop-up Blocker' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0145</td><td >Ensure 'Configure registry policy processing' is set to 'Do not apply during periodic background processing (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0146</td><td >Ensure 'Configure registry policy processing' is set to 'Process even if the Group Policy objects have not changed (False)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0147</td><td >Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0148</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0149</td><td >Ensure 'Disallow copying of user input methods to the system account for sign-in ' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0150</td><td >Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0151</td><td >Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0152</td><td >Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0153</td><td >Ensure 'Do not delete temp folders upon exit' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0154</td><td >Ensure 'Do not display network selection UI' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0155</td><td >Ensure 'Do not enumerate connected users on domain-joined computers' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0156</td><td >Ensure 'Enable insecure guest logons' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0157</td><td >Ensure 'Enable local admin password management' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0158</td><td >Ensure 'Enable RPC Endpoint Mapper Client Authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0159</td><td >Ensure 'Enable screen saver' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0160</td><td >Ensure 'Enable Windows NTP Server' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0161</td><td >Ensure 'Enable/Disable PerfTrack' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0163</td><td >Ensure 'Enumerate local users on domain-joined computers' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0164</td><td >Ensure 'Include command line in process creation events' set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0165</td><td >Ensure 'Let Windows apps access account information' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0166</td><td >Ensure 'Let Windows apps access call history' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0167</td><td >Ensure 'Let Windows apps access contacts' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0168</td><td >Ensure 'Let Windows apps access email' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0169</td><td >Ensure 'Let Windows apps access location' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0170</td><td >Ensure 'Let Windows apps access messaging' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0171</td><td >Ensure 'Let Windows apps access motion' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0172</td><td >Ensure 'Let Windows apps access notifications' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0173</td><td >Ensure 'Let Windows apps access the calendar' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0174</td><td >Ensure 'Let Windows apps access the camera' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0175</td><td >Ensure 'Let Windows apps access the microphone' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0176</td><td >Ensure 'Let Windows apps access trusted devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0177</td><td >Ensure 'Let Windows apps control radios' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0178</td><td >Ensure 'Let Windows apps make phone calls' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0179</td><td >Ensure 'Let Windows apps sync with devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0185</td><td >Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0209</td><td >Ensure 'Prevent downloading of enclosures' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0210</td><td >Ensure 'Prevent enabling lock screen camera' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0211</td><td >Ensure 'Prevent enabling lock screen slide show' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0212</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0213</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0214</td><td >Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0215</td><td >Ensure 'Prevent the computer from joining a homegroup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0216</td><td >Ensure 'Prohibit access of the Windows Connect Now wizards' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0217</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0218</td><td >Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' set to 'Enalbed'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0220</td><td >Ensure 'Require a password when a computer wakes (on battery)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0221</td><td >Ensure 'Require a password when a computer wakes (plugged in)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0222</td><td >Ensure 'Require additional authentication at startup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0223</td><td >Ensure 'Require domain users to elevate when setting a network's location' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0224</td><td >Ensure 'Set the default behavior for AutoRun' set to 'Enalbed: Do not execute any autorun commands'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0225</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0229</td><td >Ensure 'Turn off background refresh of Group Policy' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0230</td><td >Ensure 'Turn off Data Execution Prevention for Explorer' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0231</td><td >Ensure 'Turn off downloading of print drivers over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0232</td><td >Ensure 'Turn off handwriting personalization data sharing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0233</td><td >Ensure 'Turn off handwriting recognition error reporting' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0234</td><td >Ensure 'Turn off heap termination on corruption' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0235</td><td >Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0236</td><td >Ensure 'Turn off Internet download for Web publishing and online ordering wizards' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0237</td><td >Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0238</td><td >Ensure 'Turn off picture password sign-in' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0239</td><td >Ensure 'Turn off printing over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0240</td><td >Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0241</td><td >Ensure 'Turn off Search Companion content file updates' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0242</td><td >Ensure 'Turn off shell protocol protected mode' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0243</td><td >Ensure 'Turn off the 'Order Prints' picture task' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0244</td><td >Ensure 'Turn off the 'Publish to Web' task for files and folders' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0245</td><td >Ensure 'Turn on convenience PIN sign-in' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0246</td><td >Ensure 'Turn on Mapper I/O (LLTDIO) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0247</td><td >Ensure 'Turn on Responder (RSPNDR) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0248</td><td >Ensure 'Turn On Virtualization Based Security' set to 'Enabled: Block untrusted fonts and log events'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0249</td><td >Ensure 'Untrusted Font Blocking' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0250</td><td >Ensure 'Configure enhanced anti-spoofing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0251</td><td >Ensure 'WDigest Authentication' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0253</td><td >Ensure 'Windows Firewall: Domain: Apply local firewall rules' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0254</td><td >Ensure 'Windows Firewall: Domain: Display a notification' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0279</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' set to '%windir%\system32\logfiles\firewall\domainfirewall.log'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0280</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' set to '16,384'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0281</td><td >Ensure 'Windows Firewall: Public: Outbound connections' set to 'Allow'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0282</td><td >Ensure 'Block launching Windows Store apps with Windows RuntimeAPIaccessfromhostedcontent' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0283</td><td >Ensure 'Turn off KMS Client Online AVS Validation' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0284</td><td >Ensure 'Do not display the password reveal button' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0285</td><td >Ensure 'Join Microsoft MAPS' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0286</td><td >Ensure 'Configure search suggestions in Address bar' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0287</td><td >Ensure 'Configure Windows SmartScreen' set to 'Enabled: Require approval from an administrator before running downloaded unknown software'.</td><td >Registry value is '1'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0288</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides for unverified files' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0289</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0290</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0291</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0292</td><td >Ensure 'Turn on SmartScreen Filter scan' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0293</td><td >Ensure 'Allow Cortana' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0294</td><td >Ensure 'Allow search and Cortana to use location' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0295</td><td >Ensure 'Disable all apps from Microsoft Store' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0296</td><td >Ensure 'Disable pre-release features or settings' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0297</td><td >Ensure 'Turn off access to the Store' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0298</td><td >Ensure 'Turn off Automatic Download and Install of updates' set to 'Enabled'.</td><td >Registry value is '4'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0299</td><td >Ensure 'Turn off the offer to update to the latest version of Windows' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0300</td><td >Ensure 'Turn off the Store application' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0301</td><td >Ensure 'Allow Basic authentication' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0302</td><td >Ensure 'Allow unencrypted traffic' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0304</td><td >Ensure 'Allow Remote Shell Access' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0306</td><td >Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0307</td><td >Ensure 'Disallow Digest authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0308</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0309</td><td >Ensure 'Do not allow COM port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0310</td><td >Ensure 'Do not allow drive redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0311</td><td >Ensure 'Do not allow LPT port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0312</td><td >Ensure 'Do not use temporary folders per session' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0313</td><td >Ensure 'Apply UAC restrictions to local accounts on network logons' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0323</td><td >Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0324</td><td >Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0325</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' set to 'XTS-AES 256-bit'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0328</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0329</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0330</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0331</td><td >Ensure 'Configure minimum PIN length for startup' set to 'Enabled' and 'minimum characters' set to 10.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0332</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0333</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0334</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0335</td><td >Ensure 'Configure use of passwords for fixed data drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0336</td><td >Ensure 'Configure use of passwords for operating system drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0337</td><td >Ensure 'Configure use of passwords for removable data drives' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0338</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0339</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0340</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0342</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Save BitLocker recovery information to AD DS for fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0343</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Save BitLocker recovery information to AD DS for operating system drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0344</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Save BitLocker recovery information to AD DS for removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0345</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key and PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0346</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0347</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0348</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0349</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0350</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0351</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0352</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Require use of smart cards on fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0353</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Require use of smart cards on removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0354</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Do not allow write access to devices configured in another organization'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0355</td><td >Ensure 'Password Settings' set to 'Large letters + small letters + numbers + specials'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0358</td><td >Ensure 'Require additional authentication at startup' set to 'Allow BitLocker without a compatible TPM'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0359</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0360</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (Test)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0361</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (True)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0362</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0363</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow 48-digit recovery password'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0364</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Require 48-digit recovery password '.</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0365</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 48-digit recovery password'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0366</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0367</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0368</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0369</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Password Length' and set to greater or equal 15.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0370</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0371</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0372</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0373</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0374</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives (Enabled)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0375</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0376</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Store recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0377</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0378</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0380</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0384</td><td >Ensure 'Password Age' set to less or equal 42.</td><td >Registry value is '10'. Expected: 42</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0385</td><td >Ensure 'Require additional authentication at startup' set to 'Require startup PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0386</td><td >Ensure 'Turn on PowerShell Transcription' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0387</td><td >Ensure 'Turn on PowerShell Script Block Logging' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0388</td><td >Ensure 'Require secure RPC communication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0389</td><td >Ensure 'Set client connection encryption level' set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0390</td><td >Ensure 'Set time limit for active but idle Remote Desktop Services sessions' set to 'Enabled: 5 minutes'.</td><td >Registry value is '900000'. Expected: 300000</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0391</td><td >Ensure 'Set time limit for disconnected sessions' set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0044</td><td > Ensure 'SeTrustedCredManAccessPrivilege' is set to 'Enabled'</td><td >The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0045</td><td > Ensure 'SeNetworkLogonRight' is set to 'Administrator, Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0046</td><td > Ensure 'SeTcbPrivilege' is set to 'None'</td><td >The user 'SeTcbPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0047</td><td > Ensure  'Adjust memory quotas for a process' set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0048</td><td > Ensure 'Allow log on locally' set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0049</td><td > Ensure 'SeBackupPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0050</td><td > Ensure 'SeSystemtimePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0051</td><td > Ensure 'SeTimeZonePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user right 'SeTimeZonePrivilege' contains following unexpected users: BUILTIN\Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0052</td><td > Ensure 'SeCreatePagefilePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user 'SeCreatePagefilePrivilege' setting does not contain the following users: NT AUTHORITY\LOCAL SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0053</td><td > Ensure 'SeCreateTokenPrivilege' is set to 'None'</td><td >The user 'SeCreateTokenPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0054</td><td > Ensure 'SeCreateGlobalPrivilege' is set to 'Administrator, SERVICE, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0055</td><td > Ensure 'SeCreatePermanentPrivilege' is set to 'None'</td><td >The user 'SeCreatePermanentPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0056</td><td > Ensure 'SeCreateSymbolicLinkPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0057</td><td > Ensure 'SeDebugPrivilege' is set to 'Administrator'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0064</td><td > Ensure 'SeEnableDelegationPrivilege' is set to 'None'</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0066</td><td > Ensure 'SeRemoteShutdownPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0067</td><td > Ensure 'SeAuditPrivilege' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0068</td><td > Ensure 'SeImpersonatePrivilege' is set to 'Administrator, LOCAL SERVICE, NETWORK SERVICE'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: NT AUTHORITY\SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0069</td><td > Ensure 'SeIncreaseBasePriorityPrivilege' is set to 'Administrator'</td><td >The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: Window Manager\Window Manager Group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0085</td><td > Ensure 'SeRelabelPrivilege' is set to 'None'</td><td >The user 'SeRelabelPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0086</td><td > Ensure 'SeSystemEnvironmentPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0087</td><td > Ensure 'SeManageVolumePrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0088</td><td > Ensure 'SeProfileSingleProcessPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0089</td><td > Ensure 'SeSystemProfilePrivilege' is set to 'Administrator, NT SERVICE/WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0090</td><td > Ensure 'SeRestorePrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0091</td><td > Ensure 'SeShutdownPrivilege' is set to 'Administrator, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0094</td><td > Ensure 'SeTakeOwnershipPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0104</td><td > Ensure 'SeDenyNetworkLogonRight' is set to 'Local account, Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0105</td><td > Ensure 'SeDenyBatchLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0106</td><td > Ensure 'SeDenyServiceLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0107</td><td > Ensure 'SeDenyInteractiveLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0108</td><td > Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'Local account, Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0180</td><td > Ensure 'Load and unload device drivers' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0181</td><td > Ensure 'Lock pages in memory' is set to 'No one'</td><td >The user 'SeLockMemoryPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0182</td><td > Ensure 'Log on as a batch job' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0183</td><td > Ensure 'Log on as a service' is set to 'No one'</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines
+The user 'SeServiceLogonRight' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0184</td><td > Ensure 'Manage auditing and security log' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0219</td><td > Ensure 'Replace a process level token' is set to 'Local Service, Network Service'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0303</td><td > Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop User'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0001</td><td > Ensure 'Maximum password age' is set to between 1 and 42</td><td >'MaximumPasswordAge' currently set to: 120. Expected: x <= 42 and x >= 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0002</td><td > Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0100</td><td > Ensure 'Reset account lockout counter after' is set greater or equal 15</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0102</td><td > Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0103</td><td >Ensure 'Account lockout threshold' is set greater or equal 1 and less or equal 10</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0162</td><td > Ensure 'Enforce password history' is set greater or equal 24</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0186</td><td > Ensure 'Minimum password age' is set to greater or equal 1</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0187</td><td > Ensure 'Minimum password length' is set to greater or equal 14</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0008</td><td > Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0011</td><td > Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0012</td><td > Ensure 'Audit Security Group Management' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0013</td><td > Ensure 'Audit account management' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0014</td><td > Ensure 'Advanced security audit policy settings' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0015</td><td > Ensure 'Audit Process Creation' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0016</td><td > Ensure 'Audit Other Logon/Logoff Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0017</td><td > Ensure 'Audit Account Lockout' is set to 'SuccessAndNotFailure'</td><td >Set to: Failure</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0018</td><td > Ensure 'How to track users logon/logoff' is set to 'SuccessAndNotFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0019</td><td > Ensure 'Audit Policy: Logon-Logoff: Logon' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0020</td><td > Ensure 'Audit Policy: Logon-Logoff: Special Logon' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0021</td><td > Ensure 'Audit Policy: Object Access:Removable Storage' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0022</td><td > Ensure 'Audit Policy: Policy Change: Audit Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0023</td><td > Ensure 'Audit Policy: Policy Change: Authentication Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0025</td><td > Ensure 'Audit Policy: System: IPsecDriver' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0026</td><td > Ensure 'Audit Policy: System: OtherSystem Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0027</td><td > Ensure 'Audit Policy: System: Security State Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0028</td><td > Ensure 'Audit Policy: System: Security System Extension' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0029</td><td > Ensure 'Audit Policy: System: System Integrity' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="summary"><h1 >Benchmark Compliance</h1><div style="float: left;"><p >Generated by the <i>ATAPAuditor</i> Module Version <i>5.2</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p >Does your system show low benchmark compliance? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15</li><li >DISA Windows 10 Security Technical Implementation Guide, Version: V1R16, Date: 2019-10-25</li><li >CYBERGOVAU Hardening Microsoft Windows 10 version 21H1 Workstations, Version: 10.2020, Date 2020-10-01</li><li >Microsoft Security baseline (FINAL) for Windows 10, Version: 21H1, Date: 2021-05-18</li><li >BSI SiM-08202 Client unter Windows 10, Version: 1, Date: 2017-09-13</li><li >Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03</li></ul><p >This report was generated on 12/07/2022 10:32:36 on DESKTOP-UTMU75K.fb-pro.com with ATAPHtmlReport version 1.8.</p></p></div><div id="riskMatrixSummaryArea"></div><h1 style="clear:both;"></h1><p >A total of 2682 tests have been executed.</p><div class="gauge"><div title="True 2157 test(s), 80.43%" style="width: 80.43%" class="gauge-meter passed"></div><div title="False 521 test(s), 19.43%" style="width: 19.43%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 4 test(s), 0.15%" style="width: 0.15%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 2157 test(s) &#x2259; 80.43%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 521 test(s) &#x2259; 19.43%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 4 test(s) &#x2259; 0.15%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">CIS Benchmarks</h2><p >A total of 512 tests have been executed in section CIS Benchmarks.</p><div class="gauge"><div title="True 478 test(s), 93.36%" style="width: 93.36%" class="gauge-meter passed"></div><div title="False 33 test(s), 6.45%" style="width: 6.45%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 1 test(s), 0.20%" style="width: 0.20%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 478 test(s) &#x2259; 93.36%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 33 test(s) &#x2259; 6.45%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 0.20%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">DISA Recommendations</h2><p >A total of 161 tests have been executed in section DISA Recommendations.</p><div class="gauge"><div title="True 133 test(s), 82.61%" style="width: 82.61%" class="gauge-meter passed"></div><div title="False 25 test(s), 15.53%" style="width: 15.53%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 3 test(s), 1.86%" style="width: 1.86%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 133 test(s) &#x2259; 82.61%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 25 test(s) &#x2259; 15.53%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 3 test(s) &#x2259; 1.86%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">CyberGovAu Benchmarks</h2><p >A total of 381 tests have been executed in section CyberGovAu Benchmarks.</p><div class="gauge"><div title="True 196 test(s), 51.44%" style="width: 51.44%" class="gauge-meter passed"></div><div title="False 185 test(s), 48.56%" style="width: 48.56%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 196 test(s) &#x2259; 51.44%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 185 test(s) &#x2259; 48.56%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">Microsoft Benchmarks</h2><p >A total of 357 tests have been executed in section Microsoft Benchmarks.</p><div class="gauge"><div title="True 306 test(s), 85.71%" style="width: 85.71%" class="gauge-meter passed"></div><div title="False 51 test(s), 14.29%" style="width: 14.29%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 306 test(s) &#x2259; 85.71%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 51 test(s) &#x2259; 14.29%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS Logging</h2><p >A total of 51 tests have been executed in section BSI Benchmarks SiSyPHuS Logging.</p><div class="gauge"><div title="True 48 test(s), 94.12%" style="width: 94.12%" class="gauge-meter passed"></div><div title="False 3 test(s), 5.88%" style="width: 5.88%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 48 test(s) &#x2259; 94.12%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 3 test(s) &#x2259; 5.88%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS HD</h2><p >A total of 384 tests have been executed in section BSI Benchmarks SiSyPHuS HD.</p><div class="gauge"><div title="True 327 test(s), 85.16%" style="width: 85.16%" class="gauge-meter passed"></div><div title="False 57 test(s), 14.84%" style="width: 14.84%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 327 test(s) &#x2259; 85.16%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 57 test(s) &#x2259; 14.84%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS ND</h2><p >A total of 292 tests have been executed in section BSI Benchmarks SiSyPHuS ND.</p><div class="gauge"><div title="True 252 test(s), 86.30%" style="width: 86.30%" class="gauge-meter passed"></div><div title="False 40 test(s), 13.70%" style="width: 13.70%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 252 test(s) &#x2259; 86.30%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 40 test(s) &#x2259; 13.70%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS NE</h2><p >A total of 262 tests have been executed in section BSI Benchmarks SiSyPHuS NE.</p><div class="gauge"><div title="True 223 test(s), 85.11%" style="width: 85.11%" class="gauge-meter passed"></div><div title="False 39 test(s), 14.89%" style="width: 14.89%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 223 test(s) &#x2259; 85.11%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 39 test(s) &#x2259; 14.89%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHus-BSI</h2><p >A total of 7 tests have been executed in section BSI Benchmarks SiSyPHus-BSI.</p><div class="gauge"><div title="True 5 test(s), 71.43%" style="width: 71.43%" class="gauge-meter passed"></div><div title="False 2 test(s), 28.57%" style="width: 28.57%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 5 test(s) &#x2259; 71.43%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 2 test(s) &#x2259; 28.57%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHus-BSI Bundespolizei</h2><p >A total of 275 tests have been executed in section BSI Benchmarks SiSyPHus-BSI Bundespolizei.</p><div class="gauge"><div title="True 189 test(s), 68.73%" style="width: 68.73%" class="gauge-meter passed"></div><div title="False 86 test(s), 31.27%" style="width: 31.27%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 189 test(s) &#x2259; 68.73%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 86 test(s) &#x2259; 31.27%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol></div><div class="tabContent" id="foundationData"><h1 >Security Base Data</h1><div id="systemData"><h2 style="margin-top: 0px;">System information</h2><table id="summaryTable"><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-UTMU75K.fb-pro.com</td></tr><tr ><th scope="row">Domain role</th><td >Member Workstation</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 10 Pro</td></tr><tr ><th scope="row">Build Number</th><td >Version 21H2 (Build 19044.2251)</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr><tr ><th scope="row">System Uptime</th><td >0:01:58:33</td></tr><tr ><th scope="row">Free disk space</th><td >40.3 GB</td></tr><tr ><th scope="row">Free physical memory</th><td >23.1%  (4.8 GB / 20.7 GB)</td></tr></tbody></table></div><h2 >Table Of Contents</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#Security-Base-Data">Security Base Data</a><ul ><li ><a href="#Security-Base-DataPlatform-Security">Platform Security</a></li><li ><a href="#Security-Base-DataWindows-Base-Security">Windows Base Security</a></li><li ><a href="#Security-Base-DataPowerShell-Security">PowerShell Security</a></li><li ><a href="#Security-Base-DataConnectivity-Security">Connectivity Security</a></li><li ><a href="#Security-Base-DataApplication-Control">Application Control</a></li></ul></li></ul><h2 >Security Base Data Details</h2><section ><h1 id="Security-Base-Data"><span class="failed">Security Base Data</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><section ><h1 id="Security-Base-DataPlatform-Security"><span class="passed">Platform Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-001</td><td >Ensure the system is booting in 'UEFI' mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-002</td><td >Ensure the system is using SecureBoot.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-003</td><td >Ensure the TPM Chip is 'present'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-004</td><td >Ensure the TPM Chip is 'ready'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-005</td><td >Ensure the TPM Chip is 'enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-006</td><td >Ensure the TPM Chip is 'activated'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-007</td><td >Ensure the TPM Chip is 'owned'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-008</td><td >Ensure the TPM Chip is implementing specification version 2.0 or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataWindows-Base-Security"><span class="failed">Windows Base Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-009</td><td >Get amount of active local users on system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-010</td><td >Get amount of users and groups in administrators group on system.</td><td >Amount of entries: 2; 
+ </td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-011</td><td >Ensure the status of the Bitlocker service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-012</td><td >Ensure that Bitlocker is activated on all volumes.</td><td >Bitlocker is not activated on all volumes.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-013</td><td >Ensure the status of the Windows Defender service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-014</td><td >Ensure Windows Defender Application Guard is enabled.</td><td >Windows Defender Application Guard is not enabled.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-015</td><td >Ensure the Windows Firewall is enabled on all profiles.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-016</td><td >Check if the last successful search for updates was in the past 24 hours.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-017</td><td >Check if the last successful installation of updates was in the past 5 days.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-018</td><td >Ensure Virtualization Based Security is enabled and running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-019</td><td >Ensure Hypervisor-protected Code Integrity (HVCI) is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-020</td><td >Ensure Credential Guard is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-021</td><td >Ensure Attack Surface Reduction (ASR) rules are enabled.</td><td >Compliant (12 rules enabled). For more information on ASR rules, check corresponding benchmarks.</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataPowerShell-Security"><span class="failed">PowerShell Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-022</td><td >Ensure PowerShell Version is set to version 5 or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-023</td><td >Ensure PowerShell Version 2 is uninstalled.</td><td >PowerShell Version 2 is supported.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-024</td><td >Ensure PowerShell is set to configured to use Constrained Language.</td><td >Language Mode is not set to 'Constrained Language'. Current configuration: FullLanguage</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-025</td><td >Ensure Execution policy is set to set to AllSigned / RemoteSigned.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-026</td><td >Ensure PowerShell Commandline Audting is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-027</td><td >Ensure PowerShell Module Logging is set to 'Enabled'.</td><td >PowerShell Module Logging is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-028</td><td >Ensure PowerShell ScriptBlockLogging is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-029</td><td >Ensure PowerShell ScriptBlockInvocationLogging is set to 'Enabled'.</td><td >PowerShell ScriptBlockInvocationLogging is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-030</td><td >Ensure PowerShell Transcripting is set to 'Enabled'.</td><td >PowerShell Transcripting is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-031</td><td >Ensure PowerShell InvocationHeader is set to 'Enabled'.</td><td >PowerShell InvocationHeader is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-032</td><td >Ensure PowerShell ProtectedEventLogging is set to set to 'Enabled'.</td><td >PowerShell ProtectedEventLogging is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-033</td><td >Ensure .NET Framework version supports PowerShell Version 2 is uninstalled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataConnectivity-Security"><span class="failed">Connectivity Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-034</td><td >Ensure system is configured to deny remote access via Terminal Services.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-035</td><td >Ensure system is configured to prevent RDP service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-036</td><td >Ensure NTLM Session Server Security settings are configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-037</td><td >Ensure WinFW Service is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-038</td><td >Ensure NetBios is set to 'Disabled'.</td><td >NetBios is 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-039</td><td >Ensure SMBv1 is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataApplication-Control"><span class="failed">Application Control</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-040</td><td >Ensure Windows Defender Application Control (WDAC) is available.</td><td >Only supported on Windows 10 Enterprise.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >SBD-041</td><td >Ensure Windows Defender Application ID Service is running.</td><td >AppLocker is not running. Currently: Stopped</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="references"><h1 >About us</h1><h2 >What makes FB Pro GmbH different</h2><h3 >What do we want?</h3><p >Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet.</p><h3 >How do we achieve this? </h3><p >We implement in-depth IT security for our customers. And we always do so in a state-of-the-art, efficient and automated manner.</p><div id="referencesContainer"><div ><h2 >Check out our hardening solution</h2><a href="https://www.fb-pro.com/enforce-administrator-product/"><img width="125px" height="200px" src=" data:image/jpeg;base64,/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAARgAA/+4ADkFkb2JlAGTAAAAAAf/bAIQABAMDAwMDBAMDBAYEAwQGBwUEBAUHCAYGBwYGCAoICQkJCQgKCgwMDAwMCgwMDQ0MDBERERERFBQUFBQUFBQUFAEEBQUIBwgPCgoPFA4ODhQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU/8AAEQgBygEsAwERAAIRAQMRAf/EANIAAAEEAwEBAAAAAAAAAAAAAAABAgUGAwQHCAkBAQACAwEBAQAAAAAAAAAAAAABAgMEBQYHCBAAAQMDAQQECQUJDAcHBAMAAQIDBAARBQYhMRIHQVETCGFxgZGxIjIzFKFCUnIjYoKSssJDgzQVwdGiRLRFdcUWhjdH4VNjc5OjNbMkdIQ2dhfwVCY4ZCVGEQEAAgECAwQGCAMECgIDAAAAAQIDEQQhMQVBgRIGUWFxMkITkaGxwdEighTw4TNScpJD8WKywiMkNBUlNaLSU4NE/9oADAMBAAIRAxEAPwD39QFBTuYXNPQXKzEnL64zTGMZUD8PHUeOVIUPmssoutZ8QsOm1B4h5id/PWuezDcLlfAa09gmXCfjsi2iXOkhNyOJu/ZtJNtwKleGg1cV34+csEp/aUTDZRI9rjjuxlHytOW+Sgu2K7/+TQQM7oZl0fOVBnKb8wdaV6aC7Ynv58tpJAzGnszjid5aTHlpHmdbPyUF2xXfD5C5O3a6gexqj82dBlN28akNrT8tBd8Tzz5O5ywxmuMM6tW5CpjTS/wXSk/JQXKFmsPkUBzH5CNLQr2VMPNug38KSaDeoCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoNPLZXHYLFzc1l5CYmLxzDkubJcvwNMMpK1rNrmwSCaDwtzg7/EiUl/C8mYPYMm6DqnJt3WofSjRVbvAt78DpoPGOez+d1TlX87qbJScvmZBJenTXFPOm+2wKvZT1JTYUGDH/rbfl9BoJygKAoCgRSELFlpCh4Rf00DmFuRF9pEcXGcG0LYWplXnQRQWfFcy+ZGDKTiNYZmHweylue+Ui3gWpQ6KC7YrvR8+sQQWtYvS0j5s5iPKv4ytu9Bd8T34uckEj9oxsNlU9PaxnWFHysupHyUF2xXf+yqLDOaHYe+kuDPU15kusr/ABqC64vv6ct5Fhl9O5rHqO8tpjy0DypdSr+DQXTF98fkJkuEO59/GrVb1Z8KSza/WoIUn5aC8YnntyczhSnGa3w7ql+ylcttlW3wOlJ6aC5wM5hMoAcZkos0HcYz7b1/wFGg36AoCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoKLzp/wg15/QGT/AJI5QfGNr3SPqj0UDqDZx/6235fQaCdoCgKAoCgKAoCgKAoCgKBqm21+0kK8YBoHsLcjKC4zi2FDcppamz/BIoLPieZfMbBEHDauzMK24Mz5AT5isjpoLtiu9Hz5xFgzrKRKSPmzmI0sHxlxoq/hUF2xffi5zQbCfHw2USN5diux1nysugfwaC6Yvv8A+YQEpzmhmHd3EuDPUjx2S80fxqC64vv7cupBSMvpvM48n2lNpYlJH4DiSfNQXbFd8jkLkilL2dkY0q/++hSGwPGUJWKC8YnnxyazhCcdrjDqUdyXpSI6vM8UHooLpj85hMskLxWSizkHcqM+28POhRoN+gKAoCgKAoCgKAoCgKAoKLzp/wAINef0Bk/5I5QfGNr3SPqj0UDqDax/6235fQaCcoCgKBpcbB4StIUOgkXoHDbu20BQFAUBQFAUBQFAUBQFAUBQFAUCFKTvAPkoHMrXHUFx1qZWNy2lFCvOmxoLNi+ZPMXB2/Y+rszCCdyGshI4PwVLKfkoLri+9Bz6xISGdZyJSE2sicxGk3t1lTYV0fSoLri+/Bzpg8IyDOGyiRv7SK5HUfK05b5KC7Yrv/ZpBAzmh4zyfnGDOW0fIHW1+mgu2K7+3LyQQMzprMY++9TPw8sD/mNn5KC7Yrvj8hsnYP5uTjFHonQZKQPGppDifloLviefXJjOEDG65w61q3Nuy246/wAF4oPT1UFzg5/BZRAcxuTiTG1blR323Qb+FCjQSNAUBQFBRedP+EGvP6Ayf8kcoPjG17tH1R6KB1BtY/8AW2/L6DQTlAUBQewcJntE8v8Auw6E1dn9B4rVkifLdx74mNNNvcK3ZC+PtuyWokcFgDQUo81O6zmP+t8m5GOWr2ncXKRs8QS4z6KDmXNOXyfmzMY9ygx+TxsMtO/teNllKWoPcQ7PsipbmzhvexoLjyd7vS+cGgtS6ixeVci6lw8lUXG40toVGlLEdL6ULWbKQVFXCCNlBxJ5l+M87GlNKYlMLU0+w4OFbbjZKVJUDuIIsaDGSEi53UFo1ty+1by7mQYOroKYUjJREZCCEOtvpcjOGyV3bJA2i1jtoInGYDP5tEh3CYmZk24nCZSoUdyR2XHfh4+zBtextQasqDPgKKZ8KTEUN4kMOtfjpFBrIcQu/AoKtvsQbUDqAoCgKAoCgKAoCgKAoCgKAoCgRSUqFlAKHURegVm8ZfaRlKjuDaFsqU0rzoINBZMZzE5hYQp/ZGrczDCfZS1PkFI8ilqFBdsX3nefOJUks60kyQn5s5piUD4+0bJoLpju/DzqxqSue3h8qlAJIfiLZJtfpYdR6KD3z/aWX/8AHf8AbHsW/jv2L+1vh/W7LtfhPiODffhvs33tQRnOn/CDXn9AZP8AkjlB8Y2/do+qPRQOoNnH/rbfl9BoJ2gKAoPTGuiE9y7lwVEAfthW07PnS6DzKFoO5QPiNA6g9U8hdQ5PSPdv5l6rwy+DJ4TLxJ8bbYLLKIxLavuVpuk+OggO8npHE6hhYjvB6Eb4tJawSgZthI9aHliOElwDdxlJQv8A2ib/ADqDzm57BoPSnfJ/9T6E/wDa0T8dVBvd03M5HT2i+cmcxL3YZPHYhmXDeKQsJeYbkKQopVcGxG40Ffid8jnClCU5VvCZhFvWEzHJBOzpLS0j5KDn/NPmtJ5qSsZNmaexeBlY5t1pw4hstJkdspKuJwEb08NhtO+gneTHIbK81G52oMpkW9NcvsRxftPUEkAgrQOJTbIWUpJSNq1qPCnwnZQXSU53KsE4cQGdTakW36jubjuOIbUobCpsAsgjqs3QamV7v2ktdYOXqnu8alVqRMFPa5DSWSAZy7KN/wBncI4zs2BSfW3BRNB56Whba1NuIU26hRQ42sFKkqSbFKgdoIOwig6Py15G695s4vJZXRiITzWKfRFksy5AjOFxxHaJ4LpIIt4aCTzHdh574Rpb0jR78plsEqVAeYlGw6kpWFHyCg5TJjSYch2HMZcjS2Flt+O8hTbra07ClaFAFJHURQYqBCpKfaIHjNAAg7QbigWgKAoCgKAoCgKAoMb/ALhz6p9FB9cf8jf7p/1bQZ+dP+EGvP6Ayf8AJHKD4xte7R9UeigdQbOP/W2/L6DQTtAUBQez8RzLyPKzum6Az+NxWPzK5U52C9DyrZdYLbjklZIA3KugbaDnyu8/o3Kn/wDKeS2m5t/bcipbZWevapknb46DgWfnQMnncnksXBTi8ZMlPSIeNQeJMZl1ZUhkHpCAeGg9C8rP/wBSecn/AItr/so1BF92nXeHcdy3I/Xh7XQuu0mPGUs2ETKLFkKST7PaWTY9DiU0HIeY+hsxy21dldF5wXm41wBuQAQiRGXtafRfoWnzG46KDt3fJ/8AU+hP/a0T/tFUGz3VsdOy+hOdOKxjC5WRm4VqPEjNi7jrzrUhKEJHWSbCg4nP5T80cQn/APs9GZqNwgXKoD6h50pIoKq/DmsSDBeYcYnlSWgw8hTbgccICQpKgCNpG+g9Pd6DKHl/pDQ/IXTqzFw0TGtZPPJbNlSn1KIQHCN4U4HHVDpNuqg8uUE9ozWWf5f6mgat0xIMfLY9wLSASEPNX9dl0fOQseqQfHQdi7zunsLOf0tzo0qwI+A5iRBJlx02s1k20hTl7bLrF+L7pJPTQbHKhxxruu853WVqbdRLx5StCilQP2O0EWIoOQ4XmZzG03Ibk4LVmWhOskKQEzHnG9hvZTbqloUOsFNB2Xno7G5l8oNDc9VxGomqpMhzAanVHQENyXWeNKHSB08Tdx1BXD0Cg53yR5Ryub2rF4xyScdpnFNfG6iyuwdhFBNkIKvVC12NidiQCo7qDp2W56cmuXshzT3KPlnis1j4pLTmos8n4hctSTYrR2iVrKT0KJTfoSBQa0PXPd/5xOjB680gzy51DLIbg6rwKgmEh5WxPxDVkgJJ3lSSPCnfQcH1jgU6S1PmNNt5GPl0YmUuInJQyTHfDZtxJv5jvAN9poPQ2rOQnIHSsuBiM9zMn6czk2BGyIYmxBJZ7OUi4IcbbAtxBWwqoKlmeRGg2sNkcxpfnHp/MmBGeloxziRHlP8AYoLnZoHa+2oCwHDvoOHA3APXQFAUBQFAUGN/3Dn1T6KD64/5G/3T/q2gz86f8INef0Bk/wCSOUHxja92j6o9FA6g2sf+uN+X0GgnKAoCg9O60YkP9zDlyI7Dr6kZdSlpZbW6Qnili5CASB4aDzAtaWjwvfZKG8OAoPmVagErQv2FBXiIPooPTHKz/wDUnnJ/4tr/ALKNQeagpaFhbaihxBCkLSbKSpJuCCNxB2ig9R6w7PvJcjm9eRkpVzY5cNfC6kZQPtZ2NA4+1AG03ALqfugtPSKCN746kq1LoJSSClWlYhBG4grVQbHdZnTcZoHnVksbIXFyETCNPxZLR4XG3W2pCkrSeggi4oOeY3vN8+cclPZa1lvgDdLaYkdH3bd6Cjap1pnNYarf1vqZ5ErNyHo8mY622llK/heACyECw9VA3UHcu+bHMnXumNWMHtMVqDT0ZyG8NqFFhaioA/VdQaDzfQFB6R1qm3cz5embf4j9vSDAvv7Euyr28FqCV7uukpuu+QnNbSONlRoc7KT4TTMmcstRkKQhtz11gEgEJtu30Fbf7mfOhCwYgw02OTYyGcikNgE7zxoSbW27AaDY565HTeh+WGkOQmn8sxnMth5TmX1TPhq446JjnGoNJULi/E4dm8JSL7TQZ9NSHNIdzjUmYx57HJaxz4xUiQjYsxU8KFIuNoBQhafvjQebt2wbqAoGLADZAFgLWFB3/vcf4hae/wDa2K9DlBwIpSfaAJG64oFoCgKAoCgKDG/7hz6p9FB9cf8AI3+6f9W0GfnT/hBrz+gMn/JHKD4xte6R9UeigdQbWP8A1tvy+g0E5QFAUHXtC95fmry809C0rgJUBeBx4WmLFmQUPFIcWVqBWChR9YneaC4o75GsZA4c9ozTGXQfa7SI40T51OD5KDn/ADV5tYbmXBxrMHQuK0lkIT7j0mbiuEGShxASELAabNgRxC5NBsaN5sYjTfJbXfK+XAlPZTVbqHoU9ot/DtcKGk2dCiFfmz7IO+g5RQdB5MczZXKnXMTUIQZGElJMDUEAbRIx7xsvZuKm/bR4RbpNB0Hvbar0dq3V2mJWh8rFy2Gh4VMQOQ1FSGiiQ4UtqBAKSEkbDQbndrkR2eXHO5l55tt17AgMtrWlKl8LMm/CCbm3goPOCfZHiFAtB6e5cyML3gOUrXJPNTmsfzI0oVStCz5SuFEqOAf+7FR2mwPZqSNvDwqF+E0HnnVGk9S6Jyz+D1bi38TlI5KVsyUFKVAfObX7K0noUkkUE5yy5Wau5sagj4LS8RaoylpGQy6kH4SGyT6zi12sVAeygeso0HT+9Fq3Twlab5PaLdD2l+X0f4Z55BCkuZEoDaxxDYS2keufpqV1UD+Vm3us86f/ABeP3bP9TQc35Qcyshyy5g4PU5kvrxEZ8M5aIXFqbXCkfZvXQSQSlJ4hs6KCZ7xPLyPy85mT2sUlP9l9QJGcwDrfuzGmHiWhJ/2ayR9UpoLvy+ZXrzura60VAHbZ7SOUb1GzETtcXEUAtZSOn1Uu+UUHnAEKAINwdoI6jQLQNc9g0HtHnrzF5Y6a1JgsLrjllF1dKXp/Gvpy6pHw8lDS0EBobAeFJST7XTQefeZOpuS2fw8VPLjRc/S2fTJC5jkmWZUZcXhUChILq7K4iD7I2UHMqAoCgKAoCgxv+4c+qr0UH1x/yN/un/VtBn50/wCEGvP6Ayf8kcoPjG37tH1R6KB1BtY79cb8voNBOUBQFAqQVEJSLqJsB4TUTOkarVrNrRWOMzwZHYshkcTrakJva53XrHTNS/Cs6t/c9N3W2r4suO1Y5azyYgCdg2nqrK58RMzpAII3i1CYmOcCiBQFgN1AWF79I3GgKAoHsPPRn2pMZ1bElhYcZfaUUOIWk3SpKkkEEHcRQd6033veaGJxzeK1JExesobICWnMzHvJCR9JxvYs+FSb0GprHvXc0NT4tzBYdMHR+GeBS8zgWiy8tKt47Ym6QengAPhoOG9Z3k7STtJJoOpaL5mYTTnJvmDy4mxpTmX1Y7Gex8poIMZv4ct3DpKgoX4DawNBy02NwdoO8UHdc7rPS3MTu9YjD5/KsROZfL+SWMOzIKg7kcQ5wp7NCrEFSUkCxP5vw0FF5Q80Mpyk1pF1TAa+MgrSYmZxhNky4LpHG3t2cQ9pBPT4CaDrmou73hOaS3db93bLwp+IyCi/N0jNeTEnY59z1ltpCr2Te9kqtb5qiKCGwndA5sSJRc1f8BpHTzHrzsvOlsuhtoe0UIaUQTb6akig5RzLxGjsFq/J4rQOZXn9LRy2mJlHU8JcXwDtQCAAtIXfhWAAejroOw97PFZWRrnT0yNAkvwxpjFIMhphxxoLAcunjSki+3deg87uXaPC6lTaupaSn0gUBQFAUBQFAUGN/wBw59U+ig+uP+Rv90/6toM/On/CDXn9AZP+SOUHxja90j6o9FA6g2sd+uN+X8U0E9QFqBLUG5i2e0lpUR6rY4z4+itPeX8OOY9PB6fy1tPn72szyx/mn7vrS0kJlR5DSdqkG33yQFVycUzjvW09r6L1Gtd9tc+KvvUnT9VYi38kJB/XGPriu1uP6dvY+WdE/wCuw/34TcqYzGUhLySrjvYgA7vHXFw4LZImazyfVOqdXwbK1a5azbxx2RE8va1pUOPLY+IigBdrgp2BVugjrrYw574r+C/JxOpdI2u/237jaxEW014cItpziY7LNPFsNSHnA6kKSE3APXetzeZLUrHhnTi8z5Z2OHdZ7xlr4qxX69Rk4qIziC0nhbWN3hFNpmnJWdecHmTpmPZ5azijw0vH1xz+5sMYtpyOhxwqDik8Rsdm3dWvk3lq3mI00drY+V8Oba1yZJtF7V14cvVw09DRhxhKeLRVwbCb2vurez5fl18WmryXSOnRvs/ypt4fyzOumvIrsQtyxECrkkALIt7VRTP4sfj0W3PS5xb6NrFtZmYjxaen1FlQXYgSpZCkqNrpvsPlqMG5rl4QydV6Jm2EVteYtW06axrz9epjcOQ6yX0JBbF7m4v6u/ZVrZ6Vt4Z5sGDo+5z4Jz0rE0jXtjs58DGmHnwSygrA328NZL5a096dGrtthuNzEzipN4jnoZY34betut03q+rS8M66dpVIWj20lI8IIqItE8pZL4r096s19sTBtWYdYFDUUSzRJkzHyUzMdKehTEezIjOrYdHiW2Umg3cpqPUmcbSzm81PybCfZamy3pDY+9cWR8lBFkAix2ig7Nie9Xz3w7DUVjUyH4zCEtNtSocZ0BCQABfgB2AUEurvc8x5bTjGbwmm8uhxCkKMnGgK9YWuClY3X2UHA6AoCgKAoCgxv+4c+qfRQfXH/I3+6f8AVtBn50/4Qa8/oDJ/yRyg+Mbfu0fVHooHUG1jv1xv778U0E9QFAUE1iGuBhTx3uHZ9VNcTfX1vFfQ+reUNp8vb2zTzyT9Vf56tiNGVHW6sucYdVxEWtY1rZs0XiI000dzpvTLbTJlvN/HGWfFy00n6UUlnscqlvo7QFPiO0V1pv49vM+p86xbX9t1muPsjJrHsnjDNmvbZ8SvSKw9P5WdPzl/Uxf3bfbDNhgoRlk+yV+r5ttYN/MeOPY63k+LRtbTPKb8Po4seIA7aSobr2HnNZN9P5atHylSJ3GeY5axH/ylsSWhOYSE70O2PiBsr5KwYr/Jvx7Y/wBDr9R28dU21fDzpl0n2Rbw2+ri20qSVqaHzAL+Xd6K1JidIt6XpMeWs5LYq/BFfr10+qELjE2nLT1BY+WuzvJ/4Udz5j5Yr4eo2j0Vv9sHSP8ArCPrI9FVxf8ATT7JZN//AO9r/fp9kJOQ2iQ2uOo7VC48B6D565eK045i8Pf9R21N5jvt55zGserjwn6WrDSpGNdQoWUntAR4RW1uJic8THqee6Pjtj6VkraNJr82J9sMeE9h3xp9FZOo8472l5K9zL7a/ZJuKbQX33CLrSbJv0XJuatvbTFKx2SweVcGO25zZJ42rPD1azOss7mSaC3GJLSk2vYK2hVv36w12lpiLUn+TrZ/MmGt8mHc4prprp4uMW9H+LslrRJ0VDKGXWrqudvCCPWNbOfbZLWm1ZcLpPW9niwVw5cettZ+GJjjPDnx4NyQnHscJfbSOLYCE33eKtLFOa/uzPD1vU9Rx9L2vhnPjrHi5fl/BqxY8OS/I4U3ZHD2dri1xtrazZcuOldZ48dXn+mdO2G+3Ofw11xx4fBprGmscfrZDjYTyVCOuyxsuFcQB8IrHG7y0mPFHBt28u9P3NbRt76Wj0W8URPrjmh1pUhSkKHrJJBHhFdmsxMaw+Z5cdsd5pbnWdJ7m+7i1NRy92l1JSFKRbz7a59N5Fr+HTtew3fli2HaTn8esxWLTXT6ePqYIsJyWFltSU8Fr8V+mtjNuK4tNY5uP0vo+XqEW+XaI8GnP16/gynEyxu4D4lVhjfY/W6V/Ke+jl4Z/U1Xo7sdYQ6LKIuADfZW1jy1yRrV5/e7HNtMny8saWmNfSf8HK4eLsV8Piqvz8eunihm/wC07zw+L5V9PZ/EsG7YdhG8VncyY04SN2+iJ4cxQFBjf9w59VXooPrj/kb/AHT/AKtoM/On/CDXn9AZP+SOUHxja92j6o9FA6g2sd+uN+X8U0E9QFAUEgrIp+E+FbbKTw8AVe/jrnxtJ+Z45nXjq9nk8xU/YftaY5rPh8Ouv0/S1okj4d9DhJ4BsUB1GtnPi8dJjtcPpW/nabmmSZnwxPGPVLaflxnZjElBICDZy46BurUx4clcVqT28not71XaZuoYdzSZiK+/rHo5T6225Ixki3aqSojdxBQrUpiz4/dj7Ho9x1Ho+70nLaLeHlrFoY5GRjtMlqJtVbhSQLJSKyYtpe1vFdo9R8x7bDg+VtOM6aRpGlax98m4UoQh0qUASoWubbhVuoRMzGjF5NvSlMk2tETNq859TDFyCIzj6XAVJW4VJ4ejbY1mzbWckVmOyHN6Z1+myyZq5Kzat7zaNNOHGdfp4NnGPGRIlOfSKVAdQ3Ctbd4/BSkeh3PLW8ndbncZJ+Kaz3cYj6mCCOHKPJ6uP01m3M64K9zl9Dp4er5Y9HzP9o2R/wBYR9ZHoq2L/pp9ksO//wDe1/vU+yGzPfMaXHc+bZQWPuSRetfbY/mY7Q7fXd/Oy3+DL2aWi392ZjX8W28lIjulO5SVKuOm431p0mfHGvZL0u6rSNtltXletrfTXn3tDCey740+it/qHOO95DyV7mX21+yWlHVJRJcXGSVKTxFSegpvW7lrSaRF3k+n5d1i3V77aPFavimY9NdeOv8AGvoSjTsfJtqbcbKVp3g70k9INcu9L7a0TE8H0Ha7na9cxWx5KTW1ef8Aq69tbfchCgtv9mdpQvhv4jXb8Xirr6YfKrYpxZ/lzzrfT6LJTNewz41eiuV0/nZ9B85+5i9tvsNwu977392rdQ+HvYvJnPN+n723HiNw1uyC4SFXKriwAvc1qZc9ssRXR39h0nF06+TcTk1i0Trw4RGus+1FNAS8gCB6q1lZH3I211rz8rD7IfO9rWOodTidPy3vNv0xxS4eS7Kdin2Q2D5Tv9NcfwTXHW/rfTI3dc+9y7WeXy4+vXxfVMIILejLWhtZQQeFVja9q73hrkiJmNXyGubPs8lqUvakxOk6TpySz0h5vGNvpX9qQm6jt3765FMVZzzWY4cX0ndb/Pi6RTNW0/MmKfm58+bFjiuY+qRIIUpoBKNltp6azbrTFSKV4eJzPL3j6jubbjcTFpxREV4ds9vcRzMKS8QhsFlJsST6xt00rsImvGeJuPOF6Z5ilInHE6f60+v8BlGW3GUTWvnW4j1g7jU7PJatpx2U8z7TFlwU3uL4tNfXE8p9vZLaektRY7K3UcaVBI2W2er4a08eK2S9oidP9L0m76jh2O1xXyU8cWisdn9n1tPKMNJS3JaATx7FAbAbi4Nq3tlltMzS3Y8r5o2GGlMe4xRFYvz04ROsaxOnp9KMrpvBsb/uHPqn0UH1x/yN/un/AFbQZ+dP+EGvP6Ayf8kcoPjG17pH1R6KB1BtY79cb8v4poJ6gKAoCgKAoCgKA2URpAokqVLQbtqKSeokVWaxPONWXHmyY51paa+ydCpdebWXELIcO9V9pvUWx1mNJjgzYt5mxZJyUvMXn4u0F94uh9SiXgQQo9Y3VEY6xXw6cFrb3NbNGeba5ImJ8U+rkc/JeklJeIUU3AsLb6rjw1x+6y77qWfezWc06zWNI4aMzeSfQx8PZKkcJSCb3saw22lLX8Xa6eDzFucW2/b6VtXSa6zrrpPf2dhIU4wwoBsLCiCbm26p3G3+bpx00V6N1uenRaIpF/Fp26chEnKjOLVwBSHDdQ3EeI0z7eMkRx4wdJ63bY5L28MWreeMdvdLeVmGQklttRcPQbAX8JFaUbG0zxng9Zl834K0mceOfHPp0iNfXMc0RxEucajclXEo+W5rraaRpD5t8ybZPHbn4tZ+nWW/k5TElLQZVxFJJIsRa/jrQ2eG+OZ8UPY+ZeqbbeUxxht4vDM68Jjs9ZcQ600Xe1WEcXDbiNr2qu+pa2mkasvlLd4cE5Pm3imvh01nTXmyY2QntXo7ihwKUpSLnZv2jzVTd4p8NbRzhseXOoUjNl2+SY8N5taNZ4c+Md8H4+KGJL6rgpTZLZuNytvorHus3jx1j08250DpcbbeZrTMeGnCs69luOv0Fayjbj6Wi1biVwhdx5OiovsprTXXkybTzRizbiuP5enit4YtrHd2fe0sq12csqtYOAK8u41u7K/ix6eh5XzRtfk76bacMkRbv5T9cNqT/wBHb8SK1cX/AFM970G//wDQ4/ZRjw7oS64yd6wCnwlPRWXf0maxb0NDyhuq0zXw2+OImPbHZ9DC/jpKXiltBWhRuhQ3WPX1Vmx7qk01mdJcvfeXt3j3E1x0m9bT+W0ctJ9Po07W3PAj45Ecm6vVSPvdprT20/MzzZ6fr1Y2fSqbeZ1t+WPo4y2VmMGY6ZKQpKuEIuLgKtWtWL+K007NXdz32kbfBXc1i0W8EV1jWPF4Y+hpZla+Jtq1mwOIHrO75K3thWNJt2vKecM2SL48WmlIjWPXPL/4/ei66j5+xv8AuHPqn0UH1x/yN/un/VtBn50/4Qa8/oDJ/wAkcoPjG17tH1R6KB1BtY79cb8v4poJ6gKAoCgKAoCgKAoCgKAoC1AlqBKAoCgKAoCgKAoDxUI4AEg3GwjcaJiZidYOW445btFlVt3Eb2qtaRXlGjNl3GXLp8y0205azqeqS+poMKWS0LWR0bN1UjFSLeKI4ti/UNxfDGC15nHGn5fZyYwSkhSTZQ2gjfeskxrGktKl7UtFqzpMcpb6MvJSmykpWfpG4PltWhbY45nhrD2GLzbvKV0tFbz6Z1ie/RqSJDslfG6q53ADYAPBW3ixVxxpV5zfb/NvMnjyzrPZ6I9kM0mb8Qw2zwcBbt6177hasGHb/LvNtddXW6n1r95t8eHweH5enHXXXSND5M5uVHQ2tBD6LHj2WJ3Hz1TDt7Y7zMT+WWx1LrWLfbSmO9ZjLTT83DSeyfXx+1o1vvJMb/uHPqq9FB9cf8jf7p/1bQZ+dP8AhBrz+gMn/JHKD4xte7R9UeigdQbOPUEzGuIgb9+z5poJ4EHcQaBaAoCgKAoCgKAoCgKAoCgKAoEtQFqBKAoCgKAoCgKAoCgKAoCgKAoCgxv+4c+qfRQfXH/I3+6f9W0G5zgiyZvKnW0OEyuTMkYPItMR2Ulbjji4zgSlKRtJJNgBQfMzSHdJ55aoaYddwCNPwlpSfiM2+mKbW39injdP4FB3PSncJxDXA9rnVz8tWwrh4ZgRm/F2z/Gs+RCaDt+me7TyO0o1wQdHxZr5HCuXlVLnvqB37XVWH3oFBJSeQnJWWT22hsUCelttbX4ixQQ8nuv8iZP/APkkMn/YSpLfocoIiT3Q+SD/ALvHZGN/uci9+VxUERJ7lvKd2/w2QzcY+CU04B+G0aCIk9yDRS7/AAmq8ux1do1FdA/gJoIiT3G4e34PXDw+iH8ehXnKHk0ERI7jufTf4PWkFfUHoL7f4ri6CIkdyfmI3f4bUGFfH3RlNellVBEye5xziZ9wrDyfqTij/tGk0ETJ7qHPGP7OCjSP9xkIqvStNBESe7dzyi3KtFzHAOlhbDvm4HDQQ0rkrzfhX+I0PmUhO8piqWP4N6CGlaB17CJ+L0rl2bb+ODI2eZFBFP4jMRjaTjJrJG/tIr6PSig0lns9jgUg/dpUn0gUDO3Y/wBaj8IUDwpKvZUD4jegW1AlqBLUBQFAUBQFAUBQFAUBQFAUGN/3Dn1T6KD64/5G/wB0/wCraC+SSRGdINiEKsR4qCqbTtO87zQFAtAWoDdQFAUBwqJIsbjotQBSRvBHjoEtQJY0BQJQFqBwUoblEeI0Dg+9u7Rf4R/foGrUV7F2Xf6QCvTQaj2NxsgfbwYrw/2jDSvSmgipOidFzP1vTWKf/wB5Bjq/IoIaVyd5TzL/ABOicKu+02hNJP8ABAoIeT3duSMq/aaJgIJ3lntmT/AcFBEye6vyOkXtp1yOT/qJ0tFvEC4RQREjuf8AJp6/YtZaNfd2c8qt/wARtVBEyO5Xy0d/Vs1m4/VdyM76WU0EPI7j2mFfqmsci3/vYcdz8VaaCIk9xtz+J65T+nxyh+I8aCIk9yDVyb/B6vxbvUHY8lv0BVBESe5ZzTav8LlsHJtuHbvNE/hN0ETJ7oHOti/ZRcXKA3dlkEC/iC0igiJPdb56xr//AIul8DbdibGX6VigiJPd952Rfe6HyKun7LsXfxXDQQ0nlLzTifrOis0jxQnV/iBVBESNIavh/rencqxbZ9pAkp2/8OgjHYc2OSJEV9kjeHWXG7ePiSKDXLjYNioA9RIBoMby0FhyygfVO4jqoPrl/kb/AHT/AKtoL5K/VnvqK9FBVRQLQA30DqBKBUo41BI2Em16DhOAzsyTzGf1h8LNRhNZvZLTcGc52YgOMwmuHF9iQ4V8a3GJA9ZtNy5v3UG5gXEZfTPJbFOynHmsiw+1kmmpDjbrrTOLWl3jU0tK/UcsCb3Srw0Gni4juKwcg47K5KI9mNaO6UfyLuQkyjDxZlkAMiS44htwhAYQ7biBX10GbXUvVekpGY0bo7MTVSp0XEzsKua8ZsuDLkZExXGO2fClqakJRdKXLketY23BL4fmPM1Br7DyY0oMaFdwz6pscpTZWTTEbyDqisjiHw7SkoKQbXUb7qDW0NrXUettPajSM/Hi5yJ2edx0qIxHlBnFT2nHo8VxsnhK2+Ds3FH1r0Gk1rnWMOJopWZ1VCinVGJfzD01zCrfS24gROCOluO4Tw3eWS4fAKCwytbatgM6p1GprHy9L6WybkGbAS261PVCYajuOyW3eIoK09sV9mpFilNr3oJzN6qyUPWeJ0njk49lufG+N+LyjjrXxQS92a48MNiynkI+0UFHcRs3mgi3uaHwhnRJOIWvL4QZSRqGFHc4jFhYtHG0+gket8VxtdiDb2lHcg0D52vtS4zT+P1DI0qxMi5B6My3+zsuy62BPcbbjFK1spCuJTllW2JtfbQb8LXMuVksnj3tNTI7WDSn9szfiYjjMd1UX4rs+ELC12TZPEhNrmgTH8y9L5LHaOyTCn0t64WGcKytsdolzsy4oPgKsjgtwqO31iB00ExK1PhoSM85JdW23pplqRl19mpQbafbU8gptfi9VJJAoMitQYZOdRplUtIzrkJWURDIVxGGhYbLl7cOxR3Xv02tQRMbmPoSXBfybGei/Axuy7d5ztGeESFltohLiEqUlxQKUKSCFHcaDec1jpJrFs5p7OwGsRIcLDE5yS0hhbyd7YWpQHGLbU7xQSTGRx8ltTsaYw802Gy4tt1CkpDyQpsqIOzjSQU33g7KDMlxpfsOJVa/sqB3Gx3HoItQP6toHF7O0bfF10CWoEtQFAUACeg0C8ax84+c0C9o59I+egxrQh3Y4hKwehaQofLQaEjA4KWD8XioT4V7XaxWV38fEg0EPM5bcvJwWJmksM/xiyuPHxrkeMIFB074CF+wv2Z8O3+zfhPhvhOEdl2HZ8HZ8O7h4fVt1UG1K/VnvqK9FBVaBaAG+gdQFAnXQaZiYhaWsd2EUogKaksQwlsCOpCipp1LY9ixBKFWG3dQaeN0vpXGZORncRioUXLTwrt58dCQ46HFca+Eg29c+srgtxHab0GSRpXT8rEzsJIxjLmHybzr86LYlt2Q+sOOOEg3CysBfEkggi4tQaUDl1pvGoBjY55bvxkbJrmyHn5MlyVAN46nHnVKWpLXzUE8I6qDQkcsNHSMacW1CciQePJOqTEeW0ePOAiYSoX94CQPojYKCUc0rh1ZU5hlsxZasa7hnERuFtpcR1QWOJIG1TZvwK6Lmgh3NArjI06dO5+bhZWmsa5hocltqPJLsR7seIOpfbUkquwg3Tag1n+Wzkx3LRZmoZTmmc7PGUy+Fbjx2jIdKWUraVICe0DKyykrQm19ovag39b6UyusGW8UnIRImAWpl2S25D7ec29HdDodiSO1SGnLJ4QooVw7xQbn7AlxdRal1Pj3I37QzcSDHjNPtqLaHMeh5I7ZSCFKQou7k7RQVaHy8yzWCyMFSsfAdyOdx2bRi8cHhjIbcF5lx5DAcTxcTxaU4qyEp4zu3khrZbQuZc1Tq3NxMNj5bufbKcbmXZ7seVEvA+FKFRw0pCxxbb8e4+Cg0oPK7N4zKxZTKmHcficjipGEjJcsY8YrRIypN7C5dSOzA3pT4aDY1py5yGoHuYGQZXORJykCIxg48OcqMxKcYjOIUl9pKglQ4yE/abx4KBJOmNYnVi9ddihRRlkQ28QGQqWrCmJ8ApxL4dsEErMns+C/q770FXh6W1Xp+Dp+VmYuQyjkGJgVpW1GC3sczByfaS4YbjJu5YFt4KIK7JI6KDc1Oxklaga1kyzL09hchnWnWn38YZjyewxT8d2Y9B4VFIfUpDYK0hR4Ao22UGrncfk2MjqjU+LYelY/NZDC4vJoQwprtmS3DXFmoa4RYNOcbbgA9VC/uKDUejZSAiXqjHMvLewuGzXxsNCVgyMdLzGQRIQlPStA4H2+n1PDQbWOyeCxsJ7L6miR8tqXGHCDDwsjLXEdbwz0WIlh6Akghay+t1TgSLqUClShYCg7wzIjS2+3iPokRypaA80oKQVNqKFgEbNiklJ8IoMlAlAWoEtQFAlAtAUCHdQW7+IfofyaB0r9We+or0UFVFAtADeKB9AWoBKeJQTewO8ncB10HBMBPyzuvE8wnccpnBa6lZHTkbJqfbUl2L2YaxCSyDxo+1jOcKlbD23hoG4vJQpekuVGNgy0O5PG47JqyERpwF+MIeGejvdsgHiRwOkIPGB61AY9jCYPAaBd0g63H1BmMI4dQRIT5WJGOThXHXZUltKlALbkBrgdICuJXDfbQb+nNKYWfneXj8kSi5ktLOZSfwTZbaXpsVOPDTq0odAJHGrZaxub3oNnX+p5ULX8aWZsmDpTACKjN5ZLjjcSFLc4pnYrYbNnjMY4WQtwcDaiBfiUKCw67lZpyNgtQsjMRNGtsPS9RR8M4I2Vjdq224w84kestpgdp2zSDe+2ygLUGuvL6qf1k1pTFzy9issGdT4/Nq4FBvCIbSl6IDw/nJBaSlXDcNOk700EK1m9WjROpJUrUuSxvMLT8B3K5XFTYUFTTTjLLqkiMCzwrhOrTZDiVqV6u8KvQbI1FqmBq3C6YyOqXlMzMVEyipSME3LW89LklotOfDAJZQlIADhtvud1Bozeb+fh6Y1fLREivalxmVXG09GKVhh7HLW5wOuAKurs0R5HaKSRtR0UFywuq8nltaZDCPyIMGJDQ25FxDzTwyUyI7GadE5h0rDSmu0WptSEoUU8PrEE0EXN5qqgSeYEV7GpW/pEMnDNIcIVklPoQgI2j1VfELS16t9hBoJD/wCRW05LRmPVAKkapiMy5ktDl24BlpCYyVer64ee4mknZ7N6Ag8y4MyVkoCoDrU7G55vT62FLT9o1IdcZamJNvdlbTiSneFJIoM6OZOnhL1ZHlpeixtIcCpctSQtElChZRjpRdSil37EjeV7BQPk64nYzHJyWY0plYC5EqJCx0LiivSZL05RQ2kJbdshST7YWoWoN2DrjGPZw6ckIlYrUCMWM5IhzEhtTUMuqaUFrQpSeNJQVKSDsTtoNLHczdNZhWIGM/aE05uKmfCUxCecCIrj6o4W+R7oFxCh63joNtjXuk5eKj5uLkPiMdLclMxlMsOvOrdgcYkIDTaFL4kcCrp4eigdhc5pDW7KMlh1MZVqCsdjJeiLSWVqv7syGkkbUn2NxHXQS2Ox0PEwGMZjmQxBip4GGU3ISkkqO03JJJJJO80GxQLQFAUCUARQJY0BQIdxoLd/EP0P5NA6V+rPfUV6KCq0C0AneKB9AUBQNU00pKUKbSpCSFJSUggFO0EDoI6KDVaxOKjypU2PAjMzZwtNktsNodfHU6sJCl/fE0Gvj9N6exLchrFYiFAalpKJSIkZlgOoIsUr7NKeIbdxoM7OJxkd2I9HhstO4+OqFBWhASWIq+Diabt7KD2aPVH0RQRGb0Fo7Ukp2bncQ1NkSGksSuNbqG32m7lsPNoWlDvASSguJJQfZtQZc5o7B6ijRoeUEtUWM0qOlqPOlRg6wsAKaf7JxPaoUAL9pcnr2mg3RgsUMizlm2OzmxoC8THU0ooQ3CcWhZbSlNgLFtPCd4tQQjPL3CNxczGlS8jkns7BViJs7IyviJSYCgsBhpfAkISC4pV+Ekq2kmgyy9GJczkTUOMzeQw8+LBZxS0w/h1tPxIzhdQl0PtObbk3KSKCJVym00eBYdkiQ3jcpiUOlST9nmXHHHHSm1i40XnQ0egLV10G+NGzHc5hslkc2uZi9PKL2HxvwrTS23lRvhSXJCSVLRwlSuDhG07SbCg0JHLCBLzkfOyJ7inmMjPya2Q2kIdE5ptDbK9u1LDjSHkHpUKCIPJmM5i3WpGTU9n40bFxMDlB2zSIacKlKmSplDgQ5xO8biuIH2tlBvTuWsiRkcTmo09pnKY/PSsxLPArspUCXJcl/CqAN+JtxSVIV0G/XQQrvJib8BGRHzTgy0uFMYz0l9x1+MqZIkoyLT8dlWxKUTEXUi4uhR6aBmo9Fa71RMk5PKYqEgOu4h6VhmczKMaY/j5a3n3mllCfhuNspQkIHFs2npoFyvLrUWWmJyEKMzhVqbx2KVHMxcxbeHWmS1kmu2UOJaih1BbKt58VAYjSGocFqTFTXsXkH8fFjyIiFYfItRUNheYky2hIbU432rXYuoPDY22i16DLofRGo9M6k0hMUwG8TadLz7QWk/C5PsXo6HUgHamS0tHHw7loufaNBdOX+On4nR2Lx2TZVHmsB/tWFkFSeOS6seySNqVA0FkoC1AlqAoCgKAoEoCgQjZQW3+I/ovyaB8oXjPAbTwK9FBWkxpCrWbI8J2emgyJgPHeUp8t/RQZUY/6TnmFA/8AZ4/1h81A0wD0L+T/AE0CfAq+mPNQJ8C59NPy0CfBO/ST8v71AnwT3Wnz0CGG/wBQ89Ahhv8A0R5xQIYj4+Z8ooE+Gf8AoGgT4d4fmzQJ2L30FeagTs3PoK8xoG9mr6J8xoEKVDoPmoE29RoEoC9AXoCgLUCWNAUBQFAUCUBagS1AUBQFAh3Ggtn8R/Rfk0GZz3a/EaCNoCgUb6BaAoCgS1AlqAoCgKAoC1AlqBNooCgKAoCgThT1DzUDezT9EeagTs2/oDzCgQtNH5ifNQJ2DP0B5qBDGYPzBQJ8Kx9D5TQIYbH0flNA0w2eo+egT4Nnw+egQwmutXyfvUB8C39NXyUCGCnoWfNQNMEdC/k/00CfAf7T5KBDAV9MeY0DTBXbYsfLQWThPwnB09na/wB7QZHfdr8RoI2gKBRvoHWNAlAUBQFAUCWoEoCgKAoCgS1AWoEoCgKAoCgS1AljQFAUBQFAUCWoEoCgKAoCgQigl/zH3n7lA533a/EaCNoCgVO+gfQFAlqBLGgKAoCgKAsKBLUCUBQFAUBQJagS1AUBQFAUBagS1BiZfZkth5hYcaJICk7RcbDUzExwlGrJUJFAUBQFhQJagSgKAoJb8x95+5QOd92vxGgjaDTn5fEYpcNvK5CNBcyD6YmPRKeQyZElYJS00FkcayBsSNtAzBZzE6kxzWZwcpE3FvLeaZltbW3FR3VMuFJ6QFoUAem1BJ0BQFAUBQJagSgKAoCgKBLUBagSgKAoCgKBLUCWoCgKCC1bnI2Bw0iXIXwJDalLI3htI9a3hOxKfCai+SuKlsluVY1/CGfBgtnyVxU52nT+biOkOcs7Hy3G88gu459xS23GRdcdKjsRw7ONCRsHzh4a8fteu3raYzfmrM6+uv8AJ7/f+Wcd6ROCfDasaaTyt6/VLteH1fhc2yl7HympSVD8wsFY8barLHmr1eHcYc0a47xP2vCbjZZ9vOmSk1+z6Ut8Y10Jc/4aq2fBLS1hhTl4S5jcEOoEp25SyVp7QhIuSEAk7KxTekT4fFGvo14s3yr+HxeGfD6dODeqzGKAoCgS1AhBoJb8x95+5QOd92vxGgjaDyP33WNOS06Wb1LmXcOYmOzE3T62eP7TNNuREMpPAlR2IU4r5vjoO/8AJSNo2Fys0rD5ezF5DR0eH2WMnupW25ICHFh11SXAlQK3eM2t4tlBf6BLUCWoCgKAoCgLCgS1AlAUBQNccbZbLry0ttDe4shKR4ybCg1o2VxU1zsYc+NIeH5tl5txfmSomp0lDaKfIahJLUBQFAUBQFhQMcWhltTriuFtAKlqPQBUxGvBDztzQ1S5qXPp03FUfgoqg/k7bhw7W2fJfiV90fBXmurbj5uSNvX3acbeufR3PfdA2XyMM7m8fmvwp6o9Pf8AY5QVjtXLbuNWzymvHXjjL3teUNhpZSoLSeFQ3KGw+esJPoSSclkFJ4DLfKPol1dvNerfMty1n6WL5NOfhj6IXnk8C5rqMreUx5KlE7T7Fv3a7HQ4/wCaj+7Z53zJOmyn+9V6NtX0F8sFqBKAoCgKCU/MfefuUDnfdr8RoI2g4B3q5/JXT+msJqfnBpxzVDkeUuFgMYw6tlwrfAW+q4WhPClCASVeAdNB1nls1o5rQunv/j6OiJop6GiVhYzfFwojybvW9cqUDxKPECdhvQWygKAoC1AlqBKAoCgKAoC191BzjX3NWDpYu4zDpRkM6n1XL7Y8c/dke0r7keWs9MU24zyY7X0ecNUamz+pH1yc7kHpZJuGlKKWUeBLYskDyVt1rEcmKZ1R0DRepMiUS4EYxEA8TUtxXw5FtxSR6/mFJtCuju+gNba1wLbeK1s6zmsYkBLWSaUr45lPU4FJAeSOu4V461r0ieTLW09rtESZFnx0S4TyX4zguhxBuD4PAfBWvMaMzNUBLUCUBQFByrm7zFZ0zjPg4Cw5lZJLcJoesVOg2LhHShs+dVhWlv8AeftcXD+pb3fV6/wd3ovS53ub839OnG0/7v8AHY43i8a5jIN5aivJSldtMcUbqK1bbE+C+3w15nDh+XXj7083vM2eMt/y+7HCFNLn2zn11ek15+8cZeiryhNYHB5nUUlyHhIi5splpUhxpu3EG0WudpG25sB01bFt75p0pGs6atXc7rFt6xbJbwxM6MVnGnFNOpLbraihaFCykqSbEEHcQa1bRMTpLYiYmNY5OmclC0jVMmW8bIYhLFwL+s6tIG7xGvQdBj/jzPor9svKeZ5n9tWsdtvsiXeTmIQ6Vn72vb/Mh83+TYn7ag9ax97T5kHybHpy2PVvd4frAj9yp8dUTit6GdEmK77t5CvvhVomJUmsx2Mtjv6OupVJQSn5j7z9ygc77tfiNBG0HINeQ8Lkee/LSJqZmO/ik4fUj0JmYELZVNCYyV3S56twwXDu3XoN3u1Bgck9KJiG8BInpgG5I+DTkJIYtfbbs+G3goOs2oEoCgKAoCgS1AWoEoCg55zL10rAx1YXELtmX0XefT/F2ldX3ahu6htrPjprxljtbR54kocecCG0qcecVZKRdSlKUflJNbrCuentEMQSiZlG0yckSC0xbjQ0Tu2fOXWG1/QtEOhxtFZqcgOOdnFSraA8o8dvqpBtWObQnwyitR6Yn6eZaky3G3Izy+yS62TYLIuAoEC1+ikWiSayzaEzrmKzLcF1Z+AyCg04g7kunYhY6tuw1F66wms6S7CdhtWszCgKAtQUfmJr/E6Lw78qW8QR9mENkdo46RcNN/dH5x3JG01TNnpt6fMv3R6Zb+w2GXe5Yx4++eysel54wMXK6oybmvdSp4VPf9JibeBtpNwkpB3JSPZ+kfWry+Ol895z5ec8v4+x9Dz3xbXFG1wco96f47Z7foSmQX6xrJdhwuZKcAedJOzjV6TXlb85exrHCHoDR6Byy5VztXzEhGfzqUpx6Fe2EuAiOn5VOmvTbaP2e0tln3r8vu/F4Dfz/wBy6jXBX+nj97/e/wDq4wh1SyVuKK3FEqWs7SpR2knxmvIy95pEcnXeTcM/D5bIkbFLajoP1AVn0ivT9Dpwvb2Q8R5lyfmx09Uz9zpxFeleONqViGoDSKDKzKksG7Lqk+C+zzGpi0wrNInnCQZzzqNklsOJ6Vo9VXm3VkjLPaw2wR2Lf2ifhO228HZ8fhtw3rPrwamnHRld92vxGpQjaDh3eI5Y4TnSrTfLuRk5GD1On4vN4jMMNB5pEaMG48tpwcaD9ol5PDbqoOuaQ01jNG6bw+k8MkpxeFhswYvFbjKGEBPEq3zlG6leE0E7QFAlhQFqBKAoCgKAoInUebY09iJGTdAWtA4Y7R+e8rYkeLpPgq1a+KdETOjzXlpUibIfmS1lyS+suPOHeVKO2t+I0a6w6R04WgjJyGyudI2RGrbUJV0/WV8gql7di0Q65hMGzjgH3gHJyt694RfoT+/WGZWWBsE2A3mqStDl2U5j6M5gY/WukMJIddzOmm1uSQppQaUYzg+1adF0lIWCjaQd+y1amPcUyWmsc4dfddLz7bFTLkiPDk5en2THsUPGzluxo8y/2zagSfum1Db8ldGvGHDtGkvSqFdo2hz6aUq/CANajYLQFBz/AJkc0cLoLHy3JrixIYS39m2m7ri5AJbbavsurhN1K2JFUzZqYKfMvx9EemXQ6f0/Lvc3ysftmfRHpef8Lg9Q81cqjXGtEGLpton9kYn1glxu97Jvt4Cdq3DtcPgrg1w5N5f5uX3eyP47Pte7zbjB0vF+223HJ8VvX6/X6I7F8yRSlPAkBKEgJSlIsAALAADcBW7kcXDxVDIL2mubd3MKucutKOa21nGwxB+BS4qTkVj5sVlV1DxqNkDx1xNrtvn54r2a6z7Hc6nvo2m1nJ8WmlfbP4c14566tbympWdMQCE4zT6ezWhHsGUtICgAP9WmyB5a2+s7jx5Ixxyp9v8AJxvLWynHgnNb3sv+z/OeLmjTleemHrHo3ltjTjdHQeMWdmcctzr+1Pq/wQK9x0zF8vb19fH6Xy/rWb5u7tpyr+X6P5rUa6TimkUDSKJNIok2gRW41CXQf5r/APL/AJFbnY5vxd7ad92vxGrKI2g85947F83MvrnQkXktkm8XqxOOzC5Ml5xppJhByLxpu6hwX4uE7qDsPKuHrjH6CwULmVLRP10yy4M1LbWhxDjpdWUEKbSlJsgpGxNBc6AoCgKAoEtQFjQJQFByHmhmFTMmnFtKvGx49cDcX1j1j5Bs89beKukasV5UbD4oZXJJQ6LxWPtX/CAdifKay2nRSIdf09j0pHx7qfWN0sDqTuJ/crCusaRVJFB52a//APjvQE3IxXAjOZC8DEDpDzqTxO/okXV47Vzt9uPk49Y5zwh6HoXT/wB5uorPuV/Nb2ejvlR+UmhBoHkhmM3kWynUGqIpmy1Oe2hh0cEZo32+yvjPhVWHYYPBj1nnZu+ZOofudz4K+5j/ACx7e2fu7kHgUlcEoG9Tykp8thXax8nkL83qJpPZstoO9KEp8yQK1WYKWANp2UEVLywTdEfaelZ3eSsc39DLXH6Xm7n0fiJsEv8A2rbmWwwdC/WCkqUtJBB6DurR3/HFTX+29X5bnw7jNp/+KzqeX4UFSEJCUJ9VKUiyQkbAABuAFdTLDg7edVYYxMvP5RrFQuEPvcR4134EJSLlSrXNhXMtSbTpDsxlrip4pVLVmBzOnJHY5eKpgKJ7J72mXPqrGw+mufmx2pPF29luMeaNaTr9q28uYrPKzlbl+YWSbAzWXBchtr2K7MqKIjY+uo9ofBVdrWNrt7Zp963L7mp1O89R31NrWfyU5/7093J5+VLflPuypThdkyFqdfdO9TjhKlHyk15G0zM6zzl9CikViIrwiOCa07jXc5mYOHZvxzHktEj5qN61eRIJq+HFOXJWkdstbdZ4wYrZJ+GNfw+t6waabjtNsMp4WWkpbbSOhKBwgeYV9BiIiNI5Pj02m0zM85KaINNAlEmmiTSKBqhsNQl0D+a//L/kVudjm/F3tp33a/EasojaDkHPbmnoTkvFx+vNQx15DWQjy8bpbFsLWlySJBbW+FWulLYKEFbigSNydpoLfyhzWrdR8u9O6g11FRB1VlI65k6G0kIQ0l51a2UpSCqwDRRvN+vbQXqgS1AlqAoCgKAoCgwyX0RI70pexDCFOK8SBepiNR54yb7sl96U8buvLU4snrUb1vw11l0ri+CIyi1npqg4s9IR0eYbax2nWVodJZQltKUIFkJASkeAVWRsoBUQBvO6qJeYs4Dz256RMAgl7ROl+IyCPdrZjqHbK/TugNj7gV5e9v3e68Me7X+PrfTcEf8AaOlzknhly/bPL/DHH2u0c4ckiJppjFt2Que8PUTsAZjji3dV+EV6N82c+0NilTJ+IhcN+2fDzg+4SrjPyCs8cKsU8bPQb7qWwpxZ4UjaSdlazNHFXp2SU8ShKuFrqvtPjrDNtWxWuiJdkAXsRVWRxDn1xJw7mRTvhuY+bf8A8NKsT5OMVg3sf8vr/ZtEvQeXJ/57w/26Wq6hlHkvI7ZJuhwBaT1hYuPTXRyzq4uCNJ0R+nNVQtL5F6TNiqfbkJDanmz9q0kG54UnYQdl+mtGLxSdZdDLtrZqxETpo6nFnad1hjHER1sZXGuiz8dYC7X6Ftq2pPkrYia5I9MONamXb31nWtvT/N5x7yGskSs3B0NjlhMDCoS9Nbb2I+KcRZtFh/q2/NxV5frGfxWjHHKvP2vonlbZTXFbcW96/CPZ2/TP2OMsubq85MPaO48itOFa5mq5KPUbvDx5I3qNi6seIWT567/SNvxnJPsj73h/Mu70iuCs/wCtb7o+92uvSPDkIqEmEUDTRMENEmmgQ7jUJX/+a/8Ay/5FbnY5vxd7Zd92vxGrKI2g4T3mOVWtNeYjF6p5cTUNa20qzPbi419tpxudEybIakNJLoIS7wj7M+S4NjQX7knqCZqjlbpPM5DHLxE9cFMSVjXeLtGHYClRFJVxBKgSWr2IuL2oOhUBQFAUCWoEoCgKCB1m+WNNzSDYuhLX4agD8lXp7ytuTiTrRkPtsDe6tKPwjatxhdNwkdIkKKR6rKAhA6r7PQKxQuqeS5yY3C6ml4qXDU9h46gz8fHPE6HU7HCUHYpIOzYb15jJ12lNxbHNdaRw1j09vc9jh8sZM21rlrbS9uPhnlp2ceyTOZfNfCY/QEqdpjJNSsllAYUFbSvXZLiftVrSbKSUIvvG8itne9Rxxg8WO0TNuEMfSOiZb7yKZqTWtPzTr2+iI9OstbkBpY6R0f8AtN9gJzOoCmU+tz20RUizCD07iXD4VeCp6Xt/lYvFPO3Hu7E+Zeofud14Kz+XHw7/AIp+7uReuMs7qfUBCVcUZn/u0e3s8CTdSvKbmuvEavKTOiwaRihlx7IElDbCewZUNm0jbbybKvlnSNFccaylJ0p183UpXANyST5605nVuxXREvKtUJRcl9Sb2J89BUtVwzn8PPxF+Jc6K/FbufzjieJr/mJTS9PmYr09MfY3NhuP2+6xZeyto19k8JTehNQJ1Jy+wOTKryBFTElpPtJkRB2KwfD6oPlqMOT5mGs+r7HS6htv2+8yU7PFrHstxaeVX7VauRs4FTOVn4iaifjJLkSY2boeZUUKHjtvHgOytCZms6w7lcVclfDaNYcpn5GVksnNyM91T82W+49IeV7S3FqJJNq83kmbWmZ56vZ4cdaY61rGkRERCU09ip+octDwuMRxzZrgbb6kjepavAkXUapjxWyXitecsO5z02+O2S/KsfxHe9l4XDRcBiIeFg/qsJpLSFdKiPaWfCo3Ua9vjxxjrFY5Q+ObjPbPktktztOrdrIwCoWNNA2gaRRJtqJNO41CV/8A5s/QfkVudjm/F3tl33a/EasojaDz93muZXMvl67paTy4ZRIahpm6g1PGcCSJGLxpZaUyeIE8KlPj2PW6t1B1Dk+NZq5d6fkcwwUa2mNOzcy2qwLbst5x9DZA2J4G1oRw/NtagvlqBKAoCgKAoC1AlqCsa+B/s45boeaJ85rJj5q25OUYtAXmYoO0BRV+CCa2p5MUc19gSFMpeCAOJZAKj0DbWKFnNtU8pWp4clacf7CQbqMKQSW1E7fVc2lP31xXkt35frM+LDOn+rPLul7zp3mq1dK7iPFH9qvPvjt7nMtP8tM1k9cQ8Fncc9Ehtq+KyC3E+oqMyQSErF0q4zZIsemuVtOn5JzxTJWY7Z9kPU77rWGmztlxXi0zwr/en1erm9DaszCYMJWPhkIkvJ4FBOzsmrWsOokbB4K96+OufQoSyvtQm7rnqNJ6bH9+slY04sdp14LzHZEaK1FT7LY2+FZ2qPnrTvbxTq3qU8MGuouDVF0c+2dtWQhZrSrKoKzNDiDxJuCk3HjG2rVt4Z1UtGsaK1gsy1ojVcvFTFBnSmr3jNxcg7Go2WIHxEdR3JDhPGmtP+hkmvwX41/B7OP/ACO0rlrxzYI8N47Zr2WWvLqIKgdhHRUZGvt1HyTm01z7u/hcoL1nnSTsC1/jGvPXjjL2lY4Q9M8lNKjSsNWoMzHIzGSbCWEn240VW21j85ewq8GyvRbDafKr4re9P1Q+Zde6pG4yfKpP5KT9NvwjsdnaeafR2jKgpPg6PH1V03lziNtAlqJNNQk2gaahJpqUmncagX7+bP0H5FbnY53xd7Zd92vxGrKI2g88d5nlPq7mxkdL4vRGqYWn81GiZL4mFLefYdmwnFscYT2KF8TaFJRxhXTag63ymwerdNaAwGB15k/2zq+Cy43lMoHVyO3WXVqSrtHAlSrIKRtHRQXigKBLUCWNAUBQFAUFa1ZJYmYmVjWPtX1J4gR7KVIIUNvSdlXpOkomNYckxDzP7bjpC0lSVFC0gglJUk2BHRW3bkwwu0ZXC4pB+cNnjFYoWbyKSNWflhFaKGPXd6CfZT4fDVUqRKSuQ4p15RUVHiWo71GkVJlK4mCUWluixI+xT1A9NYst+yGbFTtlK1rtk0pBqBrOsXvUjQkQioH1aCCnYlSwfVN/FRCn57TEXK4+TicpGL+Ok2K0bUqStPsuNqt6q09B/cpatb18F+X2NnabvLtMsZcU6Wj6Jj0So616/wBJsCIpo6qwTQ4WHxdrINIG5Kwb8Vh07fHXOviz444f8Svpjm9ph3nT95Osz+3yTzifdn2T/oQEvW4fPAvETWXtxbWi23zVzrZp/sy7uPZViNfmUmPbC5co+WL+RkI1dqSOpnHocLmOx7ybKeWDcOOJO5CT7IPtHwVk2mzmZ8d49kfi5PXOtRWvyME6zp+a0fZH3y78bk3O8125fPz2X3Y6+0ZUUq+QjwioE7CyLcscCvUkfR6FeKoWbtQmCGoSYRQNIokw0DTuNQlfv5s/QfkVudjnfF3tl33a/EasojaDzr3jNd635da50LqHQOl1atzCsbmY8nGIbfdKIqlxVKdtHSpYAKQL2ttoOwcqtV5jXGhMFqzUGHVgM1k2nHJmGWHEqjrbdW3wkPJSsXCQr1k9NBdqAoCgKAoEtQIdm/d10FfyeXLxMaGSG9y3BvV4B4KJcd1bzf07i3ZuAwssP6kZV2BPCfh2l29Yhz2VKTu4R01krTVWbOMwcjl4mdjTcX2kjKrfSpLSbqU+tSrlJA38VZZnRjekmZSZLTcpm6CqyuE7FIWN6T4QdlNBsOZVRRZ1sFX0k7L+SpERLfLt7DhHnpEImTI0DjUHZAs2NqWzvPj8FYcmTThDNTHrxlJFwCtZtGF4XqEnpS+v2Glq8QNqgOMWYdvYK+T9+gYpiUkbWF26wL+ioGuVHo+Ws1cevNhvl05E4j84A1NsfoRXN6QS2oWKUkdRArDxhs8JhiEOFxcQjNcfX2ab+ireO3pR4K+hnqixtEkIoEuQQpJsobQR0Gqifxs/4pHZu/rCBt+6HX+/VZS36hY00DTUBpokxQ2GiV8/mz9B+RW52Od8Xe2Xfdr8Rqyjneqs3Nw+bZVFfCb41Skx3DdtTisjEaKuAkXUELUAei9BRtTa10zofPY3WWrJs5c/E43WS40ZltLqHIULIp4wpwkFCwENNMj2TfaaDqOhNX4nX+lsLrTBqWrE5yKiZGDws6kLBCkLAJHEhQKVWNrigs9qBKAoCgKAoIHN5I3VBYNrbH1D8X9+iXAOdPNhOl2HdJ6ddvqWSi0yUg/qTKxuH+1UN30Rt6qvWuqtpeZWb3uSSd5J3k773rYhiem+RODYVg/7W5FpRyTjjkaE86LAR0WBcb6yo3SVeDZWHJPHRkpDoGbzWLg8aUp7Wcrelv1dvWs//RrFGTRl+XqgmM3Inr7KND4l/OVx2Qnwk22Vf53qR8r1pVpHZ+s6Qt3wCyR4r1jtkmV644hsMpkSl8DKSo9J6B4zWNlSTOIbFlSVlaulKPVT599QN1EdlkfZNpT4bbfOaB5UrpqBieeQ0niWq3UOk+KkRqTMQipEt1+6QeBv6I3nx1sVpENa15lqFNZGJIQ8M9JAceuywd1/aUPAP3TTVOjdm4uEiE72TXC4hBUlzaVXTtqlo1hkpMxPBVEvmtVuMqX70SyBYPTRJaBDUSkrbi2XEutmy0m4NQLTHeRJZQ+jcobR1EbxVUnkVCTaBhqEmq3GiV7/AJs/QfkVudjnfF3tl33a/Easo5vrfQvLzmDlcRhNbYFvMzUMS5ONecLiDGbbUwl0hxpaFJ41Lbt4R4KDhvNXlrKzDXKyNyvxDrmjH3H9P56M+px92Hin8gxOfU4p1alC64q21KWo77dIqJlMRq67yBiZPE8r9O4/JwlYyXfIPrxziQlcdMmfJdQ0QN3ClQFV1X8PB1PtFddTqjQdoumpoTtldQpqeEnbH6NNTwkMgj5vy01PC1MhkzDirdCR2h9VsX+cf3qeI8LhPNzmyzoDHCJB4JGrMglRhsq9YMIOwyHR1A+wn5x8FXrGqLcHkVUmTNkvTJjy5EuQtTsh9w8S1uLN1KUekk1nYXSOWHL86ulryWWUY2lYCh8ZIPq9u5vDDZ8PzyNw8NVvfwx61q11d8n6kShlEDDtiJBZQGWeAcJDaRYJQB7It5a1G01oGDflWfmlTTKtoR+cV4TfdQWFplqM2GY6AhobgPSeuiW/Ax6pau0cJTHTvI3qPUKgTzbTbKA20kIQOgUQU0TBKSlqvy0t3S36y+k9Aq8V1Y7X05I5wqcVxLPEo9JrNHBgniViI/Kc7JhHGrp6AB1k7hUoTkPEx4lnHLPSPpEeok/cg7/GahLcUbm531KGF0+orxGonktXnCrZTHDhMqOLEbXUDq6xWo3ZQ17UDg4RRLOh4HfUJZrg0CGoSl8E+Qp2MTsI40eMbDUSmEyaqk0igaRRLGobDUJhev5t/QfkVudjnfF3tl33a/EasopM+XHga5wi5TiWkZDHz4UdayEpL7LkeVwXPSW0OK8SDQcM19jufOo9M6ZzvITLMQGXH8tMyMd9xlCZUebMceiKSH2nEqHASro31j9rNpOnB1/lSdcHRuDPMoIGu+ycGb7LsgjtQ4sII7H1NrfD7NO1M66cV+qyhtAhqAlJSQ1Ucp51cy8Zy6xKZUgJkZR1JRisdexffO9SrbQ2gbVq8g2mrVjVEzo8MZXNZPUeWlZzMyDJyc1faPunYPAlI6EpGxI6BWzDDKwaM0vL1TkxFbu1BZsudK6EN9Q+6VuSPLS1tCtdXo/GwFmLGw2JZDcCEjgYZTsabHSpR6VE7VE7Sa1ZnVsxGiz4/CxoNnV/byh+cUPVSfuR+7UJSRoHx2FSX0Mp2cR2nqHTQWdCENoS22OFCRZI8FFgaIJUDQkPqWShJsgbNnTWWtWG1tWsU1djb8PEOPAOyrssbwPzi/EDuHhNBMoQ2y2GmUBtofNHX1k9JoEJqUOSc9uakzlthse3gUtPaoykhPwrDyC6gRmiO0Kkgg+uSG07eknorQ3u6nDERX3peo8v9Irv8lpyaxjpHGY9M8vo5uhYx/JycLBk5qOiHmH4zbk6IyorbZfWgKUhKlbTwk221uxrNdZ56PPZa0rlmKTrWJ4TPbHpN6K1Wyq05gR5TjSfZB4k/VO0VKGvRJASKDO090GqpbIIUNlEtvGKKJ7JHSSk+UVEizVVY00DTuqEmK3GiV5/m39B+RW52Od8Xe2Hfdr8Rqyjj3Oedo1zGQNP6908c7pSW4qdmZRcDTOKiQyhJnOqCkOcKVupQQ0eLhKugEVWVocb7xbefyXLHT/NDSWq5PLTDadjPlvGq7eLImMyFJbhMoajqAC1obCm21pPClW21jUQvbk7TyI/terljpFzXzkh3V70Iv5NcwhUkqeWtbfa2A9YNlFxvHTtqO1PY6jarKm2oENQG0ALEji9m+3xVCXzI50at1bM5u6lja9ATPgzHIcVCAUtMwUKPw/ZpPzFNlKyrpJJrLWWKWPTOCn6lybGKxqeJ131lunahtob3FEdA+WsmuiIjV6y0joGHgcYzAbSWYiPXcvsffcI2rWei/V0CteZ1ZojSFzaYZjthmOgNtDclPpPXVVoKQaJIaCTwaAp55Z3pQAPvj/ooJmixCKBjoKWlq6h6dlTHNW3JHlINZWuk8XCQE/GOp4jezKVbRcb1HxdFBvqUSSSbnpJ31ZBhVUoMW4hCStxQQ2gFS1q2BKUi5JPUBROkzyeXdMoXzq55ydVSUFzSumuByK2sXQW2FFMVFutxwF5XgFedwT+63M3+Gv8R+L6XvP/ABPS4wx/Uy8+/wB76I/K9MuqJCiTcm5Jr0U8nzOOcNOtN0FezIHxuzoQm/y0RKNtROppoAEig2WXTuNQlJY71pzH1/QDVZStFr1CTSKhJpFAw7jULLx/Nv6D8itzsc74u9sOe7X4jVlHGebUPWrq239J6XRqmLKgSMdkYvxseG80FSY76FIRIHC6FBpSSniFVXcq7wukOcHM+Dy+1ToTTnYTcBIkZPIaVzrsQqamApTHLjKlqZeKeFRTZRFiOuohadZdy5UTta5LR+Cncx4iYGuHmnTmojaEtpQ8HFpTZKFKSLoCVbD01HamfdX+rKkNAhAqA0igbuqJS4Pzl5KaS5qPOOZZK4GoIt24ebihPbJbJ4g24lWxxvbuVtHQRU6kxq1eW/K/Bcs8I3jojhyOVIHxeWeQEOOlJ9UJQCrgSkbhc0mdSI0XJRub1VJpoQSixLUEhhlhEpTZNu0TYeNO2gneAk+OoSztxydpFSkmQaDcF5XgHpFTXmrbkrwXWVrrI1ZMdhI3BtHyjiPymrRCJIVVKDCRQcl5/wCtDprRi8PDc4crn+OMkpPrNxEj7dflBCB465HVNx8vF4Y53+ztet8sdP8A3G5+ZaPy4uP6vh/Fv8mNGDRWhojUhvgy+VIyOSuLKSp1I7Ns/URby3rY6fg+VijXnPGWl5g6h+73dpify0/LXu5z3yvxNzbr2V0J5PP15wY8gNBSlbEp2k+AVougqEp4yJDj30js8Q2CpRLAaEEIFEm2oBJKTeolKfwKO0ldp0NpJ8p2CqylZKhMENQk00DFDYahMLt/N36D8itzsc/4u9nd90v6p9FWUcu15iMxqyfitJYrUE7TLLjcnKTspilJbl/91U01HaC1pUOzLrwW6m3rpRw7jVF3MuZmn+fevdO6SznKnUrWntQY1qSzqSIXlRmZcpCwyqyS262QlxpZAWnZeo4LzEuq8p2dcR9H4JjmS4h3XTbLic0612ZQp0OL4COxCUbW+H2QKdpOunF0E1ZSCGiSUCGoDaSlVNRtdlM7Uey8kHyp2GoSrbhuaQGGoQbRJKLEoFQpSFpWg2Wkgg+EUFwxz7UxkODY4PeI6j+9RLfUtKRUCMyr4MJ5PWB6RVq81b8lbDhrM11mC/smf903+IKtCsqvrPW8bR7UNbscy3ZThBYSoIUGUD1lgm+29gL1yuodRrtIrrHim08vV6Xd6T0m+/m+k+GKxz9fZDNp/W+mtTovjJqUyEpKnYj9mn0AC5JSTtA603rPtd9h3Efknj6J4Swb3pW52k/8SvD0xxif49bhMZB5xc4/inklzTOHPaBJ9kxIqvs0nwvOesfBXBxz+93evw1+yPxl7vL/AOI6X4Y/q5P9q3P/AAw9HrXcknpr1z5axhQ409AuPTS3JNecNLNzQ+DGjm7Q9tY+ceoeCtF0dVaWnhNqDGaKwKLG1EgNQLXgo/YRrqFnHfWPgHQKhZL2qEjoqEmmgYrcahMLr/N36H8itzsc/wCLvZ3vdL+qfRVlHMdbamw+hcridX6lf+C0v2MnFZPJFC3G4q5CmX46nAgKIStbKm+K3tKSOmqrvNfePi8w/wCxGgdX4PK5PSun/i50jU86EuQ25j2szJMiM7KjsKStSGwuy+lJqITPJ6U5OYbLYDQmm8RnM6NTZRiKpb2oEOOPJmJfWt5t1K3SVKBQtIBNR2rT7ro5BqzGbRYlAlQGmghM/HMqKQgXdb9dHh6x5ahKlHbtoG0lJDUEENEwchl5z3baleIGiW2xiZrp2oCB92QPkF6CVYxb0Qh74oNKH0Rs8RvQZJGWiN2Sp9HFu2H96oEfPldowvhIKSN4Nxvq9eatuSJC6zsCzBV2GD/sm/xBVoVlQNe6Dl6ne/aUCaBMQ2GkRH9jXCnb6qhtSSTtvXnOqdItub/MpbjpppPLuet6J12mzp8q9PyzOvijn3x2uAamw2X09IUzlorsJ4X4FqFkqHWhY2EeI15DJt8mC2l4ms/x2vp213eHdV8WK0Xj+OcO6cmdLDTmk0z5DfBk82RLfuLKSwBZlHm9c+Ovc9J23ysOs878e7sfLfMu/wD3O6mkT+XH+WPb8U/d3OhKVXaeU1a77lm1eEWHlqt50haka2hGqGytJvo6QBxGizBaiptrUWNO+g3sbCMl3tFj7Bs3V90eqqi0RfaqFm9UBLVCxpFAxQ2Ggun83fofyK2+xofF3s7vul/VPoqyjm2q85KxOXQ2ytC2141TiYTwC23HTkIjPFwH2ilDirdVVWcG762qtVaew+ncLDk5GBoHNvymNaz8VHS9J+ERwBLXaOWSgLCleqpSQrp6qiF7O7cnsvprO6D0pktHLkOaWVj2o+KVMTwSSxESY47VI2cV2ze2w9GyojmmfddHqzEaRRaDSKJIaBitxqBHSj61QlVcvjy0tUpkfZK2uAfNJ6fEaCIokGoE3hoqOwL7iApTh9QqF7JTs+WiZYJWbWla22G08KSQFEk3t02FqJaP7WmrJ+14B1IATQasiStYu4tSz90SaCKkSAm+2hq1IkxapzTKFkIWSFJB2HYTuq1ealp4Jz1hWdgWdo3iR/8AdN/iirQrLCtZSavCrWmMQ8jHXDyEdqXEc2LYfQHEHyKvVL463jS0RMetkxZb4reKkzWfTHBnCkpSEpFkpASlI3ADYBVtFJkxbgAvfZSeHMiJnk03HC4fuRWpe/i9jcx08PtYVGwrEyo583WaLMJoiSUTDYhwVzF2HqtJ9tzq8A8NRIsLbKGW0tNCyEjYKgbkZO29RKzbNQCiYIahJitxoLn/ADf+h/Jrb7Gh8XezO+7X4j6Kso4pzmRykW3iU818JInQvtjAzLEGbJRAUCjj45MAdpH4/VIO48Pgqqyhcz+bjXLPl5o+Byixh5hN6iMn9nR5TknKh7EQEqdlOLWeJ1zhv2d1+x07rVGi+ukOycq5+m8to/TeX0hBaxum8nCTOgY+OhLbbCZQLi2wlNkjhcKwbdNR2pn3V/qzEQ0TBDRYlA1Q2GoEbLSQq9JS0VJBBChdJ2EHaCKgV/I4lTJL0YcTO9SN6k/viiUWhCnFJbTtUohI8ZqBZZS0wMeQjehAbR9Y7KCproswFfCaDC+6bUVQk6RYGiGhiJIcz0Ju/tOEfwTVq80TyX5TVZtWJOtH/urHgbQPMLVeFJa7prIq1FL4TVkTJQ4SNlYr3irJSk2Y1kk3Nac2m08W3WsVjgabVVZrPuACwqFmgu5N6JgyiZSELFuP2cfu2zvt85Xi6qIhNttoaQG20hKE7gKqk4C5tQb7CLJosykVVOhtrUCGoSarcaC5fzf+h/Jrb7Gh8XezO+7X4jVlHNtf5/IxG8fpHTUlMbWOq1uQ8bIUoD4OK2kGXOKSRxdghQ7NPznVIFVWca5ya4053dNUctMu5gZeQ0zjcZlcM23FID0cPKjKLy1ODhUtYSoq4lAqJJvUQtPB0DuySo8/k/pGbEBTDkpyD0VCrXQy5PkqbTYEgcKSBYbqjtW+F2mrMYoG0WJQIagacpFxQRqht21CTCBQaZx0YSUykp4XEm5A9knrt11Ajs8tf2TfCeyF1KVbZxbgPJRMINYvRLVdQd9EtVxKiKIlETmCpJohDY8t4/OwZ0j1Y7LoLqupKgUk+S9TCJdUQGnm0vMqS40vahxBCkkeAisurEkmwBGaHUkCsteTHLVdrIq1Sm5ud3VWC+Xshnph7ZJWu2TVKFqgazjwAIFQlpuLKtt6JZY8CTJ2oRwo+mrYP9NQQl4uLjx7KWO1d+krcPEKLNyoCVAzMtXN6DeAsKLFqqxtJDagNUNh8VBcf5v/AEP5NbfY0Pi72Z33a/Easo5fr3TnL7V0uNh9eYWNkGY8VybEyEjiQ5GJkMx7NOtFLiFLU4jalXRVVnP+Y/N7lxyF0HjMXNiT86xJVMx+EwskqnPyFY95bbwfkSyv1EL9UKXxK4bWBqumq+ukL5yQykzOcv8ATOZn4FjS8rIMOyjgIjRYYituuuKbShBsQFIKV3sL8V7C9O1PwuoEG9XYyVCCGi0GmiQaDE4niFQIx9vhUaiUtcigaagOSyHRwqAUk7wRcUS1JGn4TtygFlf3O7zGgiJOn5LVy1wvJ+52HzGiyHkwXm79oypPjBoIt6G4vYlF6I0RsjBSXr8LQ29ZAoaG4/GanxDpcxhSlpRuuO4sFpfjTfZ4xUxKJrqvMLJOORE/HMfDyU7C2lYdSfEofu1mrkjRinFOpjkgLN9w6qx2vNmWlIqxF0VjZGJT4OwbT1DbQCWJj/u2lW6yLD5aqnRlbwzyjd9wIHUn1j+9UpbzOOiMbQjjV9Je00GzULEoENQMjbRUagbyGgkDZRJxFEkqJTBp31CSVAarcaC4fxD9D+TW32ND4mZ33a/Easo5FzRw+v5T0PJaFx+Oy4RHXFyeNyEtcF9bfxUeUhUZ0IW3xXZKSHLDaNtQs5jzV5aa81zy/wAZrDTcd3T3NHAnOSY+nJSmJSH4uaee+JhLUgqbU4ppQLa0mxPUdoqtpwdb5J6ka1dy90jn2Yj0EP45uO5Dk++adgpMRxKvDxtK8PXSOa3wunHdUsRtqBCKJg00WJQIfDUDWeaChSUo51opNQMJG2oG6yjhRc0S13nDewoNcqJomDTt30S13IkZza40hXhKReoGsvFQT+a4fESP3aJYjiIXQFjxK/0VKSfsiGOlf4X+igUYuEN6VHxqP7lA9MCEncyk+O6vSagZUttt+whKfEAKqkpok1QoGEUCEUTBLE7qJZW2CqqjebaCBQPI2UWNNRIbUJIU9NEmkGoDTuNBb/4h+h/Jrb7Gh8TO77tfiNWUQ66iVoarm+9Y2WDsSy0zKQhltLSCXFlKEhKeJd1KNhbaSSSek1Mcy3JPVeWI2oQKJNosaRQIRUSGEX30GB1kKFQlpmOQrwUGRfqN26ahKPWbmgYaJghokhqAlBjtUrGkUCUDTUAqqYNNEkO6gbtNAqWyqiYbLcW+01EpbSWgkbKgLbooG0WMIqA2oC1CxtA0jYaC3fxD9D+TW32ND4mZ33a/Easoh11ErQ1nKxssMmO/XG/vvQamOZbknDWRiNNVQSgQ0Wg00SSgQ1AaRUSkwo20Gu82VC1QNFyOobbUSwKbIoGEGixtAlQGqG2iYNNSk2gQioCcJ6qiQcBNQk5LCj0USyoi7dooM6GUpG6gygAVVYlAlA0jbRJhFEmHfVQVC0GmgarcaC3fxH9F+TW32ND4u9md92vxGrKIhdRK0NVyqMkMmO/XW/Er0Gkc025JysjEadtVQSgQ0TBDRYlAhqA2khDUJNIB31AxqbBFEsKo4PRQYFRQaJYlRSN1EsZjGoDFRlWok34ZXVUpHwyqBRFNQHpigb6gZBHSOioScGkjdRJCgjcKA4Fnck+ahqwvPx4w4pLzbKekurSgfwiKrK9Ym3KEHO1zonHX+P1Lio1t4cnRwfMFk1jnJWOcw26bLcX93Haf0yrs3nlyhgX7fWOPWRvDBcfP/LQqqTnxx2t2nRN9flit36R9quze8/ybiX7PLSpih0RoLxv5V8FY53WP0t6nlnf2+GI9toV2b3veXLNxCxOYmEbiW2WAfwlmqTvKeiW7Tylup961I+mVem98mALjHaOfX1KkzW0ecIQqsc730Q3aeT7fFljuqr8zvharcuMfpjGxx0F5994+YBFY53lvRDdp5Rwx72S090Qr8zvV81ZN/h/2XCB3dlELhHldcV6KpO6v6m7Tytso5+Kf1fhCuZHvD84pbTh/tKuP6pNoseMzbZ0EN3+Wsc7jJ6W7j8v7Cs/09fbMz976AftGd/8AFX7W7df7S/s/8V8Vf1+3+C4+O/Xxba9DrPy9fV9z458uv7zwafl+Zpp6vEtzvu1+I1mcxFLqJTDVcqjLDJjv11v770Gkcy3JOVkYjTUSG1AKJNosSgSoCGgSoSaagNoA0STs1KGxJPiFSa6GLbKBxLsgdaiEj5ahMSjJmcwEAEz8tCigb+2lMt/jKqk2rHOWxTBkv7tbT3SrU/m3yrxtxN1liGynekS23Ds8DZUaxznxx8UN6nSd5f3cV/8ADKtTO8hyVhXvqhEkjoiRpL/mIat8tY53WKO1vU8u9Qt/l6e2ax96vTe9tyjjXEYZacRu7KGGwfK64n0Vjne4/W3aeVN7bn4K/q/CFdm983SDdxj9LZOQRuL78dgH8EOVSd9XsiW9Tydnn3slY9kTP4K9N76eQNxjNGR0dSpU1xfnDaE1infT2VbtPJtfiyz3VV2b3xeZL9/gsRhoY6CWnnyPw1isc72/ohu08o7SPetefoj7ldm96TnRLv2eXiQweiNBZFvKvirHO7yT2t6nljYV+GZ9tpV2bz05w5C/xGssgkHeGC2wP+WgVjnPkntlu06JsacsVe/WVcm651tkr/tDUuVk33hydII8wWBVJvaecy3abLb093HSP0whXn35J4pLzj6jvLq1OH+ETVG3FYryjRhCEDckDxCi2p1ECgKAoCgKBj3uXPqn0VErV5vqL/k1/dj+r69R/ld33Pz/AP8A9/8A+z/eafPjM5XT/KXU2YwktyBlIrLCo8thRQ4gqktJJSRuuCRUbi01xzMMnRMNM29x0vGtZ14fpl5d0R3wNTYxDMHXONbzkVACTkIpEWdb6S07WnD96g9aq52PfzytD3m+8n4762wW8M+ieMfTzj63ofR/OzlrrwNtYbNNx8k5a2LyNokriPzUhZ4FnwNrVW/TNS/KXh950fdbTjkpOnpjjH8e10PHgpnISQQRxXB2HcazV5uPbknT11kYoNNEmkHqqqGvJmwoQvMlMxwN5ecQ3+MRUTMQvWlrcomUBP5h6BxgJn6pxUe28LmsXFvAFk1jnLSOcw3cfT9zf3cd5/TKsz+8FyWx9/iNZ49ak/NYUt8/8tKqxzucUfE6FOgdQvyxW7+CtTe9lyUiX7LKy5pG4RoL6gfKtKRWOd7ijtb1PKvULc6xX22hXJvfQ5bsg/A4bMzD0EtsMJP4bt/krFO/p2RLep5O3c+9ekfTP3K5N77kIXGN0W8r6KpU9CPOG2l+msc7+Oyrep5Lt8WaO6v4yrc3vq6ycJGP0vi44O4vOyJBHmLYrFO+t2RDep5MwR72S0+yIj8Vcm97zm/KJMZWLgg7uxhcZH/FWuqTvcnqb1PKWxrz8Vv1fgrk7vJc7Z5PHqt2Ok9EWPHZ/FbvWOd1lntb1PLnT6f5evtmZ+9W53Nnmlkr/G6yzDoO9IluNjzI4axTmvPO0t6nStnT3cVP8Kuy85nJ5Jn5adKJ39tKfcv+Es1jm0z2t2mDHT3a1juhHKbbWeJaQs9avWPnN6hn1koSlPsgAeAWogtEaCiBQFAUBQFAUBQFAUDC60k2LiQeokVC2ktqLByE5QTBhSZajuEdh1299nzEmrREzyYrZK196Yj2zCx4/ljzJypAx2kMw/xbiIbqBt8KwmskYbzyrLRydT2mP3stI/VC0Y/u4c7MiR2ekno4PTLejsdF9vE5WWNplnsaGTzF0+n+bE+yJn7lpgdz7nDLI+KTi4CTvL0suW/4La6yxsck+hz8nm3Y15eK3d+MrRE7kGrXklGT1Xjo6VCxMaO/IIv1cZa6Kyx0+3bMNC/nTDHu4rT7ZiPxevP7OH+xn9kviNv7L/ZXxfB//H7DtOC/31uLy11vB+Xw+p81/cf8f5unxeLTv10UnvIf4J6t/wBxH/lbNYd1/Sl1vLv/ALDF7Z/2ZfNWvNvupaDo+iue/M/QaUM4fNLkwGxwtwMkPjGEC1gEBZ4kAdTakitqm5yV7XA3nQdnuZ1tTSfTXh/L6lim96znbM4gjNxoiT0RoMcW8RcDhq07zLPa1aeVun1+CZ9tp+7RWpvPnnJPJL+tMkgHojrRHH/JQisc7jJPxS3qdC2FOWKvfx+1Wp2utb5Qk5HUuVlX39rOkKHmK6xTktPOZb+PY7enu46x+mEG8/IkkqkvuvE7y44tf4xNUbcViOURDD2TV/YTfxCi2sngAbhYUQKAoCgKAoCgKAoCgKAoEKkjpFDQJIWeFB4ldSdp+ShMJeDpfVGTIGNwWRmE7vh4ch0edKCKtFLTyiWrk3OGnvXrHttCzwOSPN/JECJorKWPzn2Uxhvtt7ZSKyxt8k/DLQv1rY055q906/Ys+P7q/O6fbiwUeEk22y5rKbX6w2V1ljZ5Z7HPyeZ+n0+OZ9lZ/ktGP7l/M+TYz8rh4I6RxvvkbPuW0issbDJ2zDQyecdnX3a3t9EfetOP7js9RBy2s20DpESEVfK46Kyx06e2znZPOtfgxfTb+S04/uS6HZIOT1HlZgG9LQYjg7fqOHdWWOn07Zlz8nnPcz7tKR9M/fC0Y/uicmIRBfhT59uiVOdAPjDPZ1ljZYoc/J5r39uVq19lY+/VaYHd45K46xY0bAcUPnSQ5KO6355a6yxtcUfDDQv1/f355bd3D7Fqgcv9C4q37N01i4ltxZhMIPnCPBWWMdI5RDnZN9uL+9ktP6pTzUaMwLMMoaHUhIT6BV9GpNpnnLLUqigKAoCg53z1weW1Hyn1LhcHEXOysplkRojQBcWUSWlkJBIueFJNYNxSbY5iObtdEz0wb3HkvOlYmdZ7pfNDIY7IYmY7jsrEeg5COoofiyW1MvIUOhSFgEHxivNWrNZ0mNH3fFmplr4qTFontji1aqyiphElNQkUBQFAUBQFAeE7qBhdaGzjTfquKap0lsR4suWoJiRnpCjsAZaW4Tf6oNTEaqWtWvOYjvWLHct+YeXt+zNKZeUDuU3BftuvvKAN1ZIxXnlEtLJ1Ha4/ey0j9ULRj+7rzqyVux0hKZB6ZTkeMP8AmOJPyVkja5Z+Fz8nmHp9OeWJ9ms/ZC0wO6FzlmEfEsYzHpO8vzeMjb1MtuemssbHLPoc/J5t2FeU2t7K/jMLPA7ketXbHJ6oxkUbOIR2H5B86i0Kyx0+/bMOfk86bePdx2n2zEfitGP7juMFjldZynD0pixGmhu61qXWWOnx22aGTztf4MUd9p/ktGP7l/K2PYz5+XnH7qShlPmbbFZY2GPtmXPyecd5Pu1pXu1+9acd3WOSOPIKtOmYodMuVIc6b7g4kVljZ4o7HPyeZ+oX/wAzT2RH4LTjeS3KbEkGFo3EpUm1lORW3zs8LoVWWNvjj4Yc7J1ne5Pey3+nT7Fog6d0/jABjcTDhgbvh47TVtlvmJFZYpEcoc++4y3960z7ZlJ7t1WYBQFAUBQFAUBQFAUBQFAUBQFAUFZ1jy80Xr6J8Hq3DR8klKSlp9aeGQ0D/q3kcLifvVVS1ItGkxq3Nrvc+2t4sVprP8djy/zB7l8pkO5DltlfiUC6hhsoQhzrs1ISAknoAcSnwqrm5dhHOkvf9P8AOPKu5r+qv31/D6HmTU+jtU6LnnGapxMnFzLngRIbIS4AbXbWLpWPCgkVzL4rU96HvdrvsG6r4sVotH8c4asLT2oskQMdhshLJ3dhEfc8G8ItWOKzPKJZ77jFT3r1j22hZ8fya5tZQBULReWUk7luRyynb4XCmssYMk/DLQydY2VPey0+nX7Fox/dd53ZABX9nURE9cqZHbO0dQWT8lZY2eWexz8nmbp9P8zX2Vlacd3MuacqxnT8PAHSFvPPKHkbaI+WskbDJPoc/J5x2dfdre3dEfetOP7j2VWQctrKO0OlMSEtw7+guOo6PBWWOnz22c/J51p8GKe+38lox/cj0a1Y5TU+Ul23hhEeMD170OH5ayx0+vbMufk86Z593HWPbrP4LPA7n3JqJYyo+RyChv8AiJzqQdnU12YrLGxxR6XPyebt/blNa+ysffqtGP7uHJPG27LR8N5Q+dJLkg/8xaqyxtMUfC0MnmLqF+eWe7SPsWvHct+X2JAGO0vio9txRDYvvvvKCayxipHKIc7J1HdZPeyWn9UrDGgwoaeCHGajo3cLSEtjzJArJERDSte1uczLPUqCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoCgKAoCgKCm6y/6vgP/AE7+sH/r365u/iP+066w35xy7/udPae5f+py+Dl+r1LXF9yPd/ofY8lZYc+3NnqVBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFB//2Q=="></img></a></div><div ><h2 >Check out our Audit Report Tool here</h2><a href="https://www.fb-pro.com/audit-tap-product-information/"><img width="125px" height="200px" src=" data:image/jpeg;base64,/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAUAAA/+4ADkFkb2JlAGTAAAAAAf/bAIQAAgICAgICAgICAgMCAgIDBAMCAgMEBQQEBAQEBQYFBQUFBQUGBgcHCAcHBgkJCgoJCQwMDAwMDAwMDAwMDAwMDAEDAwMFBAUJBgYJDQsJCw0PDg4ODg8PDAwMDAwPDwwMDAwMDA8MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwM/8AAEQgBggD6AwERAAIRAQMRAf/EANAAAAEEAgMBAAAAAAAAAAAAAAACAwYHAQUECAkKAQEBAAMBAQEBAAAAAAAAAAAAAQIDBAUGBwgQAAEDAwEEBAcKCQoCBwkAAAECAwQABQYRITESB0FREwhhcbEiMhQJgZGhwUJygrIVdlJikiMzs3Q1ONGiQ1NzNLQltRbhJIOTRDYXN3fw8dJjVGSUJhgRAQABAwEEBgcFBQYGAwAAAAABEQIDBCExEgVBUXGBMgZhkaGxIhMHwdFCcoKSsjMUNOFSI0MVNfDxwtJzJFNEJf/aAAwDAQACEQMRAD8A9/KAoGJMmNDjvy5khuLFjNqdkyXlhDbaEDVSlrUQEgAakmg0VqzLEL72ZseV2e8h4ateozo8jiB2gp7JataCSUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQdBO8l7RXkP3fzNsEC4f+KPMWN5pw7HnkLajLOuyfcNFsMaabUDjdH9Xt1qVHgN3iu+rz47yzsmDmGRf7fwd1QLPLiwFyNa+FKuJBlEqLstY2bXVFOu1KE1Kiko6Esdk4wAw4kApcb8xQOnQU6EVBZ+N86OcWHFH+1ea+YY+lv0GoV7nNtj/AKPtSj4Kouawd+fvaY46lyJzsvNwCdPzN2YhXFB06/WY61fDSou+ye1O70NsbQi5NYbkhR6Tsy0vMOK8ZiS2U+8mlRdeN+18y5goTmHJO03FP9I7Zbu/DPuNyY8gfz6tRctg9rrynlupRkvKrLrG0dOJ+E9AuAHX5qnYyveFKi8LJ7TLulXdtCpeYXjHVq3s3Oxz+JPjVGakI95VKi68Z74Xdfy5SG7LzyxMuuaBDE+cm3OEno4JwYV8FUXRZs7wjIlBGP5lY76s7Qm3XGNKO3wNOKoJVQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFB5se1WyzKcR7rPrOKZHcsZlXfL7Ta7nLtclyI8/CfalKdjrcaUlXAsoTxAHbpodlSR8vyEpQnhQkJHQB4axB167PBQWSj0EfNHkoFUBQFAUBQFBggKGigCD0Ggw2hDKw4ykMup2pdb8xQ8RToaCxbHze5tYy2lrHeaeYWNlG1DMG+XBlA8SEPhI96rUXTjffi72OLKR6jztvdwbRpozeW4l0SQOgqmMOrP5VKi7bL7UnvS21TP2ivD8iQ3p2iZlncZU541RJLIB8QpUXhjvtfMxYATlvJOz3LZ5ztnu8iHt8CJEeT9arUXJjntduVkxaUZXynyuwAnRT1ukQbmgeHz3Iiv5tKi7LP7TjumXQtJlZPfbAXdOL7RsU3RHzlRkPj3iaVF4Y33xe67lZSmz888SDihqGZ89Ftc/InBhXwUqLlsPMHAsp0/2zm9gyLXd9mXKLL/UuLqiX0BQFAUBQFAUBQFAUBQFB5ce13/hTt33+sn6ibUkfM9u21iDTZu0oLJR6CPmjyUCqAoCgKAoCgKAoCgKAoCgKAoMEA7CAR1Ggw2hLSw6ykMup2pdb81Q8ShoaCf2bmrzTx0tGwczctsvq5BYTCvk9lKNN2iUPgD3qou7HO/D3scXKfUOd18noSNA1eERLoPdMxh1X86lRcmPe1B71VmcSbpcMWy1oHzm7lZksEjq4oDsbyUqL0sftfM5ZQlOTclLHcnBpxO2u7yYQPXoh+PK0/Kq1F0Y37XbldLLact5T5VYCdO0dtsiFc0DrI41w1H8mlRdFk9p73ULu8hqZf8AIccC/wCludjlFA8ZiCTpSovGxd8vusZGlKrbz1xJBVpo3Pmi3r29aJgZUPeqi6Mf5iYBlqUrxbOcfyVKwCg2u5RZmuu3+hcXQTGgKAoCg8ufa7/wp277/WT9RNqSPmd39GtYjOuvvUFkI9BHzR5KBVAUHo/3Ne7Hyq5p4BkOXc4kzEJzDJ4+B8plRpL0QpvBiPSXZA7MgOgHhTooKSOBWo21Ygeet9slzxm+XrGr1HVFvGPT5NsusZY0KJER1TLqSPnJNQXjyG5DHndbOcc9OUf7aXynxB7K0tGJ60meGe0JjE9q0WtQ3sV52/dVoOu6FcSUq004gDp46gsLlnyuzfnBk/8As3l7aE3zJDAlXJFuVIZi8UeGkLeKXJC20agEaDXU9FUROz2S8ZDebdjthtki8X67ykQrVaIaC7IkyXFcKGmkJ2qUo7ABUEov3KvmhixWMk5a5VYQ36a51mmsoGnWtTIT8NBAtRxKRuWg6LQdhB6iN4oM0BQFAUBQFAUBQFAUBQFAEA7xrQJbSllwOsjsXQdQ635qgfAoaGgnNl5m8y8beRIx7mNlVjeb/RuQbzOYI02/IeAqi77D32+9hjqEtweeOQS206aJugi3I7PxpjDyvhpUemvs+O97z05781shwTmhkFuv9mteKSLvEkNW2PDlesszIjCeJyMG0FPA8rUcG/pqxI9gqo8ufa7/AMKdu+/tk/UTakj5nt+ysRjy9NBZKPQR80eSgVQKQ268ttmO0p+Q8pLcdhI1UtxZ4UpA6SSQBQekveqy25d3u291jkJilwS1d+Rdug51lj0bQKXksx0yAF6aeiO1Oh3pcGtUVh388Ys8XnPA5o4qrtsP5+47b85sshAPB28psNzEA7teNKXFDoK6SJt3Chrj3fD/APSCd9WTSB52s/omvmJ8lQd+fZtfxPQ/ufkf+HRVgUT3X/4neR/39tn+KoOyveD73feVwDvCc4McxPm7eLZj2P5VNiWaxrbiSI0eO2ocDSUPsOeaOomlRs8G518u+95Lh8ou8vjFjxvP76kQeXHPzHobVuls3JZPYx7m0jRtaH16IGzgJPDwoUQsXeOgfMXB8i5YZjluAZVHTEyPD5z9vuaGyS2pbW1DrRIGqHEFK0HpSRUHafvE4Vym5Y81uQ6F4c6zgV35e4lkXMCwWd9bUm4OTEuqnrZddc/NuuhI0IUkA9VBvrBZO4FzCyaxYzaWudGC3LJbhFtdtS65arhFEma8hhoLWe0cSniWNTt0oJHzC7r/AHScRzHJcDe72lww3KsVmKg3a2ZLjb0llt4JSvhEqIGkLGigdU0oOjuf45Y8Sy+849jWawOYljty2hb8ytjTjEWalxpDilNtukrTwKUUEE70mgh1QFAUBQFAUBQFAUBQFB6g+ya/iJzL7gTf9St9WB9DlZDy59rt/Cnbvv7ZP1E2pI+Z7494rEH/ALa0Fko9BHzR5KyoM1KDt53GuWkfmT3jMPVdeyTjXLxD2aZM6+kKaDFo4VspXrs0VIU3rr0A0gWjzE5s9x7nTzAyjPs9xTnBYchyaaXrjdbTcbZMiuBpIYaW0w6eJCOzbTokbqs0Fhc7ofKTmx3LLHcOSOQ33Jbd3Xr83DmLymK3Gu7FovhKSyrskpSttta2uFSRpogjemgr/uEHWw98FtJ1cc5Pz+BsbyAJGug8GoqQPOxn9E18xPkqDv17Nka95+H9zsi/w7dWCVEd1/8Aid5H/f22f4qge72v8TvPj75XD6wpI69du7EKZcdZbkRCH47o3pcaPGhQ8RANQd8faMhqbzgwvKjHTHuWb8rscvN64RpxynG32ypXh4UJT4gKsjWd+v8A768kf/RbDv1L1JHWvkx/5x8pPvrYP9RYoLU76X8V3Pf7zL/wzFJHWGoCgKAoCgKAoCgKAoCgKD1B9k1/ETmX3Am/6lb6sD6HKyHlz7Xf+FO3ff6yfqJtSR8zu7fsrEHgNBZSPQR80eSswqg7ZcnOemG8puQfPzEYNtuiub/N1iPY7ZkDTbaYUOyaBEhBf7UOBag48eEN6E8HnbKDqYAAAANANgFSg7odynPcNseYcxOWXMy8wrDy654YdPxu9Xe5vBiFEmtoU7BfdWo8KdCpaUqO5Sk7aRAgvdm5vRe71zkVccnYGQYTdI0/D+ZEKCtLzcu1S1di8+wpHEHQ2pAdTwnz06hJ86oLkzDuCcxLvKOTd2+42jnfyovRMrG7xa7lEZmxGHTxNxJrEl1vR1pBCSQdTp5yUHzaUFs8p+VNz7jONZ7z0543C3WHmVdMcnY5yf5Zx5jUyfImXBGipUhLClJCElCdSklKU8RUoKKUm7h0m7q3F/8A0tyFK1caznFoK1npPrA1Pu1BvO95aLxH7y3PGZIs8+PDl5fPdiTHYryGXW1KGi23FICVJPQQdKSNd3fO7fn/AD/zizWC0WOdBxLt0P5dmkmO43b4NubUDIX26wlC3CkFKEJVqVHbokEgJV34eadh5rc+cmm4i41Iw7CrbFxDFpjCgtqRGtSVpW+2obChTy1hBG9ISemkiX9+v/vryS/9FsO/UvUkda+TH/nHyk++tg/1FigtTvpfxXc9/vMv/DMUkdYagKAoCgKAoCgKAoCgKAoPUH2TX8ROZfcCb/qVvqwPocrIeXPtd/4U7d9/bJ+om1JHzO7taxGT1nxUFlIB4EfNHkrMZoORGjOy3gwyAXFAkBR0GwanbWnPntw2cd256PK+V5+Z6iNPgiJvmJmKzSNkVna5qrJc0/8AZ+LwpUk/HXNbzTTz+L2S93L5E5zj/wAiv5brZ+1xl26ej0ob35JPkrdbrMN26+PW8zL5a5pi8WmyfszPuq47jLrWnatLa13cSSny1utyWX+GYnsl5uo0WfT0+bjusru4rZtr64biw5Rk+KPuysWyW7YxIfGj79pnSIK3B+OY60FXu1lRzTMQ4V1u92v0526X27Tb5c3ho9crjIdlyFAbgXXlLWR4Nak1Imrl41kl8w7IrJlmM3BdpyLHJrVwsl0bSha48lhXE24lLiVJJSehQIqDuJC9or3sIrKI8rOLTemkbALlYbc7r4+BpurUQbmd30e8dzasDmKZPnv2fjElJROsWPxGbSxJbVsLb5jgOLQelBXwnpBpUdVloCm1NjzQpJSPBqNKgvfn1zlZ513rBLw1jzmOHDsIs2IPR1yRK9YXaUuJMlKg23whzj9EgkdZqiveXN8gYxzDwHJrqXE2rHMktV0uamUdo4I8OY0+6UI1HErgQdB0mgnXePzzH+aHPbmhzCxRyQ7jmW3pU+zuSmSw8Wiy0jz2lalJ4kHYaSKTqAoCgKAoCgKAoCgKAoCg9QfZNfxE5l9wJv8AqVvqwPocrIeXHtd/4U7d9/rJ+om1JHzP+OsRg9JoLNR6CPmjyVahVWo5UKSYUlMlCA4UgjgJ0G0ab60arTxqMc2TNKvY5Fzi7lOrt1NlsXTbExSZpHxRToSiBelTZKI6owbKwTxhWu4a7tK8HV8rjBjm+Lq09D9a8u+fr+a6yzS3YIt4q7Yumd0TO6Y9HW2M64NW9LS3krUHVFI4NNmg16SK4tJo7tTMxbMbOt9T5g8x4OSWY781t0xfMxHDTZSK7azCL3i5x57cdLIWC0pRUFgDeBu0Jr3eW6G/TXXTdTbTc/JfO3mrS86xYbcEXxNl10zxREb4iNlJlzccipU3JkOISsLIbQFAHdtVv9yubnOeYm2y2adP3Pc+mXKbb8ebVZbYmJmLLaxE7viu3/pg5kERoRW5DTaUFpei+EAapV16eGsOUai6ck2XTM1jp9Dp+o/J8MaPHqsNltvDdSeGIitt+6Zp1TEetFY6ErfYQsapW4hKh1gqANe7mmbbLpjfET7n5Ny3Fbm1WLHfFbbr7Ynsm6IlOFWG2HXRhSfEtX8tfLxzXUR0x6ofveT6fcmv2Riujsvu+2ZcGVjjPZqMRxaXRtS2s6hXg102V1YOcXcVMkRTrh89zb6ZYJxTdor7oyRutvmJtu9FaRMT1b0QIKSUqGiknQg9BFfQVidz8autm2ZtuikxsmOqWKMRQFAUBQFAUBQFAUBQFAUBQFB6g+ya/iJzL7gTf9St9WB9DlZDy59rv/Cnbvv9ZP1E2pI+Z3YfBWIxQWcj0EfNHkoFUBQbex/vFn5q/qmuDmn9Pd3e99j5Bj/9rD2X/uy22SDViJ/aK+rXn8k8d/ZHvfcfVSP/AFtP+e792ERKeqvon4snrSRbbRqfNU0yVq1/DUNfKdK+SyTOq1fbdTuj+x/ROkxW8h8v1nZdZim6f/JfFf3piO4iL/mNlS2dq1tFok/hI2A/ADWWf/1tZxdFa90uflEf655cjFO26cc2frs2Wz64tlC4oIlxgRoQ8gEfSFfS6j+Fd+Wfc/D+URMa7BE7J+bZ+9CaX7j+z18HFxdojTh113+CvmuUzHz9vVL9y+oluSeVz8utfmW+GtenqN2AyDEc7fj4e0/Mleuumm3TXo1rPnEWfNjhpWm2jk+nF2ru0F/z+Lh4/g4q7qfFSu2le6tUXuwSLlMCd3aanxkDWvc0G3T2V6n5V5uttt5vqYt3cc+uYiZ9rXV1UfOCoCgKAoCgKAoCgKAoCgKAoCg9QfZNfxE5l9wJv+pW+rA+hysh5ce13/hTt33+sn6ibUkfM/qPerEB6urpoLMR6CPmjyUCqAoNvY/3i181f1TXn80/p7u73vsvIH+9Yey/92W3yT9BE/tFfVrz+S+O/sj3vuPqr/Taf8937sNBbI/rM6O0fRCuNfzU7TXr6zN8rDdd00p635r5X5b/AKhzPDhnw8XFd+Wz4p9dKd6cS5MRhKUzFJSh3XRKklQOng0NfLabBlyTXHWsP6D53zTl2jtizXXWxbfWkXRxRNPRSd2wmI/BcCkQltkJ85SGxw6a9Omgq6nFmtpOWJ6qy1ck5hyvPF2Pl91mz4ptsjhpXZWlIRGXG9XvKUpGiFvtuI8SlA+XWvotPl+bpK9MWzHqh+L855dGh8xRjjw3ZrL47L7ou9k1hMZctqE0X3uLgCgk8I1Op96vmtNp7s93Dbvp0v3HnXOcHKcH8xn4uHii34YrNZ74al7IoaUEsJcdc+SlQ4QPGTXo4uTZZn45iI9b4vX/AFN0FmOZ09t99/RWOG2J9MzNaeiENccW64t1w8S3FFS1dZNfSWWRZbFsbofiWo1F+oyXZck1uumZmeuZ3kVk0igKlBipQFQFAUBQFAUBQFAUBQFB6g+ya/iJzL7gTf8AUrfVgfQ5WQ8ufa7/AMKdu+/tk/UTakj5nhsrEB3E/BQWYj0EfNHkoFUBQPxpLsR5L7JAcTrpqNRtGm6tebDbmsmy7dL0OWcyzcu1FuowTEX21pWKxtik7OxyZlykzkNofCNGyVJKRodSNNu2tGm0WPTzM2V29b1OeeadZznHZZqOGlkzMcMU2zFNu2SYE5UBxbqGkuqWnh84kaDXXZpV1eljUWxbMzEVrsYeXPMN/JM92azHbfddbw/FWKRWs0p10KuNwXcHG1qbDSWk8KUA6jUnUmpo9JbprZiJrWWzzN5ly88zWZL7Isiy2kRE13zWZ2037PULbNECT2ykFaFIKFJSdDt3eSmt038xj4Ymk1qnlbn0cm1v8xdbN1s2zbMRNJ27t/VMOZPuUaXIhSENuNlhQ7UKA2pCgdmh8dc+k0eTDjvsmYmu7tpR7XmLzRo+aa3TarHZfbOO6OKsRtti6LopSdsxt2bN7l3W6QpsNTTKl9oVpUEqTpsB660cu0GXBl4rqUpPS9rzj5v5fzbl84cE3cfHbNLrabIrXbthF9BXu1fk7GhoMUBQFAUBUoClBipQFQFAUBQFAUBQFB6g+ya/iJzL7gTf9St9WB9DlZDy59rt/Cnbvv8AWT9RNqSPmdOm2sQhS0I0C1hJVsSCdNT1CgswPNISkLdQghIBCiARs6jQKDzJ3OoPiUKBwEHcdaAoCgKAoCgKAoCgKtQbOqrUY4eqqMaEbeigxQFAUBQFKDFY0BQFQFAUBQFB6g+ya/iJzL7gTf8AUrfVgfQ5WQ6Yd+vkBkneS5MWvlzjF7tmOzEZZbbtMut1Dy2W40VqSlzhQwlSlrJdGidg61Ckjo1y+9k5yisi0SeZGf5DnzwA1t1tQ3Y4eum3VSDIkK29TialB3l5d92XkBypZaRg3KbHbZKa4T9sSoibhcFKTuUqZN7Z7XXbsUKtBaczEsSuJJuOJ2O4EnUmVbYrxJ8a2jQRyXyh5Sz0qRN5WYfKSoaKDlit511/6CghVw7rndvunF67yOw1ZVsKmrY1HPvsdnpUoITP7jvdUuPFx8n7fDKvlQZtxjaeINygB71KCISvZ391iQpSm8QvMTi+SxfpwA8QWtdKJVGJ/s1O7ZJ/upzC1E66Fm8pdAPifjOUotUJn+y45PvcX2dzHzO3E7Eh0W+SAf8A8don36UEPl+yqx0qV6hzsuraPkpk2SO4fdKJSPJSgjk72VM8A/ZnPCMtXQJlhcSPfamq8lKCFz/Zac1Wtfs3mjiE8bdA+xcIx8G5p4VKCGzPZm94qOrSLc8KuKfwm7rIa+B2GmlCqOzPZz96GKkqasWOXDTcmPfY4UfF2yWx8NKCGT+4v3qrfxa8qX5wT0wblbH9fEEygfgpQQud3Ue8vbjpJ5HZadumrEH1ge+wpygjcvu/894KVLl8mM2YQkaqUbHNUBp81o0EMn4JnNr1+1MGyK3cI1UZVpms6Dw8bIq1EXfYejEpksuRlDel5CmyPGFAVRxS+yN7yB41CgUHEK9FaVeIg0C6AoCgKlBipQFQFAUHqD7Jr+InMvuBN/1K31YH0OVkI/kv7uT/AGyPIaCB0BQFEoKCI53lacIxedkioAufqkiDGbhKkoiIW5PmMwkFchxKktpSp8KUog6AGiojL5nOxE5GqVa2YLmG4o1l2RMsvoubS4jr8tAahyWFsoccDcB46lITxLb2+augfsXNyxX3KziqLRdret673SxWq9Sm4/qc242ZhEmbHaLT63klLKitJcbSlQSrQ6jQhyrXzUstzefCrFkNst6b9/tuBf50BLcCdcBOct5RFeQ6sqAfaUCVJToBrQoYic5uWdwx20ZVEyPtrJfYEq5W2Q3FkuOKZhS48GQlTLbanEuNyJLbRbKePiVsB0NESROZ4uXcajvXYW6bmUiTExe23Fl+DLmvw21vSG240ptt0KQ2hSjxJGzaNdRqKuIeYmCJvNzx05bbRe7LoLvAL22MoqbRwOuadmlfE82Cgq4gVDUbaK2Nyy7E7O85GvGU2azyG5CYjrM6fHjKTIU0H0tEOuJIWW1BYTv4SFbqDfFxtKm0FxAW8T2KSoAr0Gp4QTqdBt2UDg27B5xO7TbRKM9itR0DauLTXQA7juNAktOJ181Q02nUaaUKkBS07lKHumil9u9pp2yyOriNBwJEGDMBEyBFmA7w+w26P56TQaWRhmFywpMvDMflBXpB61w16/lNGiUQ64cieSF21+0uT2FyyddSqxwQdu/alkGghE/uhd2K5cXrHI/GGyobVRWXYp9zsHW9KFUXkdxfuqSNdeU0djX+ouVzb8kuiorP9nf3W5vEWsXvlsJOv/J32YAPAA8XRQQqd7Mnu/SNfUcgza1666BNwiPgf9bDJ2eOghkz2WPLdxRMDm1lUVOmxL8KA/t8aQ1QR2Z7KuylKvs7ndcG1/J9bsTK0+72ctBoIdP9lZlqOI2rnRZJG3zEzLPKZOnhLb7vkqUSqEzvZf8AO1g/8hnGFXFOp2qduEc6dGwxF+WpRau4PcJ7oPNbkBziyLLs3m49Ls9yxOTaWDaZrr7wkOTYjyeJtyO1onhZVt136VYgeu1UR/Jf3cn+2R5DQQOgDuNAUBQRrL8XhZlYXsfuLnZwpEy3y3x2aHQsW+axNDSkOapUlwsBCtRuJoK9zPlI9fZd2Xi+QRsMtuVY
+	0nEMrtLVsbfaNrQ/IeS5bwh1hMaQBLeRxKS43ovUt8SQSHDxnkpDxPmBJ5g2qdFTdLvkF9uGQrVGV2sq13ZhoR4IX2hAXFfYbWHNPOTxJ0GtEqjdi5LXyz3e4v8AqeMRmZmat5U5kUN+4faU1lN4euXq8uO6gx0qQ29wJW2raQNdlFRZfdyyOOi1xrbfYLFtXiMa2X23NreYKL6ibZFyp8N5tHGlMmNahxa6KDqUrHprICcZ1ytyi95FEyS0TvWnOXcO3yeXLd0lGXMnXFu6JuU5MqZI1Wwl1MZiOFhSiUFYV5tBqHcQzpjllkfJ1rF5ravXn5tpz63y4AjSkSb+i5B4tvOl9uYlpxSl8bCm+NBIUpKkghC7jy5zrHeY96vzz2XZba5ORrlM5XHttju1xkRnMet8QB2I6ywx2SXmFtFSWg4OEdepCwOaFm5gzeYOLZrYMcZu9h5VN2+5QYSluJuEuVcJnZ3YW9pCFIcW3bUFspWpA1cISSaFVVZ7YcjnYanGo+P3t6XglqzVrJEpgy+yfRc7rHVD9UcDfDL9YY4nEpZKyEBXEEnzaDbv40xduYNhtdlst0hckrnfZarJZuzuVsY7ZGN3Fyc600osPsRlSRH7MHgQXkrLY26kDDH4eHK5AmTcZV1mZFYrMzNwyRebp9sx7ndNQ7eURHXlpmMq85MtD2xlDYWjTzkqCUZnnt3tsXLLRb8ncYyi05Vkj67Uh5Bms2WPjcu4RnQ0rVQjoc7FxKtOHi0GuuyiURO059m96uGH4XkGaysYvbE3HbRmV2tvqrCnjJtF+uLc1hU1h5tKZ7cWI6rzSAoLbGmiqKsV6/5lfOXuI5Bac7XbprmVN2F6/wAC329+PeYL19FpanBqS08lHaMjtU9kUpKla7UcIoIo9zoyixK5iJuclM049Bun2I5cLYITCpzd/FitvYOsLBlsqUoKlEJBbVoAoBYABpnvE3lQt8h20Qfs664jZJ8WehDqm2shmTZceXEeUF7GVtwXixsCuJHConiSKDnZJz1yTFGJAubWNMXxN9nwX8UnouEGXBYiwpk2LFWvV31p+emMlMZ5lvsllR4UKKdKCZT+djcGfmUByyxYTmNW60S4SblcURSt+c7DZnszSlt31ZMBdwjhxeitdVaDzaJRpIneLt0qLkMoY0jix3H3L8q3N3eOZtyQ2ua2n7JYW2j1ph0wuJt/iQkocQopG2ipC7zthvy7WzjuH3TKYl4u8Gxw7jElW9hHrk+1JvDaSmTIaUAlgqCz0LQU79KCbcvs4Z5hY8zksSyTbJb5nCu3InPQ3XH2HEBaHQIciQG9QdOBwpWDvSKCcUBQFEok2KafaL2z/s6vrJoQsKio/kv7uT/bI8hoIHQB3GgXvA1ojHCOiiqt5z3GbaOXd1mwJ7ltkC42NhUxqYq3KDMm8QmH0+uI85gLacUhSx6IJNB1rxTLcovvMTAsdl5NeZFuhRMjNwhRcsaiNKXCyZiPHUbi4lIvLbER4M8QAU55wI4waDiYrzO5jRjFky7xf5abmu3XD1G8LgyBc0u5eLYv7G9WQpTMcxwY7jbxCwpbSkIG1ZCz4mX5vA5XYDzXXk1yy2fzCn4kqbikKJbvUmG7zNYTLhWtCmmHAtCHVMavyFK1BUSlVCjkDOeYd/k+sW27O4U05zObwhNhutnhyJDMN+AzJDr3A+v86lalacLhSUqGu0UG25c59mV/xbPcmvkxMpzH15Gzaof2E9AhhVlnTorK25xfWmVxpipLiUBPCSfBQaKxc/pU1q1wLhbT9v3W/wCIWtkMWy4m3+rZBb7VLlLVOShcZDraprvZpW6DoEApJPnBDofegvb9ksNwci4hxXu5WyDIvipF0ZtdtXcbbcLgqHMCWH3zJZ9SQkloKbIdSrzdCKC4MU5wPZFzDlYE7abfxs3GfbRKt89UiSz9nQYkxc2VEWw2WYrypQaaXxklfCCnztgbGxczb5f7xjMCLhLYt2Ss3OXGuqrugOMMWic3AlKXHMYaq43EqQlK/OGupBolD965oG1XrNrczi8u6QsBiR5mTz2Z0RElDT7Tckut29xYfcZbaWVF0eaVIWhOqk0Uyzzdt1zvDFpxvGr1lSpP2i8zPgGC227Bt8j1N2cx63LYU+y5ISptJaCiQnjUAhSFKDW2jnFZL3MhRUcv8tau13m3Syxob1thOPOKsznZ3FKlNTHE9lHcOitVaEnzQobaDmyc/wCUWQ26I7cl267wLllMnDGGp1t9YSu9WlUhDkdTbjK+ENdk4UOKARooFJ88ahM7DeMfzSzRJ9vt8hVoQuNItzdytkiAD2QbkRXmGZbTRKU+YptaBoCNh1FBylYtjSpUGcbFD9ctkl6Zb5QbAWzIkPiU86kj5S30hwn8IcW+iNPO5bYHckXhEzF4UgZBKjTb1xhesiRDmruMd1RCgQpuU4t4aaeco9elCpMHl3i1uyBGVNw5UnI2Xi81eZs6XMfQCy+wllKn3V8LKESnuBseakrUQNdtFq1TvKXBnZUaeLWtm5R7nNuzl0bc0kyJFwmNTpAkukFTrZeYbKUKOiQlIToBQaJPJHH2DkjMHIb5AtGWRXod6sTa4a46mnH5chAaW7FW80GVzXAgIcACQlJBA2ht4fKbGrbd13a3PS4XaZr/AL6XAbLfYJuCrc5bnGW08AKGVh1TpAOvaE6Hh2UGy5cYK1y6xtjGY86NcIkMIREks21i3OqQ22lsKlFhSg+6QnznSAT1URPaFRRaigk2KfvJ79nV9ZNBYVBH8l/dyf7ZHkNBA6AO40Dg3CgKBmRHjy2XI0uO1LjPJ4Xoz6EuNrT1KQsFJHjFBpLjiGI3gW5N3xOy3UWjQWgTLfGf9UCVBQEftG1dlooAjg027aB5eNY8tUBSrFbiq1nW2H1Voern1hEvVrRPmfn2kO+b8tIVvGtBpYvLvBIE6ZcoWIWqJOnzW7jMfZjpQHJjT4lIkFA0QHA8A5xAa8XnHbQbY43YC725tEbtjeEZAXQkgm6NtBlEw6Ha4G0hOp6BQaW0cvMSsLd9YtMCTEh5ImaLtbTcJzsRRuLrj0tTUZ19bTKnXHVqUWkpOqjQJh8usRgW5Fph25yPb27naruhhMh06S7I1FYgq4lKJ0bbhMpKddFcPnakmgjcvkvirysXftt0v2OXDDo9vi4/dLXNQl9pFsjzYkYq7dl5C1Bm4PoUVJ2gj8EURvLTy3sVmvcTIo0u4vXeNd7henpbzyFesyLpDYhSkvhLaQW1JjNuBI00cTxeChVm38ucfgItMdReuEO02682wQZnZuNSI99ltzJSXk8A4tFthKRu4SQdd9Fat7lhHfzCwZIbozGtGJQJcDGMah22NHMdqbFMR5l6akl16NoouJYKQkOcKiTwpADQv8n5P2Xylx6Ff4EazcrmbUhi4m1f50V2stA+oTkSUpholttBmQjs1hTZUnp2BwrpyYkSZ2LXBmXZbsvG8nyfIhAvcKQ5HWcjl+tJSj1d9tSHI2miVkkK38IoIpA7tr1vuTd2RlaHXkzY92XA9XWiKLoq5ql3CclPGo9pIiNx423d2ZV8vYSq4eWmLXPDsXh4/c40Nly2sx47b0K4zrgh8Mx22VOn19CVM8RRqGkEoHRRVgdVAe5QYolBoDvG2gwU9XvUKkkEUVigKDOtEoKCTYoP8xeP/wBur6yaCwaK018jqkw0tpUEntUqJPgBoIwm0J+W+T81IHl1oOQm1xBvSpZ8Kj8WlA/9nxP6r4T/AC0CTbIh+QofSNEJNsjfgq/KotSDbI2vyx7v/CgSbXH6FuD3R/JQJ+ymuh5fvCgSbS2f6ZQ+iP5aIQbOOh8/k/8AGhUg2k/1/wDN/wCNFJNpX0Pp90GgSbU90Oo+GgT9mP8A4SD7p/kolGPsuT0FHv8A/CgSbbKHQk/SotSDAlD5AP0hQJ9Slf1Xwj+Wgx6nJ/qVH3qFCDDf6WFjwgUQ2qJIG5pZPzTQqbLD43sLH0TRSS270tqH0TQY4Vg+ioHwigwdemiUJIQfB4aBJT1HWhUnwUUUEmxT94u/s6vrJoLCoOFcP0H0h8dBpKAoHKAoCgNB0igTw9RojBBFFYoCgKJRjhHioE8J8dCrFFFAUBoD0URjh6qFSNCKKKAoM60SjGg8VAkg+OhUnQbiKKSUoO9CT7goMdm3/Vp/JFBgtMne0g9fmiiUIMWMf6FH5IoNpZo7TUpakNpQS0Rqnxii1Seg4Vw/QfSHx0GkoCg5FCjGgoElJFCrFAUBQY0B6KIxw9W2hUnTSiigKA37xRKMcI6KBJBFCrFFFAUKAp6xpRCSnqoVJoooCgPcolGOEdGygSQRQqxRRQbS1f3hf9mfKKCQUHCuH6D6Q+Og0lAUHIoCgKA376DHD1UQkgiisUBQFCjGgPgojHCfHRak0BQFAHTQk6AAalR2AAbyTRHV3mb3nMYxFcm1YlHRl98Z1Q7KCym3MLB0IU4nzniOpvZ+NXVj0t122dkNd2WIdMcs7xnOC/vvLTlr1giubEW+zoTEbQOoLAU6fGV1126fHbG5qnJdKt2Od3OCyyPWLfzJv6XAfRfmLkoPjbkdok+9WU4bJ6ITjnrdr+UPfWjTJMfH+cDMe1uO8LcbNoTZRHKt3/Ox08XZ6n5bfmjpSkba5cukptt9Tbbl63f+NKjTY0ebCkszYUttLsSZHWl1p1tQ1StC0EpUD0EGuKYo2nSAfBQY4T46FSaKKAoUGw7xRKMcPVQq2NqBEhf9mfKKKkFBwrh+g+kPjoNJQFBzBuoMcI8VEJ4T46KxQFAUBsO+iElPUaKxoR0UGKAoCiUY4R16UHFmSo1viyZ06Q3EhQ21PSpTqglDbaBqpSidwAqxFdkFXn/zn553HMVysexh522YkklD7ydW37iNxLm4paPQjp3q6h6GDTxbtne0X5K7nVCUNOLxbK62uXGteM3vKJZh2WEqUtGnbvnzWWgelxw7B4t/UKxmYjekRVdFk5G4/CSh/IpDl9lg6qjIKmYo8Gg0Wv3SPFWmckzuZ8KXnAMHbQUJxG08GmhCoyFHTxqBNY8U9aUT7AMif5ZqREx9gM47xKU/jIWoRPOOqlsoOoZWetAAPyga132Rfv3srb5tdyMcyO15Ta2braneNlfmvsK2OMuAec24Ogj3jvFcd1s2zSXRE1b6sVFEoxwjroE6GisUBQbK1/p1/MPlFBvqDhXD9B9IfHQaSgKDmDcKAoCgN++iUY4RQJIIorFAUBQY0B8FEY4T0baFSdNKKKDoxz15pryiU9itikEY1bndJkhB/v0hs79m9tB9H8I+d1V6OmwcPxTvaL767HViXoQfdrqaZbDE8GmZfLUtSlQ7RFUBMnaaknf2bQO9RG87h09VYX38KxFXZO3WiBZYTFstURMWK1oG2kDVS1HZxKO9Sj1nbXPWZ2y2Qn9r5b5Hdgh11tu1R3NqVyiQvTwNJBUPd0rCb4hlFsy20rkvdexUqHe4sh8eiy42toKPVx6r090Vj82EmyVGzGVx5EuG+ns5MJ5yPLZO9t1s8KknwgitkTE7muYomnK7KlYzkrbTqlrtl60izGEkbHCfzLg12ahR08RrXnittepnimeKI63aFzKACQ3BJ6ipenwAV5k5/Q9ONL6XCXlEzXzIzKPHxH4xWPz5bI0tvXJk5PcRubY8XCr/AOKp8+5lGks9Jactlp9OKyseAqT8ZqxnnqYzo7etzEZdHJ/PQXED8JCgr4CBWUaiOmGE6KeiW2jXy1SjwolpaX+A8OA++dnw1sty2z0tF2DJbvj1JPa/06jvBbOh6DtFbGpvqDhXD9B9IfHQaSgDuNBsOgUGCkdFAkpPjolWKKKAoDQGgTw9VBjQigxQFAUSiheeWdqsFnGNWp8t3i9tH111CtFx4Z2HxKd2pHg18FdOnxcU1ndDXkupsdEJg04hpoBu8Vela0QRj+NSsouiILOrUVv85cJYGxprXo6OJW5IrDJfFq0q7P2myIaRDslkh8LbY7ONGR0DpUo/CpRrk4qzWWcL3xrEbfY20yXUpl3MjVctQ1DfgaB3ePfWN0sohLFzmGtAnV1fUN3v1ouviG22yZMKmynASk9mgbwnoHhNaLr5lvtsiN7pvznQcd5gRrkkcEHJIjTs0dCnW1Flbh8I0STW3BkmGrPYiy1LaPaNq0cbIW2odBSdQa7t7imXbaG/63ChyztMlht06da0hR8teBdFJmH0OO6sRPWfUN2ysWZk0WDRFGRo1Amip3gLz32rIYLqyyIqlBoqPCCFpGoHu1v087XHrLY4Yn0rcrree4Vw/QfSHx0GkoA7jQbAbhQFAUBvoMFI6KIToaKxQFAUGNAfBRGOE+OitfdLlEs1unXWevsodvZW/IUfwUDXQeEnYPDViKzSEmaPOvKr3MyS83K9zie3uDynOz11DaNyG0+BCdAK9Sy3hijmmaygEhp191thhBdeeWG2W071KUdAB4zWbF2IxfG28etjNvaSHZ0ghc51A1LjyvkjrCfRH/GubJdxTVsiKL8x+0MWCKVO6O3SUAZKh8gbw2D0AdPWa0zdRnbZMtyp9170z5o3IG6tF10y6ItiCQOmtcs4eXffB5+Zq1zbxHl9yjv0y1XnC5KEyJFuc0VKvdy4WkRHEEFDiG21JSUrBTxLVqNlfM8z1t/z4x45229XXPQ/XvJXlzTTy/JqdbZE25I2V6Mdm3ijpiZnpjoiOt2P58Q75Gxzlm1lUyPcsqZtzzGR3GI0GWHpiW4/brabGxKC5roBX0mni6Lfi39Pa/J9fdiuy3ThiYsmZ4YnbMW12VnrohNvcMi1QHidS5GbKid+oGh+EV6dk1iHkX7Jds8YUpWN2JSt5gMfAgCvFz+O7te5gn/Dt7G7O6tLeYIosE1GRsga7qoaKSOmoqa4D++ZH7Iv66K36fxOXWeCO1cFdbzXCuH6D6Q+Og0lAUGz6BsoDhHRQJIIoVYoCgKA0BohPD1UVjQigxQFB1/575EY9vgYxHd0XcD63ckj+pbOjST85YJ+jXVprNvE1ZJ6HUKYNOLTw13NKVcvbCJM1++yW9WoJLUEEbC8oecr6APvnwVryXdC2w7DY5C1fVcXE7GTpF1/D6VDxdFc191G6y2u1OE79u3XfWiW+1yhWtkr/mxzBg8reXeTZxNCXF2mKU2qKSAZE549nFaAO/VxQKvxQTXJrdTGnxXZJ6N3b0PV5Jyy7mWsx6e38U7Z6rY23T6vbR5q9ynl3cOZHN6+c3csLlzYw11c716QniEu/wBwKylZJ2EspK3dm5RRXzXJsM5ss5bttPbdL9Z8+cys0Ggs0WH4fmRSkfhx2/fst7Ku4HeXmhd1xm3BWpiwX5DieovOhI+BuvrsT8Ry71cWPVNht2vRH198k16GPww8/JvdxbKz6vZLMzu7ODHT7vZp1rxMs1vnte7iilkdkNnoCK1tsGlo27KKZIIoyqQqimz11FTTAv3zJ/ZFfXRW7T+Jy6zwR2rersea4Vw/QfSHx0GkoCg2g3CgKAoDQGgTw9VEY0NFYoCgKDGg8VBjhNB0W5h3k37KbzcEuFyP25YhHqZZ8xGnj0J92vSxW8NsQ5r5rKrZKFurS02njcdUENp61KOgHv1uYuwVntAtlut1pYSONtKUOEfKdUdVq91RNck3VmrOIWtGjtx2W2EDzWkhIPWek+6a1S6YikOagbfDWuWUTRyUgnYKwllV5Yd9/mW5lGX2jlbY1mXCxJxLl1ZaGpevMoBCGRt2lptQTp+EtQ6K+M5/q/m5Yw27rd/5p+77X7R9POUfy2mu1mTZOTd6MdvT+qdvZEPQDkHyxa5R8rcbw9baE3hLZn5S82eIOXOVop/zukI0S2nwJFfQ6HS/y2G2zp3z2vzfzDzaeaa7Jn/Dus/JG717+91q55XZN2zy9Fra1bEt29sjpLCfP/nqVXpWRSHzl81ucmzW9x9NntSB+dfEeNp1FXCk+Wu7ZbbWeiHJw8V1OuXcUtpbbQ2gaIaAQ34kjQfAK8De94gdVGUBW6opg7KLBpQ6KjI2R0UEzwMaXiR+yK+uit+n8Tl1ngjtW7XW85wrh+g+kPjoNJQFBt9BpQY4erbQJ0oCgKAoMaCgxwno20Qmiig0OU3P7Hxy9XIHz4sRzsf7RY4EfzlCsrIrdEJM0h0LmjeDt06a9OHKexC2CfkLDi08TNvSqS5ru4hsR/OIPuVMl1LViNrsDZY/aTFPKGqYydQfxlbB8Gtcsy22RtS4bz4awlvPN793VWEiFczM7h8tMFyLMpYQ65aYxFsiLUE+sTHfMjtDXfqsgn8UGuDX6qNLhuyT0bvTPQ9bknK7uZazHp7fxTtnqtjbdPq9rzW7qWAS+Z/OOZneTFdyg4c6b7dJL6eNMu7yVqMZKirYSlfE8R+KK+Q5Hp51OonJfti3bPpund979g87cyt5by6NNh+GcnwREfhxx4vZS3vesN6u7Nhsl0vMhQCLdHW+OL5SwPMT4eJRAr7alZo/D60irztcRIvN6bXKV2z82UqRMcO3UlXaOE+PbXVbbWYhy3TsmV8cvLcLhlMZ1aNWrchctZ6ApPmt6/SVr7lZ6y/hxz6dhpLOLJHo2uyB2jSvGewa4R/xoEFOyoyMqSfH4aLBhVRkbV10E0wP97v/ALKv66K34PE5NX4Y7Vt11vPcK4foPpD46DSUBQbgbhQFAUGNB4qBPCfHQYoCgKAoMEA+CiKw5uylRsOdZSdDPlsMnwpSS4fqVuwR8TG/c6dTflV3Q55TjAIgRCuM4jzpLyWUfNaGp+FVa8s7oZWrlsjXDEU5ptecPvJ2D4655brNzq1zT52ZFYM5VFxSYybZYG/VZ8V1AdYlyCQp7j3EcB8wFJBGh66/OudeZ8+HWzbgujhs2TG+Lrun1btnpfrnlvybptTy7j1Vs8eT4omJpdbb+Gnb4prG3Yn2Dd5DB8lWxb8hcGHXpw8ITLXxQXFdHBK0ATr1OBPjNe3y7zTptVS3J/h3enw9133vn+ceRNboq34f8Wz0eOO23p/TXsdW++PzIRkGQ27ALRK9YtWLgSrr2WikPXJ9HmJSRrxBppQA0+UpVeP5l1/zc0YbJrFu/wDNP3R732f085LOm092ryRS/Jstr0WR7uK72RDub3e+Wg5W8sLJZZTHY5Bdv82ykk6kTJKU/mteplsJb8YPXX03KtH/ACunttnxTtntn7tz888084/1PX35LZrZb8Nn5Y6f1TWWu54ZGExomLRXTqspmXUDqH6Fs+7qojxV6uO3pfNZZ6IUBj8Lz5NwWN35lg/Co+QV1Yo6XLknodn+WNn9Tssi6OJ4Xbs5q3qP6FrVKffUSa4tbkrdTqd2ispbXrWORp01wu00rYeqik1GUGzQMqAOwioygwpNFTHBBpeH/wBlX9dFb8Hicmr8Mdq2663nuFcP0H0h8dBpKAoNyBsHioMaUBQFAUBv30CSnqoMaGgaceaa/SOJT4NdvvVJmIWLZlrXrmBsZQSfw1bB71YTf1NluLrUvzbdddtFtU4sr1mHXXdsbVuFb9JNb57GGpiItinW60TflV6TiWxiUYMY5A02Kf43lfTWdPgArnyT8TOFn25s/ZjKUrLSloUQ4nTiSVE6KGoI1G/aK03RWrfjmlNlXTDmHyAyy3iVdMefOWRFKU6+wlPBcAVElSi3tDu3aSg6/i1+Xcy8o6nBM34p+bG+f7/q6e71P2rknnvR6iIxZ4+Tduj/AOP0bd9vfs9LqBd2nGXH477SmX2VFD7DiSlaFDelSVaEEdRr5u2Jtmk74foOO6Loi6JrE7pWT3beXCOYHNGDIuDAex/DQm8XVtaSpt1xC9IjB6POcHEQfkoNfSeX9F/M6mJnw2bZ+yPX7nzHnXnH+n6C62yaZMvwW9cR+K7ujZ2zD1Wv95jWG2SrrLPGGh+Za18511XooHjO/wAFfpNJmX4DWkOlt8kTb3cpEuQvtptxeK3VDdqrqHQEjd4K3xHRDRM9MpNY7EudMt9jig/nl
+	hC3ANyBtccPiGprfddGO2vU02Wzkuo7WMRmYkdiJHRwR4zaWmUdSUDQfAK8WZmZrL2oikUhjrrBmbPhopJT4aLBtSSCeqoplW+osGVD4aMkvwX98P8A7Kv66K34PE5NX4Y7Vs11vPcK4foPpD46DRkhIKlHQDaSaDUu3IkkMoASPlq3n3K1ze3Ri60m7ZwJTt6B0VeKWPDAEhzwH3KcRwQwZCh8kfDSLjgJMlY/owfdNOM4CDMV/Vge6anGcBJmuD5CfhpxysY4kwua/wBHCnxD+Wpxyy+XDiqkPr9J1WnUDoPgqcUs4tiDBAPR7tYqaWjcQaCsOacdS8ejP6bI0xBV4loUny6V1aSfj7mjUx8Pe6xzek16bgXRYtBYbQB/9I35K5rt7OFhWtQVAj/igpPuE1rlut3NknbpUlmgGdcqMG5isOIyOyoVPKChi+RfzE1rXcQ6kefp1LCh4K8vX8p02tiuS34v70bLvX099Xt8p8w63lc/4F/w/wB2dtk93R2xSXB5V8sbDyZxu62+LcVzvXZq59yvMlCW3FpA4GWylBI0bRsGm8knTbpWvlnLLNBjmy2azM1mfd6m7zB5gy84zW5ckRbFttItiaxHXPfPspCEZtkj+QSiRxNW+LqmFGPh3uKH4SvgGyvWtto+cuuqhEWJ2fFJcH5xWxsH5KT0+7W+y3pab7uhfHLvHvU4a71Kb4ZVwSBESobUMb+L6Z2+LSuHV5eKeGN0O3SYuGOKd8rJI2Vxu0wpBB16KkwsSZI26VFJ6KLBKt1RkYIG3WgaUmoyS3B06Xh/9lV9dFb8Hicur8Mdq1663nuFcP0H0h8dBELg6djSTs3r+IVrvnobsVvS09a21Nx6I8Q8lbGkiorB20UipIbV7+lA2RrUWDaknfvozMEaVBigwoagigjWUWxd4x+6QGhq86yVxx1uNkLSPdI0rZiv4b4lhkt4rZh01mqb4+zK0h0jUNagL0G88O+vaeYuDGXQ/jtrUk6lDXZK8bain4q5skUuZxuTmxyAUOxVHz0HtEDrSd/vGtcttk9CRJ6KxlsgzLnxoKCt5fnAea0nao+5/LUpMk3RCq8lvUq6Hs1fmojZ1ajJ3a/hK6zWcW0apuqrx1gKVxLG47E/y1lbZXbLCb6bEpxDGF3+cXpKCLXCUFSVbu0VvDQPh+V4PHWOozcEUjfLZgw/Mur0Qv7hSkBKUhKUjRKQNAAOgCvJesQagQsbPFUlYNEA76imSnhOnvUCdKjMwobaBFRmlmEj/Nn/ANlV9dFb8Hicur8Mdq1K63nODcDpH1/GHx0FXWq7G9s3ORwtBdvuk+3vIZVx8IiSXGEFe/hUpKQog9daJdNm5zDvqMk9SAUo1HyR5K2tJpSOo+OsZU2UkUlTdQIVQNEabKisUZwbIB3ioQaKduygRu30EE5g51aOXWPSb/dSXVg9la7ahQS7LkEapbRruA3qV8kbeqs7LJvmkMb74tisvJnLMmut+yGfk0l0RblLkKkI9V1bQxqokIZGuqUp12V6O6jz52y7X8gM9VlVjulmnlIvNjdS66obA8w/sDgHWFJIVp0nw0umovlMh2K82+yeFxvcTuPWD4DSBvRf4zqNHVKiufLTtKfcI+OkwtZR6fcImiuF3tCfwQTUiEQ2W/2hPCOFPh31nFpU5Y8el5BK7JoFqI2R63MI81A6h1qPQKwy5Yxx6Vw4ZyTToX3AgRLZEZgwmgzHYGiU9JJ3qUeknpNeXddN01l69lkWRSHJUBvqMjZHhrCQ2R0VAzWLI2sdNFIFRYJUKKYKdu+osSleFD/Nn/2VX10VvweJzavwx2rSrree1t1OkXxrA8tSVje6oYvgXJP/AMQ8iyu2w8Tkc4LffrtIvtztE1r7YbVKccCW7izHeStSxHcSkpfQeHZpuBrVLfbELuO81izT5Poo+aPJW1oglQqSyINRYMkbahBJTruoGVpI2ke7QN1GUSSrrqMjaqDrX3k+fkDkpi6Wbcpmbn+QtrRjFqc0WlhHornSEf1bZ2JB9NezcFabsWLjn0NWXJwx6Xk/I5w8wb/Ljv5jks7LW2OJLaLg4FqaS4riX2JAARqejTTo3V6FlsRGyHHN0zvSplRvpiJtLTk964rQ1DispK3XHVnhS2EDU8RJ00rG7YkRV6Ccse7rNwaww719pBrP5ae1vERw8UPslDVMHiTqQU/KcGoKujQCueNTETMU2On+XrG/asiXGlxSlEyK5EdUNra9D49FDUK8YNb7Lou3S57rJt3tM/8AKrNGud2DXoG80Els2FS7p2cm4FUKCrzgnTR5wfig+iD1n3q58mpi3ZG2W/Hp5u2zshakWDFgx0RITKWGGRohtPX0knpJ6Sa4Lrpumsu62ItikHdDWNW2pJ2iqEHdWMhpQ6axWCDUlSFJ13VBx9x20WAd1RkZUKLCV4X+9X/2ZX10VuweJz6vwx2rPrrec1t1/uv0x8dSdyw6hR0RJ/Ok32VydxFqzIu0/H8Z5rssNf7mF9iRFqmOST6ukpivpS/GbWHivjb89PA4nTXLdbvTLldze5fc57Lech5c35N/tNhvk7HrnIDamiidAUEupCV6EoUFJWhW5SSCKxmGyJidzsOj0E/NHkrY54nayd3iozNncaxDSug1FJpIwR00DBAPRtqSsG1DoqM1Rc5+b+NclcMlZVkBEqW8VRscsCFcL1xm8PElpJ0JShO9xemiU+EgHOyyb5owvv4Yq8J8yzbIuYmVXfMsqmmdery72j6hsbaQnY2wyjchttOiUgeUk16NtsWxSHDdMzNZapno+GtkMXf3uK46bhlWV5DNsypUGxQmkWi8uA9lGuDy9Fob180uKZJOu9I+dXNqppEQ6NPG2r00ecbZacedcS000CpxxZCUpA3kk7BXC7VR5Pm7Utt23WllDjJ81dwdSDr0Hskq3fOPuVYmY2wTbE70FiC63J9ESG2ZT69yEpGun4SjuAHSTWz59/W1fIs6ls2LDY9uLcu5rE+4J2pQdrLR/FT8ojrPuVrvyXXb5bLMdtu6EzVvB9+tbYaVv8FQIIG6sZZQbIG6lVIKf/dVqGVA6bt1YkGqSyFYqaUNpHv0Qk6bemozMqTs2UEowwf5o/8Asyvrprdg8Tn1c/D3rOrree1t1/uv0x8dSVh1lS1zJh5C9YJ3L6MrD5ORXK7WvPLfeWHSmO+JL6BNtz7Ud5txS3ezHYqeGuhJSNdNUt1taui/cKyHN8by7MuUec8hr7ylnuY3ZZ7N1lRVx7fOcx6O1aX5BKmW0KkTA6h1RQpXoniJ30uLN9HsANiU/NHkrNqZozggp6qxlTJG8HZRTdAHdUDKh79RUQzvN8a5cYpec0y6eLdYrIz2slzYXHVnY2wwgkcbrqtEoT0nwamrbbN00hZuiIeCHOjnLkXPDOJWWXvWFbmAY2MY+lfE1b4QOobB3FxZ85xXylfihIHdZZFsUhxXXcU1VszvHircwW/yj5X5DzczCDiWPI7ILAfvN3WkqZgQ0nRb7un5KE/KUQOsiX3xZbWWVls3TSHtZYrPhnJzEbXilkY9Wt9uaPq0UaKlS3VbXJDx2arcVtUo7OgbABXmXXTdNZd9tsWxSFcX/JrlfnD6wvsIaTqzBbPmJ8KjvUfCfcrFT+P4lcL4pLygYdu186YsbVjqbSfS8e6qzXXa7RAs0cR4DAaSQO1dO1xwjpWrefJUkbIjUaVipkp13bKKYUNfcqBo7/BUuWCVViyJoMEa0HGUBqalWRulAhQqKb108VRYJNFSfDhpdH/2ZX101uweJzarwx2rLrrcDXXT+6/THx1JWN7rnO5b2bF83j8w8blXmz3LJbm6nL7Mi5THrTd/WYzv5xdvfdcjtPIcbQtDjCEK2FJ4kqIrXc3W73TDui86+dneI5r5jnmYZDZLLy2s2MNs2DlLYX1yBClz7i+wl65LUlK/XGhbXQtLm1KXE8CEgmpMUhbJmZerIHmI8CR5KzaWKMrRUZEK66kLBtSRvpAbIqDXXS4W6z26feLtMat1qtcdyXcrhIVwNMMMpK3HFqO4JSNTSIqTNHg33oO8hcefGWep2lx6Dy1xp5acXtS/NVKdGqFXGSn8Nwfo0n0EbPSKq7MWPhj0ufJdV1uY3DxitrUm2I4xfczyC14vjNvXdL5eHQzBho0Gp0JUtajsQhCQVKUdgAJrKZiIrJETM0h7Hcs8bxzkZhLOJYkpm75JN4X8ty/g82TL00Ia4tpba9FsHYB521RNedkvm+Xdjs4IPLM25y9SXZ06WvwrcWo1rZrSx3l+hjgm30JeeG1u2g6oT4XD8o+AbPHRVjlHCAEpASBoEjYAB0AVVgmoorGSDZ30ZGFbzQII1G3bpUkNlOuu3xVgyIKSP5aKTQMuDbrUllBg76sBJGooGyNaxmGUQQRuqKk+IfvR79mV9ZNb8G9zarw96yq6nA11zGsb6Y+OpJDp0uJychc9304yzf73zPR61eMwttpuVykY/aHnYjiRcbvFXI+zmJTiT2TaUI7f85xdmEnjGu5uspVCOQ3Lqy3bJbV3q8RSjD08+MKYk80+X1vdLtrk3xxbMiNcWzoAH2kl9t0kAq4+LQK4+LGepnbHS7+j0EeFI8lbGg3QgUbGCNdlYhBqLJs6AEkhISCVKJ0AA3kk0Hir30+9KnmTdXuVXL+5dry+scj/APY7xHUeC9T2VeghXyozCh5vQ4vztqQnXox2U2tN91XQtlI10rohrubuGw8+6zHjsrkyH1pbYYbSVrcWs6JSlI2kknQAVWL1H5CcpDyysb9xuyUqzHIWEouq07fVIxIWIaFDftALhG9QA3JFcmbJxTSNzrxY+GK9LsvY8buV/dKIjfZxkHR+a5sbR4Pxj4BWhtXfYsattgY4YqC7LcGj85wDtFeAfgjwCoN1RTZqqSUg0U3wkVjIbUDUUysbjRTVQJrGWUCopop39dA0tOo8IosOMoEUhSaBvrqSyqRtFYqk+IfvR79nV9ZNbsHic2q8PesiutwNfcv7t9MfHUkh1wOJ3vEuYc2647FVccL5g+vu5HaklCFWe+SGkOOXNsrUC4xO9VbbdbTtbe0dHmuOcOu5usja6sd0LugNcgjZs+TlGTW+9ZViLcTPuVlzkNv22Len3GX35LHYlKUqbU2pABC9ijovTfJllZbR6dJALaNnyR5K2bmk2pGh2HZUCCCN9GcMGpKkHfWKvKTv5976LjUi5933BLuYeQymW2+Y1/bKkGJHkNhxNtYcGmjjzakl1WvmoVwDapXDtxxHS13T0PKCOAAkJ04QBwgbtOjSuhqbhkgHU7ANpJrOEl6K92Tkj9lRoPMjK4SvtiYkLxK0up2xmVjzZa0Ea9q4D+bHyU7d6tnNmydEN+Gzpl6M47y/ckhE2/JUywdrVuB4XF67QXCNqR4N/irnb1ssRmIzTceM0mPHaGjbLYASkeACoFEEbxqKBlW/ZQNK3+CqpNGTB8lSdwZOw6VisEKSFCiuOU+GoEGpKwxWLIhQ269dA0aBlQ3isWRrQUqptSduo20qu4hW/dRUmxEf5m7+zq+smt2De5tV4e9Y9dTgcC5f3f6Q+OpJCJPbj461y32NUusGxZCRolHhSPJW7fDmJV8VQNUW1gjZrUZmiKkEPDH2m3dsu9pyxfeKxa3uTMZyJqPE5jIZSVG33BhCWGJzgG5mQ2lDalbkuJGvpirEtd0PMrEr85Hks2yW5xxXyERlq2ltZ3J16ju8FbrLuhhMPS7und3W4cyLszm18tKpGLWx4Gzw306Mz5LZ/SOlWzsGiNuo89XmjUBVXJkpFI3srLa73s1j2HW+wpQ+sJm3LQaylJ81vwNJ+Tp17/FXK6ISpQ8O+jI2agxQNrSCNdN1AwpOyqsGiNKLDG+oppXXWMkEUZGVDQ6UDR2GpJDGgrBkSpJ02baKYI03igaUOmpLKDJ2GopNRkwRs8VBI8TH+ZO/s6vrJrfg3ubVeHvWLXU4HAuX93+mPjqSIo70+CtcttrUub6wluWQP0aPmjyVuhzMEa+OoGTvoMUZkHfWMq40uJEnxJMGfFZnQZrS2JkKQ2l1l5pwFK23G1gpUlQOhBGhoTDzlzH2YfIPIs2hZTYLlfMGs4mIl3nCba427AkBLgcU3HW8C7FSvakhCiEj0AmrVjwPQSy2G0Y1a4VjsFtYtNotrKI8GBHTwobbbHClI6ToBvNYs2yO6pKmj10ZmiKgTQYI1GnXQMEdFFN1VJ0FFNqSaxkMkEb6iwbWNxophVSRgVjLKGaimiNdQaBlaBpv3dFFhx1J0rFkQASRoCT1VFgssPaallYHXwmitviUqKby9FTLYVKEVSjFDiC6EhaAVFAPFptG3St+De5tV4e9ZddTga+5f3cfPFSRFnumtcttu5qXBtNYNyyUfo0fNHkra5ifBVkNKFQIoyglQqSyJqKSagQqgZIqKQU6jZRlBlSSN9RTdAUDKhoaBojQ0VlLbivRQpXiBNVZmDTykMJJfcQwlO0qcUEAePiIrG6dixEzu2oReOZPLewpUb5zCxm08HpJl3eE0ofRU6D8Fabs2O3fdHrd2Dlmrzfw8N93ZbdP2KuuXep7t1tUpqVzmxtTiPSTGfclbvDHbcHw1qnXYI/HD1cflLm+Tdpr++Ke+YVRkXf/AO61jzjkc5zPvT7YB7O1Wac8DqNRot1tlHw1vxXxlt4rNsPH5ho8vL804NRbw3xETMb98VjdWFU3D2oHIWKtaLdimb3ZKfRd9ThRgr3HJhI90Vs+XLi+fbCu7x7VjF2+JOPcl7vLO3s3Lnd40YHxpYYfPw0+VPWn8xHUq+4e1W5gvOuC08o8XiIG5Mq4TZKx87swwPgq/K9LGdR6EDm+0l7y1/ktwcds+KWuVLVwRYsC0PzX1KI10QH5DvEQBr6NX5UJOou9Csr335O9r69KgzuY79knMKKZNvj2i3RltKA4iCgxSobNu3oq/LtYznv60Ku3eA70uRtTXbpzczIx4qYypQbuC4KOCY6lllSExuxCgpagPN106asWW9STmv61Q37K8/XcbjBv2aZBOnQpL0Wd6xdpj/51ham3BxKdII4knbWURHUwm6Z6XoZ7KJS3e8ZmTrzinnVYDN1dcUVKP+ZW/eSSazYvoUoKb5385MJ5HYnbsu5gPy4eOzrzGtDk+HHMkx3ZLbq0OONoPGWx2R14ApW7RJrRqNRZgt4r91aPV5PybUc1yzh08RN8WzdSZpWlIpE7q7emkelxMH5l8vuaNqF75eZha8utpH5xdvfC3Wjprwvx1cLzSh1LQDWOPNZlitkxLHW8t1Wgv+XqMd1k+mNk9k7p7pSJ3easudY6PQb+aPJW1ysK31ehTahrUDVFgEE7hrRkSUqSCpQKUjaVHYB7prFYlpJ+RY7bG1O3LILXbmkem5KmMMpHjK1gCsJvtjfMetvx6fLkmltl09kTKsb13h+Q2P8AGLvzjw+KtHpNJu0Z5f5DK1n4K03avDbvvj1vUweXOZ5vBpsk/pmPfEK0n99vutweIK5sw5ZRvEODcZGviKIxB9+tM8y08fi9kvSx+RudX/8A15jtutj/AKlcXf2i/dut3GmDJyfIFJ9H1K0KaSr6Ut1jyVpu5tgjdWe56eD6b83v8UY7e2//ALYlXE/2nvLFsrFu5YZXNA/RqfkQI4V49HHSK1TznH0Wz7HqY/pbrJ8WfHHZF0/ZCubx7UOariGP8l47f4DlzvS1++hiKj61abudT0We16OH6V2/5mpn9Nn33K5ne0x5zPFfqGD4bbwf0fG3PkFPuqlIB96tU84y9ER7XpY/pfy+PFlyz+zH2K4vHtA+8zdOIR8isliQrcLfZo2o8SpPbmtN3NM89MR3PSw/Tvk+PfZfd23z9lFdTu+B3mp/H2vOS+MheuqYqYsYDXq7FhGnuVqnX55/HL0cfk3k9m7TWz21n3yri8c5+cGQ8YvfNTLbklfpodvMzgP0EuhPwVpu1GS7fdPrenh5JoMPgwY4/Rb9yAyLlcphUZlzmTCvasvyHXST4eNR1rVWZehbist8NsR2REOAGmwdQ2kHr0FRsrJdVEDv37yd+Yj6tfWcp/p47Z97+cfqL/veX8tn7sGrI3GevdkZmhBgvXGI3NDh4Udip9Ac41bNE8JOp6q9F8OuqS5y6RjnMZEdUZUlcy7MY2++zbWFp7IwlRAiK0XZO0oeQ0406GwCVOhWpTVGJWeYJIs8Cw3CyKvUS2WG0+rvyHCrsrn2VvjzkwW2m2OxAZEhR7Va0reCV67gYIpPyHFI1xkJtjDSmZ9guVon3e2QjDSl2Y+4uO8zGdUkkts8DLhPCVp4t585QbZHNVqyQ3rPh8GTZrO63DUuO2pLHHJZfiPSHj5z6x2wYcbA7Q8KHFJB4VKSaOCedF/t1qXarDJlWJclMcSbj9pPLkJLAhjsoykdj2LChBRq0Nd587dpBAZDd6ya63C6R7RLmyrzNfmONwozzyS7JdU6oICErJHEvZtNB6oey35e5/jvPDKsiyHBchx+wScIlxI16udrlw4rj658FxLSHX20JUopQpQAO4HqqwPeash5we1J/hnhffS1f4eZXkc7/p++Ptfov0v/AN2n/wAd3vtfPlYsgvuL3SLe8avM7H7zCVxxLrbpDkaQ2fxXGlJUPfr5Oy+6ya2zSX9BajTYtRZNmW2LrZ3xMVj1S768qvaPc58N9Ut3MCND5pWNo8LsmZ/yd3CDp6M1lJQsp/8AmtKJ6VV6mDm+WzZd8Ue1+f8ANvptoNTW7TzOK70bbP2Z+yY7HcyZ7VOwpZ0tfJe5vucI7MzLwwynd09nHdNd888jos9r5bH9J8v49TbHZZM++YVpd/ak8x3ysWLlXjVtSdezVOmTJpHjDYjA1pu53k6LY9r1MP0p0kfxM989kW2+/iV3cfaT94yYhaYcXELSVei4xa3nVJ8Xbylj3xWqecZ53Uju/telj+mXKbZ2zku7bo+y2FaXjvzd6S8hSV80HLWhXyLZbbfF08ShHUr4a0Xcz1E/i9kPTw+Q+S4v8iv5rrp+1Xk/vNd4i5oW1N515ettz00NXJ2OD/1HZ1qnW5533z63pY/K/Ksc1t02P9mJ99VZ3XNMzvqlKvmY368qX6Xr1zlyNfcddUK0XZLrt8zPe9TDodPh/h47Ley2I90IwtKXdroDh61+d5axdUTTcEpSnYlIT4hpUKlVUFAUBQFAUGCAaBJ0G3UAeGopLag6sNtEOuHc2jzle8NTVjaTs2yl9u5fZ/dwlVpwPJLmhfoLi2ia8lXiKGSDWcYr53Wz6pcWXmOlxePLZHbdbH2rQsvdW7x9/KPs7ktlKUOei7NiCAj8qYpnqrfboc926yfc8rP5s5Th8Wpx908X7tUld9nT3tb1PLyMAt9tYdSgdtOvlvQE6D5SWXXVe8K+n5dhvxYYtuik7X4J505jp+Yc0yZ9PdxWTFsRNJjdbETviJWVYvZP8/rglC77mmFY6lXptIfnT3UjxIjNIP5ddtHyq07N7IS8rWn/AHDz0hx2tnEi2WFbivDop6akfzatBcVi9knyZiJByLmTmd8c0871UwICCdnR6s+r+dSgtCx+zD7qlpWlc6zZJkpB14Lne5CUndsKYYjClBcFq7j/AHTrMhCIvI3HZHBp589D05R003qlOuk7qUFs2HkdyYxZLYxzlNh9lLOnZuxLLBacGmmnnpZ4ugdNUWWxGjRUJajR2ozSBohtpAQkAdACQBQP0BQdFvaH8uc35m93tVlwHG5eVXm2ZHAusm0wEhckxI7UlDi22tQpwpLifNQCo9A2V5nNsN+XBSyKzV9x9PuZafQcz49RfFls2TbWd1ZmN89G7fOx82Nxttxs8+Va7vAk2q5wXC1Ot0xpbD7Lid6HGnAlSSOoivjrrZtmkv6SxZbMtsX2TE2zumJrEuFUZrJT6CPmjyVtaSqIKKKIKAoG1OtJ9J1CfGoCovDLYQbdcbotLVqtsu6OqOiW4Ud2QonwBpKjWURM7mvJks
+	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"></img></a></div></div><footer ><h3 >Contact us:</h3><p >FB Pro GmbH</p><p >Fon: +49 6727 7559039</p><p >Web: <a href="https://www.fb-pro.com/">https://www.fb-pro.com/</a></p><p >Mail: <a href="mailto:info@fb-pro.com">info@fb-pro.com</a></p><h3 >Can we help you? </h3><p >Do you need support with system hardening?</p><p >Our team of system hardening experts will be happy to provide you with advice and support.</p><p >Contact us for a no-obligation inquiry!</p><a href="mailto:info@fb-pro.com"><button id="contactUsButton">CONTACT US!</button></a></footer></div></div></div><script type="text/javascript">						function collapseHandler(e) {
+							var targetSection = e.target.parentElement.parentElement;
+							if (targetSection.classList.toggle('collapsed')) {
+								e.target.innerText = '+';
+							} else {
+								e.target.innerText = '-';
+							}
+						}
+						var collapseButtons = document.getElementsByClassName("collapseButton");
+						for (var i = 0; i < collapseButtons.length; i++) {
+							collapseButtons[i].addEventListener('click', collapseHandler);
+						}</script></body></body></html> 
\ No newline at end of file
diff --git a/Samples/Microsoft Windows 10 All_RiskScore.html b/Samples/Microsoft Windows 10 All_RiskScore.html
new file mode 100644
index 0000000..3826ec0
--- /dev/null
+++ b/Samples/Microsoft Windows 10 All_RiskScore.html	
@@ -0,0 +1,35 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows 10 Report [12/07/2022 10:37:11]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	/*display: block;*/	font-family: Arial, sans-serif;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	margin-left: 8%;	margin-right: 8%;	width: 90%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;	background-color: lightgray;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 50%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}#navigationButtons{	margin-top: 15px;	display: grid;	grid-template-rows: 50px;	grid-template-columns: repeat(5,160px);}button{	margin-left: 10px;	border-radius: 8px;	font-weight: bold;}#riskScore{	font-family: Arial, sans-serif;	text-align: center;}#riskMatrixContainer{	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	left: 10%;	float: left;	margin-top: 50px;	text-align: center;}#riskMatrixContainer div{	border: 1px solid black;}#severity{	grid-column-start: 1;	grid-column-end: 2;	grid-row-start: 1;	grid-row-end: 6;	position: relative;}#quantity{	grid-column-start: 2;	grid-column-end: 7;	grid-row-start: 6;	grid-row-end: 7;	position: relative;}#severityArea{	text-align: center;	position: absolute;	margin: 0;	top:50%;	left: 20%;}#quantityArea{    text-align: center;    position: absolute;    margin: 0;    top: 35%;    left: 40%;}#severityCritical{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 1;	grid-row-end: 2;	padding-top: 20px;}#severityHigh{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 2;	grid-row-end: 3;	padding-top: 20px;}#severityMedium{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 3;	grid-row-end: 4;	padding-top: 20px;}#severityLow{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 4;	grid-row-end: 5;	padding-top: 20px;}#quantityCritical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityHigh{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityMedium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityLow{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#riskMatrixContainer:nth-child(10){	position: relative;}#riskMatrixSummary:nth-child(10){	position: relative;}/* Color for each Risk */#medium_medium, #medium_low, #low_medium{	background-color: #ffc000;}#high_low, #high_medium, #high_high, #medium_high, #low_high{	background-color: red;}#critical_low, #critical_medium, #critical_high, #critical_critical, #high_critical, #medium_critical, #low_critical{	background-color: purple;}/* Low Risk */#low_low{	background-color: #548dd6;	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 4;	grid-row-end: 5;}/* Medium Risk */#medium_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 3;	grid-row-end: 4;}#medium_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 3;	grid-row-end: 4;}#low_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 4;	grid-row-end: 5;}/* High Risk*/#high_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 2;	grid-row-end: 3;}#high_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 2;	grid-row-end: 3;}#high_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 2;	grid-row-end: 3;}#medium_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 3;	grid-row-end: 4;}#low_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 4;	grid-row-end: 5;}/* Critical Risk */#critical_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 1;	grid-row-end: 2;}#critical_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 1;	grid-row-end: 2;}#critical_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 1;	grid-row-end: 2;}#critical_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 1;	grid-row-end: 2;}#high_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 2;	grid-row-end: 3;}#medium_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 3;	grid-row-end: 4;}#low_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 4;	grid-row-end: 5;}#severityDetails{	margin-left: 8%;    margin-top: 30px;    border: 1px solid #d2d2d2;    margin-right: 8%;    float: right;	margin-bottom: 40px;}#severityDetails td{	border: 1px solid #d2d2d2;}#calculationTables{	float: right;    position: relative;}.calculationTablesText{	text-align: left;	font-family: Arial, sans-serif;}#riskScore th{	background-color: lightgray;}#riskScore tr:nth-child(2n) td{	background-color: #efefef;}#riskMatrixSummary{	font-family: Arial, sans-serif;	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	right: 10%;	float:right;}#riskMatrixSummary div{	border: 1px solid black;}#riskMatrixSummaryArea{	float: right;	text-align: center;	margin-right: 10%;}#systemData{	float:right;	margin-right: 30%;    text-align: left;}#dotRiskScoreTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#dotSummaryTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#quantityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}#severityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}.severityResultFalse{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #cc0000; }.severityResultTrue{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #33cca6;}.severityResultNone, .severityResultError{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.severityResultWarning{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	background-color: #ff9933;	color: #000;}.tabContent#riskScore{	text-align: left;}#severityCompliance{	margin-top: 25%;	clear: both;}#complianceStatusFalse{	padding: 5px 10px;    border-radius: 8px;	background-color: #cc0000;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#complianceStatusTrue{	padding: 5px 10px;    border-radius: 8px;	background-color: #33cca6;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#referencesContainer{	display: grid;	grid-template-rows: 280px;    grid-template-columns: repeat(2, 500px);}#referencesContainer div{	text-align: center;	margin-left: auto;	margin-right: auto;}#settingsOverview section{	margin-left: 5%;	margin-right: 5%;}#invalidOS{	display: inline;    padding: 5px 10px;    border-radius: 8px;    font-weight: bold;    margin: auto;    background-color: #777777;}#references p, #summary p, #settingsOverview p{	font-family: Arial, sans-serif;} #foundationData p{	font-family: Arial, sans-serif;}#foundationData section{	margin-left: 5%;	margin-right: 5%;}#contactUsButton{	background-color: #A81A1B;	border-radius: 4px;	padding: 20px;	color: #fff;	box-shadow: 2px 2px rgba(0,0,0,0.5);	display: inline-block;	margin-top: 20px;	text-transform: uppercase;	border-style: none;	cursor: pointer;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(289.548deg); transform: rotate(289.548deg);}.donut-chart.chart .chart-center span:after {content: "80.43 %";}</style><script >"use strict";let AmountOfNonCompliantRules;let AmountOfCompliantRules;let TotalAmountOfRules;let QuantityCompliance;let TotalAmountOfSeverityRules;let AmountOfFailedSeverityRules;let SeverityCompliance;function startConditions(){    /* Default-Value: Display summary always at the beginning */    document.getElementById("summary").style.display = "block";        /* Default-Value: Disable all other tabs at the beginning */    document.getElementById("foundationData").style.display = "none";    document.getElementById("riskScore").style.display = "none";    document.getElementById("references").style.display = "none";    document.getElementById("settingsOverview").style.display = "none";    document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';    document.getElementById("foundationDataBtn").style.backgroundColor = 'transparent';    document.getElementById("riskScoreBtn").style.backgroundColor= 'transparent';    document.getElementById("referenceBtn").style.backgroundColor= 'transparent';    document.getElementById("settingsOverviewBtn").style.backgroundColor= 'transparent';    /* Initialize necessary variables */    AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent;    document.getElementById("AmountOfNonCompliantRules").hidden = true;    AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent;    document.getElementById("AmountOfCompliantRules").hidden = true;    TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent;    document.getElementById("TotalAmountOfRules").hidden = true;    QuantityCompliance = document.getElementById("QuantityCompliance").textContent;    document.getElementById("QuantityCompliance").hidden = true;    TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent;    document.getElementById("TotalAmountOfSeverityRules").hidden = true;    AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent;    document.getElementById("AmountOfFailedSeverityRules").hidden = true;    calcDotPosition();    let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse");    severityComplianceCollapseBtn.addEventListener("click", ()=>{        if(document.getElementById("severityDetails").style.display == "none"){            document.getElementById("severityDetails").style.display = "block";        }        else{            document.getElementById("severityDetails").style.display = "none";        }    })}let buttonNumber;function clickButton(value){    buttonNumber = parseInt(value);    /* Disable all content */    let tabContents = document.getElementsByClassName('tabContent');    for(let i = 0; i < tabContents.length; i++){        tabContents.item(i).style.display = "none";    }    /* Disable all buttons */    let buttons = document.getElementsByClassName('navButton');    for(let i = 0; i < buttons.length; i++){        buttons.item(i).style.backgroundColor= 'transparent';    }    /* Re-Enable fitting content / button */    switch(buttonNumber){        case 1:            document.getElementById("summary").style.display = "block";            document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';        break;        case 2:            document.getElementById("riskScore").style.display = "block";            document.getElementById("riskScoreBtn").style.backgroundColor= '#ff9933';            calcDotPosition();        break;        case 3:            document.getElementById("references").style.display = "block";            document.getElementById("referenceBtn").style.backgroundColor= '#ff9933';        break;        case 4:            document.getElementById("settingsOverview").style.display = "block";            document.getElementById("settingsOverviewBtn").style.backgroundColor= '#ff9933';        break;        case 5:            document.getElementById("foundationData").style.display = "block";            document.getElementById("foundationDataBtn").style.backgroundColor= '#ff9933';        break;    }}/* Calculate the position of the dot inside the risk matrix; Will be calleed, after the user has clicked on Risk Score Button*/function calcDotPosition(){        let dotRiskScoreTab = document.getElementById("dotRiskScoreTab");    let dotSummaryTab = document.getElementById("dotSummaryTab");    QuantityCompliance = parseFloat(QuantityCompliance);    let complianceValueQuantity = 0;    let complianceValueSeverity = 0;    /*low quantity compliance*/    if(80 < QuantityCompliance){        dotRiskScoreTab.style.gridColumnStart = 3;        dotSummaryTab.style.gridColumnStart = 3;        complianceValueQuantity = 1;    }    /*medium quantity compliance*/    else if(65 < QuantityCompliance && QuantityCompliance < 80){        dotRiskScoreTab.style.gridColumnStart = 4;        dotSummaryTab.style.gridColumnStart = 4;        complianceValueQuantity = 2;    }    /*high quantity compliance*/    else if(50 < QuantityCompliance && QuantityCompliance < 65){        dotRiskScoreTab.style.gridColumnStart = 5;        dotSummaryTab.style.gridColumnStart = 5;        complianceValueQuantity = 3;    }    /*critical quantity compliance*/    else{        dotRiskScoreTab.style.gridColumnStart = 6;        dotSummaryTab.style.gridColumnStart = 6;        complianceValueQuantity = 4;    }    SeverityCompliance = parseInt(AmountOfFailedSeverityRules);    /*low severity compliance*/    if(SeverityCompliance == 0){        dotRiskScoreTab.style.gridRowStart = 4;        dotSummaryTab.style.gridRowStart = 4;        complianceValueSeverity = 1;                document.getElementById("complianceStatus").style.padding = "5px 10px";        document.getElementById("complianceStatus").style.borderRadius = "8px";        document.getElementById("complianceStatus").style.backgroundColor = "#33cca6";        document.getElementById("complianceStatus").style.color = "#fff";        document.getElementById("complianceStatus").style.marginLeft = "6%";        document.getElementById("complianceStatus").style.fontWeight = "bold";        document.getElementById("complianceStatus").style.display = "inline";    }    /*critical severity compliance*/    else{        dotRiskScoreTab.style.gridRowStart = 1;        dotSummaryTab.style.gridRowStart = 1;        complianceValueSeverity = 4;        document.getElementById("complianceStatus").style.padding = "5px 10px";        document.getElementById("complianceStatus").style.borderRadius = "8px";        document.getElementById("complianceStatus").style.backgroundColor = "#cc0000";        document.getElementById("complianceStatus").style.color = "#fff";        document.getElementById("complianceStatus").style.marginLeft = "6%";        document.getElementById("complianceStatus").style.fontWeight = "bold";        document.getElementById("complianceStatus").style.display = "inline";    }    let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity);        let summary = "Current Risk Score on tested System: ";    let riskResult = document.createElement("p");    riskResult.style.display = "contents";    if(totalComplianceValue == 1){        riskResult.innerText = "Low";        riskResult.style.backgroundColor = "#548dd6";    }    else if(totalComplianceValue == 2){        riskResult.innerText = "Medium";        riskResult.style.backgroundColor = "#ffc000";    }    else if(totalComplianceValue == 3){        riskResult.innerText = "High";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "#cc0000";    }    else{        riskResult.innerText = "Critical";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "purple";    }    riskResult.style.display = "inline";    riskResult.style.padding = "5px 10px";    riskResult.style.borderRadius = "8px";    riskResult.style.fontWeight = "bold";    riskResult.style.margin = "auto";    let copyRiskResult = riskResult.cloneNode();    copyRiskResult.innerText  = riskResult.innerText;    document.getElementById("CurrentRiskScore").textContent = summary;    document.getElementById("CurrentRiskScore").appendChild(riskResult);    document.getElementById("CurrentRiskScoreRS").textContent = summary;    document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);}</script></head><body onload="startConditions()"><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows 10 Report</h1></div><div class="main content"><div class="host-information"><div id="AmountOfNonCompliantRules">521</div><div id="AmountOfCompliantRules">2157</div><div id="TotalAmountOfRules">2682</div><div id="QuantityCompliance">80.43</div><div id="TotalAmountOfSeverityRules">31</div><div id="AmountOfFailedSeverityRules">0</div><div id="navigationButtons"><button onclick="clickButton('1')" class="navButton" type="button" id="summaryBtn">Benchmark Compliance</button><button onclick="clickButton('5')" class="navButton" type="button" id="foundationDataBtn">Security Base Data</button><button onclick="clickButton('2')" class="navButton" type="button" id="riskScoreBtn">Risk Score</button><button onclick="clickButton('4')" class="navButton" type="button" id="settingsOverviewBtn">Hardening Settings</button><button onclick="clickButton('3')" class="navButton" type="button" id="referenceBtn">About Us</button></div><div class="tabContent" id="settingsOverview"><h1 id="toc">Hardening Settings</h1><h2 >Table Of Contents</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#CIS-Benchmarks">CIS Benchmarks</a><ul ><li ><a href="#CIS-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#CIS-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#CIS-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#CIS-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#DISA-Recommendations">DISA Recommendations</a><ul ><li ><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#DISA-RecommendationsUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#DISA-RecommendationsAccount-Policies">Account Policies</a></li><li ><a href="#DISA-RecommendationsWindows-Features">Windows Features</a></li><li ><a href="#DISA-RecommendationsFile-System-Permissions">File System Permissions</a></li><li ><a href="#DISA-RecommendationsRegistry-Permissions">Registry Permissions</a></li></ul></li><li ><a href="#CyberGovAu-Benchmarks">CyberGovAu Benchmarks</a><ul ><li ><a href="#CyberGovAu-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#CyberGovAu-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#CyberGovAu-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#CyberGovAu-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#Microsoft-Benchmarks">Microsoft Benchmarks</a><ul ><li ><a href="#Microsoft-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#Microsoft-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#Microsoft-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-Logging">BSI Benchmarks SiSyPHuS Logging</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HD">BSI Benchmarks SiSyPHuS HD</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDSecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-ND">BSI Benchmarks SiSyPHuS ND</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDSecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NE">BSI Benchmarks SiSyPHuS NE</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NESecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI">BSI Benchmarks SiSyPHus-BSI</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHus--BSIRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-Bundespolizei">BSI Benchmarks SiSyPHus-BSI Bundespolizei</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><h2 >Benchmark Details</h2><section ><h1 id="CIS-Benchmarks"><span class="failed">CIS Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the CIS Benchmark results.</p><section ><h1 id="CIS-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.6</td><td >(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.1.2</td><td >(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.1.4</td><td >(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.2.1</td><td >(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.2.2</td><td >(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.4.1</td><td >(L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.4.2</td><td >(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.1</td><td >(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.2</td><td >(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.3</td><td >(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.4</td><td >(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.5</td><td >(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.6</td><td >(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.1</td><td >(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.2</td><td >(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.3</td><td >(BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.4</td><td >(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.5</td><td >(L1) Configure 'Interactive logon: Message text for users attempting to log on'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.6</td><td >(L1) Configure 'Interactive logon: Message title for users attempting to log on'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.7</td><td >(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.8</td><td >(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.9</td><td >(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.1</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.2</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.3</td><td >(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.1</td><td >(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.2</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.3</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.4</td><td >(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.5</td><td >(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.1</td><td >(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.2</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.3</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.4</td><td >(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.5</td><td >(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.6</td><td >(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.7</td><td >(L1) Ensure 'Network access: Remotely accessible registry paths' is configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.8</td><td >(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths' is configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.9</td><td >(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.10</td><td >(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.11</td><td >(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.12</td><td >(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.1</td><td >(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.2</td><td >(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.3</td><td >(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.7</td><td >(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.8</td><td >(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.9</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.10</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.14.1</td><td >(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.1</td><td >(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.2</td><td >(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.1</td><td >(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.2</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.3</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.4</td><td >(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.5</td><td >(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.6</td><td >(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.7</td><td >(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.8</td><td >(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1</td><td >(L2) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.2</td><td >(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.3</td><td >(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.4</td><td >(L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5</td><td >(L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.6</td><td >(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.7</td><td >(L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.8</td><td >(L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.9</td><td >(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.10</td><td >(L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.11</td><td >(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.12</td><td >(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.13</td><td >(L1) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.14</td><td >(L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.15</td><td >(L2) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.16</td><td >(L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.17</td><td >(L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.18</td><td >(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled'</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.19</td><td >(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.20</td><td >(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.21</td><td >(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.22</td><td >(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.23</td><td >(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.24</td><td >(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.25</td><td >(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.26</td><td >(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.27</td><td >(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.28</td><td >(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.29</td><td >(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.30</td><td >(L1) Ensure 'Special Administration Console Helper (sacsvr)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.31</td><td >(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.32</td><td >(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.33</td><td >(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.34</td><td >(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.35</td><td >(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.36</td><td >(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.37</td><td >(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.38</td><td >(L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.39</td><td >(L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.40</td><td >(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.41</td><td >(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.42</td><td >(L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.43</td><td >(L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.44</td><td >(L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.45</td><td >(L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.1</td><td >(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.2</td><td >(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.3</td><td >(L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.4</td><td >(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.5</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.1.6</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.1</td><td >(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.2</td><td >(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.3</td><td >(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.4</td><td >(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.5</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.2.6</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.7</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.8</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.1</td><td >(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.2</td><td >(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.3</td><td >(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.4</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.5</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.6</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.7</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.8</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.9</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9.3.10</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.1.1</td><td >(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.1.2</td><td >(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.2.2</td><td >(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.1.3</td><td >(L2) Ensure 'Allow Online Tips' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.2</td><td >(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.3</td><td >(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.4</td><td >(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.5</td><td >(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.2.6</td><td >(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.1</td><td >(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.2</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.4</td><td >(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.5</td><td >(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled' (Automated)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.6</td><td >(L1) Set 'NetBIOS node type' to 'P-node' (Ensure NetBT Parameter 'NodeType' is set to '0x2 (2)')</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.7</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.1</td><td >(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.2</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.3</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.4</td><td >(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.5</td><td >(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.6</td><td >(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.7</td><td >(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.8</td><td >(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.9</td><td >(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.10</td><td >(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.11</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.12</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.4.13</td><td >(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.4.1</td><td >(L1) Ensure 'Configure DNS over HTTPS (DoH) name resolution'  is set to 'Enabled: Allow DoH' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.4.2</td><td >(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.5.1</td><td >(L2) Ensure 'Enable Font Providers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.8.1</td><td >(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 A</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Domain)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 B</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Public)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 C</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO),</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.1 D</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (Private)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 A</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnDomain)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 B</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnPublicNet)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 C</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.9.2 D</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (ProhibitRspndrOnPrivateNet)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.10.2</td><td >(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.11.2</td><td >(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.11.3</td><td >(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.11.4</td><td >(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.14.1 A</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.14.1 B</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.19.2.1</td><td >(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.20.1</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.20.2</td><td >(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.21.1</td><td >(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.21.2</td><td >(L1) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.5.23.2.1</td><td >(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.6.1</td><td >(L1) Ensure 'Allow Print Spooler to accept client connections' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.7.1.1</td><td >(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.3.1</td><td >(L1) Ensure 'Include command line in process creation events' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.4.1</td><td >(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.4.2</td><td >(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.1</td><td >(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.2</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot and DMA Protection'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.3</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.4</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.5</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.5.6</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.1</td><td >(BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.7.1.2</td><td >(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.3</td><td >(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.7.1.4</td><td >(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.5</td><td >(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.1.6</td><td >(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.7.2</td><td >(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled' (Automated)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.14.1</td><td >(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.2</td><td >(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.3</td><td >(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.4</td><td >(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.21.5</td><td >(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.1</td><td >(L2) Ensure 'Turn off access to the Store' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.2</td><td >(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.3</td><td >(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.4</td><td >(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.5</td><td >(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.6</td><td >(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.7</td><td >(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.8</td><td >(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.9</td><td >(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.10</td><td >(L2) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.11</td><td >(L2) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.12</td><td >(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.13</td><td >(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.14 A</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.22.1.14 B</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'</td><td >Registry value is '0'. Expected: x == 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.25.1 A</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.25.1 B</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.26.1</td><td >(BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.27.1</td><td >(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.1</td><td >(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.2</td><td >(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.3</td><td >(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.4</td><td >(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.5</td><td >(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.6</td><td >(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.28.7</td><td >(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.31.1</td><td >(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.31.2</td><td >(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.1</td><td >(L1) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.2</td><td >(L1) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.3</td><td >(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.4</td><td >(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.5</td><td >(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.34.6.6</td><td >(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.36.1</td><td >(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.36.2</td><td >(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.37.1</td><td >(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.37.2</td><td >(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.48.5.1</td><td >(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.48.11.1</td><td >(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.50.1</td><td >(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.53.1.1</td><td >(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.8.53.1.2</td><td >(L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.4.1</td><td >(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.4.2</td><td >(L1) Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.5.1</td><td >(L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.6.1</td><td >(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.6.2</td><td >(L2) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.8.1</td><td >(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.8.2</td><td >(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.8.3</td><td >(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.10.1.1</td><td >(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.1</td><td >(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.2</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.3</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.4</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.5</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.6</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.7</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.8</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.9</td><td >(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.10</td><td >(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.11</td><td >(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.12</td><td >(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.1.13</td><td >(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.1</td><td >(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.2</td><td >(BL) Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.3</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.4</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.5</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.6</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.7</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.8</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.9</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.10</td><td >(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.11</td><td >(BL) Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.12</td><td >(BL) Ensure 'Configure use of passwords for operating system drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.13</td><td >(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.2.14</td><td >(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.1</td><td >(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.2</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.11.3.3</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.4</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.11.3.5</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.6</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.7</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.8</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.9</td><td >(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.10</td><td >(BL) Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.11</td><td >(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.11.3.12</td><td >(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.13</td><td >(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.14</td><td >(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.3.15</td><td >(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.11.4</td><td >(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.12.1</td><td >(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.14.1</td><td >(L1) Ensure 'Turn off cloud consumer account state content' is  set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.14.2</td><td >(L2) Ensure 'Turn off cloud optimized content' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.14.3</td><td >(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.15.1</td><td >(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.16.1</td><td >(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.16.2</td><td >(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.16.3</td><td >(L1) Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.1</td><td >(L1) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only]' or 'Enabled: 1 - Basic'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.2</td><td >(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.3</td><td >(L1) Ensure 'Disable OneSettings Downloads' is enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.4</td><td >(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.5</td><td >(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.6</td><td >(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.7</td><td >(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.17.8</td><td >(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.18.1</td><td >(L1) Ensure 'Download Mode' is NOT set to 'Enabled: Internet'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.1.1</td><td >(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.1.2</td><td >(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.2.1</td><td >(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.2.2</td><td >(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.3.1</td><td >(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.3.2</td><td >(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.4.1</td><td >(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.27.4.2</td><td >(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.31.2</td><td >(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.31.3</td><td >(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.31.4</td><td >(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.36.1</td><td >(L1) Ensure 'Prevent the computer from joining a homegroup' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.41.1</td><td >(L2) Ensure 'Turn off location' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.45.1</td><td >(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.46.1</td><td >(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.4.1</td><td >(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.4.2</td><td >(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.1</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.3.1</td><td >(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.6.1</td><td >(L2) Ensure 'Enable file hash computation feature' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.1</td><td >(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.3</td><td >(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.9.4</td><td >(L1) Ensure 'Turn on script scanning' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.11.1</td><td >(L2) Ensure 'Configure Watson events' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.12.1</td><td >(L1) Ensure 'Scan removable drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.12.2</td><td >(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.15</td><td >(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.16</td><td >(L1) Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.1</td><td >(NG) Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.2</td><td >(NG) Ensure 'Allow camera and microphone access in Windows Defender Application Guard' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.3</td><td >(NG) Ensure 'Allow data persistence for Windows Defender Application Guard' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.4</td><td >(NG) Ensure 'Allow files to download and save to the host operating system from Windows Defender Application Guard' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.5</td><td >(NG) Ensure 'Configure Windows Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.48.6</td><td >(NG) Ensure 'Turn on Windows Defender Application Guard in Enterprise Mode' is set to 'Enabled: 1'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.57.1</td><td >(L2) Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.58.1</td><td >(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.64.1</td><td >(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.2.2</td><td >(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.2.1</td><td >(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.1</td><td >(L2) Ensure 'Allow UI Automation redirection' is set to  'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.2</td><td >(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.3</td><td >(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.4</td><td >(L2) Ensure 'Do not allow location redirection' is set to  'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.5</td><td >(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.3.6</td><td >(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.1</td><td >(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.2</td><td >(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.3</td><td >(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.4</td><td >(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.9.5</td><td >(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.65.3.11.1</td><td >(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.66.1</td><td >(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.2</td><td >(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.3</td><td >(L1) Ensure 'Allow Cortana' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.4</td><td >(L1) Ensure 'Allow Cortana above lock screen' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.5</td><td >(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.6</td><td >(L1) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.72.1</td><td >(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.1</td><td >(L2) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.75.2</td><td >(L1) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.3</td><td >(L1) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.4</td><td >(L1) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.75.5</td><td >(L2) Ensure 'Turn off the Store application' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.81.1</td><td >(L1) Ensure 'Allow widgets' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.1.1 A</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.1.1 B</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.2.1</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.85.2.2</td><td >(L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled' (PreventOverride).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.87.1</td><td >(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.89.1</td><td >(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.89.2</td><td >(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled' but not 'Enabled: On'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.90.1</td><td >(L1) Ensure 'Allow user control over installs' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.90.2</td><td >(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (LocalMachine)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.90.3</td><td >(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.91.1</td><td >(L1) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.100.1</td><td >(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.100.2</td><td >(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.1.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.1.2</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.1.3</td><td >(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.2.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.2.2</td><td >(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.3</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.102.2.4</td><td >(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.103.1</td><td >(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.104.1</td><td >(L1) Ensure 'Allow clipboard sharing with Windows Sandbox' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.104.2</td><td >(L1) Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.105.2.1</td><td >(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.1.1</td><td >(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.2.1</td><td >(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.2.2</td><td >(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.2.3</td><td >(L1) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.1</td><td >(L1) Ensure 'Manage preview builds' is set to 'Disabled'  (Automated)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.2 A</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.2 B</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days' (DeferFeatureUpdatesPeriodInDays)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.3 A</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days'. (DeferQualityUpdates)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.108.4.3 B</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >19.7.8.5</td><td >(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >2.2.1</td><td >(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.2</td><td >(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.3</td><td >(L1) Ensure 'Act as part of the operating system' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.4</td><td >(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.5</td><td >(L1) Ensure 'Allow log on locally' is set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.6</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.7</td><td >(L1) Ensure 'Back up files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.8</td><td >(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.9</td><td >(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.10</td><td >(L1) Ensure 'Create a pagefile' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.11</td><td >(L1) Ensure 'Create a token object' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.12</td><td >(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.13</td><td >(L1) Ensure 'Create permanent shared objects' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.14 A</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' [Hyper-V-Feature installed]</td><td >The user 'SeCreateSymbolicLinkPrivilege' setting does not contain the following users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.14 B</td><td >(L1) Configure 'Create symbolic links' (when Hyper-V feature is NOT installed)</td><td >Hyper-V installed. Please refer to the corresponding benchmark when Hyper-V is installed.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >2.2.15</td><td >(L1) Ensure 'Debug programs' is set to 'Administrators'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.16</td><td >(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.17</td><td >(L1) Ensure 'Deny log on as a batch job' to include 'Guests'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.18</td><td >(L1) Ensure 'Deny log on as a service' to include 'Guests'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.19</td><td >(L1) Ensure 'Deny log on locally' to include 'Guests'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.20</td><td >(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.21</td><td >(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.22</td><td >(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.23</td><td >(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' [ADFS-ROLE NOT installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.24</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' [IIS Role NOT installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.25</td><td >(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.26</td><td >(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.27</td><td >(L1) Ensure 'Lock pages in memory' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.28</td><td >(L2) Ensure 'Log on as a batch job' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.29</td><td >(L2) Configure 'Log on as a service' [Hyper-V-Feature NOT installed]</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.30</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.31</td><td >(L1) Ensure 'Modify an object label' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.32</td><td >(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.33</td><td >(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.34</td><td >(L1) Ensure 'Profile single process' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.35</td><td >(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.36</td><td >(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.37</td><td >(L1) Ensure 'Restore files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Shut down the system' is set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.39</td><td >(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.1</td><td >(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.2</td><td >(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.3</td><td >(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.4</td><td >(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.5</td><td >(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.1</td><td >(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.2</td><td >(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.3</td><td >(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >17.1.1</td><td >(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.1</td><td >(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.2</td><td >(L1) Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.3</td><td >(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.3.1</td><td >(L1) Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.3.2</td><td >(L1) Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.1</td><td >(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.2</td><td >(L1) Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.3</td><td >(L1) Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.4</td><td >(L1) Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.5</td><td >(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.6</td><td >(L1) Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.1</td><td >(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.2</td><td >(L1) Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.3</td><td >(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.4</td><td >(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.1</td><td >(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.2</td><td >(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.3</td><td >(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.4</td><td >(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.5</td><td >(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.8.1</td><td >(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.1</td><td >(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.2</td><td >(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.3</td><td >(L1) Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.4</td><td >(L1) Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.5</td><td >(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the DISA STIG results.</p><section ><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-CC-000310</td><td >Users must be prevented from changing installation options.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000315</td><td >The Windows Installer Always install with elevated privileges must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000320</td><td >Users must be notified if a web-based program attempts to install software.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000325</td><td >Automatically signing in the last interactive user after a system-initiated restart must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000330</td><td >The Windows Remote Management (WinRM) client must not use Basic authentication.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000335</td><td >The Windows Remote Management (WinRM) client must not allow unencrypted traffic.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000340</td><td >The Windows Remote Management (WinRM) client must not use Digest authentication.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000345</td><td >The Windows Remote Management (WinRM) service must not use Basic authentication.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000350</td><td >The Windows Remote Management (WinRM) service must not allow unencrypted traffic.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000355</td><td >The Windows Remote Management (WinRM) service must not store RunAs credentials.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000500</td><td >The Application event log size must be configured to 32768 KB or greater.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000505</td><td >The Security event log size must be configured to 1024000 KB or greater.</td><td >Registry value is '196608'. Expected: 1024000</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-AU-000510</td><td >The System event log size must be configured to 32768 KB or greater.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000005</td><td >Camera access from the lock screen must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000010</td><td >The display of slide shows on the lock screen must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000020</td><td >IPv6 source routing must be configured to highest protection.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000025</td><td >The system must be configured to prevent IP source routing.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000030</td><td >The system must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF) generated routes.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000035</td><td >The system must be configured to ignore NetBIOS name release requests except from WINS servers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000040</td><td >Insecure logons to an SMB server must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000055</td><td >Simultaneous connections to the Internet or a Windows domain must be limited.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000060</td><td >Connections to non-domain networks when connected to a domain authenticated network must be blocked.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000065</td><td >Wi-Fi Sense must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000037</td><td >Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000085</td><td >Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad.</td><td >Registry value is '3'. Expected: 8</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000090</td><td >Group Policy objects must be reprocessed even if they have not changed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000100</td><td >Downloading print driver packages over HTTP must be prevented.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000015</td><td >Local accounts with blank passwords must be restricted to prevent access from the network.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000105</td><td >Web publishing and online ordering wizards must be prevented from downloading a list of providers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000110</td><td >Printing over HTTP must be prevented.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000115</td><td >Systems must at least attempt device authentication using certificates.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000120</td><td >The network selection user interface (UI) must not be displayed on the logon screen.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000130</td><td >Local users on domain-joined computers must not be enumerated.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000030</td><td >Audit policy using subcategories must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000035</td><td >Outgoing secure channel traffic must be encrypted or signed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000040</td><td >Outgoing secure channel traffic must be encrypted when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000145</td><td >Users must be prompted for a password on resume from sleep (on battery).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000045</td><td >Outgoing secure channel traffic must be signed when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000150</td><td >The user must be prompted for a password on resume from sleep (plugged in).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000155</td><td >Solicited Remote Assistance must not be allowed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000050</td><td >The computer account password must not be prevented from being reset.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000165</td><td >Unauthenticated RPC clients must be restricted from connecting to the RPC server.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000170</td><td >The setting to allow Microsoft accounts to be optional for modern style apps must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000175</td><td >The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000060</td><td >The system must be configured to require a strong session key.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000180</td><td >Autoplay must be turned off for non-volume devices.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000070</td><td >The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000185</td><td >The default autorun behavior must be configured to prevent autorun commands.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000190</td><td >Autoplay must be disabled for all drives.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000195</td><td >Enhanced anti-spoofing for facial recognition must be enabled on Window 10.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000200</td><td >Administrator accounts must not be enumerated during elevation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000215</td><td >Explorer Data Execution Prevention must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000220</td><td >Turning off File Explorer heap termination on corruption must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000225</td><td >File Explorer shell protocol must run in protected mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000095</td><td >The Smart Card removal option must be configured to Force Logoff or Lock Workstation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000230</td><td >Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for malicious websites in Microsoft Edge.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000235</td><td >Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for unverified files in Microsoft Edge.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000100</td><td >The Windows SMB client must be configured to always perform SMB packet signing.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000240</td><td >InPrivate browsing in Microsoft Edge must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000105</td><td >The Windows SMB client must be enabled to perform SMB packet signing when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000110</td><td >Unencrypted passwords must not be sent to third-party SMB Servers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000250</td><td >The Windows Defender SmartScreen filter for Microsoft Edge must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000255</td><td >The use of a hardware security device with Windows Hello for Business must be enabled.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000120</td><td >The Windows SMB server must be configured to always perform SMB packet signing.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000260</td><td >Windows 10 must be configured to require a minimum pin length of six characters or greater.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000125</td><td >The Windows SMB server must perform SMB packet signing when possible.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000270</td><td >Passwords must not be saved in the Remote Desktop Client.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000275</td><td >Local drives must be prevented from sharing with Remote Desktop Session Hosts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000280</td><td >Remote Desktop Services must always prompt a client for passwords upon connection.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000285</td><td >The Remote Desktop Session Host must require secure RPC communications.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000290</td><td >Remote Desktop Services must be configured with the client connection encryption set to the required level.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000295</td><td >Attachments must be prevented from being downloaded from RSS feeds.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000145</td><td >Anonymous enumeration of SAM accounts must not be allowed.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000300</td><td >Basic authentication for RSS feeds over HTTP must not be used.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000150</td><td >Anonymous enumeration of shares must be restricted.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000305</td><td >Indexing of encrypted files must be turned off.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000160</td><td >The system must be configured to prevent anonymous users from having the same rights as the Everyone group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000165</td><td >Anonymous access to Named Pipes and Shares must be restricted.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000175</td><td >Services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000180</td><td >NTLM must be prevented from falling back to a Null session.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000185</td><td >PKU2U authentication using online identities must be prevented.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000190</td><td >Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000195</td><td >The system must be configured to prevent the storage of the LAN Manager hash of passwords.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000205</td><td >The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000210</td><td >The system must be configured to the required LDAP client signing level.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000215</td><td >The system must be configured to meet the minimum session security requirement for NTLM SSP based clients.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000220</td><td >The system must be configured to meet the minimum session security requirement for NTLM SSP based servers.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000230</td><td >The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000240</td><td >The default permissions of global system objects must be increased.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000245</td><td >User Account Control approval mode for the built-in Administrator must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000250</td><td >User Account Control must, at minimum, prompt administrators for consent on the secure desktop.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000255</td><td >User Account Control must automatically deny elevation requests for standard users.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-SO-000260</td><td >User Account Control must be configured to detect application installations and prompt for elevation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000265</td><td >User Account Control must only elevate UIAccess applications that are installed in secure locations.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000270</td><td >User Account Control must run all administrators in Admin Approval Mode, enabling UAC.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-SO-000275</td><td >User Account Control must virtualize file and registry write failures to per-user locations.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UC-000015</td><td >Toast notifications to the lock screen must be turned off.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UC-000020</td><td >Zone information must be preserved when saving attachments.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000066</td><td >Command line data must be included in process creation events.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000326</td><td >PowerShell script block logging must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000150</td><td >Structured Exception Handling Overwrite Protection (SEHOP) must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000038</td><td >WDigest Authentication must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000044</td><td >Internet connection sharing must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000197</td><td >Microsoft consumer experiences must be turned off.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000228</td><td >Windows 10 must be configured to prevent Microsoft Edge browser data from being cleared on exit.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000252</td><td >Windows 10 must be configured to disable Windows Game Recording and Broadcasting.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000068</td><td >Windows 10 must be configured to enable Remote host allows delegation of non-exportable credentials.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000165</td><td >The Server Message Block (SMB) v1 protocol must be disabled on the SMB server.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UC-000005</td><td >The use of personal accounts for OneDrive synchronization must be disabled.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-CC-000238</td><td >Windows 10 must be configured to prevent certificate error overrides in Microsoft Edge.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-CC-000204</td><td >If Enhanced diagnostic data is enabled it must be limited to the minimum required to support Windows Analytics.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-UR-000005</td><td >The Access Credential Manager as a trusted caller user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000010</td><td >The Access this computer from the network user right must only be assigned to the Administrators and Remote Desktop Users groups.</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000015</td><td >The Act as part of the operating system user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000025</td><td >The Allow log on locally user right must only be assigned to the Administrators and Users groups.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000030</td><td >The Back up files and directories user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000035</td><td >The Change the system time user right must only be assigned to Administrators and Local Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000040</td><td >The Create a pagefile user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000045</td><td >The Create a token object user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000050</td><td >The Create global objects user right must only be assigned to Administrators, Service, Local Service, and Network Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000055</td><td >The Create permanent shared objects user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000065</td><td >The Debug programs user right must only be assigned to the Administrators group.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000070 MW</td><td >The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000070 SW</td><td >The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >Not applicable. This audit applies only to StandaloneWorkstation.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >WN10-UR-000075 MW</td><td >The Deny log on as a batch job user right on domain-joined workstations must be configured to prevent access from highly privileged domain accounts.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000080 MW</td><td >The Deny log on as a service user right on domain-joined workstations must be configured to prevent access from highly privileged domain accounts.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000085 MW</td><td >The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000085 SW</td><td >The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</td><td >Not applicable. This audit applies only to StandaloneWorkstation.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >WN10-UR-000090 MW</td><td >The Deny log on through Remote Desktop Services user right on workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: FB-PRO\Enterprise Admins, FB-PRO\Domain Admins</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000090 SW</td><td >The Deny log on through Remote Desktop Services user right on workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td><td >Not applicable. This audit applies only to StandaloneWorkstation.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >WN10-UR-000100</td><td >The Force shutdown from a remote system user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000105</td><td >The Generate security audits user right must only be assigned to Local Service and Network Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000110</td><td >The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000115</td><td >The Increase scheduling priority user right must only be assigned to the Administrators group.</td><td >The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: Window Manager\Window Manager Group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-UR-000120</td><td >The Load and unload device drivers user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000125</td><td >The Lock pages in memory user right must not be assigned to any groups or accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000130</td><td >The Manage auditing and security log user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000140</td><td >The Modify firmware environment values user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000145</td><td >The Perform volume maintenance tasks user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000150</td><td >The Profile single process user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000160</td><td >The Restore files and directories user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-UR-000165</td><td >The Take ownership of files or other objects user right must only be assigned to the Administrators group.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-AC-000005</td><td >Windows 10 account lockout duration must be configured to 15 minutes or greater.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000010</td><td >The number of allowed bad logon attempts must be configured to 3 or less.</td><td >'LockoutBadCount' currently set to: 5. Expected: x <= 3 and x != 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-AC-000015</td><td >The period of time before the bad logon counter is reset must be configured to 15 minutes.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000020</td><td >The password history must be configured to 24 passwords remembered.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000025</td><td >The maximum password age must be configured to 60 days or less.</td><td >'MaximumPasswordAge' currently set to: 120. Expected: x <= 60</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-AC-000030</td><td >The minimum password age must be configured to at least 1 day.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000035</td><td >Passwords must, at a minimum, be 14 characters.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000040</td><td >The built-in Microsoft password complexity filter must be enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AC-000045</td><td >Reversible password encryption must be disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsWindows-Features"><span class="passed">Windows Features</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-00-000100</td><td >Internet Information System (IIS) or its subcomponents must not be installed on a workstation.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000110</td><td >Simple TCP/IP Services must not be installed on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000115</td><td >The Telnet Client must not be installed on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-00-000120</td><td >The TFTP Client must not be installed on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsFile-System-Permissions"><span class="passed">File System Permissions</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-AU-000515</td><td >Permissions for the Application event log must prevent access by non-privileged accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000520</td><td >Permissions for the Security event log must prevent access by non-privileged accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-AU-000525</td><td >Permissions for the System event log must prevent access by non-privileged accounts.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="DISA-RecommendationsRegistry-Permissions"><span class="failed">Registry Permissions</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >WN10-RG-000005 A</td><td >Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >WN10-RG-000005 B</td><td >Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td><td >Unexpected 'S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681' with access 'ReadKey'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >WN10-RG-000005 C</td><td >Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td><td >Unexpected 'S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681' with access 'ReadKey'</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section ><h1 id="CyberGovAu-Benchmarks"><span class="failed">CyberGovAu Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the CyberGovAu Benchmark results.</p><section ><h1 id="CyberGovAu-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.01</td><td >Ensure 'Deploy Windows Defender Application Control' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.02.1</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.02.2</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.1</td><td >Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.2</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.3</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.4</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.5</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.6</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.7</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.8</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.9</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Block executable files from running unless they meet a prevalence, age, or trusted list criterion).</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.03.10</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware).</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.03.11</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.12</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block process creations originating from PSExec and WMI commands)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.03.13</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.14</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.15</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.03.16</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.04</td><td >Ensure 'WDigest Authentication' is set to 'Disabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.05.1</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.05.2</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.05.3</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.06.1</td><td >Ensure 'Configure allowed applications' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.06.2</td><td >Ensure 'Configure allowed applications' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.07.1</td><td >Ensure 'Configure Controlled folder access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.07.2</td><td >Ensure 'Configure Controlled folder access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.08.1</td><td >Ensure 'Configure protected folders' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.08.2</td><td >Ensure 'Configure protected folders' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.09</td><td >Ensure 'Do not display network selection UI' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.10</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.11</td><td >Ensure 'Do not display the password reveal button' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.12</td><td >Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.13</td><td >Ensure 'Require trusted path for credential entry' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.14</td><td >Ensure 'Prevent the use of security questions for local accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.15</td><td >Ensure 'Disable or enable software Secure Attention Sequence' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.16</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.17</td><td >Ensure 'Require Ctrl-Alt-Del' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.18.1</td><td >Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled'</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.19.1</td><td >Ensure 'Use a common set of exploit protection settings' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.20</td><td >Ensure 'Prevent users from modifying settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.21</td><td >Ensure 'Turn off Data Execution Prevention' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.22</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.23</td><td >Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.24</td><td >Ensure 'Allow Adobe Flash' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.25</td><td >Ensure 'Allow Developer Tools' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.27</td><td >Ensure 'Configure Password Manager' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.28</td><td >Ensure 'Configure Pop-up Blocker' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.30</td><td >Ensure 'Prevent access to the about:flags page in Microsoft Edge' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.31</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.34</td><td >Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.36</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.37</td><td >Ensure 'Allow Automatic Updates immediate installation' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.38.1</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.38.2</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.38.3</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.38.4</td><td >Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.39</td><td >Ensure 'Do not include drivers with Windows Updates' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.40</td><td >Ensure 'Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.41</td><td >Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.42</td><td >Ensure 'Remove access to use all Windows Update features' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.43</td><td >Ensure 'Turn on recommended updates via Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.44.1</td><td >Ensure 'Specify intranet Microsoft update service location' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.44.2</td><td >Ensure 'Specify intranet Microsoft update service location' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.45</td><td >Ensure 'Turn off picture password sign-in' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.46</td><td >Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.47</td><td >Ensure 'Maximum configurable password age' is set to '365 days'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.48</td><td >Ensure 'Minimum password length' is set to '14 characters'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.49</td><td >Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.50</td><td >Ensure 'Standard User Lockout Duration' is set to '0'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.51</td><td >Ensure 'Standard User Individual Lockout Threshold' is set to '5'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.52</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.53</td><td >Ensure 'Turn off Microsoft Defender Antivirus' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.54</td><td >Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.55</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.56.2</td><td >Ensure 'Join Microsoft MAPS' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.57</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Enabled'</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.58</td><td >Ensure 'Configure extended cloud check' is set to 'Enabled' and set to '50'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.59</td><td >Ensure 'Select cloud protection level' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.60</td><td >Ensure 'Configure removal of items from Quarantine folder' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.61</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.63</td><td >Ensure 'Turn on behavior monitoring' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.64</td><td >Ensure 'Turn on process scanning whenever real-time protection is enabled' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.65</td><td >Ensure 'Allow users to pause scan' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.66</td><td >Ensure 'Check for the latest virus and spyware definitions before running a scheduled scan' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.67</td><td >Ensure 'Scan archive files' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.68</td><td >Ensure 'Scan packed executables' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.69</td><td >Ensure 'Scan removable drives' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.70</td><td >Ensure 'Turn on e-mail scanning' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.71</td><td >Ensure 'Turn on heuristics' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.72</td><td >Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.73</td><td >Ensure 'Hide mechanisms to remove zone information' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.74</td><td >Ensure 'Include command line in process creation events' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.75</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '65536'</td><td >Registry value is '32768'. Expected: 65536</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.76</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '2097152'</td><td >Registry value is '196608'. Expected: 2097152</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.77</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.78</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.79</td><td >Ensure 'Turn off Autoplay' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.80</td><td >Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.81</td><td >Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.82</td><td >Ensure 'Route all traffic through the internal network' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.83</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.84</td><td >Ensure 'Remove CD Burning features' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.85</td><td >Ensure 'Prevent access to the command prompt' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.1</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.2</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.3</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.86.4</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.87.1</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.87.2</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.87.3</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.88</td><td >Ensure 'All Removable Storage classes: Deny all access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.89</td><td >Ensure 'CD and DVD: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.90</td><td >Ensure 'CD and DVD: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.91</td><td >Ensure 'Custom Classes: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.92</td><td >Ensure 'Custom Classes: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.93</td><td >Ensure 'Floppy Drives: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.94</td><td >Ensure 'Floppy Drives: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.95</td><td >Ensure 'Floppy Drives: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.96</td><td >Ensure 'Removable Disks: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.97</td><td >Ensure 'Removable Disks: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.98</td><td >Ensure 'Removable Disks: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.99</td><td >Ensure 'Tape Drives: Deny execute access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.100</td><td >Ensure 'Tape Drives: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.101</td><td >Ensure 'Tape Drives: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.102</td><td >Ensure 'WPD Devices: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.103</td><td >Ensure 'WPD Devices: Deny write access' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.104</td><td >Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.105</td><td >Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.106.1</td><td >Ensure 'Hardened UNC Paths' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.106.2</td><td >Ensure 'Hardened UNC Paths' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.107</td><td >Ensure 'Configure registry policy processing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.108</td><td >Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.109</td><td >Ensure 'Turn off Local Group Policy Objects processing' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.110.1</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.110.2</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.110.3</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.111</td><td >Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.1</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.2</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.3</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.4</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.112.5</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.112.6</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.1</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.2</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.3</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.113.4</td><td >Ensure 'Configure use of passwords for fixed data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.114</td><td >Ensure 'Deny write access to fixed drives not protected by BitLocker' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.115</td><td >Ensure 'Enforce drive encryption type on fixed data drives' is set to 'Enabled' and 'Full encryption'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.116</td><td >Ensure 'Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.117</td><td >Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.118</td><td >Ensure 'Allow network unlock at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.119</td><td >Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.1</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.2</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.120.3</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.4</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.5</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.120.6</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.121</td><td >Ensure 'Configure minimum PIN length for startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.122.1</td><td >Ensure 'Configure use of passwords for operating system drives' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.122.2</td><td >Ensure 'Configure use of passwords for operating system drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.122.3</td><td >Ensure 'Configure use of passwords for operating system drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.123</td><td >Ensure 'Disallow standard users from changing the PIN or password' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.124</td><td >Ensure 'Enforce drive encryption type on operating system drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.1</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.125.2</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.3</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.4</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.5</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.125.6</td><td >Ensure 'Require additional authentication at startup' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.126</td><td >Ensure 'Reset platform validation data after BitLocker recovery' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.1</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.2</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.127.3</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.4</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.5</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.127.6</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.127.7</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.127.8</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.1</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.2</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.3</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.128.4</td><td >Ensure 'Configure use of passwords for removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.129.1</td><td >Ensure 'Control use of BitLocker on removable drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.129.2</td><td >Ensure 'Control use of BitLocker on removable drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.130</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.131</td><td >Ensure 'Enforce drive encryption type on removable data drives' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.132.1</td><td >Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.132.2</td><td >Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.133</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.135</td><td >Ensure 'Always install with elevated privileges' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.136</td><td >Ensure 'Do not process the legacy run list' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.137</td><td >Ensure 'Do not process the run once list' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.138</td><td >Ensure 'Run these programs at user logon' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.139</td><td >Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.140</td><td >Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.141</td><td >Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.142</td><td >Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.143</td><td >Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.144</td><td >Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.145</td><td >Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.145</td><td >Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.146</td><td >Ensure 'Require a Password When a Computer Wakes (On Battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.147</td><td >Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.148</td><td >Ensure 'Specify the system hibernate timeout (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.149</td><td >Ensure 'Specify the system hibernate timeout (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.150</td><td >Ensure 'Specify the system sleep timeout (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.151</td><td >Ensure 'Specify the system sleep timeout (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.152</td><td >Ensure 'Specify the unattended sleep timeout (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.153</td><td >Ensure 'Specify the unattended sleep timeout (plugged in)' is set to 'Enabled' and '0 seconds'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.154</td><td >Ensure 'Turn off hybrid sleep (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.155</td><td >Ensure 'Turn off hybrid sleep (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.156</td><td >Ensure 'Show hibernate in the power options menu' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.157</td><td >Ensure 'Show sleep in the power options menu' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.158</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.159.1</td><td >Ensure 'Turn on Script Execution' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.159.2</td><td >Ensure 'Turn on Script Execution' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.160</td><td >Ensure 'Prevent access to registry editing tools' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.161</td><td >Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.162</td><td >Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.163</td><td >Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.164</td><td >Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.165</td><td >Ensure 'Configure server authentication for client' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.166</td><td >Ensure 'Do not allow passwords to be saved' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.168</td><td >Ensure 'Deny logoff of an administrator logged in to the console session' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.169</td><td >Ensure 'Do not allow Clipboard redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.170</td><td >Ensure 'Do not allow drive redirection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.171</td><td >Ensure 'Always prompt for password upon connection' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.172</td><td >Ensure 'Do not allow local administrators to customize permissions' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.173</td><td >Ensure 'Require secure RPC communication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.174</td><td >Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.175</td><td >Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.176</td><td >Ensure 'Set client connection encryption level' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.177</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.178</td><td >Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.179</td><td >Ensure 'Turn off Inventory Collector' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.180</td><td >Ensure 'Turn off Steps Recorder' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.181</td><td >Ensure 'Allow Telemetry' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.182.1</td><td >Ensure 'Configure Corporate Windows Error Reporting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.182.2</td><td >Ensure 'Configure Corporate Windows Error Reporting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.182.3</td><td >Ensure 'Configure Corporate Windows Error Reporting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.183</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.184</td><td >Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.185</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.186</td><td >Ensure 'Turn off heap termination on corruption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.187</td><td >Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.188</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.189</td><td >Ensure 'Allow indexing of encrypted files' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.190</td><td >Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.191</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.192</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.193</td><td >Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.194</td><td >Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.195</td><td >Ensure 'Allow users to select when a password is required when resuming from connected standby' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.196</td><td >Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.197</td><td >Ensure 'Show lock in the user tile menu' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.198</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.199</td><td >Ensure 'Enable screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.199</td><td >Ensure 'Password protect the screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.200</td><td >Ensure 'Screen saver timeout' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.201</td><td >Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.202</td><td >Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.203</td><td >Ensure 'Do not allow Sound Recorder to run' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.204</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.205</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.206</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.207</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.208</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.209</td><td >Ensure 'Allow Remote Shell Access' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.210</td><td >Ensure 'Allow Cortana' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.211</td><td >Ensure 'Don't search the web or display web results in Search' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.212</td><td >Ensure 'Windows To Go Default Startup Options' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.213</td><td >Ensure 'Remove Security tab' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.214</td><td >Ensure 'Turn off location scripting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.215</td><td >Ensure 'Turn off location' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.216</td><td >Ensure 'Turn off Windows Location Provider' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.217</td><td >Ensure 'Turn off access to the Store' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.218</td><td >Ensure 'Turn off the Store application' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.219</td><td >Ensure 'Determine if interactive users can generate Resultant Set of Policy data' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.220</td><td >Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.222</td><td >Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.223</td><td >Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.224</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.225</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.226</td><td >(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.227</td><td >Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.228</td><td >Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.229</td><td >Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.230</td><td >Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.231</td><td >Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.233</td><td >Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.234</td><td >Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.235</td><td >Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.236</td><td >Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.237</td><td >Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.238</td><td >Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.239</td><td >Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.240</td><td >Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.243</td><td >Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 65536 or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.260</td><td >Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.262</td><td >Ensure 'CD and DVD: Deny read access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.263</td><td >Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.264</td><td >Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.265</td><td >Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.266</td><td >Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.267</td><td >Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.268</td><td >Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.269</td><td >Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.270</td><td >Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.275</td><td >Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.276</td><td >Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.277</td><td >Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.278</td><td >Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.279</td><td >Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.280</td><td >Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.281</td><td >Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.282</td><td >Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.283</td><td >Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.284</td><td >Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.285</td><td >Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.288</td><td >Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.289</td><td >Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.290</td><td >Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.291</td><td >Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.292</td><td >Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.293</td><td >Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.296</td><td >Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.314</td><td >Ensure 'Allow download restrictions' is set to 'Enabled'</td><td >Registry value is '1'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.315</td><td >Ensure 'Configure Do Not Track' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.316</td><td >Ensure 'Control the mode of DNS-over-HTTPS' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.317</td><td >Ensure 'Control where Developer Tools can be used' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.318</td><td >Ensure 'DNS interception checks enabled' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.319</td><td >Ensure 'Default pop-up window setting' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.320</td><td >Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.321</td><td >Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.322</td><td >Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.323</td><td >Ensure 'Use the Enterprise Mode IE website list' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.324</td><td >Ensure 'Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CyberGovAu-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.241</td><td >Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.242</td><td >Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.244</td><td >Ensure 'Manage auditing and security log' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.271</td><td >Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.273</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop Users'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.274</td><td >Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.294</td><td >Ensure 'Back up files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.295</td><td >Ensure 'Restore files and directories' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.297</td><td >Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.298</td><td >Ensure 'Act as part of the operating system' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.299</td><td >Ensure 'Allow log on locally' is set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.300</td><td >Ensure 'Create a pagefile' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.301</td><td >Ensure 'Create a token object' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.302</td><td >Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.303</td><td >Ensure 'Create permanent shared objects' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.304</td><td >Ensure 'Debug programs' is set to 'Administrators'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.305</td><td >Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.306</td><td >Ensure 'Force shutdown from a remote system' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.307</td><td >Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.308</td><td >Ensure 'Load and unload device drivers' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.309</td><td >Ensure 'Lock pages in memory' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.310</td><td >Ensure 'Modify firmware environment values' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.311</td><td >Ensure 'Perform volume maintenance tasks' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.312</td><td >Ensure 'Profile single process' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.313</td><td >Ensure 'Take ownership of files or other objects' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CyberGovAu-BenchmarksAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.232</td><td >Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CyberGovAu-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1909.245</td><td >Ensure 'Audit Computer Account Management' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.246</td><td >Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.247</td><td >Ensure 'Audit Security Group Management' is set to 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.248</td><td >Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.249</td><td >Ensure 'Audit Process Creation' is set to 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.250</td><td >Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.251</td><td >Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.252</td><td >Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.253</td><td >Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.254</td><td >Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.255</td><td >Ensure 'Audit Special Logon' is set to include 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1909.256</td><td >Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.257</td><td >Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.258</td><td >Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1909.259</td><td >Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="Microsoft-Benchmarks"><span class="failed">Microsoft Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the Microsoft Benchmark results.</p><section ><h1 id="Microsoft-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >Registry-001</td><td >Set registry value 'PUAProtection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-002</td><td >Set registry value 'MpCloudBlockLevel' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-003</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-004</td><td >Ensure 'Turn off real-time protection' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-005</td><td >Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-006</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'.</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-007</td><td >Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'.</td><td >Registry value is '0'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-008</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-009</td><td >Set registry value 'ExploitGuard_ASR_Rules' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-010</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-011</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-012</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-013</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-014</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-015</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-016</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-017</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-018</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-019</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-020</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-021</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-022</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-023</td><td >Set registry value 'EnableNetworkProtection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-024</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-025</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-026</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-027</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-028</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-029</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-031</td><td >Set registry value 'UseEnhancedPin' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-032</td><td >Set registry value 'RDVDenyCrossOrg' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-033</td><td >Set registry value 'DisableExternalDMAUnderLock' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-034</td><td >Set registry value 'DCSettingIndex' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-035</td><td >Set registry value 'ACSettingIndex' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-036</td><td >Set registry value 'DenyDeviceClasses' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-037</td><td >Set registry value 'DenyDeviceClassesRetroactive' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-038</td><td >Set registry value '1' to {d48179be-ec20-11d1-b6b8-00c04fa372a7}.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-039</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-040</td><td >Set registry value 'AutoConnectAllowedOEM' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-041</td><td >Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-042</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-043</td><td >Set registry value 'NoWebServices' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-044</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-045</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-046</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-047</td><td >Set registry value 'LocalAccountTokenFilterPolicy' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-048</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-049</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-050</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-051</td><td >Set registry value 'PreventCertErrorOverrides' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-052</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-053</td><td >Set registry value 'EnabledV9' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-054</td><td >Set registry value 'PreventOverride' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-055</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-056</td><td >Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-057</td><td >Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-058</td><td >Set registry value 'LetAppsActivateWithVoiceAboveLock' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-059</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-060</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-061</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-062</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-063</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-064</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-065</td><td >Set registry value 'AllowGameDVR' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-066</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-067</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-068</td><td >Set registry value 'AlwaysInstallElevated' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-069</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-070</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-071</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-072</td><td >Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-073</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1, RequireIntegrity=1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-074</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1, RequireIntegrity=1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-075</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-076</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-077</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'. (EnableScriptBlockLogging)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-078</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set. (EnableScriptBlockInvocationLogging)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-079</td><td >Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-080</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-081</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-082</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-083</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-084</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-085</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-086</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-087</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-088</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-089</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-090</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-091</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-092</td><td >Set registry value 'DisableWebPnPDownload' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-093</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-094</td><td >Solicited Remote Assistance - Set method for sending email invitations to 'Simple MAPI'</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-095</td><td >Configure Solicited Remote Assistance to disabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-096</td><td >Configure Solicited Remote Assistance - Allow helpers to only view the computer.</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-097</td><td >Set registry value 'MaxTicketExpiry' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-098</td><td >Set registry value 'MaxTicketExpiryUnits' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-099</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-100</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-101</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-102</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-103</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-104</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-105</td><td >Domain: Set registry value 'DefaultOutboundAction' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-106</td><td >Domain: Set registry value 'DisableNotifications' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-107</td><td >Domain: Set registry value 'EnableFirewall' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-108</td><td >Domain: Set registry value 'DefaultInboundAction' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-109</td><td >Domain: Set registry value 'LogDroppedPackets' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-110</td><td >Domain: Set registry value 'LogFileSize' to 16384.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-111</td><td >Domain: Set registry value 'LogSuccessfulConnections' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-112</td><td >Private: Set registry value 'EnableFirewall' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-113</td><td >Private: Set registry value 'DisableNotifications' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-114</td><td >Private: Set registry value 'DefaultInboundAction' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-115</td><td >Private: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-116</td><td >Private: Set registry value 'LogSuccessfulConnections' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-117</td><td >Private: Set registry value 'LogDroppedPackets' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-118</td><td >Private: Set registry value 'LogFileSize' to 16384.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-119</td><td >Public: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-120</td><td >Public: Set registry value 'EnableFirewall' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-121</td><td >Public: Set registry value 'DisableNotifications' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-122</td><td >Public: Set registry value 'AllowLocalIPsecPolicyMerge' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-123</td><td >Public: Set registry value 'AllowLocalPolicyMerge' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-124</td><td >Public: Set registry value 'DefaultInboundAction' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-125</td><td >Public: Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-126</td><td >Public: Set registry value 'LogDroppedPackets' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-127</td><td >Public: Set registry value 'LogSuccessfulConnections' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-128</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-129</td><td >Set registry value 'AdmPwdEnabled' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-130</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-131</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-132</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-133</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-134</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-135</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-136</td><td >Set registry value 'NodeType' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-137</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-138</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-139</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-140</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-141</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-142</td><td >Set registry value 'NoLMHash' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-143</td><td >Set registry value 'EnablePlainTextPassword' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-144</td><td >Set registry value 'LimitBlankPasswordUse' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-145</td><td >Set registry value 'RestrictAnonymousSAM' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-146</td><td >Set registry value 'RestrictAnonymous' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-147</td><td >Set registry value 'RestrictNullSessAccess' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-148</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-149</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-150</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-151</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-152</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-153</td><td >Set registry value 'requirestrongkey' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-154</td><td >Set registry value 'RequireSecuritySignature' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-155</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-156</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-157</td><td >Set registry value 'signsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-158</td><td >Set registry value 'requiresecuritysignature' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-159</td><td >Set registry value 'ProtectionMode' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-160</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-161</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-162</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-163</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-164</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-165</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-166</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-167</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-168</td><td >Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-223</td><td >Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-224</td><td >Set registry value 'NoToastApplicationNotificationOnLockScreen' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-225</td><td >Set registry value 'FormSuggest Passwords' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-226</td><td >Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-227</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-228</td><td >Ensure 'Remove "Run this time" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-229</td><td >Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-230</td><td >Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-231</td><td >Set registry value 'CheckExeSignatures' to yes.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-232</td><td >Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-233</td><td >Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-234</td><td >Set registry value 'Isolation' to PMEM.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-235</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-236</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-237</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-238</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-239</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-240</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-241</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-242</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-243</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-244</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-245</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-246</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-247</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-248</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-249</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-250</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-251</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-252</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-253</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-254</td><td >Set registry value '(Reserved)' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-255</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-256</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-257</td><td >Set registry value 'explorer.exe' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-258</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-259</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-260</td><td >Set registry value 'PreventOverride' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-261</td><td >Ensure 'Prevent managing SmartScreen Filter' is set to 'On'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-262</td><td >Set registry value 'NoCrashDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-263</td><td >Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-264</td><td >Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-265</td><td >Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-266</td><td >Set registry value 'Security_zones_map_edit' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-267</td><td >Set registry value 'Security_options_edit' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-268</td><td >Set registry value 'Security_HKLM_only' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-269</td><td >Ensure 'Check for server certificate revocation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-270</td><td >Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-271</td><td >Set registry value 'WarnOnBadCertRecving' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-272</td><td >Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-273</td><td >Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-274</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-275</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-276</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-277</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-278</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-279</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-280</td><td >Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-281</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-282</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-283</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-284</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-285</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-286</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-287</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-288</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-289</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-290</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-291</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-292</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-293</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-294</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-295</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-296</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-297</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-298</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-299</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-300</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-301</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry value is '0'. Expected: 3</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-302</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-303</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-304</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-305</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-306</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-307</td><td >Ensure 'Logon options' is set to 'Prompt for user name and password'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-308</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-309</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-310</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-311</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-312</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-313</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-314</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-315</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-316</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-317</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-318</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-319</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-320</td><td >Set registry value '140C' to 3. (Zones\3)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-321</td><td >Ensure 'Allow META REFRESH' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-322</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-323</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-324</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-325</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-326</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-327</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-328</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-329</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-330</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-331</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-332</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-333</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-334</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-335</td><td >Ensure 'Allow binary and script behaviors' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-336</td><td >Ensure 'Scripting of Java applets' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-337</td><td >Ensure 'Allow file downloads' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-338</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-339</td><td >Ensure 'Allow active scripting' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-340</td><td >Ensure 'Logon options' is set to 'Anonymous logon'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-341</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-342</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-343</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-344</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-345</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-346</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-347</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-348</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-349</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-350</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry value is '0'. Expected: 3</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-351</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-352</td><td >Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-353</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-354</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-355</td><td >Ensure 'Run ActiveX controls and plugins' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-356</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-357</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'.</td><td >Registry value is '1'. Expected: 3</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-358</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-359</td><td >Set registry value '140C' to 3. (Zones\4)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >UserRight-170</td><td >Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-171</td><td >Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-172</td><td >Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-173</td><td >Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-174</td><td >Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-113'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-175</td><td >Ensure 'SeCreatePermanentPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-176</td><td >Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-177</td><td >Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-178</td><td >Ensure 'SeLockMemoryPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-179</td><td >Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-113'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-180</td><td >Ensure 'SeNetworkLogonRight' is set to 'S-1-5-32-544, S-1-5-32-555'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-181</td><td >Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-182</td><td >Ensure 'SeCreateTokenPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-183</td><td >Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-32-544, S-1-5-6, S-1-5-19, S-1-5-20'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-184</td><td >Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-185</td><td >Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-186</td><td >Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544, S-1-5-32-545'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-187</td><td >Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-188</td><td >Ensure 'SeDebugPrivilege' is set to 'S-1-5-32-544'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-189</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-190</td><td >Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-191</td><td >Ensure 'SeTcbPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-192</td><td >Ensure 'SeEnableDelegationPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AccountPolicy-216</td><td >Ensure 'MinimumPasswordLength' is set to '14'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-217</td><td >Ensure 'PasswordComplexity' is set to '1'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-218</td><td >Ensure 'PasswordHistorySize' is set to '24'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-219</td><td >Ensure 'LockoutBadCount' is set to '10'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-220</td><td >Ensure 'ResetLockoutCount' is set to '15'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-221</td><td >Ensure 'LockoutDuration' is set to '15'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-222</td><td >Ensure 'ClearTextPassword' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AuditPolicy-193</td><td >Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-194</td><td >Ensure 'Security Group Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-195</td><td >Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-196</td><td >Ensure 'Plug and Play Events' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-197</td><td >Ensure 'Process Creation' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-198</td><td >Ensure 'Account Lockout' is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-199</td><td >Ensure 'Group Membership' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-200</td><td >Ensure 'Logon' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-201</td><td >Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-202</td><td >Ensure 'Special Logon' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-203</td><td >Ensure 'Detailed File Share' is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-204</td><td >Ensure 'File Share' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-205</td><td >Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-206</td><td >Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-207</td><td >Ensure 'Audit Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-208</td><td >Ensure 'Authentication Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-209</td><td >Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-210</td><td >Ensure 'Other Policy Change Events' is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-211</td><td >Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-212</td><td >Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-213</td><td >Ensure 'Security State Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-214</td><td >Ensure 'Security System Extension' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-215</td><td >Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-Logging"><span class="failed">BSI Benchmarks SiSyPHuS Logging</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >4.1.1</td><td >Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.2</td><td >Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.1</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.2</td><td >Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.3</td><td >Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.2.1.4</td><td >Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.1</td><td >Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.2</td><td >Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.3</td><td >Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.4</td><td >Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.1</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.2</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.3</td><td >Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.4</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.1.1</td><td >Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.1</td><td >Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.2</td><td >Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.1</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.2</td><td >Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.1</td><td >Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.2</td><td >Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.1</td><td >Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.2</td><td >Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.3.1</td><td >Ensure 'Include command line in process creation events' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.3.4.2</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >4.3.4.3</td><td >Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >5.1.1.1</td><td >Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.2</td><td >Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.3</td><td >Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.4</td><td >Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.5</td><td >Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.6</td><td >Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.7</td><td >Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.8</td><td >Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.1</td><td >Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.2</td><td >Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.3</td><td >Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.4</td><td >Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.5</td><td >Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.6</td><td >Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.7</td><td >Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.8</td><td >Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.9</td><td >Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.1</td><td >Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.2</td><td >Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.3</td><td >Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.4</td><td >Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.5</td><td >Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.6</td><td >Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.1</td><td >Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.2</td><td >Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HD"><span class="failed">BSI Benchmarks SiSyPHuS HD</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >11</td><td >(HD) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >13</td><td >(HD) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >15</td><td >(HD) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >19</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >23</td><td >(HD) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >28</td><td >(HD) Ensure 'Enable Font Providers' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >29</td><td >(HD) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >30</td><td >(HD) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >31</td><td >(HD) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >32</td><td >(HD) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >36</td><td >(HD) Ensure 'Turn off notifications network usage' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >38</td><td >(HD) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >47</td><td >(HD) Ensure 'Turn off the advertising ID' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >48</td><td >(HD)  Ensure 'Allow upload of User Activities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >49</td><td >(HD) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >58</td><td >(HD) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >66</td><td >(HD) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >67</td><td >(HD) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >69</td><td >(HD) Ensure 'Turn off printing over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >70</td><td >(HD) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >71</td><td >(HD) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >72</td><td >(HD) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >73</td><td >(HD) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >75</td><td >(HD) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >76</td><td >(HD) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >77</td><td >(HD) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >78</td><td >(HD) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >79</td><td >(HD) Ensure 'Turn off access to the Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >80</td><td >(HD) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82</td><td >(HD) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >83</td><td >(HD) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >91</td><td >(HD) Ensure 'Enable Windows NTP Client' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >92</td><td >(HD) Ensure 'Enable Windows NTP Server' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >93</td><td >(HD)  Ensure 'Allow Online Tips' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >104</td><td >(HD) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >108</td><td >(HD) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >110</td><td >(HD) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >111</td><td >(HD) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >122</td><td >(HD) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >123</td><td >(HD) Ensure 'Allow Use of Camera' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >125</td><td >(HD) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >128</td><td >(HD) Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >129</td><td >(HD) Ensure 'Turn off Push To Install service' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >130</td><td >(HD) Ensure 'Do not allow COM port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >132</td><td >(HD) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >133</td><td >(HD) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >140</td><td >(HD) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >141</td><td >(HD) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >144</td><td >(HD) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >150</td><td >(HD) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >151</td><td >(HD) Ensure 'Disable all apps from Microsoft Store' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >154</td><td >(HD) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >155</td><td >(HD) Ensure 'Turn off the Store application' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >156</td><td >(HD) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '0'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >166</td><td >(HD) Ensure 'Join Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >176</td><td >(HD) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >179</td><td >(HD) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >182</td><td >(HD) Ensure 'Prevent Codec Download' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >184</td><td >(HD) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow only signed scripts'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >190</td><td >(HD) Ensure 'Allow Remote Shell Access' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >195</td><td >(HD) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >225</td><td >(HD) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >228</td><td >(HD) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >250</td><td >(HD) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 'Deny all'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >251</td><td >(HD) Ensure 'Network security: Restrict NTLM: Incoming NTLM traffic' is set to 'Deny all accounts'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >273</td><td >(HD) Ensure 'System settings: Optional subsystems' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >274</td><td >(HD) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >316</td><td >(HD) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >318</td><td >(HD) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >319</td><td >(HD) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >322</td><td >(HD) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >325</td><td >(HD) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >327</td><td >(HD) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >329</td><td >(HD) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >330</td><td >(HD) Ensure 'Microsoft Store Install Service (InstallService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >332</td><td >(HD) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >333</td><td >(HD) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >334</td><td >(HD) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >335</td><td >(HD) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >336</td><td >(HD) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >337</td><td >(HD) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >340</td><td >(HD) Ensure 'Server (LanmanServer)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >342</td><td >(HD)  Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >344</td><td >(HD) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >346</td><td >(HD) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >347</td><td >(HD) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >350</td><td >(HD) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >352</td><td >(HD) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >353</td><td >(HD) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >354</td><td >(HD) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >355</td><td >(HD) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'.</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.
+
+</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >281</td><td >(HD) Configure 'Log on as a service'. [Hyper-V-Feature NOT installed]</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >283</td><td >(HD) Ensure 'Log on as a batch job' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.
+
+</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.
+</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. 
+
+</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 or
+more minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDSecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >249</td><td >(ND) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-ND"><span class="failed">BSI Benchmarks SiSyPHuS ND</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects tooverride OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '0'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data(when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 ormore minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDSecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >249</td><td >(ND) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NE"><span class="failed">BSI Benchmarks SiSyPHuS NE</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '0'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NESecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI"><span class="failed">BSI Benchmarks SiSyPHus-BSI</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSIRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >3.1.1 A</td><td >Configuration of the lowest possible telemetry-level (Enterprise Windows 10)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.1 B</td><td >Configuration of the lowest possible telemetry-level (Non-Enterprise Windows 10)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >3.1.2.1</td><td >Deactivation of the telemetry service and ETW-sessions - disable service DiagTrack</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.2.2</td><td >Deactivation of the telemetry service and ETW-sessions - disable service Autologger-Diatrack-Listener</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.3.1.1</td><td >Deactivation of telemetry according to Microsoft - Disable Windows Update Service</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >3.1.3.1.2</td><td >Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: disable MAPS</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3.1.3.1.3</td><td >Deactivation of telemetry according to Microsoft - Cloud-Based-Protection: never send sample files</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-Bundespolizei"><span class="failed">BSI Benchmarks SiSyPHus-BSI Bundespolizei</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0003</td><td > Ensure 'Configure Automatic Updates' is set to 4</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0004</td><td > Ensure 'Configure Automatic Updates' is set to 'Every Day'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0005</td><td > Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0006</td><td > Ensure 'Specify the maximum log file size (KB)' is set to 'Enabled: 32768'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0032</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 32768.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0037</td><td >Ensure 'Allow enhanced PINs for startup' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0038</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0039</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0040</td><td >Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0041</td><td >Ensure 'Allow user control over installs' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0043</td><td >Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0065</td><td >Ensure 'Enumerate administrator accounts on elevation' is set 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0101</td><td > Ensure 'Restrict Unauthenticated RPC clients' is set 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0109</td><td >Ensure 'Allow Telemetry' is set to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0110</td><td >Ensure 'Do not show feedback notifications' is set to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0111</td><td >Ensure 'Turn on MSDT interactive communication with support provider' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0112</td><td >Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0113</td><td >Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0114</td><td >Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0115</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0116</td><td >Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0117</td><td >Ensure 'Turn off the Windows Customer Experience program' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0118</td><td >Ensure 'Turn off the Windows Error Reporting' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0119</td><td >Ensure 'Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0121</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0122</td><td >Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0123</td><td >Ensure 'Prevent using Localhost IP address for WebRTC' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0131</td><td >Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0132</td><td >Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0133</td><td >Ensure 'Allow InPrivate browsing' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0135</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (On Battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0136</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0137</td><td >Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0138</td><td >Ensure 'Always install with elevated privileges ' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0139</td><td >Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0140</td><td >Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0141</td><td >Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0142</td><td >Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0143</td><td >Ensure 'Configure Password Manager' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0144</td><td >Ensure 'Configure Pop-up Blocker' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0145</td><td >Ensure 'Configure registry policy processing' is set to 'Do not apply during periodic background processing (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0146</td><td >Ensure 'Configure registry policy processing' is set to 'Process even if the Group Policy objects have not changed (False)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0147</td><td >Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0148</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0149</td><td >Ensure 'Disallow copying of user input methods to the system account for sign-in ' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0150</td><td >Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0151</td><td >Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0152</td><td >Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0153</td><td >Ensure 'Do not delete temp folders upon exit' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0154</td><td >Ensure 'Do not display network selection UI' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0155</td><td >Ensure 'Do not enumerate connected users on domain-joined computers' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0156</td><td >Ensure 'Enable insecure guest logons' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0157</td><td >Ensure 'Enable local admin password management' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0158</td><td >Ensure 'Enable RPC Endpoint Mapper Client Authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0159</td><td >Ensure 'Enable screen saver' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0160</td><td >Ensure 'Enable Windows NTP Server' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0161</td><td >Ensure 'Enable/Disable PerfTrack' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0163</td><td >Ensure 'Enumerate local users on domain-joined computers' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0164</td><td >Ensure 'Include command line in process creation events' set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0165</td><td >Ensure 'Let Windows apps access account information' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0166</td><td >Ensure 'Let Windows apps access call history' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0167</td><td >Ensure 'Let Windows apps access contacts' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0168</td><td >Ensure 'Let Windows apps access email' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0169</td><td >Ensure 'Let Windows apps access location' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0170</td><td >Ensure 'Let Windows apps access messaging' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0171</td><td >Ensure 'Let Windows apps access motion' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0172</td><td >Ensure 'Let Windows apps access notifications' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0173</td><td >Ensure 'Let Windows apps access the calendar' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0174</td><td >Ensure 'Let Windows apps access the camera' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0175</td><td >Ensure 'Let Windows apps access the microphone' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0176</td><td >Ensure 'Let Windows apps access trusted devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0177</td><td >Ensure 'Let Windows apps control radios' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0178</td><td >Ensure 'Let Windows apps make phone calls' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0179</td><td >Ensure 'Let Windows apps sync with devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0185</td><td >Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0209</td><td >Ensure 'Prevent downloading of enclosures' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0210</td><td >Ensure 'Prevent enabling lock screen camera' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0211</td><td >Ensure 'Prevent enabling lock screen slide show' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0212</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0213</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0214</td><td >Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0215</td><td >Ensure 'Prevent the computer from joining a homegroup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0216</td><td >Ensure 'Prohibit access of the Windows Connect Now wizards' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0217</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0218</td><td >Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' set to 'Enalbed'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0220</td><td >Ensure 'Require a password when a computer wakes (on battery)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0221</td><td >Ensure 'Require a password when a computer wakes (plugged in)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0222</td><td >Ensure 'Require additional authentication at startup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0223</td><td >Ensure 'Require domain users to elevate when setting a network's location' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0224</td><td >Ensure 'Set the default behavior for AutoRun' set to 'Enalbed: Do not execute any autorun commands'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0225</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0229</td><td >Ensure 'Turn off background refresh of Group Policy' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0230</td><td >Ensure 'Turn off Data Execution Prevention for Explorer' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0231</td><td >Ensure 'Turn off downloading of print drivers over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0232</td><td >Ensure 'Turn off handwriting personalization data sharing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0233</td><td >Ensure 'Turn off handwriting recognition error reporting' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0234</td><td >Ensure 'Turn off heap termination on corruption' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0235</td><td >Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0236</td><td >Ensure 'Turn off Internet download for Web publishing and online ordering wizards' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0237</td><td >Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0238</td><td >Ensure 'Turn off picture password sign-in' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0239</td><td >Ensure 'Turn off printing over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0240</td><td >Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0241</td><td >Ensure 'Turn off Search Companion content file updates' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0242</td><td >Ensure 'Turn off shell protocol protected mode' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0243</td><td >Ensure 'Turn off the 'Order Prints' picture task' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0244</td><td >Ensure 'Turn off the 'Publish to Web' task for files and folders' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0245</td><td >Ensure 'Turn on convenience PIN sign-in' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0246</td><td >Ensure 'Turn on Mapper I/O (LLTDIO) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0247</td><td >Ensure 'Turn on Responder (RSPNDR) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0248</td><td >Ensure 'Turn On Virtualization Based Security' set to 'Enabled: Block untrusted fonts and log events'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0249</td><td >Ensure 'Untrusted Font Blocking' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0250</td><td >Ensure 'Configure enhanced anti-spoofing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0251</td><td >Ensure 'WDigest Authentication' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0253</td><td >Ensure 'Windows Firewall: Domain: Apply local firewall rules' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0254</td><td >Ensure 'Windows Firewall: Domain: Display a notification' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0279</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' set to '%windir%\system32\logfiles\firewall\domainfirewall.log'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0280</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' set to '16,384'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0281</td><td >Ensure 'Windows Firewall: Public: Outbound connections' set to 'Allow'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0282</td><td >Ensure 'Block launching Windows Store apps with Windows RuntimeAPIaccessfromhostedcontent' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0283</td><td >Ensure 'Turn off KMS Client Online AVS Validation' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0284</td><td >Ensure 'Do not display the password reveal button' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0285</td><td >Ensure 'Join Microsoft MAPS' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0286</td><td >Ensure 'Configure search suggestions in Address bar' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0287</td><td >Ensure 'Configure Windows SmartScreen' set to 'Enabled: Require approval from an administrator before running downloaded unknown software'.</td><td >Registry value is '1'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0288</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides for unverified files' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0289</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0290</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0291</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0292</td><td >Ensure 'Turn on SmartScreen Filter scan' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0293</td><td >Ensure 'Allow Cortana' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0294</td><td >Ensure 'Allow search and Cortana to use location' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0295</td><td >Ensure 'Disable all apps from Microsoft Store' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0296</td><td >Ensure 'Disable pre-release features or settings' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0297</td><td >Ensure 'Turn off access to the Store' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0298</td><td >Ensure 'Turn off Automatic Download and Install of updates' set to 'Enabled'.</td><td >Registry value is '4'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0299</td><td >Ensure 'Turn off the offer to update to the latest version of Windows' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0300</td><td >Ensure 'Turn off the Store application' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0301</td><td >Ensure 'Allow Basic authentication' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0302</td><td >Ensure 'Allow unencrypted traffic' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0304</td><td >Ensure 'Allow Remote Shell Access' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0306</td><td >Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0307</td><td >Ensure 'Disallow Digest authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0308</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0309</td><td >Ensure 'Do not allow COM port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0310</td><td >Ensure 'Do not allow drive redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0311</td><td >Ensure 'Do not allow LPT port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0312</td><td >Ensure 'Do not use temporary folders per session' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0313</td><td >Ensure 'Apply UAC restrictions to local accounts on network logons' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0323</td><td >Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0324</td><td >Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0325</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' set to 'XTS-AES 256-bit'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0328</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0329</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0330</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0331</td><td >Ensure 'Configure minimum PIN length for startup' set to 'Enabled' and 'minimum characters' set to 10.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0332</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0333</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0334</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0335</td><td >Ensure 'Configure use of passwords for fixed data drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0336</td><td >Ensure 'Configure use of passwords for operating system drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0337</td><td >Ensure 'Configure use of passwords for removable data drives' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0338</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0339</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0340</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0342</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Save BitLocker recovery information to AD DS for fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0343</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Save BitLocker recovery information to AD DS for operating system drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0344</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Save BitLocker recovery information to AD DS for removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0345</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key and PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0346</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0347</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0348</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0349</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0350</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0351</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0352</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Require use of smart cards on fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0353</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Require use of smart cards on removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0354</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Do not allow write access to devices configured in another organization'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0355</td><td >Ensure 'Password Settings' set to 'Large letters + small letters + numbers + specials'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0358</td><td >Ensure 'Require additional authentication at startup' set to 'Allow BitLocker without a compatible TPM'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0359</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0360</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (Test)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0361</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (True)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0362</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0363</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow 48-digit recovery password'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0364</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Require 48-digit recovery password '.</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0365</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 48-digit recovery password'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0366</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0367</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0368</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0369</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Password Length' and set to greater or equal 15.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0370</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0371</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0372</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0373</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0374</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives (Enabled)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0375</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0376</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Store recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0377</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0378</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0380</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0384</td><td >Ensure 'Password Age' set to less or equal 42.</td><td >Registry value is '10'. Expected: 42</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0385</td><td >Ensure 'Require additional authentication at startup' set to 'Require startup PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0386</td><td >Ensure 'Turn on PowerShell Transcription' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0387</td><td >Ensure 'Turn on PowerShell Script Block Logging' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0388</td><td >Ensure 'Require secure RPC communication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0389</td><td >Ensure 'Set client connection encryption level' set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0390</td><td >Ensure 'Set time limit for active but idle Remote Desktop Services sessions' set to 'Enabled: 5 minutes'.</td><td >Registry value is '900000'. Expected: 300000</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0391</td><td >Ensure 'Set time limit for disconnected sessions' set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0044</td><td > Ensure 'SeTrustedCredManAccessPrivilege' is set to 'Enabled'</td><td >The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0045</td><td > Ensure 'SeNetworkLogonRight' is set to 'Administrator, Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0046</td><td > Ensure 'SeTcbPrivilege' is set to 'None'</td><td >The user 'SeTcbPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0047</td><td > Ensure  'Adjust memory quotas for a process' set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0048</td><td > Ensure 'Allow log on locally' set to 'Administrators, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0049</td><td > Ensure 'SeBackupPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0050</td><td > Ensure 'SeSystemtimePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0051</td><td > Ensure 'SeTimeZonePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user right 'SeTimeZonePrivilege' contains following unexpected users: BUILTIN\Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0052</td><td > Ensure 'SeCreatePagefilePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user 'SeCreatePagefilePrivilege' setting does not contain the following users: NT AUTHORITY\LOCAL SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0053</td><td > Ensure 'SeCreateTokenPrivilege' is set to 'None'</td><td >The user 'SeCreateTokenPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0054</td><td > Ensure 'SeCreateGlobalPrivilege' is set to 'Administrator, SERVICE, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0055</td><td > Ensure 'SeCreatePermanentPrivilege' is set to 'None'</td><td >The user 'SeCreatePermanentPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0056</td><td > Ensure 'SeCreateSymbolicLinkPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0057</td><td > Ensure 'SeDebugPrivilege' is set to 'Administrator'</td><td >The user 'SeDebugPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0064</td><td > Ensure 'SeEnableDelegationPrivilege' is set to 'None'</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0066</td><td > Ensure 'SeRemoteShutdownPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0067</td><td > Ensure 'SeAuditPrivilege' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0068</td><td > Ensure 'SeImpersonatePrivilege' is set to 'Administrator, LOCAL SERVICE, NETWORK SERVICE'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: NT AUTHORITY\SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0069</td><td > Ensure 'SeIncreaseBasePriorityPrivilege' is set to 'Administrator'</td><td >The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: Window Manager\Window Manager Group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0085</td><td > Ensure 'SeRelabelPrivilege' is set to 'None'</td><td >The user 'SeRelabelPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0086</td><td > Ensure 'SeSystemEnvironmentPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0087</td><td > Ensure 'SeManageVolumePrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0088</td><td > Ensure 'SeProfileSingleProcessPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0089</td><td > Ensure 'SeSystemProfilePrivilege' is set to 'Administrator, NT SERVICE/WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0090</td><td > Ensure 'SeRestorePrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0091</td><td > Ensure 'SeShutdownPrivilege' is set to 'Administrator, Users'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0094</td><td > Ensure 'SeTakeOwnershipPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0104</td><td > Ensure 'SeDenyNetworkLogonRight' is set to 'Local account, Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0105</td><td > Ensure 'SeDenyBatchLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0106</td><td > Ensure 'SeDenyServiceLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0107</td><td > Ensure 'SeDenyInteractiveLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0108</td><td > Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'Local account, Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0180</td><td > Ensure 'Load and unload device drivers' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0181</td><td > Ensure 'Lock pages in memory' is set to 'No one'</td><td >The user 'SeLockMemoryPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0182</td><td > Ensure 'Log on as a batch job' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0183</td><td > Ensure 'Log on as a service' is set to 'No one'</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines
+The user 'SeServiceLogonRight' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0184</td><td > Ensure 'Manage auditing and security log' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0219</td><td > Ensure 'Replace a process level token' is set to 'Local Service, Network Service'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0303</td><td > Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop User'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0001</td><td > Ensure 'Maximum password age' is set to between 1 and 42</td><td >'MaximumPasswordAge' currently set to: 120. Expected: x <= 42 and x >= 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0002</td><td > Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0100</td><td > Ensure 'Reset account lockout counter after' is set greater or equal 15</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0102</td><td > Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0103</td><td >Ensure 'Account lockout threshold' is set greater or equal 1 and less or equal 10</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0162</td><td > Ensure 'Enforce password history' is set greater or equal 24</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0186</td><td > Ensure 'Minimum password age' is set to greater or equal 1</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0187</td><td > Ensure 'Minimum password length' is set to greater or equal 14</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHus--BSI-BundespolizeiAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0008</td><td > Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0011</td><td > Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0012</td><td > Ensure 'Audit Security Group Management' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0013</td><td > Ensure 'Audit account management' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0014</td><td > Ensure 'Advanced security audit policy settings' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0015</td><td > Ensure 'Audit Process Creation' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0016</td><td > Ensure 'Audit Other Logon/Logoff Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0017</td><td > Ensure 'Audit Account Lockout' is set to 'SuccessAndNotFailure'</td><td >Set to: Failure</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0018</td><td > Ensure 'How to track users logon/logoff' is set to 'SuccessAndNotFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0019</td><td > Ensure 'Audit Policy: Logon-Logoff: Logon' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0020</td><td > Ensure 'Audit Policy: Logon-Logoff: Special Logon' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0021</td><td > Ensure 'Audit Policy: Object Access:Removable Storage' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0022</td><td > Ensure 'Audit Policy: Policy Change: Audit Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0023</td><td > Ensure 'Audit Policy: Policy Change: Authentication Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0025</td><td > Ensure 'Audit Policy: System: IPsecDriver' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0026</td><td > Ensure 'Audit Policy: System: OtherSystem Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0027</td><td > Ensure 'Audit Policy: System: Security State Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0028</td><td > Ensure 'Audit Policy: System: Security System Extension' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0029</td><td > Ensure 'Audit Policy: System: System Integrity' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="summary"><h1 >Benchmark Compliance</h1><div style="float: left;"><p >Generated by the <i>ATAPAuditor</i> Module Version <i>5.2</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p >Does your system show low benchmark compliance? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >CIS Microsoft Windows 10 Enterprise Release 21H1 Benchmark, Version: 1.12.0, Date: 2022-02-15</li><li >DISA Windows 10 Security Technical Implementation Guide, Version: V1R16, Date: 2019-10-25</li><li >CYBERGOVAU Hardening Microsoft Windows 10 version 21H1 Workstations, Version: 10.2020, Date 2020-10-01</li><li >Microsoft Security baseline (FINAL) for Windows 10, Version: 21H1, Date: 2021-05-18</li><li >BSI SiM-08202 Client unter Windows 10, Version: 1, Date: 2017-09-13</li><li >Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03</li></ul><p >This report was generated on 12/07/2022 10:37:18 on DESKTOP-UTMU75K.fb-pro.com with ATAPHtmlReport version 1.8.</p></p></div><div id="riskMatrixSummaryArea"><h2 id="CurrentRiskScore">Current Risk Score on tested System: </h2><h3 >For further information, please head to the tab "Risk Score".</h3><div id="riskMatrixSummary"><div id="dotSummaryTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div></div><h1 style="clear:both;"></h1><p >A total of 2682 tests have been executed.</p><div class="gauge"><div title="True 2157 test(s), 80.43%" style="width: 80.43%" class="gauge-meter passed"></div><div title="False 521 test(s), 19.43%" style="width: 19.43%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 4 test(s), 0.15%" style="width: 0.15%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 2157 test(s) &#x2259; 80.43%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 521 test(s) &#x2259; 19.43%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 4 test(s) &#x2259; 0.15%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">CIS Benchmarks</h2><p >A total of 512 tests have been executed in section CIS Benchmarks.</p><div class="gauge"><div title="True 478 test(s), 93.36%" style="width: 93.36%" class="gauge-meter passed"></div><div title="False 33 test(s), 6.45%" style="width: 6.45%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 1 test(s), 0.20%" style="width: 0.20%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 478 test(s) &#x2259; 93.36%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 33 test(s) &#x2259; 6.45%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 0.20%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">DISA Recommendations</h2><p >A total of 161 tests have been executed in section DISA Recommendations.</p><div class="gauge"><div title="True 133 test(s), 82.61%" style="width: 82.61%" class="gauge-meter passed"></div><div title="False 25 test(s), 15.53%" style="width: 15.53%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 3 test(s), 1.86%" style="width: 1.86%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 133 test(s) &#x2259; 82.61%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 25 test(s) &#x2259; 15.53%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 3 test(s) &#x2259; 1.86%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">CyberGovAu Benchmarks</h2><p >A total of 381 tests have been executed in section CyberGovAu Benchmarks.</p><div class="gauge"><div title="True 196 test(s), 51.44%" style="width: 51.44%" class="gauge-meter passed"></div><div title="False 185 test(s), 48.56%" style="width: 48.56%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 196 test(s) &#x2259; 51.44%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 185 test(s) &#x2259; 48.56%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">Microsoft Benchmarks</h2><p >A total of 357 tests have been executed in section Microsoft Benchmarks.</p><div class="gauge"><div title="True 306 test(s), 85.71%" style="width: 85.71%" class="gauge-meter passed"></div><div title="False 51 test(s), 14.29%" style="width: 14.29%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 306 test(s) &#x2259; 85.71%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 51 test(s) &#x2259; 14.29%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS Logging</h2><p >A total of 51 tests have been executed in section BSI Benchmarks SiSyPHuS Logging.</p><div class="gauge"><div title="True 48 test(s), 94.12%" style="width: 94.12%" class="gauge-meter passed"></div><div title="False 3 test(s), 5.88%" style="width: 5.88%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 48 test(s) &#x2259; 94.12%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 3 test(s) &#x2259; 5.88%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS HD</h2><p >A total of 384 tests have been executed in section BSI Benchmarks SiSyPHuS HD.</p><div class="gauge"><div title="True 327 test(s), 85.16%" style="width: 85.16%" class="gauge-meter passed"></div><div title="False 57 test(s), 14.84%" style="width: 14.84%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 327 test(s) &#x2259; 85.16%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 57 test(s) &#x2259; 14.84%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS ND</h2><p >A total of 292 tests have been executed in section BSI Benchmarks SiSyPHuS ND.</p><div class="gauge"><div title="True 252 test(s), 86.30%" style="width: 86.30%" class="gauge-meter passed"></div><div title="False 40 test(s), 13.70%" style="width: 13.70%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 252 test(s) &#x2259; 86.30%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 40 test(s) &#x2259; 13.70%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS NE</h2><p >A total of 262 tests have been executed in section BSI Benchmarks SiSyPHuS NE.</p><div class="gauge"><div title="True 223 test(s), 85.11%" style="width: 85.11%" class="gauge-meter passed"></div><div title="False 39 test(s), 14.89%" style="width: 14.89%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 223 test(s) &#x2259; 85.11%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 39 test(s) &#x2259; 14.89%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHus-BSI</h2><p >A total of 7 tests have been executed in section BSI Benchmarks SiSyPHus-BSI.</p><div class="gauge"><div title="True 5 test(s), 71.43%" style="width: 71.43%" class="gauge-meter passed"></div><div title="False 2 test(s), 28.57%" style="width: 28.57%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 5 test(s) &#x2259; 71.43%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 2 test(s) &#x2259; 28.57%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHus-BSI Bundespolizei</h2><p >A total of 275 tests have been executed in section BSI Benchmarks SiSyPHus-BSI Bundespolizei.</p><div class="gauge"><div title="True 189 test(s), 68.73%" style="width: 68.73%" class="gauge-meter passed"></div><div title="False 86 test(s), 31.27%" style="width: 31.27%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 189 test(s) &#x2259; 68.73%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 86 test(s) &#x2259; 31.27%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol></div><div class="tabContent" id="foundationData"><h1 >Security Base Data</h1><div id="systemData"><h2 style="margin-top: 0px;">System information</h2><table id="summaryTable"><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-UTMU75K.fb-pro.com</td></tr><tr ><th scope="row">Domain role</th><td >Member Workstation</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 10 Pro</td></tr><tr ><th scope="row">Build Number</th><td >Version 21H2 (Build 19044.2251)</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr><tr ><th scope="row">System Uptime</th><td >0:02:03:14</td></tr><tr ><th scope="row">Free disk space</th><td >40.4 GB</td></tr><tr ><th scope="row">Free physical memory</th><td >24.8%  (5.1 GB / 20.7 GB)</td></tr></tbody></table></div><h2 >Table Of Contents</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#Security-Base-Data">Security Base Data</a><ul ><li ><a href="#Security-Base-DataPlatform-Security">Platform Security</a></li><li ><a href="#Security-Base-DataWindows-Base-Security">Windows Base Security</a></li><li ><a href="#Security-Base-DataPowerShell-Security">PowerShell Security</a></li><li ><a href="#Security-Base-DataConnectivity-Security">Connectivity Security</a></li><li ><a href="#Security-Base-DataApplication-Control">Application Control</a></li></ul></li></ul><h2 >Security Base Data Details</h2><section ><h1 id="Security-Base-Data"><span class="failed">Security Base Data</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><section ><h1 id="Security-Base-DataPlatform-Security"><span class="passed">Platform Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-001</td><td >Ensure the system is booting in 'UEFI' mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-002</td><td >Ensure the system is using SecureBoot.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-003</td><td >Ensure the TPM Chip is 'present'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-004</td><td >Ensure the TPM Chip is 'ready'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-005</td><td >Ensure the TPM Chip is 'enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-006</td><td >Ensure the TPM Chip is 'activated'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-007</td><td >Ensure the TPM Chip is 'owned'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-008</td><td >Ensure the TPM Chip is implementing specification version 2.0 or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataWindows-Base-Security"><span class="failed">Windows Base Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-009</td><td >Get amount of active local users on system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-010</td><td >Get amount of users and groups in administrators group on system.</td><td >Amount of entries: 2; 
+ </td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-011</td><td >Ensure the status of the Bitlocker service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-012</td><td >Ensure that Bitlocker is activated on all volumes.</td><td >Bitlocker is not activated on all volumes.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-013</td><td >Ensure the status of the Windows Defender service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-014</td><td >Ensure Windows Defender Application Guard is enabled.</td><td >Windows Defender Application Guard is not enabled.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-015</td><td >Ensure the Windows Firewall is enabled on all profiles.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-016</td><td >Check if the last successful search for updates was in the past 24 hours.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-017</td><td >Check if the last successful installation of updates was in the past 5 days.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-018</td><td >Ensure Virtualization Based Security is enabled and running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-019</td><td >Ensure Hypervisor-protected Code Integrity (HVCI) is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-020</td><td >Ensure Credential Guard is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-021</td><td >Ensure Attack Surface Reduction (ASR) rules are enabled.</td><td >Compliant (12 rules enabled). For more information on ASR rules, check corresponding benchmarks.</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataPowerShell-Security"><span class="failed">PowerShell Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-022</td><td >Ensure PowerShell Version is set to version 5 or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-023</td><td >Ensure PowerShell Version 2 is uninstalled.</td><td >PowerShell Version 2 is supported.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-024</td><td >Ensure PowerShell is set to configured to use Constrained Language.</td><td >Language Mode is not set to 'Constrained Language'. Current configuration: FullLanguage</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-025</td><td >Ensure Execution policy is set to set to AllSigned / RemoteSigned.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-026</td><td >Ensure PowerShell Commandline Audting is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-027</td><td >Ensure PowerShell Module Logging is set to 'Enabled'.</td><td >PowerShell Module Logging is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-028</td><td >Ensure PowerShell ScriptBlockLogging is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-029</td><td >Ensure PowerShell ScriptBlockInvocationLogging is set to 'Enabled'.</td><td >PowerShell ScriptBlockInvocationLogging is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-030</td><td >Ensure PowerShell Transcripting is set to 'Enabled'.</td><td >PowerShell Transcripting is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-031</td><td >Ensure PowerShell InvocationHeader is set to 'Enabled'.</td><td >PowerShell InvocationHeader is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-032</td><td >Ensure PowerShell ProtectedEventLogging is set to set to 'Enabled'.</td><td >PowerShell ProtectedEventLogging is not set to 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-033</td><td >Ensure .NET Framework version supports PowerShell Version 2 is uninstalled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataConnectivity-Security"><span class="failed">Connectivity Security</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-034</td><td >Ensure system is configured to deny remote access via Terminal Services.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-035</td><td >Ensure system is configured to prevent RDP service.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-036</td><td >Ensure NTLM Session Server Security settings are configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-037</td><td >Ensure WinFW Service is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-038</td><td >Ensure NetBios is set to 'Disabled'.</td><td >NetBios is 'Enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-039</td><td >Ensure SMBv1 is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Security-Base-DataApplication-Control"><span class="failed">Application Control</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-040</td><td >Ensure Windows Defender Application Control (WDAC) is available.</td><td >Only supported on Windows 10 Enterprise.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >SBD-041</td><td >Ensure Windows Defender Application ID Service is running.</td><td >AppLocker is not running. Currently: Stopped</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="riskScore"><h1 >Risk Score</h1><p >To get a quick overview of how risky the tested system is, the Risk Score is used. This is made up of the areas "Severity" and "Quantity". The higher risk is used as the overall risk.</p><h2 id="CurrentRiskScoreRS">Current Risk Score on tested System: </h2><div id="riskMatrixContainer"><div id="dotRiskScoreTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div><div id="calculationTables"><h3 class="calculationTablesText">Risk Score Calculation</h3><p class="calculationTablesText">The calculation of the Risk Score is based on the set of compliant rules at the quantity level and also at the severity level.</p><table id="quantityTable"><tr ><th >Compliance to Benchmarks (Quantity)</th><th >Risk Assessment</th></tr><tr ><td >More than 80%</td><td >Low</td></tr><tr ><td >Between 65% and 80%</td><td >Medium</td></tr><tr ><td >Between 50% and 65%</td><td >High</td></tr><tr ><td >Less than 50%</td><td >Critical</td></tr></table><table id="severityTable"><tr ><th >Compliance to Benchmarks (Severity)</th><th >Risk Assessment</th></tr><tr ><td >All critical settings compliant</td><td >Low</td></tr><tr ><td >1 or more incompliant setting(s)</td><td >Critical</td></tr></table></div><div id="severityCompliance"><p id="complianceStatus">Table Of Severity Rules</p><span class="sectionAction collapseButton" id="severityComplianceCollapse">-</span><table id="severityDetails"><tr ><th >Id</th><th >Task</th><th >Status</th><th >Severity</th></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td ><span class="severityResultNone">None</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >7.9 A</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 40/128)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >7.9 B</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 56/128)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >7.9 C</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 64/128)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >7.9 D</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 128/128)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes' is configured</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.58.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr><tr ><td >18.9.58.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td ><span class="severityResultTrue">True</span></td><td ><p style="margin: 5px auto;">Critical</p></td></tr></table></div></div><div class="tabContent" id="references"><h1 >About us</h1><h2 >What makes FB Pro GmbH different</h2><h3 >What do we want?</h3><p >Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet.</p><h3 >How do we achieve this? </h3><p >We implement in-depth IT security for our customers. And we always do so in a state-of-the-art, efficient and automated manner.</p><div id="referencesContainer"><div ><h2 >Check out our hardening solution</h2><a href="https://www.fb-pro.com/enforce-administrator-product/"><img width="125px" height="200px" src=" data:image/jpeg;base64,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"></img></a></div><div ><h2 >Check out our Audit Report Tool here</h2><a href="https://www.fb-pro.com/audit-tap-product-information/"><img width="125px" height="200px" src=" data:image/jpeg;base64,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
+	0nEMrtLVsbfaNrQ/IeS5bwh1hMaQBLeRxKS43ovUt8SQSHDxnkpDxPmBJ5g2qdFTdLvkF9uGQrVGV2sq13ZhoR4IX2hAXFfYbWHNPOTxJ0GtEqjdi5LXyz3e4v8AqeMRmZmat5U5kUN+4faU1lN4euXq8uO6gx0qQ29wJW2raQNdlFRZfdyyOOi1xrbfYLFtXiMa2X23NreYKL6ibZFyp8N5tHGlMmNahxa6KDqUrHprICcZ1ytyi95FEyS0TvWnOXcO3yeXLd0lGXMnXFu6JuU5MqZI1Wwl1MZiOFhSiUFYV5tBqHcQzpjllkfJ1rF5ravXn5tpz63y4AjSkSb+i5B4tvOl9uYlpxSl8bCm+NBIUpKkghC7jy5zrHeY96vzz2XZba5ORrlM5XHttju1xkRnMet8QB2I6ywx2SXmFtFSWg4OEdepCwOaFm5gzeYOLZrYMcZu9h5VN2+5QYSluJuEuVcJnZ3YW9pCFIcW3bUFspWpA1cISSaFVVZ7YcjnYanGo+P3t6XglqzVrJEpgy+yfRc7rHVD9UcDfDL9YY4nEpZKyEBXEEnzaDbv40xduYNhtdlst0hckrnfZarJZuzuVsY7ZGN3Fyc600osPsRlSRH7MHgQXkrLY26kDDH4eHK5AmTcZV1mZFYrMzNwyRebp9sx7ndNQ7eURHXlpmMq85MtD2xlDYWjTzkqCUZnnt3tsXLLRb8ncYyi05Vkj67Uh5Bms2WPjcu4RnQ0rVQjoc7FxKtOHi0GuuyiURO059m96uGH4XkGaysYvbE3HbRmV2tvqrCnjJtF+uLc1hU1h5tKZ7cWI6rzSAoLbGmiqKsV6/5lfOXuI5Bac7XbprmVN2F6/wAC329+PeYL19FpanBqS08lHaMjtU9kUpKla7UcIoIo9zoyixK5iJuclM049Bun2I5cLYITCpzd/FitvYOsLBlsqUoKlEJBbVoAoBYABpnvE3lQt8h20Qfs664jZJ8WehDqm2shmTZceXEeUF7GVtwXixsCuJHConiSKDnZJz1yTFGJAubWNMXxN9nwX8UnouEGXBYiwpk2LFWvV31p+emMlMZ5lvsllR4UKKdKCZT+djcGfmUByyxYTmNW60S4SblcURSt+c7DZnszSlt31ZMBdwjhxeitdVaDzaJRpIneLt0qLkMoY0jix3H3L8q3N3eOZtyQ2ua2n7JYW2j1ph0wuJt/iQkocQopG2ipC7zthvy7WzjuH3TKYl4u8Gxw7jElW9hHrk+1JvDaSmTIaUAlgqCz0LQU79KCbcvs4Z5hY8zksSyTbJb5nCu3InPQ3XH2HEBaHQIciQG9QdOBwpWDvSKCcUBQFEok2KafaL2z/s6vrJoQsKio/kv7uT/bI8hoIHQB3GgXvA1ojHCOiiqt5z3GbaOXd1mwJ7ltkC42NhUxqYq3KDMm8QmH0+uI85gLacUhSx6IJNB1rxTLcovvMTAsdl5NeZFuhRMjNwhRcsaiNKXCyZiPHUbi4lIvLbER4M8QAU55wI4waDiYrzO5jRjFky7xf5abmu3XD1G8LgyBc0u5eLYv7G9WQpTMcxwY7jbxCwpbSkIG1ZCz4mX5vA5XYDzXXk1yy2fzCn4kqbikKJbvUmG7zNYTLhWtCmmHAtCHVMavyFK1BUSlVCjkDOeYd/k+sW27O4U05zObwhNhutnhyJDMN+AzJDr3A+v86lalacLhSUqGu0UG25c59mV/xbPcmvkxMpzH15Gzaof2E9AhhVlnTorK25xfWmVxpipLiUBPCSfBQaKxc/pU1q1wLhbT9v3W/wCIWtkMWy4m3+rZBb7VLlLVOShcZDraprvZpW6DoEApJPnBDofegvb9ksNwci4hxXu5WyDIvipF0ZtdtXcbbcLgqHMCWH3zJZ9SQkloKbIdSrzdCKC4MU5wPZFzDlYE7abfxs3GfbRKt89UiSz9nQYkxc2VEWw2WYrypQaaXxklfCCnztgbGxczb5f7xjMCLhLYt2Ss3OXGuqrugOMMWic3AlKXHMYaq43EqQlK/OGupBolD965oG1XrNrczi8u6QsBiR5mTz2Z0RElDT7Tckut29xYfcZbaWVF0eaVIWhOqk0Uyzzdt1zvDFpxvGr1lSpP2i8zPgGC227Bt8j1N2cx63LYU+y5ISptJaCiQnjUAhSFKDW2jnFZL3MhRUcv8tau13m3Syxob1thOPOKsznZ3FKlNTHE9lHcOitVaEnzQobaDmyc/wCUWQ26I7cl267wLllMnDGGp1t9YSu9WlUhDkdTbjK+ENdk4UOKARooFJ88ahM7DeMfzSzRJ9vt8hVoQuNItzdytkiAD2QbkRXmGZbTRKU+YptaBoCNh1FBylYtjSpUGcbFD9ctkl6Zb5QbAWzIkPiU86kj5S30hwn8IcW+iNPO5bYHckXhEzF4UgZBKjTb1xhesiRDmruMd1RCgQpuU4t4aaeco9elCpMHl3i1uyBGVNw5UnI2Xi81eZs6XMfQCy+wllKn3V8LKESnuBseakrUQNdtFq1TvKXBnZUaeLWtm5R7nNuzl0bc0kyJFwmNTpAkukFTrZeYbKUKOiQlIToBQaJPJHH2DkjMHIb5AtGWRXod6sTa4a46mnH5chAaW7FW80GVzXAgIcACQlJBA2ht4fKbGrbd13a3PS4XaZr/AL6XAbLfYJuCrc5bnGW08AKGVh1TpAOvaE6Hh2UGy5cYK1y6xtjGY86NcIkMIREks21i3OqQ22lsKlFhSg+6QnznSAT1URPaFRRaigk2KfvJ79nV9ZNBYVBH8l/dyf7ZHkNBA6AO40Dg3CgKBmRHjy2XI0uO1LjPJ4Xoz6EuNrT1KQsFJHjFBpLjiGI3gW5N3xOy3UWjQWgTLfGf9UCVBQEftG1dlooAjg027aB5eNY8tUBSrFbiq1nW2H1Voern1hEvVrRPmfn2kO+b8tIVvGtBpYvLvBIE6ZcoWIWqJOnzW7jMfZjpQHJjT4lIkFA0QHA8A5xAa8XnHbQbY43YC725tEbtjeEZAXQkgm6NtBlEw6Ha4G0hOp6BQaW0cvMSsLd9YtMCTEh5ImaLtbTcJzsRRuLrj0tTUZ19bTKnXHVqUWkpOqjQJh8usRgW5Fph25yPb27naruhhMh06S7I1FYgq4lKJ0bbhMpKddFcPnakmgjcvkvirysXftt0v2OXDDo9vi4/dLXNQl9pFsjzYkYq7dl5C1Bm4PoUVJ2gj8EURvLTy3sVmvcTIo0u4vXeNd7henpbzyFesyLpDYhSkvhLaQW1JjNuBI00cTxeChVm38ucfgItMdReuEO02682wQZnZuNSI99ltzJSXk8A4tFthKRu4SQdd9Fat7lhHfzCwZIbozGtGJQJcDGMah22NHMdqbFMR5l6akl16NoouJYKQkOcKiTwpADQv8n5P2Xylx6Ff4EazcrmbUhi4m1f50V2stA+oTkSUpholttBmQjs1hTZUnp2BwrpyYkSZ2LXBmXZbsvG8nyfIhAvcKQ5HWcjl+tJSj1d9tSHI2miVkkK38IoIpA7tr1vuTd2RlaHXkzY92XA9XWiKLoq5ql3CclPGo9pIiNx423d2ZV8vYSq4eWmLXPDsXh4/c40Nly2sx47b0K4zrgh8Mx22VOn19CVM8RRqGkEoHRRVgdVAe5QYolBoDvG2gwU9XvUKkkEUVigKDOtEoKCTYoP8xeP/wBur6yaCwaK018jqkw0tpUEntUqJPgBoIwm0J+W+T81IHl1oOQm1xBvSpZ8Kj8WlA/9nxP6r4T/AC0CTbIh+QofSNEJNsjfgq/KotSDbI2vyx7v/CgSbXH6FuD3R/JQJ+ymuh5fvCgSbS2f6ZQ+iP5aIQbOOh8/k/8AGhUg2k/1/wDN/wCNFJNpX0Pp90GgSbU90Oo+GgT9mP8A4SD7p/kolGPsuT0FHv8A/CgSbbKHQk/SotSDAlD5AP0hQJ9Slf1Xwj+Wgx6nJ/qVH3qFCDDf6WFjwgUQ2qJIG5pZPzTQqbLD43sLH0TRSS270tqH0TQY4Vg+ioHwigwdemiUJIQfB4aBJT1HWhUnwUUUEmxT94u/s6vrJoLCoOFcP0H0h8dBpKAoHKAoCgNB0igTw9RojBBFFYoCgKJRjhHioE8J8dCrFFFAUBoD0URjh6qFSNCKKKAoM60SjGg8VAkg+OhUnQbiKKSUoO9CT7goMdm3/Vp/JFBgtMne0g9fmiiUIMWMf6FH5IoNpZo7TUpakNpQS0Rqnxii1Seg4Vw/QfSHx0GkoCg5FCjGgoElJFCrFAUBQY0B6KIxw9W2hUnTSiigKA37xRKMcI6KBJBFCrFFFAUKAp6xpRCSnqoVJoooCgPcolGOEdGygSQRQqxRRQbS1f3hf9mfKKCQUHCuH6D6Q+Og0lAUHIoCgKA376DHD1UQkgiisUBQFCjGgPgojHCfHRak0BQFAHTQk6AAalR2AAbyTRHV3mb3nMYxFcm1YlHRl98Z1Q7KCym3MLB0IU4nzniOpvZ+NXVj0t122dkNd2WIdMcs7xnOC/vvLTlr1giubEW+zoTEbQOoLAU6fGV1126fHbG5qnJdKt2Od3OCyyPWLfzJv6XAfRfmLkoPjbkdok+9WU4bJ6ITjnrdr+UPfWjTJMfH+cDMe1uO8LcbNoTZRHKt3/Ox08XZ6n5bfmjpSkba5cukptt9Tbbl63f+NKjTY0ebCkszYUttLsSZHWl1p1tQ1StC0EpUD0EGuKYo2nSAfBQY4T46FSaKKAoUGw7xRKMcPVQq2NqBEhf9mfKKKkFBwrh+g+kPjoNJQFBzBuoMcI8VEJ4T46KxQFAUBsO+iElPUaKxoR0UGKAoCiUY4R16UHFmSo1viyZ06Q3EhQ21PSpTqglDbaBqpSidwAqxFdkFXn/zn553HMVysexh522YkklD7ydW37iNxLm4paPQjp3q6h6GDTxbtne0X5K7nVCUNOLxbK62uXGteM3vKJZh2WEqUtGnbvnzWWgelxw7B4t/UKxmYjekRVdFk5G4/CSh/IpDl9lg6qjIKmYo8Gg0Wv3SPFWmckzuZ8KXnAMHbQUJxG08GmhCoyFHTxqBNY8U9aUT7AMif5ZqREx9gM47xKU/jIWoRPOOqlsoOoZWetAAPyga132Rfv3srb5tdyMcyO15Ta2braneNlfmvsK2OMuAec24Ogj3jvFcd1s2zSXRE1b6sVFEoxwjroE6GisUBQbK1/p1/MPlFBvqDhXD9B9IfHQaSgKDmDcKAoCgN++iUY4RQJIIorFAUBQY0B8FEY4T0baFSdNKKKDoxz15pryiU9itikEY1bndJkhB/v0hs79m9tB9H8I+d1V6OmwcPxTvaL767HViXoQfdrqaZbDE8GmZfLUtSlQ7RFUBMnaaknf2bQO9RG87h09VYX38KxFXZO3WiBZYTFstURMWK1oG2kDVS1HZxKO9Sj1nbXPWZ2y2Qn9r5b5Hdgh11tu1R3NqVyiQvTwNJBUPd0rCb4hlFsy20rkvdexUqHe4sh8eiy42toKPVx6r090Vj82EmyVGzGVx5EuG+ns5MJ5yPLZO9t1s8KknwgitkTE7muYomnK7KlYzkrbTqlrtl60izGEkbHCfzLg12ahR08RrXnittepnimeKI63aFzKACQ3BJ6ipenwAV5k5/Q9ONL6XCXlEzXzIzKPHxH4xWPz5bI0tvXJk5PcRubY8XCr/AOKp8+5lGks9Jactlp9OKyseAqT8ZqxnnqYzo7etzEZdHJ/PQXED8JCgr4CBWUaiOmGE6KeiW2jXy1SjwolpaX+A8OA++dnw1sty2z0tF2DJbvj1JPa/06jvBbOh6DtFbGpvqDhXD9B9IfHQaSgDuNBsOgUGCkdFAkpPjolWKKKAoDQGgTw9VBjQigxQFAUSiheeWdqsFnGNWp8t3i9tH111CtFx4Z2HxKd2pHg18FdOnxcU1ndDXkupsdEJg04hpoBu8Vela0QRj+NSsouiILOrUVv85cJYGxprXo6OJW5IrDJfFq0q7P2myIaRDslkh8LbY7ONGR0DpUo/CpRrk4qzWWcL3xrEbfY20yXUpl3MjVctQ1DfgaB3ePfWN0sohLFzmGtAnV1fUN3v1ouviG22yZMKmynASk9mgbwnoHhNaLr5lvtsiN7pvznQcd5gRrkkcEHJIjTs0dCnW1Flbh8I0STW3BkmGrPYiy1LaPaNq0cbIW2odBSdQa7t7imXbaG/63ChyztMlht06da0hR8teBdFJmH0OO6sRPWfUN2ysWZk0WDRFGRo1Amip3gLz32rIYLqyyIqlBoqPCCFpGoHu1v087XHrLY4Yn0rcrree4Vw/QfSHx0GkoA7jQbAbhQFAUBvoMFI6KIToaKxQFAUGNAfBRGOE+OitfdLlEs1unXWevsodvZW/IUfwUDXQeEnYPDViKzSEmaPOvKr3MyS83K9zie3uDynOz11DaNyG0+BCdAK9Sy3hijmmaygEhp191thhBdeeWG2W071KUdAB4zWbF2IxfG28etjNvaSHZ0ghc51A1LjyvkjrCfRH/GubJdxTVsiKL8x+0MWCKVO6O3SUAZKh8gbw2D0AdPWa0zdRnbZMtyp9170z5o3IG6tF10y6ItiCQOmtcs4eXffB5+Zq1zbxHl9yjv0y1XnC5KEyJFuc0VKvdy4WkRHEEFDiG21JSUrBTxLVqNlfM8z1t/z4x45229XXPQ/XvJXlzTTy/JqdbZE25I2V6Mdm3ijpiZnpjoiOt2P58Q75Gxzlm1lUyPcsqZtzzGR3GI0GWHpiW4/brabGxKC5roBX0mni6Lfi39Pa/J9fdiuy3ThiYsmZ4YnbMW12VnrohNvcMi1QHidS5GbKid+oGh+EV6dk1iHkX7Jds8YUpWN2JSt5gMfAgCvFz+O7te5gn/Dt7G7O6tLeYIosE1GRsga7qoaKSOmoqa4D++ZH7Iv66K36fxOXWeCO1cFdbzXCuH6D6Q+Og0lAUGz6BsoDhHRQJIIoVYoCgKA0BohPD1UVjQigxQFB1/575EY9vgYxHd0XcD63ckj+pbOjST85YJ+jXVprNvE1ZJ6HUKYNOLTw13NKVcvbCJM1++yW9WoJLUEEbC8oecr6APvnwVryXdC2w7DY5C1fVcXE7GTpF1/D6VDxdFc191G6y2u1OE79u3XfWiW+1yhWtkr/mxzBg8reXeTZxNCXF2mKU2qKSAZE549nFaAO/VxQKvxQTXJrdTGnxXZJ6N3b0PV5Jyy7mWsx6e38U7Z6rY23T6vbR5q9ynl3cOZHN6+c3csLlzYw11c716QniEu/wBwKylZJ2EspK3dm5RRXzXJsM5ss5bttPbdL9Z8+cys0Ggs0WH4fmRSkfhx2/fst7Ku4HeXmhd1xm3BWpiwX5DieovOhI+BuvrsT8Ry71cWPVNht2vRH198k16GPww8/JvdxbKz6vZLMzu7ODHT7vZp1rxMs1vnte7iilkdkNnoCK1tsGlo27KKZIIoyqQqimz11FTTAv3zJ/ZFfXRW7T+Jy6zwR2rersea4Vw/QfSHx0GkoCg2g3CgKAoDQGgTw9VEY0NFYoCgKDGg8VBjhNB0W5h3k37KbzcEuFyP25YhHqZZ8xGnj0J92vSxW8NsQ5r5rKrZKFurS02njcdUENp61KOgHv1uYuwVntAtlut1pYSONtKUOEfKdUdVq91RNck3VmrOIWtGjtx2W2EDzWkhIPWek+6a1S6YikOagbfDWuWUTRyUgnYKwllV5Yd9/mW5lGX2jlbY1mXCxJxLl1ZaGpevMoBCGRt2lptQTp+EtQ6K+M5/q/m5Yw27rd/5p+77X7R9POUfy2mu1mTZOTd6MdvT+qdvZEPQDkHyxa5R8rcbw9baE3hLZn5S82eIOXOVop/zukI0S2nwJFfQ6HS/y2G2zp3z2vzfzDzaeaa7Jn/Dus/JG717+91q55XZN2zy9Fra1bEt29sjpLCfP/nqVXpWRSHzl81ucmzW9x9NntSB+dfEeNp1FXCk+Wu7ZbbWeiHJw8V1OuXcUtpbbQ2gaIaAQ34kjQfAK8De94gdVGUBW6opg7KLBpQ6KjI2R0UEzwMaXiR+yK+uit+n8Tl1ngjtW7XW85wrh+g+kPjoNJQFBt9BpQY4erbQJ0oCgKAoMaCgxwno20Qmiig0OU3P7Hxy9XIHz4sRzsf7RY4EfzlCsrIrdEJM0h0LmjeDt06a9OHKexC2CfkLDi08TNvSqS5ru4hsR/OIPuVMl1LViNrsDZY/aTFPKGqYydQfxlbB8Gtcsy22RtS4bz4awlvPN793VWEiFczM7h8tMFyLMpYQ65aYxFsiLUE+sTHfMjtDXfqsgn8UGuDX6qNLhuyT0bvTPQ9bknK7uZazHp7fxTtnqtjbdPq9rzW7qWAS+Z/OOZneTFdyg4c6b7dJL6eNMu7yVqMZKirYSlfE8R+KK+Q5Hp51OonJfti3bPpund979g87cyt5by6NNh+GcnwREfhxx4vZS3vesN6u7Nhsl0vMhQCLdHW+OL5SwPMT4eJRAr7alZo/D60irztcRIvN6bXKV2z82UqRMcO3UlXaOE+PbXVbbWYhy3TsmV8cvLcLhlMZ1aNWrchctZ6ApPmt6/SVr7lZ6y/hxz6dhpLOLJHo2uyB2jSvGewa4R/xoEFOyoyMqSfH4aLBhVRkbV10E0wP97v/ALKv66K34PE5NX4Y7Vt11vPcK4foPpD46DSUBQbgbhQFAUGNB4qBPCfHQYoCgKAoMEA+CiKw5uylRsOdZSdDPlsMnwpSS4fqVuwR8TG/c6dTflV3Q55TjAIgRCuM4jzpLyWUfNaGp+FVa8s7oZWrlsjXDEU5ptecPvJ2D4655brNzq1zT52ZFYM5VFxSYybZYG/VZ8V1AdYlyCQp7j3EcB8wFJBGh66/OudeZ8+HWzbgujhs2TG+Lrun1btnpfrnlvybptTy7j1Vs8eT4omJpdbb+Gnb4prG3Yn2Dd5DB8lWxb8hcGHXpw8ITLXxQXFdHBK0ATr1OBPjNe3y7zTptVS3J/h3enw9133vn+ceRNboq34f8Wz0eOO23p/TXsdW++PzIRkGQ27ALRK9YtWLgSrr2WikPXJ9HmJSRrxBppQA0+UpVeP5l1/zc0YbJrFu/wDNP3R732f085LOm092ryRS/Jstr0WR7uK72RDub3e+Wg5W8sLJZZTHY5Bdv82ykk6kTJKU/mteplsJb8YPXX03KtH/ACunttnxTtntn7tz888084/1PX35LZrZb8Nn5Y6f1TWWu54ZGExomLRXTqspmXUDqH6Fs+7qojxV6uO3pfNZZ6IUBj8Lz5NwWN35lg/Co+QV1Yo6XLknodn+WNn9Tssi6OJ4Xbs5q3qP6FrVKffUSa4tbkrdTqd2ispbXrWORp01wu00rYeqik1GUGzQMqAOwioygwpNFTHBBpeH/wBlX9dFb8Hicmr8Mdq2663nuFcP0H0h8dBpKAoNyBsHioMaUBQFAUBv30CSnqoMaGgaceaa/SOJT4NdvvVJmIWLZlrXrmBsZQSfw1bB71YTf1NluLrUvzbdddtFtU4sr1mHXXdsbVuFb9JNb57GGpiItinW60TflV6TiWxiUYMY5A02Kf43lfTWdPgArnyT8TOFn25s/ZjKUrLSloUQ4nTiSVE6KGoI1G/aK03RWrfjmlNlXTDmHyAyy3iVdMefOWRFKU6+wlPBcAVElSi3tDu3aSg6/i1+Xcy8o6nBM34p+bG+f7/q6e71P2rknnvR6iIxZ4+Tduj/AOP0bd9vfs9LqBd2nGXH477SmX2VFD7DiSlaFDelSVaEEdRr5u2Jtmk74foOO6Loi6JrE7pWT3beXCOYHNGDIuDAex/DQm8XVtaSpt1xC9IjB6POcHEQfkoNfSeX9F/M6mJnw2bZ+yPX7nzHnXnH+n6C62yaZMvwW9cR+K7ujZ2zD1Wv95jWG2SrrLPGGh+Za18511XooHjO/wAFfpNJmX4DWkOlt8kTb3cpEuQvtptxeK3VDdqrqHQEjd4K3xHRDRM9MpNY7EudMt9jig/nl
+	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
+	xxW+6I7ZiPesa2cjudV57P7L5Q5nNDunZqRY5wSddx4lMgfDW63S5bt1k+qXm5efcuxePUYo/Xb960rH3Ku9Dfyn1blJcLchen5y6yoUEDXTel6QlY3/g1vt5bqLvweujydR545Nh36iJ/LF13uiiy7V7OPvMT3EpmW/GrG2fSdl3cOae5GZeNbreT6id9I73mZfqVyeyPhm+7st/7pha1m9lpzHfCTf8Amnjds1HnIgQpc0jds1dMXyVvt5Hk6boeRn+q2kj+HgvntmLfdxLJtHsrLKhSVZBzmuElIPnNW20Mx9R4FvSH/q1ut5FHTf7HmZvqxkn+HprY7bpn3Rate1+zK7v8NtIud5zG9PD0luXGPHSfosRUae/XRbyXBG+ZnveTl+qPNLp+G3HbH5Zn33Ssux9wXut2UJ7Tl67fHE/0l1uk9/XxoD6Efza3W8q09v4a9sy8vP8AUHnWX/O4fy22x9lVqWzuw93i0JbRB5L4egN+ip21R31e6p5CyfdNb7dFgt3WR6nk5fNPNcvi1OT9qY9y0LRhmH4+EpsOKWeyJT6It8GPGA8XZIT11vtx227oiO55WbW5838TJdd2zM++UlrNzCgKAoCgKAoCgKAoCgKAoKX5td3rk9zvgKh8x8Ig3qTwhMa+tpMa5McO7sprPA8APwSopPSDXPn0mLPFL4r73scq5/ruV3cWmyTbHVvtnttnZ373k1zp9lZlNpMq8cjssaymDxLcTiF/UiJPbRvShmYkBh49Hnpa8ZrwdTyO6NuKa+ifv/5P1fkv1TxZIizXY+Gf71u23vt3x3cSm7J3A+9Ld22luYFDsaFJHnXS7wWyNnShl15Q96ua3lWon8NO+H0ef6hclx7ss3fltu+2IWXZ/Zl8/p6v81v+HWFHSVTJcpXuJaiAfzq3W8lzTvmI/wCOx5eb6ocrs8FmS7uiPfctiz+ysuy2wcg50RYznS3bbIt0flvS2/q1vt5FPTf7P7Xk5vqzZH8PTTPbfT3Wysiy+y05axilWQcz8nu+npIhMQoKT+W3JI9+t1vI8cb7pn1PMz/VbWXfw8GO3tm677bVq232cPdmgpSJNryK8KT6S5l5fSVeMRwyPeFdFvJ9PHRM97ycn1L5xfuust7LI+2qzrN3LO69YyhUbk/aJjiNzlyXJuBPjEp50fBW63lunt/BHveVn8785zb9RdHZS392IW1bOTfKOytoatPK7E7ehv0AxZoSCPdDOtdFunxW7rY9UPIy8612Wa358k9t933p9Dt8C3NBi3wo8FlOxLMdtLSR9FAArbERG559+S6+a3TMz6XLqsBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQFAUBQf/Z"></img></a></div></div><footer ><h3 >Contact us:</h3><p >FB Pro GmbH</p><p >Fon: +49 6727 7559039</p><p >Web: <a href="https://www.fb-pro.com/">https://www.fb-pro.com/</a></p><p >Mail: <a href="mailto:info@fb-pro.com">info@fb-pro.com</a></p><h3 >Can we help you? </h3><p >Do you need support with system hardening?</p><p >Our team of system hardening experts will be happy to provide you with advice and support.</p><p >Contact us for a no-obligation inquiry!</p><a href="mailto:info@fb-pro.com"><button id="contactUsButton">CONTACT US!</button></a></footer></div></div></div><script type="text/javascript">						function collapseHandler(e) {
+							var targetSection = e.target.parentElement.parentElement;
+							if (targetSection.classList.toggle('collapsed')) {
+								e.target.innerText = '+';
+							} else {
+								e.target.innerText = '-';
+							}
+						}
+						var collapseButtons = document.getElementsByClassName("collapseButton");
+						for (var i = 0; i < collapseButtons.length; i++) {
+							collapseButtons[i].addEventListener('click', collapseHandler);
+						}</script></body></body></html> 
\ No newline at end of file
diff --git a/Samples/Microsoft Windows 10 BSI_20220905_134713.html b/Samples/Microsoft Windows 10 BSI_20220905_134713.html
new file mode 100644
index 0000000..f1e61b3
--- /dev/null
+++ b/Samples/Microsoft Windows 10 BSI_20220905_134713.html	
@@ -0,0 +1,30 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows 10 BSI Report [09/05/2022 13:49:59]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	margin-left: 8%;	margin-right: 8%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;	background-color: lightgray;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 50%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}#navigationButtons{	margin-top: 15px;	display: grid;	grid-template-rows: 50px;	grid-template-columns: repeat(4,160px);}button{	margin-left: 10px;	border-radius: 8px;	font-weight: bold;}#riskScore{	font-family: Arial, sans-serif;	text-align: center;}#riskMatrixContainer{	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	left: 10%;	float: left;	margin-top: 50px;	text-align: center;}#riskMatrixContainer div{	border: 1px solid black;}#severity{	grid-column-start: 1;	grid-column-end: 2;	grid-row-start: 1;	grid-row-end: 6;	position: relative;}#quantity{	grid-column-start: 2;	grid-column-end: 7;	grid-row-start: 6;	grid-row-end: 7;	position: relative;}#severityArea{	text-align: center;	position: absolute;	margin: 0;	top:50%;	left: 20%;}#quantityArea{    text-align: center;    position: absolute;    margin: 0;    top: 35%;    left: 40%;}#severityCritical{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 1;	grid-row-end: 2;	padding-top: 20px;}#severityHigh{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 2;	grid-row-end: 3;	padding-top: 20px;}#severityMedium{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 3;	grid-row-end: 4;	padding-top: 20px;}#severityLow{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 4;	grid-row-end: 5;	padding-top: 20px;}#quantityCritical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityHigh{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityMedium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityLow{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#riskMatrixContainer:nth-child(10){	position: relative;}#riskMatrixSummary:nth-child(10){	position: relative;}/* Color for each Risk */#medium_medium, #medium_low, #low_medium{	background-color: #ffc000;}#high_low, #high_medium, #high_high, #medium_high, #low_high{	background-color: red;}#critical_low, #critical_medium, #critical_high, #critical_critical, #high_critical, #medium_critical, #low_critical{	background-color: purple;}/* Low Risk */#low_low{	background-color: #548dd6;	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 4;	grid-row-end: 5;}/* Medium Risk */#medium_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 3;	grid-row-end: 4;}#medium_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 3;	grid-row-end: 4;}#low_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 4;	grid-row-end: 5;}/* High Risk*/#high_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 2;	grid-row-end: 3;}#high_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 2;	grid-row-end: 3;}#high_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 2;	grid-row-end: 3;}#medium_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 3;	grid-row-end: 4;}#low_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 4;	grid-row-end: 5;}/* Critical Risk */#critical_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 1;	grid-row-end: 2;}#critical_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 1;	grid-row-end: 2;}#critical_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 1;	grid-row-end: 2;}#critical_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 1;	grid-row-end: 2;}#high_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 2;	grid-row-end: 3;}#medium_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 3;	grid-row-end: 4;}#low_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 4;	grid-row-end: 5;}#severityDetails{	margin-left: 8%;    margin-top: 30px;    border: 1px solid #d2d2d2;    margin-right: 8%;    float: right;	margin-bottom: 40px;}#severityDetails td{	border: 1px solid #d2d2d2;}#calculationTables{	float: right;    position: relative;}.calculationTablesText{	text-align: left;	font-family: Arial, sans-serif;}#riskScore th{	background-color: lightgray;}#riskScore tr:nth-child(2n) td{	background-color: #efefef;}#summaryTable{	float: left;}#riskMatrixSummary{	font-family: Arial, sans-serif;	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	right: 10%;	float:right;}#riskMatrixSummary div{	border: 1px solid black;}#riskMatrixSummaryArea{	float: right;	text-align: center;	margin-right: 10%;}#systemData{	float: left;    text-align: left;}#dotRiskScoreTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#dotSummaryTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#quantityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}#severityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}.severityResultFalse{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #cc0000; }.severityResultTrue{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #33cca6;}.severityResultNone, .severityResultError{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.severityResultWarning{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	background-color: #ff9933;	color: #000;}.tabContent#riskScore{	text-align: left;}#severityCompliance{	margin-top: 25%;	clear: both;}#complianceStatusFalse{	padding: 5px 10px;    border-radius: 8px;	background-color: #cc0000;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#complianceStatusTrue{	padding: 5px 10px;    border-radius: 8px;	background-color: #33cca6;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#referencesContainer{	display: grid;	grid-template-rows: 400px;    grid-template-columns: repeat(2, 500px);}#referencesContainer div{	text-align: center;	margin-left: auto;	margin-right: auto;}#settingsOverview section{	margin-left: 5%;	margin-right: 5%;}#invalidOS{	display: inline;    padding: 5px 10px;    border-radius: 8px;    font-weight: bold;    margin: auto;    background-color: #777777;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(288.324deg); transform: rotate(288.324deg);}.donut-chart.chart .chart-center span:after {content: "80.09 %";}</style><script >"use strict";let AmountOfNonCompliantRules;let AmountOfCompliantRules;let TotalAmountOfRules;let QuantityCompliance;let TotalAmountOfSeverityRules;let AmountOfFailedSeverityRules;let SeverityCompliance;function startConditions(){    /* Default-Value: Display summary always at the beginning */    document.getElementById("summary").style.display = "block";        /* Default-Value: Disable all other tabs at the beginning */    document.getElementById("riskScore").style.display = "none";    document.getElementById("references").style.display = "none";    document.getElementById("settingsOverview").style.display = "none";    document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';    document.getElementById("riskScoreBtn").style.backgroundColor= 'transparent';    document.getElementById("referenceBtn").style.backgroundColor= 'transparent';    document.getElementById("settingsOverviewBtn").style.backgroundColor= 'transparent';    /* Initialize necessary variables */    AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent;    document.getElementById("AmountOfNonCompliantRules").hidden = true;    AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent;    document.getElementById("AmountOfCompliantRules").hidden = true;    TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent;    document.getElementById("TotalAmountOfRules").hidden = true;    QuantityCompliance = document.getElementById("QuantityCompliance").textContent;    document.getElementById("QuantityCompliance").hidden = true;    TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent;    document.getElementById("TotalAmountOfSeverityRules").hidden = true;    AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent;    document.getElementById("AmountOfFailedSeverityRules").hidden = true;    calcDotPosition();    let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse");    severityComplianceCollapseBtn.addEventListener("click", ()=>{        if(document.getElementById("severityDetails").style.display == "none"){            document.getElementById("severityDetails").style.display = "block";        }        else{            document.getElementById("severityDetails").style.display = "none";        }    })}function clickButton(value){    let buttonNumber = parseInt(value);    /* Disable all content */    let tabContents = document.getElementsByClassName('tabContent');    for(let i = 0; i < tabContents.length; i++){        tabContents.item(i).style.display = "none";    }    /* Disable all buttons */    let buttons = document.getElementsByClassName('navButton');    for(let i = 0; i < buttons.length; i++){        buttons.item(i).style.backgroundColor= 'transparent';    }    /* Re-Enable fitting content / button */    switch(buttonNumber){        case 1:            document.getElementById("summary").style.display = "block";            document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';        break;        case 2:            document.getElementById("riskScore").style.display = "block";            document.getElementById("riskScoreBtn").style.backgroundColor= '#ff9933';            calcDotPosition();        break;        case 3:            document.getElementById("references").style.display = "block";            document.getElementById("referenceBtn").style.backgroundColor= '#ff9933';        break;        case 4:            document.getElementById("settingsOverview").style.display = "block";            document.getElementById("settingsOverviewBtn").style.backgroundColor= '#ff9933';        break;    }}/* Calculate the position of the dot inside the risk matrix; Will be calleed, after the user has clicked on Risk Score Button*/function calcDotPosition(){    let dotRiskScoreTab = document.getElementById("dotRiskScoreTab");    let dotSummaryTab = document.getElementById("dotSummaryTab");    QuantityCompliance = parseFloat(QuantityCompliance);    let complianceValueQuantity = 0;    let complianceValueSeverity = 0;    /*low quantity compliance*/    if(85 < QuantityCompliance){        dotRiskScoreTab.style.gridColumnStart = 3;        dotSummaryTab.style.gridColumnStart = 3;        complianceValueQuantity = 1;    }    /*medium quantity compliance*/    else if(70 < QuantityCompliance && QuantityCompliance < 85){        dotRiskScoreTab.style.gridColumnStart = 4;        dotSummaryTab.style.gridColumnStart = 4;        complianceValueQuantity = 2;    }    /*high quantity compliance*/    else if(55 < QuantityCompliance && QuantityCompliance < 70){        dotRiskScoreTab.style.gridColumnStart = 5;        dotSummaryTab.style.gridColumnStart = 5;        complianceValueQuantity = 3;    }    /*critical quantity compliance*/    else{        dotRiskScoreTab.style.gridColumnStart = 6;        dotSummaryTab.style.gridColumnStart = 6;        complianceValueQuantity = 4;    }    SeverityCompliance = parseInt(AmountOfFailedSeverityRules);    /*low severity compliance*/    if(SeverityCompliance == 0){        dotRiskScoreTab.style.gridRowStart = 4;        dotSummaryTab.style.gridRowStart = 4;        complianceValueSeverity = 1;        document.getElementById("complianceStatus").id = 'complianceStatusTrue';    }    /*critical severity compliance*/    else{        dotRiskScoreTab.style.gridRowStart = 1;        dotSummaryTab.style.gridRowStart = 1;        complianceValueSeverity = 4;        document.getElementById("complianceStatus").id = 'complianceStatusFalse';    }    let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity);        let summary = "Current Risk Score on tested System: ";    let riskResult = document.createElement("p");    riskResult.style.display = "contents";    if(totalComplianceValue == 1){        riskResult.innerText = "Low";        riskResult.style.backgroundColor = "#548dd6";    }    else if(totalComplianceValue == 2){        riskResult.innerText = "Medium";        riskResult.style.backgroundColor = "#ffc000";    }    else if(totalComplianceValue == 3){        riskResult.innerText = "High";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "#cc0000";    }    else{        riskResult.innerText = "Critical";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "purple";    }    riskResult.style.display = "inline";    riskResult.style.padding = "5px 10px";    riskResult.style.borderRadius = "8px";    riskResult.style.fontWeight = "bold";    riskResult.style.margin = "auto";    let copyRiskResult = riskResult.cloneNode();    copyRiskResult.innerText  = riskResult.innerText;    document.getElementById("CurrentRiskScore").textContent = summary;    document.getElementById("CurrentRiskScore").appendChild(riskResult);    document.getElementById("CurrentRiskScoreRS").textContent = summary;    document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);}</script></head><body onload="startConditions()"><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows 10 BSI Report</h1></div><div class="main content"><div class="host-information"><div id="AmountOfNonCompliantRules">255</div><div id="AmountOfCompliantRules">1030</div><div id="TotalAmountOfRules">1286</div><div id="QuantityCompliance">80.09</div><div id="TotalAmountOfSeverityRules">32</div><div id="AmountOfFailedSeverityRules">5</div><div id="navigationButtons"><button onclick="clickButton('1')" class="navButton" type="button" id="summaryBtn">Benchmark Compliance</button><button onclick="clickButton('2')" class="navButton" type="button" id="riskScoreBtn">Risk Score</button><button onclick="clickButton('4')" class="navButton" type="button" id="settingsOverviewBtn">Settings Overview</button><button onclick="clickButton('3')" class="navButton" type="button" id="referenceBtn">About Us</button></div><div class="tabContent" id="settingsOverview"><h1 id="toc">Settings Overview</h1><h2 >Table Of Content</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#General-Benchmarks">General Benchmarks</a><ul ><li ><a href="#General-BenchmarksSecurity-Base-Data">Security Base Data</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-Logging">BSI Benchmarks SiSyPHuS Logging</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HD">BSI Benchmarks SiSyPHuS HD</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDSecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-ND">BSI Benchmarks SiSyPHuS ND</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDSecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NE">BSI Benchmarks SiSyPHuS NE</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NESecurity-Options">Security Options</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOL">BSI Benchmarks SiM-08202 - BPOL</a><ul ><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><section ><h1 id="General-Benchmarks"><span class="failed">General Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains general benchmarks</p><section ><h1 id="General-BenchmarksSecurity-Base-Data"><span class="failed">Security Base Data</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains basic recommendations for a secure Microsoft Windows configuration.</p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-001</td><td >Ensure the system is booting in 'UEFI' mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-002</td><td >Ensure the system is using SecureBoot.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-003</td><td >Ensure the TPM Chip is 'present'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-004</td><td >Ensure the TPM Chip is 'ready'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-005</td><td >Ensure the TPM Chip is 'enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-006</td><td >Ensure the TPM Chip is 'activated'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-007</td><td >Ensure the TPM Chip is 'owned'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-008</td><td >Ensure the TPM Chip is implementing specification version 2.0 or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-009</td><td >Get the count of local users on the system.</td><td >System has 6 or more local users.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-010</td><td >Get the count of admin users on the system.</td><td >System has 6 or more admin users.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-011</td><td >Ensure the status of the Bitlocker service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-012</td><td >Ensure that Bitlocker is activated on all volumes.</td><td >Bitlocker is not activated on all volumes.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-013</td><td >Ensure the status of the Windows Defender service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-014</td><td >Ensure the status of the Microsoft Defender for Endpoint service is 'Running'.</td><td >Service is not 'Running' (<a href="https://www.microsoft.com/en-us/security/business/threat-protection/endpoint-defender">More info</a>).</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-015</td><td >Ensure the Windows Firewall is enabled on all profiles.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-016</td><td >Check if the last successful search for updates was in the past 24 hours.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-017</td><td >Check if the last successful installation of updates was in the past 5 days.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-018</td><td >Ensure Virtualization Based Security is enabled and running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-019</td><td >Ensure Hypervisor-protected Code Integrity (HVCI) is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-020</td><td >Ensure Credential Guard is running.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-021</td><td >Ensure the Attack Surface Reduction (ASR) rules are enabled.</td><td >11 ASR rules are activated. For more information on the ASR rules, check corresponding benchmarks.</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >SBD-022</td><td >Ensure Windows Defender Application Guard is enabled.</td><td >Windows Defender Application Guard is not enabled.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-Logging"><span class="passed">BSI Benchmarks SiSyPHuS Logging</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies"><span class="passed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >4.1.1</td><td >Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.2</td><td >Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.1</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.2</td><td >Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.3</td><td >Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.4</td><td >Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.1</td><td >Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.2</td><td >Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.3</td><td >Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.4</td><td >Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.1</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.2</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.3</td><td >Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.4</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.1.1</td><td >Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.1</td><td >Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.2</td><td >Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.1</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.2</td><td >Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.1</td><td >Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.2</td><td >Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.1</td><td >Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.2</td><td >Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.3.1</td><td >Ensure 'Include command line in process creation events' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.4.2</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.4.3</td><td >Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >5.1.1.1</td><td >Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.2</td><td >Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.3</td><td >Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.4</td><td >Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.5</td><td >Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.6</td><td >Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.7</td><td >Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.8</td><td >Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.1</td><td >Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.2</td><td >Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.3</td><td >Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.4</td><td >Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.5</td><td >Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.6</td><td >Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.7</td><td >Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.8</td><td >Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.9</td><td >Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.1</td><td >Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.2</td><td >Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.3</td><td >Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.4</td><td >Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.5</td><td >Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.6</td><td >Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.1</td><td >Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.2</td><td >Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HD"><span class="failed">BSI Benchmarks SiSyPHuS HD</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >11</td><td >(HD) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >13</td><td >(HD) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >15</td><td >(HD) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >19</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >23</td><td >(HD) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >28</td><td >(HD) Ensure 'Enable Font Providers' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >29</td><td >(HD) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >30</td><td >(HD) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >31</td><td >(HD) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >32</td><td >(HD) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >36</td><td >(HD) Ensure 'Turn off notifications network usage' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >38</td><td >(HD) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >47</td><td >(HD) Ensure 'Turn off the advertising ID' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >48</td><td >(HD)  Ensure 'Allow upload of User Activities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >49</td><td >(HD) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >58</td><td >(HD) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >66</td><td >(HD) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >67</td><td >(HD) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >69</td><td >(HD) Ensure 'Turn off printing over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >70</td><td >(HD) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >71</td><td >(HD) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >72</td><td >(HD) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >73</td><td >(HD) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >75</td><td >(HD) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >76</td><td >(HD) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >77</td><td >(HD) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >78</td><td >(HD) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >79</td><td >(HD) Ensure 'Turn off access to the Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >80</td><td >(HD) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82</td><td >(HD) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >83</td><td >(HD) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >91</td><td >(HD) Ensure 'Enable Windows NTP Client' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >92</td><td >(HD) Ensure 'Enable Windows NTP Server' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >93</td><td >(HD)  Ensure 'Allow Online Tips' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >104</td><td >(HD) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >108</td><td >(HD) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >110</td><td >(HD) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >111</td><td >(HD) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >122</td><td >(HD) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >123</td><td >(HD) Ensure 'Allow Use of Camera' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >125</td><td >(HD) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >128</td><td >(HD) Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >129</td><td >(HD) Ensure 'Turn off Push To Install service' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >130</td><td >(HD) Ensure 'Do not allow COM port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >132</td><td >(HD) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >133</td><td >(HD) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >140</td><td >(HD) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >141</td><td >(HD) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >144</td><td >(HD) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >150</td><td >(HD) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >151</td><td >(HD) Ensure 'Disable all apps from Microsoft Store' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >154</td><td >(HD) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >155</td><td >(HD) Ensure 'Turn off the Store application' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >156</td><td >(HD) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >166</td><td >(HD) Ensure 'Join Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >176</td><td >(HD) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >179</td><td >(HD) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >182</td><td >(HD) Ensure 'Prevent Codec Download' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >184</td><td >(HD) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow only signed scripts'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >190</td><td >(HD) Ensure 'Allow Remote Shell Access' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >195</td><td >(HD) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >225</td><td >(HD) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >228</td><td >(HD) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >250</td><td >(HD) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 'Deny all'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >251</td><td >(HD) Ensure 'Network security: Restrict NTLM: Incoming NTLM traffic' is set to 'Deny all accounts'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >273</td><td >(HD) Ensure 'System settings: Optional subsystems' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >274</td><td >(HD) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >316</td><td >(HD) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >318</td><td >(HD) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >319</td><td >(HD) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >322</td><td >(HD) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >325</td><td >(HD) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >327</td><td >(HD) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >329</td><td >(HD) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >330</td><td >(HD) Ensure 'Microsoft Store Install Service (InstallService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >332</td><td >(HD) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >333</td><td >(HD) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >334</td><td >(HD) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >335</td><td >(HD) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >336</td><td >(HD) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >337</td><td >(HD) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >340</td><td >(HD) Ensure 'Server (LanmanServer)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >342</td><td >(HD)  Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >344</td><td >(HD) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >346</td><td >(HD) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >347</td><td >(HD) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >350</td><td >(HD) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >352</td><td >(HD) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >353</td><td >(HD) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >354</td><td >(HD) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >355</td><td >(HD) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'.</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.
+
+</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >281</td><td >(HD) Configure 'Log on as a service'.</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >283</td><td >(HD) Ensure 'Log on as a batch job' is set to 'Administrators'.</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.
+
+</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.
+</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. 
+
+</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 or
+more minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDSecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >249</td><td >(ND) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-ND"><span class="failed">BSI Benchmarks SiSyPHuS ND</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects tooverride OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data(when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 ormore minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDSecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >249</td><td >(ND) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NE"><span class="failed">BSI Benchmarks SiSyPHuS NE</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitTextCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled' for ImplicitInkCollection.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on local_machine.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled' on current_user.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account (S-1-5-113)
+The user right 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON (S-1-5-7), LOCAL (S-1-2-0)</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NESecurity-Options"><span class="passed">Security Options</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >235</td><td >(ND, NE) Configure 'Accounts: Rename administrator account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >236</td><td >(ND, NE) Ensure 'Accounts: Administrator account status' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >237</td><td >(ND, NE) Ensure 'Accounts: Guest account status' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >238</td><td >(ND, NE) Configure 'Accounts: Rename guest account'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOL"><span class="failed">BSI Benchmarks SiM-08202 - BPOL</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0003</td><td > Ensure 'Configure Automatic Updates' is set to 4</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0004</td><td > Ensure 'Configure Automatic Updates' is set to 'Every Day'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0005</td><td > Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0006</td><td > Ensure 'Specify the maximum log file size (KB)' is set to 'Enabled: 32768'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0032</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 32768.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0037</td><td >Ensure 'Allow enhanced PINs for startup' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0038</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0039</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0040</td><td >Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0041</td><td >Ensure 'Allow user control over installs' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0043</td><td >Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0065</td><td >Ensure 'Enumerate administrator accounts on elevation' is set 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0101</td><td > Ensure 'Restrict Unauthenticated RPC clients' is set 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0109</td><td >Ensure 'Allow Telemetry' is set to 0.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0110</td><td >Ensure 'Do not show feedback notifications' is set to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0111</td><td >Ensure 'Turn on MSDT interactive communication with support provider' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0112</td><td >Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0113</td><td >Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0114</td><td >Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0115</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0116</td><td >Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0117</td><td >Ensure 'Turn off the Windows Customer Experience program' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0118</td><td >Ensure 'Turn off the Windows Error Reporting' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0119</td><td >Ensure 'Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82020121</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0122</td><td >Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0123</td><td >Ensure 'Prevent using Localhost IP address for WebRTC' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0131</td><td >Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0132</td><td >Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0133</td><td >Ensure 'Allow InPrivate browsing' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0135</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (On Battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0136</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0137</td><td >Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0138</td><td >Ensure 'Always install with elevated privileges ' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0139</td><td >Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0140</td><td >Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0141</td><td >Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0142</td><td >Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0143</td><td >Ensure 'Configure Password Manager' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0144</td><td >Ensure 'Configure Pop-up Blocker' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0145</td><td >Ensure 'Configure registry policy processing' is set to 'Do not apply during periodic background processing (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0146</td><td >Ensure 'Configure registry policy processing' is set to 'Process even if the Group Policy objects have not changed (False)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0147</td><td >Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0148</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0149</td><td >Ensure 'Disallow copying of user input methods to the system account for sign-in ' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0150</td><td >Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0151</td><td >Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0152</td><td >Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0153</td><td >Ensure 'Do not delete temp folders upon exit' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0154</td><td >Ensure 'Do not display network selection UI' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0155</td><td >Ensure 'Do not enumerate connected users on domain-joined computers' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0156</td><td >Ensure 'Enable insecure guest logons' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0157</td><td >Ensure 'Enable local admin password management' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0158</td><td >Ensure 'Enable RPC Endpoint Mapper Client Authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0159</td><td >Ensure 'Enable screen saver' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0160</td><td >Ensure 'Enable Windows NTP Server' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0161</td><td >Ensure 'Enable/Disable PerfTrack' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0163</td><td >Ensure 'Enumerate local users on domain-joined computers' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0164</td><td >Ensure 'Include command line in process creation events' set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0165</td><td >Ensure 'Let Windows apps access account information' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0166</td><td >Ensure 'Let Windows apps access call history' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0167</td><td >Ensure 'Let Windows apps access contacts' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0168</td><td >Ensure 'Let Windows apps access email' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0169</td><td >Ensure 'Let Windows apps access location' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0170</td><td >Ensure 'Let Windows apps access messaging' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0171</td><td >Ensure 'Let Windows apps access motion' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0172</td><td >Ensure 'Let Windows apps access notifications' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0173</td><td >Ensure 'Let Windows apps access the calendar' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0174</td><td >Ensure 'Let Windows apps access the camera' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0175</td><td >Ensure 'Let Windows apps access the microphone' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0176</td><td >Ensure 'Let Windows apps access trusted devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0177</td><td >Ensure 'Let Windows apps control radios' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0178</td><td >Ensure 'Let Windows apps make phone calls' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0179</td><td >Ensure 'Let Windows apps sync with devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0185</td><td >Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0209</td><td >Ensure 'Prevent downloading of enclosures' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0210</td><td >Ensure 'Prevent enabling lock screen camera' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0211</td><td >Ensure 'Prevent enabling lock screen slide show' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0212</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0213</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0214</td><td >Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0215</td><td >Ensure 'Prevent the computer from joining a homegroup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0216</td><td >Ensure 'Prohibit access of the Windows Connect Now wizards' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0217</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0218</td><td >Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' set to 'Enalbed'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0220</td><td >Ensure 'Require a password when a computer wakes (on battery)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0221</td><td >Ensure 'Require a password when a computer wakes (plugged in)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0222</td><td >Ensure 'Require additional authentication at startup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0223</td><td >Ensure 'Require domain users to elevate when setting a network's location' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0224</td><td >Ensure 'Set the default behavior for AutoRun' set to 'Enalbed: Do not execute any autorun commands'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0225</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0229</td><td >Ensure 'Turn off background refresh of Group Policy' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0230</td><td >Ensure 'Turn off Data Execution Prevention for Explorer' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0231</td><td >Ensure 'Turn off downloading of print drivers over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0232</td><td >Ensure 'Turn off handwriting personalization data sharing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0233</td><td >Ensure 'Turn off handwriting recognition error reporting' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0234</td><td >Ensure 'Turn off heap termination on corruption' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0235</td><td >Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0236</td><td >Ensure 'Turn off Internet download for Web publishing and online ordering wizards' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0237</td><td >Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0238</td><td >Ensure 'Turn off picture password sign-in' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0239</td><td >Ensure 'Turn off printing over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0240</td><td >Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0241</td><td >Ensure 'Turn off Search Companion content file updates' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0242</td><td >Ensure 'Turn off shell protocol protected mode' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0243</td><td >Ensure 'Turn off the 'Order Prints' picture task' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0244</td><td >Ensure 'Turn off the 'Publish to Web' task for files and folders' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0245</td><td >Ensure 'Turn on convenience PIN sign-in' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0246</td><td >Ensure 'Turn on Mapper I/O (LLTDIO) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0247</td><td >Ensure 'Turn on Responder (RSPNDR) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0248</td><td >Ensure 'Turn On Virtualization Based Security' set to 'Enabled: Block untrusted fonts and log events'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0249</td><td >Ensure 'Untrusted Font Blocking' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0250</td><td >Ensure 'Configure enhanced anti-spoofing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0251</td><td >Ensure 'WDigest Authentication' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0253</td><td >Ensure 'Windows Firewall: Domain: Apply local firewall rules' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0254</td><td >Ensure 'Windows Firewall: Domain: Display a notification' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0279</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' set to '%windir%\system32\logfiles\firewall\domainfirewall.log'.</td><td >Registry value is '%SystemRoot%\System32\logfiles\firewall\domainfw.log'. Expected: %windir%\system32\logfiles\firewall\domainfirewall.log</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0280</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' set to '16,384'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0281</td><td >Ensure 'Windows Firewall: Public: Outbound connections' set to 'Allow'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0282</td><td >Ensure 'Block launching Windows Store apps with Windows RuntimeAPIaccessfromhostedcontent' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0283</td><td >Ensure 'Turn off KMS Client Online AVS Validation' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0284</td><td >Ensure 'Do not display the password reveal button' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0285</td><td >Ensure 'Join Microsoft MAPS' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0286</td><td >Ensure 'Configure search suggestions in Address bar' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0287</td><td >Ensure 'Configure Windows SmartScreen' set to 'Enabled: Require approval from an administrator before running downloaded unknown software'.</td><td >Registry value is '1'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0288</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides for unverified files' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0289</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0290</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0291</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0292</td><td >Ensure 'Turn on SmartScreen Filter scan' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0293</td><td >Ensure 'Allow Cortana' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0294</td><td >Ensure 'Allow search and Cortana to use location' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0295</td><td >Ensure 'Disable all apps from Microsoft Store' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0296</td><td >Ensure 'Disable pre-release features or settings' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0297</td><td >Ensure 'Turn off access to the Store' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0298</td><td >Ensure 'Turn off Automatic Download and Install of updates' set to 'Enabled'.</td><td >Registry value is '4'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0299</td><td >Ensure 'Turn off the offer to update to the latest version of Windows' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0300</td><td >Ensure 'Turn off the Store application' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0301</td><td >Ensure 'Allow Basic authentication' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0302</td><td >Ensure 'Allow unencrypted traffic' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0304</td><td >Ensure 'Allow Remote Shell Access' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0306</td><td >Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0307</td><td >Ensure 'Disallow Digest authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0308</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0309</td><td >Ensure 'Do not allow COM port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0310</td><td >Ensure 'Do not allow drive redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0311</td><td >Ensure 'Do not allow LPT port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0312</td><td >Ensure 'Do not use temporary folders per session' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0313</td><td >Ensure 'Apply UAC restrictions to local accounts on network logons' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0323</td><td >Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0324</td><td >Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0325</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' set to 'XTS-AES 256-bit'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0328</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0329</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0330</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0331</td><td >Ensure 'Configure minimum PIN length for startup' set to 'Enabled' and 'minimum characters' set to 10.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0332</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0333</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0334</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0335</td><td >Ensure 'Configure use of passwords for fixed data drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0336</td><td >Ensure 'Configure use of passwords for operating system drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0337</td><td >Ensure 'Configure use of passwords for removable data drives' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0338</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0339</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0340</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82020342</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Save BitLocker recovery information to AD DS for fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0343</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Save BitLocker recovery information to AD DS for operating system drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0344</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Save BitLocker recovery information to AD DS for removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0345</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key and PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0346</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0347</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0348</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0349</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0350</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0351</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0352</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Require use of smart cards on fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0353</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Require use of smart cards on removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0354</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Do not allow write access to devices configured in another organization'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0355</td><td >Ensure 'Password Settings' set to 'Large letters + small letters + numbers + specials'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0358</td><td >Ensure 'Require additional authentication at startup' set to 'Allow BitLocker without a compatible TPM'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0359</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0360</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (Test)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0361</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (True)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0362</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0363</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow 48-digit recovery password'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0364</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Require 48-digit recovery password '.</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0365</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 48-digit recovery password'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0366</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0367</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0368</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0369</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Password Length' and set to greater or equal 15.</td><td >Registry value is '14'. Expected: x >= 15</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0370</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0371</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0372</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0373</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0374</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives (Enabled)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0375</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0376</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Store recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0377</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0378</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0380</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0384</td><td >Ensure 'Password Age' set to less or equal 42.</td><td >Registry value is '10'. Expected: 42</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0385</td><td >Ensure 'Require additional authentication at startup' set to 'Require startup PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0386</td><td >Ensure 'Turn on PowerShell Transcription' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0387</td><td >Ensure 'Turn on PowerShell Script Block Logging' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0388</td><td >Ensure 'Require secure RPC communication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0389</td><td >Ensure 'Set client connection encryption level' set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0390</td><td >Ensure 'Set time limit for active but idle Remote Desktop Services sessions' set to 'Enabled: 5 minutes'.</td><td >Registry value is '900000'. Expected: 300000</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0391</td><td >Ensure 'Set time limit for disconnected sessions' set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0044</td><td > Ensure 'SeTrustedCredManAccessPrivilege' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0045</td><td > Ensure 'SeNetworkLogonRight' is set to 'Administrator, Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0046</td><td > Ensure 'SeTcbPrivilege' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0047</td><td > Ensure  ’Adjust memory quotas for a process’ set to ’Administrators, LOCAL SERVICE, NETWORK SERVICE’</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0048</td><td > Ensure 'Allow log on locally' set to 'Administrators, Users'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0049</td><td > Ensure 'SeBackupPrivilege' is set to 'Administrator'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0050</td><td > Ensure 'SeSystemtimePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0051</td><td > Ensure 'SeTimeZonePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user right 'SeTimeZonePrivilege' contains following unexpected users: BUILTIN\Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0052</td><td > Ensure 'SeCreatePagefilePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user 'SeCreatePagefilePrivilege' setting does not contain the following users: NT AUTHORITY\LOCAL SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0053</td><td > Ensure 'SeCreateTokenPrivilege' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0054</td><td > Ensure 'SeCreateGlobalPrivilege' is set to 'Administrator, SERVICE, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0055</td><td > Ensure 'SeCreatePermanentPrivilege' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0056</td><td > Ensure 'SeCreateSymbolicLinkPrivilege' is set to 'Administrator'</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0057</td><td > Ensure 'SeDebugPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0064</td><td > Ensure 'SeEnableDelegationPrivilege' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0066</td><td > Ensure 'SeRemoteShutdownPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0067</td><td > Ensure 'SeAuditPrivilege' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0068</td><td > Ensure 'SeImpersonatePrivilege' is set to 'Administrator, LOCAL SERVICE, NETWORK SERVICE'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: NT AUTHORITY\SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0069</td><td > Ensure 'SeIncreaseBasePriorityPrivilege' is set to 'Administrator'</td><td >The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: Window Manager\Window Manager Group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0085</td><td > Ensure 'SeRelabelPrivilege' is set to 'None'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0086</td><td > Ensure 'SeSystemEnvironmentPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0087</td><td > Ensure 'SeManageVolumePrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0088</td><td > Ensure 'SeProfileSingleProcessPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0089</td><td > Ensure 'SeSystemProfilePrivilege' is set to 'Administrator, NT SERVICE/WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0090</td><td > Ensure 'SeRestorePrivilege' is set to 'Administrator'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0091</td><td > Ensure 'SeShutdownPrivilege' is set to 'Administrator, Users'</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0094</td><td > Ensure 'SeTakeOwnershipPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0104</td><td > Ensure 'SeDenyNetworkLogonRight' is set to 'Local account, Guest'</td><td >The user right 'SeDenyNetworkLogonRight' contains following unexpected users: LOCAL
+The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0105</td><td > Ensure 'SeDenyBatchLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0106</td><td > Ensure 'SeDenyServiceLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0107</td><td > Ensure 'SeDenyInteractiveLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0108</td><td > Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'Local account, Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0180</td><td > Ensure 'Load and unload device drivers' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0181</td><td > Ensure 'Lock pages in memory' is set to 'No one'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0182</td><td > Ensure 'Log on as a batch job' is set to 'Administrator'</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0183</td><td > Ensure 'Log on as a service' is set to 'No one'</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0184</td><td > Ensure 'Manage auditing and security log' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0219</td><td > Ensure 'Replace a process level token' is set to 'Local Service, Network Service'</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0303</td><td > Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop User'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0001</td><td > Ensure 'Maximum password age' is set to between 1 and 42</td><td >'MaximumPasswordAge' currently set to: 60. Expected: x <= 42 and x >= 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0002</td><td > Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0100</td><td > Ensure 'Reset account lockout counter after' is set greater or equal 15</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0102</td><td > Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0103</td><td >Ensure 'Account lockout threshold' is set greater or equal 1 and less or equal 10</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0162</td><td > Ensure 'Enforce password history' is set greater or equal 24</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0186</td><td > Ensure 'Minimum password age' is set to greater or equal 1</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0187</td><td > Ensure 'Minimum password length' is set to greater or equal 14</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0008</td><td > Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0011</td><td > Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0012</td><td > Ensure 'Audit Security Group Management' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0013</td><td > Ensure 'Audit account management' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0014</td><td > Ensure 'Advanced security audit policy settings' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0015</td><td > Ensure 'Audit Process Creation' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0016</td><td > Ensure 'Audit Other Logon/Logoff Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0017</td><td > Ensure 'Audit Account Lockout' is set to 'SuccessAndNotFailure'</td><td >Set to: Failure</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0018</td><td > Ensure 'How to track users logon/logoff' is set to 'SuccessAndNotFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0019</td><td > Ensure 'Audit Policy: Logon-Logoff: Logon' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0020</td><td > Ensure 'Audit Policy: Logon-Logoff: Special Logon' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0021</td><td > Ensure 'Audit Policy: Object Access:Removable Storage' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0022</td><td > Ensure 'Audit Policy: Policy Change: Audit Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0023</td><td > Ensure 'Audit Policy: Policy Change: Authentication Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0025</td><td > Ensure 'Audit Policy: System: IPsecDriver' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0026</td><td > Ensure 'Audit Policy: System: OtherSystem Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0027</td><td > Ensure 'Audit Policy: System: Security State Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0028</td><td > Ensure 'Audit Policy: System: Security System Extension' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0029</td><td > Ensure 'Audit Policy: System: System Integrity' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="summary"><h1 >Benchmark Compliance</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>5.2</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Does your system show low benchmark compliance? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >BSI SiM-08202 Client unter Windows 10, Version: 1, Date: 2017-09-13</li><li >Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03</li></ul><p >This report was generated on 09/05/2022 13:50:04 on DESKTOP-UTMU75K.fb-pro.com with ATAPHtmlReport version 1.8.</p></p><div id="systemData"><h2 >System information</h2><table id="summaryTable"><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-UTMU75K.fb-pro.com</td></tr><tr ><th scope="row">Domain role</th><td >Member Workstation</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 10 Pro</td></tr><tr ><th scope="row">Build Number</th><td >19044</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr><tr ><th scope="row">Free disk space (GB)</th><td >40.2</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >3.2%  (0.7 GB / 22.8 GB)</td></tr></tbody></table></div><div id="riskMatrixSummaryArea"><h2 id="CurrentRiskScore">Current Risk Score on tested System: </h2><h3 >For further information, please head to the tab "Risk Score".</h3><div id="riskMatrixSummary"><div id="dotSummaryTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div></div><h1 style="clear:both;"></h1><p >A total of 1286 tests have been executed.</p><div class="gauge"><div title="True 1030 test(s), 80.09%" style="width: 80.09%" class="gauge-meter passed"></div><div title="False 255 test(s), 19.83%" style="width: 19.83%" class="gauge-meter failed"></div><div title="Warning 1 test(s), 0.08%" style="width: 0.08%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 1030 test(s) &#x2259; 80.09%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 255 test(s) &#x2259; 19.83%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 1 test(s) &#x2259; 0.08%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">General Benchmarks</h2><p >A total of 22 tests have been executed in section General Benchmarks.</p><div class="gauge"><div title="True 16 test(s), 72.73%" style="width: 72.73%" class="gauge-meter passed"></div><div title="False 5 test(s), 22.73%" style="width: 22.73%" class="gauge-meter failed"></div><div title="Warning 1 test(s), 4.55%" style="width: 4.55%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 16 test(s) &#x2259; 72.73%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 5 test(s) &#x2259; 22.73%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 1 test(s) &#x2259; 4.55%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS Logging</h2><p >A total of 51 tests have been executed in section BSI Benchmarks SiSyPHuS Logging.</p><div class="gauge"><div title="True 51 test(s), 100.00%" style="width: 100.00%" class="gauge-meter passed"></div><div title="False 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 51 test(s) &#x2259; 100.00%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS HD</h2><p >A total of 384 tests have been executed in section BSI Benchmarks SiSyPHuS HD.</p><div class="gauge"><div title="True 318 test(s), 82.81%" style="width: 82.81%" class="gauge-meter passed"></div><div title="False 66 test(s), 17.19%" style="width: 17.19%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 318 test(s) &#x2259; 82.81%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 66 test(s) &#x2259; 17.19%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS ND</h2><p >A total of 292 tests have been executed in section BSI Benchmarks SiSyPHuS ND.</p><div class="gauge"><div title="True 244 test(s), 83.56%" style="width: 83.56%" class="gauge-meter passed"></div><div title="False 48 test(s), 16.44%" style="width: 16.44%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 244 test(s) &#x2259; 83.56%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 48 test(s) &#x2259; 16.44%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS NE</h2><p >A total of 262 tests have been executed in section BSI Benchmarks SiSyPHuS NE.</p><div class="gauge"><div title="True 215 test(s), 82.06%" style="width: 82.06%" class="gauge-meter passed"></div><div title="False 47 test(s), 17.94%" style="width: 17.94%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 215 test(s) &#x2259; 82.06%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 47 test(s) &#x2259; 17.94%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiM-08202 - BPOL</h2><p >A total of 275 tests have been executed in section BSI Benchmarks SiM-08202 - BPOL.</p><div class="gauge"><div title="True 186 test(s), 67.64%" style="width: 67.64%" class="gauge-meter passed"></div><div title="False 89 test(s), 32.36%" style="width: 32.36%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 186 test(s) &#x2259; 67.64%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 89 test(s) &#x2259; 32.36%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol></div><div class="tabContent" id="riskScore"><h1 >Risk Score</h1><p >To get a quick overview of how risky the tested system is, the Risk Score is used. This is made up of the areas "Severity" and "Quantity". The higher risk is used as the overall risk.</p><h2 id="CurrentRiskScoreRS">Current Risk Score on tested System: </h2><div id="riskMatrixContainer"><div id="dotRiskScoreTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div><div id="calculationTables"><h3 class="calculationTablesText">Risk Score Calculation</h3><p class="calculationTablesText">The calculation of the Risk Score is based on the set of compliant rules at the quantity level and also at the severity level.</p><table id="quantityTable"><tr ><th >Compliance to Benchmarks (Quantity)</th><th >Risk Assessment</th></tr><tr ><td >More than 85%</td><td >Low</td></tr><tr ><td >Between 70% and 85%</td><td >Medium</td></tr><tr ><td >Between 55% and 70%</td><td >High</td></tr><tr ><td >Less than 55%</td><td >Critical</td></tr></table><table id="severityTable"><tr ><th >Compliance to Benchmarks (Severity)</th><th >Risk Assessment</th></tr><tr ><td >All critical settings compliant</td><td >Low</td></tr><tr ><td >1 or more incompliant setting(s)</td><td >Critical</td></tr></table></div><div id="severityCompliance"><p id="complianceStatus">Severity Compliance</p><span class="sectionAction collapseButton" id="severityComplianceCollapse">-</span><table id="severityDetails"><tr ><th >Id</th><th >Task</th><th >Status</th></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 A</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 40/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 B</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 56/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 C</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 64/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 D</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 128/128)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.48.11</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.58.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >18.9.58.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td ><span class="severityResultTrue">True</span></td></tr></table></div></div><div class="tabContent" id="references"><h1 >About us</h1><h2 >What makes FB Pro GmbH different</h2><h3 >What do we want?</h3><p >Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet.</p><h3 >How we achieve this? </h3><p >We implement in-depth IT security for our customers. And we always do so in a state-of-the-art, efficient and automated manner.</p><div id="referencesContainer"><div ><h2 >Check out our hardening solution</h2><a href="https://www.fb-pro.com/enforce-administrator-product/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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"></img></a></div><div ><h2 >Check out our Audit Report Tool here</h2><a href="https://www.fb-pro.com/audit-tap-product-information/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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
+									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
+									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
+									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"></img></a></div></div></div></div></div><script type="text/javascript">						function collapseHandler(e) {
+							var targetSection = e.target.parentElement.parentElement;
+							if (targetSection.classList.toggle('collapsed')) {
+								e.target.innerText = '+';
+							} else {
+								e.target.innerText = '-';
+							}
+						}
+						var collapseButtons = document.getElementsByClassName("collapseButton");
+						for (var i = 0; i < collapseButtons.length; i++) {
+							collapseButtons[i].addEventListener('click', collapseHandler);
+						}</script></body></body></html> 
diff --git a/Samples/Microsoft Windows Server 2022_20220905_052544.html b/Samples/Microsoft Windows Server 2022_20220905_052544.html
new file mode 100644
index 0000000..7250bc4
--- /dev/null
+++ b/Samples/Microsoft Windows Server 2022_20220905_052544.html	
@@ -0,0 +1,18 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows Server 2022 Audit Report [09/05/2022 05:26:17]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	margin-left: 8%;	margin-right: 8%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;	background-color: lightgray;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 50%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}#navigationButtons{	margin-top: 15px;	display: grid;	grid-template-rows: 50px;	grid-template-columns: repeat(4,160px);}button{	margin-left: 10px;	border-radius: 8px;	font-weight: bold;}#riskScore{	font-family: Arial, sans-serif;	text-align: center;}#riskMatrixContainer{	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	left: 10%;	float: left;	margin-top: 50px;	text-align: center;}#riskMatrixContainer div{	border: 1px solid black;}#severity{	grid-column-start: 1;	grid-column-end: 2;	grid-row-start: 1;	grid-row-end: 6;	position: relative;}#quantity{	grid-column-start: 2;	grid-column-end: 7;	grid-row-start: 6;	grid-row-end: 7;	position: relative;}#severityArea{	text-align: center;	position: absolute;	margin: 0;	top:50%;	left: 20%;}#quantityArea{    text-align: center;    position: absolute;    margin: 0;    top: 35%;    left: 40%;}#severityCritical{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 1;	grid-row-end: 2;	padding-top: 20px;}#severityHigh{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 2;	grid-row-end: 3;	padding-top: 20px;}#severityMedium{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 3;	grid-row-end: 4;	padding-top: 20px;}#severityLow{	grid-column-start: 2;	grid-column-end: 3;	grid-row-start: 4;	grid-row-end: 5;	padding-top: 20px;}#quantityCritical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityHigh{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityMedium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#quantityLow{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 5;	grid-row-end: 6;	text-align: center;	padding-top: 20px;}#riskMatrixContainer:nth-child(10){	position: relative;}#riskMatrixSummary:nth-child(10){	position: relative;}/* Color for each Risk */#medium_medium, #medium_low, #low_medium{	background-color: #ffc000;}#high_low, #high_medium, #high_high, #medium_high, #low_high{	background-color: red;}#critical_low, #critical_medium, #critical_high, #critical_critical, #high_critical, #medium_critical, #low_critical{	background-color: purple;}/* Low Risk */#low_low{	background-color: #548dd6;	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 4;	grid-row-end: 5;}/* Medium Risk */#medium_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 3;	grid-row-end: 4;}#medium_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 3;	grid-row-end: 4;}#low_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 4;	grid-row-end: 5;}/* High Risk*/#high_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 2;	grid-row-end: 3;}#high_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 2;	grid-row-end: 3;}#high_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 2;	grid-row-end: 3;}#medium_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 3;	grid-row-end: 4;}#low_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 4;	grid-row-end: 5;}/* Critical Risk */#critical_low{	grid-column-start: 3;	grid-column-end: 4;	grid-row-start: 1;	grid-row-end: 2;}#critical_medium{	grid-column-start: 4;	grid-column-end: 5;	grid-row-start: 1;	grid-row-end: 2;}#critical_high{	grid-column-start: 5;	grid-column-end: 6;	grid-row-start: 1;	grid-row-end: 2;}#critical_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 1;	grid-row-end: 2;}#high_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 2;	grid-row-end: 3;}#medium_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 3;	grid-row-end: 4;}#low_critical{	grid-column-start: 6;	grid-column-end: 7;	grid-row-start: 4;	grid-row-end: 5;}#severityDetails{	margin-left: 8%;    margin-top: 30px;    border: 1px solid #d2d2d2;    margin-right: 8%;    float: right;	margin-bottom: 40px;}#severityDetails td{	border: 1px solid #d2d2d2;}#calculationTables{	float: right;    position: relative;}.calculationTablesText{	text-align: left;	font-family: Arial, sans-serif;}#riskScore th{	background-color: lightgray;}#riskScore tr:nth-child(2n) td{	background-color: #efefef;}#summaryTable{	float: left;}#riskMatrixSummary{	font-family: Arial, sans-serif;	display: grid;	position: relative;	grid-template-columns: 100px repeat(5,60px);	grid-template-rows: repeat(6,60px);	right: 10%;	float:right;}#riskMatrixSummary div{	border: 1px solid black;}#riskMatrixSummaryArea{	float: right;	text-align: center;	margin-right: 10%;}#systemData{	float: left;    text-align: left;}#dotRiskScoreTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#dotSummaryTab {    height: 15px;    width: 15px;    background-color: black;    border-radius: 50%;    border-style: dotted;    display: inline-block;    position: absolute;    left: 22px;    border-width: 2px;    top: 22px;}#quantityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}#severityTable{    margin-top: 30px;    border: 1px solid black;    margin-right: auto;}.severityResultFalse{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #cc0000; }.severityResultTrue{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	color: #fff;	background-color: #33cca6;}.severityResultNone, .severityResultError{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.severityResultWarning{	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;	background-color: #ff9933;	color: #000;}.tabContent#riskScore{	text-align: left;}#severityCompliance{	margin-top: 25%;	clear: both;}#complianceStatusFalse{	padding: 5px 10px;    border-radius: 8px;	background-color: #cc0000;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#complianceStatusTrue{	padding: 5px 10px;    border-radius: 8px;	background-color: #33cca6;	color: #fff;	margin-left: 6%;	font-weight: bold;	display: inline;}#referencesContainer{	display: grid;	grid-template-rows: 400px;    grid-template-columns: repeat(2, 500px);}#referencesContainer div{	text-align: center;	margin-left: auto;	margin-right: auto;}#settingsOverview section{	margin-left: 5%;	margin-right: 5%;}#invalidOS{	display: inline;    padding: 5px 10px;    border-radius: 8px;    font-weight: bold;    margin: auto;    background-color: #777777;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(150.48deg); transform: rotate(150.48deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(0deg); transform: rotate(0deg);}.donut-chart.chart .chart-center span:after {content: "16.8 %";}</style><script >"use strict";let AmountOfNonCompliantRules;let AmountOfCompliantRules;let TotalAmountOfRules;let QuantityCompliance;let TotalAmountOfSeverityRules;let AmountOfFailedSeverityRules;let SeverityCompliance;function startConditions(){    /* Default-Value: Display summary always at the beginning */    document.getElementById("summary").style.display = "block";        /* Default-Value: Disable all other tabs at the beginning */    document.getElementById("riskScore").style.display = "none";    document.getElementById("references").style.display = "none";    document.getElementById("settingsOverview").style.display = "none";    document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';    document.getElementById("riskScoreBtn").style.backgroundColor= 'transparent';    document.getElementById("referenceBtn").style.backgroundColor= 'transparent';    document.getElementById("settingsOverviewBtn").style.backgroundColor= 'transparent';    /* Initialize necessary variables */    AmountOfNonCompliantRules = document.getElementById("AmountOfNonCompliantRules").textContent;    document.getElementById("AmountOfNonCompliantRules").hidden = true;    AmountOfCompliantRules = document.getElementById("AmountOfCompliantRules").textContent;    document.getElementById("AmountOfCompliantRules").hidden = true;    TotalAmountOfRules = document.getElementById("TotalAmountOfRules").textContent;    document.getElementById("TotalAmountOfRules").hidden = true;    QuantityCompliance = document.getElementById("QuantityCompliance").textContent;    document.getElementById("QuantityCompliance").hidden = true;    TotalAmountOfSeverityRules = document.getElementById("TotalAmountOfSeverityRules").textContent;    document.getElementById("TotalAmountOfSeverityRules").hidden = true;    AmountOfFailedSeverityRules = document.getElementById("AmountOfFailedSeverityRules").textContent;    document.getElementById("AmountOfFailedSeverityRules").hidden = true;    calcDotPosition();    let severityComplianceCollapseBtn = document.getElementById("severityComplianceCollapse");    severityComplianceCollapseBtn.addEventListener("click", ()=>{        if(document.getElementById("severityDetails").style.display == "none"){            document.getElementById("severityDetails").style.display = "block";        }        else{            document.getElementById("severityDetails").style.display = "none";        }    })}function clickButton(value){    let buttonNumber = parseInt(value);    /* Disable all content */    let tabContents = document.getElementsByClassName('tabContent');    for(let i = 0; i < tabContents.length; i++){        tabContents.item(i).style.display = "none";    }    /* Disable all buttons */    let buttons = document.getElementsByClassName('navButton');    for(let i = 0; i < buttons.length; i++){        buttons.item(i).style.backgroundColor= 'transparent';    }    /* Re-Enable fitting content / button */    switch(buttonNumber){        case 1:            document.getElementById("summary").style.display = "block";            document.getElementById("summaryBtn").style.backgroundColor= '#ff9933';        break;        case 2:            document.getElementById("riskScore").style.display = "block";            document.getElementById("riskScoreBtn").style.backgroundColor= '#ff9933';            calcDotPosition();        break;        case 3:            document.getElementById("references").style.display = "block";            document.getElementById("referenceBtn").style.backgroundColor= '#ff9933';        break;        case 4:            document.getElementById("settingsOverview").style.display = "block";            document.getElementById("settingsOverviewBtn").style.backgroundColor= '#ff9933';        break;    }}/* Calculate the position of the dot inside the risk matrix; Will be calleed, after the user has clicked on Risk Score Button*/function calcDotPosition(){    let dotRiskScoreTab = document.getElementById("dotRiskScoreTab");    let dotSummaryTab = document.getElementById("dotSummaryTab");    QuantityCompliance = parseFloat(QuantityCompliance);    let complianceValueQuantity = 0;    let complianceValueSeverity = 0;    /*low quantity compliance*/    if(85 < QuantityCompliance){        dotRiskScoreTab.style.gridColumnStart = 3;        dotSummaryTab.style.gridColumnStart = 3;        complianceValueQuantity = 1;    }    /*medium quantity compliance*/    else if(70 < QuantityCompliance && QuantityCompliance < 85){        dotRiskScoreTab.style.gridColumnStart = 4;        dotSummaryTab.style.gridColumnStart = 4;        complianceValueQuantity = 2;    }    /*high quantity compliance*/    else if(55 < QuantityCompliance && QuantityCompliance < 70){        dotRiskScoreTab.style.gridColumnStart = 5;        dotSummaryTab.style.gridColumnStart = 5;        complianceValueQuantity = 3;    }    /*critical quantity compliance*/    else{        dotRiskScoreTab.style.gridColumnStart = 6;        dotSummaryTab.style.gridColumnStart = 6;        complianceValueQuantity = 4;    }    SeverityCompliance = parseInt(AmountOfFailedSeverityRules);    /*low severity compliance*/    if(SeverityCompliance == 0){        dotRiskScoreTab.style.gridRowStart = 4;        dotSummaryTab.style.gridRowStart = 4;        complianceValueSeverity = 1;        document.getElementById("complianceStatus").id = 'complianceStatusTrue';    }    /*critical severity compliance*/    else{        dotRiskScoreTab.style.gridRowStart = 1;        dotSummaryTab.style.gridRowStart = 1;        complianceValueSeverity = 4;        document.getElementById("complianceStatus").id = 'complianceStatusFalse';    }    let totalComplianceValue = Math.max(complianceValueQuantity, complianceValueSeverity);        let summary = "Current Risk Score on tested System: ";    let riskResult = document.createElement("p");    riskResult.style.display = "contents";    if(totalComplianceValue == 1){        riskResult.innerText = "Low";        riskResult.style.backgroundColor = "#548dd6";    }    else if(totalComplianceValue == 2){        riskResult.innerText = "Medium";        riskResult.style.backgroundColor = "#ffc000";    }    else if(totalComplianceValue == 3){        riskResult.innerText = "High";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "#cc0000";    }    else{        riskResult.innerText = "Critical";        riskResult.style.color = "white";        riskResult.style.backgroundColor = "purple";    }    riskResult.style.display = "inline";    riskResult.style.padding = "5px 10px";    riskResult.style.borderRadius = "8px";    riskResult.style.fontWeight = "bold";    riskResult.style.margin = "auto";    let copyRiskResult = riskResult.cloneNode();    copyRiskResult.innerText  = riskResult.innerText;    document.getElementById("CurrentRiskScore").textContent = summary;    document.getElementById("CurrentRiskScore").appendChild(riskResult);    document.getElementById("CurrentRiskScoreRS").textContent = summary;    document.getElementById("CurrentRiskScoreRS").appendChild(copyRiskResult);}</script></head><body onload="startConditions()"><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows Server 2022 Audit Report</h1></div><div class="main content"><div class="host-information"><div id="AmountOfNonCompliantRules">711</div><div id="AmountOfCompliantRules">144</div><div id="TotalAmountOfRules">857</div><div id="QuantityCompliance">16.8</div><div id="TotalAmountOfSeverityRules">33</div><div id="AmountOfFailedSeverityRules">30</div><div id="navigationButtons"><button onclick="clickButton('1')" class="navButton" type="button" id="summaryBtn">Benchmark Compliance</button><button onclick="clickButton('2')" class="navButton" type="button" id="riskScoreBtn">Risk Score</button><button onclick="clickButton('4')" class="navButton" type="button" id="settingsOverviewBtn">Settings Overview</button><button onclick="clickButton('3')" class="navButton" type="button" id="referenceBtn">About Us</button></div><div class="tabContent" id="settingsOverview"><h1 id="toc">Settings Overview</h1><h2 >Table Of Content</h2><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#General-Benchmarks">General Benchmarks</a><ul ><li ><a href="#General-BenchmarksSecurity-Base-Data">Security Base Data</a></li></ul></li><li ><a href="#Microsoft-Benchmarks">Microsoft Benchmarks</a><ul ><li ><a href="#Microsoft-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#Microsoft-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#Microsoft-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#Microsoft-Benchmarks-Advanced-Audit-Policy-Configuration"> Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#CIS-Benchmarks">CIS Benchmarks</a><ul ><li ><a href="#CIS-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#CIS-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#CIS-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#CIS-Benchmarks-Advanced-Audit-Policy-Configuration"> Advanced Audit Policy Configuration</a></li></ul></li></ul><section ><h1 id="General-Benchmarks"><span class="failed">General Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains general benchmarks</p><section ><h1 id="General-BenchmarksSecurity-Base-Data"><span class="failed">Security Base Data</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains basic recommendations for a secure Microsoft Windows configuration.</p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >SBD-001</td><td >Ensure the system is booting in 'UEFI' mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-002</td><td >Ensure the system is using SecureBoot.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-003</td><td >Ensure the TPM Chip is 'present'.</td><td >The TPM Chip is not 'present'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-004</td><td >Ensure the TPM Chip is 'ready'.</td><td >The TPM Chip is not 'ready'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-005</td><td >Ensure the TPM Chip is 'enabled'.</td><td >The TPM Chip is not 'enabled'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-006</td><td >Ensure the TPM Chip is 'activated'.</td><td >The TPM Chip is not 'activated'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-007</td><td >Ensure the TPM Chip is 'owned'.</td><td >The TPM Chip is not 'owned'.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-008</td><td >Ensure the TPM Chip is implementing specification version 2.0 or higher.</td><td >No TPM Chip detected.</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >SBD-009</td><td >Get the count of local users on the system.</td><td >System has 3-5 local users.</td><td ><span class="auditstatus warning">Warning</span></td></tr><tr ><td >SBD-010</td><td >Get the count of admin users on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-011</td><td >Ensure the status of the Bitlocker service is 'Running'.</td><td >Bitlocker feature is not installed.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-012</td><td >Ensure that Bitlocker is activated on all volumes.</td><td >Bitlocker feature is not installed.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-013</td><td >Ensure the status of the Windows Defender service is 'Running'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-014</td><td >Ensure the status of the Microsoft Defender for Endpoint service is 'Running'.</td><td >Service is not 'Running' (<a href="https://www.microsoft.com/en-us/security/business/threat-protection/endpoint-defender">More info</a>).</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-015</td><td >Ensure the Windows Firewall is enabled on all profiles.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-016</td><td >Check if the last successful search for updates was in the past 24 hours.</td><td >Last search for updates was more than 5 days ago.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-017</td><td >Check if the last successful installation of updates was in the past 5 days.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >SBD-018</td><td >Ensure Virtualization Based Security is enabled and running.</td><td >VBS is not activated.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-019</td><td >Ensure Hypervisor-protected Code Integrity (HVCI) is running.</td><td >HVCI is not running.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-020</td><td >Ensure Credential Guard is running.</td><td >Credential Guard is not running.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-021</td><td >Ensure the Attack Surface Reduction (ASR) rules are enabled.</td><td >ASR rules are not enabled.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >SBD-022</td><td >Ensure Windows Defender Application Guard is enabled.</td><td >Windows Defender Application Guard is not enabled.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section ><h1 id="Microsoft-Benchmarks"><span class="failed">Microsoft Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all benchmarks from Microsoft</p><section ><h1 id="Microsoft-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >Registry-001</td><td >Ensure 'Remove "Run this time" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-002</td><td >Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-003</td><td >Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-004</td><td >Set registry value 'CheckExeSignatures' to yes.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-005</td><td >Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-006</td><td >Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-007</td><td >Set registry value 'Isolation' to PMEM.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-008</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-009</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-010</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-011</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-012</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-013</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-014</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-015</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-016</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-017</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-018</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-019</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-020</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-021</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-022</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-023</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-024</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-025</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-026</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-027</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-028</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-029</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-030</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-031</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-032</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-033</td><td >Set registry value 'PreventOverride' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-034</td><td >Ensure 'Prevent managing SmartScreen Filter' is set to 'On'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-035</td><td >Set registry value 'NoCrashDetection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-036</td><td >Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-037</td><td >Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-038</td><td >Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-039</td><td >Set registry value 'Security_zones_map_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-040</td><td >Set registry value 'Security_options_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-041</td><td >Set registry value 'Security_HKLM_only' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-042</td><td >Ensure 'Check for server certificate revocation' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-043</td><td >Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-044</td><td >Set registry value 'WarnOnBadCertRecving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-045</td><td >Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-046</td><td >Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-047</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-048</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-049</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-050</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-051</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-052</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-053</td><td >Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-054</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-055</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-056</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-057</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-058</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-059</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-060</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-061</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-062</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-063</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-064</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-065</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-066</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-067</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-068</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-069</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-070</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-071</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-072</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-073</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-074</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-075</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-076</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-077</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-078</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-079</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-080</td><td >Ensure 'Logon options' is set to 'Prompt for user name and password'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-081</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-082</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-083</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-084</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-085</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-086</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-087</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-088</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-089</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-090</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-091</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-092</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-093</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-094</td><td >Ensure 'Allow META REFRESH' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-095</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-096</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-097</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-098</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-099</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-100</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-101</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-102</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-103</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-104</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-105</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-106</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-107</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-108</td><td >Ensure 'Allow binary and script behaviors' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-109</td><td >Ensure 'Scripting of Java applets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-110</td><td >Ensure 'Allow file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-111</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-112</td><td >Ensure 'Allow active scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-113</td><td >Ensure 'Logon options' is set to 'Anonymous logon'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-114</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-115</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-116</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-117</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-118</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-119</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-120</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-121</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-122</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-123</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-124</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-125</td><td >Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-126</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-127</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-128</td><td >Ensure 'Run ActiveX controls and plugins' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-129</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-130</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-131</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-132</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-133</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-134</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-135</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-136</td><td >Set registry value 'LocalAccountTokenFilterPolicy' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-137</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-138</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-139</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-140</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-141</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-142</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-143</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-144</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-145</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-146</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-148</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-149</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-150</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-151</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-152</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-153</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-154</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-155</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-156</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set.</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-157</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-158</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-159</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-160</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-161</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-162</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-163</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-164</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-165</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-166</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-167</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-168</td><td >Set registry value 'RestrictDriverInstallationToAdministrators' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-169</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-170</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-171</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-172</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-173</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-174</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-175</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-176</td><td >Domain: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-177</td><td >Domain: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-178</td><td >Domain: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-179</td><td >Private: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-180</td><td >Private: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-181</td><td >Private: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-182</td><td >Public: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-183</td><td >Public: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-184</td><td >Public: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-185</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-186</td><td >Set registry value 'AdmPwdEnabled' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-187</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-188</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-189</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-190</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-191</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-192</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-193</td><td >Set registry value 'NodeType' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-194</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-195</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-196</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-197</td><td >Set registry value 'RestrictRemoteSAM' to O:BAG:BAD:(A;;RC;;;BA).</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-198</td><td >Set registry value 'EnablePlainTextPassword' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-199</td><td >Set registry value 'NoLMHash' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-200</td><td >Set registry value 'LimitBlankPasswordUse' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-201</td><td >Set registry value 'ProtectionMode' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-202</td><td >Set registry value 'RestrictAnonymous' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-203</td><td >Set registry value 'RestrictNullSessAccess' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-204</td><td >Set registry value 'RestrictAnonymousSAM' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-205</td><td >Set registry value 'requirestrongkey' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-206</td><td >Set registry value 'requiresecuritysignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-207</td><td >Set registry value 'RequireSecuritySignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-208</td><td >Set registry value 'signsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-209</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-210</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-211</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-212</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-213</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-214</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-215</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-216</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-217</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-218</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-219</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-220</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-221</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-222</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-223</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-224</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-225</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-273</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-274</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-275</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-276</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-277</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-278</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-279</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-280</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-281</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-282</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-283</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-284</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-285</td><td >Set registry value 'PUAProtection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-286</td><td >Set registry value 'MpCloudBlockLevel' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-287</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-288</td><td >Ensure 'Turn off real-time protection' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-289</td><td >Set registry value 'DisableScriptScanning' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-290</td><td >Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-291</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-292</td><td >Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-293</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-294</td><td >Set registry value 'ExploitGuard_ASR_Rules' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-295</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-296</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-297</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-298</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-299</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-300</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-301</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-302</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-303</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-304</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-305</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-306</td><td >Ensure 'Configure Attack Surface Reduction rules' is configured (Use advanced protection against ransomware)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-307</td><td >Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-308</td><td >Set registry value 'EnableNetworkProtection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-316</td><td >Set registry value 'FormSuggest Passwords' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-317</td><td >Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-318</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-319</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-320</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-321</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-322</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-323</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-324</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-325</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-326</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-327</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-328</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-329</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-330</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-331</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-332</td><td >Set registry value 'AlwaysInstallElevated' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-333</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-334</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-335</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-336</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-337</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-338</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-339</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-340</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-341</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set.</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-343</td><td >Set registry value 'EnforcementMode' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-358</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-359</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-360</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-361</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-362</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-363</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-364</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-365</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-366</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-367</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-368</td><td >Set registry value 'RestrictDriverInstallationToAdministrators' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-369</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-370</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-371</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-372</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-373</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-374</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-375</td><td >Domain: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-376</td><td >Domain: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-377</td><td >Domain: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-378</td><td >Private: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-379</td><td >Private: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-380</td><td >Private: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-381</td><td >Public: Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-382</td><td >Public: Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-383</td><td >Public: Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-384</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-385</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-386</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-387</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-388</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-389</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-390</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-391</td><td >Set registry value 'NodeType' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-392</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-393</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-394</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-395</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-396</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-397</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-398</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-399</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-400</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-401</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-402</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-403</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-404</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-405</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-406</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-407</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-408</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-409</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-410</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-411</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-423</td><td >Set registry value 'LDAPServerIntegrity' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-424</td><td >Ensure 'Extended Protection for LDAP Authentication (Domain Controllers only)' is set to 'Enabled, always (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >UserRight-227</td><td >Ensure 'SeSecurityPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-228</td><td >Ensure 'SeCreateTokenPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-229</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-230</td><td >Ensure 'SeCreatePagefilePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-231</td><td >Ensure 'SeRemoteShutdownPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-232</td><td >Ensure 'SeLoadDriverPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-233</td><td >Ensure 'SeRestorePrivilege' is set to 'S-1-5-32-544'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-234</td><td >Ensure 'SeCreateGlobalPrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-235</td><td >Ensure 'SeManageVolumePrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-236</td><td >Ensure 'SeInteractiveLogonRight' is set to 'S-1-5-32-544'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-237</td><td >Ensure 'SeEnableDelegationPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-238</td><td >Ensure 'SeCreatePermanentPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-239</td><td >Ensure 'SeDebugPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-240</td><td >Ensure 'SeProfileSingleProcessPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-241</td><td >Ensure 'SeBackupPrivilege' is set to 'S-1-5-32-544'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-242</td><td >Ensure 'SeNetworkLogonRight' is set to 'S-1-5-11, S-1-5-32-544'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Authenticated Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-243</td><td >Ensure 'SeDenyNetworkLogonRight' is set to 'S-1-5-114'</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Local account and member of Administrators group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-244</td><td >Ensure 'SeImpersonatePrivilege' is set to 'S-1-5-20, S-1-5-19, S-1-5-6, S-1-5-32-544'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-245</td><td >Ensure 'SeSystemEnvironmentPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-246</td><td >Ensure 'SeLockMemoryPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-247</td><td >Ensure 'SeTcbPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-248</td><td >Ensure 'SeTakeOwnershipPrivilege' is set to 'S-1-5-32-544'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-249</td><td >Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'S-1-5-113'</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-428</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to ''</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-429</td><td >Ensure 'SeRemoteInteractiveLogonRight' is set to 'S-1-5-32-544'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AccountPolicy-309</td><td >Ensure 'MinimumPasswordLength' is set to '14'.</td><td >'MinimumPasswordLength' currently set to: 0. Expected: 14</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-310</td><td >Ensure 'PasswordComplexity' is set to '1'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AccountPolicy-311</td><td >Ensure 'PasswordHistorySize' is set to '24'.</td><td >'PasswordHistorySize' currently set to: 0. Expected: 24</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-312</td><td >Ensure 'LockoutBadCount' is set to '10'.</td><td >'LockoutBadCount' currently set to: 0. Expected: 10</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-313</td><td >Ensure 'ResetLockoutCount' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-314</td><td >Ensure 'LockoutDuration' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-315</td><td >Ensure 'ClearTextPassword' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-Benchmarks-Advanced-Audit-Policy-Configuration"><span class="failed"> Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AuditPolicy-250</td><td >Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-251</td><td >Ensure 'Security Group Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-252</td><td >Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-253</td><td >Ensure 'Plug and Play Events' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-254</td><td >Ensure 'Process Creation' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-255</td><td >Ensure 'Account Lockout' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-256</td><td >Ensure 'Group Membership' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-257</td><td >Ensure 'Logon' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-258</td><td >Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-259</td><td >Ensure 'Special Logon' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-260</td><td >Ensure 'Detailed File Share' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-261</td><td >Ensure 'File Share' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-262</td><td >Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-263</td><td >Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-264</td><td >Ensure 'Audit Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-265</td><td >Ensure 'Authentication Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-266</td><td >Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-267</td><td >Ensure 'Other Policy Change Events' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-268</td><td >Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-269</td><td >Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-270</td><td >Ensure 'Security State Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-271</td><td >Ensure 'Security System Extension' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-272</td><td >Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-449</td><td >Ensure 'Kerberos Authentication Service' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-450</td><td >Ensure 'Kerberos Service Ticket Operations' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-451</td><td >Ensure 'Computer Account Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-452</td><td >Ensure 'Other Account Management Events' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-457</td><td >Ensure 'Directory Service Access' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-458</td><td >Ensure 'Directory Service Changes' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section ><h1 id="CIS-Benchmarks"><span class="failed">CIS Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all benchmarks from CIS</p><section ><h1 id="CIS-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.6</td><td >(L1) Ensure 'Relax minimum password length limits' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.1.2</td><td >(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.1.4</td><td >(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.2.1</td><td >(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.2.2</td><td >(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.4.1</td><td >(L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.4.2</td><td >(L1) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.5.1</td><td >(L1) Ensure 'Domain controller: Allow server operators to schedule tasks' is set to 'Disabled' (DC only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: Allow vulnerable Netlogon secure channel connections' is set to 'Not Configured' (DC Only)</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.5.3</td><td >(L1) Ensure 'Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.5.4</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.5.5</td><td >(L1) Ensure 'Domain controller: Refuse machine account password changes' is set to 'Disabled' (DC only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.6.1</td><td >(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.2</td><td >(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.3</td><td >(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.4</td><td >(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.5</td><td >(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.6.6</td><td >(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.1</td><td >(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.2</td><td >(L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.3</td><td >(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.4</td><td >(L1) Configure 'Interactive logon: Message text for users attempting to log on'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.5</td><td >(L1) Configure 'Interactive logon: Message title for users attempting to log on'</td><td >Registry value is ''. Expected: Matching expression '.+'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.6</td><td >(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)' (MS only)</td><td >Registry value is '10'. Expected: Matching expression '^[43210]$'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.7</td><td >(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.7.8</td><td >(L1) Ensure 'Interactive logon: Require Domain Controller Authentication to unlock workstation' is set to 'Enabled' (MS only)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.7.9</td><td >(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher</td><td >Registry value is '0'. Expected: Matching expression '^(1|2|3)$'</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.8.1</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.8.2</td><td >(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.8.3</td><td >(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.1</td><td >(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.2</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.9.3</td><td >(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.9.4</td><td >(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.9.5</td><td >(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.1</td><td >(L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.2</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.3</td><td >(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled' (MS only)</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.4</td><td >(L2) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.5</td><td >(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.6</td><td >(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (DC only)</td><td >Registry value is ''. Expected: LSARPC NETLOGON SAMR</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.7</td><td >(L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.8</td><td >(L1) Configure 'Network access: Remotely accessible registry paths' is configured</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.9</td><td >(L1) Configure 'Network access: Remotely accessible registry paths and sub-paths' is configured</td><td >Registry value is 'System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog'. Expected: System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog System\CurrentControlSet\Services\CertSvc System\CurrentControlSet\Services\WINS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.10</td><td >(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.11</td><td >(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.10.12</td><td >(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.10.13</td><td >(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.1</td><td >(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.2</td><td >(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.3</td><td >(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.7</td><td >(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.8</td><td >(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.11.9</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.11.10</td><td >(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.13.1</td><td >(L1) Ensure 'Shutdown: Allow system to be shut down without having to log on' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.1</td><td >(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.15.2</td><td >(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.1</td><td >(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.2</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.3</td><td >(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.3.17.4</td><td >(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.5</td><td >(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.6</td><td >(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.7</td><td >(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.3.17.8</td><td >(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1</td><td >(L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only) </td><td >Registry value is '2'. Expected: x == 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >5.2</td><td >(L2) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.1</td><td >(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.2</td><td >(L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.3</td><td >(L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.4</td><td >(L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.5</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.6</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.1</td><td >(L1) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.2</td><td >(L1) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.3</td><td >(L1) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.4</td><td >(L1) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.5</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.6</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.7</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.2.8</td><td >(L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.1</td><td >(L1) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.2</td><td >(L1) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.3</td><td >(L1) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.4</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.5</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.6</td><td >(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.7</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.8</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.9</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log dropped packets' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >9.3.10</td><td >(L1) Ensure 'Windows Firewall: Public: Logging: Log successful connections' is set to 'Yes'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.1.1</td><td >(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.1.2</td><td >(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.2.2</td><td >(L1) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.1.3</td><td >(L2) Ensure 'Allow Online Tips' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.2</td><td >(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.3</td><td >(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.4</td><td >(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.5</td><td >(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.2.6</td><td >(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.1</td><td >(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.2</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver (recommended)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.4</td><td >(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.3.5</td><td >(L1) Ensure 'Limits print driver installation to Administrators' is set to 'Enabled' (Automated)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.3.7</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.1</td><td >(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.2</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.3</td><td >(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.4</td><td >(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.5</td><td >(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.6</td><td >(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.7</td><td >(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.8</td><td >(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.9</td><td >(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.10</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.11</td><td >(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.4.12</td><td >(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.4.1</td><td >(L1) Ensure 'Configure DNS over HTTPS (DoH) name resolution'  is set to 'Enabled: Allow DoH' or higher</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.4.2</td><td >(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.5.1</td><td >(L2) Ensure 'Enable Font Providers' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.8.1</td><td >(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 A</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (AllowLLTDIOOnDomain)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 B</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (AllowLLTDIOOnPublicNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 C</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (EnableLLTDIO)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.1 D</td><td >(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' (ProhibitLLTDIOOnPrivateNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 A</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnDomain)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 B</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (AllowRspndrOnPublicNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 C</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (EnableRspndr)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.9.2 D</td><td >(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' (ProhibitRspndrOnPrivateNet)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.10.2</td><td >(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.11.2</td><td >(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.11.3</td><td >(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.11.4</td><td >(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.14.1 A</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares' (\\*\SYSVOL)</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1, RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.14.1 B</td><td >(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares' (\\*\NETLOGON)</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1, RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.19.2.1</td><td >(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 A</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (EnableRegistrars)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 B</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableUPnPRegistrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 C</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableInBand802DOT11Registrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 D</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableFlashConfigRegistrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.1 E</td><td >(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' (DisableWPDRegistrar)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.20.2</td><td >(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.21.1</td><td >(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.5.21.2</td><td >(L2) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.6.1</td><td >(L1) Ensure 'Allow Print Spooler to accept client connections' is  set to 'Disabled' </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation  prompt' </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers  for an existing connection' is set to 'Enabled: Show warning and  elevation prompt'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.7.1.1</td><td >(L2) Ensure 'Turn off notifications network usage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.3.1</td><td >(L1) Ensure 'Include command line in process creation events' is  set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.4.1</td><td >(L1) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.4.2</td><td >(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.1</td><td >(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.2</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot and DMA Protection'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.3</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.4</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.5</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock' (MS Only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.6</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Disabled' (DC Only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.5.7</td><td >(NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.7.2</td><td >(L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled' (Automated)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.14.1</td><td >(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.2</td><td >(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.3</td><td >(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.4</td><td >(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.21.5</td><td >(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.1</td><td >(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.2</td><td >(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.3</td><td >(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.4</td><td >(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.5</td><td >(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.6</td><td >(L2) Ensure 'Turn off printing over HTTP' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.7</td><td >(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.8</td><td >(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.9</td><td >(L2) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.10</td><td >(L2) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.11</td><td >(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.12</td><td >(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.13 A</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (Disabled)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.22.1.13 B</td><td >(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled' (DoReport)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.25.1 A</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitBehavior)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.25.1 B</td><td >(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic' (DevicePKInitEnabled)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.26.1</td><td >(L1) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.27.1</td><td >(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.1</td><td >(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.2</td><td >(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.3</td><td >(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.4</td><td >(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.5</td><td >(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.6</td><td >(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.28.7</td><td >(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.31.1</td><td >(L2) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.31.2</td><td >(L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.1</td><td >(L2) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.2</td><td >(L2) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.3</td><td >(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.34.6.4</td><td >(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.36.1</td><td >(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.36.2</td><td >(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.37.1</td><td >(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.37.2</td><td >(L2) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.40.1</td><td >(L1) Ensure 'Configure validation of ROCA-vulnerable WHfB  keys during authentication' is set to 'Enabled: Audit' or higher (DC only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.48.5.1</td><td >(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.48.11.1</td><td >(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.50.1</td><td >(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.53.1.1</td><td >(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.8.53.1.2</td><td >(L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.4.1</td><td >(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.6.1</td><td >(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.8.1</td><td >(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.8.2</td><td >(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.8.3</td><td >(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.10.1.1</td><td >(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.12.1</td><td >(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.14.1</td><td >(L1) Ensure 'Turn off cloud consumer account state content' is  set to 'Enabled' </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.14.2</td><td >(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.15.1</td><td >(L1) Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.16.1</td><td >(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.16.2</td><td >(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.1</td><td >(L1) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only]' or 'Enabled: 1 - Basic'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.2</td><td >(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.3</td><td >(L1) Ensure 'Disable OneSettings Downloads' is set to  'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.4</td><td >(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.5</td><td >(L1) Ensure 'Enable OneSettings Auditing' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.6</td><td >(L1) Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled' </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.7</td><td >(L1) Ensure 'Limit Dump Collection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.17.8</td><td >(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.1.1</td><td >(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.1.2</td><td >(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.2.1</td><td >(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.2.2</td><td >(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.3.1</td><td >(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.3.2</td><td >(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.4.1</td><td >(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.27.4.2</td><td >(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.31.2</td><td >(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.31.3</td><td >(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.31.4</td><td >(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.41.1</td><td >(L2) Ensure 'Turn off location' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.45.1</td><td >(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.46.1</td><td >(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.4.1</td><td >(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.4.2</td><td >(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.47.5.1.1</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office communication application from creating child processes' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating  executable content' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block execution of potentially obfuscated scripts' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from injecting code into other processes' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Adobe Reader from creating child processes' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Win32 API calls from Office macro' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block credential stealing from the Windows local security authority subsystem (lsass.exe))' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block untrusted and unsigned processes that run from USB' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block executable content from email client and webmail' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block JavaScript or VBScript from launching downloaded executable content' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block Office applications from creating child processes'  is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Block persistence through WMI event subscription' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.5.3.1</td><td >(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.6.1</td><td >(L2) Ensure 'Enable file hash computation feature' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.1</td><td >(L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.3</td><td >(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.9.4</td><td >(L1) Ensure 'Turn on script scanning' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.11.1</td><td >(L2) Ensure 'Configure Watson events' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.12.1</td><td >(L1) Ensure 'Scan removable drives' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.12.2</td><td >(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.15</td><td >(L1) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.47.16</td><td >(L1) Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.58.1</td><td >(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.64.1</td><td >(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.2.2</td><td >(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.2.1</td><td >(L2) Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.1</td><td >(L2) Ensure 'Allow UI Automation redirection' is set to  'Disabled' </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.2</td><td >(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.3</td><td >(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.4</td><td >(L2) Ensure 'Do not allow location redirection' is set to  'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.5</td><td >(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.3.6</td><td >(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.1</td><td >(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.2</td><td >(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.3</td><td >(L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.4</td><td >(L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.9.5</td><td >(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.11.1</td><td >(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.65.3.11.2</td><td >(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.66.1</td><td >(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.67.2</td><td >(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.67.3</td><td >(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.72.1</td><td >(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.85.1.1 A</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (EnableSmartScreen)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.85.1.1 B</td><td >(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' (ShellSmartScreenLevel)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.89.1</td><td >(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.89.2</td><td >(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled' but not 'Enabled: On'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.90.1</td><td >(L1) Ensure 'Allow user control over installs' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.90.2</td><td >(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (LocalMachine)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.90.3</td><td >(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.91.1</td><td >(L1) Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18.9.100.1</td><td >(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to  'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.100.2</td><td >(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.1.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Client)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.1.2</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Client)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.1.3</td><td >(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.1</td><td >(L1) Ensure 'Allow Basic authentication' is set to 'Disabled' (Service)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.2</td><td >(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.3</td><td >(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled' (Service)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.102.2.4</td><td >(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.103.1</td><td >(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.105.2.1</td><td >(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.1.1</td><td >(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.2 A</td><td >(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.2.2</td><td >(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.1</td><td >(L1) Ensure 'Manage preview builds' is set to 'Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.2 A</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days' (DeferFeatureUpdates)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.2 B</td><td >(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days' (DeferFeatureUpdatesPeriodInDays)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.3 A</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdates)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >18.9.108.4.3 B</td><td >(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days' (DeferQualityUpdatesPeriodInDays)</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.1.3.1</td><td >(L1) Ensure 'Enable screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.1.3.2</td><td >(L1) Ensure 'Password protect the screen saver' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.1.3.3</td><td >(L1) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.5.1.1</td><td >(L1) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.6.6.1.1</td><td >(L2) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.4.1</td><td >(L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.4.2</td><td >(L1) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.1</td><td >(L1) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.2</td><td >(L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.3</td><td >(L2) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.4</td><td >(L2) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.8.5</td><td >(L1) Ensure 'Turn off Spotlight collection on Desktop' is set to  'Enabled'</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.28.1</td><td >(L1) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.43.1</td><td >(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled' (AlwaysInstallElevated)</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >19.7.47.2.1</td><td >(L2) Ensure 'Prevent Codec Download' is set to 'Enabled'</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >2.2.1</td><td >(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.2</td><td >(L1) Ensure 'Access this computer from the network' is set to  'Administrators, Authenticated Users, ENTERPRISE DOMAIN  CONTROLLERS' (DC only)</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Authenticated Users, NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.3</td><td >(L1) Ensure 'Access this computer from the network' is set to  'Administrators, Authenticated Users' (MS only)</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Authenticated Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.4</td><td >(L1) Ensure 'Act as part of the operating system' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.5</td><td >(L1) Ensure 'Add workstations to domain' is set to 'Administrators' (DC only)</td><td >The user 'SeMachineAccountPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.6</td><td >(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.7</td><td >(L1) Ensure 'Allow log on locally' is set to 'Administrators'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.8</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators' (DC only)</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.9</td><td >(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.10</td><td >(L1) Ensure 'Back up files and directories' is set to 'Administrators'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.11</td><td >(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.12</td><td >(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.13</td><td >(L1) Ensure 'Create a pagefile' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.14</td><td >(L1) Ensure 'Create a token object' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.15</td><td >(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.16</td><td >(L1) Ensure 'Create permanent shared objects' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.17</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.18 A</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' (MS only)[Hyper-V-Feature NOT installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.18 B</td><td >(L1) Ensure 'Create symbolic links' is set to 'Administrators, NT VIRTUAL MACHINE\Virtual Machines' (MS only)[Hyper-V-Feature installed]</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.19</td><td >(L1) Ensure 'Debug programs' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.20</td><td >(L1) Ensure 'Deny access to this computer from the network' to include 'Guests' (DC only)</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.21</td><td >(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account and member of Administrators group' (MS only)</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: BUILTIN\Guests, NT AUTHORITY\Local account and member of Administrators group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.22</td><td >(L1) Ensure 'Deny log on as a batch job' to include 'Guests'</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.23</td><td >(L1) Ensure 'Deny log on as a service' to include 'Guests'</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.24</td><td >(L1) Ensure 'Deny log on locally' to include 'Guests'</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.25</td><td >(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: BUILTIN\Guests</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.26</td><td >(L1) Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: BUILTIN\Guests, NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.27</td><td >(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.28</td><td >(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.29</td><td >(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.30 A</td><td >(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE' (ADFS-ROLE NOT installed)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.30 B</td><td >(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'  (ADFS-ROLE installed)</td><td >The user 'SeAuditPrivilege' setting does not contain the following users: Orphaned Account, Orphaned Account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.31</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (DC only)</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.32 A</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' (IIS Role NOT installed) (MS only)</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.32 B</td><td >(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE, IIS_IUSRS' (IIS Role installed) (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.33</td><td >(L1) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.34</td><td >(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.35</td><td >(L1) Ensure 'Lock pages in memory' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.36</td><td >(L2) Ensure 'Log on as a batch job' is set to 'Administrators' (DC Only)</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users, BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.37</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' and (when Exchange is running in the environment) 'Exchange Servers' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.39</td><td >(L1) Ensure 'Modify an object label' is set to 'No One'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.40</td><td >(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.41</td><td >(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.42</td><td >(L1) Ensure 'Profile single process' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.43</td><td >(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.44</td><td >(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.45</td><td >(L1) Ensure 'Restore files and directories' is set to 'Administrators'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.46</td><td >(L1) Ensure 'Shut down the system' is set to 'Administrators'</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >2.2.47</td><td >(L1) Ensure 'Synchronize directory service data' is set to 'No One' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2.2.48</td><td >(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="CIS-BenchmarksAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1.1.1</td><td >(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'</td><td >'PasswordHistorySize' currently set to: 0. Expected: x >= 24</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.1.2</td><td >(L1) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.3</td><td >(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'</td><td >'MinimumPasswordAge' currently set to: 0. Expected: x >= 1 days</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.1.4</td><td >(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'</td><td >'MinimumPasswordLength' currently set to: 0. Expected: x >= 14</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.1.5</td><td >(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >1.2.1</td><td >(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.2.2</td><td >(L1) Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'</td><td >'LockoutBadCount' currently set to: 0. Expected: x <= 5 and x > 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >1.2.3</td><td >(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="CIS-Benchmarks-Advanced-Audit-Policy-Configuration"><span class="failed"> Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >17.1.1</td><td >(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.1.2</td><td >(L1) Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.1.3</td><td >(L1) Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.1</td><td >(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.2</td><td >(L1) Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.3</td><td >(L1) Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only)</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.4</td><td >(L1) Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.2.5</td><td >(L1) Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.2.6</td><td >(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.3.1</td><td >(L1) Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.3.2</td><td >(L1) Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.4.1</td><td >(L1) Ensure 'Audit Directory Service Access' is set to include 'Failure' (DC only)</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.4.2</td><td >(L1) Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.1</td><td >(L1) Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.2</td><td >(L1) Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.3</td><td >(L1) Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.4</td><td >(L1) Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.5.5</td><td >(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.5.6</td><td >(L1) Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.6.1</td><td >(L1) Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.6.2</td><td >(L1) Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.6.3</td><td >(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.6.4</td><td >(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.7.1</td><td >(L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.2</td><td >(L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.7.3</td><td >(L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.7.4</td><td >(L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.7.5</td><td >(L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.8.1</td><td >(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.9.1</td><td >(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.9.2</td><td >(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.3</td><td >(L1) Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17.9.4</td><td >(L1) Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >17.9.5</td><td >(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div><div class="tabContent" id="summary"><h1 >Benchmark Compliance</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>5.2</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Does your system show low benchmark compliance? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >Security baseline for Microsoft Windows Server 2022, Version: FINAL, Date 2021-09-27</li><li >CIS Microsoft Windows Server 2022, Version: 1.0.0, Date 2022-02-14</li></ul><p >This report was generated on 09/05/2022 05:26:18 on WIN-T74AI7HCI62 with ATAPHtmlReport version 1.8.</p></p><div id="systemData"><h2 >System information</h2><table id="summaryTable"><tbody ><tr ><th scope="row">Hostname</th><td >WIN-T74AI7HCI62</td></tr><tr ><th scope="row">Domain role</th><td >Standalone Server</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows Server 2022 Standard Evaluation</td></tr><tr ><th scope="row">Build Number</th><td >20348</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr><tr ><th scope="row">Free disk space (GB)</th><td >7.9</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >20.3%  (0.8 GB / 4.1 GB)</td></tr></tbody></table></div><div id="riskMatrixSummaryArea"><h2 id="CurrentRiskScore">Current Risk Score on tested System: </h2><h3 >For further information, please head to the tab "Risk Score".</h3><div id="riskMatrixSummary"><div id="dotSummaryTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div></div><h1 style="clear:both;"></h1><p >A total of 857 tests have been executed.</p><div class="gauge"><div title="True 144 test(s), 16.80%" style="width: 16.80%" class="gauge-meter passed"></div><div title="False 711 test(s), 82.96%" style="width: 82.96%" class="gauge-meter failed"></div><div title="Warning 1 test(s), 0.12%" style="width: 0.12%" class="gauge-meter warning"></div><div title="None 1 test(s), 0.12%" style="width: 0.12%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 144 test(s) &#x2259; 16.80%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 711 test(s) &#x2259; 82.96%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 1 test(s) &#x2259; 0.12%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 0.12%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">General Benchmarks</h2><p >A total of 22 tests have been executed in section General Benchmarks.</p><div class="gauge"><div title="True 6 test(s), 27.27%" style="width: 27.27%" class="gauge-meter passed"></div><div title="False 14 test(s), 63.64%" style="width: 63.64%" class="gauge-meter failed"></div><div title="Warning 1 test(s), 4.55%" style="width: 4.55%" class="gauge-meter warning"></div><div title="None 1 test(s), 4.55%" style="width: 4.55%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 6 test(s) &#x2259; 27.27%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 14 test(s) &#x2259; 63.64%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 1 test(s) &#x2259; 4.55%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 4.55%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">Microsoft Benchmarks</h2><p >A total of 404 tests have been executed in section Microsoft Benchmarks.</p><div class="gauge"><div title="True 56 test(s), 13.86%" style="width: 13.86%" class="gauge-meter passed"></div><div title="False 348 test(s), 86.14%" style="width: 86.14%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 56 test(s) &#x2259; 13.86%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 348 test(s) &#x2259; 86.14%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">CIS Benchmarks</h2><p >A total of 431 tests have been executed in section CIS Benchmarks.</p><div class="gauge"><div title="True 82 test(s), 19.03%" style="width: 19.03%" class="gauge-meter passed"></div><div title="False 349 test(s), 80.97%" style="width: 80.97%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 82 test(s) &#x2259; 19.03%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 349 test(s) &#x2259; 80.97%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol></div><div class="tabContent" id="riskScore"><h1 >Risk Score</h1><p >To get a quick overview of how risky the tested system is, the Risk Score is used. This is made up of the areas "Severity" and "Quantity". The higher risk is used as the overall risk.</p><h2 id="CurrentRiskScoreRS">Current Risk Score on tested System: </h2><div id="riskMatrixContainer"><div id="dotRiskScoreTab"></div><div id="severity"><p id="severityArea">Severity</p></div><div id="quantity"><p id="quantityArea">Quantity</p></div><div id="severityCritical">Critical</div><div id="severityHigh">High</div><div id="severityMedium">Medium</div><div id="severityLow">Low</div><div id="quantityCritical">Critical</div><div id="quantityHigh">High</div><div id="quantityMedium">Medium</div><div id="quantityLow">Low</div><div id="critical_low"></div><div id="high_low"></div><div id="medium_low"></div><div id="low_low"></div><div id="critical_medium"></div><div id="high_medium"></div><div id="medium_medium"></div><div id="low_medium"></div><div id="critical_high"></div><div id="high_high"></div><div id="medium_high"></div><div id="low_high"></div><div id="critical_critical"></div><div id="high_critical"></div><div id="medium_critical"></div><div id="low_critical"></div></div><div id="calculationTables"><h3 class="calculationTablesText">Risk Score Calculation</h3><p class="calculationTablesText">The calculation of the Risk Score is based on the set of compliant rules at the quantity level and also at the severity level.</p><table id="quantityTable"><tr ><th >Compliance to Benchmarks (Quantity)</th><th >Risk Assessment</th></tr><tr ><td >More than 85%</td><td >Low</td></tr><tr ><td >Between 70% and 85%</td><td >Medium</td></tr><tr ><td >Between 55% and 70%</td><td >High</td></tr><tr ><td >Less than 55%</td><td >Critical</td></tr></table><table id="severityTable"><tr ><th >Compliance to Benchmarks (Severity)</th><th >Risk Assessment</th></tr><tr ><td >All critical settings compliant</td><td >Low</td></tr><tr ><td >1 or more incompliant setting(s)</td><td >Critical</td></tr></table></div><div id="severityCompliance"><p id="complianceStatus">Severity Compliance</p><span class="sectionAction collapseButton" id="severityComplianceCollapse">-</span><table id="severityDetails"><tr ><th >Id</th><th >Task</th><th >Status</th></tr><tr ><td >1.1.7</td><td >(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.2.38</td><td >(L1) Ensure 'Manage auditing and security log' is set to 'Administrators' (MS only)</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >2.3.5.2</td><td >(L1) Ensure 'Domain controller: LDAP server signing requirements' is set to 'Require signing' (DC only)</td><td ><span class="severityResultNone">None</span></td></tr><tr ><td >2.3.11.4</td><td >(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >2.3.11.5</td><td >(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td><td ><span class="severityResultTrue">True</span></td></tr><tr ><td >7.9 A</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 40/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 B</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 56/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 C</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 64/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >7.9 D</td><td >(L1) Ensure RC4 Cipher Suites is Disabled (RC4 128/128)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >9.1.7</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >9.1.8</td><td >(L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.3</td><td >(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.3.6</td><td >(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.6.2</td><td >(L1) Ensure 'Point and Print Restrictions: When installing drivers for a new connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.6.3</td><td >(L1) Ensure 'Point and Print Restrictions: When updating drivers for an existing connection' is set to 'Enabled: Show warning and elevation prompt'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.9.2</td><td >(L1) Ensure 'Turn off real-time protection' is set to 'Disabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 A</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office communication application  from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 B</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from creating  executable content)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 C</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block execution of potentially obfuscated scripts)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 D</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Office applications from injecting code into other processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 E</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Adobe Reader from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 F</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block Win32 API calls from Office macro)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 G</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block credential stealing from the Windows local security authority subsystem (lsass.exe))</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 H</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block untrusted and unsigned processes that run from USB)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 I</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured  (Block executable content from email client and webmail)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 J</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block JavaScript or VBScript from launching downloaded executable content)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 K</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block Office applications from creating child processes)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.47.5.1.2 L</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured (Block persistence through WMI event subscription)</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.48.11</td><td >Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.58.3.10.1</td><td >(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td><td ><span class="severityResultFalse">False</span></td></tr><tr ><td >18.9.58.3.10.2</td><td >(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td><td ><span class="severityResultFalse">False</span></td></tr></table></div></div><div class="tabContent" id="references"><h1 >About us</h1><h2 >What makes FB Pro GmbH different</h2><h3 >What do we want?</h3><p >Protect our customers' data and information - and thus implicitly contribute to the safe use of the Internet.</p><h3 >How we achieve this? </h3><p >We implement in-depth IT security for our customers. And we always do so in a state-of-the-art, efficient and automated manner.</p><div id="referencesContainer"><div ><h2 >Check out our hardening solution</h2><a href="https://www.fb-pro.com/enforce-administrator-product/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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"></img></a></div><div ><h2 >Check out our Audit Report Tool here</h2><a href="https://www.fb-pro.com/audit-tap-product-information/"><img width="250px" height="400px" src=" data:image/jpeg;base64,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
+									0nEMrtLVsbfaNrQ/IeS5bwh1hMaQBLeRxKS43ovUt8SQSHDxnkpDxPmBJ5g2qdFTdLvkF9uGQrVGV2sq13ZhoR4IX2hAXFfYbWHNPOTxJ0GtEqjdi5LXyz3e4v8AqeMRmZmat5U5kUN+4faU1lN4euXq8uO6gx0qQ29wJW2raQNdlFRZfdyyOOi1xrbfYLFtXiMa2X23NreYKL6ibZFyp8N5tHGlMmNahxa6KDqUrHprICcZ1ytyi95FEyS0TvWnOXcO3yeXLd0lGXMnXFu6JuU5MqZI1Wwl1MZiOFhSiUFYV5tBqHcQzpjllkfJ1rF5ravXn5tpz63y4AjSkSb+i5B4tvOl9uYlpxSl8bCm+NBIUpKkghC7jy5zrHeY96vzz2XZba5ORrlM5XHttju1xkRnMet8QB2I6ywx2SXmFtFSWg4OEdepCwOaFm5gzeYOLZrYMcZu9h5VN2+5QYSluJuEuVcJnZ3YW9pCFIcW3bUFspWpA1cISSaFVVZ7YcjnYanGo+P3t6XglqzVrJEpgy+yfRc7rHVD9UcDfDL9YY4nEpZKyEBXEEnzaDbv40xduYNhtdlst0hckrnfZarJZuzuVsY7ZGN3Fyc600osPsRlSRH7MHgQXkrLY26kDDH4eHK5AmTcZV1mZFYrMzNwyRebp9sx7ndNQ7eURHXlpmMq85MtD2xlDYWjTzkqCUZnnt3tsXLLRb8ncYyi05Vkj67Uh5Bms2WPjcu4RnQ0rVQjoc7FxKtOHi0GuuyiURO059m96uGH4XkGaysYvbE3HbRmV2tvqrCnjJtF+uLc1hU1h5tKZ7cWI6rzSAoLbGmiqKsV6/5lfOXuI5Bac7XbprmVN2F6/wAC329+PeYL19FpanBqS08lHaMjtU9kUpKla7UcIoIo9zoyixK5iJuclM049Bun2I5cLYITCpzd/FitvYOsLBlsqUoKlEJBbVoAoBYABpnvE3lQt8h20Qfs664jZJ8WehDqm2shmTZceXEeUF7GVtwXixsCuJHConiSKDnZJz1yTFGJAubWNMXxN9nwX8UnouEGXBYiwpk2LFWvV31p+emMlMZ5lvsllR4UKKdKCZT+djcGfmUByyxYTmNW60S4SblcURSt+c7DZnszSlt31ZMBdwjhxeitdVaDzaJRpIneLt0qLkMoY0jix3H3L8q3N3eOZtyQ2ua2n7JYW2j1ph0wuJt/iQkocQopG2ipC7zthvy7WzjuH3TKYl4u8Gxw7jElW9hHrk+1JvDaSmTIaUAlgqCz0LQU79KCbcvs4Z5hY8zksSyTbJb5nCu3InPQ3XH2HEBaHQIciQG9QdOBwpWDvSKCcUBQFEok2KafaL2z/s6vrJoQsKio/kv7uT/bI8hoIHQB3GgXvA1ojHCOiiqt5z3GbaOXd1mwJ7ltkC42NhUxqYq3KDMm8QmH0+uI85gLacUhSx6IJNB1rxTLcovvMTAsdl5NeZFuhRMjNwhRcsaiNKXCyZiPHUbi4lIvLbER4M8QAU55wI4waDiYrzO5jRjFky7xf5abmu3XD1G8LgyBc0u5eLYv7G9WQpTMcxwY7jbxCwpbSkIG1ZCz4mX5vA5XYDzXXk1yy2fzCn4kqbikKJbvUmG7zNYTLhWtCmmHAtCHVMavyFK1BUSlVCjkDOeYd/k+sW27O4U05zObwhNhutnhyJDMN+AzJDr3A+v86lalacLhSUqGu0UG25c59mV/xbPcmvkxMpzH15Gzaof2E9AhhVlnTorK25xfWmVxpipLiUBPCSfBQaKxc/pU1q1wLhbT9v3W/wCIWtkMWy4m3+rZBb7VLlLVOShcZDraprvZpW6DoEApJPnBDofegvb9ksNwci4hxXu5WyDIvipF0ZtdtXcbbcLgqHMCWH3zJZ9SQkloKbIdSrzdCKC4MU5wPZFzDlYE7abfxs3GfbRKt89UiSz9nQYkxc2VEWw2WYrypQaaXxklfCCnztgbGxczb5f7xjMCLhLYt2Ss3OXGuqrugOMMWic3AlKXHMYaq43EqQlK/OGupBolD965oG1XrNrczi8u6QsBiR5mTz2Z0RElDT7Tckut29xYfcZbaWVF0eaVIWhOqk0Uyzzdt1zvDFpxvGr1lSpP2i8zPgGC227Bt8j1N2cx63LYU+y5ISptJaCiQnjUAhSFKDW2jnFZL3MhRUcv8tau13m3Syxob1thOPOKsznZ3FKlNTHE9lHcOitVaEnzQobaDmyc/wCUWQ26I7cl267wLllMnDGGp1t9YSu9WlUhDkdTbjK+ENdk4UOKARooFJ88ahM7DeMfzSzRJ9vt8hVoQuNItzdytkiAD2QbkRXmGZbTRKU+YptaBoCNh1FBylYtjSpUGcbFD9ctkl6Zb5QbAWzIkPiU86kj5S30hwn8IcW+iNPO5bYHckXhEzF4UgZBKjTb1xhesiRDmruMd1RCgQpuU4t4aaeco9elCpMHl3i1uyBGVNw5UnI2Xi81eZs6XMfQCy+wllKn3V8LKESnuBseakrUQNdtFq1TvKXBnZUaeLWtm5R7nNuzl0bc0kyJFwmNTpAkukFTrZeYbKUKOiQlIToBQaJPJHH2DkjMHIb5AtGWRXod6sTa4a46mnH5chAaW7FW80GVzXAgIcACQlJBA2ht4fKbGrbd13a3PS4XaZr/AL6XAbLfYJuCrc5bnGW08AKGVh1TpAOvaE6Hh2UGy5cYK1y6xtjGY86NcIkMIREks21i3OqQ22lsKlFhSg+6QnznSAT1URPaFRRaigk2KfvJ79nV9ZNBYVBH8l/dyf7ZHkNBA6AO40Dg3CgKBmRHjy2XI0uO1LjPJ4Xoz6EuNrT1KQsFJHjFBpLjiGI3gW5N3xOy3UWjQWgTLfGf9UCVBQEftG1dlooAjg027aB5eNY8tUBSrFbiq1nW2H1Voern1hEvVrRPmfn2kO+b8tIVvGtBpYvLvBIE6ZcoWIWqJOnzW7jMfZjpQHJjT4lIkFA0QHA8A5xAa8XnHbQbY43YC725tEbtjeEZAXQkgm6NtBlEw6Ha4G0hOp6BQaW0cvMSsLd9YtMCTEh5ImaLtbTcJzsRRuLrj0tTUZ19bTKnXHVqUWkpOqjQJh8usRgW5Fph25yPb27naruhhMh06S7I1FYgq4lKJ0bbhMpKddFcPnakmgjcvkvirysXftt0v2OXDDo9vi4/dLXNQl9pFsjzYkYq7dl5C1Bm4PoUVJ2gj8EURvLTy3sVmvcTIo0u4vXeNd7henpbzyFesyLpDYhSkvhLaQW1JjNuBI00cTxeChVm38ucfgItMdReuEO02682wQZnZuNSI99ltzJSXk8A4tFthKRu4SQdd9Fat7lhHfzCwZIbozGtGJQJcDGMah22NHMdqbFMR5l6akl16NoouJYKQkOcKiTwpADQv8n5P2Xylx6Ff4EazcrmbUhi4m1f50V2stA+oTkSUpholttBmQjs1hTZUnp2BwrpyYkSZ2LXBmXZbsvG8nyfIhAvcKQ5HWcjl+tJSj1d9tSHI2miVkkK38IoIpA7tr1vuTd2RlaHXkzY92XA9XWiKLoq5ql3CclPGo9pIiNx423d2ZV8vYSq4eWmLXPDsXh4/c40Nly2sx47b0K4zrgh8Mx22VOn19CVM8RRqGkEoHRRVgdVAe5QYolBoDvG2gwU9XvUKkkEUVigKDOtEoKCTYoP8xeP/wBur6yaCwaK018jqkw0tpUEntUqJPgBoIwm0J+W+T81IHl1oOQm1xBvSpZ8Kj8WlA/9nxP6r4T/AC0CTbIh+QofSNEJNsjfgq/KotSDbI2vyx7v/CgSbXH6FuD3R/JQJ+ymuh5fvCgSbS2f6ZQ+iP5aIQbOOh8/k/8AGhUg2k/1/wDN/wCNFJNpX0Pp90GgSbU90Oo+GgT9mP8A4SD7p/kolGPsuT0FHv8A/CgSbbKHQk/SotSDAlD5AP0hQJ9Slf1Xwj+Wgx6nJ/qVH3qFCDDf6WFjwgUQ2qJIG5pZPzTQqbLD43sLH0TRSS270tqH0TQY4Vg+ioHwigwdemiUJIQfB4aBJT1HWhUnwUUUEmxT94u/s6vrJoLCoOFcP0H0h8dBpKAoHKAoCgNB0igTw9RojBBFFYoCgKJRjhHioE8J8dCrFFFAUBoD0URjh6qFSNCKKKAoM60SjGg8VAkg+OhUnQbiKKSUoO9CT7goMdm3/Vp/JFBgtMne0g9fmiiUIMWMf6FH5IoNpZo7TUpakNpQS0Rqnxii1Seg4Vw/QfSHx0GkoCg5FCjGgoElJFCrFAUBQY0B6KIxw9W2hUnTSiigKA37xRKMcI6KBJBFCrFFFAUKAp6xpRCSnqoVJoooCgPcolGOEdGygSQRQqxRRQbS1f3hf9mfKKCQUHCuH6D6Q+Og0lAUHIoCgKA376DHD1UQkgiisUBQFCjGgPgojHCfHRak0BQFAHTQk6AAalR2AAbyTRHV3mb3nMYxFcm1YlHRl98Z1Q7KCym3MLB0IU4nzniOpvZ+NXVj0t122dkNd2WIdMcs7xnOC/vvLTlr1giubEW+zoTEbQOoLAU6fGV1126fHbG5qnJdKt2Od3OCyyPWLfzJv6XAfRfmLkoPjbkdok+9WU4bJ6ITjnrdr+UPfWjTJMfH+cDMe1uO8LcbNoTZRHKt3/Ox08XZ6n5bfmjpSkba5cukptt9Tbbl63f+NKjTY0ebCkszYUttLsSZHWl1p1tQ1StC0EpUD0EGuKYo2nSAfBQY4T46FSaKKAoUGw7xRKMcPVQq2NqBEhf9mfKKKkFBwrh+g+kPjoNJQFBzBuoMcI8VEJ4T46KxQFAUBsO+iElPUaKxoR0UGKAoCiUY4R16UHFmSo1viyZ06Q3EhQ21PSpTqglDbaBqpSidwAqxFdkFXn/zn553HMVysexh522YkklD7ydW37iNxLm4paPQjp3q6h6GDTxbtne0X5K7nVCUNOLxbK62uXGteM3vKJZh2WEqUtGnbvnzWWgelxw7B4t/UKxmYjekRVdFk5G4/CSh/IpDl9lg6qjIKmYo8Gg0Wv3SPFWmckzuZ8KXnAMHbQUJxG08GmhCoyFHTxqBNY8U9aUT7AMif5ZqREx9gM47xKU/jIWoRPOOqlsoOoZWetAAPyga132Rfv3srb5tdyMcyO15Ta2braneNlfmvsK2OMuAec24Ogj3jvFcd1s2zSXRE1b6sVFEoxwjroE6GisUBQbK1/p1/MPlFBvqDhXD9B9IfHQaSgKDmDcKAoCgN++iUY4RQJIIorFAUBQY0B8FEY4T0baFSdNKKKDoxz15pryiU9itikEY1bndJkhB/v0hs79m9tB9H8I+d1V6OmwcPxTvaL767HViXoQfdrqaZbDE8GmZfLUtSlQ7RFUBMnaaknf2bQO9RG87h09VYX38KxFXZO3WiBZYTFstURMWK1oG2kDVS1HZxKO9Sj1nbXPWZ2y2Qn9r5b5Hdgh11tu1R3NqVyiQvTwNJBUPd0rCb4hlFsy20rkvdexUqHe4sh8eiy42toKPVx6r090Vj82EmyVGzGVx5EuG+ns5MJ5yPLZO9t1s8KknwgitkTE7muYomnK7KlYzkrbTqlrtl60izGEkbHCfzLg12ahR08RrXnittepnimeKI63aFzKACQ3BJ6ipenwAV5k5/Q9ONL6XCXlEzXzIzKPHxH4xWPz5bI0tvXJk5PcRubY8XCr/AOKp8+5lGks9Jactlp9OKyseAqT8ZqxnnqYzo7etzEZdHJ/PQXED8JCgr4CBWUaiOmGE6KeiW2jXy1SjwolpaX+A8OA++dnw1sty2z0tF2DJbvj1JPa/06jvBbOh6DtFbGpvqDhXD9B9IfHQaSgDuNBsOgUGCkdFAkpPjolWKKKAoDQGgTw9VBjQigxQFAUSiheeWdqsFnGNWp8t3i9tH111CtFx4Z2HxKd2pHg18FdOnxcU1ndDXkupsdEJg04hpoBu8Vela0QRj+NSsouiILOrUVv85cJYGxprXo6OJW5IrDJfFq0q7P2myIaRDslkh8LbY7ONGR0DpUo/CpRrk4qzWWcL3xrEbfY20yXUpl3MjVctQ1DfgaB3ePfWN0sohLFzmGtAnV1fUN3v1ouviG22yZMKmynASk9mgbwnoHhNaLr5lvtsiN7pvznQcd5gRrkkcEHJIjTs0dCnW1Flbh8I0STW3BkmGrPYiy1LaPaNq0cbIW2odBSdQa7t7imXbaG/63ChyztMlht06da0hR8teBdFJmH0OO6sRPWfUN2ysWZk0WDRFGRo1Amip3gLz32rIYLqyyIqlBoqPCCFpGoHu1v087XHrLY4Yn0rcrree4Vw/QfSHx0GkoA7jQbAbhQFAUBvoMFI6KIToaKxQFAUGNAfBRGOE+OitfdLlEs1unXWevsodvZW/IUfwUDXQeEnYPDViKzSEmaPOvKr3MyS83K9zie3uDynOz11DaNyG0+BCdAK9Sy3hijmmaygEhp191thhBdeeWG2W071KUdAB4zWbF2IxfG28etjNvaSHZ0ghc51A1LjyvkjrCfRH/GubJdxTVsiKL8x+0MWCKVO6O3SUAZKh8gbw2D0AdPWa0zdRnbZMtyp9170z5o3IG6tF10y6ItiCQOmtcs4eXffB5+Zq1zbxHl9yjv0y1XnC5KEyJFuc0VKvdy4WkRHEEFDiG21JSUrBTxLVqNlfM8z1t/z4x45229XXPQ/XvJXlzTTy/JqdbZE25I2V6Mdm3ijpiZnpjoiOt2P58Q75Gxzlm1lUyPcsqZtzzGR3GI0GWHpiW4/brabGxKC5roBX0mni6Lfi39Pa/J9fdiuy3ThiYsmZ4YnbMW12VnrohNvcMi1QHidS5GbKid+oGh+EV6dk1iHkX7Jds8YUpWN2JSt5gMfAgCvFz+O7te5gn/Dt7G7O6tLeYIosE1GRsga7qoaKSOmoqa4D++ZH7Iv66K36fxOXWeCO1cFdbzXCuH6D6Q+Og0lAUGz6BsoDhHRQJIIoVYoCgKA0BohPD1UVjQigxQFB1/575EY9vgYxHd0XcD63ckj+pbOjST85YJ+jXVprNvE1ZJ6HUKYNOLTw13NKVcvbCJM1++yW9WoJLUEEbC8oecr6APvnwVryXdC2w7DY5C1fVcXE7GTpF1/D6VDxdFc191G6y2u1OE79u3XfWiW+1yhWtkr/mxzBg8reXeTZxNCXF2mKU2qKSAZE549nFaAO/VxQKvxQTXJrdTGnxXZJ6N3b0PV5Jyy7mWsx6e38U7Z6rY23T6vbR5q9ynl3cOZHN6+c3csLlzYw11c716QniEu/wBwKylZJ2EspK3dm5RRXzXJsM5ss5bttPbdL9Z8+cys0Ggs0WH4fmRSkfhx2/fst7Ku4HeXmhd1xm3BWpiwX5DieovOhI+BuvrsT8Ry71cWPVNht2vRH198k16GPww8/JvdxbKz6vZLMzu7ODHT7vZp1rxMs1vnte7iilkdkNnoCK1tsGlo27KKZIIoyqQqimz11FTTAv3zJ/ZFfXRW7T+Jy6zwR2rersea4Vw/QfSHx0GkoCg2g3CgKAoDQGgTw9VEY0NFYoCgKDGg8VBjhNB0W5h3k37KbzcEuFyP25YhHqZZ8xGnj0J92vSxW8NsQ5r5rKrZKFurS02njcdUENp61KOgHv1uYuwVntAtlut1pYSONtKUOEfKdUdVq91RNck3VmrOIWtGjtx2W2EDzWkhIPWek+6a1S6YikOagbfDWuWUTRyUgnYKwllV5Yd9/mW5lGX2jlbY1mXCxJxLl1ZaGpevMoBCGRt2lptQTp+EtQ6K+M5/q/m5Yw27rd/5p+77X7R9POUfy2mu1mTZOTd6MdvT+qdvZEPQDkHyxa5R8rcbw9baE3hLZn5S82eIOXOVop/zukI0S2nwJFfQ6HS/y2G2zp3z2vzfzDzaeaa7Jn/Dus/JG717+91q55XZN2zy9Fra1bEt29sjpLCfP/nqVXpWRSHzl81ucmzW9x9NntSB+dfEeNp1FXCk+Wu7ZbbWeiHJw8V1OuXcUtpbbQ2gaIaAQ34kjQfAK8De94gdVGUBW6opg7KLBpQ6KjI2R0UEzwMaXiR+yK+uit+n8Tl1ngjtW7XW85wrh+g+kPjoNJQFBt9BpQY4erbQJ0oCgKAoMaCgxwno20Qmiig0OU3P7Hxy9XIHz4sRzsf7RY4EfzlCsrIrdEJM0h0LmjeDt06a9OHKexC2CfkLDi08TNvSqS5ru4hsR/OIPuVMl1LViNrsDZY/aTFPKGqYydQfxlbB8Gtcsy22RtS4bz4awlvPN793VWEiFczM7h8tMFyLMpYQ65aYxFsiLUE+sTHfMjtDXfqsgn8UGuDX6qNLhuyT0bvTPQ9bknK7uZazHp7fxTtnqtjbdPq9rzW7qWAS+Z/OOZneTFdyg4c6b7dJL6eNMu7yVqMZKirYSlfE8R+KK+Q5Hp51OonJfti3bPpund979g87cyt5by6NNh+GcnwREfhxx4vZS3vesN6u7Nhsl0vMhQCLdHW+OL5SwPMT4eJRAr7alZo/D60irztcRIvN6bXKV2z82UqRMcO3UlXaOE+PbXVbbWYhy3TsmV8cvLcLhlMZ1aNWrchctZ6ApPmt6/SVr7lZ6y/hxz6dhpLOLJHo2uyB2jSvGewa4R/xoEFOyoyMqSfH4aLBhVRkbV10E0wP97v/ALKv66K34PE5NX4Y7Vt11vPcK4foPpD46DSUBQbgbhQFAUGNB4qBPCfHQYoCgKAoMEA+CiKw5uylRsOdZSdDPlsMnwpSS4fqVuwR8TG/c6dTflV3Q55TjAIgRCuM4jzpLyWUfNaGp+FVa8s7oZWrlsjXDEU5ptecPvJ2D4655brNzq1zT52ZFYM5VFxSYybZYG/VZ8V1AdYlyCQp7j3EcB8wFJBGh66/OudeZ8+HWzbgujhs2TG+Lrun1btnpfrnlvybptTy7j1Vs8eT4omJpdbb+Gnb4prG3Yn2Dd5DB8lWxb8hcGHXpw8ITLXxQXFdHBK0ATr1OBPjNe3y7zTptVS3J/h3enw9133vn+ceRNboq34f8Wz0eOO23p/TXsdW++PzIRkGQ27ALRK9YtWLgSrr2WikPXJ9HmJSRrxBppQA0+UpVeP5l1/zc0YbJrFu/wDNP3R732f085LOm092ryRS/Jstr0WR7uK72RDub3e+Wg5W8sLJZZTHY5Bdv82ykk6kTJKU/mteplsJb8YPXX03KtH/ACunttnxTtntn7tz888084/1PX35LZrZb8Nn5Y6f1TWWu54ZGExomLRXTqspmXUDqH6Fs+7qojxV6uO3pfNZZ6IUBj8Lz5NwWN35lg/Co+QV1Yo6XLknodn+WNn9Tssi6OJ4Xbs5q3qP6FrVKffUSa4tbkrdTqd2ispbXrWORp01wu00rYeqik1GUGzQMqAOwioygwpNFTHBBpeH/wBlX9dFb8Hicmr8Mdq2663nuFcP0H0h8dBpKAoNyBsHioMaUBQFAUBv30CSnqoMaGgaceaa/SOJT4NdvvVJmIWLZlrXrmBsZQSfw1bB71YTf1NluLrUvzbdddtFtU4sr1mHXXdsbVuFb9JNb57GGpiItinW60TflV6TiWxiUYMY5A02Kf43lfTWdPgArnyT8TOFn25s/ZjKUrLSloUQ4nTiSVE6KGoI1G/aK03RWrfjmlNlXTDmHyAyy3iVdMefOWRFKU6+wlPBcAVElSi3tDu3aSg6/i1+Xcy8o6nBM34p+bG+f7/q6e71P2rknnvR6iIxZ4+Tduj/AOP0bd9vfs9LqBd2nGXH477SmX2VFD7DiSlaFDelSVaEEdRr5u2Jtmk74foOO6Loi6JrE7pWT3beXCOYHNGDIuDAex/DQm8XVtaSpt1xC9IjB6POcHEQfkoNfSeX9F/M6mJnw2bZ+yPX7nzHnXnH+n6C62yaZMvwW9cR+K7ujZ2zD1Wv95jWG2SrrLPGGh+Za18511XooHjO/wAFfpNJmX4DWkOlt8kTb3cpEuQvtptxeK3VDdqrqHQEjd4K3xHRDRM9MpNY7EudMt9jig/nl
+									hC3ANyBtccPiGprfddGO2vU02Wzkuo7WMRmYkdiJHRwR4zaWmUdSUDQfAK8WZmZrL2oikUhjrrBmbPhopJT4aLBtSSCeqoplW+osGVD4aMkvwX98P8A7Kv66K34PE5NX4Y7Vs11vPcK4foPpD46DRkhIKlHQDaSaDUu3IkkMoASPlq3n3K1ze3Ri60m7ZwJTt6B0VeKWPDAEhzwH3KcRwQwZCh8kfDSLjgJMlY/owfdNOM4CDMV/Vge6anGcBJmuD5CfhpxysY4kwua/wBHCnxD+Wpxyy+XDiqkPr9J1WnUDoPgqcUs4tiDBAPR7tYqaWjcQaCsOacdS8ejP6bI0xBV4loUny6V1aSfj7mjUx8Pe6xzek16bgXRYtBYbQB/9I35K5rt7OFhWtQVAj/igpPuE1rlut3NknbpUlmgGdcqMG5isOIyOyoVPKChi+RfzE1rXcQ6kefp1LCh4K8vX8p02tiuS34v70bLvX099Xt8p8w63lc/4F/w/wB2dtk93R2xSXB5V8sbDyZxu62+LcVzvXZq59yvMlCW3FpA4GWylBI0bRsGm8knTbpWvlnLLNBjmy2azM1mfd6m7zB5gy84zW5ckRbFttItiaxHXPfPspCEZtkj+QSiRxNW+LqmFGPh3uKH4SvgGyvWtto+cuuqhEWJ2fFJcH5xWxsH5KT0+7W+y3pab7uhfHLvHvU4a71Kb4ZVwSBESobUMb+L6Z2+LSuHV5eKeGN0O3SYuGOKd8rJI2Vxu0wpBB16KkwsSZI26VFJ6KLBKt1RkYIG3WgaUmoyS3B06Xh/9lV9dFb8Hicur8Mdq1663nuFcP0H0h8dBELg6djSTs3r+IVrvnobsVvS09a21Nx6I8Q8lbGkiorB20UipIbV7+lA2RrUWDaknfvozMEaVBigwoagigjWUWxd4x+6QGhq86yVxx1uNkLSPdI0rZiv4b4lhkt4rZh01mqb4+zK0h0jUNagL0G88O+vaeYuDGXQ/jtrUk6lDXZK8bain4q5skUuZxuTmxyAUOxVHz0HtEDrSd/vGtcttk9CRJ6KxlsgzLnxoKCt5fnAea0nao+5/LUpMk3RCq8lvUq6Hs1fmojZ1ajJ3a/hK6zWcW0apuqrx1gKVxLG47E/y1lbZXbLCb6bEpxDGF3+cXpKCLXCUFSVbu0VvDQPh+V4PHWOozcEUjfLZgw/Mur0Qv7hSkBKUhKUjRKQNAAOgCvJesQagQsbPFUlYNEA76imSnhOnvUCdKjMwobaBFRmlmEj/Nn/ANlV9dFb8Hicur8Mdq1K63nODcDpH1/GHx0FXWq7G9s3ORwtBdvuk+3vIZVx8IiSXGEFe/hUpKQog9daJdNm5zDvqMk9SAUo1HyR5K2tJpSOo+OsZU2UkUlTdQIVQNEabKisUZwbIB3ioQaKduygRu30EE5g51aOXWPSb/dSXVg9la7ahQS7LkEapbRruA3qV8kbeqs7LJvmkMb74tisvJnLMmut+yGfk0l0RblLkKkI9V1bQxqokIZGuqUp12V6O6jz52y7X8gM9VlVjulmnlIvNjdS66obA8w/sDgHWFJIVp0nw0umovlMh2K82+yeFxvcTuPWD4DSBvRf4zqNHVKiufLTtKfcI+OkwtZR6fcImiuF3tCfwQTUiEQ2W/2hPCOFPh31nFpU5Y8el5BK7JoFqI2R63MI81A6h1qPQKwy5Yxx6Vw4ZyTToX3AgRLZEZgwmgzHYGiU9JJ3qUeknpNeXddN01l69lkWRSHJUBvqMjZHhrCQ2R0VAzWLI2sdNFIFRYJUKKYKdu+osSleFD/Nn/2VX10VvweJzavwx2rSrree1t1OkXxrA8tSVje6oYvgXJP/AMQ8iyu2w8Tkc4LffrtIvtztE1r7YbVKccCW7izHeStSxHcSkpfQeHZpuBrVLfbELuO81izT5Poo+aPJW1oglQqSyINRYMkbahBJTruoGVpI2ke7QN1GUSSrrqMjaqDrX3k+fkDkpi6Wbcpmbn+QtrRjFqc0WlhHornSEf1bZ2JB9NezcFabsWLjn0NWXJwx6Xk/I5w8wb/Ljv5jks7LW2OJLaLg4FqaS4riX2JAARqejTTo3V6FlsRGyHHN0zvSplRvpiJtLTk964rQ1DispK3XHVnhS2EDU8RJ00rG7YkRV6Ccse7rNwaww719pBrP5ae1vERw8UPslDVMHiTqQU/KcGoKujQCueNTETMU2On+XrG/asiXGlxSlEyK5EdUNra9D49FDUK8YNb7Lou3S57rJt3tM/8AKrNGud2DXoG80Els2FS7p2cm4FUKCrzgnTR5wfig+iD1n3q58mpi3ZG2W/Hp5u2zshakWDFgx0RITKWGGRohtPX0knpJ6Sa4Lrpumsu62ItikHdDWNW2pJ2iqEHdWMhpQ6axWCDUlSFJ13VBx9x20WAd1RkZUKLCV4X+9X/2ZX10VuweJz6vwx2rPrrec1t1/uv0x8dSdyw6hR0RJ/Ok32VydxFqzIu0/H8Z5rssNf7mF9iRFqmOST6ukpivpS/GbWHivjb89PA4nTXLdbvTLldze5fc57Lech5c35N/tNhvk7HrnIDamiidAUEupCV6EoUFJWhW5SSCKxmGyJidzsOj0E/NHkrY54nayd3iozNncaxDSug1FJpIwR00DBAPRtqSsG1DoqM1Rc5+b+NclcMlZVkBEqW8VRscsCFcL1xm8PElpJ0JShO9xemiU+EgHOyyb5owvv4Yq8J8yzbIuYmVXfMsqmmdery72j6hsbaQnY2wyjchttOiUgeUk16NtsWxSHDdMzNZapno+GtkMXf3uK46bhlWV5DNsypUGxQmkWi8uA9lGuDy9Fob180uKZJOu9I+dXNqppEQ6NPG2r00ecbZacedcS000CpxxZCUpA3kk7BXC7VR5Pm7Utt23WllDjJ81dwdSDr0Hskq3fOPuVYmY2wTbE70FiC63J9ESG2ZT69yEpGun4SjuAHSTWz59/W1fIs6ls2LDY9uLcu5rE+4J2pQdrLR/FT8ojrPuVrvyXXb5bLMdtu6EzVvB9+tbYaVv8FQIIG6sZZQbIG6lVIKf/dVqGVA6bt1YkGqSyFYqaUNpHv0Qk6bemozMqTs2UEowwf5o/8Asyvrprdg8Tn1c/D3rOrree1t1/uv0x8dSVh1lS1zJh5C9YJ3L6MrD5ORXK7WvPLfeWHSmO+JL6BNtz7Ud5txS3ezHYqeGuhJSNdNUt1taui/cKyHN8by7MuUec8hr7ylnuY3ZZ7N1lRVx7fOcx6O1aX5BKmW0KkTA6h1RQpXoniJ30uLN9HsANiU/NHkrNqZozggp6qxlTJG8HZRTdAHdUDKh79RUQzvN8a5cYpec0y6eLdYrIz2slzYXHVnY2wwgkcbrqtEoT0nwamrbbN00hZuiIeCHOjnLkXPDOJWWXvWFbmAY2MY+lfE1b4QOobB3FxZ85xXylfihIHdZZFsUhxXXcU1VszvHircwW/yj5X5DzczCDiWPI7ILAfvN3WkqZgQ0nRb7un5KE/KUQOsiX3xZbWWVls3TSHtZYrPhnJzEbXilkY9Wt9uaPq0UaKlS3VbXJDx2arcVtUo7OgbABXmXXTdNZd9tsWxSFcX/JrlfnD6wvsIaTqzBbPmJ8KjvUfCfcrFT+P4lcL4pLygYdu186YsbVjqbSfS8e6qzXXa7RAs0cR4DAaSQO1dO1xwjpWrefJUkbIjUaVipkp13bKKYUNfcqBo7/BUuWCVViyJoMEa0HGUBqalWRulAhQqKb108VRYJNFSfDhpdH/2ZX101uweJzarwx2rLrrcDXXT+6/THx1JWN7rnO5b2bF83j8w8blXmz3LJbm6nL7Mi5THrTd/WYzv5xdvfdcjtPIcbQtDjCEK2FJ4kqIrXc3W73TDui86+dneI5r5jnmYZDZLLy2s2MNs2DlLYX1yBClz7i+wl65LUlK/XGhbXQtLm1KXE8CEgmpMUhbJmZerIHmI8CR5KzaWKMrRUZEK66kLBtSRvpAbIqDXXS4W6z26feLtMat1qtcdyXcrhIVwNMMMpK3HFqO4JSNTSIqTNHg33oO8hcefGWep2lx6Dy1xp5acXtS/NVKdGqFXGSn8Nwfo0n0EbPSKq7MWPhj0ufJdV1uY3DxitrUm2I4xfczyC14vjNvXdL5eHQzBho0Gp0JUtajsQhCQVKUdgAJrKZiIrJETM0h7Hcs8bxzkZhLOJYkpm75JN4X8ty/g82TL00Ia4tpba9FsHYB521RNedkvm+Xdjs4IPLM25y9SXZ06WvwrcWo1rZrSx3l+hjgm30JeeG1u2g6oT4XD8o+AbPHRVjlHCAEpASBoEjYAB0AVVgmoorGSDZ30ZGFbzQII1G3bpUkNlOuu3xVgyIKSP5aKTQMuDbrUllBg76sBJGooGyNaxmGUQQRuqKk+IfvR79mV9ZNb8G9zarw96yq6nA11zGsb6Y+OpJDp0uJychc9304yzf73zPR61eMwttpuVykY/aHnYjiRcbvFXI+zmJTiT2TaUI7f85xdmEnjGu5uspVCOQ3Lqy3bJbV3q8RSjD08+MKYk80+X1vdLtrk3xxbMiNcWzoAH2kl9t0kAq4+LQK4+LGepnbHS7+j0EeFI8lbGg3QgUbGCNdlYhBqLJs6AEkhISCVKJ0AA3kk0Hir30+9KnmTdXuVXL+5dry+scj/APY7xHUeC9T2VeghXyozCh5vQ4vztqQnXox2U2tN91XQtlI10rohrubuGw8+6zHjsrkyH1pbYYbSVrcWs6JSlI2kknQAVWL1H5CcpDyysb9xuyUqzHIWEouq07fVIxIWIaFDftALhG9QA3JFcmbJxTSNzrxY+GK9LsvY8buV/dKIjfZxkHR+a5sbR4Pxj4BWhtXfYsattgY4YqC7LcGj85wDtFeAfgjwCoN1RTZqqSUg0U3wkVjIbUDUUysbjRTVQJrGWUCopop39dA0tOo8IosOMoEUhSaBvrqSyqRtFYqk+IfvR79nV9ZNbsHic2q8PesiutwNfcv7t9MfHUkh1wOJ3vEuYc2647FVccL5g+vu5HaklCFWe+SGkOOXNsrUC4xO9VbbdbTtbe0dHmuOcOu5usja6sd0LugNcgjZs+TlGTW+9ZViLcTPuVlzkNv22Len3GX35LHYlKUqbU2pABC9ijovTfJllZbR6dJALaNnyR5K2bmk2pGh2HZUCCCN9GcMGpKkHfWKvKTv5976LjUi5933BLuYeQymW2+Y1/bKkGJHkNhxNtYcGmjjzakl1WvmoVwDapXDtxxHS13T0PKCOAAkJ04QBwgbtOjSuhqbhkgHU7ANpJrOEl6K92Tkj9lRoPMjK4SvtiYkLxK0up2xmVjzZa0Ea9q4D+bHyU7d6tnNmydEN+Gzpl6M47y/ckhE2/JUywdrVuB4XF67QXCNqR4N/irnb1ssRmIzTceM0mPHaGjbLYASkeACoFEEbxqKBlW/ZQNK3+CqpNGTB8lSdwZOw6VisEKSFCiuOU+GoEGpKwxWLIhQ269dA0aBlQ3isWRrQUqptSduo20qu4hW/dRUmxEf5m7+zq+smt2De5tV4e9Y9dTgcC5f3f6Q+OpJCJPbj461y32NUusGxZCRolHhSPJW7fDmJV8VQNUW1gjZrUZmiKkEPDH2m3dsu9pyxfeKxa3uTMZyJqPE5jIZSVG33BhCWGJzgG5mQ2lDalbkuJGvpirEtd0PMrEr85Hks2yW5xxXyERlq2ltZ3J16ju8FbrLuhhMPS7und3W4cyLszm18tKpGLWx4Gzw306Mz5LZ/SOlWzsGiNuo89XmjUBVXJkpFI3srLa73s1j2HW+wpQ+sJm3LQaylJ81vwNJ+Tp17/FXK6ISpQ8O+jI2agxQNrSCNdN1AwpOyqsGiNKLDG+oppXXWMkEUZGVDQ6UDR2GpJDGgrBkSpJ02baKYI03igaUOmpLKDJ2GopNRkwRs8VBI8TH+ZO/s6vrJrfg3ubVeHvWLXU4HAuX93+mPjqSIo70+CtcttrUub6wluWQP0aPmjyVuhzMEa+OoGTvoMUZkHfWMq40uJEnxJMGfFZnQZrS2JkKQ2l1l5pwFK23G1gpUlQOhBGhoTDzlzH2YfIPIs2hZTYLlfMGs4mIl3nCba427AkBLgcU3HW8C7FSvakhCiEj0AmrVjwPQSy2G0Y1a4VjsFtYtNotrKI8GBHTwobbbHClI6ToBvNYs2yO6pKmj10ZmiKgTQYI1GnXQMEdFFN1VJ0FFNqSaxkMkEb6iwbWNxophVSRgVjLKGaimiNdQaBlaBpv3dFFhx1J0rFkQASRoCT1VFgssPaallYHXwmitviUqKby9FTLYVKEVSjFDiC6EhaAVFAPFptG3St+De5tV4e9ZddTga+5f3cfPFSRFnumtcttu5qXBtNYNyyUfo0fNHkra5ifBVkNKFQIoyglQqSyJqKSagQqgZIqKQU6jZRlBlSSN9RTdAUDKhoaBojQ0VlLbivRQpXiBNVZmDTykMJJfcQwlO0qcUEAePiIrG6dixEzu2oReOZPLewpUb5zCxm08HpJl3eE0ofRU6D8Fabs2O3fdHrd2Dlmrzfw8N93ZbdP2KuuXep7t1tUpqVzmxtTiPSTGfclbvDHbcHw1qnXYI/HD1cflLm+Tdpr++Ke+YVRkXf/AO61jzjkc5zPvT7YB7O1Wac8DqNRot1tlHw1vxXxlt4rNsPH5ho8vL804NRbw3xETMb98VjdWFU3D2oHIWKtaLdimb3ZKfRd9ThRgr3HJhI90Vs+XLi+fbCu7x7VjF2+JOPcl7vLO3s3Lnd40YHxpYYfPw0+VPWn8xHUq+4e1W5gvOuC08o8XiIG5Mq4TZKx87swwPgq/K9LGdR6EDm+0l7y1/ktwcds+KWuVLVwRYsC0PzX1KI10QH5DvEQBr6NX5UJOou9Csr335O9r69KgzuY79knMKKZNvj2i3RltKA4iCgxSobNu3oq/LtYznv60Ku3eA70uRtTXbpzczIx4qYypQbuC4KOCY6lllSExuxCgpagPN106asWW9STmv61Q37K8/XcbjBv2aZBOnQpL0Wd6xdpj/51ham3BxKdII4knbWURHUwm6Z6XoZ7KJS3e8ZmTrzinnVYDN1dcUVKP+ZW/eSSazYvoUoKb5385MJ5HYnbsu5gPy4eOzrzGtDk+HHMkx3ZLbq0OONoPGWx2R14ApW7RJrRqNRZgt4r91aPV5PybUc1yzh08RN8WzdSZpWlIpE7q7emkelxMH5l8vuaNqF75eZha8utpH5xdvfC3Wjprwvx1cLzSh1LQDWOPNZlitkxLHW8t1Wgv+XqMd1k+mNk9k7p7pSJ3easudY6PQb+aPJW1ysK31ehTahrUDVFgEE7hrRkSUqSCpQKUjaVHYB7prFYlpJ+RY7bG1O3LILXbmkem5KmMMpHjK1gCsJvtjfMetvx6fLkmltl09kTKsb13h+Q2P8AGLvzjw+KtHpNJu0Z5f5DK1n4K03avDbvvj1vUweXOZ5vBpsk/pmPfEK0n99vutweIK5sw5ZRvEODcZGviKIxB9+tM8y08fi9kvSx+RudX/8A15jtutj/AKlcXf2i/dut3GmDJyfIFJ9H1K0KaSr6Ut1jyVpu5tgjdWe56eD6b83v8UY7e2//ALYlXE/2nvLFsrFu5YZXNA/RqfkQI4V49HHSK1TznH0Wz7HqY/pbrJ8WfHHZF0/ZCubx7UOariGP8l47f4DlzvS1++hiKj61abudT0We16OH6V2/5mpn9Nn33K5ne0x5zPFfqGD4bbwf0fG3PkFPuqlIB96tU84y9ER7XpY/pfy+PFlyz+zH2K4vHtA+8zdOIR8isliQrcLfZo2o8SpPbmtN3NM89MR3PSw/Tvk+PfZfd23z9lFdTu+B3mp/H2vOS+MheuqYqYsYDXq7FhGnuVqnX55/HL0cfk3k9m7TWz21n3yri8c5+cGQ8YvfNTLbklfpodvMzgP0EuhPwVpu1GS7fdPrenh5JoMPgwY4/Rb9yAyLlcphUZlzmTCvasvyHXST4eNR1rVWZehbist8NsR2REOAGmwdQ2kHr0FRsrJdVEDv37yd+Yj6tfWcp/p47Z97+cfqL/veX8tn7sGrI3GevdkZmhBgvXGI3NDh4Udip9Ac41bNE8JOp6q9F8OuqS5y6RjnMZEdUZUlcy7MY2++zbWFp7IwlRAiK0XZO0oeQ0406GwCVOhWpTVGJWeYJIs8Cw3CyKvUS2WG0+rvyHCrsrn2VvjzkwW2m2OxAZEhR7Va0reCV67gYIpPyHFI1xkJtjDSmZ9guVon3e2QjDSl2Y+4uO8zGdUkkts8DLhPCVp4t585QbZHNVqyQ3rPh8GTZrO63DUuO2pLHHJZfiPSHj5z6x2wYcbA7Q8KHFJB4VKSaOCedF/t1qXarDJlWJclMcSbj9pPLkJLAhjsoykdj2LChBRq0Nd587dpBAZDd6ya63C6R7RLmyrzNfmONwozzyS7JdU6oICErJHEvZtNB6oey35e5/jvPDKsiyHBchx+wScIlxI16udrlw4rj658FxLSHX20JUopQpQAO4HqqwPeash5we1J/hnhffS1f4eZXkc7/p++Ptfov0v/AN2n/wAd3vtfPlYsgvuL3SLe8avM7H7zCVxxLrbpDkaQ2fxXGlJUPfr5Oy+6ya2zSX9BajTYtRZNmW2LrZ3xMVj1S768qvaPc58N9Ut3MCND5pWNo8LsmZ/yd3CDp6M1lJQsp/8AmtKJ6VV6mDm+WzZd8Ue1+f8ANvptoNTW7TzOK70bbP2Z+yY7HcyZ7VOwpZ0tfJe5vucI7MzLwwynd09nHdNd888jos9r5bH9J8v49TbHZZM++YVpd/ak8x3ysWLlXjVtSdezVOmTJpHjDYjA1pu53k6LY9r1MP0p0kfxM989kW2+/iV3cfaT94yYhaYcXELSVei4xa3nVJ8Xbylj3xWqecZ53Uju/telj+mXKbZ2zku7bo+y2FaXjvzd6S8hSV80HLWhXyLZbbfF08ShHUr4a0Xcz1E/i9kPTw+Q+S4v8iv5rrp+1Xk/vNd4i5oW1N515ettz00NXJ2OD/1HZ1qnW5533z63pY/K/Ksc1t02P9mJ99VZ3XNMzvqlKvmY368qX6Xr1zlyNfcddUK0XZLrt8zPe9TDodPh/h47Ley2I90IwtKXdroDh61+d5axdUTTcEpSnYlIT4hpUKlVUFAUBQFAUGCAaBJ0G3UAeGopLag6sNtEOuHc2jzle8NTVjaTs2yl9u5fZ/dwlVpwPJLmhfoLi2ia8lXiKGSDWcYr53Wz6pcWXmOlxePLZHbdbH2rQsvdW7x9/KPs7ktlKUOei7NiCAj8qYpnqrfboc926yfc8rP5s5Th8Wpx908X7tUld9nT3tb1PLyMAt9tYdSgdtOvlvQE6D5SWXXVe8K+n5dhvxYYtuik7X4J505jp+Yc0yZ9PdxWTFsRNJjdbETviJWVYvZP8/rglC77mmFY6lXptIfnT3UjxIjNIP5ddtHyq07N7IS8rWn/AHDz0hx2tnEi2WFbivDop6akfzatBcVi9knyZiJByLmTmd8c0871UwICCdnR6s+r+dSgtCx+zD7qlpWlc6zZJkpB14Lne5CUndsKYYjClBcFq7j/AHTrMhCIvI3HZHBp589D05R003qlOuk7qUFs2HkdyYxZLYxzlNh9lLOnZuxLLBacGmmnnpZ4ugdNUWWxGjRUJajR2ozSBohtpAQkAdACQBQP0BQdFvaH8uc35m93tVlwHG5eVXm2ZHAusm0wEhckxI7UlDi22tQpwpLifNQCo9A2V5nNsN+XBSyKzV9x9PuZafQcz49RfFls2TbWd1ZmN89G7fOx82Nxttxs8+Va7vAk2q5wXC1Ot0xpbD7Lid6HGnAlSSOoivjrrZtmkv6SxZbMtsX2TE2zumJrEuFUZrJT6CPmjyVtaSqIKKKIKAoG1OtJ9J1CfGoCovDLYQbdcbotLVqtsu6OqOiW4Ud2QonwBpKjWURM7mvJks
+									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"></img></a></div></div></div></div></div><script type="text/javascript">						function collapseHandler(e) {
+							var targetSection = e.target.parentElement.parentElement;
+							if (targetSection.classList.toggle('collapsed')) {
+								e.target.innerText = '+';
+							} else {
+								e.target.innerText = '-';
+							}
+						}
+						var collapseButtons = document.getElementsByClassName("collapseButton");
+						for (var i = 0; i < collapseButtons.length; i++) {
+							collapseButtons[i].addEventListener('click', collapseHandler);
+						}</script></body></body></html> 
diff --git a/Samples/Outdated/Debian 10.html b/Samples/Outdated/Debian 10.html
new file mode 100644
index 0000000..c7f0ba6
--- /dev/null
+++ b/Samples/Outdated/Debian 10.html	
@@ -0,0 +1,12 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta name="viewport" content="width=device-width, initial-scale=1.0"></meta><meta http-equiv="X-UA-Compatible" content="ie=edge"></meta><title >Debian 10 Report [03/04/2022 11:31:00]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	width: 100%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 30%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(299.988deg); transform: rotate(299.988deg);}.donut-chart.chart .chart-center span:after {content: "83.33 %";}</style></head><body ><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Debian 10 Report</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>4.14</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Are you seeing a lot of red sections? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >Security baseline for Debian</li></ul></p></div><div class="main content"><div class="host-information"><p >This report was generated on 03/04/2022 11:31:00 on debian with TAPHtmlReport version 1.8.</p><table ><tbody ><tr ><th scope="row">Free physical memory (GB)</th><td >2,3</td></tr><tr ><th scope="row">Operating System</th><td >Debian GNU/Linux 10 (buster)</td></tr><tr ><th scope="row">Kernel Version</th><td >4.19.0-18-amd64</td></tr><tr ><th scope="row">Free disk space (GB)</th><td >112,3</td></tr><tr ><th scope="row">Installation Language</th><td >de_DE.UTF-8</td></tr><tr ><th scope="row">Hostname</th><td >debian</td></tr></tbody></table><h1 style="clear:both; padding-top: 50px;">Summary</h1><p >A total of 18 tests have been executed.</p><div class="gauge"><div style="width: 83.33%" title="True 15 test(s), 83.33%" class="gauge-meter passed"></div><div style="width: 11.11%" title="False 2 test(s), 11.11%" class="gauge-meter failed"></div><div style="width: 0.00%" title="Warning 0 test(s), 0.00%" class="gauge-meter warning"></div><div style="width: 5.56%" title="None 1 test(s), 5.56%" class="gauge-meter "></div><div style="width: 0.00%" title="Error 0 test(s), 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 15 test(s) &#x2259; 83.33%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 2 test(s) &#x2259; 11.11%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 5.56%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">General Benchmarks</h2><p >A total of 18 tests have been executed in section General Benchmarks.</p><div class="gauge"><div style="width: 83.33%" title="True 15 test(s), 83.33%" class="gauge-meter passed"></div><div style="width: 11.11%" title="False 2 test(s), 11.11%" class="gauge-meter failed"></div><div style="width: 0.00%" title="Warning 0 test(s), 0.00%" class="gauge-meter warning"></div><div style="width: 5.56%" title="None 1 test(s), 5.56%" class="gauge-meter "></div><div style="width: 0.00%" title="Error 0 test(s), 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 15 test(s) &#x2259; 83.33%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 2 test(s) &#x2259; 11.11%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 1 test(s) &#x2259; 5.56%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h1 id="toc">Table of Contents</h1><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#General-Benchmarks">General Benchmarks</a><ul ><li ><a href="#General-BenchmarksSecurity-Base-Data">Security Base Data</a></li></ul></li></ul><section ><h1 id="General-Benchmarks"><span class="failed">General Benchmarks</span><span class="sectionAction collapseButton">-</span><a href="#toc" class="sectionAction"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the general benchmark results</p><section ><h1 id="General-BenchmarksSecurity-Base-Data"><span class="failed">Security Base Data</span><span class="sectionAction collapseButton">-</span><a href="#toc" class="sectionAction"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >DSBD-001</td><td >Ensure the system is booting in UEFI mode.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-002</td><td >Ensure the system is using SecureBoot.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-003</td><td >Ensure the system has a TPM Chip.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-004</td><td >Ensure the TPM Chip is implementing specification version 2.0 or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-005</td><td >Report the count of local users on the system.</td><td >System has 40 local users</td><td ><span class="auditstatus ">None</span></td></tr><tr ><td >DSBD-006</td><td >Report the count of local interactive users on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-007</td><td >Get the count of admin users on the system.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-008</td><td >Ensure the NX bit is set.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-009</td><td >Ensure the ASLR is enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-010</td><td >Ensure AppArmor or SELinux is enabled.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-011</td><td >Ensure CPU has no known vulnerabilities.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-012</td><td >Ensure root login using SSH is not permitted.</td><td >Login for root using SSH is permitted.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >DSBD-013</td><td >Ensure a firewall is installed (ufw, iptables, nftables).</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-014</td><td >Ensure /etc/passwd and /etc/passwd- have proper file permissions.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-015</td><td >Ensure /etc/shadow and /etc/shadow- have proper file permissions.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-016</td><td >Ensure /etc/group and /etc/group- have proper file permissions.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-017</td><td >Ensure /etc/gshadow and /etc/gshadow- have proper file permissions.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >DSBD-018</td><td >Ensure /etc/ssh/sshd_config has proper file permissions.</td><td >The file permissions are not set correctly.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></div></div><script type="text/javascript">function collapseHandler(e) {
+	var targetSection = e.target.parentElement.parentElement;
+	if (targetSection.classList.toggle('collapsed')) {
+		e.target.innerText = '+';
+	} else {
+		e.target.innerText = '-';
+	}
+}
+var collapseButtons = document.getElementsByClassName("collapseButton");
+for (var i = 0; i < collapseButtons.length; i++) {
+    collapseButtons[i].addEventListener('click', collapseHandler);
+}</script></body></body></html> 
diff --git a/Samples/Outdated/GoogleChrome.dark.html b/Samples/Outdated/GoogleChrome.dark.html
new file mode 100644
index 0000000..5b35b6f
--- /dev/null
+++ b/Samples/Outdated/GoogleChrome.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Google Chrome Audit Report [03/20/2019 15:37:02]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px;  	color: #dddddd; 	background-color: #14141d; }  a { 	color: #ffc17a; }  a:visited { 	color: #ff7aad; }  .header { 	background-color: #2a2a3d;  	padding: 35px 20px; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #2a2a3d; }  .gauge { 	height: 25px; 	background: #43435f; 	border-radius: 8px; 	overflow: hidden; }  .gauge .gauge-meter { 	height: 100%; 	display: inline-block; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #2d2d3f; }  table.audit-info th { 	background-color: #212130; 	text-transform: uppercase; 	border-bottom: 1px solid #2d2d3f; }  table.audit-info tr:nth-child(even) { 	background-color: #2a2a3d; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: left; 	white-space: nowrap; 	width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	background-color: #212130; 	border-radius: 8px; 	font-weight: bold; 	color: #dddddd; }  a.totop:hover { 	background-color: #43435f; 	color: #ff9924; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Google Chrome Audit Report</h1><p>Generated by the <i>GoogleChromeAudit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Google Chrome Security Technical Implementation Guide V1R15 2019-01-25.</p></div><p>This report was generated at 03/20/2019 15:37:02 on ************.</p><table><tbody><tr><th scope="row">Hostname</th><td>*************</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>46,3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>7,669</td></tr></tbody></table><h1>Summary</h1><p>A total of 36 tests have been run. 4 resulted in false. 0 resulted in warning.</p><div class="gauge"><div class="gauge-meter passed" style="width: 88.89%" title="32"></div><div class="gauge-meter failed" style="width: 11.11%" title="4"></div><div class="gauge-meter warning" style="width: %" title="0"></div><div class="gauge-meter " style="width: %" title="0"></div></div><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTBC-0001</td> <td>Firewall traversal from remote host must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0002</td> <td>Site tracking users location must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0003</td> <td>Sites ability for showing desktop notifications must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0004</td> <td>Sites ability to show pop-ups must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0005</td> <td>Extensions installation must be blacklisted by default.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0006</td> <td>Extensions that are approved for use must be whitelisted.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0009</td> <td>Default search provider must be enabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0011</td> <td>The Password Manager must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0013</td> <td>The running of outdated plugins must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0015</td> <td>Third party cookies must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0017</td> <td>Background processing must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0019</td> <td>3D Graphics APIs must be disabled. (Note: If 3D APIs are required by mission, this is not a finding.)</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0020</td> <td>Google Data Synchronization must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0021</td> <td>The URL protocol schema javascript must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0023</td> <td>Cloud print sharing must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0025</td> <td>Network prediction must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0026</td> <td>Metrics reporting to Google must be disabled. (Note: This policy will only display in the chrome://policy tab on domain joined systems. On standalone systems, the policy will not display.)</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0027</td> <td>Search suggestions must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0029</td> <td>Importing of saved passwords must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0030</td> <td>Incognito mode must be disabled.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0037</td> <td>Online revocation checks must be done.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0038</td> <td>Safe Browsing must be enabled,</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0039</td> <td>Browser history must be saved.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0040</td> <td>Default behavior must block webpages from automatically running plugins.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0051</td> <td>URLs must be whitelisted for plugin use</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0052</td> <td>Deletion of browser history must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0053</td> <td>Prompt for download location must be enabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0056</td> <td>Chrome must be configured to allow only TLS.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0057</td> <td>Safe Browsing Extended Reporting must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0058</td> <td>WebUSB must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0060</td> <td>Chrome Cleanup must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0061</td> <td>Chrome Cleanup reporting must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0063</td> <td>Google Cast must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0064</td> <td>Autoplay must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0066</td> <td>Anonymized data collection must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0067</td> <td>Collection of WebRTC event logs must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/GoogleChrome.html b/Samples/Outdated/GoogleChrome.html
new file mode 100644
index 0000000..3099862
--- /dev/null
+++ b/Samples/Outdated/GoogleChrome.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Google Chrome Audit Report [03/20/2019 15:31:01]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px; }  .header { 	background-color: #9e9e9e; 	padding: 35px 20px; 	color: #ffffff; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  .gauge { 	height: 25px; 	background: #a7a7a7; 	border-radius: 8px; 	overflow: hidden; }  .gauge .gauge-meter { 	height: 100%; 	display: inline-block; }  table { 	border-collapse: collapse;     font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left;     vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #a7a7a7; }  table.audit-info th { 	background-color: #cacaca; 	color: white; 	text-transform: uppercase; 	border-bottom: 1px solid #a7a7a7; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: left; 	white-space: nowrap;     width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center;     width: 70px; }  .passed, .green, .failed, .red, .green, .red, .orange { 	color: #fff; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Google Chrome Audit Report</h1><p>Generated by the <i>GoogleChromeAudit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Google Chrome Security Technical Implementation Guide V1R15 2019-01-25.</p></div><p>This report was generated at 03/20/2019 15:31:01 on ************.</p><table><tbody><tr><th scope="row">Hostname</th><td>************</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>46,3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>7,833</td></tr></tbody></table><h1>Summary</h1><p>A total of 36 tests have been run. 4 resulted in false. 0 resulted in warning.</p><div class="gauge"><div class="gauge-meter passed" style="width: 88.89%" title="32"></div><div class="gauge-meter failed" style="width: 11.11%" title="4"></div><div class="gauge-meter warning" style="width: %" title="0"></div><div class="gauge-meter " style="width: %" title="0"></div></div><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTBC-0001</td> <td>Firewall traversal from remote host must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0002</td> <td>Site tracking users location must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0003</td> <td>Sites ability for showing desktop notifications must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0004</td> <td>Sites ability to show pop-ups must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0005</td> <td>Extensions installation must be blacklisted by default.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0006</td> <td>Extensions that are approved for use must be whitelisted.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0009</td> <td>Default search provider must be enabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0011</td> <td>The Password Manager must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0013</td> <td>The running of outdated plugins must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0015</td> <td>Third party cookies must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0017</td> <td>Background processing must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0019</td> <td>3D Graphics APIs must be disabled. (Note: If 3D APIs are required by mission, this is not a finding.)</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0020</td> <td>Google Data Synchronization must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0021</td> <td>The URL protocol schema javascript must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0023</td> <td>Cloud print sharing must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0025</td> <td>Network prediction must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0026</td> <td>Metrics reporting to Google must be disabled. (Note: This policy will only display in the chrome://policy tab on domain joined systems. On standalone systems, the policy will not display.)</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0027</td> <td>Search suggestions must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0029</td> <td>Importing of saved passwords must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0030</td> <td>Incognito mode must be disabled.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0037</td> <td>Online revocation checks must be done.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0038</td> <td>Safe Browsing must be enabled,</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0039</td> <td>Browser history must be saved.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0040</td> <td>Default behavior must block webpages from automatically running plugins.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0051</td> <td>URLs must be whitelisted for plugin use</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTBC-0052</td> <td>Deletion of browser history must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0053</td> <td>Prompt for download location must be enabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0056</td> <td>Chrome must be configured to allow only TLS.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0057</td> <td>Safe Browsing Extended Reporting must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0058</td> <td>WebUSB must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0060</td> <td>Chrome Cleanup must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0061</td> <td>Chrome Cleanup reporting must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0063</td> <td>Google Cast must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0064</td> <td>Autoplay must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0066</td> <td>Anonymized data collection must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBC-0067</td> <td>Collection of WebRTC event logs must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Microsoft Windows 10 BSI Dark.html b/Samples/Outdated/Microsoft Windows 10 BSI Dark.html
new file mode 100644
index 0000000..ccf2ae0
--- /dev/null
+++ b/Samples/Outdated/Microsoft Windows 10 BSI Dark.html	
@@ -0,0 +1,28 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows 10 BSI Report [01/17/2022 14:14:21]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: #f3f3f3;	background-color: #14141d;}.content {	padding: 30px 40px;}a {	color: #ffc17a;}a:visited {	color: #ff7aad;}.header {	background-color: #2a2a3d;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: white;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #2a2a3d;}.gauge {	height: 25px;	background: #43435f;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	width: 100%;}table.audit-info th, table.audit-info td {	border: 1px solid #55555f;}table.audit-info th {	border-bottom-width: 2px;}table.audit-info tr:nth-child(even) {	background-color: #272733;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 30%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #dddddd;	background-color: #212130;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #43435f;	color: #ff9924;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #424252;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: #14141d;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: #f3f3f3;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(286.272deg); transform: rotate(286.272deg);}.donut-chart.chart .chart-center span:after {content: "79.52 %";}</style></head><body ><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows 10 BSI Report</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>4.14</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Are you seeing a lot of red sections? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >BSI SiM-08202 Client unter Windows 10, Version: 1, Date: 2017-09-13</li><li >Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03</li></ul></p></div><div class="main content"><div class="host-information"><p >This report was generated on 01/17/2022 14:14:21 on DESKTOP-UTMU75K.fb-pro.com with TAPHtmlReport version 1.8.</p><table ><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-UTMU75K.fb-pro.com</td></tr><tr ><th scope="row">Build Number</th><td >19043</td></tr><tr ><th scope="row">Free disk space(GB)      </th><td >100.5</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >5.398</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 10 Pro</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr></tbody></table><h1 style="clear:both; padding-top: 50px;">Summary</h1><p >A total of 1250 tests have been executed.</p><div class="gauge"><div title="True 994 test(s), 79.52%" style="width: 79.52%" class="gauge-meter passed"></div><div title="False 256 test(s), 20.48%" style="width: 20.48%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 994 test(s) &#x2259; 79.52%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 256 test(s) &#x2259; 20.48%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS Logging</h2><p >A total of 51 tests have been executed in section BSI Benchmarks SiSyPHuS Logging.</p><div class="gauge"><div title="True 51 test(s), 100.00%" style="width: 100.00%" class="gauge-meter passed"></div><div title="False 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 51 test(s) &#x2259; 100.00%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS HD</h2><p >A total of 379 tests have been executed in section BSI Benchmarks SiSyPHuS HD.</p><div class="gauge"><div title="True 313 test(s), 82.59%" style="width: 82.59%" class="gauge-meter passed"></div><div title="False 66 test(s), 17.41%" style="width: 17.41%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 313 test(s) &#x2259; 82.59%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 66 test(s) &#x2259; 17.41%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS ND</h2><p >A total of 287 tests have been executed in section BSI Benchmarks SiSyPHuS ND.</p><div class="gauge"><div title="True 240 test(s), 83.62%" style="width: 83.62%" class="gauge-meter passed"></div><div title="False 47 test(s), 16.38%" style="width: 16.38%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 240 test(s) &#x2259; 83.62%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 47 test(s) &#x2259; 16.38%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS NE</h2><p >A total of 258 tests have been executed in section BSI Benchmarks SiSyPHuS NE.</p><div class="gauge"><div title="True 212 test(s), 82.17%" style="width: 82.17%" class="gauge-meter passed"></div><div title="False 46 test(s), 17.83%" style="width: 17.83%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 212 test(s) &#x2259; 82.17%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 46 test(s) &#x2259; 17.83%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiM-08202 - BPOL</h2><p >A total of 275 tests have been executed in section BSI Benchmarks SiM-08202 - BPOL.</p><div class="gauge"><div title="True 178 test(s), 64.73%" style="width: 64.73%" class="gauge-meter passed"></div><div title="False 97 test(s), 35.27%" style="width: 35.27%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 178 test(s) &#x2259; 64.73%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 97 test(s) &#x2259; 35.27%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h1 id="toc">Table of Contents</h1><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-Logging">BSI Benchmarks SiSyPHuS Logging</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HD">BSI Benchmarks SiSyPHuS HD</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDAccount-Policies">Account Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-ND">BSI Benchmarks SiSyPHuS ND</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDAccount-Policies">Account Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NE">BSI Benchmarks SiSyPHuS NE</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEAccount-Policies">Account Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOL">BSI Benchmarks SiM-08202 - BPOL</a><ul ><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><section ><h1 id="BSI-Benchmarks-SiSyPHuS-Logging"><span class="passed">BSI Benchmarks SiSyPHuS Logging</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies"><span class="passed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >4.1.1</td><td >Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.2</td><td >Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.1</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.2</td><td >Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.3</td><td >Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.4</td><td >Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.1</td><td >Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.2</td><td >Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.3</td><td >Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.4</td><td >Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.1</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.2</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.3</td><td >Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.4</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.1.1</td><td >Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.1</td><td >Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.2</td><td >Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.1</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.2</td><td >Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.1</td><td >Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.2</td><td >Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.1</td><td >Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.2</td><td >Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.3.1</td><td >Ensure 'Include command line in process creation events' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.4.2</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.4.3</td><td >Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >5.1.1.1</td><td >Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.2</td><td >Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.3</td><td >Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.4</td><td >Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.5</td><td >Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.6</td><td >Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.7</td><td >Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.8</td><td >Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.1</td><td >Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.2</td><td >Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.3</td><td >Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.4</td><td >Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.5</td><td >Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.6</td><td >Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.7</td><td >Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.8</td><td >Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.9</td><td >Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.1</td><td >Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.2</td><td >Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.3</td><td >Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.4</td><td >Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.5</td><td >Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.6</td><td >Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.1</td><td >Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.2</td><td >Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HD"><span class="failed">BSI Benchmarks SiSyPHuS HD</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >11</td><td >(HD) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >13</td><td >(HD) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >15</td><td >(HD) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >19</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >23</td><td >(HD) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >28</td><td >(HD) Ensure 'Enable Font Providers' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >29</td><td >(HD) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >30</td><td >(HD) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >31</td><td >(HD) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >32</td><td >(HD) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >36</td><td >(HD) Ensure 'Turn off notifications network usage' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >38</td><td >(HD) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >47</td><td >(HD) Ensure 'Turn off the advertising ID' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >48</td><td >(HD)  Ensure 'Allow upload of User Activities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >49</td><td >(HD) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >58</td><td >(HD) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >66</td><td >(HD) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >67</td><td >(HD) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >69</td><td >(HD) Ensure 'Turn off printing over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >70</td><td >(HD) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >71</td><td >(HD) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >72</td><td >(HD) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >73</td><td >(HD) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >75</td><td >(HD) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >76</td><td >(HD) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >77</td><td >(HD) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >78</td><td >(HD) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >79</td><td >(HD) Ensure 'Turn off access to the Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >80</td><td >(HD) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82</td><td >(HD) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >83</td><td >(HD) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >91</td><td >(HD) Ensure 'Enable Windows NTP Client' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >92</td><td >(HD) Ensure 'Enable Windows NTP Server' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >93</td><td >(HD)  Ensure 'Allow Online Tips' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >104</td><td >(HD) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >108</td><td >(HD) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >110</td><td >(HD) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >111</td><td >(HD) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >122</td><td >(HD) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >123</td><td >(HD) Ensure 'Allow Use of Camera' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >125</td><td >(HD) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >128</td><td >(HD) Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >129</td><td >(HD) Ensure 'Turn off Push To Install service' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >130</td><td >(HD) Ensure 'Do not allow COM port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >132</td><td >(HD) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >133</td><td >(HD) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >140</td><td >(HD) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >141</td><td >(HD) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >144</td><td >(HD) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >150</td><td >(HD) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >151</td><td >(HD) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >154</td><td >(HD) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >155</td><td >(HD) Ensure 'Turn off the Store application' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >156</td><td >(HD) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >166</td><td >(HD) Ensure 'Join Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >176</td><td >(HD) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >179</td><td >(HD) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >182</td><td >(HD) Ensure 'Prevent Codec Download' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >184</td><td >(HD) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow only signed scripts'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >190</td><td >(HD) Ensure 'Allow Remote Shell Access' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >195</td><td >(HD) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >225</td><td >(HD) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >228</td><td >(HD) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >250</td><td >(HD) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 'Deny all'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >251</td><td >(HD) Ensure 'Network security: Restrict NTLM: Incoming NTLM traffic' is set to 'Deny all accounts'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >273</td><td >(HD) Ensure 'System settings: Optional subsystems' is set to 'None'. </td><td >Registry value is ''. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >274</td><td >(HD) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >316</td><td >(HD) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >318</td><td >(HD) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >319</td><td >(HD) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >322</td><td >(HD) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >325</td><td >(HD) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >327</td><td >(HD) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >329</td><td >(HD) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >330</td><td >(HD) Ensure 'Microsoft Store Install Service (InstallService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >332</td><td >(HD) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >333</td><td >(HD) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >334</td><td >(HD) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >335</td><td >(HD) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >336</td><td >(HD) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >337</td><td >(HD) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >340</td><td >(HD) Ensure 'Server (LanmanServer)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >342</td><td >(HD)  Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >344</td><td >(HD) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >346</td><td >(HD) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >347</td><td >(HD) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >350</td><td >(HD) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >352</td><td >(HD) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >353</td><td >(HD) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >354</td><td >(HD) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >355</td><td >(HD) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'.</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.
+
+</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >281</td><td >(HD) Configure 'Log on as a service'.</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >283</td><td >(HD) Ensure 'Log on as a batch job' is set to 'Administrators'.</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account
+The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.
+
+</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.
+</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. 
+
+</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 or
+more minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-ND"><span class="failed">BSI Benchmarks SiSyPHuS ND</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects tooverride OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data(when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account
+The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 ormore minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NE"><span class="failed">BSI Benchmarks SiSyPHuS NE</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account
+The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOL"><span class="failed">BSI Benchmarks SiM-08202 - BPOL</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0003</td><td > Ensure 'Configure Automatic Updates' is set to 4</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0004</td><td > Ensure 'Configure Automatic Updates' is set to 'Every Day'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0005</td><td > Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0006</td><td > Ensure 'Specify the maximum log file size (KB)' is set to 'Enabled: 32768'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0032</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 32768.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0037</td><td >Ensure 'Allow enhanced PINs for startup' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0038</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0039</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0040</td><td >Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0041</td><td >Ensure 'Allow user control over installs' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0043</td><td >Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0065</td><td >Ensure 'Enumerate administrator accounts on elevation' is set 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0101</td><td > Ensure 'Restrict Unauthenticated RPC clients' is set 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0109</td><td >Ensure 'Allow Telemetry' is set to 0.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0110</td><td >Ensure 'Do not show feedback notifications' is set to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0111</td><td >Ensure 'Turn on MSDT interactive communication with support provider' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0112</td><td >Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0113</td><td >Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0114</td><td >Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0115</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0116</td><td >Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0117</td><td >Ensure 'Turn off the Windows Customer Experience program' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0118</td><td >Ensure 'Turn off the Windows Error Reporting' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0119</td><td >Ensure 'Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82020121</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0122</td><td >Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0123</td><td >Ensure 'Prevent using Localhost IP address for WebRTC' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0131</td><td >Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0132</td><td >Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0133</td><td >Ensure 'Allow InPrivate browsing' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0135</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (On Battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0136</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0137</td><td >Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0138</td><td >Ensure 'Always install with elevated privileges ' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0139</td><td >Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0140</td><td >Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0141</td><td >Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0142</td><td >Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0143</td><td >Ensure 'Configure Password Manager' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0144</td><td >Ensure 'Configure Pop-up Blocker' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0145</td><td >Ensure 'Configure registry policy processing' is set to 'Do not apply during periodic background processing (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0146</td><td >Ensure 'Configure registry policy processing' is set to 'Process even if the Group Policy objects have not changed (False)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0147</td><td >Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0148</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0149</td><td >Ensure 'Disallow copying of user input methods to the system account for sign-in ' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0150</td><td >Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0151</td><td >Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0152</td><td >Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0153</td><td >Ensure 'Do not delete temp folders upon exit' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0154</td><td >Ensure 'Do not display network selection UI' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0155</td><td >Ensure 'Do not enumerate connected users on domain-joined computers' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0156</td><td >Ensure 'Enable insecure guest logons' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0157</td><td >Ensure 'Enable local admin password management' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0158</td><td >Ensure 'Enable RPC Endpoint Mapper Client Authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0159</td><td >Ensure 'Enable screen saver' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0160</td><td >Ensure 'Enable Windows NTP Server' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0161</td><td >Ensure 'Enable/Disable PerfTrack' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0163</td><td >Ensure 'Enumerate local users on domain-joined computers' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0164</td><td >Ensure 'Include command line in process creation events' set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0165</td><td >Ensure 'Let Windows apps access account information' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0166</td><td >Ensure 'Let Windows apps access call history' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0167</td><td >Ensure 'Let Windows apps access contacts' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0168</td><td >Ensure 'Let Windows apps access email' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0169</td><td >Ensure 'Let Windows apps access location' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0170</td><td >Ensure 'Let Windows apps access messaging' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0171</td><td >Ensure 'Let Windows apps access motion' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0172</td><td >Ensure 'Let Windows apps access notifications' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0173</td><td >Ensure 'Let Windows apps access the calendar' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0174</td><td >Ensure 'Let Windows apps access the camera' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0175</td><td >Ensure 'Let Windows apps access the microphone' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0176</td><td >Ensure 'Let Windows apps access trusted devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0177</td><td >Ensure 'Let Windows apps control radios' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0178</td><td >Ensure 'Let Windows apps make phone calls' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0179</td><td >Ensure 'Let Windows apps sync with devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0185</td><td >Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0209</td><td >Ensure 'Prevent downloading of enclosures' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0210</td><td >Ensure 'Prevent enabling lock screen camera' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0211</td><td >Ensure 'Prevent enabling lock screen slide show' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0212</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0213</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0214</td><td >Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0215</td><td >Ensure 'Prevent the computer from joining a homegroup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0216</td><td >Ensure 'Prohibit access of the Windows Connect Now wizards' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0217</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0218</td><td >Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' set to 'Enalbed'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0220</td><td >Ensure 'Require a password when a computer wakes (on battery)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0221</td><td >Ensure 'Require a password when a computer wakes (plugged in)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0222</td><td >Ensure 'Require additional authentication at startup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0223</td><td >Ensure 'Require domain users to elevate when setting a network's location' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0224</td><td >Ensure 'Set the default behavior for AutoRun' set to 'Enalbed: Do not execute any autorun commands'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0225</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0229</td><td >Ensure 'Turn off background refresh of Group Policy' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0230</td><td >Ensure 'Turn off Data Execution Prevention for Explorer' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0231</td><td >Ensure 'Turn off downloading of print drivers over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0232</td><td >Ensure 'Turn off handwriting personalization data sharing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0233</td><td >Ensure 'Turn off handwriting recognition error reporting' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0234</td><td >Ensure 'Turn off heap termination on corruption' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0235</td><td >Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0236</td><td >Ensure 'Turn off Internet download for Web publishing and online ordering wizards' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0237</td><td >Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0238</td><td >Ensure 'Turn off picture password sign-in' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0239</td><td >Ensure 'Turn off printing over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0240</td><td >Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0241</td><td >Ensure 'Turn off Search Companion content file updates' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0242</td><td >Ensure 'Turn off shell protocol protected mode' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0243</td><td >Ensure 'Turn off the 'Order Prints' picture task' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0244</td><td >Ensure 'Turn off the 'Publish to Web' task for files and folders' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0245</td><td >Ensure 'Turn on convenience PIN sign-in' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0246</td><td >Ensure 'Turn on Mapper I/O (LLTDIO) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0247</td><td >Ensure 'Turn on Responder (RSPNDR) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0248</td><td >Ensure 'Turn On Virtualization Based Security' set to 'Enabled: Block untrusted fonts and log events'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0249</td><td >Ensure 'Untrusted Font Blocking' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0250</td><td >Ensure 'Configure enhanced anti-spoofing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0251</td><td >Ensure 'WDigest Authentication' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0253</td><td >Ensure 'Windows Firewall: Domain: Apply local firewall rules' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0254</td><td >Ensure 'Windows Firewall: Domain: Display a notification' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0279</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' set to '%windir%\system32\logfiles\firewall\domainfirewall.log'.</td><td >Registry value is '%SystemRoot%\System32\logfiles\firewall\domainfw.log'. Expected: %windir%\system32\logfiles\firewall\domainfirewall.log</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0280</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' set to '16,384'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0281</td><td >Ensure 'Windows Firewall: Public: Outbound connections' set to 'Allow'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0282</td><td >Ensure 'Block launching Windows Store apps with Windows RuntimeAPIaccessfromhostedcontent' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0283</td><td >Ensure 'Turn off KMS Client Online AVS Validation' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0284</td><td >Ensure 'Do not display the password reveal button' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0285</td><td >Ensure 'Join Microsoft MAPS' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0286</td><td >Ensure 'Configure search suggestions in Address bar' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0287</td><td >Ensure 'Configure Windows SmartScreen' set to 'Enabled: Require approval from an administrator before running downloaded unknown software'.</td><td >Registry value is '1'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0288</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides for unverified files' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0289</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0290</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0291</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0292</td><td >Ensure 'Turn on SmartScreen Filter scan' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0293</td><td >Ensure 'Allow Cortana' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0294</td><td >Ensure 'Allow search and Cortana to use location' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0295</td><td >Ensure 'Disable all apps from Microsoft Store' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0296</td><td >Ensure 'Disable pre-release features or settings' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0297</td><td >Ensure 'Turn off access to the Store' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0298</td><td >Ensure 'Turn off Automatic Download and Install of updates' set to 'Enabled'.</td><td >Registry value is '4'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0299</td><td >Ensure 'Turn off the offer to update to the latest version of Windows' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0300</td><td >Ensure 'Turn off the Store application' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0301</td><td >Ensure 'Allow Basic authentication' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0302</td><td >Ensure 'Allow unencrypted traffic' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0304</td><td >Ensure 'Allow Remote Shell Access' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0306</td><td >Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0307</td><td >Ensure 'Disallow Digest authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0308</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0309</td><td >Ensure 'Do not allow COM port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0310</td><td >Ensure 'Do not allow drive redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0311</td><td >Ensure 'Do not allow LPT port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0312</td><td >Ensure 'Do not use temporary folders per session' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0313</td><td >Ensure 'Apply UAC restrictions to local accounts on network logons' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0323</td><td >Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0324</td><td >Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0325</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' set to 'XTS-AES 256-bit'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0328</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0329</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0330</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0331</td><td >Ensure 'Configure minimum PIN length for startup' set to 'Enabled' and 'minimum characters' set to 10.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0332</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0333</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0334</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0335</td><td >Ensure 'Configure use of passwords for fixed data drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0336</td><td >Ensure 'Configure use of passwords for operating system drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0337</td><td >Ensure 'Configure use of passwords for removable data drives' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0338</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0339</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0340</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82020342</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Save BitLocker recovery information to AD DS for fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0343</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Save BitLocker recovery information to AD DS for operating system drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0344</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Save BitLocker recovery information to AD DS for removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0345</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key and PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0346</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0347</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0348</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0349</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0350</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0351</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0352</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Require use of smart cards on fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0353</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Require use of smart cards on removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0354</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Do not allow write access to devices configured in another organization'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0355</td><td >Ensure 'Password Settings' set to 'Large letters + small letters + numbers + specials'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0358</td><td >Ensure 'Require additional authentication at startup' set to 'Allow BitLocker without a compatible TPM'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0359</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0360</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (Test)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0361</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (True)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0362</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0363</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow 48-digit recovery password'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0364</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Require 48-digit recovery password '.</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0365</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 48-digit recovery password'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0366</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0367</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0368</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0369</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Password Length' and set to greater or equal 15.</td><td >Registry value is '14'. Expected: x >= 15</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0370</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0371</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0372</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0373</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0374</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives (Enabled)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0375</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0376</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Store recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0377</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0378</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0380</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0384</td><td >Ensure 'Password Age' set to less or equal 42.</td><td >Registry value is '20'. Expected: 42</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0385</td><td >Ensure 'Require additional authentication at startup' set to 'Require startup PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0386</td><td >Ensure 'Turn on PowerShell Transcription' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0387</td><td >Ensure 'Turn on PowerShell Script Block Logging' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0388</td><td >Ensure 'Require secure RPC communication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0389</td><td >Ensure 'Set client connection encryption level' set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0390</td><td >Ensure 'Set time limit for active but idle Remote Desktop Services sessions' set to 'Enabled: 5 minutes'.</td><td >Registry value is '900000'. Expected: 300000</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0391</td><td >Ensure 'Set time limit for disconnected sessions' set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0044</td><td > Ensure 'SeTrustedCredManAccessPrivilege' is set to 'Enabled'</td><td >The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0045</td><td > Ensure 'SeNetworkLogonRight' is set to 'Administrator, Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0046</td><td > Ensure 'SeTcbPrivilege' is set to 'None'</td><td >The user 'SeTcbPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0047</td><td > Ensure  ’Adjust memory quotas for a process’ set to ’Administrators, LOCAL SERVICE, NETWORK SERVICE’</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0048</td><td > Ensure 'Allow log on locally' set to 'Administrators, Users'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0049</td><td > Ensure 'SeBackupPrivilege' is set to 'Administrator'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0050</td><td > Ensure 'SeSystemtimePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0051</td><td > Ensure 'SeTimeZonePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user right 'SeTimeZonePrivilege' contains following unexpected users: BUILTIN\Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0052</td><td > Ensure 'SeCreatePagefilePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user 'SeCreatePagefilePrivilege' setting does not contain the following users: NT AUTHORITY\LOCAL SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0053</td><td > Ensure 'SeCreateTokenPrivilege' is set to 'None'</td><td >The user 'SeCreateTokenPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0054</td><td > Ensure 'SeCreateGlobalPrivilege' is set to 'Administrator, SERVICE, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0055</td><td > Ensure 'SeCreatePermanentPrivilege' is set to 'None'</td><td >The user 'SeCreatePermanentPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0056</td><td > Ensure 'SeCreateSymbolicLinkPrivilege' is set to 'Administrator'</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0057</td><td > Ensure 'SeDebugPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0064</td><td > Ensure 'SeEnableDelegationPrivilege' is set to 'None'</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0066</td><td > Ensure 'SeRemoteShutdownPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0067</td><td > Ensure 'SeAuditPrivilege' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0068</td><td > Ensure 'SeImpersonatePrivilege' is set to 'Administrator, LOCAL SERVICE, NETWORK SERVICE'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: NT AUTHORITY\SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0069</td><td > Ensure 'SeIncreaseBasePriorityPrivilege' is set to 'Administrator'</td><td >The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: Window Manager\Window Manager Group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0085</td><td > Ensure 'SeRelabelPrivilege' is set to 'None'</td><td >The user 'SeRelabelPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0086</td><td > Ensure 'SeSystemEnvironmentPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0087</td><td > Ensure 'SeManageVolumePrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0088</td><td > Ensure 'SeProfileSingleProcessPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0089</td><td > Ensure 'SeSystemProfilePrivilege' is set to 'Administrator, NT SERVICE/WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0090</td><td > Ensure 'SeRestorePrivilege' is set to 'Administrator'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0091</td><td > Ensure 'SeShutdownPrivilege' is set to 'Administrator, Users'</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0094</td><td > Ensure 'SeTakeOwnershipPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0104</td><td > Ensure 'SeDenyNetworkLogonRight' is set to 'Local account, Guest'</td><td >The user right 'SeDenyNetworkLogonRight' contains following unexpected users: LOCAL
+The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0105</td><td > Ensure 'SeDenyBatchLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0106</td><td > Ensure 'SeDenyServiceLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0107</td><td > Ensure 'SeDenyInteractiveLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0108</td><td > Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'Local account, Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0180</td><td > Ensure 'Load and unload device drivers' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0181</td><td > Ensure 'Lock pages in memory' is set to 'No one'</td><td >The user 'SeLockMemoryPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0182</td><td > Ensure 'Log on as a batch job' is set to 'Administrator'</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0183</td><td > Ensure 'Log on as a service' is set to 'No one'</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines
+The user 'SeServiceLogonRight' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0184</td><td > Ensure 'Manage auditing and security log' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0219</td><td > Ensure 'Replace a process level token' is set to 'Local Service, Network Service'</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0303</td><td > Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop User'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0001</td><td > Ensure 'Maximum password age' is set to between 1 and 42</td><td >'MaximumPasswordAge' currently set to: 60. Expected: x <= 42 and x >= 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0002</td><td > Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0100</td><td > Ensure 'Reset account lockout counter after' is set greater or equal 15</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0102</td><td > Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0103</td><td >Ensure 'Account lockout threshold' is set greater or equal 1 and less or equal 10</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0162</td><td > Ensure 'Enforce password history' is set greater or equal 24</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0186</td><td > Ensure 'Minimum password age' is set to greater or equal 1</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0187</td><td > Ensure 'Minimum password length' is set to greater or equal 14</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0008</td><td > Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0011</td><td > Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0012</td><td > Ensure 'Audit Security Group Management' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0013</td><td > Ensure 'Audit account management' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0014</td><td > Ensure 'Advanced security audit policy settings' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0015</td><td > Ensure 'Audit Process Creation' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0016</td><td > Ensure 'Audit Other Logon/Logoff Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0017</td><td > Ensure 'Audit Account Lockout' is set to 'SuccessAndNotFailure'</td><td >Set to: Failure</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0018</td><td > Ensure 'How to track users logon/logoff' is set to 'SuccessAndNotFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0019</td><td > Ensure 'Audit Policy: Logon-Logoff: Logon' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0020</td><td > Ensure 'Audit Policy: Logon-Logoff: Special Logon' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0021</td><td > Ensure 'Audit Policy: Object Access:Removable Storage' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0022</td><td > Ensure 'Audit Policy: Policy Change: Audit Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0023</td><td > Ensure 'Audit Policy: Policy Change: Authentication Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0025</td><td > Ensure 'Audit Policy: System: IPsecDriver' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0026</td><td > Ensure 'Audit Policy: System: OtherSystem Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0027</td><td > Ensure 'Audit Policy: System: Security State Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0028</td><td > Ensure 'Audit Policy: System: Security System Extension' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0029</td><td > Ensure 'Audit Policy: System: System Integrity' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div></div><script type="text/javascript">function collapseHandler(e) {
+	var targetSection = e.target.parentElement.parentElement;
+	if (targetSection.classList.toggle('collapsed')) {
+		e.target.innerText = '+';
+	} else {
+		e.target.innerText = '-';
+	}
+}
+var collapseButtons = document.getElementsByClassName("collapseButton");
+for (var i = 0; i < collapseButtons.length; i++) {
+    collapseButtons[i].addEventListener('click', collapseHandler);
+}</script></body></body></html> 
diff --git a/Samples/Outdated/Microsoft Windows 10 BSI.html b/Samples/Outdated/Microsoft Windows 10 BSI.html
new file mode 100644
index 0000000..5091be6
--- /dev/null
+++ b/Samples/Outdated/Microsoft Windows 10 BSI.html	
@@ -0,0 +1,28 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows 10 BSI Report [01/17/2022 14:01:24]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	width: 100%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 30%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(90deg); transform: rotate(90deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(286.272deg); transform: rotate(286.272deg);}.donut-chart.chart .chart-center span:after {content: "79.52 %";}</style></head><body ><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows 10 BSI Report</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>4.14</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Are you seeing a lot of red sections? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >BSI SiM-08202 Client unter Windows 10, Version: 1, Date: 2017-09-13</li><li >Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03</li></ul></p></div><div class="main content"><div class="host-information"><p >This report was generated on 01/17/2022 14:01:24 on DESKTOP-UTMU75K.fb-pro.com with TAPHtmlReport version 1.8.</p><table ><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-UTMU75K.fb-pro.com</td></tr><tr ><th scope="row">Build Number</th><td >19043</td></tr><tr ><th scope="row">Free disk space(GB)      </th><td >100.1</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >4.972</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 10 Pro</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr></tbody></table><h1 style="clear:both; padding-top: 50px;">Summary</h1><p >A total of 1250 tests have been executed.</p><div class="gauge"><div title="True 994 test(s), 79.52%" style="width: 79.52%" class="gauge-meter passed"></div><div title="False 256 test(s), 20.48%" style="width: 20.48%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 994 test(s) &#x2259; 79.52%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 256 test(s) &#x2259; 20.48%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS Logging</h2><p >A total of 51 tests have been executed in section BSI Benchmarks SiSyPHuS Logging.</p><div class="gauge"><div title="True 51 test(s), 100.00%" style="width: 100.00%" class="gauge-meter passed"></div><div title="False 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 51 test(s) &#x2259; 100.00%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS HD</h2><p >A total of 379 tests have been executed in section BSI Benchmarks SiSyPHuS HD.</p><div class="gauge"><div title="True 313 test(s), 82.59%" style="width: 82.59%" class="gauge-meter passed"></div><div title="False 66 test(s), 17.41%" style="width: 17.41%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 313 test(s) &#x2259; 82.59%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 66 test(s) &#x2259; 17.41%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS ND</h2><p >A total of 287 tests have been executed in section BSI Benchmarks SiSyPHuS ND.</p><div class="gauge"><div title="True 240 test(s), 83.62%" style="width: 83.62%" class="gauge-meter passed"></div><div title="False 47 test(s), 16.38%" style="width: 16.38%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 240 test(s) &#x2259; 83.62%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 47 test(s) &#x2259; 16.38%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiSyPHuS NE</h2><p >A total of 258 tests have been executed in section BSI Benchmarks SiSyPHuS NE.</p><div class="gauge"><div title="True 212 test(s), 82.17%" style="width: 82.17%" class="gauge-meter passed"></div><div title="False 46 test(s), 17.83%" style="width: 17.83%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 212 test(s) &#x2259; 82.17%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 46 test(s) &#x2259; 17.83%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">BSI Benchmarks SiM-08202 - BPOL</h2><p >A total of 275 tests have been executed in section BSI Benchmarks SiM-08202 - BPOL.</p><div class="gauge"><div title="True 178 test(s), 64.73%" style="width: 64.73%" class="gauge-meter passed"></div><div title="False 97 test(s), 35.27%" style="width: 35.27%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 178 test(s) &#x2259; 64.73%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 97 test(s) &#x2259; 35.27%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h1 id="toc">Table of Contents</h1><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-Logging">BSI Benchmarks SiSyPHuS Logging</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HD">BSI Benchmarks SiSyPHuS HD</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-HDAccount-Policies">Account Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-ND">BSI Benchmarks SiSyPHuS ND</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NDAccount-Policies">Account Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NE">BSI Benchmarks SiSyPHuS NE</a><ul ><li ><a href="#BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiSyPHuS-NEAccount-Policies">Account Policies</a></li></ul></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOL">BSI Benchmarks SiM-08202 - BPOL</a><ul ><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLAccount-Policies">Account Policies</a></li><li ><a href="#BSI-Benchmarks-SiM--08202----BPOLAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><section ><h1 id="BSI-Benchmarks-SiSyPHuS-Logging"><span class="passed">BSI Benchmarks SiSyPHuS Logging</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingRegistry-Settings/Group-Policies"><span class="passed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >4.1.1</td><td >Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.1.2</td><td >Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.1</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.2</td><td >Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.3</td><td >Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.1.4</td><td >Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.1</td><td >Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\privatefw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.2</td><td >Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.3</td><td >Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.2.4</td><td >Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.1</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.2</td><td >Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.3</td><td >Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\publicfw.log'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.2.3.4</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.1.1</td><td >Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.1</td><td >Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.1.2</td><td >Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.1</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.2.2</td><td >Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.1</td><td >Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.3.2</td><td >Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.1</td><td >Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.2.4.2</td><td >Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.3.1</td><td >Ensure 'Include command line in process creation events' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.4.2</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4.3.4.3</td><td >Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-LoggingAdvanced-Audit-Policy-Configuration"><span class="passed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >5.1.1.1</td><td >Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.2</td><td >Ensure 'Audit User Account Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.3</td><td >Ensure 'Audit Account Lockout' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.4</td><td >Ensure 'Audit Group Membership' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.5</td><td >Ensure 'Audit Logoff' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.6</td><td >Ensure 'Audit Logon' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.7</td><td >Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.1.1.8</td><td >Ensure 'Audit Special Logon' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.1</td><td >Ensure 'Audit Other System Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.2</td><td >Ensure 'Audit Security State Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.3</td><td >Ensure 'Audit Security System Extension' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.4</td><td >Ensure 'Audit System Integrity' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.5</td><td >Ensure 'Audit File Share' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.6</td><td >Ensure 'Audit Detailed File Share' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.7</td><td >Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.8</td><td >Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.2.1.9</td><td >Ensure 'Audit PNP Activity' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.1</td><td >Ensure 'Audit Security Group Management' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.2</td><td >Ensure 'Audit Audit Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.3</td><td >Ensure 'Audit Authentication Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.4</td><td >Ensure 'Audit Authorization Policy Change' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.5</td><td >Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.3.1.6</td><td >Ensure 'Audit Other Policy Change Events' is set to include 'Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.1</td><td >Ensure 'Audit Process Creation' is set to include 'Success'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5.5.1.2</td><td >Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HD"><span class="failed">BSI Benchmarks SiSyPHuS HD</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >11</td><td >(HD) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >13</td><td >(HD) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >15</td><td >(HD) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >18</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >19</td><td >(HD) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >23</td><td >(HD) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >28</td><td >(HD) Ensure 'Enable Font Providers' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >29</td><td >(HD) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >30</td><td >(HD) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >31</td><td >(HD) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >32</td><td >(HD) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >36</td><td >(HD) Ensure 'Turn off notifications network usage' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >38</td><td >(HD) Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >47</td><td >(HD) Ensure 'Turn off the advertising ID' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >48</td><td >(HD)  Ensure 'Allow upload of User Activities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >49</td><td >(HD) Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >58</td><td >(HD) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >66</td><td >(HD) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >67</td><td >(HD) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >69</td><td >(HD) Ensure 'Turn off printing over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >70</td><td >(HD) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >71</td><td >(HD) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >72</td><td >(HD) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >73</td><td >(HD) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >75</td><td >(HD) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >76</td><td >(HD) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >77</td><td >(HD) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >78</td><td >(HD) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >79</td><td >(HD) Ensure 'Turn off access to the Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >80</td><td >(HD) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82</td><td >(HD) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >83</td><td >(HD) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >91</td><td >(HD) Ensure 'Enable Windows NTP Client' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >92</td><td >(HD) Ensure 'Enable Windows NTP Server' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >93</td><td >(HD)  Ensure 'Allow Online Tips' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >104</td><td >(HD) Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >108</td><td >(HD) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >110</td><td >(HD) Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >111</td><td >(HD) Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >122</td><td >(HD) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >123</td><td >(HD) Ensure 'Allow Use of Camera' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >125</td><td >(HD) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >128</td><td >(HD) Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >129</td><td >(HD) Ensure 'Turn off Push To Install service' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >130</td><td >(HD) Ensure 'Do not allow COM port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >132</td><td >(HD) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >133</td><td >(HD) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >140</td><td >(HD) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >141</td><td >(HD) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >144</td><td >(HD) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >150</td><td >(HD) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >151</td><td >(HD) Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >154</td><td >(HD) Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >155</td><td >(HD) Ensure 'Turn off the Store application' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >156</td><td >(HD) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >166</td><td >(HD) Ensure 'Join Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >176</td><td >(HD) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >179</td><td >(HD) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >182</td><td >(HD) Ensure 'Prevent Codec Download' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >184</td><td >(HD) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow only signed scripts'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >190</td><td >(HD) Ensure 'Allow Remote Shell Access' is set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >195</td><td >(HD) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >225</td><td >(HD) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >228</td><td >(HD) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >250</td><td >(HD) Ensure 'Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers' is set to 'Deny all'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >251</td><td >(HD) Ensure 'Network security: Restrict NTLM: Incoming NTLM traffic' is set to 'Deny all accounts'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >273</td><td >(HD) Ensure 'System settings: Optional subsystems' is set to 'None'. </td><td >Registry value is ''. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >274</td><td >(HD) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >316</td><td >(HD) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >318</td><td >(HD) Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >319</td><td >(HD) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >322</td><td >(HD) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >325</td><td >(HD) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >327</td><td >(HD) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >329</td><td >(HD) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >330</td><td >(HD) Ensure 'Microsoft Store Install Service (InstallService)' is set to 'Disabled'.</td><td >Registry value is '3'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >332</td><td >(HD) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >333</td><td >(HD) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >334</td><td >(HD) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >335</td><td >(HD) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >336</td><td >(HD) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >337</td><td >(HD) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >340</td><td >(HD) Ensure 'Server (LanmanServer)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >342</td><td >(HD)  Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >344</td><td >(HD) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >346</td><td >(HD) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >347</td><td >(HD) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >350</td><td >(HD) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >352</td><td >(HD) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >353</td><td >(HD) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >354</td><td >(HD) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >355</td><td >(HD) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'.</td><td >Registry value is '2'. Expected: 4</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.
+
+</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >281</td><td >(HD) Configure 'Log on as a service'.</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >283</td><td >(HD) Ensure 'Log on as a batch job' is set to 'Administrators'.</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account
+The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.
+
+</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.
+</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. 
+
+</td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-HDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 or
+more minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-ND"><span class="failed">BSI Benchmarks SiSyPHuS ND</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling OverwriteProtection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routingprotection level (protects against packet spoofing)' is set to 'Enabled:Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects tooverride OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >25</td><td >(ND) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >26</td><td >(ND) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >27</td><td >(ND) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >42</td><td >(ND) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >43</td><td >(ND) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >45</td><td >(ND) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >51</td><td >(ND) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >62</td><td >(ND) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >63</td><td >(ND) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >64</td><td >(ND) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >65</td><td >(ND) Ensure 'Configure security policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >105</td><td >(ND) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >219</td><td >(ND) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >220</td><td >(ND) Ensure 'Domain member: Digitally sign secure channel data(when possible)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >221</td><td >(ND) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >222</td><td >(ND) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >223</td><td >(ND) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >224</td><td >(ND) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >232</td><td >(ND) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >233</td><td >(ND) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >248</td><td >(ND) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >361</td><td >(ND) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >362</td><td >(ND) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >363</td><td >(ND) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >364</td><td >(ND) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account
+The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >293</td><td >(ND) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NDAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >206</td><td >(ND) Ensure 'Account lockout duration' is set to '15 or more minute(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >207</td><td >(ND) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >208</td><td >(ND) Ensure 'Reset account lockout counter after' is set to '15 ormore minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NE"><span class="failed">BSI Benchmarks SiSyPHuS NE</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NERegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >1</td><td >(ND, NE) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >2</td><td >(ND, NE) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >3</td><td >(ND, NE) Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >4</td><td >(ND, NE) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >5</td><td >(ND, NE)  Ensure 'WDigest Authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >6</td><td >(ND, NE) Ensure 'LSA Protection' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >7</td><td >(ND, NE) Ensure 'MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >8</td><td >(ND, NE) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon(not recommended)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >9</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >10</td><td >(ND, NE) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >12</td><td >(ND, NE) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >14</td><td >(ND, NE) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >16</td><td >(ND, NE) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >17</td><td >(ND, NE) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >20</td><td >(ND, NE) Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >21</td><td >(ND, NE) Ensure 'NetBIOS node type' is set to 'P-node'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >22</td><td >(ND, NE) Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_1</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >24_2</td><td >(ND, NE) Ensure 'Hardened UNC Paths' is set to "Require Mutual Authentication=1, "Require Integrity=1" for the value names "\\*\NETLOGON" und "\\*\SYSVOL".</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >33</td><td >(ND, NE) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to the value 'Enabled: 1 = Minimize the number of simultaneous connections'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >34</td><td >(ND) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled' </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >35</td><td >(ND, NE) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >37</td><td >(ND, NE) Ensure 'Turn off toast notifications on the lock screen' is set to 'Enabled'. </td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >39</td><td >(ND, NE)  Ensure 'Turn off picture password sign-in' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >40</td><td >(ND, NE) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >41</td><td >(ND, NE)  Ensure 'Block user from showing account details on signin' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >44</td><td >(ND, NE) Ensure 'Do not display network selection UI' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >46</td><td >(ND, NE) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >50</td><td >(ND, NE) Ensure 'Encryption Oracle Remediation' is set to 'Enabled: Force Updated Clients'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >52</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >53</td><td >(ND, NE) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >54</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >55</td><td >(ND, NE) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >56</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >57</td><td >(ND, NE) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >59</td><td >(ND, NE) Ensure 'Prevent installation of devices that match any of these device IDs' is configured.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >60</td><td >(ND, NE) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is configured.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >61</td><td >(ND, NE) Ensure 'Continue experiences on this device' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >68</td><td >(ND, NE) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >74</td><td >(ND, NE) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >81</td><td >(ND, NE) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >84</td><td >(ND, NE) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >85</td><td >(ND, NE) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >86</td><td >(ND, NE) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >87</td><td >(ND, NE) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >88</td><td >(ND, NE) Ensure 'Ignore the default list of blocked TPM commands' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >89</td><td >(ND, NE) Ensure 'Standard User Lockout Duration' is set to '30 minutes'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >90</td><td >(ND, NE) Ensure 'Standard User Total Lockout Threshold' is set to '5'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >94</td><td >(ND, NE) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >95</td><td >(ND, NE)  Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >96</td><td >(ND, NE) Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >97</td><td >(ND, NE) Ensure 'Enable screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >98</td><td >(ND, NE) Ensure 'Password protect the screen saver' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >99</td><td >(ND, NE) Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_1</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >100_2</td><td >(ND, NE) Ensure 'Turn off automatic learning' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >101</td><td >(ND, NE) Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >102</td><td >(ND, NE) Ensure 'Notify antivirus programs when opening attachments' is set to 'Enabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >103</td><td >(ND, NE) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >106</td><td >(ND, NE) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >107</td><td >(ND, NE) Ensure 'Do not display the password reveal button' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >109</td><td >(ND, NE) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >112</td><td >(ND, NE) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >113</td><td >(ND, NE) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >114</td><td >(ND, NE) Ensure 'Configure Windows spotlight on lock screen' is set to Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >115</td><td >(ND, NE) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >116</td><td >(ND, NE) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >117</td><td >(ND, NE)  Ensure 'Turn off heap termination on corruption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >118</td><td >(ND, NE)  Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >119</td><td >(ND, NE) Ensure 'Do not show feedback notifications' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >120</td><td >(ND, NE) Ensure 'Allow Telemetry' is set to 'Enabled: 0 – Security [Enterprise Only]'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >121</td><td >(ND, NE) Ensure 'Allow device name to be sent in Windows diagnostic data' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >124</td><td >(ND, NE) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >126</td><td >(ND, NE) Ensure 'Prevent users from sharing files within their profile.' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >127</td><td >(ND, NE) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >131</td><td >(ND, NE) Ensure 'Do not allow drive redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >134</td><td >(ND, NE) Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >135</td><td >(ND, NE) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >136</td><td >(ND, NE) Ensure 'Require secure RPC communication' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >137</td><td >(ND, NE) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >138</td><td >(ND, NE) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >139</td><td >(ND, NE) Ensure 'End session when time limits are reached' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >142</td><td >(ND, NE) Ensure 'Do not use temporary folders per session' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >143</td><td >(ND, NE) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >145</td><td >(ND, NE) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >146</td><td >(ND, NE) Ensure 'Disallow Autoplay for non-volume devices' is set to'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >147</td><td >(ND, NE) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >148</td><td >(ND, NE) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >149</td><td >(ND, NE) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >152</td><td >(ND, NE) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >153</td><td >(ND, NE) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >157</td><td >(ND, NE) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >158</td><td >(ND, NE) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >159</td><td >(ND, NE) Ensure 'Improve inking and typing recognition' is set to 'Disabled'. </td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >160</td><td >(ND, NE) Ensure 'Download Mode' is set to 'Enabled: Simple (99)' .</td><td >Registry value is '1'. Expected: 99</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >161</td><td >(ND, NE) Ensure 'Require pin for pairing' is set to 'Enabled: Always'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >162</td><td >(ND, NE) Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >163</td><td >(ND, NE) Ensure 'Turn off Windows Defender Antivirus' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >164</td><td >(ND, NE) Ensure 'Configure Watson events' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >165</td><td >(ND, NE) Ensure 'Turn on behavior monitoring' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >167</td><td >(ND, NE) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >168</td><td >(ND, NE) Ensure 'Turn on e-mail scanning' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >169</td><td >(ND, NE) Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >170</td><td >(ND, NE) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >171</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_1</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_2</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_3</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_4</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_5</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_6</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_7</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_8</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_9</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_10</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >172_11</td><td >(ND, NE) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >173</td><td >(ND, NE) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >174</td><td >(ND, NE)  Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >175</td><td >(ND, NE)  Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >177</td><td >(ND, NE) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >178</td><td >(ND, NE) Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >180</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >181</td><td >(ND, NE) Ensure 'Always install with elevated privileges' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >183</td><td >(ND, NE) Ensure 'Turn on Script Execution' is set to 'Enabled: Allow local scripts and remote signed scripts'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >185</td><td >(ND, NE) Ensure 'Configure Automatic Updates' is set to 'Enabled: 4 Auto download and schedule the install'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >186</td><td >(ND, NE) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >187</td><td >(ND, NE) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >188</td><td >(ND, NE) Ensure 'Remove access to "Pause updates" feature' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >189</td><td >(ND, NE) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >191</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >192</td><td >(ND, NE) Ensure 'Disallow Digest authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >193</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >194</td><td >(ND, NE) Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >196</td><td >(ND, NE) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >197</td><td >(ND, NE) Ensure 'Allow unencrypted traffic' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >198</td><td >(ND, NE) Ensure 'Prevent users from modifying settings' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >199</td><td >(ND, NE) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >209</td><td >(ND, NE) Configure 'Interactive logon: Message title for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >210</td><td >(ND, NE)  Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >211</td><td >(ND, NE) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >212</td><td >(ND, NE) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >213</td><td >(ND, NE) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >214</td><td >(ND, NE) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >215</td><td >(ND, NE) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >216</td><td >(ND, NE) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >217</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >218</td><td >(ND, NE) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Prompt for credentials on the secure desktop'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >226</td><td >(ND, NE) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >227</td><td >(ND, NE) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >229</td><td > Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >230</td><td >(ND, NE) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >231</td><td >(ND, NE) Configure 'Interactive logon: Message text for users attempting to log on'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >234</td><td >(ND, NE) Ensure 'Interactive logon: Don't display last signed-in' is setto 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >239</td><td >(ND, NE) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >240</td><td >(ND, NE) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >241</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >242</td><td >(ND, NE) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >243</td><td >(ND, NE) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >244</td><td >(ND, NE) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >245</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >246</td><td >(ND, NE) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'. </td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >247</td><td >(ND, NE) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >252</td><td >(ND) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >253</td><td >(ND, NE) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >254</td><td >(ND, NE) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >255</td><td >(ND, NE) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >256</td><td >(ND, NE) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >257</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >258</td><td >(ND) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >259</td><td >(ND) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >260</td><td >(ND, NE) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >261</td><td >(ND, NE) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >262</td><td >(ND) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >263</td><td >(ND) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >264</td><td >(ND, NE) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >265</td><td >(ND, NE) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >266</td><td >(ND) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >267</td><td >(ND, NE) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >268</td><td >(ND, NE) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >269</td><td >(ND, NE) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >270</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths and sub-paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >271</td><td >(ND, NE) Configure 'Network access: Remotely accessible registry paths'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >272</td><td >(ND, NE) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >275</td><td >(ND, NE) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >276</td><td >(ND, NE) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >317</td><td >(ND, NE) Ensure 'Connected User Experiences and Telemetry' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >320</td><td >(ND, NE) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >321</td><td >(NE, ND) Ensure 'Internet Connection Sharing (ICS) (SharedAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >323</td><td >(ND, NE) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >324</td><td >(NE, ND) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >326</td><td >(ND, NE) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >328</td><td >(ND, NE) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >331</td><td >(ND, NE) Ensure 'OpenSSH SSH Server (sshd)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >338</td><td >(ND, NE) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >339</td><td >(ND, NE) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >341</td><td >(ND, NE) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >343</td><td >(ND, NE) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >345</td><td >(ND, NE) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >348</td><td >(ND, NE)  Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >349</td><td >(ND, NE) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >351</td><td >(HD) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >356</td><td >(ND, NE) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >357</td><td >(ND, NE) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >358</td><td >(ND, NE) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >359</td><td >(ND, NE) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >360</td><td >(ND, NE) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >365</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Outbound connections' is set to 'Allow (default)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >366</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >367</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >368</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >369</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >370</td><td >(ND, NE) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >371</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Outbound connections' is set to 'Allow (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >372</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Settings: Display a notification' is set to 'No'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >373</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Inbound connections' is set to 'Block (default)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >374</td><td >(ND, NE) Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >277</td><td >(ND, NE) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >278</td><td >(ND, NE) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >279</td><td >(ND, NE) Ensure 'Increase scheduling priority' is set to 'Administrators, Window Manager\Window Manager Group'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >280</td><td >(ND, NE) Ensure 'Deny log on as a batch job' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyBatchLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >282</td><td >(ND, NE) Ensure 'Deny log on as a service' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyServiceLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >284</td><td >(ND) Ensure 'Deny log on through Remote Desktop Services' to include 'ANONYMOUS LOGON, Guests, Local account'.</td><td >The user right 'SeDenyRemoteInteractiveLogonRight' contains following unexpected users: NT AUTHORITY\Local account
+The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON, LOCAL</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >285</td><td >(ND, NE) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >286</td><td >(ND, NE) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >287</td><td >(ND, NE) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >288</td><td >(ND, NE) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >289</td><td >(ND, NE) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'. </td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >290</td><td >(ND, NE) Ensure 'Debug programs' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >291</td><td >(ND, NE) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >292</td><td >(ND, NE) Ensure 'Act as part of the operating system' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >294</td><td >(ND, NE) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >295</td><td >(ND, NE) Ensure 'Create a pagefile' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >296</td><td >(ND, NE) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >297</td><td >(ND, NE) Ensure 'Profile single process' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >298</td><td >(ND, NE) Ensure 'Create a token object' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >299</td><td >(ND, NE) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >300</td><td >(ND, NE) Ensure 'Create symbolic links' is set to 'Administrators'.</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >301</td><td >(ND, NE) Ensure 'Create permanent shared objects' is set to 'No One'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >302</td><td >(ND, NE) Ensure 'Force shutdown from a remote system' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >303</td><td >(ND, NE) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >304</td><td >(ND, NE) Ensure 'Shut down the system' is set to 'Administrators, Users'.</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >305</td><td >(ND, NE) Ensure 'Load and unload device drivers' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >306</td><td >(ND, NE) Ensure 'Deny log on locally' to include 'ANONYMOUS LOGON, Guests'.</td><td >The user 'SeDenyInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >307</td><td >(ND, NE) Ensure 'Allow log on locally' is set to 'Administrators, Users'. </td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >308</td><td >(ND, NE) Ensure 'Back up files and directories' is set to 'Administrators'.</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >309</td><td >(ND, NE) Ensure 'Lock pages in memory' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >310</td><td >(ND, NE) Ensure 'Take ownership of files or other objects' is set to 'Administrators' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >311</td><td >(ND, NE) Ensure 'Modify firmware environment values' is set to 'Administrators'. </td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >312</td><td >(ND, NE) Ensure 'Modify an object label' is set to 'No One'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >313</td><td >(ND, NE) Ensure 'Manage auditing and security log' is set to 'Administrators'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >314</td><td >(ND, NE) Ensure 'Restore files and directories' is set to 'Administrators'. </td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >315</td><td >(ND, NE) Ensure 'Deny access to this computer from the network' to include 'ANONYMOUS LOGON, Guest, Local account'. </td><td >The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\ANONYMOUS LOGON</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiSyPHuS-NEAccount-Policies"><span class="passed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >200</td><td >(ND, NE) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >201</td><td >(ND, NE) Ensure 'Password must meet complexity requirements' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >202</td><td >(ND, NE) Ensure 'Enforce password history' is set to '24 or more password(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >203</td><td >(ND, NE) Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >204</td><td >(ND, NE) Ensure 'Minimum password length' is set to '14 or more character(s)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >205</td><td >(ND, NE) Ensure 'Minimum password age' is set to '1 or more day(s)' .</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOL"><span class="failed">BSI Benchmarks SiM-08202 - BPOL</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains the BSI Benchmark results.</p><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0003</td><td > Ensure 'Configure Automatic Updates' is set to 4</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0004</td><td > Ensure 'Configure Automatic Updates' is set to 'Every Day'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0005</td><td > Ensure 'Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0006</td><td > Ensure 'Specify the maximum log file size (KB)' is set to 'Enabled: 32768'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0032</td><td >Ensure 'Setup: Specify the maximum log file size (KB)' is set to 32768.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0037</td><td >Ensure 'Allow enhanced PINs for startup' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0038</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0039</td><td >Ensure 'Allow Secure Boot for integrity validation' is set 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0040</td><td >Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0041</td><td >Ensure 'Allow user control over installs' is set 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0043</td><td >Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0065</td><td >Ensure 'Enumerate administrator accounts on elevation' is set 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0101</td><td > Ensure 'Restrict Unauthenticated RPC clients' is set 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0109</td><td >Ensure 'Allow Telemetry' is set to 0.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0110</td><td >Ensure 'Do not show feedback notifications' is set to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0111</td><td >Ensure 'Turn on MSDT interactive communication with support provider' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0112</td><td >Ensure 'Toggle user control over Insider builds' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0113</td><td >Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0114</td><td >Ensure 'Turn off location' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0115</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0116</td><td >Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0117</td><td >Ensure 'Turn off the Windows Customer Experience program' is set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0118</td><td >Ensure 'Turn off the Windows Error Reporting' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0119</td><td >Ensure 'Windows Game Recording and Broadcasting' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82020121</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0122</td><td >Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0123</td><td >Ensure 'Prevent using Localhost IP address for WebRTC' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0131</td><td >Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0132</td><td >Ensure 'Allow indexing of encrypted files' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0133</td><td >Ensure 'Allow InPrivate browsing' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0135</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (On Battery)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0136</td><td >Ensure 'Allow Standby States (S1-S3) When Sleeping (Plugged In)' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0137</td><td >Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0138</td><td >Ensure 'Always install with elevated privileges ' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0139</td><td >Ensure 'Always prompt for password upon connection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0140</td><td >Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled'.</td><td >Registry value is '3'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0141</td><td >Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0142</td><td >Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0143</td><td >Ensure 'Configure Password Manager' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0144</td><td >Ensure 'Configure Pop-up Blocker' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0145</td><td >Ensure 'Configure registry policy processing' is set to 'Do not apply during periodic background processing (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0146</td><td >Ensure 'Configure registry policy processing' is set to 'Process even if the Group Policy objects have not changed (False)'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0147</td><td >Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0148</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0149</td><td >Ensure 'Disallow copying of user input methods to the system account for sign-in ' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0150</td><td >Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0151</td><td >Ensure 'Do not allow passwords to be saved' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0152</td><td >Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0153</td><td >Ensure 'Do not delete temp folders upon exit' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0154</td><td >Ensure 'Do not display network selection UI' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0155</td><td >Ensure 'Do not enumerate connected users on domain-joined computers' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0156</td><td >Ensure 'Enable insecure guest logons' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0157</td><td >Ensure 'Enable local admin password management' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0158</td><td >Ensure 'Enable RPC Endpoint Mapper Client Authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0159</td><td >Ensure 'Enable screen saver' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0160</td><td >Ensure 'Enable Windows NTP Server' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0161</td><td >Ensure 'Enable/Disable PerfTrack' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0163</td><td >Ensure 'Enumerate local users on domain-joined computers' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0164</td><td >Ensure 'Include command line in process creation events' set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0165</td><td >Ensure 'Let Windows apps access account information' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0166</td><td >Ensure 'Let Windows apps access call history' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0167</td><td >Ensure 'Let Windows apps access contacts' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0168</td><td >Ensure 'Let Windows apps access email' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0169</td><td >Ensure 'Let Windows apps access location' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0170</td><td >Ensure 'Let Windows apps access messaging' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0171</td><td >Ensure 'Let Windows apps access motion' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0172</td><td >Ensure 'Let Windows apps access notifications' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0173</td><td >Ensure 'Let Windows apps access the calendar' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0174</td><td >Ensure 'Let Windows apps access the camera' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0175</td><td >Ensure 'Let Windows apps access the microphone' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0176</td><td >Ensure 'Let Windows apps access trusted devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0177</td><td >Ensure 'Let Windows apps control radios' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0178</td><td >Ensure 'Let Windows apps make phone calls' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0179</td><td >Ensure 'Let Windows apps sync with devices' set to 'Enabled:Force Deny'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0185</td><td >Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0209</td><td >Ensure 'Prevent downloading of enclosures' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0210</td><td >Ensure 'Prevent enabling lock screen camera' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0211</td><td >Ensure 'Prevent enabling lock screen slide show' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0212</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0213</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0214</td><td >Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0215</td><td >Ensure 'Prevent the computer from joining a homegroup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0216</td><td >Ensure 'Prohibit access of the Windows Connect Now wizards' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0217</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0218</td><td >Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' set to 'Enalbed'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0220</td><td >Ensure 'Require a password when a computer wakes (on battery)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0221</td><td >Ensure 'Require a password when a computer wakes (plugged in)' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0222</td><td >Ensure 'Require additional authentication at startup' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0223</td><td >Ensure 'Require domain users to elevate when setting a network's location' set to 'Enalbed'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0224</td><td >Ensure 'Set the default behavior for AutoRun' set to 'Enalbed: Do not execute any autorun commands'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0225</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0229</td><td >Ensure 'Turn off background refresh of Group Policy' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0230</td><td >Ensure 'Turn off Data Execution Prevention for Explorer' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0231</td><td >Ensure 'Turn off downloading of print drivers over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0232</td><td >Ensure 'Turn off handwriting personalization data sharing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0233</td><td >Ensure 'Turn off handwriting recognition error reporting' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0234</td><td >Ensure 'Turn off heap termination on corruption' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0235</td><td >Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0236</td><td >Ensure 'Turn off Internet download for Web publishing and online ordering wizards' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0237</td><td >Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0238</td><td >Ensure 'Turn off picture password sign-in' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0239</td><td >Ensure 'Turn off printing over HTTP' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0240</td><td >Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0241</td><td >Ensure 'Turn off Search Companion content file updates' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0242</td><td >Ensure 'Turn off shell protocol protected mode' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0243</td><td >Ensure 'Turn off the 'Order Prints' picture task' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0244</td><td >Ensure 'Turn off the 'Publish to Web' task for files and folders' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0245</td><td >Ensure 'Turn on convenience PIN sign-in' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0246</td><td >Ensure 'Turn on Mapper I/O (LLTDIO) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0247</td><td >Ensure 'Turn on Responder (RSPNDR) driver' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0248</td><td >Ensure 'Turn On Virtualization Based Security' set to 'Enabled: Block untrusted fonts and log events'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0249</td><td >Ensure 'Untrusted Font Blocking' set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0250</td><td >Ensure 'Configure enhanced anti-spoofing' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0251</td><td >Ensure 'WDigest Authentication' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0253</td><td >Ensure 'Windows Firewall: Domain: Apply local firewall rules' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0254</td><td >Ensure 'Windows Firewall: Domain: Display a notification' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0279</td><td >Ensure 'Windows Firewall: Domain: Logging: Name' set to '%windir%\system32\logfiles\firewall\domainfirewall.log'.</td><td >Registry value is '%SystemRoot%\System32\logfiles\firewall\domainfw.log'. Expected: %windir%\system32\logfiles\firewall\domainfirewall.log</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0280</td><td >Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' set to '16,384'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0281</td><td >Ensure 'Windows Firewall: Public: Outbound connections' set to 'Allow'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0282</td><td >Ensure 'Block launching Windows Store apps with Windows RuntimeAPIaccessfromhostedcontent' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0283</td><td >Ensure 'Turn off KMS Client Online AVS Validation' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0284</td><td >Ensure 'Do not display the password reveal button' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0285</td><td >Ensure 'Join Microsoft MAPS' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0286</td><td >Ensure 'Configure search suggestions in Address bar' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0287</td><td >Ensure 'Configure Windows SmartScreen' set to 'Enabled: Require approval from an administrator before running downloaded unknown software'.</td><td >Registry value is '1'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0288</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides for unverified files' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0289</td><td >Ensure 'Don't allow SmartScreen Filter warning overrides' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0290</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0291</td><td >Ensure 'Prevent managing SmartScreen Filter' set to 'Enabled: On'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0292</td><td >Ensure 'Turn on SmartScreen Filter scan' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0293</td><td >Ensure 'Allow Cortana' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0294</td><td >Ensure 'Allow search and Cortana to use location' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0295</td><td >Ensure 'Disable all apps from Microsoft Store' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0296</td><td >Ensure 'Disable pre-release features or settings' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0297</td><td >Ensure 'Turn off access to the Store' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0298</td><td >Ensure 'Turn off Automatic Download and Install of updates' set to 'Enabled'.</td><td >Registry value is '4'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0299</td><td >Ensure 'Turn off the offer to update to the latest version of Windows' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0300</td><td >Ensure 'Turn off the Store application' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0301</td><td >Ensure 'Allow Basic authentication' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0302</td><td >Ensure 'Allow unencrypted traffic' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0304</td><td >Ensure 'Allow Remote Shell Access' set to 'Disabled'.</td><td >Registry value is '1'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0306</td><td >Ensure 'Allow users to connect remotely by using Remote Desktop Services' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0307</td><td >Ensure 'Disallow Digest authentication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0308</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0309</td><td >Ensure 'Do not allow COM port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0310</td><td >Ensure 'Do not allow drive redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0311</td><td >Ensure 'Do not allow LPT port redirection' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0312</td><td >Ensure 'Do not use temporary folders per session' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0313</td><td >Ensure 'Apply UAC restrictions to local accounts on network logons' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0323</td><td >Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0324</td><td >Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' set to 'Disabled'.</td><td >Registry value is '<none>'. Expected: </td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0325</td><td >Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' set to 'XTS-AES 256-bit'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0328</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0329</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0330</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0331</td><td >Ensure 'Configure minimum PIN length for startup' set to 'Enabled' and 'minimum characters' set to 10.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0332</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0333</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0334</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0335</td><td >Ensure 'Configure use of passwords for fixed data drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0336</td><td >Ensure 'Configure use of passwords for operating system drives' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0337</td><td >Ensure 'Configure use of passwords for removable data drives' set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0338</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0339</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0340</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >82020342</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Save BitLocker recovery information to AD DS for fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0343</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Save BitLocker recovery information to AD DS for operating system drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0344</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Save BitLocker recovery information to AD DS for removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0345</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key and PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0346</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0347</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0348</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Allow data recovery agent'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0349</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0350</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0351</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Use BitLocker software-based encryption when hardware encryption is not available'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0352</td><td >Ensure 'Configure use of smart cards on fixed data drives' set to 'Require use of smart cards on fixed data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0353</td><td >Ensure 'Configure use of smart cards on removable data drives' set to 'Require use of smart cards on removable data drives'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0354</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' set to 'Do not allow write access to devices configured in another organization'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0355</td><td >Ensure 'Password Settings' set to 'Large letters + small letters + numbers + specials'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0358</td><td >Ensure 'Require additional authentication at startup' set to 'Allow BitLocker without a compatible TPM'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0359</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0360</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (Test)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0361</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Omit recovery options from the BitLocker setup wizard (True)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0362</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow startup key with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0363</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Allow 48-digit recovery password'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0364</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Require 48-digit recovery password '.</td><td >Registry value is '2'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0365</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 48-digit recovery password'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0366</td><td >Ensure 'Configure use of hardware-based encryption for fixed data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0367</td><td >Ensure 'Configure use of hardware-based encryption for operating system drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0368</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Restrict encryption algorithms and cipher suites allowed for hardware-based encryption (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0369</td><td >Ensure 'Configure use of hardware-based encryption for removable data drives' set to 'Password Length' and set to greater or equal 15.</td><td >Registry value is '14'. Expected: x >= 15</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0370</td><td >Ensure 'Prevent installation of devices that match any of these device IDs' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0371</td><td >Ensure 'Prevent installation of devices using drivers that match these device setup classes' set to 'Also apply to matching devices that are already installed. (True) '.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0372</td><td >Ensure 'Require additional authentication at startup' set to 'Do not allow TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0373</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for removable data drives (False)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0374</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives (Enabled)'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0375</td><td >Ensure 'Choose how BitLocker-protected fixed drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0376</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Store recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0377</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Backup recovery passwords and key packages'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0378</td><td >Ensure 'Choose how BitLocker-protected operating system drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0380</td><td >Ensure 'Choose how BitLocker-protected removable drives can be recovered' set to 'Do not allow 256-bit recovery key'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0384</td><td >Ensure 'Password Age' set to less or equal 42.</td><td >Registry value is '20'. Expected: 42</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0385</td><td >Ensure 'Require additional authentication at startup' set to 'Require startup PIN with TPM'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0386</td><td >Ensure 'Turn on PowerShell Transcription' set to 'Disabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0387</td><td >Ensure 'Turn on PowerShell Script Block Logging' set to 'Enabled'.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0388</td><td >Ensure 'Require secure RPC communication' set to 'Enabled'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0389</td><td >Ensure 'Set client connection encryption level' set to 'Enabled: High Level'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0390</td><td >Ensure 'Set time limit for active but idle Remote Desktop Services sessions' set to 'Enabled: 5 minutes'.</td><td >Registry value is '900000'. Expected: 300000</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0391</td><td >Ensure 'Set time limit for disconnected sessions' set to 'Enabled: 1 minute'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0044</td><td > Ensure 'SeTrustedCredManAccessPrivilege' is set to 'Enabled'</td><td >The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0045</td><td > Ensure 'SeNetworkLogonRight' is set to 'Administrator, Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0046</td><td > Ensure 'SeTcbPrivilege' is set to 'None'</td><td >The user 'SeTcbPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0047</td><td > Ensure  ’Adjust memory quotas for a process’ set to ’Administrators, LOCAL SERVICE, NETWORK SERVICE’</td><td >The user right 'SeIncreaseQuotaPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0048</td><td > Ensure 'Allow log on locally' set to 'Administrators, Users'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-UTMU75K\OldGuest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0049</td><td > Ensure 'SeBackupPrivilege' is set to 'Administrator'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0050</td><td > Ensure 'SeSystemtimePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0051</td><td > Ensure 'SeTimeZonePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user right 'SeTimeZonePrivilege' contains following unexpected users: BUILTIN\Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0052</td><td > Ensure 'SeCreatePagefilePrivilege' is set to 'Administrator, LOCAL SERVICE'</td><td >The user 'SeCreatePagefilePrivilege' setting does not contain the following users: NT AUTHORITY\LOCAL SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0053</td><td > Ensure 'SeCreateTokenPrivilege' is set to 'None'</td><td >The user 'SeCreateTokenPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0054</td><td > Ensure 'SeCreateGlobalPrivilege' is set to 'Administrator, SERVICE, LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0055</td><td > Ensure 'SeCreatePermanentPrivilege' is set to 'None'</td><td >The user 'SeCreatePermanentPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0056</td><td > Ensure 'SeCreateSymbolicLinkPrivilege' is set to 'Administrator'</td><td >The user right 'SeCreateSymbolicLinkPrivilege' contains following unexpected users: NT VIRTUAL MACHINE\Virtual Machines</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0057</td><td > Ensure 'SeDebugPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0064</td><td > Ensure 'SeEnableDelegationPrivilege' is set to 'None'</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0066</td><td > Ensure 'SeRemoteShutdownPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0067</td><td > Ensure 'SeAuditPrivilege' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0068</td><td > Ensure 'SeImpersonatePrivilege' is set to 'Administrator, LOCAL SERVICE, NETWORK SERVICE'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: NT AUTHORITY\SERVICE</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0069</td><td > Ensure 'SeIncreaseBasePriorityPrivilege' is set to 'Administrator'</td><td >The user right 'SeIncreaseBasePriorityPrivilege' contains following unexpected users: Window Manager\Window Manager Group</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0085</td><td > Ensure 'SeRelabelPrivilege' is set to 'None'</td><td >The user 'SeRelabelPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0086</td><td > Ensure 'SeSystemEnvironmentPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0087</td><td > Ensure 'SeManageVolumePrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0088</td><td > Ensure 'SeProfileSingleProcessPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0089</td><td > Ensure 'SeSystemProfilePrivilege' is set to 'Administrator, NT SERVICE/WdiServiceHost'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0090</td><td > Ensure 'SeRestorePrivilege' is set to 'Administrator'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0091</td><td > Ensure 'SeShutdownPrivilege' is set to 'Administrator, Users'</td><td >The user right 'SeShutdownPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0094</td><td > Ensure 'SeTakeOwnershipPrivilege' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0104</td><td > Ensure 'SeDenyNetworkLogonRight' is set to 'Local account, Guest'</td><td >The user right 'SeDenyNetworkLogonRight' contains following unexpected users: LOCAL
+The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0105</td><td > Ensure 'SeDenyBatchLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0106</td><td > Ensure 'SeDenyServiceLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0107</td><td > Ensure 'SeDenyInteractiveLogonRight' is set to 'Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0108</td><td > Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'Local account, Guest'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0180</td><td > Ensure 'Load and unload device drivers' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0181</td><td > Ensure 'Lock pages in memory' is set to 'No one'</td><td >The user 'SeLockMemoryPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0182</td><td > Ensure 'Log on as a batch job' is set to 'Administrator'</td><td >The user right 'SeBatchLogonRight' contains following unexpected users: BUILTIN\Backup Operators, BUILTIN\Performance Log Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0183</td><td > Ensure 'Log on as a service' is set to 'No one'</td><td >The user right 'SeServiceLogonRight' contains following unexpected users: DESKTOP-UTMU75K\SQLServer2005SQLBrowserUser$DESKTOP-UTMU75K, NT SERVICE\ALL SERVICES, NT SERVICE\SQLTELEMETRY, NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER, NT VIRTUAL MACHINE\Virtual Machines
+The user 'SeServiceLogonRight' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0184</td><td > Ensure 'Manage auditing and security log' is set to 'Administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0219</td><td > Ensure 'Replace a process level token' is set to 'Local Service, Network Service'</td><td >The user right 'SeAssignPrimaryTokenPrivilege' contains following unexpected users: NT SERVICE\SQLSERVERAGENT, NT SERVICE\MSSQLSERVER</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0303</td><td > Ensure 'Allow log on through Remote Desktop Services' is set to 'Remote Desktop User'</td><td >The user right 'SeRemoteInteractiveLogonRight' contains following unexpected users: BUILTIN\Administrators</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0001</td><td > Ensure 'Maximum password age' is set to between 1 and 42</td><td >'MaximumPasswordAge' currently set to: 60. Expected: x <= 42 and x >= 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0002</td><td > Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0100</td><td > Ensure 'Reset account lockout counter after' is set greater or equal 15</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0102</td><td > Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0103</td><td >Ensure 'Account lockout threshold' is set greater or equal 1 and less or equal 10</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0162</td><td > Ensure 'Enforce password history' is set greater or equal 24</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0186</td><td > Ensure 'Minimum password age' is set to greater or equal 1</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0187</td><td > Ensure 'Minimum password length' is set to greater or equal 14</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="BSI-Benchmarks-SiM--08202----BPOLAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >0008</td><td > Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0011</td><td > Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0012</td><td > Ensure 'Audit Security Group Management' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0013</td><td > Ensure 'Audit account management' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0014</td><td > Ensure 'Advanced security audit policy settings' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0015</td><td > Ensure 'Audit Process Creation' is set to 'SuccessAndNotFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0016</td><td > Ensure 'Audit Other Logon/Logoff Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0017</td><td > Ensure 'Audit Account Lockout' is set to 'SuccessAndNotFailure'</td><td >Set to: Failure</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0018</td><td > Ensure 'How to track users logon/logoff' is set to 'SuccessAndNotFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0019</td><td > Ensure 'Audit Policy: Logon-Logoff: Logon' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0020</td><td > Ensure 'Audit Policy: Logon-Logoff: Special Logon' is set to 'Enabled'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0021</td><td > Ensure 'Audit Policy: Object Access:Removable Storage' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0022</td><td > Ensure 'Audit Policy: Policy Change: Audit Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0023</td><td > Ensure 'Audit Policy: Policy Change: Authentication Policy Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0025</td><td > Ensure 'Audit Policy: System: IPsecDriver' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0026</td><td > Ensure 'Audit Policy: System: OtherSystem Events' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >0027</td><td > Ensure 'Audit Policy: System: Security State Change' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0028</td><td > Ensure 'Audit Policy: System: Security System Extension' is set to 'SuccessAndFailure'</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >0029</td><td > Ensure 'Audit Policy: System: System Integrity' is set to 'SuccessAndFailure'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div></div><script type="text/javascript">function collapseHandler(e) {
+	var targetSection = e.target.parentElement.parentElement;
+	if (targetSection.classList.toggle('collapsed')) {
+		e.target.innerText = '+';
+	} else {
+		e.target.innerText = '-';
+	}
+}
+var collapseButtons = document.getElementsByClassName("collapseButton");
+for (var i = 0; i < collapseButtons.length; i++) {
+    collapseButtons[i].addEventListener('click', collapseHandler);
+}</script></body></body></html> 
diff --git a/Samples/Outdated/Microsoft Windows 11 Dark.html b/Samples/Outdated/Microsoft Windows 11 Dark.html
new file mode 100644
index 0000000..bcadde6
--- /dev/null
+++ b/Samples/Outdated/Microsoft Windows 11 Dark.html	
@@ -0,0 +1,14 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows 11 Report [01/17/2022 05:52:25]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: #f3f3f3;	background-color: #14141d;}.content {	padding: 30px 40px;}a {	color: #ffc17a;}a:visited {	color: #ff7aad;}.header {	background-color: #2a2a3d;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: white;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #2a2a3d;}.gauge {	height: 25px;	background: #43435f;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	width: 100%;}table.audit-info th, table.audit-info td {	border: 1px solid #55555f;}table.audit-info th {	border-bottom-width: 2px;}table.audit-info tr:nth-child(even) {	background-color: #272733;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 30%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #dddddd;	background-color: #212130;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #43435f;	color: #ff9924;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #424252;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: #14141d;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: #f3f3f3;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(131.508deg); transform: rotate(131.508deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(0deg); transform: rotate(0deg);}.donut-chart.chart .chart-center span:after {content: "11.53 %";}</style></head><body ><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows 11 Report</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>4.14</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Are you seeing a lot of red sections? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >Security baseline for Microsoft Windows 11, Version: 20H2, Date: 2020-12-17</li></ul></p></div><div class="main content"><div class="host-information"><p >This report was generated on 01/17/2022 05:52:25 on DESKTOP-EHK98K4 with TAPHtmlReport version 1.8.</p><table ><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-EHK98K4</td></tr><tr ><th scope="row">Build Number</th><td >22000</td></tr><tr ><th scope="row">Free disk space(GB)      </th><td >105.1</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >1.088</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 11 Pro</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr></tbody></table><h1 style="clear:both; padding-top: 50px;">Summary</h1><p >A total of 347 tests have been executed.</p><div class="gauge"><div title="True 40 test(s), 11.53%" style="width: 11.53%" class="gauge-meter passed"></div><div title="False 307 test(s), 88.47%" style="width: 88.47%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 40 test(s) &#x2259; 11.53%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 307 test(s) &#x2259; 88.47%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">Microsoft Benchmarks</h2><p >A total of 347 tests have been executed in section Microsoft Benchmarks.</p><div class="gauge"><div title="True 40 test(s), 11.53%" style="width: 11.53%" class="gauge-meter passed"></div><div title="False 307 test(s), 88.47%" style="width: 88.47%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 40 test(s) &#x2259; 11.53%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 307 test(s) &#x2259; 88.47%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h1 id="toc">Table of Contents</h1><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#Microsoft-Benchmarks">Microsoft Benchmarks</a><ul ><li ><a href="#Microsoft-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#Microsoft-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#Microsoft-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><section ><h1 id="Microsoft-Benchmarks"><span class="failed">Microsoft Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all benchmarks from Microsoft</p><section ><h1 id="Microsoft-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >Registry-009</td><td >Set registry value 'UseEnhancedPin' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-010</td><td >Set registry value 'RDVDenyCrossOrg' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-011</td><td >Set registry value 'DisableExternalDMAUnderLock' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-012</td><td >Set registry value 'DCSettingIndex' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-013</td><td >Set registry value 'ACSettingIndex' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-014</td><td >Set registry value 'DenyDeviceClasses' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-015</td><td >Set registry value 'DenyDeviceClassesRetroactive' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-016</td><td >Set registry value '1' to 'Prevent installation of drivers matching these device setup classes'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-017</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-018</td><td >Set registry value 'PUAProtection' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-019</td><td >Set registry value 'MpCloudBlockLevel' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-020</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-021</td><td >Ensure 'Turn off real-time protection' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-022</td><td >Set registry value 'DisableScriptScanning' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-023</td><td >Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-024</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-025</td><td >Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-026</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-027</td><td >Set registry value 'ExploitGuard_ASR_Rules' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-028</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-029</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-030</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-031</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-032</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-033</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-034</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-035</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-036</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-037</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-038</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-039</td><td >Use advanced protection against ransomware</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-040</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-041</td><td >Set registry value 'EnableNetworkProtection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-042</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-043</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-044</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-045</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-046</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-047</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-048</td><td >Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-049</td><td >Set registry value 'NoToastApplicationNotificationOnLockScreen' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-050</td><td >Set registry value 'AutoConnectAllowedOEM' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-051</td><td >Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-052</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-053</td><td >Set registry value 'NoWebServices' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-054</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-055</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-056</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-057</td><td >Set registry value 'LocalAccountTokenFilterPolicy' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-058</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-059</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-060</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-061</td><td >Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-062</td><td >Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-063</td><td >Set registry value 'LetAppsActivateWithVoiceAboveLock' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-064</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-065</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-066</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-067</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-068</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-069</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-070</td><td >Set registry value 'AllowGameDVR' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-071</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-072</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-073</td><td >Set registry value 'AlwaysInstallElevated' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-074</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-075</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-076</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-077</td><td >Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-078</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-079</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-080</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-081</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-082</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-083</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set.</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-084</td><td >Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-085</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-086</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-087</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-088</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-089</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-090</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-091</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-092</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-093</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-094</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-095</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-096</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-097</td><td >Set registry value 'DisableWebPnPDownload' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-098</td><td >Set registry value 'RestrictDriverInstallationToAdministrators' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-099</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-100</td><td >Set registry value 'fUseMailto' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-101</td><td >Set registry value 'fAllowToGetHelp' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-102</td><td >Set registry value 'fAllowFullControl' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-103</td><td >Set registry value 'MaxTicketExpiry' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-104</td><td >Set registry value 'MaxTicketExpiryUnits' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-105</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-106</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-107</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-108</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-109</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-110</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-111</td><td >Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-112</td><td >Set registry value 'DisableNotifications' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-113</td><td >Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-114</td><td >Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-115</td><td >Set registry value 'LogDroppedPackets' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-116</td><td >Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-117</td><td >Set registry value 'LogSuccessfulConnections' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-118</td><td >Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-119</td><td >Set registry value 'DisableNotifications' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-120</td><td >Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-121</td><td >Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-122</td><td >Set registry value 'LogSuccessfulConnections' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-123</td><td >Set registry value 'LogDroppedPackets' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-124</td><td >Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-125</td><td >Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-126</td><td >Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-127</td><td >Set registry value 'DisableNotifications' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-128</td><td >Set registry value 'AllowLocalIPsecPolicyMerge' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-129</td><td >Set registry value 'AllowLocalPolicyMerge' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-130</td><td >Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-131</td><td >Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-132</td><td >Set registry value 'LogDroppedPackets' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-133</td><td >Set registry value 'LogSuccessfulConnections' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-134</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-135</td><td >Set registry value 'AdmPwdEnabled' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-136</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-137</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-138</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-139</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-140</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-141</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-142</td><td >Set registry value 'NodeType' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-143</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-144</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-145</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-146</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-147</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-148</td><td >Set registry value 'NoLMHash' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-149</td><td >Set registry value 'EnablePlainTextPassword' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-150</td><td >Set registry value 'LimitBlankPasswordUse' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-151</td><td >Set registry value 'RestrictAnonymousSAM' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-152</td><td >Set registry value 'RestrictAnonymous' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-153</td><td >Set registry value 'RestrictNullSessAccess' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-154</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-155</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-156</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-157</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-158</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-159</td><td >Set registry value 'requirestrongkey' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-160</td><td >Set registry value 'RequireSecuritySignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-161</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-162</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-163</td><td >Set registry value 'signsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-164</td><td >Set registry value 'requiresecuritysignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-165</td><td >Set registry value 'ProtectionMode' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-166</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-167</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-168</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-169</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-170</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-171</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-172</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-173</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-174</td><td >Remote calls to the Security Account Manager (SAM) must be restricted to Administrators.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-222</td><td >Set registry value 'FormSuggest Passwords' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-223</td><td >Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-224</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-225</td><td >Ensure 'Remove "Run this time" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-226</td><td >Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-227</td><td >Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-228</td><td >Set registry value 'CheckExeSignatures' to yes.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-229</td><td >Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-230</td><td >Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-231</td><td >Set registry value 'Isolation' to PMEM.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-232</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-234</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-235</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-237</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-238</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-240</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-241</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-242</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-244</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-246</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-247</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-249</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-251</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-252</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-253</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-254</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-255</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-256</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-257</td><td >Set registry value 'PreventOverride' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-258</td><td >Ensure 'Prevent managing SmartScreen Filter' is set to 'On'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-259</td><td >Set registry value 'NoCrashDetection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-260</td><td >Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-261</td><td >Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-262</td><td >Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-263</td><td >Set registry value 'Security_zones_map_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-264</td><td >Set registry value 'Security_options_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-265</td><td >Set registry value 'Security_HKLM_only' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-266</td><td >Ensure 'Check for server certificate revocation' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-267</td><td >Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-268</td><td >Set registry value 'WarnOnBadCertRecving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-269</td><td >Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-270</td><td >Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-271</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-272</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-273</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-274</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-275</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-276</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-277</td><td >Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-278</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-279</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-280</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-281</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-282</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-283</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-284</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-285</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-286</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-287</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-288</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-289</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-290</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-291</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-292</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-293</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-294</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-295</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-296</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-297</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-298</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-299</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-300</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-301</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-302</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-303</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-304</td><td >Ensure 'Logon options' is set to 'Prompt for user name and password'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-305</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-306</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-307</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-308</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-309</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-310</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-311</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-312</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-313</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-314</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-315</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-316</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-317</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-318</td><td >Ensure 'Allow META REFRESH' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-319</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-320</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-321</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-322</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-323</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-324</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-325</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-326</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-327</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-328</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-329</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-330</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-331</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-332</td><td >Ensure 'Allow binary and script behaviors' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-333</td><td >Ensure 'Scripting of Java applets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-334</td><td >Ensure 'Allow file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-335</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-336</td><td >Ensure 'Allow active scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-337</td><td >Ensure 'Logon options' is set to 'Anonymous logon'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-338</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-339</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-340</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-341</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-342</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-343</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-344</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-345</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-346</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-347</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-348</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-349</td><td >Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-350</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-351</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-352</td><td >Ensure 'Run ActiveX controls and plugins' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-353</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-354</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-355</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-356</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >UserRight-176</td><td >Ensure 'SeSecurityPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-177</td><td >Ensure 'SeRestorePrivilege' is set to 'administrator'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-178</td><td >Ensure 'SeTakeOwnershipPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-179</td><td >Ensure 'SeBackupPrivilege' is set to 'administrator'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-180</td><td >Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'Local account'</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-181</td><td >Ensure 'SeCreatePermanentPrivilege' is set to 'none'</td><td >The user 'SeCreatePermanentPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-182</td><td >Ensure 'SeManageVolumePrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-183</td><td >Ensure 'SeLoadDriverPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-184</td><td >Ensure 'SeLockMemoryPrivilege' is set to 'none'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-185</td><td >Ensure 'SeDenyNetworkLogonRight' is set to 'Local account'</td><td >The user right 'SeDenyNetworkLogonRight' contains following unexpected users: DESKTOP-EHK98K4\Guest
+The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-186</td><td >Ensure 'SeNetworkLogonRight' is set to 'administrator, Remote Desktop Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-187</td><td >Ensure 'SeImpersonatePrivilege' is set to 'administrator, Service, Local Service, Network Service'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-188</td><td >Ensure 'SeCreateTokenPrivilege' is set to 'none'</td><td >The user 'SeCreateTokenPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-189</td><td >Ensure 'SeCreateGlobalPrivilege' is set to 'administrator, Service, Local Service, Network Service'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-190</td><td >Ensure 'SeSystemEnvironmentPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-191</td><td >Ensure 'SeCreatePagefilePrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-192</td><td >Ensure 'SeInteractiveLogonRight' is set to 'administrator, Users'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-EHK98K4\Guest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-193</td><td >Ensure 'SeRemoteShutdownPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-194</td><td >Ensure 'SeDebugPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-195</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to 'none'</td><td >The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-196</td><td >Ensure 'SeProfileSingleProcessPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-197</td><td >Ensure 'SeTcbPrivilege' is set to 'none'</td><td >The user 'SeTcbPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-198</td><td >Ensure 'SeEnableDelegationPrivilege' is set to 'none'</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AccountPolicy-001</td><td >Ensure 'MinimumPasswordLength' is set to '14'.</td><td >'MinimumPasswordLength' currently set to: 0. Expected: 14</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-002</td><td >Ensure 'PasswordComplexity' is set to '1'.</td><td >'PasswordComplexity' currently set to: 0. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-003</td><td >Ensure 'PasswordHistorySize' is set to '24'.</td><td >'PasswordHistorySize' currently set to: 0. Expected: 24</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-004</td><td >Ensure 'LockoutBadCount' is set to '10'.</td><td >'LockoutBadCount' currently set to: 0. Expected: 10</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-005</td><td >Ensure 'ResetLockoutCount' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-006</td><td >Ensure 'LockoutDuration' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-007</td><td >Ensure 'ClearTextPassword' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AuditPolicy-199</td><td >Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-200</td><td >Ensure 'Security Group Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-201</td><td >Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-202</td><td >Ensure 'Plug and Play Events' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-203</td><td >Ensure 'Process Creation' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-204</td><td >Ensure 'Account Lockout' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-205</td><td >Ensure 'Group Membership' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-206</td><td >Ensure 'Logon' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-207</td><td >Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-208</td><td >Ensure 'Special Logon' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-209</td><td >Ensure 'Detailed File Share' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-210</td><td >Ensure 'File Share' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-211</td><td >Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-212</td><td >Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-213</td><td >Ensure 'Audit Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-214</td><td >Ensure 'Authentication Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-215</td><td >Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-216</td><td >Ensure 'Other Policy Change Events' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-217</td><td >Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-218</td><td >Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-219</td><td >Ensure 'Security State Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-220</td><td >Ensure 'Security System Extension' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-221</td><td >Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div></div><script type="text/javascript">function collapseHandler(e) {
+	var targetSection = e.target.parentElement.parentElement;
+	if (targetSection.classList.toggle('collapsed')) {
+		e.target.innerText = '+';
+	} else {
+		e.target.innerText = '-';
+	}
+}
+var collapseButtons = document.getElementsByClassName("collapseButton");
+for (var i = 0; i < collapseButtons.length; i++) {
+    collapseButtons[i].addEventListener('click', collapseHandler);
+}</script></body></body></html> 
diff --git a/Samples/Outdated/Microsoft Windows 11.html b/Samples/Outdated/Microsoft Windows 11.html
new file mode 100644
index 0000000..50ca0eb
--- /dev/null
+++ b/Samples/Outdated/Microsoft Windows 11.html	
@@ -0,0 +1,14 @@
+<!DOCTYPE html><html lang="en"><head ><meta charset="UTF-8"></meta><meta content="width=device-width, initial-scale=1.0" name="viewport"></meta><meta content="ie=edge" http-equiv="X-UA-Compatible"></meta><title >Windows 11 Report [01/17/2022 05:19:04]</title><style >body {	font-family: Cambria, Georgia, serif;	margin: 0;	color: default;	background-color: default;}.content {	padding: 30px 40px;}a {	color: default;}a:visited {	color: default;}.header {	background-color: #c6c9cc;}.header svg {	margin-left: 3px;	opacity: 0.8;}.header svg g path:nth-child(1), /*F*/.header svg g path:nth-child(2), /*B*/.header svg g path:nth-child(6), /*G*/.header svg g path:nth-child(7), /*m*/.header svg g path:nth-child(8), /*b*/.header svg g path:nth-child(9)  /*H*/{	fill: black;}.header h1 {	margin: 0;}h1, h2, h3, h4, h5, h6 {	font-family: 'Calibri', 'Segoe UI', sans-serif;}li a {	display: block;}li a:hover {	background-color: #f2f2f2;}.gauge {	height: 25px;	background: #a7a7a7;	border-radius: 8px;	overflow: hidden;}.gauge .gauge-meter {	height: 100%;	float: left;}.gauge-info {	margin: 0;	padding: 20px 0;}.gauge-info .gauge-info-item {	display: table-cell;	width: 1%;	text-align: center;	line-height: 30px;}.gauge-info .gauge-info-item span.auditstatus {	display: inline;}section.collapsed > :not(:first-child) {	display: none;}table {	border-collapse: collapse;	font-family: Arial, sans-serif;}th, td {	padding: 5px 10px;	text-align: left;	vertical-align: top;}/* audit-info table */table.audit-info {	width: 100%;}table.audit-info th, table.audit-info td {	border: 1px solid #d2d2d2;}table.audit-info th {	border-bottom-width: 2px;}table.audit-info tr:nth-child(even) {	background-color: #efefef;}/* First column in an audit-info table */table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) {	text-align: left;	white-space: nowrap;	width: 40px;}/* First column in an audit-info table */table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) {	text-align: left;	width: 30%;}/* Last column in an audit-info table */table.audit-info th:last-child, table.audit-info td:last-child {	text-align: center;	width: 70px;}.passed, .green, .failed, .red {	color: #fff;}.warning, .orange  {	color: #000;}.passed, .green {	background-color: #33cca6;}.failed, .red {	background-color: #cc0000;}.warning, .orange {	background-color: #ff9933;}h1 span.passed, h1 span.failed, h1 span.warning,h2 span.passed, h2 span.failed, h2 span.warning,h3 span.passed, h3 span.failed, h3 span.warning {	padding: 5px 10px;	border-radius: 8px;}span.auditstatus {	display: block;	padding: 5px 10px;	border-radius: 8px;	font-weight: bold;	margin: auto;}.sectionAction {	display: inline-block;	text-align: center;	text-decoration: none;	margin: 0 0 0 15px;	padding: 0 8px;	color: #161616;	background-color: #dfdfdf;	border-radius: 8px;	font-weight: bold;	cursor: pointer;}.sectionAction:hover {	background-color: #dddddd;;	color: blue;}#host-information {	float: left;}/* Overall compliance donut chart */.card {	float: right;	margin: 0 100px 0 0;	width: 250px;}.donut-chart {	position: relative;	border-radius: 50%;	overflow: hidden;}.donut-chart.chart {	width: 200px; 	height: 200px;	background: #c6c9cc;}.donut-chart .slice {	position: absolute;	top: 0;	left: 0;	width: 100%;	height: 100%;}.donut-chart .chart-center {	position: absolute;	border-radius: 50%;	top: 25px;	left: 25px;	width: 150px;	height: 150px;	background: white;}.donut-chart .chart-center span {	display: block;	text-align: center;	font-size: 40px;	line-height: 150px;	color: black;}.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(131.508deg); transform: rotate(131.508deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(0deg); transform: rotate(0deg);}.donut-chart.chart .chart-center span:after {content: "11.53 %";}</style></head><body ><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1 >Windows 11 Report</h1><p >Generated by the <i>ATAPAuditor</i> Module Version <i>4.14</i> by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>. Are you seeing a lot of red sections? Check out our <a href="https://www.fb-pro.com/enforce-suite">hardening solutions</a>.</p><p >Based on:<ul ><li >Security baseline for Microsoft Windows 11, Version: 20H2, Date: 2020-12-17</li></ul></p></div><div class="main content"><div class="host-information"><p >This report was generated on 01/17/2022 05:19:04 on DESKTOP-EHK98K4 with TAPHtmlReport version 1.8.</p><table ><tbody ><tr ><th scope="row">Hostname</th><td >DESKTOP-EHK98K4</td></tr><tr ><th scope="row">Build Number</th><td >22000</td></tr><tr ><th scope="row">Free disk space(GB)      </th><td >105.2</td></tr><tr ><th scope="row">Free physical memory (GB)</th><td >0.804</td></tr><tr ><th scope="row">Operating System</th><td >Microsoft Windows 11 Pro</td></tr><tr ><th scope="row">Installation Language</th><td >English (United States)</td></tr></tbody></table><h1 style="clear:both; padding-top: 50px;">Summary</h1><p >A total of 347 tests have been executed.</p><div class="gauge"><div title="True 40 test(s), 11.53%" style="width: 11.53%" class="gauge-meter passed"></div><div title="False 307 test(s), 88.47%" style="width: 88.47%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 40 test(s) &#x2259; 11.53%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 307 test(s) &#x2259; 88.47%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h2 style="clear:both; margin-top: 0;">Microsoft Benchmarks</h2><p >A total of 347 tests have been executed in section Microsoft Benchmarks.</p><div class="gauge"><div title="True 40 test(s), 11.53%" style="width: 11.53%" class="gauge-meter passed"></div><div title="False 307 test(s), 88.47%" style="width: 88.47%" class="gauge-meter failed"></div><div title="Warning 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter warning"></div><div title="None 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div><div title="Error 0 test(s), 0.00%" style="width: 0.00%" class="gauge-meter "></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 40 test(s) &#x2259; 11.53%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 307 test(s) &#x2259; 88.47%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">Error</span> 0 test(s) &#x2259; 0.00%</li></ol><h1 id="toc">Table of Contents</h1><p >Click the link(s) below for quick access to a report section.</p><ul ><li ><a href="#Microsoft-Benchmarks">Microsoft Benchmarks</a><ul ><li ><a href="#Microsoft-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li ><a href="#Microsoft-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li ><a href="#Microsoft-BenchmarksAccount-Policies">Account Policies</a></li><li ><a href="#Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><section ><h1 id="Microsoft-Benchmarks"><span class="failed">Microsoft Benchmarks</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p >This section contains all benchmarks from Microsoft</p><section ><h1 id="Microsoft-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >Registry-009</td><td >Set registry value 'UseEnhancedPin' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-010</td><td >Set registry value 'RDVDenyCrossOrg' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-011</td><td >Set registry value 'DisableExternalDMAUnderLock' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-012</td><td >Set registry value 'DCSettingIndex' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-013</td><td >Set registry value 'ACSettingIndex' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-014</td><td >Set registry value 'DenyDeviceClasses' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-015</td><td >Set registry value 'DenyDeviceClassesRetroactive' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-016</td><td >Set registry value '1' to 'Prevent installation of drivers matching these device setup classes'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-017</td><td >Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-018</td><td >Set registry value 'PUAProtection' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-019</td><td >Set registry value 'MpCloudBlockLevel' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-020</td><td >Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-021</td><td >Ensure 'Turn off real-time protection' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-022</td><td >Set registry value 'DisableScriptScanning' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-023</td><td >Ensure 'Scan removable drives' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-024</td><td >Ensure 'Send file samples when further analysis is required' is set to 'Send safe samples'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-025</td><td >Ensure 'Join Microsoft MAPS' is set to 'Advanced MAPS'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-026</td><td >Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-027</td><td >Set registry value 'ExploitGuard_ASR_Rules' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-028</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-029</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-030</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-031</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-032</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-033</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-034</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-035</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-036</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-037</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-038</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-039</td><td >Use advanced protection against ransomware</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-040</td><td >(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-041</td><td >Set registry value 'EnableNetworkProtection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-042</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-043</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Secure Boot'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-044</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-045</td><td >Set registry value 'HVCIMATRequired' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-046</td><td >Ensure 'Turn On Virtualization Based Security' is set to 'Enabled with UEFI lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-047</td><td >Set registry value 'ConfigureSystemGuardLaunch' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-048</td><td >Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-049</td><td >Set registry value 'NoToastApplicationNotificationOnLockScreen' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-050</td><td >Set registry value 'AutoConnectAllowedOEM' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-051</td><td >Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-052</td><td >Ensure 'Turn off Autoplay' is set to 'All drives'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-053</td><td >Set registry value 'NoWebServices' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-054</td><td >Ensure 'Set the default behavior for AutoRun' is set to 'Do not execute any autorun commands'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-055</td><td >Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-056</td><td >Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-057</td><td >Set registry value 'LocalAccountTokenFilterPolicy' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-058</td><td >Set registry value 'AllowEncryptionOracle' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-059</td><td >Set registry value 'EnhancedAntiSpoofing' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-060</td><td >Ensure 'Prevent downloading of enclosures' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-061</td><td >Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-062</td><td >Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-063</td><td >Set registry value 'LetAppsActivateWithVoiceAboveLock' to 2.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-064</td><td >Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-065</td><td >Set registry value 'AllowProtectedCreds' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-066</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-067</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '196608'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-068</td><td >Ensure 'Specify the maximum log file size (KB)' is set to '32768'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-069</td><td >Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-070</td><td >Set registry value 'AllowGameDVR' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-071</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-072</td><td >Ensure 'Configure registry policy processing' is set to '0'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-073</td><td >Set registry value 'AlwaysInstallElevated' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-074</td><td >Ensure 'Allow user control over installs' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-075</td><td >Set registry value 'DeviceEnumerationPolicy' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-076</td><td >Ensure 'Enable insecure guest logons' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-077</td><td >Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-078</td><td >Set registry value '\\*\SYSVOL' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-079</td><td >Set registry value '\\*\NETLOGON' to RequireMutualAuthentication=1,RequireIntegrity=1.</td><td >Registry value is ''. Expected: RequireMutualAuthentication=1,RequireIntegrity=1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-080</td><td >Set registry value 'NoLockScreenCamera' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-081</td><td >Set registry value 'NoLockScreenSlideshow' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-082</td><td >Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-083</td><td >Ensure 'Turn on PowerShell Script Block Logging' is not set.</td><td >Compliant. Registry key not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-084</td><td >Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-085</td><td >Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-086</td><td >Ensure 'Configure Windows SmartScreen' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-087</td><td >Set registry value 'ShellSmartScreenLevel' to Block.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-088</td><td >Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-089</td><td >Set registry value 'AllowIndexingEncryptedStoresOrItems' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-090</td><td >Ensure 'Disallow Digest authentication' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-091</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-092</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-093</td><td >Ensure 'Allow unencrypted traffic' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-094</td><td >Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-095</td><td >Ensure 'Allow Basic authentication' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-096</td><td >Ensure 'Turn off multicast name resolution' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-097</td><td >Set registry value 'DisableWebPnPDownload' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-098</td><td >Set registry value 'RestrictDriverInstallationToAdministrators' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-099</td><td >Ensure 'Restrict Unauthenticated RPC clients' is set to 'Authenticated'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-100</td><td >Set registry value 'fUseMailto' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-101</td><td >Set registry value 'fAllowToGetHelp' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-102</td><td >Set registry value 'fAllowFullControl' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-103</td><td >Set registry value 'MaxTicketExpiry' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-104</td><td >Set registry value 'MaxTicketExpiryUnits' to  .</td><td >Compliant. Registry value not found.</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-105</td><td >Set registry value 'MinEncryptionLevel' to 3.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-106</td><td >Set registry value 'fPromptForPassword' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-107</td><td >Set registry value 'fDisableCdm' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-108</td><td >Set registry value 'DisablePasswordSaving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-109</td><td >Set registry value 'fEncryptRPCTraffic' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-110</td><td >Set registry value 'PolicyVersion' to 538.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-111</td><td >Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-112</td><td >Set registry value 'DisableNotifications' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-113</td><td >Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-114</td><td >Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-115</td><td >Set registry value 'LogDroppedPackets' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-116</td><td >Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-117</td><td >Set registry value 'LogSuccessfulConnections' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-118</td><td >Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-119</td><td >Set registry value 'DisableNotifications' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-120</td><td >Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-121</td><td >Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-122</td><td >Set registry value 'LogSuccessfulConnections' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-123</td><td >Set registry value 'LogDroppedPackets' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-124</td><td >Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-125</td><td >Set registry value 'DefaultOutboundAction' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-126</td><td >Set registry value 'EnableFirewall' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-127</td><td >Set registry value 'DisableNotifications' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-128</td><td >Set registry value 'AllowLocalIPsecPolicyMerge' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-129</td><td >Set registry value 'AllowLocalPolicyMerge' to 0.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-130</td><td >Set registry value 'DefaultInboundAction' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-131</td><td >Set registry value 'LogFileSize' to 16384.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-132</td><td >Set registry value 'LogDroppedPackets' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-133</td><td >Set registry value 'LogSuccessfulConnections' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-134</td><td >Ensure 'Allow Windows Ink Workspace' is set to 'On, but disallow access above lock'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-135</td><td >Set registry value 'AdmPwdEnabled' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-136</td><td >Ensure 'WDigest Authentication (disabling may require KB2871997)' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-137</td><td >Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-138</td><td >Set registry value 'DriverLoadPolicy' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-139</td><td >Ensure 'Configure SMB v1 server' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-140</td><td >Ensure 'Configure SMB v1 client driver' is set to 'Disable driver (recommended)'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-141</td><td >Set registry value 'NoNameReleaseOnDemand' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-142</td><td >Set registry value 'NodeType' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-143</td><td >Set registry value 'EnableICMPRedirect' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-144</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-145</td><td >Set registry value 'DisableIPSourceRouting' to 2.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-146</td><td >Set registry value 'ScRemoveOption' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-147</td><td >Set registry value 'InactivityTimeoutSecs' to 900.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-148</td><td >Set registry value 'NoLMHash' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-149</td><td >Set registry value 'EnablePlainTextPassword' to 0.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-150</td><td >Set registry value 'LimitBlankPasswordUse' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-151</td><td >Set registry value 'RestrictAnonymousSAM' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-152</td><td >Set registry value 'RestrictAnonymous' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-153</td><td >Set registry value 'RestrictNullSessAccess' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-154</td><td >Set registry value 'SCENoApplyLegacyAuditPolicy' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-155</td><td >Set registry value 'NTLMMinClientSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-156</td><td >Set registry value 'LmCompatibilityLevel' to 5.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-157</td><td >Set registry value 'allownullsessionfallback' to 0.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-158</td><td >Set registry value 'NTLMMinServerSec' to 537395200.</td><td >Registry value is '536870912'. Expected: 537395200</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-159</td><td >Set registry value 'requirestrongkey' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-160</td><td >Set registry value 'RequireSecuritySignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-161</td><td >Set registry value 'sealsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-162</td><td >Set registry value 'requiresignorseal' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-163</td><td >Set registry value 'signsecurechannel' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-164</td><td >Set registry value 'requiresecuritysignature' to 1.</td><td >Registry value is '0'. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-165</td><td >Set registry value 'ProtectionMode' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-166</td><td >Set registry value 'ConsentPromptBehaviorAdmin' to 2.</td><td >Registry value is '5'. Expected: 2</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-167</td><td >Set registry value 'EnableSecureUIAPaths' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-168</td><td >Set registry value 'EnableLUA' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-169</td><td >Set registry value 'ConsentPromptBehaviorUser' to 0.</td><td >Registry value is '3'. Expected: 0</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-170</td><td >Set registry value 'EnableInstallerDetection' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-171</td><td >Set registry value 'FilterAdministratorToken' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-172</td><td >Set registry value 'EnableVirtualization' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-173</td><td >Set registry value 'LDAPClientIntegrity' to 1.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >Registry-174</td><td >Remote calls to the Security Account Manager (SAM) must be restricted to Administrators.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-222</td><td >Set registry value 'FormSuggest Passwords' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-223</td><td >Ensure 'Turn on the auto-complete feature for user names and passwords on forms' is set to 'no'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-224</td><td >Set registry value 'FormSuggest Passwords' to no.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-225</td><td >Ensure 'Remove "Run this time" button for outdated ActiveX controls in Internet Explorer ' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-226</td><td >Ensure 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is set to 'Disabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-227</td><td >Ensure 'Allow software to run or install even if the signature is invalid' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-228</td><td >Set registry value 'CheckExeSignatures' to yes.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-229</td><td >Ensure 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-230</td><td >Ensure 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-231</td><td >Set registry value 'Isolation' to PMEM.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-232</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-234</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-235</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-237</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-238</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-240</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-241</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-242</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-244</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-246</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-247</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-249</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-251</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-252</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-253</td><td >Set registry value '(Reserved)' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-254</td><td >Set registry value 'explorer.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-255</td><td >Set registry value 'iexplore.exe' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-256</td><td >Set registry value 'PreventOverrideAppRepUnknown' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-257</td><td >Set registry value 'PreventOverride' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-258</td><td >Ensure 'Prevent managing SmartScreen Filter' is set to 'On'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-259</td><td >Set registry value 'NoCrashDetection' to 1.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-260</td><td >Ensure 'Turn off the Security Settings Check feature' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-261</td><td >Ensure 'Prevent per-user installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-262</td><td >Ensure 'Specify use of ActiveX Installer Service for installation of ActiveX controls' is set to 'Enabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-263</td><td >Set registry value 'Security_zones_map_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-264</td><td >Set registry value 'Security_options_edit' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-265</td><td >Set registry value 'Security_HKLM_only' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-266</td><td >Ensure 'Check for server certificate revocation' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-267</td><td >Ensure 'Prevent ignoring certificate errors' is set to 'Enabled'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-268</td><td >Set registry value 'WarnOnBadCertRecving' to 1.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-269</td><td >Ensure 'Allow fallback to SSL 3.0 (Internet Explorer)' is set to 'No Sites'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-270</td><td >Ensure 'Turn off encryption support' is set to 'Use TLS 1.1 and TLS 1.2'.</td><td >Registry value not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-271</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-272</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-273</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-274</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-275</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-276</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-277</td><td >Ensure 'Intranet Sites: Include all network paths (UNCs)' is set to 'Disabled'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-278</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-279</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-280</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-281</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-282</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-283</td><td >Ensure 'Java permissions' is set to 'High safety'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-284</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-285</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-286</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-287</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-288</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-289</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-290</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-291</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-292</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-293</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-294</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-295</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-296</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-297</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-298</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-299</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-300</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-301</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-302</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-303</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-304</td><td >Ensure 'Logon options' is set to 'Prompt for user name and password'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-305</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-306</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-307</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-308</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-309</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-310</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-311</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-312</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-313</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-314</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-315</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Prompt'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-316</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-317</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-318</td><td >Ensure 'Allow META REFRESH' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-319</td><td >Ensure 'Initialize and script ActiveX controls not marked as safe' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-320</td><td >Ensure 'Download signed ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-321</td><td >Ensure 'Navigate windows and frames across different domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-322</td><td >Ensure 'Allow only approved domains to use ActiveX controls without prompt' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-323</td><td >Ensure 'Use Pop-up Blocker' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-324</td><td >Ensure 'Download unsigned ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-325</td><td >Ensure 'Userdata persistence' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-326</td><td >Ensure 'Allow cut, copy or paste operations from the clipboard via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-327</td><td >Ensure 'Include local path when user is uploading files to a server' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-328</td><td >Ensure 'Access data sources across domains' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-329</td><td >Ensure 'Allow script-initiated windows without size or position constraints' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-330</td><td >Ensure 'Run .NET Framework-reliant components not signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-331</td><td >Ensure 'Automatic prompting for file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-332</td><td >Ensure 'Allow binary and script behaviors' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-333</td><td >Ensure 'Scripting of Java applets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-334</td><td >Ensure 'Allow file downloads' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-335</td><td >Ensure 'Allow loading of XAML files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-336</td><td >Ensure 'Allow active scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-337</td><td >Ensure 'Logon options' is set to 'Anonymous logon'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-338</td><td >Ensure 'Run .NET Framework-reliant components signed with Authenticode' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-339</td><td >Ensure 'Turn on Protected Mode' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-340</td><td >Ensure 'Turn on Cross-Site Scripting Filter' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-341</td><td >Ensure 'Java permissions' is set to 'Disable Java'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-342</td><td >Ensure 'Allow scriptlets' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-343</td><td >Ensure 'Don't run antimalware programs against ActiveX controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-344</td><td >Ensure 'Allow scripting of Internet Explorer WebBrowser controls' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-345</td><td >Ensure 'Enable dragging of content from different domains within a window' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-346</td><td >Ensure 'Allow drag and drop or copy and paste files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-347</td><td >Ensure 'Allow updates to status bar via script' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-348</td><td >Ensure 'Enable dragging of content from different domains across windows' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-349</td><td >Ensure 'Script ActiveX controls marked safe for scripting' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-350</td><td >Ensure 'Web sites in less privileged Web content zones can navigate into this zone' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-351</td><td >Ensure 'Turn on SmartScreen Filter scan' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-352</td><td >Ensure 'Run ActiveX controls and plugins' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-353</td><td >Ensure 'Launching applications and files in an IFRAME' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-354</td><td >Ensure 'Show security warning for potentially unsafe files' is set to 'Disable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-355</td><td >Ensure 'Allow only approved domains to use the TDC ActiveX control' is set to 'Enable'.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >Registry-356</td><td >Set registry value '140C' to 3.</td><td >Registry key not found.</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >UserRight-176</td><td >Ensure 'SeSecurityPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-177</td><td >Ensure 'SeRestorePrivilege' is set to 'administrator'</td><td >The user right 'SeRestorePrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-178</td><td >Ensure 'SeTakeOwnershipPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-179</td><td >Ensure 'SeBackupPrivilege' is set to 'administrator'</td><td >The user right 'SeBackupPrivilege' contains following unexpected users: BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-180</td><td >Ensure 'SeDenyRemoteInteractiveLogonRight' is set to 'Local account'</td><td >The user 'SeDenyRemoteInteractiveLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-181</td><td >Ensure 'SeCreatePermanentPrivilege' is set to 'none'</td><td >The user 'SeCreatePermanentPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-182</td><td >Ensure 'SeManageVolumePrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-183</td><td >Ensure 'SeLoadDriverPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-184</td><td >Ensure 'SeLockMemoryPrivilege' is set to 'none'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-185</td><td >Ensure 'SeDenyNetworkLogonRight' is set to 'Local account'</td><td >The user right 'SeDenyNetworkLogonRight' contains following unexpected users: DESKTOP-EHK98K4\Guest
+The user 'SeDenyNetworkLogonRight' setting does not contain the following users: NT AUTHORITY\Local account</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-186</td><td >Ensure 'SeNetworkLogonRight' is set to 'administrator, Remote Desktop Users'</td><td >The user right 'SeNetworkLogonRight' contains following unexpected users: Everyone, BUILTIN\Users, BUILTIN\Backup Operators
+The user 'SeNetworkLogonRight' setting does not contain the following users: BUILTIN\Remote Desktop Users</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-187</td><td >Ensure 'SeImpersonatePrivilege' is set to 'administrator, Service, Local Service, Network Service'</td><td >The user right 'SeImpersonatePrivilege' contains following unexpected users: BUILTIN\IIS_IUSRS</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-188</td><td >Ensure 'SeCreateTokenPrivilege' is set to 'none'</td><td >The user 'SeCreateTokenPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-189</td><td >Ensure 'SeCreateGlobalPrivilege' is set to 'administrator, Service, Local Service, Network Service'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-190</td><td >Ensure 'SeSystemEnvironmentPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-191</td><td >Ensure 'SeCreatePagefilePrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-192</td><td >Ensure 'SeInteractiveLogonRight' is set to 'administrator, Users'</td><td >The user right 'SeInteractiveLogonRight' contains following unexpected users: DESKTOP-EHK98K4\Guest, BUILTIN\Backup Operators</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-193</td><td >Ensure 'SeRemoteShutdownPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-194</td><td >Ensure 'SeDebugPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-195</td><td >Ensure 'SeTrustedCredManAccessPrivilege' is set to 'none'</td><td >The user 'SeTrustedCredManAccessPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-196</td><td >Ensure 'SeProfileSingleProcessPrivilege' is set to 'administrator'</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >UserRight-197</td><td >Ensure 'SeTcbPrivilege' is set to 'none'</td><td >The user 'SeTcbPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >UserRight-198</td><td >Ensure 'SeEnableDelegationPrivilege' is set to 'none'</td><td >The user 'SeEnableDelegationPrivilege' setting does not contain the following users: NULL SID</td><td ><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAccount-Policies"><span class="failed">Account Policies</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AccountPolicy-001</td><td >Ensure 'MinimumPasswordLength' is set to '14'.</td><td >'MinimumPasswordLength' currently set to: 0. Expected: 14</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-002</td><td >Ensure 'PasswordComplexity' is set to '1'.</td><td >'PasswordComplexity' currently set to: 0. Expected: 1</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-003</td><td >Ensure 'PasswordHistorySize' is set to '24'.</td><td >'PasswordHistorySize' currently set to: 0. Expected: 24</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-004</td><td >Ensure 'LockoutBadCount' is set to '10'.</td><td >'LockoutBadCount' currently set to: 0. Expected: 10</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-005</td><td >Ensure 'ResetLockoutCount' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-006</td><td >Ensure 'LockoutDuration' is set to '15'.</td><td >Currently not set.</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AccountPolicy-007</td><td >Ensure 'ClearTextPassword' is set to '0'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section ><h1 id="Microsoft-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><span class="sectionAction collapseButton">-</span><a class="sectionAction" href="#toc"><span style="font-size: 75%;">&uarr;</span></a></h1><p ></p><table class="audit-info"><tbody ><tr ><th >Id</th><th >Task</th><th >Message</th><th >Status</th></tr><tr ><td >AuditPolicy-199</td><td >Ensure 'Credential Validation' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-200</td><td >Ensure 'Security Group Management' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-201</td><td >Ensure 'User Account Management' is set to 'Success' and is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-202</td><td >Ensure 'Plug and Play Events' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-203</td><td >Ensure 'Process Creation' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-204</td><td >Ensure 'Account Lockout' is set to 'Failure'.</td><td >Set to: Success</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-205</td><td >Ensure 'Group Membership' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-206</td><td >Ensure 'Logon' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-207</td><td >Ensure 'Other Logon/Logoff Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-208</td><td >Ensure 'Special Logon' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-209</td><td >Ensure 'Detailed File Share' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-210</td><td >Ensure 'File Share' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-211</td><td >Ensure 'Other Object Access Events' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-212</td><td >Ensure 'Removable Storage' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-213</td><td >Ensure 'Audit Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-214</td><td >Ensure 'Authentication Policy Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-215</td><td >Ensure 'MPSSVC Rule-Level Policy Change' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-216</td><td >Ensure 'Other Policy Change Events' is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-217</td><td >Ensure 'Sensitive Privilege Use' is set to 'Success' and is set to 'Failure'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-218</td><td >Ensure 'Other System Events' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-219</td><td >Ensure 'Security State Change' is set to 'Success'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr><tr ><td >AuditPolicy-220</td><td >Ensure 'Security System Extension' is set to 'Success'.</td><td >Set to: No Auditing</td><td ><span class="auditstatus failed">False</span></td></tr><tr ><td >AuditPolicy-221</td><td >Ensure 'System Integrity' is set to 'Success' and is set to 'Failure'.</td><td >Compliant</td><td ><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div></div><script type="text/javascript">function collapseHandler(e) {
+	var targetSection = e.target.parentElement.parentElement;
+	if (targetSection.classList.toggle('collapsed')) {
+		e.target.innerText = '+';
+	} else {
+		e.target.innerText = '-';
+	}
+}
+var collapseButtons = document.getElementsByClassName("collapseButton");
+for (var i = 0; i < collapseButtons.length; i++) {
+    collapseButtons[i].addEventListener('click', collapseHandler);
+}</script></body></body></html> 
diff --git a/Samples/Outdated/MozillaFirefox.dark.html b/Samples/Outdated/MozillaFirefox.dark.html
new file mode 100644
index 0000000..3ec9d7f
--- /dev/null
+++ b/Samples/Outdated/MozillaFirefox.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Mozilla Firefox Audit Report [04/03/2019 03:23:22]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px;  	color: #dddddd; 	background-color: #14141d; }  a { 	color: #ffc17a; }  a:visited { 	color: #ff7aad; }  .header { 	background-color: #2a2a3d;  	padding: 35px 20px; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #2a2a3d; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #2d2d3f; }  table.audit-info th { 	background-color: #212130; 	text-transform: uppercase; 	border-bottom: 1px solid #2d2d3f; }  table.audit-info tr:nth-child(even) { 	background-color: #2a2a3d; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap; 	width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	background-color: #212130; 	border-radius: 8px; 	font-weight: bold; 	color: #dddddd; }  a.totop:hover { 	background-color: #43435f; 	color: #ff9924; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Mozilla Firefox Audit Report</h1><p>Generated by the <i>MozillaFirefoxAudit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on CIS Mozilla Firefox 38 ESR Benchmark v1.0.0 - 2015-12-31, DISA Mozilla FireFox Security Technical Implementation Guide V4R24 2019-01-25.</p></div><p>This report was generated at 04/03/2019 03:23:22 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>114.1</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.108</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#CIS-Benchmarks">CIS Benchmarks</a><ul><li><a href="#CIS-BenchmarksConfigure-Locked-Preferences">Configure Locked Preferences</a></li><li><a href="#CIS-BenchmarksPreference-Settings">Preference Settings</a></li></ul></li><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsPreference-Settings">Preference Settings</a></li></ul></li></ul><section><h1 id="CIS-Benchmarks"><span class="failed">CIS Benchmarks</span><a href="#" class="totop">^</a></h1><p>This section contains all CIS benchmarks</p><section><h1 id="CIS-BenchmarksConfigure-Locked-Preferences"><span class="passed">Configure Locked Preferences</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>1.1</td> <td>Create local-settings.js file</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>1.3</td> <td>Create mozilla.tt.cfg file</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section><h1 id="CIS-BenchmarksPreference-Settings"><span class="failed">Preference Settings</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>2.1</td> <td>Enable Automatic Updates</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2</td> <td>Enable Auto-Notification of Outdated Plugins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3</td> <td>Enable Information Bar for Outdated Plugins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.4</td> <td>Set Update Interval Time Checks</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.5</td> <td>Set Update Wait Time Prompt</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.6</td> <td>Ensure Update-related UI Components are Displayed</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.7</td> <td>Set Search Provider Update Behavior</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.2</td> <td>Do Not Send Cross SSLTLS Referrer Header</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.3</td> <td>Disable NTLM v1</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.4</td> <td>Enable Warning For Phishy URLs</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.5</td> <td>Enable IDN Show Punycode</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.6</td> <td>Set File URI Origin Policy</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.7</td> <td>Disable Cloud Sync</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.8</td> <td>Disable WebRTC</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.1</td> <td>Set SSL Override Behavior</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.2</td> <td>Set Security TLS Version Maximum</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.3</td> <td>Set Security TLS Version Minimum </td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.4</td> <td>Set OCSP Use Policy</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.5</td> <td>Block Mixed Active Content</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.6</td> <td>Set OCSP Response Policy</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.1</td> <td>Disallow JavaScripts Ability to Change the Status Bar Text</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.2</td> <td>Disable Scripting of Plugins by JavaScript</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.3</td> <td>Disallow JavaScripts Ability to Hide the Address Bar</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.4</td> <td>Disallow JavaScripts Ability to Hide the Status Bar</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.5</td> <td>Disable Closing of Windows via Scripts</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.6</td> <td>Block Pop-up Windows</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.7</td> <td>Disable Displaying JavaScript in History URLs</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.1</td> <td>Disallow Credential Storage</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.2</td> <td>Do Not Accept Third Party Cookies</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.3</td> <td>Tracking Protection</td> <td>Missing lockprefs: lockPref("privacy.donottrackheader.value", 1).</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>6.4</td> <td>Set Delay for Enabling Security Sensitive Dialog Boxes</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.5</td> <td>Disable Geolocation Serivces</td> <td>Missing lockprefs: lockPref("geo.enabled", False).</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>7.1</td> <td>Secure Application Plug-ins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.2</td> <td>Disabling Auto-Install of Add-ons</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.3</td> <td>Enable Extension Block List</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.4</td> <td>Set Extension Block List Interval</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.5</td> <td>Enable Warning for External Protocol Handler</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.6</td> <td>Disable Popups Initiated by Plugins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.7</td> <td>Enable Extension Auto Update</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.8</td> <td>Enable Extension Update</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.9</td> <td>Set Extension Update Interval Time Checks</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.1</td> <td>Enable Virus Scanning for Downloads</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.2</td> <td>Disable JAR from Opening Unsafe File Types</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.3</td> <td>Block Reported Web Forgeries</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.4</td> <td>Block Reported Attack Sites</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section><h1 id="DISA-Recommendations"><span class="passed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsPreference-Settings"><span class="passed">Preference Settings</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTBF030</td> <td>Firewall traversal from remote host must be disabled.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF050</td> <td>FireFox is configured to ask which certificate to present to a web site when a certificate is required.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF085</td> <td>Firefox automatically checks for updated version of installed Search plugins.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF090</td> <td>Firefox automatically updates installed add-ons and plugins.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF105</td> <td>Network shell protocol is enabled in FireFox.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF140</td> <td>Firefox formfill assistance option is disabled.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF150</td> <td>Firefox is configured to autofill passwords.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF181</td> <td>FireFox is configured to allow JavaScript to move or resize windows.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF183</td> <td> Firefox is configured to allow JavaScript to disable or replace context menus.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF190</td> <td>Background submission of information to Mozilla must be disabled.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/MozillaFirefox.html b/Samples/Outdated/MozillaFirefox.html
new file mode 100644
index 0000000..5bef7de
--- /dev/null
+++ b/Samples/Outdated/MozillaFirefox.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Mozilla Firefox Audit Report [04/03/2019 02:57:42]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px; }  .header { 	background-color: #9e9e9e; 	padding: 35px 20px; 	color: #ffffff; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  table { 	border-collapse: collapse;     font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left;     vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #a7a7a7; }  table.audit-info th { 	background-color: #cacaca; 	color: white; 	text-transform: uppercase; 	border-bottom: 1px solid #a7a7a7; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap;     width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center;     width: 70px; }  .passed, .green, .failed, .red, .green, .red, .orange { 	color: #fff; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Mozilla Firefox Audit Report</h1><p>Generated by the <i>MozillaFirefoxAudit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on CIS Mozilla Firefox 38 ESR Benchmark v1.0.0 - 2015-12-31, DISA Mozilla FireFox Security Technical Implementation Guide V4R24 2019-01-25.</p></div><p>This report was generated at 04/03/2019 02:57:42 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>114.1</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.130</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#CIS-Benchmarks">CIS Benchmarks</a><ul><li><a href="#CIS-BenchmarksConfigure-Locked-Preferences">Configure Locked Preferences</a></li><li><a href="#CIS-BenchmarksPreference-Settings">Preference Settings</a></li></ul></li><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsPreference-Settings">Preference Settings</a></li></ul></li></ul><section><h1 id="CIS-Benchmarks"><span class="failed">CIS Benchmarks</span><a href="#" class="totop">^</a></h1><p>This section contains all CIS benchmarks</p><section><h1 id="CIS-BenchmarksConfigure-Locked-Preferences"><span class="passed">Configure Locked Preferences</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>1.1</td> <td>Create local-settings.js file</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>1.3</td> <td>Create mozilla.tt.cfg file</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section><h1 id="CIS-BenchmarksPreference-Settings"><span class="failed">Preference Settings</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>2.1</td> <td>Enable Automatic Updates</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2</td> <td>Enable Auto-Notification of Outdated Plugins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3</td> <td>Enable Information Bar for Outdated Plugins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.4</td> <td>Set Update Interval Time Checks</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.5</td> <td>Set Update Wait Time Prompt</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.6</td> <td>Ensure Update-related UI Components are Displayed</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.7</td> <td>Set Search Provider Update Behavior</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.2</td> <td>Do Not Send Cross SSLTLS Referrer Header</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.3</td> <td>Disable NTLM v1</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.4</td> <td>Enable Warning For Phishy URLs</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.5</td> <td>Enable IDN Show Punycode</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.6</td> <td>Set File URI Origin Policy</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.7</td> <td>Disable Cloud Sync</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>3.8</td> <td>Disable WebRTC</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.1</td> <td>Set SSL Override Behavior</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.2</td> <td>Set Security TLS Version Maximum</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.3</td> <td>Set Security TLS Version Minimum </td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.4</td> <td>Set OCSP Use Policy</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.5</td> <td>Block Mixed Active Content</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>4.6</td> <td>Set OCSP Response Policy</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.1</td> <td>Disallow JavaScripts Ability to Change the Status Bar Text</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.2</td> <td>Disable Scripting of Plugins by JavaScript</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.3</td> <td>Disallow JavaScripts Ability to Hide the Address Bar</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.4</td> <td>Disallow JavaScripts Ability to Hide the Status Bar</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.5</td> <td>Disable Closing of Windows via Scripts</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.6</td> <td>Block Pop-up Windows</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.7</td> <td>Disable Displaying JavaScript in History URLs</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.1</td> <td>Disallow Credential Storage</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.2</td> <td>Do Not Accept Third Party Cookies</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.3</td> <td>Tracking Protection</td> <td>Missing lockprefs: lockPref("privacy.donottrackheader.value", 1).</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>6.4</td> <td>Set Delay for Enabling Security Sensitive Dialog Boxes</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>6.5</td> <td>Disable Geolocation Serivces</td> <td>Missing lockprefs: lockPref("geo.enabled", False).</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>7.1</td> <td>Secure Application Plug-ins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.2</td> <td>Disabling Auto-Install of Add-ons</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.3</td> <td>Enable Extension Block List</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.4</td> <td>Set Extension Block List Interval</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.5</td> <td>Enable Warning for External Protocol Handler</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.6</td> <td>Disable Popups Initiated by Plugins</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.7</td> <td>Enable Extension Auto Update</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.8</td> <td>Enable Extension Update</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>7.9</td> <td>Set Extension Update Interval Time Checks</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.1</td> <td>Enable Virus Scanning for Downloads</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.2</td> <td>Disable JAR from Opening Unsafe File Types</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.3</td> <td>Block Reported Web Forgeries</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>8.4</td> <td>Block Reported Attack Sites</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section><section><h1 id="DISA-Recommendations"><span class="passed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsPreference-Settings"><span class="passed">Preference Settings</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTBF030</td> <td>Firewall traversal from remote host must be disabled.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF050</td> <td>FireFox is configured to ask which certificate to present to a web site when a certificate is required.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF085</td> <td>Firefox automatically checks for updated version of installed Search plugins.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF090</td> <td>Firefox automatically updates installed add-ons and plugins.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF105</td> <td>Network shell protocol is enabled in FireFox.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF140</td> <td>Firefox formfill assistance option is disabled.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF150</td> <td>Firefox is configured to autofill passwords.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF181</td> <td>FireFox is configured to allow JavaScript to move or resize windows.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF183</td> <td> Firefox is configured to allow JavaScript to disable or replace context menus.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTBF190</td> <td>Background submission of information to Mozilla must be disabled.</td> <td>Compliant.</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016.dark.html b/Samples/Outdated/Office2016.dark.html
new file mode 100644
index 0000000..d248dc2
--- /dev/null
+++ b/Samples/Outdated/Office2016.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Excel 2016 Audit Report [04/03/2019 04:30:25]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px; }  .header { 	background-color: #9e9e9e; 	padding: 35px 20px; 	color: #ffffff; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  table { 	border-collapse: collapse;     font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left;     vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #a7a7a7; }  table.audit-info th { 	background-color: #cacaca; 	color: white; 	text-transform: uppercase; 	border-bottom: 1px solid #a7a7a7; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap;     width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center;     width: 70px; }  .passed, .green, .failed, .red, .green, .red, .orange { 	color: #fff; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Microsoft Excel 2016 Audit Report</h1><p>Generated by the <i>Excel2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Excel 2016 Security Technical Implementation Guide V1R2 2017-10-27.</p></div><p>This report was generated at 04/03/2019 04:30:25 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.4</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.125</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO105</td> <td>Open/Save actions for Excel 4 macrosheets and add-in files must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO106</td> <td>Open/Save actions for Excel 4 workbooks must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO107</td> <td>Open/Save actions for Excel 4 worksheets must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO108</td> <td>Actions for Excel 95 workbooks must be configured to edit in Protected View.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO109</td> <td>Actions for Excel 95-97 workbooks and templates must be configured to edit in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO110</td> <td>Blocking as default file block opening behavior must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO111</td> <td>Enabling IE Bind to Object functionality must be present.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO112</td> <td>Open/Save actions for Dif and Sylk files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO113</td> <td>Open/Save actions for Excel 2 macrosheets and add-in files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO114</td> <td>Open/Save actions for Excel 2 worksheets must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO115</td> <td>Open/Save actions for Excel 3 macrosheets and add-in files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO116</td> <td>Open/Save actions for Excel 3 worksheets must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO117</td> <td>Saved from URL mark to assure Internet zone processing must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO119</td> <td>Configuration for file validation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO120</td> <td>Open/Save actions for web pages and Excel 2003 XML spreadsheets must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO121</td> <td>Files from the Internet zone must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO122</td> <td>Open/Save actions for dBase III / IV files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO127</td> <td>Add-ins to Office applications must be signed by a Trusted Publisher.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO131</td> <td>Trust Bar Notifications for unsigned application add-ins must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO133</td> <td>All automatic loading from trusted locations must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO134</td> <td>Disallowance of trusted locations on the network must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO139</td> <td>The Save commands default file format must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO142</td> <td>The scanning of encrypted macros in open XML documents must be enforced.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO145</td> <td>Macro storage must be in personal macro workbooks.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO146</td> <td>Trust access for VBA must be disallowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO288</td> <td>Files in unsafe locations must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292_b</td> <td>Document behavior if file validation fails must be set.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO293</td> <td>Excel attachments opened from Outlook must be in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO304</td> <td>Warning Bar settings for VBA macros must be configured.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO418</td> <td>WEBSERVICE functions must be disabled.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO419</td> <td>Corrupt workbook options must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO600</td> <td>Macros must be blocked from running in Office files from the Internet.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO605</td> <td>Files on local Intranet UNC must be opened in Protected View.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016Excel.dark.html b/Samples/Outdated/Office2016Excel.dark.html
new file mode 100644
index 0000000..e575088
--- /dev/null
+++ b/Samples/Outdated/Office2016Excel.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Excel 2016 Audit Report [04/03/2019 04:31:02]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px;  	color: #dddddd; 	background-color: #14141d; }  a { 	color: #ffc17a; }  a:visited { 	color: #ff7aad; }  .header { 	background-color: #2a2a3d;  	padding: 35px 20px; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #2a2a3d; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #2d2d3f; }  table.audit-info th { 	background-color: #212130; 	text-transform: uppercase; 	border-bottom: 1px solid #2d2d3f; }  table.audit-info tr:nth-child(even) { 	background-color: #2a2a3d; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap; 	width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	background-color: #212130; 	border-radius: 8px; 	font-weight: bold; 	color: #dddddd; }  a.totop:hover { 	background-color: #43435f; 	color: #ff9924; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QNvaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjMtYzAxMSA2Ni4xNDU2NjEsIDIwMTIvMDIvMDYtMTQ6NTY6MjcgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9InhtcC5kaWQ6QTcyNUZDMjEzNUVERTYxMUI1OUFCMjU2NDI2OUE3NUMiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6Q0I2NjA2RUZFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6Q0I2NjA2RUVFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQECAgICAgICAgICAgMDAwMDAwMDAwMBAQEBAQEBAgEBAgICAQICAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA//AABEIAGQB9AMBEQACEQEDEQH/xADgAAEAAAcBAQEBAAAAAAAAAAAABAUGBwgJCgMCCwEBAQABBAMBAAAAAAAAAAAAAAABAgMEBwYICQUQAAAGAgEBBAQGCQ4FDg8AAAECAwQFBgAHCBEhEhMJMRQVCkFRYXGBIpEyQlLEhRZGF6GxwdFy0iMkNFSUpGUm8GJDZBjhgpKiU2OjNUh4iLjIOfGywjNzg8OEtNQlRXe3GREAAgEDAQUDBQ8DAgQHAAAAAAECEQMEBSExEhMGQVIHUWGRoQhxgcEiYoKiwiNDY4MUJETRMkKxFTPDhcVykrJTFkYJ/9oADAMBAAIRAxEAPwDv4wBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBLnpQO4iiiPTo+Or0+Pw2D3oH0GMA/RgExwCUzR1PURaoGEjmRVTjkDl695MXPUF1yiHoM1aFUVD9xgEzSSIikmikUCJJEIkmQPQQiZQKQofIUodMA+8AYAwD4UTTVIKaqZFUzdO8RQpTkN0EDB1KYBKPQwAPz5KlKLrFtMhpNUe4hvZ0f/MWf9FQ/eZc517vy9LKeXDur0EKzjY8G5Ceos/4IyqP8mQ9CKp0g+4+ImRz73fl6WOXb7q9BFezo/wDmLP8AoqH7zJ517vy9LHLh3V6CDbR0cZZ6p6iz7XBUgH1ZD7VJBIBD/wA38ChjZHOvd+XpY5cO6vQRCsXHqJqJ+oMvrkOT+SofdFEPvPlyede78vSxy4d1eg+W7BgdBE4sWfUySZh/iqPpEgCP3Hx4597vy9LHLh3V6D29nR/8xZ/0VD95jnXu/L0scuHdXoIVlHR4tkzixZ9Ve+v/ACVD/LqGWD7j4APjn3u/L0scu33V6EfR46PBwgb1Bn0MVZP+SoekQIoH3H+9Dkc6935eljlw7q9BEezo/wDmLP8AoqH7zJ517vy9LHLh3V6CFWjo8y7QnqDIQA6q4/xVH0JpCmH3H364D9GRzr3fl6WOXb7q9B9uY2PFBX+IM+oJmMH8VR+2IHfL9x8YZPPvd+XpY5cO6vQewR8eIAPqLPtDr/JUP3mOfe78vSxy4d1egh3cew9XUKDFl1U7qIfxZD0rGKkH+T/x8h3r3fl6WOXDur0EQEbHAAADBkAB2AHqqHoD/WZPOvd+XpY5cO6vQf32dH/zFn/RUP3mOde78vSxy4d1egezo/8AmLP+iofvMc6935eljlw7q9A9nR/8xZ/0VD95jnXu/L0scuHdXoJP7PYe3+nqDLp7H6/yRv16+u9PT4fXpmTzr36OvHKvM8r7pa5cOf8A2r+zyLylSZgmQMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAJY4DvykaX4E0JBfp8pfVEAH7DkcAmeASfr61MiHQBSim32wgI/x5+HoAfQB27JPt+HuuMAnGAMAYAwBgDAIZv0AzkgB07rk30iomksIh8nVTAInAIVmIGQ74B2KquFfnBRdQwD/ALEQwCKwCHbdfBAB6dSHVT7P97VOQP1C4B/XRxTbLnD0lRUEv7ruD3Q+k3TAPRMnhpkJ94QpPi+1KAfsYB5r9ngG+8XT/wCEAyP/ALXAPfAIUv1nig/Ai3TKH7pY5zHD5+6kXAIkwd4BKPoEBD7IdMA8m49UEhH0+GQB+cCgA/qhgHyv0Mo2THr2qip2fEkmc3UfkA4l+nAIjAGAMAYBJvzg/E34bmT/AA/zfqlr7/5nwk5zGLowBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAlvQTS4D8CMaIfS5dB/wDKYBHqqkRSUWVMBEkiHVUOPoIRMomOYfkKUOuAS6HSUKzBwuUSOX6ikg4IPXvJnc9DJIG6/C1bAml/rMAmmAMAYAwBgDAIUn1Xbgv36TdX6eqqZv1CFwD1XVBFBZYfQkkoqPzJkEw/rYB8tUxSbN0x9KaCRB+cpCgP2RDAPfAIZv2Hck+9cCYPmUSSU/8AGMOAfD0f4NJPoA+M5bp9B+EoKlVU/wCCTNgEZgHg6ARQP09Je6oH/qzlU/8AJwD3wCFbdpnKn37k4B+5RKRD7HfSHAIrAPBv9oYo+kiyxfo8Uxi/7QwYB8/bO/g6JN/p7y6n7AIfq4BE4AwBgDAJN+cH4m/Dcyf4f5v1S19/8z4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAS9Ae9Ivx/3NBij9IetLdPsLhgHlKgK5W0eHofuCkX9PYyQ/jDvvdPuViJgiP/pcAmuAMAYAwBgDAGAQp+hXiI/7oguT5xIdE5Q+gBNgHxI9rQ6Yelc6Db5wcLpom/2pxwCNwBgEMT6rtcPv0UD/ADiUyxDfYDu4B5r9TvGRPgIDlyIfKmmVuX/4vAI3APFx3fAW75gKTwVO+YfQUvcN3jD8gBgFioLlHxwsDRy6it66ocoxzRy8klT3uutCsGrBA7h86e+uv2wtGzRFE51FFO6QhSiIiAAOAXnhHLZ7ERr9k7bv2cgybyDV80XSdNHjd+mV4k6aukDqIOWzgiwHTUIYxDlEBARAeuAUfe9ta51meKb3a2xkNJzyiqNer5fWZS1WRVDui4SrVSh0JCzWJRsU4GVKyaLikUe8boHbgGG20+Ym8qBLSkpS+Ee39uavSQZuWVsr9oodTtD1YzRIZBsTXewJmuWJRwi4KYqSaQHUVIAG7pTG7gCaFfceOYcTuSkJ3y/ak2pxtRnLLKw9ZjN0wKsQvLxMQolHpzUjJsUXMDU1XUqm5bgwknSLsp0O+AGIqmIiDMxNQipCKpHIomoQqiaiZgORQhwAxDkOURKYhij1AQ7BDAPvAGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBb+F2DQJOxWSvx15p0hYouVFlKwLC0Qbyai3LVmzRVayUU2fKvmDpJbqBk1UyHKI9BDMaObhzuysQu2nfi6OKlFyT8jSdU/Mz7d7pnqTGwLeq5OnZ1vS70eK3enj3Y2rke9C44KE4/Ki2vOVaiUy0m7cHAwEaJpsG4G6gAmUKm7drFAQDqVTvJE6/GkOZJ8QmeAMAYAwBgDAGAYvb85Z6c0AwB5Z5h1aJuPk2zaRouuUEbxsWPZu2jwykw5oUE5c2s8S1BMviqItFjlMcn1egiIB/qY1a482rg5t7ZFY1LW9ny8bfpZ/Je0IK0Ua31klPJDQElPC42LJy8S0i9eR8iVgKDBxMqs0X78SNUBUXOUggbKY6Sjpdi2k4l+ylI16kVdnIRzpB6xdoG+1WbO2x1UF0jdOwxDCA4BjVs7lrrKgXlxqKARmtsbrZwZbPLat1wSMfSlLq6pFDIW7almmZOFo2paksKfVN5YJNgd2UDeppOjFEmCK7adphBzH3zuCg0qtbft/LDSvBSrot3RGiU1X5zfbG3DJFaLsTSLVCJos0dRsVMfDVj2zhoJFhEDLfUOIn3TGfgj5kOzdrbKucHeeYXCTfyYx8DBapolONcNHWO7OVH8q6kLXHv9kVFtNDPyHjtowa+dmugJ2ZVmztQVVAKKVJS/taZnRyk8yuocaqjW2D3UezZbkHsq+wGp9TaQkog8Q1tl9tD1vFxjt7tNgnPa9j6FHvnRBkJFF45eNSCUh2QLnBIBLdPdZStzt40ldV3yx3FJbKnSQ5XkxTdVycpQ9URc84UMspTanSoWRbTE7BQ5fqKy9wlZp48U6eEzaFEUyRWgp5TQVt48lyf3811fXuJvlh1qjT0r49Lt1/hdg68uj6QRcAdOInL9WbZXTvp2TSKBDoHSO0kEzHR8FQTeGZVEScq7EqG2u/8yK1wgtFM0pyYvEVwuvFwpbp5qe4V2YsG3+HFySiWxGLqDSgLgg3sOp5StulURJGitFM3CIpAjKHKJkAkqSLM6M5J6w1fSZ1ovsyN5C8wHzyOuW9uQBLJGWdrtqGsirixaxcU2RiV1mjHQ41tZp7OqjQGDKKWbnbPWJXPrBl4bCSRro5lSUdy2tkbbtxRYXeSrThE8SzWm56DjTMGyniGgDN4KQZINYx2mIkMKKZVCCbvAbvBkVIlFSVGf3cfmH6X4icaoiU4Pa621x/5GVyxwqc1rCzSE9uDjxtCtOXBULdFXNCcsazdyUjIwrR79FrDzTJQpSIrimY5TSmU8cY7HsLoeWz7w062hyb1Bx/3RpyG1HV90vZmoKydXtEjLUau7KfLoOteuq1BTbUJOpRNlH1mMl2gO3DIz5Rm7bJtzmfA4kmNyM68PYdiICAgAgPUB7QEO0BAfQIDgqGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAIOQkGEQwfSsq+ZxkXGM3MhJSUg5RZMI9gyRO5ePnzxydJu0ZtG6RlFVVDFImQomMIAAjkNqKcpOkUV27dy7cjatRcrsmkklVtvYkktrbexJbzma5Ne8QVOVnrnQvL7qlY21F0WRWgbpyu2WeXLoWKn25erqv6rp9dcx113tPoEUKbxkHkHCEAxFCvXKSiYn131T4iad0+laspXcuSrFN0VN1X28PkfbTYmtp3O8AvYy618Y7k9R1Gc8DpvHnw3rkYcc1JJSduO1Rd1Jrigm1DiSnOE2oPS/tzzeuXkjCPbZe+W27Fn7cqjpvrzS8dr7WjrulMcCoN2lNb19VmQCCBwRd2WZXAvQpljqdQzVs/EPqrV8pWcfIjj2ZOnEocMF85xlJ+7wry7jvxZ9jX2f/DnQJ6nrek39Z1G1Di5E8vm5Fx9tLVq9Yx4Pt4ObNrcm3sNIFj35pPft0uN7kKfy9qW2L/Kv7BJborkhO2exvbK8Hx3VlscbFW1UZZ27dkMo7P6q4XWETGETKD3sZmLq1q68rPytOyZ1rKNzhi5V3/HcItN+XiT7SOnNd8PNQwIaF0noHWmiYqtqFm7g/qL8bKgmov9PDIuxlCC32+VcTS4aPZTp38rzzcp/iDx+1TpyVrrblHxtrQzEaw2TRJewk360l5iwyNlth5KK2JaZeOvk+2mZV4f8nF16rKtUhBuyTeCkm3HmOjeJMsK+tM1/G5EY0pKO1Ri/wC1tbnGm6cXw027EdbfEv2IbPVOlT668INd/wB2v3XNzs5CUJXb0a82EJ0jO3fU68ePkQjdUqxrKSodd3HzkVpflTqyv7o0HfobYuu7GLlBpMxJl0HMdKx6ngS9bskLIItJqrWuBd9UX8XIt2z9ksHcVSIPTNv42TYzLMcjGkp2ZKqaPN/W9D1bpzU7uj63YuY2o2ZOM4TTTTTae/zprzNNPamlevL58kYAwBgEmsVigqjX5u1WiWYQFbrUTITs/OSrlJnGQ8NEtFX0lJyDtYxUmzNizQOoocwgBSFERwDQPqTnBL+Zffdu3Bjbrpo7y8dNy5ahVy1d9IUnaPMe8Ji7GaGSu8W5a2yh6fgmiSQLx0KqwkpEXpCOnxSlWZlFKrLb2ETsHl3X9Pa7l9dceK5W9ZzC6bwjG7VSo1loSCXVXOq1cw9TfR8nBPHjEvcKLyUCRfujlFZdY6phEKeIr3bDDPhGpys3juF5aL75nFAYblgAmYFjW9qccNPSllslElVmjz2PATMlC14z6vyizFud8xjJBJdI6ACBSABVBmtdhbXFWjfqK3d+aVxjoW2Nv8d9j7Z/0EOW2vLQ8okntTVcAvaOLuzZCSI2j4bYB6a8JP10jcE5dJ5JMZ1shMQ5SqmaTixURRXkrovcLZ8OeTesOM+gNo6ojNu1naO3LXvTYli39vScn69YXW49hLywMW03DXQjhw1uVIJFxyHspz4yvYZT6qBjGSLDb7CFFRVEW43Fs+a2eeRJZpVafZSiSibltIq+0WbtsuAgZI6LgVUFkTkN8ICUQ9GQSS+A55JaN0Hd9GbG4m6g3dQ5eqS9fjpaHha3Qbadg4aqox6djWaQC0ZZ1YZZQp0XX8UfomKVTxFDgBglMobcOzYaRa55vnmBa/11L6k2FdGe4aWwiHrCmE2y1Wl79rmYZHRVo11qW1IxxGXYLbrZdv1iXL109L4KqzdcqrdUUgko/URclHymW1R80xDazGtrbJXj49/YPZ0cBvX3YWJ27OmZvKTi8R6gESaPaSiIkcCg5KcvfKqRHwzAUIaqXqmQ88aMsjNVq6BJy2ckAxTB3Dh1EO8mskYeod4OvUB+HKdu4NJ7GazuYGobRcVoV1M2a2WdnXmK6FYaTdkmpyNhmihyC5aQ7KUfPEYluqZMgnSRAhAEA7OgBlSflMeauR/tbMMeP1Q25DWvaNk14yMlE62palktbOQPJNIOUeqSLSHr0YJo13HuFZtZ/LCuiVFYioIILKCIFKOSVWXJ29u11NzHF2x7Y2hrRJ5aYhw8nYV4WJkHp1mwKOhFqk6RFcx1gFZwimp3Tn7RMAAJhEwiI0tF5Vpt3lzNkaFsV9r7hktAJg9AUxRUVdMyAYOvdMVQRUEBKBDCIfCHoxtKZRUl5zFbUnl6Wmo8g9X7en5OHbVzWtui70nXmS7heRlpyuO05WBaqLpIkbM40kq2SUciBzKGSIJCAAm7xaqlu3acJN9jP0NNKyUpM6f1bLTQnGXkte099ImUDodR26gGCy6pwHtA6pziYflHBeLm4AwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/MR1r70/wCe5yU2NJ0njXo7WG2bW7Tm7LG6v05xd2Nt23RVVZuyGWVLE1WyzVjfRUCk9QRWfKId0BMQyhgMcOoG2ny7/NZ95M3Vza436r5TcCNia/473fYzGF2/dp/gfvnU8TV6Uoxfryk062FbAa16tCyBAp01XJ+6qqBUSlOdQpDAXD94/wDPw5v+V5zJ0/x04tx+mUKpaOMtb3VY5jYlHkrhOP7Datp7aopY1sZKywrOPiomN1kkqmBUjKqrPVe+YSlTAAMMds+cR71nxe1u93/vLgzq+P05WmKE1ZLJJ6HkZ+qxMI5KiKcxaVtZ7rUnoCBKDgniPVlWjdLvB31C4B0g+Rr511I84rTuw5VzrwunN+aPkq9HbZ10zmz2OtOYu3py56jeKTMumrCRWgp09ffIrs3SPrMY7bCmZVwmdFwqBvPwDQp54vmRchPL9j+NDbQLeiFe7febdXssldK85sZ2zXXaOtU41jFtU5SObIFfq31ZRdQ4KH6tkwIJQE/e4F1x1LqHT0cZYCt8V53KuSb/ALOCiW1b+Pb7h249lXwP6P8AGS9rk+r55is6bHDVuNi5G3V5LyeKU24Tb4VjpRSovjNvcjVgh5rPntsNaxW9leM8VO6ffV9pcW1xR47W6TqTypP48ZJtY3UhW7Mm8aV00eILmeiqggmToJ1CgPbxddV9eRxVn/pYyw3FSUuVJxcWq8XxZVpTbXYjfUvZ+9kq7rt3pJdQX7PUlu9KzKzLULELsb0ZcErSV2xwu5xfFUPjSb2JM28eU95yEB5g8jOaj2NSY3WHIGs189pIwrzx47o1/rrRy3Zy0lViyqzqYhJKEcPURcxrpd2YW6pVkXKoFXIhy7pPrK11FKWJkQVrUIR4qJ1jNbm412pptVi67HVN7addfaF9mjO8GrVnqHR8qef0dkXuVxXIqN/HuNOUIXuFKE4zjGXDdgorii4yhCsHPeFnNzquMAYAwBgDAICRlIyIbg7lpFhFtRUKiDmReN2TcVTgYxEgWcqJJiocCCIF69RAB+LAItFZJwkkugqmugumRZFZE5VElklCgdNVJQgmIomoQwCUwCICA9QwD0wBgDALM775EaO4t63kdv8AIjaNP09rCIkImKk7xepVKFrzGRnXqcdDs3D9YBIRxIvlSpJF+6OIBgF32zlu8bN3jRZNw1dIJOWzhEwHSXbrplVRWSOXqU6aqZgMUQ7BAcA98AYAwBgDAGAMAYBxL+9OeZNcWtno/leaZtD2rsL3CxNz5T2KGcGbyb6qzKxnNT1ORyn3VW0dJRzI0tMEAf44gsxQMPgGdJK8E6r1qViNzFs7VagpT88pbYQfmSpJrtqvPXth7Pvhhb1e9ha/qa4ZahlStY8nvt2bb4cjIjXZxylxWbcv8HC46VcXHm0YW2Pq9OiKTUW6ELXIZt4LOOZACaYqn7XD1yYv13Ug9U6nWWUEyihh7R9AZ11uYl3LzJ5ua3cyJurcvUl5EtyS2I9oMLqLT+nemMbpXpi3DE0TFtqMLdtUq98pza2zuTbcpzk3KTbdS1cvKLPDnMoqYwmHr9uYfnEe3PsWLKtrca61TUbuXNynJtvzk0oXIzZei28hHw7KGudPeHcOi1izJmMVgut1O4WgpciSzqKVEwiYUhKq3OP1gIUwiOXMrQ9O1d8V2trKok5xSdexcUXSvupp+WpjaD4rdZ+GqlbwEs/QVOU44925O3wNvimrV2HE4Ve1wlCdt1bioSbbwaleQe5YLZWx71Spx9rwNjv3DucrsO4Te19x3k0kmzhxHvWyke5mGZ25V0X/AICbpFyHiJmIOc9xNG0t6VjadkxWRHHglGctkt9XRp1UXWnDVqmxnT/qPxP6/h4ga31nod2Wjy1nIlcu49lq5YbcVCMnCcXbleikpq+oRuK58aLW43u+Rz5yF90Hz4E+z1oGvaY5EsqnV92wsEm+j60+uMc6Z16K3UaNcO3rSOuzZtIp+0FW4JJvGLcyIl8QyZi5mmTfSLx5Y9y7c0uV/l3YzdeC3crwyjRbrU9td7hKddypxzrexb9o9avj6ziYOH19Z0p5eDex4OCyczDUVes3eJy+NqON8RRTUI5NjHcacdxT/T6AQEAEBAQEAEBAeoCA9oCAh2CAhm4DzgP7gDAGAaRfPwsmxTcG7BqjV5Xylg2y/MzlWcacSP5ioVYWczPQDXoJTKKS6qjYpkwEPGTIZLtA4gIpmm4tLec6HHbkXEaf46VGmyzk1LhqdBpISLCSQcRyzWQXOKj7x2KiRHR5B5IKm6l7gqKKG9Ajli9et49t3bslG1Ha2+wz9L07P1jMtaZplqd7Ouy4YQjvk6V7aLcm95cdhtiA2LDsbPXplvMQ0uiZdk/bHMKaxQOZNUpinAqiSySpTEOQ4AchiiAgA5VbnG7BSg6xe4t5eJkYOTPEy4uGRbdJJ02P3VVNeRptMtzdqtFXFmok4SSM57ggkqYO3r6SlE5R75DlN2kOUe8Q3aA5WYso1NMe79BLQ07NyrVk4WdGcuTvTrKrvF1lQMbvqKLLqKqqnMAdoiYRypbjDuKa3N0RR+udUblqGl5jdsSmEPGo7CbRdCiJyMReeLMtY9d1KWtrDS7deONBnapBHKKLJCm4WOHcA3hGEoy414U/MbX+Fye3LhRpaHsajJ65rjtmKS53iSaSBZUHax49oCJDJEatzoiZNMvQqRDd0oAXoAQypVpt3mY0hp+yTTBxHyTaMOi5SOmYDOxMACYglA5RKiIlMUR+DIDVdjMJrz5bDi/eIWQuDCuFWOALLxketJuypiYBOCRVzMm/iCX0CYRAB+Acnb7xZ5XxlLtTLYb64y1WC2brKhUSkqPkKfrerQqTpDxSIxhSKOWylgsD9Pw0lJSYO0O5cKqj3lTdQTL0ApQmvaXqV2m0anR+sAiYqO9moCtHxzFioqsZYFFzs2qTcy5iit2GWFPvfTkbAVw5qGs5AqXjwMO6BHr4frTUjgCd/p3ugLGUL290MbBRMoXaVMgnmsLJWK0xYxX5UKR0AU8UxbNwQ9dfIKvnoIoJETOqziWi6vUwCHUgdfTgULXa1g3OqoxvXq2DkI5JU6y3rC4ruHbpXugs8cq90nfWVAoAPQAKUpQKAAAYBknDW167AhHCJwMPTr1Ds69P1cAzW4tcdp/kHeWDAzJy2pMQ5bvLpP8AhnI1ax5DgqaIbOO6KZ5iXIApopgImIUwqmACEHrO8k6U2jRswaNWLJBNszZN0WjRsiUCJN2zZMqKCCRQ7CppJEApQ+AAwQRGAMAk35wfib8NzJ/h/m/VLX3/AMz4Sc5jF0YAwD8gX3bfmvxk4DeY8TfXLTZf6J9ThoXaNLG1/kbsC9f3lsb2orQ0b7C1rVLlZP44nGLj43qfq6fc+ucomL1A/R74wefZ5TXMrd9K44ccOWbbYO59iGnCUymuNK8iqN7dVrldlrXMIN7DsXUVSqrdy2r8G6cFTXfJKL+CJEgOoJSCBxEe+p/96ZoP/mA6s/6xPKnANv3Nj3szy77XwV3JpPQ9J3fsvcG0NC27SkJE3XXENWteRD+769k6Y7sdzfyFvXdSdbh/XzKHYs2y7iQECoD4Kah3CQE39zQ4Qyeo9D8geZdg2NrixL8jxodIqWv6FdqxdZug1nX7izy8g+2karzEujU7ha5Cyt/V6+8BtKRbRiKjtMqjsEW4HbDgHIr71J/yEv8ApP8A/Z4zUPir/A/P/wCSejn/AOf3/wBt/wCl/wDcTctwr5L8ddNeWhxYs22dyaxqEDVOL+qS2Qs9b6+m7QURo8UirD+xTPTyT+ZdrB6ujHpIqOnK5gSTTMcwFHmui6lp+F0ziXcu9ahbhi261ku4tlK1b7Et7exI6veJ/RXWHU3jl1Dp3T2m52Vm5Gv5vLVuzcdU8i4+PiUeGMEvjSuNqMYpycklU5cvIsqr7Z/mzttl6xhJCsaxo7PfOwpSGbN/V2ELRLfAWemU6pyXqC/s1H1SYu0YKLfvLEE7ATJlEEvEJq3oS1LK6t/VYkXDEgrs2uxQkpRjF02b5Ki2/wBuzdU79e1hqFvp/wBnVdP9QXbeT1DlS0/GjcbrKeRYnavX78OJcb4oWLilKkXS7ST+NwyyH5mebnzZ4u+ZzyEqVT2HKXXWdLnbLTqXpSUioNapjK2DVRYykrrIsYIthfkrV9mWUwZBB2i6kRaGamXIRc459HWur9b0rqjIsWbjniwbjG00uGsrdI7lxOk2pUTq6UrtOE+F/s4+FvX3gNo+q6lhwxNeyrcL1/OjcuK6rdrMcr6XFc5UXcxrc7KlKEoW+NXOBuCNjnlV6x83Sjci7TuPn5dNluNG3vSVqsryL2Btmuz0HU7unYag/g0A1iwn3KOspFOuKSix0I6NYtG6BDoufDVIREOSdKYvV9jUp5nUE7jwrliTpK4moz4o0+In8R8PFsikux7aI0p7QGv+zjqvRWP034P4uHDqnD1W1bU7GJdtzvY7tXlcf6qUE8qPNVlKV65O421K3WDlI143XzEfMh82DlXaOP8A5ftykdJ6hjEp9zEysJJq0OSSoEU8Shw2hs3ZLWMd3mvOJpw+Q9WjYUE1WhniKBEXLhI7o3Hb3UXUnVmqz07p6bsYaTo0+F8C2cc50c41qqKNGqpUbVTc+meC/gl7PPh/jdZeMuNHVeprkralbnFX4/qJJz/S42M5xx7qtpS47t9uM+CUuKEZxtlAb32B51vk82bXtw27yUe7w1/dZpwg3dWLYFx33rSflGDVu7f0madbVh4W+1N65jUxWR9QGOMqVNY7ZcwkcdMbOyOtujrlu9mZPPxpy7ZyuwbS2xbuJTjs2qlNzo959npPRvZc9pXEzdM6b0NaRreLZTpbx7OBkQhKTSvwjiXLmNeSk+GXMVynFFTiqwOv3iNyRqnLvjhqbkVTG6rCH2XWSyTiHXVKuvX7FGPnkBbq2suUCg5NX7TFPGYLd0oLkRBQCgBwDNwaTqVnV9Os6jY2W7sa08jWyUfekmvPQ83/ABE6J1Hw6611HovVWpZeBfcONKiuW5RVyzdS7FctThOnZxUe1GJ3nEeYcz8sHgTtzlO3ho6z36PPC0LTtVlzKFiJ/a94cqR9ZLMkRdMnTmBrzVF3NSKCCyThywjFkkjkUOU5fonCzTxxl93crvMmg1TlL52+298cwOV21oFrcX+t5La9ooepOPcfa2qEqjrmiVvX7mtuYmRjWyjdOWTYuWkKV42BJsyAEjuXQGyPhZ5MGvfLq5DROxeHfJPkXRuNr+t22D2Fwovt5lNp6Qk5OZIZ7XLhr89hfpTOv7LAWA6jl0uqMuvIpuFE/FblMoCoGRPIjzYeCXE3edv4+cjN1M9S3mi8dU+Udje2mEm0Km31W4u5ddx/s+wtmTlCdukxbVCNGEAwI5lnyhylboKHMUogWL44+e95dvJDdczx5aX3YWjttx1RsOwoircotU2/j8e5a/qkRIWKfuVVkL+zj41aKjqvEu5UyL1Vk/NFs3TorcUGjs6AFF1n3iDywbNuig6fDZmy63GbasytO1HvW76S2TTeOm0rInJEhQZ0fbFhg2EXKxq0uoRuSVMklDCZQhvWwTOQ5gMafe0/+5b3L/8AlzQH/wCyonALyXr3iTyydBkCrzV92zsGsaxUrFB21uzTOjth7Q0Dq66KRlfSUrFo27XIpaqyE01VmmyayEKrLKJOFPVzB6yAogBsi5AbT1/ufy99+7e1Fc4O+652BxH3HbqNd6rIJyELYIGV1NZ3cdKRj1AQHunIb6xTARVFUpiKFIoUxQA1V+6pmMPkgcVAEwiBLVyNKUBERApR5GbRN3SgPoDvGEegfCI4Bjp5r6qhfeGvIFKVQ5Sh/pE9AA5gAPGhBTV6AA9A8VMAKb74odB7MA6scAYAwBgDAPy7POoosxd/NL5bWaWfu2FogNuOI2NVcEMsg4rDaq1ltXGiyZhKoRAkGmgZA5B+qUw9ggPZ196h1W5i6/qGNfjxWZ3t25qkY8LXvU2M9iPB3oHC13wh6P1nSrvI1DF0x0klxQm53rsrsZpUaauudJJ1TbTT7NdiUJa2xAIqm2c90OneRddAMAfD3VipCHX6c428nEk6qqr5v6G7IaT1HYjwXI27iXbGfwSSZ9DGTo9ho9QPj6HQEPi9IK+jJV/HW6S9ZP8At+sP+6xL0x/qeSlelHaZkV48xk1A6GA6iIdOvZ1D+E7DB8GSsq1F1Utvvlu5ouoZVt2r1h8D8rj/AFLOzOjJmYFXu+pMyiY3dUXXE4gHUehu4gmqb0Z9qxr9ix3n5qf1NV6t4Q6nqjklyrSbdHKVaeTZFM8YvTyOtadcnyj/ANp2qYZM2jKQQQUQGMbtpePkxbRKQnMsLp24Zk8VYRAfDJ3ClKAmE0ZeuPU8i1CMeDDt8TabrxNwkqyfkSexeV18lLnT3hVZ6E0bPzJ31k9R5nJtwuRi1yoRyLV1wsxbb45yhHjm/wDBcKik5N/sW8dXM694+6KeWgVhszvTesXNiFx3vHGdXpMGrLiv3vreMMgdTvde3vdc3/pznLT7Ern/ABHZhX3eFV9Z5BdZQxrXV+q28On6SOpZKhTdwK9NRp5uGlC8mZhxsYAwDXB5lut31t1HWLkxbqOg13ZlHEummQTijA2RsnGu3xgDt8JpJN2ffH0FTOYw9AKI4Ko0rtOe/benaDtOnTFQu8AWViZVNEFlGpyMpVsq2VI4avGEmUgrNnLdYgGKId4o9oGAQEQyxk2rd+27N1NwfkdPWfW0jUcvSM+Go4EoxyrdaVSkmmqNNPemn7vkLe691DqrWlXiaNXKmRCFhSLEbqvnSjx+uq5XO5cuXrsRSFw4XWWMIiBSlD0AAAHTIx7du1bVq2nReXa/fZRquZk6pmzz8xx59yleFKMUkqJKK2JJL+pctGq0MoAYIhiQfT0MBz/L6BUEMv0ofNcaEtc1nXLVRV2MFBAuYwqHWNGs1FRN17TCoqmY3X5euKdhQ0jHPeNbabkjYHW0Z48dBrTq8rOS7FBJRVnEQkQ7KYjZNQAbgZzIyLVuTr2fXMIAPdHCJSqz+0GCY6dgUa1UWyqTQi5nDt08W9YkJN4YpUzO3y3dIAn7hAKUpSlTTKHQoB29ZezcVv4qoi6Lbar1IoFXKbr07enb9gR+fIKKk7r9guWw7FD06lw0hOWCwPkY+KjY5uo6eu3Dg4FKRBukUTmEvXqJh6EIUBMYQKAjggvNuHhJvnVD6alLlrqedjLHYru7DBNlLLBerx8egyjWftSHK7SQ9TQIYxgWBI3jKqCAdBDJ2FWymwxE/JSabvBTSjHpVhMJQImgv4om69ADwu53xER+TrgpMtNH8NOSe55JkjXqHYY6CXVIDi1Wpq6rVaaI94PEXF/JJJLPwTL2+GzScKm+AvbkUJN4tU8rzSTLWTKp2+Sn5e7Ac717eYZ6aLM2eLoETUYxcQ6K+jjRCIkDp6wmo4VHqYTkAQIWRWm4shK+T7CqPRViN0Ok2gm6lTk6Sgs6IXr6BXZ2BqkqYPj8MnzYFV5C7uuPKv1BVnjd9dbdZb0KBiKezG7dtVopY5RARI59UXkJVRI3ToIJukRH48A2RVSoViiwbKtU+CjK5Ax5O40i4lqm1apiIAB1TFIHeWcK90BOqcTKKD2mMI9uCCo8AYAwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/H393I4O8bPMG8xYnH7lXR32wdVjonZ93Gvx1uttJcflJW3tTRh3vtqlTUDNeG2TlVwFHx/CU731ij0DoB+jJxX9308qfhfvqg8mOPfHmcqO49Yrzzmk2WS3Tuq3NIhzZavN02WcGr1qv0vXpBRWvWJ2iT1lssCJ1AVIBVSJnKBxW++p/96ZoP/mA6s/6xPKnAO2qd8jryi9raSSq1p4EcZ620s1FjiyduoGt63rK8RCrmDROrOQ98pjSDsMNJNFTiuCxXHhicv8KU5O8UQOFz3W+83fSfnnSOg9G3ST2BoHYcPyR17sKcjX/SrW7W2q4K5WrVW130U0cOIZ0+Vt1aiW8c7J31GqFjcpIKgi6XKqB+pfgHIr71J/yEv+k//wBnjNQ+Kv8AA/P/AOSejn/5/f8A23/pf/cSmuI/u6mn9/cf9C74tvJDZUWntrV9K2HLVOuU6rtjxa1rgWUwtFR0/JvZUp0mZ3YkKqqxMJwL1EoZRpHhzg5+n4+feybq51qM3FRjs4knRN13V8hkeIvtp9VdI9Y6x0lpui6fP/btQyMaF27dvPiVm7K2pyhHg2yUatKap5TpO4c8FOOHBShvKLoCnqxRptRo5uF0sL0s5fbw9YJKJM3NmsAtmhFEmZVlBQZtEGkc2OsqZFumZVQTbJ0fQtN0LHePp8OHi/uk3WUmu2T/ANEqJbaJVOkXiV4r9beLGrx1frHK5rtJqzZtrgsWIydXG1bq6VouKcnO5NKPHOXCqcht/aNXvvITNu9bN3bceYuuVRQdIpuERVbQtXct1BSVKcgqIOEiKEHp1KcoGDoIAOajvpS8S0pJNfq4f+mJ6MaPcuWvYelO1KUZ/wDx7JVU2nR37qaquxptPyptPYdkPMuPsUtxA5WRVQFQLZJ8bd5x9XFEBFYLE81haG0IKQFTWMKgSSiXd6EOPX4B9Gbj1iN2ekZULH/GeNdUf/E4Sp6zzV8Nr2BjeIugZGqpPTLetYMrye7lRybTudq/wT7V7qOVr3XKfq7XcfK+sPHbNO5TWttczNeZqKJFfOq7XbNYWdsWaEMcFVG7WQskOC3dKIAKifUQ7OuqvCy5aWXl2pNc6VuDS7aJyUvQ5Rr7qPQH2+sPPudPdOZ9qM3plrMyoXJJPhVy5bsyspvcnKNq9w1e1RlTtNjfvLNhqzDgbSK9MHaqWSw8iaW4qDM5EVXhF4Sn39Wbl25TmBVBuyiXxmqqxAESmfppj2K5yPxLuWY6BC3OnMlkR4fdUZVfoqq+enaaT9h3D1G94v5GZi8SwrOjX+e6tJxndsKEH2Nu4ozUX/7bl/iX+8gSDnIbyxNMKzSblFGctO2pyBRdesFMSDcbHsTNBRJFwQgItnj5i4cJ+H1TUIqCoCPfHPodAQnDpexx1XFK417nHL/Xf6zh/tfZWLlePOrLFcZO1ZxITao/jxxbTabW9xTUXXanFxe41x+98wVhT8vjjhthrWlbfRtEc8tLbH2jCFVbA2/JI1N2jV2rqQQfd9ouzfWSwMoftTWMVWXJ1TFIVRLzM6ym/wB3tT7XzI4xRBeL/K218c1toRtB2HQuRGp4Kq3WWUpciWPtDQYaPtJHEA9i7jAuSEMqPUxUVu8QeuAc8HHnYfPjiz7wXpvy89weYPuLl9pG8cN7dvWYbbMo+tKkJrCv+kVhFsyNqjCFXISEc0RFwksR0mdQVzkOUSdQMBH7w07rDcXvbuhUNo0mv3tprryyWG06dH2VglKRsNsGr7X2e0rVqTjnIHZOJWvDMrLsTqkU9VeAm4TAq6KShAKc95i0RqPbXMHyEW+xKNCWlvsDzCKXoi8N5FATJWzUewNoaMJaaNPlSMmMnCPieKUiaomFuDtz4Qk9YW74GTPvV+vqQPkf7sTTqsC2Q1de+OUprtqzimTNnTHgbcp9CKpW2jZFJvDlTp1pfxxCIFTKVo6OmAAQRDALYe8zST6Z931cy8o5UeyUq+4hSUi8WEBWdvn1gqjp25VEoFKKi7hUxjdAAOo4BvsovFfjrC8K4jidHaxo1e45vtFk1vJ68CGjhqQ06aqAR037WaviKISTh6i5VcvHjwyjhy5MdwsqdUxlBA5dfdvLxdLZ7uFzCgbSg/Rg9YzHOCj63UeJvCN3VLf6JrmyXy8UZ0UEFmBdibCnkjGbdUQdJrFEfFKqAAY1+Q15MH+mB5YeiN+//wBKPM047flfP7kZ/om448kP0eairv5L7ivFY9ZrlU/JqR9nuZz2T68/N4xvHfOFVOzv9AAm22/L8/0BPP58lCu/6XHMDln+kab3LNe2OXW2v0rzNN9g1iSY+zaW89kRPseMlfaHiu0u6fxVUUzdQ7uAd4WAMAYAwBgHGH7x9wUslb2pE87KLDLyNCv0XXaNu07FAyv5IXmBbpwlMt0mRIn8BBW+BTbRSjg31EJBgiVQwGeJhmlPEvQbtvKjr1iNceaUbtP8ZLZGT80lSNexpV3o9QvYd8WcDP0O54RavdUNXxbly/g8TpzrFxud6zCu+5ZucV1R3yt3JtKlqRy3qfUAeztD4vkzVND0AuR4F5yBM6KHXqH+HxZc5fnMKWRFPajyF+kHTt/X/ayrlPzlp5cDyO9KIfV6D8wfD2/r5WoMtXMmLXxUbAPKy4JWrn7zBotJNHOjai19IxV+3hYgIckfFUiMflXLXfWu6ZP29fnTYYxkiHVQCKLuO74bZQQ5V0zo09a1CGFBP9NFqd6XkgnWnuza4V773JmgvHXxLxPC7ovJ6kv3I/73et3LGn2v8p5U4uPNpv5eNGXNuS3VULdeK5E/TgRRSbpJIIJJooIJkRRRSIVNJJJMoETSTTIAFImmQoAAAAAAB0zsckkqLceKUpSnJzm25N1be9t9rPTBAwBgEBKRcdNxr+Hl2TeRipRm5j5Fg7SKs1esniJ0HTVwkcBKoiuioJTAPpAcA0e8m+Cl8ozmRsWpYx9dqMoKrkkQyAz21VxIe8oZmqyKAuZuPbl7EnCAHXAgdFSdQ8Q73S6p+XeamLIg9jXbls9YuGb1A5iLtHCajZ0ioUehiKoLFTVTOU3YICUBDISS3FdalsH8k/8AreEKyQdezvG6B8Xp69BySiS8he3SXE3kLyTlmzKk1SUSriq5E5C8T6TqHp0Y3EweKqeVXSAZNZMnaDdmVdc33vTtyC3Q6AKT5ZHHevahjNdzce/l7UmBnkzsxg4NFWN7LuEy+ODUg+tskoJucoA3ZrJrFIUO8IioY5xkJ0MTbz5NxpB0qpTNzNSNDnMZNtZ6oqDlIgj2EO9iJXw1zFD7oG6fX4gwVcSaJZU/JYSB0mped2lFkU4CqzqdTMDpYgGARISRmpVRJuYwdfrC1U6fFgp2G0fj/wARdFcamhw1pUU0590h6vJXSdVCZt0il92ieWXTIDFof7pBom3QN0DqQRDrggyYwCBCMjQW9YCPYg4697xwaN/G73p6+L4ff6/TgEdgDAGAMAYAwBgDAJN+cH4m/Dcyf4f5v1S19/8AM+EnOYxdGAMA4x/In9295d+Vrz1nOT27N0ccL3rhrqzYutqxG6tl9mvrtMHtsrBqxkxPRFt1pU4KuFRj4MDroN5SVEiywpkUUKTxTgdnGAcfXvDPu83LXzYuWuouSXG3bvHSoRdQ46Qej7TVt4Tmy6s/Sf1bZezb7Gz8BJULWWzm8wzmG+zlW66DhKPOzPHlMUzkHIg3A1+q+7h+8ZbLj/0a7x84hhLaYn2asJcYBXmjzp2pHuK+ZkqgWO/Rrb9d1Oq2RmqIERM0dP2qAImMPU3dBMwHRB5MfkHcdPKFjrLeI22SO9uTt/gE6xb92z8C2rLODqh3LCSfUfWlRQkJk1YrklLxrdw+Xcvnz+RVaoidVJFMjcgG+fANG/nSeWJu3zHGXHNTSl11ZVJHTTra5J1rtKTtsOylWWxktci0cRL+p0+6L+tRi9DMVRFZsmRQjoDAqApiU/Butel83qSOM8KdqErLuV43JJqfBucYy3cG6nbv2Ha32YPHjpbwTva1HqjF1DIx9TjicEsWNmcoSxnk1U43r1hUmsiqkptpwpwviqto/FDUExx+4y6D0dYZSMnJ7UupaJr6ZmIUHRYiSk6rXWEQ9exgPkW7z1Fw4amMl4qaagkEO8Uo9QDlOlYc9P0zHwbjUp2bMINrc3GKTar2bDQPiB1Hj9Ydc6v1ViW52sXUdSyMmEJ0c4RvXZXIxlw1XElKjo2q7mZA59A4gc4Fh8nLkVL+bi055tth6WJptPdtb2otXl5i8l2aWPhIKNaLRSUGnQlKqo8XkY/uFOM2QgIn8QfrB4Q65udHajPq9a+rln9FzlOlZceyKVKcPDvXe3eg7q4ftJ9GY/s4S8IJ4epvqd6bcxlcULH6Ws70pqbuc9XUlGW7kN8SpufEuj05CKEOmoQp0zlMQ5DlAxDkMAlMQ5TAJTFMUeggPYIZsY6VptOq2NHJ1yD8g3kdqbkG+5DeWnvKD1qLmclp+Gp0vYp3X1j16acVdKv6zULJX4WXiZ6lAk4FqkxkSte4xEG65nYAY5tUah0DqOJqL1Lpm/G03JtRbcHCu+MWk049nDJLZsdT0H6O9rvovqHoyHRXjppN7UIRtQtyv27cMiGRy0lG7et3bkJ27+zid21KTc6zirdaFNMfI78w/mDtSr3PzHOVMVKVGrgmyKzgbTKXq5+xDOElpOGqEYetQFBpXtoGpPHfk9YUFQCqKtVzEAMtLofqLWcuF7qXLjKzDsi3KVO1RXDGEa9r2vyp0M657VXg14a9PZGl+CHT121qWRWTldtxs2eOjUJ3Zc27kX+Cr4bbcIpNqM48TOrrXev6jqmh07WdAhWtcpNCrcNUqrBsgEG8ZBQLBCOjmpTHEyixyNm5e+qcTKKnETnMYxhEdrY+PZxbEMbHio2LcVGKXYkqJHn3rGr6jr+q5Ot6vdlf1TLvzvXbkt87lyTlKT91t7FsS2JJFGchtAan5UaR2Zx33nU2t31Nt2qSFOu1adKrtRexb4CKJOmEgzURfRE3Dv0EXse+bKJumL5ui4RORVIhgvHzTmz1L5afnw+WhFKaX8uLm3xY5JcSI5RcutdW8/K5fGV403HrO3jokDWbHqyAeHmogfWuqpRlI2NSVIUWcQ28RcTgXu4S+VL5ganmSQXmreZdyc4/XLeFV0rYtG1HS3GLXlgZa7hKhMe1/ZRV73bm9Um3Joc1nlF1EFoh85WdOyh7SFugRM4GWkx5eO5ZDzy6r5mqNp1kXRMFwTccZHdRVl7UG2lNgrbCsloLKN4MtOPTjU0IqYSAXJp0j31gpiep9wAVEDw80zy6dx85N+eVftPV9t1nWa/wb5uULkttVnfZO0sJmx0ip2ygWR5D6+b16pWVlJ2pynTlUkkZJxFtO8sUxnIAAhgFf+dXwY2x5j/lz7s4i6Rseu6psrY01qeSgZvasrZYSjtkqJtimXmXTl5Oo1O7z7ZRxDV5wRt4MY4A7oyZDimQxlSAWt82/wAtvc/PvytUeDepbhrCrbPIrx/A9n2LJ2uNoYI6sla+5sihXtaqFqsJlXTSMWFiQY4AWU7hVTIFMY5AMKNi8GfeEarp6Y4H6E5rcNtg8UZyryOrYLlZv+t7diudtD01MJvoNSsSbqmt5vWd3utYorgsazsYtm8nKuEyuVF4xc3jpAbR+NflrUbhx5ZMp5eWiZs0gCuk9uUgb9c/EaKWzZu2oKyhYLzZU4tCSWjI19aLEY5Grcjo0fGJJN0/GFEDHAkPkqcGNseXB5c+k+Iu7rHru17K1zNbYkp6b1VK2Wbo7lK97Yud5iE4iTt1TpE+5Ubw1hbkc+NGNwI6KoQgqEKVU4Fqebflubt5Keah5YfOKj23VkRqjhZ+lf8ASpXbXMW1lsKe/LeN9WhP0fxcRSputy3hOBH1r2jLRPhE+sn4w/VwDdbgDAGAMAYBTVyplT2JVLDRb3XYe3U22RL2CstZsDBvKQs3DyKJm72PkWDoiiDls4SOICUwdg9odBABy1fsWcmzLHyIxnYnFqUWqpp700Z+l6pqOiajY1fSL93G1TGuRuWrtuThO3OLrGUZKjTT7UciXOr3bO2tJWavvA61x0xAPFlnv6BdlTQxsxCiqYDmYUTYj4VI+WjUzGMCDWcFsuimAFM/XHpmntd8M7sbjyNAmpWnt5M3RrzQm9jXkU6Nd5npH4U+3Lp+TiWtG8X8edrPjFR/3HFt8cLlP8sjGjSUJv8Aynj8UZParMDnm2h5fvOTTrxyz2LxM31C+rKnTPIsdcWC1QKvcOKYqNbHT2k/AOkhMHYZNyYBDp8ecAydB1vDfDk4eRGnbwSkv/NFOL9J270XxZ8Lep7au6J1Do1/iVVF5Vq1cVfLavO3ci/M4IoCn8PeV+w5BOMpHGLkFZn6qgJEQi9O7AUKBzCAACrhWASati9R7TKKEKUO0RAMt2NN1a/LgsY2ROXmtz/pQztT646A0ey8jVtd0bHtJVrPNxl6Erjb95Nm4niH7uXzF3VLRczyMUjeMOtTGRcv0ZN3FW3bMozE3U7SHqMK+eQ0A5VKHdFaWepqNxEDeqLdO7nMdI8PtczpKeoUxMbtrSVx+5FNpe7J7O6zrd4ie2L4YdK49zG6PdzX9cVVHgU7OHF+Wd+cYzuJd2zBqW7mx3naFxK4e6F4Tanj9P6Ap6VaryKpZCdmXqpZG3XafFEiDiy3OwHSScTUw4IQCl+qm3bJACTdJFEpUw3JpGj4GiYiw8CHDDe29spPvSfa/UtySWw80PEPxI6t8UeoJdR9XZHOy6cNu3FcNmxbrVWrFurUILe9rlJ/GnKUm5PJ/PqHBBgDAGAMAYBQlq1fra8iJrnQKbalBAA8awVqHlnAAX7UCuHrNZcoB8hgwKtFIxHG/j/AuivojSur2Lwhu+m5SpFdFZM/p7ySikecyZg+AS9BDBNWXkRRRbJJoN0kkEESFTSRRTKkkkmUOhSJpkApCEKAdAAAAAwQeuAMA/giAekQD58A8zLok+2VTL85y/t5FewUZCHlY9P7Z0l8wG65JNGQKthjyde6umPT5f2OwcirJUWQB7SzDr0XTD5ymH4fkyNpPD2MhTXBqX/Lt/mEDB8XyZO0UifSd0jzD0MdIf3Jh/ZxWu4ii8pNEbLGqh2KdPm9GKkUIsJuPH/LBiooexJRkfp0WL9kP28VIoRZF0VPtFCm+YcVQPXJBJvzg/E34bmT/D/N+qWvv/mfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAOoB6R6YBDKu0EQ+uoHZ8uQ3QlRbJYtPskuv1gN0/xyh+3gq4GSV1c2yAD3SEHp6BE/X9YcecngXaU262MQneAPCJ0/wAYA/VEcpb7GOFIpxzsIp+v8OQB+LvgIfr+nJ8/YTu9wp15ezG691yn8Pp/1BxuI4qFIPro8OI+Gsj84mH9vKauuwp4mSI1slxH+VNwAR9PeEfsfZyKirP4NpkunTximEfhKHp+bqIZVxLc9pB4GtEmbsABN8v6mU8VV5wRLewzBjB0IPb06dgftfDjia2gqpjJTS3dASqfZ9AfZ6YqwVgxRl1u6Jin7fhEw/rfLirBWLCLkTCAmEwfD29RDt9OTXt7QVswjV0wATmN19I+kenyY29gKkSIJA6CPX/AO305WlQglf5wfib8NzK/h/m/VLX3/wAz4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAhVXIpgP1B7Pi7cpcqbypRqSF7MCkBugqB0+IvT5vRlHFLs3lSiih5GzKkE311x9PoAcVKtxSji0qmEwAVyb09olN9jr6MqUtte0mpT7uxKCA94hw/denJqQUk+mPE697vh8wj8foyHLZsIbKWcOElRHqCw9fT9cfmynftKXuIQEQMP8ABpn6/GJjG6en4/kyOIhnmaMdq/ad8OvoAAHp09OG2Qf0lXklxASgp0EfiH4fg9GR/qCdM6HJKGL1Kp07PjwCsWOuXRhL3ynH0dQ6dv2enTJ3bAVqw1l9qJ0R+n6MeYFYM9dNkunVEnwen4P8AyaekFTtac1Q6fwZA6dPgDrkpOoKgbw7ZDp0IXs+QP2umVcNXt3EEzIimn07pQDp8gYUUvdB65UBgEm/OD8TfhuZP8P836pa+/8AmfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwDyP4vQe73fR8vXKXX3iVTtJM/9e8JT1bwPWOzuesd/wAH7Yvf7/h/X69zr06fD0+DKY8PEubXg82/zbyt14fi0r6ikHPt/t7/ALF69vXr67l39n+J9Eo+3+R6ynXXtbqPe9h/J/K/i+XJX6Sv3n0SP3HyPWU069o/W6+yOnb6PW+nT4enTJf6L8WvzR9v8mvvlLO/H6j3/ZP0etfT0+XIf6P8X6I+3+T6ynF/SPX2V6f86/Ux+y/FpT5JH2/yPWeSfqveDv8Asz0/516Pkx+z/E+iPtu3gr75P2fqXUP+Kvp9Z6dfl+jH7Om3mfRH2/yPWVYy9U7P+Jvg9PrPT/Drkr9F2831ELn1/wAPWVYz8DoHd9i9f/e8n9l+LT5o+2rs4PWVI373QO57E/rf7Hw5K/R/i0+aR+4+RT3yeN/XeoeF7D+Tr65+x8GF+g7ebX5pH7j5HrJkX250Du+xOnwdPXP/AA5cX6Ls5v0SPt/kes+/7wf2N/Xcfs/xfoj7f5HrH94P7G/ruP2f4v0R9v8AI9Y/vB/Y39dx+z/F+iPt/kesf3g/sb+u4/Z/i/RH2/yPWP7wf2N/Xcfs/wAX6I+3+R6x/eD+xv67j9n+L9Efb/I9ZKf/AK/7e/8AsvX2R/n/AHunrn+x6dfpzJ/afpPvacz5PdLX2/P/AMP7PP5T/9k="><h1>Microsoft Excel 2016 Audit Report</h1><p>Generated by the <i>Excel2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Excel 2016 Security Technical Implementation Guide V1R2 2017-10-27.</p></div><p>This report was generated at 04/03/2019 04:31:02 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.4</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.121</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO105</td> <td>Open/Save actions for Excel 4 macrosheets and add-in files must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO106</td> <td>Open/Save actions for Excel 4 workbooks must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO107</td> <td>Open/Save actions for Excel 4 worksheets must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO108</td> <td>Actions for Excel 95 workbooks must be configured to edit in Protected View.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO109</td> <td>Actions for Excel 95-97 workbooks and templates must be configured to edit in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO110</td> <td>Blocking as default file block opening behavior must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO111</td> <td>Enabling IE Bind to Object functionality must be present.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO112</td> <td>Open/Save actions for Dif and Sylk files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO113</td> <td>Open/Save actions for Excel 2 macrosheets and add-in files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO114</td> <td>Open/Save actions for Excel 2 worksheets must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO115</td> <td>Open/Save actions for Excel 3 macrosheets and add-in files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO116</td> <td>Open/Save actions for Excel 3 worksheets must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO117</td> <td>Saved from URL mark to assure Internet zone processing must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO119</td> <td>Configuration for file validation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO120</td> <td>Open/Save actions for web pages and Excel 2003 XML spreadsheets must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO121</td> <td>Files from the Internet zone must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO122</td> <td>Open/Save actions for dBase III / IV files must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO127</td> <td>Add-ins to Office applications must be signed by a Trusted Publisher.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO131</td> <td>Trust Bar Notifications for unsigned application add-ins must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO133</td> <td>All automatic loading from trusted locations must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO134</td> <td>Disallowance of trusted locations on the network must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO139</td> <td>The Save commands default file format must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO142</td> <td>The scanning of encrypted macros in open XML documents must be enforced.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO145</td> <td>Macro storage must be in personal macro workbooks.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO146</td> <td>Trust access for VBA must be disallowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO288</td> <td>Files in unsafe locations must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292_b</td> <td>Document behavior if file validation fails must be set.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO293</td> <td>Excel attachments opened from Outlook must be in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO304</td> <td>Warning Bar settings for VBA macros must be configured.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO418</td> <td>WEBSERVICE functions must be disabled.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO419</td> <td>Corrupt workbook options must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO600</td> <td>Macros must be blocked from running in Office files from the Internet.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO605</td> <td>Files on local Intranet UNC must be opened in Protected View.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016Outlook.dark.html b/Samples/Outdated/Office2016Outlook.dark.html
new file mode 100644
index 0000000..a99dbeb
--- /dev/null
+++ b/Samples/Outdated/Office2016Outlook.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Outlook 2016 Audit Report [04/03/2019 04:37:16]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px;  	color: #dddddd; 	background-color: #14141d; }  a { 	color: #ffc17a; }  a:visited { 	color: #ff7aad; }  .header { 	background-color: #2a2a3d;  	padding: 35px 20px; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #2a2a3d; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #2d2d3f; }  table.audit-info th { 	background-color: #212130; 	text-transform: uppercase; 	border-bottom: 1px solid #2d2d3f; }  table.audit-info tr:nth-child(even) { 	background-color: #2a2a3d; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap; 	width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	background-color: #212130; 	border-radius: 8px; 	font-weight: bold; 	color: #dddddd; }  a.totop:hover { 	background-color: #43435f; 	color: #ff9924; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Microsoft Outlook 2016 Audit Report</h1><p>Generated by the <i>Outlook2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Outlook 2016 Security Technical Implementation Guide V1R2 2017-07-28.</p></div><p>This report was generated at 04/03/2019 04:37:16 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.123</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO111</td> <td>Enabling IE Bind to Object functionality must be present.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO117</td> <td>Saved from URL mark to assure Internet zone processing must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO216</td> <td>Publishing calendars to Office Online must be prevented.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO217</td> <td>Publishing to a Web Distributed and Authoring (DAV) server must be prevented.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO218</td> <td>Level of calendar details that a user can publish must be restricted.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO219</td> <td>Access restriction settings for published calendars must be configured.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO232</td> <td>Outlook Object Model scripts must be disallowed to run for shared folders.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO233</td> <td>Outlook Object Model scripts must be disallowed to run for public folders.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO234</td> <td>ActiveX One-Off forms must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO236</td> <td>The Add-In Trust Level must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO237</td> <td>The remember password for internet e-mail accounts must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO238</td> <td>Users customizing attachment security settings must be prevented.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO239</td> <td>Outlook Security Mode must be configured to use Group Policy settings.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO240</td> <td>The ability to display level 1 attachments must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO246</td> <td>Scripts in One-Off Outlook forms must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO247</td> <td>Custom Outlook Object Model (OOM) action execution prompts must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO249</td> <td>Object Model Prompt for programmatic email send behavior must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO250</td> <td>Object Model Prompt behavior for programmatic address books must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO251</td> <td>Object Model Prompt behavior for programmatic access of user address data must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO252</td> <td>Object Model Prompt behavior for Meeting and Task Responses must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO253</td> <td>Object Model Prompt behavior for the SaveAs method must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO254</td> <td>Object Model Prompt behavior for accessing User Property Formula must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO257</td> <td>S/Mime interoperability with external clients for message handling must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO260</td> <td>Message formats must be set to use SMime.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO262</td> <td>Run in FIPS compliant mode must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO264</td> <td>Send all signed messages as clear signed messages must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO266</td> <td>Automatic sending  s/Mime receipt requests must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO267</td> <td>Retrieving of CRL data must be set for online action.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO270</td> <td>External content and pictures in HTML email must be displayed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO271</td> <td>Automatic download content for email in Safe Senders list must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO272</td> <td>Permit download of content from safe zones must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO273</td> <td>IE Trusted Zones assumed trusted must be blocked.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO274</td> <td>Internet with Safe Zones for Picture Download must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO275</td> <td>Intranet with Safe Zones for automatic picture downloads must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO276</td> <td>Always warn on untrusted macros must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO277</td> <td>Hyperlinks in suspected phishing email messages must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO279</td> <td>RPC encryption between Outlook and Exchange server must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO280</td> <td>Outlook must be configured to force authentication when connecting to an Exchange server.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO283</td> <td>Disabling download full text of articles as HTML must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO284</td> <td>Automatic download of Internet Calendar appointment attachments must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO285</td> <td>Internet calendar integration in Outlook must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO286</td> <td>User Entries to Server List must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO313</td> <td>Automatically downloading enclosures on RSS must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO315</td> <td>Outlook must be configured not to prompt users to choose security settings if default settings fail.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO316</td> <td>Outlook minimum encryption key length settings must be set.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO317</td> <td>Replies or forwards to signed/encrypted messages must be signed/encrypted.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO320</td> <td>Check e-mail addresses against addresses of certificates being used must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016Outlook.html b/Samples/Outdated/Office2016Outlook.html
new file mode 100644
index 0000000..a3e5747
--- /dev/null
+++ b/Samples/Outdated/Office2016Outlook.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Outlook 2016 Audit Report [04/03/2019 04:36:38]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px; }  .header { 	background-color: #9e9e9e; 	padding: 35px 20px; 	color: #ffffff; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  table { 	border-collapse: collapse;     font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left;     vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #a7a7a7; }  table.audit-info th { 	background-color: #cacaca; 	color: white; 	text-transform: uppercase; 	border-bottom: 1px solid #a7a7a7; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap;     width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center;     width: 70px; }  .passed, .green, .failed, .red, .green, .red, .orange { 	color: #fff; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Microsoft Outlook 2016 Audit Report</h1><p>Generated by the <i>Outlook2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Outlook 2016 Security Technical Implementation Guide V1R2 2017-07-28.</p></div><p>This report was generated at 04/03/2019 04:36:38 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.128</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO111</td> <td>Enabling IE Bind to Object functionality must be present.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO117</td> <td>Saved from URL mark to assure Internet zone processing must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO216</td> <td>Publishing calendars to Office Online must be prevented.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO217</td> <td>Publishing to a Web Distributed and Authoring (DAV) server must be prevented.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO218</td> <td>Level of calendar details that a user can publish must be restricted.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO219</td> <td>Access restriction settings for published calendars must be configured.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO232</td> <td>Outlook Object Model scripts must be disallowed to run for shared folders.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO233</td> <td>Outlook Object Model scripts must be disallowed to run for public folders.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO234</td> <td>ActiveX One-Off forms must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO236</td> <td>The Add-In Trust Level must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO237</td> <td>The remember password for internet e-mail accounts must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO238</td> <td>Users customizing attachment security settings must be prevented.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO239</td> <td>Outlook Security Mode must be configured to use Group Policy settings.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO240</td> <td>The ability to display level 1 attachments must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO246</td> <td>Scripts in One-Off Outlook forms must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO247</td> <td>Custom Outlook Object Model (OOM) action execution prompts must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO249</td> <td>Object Model Prompt for programmatic email send behavior must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO250</td> <td>Object Model Prompt behavior for programmatic address books must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO251</td> <td>Object Model Prompt behavior for programmatic access of user address data must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO252</td> <td>Object Model Prompt behavior for Meeting and Task Responses must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO253</td> <td>Object Model Prompt behavior for the SaveAs method must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO254</td> <td>Object Model Prompt behavior for accessing User Property Formula must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO257</td> <td>S/Mime interoperability with external clients for message handling must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO260</td> <td>Message formats must be set to use SMime.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO262</td> <td>Run in FIPS compliant mode must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO264</td> <td>Send all signed messages as clear signed messages must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO266</td> <td>Automatic sending  s/Mime receipt requests must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO267</td> <td>Retrieving of CRL data must be set for online action.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO270</td> <td>External content and pictures in HTML email must be displayed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO271</td> <td>Automatic download content for email in Safe Senders list must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO272</td> <td>Permit download of content from safe zones must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO273</td> <td>IE Trusted Zones assumed trusted must be blocked.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO274</td> <td>Internet with Safe Zones for Picture Download must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO275</td> <td>Intranet with Safe Zones for automatic picture downloads must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO276</td> <td>Always warn on untrusted macros must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO277</td> <td>Hyperlinks in suspected phishing email messages must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO279</td> <td>RPC encryption between Outlook and Exchange server must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO280</td> <td>Outlook must be configured to force authentication when connecting to an Exchange server.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO283</td> <td>Disabling download full text of articles as HTML must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO284</td> <td>Automatic download of Internet Calendar appointment attachments must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO285</td> <td>Internet calendar integration in Outlook must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO286</td> <td>User Entries to Server List must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO313</td> <td>Automatically downloading enclosures on RSS must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO315</td> <td>Outlook must be configured not to prompt users to choose security settings if default settings fail.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO316</td> <td>Outlook minimum encryption key length settings must be set.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO317</td> <td>Replies or forwards to signed/encrypted messages must be signed/encrypted.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO320</td> <td>Check e-mail addresses against addresses of certificates being used must be disallowed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016PowerPoint.dark.html b/Samples/Outdated/Office2016PowerPoint.dark.html
new file mode 100644
index 0000000..21b1fbf
--- /dev/null
+++ b/Samples/Outdated/Office2016PowerPoint.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft PowerPoint 2016 Audit Report [04/03/2019 04:44:07]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px;  	color: #dddddd; 	background-color: #14141d; }  a { 	color: #ffc17a; }  a:visited { 	color: #ff7aad; }  .header { 	background-color: #2a2a3d;  	padding: 35px 20px; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #2a2a3d; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #2d2d3f; }  table.audit-info th { 	background-color: #212130; 	text-transform: uppercase; 	border-bottom: 1px solid #2d2d3f; }  table.audit-info tr:nth-child(even) { 	background-color: #2a2a3d; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap; 	width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	background-color: #212130; 	border-radius: 8px; 	font-weight: bold; 	color: #dddddd; }  a.totop:hover { 	background-color: #43435f; 	color: #ff9924; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Microsoft PowerPoint 2016 Audit Report</h1><p>Generated by the <i>Excel2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Powerpoint 2016 Security Technical Implementation Guide V1R1 2016-11-14.</p></div><p>This report was generated at 04/03/2019 04:44:07 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.143</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced in PowerPoint.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO110</td> <td>Blocking as default file block opening behavior must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO111</td> <td>The Internet Explorer Bind to Object functionality must be enabled in PowerPoint.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO117</td> <td>The Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO119</td> <td>Configuration for file validation must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO121</td> <td>Files from the Internet zone must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked in PowerPoint.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced in PowerPoint.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO127</td> <td>Add-ins to Office applications must be signed by a Trusted Publisher.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO131</td> <td>Trust Bar Notifications for unsigned application add-ins must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO133</td> <td>All automatic loading from trusted locations must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO134</td> <td>Disallowance of trusted locations on the network must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO139</td> <td>The Save commands default file format must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO142</td> <td>The scanning of encrypted macros in open XML documents must be enforced.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO146</td> <td>Trust access for VBA must be disallowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO288</td> <td>Files in unsafe locations must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO289</td> <td>The ability to run programs from a PowerPoint presentation must be disallowed.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO293</td> <td>Attachments opened from Outlook must be in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO304</td> <td>Warning Bar settings for VBA macros must be configured.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO501</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced in PowerPoint Viewer. </td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO502</td> <td>The Internet Explorer Bind to Object functionality must be enabled in PowerPoint Viewer.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO503</td> <td>The Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint Viewer.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO504</td> <td>Navigation to URLs embedded in Office products must be blocked in PowerPoint Viewer.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO505</td> <td>Scripted Window Security must be enforced in PowerPoint Viewer.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO506</td> <td>Add-on Management functionality must be allowed in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO507</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO508</td> <td>File Downloads must be configured for proper restrictions in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO509</td> <td>Protection from zone elevation must be enforced in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO510</td> <td>ActiveX Installs must be configured for proper restriction in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO600</td> <td>Macros must be blocked from running in Office files from the Internet.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO605</td> <td>Files on local Intranet UNC must be opened in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016PowerPoint.html b/Samples/Outdated/Office2016PowerPoint.html
new file mode 100644
index 0000000..328f605
--- /dev/null
+++ b/Samples/Outdated/Office2016PowerPoint.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft PowerPoint 2016 Audit Report [04/03/2019 04:43:35]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px; }  .header { 	background-color: #9e9e9e; 	padding: 35px 20px; 	color: #ffffff; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  table { 	border-collapse: collapse;     font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left;     vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #a7a7a7; }  table.audit-info th { 	background-color: #cacaca; 	color: white; 	text-transform: uppercase; 	border-bottom: 1px solid #a7a7a7; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap;     width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center;     width: 70px; }  .passed, .green, .failed, .red, .green, .red, .orange { 	color: #fff; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Microsoft PowerPoint 2016 Audit Report</h1><p>Generated by the <i>Excel2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Powerpoint 2016 Security Technical Implementation Guide V1R1 2016-11-14.</p></div><p>This report was generated at 04/03/2019 04:43:35 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.125</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced in PowerPoint.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO110</td> <td>Blocking as default file block opening behavior must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO111</td> <td>The Internet Explorer Bind to Object functionality must be enabled in PowerPoint.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO117</td> <td>The Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO119</td> <td>Configuration for file validation must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO121</td> <td>Files from the Internet zone must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked in PowerPoint.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced in PowerPoint.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO127</td> <td>Add-ins to Office applications must be signed by a Trusted Publisher.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO131</td> <td>Trust Bar Notifications for unsigned application add-ins must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO133</td> <td>All automatic loading from trusted locations must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO134</td> <td>Disallowance of trusted locations on the network must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO139</td> <td>The Save commands default file format must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO142</td> <td>The scanning of encrypted macros in open XML documents must be enforced.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO146</td> <td>Trust access for VBA must be disallowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction in PowerPoint.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO288</td> <td>Files in unsafe locations must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO289</td> <td>The ability to run programs from a PowerPoint presentation must be disallowed.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO293</td> <td>Attachments opened from Outlook must be in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO304</td> <td>Warning Bar settings for VBA macros must be configured.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO501</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced in PowerPoint Viewer. </td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO502</td> <td>The Internet Explorer Bind to Object functionality must be enabled in PowerPoint Viewer.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO503</td> <td>The Saved from URL mark must be selected to enforce Internet zone processing in PowerPoint Viewer.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO504</td> <td>Navigation to URLs embedded in Office products must be blocked in PowerPoint Viewer.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO505</td> <td>Scripted Window Security must be enforced in PowerPoint Viewer.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO506</td> <td>Add-on Management functionality must be allowed in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO507</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO508</td> <td>File Downloads must be configured for proper restrictions in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO509</td> <td>Protection from zone elevation must be enforced in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO510</td> <td>ActiveX Installs must be configured for proper restriction in PowerPoint Viewer.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO600</td> <td>Macros must be blocked from running in Office files from the Internet.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO605</td> <td>Files on local Intranet UNC must be opened in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016SkypeForBusiness.dark.html b/Samples/Outdated/Office2016SkypeForBusiness.dark.html
new file mode 100644
index 0000000..90939e3
--- /dev/null
+++ b/Samples/Outdated/Office2016SkypeForBusiness.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Skype for Business 2016 Audit Report [04/03/2019 04:50:15]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px;  	color: #dddddd; 	background-color: #14141d; }  a { 	color: #ffc17a; }  a:visited { 	color: #ff7aad; }  .header { 	background-color: #2a2a3d;  	padding: 35px 20px; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #2a2a3d; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #2d2d3f; }  table.audit-info th { 	background-color: #212130; 	text-transform: uppercase; 	border-bottom: 1px solid #2d2d3f; }  table.audit-info tr:nth-child(even) { 	background-color: #2a2a3d; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap; 	width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	background-color: #212130; 	border-radius: 8px; 	font-weight: bold; 	color: #dddddd; }  a.totop:hover { 	background-color: #43435f; 	color: #ff9924; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Microsoft Skype for Business 2016 Audit Report</h1><p>Generated by the <i>Excel2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Skype for Business 2016 Security Technical Implementation Guide V1R1 2016-11-14.</p></div><p>This report was generated at 04/03/2019 04:50:15 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.153</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="passed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="passed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO420</td> <td>The ability to store user passwords in Skype must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO421</td> <td>Session Initiation Protocol (SIP) security mode must be configured.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO422</td> <td>In the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016SkypeForBusiness.html b/Samples/Outdated/Office2016SkypeForBusiness.html
new file mode 100644
index 0000000..1392c42
--- /dev/null
+++ b/Samples/Outdated/Office2016SkypeForBusiness.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Skype for Business 2016 Audit Report [04/03/2019 04:49:54]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px; }  .header { 	background-color: #9e9e9e; 	padding: 35px 20px; 	color: #ffffff; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  table { 	border-collapse: collapse;     font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left;     vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #a7a7a7; }  table.audit-info th { 	background-color: #cacaca; 	color: white; 	text-transform: uppercase; 	border-bottom: 1px solid #a7a7a7; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap;     width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center;     width: 70px; }  .passed, .green, .failed, .red, .green, .red, .orange { 	color: #fff; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QNvaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjMtYzAxMSA2Ni4xNDU2NjEsIDIwMTIvMDIvMDYtMTQ6NTY6MjcgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9InhtcC5kaWQ6QTcyNUZDMjEzNUVERTYxMUI1OUFCMjU2NDI2OUE3NUMiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6Q0I2NjA2RUZFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6Q0I2NjA2RUVFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQECAgICAgICAgICAgMDAwMDAwMDAwMBAQEBAQEBAgEBAgICAQICAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA//AABEIAGQB9AMBEQACEQEDEQH/xADgAAEAAAcBAQEBAAAAAAAAAAAABAUGBwgJCgMCCwEBAQABBAMBAAAAAAAAAAAAAAABAgMEBwYICQUQAAAGAgEBBAQGCQ4FDg8AAAECAwQFBgAHCBEhEhMJMRQVCkFRYXGBIpEyQlLEhRZGF6GxwdFy0iMkNFSUpGUm8GJDZBjhgpKiU2OjNUh4iLjIOfGywjNzg8OEtNQlRXe3GREAAgEDAQUDBQ8DAgQHAAAAAAECEQMEBSExEhMGQVIHUWGRoQhxgcEiYoKiwiNDY4MUJETRMkKxFTPDhcVykrJTFkYJ/9oADAMBAAIRAxEAPwDv4wBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBLnpQO4iiiPTo+Or0+Pw2D3oH0GMA/RgExwCUzR1PURaoGEjmRVTjkDl695MXPUF1yiHoM1aFUVD9xgEzSSIikmikUCJJEIkmQPQQiZQKQofIUodMA+8AYAwD4UTTVIKaqZFUzdO8RQpTkN0EDB1KYBKPQwAPz5KlKLrFtMhpNUe4hvZ0f/MWf9FQ/eZc517vy9LKeXDur0EKzjY8G5Ceos/4IyqP8mQ9CKp0g+4+ImRz73fl6WOXb7q9BFezo/wDmLP8AoqH7zJ517vy9LHLh3V6CDbR0cZZ6p6iz7XBUgH1ZD7VJBIBD/wA38ChjZHOvd+XpY5cO6vQRCsXHqJqJ+oMvrkOT+SofdFEPvPlyede78vSxy4d1eg+W7BgdBE4sWfUySZh/iqPpEgCP3Hx4597vy9LHLh3V6D29nR/8xZ/0VD95jnXu/L0scuHdXoIVlHR4tkzixZ9Ve+v/ACVD/LqGWD7j4APjn3u/L0scu33V6EfR46PBwgb1Bn0MVZP+SoekQIoH3H+9Dkc6935eljlw7q9BEezo/wDmLP8AoqH7zJ517vy9LHLh3V6CFWjo8y7QnqDIQA6q4/xVH0JpCmH3H364D9GRzr3fl6WOXb7q9B9uY2PFBX+IM+oJmMH8VR+2IHfL9x8YZPPvd+XpY5cO6vQewR8eIAPqLPtDr/JUP3mOfe78vSxy4d1egh3cew9XUKDFl1U7qIfxZD0rGKkH+T/x8h3r3fl6WOXDur0EQEbHAAADBkAB2AHqqHoD/WZPOvd+XpY5cO6vQf32dH/zFn/RUP3mOde78vSxy4d1egezo/8AmLP+iofvMc6935eljlw7q9A9nR/8xZ/0VD95jnXu/L0scuHdXoJP7PYe3+nqDLp7H6/yRv16+u9PT4fXpmTzr36OvHKvM8r7pa5cOf8A2r+zyLylSZgmQMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAJY4DvykaX4E0JBfp8pfVEAH7DkcAmeASfr61MiHQBSim32wgI/x5+HoAfQB27JPt+HuuMAnGAMAYAwBgDAIZv0AzkgB07rk30iomksIh8nVTAInAIVmIGQ74B2KquFfnBRdQwD/ALEQwCKwCHbdfBAB6dSHVT7P97VOQP1C4B/XRxTbLnD0lRUEv7ruD3Q+k3TAPRMnhpkJ94QpPi+1KAfsYB5r9ngG+8XT/wCEAyP/ALXAPfAIUv1nig/Ai3TKH7pY5zHD5+6kXAIkwd4BKPoEBD7IdMA8m49UEhH0+GQB+cCgA/qhgHyv0Mo2THr2qip2fEkmc3UfkA4l+nAIjAGAMAYBJvzg/E34bmT/AA/zfqlr7/5nwk5zGLowBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAlvQTS4D8CMaIfS5dB/wDKYBHqqkRSUWVMBEkiHVUOPoIRMomOYfkKUOuAS6HSUKzBwuUSOX6ikg4IPXvJnc9DJIG6/C1bAml/rMAmmAMAYAwBgDAIUn1Xbgv36TdX6eqqZv1CFwD1XVBFBZYfQkkoqPzJkEw/rYB8tUxSbN0x9KaCRB+cpCgP2RDAPfAIZv2Hck+9cCYPmUSSU/8AGMOAfD0f4NJPoA+M5bp9B+EoKlVU/wCCTNgEZgHg6ARQP09Je6oH/qzlU/8AJwD3wCFbdpnKn37k4B+5RKRD7HfSHAIrAPBv9oYo+kiyxfo8Uxi/7QwYB8/bO/g6JN/p7y6n7AIfq4BE4AwBgDAJN+cH4m/Dcyf4f5v1S19/8z4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAS9Ae9Ivx/3NBij9IetLdPsLhgHlKgK5W0eHofuCkX9PYyQ/jDvvdPuViJgiP/pcAmuAMAYAwBgDAGAQp+hXiI/7oguT5xIdE5Q+gBNgHxI9rQ6Yelc6Db5wcLpom/2pxwCNwBgEMT6rtcPv0UD/ADiUyxDfYDu4B5r9TvGRPgIDlyIfKmmVuX/4vAI3APFx3fAW75gKTwVO+YfQUvcN3jD8gBgFioLlHxwsDRy6it66ocoxzRy8klT3uutCsGrBA7h86e+uv2wtGzRFE51FFO6QhSiIiAAOAXnhHLZ7ERr9k7bv2cgybyDV80XSdNHjd+mV4k6aukDqIOWzgiwHTUIYxDlEBARAeuAUfe9ta51meKb3a2xkNJzyiqNer5fWZS1WRVDui4SrVSh0JCzWJRsU4GVKyaLikUe8boHbgGG20+Ym8qBLSkpS+Ee39uavSQZuWVsr9oodTtD1YzRIZBsTXewJmuWJRwi4KYqSaQHUVIAG7pTG7gCaFfceOYcTuSkJ3y/ak2pxtRnLLKw9ZjN0wKsQvLxMQolHpzUjJsUXMDU1XUqm5bgwknSLsp0O+AGIqmIiDMxNQipCKpHIomoQqiaiZgORQhwAxDkOURKYhij1AQ7BDAPvAGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBb+F2DQJOxWSvx15p0hYouVFlKwLC0Qbyai3LVmzRVayUU2fKvmDpJbqBk1UyHKI9BDMaObhzuysQu2nfi6OKlFyT8jSdU/Mz7d7pnqTGwLeq5OnZ1vS70eK3enj3Y2rke9C44KE4/Ki2vOVaiUy0m7cHAwEaJpsG4G6gAmUKm7drFAQDqVTvJE6/GkOZJ8QmeAMAYAwBgDAGAYvb85Z6c0AwB5Z5h1aJuPk2zaRouuUEbxsWPZu2jwykw5oUE5c2s8S1BMviqItFjlMcn1egiIB/qY1a482rg5t7ZFY1LW9ny8bfpZ/Je0IK0Ua31klPJDQElPC42LJy8S0i9eR8iVgKDBxMqs0X78SNUBUXOUggbKY6Sjpdi2k4l+ylI16kVdnIRzpB6xdoG+1WbO2x1UF0jdOwxDCA4BjVs7lrrKgXlxqKARmtsbrZwZbPLat1wSMfSlLq6pFDIW7almmZOFo2paksKfVN5YJNgd2UDeppOjFEmCK7adphBzH3zuCg0qtbft/LDSvBSrot3RGiU1X5zfbG3DJFaLsTSLVCJos0dRsVMfDVj2zhoJFhEDLfUOIn3TGfgj5kOzdrbKucHeeYXCTfyYx8DBapolONcNHWO7OVH8q6kLXHv9kVFtNDPyHjtowa+dmugJ2ZVmztQVVAKKVJS/taZnRyk8yuocaqjW2D3UezZbkHsq+wGp9TaQkog8Q1tl9tD1vFxjt7tNgnPa9j6FHvnRBkJFF45eNSCUh2QLnBIBLdPdZStzt40ldV3yx3FJbKnSQ5XkxTdVycpQ9URc84UMspTanSoWRbTE7BQ5fqKy9wlZp48U6eEzaFEUyRWgp5TQVt48lyf3811fXuJvlh1qjT0r49Lt1/hdg68uj6QRcAdOInL9WbZXTvp2TSKBDoHSO0kEzHR8FQTeGZVEScq7EqG2u/8yK1wgtFM0pyYvEVwuvFwpbp5qe4V2YsG3+HFySiWxGLqDSgLgg3sOp5StulURJGitFM3CIpAjKHKJkAkqSLM6M5J6w1fSZ1ovsyN5C8wHzyOuW9uQBLJGWdrtqGsirixaxcU2RiV1mjHQ41tZp7OqjQGDKKWbnbPWJXPrBl4bCSRro5lSUdy2tkbbtxRYXeSrThE8SzWm56DjTMGyniGgDN4KQZINYx2mIkMKKZVCCbvAbvBkVIlFSVGf3cfmH6X4icaoiU4Pa621x/5GVyxwqc1rCzSE9uDjxtCtOXBULdFXNCcsazdyUjIwrR79FrDzTJQpSIrimY5TSmU8cY7HsLoeWz7w062hyb1Bx/3RpyG1HV90vZmoKydXtEjLUau7KfLoOteuq1BTbUJOpRNlH1mMl2gO3DIz5Rm7bJtzmfA4kmNyM68PYdiICAgAgPUB7QEO0BAfQIDgqGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAIOQkGEQwfSsq+ZxkXGM3MhJSUg5RZMI9gyRO5ePnzxydJu0ZtG6RlFVVDFImQomMIAAjkNqKcpOkUV27dy7cjatRcrsmkklVtvYkktrbexJbzma5Ne8QVOVnrnQvL7qlY21F0WRWgbpyu2WeXLoWKn25erqv6rp9dcx113tPoEUKbxkHkHCEAxFCvXKSiYn131T4iad0+laspXcuSrFN0VN1X28PkfbTYmtp3O8AvYy618Y7k9R1Gc8DpvHnw3rkYcc1JJSduO1Rd1Jrigm1DiSnOE2oPS/tzzeuXkjCPbZe+W27Fn7cqjpvrzS8dr7WjrulMcCoN2lNb19VmQCCBwRd2WZXAvQpljqdQzVs/EPqrV8pWcfIjj2ZOnEocMF85xlJ+7wry7jvxZ9jX2f/DnQJ6nrek39Z1G1Di5E8vm5Fx9tLVq9Yx4Pt4ObNrcm3sNIFj35pPft0uN7kKfy9qW2L/Kv7BJborkhO2exvbK8Hx3VlscbFW1UZZ27dkMo7P6q4XWETGETKD3sZmLq1q68rPytOyZ1rKNzhi5V3/HcItN+XiT7SOnNd8PNQwIaF0noHWmiYqtqFm7g/qL8bKgmov9PDIuxlCC32+VcTS4aPZTp38rzzcp/iDx+1TpyVrrblHxtrQzEaw2TRJewk360l5iwyNlth5KK2JaZeOvk+2mZV4f8nF16rKtUhBuyTeCkm3HmOjeJMsK+tM1/G5EY0pKO1Ri/wC1tbnGm6cXw027EdbfEv2IbPVOlT668INd/wB2v3XNzs5CUJXb0a82EJ0jO3fU68ePkQjdUqxrKSodd3HzkVpflTqyv7o0HfobYuu7GLlBpMxJl0HMdKx6ngS9bskLIItJqrWuBd9UX8XIt2z9ksHcVSIPTNv42TYzLMcjGkp2ZKqaPN/W9D1bpzU7uj63YuY2o2ZOM4TTTTTae/zprzNNPamlevL58kYAwBgEmsVigqjX5u1WiWYQFbrUTITs/OSrlJnGQ8NEtFX0lJyDtYxUmzNizQOoocwgBSFERwDQPqTnBL+Zffdu3Bjbrpo7y8dNy5ahVy1d9IUnaPMe8Ji7GaGSu8W5a2yh6fgmiSQLx0KqwkpEXpCOnxSlWZlFKrLb2ETsHl3X9Pa7l9dceK5W9ZzC6bwjG7VSo1loSCXVXOq1cw9TfR8nBPHjEvcKLyUCRfujlFZdY6phEKeIr3bDDPhGpys3juF5aL75nFAYblgAmYFjW9qccNPSllslElVmjz2PATMlC14z6vyizFud8xjJBJdI6ACBSABVBmtdhbXFWjfqK3d+aVxjoW2Nv8d9j7Z/0EOW2vLQ8okntTVcAvaOLuzZCSI2j4bYB6a8JP10jcE5dJ5JMZ1shMQ5SqmaTixURRXkrovcLZ8OeTesOM+gNo6ojNu1naO3LXvTYli39vScn69YXW49hLywMW03DXQjhw1uVIJFxyHspz4yvYZT6qBjGSLDb7CFFRVEW43Fs+a2eeRJZpVafZSiSibltIq+0WbtsuAgZI6LgVUFkTkN8ICUQ9GQSS+A55JaN0Hd9GbG4m6g3dQ5eqS9fjpaHha3Qbadg4aqox6djWaQC0ZZ1YZZQp0XX8UfomKVTxFDgBglMobcOzYaRa55vnmBa/11L6k2FdGe4aWwiHrCmE2y1Wl79rmYZHRVo11qW1IxxGXYLbrZdv1iXL109L4KqzdcqrdUUgko/URclHymW1R80xDazGtrbJXj49/YPZ0cBvX3YWJ27OmZvKTi8R6gESaPaSiIkcCg5KcvfKqRHwzAUIaqXqmQ88aMsjNVq6BJy2ckAxTB3Dh1EO8mskYeod4OvUB+HKdu4NJ7GazuYGobRcVoV1M2a2WdnXmK6FYaTdkmpyNhmihyC5aQ7KUfPEYluqZMgnSRAhAEA7OgBlSflMeauR/tbMMeP1Q25DWvaNk14yMlE62palktbOQPJNIOUeqSLSHr0YJo13HuFZtZ/LCuiVFYioIILKCIFKOSVWXJ29u11NzHF2x7Y2hrRJ5aYhw8nYV4WJkHp1mwKOhFqk6RFcx1gFZwimp3Tn7RMAAJhEwiI0tF5Vpt3lzNkaFsV9r7hktAJg9AUxRUVdMyAYOvdMVQRUEBKBDCIfCHoxtKZRUl5zFbUnl6Wmo8g9X7en5OHbVzWtui70nXmS7heRlpyuO05WBaqLpIkbM40kq2SUciBzKGSIJCAAm7xaqlu3acJN9jP0NNKyUpM6f1bLTQnGXkte099ImUDodR26gGCy6pwHtA6pziYflHBeLm4AwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/MR1r70/wCe5yU2NJ0njXo7WG2bW7Tm7LG6v05xd2Nt23RVVZuyGWVLE1WyzVjfRUCk9QRWfKId0BMQyhgMcOoG2ny7/NZ95M3Vza436r5TcCNia/473fYzGF2/dp/gfvnU8TV6Uoxfryk062FbAa16tCyBAp01XJ+6qqBUSlOdQpDAXD94/wDPw5v+V5zJ0/x04tx+mUKpaOMtb3VY5jYlHkrhOP7Datp7aopY1sZKywrOPiomN1kkqmBUjKqrPVe+YSlTAAMMds+cR71nxe1u93/vLgzq+P05WmKE1ZLJJ6HkZ+qxMI5KiKcxaVtZ7rUnoCBKDgniPVlWjdLvB31C4B0g+Rr511I84rTuw5VzrwunN+aPkq9HbZ10zmz2OtOYu3py56jeKTMumrCRWgp09ffIrs3SPrMY7bCmZVwmdFwqBvPwDQp54vmRchPL9j+NDbQLeiFe7febdXssldK85sZ2zXXaOtU41jFtU5SObIFfq31ZRdQ4KH6tkwIJQE/e4F1x1LqHT0cZYCt8V53KuSb/ALOCiW1b+Pb7h249lXwP6P8AGS9rk+r55is6bHDVuNi5G3V5LyeKU24Tb4VjpRSovjNvcjVgh5rPntsNaxW9leM8VO6ffV9pcW1xR47W6TqTypP48ZJtY3UhW7Mm8aV00eILmeiqggmToJ1CgPbxddV9eRxVn/pYyw3FSUuVJxcWq8XxZVpTbXYjfUvZ+9kq7rt3pJdQX7PUlu9KzKzLULELsb0ZcErSV2xwu5xfFUPjSb2JM28eU95yEB5g8jOaj2NSY3WHIGs189pIwrzx47o1/rrRy3Zy0lViyqzqYhJKEcPURcxrpd2YW6pVkXKoFXIhy7pPrK11FKWJkQVrUIR4qJ1jNbm412pptVi67HVN7addfaF9mjO8GrVnqHR8qef0dkXuVxXIqN/HuNOUIXuFKE4zjGXDdgorii4yhCsHPeFnNzquMAYAwBgDAICRlIyIbg7lpFhFtRUKiDmReN2TcVTgYxEgWcqJJiocCCIF69RAB+LAItFZJwkkugqmugumRZFZE5VElklCgdNVJQgmIomoQwCUwCICA9QwD0wBgDALM775EaO4t63kdv8AIjaNP09rCIkImKk7xepVKFrzGRnXqcdDs3D9YBIRxIvlSpJF+6OIBgF32zlu8bN3jRZNw1dIJOWzhEwHSXbrplVRWSOXqU6aqZgMUQ7BAcA98AYAwBgDAGAMAYBxL+9OeZNcWtno/leaZtD2rsL3CxNz5T2KGcGbyb6qzKxnNT1ORyn3VW0dJRzI0tMEAf44gsxQMPgGdJK8E6r1qViNzFs7VagpT88pbYQfmSpJrtqvPXth7Pvhhb1e9ha/qa4ZahlStY8nvt2bb4cjIjXZxylxWbcv8HC46VcXHm0YW2Pq9OiKTUW6ELXIZt4LOOZACaYqn7XD1yYv13Ug9U6nWWUEyihh7R9AZ11uYl3LzJ5ua3cyJurcvUl5EtyS2I9oMLqLT+nemMbpXpi3DE0TFtqMLdtUq98pza2zuTbcpzk3KTbdS1cvKLPDnMoqYwmHr9uYfnEe3PsWLKtrca61TUbuXNynJtvzk0oXIzZei28hHw7KGudPeHcOi1izJmMVgut1O4WgpciSzqKVEwiYUhKq3OP1gIUwiOXMrQ9O1d8V2trKok5xSdexcUXSvupp+WpjaD4rdZ+GqlbwEs/QVOU44925O3wNvimrV2HE4Ve1wlCdt1bioSbbwaleQe5YLZWx71Spx9rwNjv3DucrsO4Te19x3k0kmzhxHvWyke5mGZ25V0X/AICbpFyHiJmIOc9xNG0t6VjadkxWRHHglGctkt9XRp1UXWnDVqmxnT/qPxP6/h4ga31nod2Wjy1nIlcu49lq5YbcVCMnCcXbleikpq+oRuK58aLW43u+Rz5yF90Hz4E+z1oGvaY5EsqnV92wsEm+j60+uMc6Z16K3UaNcO3rSOuzZtIp+0FW4JJvGLcyIl8QyZi5mmTfSLx5Y9y7c0uV/l3YzdeC3crwyjRbrU9td7hKddypxzrexb9o9avj6ziYOH19Z0p5eDex4OCyczDUVes3eJy+NqON8RRTUI5NjHcacdxT/T6AQEAEBAQEAEBAeoCA9oCAh2CAhm4DzgP7gDAGAaRfPwsmxTcG7BqjV5Xylg2y/MzlWcacSP5ioVYWczPQDXoJTKKS6qjYpkwEPGTIZLtA4gIpmm4tLec6HHbkXEaf46VGmyzk1LhqdBpISLCSQcRyzWQXOKj7x2KiRHR5B5IKm6l7gqKKG9Ajli9et49t3bslG1Ha2+wz9L07P1jMtaZplqd7Ouy4YQjvk6V7aLcm95cdhtiA2LDsbPXplvMQ0uiZdk/bHMKaxQOZNUpinAqiSySpTEOQ4AchiiAgA5VbnG7BSg6xe4t5eJkYOTPEy4uGRbdJJ02P3VVNeRptMtzdqtFXFmok4SSM57ggkqYO3r6SlE5R75DlN2kOUe8Q3aA5WYso1NMe79BLQ07NyrVk4WdGcuTvTrKrvF1lQMbvqKLLqKqqnMAdoiYRypbjDuKa3N0RR+udUblqGl5jdsSmEPGo7CbRdCiJyMReeLMtY9d1KWtrDS7deONBnapBHKKLJCm4WOHcA3hGEoy414U/MbX+Fye3LhRpaHsajJ65rjtmKS53iSaSBZUHax49oCJDJEatzoiZNMvQqRDd0oAXoAQypVpt3mY0hp+yTTBxHyTaMOi5SOmYDOxMACYglA5RKiIlMUR+DIDVdjMJrz5bDi/eIWQuDCuFWOALLxketJuypiYBOCRVzMm/iCX0CYRAB+Acnb7xZ5XxlLtTLYb64y1WC2brKhUSkqPkKfrerQqTpDxSIxhSKOWylgsD9Pw0lJSYO0O5cKqj3lTdQTL0ApQmvaXqV2m0anR+sAiYqO9moCtHxzFioqsZYFFzs2qTcy5iit2GWFPvfTkbAVw5qGs5AqXjwMO6BHr4frTUjgCd/p3ugLGUL290MbBRMoXaVMgnmsLJWK0xYxX5UKR0AU8UxbNwQ9dfIKvnoIoJETOqziWi6vUwCHUgdfTgULXa1g3OqoxvXq2DkI5JU6y3rC4ruHbpXugs8cq90nfWVAoAPQAKUpQKAAAYBknDW167AhHCJwMPTr1Ds69P1cAzW4tcdp/kHeWDAzJy2pMQ5bvLpP8AhnI1ax5DgqaIbOO6KZ5iXIApopgImIUwqmACEHrO8k6U2jRswaNWLJBNszZN0WjRsiUCJN2zZMqKCCRQ7CppJEApQ+AAwQRGAMAk35wfib8NzJ/h/m/VLX3/AMz4Sc5jF0YAwD8gX3bfmvxk4DeY8TfXLTZf6J9ThoXaNLG1/kbsC9f3lsb2orQ0b7C1rVLlZP44nGLj43qfq6fc+ucomL1A/R74wefZ5TXMrd9K44ccOWbbYO59iGnCUymuNK8iqN7dVrldlrXMIN7DsXUVSqrdy2r8G6cFTXfJKL+CJEgOoJSCBxEe+p/96ZoP/mA6s/6xPKnANv3Nj3szy77XwV3JpPQ9J3fsvcG0NC27SkJE3XXENWteRD+769k6Y7sdzfyFvXdSdbh/XzKHYs2y7iQECoD4Kah3CQE39zQ4Qyeo9D8geZdg2NrixL8jxodIqWv6FdqxdZug1nX7izy8g+2karzEujU7ha5Cyt/V6+8BtKRbRiKjtMqjsEW4HbDgHIr71J/yEv8ApP8A/Z4zUPir/A/P/wCSejn/AOf3/wBt/wCl/wDcTctwr5L8ddNeWhxYs22dyaxqEDVOL+qS2Qs9b6+m7QURo8UirD+xTPTyT+ZdrB6ujHpIqOnK5gSTTMcwFHmui6lp+F0ziXcu9ahbhi261ku4tlK1b7Et7exI6veJ/RXWHU3jl1Dp3T2m52Vm5Gv5vLVuzcdU8i4+PiUeGMEvjSuNqMYpycklU5cvIsqr7Z/mzttl6xhJCsaxo7PfOwpSGbN/V2ELRLfAWemU6pyXqC/s1H1SYu0YKLfvLEE7ATJlEEvEJq3oS1LK6t/VYkXDEgrs2uxQkpRjF02b5Ki2/wBuzdU79e1hqFvp/wBnVdP9QXbeT1DlS0/GjcbrKeRYnavX78OJcb4oWLilKkXS7ST+NwyyH5mebnzZ4u+ZzyEqVT2HKXXWdLnbLTqXpSUioNapjK2DVRYykrrIsYIthfkrV9mWUwZBB2i6kRaGamXIRc459HWur9b0rqjIsWbjniwbjG00uGsrdI7lxOk2pUTq6UrtOE+F/s4+FvX3gNo+q6lhwxNeyrcL1/OjcuK6rdrMcr6XFc5UXcxrc7KlKEoW+NXOBuCNjnlV6x83Sjci7TuPn5dNluNG3vSVqsryL2Btmuz0HU7unYag/g0A1iwn3KOspFOuKSix0I6NYtG6BDoufDVIREOSdKYvV9jUp5nUE7jwrliTpK4moz4o0+In8R8PFsikux7aI0p7QGv+zjqvRWP034P4uHDqnD1W1bU7GJdtzvY7tXlcf6qUE8qPNVlKV65O421K3WDlI143XzEfMh82DlXaOP8A5ftykdJ6hjEp9zEysJJq0OSSoEU8Shw2hs3ZLWMd3mvOJpw+Q9WjYUE1WhniKBEXLhI7o3Hb3UXUnVmqz07p6bsYaTo0+F8C2cc50c41qqKNGqpUbVTc+meC/gl7PPh/jdZeMuNHVeprkralbnFX4/qJJz/S42M5xx7qtpS47t9uM+CUuKEZxtlAb32B51vk82bXtw27yUe7w1/dZpwg3dWLYFx33rSflGDVu7f0madbVh4W+1N65jUxWR9QGOMqVNY7ZcwkcdMbOyOtujrlu9mZPPxpy7ZyuwbS2xbuJTjs2qlNzo959npPRvZc9pXEzdM6b0NaRreLZTpbx7OBkQhKTSvwjiXLmNeSk+GXMVynFFTiqwOv3iNyRqnLvjhqbkVTG6rCH2XWSyTiHXVKuvX7FGPnkBbq2suUCg5NX7TFPGYLd0oLkRBQCgBwDNwaTqVnV9Os6jY2W7sa08jWyUfekmvPQ83/ABE6J1Hw6611HovVWpZeBfcONKiuW5RVyzdS7FctThOnZxUe1GJ3nEeYcz8sHgTtzlO3ho6z36PPC0LTtVlzKFiJ/a94cqR9ZLMkRdMnTmBrzVF3NSKCCyThywjFkkjkUOU5fonCzTxxl93crvMmg1TlL52+298cwOV21oFrcX+t5La9ooepOPcfa2qEqjrmiVvX7mtuYmRjWyjdOWTYuWkKV42BJsyAEjuXQGyPhZ5MGvfLq5DROxeHfJPkXRuNr+t22D2Fwovt5lNp6Qk5OZIZ7XLhr89hfpTOv7LAWA6jl0uqMuvIpuFE/FblMoCoGRPIjzYeCXE3edv4+cjN1M9S3mi8dU+Udje2mEm0Km31W4u5ddx/s+wtmTlCdukxbVCNGEAwI5lnyhylboKHMUogWL44+e95dvJDdczx5aX3YWjttx1RsOwoircotU2/j8e5a/qkRIWKfuVVkL+zj41aKjqvEu5UyL1Vk/NFs3TorcUGjs6AFF1n3iDywbNuig6fDZmy63GbasytO1HvW76S2TTeOm0rInJEhQZ0fbFhg2EXKxq0uoRuSVMklDCZQhvWwTOQ5gMafe0/+5b3L/8AlzQH/wCyonALyXr3iTyydBkCrzV92zsGsaxUrFB21uzTOjth7Q0Dq66KRlfSUrFo27XIpaqyE01VmmyayEKrLKJOFPVzB6yAogBsi5AbT1/ufy99+7e1Fc4O+652BxH3HbqNd6rIJyELYIGV1NZ3cdKRj1AQHunIb6xTARVFUpiKFIoUxQA1V+6pmMPkgcVAEwiBLVyNKUBERApR5GbRN3SgPoDvGEegfCI4Bjp5r6qhfeGvIFKVQ5Sh/pE9AA5gAPGhBTV6AA9A8VMAKb74odB7MA6scAYAwBgDAPy7POoosxd/NL5bWaWfu2FogNuOI2NVcEMsg4rDaq1ltXGiyZhKoRAkGmgZA5B+qUw9ggPZ196h1W5i6/qGNfjxWZ3t25qkY8LXvU2M9iPB3oHC13wh6P1nSrvI1DF0x0klxQm53rsrsZpUaauudJJ1TbTT7NdiUJa2xAIqm2c90OneRddAMAfD3VipCHX6c428nEk6qqr5v6G7IaT1HYjwXI27iXbGfwSSZ9DGTo9ho9QPj6HQEPi9IK+jJV/HW6S9ZP8At+sP+6xL0x/qeSlelHaZkV48xk1A6GA6iIdOvZ1D+E7DB8GSsq1F1Utvvlu5ouoZVt2r1h8D8rj/AFLOzOjJmYFXu+pMyiY3dUXXE4gHUehu4gmqb0Z9qxr9ix3n5qf1NV6t4Q6nqjklyrSbdHKVaeTZFM8YvTyOtadcnyj/ANp2qYZM2jKQQQUQGMbtpePkxbRKQnMsLp24Zk8VYRAfDJ3ClKAmE0ZeuPU8i1CMeDDt8TabrxNwkqyfkSexeV18lLnT3hVZ6E0bPzJ31k9R5nJtwuRi1yoRyLV1wsxbb45yhHjm/wDBcKik5N/sW8dXM694+6KeWgVhszvTesXNiFx3vHGdXpMGrLiv3vreMMgdTvde3vdc3/pznLT7Ern/ABHZhX3eFV9Z5BdZQxrXV+q28On6SOpZKhTdwK9NRp5uGlC8mZhxsYAwDXB5lut31t1HWLkxbqOg13ZlHEummQTijA2RsnGu3xgDt8JpJN2ffH0FTOYw9AKI4Ko0rtOe/benaDtOnTFQu8AWViZVNEFlGpyMpVsq2VI4avGEmUgrNnLdYgGKId4o9oGAQEQyxk2rd+27N1NwfkdPWfW0jUcvSM+Go4EoxyrdaVSkmmqNNPemn7vkLe691DqrWlXiaNXKmRCFhSLEbqvnSjx+uq5XO5cuXrsRSFw4XWWMIiBSlD0AAAHTIx7du1bVq2nReXa/fZRquZk6pmzz8xx59yleFKMUkqJKK2JJL+pctGq0MoAYIhiQfT0MBz/L6BUEMv0ofNcaEtc1nXLVRV2MFBAuYwqHWNGs1FRN17TCoqmY3X5euKdhQ0jHPeNbabkjYHW0Z48dBrTq8rOS7FBJRVnEQkQ7KYjZNQAbgZzIyLVuTr2fXMIAPdHCJSqz+0GCY6dgUa1UWyqTQi5nDt08W9YkJN4YpUzO3y3dIAn7hAKUpSlTTKHQoB29ZezcVv4qoi6Lbar1IoFXKbr07enb9gR+fIKKk7r9guWw7FD06lw0hOWCwPkY+KjY5uo6eu3Dg4FKRBukUTmEvXqJh6EIUBMYQKAjggvNuHhJvnVD6alLlrqedjLHYru7DBNlLLBerx8egyjWftSHK7SQ9TQIYxgWBI3jKqCAdBDJ2FWymwxE/JSabvBTSjHpVhMJQImgv4om69ADwu53xER+TrgpMtNH8NOSe55JkjXqHYY6CXVIDi1Wpq6rVaaI94PEXF/JJJLPwTL2+GzScKm+AvbkUJN4tU8rzSTLWTKp2+Sn5e7Ac717eYZ6aLM2eLoETUYxcQ6K+jjRCIkDp6wmo4VHqYTkAQIWRWm4shK+T7CqPRViN0Ok2gm6lTk6Sgs6IXr6BXZ2BqkqYPj8MnzYFV5C7uuPKv1BVnjd9dbdZb0KBiKezG7dtVopY5RARI59UXkJVRI3ToIJukRH48A2RVSoViiwbKtU+CjK5Ax5O40i4lqm1apiIAB1TFIHeWcK90BOqcTKKD2mMI9uCCo8AYAwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/H393I4O8bPMG8xYnH7lXR32wdVjonZ93Gvx1uttJcflJW3tTRh3vtqlTUDNeG2TlVwFHx/CU731ij0DoB+jJxX9308qfhfvqg8mOPfHmcqO49Yrzzmk2WS3Tuq3NIhzZavN02WcGr1qv0vXpBRWvWJ2iT1lssCJ1AVIBVSJnKBxW++p/96ZoP/mA6s/6xPKnAO2qd8jryi9raSSq1p4EcZ620s1FjiyduoGt63rK8RCrmDROrOQ98pjSDsMNJNFTiuCxXHhicv8KU5O8UQOFz3W+83fSfnnSOg9G3ST2BoHYcPyR17sKcjX/SrW7W2q4K5WrVW130U0cOIZ0+Vt1aiW8c7J31GqFjcpIKgi6XKqB+pfgHIr71J/yEv+k//wBnjNQ+Kv8AA/P/AOSejn/5/f8A23/pf/cSmuI/u6mn9/cf9C74tvJDZUWntrV9K2HLVOuU6rtjxa1rgWUwtFR0/JvZUp0mZ3YkKqqxMJwL1EoZRpHhzg5+n4+feybq51qM3FRjs4knRN13V8hkeIvtp9VdI9Y6x0lpui6fP/btQyMaF27dvPiVm7K2pyhHg2yUatKap5TpO4c8FOOHBShvKLoCnqxRptRo5uF0sL0s5fbw9YJKJM3NmsAtmhFEmZVlBQZtEGkc2OsqZFumZVQTbJ0fQtN0LHePp8OHi/uk3WUmu2T/ANEqJbaJVOkXiV4r9beLGrx1frHK5rtJqzZtrgsWIydXG1bq6VouKcnO5NKPHOXCqcht/aNXvvITNu9bN3bceYuuVRQdIpuERVbQtXct1BSVKcgqIOEiKEHp1KcoGDoIAOajvpS8S0pJNfq4f+mJ6MaPcuWvYelO1KUZ/wDx7JVU2nR37qaquxptPyptPYdkPMuPsUtxA5WRVQFQLZJ8bd5x9XFEBFYLE81haG0IKQFTWMKgSSiXd6EOPX4B9Gbj1iN2ekZULH/GeNdUf/E4Sp6zzV8Nr2BjeIugZGqpPTLetYMrye7lRybTudq/wT7V7qOVr3XKfq7XcfK+sPHbNO5TWttczNeZqKJFfOq7XbNYWdsWaEMcFVG7WQskOC3dKIAKifUQ7OuqvCy5aWXl2pNc6VuDS7aJyUvQ5Rr7qPQH2+sPPudPdOZ9qM3plrMyoXJJPhVy5bsyspvcnKNq9w1e1RlTtNjfvLNhqzDgbSK9MHaqWSw8iaW4qDM5EVXhF4Sn39Wbl25TmBVBuyiXxmqqxAESmfppj2K5yPxLuWY6BC3OnMlkR4fdUZVfoqq+enaaT9h3D1G94v5GZi8SwrOjX+e6tJxndsKEH2Nu4ozUX/7bl/iX+8gSDnIbyxNMKzSblFGctO2pyBRdesFMSDcbHsTNBRJFwQgItnj5i4cJ+H1TUIqCoCPfHPodAQnDpexx1XFK417nHL/Xf6zh/tfZWLlePOrLFcZO1ZxITao/jxxbTabW9xTUXXanFxe41x+98wVhT8vjjhthrWlbfRtEc8tLbH2jCFVbA2/JI1N2jV2rqQQfd9ouzfWSwMoftTWMVWXJ1TFIVRLzM6ym/wB3tT7XzI4xRBeL/K218c1toRtB2HQuRGp4Kq3WWUpciWPtDQYaPtJHEA9i7jAuSEMqPUxUVu8QeuAc8HHnYfPjiz7wXpvy89weYPuLl9pG8cN7dvWYbbMo+tKkJrCv+kVhFsyNqjCFXISEc0RFwksR0mdQVzkOUSdQMBH7w07rDcXvbuhUNo0mv3tprryyWG06dH2VglKRsNsGr7X2e0rVqTjnIHZOJWvDMrLsTqkU9VeAm4TAq6KShAKc95i0RqPbXMHyEW+xKNCWlvsDzCKXoi8N5FATJWzUewNoaMJaaNPlSMmMnCPieKUiaomFuDtz4Qk9YW74GTPvV+vqQPkf7sTTqsC2Q1de+OUprtqzimTNnTHgbcp9CKpW2jZFJvDlTp1pfxxCIFTKVo6OmAAQRDALYe8zST6Z931cy8o5UeyUq+4hSUi8WEBWdvn1gqjp25VEoFKKi7hUxjdAAOo4BvsovFfjrC8K4jidHaxo1e45vtFk1vJ68CGjhqQ06aqAR037WaviKISTh6i5VcvHjwyjhy5MdwsqdUxlBA5dfdvLxdLZ7uFzCgbSg/Rg9YzHOCj63UeJvCN3VLf6JrmyXy8UZ0UEFmBdibCnkjGbdUQdJrFEfFKqAAY1+Q15MH+mB5YeiN+//wBKPM047flfP7kZ/om448kP0eairv5L7ivFY9ZrlU/JqR9nuZz2T68/N4xvHfOFVOzv9AAm22/L8/0BPP58lCu/6XHMDln+kab3LNe2OXW2v0rzNN9g1iSY+zaW89kRPseMlfaHiu0u6fxVUUzdQ7uAd4WAMAYAwBgHGH7x9wUslb2pE87KLDLyNCv0XXaNu07FAyv5IXmBbpwlMt0mRIn8BBW+BTbRSjg31EJBgiVQwGeJhmlPEvQbtvKjr1iNceaUbtP8ZLZGT80lSNexpV3o9QvYd8WcDP0O54RavdUNXxbly/g8TpzrFxud6zCu+5ZucV1R3yt3JtKlqRy3qfUAeztD4vkzVND0AuR4F5yBM6KHXqH+HxZc5fnMKWRFPajyF+kHTt/X/ayrlPzlp5cDyO9KIfV6D8wfD2/r5WoMtXMmLXxUbAPKy4JWrn7zBotJNHOjai19IxV+3hYgIckfFUiMflXLXfWu6ZP29fnTYYxkiHVQCKLuO74bZQQ5V0zo09a1CGFBP9NFqd6XkgnWnuza4V773JmgvHXxLxPC7ovJ6kv3I/73et3LGn2v8p5U4uPNpv5eNGXNuS3VULdeK5E/TgRRSbpJIIJJooIJkRRRSIVNJJJMoETSTTIAFImmQoAAAAAAB0zsckkqLceKUpSnJzm25N1be9t9rPTBAwBgEBKRcdNxr+Hl2TeRipRm5j5Fg7SKs1esniJ0HTVwkcBKoiuioJTAPpAcA0e8m+Cl8ozmRsWpYx9dqMoKrkkQyAz21VxIe8oZmqyKAuZuPbl7EnCAHXAgdFSdQ8Q73S6p+XeamLIg9jXbls9YuGb1A5iLtHCajZ0ioUehiKoLFTVTOU3YICUBDISS3FdalsH8k/8AreEKyQdezvG6B8Xp69BySiS8he3SXE3kLyTlmzKk1SUSriq5E5C8T6TqHp0Y3EweKqeVXSAZNZMnaDdmVdc33vTtyC3Q6AKT5ZHHevahjNdzce/l7UmBnkzsxg4NFWN7LuEy+ODUg+tskoJucoA3ZrJrFIUO8IioY5xkJ0MTbz5NxpB0qpTNzNSNDnMZNtZ6oqDlIgj2EO9iJXw1zFD7oG6fX4gwVcSaJZU/JYSB0mped2lFkU4CqzqdTMDpYgGARISRmpVRJuYwdfrC1U6fFgp2G0fj/wARdFcamhw1pUU0590h6vJXSdVCZt0il92ieWXTIDFof7pBom3QN0DqQRDrggyYwCBCMjQW9YCPYg4697xwaN/G73p6+L4ff6/TgEdgDAGAMAYAwBgDAJN+cH4m/Dcyf4f5v1S19/8AM+EnOYxdGAMA4x/In9295d+Vrz1nOT27N0ccL3rhrqzYutqxG6tl9mvrtMHtsrBqxkxPRFt1pU4KuFRj4MDroN5SVEiywpkUUKTxTgdnGAcfXvDPu83LXzYuWuouSXG3bvHSoRdQ46Qej7TVt4Tmy6s/Sf1bZezb7Gz8BJULWWzm8wzmG+zlW66DhKPOzPHlMUzkHIg3A1+q+7h+8ZbLj/0a7x84hhLaYn2asJcYBXmjzp2pHuK+ZkqgWO/Rrb9d1Oq2RmqIERM0dP2qAImMPU3dBMwHRB5MfkHcdPKFjrLeI22SO9uTt/gE6xb92z8C2rLODqh3LCSfUfWlRQkJk1YrklLxrdw+Xcvnz+RVaoidVJFMjcgG+fANG/nSeWJu3zHGXHNTSl11ZVJHTTra5J1rtKTtsOylWWxktci0cRL+p0+6L+tRi9DMVRFZsmRQjoDAqApiU/Butel83qSOM8KdqErLuV43JJqfBucYy3cG6nbv2Ha32YPHjpbwTva1HqjF1DIx9TjicEsWNmcoSxnk1U43r1hUmsiqkptpwpwviqto/FDUExx+4y6D0dYZSMnJ7UupaJr6ZmIUHRYiSk6rXWEQ9exgPkW7z1Fw4amMl4qaagkEO8Uo9QDlOlYc9P0zHwbjUp2bMINrc3GKTar2bDQPiB1Hj9Ydc6v1ViW52sXUdSyMmEJ0c4RvXZXIxlw1XElKjo2q7mZA59A4gc4Fh8nLkVL+bi055tth6WJptPdtb2otXl5i8l2aWPhIKNaLRSUGnQlKqo8XkY/uFOM2QgIn8QfrB4Q65udHajPq9a+rln9FzlOlZceyKVKcPDvXe3eg7q4ftJ9GY/s4S8IJ4epvqd6bcxlcULH6Ws70pqbuc9XUlGW7kN8SpufEuj05CKEOmoQp0zlMQ5DlAxDkMAlMQ5TAJTFMUeggPYIZsY6VptOq2NHJ1yD8g3kdqbkG+5DeWnvKD1qLmclp+Gp0vYp3X1j16acVdKv6zULJX4WXiZ6lAk4FqkxkSte4xEG65nYAY5tUah0DqOJqL1Lpm/G03JtRbcHCu+MWk049nDJLZsdT0H6O9rvovqHoyHRXjppN7UIRtQtyv27cMiGRy0lG7et3bkJ27+zid21KTc6zirdaFNMfI78w/mDtSr3PzHOVMVKVGrgmyKzgbTKXq5+xDOElpOGqEYetQFBpXtoGpPHfk9YUFQCqKtVzEAMtLofqLWcuF7qXLjKzDsi3KVO1RXDGEa9r2vyp0M657VXg14a9PZGl+CHT121qWRWTldtxs2eOjUJ3Zc27kX+Cr4bbcIpNqM48TOrrXev6jqmh07WdAhWtcpNCrcNUqrBsgEG8ZBQLBCOjmpTHEyixyNm5e+qcTKKnETnMYxhEdrY+PZxbEMbHio2LcVGKXYkqJHn3rGr6jr+q5Ot6vdlf1TLvzvXbkt87lyTlKT91t7FsS2JJFGchtAan5UaR2Zx33nU2t31Nt2qSFOu1adKrtRexb4CKJOmEgzURfRE3Dv0EXse+bKJumL5ui4RORVIhgvHzTmz1L5afnw+WhFKaX8uLm3xY5JcSI5RcutdW8/K5fGV403HrO3jokDWbHqyAeHmogfWuqpRlI2NSVIUWcQ28RcTgXu4S+VL5ganmSQXmreZdyc4/XLeFV0rYtG1HS3GLXlgZa7hKhMe1/ZRV73bm9Um3Joc1nlF1EFoh85WdOyh7SFugRM4GWkx5eO5ZDzy6r5mqNp1kXRMFwTccZHdRVl7UG2lNgrbCsloLKN4MtOPTjU0IqYSAXJp0j31gpiep9wAVEDw80zy6dx85N+eVftPV9t1nWa/wb5uULkttVnfZO0sJmx0ip2ygWR5D6+b16pWVlJ2pynTlUkkZJxFtO8sUxnIAAhgFf+dXwY2x5j/lz7s4i6Rseu6psrY01qeSgZvasrZYSjtkqJtimXmXTl5Oo1O7z7ZRxDV5wRt4MY4A7oyZDimQxlSAWt82/wAtvc/PvytUeDepbhrCrbPIrx/A9n2LJ2uNoYI6sla+5sihXtaqFqsJlXTSMWFiQY4AWU7hVTIFMY5AMKNi8GfeEarp6Y4H6E5rcNtg8UZyryOrYLlZv+t7diudtD01MJvoNSsSbqmt5vWd3utYorgsazsYtm8nKuEyuVF4xc3jpAbR+NflrUbhx5ZMp5eWiZs0gCuk9uUgb9c/EaKWzZu2oKyhYLzZU4tCSWjI19aLEY5Grcjo0fGJJN0/GFEDHAkPkqcGNseXB5c+k+Iu7rHru17K1zNbYkp6b1VK2Wbo7lK97Yud5iE4iTt1TpE+5Ubw1hbkc+NGNwI6KoQgqEKVU4Fqebflubt5Keah5YfOKj23VkRqjhZ+lf8ASpXbXMW1lsKe/LeN9WhP0fxcRSputy3hOBH1r2jLRPhE+sn4w/VwDdbgDAGAMAYBTVyplT2JVLDRb3XYe3U22RL2CstZsDBvKQs3DyKJm72PkWDoiiDls4SOICUwdg9odBABy1fsWcmzLHyIxnYnFqUWqpp700Z+l6pqOiajY1fSL93G1TGuRuWrtuThO3OLrGUZKjTT7UciXOr3bO2tJWavvA61x0xAPFlnv6BdlTQxsxCiqYDmYUTYj4VI+WjUzGMCDWcFsuimAFM/XHpmntd8M7sbjyNAmpWnt5M3RrzQm9jXkU6Nd5npH4U+3Lp+TiWtG8X8edrPjFR/3HFt8cLlP8sjGjSUJv8Aynj8UZParMDnm2h5fvOTTrxyz2LxM31C+rKnTPIsdcWC1QKvcOKYqNbHT2k/AOkhMHYZNyYBDp8ecAydB1vDfDk4eRGnbwSkv/NFOL9J270XxZ8Lep7au6J1Do1/iVVF5Vq1cVfLavO3ci/M4IoCn8PeV+w5BOMpHGLkFZn6qgJEQi9O7AUKBzCAACrhWASati9R7TKKEKUO0RAMt2NN1a/LgsY2ROXmtz/pQztT646A0ey8jVtd0bHtJVrPNxl6Erjb95Nm4niH7uXzF3VLRczyMUjeMOtTGRcv0ZN3FW3bMozE3U7SHqMK+eQ0A5VKHdFaWepqNxEDeqLdO7nMdI8PtczpKeoUxMbtrSVx+5FNpe7J7O6zrd4ie2L4YdK49zG6PdzX9cVVHgU7OHF+Wd+cYzuJd2zBqW7mx3naFxK4e6F4Tanj9P6Ap6VaryKpZCdmXqpZG3XafFEiDiy3OwHSScTUw4IQCl+qm3bJACTdJFEpUw3JpGj4GiYiw8CHDDe29spPvSfa/UtySWw80PEPxI6t8UeoJdR9XZHOy6cNu3FcNmxbrVWrFurUILe9rlJ/GnKUm5PJ/PqHBBgDAGAMAYBQlq1fra8iJrnQKbalBAA8awVqHlnAAX7UCuHrNZcoB8hgwKtFIxHG/j/AuivojSur2Lwhu+m5SpFdFZM/p7ySikecyZg+AS9BDBNWXkRRRbJJoN0kkEESFTSRRTKkkkmUOhSJpkApCEKAdAAAAAwQeuAMA/giAekQD58A8zLok+2VTL85y/t5FewUZCHlY9P7Z0l8wG65JNGQKthjyde6umPT5f2OwcirJUWQB7SzDr0XTD5ymH4fkyNpPD2MhTXBqX/Lt/mEDB8XyZO0UifSd0jzD0MdIf3Jh/ZxWu4ii8pNEbLGqh2KdPm9GKkUIsJuPH/LBiooexJRkfp0WL9kP28VIoRZF0VPtFCm+YcVQPXJBJvzg/E34bmT/D/N+qWvv/mfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAOoB6R6YBDKu0EQ+uoHZ8uQ3QlRbJYtPskuv1gN0/xyh+3gq4GSV1c2yAD3SEHp6BE/X9YcecngXaU262MQneAPCJ0/wAYA/VEcpb7GOFIpxzsIp+v8OQB+LvgIfr+nJ8/YTu9wp15ezG691yn8Pp/1BxuI4qFIPro8OI+Gsj84mH9vKauuwp4mSI1slxH+VNwAR9PeEfsfZyKirP4NpkunTximEfhKHp+bqIZVxLc9pB4GtEmbsABN8v6mU8VV5wRLewzBjB0IPb06dgftfDjia2gqpjJTS3dASqfZ9AfZ6YqwVgxRl1u6Jin7fhEw/rfLirBWLCLkTCAmEwfD29RDt9OTXt7QVswjV0wATmN19I+kenyY29gKkSIJA6CPX/AO305WlQglf5wfib8NzK/h/m/VLX3/wAz4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAhVXIpgP1B7Pi7cpcqbypRqSF7MCkBugqB0+IvT5vRlHFLs3lSiih5GzKkE311x9PoAcVKtxSji0qmEwAVyb09olN9jr6MqUtte0mpT7uxKCA94hw/denJqQUk+mPE697vh8wj8foyHLZsIbKWcOElRHqCw9fT9cfmynftKXuIQEQMP8ABpn6/GJjG6en4/kyOIhnmaMdq/ad8OvoAAHp09OG2Qf0lXklxASgp0EfiH4fg9GR/qCdM6HJKGL1Kp07PjwCsWOuXRhL3ynH0dQ6dv2enTJ3bAVqw1l9qJ0R+n6MeYFYM9dNkunVEnwen4P8AyaekFTtac1Q6fwZA6dPgDrkpOoKgbw7ZDp0IXs+QP2umVcNXt3EEzIimn07pQDp8gYUUvdB65UBgEm/OD8TfhuZP8P836pa+/8AmfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwDyP4vQe73fR8vXKXX3iVTtJM/9e8JT1bwPWOzuesd/wAH7Yvf7/h/X69zr06fD0+DKY8PEubXg82/zbyt14fi0r6ikHPt/t7/ALF69vXr67l39n+J9Eo+3+R6ynXXtbqPe9h/J/K/i+XJX6Sv3n0SP3HyPWU069o/W6+yOnb6PW+nT4enTJf6L8WvzR9v8mvvlLO/H6j3/ZP0etfT0+XIf6P8X6I+3+T6ynF/SPX2V6f86/Ux+y/FpT5JH2/yPWeSfqveDv8Asz0/516Pkx+z/E+iPtu3gr75P2fqXUP+Kvp9Z6dfl+jH7Om3mfRH2/yPWVYy9U7P+Jvg9PrPT/Drkr9F2831ELn1/wAPWVYz8DoHd9i9f/e8n9l+LT5o+2rs4PWVI373QO57E/rf7Hw5K/R/i0+aR+4+RT3yeN/XeoeF7D+Tr65+x8GF+g7ebX5pH7j5HrJkX250Du+xOnwdPXP/AA5cX6Ls5v0SPt/kes+/7wf2N/Xcfs/xfoj7f5HrH94P7G/ruP2f4v0R9v8AI9Y/vB/Y39dx+z/F+iPt/kesf3g/sb+u4/Z/i/RH2/yPWP7wf2N/Xcfs/wAX6I+3+R6x/eD+xv67j9n+L9Efb/I9ZKf/AK/7e/8AsvX2R/n/AHunrn+x6dfpzJ/afpPvacz5PdLX2/P/AMP7PP5T/9k="><h1>Microsoft Skype for Business 2016 Audit Report</h1><p>Generated by the <i>Excel2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Skype for Business 2016 Security Technical Implementation Guide V1R1 2016-11-14.</p></div><p>This report was generated at 04/03/2019 04:49:54 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.3</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.170</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="passed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>This section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="passed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO420</td> <td>The ability to store user passwords in Skype must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO421</td> <td>Session Initiation Protocol (SIP) security mode must be configured.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO422</td> <td>In the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016Word.dark.html b/Samples/Outdated/Office2016Word.dark.html
new file mode 100644
index 0000000..5b5db1b
--- /dev/null
+++ b/Samples/Outdated/Office2016Word.dark.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Word 2016 Audit Report [04/03/2019 04:11:36]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px;  	color: #dddddd; 	background-color: #14141d; }  a { 	color: #ffc17a; }  a:visited { 	color: #ff7aad; }  .header { 	background-color: #2a2a3d;  	padding: 35px 20px; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #2a2a3d; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #2d2d3f; }  table.audit-info th { 	background-color: #212130; 	text-transform: uppercase; 	border-bottom: 1px solid #2d2d3f; }  table.audit-info tr:nth-child(even) { 	background-color: #2a2a3d; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap; 	width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	background-color: #212130; 	border-radius: 8px; 	font-weight: bold; 	color: #dddddd; }  a.totop:hover { 	background-color: #43435f; 	color: #ff9924; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,/9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAABkAAD/4QNvaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjMtYzAxMSA2Ni4xNDU2NjEsIDIwMTIvMDIvMDYtMTQ6NTY6MjcgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHhtbG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9InhtcC5kaWQ6QTcyNUZDMjEzNUVERTYxMUI1OUFCMjU2NDI2OUE3NUMiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ6Q0I2NjA2RUZFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6Q0I2NjA2RUVFRDM1MTFFNjgzQTBBNkY4RDhEOEM1RjMiIHhtcDpDcmVhdG9yVG9vbD0iQWRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpBNzI1RkMyMTM1RURFNjExQjU5QUIyNTY0MjY5QTc1QyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQECAgICAgICAgICAgMDAwMDAwMDAwMBAQEBAQEBAgEBAgICAQICAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA//AABEIAGQB9AMBEQACEQEDEQH/xADgAAEAAAcBAQEBAAAAAAAAAAAABAUGBwgJCgMCCwEBAQABBAMBAAAAAAAAAAAAAAABAgMEBwYICQUQAAAGAgEBBAQGCQ4FDg8AAAECAwQFBgAHCBEhEhMJMRQVCkFRYXGBIpEyQlLEhRZGF6GxwdFy0iMkNFSUpGUm8GJDZBjhgpKiU2OjNUh4iLjIOfGywjNzg8OEtNQlRXe3GREAAgEDAQUDBQ8DAgQHAAAAAAECEQMEBSExEhMGQVIHUWGRoQhxgcEiYoKiwiNDY4MUJETRMkKxFTPDhcVykrJTFkYJ/9oADAMBAAIRAxEAPwDv4wBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBLnpQO4iiiPTo+Or0+Pw2D3oH0GMA/RgExwCUzR1PURaoGEjmRVTjkDl695MXPUF1yiHoM1aFUVD9xgEzSSIikmikUCJJEIkmQPQQiZQKQofIUodMA+8AYAwD4UTTVIKaqZFUzdO8RQpTkN0EDB1KYBKPQwAPz5KlKLrFtMhpNUe4hvZ0f/MWf9FQ/eZc517vy9LKeXDur0EKzjY8G5Ceos/4IyqP8mQ9CKp0g+4+ImRz73fl6WOXb7q9BFezo/wDmLP8AoqH7zJ517vy9LHLh3V6CDbR0cZZ6p6iz7XBUgH1ZD7VJBIBD/wA38ChjZHOvd+XpY5cO6vQRCsXHqJqJ+oMvrkOT+SofdFEPvPlyede78vSxy4d1eg+W7BgdBE4sWfUySZh/iqPpEgCP3Hx4597vy9LHLh3V6D29nR/8xZ/0VD95jnXu/L0scuHdXoIVlHR4tkzixZ9Ve+v/ACVD/LqGWD7j4APjn3u/L0scu33V6EfR46PBwgb1Bn0MVZP+SoekQIoH3H+9Dkc6935eljlw7q9BEezo/wDmLP8AoqH7zJ517vy9LHLh3V6CFWjo8y7QnqDIQA6q4/xVH0JpCmH3H364D9GRzr3fl6WOXb7q9B9uY2PFBX+IM+oJmMH8VR+2IHfL9x8YZPPvd+XpY5cO6vQewR8eIAPqLPtDr/JUP3mOfe78vSxy4d1egh3cew9XUKDFl1U7qIfxZD0rGKkH+T/x8h3r3fl6WOXDur0EQEbHAAADBkAB2AHqqHoD/WZPOvd+XpY5cO6vQf32dH/zFn/RUP3mOde78vSxy4d1egezo/8AmLP+iofvMc6935eljlw7q9A9nR/8xZ/0VD95jnXu/L0scuHdXoJP7PYe3+nqDLp7H6/yRv16+u9PT4fXpmTzr36OvHKvM8r7pa5cOf8A2r+zyLylSZgmQMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAJY4DvykaX4E0JBfp8pfVEAH7DkcAmeASfr61MiHQBSim32wgI/x5+HoAfQB27JPt+HuuMAnGAMAYAwBgDAIZv0AzkgB07rk30iomksIh8nVTAInAIVmIGQ74B2KquFfnBRdQwD/ALEQwCKwCHbdfBAB6dSHVT7P97VOQP1C4B/XRxTbLnD0lRUEv7ruD3Q+k3TAPRMnhpkJ94QpPi+1KAfsYB5r9ngG+8XT/wCEAyP/ALXAPfAIUv1nig/Ai3TKH7pY5zHD5+6kXAIkwd4BKPoEBD7IdMA8m49UEhH0+GQB+cCgA/qhgHyv0Mo2THr2qip2fEkmc3UfkA4l+nAIjAGAMAYBJvzg/E34bmT/AA/zfqlr7/5nwk5zGLowBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAlvQTS4D8CMaIfS5dB/wDKYBHqqkRSUWVMBEkiHVUOPoIRMomOYfkKUOuAS6HSUKzBwuUSOX6ikg4IPXvJnc9DJIG6/C1bAml/rMAmmAMAYAwBgDAIUn1Xbgv36TdX6eqqZv1CFwD1XVBFBZYfQkkoqPzJkEw/rYB8tUxSbN0x9KaCRB+cpCgP2RDAPfAIZv2Hck+9cCYPmUSSU/8AGMOAfD0f4NJPoA+M5bp9B+EoKlVU/wCCTNgEZgHg6ARQP09Je6oH/qzlU/8AJwD3wCFbdpnKn37k4B+5RKRD7HfSHAIrAPBv9oYo+kiyxfo8Uxi/7QwYB8/bO/g6JN/p7y6n7AIfq4BE4AwBgDAJN+cH4m/Dcyf4f5v1S19/8z4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAS9Ae9Ivx/3NBij9IetLdPsLhgHlKgK5W0eHofuCkX9PYyQ/jDvvdPuViJgiP/pcAmuAMAYAwBgDAGAQp+hXiI/7oguT5xIdE5Q+gBNgHxI9rQ6Yelc6Db5wcLpom/2pxwCNwBgEMT6rtcPv0UD/ADiUyxDfYDu4B5r9TvGRPgIDlyIfKmmVuX/4vAI3APFx3fAW75gKTwVO+YfQUvcN3jD8gBgFioLlHxwsDRy6it66ocoxzRy8klT3uutCsGrBA7h86e+uv2wtGzRFE51FFO6QhSiIiAAOAXnhHLZ7ERr9k7bv2cgybyDV80XSdNHjd+mV4k6aukDqIOWzgiwHTUIYxDlEBARAeuAUfe9ta51meKb3a2xkNJzyiqNer5fWZS1WRVDui4SrVSh0JCzWJRsU4GVKyaLikUe8boHbgGG20+Ym8qBLSkpS+Ee39uavSQZuWVsr9oodTtD1YzRIZBsTXewJmuWJRwi4KYqSaQHUVIAG7pTG7gCaFfceOYcTuSkJ3y/ak2pxtRnLLKw9ZjN0wKsQvLxMQolHpzUjJsUXMDU1XUqm5bgwknSLsp0O+AGIqmIiDMxNQipCKpHIomoQqiaiZgORQhwAxDkOURKYhij1AQ7BDAPvAGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYBb+F2DQJOxWSvx15p0hYouVFlKwLC0Qbyai3LVmzRVayUU2fKvmDpJbqBk1UyHKI9BDMaObhzuysQu2nfi6OKlFyT8jSdU/Mz7d7pnqTGwLeq5OnZ1vS70eK3enj3Y2rke9C44KE4/Ki2vOVaiUy0m7cHAwEaJpsG4G6gAmUKm7drFAQDqVTvJE6/GkOZJ8QmeAMAYAwBgDAGAYvb85Z6c0AwB5Z5h1aJuPk2zaRouuUEbxsWPZu2jwykw5oUE5c2s8S1BMviqItFjlMcn1egiIB/qY1a482rg5t7ZFY1LW9ny8bfpZ/Je0IK0Ua31klPJDQElPC42LJy8S0i9eR8iVgKDBxMqs0X78SNUBUXOUggbKY6Sjpdi2k4l+ylI16kVdnIRzpB6xdoG+1WbO2x1UF0jdOwxDCA4BjVs7lrrKgXlxqKARmtsbrZwZbPLat1wSMfSlLq6pFDIW7almmZOFo2paksKfVN5YJNgd2UDeppOjFEmCK7adphBzH3zuCg0qtbft/LDSvBSrot3RGiU1X5zfbG3DJFaLsTSLVCJos0dRsVMfDVj2zhoJFhEDLfUOIn3TGfgj5kOzdrbKucHeeYXCTfyYx8DBapolONcNHWO7OVH8q6kLXHv9kVFtNDPyHjtowa+dmugJ2ZVmztQVVAKKVJS/taZnRyk8yuocaqjW2D3UezZbkHsq+wGp9TaQkog8Q1tl9tD1vFxjt7tNgnPa9j6FHvnRBkJFF45eNSCUh2QLnBIBLdPdZStzt40ldV3yx3FJbKnSQ5XkxTdVycpQ9URc84UMspTanSoWRbTE7BQ5fqKy9wlZp48U6eEzaFEUyRWgp5TQVt48lyf3811fXuJvlh1qjT0r49Lt1/hdg68uj6QRcAdOInL9WbZXTvp2TSKBDoHSO0kEzHR8FQTeGZVEScq7EqG2u/8yK1wgtFM0pyYvEVwuvFwpbp5qe4V2YsG3+HFySiWxGLqDSgLgg3sOp5StulURJGitFM3CIpAjKHKJkAkqSLM6M5J6w1fSZ1ovsyN5C8wHzyOuW9uQBLJGWdrtqGsirixaxcU2RiV1mjHQ41tZp7OqjQGDKKWbnbPWJXPrBl4bCSRro5lSUdy2tkbbtxRYXeSrThE8SzWm56DjTMGyniGgDN4KQZINYx2mIkMKKZVCCbvAbvBkVIlFSVGf3cfmH6X4icaoiU4Pa621x/5GVyxwqc1rCzSE9uDjxtCtOXBULdFXNCcsazdyUjIwrR79FrDzTJQpSIrimY5TSmU8cY7HsLoeWz7w062hyb1Bx/3RpyG1HV90vZmoKydXtEjLUau7KfLoOteuq1BTbUJOpRNlH1mMl2gO3DIz5Rm7bJtzmfA4kmNyM68PYdiICAgAgPUB7QEO0BAfQIDgqGAMAk35wfib8NzJ/h/m/VLX3/zPhJzmMXRgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAIOQkGEQwfSsq+ZxkXGM3MhJSUg5RZMI9gyRO5ePnzxydJu0ZtG6RlFVVDFImQomMIAAjkNqKcpOkUV27dy7cjatRcrsmkklVtvYkktrbexJbzma5Ne8QVOVnrnQvL7qlY21F0WRWgbpyu2WeXLoWKn25erqv6rp9dcx113tPoEUKbxkHkHCEAxFCvXKSiYn131T4iad0+laspXcuSrFN0VN1X28PkfbTYmtp3O8AvYy618Y7k9R1Gc8DpvHnw3rkYcc1JJSduO1Rd1Jrigm1DiSnOE2oPS/tzzeuXkjCPbZe+W27Fn7cqjpvrzS8dr7WjrulMcCoN2lNb19VmQCCBwRd2WZXAvQpljqdQzVs/EPqrV8pWcfIjj2ZOnEocMF85xlJ+7wry7jvxZ9jX2f/DnQJ6nrek39Z1G1Di5E8vm5Fx9tLVq9Yx4Pt4ObNrcm3sNIFj35pPft0uN7kKfy9qW2L/Kv7BJborkhO2exvbK8Hx3VlscbFW1UZZ27dkMo7P6q4XWETGETKD3sZmLq1q68rPytOyZ1rKNzhi5V3/HcItN+XiT7SOnNd8PNQwIaF0noHWmiYqtqFm7g/qL8bKgmov9PDIuxlCC32+VcTS4aPZTp38rzzcp/iDx+1TpyVrrblHxtrQzEaw2TRJewk360l5iwyNlth5KK2JaZeOvk+2mZV4f8nF16rKtUhBuyTeCkm3HmOjeJMsK+tM1/G5EY0pKO1Ri/wC1tbnGm6cXw027EdbfEv2IbPVOlT668INd/wB2v3XNzs5CUJXb0a82EJ0jO3fU68ePkQjdUqxrKSodd3HzkVpflTqyv7o0HfobYuu7GLlBpMxJl0HMdKx6ngS9bskLIItJqrWuBd9UX8XIt2z9ksHcVSIPTNv42TYzLMcjGkp2ZKqaPN/W9D1bpzU7uj63YuY2o2ZOM4TTTTTae/zprzNNPamlevL58kYAwBgEmsVigqjX5u1WiWYQFbrUTITs/OSrlJnGQ8NEtFX0lJyDtYxUmzNizQOoocwgBSFERwDQPqTnBL+Zffdu3Bjbrpo7y8dNy5ahVy1d9IUnaPMe8Ji7GaGSu8W5a2yh6fgmiSQLx0KqwkpEXpCOnxSlWZlFKrLb2ETsHl3X9Pa7l9dceK5W9ZzC6bwjG7VSo1loSCXVXOq1cw9TfR8nBPHjEvcKLyUCRfujlFZdY6phEKeIr3bDDPhGpys3juF5aL75nFAYblgAmYFjW9qccNPSllslElVmjz2PATMlC14z6vyizFud8xjJBJdI6ACBSABVBmtdhbXFWjfqK3d+aVxjoW2Nv8d9j7Z/0EOW2vLQ8okntTVcAvaOLuzZCSI2j4bYB6a8JP10jcE5dJ5JMZ1shMQ5SqmaTixURRXkrovcLZ8OeTesOM+gNo6ojNu1naO3LXvTYli39vScn69YXW49hLywMW03DXQjhw1uVIJFxyHspz4yvYZT6qBjGSLDb7CFFRVEW43Fs+a2eeRJZpVafZSiSibltIq+0WbtsuAgZI6LgVUFkTkN8ICUQ9GQSS+A55JaN0Hd9GbG4m6g3dQ5eqS9fjpaHha3Qbadg4aqox6djWaQC0ZZ1YZZQp0XX8UfomKVTxFDgBglMobcOzYaRa55vnmBa/11L6k2FdGe4aWwiHrCmE2y1Wl79rmYZHRVo11qW1IxxGXYLbrZdv1iXL109L4KqzdcqrdUUgko/URclHymW1R80xDazGtrbJXj49/YPZ0cBvX3YWJ27OmZvKTi8R6gESaPaSiIkcCg5KcvfKqRHwzAUIaqXqmQ88aMsjNVq6BJy2ckAxTB3Dh1EO8mskYeod4OvUB+HKdu4NJ7GazuYGobRcVoV1M2a2WdnXmK6FYaTdkmpyNhmihyC5aQ7KUfPEYluqZMgnSRAhAEA7OgBlSflMeauR/tbMMeP1Q25DWvaNk14yMlE62palktbOQPJNIOUeqSLSHr0YJo13HuFZtZ/LCuiVFYioIILKCIFKOSVWXJ29u11NzHF2x7Y2hrRJ5aYhw8nYV4WJkHp1mwKOhFqk6RFcx1gFZwimp3Tn7RMAAJhEwiI0tF5Vpt3lzNkaFsV9r7hktAJg9AUxRUVdMyAYOvdMVQRUEBKBDCIfCHoxtKZRUl5zFbUnl6Wmo8g9X7en5OHbVzWtui70nXmS7heRlpyuO05WBaqLpIkbM40kq2SUciBzKGSIJCAAm7xaqlu3acJN9jP0NNKyUpM6f1bLTQnGXkte099ImUDodR26gGCy6pwHtA6pziYflHBeLm4AwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/MR1r70/wCe5yU2NJ0njXo7WG2bW7Tm7LG6v05xd2Nt23RVVZuyGWVLE1WyzVjfRUCk9QRWfKId0BMQyhgMcOoG2ny7/NZ95M3Vza436r5TcCNia/473fYzGF2/dp/gfvnU8TV6Uoxfryk062FbAa16tCyBAp01XJ+6qqBUSlOdQpDAXD94/wDPw5v+V5zJ0/x04tx+mUKpaOMtb3VY5jYlHkrhOP7Datp7aopY1sZKywrOPiomN1kkqmBUjKqrPVe+YSlTAAMMds+cR71nxe1u93/vLgzq+P05WmKE1ZLJJ6HkZ+qxMI5KiKcxaVtZ7rUnoCBKDgniPVlWjdLvB31C4B0g+Rr511I84rTuw5VzrwunN+aPkq9HbZ10zmz2OtOYu3py56jeKTMumrCRWgp09ffIrs3SPrMY7bCmZVwmdFwqBvPwDQp54vmRchPL9j+NDbQLeiFe7febdXssldK85sZ2zXXaOtU41jFtU5SObIFfq31ZRdQ4KH6tkwIJQE/e4F1x1LqHT0cZYCt8V53KuSb/ALOCiW1b+Pb7h249lXwP6P8AGS9rk+r55is6bHDVuNi5G3V5LyeKU24Tb4VjpRSovjNvcjVgh5rPntsNaxW9leM8VO6ffV9pcW1xR47W6TqTypP48ZJtY3UhW7Mm8aV00eILmeiqggmToJ1CgPbxddV9eRxVn/pYyw3FSUuVJxcWq8XxZVpTbXYjfUvZ+9kq7rt3pJdQX7PUlu9KzKzLULELsb0ZcErSV2xwu5xfFUPjSb2JM28eU95yEB5g8jOaj2NSY3WHIGs189pIwrzx47o1/rrRy3Zy0lViyqzqYhJKEcPURcxrpd2YW6pVkXKoFXIhy7pPrK11FKWJkQVrUIR4qJ1jNbm412pptVi67HVN7addfaF9mjO8GrVnqHR8qef0dkXuVxXIqN/HuNOUIXuFKE4zjGXDdgorii4yhCsHPeFnNzquMAYAwBgDAICRlIyIbg7lpFhFtRUKiDmReN2TcVTgYxEgWcqJJiocCCIF69RAB+LAItFZJwkkugqmugumRZFZE5VElklCgdNVJQgmIomoQwCUwCICA9QwD0wBgDALM775EaO4t63kdv8AIjaNP09rCIkImKk7xepVKFrzGRnXqcdDs3D9YBIRxIvlSpJF+6OIBgF32zlu8bN3jRZNw1dIJOWzhEwHSXbrplVRWSOXqU6aqZgMUQ7BAcA98AYAwBgDAGAMAYBxL+9OeZNcWtno/leaZtD2rsL3CxNz5T2KGcGbyb6qzKxnNT1ORyn3VW0dJRzI0tMEAf44gsxQMPgGdJK8E6r1qViNzFs7VagpT88pbYQfmSpJrtqvPXth7Pvhhb1e9ha/qa4ZahlStY8nvt2bb4cjIjXZxylxWbcv8HC46VcXHm0YW2Pq9OiKTUW6ELXIZt4LOOZACaYqn7XD1yYv13Ug9U6nWWUEyihh7R9AZ11uYl3LzJ5ua3cyJurcvUl5EtyS2I9oMLqLT+nemMbpXpi3DE0TFtqMLdtUq98pza2zuTbcpzk3KTbdS1cvKLPDnMoqYwmHr9uYfnEe3PsWLKtrca61TUbuXNynJtvzk0oXIzZei28hHw7KGudPeHcOi1izJmMVgut1O4WgpciSzqKVEwiYUhKq3OP1gIUwiOXMrQ9O1d8V2trKok5xSdexcUXSvupp+WpjaD4rdZ+GqlbwEs/QVOU44925O3wNvimrV2HE4Ve1wlCdt1bioSbbwaleQe5YLZWx71Spx9rwNjv3DucrsO4Te19x3k0kmzhxHvWyke5mGZ25V0X/AICbpFyHiJmIOc9xNG0t6VjadkxWRHHglGctkt9XRp1UXWnDVqmxnT/qPxP6/h4ga31nod2Wjy1nIlcu49lq5YbcVCMnCcXbleikpq+oRuK58aLW43u+Rz5yF90Hz4E+z1oGvaY5EsqnV92wsEm+j60+uMc6Z16K3UaNcO3rSOuzZtIp+0FW4JJvGLcyIl8QyZi5mmTfSLx5Y9y7c0uV/l3YzdeC3crwyjRbrU9td7hKddypxzrexb9o9avj6ziYOH19Z0p5eDex4OCyczDUVes3eJy+NqON8RRTUI5NjHcacdxT/T6AQEAEBAQEAEBAeoCA9oCAh2CAhm4DzgP7gDAGAaRfPwsmxTcG7BqjV5Xylg2y/MzlWcacSP5ioVYWczPQDXoJTKKS6qjYpkwEPGTIZLtA4gIpmm4tLec6HHbkXEaf46VGmyzk1LhqdBpISLCSQcRyzWQXOKj7x2KiRHR5B5IKm6l7gqKKG9Ajli9et49t3bslG1Ha2+wz9L07P1jMtaZplqd7Ouy4YQjvk6V7aLcm95cdhtiA2LDsbPXplvMQ0uiZdk/bHMKaxQOZNUpinAqiSySpTEOQ4AchiiAgA5VbnG7BSg6xe4t5eJkYOTPEy4uGRbdJJ02P3VVNeRptMtzdqtFXFmok4SSM57ggkqYO3r6SlE5R75DlN2kOUe8Q3aA5WYso1NMe79BLQ07NyrVk4WdGcuTvTrKrvF1lQMbvqKLLqKqqnMAdoiYRypbjDuKa3N0RR+udUblqGl5jdsSmEPGo7CbRdCiJyMReeLMtY9d1KWtrDS7deONBnapBHKKLJCm4WOHcA3hGEoy414U/MbX+Fye3LhRpaHsajJ65rjtmKS53iSaSBZUHax49oCJDJEatzoiZNMvQqRDd0oAXoAQypVpt3mY0hp+yTTBxHyTaMOi5SOmYDOxMACYglA5RKiIlMUR+DIDVdjMJrz5bDi/eIWQuDCuFWOALLxketJuypiYBOCRVzMm/iCX0CYRAB+Acnb7xZ5XxlLtTLYb64y1WC2brKhUSkqPkKfrerQqTpDxSIxhSKOWylgsD9Pw0lJSYO0O5cKqj3lTdQTL0ApQmvaXqV2m0anR+sAiYqO9moCtHxzFioqsZYFFzs2qTcy5iit2GWFPvfTkbAVw5qGs5AqXjwMO6BHr4frTUjgCd/p3ugLGUL290MbBRMoXaVMgnmsLJWK0xYxX5UKR0AU8UxbNwQ9dfIKvnoIoJETOqziWi6vUwCHUgdfTgULXa1g3OqoxvXq2DkI5JU6y3rC4ruHbpXugs8cq90nfWVAoAPQAKUpQKAAAYBknDW167AhHCJwMPTr1Ds69P1cAzW4tcdp/kHeWDAzJy2pMQ5bvLpP8AhnI1ax5DgqaIbOO6KZ5iXIApopgImIUwqmACEHrO8k6U2jRswaNWLJBNszZN0WjRsiUCJN2zZMqKCCRQ7CppJEApQ+AAwQRGAMAk35wfib8NzJ/h/m/VLX3/AMz4Sc5jF0YAwD8gX3bfmvxk4DeY8TfXLTZf6J9ThoXaNLG1/kbsC9f3lsb2orQ0b7C1rVLlZP44nGLj43qfq6fc+ucomL1A/R74wefZ5TXMrd9K44ccOWbbYO59iGnCUymuNK8iqN7dVrldlrXMIN7DsXUVSqrdy2r8G6cFTXfJKL+CJEgOoJSCBxEe+p/96ZoP/mA6s/6xPKnANv3Nj3szy77XwV3JpPQ9J3fsvcG0NC27SkJE3XXENWteRD+769k6Y7sdzfyFvXdSdbh/XzKHYs2y7iQECoD4Kah3CQE39zQ4Qyeo9D8geZdg2NrixL8jxodIqWv6FdqxdZug1nX7izy8g+2karzEujU7ha5Cyt/V6+8BtKRbRiKjtMqjsEW4HbDgHIr71J/yEv8ApP8A/Z4zUPir/A/P/wCSejn/AOf3/wBt/wCl/wDcTctwr5L8ddNeWhxYs22dyaxqEDVOL+qS2Qs9b6+m7QURo8UirD+xTPTyT+ZdrB6ujHpIqOnK5gSTTMcwFHmui6lp+F0ziXcu9ahbhi261ku4tlK1b7Et7exI6veJ/RXWHU3jl1Dp3T2m52Vm5Gv5vLVuzcdU8i4+PiUeGMEvjSuNqMYpycklU5cvIsqr7Z/mzttl6xhJCsaxo7PfOwpSGbN/V2ELRLfAWemU6pyXqC/s1H1SYu0YKLfvLEE7ATJlEEvEJq3oS1LK6t/VYkXDEgrs2uxQkpRjF02b5Ki2/wBuzdU79e1hqFvp/wBnVdP9QXbeT1DlS0/GjcbrKeRYnavX78OJcb4oWLilKkXS7ST+NwyyH5mebnzZ4u+ZzyEqVT2HKXXWdLnbLTqXpSUioNapjK2DVRYykrrIsYIthfkrV9mWUwZBB2i6kRaGamXIRc459HWur9b0rqjIsWbjniwbjG00uGsrdI7lxOk2pUTq6UrtOE+F/s4+FvX3gNo+q6lhwxNeyrcL1/OjcuK6rdrMcr6XFc5UXcxrc7KlKEoW+NXOBuCNjnlV6x83Sjci7TuPn5dNluNG3vSVqsryL2Btmuz0HU7unYag/g0A1iwn3KOspFOuKSix0I6NYtG6BDoufDVIREOSdKYvV9jUp5nUE7jwrliTpK4moz4o0+In8R8PFsikux7aI0p7QGv+zjqvRWP034P4uHDqnD1W1bU7GJdtzvY7tXlcf6qUE8qPNVlKV65O421K3WDlI143XzEfMh82DlXaOP8A5ftykdJ6hjEp9zEysJJq0OSSoEU8Shw2hs3ZLWMd3mvOJpw+Q9WjYUE1WhniKBEXLhI7o3Hb3UXUnVmqz07p6bsYaTo0+F8C2cc50c41qqKNGqpUbVTc+meC/gl7PPh/jdZeMuNHVeprkralbnFX4/qJJz/S42M5xx7qtpS47t9uM+CUuKEZxtlAb32B51vk82bXtw27yUe7w1/dZpwg3dWLYFx33rSflGDVu7f0madbVh4W+1N65jUxWR9QGOMqVNY7ZcwkcdMbOyOtujrlu9mZPPxpy7ZyuwbS2xbuJTjs2qlNzo959npPRvZc9pXEzdM6b0NaRreLZTpbx7OBkQhKTSvwjiXLmNeSk+GXMVynFFTiqwOv3iNyRqnLvjhqbkVTG6rCH2XWSyTiHXVKuvX7FGPnkBbq2suUCg5NX7TFPGYLd0oLkRBQCgBwDNwaTqVnV9Os6jY2W7sa08jWyUfekmvPQ83/ABE6J1Hw6611HovVWpZeBfcONKiuW5RVyzdS7FctThOnZxUe1GJ3nEeYcz8sHgTtzlO3ho6z36PPC0LTtVlzKFiJ/a94cqR9ZLMkRdMnTmBrzVF3NSKCCyThywjFkkjkUOU5fonCzTxxl93crvMmg1TlL52+298cwOV21oFrcX+t5La9ooepOPcfa2qEqjrmiVvX7mtuYmRjWyjdOWTYuWkKV42BJsyAEjuXQGyPhZ5MGvfLq5DROxeHfJPkXRuNr+t22D2Fwovt5lNp6Qk5OZIZ7XLhr89hfpTOv7LAWA6jl0uqMuvIpuFE/FblMoCoGRPIjzYeCXE3edv4+cjN1M9S3mi8dU+Udje2mEm0Km31W4u5ddx/s+wtmTlCdukxbVCNGEAwI5lnyhylboKHMUogWL44+e95dvJDdczx5aX3YWjttx1RsOwoircotU2/j8e5a/qkRIWKfuVVkL+zj41aKjqvEu5UyL1Vk/NFs3TorcUGjs6AFF1n3iDywbNuig6fDZmy63GbasytO1HvW76S2TTeOm0rInJEhQZ0fbFhg2EXKxq0uoRuSVMklDCZQhvWwTOQ5gMafe0/+5b3L/8AlzQH/wCyonALyXr3iTyydBkCrzV92zsGsaxUrFB21uzTOjth7Q0Dq66KRlfSUrFo27XIpaqyE01VmmyayEKrLKJOFPVzB6yAogBsi5AbT1/ufy99+7e1Fc4O+652BxH3HbqNd6rIJyELYIGV1NZ3cdKRj1AQHunIb6xTARVFUpiKFIoUxQA1V+6pmMPkgcVAEwiBLVyNKUBERApR5GbRN3SgPoDvGEegfCI4Bjp5r6qhfeGvIFKVQ5Sh/pE9AA5gAPGhBTV6AA9A8VMAKb74odB7MA6scAYAwBgDAPy7POoosxd/NL5bWaWfu2FogNuOI2NVcEMsg4rDaq1ltXGiyZhKoRAkGmgZA5B+qUw9ggPZ196h1W5i6/qGNfjxWZ3t25qkY8LXvU2M9iPB3oHC13wh6P1nSrvI1DF0x0klxQm53rsrsZpUaauudJJ1TbTT7NdiUJa2xAIqm2c90OneRddAMAfD3VipCHX6c428nEk6qqr5v6G7IaT1HYjwXI27iXbGfwSSZ9DGTo9ho9QPj6HQEPi9IK+jJV/HW6S9ZP8At+sP+6xL0x/qeSlelHaZkV48xk1A6GA6iIdOvZ1D+E7DB8GSsq1F1Utvvlu5ouoZVt2r1h8D8rj/AFLOzOjJmYFXu+pMyiY3dUXXE4gHUehu4gmqb0Z9qxr9ix3n5qf1NV6t4Q6nqjklyrSbdHKVaeTZFM8YvTyOtadcnyj/ANp2qYZM2jKQQQUQGMbtpePkxbRKQnMsLp24Zk8VYRAfDJ3ClKAmE0ZeuPU8i1CMeDDt8TabrxNwkqyfkSexeV18lLnT3hVZ6E0bPzJ31k9R5nJtwuRi1yoRyLV1wsxbb45yhHjm/wDBcKik5N/sW8dXM694+6KeWgVhszvTesXNiFx3vHGdXpMGrLiv3vreMMgdTvde3vdc3/pznLT7Ern/ABHZhX3eFV9Z5BdZQxrXV+q28On6SOpZKhTdwK9NRp5uGlC8mZhxsYAwDXB5lut31t1HWLkxbqOg13ZlHEummQTijA2RsnGu3xgDt8JpJN2ffH0FTOYw9AKI4Ko0rtOe/benaDtOnTFQu8AWViZVNEFlGpyMpVsq2VI4avGEmUgrNnLdYgGKId4o9oGAQEQyxk2rd+27N1NwfkdPWfW0jUcvSM+Go4EoxyrdaVSkmmqNNPemn7vkLe691DqrWlXiaNXKmRCFhSLEbqvnSjx+uq5XO5cuXrsRSFw4XWWMIiBSlD0AAAHTIx7du1bVq2nReXa/fZRquZk6pmzz8xx59yleFKMUkqJKK2JJL+pctGq0MoAYIhiQfT0MBz/L6BUEMv0ofNcaEtc1nXLVRV2MFBAuYwqHWNGs1FRN17TCoqmY3X5euKdhQ0jHPeNbabkjYHW0Z48dBrTq8rOS7FBJRVnEQkQ7KYjZNQAbgZzIyLVuTr2fXMIAPdHCJSqz+0GCY6dgUa1UWyqTQi5nDt08W9YkJN4YpUzO3y3dIAn7hAKUpSlTTKHQoB29ZezcVv4qoi6Lbar1IoFXKbr07enb9gR+fIKKk7r9guWw7FD06lw0hOWCwPkY+KjY5uo6eu3Dg4FKRBukUTmEvXqJh6EIUBMYQKAjggvNuHhJvnVD6alLlrqedjLHYru7DBNlLLBerx8egyjWftSHK7SQ9TQIYxgWBI3jKqCAdBDJ2FWymwxE/JSabvBTSjHpVhMJQImgv4om69ADwu53xER+TrgpMtNH8NOSe55JkjXqHYY6CXVIDi1Wpq6rVaaI94PEXF/JJJLPwTL2+GzScKm+AvbkUJN4tU8rzSTLWTKp2+Sn5e7Ac717eYZ6aLM2eLoETUYxcQ6K+jjRCIkDp6wmo4VHqYTkAQIWRWm4shK+T7CqPRViN0Ok2gm6lTk6Sgs6IXr6BXZ2BqkqYPj8MnzYFV5C7uuPKv1BVnjd9dbdZb0KBiKezG7dtVopY5RARI59UXkJVRI3ToIJukRH48A2RVSoViiwbKtU+CjK5Ax5O40i4lqm1apiIAB1TFIHeWcK90BOqcTKKD2mMI9uCCo8AYAwCTfnB+Jvw3Mn+H+b9Utff/M+EnOYxdGAMA/H393I4O8bPMG8xYnH7lXR32wdVjonZ93Gvx1uttJcflJW3tTRh3vtqlTUDNeG2TlVwFHx/CU731ij0DoB+jJxX9308qfhfvqg8mOPfHmcqO49Yrzzmk2WS3Tuq3NIhzZavN02WcGr1qv0vXpBRWvWJ2iT1lssCJ1AVIBVSJnKBxW++p/96ZoP/mA6s/6xPKnAO2qd8jryi9raSSq1p4EcZ620s1FjiyduoGt63rK8RCrmDROrOQ98pjSDsMNJNFTiuCxXHhicv8KU5O8UQOFz3W+83fSfnnSOg9G3ST2BoHYcPyR17sKcjX/SrW7W2q4K5WrVW130U0cOIZ0+Vt1aiW8c7J31GqFjcpIKgi6XKqB+pfgHIr71J/yEv+k//wBnjNQ+Kv8AA/P/AOSejn/5/f8A23/pf/cSmuI/u6mn9/cf9C74tvJDZUWntrV9K2HLVOuU6rtjxa1rgWUwtFR0/JvZUp0mZ3YkKqqxMJwL1EoZRpHhzg5+n4+feybq51qM3FRjs4knRN13V8hkeIvtp9VdI9Y6x0lpui6fP/btQyMaF27dvPiVm7K2pyhHg2yUatKap5TpO4c8FOOHBShvKLoCnqxRptRo5uF0sL0s5fbw9YJKJM3NmsAtmhFEmZVlBQZtEGkc2OsqZFumZVQTbJ0fQtN0LHePp8OHi/uk3WUmu2T/ANEqJbaJVOkXiV4r9beLGrx1frHK5rtJqzZtrgsWIydXG1bq6VouKcnO5NKPHOXCqcht/aNXvvITNu9bN3bceYuuVRQdIpuERVbQtXct1BSVKcgqIOEiKEHp1KcoGDoIAOajvpS8S0pJNfq4f+mJ6MaPcuWvYelO1KUZ/wDx7JVU2nR37qaquxptPyptPYdkPMuPsUtxA5WRVQFQLZJ8bd5x9XFEBFYLE81haG0IKQFTWMKgSSiXd6EOPX4B9Gbj1iN2ekZULH/GeNdUf/E4Sp6zzV8Nr2BjeIugZGqpPTLetYMrye7lRybTudq/wT7V7qOVr3XKfq7XcfK+sPHbNO5TWttczNeZqKJFfOq7XbNYWdsWaEMcFVG7WQskOC3dKIAKifUQ7OuqvCy5aWXl2pNc6VuDS7aJyUvQ5Rr7qPQH2+sPPudPdOZ9qM3plrMyoXJJPhVy5bsyspvcnKNq9w1e1RlTtNjfvLNhqzDgbSK9MHaqWSw8iaW4qDM5EVXhF4Sn39Wbl25TmBVBuyiXxmqqxAESmfppj2K5yPxLuWY6BC3OnMlkR4fdUZVfoqq+enaaT9h3D1G94v5GZi8SwrOjX+e6tJxndsKEH2Nu4ozUX/7bl/iX+8gSDnIbyxNMKzSblFGctO2pyBRdesFMSDcbHsTNBRJFwQgItnj5i4cJ+H1TUIqCoCPfHPodAQnDpexx1XFK417nHL/Xf6zh/tfZWLlePOrLFcZO1ZxITao/jxxbTabW9xTUXXanFxe41x+98wVhT8vjjhthrWlbfRtEc8tLbH2jCFVbA2/JI1N2jV2rqQQfd9ouzfWSwMoftTWMVWXJ1TFIVRLzM6ym/wB3tT7XzI4xRBeL/K218c1toRtB2HQuRGp4Kq3WWUpciWPtDQYaPtJHEA9i7jAuSEMqPUxUVu8QeuAc8HHnYfPjiz7wXpvy89weYPuLl9pG8cN7dvWYbbMo+tKkJrCv+kVhFsyNqjCFXISEc0RFwksR0mdQVzkOUSdQMBH7w07rDcXvbuhUNo0mv3tprryyWG06dH2VglKRsNsGr7X2e0rVqTjnIHZOJWvDMrLsTqkU9VeAm4TAq6KShAKc95i0RqPbXMHyEW+xKNCWlvsDzCKXoi8N5FATJWzUewNoaMJaaNPlSMmMnCPieKUiaomFuDtz4Qk9YW74GTPvV+vqQPkf7sTTqsC2Q1de+OUprtqzimTNnTHgbcp9CKpW2jZFJvDlTp1pfxxCIFTKVo6OmAAQRDALYe8zST6Z931cy8o5UeyUq+4hSUi8WEBWdvn1gqjp25VEoFKKi7hUxjdAAOo4BvsovFfjrC8K4jidHaxo1e45vtFk1vJ68CGjhqQ06aqAR037WaviKISTh6i5VcvHjwyjhy5MdwsqdUxlBA5dfdvLxdLZ7uFzCgbSg/Rg9YzHOCj63UeJvCN3VLf6JrmyXy8UZ0UEFmBdibCnkjGbdUQdJrFEfFKqAAY1+Q15MH+mB5YeiN+//wBKPM047flfP7kZ/om448kP0eairv5L7ivFY9ZrlU/JqR9nuZz2T68/N4xvHfOFVOzv9AAm22/L8/0BPP58lCu/6XHMDln+kab3LNe2OXW2v0rzNN9g1iSY+zaW89kRPseMlfaHiu0u6fxVUUzdQ7uAd4WAMAYAwBgHGH7x9wUslb2pE87KLDLyNCv0XXaNu07FAyv5IXmBbpwlMt0mRIn8BBW+BTbRSjg31EJBgiVQwGeJhmlPEvQbtvKjr1iNceaUbtP8ZLZGT80lSNexpV3o9QvYd8WcDP0O54RavdUNXxbly/g8TpzrFxud6zCu+5ZucV1R3yt3JtKlqRy3qfUAeztD4vkzVND0AuR4F5yBM6KHXqH+HxZc5fnMKWRFPajyF+kHTt/X/ayrlPzlp5cDyO9KIfV6D8wfD2/r5WoMtXMmLXxUbAPKy4JWrn7zBotJNHOjai19IxV+3hYgIckfFUiMflXLXfWu6ZP29fnTYYxkiHVQCKLuO74bZQQ5V0zo09a1CGFBP9NFqd6XkgnWnuza4V773JmgvHXxLxPC7ovJ6kv3I/73et3LGn2v8p5U4uPNpv5eNGXNuS3VULdeK5E/TgRRSbpJIIJJooIJkRRRSIVNJJJMoETSTTIAFImmQoAAAAAAB0zsckkqLceKUpSnJzm25N1be9t9rPTBAwBgEBKRcdNxr+Hl2TeRipRm5j5Fg7SKs1esniJ0HTVwkcBKoiuioJTAPpAcA0e8m+Cl8ozmRsWpYx9dqMoKrkkQyAz21VxIe8oZmqyKAuZuPbl7EnCAHXAgdFSdQ8Q73S6p+XeamLIg9jXbls9YuGb1A5iLtHCajZ0ioUehiKoLFTVTOU3YICUBDISS3FdalsH8k/8AreEKyQdezvG6B8Xp69BySiS8he3SXE3kLyTlmzKk1SUSriq5E5C8T6TqHp0Y3EweKqeVXSAZNZMnaDdmVdc33vTtyC3Q6AKT5ZHHevahjNdzce/l7UmBnkzsxg4NFWN7LuEy+ODUg+tskoJucoA3ZrJrFIUO8IioY5xkJ0MTbz5NxpB0qpTNzNSNDnMZNtZ6oqDlIgj2EO9iJXw1zFD7oG6fX4gwVcSaJZU/JYSB0mped2lFkU4CqzqdTMDpYgGARISRmpVRJuYwdfrC1U6fFgp2G0fj/wARdFcamhw1pUU0590h6vJXSdVCZt0il92ieWXTIDFof7pBom3QN0DqQRDrggyYwCBCMjQW9YCPYg4697xwaN/G73p6+L4ff6/TgEdgDAGAMAYAwBgDAJN+cH4m/Dcyf4f5v1S19/8AM+EnOYxdGAMA4x/In9295d+Vrz1nOT27N0ccL3rhrqzYutqxG6tl9mvrtMHtsrBqxkxPRFt1pU4KuFRj4MDroN5SVEiywpkUUKTxTgdnGAcfXvDPu83LXzYuWuouSXG3bvHSoRdQ46Qej7TVt4Tmy6s/Sf1bZezb7Gz8BJULWWzm8wzmG+zlW66DhKPOzPHlMUzkHIg3A1+q+7h+8ZbLj/0a7x84hhLaYn2asJcYBXmjzp2pHuK+ZkqgWO/Rrb9d1Oq2RmqIERM0dP2qAImMPU3dBMwHRB5MfkHcdPKFjrLeI22SO9uTt/gE6xb92z8C2rLODqh3LCSfUfWlRQkJk1YrklLxrdw+Xcvnz+RVaoidVJFMjcgG+fANG/nSeWJu3zHGXHNTSl11ZVJHTTra5J1rtKTtsOylWWxktci0cRL+p0+6L+tRi9DMVRFZsmRQjoDAqApiU/Butel83qSOM8KdqErLuV43JJqfBucYy3cG6nbv2Ha32YPHjpbwTva1HqjF1DIx9TjicEsWNmcoSxnk1U43r1hUmsiqkptpwpwviqto/FDUExx+4y6D0dYZSMnJ7UupaJr6ZmIUHRYiSk6rXWEQ9exgPkW7z1Fw4amMl4qaagkEO8Uo9QDlOlYc9P0zHwbjUp2bMINrc3GKTar2bDQPiB1Hj9Ydc6v1ViW52sXUdSyMmEJ0c4RvXZXIxlw1XElKjo2q7mZA59A4gc4Fh8nLkVL+bi055tth6WJptPdtb2otXl5i8l2aWPhIKNaLRSUGnQlKqo8XkY/uFOM2QgIn8QfrB4Q65udHajPq9a+rln9FzlOlZceyKVKcPDvXe3eg7q4ftJ9GY/s4S8IJ4epvqd6bcxlcULH6Ws70pqbuc9XUlGW7kN8SpufEuj05CKEOmoQp0zlMQ5DlAxDkMAlMQ5TAJTFMUeggPYIZsY6VptOq2NHJ1yD8g3kdqbkG+5DeWnvKD1qLmclp+Gp0vYp3X1j16acVdKv6zULJX4WXiZ6lAk4FqkxkSte4xEG65nYAY5tUah0DqOJqL1Lpm/G03JtRbcHCu+MWk049nDJLZsdT0H6O9rvovqHoyHRXjppN7UIRtQtyv27cMiGRy0lG7et3bkJ27+zid21KTc6zirdaFNMfI78w/mDtSr3PzHOVMVKVGrgmyKzgbTKXq5+xDOElpOGqEYetQFBpXtoGpPHfk9YUFQCqKtVzEAMtLofqLWcuF7qXLjKzDsi3KVO1RXDGEa9r2vyp0M657VXg14a9PZGl+CHT121qWRWTldtxs2eOjUJ3Zc27kX+Cr4bbcIpNqM48TOrrXev6jqmh07WdAhWtcpNCrcNUqrBsgEG8ZBQLBCOjmpTHEyixyNm5e+qcTKKnETnMYxhEdrY+PZxbEMbHio2LcVGKXYkqJHn3rGr6jr+q5Ot6vdlf1TLvzvXbkt87lyTlKT91t7FsS2JJFGchtAan5UaR2Zx33nU2t31Nt2qSFOu1adKrtRexb4CKJOmEgzURfRE3Dv0EXse+bKJumL5ui4RORVIhgvHzTmz1L5afnw+WhFKaX8uLm3xY5JcSI5RcutdW8/K5fGV403HrO3jokDWbHqyAeHmogfWuqpRlI2NSVIUWcQ28RcTgXu4S+VL5ganmSQXmreZdyc4/XLeFV0rYtG1HS3GLXlgZa7hKhMe1/ZRV73bm9Um3Joc1nlF1EFoh85WdOyh7SFugRM4GWkx5eO5ZDzy6r5mqNp1kXRMFwTccZHdRVl7UG2lNgrbCsloLKN4MtOPTjU0IqYSAXJp0j31gpiep9wAVEDw80zy6dx85N+eVftPV9t1nWa/wb5uULkttVnfZO0sJmx0ip2ygWR5D6+b16pWVlJ2pynTlUkkZJxFtO8sUxnIAAhgFf+dXwY2x5j/lz7s4i6Rseu6psrY01qeSgZvasrZYSjtkqJtimXmXTl5Oo1O7z7ZRxDV5wRt4MY4A7oyZDimQxlSAWt82/wAtvc/PvytUeDepbhrCrbPIrx/A9n2LJ2uNoYI6sla+5sihXtaqFqsJlXTSMWFiQY4AWU7hVTIFMY5AMKNi8GfeEarp6Y4H6E5rcNtg8UZyryOrYLlZv+t7diudtD01MJvoNSsSbqmt5vWd3utYorgsazsYtm8nKuEyuVF4xc3jpAbR+NflrUbhx5ZMp5eWiZs0gCuk9uUgb9c/EaKWzZu2oKyhYLzZU4tCSWjI19aLEY5Grcjo0fGJJN0/GFEDHAkPkqcGNseXB5c+k+Iu7rHru17K1zNbYkp6b1VK2Wbo7lK97Yud5iE4iTt1TpE+5Ubw1hbkc+NGNwI6KoQgqEKVU4Fqebflubt5Keah5YfOKj23VkRqjhZ+lf8ASpXbXMW1lsKe/LeN9WhP0fxcRSputy3hOBH1r2jLRPhE+sn4w/VwDdbgDAGAMAYBTVyplT2JVLDRb3XYe3U22RL2CstZsDBvKQs3DyKJm72PkWDoiiDls4SOICUwdg9odBABy1fsWcmzLHyIxnYnFqUWqpp700Z+l6pqOiajY1fSL93G1TGuRuWrtuThO3OLrGUZKjTT7UciXOr3bO2tJWavvA61x0xAPFlnv6BdlTQxsxCiqYDmYUTYj4VI+WjUzGMCDWcFsuimAFM/XHpmntd8M7sbjyNAmpWnt5M3RrzQm9jXkU6Nd5npH4U+3Lp+TiWtG8X8edrPjFR/3HFt8cLlP8sjGjSUJv8Aynj8UZParMDnm2h5fvOTTrxyz2LxM31C+rKnTPIsdcWC1QKvcOKYqNbHT2k/AOkhMHYZNyYBDp8ecAydB1vDfDk4eRGnbwSkv/NFOL9J270XxZ8Lep7au6J1Do1/iVVF5Vq1cVfLavO3ci/M4IoCn8PeV+w5BOMpHGLkFZn6qgJEQi9O7AUKBzCAACrhWASati9R7TKKEKUO0RAMt2NN1a/LgsY2ROXmtz/pQztT646A0ey8jVtd0bHtJVrPNxl6Erjb95Nm4niH7uXzF3VLRczyMUjeMOtTGRcv0ZN3FW3bMozE3U7SHqMK+eQ0A5VKHdFaWepqNxEDeqLdO7nMdI8PtczpKeoUxMbtrSVx+5FNpe7J7O6zrd4ie2L4YdK49zG6PdzX9cVVHgU7OHF+Wd+cYzuJd2zBqW7mx3naFxK4e6F4Tanj9P6Ap6VaryKpZCdmXqpZG3XafFEiDiy3OwHSScTUw4IQCl+qm3bJACTdJFEpUw3JpGj4GiYiw8CHDDe29spPvSfa/UtySWw80PEPxI6t8UeoJdR9XZHOy6cNu3FcNmxbrVWrFurUILe9rlJ/GnKUm5PJ/PqHBBgDAGAMAYBQlq1fra8iJrnQKbalBAA8awVqHlnAAX7UCuHrNZcoB8hgwKtFIxHG/j/AuivojSur2Lwhu+m5SpFdFZM/p7ySikecyZg+AS9BDBNWXkRRRbJJoN0kkEESFTSRRTKkkkmUOhSJpkApCEKAdAAAAAwQeuAMA/giAekQD58A8zLok+2VTL85y/t5FewUZCHlY9P7Z0l8wG65JNGQKthjyde6umPT5f2OwcirJUWQB7SzDr0XTD5ymH4fkyNpPD2MhTXBqX/Lt/mEDB8XyZO0UifSd0jzD0MdIf3Jh/ZxWu4ii8pNEbLGqh2KdPm9GKkUIsJuPH/LBiooexJRkfp0WL9kP28VIoRZF0VPtFCm+YcVQPXJBJvzg/E34bmT/D/N+qWvv/mfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAOoB6R6YBDKu0EQ+uoHZ8uQ3QlRbJYtPskuv1gN0/xyh+3gq4GSV1c2yAD3SEHp6BE/X9YcecngXaU262MQneAPCJ0/wAYA/VEcpb7GOFIpxzsIp+v8OQB+LvgIfr+nJ8/YTu9wp15ezG691yn8Pp/1BxuI4qFIPro8OI+Gsj84mH9vKauuwp4mSI1slxH+VNwAR9PeEfsfZyKirP4NpkunTximEfhKHp+bqIZVxLc9pB4GtEmbsABN8v6mU8VV5wRLewzBjB0IPb06dgftfDjia2gqpjJTS3dASqfZ9AfZ6YqwVgxRl1u6Jin7fhEw/rfLirBWLCLkTCAmEwfD29RDt9OTXt7QVswjV0wATmN19I+kenyY29gKkSIJA6CPX/AO305WlQglf5wfib8NzK/h/m/VLX3/wAz4Sc5jF0YAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAhVXIpgP1B7Pi7cpcqbypRqSF7MCkBugqB0+IvT5vRlHFLs3lSiih5GzKkE311x9PoAcVKtxSji0qmEwAVyb09olN9jr6MqUtte0mpT7uxKCA94hw/denJqQUk+mPE697vh8wj8foyHLZsIbKWcOElRHqCw9fT9cfmynftKXuIQEQMP8ABpn6/GJjG6en4/kyOIhnmaMdq/ad8OvoAAHp09OG2Qf0lXklxASgp0EfiH4fg9GR/qCdM6HJKGL1Kp07PjwCsWOuXRhL3ynH0dQ6dv2enTJ3bAVqw1l9qJ0R+n6MeYFYM9dNkunVEnwen4P8AyaekFTtac1Q6fwZA6dPgDrkpOoKgbw7ZDp0IXs+QP2umVcNXt3EEzIimn07pQDp8gYUUvdB65UBgEm/OD8TfhuZP8P836pa+/8AmfCTnMYujAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwBgDAGAMAYAwDyP4vQe73fR8vXKXX3iVTtJM/9e8JT1bwPWOzuesd/wAH7Yvf7/h/X69zr06fD0+DKY8PEubXg82/zbyt14fi0r6ikHPt/t7/ALF69vXr67l39n+J9Eo+3+R6ynXXtbqPe9h/J/K/i+XJX6Sv3n0SP3HyPWU069o/W6+yOnb6PW+nT4enTJf6L8WvzR9v8mvvlLO/H6j3/ZP0etfT0+XIf6P8X6I+3+T6ynF/SPX2V6f86/Ux+y/FpT5JH2/yPWeSfqveDv8Asz0/516Pkx+z/E+iPtu3gr75P2fqXUP+Kvp9Z6dfl+jH7Om3mfRH2/yPWVYy9U7P+Jvg9PrPT/Drkr9F2831ELn1/wAPWVYz8DoHd9i9f/e8n9l+LT5o+2rs4PWVI373QO57E/rf7Hw5K/R/i0+aR+4+RT3yeN/XeoeF7D+Tr65+x8GF+g7ebX5pH7j5HrJkX250Du+xOnwdPXP/AA5cX6Ls5v0SPt/kes+/7wf2N/Xcfs/xfoj7f5HrH94P7G/ruP2f4v0R9v8AI9Y/vB/Y39dx+z/F+iPt/kesf3g/sb+u4/Z/i/RH2/yPWP7wf2N/Xcfs/wAX6I+3+R6x/eD+xv67j9n+L9Efb/I9ZKf/AK/7e/8AsvX2R/n/AHunrn+x6dfpzJ/afpPvacz5PdLX2/P/AMP7PP5T/9k="><h1>Microsoft Word 2016 Audit Report</h1><p>Generated by the <i>Word2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Word 2016 Security Technical Implementation Guide V1R1 2016-11-14.</p></div><p>This report was generated at 04/03/2019 04:11:36 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.5</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.110</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#Recommandations">Recommandations</a><ul><li><a href="#RecommandationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="Recommandations"><span class="failed">Recommandations</span><a href="#" class="totop">^</a></h1><p></p><section><h1 id="RecommandationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO110</td> <td>Blocking as default file block opening behavior must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO111</td> <td>The Internet Explorer Bind to Object functionality must be enabled.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO117</td> <td>Saved from URL mark to assure Internet zone processing must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO119</td> <td>Configuration for file validation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO121</td> <td>Files from the Internet zone must be opened in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO127</td> <td>Add-ins to Office applications must be signed by a Trusted Publisher.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO131</td> <td>Trust Bar Notifications for unsigned application add-ins must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO133</td> <td>All automatic loading from trusted locations must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO134</td> <td>Disallowance of trusted locations on the network must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO139</td> <td>The Save commands default file format must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO142</td> <td>Force encrypted macros to be scanned in open XML documents must be determined and configured.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO146</td> <td>Trust access for VBA must be disallowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO288</td> <td>Files in unsafe locations must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292_b</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO293</td> <td>Attachments opened from Outlook must be in Protected View.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO302</td> <td>The automatically update links feature must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO304</td> <td>Warning Bar settings for VBA macros must be configured.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO328</td> <td>Online translation dictionaries must not be used.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO333</td> <td>Word 2 and earlier binary documents and templates must be blocked for open/save.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO334</td> <td>Word 2000 binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO336</td> <td>Word 6.0 binary documents and templates must be configured for block open/save actions.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO337</td> <td>Word 95 binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO338</td> <td>Word 97 binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO339</td> <td>Word XP binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO600</td> <td>Macros must be blocked from running in Office files from the Internet.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO605</td> <td>Files on local Intranet UNC must be opened in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Office2016Word.html b/Samples/Outdated/Office2016Word.html
new file mode 100644
index 0000000..5b7fe62
--- /dev/null
+++ b/Samples/Outdated/Office2016Word.html
@@ -0,0 +1 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Microsoft Word 2016 Audit Report [04/03/2019 04:11:12]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0; 	padding: 20px 20px; }  .header { 	background-color: #9e9e9e; 	padding: 35px 20px; 	color: #ffffff; }  .header h1 { 	margin: 0; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  table { 	border-collapse: collapse;     font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left;     vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; 	border: 1px solid #a7a7a7; }  table.audit-info th { 	background-color: #cacaca; 	color: white; 	text-transform: uppercase; 	border-bottom: 1px solid #a7a7a7; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: right; 	white-space: nowrap;     width: 40px; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center;     width: 70px; }  .passed, .green, .failed, .red, .green, .red, .orange { 	color: #fff; }  .passed, .green { 	background-color: #33cc33; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }</style></head><body><div class="header"><img alt="FB-Pro GmbH" src="data:image/jpeg;base64,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"><h1>Microsoft Word 2016 Audit Report</h1><p>Generated by the <i>Word2016Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on DISA Microsoft Word 2016 Security Technical Implementation Guide V1R1 2016-11-14.</p></div><p>This report was generated at 04/03/2019 04:11:12 on DESKTOP-O8FO61D.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-O8FO61D</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>109.5</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.120</td></tr></tbody></table><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#Recommandations">Recommandations</a><ul><li><a href="#RecommandationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li></ul></li></ul><section><h1 id="Recommandations"><span class="failed">Recommandations</span><a href="#" class="totop">^</a></h1><p></p><section><h1 id="RecommandationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>DTOO104</td> <td>Disabling of user name and password syntax from being used in URLs must be enforced.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO110</td> <td>Blocking as default file block opening behavior must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO111</td> <td>The Internet Explorer Bind to Object functionality must be enabled.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO117</td> <td>Saved from URL mark to assure Internet zone processing must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO119</td> <td>Configuration for file validation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO121</td> <td>Files from the Internet zone must be opened in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO123</td> <td>Navigation to URLs embedded in Office products must be blocked.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO124</td> <td>Scripted Window Security must be enforced.</td> <td>Registry value: 0. Differs from allowed value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO126</td> <td>Add-on Management functionality must be allowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO127</td> <td>Add-ins to Office applications must be signed by a Trusted Publisher.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO129</td> <td>Links that invoke instances of Internet Explorer from within an Office product must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO131</td> <td>Trust Bar Notifications for unsigned application add-ins must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO132</td> <td>File Downloads must be configured for proper restrictions.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO133</td> <td>All automatic loading from trusted locations must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO134</td> <td>Disallowance of trusted locations on the network must be enforced.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO139</td> <td>The Save commands default file format must be configured.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO142</td> <td>Force encrypted macros to be scanned in open XML documents must be determined and configured.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO146</td> <td>Trust access for VBA must be disallowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO209</td> <td>Protection from zone elevation must be enforced.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO211</td> <td>ActiveX Installs must be configured for proper restriction.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO288</td> <td>Files in unsafe locations must be opened in Protected View.</td> <td>Compliant. Registry value not set.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO292_b</td> <td>Document behavior if file validation fails must be set.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO293</td> <td>Attachments opened from Outlook must be in Protected View.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>DTOO302</td> <td>The automatically update links feature must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO304</td> <td>Warning Bar settings for VBA macros must be configured.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO328</td> <td>Online translation dictionaries must not be used.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO333</td> <td>Word 2 and earlier binary documents and templates must be blocked for open/save.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO334</td> <td>Word 2000 binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO336</td> <td>Word 6.0 binary documents and templates must be configured for block open/save actions.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO337</td> <td>Word 95 binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO338</td> <td>Word 97 binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO339</td> <td>Word XP binary documents and templates must be configured to edit in protected view.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO600</td> <td>Macros must be blocked from running in Office files from the Internet.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>DTOO605</td> <td>Files on local Intranet UNC must be opened in Protected View.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section></body></html> 
diff --git a/Samples/Outdated/Windows10.html b/Samples/Outdated/Windows10.html
new file mode 100644
index 0000000..74d72e7
--- /dev/null
+++ b/Samples/Outdated/Windows10.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>Windows 10 Report [05/14/2019 08:14:34]</title><style>body { 	font-family: Cambria, Georgia, serif; 	margin: 0;  	color: default; 	background-color: default; }  .content { 	padding: 30px 40px; }  a { 	color: default; }  a:visited { 	color: default; }  .header { 	background-color: #c6c9cc; }  .header svg { 	margin-left: 3px; 	opacity: 0.8; }  .header svg g path:nth-child(1), /*F*/ .header svg g path:nth-child(2), /*B*/ .header svg g path:nth-child(6), /*G*/ .header svg g path:nth-child(7), /*m*/ .header svg g path:nth-child(8), /*b*/ .header svg g path:nth-child(9)  /*H*/{ 	fill: black; }  .header h1 { 	margin: 0; }  h1, h2, h3, h4, h5, h6 { 	font-family: 'Calibri', 'Segoe UI', sans-serif; }  li a { 	display: block; }  li a:hover { 	background-color: #f2f2f2; }  .gauge { 	height: 10px; 	background: #a7a7a7; 	border-radius: 5px; 	overflow: hidden; }  .gauge .gauge-meter { 	height: 100%; 	float: left; }  .gauge-info { 	margin: 0; 	padding: 20px 0; }  .gauge-info .gauge-info-item { 	display: table-cell; 	width: 1%; 	text-align: center; 	line-height: 30px; }  .gauge-info .gauge-info-item span.auditstatus { 	display: inline; }  table { 	border-collapse: collapse; 	font-family: Arial, sans-serif; }  th, td { 	padding: 5px 10px; 	text-align: left; 	vertical-align: top; }  /* audit-info table */ table.audit-info { 	width: 100%; }  table.audit-info th, table.audit-info td { 	border: 1px solid #d2d2d2; }  table.audit-info th { 	border-bottom-width: 2px; }  table.audit-info tr:nth-child(even) { 	background-color: #efefef; }  /* First column in an audit-info table */ table.audit-info th:nth-child(1), table.audit-info td:nth-child(1) { 	text-align: left; 	white-space: nowrap; 	width: 40px; }  /* First column in an audit-info table */ table.audit-info th:nth-child(2), table.audit-info td:nth-child(2) { 	text-align: left; 	width: 30%; }  /* Last column in an audit-info table */ table.audit-info th:last-child, table.audit-info td:last-child { 	text-align: center; 	width: 70px; }  .passed, .green, .failed, .red { 	color: #fff; }  .warning, .orange  { 	color: #000; }  .passed, .green { 	background-color: #33cca6; }  .failed, .red { 	background-color: #cc0000; }  .warning, .orange { 	background-color: #ff9933; }  h1 span.passed, h1 span.failed, h1 span.warning, h2 span.passed, h2 span.failed, h2 span.warning, h3 span.passed, h3 span.failed, h3 span.warning { 	padding: 5px 10px; 	border-radius: 8px; }  span.auditstatus { 	display: block; 	padding: 5px 10px; 	border-radius: 8px; 	font-weight: bold; 	margin: auto; }  a.totop { 	display: inline-block; 	width: 30px; 	height: 30px; 	text-align: center; 	text-decoration: none; 	margin: 0 15px; 	color: #a7a7a7; 	background-color: #eeeeee; 	border-radius: 8px; 	font-weight: bold; }  a.totop:hover { 	background-color: #dddddd;; 	color: blue; }  #host-information { 	float: left; }  /* Overall compliance donut chart */  .card { 	float: right; 	margin: 0 100px 0 0; 	width: 250px; }  .donut-chart { 	position: relative; 	border-radius: 50%; 	overflow: hidden; }  .donut-chart.chart { 	width: 200px;  	height: 200px; 	background: #c6c9cc; }  .donut-chart .slice { 	position: absolute; 	top: 0; 	left: 0; 	width: 100%; 	height: 100%; }  .donut-chart .chart-center { 	position: absolute; 	border-radius: 50%; 	top: 25px; 	left: 25px; 	width: 150px; 	height: 150px; 	background: white; }  .donut-chart .chart-center span { 	display: block; 	text-align: center; 	font-size: 40px; 	line-height: 150px; 	color: black; }.donut-chart.chart .slice.one {clip: rect(0 200px 100px 0); -webkit-transform: rotate(164.268deg); transform: rotate(164.268deg);}.donut-chart.chart .slice.two {clip: rect(0 100px 200px 0); -webkit-transform: rotate(0deg); transform: rotate(0deg);}.donut-chart.chart .chart-center span:after {content: "20.63 %";}</style></head><body><div class="header content"><svg width="169" height="23" viewBox="0 0 169 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xml:space="preserve" xmlns:serif="http://www.serif.com/" style="fill-rule:evenodd;clip-rule:evenodd;stroke-linejoin:round;stroke-miterlimit:1.41421;"><rect id="Artboard1" x="-8.32" y="-4.677" width="186.148" height="32.667" style="fill:none;"/><g><path d="M12.652,1.882c0,0.349 -0.014,0.642 -0.043,0.88c-0.03,0.238 -0.076,0.427 -0.14,0.567c-0.064,0.139 -0.136,0.244 -0.218,0.313c-0.081,0.07 -0.174,0.105 -0.279,0.105l-7.371,0l0,6.064l6.918,0c0.105,0 0.198,0.03 0.279,0.088c0.082,0.058 0.154,0.156 0.218,0.296c0.064,0.139 0.11,0.325 0.139,0.558c0.029,0.232 0.044,0.522 0.044,0.871c0,0.348 -0.015,0.639 -0.044,0.871c-0.029,0.233 -0.075,0.424 -0.139,0.575c-0.064,0.151 -0.136,0.259 -0.218,0.323c-0.081,0.064 -0.174,0.096 -0.279,0.096l-6.918,0l0,8.399c0,0.128 -0.035,0.239 -0.105,0.332c-0.07,0.093 -0.194,0.171 -0.374,0.235c-0.181,0.064 -0.416,0.113 -0.706,0.148c-0.291,0.035 -0.663,0.052 -1.116,0.052c-0.441,0 -0.81,-0.017 -1.106,-0.052c-0.297,-0.035 -0.532,-0.084 -0.706,-0.148c-0.174,-0.064 -0.299,-0.142 -0.375,-0.235c-0.075,-0.093 -0.113,-0.204 -0.113,-0.332l0,-20.442c0,-0.511 0.131,-0.88 0.392,-1.106c0.262,-0.227 0.584,-0.34 0.967,-0.34l10.613,0c0.105,0 0.198,0.032 0.279,0.096c0.082,0.064 0.154,0.168 0.218,0.314c0.064,0.145 0.11,0.339 0.14,0.583c0.029,0.244 0.043,0.541 0.043,0.889Z" style="fill-rule:nonzero;"/><path d="M32.711,15.789c0,0.802 -0.111,1.528 -0.331,2.178c-0.221,0.651 -0.526,1.226 -0.915,1.726c-0.39,0.499 -0.854,0.929 -1.394,1.289c-0.541,0.36 -1.136,0.657 -1.787,0.889c-0.65,0.232 -1.345,0.404 -2.082,0.514c-0.738,0.111 -1.56,0.166 -2.466,0.166l-5.995,0c-0.384,0 -0.706,-0.114 -0.967,-0.34c-0.262,-0.227 -0.392,-0.596 -0.392,-1.107l0,-19.658c0,-0.511 0.13,-0.88 0.392,-1.106c0.261,-0.227 0.583,-0.34 0.967,-0.34l5.664,0c1.382,0 2.553,0.116 3.511,0.349c0.959,0.232 1.766,0.583 2.423,1.054c0.656,0.47 1.158,1.066 1.507,1.786c0.349,0.72 0.523,1.569 0.523,2.545c0,0.546 -0.07,1.06 -0.209,1.542c-0.14,0.482 -0.343,0.921 -0.61,1.316c-0.267,0.395 -0.596,0.743 -0.985,1.045c-0.389,0.302 -0.833,0.546 -1.333,0.732c0.639,0.116 1.229,0.32 1.769,0.61c0.54,0.291 1.011,0.665 1.411,1.124c0.401,0.459 0.718,0.996 0.95,1.612c0.233,0.616 0.349,1.307 0.349,2.074Zm-5.925,-9.498c0,-0.453 -0.07,-0.86 -0.21,-1.22c-0.139,-0.36 -0.348,-0.659 -0.627,-0.897c-0.279,-0.238 -0.63,-0.421 -1.054,-0.549c-0.424,-0.128 -0.991,-0.192 -1.699,-0.192l-2.318,0l0,5.856l2.562,0c0.662,0 1.19,-0.079 1.585,-0.236c0.395,-0.156 0.724,-0.371 0.985,-0.644c0.261,-0.273 0.456,-0.593 0.584,-0.959c0.128,-0.366 0.192,-0.752 0.192,-1.159Zm1.167,9.655c0,-0.523 -0.087,-0.991 -0.261,-1.403c-0.175,-0.412 -0.43,-0.758 -0.767,-1.037c-0.337,-0.279 -0.767,-0.494 -1.29,-0.645c-0.522,-0.151 -1.202,-0.226 -2.039,-0.226l-2.718,0l0,6.413l3.311,0c0.639,0 1.176,-0.067 1.612,-0.201c0.436,-0.133 0.813,-0.331 1.133,-0.592c0.319,-0.261 0.569,-0.587 0.749,-0.976c0.18,-0.389 0.27,-0.834 0.27,-1.333Z" style="fill-rule:nonzero;"/><path d="M59.897,6.849c0,1.266 -0.197,2.387 -0.592,3.363c-0.395,0.976 -0.971,1.798 -1.726,2.466c-0.755,0.668 -1.681,1.177 -2.779,1.525c-1.098,0.349 -2.391,0.523 -3.878,0.523l-1.882,0l0,7.197c0,0.117 -0.038,0.221 -0.113,0.314c-0.076,0.093 -0.201,0.168 -0.375,0.227c-0.174,0.058 -0.407,0.104 -0.697,0.139c-0.291,0.035 -0.662,0.052 -1.115,0.052c-0.442,0 -0.811,-0.017 -1.107,-0.052c-0.296,-0.035 -0.532,-0.081 -0.706,-0.139c-0.174,-0.059 -0.296,-0.134 -0.366,-0.227c-0.07,-0.093 -0.104,-0.197 -0.104,-0.314l0,-20.285c0,-0.546 0.142,-0.955 0.427,-1.228c0.284,-0.273 0.659,-0.41 1.124,-0.41l5.315,0c0.534,0 1.043,0.02 1.525,0.061c0.482,0.041 1.06,0.128 1.734,0.261c0.674,0.134 1.356,0.381 2.047,0.741c0.692,0.36 1.281,0.816 1.769,1.368c0.488,0.552 0.86,1.197 1.116,1.934c0.255,0.738 0.383,1.566 0.383,2.484Zm-4.792,0.331c0,-0.79 -0.14,-1.441 -0.419,-1.952c-0.278,-0.511 -0.621,-0.889 -1.028,-1.133c-0.406,-0.244 -0.833,-0.398 -1.281,-0.461c-0.447,-0.064 -0.909,-0.096 -1.385,-0.096l-1.952,0l0,7.65l2.056,0c0.732,0 1.345,-0.099 1.839,-0.296c0.494,-0.198 0.897,-0.473 1.211,-0.828c0.314,-0.354 0.552,-0.778 0.715,-1.272c0.162,-0.494 0.244,-1.031 0.244,-1.612Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M73.177,7.86c0,0.418 -0.012,0.761 -0.035,1.028c-0.024,0.267 -0.058,0.476 -0.105,0.627c-0.046,0.151 -0.107,0.256 -0.183,0.314c-0.075,0.058 -0.171,0.087 -0.287,0.087c-0.093,0 -0.198,-0.02 -0.314,-0.061c-0.116,-0.041 -0.247,-0.084 -0.392,-0.131c-0.145,-0.046 -0.305,-0.09 -0.479,-0.13c-0.175,-0.041 -0.366,-0.061 -0.576,-0.061c-0.244,0 -0.487,0.049 -0.731,0.148c-0.244,0.099 -0.497,0.252 -0.759,0.462c-0.261,0.209 -0.534,0.488 -0.819,0.836c-0.284,0.349 -0.589,0.779 -0.915,1.29l0,9.689c0,0.116 -0.034,0.218 -0.104,0.305c-0.07,0.087 -0.189,0.16 -0.357,0.218c-0.169,0.058 -0.392,0.102 -0.671,0.131c-0.279,0.029 -0.633,0.043 -1.063,0.043c-0.43,0 -0.785,-0.014 -1.063,-0.043c-0.279,-0.029 -0.503,-0.073 -0.671,-0.131c-0.169,-0.058 -0.288,-0.131 -0.358,-0.218c-0.069,-0.087 -0.104,-0.189 -0.104,-0.305l0,-15.545c0,-0.116 0.029,-0.218 0.087,-0.305c0.058,-0.087 0.163,-0.16 0.314,-0.218c0.151,-0.058 0.345,-0.101 0.583,-0.13c0.239,-0.029 0.538,-0.044 0.898,-0.044c0.372,0 0.68,0.015 0.924,0.044c0.244,0.029 0.432,0.072 0.566,0.13c0.134,0.058 0.229,0.131 0.288,0.218c0.058,0.087 0.087,0.189 0.087,0.305l0,1.935c0.406,-0.581 0.79,-1.061 1.15,-1.438c0.36,-0.378 0.703,-0.677 1.028,-0.898c0.325,-0.22 0.651,-0.374 0.976,-0.461c0.325,-0.088 0.651,-0.131 0.976,-0.131c0.151,0 0.314,0.009 0.488,0.026c0.174,0.017 0.354,0.046 0.54,0.087c0.186,0.041 0.349,0.087 0.488,0.14c0.139,0.052 0.241,0.107 0.305,0.165c0.064,0.058 0.11,0.122 0.139,0.192c0.029,0.069 0.056,0.165 0.079,0.287c0.023,0.122 0.041,0.305 0.052,0.549c0.012,0.244 0.018,0.575 0.018,0.994Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M91.161,14.029c0,1.324 -0.174,2.533 -0.522,3.625c-0.349,1.092 -0.878,2.033 -1.586,2.823c-0.709,0.79 -1.598,1.4 -2.667,1.83c-1.069,0.43 -2.317,0.645 -3.747,0.645c-1.382,0 -2.585,-0.192 -3.607,-0.576c-1.022,-0.383 -1.87,-0.941 -2.544,-1.673c-0.674,-0.731 -1.174,-1.632 -1.499,-2.701c-0.325,-1.069 -0.488,-2.289 -0.488,-3.659c0,-1.325 0.177,-2.536 0.532,-3.634c0.354,-1.098 0.885,-2.039 1.594,-2.823c0.709,-0.784 1.595,-1.391 2.658,-1.821c1.063,-0.43 2.309,-0.645 3.738,-0.645c1.394,0 2.602,0.189 3.625,0.566c1.022,0.378 1.867,0.933 2.535,1.665c0.668,0.731 1.165,1.632 1.49,2.701c0.326,1.069 0.488,2.294 0.488,3.677Zm-4.513,0.174c0,-0.767 -0.061,-1.472 -0.183,-2.117c-0.122,-0.645 -0.328,-1.206 -0.619,-1.682c-0.29,-0.476 -0.677,-0.848 -1.159,-1.115c-0.482,-0.268 -1.089,-0.401 -1.821,-0.401c-0.651,0 -1.22,0.119 -1.708,0.357c-0.488,0.238 -0.889,0.587 -1.202,1.046c-0.314,0.459 -0.549,1.011 -0.706,1.655c-0.157,0.645 -0.235,1.38 -0.235,2.205c0,0.767 0.064,1.472 0.191,2.117c0.128,0.645 0.334,1.206 0.619,1.682c0.285,0.476 0.671,0.845 1.159,1.107c0.488,0.261 1.092,0.392 1.812,0.392c0.663,0 1.238,-0.119 1.726,-0.358c0.488,-0.238 0.888,-0.583 1.202,-1.036c0.314,-0.454 0.546,-1.003 0.697,-1.647c0.151,-0.645 0.227,-1.38 0.227,-2.205Z" style="fill:#a91a1b;fill-rule:nonzero;"/><path d="M114.685,7.232c0,0.173 -0.009,0.326 -0.027,0.459c-0.019,0.132 -0.046,0.242 -0.083,0.329c-0.036,0.086 -0.082,0.148 -0.137,0.185c-0.055,0.036 -0.114,0.054 -0.178,0.054c-0.109,0 -0.292,-0.086 -0.548,-0.26c-0.256,-0.173 -0.598,-0.365 -1.028,-0.575c-0.429,-0.21 -0.943,-0.402 -1.541,-0.576c-0.598,-0.173 -1.309,-0.26 -2.131,-0.26c-0.977,0 -1.854,0.178 -2.631,0.534c-0.776,0.356 -1.434,0.85 -1.973,1.48c-0.539,0.63 -0.952,1.379 -1.24,2.247c-0.287,0.868 -0.431,1.809 -0.431,2.823c0,1.132 0.157,2.137 0.472,3.014c0.316,0.877 0.752,1.617 1.309,2.22c0.557,0.603 1.222,1.06 1.994,1.37c0.771,0.311 1.619,0.466 2.541,0.466c0.548,0 1.103,-0.066 1.665,-0.199c0.562,-0.132 1.085,-0.331 1.569,-0.596l0,-5.165l-4.111,0c-0.155,0 -0.271,-0.078 -0.349,-0.233c-0.078,-0.156 -0.116,-0.398 -0.116,-0.727c0,-0.173 0.009,-0.322 0.027,-0.445c0.018,-0.123 0.048,-0.224 0.089,-0.301c0.041,-0.078 0.089,-0.135 0.144,-0.172c0.055,-0.036 0.123,-0.054 0.205,-0.054l5.632,0c0.1,0 0.201,0.018 0.301,0.054c0.101,0.037 0.192,0.092 0.274,0.165c0.083,0.073 0.147,0.173 0.192,0.301c0.046,0.128 0.069,0.274 0.069,0.439l0,6.755c0,0.237 -0.041,0.443 -0.124,0.617c-0.082,0.173 -0.255,0.326 -0.52,0.459c-0.265,0.132 -0.608,0.276 -1.028,0.431c-0.42,0.155 -0.854,0.288 -1.302,0.398c-0.447,0.109 -0.899,0.191 -1.356,0.246c-0.457,0.055 -0.909,0.082 -1.357,0.082c-1.37,0 -2.594,-0.212 -3.672,-0.637c-1.078,-0.425 -1.989,-1.03 -2.733,-1.815c-0.745,-0.786 -1.313,-1.727 -1.706,-2.823c-0.393,-1.096 -0.589,-2.32 -0.589,-3.672c0,-1.407 0.212,-2.681 0.637,-3.823c0.425,-1.142 1.023,-2.115 1.795,-2.919c0.772,-0.803 1.699,-1.427 2.781,-1.87c1.083,-0.443 2.282,-0.664 3.597,-0.664c0.676,0 1.311,0.059 1.905,0.178c0.593,0.118 1.121,0.258 1.582,0.418c0.462,0.159 0.85,0.333 1.165,0.52c0.315,0.188 0.532,0.341 0.651,0.459c0.119,0.119 0.201,0.256 0.246,0.411c0.046,0.156 0.069,0.379 0.069,0.672Z" style="fill-rule:nonzero;"/><path d="M137.102,22.208c0,0.073 -0.019,0.135 -0.055,0.185c-0.037,0.05 -0.096,0.094 -0.178,0.13c-0.083,0.037 -0.197,0.064 -0.343,0.083c-0.146,0.018 -0.329,0.027 -0.548,0.027c-0.228,0 -0.416,-0.009 -0.562,-0.027c-0.146,-0.019 -0.262,-0.046 -0.349,-0.083c-0.087,-0.036 -0.149,-0.08 -0.185,-0.13c-0.037,-0.05 -0.055,-0.112 -0.055,-0.185l0,-7.495c0,-0.521 -0.046,-0.996 -0.137,-1.425c-0.091,-0.429 -0.238,-0.799 -0.439,-1.11c-0.2,-0.31 -0.456,-0.548 -0.767,-0.712c-0.31,-0.165 -0.676,-0.247 -1.096,-0.247c-0.521,0 -1.044,0.201 -1.569,0.603c-0.525,0.402 -1.103,0.991 -1.733,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.037,0.05 -0.098,0.094 -0.185,0.13c-0.087,0.037 -0.203,0.064 -0.349,0.083c-0.147,0.018 -0.329,0.027 -0.548,0.027c-0.211,0 -0.391,-0.009 -0.542,-0.027c-0.15,-0.019 -0.269,-0.046 -0.356,-0.083c-0.087,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-7.495c0,-0.521 -0.05,-0.996 -0.151,-1.425c-0.1,-0.429 -0.251,-0.799 -0.452,-1.11c-0.201,-0.31 -0.454,-0.548 -0.76,-0.712c-0.306,-0.165 -0.67,-0.247 -1.09,-0.247c-0.52,0 -1.046,0.201 -1.575,0.603c-0.53,0.402 -1.106,0.991 -1.727,1.768l0,8.618c0,0.073 -0.018,0.135 -0.055,0.185c-0.036,0.05 -0.096,0.094 -0.178,0.13c-0.082,0.037 -0.196,0.064 -0.342,0.083c-0.147,0.018 -0.334,0.027 -0.562,0.027c-0.219,0 -0.402,-0.009 -0.548,-0.027c-0.146,-0.019 -0.263,-0.046 -0.35,-0.083c-0.086,-0.036 -0.146,-0.08 -0.178,-0.13c-0.032,-0.05 -0.048,-0.112 -0.048,-0.185l0,-12.332c0,-0.073 0.014,-0.134 0.041,-0.185c0.028,-0.05 0.083,-0.096 0.165,-0.137c0.082,-0.041 0.187,-0.068 0.315,-0.082c0.128,-0.014 0.297,-0.02 0.507,-0.02c0.201,0 0.368,0.006 0.5,0.02c0.132,0.014 0.235,0.041 0.308,0.082c0.073,0.041 0.126,0.087 0.158,0.137c0.032,0.051 0.048,0.112 0.048,0.185l0,1.631c0.694,-0.777 1.368,-1.345 2.021,-1.706c0.653,-0.361 1.313,-0.541 1.98,-0.541c0.511,0 0.97,0.059 1.377,0.178c0.406,0.119 0.765,0.285 1.076,0.5c0.31,0.215 0.575,0.47 0.794,0.767c0.219,0.297 0.402,0.628 0.548,0.994c0.411,-0.448 0.802,-0.827 1.172,-1.138c0.37,-0.31 0.726,-0.561 1.069,-0.753c0.342,-0.192 0.676,-0.331 1,-0.418c0.324,-0.087 0.651,-0.13 0.98,-0.13c0.794,0 1.461,0.139 2,0.418c0.539,0.278 0.975,0.65 1.309,1.116c0.333,0.466 0.571,1.012 0.712,1.638c0.142,0.625 0.213,1.285 0.213,1.98l0,7.796Z" style="fill-rule:nonzero;"/><path d="M152.571,15.878c0,1.069 -0.116,2.03 -0.349,2.884c-0.233,0.854 -0.576,1.583 -1.028,2.186c-0.452,0.602 -1.007,1.064 -1.665,1.383c-0.657,0.32 -1.411,0.48 -2.261,0.48c-0.392,0 -0.755,-0.039 -1.089,-0.116c-0.333,-0.078 -0.66,-0.204 -0.98,-0.377c-0.319,-0.174 -0.639,-0.393 -0.959,-0.658c-0.319,-0.265 -0.657,-0.585 -1.014,-0.959l0,1.507c0,0.073 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.096,0.098 -0.179,0.13c-0.082,0.032 -0.185,0.057 -0.308,0.076c-0.123,0.018 -0.281,0.027 -0.473,0.027c-0.182,0 -0.338,-0.009 -0.465,-0.027c-0.128,-0.019 -0.233,-0.044 -0.316,-0.076c-0.082,-0.032 -0.137,-0.075 -0.164,-0.13c-0.027,-0.055 -0.041,-0.119 -0.041,-0.192l0,-18.306c0,-0.073 0.016,-0.137 0.048,-0.192c0.032,-0.054 0.091,-0.1 0.178,-0.137c0.087,-0.036 0.203,-0.064 0.349,-0.082c0.147,-0.018 0.329,-0.027 0.548,-0.027c0.229,0 0.416,0.009 0.562,0.027c0.146,0.018 0.261,0.046 0.343,0.082c0.082,0.037 0.141,0.083 0.178,0.137c0.036,0.055 0.055,0.119 0.055,0.192l0,7.386c0.365,-0.375 0.719,-0.69 1.062,-0.946c0.342,-0.256 0.678,-0.463 1.007,-0.623c0.329,-0.16 0.657,-0.277 0.986,-0.35c0.329,-0.073 0.676,-0.109 1.042,-0.109c0.895,0 1.66,0.178 2.295,0.534c0.635,0.356 1.151,0.834 1.548,1.432c0.397,0.598 0.687,1.299 0.87,2.103c0.183,0.804 0.274,1.654 0.274,2.549Zm-2.343,0.26c0,-0.63 -0.048,-1.242 -0.145,-1.836c-0.096,-0.594 -0.264,-1.119 -0.503,-1.576c-0.239,-0.456 -0.556,-0.824 -0.951,-1.103c-0.395,-0.278 -0.887,-0.418 -1.475,-0.418c-0.294,0 -0.584,0.041 -0.869,0.124c-0.285,0.082 -0.574,0.219 -0.868,0.411c-0.294,0.192 -0.6,0.438 -0.917,0.74c-0.317,0.301 -0.655,0.68 -1.013,1.137l0,4.919c0.625,0.758 1.222,1.336 1.792,1.733c0.57,0.398 1.163,0.596 1.778,0.596c0.57,0 1.057,-0.137 1.462,-0.411c0.404,-0.274 0.733,-0.637 0.985,-1.089c0.253,-0.452 0.437,-0.959 0.552,-1.521c0.115,-0.562 0.172,-1.13 0.172,-1.706Z" style="fill-rule:nonzero;"/><path d="M169,22.194c0,0.074 -0.018,0.137 -0.055,0.192c-0.036,0.055 -0.1,0.098 -0.192,0.13c-0.091,0.032 -0.212,0.06 -0.363,0.083c-0.15,0.023 -0.335,0.034 -0.555,0.034c-0.237,0 -0.429,-0.011 -0.575,-0.034c-0.146,-0.023 -0.265,-0.051 -0.356,-0.083c-0.092,-0.032 -0.156,-0.075 -0.192,-0.13c-0.037,-0.055 -0.055,-0.118 -0.055,-0.192l0,-7.865l-8.071,0l0,7.865c0,0.074 -0.018,0.137 -0.054,0.192c-0.037,0.055 -0.101,0.098 -0.192,0.13c-0.092,0.032 -0.213,0.06 -0.363,0.083c-0.151,0.023 -0.341,0.034 -0.569,0.034c-0.219,0 -0.406,-0.011 -0.562,-0.034c-0.155,-0.023 -0.278,-0.051 -0.37,-0.083c-0.091,-0.032 -0.155,-0.075 -0.192,-0.13c-0.036,-0.055 -0.054,-0.118 -0.054,-0.192l0,-17.018c0,-0.073 0.018,-0.137 0.054,-0.191c0.037,-0.055 0.101,-0.099 0.192,-0.131c0.092,-0.032 0.215,-0.059 0.37,-0.082c0.156,-0.023 0.343,-0.034 0.562,-0.034c0.228,0 0.418,0.011 0.569,0.034c0.15,0.023 0.271,0.05 0.363,0.082c0.091,0.032 0.155,0.076 0.192,0.131c0.036,0.054 0.054,0.118 0.054,0.191l0,7.098l8.071,0l0,-7.098c0,-0.073 0.018,-0.137 0.055,-0.191c0.036,-0.055 0.1,-0.099 0.192,-0.131c0.091,-0.032 0.21,-0.059 0.356,-0.082c0.146,-0.023 0.338,-0.034 0.575,-0.034c0.22,0 0.405,0.011 0.555,0.034c0.151,0.023 0.272,0.05 0.363,0.082c0.092,0.032 0.156,0.076 0.192,0.131c0.037,0.054 0.055,0.118 0.055,0.191l0,17.018Z" style="fill-rule:nonzero;"/></g></svg><h1>Windows 10 Report</h1><p>Generated by the <i>Windows10Audit</i> Module by FB Pro GmbH. Get it in the <a href="https://github.com/fbprogmbh/Audit-Test-Automation">Audit Test Automation Package</a>.</p><p>Based on Windows 10 Security Technical Implementation Guide V1R16 2019-01-25.</p></div><div class="main content"><div id="host-information"><p>This report was generated at 05/14/2019 08:14:34 on DESKTOP-VSBMIM9.</p><table><tbody><tr><th scope="row">Hostname</th><td>DESKTOP-VSBMIM9</td></tr><tr><th scope="row">Build Number</th><td>17763</td></tr><tr><th scope="row">Free disk space(GB)      </th><td>115.2</td></tr><tr><th scope="row">Operating System</th><td>Microsoft Windows 10 Enterprise Evaluation</td></tr><tr><th scope="row">Free physical memory (GB)</th><td>0.564</td></tr></tbody></table></div><h1 style="clear:both; padding-top: 50px;">Summary</h1><p>A total of 640 tests have been run. 503 resulted in false. 0 resulted in warning.</p><div class="gauge"><div class="gauge-meter passed" style="width: 20.63%" title="True 132 test(s), 20.63%"></div><div class="gauge-meter failed" style="width: 78.59%" title="False 503 test(s), 78.59%"></div><div class="gauge-meter warning" style="width: 0.00%" title="Warning 0 test(s), 0.00%"></div><div class="gauge-meter " style="width: 0.78%" title="None 5 test(s), 0.78%"></div></div><ol class="gauge-info"><li class="gauge-info-item"><span class="auditstatus passed">True</span> 132 test(s) &#x2259; 20.63%</li><li class="gauge-info-item"><span class="auditstatus failed">False</span> 503 test(s) &#x2259; 78.59%</li><li class="gauge-info-item"><span class="auditstatus warning">Warning</span> 0 test(s) &#x2259; 0.00%</li><li class="gauge-info-item"><span class="auditstatus ">None</span> 5 test(s) &#x2259; 0.78%</li></ol><h1>Navigation</h1><p>Click the link(s) below for quick access to a report section.</p><ul><li><a href="#DISA-Recommendations">DISA Recommendations</a><ul><li><a href="#DISA-RecommendationsRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li><a href="#DISA-RecommendationsUser-Rights-Assignment">User Rights Assignment</a></li><li><a href="#DISA-RecommendationsAccount-Policies">Account Policies</a></li><li><a href="#DISA-RecommendationsWindows-Features">Windows Features</a></li><li><a href="#DISA-RecommendationsFile-System-Permissions">File System Permissions</a></li><li><a href="#DISA-RecommendationsRegistry-Permissions">Registry Permissions</a></li></ul></li><li><a href="#CIS-Benchmarks">CIS Benchmarks</a><ul><li><a href="#CIS-BenchmarksRegistry-Settings/Group-Policies">Registry Settings/Group Policies</a></li><li><a href="#CIS-BenchmarksUser-Rights-Assignment">User Rights Assignment</a></li><li><a href="#CIS-BenchmarksAccount-Policies">Account Policies</a></li><li><a href="#CIS-BenchmarksWindows-Firewall-with-Advanced-Security">Windows Firewall with Advanced Security</a></li><li><a href="#CIS-BenchmarksAdvanced-Audit-Policy-Configuration">Advanced Audit Policy Configuration</a></li></ul></li></ul><section><h1 id="DISA-Recommendations"><span class="failed">DISA Recommendations</span><a href="#" class="totop">^</a></h1><p>TThis section contains all DISA recommendations</p><section><h1 id="DISA-RecommendationsRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>WN10-CC-000310</td> <td>Users must be prevented from changing installation options.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000315</td> <td>The Windows Installer Always install with elevated privileges must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000320</td> <td>Users must be notified if a web-based program attempts to install software.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000325</td> <td>Automatically signing in the last interactive user after a system-initiated restart must be disabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000330</td> <td>The Windows Remote Management (WinRM) client must not use Basic authentication.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000335</td> <td>The Windows Remote Management (WinRM) client must not allow unencrypted traffic.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000340</td> <td>The Windows Remote Management (WinRM) client must not use Digest authentication.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000345</td> <td>The Windows Remote Management (WinRM) service must not use Basic authentication.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000350</td> <td>The Windows Remote Management (WinRM) service must not allow unencrypted traffic.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000355</td> <td>The Windows Remote Management (WinRM) service must not store RunAs credentials.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AU-000500</td> <td>The Application event log size must be configured to 32768 KB or greater.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AU-000505</td> <td>The Security event log size must be configured to 1024000 KB or greater.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AU-000510</td> <td>The System event log size must be configured to 32768 KB or greater.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000005</td> <td>Camera access from the lock screen must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000010</td> <td>The display of slide shows on the lock screen must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000020</td> <td>IPv6 source routing must be configured to highest protection.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000025</td> <td>The system must be configured to prevent IP source routing.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000030</td> <td>The system must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF) generated routes.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000035</td> <td>The system must be configured to ignore NetBIOS name release requests except from WINS servers.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000040</td> <td>Insecure logons to an SMB server must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000055</td> <td>Simultaneous connections to the Internet or a Windows domain must be limited.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000060</td> <td>Connections to non-domain networks when connected to a domain authenticated network must be blocked.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000065</td> <td>Wi-Fi Sense must be disabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000037</td> <td>Local administrator accounts must have their privileged token filtered to prevent elevated privileges from being used over the network on domain systems.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000085</td> <td>Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000090</td> <td>Group Policy objects must be reprocessed even if they have not changed.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000100</td> <td>Downloading print driver packages over HTTP must be prevented.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000015</td> <td>Local accounts with blank passwords must be restricted to prevent access from the network.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-CC-000105</td> <td>Web publishing and online ordering wizards must be prevented from downloading a list of providers.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000110</td> <td>Printing over HTTP must be prevented.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000115</td> <td>Systems must at least attempt device authentication using certificates.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000120</td> <td>The network selection user interface (UI) must not be displayed on the logon screen.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000130</td> <td>Local users on domain-joined computers must not be enumerated.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000030</td> <td>Audit policy using subcategories must be enabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000035</td> <td>Outgoing secure channel traffic must be encrypted or signed.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000040</td> <td>Outgoing secure channel traffic must be encrypted when possible.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-CC-000145</td> <td>Users must be prompted for a password on resume from sleep (on battery).</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000045</td> <td>Outgoing secure channel traffic must be signed when possible.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-CC-000150</td> <td>The user must be prompted for a password on resume from sleep (plugged in).</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000155</td> <td>Solicited Remote Assistance must not be allowed.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000050</td> <td>The computer account password must not be prevented from being reset.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-CC-000165</td> <td>Unauthenticated RPC clients must be restricted from connecting to the RPC server.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000170</td> <td>The setting to allow Microsoft accounts to be optional for modern style apps must be enabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000175</td> <td>The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000060</td> <td>The system must be configured to require a strong session key.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-CC-000180</td> <td>Autoplay must be turned off for non-volume devices.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000070</td> <td>The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000185</td> <td>The default autorun behavior must be configured to prevent autorun commands.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000190</td> <td>Autoplay must be disabled for all drives.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000195</td> <td>Enhanced anti-spoofing for facial recognition must be enabled on Window 10.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000200</td> <td>Administrator accounts must not be enumerated during elevation.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000215</td> <td>Explorer Data Execution Prevention must be enabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000220</td> <td>Turning off File Explorer heap termination on corruption must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000225</td> <td>File Explorer shell protocol must run in protected mode.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000095</td> <td>The Smart Card removal option must be configured to Force Logoff or Lock Workstation.</td> <td>Registry value: 0. Differs from expected value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000230</td> <td>Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for malicious websites in Microsoft Edge.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000235</td> <td>Users must not be allowed to ignore Windows Defender SmartScreen filter warnings for unverified files in Microsoft Edge.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000100</td> <td>The Windows SMB client must be configured to always perform SMB packet signing.</td> <td>Registry value: 0. Differs from expected value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000240</td> <td>InPrivate browsing in Microsoft Edge must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000105</td> <td>The Windows SMB client must be enabled to perform SMB packet signing when possible.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000110</td> <td>Unencrypted passwords must not be sent to third-party SMB Servers.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-CC-000250</td> <td>The Windows Defender SmartScreen filter for Microsoft Edge must be enabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000255</td> <td>The use of a hardware security device with Windows Hello for Business must be enabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000120</td> <td>The Windows SMB server must be configured to always perform SMB packet signing.</td> <td>Registry value: 0. Differs from expected value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000260</td> <td>Windows 10 must be configured to require a minimum pin length of six characters or greater.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000125</td> <td>The Windows SMB server must perform SMB packet signing when possible.</td> <td>Registry value: 0. Differs from expected value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000270</td> <td>Passwords must not be saved in the Remote Desktop Client.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000275</td> <td>Local drives must be prevented from sharing with Remote Desktop Session Hosts.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000280</td> <td>Remote Desktop Services must always prompt a client for passwords upon connection.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000285</td> <td>The Remote Desktop Session Host must require secure RPC communications.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000290</td> <td>Remote Desktop Services must be configured with the client connection encryption set to the required level.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000295</td> <td>Attachments must be prevented from being downloaded from RSS feeds.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000145</td> <td>Anonymous enumeration of SAM accounts must not be allowed.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-CC-000300</td> <td>Basic authentication for RSS feeds over HTTP must not be used.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000150</td> <td>Anonymous enumeration of shares must be restricted.</td> <td>Registry value: 0. Differs from expected value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000305</td> <td>Indexing of encrypted files must be turned off.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000160</td> <td>The system must be configured to prevent anonymous users from having the same rights as the Everyone group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000165</td> <td>Anonymous access to Named Pipes and Shares must be restricted.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000175</td> <td>Services using Local System that use Negotiate when reverting to NTLM authentication must use the computer identity vs. authenticating anonymously.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000180</td> <td>NTLM must be prevented from falling back to a Null session.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000185</td> <td>PKU2U authentication using online identities must be prevented.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000190</td> <td>Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000195</td> <td>The system must be configured to prevent the storage of the LAN Manager hash of passwords.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000205</td> <td>The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000210</td> <td>The system must be configured to the required LDAP client signing level.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000215</td> <td>The system must be configured to meet the minimum session security requirement for NTLM SSP based clients.</td> <td>Registry value: 536870912. Differs from expected value: 537395200.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000220</td> <td>The system must be configured to meet the minimum session security requirement for NTLM SSP based servers.</td> <td>Registry value: 536870912. Differs from expected value: 537395200.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000230</td> <td>The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.</td> <td>Registry value: 0. Differs from expected value: 1.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000240</td> <td>The default permissions of global system objects must be increased.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000245</td> <td>User Account Control approval mode for the built-in Administrator must be enabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000250</td> <td>User Account Control must, at minimum, prompt administrators for consent on the secure desktop.</td> <td>Registry value: 5. Differs from expected value: 2.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000255</td> <td>User Account Control must automatically deny elevation requests for standard users.</td> <td>Registry value: 3. Differs from expected value: 0.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-SO-000260</td> <td>User Account Control must be configured to detect application installations and prompt for elevation.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000265</td> <td>User Account Control must only elevate UIAccess applications that are installed in secure locations.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000270</td> <td>User Account Control must run all administrators in Admin Approval Mode, enabling UAC.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000275</td> <td>User Account Control must virtualize file and registry write failures to per-user locations.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UC-000015</td> <td>Toast notifications to the lock screen must be turned off.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UC-000020</td> <td>Zone information must be preserved when saving attachments.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000066</td> <td>Command line data must be included in process creation events.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000326</td> <td>PowerShell script block logging must be enabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-00-000150</td> <td>Structured Exception Handling Overwrite Protection (SEHOP) must be enabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000038</td> <td>WDigest Authentication must be disabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000044</td> <td>Internet connection sharing must be disabled.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000197</td> <td>Microsoft consumer experiences must be turned off.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000228</td> <td>Windows 10 must be configured to prevent Microsoft Edge browser data from being cleared on exit.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000252</td> <td>Windows 10 must be configured to disable Windows Game Recording and Broadcasting.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000068</td> <td>Windows 10 must be configured to enable Remote host allows delegation of non-exportable credentials.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-00-000165</td> <td>The Server Message Block (SMB) v1 protocol must be disabled on the SMB server.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UC-000005</td> <td>The use of personal accounts for OneDrive synchronization must be disabled.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000238</td> <td>Windows 10 must be configured to prevent certificate error overrides in Microsoft Edge.</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-CC-000204</td> <td>If Enhanced diagnostic data is enabled it must be limited to the minimum required to support Windows Analytics.</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section><h1 id="DISA-RecommendationsUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>WN10-UR-000005</td> <td>The Access Credential Manager as a trusted caller user right must not be assigned to any groups or accounts.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000010</td> <td>The Access this computer from the network user right must only be assigned to the Administrators and Remote Desktop Users groups.</td> <td>The following users have too many rights: Everyone, BUILTIN\Users, BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000015</td> <td>The Act as part of the operating system user right must not be assigned to any groups or accounts.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000025</td> <td>The Allow log on locally user right must only be assigned to the Administrators and Users groups.</td> <td>The following users have too many rights: DESKTOP-VSBMIM9\Guest, BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000030</td> <td>The Back up files and directories user right must only be assigned to the Administrators group.</td> <td>The following users have too many rights: BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000035</td> <td>The Change the system time user right must only be assigned to Administrators and Local Service.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000040</td> <td>The Create a pagefile user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000045</td> <td>The Create a token object user right must not be assigned to any groups or accounts.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000050</td> <td>The Create global objects user right must only be assigned to Administrators, Service, Local Service, and Network Service.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000055</td> <td>The Create permanent shared objects user right must not be assigned to any groups or accounts.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000065</td> <td>The Debug programs user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000070 MW</td> <td>The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td> <td>Not applicable. This audit applies only to MemberWorkstation.</td> <td><span class="auditstatus ">None</span></td></tr> <tr><td>WN10-UR-000070 SW</td> <td>The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td> <td>The following users have too many rights: DESKTOP-VSBMIM9\Guest</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000075 MW</td> <td>The Deny log on as a batch job user right on domain-joined workstations must be configured to prevent access from highly privileged domain accounts.</td> <td>Not applicable. This audit applies only to MemberWorkstation.</td> <td><span class="auditstatus ">None</span></td></tr> <tr><td>WN10-UR-000080 MW</td> <td>The Deny log on as a service user right on domain-joined workstations must be configured to prevent access from highly privileged domain accounts.</td> <td>Not applicable. This audit applies only to MemberWorkstation.</td> <td><span class="auditstatus ">None</span></td></tr> <tr><td>WN10-UR-000085 MW</td> <td>The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</td> <td>Not applicable. This audit applies only to MemberWorkstation.</td> <td><span class="auditstatus ">None</span></td></tr> <tr><td>WN10-UR-000085 SW</td> <td>The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.</td> <td>The following users have too many rights: DESKTOP-VSBMIM9\Guest</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000090 MW</td> <td>The Deny log on through Remote Desktop Services user right on workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td> <td>Not applicable. This audit applies only to MemberWorkstation.</td> <td><span class="auditstatus ">None</span></td></tr> <tr><td>WN10-UR-000090 SW</td> <td>The Deny log on through Remote Desktop Services user right on workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.</td> <td>The following users have don't have the rights: </td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000100</td> <td>The Force shutdown from a remote system user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000105</td> <td>The Generate security audits user right must only be assigned to Local Service and Network Service.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000110</td> <td>The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000115</td> <td>The Increase scheduling priority user right must only be assigned to the Administrators group.</td> <td>The following users have too many rights: Window Manager\Window Manager Group</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000120</td> <td>The Load and unload device drivers user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000125</td> <td>The Lock pages in memory user right must not be assigned to any groups or accounts.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000130</td> <td>The Manage auditing and security log user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000140</td> <td>The Modify firmware environment values user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000145</td> <td>The Perform volume maintenance tasks user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000150</td> <td>The Profile single process user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-UR-000160</td> <td>The Restore files and directories user right must only be assigned to the Administrators group.</td> <td>The following users have too many rights: BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-UR-000165</td> <td>The Take ownership of files or other objects user right must only be assigned to the Administrators group.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section><h1 id="DISA-RecommendationsAccount-Policies"><span class="failed">Account Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>WN10-AC-000005</td> <td>Windows 10 account lockout duration must be configured to 15 minutes or greater.</td> <td>Currently not set.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AC-000010</td> <td>The number of allowed bad logon attempts must be configured to 3 or less.</td> <td>Currently set to: 0. Expected: not equal 0</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AC-000015</td> <td>The period of time before the bad logon counter is reset must be configured to 15 minutes.</td> <td>Currently not set.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AC-000020</td> <td>The password history must be configured to 24 passwords remembered.</td> <td>Currently set to: 0. Expected: greater than or equal 24</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AC-000025</td> <td>The maximum password age must be configured to 60 days or less.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-AC-000030</td> <td>The minimum password age must be configured to at least 1 day.</td> <td>Currently set to: 0. Expected: greater than or equal 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AC-000035</td> <td>Passwords must, at a minimum, be 14 characters.</td> <td>Currently set to: 0. Expected: greater than or equal 14</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AC-000040</td> <td>The built-in Microsoft password complexity filter must be enabled.</td> <td>Currently set to: 0. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AC-000045</td> <td>Reversible password encryption must be disabled.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-SO-000140</td> <td>Anonymous SID/Name translation must not be allowed.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section><h1 id="DISA-RecommendationsWindows-Features"><span class="passed">Windows Features</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>WN10-00-000100</td> <td>Internet Information System (IIS) or its subcomponents must not be installed on a workstation.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-00-000110</td> <td>Simple TCP/IP Services must not be installed on the system.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-00-000115</td> <td>The Telnet Client must not be installed on the system.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-00-000120</td> <td>The TFTP Client must not be installed on the system.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section><h1 id="DISA-RecommendationsFile-System-Permissions"><span class="failed">File System Permissions</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>WN10-AU-000515</td> <td>Permissions for the Application event log must prevent access by non-privileged accounts.</td> <td>Unexpected 'APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES' with access 'ReadData, ReadExtendedAttributes, WriteExtendedAttributes, ReadPermissions'</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AU-000520</td> <td>Permissions for the Security event log must prevent access by non-privileged accounts.</td> <td>Unexpected 'APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES' with access 'ReadData, ReadExtendedAttributes, WriteExtendedAttributes, ReadPermissions'</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-AU-000525</td> <td>Permissions for the System event log must prevent access by non-privileged accounts.</td> <td>Unexpected 'APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES' with access 'ReadData, ReadExtendedAttributes, WriteExtendedAttributes, ReadPermissions'</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section><h1 id="DISA-RecommendationsRegistry-Permissions"><span class="failed">Registry Permissions</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>WN10-RG-000005 A</td> <td>Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>WN10-RG-000005 B</td> <td>Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td> <td>Unexpected 'S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681' with access 'ReadKey'</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>WN10-RG-000005 C</td> <td>Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.</td> <td>Unexpected 'S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681' with access 'ReadKey'</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section></section><section><h1 id="CIS-Benchmarks"><span class="failed">CIS Benchmarks</span><a href="#" class="totop">^</a></h1><p>This section contains all benchmarks from CIS Microsoft Windows Server 2016 RTM (Release 1607) Benchmark v1.0.0 - 03-31-2017. WARNING: Tests in this version haven't been fully tested yet.</p><section><h1 id="CIS-BenchmarksRegistry-Settings/Group-Policies"><span class="failed">Registry Settings/Group Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>2.3.1.2</td> <td>(L1) Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.1.4</td> <td>(L1) Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.2.1</td> <td>(L1) Ensure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.2.2</td> <td>(L1) Ensure 'Audit: Shut down system immediately if unable to log security audits' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.4.1</td> <td>(L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.4.2</td> <td>(L2) Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.6.1</td> <td>(L1) Ensure 'Domain member: Digitally encrypt or sign secure channel data (always)' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.6.2</td> <td>(L1) Ensure 'Domain member: Digitally encrypt secure channel data (when possible)' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.6.3</td> <td>(L1) Ensure 'Domain member: Digitally sign secure channel data (when possible)' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.6.4</td> <td>(L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.6.5</td> <td>(L1) Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.6.6</td> <td>(L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.7.1</td> <td>(L1) Ensure 'Interactive logon: Do not display last user name' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.7.2</td> <td>(L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.7.3</td> <td>(BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.7.4</td> <td>(L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s), but not 0'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.7.5</td> <td>(L1) Configure 'Interactive logon: Message text for users attempting to log on'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.7.6</td> <td>(L1) Configure 'Interactive logon: Message title for users attempting to log on'</td> <td>Registry value is ''. Expected: pattern match .+</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.7.7</td> <td>(L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'</td> <td>Registry value is '10'. Expected: pattern match ^[43210]$</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.7.8</td> <td>(L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.7.9</td> <td>(L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher</td> <td>Registry value is '0'. Expected: pattern match ^(1|2|3)$</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.8.1</td> <td>(L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.8.2</td> <td>(L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.8.3</td> <td>(L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.9.1</td> <td>(L1) Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s), but not 0'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.9.2</td> <td>(L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.9.3</td> <td>(L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.9.4</td> <td>(L1) Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.9.5</td> <td>(L1) Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.10.2</td> <td>(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.10.3</td> <td>(L1) Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.10.4</td> <td>(L1) Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.10.5</td> <td>(L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.10.6</td> <td>(L1) Ensure 'Network access: Named Pipes that can be accessed anonymously' is set to 'None'</td> <td>Registry value is ''. Expected: equals </td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.10.7</td> <td>(L1) Ensure 'Network access: Remotely accessible registry paths'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.10.8</td> <td>(L1) Ensure 'Network access: Remotely accessible registry paths and sub-paths'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.10.9</td> <td>(L1) Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.10.10</td> <td>(L1) Ensure 'Network access: Restrict clients allowed to make remote calls to SAM' is set to 'Administrators: Remote Access: Allow'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.10.11</td> <td>(L1) Ensure 'Network access: Shares that can be accessed anonymously' is set to 'None'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.10.12</td> <td>(L1) Ensure 'Network access: Sharing and security model for local accounts' is set to 'Classic - local users authenticate as themselves'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.11.1</td> <td>(L1) Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.11.2</td> <td>(L1) Ensure 'Network security: Allow LocalSystem NULL session fallback' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.11.3</td> <td>(L1) Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.11.4</td> <td>(L1) Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'</td> <td>Registry key not found.
+Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.11.5</td> <td>(L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.11.7</td> <td>(L1) Ensure 'Network security: LAN Manager authentication level' is set to 'Send NTLMv2 response only. Refuse LM&NTLM'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.11.8</td> <td>(L1) Ensure 'Network security: LDAP client signing requirements' is set to 'Negotiate signing' or higher</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.11.9</td> <td>(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td> <td>Registry value is '536870912'. Expected: equals 537395200</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.11.10</td> <td>(L1) Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'</td> <td>Registry value is '536870912'. Expected: equals 537395200</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.14.1</td> <td>(L2) Ensure 'System cryptography: Force strong key protection for user keys stored on the computer' is set to 'User is prompted when the key is first used' or higher</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.15.1</td> <td>(L1) Ensure 'System objects: Require case insensitivity for non-Windows subsystems' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.15.2</td> <td>(L1) Ensure 'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.17.1</td> <td>(L1) Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.17.2</td> <td>(L1) Ensure 'User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.17.3</td> <td>(L1) Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'</td> <td>Registry value is '5'. Expected: equals 2</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.17.4</td> <td>(L1) Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'</td> <td>Registry value is '3'. Expected: equals 0</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.3.17.5</td> <td>(L1) Ensure 'User Account Control: Detect application installations and prompt for elevation' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.17.6</td> <td>(L1) Ensure 'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.17.7</td> <td>(L1) Ensure 'User Account Control: Run all administrators in Admin Approval Mode' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.17.8</td> <td>(L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.3.17.9</td> <td>(L1) Ensure 'User Account Control: Virtualize file and registry write failures to per-user locations' is set to 'Enabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.1</td> <td>(L2) Ensure 'Bluetooth Handsfree Service (BthHFSrv)' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.2</td> <td>(L2) Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.3</td> <td>(L1) Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.4</td> <td>(L2) Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'</td> <td>Registry value is '2'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.5</td> <td>(L2) Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.6</td> <td>(L1) Ensure 'HomeGroup Listener (HomeGroupListener)' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.7</td> <td>(L1) Ensure 'HomeGroup Provider (HomeGroupProvider)' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.8</td> <td>(L1) Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.9</td> <td>(L1) Ensure 'Infrared monitor service (irmon)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.10</td> <td>(L1) Ensure 'Internet Connection Sharing (ICS) (SharedAccess) ' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.11</td> <td>(L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.12</td> <td>(L1) Ensure 'LxssManager (LxssManager)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.13</td> <td>(L1) Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.14</td> <td>(L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.15</td> <td>(L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.16</td> <td>(L2) Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.17</td> <td>(L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.18</td> <td>(L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.19</td> <td>(L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.20</td> <td>(L2) Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.21</td> <td>(L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.22</td> <td>(L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.23</td> <td>(L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.24</td> <td>(L1) Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.25</td> <td>(L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.26</td> <td>(L1) Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.27</td> <td>(L2) Ensure 'Server (LanmanServer)' is set to 'Disabled'</td> <td>Registry value is '2'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.28</td> <td>(L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.29</td> <td>(L2) Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.30</td> <td>(L1) Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.31</td> <td>(L1) Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.32</td> <td>(L1) Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.33</td> <td>(L2) Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.34</td> <td>(L2) Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.35</td> <td>(L1) Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'</td> <td>Registry value found.
+Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.36</td> <td>(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.37</td> <td>(L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled'</td> <td>Registry value is '2'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.38</td> <td>(L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.39</td> <td>(L2) Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.40</td> <td>(L2) Ensure 'Windows Store Install Service (InstallService)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.41</td> <td>(L1) Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>5.42</td> <td>(L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.43</td> <td>(L1) Ensure 'Xbox Game Monitoring (xbgm)' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.44</td> <td>(L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.45</td> <td>(L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>5.46</td> <td>(L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'</td> <td>Registry value is '3'. Expected: equals 4</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.1.1.1</td> <td>(L1) Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.1.1.2</td> <td>(L1) Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.1.2.2</td> <td>(L1) Ensure 'Allow input personalization' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.1.3</td> <td>(L2) Ensure 'Allow Online Tips' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.2.1</td> <td>(L1) Ensure LAPS AdmPwd GPO Extension / CSE is installed</td> <td>Registry key not found.
+Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.2.2</td> <td>(L1) Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.2.3</td> <td>(L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.2.4</td> <td>(L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.2.5</td> <td>(L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.2.6</td> <td>(L1) Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.3.1</td> <td>(L1) Ensure 'Apply UAC restrictions to local accounts on network logons' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.3.2</td> <td>(L1) Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.3.3</td> <td>(L1) Ensure 'Configure SMB v1 server' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.3.4</td> <td>(L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.3.5</td> <td>(L1) Ensure 'Turn on Windows Defender protection against Potentially Unwanted Applications' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.3.6</td> <td>(L1) Ensure 'WDigest Authentication' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.1</td> <td>(L1) Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>18.4.2</td> <td>(L1) Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.3</td> <td>(L1) Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.4</td> <td>(L2) Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.5</td> <td>(L1) Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.6</td> <td>(L2) Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.7</td> <td>(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.8</td> <td>(L2) Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.9</td> <td>(L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.10</td> <td>(L1) Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.11</td> <td>(L2) Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.12</td> <td>(L2) Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.4.13</td> <td>(L1) Ensure 'MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning' is set to 'Enabled: 90% or less'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.4.1</td> <td>(L1) Set 'NetBIOS node type' to 'P-node' (Ensure NetBT Parameter 'NodeType' is set to '0x2 (2)')</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.4.2</td> <td>(L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.5.1</td> <td>(L2) Ensure 'Enable Font Providers' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.8.1</td> <td>(L1) Ensure 'Enable insecure guest logons' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.9.1</td> <td>(L2) Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.9.2</td> <td>(L2) Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.10.2</td> <td>(L2) Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'</td> <td>Registry value is '0'. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.11.2</td> <td>(L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.11.3</td> <td>(L1) Ensure 'Prohibit use of Internet Connection Sharing on your DNS domain network' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.11.4</td> <td>(L1) Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.14.1</td> <td>(L1) Ensure 'Hardened UNC Paths' is set to 'Enabled, with "Require Mutual Authentication" and "Require Integrity" set for all NETLOGON and SYSVOL shares'</td> <td>Registry value is ''. Expected: pattern match [Rr]equire([Mm]utual[Aa]uthentication|[Ii]ntegrity)=1.*[Rr]equire([Mm]utual[Aa]uthentication|[Ii]ntegrity)=1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.19.2.1</td> <td>(L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.20.1</td> <td>(L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.20.2</td> <td>(L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.21.1</td> <td>(L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.21.2</td> <td>(L1) Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.5.23.2.1</td> <td>(L1) Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.3.1</td> <td>(L1) Ensure 'Include command line in process creation events' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.4.1</td> <td>(L1) Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.5.1</td> <td>(NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.5.2</td> <td>(NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot and DMA Protection'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.5.3</td> <td>(NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.5.4</td> <td>(NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.5.5</td> <td>(NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.7.1.1</td> <td>(BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.7.1.2</td> <td>(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.7.1.3</td> <td>(BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.7.1.4</td> <td>(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.7.1.5</td> <td>(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.7.1.6</td> <td>(BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Also apply to matching devices that are already installed.' is set to 'True' (checked)</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.14.1</td> <td>(L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.21.2</td> <td>(L1) Ensure 'Configure registry policy processing: Do not apply during periodic background processing' is set to 'Enabled: FALSE'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.21.3</td> <td>(L1) Ensure 'Configure registry policy processing: Process even if the Group Policy objects have not changed' is set to 'Enabled: TRUE'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.21.4</td> <td>(L1) Ensure 'Continue experiences on this device' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.21.5</td> <td>(L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'</td> <td>Compliant. Registry value not found.</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>18.8.22.1.1</td> <td>(L2) Ensure 'Turn off access to the Store' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.2</td> <td>(L1) Ensure 'Turn off downloading of print drivers over HTTP' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.3</td> <td>(L2) Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.4</td> <td>(L2) Ensure 'Turn off handwriting recognition error reporting' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.5</td> <td>(L2) Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.6</td> <td>(L1) Ensure 'Turn off Internet download for Web publishing and online ordering wizards' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.7</td> <td>(L1) Ensure 'Turn off printing over HTTP' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.8</td> <td>(L2) Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.9</td> <td>(L2) Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.10</td> <td>(L2) Ensure 'Turn off the "Order Prints" picture task' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.11</td> <td>(L2) Ensure 'Turn off the "Publish to Web" task for files and folders' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.12</td> <td>(L2) Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.13</td> <td>(L2) Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.22.1.14</td> <td>(L2) Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.25.1</td> <td>(L2) Ensure 'Support device authentication using certificate' is set to 'Enabled: Automatic'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.26.1</td> <td>(L2) Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.27.1</td> <td>(L1) Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.27.2</td> <td>(L1) Ensure 'Do not display network selection UI' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.27.3</td> <td>(L1) Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.27.4</td> <td>(L1) Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.27.5</td> <td>(L1) Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.27.6</td> <td>(L1) Ensure 'Turn off picture password sign-in' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.27.7</td> <td>(L1) Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.33.6.1</td> <td>(L1) Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.33.6.2</td> <td>(L1) Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.33.6.3</td> <td>(BL) Ensure 'Allow standby states (S1-S3) when sleeping (on battery)' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.33.6.4</td> <td>(BL) Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.33.6.5</td> <td>(L1) Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.33.6.6</td> <td>(L1) Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.35.1</td> <td>(L1) Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.35.2</td> <td>(L1) Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.36.1</td> <td>(L1) Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.36.2</td> <td>(L1) Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.44.5.1</td> <td>(L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.44.11.1</td> <td>(L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.46.1</td> <td>(L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.49.1.1</td> <td>(L2) Ensure 'Enable Windows NTP Client' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.8.49.1.2</td> <td>(L2) Ensure 'Enable Windows NTP Server' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.4.1</td> <td>(L2) Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.6.1</td> <td>(L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.6.2</td> <td>(L2) Ensure 'Block launching Windows Store apps with Windows Runtime API access from hosted content.' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.8.1</td> <td>(L1) Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.8.2</td> <td>(L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.8.3</td> <td>(L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.10.1.1</td> <td>(L1) Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.1</td> <td>(BL) Ensure 'Allow access to BitLocker-protected fixed data drives from earlier versions of Windows' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.2</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.3</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.4</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.5</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.6</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.7</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.8</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.9</td> <td>(BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.10</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.11</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives: Use BitLocker software-based encryption when hardware encryption is not available' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.12</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.13</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for fixed data drives: Restrict crypto algorithms or cipher suites to the following:' is set to 'Enabled: 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.14</td> <td>(BL) Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.15</td> <td>(BL) Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.1.16</td> <td>(BL) Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.1</td> <td>(BL) Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.2</td> <td>(BL) Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.3</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.4</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.5</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.6</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.7</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.8</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.9</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.10</td> <td>(BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.11</td> <td>(BL) Ensure 'Configure minimum PIN length for startup' is set to 'Enabled: 7 or more characters'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.12</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for operating system drives' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.13</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for operating system drives: Use BitLocker software-based encryption when hardware encryption is not available' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.14</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for operating system drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.15</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for operating system drives: Restrict crypto algorithms or cipher suites to the following:' is set to 'Enabled: 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.16</td> <td>(BL) Ensure 'Configure use of passwords for operating system drives' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.17</td> <td>(BL) Ensure 'Require additional authentication at startup' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.18</td> <td>(BL) Ensure 'Require additional authentication at startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.19</td> <td>(BL) Ensure 'Require additional authentication at startup: Configure TPM startup:' is set to 'Enabled: Do not allow TPM'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.20</td> <td>(BL) Ensure 'Require additional authentication at startup: Configure TPM startup PIN:' is set to 'Enabled: Require startup PIN with TPM'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.21</td> <td>(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key:' is set to 'Enabled: Do not allow startup key with TPM'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.2.22</td> <td>(BL) Ensure 'Require additional authentication at startup: Configure TPM startup key and PIN:' is set to 'Enabled: Do not allow startup key and PIN with TPM'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.1</td> <td>(BL) Ensure 'Allow access to BitLocker-protected removable data drives from earlier versions of Windows' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.2</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.3</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.4</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Password' is set to 'Enabled: Do not allow 48-digit recovery password'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.5</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.6</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.7</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.8</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Backup recovery passwords and key packages'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.9</td> <td>(BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.10</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for removable data drives' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.11</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for removable data drives: Use BitLocker software-based encryption when hardware encryption is not available' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.12</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for removable data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.13</td> <td>(BL) Ensure 'Configure use of hardware-based encryption for removable data drives: Restrict crypto algorithms or cipher suites to the following:' is set to 'Enabled: 2.16.840.1.101.3.4.1.2;2.16.840.1.101.3.4.1.42'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.14</td> <td>(BL) Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.15</td> <td>(BL) Ensure 'Configure use of smart cards on removable data drives' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.16</td> <td>(BL) Ensure 'Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives' is set to 'Enabled: True'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.17</td> <td>(BL) Ensure 'Deny write access to removable drives not protected by BitLocker' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.3.18</td> <td>(BL) Ensure 'Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization' is set to 'Enabled: False'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.4</td> <td>(BL) Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled: XTS-AES 256-bit'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.11.5</td> <td>(BL) Ensure 'Disable new DMA devices when this computer is locked' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.12.1</td> <td>(L2) Ensure 'Allow Use of Camera' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.13.1</td> <td>(L1) Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.14.1</td> <td>(L1) Ensure 'Require pin for pairing' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.15.1</td> <td>(L1) Ensure 'Do not display the password reveal button' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.15.2</td> <td>(L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.16.1</td> <td>(L1) Ensure 'Allow Telemetry' is set to 'Enabled: 0 - Security [Enterprise Only]' or 'Enabled: 1 - Basic'</td> <td>Registry value not found.
+Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.16.2</td> <td>(L2) Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.16.3</td> <td>(L1) Ensure 'Disable pre-release features or settings' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.16.4</td> <td>(L1) Ensure 'Do not show feedback notifications' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.16.5</td> <td>(L1) Ensure 'Toggle user control over Insider builds' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.17.1</td> <td>(L1) Ensure 'Download Mode' is NOT set to 'Enabled: Internet'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.1.1</td> <td>(L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.1.2</td> <td>(L1) Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.2.1</td> <td>(L1) Ensure 'Security: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.2.2</td> <td>(L1) Ensure 'Security: Specify the maximum log file size (KB)' is set to 'Enabled: 196,608 or greater'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.3.1</td> <td>(L1) Ensure 'Setup: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.3.2</td> <td>(L1) Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.4.1</td> <td>(L1) Ensure 'System: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.26.4.2</td> <td>(L1) Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.30.2</td> <td>(L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.30.3</td> <td>(L1) Ensure 'Turn off heap termination on corruption' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.30.4</td> <td>(L1) Ensure 'Turn off shell protocol protected mode' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.35.1</td> <td>(L1) Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.39.2</td> <td>(L2) Ensure 'Turn off location' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.43.1</td> <td>(L2) Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.44.1</td> <td>(L1) Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.1</td> <td>(L2) Ensure 'Allow Address bar drop-down list suggestions' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.2</td> <td>(L2) Ensure 'Allow Adobe Flash' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.3</td> <td>(L2) Ensure 'Allow InPrivate Browsing' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.4</td> <td>(L1) Ensure 'Configure cookies' is set to 'Enabled: Block only 3rd-party cookies' or higher</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.5</td> <td>(L1) Ensure 'Configure Password Manager' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.6</td> <td>(L2) Ensure 'Configure Pop-up Blocker' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.7</td> <td>(L2) Ensure 'Configure search suggestions in Address bar' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.8</td> <td>(L1) Ensure 'Configure the Adobe Flash Click-to-Run setting' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.9</td> <td>(L2) Ensure 'Prevent access to the about:flags page in Microsoft Edge' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.45.10</td> <td>(L2) Ensure 'Prevent using Localhost IP address for WebRTC' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.52.1</td> <td>(L1) Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.57.1</td> <td>(L2) Ensure 'Turn off Push To Install service' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.2.2</td> <td>(L1) Ensure 'Do not allow passwords to be saved' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.2.1</td> <td>(L2) Ensure 'Allow users to connect remotely by using Remote Desktop Services' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.3.1</td> <td>(L2) Ensure 'Do not allow COM port redirection' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.3.2</td> <td>(L1) Ensure 'Do not allow drive redirection' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.3.3</td> <td>(L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.3.4</td> <td>(L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.9.1</td> <td>(L1) Ensure 'Always prompt for password upon connection' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.9.2</td> <td>(L1) Ensure 'Require secure RPC communication' is set to 'Enabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.9.3</td> <td>(L1) Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.10.1</td> <td>(L2) Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.10.2</td> <td>(L2) Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.11.1</td> <td>(L1) Ensure 'Do not delete temp folders upon exit' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.58.3.11.2</td> <td>(L1) Ensure 'Do not use temporary folders per session' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.59.1</td> <td>(L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.60.2</td> <td>(L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>18.9.60.3</td> <td>(L1) Ensure 'Allow Cortana' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.60.4</td> <td>(L1) Ensure 'Allow Cortana above lock screen' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.60.5</td> <td>(L1) Ensure 'Allow indexing of encrypted files' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.60.6</td> <td>(L1) Ensure 'Allow search and Cortana to use location' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.65.1</td> <td>(L2) Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.68.1</td> <td>(L2) Ensure 'Disable all apps from Windows Store' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.68.2</td> <td>(L1) Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.68.3</td> <td>(L1) Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.68.4</td> <td>(L2) Ensure 'Turn off the Store application' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.3.1</td> <td>(L1) Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.3.2</td> <td>(L2) Ensure 'Join Microsoft MAPS' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>18.9.76.7.1</td> <td>(L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.9.1</td> <td>(L2) Ensure 'Configure Watson events' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.10.1</td> <td>(L1) Ensure 'Scan removable drives' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.10.2</td> <td>(L1) Ensure 'Turn on e-mail scanning' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.13.1.1</td> <td>(L1) Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.13.1.2</td> <td>(L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is 'configured'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.13.3.1</td> <td>(L1) Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.76.14</td> <td>(L1) Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.77.1</td> <td>(NG) Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.77.2</td> <td>(NG) Ensure 'Allow data persistence for Windows Defender Application Guard' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.77.3</td> <td>(NG) Ensure 'Configure Windows Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.77.4</td> <td>(NG) Ensure 'Turn on Windows Defender Application Guard in Enterprise Mode' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.79.1.1</td> <td>(L1) Ensure 'Prevent users from modifying settings' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.80.1.1</td> <td>(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.80.2.1</td> <td>(L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.80.2.2</td> <td>(L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for files' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.80.2.3</td> <td>(L1) Ensure 'Prevent bypassing Windows Defender SmartScreen prompts for sites' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.82.1</td> <td>(L1) Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.84.1</td> <td>(L2) Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.84.2</td> <td>(L1) Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Disabled' but not 'Enabled: On'</td> <td>Registry key not found.
+Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.85.1</td> <td>(L1) Ensure 'Allow user control over installs' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.85.2</td> <td>(L1) Ensure 'Always install with elevated privileges' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.85.3</td> <td>(L2) Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.86.1</td> <td>(L1) Ensure 'Sign-in last interactive user automatically after a system-initiated restart' is set to 'Disabled'</td> <td>Registry value not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.95.1</td> <td>(L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.95.2</td> <td>(L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.97.1.1</td> <td>(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.97.1.2</td> <td>(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.97.1.3</td> <td>(L1) Ensure 'Disallow Digest authentication' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.97.2.1</td> <td>(L1) Ensure 'Allow Basic authentication' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.97.2.2</td> <td>(L2) Ensure 'Allow remote server management through WinRM' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.97.2.3</td> <td>(L1) Ensure 'Allow unencrypted traffic' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.97.2.4</td> <td>(L1) Ensure 'Disallow WinRM from storing RunAs credentials' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.98.1</td> <td>(L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.101.1.1</td> <td>(L1) Ensure 'Manage preview builds' is set to 'Enabled: Disable preview builds'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.101.1.2</td> <td>(L1) Ensure 'Select when Preview Builds and Feature Updates are received' is set to 'Enabled: Semi-Annual Channel, 180 or more days'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.101.1.3</td> <td>(L1) Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.101.2</td> <td>(L1) Ensure 'Configure Automatic Updates' is set to 'Enabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.101.3</td> <td>(L1) Ensure 'Configure Automatic Updates: Scheduled install day' is set to '0 - Every day'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>18.9.101.4</td> <td>(L1) Ensure 'No auto-restart with logged on users for scheduled automatic updates installations' is set to 'Disabled'</td> <td>Registry key not found.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section><h1 id="CIS-BenchmarksUser-Rights-Assignment"><span class="failed">User Rights Assignment</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>2.2.1</td> <td>(L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.2</td> <td>(L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'</td> <td>The following users have too many rights: Everyone, BUILTIN\Users, BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.3</td> <td>(L1) Ensure 'Act as part of the operating system' is set to 'No One'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.4</td> <td>(L1) Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.5</td> <td>(L1) Ensure 'Allow log on locally' is set to 'Administrators, Users'</td> <td>The following users have too many rights: DESKTOP-VSBMIM9\Guest, BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.6</td> <td>(L1) Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.7</td> <td>(L1) Ensure 'Back up files and directories' is set to 'Administrators'</td> <td>The following users have too many rights: BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.8</td> <td>(L1) Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.9</td> <td>(L1) Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.10</td> <td>(L1) Ensure 'Create a pagefile' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.11</td> <td>(L1) Ensure 'Create a token object' is set to 'No One'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.12</td> <td>(L1) Ensure 'Create global objects' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.13</td> <td>(L1) Ensure 'Create permanent shared objects' is set to 'No One'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.14</td> <td>(L1) Configure 'Create symbolic links'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.15</td> <td>(L1) Ensure 'Debug programs' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.16</td> <td>(L1) Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'</td> <td>The following users have too many rights: DESKTOP-VSBMIM9\Guest</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.17</td> <td>(L1) Ensure 'Deny log on as a batch job' to include 'Guests'</td> <td>The following users have don't have the rights: </td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.18</td> <td>(L1) Ensure 'Deny log on as a service' to include 'Guests'</td> <td>The following users have don't have the rights: </td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.19</td> <td>(L1) Ensure 'Deny log on locally' to include 'Guests'</td> <td>The following users have too many rights: DESKTOP-VSBMIM9\Guest</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.20</td> <td>(L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'</td> <td>The following users have don't have the rights: </td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.21</td> <td>(L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.22</td> <td>(L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.23</td> <td>(L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.24</td> <td>(L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.25</td> <td>(L1) Ensure 'Increase scheduling priority' is set to 'Administrators'</td> <td>The following users have too many rights: Window Manager\Window Manager Group</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.26</td> <td>(L1) Ensure 'Load and unload device drivers' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.27</td> <td>(L1) Ensure 'Lock pages in memory' is set to 'No One'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.28</td> <td>(L2) Ensure 'Log on as a batch job' is set to 'Administrators'</td> <td>The following users have too many rights: BUILTIN\Backup Operators, BUILTIN\Performance Log Users</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.29</td> <td>(L2) Ensure 'Log on as a service' is set to 'No One'</td> <td>The following users have too many rights: NT SERVICE\ALL SERVICES</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.30</td> <td>(L1) Ensure 'Manage auditing and security log' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.31</td> <td>(L1) Ensure 'Modify an object label' is set to 'No One'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.32</td> <td>(L1) Ensure 'Modify firmware environment values' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.33</td> <td>(L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.34</td> <td>(L1) Ensure 'Profile single process' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.35</td> <td>(L1) Ensure 'Profile system performance' is set to 'Administrators, NT SERVICE\WdiServiceHost'</td> <td>The following users have too many rights: NT SERVICE\WdiServiceHost</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.36</td> <td>(L1) Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>2.2.37</td> <td>(L1) Ensure 'Restore files and directories' is set to 'Administrators'</td> <td>The following users have too many rights: BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.38</td> <td>(L1) Ensure 'Shut down the system' is set to 'Administrators, Users'</td> <td>The following users have too many rights: BUILTIN\Backup Operators</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>2.2.39</td> <td>(L1) Ensure 'Take ownership of files or other objects' is set to 'Administrators'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section><h1 id="CIS-BenchmarksAccount-Policies"><span class="failed">Account Policies</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>1.1.1</td> <td>(L1) Ensure 'Enforce password history' is set to '24 or more password(s)'</td> <td>Currently set to: 0. Expected: greater than or equal 24</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>1.1.2</td> <td>(L1) Ensure 'Maximum password age' is set to '60 or fewer days, but not 0'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>1.1.3</td> <td>(L1) Ensure 'Minimum password age' is set to '1 or more day(s)'</td> <td>Currently set to: 0. Expected: greater than or equal 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>1.1.4</td> <td>(L1) Ensure 'Minimum password length' is set to '14 or more character(s)'</td> <td>Currently set to: 0. Expected: greater than or equal 14</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>1.1.5</td> <td>(L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled'</td> <td>Currently set to: 0. Expected: equals 1</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>1.1.6</td> <td>(L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>1.2.1</td> <td>(L1) Ensure 'Account lockout duration' is set to '15 or more minute(s)'</td> <td>Currently not set.</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>1.2.2</td> <td>(L1) Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0'</td> <td>Currently set to: 0. Expected: greater than 0</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>1.2.3</td> <td>(L1) Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'</td> <td>Currently not set.</td> <td><span class="auditstatus failed">False</span></td></tr></tbody></table></section><section><h1 id="CIS-BenchmarksWindows-Firewall-with-Advanced-Security"><span class="failed">Windows Firewall with Advanced Security</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>17.1.1</td> <td>(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.1</td> <td>(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.2</td> <td>(L1) Ensure 'Audit Computer Account Management' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.3</td> <td>(L1) Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.4</td> <td>(L1) Ensure 'Audit Security Group Management' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.5</td> <td>(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.3.1</td> <td>(L1) Ensure 'Audit PNP Activity' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.3.2</td> <td>(L1) Ensure 'Audit Process Creation' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.1</td> <td>(L1) Ensure 'Audit Account Lockout' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.2</td> <td>(L1) Ensure 'Audit Group Membership' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.3</td> <td>(L1) Ensure 'Audit Logoff' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.5.4</td> <td>(L1) Ensure 'Audit Logon' is set to 'Success and Failure'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.5.5</td> <td>(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.6</td> <td>(L1) Ensure 'Audit Special Logon' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.6.1</td> <td>(L1) Ensure 'Audit File Share' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.6.2</td> <td>(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.6.3</td> <td>(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.7.1</td> <td>(L1) Ensure 'Audit Audit Policy Change' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.7.2</td> <td>(L1) Ensure 'Audit Authentication Policy Change' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.7.3</td> <td>(L1) Ensure 'Audit Authorization Policy Change' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.8.1</td> <td>(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.9.1</td> <td>(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.9.2</td> <td>(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.9.3</td> <td>(L1) Ensure 'Audit Security State Change' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.9.4</td> <td>(L1) Ensure 'Audit Security System Extension' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.9.5</td> <td>(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section><section><h1 id="CIS-BenchmarksAdvanced-Audit-Policy-Configuration"><span class="failed">Advanced Audit Policy Configuration</span><a href="#" class="totop">^</a></h1><table class="audit-info"><tbody><tr><th>Id</th> <th>Task</th> <th>Message</th> <th>Audit</th></tr><tr><td>17.1.1</td> <td>(L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.1</td> <td>(L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.2</td> <td>(L1) Ensure 'Audit Computer Account Management' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.3</td> <td>(L1) Ensure 'Audit Other Account Management Events' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.4</td> <td>(L1) Ensure 'Audit Security Group Management' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.2.5</td> <td>(L1) Ensure 'Audit User Account Management' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.3.1</td> <td>(L1) Ensure 'Audit PNP Activity' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.3.2</td> <td>(L1) Ensure 'Audit Process Creation' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.1</td> <td>(L1) Ensure 'Audit Account Lockout' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.2</td> <td>(L1) Ensure 'Audit Group Membership' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.3</td> <td>(L1) Ensure 'Audit Logoff' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.5.4</td> <td>(L1) Ensure 'Audit Logon' is set to 'Success and Failure'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.5.5</td> <td>(L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.5.6</td> <td>(L1) Ensure 'Audit Special Logon' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.6.1</td> <td>(L1) Ensure 'Audit File Share' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.6.2</td> <td>(L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.6.3</td> <td>(L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.7.1</td> <td>(L1) Ensure 'Audit Audit Policy Change' is set to 'Success and Failure'</td> <td>Set to: Success</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.7.2</td> <td>(L1) Ensure 'Audit Authentication Policy Change' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.7.3</td> <td>(L1) Ensure 'Audit Authorization Policy Change' is set to 'Success'</td> <td>Set to: No Auditing
+Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.8.1</td> <td>(L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.9.1</td> <td>(L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.9.2</td> <td>(L1) Ensure 'Audit Other System Events' is set to 'Success and Failure'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.9.3</td> <td>(L1) Ensure 'Audit Security State Change' is set to 'Success'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr> <tr><td>17.9.4</td> <td>(L1) Ensure 'Audit Security System Extension' is set to 'Success and Failure'</td> <td>Set to: No Auditing</td> <td><span class="auditstatus failed">False</span></td></tr> <tr><td>17.9.5</td> <td>(L1) Ensure 'Audit System Integrity' is set to 'Success and Failure'</td> <td>Compliant</td> <td><span class="auditstatus passed">True</span></td></tr></tbody></table></section></section></div></body></html>